From 5f746c693e5b7dec77256dc30861e13824c0d0be Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 3 Aug 2023 21:09:02 +0000
Subject: [PATCH] deploy: fb90dc3f25a0ae10a25ced458bc2c6c0c0e79ab3

---
 404.html                                      | 12 ++--
 advanced.html                                 | 14 ++--
 architecture.html                             | 12 ++--
 assets/css/styles.5f767eab.css                |  1 +
 assets/css/styles.a02ebd50.css                |  1 -
 ...39c1f.7480a8d7.js => 05239c1f.a3e17475.js} |  2 +-
 ...61a3f.83558b2f.js => 10b61a3f.7e4c0bc1.js} |  2 +-
 ...f934f.e5170040.js => 121f934f.91e84147.js} |  2 +-
 ...ec51e.a397da08.js => 179ec51e.b2467c68.js} |  2 +-
 assets/js/1a4e3797.8b5db6d2.js                |  1 +
 assets/js/1a4e3797.ac674e56.js                |  2 -
 assets/js/1a4e3797.ac674e56.js.LICENSE.txt    |  1 -
 assets/js/1be78505.1ff28fb4.js                |  1 -
 assets/js/1be78505.3b555d49.js                |  1 +
 ...8dcfa.58f2734d.js => 1be8dcfa.11fa3a69.js} |  2 +-
 ...24268.e30a7637.js => 1e924268.a09c9809.js} |  2 +-
 ...5762c.c428effd.js => 2a65762c.ed54d27f.js} |  2 +-
 ...34ab4.74e122a4.js => 36f34ab4.ec0a83d4.js} |  2 +-
 assets/js/4129286c.c7656db7.js                |  1 +
 ...5f95b.ae25dff8.js => 4455f95b.ee2fe2ee.js} |  2 +-
 assets/js/4835.071674c5.js                    |  2 +
 ...CENSE.txt => 4835.071674c5.js.LICENSE.txt} |  0
 assets/js/4835.0e2e1b5f.js                    |  2 -
 assets/js/4972.8e6a9569.js                    |  1 +
 assets/js/4972.f742b7fa.js                    |  1 -
 ...67cf9.c1544208.js => 4a667cf9.04930927.js} |  2 +-
 ...e9e46.e0883a3b.js => 4aae9e46.0c746bfd.js} |  2 +-
 ...66d5e.22fbc156.js => 4e366d5e.056de5cd.js} |  2 +-
 ...a1ac4.117e086d.js => 4fea1ac4.d47656f7.js} |  2 +-
 assets/js/5525.ab860f59.js                    |  1 +
 ...35c99.f75bd393.js => 57d35c99.c0214124.js} |  2 +-
 assets/js/59b068d1.c8b83cea.js                |  1 -
 ...5030c.3b4edb92.js => 65c5030c.3f898541.js} |  2 +-
 ...7a7ce.e7fceb23.js => 6647a7ce.e3387f7e.js} |  2 +-
 assets/js/6780.6d95d5ed.js                    |  1 -
 ...7a857.3fe495f8.js => 6937a857.5af8e029.js} |  2 +-
 assets/js/6945.a46579e2.js                    |  1 -
 ...2c2e0.b6dfbfcb.js => 6ab2c2e0.8f404c7d.js} |  2 +-
 ...804bc.8c09418c.js => 6e9804bc.7a495e75.js} |  2 +-
 ...e2475.f309ce72.js => 7b8e2475.98fb2e0f.js} |  2 +-
 ...06859.12adea2c.js => 82406859.cedbc22f.js} |  2 +-
 ...1aa93.9b3a2dbc.js => 82f1aa93.4aaed9fe.js} |  2 +-
 ...82f1b.860f5c14.js => 83582f1b.2f8f86e0.js} |  2 +-
 ...7c7f9.6a136e28.js => 83a7c7f9.b757f668.js} |  2 +-
 assets/js/8443.6e4145c7.js                    |  2 +
 assets/js/8443.6e4145c7.js.LICENSE.txt        |  1 +
 assets/js/8894.b6a0e6e6.js                    |  1 -
 ...4f258.9de40414.js => 97c4f258.e445d54b.js} |  2 +-
 ...4882f.f4a7597c.js => 9ba4882f.704ab991.js} |  2 +-
 ...9b1cd.d12d005a.js => 9e39b1cd.95d59679.js} |  2 +-
 ...c2993.ca7f2ba3.js => a09c2993.971bae49.js} |  2 +-
 ...08106.fb788afe.js => a3308106.0710ae6c.js} |  2 +-
 ...88925.60530bae.js => ab388925.ab051ac0.js} |  2 +-
 ...5af2e.32df538e.js => ac75af2e.a9642fd4.js} |  2 +-
 ...02bd6.af715708.js => b1e02bd6.d146fce0.js} |  2 +-
 ...bdd38.a80460c2.js => b36bdd38.aa83f99e.js} |  2 +-
 ...a957c.e93ecacc.js => ba3a957c.85248db6.js} |  2 +-
 ...3f62d.37df4863.js => c513f62d.d5cad0d9.js} |  2 +-
 ...d1217.1936c38f.js => d8ed1217.8aca6f21.js} |  2 +-
 ...da264.2eb06be5.js => dfcda264.f8f0f919.js} |  2 +-
 ...35484.a3d0785c.js => e2835484.c2f65b38.js} |  2 +-
 ...a4c6d.abec3f2c.js => ea0a4c6d.e7ff26f5.js} |  2 +-
 ...f9153.1e3ca38c.js => ec6f9153.b58d4526.js} |  2 +-
 ...5e821.0d7cfd75.js => ee75e821.011ff8fa.js} |  2 +-
 ...efdc6.e2159cf3.js => f8eefdc6.f7244d92.js} |  2 +-
 ...9421f.791a1427.js => fc39421f.c11681ed.js} |  2 +-
 assets/js/main.09cd452e.js                    |  2 +
 ...CENSE.txt => main.09cd452e.js.LICENSE.txt} | 69 +++++++++++++++++++
 assets/js/main.f7fa7f61.js                    |  2 -
 assets/js/runtime~main.46c6e34e.js            |  1 -
 assets/js/runtime~main.7d956e78.js            |  1 +
 cli.html                                      | 12 ++--
 cli/agent.html                                | 12 ++--
 cli/certificate.html                          | 14 ++--
 cli/etcd-snapshot.html                        | 12 ++--
 cli/secrets-encrypt.html                      | 14 ++--
 cli/server.html                               | 12 ++--
 cli/token.html                                | 14 ++--
 cluster-access.html                           | 12 ++--
 datastore.html                                | 14 ++--
 datastore/backup-restore.html                 | 14 ++--
 datastore/cluster-loadbalancer.html           | 12 ++--
 datastore/ha-embedded.html                    | 12 ++--
 datastore/ha.html                             | 12 ++--
 faq.html                                      | 14 ++--
 helm.html                                     | 12 ++--
 index.html                                    | 12 ++--
 installation.html                             | 12 ++--
 installation/airgap.html                      | 14 ++--
 installation/configuration.html               | 14 ++--
 installation/kube-dashboard.html              | 12 ++--
 installation/network-options.html             | 14 ++--
 installation/packaged-components.html         | 14 ++--
 installation/private-registry.html            | 14 ++--
 installation/requirements.html                | 12 ++--
 installation/server-roles.html                | 12 ++--
 installation/uninstall.html                   | 14 ++--
 known-issues.html                             | 12 ++--
 kr/404.html                                   | 12 ++--
 kr/advanced.html                              | 14 ++--
 kr/architecture.html                          | 12 ++--
 kr/assets/css/styles.175028e6.css             |  1 +
 kr/assets/css/styles.676217c8.css             |  1 -
 ...e9047.d4787d48.js => 03ee9047.aff952f3.js} |  2 +-
 ...3d2fd.22244517.js => 0a63d2fd.eb1735e9.js} |  2 +-
 ...936f9.15005aa1.js => 105936f9.37f276c1.js} |  2 +-
 ...62c38.d94bed84.js => 12d62c38.2fa4c368.js} |  2 +-
 ...ce21a.4a7618ec.js => 18ace21a.b371d979.js} |  2 +-
 kr/assets/js/1a4e3797.8b5db6d2.js             |  1 +
 kr/assets/js/1a4e3797.ac674e56.js             |  2 -
 kr/assets/js/1a4e3797.ac674e56.js.LICENSE.txt |  1 -
 ...f17e6.13bd00c9.js => 1aef17e6.2bc538c2.js} |  2 +-
 kr/assets/js/1be78505.1ff28fb4.js             |  1 -
 kr/assets/js/1be78505.3b555d49.js             |  1 +
 ...d281a.39198784.js => 1fbd281a.3f613947.js} |  2 +-
 ...afa33.d01495be.js => 20aafa33.8d84a102.js} |  2 +-
 ...9a65d.d76730dd.js => 2f39a65d.5d04eb93.js} |  2 +-
 ...030e7.2c730129.js => 310030e7.3f076907.js} |  2 +-
 ...09f03.a1573095.js => 37e09f03.b03e665c.js} |  2 +-
 ...59917.05f6741f.js => 3f659917.63241f9b.js} |  2 +-
 kr/assets/js/4129286c.c7656db7.js             |  1 +
 ...456bb.3e64c383.js => 42e456bb.9e5ba74b.js} |  2 +-
 kr/assets/js/4835.071674c5.js                 |  2 +
 ...CENSE.txt => 4835.071674c5.js.LICENSE.txt} |  0
 kr/assets/js/4835.0e2e1b5f.js                 |  2 -
 kr/assets/js/4972.8e6a9569.js                 |  1 +
 kr/assets/js/4972.f742b7fa.js                 |  1 -
 ...3fc91.691aa6a0.js => 5133fc91.afe024ee.js} |  2 +-
 ...90acd.8b3dc4e1.js => 54490acd.ebbcc024.js} |  2 +-
 kr/assets/js/5525.ab860f59.js                 |  1 +
 kr/assets/js/59b068d1.c8b83cea.js             |  1 -
 ...981e6.39f5ffad.js => 609981e6.c92f915c.js} |  2 +-
 ...04aa0.eabed6be.js => 65004aa0.ff6a8d7d.js} |  2 +-
 ...09f9a.d0e9f1ae.js => 65309f9a.71bfa796.js} |  2 +-
 kr/assets/js/6780.6d95d5ed.js                 |  1 -
 kr/assets/js/6945.a46579e2.js                 |  1 -
 ...149bd.b8d6086f.js => 6a7149bd.5223e975.js} |  2 +-
 ...1830d.bfbf9d1d.js => 7461830d.b7f57052.js} |  2 +-
 ...bf1de.b51b38ad.js => 7f0bf1de.4389a498.js} |  2 +-
 ...ffba8.aad04d7e.js => 81cffba8.757deee8.js} |  2 +-
 ...e9842.8a7bdbf3.js => 832e9842.839cc8c8.js} |  2 +-
 kr/assets/js/8443.6e4145c7.js                 |  2 +
 kr/assets/js/8443.6e4145c7.js.LICENSE.txt     |  1 +
 kr/assets/js/8894.b6a0e6e6.js                 |  1 -
 ...a1646.5bf5c9d6.js => 944a1646.6aa2e1b0.js} |  2 +-
 ...5848d.f131b913.js => a0c5848d.117222b4.js} |  2 +-
 ...1d863.9fefa039.js => a101d863.9395dc73.js} |  2 +-
 ...c790a.d51277cf.js => a11c790a.d90c9ad2.js} |  2 +-
 ...e2930.de8a3220.js => a1ce2930.0775ba29.js} |  2 +-
 ...45c4f.99c544f0.js => b1445c4f.333614d2.js} |  2 +-
 ...c650f.a1bb84e6.js => b5fc650f.52ad13fc.js} |  2 +-
 ...afda8.e320d50b.js => b64afda8.a1d12b66.js} |  2 +-
 ...d0734.6924b504.js => b87d0734.d3f5fb44.js} |  2 +-
 ...d3598.8a51ba82.js => b97d3598.867e338e.js} |  2 +-
 ...fb1cb.2bc8b311.js => bccfb1cb.287a8596.js} |  2 +-
 ...00003.0ce801d6.js => c7700003.e8209e95.js} |  2 +-
 ...291c6.dc8a25d4.js => d05291c6.98c06e60.js} |  2 +-
 ...8bf88.93f1d6ad.js => d428bf88.d3a65457.js} |  2 +-
 ...9ae32.fc54c55c.js => d539ae32.a4ce899b.js} |  2 +-
 ...fba39.7e4cd2c7.js => dd0fba39.e12b3c6b.js} |  2 +-
 ...66366.c7f24ec2.js => e8666366.bfcf189e.js} |  2 +-
 ...581be.7a34a556.js => e92581be.7677e33c.js} |  2 +-
 ...00427.29fedce4.js => efc00427.7a172d74.js} |  2 +-
 ...c080a.cb4f7f2d.js => f5fc080a.3c9b7097.js} |  2 +-
 kr/assets/js/main.70ddbead.js                 |  2 +
 ...CENSE.txt => main.70ddbead.js.LICENSE.txt} | 69 +++++++++++++++++++
 kr/assets/js/main.ff71f3d6.js                 |  2 -
 kr/assets/js/runtime~main.3118886f.js         |  1 -
 kr/assets/js/runtime~main.4e834fa7.js         |  1 +
 kr/cli.html                                   | 12 ++--
 kr/cli/agent.html                             | 12 ++--
 kr/cli/certificate.html                       | 14 ++--
 kr/cli/etcd-snapshot.html                     | 12 ++--
 kr/cli/secrets-encrypt.html                   | 14 ++--
 kr/cli/server.html                            | 12 ++--
 kr/cli/token.html                             | 14 ++--
 kr/cluster-access.html                        | 12 ++--
 kr/datastore.html                             | 14 ++--
 kr/datastore/backup-restore.html              | 14 ++--
 kr/datastore/cluster-loadbalancer.html        | 12 ++--
 kr/datastore/ha-embedded.html                 | 14 ++--
 kr/datastore/ha.html                          | 12 ++--
 kr/faq.html                                   | 14 ++--
 kr/helm.html                                  | 12 ++--
 kr/index.html                                 | 12 ++--
 kr/installation.html                          | 12 ++--
 kr/installation/airgap.html                   | 14 ++--
 kr/installation/configuration.html            | 14 ++--
 kr/installation/kube-dashboard.html           | 12 ++--
 kr/installation/network-options.html          | 14 ++--
 kr/installation/packaged-components.html      | 14 ++--
 kr/installation/private-registry.html         | 14 ++--
 kr/installation/requirements.html             | 12 ++--
 kr/installation/server-roles.html             | 12 ++--
 kr/installation/uninstall.html                | 14 ++--
 kr/known-issues.html                          | 12 ++--
 kr/networking.html                            | 12 ++--
 kr/opensearch.xml                             | 11 ---
 kr/quick-start.html                           | 14 ++--
 kr/reference.html                             | 12 ++--
 kr/reference/env-variables.html               | 12 ++--
 kr/reference/resource-profiling.html          | 12 ++--
 kr/search-index.json                          |  1 +
 kr/search.html                                | 14 ++--
 kr/security.html                              | 12 ++--
 kr/security/hardening-guide.html              | 12 ++--
 kr/security/secrets-encryption.html           | 14 ++--
 kr/security/self-assessment.html              | 14 ++--
 kr/storage.html                               | 14 ++--
 kr/upgrades.html                              | 12 ++--
 kr/upgrades/automated.html                    | 12 ++--
 kr/upgrades/killall.html                      | 12 ++--
 kr/upgrades/manual.html                       | 12 ++--
 networking.html                               | 14 ++--
 opensearch.xml                                | 11 ---
 quick-start.html                              | 12 ++--
 reference.html                                | 12 ++--
 reference/env-variables.html                  | 12 ++--
 reference/resource-profiling.html             | 12 ++--
 search-index.json                             |  1 +
 search.html                                   | 14 ++--
 security.html                                 | 12 ++--
 security/hardening-guide.html                 | 12 ++--
 security/secrets-encryption.html              | 14 ++--
 security/self-assessment.html                 | 14 ++--
 storage.html                                  | 12 ++--
 upgrades.html                                 | 12 ++--
 upgrades/automated.html                       | 12 ++--
 upgrades/killall.html                         | 12 ++--
 upgrades/manual.html                          | 14 ++--
 zh/404.html                                   | 12 ++--
 zh/advanced.html                              | 14 ++--
 zh/architecture.html                          | 12 ++--
 zh/assets/css/styles.45a60ef8.css             |  1 +
 zh/assets/css/styles.dc1e3afe.css             |  1 -
 ...6c9e9.ee268660.js => 03f6c9e9.8afa5250.js} |  2 +-
 ...e4894.0e5966dc.js => 0a0e4894.d5e9d95c.js} |  2 +-
 ...43094.11832e2e.js => 0a743094.ab104edb.js} |  2 +-
 ...121d5.0d39bb93.js => 11f121d5.be91d4d2.js} |  2 +-
 ...55719.161d12d4.js => 13055719.12041d80.js} |  2 +-
 ...d8710.fbaee31c.js => 15ed8710.e4499216.js} |  2 +-
 zh/assets/js/1a4e3797.8b5db6d2.js             |  1 +
 zh/assets/js/1a4e3797.ac674e56.js             |  2 -
 zh/assets/js/1a4e3797.ac674e56.js.LICENSE.txt |  1 -
 ...3de50.39b2e9d3.js => 1ac3de50.694f6c59.js} |  2 +-
 zh/assets/js/1be78505.1ff28fb4.js             |  1 -
 zh/assets/js/1be78505.3b555d49.js             |  1 +
 ...c7e37.860a7f31.js => 1f6c7e37.f84efbf9.js} |  2 +-
 ...2f480.4a048f47.js => 2af2f480.7d5e062c.js} |  2 +-
 ...5ef92.ba420146.js => 2d65ef92.d41ae572.js} |  2 +-
 ...f05fd.b120c92f.js => 330f05fd.3465fb42.js} |  2 +-
 ...95e47.809a6150.js => 34c95e47.8f7e4168.js} |  2 +-
 ...1cc1a.24849c10.js => 3551cc1a.12bdce1a.js} |  2 +-
 ...d395b.eb6852e5.js => 357d395b.d7434d40.js} |  2 +-
 ...fe6f0.7d77db40.js => 37dfe6f0.07695ebc.js} |  2 +-
 zh/assets/js/4129286c.c7656db7.js             |  1 +
 ...d080e.3f897055.js => 46fd080e.5d4341a8.js} |  2 +-
 zh/assets/js/4835.071674c5.js                 |  2 +
 ...CENSE.txt => 4835.071674c5.js.LICENSE.txt} |  0
 zh/assets/js/4835.0e2e1b5f.js                 |  2 -
 ...f60c5.f0dfd156.js => 492f60c5.4b215836.js} |  2 +-
 zh/assets/js/4972.8e6a9569.js                 |  1 +
 zh/assets/js/4972.f742b7fa.js                 |  1 -
 ...3747f.17dfd6ee.js => 4a93747f.ee1f23db.js} |  2 +-
 ...15220.0f726c7e.js => 50715220.56fc3345.js} |  2 +-
 ...63943.c2232d18.js => 53163943.f91492b1.js} |  2 +-
 zh/assets/js/5525.ab860f59.js                 |  1 +
 ...7b32d.4b413646.js => 5977b32d.c472809c.js} |  2 +-
 zh/assets/js/59b068d1.acb0a1a4.js             |  1 -
 ...05660.3790999c.js => 62005660.69eb2a79.js} |  2 +-
 zh/assets/js/6780.6d95d5ed.js                 |  1 -
 zh/assets/js/6945.a46579e2.js                 |  1 -
 ...d906e.ed6869b3.js => 6b4d906e.ccdea4df.js} |  2 +-
 ...200b0.1901ff4d.js => 6d8200b0.e1cf527a.js} |  2 +-
 ...960fe.576f8dcd.js => 6f7960fe.cbd199ce.js} |  2 +-
 ...cf357.dbfa5f10.js => 711cf357.d9b48a55.js} |  2 +-
 ...a162b.1d5b99e1.js => 772a162b.bf0dab18.js} |  2 +-
 ...aab5d.b28fe083.js => 7d5aab5d.71b407b7.js} |  2 +-
 ...e87f8.d34d0249.js => 811e87f8.3ca75874.js} |  2 +-
 zh/assets/js/8443.6e4145c7.js                 |  2 +
 zh/assets/js/8443.6e4145c7.js.LICENSE.txt     |  1 +
 zh/assets/js/8894.b6a0e6e6.js                 |  1 -
 ...8d6ea.50269464.js => 93e8d6ea.e1761271.js} |  2 +-
 ...91ddb.68feaacc.js => 97691ddb.1e809fce.js} |  2 +-
 ...1bff4.e3a22950.js => 9c71bff4.42abfe4f.js} |  2 +-
 ...0942e.b8fd0822.js => 9df0942e.9281cd3f.js} |  2 +-
 ...c58b8.1e1f9bd0.js => a3ec58b8.335a21cc.js} |  2 +-
 ...690a0.d0c0e6b8.js => ac5690a0.8ab45095.js} |  2 +-
 ...d5509.69b69acd.js => b2fd5509.964c0b6a.js} |  2 +-
 ...fadc6.06131245.js => beafadc6.df522882.js} |  2 +-
 ...62276.71994018.js => dcd62276.703117e1.js} |  2 +-
 ...44cc7.4e4a427b.js => de044cc7.46859cc3.js} |  2 +-
 ...dd15e.0bda0a7d.js => df5dd15e.052c2090.js} |  2 +-
 ...87277.95b5ddc3.js => e1787277.a5473e1b.js} |  2 +-
 ...553dc.7e1e3b50.js => e65553dc.4c1627c8.js} |  2 +-
 ...7c5c1.f588bb9a.js => f367c5c1.672c9630.js} |  2 +-
 zh/assets/js/main.a0e9ca28.js                 |  2 +
 ...CENSE.txt => main.a0e9ca28.js.LICENSE.txt} | 69 +++++++++++++++++++
 zh/assets/js/main.cd1c03e6.js                 |  2 -
 zh/assets/js/runtime~main.354551a6.js         |  1 -
 zh/assets/js/runtime~main.98237139.js         |  1 +
 zh/cli.html                                   | 12 ++--
 zh/cli/agent.html                             | 12 ++--
 zh/cli/certificate.html                       | 14 ++--
 zh/cli/etcd-snapshot.html                     | 12 ++--
 zh/cli/secrets-encrypt.html                   | 14 ++--
 zh/cli/server.html                            | 12 ++--
 zh/cli/token.html                             | 14 ++--
 zh/cluster-access.html                        | 12 ++--
 zh/datastore.html                             | 14 ++--
 zh/datastore/backup-restore.html              | 14 ++--
 zh/datastore/cluster-loadbalancer.html        | 12 ++--
 zh/datastore/ha-embedded.html                 | 12 ++--
 zh/datastore/ha.html                          | 12 ++--
 zh/faq.html                                   | 14 ++--
 zh/helm.html                                  | 12 ++--
 zh/index.html                                 | 12 ++--
 zh/installation.html                          | 12 ++--
 zh/installation/airgap.html                   | 14 ++--
 zh/installation/configuration.html            | 14 ++--
 zh/installation/kube-dashboard.html           | 12 ++--
 zh/installation/network-options.html          | 14 ++--
 zh/installation/packaged-components.html      | 14 ++--
 zh/installation/private-registry.html         | 14 ++--
 zh/installation/requirements.html             | 12 ++--
 zh/installation/server-roles.html             | 12 ++--
 zh/installation/uninstall.html                | 14 ++--
 zh/known-issues.html                          | 12 ++--
 zh/networking.html                            | 14 ++--
 zh/opensearch.xml                             | 11 ---
 zh/quick-start.html                           | 12 ++--
 zh/reference.html                             | 12 ++--
 zh/reference/env-variables.html               | 12 ++--
 zh/reference/resource-profiling.html          | 12 ++--
 zh/search-index.json                          |  1 +
 zh/search.html                                | 14 ++--
 zh/security.html                              | 12 ++--
 zh/security/hardening-guide.html              | 12 ++--
 zh/security/secrets-encryption.html           | 14 ++--
 zh/security/self-assessment.html              | 14 ++--
 zh/storage.html                               | 12 ++--
 zh/upgrades.html                              | 12 ++--
 zh/upgrades/automated.html                    | 12 ++--
 zh/upgrades/killall.html                      | 12 ++--
 zh/upgrades/manual.html                       | 14 ++--
 345 files changed, 1246 insertions(+), 1072 deletions(-)
 create mode 100644 assets/css/styles.5f767eab.css
 delete mode 100644 assets/css/styles.a02ebd50.css
 rename assets/js/{05239c1f.7480a8d7.js => 05239c1f.a3e17475.js} (99%)
 rename assets/js/{10b61a3f.83558b2f.js => 10b61a3f.7e4c0bc1.js} (99%)
 rename assets/js/{121f934f.e5170040.js => 121f934f.91e84147.js} (99%)
 rename assets/js/{179ec51e.a397da08.js => 179ec51e.b2467c68.js} (99%)
 create mode 100644 assets/js/1a4e3797.8b5db6d2.js
 delete mode 100644 assets/js/1a4e3797.ac674e56.js
 delete mode 100644 assets/js/1a4e3797.ac674e56.js.LICENSE.txt
 delete mode 100644 assets/js/1be78505.1ff28fb4.js
 create mode 100644 assets/js/1be78505.3b555d49.js
 rename assets/js/{1be8dcfa.58f2734d.js => 1be8dcfa.11fa3a69.js} (99%)
 rename assets/js/{1e924268.e30a7637.js => 1e924268.a09c9809.js} (97%)
 rename assets/js/{2a65762c.c428effd.js => 2a65762c.ed54d27f.js} (99%)
 rename assets/js/{36f34ab4.74e122a4.js => 36f34ab4.ec0a83d4.js} (99%)
 create mode 100644 assets/js/4129286c.c7656db7.js
 rename assets/js/{4455f95b.ae25dff8.js => 4455f95b.ee2fe2ee.js} (99%)
 create mode 100644 assets/js/4835.071674c5.js
 rename assets/js/{4835.0e2e1b5f.js.LICENSE.txt => 4835.071674c5.js.LICENSE.txt} (100%)
 delete mode 100644 assets/js/4835.0e2e1b5f.js
 create mode 100644 assets/js/4972.8e6a9569.js
 delete mode 100644 assets/js/4972.f742b7fa.js
 rename assets/js/{4a667cf9.c1544208.js => 4a667cf9.04930927.js} (99%)
 rename assets/js/{4aae9e46.e0883a3b.js => 4aae9e46.0c746bfd.js} (96%)
 rename assets/js/{4e366d5e.22fbc156.js => 4e366d5e.056de5cd.js} (98%)
 rename assets/js/{4fea1ac4.117e086d.js => 4fea1ac4.d47656f7.js} (98%)
 create mode 100644 assets/js/5525.ab860f59.js
 rename assets/js/{57d35c99.f75bd393.js => 57d35c99.c0214124.js} (97%)
 delete mode 100644 assets/js/59b068d1.c8b83cea.js
 rename assets/js/{65c5030c.3b4edb92.js => 65c5030c.3f898541.js} (98%)
 rename assets/js/{6647a7ce.e7fceb23.js => 6647a7ce.e3387f7e.js} (99%)
 delete mode 100644 assets/js/6780.6d95d5ed.js
 rename assets/js/{6937a857.3fe495f8.js => 6937a857.5af8e029.js} (98%)
 delete mode 100644 assets/js/6945.a46579e2.js
 rename assets/js/{6ab2c2e0.b6dfbfcb.js => 6ab2c2e0.8f404c7d.js} (98%)
 rename assets/js/{6e9804bc.8c09418c.js => 6e9804bc.7a495e75.js} (99%)
 rename assets/js/{7b8e2475.f309ce72.js => 7b8e2475.98fb2e0f.js} (98%)
 rename assets/js/{82406859.12adea2c.js => 82406859.cedbc22f.js} (99%)
 rename assets/js/{82f1aa93.9b3a2dbc.js => 82f1aa93.4aaed9fe.js} (99%)
 rename assets/js/{83582f1b.860f5c14.js => 83582f1b.2f8f86e0.js} (98%)
 rename assets/js/{83a7c7f9.6a136e28.js => 83a7c7f9.b757f668.js} (99%)
 create mode 100644 assets/js/8443.6e4145c7.js
 create mode 100644 assets/js/8443.6e4145c7.js.LICENSE.txt
 delete mode 100644 assets/js/8894.b6a0e6e6.js
 rename assets/js/{97c4f258.9de40414.js => 97c4f258.e445d54b.js} (99%)
 rename assets/js/{9ba4882f.f4a7597c.js => 9ba4882f.704ab991.js} (98%)
 rename assets/js/{9e39b1cd.d12d005a.js => 9e39b1cd.95d59679.js} (99%)
 rename assets/js/{a09c2993.ca7f2ba3.js => a09c2993.971bae49.js} (98%)
 rename assets/js/{a3308106.fb788afe.js => a3308106.0710ae6c.js} (98%)
 rename assets/js/{ab388925.60530bae.js => ab388925.ab051ac0.js} (99%)
 rename assets/js/{ac75af2e.32df538e.js => ac75af2e.a9642fd4.js} (99%)
 rename assets/js/{b1e02bd6.af715708.js => b1e02bd6.d146fce0.js} (98%)
 rename assets/js/{b36bdd38.a80460c2.js => b36bdd38.aa83f99e.js} (98%)
 rename assets/js/{ba3a957c.e93ecacc.js => ba3a957c.85248db6.js} (98%)
 rename assets/js/{c513f62d.37df4863.js => c513f62d.d5cad0d9.js} (97%)
 rename assets/js/{d8ed1217.1936c38f.js => d8ed1217.8aca6f21.js} (98%)
 rename assets/js/{dfcda264.2eb06be5.js => dfcda264.f8f0f919.js} (99%)
 rename assets/js/{e2835484.a3d0785c.js => e2835484.c2f65b38.js} (98%)
 rename assets/js/{ea0a4c6d.abec3f2c.js => ea0a4c6d.e7ff26f5.js} (99%)
 rename assets/js/{ec6f9153.1e3ca38c.js => ec6f9153.b58d4526.js} (99%)
 rename assets/js/{ee75e821.0d7cfd75.js => ee75e821.011ff8fa.js} (99%)
 rename assets/js/{f8eefdc6.e2159cf3.js => f8eefdc6.f7244d92.js} (99%)
 rename assets/js/{fc39421f.791a1427.js => fc39421f.c11681ed.js} (99%)
 create mode 100644 assets/js/main.09cd452e.js
 rename assets/js/{main.f7fa7f61.js.LICENSE.txt => main.09cd452e.js.LICENSE.txt} (56%)
 delete mode 100644 assets/js/main.f7fa7f61.js
 delete mode 100644 assets/js/runtime~main.46c6e34e.js
 create mode 100644 assets/js/runtime~main.7d956e78.js
 create mode 100644 kr/assets/css/styles.175028e6.css
 delete mode 100644 kr/assets/css/styles.676217c8.css
 rename kr/assets/js/{03ee9047.d4787d48.js => 03ee9047.aff952f3.js} (99%)
 rename kr/assets/js/{0a63d2fd.22244517.js => 0a63d2fd.eb1735e9.js} (98%)
 rename kr/assets/js/{105936f9.15005aa1.js => 105936f9.37f276c1.js} (99%)
 rename kr/assets/js/{12d62c38.d94bed84.js => 12d62c38.2fa4c368.js} (98%)
 rename kr/assets/js/{18ace21a.4a7618ec.js => 18ace21a.b371d979.js} (99%)
 create mode 100644 kr/assets/js/1a4e3797.8b5db6d2.js
 delete mode 100644 kr/assets/js/1a4e3797.ac674e56.js
 delete mode 100644 kr/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
 rename kr/assets/js/{1aef17e6.13bd00c9.js => 1aef17e6.2bc538c2.js} (98%)
 delete mode 100644 kr/assets/js/1be78505.1ff28fb4.js
 create mode 100644 kr/assets/js/1be78505.3b555d49.js
 rename kr/assets/js/{1fbd281a.39198784.js => 1fbd281a.3f613947.js} (99%)
 rename kr/assets/js/{20aafa33.d01495be.js => 20aafa33.8d84a102.js} (99%)
 rename kr/assets/js/{2f39a65d.d76730dd.js => 2f39a65d.5d04eb93.js} (99%)
 rename kr/assets/js/{310030e7.2c730129.js => 310030e7.3f076907.js} (99%)
 rename kr/assets/js/{37e09f03.a1573095.js => 37e09f03.b03e665c.js} (98%)
 rename kr/assets/js/{3f659917.05f6741f.js => 3f659917.63241f9b.js} (99%)
 create mode 100644 kr/assets/js/4129286c.c7656db7.js
 rename kr/assets/js/{42e456bb.3e64c383.js => 42e456bb.9e5ba74b.js} (99%)
 create mode 100644 kr/assets/js/4835.071674c5.js
 rename kr/assets/js/{4835.0e2e1b5f.js.LICENSE.txt => 4835.071674c5.js.LICENSE.txt} (100%)
 delete mode 100644 kr/assets/js/4835.0e2e1b5f.js
 create mode 100644 kr/assets/js/4972.8e6a9569.js
 delete mode 100644 kr/assets/js/4972.f742b7fa.js
 rename kr/assets/js/{5133fc91.691aa6a0.js => 5133fc91.afe024ee.js} (99%)
 rename kr/assets/js/{54490acd.8b3dc4e1.js => 54490acd.ebbcc024.js} (99%)
 create mode 100644 kr/assets/js/5525.ab860f59.js
 delete mode 100644 kr/assets/js/59b068d1.c8b83cea.js
 rename kr/assets/js/{609981e6.39f5ffad.js => 609981e6.c92f915c.js} (99%)
 rename kr/assets/js/{65004aa0.eabed6be.js => 65004aa0.ff6a8d7d.js} (96%)
 rename kr/assets/js/{65309f9a.d0e9f1ae.js => 65309f9a.71bfa796.js} (97%)
 delete mode 100644 kr/assets/js/6780.6d95d5ed.js
 delete mode 100644 kr/assets/js/6945.a46579e2.js
 rename kr/assets/js/{6a7149bd.b8d6086f.js => 6a7149bd.5223e975.js} (99%)
 rename kr/assets/js/{7461830d.bfbf9d1d.js => 7461830d.b7f57052.js} (99%)
 rename kr/assets/js/{7f0bf1de.b51b38ad.js => 7f0bf1de.4389a498.js} (99%)
 rename kr/assets/js/{81cffba8.aad04d7e.js => 81cffba8.757deee8.js} (98%)
 rename kr/assets/js/{832e9842.8a7bdbf3.js => 832e9842.839cc8c8.js} (99%)
 create mode 100644 kr/assets/js/8443.6e4145c7.js
 create mode 100644 kr/assets/js/8443.6e4145c7.js.LICENSE.txt
 delete mode 100644 kr/assets/js/8894.b6a0e6e6.js
 rename kr/assets/js/{944a1646.5bf5c9d6.js => 944a1646.6aa2e1b0.js} (99%)
 rename kr/assets/js/{a0c5848d.f131b913.js => a0c5848d.117222b4.js} (97%)
 rename kr/assets/js/{a101d863.9fefa039.js => a101d863.9395dc73.js} (99%)
 rename kr/assets/js/{a11c790a.d51277cf.js => a11c790a.d90c9ad2.js} (99%)
 rename kr/assets/js/{a1ce2930.de8a3220.js => a1ce2930.0775ba29.js} (99%)
 rename kr/assets/js/{b1445c4f.99c544f0.js => b1445c4f.333614d2.js} (99%)
 rename kr/assets/js/{b5fc650f.a1bb84e6.js => b5fc650f.52ad13fc.js} (99%)
 rename kr/assets/js/{b64afda8.e320d50b.js => b64afda8.a1d12b66.js} (99%)
 rename kr/assets/js/{b87d0734.6924b504.js => b87d0734.d3f5fb44.js} (99%)
 rename kr/assets/js/{b97d3598.8a51ba82.js => b97d3598.867e338e.js} (99%)
 rename kr/assets/js/{bccfb1cb.2bc8b311.js => bccfb1cb.287a8596.js} (98%)
 rename kr/assets/js/{c7700003.0ce801d6.js => c7700003.e8209e95.js} (99%)
 rename kr/assets/js/{d05291c6.dc8a25d4.js => d05291c6.98c06e60.js} (99%)
 rename kr/assets/js/{d428bf88.93f1d6ad.js => d428bf88.d3a65457.js} (96%)
 rename kr/assets/js/{d539ae32.fc54c55c.js => d539ae32.a4ce899b.js} (99%)
 rename kr/assets/js/{dd0fba39.7e4cd2c7.js => dd0fba39.e12b3c6b.js} (99%)
 rename kr/assets/js/{e8666366.c7f24ec2.js => e8666366.bfcf189e.js} (97%)
 rename kr/assets/js/{e92581be.7a34a556.js => e92581be.7677e33c.js} (99%)
 rename kr/assets/js/{efc00427.29fedce4.js => efc00427.7a172d74.js} (98%)
 rename kr/assets/js/{f5fc080a.cb4f7f2d.js => f5fc080a.3c9b7097.js} (98%)
 create mode 100644 kr/assets/js/main.70ddbead.js
 rename kr/assets/js/{main.ff71f3d6.js.LICENSE.txt => main.70ddbead.js.LICENSE.txt} (56%)
 delete mode 100644 kr/assets/js/main.ff71f3d6.js
 delete mode 100644 kr/assets/js/runtime~main.3118886f.js
 create mode 100644 kr/assets/js/runtime~main.4e834fa7.js
 delete mode 100644 kr/opensearch.xml
 create mode 100644 kr/search-index.json
 delete mode 100644 opensearch.xml
 create mode 100644 search-index.json
 create mode 100644 zh/assets/css/styles.45a60ef8.css
 delete mode 100644 zh/assets/css/styles.dc1e3afe.css
 rename zh/assets/js/{03f6c9e9.ee268660.js => 03f6c9e9.8afa5250.js} (98%)
 rename zh/assets/js/{0a0e4894.0e5966dc.js => 0a0e4894.d5e9d95c.js} (98%)
 rename zh/assets/js/{0a743094.11832e2e.js => 0a743094.ab104edb.js} (99%)
 rename zh/assets/js/{11f121d5.0d39bb93.js => 11f121d5.be91d4d2.js} (99%)
 rename zh/assets/js/{13055719.161d12d4.js => 13055719.12041d80.js} (98%)
 rename zh/assets/js/{15ed8710.fbaee31c.js => 15ed8710.e4499216.js} (99%)
 create mode 100644 zh/assets/js/1a4e3797.8b5db6d2.js
 delete mode 100644 zh/assets/js/1a4e3797.ac674e56.js
 delete mode 100644 zh/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
 rename zh/assets/js/{1ac3de50.39b2e9d3.js => 1ac3de50.694f6c59.js} (99%)
 delete mode 100644 zh/assets/js/1be78505.1ff28fb4.js
 create mode 100644 zh/assets/js/1be78505.3b555d49.js
 rename zh/assets/js/{1f6c7e37.860a7f31.js => 1f6c7e37.f84efbf9.js} (99%)
 rename zh/assets/js/{2af2f480.4a048f47.js => 2af2f480.7d5e062c.js} (97%)
 rename zh/assets/js/{2d65ef92.ba420146.js => 2d65ef92.d41ae572.js} (99%)
 rename zh/assets/js/{330f05fd.b120c92f.js => 330f05fd.3465fb42.js} (96%)
 rename zh/assets/js/{34c95e47.809a6150.js => 34c95e47.8f7e4168.js} (99%)
 rename zh/assets/js/{3551cc1a.24849c10.js => 3551cc1a.12bdce1a.js} (99%)
 rename zh/assets/js/{357d395b.eb6852e5.js => 357d395b.d7434d40.js} (98%)
 rename zh/assets/js/{37dfe6f0.7d77db40.js => 37dfe6f0.07695ebc.js} (99%)
 create mode 100644 zh/assets/js/4129286c.c7656db7.js
 rename zh/assets/js/{46fd080e.3f897055.js => 46fd080e.5d4341a8.js} (99%)
 create mode 100644 zh/assets/js/4835.071674c5.js
 rename zh/assets/js/{4835.0e2e1b5f.js.LICENSE.txt => 4835.071674c5.js.LICENSE.txt} (100%)
 delete mode 100644 zh/assets/js/4835.0e2e1b5f.js
 rename zh/assets/js/{492f60c5.f0dfd156.js => 492f60c5.4b215836.js} (97%)
 create mode 100644 zh/assets/js/4972.8e6a9569.js
 delete mode 100644 zh/assets/js/4972.f742b7fa.js
 rename zh/assets/js/{4a93747f.17dfd6ee.js => 4a93747f.ee1f23db.js} (99%)
 rename zh/assets/js/{50715220.0f726c7e.js => 50715220.56fc3345.js} (98%)
 rename zh/assets/js/{53163943.c2232d18.js => 53163943.f91492b1.js} (99%)
 create mode 100644 zh/assets/js/5525.ab860f59.js
 rename zh/assets/js/{5977b32d.4b413646.js => 5977b32d.c472809c.js} (96%)
 delete mode 100644 zh/assets/js/59b068d1.acb0a1a4.js
 rename zh/assets/js/{62005660.3790999c.js => 62005660.69eb2a79.js} (99%)
 delete mode 100644 zh/assets/js/6780.6d95d5ed.js
 delete mode 100644 zh/assets/js/6945.a46579e2.js
 rename zh/assets/js/{6b4d906e.ed6869b3.js => 6b4d906e.ccdea4df.js} (99%)
 rename zh/assets/js/{6d8200b0.1901ff4d.js => 6d8200b0.e1cf527a.js} (98%)
 rename zh/assets/js/{6f7960fe.576f8dcd.js => 6f7960fe.cbd199ce.js} (99%)
 rename zh/assets/js/{711cf357.dbfa5f10.js => 711cf357.d9b48a55.js} (98%)
 rename zh/assets/js/{772a162b.1d5b99e1.js => 772a162b.bf0dab18.js} (99%)
 rename zh/assets/js/{7d5aab5d.b28fe083.js => 7d5aab5d.71b407b7.js} (99%)
 rename zh/assets/js/{811e87f8.d34d0249.js => 811e87f8.3ca75874.js} (99%)
 create mode 100644 zh/assets/js/8443.6e4145c7.js
 create mode 100644 zh/assets/js/8443.6e4145c7.js.LICENSE.txt
 delete mode 100644 zh/assets/js/8894.b6a0e6e6.js
 rename zh/assets/js/{93e8d6ea.50269464.js => 93e8d6ea.e1761271.js} (97%)
 rename zh/assets/js/{97691ddb.68feaacc.js => 97691ddb.1e809fce.js} (98%)
 rename zh/assets/js/{9c71bff4.e3a22950.js => 9c71bff4.42abfe4f.js} (99%)
 rename zh/assets/js/{9df0942e.b8fd0822.js => 9df0942e.9281cd3f.js} (99%)
 rename zh/assets/js/{a3ec58b8.1e1f9bd0.js => a3ec58b8.335a21cc.js} (98%)
 rename zh/assets/js/{ac5690a0.d0c0e6b8.js => ac5690a0.8ab45095.js} (99%)
 rename zh/assets/js/{b2fd5509.69b69acd.js => b2fd5509.964c0b6a.js} (98%)
 rename zh/assets/js/{beafadc6.06131245.js => beafadc6.df522882.js} (99%)
 rename zh/assets/js/{dcd62276.71994018.js => dcd62276.703117e1.js} (99%)
 rename zh/assets/js/{de044cc7.4e4a427b.js => de044cc7.46859cc3.js} (98%)
 rename zh/assets/js/{df5dd15e.0bda0a7d.js => df5dd15e.052c2090.js} (99%)
 rename zh/assets/js/{e1787277.95b5ddc3.js => e1787277.a5473e1b.js} (99%)
 rename zh/assets/js/{e65553dc.7e1e3b50.js => e65553dc.4c1627c8.js} (99%)
 rename zh/assets/js/{f367c5c1.f588bb9a.js => f367c5c1.672c9630.js} (99%)
 create mode 100644 zh/assets/js/main.a0e9ca28.js
 rename zh/assets/js/{main.cd1c03e6.js.LICENSE.txt => main.a0e9ca28.js.LICENSE.txt} (56%)
 delete mode 100644 zh/assets/js/main.cd1c03e6.js
 delete mode 100644 zh/assets/js/runtime~main.354551a6.js
 create mode 100644 zh/assets/js/runtime~main.98237139.js
 delete mode 100644 zh/opensearch.xml
 create mode 100644 zh/search-index.json

diff --git a/404.html b/404.html
index 2025eb916..93813be12 100644
--- a/404.html
+++ b/404.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Page Not Found | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/404.html"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="og:title" content="Page Not Found | K3s"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/404.html"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/404.html" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/404.html" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Page Not Found | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/404.html"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="og:title" content="Page Not Found | K3s"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/404.html"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/404.html" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/404.html" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/404" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><main class="container margin-vert--xl"><div class="row"><div class="col col--6 col--offset-3"><h1 class="hero__title">Page Not Found</h1><p>We could not find what you were looking for.</p><p>Please contact the owner of the site that linked you to the original URL and let them know their link is broken.</p></div></div></main></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/404" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><main class="container margin-vert--xl"><div class="row"><div class="col col--6 col--offset-3"><h1 class="hero__title">Page Not Found</h1><p>We could not find what you were looking for.</p><p>Please contact the owner of the site that linked you to the original URL and let them know their link is broken.</p></div></div></main></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/advanced.html b/advanced.html
index 0c9f5bcb8..8be6074c1 100644
--- a/advanced.html
+++ b/advanced.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Advanced Options / Configuration | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/advanced"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Advanced Options / Configuration | K3s"><meta data-rh="true" name="description" content="This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use."><meta data-rh="true" property="og:description" content="This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/advanced"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/advanced" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/advanced" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Advanced Options / Configuration | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/advanced"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Advanced Options / Configuration | K3s"><meta data-rh="true" name="description" content="This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use."><meta data-rh="true" property="og:description" content="This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/advanced"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/advanced" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/advanced" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Advanced Options / Configuration</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Advanced Options / Configuration</h1></header><p>This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-management">Certificate Management<a href="#certificate-management" class="hash-link" aria-label="Direct link to Certificate Management" title="Direct link to Certificate Management">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-authority-certificates">Certificate Authority Certificates<a href="#certificate-authority-certificates" class="hash-link" aria-label="Direct link to Certificate Authority Certificates" title="Direct link to Certificate Authority Certificates">​</a></h3><p>K3s generates self-signed Certificate Authority (CA) Certificates during startup of the first server node. These CA certificates are valid for 10 years, and are not automatically renewed.</p><p>For information on using custom CA certificates, or renewing the self-signed CA certificates, see the <a href="/cli/certificate#certificate-authority-ca-certificates"><code>k3s certificate rotate-ca</code> command documentation</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="client-and-server-certificates">Client and Server certificates<a href="#client-and-server-certificates" class="hash-link" aria-label="Direct link to Client and Server certificates" title="Direct link to Client and Server certificates">​</a></h3><p>K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.</p><p>For information on manually rotating client and server certificates, see the <a href="/cli/certificate#client-and-server-certificates"><code>k3s certificate rotate</code> command documentation</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-management">Token Management<a href="#token-management" class="hash-link" aria-label="Direct link to Token Management" title="Direct link to Token Management">​</a></h2><p>By default, K3s uses a single static token for both servers and agents. This token cannot be changed once the cluster has been created.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Advanced Options / Configuration</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Advanced Options / Configuration</h1></header><p>This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-management">Certificate Management<a href="#certificate-management" class="hash-link" aria-label="Direct link to Certificate Management" title="Direct link to Certificate Management">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-authority-certificates">Certificate Authority Certificates<a href="#certificate-authority-certificates" class="hash-link" aria-label="Direct link to Certificate Authority Certificates" title="Direct link to Certificate Authority Certificates">​</a></h3><p>K3s generates self-signed Certificate Authority (CA) Certificates during startup of the first server node. These CA certificates are valid for 10 years, and are not automatically renewed.</p><p>For information on using custom CA certificates, or renewing the self-signed CA certificates, see the <a href="/cli/certificate#certificate-authority-ca-certificates"><code>k3s certificate rotate-ca</code> command documentation</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="client-and-server-certificates">Client and Server certificates<a href="#client-and-server-certificates" class="hash-link" aria-label="Direct link to Client and Server certificates" title="Direct link to Client and Server certificates">​</a></h3><p>K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.</p><p>For information on manually rotating client and server certificates, see the <a href="/cli/certificate#client-and-server-certificates"><code>k3s certificate rotate</code> command documentation</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-management">Token Management<a href="#token-management" class="hash-link" aria-label="Direct link to Token Management" title="Direct link to Token Management">​</a></h2><p>By default, K3s uses a single static token for both servers and agents. This token cannot be changed once the cluster has been created.
 It is possible to enable a second static token that can only be used to join agents, or to create temporary <code>kubeadm</code> style join tokens that expire automatically.
 For more information, see the <a href="/cli/token"><code>k3s token</code> command documentation</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuring-an-http-proxy">Configuring an HTTP proxy<a href="#configuring-an-http-proxy" class="hash-link" aria-label="Direct link to Configuring an HTTP proxy" title="Direct link to Configuring an HTTP proxy">​</a></h2><p>If you are running K3s in an environment, which only has external connectivity through an HTTP proxy, you can configure your proxy settings on the K3s systemd service. These proxy settings will then be used in K3s and passed down to the embedded containerd and kubelet.</p><p>The K3s installation script will automatically take the <code>HTTP_PROXY</code>, <code>HTTPS_PROXY</code> and <code>NO_PROXY</code>, as well as the <code>CONTAINERD_HTTP_PROXY</code>, <code>CONTAINERD_HTTPS_PROXY</code> and <code>CONTAINERD_NO_PROXY</code> variables from the current shell, if they are present, and write them to the environment file of your systemd service, usually:</p><ul><li><code>/etc/systemd/system/k3s.service.env</code></li><li><code>/etc/systemd/system/k3s-agent.service.env</code></li></ul><p>Of course, you can also configure the proxy by editing these files.</p><p>K3s will automatically add the cluster internal Pod and Service IP ranges and cluster DNS domain to the list of <code>NO_PROXY</code> entries. You should ensure that the IP address ranges used by the Kubernetes nodes themselves (i.e. the public and private IPs of the nodes) are included in the <code>NO_PROXY</code> list, or that the nodes can be reached through the proxy.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">HTTP_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">HTTPS_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to configure the proxy settings for containerd without affecting K3s and the Kubelet, you can prefix the variables with <code>CONTAINERD_</code>:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="using-docker-as-the-container-runtime">Using Docker as the Container Runtime<a href="#using-docker-as-the-container-runtime" class="hash-link" aria-label="Direct link to Using Docker as the Container Runtime" title="Direct link to Using Docker as the Container Runtime">​</a></h2><p>K3s includes and defaults to <a href="https://containerd.io/" target="_blank" rel="noopener noreferrer">containerd</a>, an industry-standard container runtime.
 As of Kubernetes 1.24, the Kubelet no longer includes dockershim, the component that allows the kubelet to communicate with dockerd.
@@ -40,10 +40,10 @@
 For more details about lazy pulling and eStargz, please refer to <a href="https://github.com/containerd/stargz-snapshotter" target="_blank" rel="noopener noreferrer">Stargz Snapshotter project repository</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configure-k3s-for-lazy-pulling-of-estargz">Configure k3s for lazy pulling of eStargz<a href="#configure-k3s-for-lazy-pulling-of-estargz" class="hash-link" aria-label="Direct link to Configure k3s for lazy pulling of eStargz" title="Direct link to Configure k3s for lazy pulling of eStargz">​</a></h3><p>As shown in the following, <code>--snapshotter=stargz</code> option is needed for k3s server and agent.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server --snapshotter</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">stargz</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>With this configuration, you can perform lazy pulling for eStargz-formatted images.
 The following example Pod manifest uses eStargz-formatted <code>node:13.13.0</code> image (<code>ghcr.io/stargz-containers/node:13.13.0-esgz</code>).
 When the stargz snapshotter is enabled, K3s performs lazy pulling for this image.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nodejs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nodejs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">estargz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ghcr.io/stargz</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">containers/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">13.13.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">esgz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">command</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;node&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">e</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> var http = require(&#x27;http&#x27;);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      http.createServer(function(req</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> res) </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        res.writeHead(200);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        res.end(&#x27;Hello World</span><span class="token tag" style="color:rgb(255, 85, 114)">!</span><span class="token plain">\n&#x27;);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain">).listen(80);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="additional-logging-sources">Additional Logging Sources<a href="#additional-logging-sources" class="hash-link" aria-label="Direct link to Additional Logging Sources" title="Direct link to Additional Logging Sources">​</a></h2><p><a href="https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/" target="_blank" rel="noopener noreferrer">Rancher logging</a> for K3s can be installed without using Rancher. The following instructions should be executed to do so:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm repo </span><span class="token function" style="color:rgb(130, 170, 255)">add</span><span class="token plain"> rancher-charts https://charts.rancher.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm repo update</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true rancher-charts/rancher-logging</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="additional-network-policy-logging">Additional Network Policy Logging<a href="#additional-network-policy-logging" class="hash-link" aria-label="Direct link to Additional Network Policy Logging" title="Direct link to Additional Network Policy Logging">​</a></h2><p>Packets dropped by network policies can be logged. The packet is sent to the iptables NFLOG action, which shows the packet details, including the network policy that blocked it.</p><p>If there is a lot of traffic, the number of log messages could be very high. To control the log rate on a per-policy basis, set the <code>limit</code> and <code>limit-burst</code> iptables parameters by adding the following annotations to the network policy in question:</p><ul><li><code>kube-router.io/netpol-nflog-limit=&lt;LIMIT-VALUE&gt;</code></li><li><code>kube-router.io/netpol-nflog-limit-burst=&lt;LIMIT-BURST-VALUE&gt;</code></li></ul><p>Default values are <code>limit=10/minute</code> and <code>limit-burst=10</code>. Check the <a href="https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches" target="_blank" rel="noopener noreferrer">iptables manual</a> for more information on the format and possible values for these fields.</p><p>To convert NFLOG packets to log entries, install ulogd2 and configure <code>[log1]</code> to read on <code>group=100</code>. Then, restart the ulogd2 service for the new config to be committed.
-When a packet is blocked by network policy rules, a log message will appear in <code>/var/log/ulog/syslogemu.log</code>.</p><p>Packets sent to the NFLOG netlink socket can also be read by using command-line tools like tcpdump or tshark:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">tcpdump -ni nflog:100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>While more readily available, tcpdump will not show the name of the network policy that blocked the packet. Use wireshark&#x27;s tshark command instead to display the full NFLOG packet header, including the <code>nflog.prefix</code> field that contains the policy name.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/helm"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Helm</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/faq"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">FAQ</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#certificate-management" class="table-of-contents__link toc-highlight">Certificate Management</a><ul><li><a href="#certificate-authority-certificates" class="table-of-contents__link toc-highlight">Certificate Authority Certificates</a></li><li><a href="#client-and-server-certificates" class="table-of-contents__link toc-highlight">Client and Server certificates</a></li></ul></li><li><a href="#token-management" class="table-of-contents__link toc-highlight">Token Management</a></li><li><a href="#configuring-an-http-proxy" class="table-of-contents__link toc-highlight">Configuring an HTTP proxy</a></li><li><a href="#using-docker-as-the-container-runtime" class="table-of-contents__link toc-highlight">Using Docker as the Container Runtime</a></li><li><a href="#using-etcdctl" class="table-of-contents__link toc-highlight">Using etcdctl</a></li><li><a href="#configuring-containerd" class="table-of-contents__link toc-highlight">Configuring containerd</a></li><li><a href="#nvidia-container-runtime-support" class="table-of-contents__link toc-highlight">NVIDIA Container Runtime Support</a></li><li><a href="#running-agentless-servers-experimental" class="table-of-contents__link toc-highlight">Running Agentless Servers (Experimental)</a></li><li><a href="#running-rootless-servers-experimental" class="table-of-contents__link toc-highlight">Running Rootless Servers (Experimental)</a><ul><li><a href="#known-issues-with-rootless-mode" class="table-of-contents__link toc-highlight">Known Issues with Rootless mode</a></li><li><a href="#starting-rootless-servers" class="table-of-contents__link toc-highlight">Starting Rootless Servers</a></li><li><a href="#advanced-rootless-configuration" class="table-of-contents__link toc-highlight">Advanced Rootless Configuration</a></li><li><a href="#troubleshooting-rootless" class="table-of-contents__link toc-highlight">Troubleshooting Rootless</a></li></ul></li><li><a href="#node-labels-and-taints" class="table-of-contents__link toc-highlight">Node Labels and Taints</a></li><li><a href="#starting-the-service-with-the-installation-script" class="table-of-contents__link toc-highlight">Starting the Service with the Installation Script</a></li><li><a href="#additional-os-preparations" class="table-of-contents__link toc-highlight">Additional OS Preparations</a><ul><li><a href="#old-iptables-versions" class="table-of-contents__link toc-highlight">Old iptables versions</a></li><li><a href="#red-hat-enterprise-linux--centos" class="table-of-contents__link toc-highlight">Red Hat Enterprise Linux / CentOS</a></li><li><a href="#ubuntu" class="table-of-contents__link toc-highlight">Ubuntu</a></li><li><a href="#raspberry-pi" class="table-of-contents__link toc-highlight">Raspberry Pi</a></li></ul></li><li><a href="#running-k3s-in-docker" class="table-of-contents__link toc-highlight">Running K3s in Docker</a></li><li><a href="#selinux-support" class="table-of-contents__link toc-highlight">SELinux Support</a><ul><li><a href="#enabling-selinux-enforcement" class="table-of-contents__link toc-highlight">Enabling SELinux Enforcement</a></li></ul></li><li><a href="#enabling-lazy-pulling-of-estargz-experimental" class="table-of-contents__link toc-highlight">Enabling Lazy Pulling of eStargz (Experimental)</a><ul><li><a href="#whats-lazy-pulling-and-estargz" class="table-of-contents__link toc-highlight">What&#39;s lazy pulling and eStargz?</a></li><li><a href="#configure-k3s-for-lazy-pulling-of-estargz" class="table-of-contents__link toc-highlight">Configure k3s for lazy pulling of eStargz</a></li></ul></li><li><a href="#additional-logging-sources" class="table-of-contents__link toc-highlight">Additional Logging Sources</a></li><li><a href="#additional-network-policy-logging" class="table-of-contents__link toc-highlight">Additional Network Policy Logging</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+When a packet is blocked by network policy rules, a log message will appear in <code>/var/log/ulog/syslogemu.log</code>.</p><p>Packets sent to the NFLOG netlink socket can also be read by using command-line tools like tcpdump or tshark:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">tcpdump -ni nflog:100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>While more readily available, tcpdump will not show the name of the network policy that blocked the packet. Use wireshark&#x27;s tshark command instead to display the full NFLOG packet header, including the <code>nflog.prefix</code> field that contains the policy name.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/helm"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Helm</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/faq"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">FAQ</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#certificate-management" class="table-of-contents__link toc-highlight">Certificate Management</a><ul><li><a href="#certificate-authority-certificates" class="table-of-contents__link toc-highlight">Certificate Authority Certificates</a></li><li><a href="#client-and-server-certificates" class="table-of-contents__link toc-highlight">Client and Server certificates</a></li></ul></li><li><a href="#token-management" class="table-of-contents__link toc-highlight">Token Management</a></li><li><a href="#configuring-an-http-proxy" class="table-of-contents__link toc-highlight">Configuring an HTTP proxy</a></li><li><a href="#using-docker-as-the-container-runtime" class="table-of-contents__link toc-highlight">Using Docker as the Container Runtime</a></li><li><a href="#using-etcdctl" class="table-of-contents__link toc-highlight">Using etcdctl</a></li><li><a href="#configuring-containerd" class="table-of-contents__link toc-highlight">Configuring containerd</a></li><li><a href="#nvidia-container-runtime-support" class="table-of-contents__link toc-highlight">NVIDIA Container Runtime Support</a></li><li><a href="#running-agentless-servers-experimental" class="table-of-contents__link toc-highlight">Running Agentless Servers (Experimental)</a></li><li><a href="#running-rootless-servers-experimental" class="table-of-contents__link toc-highlight">Running Rootless Servers (Experimental)</a><ul><li><a href="#known-issues-with-rootless-mode" class="table-of-contents__link toc-highlight">Known Issues with Rootless mode</a></li><li><a href="#starting-rootless-servers" class="table-of-contents__link toc-highlight">Starting Rootless Servers</a></li><li><a href="#advanced-rootless-configuration" class="table-of-contents__link toc-highlight">Advanced Rootless Configuration</a></li><li><a href="#troubleshooting-rootless" class="table-of-contents__link toc-highlight">Troubleshooting Rootless</a></li></ul></li><li><a href="#node-labels-and-taints" class="table-of-contents__link toc-highlight">Node Labels and Taints</a></li><li><a href="#starting-the-service-with-the-installation-script" class="table-of-contents__link toc-highlight">Starting the Service with the Installation Script</a></li><li><a href="#additional-os-preparations" class="table-of-contents__link toc-highlight">Additional OS Preparations</a><ul><li><a href="#old-iptables-versions" class="table-of-contents__link toc-highlight">Old iptables versions</a></li><li><a href="#red-hat-enterprise-linux--centos" class="table-of-contents__link toc-highlight">Red Hat Enterprise Linux / CentOS</a></li><li><a href="#ubuntu" class="table-of-contents__link toc-highlight">Ubuntu</a></li><li><a href="#raspberry-pi" class="table-of-contents__link toc-highlight">Raspberry Pi</a></li></ul></li><li><a href="#running-k3s-in-docker" class="table-of-contents__link toc-highlight">Running K3s in Docker</a></li><li><a href="#selinux-support" class="table-of-contents__link toc-highlight">SELinux Support</a><ul><li><a href="#enabling-selinux-enforcement" class="table-of-contents__link toc-highlight">Enabling SELinux Enforcement</a></li></ul></li><li><a href="#enabling-lazy-pulling-of-estargz-experimental" class="table-of-contents__link toc-highlight">Enabling Lazy Pulling of eStargz (Experimental)</a><ul><li><a href="#whats-lazy-pulling-and-estargz" class="table-of-contents__link toc-highlight">What&#39;s lazy pulling and eStargz?</a></li><li><a href="#configure-k3s-for-lazy-pulling-of-estargz" class="table-of-contents__link toc-highlight">Configure k3s for lazy pulling of eStargz</a></li></ul></li><li><a href="#additional-logging-sources" class="table-of-contents__link toc-highlight">Additional Logging Sources</a></li><li><a href="#additional-network-policy-logging" class="table-of-contents__link toc-highlight">Additional Network Policy Logging</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/architecture.html b/architecture.html
index 21738715a..e4bbb935f 100644
--- a/architecture.html
+++ b/architecture.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Architecture | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/architecture"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Architecture | K3s"><meta data-rh="true" name="description" content="This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster."><meta data-rh="true" property="og:description" content="This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/architecture"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/architecture" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/architecture" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Architecture | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/architecture"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Architecture | K3s"><meta data-rh="true" name="description" content="This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster."><meta data-rh="true" property="og:description" content="This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/architecture"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/architecture" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/architecture" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Architecture</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Architecture</h1></header><p>This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster.</p><p>It also describes how agent nodes are registered with K3s servers.</p><ul><li>A server node is defined as a host running the <code>k3s server</code> command, with control-plane and datastore components managed by K3s.</li><li>An agent node is defined as a host running the <code>k3s agent</code> command, without any datastore or control-plane components.</li><li>Both servers and agents run the kubelet, container runtime, and CNI. See the <a href="/advanced#running-agentless-servers-experimental">Advanced Options</a> documentation for more information on running agentless servers.</li></ul><p><img loading="lazy" src="/assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg" width="1562" height="898" class="img_ev3q"></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="single-server-setup-with-an-embedded-db">Single-server Setup with an Embedded DB<a href="#single-server-setup-with-an-embedded-db" class="hash-link" aria-label="Direct link to Single-server Setup with an Embedded DB" title="Direct link to Single-server Setup with an Embedded DB">​</a></h3><p>The following diagram shows an example of a cluster that has a single-node K3s server with an embedded SQLite database.</p><p>In this configuration, each agent node is registered to the same server node. A K3s user can manipulate Kubernetes resources by calling the K3s API on the server node.</p><img src="/img/k3s-architecture-single-server.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-architecture-single-server-dark.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="high-availability-k3s">High-Availability K3s<a href="#high-availability-k3s" class="hash-link" aria-label="Direct link to High-Availability K3s" title="Direct link to High-Availability K3s">​</a></h3><p>Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster comprises:</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Embedded DB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">External DB</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><ul><li>Three or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>An <strong>embedded etcd datastore</strong> (as opposed to the embedded SQLite datastore used in single-server setups)</li></ul><img src="/img/k3s-architecture-ha-embedded.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-architecture-ha-embedded-dark.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--dark_i4oU"></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><ul><li>Two or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>An <strong>external datastore</strong> (such as MySQL, PostgreSQL, or etcd)</li></ul><img src="/img/k3s-architecture-ha-external.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-architecture-ha-external-dark.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--dark_i4oU"></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="fixed-registration-address-for-agent-nodes">Fixed Registration Address for Agent Nodes<a href="#fixed-registration-address-for-agent-nodes" class="hash-link" aria-label="Direct link to Fixed Registration Address for Agent Nodes" title="Direct link to Fixed Registration Address for Agent Nodes">​</a></h3><p>In the high-availability server configuration, each node can also register with the Kubernetes API by using a fixed registration address, as shown in the diagram below.</p><p>After registration, the agent nodes establish a connection directly to one of the server nodes.</p><img src="/img/k3s-production-setup.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-production-setup-dark.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-agent-node-registration-works">How Agent Node Registration Works<a href="#how-agent-node-registration-works" class="hash-link" aria-label="Direct link to How Agent Node Registration Works" title="Direct link to How Agent Node Registration Works">​</a></h3><p>Agent nodes are registered with a websocket connection initiated by the <code>k3s agent</code> process, and the connection is maintained by a client-side load balancer running as part of the agent process. Initially, the agent connects to the supervisor (and kube-apiserver) via the local load-balancer on port 6443. The load-balancer maintains a list of available endpoints to connect to. The default (and initially only) endpoint is seeded by the hostname from the <code>--server</code> address. Once it connects to the cluster, the agent retrieves a list of kube-apiserver addresses from the Kubernetes service endpoint list in the default namespace. Those endpoints are added to the load balancer, which then maintains stable connections to all servers in the cluster, providing a connection to the kube-apiserver that tolerates outages of individual servers.</p><p>Agents will register with the server using the node cluster secret along with a randomly generated password for the node, stored at <code>/etc/rancher/node/password</code>. The server will store the passwords for individual nodes as Kubernetes secrets, and any subsequent attempts must use the same password. Node password secrets are stored in the <code>kube-system</code> namespace with names using the template <code>&lt;host&gt;.node-password.k3s</code>. This is done to protect the integrity of node IDs.</p><p>If the <code>/etc/rancher/node</code> directory of an agent is removed, or you wish to rejoin a node using an existing name, the node should be deleted from the cluster. This will clean up both the old node entry, and the node password secret, and allow the node to (re)join the cluster.</p><p>If you frequently reuse hostnames, but are unable to remove the node password secrets, a unique node ID can be automatically appended to the hostname by launching K3s servers or agents using the <code>--with-node-id</code> flag. When enabled, the node ID is also stored in <code>/etc/rancher/node/</code>.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">K3s - Lightweight Kubernetes</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/quick-start"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Quick-Start Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#single-server-setup-with-an-embedded-db" class="table-of-contents__link toc-highlight">Single-server Setup with an Embedded DB</a></li><li><a href="#high-availability-k3s" class="table-of-contents__link toc-highlight">High-Availability K3s</a></li><li><a href="#fixed-registration-address-for-agent-nodes" class="table-of-contents__link toc-highlight">Fixed Registration Address for Agent Nodes</a></li><li><a href="#how-agent-node-registration-works" class="table-of-contents__link toc-highlight">How Agent Node Registration Works</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Architecture</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Architecture</h1></header><p>This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster.</p><p>It also describes how agent nodes are registered with K3s servers.</p><ul><li>A server node is defined as a host running the <code>k3s server</code> command, with control-plane and datastore components managed by K3s.</li><li>An agent node is defined as a host running the <code>k3s agent</code> command, without any datastore or control-plane components.</li><li>Both servers and agents run the kubelet, container runtime, and CNI. See the <a href="/advanced#running-agentless-servers-experimental">Advanced Options</a> documentation for more information on running agentless servers.</li></ul><p><img loading="lazy" src="/assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg" width="1562" height="898" class="img_ev3q"></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="single-server-setup-with-an-embedded-db">Single-server Setup with an Embedded DB<a href="#single-server-setup-with-an-embedded-db" class="hash-link" aria-label="Direct link to Single-server Setup with an Embedded DB" title="Direct link to Single-server Setup with an Embedded DB">​</a></h3><p>The following diagram shows an example of a cluster that has a single-node K3s server with an embedded SQLite database.</p><p>In this configuration, each agent node is registered to the same server node. A K3s user can manipulate Kubernetes resources by calling the K3s API on the server node.</p><img src="/img/k3s-architecture-single-server.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-architecture-single-server-dark.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="high-availability-k3s">High-Availability K3s<a href="#high-availability-k3s" class="hash-link" aria-label="Direct link to High-Availability K3s" title="Direct link to High-Availability K3s">​</a></h3><p>Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster comprises:</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Embedded DB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">External DB</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><ul><li>Three or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>An <strong>embedded etcd datastore</strong> (as opposed to the embedded SQLite datastore used in single-server setups)</li></ul><img src="/img/k3s-architecture-ha-embedded.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-architecture-ha-embedded-dark.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--dark_i4oU"></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><ul><li>Two or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>An <strong>external datastore</strong> (such as MySQL, PostgreSQL, or etcd)</li></ul><img src="/img/k3s-architecture-ha-external.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-architecture-ha-external-dark.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--dark_i4oU"></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="fixed-registration-address-for-agent-nodes">Fixed Registration Address for Agent Nodes<a href="#fixed-registration-address-for-agent-nodes" class="hash-link" aria-label="Direct link to Fixed Registration Address for Agent Nodes" title="Direct link to Fixed Registration Address for Agent Nodes">​</a></h3><p>In the high-availability server configuration, each node can also register with the Kubernetes API by using a fixed registration address, as shown in the diagram below.</p><p>After registration, the agent nodes establish a connection directly to one of the server nodes.</p><img src="/img/k3s-production-setup.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-production-setup-dark.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-agent-node-registration-works">How Agent Node Registration Works<a href="#how-agent-node-registration-works" class="hash-link" aria-label="Direct link to How Agent Node Registration Works" title="Direct link to How Agent Node Registration Works">​</a></h3><p>Agent nodes are registered with a websocket connection initiated by the <code>k3s agent</code> process, and the connection is maintained by a client-side load balancer running as part of the agent process. Initially, the agent connects to the supervisor (and kube-apiserver) via the local load-balancer on port 6443. The load-balancer maintains a list of available endpoints to connect to. The default (and initially only) endpoint is seeded by the hostname from the <code>--server</code> address. Once it connects to the cluster, the agent retrieves a list of kube-apiserver addresses from the Kubernetes service endpoint list in the default namespace. Those endpoints are added to the load balancer, which then maintains stable connections to all servers in the cluster, providing a connection to the kube-apiserver that tolerates outages of individual servers.</p><p>Agents will register with the server using the node cluster secret along with a randomly generated password for the node, stored at <code>/etc/rancher/node/password</code>. The server will store the passwords for individual nodes as Kubernetes secrets, and any subsequent attempts must use the same password. Node password secrets are stored in the <code>kube-system</code> namespace with names using the template <code>&lt;host&gt;.node-password.k3s</code>. This is done to protect the integrity of node IDs.</p><p>If the <code>/etc/rancher/node</code> directory of an agent is removed, or you wish to rejoin a node using an existing name, the node should be deleted from the cluster. This will clean up both the old node entry, and the node password secret, and allow the node to (re)join the cluster.</p><p>If you frequently reuse hostnames, but are unable to remove the node password secrets, a unique node ID can be automatically appended to the hostname by launching K3s servers or agents using the <code>--with-node-id</code> flag. When enabled, the node ID is also stored in <code>/etc/rancher/node/</code>.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">K3s - Lightweight Kubernetes</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/quick-start"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Quick-Start Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#single-server-setup-with-an-embedded-db" class="table-of-contents__link toc-highlight">Single-server Setup with an Embedded DB</a></li><li><a href="#high-availability-k3s" class="table-of-contents__link toc-highlight">High-Availability K3s</a></li><li><a href="#fixed-registration-address-for-agent-nodes" class="table-of-contents__link toc-highlight">Fixed Registration Address for Agent Nodes</a></li><li><a href="#how-agent-node-registration-works" class="table-of-contents__link toc-highlight">How Agent Node Registration Works</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/assets/css/styles.5f767eab.css b/assets/css/styles.5f767eab.css
new file mode 100644
index 000000000..5c736bd69
--- /dev/null
+++ b/assets/css/styles.5f767eab.css
@@ -0,0 +1 @@
+.col,.container{padding:0 var(--ifm-spacing-horizontal);width:100%}.markdown>h2,.markdown>h3,.markdown>h4,.markdown>h5,.markdown>h6{margin-bottom:calc(var(--ifm-heading-vertical-rhythm-bottom)*var(--ifm-leading))}pre,table{overflow:auto}blockquote,pre{margin:0 0 var(--ifm-spacing-vertical)}.breadcrumbs__link,.button{transition-timing-function:var(--ifm-transition-timing-default)}.button,code{vertical-align:middle}.button--outline.button--active,.button--outline:active,.button--outline:hover,:root{--ifm-button-color:var(--ifm-font-color-base-inverse)}.menu__link:hover,a{transition:color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.navbar--dark,:root{--ifm-navbar-link-hover-color:var(--ifm-color-primary)}.menu,.navbar-sidebar{overflow-x:hidden}:root,html[data-theme=dark]{--ifm-color-emphasis-500:var(--ifm-color-gray-500)}.markdown li,body{word-wrap:break-word}.toggleButton_gllP,html{-webkit-tap-highlight-color:transparent}*,.loadingRing_RJI3 div{box-sizing:border-box}.clean-list,.containsTaskList_mC6p,.details_lb9f>summary,.dropdown__menu,.menu__list{list-style:none}:root{--ifm-color-scheme:light;--ifm-dark-value:10%;--ifm-darker-value:15%;--ifm-darkest-value:30%;--ifm-light-value:15%;--ifm-lighter-value:30%;--ifm-lightest-value:50%;--ifm-contrast-background-value:90%;--ifm-contrast-foreground-value:70%;--ifm-contrast-background-dark-value:70%;--ifm-contrast-foreground-dark-value:90%;--ifm-color-primary:#3578e5;--ifm-color-secondary:#ebedf0;--ifm-color-success:#00a400;--ifm-color-info:#54c7ec;--ifm-color-warning:#ffba00;--ifm-color-danger:#fa383e;--ifm-color-primary-dark:#306cce;--ifm-color-primary-darker:#2d66c3;--ifm-color-primary-darkest:#2554a0;--ifm-color-primary-light:#538ce9;--ifm-color-primary-lighter:#72a1ed;--ifm-color-primary-lightest:#9abcf2;--ifm-color-primary-contrast-background:#ebf2fc;--ifm-color-primary-contrast-foreground:#102445;--ifm-color-secondary-dark:#d4d5d8;--ifm-color-secondary-darker:#c8c9cc;--ifm-color-secondary-darkest:#a4a6a8;--ifm-color-secondary-light:#eef0f2;--ifm-color-secondary-lighter:#f1f2f5;--ifm-color-secondary-lightest:#f5f6f8;--ifm-color-secondary-contrast-background:#fdfdfe;--ifm-color-secondary-contrast-foreground:#474748;--ifm-color-success-dark:#009400;--ifm-color-success-darker:#008b00;--ifm-color-success-darkest:#007300;--ifm-color-success-light:#26b226;--ifm-color-success-lighter:#4dbf4d;--ifm-color-success-lightest:#80d280;--ifm-color-success-contrast-background:#e6f6e6;--ifm-color-success-contrast-foreground:#003100;--ifm-color-info-dark:#4cb3d4;--ifm-color-info-darker:#47a9c9;--ifm-color-info-darkest:#3b8ba5;--ifm-color-info-light:#6ecfef;--ifm-color-info-lighter:#87d8f2;--ifm-color-info-lightest:#aae3f6;--ifm-color-info-contrast-background:#eef9fd;--ifm-color-info-contrast-foreground:#193c47;--ifm-color-warning-dark:#e6a700;--ifm-color-warning-darker:#d99e00;--ifm-color-warning-darkest:#b38200;--ifm-color-warning-light:#ffc426;--ifm-color-warning-lighter:#ffcf4d;--ifm-color-warning-lightest:#ffdd80;--ifm-color-warning-contrast-background:#fff8e6;--ifm-color-warning-contrast-foreground:#4d3800;--ifm-color-danger-dark:#e13238;--ifm-color-danger-darker:#d53035;--ifm-color-danger-darkest:#af272b;--ifm-color-danger-light:#fb565b;--ifm-color-danger-lighter:#fb7478;--ifm-color-danger-lightest:#fd9c9f;--ifm-color-danger-contrast-background:#ffebec;--ifm-color-danger-contrast-foreground:#4b1113;--ifm-color-white:#fff;--ifm-color-black:#000;--ifm-color-gray-0:var(--ifm-color-white);--ifm-color-gray-100:#f5f6f7;--ifm-color-gray-200:#ebedf0;--ifm-color-gray-300:#dadde1;--ifm-color-gray-400:#ccd0d5;--ifm-color-gray-500:#bec3c9;--ifm-color-gray-600:#8d949e;--ifm-color-gray-700:#606770;--ifm-color-gray-800:#444950;--ifm-color-gray-900:#1c1e21;--ifm-color-gray-1000:var(--ifm-color-black);--ifm-color-emphasis-0:var(--ifm-color-gray-0);--ifm-color-emphasis-100:var(--ifm-color-gray-100);--ifm-color-emphasis-200:var(--ifm-color-gray-200);--ifm-color-emphasis-300:var(--ifm-color-gray-300);--ifm-color-emphasis-400:var(--ifm-color-gray-400);--ifm-color-emphasis-600:var(--ifm-color-gray-600);--ifm-color-emphasis-700:var(--ifm-color-gray-700);--ifm-color-emphasis-800:var(--ifm-color-gray-800);--ifm-color-emphasis-900:var(--ifm-color-gray-900);--ifm-color-emphasis-1000:var(--ifm-color-gray-1000);--ifm-color-content:var(--ifm-color-emphasis-900);--ifm-color-content-inverse:var(--ifm-color-emphasis-0);--ifm-color-content-secondary:#525860;--ifm-background-color:#0000;--ifm-background-surface-color:var(--ifm-color-content-inverse);--ifm-global-border-width:1px;--ifm-global-radius:0.4rem;--ifm-hover-overlay:#0000000d;--ifm-font-color-base:var(--ifm-color-content);--ifm-font-color-base-inverse:var(--ifm-color-content-inverse);--ifm-font-color-secondary:var(--ifm-color-content-secondary);--ifm-font-family-base:system-ui,-apple-system,Segoe UI,Roboto,Ubuntu,Cantarell,Noto Sans,sans-serif,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--ifm-font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--ifm-font-size-base:100%;--ifm-font-weight-light:300;--ifm-font-weight-normal:400;--ifm-font-weight-semibold:500;--ifm-font-weight-bold:700;--ifm-font-weight-base:var(--ifm-font-weight-normal);--ifm-line-height-base:1.65;--ifm-global-spacing:1rem;--ifm-spacing-vertical:var(--ifm-global-spacing);--ifm-spacing-horizontal:var(--ifm-global-spacing);--ifm-transition-fast:200ms;--ifm-transition-slow:400ms;--ifm-transition-timing-default:cubic-bezier(0.08,0.52,0.52,1);--ifm-global-shadow-lw:0 1px 2px 0 #0000001a;--ifm-global-shadow-md:0 5px 40px #0003;--ifm-global-shadow-tl:0 12px 28px 0 #0003,0 2px 4px 0 #0000001a;--ifm-z-index-dropdown:100;--ifm-z-index-fixed:200;--ifm-z-index-overlay:400;--ifm-container-width:1140px;--ifm-container-width-xl:1320px;--ifm-code-background:#f6f7f8;--ifm-code-border-radius:var(--ifm-global-radius);--ifm-code-font-size:90%;--ifm-code-padding-horizontal:0.1rem;--ifm-code-padding-vertical:0.1rem;--ifm-pre-background:var(--ifm-code-background);--ifm-pre-border-radius:var(--ifm-code-border-radius);--ifm-pre-color:inherit;--ifm-pre-line-height:1.45;--ifm-pre-padding:1rem;--ifm-heading-color:inherit;--ifm-heading-margin-top:0;--ifm-heading-margin-bottom:var(--ifm-spacing-vertical);--ifm-heading-font-family:var(--ifm-font-family-base);--ifm-heading-font-weight:var(--ifm-font-weight-bold);--ifm-heading-line-height:1.25;--ifm-h1-font-size:2rem;--ifm-h2-font-size:1.5rem;--ifm-h3-font-size:1.25rem;--ifm-h4-font-size:1rem;--ifm-h5-font-size:0.875rem;--ifm-h6-font-size:0.85rem;--ifm-image-alignment-padding:1.25rem;--ifm-leading-desktop:1.25;--ifm-leading:calc(var(--ifm-leading-desktop)*1rem);--ifm-list-left-padding:2rem;--ifm-list-margin:1rem;--ifm-list-item-margin:0.25rem;--ifm-list-paragraph-margin:1rem;--ifm-table-cell-padding:0.75rem;--ifm-table-background:#0000;--ifm-table-stripe-background:#00000008;--ifm-table-border-width:1px;--ifm-table-border-color:var(--ifm-color-emphasis-300);--ifm-table-head-background:inherit;--ifm-table-head-color:inherit;--ifm-table-head-font-weight:var(--ifm-font-weight-bold);--ifm-table-cell-color:inherit;--ifm-link-color:var(--ifm-color-primary);--ifm-link-decoration:none;--ifm-link-hover-color:var(--ifm-link-color);--ifm-link-hover-decoration:underline;--ifm-paragraph-margin-bottom:var(--ifm-leading);--ifm-blockquote-font-size:var(--ifm-font-size-base);--ifm-blockquote-border-left-width:2px;--ifm-blockquote-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-blockquote-padding-vertical:0;--ifm-blockquote-shadow:none;--ifm-blockquote-color:var(--ifm-color-emphasis-800);--ifm-blockquote-border-color:var(--ifm-color-emphasis-300);--ifm-hr-background-color:var(--ifm-color-emphasis-500);--ifm-hr-height:1px;--ifm-hr-margin-vertical:1.5rem;--ifm-scrollbar-size:7px;--ifm-scrollbar-track-background-color:#f1f1f1;--ifm-scrollbar-thumb-background-color:silver;--ifm-scrollbar-thumb-hover-background-color:#a7a7a7;--ifm-alert-background-color:inherit;--ifm-alert-border-color:inherit;--ifm-alert-border-radius:var(--ifm-global-radius);--ifm-alert-border-width:0px;--ifm-alert-border-left-width:5px;--ifm-alert-color:var(--ifm-font-color-base);--ifm-alert-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-alert-padding-vertical:var(--ifm-spacing-vertical);--ifm-alert-shadow:var(--ifm-global-shadow-lw);--ifm-avatar-intro-margin:1rem;--ifm-avatar-intro-alignment:inherit;--ifm-avatar-photo-size:3rem;--ifm-badge-background-color:inherit;--ifm-badge-border-color:inherit;--ifm-badge-border-radius:var(--ifm-global-radius);--ifm-badge-border-width:var(--ifm-global-border-width);--ifm-badge-color:var(--ifm-color-white);--ifm-badge-padding-horizontal:calc(var(--ifm-spacing-horizontal)*0.5);--ifm-badge-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-breadcrumb-border-radius:1.5rem;--ifm-breadcrumb-spacing:0.5rem;--ifm-breadcrumb-color-active:var(--ifm-color-primary);--ifm-breadcrumb-item-background-active:var(--ifm-hover-overlay);--ifm-breadcrumb-padding-horizontal:0.8rem;--ifm-breadcrumb-padding-vertical:0.4rem;--ifm-breadcrumb-size-multiplier:1;--ifm-breadcrumb-separator:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="0 0 256 256"><g><g><polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128"/></g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g></svg>');--ifm-breadcrumb-separator-filter:none;--ifm-breadcrumb-separator-size:0.5rem;--ifm-breadcrumb-separator-size-multiplier:1.25;--ifm-button-background-color:inherit;--ifm-button-border-color:var(--ifm-button-background-color);--ifm-button-border-width:var(--ifm-global-border-width);--ifm-button-font-weight:var(--ifm-font-weight-bold);--ifm-button-padding-horizontal:1.5rem;--ifm-button-padding-vertical:0.375rem;--ifm-button-size-multiplier:1;--ifm-button-transition-duration:var(--ifm-transition-fast);--ifm-button-border-radius:calc(var(--ifm-global-radius)*var(--ifm-button-size-multiplier));--ifm-button-group-spacing:2px;--ifm-card-background-color:var(--ifm-background-surface-color);--ifm-card-border-radius:calc(var(--ifm-global-radius)*2);--ifm-card-horizontal-spacing:var(--ifm-global-spacing);--ifm-card-vertical-spacing:var(--ifm-global-spacing);--ifm-toc-border-color:var(--ifm-color-emphasis-300);--ifm-toc-link-color:var(--ifm-color-content-secondary);--ifm-toc-padding-vertical:0.5rem;--ifm-toc-padding-horizontal:0.5rem;--ifm-dropdown-background-color:var(--ifm-background-surface-color);--ifm-dropdown-font-weight:var(--ifm-font-weight-semibold);--ifm-dropdown-link-color:var(--ifm-font-color-base);--ifm-dropdown-hover-background-color:var(--ifm-hover-overlay);--ifm-footer-background-color:var(--ifm-color-emphasis-100);--ifm-footer-color:inherit;--ifm-footer-link-color:var(--ifm-color-emphasis-700);--ifm-footer-link-hover-color:var(--ifm-color-primary);--ifm-footer-link-horizontal-spacing:0.5rem;--ifm-footer-padding-horizontal:calc(var(--ifm-spacing-horizontal)*2);--ifm-footer-padding-vertical:calc(var(--ifm-spacing-vertical)*2);--ifm-footer-title-color:inherit;--ifm-footer-logo-max-width:min(30rem,90vw);--ifm-hero-background-color:var(--ifm-background-surface-color);--ifm-hero-text-color:var(--ifm-color-emphasis-800);--ifm-menu-color:var(--ifm-color-emphasis-700);--ifm-menu-color-active:var(--ifm-color-primary);--ifm-menu-color-background-active:var(--ifm-hover-overlay);--ifm-menu-color-background-hover:var(--ifm-hover-overlay);--ifm-menu-link-padding-horizontal:0.75rem;--ifm-menu-link-padding-vertical:0.375rem;--ifm-menu-link-sublist-icon:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" width="16px" height="16px" viewBox="0 0 24 24"><path fill="rgba(0,0,0,0.5)" d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>');--ifm-menu-link-sublist-icon-filter:none;--ifm-navbar-background-color:var(--ifm-background-surface-color);--ifm-navbar-height:3.75rem;--ifm-navbar-item-padding-horizontal:0.75rem;--ifm-navbar-item-padding-vertical:0.25rem;--ifm-navbar-link-color:var(--ifm-font-color-base);--ifm-navbar-link-active-color:var(--ifm-link-color);--ifm-navbar-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-navbar-padding-vertical:calc(var(--ifm-spacing-vertical)*0.5);--ifm-navbar-shadow:var(--ifm-global-shadow-lw);--ifm-navbar-search-input-background-color:var(--ifm-color-emphasis-200);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-800);--ifm-navbar-search-input-placeholder-color:var(--ifm-color-emphasis-500);--ifm-navbar-search-input-icon:url('data:image/svg+xml;utf8,<svg fill="currentColor" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" height="16px" width="16px"><path d="M6.02945,10.20327a4.17382,4.17382,0,1,1,4.17382-4.17382A4.15609,4.15609,0,0,1,6.02945,10.20327Zm9.69195,4.2199L10.8989,9.59979A5.88021,5.88021,0,0,0,12.058,6.02856,6.00467,6.00467,0,1,0,9.59979,10.8989l4.82338,4.82338a.89729.89729,0,0,0,1.29912,0,.89749.89749,0,0,0-.00087-1.29909Z" /></svg>');--ifm-navbar-sidebar-width:83vw;--ifm-pagination-border-radius:var(--ifm-global-radius);--ifm-pagination-color-active:var(--ifm-color-primary);--ifm-pagination-font-size:1rem;--ifm-pagination-item-active-background:var(--ifm-hover-overlay);--ifm-pagination-page-spacing:0.2em;--ifm-pagination-padding-horizontal:calc(var(--ifm-spacing-horizontal)*1);--ifm-pagination-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-pagination-nav-border-radius:var(--ifm-global-radius);--ifm-pagination-nav-color-hover:var(--ifm-color-primary);--ifm-pills-color-active:var(--ifm-color-primary);--ifm-pills-color-background-active:var(--ifm-hover-overlay);--ifm-pills-spacing:0.125rem;--ifm-tabs-color:var(--ifm-font-color-secondary);--ifm-tabs-color-active:var(--ifm-color-primary);--ifm-tabs-color-active-border:var(--ifm-tabs-color-active);--ifm-tabs-padding-horizontal:1rem;--ifm-tabs-padding-vertical:1rem;--docusaurus-progress-bar-color:var(--ifm-color-primary);--ifm-color-primary:#06527a;--ifm-color-primary-dark:#054a6e;--ifm-color-primary-darker:#054668;--ifm-color-primary-darkest:#043955;--ifm-color-primary-light:#075a86;--ifm-color-primary-lighter:#075e8c;--ifm-color-primary-lightest:#086b9f;--ifm-color-secondary:#ffc61c;--ifm-color-secondary-light:#ffcd38;--dark:#33313b;--light:#f3f3f3;--docusaurus-announcement-bar-height:auto;--docusaurus-tag-list-border:var(--ifm-color-emphasis-300);--docusaurus-collapse-button-bg:#0000;--docusaurus-collapse-button-bg-hover:#0000001a;--doc-sidebar-width:300px;--doc-sidebar-hidden-width:30px}.badge--danger,.badge--info,.badge--primary,.badge--secondary,.badge--success,.badge--warning{--ifm-badge-border-color:var(--ifm-badge-background-color)}.button--link,.button--outline{--ifm-button-background-color:#0000}html{-webkit-font-smoothing:antialiased;-webkit-text-size-adjust:100%;text-size-adjust:100%;background-color:var(--ifm-background-color);color:var(--ifm-font-color-base);color-scheme:var(--ifm-color-scheme);font:var(--ifm-font-size-base)/var(--ifm-line-height-base) var(--ifm-font-family-base);text-rendering:optimizelegibility}iframe{border:0;color-scheme:auto}.container{margin:0 auto;max-width:var(--ifm-container-width)}.container--fluid{max-width:inherit}.row{display:flex;flex-wrap:wrap;margin:0 calc(var(--ifm-spacing-horizontal)*-1)}.margin-bottom--none,.margin-vert--none,.markdown>:last-child{margin-bottom:0!important}.margin-top--none,.margin-vert--none,.tabItem_LNqP{margin-top:0!important}.row--no-gutters{margin-left:0;margin-right:0}.margin-horiz--none,.margin-right--none{margin-right:0!important}.row--no-gutters>.col{padding-left:0;padding-right:0}.row--align-top{align-items:flex-start}.row--align-bottom{align-items:flex-end}.menuExternalLink_NmtK,.row--align-center{align-items:center}.row--align-stretch{align-items:stretch}.row--align-baseline{align-items:baseline}.col{--ifm-col-width:100%;flex:1 0;margin-left:0;max-width:var(--ifm-col-width)}.padding-bottom--none,.padding-vert--none{padding-bottom:0!important}.padding-top--none,.padding-vert--none{padding-top:0!important}.padding-horiz--none,.padding-left--none{padding-left:0!important}.padding-horiz--none,.padding-right--none{padding-right:0!important}.col[class*=col--]{flex:0 0 var(--ifm-col-width)}.col--1{--ifm-col-width:8.33333%}.col--offset-1{margin-left:8.33333%}.col--2{--ifm-col-width:16.66667%}.col--offset-2{margin-left:16.66667%}.col--3{--ifm-col-width:25%}.col--offset-3{margin-left:25%}.col--4{--ifm-col-width:33.33333%}.col--offset-4{margin-left:33.33333%}.col--5{--ifm-col-width:41.66667%}.col--offset-5{margin-left:41.66667%}.col--6{--ifm-col-width:50%}.col--offset-6{margin-left:50%}.col--7{--ifm-col-width:58.33333%}.col--offset-7{margin-left:58.33333%}.col--8{--ifm-col-width:66.66667%}.col--offset-8{margin-left:66.66667%}.col--9{--ifm-col-width:75%}.col--offset-9{margin-left:75%}.col--10{--ifm-col-width:83.33333%}.col--offset-10{margin-left:83.33333%}.col--11{--ifm-col-width:91.66667%}.col--offset-11{margin-left:91.66667%}.col--12{--ifm-col-width:100%}.col--offset-12{margin-left:100%}.margin-horiz--none,.margin-left--none{margin-left:0!important}.margin--none{margin:0!important}.margin-bottom--xs,.margin-vert--xs{margin-bottom:.25rem!important}.margin-top--xs,.margin-vert--xs{margin-top:.25rem!important}.margin-horiz--xs,.margin-left--xs{margin-left:.25rem!important}.margin-horiz--xs,.margin-right--xs{margin-right:.25rem!important}.margin--xs{margin:.25rem!important}.margin-bottom--sm,.margin-vert--sm{margin-bottom:.5rem!important}.margin-top--sm,.margin-vert--sm{margin-top:.5rem!important}.margin-horiz--sm,.margin-left--sm{margin-left:.5rem!important}.margin-horiz--sm,.margin-right--sm{margin-right:.5rem!important}.margin--sm{margin:.5rem!important}.margin-bottom--md,.margin-vert--md{margin-bottom:1rem!important}.margin-top--md,.margin-vert--md{margin-top:1rem!important}.margin-horiz--md,.margin-left--md{margin-left:1rem!important}.margin-horiz--md,.margin-right--md{margin-right:1rem!important}.margin--md{margin:1rem!important}.margin-bottom--lg,.margin-vert--lg{margin-bottom:2rem!important}.margin-top--lg,.margin-vert--lg{margin-top:2rem!important}.margin-horiz--lg,.margin-left--lg{margin-left:2rem!important}.margin-horiz--lg,.margin-right--lg{margin-right:2rem!important}.margin--lg{margin:2rem!important}.margin-bottom--xl,.margin-vert--xl{margin-bottom:5rem!important}.margin-top--xl,.margin-vert--xl{margin-top:5rem!important}.margin-horiz--xl,.margin-left--xl{margin-left:5rem!important}.margin-horiz--xl,.margin-right--xl{margin-right:5rem!important}.margin--xl{margin:5rem!important}.padding--none{padding:0!important}.padding-bottom--xs,.padding-vert--xs{padding-bottom:.25rem!important}.padding-top--xs,.padding-vert--xs{padding-top:.25rem!important}.padding-horiz--xs,.padding-left--xs{padding-left:.25rem!important}.padding-horiz--xs,.padding-right--xs{padding-right:.25rem!important}.padding--xs{padding:.25rem!important}.padding-bottom--sm,.padding-vert--sm{padding-bottom:.5rem!important}.padding-top--sm,.padding-vert--sm{padding-top:.5rem!important}.padding-horiz--sm,.padding-left--sm{padding-left:.5rem!important}.padding-horiz--sm,.padding-right--sm{padding-right:.5rem!important}.padding--sm{padding:.5rem!important}.padding-bottom--md,.padding-vert--md{padding-bottom:1rem!important}.padding-top--md,.padding-vert--md{padding-top:1rem!important}.padding-horiz--md,.padding-left--md{padding-left:1rem!important}.padding-horiz--md,.padding-right--md{padding-right:1rem!important}.padding--md{padding:1rem!important}.padding-bottom--lg,.padding-vert--lg{padding-bottom:2rem!important}.padding-top--lg,.padding-vert--lg{padding-top:2rem!important}.padding-horiz--lg,.padding-left--lg{padding-left:2rem!important}.padding-horiz--lg,.padding-right--lg{padding-right:2rem!important}.padding--lg{padding:2rem!important}.padding-bottom--xl,.padding-vert--xl{padding-bottom:5rem!important}.padding-top--xl,.padding-vert--xl{padding-top:5rem!important}.padding-horiz--xl,.padding-left--xl{padding-left:5rem!important}.padding-horiz--xl,.padding-right--xl{padding-right:5rem!important}.padding--xl{padding:5rem!important}code{background-color:var(--ifm-code-background);border:.1rem solid #0000001a;border-radius:var(--ifm-code-border-radius);font-family:var(--ifm-font-family-monospace);font-size:var(--ifm-code-font-size);padding:var(--ifm-code-padding-vertical) var(--ifm-code-padding-horizontal)}a code{color:inherit}pre{background-color:var(--ifm-pre-background);border-radius:var(--ifm-pre-border-radius);color:var(--ifm-pre-color);font:var(--ifm-code-font-size)/var(--ifm-pre-line-height) var(--ifm-font-family-monospace);padding:var(--ifm-pre-padding)}pre code{background-color:initial;border:none;font-size:100%;line-height:inherit;padding:0}kbd{background-color:var(--ifm-color-emphasis-0);border:1px solid var(--ifm-color-emphasis-400);border-radius:.2rem;box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-400);color:var(--ifm-color-emphasis-800);font:80% var(--ifm-font-family-monospace);padding:.15rem .3rem}h1,h2,h3,h4,h5,h6{color:var(--ifm-heading-color);font-family:var(--ifm-heading-font-family);font-weight:var(--ifm-heading-font-weight);line-height:var(--ifm-heading-line-height);margin:var(--ifm-heading-margin-top) 0 var(--ifm-heading-margin-bottom) 0}h1{font-size:var(--ifm-h1-font-size)}h2{font-size:var(--ifm-h2-font-size)}h3{font-size:var(--ifm-h3-font-size)}h4{font-size:var(--ifm-h4-font-size)}h5{font-size:var(--ifm-h5-font-size)}h6{font-size:var(--ifm-h6-font-size)}.container_lyt7,.container_lyt7>svg,img{max-width:100%}img[align=right]{padding-left:var(--image-alignment-padding)}img[align=left]{padding-right:var(--image-alignment-padding)}.markdown{--ifm-h1-vertical-rhythm-top:3;--ifm-h2-vertical-rhythm-top:2;--ifm-h3-vertical-rhythm-top:1.5;--ifm-heading-vertical-rhythm-top:1.25;--ifm-h1-vertical-rhythm-bottom:1.25;--ifm-heading-vertical-rhythm-bottom:1}.markdown:after,.markdown:before{content:"";display:table}.markdown:after{clear:both}.markdown h1:first-child{--ifm-h1-font-size:3rem;margin-bottom:calc(var(--ifm-h1-vertical-rhythm-bottom)*var(--ifm-leading))}.markdown>h2{--ifm-h2-font-size:2rem;margin-top:calc(var(--ifm-h2-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h3{--ifm-h3-font-size:1.5rem;margin-top:calc(var(--ifm-h3-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h4,.markdown>h5,.markdown>h6{margin-top:calc(var(--ifm-heading-vertical-rhythm-top)*var(--ifm-leading))}.markdown>p,.markdown>pre,.markdown>ul,.tabList__CuJ{margin-bottom:var(--ifm-leading)}.markdown li>p{margin-top:var(--ifm-list-paragraph-margin)}.markdown li+li{margin-top:var(--ifm-list-item-margin)}ol,ul{margin:0 0 var(--ifm-list-margin);padding-left:var(--ifm-list-left-padding)}ol ol,ul ol{list-style-type:lower-roman}ol ol,ol ul,ul ol,ul ul{margin:0}ol ol ol,ol ul ol,ul ol ol,ul ul ol{list-style-type:lower-alpha}table{border-collapse:collapse;display:block;margin-bottom:var(--ifm-spacing-vertical)}table thead tr{border-bottom:2px solid var(--ifm-table-border-color)}table thead,table tr:nth-child(2n){background-color:var(--ifm-table-stripe-background)}table tr{background-color:var(--ifm-table-background);border-top:var(--ifm-table-border-width) solid var(--ifm-table-border-color)}table td,table th{border:var(--ifm-table-border-width) solid var(--ifm-table-border-color);padding:var(--ifm-table-cell-padding)}table th{background-color:var(--ifm-table-head-background);color:var(--ifm-table-head-color);font-weight:var(--ifm-table-head-font-weight)}table td{color:var(--ifm-table-cell-color)}strong{font-weight:var(--ifm-font-weight-bold)}a{color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}a:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button:hover,.text--no-decoration,.text--no-decoration:hover,a:not([href]){text-decoration:none}p{margin:0 0 var(--ifm-paragraph-margin-bottom)}blockquote{border-left:var(--ifm-blockquote-border-left-width) solid var(--ifm-blockquote-border-color);box-shadow:var(--ifm-blockquote-shadow);color:var(--ifm-blockquote-color);font-size:var(--ifm-blockquote-font-size);padding:var(--ifm-blockquote-padding-vertical) var(--ifm-blockquote-padding-horizontal)}blockquote>:first-child{margin-top:0}blockquote>:last-child{margin-bottom:0}hr{background-color:var(--ifm-hr-background-color);border:0;height:var(--ifm-hr-height);margin:var(--ifm-hr-margin-vertical) 0;background-image:-webkit-linear-gradient(left,#f3f3f3,#adadb1,#f3f3f3);margin:0 auto}.shadow--lw{box-shadow:var(--ifm-global-shadow-lw)!important}.shadow--md{box-shadow:var(--ifm-global-shadow-md)!important}.shadow--tl{box-shadow:var(--ifm-global-shadow-tl)!important}.text--primary,.wordWrapButtonEnabled_EoeP .wordWrapButtonIcon_Bwma{color:var(--ifm-color-primary)}.text--secondary{color:var(--ifm-color-secondary)}.text--success{color:var(--ifm-color-success)}.text--info{color:var(--ifm-color-info)}.text--warning{color:var(--ifm-color-warning)}.text--danger{color:var(--ifm-color-danger)}.text--center{text-align:center}.text--left{text-align:left}.text--justify{text-align:justify}.text--right{text-align:right}.text--capitalize{text-transform:capitalize}.text--lowercase{text-transform:lowercase}.admonitionHeading_tbUL,.alert__heading,.text--uppercase{text-transform:uppercase}.text--light{font-weight:var(--ifm-font-weight-light)}.text--normal{font-weight:var(--ifm-font-weight-normal)}.text--semibold{font-weight:var(--ifm-font-weight-semibold)}.text--bold{font-weight:var(--ifm-font-weight-bold)}.text--italic{font-style:italic}.text--truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.text--break{word-wrap:break-word!important;word-break:break-word!important}.clean-btn{background:none;border:none;color:inherit;cursor:pointer;font-family:inherit;padding:0}.alert,.alert .close{color:var(--ifm-alert-foreground-color)}.clean-list{padding-left:0}.alert--primary{--ifm-alert-background-color:var(--ifm-color-primary-contrast-background);--ifm-alert-background-color-highlight:#3578e526;--ifm-alert-foreground-color:var(--ifm-color-primary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-primary-dark)}.alert--secondary{--ifm-alert-background-color:var(--ifm-color-secondary-contrast-background);--ifm-alert-background-color-highlight:#ebedf026;--ifm-alert-foreground-color:var(--ifm-color-secondary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-secondary-dark)}.alert--success{--ifm-alert-background-color:var(--ifm-color-success-contrast-background);--ifm-alert-background-color-highlight:#00a40026;--ifm-alert-foreground-color:var(--ifm-color-success-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-success-dark)}.alert--info{--ifm-alert-background-color:var(--ifm-color-info-contrast-background);--ifm-alert-background-color-highlight:#54c7ec26;--ifm-alert-foreground-color:var(--ifm-color-info-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-info-dark)}.alert--warning{--ifm-alert-background-color:var(--ifm-color-warning-contrast-background);--ifm-alert-background-color-highlight:#ffba0026;--ifm-alert-foreground-color:var(--ifm-color-warning-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-warning-dark)}.alert--danger{--ifm-alert-background-color:var(--ifm-color-danger-contrast-background);--ifm-alert-background-color-highlight:#fa383e26;--ifm-alert-foreground-color:var(--ifm-color-danger-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-danger-dark)}.alert{--ifm-code-background:var(--ifm-alert-background-color-highlight);--ifm-link-color:var(--ifm-alert-foreground-color);--ifm-link-hover-color:var(--ifm-alert-foreground-color);--ifm-link-decoration:underline;--ifm-tabs-color:var(--ifm-alert-foreground-color);--ifm-tabs-color-active:var(--ifm-alert-foreground-color);--ifm-tabs-color-active-border:var(--ifm-alert-border-color);background-color:var(--ifm-alert-background-color);border:var(--ifm-alert-border-width) solid var(--ifm-alert-border-color);border-left-width:var(--ifm-alert-border-left-width);border-radius:var(--ifm-alert-border-radius);box-shadow:var(--ifm-alert-shadow);padding:var(--ifm-alert-padding-vertical) var(--ifm-alert-padding-horizontal)}.alert__heading{align-items:center;display:flex;font:700 var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.5rem}.alert__icon{display:inline-flex;margin-right:.4em}.alert__icon svg{fill:var(--ifm-alert-foreground-color);stroke:var(--ifm-alert-foreground-color);stroke-width:0}.alert .close{margin:calc(var(--ifm-alert-padding-vertical)*-1) calc(var(--ifm-alert-padding-horizontal)*-1) 0 0;opacity:.75}.alert .close:focus,.alert .close:hover{opacity:1}.alert a{text-decoration-color:var(--ifm-alert-border-color)}.alert a:hover{text-decoration-thickness:2px}.avatar{column-gap:var(--ifm-avatar-intro-margin);display:flex}.avatar__photo{border-radius:50%;display:block;height:var(--ifm-avatar-photo-size);overflow:hidden;width:var(--ifm-avatar-photo-size)}.card--full-height,.navbar__logo img,body,html{height:100%}.avatar__photo--sm{--ifm-avatar-photo-size:2rem}.avatar__photo--lg{--ifm-avatar-photo-size:4rem}.avatar__photo--xl{--ifm-avatar-photo-size:6rem}.avatar__intro{display:flex;flex:1 1;flex-direction:column;justify-content:center;text-align:var(--ifm-avatar-intro-alignment)}.badge,.breadcrumbs__item,.breadcrumbs__link,.button,.dropdown>.navbar__link:after,.searchBarContainer_NW3z.searchIndexLoading_EJ1f .searchBarLoadingRing_YnHq{display:inline-block}.avatar__name{font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base)}.avatar__subtitle{margin-top:.25rem}.avatar--vertical{--ifm-avatar-intro-alignment:center;--ifm-avatar-intro-margin:0.5rem;align-items:center;flex-direction:column}.badge{background-color:var(--ifm-badge-background-color);border:var(--ifm-badge-border-width) solid var(--ifm-badge-border-color);border-radius:var(--ifm-badge-border-radius);color:var(--ifm-badge-color);font-size:75%;font-weight:var(--ifm-font-weight-bold);line-height:1;padding:var(--ifm-badge-padding-vertical) var(--ifm-badge-padding-horizontal)}.badge--primary{--ifm-badge-background-color:var(--ifm-color-primary)}.badge--secondary{--ifm-badge-background-color:var(--ifm-color-secondary);color:var(--ifm-color-black)}.breadcrumbs__link,.button.button--secondary.button--outline:not(.button--active):not(:hover){color:var(--ifm-font-color-base)}.badge--success{--ifm-badge-background-color:var(--ifm-color-success)}.badge--info{--ifm-badge-background-color:var(--ifm-color-info)}.badge--warning{--ifm-badge-background-color:var(--ifm-color-warning)}.badge--danger{--ifm-badge-background-color:var(--ifm-color-danger)}.breadcrumbs{margin-bottom:0;padding-left:0}.breadcrumbs__item:not(:last-child):after{background:var(--ifm-breadcrumb-separator) center;content:" ";display:inline-block;filter:var(--ifm-breadcrumb-separator-filter);height:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier));margin:0 var(--ifm-breadcrumb-spacing);opacity:.5;width:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier))}.breadcrumbs__item--active .breadcrumbs__link{background:var(--ifm-breadcrumb-item-background-active);color:var(--ifm-breadcrumb-color-active)}.breadcrumbs__link{border-radius:var(--ifm-breadcrumb-border-radius);font-size:calc(1rem*var(--ifm-breadcrumb-size-multiplier));padding:calc(var(--ifm-breadcrumb-padding-vertical)*var(--ifm-breadcrumb-size-multiplier)) calc(var(--ifm-breadcrumb-padding-horizontal)*var(--ifm-breadcrumb-size-multiplier));transition-duration:var(--ifm-transition-fast);transition-property:background,color}.breadcrumbs__link:any-link:hover,.breadcrumbs__link:link:hover,.breadcrumbs__link:visited:hover,area[href].breadcrumbs__link:hover{background:var(--ifm-breadcrumb-item-background-active);text-decoration:none}.breadcrumbs--sm{--ifm-breadcrumb-size-multiplier:0.8}.breadcrumbs--lg{--ifm-breadcrumb-size-multiplier:1.2}.button{background-color:var(--ifm-button-background-color);border:var(--ifm-button-border-width) solid var(--ifm-button-border-color);border-radius:var(--ifm-button-border-radius);cursor:pointer;font-size:calc(.875rem*var(--ifm-button-size-multiplier));font-weight:var(--ifm-button-font-weight);line-height:1.5;padding:calc(var(--ifm-button-padding-vertical)*var(--ifm-button-size-multiplier)) calc(var(--ifm-button-padding-horizontal)*var(--ifm-button-size-multiplier));text-align:center;transition-duration:var(--ifm-button-transition-duration);transition-property:color,background,border-color;-webkit-user-select:none;user-select:none;white-space:nowrap}.button,.button:hover{color:var(--ifm-button-color)}.button--outline{--ifm-button-color:var(--ifm-button-border-color)}.button--outline:hover{--ifm-button-background-color:var(--ifm-button-border-color)}.button--link{--ifm-button-border-color:#0000;color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}.button--link.button--active,.button--link:active,.button--link:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button.disabled,.button:disabled,.button[disabled]{opacity:.65;pointer-events:none}.button--sm{--ifm-button-size-multiplier:0.8}.button--lg{--ifm-button-size-multiplier:1.35}.button--block{display:block;width:100%}.button.button--secondary{color:var(--ifm-color-gray-900)}:where(.button--primary){--ifm-button-background-color:var(--ifm-color-primary);--ifm-button-border-color:var(--ifm-color-primary)}:where(.button--primary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-primary-dark);--ifm-button-border-color:var(--ifm-color-primary-dark)}.button--primary.button--active,.button--primary:active{--ifm-button-background-color:var(--ifm-color-primary-darker);--ifm-button-border-color:var(--ifm-color-primary-darker)}:where(.button--secondary){--ifm-button-background-color:var(--ifm-color-secondary);--ifm-button-border-color:var(--ifm-color-secondary)}:where(.button--secondary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-secondary-dark);--ifm-button-border-color:var(--ifm-color-secondary-dark)}.button--secondary.button--active,.button--secondary:active{--ifm-button-background-color:var(--ifm-color-secondary-darker);--ifm-button-border-color:var(--ifm-color-secondary-darker)}:where(.button--success){--ifm-button-background-color:var(--ifm-color-success);--ifm-button-border-color:var(--ifm-color-success)}:where(.button--success):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-success-dark);--ifm-button-border-color:var(--ifm-color-success-dark)}.button--success.button--active,.button--success:active{--ifm-button-background-color:var(--ifm-color-success-darker);--ifm-button-border-color:var(--ifm-color-success-darker)}:where(.button--info){--ifm-button-background-color:var(--ifm-color-info);--ifm-button-border-color:var(--ifm-color-info)}:where(.button--info):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-info-dark);--ifm-button-border-color:var(--ifm-color-info-dark)}.button--info.button--active,.button--info:active{--ifm-button-background-color:var(--ifm-color-info-darker);--ifm-button-border-color:var(--ifm-color-info-darker)}:where(.button--warning){--ifm-button-background-color:var(--ifm-color-warning);--ifm-button-border-color:var(--ifm-color-warning)}:where(.button--warning):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-warning-dark);--ifm-button-border-color:var(--ifm-color-warning-dark)}.button--warning.button--active,.button--warning:active{--ifm-button-background-color:var(--ifm-color-warning-darker);--ifm-button-border-color:var(--ifm-color-warning-darker)}:where(.button--danger){--ifm-button-background-color:var(--ifm-color-danger);--ifm-button-border-color:var(--ifm-color-danger)}:where(.button--danger):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-danger-dark);--ifm-button-border-color:var(--ifm-color-danger-dark)}.button--danger.button--active,.button--danger:active{--ifm-button-background-color:var(--ifm-color-danger-darker);--ifm-button-border-color:var(--ifm-color-danger-darker)}.button-group{display:inline-flex;gap:var(--ifm-button-group-spacing)}.button-group>.button:not(:first-child){border-bottom-left-radius:0;border-top-left-radius:0}.button-group>.button:not(:last-child){border-bottom-right-radius:0;border-top-right-radius:0}.button-group--block{display:flex;justify-content:stretch}.button-group--block>.button{flex-grow:1}.card{background-color:var(--ifm-card-background-color);border-radius:var(--ifm-card-border-radius);box-shadow:var(--ifm-global-shadow-lw);display:flex;flex-direction:column;overflow:hidden}.card__image{padding-top:var(--ifm-card-vertical-spacing)}.card__image:first-child{padding-top:0}.card__body,.card__footer,.card__header{padding:var(--ifm-card-vertical-spacing) var(--ifm-card-horizontal-spacing)}.card__body:not(:last-child),.card__footer:not(:last-child),.card__header:not(:last-child){padding-bottom:0}.card__body>:last-child,.card__footer>:last-child,.card__header>:last-child{margin-bottom:0}.card__footer{margin-top:auto}.table-of-contents{font-size:.8rem;margin-bottom:0;padding:var(--ifm-toc-padding-vertical) 0}.table-of-contents,.table-of-contents ul{list-style:none;padding-left:var(--ifm-toc-padding-horizontal)}.table-of-contents li{margin:var(--ifm-toc-padding-vertical) var(--ifm-toc-padding-horizontal)}.table-of-contents__left-border{border-left:1px solid var(--ifm-toc-border-color)}.table-of-contents__link{color:var(--ifm-toc-link-color);display:block}.table-of-contents__link--active,.table-of-contents__link--active code,.table-of-contents__link:hover,.table-of-contents__link:hover code{color:var(--ifm-color-primary);text-decoration:none}.content_knG7 a,.hitFooter_E9YW a,.suggestion_fB_2.cursor_eG29 mark{text-decoration:underline}.close{color:var(--ifm-color-black);float:right;font-size:1.5rem;font-weight:var(--ifm-font-weight-bold);line-height:1;opacity:.5;padding:1rem;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.close:hover{opacity:.7}.close:focus,.theme-code-block-highlighted-line .codeLineNumber_Tfdd:before{opacity:.8}.dropdown{display:inline-flex;font-weight:var(--ifm-dropdown-font-weight);position:relative;vertical-align:top}.dropdown--hoverable:hover .dropdown__menu,.dropdown--show .dropdown__menu{opacity:1;pointer-events:all;transform:translateY(-1px);visibility:visible}.dropdown--right .dropdown__menu{left:inherit;right:0}.dropdown--nocaret .navbar__link:after{content:none!important}.dropdown__menu{background-color:var(--ifm-dropdown-background-color);border-radius:var(--ifm-global-radius);box-shadow:var(--ifm-global-shadow-md);left:0;max-height:80vh;min-width:10rem;opacity:0;overflow-y:auto;padding:.5rem;pointer-events:none;position:absolute;top:calc(100% - var(--ifm-navbar-item-padding-vertical) + .3rem);transform:translateY(-.625rem);transition-duration:var(--ifm-transition-fast);transition-property:opacity,transform,visibility;transition-timing-function:var(--ifm-transition-timing-default);visibility:hidden;z-index:var(--ifm-z-index-dropdown)}.menu__caret,.menu__link,.menu__list-item-collapsible{border-radius:.25rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.dropdown__link{border-radius:.25rem;color:var(--ifm-dropdown-link-color);display:block;font-size:.875rem;margin-top:.2rem;padding:.25rem .5rem;white-space:nowrap}.dropdown__link--active,.dropdown__link:hover{background-color:var(--ifm-dropdown-hover-background-color);color:var(--ifm-dropdown-link-color);text-decoration:none}.dropdown__link--active,.dropdown__link--active:hover{--ifm-dropdown-link-color:var(--ifm-link-color)}.dropdown>.navbar__link:after{border-color:currentcolor #0000;border-style:solid;border-width:.4em .4em 0;content:"";margin-left:.3em;position:relative;top:2px;transform:translateY(-50%)}.footer{background-color:var(--ifm-footer-background-color);color:var(--ifm-footer-color);padding:var(--ifm-footer-padding-vertical) var(--ifm-footer-padding-horizontal)}.footer--dark{--ifm-footer-background-color:#303846;--ifm-footer-color:var(--ifm-footer-link-color);--ifm-footer-link-color:var(--ifm-color-secondary);--ifm-footer-title-color:var(--ifm-color-white)}.footer__links{margin-bottom:1rem}.footer__link-item{color:var(--ifm-footer-link-color);line-height:2}.footer__link-item:hover{color:var(--ifm-footer-link-hover-color)}.footer__link-separator{margin:0 var(--ifm-footer-link-horizontal-spacing)}.footer__logo{margin-top:1rem;max-width:var(--ifm-footer-logo-max-width)}.footer__title{color:var(--ifm-footer-title-color);font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base);margin-bottom:var(--ifm-heading-margin-bottom)}.menu,.navbar__link{font-weight:var(--ifm-font-weight-semibold)}.docItemContainer_Djhp article>:first-child,.docItemContainer_Djhp header+*,.footer__item{margin-top:0}.admonitionContent_S0QG>:last-child,.collapsibleContent_i85q>:last-child,.footer__items,.searchResultItem_U687>h2,.tabItem_Ymn6>:last-child{margin-bottom:0}.codeBlockStandalone_MEMb,[type=checkbox]{padding:0}.hero{align-items:center;background-color:var(--ifm-hero-background-color);color:var(--ifm-hero-text-color);display:flex;padding:4rem 2rem}.hero--primary{--ifm-hero-background-color:var(--ifm-color-primary);--ifm-hero-text-color:var(--ifm-font-color-base-inverse)}.hero--dark{--ifm-hero-background-color:#303846;--ifm-hero-text-color:var(--ifm-color-white)}.hero__title{font-size:3rem}.hero__subtitle{font-size:1.5rem}.menu__list{margin:0;padding-left:0}.menu__caret,.menu__link{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu__list .menu__list{flex:0 0 100%;margin-top:.25rem;padding-left:var(--ifm-menu-link-padding-horizontal)}.menu__list-item:not(:first-child){margin-top:.25rem}.menu__list-item--collapsed .menu__list{height:0;overflow:hidden}.details_lb9f[data-collapsed=false].isBrowser_bmU9>summary:before,.details_lb9f[open]:not(.isBrowser_bmU9)>summary:before,.menu__list-item--collapsed .menu__caret:before,.menu__list-item--collapsed .menu__link--sublist:after{transform:rotate(90deg)}.menu__list-item-collapsible{display:flex;flex-wrap:wrap;position:relative}.menu__caret:hover,.menu__link:hover,.menu__list-item-collapsible--active,.menu__list-item-collapsible:hover{background:var(--ifm-menu-color-background-hover)}.menu__list-item-collapsible .menu__link--active,.menu__list-item-collapsible .menu__link:hover{background:none!important}.menu__caret,.menu__link{align-items:center;display:flex}.menu__link{color:var(--ifm-menu-color);flex:1;line-height:1.25}.menu__link:hover{color:var(--ifm-menu-color);text-decoration:none}.menu__caret:before,.menu__link--sublist-caret:after{height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast) linear;width:1.25rem;filter:var(--ifm-menu-link-sublist-icon-filter);content:""}.menu__link--sublist-caret:after{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem;margin-left:auto;min-width:1.25rem}.navbar__items--center .navbar__brand,body{margin:0}.menu__link--active,.menu__link--active:hover{color:var(--ifm-menu-color-active)}.navbar__brand,.navbar__link{color:var(--ifm-navbar-link-color)}.menu__link--active:not(.menu__link--sublist){background-color:var(--ifm-menu-color-background-active)}.menu__caret:before{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem}.navbar--dark,html[data-theme=dark]{--ifm-menu-link-sublist-icon-filter:invert(100%) sepia(94%) saturate(17%) hue-rotate(223deg) brightness(104%) contrast(98%)}.navbar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-navbar-shadow);height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar,.navbar>.container,.navbar>.container-fluid{display:flex}.navbar--fixed-top{position:sticky;top:0;z-index:var(--ifm-z-index-fixed)}.navbar-sidebar,.navbar-sidebar__backdrop{bottom:0;opacity:0;position:fixed;transition-duration:var(--ifm-transition-fast);transition-timing-function:ease-in-out;left:0;top:0;visibility:hidden}.navbar__inner{display:flex;flex-wrap:wrap;justify-content:space-between;width:100%}.navbar__brand{align-items:center;display:flex;margin-right:1rem;min-width:0}.navbar__brand:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.announcementBarContent_xLdY,.navbar__title{flex:1 1 auto}.navbar__toggle{display:none;margin-right:.5rem}.navbar__logo{flex:0 0 auto;height:2rem;margin-right:.5rem}.navbar__items{align-items:center;display:flex;flex:1;min-width:0}.navbar__items--center{flex:0 0 auto}.navbar__items--center+.navbar__items--right{flex:1}.navbar__items--right{flex:0 0 auto;justify-content:flex-end}.navbar__items--right>:last-child{padding-right:0}.navbar__item{display:inline-block;padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}#nprogress,.navbar__item.dropdown .navbar__link:not([href]){pointer-events:none}.navbar__link--active,.navbar__link:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.navbar--dark,.navbar--primary{--ifm-menu-color:var(--ifm-color-gray-300);--ifm-navbar-link-color:var(--ifm-color-gray-100);--ifm-navbar-search-input-background-color:#ffffff1a;--ifm-navbar-search-input-placeholder-color:#ffffff80;color:var(--ifm-color-white)}.navbar--dark{--ifm-navbar-background-color:#242526;--ifm-menu-color-background-active:#ffffff0d;--ifm-navbar-search-input-color:var(--ifm-color-white)}.navbar--primary{--ifm-navbar-background-color:var(--ifm-color-primary);--ifm-navbar-link-hover-color:var(--ifm-color-white);--ifm-menu-color-active:var(--ifm-color-white);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-500)}.navbar__search-input{-webkit-appearance:none;appearance:none;background:var(--ifm-navbar-search-input-background-color) var(--ifm-navbar-search-input-icon) no-repeat .75rem center/1rem 1rem;border:none;border-radius:2rem;color:var(--ifm-navbar-search-input-color);cursor:text;display:inline-block;font-size:.9rem;height:2rem;padding:0 .5rem 0 2.25rem;width:12.5rem}.navbar__search-input::placeholder{color:var(--ifm-navbar-search-input-placeholder-color)}.navbar-sidebar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-global-shadow-md);transform:translate3d(-100%,0,0);transition-property:opacity,visibility,transform;width:var(--ifm-navbar-sidebar-width)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar__items{transform:translateZ(0)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar--show .navbar-sidebar__backdrop{opacity:1;visibility:visible}.navbar-sidebar__backdrop{background-color:#0009;right:0;transition-property:opacity,visibility}.navbar-sidebar__brand{align-items:center;box-shadow:var(--ifm-navbar-shadow);display:flex;flex:1;height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar-sidebar__items{display:flex;height:calc(100% - var(--ifm-navbar-height));transition:transform var(--ifm-transition-fast) ease-in-out}.navbar-sidebar__items--show-secondary{transform:translate3d(calc((var(--ifm-navbar-sidebar-width))*-1),0,0)}.navbar-sidebar__item{flex-shrink:0;padding:.5rem;width:calc(var(--ifm-navbar-sidebar-width))}.navbar-sidebar__back{background:var(--ifm-menu-color-background-active);font-size:15px;font-weight:var(--ifm-button-font-weight);margin:0 0 .2rem -.5rem;padding:.6rem 1.5rem;position:relative;text-align:left;top:-.5rem;width:calc(100% + 1rem)}.navbar-sidebar__close{display:flex;margin-left:auto}.pagination{column-gap:var(--ifm-pagination-page-spacing);display:flex;font-size:var(--ifm-pagination-font-size);padding-left:0}.pagination--sm{--ifm-pagination-font-size:0.8rem;--ifm-pagination-padding-horizontal:0.8rem;--ifm-pagination-padding-vertical:0.2rem}.pagination--lg{--ifm-pagination-font-size:1.2rem;--ifm-pagination-padding-horizontal:1.2rem;--ifm-pagination-padding-vertical:0.3rem}.pagination__item{display:inline-flex}.pagination__item>span{padding:var(--ifm-pagination-padding-vertical)}.pagination__item--active .pagination__link{color:var(--ifm-pagination-color-active)}.pagination__item--active .pagination__link,.pagination__item:not(.pagination__item--active):hover .pagination__link{background:var(--ifm-pagination-item-active-background)}.pagination__item--disabled,.pagination__item[disabled]{opacity:.25;pointer-events:none}.pagination__link{border-radius:var(--ifm-pagination-border-radius);color:var(--ifm-font-color-base);display:inline-block;padding:var(--ifm-pagination-padding-vertical) var(--ifm-pagination-padding-horizontal);transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination__link:hover{text-decoration:none}.pagination-nav{grid-gap:var(--ifm-spacing-horizontal);display:grid;gap:var(--ifm-spacing-horizontal);grid-template-columns:repeat(2,1fr)}.pagination-nav__link{border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-pagination-nav-border-radius);display:block;height:100%;line-height:var(--ifm-heading-line-height);padding:var(--ifm-global-spacing);transition:border-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination-nav__link:hover{border-color:var(--ifm-pagination-nav-color-hover);text-decoration:none}.pagination-nav__link--next{grid-column:2/3;text-align:right}.pagination-nav__label{font-size:var(--ifm-h4-font-size);font-weight:var(--ifm-heading-font-weight);word-break:break-word}.pagination-nav__link--prev .pagination-nav__label:before{content:"« "}.pagination-nav__link--next .pagination-nav__label:after{content:" »"}.pagination-nav__sublabel{color:var(--ifm-color-content-secondary);font-size:var(--ifm-h5-font-size);font-weight:var(--ifm-font-weight-semibold);margin-bottom:.25rem}.pills__item,.tabs{font-weight:var(--ifm-font-weight-bold)}.pills{display:flex;gap:var(--ifm-pills-spacing);padding-left:0}.pills__item{border-radius:.5rem;cursor:pointer;display:inline-block;padding:.25rem 1rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs,:not(.containsTaskList_mC6p>li)>.containsTaskList_mC6p{padding-left:0}.pills__item--active{color:var(--ifm-pills-color-active)}.pills__item--active,.pills__item:not(.pills__item--active):hover{background:var(--ifm-pills-color-background-active)}.pills--block{justify-content:stretch}.pills--block .pills__item{flex-grow:1;text-align:center}.tabs{color:var(--ifm-tabs-color);display:flex;margin-bottom:0;overflow-x:auto}.tabs__item{border-bottom:3px solid #0000;border-radius:var(--ifm-global-radius);cursor:pointer;display:inline-flex;padding:var(--ifm-tabs-padding-vertical) var(--ifm-tabs-padding-horizontal);transition:background-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs__item--active{border-bottom-color:var(--ifm-tabs-color-active-border);border-bottom-left-radius:0;border-bottom-right-radius:0;color:var(--ifm-tabs-color-active)}.tabs__item:hover{background-color:var(--ifm-hover-overlay)}.tabs--block{justify-content:stretch}.tabs--block .tabs__item{flex-grow:1;justify-content:center}html[data-theme=dark]{--ifm-color-scheme:dark;--ifm-color-emphasis-0:var(--ifm-color-gray-1000);--ifm-color-emphasis-100:var(--ifm-color-gray-900);--ifm-color-emphasis-200:var(--ifm-color-gray-800);--ifm-color-emphasis-300:var(--ifm-color-gray-700);--ifm-color-emphasis-400:var(--ifm-color-gray-600);--ifm-color-emphasis-600:var(--ifm-color-gray-400);--ifm-color-emphasis-700:var(--ifm-color-gray-300);--ifm-color-emphasis-800:var(--ifm-color-gray-200);--ifm-color-emphasis-900:var(--ifm-color-gray-100);--ifm-color-emphasis-1000:var(--ifm-color-gray-0);--ifm-background-color:#1b1b1d;--ifm-background-surface-color:#242526;--ifm-hover-overlay:#ffffff0d;--ifm-color-content:#e3e3e3;--ifm-color-content-secondary:#fff;--ifm-breadcrumb-separator-filter:invert(64%) sepia(11%) saturate(0%) hue-rotate(149deg) brightness(99%) contrast(95%);--ifm-code-background:#ffffff1a;--ifm-scrollbar-track-background-color:#444;--ifm-scrollbar-thumb-background-color:#686868;--ifm-scrollbar-thumb-hover-background-color:#7a7a7a;--ifm-table-stripe-background:#ffffff12;--ifm-toc-border-color:var(--ifm-color-emphasis-200);--ifm-color-primary-contrast-background:#102445;--ifm-color-primary-contrast-foreground:#ebf2fc;--ifm-color-secondary-contrast-background:#474748;--ifm-color-secondary-contrast-foreground:#fdfdfe;--ifm-color-success-contrast-background:#003100;--ifm-color-success-contrast-foreground:#e6f6e6;--ifm-color-info-contrast-background:#193c47;--ifm-color-info-contrast-foreground:#eef9fd;--ifm-color-warning-contrast-background:#4d3800;--ifm-color-warning-contrast-foreground:#fff8e6;--ifm-color-danger-contrast-background:#4b1113;--ifm-color-danger-contrast-foreground:#ffebec}#nprogress .bar{background:var(--docusaurus-progress-bar-color);height:2px;left:0;position:fixed;top:0;width:100%;z-index:1031}#nprogress .peg{box-shadow:0 0 10px var(--docusaurus-progress-bar-color),0 0 5px var(--docusaurus-progress-bar-color);height:100%;opacity:1;position:absolute;right:0;transform:rotate(3deg) translateY(-4px);width:100px}@font-face{font-family:Poppins;font-style:normal;font-weight:400;src:local(""),url(/assets/fonts/poppins-regular-f61407da33b59324fbefe468ce6917ab.woff) format("woff2"),url(data:font/woff2;base64,d09GMgABAAAAAB7MAAwAAAAAP6AAAB54AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGx4cLgZgAIFUCudM0jYLgzYAATYCJAOGaAQgBYNcB4QLG34ysyLYOAAgoXcUUbVZLPs/JHBDBr6G+hIpYlQoaayFQFiGbR8DjCviFJxE41HqT/OOXC0/Z9GQVQfAWhGOAF/O89SlbJ4fIclsS0SNUfbMPgE5dhgAVqioPNrYqNhUZCQIRaCBLIK83W+vy6VjrXTMAYfFIfS65yPR0ziMQaj0M56vY3h+bj1EaSMJC9jIVbCMv+2vgv0FSxg1alhIGl2gBxecx4xqvCi9NvP2XXsT27xJRGharfanif3dB1IbH7D/n1vvG1gi90J+0acoU3UyzKzznZ8Q8S/KSQdFE/HKrFSrbCW+EZMGJ/JOrWFOCzJcLDcqMIye7xUDVgJSUf//a37amcAiFDGyIExnC3pkybH+6s19gXl5eXMmRB9Ln2eT0vLklZIpALkqpMkyJiUkt25tgVyFkF8WZYV0VRkTScF3O1cffLfDNqsTWFV2rwUPIfjECpG7lz5AAVbIGyfmmutgE0hgB8wJNaQ30lgYP+3xQCMZjDoEDzyVUi580bg7SwwCfbU2wM1JQR5DDgSJxZ7llnqObrxHpgXHgAOb7RkL2/gXhVu/D4DXAHqoBwD7DAQKDGCTWIoEB7JEnap7PP3Aas/+DynGHuqZ3u8P+0ZRlopUoQZt6CZzX2tbJVpJTFb5OJJs6W/YeiSlKS9d/6ya+d/8fZ6YS2ftgn326bdP//3yrm98rcc+6yxV+PO3P/P9e2I8D/za2srbgL+A1V8AG18HMDYA+dea0d4dnI0DUjAxhECe4VuLDc7VmwqwYTiuFzfuViWi6aNC0Z4wRhGs1DQggom7F3EXA3Uj7WxnxPmMGXjAq72EYaM9d+AG6ziGD0E2Ej5mwCsAOBXGWG1AYIJtCLwQDEeD1BqU5mmQH15SfTnMYUKO6QE/4F8j1ltms2QsVoSSz4WUYkelXQ/7kGlFRAxAW5s6qQqGsbVQl+8GCZsOFLXw0ul+mnssHngMiMV+wiHwzdVDGrfpDWLDkN8ewxN6ZRvyKaQ6K04Nqc6B6o8yc2SW7XOOuk1FcKA/XlsYa6voyRGelb8acI8ZbnoE+I9bLYFYSdUlo6Miyo+OYJqnPAsyYlzDkHe2VlOgYQcrDqbWBQEPfr7lShm/dUdxu7Up8/IxDbSiNG8zdthTYufBq+u76tI1uHc3vs7tLencpdyDGVdkPq4cQvLkEMhSXsY0J+4dQu0yRz7TZW7mccfhw18fQHPvvAbszInsG2aKiyHGmqz3Yvm3u8vmFpjxaPQezfuYJlpv3PN2ELEgVO3vPWKl2Ow/IpRJqDdPE8JqY3cYGuq1ECiB1yW0RVSa66GOdCXTLnh+xxeZ2xOqquVBgJFiAV77CqaFeYl2Q3S3BeKrdnAR3ZBPYM8o7ibQuBGK9xO3wKqYDmUkxZX+YNiXA09cBmjYPgA3eC8JPjEQxkjfWNFnGY2x+ej0ZGhv9VXwYAX9XZ1h53rzljTYf774b0vaBdtfcXWQxtyLpkaMb6v1GUsdrpV5ajkXRww17Pu1Ak3yTzYCGLr8Iara73lF7Cb+vtFNzajk4iaA8ltEQiOf66wxQAem4oXOWNTna0SswZSLr69zS/jeLLVejEOPPrPCBwhciHFchPFxIsHeTycPj9TzLzASCiQQ3wskAX5KdXKVa1sfQ/sqkMZ64u7bhwtw/U8GOoEbFSSWFLQnxd1WqtNBLxi8rBazf8BSfI/jBekq6kcBa1EXlt6oSzrtaXe+aXn1zDSw+t2F0YBoSCOqvK6Ty82lpKxNRobfRmluFw/KDLgqURpESW0OWpuaXaHkb7VmE8MOcR+a/dhsTsOYCArwsIQcjWl06SjVvNzhISxlLRqvol7V9Uvp5h+XUC6iUmapwuGiAxeC1khAQZdBxgFmUTC3Z4yjPVCczdRKlpb1KicmRnbBwTOOKbXkmmPFA5OJDMkKWz+t9i6mbI/as3b5+7k73N1wNPu9xjdrpg+sMm01qiKDGA5cKAYnIcm+Qfh+uhwzPoM6yGjV7B60MOvA1XEKSqIe0eUd09HDQqAknanN3NpKivMX9BiYBbda9g9oXcV/PqUdinIHcm/0xF16f7v01DQjzirvp4PZFBDVvuQsuKo43h6x4onbhb8L/aorsWA7vreavOxZrXrFsTJEMSfmbtxnkGGNSLjUx4n7KqyizvGq3pG6UbpMYLQKzia0LJaGR1CpXzjijsrdmFQNi3l3ZYBXuX+Llw+XK27BoJFUN5uJGbP5AMzwbSAAsF0Rv6p1ZltdaUBWVzRXCpFiUgwe6Baj927ntwXVUyMpM/vud4ksUyM6kqSZVDs0S3iuldjWchysX2vbV4o/Pz8amoTijmvhaPWLd9VIgu1A/oldyDH0JWVzJzxjd0w6fMbXH0zOZ8+5usPgm5jaIvuHGYtiiiYCEnuoL1AdNtUB41RrTZ7Prwsb3D4W0uh3f+8i9Y0bosq9ebt7S1nLbRmg04XpC671CTyK/OjbeAPmgF2YeccypeMa1gKZ9E8jw7TT55F7FR2oTczlzcGotU+MVuoqoXw1TPk9a1bQ3tfBEjN7MCtjyfklpqmKJbbc34qhy8Q7eToWpjQGEGGJrZnakycxfRbZY43YyZIvHGjmrkwH3GX9ieY2bjaGtjSmpnJoafqeSCs7vP/AmRVQ5uYueAgyd/6U8/Ce98r/4CsiEQrURcQ8yxIrH6kYK037PryUXX1DSGoin9hSaDQjFAbj+CSei/XKrsvfazl9OA8ULAsnF+SYtWHLOyPlaySB9McWn9vqi5Rydc4BO8Wx7X4x481Yc106vl4c+4xeZM3i0C7U4fBplHqWdJI9w+dIizb5C8c3+c+W/s1fAWyvmjjcoH8R8PSKF/buAQYf8Vni2k1zcVt5+eRRTQvCvnyhGrvdSHxMpO0f+ipWFcWyWH3YgmF3OGGrEXByld91/lvL+Y5FK7ufR6crNdA/dFvx3trsWXx1L772EFa64hj34WLmJ78Qxmfiq3ku6j9tjemYFnMBbJS2VsycEIoo1+qL53Lh/wMrVnnuOnTikosR+44dGJUxlM41kdlU4FBuwQ31zIAn1EjHa7nrvNj5pOtpV0HbfVdql/aCfyuO6xX04YiLwnDUwrSZlLWD5ZDYebCxYV9c+xxqTqCguAXT+t+Kts5OICnYBGqxYfM2RfN3UMFKB0aj7MClv7cY2Vv0Qy834/a5ps7PZzGMEF78qaPzfxjAib6kF/C4RcYRSkaGno7qZohKB/HLxyWd4Sef+fFgBxou5nwzT7e+8KwV9AakNuq6Xfl63b7m+boXN6rX5w0wZBHB4mAKYvV0vT2+1g/UHmZV6nvRMD2KqRLoa0LOQUa60RRX6opXeUSMPS+FwwzZDJUwMmp5zZ/Ue5QfD3CEeFJv+D9QUK/XCQR6nUSaGKTyuSui9n1+07HVeHw4O7sGh2/O/u9whaDLSnT6BoZqRzMe1zw4mt9WwG9H0PVkBVRN4bgFCkO1buKro7lYrMyYV0TXFuQpxyMJn3PzU1AT4suuXhsrrvXqFw4u2bBhvtBSUHHpcguxnG1SS0D8N+OSz/BTzoA7SHnWnn01hWUl7sRwWU3u5vXl6cFQohsQoomCHn39Zh/FkI1yKK/v2/PtN+Z2gvaNKME85nxGjmiydegq1ZBVk2254nnMeUVo0TTb0NXwsNXAJLt9z3zvlvpWv7n/NuiaHk7hQilAO0gac88Y2T0cbbMPH2UD3HHhYwvms8e+nvDx+Qt22LPBMmayTCGWINnAah8zRZeIgfBHzw5yWoyHbjpawVfdi9u9i6RCnlImUZoGyGyx4ZYpgdLJtX6jd8P0Ro/GBv8qBKLJLaVBiZdINtJ4suIFgwRDVU6YSbGXUhTls6vjA7YKo0omgyCWyicMpMJpCHCyeDQJX8BT8QPFIG+L1PWw6ge/1r/VvjX2YkrTYJDU4X4QLs6nGksl2EouRKutFhpCbRWDi4vPGfkCrdal0WhNGpqGPNay5htwYGV9sXUO2OArZ4lKp7bUSqgV5Xy4tB7BbZ0UBt5wKFFn+nqFKhsvo8BWl0FmsCg1WpsavJ8/er4jvb1dcx/MXcg2cug0SzkZhrFUdAudxbWYbkAusZBf0kCF4Toq7IRiufv6kLtaoUyKufMYBrFIbJAwfj7hlEgFdvX6yixWC8SITAUOzYG4PKOmLWYt7CFzxGV0dkhVMa29bkHNt73N2O3lZmewtireZLq61GyQq4wILDNYIYXeqgGS2U8fPn1Q/+zBs4eg8n91VMffGbLAaciS+u474Tk+JewKtfnDA1za2I3jfWG2kSOXcnkyEcvCodm9JKHtrOj7sJ7W7UbrKp+WssRbLCLrWf+4SDTY4tCqeG1hjdydKf9CS8rMHsah5bNU4+sYHRsWL550pK7i7BTQsXnRIpc867ANXVGxTWdb5V/Y9tcfM5dIBCoqxk6nMgRUIsTIc5BpTgr4ax2xaF3Jh97Q+94S/YPp7ulucLXkV7SikEYzBYmygdH3ch+epCXzRDpPDHqtQMqm0bhZtPpB9lQ7k6UViTe93goKTyDbNiGeus6qXH/VlUoxrKgXC5tMRiD5V6SAK0VXqnJ9nZV1nk12ZGsQrO7bZbJtrKiwbdhlqOuP9s+qWriorX3R0lnN6Gawu/rvz6rPT8epJh2YpAJ3+pSEf18rX7OQKHA8vlQlUigaRKImg0E0rUGkCHZMSSodo5wkizcji1YaHJ7NdsfWYNCxbbPdE+6qyvWBQF8U4fg4SBQh+8hgd18UiYK9fbGWUNBqC5UhyAAChTKOEAvOTuDykCginiiqZzt4CNiteKnURhFAGtDbiwx8GCv4Y+AgpNf7P3uy1SJVhRjkAFJVUIiAvLjNdse24VQvbYBsLS1FNDcvpGkQi6YbTaKmerFSCQTdZLSR/z2sABNWNtZNnYVCor82Tq2172iWC7ltK2aBWWBax7x5OJqns0n91s0wrqc7tJDVWsHz7QoO7RxXPR6J/qqtpNEQNmSoMgzvRrUGZikVEJcHiVWzwIO4SiLXkuARyEQSoVJAyf9KmN4sGW5AsWAhk2ktI0i8TZ54nV+u4HCZchYtt+evxZIRRjQbFlFoxaEiCLzrUx4JI+GjSrCzL+q0F+t1bOeMIn1WaWMjU6lUNpJGax9Y0BfXFzIpz32beToBe1n0fF9wK3E30Q9ORD2rNbs1wc3wGhiEkNtI6a6hm4YGbiG3HcHdwzYPCwJq329fxSPxv38V2Fui6gVrNSbtMUifpdEegMDI5btU7vNuuLcEHOwcucJmp3aQFe2FA0+7qhe073H9k2z+N9n97XrQlGMaZQIPl0hu1WpBYam4uVGqgELcTX4H2hHsKefJFRG5uM14lUNCTEQKxUiQdh6f5DA+yEZUJw+cfFzBlSojUnGzyShua5Qr5OXcngDyAMmtr/ieIlDIX5rJDi6PFY0jyh+i5slSTaDdM8riva5jcjTucq/PXaHhaIt+9442dvh9mlxe3GKZTFWloIp1NdvxwFG6JaR2R+OrSZCC3T9Q57dDbA39k3e0psPr1UyVSlvNZnHLVIlOM0ksaFQ5ZTilJpcoLbHGqe0Ac6++H+mXq+R5DpcpBHOG0PPqQQRbjsGqE1X8hkahtnJxIMVq/9XJEalcTnN9T4g/CmrC6xxd/H4s63gdzkdlhGCxnW7QW+SQqdhCQB4gQzpdODbwNO1eE2BsaAQNfE0v/+uyYF8oFGI5TZ2b+wi9FgEtd549/5/dNzeet8QMGzAC7P6dJnsAyAPwPiqT+63qLFK50W7B369lBI1ou+y4ImmIuz4U4gvBQdy0yXVjQdml0nQ6cAzwOKFJKms1m6DW6RKNhmuAWsxmZWuLVEPUmnFURCSiIEYsiWzAkp4NxERE3wpOPCqXhkn0qsy+U4+EkHwkUF8JIFBV/ukLsdDvyHeENlbwISgCfcPRdzaKwJW2dlchgkaKwdUEXyETznIxJBQG9TAK/Vw07CqcSRfQCklSJJ+NhJFYLVL4O420NntstuS/HsUEdQyOJLfns8HBe+L8YYVitQFWSXViuUo+D5m3WAXIKDSiX+vAMwQBKisEC+00vd4iVxiLLTiQZuy86rmDKt9tvIBch+5CuTq+Nv8bdO1FOadfnH3ROePStEugou1i00X3l0O/HFnadmHaBXfPkC9HATRq1PZcV0X8D+MDew92HgRLlINVEVXiogRlrRKUrQmMsOQmIokeLKRTSVjagjxD/vh405BEN5ZGlVUMqKDKadhE95B40/h8Q16BliXRqSBsoicRybUERoAjIWQmAj7z2B3y3Sq7r3LAm1s/dtvW5kfDM0RcSdrSSEbt8eafRmYYuGLQTVFJmqGedRVcgJNeeEGzFqZvMScoajyWOBfdVZEwaUFFBTcnOOgOD0VexgmQ+aiqiAu7SiwWlxsGmQr4yItN+WZ+RketADnxU66A7vJSBMGqSGyxKUMk57MgsSzr/t0Tgu6ODLcMBoc5n7rmHnzE4uzrWtv1I4f38eLaS/vY7EOXTJ3J/DmRI0VFPZjCRQzGdAxY1TxXtC9me9458bmNyMbDLu+bvTGiuTuYwS739vwEQZx4LDIVsSch0xAQlS8mYIhyRwHP0WCJUSOc3Ux6Fyb9lDjzZSDLa5QxZBbRiPxF9RvyHfXWAZg9Iw4UZGyZ9dKf6atVahaP+lCrF0rFGhGRrOdLJBohEdCqHo0Z83jM6Me0waPRC35Uf2rhaDMGPDu60W7ZUlrKSPRAEMSqRevcg468uRrFQpdTsWiu1umYoyXd6bLt5mgcXIO3iFkmk2lbL4OjqtKNFJvGG5ArZdbqUBMH+/6saYSsSg2DTClGr8ISCCL0YC7kgjgf+7njiTAeY6ApmXwxgcgXMZmwIRL4QiZYMMndXY8o9naPQFzdQfv30gBnzy1kwX0IMI4jVIqDxaI4JcxiT6JTcBjZ8hobolBwClJYCODpLN7faiky/ELQDtdR75Zkd0xsTCtI/jc5+Z/kAlBzSlIiAWPtXrdG43FraTitDkPRlJToUhksAQ6rloLJXoTDHWWBtsn7b6o/qW/vv61SXeYu3deCzHXsGGqlNSlz/NjLqWldeYoJYjabKeHjcw/EaorAxEUQncVQsTETUr8bEFVOKICLuByoiAyxEseOS05Lw4zDEAvGp6elfhyX8adYCh4euVUrudUEilBoxL/SRefmi8YLWPZ8O9ZqQuRyQ7GFAOL0Veoq/YTkyKSw3T65tuE9+I4hpRAJ4iJ6PduT9Xta6u9Z5ClcIUibzWgugfJBppSgN2GpNCOWDHQa0WDCYaABt6J5TIEQT+AJ2SyugIAXCplgRa63u3i182O6PfcxkMPj3n1BikQtkejuBqIUkn5XuPGZ5xEx0l3dHQbFs+m1d/624sqotSp6sWU99kDMHISWGVFzR3RVA2FAF+GMPozjOVdbz/ra9wpgap98lH18lQFF1idb1vnmRXughsXLf1sGbkDh6u1GIasq/PG0Let451bZBy1zGDd4gwHvGUFngFtXbT/JarJS+2fWLVzW3r5w6azmf46Zjv3bDH5ZuWlVDzYt69ev2wD1ICbfuAks1HXjmqAQcub8mtyTPLGyJLQZP00eEPqykwfP0eXVi8UMTwDYEVNOg8KnXu8wAyYM9DELliEHkKWzrj5wO9sgCZcHSVWz4mYB9sLGhgapF0dWYYkE0bJdTcPG/CwYDaUKYTbktxVbq9xxRkdmJ5mQnoc+6NFlSNh4lFEwIXkcTkLmLF6Si5CA8FkK46ScptHmYQVG+o/e0ZoWr1tcwz1Vrg3dqOBJPYnaJc2TpLC4jDEwAAdkVfPgBgm/EXIK8LAunwSVIXGalj5yhtY8J5kBtWLf6YaMVDd4rXFkEdw5FZK4EMSaqjV7Xr+bwPj+WEi+pFmh1zbJJO1mo7R5ihSexEUmuiRwG4bsnPi51VlnbsdQnBMRrYlAdgqFJKcRTyYb8ES7UERw6YlkQI1XqGv/WKf+rP6DmTsyGH7zZbaH5VPMzKOgbxTKNa+yvexwY6YBBaNHeMOJTkS9lfkYqTCc+co+FJFCj+sAx/8sl0CBxucJCsk6m5C/EGq98xDZjfKplvpB+yf5p5djocbFufI5aptrgx3ZFixFtsoinLa5qlzZ/Eb5WEdQNO2XhRHTDAat4Wen2QLB9RRGb6ze7VBwwsmP41M2yJ5MnCpTaaaFS7UpJ0uHfI5IYU2jWBhRbn5gxlOcIhHZYcKRSAYmjulpcOjxpDoUTqPJJ8pLkIF6O1jfOc8EzTPMNUDgwepzeFw/gdCPw58jKh6npj5OT38yLc2TdJC6VJo/ch+m3z54eARN1ZtfG1wa966glkAODRSvUA9RA/LSleof1WD67aD7NyGw9wWGDQWAWceEBWcM/lYc/eG3eBCjLvTzScHaGzIZhfq2oVxGpZRYDvO2ZgBvoyuiyP5uBMNUlcJLlTm+zsraxm/asio9AmNBRnqekV8yGiqpnsXR1nZW5fgrL1cIYVOTOUP1H/9jXvp4+gfBv+MUTQY9SDv6nGHOh0Ce5WBRiRh8rvxMqRgQKypxViaFk8D9FerF6lMIqMvvwAHDAUtvWvKWPFZmnZYvDBDaDlS4PB2b3Z+c6F7tsqUpKcvFfrnlC7nx7eize858uTZVynLhG214nVi5nq+lLJf582gzf2KkSTkPOckX1IkHKcvFU7nlr9HGk0oGJlKGlFHJQIFxqJxbRAkZaLoCpKQsF9/JLT1yY//os34nJNe+lrJcrB9trBVPXKH0/5e7YBn5YZD5nukn49zEDFg0HRIfSVkudsotG0cbO5gNhEMBkDJwCABmEQFzULGVBE9QeGFk/XUdNNzBZGAmCcWXYvQwLy8Bz4Vxusj/33zzkJJ5CbAC5XxWws73djVb6qx1qqiyb4uQVJ1ZLgvoK2Nz4m5zF7vLGnaCGsh7Y7O7zVgmHvgWfgjPp1AX5wbOV2LAiI/9/CiGme/6J3iJqy0AI8uoRBsH3G0InSOBnmW9hje1jiFkaJ+6z7G7xEliQpoAGdqn7O7UtSHgXQLKeUEBALvA8yLMY3QytG/cVxvyE2i+LWUMGdqnxrtSFhaao72g2IWZueNYo7J7zjpeI9q0ZOvoFgMsypIrnzV/G63l/JcQO34E+PLN5QDwzRb636dHn04lxS86rpkMNSMEv1uqL3+UGfCuGnKlz7mv8xLiWflW7wm2oKEGJKvVOH2jsL/LsRkqZ1SqRzYrf+B2L6sz83PzsNyAzQ9obcCLQG75KFUjNSJ/Sis6Da+cbFmdhNNGCrdhkyBVDFNvCnQsV1PUxytQt8lqgHoM1O1J6sa4zVvqkaTbXmqvscUIBbWG82WMOG1yVMiIHBFDHCWU1FUVZsfL7naq7jBmXJPaKrhCRsYmxGe3mV2mA9WrG5HTH4USI/KNYDirrpsgCJVtUUg90tahi3nezoeNhbR6URxo6xtmAZoBidTRJMNUymgrqCQp44yU/GBwT0u1DxXkilBQ/KpH0nh13OfbtYSthG06fo3S65e7fPiwpI40pJyQlctwnacAnoN8Qk2H4VlnXLvZojQhsFRvDO9M6ppMdAshwwx3Snp6WedPbqvcbofuaajGG2B+nG9tY4YUOThjArCJ1+IHzqc9r3pbogy40NIOpUJRcjATAJBXaztxMDvOaMAiBY4sKoE/dGMzjAz4JLuUZqkIEgjkAPKCBMtx6XgwixgwvpeZIsO9MDQPomp3gkcE7HtpvMNMB+bnNElDz8C4qm1grBQ2aXCYPzmPJY6T0sdgmeaBz4sXQAzwtZVSsDgKKooDHgcMCCxzL5ZatBx4wy2yrRIkIrq/trXZadrWrsi1rYPXHXHG3HQSHNuBpzVsnjXqsRAUafepE/JIwzMSr55UEglHSGluQi0ZmE642bJGSHU7jkFgJJFPxFM3jAqPiIg6rswvgoKJjBZbJkCtmeNFeDHueYxUnKJTlkBLF4d0loz4ls5k8qwDg0Ga1BEpj1MfdVooIrRs0VBnnY9TtlToIR3hHYt9wqoQ8iT4TBhRza/OFHCGaSswwPN+zneQTf01kGaw/WXSf3LcPLx8/AKCQsKGG2GkUUYbI1WadBnGGme8CSbKlCUbClqOXHnyFSiEgYWDR0BEQkZBRUNXhIGJhY2Di4dPQEhETEJKRg6ioKQCU9PQ0tEzMDIxs7CyKWaHcHBycSvhyUCfZpjpsFX+Mssi823UaUcGeXNfh+Wee2Fh4rw46SfPbNLllZde2+YL553VzctnCb+LAs654KpLLrvib0E3XXNdj1JPLXXHLbeV+dcjc5ULqVClUrUtwmrVqFMvokGjSf4x2VRTTDNdkz5btWjWqs1/Hjvgri99lXgXP+r3tW/s951Ten3rtNn2OuKoQ0nw4UkSF912LwwPEN8VH3kmRCReEROXZPA1rZV8LR74/5ThpJVMHs8BAAAA) format("woff"),}@font-face{font-family:Roboto;font-style:normal;font-weight:400;src:local(""),url(/assets/fonts/roboto-mono-regular-498042b7fe9cd07b4fd11a0965093e55.woff) format("woff2"),url(/assets/fonts/roboto-mono-regular-535bc89d4af715503b01afd761501e58.woff2) format("woff"),}@font-face{font-family:Lato;font-style:normal;font-weight:400;src:local(""),url(/assets/fonts/lato-regular-292725486219768e62259f7286dc73cc.woff) format("woff2"),url(/assets/fonts/lato-regular-be36596da218e1eec01c5c600b1c13ef.woff2) format("woff"),}[data-theme=dark]{--ifm-color-primary:#ffc61c;--ifm-color-primary-dark:#ffbf00;--ifm-color-primary-darker:#f1b400;--ifm-color-primary-darkest:#c69400;--ifm-color-primary-light:#ffcd38;--ifm-color-primary-lighter:#ffd146;--ifm-color-primary-lightest:#ffdb71;--ifm-color-secondary-dark:#054a6e;--ifm-color-secondary:#06527a;--ifm-color-secondary-light:#075a86;--light:#33313b;--dark:#f3f3f3}[data-theme=dark] .footer--dark{background-color:var(--light);color:var(--ifm-color-primary)}body{font-family:Lato,sans-serif}h1,h2,h3,h4,h5,h6{font-family:Poppins,sans-serif}code{font-family:Roboto Mono,monospace}.navbar__brand{height:40px}.btn.navbar__github{background-color:#384745;border:2px solid #384745;border-radius:3px;box-shadow:inset 0 1px #ffffff26,0 1px 1px #00000014;color:#fff!important;font-family:poppins,sans-serif;font-size:1rem;font-weight:400;line-height:1.66;padding:8px 20px 7px 47px;position:relative;text-align:center;text-decoration:none;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-user-select:none;user-select:none}.clear-btn{padding:100px}a.btn.navbar__github:hover{background-color:#273230;border-color:#222a29;color:#fff}a.btn.navbar__github:before{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20.5 20'%3E%3Cpath fill='%23fff' d='M10.3 0C4.6 0 0 4.6 0 10.3c0 4.4 2.8 8.3 7 9.7.5.1.7-.2.7-.5v-1.9c-2.6.5-3.2-.6-3.4-1.2-.2-.6-.6-1.1-1-1.5-.4-.2-.9-.7 0-.7.7.1 1.3.5 1.6 1 .6 1.1 1.9 1.4 3 .8 0-.5.3-1 .7-1.4-2.3-.3-4.7-1.1-4.7-5.1 0-1 .4-2 1.1-2.8-.5-.6-.5-1.6-.1-2.5 0 0 .9-.3 2.8 1.1 1.7-.5 3.4-.5 5.1 0 2-1.3 2.8-1.1 2.8-1.1.4.9.5 1.9.2 2.8.7.7 1.1 1.7 1.1 2.8 0 3.9-2.4 4.8-4.7 5.1.5.5.7 1.2.7 1.9v2.8c0 .3.2.6.7.5 5.4-1.8 8.3-7.6 6.5-13C18.6 2.8 14.7 0 10.3 0z'/%3E%3C/svg%3E");content:"";height:20px;left:15px;position:absolute;top:10px;width:20px}.header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat;content:"";display:flex;height:24px;width:24px}[data-theme=dark] .header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath fill='%23fff' d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat}.docusaurus-highlight-code-line{background-color:#484d5b;display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}body:not(.navigation-with-keyboard) :not(input):focus{outline:0}#__docusaurus-base-url-issue-banner-container,.hideAction_vcyE>svg,.themedImage_ToTc,[data-theme=dark] .lightToggleIcon_pyhR,[data-theme=light] .darkToggleIcon_wfgR,html[data-announcement-bar-initially-dismissed=true] .announcementBar_mb4j{display:none}.skipToContent_fXgn{background-color:var(--ifm-background-surface-color);color:var(--ifm-color-emphasis-900);left:100%;padding:calc(var(--ifm-global-spacing)/2) var(--ifm-global-spacing);position:fixed;top:1rem;z-index:calc(var(--ifm-z-index-fixed) + 1)}.skipToContent_fXgn:focus{box-shadow:var(--ifm-global-shadow-md);left:1rem}.closeButton_CVFx{line-height:0;padding:0}.content_knG7{font-size:85%;padding:5px 0;text-align:center}.content_knG7 a{color:inherit}.announcementBar_mb4j{align-items:center;background-color:var(--ifm-color-white);border-bottom:1px solid var(--ifm-color-emphasis-100);color:var(--ifm-color-black);display:flex;height:var(--docusaurus-announcement-bar-height)}.announcementBarPlaceholder_vyr4{flex:0 0 10px}.announcementBarClose_gvF7{align-self:stretch;flex:0 0 30px}.toggle_vylO{height:2rem;width:2rem}.toggleButton_gllP{align-items:center;border-radius:50%;display:flex;height:100%;justify-content:center;transition:background var(--ifm-transition-fast);width:100%}.toggleButton_gllP:hover{background:var(--ifm-color-emphasis-200)}.toggleButtonDisabled_aARS{cursor:not-allowed}.darkNavbarColorModeToggle_X3D1:hover{background:var(--ifm-color-gray-800)}[data-theme=dark] .themedImage--dark_i4oU,[data-theme=light] .themedImage--light_HNdA{display:initial}.iconExternalLink_nPIU{margin-left:.3rem}.iconLanguage_nlXk{margin-right:5px;vertical-align:text-bottom}.searchBar_RVTs .dropdownMenu_qbY6{background:var(--search-local-modal-background,#f5f6f7);border-radius:6px;box-shadow:var(--search-local-modal-shadow,inset 1px 1px 0 0 #ffffff80,0 3px 8px 0 #555a64);left:auto!important;margin-top:8px;padding:var(--search-local-spacing,12px);position:relative;right:0!important;width:var(--search-local-modal-width,560px)}html[data-theme=dark] .searchBar_RVTs .dropdownMenu_qbY6{background:var(--search-local-modal-background,var(--ifm-background-color));box-shadow:var(--search-local-modal-shadow,inset 1px 1px 0 0 #2c2e40,0 3px 8px 0 #000309)}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2{align-items:center;background:var(--search-local-hit-background,#fff);border-radius:4px;box-shadow:var(--search-local-hit-shadow,0 1px 3px 0 #d4d9e1);color:var(--search-local-hit-color,#444950);cursor:pointer;display:flex;flex-direction:row;height:var(--search-local-hit-height,56px);padding:0 var(--search-local-spacing,12px);width:100%}.hitTree_kk6K,.noResults_l6Q3{align-items:center;display:flex}html[data-theme=dark] .dropdownMenu_qbY6 .suggestion_fB_2{background:var(--search-local-hit-background,var(--ifm-color-emphasis-100));box-shadow:var(--search-local-hit-shadow,none);color:var(--search-local-hit-color,var(--ifm-font-color-base))}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2:not(:last-child){margin-bottom:4px}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2.cursor_eG29{background-color:var(--search-local-highlight-color,var(--ifm-color-primary))}.hitFooter_E9YW a,.hitIcon_a7Zy,.hitPath_ieM4,.hitTree_kk6K,.noResultsIcon_EBY5{color:var(--search-local-muted-color,#969faf)}html[data-theme=dark] .hitIcon_a7Zy,html[data-theme=dark] .hitPath_ieM4,html[data-theme=dark] .hitTree_kk6K,html[data-theme=dark] .noResultsIcon_EBY5{color:var(--search-local-muted-color,var(--ifm-color-secondary-darkest))}.hitTree_kk6K>svg{height:var(--search-local-hit-height,56px);opacity:.5;width:24px}.hitIcon_a7Zy,.hitTree_kk6K>svg{stroke-width:var(--search-local-icon-stroke-width,1.4)}.hitAction_NqkB,.hitIcon_a7Zy{height:20px;width:20px}.hitWrapper_sAK8{display:flex;flex:1 1 auto;flex-direction:column;font-weight:500;justify-content:center;margin:0 8px;overflow-x:hidden;width:80%}.hitWrapper_sAK8 mark{background:none;color:var(--search-local-highlight-color,var(--ifm-color-primary))}.hitTitle_vyVt{font-size:.9em}.hitPath_ieM4{font-size:.75em}.hitPath_ieM4,.hitTitle_vyVt{overflow-x:hidden;text-overflow:ellipsis;white-space:nowrap}.noResults_l6Q3{flex-direction:column;justify-content:center;padding:var(--search-local-spacing,12px) 0}.noResultsIcon_EBY5{margin-bottom:var(--search-local-spacing,12px)}.hitFooter_E9YW{font-size:.85em;margin-top:var(--search-local-spacing,12px);text-align:center}.cursor_eG29 .hideAction_vcyE>svg,.tocCollapsibleContent_vkbj a{display:block}.suggestion_fB_2.cursor_eG29,.suggestion_fB_2.cursor_eG29 .hitIcon_a7Zy,.suggestion_fB_2.cursor_eG29 .hitPath_ieM4,.suggestion_fB_2.cursor_eG29 .hitTree_kk6K,.suggestion_fB_2.cursor_eG29 mark{color:var(--search-local-hit-active-color,var(--ifm-color-white))!important}.searchBarContainer_NW3z{margin-left:16px}.searchBarContainer_NW3z .searchBarLoadingRing_YnHq{display:none;left:10px;position:absolute;top:6px}.searchBarContainer_NW3z .searchClearButton_qk4g{background:none;border:none;line-height:1rem;padding:0;position:absolute;right:.8rem;top:50%;transform:translateY(-50%)}.navbar__search{position:relative}.searchIndexLoading_EJ1f .navbar__search-input{background-image:none}.searchHintContainer_Pkmr{align-items:center;display:flex;gap:4px;height:100%;justify-content:center;pointer-events:none;position:absolute;right:10px;top:0}.searchHint_iIMx{background-color:var(--ifm-navbar-search-input-background-color);border:1px solid var(--ifm-color-emphasis-500);box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-500);color:var(--ifm-navbar-search-input-placeholder-color)}.loadingRing_RJI3{display:inline-block;height:20px;opacity:var(--search-local-loading-icon-opacity,.5);position:relative;width:20px}.loadingRing_RJI3 div{animation:1.2s cubic-bezier(.5,0,.5,1) infinite a;border:2px solid var(--search-load-loading-icon-color,var(--ifm-navbar-search-input-color));border-color:var(--search-load-loading-icon-color,var(--ifm-navbar-search-input-color)) #0000 #0000 #0000;border-radius:50%;display:block;height:16px;margin:2px;position:absolute;width:16px}.loadingRing_RJI3 div:first-child{animation-delay:-.45s}.loadingRing_RJI3 div:nth-child(2){animation-delay:-.3s}.loadingRing_RJI3 div:nth-child(3){animation-delay:-.15s}@keyframes a{0%{transform:rotate(0)}to{transform:rotate(1turn)}}.navbarHideable_m1mJ{transition:transform var(--ifm-transition-fast) ease}.navbarHidden_jGov{transform:translate3d(0,calc(-100% - 2px),0)}.errorBoundaryError_a6uf{color:red;white-space:pre-wrap}.footerLogoLink_BH7S{opacity:.5;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.footerLogoLink_BH7S:hover,.hash-link:focus,:hover>.hash-link{opacity:1}.mainWrapper_z2l0{display:flex;flex:1 0 auto;flex-direction:column}.docusaurus-mt-lg{margin-top:3rem}#__docusaurus{display:flex;flex-direction:column;min-height:100%}.iconEdit_Z9Sw{margin-right:.3em;vertical-align:sub}.tag_zVej{border:1px solid var(--docusaurus-tag-list-border);transition:border var(--ifm-transition-fast)}.tag_zVej:hover{--docusaurus-tag-list-border:var(--ifm-link-color);text-decoration:none}.tagRegular_sFm0{border-radius:var(--ifm-global-radius);font-size:90%;padding:.2rem .5rem .3rem}.tagWithCount_h2kH{align-items:center;border-left:0;display:flex;padding:0 .5rem 0 1rem;position:relative}.tagWithCount_h2kH:after,.tagWithCount_h2kH:before{border:1px solid var(--docusaurus-tag-list-border);content:"";position:absolute;top:50%;transition:inherit}.tagWithCount_h2kH:before{border-bottom:0;border-right:0;height:1.18rem;right:100%;transform:translate(50%,-50%) rotate(-45deg);width:1.18rem}.tagWithCount_h2kH:after{border-radius:50%;height:.5rem;left:0;transform:translateY(-50%);width:.5rem}.tagWithCount_h2kH span{background:var(--ifm-color-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-color-black);font-size:.7rem;line-height:1.2;margin-left:.3rem;padding:.1rem .4rem}.tags_jXut{display:inline}.tag_QGVx{display:inline-block;margin:0 .4rem .5rem 0}.lastUpdated_vwxv{font-size:smaller;font-style:italic;margin-top:.2rem}.tocCollapsibleButton_TO0P{align-items:center;display:flex;font-size:inherit;justify-content:space-between;padding:.4rem .8rem;width:100%}.tocCollapsibleButton_TO0P:after{background:var(--ifm-menu-link-sublist-icon) 50% 50%/2rem 2rem no-repeat;content:"";filter:var(--ifm-menu-link-sublist-icon-filter);height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast);width:1.25rem}.tocCollapsibleButtonExpanded_MG3E:after,.tocCollapsibleExpanded_sAul{transform:none}.tocCollapsible_ETCw{background-color:var(--ifm-menu-color-background-active);border-radius:var(--ifm-global-radius);margin:1rem 0}.buttonGroup__atx button,.codeBlockContainer_Ckt0{background:var(--prism-background-color);color:var(--prism-color)}.tocCollapsibleContent_vkbj>ul{border-left:none;border-top:1px solid var(--ifm-color-emphasis-300);font-size:15px;padding:.2rem 0}.tocCollapsibleContent_vkbj ul li{margin:.4rem .8rem}.tableOfContents_bqdL{max-height:calc(100vh - var(--ifm-navbar-height) - 2rem);overflow-y:auto;position:sticky;top:calc(var(--ifm-navbar-height) + 1rem)}.anchorWithStickyNavbar_LWe7{scroll-margin-top:calc(var(--ifm-navbar-height) + .5rem)}.anchorWithHideOnScrollNavbar_WYt5{scroll-margin-top:.5rem}.hash-link{opacity:0;padding-left:.5rem;transition:opacity var(--ifm-transition-fast);-webkit-user-select:none;user-select:none}.hash-link:before{content:"#"}.codeBlockContainer_Ckt0{border-radius:var(--ifm-code-border-radius);box-shadow:var(--ifm-global-shadow-lw);margin-bottom:var(--ifm-leading)}.codeBlockContent_biex{border-radius:inherit;direction:ltr;position:relative}.codeBlockTitle_Ktv7{border-bottom:1px solid var(--ifm-color-emphasis-300);border-top-left-radius:inherit;border-top-right-radius:inherit;font-size:var(--ifm-code-font-size);font-weight:500;padding:.75rem var(--ifm-pre-padding)}.codeBlock_bY9V{--ifm-pre-background:var(--prism-background-color);margin:0;padding:0}.codeBlockTitle_Ktv7+.codeBlockContent_biex .codeBlock_bY9V{border-top-left-radius:0;border-top-right-radius:0}.codeBlockLines_e6Vv{float:left;font:inherit;min-width:100%;padding:var(--ifm-pre-padding)}.codeBlockLinesWithNumbering_o6Pm{display:table;padding:var(--ifm-pre-padding) 0}.buttonGroup__atx{column-gap:.2rem;display:flex;position:absolute;right:calc(var(--ifm-pre-padding)/2);top:calc(var(--ifm-pre-padding)/2)}.buttonGroup__atx button{align-items:center;border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-global-radius);display:flex;line-height:0;opacity:0;padding:.4rem;transition:opacity var(--ifm-transition-fast) ease-in-out}.buttonGroup__atx button:focus-visible,.buttonGroup__atx button:hover{opacity:1!important}.theme-code-block:hover .buttonGroup__atx button{opacity:.4}:where(:root){--docusaurus-highlighted-code-line-bg:#484d5b}:where([data-theme=dark]){--docusaurus-highlighted-code-line-bg:#646464}.theme-code-block-highlighted-line{background-color:var(--docusaurus-highlighted-code-line-bg);display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}.codeLine_lJS_{counter-increment:a;display:table-row}.codeLineNumber_Tfdd{background:var(--ifm-pre-background);display:table-cell;left:0;overflow-wrap:normal;padding:0 var(--ifm-pre-padding);position:sticky;text-align:right;width:1%}.codeLineNumber_Tfdd:before{content:counter(a);opacity:.4}.codeLineContent_feaV{padding-right:var(--ifm-pre-padding)}.theme-code-block:hover .copyButtonCopied_obH4{opacity:1!important}.copyButtonIcons_eSgA{height:1.125rem;position:relative;width:1.125rem}.copyButtonIcon_y97N,.copyButtonSuccessIcon_LjdS{fill:currentColor;height:inherit;left:0;opacity:inherit;position:absolute;top:0;transition:all var(--ifm-transition-fast) ease;width:inherit}.copyButtonSuccessIcon_LjdS{color:#00d600;left:50%;opacity:0;top:50%;transform:translate(-50%,-50%) scale(.33)}.copyButtonCopied_obH4 .copyButtonIcon_y97N{opacity:0;transform:scale(.33)}.copyButtonCopied_obH4 .copyButtonSuccessIcon_LjdS{opacity:1;transform:translate(-50%,-50%) scale(1);transition-delay:75ms}.wordWrapButtonIcon_Bwma{height:1.2rem;width:1.2rem}.details_lb9f{--docusaurus-details-summary-arrow-size:0.38rem;--docusaurus-details-transition:transform 200ms ease;--docusaurus-details-decoration-color:grey}.details_lb9f>summary{cursor:pointer;padding-left:1rem;position:relative}.details_lb9f>summary::-webkit-details-marker{display:none}.details_lb9f>summary:before{border-color:#0000 #0000 #0000 var(--docusaurus-details-decoration-color);border-style:solid;border-width:var(--docusaurus-details-summary-arrow-size);content:"";left:0;position:absolute;top:.45rem;transform:rotate(0);transform-origin:calc(var(--docusaurus-details-summary-arrow-size)/2) 50%;transition:var(--docusaurus-details-transition)}.collapsibleContent_i85q{border-top:1px solid var(--docusaurus-details-decoration-color);margin-top:1rem;padding-top:1rem}.details_b_Ee{--docusaurus-details-decoration-color:var(--ifm-alert-border-color);--docusaurus-details-transition:transform var(--ifm-transition-fast) ease;border:1px solid var(--ifm-alert-border-color);margin:0 0 var(--ifm-spacing-vertical)}.img_ev3q{height:auto}.admonition_LlT9{margin-bottom:1em}.admonitionHeading_tbUL{font:var(--ifm-heading-font-weight) var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.3rem}.admonitionHeading_tbUL code{text-transform:none}.admonitionIcon_kALy{display:inline-block;margin-right:.4em;vertical-align:middle}.admonitionIcon_kALy svg{fill:var(--ifm-alert-foreground-color);display:inline-block;height:1.6em;width:1.6em}.breadcrumbHomeIcon_YNFT{height:1.1rem;position:relative;top:1px;vertical-align:top;width:1.1rem}.breadcrumbsContainer_Z_bl{--ifm-breadcrumb-size-multiplier:0.8;margin-bottom:.8rem}.searchContextInput_mXoe,.searchQueryInput_CFBF{background:var(--ifm-background-color);border:var(--ifm-global-border-width) solid var(--ifm-color-content-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-font-color-base);font-size:var(--ifm-font-size-base);margin-bottom:1rem;padding:.5rem;width:100%}.searchResultItem_U687{border-bottom:1px solid #dfe3e8;padding:1rem 0}.searchResultItemPath_uIbk{color:var(--ifm-color-content-secondary);font-size:.8rem;margin:.5rem 0 0}.searchResultItemSummary_oZHr{font-style:italic;margin:.5rem 0 0}.backToTopButton_sjWU{background-color:var(--ifm-color-emphasis-200);border-radius:50%;bottom:1.3rem;box-shadow:var(--ifm-global-shadow-lw);height:3rem;opacity:0;position:fixed;right:1.3rem;transform:scale(0);transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default);visibility:hidden;width:3rem;z-index:calc(var(--ifm-z-index-fixed) - 1)}.backToTopButton_sjWU:after{background-color:var(--ifm-color-emphasis-1000);content:" ";display:inline-block;height:100%;-webkit-mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;width:100%}.backToTopButtonShow_xfvO{opacity:1;transform:scale(1);visibility:visible}[data-theme=dark]:root{--docusaurus-collapse-button-bg:#ffffff0d;--docusaurus-collapse-button-bg-hover:#ffffff1a}.collapseSidebarButton_PEFL{display:none;margin:0}.docSidebarContainer_b6E3,.sidebarLogo_isFc{display:none}.docMainContainer_gTbr,.docPage__5DB{display:flex;width:100%}.docPage__5DB{flex:1 0}.docsWrapper_BCFX{display:flex;flex:1 0 auto}@media (min-width:997px){.collapseSidebarButton_PEFL,.expandButton_m80_{background-color:var(--docusaurus-collapse-button-bg)}:root{--docusaurus-announcement-bar-height:30px}.announcementBarClose_gvF7,.announcementBarPlaceholder_vyr4{flex-basis:50px}.searchBox_ZlJk{padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.lastUpdated_vwxv{text-align:right}.tocMobile_ITEo{display:none}.docItemCol_VOVn{max-width:75%!important}.collapseSidebarButton_PEFL{border:1px solid var(--ifm-toc-border-color);border-radius:0;bottom:0;display:block!important;height:40px;position:sticky}.collapseSidebarButtonIcon_kv0_{margin-top:4px;transform:rotate(180deg)}.expandButtonIcon_BlDH,[dir=rtl] .collapseSidebarButtonIcon_kv0_{transform:rotate(0)}.collapseSidebarButton_PEFL:focus,.collapseSidebarButton_PEFL:hover,.expandButton_m80_:focus,.expandButton_m80_:hover{background-color:var(--docusaurus-collapse-button-bg-hover)}.menuHtmlItem_M9Kj{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu_SIkG{flex-grow:1;padding:.5rem}@supports (scrollbar-gutter:stable){.menu_SIkG{padding:.5rem 0 .5rem .5rem;scrollbar-gutter:stable}}.menuWithAnnouncementBar_GW3s{margin-bottom:var(--docusaurus-announcement-bar-height)}.sidebar_njMd{display:flex;flex-direction:column;height:100%;padding-top:var(--ifm-navbar-height);width:var(--doc-sidebar-width)}.sidebarWithHideableNavbar_wUlq{padding-top:0}.sidebarHidden_VK0M{opacity:0;visibility:hidden}.sidebarLogo_isFc{align-items:center;color:inherit!important;display:flex!important;margin:0 var(--ifm-navbar-padding-horizontal);max-height:var(--ifm-navbar-height);min-height:var(--ifm-navbar-height);text-decoration:none!important}.sidebarLogo_isFc img{height:2rem;margin-right:.5rem}.expandButton_m80_{align-items:center;display:flex;height:100%;justify-content:center;position:absolute;right:0;top:0;transition:background-color var(--ifm-transition-fast) ease;width:100%}[dir=rtl] .expandButtonIcon_BlDH{transform:rotate(180deg)}.docSidebarContainer_b6E3{border-right:1px solid var(--ifm-toc-border-color);-webkit-clip-path:inset(0);clip-path:inset(0);display:block;margin-top:calc(var(--ifm-navbar-height)*-1);transition:width var(--ifm-transition-fast) ease;width:var(--doc-sidebar-width);will-change:width}.docSidebarContainerHidden_b3ry{cursor:pointer;width:var(--doc-sidebar-hidden-width)}.sidebarViewport_Xe31{height:100%;max-height:100vh;position:sticky;top:0}.docMainContainer_gTbr{flex-grow:1;max-width:calc(100% - var(--doc-sidebar-width))}.docMainContainerEnhanced_Uz_u{max-width:calc(100% - var(--doc-sidebar-hidden-width))}.docItemWrapperEnhanced_czyv{max-width:calc(var(--ifm-container-width) + var(--doc-sidebar-width))!important}}@media (min-width:1440px){.container{max-width:var(--ifm-container-width-xl)}}@media (max-width:996px){.col{--ifm-col-width:100%;flex-basis:var(--ifm-col-width);margin-left:0}.footer{--ifm-footer-padding-horizontal:0}.colorModeToggle_DEke,.footer__link-separator,.navbar-sidebar__back,.navbar__item,.tableOfContents_bqdL{display:none}.footer__col{margin-bottom:calc(var(--ifm-spacing-vertical)*3)}.footer__link-item{display:block}.hero{padding-left:0;padding-right:0}.navbar>.container,.navbar>.container-fluid{padding:0}.navbar__toggle{display:inherit}.navbar__search-input{width:9rem}.pills--block,.tabs--block{flex-direction:column}.searchBox_ZlJk{position:absolute;right:var(--ifm-navbar-padding-horizontal)}.docItemContainer_F8PC{padding:0 .3rem}}@media not (max-width:996px){.searchBar_RVTs.searchBarLeft_MXDe .dropdownMenu_qbY6{left:0!important;right:auto!important}}@media only screen and (max-width:996px){.searchQueryColumn_q7nx{max-width:60%!important}.searchContextColumn_oWAF{max-width:40%!important}}@media (max-width:768px){#theme-main h1{font-size:50px!important;font-weight:700;line-height:3rem!important}#theme-main .header-docs{margin-bottom:20px}}@media (max-width:576px){.markdown h1:first-child{--ifm-h1-font-size:2rem}.markdown>h2{--ifm-h2-font-size:1.5rem}.markdown>h3{--ifm-h3-font-size:1.25rem}.navbar__search-input:not(:focus){width:2rem}.searchBar_RVTs .dropdownMenu_qbY6{max-width:calc(100vw - var(--ifm-navbar-padding-horizontal)*2);width:var(--search-local-modal-width-sm,340px)}.searchBarContainer_NW3z:not(.focused_OWtg) .searchClearButton_qk4g,.searchHintContainer_Pkmr{display:none}}@media screen and (max-width:576px){.searchQueryColumn_q7nx{max-width:100%!important}.searchContextColumn_oWAF{max-width:100%!important;padding-left:var(--ifm-spacing-horizontal)!important}}@media (hover:hover){.backToTopButton_sjWU:hover{background-color:var(--ifm-color-emphasis-300)}}@media (pointer:fine){.thin-scrollbar{scrollbar-width:thin}.thin-scrollbar::-webkit-scrollbar{height:var(--ifm-scrollbar-size);width:var(--ifm-scrollbar-size)}.thin-scrollbar::-webkit-scrollbar-track{background:var(--ifm-scrollbar-track-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb{background:var(--ifm-scrollbar-thumb-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb:hover{background:var(--ifm-scrollbar-thumb-hover-background-color)}}@media (prefers-reduced-motion:reduce){:root{--ifm-transition-fast:0ms;--ifm-transition-slow:0ms}}@media print{.announcementBar_mb4j,.footer,.menu,.navbar,.pagination-nav,.table-of-contents,.tocMobile_ITEo{display:none}.tabs{page-break-inside:avoid}.codeBlockLines_e6Vv{white-space:pre-wrap}}
\ No newline at end of file
diff --git a/assets/css/styles.a02ebd50.css b/assets/css/styles.a02ebd50.css
deleted file mode 100644
index bdcbab86b..000000000
--- a/assets/css/styles.a02ebd50.css
+++ /dev/null
@@ -1 +0,0 @@
-.col,.container{padding:0 var(--ifm-spacing-horizontal);width:100%}.markdown>h2,.markdown>h3,.markdown>h4,.markdown>h5,.markdown>h6{margin-bottom:calc(var(--ifm-heading-vertical-rhythm-bottom)*var(--ifm-leading))}pre,table{overflow:auto}blockquote,pre{margin:0 0 var(--ifm-spacing-vertical)}.breadcrumbs__link,.button{transition-timing-function:var(--ifm-transition-timing-default)}.button,code{vertical-align:middle}.button--outline.button--active,.button--outline:active,.button--outline:hover,:root{--ifm-button-color:var(--ifm-font-color-base-inverse)}.menu__link:hover,a{transition:color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.navbar--dark,:root{--ifm-navbar-link-hover-color:var(--ifm-color-primary)}.menu,.navbar-sidebar{overflow-x:hidden}:root,html[data-theme=dark]{--ifm-color-emphasis-500:var(--ifm-color-gray-500)}.markdown li,body{word-wrap:break-word}.toggleButton_gllP,html{-webkit-tap-highlight-color:transparent}*,.DocSearch-Container,.DocSearch-Container *{box-sizing:border-box}:root{--ifm-color-scheme:light;--ifm-dark-value:10%;--ifm-darker-value:15%;--ifm-darkest-value:30%;--ifm-light-value:15%;--ifm-lighter-value:30%;--ifm-lightest-value:50%;--ifm-contrast-background-value:90%;--ifm-contrast-foreground-value:70%;--ifm-contrast-background-dark-value:70%;--ifm-contrast-foreground-dark-value:90%;--ifm-color-primary:#3578e5;--ifm-color-secondary:#ebedf0;--ifm-color-success:#00a400;--ifm-color-info:#54c7ec;--ifm-color-warning:#ffba00;--ifm-color-danger:#fa383e;--ifm-color-primary-dark:#306cce;--ifm-color-primary-darker:#2d66c3;--ifm-color-primary-darkest:#2554a0;--ifm-color-primary-light:#538ce9;--ifm-color-primary-lighter:#72a1ed;--ifm-color-primary-lightest:#9abcf2;--ifm-color-primary-contrast-background:#ebf2fc;--ifm-color-primary-contrast-foreground:#102445;--ifm-color-secondary-dark:#d4d5d8;--ifm-color-secondary-darker:#c8c9cc;--ifm-color-secondary-darkest:#a4a6a8;--ifm-color-secondary-light:#eef0f2;--ifm-color-secondary-lighter:#f1f2f5;--ifm-color-secondary-lightest:#f5f6f8;--ifm-color-secondary-contrast-background:#fdfdfe;--ifm-color-secondary-contrast-foreground:#474748;--ifm-color-success-dark:#009400;--ifm-color-success-darker:#008b00;--ifm-color-success-darkest:#007300;--ifm-color-success-light:#26b226;--ifm-color-success-lighter:#4dbf4d;--ifm-color-success-lightest:#80d280;--ifm-color-success-contrast-background:#e6f6e6;--ifm-color-success-contrast-foreground:#003100;--ifm-color-info-dark:#4cb3d4;--ifm-color-info-darker:#47a9c9;--ifm-color-info-darkest:#3b8ba5;--ifm-color-info-light:#6ecfef;--ifm-color-info-lighter:#87d8f2;--ifm-color-info-lightest:#aae3f6;--ifm-color-info-contrast-background:#eef9fd;--ifm-color-info-contrast-foreground:#193c47;--ifm-color-warning-dark:#e6a700;--ifm-color-warning-darker:#d99e00;--ifm-color-warning-darkest:#b38200;--ifm-color-warning-light:#ffc426;--ifm-color-warning-lighter:#ffcf4d;--ifm-color-warning-lightest:#ffdd80;--ifm-color-warning-contrast-background:#fff8e6;--ifm-color-warning-contrast-foreground:#4d3800;--ifm-color-danger-dark:#e13238;--ifm-color-danger-darker:#d53035;--ifm-color-danger-darkest:#af272b;--ifm-color-danger-light:#fb565b;--ifm-color-danger-lighter:#fb7478;--ifm-color-danger-lightest:#fd9c9f;--ifm-color-danger-contrast-background:#ffebec;--ifm-color-danger-contrast-foreground:#4b1113;--ifm-color-white:#fff;--ifm-color-black:#000;--ifm-color-gray-0:var(--ifm-color-white);--ifm-color-gray-100:#f5f6f7;--ifm-color-gray-200:#ebedf0;--ifm-color-gray-300:#dadde1;--ifm-color-gray-400:#ccd0d5;--ifm-color-gray-500:#bec3c9;--ifm-color-gray-600:#8d949e;--ifm-color-gray-700:#606770;--ifm-color-gray-800:#444950;--ifm-color-gray-900:#1c1e21;--ifm-color-gray-1000:var(--ifm-color-black);--ifm-color-emphasis-0:var(--ifm-color-gray-0);--ifm-color-emphasis-100:var(--ifm-color-gray-100);--ifm-color-emphasis-200:var(--ifm-color-gray-200);--ifm-color-emphasis-300:var(--ifm-color-gray-300);--ifm-color-emphasis-400:var(--ifm-color-gray-400);--ifm-color-emphasis-600:var(--ifm-color-gray-600);--ifm-color-emphasis-700:var(--ifm-color-gray-700);--ifm-color-emphasis-800:var(--ifm-color-gray-800);--ifm-color-emphasis-900:var(--ifm-color-gray-900);--ifm-color-emphasis-1000:var(--ifm-color-gray-1000);--ifm-color-content:var(--ifm-color-emphasis-900);--ifm-color-content-inverse:var(--ifm-color-emphasis-0);--ifm-color-content-secondary:#525860;--ifm-background-color:#0000;--ifm-background-surface-color:var(--ifm-color-content-inverse);--ifm-global-border-width:1px;--ifm-global-radius:0.4rem;--ifm-hover-overlay:#0000000d;--ifm-font-color-base:var(--ifm-color-content);--ifm-font-color-base-inverse:var(--ifm-color-content-inverse);--ifm-font-color-secondary:var(--ifm-color-content-secondary);--ifm-font-family-base:system-ui,-apple-system,Segoe UI,Roboto,Ubuntu,Cantarell,Noto Sans,sans-serif,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--ifm-font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--ifm-font-size-base:100%;--ifm-font-weight-light:300;--ifm-font-weight-normal:400;--ifm-font-weight-semibold:500;--ifm-font-weight-bold:700;--ifm-font-weight-base:var(--ifm-font-weight-normal);--ifm-line-height-base:1.65;--ifm-global-spacing:1rem;--ifm-spacing-vertical:var(--ifm-global-spacing);--ifm-spacing-horizontal:var(--ifm-global-spacing);--ifm-transition-fast:200ms;--ifm-transition-slow:400ms;--ifm-transition-timing-default:cubic-bezier(0.08,0.52,0.52,1);--ifm-global-shadow-lw:0 1px 2px 0 #0000001a;--ifm-global-shadow-md:0 5px 40px #0003;--ifm-global-shadow-tl:0 12px 28px 0 #0003,0 2px 4px 0 #0000001a;--ifm-z-index-dropdown:100;--ifm-z-index-fixed:200;--ifm-z-index-overlay:400;--ifm-container-width:1140px;--ifm-container-width-xl:1320px;--ifm-code-background:#f6f7f8;--ifm-code-border-radius:var(--ifm-global-radius);--ifm-code-font-size:90%;--ifm-code-padding-horizontal:0.1rem;--ifm-code-padding-vertical:0.1rem;--ifm-pre-background:var(--ifm-code-background);--ifm-pre-border-radius:var(--ifm-code-border-radius);--ifm-pre-color:inherit;--ifm-pre-line-height:1.45;--ifm-pre-padding:1rem;--ifm-heading-color:inherit;--ifm-heading-margin-top:0;--ifm-heading-margin-bottom:var(--ifm-spacing-vertical);--ifm-heading-font-family:var(--ifm-font-family-base);--ifm-heading-font-weight:var(--ifm-font-weight-bold);--ifm-heading-line-height:1.25;--ifm-h1-font-size:2rem;--ifm-h2-font-size:1.5rem;--ifm-h3-font-size:1.25rem;--ifm-h4-font-size:1rem;--ifm-h5-font-size:0.875rem;--ifm-h6-font-size:0.85rem;--ifm-image-alignment-padding:1.25rem;--ifm-leading-desktop:1.25;--ifm-leading:calc(var(--ifm-leading-desktop)*1rem);--ifm-list-left-padding:2rem;--ifm-list-margin:1rem;--ifm-list-item-margin:0.25rem;--ifm-list-paragraph-margin:1rem;--ifm-table-cell-padding:0.75rem;--ifm-table-background:#0000;--ifm-table-stripe-background:#00000008;--ifm-table-border-width:1px;--ifm-table-border-color:var(--ifm-color-emphasis-300);--ifm-table-head-background:inherit;--ifm-table-head-color:inherit;--ifm-table-head-font-weight:var(--ifm-font-weight-bold);--ifm-table-cell-color:inherit;--ifm-link-color:var(--ifm-color-primary);--ifm-link-decoration:none;--ifm-link-hover-color:var(--ifm-link-color);--ifm-link-hover-decoration:underline;--ifm-paragraph-margin-bottom:var(--ifm-leading);--ifm-blockquote-font-size:var(--ifm-font-size-base);--ifm-blockquote-border-left-width:2px;--ifm-blockquote-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-blockquote-padding-vertical:0;--ifm-blockquote-shadow:none;--ifm-blockquote-color:var(--ifm-color-emphasis-800);--ifm-blockquote-border-color:var(--ifm-color-emphasis-300);--ifm-hr-background-color:var(--ifm-color-emphasis-500);--ifm-hr-height:1px;--ifm-hr-margin-vertical:1.5rem;--ifm-scrollbar-size:7px;--ifm-scrollbar-track-background-color:#f1f1f1;--ifm-scrollbar-thumb-background-color:silver;--ifm-scrollbar-thumb-hover-background-color:#a7a7a7;--ifm-alert-background-color:inherit;--ifm-alert-border-color:inherit;--ifm-alert-border-radius:var(--ifm-global-radius);--ifm-alert-border-width:0px;--ifm-alert-border-left-width:5px;--ifm-alert-color:var(--ifm-font-color-base);--ifm-alert-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-alert-padding-vertical:var(--ifm-spacing-vertical);--ifm-alert-shadow:var(--ifm-global-shadow-lw);--ifm-avatar-intro-margin:1rem;--ifm-avatar-intro-alignment:inherit;--ifm-avatar-photo-size:3rem;--ifm-badge-background-color:inherit;--ifm-badge-border-color:inherit;--ifm-badge-border-radius:var(--ifm-global-radius);--ifm-badge-border-width:var(--ifm-global-border-width);--ifm-badge-color:var(--ifm-color-white);--ifm-badge-padding-horizontal:calc(var(--ifm-spacing-horizontal)*0.5);--ifm-badge-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-breadcrumb-border-radius:1.5rem;--ifm-breadcrumb-spacing:0.5rem;--ifm-breadcrumb-color-active:var(--ifm-color-primary);--ifm-breadcrumb-item-background-active:var(--ifm-hover-overlay);--ifm-breadcrumb-padding-horizontal:0.8rem;--ifm-breadcrumb-padding-vertical:0.4rem;--ifm-breadcrumb-size-multiplier:1;--ifm-breadcrumb-separator:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="0 0 256 256"><g><g><polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128"/></g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g></svg>');--ifm-breadcrumb-separator-filter:none;--ifm-breadcrumb-separator-size:0.5rem;--ifm-breadcrumb-separator-size-multiplier:1.25;--ifm-button-background-color:inherit;--ifm-button-border-color:var(--ifm-button-background-color);--ifm-button-border-width:var(--ifm-global-border-width);--ifm-button-font-weight:var(--ifm-font-weight-bold);--ifm-button-padding-horizontal:1.5rem;--ifm-button-padding-vertical:0.375rem;--ifm-button-size-multiplier:1;--ifm-button-transition-duration:var(--ifm-transition-fast);--ifm-button-border-radius:calc(var(--ifm-global-radius)*var(--ifm-button-size-multiplier));--ifm-button-group-spacing:2px;--ifm-card-background-color:var(--ifm-background-surface-color);--ifm-card-border-radius:calc(var(--ifm-global-radius)*2);--ifm-card-horizontal-spacing:var(--ifm-global-spacing);--ifm-card-vertical-spacing:var(--ifm-global-spacing);--ifm-toc-border-color:var(--ifm-color-emphasis-300);--ifm-toc-link-color:var(--ifm-color-content-secondary);--ifm-toc-padding-vertical:0.5rem;--ifm-toc-padding-horizontal:0.5rem;--ifm-dropdown-background-color:var(--ifm-background-surface-color);--ifm-dropdown-font-weight:var(--ifm-font-weight-semibold);--ifm-dropdown-link-color:var(--ifm-font-color-base);--ifm-dropdown-hover-background-color:var(--ifm-hover-overlay);--ifm-footer-background-color:var(--ifm-color-emphasis-100);--ifm-footer-color:inherit;--ifm-footer-link-color:var(--ifm-color-emphasis-700);--ifm-footer-link-hover-color:var(--ifm-color-primary);--ifm-footer-link-horizontal-spacing:0.5rem;--ifm-footer-padding-horizontal:calc(var(--ifm-spacing-horizontal)*2);--ifm-footer-padding-vertical:calc(var(--ifm-spacing-vertical)*2);--ifm-footer-title-color:inherit;--ifm-footer-logo-max-width:min(30rem,90vw);--ifm-hero-background-color:var(--ifm-background-surface-color);--ifm-hero-text-color:var(--ifm-color-emphasis-800);--ifm-menu-color:var(--ifm-color-emphasis-700);--ifm-menu-color-active:var(--ifm-color-primary);--ifm-menu-color-background-active:var(--ifm-hover-overlay);--ifm-menu-color-background-hover:var(--ifm-hover-overlay);--ifm-menu-link-padding-horizontal:0.75rem;--ifm-menu-link-padding-vertical:0.375rem;--ifm-menu-link-sublist-icon:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" width="16px" height="16px" viewBox="0 0 24 24"><path fill="rgba(0,0,0,0.5)" d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>');--ifm-menu-link-sublist-icon-filter:none;--ifm-navbar-background-color:var(--ifm-background-surface-color);--ifm-navbar-height:3.75rem;--ifm-navbar-item-padding-horizontal:0.75rem;--ifm-navbar-item-padding-vertical:0.25rem;--ifm-navbar-link-color:var(--ifm-font-color-base);--ifm-navbar-link-active-color:var(--ifm-link-color);--ifm-navbar-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-navbar-padding-vertical:calc(var(--ifm-spacing-vertical)*0.5);--ifm-navbar-shadow:var(--ifm-global-shadow-lw);--ifm-navbar-search-input-background-color:var(--ifm-color-emphasis-200);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-800);--ifm-navbar-search-input-placeholder-color:var(--ifm-color-emphasis-500);--ifm-navbar-search-input-icon:url('data:image/svg+xml;utf8,<svg fill="currentColor" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" height="16px" width="16px"><path d="M6.02945,10.20327a4.17382,4.17382,0,1,1,4.17382-4.17382A4.15609,4.15609,0,0,1,6.02945,10.20327Zm9.69195,4.2199L10.8989,9.59979A5.88021,5.88021,0,0,0,12.058,6.02856,6.00467,6.00467,0,1,0,9.59979,10.8989l4.82338,4.82338a.89729.89729,0,0,0,1.29912,0,.89749.89749,0,0,0-.00087-1.29909Z" /></svg>');--ifm-navbar-sidebar-width:83vw;--ifm-pagination-border-radius:var(--ifm-global-radius);--ifm-pagination-color-active:var(--ifm-color-primary);--ifm-pagination-font-size:1rem;--ifm-pagination-item-active-background:var(--ifm-hover-overlay);--ifm-pagination-page-spacing:0.2em;--ifm-pagination-padding-horizontal:calc(var(--ifm-spacing-horizontal)*1);--ifm-pagination-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-pagination-nav-border-radius:var(--ifm-global-radius);--ifm-pagination-nav-color-hover:var(--ifm-color-primary);--ifm-pills-color-active:var(--ifm-color-primary);--ifm-pills-color-background-active:var(--ifm-hover-overlay);--ifm-pills-spacing:0.125rem;--ifm-tabs-color:var(--ifm-font-color-secondary);--ifm-tabs-color-active:var(--ifm-color-primary);--ifm-tabs-color-active-border:var(--ifm-tabs-color-active);--ifm-tabs-padding-horizontal:1rem;--ifm-tabs-padding-vertical:1rem;--docusaurus-progress-bar-color:var(--ifm-color-primary);--ifm-color-primary:#06527a;--ifm-color-primary-dark:#054a6e;--ifm-color-primary-darker:#054668;--ifm-color-primary-darkest:#043955;--ifm-color-primary-light:#075a86;--ifm-color-primary-lighter:#075e8c;--ifm-color-primary-lightest:#086b9f;--ifm-color-secondary:#ffc61c;--ifm-color-secondary-light:#ffcd38;--dark:#33313b;--light:#f3f3f3;--docusaurus-announcement-bar-height:auto;--docusaurus-tag-list-border:var(--ifm-color-emphasis-300);--docusaurus-collapse-button-bg:#0000;--docusaurus-collapse-button-bg-hover:#0000001a;--doc-sidebar-width:300px;--doc-sidebar-hidden-width:30px;--docsearch-primary-color:#5468ff;--docsearch-text-color:#1c1e21;--docsearch-spacing:12px;--docsearch-icon-stroke-width:1.4;--docsearch-highlight-color:var(--docsearch-primary-color);--docsearch-muted-color:#969faf;--docsearch-container-background:#656c85cc;--docsearch-logo-color:#5468ff;--docsearch-modal-width:560px;--docsearch-modal-height:600px;--docsearch-modal-background:#f5f6f7;--docsearch-modal-shadow:inset 1px 1px 0 0 #ffffff80,0 3px 8px 0 #555a64;--docsearch-searchbox-height:56px;--docsearch-searchbox-background:#ebedf0;--docsearch-searchbox-focus-background:#fff;--docsearch-searchbox-shadow:inset 0 0 0 2px var(--docsearch-primary-color);--docsearch-hit-height:56px;--docsearch-hit-color:#444950;--docsearch-hit-active-color:#fff;--docsearch-hit-background:#fff;--docsearch-hit-shadow:0 1px 3px 0 #d4d9e1;--docsearch-key-gradient:linear-gradient(-225deg,#d5dbe4,#f8f8f8);--docsearch-key-shadow:inset 0 -2px 0 0 #cdcde6,inset 0 0 1px 1px #fff,0 1px 2px 1px #1e235a66;--docsearch-footer-height:44px;--docsearch-footer-background:#fff;--docsearch-footer-shadow:0 -1px 0 0 #e0e3e8,0 -3px 6px 0 #45629b1f;--docsearch-primary-color:var(--ifm-color-primary);--docsearch-text-color:var(--ifm-font-color-base)}.badge--danger,.badge--info,.badge--primary,.badge--secondary,.badge--success,.badge--warning{--ifm-badge-border-color:var(--ifm-badge-background-color)}.button--link,.button--outline{--ifm-button-background-color:#0000}html{-webkit-font-smoothing:antialiased;-webkit-text-size-adjust:100%;text-size-adjust:100%;background-color:var(--ifm-background-color);color:var(--ifm-font-color-base);color-scheme:var(--ifm-color-scheme);font:var(--ifm-font-size-base)/var(--ifm-line-height-base) var(--ifm-font-family-base);text-rendering:optimizelegibility}iframe{border:0;color-scheme:auto}.container{margin:0 auto;max-width:var(--ifm-container-width)}.container--fluid{max-width:inherit}.row{display:flex;flex-wrap:wrap;margin:0 calc(var(--ifm-spacing-horizontal)*-1)}.margin-bottom--none,.margin-vert--none,.markdown>:last-child{margin-bottom:0!important}.margin-top--none,.margin-vert--none,.tabItem_LNqP{margin-top:0!important}.row--no-gutters{margin-left:0;margin-right:0}.margin-horiz--none,.margin-right--none{margin-right:0!important}.row--no-gutters>.col{padding-left:0;padding-right:0}.row--align-top{align-items:flex-start}.row--align-bottom{align-items:flex-end}.menuExternalLink_NmtK,.row--align-center{align-items:center}.row--align-stretch{align-items:stretch}.row--align-baseline{align-items:baseline}.col{--ifm-col-width:100%;flex:1 0;margin-left:0;max-width:var(--ifm-col-width)}.padding-bottom--none,.padding-vert--none{padding-bottom:0!important}.padding-top--none,.padding-vert--none{padding-top:0!important}.padding-horiz--none,.padding-left--none{padding-left:0!important}.padding-horiz--none,.padding-right--none{padding-right:0!important}.col[class*=col--]{flex:0 0 var(--ifm-col-width)}.col--1{--ifm-col-width:8.33333%}.col--offset-1{margin-left:8.33333%}.col--2{--ifm-col-width:16.66667%}.col--offset-2{margin-left:16.66667%}.col--3{--ifm-col-width:25%}.col--offset-3{margin-left:25%}.col--4{--ifm-col-width:33.33333%}.col--offset-4{margin-left:33.33333%}.col--5{--ifm-col-width:41.66667%}.col--offset-5{margin-left:41.66667%}.col--6{--ifm-col-width:50%}.col--offset-6{margin-left:50%}.col--7{--ifm-col-width:58.33333%}.col--offset-7{margin-left:58.33333%}.col--8{--ifm-col-width:66.66667%}.col--offset-8{margin-left:66.66667%}.col--9{--ifm-col-width:75%}.col--offset-9{margin-left:75%}.col--10{--ifm-col-width:83.33333%}.col--offset-10{margin-left:83.33333%}.col--11{--ifm-col-width:91.66667%}.col--offset-11{margin-left:91.66667%}.col--12{--ifm-col-width:100%}.col--offset-12{margin-left:100%}.margin-horiz--none,.margin-left--none{margin-left:0!important}.margin--none{margin:0!important}.margin-bottom--xs,.margin-vert--xs{margin-bottom:.25rem!important}.margin-top--xs,.margin-vert--xs{margin-top:.25rem!important}.margin-horiz--xs,.margin-left--xs{margin-left:.25rem!important}.margin-horiz--xs,.margin-right--xs{margin-right:.25rem!important}.margin--xs{margin:.25rem!important}.margin-bottom--sm,.margin-vert--sm{margin-bottom:.5rem!important}.margin-top--sm,.margin-vert--sm{margin-top:.5rem!important}.margin-horiz--sm,.margin-left--sm{margin-left:.5rem!important}.margin-horiz--sm,.margin-right--sm{margin-right:.5rem!important}.margin--sm{margin:.5rem!important}.margin-bottom--md,.margin-vert--md{margin-bottom:1rem!important}.margin-top--md,.margin-vert--md{margin-top:1rem!important}.margin-horiz--md,.margin-left--md{margin-left:1rem!important}.margin-horiz--md,.margin-right--md{margin-right:1rem!important}.margin--md{margin:1rem!important}.margin-bottom--lg,.margin-vert--lg{margin-bottom:2rem!important}.margin-top--lg,.margin-vert--lg{margin-top:2rem!important}.margin-horiz--lg,.margin-left--lg{margin-left:2rem!important}.margin-horiz--lg,.margin-right--lg{margin-right:2rem!important}.margin--lg{margin:2rem!important}.margin-bottom--xl,.margin-vert--xl{margin-bottom:5rem!important}.margin-top--xl,.margin-vert--xl{margin-top:5rem!important}.margin-horiz--xl,.margin-left--xl{margin-left:5rem!important}.margin-horiz--xl,.margin-right--xl{margin-right:5rem!important}.margin--xl{margin:5rem!important}.padding--none{padding:0!important}.padding-bottom--xs,.padding-vert--xs{padding-bottom:.25rem!important}.padding-top--xs,.padding-vert--xs{padding-top:.25rem!important}.padding-horiz--xs,.padding-left--xs{padding-left:.25rem!important}.padding-horiz--xs,.padding-right--xs{padding-right:.25rem!important}.padding--xs{padding:.25rem!important}.padding-bottom--sm,.padding-vert--sm{padding-bottom:.5rem!important}.padding-top--sm,.padding-vert--sm{padding-top:.5rem!important}.padding-horiz--sm,.padding-left--sm{padding-left:.5rem!important}.padding-horiz--sm,.padding-right--sm{padding-right:.5rem!important}.padding--sm{padding:.5rem!important}.padding-bottom--md,.padding-vert--md{padding-bottom:1rem!important}.padding-top--md,.padding-vert--md{padding-top:1rem!important}.padding-horiz--md,.padding-left--md{padding-left:1rem!important}.padding-horiz--md,.padding-right--md{padding-right:1rem!important}.padding--md{padding:1rem!important}.padding-bottom--lg,.padding-vert--lg{padding-bottom:2rem!important}.padding-top--lg,.padding-vert--lg{padding-top:2rem!important}.padding-horiz--lg,.padding-left--lg{padding-left:2rem!important}.padding-horiz--lg,.padding-right--lg{padding-right:2rem!important}.padding--lg{padding:2rem!important}.padding-bottom--xl,.padding-vert--xl{padding-bottom:5rem!important}.padding-top--xl,.padding-vert--xl{padding-top:5rem!important}.padding-horiz--xl,.padding-left--xl{padding-left:5rem!important}.padding-horiz--xl,.padding-right--xl{padding-right:5rem!important}.padding--xl{padding:5rem!important}code{background-color:var(--ifm-code-background);border:.1rem solid #0000001a;border-radius:var(--ifm-code-border-radius);font-family:var(--ifm-font-family-monospace);font-size:var(--ifm-code-font-size);padding:var(--ifm-code-padding-vertical) var(--ifm-code-padding-horizontal)}a code{color:inherit}pre{background-color:var(--ifm-pre-background);border-radius:var(--ifm-pre-border-radius);color:var(--ifm-pre-color);font:var(--ifm-code-font-size)/var(--ifm-pre-line-height) var(--ifm-font-family-monospace);padding:var(--ifm-pre-padding)}pre code{background-color:initial;border:none;font-size:100%;line-height:inherit;padding:0}kbd{background-color:var(--ifm-color-emphasis-0);border:1px solid var(--ifm-color-emphasis-400);border-radius:.2rem;box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-400);color:var(--ifm-color-emphasis-800);font:80% var(--ifm-font-family-monospace);padding:.15rem .3rem}h1,h2,h3,h4,h5,h6{color:var(--ifm-heading-color);font-family:var(--ifm-heading-font-family);font-weight:var(--ifm-heading-font-weight);line-height:var(--ifm-heading-line-height);margin:var(--ifm-heading-margin-top) 0 var(--ifm-heading-margin-bottom) 0}h1{font-size:var(--ifm-h1-font-size)}h2{font-size:var(--ifm-h2-font-size)}h3{font-size:var(--ifm-h3-font-size)}h4{font-size:var(--ifm-h4-font-size)}h5{font-size:var(--ifm-h5-font-size)}h6{font-size:var(--ifm-h6-font-size)}.container_lyt7,.container_lyt7>svg,img{max-width:100%}img[align=right]{padding-left:var(--image-alignment-padding)}img[align=left]{padding-right:var(--image-alignment-padding)}.markdown{--ifm-h1-vertical-rhythm-top:3;--ifm-h2-vertical-rhythm-top:2;--ifm-h3-vertical-rhythm-top:1.5;--ifm-heading-vertical-rhythm-top:1.25;--ifm-h1-vertical-rhythm-bottom:1.25;--ifm-heading-vertical-rhythm-bottom:1}.markdown:after,.markdown:before{content:"";display:table}.markdown:after{clear:both}.markdown h1:first-child{--ifm-h1-font-size:3rem;margin-bottom:calc(var(--ifm-h1-vertical-rhythm-bottom)*var(--ifm-leading))}.markdown>h2{--ifm-h2-font-size:2rem;margin-top:calc(var(--ifm-h2-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h3{--ifm-h3-font-size:1.5rem;margin-top:calc(var(--ifm-h3-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h4,.markdown>h5,.markdown>h6{margin-top:calc(var(--ifm-heading-vertical-rhythm-top)*var(--ifm-leading))}.markdown>p,.markdown>pre,.markdown>ul,.tabList__CuJ{margin-bottom:var(--ifm-leading)}.markdown li>p{margin-top:var(--ifm-list-paragraph-margin)}.markdown li+li{margin-top:var(--ifm-list-item-margin)}ol,ul{margin:0 0 var(--ifm-list-margin);padding-left:var(--ifm-list-left-padding)}ol ol,ul ol{list-style-type:lower-roman}ol ol,ol ul,ul ol,ul ul{margin:0}ol ol ol,ol ul ol,ul ol ol,ul ul ol{list-style-type:lower-alpha}table{border-collapse:collapse;display:block;margin-bottom:var(--ifm-spacing-vertical)}table thead tr{border-bottom:2px solid var(--ifm-table-border-color)}table thead,table tr:nth-child(2n){background-color:var(--ifm-table-stripe-background)}table tr{background-color:var(--ifm-table-background);border-top:var(--ifm-table-border-width) solid var(--ifm-table-border-color)}table td,table th{border:var(--ifm-table-border-width) solid var(--ifm-table-border-color);padding:var(--ifm-table-cell-padding)}table th{background-color:var(--ifm-table-head-background);color:var(--ifm-table-head-color);font-weight:var(--ifm-table-head-font-weight)}table td{color:var(--ifm-table-cell-color)}strong{font-weight:var(--ifm-font-weight-bold)}a{color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}a:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button:hover,.text--no-decoration,.text--no-decoration:hover,a:not([href]){text-decoration:none}p{margin:0 0 var(--ifm-paragraph-margin-bottom)}blockquote{border-left:var(--ifm-blockquote-border-left-width) solid var(--ifm-blockquote-border-color);box-shadow:var(--ifm-blockquote-shadow);color:var(--ifm-blockquote-color);font-size:var(--ifm-blockquote-font-size);padding:var(--ifm-blockquote-padding-vertical) var(--ifm-blockquote-padding-horizontal)}blockquote>:first-child{margin-top:0}blockquote>:last-child{margin-bottom:0}hr{background-color:var(--ifm-hr-background-color);border:0;height:var(--ifm-hr-height);margin:var(--ifm-hr-margin-vertical) 0;background-image:-webkit-linear-gradient(left,#f3f3f3,#adadb1,#f3f3f3);margin:0 auto}.shadow--lw{box-shadow:var(--ifm-global-shadow-lw)!important}.shadow--md{box-shadow:var(--ifm-global-shadow-md)!important}.shadow--tl{box-shadow:var(--ifm-global-shadow-tl)!important}.text--primary,.wordWrapButtonEnabled_EoeP .wordWrapButtonIcon_Bwma{color:var(--ifm-color-primary)}.text--secondary{color:var(--ifm-color-secondary)}.text--success{color:var(--ifm-color-success)}.text--info{color:var(--ifm-color-info)}.text--warning{color:var(--ifm-color-warning)}.text--danger{color:var(--ifm-color-danger)}.text--center{text-align:center}.text--left{text-align:left}.text--justify{text-align:justify}.text--right{text-align:right}.text--capitalize{text-transform:capitalize}.text--lowercase{text-transform:lowercase}.admonitionHeading_tbUL,.alert__heading,.text--uppercase{text-transform:uppercase}.text--light{font-weight:var(--ifm-font-weight-light)}.text--normal{font-weight:var(--ifm-font-weight-normal)}.text--semibold{font-weight:var(--ifm-font-weight-semibold)}.text--bold{font-weight:var(--ifm-font-weight-bold)}.text--italic{font-style:italic}.text--truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.text--break{word-wrap:break-word!important;word-break:break-word!important}.clean-btn{background:none;border:none;color:inherit;cursor:pointer;font-family:inherit;padding:0}.alert,.alert .close{color:var(--ifm-alert-foreground-color)}.clean-list{list-style:none;padding-left:0}.alert--primary{--ifm-alert-background-color:var(--ifm-color-primary-contrast-background);--ifm-alert-background-color-highlight:#3578e526;--ifm-alert-foreground-color:var(--ifm-color-primary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-primary-dark)}.alert--secondary{--ifm-alert-background-color:var(--ifm-color-secondary-contrast-background);--ifm-alert-background-color-highlight:#ebedf026;--ifm-alert-foreground-color:var(--ifm-color-secondary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-secondary-dark)}.alert--success{--ifm-alert-background-color:var(--ifm-color-success-contrast-background);--ifm-alert-background-color-highlight:#00a40026;--ifm-alert-foreground-color:var(--ifm-color-success-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-success-dark)}.alert--info{--ifm-alert-background-color:var(--ifm-color-info-contrast-background);--ifm-alert-background-color-highlight:#54c7ec26;--ifm-alert-foreground-color:var(--ifm-color-info-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-info-dark)}.alert--warning{--ifm-alert-background-color:var(--ifm-color-warning-contrast-background);--ifm-alert-background-color-highlight:#ffba0026;--ifm-alert-foreground-color:var(--ifm-color-warning-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-warning-dark)}.alert--danger{--ifm-alert-background-color:var(--ifm-color-danger-contrast-background);--ifm-alert-background-color-highlight:#fa383e26;--ifm-alert-foreground-color:var(--ifm-color-danger-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-danger-dark)}.alert{--ifm-code-background:var(--ifm-alert-background-color-highlight);--ifm-link-color:var(--ifm-alert-foreground-color);--ifm-link-hover-color:var(--ifm-alert-foreground-color);--ifm-link-decoration:underline;--ifm-tabs-color:var(--ifm-alert-foreground-color);--ifm-tabs-color-active:var(--ifm-alert-foreground-color);--ifm-tabs-color-active-border:var(--ifm-alert-border-color);background-color:var(--ifm-alert-background-color);border:var(--ifm-alert-border-width) solid var(--ifm-alert-border-color);border-left-width:var(--ifm-alert-border-left-width);border-radius:var(--ifm-alert-border-radius);box-shadow:var(--ifm-alert-shadow);padding:var(--ifm-alert-padding-vertical) var(--ifm-alert-padding-horizontal)}.alert__heading{align-items:center;display:flex;font:700 var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.5rem}.alert__icon{display:inline-flex;margin-right:.4em}.alert__icon svg{fill:var(--ifm-alert-foreground-color);stroke:var(--ifm-alert-foreground-color);stroke-width:0}.alert .close{margin:calc(var(--ifm-alert-padding-vertical)*-1) calc(var(--ifm-alert-padding-horizontal)*-1) 0 0;opacity:.75}.alert .close:focus,.alert .close:hover{opacity:1}.alert a{text-decoration-color:var(--ifm-alert-border-color)}.alert a:hover{text-decoration-thickness:2px}.avatar{column-gap:var(--ifm-avatar-intro-margin);display:flex}.avatar__photo{border-radius:50%;display:block;height:var(--ifm-avatar-photo-size);overflow:hidden;width:var(--ifm-avatar-photo-size)}.card--full-height,.navbar__logo img,body,html{height:100%}.avatar__photo--sm{--ifm-avatar-photo-size:2rem}.avatar__photo--lg{--ifm-avatar-photo-size:4rem}.avatar__photo--xl{--ifm-avatar-photo-size:6rem}.avatar__intro{display:flex;flex:1 1;flex-direction:column;justify-content:center;text-align:var(--ifm-avatar-intro-alignment)}.badge,.breadcrumbs__item,.breadcrumbs__link,.button,.dropdown>.navbar__link:after{display:inline-block}.avatar__name{font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base)}.avatar__subtitle{margin-top:.25rem}.avatar--vertical{--ifm-avatar-intro-alignment:center;--ifm-avatar-intro-margin:0.5rem;align-items:center;flex-direction:column}.badge{background-color:var(--ifm-badge-background-color);border:var(--ifm-badge-border-width) solid var(--ifm-badge-border-color);border-radius:var(--ifm-badge-border-radius);color:var(--ifm-badge-color);font-size:75%;font-weight:var(--ifm-font-weight-bold);line-height:1;padding:var(--ifm-badge-padding-vertical) var(--ifm-badge-padding-horizontal)}.badge--primary{--ifm-badge-background-color:var(--ifm-color-primary)}.badge--secondary{--ifm-badge-background-color:var(--ifm-color-secondary);color:var(--ifm-color-black)}.breadcrumbs__link,.button.button--secondary.button--outline:not(.button--active):not(:hover){color:var(--ifm-font-color-base)}.badge--success{--ifm-badge-background-color:var(--ifm-color-success)}.badge--info{--ifm-badge-background-color:var(--ifm-color-info)}.badge--warning{--ifm-badge-background-color:var(--ifm-color-warning)}.badge--danger{--ifm-badge-background-color:var(--ifm-color-danger)}.breadcrumbs{margin-bottom:0;padding-left:0}.breadcrumbs__item:not(:last-child):after{background:var(--ifm-breadcrumb-separator) center;content:" ";display:inline-block;filter:var(--ifm-breadcrumb-separator-filter);height:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier));margin:0 var(--ifm-breadcrumb-spacing);opacity:.5;width:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier))}.breadcrumbs__item--active .breadcrumbs__link{background:var(--ifm-breadcrumb-item-background-active);color:var(--ifm-breadcrumb-color-active)}.breadcrumbs__link{border-radius:var(--ifm-breadcrumb-border-radius);font-size:calc(1rem*var(--ifm-breadcrumb-size-multiplier));padding:calc(var(--ifm-breadcrumb-padding-vertical)*var(--ifm-breadcrumb-size-multiplier)) calc(var(--ifm-breadcrumb-padding-horizontal)*var(--ifm-breadcrumb-size-multiplier));transition-duration:var(--ifm-transition-fast);transition-property:background,color}.breadcrumbs__link:any-link:hover,.breadcrumbs__link:link:hover,.breadcrumbs__link:visited:hover,area[href].breadcrumbs__link:hover{background:var(--ifm-breadcrumb-item-background-active);text-decoration:none}.breadcrumbs--sm{--ifm-breadcrumb-size-multiplier:0.8}.breadcrumbs--lg{--ifm-breadcrumb-size-multiplier:1.2}.button{background-color:var(--ifm-button-background-color);border:var(--ifm-button-border-width) solid var(--ifm-button-border-color);border-radius:var(--ifm-button-border-radius);cursor:pointer;font-size:calc(.875rem*var(--ifm-button-size-multiplier));font-weight:var(--ifm-button-font-weight);line-height:1.5;padding:calc(var(--ifm-button-padding-vertical)*var(--ifm-button-size-multiplier)) calc(var(--ifm-button-padding-horizontal)*var(--ifm-button-size-multiplier));text-align:center;transition-duration:var(--ifm-button-transition-duration);transition-property:color,background,border-color;-webkit-user-select:none;user-select:none;white-space:nowrap}.button,.button:hover{color:var(--ifm-button-color)}.button--outline{--ifm-button-color:var(--ifm-button-border-color)}.button--outline:hover{--ifm-button-background-color:var(--ifm-button-border-color)}.button--link{--ifm-button-border-color:#0000;color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}.button--link.button--active,.button--link:active,.button--link:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button.disabled,.button:disabled,.button[disabled]{opacity:.65;pointer-events:none}.button--sm{--ifm-button-size-multiplier:0.8}.button--lg{--ifm-button-size-multiplier:1.35}.button--block{display:block;width:100%}.button.button--secondary{color:var(--ifm-color-gray-900)}:where(.button--primary){--ifm-button-background-color:var(--ifm-color-primary);--ifm-button-border-color:var(--ifm-color-primary)}:where(.button--primary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-primary-dark);--ifm-button-border-color:var(--ifm-color-primary-dark)}.button--primary.button--active,.button--primary:active{--ifm-button-background-color:var(--ifm-color-primary-darker);--ifm-button-border-color:var(--ifm-color-primary-darker)}:where(.button--secondary){--ifm-button-background-color:var(--ifm-color-secondary);--ifm-button-border-color:var(--ifm-color-secondary)}:where(.button--secondary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-secondary-dark);--ifm-button-border-color:var(--ifm-color-secondary-dark)}.button--secondary.button--active,.button--secondary:active{--ifm-button-background-color:var(--ifm-color-secondary-darker);--ifm-button-border-color:var(--ifm-color-secondary-darker)}:where(.button--success){--ifm-button-background-color:var(--ifm-color-success);--ifm-button-border-color:var(--ifm-color-success)}:where(.button--success):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-success-dark);--ifm-button-border-color:var(--ifm-color-success-dark)}.button--success.button--active,.button--success:active{--ifm-button-background-color:var(--ifm-color-success-darker);--ifm-button-border-color:var(--ifm-color-success-darker)}:where(.button--info){--ifm-button-background-color:var(--ifm-color-info);--ifm-button-border-color:var(--ifm-color-info)}:where(.button--info):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-info-dark);--ifm-button-border-color:var(--ifm-color-info-dark)}.button--info.button--active,.button--info:active{--ifm-button-background-color:var(--ifm-color-info-darker);--ifm-button-border-color:var(--ifm-color-info-darker)}:where(.button--warning){--ifm-button-background-color:var(--ifm-color-warning);--ifm-button-border-color:var(--ifm-color-warning)}:where(.button--warning):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-warning-dark);--ifm-button-border-color:var(--ifm-color-warning-dark)}.button--warning.button--active,.button--warning:active{--ifm-button-background-color:var(--ifm-color-warning-darker);--ifm-button-border-color:var(--ifm-color-warning-darker)}:where(.button--danger){--ifm-button-background-color:var(--ifm-color-danger);--ifm-button-border-color:var(--ifm-color-danger)}:where(.button--danger):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-danger-dark);--ifm-button-border-color:var(--ifm-color-danger-dark)}.button--danger.button--active,.button--danger:active{--ifm-button-background-color:var(--ifm-color-danger-darker);--ifm-button-border-color:var(--ifm-color-danger-darker)}.button-group{display:inline-flex;gap:var(--ifm-button-group-spacing)}.button-group>.button:not(:first-child){border-bottom-left-radius:0;border-top-left-radius:0}.button-group>.button:not(:last-child){border-bottom-right-radius:0;border-top-right-radius:0}.button-group--block{display:flex;justify-content:stretch}.button-group--block>.button{flex-grow:1}.card{background-color:var(--ifm-card-background-color);border-radius:var(--ifm-card-border-radius);box-shadow:var(--ifm-global-shadow-lw);display:flex;flex-direction:column;overflow:hidden}.card__image{padding-top:var(--ifm-card-vertical-spacing)}.card__image:first-child{padding-top:0}.card__body,.card__footer,.card__header{padding:var(--ifm-card-vertical-spacing) var(--ifm-card-horizontal-spacing)}.card__body:not(:last-child),.card__footer:not(:last-child),.card__header:not(:last-child){padding-bottom:0}.card__body>:last-child,.card__footer>:last-child,.card__header>:last-child{margin-bottom:0}.card__footer{margin-top:auto}.table-of-contents{font-size:.8rem;margin-bottom:0;padding:var(--ifm-toc-padding-vertical) 0}.table-of-contents,.table-of-contents ul{list-style:none;padding-left:var(--ifm-toc-padding-horizontal)}.table-of-contents li{margin:var(--ifm-toc-padding-vertical) var(--ifm-toc-padding-horizontal)}.table-of-contents__left-border{border-left:1px solid var(--ifm-toc-border-color)}.table-of-contents__link{color:var(--ifm-toc-link-color);display:block}.table-of-contents__link--active,.table-of-contents__link--active code,.table-of-contents__link:hover,.table-of-contents__link:hover code{color:var(--ifm-color-primary);text-decoration:none}.close{color:var(--ifm-color-black);float:right;font-size:1.5rem;font-weight:var(--ifm-font-weight-bold);line-height:1;opacity:.5;padding:1rem;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.close:hover{opacity:.7}.close:focus,.theme-code-block-highlighted-line .codeLineNumber_Tfdd:before{opacity:.8}.dropdown{display:inline-flex;font-weight:var(--ifm-dropdown-font-weight);position:relative;vertical-align:top}.dropdown--hoverable:hover .dropdown__menu,.dropdown--show .dropdown__menu{opacity:1;pointer-events:all;transform:translateY(-1px);visibility:visible}#nprogress,.dropdown__menu,.navbar__item.dropdown .navbar__link:not([href]){pointer-events:none}.dropdown--right .dropdown__menu{left:inherit;right:0}.dropdown--nocaret .navbar__link:after{content:none!important}.dropdown__menu{background-color:var(--ifm-dropdown-background-color);border-radius:var(--ifm-global-radius);box-shadow:var(--ifm-global-shadow-md);left:0;list-style:none;max-height:80vh;min-width:10rem;opacity:0;overflow-y:auto;padding:.5rem;position:absolute;top:calc(100% - var(--ifm-navbar-item-padding-vertical) + .3rem);transform:translateY(-.625rem);transition-duration:var(--ifm-transition-fast);transition-property:opacity,transform,visibility;transition-timing-function:var(--ifm-transition-timing-default);visibility:hidden;z-index:var(--ifm-z-index-dropdown)}.menu__caret,.menu__link,.menu__list-item-collapsible{border-radius:.25rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.dropdown__link{border-radius:.25rem;color:var(--ifm-dropdown-link-color);display:block;font-size:.875rem;margin-top:.2rem;padding:.25rem .5rem;white-space:nowrap}.dropdown__link--active,.dropdown__link:hover{background-color:var(--ifm-dropdown-hover-background-color);color:var(--ifm-dropdown-link-color);text-decoration:none}.dropdown__link--active,.dropdown__link--active:hover{--ifm-dropdown-link-color:var(--ifm-link-color)}.dropdown>.navbar__link:after{border-color:currentcolor #0000;border-style:solid;border-width:.4em .4em 0;content:"";margin-left:.3em;position:relative;top:2px;transform:translateY(-50%)}.footer{background-color:var(--ifm-footer-background-color);color:var(--ifm-footer-color);padding:var(--ifm-footer-padding-vertical) var(--ifm-footer-padding-horizontal)}.footer--dark{--ifm-footer-background-color:#303846;--ifm-footer-color:var(--ifm-footer-link-color);--ifm-footer-link-color:var(--ifm-color-secondary);--ifm-footer-title-color:var(--ifm-color-white)}.footer__links{margin-bottom:1rem}.footer__link-item{color:var(--ifm-footer-link-color);line-height:2}.footer__link-item:hover{color:var(--ifm-footer-link-hover-color)}.footer__link-separator{margin:0 var(--ifm-footer-link-horizontal-spacing)}.footer__logo{margin-top:1rem;max-width:var(--ifm-footer-logo-max-width)}.footer__title{color:var(--ifm-footer-title-color);font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base);margin-bottom:var(--ifm-heading-margin-bottom)}.menu,.navbar__link{font-weight:var(--ifm-font-weight-semibold)}.docItemContainer_Djhp article>:first-child,.docItemContainer_Djhp header+*,.footer__item{margin-top:0}.admonitionContent_S0QG>:last-child,.collapsibleContent_i85q>:last-child,.footer__items,.tabItem_Ymn6>:last-child{margin-bottom:0}.codeBlockStandalone_MEMb,[type=checkbox]{padding:0}.hero{align-items:center;background-color:var(--ifm-hero-background-color);color:var(--ifm-hero-text-color);display:flex;padding:4rem 2rem}.hero--primary{--ifm-hero-background-color:var(--ifm-color-primary);--ifm-hero-text-color:var(--ifm-font-color-base-inverse)}.hero--dark{--ifm-hero-background-color:#303846;--ifm-hero-text-color:var(--ifm-color-white)}.hero__title{font-size:3rem}.hero__subtitle{font-size:1.5rem}.menu__list{list-style:none;margin:0;padding-left:0}.menu__caret,.menu__link{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu__list .menu__list{flex:0 0 100%;margin-top:.25rem;padding-left:var(--ifm-menu-link-padding-horizontal)}.menu__list-item:not(:first-child){margin-top:.25rem}.menu__list-item--collapsed .menu__list{height:0;overflow:hidden}.details_lb9f[data-collapsed=false].isBrowser_bmU9>summary:before,.details_lb9f[open]:not(.isBrowser_bmU9)>summary:before,.menu__list-item--collapsed .menu__caret:before,.menu__list-item--collapsed .menu__link--sublist:after{transform:rotate(90deg)}.menu__list-item-collapsible{display:flex;flex-wrap:wrap;position:relative}.menu__caret:hover,.menu__link:hover,.menu__list-item-collapsible--active,.menu__list-item-collapsible:hover{background:var(--ifm-menu-color-background-hover)}.menu__list-item-collapsible .menu__link--active,.menu__list-item-collapsible .menu__link:hover{background:none!important}.menu__caret,.menu__link{align-items:center;display:flex}.menu__link{color:var(--ifm-menu-color);flex:1;line-height:1.25}.menu__link:hover{color:var(--ifm-menu-color);text-decoration:none}.menu__caret:before,.menu__link--sublist-caret:after{height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast) linear;width:1.25rem;filter:var(--ifm-menu-link-sublist-icon-filter);content:""}.menu__link--sublist-caret:after{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem;margin-left:auto;min-width:1.25rem}.navbar__items--center .navbar__brand,body{margin:0}.menu__link--active,.menu__link--active:hover{color:var(--ifm-menu-color-active)}.navbar__brand,.navbar__link{color:var(--ifm-navbar-link-color)}.menu__link--active:not(.menu__link--sublist){background-color:var(--ifm-menu-color-background-active)}.menu__caret:before{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem}.navbar--dark,html[data-theme=dark]{--ifm-menu-link-sublist-icon-filter:invert(100%) sepia(94%) saturate(17%) hue-rotate(223deg) brightness(104%) contrast(98%)}.navbar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-navbar-shadow);height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar,.navbar>.container,.navbar>.container-fluid{display:flex}.navbar--fixed-top{position:sticky;top:0;z-index:var(--ifm-z-index-fixed)}.navbar-sidebar,.navbar-sidebar__backdrop{bottom:0;opacity:0;position:fixed;transition-duration:var(--ifm-transition-fast);transition-timing-function:ease-in-out;left:0;top:0;visibility:hidden}.navbar__inner{display:flex;flex-wrap:wrap;justify-content:space-between;width:100%}.navbar__brand{align-items:center;display:flex;margin-right:1rem;min-width:0}.navbar__brand:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.announcementBarContent_xLdY,.navbar__title{flex:1 1 auto}.navbar__toggle{display:none;margin-right:.5rem}.navbar__logo{flex:0 0 auto;height:2rem;margin-right:.5rem}.navbar__items{align-items:center;display:flex;flex:1;min-width:0}.navbar__items--center{flex:0 0 auto}.navbar__items--center+.navbar__items--right{flex:1}.navbar__items--right{flex:0 0 auto;justify-content:flex-end}.navbar__items--right>:last-child{padding-right:0}.navbar__item{display:inline-block;padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.navbar__link--active,.navbar__link:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.navbar--dark,.navbar--primary{--ifm-menu-color:var(--ifm-color-gray-300);--ifm-navbar-link-color:var(--ifm-color-gray-100);--ifm-navbar-search-input-background-color:#ffffff1a;--ifm-navbar-search-input-placeholder-color:#ffffff80;color:var(--ifm-color-white)}.navbar--dark{--ifm-navbar-background-color:#242526;--ifm-menu-color-background-active:#ffffff0d;--ifm-navbar-search-input-color:var(--ifm-color-white)}.navbar--primary{--ifm-navbar-background-color:var(--ifm-color-primary);--ifm-navbar-link-hover-color:var(--ifm-color-white);--ifm-menu-color-active:var(--ifm-color-white);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-500)}.navbar__search-input{-webkit-appearance:none;appearance:none;background:var(--ifm-navbar-search-input-background-color) var(--ifm-navbar-search-input-icon) no-repeat .75rem center/1rem 1rem;border:none;border-radius:2rem;color:var(--ifm-navbar-search-input-color);cursor:text;display:inline-block;font-size:.9rem;height:2rem;padding:0 .5rem 0 2.25rem;width:12.5rem}.navbar__search-input::placeholder{color:var(--ifm-navbar-search-input-placeholder-color)}.navbar-sidebar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-global-shadow-md);transform:translate3d(-100%,0,0);transition-property:opacity,visibility,transform;width:var(--ifm-navbar-sidebar-width)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar__items{transform:translateZ(0)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar--show .navbar-sidebar__backdrop{opacity:1;visibility:visible}.navbar-sidebar__backdrop{background-color:#0009;right:0;transition-property:opacity,visibility}.navbar-sidebar__brand{align-items:center;box-shadow:var(--ifm-navbar-shadow);display:flex;flex:1;height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar-sidebar__items{display:flex;height:calc(100% - var(--ifm-navbar-height));transition:transform var(--ifm-transition-fast) ease-in-out}.navbar-sidebar__items--show-secondary{transform:translate3d(calc((var(--ifm-navbar-sidebar-width))*-1),0,0)}.navbar-sidebar__item{flex-shrink:0;padding:.5rem;width:calc(var(--ifm-navbar-sidebar-width))}.navbar-sidebar__back{background:var(--ifm-menu-color-background-active);font-size:15px;font-weight:var(--ifm-button-font-weight);margin:0 0 .2rem -.5rem;padding:.6rem 1.5rem;position:relative;text-align:left;top:-.5rem;width:calc(100% + 1rem)}.navbar-sidebar__close{display:flex;margin-left:auto}.pagination{column-gap:var(--ifm-pagination-page-spacing);display:flex;font-size:var(--ifm-pagination-font-size);padding-left:0}.pagination--sm{--ifm-pagination-font-size:0.8rem;--ifm-pagination-padding-horizontal:0.8rem;--ifm-pagination-padding-vertical:0.2rem}.pagination--lg{--ifm-pagination-font-size:1.2rem;--ifm-pagination-padding-horizontal:1.2rem;--ifm-pagination-padding-vertical:0.3rem}.pagination__item{display:inline-flex}.pagination__item>span{padding:var(--ifm-pagination-padding-vertical)}.pagination__item--active .pagination__link{color:var(--ifm-pagination-color-active)}.pagination__item--active .pagination__link,.pagination__item:not(.pagination__item--active):hover .pagination__link{background:var(--ifm-pagination-item-active-background)}.pagination__item--disabled,.pagination__item[disabled]{opacity:.25;pointer-events:none}.pagination__link{border-radius:var(--ifm-pagination-border-radius);color:var(--ifm-font-color-base);display:inline-block;padding:var(--ifm-pagination-padding-vertical) var(--ifm-pagination-padding-horizontal);transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination__link:hover{text-decoration:none}.pagination-nav{grid-gap:var(--ifm-spacing-horizontal);display:grid;gap:var(--ifm-spacing-horizontal);grid-template-columns:repeat(2,1fr)}.pagination-nav__link{border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-pagination-nav-border-radius);display:block;height:100%;line-height:var(--ifm-heading-line-height);padding:var(--ifm-global-spacing);transition:border-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination-nav__link:hover{border-color:var(--ifm-pagination-nav-color-hover);text-decoration:none}.pagination-nav__link--next{grid-column:2/3;text-align:right}.pagination-nav__label{font-size:var(--ifm-h4-font-size);font-weight:var(--ifm-heading-font-weight);word-break:break-word}.pagination-nav__link--prev .pagination-nav__label:before{content:"« "}.pagination-nav__link--next .pagination-nav__label:after{content:" »"}.pagination-nav__sublabel{color:var(--ifm-color-content-secondary);font-size:var(--ifm-h5-font-size);font-weight:var(--ifm-font-weight-semibold);margin-bottom:.25rem}.pills__item,.tabs{font-weight:var(--ifm-font-weight-bold)}.pills{display:flex;gap:var(--ifm-pills-spacing);padding-left:0}.pills__item{border-radius:.5rem;cursor:pointer;display:inline-block;padding:.25rem 1rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs,:not(.containsTaskList_mC6p>li)>.containsTaskList_mC6p{padding-left:0}.pills__item--active{color:var(--ifm-pills-color-active)}.pills__item--active,.pills__item:not(.pills__item--active):hover{background:var(--ifm-pills-color-background-active)}.pills--block{justify-content:stretch}.pills--block .pills__item{flex-grow:1;text-align:center}.tabs{color:var(--ifm-tabs-color);display:flex;margin-bottom:0;overflow-x:auto}.tabs__item{border-bottom:3px solid #0000;border-radius:var(--ifm-global-radius);cursor:pointer;display:inline-flex;padding:var(--ifm-tabs-padding-vertical) var(--ifm-tabs-padding-horizontal);transition:background-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs__item--active{border-bottom-color:var(--ifm-tabs-color-active-border);border-bottom-left-radius:0;border-bottom-right-radius:0;color:var(--ifm-tabs-color-active)}.tabs__item:hover{background-color:var(--ifm-hover-overlay)}.tabs--block{justify-content:stretch}.tabs--block .tabs__item{flex-grow:1;justify-content:center}html[data-theme=dark]{--ifm-color-scheme:dark;--ifm-color-emphasis-0:var(--ifm-color-gray-1000);--ifm-color-emphasis-100:var(--ifm-color-gray-900);--ifm-color-emphasis-200:var(--ifm-color-gray-800);--ifm-color-emphasis-300:var(--ifm-color-gray-700);--ifm-color-emphasis-400:var(--ifm-color-gray-600);--ifm-color-emphasis-600:var(--ifm-color-gray-400);--ifm-color-emphasis-700:var(--ifm-color-gray-300);--ifm-color-emphasis-800:var(--ifm-color-gray-200);--ifm-color-emphasis-900:var(--ifm-color-gray-100);--ifm-color-emphasis-1000:var(--ifm-color-gray-0);--ifm-background-color:#1b1b1d;--ifm-background-surface-color:#242526;--ifm-hover-overlay:#ffffff0d;--ifm-color-content:#e3e3e3;--ifm-color-content-secondary:#fff;--ifm-breadcrumb-separator-filter:invert(64%) sepia(11%) saturate(0%) hue-rotate(149deg) brightness(99%) contrast(95%);--ifm-code-background:#ffffff1a;--ifm-scrollbar-track-background-color:#444;--ifm-scrollbar-thumb-background-color:#686868;--ifm-scrollbar-thumb-hover-background-color:#7a7a7a;--ifm-table-stripe-background:#ffffff12;--ifm-toc-border-color:var(--ifm-color-emphasis-200);--ifm-color-primary-contrast-background:#102445;--ifm-color-primary-contrast-foreground:#ebf2fc;--ifm-color-secondary-contrast-background:#474748;--ifm-color-secondary-contrast-foreground:#fdfdfe;--ifm-color-success-contrast-background:#003100;--ifm-color-success-contrast-foreground:#e6f6e6;--ifm-color-info-contrast-background:#193c47;--ifm-color-info-contrast-foreground:#eef9fd;--ifm-color-warning-contrast-background:#4d3800;--ifm-color-warning-contrast-foreground:#fff8e6;--ifm-color-danger-contrast-background:#4b1113;--ifm-color-danger-contrast-foreground:#ffebec;--docsearch-text-color:#f5f6f7;--docsearch-container-background:#090a11cc;--docsearch-modal-background:#15172a;--docsearch-modal-shadow:inset 1px 1px 0 0 #2c2e40,0 3px 8px 0 #000309;--docsearch-searchbox-background:#090a11;--docsearch-searchbox-focus-background:#000;--docsearch-hit-color:#bec3c9;--docsearch-hit-shadow:none;--docsearch-hit-background:#090a11;--docsearch-key-gradient:linear-gradient(-26.5deg,#565872,#31355b);--docsearch-key-shadow:inset 0 -2px 0 0 #282d55,inset 0 0 1px 1px #51577d,0 2px 2px 0 #0304094d;--docsearch-footer-background:#1e2136;--docsearch-footer-shadow:inset 0 1px 0 0 #494c6a80,0 -4px 8px 0 #0003;--docsearch-logo-color:#fff;--docsearch-muted-color:#7f8497}#nprogress .bar{background:var(--docusaurus-progress-bar-color);height:2px;left:0;position:fixed;top:0;width:100%;z-index:1031}#nprogress .peg{box-shadow:0 0 10px var(--docusaurus-progress-bar-color),0 0 5px var(--docusaurus-progress-bar-color);height:100%;opacity:1;position:absolute;right:0;transform:rotate(3deg) translateY(-4px);width:100px}@font-face{font-family:Poppins;font-style:normal;font-weight:400;src:local(""),url(/assets/fonts/poppins-regular-f61407da33b59324fbefe468ce6917ab.woff) format("woff2"),url(data:font/woff2;base64,d09GMgABAAAAAB7MAAwAAAAAP6AAAB54AAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGx4cLgZgAIFUCudM0jYLgzYAATYCJAOGaAQgBYNcB4QLG34ysyLYOAAgoXcUUbVZLPs/JHBDBr6G+hIpYlQoaayFQFiGbR8DjCviFJxE41HqT/OOXC0/Z9GQVQfAWhGOAF/O89SlbJ4fIclsS0SNUfbMPgE5dhgAVqioPNrYqNhUZCQIRaCBLIK83W+vy6VjrXTMAYfFIfS65yPR0ziMQaj0M56vY3h+bj1EaSMJC9jIVbCMv+2vgv0FSxg1alhIGl2gBxecx4xqvCi9NvP2XXsT27xJRGharfanif3dB1IbH7D/n1vvG1gi90J+0acoU3UyzKzznZ8Q8S/KSQdFE/HKrFSrbCW+EZMGJ/JOrWFOCzJcLDcqMIye7xUDVgJSUf//a37amcAiFDGyIExnC3pkybH+6s19gXl5eXMmRB9Ln2eT0vLklZIpALkqpMkyJiUkt25tgVyFkF8WZYV0VRkTScF3O1cffLfDNqsTWFV2rwUPIfjECpG7lz5AAVbIGyfmmutgE0hgB8wJNaQ30lgYP+3xQCMZjDoEDzyVUi580bg7SwwCfbU2wM1JQR5DDgSJxZ7llnqObrxHpgXHgAOb7RkL2/gXhVu/D4DXAHqoBwD7DAQKDGCTWIoEB7JEnap7PP3Aas/+DynGHuqZ3u8P+0ZRlopUoQZt6CZzX2tbJVpJTFb5OJJs6W/YeiSlKS9d/6ya+d/8fZ6YS2ftgn326bdP//3yrm98rcc+6yxV+PO3P/P9e2I8D/za2srbgL+A1V8AG18HMDYA+dea0d4dnI0DUjAxhECe4VuLDc7VmwqwYTiuFzfuViWi6aNC0Z4wRhGs1DQggom7F3EXA3Uj7WxnxPmMGXjAq72EYaM9d+AG6ziGD0E2Ej5mwCsAOBXGWG1AYIJtCLwQDEeD1BqU5mmQH15SfTnMYUKO6QE/4F8j1ltms2QsVoSSz4WUYkelXQ/7kGlFRAxAW5s6qQqGsbVQl+8GCZsOFLXw0ul+mnssHngMiMV+wiHwzdVDGrfpDWLDkN8ewxN6ZRvyKaQ6K04Nqc6B6o8yc2SW7XOOuk1FcKA/XlsYa6voyRGelb8acI8ZbnoE+I9bLYFYSdUlo6Miyo+OYJqnPAsyYlzDkHe2VlOgYQcrDqbWBQEPfr7lShm/dUdxu7Up8/IxDbSiNG8zdthTYufBq+u76tI1uHc3vs7tLencpdyDGVdkPq4cQvLkEMhSXsY0J+4dQu0yRz7TZW7mccfhw18fQHPvvAbszInsG2aKiyHGmqz3Yvm3u8vmFpjxaPQezfuYJlpv3PN2ELEgVO3vPWKl2Ow/IpRJqDdPE8JqY3cYGuq1ECiB1yW0RVSa66GOdCXTLnh+xxeZ2xOqquVBgJFiAV77CqaFeYl2Q3S3BeKrdnAR3ZBPYM8o7ibQuBGK9xO3wKqYDmUkxZX+YNiXA09cBmjYPgA3eC8JPjEQxkjfWNFnGY2x+ej0ZGhv9VXwYAX9XZ1h53rzljTYf774b0vaBdtfcXWQxtyLpkaMb6v1GUsdrpV5ajkXRww17Pu1Ak3yTzYCGLr8Iara73lF7Cb+vtFNzajk4iaA8ltEQiOf66wxQAem4oXOWNTna0SswZSLr69zS/jeLLVejEOPPrPCBwhciHFchPFxIsHeTycPj9TzLzASCiQQ3wskAX5KdXKVa1sfQ/sqkMZ64u7bhwtw/U8GOoEbFSSWFLQnxd1WqtNBLxi8rBazf8BSfI/jBekq6kcBa1EXlt6oSzrtaXe+aXn1zDSw+t2F0YBoSCOqvK6Ty82lpKxNRobfRmluFw/KDLgqURpESW0OWpuaXaHkb7VmE8MOcR+a/dhsTsOYCArwsIQcjWl06SjVvNzhISxlLRqvol7V9Uvp5h+XUC6iUmapwuGiAxeC1khAQZdBxgFmUTC3Z4yjPVCczdRKlpb1KicmRnbBwTOOKbXkmmPFA5OJDMkKWz+t9i6mbI/as3b5+7k73N1wNPu9xjdrpg+sMm01qiKDGA5cKAYnIcm+Qfh+uhwzPoM6yGjV7B60MOvA1XEKSqIe0eUd09HDQqAknanN3NpKivMX9BiYBbda9g9oXcV/PqUdinIHcm/0xF16f7v01DQjzirvp4PZFBDVvuQsuKo43h6x4onbhb8L/aorsWA7vreavOxZrXrFsTJEMSfmbtxnkGGNSLjUx4n7KqyizvGq3pG6UbpMYLQKzia0LJaGR1CpXzjijsrdmFQNi3l3ZYBXuX+Llw+XK27BoJFUN5uJGbP5AMzwbSAAsF0Rv6p1ZltdaUBWVzRXCpFiUgwe6Baj927ntwXVUyMpM/vud4ksUyM6kqSZVDs0S3iuldjWchysX2vbV4o/Pz8amoTijmvhaPWLd9VIgu1A/oldyDH0JWVzJzxjd0w6fMbXH0zOZ8+5usPgm5jaIvuHGYtiiiYCEnuoL1AdNtUB41RrTZ7Prwsb3D4W0uh3f+8i9Y0bosq9ebt7S1nLbRmg04XpC671CTyK/OjbeAPmgF2YeccypeMa1gKZ9E8jw7TT55F7FR2oTczlzcGotU+MVuoqoXw1TPk9a1bQ3tfBEjN7MCtjyfklpqmKJbbc34qhy8Q7eToWpjQGEGGJrZnakycxfRbZY43YyZIvHGjmrkwH3GX9ieY2bjaGtjSmpnJoafqeSCs7vP/AmRVQ5uYueAgyd/6U8/Ce98r/4CsiEQrURcQ8yxIrH6kYK037PryUXX1DSGoin9hSaDQjFAbj+CSei/XKrsvfazl9OA8ULAsnF+SYtWHLOyPlaySB9McWn9vqi5Rydc4BO8Wx7X4x481Yc106vl4c+4xeZM3i0C7U4fBplHqWdJI9w+dIizb5C8c3+c+W/s1fAWyvmjjcoH8R8PSKF/buAQYf8Vni2k1zcVt5+eRRTQvCvnyhGrvdSHxMpO0f+ipWFcWyWH3YgmF3OGGrEXByld91/lvL+Y5FK7ufR6crNdA/dFvx3trsWXx1L772EFa64hj34WLmJ78Qxmfiq3ku6j9tjemYFnMBbJS2VsycEIoo1+qL53Lh/wMrVnnuOnTikosR+44dGJUxlM41kdlU4FBuwQ31zIAn1EjHa7nrvNj5pOtpV0HbfVdql/aCfyuO6xX04YiLwnDUwrSZlLWD5ZDYebCxYV9c+xxqTqCguAXT+t+Kts5OICnYBGqxYfM2RfN3UMFKB0aj7MClv7cY2Vv0Qy834/a5ps7PZzGMEF78qaPzfxjAib6kF/C4RcYRSkaGno7qZohKB/HLxyWd4Sef+fFgBxou5nwzT7e+8KwV9AakNuq6Xfl63b7m+boXN6rX5w0wZBHB4mAKYvV0vT2+1g/UHmZV6nvRMD2KqRLoa0LOQUa60RRX6opXeUSMPS+FwwzZDJUwMmp5zZ/Ue5QfD3CEeFJv+D9QUK/XCQR6nUSaGKTyuSui9n1+07HVeHw4O7sGh2/O/u9whaDLSnT6BoZqRzMe1zw4mt9WwG9H0PVkBVRN4bgFCkO1buKro7lYrMyYV0TXFuQpxyMJn3PzU1AT4suuXhsrrvXqFw4u2bBhvtBSUHHpcguxnG1SS0D8N+OSz/BTzoA7SHnWnn01hWUl7sRwWU3u5vXl6cFQohsQoomCHn39Zh/FkI1yKK/v2/PtN+Z2gvaNKME85nxGjmiydegq1ZBVk2254nnMeUVo0TTb0NXwsNXAJLt9z3zvlvpWv7n/NuiaHk7hQilAO0gac88Y2T0cbbMPH2UD3HHhYwvms8e+nvDx+Qt22LPBMmayTCGWINnAah8zRZeIgfBHzw5yWoyHbjpawVfdi9u9i6RCnlImUZoGyGyx4ZYpgdLJtX6jd8P0Ro/GBv8qBKLJLaVBiZdINtJ4suIFgwRDVU6YSbGXUhTls6vjA7YKo0omgyCWyicMpMJpCHCyeDQJX8BT8QPFIG+L1PWw6ge/1r/VvjX2YkrTYJDU4X4QLs6nGksl2EouRKutFhpCbRWDi4vPGfkCrdal0WhNGpqGPNay5htwYGV9sXUO2OArZ4lKp7bUSqgV5Xy4tB7BbZ0UBt5wKFFn+nqFKhsvo8BWl0FmsCg1WpsavJ8/er4jvb1dcx/MXcg2cug0SzkZhrFUdAudxbWYbkAusZBf0kCF4Toq7IRiufv6kLtaoUyKufMYBrFIbJAwfj7hlEgFdvX6yixWC8SITAUOzYG4PKOmLWYt7CFzxGV0dkhVMa29bkHNt73N2O3lZmewtireZLq61GyQq4wILDNYIYXeqgGS2U8fPn1Q/+zBs4eg8n91VMffGbLAaciS+u474Tk+JewKtfnDA1za2I3jfWG2kSOXcnkyEcvCodm9JKHtrOj7sJ7W7UbrKp+WssRbLCLrWf+4SDTY4tCqeG1hjdydKf9CS8rMHsah5bNU4+sYHRsWL550pK7i7BTQsXnRIpc867ANXVGxTWdb5V/Y9tcfM5dIBCoqxk6nMgRUIsTIc5BpTgr4ax2xaF3Jh97Q+94S/YPp7ulucLXkV7SikEYzBYmygdH3ch+epCXzRDpPDHqtQMqm0bhZtPpB9lQ7k6UViTe93goKTyDbNiGeus6qXH/VlUoxrKgXC5tMRiD5V6SAK0VXqnJ9nZV1nk12ZGsQrO7bZbJtrKiwbdhlqOuP9s+qWriorX3R0lnN6Gawu/rvz6rPT8epJh2YpAJ3+pSEf18rX7OQKHA8vlQlUigaRKImg0E0rUGkCHZMSSodo5wkizcji1YaHJ7NdsfWYNCxbbPdE+6qyvWBQF8U4fg4SBQh+8hgd18UiYK9fbGWUNBqC5UhyAAChTKOEAvOTuDykCginiiqZzt4CNiteKnURhFAGtDbiwx8GCv4Y+AgpNf7P3uy1SJVhRjkAFJVUIiAvLjNdse24VQvbYBsLS1FNDcvpGkQi6YbTaKmerFSCQTdZLSR/z2sABNWNtZNnYVCor82Tq2172iWC7ltK2aBWWBax7x5OJqns0n91s0wrqc7tJDVWsHz7QoO7RxXPR6J/qqtpNEQNmSoMgzvRrUGZikVEJcHiVWzwIO4SiLXkuARyEQSoVJAyf9KmN4sGW5AsWAhk2ktI0i8TZ54nV+u4HCZchYtt+evxZIRRjQbFlFoxaEiCLzrUx4JI+GjSrCzL+q0F+t1bOeMIn1WaWMjU6lUNpJGax9Y0BfXFzIpz32beToBe1n0fF9wK3E30Q9ORD2rNbs1wc3wGhiEkNtI6a6hm4YGbiG3HcHdwzYPCwJq329fxSPxv38V2Fui6gVrNSbtMUifpdEegMDI5btU7vNuuLcEHOwcucJmp3aQFe2FA0+7qhe073H9k2z+N9n97XrQlGMaZQIPl0hu1WpBYam4uVGqgELcTX4H2hHsKefJFRG5uM14lUNCTEQKxUiQdh6f5DA+yEZUJw+cfFzBlSojUnGzyShua5Qr5OXcngDyAMmtr/ieIlDIX5rJDi6PFY0jyh+i5slSTaDdM8riva5jcjTucq/PXaHhaIt+9442dvh9mlxe3GKZTFWloIp1NdvxwFG6JaR2R+OrSZCC3T9Q57dDbA39k3e0psPr1UyVSlvNZnHLVIlOM0ksaFQ5ZTilJpcoLbHGqe0Ac6++H+mXq+R5DpcpBHOG0PPqQQRbjsGqE1X8hkahtnJxIMVq/9XJEalcTnN9T4g/CmrC6xxd/H4s63gdzkdlhGCxnW7QW+SQqdhCQB4gQzpdODbwNO1eE2BsaAQNfE0v/+uyYF8oFGI5TZ2b+wi9FgEtd549/5/dNzeet8QMGzAC7P6dJnsAyAPwPiqT+63qLFK50W7B369lBI1ou+y4ImmIuz4U4gvBQdy0yXVjQdml0nQ6cAzwOKFJKms1m6DW6RKNhmuAWsxmZWuLVEPUmnFURCSiIEYsiWzAkp4NxERE3wpOPCqXhkn0qsy+U4+EkHwkUF8JIFBV/ukLsdDvyHeENlbwISgCfcPRdzaKwJW2dlchgkaKwdUEXyETznIxJBQG9TAK/Vw07CqcSRfQCklSJJ+NhJFYLVL4O420NntstuS/HsUEdQyOJLfns8HBe+L8YYVitQFWSXViuUo+D5m3WAXIKDSiX+vAMwQBKisEC+00vd4iVxiLLTiQZuy86rmDKt9tvIBch+5CuTq+Nv8bdO1FOadfnH3ROePStEugou1i00X3l0O/HFnadmHaBXfPkC9HATRq1PZcV0X8D+MDew92HgRLlINVEVXiogRlrRKUrQmMsOQmIokeLKRTSVjagjxD/vh405BEN5ZGlVUMqKDKadhE95B40/h8Q16BliXRqSBsoicRybUERoAjIWQmAj7z2B3y3Sq7r3LAm1s/dtvW5kfDM0RcSdrSSEbt8eafRmYYuGLQTVFJmqGedRVcgJNeeEGzFqZvMScoajyWOBfdVZEwaUFFBTcnOOgOD0VexgmQ+aiqiAu7SiwWlxsGmQr4yItN+WZ+RketADnxU66A7vJSBMGqSGyxKUMk57MgsSzr/t0Tgu6ODLcMBoc5n7rmHnzE4uzrWtv1I4f38eLaS/vY7EOXTJ3J/DmRI0VFPZjCRQzGdAxY1TxXtC9me9458bmNyMbDLu+bvTGiuTuYwS739vwEQZx4LDIVsSch0xAQlS8mYIhyRwHP0WCJUSOc3Ux6Fyb9lDjzZSDLa5QxZBbRiPxF9RvyHfXWAZg9Iw4UZGyZ9dKf6atVahaP+lCrF0rFGhGRrOdLJBohEdCqHo0Z83jM6Me0waPRC35Uf2rhaDMGPDu60W7ZUlrKSPRAEMSqRevcg468uRrFQpdTsWiu1umYoyXd6bLt5mgcXIO3iFkmk2lbL4OjqtKNFJvGG5ArZdbqUBMH+/6saYSsSg2DTClGr8ISCCL0YC7kgjgf+7njiTAeY6ApmXwxgcgXMZmwIRL4QiZYMMndXY8o9naPQFzdQfv30gBnzy1kwX0IMI4jVIqDxaI4JcxiT6JTcBjZ8hobolBwClJYCODpLN7faiky/ELQDtdR75Zkd0xsTCtI/jc5+Z/kAlBzSlIiAWPtXrdG43FraTitDkPRlJToUhksAQ6rloLJXoTDHWWBtsn7b6o/qW/vv61SXeYu3deCzHXsGGqlNSlz/NjLqWldeYoJYjabKeHjcw/EaorAxEUQncVQsTETUr8bEFVOKICLuByoiAyxEseOS05Lw4zDEAvGp6elfhyX8adYCh4euVUrudUEilBoxL/SRefmi8YLWPZ8O9ZqQuRyQ7GFAOL0Veoq/YTkyKSw3T65tuE9+I4hpRAJ4iJ6PduT9Xta6u9Z5ClcIUibzWgugfJBppSgN2GpNCOWDHQa0WDCYaABt6J5TIEQT+AJ2SyugIAXCplgRa63u3i182O6PfcxkMPj3n1BikQtkejuBqIUkn5XuPGZ5xEx0l3dHQbFs+m1d/624sqotSp6sWU99kDMHISWGVFzR3RVA2FAF+GMPozjOVdbz/ra9wpgap98lH18lQFF1idb1vnmRXughsXLf1sGbkDh6u1GIasq/PG0Let451bZBy1zGDd4gwHvGUFngFtXbT/JarJS+2fWLVzW3r5w6azmf46Zjv3bDH5ZuWlVDzYt69ev2wD1ICbfuAks1HXjmqAQcub8mtyTPLGyJLQZP00eEPqykwfP0eXVi8UMTwDYEVNOg8KnXu8wAyYM9DELliEHkKWzrj5wO9sgCZcHSVWz4mYB9sLGhgapF0dWYYkE0bJdTcPG/CwYDaUKYTbktxVbq9xxRkdmJ5mQnoc+6NFlSNh4lFEwIXkcTkLmLF6Si5CA8FkK46ScptHmYQVG+o/e0ZoWr1tcwz1Vrg3dqOBJPYnaJc2TpLC4jDEwAAdkVfPgBgm/EXIK8LAunwSVIXGalj5yhtY8J5kBtWLf6YaMVDd4rXFkEdw5FZK4EMSaqjV7Xr+bwPj+WEi+pFmh1zbJJO1mo7R5ihSexEUmuiRwG4bsnPi51VlnbsdQnBMRrYlAdgqFJKcRTyYb8ES7UERw6YlkQI1XqGv/WKf+rP6DmTsyGH7zZbaH5VPMzKOgbxTKNa+yvexwY6YBBaNHeMOJTkS9lfkYqTCc+co+FJFCj+sAx/8sl0CBxucJCsk6m5C/EGq98xDZjfKplvpB+yf5p5djocbFufI5aptrgx3ZFixFtsoinLa5qlzZ/Eb5WEdQNO2XhRHTDAat4Wen2QLB9RRGb6ze7VBwwsmP41M2yJ5MnCpTaaaFS7UpJ0uHfI5IYU2jWBhRbn5gxlOcIhHZYcKRSAYmjulpcOjxpDoUTqPJJ8pLkIF6O1jfOc8EzTPMNUDgwepzeFw/gdCPw58jKh6npj5OT38yLc2TdJC6VJo/ch+m3z54eARN1ZtfG1wa966glkAODRSvUA9RA/LSleof1WD67aD7NyGw9wWGDQWAWceEBWcM/lYc/eG3eBCjLvTzScHaGzIZhfq2oVxGpZRYDvO2ZgBvoyuiyP5uBMNUlcJLlTm+zsraxm/asio9AmNBRnqekV8yGiqpnsXR1nZW5fgrL1cIYVOTOUP1H/9jXvp4+gfBv+MUTQY9SDv6nGHOh0Ce5WBRiRh8rvxMqRgQKypxViaFk8D9FerF6lMIqMvvwAHDAUtvWvKWPFZmnZYvDBDaDlS4PB2b3Z+c6F7tsqUpKcvFfrnlC7nx7eize858uTZVynLhG214nVi5nq+lLJf582gzf2KkSTkPOckX1IkHKcvFU7nlr9HGk0oGJlKGlFHJQIFxqJxbRAkZaLoCpKQsF9/JLT1yY//os34nJNe+lrJcrB9trBVPXKH0/5e7YBn5YZD5nukn49zEDFg0HRIfSVkudsotG0cbO5gNhEMBkDJwCABmEQFzULGVBE9QeGFk/XUdNNzBZGAmCcWXYvQwLy8Bz4Vxusj/33zzkJJ5CbAC5XxWws73djVb6qx1qqiyb4uQVJ1ZLgvoK2Nz4m5zF7vLGnaCGsh7Y7O7zVgmHvgWfgjPp1AX5wbOV2LAiI/9/CiGme/6J3iJqy0AI8uoRBsH3G0InSOBnmW9hje1jiFkaJ+6z7G7xEliQpoAGdqn7O7UtSHgXQLKeUEBALvA8yLMY3QytG/cVxvyE2i+LWUMGdqnxrtSFhaao72g2IWZueNYo7J7zjpeI9q0ZOvoFgMsypIrnzV/G63l/JcQO34E+PLN5QDwzRb636dHn04lxS86rpkMNSMEv1uqL3+UGfCuGnKlz7mv8xLiWflW7wm2oKEGJKvVOH2jsL/LsRkqZ1SqRzYrf+B2L6sz83PzsNyAzQ9obcCLQG75KFUjNSJ/Sis6Da+cbFmdhNNGCrdhkyBVDFNvCnQsV1PUxytQt8lqgHoM1O1J6sa4zVvqkaTbXmqvscUIBbWG82WMOG1yVMiIHBFDHCWU1FUVZsfL7naq7jBmXJPaKrhCRsYmxGe3mV2mA9WrG5HTH4USI/KNYDirrpsgCJVtUUg90tahi3nezoeNhbR6URxo6xtmAZoBidTRJMNUymgrqCQp44yU/GBwT0u1DxXkilBQ/KpH0nh13OfbtYSthG06fo3S65e7fPiwpI40pJyQlctwnacAnoN8Qk2H4VlnXLvZojQhsFRvDO9M6ppMdAshwwx3Snp6WedPbqvcbofuaajGG2B+nG9tY4YUOThjArCJ1+IHzqc9r3pbogy40NIOpUJRcjATAJBXaztxMDvOaMAiBY4sKoE/dGMzjAz4JLuUZqkIEgjkAPKCBMtx6XgwixgwvpeZIsO9MDQPomp3gkcE7HtpvMNMB+bnNElDz8C4qm1grBQ2aXCYPzmPJY6T0sdgmeaBz4sXQAzwtZVSsDgKKooDHgcMCCxzL5ZatBx4wy2yrRIkIrq/trXZadrWrsi1rYPXHXHG3HQSHNuBpzVsnjXqsRAUafepE/JIwzMSr55UEglHSGluQi0ZmE642bJGSHU7jkFgJJFPxFM3jAqPiIg6rswvgoKJjBZbJkCtmeNFeDHueYxUnKJTlkBLF4d0loz4ls5k8qwDg0Ga1BEpj1MfdVooIrRs0VBnnY9TtlToIR3hHYt9wqoQ8iT4TBhRza/OFHCGaSswwPN+zneQTf01kGaw/WXSf3LcPLx8/AKCQsKGG2GkUUYbI1WadBnGGme8CSbKlCUbClqOXHnyFSiEgYWDR0BEQkZBRUNXhIGJhY2Di4dPQEhETEJKRg6ioKQCU9PQ0tEzMDIxs7CyKWaHcHBycSvhyUCfZpjpsFX+Mssi823UaUcGeXNfh+Wee2Fh4rw46SfPbNLllZde2+YL553VzctnCb+LAs654KpLLrvib0E3XXNdj1JPLXXHLbeV+dcjc5ULqVClUrUtwmrVqFMvokGjSf4x2VRTTDNdkz5btWjWqs1/Hjvgri99lXgXP+r3tW/s951Ten3rtNn2OuKoQ0nw4UkSF912LwwPEN8VH3kmRCReEROXZPA1rZV8LR74/5ThpJVMHs8BAAAA) format("woff"),}@font-face{font-family:Roboto;font-style:normal;font-weight:400;src:local(""),url(/assets/fonts/roboto-mono-regular-498042b7fe9cd07b4fd11a0965093e55.woff) format("woff2"),url(/assets/fonts/roboto-mono-regular-535bc89d4af715503b01afd761501e58.woff2) format("woff"),}@font-face{font-family:Lato;font-style:normal;font-weight:400;src:local(""),url(/assets/fonts/lato-regular-292725486219768e62259f7286dc73cc.woff) format("woff2"),url(/assets/fonts/lato-regular-be36596da218e1eec01c5c600b1c13ef.woff2) format("woff"),}[data-theme=dark]{--ifm-color-primary:#ffc61c;--ifm-color-primary-dark:#ffbf00;--ifm-color-primary-darker:#f1b400;--ifm-color-primary-darkest:#c69400;--ifm-color-primary-light:#ffcd38;--ifm-color-primary-lighter:#ffd146;--ifm-color-primary-lightest:#ffdb71;--ifm-color-secondary-dark:#054a6e;--ifm-color-secondary:#06527a;--ifm-color-secondary-light:#075a86;--light:#33313b;--dark:#f3f3f3}[data-theme=dark] .footer--dark{background-color:var(--light);color:var(--ifm-color-primary)}body{font-family:Lato,sans-serif}h1,h2,h3,h4,h5,h6{font-family:Poppins,sans-serif}code{font-family:Roboto Mono,monospace}.navbar__brand{height:40px}.btn.navbar__github{background-color:#384745;border:2px solid #384745;border-radius:3px;box-shadow:inset 0 1px #ffffff26,0 1px 1px #00000014;color:#fff!important;font-family:poppins,sans-serif;font-size:1rem;font-weight:400;line-height:1.66;padding:8px 20px 7px 47px;position:relative;text-align:center;text-decoration:none;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-user-select:none;user-select:none}.clear-btn{padding:100px}a.btn.navbar__github:hover{background-color:#273230;border-color:#222a29;color:#fff}a.btn.navbar__github:before{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20.5 20'%3E%3Cpath fill='%23fff' d='M10.3 0C4.6 0 0 4.6 0 10.3c0 4.4 2.8 8.3 7 9.7.5.1.7-.2.7-.5v-1.9c-2.6.5-3.2-.6-3.4-1.2-.2-.6-.6-1.1-1-1.5-.4-.2-.9-.7 0-.7.7.1 1.3.5 1.6 1 .6 1.1 1.9 1.4 3 .8 0-.5.3-1 .7-1.4-2.3-.3-4.7-1.1-4.7-5.1 0-1 .4-2 1.1-2.8-.5-.6-.5-1.6-.1-2.5 0 0 .9-.3 2.8 1.1 1.7-.5 3.4-.5 5.1 0 2-1.3 2.8-1.1 2.8-1.1.4.9.5 1.9.2 2.8.7.7 1.1 1.7 1.1 2.8 0 3.9-2.4 4.8-4.7 5.1.5.5.7 1.2.7 1.9v2.8c0 .3.2.6.7.5 5.4-1.8 8.3-7.6 6.5-13C18.6 2.8 14.7 0 10.3 0z'/%3E%3C/svg%3E");content:"";height:20px;left:15px;position:absolute;top:10px;width:20px}.header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat;content:"";display:flex;height:24px;width:24px}[data-theme=dark] .header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath fill='%23fff' d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat}.docusaurus-highlight-code-line{background-color:#484d5b;display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}body:not(.navigation-with-keyboard) :not(input):focus{outline:0}#__docusaurus-base-url-issue-banner-container,.themedImage_ToTc,[data-theme=dark] .lightToggleIcon_pyhR,[data-theme=light] .darkToggleIcon_wfgR,html[data-announcement-bar-initially-dismissed=true] .announcementBar_mb4j{display:none}.skipToContent_fXgn{background-color:var(--ifm-background-surface-color);color:var(--ifm-color-emphasis-900);left:100%;padding:calc(var(--ifm-global-spacing)/2) var(--ifm-global-spacing);position:fixed;top:1rem;z-index:calc(var(--ifm-z-index-fixed) + 1)}.skipToContent_fXgn:focus{box-shadow:var(--ifm-global-shadow-md);left:1rem}.closeButton_CVFx{line-height:0;padding:0}.content_knG7{font-size:85%;padding:5px 0;text-align:center}.content_knG7 a{color:inherit;text-decoration:underline}.DocSearch-Container a,.tag_zVej:hover{text-decoration:none}.announcementBar_mb4j{align-items:center;background-color:var(--ifm-color-white);border-bottom:1px solid var(--ifm-color-emphasis-100);color:var(--ifm-color-black);display:flex;height:var(--docusaurus-announcement-bar-height)}.announcementBarPlaceholder_vyr4{flex:0 0 10px}.announcementBarClose_gvF7{align-self:stretch;flex:0 0 30px}.toggle_vylO{height:2rem;width:2rem}.toggleButton_gllP{align-items:center;border-radius:50%;display:flex;height:100%;justify-content:center;transition:background var(--ifm-transition-fast);width:100%}.toggleButton_gllP:hover{background:var(--ifm-color-emphasis-200)}.toggleButtonDisabled_aARS{cursor:not-allowed}.darkNavbarColorModeToggle_X3D1:hover{background:var(--ifm-color-gray-800)}[data-theme=dark] .themedImage--dark_i4oU,[data-theme=light] .themedImage--light_HNdA{display:initial}.iconExternalLink_nPIU{margin-left:.3rem}.iconLanguage_nlXk{margin-right:5px;vertical-align:text-bottom}.navbarHideable_m1mJ{transition:transform var(--ifm-transition-fast) ease}.navbarHidden_jGov{transform:translate3d(0,calc(-100% - 2px),0)}.errorBoundaryError_a6uf{color:red;white-space:pre-wrap}.footerLogoLink_BH7S{opacity:.5;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.footerLogoLink_BH7S:hover,.hash-link:focus,:hover>.hash-link{opacity:1}.mainWrapper_z2l0{display:flex;flex:1 0 auto;flex-direction:column}.docusaurus-mt-lg{margin-top:3rem}#__docusaurus{display:flex;flex-direction:column;min-height:100%}.iconEdit_Z9Sw{margin-right:.3em;vertical-align:sub}.tag_zVej{border:1px solid var(--docusaurus-tag-list-border);transition:border var(--ifm-transition-fast)}.tag_zVej:hover{--docusaurus-tag-list-border:var(--ifm-link-color)}.tagRegular_sFm0{border-radius:var(--ifm-global-radius);font-size:90%;padding:.2rem .5rem .3rem}.tagWithCount_h2kH{align-items:center;border-left:0;display:flex;padding:0 .5rem 0 1rem;position:relative}.tagWithCount_h2kH:after,.tagWithCount_h2kH:before{border:1px solid var(--docusaurus-tag-list-border);content:"";position:absolute;top:50%;transition:inherit}.tagWithCount_h2kH:before{border-bottom:0;border-right:0;height:1.18rem;right:100%;transform:translate(50%,-50%) rotate(-45deg);width:1.18rem}.tagWithCount_h2kH:after{border-radius:50%;height:.5rem;left:0;transform:translateY(-50%);width:.5rem}.tagWithCount_h2kH span{background:var(--ifm-color-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-color-black);font-size:.7rem;line-height:1.2;margin-left:.3rem;padding:.1rem .4rem}.tags_jXut{display:inline}.tag_QGVx{display:inline-block;margin:0 .4rem .5rem 0}.lastUpdated_vwxv{font-size:smaller;font-style:italic;margin-top:.2rem}.tocCollapsibleButton_TO0P{align-items:center;display:flex;font-size:inherit;justify-content:space-between;padding:.4rem .8rem;width:100%}.tocCollapsibleButton_TO0P:after{background:var(--ifm-menu-link-sublist-icon) 50% 50%/2rem 2rem no-repeat;content:"";filter:var(--ifm-menu-link-sublist-icon-filter);height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast);width:1.25rem}.tocCollapsibleButtonExpanded_MG3E:after,.tocCollapsibleExpanded_sAul{transform:none}.tocCollapsible_ETCw{background-color:var(--ifm-menu-color-background-active);border-radius:var(--ifm-global-radius);margin:1rem 0}.buttonGroup__atx button,.codeBlockContainer_Ckt0{background:var(--prism-background-color);color:var(--prism-color)}.tocCollapsibleContent_vkbj>ul{border-left:none;border-top:1px solid var(--ifm-color-emphasis-300);font-size:15px;padding:.2rem 0}.tocCollapsibleContent_vkbj ul li{margin:.4rem .8rem}.tocCollapsibleContent_vkbj a{display:block}.tableOfContents_bqdL{max-height:calc(100vh - var(--ifm-navbar-height) - 2rem);overflow-y:auto;position:sticky;top:calc(var(--ifm-navbar-height) + 1rem)}.anchorWithStickyNavbar_LWe7{scroll-margin-top:calc(var(--ifm-navbar-height) + .5rem)}.anchorWithHideOnScrollNavbar_WYt5{scroll-margin-top:.5rem}.hash-link{opacity:0;padding-left:.5rem;transition:opacity var(--ifm-transition-fast);-webkit-user-select:none;user-select:none}.hash-link:before{content:"#"}.codeBlockContainer_Ckt0{border-radius:var(--ifm-code-border-radius);box-shadow:var(--ifm-global-shadow-lw);margin-bottom:var(--ifm-leading)}.codeBlockContent_biex{border-radius:inherit;direction:ltr;position:relative}.codeBlockTitle_Ktv7{border-bottom:1px solid var(--ifm-color-emphasis-300);border-top-left-radius:inherit;border-top-right-radius:inherit;font-size:var(--ifm-code-font-size);font-weight:500;padding:.75rem var(--ifm-pre-padding)}.codeBlock_bY9V{--ifm-pre-background:var(--prism-background-color);margin:0;padding:0}.codeBlockTitle_Ktv7+.codeBlockContent_biex .codeBlock_bY9V{border-top-left-radius:0;border-top-right-radius:0}.codeBlockLines_e6Vv{float:left;font:inherit;min-width:100%;padding:var(--ifm-pre-padding)}.codeBlockLinesWithNumbering_o6Pm{display:table;padding:var(--ifm-pre-padding) 0}.buttonGroup__atx{column-gap:.2rem;display:flex;position:absolute;right:calc(var(--ifm-pre-padding)/2);top:calc(var(--ifm-pre-padding)/2)}.buttonGroup__atx button{align-items:center;border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-global-radius);display:flex;line-height:0;opacity:0;padding:.4rem;transition:opacity var(--ifm-transition-fast) ease-in-out}.buttonGroup__atx button:focus-visible,.buttonGroup__atx button:hover{opacity:1!important}.theme-code-block:hover .buttonGroup__atx button{opacity:.4}:where(:root){--docusaurus-highlighted-code-line-bg:#484d5b}:where([data-theme=dark]){--docusaurus-highlighted-code-line-bg:#646464}.theme-code-block-highlighted-line{background-color:var(--docusaurus-highlighted-code-line-bg);display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}.codeLine_lJS_{counter-increment:a;display:table-row}.codeLineNumber_Tfdd{background:var(--ifm-pre-background);display:table-cell;left:0;overflow-wrap:normal;padding:0 var(--ifm-pre-padding);position:sticky;text-align:right;width:1%}.codeLineNumber_Tfdd:before{content:counter(a);opacity:.4}.codeLineContent_feaV{padding-right:var(--ifm-pre-padding)}.theme-code-block:hover .copyButtonCopied_obH4{opacity:1!important}.copyButtonIcons_eSgA{height:1.125rem;position:relative;width:1.125rem}.copyButtonIcon_y97N,.copyButtonSuccessIcon_LjdS{fill:currentColor;height:inherit;left:0;opacity:inherit;position:absolute;top:0;transition:all var(--ifm-transition-fast) ease;width:inherit}.copyButtonSuccessIcon_LjdS{color:#00d600;left:50%;opacity:0;top:50%;transform:translate(-50%,-50%) scale(.33)}.copyButtonCopied_obH4 .copyButtonIcon_y97N{opacity:0;transform:scale(.33)}.copyButtonCopied_obH4 .copyButtonSuccessIcon_LjdS{opacity:1;transform:translate(-50%,-50%) scale(1);transition-delay:75ms}.wordWrapButtonIcon_Bwma{height:1.2rem;width:1.2rem}.details_lb9f{--docusaurus-details-summary-arrow-size:0.38rem;--docusaurus-details-transition:transform 200ms ease;--docusaurus-details-decoration-color:grey}.details_lb9f>summary{cursor:pointer;list-style:none;padding-left:1rem;position:relative}.details_lb9f>summary::-webkit-details-marker{display:none}.details_lb9f>summary:before{border-color:#0000 #0000 #0000 var(--docusaurus-details-decoration-color);border-style:solid;border-width:var(--docusaurus-details-summary-arrow-size);content:"";left:0;position:absolute;top:.45rem;transform:rotate(0);transform-origin:calc(var(--docusaurus-details-summary-arrow-size)/2) 50%;transition:var(--docusaurus-details-transition)}.collapsibleContent_i85q{border-top:1px solid var(--docusaurus-details-decoration-color);margin-top:1rem;padding-top:1rem}.details_b_Ee{--docusaurus-details-decoration-color:var(--ifm-alert-border-color);--docusaurus-details-transition:transform var(--ifm-transition-fast) ease;border:1px solid var(--ifm-alert-border-color);margin:0 0 var(--ifm-spacing-vertical)}.containsTaskList_mC6p{list-style:none}.img_ev3q{height:auto}.admonition_LlT9{margin-bottom:1em}.admonitionHeading_tbUL{font:var(--ifm-heading-font-weight) var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.3rem}.admonitionHeading_tbUL code{text-transform:none}.admonitionIcon_kALy{display:inline-block;margin-right:.4em;vertical-align:middle}.admonitionIcon_kALy svg{fill:var(--ifm-alert-foreground-color);display:inline-block;height:1.6em;width:1.6em}.breadcrumbHomeIcon_YNFT{height:1.1rem;position:relative;top:1px;vertical-align:top;width:1.1rem}.breadcrumbsContainer_Z_bl{--ifm-breadcrumb-size-multiplier:0.8;margin-bottom:.8rem}.searchQueryInput_u2C7,.searchVersionInput_m0Ui{background:var(--docsearch-searchbox-focus-background);border:2px solid var(--ifm-toc-border-color);border-radius:var(--ifm-global-radius);color:var(--docsearch-text-color);font:var(--ifm-font-size-base) var(--ifm-font-family-base);margin-bottom:.5rem;padding:.8rem;transition:border var(--ifm-transition-fast) ease;width:100%}.searchQueryInput_u2C7:focus,.searchVersionInput_m0Ui:focus{border-color:var(--docsearch-primary-color);outline:0}.searchQueryInput_u2C7::placeholder{color:var(--docsearch-muted-color)}.searchResultsColumn_JPFH{font-size:.9rem;font-weight:700}.algoliaLogo_rT1R{max-width:150px}.algoliaLogoPathFill_WdUC{fill:var(--ifm-font-color-base)}.searchResultItem_Tv2o{border-bottom:1px solid var(--ifm-toc-border-color);padding:1rem 0}.searchResultItemHeading_KbCB{font-weight:400;margin-bottom:0}.searchResultItemPath_lhe1{--ifm-breadcrumb-separator-size-multiplier:1;color:var(--ifm-color-content-secondary);font-size:.8rem}.searchResultItemSummary_AEaO{font-style:italic;margin:.5rem 0 0}.loadingSpinner_XVxU{animation:1s linear infinite a;border:.4em solid #eee;border-radius:50%;border-top:.4em solid var(--ifm-color-primary);height:3rem;margin:0 auto;width:3rem}@keyframes a{to{transform:rotate(1turn)}}.loader_vvXV{margin-top:2rem}.search-result-match{background:#ffd78e40;color:var(--docsearch-hit-color);padding:.09em 0}.backToTopButton_sjWU{background-color:var(--ifm-color-emphasis-200);border-radius:50%;bottom:1.3rem;box-shadow:var(--ifm-global-shadow-lw);height:3rem;opacity:0;position:fixed;right:1.3rem;transform:scale(0);transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default);visibility:hidden;width:3rem;z-index:calc(var(--ifm-z-index-fixed) - 1)}.backToTopButton_sjWU:after{background-color:var(--ifm-color-emphasis-1000);content:" ";display:inline-block;height:100%;-webkit-mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;width:100%}.backToTopButtonShow_xfvO{opacity:1;transform:scale(1);visibility:visible}[data-theme=dark]:root{--docusaurus-collapse-button-bg:#ffffff0d;--docusaurus-collapse-button-bg-hover:#ffffff1a}.collapseSidebarButton_PEFL{display:none;margin:0}.docSidebarContainer_b6E3,.sidebarLogo_isFc{display:none}.docMainContainer_gTbr,.docPage__5DB{display:flex;width:100%}.docPage__5DB{flex:1 0}.docsWrapper_BCFX{display:flex;flex:1 0 auto}.DocSearch-Button,.DocSearch-Button-Container{align-items:center;display:flex}.DocSearch-Button{background:var(--docsearch-searchbox-background);border:0;border-radius:40px;color:var(--docsearch-muted-color);cursor:pointer;font-weight:500;height:36px;justify-content:space-between;padding:0 8px;-webkit-user-select:none;user-select:none}.DocSearch-Button:active,.DocSearch-Button:focus,.DocSearch-Button:hover{background:var(--docsearch-searchbox-focus-background);box-shadow:var(--docsearch-searchbox-shadow);color:var(--docsearch-text-color);outline:0}.DocSearch-Search-Icon{stroke-width:1.6}.DocSearch-Hit-Tree,.DocSearch-Hit-action,.DocSearch-Hit-icon,.DocSearch-Reset{stroke-width:var(--docsearch-icon-stroke-width)}.DocSearch-Button .DocSearch-Search-Icon{color:var(--docsearch-text-color)}.DocSearch-Button-Placeholder{font-size:1rem;padding:0 12px 0 6px}.DocSearch-Input,.DocSearch-Link{-webkit-appearance:none;font:inherit}.DocSearch-Button-Keys{display:flex;min-width:calc(40px + .8em)}.DocSearch-Button-Key{align-items:center;background:var(--docsearch-key-gradient);border:0;border-radius:3px;box-shadow:var(--docsearch-key-shadow);color:var(--docsearch-muted-color);display:flex;height:18px;justify-content:center;margin-right:.4em;padding:0 0 2px;position:relative;top:-1px;width:20px}.DocSearch--active{overflow:hidden!important}.DocSearch-Container{background-color:var(--docsearch-container-background);height:100vh;left:0;position:fixed;top:0;width:100vw;z-index:200}.DocSearch-Link{appearance:none;background:none;border:0;color:var(--docsearch-highlight-color);cursor:pointer;margin:0;padding:0}.DocSearch-Modal{background:var(--docsearch-modal-background);border-radius:6px;box-shadow:var(--docsearch-modal-shadow);flex-direction:column;margin:60px auto auto;max-width:var(--docsearch-modal-width);position:relative}.DocSearch-SearchBar{display:flex;padding:var(--docsearch-spacing) var(--docsearch-spacing) 0}.DocSearch-Form{align-items:center;background:var(--docsearch-searchbox-focus-background);border-radius:4px;box-shadow:var(--docsearch-searchbox-shadow);display:flex;height:var(--docsearch-searchbox-height);margin:0;padding:0 var(--docsearch-spacing);position:relative;width:100%}.DocSearch-Input{appearance:none;background:#0000;border:0;color:var(--docsearch-text-color);flex:1;font-size:1.2em;height:100%;outline:0;padding:0 0 0 8px;width:80%}.DocSearch-Hit-action-button,.DocSearch-Reset{-webkit-appearance:none;border:0;cursor:pointer}.DocSearch-Input::placeholder{color:var(--docsearch-muted-color);opacity:1}.DocSearch-Input::-webkit-search-cancel-button,.DocSearch-Input::-webkit-search-decoration,.DocSearch-Input::-webkit-search-results-button,.DocSearch-Input::-webkit-search-results-decoration{display:none}.DocSearch-LoadingIndicator,.DocSearch-MagnifierLabel,.DocSearch-Reset{margin:0;padding:0}.DocSearch-Container--Stalled .DocSearch-LoadingIndicator,.DocSearch-MagnifierLabel,.DocSearch-Reset{align-items:center;color:var(--docsearch-highlight-color);display:flex;justify-content:center}.DocSearch-Cancel,.DocSearch-Container--Stalled .DocSearch-MagnifierLabel,.DocSearch-LoadingIndicator,.DocSearch-Reset[hidden]{display:none}.DocSearch-Reset{animation:.1s ease-in forwards b;appearance:none;background:none;border-radius:50%;color:var(--docsearch-icon-color);padding:2px;right:0}.DocSearch-Help,.DocSearch-HitsFooter,.DocSearch-Label{color:var(--docsearch-muted-color)}.DocSearch-Reset:hover{color:var(--docsearch-highlight-color)}.DocSearch-LoadingIndicator svg,.DocSearch-MagnifierLabel svg{height:24px;width:24px}.DocSearch-Dropdown{max-height:calc(var(--docsearch-modal-height) - var(--docsearch-searchbox-height) - var(--docsearch-spacing) - var(--docsearch-footer-height));min-height:var(--docsearch-spacing);overflow-y:auto;overflow-y:overlay;padding:0 var(--docsearch-spacing);scrollbar-color:var(--docsearch-muted-color) var(--docsearch-modal-background);scrollbar-width:thin}.DocSearch-Dropdown::-webkit-scrollbar{width:12px}.DocSearch-Dropdown::-webkit-scrollbar-track{background:#0000}.DocSearch-Dropdown::-webkit-scrollbar-thumb{background-color:var(--docsearch-muted-color);border:3px solid var(--docsearch-modal-background);border-radius:20px}.DocSearch-Dropdown ul{list-style:none;margin:0;padding:0}.DocSearch-Label{font-size:.75em;line-height:1.6em}.DocSearch-Help{font-size:.9em;margin:0;-webkit-user-select:none;user-select:none}.DocSearch-Title{font-size:1.2em}.DocSearch-Logo a{display:flex}.DocSearch-Logo svg{color:var(--docsearch-logo-color);margin-left:8px}.DocSearch-Hits:last-of-type{margin-bottom:24px}.DocSearch-Hits mark{background:none;color:var(--docsearch-highlight-color)}.DocSearch-HitsFooter{display:flex;font-size:.85em;justify-content:center;margin-bottom:var(--docsearch-spacing);padding:var(--docsearch-spacing)}.DocSearch-HitsFooter a{border-bottom:1px solid;color:inherit}.DocSearch-Hit{border-radius:4px;display:flex;padding-bottom:4px;position:relative}.DocSearch-Hit--deleting{opacity:0;transition:.25s linear}.DocSearch-Hit--favoriting{transform:scale(0);transform-origin:top center;transition:.25s linear .25s}.DocSearch-Hit a{background:var(--docsearch-hit-background);border-radius:4px;box-shadow:var(--docsearch-hit-shadow);display:block;padding-left:var(--docsearch-spacing);width:100%}.DocSearch-Hit-source{background:var(--docsearch-modal-background);color:var(--docsearch-highlight-color);font-size:.85em;font-weight:600;line-height:32px;margin:0 -4px;padding:8px 4px 0;position:sticky;top:0;z-index:10}.DocSearch-Hit-Tree{color:var(--docsearch-muted-color);height:var(--docsearch-hit-height);opacity:.5;width:24px}.DocSearch-Hit[aria-selected=true] a{background-color:var(--docsearch-highlight-color)}.DocSearch-Hit[aria-selected=true] mark{text-decoration:underline}.DocSearch-Hit-Container{align-items:center;color:var(--docsearch-hit-color);display:flex;flex-direction:row;height:var(--docsearch-hit-height);padding:0 var(--docsearch-spacing) 0 0}.DocSearch-Hit-icon{height:20px;width:20px}.DocSearch-Hit-action,.DocSearch-Hit-icon{color:var(--docsearch-muted-color)}.DocSearch-Hit-action{align-items:center;display:flex;height:22px;width:22px}.DocSearch-Hit-action svg{display:block;height:18px;width:18px}.DocSearch-Hit-action+.DocSearch-Hit-action{margin-left:6px}.DocSearch-Hit-action-button{appearance:none;background:none;border-radius:50%;color:inherit;padding:2px}svg.DocSearch-Hit-Select-Icon{display:none}.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-Select-Icon{display:block}.DocSearch-Hit-action-button:focus,.DocSearch-Hit-action-button:hover{background:#0003;transition:background-color .1s ease-in}.DocSearch-Hit-action-button:focus path,.DocSearch-Hit-action-button:hover path{fill:#fff}.DocSearch-Hit-content-wrapper{display:flex;flex:1 1 auto;flex-direction:column;font-weight:500;justify-content:center;line-height:1.2em;margin:0 8px;overflow-x:hidden;position:relative;text-overflow:ellipsis;white-space:nowrap;width:80%}.DocSearch-Hit-title{font-size:.9em}.DocSearch-Hit-path{color:var(--docsearch-muted-color);font-size:.75em}.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-Tree,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-action,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-icon,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-path,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-text,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-title,.DocSearch-Hit[aria-selected=true] mark{color:var(--docsearch-hit-active-color)!important}.DocSearch-ErrorScreen,.DocSearch-NoResults,.DocSearch-StartScreen{font-size:.9em;margin:0 auto;padding:36px 0;text-align:center;width:80%}.DocSearch-Screen-Icon{color:var(--docsearch-muted-color);padding-bottom:12px}.DocSearch-NoResults-Prefill-List{display:inline-block;padding-bottom:24px;text-align:left}.DocSearch-NoResults-Prefill-List ul{display:inline-block;padding:8px 0 0}.DocSearch-NoResults-Prefill-List li{list-style-position:inside;list-style-type:"» "}.DocSearch-Prefill{-webkit-appearance:none;appearance:none;background:none;border:0;border-radius:1em;color:var(--docsearch-highlight-color);cursor:pointer;display:inline-block;font-size:1em;font-weight:700;padding:0}.DocSearch-Prefill:focus,.DocSearch-Prefill:hover{outline:0;text-decoration:underline}.DocSearch-Footer{align-items:center;background:var(--docsearch-footer-background);border-radius:0 0 8px 8px;box-shadow:var(--docsearch-footer-shadow);display:flex;flex-direction:row-reverse;flex-shrink:0;height:var(--docsearch-footer-height);justify-content:space-between;padding:0 var(--docsearch-spacing);position:relative;-webkit-user-select:none;user-select:none;width:100%;z-index:300}.DocSearch-Commands{color:var(--docsearch-muted-color);display:flex;list-style:none;margin:0;padding:0}.DocSearch-Commands li{align-items:center;display:flex}.DocSearch-Commands li:not(:last-of-type){margin-right:.8em}.DocSearch-Commands-Key{align-items:center;background:var(--docsearch-key-gradient);border:0;border-radius:2px;box-shadow:var(--docsearch-key-shadow);color:var(--docsearch-muted-color);display:flex;height:18px;justify-content:center;margin-right:.4em;padding:0 0 1px;width:20px}@keyframes b{0%{opacity:0}to{opacity:1}}.DocSearch-Button{margin:0;transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.DocSearch-Container{z-index:calc(var(--ifm-z-index-fixed) + 1)}@media (min-width:997px){.collapseSidebarButton_PEFL,.expandButton_m80_{background-color:var(--docusaurus-collapse-button-bg)}:root{--docusaurus-announcement-bar-height:30px}.announcementBarClose_gvF7,.announcementBarPlaceholder_vyr4{flex-basis:50px}.searchBox_ZlJk{padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.lastUpdated_vwxv{text-align:right}.tocMobile_ITEo{display:none}.docItemCol_VOVn{max-width:75%!important}.collapseSidebarButton_PEFL{border:1px solid var(--ifm-toc-border-color);border-radius:0;bottom:0;display:block!important;height:40px;position:sticky}.collapseSidebarButtonIcon_kv0_{margin-top:4px;transform:rotate(180deg)}.expandButtonIcon_BlDH,[dir=rtl] .collapseSidebarButtonIcon_kv0_{transform:rotate(0)}.collapseSidebarButton_PEFL:focus,.collapseSidebarButton_PEFL:hover,.expandButton_m80_:focus,.expandButton_m80_:hover{background-color:var(--docusaurus-collapse-button-bg-hover)}.menuHtmlItem_M9Kj{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu_SIkG{flex-grow:1;padding:.5rem}@supports (scrollbar-gutter:stable){.menu_SIkG{padding:.5rem 0 .5rem .5rem;scrollbar-gutter:stable}}.menuWithAnnouncementBar_GW3s{margin-bottom:var(--docusaurus-announcement-bar-height)}.sidebar_njMd{display:flex;flex-direction:column;height:100%;padding-top:var(--ifm-navbar-height);width:var(--doc-sidebar-width)}.sidebarWithHideableNavbar_wUlq{padding-top:0}.sidebarHidden_VK0M{opacity:0;visibility:hidden}.sidebarLogo_isFc{align-items:center;color:inherit!important;display:flex!important;margin:0 var(--ifm-navbar-padding-horizontal);max-height:var(--ifm-navbar-height);min-height:var(--ifm-navbar-height);text-decoration:none!important}.sidebarLogo_isFc img{height:2rem;margin-right:.5rem}.expandButton_m80_{align-items:center;display:flex;height:100%;justify-content:center;position:absolute;right:0;top:0;transition:background-color var(--ifm-transition-fast) ease;width:100%}[dir=rtl] .expandButtonIcon_BlDH{transform:rotate(180deg)}.docSidebarContainer_b6E3{border-right:1px solid var(--ifm-toc-border-color);-webkit-clip-path:inset(0);clip-path:inset(0);display:block;margin-top:calc(var(--ifm-navbar-height)*-1);transition:width var(--ifm-transition-fast) ease;width:var(--doc-sidebar-width);will-change:width}.docSidebarContainerHidden_b3ry{cursor:pointer;width:var(--doc-sidebar-hidden-width)}.sidebarViewport_Xe31{height:100%;max-height:100vh;position:sticky;top:0}.docMainContainer_gTbr{flex-grow:1;max-width:calc(100% - var(--doc-sidebar-width))}.docMainContainerEnhanced_Uz_u{max-width:calc(100% - var(--doc-sidebar-hidden-width))}.docItemWrapperEnhanced_czyv{max-width:calc(var(--ifm-container-width) + var(--doc-sidebar-width))!important}}@media (min-width:1440px){.container{max-width:var(--ifm-container-width-xl)}}@media (max-width:996px){.col{--ifm-col-width:100%;flex-basis:var(--ifm-col-width);margin-left:0}.footer{--ifm-footer-padding-horizontal:0}.colorModeToggle_DEke,.footer__link-separator,.navbar-sidebar__back,.navbar__item,.tableOfContents_bqdL{display:none}.footer__col{margin-bottom:calc(var(--ifm-spacing-vertical)*3)}.footer__link-item{display:block}.hero{padding-left:0;padding-right:0}.navbar>.container,.navbar>.container-fluid{padding:0}.navbar__toggle{display:inherit}.navbar__search-input{width:9rem}.pills--block,.tabs--block{flex-direction:column}.searchBox_ZlJk{position:absolute;right:var(--ifm-navbar-padding-horizontal)}.docItemContainer_F8PC{padding:0 .3rem}}@media only screen and (max-width:996px){.searchQueryColumn_RTkw,.searchResultsColumn_JPFH{max-width:60%!important}.searchLogoColumn_rJIA,.searchVersionColumn_ypXd{max-width:40%!important}.searchLogoColumn_rJIA{padding-left:0!important}}@media (max-width:768px){#theme-main h1{font-size:50px!important;font-weight:700;line-height:3rem!important}#theme-main .header-docs{margin-bottom:20px}.DocSearch-Button-Keys,.DocSearch-Button-Placeholder,.DocSearch-Commands,.DocSearch-Hit-Tree{display:none}:root{--docsearch-spacing:10px;--docsearch-footer-height:40px}.DocSearch-Dropdown{height:100%;max-height:calc(var(--docsearch-vh,1vh)*100 - var(--docsearch-searchbox-height) - var(--docsearch-spacing) - var(--docsearch-footer-height))}.DocSearch-Container{height:100vh;height:-webkit-fill-available;height:calc(var(--docsearch-vh,1vh)*100);position:absolute}.DocSearch-Footer{border-radius:0;bottom:0;position:absolute}.DocSearch-Hit-content-wrapper{display:flex;position:relative;width:80%}.DocSearch-Modal{border-radius:0;box-shadow:none;height:100vh;height:-webkit-fill-available;height:calc(var(--docsearch-vh,1vh)*100);margin:0;max-width:100%;width:100%}.DocSearch-Cancel{-webkit-appearance:none;appearance:none;background:none;border:0;color:var(--docsearch-highlight-color);cursor:pointer;display:inline-block;flex:none;font:inherit;font-size:1em;font-weight:500;margin-left:var(--docsearch-spacing);outline:0;overflow:hidden;padding:0;-webkit-user-select:none;user-select:none;white-space:nowrap}}@media (max-width:576px){.markdown h1:first-child{--ifm-h1-font-size:2rem}.markdown>h2{--ifm-h2-font-size:1.5rem}.markdown>h3{--ifm-h3-font-size:1.25rem}}@media screen and (max-width:576px){.searchQueryColumn_RTkw{max-width:100%!important}.searchVersionColumn_ypXd{max-width:100%!important;padding-left:var(--ifm-spacing-horizontal)!important}}@media (hover:hover){.backToTopButton_sjWU:hover{background-color:var(--ifm-color-emphasis-300)}}@media (pointer:fine){.thin-scrollbar{scrollbar-width:thin}.thin-scrollbar::-webkit-scrollbar{height:var(--ifm-scrollbar-size);width:var(--ifm-scrollbar-size)}.thin-scrollbar::-webkit-scrollbar-track{background:var(--ifm-scrollbar-track-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb{background:var(--ifm-scrollbar-thumb-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb:hover{background:var(--ifm-scrollbar-thumb-hover-background-color)}}@media (prefers-reduced-motion:reduce){:root{--ifm-transition-fast:0ms;--ifm-transition-slow:0ms}}@media screen and (prefers-reduced-motion:reduce){.DocSearch-Reset{stroke-width:var(--docsearch-icon-stroke-width);animation:none;-webkit-appearance:none;appearance:none;background:none;border:0;border-radius:50%;color:var(--docsearch-icon-color);cursor:pointer;right:0}.DocSearch-Hit--deleting,.DocSearch-Hit--favoriting{transition:none}.DocSearch-Hit-action-button:focus,.DocSearch-Hit-action-button:hover{background:#0003;transition:none}}@media print{.announcementBar_mb4j,.footer,.menu,.navbar,.pagination-nav,.table-of-contents,.tocMobile_ITEo{display:none}.tabs{page-break-inside:avoid}.codeBlockLines_e6Vv{white-space:pre-wrap}}
\ No newline at end of file
diff --git a/assets/js/05239c1f.7480a8d7.js b/assets/js/05239c1f.a3e17475.js
similarity index 99%
rename from assets/js/05239c1f.7480a8d7.js
rename to assets/js/05239c1f.a3e17475.js
index f2fc5d601..6bfe177ef 100644
--- a/assets/js/05239c1f.7480a8d7.js
+++ b/assets/js/05239c1f.a3e17475.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3452],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},898:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const s={title:"CIS Self Assessment Guide",weight:90},i=void 0,l={unversionedId:"security/self-assessment",id:"security/self-assessment",title:"CIS Self Assessment Guide",description:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",source:"@site/docs/security/self-assessment.md",sourceDirName:"security",slug:"/security/self-assessment",permalink:"/security/self-assessment",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"CIS Self Assessment Guide",weight:90},sidebar:"mySidebar",previous:{title:"CIS Hardening Guide",permalink:"/security/hardening-guide"}},o={},c=[{value:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)",id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)",id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)",id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)",id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)",id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)",id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)",id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)",id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual",level:3},{value:"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)",id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated",level:3},{value:"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)",id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated",level:3},{value:"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)",id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated",level:3},{value:"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)",id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)",id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)",id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)",id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)",id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)",id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)",id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)",id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual",level:3},{value:"1.2 API Server",id:"12-api-server",level:2},{value:"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)",id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual",level:3},{value:"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)",id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated",level:3},{value:"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)",id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated",level:3},{value:"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)",id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated",level:3},{value:"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)",id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)",id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)",id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated",level:3},{value:"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)",id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated",level:3},{value:"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)",id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual",level:3},{value:"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)",id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated",level:3},{value:"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)",id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual",level:3},{value:"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)",id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual",level:3},{value:"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)",id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated",level:3},{value:"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)",id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated",level:3},{value:"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)",id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated",level:3},{value:"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)",id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated",level:3},{value:"1.2.18 Ensure that the --profiling argument is set to false (Automated)",id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.2.19 Ensure that the --audit-log-path argument is set (Automated)",id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated",level:3},{value:"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)",id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated",level:3},{value:"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)",id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated",level:3},{value:"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)",id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated",level:3},{value:"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)",id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated",level:3},{value:"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)",id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)",id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)",id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)",id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)",id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual",level:3},{value:"1.2.31 Ensure that encryption providers are appropriately configured (Manual)",id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual",level:3},{value:"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)",id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"1.3 Controller Manager",id:"13-controller-manager",level:2},{value:"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)",id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual",level:3},{value:"1.3.2 Ensure that the --profiling argument is set to false (Automated)",id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)",id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated",level:3},{value:"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)",id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)",id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)",id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated",level:3},{value:"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"1.4 Scheduler",id:"14-scheduler",level:2},{value:"1.4.1 Ensure that the --profiling argument is set to false (Automated)",id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"2 Etcd Node Configuration",id:"2-etcd-node-configuration",level:2},{value:"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)",id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)",id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.3 Ensure that the --auto-tls argument is not set to true (Automated)",id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)",id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)",id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)",id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)",id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual",level:3},{value:"3.1 Authentication and Authorization",id:"31-authentication-and-authorization",level:2},{value:"3.1.1 Client certificate authentication should not be used for users (Manual)",id:"311-client-certificate-authentication-should-not-be-used-for-users-manual",level:3},{value:"3.2 Logging",id:"32-logging",level:2},{value:"3.2.1 Ensure that a minimal audit policy is created (Manual)",id:"321-ensure-that-a-minimal-audit-policy-is-created-manual",level:3},{value:"3.2.2 Ensure that the audit policy covers key security concerns (Manual)",id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual",level:3},{value:"4.1 Worker Node Configuration Files",id:"41-worker-node-configuration-files",level:2},{value:"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)",id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)",id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)",id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)",id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)",id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)",id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)",id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)",id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)",id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)",id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.2 Kubelet",id:"42-kubelet",level:2},{value:"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)",id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated",level:3},{value:"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)",id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual",level:3},{value:"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)",id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual",level:3},{value:"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)",id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated",level:3},{value:"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)",id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated",level:3},{value:"4.2.8 Ensure that the --hostname-override argument is not set (Manual)",id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual",level:3},{value:"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)",id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual",level:3},{value:"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)",id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual",level:3},{value:"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)",id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated",level:3},{value:"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)",id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual",level:3},{value:"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)",id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"5.1 RBAC and Service Accounts",id:"51-rbac-and-service-accounts",level:2},{value:"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)",id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual",level:3},{value:"5.1.2 Minimize access to secrets (Manual)",id:"512-minimize-access-to-secrets-manual",level:3},{value:"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)",id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual",level:3},{value:"5.1.4 Minimize access to create pods (Manual)",id:"514-minimize-access-to-create-pods-manual",level:3},{value:"5.1.5 Ensure that default service accounts are not actively used. (Manual)",id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual",level:3},{value:"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)",id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual",level:3},{value:"5.1.7 Avoid use of system:masters group (Manual)",id:"517-avoid-use-of-systemmasters-group-manual",level:3},{value:"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)",id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual",level:3},{value:"5.2 Pod Security Standards",id:"52-pod-security-standards",level:2},{value:"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)",id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual",level:3},{value:"5.2.2 Minimize the admission of privileged containers (Automated)",id:"522-minimize-the-admission-of-privileged-containers-automated",level:3},{value:"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)",id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated",level:3},{value:"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)",id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated",level:3},{value:"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)",id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated",level:3},{value:"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)",id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated",level:3},{value:"5.2.7 Minimize the admission of root containers (Automated)",id:"527-minimize-the-admission-of-root-containers-automated",level:3},{value:"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)",id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated",level:3},{value:"5.2.9 Minimize the admission of containers with added capabilities (Automated)",id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated",level:3},{value:"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)",id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual",level:3},{value:"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)",id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual",level:3},{value:"5.2.12 Minimize the admission of HostPath volumes (Manual)",id:"5212-minimize-the-admission-of-hostpath-volumes-manual",level:3},{value:"5.2.13 Minimize the admission of containers which use HostPorts (Manual)",id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual",level:3},{value:"5.3 Network Policies and CNI",id:"53-network-policies-and-cni",level:2},{value:"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)",id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual",level:3},{value:"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)",id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual",level:3},{value:"5.4 Secrets Management",id:"54-secrets-management",level:2},{value:"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)",id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual",level:3},{value:"5.4.2 Consider external secret storage (Manual)",id:"542-consider-external-secret-storage-manual",level:3},{value:"5.5 Extensible Admission Control",id:"55-extensible-admission-control",level:2},{value:"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)",id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual",level:3},{value:"5.7 General Policies",id:"57-general-policies",level:2},{value:"5.7.1 Create administrative boundaries between resources using namespaces (Manual)",id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual",level:3},{value:"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)",id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual",level:3},{value:"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)",id:"573-apply-securitycontext-to-your-pods-and-containers-manual",level:3},{value:"5.7.4 The default namespace should not be used (Manual)",id:"574-the-default-namespace-should-not-be-used-manual",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124"},"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"),(0,n.kt)("h4",{id:"overview"},"Overview"),(0,n.kt)("p",null,"This document is a companion to the ",(0,n.kt)("a",{parentName:"p",href:"/security/hardening-guide"},"K3s security hardening guide"),". The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers."),(0,n.kt)("p",null,"This guide is specific to the ",(0,n.kt)("strong",{parentName:"p"},"v1.22"),", ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," and ",(0,n.kt)("strong",{parentName:"p"},"v1.24")," release line of K3s and the ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," release of the CIS Kubernetes Benchmark."),(0,n.kt)("p",null,"For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in ",(0,n.kt)("a",{parentName:"p",href:"https://www.cisecurity.org/benchmark/kubernetes/"},"Center for Internet Security (CIS)"),"."),(0,n.kt)("h4",{id:"testing-controls-methodology"},"Testing controls methodology"),(0,n.kt)("p",null,"Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide."),(0,n.kt)("p",null,"Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing."),(0,n.kt)("p",null,"These are the possible results for each control:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Pass")," - The K3s cluster under test passed the audit outlined in the benchmark."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Not Applicable")," - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Warn")," - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.")),(0,n.kt)("p",null,'This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the "audit" commands to fit your scenario.'),(0,n.kt)("blockquote",null,(0,n.kt)("p",{parentName:"blockquote"},"NOTE: Only ",(0,n.kt)("inlineCode",{parentName:"p"},"automated")," tests (previously called ",(0,n.kt)("inlineCode",{parentName:"p"},"scored"),") are covered in this guide.")),(0,n.kt)("h3",{id:"controls"},"Controls"),(0,n.kt)("hr",null),(0,n.kt)("h2",{id:"11-control-plane-node-configuration-files"},"1.1 Control Plane Node Configuration Files"),(0,n.kt)("h3",{id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the\ncontrol plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 <path/to/cni/files>"),(0,n.kt)("h3",{id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual"},"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root <path/to/cni/files>"),(0,n.kt)("h3",{id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated"},"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above). For example,\nchmod 700 /var/lib/etcd"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.1.11\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'700' is equal to '700'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"700\n")),(0,n.kt)("h3",{id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated"},"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above).\nFor example, chown etcd:etcd /var/lib/etcd"),(0,n.kt)("h3",{id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated"},"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("h3",{id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated"},"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/admin.conf"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated"},"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown -R root:root /etc/kubernetes/pki/"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root\n")),(0,n.kt)("h3",{id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 644 /etc/kubernetes/pki/*.crt"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt\n")),(0,n.kt)("h3",{id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual"},"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 600 /etc/kubernetes/pki/*.key"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key\n")),(0,n.kt)("h2",{id:"12-api-server"},"1.2 API Server"),(0,n.kt)("h3",{id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual"},"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--anonymous-auth=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'\n")),(0,n.kt)("h3",{id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated"},"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and configure alternate mechanisms for authentication. Then,\nedit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token-auth-file=<filename>")," parameter."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--token-auth-file' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated"},"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"DenyServiceExternalIPs"),"\nfrom enabled admission plugins."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated"},"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the --kubelet-https parameter."),(0,n.kt)("h3",{id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated"},"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the\napiserver and kubelets. Then, edit API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\nkubelet client certificate and key parameters as below.\n--kubelet-client-certificate=<path/to/client-certificate-file>\n--kubelet-client-key=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-client-certificate' is present AND '--kubelet-client-key' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated"},"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup the TLS connection between\nthe apiserver and kubelets. Then, edit the API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\n--kubelet-certificate-authority parameter to the path to the cert file for the certificate authority\n",(0,n.kt)("inlineCode",{parentName:"p"},"--kubelet-certificate-authority=<ca-string>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-certificate-authority' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow.\nOne such example could be as below.\n--authorization-mode=RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated"},"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes Node.\n--authorization-mode=Node,RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'Node'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated"},"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes RBAC,\nfor example ",(0,n.kt)("inlineCode",{parentName:"p"},"--authorization-mode=Node,RBAC"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'RBAC'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual"},"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set the desired limits in a configuration file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\nand set the below parameters.\n--enable-admission-plugins=...,EventRateLimit,...\n--admission-control-config-file=<path/to/configuration/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'EventRateLimit'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated"},"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --enable-admission-plugins parameter, or set it to a\nvalue that does not include AlwaysAdmit."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual"},"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nAlwaysPullImages.\n--enable-admission-plugins=...,AlwaysPullImages,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual"},"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nSecurityContextDeny, unless PodSecurityPolicy is already in place.\n--enable-admission-plugins=...,SecurityContextDeny,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated"},"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create ServiceAccount objects as per your environment.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and ensure that the --disable-admission-plugins parameter is set to a\nvalue that does not include ServiceAccount."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated"},"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --disable-admission-plugins parameter to\nensure it does not include NamespaceLifecycle."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated"},"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to a\nvalue that includes NodeRestriction.\n--enable-admission-plugins=...,NodeRestriction,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'NodeRestriction'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated"},"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --secure-port parameter or\nset it to a different (non-zero) desired port."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--secure-port' is greater than 0 OR '--secure-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.2.18 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated"},"1.2.19 Ensure that the --audit-log-path argument is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-path parameter to a suitable path and\nfile where you would like audit logs to be written, for example,\n--audit-log-path=/var/log/apiserver/audit.log"),(0,n.kt)("h3",{id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated"},"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxage parameter to 30\nor as an appropriate number of days, for example,\n--audit-log-maxage=30"),(0,n.kt)("h3",{id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated"},"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate\nvalue. For example,\n--audit-log-maxbackup=10"),(0,n.kt)("h3",{id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated"},"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB.\nFor example, to set it as 100 MB, --audit-log-maxsize=100"),(0,n.kt)("h3",{id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated"},"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--service-account-lookup=true\nAlternatively, you can delete the --service-account-lookup parameter from this file so\nthat the default takes effect."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-lookup' is not present OR '--service-account-lookup' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated"},"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --service-account-key-file parameter\nto the public key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-key-file=<filename>"),"."),(0,n.kt)("h3",{id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated"},"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate and key file parameters.\n--etcd-certfile=<path/to/client-certificate-file>\n--etcd-keyfile=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.2.29\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-certfile' is present AND '--etcd-keyfile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--etcd-certfile AND --etcd-keyfile\n")),(0,n.kt)("h3",{id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated"},"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the TLS certificate and private key file parameters.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the client certificate authority file.\n--client-ca-file=<path/to/client-ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated"},"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate authority file parameter.\n--etcd-cafile=<path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-cafile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual"},"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --encryption-provider-config parameter to the path of that file.\nFor example, --encryption-provider-config=</path/to/EncryptionConfig/File>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'\n")),(0,n.kt)("h3",{id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual"},"1.2.31 Ensure that encryption providers are appropriately configured (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nIn this file, choose aescbc, kms or secretbox as the encryption provider."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"grep aescbc /path/to/encryption-config.json\n")),(0,n.kt)("h3",{id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual"},"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\nTLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,\nTLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,\nTLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'\n")),(0,n.kt)("h2",{id:"13-controller-manager"},"1.3 Controller Manager"),(0,n.kt)("h3",{id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual"},"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold,\nfor example, --terminated-pod-gc-threshold=10"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'\n")),(0,n.kt)("h3",{id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.3.2 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated"},"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node to set the below parameter.\n--use-service-account-credentials=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--use-service-account-credentials' is not equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated"},"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --service-account-private-key-file parameter\nto the private key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-private-key-file=<filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated"},"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --root-ca-file parameter to the certificate bundle file`.\n--root-ca-file=<path/to/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--root-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated"},"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true.\n--feature-gates=RotateKubeletServerCertificate=true"),(0,n.kt)("h3",{id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is present OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h2",{id:"14-scheduler"},"1.4 Scheduler"),(0,n.kt)("h3",{id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.4.1 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h2",{id:"2-etcd-node-configuration"},"2 Etcd Node Configuration"),(0,n.kt)("h3",{id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated"},"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure TLS encryption.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml\non the master node and set the below parameters.\n--cert-file=</path/to/ca-file>\n--key-file=</path/to/key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file\n")),(0,n.kt)("h3",{id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated"},"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),'\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--client-cert-auth="true"'),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated"},"2.3 Ensure that the --auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --auto-tls parameter or set it to false.\n--auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.3\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory\n")),(0,n.kt)("h3",{id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated"},"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure peer TLS encryption as appropriate\nfor your etcd cluster.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameters.\n--peer-client-file=</path/to/peer-cert-file>\n--peer-key-file=</path/to/peer-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.4\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file\n")),(0,n.kt)("h3",{id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated"},"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--peer-client-cert-auth=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.5\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated"},"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --peer-auto-tls parameter or set it to false.\n--peer-auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.6\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false\n")),(0,n.kt)("h3",{id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual"},"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\n","[Manual test]","\nFollow the etcd documentation and create a dedicated certificate authority setup for the\netcd service.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameter.\n--trusted-ca-file=</path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.7\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'trusted-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file\n")),(0,n.kt)("h2",{id:"31-authentication-and-authorization"},"3.1 Authentication and Authorization"),(0,n.kt)("h3",{id:"311-client-certificate-authentication-should-not-be-used-for-users-manual"},"3.1.1 Client certificate authentication should not be used for users (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAlternative mechanisms provided by Kubernetes such as the use of OIDC should be\nimplemented in place of client certificates."),(0,n.kt)("h2",{id:"32-logging"},"3.2 Logging"),(0,n.kt)("h3",{id:"321-ensure-that-a-minimal-audit-policy-is-created-manual"},"3.2.1 Ensure that a minimal audit policy is created (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate an audit policy file for your cluster."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'\n")),(0,n.kt)("h3",{id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual"},"3.2.2 Ensure that the audit policy covers key security concerns (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the audit policy provided for the cluster and ensure that it covers\nat least the following areas,"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Access to Secrets managed by the cluster. Care should be taken to only\nlog Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in\norder to avoid risk of logging sensitive data."),(0,n.kt)("li",{parentName:"ul"},"Modification of Pod and Deployment objects."),(0,n.kt)("li",{parentName:"ul"},"Use of ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/exec"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/portforward"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/proxy")," and ",(0,n.kt)("inlineCode",{parentName:"li"},"services/proxy"),".\nFor most requests, minimally logging at the Metadata level is recommended\n(the most basic level of logging).")),(0,n.kt)("h2",{id:"41-worker-node-configuration-files"},"4.1 Worker Node Configuration Files"),(0,n.kt)("h3",{id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated"},"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual"},"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is equal to '644'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated"},"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the file permissions of the\n--client-ca-file: ",(0,n.kt)("inlineCode",{parentName:"p"},"chmod 644 <filename>")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 600\n")),(0,n.kt)("h3",{id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual"},"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the ownership of the --client-ca-file:\n",(0,n.kt)("inlineCode",{parentName:"p"},"chown root:root <filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated"},"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchmod 644 /var/lib/kubelet/config.yaml"),(0,n.kt)("h3",{id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated"},"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchown root:root /var/lib/kubelet/config.yaml"),(0,n.kt)("h2",{id:"42-kubelet"},"4.2 Kubelet"),(0,n.kt)("h3",{id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated"},"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication: anonymous: enabled")," to\n",(0,n.kt)("inlineCode",{parentName:"p"},"false"),".\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n",(0,n.kt)("inlineCode",{parentName:"p"},"--anonymous-auth=false"),"\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "anonymous-auth" | grep -v grep; else echo "--anonymous-auth=false"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--anonymous-auth' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authorization.mode")," to Webhook. If\nusing executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--authorization-mode=Webhook\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "authorization-mode" | grep -v grep; else echo "--authorization-mode=Webhook"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication.x509.clientCAFile")," to\nthe location of the client CA file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--client-ca-file=<path/to/client-ca-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "client-ca-file" | grep -v grep; else echo "--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual"},"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"readOnlyPort")," to 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--read-only-port=0\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--read-only-port' is equal to '0' OR '--read-only-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual"},"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"streamingConnectionIdleTimeout")," to a\nvalue other than 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--streaming-connection-idle-timeout=5m\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'\n")),(0,n.kt)("h3",{id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated"},"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"protectKernelDefaults")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--protect-kernel-defaults=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated"},"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"makeIPTablesUtilChains")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove the --make-iptables-util-chains argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual"},"4.2.8 Ensure that the --hostname-override argument is not set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and remove the --hostname-override argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual"},"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"eventRecordQPS")," to an appropriate level.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h3",{id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual"},"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsCertFile")," to the location\nof the certificate file to use to identify this Kubelet, and ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsPrivateKeyFile"),"\nto the location of the corresponding private key file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameters in KUBELET_CERTIFICATE_ARGS variable.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated"},"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to add the line ",(0,n.kt)("inlineCode",{parentName:"p"},"rotateCertificates")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true")," or\nremove it altogether to use the default value.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS\nvariable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual"},"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable.\n--feature-gates=RotateKubeletServerCertificate=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual"},"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"TLSCipherSuites")," to\nTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nor to a subset of these values.\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the --tls-cipher-suites parameter as follows, or to a subset of these values.\n--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h2",{id:"51-rbac-and-service-accounts"},"5.1 RBAC and Service Accounts"),(0,n.kt)("h3",{id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual"},"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIdentify all clusterrolebindings to the cluster-admin role. Check if they are used and\nif they need this role or if they could use a role with fewer privileges.\nWhere possible, first bind users to a lower privileged role and then remove the\nclusterrolebinding to the cluster-admin role :\nkubectl delete clusterrolebinding ","[name]"),(0,n.kt)("h3",{id:"512-minimize-access-to-secrets-manual"},"5.1.2 Minimize access to secrets (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove get, list and watch access to Secret objects in the cluster."),(0,n.kt)("h3",{id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual"},"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible replace any use of wildcards in clusterroles and roles with specific\nobjects or actions."),(0,n.kt)("h3",{id:"514-minimize-access-to-create-pods-manual"},"5.1.4 Minimize access to create pods (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove create access to pod objects in the cluster."),(0,n.kt)("h3",{id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual"},"5.1.5 Ensure that default service accounts are not actively used. (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate explicit service accounts wherever a Kubernetes workload requires specific access\nto the Kubernetes API server.\nModify the configuration of each default service account to include this value\nautomountServiceAccountToken: false"),(0,n.kt)("h3",{id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual"},"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nModify the definition of pods and service accounts which do not need to mount service\naccount tokens to disable it."),(0,n.kt)("h3",{id:"517-avoid-use-of-systemmasters-group-manual"},"5.1.7 Avoid use of system:masters group (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRemove the system:masters group from all users in the cluster."),(0,n.kt)("h3",{id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual"},"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove the impersonate, bind and escalate rights from subjects."),(0,n.kt)("h2",{id:"52-pod-security-standards"},"5.2 Pod Security Standards"),(0,n.kt)("h3",{id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual"},"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that either Pod Security Admission or an external policy control system is in place\nfor every namespace which contains user workloads."),(0,n.kt)("h3",{id:"522-minimize-the-admission-of-privileged-containers-automated"},"5.2.2 Minimize the admission of privileged containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of privileged containers."),(0,n.kt)("h3",{id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated"},"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPID")," containers."),(0,n.kt)("h3",{id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated"},"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostIPC")," containers."),(0,n.kt)("h3",{id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated"},"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostNetwork")," containers."),(0,n.kt)("h3",{id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated"},"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},".spec.allowPrivilegeEscalation")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"527-minimize-the-admission-of-root-containers-automated"},"5.2.7 Minimize the admission of root containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate a policy for each namespace in the cluster, ensuring that either ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAsNonRoot"),"\nor ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAs")," with the range of UIDs not including 0, is set."),(0,n.kt)("h3",{id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated"},"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with the ",(0,n.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capability."),(0,n.kt)("h3",{id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated"},"5.2.9 Minimize the admission of containers with added capabilities (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that ",(0,n.kt)("inlineCode",{parentName:"p"},"allowedCapabilities")," is not present in policies for the cluster unless\nit is set to an empty array."),(0,n.kt)("h3",{id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual"},"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the use of capabilities in applications running on your cluster. Where a namespace\ncontains applications which do not require any Linux capabilities to operate consider adding\na PSP which forbids the admission of containers which do not drop all capabilities."),(0,n.kt)("h3",{id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual"},"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers that have ",(0,n.kt)("inlineCode",{parentName:"p"},".securityContext.windowsOptions.hostProcess")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"5212-minimize-the-admission-of-hostpath-volumes-manual"},"5.2.12 Minimize the admission of HostPath volumes (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPath")," volumes."),(0,n.kt)("h3",{id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual"},"5.2.13 Minimize the admission of containers which use HostPorts (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers which use ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPort")," sections."),(0,n.kt)("h2",{id:"53-network-policies-and-cni"},"5.3 Network Policies and CNI"),(0,n.kt)("h3",{id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual"},"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf the CNI plugin in use does not support network policies, consideration should be given to\nmaking use of a different plugin, or finding an alternate mechanism for restricting traffic\nin the Kubernetes cluster."),(0,n.kt)("h3",{id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual"},"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create NetworkPolicy objects as you need them."),(0,n.kt)("h2",{id:"54-secrets-management"},"5.4 Secrets Management"),(0,n.kt)("h3",{id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual"},"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf possible, rewrite application code to read Secrets from mounted secret files, rather than\nfrom environment variables."),(0,n.kt)("h3",{id:"542-consider-external-secret-storage-manual"},"5.4.2 Consider external secret storage (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRefer to the Secrets management options offered by your cloud provider or a third-party\nsecrets management solution."),(0,n.kt)("h2",{id:"55-extensible-admission-control"},"5.5 Extensible Admission Control"),(0,n.kt)("h3",{id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual"},"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup image provenance."),(0,n.kt)("h2",{id:"57-general-policies"},"5.7 General Policies"),(0,n.kt)("h3",{id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual"},"5.7.1 Create administrative boundaries between resources using namespaces (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create namespaces for objects in your deployment as you need\nthem."),(0,n.kt)("h3",{id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual"},"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nUse ",(0,n.kt)("inlineCode",{parentName:"p"},"securityContext")," to enable the docker/default seccomp profile in your pod definitions.\nAn example is as below:\nsecurityContext:\nseccompProfile:\ntype: RuntimeDefault"),(0,n.kt)("h3",{id:"573-apply-securitycontext-to-your-pods-and-containers-manual"},"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and apply SecurityContexts to your Pods. For a\nsuggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker\nContainers."),(0,n.kt)("h3",{id:"574-the-default-namespace-should-not-be-used-manual"},"5.7.4 The default namespace should not be used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that namespaces are created to allow for appropriate segregation of Kubernetes\nresources and that all new resources are created in a specific namespace."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3452],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},898:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const s={title:"CIS Self Assessment Guide",weight:90},i=void 0,l={unversionedId:"security/self-assessment",id:"security/self-assessment",title:"CIS Self Assessment Guide",description:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",source:"@site/docs/security/self-assessment.md",sourceDirName:"security",slug:"/security/self-assessment",permalink:"/security/self-assessment",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"CIS Self Assessment Guide",weight:90},sidebar:"mySidebar",previous:{title:"CIS Hardening Guide",permalink:"/security/hardening-guide"}},o={},c=[{value:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)",id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)",id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)",id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)",id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)",id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)",id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)",id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)",id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual",level:3},{value:"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)",id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated",level:3},{value:"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)",id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated",level:3},{value:"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)",id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated",level:3},{value:"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)",id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)",id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)",id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)",id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)",id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)",id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)",id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)",id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual",level:3},{value:"1.2 API Server",id:"12-api-server",level:2},{value:"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)",id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual",level:3},{value:"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)",id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated",level:3},{value:"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)",id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated",level:3},{value:"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)",id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated",level:3},{value:"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)",id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)",id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)",id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated",level:3},{value:"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)",id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated",level:3},{value:"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)",id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual",level:3},{value:"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)",id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated",level:3},{value:"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)",id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual",level:3},{value:"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)",id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual",level:3},{value:"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)",id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated",level:3},{value:"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)",id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated",level:3},{value:"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)",id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated",level:3},{value:"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)",id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated",level:3},{value:"1.2.18 Ensure that the --profiling argument is set to false (Automated)",id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.2.19 Ensure that the --audit-log-path argument is set (Automated)",id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated",level:3},{value:"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)",id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated",level:3},{value:"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)",id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated",level:3},{value:"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)",id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated",level:3},{value:"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)",id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated",level:3},{value:"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)",id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)",id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)",id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)",id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)",id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual",level:3},{value:"1.2.31 Ensure that encryption providers are appropriately configured (Manual)",id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual",level:3},{value:"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)",id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"1.3 Controller Manager",id:"13-controller-manager",level:2},{value:"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)",id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual",level:3},{value:"1.3.2 Ensure that the --profiling argument is set to false (Automated)",id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)",id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated",level:3},{value:"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)",id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)",id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)",id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated",level:3},{value:"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"1.4 Scheduler",id:"14-scheduler",level:2},{value:"1.4.1 Ensure that the --profiling argument is set to false (Automated)",id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"2 Etcd Node Configuration",id:"2-etcd-node-configuration",level:2},{value:"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)",id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)",id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.3 Ensure that the --auto-tls argument is not set to true (Automated)",id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)",id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)",id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)",id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)",id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual",level:3},{value:"3.1 Authentication and Authorization",id:"31-authentication-and-authorization",level:2},{value:"3.1.1 Client certificate authentication should not be used for users (Manual)",id:"311-client-certificate-authentication-should-not-be-used-for-users-manual",level:3},{value:"3.2 Logging",id:"32-logging",level:2},{value:"3.2.1 Ensure that a minimal audit policy is created (Manual)",id:"321-ensure-that-a-minimal-audit-policy-is-created-manual",level:3},{value:"3.2.2 Ensure that the audit policy covers key security concerns (Manual)",id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual",level:3},{value:"4.1 Worker Node Configuration Files",id:"41-worker-node-configuration-files",level:2},{value:"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)",id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)",id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)",id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)",id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)",id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)",id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)",id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)",id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)",id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)",id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.2 Kubelet",id:"42-kubelet",level:2},{value:"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)",id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated",level:3},{value:"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)",id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual",level:3},{value:"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)",id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual",level:3},{value:"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)",id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated",level:3},{value:"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)",id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated",level:3},{value:"4.2.8 Ensure that the --hostname-override argument is not set (Manual)",id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual",level:3},{value:"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)",id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual",level:3},{value:"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)",id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual",level:3},{value:"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)",id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated",level:3},{value:"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)",id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual",level:3},{value:"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)",id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"5.1 RBAC and Service Accounts",id:"51-rbac-and-service-accounts",level:2},{value:"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)",id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual",level:3},{value:"5.1.2 Minimize access to secrets (Manual)",id:"512-minimize-access-to-secrets-manual",level:3},{value:"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)",id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual",level:3},{value:"5.1.4 Minimize access to create pods (Manual)",id:"514-minimize-access-to-create-pods-manual",level:3},{value:"5.1.5 Ensure that default service accounts are not actively used. (Manual)",id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual",level:3},{value:"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)",id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual",level:3},{value:"5.1.7 Avoid use of system:masters group (Manual)",id:"517-avoid-use-of-systemmasters-group-manual",level:3},{value:"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)",id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual",level:3},{value:"5.2 Pod Security Standards",id:"52-pod-security-standards",level:2},{value:"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)",id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual",level:3},{value:"5.2.2 Minimize the admission of privileged containers (Automated)",id:"522-minimize-the-admission-of-privileged-containers-automated",level:3},{value:"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)",id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated",level:3},{value:"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)",id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated",level:3},{value:"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)",id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated",level:3},{value:"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)",id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated",level:3},{value:"5.2.7 Minimize the admission of root containers (Automated)",id:"527-minimize-the-admission-of-root-containers-automated",level:3},{value:"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)",id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated",level:3},{value:"5.2.9 Minimize the admission of containers with added capabilities (Automated)",id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated",level:3},{value:"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)",id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual",level:3},{value:"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)",id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual",level:3},{value:"5.2.12 Minimize the admission of HostPath volumes (Manual)",id:"5212-minimize-the-admission-of-hostpath-volumes-manual",level:3},{value:"5.2.13 Minimize the admission of containers which use HostPorts (Manual)",id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual",level:3},{value:"5.3 Network Policies and CNI",id:"53-network-policies-and-cni",level:2},{value:"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)",id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual",level:3},{value:"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)",id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual",level:3},{value:"5.4 Secrets Management",id:"54-secrets-management",level:2},{value:"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)",id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual",level:3},{value:"5.4.2 Consider external secret storage (Manual)",id:"542-consider-external-secret-storage-manual",level:3},{value:"5.5 Extensible Admission Control",id:"55-extensible-admission-control",level:2},{value:"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)",id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual",level:3},{value:"5.7 General Policies",id:"57-general-policies",level:2},{value:"5.7.1 Create administrative boundaries between resources using namespaces (Manual)",id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual",level:3},{value:"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)",id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual",level:3},{value:"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)",id:"573-apply-securitycontext-to-your-pods-and-containers-manual",level:3},{value:"5.7.4 The default namespace should not be used (Manual)",id:"574-the-default-namespace-should-not-be-used-manual",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124"},"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"),(0,n.kt)("h4",{id:"overview"},"Overview"),(0,n.kt)("p",null,"This document is a companion to the ",(0,n.kt)("a",{parentName:"p",href:"/security/hardening-guide"},"K3s security hardening guide"),". The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers."),(0,n.kt)("p",null,"This guide is specific to the ",(0,n.kt)("strong",{parentName:"p"},"v1.22"),", ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," and ",(0,n.kt)("strong",{parentName:"p"},"v1.24")," release line of K3s and the ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," release of the CIS Kubernetes Benchmark."),(0,n.kt)("p",null,"For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in ",(0,n.kt)("a",{parentName:"p",href:"https://www.cisecurity.org/benchmark/kubernetes/"},"Center for Internet Security (CIS)"),"."),(0,n.kt)("h4",{id:"testing-controls-methodology"},"Testing controls methodology"),(0,n.kt)("p",null,"Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide."),(0,n.kt)("p",null,"Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing."),(0,n.kt)("p",null,"These are the possible results for each control:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Pass")," - The K3s cluster under test passed the audit outlined in the benchmark."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Not Applicable")," - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Warn")," - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.")),(0,n.kt)("p",null,'This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the "audit" commands to fit your scenario.'),(0,n.kt)("blockquote",null,(0,n.kt)("p",{parentName:"blockquote"},"NOTE: Only ",(0,n.kt)("inlineCode",{parentName:"p"},"automated")," tests (previously called ",(0,n.kt)("inlineCode",{parentName:"p"},"scored"),") are covered in this guide.")),(0,n.kt)("h3",{id:"controls"},"Controls"),(0,n.kt)("hr",null),(0,n.kt)("h2",{id:"11-control-plane-node-configuration-files"},"1.1 Control Plane Node Configuration Files"),(0,n.kt)("h3",{id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the\ncontrol plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 <path/to/cni/files>"),(0,n.kt)("h3",{id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual"},"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root <path/to/cni/files>"),(0,n.kt)("h3",{id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated"},"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above). For example,\nchmod 700 /var/lib/etcd"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.1.11\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'700' is equal to '700'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"700\n")),(0,n.kt)("h3",{id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated"},"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above).\nFor example, chown etcd:etcd /var/lib/etcd"),(0,n.kt)("h3",{id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated"},"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("h3",{id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated"},"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/admin.conf"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated"},"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown -R root:root /etc/kubernetes/pki/"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root\n")),(0,n.kt)("h3",{id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 644 /etc/kubernetes/pki/*.crt"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt\n")),(0,n.kt)("h3",{id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual"},"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 600 /etc/kubernetes/pki/*.key"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key\n")),(0,n.kt)("h2",{id:"12-api-server"},"1.2 API Server"),(0,n.kt)("h3",{id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual"},"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--anonymous-auth=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'\n")),(0,n.kt)("h3",{id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated"},"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and configure alternate mechanisms for authentication. Then,\nedit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token-auth-file=<filename>")," parameter."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--token-auth-file' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated"},"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"DenyServiceExternalIPs"),"\nfrom enabled admission plugins."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated"},"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the --kubelet-https parameter."),(0,n.kt)("h3",{id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated"},"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the\napiserver and kubelets. Then, edit API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\nkubelet client certificate and key parameters as below.\n--kubelet-client-certificate=<path/to/client-certificate-file>\n--kubelet-client-key=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-client-certificate' is present AND '--kubelet-client-key' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated"},"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup the TLS connection between\nthe apiserver and kubelets. Then, edit the API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\n--kubelet-certificate-authority parameter to the path to the cert file for the certificate authority\n",(0,n.kt)("inlineCode",{parentName:"p"},"--kubelet-certificate-authority=<ca-string>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-certificate-authority' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow.\nOne such example could be as below.\n--authorization-mode=RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated"},"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes Node.\n--authorization-mode=Node,RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'Node'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated"},"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes RBAC,\nfor example ",(0,n.kt)("inlineCode",{parentName:"p"},"--authorization-mode=Node,RBAC"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'RBAC'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual"},"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set the desired limits in a configuration file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\nand set the below parameters.\n--enable-admission-plugins=...,EventRateLimit,...\n--admission-control-config-file=<path/to/configuration/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'EventRateLimit'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated"},"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --enable-admission-plugins parameter, or set it to a\nvalue that does not include AlwaysAdmit."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual"},"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nAlwaysPullImages.\n--enable-admission-plugins=...,AlwaysPullImages,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual"},"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nSecurityContextDeny, unless PodSecurityPolicy is already in place.\n--enable-admission-plugins=...,SecurityContextDeny,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated"},"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create ServiceAccount objects as per your environment.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and ensure that the --disable-admission-plugins parameter is set to a\nvalue that does not include ServiceAccount."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated"},"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --disable-admission-plugins parameter to\nensure it does not include NamespaceLifecycle."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated"},"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to a\nvalue that includes NodeRestriction.\n--enable-admission-plugins=...,NodeRestriction,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'NodeRestriction'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated"},"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --secure-port parameter or\nset it to a different (non-zero) desired port."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--secure-port' is greater than 0 OR '--secure-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.2.18 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated"},"1.2.19 Ensure that the --audit-log-path argument is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-path parameter to a suitable path and\nfile where you would like audit logs to be written, for example,\n--audit-log-path=/var/log/apiserver/audit.log"),(0,n.kt)("h3",{id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated"},"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxage parameter to 30\nor as an appropriate number of days, for example,\n--audit-log-maxage=30"),(0,n.kt)("h3",{id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated"},"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate\nvalue. For example,\n--audit-log-maxbackup=10"),(0,n.kt)("h3",{id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated"},"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB.\nFor example, to set it as 100 MB, --audit-log-maxsize=100"),(0,n.kt)("h3",{id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated"},"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--service-account-lookup=true\nAlternatively, you can delete the --service-account-lookup parameter from this file so\nthat the default takes effect."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-lookup' is not present OR '--service-account-lookup' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated"},"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --service-account-key-file parameter\nto the public key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-key-file=<filename>"),"."),(0,n.kt)("h3",{id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated"},"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate and key file parameters.\n--etcd-certfile=<path/to/client-certificate-file>\n--etcd-keyfile=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.2.29\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-certfile' is present AND '--etcd-keyfile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--etcd-certfile AND --etcd-keyfile\n")),(0,n.kt)("h3",{id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated"},"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the TLS certificate and private key file parameters.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the client certificate authority file.\n--client-ca-file=<path/to/client-ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated"},"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate authority file parameter.\n--etcd-cafile=<path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-cafile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual"},"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --encryption-provider-config parameter to the path of that file.\nFor example, --encryption-provider-config=</path/to/EncryptionConfig/File>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'\n")),(0,n.kt)("h3",{id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual"},"1.2.31 Ensure that encryption providers are appropriately configured (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nIn this file, choose aescbc, kms or secretbox as the encryption provider."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"grep aescbc /path/to/encryption-config.json\n")),(0,n.kt)("h3",{id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual"},"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\nTLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,\nTLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,\nTLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'\n")),(0,n.kt)("h2",{id:"13-controller-manager"},"1.3 Controller Manager"),(0,n.kt)("h3",{id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual"},"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold,\nfor example, --terminated-pod-gc-threshold=10"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'\n")),(0,n.kt)("h3",{id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.3.2 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated"},"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node to set the below parameter.\n--use-service-account-credentials=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--use-service-account-credentials' is not equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated"},"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --service-account-private-key-file parameter\nto the private key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-private-key-file=<filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated"},"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --root-ca-file parameter to the certificate bundle file`.\n--root-ca-file=<path/to/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--root-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated"},"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true.\n--feature-gates=RotateKubeletServerCertificate=true"),(0,n.kt)("h3",{id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is present OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h2",{id:"14-scheduler"},"1.4 Scheduler"),(0,n.kt)("h3",{id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.4.1 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h2",{id:"2-etcd-node-configuration"},"2 Etcd Node Configuration"),(0,n.kt)("h3",{id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated"},"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure TLS encryption.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml\non the master node and set the below parameters.\n--cert-file=</path/to/ca-file>\n--key-file=</path/to/key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file\n")),(0,n.kt)("h3",{id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated"},"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),'\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--client-cert-auth="true"'),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated"},"2.3 Ensure that the --auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --auto-tls parameter or set it to false.\n--auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.3\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory\n")),(0,n.kt)("h3",{id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated"},"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure peer TLS encryption as appropriate\nfor your etcd cluster.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameters.\n--peer-client-file=</path/to/peer-cert-file>\n--peer-key-file=</path/to/peer-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.4\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file\n")),(0,n.kt)("h3",{id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated"},"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--peer-client-cert-auth=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.5\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated"},"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --peer-auto-tls parameter or set it to false.\n--peer-auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.6\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false\n")),(0,n.kt)("h3",{id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual"},"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\n","[Manual test]","\nFollow the etcd documentation and create a dedicated certificate authority setup for the\netcd service.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameter.\n--trusted-ca-file=</path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.7\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'trusted-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file\n")),(0,n.kt)("h2",{id:"31-authentication-and-authorization"},"3.1 Authentication and Authorization"),(0,n.kt)("h3",{id:"311-client-certificate-authentication-should-not-be-used-for-users-manual"},"3.1.1 Client certificate authentication should not be used for users (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAlternative mechanisms provided by Kubernetes such as the use of OIDC should be\nimplemented in place of client certificates."),(0,n.kt)("h2",{id:"32-logging"},"3.2 Logging"),(0,n.kt)("h3",{id:"321-ensure-that-a-minimal-audit-policy-is-created-manual"},"3.2.1 Ensure that a minimal audit policy is created (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate an audit policy file for your cluster."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'\n")),(0,n.kt)("h3",{id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual"},"3.2.2 Ensure that the audit policy covers key security concerns (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the audit policy provided for the cluster and ensure that it covers\nat least the following areas,"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Access to Secrets managed by the cluster. Care should be taken to only\nlog Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in\norder to avoid risk of logging sensitive data."),(0,n.kt)("li",{parentName:"ul"},"Modification of Pod and Deployment objects."),(0,n.kt)("li",{parentName:"ul"},"Use of ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/exec"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/portforward"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/proxy")," and ",(0,n.kt)("inlineCode",{parentName:"li"},"services/proxy"),".\nFor most requests, minimally logging at the Metadata level is recommended\n(the most basic level of logging).")),(0,n.kt)("h2",{id:"41-worker-node-configuration-files"},"4.1 Worker Node Configuration Files"),(0,n.kt)("h3",{id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated"},"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual"},"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is equal to '644'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated"},"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the file permissions of the\n--client-ca-file: ",(0,n.kt)("inlineCode",{parentName:"p"},"chmod 644 <filename>")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 600\n")),(0,n.kt)("h3",{id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual"},"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the ownership of the --client-ca-file:\n",(0,n.kt)("inlineCode",{parentName:"p"},"chown root:root <filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated"},"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchmod 644 /var/lib/kubelet/config.yaml"),(0,n.kt)("h3",{id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated"},"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchown root:root /var/lib/kubelet/config.yaml"),(0,n.kt)("h2",{id:"42-kubelet"},"4.2 Kubelet"),(0,n.kt)("h3",{id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated"},"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication: anonymous: enabled")," to\n",(0,n.kt)("inlineCode",{parentName:"p"},"false"),".\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n",(0,n.kt)("inlineCode",{parentName:"p"},"--anonymous-auth=false"),"\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "anonymous-auth" | grep -v grep; else echo "--anonymous-auth=false"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--anonymous-auth' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authorization.mode")," to Webhook. If\nusing executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--authorization-mode=Webhook\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "authorization-mode" | grep -v grep; else echo "--authorization-mode=Webhook"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication.x509.clientCAFile")," to\nthe location of the client CA file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--client-ca-file=<path/to/client-ca-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "client-ca-file" | grep -v grep; else echo "--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual"},"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"readOnlyPort")," to 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--read-only-port=0\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--read-only-port' is equal to '0' OR '--read-only-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual"},"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"streamingConnectionIdleTimeout")," to a\nvalue other than 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--streaming-connection-idle-timeout=5m\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'\n")),(0,n.kt)("h3",{id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated"},"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"protectKernelDefaults")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--protect-kernel-defaults=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated"},"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"makeIPTablesUtilChains")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove the --make-iptables-util-chains argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual"},"4.2.8 Ensure that the --hostname-override argument is not set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and remove the --hostname-override argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual"},"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"eventRecordQPS")," to an appropriate level.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h3",{id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual"},"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsCertFile")," to the location\nof the certificate file to use to identify this Kubelet, and ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsPrivateKeyFile"),"\nto the location of the corresponding private key file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameters in KUBELET_CERTIFICATE_ARGS variable.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated"},"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to add the line ",(0,n.kt)("inlineCode",{parentName:"p"},"rotateCertificates")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true")," or\nremove it altogether to use the default value.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS\nvariable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual"},"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable.\n--feature-gates=RotateKubeletServerCertificate=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual"},"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"TLSCipherSuites")," to\nTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nor to a subset of these values.\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the --tls-cipher-suites parameter as follows, or to a subset of these values.\n--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h2",{id:"51-rbac-and-service-accounts"},"5.1 RBAC and Service Accounts"),(0,n.kt)("h3",{id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual"},"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIdentify all clusterrolebindings to the cluster-admin role. Check if they are used and\nif they need this role or if they could use a role with fewer privileges.\nWhere possible, first bind users to a lower privileged role and then remove the\nclusterrolebinding to the cluster-admin role :\nkubectl delete clusterrolebinding ","[name]"),(0,n.kt)("h3",{id:"512-minimize-access-to-secrets-manual"},"5.1.2 Minimize access to secrets (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove get, list and watch access to Secret objects in the cluster."),(0,n.kt)("h3",{id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual"},"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible replace any use of wildcards in clusterroles and roles with specific\nobjects or actions."),(0,n.kt)("h3",{id:"514-minimize-access-to-create-pods-manual"},"5.1.4 Minimize access to create pods (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove create access to pod objects in the cluster."),(0,n.kt)("h3",{id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual"},"5.1.5 Ensure that default service accounts are not actively used. (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate explicit service accounts wherever a Kubernetes workload requires specific access\nto the Kubernetes API server.\nModify the configuration of each default service account to include this value\nautomountServiceAccountToken: false"),(0,n.kt)("h3",{id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual"},"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nModify the definition of pods and service accounts which do not need to mount service\naccount tokens to disable it."),(0,n.kt)("h3",{id:"517-avoid-use-of-systemmasters-group-manual"},"5.1.7 Avoid use of system:masters group (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRemove the system:masters group from all users in the cluster."),(0,n.kt)("h3",{id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual"},"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove the impersonate, bind and escalate rights from subjects."),(0,n.kt)("h2",{id:"52-pod-security-standards"},"5.2 Pod Security Standards"),(0,n.kt)("h3",{id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual"},"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that either Pod Security Admission or an external policy control system is in place\nfor every namespace which contains user workloads."),(0,n.kt)("h3",{id:"522-minimize-the-admission-of-privileged-containers-automated"},"5.2.2 Minimize the admission of privileged containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of privileged containers."),(0,n.kt)("h3",{id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated"},"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPID")," containers."),(0,n.kt)("h3",{id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated"},"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostIPC")," containers."),(0,n.kt)("h3",{id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated"},"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostNetwork")," containers."),(0,n.kt)("h3",{id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated"},"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},".spec.allowPrivilegeEscalation")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"527-minimize-the-admission-of-root-containers-automated"},"5.2.7 Minimize the admission of root containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate a policy for each namespace in the cluster, ensuring that either ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAsNonRoot"),"\nor ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAs")," with the range of UIDs not including 0, is set."),(0,n.kt)("h3",{id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated"},"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with the ",(0,n.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capability."),(0,n.kt)("h3",{id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated"},"5.2.9 Minimize the admission of containers with added capabilities (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that ",(0,n.kt)("inlineCode",{parentName:"p"},"allowedCapabilities")," is not present in policies for the cluster unless\nit is set to an empty array."),(0,n.kt)("h3",{id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual"},"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the use of capabilities in applications running on your cluster. Where a namespace\ncontains applications which do not require any Linux capabilities to operate consider adding\na PSP which forbids the admission of containers which do not drop all capabilities."),(0,n.kt)("h3",{id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual"},"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers that have ",(0,n.kt)("inlineCode",{parentName:"p"},".securityContext.windowsOptions.hostProcess")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"5212-minimize-the-admission-of-hostpath-volumes-manual"},"5.2.12 Minimize the admission of HostPath volumes (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPath")," volumes."),(0,n.kt)("h3",{id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual"},"5.2.13 Minimize the admission of containers which use HostPorts (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers which use ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPort")," sections."),(0,n.kt)("h2",{id:"53-network-policies-and-cni"},"5.3 Network Policies and CNI"),(0,n.kt)("h3",{id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual"},"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf the CNI plugin in use does not support network policies, consideration should be given to\nmaking use of a different plugin, or finding an alternate mechanism for restricting traffic\nin the Kubernetes cluster."),(0,n.kt)("h3",{id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual"},"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create NetworkPolicy objects as you need them."),(0,n.kt)("h2",{id:"54-secrets-management"},"5.4 Secrets Management"),(0,n.kt)("h3",{id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual"},"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf possible, rewrite application code to read Secrets from mounted secret files, rather than\nfrom environment variables."),(0,n.kt)("h3",{id:"542-consider-external-secret-storage-manual"},"5.4.2 Consider external secret storage (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRefer to the Secrets management options offered by your cloud provider or a third-party\nsecrets management solution."),(0,n.kt)("h2",{id:"55-extensible-admission-control"},"5.5 Extensible Admission Control"),(0,n.kt)("h3",{id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual"},"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup image provenance."),(0,n.kt)("h2",{id:"57-general-policies"},"5.7 General Policies"),(0,n.kt)("h3",{id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual"},"5.7.1 Create administrative boundaries between resources using namespaces (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create namespaces for objects in your deployment as you need\nthem."),(0,n.kt)("h3",{id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual"},"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nUse ",(0,n.kt)("inlineCode",{parentName:"p"},"securityContext")," to enable the docker/default seccomp profile in your pod definitions.\nAn example is as below:\nsecurityContext:\nseccompProfile:\ntype: RuntimeDefault"),(0,n.kt)("h3",{id:"573-apply-securitycontext-to-your-pods-and-containers-manual"},"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and apply SecurityContexts to your Pods. For a\nsuggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker\nContainers."),(0,n.kt)("h3",{id:"574-the-default-namespace-should-not-be-used-manual"},"5.7.4 The default namespace should not be used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that namespaces are created to allow for appropriate segregation of Kubernetes\nresources and that all new resources are created in a specific namespace."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/10b61a3f.83558b2f.js b/assets/js/10b61a3f.7e4c0bc1.js
similarity index 99%
rename from assets/js/10b61a3f.83558b2f.js
rename to assets/js/10b61a3f.7e4c0bc1.js
index 5ec650938..d73cdef36 100644
--- a/assets/js/10b61a3f.83558b2f.js
+++ b/assets/js/10b61a3f.7e4c0bc1.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4902],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,a=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(r),m=i,h=u["".concat(s,".").concat(m)]||u[m]||d[m]||a;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var a=r.length,o=new Array(a);o[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var p=2;p<a;p++)o[p]=r[p];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},3159:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>h,frontMatter:()=>a,metadata:()=>l,toc:()=>p});var n=r(3117),i=(r(7294),r(3905));const a={title:"Private Registry Configuration",weight:55},o=void 0,l={unversionedId:"installation/private-registry",id:"installation/private-registry",title:"Private Registry Configuration",description:"Containerd can be configured to connect to private registries and use them to pull private images on the node.",source:"@site/docs/installation/private-registry.md",sourceDirName:"installation",slug:"/installation/private-registry",permalink:"/installation/private-registry",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Private Registry Configuration",weight:55},sidebar:"mySidebar",previous:{title:"Network Options",permalink:"/installation/network-options"},next:{title:"Air-Gap Install",permalink:"/installation/airgap"}},s={},p=[{value:"Registries Configuration File",id:"registries-configuration-file",level:2},{value:"Mirrors",id:"mirrors",level:3},{value:"Redirects",id:"redirects",level:4},{value:"Rewrites",id:"rewrites",level:4},{value:"Configs",id:"configs",level:3},{value:"With TLS",id:"with-tls",level:3},{value:"Without TLS",id:"without-tls",level:3},{value:"Adding Images to the Private Registry",id:"adding-images-to-the-private-registry",level:2}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},d=c("Tabs"),u=c("TabItem"),m={toc:p};function h(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},m,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"Containerd can be configured to connect to private registries and use them to pull private images on the node."),(0,i.kt)("p",null,"Upon startup, K3s will check to see if a ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file exists at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/")," and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry."),(0,i.kt)("p",null,"Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file on each server as well."),(0,i.kt)("p",null,"Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file and give different examples of using private registry configuration in K3s."),(0,i.kt)("h2",{id:"registries-configuration-file"},"Registries Configuration File"),(0,i.kt)("p",null,"The file consists of two main sections:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"mirrors"),(0,i.kt)("li",{parentName:"ul"},"configs")),(0,i.kt)("h3",{id:"mirrors"},"Mirrors"),(0,i.kt)("p",null,"Mirrors is a directive that defines the names and endpoints of the private registries, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  mycustomreg.com:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one."),(0,i.kt)("h4",{id:"redirects"},"Redirects"),(0,i.kt)("p",null,"If a public registry is used as a mirror, such as when configuring a ",(0,i.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/recipes/mirror/"},"pull through cache"),", images pulls are transparently redirected."),(0,i.kt)("p",null,"For example, if you have a mirror configured for ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Then pulling ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," will transparently pull the image from ",(0,i.kt)("inlineCode",{parentName:"p"},"https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3"),"."),(0,i.kt)("h4",{id:"rewrites"},"Rewrites"),(0,i.kt)("p",null,"Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one."),(0,i.kt)("p",null,"For example, the following configuration would transparently pull the image ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," from ",(0,i.kt)("inlineCode",{parentName:"p"},"registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://registry.example.com:5000"\n    rewrite:\n      "^rancher/(.*)": "mirrorproject/rancher-images/$1"\n')),(0,i.kt)("p",null,"The image will still be stored under the original name so that a ",(0,i.kt)("inlineCode",{parentName:"p"},"crictl image ls")," will show ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," as available on the node, even though the image was pulled from the mirrored registry with a different name."),(0,i.kt)("h3",{id:"configs"},"Configs"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"configs")," section defines the TLS and credential configuration for each mirror. For each mirror you can define ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," and/or ",(0,i.kt)("inlineCode",{parentName:"p"},"tls"),". "),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"tls")," part consists of:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"cert_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client certificate path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"key_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client key path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"ca_file")),(0,i.kt)("td",{parentName:"tr",align:null},"Defines the CA certificate path to be used to verify the registry's server cert file")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"insecure_skip_verify")),(0,i.kt)("td",{parentName:"tr",align:null},"Boolean that defines if TLS verification should be skipped for the registry")))),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," part consists of either username/password or authentication token:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"username")),(0,i.kt)("td",{parentName:"tr",align:null},"user name of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"password")),(0,i.kt)("td",{parentName:"tr",align:null},"user password of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"auth")),(0,i.kt)("td",{parentName:"tr",align:null},"authentication token of the private registry basic auth")))),(0,i.kt)("p",null,"Below are basic examples of using private registries in different modes:"),(0,i.kt)("h3",{id:"with-tls"},"With TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n')))),(0,i.kt)("h3",{id:"without-tls"},"Without TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when ",(0,i.kt)("em",{parentName:"p"},"not")," using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\n')))),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},"In case of no TLS communication, you need to specify ",(0,i.kt)("inlineCode",{parentName:"p"},"http://")," for the endpoints, otherwise it will default to https.")),(0,i.kt)("p",null,"In order for the registry changes to take effect, you need to restart K3s on each node."),(0,i.kt)("h2",{id:"adding-images-to-the-private-registry"},"Adding Images to the Private Registry"),(0,i.kt)("p",null,"First, obtain the ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," file from GitHub for the release you are working with.\nPull the K3s images listed on the k3s-images.txt file from docker.io"),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker pull docker.io/rancher/coredns-coredns:1.6.3")),(0,i.kt)("p",null,"Then, retag the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns")),(0,i.kt)("p",null,"Last, push the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker push mycustomreg.com:5000/coredns-coredns")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4902],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,a=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(r),m=i,h=u["".concat(s,".").concat(m)]||u[m]||d[m]||a;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var a=r.length,o=new Array(a);o[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var p=2;p<a;p++)o[p]=r[p];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},3159:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>h,frontMatter:()=>a,metadata:()=>l,toc:()=>p});var n=r(3117),i=(r(7294),r(3905));const a={title:"Private Registry Configuration",weight:55},o=void 0,l={unversionedId:"installation/private-registry",id:"installation/private-registry",title:"Private Registry Configuration",description:"Containerd can be configured to connect to private registries and use them to pull private images on the node.",source:"@site/docs/installation/private-registry.md",sourceDirName:"installation",slug:"/installation/private-registry",permalink:"/installation/private-registry",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Private Registry Configuration",weight:55},sidebar:"mySidebar",previous:{title:"Network Options",permalink:"/installation/network-options"},next:{title:"Air-Gap Install",permalink:"/installation/airgap"}},s={},p=[{value:"Registries Configuration File",id:"registries-configuration-file",level:2},{value:"Mirrors",id:"mirrors",level:3},{value:"Redirects",id:"redirects",level:4},{value:"Rewrites",id:"rewrites",level:4},{value:"Configs",id:"configs",level:3},{value:"With TLS",id:"with-tls",level:3},{value:"Without TLS",id:"without-tls",level:3},{value:"Adding Images to the Private Registry",id:"adding-images-to-the-private-registry",level:2}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},d=c("Tabs"),u=c("TabItem"),m={toc:p};function h(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},m,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"Containerd can be configured to connect to private registries and use them to pull private images on the node."),(0,i.kt)("p",null,"Upon startup, K3s will check to see if a ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file exists at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/")," and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry."),(0,i.kt)("p",null,"Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file on each server as well."),(0,i.kt)("p",null,"Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file and give different examples of using private registry configuration in K3s."),(0,i.kt)("h2",{id:"registries-configuration-file"},"Registries Configuration File"),(0,i.kt)("p",null,"The file consists of two main sections:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"mirrors"),(0,i.kt)("li",{parentName:"ul"},"configs")),(0,i.kt)("h3",{id:"mirrors"},"Mirrors"),(0,i.kt)("p",null,"Mirrors is a directive that defines the names and endpoints of the private registries, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  mycustomreg.com:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one."),(0,i.kt)("h4",{id:"redirects"},"Redirects"),(0,i.kt)("p",null,"If a public registry is used as a mirror, such as when configuring a ",(0,i.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/recipes/mirror/"},"pull through cache"),", images pulls are transparently redirected."),(0,i.kt)("p",null,"For example, if you have a mirror configured for ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Then pulling ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," will transparently pull the image from ",(0,i.kt)("inlineCode",{parentName:"p"},"https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3"),"."),(0,i.kt)("h4",{id:"rewrites"},"Rewrites"),(0,i.kt)("p",null,"Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one."),(0,i.kt)("p",null,"For example, the following configuration would transparently pull the image ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," from ",(0,i.kt)("inlineCode",{parentName:"p"},"registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://registry.example.com:5000"\n    rewrite:\n      "^rancher/(.*)": "mirrorproject/rancher-images/$1"\n')),(0,i.kt)("p",null,"The image will still be stored under the original name so that a ",(0,i.kt)("inlineCode",{parentName:"p"},"crictl image ls")," will show ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," as available on the node, even though the image was pulled from the mirrored registry with a different name."),(0,i.kt)("h3",{id:"configs"},"Configs"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"configs")," section defines the TLS and credential configuration for each mirror. For each mirror you can define ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," and/or ",(0,i.kt)("inlineCode",{parentName:"p"},"tls"),". "),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"tls")," part consists of:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"cert_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client certificate path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"key_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client key path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"ca_file")),(0,i.kt)("td",{parentName:"tr",align:null},"Defines the CA certificate path to be used to verify the registry's server cert file")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"insecure_skip_verify")),(0,i.kt)("td",{parentName:"tr",align:null},"Boolean that defines if TLS verification should be skipped for the registry")))),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," part consists of either username/password or authentication token:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"username")),(0,i.kt)("td",{parentName:"tr",align:null},"user name of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"password")),(0,i.kt)("td",{parentName:"tr",align:null},"user password of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"auth")),(0,i.kt)("td",{parentName:"tr",align:null},"authentication token of the private registry basic auth")))),(0,i.kt)("p",null,"Below are basic examples of using private registries in different modes:"),(0,i.kt)("h3",{id:"with-tls"},"With TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n')))),(0,i.kt)("h3",{id:"without-tls"},"Without TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when ",(0,i.kt)("em",{parentName:"p"},"not")," using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\n')))),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},"In case of no TLS communication, you need to specify ",(0,i.kt)("inlineCode",{parentName:"p"},"http://")," for the endpoints, otherwise it will default to https.")),(0,i.kt)("p",null,"In order for the registry changes to take effect, you need to restart K3s on each node."),(0,i.kt)("h2",{id:"adding-images-to-the-private-registry"},"Adding Images to the Private Registry"),(0,i.kt)("p",null,"First, obtain the ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," file from GitHub for the release you are working with.\nPull the K3s images listed on the k3s-images.txt file from docker.io"),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker pull docker.io/rancher/coredns-coredns:1.6.3")),(0,i.kt)("p",null,"Then, retag the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns")),(0,i.kt)("p",null,"Last, push the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker push mycustomreg.com:5000/coredns-coredns")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/121f934f.e5170040.js b/assets/js/121f934f.91e84147.js
similarity index 99%
rename from assets/js/121f934f.e5170040.js
rename to assets/js/121f934f.91e84147.js
index 9bb81800a..1b4d02d0c 100644
--- a/assets/js/121f934f.e5170040.js
+++ b/assets/js/121f934f.91e84147.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8964],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var a=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,i=function(e,t){if(null==e)return{};var n,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,i=e.mdxType,r=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),c=d(n),m=i,k=c["".concat(s,".").concat(m)]||c[m]||u[m]||r;return n?a.createElement(k,o(o({ref:t},p),{},{components:n})):a.createElement(k,o({ref:t},p))}));function m(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var r=n.length,o=new Array(r);o[0]=c;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var d=2;d<r;d++)o[d]=n[d];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},6591:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>k,frontMatter:()=>r,metadata:()=>l,toc:()=>d});var a=n(3117),i=(n(7294),n(3905));const r={title:"Network Options",weight:25},o=void 0,l={unversionedId:"installation/network-options",id:"installation/network-options",title:"Network Options",description:"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.",source:"@site/docs/installation/network-options.md",sourceDirName:"installation",slug:"/installation/network-options",permalink:"/installation/network-options",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Network Options",weight:25},sidebar:"mySidebar",previous:{title:"Configuration Options",permalink:"/installation/configuration"},next:{title:"Private Registry Configuration",permalink:"/installation/private-registry"}},s={},d=[{value:"Flannel Options",id:"flannel-options",level:2},{value:"Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code>",id:"migrating-from-wireguard-or-ipsec-to-wireguard-native",level:3},{value:"Custom CNI",id:"custom-cni",level:2},{value:"Control-Plane Egress Selector configuration",id:"control-plane-egress-selector-configuration",level:2},{value:"Dual-stack (IPv4 + IPv6) Networking",id:"dual-stack-ipv4--ipv6-networking",level:2},{value:"Single-stack IPv6 Networking",id:"single-stack-ipv6-networking",level:2},{value:"Distributed hybrid or multicloud cluster",id:"distributed-hybrid-or-multicloud-cluster",level:2},{value:"Embedded k3s multicloud solution",id:"embedded-k3s-multicloud-solution",level:3},{value:"Integration with the Tailscale VPN provider (experimental)",id:"integration-with-the-tailscale-vpn-provider-experimental",level:3}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},u=p("Tabs"),c=p("TabItem"),m={toc:d};function k(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("strong",{parentName:"p"},"Note:")," Please reference the ",(0,i.kt)("a",{parentName:"p",href:"/networking/"},"Networking")," page for information about CoreDNS, Traefik, and the Service LB.")),(0,i.kt)("h2",{id:"flannel-options"},"Flannel Options"),(0,i.kt)("p",null,(0,i.kt)("a",{parentName:"p",href:"https://github.com/flannel-io/flannel/blob/master/README.md"},"Flannel")," is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Flannel options can only be set on server nodes, and must be identical on all servers in the cluster."),(0,i.kt)("li",{parentName:"ul"},"The default backend for Flannel is ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan"),". To enable encryption, use the ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," backend."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan")," on Rasperry Pi with recent versions of Ubuntu requires ",(0,i.kt)("a",{parentName:"li",href:"/advanced/#raspberry-pi"},"additional preparation"),"."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," as the Flannel backend may require additional modules on some Linux distributions. Please see the ",(0,i.kt)("a",{parentName:"li",href:"https://www.wireguard.com/install/"},"WireGuard Install Guide")," for details.\nThe WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system.\nYou must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend.")),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"CLI Flag and Value"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,i.kt)("td",{parentName:"tr",align:null},"Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than ",(0,i.kt)("inlineCode",{parentName:"td"},"none"),".")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,i.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=vxlan")),(0,i.kt)("td",{parentName:"tr",align:null},"Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=host-gw")),(0,i.kt)("td",{parentName:"tr",align:null},"Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=ipsec")),(0,i.kt)("td",{parentName:"tr",align:null},"Use strongSwan IPSec via the ",(0,i.kt)("inlineCode",{parentName:"td"},"swanctl")," binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard via the ",(0,i.kt)("inlineCode",{parentName:"td"},"wg")," binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none")),(0,i.kt)("td",{parentName:"tr",align:null},"Disable Flannel entirely.")))),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"K3s no longer includes strongSwan ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend.")),(0,i.kt)("h3",{id:"migrating-from-wireguard-or-ipsec-to-wireguard-native"},"Migrating from ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"h3"},"ipsec")," to ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard-native")),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wg")," tool on the host. This backend will be removed in K3s v1.26, in favor of ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend, which directly interfaces with the kernel."),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries on the host. This backend will be removed in K3s v1.27, in favor of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend."),(0,i.kt)("p",null,"We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps:"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},"Update the K3s config on all server nodes. If using config files, the ",(0,i.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/config.yaml")," should include ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard-native")," instead of ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: ipsec"),". If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed."),(0,i.kt)("li",{parentName:"ol"},"Reboot all nodes, starting with the servers.")),(0,i.kt)("h2",{id:"custom-cni"},"Custom CNI"),(0,i.kt)("p",null,"Start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--flannel-backend=none")," and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," as well to avoid conflicts. Some important information to take into consideration:"),(0,i.kt)(u,{mdxType:"Tabs"},(0,i.kt)(c,{value:"Canal",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Visit the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/getting-started/kubernetes/flannel/install-for-flannel#installing-calico-for-policy-and-flannel-aka-canal-for-networking"},"Canal Docs")," website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Canal YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-canal.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true.")),(0,i.kt)(c,{value:"Calico",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Follow the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/reference/configure-cni-plugins"},"Calico CNI Plugins Guide"),". Modify the Calico YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Calico YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-calico.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true.")),(0,i.kt)(c,{value:"Cilium",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Before running ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-uninstall.sh"),", you must manually remove ",(0,i.kt)("inlineCode",{parentName:"p"},"cilium_host"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"cilium_net")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"cilium_vxlan")," interfaces. If you fail to do this, you may lose network connectivity to the host when K3s is stopped"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"ip link delete cilium_host\nip link delete cilium_net\nip link delete cilium_vxlan\n")),(0,i.kt)("p",null,"Additionally, iptables rules for cilium should be removed:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"iptables-save | grep -iv cilium | iptables-restore\nip6tables-save | grep -iv cilium | ip6tables-restore\n")))),(0,i.kt)("h2",{id:"control-plane-egress-selector-configuration"},"Control-Plane Egress Selector configuration"),(0,i.kt)("p",null,"K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components.\nThis allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled.\nThis functionality is equivalent to the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/extend-kubernetes/setup-konnectivity/"},"Konnectivity")," service commonly used on other Kubernetes distributions, and is managed via the apiserver's egress selector configuration."),(0,i.kt)("p",null,"The egress selector mode may be configured on servers via the ",(0,i.kt)("inlineCode",{parentName:"p"},"--egress-selector-mode")," flag, and offers four modes:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"disabled"),": The apiserver does not use agent tunnels to communicate with kubelets or cluster endpoints.\nThis mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl exec")," and ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl logs"),"."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"agent")," (default): The apiserver uses agent tunnels to communicate with kubelets.\nThis mode requires that the servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"pod"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes.\n",(0,i.kt)("strong",{parentName:"li"},"NOTE"),": This will not work when using a CNI that uses its own IPAM and does not respect the node's PodCIDR allocation. ",(0,i.kt)("inlineCode",{parentName:"li"},"cluster")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"agent")," should be used with these CNIs instead."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"cluster"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.")),(0,i.kt)("h2",{id:"dual-stack-ipv4--ipv6-networking"},"Dual-stack (IPv4 + IPv6) Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Experimental support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"),".",(0,i.kt)("br",{parentName:"p"}),"\n","Stable support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1"},"v1.23.7+k3s1"),". ")),(0,i.kt)("admonition",{title:"Known Issue ",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Kubernetes ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/111695"},"Issue #111695")," causes the Kubelet to ignore the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre"},'--kubelet-arg="node-ip=0.0.0.0" # To proritize IPv4 traffic\n#OR\n--kubelet-arg="node-ip=::" # To proritize IPv6 traffic\n'))),(0,i.kt)("p",null,"Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only."),(0,i.kt)("p",null,"To enable dual-stack in K3s, you must provide valid dual-stack ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," on all server nodes. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},"--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112\n")),(0,i.kt)("p",null,"Note that you may configure any valid ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," values, but the above masks are recommended. If you change the ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," mask, you should also change the ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv4")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv6")," values to match the planned pods per node and total node count. The largest supported ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud."),(0,i.kt)("p",null,"If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin's dual-stack documentation and verify if network policies can be enabled."),(0,i.kt)("h2",{id:"single-stack-ipv6-networking"},"Single-stack IPv6 Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1"},"v1.22.9+k3s1"))),(0,i.kt)("admonition",{title:"Known Issue",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl ",(0,i.kt)("inlineCode",{parentName:"p"},"net.ipv6.conf.all.accept_ra=2"),"; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/91507"},"man-in-the-middle attacks"),".")),(0,i.kt)("p",null,"Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"--service-cidr")," flags. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112\n")),(0,i.kt)("h2",{id:"distributed-hybrid-or-multicloud-cluster"},"Distributed hybrid or multicloud cluster"),(0,i.kt)("p",null,"A K3s cluster can still be deployed on nodes which do not share a common private network and are not directly connected (e.g. nodes in different public clouds). There are two options to achieve this: the embedded k3s multicloud solution and the integration with the ",(0,i.kt)("inlineCode",{parentName:"p"},"tailscale")," VPN provider."),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.")),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Embedded etcd is not supported in this type of deployment. If using embedded etcd, all server nodes must be reachable to each other via their private IPs. Agents may be distributed over multiple networks, but all servers should be in the same location.")),(0,i.kt)("h3",{id:"embedded-k3s-multicloud-solution"},"Embedded k3s multicloud solution"),(0,i.kt)("p",null,"K3s uses wireguard to establish a VPN mesh for cluster traffic. Nodes must each have a unique IP through which they can be reached (usually a public IP). K3s supervisor traffic will use a websocket tunnel, and cluster (CNI) traffic will use a wireguard tunnel."),(0,i.kt)("p",null,"To enable this type of deployment, you must add the following parameters on servers:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip\n")),(0,i.kt)("p",null,"and on agents:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<AGENT_EXTERNAL_IP>\n")),(0,i.kt)("p",null,"where ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," is the IP through which we can reach the server node and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," is the IP through which we can reach the agent node. Note that the ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_URL")," config parameter in the agent should use the ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," to be able to connect to it. Remember to check the ",(0,i.kt)("a",{parentName:"p",href:"/installation/requirements#networking"},"Networking Requirements")," and allow access to the listed ports on both internal and external addresses."),(0,i.kt)("p",null,"Both ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," must have connectivity between them and are normally public IPs."),(0,i.kt)("admonition",{title:"Dynamic IPs",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-external-ip")," parameter to reflect the new IP. If running K3s as a service, you must modify ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service")," then run:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl daemon-reload\nsystemctl restart k3s\n"))),(0,i.kt)("h3",{id:"integration-with-the-tailscale-vpn-provider-experimental"},"Integration with the Tailscale VPN provider (experimental)"),(0,i.kt)("p",null,"Available in v1.27.3, v1.26.6, v1.25.11 and newer."),(0,i.kt)("p",null,"K3s can integrate with ",(0,i.kt)("a",{parentName:"p",href:"https://tailscale.com/"},"Tailscale")," so that nodes use the Tailscale VPN service to build a mesh between nodes."),(0,i.kt)("p",null,"There are four steps to be done with Tailscale before deploying K3s:"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},(0,i.kt)("p",{parentName:"li"},"Log in to your Tailscale account")),(0,i.kt)("li",{parentName:"ol"},(0,i.kt)("p",{parentName:"li"},"In ",(0,i.kt)("inlineCode",{parentName:"p"},"Settings > Keys"),", generate an auth key ($AUTH-KEY), which may be reusable for all nodes in your cluster")),(0,i.kt)("li",{parentName:"ol"},(0,i.kt)("p",{parentName:"li"},"Decide on the podCIDR the cluster will use (by default ",(0,i.kt)("inlineCode",{parentName:"p"},"10.42.0.0/16"),"). Append the CIDR (or CIDRs for dual-stack) in Access controls with the stanza:"))),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"autoApprovers": {\n        "routes": {\n            "10.42.0.0/16":        ["your_account@xyz.com"],\n            "2001:cafe:42:0::/56": ["your_account@xyz.com"],\n        },\n    },\n')),(0,i.kt)("ol",{start:4},(0,i.kt)("li",{parentName:"ol"},"Install Tailscale in your nodes:")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fsSL https://tailscale.com/install.sh | sh\n")),(0,i.kt)("p",null,"To deploy K3s with Tailscale integration enabled, you must add the following parameter on each of your nodes:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'--vpn-auth="name=tailscale,joinKey=$AUTH-KEY\n')),(0,i.kt)("p",null,"or provide that information in a file and use the parameter:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--vpn-auth-file=$PATH_TO_FILE\n")),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"If you plan on running several K3s clusters using the same tailscale network, please create appropriate ",(0,i.kt)("a",{parentName:"p",href:"https://tailscale.com/kb/1018/acls/"},"ACLs")," to avoid IP conflicts or use different podCIDR subnets for each cluster.")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8964],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var a=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,i=function(e,t){if(null==e)return{};var n,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,i=e.mdxType,r=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),c=d(n),m=i,k=c["".concat(s,".").concat(m)]||c[m]||u[m]||r;return n?a.createElement(k,o(o({ref:t},p),{},{components:n})):a.createElement(k,o({ref:t},p))}));function m(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var r=n.length,o=new Array(r);o[0]=c;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var d=2;d<r;d++)o[d]=n[d];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},6591:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>k,frontMatter:()=>r,metadata:()=>l,toc:()=>d});var a=n(3117),i=(n(7294),n(3905));const r={title:"Network Options",weight:25},o=void 0,l={unversionedId:"installation/network-options",id:"installation/network-options",title:"Network Options",description:"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.",source:"@site/docs/installation/network-options.md",sourceDirName:"installation",slug:"/installation/network-options",permalink:"/installation/network-options",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Network Options",weight:25},sidebar:"mySidebar",previous:{title:"Configuration Options",permalink:"/installation/configuration"},next:{title:"Private Registry Configuration",permalink:"/installation/private-registry"}},s={},d=[{value:"Flannel Options",id:"flannel-options",level:2},{value:"Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code>",id:"migrating-from-wireguard-or-ipsec-to-wireguard-native",level:3},{value:"Custom CNI",id:"custom-cni",level:2},{value:"Control-Plane Egress Selector configuration",id:"control-plane-egress-selector-configuration",level:2},{value:"Dual-stack (IPv4 + IPv6) Networking",id:"dual-stack-ipv4--ipv6-networking",level:2},{value:"Single-stack IPv6 Networking",id:"single-stack-ipv6-networking",level:2},{value:"Distributed hybrid or multicloud cluster",id:"distributed-hybrid-or-multicloud-cluster",level:2},{value:"Embedded k3s multicloud solution",id:"embedded-k3s-multicloud-solution",level:3},{value:"Integration with the Tailscale VPN provider (experimental)",id:"integration-with-the-tailscale-vpn-provider-experimental",level:3}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},u=p("Tabs"),c=p("TabItem"),m={toc:d};function k(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("strong",{parentName:"p"},"Note:")," Please reference the ",(0,i.kt)("a",{parentName:"p",href:"/networking/"},"Networking")," page for information about CoreDNS, Traefik, and the Service LB.")),(0,i.kt)("h2",{id:"flannel-options"},"Flannel Options"),(0,i.kt)("p",null,(0,i.kt)("a",{parentName:"p",href:"https://github.com/flannel-io/flannel/blob/master/README.md"},"Flannel")," is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Flannel options can only be set on server nodes, and must be identical on all servers in the cluster."),(0,i.kt)("li",{parentName:"ul"},"The default backend for Flannel is ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan"),". To enable encryption, use the ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," backend."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan")," on Rasperry Pi with recent versions of Ubuntu requires ",(0,i.kt)("a",{parentName:"li",href:"/advanced/#raspberry-pi"},"additional preparation"),"."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," as the Flannel backend may require additional modules on some Linux distributions. Please see the ",(0,i.kt)("a",{parentName:"li",href:"https://www.wireguard.com/install/"},"WireGuard Install Guide")," for details.\nThe WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system.\nYou must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend.")),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"CLI Flag and Value"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,i.kt)("td",{parentName:"tr",align:null},"Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than ",(0,i.kt)("inlineCode",{parentName:"td"},"none"),".")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,i.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=vxlan")),(0,i.kt)("td",{parentName:"tr",align:null},"Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=host-gw")),(0,i.kt)("td",{parentName:"tr",align:null},"Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=ipsec")),(0,i.kt)("td",{parentName:"tr",align:null},"Use strongSwan IPSec via the ",(0,i.kt)("inlineCode",{parentName:"td"},"swanctl")," binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard via the ",(0,i.kt)("inlineCode",{parentName:"td"},"wg")," binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none")),(0,i.kt)("td",{parentName:"tr",align:null},"Disable Flannel entirely.")))),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"K3s no longer includes strongSwan ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend.")),(0,i.kt)("h3",{id:"migrating-from-wireguard-or-ipsec-to-wireguard-native"},"Migrating from ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"h3"},"ipsec")," to ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard-native")),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wg")," tool on the host. This backend will be removed in K3s v1.26, in favor of ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend, which directly interfaces with the kernel."),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries on the host. This backend will be removed in K3s v1.27, in favor of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend."),(0,i.kt)("p",null,"We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps:"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},"Update the K3s config on all server nodes. If using config files, the ",(0,i.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/config.yaml")," should include ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard-native")," instead of ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: ipsec"),". If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed."),(0,i.kt)("li",{parentName:"ol"},"Reboot all nodes, starting with the servers.")),(0,i.kt)("h2",{id:"custom-cni"},"Custom CNI"),(0,i.kt)("p",null,"Start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--flannel-backend=none")," and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," as well to avoid conflicts. Some important information to take into consideration:"),(0,i.kt)(u,{mdxType:"Tabs"},(0,i.kt)(c,{value:"Canal",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Visit the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/getting-started/kubernetes/flannel/install-for-flannel#installing-calico-for-policy-and-flannel-aka-canal-for-networking"},"Canal Docs")," website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Canal YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-canal.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true.")),(0,i.kt)(c,{value:"Calico",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Follow the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/reference/configure-cni-plugins"},"Calico CNI Plugins Guide"),". Modify the Calico YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Calico YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-calico.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true.")),(0,i.kt)(c,{value:"Cilium",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Before running ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-uninstall.sh"),", you must manually remove ",(0,i.kt)("inlineCode",{parentName:"p"},"cilium_host"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"cilium_net")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"cilium_vxlan")," interfaces. If you fail to do this, you may lose network connectivity to the host when K3s is stopped"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"ip link delete cilium_host\nip link delete cilium_net\nip link delete cilium_vxlan\n")),(0,i.kt)("p",null,"Additionally, iptables rules for cilium should be removed:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"iptables-save | grep -iv cilium | iptables-restore\nip6tables-save | grep -iv cilium | ip6tables-restore\n")))),(0,i.kt)("h2",{id:"control-plane-egress-selector-configuration"},"Control-Plane Egress Selector configuration"),(0,i.kt)("p",null,"K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components.\nThis allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled.\nThis functionality is equivalent to the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/extend-kubernetes/setup-konnectivity/"},"Konnectivity")," service commonly used on other Kubernetes distributions, and is managed via the apiserver's egress selector configuration."),(0,i.kt)("p",null,"The egress selector mode may be configured on servers via the ",(0,i.kt)("inlineCode",{parentName:"p"},"--egress-selector-mode")," flag, and offers four modes:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"disabled"),": The apiserver does not use agent tunnels to communicate with kubelets or cluster endpoints.\nThis mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl exec")," and ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl logs"),"."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"agent")," (default): The apiserver uses agent tunnels to communicate with kubelets.\nThis mode requires that the servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"pod"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes.\n",(0,i.kt)("strong",{parentName:"li"},"NOTE"),": This will not work when using a CNI that uses its own IPAM and does not respect the node's PodCIDR allocation. ",(0,i.kt)("inlineCode",{parentName:"li"},"cluster")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"agent")," should be used with these CNIs instead."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"cluster"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.")),(0,i.kt)("h2",{id:"dual-stack-ipv4--ipv6-networking"},"Dual-stack (IPv4 + IPv6) Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Experimental support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"),".",(0,i.kt)("br",{parentName:"p"}),"\n","Stable support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1"},"v1.23.7+k3s1"),". ")),(0,i.kt)("admonition",{title:"Known Issue ",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Kubernetes ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/111695"},"Issue #111695")," causes the Kubelet to ignore the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre"},'--kubelet-arg="node-ip=0.0.0.0" # To proritize IPv4 traffic\n#OR\n--kubelet-arg="node-ip=::" # To proritize IPv6 traffic\n'))),(0,i.kt)("p",null,"Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only."),(0,i.kt)("p",null,"To enable dual-stack in K3s, you must provide valid dual-stack ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," on all server nodes. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},"--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112\n")),(0,i.kt)("p",null,"Note that you may configure any valid ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," values, but the above masks are recommended. If you change the ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," mask, you should also change the ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv4")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv6")," values to match the planned pods per node and total node count. The largest supported ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud."),(0,i.kt)("p",null,"If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin's dual-stack documentation and verify if network policies can be enabled."),(0,i.kt)("h2",{id:"single-stack-ipv6-networking"},"Single-stack IPv6 Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1"},"v1.22.9+k3s1"))),(0,i.kt)("admonition",{title:"Known Issue",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl ",(0,i.kt)("inlineCode",{parentName:"p"},"net.ipv6.conf.all.accept_ra=2"),"; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/91507"},"man-in-the-middle attacks"),".")),(0,i.kt)("p",null,"Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"--service-cidr")," flags. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112\n")),(0,i.kt)("h2",{id:"distributed-hybrid-or-multicloud-cluster"},"Distributed hybrid or multicloud cluster"),(0,i.kt)("p",null,"A K3s cluster can still be deployed on nodes which do not share a common private network and are not directly connected (e.g. nodes in different public clouds). There are two options to achieve this: the embedded k3s multicloud solution and the integration with the ",(0,i.kt)("inlineCode",{parentName:"p"},"tailscale")," VPN provider."),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.")),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Embedded etcd is not supported in this type of deployment. If using embedded etcd, all server nodes must be reachable to each other via their private IPs. Agents may be distributed over multiple networks, but all servers should be in the same location.")),(0,i.kt)("h3",{id:"embedded-k3s-multicloud-solution"},"Embedded k3s multicloud solution"),(0,i.kt)("p",null,"K3s uses wireguard to establish a VPN mesh for cluster traffic. Nodes must each have a unique IP through which they can be reached (usually a public IP). K3s supervisor traffic will use a websocket tunnel, and cluster (CNI) traffic will use a wireguard tunnel."),(0,i.kt)("p",null,"To enable this type of deployment, you must add the following parameters on servers:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip\n")),(0,i.kt)("p",null,"and on agents:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<AGENT_EXTERNAL_IP>\n")),(0,i.kt)("p",null,"where ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," is the IP through which we can reach the server node and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," is the IP through which we can reach the agent node. Note that the ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_URL")," config parameter in the agent should use the ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," to be able to connect to it. Remember to check the ",(0,i.kt)("a",{parentName:"p",href:"/installation/requirements#networking"},"Networking Requirements")," and allow access to the listed ports on both internal and external addresses."),(0,i.kt)("p",null,"Both ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," must have connectivity between them and are normally public IPs."),(0,i.kt)("admonition",{title:"Dynamic IPs",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-external-ip")," parameter to reflect the new IP. If running K3s as a service, you must modify ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service")," then run:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl daemon-reload\nsystemctl restart k3s\n"))),(0,i.kt)("h3",{id:"integration-with-the-tailscale-vpn-provider-experimental"},"Integration with the Tailscale VPN provider (experimental)"),(0,i.kt)("p",null,"Available in v1.27.3, v1.26.6, v1.25.11 and newer."),(0,i.kt)("p",null,"K3s can integrate with ",(0,i.kt)("a",{parentName:"p",href:"https://tailscale.com/"},"Tailscale")," so that nodes use the Tailscale VPN service to build a mesh between nodes."),(0,i.kt)("p",null,"There are four steps to be done with Tailscale before deploying K3s:"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},(0,i.kt)("p",{parentName:"li"},"Log in to your Tailscale account")),(0,i.kt)("li",{parentName:"ol"},(0,i.kt)("p",{parentName:"li"},"In ",(0,i.kt)("inlineCode",{parentName:"p"},"Settings > Keys"),", generate an auth key ($AUTH-KEY), which may be reusable for all nodes in your cluster")),(0,i.kt)("li",{parentName:"ol"},(0,i.kt)("p",{parentName:"li"},"Decide on the podCIDR the cluster will use (by default ",(0,i.kt)("inlineCode",{parentName:"p"},"10.42.0.0/16"),"). Append the CIDR (or CIDRs for dual-stack) in Access controls with the stanza:"))),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"autoApprovers": {\n        "routes": {\n            "10.42.0.0/16":        ["your_account@xyz.com"],\n            "2001:cafe:42:0::/56": ["your_account@xyz.com"],\n        },\n    },\n')),(0,i.kt)("ol",{start:4},(0,i.kt)("li",{parentName:"ol"},"Install Tailscale in your nodes:")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fsSL https://tailscale.com/install.sh | sh\n")),(0,i.kt)("p",null,"To deploy K3s with Tailscale integration enabled, you must add the following parameter on each of your nodes:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'--vpn-auth="name=tailscale,joinKey=$AUTH-KEY\n')),(0,i.kt)("p",null,"or provide that information in a file and use the parameter:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--vpn-auth-file=$PATH_TO_FILE\n")),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"If you plan on running several K3s clusters using the same tailscale network, please create appropriate ",(0,i.kt)("a",{parentName:"p",href:"https://tailscale.com/kb/1018/acls/"},"ACLs")," to avoid IP conflicts or use different podCIDR subnets for each cluster.")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/179ec51e.a397da08.js b/assets/js/179ec51e.b2467c68.js
similarity index 99%
rename from assets/js/179ec51e.a397da08.js
rename to assets/js/179ec51e.b2467c68.js
index 1fd365d11..953fab91f 100644
--- a/assets/js/179ec51e.a397da08.js
+++ b/assets/js/179ec51e.b2467c68.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7176],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>u});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),o=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=o(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),k=o(n),u=a,d=k["".concat(p,".").concat(u)]||k[u]||m[u]||s;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function u(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,i=new Array(s);i[0]=k;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var o=2;o<s;o++)i[o]=n[o];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},3410:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>d,frontMatter:()=>s,metadata:()=>l,toc:()=>o});var r=n(3117),a=(n(7294),n(3905));const s={title:"secrets-encrypt"},i="k3s secrets-encrypt",l={unversionedId:"cli/secrets-encrypt",id:"cli/secrets-encrypt",title:"secrets-encrypt",description:"K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption.",source:"@site/docs/cli/secrets-encrypt.md",sourceDirName:"cli",slug:"/cli/secrets-encrypt",permalink:"/cli/secrets-encrypt",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"secrets-encrypt"},sidebar:"mySidebar",previous:{title:"etcd-snapshot",permalink:"/cli/etcd-snapshot"},next:{title:"token",permalink:"/cli/token"}},p={},o=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2},{value:"Encryption Key Rotation",id:"encryption-key-rotation",level:3},{value:"Secrets Encryption Disable/Enable",id:"secrets-encryption-disableenable",level:3},{value:"Secrets Encryption Status",id:"secrets-encryption-status",level:3}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},m=c("Tabs"),k=c("TabItem"),u={toc:o};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-secrets-encrypt"},"k3s secrets-encrypt"),(0,a.kt)("p",null,"K3s supports enabling secrets encryption at rest. For more information, see ",(0,a.kt)("a",{parentName:"p",href:"/security/secrets-encryption"},"Secrets Encryption"),"."),(0,a.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Available as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1"},"v1.21.8+k3s1"))),(0,a.kt)("p",null,"K3s contains a CLI tool ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,a.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.")),(0,a.kt)("h3",{id:"encryption-key-rotation"},"Encryption Key Rotation"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"To rotate secrets encryption keys on a single-server cluster:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Start the K3s server with the flag ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"p"},"not")," supported.")),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"The steps are the same for both embedded DB and external DB clusters."),(0,a.kt)("p",null,"To rotate secrets encryption keys on HA setups:"),(0,a.kt)("admonition",{title:"Notes",type:"note"},(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"li"},"not")," supported."),(0,a.kt)("li",{parentName:"ul"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"li"},"secrets-encrypt")," commands."))),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Start up all three K3s servers with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag. For brevity, the servers will be referred to as S1, S2, S3.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt on S1"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))))),(0,a.kt)("h3",{id:"secrets-encryption-disableenable"},"Secrets Encryption Disable/Enable"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag, secrets encryption can be disabled."),(0,a.kt)("p",null,"To disable secrets encryption on a single-node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a single node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a HA cluster with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flags, secrets encryption can be disabled."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt")," commands.")),(0,a.kt)("p",null,"For brevity, the three servers used in this guide will be referred to as S1, S2, S3."),(0,a.kt)("p",null,"To disable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))),(0,a.kt)("ol",{start:4},(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))))),(0,a.kt)("h3",{id:"secrets-encryption-status"},"Secrets Encryption Status"),(0,a.kt)("p",null,"The secrets-encrypt tool includes a ",(0,a.kt)("inlineCode",{parentName:"p"},"status")," command that displays information about the current status of secrets encryption on the node."),(0,a.kt)("p",null,"An example of the command on a single-server node:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: start\nServer Encryption Hashes: All hashes match\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Another example on HA cluster, after rotating the keys, but before restarting the servers:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: rotate\nServer Encryption Hashes: hash does not match between node-1 and node-2\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey-2021-12-10T22:54:38Z\n        AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Details on each section are as follows:  "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Encryption Status"),": Displayed whether secrets encryption is disabled or enabled on the node  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Current Rotation Stage"),": Indicates the current rotation stage on the node.",(0,a.kt)("br",{parentName:"li"}),"Stages are: ",(0,a.kt)("inlineCode",{parentName:"li"},"start"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"prepare"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"rotate"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_request"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_active"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_finished"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Server Encryption Hashes"),": Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Table"),": Summarizes information about the secrets encryption keys found on the node.  ",(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Active"),': The "*" indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.'),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Type"),": All keys using this tool are ",(0,a.kt)("inlineCode",{parentName:"li"},"AES-CBC")," type. See more info ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers"},"here.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Name"),": Name of the encryption key.")))))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7176],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>u});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),o=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=o(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),k=o(n),u=a,d=k["".concat(p,".").concat(u)]||k[u]||m[u]||s;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function u(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,i=new Array(s);i[0]=k;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var o=2;o<s;o++)i[o]=n[o];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},3410:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>d,frontMatter:()=>s,metadata:()=>l,toc:()=>o});var r=n(3117),a=(n(7294),n(3905));const s={title:"secrets-encrypt"},i="k3s secrets-encrypt",l={unversionedId:"cli/secrets-encrypt",id:"cli/secrets-encrypt",title:"secrets-encrypt",description:"K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption.",source:"@site/docs/cli/secrets-encrypt.md",sourceDirName:"cli",slug:"/cli/secrets-encrypt",permalink:"/cli/secrets-encrypt",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"secrets-encrypt"},sidebar:"mySidebar",previous:{title:"etcd-snapshot",permalink:"/cli/etcd-snapshot"},next:{title:"token",permalink:"/cli/token"}},p={},o=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2},{value:"Encryption Key Rotation",id:"encryption-key-rotation",level:3},{value:"Secrets Encryption Disable/Enable",id:"secrets-encryption-disableenable",level:3},{value:"Secrets Encryption Status",id:"secrets-encryption-status",level:3}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},m=c("Tabs"),k=c("TabItem"),u={toc:o};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-secrets-encrypt"},"k3s secrets-encrypt"),(0,a.kt)("p",null,"K3s supports enabling secrets encryption at rest. For more information, see ",(0,a.kt)("a",{parentName:"p",href:"/security/secrets-encryption"},"Secrets Encryption"),"."),(0,a.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Available as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1"},"v1.21.8+k3s1"))),(0,a.kt)("p",null,"K3s contains a CLI tool ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,a.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.")),(0,a.kt)("h3",{id:"encryption-key-rotation"},"Encryption Key Rotation"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"To rotate secrets encryption keys on a single-server cluster:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Start the K3s server with the flag ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"p"},"not")," supported.")),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"The steps are the same for both embedded DB and external DB clusters."),(0,a.kt)("p",null,"To rotate secrets encryption keys on HA setups:"),(0,a.kt)("admonition",{title:"Notes",type:"note"},(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"li"},"not")," supported."),(0,a.kt)("li",{parentName:"ul"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"li"},"secrets-encrypt")," commands."))),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Start up all three K3s servers with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag. For brevity, the servers will be referred to as S1, S2, S3.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt on S1"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))))),(0,a.kt)("h3",{id:"secrets-encryption-disableenable"},"Secrets Encryption Disable/Enable"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag, secrets encryption can be disabled."),(0,a.kt)("p",null,"To disable secrets encryption on a single-node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a single node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a HA cluster with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flags, secrets encryption can be disabled."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt")," commands.")),(0,a.kt)("p",null,"For brevity, the three servers used in this guide will be referred to as S1, S2, S3."),(0,a.kt)("p",null,"To disable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))),(0,a.kt)("ol",{start:4},(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))))),(0,a.kt)("h3",{id:"secrets-encryption-status"},"Secrets Encryption Status"),(0,a.kt)("p",null,"The secrets-encrypt tool includes a ",(0,a.kt)("inlineCode",{parentName:"p"},"status")," command that displays information about the current status of secrets encryption on the node."),(0,a.kt)("p",null,"An example of the command on a single-server node:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: start\nServer Encryption Hashes: All hashes match\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Another example on HA cluster, after rotating the keys, but before restarting the servers:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: rotate\nServer Encryption Hashes: hash does not match between node-1 and node-2\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey-2021-12-10T22:54:38Z\n        AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Details on each section are as follows:  "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Encryption Status"),": Displayed whether secrets encryption is disabled or enabled on the node  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Current Rotation Stage"),": Indicates the current rotation stage on the node.",(0,a.kt)("br",{parentName:"li"}),"Stages are: ",(0,a.kt)("inlineCode",{parentName:"li"},"start"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"prepare"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"rotate"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_request"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_active"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_finished"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Server Encryption Hashes"),": Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Table"),": Summarizes information about the secrets encryption keys found on the node.  ",(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Active"),': The "*" indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.'),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Type"),": All keys using this tool are ",(0,a.kt)("inlineCode",{parentName:"li"},"AES-CBC")," type. See more info ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers"},"here.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Name"),": Name of the encryption key.")))))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/1a4e3797.8b5db6d2.js b/assets/js/1a4e3797.8b5db6d2.js
new file mode 100644
index 000000000..a1c4e7927
--- /dev/null
+++ b/assets/js/1a4e3797.8b5db6d2.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7920],{2027:(e,t,a)=>{a.r(t),a.d(t,{default:()=>A});var r=a(7294),n=a(2263),l=a(1573),s=a(5742),c=a(9960),o=a(5999);const u=["zero","one","two","few","many","other"];function m(e){return u.filter((t=>e.includes(t)))}const h={locale:"en",pluralForms:m(["one","other"]),select:e=>1===e?"one":"other"};function i(){const{i18n:{currentLocale:e}}=(0,n.Z)();return(0,r.useMemo)((()=>{try{return function(e){const t=new Intl.PluralRules(e);return{locale:e,pluralForms:m(t.resolvedOptions().pluralCategories),select:e=>t.select(e)}}(e)}catch(t){return console.error(`Failed to use Intl.PluralRules for locale "${e}".\nDocusaurus will fallback to the default (English) implementation.\nError: ${t.message}\n`),h}}),[e])}function p(){const e=i();return{selectMessage:(t,a)=>function(e,t,a){const r=e.split("|");if(1===r.length)return r[0];r.length>a.pluralForms.length&&console.error(`For locale=${a.locale}, a maximum of ${a.pluralForms.length} plural forms are expected (${a.pluralForms.join(",")}), but the message contains ${r.length}: ${e}`);const n=a.select(t),l=a.pluralForms.indexOf(n);return r[Math.min(l,r.length-1)]}(a,t,e)}}var g=a(6010),d=a(6775),f=a(412);const y=function(){const e=(0,d.k6)(),t=(0,d.TH)(),{siteConfig:{baseUrl:a}}=(0,n.Z)(),r=f.Z.canUseDOM?new URLSearchParams(t.search):null,l=r?.get("q")||"",s=r?.get("ctx")||"",c=r?.get("version")||"",o=e=>{const a=new URLSearchParams(t.search);return e?a.set("q",e):a.delete("q"),a};return{searchValue:l,searchContext:s,searchVersion:c,updateSearchPath:t=>{const a=o(t);e.replace({search:a.toString()})},updateSearchContext:a=>{const r=new URLSearchParams(t.search);r.set("ctx",a),e.replace({search:r.toString()})},generateSearchPageLink:e=>{const t=o(e);return`${a}search?${t.toString()}`}}};var E=a(22),S=a(8202),v=a(2539),w=a(726),x=a(1073),C=a(311),_=a(3926),I=a(1029);const P="searchContextInput_mXoe",b="searchQueryInput_CFBF",k="searchResultItem_U687",F="searchResultItemPath_uIbk",R="searchResultItemSummary_oZHr",$="searchQueryColumn_q7nx",Z="searchContextColumn_oWAF";function N(){const{siteConfig:{baseUrl:e}}=(0,n.Z)(),{selectMessage:t}=p(),{searchValue:a,searchContext:l,searchVersion:c,updateSearchPath:u,updateSearchContext:m}=y(),[h,i]=(0,r.useState)(a),[d,f]=(0,r.useState)(),[v,w]=(0,r.useState)(),x=`${e}${c}`,_=(0,r.useMemo)((()=>h?(0,o.I)({id:"theme.SearchPage.existingResultsTitle",message:'Search results for "{query}"',description:"The search page title for non-empty query"},{query:h}):(0,o.I)({id:"theme.SearchPage.emptyResultsTitle",message:"Search the documentation",description:"The search page title for empty query"})),[h]);(0,r.useEffect)((()=>{u(h),d&&(h?d(h,(e=>{w(e)})):w(void 0))}),[h,d]);const k=(0,r.useCallback)((e=>{i(e.target.value)}),[]);return(0,r.useEffect)((()=>{a&&a!==h&&i(a)}),[a]),(0,r.useEffect)((()=>{!async function(){const{wrappedIndexes:e,zhDictionary:t}=await(0,E.w)(x,l);f((()=>(0,S.v)(e,t,100)))}()}),[l,x]),r.createElement(r.Fragment,null,r.createElement(s.Z,null,r.createElement("meta",{property:"robots",content:"noindex, follow"}),r.createElement("title",null,_)),r.createElement("div",{className:"container margin-vert--lg"},r.createElement("h1",null,_),r.createElement("div",{className:"row"},r.createElement("div",{className:(0,g.Z)("col",{[$]:Array.isArray(I.Kc),"col--9":Array.isArray(I.Kc),"col--12":!Array.isArray(I.Kc)})},r.createElement("input",{type:"search",name:"q",className:b,"aria-label":"Search",onChange:k,value:h,autoComplete:"off",autoFocus:!0})),Array.isArray(I.Kc)?r.createElement("div",{className:(0,g.Z)("col","col--3","padding-left--none",Z)},r.createElement("select",{name:"search-context",className:P,id:"context-selector",value:l,onChange:e=>m(e.target.value)},r.createElement("option",{value:""},I.pQ?(0,o.I)({id:"theme.SearchPage.searchContext.everywhere",message:"everywhere"}):""),I.Kc.map((e=>r.createElement("option",{key:e,value:e},e))))):null),!d&&h&&r.createElement("div",null,r.createElement(C.Z,null)),v&&(v.length>0?r.createElement("p",null,t(v.length,(0,o.I)({id:"theme.SearchPage.documentsFound.plurals",message:"1 document found|{count} documents found",description:'Pluralized label for "{count} documents found". Use as much plural forms (separated by "|") as your language support (see https://www.unicode.org/cldr/cldr-aux/charts/34/supplemental/language_plural_rules.html)'},{count:v.length}))):r.createElement("p",null,(0,o.I)({id:"theme.SearchPage.noResultsText",message:"No documents were found",description:"The paragraph for empty search result"}))),r.createElement("section",null,v&&v.map((e=>r.createElement(q,{key:e.document.i,searchResult:e}))))))}function q(e){let{searchResult:{document:t,type:a,page:n,tokens:l,metadata:s}}=e;const o=0===a,u=2===a,m=(o?t.b:n.b).slice(),h=u?t.s:t.t;o||m.push(n.t);let i="";if(I.vc&&l.length>0){const e=new URLSearchParams;for(const t of l)e.append("_highlight",t);i=`?${e.toString()}`}return r.createElement("article",{className:k},r.createElement("h2",null,r.createElement(c.Z,{to:t.u+i+(t.h||""),dangerouslySetInnerHTML:{__html:u?(0,v.C)(h,l):(0,w.o)(h,(0,x.m)(s,"t"),l,100)}})),m.length>0&&r.createElement("p",{className:F},(0,_.e)(m)),u&&r.createElement("p",{className:R,dangerouslySetInnerHTML:{__html:(0,w.o)(t.t,(0,x.m)(s,"t"),l,100)}}))}const A=function(){return r.createElement(l.Z,null,r.createElement(N,null))}}}]);
\ No newline at end of file
diff --git a/assets/js/1a4e3797.ac674e56.js b/assets/js/1a4e3797.ac674e56.js
deleted file mode 100644
index cafabe255..000000000
--- a/assets/js/1a4e3797.ac674e56.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see 1a4e3797.ac674e56.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7920],{7331:e=>{function t(){this._events=this._events||{},this._maxListeners=this._maxListeners||void 0}function r(e){return"function"==typeof e}function n(e){return"object"==typeof e&&null!==e}function i(e){return void 0===e}e.exports=t,t.prototype._events=void 0,t.prototype._maxListeners=void 0,t.defaultMaxListeners=10,t.prototype.setMaxListeners=function(e){if("number"!=typeof e||e<0||isNaN(e))throw TypeError("n must be a positive number");return this._maxListeners=e,this},t.prototype.emit=function(e){var t,a,s,c,u,o;if(this._events||(this._events={}),"error"===e&&(!this._events.error||n(this._events.error)&&!this._events.error.length)){if((t=arguments[1])instanceof Error)throw t;var h=new Error('Uncaught, unspecified "error" event. ('+t+")");throw h.context=t,h}if(i(a=this._events[e]))return!1;if(r(a))switch(arguments.length){case 1:a.call(this);break;case 2:a.call(this,arguments[1]);break;case 3:a.call(this,arguments[1],arguments[2]);break;default:c=Array.prototype.slice.call(arguments,1),a.apply(this,c)}else if(n(a))for(c=Array.prototype.slice.call(arguments,1),s=(o=a.slice()).length,u=0;u<s;u++)o[u].apply(this,c);return!0},t.prototype.addListener=function(e,a){var s;if(!r(a))throw TypeError("listener must be a function");return this._events||(this._events={}),this._events.newListener&&this.emit("newListener",e,r(a.listener)?a.listener:a),this._events[e]?n(this._events[e])?this._events[e].push(a):this._events[e]=[this._events[e],a]:this._events[e]=a,n(this._events[e])&&!this._events[e].warned&&(s=i(this._maxListeners)?t.defaultMaxListeners:this._maxListeners)&&s>0&&this._events[e].length>s&&(this._events[e].warned=!0,console.error("(node) warning: possible EventEmitter memory leak detected. %d listeners added. Use emitter.setMaxListeners() to increase limit.",this._events[e].length),"function"==typeof console.trace&&console.trace()),this},t.prototype.on=t.prototype.addListener,t.prototype.once=function(e,t){if(!r(t))throw TypeError("listener must be a function");var n=!1;function i(){this.removeListener(e,i),n||(n=!0,t.apply(this,arguments))}return i.listener=t,this.on(e,i),this},t.prototype.removeListener=function(e,t){var i,a,s,c;if(!r(t))throw TypeError("listener must be a function");if(!this._events||!this._events[e])return this;if(s=(i=this._events[e]).length,a=-1,i===t||r(i.listener)&&i.listener===t)delete this._events[e],this._events.removeListener&&this.emit("removeListener",e,t);else if(n(i)){for(c=s;c-- >0;)if(i[c]===t||i[c].listener&&i[c].listener===t){a=c;break}if(a<0)return this;1===i.length?(i.length=0,delete this._events[e]):i.splice(a,1),this._events.removeListener&&this.emit("removeListener",e,t)}return this},t.prototype.removeAllListeners=function(e){var t,n;if(!this._events)return this;if(!this._events.removeListener)return 0===arguments.length?this._events={}:this._events[e]&&delete this._events[e],this;if(0===arguments.length){for(t in this._events)"removeListener"!==t&&this.removeAllListeners(t);return this.removeAllListeners("removeListener"),this._events={},this}if(r(n=this._events[e]))this.removeListener(e,n);else if(n)for(;n.length;)this.removeListener(e,n[n.length-1]);return delete this._events[e],this},t.prototype.listeners=function(e){return this._events&&this._events[e]?r(this._events[e])?[this._events[e]]:this._events[e].slice():[]},t.prototype.listenerCount=function(e){if(this._events){var t=this._events[e];if(r(t))return 1;if(t)return t.length}return 0},t.listenerCount=function(e,t){return e.listenerCount(t)}},8131:(e,t,r)=>{"use strict";var n=r(9374),i=r(7775),a=r(3076);function s(e,t,r){return new n(e,t,r)}s.version=r(4336),s.AlgoliaSearchHelper=n,s.SearchParameters=i,s.SearchResults=a,e.exports=s},8078:(e,t,r)=>{"use strict";var n=r(7331);function i(e,t){this.main=e,this.fn=t,this.lastResults=null}r(4853)(i,n),i.prototype.detach=function(){this.removeAllListeners(),this.main.detachDerivedHelper(this)},i.prototype.getModifiedState=function(e){return this.fn(e)},e.exports=i},2437:(e,t,r)=>{"use strict";var n=r(3336),i=r(9803),a=r(116),s={addRefinement:function(e,t,r){if(s.isRefined(e,t,r))return e;var i=""+r,a=e[t]?e[t].concat(i):[i],c={};return c[t]=a,n({},c,e)},removeRefinement:function(e,t,r){if(void 0===r)return s.clearRefinement(e,(function(e,r){return t===r}));var n=""+r;return s.clearRefinement(e,(function(e,r){return t===r&&n===e}))},toggleRefinement:function(e,t,r){if(void 0===r)throw new Error("toggleRefinement should be used with a value");return s.isRefined(e,t,r)?s.removeRefinement(e,t,r):s.addRefinement(e,t,r)},clearRefinement:function(e,t,r){if(void 0===t)return a(e)?{}:e;if("string"==typeof t)return i(e,[t]);if("function"==typeof t){var n=!1,s=Object.keys(e).reduce((function(i,a){var s=e[a]||[],c=s.filter((function(e){return!t(e,a,r)}));return c.length!==s.length&&(n=!0),i[a]=c,i}),{});return n?s:e}},isRefined:function(e,t,r){var n=!!e[t]&&e[t].length>0;if(void 0===r||!n)return n;var i=""+r;return-1!==e[t].indexOf(i)}};e.exports=s},7775:(e,t,r)=>{"use strict";var n=r(185),i=r(3336),a=r(2686),s=r(7888),c=r(8023),u=r(9803),o=r(116),h=r(6801),f=r(2437);function l(e,t){return Array.isArray(e)&&Array.isArray(t)?e.length===t.length&&e.every((function(e,r){return l(t[r],e)})):e===t}function m(e){var t=e?m._parseNumbers(e):{};void 0===t.userToken||h(t.userToken)||console.warn("[algoliasearch-helper] The `userToken` parameter is invalid. This can lead to wrong analytics.\n  - Format: [a-zA-Z0-9_-]{1,64}"),this.facets=t.facets||[],this.disjunctiveFacets=t.disjunctiveFacets||[],this.hierarchicalFacets=t.hierarchicalFacets||[],this.facetsRefinements=t.facetsRefinements||{},this.facetsExcludes=t.facetsExcludes||{},this.disjunctiveFacetsRefinements=t.disjunctiveFacetsRefinements||{},this.numericRefinements=t.numericRefinements||{},this.tagRefinements=t.tagRefinements||[],this.hierarchicalFacetsRefinements=t.hierarchicalFacetsRefinements||{};var r=this;Object.keys(t).forEach((function(e){var n=-1!==m.PARAMETERS.indexOf(e),i=void 0!==t[e];!n&&i&&(r[e]=t[e])}))}m.PARAMETERS=Object.keys(new m),m._parseNumbers=function(e){if(e instanceof m)return e;var t={};if(["aroundPrecision","aroundRadius","getRankingInfo","minWordSizefor2Typos","minWordSizefor1Typo","page","maxValuesPerFacet","distinct","minimumAroundRadius","hitsPerPage","minProximity"].forEach((function(r){var n=e[r];if("string"==typeof n){var i=parseFloat(n);t[r]=isNaN(i)?n:i}})),Array.isArray(e.insideBoundingBox)&&(t.insideBoundingBox=e.insideBoundingBox.map((function(e){return Array.isArray(e)?e.map((function(e){return parseFloat(e)})):e}))),e.numericRefinements){var r={};Object.keys(e.numericRefinements).forEach((function(t){var n=e.numericRefinements[t]||{};r[t]={},Object.keys(n).forEach((function(e){var i=n[e].map((function(e){return Array.isArray(e)?e.map((function(e){return"string"==typeof e?parseFloat(e):e})):"string"==typeof e?parseFloat(e):e}));r[t][e]=i}))})),t.numericRefinements=r}return n({},e,t)},m.make=function(e){var t=new m(e);return(e.hierarchicalFacets||[]).forEach((function(e){if(e.rootPath){var r=t.getHierarchicalRefinement(e.name);r.length>0&&0!==r[0].indexOf(e.rootPath)&&(t=t.clearRefinements(e.name)),0===(r=t.getHierarchicalRefinement(e.name)).length&&(t=t.toggleHierarchicalFacetRefinement(e.name,e.rootPath))}})),t},m.validate=function(e,t){var r=t||{};return e.tagFilters&&r.tagRefinements&&r.tagRefinements.length>0?new Error("[Tags] Cannot switch from the managed tag API to the advanced API. It is probably an error, if it is really what you want, you should first clear the tags with clearTags method."):e.tagRefinements.length>0&&r.tagFilters?new Error("[Tags] Cannot switch from the advanced tag API to the managed API. It is probably an error, if it is not, you should first clear the tags with clearTags method."):e.numericFilters&&r.numericRefinements&&o(r.numericRefinements)?new Error("[Numeric filters] Can't switch from the advanced to the managed API. It is probably an error, if this is really what you want, you have to first clear the numeric filters."):o(e.numericRefinements)&&r.numericFilters?new Error("[Numeric filters] Can't switch from the managed API to the advanced. It is probably an error, if this is really what you want, you have to first clear the numeric filters."):null},m.prototype={constructor:m,clearRefinements:function(e){var t={numericRefinements:this._clearNumericRefinements(e),facetsRefinements:f.clearRefinement(this.facetsRefinements,e,"conjunctiveFacet"),facetsExcludes:f.clearRefinement(this.facetsExcludes,e,"exclude"),disjunctiveFacetsRefinements:f.clearRefinement(this.disjunctiveFacetsRefinements,e,"disjunctiveFacet"),hierarchicalFacetsRefinements:f.clearRefinement(this.hierarchicalFacetsRefinements,e,"hierarchicalFacet")};return t.numericRefinements===this.numericRefinements&&t.facetsRefinements===this.facetsRefinements&&t.facetsExcludes===this.facetsExcludes&&t.disjunctiveFacetsRefinements===this.disjunctiveFacetsRefinements&&t.hierarchicalFacetsRefinements===this.hierarchicalFacetsRefinements?this:this.setQueryParameters(t)},clearTags:function(){return void 0===this.tagFilters&&0===this.tagRefinements.length?this:this.setQueryParameters({tagFilters:void 0,tagRefinements:[]})},setIndex:function(e){return e===this.index?this:this.setQueryParameters({index:e})},setQuery:function(e){return e===this.query?this:this.setQueryParameters({query:e})},setPage:function(e){return e===this.page?this:this.setQueryParameters({page:e})},setFacets:function(e){return this.setQueryParameters({facets:e})},setDisjunctiveFacets:function(e){return this.setQueryParameters({disjunctiveFacets:e})},setHitsPerPage:function(e){return this.hitsPerPage===e?this:this.setQueryParameters({hitsPerPage:e})},setTypoTolerance:function(e){return this.typoTolerance===e?this:this.setQueryParameters({typoTolerance:e})},addNumericRefinement:function(e,t,r){var i=c(r);if(this.isNumericRefined(e,t,i))return this;var a=n({},this.numericRefinements);return a[e]=n({},a[e]),a[e][t]?(a[e][t]=a[e][t].slice(),a[e][t].push(i)):a[e][t]=[i],this.setQueryParameters({numericRefinements:a})},getConjunctiveRefinements:function(e){return this.isConjunctiveFacet(e)&&this.facetsRefinements[e]||[]},getDisjunctiveRefinements:function(e){return this.isDisjunctiveFacet(e)&&this.disjunctiveFacetsRefinements[e]||[]},getHierarchicalRefinement:function(e){return this.hierarchicalFacetsRefinements[e]||[]},getExcludeRefinements:function(e){return this.isConjunctiveFacet(e)&&this.facetsExcludes[e]||[]},removeNumericRefinement:function(e,t,r){return void 0!==r?this.isNumericRefined(e,t,r)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(n,i){return i===e&&n.op===t&&l(n.val,c(r))}))}):this:void 0!==t?this.isNumericRefined(e,t)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(r,n){return n===e&&r.op===t}))}):this:this.isNumericRefined(e)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(t,r){return r===e}))}):this},getNumericRefinements:function(e){return this.numericRefinements[e]||{}},getNumericRefinement:function(e,t){return this.numericRefinements[e]&&this.numericRefinements[e][t]},_clearNumericRefinements:function(e){if(void 0===e)return o(this.numericRefinements)?{}:this.numericRefinements;if("string"==typeof e)return u(this.numericRefinements,[e]);if("function"==typeof e){var t=!1,r=this.numericRefinements,n=Object.keys(r).reduce((function(n,i){var a=r[i],s={};return a=a||{},Object.keys(a).forEach((function(r){var n=a[r]||[],c=[];n.forEach((function(t){e({val:t,op:r},i,"numeric")||c.push(t)})),c.length!==n.length&&(t=!0),s[r]=c})),n[i]=s,n}),{});return t?n:this.numericRefinements}},addFacet:function(e){return this.isConjunctiveFacet(e)?this:this.setQueryParameters({facets:this.facets.concat([e])})},addDisjunctiveFacet:function(e){return this.isDisjunctiveFacet(e)?this:this.setQueryParameters({disjunctiveFacets:this.disjunctiveFacets.concat([e])})},addHierarchicalFacet:function(e){if(this.isHierarchicalFacet(e.name))throw new Error("Cannot declare two hierarchical facets with the same name: `"+e.name+"`");return this.setQueryParameters({hierarchicalFacets:this.hierarchicalFacets.concat([e])})},addFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsRefinements,e,t)?this:this.setQueryParameters({facetsRefinements:f.addRefinement(this.facetsRefinements,e,t)})},addExcludeRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsExcludes,e,t)?this:this.setQueryParameters({facetsExcludes:f.addRefinement(this.facetsExcludes,e,t)})},addDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return f.isRefined(this.disjunctiveFacetsRefinements,e,t)?this:this.setQueryParameters({disjunctiveFacetsRefinements:f.addRefinement(this.disjunctiveFacetsRefinements,e,t)})},addTagRefinement:function(e){if(this.isTagRefined(e))return this;var t={tagRefinements:this.tagRefinements.concat(e)};return this.setQueryParameters(t)},removeFacet:function(e){return this.isConjunctiveFacet(e)?this.clearRefinements(e).setQueryParameters({facets:this.facets.filter((function(t){return t!==e}))}):this},removeDisjunctiveFacet:function(e){return this.isDisjunctiveFacet(e)?this.clearRefinements(e).setQueryParameters({disjunctiveFacets:this.disjunctiveFacets.filter((function(t){return t!==e}))}):this},removeHierarchicalFacet:function(e){return this.isHierarchicalFacet(e)?this.clearRefinements(e).setQueryParameters({hierarchicalFacets:this.hierarchicalFacets.filter((function(t){return t.name!==e}))}):this},removeFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsRefinements,e,t)?this.setQueryParameters({facetsRefinements:f.removeRefinement(this.facetsRefinements,e,t)}):this},removeExcludeRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsExcludes,e,t)?this.setQueryParameters({facetsExcludes:f.removeRefinement(this.facetsExcludes,e,t)}):this},removeDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return f.isRefined(this.disjunctiveFacetsRefinements,e,t)?this.setQueryParameters({disjunctiveFacetsRefinements:f.removeRefinement(this.disjunctiveFacetsRefinements,e,t)}):this},removeTagRefinement:function(e){if(!this.isTagRefined(e))return this;var t={tagRefinements:this.tagRefinements.filter((function(t){return t!==e}))};return this.setQueryParameters(t)},toggleRefinement:function(e,t){return this.toggleFacetRefinement(e,t)},toggleFacetRefinement:function(e,t){if(this.isHierarchicalFacet(e))return this.toggleHierarchicalFacetRefinement(e,t);if(this.isConjunctiveFacet(e))return this.toggleConjunctiveFacetRefinement(e,t);if(this.isDisjunctiveFacet(e))return this.toggleDisjunctiveFacetRefinement(e,t);throw new Error("Cannot refine the undeclared facet "+e+"; it should be added to the helper options facets, disjunctiveFacets or hierarchicalFacets")},toggleConjunctiveFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return this.setQueryParameters({facetsRefinements:f.toggleRefinement(this.facetsRefinements,e,t)})},toggleExcludeFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return this.setQueryParameters({facetsExcludes:f.toggleRefinement(this.facetsExcludes,e,t)})},toggleDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return this.setQueryParameters({disjunctiveFacetsRefinements:f.toggleRefinement(this.disjunctiveFacetsRefinements,e,t)})},toggleHierarchicalFacetRefinement:function(e,t){if(!this.isHierarchicalFacet(e))throw new Error(e+" is not defined in the hierarchicalFacets attribute of the helper configuration");var r=this._getHierarchicalFacetSeparator(this.getHierarchicalFacetByName(e)),n={};return void 0!==this.hierarchicalFacetsRefinements[e]&&this.hierarchicalFacetsRefinements[e].length>0&&(this.hierarchicalFacetsRefinements[e][0]===t||0===this.hierarchicalFacetsRefinements[e][0].indexOf(t+r))?-1===t.indexOf(r)?n[e]=[]:n[e]=[t.slice(0,t.lastIndexOf(r))]:n[e]=[t],this.setQueryParameters({hierarchicalFacetsRefinements:i({},n,this.hierarchicalFacetsRefinements)})},addHierarchicalFacetRefinement:function(e,t){if(this.isHierarchicalFacetRefined(e))throw new Error(e+" is already refined.");if(!this.isHierarchicalFacet(e))throw new Error(e+" is not defined in the hierarchicalFacets attribute of the helper configuration.");var r={};return r[e]=[t],this.setQueryParameters({hierarchicalFacetsRefinements:i({},r,this.hierarchicalFacetsRefinements)})},removeHierarchicalFacetRefinement:function(e){if(!this.isHierarchicalFacetRefined(e))return this;var t={};return t[e]=[],this.setQueryParameters({hierarchicalFacetsRefinements:i({},t,this.hierarchicalFacetsRefinements)})},toggleTagRefinement:function(e){return this.isTagRefined(e)?this.removeTagRefinement(e):this.addTagRefinement(e)},isDisjunctiveFacet:function(e){return this.disjunctiveFacets.indexOf(e)>-1},isHierarchicalFacet:function(e){return void 0!==this.getHierarchicalFacetByName(e)},isConjunctiveFacet:function(e){return this.facets.indexOf(e)>-1},isFacetRefined:function(e,t){return!!this.isConjunctiveFacet(e)&&f.isRefined(this.facetsRefinements,e,t)},isExcludeRefined:function(e,t){return!!this.isConjunctiveFacet(e)&&f.isRefined(this.facetsExcludes,e,t)},isDisjunctiveFacetRefined:function(e,t){return!!this.isDisjunctiveFacet(e)&&f.isRefined(this.disjunctiveFacetsRefinements,e,t)},isHierarchicalFacetRefined:function(e,t){if(!this.isHierarchicalFacet(e))return!1;var r=this.getHierarchicalRefinement(e);return t?-1!==r.indexOf(t):r.length>0},isNumericRefined:function(e,t,r){if(void 0===r&&void 0===t)return!!this.numericRefinements[e];var n=this.numericRefinements[e]&&void 0!==this.numericRefinements[e][t];if(void 0===r||!n)return n;var i,a,u=c(r),o=void 0!==(i=this.numericRefinements[e][t],a=u,s(i,(function(e){return l(e,a)})));return n&&o},isTagRefined:function(e){return-1!==this.tagRefinements.indexOf(e)},getRefinedDisjunctiveFacets:function(){var e=this,t=a(Object.keys(this.numericRefinements).filter((function(t){return Object.keys(e.numericRefinements[t]).length>0})),this.disjunctiveFacets);return Object.keys(this.disjunctiveFacetsRefinements).filter((function(t){return e.disjunctiveFacetsRefinements[t].length>0})).concat(t).concat(this.getRefinedHierarchicalFacets())},getRefinedHierarchicalFacets:function(){var e=this;return a(this.hierarchicalFacets.map((function(e){return e.name})),Object.keys(this.hierarchicalFacetsRefinements).filter((function(t){return e.hierarchicalFacetsRefinements[t].length>0})))},getUnrefinedDisjunctiveFacets:function(){var e=this.getRefinedDisjunctiveFacets();return this.disjunctiveFacets.filter((function(t){return-1===e.indexOf(t)}))},managedParameters:["index","facets","disjunctiveFacets","facetsRefinements","hierarchicalFacets","facetsExcludes","disjunctiveFacetsRefinements","numericRefinements","tagRefinements","hierarchicalFacetsRefinements"],getQueryParams:function(){var e=this.managedParameters,t={},r=this;return Object.keys(this).forEach((function(n){var i=r[n];-1===e.indexOf(n)&&void 0!==i&&(t[n]=i)})),t},setQueryParameter:function(e,t){if(this[e]===t)return this;var r={};return r[e]=t,this.setQueryParameters(r)},setQueryParameters:function(e){if(!e)return this;var t=m.validate(this,e);if(t)throw t;var r=this,n=m._parseNumbers(e),i=Object.keys(this).reduce((function(e,t){return e[t]=r[t],e}),{}),a=Object.keys(n).reduce((function(e,t){var r=void 0!==e[t],i=void 0!==n[t];return r&&!i?u(e,[t]):(i&&(e[t]=n[t]),e)}),i);return new this.constructor(a)},resetPage:function(){return void 0===this.page?this:this.setPage(0)},_getHierarchicalFacetSortBy:function(e){return e.sortBy||["isRefined:desc","name:asc"]},_getHierarchicalFacetSeparator:function(e){return e.separator||" > "},_getHierarchicalRootPath:function(e){return e.rootPath||null},_getHierarchicalShowParentLevel:function(e){return"boolean"!=typeof e.showParentLevel||e.showParentLevel},getHierarchicalFacetByName:function(e){return s(this.hierarchicalFacets,(function(t){return t.name===e}))},getHierarchicalFacetBreadcrumb:function(e){if(!this.isHierarchicalFacet(e))return[];var t=this.getHierarchicalRefinement(e)[0];if(!t)return[];var r=this._getHierarchicalFacetSeparator(this.getHierarchicalFacetByName(e));return t.split(r).map((function(e){return e.trim()}))},toString:function(){return JSON.stringify(this,null,2)}},e.exports=m},210:(e,t,r)=>{"use strict";e.exports=function(e){return function(t,r){var s=e.hierarchicalFacets[r],o=e.hierarchicalFacetsRefinements[s.name]&&e.hierarchicalFacetsRefinements[s.name][0]||"",h=e._getHierarchicalFacetSeparator(s),f=e._getHierarchicalRootPath(s),l=e._getHierarchicalShowParentLevel(s),m=a(e._getHierarchicalFacetSortBy(s)),d=t.every((function(e){return e.exhaustive})),p=function(e,t,r,a,s){return function(o,h,f){var l=o;if(f>0){var m=0;for(l=o;m<f;){var d=l&&Array.isArray(l.data)?l.data:[];l=i(d,(function(e){return e.isRefined})),m++}}if(l){var p=Object.keys(h.data).map((function(e){return[e,h.data[e]]})).filter((function(e){return function(e,t,r,n,i,a){if(i&&(0!==e.indexOf(i)||i===e))return!1;return!i&&-1===e.indexOf(n)||i&&e.split(n).length-i.split(n).length==1||-1===e.indexOf(n)&&-1===r.indexOf(n)||0===r.indexOf(e)||0===e.indexOf(t+n)&&(a||0===e.indexOf(r))}(e[0],l.path||r,s,t,r,a)}));l.data=n(p.map((function(e){var r=e[0];return function(e,t,r,n,i){var a=t.split(r);return{name:a[a.length-1].trim(),path:t,escapedValue:c(t),count:e,isRefined:n===t||0===n.indexOf(t+r),exhaustive:i,data:null}}(e[1],r,t,u(s),h.exhaustive)})),e[0],e[1])}return o}}(m,h,f,l,o),v=t;return f&&(v=t.slice(f.split(h).length)),v.reduce(p,{name:e.hierarchicalFacets[r].name,count:null,isRefined:!0,path:null,escapedValue:null,exhaustive:d,data:null})}};var n=r(2148),i=r(7888),a=r(2293),s=r(4039),c=s.escapeFacetValue,u=s.unescapeFacetValue},3076:(e,t,r)=>{"use strict";var n=r(185),i=r(3336),a=r(2148),s=r(4587),c=r(7888),u=r(9725),o=r(2293),h=r(4039),f=h.escapeFacetValue,l=h.unescapeFacetValue,m=r(210);function d(e){var t={};return e.forEach((function(e,r){t[e]=r})),t}function p(e,t,r){t&&t[r]&&(e.stats=t[r])}function v(e,t,r){var a=t[0];this._rawResults=t;var o=this;Object.keys(a).forEach((function(e){o[e]=a[e]})),Object.keys(r||{}).forEach((function(e){o[e]=r[e]})),this.processingTimeMS=t.reduce((function(e,t){return void 0===t.processingTimeMS?e:e+t.processingTimeMS}),0),this.disjunctiveFacets=[],this.hierarchicalFacets=e.hierarchicalFacets.map((function(){return[]})),this.facets=[];var h=e.getRefinedDisjunctiveFacets(),f=d(e.facets),v=d(e.disjunctiveFacets),g=1,y=a.facets||{};Object.keys(y).forEach((function(t){var r,n,i=y[t],s=(r=e.hierarchicalFacets,n=t,c(r,(function(e){return(e.attributes||[]).indexOf(n)>-1})));if(s){var h=s.attributes.indexOf(t),l=u(e.hierarchicalFacets,(function(e){return e.name===s.name}));o.hierarchicalFacets[l][h]={attribute:t,data:i,exhaustive:a.exhaustiveFacetsCount}}else{var m,d=-1!==e.disjunctiveFacets.indexOf(t),g=-1!==e.facets.indexOf(t);d&&(m=v[t],o.disjunctiveFacets[m]={name:t,data:i,exhaustive:a.exhaustiveFacetsCount},p(o.disjunctiveFacets[m],a.facets_stats,t)),g&&(m=f[t],o.facets[m]={name:t,data:i,exhaustive:a.exhaustiveFacetsCount},p(o.facets[m],a.facets_stats,t))}})),this.hierarchicalFacets=s(this.hierarchicalFacets),h.forEach((function(r){var s=t[g],c=s&&s.facets?s.facets:{},h=e.getHierarchicalFacetByName(r);Object.keys(c).forEach((function(t){var r,f=c[t];if(h){r=u(e.hierarchicalFacets,(function(e){return e.name===h.name}));var m=u(o.hierarchicalFacets[r],(function(e){return e.attribute===t}));if(-1===m)return;o.hierarchicalFacets[r][m].data=n({},o.hierarchicalFacets[r][m].data,f)}else{r=v[t];var d=a.facets&&a.facets[t]||{};o.disjunctiveFacets[r]={name:t,data:i({},f,d),exhaustive:s.exhaustiveFacetsCount},p(o.disjunctiveFacets[r],s.facets_stats,t),e.disjunctiveFacetsRefinements[t]&&e.disjunctiveFacetsRefinements[t].forEach((function(n){!o.disjunctiveFacets[r].data[n]&&e.disjunctiveFacetsRefinements[t].indexOf(l(n))>-1&&(o.disjunctiveFacets[r].data[n]=0)}))}})),g++})),e.getRefinedHierarchicalFacets().forEach((function(r){var n=e.getHierarchicalFacetByName(r),a=e._getHierarchicalFacetSeparator(n),s=e.getHierarchicalRefinement(r);0===s.length||s[0].split(a).length<2||t.slice(g).forEach((function(t){var r=t&&t.facets?t.facets:{};Object.keys(r).forEach((function(t){var c=r[t],h=u(e.hierarchicalFacets,(function(e){return e.name===n.name})),f=u(o.hierarchicalFacets[h],(function(e){return e.attribute===t}));if(-1!==f){var l={};if(s.length>0){var m=s[0].split(a)[0];l[m]=o.hierarchicalFacets[h][f].data[m]}o.hierarchicalFacets[h][f].data=i(l,c,o.hierarchicalFacets[h][f].data)}})),g++}))})),Object.keys(e.facetsExcludes).forEach((function(t){var r=e.facetsExcludes[t],n=f[t];o.facets[n]={name:t,data:a.facets[t],exhaustive:a.exhaustiveFacetsCount},r.forEach((function(e){o.facets[n]=o.facets[n]||{name:t},o.facets[n].data=o.facets[n].data||{},o.facets[n].data[e]=0}))})),this.hierarchicalFacets=this.hierarchicalFacets.map(m(e)),this.facets=s(this.facets),this.disjunctiveFacets=s(this.disjunctiveFacets),this._state=e}function g(e,t){function r(e){return e.name===t}if(e._state.isConjunctiveFacet(t)){var n=c(e.facets,r);return n?Object.keys(n.data).map((function(r){var i=f(r);return{name:r,escapedValue:i,count:n.data[r],isRefined:e._state.isFacetRefined(t,i),isExcluded:e._state.isExcludeRefined(t,r)}})):[]}if(e._state.isDisjunctiveFacet(t)){var i=c(e.disjunctiveFacets,r);return i?Object.keys(i.data).map((function(r){var n=f(r);return{name:r,escapedValue:n,count:i.data[r],isRefined:e._state.isDisjunctiveFacetRefined(t,n)}})):[]}if(e._state.isHierarchicalFacet(t)){var a=c(e.hierarchicalFacets,r);if(!a)return a;var s=e._state.getHierarchicalFacetByName(t),u=l(e._state.getHierarchicalRefinement(t)[0]||"").split(e._state._getHierarchicalFacetSeparator(s));return u.unshift(t),y(a,u,0),a}}function y(e,t,r){e.isRefined=e.name===t[r],e.data&&e.data.forEach((function(e){y(e,t,r+1)}))}function R(e,t,r,n){if(n=n||0,Array.isArray(t))return e(t,r[n]);if(!t.data||0===t.data.length)return t;var a=t.data.map((function(t){return R(e,t,r,n+1)})),s=e(a,r[n]);return i({data:s},t)}function F(e,t){var r=c(e,(function(e){return e.name===t}));return r&&r.stats}function b(e,t,r,n,i){var a=c(i,(function(e){return e.name===r})),s=a&&a.data&&a.data[n]?a.data[n]:0,u=a&&a.exhaustive||!1;return{type:t,attributeName:r,name:n,count:s,exhaustive:u}}v.prototype.getFacetByName=function(e){function t(t){return t.name===e}return c(this.facets,t)||c(this.disjunctiveFacets,t)||c(this.hierarchicalFacets,t)},v.DEFAULT_SORT=["isRefined:desc","count:desc","name:asc"],v.prototype.getFacetValues=function(e,t){var r=g(this,e);if(r){var n,s=i({},t,{sortBy:v.DEFAULT_SORT,facetOrdering:!(t&&t.sortBy)}),c=this;if(Array.isArray(r))n=[e];else n=c._state.getHierarchicalFacetByName(r.name).attributes;return R((function(e,t){if(s.facetOrdering){var r=function(e,t){return e.renderingContent&&e.renderingContent.facetOrdering&&e.renderingContent.facetOrdering.values&&e.renderingContent.facetOrdering.values[t]}(c,t);if(Boolean(r))return function(e,t){var r=[],n=[],i=(t.order||[]).reduce((function(e,t,r){return e[t]=r,e}),{});e.forEach((function(e){var t=e.path||e.name;void 0!==i[t]?r[i[t]]=e:n.push(e)})),r=r.filter((function(e){return e}));var s,c=t.sortRemainingBy;return"hidden"===c?r:(s="alpha"===c?[["path","name"],["asc","asc"]]:[["count"],["desc"]],r.concat(a(n,s[0],s[1])))}(e,r)}if(Array.isArray(s.sortBy)){var n=o(s.sortBy,v.DEFAULT_SORT);return a(e,n[0],n[1])}if("function"==typeof s.sortBy)return function(e,t){return t.sort(e)}(s.sortBy,e);throw new Error("options.sortBy is optional but if defined it must be either an array of string (predicates) or a sorting function")}),r,n)}},v.prototype.getFacetStats=function(e){return this._state.isConjunctiveFacet(e)?F(this.facets,e):this._state.isDisjunctiveFacet(e)?F(this.disjunctiveFacets,e):void 0},v.prototype.getRefinements=function(){var e=this._state,t=this,r=[];return Object.keys(e.facetsRefinements).forEach((function(n){e.facetsRefinements[n].forEach((function(i){r.push(b(e,"facet",n,i,t.facets))}))})),Object.keys(e.facetsExcludes).forEach((function(n){e.facetsExcludes[n].forEach((function(i){r.push(b(e,"exclude",n,i,t.facets))}))})),Object.keys(e.disjunctiveFacetsRefinements).forEach((function(n){e.disjunctiveFacetsRefinements[n].forEach((function(i){r.push(b(e,"disjunctive",n,i,t.disjunctiveFacets))}))})),Object.keys(e.hierarchicalFacetsRefinements).forEach((function(n){e.hierarchicalFacetsRefinements[n].forEach((function(i){r.push(function(e,t,r,n){var i=e.getHierarchicalFacetByName(t),a=e._getHierarchicalFacetSeparator(i),s=r.split(a),u=c(n,(function(e){return e.name===t})),o=s.reduce((function(e,t){var r=e&&c(e.data,(function(e){return e.name===t}));return void 0!==r?r:e}),u),h=o&&o.count||0,f=o&&o.exhaustive||!1,l=o&&o.path||"";return{type:"hierarchical",attributeName:t,name:l,count:h,exhaustive:f}}(e,n,i,t.hierarchicalFacets))}))})),Object.keys(e.numericRefinements).forEach((function(t){var n=e.numericRefinements[t];Object.keys(n).forEach((function(e){n[e].forEach((function(n){r.push({type:"numeric",attributeName:t,name:n,numericValue:n,operator:e})}))}))})),e.tagRefinements.forEach((function(e){r.push({type:"tag",attributeName:"_tags",name:e})})),r},e.exports=v},9374:(e,t,r)=>{"use strict";var n=r(7775),i=r(3076),a=r(8078),s=r(6394),c=r(7331),u=r(4853),o=r(116),h=r(9803),f=r(185),l=r(4336),m=r(4039).escapeFacetValue;function d(e,t,r){"function"==typeof e.addAlgoliaAgent&&e.addAlgoliaAgent("JS Helper ("+l+")"),this.setClient(e);var i=r||{};i.index=t,this.state=n.make(i),this.lastResults=null,this._queryId=0,this._lastQueryIdReceived=-1,this.derivedHelpers=[],this._currentNbQueries=0}function p(e){if(e<0)throw new Error("Page requested below 0.");return this._change({state:this.state.setPage(e),isPageReset:!1}),this}function v(){return this.state.page}u(d,c),d.prototype.search=function(){return this._search({onlyWithDerivedHelpers:!1}),this},d.prototype.searchOnlyWithDerivedHelpers=function(){return this._search({onlyWithDerivedHelpers:!0}),this},d.prototype.getQuery=function(){var e=this.state;return s._getHitsSearchParams(e)},d.prototype.searchOnce=function(e,t){var r=e?this.state.setQueryParameters(e):this.state,n=s._getQueries(r.index,r),a=this;if(this._currentNbQueries++,this.emit("searchOnce",{state:r}),!t)return this.client.search(n).then((function(e){return a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),{content:new i(r,e.results),state:r,_originalResponse:e}}),(function(e){throw a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),e}));this.client.search(n).then((function(e){a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),t(null,new i(r,e.results),r)})).catch((function(e){a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),t(e,null,r)}))},d.prototype.findAnswers=function(e){console.warn("[algoliasearch-helper] answers is no longer supported");var t=this.state,r=this.derivedHelpers[0];if(!r)return Promise.resolve([]);var n=r.getModifiedState(t),i=f({attributesForPrediction:e.attributesForPrediction,nbHits:e.nbHits},{params:h(s._getHitsSearchParams(n),["attributesToSnippet","hitsPerPage","restrictSearchableAttributes","snippetEllipsisText"])}),a="search for answers was called, but this client does not have a function client.initIndex(index).findAnswers";if("function"!=typeof this.client.initIndex)throw new Error(a);var c=this.client.initIndex(n.index);if("function"!=typeof c.findAnswers)throw new Error(a);return c.findAnswers(n.query,e.queryLanguages,i)},d.prototype.searchForFacetValues=function(e,t,r,n){var i="function"==typeof this.client.searchForFacetValues,a="function"==typeof this.client.initIndex;if(!i&&!a&&"function"!=typeof this.client.search)throw new Error("search for facet values (searchable) was called, but this client does not have a function client.searchForFacetValues or client.initIndex(index).searchForFacetValues");var c=this.state.setQueryParameters(n||{}),u=c.isDisjunctiveFacet(e),o=s.getSearchForFacetQuery(e,t,r,c);this._currentNbQueries++;var h,f=this;return i?h=this.client.searchForFacetValues([{indexName:c.index,params:o}]):a?h=this.client.initIndex(c.index).searchForFacetValues(o):(delete o.facetName,h=this.client.search([{type:"facet",facet:e,indexName:c.index,params:o}]).then((function(e){return e.results[0]}))),this.emit("searchForFacetValues",{state:c,facet:e,query:t}),h.then((function(t){return f._currentNbQueries--,0===f._currentNbQueries&&f.emit("searchQueueEmpty"),(t=Array.isArray(t)?t[0]:t).facetHits.forEach((function(t){t.escapedValue=m(t.value),t.isRefined=u?c.isDisjunctiveFacetRefined(e,t.escapedValue):c.isFacetRefined(e,t.escapedValue)})),t}),(function(e){throw f._currentNbQueries--,0===f._currentNbQueries&&f.emit("searchQueueEmpty"),e}))},d.prototype.setQuery=function(e){return this._change({state:this.state.resetPage().setQuery(e),isPageReset:!0}),this},d.prototype.clearRefinements=function(e){return this._change({state:this.state.resetPage().clearRefinements(e),isPageReset:!0}),this},d.prototype.clearTags=function(){return this._change({state:this.state.resetPage().clearTags(),isPageReset:!0}),this},d.prototype.addDisjunctiveFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addDisjunctiveFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addDisjunctiveRefine=function(){return this.addDisjunctiveFacetRefinement.apply(this,arguments)},d.prototype.addHierarchicalFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addHierarchicalFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addNumericRefinement=function(e,t,r){return this._change({state:this.state.resetPage().addNumericRefinement(e,t,r),isPageReset:!0}),this},d.prototype.addFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addRefine=function(){return this.addFacetRefinement.apply(this,arguments)},d.prototype.addFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().addExcludeRefinement(e,t),isPageReset:!0}),this},d.prototype.addExclude=function(){return this.addFacetExclusion.apply(this,arguments)},d.prototype.addTag=function(e){return this._change({state:this.state.resetPage().addTagRefinement(e),isPageReset:!0}),this},d.prototype.removeNumericRefinement=function(e,t,r){return this._change({state:this.state.resetPage().removeNumericRefinement(e,t,r),isPageReset:!0}),this},d.prototype.removeDisjunctiveFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().removeDisjunctiveFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.removeDisjunctiveRefine=function(){return this.removeDisjunctiveFacetRefinement.apply(this,arguments)},d.prototype.removeHierarchicalFacetRefinement=function(e){return this._change({state:this.state.resetPage().removeHierarchicalFacetRefinement(e),isPageReset:!0}),this},d.prototype.removeFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().removeFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.removeRefine=function(){return this.removeFacetRefinement.apply(this,arguments)},d.prototype.removeFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().removeExcludeRefinement(e,t),isPageReset:!0}),this},d.prototype.removeExclude=function(){return this.removeFacetExclusion.apply(this,arguments)},d.prototype.removeTag=function(e){return this._change({state:this.state.resetPage().removeTagRefinement(e),isPageReset:!0}),this},d.prototype.toggleFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().toggleExcludeFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.toggleExclude=function(){return this.toggleFacetExclusion.apply(this,arguments)},d.prototype.toggleRefinement=function(e,t){return this.toggleFacetRefinement(e,t)},d.prototype.toggleFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().toggleFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.toggleRefine=function(){return this.toggleFacetRefinement.apply(this,arguments)},d.prototype.toggleTag=function(e){return this._change({state:this.state.resetPage().toggleTagRefinement(e),isPageReset:!0}),this},d.prototype.nextPage=function(){var e=this.state.page||0;return this.setPage(e+1)},d.prototype.previousPage=function(){var e=this.state.page||0;return this.setPage(e-1)},d.prototype.setCurrentPage=p,d.prototype.setPage=p,d.prototype.setIndex=function(e){return this._change({state:this.state.resetPage().setIndex(e),isPageReset:!0}),this},d.prototype.setQueryParameter=function(e,t){return this._change({state:this.state.resetPage().setQueryParameter(e,t),isPageReset:!0}),this},d.prototype.setState=function(e){return this._change({state:n.make(e),isPageReset:!1}),this},d.prototype.overrideStateWithoutTriggeringChangeEvent=function(e){return this.state=new n(e),this},d.prototype.hasRefinements=function(e){return!!o(this.state.getNumericRefinements(e))||(this.state.isConjunctiveFacet(e)?this.state.isFacetRefined(e):this.state.isDisjunctiveFacet(e)?this.state.isDisjunctiveFacetRefined(e):!!this.state.isHierarchicalFacet(e)&&this.state.isHierarchicalFacetRefined(e))},d.prototype.isExcluded=function(e,t){return this.state.isExcludeRefined(e,t)},d.prototype.isDisjunctiveRefined=function(e,t){return this.state.isDisjunctiveFacetRefined(e,t)},d.prototype.hasTag=function(e){return this.state.isTagRefined(e)},d.prototype.isTagRefined=function(){return this.hasTagRefinements.apply(this,arguments)},d.prototype.getIndex=function(){return this.state.index},d.prototype.getCurrentPage=v,d.prototype.getPage=v,d.prototype.getTags=function(){return this.state.tagRefinements},d.prototype.getRefinements=function(e){var t=[];if(this.state.isConjunctiveFacet(e))this.state.getConjunctiveRefinements(e).forEach((function(e){t.push({value:e,type:"conjunctive"})})),this.state.getExcludeRefinements(e).forEach((function(e){t.push({value:e,type:"exclude"})}));else if(this.state.isDisjunctiveFacet(e)){this.state.getDisjunctiveRefinements(e).forEach((function(e){t.push({value:e,type:"disjunctive"})}))}var r=this.state.getNumericRefinements(e);return Object.keys(r).forEach((function(e){var n=r[e];t.push({value:n,operator:e,type:"numeric"})})),t},d.prototype.getNumericRefinement=function(e,t){return this.state.getNumericRefinement(e,t)},d.prototype.getHierarchicalFacetBreadcrumb=function(e){return this.state.getHierarchicalFacetBreadcrumb(e)},d.prototype._search=function(e){var t=this.state,r=[],n=[];e.onlyWithDerivedHelpers||(n=s._getQueries(t.index,t),r.push({state:t,queriesCount:n.length,helper:this}),this.emit("search",{state:t,results:this.lastResults}));var i=this.derivedHelpers.map((function(e){var n=e.getModifiedState(t),i=s._getQueries(n.index,n);return r.push({state:n,queriesCount:i.length,helper:e}),e.emit("search",{state:n,results:e.lastResults}),i})),a=Array.prototype.concat.apply(n,i),c=this._queryId++;this._currentNbQueries++;try{this.client.search(a).then(this._dispatchAlgoliaResponse.bind(this,r,c)).catch(this._dispatchAlgoliaError.bind(this,c))}catch(u){this.emit("error",{error:u})}},d.prototype._dispatchAlgoliaResponse=function(e,t,r){if(!(t<this._lastQueryIdReceived)){this._currentNbQueries-=t-this._lastQueryIdReceived,this._lastQueryIdReceived=t,0===this._currentNbQueries&&this.emit("searchQueueEmpty");var n=r.results.slice();e.forEach((function(e){var t=e.state,r=e.queriesCount,a=e.helper,s=n.splice(0,r),c=a.lastResults=new i(t,s);a.emit("result",{results:c,state:t})}))}},d.prototype._dispatchAlgoliaError=function(e,t){e<this._lastQueryIdReceived||(this._currentNbQueries-=e-this._lastQueryIdReceived,this._lastQueryIdReceived=e,this.emit("error",{error:t}),0===this._currentNbQueries&&this.emit("searchQueueEmpty"))},d.prototype.containsRefinement=function(e,t,r,n){return e||0!==t.length||0!==r.length||0!==n.length},d.prototype._hasDisjunctiveRefinements=function(e){return this.state.disjunctiveRefinements[e]&&this.state.disjunctiveRefinements[e].length>0},d.prototype._change=function(e){var t=e.state,r=e.isPageReset;t!==this.state&&(this.state=t,this.emit("change",{state:this.state,results:this.lastResults,isPageReset:r}))},d.prototype.clearCache=function(){return this.client.clearCache&&this.client.clearCache(),this},d.prototype.setClient=function(e){return this.client===e||("function"==typeof e.addAlgoliaAgent&&e.addAlgoliaAgent("JS Helper ("+l+")"),this.client=e),this},d.prototype.getClient=function(){return this.client},d.prototype.derive=function(e){var t=new a(this,e);return this.derivedHelpers.push(t),t},d.prototype.detachDerivedHelper=function(e){var t=this.derivedHelpers.indexOf(e);if(-1===t)throw new Error("Derived helper already detached");this.derivedHelpers.splice(t,1)},d.prototype.hasPendingRequests=function(){return this._currentNbQueries>0},e.exports=d},4587:e=>{"use strict";e.exports=function(e){return Array.isArray(e)?e.filter(Boolean):[]}},3336:e=>{"use strict";e.exports=function(){var e=Array.prototype.slice.call(arguments);return e.reduceRight((function(e,t){return Object.keys(Object(t)).forEach((function(r){void 0!==t[r]&&(void 0!==e[r]&&delete e[r],e[r]=t[r])})),e}),{})}},4039:e=>{"use strict";e.exports={escapeFacetValue:function(e){return"string"!=typeof e?e:String(e).replace(/^-/,"\\-")},unescapeFacetValue:function(e){return"string"!=typeof e?e:e.replace(/^\\-/,"-")}}},7888:e=>{"use strict";e.exports=function(e,t){if(Array.isArray(e))for(var r=0;r<e.length;r++)if(t(e[r]))return e[r]}},9725:e=>{"use strict";e.exports=function(e,t){if(!Array.isArray(e))return-1;for(var r=0;r<e.length;r++)if(t(e[r]))return r;return-1}},2293:(e,t,r)=>{"use strict";var n=r(7888);e.exports=function(e,t){var r=(t||[]).map((function(e){return e.split(":")}));return e.reduce((function(e,t){var i=t.split(":"),a=n(r,(function(e){return e[0]===i[0]}));return i.length>1||!a?(e[0].push(i[0]),e[1].push(i[1]),e):(e[0].push(a[0]),e[1].push(a[1]),e)}),[[],[]])}},4853:e=>{"use strict";e.exports=function(e,t){e.prototype=Object.create(t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}})}},2686:e=>{"use strict";e.exports=function(e,t){return e.filter((function(r,n){return t.indexOf(r)>-1&&e.indexOf(r)===n}))}},185:e=>{"use strict";function t(e){return"function"==typeof e||Array.isArray(e)||"[object Object]"===Object.prototype.toString.call(e)}function r(e,n){if(e===n)return e;for(var i in n)if(Object.prototype.hasOwnProperty.call(n,i)&&"__proto__"!==i&&"constructor"!==i){var a=n[i],s=e[i];void 0!==s&&void 0===a||(t(s)&&t(a)?e[i]=r(s,a):e[i]="object"==typeof(c=a)&&null!==c?r(Array.isArray(c)?[]:{},c):c)}var c;return e}e.exports=function(e){t(e)||(e={});for(var n=1,i=arguments.length;n<i;n++){var a=arguments[n];t(a)&&r(e,a)}return e}},116:e=>{"use strict";e.exports=function(e){return e&&Object.keys(e).length>0}},9803:e=>{"use strict";e.exports=function(e,t){if(null===e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}},2148:e=>{"use strict";function t(e,t){if(e!==t){var r=void 0!==e,n=null===e,i=void 0!==t,a=null===t;if(!a&&e>t||n&&i||!r)return 1;if(!n&&e<t||a&&r||!i)return-1}return 0}e.exports=function(e,r,n){if(!Array.isArray(e))return[];Array.isArray(n)||(n=[]);var i=e.map((function(e,t){return{criteria:r.map((function(t){return e[t]})),index:t,value:e}}));return i.sort((function(e,r){for(var i=-1;++i<e.criteria.length;){var a=t(e.criteria[i],r.criteria[i]);if(a)return i>=n.length?a:"desc"===n[i]?-a:a}return e.index-r.index})),i.map((function(e){return e.value}))}},8023:e=>{"use strict";e.exports=function e(t){if("number"==typeof t)return t;if("string"==typeof t)return parseFloat(t);if(Array.isArray(t))return t.map(e);throw new Error("The value should be a number, a parsable string or an array of those.")}},6394:(e,t,r)=>{"use strict";var n=r(185);function i(e){return Object.keys(e).sort((function(e,t){return e.localeCompare(t)})).reduce((function(t,r){return t[r]=e[r],t}),{})}var a={_getQueries:function(e,t){var r=[];return r.push({indexName:e,params:a._getHitsSearchParams(t)}),t.getRefinedDisjunctiveFacets().forEach((function(n){r.push({indexName:e,params:a._getDisjunctiveFacetSearchParams(t,n)})})),t.getRefinedHierarchicalFacets().forEach((function(n){var i=t.getHierarchicalFacetByName(n),s=t.getHierarchicalRefinement(n),c=t._getHierarchicalFacetSeparator(i);if(s.length>0&&s[0].split(c).length>1){var u=s[0].split(c).slice(0,-1).reduce((function(e,t,r){return e.concat({attribute:i.attributes[r],value:0===r?t:[e[e.length-1].value,t].join(c)})}),[]);u.forEach((function(n,s){var c=a._getDisjunctiveFacetSearchParams(t,n.attribute,0===s);function o(e){return i.attributes.some((function(t){return t===e.split(":")[0]}))}var h=(c.facetFilters||[]).reduce((function(e,t){if(Array.isArray(t)){var r=t.filter((function(e){return!o(e)}));r.length>0&&e.push(r)}return"string"!=typeof t||o(t)||e.push(t),e}),[]),f=u[s-1];c.facetFilters=s>0?h.concat(f.attribute+":"+f.value):h.length>0?h:void 0,r.push({indexName:e,params:c})}))}})),r},_getHitsSearchParams:function(e){var t=e.facets.concat(e.disjunctiveFacets).concat(a._getHitsHierarchicalFacetsAttributes(e)),r=a._getFacetFilters(e),s=a._getNumericFilters(e),c=a._getTagFilters(e),u={facets:t.indexOf("*")>-1?["*"]:t,tagFilters:c};return r.length>0&&(u.facetFilters=r),s.length>0&&(u.numericFilters=s),i(n({},e.getQueryParams(),u))},_getDisjunctiveFacetSearchParams:function(e,t,r){var s=a._getFacetFilters(e,t,r),c=a._getNumericFilters(e,t),u=a._getTagFilters(e),o={hitsPerPage:0,page:0,analytics:!1,clickAnalytics:!1};u.length>0&&(o.tagFilters=u);var h=e.getHierarchicalFacetByName(t);return o.facets=h?a._getDisjunctiveHierarchicalFacetAttribute(e,h,r):t,c.length>0&&(o.numericFilters=c),s.length>0&&(o.facetFilters=s),i(n({},e.getQueryParams(),o))},_getNumericFilters:function(e,t){if(e.numericFilters)return e.numericFilters;var r=[];return Object.keys(e.numericRefinements).forEach((function(n){var i=e.numericRefinements[n]||{};Object.keys(i).forEach((function(e){var a=i[e]||[];t!==n&&a.forEach((function(t){if(Array.isArray(t)){var i=t.map((function(t){return n+e+t}));r.push(i)}else r.push(n+e+t)}))}))})),r},_getTagFilters:function(e){return e.tagFilters?e.tagFilters:e.tagRefinements.join(",")},_getFacetFilters:function(e,t,r){var n=[],i=e.facetsRefinements||{};Object.keys(i).forEach((function(e){(i[e]||[]).forEach((function(t){n.push(e+":"+t)}))}));var a=e.facetsExcludes||{};Object.keys(a).forEach((function(e){(a[e]||[]).forEach((function(t){n.push(e+":-"+t)}))}));var s=e.disjunctiveFacetsRefinements||{};Object.keys(s).forEach((function(e){var r=s[e]||[];if(e!==t&&r&&0!==r.length){var i=[];r.forEach((function(t){i.push(e+":"+t)})),n.push(i)}}));var c=e.hierarchicalFacetsRefinements||{};return Object.keys(c).forEach((function(i){var a=(c[i]||[])[0];if(void 0!==a){var s,u,o=e.getHierarchicalFacetByName(i),h=e._getHierarchicalFacetSeparator(o),f=e._getHierarchicalRootPath(o);if(t===i){if(-1===a.indexOf(h)||!f&&!0===r||f&&f.split(h).length===a.split(h).length)return;f?(u=f.split(h).length-1,a=f):(u=a.split(h).length-2,a=a.slice(0,a.lastIndexOf(h))),s=o.attributes[u]}else u=a.split(h).length-1,s=o.attributes[u];s&&n.push([s+":"+a])}})),n},_getHitsHierarchicalFacetsAttributes:function(e){return e.hierarchicalFacets.reduce((function(t,r){var n=e.getHierarchicalRefinement(r.name)[0];if(!n)return t.push(r.attributes[0]),t;var i=e._getHierarchicalFacetSeparator(r),a=n.split(i).length,s=r.attributes.slice(0,a+1);return t.concat(s)}),[])},_getDisjunctiveHierarchicalFacetAttribute:function(e,t,r){var n=e._getHierarchicalFacetSeparator(t);if(!0===r){var i=e._getHierarchicalRootPath(t),a=0;return i&&(a=i.split(n).length),[t.attributes[a]]}var s=(e.getHierarchicalRefinement(t.name)[0]||"").split(n).length-1;return t.attributes.slice(0,s+1)},getSearchForFacetQuery:function(e,t,r,s){var c=s.isDisjunctiveFacet(e)?s.clearRefinements(e):s,u={facetQuery:t,facetName:e};return"number"==typeof r&&(u.maxFacetHits=r),i(n({},a._getHitsSearchParams(c),u))}};e.exports=a},6801:e=>{"use strict";e.exports=function(e){return null!==e&&/^[a-zA-Z0-9_-]{1,64}$/.test(e)}},4336:e=>{"use strict";e.exports="3.12.0"},290:function(e){e.exports=function(){"use strict";function e(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function t(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function r(r){for(var n=1;n<arguments.length;n++){var i=null!=arguments[n]?arguments[n]:{};n%2?t(Object(i),!0).forEach((function(t){e(r,t,i[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(r,Object.getOwnPropertyDescriptors(i)):t(Object(i)).forEach((function(e){Object.defineProperty(r,e,Object.getOwnPropertyDescriptor(i,e))}))}return r}function n(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}function i(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){if(Symbol.iterator in Object(e)||"[object Arguments]"===Object.prototype.toString.call(e)){var r=[],n=!0,i=!1,a=void 0;try{for(var s,c=e[Symbol.iterator]();!(n=(s=c.next()).done)&&(r.push(s.value),!t||r.length!==t);n=!0);}catch(e){i=!0,a=e}finally{try{n||null==c.return||c.return()}finally{if(i)throw a}}return r}}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance")}()}function a(e){return function(e){if(Array.isArray(e)){for(var t=0,r=new Array(e.length);t<e.length;t++)r[t]=e[t];return r}}(e)||function(e){if(Symbol.iterator in Object(e)||"[object Arguments]"===Object.prototype.toString.call(e))return Array.from(e)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance")}()}function s(e){var t,r="algoliasearch-client-js-".concat(e.key),n=function(){return void 0===t&&(t=e.localStorage||window.localStorage),t},a=function(){return JSON.parse(n().getItem(r)||"{}")};return{get:function(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return Promise.resolve().then((function(){var r=JSON.stringify(e),n=a()[r];return Promise.all([n||t(),void 0!==n])})).then((function(e){var t=i(e,2),n=t[0],a=t[1];return Promise.all([n,a||r.miss(n)])})).then((function(e){return i(e,1)[0]}))},set:function(e,t){return Promise.resolve().then((function(){var i=a();return i[JSON.stringify(e)]=t,n().setItem(r,JSON.stringify(i)),t}))},delete:function(e){return Promise.resolve().then((function(){var t=a();delete t[JSON.stringify(e)],n().setItem(r,JSON.stringify(t))}))},clear:function(){return Promise.resolve().then((function(){n().removeItem(r)}))}}}function c(e){var t=a(e.caches),r=t.shift();return void 0===r?{get:function(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return t().then((function(e){return Promise.all([e,r.miss(e)])})).then((function(e){return i(e,1)[0]}))},set:function(e,t){return Promise.resolve(t)},delete:function(e){return Promise.resolve()},clear:function(){return Promise.resolve()}}:{get:function(e,n){var i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return r.get(e,n,i).catch((function(){return c({caches:t}).get(e,n,i)}))},set:function(e,n){return r.set(e,n).catch((function(){return c({caches:t}).set(e,n)}))},delete:function(e){return r.delete(e).catch((function(){return c({caches:t}).delete(e)}))},clear:function(){return r.clear().catch((function(){return c({caches:t}).clear()}))}}}function u(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{serializable:!0},t={};return{get:function(r,n){var i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}},a=JSON.stringify(r);if(a in t)return Promise.resolve(e.serializable?JSON.parse(t[a]):t[a]);var s=n(),c=i&&i.miss||function(){return Promise.resolve()};return s.then((function(e){return c(e)})).then((function(){return s}))},set:function(r,n){return t[JSON.stringify(r)]=e.serializable?JSON.stringify(n):n,Promise.resolve(n)},delete:function(e){return delete t[JSON.stringify(e)],Promise.resolve()},clear:function(){return t={},Promise.resolve()}}}function o(e){for(var t=e.length-1;t>0;t--){var r=Math.floor(Math.random()*(t+1)),n=e[t];e[t]=e[r],e[r]=n}return e}function h(e,t){return t?(Object.keys(t).forEach((function(r){e[r]=t[r](e)})),e):e}function f(e){for(var t=arguments.length,r=new Array(t>1?t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];var i=0;return e.replace(/%s/g,(function(){return encodeURIComponent(r[i++])}))}var l={WithinQueryParameters:0,WithinHeaders:1};function m(e,t){var r=e||{},n=r.data||{};return Object.keys(r).forEach((function(e){-1===["timeout","headers","queryParameters","data","cacheable"].indexOf(e)&&(n[e]=r[e])})),{data:Object.entries(n).length>0?n:void 0,timeout:r.timeout||t,headers:r.headers||{},queryParameters:r.queryParameters||{},cacheable:r.cacheable}}var d={Read:1,Write:2,Any:3},p=1,v=2,g=3;function y(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:p;return r(r({},e),{},{status:t,lastUpdate:Date.now()})}function R(e){return"string"==typeof e?{protocol:"https",url:e,accept:d.Any}:{protocol:e.protocol||"https",url:e.url,accept:e.accept||d.Any}}var F="GET",b="POST";function P(e,t){return Promise.all(t.map((function(t){return e.get(t,(function(){return Promise.resolve(y(t))}))}))).then((function(e){var r=e.filter((function(e){return function(e){return e.status===p||Date.now()-e.lastUpdate>12e4}(e)})),n=e.filter((function(e){return function(e){return e.status===g&&Date.now()-e.lastUpdate<=12e4}(e)})),i=[].concat(a(r),a(n));return{getTimeout:function(e,t){return(0===n.length&&0===e?1:n.length+3+e)*t},statelessHosts:i.length>0?i.map((function(e){return R(e)})):t}}))}function _(e,t,n,i){var s=[],c=function(e,t){if(e.method!==F&&(void 0!==e.data||void 0!==t.data)){var n=Array.isArray(e.data)?e.data:r(r({},e.data),t.data);return JSON.stringify(n)}}(n,i),u=function(e,t){var n=r(r({},e.headers),t.headers),i={};return Object.keys(n).forEach((function(e){var t=n[e];i[e.toLowerCase()]=t})),i}(e,i),o=n.method,h=n.method!==F?{}:r(r({},n.data),i.data),f=r(r(r({"x-algolia-agent":e.userAgent.value},e.queryParameters),h),i.queryParameters),l=0,m=function t(r,a){var h=r.pop();if(void 0===h)throw{name:"RetryError",message:"Unreachable hosts - your application id may be incorrect. If the error persists, contact support@algolia.com.",transporterStackTrace:w(s)};var m={data:c,headers:u,method:o,url:E(h,n.path,f),connectTimeout:a(l,e.timeouts.connect),responseTimeout:a(l,i.timeout)},d=function(e){var t={request:m,response:e,host:h,triesLeft:r.length};return s.push(t),t},p={onSuccess:function(e){return function(e){try{return JSON.parse(e.content)}catch(t){throw function(e,t){return{name:"DeserializationError",message:e,response:t}}(t.message,e)}}(e)},onRetry:function(n){var i=d(n);return n.isTimedOut&&l++,Promise.all([e.logger.info("Retryable failure",O(i)),e.hostsCache.set(h,y(h,n.isTimedOut?g:v))]).then((function(){return t(r,a)}))},onFail:function(e){throw d(e),function(e,t){var r=e.content,n=e.status,i=r;try{i=JSON.parse(r).message}catch(e){}return function(e,t,r){return{name:"ApiError",message:e,status:t,transporterStackTrace:r}}(i,n,t)}(e,w(s))}};return e.requester.send(m).then((function(e){return function(e,t){return function(e){var t=e.status;return e.isTimedOut||function(e){var t=e.isTimedOut,r=e.status;return!t&&0==~~r}(e)||2!=~~(t/100)&&4!=~~(t/100)}(e)?t.onRetry(e):2==~~(e.status/100)?t.onSuccess(e):t.onFail(e)}(e,p)}))};return P(e.hostsCache,t).then((function(e){return m(a(e.statelessHosts).reverse(),e.getTimeout)}))}function j(e){var t={value:"Algolia for JavaScript (".concat(e,")"),add:function(e){var r="; ".concat(e.segment).concat(void 0!==e.version?" (".concat(e.version,")"):"");return-1===t.value.indexOf(r)&&(t.value="".concat(t.value).concat(r)),t}};return t}function E(e,t,r){var n=x(r),i="".concat(e.protocol,"://").concat(e.url,"/").concat("/"===t.charAt(0)?t.substr(1):t);return n.length&&(i+="?".concat(n)),i}function x(e){return Object.keys(e).map((function(t){return f("%s=%s",t,(r=e[t],"[object Object]"===Object.prototype.toString.call(r)||"[object Array]"===Object.prototype.toString.call(r)?JSON.stringify(e[t]):e[t]));var r})).join("&")}function w(e){return e.map((function(e){return O(e)}))}function O(e){var t=e.request.headers["x-algolia-api-key"]?{"x-algolia-api-key":"*****"}:{};return r(r({},e),{},{request:r(r({},e.request),{},{headers:r(r({},e.request.headers),t)})})}var N=function(e){var t=e.appId,n=function(e,t,r){var n={"x-algolia-api-key":r,"x-algolia-application-id":t};return{headers:function(){return e===l.WithinHeaders?n:{}},queryParameters:function(){return e===l.WithinQueryParameters?n:{}}}}(void 0!==e.authMode?e.authMode:l.WithinHeaders,t,e.apiKey),a=function(e){var t=e.hostsCache,r=e.logger,n=e.requester,a=e.requestsCache,s=e.responsesCache,c=e.timeouts,u=e.userAgent,o=e.hosts,h=e.queryParameters,f={hostsCache:t,logger:r,requester:n,requestsCache:a,responsesCache:s,timeouts:c,userAgent:u,headers:e.headers,queryParameters:h,hosts:o.map((function(e){return R(e)})),read:function(e,t){var r=m(t,f.timeouts.read),n=function(){return _(f,f.hosts.filter((function(e){return 0!=(e.accept&d.Read)})),e,r)};if(!0!==(void 0!==r.cacheable?r.cacheable:e.cacheable))return n();var a={request:e,mappedRequestOptions:r,transporter:{queryParameters:f.queryParameters,headers:f.headers}};return f.responsesCache.get(a,(function(){return f.requestsCache.get(a,(function(){return f.requestsCache.set(a,n()).then((function(e){return Promise.all([f.requestsCache.delete(a),e])}),(function(e){return Promise.all([f.requestsCache.delete(a),Promise.reject(e)])})).then((function(e){var t=i(e,2);return t[0],t[1]}))}))}),{miss:function(e){return f.responsesCache.set(a,e)}})},write:function(e,t){return _(f,f.hosts.filter((function(e){return 0!=(e.accept&d.Write)})),e,m(t,f.timeouts.write))}};return f}(r(r({hosts:[{url:"".concat(t,"-dsn.algolia.net"),accept:d.Read},{url:"".concat(t,".algolia.net"),accept:d.Write}].concat(o([{url:"".concat(t,"-1.algolianet.com")},{url:"".concat(t,"-2.algolianet.com")},{url:"".concat(t,"-3.algolianet.com")}]))},e),{},{headers:r(r(r({},n.headers()),{"content-type":"application/x-www-form-urlencoded"}),e.headers),queryParameters:r(r({},n.queryParameters()),e.queryParameters)}));return h({transporter:a,appId:t,addAlgoliaAgent:function(e,t){a.userAgent.add({segment:e,version:t})},clearCache:function(){return Promise.all([a.requestsCache.clear(),a.responsesCache.clear()]).then((function(){}))}},e.methods)},A=function(e){return function(t,r){return t.method===F?e.transporter.read(t,r):e.transporter.write(t,r)}},H=function(e){return function(t){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return h({transporter:e.transporter,appId:e.appId,indexName:t},r.methods)}},S=function(e){return function(t,n){var i=t.map((function(e){return r(r({},e),{},{params:x(e.params||{})})}));return e.transporter.read({method:b,path:"1/indexes/*/queries",data:{requests:i},cacheable:!0},n)}},T=function(e){return function(t,i){return Promise.all(t.map((function(t){var a=t.params,s=a.facetName,c=a.facetQuery,u=n(a,["facetName","facetQuery"]);return H(e)(t.indexName,{methods:{searchForFacetValues:k}}).searchForFacetValues(s,c,r(r({},i),u))})))}},Q=function(e){return function(t,r,n){return e.transporter.read({method:b,path:f("1/answers/%s/prediction",e.indexName),data:{query:t,queryLanguages:r},cacheable:!0},n)}},C=function(e){return function(t,r){return e.transporter.read({method:b,path:f("1/indexes/%s/query",e.indexName),data:{query:t},cacheable:!0},r)}},k=function(e){return function(t,r,n){return e.transporter.read({method:b,path:f("1/indexes/%s/facets/%s/query",e.indexName,t),data:{facetQuery:r},cacheable:!0},n)}},D=1,I=2,q=3;function V(e,t,n){var i,a={appId:e,apiKey:t,timeouts:{connect:1,read:2,write:30},requester:{send:function(e){return new Promise((function(t){var r=new XMLHttpRequest;r.open(e.method,e.url,!0),Object.keys(e.headers).forEach((function(t){return r.setRequestHeader(t,e.headers[t])}));var n,i=function(e,n){return setTimeout((function(){r.abort(),t({status:0,content:n,isTimedOut:!0})}),1e3*e)},a=i(e.connectTimeout,"Connection timeout");r.onreadystatechange=function(){r.readyState>r.OPENED&&void 0===n&&(clearTimeout(a),n=i(e.responseTimeout,"Socket timeout"))},r.onerror=function(){0===r.status&&(clearTimeout(a),clearTimeout(n),t({content:r.responseText||"Network request failed",status:r.status,isTimedOut:!1}))},r.onload=function(){clearTimeout(a),clearTimeout(n),t({content:r.responseText,status:r.status,isTimedOut:!1})},r.send(e.data)}))}},logger:(i=q,{debug:function(e,t){return D>=i&&console.debug(e,t),Promise.resolve()},info:function(e,t){return I>=i&&console.info(e,t),Promise.resolve()},error:function(e,t){return console.error(e,t),Promise.resolve()}}),responsesCache:u(),requestsCache:u({serializable:!1}),hostsCache:c({caches:[s({key:"".concat("4.15.0","-").concat(e)}),u()]}),userAgent:j("4.15.0").add({segment:"Browser",version:"lite"}),authMode:l.WithinQueryParameters};return N(r(r(r({},a),n),{},{methods:{search:S,searchForFacetValues:T,multipleQueries:S,multipleSearchForFacetValues:T,customRequest:A,initIndex:function(e){return function(t){return H(e)(t,{methods:{search:C,searchForFacetValues:k,findAnswers:Q}})}}}}))}return V.version="4.15.0",V}()},6675:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>z});var n=r(7294),i=r(6010),a=r(8131),s=r.n(a),c=r(290),u=r.n(c),o=r(412),h=r(5742),f=r(9960),l=r(143),m=r(2263);const d=["zero","one","two","few","many","other"];function p(e){return d.filter((t=>e.includes(t)))}const v={locale:"en",pluralForms:p(["one","other"]),select:e=>1===e?"one":"other"};function g(){const{i18n:{currentLocale:e}}=(0,m.Z)();return(0,n.useMemo)((()=>{try{return function(e){const t=new Intl.PluralRules(e);return{locale:e,pluralForms:p(t.resolvedOptions().pluralCategories),select:e=>t.select(e)}}(e)}catch(t){return console.error(`Failed to use Intl.PluralRules for locale "${e}".\nDocusaurus will fallback to the default (English) implementation.\nError: ${t.message}\n`),v}}),[e])}function y(){const e=g();return{selectMessage:(t,r)=>function(e,t,r){const n=e.split("|");if(1===n.length)return n[0];n.length>r.pluralForms.length&&console.error(`For locale=${r.locale}, a maximum of ${r.pluralForms.length} plural forms are expected (${r.pluralForms.join(",")}), but the message contains ${n.length}: ${e}`);const i=r.select(t),a=r.pluralForms.indexOf(i);return n[Math.min(a,n.length-1)]}(r,t,e)}}var R=r(6177),F=r(902),b=r(833),P=r(2128),_=r(5999),j=r(6278),E=r(239),x=r(6999);const w="searchQueryInput_u2C7",O="searchVersionInput_m0Ui",N="searchResultsColumn_JPFH",A="algoliaLogo_rT1R",H="algoliaLogoPathFill_WdUC",S="searchResultItem_Tv2o",T="searchResultItemHeading_KbCB",Q="searchResultItemPath_lhe1",C="searchResultItemSummary_AEaO",k="searchQueryColumn_RTkw",D="searchVersionColumn_ypXd",I="searchLogoColumn_rJIA",q="loadingSpinner_XVxU",V="loader_vvXV";function L(e){let{docsSearchVersionsHelpers:t}=e;const r=Object.entries(t.allDocsData).filter((e=>{let[,t]=e;return t.versions.length>1}));return n.createElement("div",{className:(0,i.Z)("col","col--3","padding-left--none",D)},r.map((e=>{let[i,a]=e;const s=r.length>1?`${i}: `:"";return n.createElement("select",{key:i,onChange:e=>t.setSearchVersion(i,e.target.value),defaultValue:t.searchVersions[i],className:O},a.versions.map(((e,t)=>n.createElement("option",{key:t,label:`${s}${e.label}`,value:e.name}))))})))}function B(){const{i18n:{currentLocale:e}}=(0,m.Z)(),{algolia:{appId:t,apiKey:r,indexName:a}}=(0,j.L)(),c=(0,E.l)(),d=function(){const{selectMessage:e}=y();return t=>e(t,(0,_.I)({id:"theme.SearchPage.documentsFound.plurals",description:'Pluralized label for "{count} documents found". Use as much plural forms (separated by "|") as your language support (see https://www.unicode.org/cldr/cldr-aux/charts/34/supplemental/language_plural_rules.html)',message:"One document found|{count} documents found"},{count:t}))}(),p=function(){const e=(0,l._r)(),[t,r]=(0,n.useState)((()=>Object.entries(e).reduce(((e,t)=>{let[r,n]=t;return{...e,[r]:n.versions[0].name}}),{}))),i=Object.values(e).some((e=>e.versions.length>1));return{allDocsData:e,versioningEnabled:i,searchVersions:t,setSearchVersion:(e,t)=>r((r=>({...r,[e]:t})))}}(),[v,g]=(0,R.K)(),b={items:[],query:null,totalResults:null,totalPages:null,lastPage:null,hasMore:null,loading:null},[O,D]=(0,n.useReducer)(((e,t)=>{switch(t.type){case"reset":return b;case"loading":return{...e,loading:!0};case"update":return v!==t.value.query?e:{...t.value,items:0===t.value.lastPage?t.value.items:e.items.concat(t.value.items)};case"advance":{const t=e.totalPages>e.lastPage+1;return{...e,lastPage:t?e.lastPage+1:e.lastPage,hasMore:t}}default:return e}}),b),B=u()(t,r),z=s()(B,a,{hitsPerPage:15,advancedSyntax:!0,disjunctiveFacets:["language","docusaurus_tag"]});z.on("result",(e=>{let{results:{query:t,hits:r,page:n,nbHits:i,nbPages:a}}=e;if(""===t||!Array.isArray(r))return void D({type:"reset"});const s=e=>e.replace(/algolia-docsearch-suggestion--highlight/g,"search-result-match"),u=r.map((e=>{let{url:t,_highlightResult:{hierarchy:r},_snippetResult:n={}}=e;const i=Object.keys(r).map((e=>s(r[e].value)));return{title:i.pop(),url:c(t),summary:n.content?`${s(n.content.value)}...`:"",breadcrumbs:i}}));D({type:"update",value:{items:u,query:t,totalResults:i,totalPages:a,lastPage:n,hasMore:a>n+1,loading:!1}})}));const[M,J]=(0,n.useState)(null),W=(0,n.useRef)(0),U=(0,n.useRef)(o.Z.canUseIntersectionObserver&&new IntersectionObserver((e=>{const{isIntersecting:t,boundingClientRect:{y:r}}=e[0];t&&W.current>r&&D({type:"advance"}),W.current=r}),{threshold:1})),Z=()=>v?(0,_.I)({id:"theme.SearchPage.existingResultsTitle",message:'Search results for "{query}"',description:"The search page title for non-empty query"},{query:v}):(0,_.I)({id:"theme.SearchPage.emptyResultsTitle",message:"Search the documentation",description:"The search page title for empty query"}),$=(0,F.zX)((function(t){void 0===t&&(t=0),z.addDisjunctiveFacetRefinement("docusaurus_tag","default"),z.addDisjunctiveFacetRefinement("language",e),Object.entries(p.searchVersions).forEach((e=>{let[t,r]=e;z.addDisjunctiveFacetRefinement("docusaurus_tag",`docs-${t}-${r}`)})),z.setQuery(v).setPage(t).search()}));return(0,n.useEffect)((()=>{if(!M)return;const e=U.current;return e?(e.observe(M),()=>e.unobserve(M)):()=>!0}),[M]),(0,n.useEffect)((()=>{D({type:"reset"}),v&&(D({type:"loading"}),setTimeout((()=>{$()}),300))}),[v,p.searchVersions,$]),(0,n.useEffect)((()=>{O.lastPage&&0!==O.lastPage&&$(O.lastPage)}),[$,O.lastPage]),n.createElement(x.Z,null,n.createElement(h.Z,null,n.createElement("title",null,(0,P.p)(Z())),n.createElement("meta",{property:"robots",content:"noindex, follow"})),n.createElement("div",{className:"container margin-vert--lg"},n.createElement("h1",null,Z()),n.createElement("form",{className:"row",onSubmit:e=>e.preventDefault()},n.createElement("div",{className:(0,i.Z)("col",k,{"col--9":p.versioningEnabled,"col--12":!p.versioningEnabled})},n.createElement("input",{type:"search",name:"q",className:w,placeholder:(0,_.I)({id:"theme.SearchPage.inputPlaceholder",message:"Type your search here",description:"The placeholder for search page input"}),"aria-label":(0,_.I)({id:"theme.SearchPage.inputLabel",message:"Search",description:"The ARIA label for search page input"}),onChange:e=>g(e.target.value),value:v,autoComplete:"off",autoFocus:!0})),p.versioningEnabled&&n.createElement(L,{docsSearchVersionsHelpers:p})),n.createElement("div",{className:"row"},n.createElement("div",{className:(0,i.Z)("col","col--8",N)},!!O.totalResults&&d(O.totalResults)),n.createElement("div",{className:(0,i.Z)("col","col--4","text--right",I)},n.createElement("a",{target:"_blank",rel:"noopener noreferrer",href:"https://www.algolia.com/","aria-label":(0,_.I)({id:"theme.SearchPage.algoliaLabel",message:"Search by Algolia",description:"The ARIA label for Algolia mention"})},n.createElement("svg",{viewBox:"0 0 168 24",className:A},n.createElement("g",{fill:"none"},n.createElement("path",{className:H,d:"M120.925 18.804c-4.386.02-4.386-3.54-4.386-4.106l-.007-13.336 2.675-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-10.846-2.18c.821 0 1.43-.047 1.855-.129v-2.719a6.334 6.334 0 0 0-1.574-.199 5.7 5.7 0 0 0-.897.069 2.699 2.699 0 0 0-.814.24c-.24.116-.439.28-.582.491-.15.212-.219.335-.219.656 0 .628.219.991.616 1.23s.938.362 1.615.362zm-.233-9.7c.883 0 1.629.109 2.231.328.602.218 1.088.525 1.444.915.363.396.609.922.76 1.483.157.56.232 1.175.232 1.85v6.874a32.5 32.5 0 0 1-1.868.314c-.834.123-1.772.185-2.813.185-.69 0-1.327-.069-1.895-.198a4.001 4.001 0 0 1-1.471-.636 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.803 0-.656.13-1.073.384-1.525a3.24 3.24 0 0 1 1.047-1.106c.445-.287.95-.492 1.532-.615a8.8 8.8 0 0 1 1.82-.185 8.404 8.404 0 0 1 1.972.24v-.438c0-.307-.035-.6-.11-.874a1.88 1.88 0 0 0-.384-.73 1.784 1.784 0 0 0-.724-.493 3.164 3.164 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.735 7.735 0 0 0-1.26.307l-.321-2.192c.335-.117.834-.233 1.478-.349a10.98 10.98 0 0 1 2.073-.178zm52.842 9.626c.822 0 1.43-.048 1.854-.13V13.7a6.347 6.347 0 0 0-1.574-.199c-.294 0-.595.021-.896.069a2.7 2.7 0 0 0-.814.24 1.46 1.46 0 0 0-.582.491c-.15.212-.218.335-.218.656 0 .628.218.991.615 1.23.404.245.938.362 1.615.362zm-.226-9.694c.883 0 1.629.108 2.231.327.602.219 1.088.526 1.444.915.355.39.609.923.759 1.483a6.8 6.8 0 0 1 .233 1.852v6.873c-.41.088-1.034.19-1.868.314-.834.123-1.772.184-2.813.184-.69 0-1.327-.068-1.895-.198a4.001 4.001 0 0 1-1.471-.635 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.804 0-.656.13-1.073.384-1.524.26-.45.608-.82 1.047-1.107.445-.286.95-.491 1.532-.614a8.803 8.803 0 0 1 2.751-.13c.329.034.671.096 1.04.185v-.437a3.3 3.3 0 0 0-.109-.875 1.873 1.873 0 0 0-.384-.731 1.784 1.784 0 0 0-.724-.492 3.165 3.165 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.75 7.75 0 0 0-1.26.307l-.321-2.193c.335-.116.834-.232 1.478-.348a11.633 11.633 0 0 1 2.073-.177zm-8.034-1.271a1.626 1.626 0 0 1-1.628-1.62c0-.895.725-1.62 1.628-1.62.904 0 1.63.725 1.63 1.62 0 .895-.733 1.62-1.63 1.62zm1.348 13.22h-2.689V7.27l2.69-.423v11.956zm-4.714 0c-4.386.02-4.386-3.54-4.386-4.107l-.008-13.336 2.676-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-8.698-5.903c0-1.156-.253-2.119-.746-2.788-.493-.677-1.183-1.01-2.067-1.01-.882 0-1.574.333-2.065 1.01-.493.676-.733 1.632-.733 2.788 0 1.168.246 1.953.74 2.63.492.683 1.183 1.018 2.066 1.018.882 0 1.574-.342 2.067-1.019.492-.683.738-1.46.738-2.63zm2.737-.007c0 .902-.13 1.584-.397 2.33a5.52 5.52 0 0 1-1.128 1.906 4.986 4.986 0 0 1-1.752 1.223c-.685.286-1.739.45-2.265.45-.528-.006-1.574-.157-2.252-.45a5.096 5.096 0 0 1-1.744-1.223c-.487-.527-.863-1.162-1.137-1.906a6.345 6.345 0 0 1-.41-2.33c0-.902.123-1.77.397-2.508a5.554 5.554 0 0 1 1.15-1.892 5.133 5.133 0 0 1 1.75-1.216c.679-.287 1.425-.423 2.232-.423.808 0 1.553.142 2.237.423a4.88 4.88 0 0 1 1.753 1.216 5.644 5.644 0 0 1 1.135 1.892c.287.738.431 1.606.431 2.508zm-20.138 0c0 1.12.246 2.363.738 2.882.493.52 1.13.78 1.91.78.424 0 .828-.062 1.204-.178.377-.116.677-.253.917-.417V9.33a10.476 10.476 0 0 0-1.766-.226c-.971-.028-1.71.37-2.23 1.004-.513.636-.773 1.75-.773 2.788zm7.438 5.274c0 1.824-.466 3.156-1.404 4.004-.936.846-2.367 1.27-4.296 1.27-.705 0-2.17-.137-3.34-.396l.431-2.118c.98.205 2.272.26 2.95.26 1.074 0 1.84-.219 2.299-.656.459-.437.684-1.086.684-1.948v-.437a8.07 8.07 0 0 1-1.047.397c-.43.13-.93.198-1.492.198-.739 0-1.41-.116-2.018-.349a4.206 4.206 0 0 1-1.567-1.025c-.431-.45-.774-1.017-1.013-1.694-.24-.677-.363-1.885-.363-2.773 0-.834.13-1.88.384-2.577.26-.696.629-1.298 1.129-1.796.493-.498 1.095-.881 1.8-1.162a6.605 6.605 0 0 1 2.428-.457c.87 0 1.67.109 2.45.24.78.129 1.444.265 1.985.415V18.17zM6.972 6.677v1.627c-.712-.446-1.52-.67-2.425-.67-.585 0-1.045.13-1.38.391a1.24 1.24 0 0 0-.502 1.03c0 .425.164.765.494 1.02.33.256.835.532 1.516.83.447.192.795.356 1.045.495.25.138.537.332.862.582.324.25.563.548.718.894.154.345.23.741.23 1.188 0 .947-.334 1.691-1.004 2.234-.67.542-1.537.814-2.601.814-1.18 0-2.16-.229-2.936-.686v-1.708c.84.628 1.814.942 2.92.942.585 0 1.048-.136 1.388-.407.34-.271.51-.646.51-1.125 0-.287-.1-.55-.302-.79-.203-.24-.42-.42-.655-.542-.234-.123-.585-.29-1.053-.503a61.27 61.27 0 0 1-.582-.271 13.67 13.67 0 0 1-.55-.287 4.275 4.275 0 0 1-.567-.351 6.92 6.92 0 0 1-.455-.4c-.18-.17-.31-.34-.39-.51-.08-.17-.155-.37-.224-.598a2.553 2.553 0 0 1-.104-.742c0-.915.333-1.638.998-2.17.664-.532 1.523-.798 2.576-.798.968 0 1.793.17 2.473.51zm7.468 5.696v-.287c-.022-.607-.187-1.088-.495-1.444-.309-.357-.75-.535-1.324-.535-.532 0-.99.194-1.373.583-.382.388-.622.949-.717 1.683h3.909zm1.005 2.792v1.404c-.596.34-1.383.51-2.362.51-1.255 0-2.255-.377-3-1.132-.744-.755-1.116-1.744-1.116-2.968 0-1.297.34-2.316 1.021-3.055.68-.74 1.548-1.11 2.6-1.11 1.033 0 1.852.323 2.458.966.606.644.91 1.572.91 2.784 0 .33-.033.676-.096 1.038h-5.314c.107.702.405 1.239.894 1.611.49.372 1.106.558 1.85.558.862 0 1.58-.202 2.155-.606zm6.605-1.77h-1.212c-.596 0-1.045.116-1.349.35-.303.234-.454.532-.454.894 0 .372.117.664.35.877.235.213.575.32 1.022.32.51 0 .912-.142 1.204-.424.293-.281.44-.651.44-1.108v-.91zm-4.068-2.554V9.325c.627-.361 1.457-.542 2.489-.542 2.116 0 3.175 1.026 3.175 3.08V17h-1.548v-.957c-.415.68-1.143 1.02-2.186 1.02-.766 0-1.38-.22-1.843-.661-.462-.442-.694-1.003-.694-1.684 0-.776.293-1.38.878-1.81.585-.431 1.404-.647 2.457-.647h1.34V11.8c0-.554-.133-.971-.399-1.253-.266-.282-.707-.423-1.324-.423a4.07 4.07 0 0 0-2.345.718zm9.333-1.93v1.42c.394-1 1.101-1.5 2.123-1.5.148 0 .313.016.494.048v1.531a1.885 1.885 0 0 0-.75-.143c-.542 0-.989.24-1.34.718-.351.479-.527 1.048-.527 1.707V17h-1.563V8.91h1.563zm5.01 4.084c.022.82.272 1.492.75 2.019.479.526 1.15.79 2.01.79.639 0 1.235-.176 1.788-.527v1.404c-.521.319-1.186.479-1.995.479-1.265 0-2.276-.4-3.031-1.197-.755-.798-1.133-1.792-1.133-2.984 0-1.16.38-2.151 1.14-2.975.761-.825 1.79-1.237 3.088-1.237.702 0 1.346.149 1.93.447v1.436a3.242 3.242 0 0 0-1.77-.495c-.84 0-1.513.266-2.019.798-.505.532-.758 1.213-.758 2.042zM40.24 5.72v4.579c.458-1 1.293-1.5 2.505-1.5.787 0 1.42.245 1.899.734.479.49.718 1.17.718 2.042V17h-1.564v-5.106c0-.553-.14-.98-.422-1.284-.282-.303-.652-.455-1.11-.455-.531 0-1.002.202-1.411.606-.41.405-.615 1.022-.615 1.851V17h-1.563V5.72h1.563zm14.966 10.02c.596 0 1.096-.253 1.5-.758.404-.506.606-1.157.606-1.955 0-.915-.202-1.62-.606-2.114-.404-.495-.92-.742-1.548-.742-.553 0-1.05.224-1.491.67-.442.447-.662 1.133-.662 2.058 0 .958.212 1.67.638 2.138.425.469.946.703 1.563.703zM53.004 5.72v4.42c.574-.894 1.388-1.341 2.44-1.341 1.022 0 1.857.383 2.506 1.149.649.766.973 1.781.973 3.047 0 1.138-.309 2.109-.925 2.912-.617.803-1.463 1.205-2.537 1.205-1.075 0-1.894-.447-2.457-1.34V17h-1.58V5.72h1.58zm9.908 11.104l-3.223-7.913h1.739l1.005 2.632 1.26 3.415c.096-.32.48-1.458 1.15-3.415l.909-2.632h1.66l-2.92 7.866c-.777 2.074-1.963 3.11-3.559 3.11a2.92 2.92 0 0 1-.734-.079v-1.34c.17.042.351.064.543.064 1.032 0 1.755-.57 2.17-1.708z"}),n.createElement("path",{fill:"#5468FF",d:"M78.988.938h16.594a2.968 2.968 0 0 1 2.966 2.966V20.5a2.967 2.967 0 0 1-2.966 2.964H78.988a2.967 2.967 0 0 1-2.966-2.964V3.897A2.961 2.961 0 0 1 78.988.938z"}),n.createElement("path",{fill:"white",d:"M89.632 5.967v-.772a.978.978 0 0 0-.978-.977h-2.28a.978.978 0 0 0-.978.977v.793c0 .088.082.15.171.13a7.127 7.127 0 0 1 1.984-.28c.65 0 1.295.088 1.917.259.082.02.164-.04.164-.13m-6.248 1.01l-.39-.389a.977.977 0 0 0-1.382 0l-.465.465a.973.973 0 0 0 0 1.38l.383.383c.062.061.15.047.205-.014.226-.307.472-.601.746-.874.281-.28.568-.526.883-.751.068-.042.075-.137.02-.2m4.16 2.453v3.341c0 .096.104.165.192.117l2.97-1.537c.068-.034.089-.117.055-.184a3.695 3.695 0 0 0-3.08-1.866c-.068 0-.136.054-.136.13m0 8.048a4.489 4.489 0 0 1-4.49-4.482 4.488 4.488 0 0 1 4.49-4.482 4.488 4.488 0 0 1 4.489 4.482 4.484 4.484 0 0 1-4.49 4.482m0-10.85a6.363 6.363 0 1 0 0 12.729 6.37 6.37 0 0 0 6.372-6.368 6.358 6.358 0 0 0-6.371-6.36"})))))),O.items.length>0?n.createElement("main",null,O.items.map(((e,t)=>{let{title:r,url:a,summary:s,breadcrumbs:c}=e;return n.createElement("article",{key:t,className:S},n.createElement("h2",{className:T},n.createElement(f.Z,{to:a,dangerouslySetInnerHTML:{__html:r}})),c.length>0&&n.createElement("nav",{"aria-label":"breadcrumbs"},n.createElement("ul",{className:(0,i.Z)("breadcrumbs",Q)},c.map(((e,t)=>n.createElement("li",{key:t,className:"breadcrumbs__item",dangerouslySetInnerHTML:{__html:e}}))))),s&&n.createElement("p",{className:C,dangerouslySetInnerHTML:{__html:s}}))}))):[v&&!O.loading&&n.createElement("p",{key:"no-results"},n.createElement(_.Z,{id:"theme.SearchPage.noResultsText",description:"The paragraph for empty search result"},"No results were found")),!!O.loading&&n.createElement("div",{key:"spinner",className:q})],O.hasMore&&n.createElement("div",{className:V,ref:J},n.createElement(_.Z,{id:"theme.SearchPage.fetchingNewResults",description:"The paragraph for fetching new search results"},"Fetching new results..."))))}function z(){return n.createElement(b.FG,{className:"search-page-wrapper"},n.createElement(B,null))}}}]);
\ No newline at end of file
diff --git a/assets/js/1a4e3797.ac674e56.js.LICENSE.txt b/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
deleted file mode 100644
index 698902548..000000000
--- a/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
+++ /dev/null
@@ -1 +0,0 @@
-/*! algoliasearch-lite.umd.js | 4.15.0 | © Algolia, inc. | https://github.com/algolia/algoliasearch-client-javascript */
diff --git a/assets/js/1be78505.1ff28fb4.js b/assets/js/1be78505.1ff28fb4.js
deleted file mode 100644
index a7b31c93a..000000000
--- a/assets/js/1be78505.1ff28fb4.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9514,4972],{9963:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Se});var a=n(7294),l=n(6010),o=n(833),r=n(5281),c=n(3320),i=n(3438),s=n(4477),d=n(1116),m=n(6999),u=n(5999),b=n(2466),p=n(5936);const h="backToTopButton_sjWU",E="backToTopButtonShow_xfvO";function f(){const{shown:e,scrollToTop:t}=function(e){let{threshold:t}=e;const[n,l]=(0,a.useState)(!1),o=(0,a.useRef)(!1),{startScroll:r,cancelScroll:c}=(0,b.Ct)();return(0,b.RF)(((e,n)=>{let{scrollY:a}=e;const r=n?.scrollY;r&&(o.current?o.current=!1:a>=r?(c(),l(!1)):a<t?l(!1):a+window.innerHeight<document.documentElement.scrollHeight&&l(!0))})),(0,p.S)((e=>{e.location.hash&&(o.current=!0,l(!1))})),{shown:n,scrollToTop:()=>r(0)}}({threshold:300});return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.BackToTopButton.buttonAriaLabel",message:"Scroll back to top",description:"The ARIA label for the back to top button"}),className:(0,l.Z)("clean-btn",r.k.common.backToTopButton,h,e&&E),type:"button",onClick:t})}var v=n(1442),_=n(6775),g=n(7524),k=n(6668),C=n(1327),S=n(3117);function I(e){return a.createElement("svg",(0,S.Z)({width:"20",height:"20","aria-hidden":"true"},e),a.createElement("g",{fill:"#7a7a7a"},a.createElement("path",{d:"M9.992 10.023c0 .2-.062.399-.172.547l-4.996 7.492a.982.982 0 01-.828.454H1c-.55 0-1-.453-1-1 0-.2.059-.403.168-.551l4.629-6.942L.168 3.078A.939.939 0 010 2.528c0-.548.45-.997 1-.997h2.996c.352 0 .649.18.828.45L9.82 9.472c.11.148.172.347.172.55zm0 0"}),a.createElement("path",{d:"M19.98 10.023c0 .2-.058.399-.168.547l-4.996 7.492a.987.987 0 01-.828.454h-3c-.547 0-.996-.453-.996-1 0-.2.059-.403.168-.551l4.625-6.942-4.625-6.945a.939.939 0 01-.168-.55 1 1 0 01.996-.997h3c.348 0 .649.18.828.45l4.996 7.492c.11.148.168.347.168.55zm0 0"})))}const N="collapseSidebarButton_PEFL",Z="collapseSidebarButtonIcon_kv0_";function x(e){let{onClick:t}=e;return a.createElement("button",{type:"button",title:(0,u.I)({id:"theme.docs.sidebar.collapseButtonTitle",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.collapseButtonAriaLabel",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),className:(0,l.Z)("button button--secondary button--outline",N),onClick:t},a.createElement(I,{className:Z}))}var T=n(9689),y=n(902);const w=Symbol("EmptyContext"),L=a.createContext(w);function A(e){let{children:t}=e;const[n,l]=(0,a.useState)(null),o=(0,a.useMemo)((()=>({expandedItem:n,setExpandedItem:l})),[n]);return a.createElement(L.Provider,{value:o},t)}var M=n(6043),B=n(8596),F=n(9960),H=n(2389);function P(e){let{categoryLabel:t,onClick:n}=e;return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel",message:"Toggle the collapsible sidebar category '{label}'",description:"The ARIA label to toggle the collapsible sidebar category"},{label:t}),type:"button",className:"clean-btn menu__caret",onClick:n})}function D(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{items:m,label:u,collapsible:b,className:p,href:h}=t,{docs:{sidebar:{autoCollapseCategories:E}}}=(0,k.L)(),f=function(e){const t=(0,H.Z)();return(0,a.useMemo)((()=>e.href?e.href:!t&&e.collapsible?(0,i.Wl)(e):void 0),[e,t])}(t),v=(0,i._F)(t,o),_=(0,B.Mg)(h,o),{collapsed:g,setCollapsed:C}=(0,M.u)({initialState:()=>!!b&&(!v&&t.collapsed)}),{expandedItem:I,setExpandedItem:N}=function(){const e=(0,a.useContext)(L);if(e===w)throw new y.i6("DocSidebarItemsExpandedStateProvider");return e}(),Z=function(e){void 0===e&&(e=!g),N(e?null:s),C(e)};return function(e){let{isActive:t,collapsed:n,updateCollapsed:l}=e;const o=(0,y.D9)(t);(0,a.useEffect)((()=>{t&&!o&&n&&l(!1)}),[t,o,n,l])}({isActive:v,collapsed:g,updateCollapsed:Z}),(0,a.useEffect)((()=>{b&&null!=I&&I!==s&&E&&C(!0)}),[b,I,s,C,E]),a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemCategory,r.k.docs.docSidebarItemCategoryLevel(c),"menu__list-item",{"menu__list-item--collapsed":g},p)},a.createElement("div",{className:(0,l.Z)("menu__list-item-collapsible",{"menu__list-item-collapsible--active":_})},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",{"menu__link--sublist":b,"menu__link--sublist-caret":!h&&b,"menu__link--active":v}),onClick:b?e=>{n?.(t),h?Z(!1):(e.preventDefault(),Z())}:()=>{n?.(t)},"aria-current":_?"page":void 0,"aria-expanded":b?!g:void 0,href:b?f??"#":f},d),u),h&&b&&a.createElement(P,{categoryLabel:u,onClick:e=>{e.preventDefault(),Z()}})),a.createElement(M.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:g},a.createElement(G,{items:m,tabIndex:g?-1:0,onItemClick:n,activePath:o,level:c+1})))}var W=n(3919),R=n(9471);const V="menuExternalLink_NmtK";function z(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{href:m,label:u,className:b,autoAddBaseUrl:p}=t,h=(0,i._F)(t,o),E=(0,W.Z)(m);return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(c),"menu__list-item",b),key:u},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",!E&&V,{"menu__link--active":h}),autoAddBaseUrl:p,"aria-current":h?"page":void 0,to:m},E&&{onClick:n?()=>n(t):void 0},d),u,!E&&a.createElement(R.Z,null)))}const U="menuHtmlItem_M9Kj";function K(e){let{item:t,level:n,index:o}=e;const{value:c,defaultStyle:i,className:s}=t;return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(n),i&&[U,"menu__list-item"],s),key:o,dangerouslySetInnerHTML:{__html:c}})}function j(e){let{item:t,...n}=e;switch(t.type){case"category":return a.createElement(D,(0,S.Z)({item:t},n));case"html":return a.createElement(K,(0,S.Z)({item:t},n));default:return a.createElement(z,(0,S.Z)({item:t},n))}}function q(e){let{items:t,...n}=e;return a.createElement(A,null,t.map(((e,t)=>a.createElement(j,(0,S.Z)({key:t,item:e,index:t},n)))))}const G=(0,a.memo)(q),Y="menu_SIkG",O="menuWithAnnouncementBar_GW3s";function X(e){let{path:t,sidebar:n,className:o}=e;const c=function(){const{isActive:e}=(0,T.nT)(),[t,n]=(0,a.useState)(e);return(0,b.RF)((t=>{let{scrollY:a}=t;e&&n(0===a)}),[e]),e&&t}();return a.createElement("nav",{"aria-label":(0,u.I)({id:"theme.docs.sidebar.navAriaLabel",message:"Docs sidebar",description:"The ARIA label for the sidebar navigation"}),className:(0,l.Z)("menu thin-scrollbar",Y,c&&O,o)},a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:n,activePath:t,level:1})))}const J="sidebar_njMd",Q="sidebarWithHideableNavbar_wUlq",$="sidebarHidden_VK0M",ee="sidebarLogo_isFc";function te(e){let{path:t,sidebar:n,onCollapse:o,isHidden:r}=e;const{navbar:{hideOnScroll:c},docs:{sidebar:{hideable:i}}}=(0,k.L)();return a.createElement("div",{className:(0,l.Z)(J,c&&Q,r&&$)},c&&a.createElement(C.Z,{tabIndex:-1,className:ee}),a.createElement(X,{path:t,sidebar:n}),i&&a.createElement(x,{onClick:o}))}const ne=a.memo(te);var ae=n(3102),le=n(3163);const oe=e=>{let{sidebar:t,path:n}=e;const o=(0,le.e)();return a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:t,activePath:n,onItemClick:e=>{"category"===e.type&&e.href&&o.toggle(),"link"===e.type&&o.toggle()},level:1}))};function re(e){return a.createElement(ae.Zo,{component:oe,props:e})}const ce=a.memo(re);function ie(e){const t=(0,g.i)(),n="desktop"===t||"ssr"===t,l="mobile"===t;return a.createElement(a.Fragment,null,n&&a.createElement(ne,e),l&&a.createElement(ce,e))}const se="expandButton_m80_",de="expandButtonIcon_BlDH";function me(e){let{toggleSidebar:t}=e;return a.createElement("div",{className:se,title:(0,u.I)({id:"theme.docs.sidebar.expandButtonTitle",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.expandButtonAriaLabel",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),tabIndex:0,role:"button",onKeyDown:t,onClick:t},a.createElement(I,{className:de}))}const ue={docSidebarContainer:"docSidebarContainer_b6E3",docSidebarContainerHidden:"docSidebarContainerHidden_b3ry",sidebarViewport:"sidebarViewport_Xe31"};function be(e){let{children:t}=e;const n=(0,d.V)();return a.createElement(a.Fragment,{key:n?.name??"noSidebar"},t)}function pe(e){let{sidebar:t,hiddenSidebarContainer:n,setHiddenSidebarContainer:o}=e;const{pathname:c}=(0,_.TH)(),[i,s]=(0,a.useState)(!1),d=(0,a.useCallback)((()=>{i&&s(!1),!i&&(0,v.n)()&&s(!0),o((e=>!e))}),[o,i]);return a.createElement("aside",{className:(0,l.Z)(r.k.docs.docSidebarContainer,ue.docSidebarContainer,n&&ue.docSidebarContainerHidden),onTransitionEnd:e=>{e.currentTarget.classList.contains(ue.docSidebarContainer)&&n&&s(!0)}},a.createElement(be,null,a.createElement("div",{className:(0,l.Z)(ue.sidebarViewport,i&&ue.sidebarViewportHidden)},a.createElement(ie,{sidebar:t,path:c,onCollapse:d,isHidden:i}),i&&a.createElement(me,{toggleSidebar:d}))))}const he={docMainContainer:"docMainContainer_gTbr",docMainContainerEnhanced:"docMainContainerEnhanced_Uz_u",docItemWrapperEnhanced:"docItemWrapperEnhanced_czyv"};function Ee(e){let{hiddenSidebarContainer:t,children:n}=e;const o=(0,d.V)();return a.createElement("main",{className:(0,l.Z)(he.docMainContainer,(t||!o)&&he.docMainContainerEnhanced)},a.createElement("div",{className:(0,l.Z)("container padding-top--md padding-bottom--lg",he.docItemWrapper,t&&he.docItemWrapperEnhanced)},n))}const fe="docPage__5DB",ve="docsWrapper_BCFX";function _e(e){let{children:t}=e;const n=(0,d.V)(),[l,o]=(0,a.useState)(!1);return a.createElement(m.Z,{wrapperClassName:ve},a.createElement(f,null),a.createElement("div",{className:fe},n&&a.createElement(pe,{sidebar:n.items,hiddenSidebarContainer:l,setHiddenSidebarContainer:o}),a.createElement(Ee,{hiddenSidebarContainer:l},t)))}var ge=n(4972),ke=n(197);function Ce(e){const{versionMetadata:t}=e;return a.createElement(a.Fragment,null,a.createElement(ke.Z,{version:t.version,tag:(0,c.os)(t.pluginId,t.version)}),a.createElement(o.d,null,t.noIndex&&a.createElement("meta",{name:"robots",content:"noindex, nofollow"})))}function Se(e){const{versionMetadata:t}=e,n=(0,i.hI)(e);if(!n)return a.createElement(ge.default,null);const{docElement:c,sidebarName:m,sidebarItems:u}=n;return a.createElement(a.Fragment,null,a.createElement(Ce,e),a.createElement(o.FG,{className:(0,l.Z)(r.k.wrapper.docsPages,r.k.page.docsDocPage,e.versionMetadata.className)},a.createElement(s.q,{version:t},a.createElement(d.b,{name:m,items:u},a.createElement(_e,null,c)))))}},4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(833),r=n(6999);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}},4477:(e,t,n)=>{n.d(t,{E:()=>c,q:()=>r});var a=n(7294),l=n(902);const o=a.createContext(null);function r(e){let{children:t,version:n}=e;return a.createElement(o.Provider,{value:n},t)}function c(){const e=(0,a.useContext)(o);if(null===e)throw new l.i6("DocsVersionProvider");return e}}}]);
\ No newline at end of file
diff --git a/assets/js/1be78505.3b555d49.js b/assets/js/1be78505.3b555d49.js
new file mode 100644
index 000000000..d0dd4f40c
--- /dev/null
+++ b/assets/js/1be78505.3b555d49.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9514,4972],{9963:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Se});var a=n(7294),l=n(6010),o=n(1944),r=n(5281),c=n(3320),i=n(3438),s=n(4477),d=n(1116),m=n(1573),u=n(5999),b=n(2466),p=n(5936);const h="backToTopButton_sjWU",E="backToTopButtonShow_xfvO";function f(){const{shown:e,scrollToTop:t}=function(e){let{threshold:t}=e;const[n,l]=(0,a.useState)(!1),o=(0,a.useRef)(!1),{startScroll:r,cancelScroll:c}=(0,b.Ct)();return(0,b.RF)(((e,n)=>{let{scrollY:a}=e;const r=n?.scrollY;r&&(o.current?o.current=!1:a>=r?(c(),l(!1)):a<t?l(!1):a+window.innerHeight<document.documentElement.scrollHeight&&l(!0))})),(0,p.S)((e=>{e.location.hash&&(o.current=!0,l(!1))})),{shown:n,scrollToTop:()=>r(0)}}({threshold:300});return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.BackToTopButton.buttonAriaLabel",message:"Scroll back to top",description:"The ARIA label for the back to top button"}),className:(0,l.Z)("clean-btn",r.k.common.backToTopButton,h,e&&E),type:"button",onClick:t})}var v=n(1442),_=n(6775),g=n(7524),k=n(6668),C=n(1327),S=n(3117);function I(e){return a.createElement("svg",(0,S.Z)({width:"20",height:"20","aria-hidden":"true"},e),a.createElement("g",{fill:"#7a7a7a"},a.createElement("path",{d:"M9.992 10.023c0 .2-.062.399-.172.547l-4.996 7.492a.982.982 0 01-.828.454H1c-.55 0-1-.453-1-1 0-.2.059-.403.168-.551l4.629-6.942L.168 3.078A.939.939 0 010 2.528c0-.548.45-.997 1-.997h2.996c.352 0 .649.18.828.45L9.82 9.472c.11.148.172.347.172.55zm0 0"}),a.createElement("path",{d:"M19.98 10.023c0 .2-.058.399-.168.547l-4.996 7.492a.987.987 0 01-.828.454h-3c-.547 0-.996-.453-.996-1 0-.2.059-.403.168-.551l4.625-6.942-4.625-6.945a.939.939 0 01-.168-.55 1 1 0 01.996-.997h3c.348 0 .649.18.828.45l4.996 7.492c.11.148.168.347.168.55zm0 0"})))}const N="collapseSidebarButton_PEFL",Z="collapseSidebarButtonIcon_kv0_";function x(e){let{onClick:t}=e;return a.createElement("button",{type:"button",title:(0,u.I)({id:"theme.docs.sidebar.collapseButtonTitle",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.collapseButtonAriaLabel",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),className:(0,l.Z)("button button--secondary button--outline",N),onClick:t},a.createElement(I,{className:Z}))}var T=n(9689),y=n(902);const w=Symbol("EmptyContext"),L=a.createContext(w);function A(e){let{children:t}=e;const[n,l]=(0,a.useState)(null),o=(0,a.useMemo)((()=>({expandedItem:n,setExpandedItem:l})),[n]);return a.createElement(L.Provider,{value:o},t)}var M=n(6043),B=n(8596),F=n(9960),H=n(2389);function P(e){let{categoryLabel:t,onClick:n}=e;return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel",message:"Toggle the collapsible sidebar category '{label}'",description:"The ARIA label to toggle the collapsible sidebar category"},{label:t}),type:"button",className:"clean-btn menu__caret",onClick:n})}function D(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{items:m,label:u,collapsible:b,className:p,href:h}=t,{docs:{sidebar:{autoCollapseCategories:E}}}=(0,k.L)(),f=function(e){const t=(0,H.Z)();return(0,a.useMemo)((()=>e.href?e.href:!t&&e.collapsible?(0,i.Wl)(e):void 0),[e,t])}(t),v=(0,i._F)(t,o),_=(0,B.Mg)(h,o),{collapsed:g,setCollapsed:C}=(0,M.u)({initialState:()=>!!b&&(!v&&t.collapsed)}),{expandedItem:I,setExpandedItem:N}=function(){const e=(0,a.useContext)(L);if(e===w)throw new y.i6("DocSidebarItemsExpandedStateProvider");return e}(),Z=function(e){void 0===e&&(e=!g),N(e?null:s),C(e)};return function(e){let{isActive:t,collapsed:n,updateCollapsed:l}=e;const o=(0,y.D9)(t);(0,a.useEffect)((()=>{t&&!o&&n&&l(!1)}),[t,o,n,l])}({isActive:v,collapsed:g,updateCollapsed:Z}),(0,a.useEffect)((()=>{b&&null!=I&&I!==s&&E&&C(!0)}),[b,I,s,C,E]),a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemCategory,r.k.docs.docSidebarItemCategoryLevel(c),"menu__list-item",{"menu__list-item--collapsed":g},p)},a.createElement("div",{className:(0,l.Z)("menu__list-item-collapsible",{"menu__list-item-collapsible--active":_})},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",{"menu__link--sublist":b,"menu__link--sublist-caret":!h&&b,"menu__link--active":v}),onClick:b?e=>{n?.(t),h?Z(!1):(e.preventDefault(),Z())}:()=>{n?.(t)},"aria-current":_?"page":void 0,"aria-expanded":b?!g:void 0,href:b?f??"#":f},d),u),h&&b&&a.createElement(P,{categoryLabel:u,onClick:e=>{e.preventDefault(),Z()}})),a.createElement(M.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:g},a.createElement(G,{items:m,tabIndex:g?-1:0,onItemClick:n,activePath:o,level:c+1})))}var W=n(3919),R=n(9471);const V="menuExternalLink_NmtK";function z(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{href:m,label:u,className:b,autoAddBaseUrl:p}=t,h=(0,i._F)(t,o),E=(0,W.Z)(m);return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(c),"menu__list-item",b),key:u},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",!E&&V,{"menu__link--active":h}),autoAddBaseUrl:p,"aria-current":h?"page":void 0,to:m},E&&{onClick:n?()=>n(t):void 0},d),u,!E&&a.createElement(R.Z,null)))}const U="menuHtmlItem_M9Kj";function K(e){let{item:t,level:n,index:o}=e;const{value:c,defaultStyle:i,className:s}=t;return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(n),i&&[U,"menu__list-item"],s),key:o,dangerouslySetInnerHTML:{__html:c}})}function j(e){let{item:t,...n}=e;switch(t.type){case"category":return a.createElement(D,(0,S.Z)({item:t},n));case"html":return a.createElement(K,(0,S.Z)({item:t},n));default:return a.createElement(z,(0,S.Z)({item:t},n))}}function q(e){let{items:t,...n}=e;return a.createElement(A,null,t.map(((e,t)=>a.createElement(j,(0,S.Z)({key:t,item:e,index:t},n)))))}const G=(0,a.memo)(q),Y="menu_SIkG",O="menuWithAnnouncementBar_GW3s";function X(e){let{path:t,sidebar:n,className:o}=e;const c=function(){const{isActive:e}=(0,T.nT)(),[t,n]=(0,a.useState)(e);return(0,b.RF)((t=>{let{scrollY:a}=t;e&&n(0===a)}),[e]),e&&t}();return a.createElement("nav",{"aria-label":(0,u.I)({id:"theme.docs.sidebar.navAriaLabel",message:"Docs sidebar",description:"The ARIA label for the sidebar navigation"}),className:(0,l.Z)("menu thin-scrollbar",Y,c&&O,o)},a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:n,activePath:t,level:1})))}const J="sidebar_njMd",Q="sidebarWithHideableNavbar_wUlq",$="sidebarHidden_VK0M",ee="sidebarLogo_isFc";function te(e){let{path:t,sidebar:n,onCollapse:o,isHidden:r}=e;const{navbar:{hideOnScroll:c},docs:{sidebar:{hideable:i}}}=(0,k.L)();return a.createElement("div",{className:(0,l.Z)(J,c&&Q,r&&$)},c&&a.createElement(C.Z,{tabIndex:-1,className:ee}),a.createElement(X,{path:t,sidebar:n}),i&&a.createElement(x,{onClick:o}))}const ne=a.memo(te);var ae=n(3102),le=n(3163);const oe=e=>{let{sidebar:t,path:n}=e;const o=(0,le.e)();return a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:t,activePath:n,onItemClick:e=>{"category"===e.type&&e.href&&o.toggle(),"link"===e.type&&o.toggle()},level:1}))};function re(e){return a.createElement(ae.Zo,{component:oe,props:e})}const ce=a.memo(re);function ie(e){const t=(0,g.i)(),n="desktop"===t||"ssr"===t,l="mobile"===t;return a.createElement(a.Fragment,null,n&&a.createElement(ne,e),l&&a.createElement(ce,e))}const se="expandButton_m80_",de="expandButtonIcon_BlDH";function me(e){let{toggleSidebar:t}=e;return a.createElement("div",{className:se,title:(0,u.I)({id:"theme.docs.sidebar.expandButtonTitle",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.expandButtonAriaLabel",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),tabIndex:0,role:"button",onKeyDown:t,onClick:t},a.createElement(I,{className:de}))}const ue={docSidebarContainer:"docSidebarContainer_b6E3",docSidebarContainerHidden:"docSidebarContainerHidden_b3ry",sidebarViewport:"sidebarViewport_Xe31"};function be(e){let{children:t}=e;const n=(0,d.V)();return a.createElement(a.Fragment,{key:n?.name??"noSidebar"},t)}function pe(e){let{sidebar:t,hiddenSidebarContainer:n,setHiddenSidebarContainer:o}=e;const{pathname:c}=(0,_.TH)(),[i,s]=(0,a.useState)(!1),d=(0,a.useCallback)((()=>{i&&s(!1),!i&&(0,v.n)()&&s(!0),o((e=>!e))}),[o,i]);return a.createElement("aside",{className:(0,l.Z)(r.k.docs.docSidebarContainer,ue.docSidebarContainer,n&&ue.docSidebarContainerHidden),onTransitionEnd:e=>{e.currentTarget.classList.contains(ue.docSidebarContainer)&&n&&s(!0)}},a.createElement(be,null,a.createElement("div",{className:(0,l.Z)(ue.sidebarViewport,i&&ue.sidebarViewportHidden)},a.createElement(ie,{sidebar:t,path:c,onCollapse:d,isHidden:i}),i&&a.createElement(me,{toggleSidebar:d}))))}const he={docMainContainer:"docMainContainer_gTbr",docMainContainerEnhanced:"docMainContainerEnhanced_Uz_u",docItemWrapperEnhanced:"docItemWrapperEnhanced_czyv"};function Ee(e){let{hiddenSidebarContainer:t,children:n}=e;const o=(0,d.V)();return a.createElement("main",{className:(0,l.Z)(he.docMainContainer,(t||!o)&&he.docMainContainerEnhanced)},a.createElement("div",{className:(0,l.Z)("container padding-top--md padding-bottom--lg",he.docItemWrapper,t&&he.docItemWrapperEnhanced)},n))}const fe="docPage__5DB",ve="docsWrapper_BCFX";function _e(e){let{children:t}=e;const n=(0,d.V)(),[l,o]=(0,a.useState)(!1);return a.createElement(m.Z,{wrapperClassName:ve},a.createElement(f,null),a.createElement("div",{className:fe},n&&a.createElement(pe,{sidebar:n.items,hiddenSidebarContainer:l,setHiddenSidebarContainer:o}),a.createElement(Ee,{hiddenSidebarContainer:l},t)))}var ge=n(4972),ke=n(197);function Ce(e){const{versionMetadata:t}=e;return a.createElement(a.Fragment,null,a.createElement(ke.Z,{version:t.version,tag:(0,c.os)(t.pluginId,t.version)}),a.createElement(o.d,null,t.noIndex&&a.createElement("meta",{name:"robots",content:"noindex, nofollow"})))}function Se(e){const{versionMetadata:t}=e,n=(0,i.hI)(e);if(!n)return a.createElement(ge.default,null);const{docElement:c,sidebarName:m,sidebarItems:u}=n;return a.createElement(a.Fragment,null,a.createElement(Ce,e),a.createElement(o.FG,{className:(0,l.Z)(r.k.wrapper.docsPages,r.k.page.docsDocPage,e.versionMetadata.className)},a.createElement(s.q,{version:t},a.createElement(d.b,{name:m,items:u},a.createElement(_e,null,c)))))}},4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(1944),r=n(1573);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}},4477:(e,t,n)=>{n.d(t,{E:()=>c,q:()=>r});var a=n(7294),l=n(902);const o=a.createContext(null);function r(e){let{children:t,version:n}=e;return a.createElement(o.Provider,{value:n},t)}function c(){const e=(0,a.useContext)(o);if(null===e)throw new l.i6("DocsVersionProvider");return e}}}]);
\ No newline at end of file
diff --git a/assets/js/1be8dcfa.58f2734d.js b/assets/js/1be8dcfa.11fa3a69.js
similarity index 99%
rename from assets/js/1be8dcfa.58f2734d.js
rename to assets/js/1be8dcfa.11fa3a69.js
index bb8f548de..72565fad8 100644
--- a/assets/js/1be8dcfa.58f2734d.js
+++ b/assets/js/1be8dcfa.11fa3a69.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7628],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function l(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){l(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,l=function(e,t){if(null==e)return{};var n,a,l={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(l[n]=e[n]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(l[n]=e[n])}return l}var d=a.createContext({}),p=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(d.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var n=e.components,l=e.mdxType,r=e.originalType,d=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),k=p(n),m=l,g=k["".concat(d,".").concat(m)]||k[m]||s[m]||r;return n?a.createElement(g,i(i({ref:t},u),{},{components:n})):a.createElement(g,i({ref:t},u))}));function m(e,t){var n=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=n.length,i=new Array(r);i[0]=k;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var p=2;p<r;p++)i[p]=n[p];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},1152:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>s,frontMatter:()=>r,metadata:()=>o,toc:()=>p});var a=n(3117),l=(n(7294),n(3905));const r={title:"agent",weight:2},i="k3s agent",o={unversionedId:"cli/agent",id:"cli/agent",title:"agent",description:"In this section, you'll learn how to configure the K3s agent.",source:"@site/docs/cli/agent.md",sourceDirName:"cli",slug:"/cli/agent",permalink:"/cli/agent",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"agent",weight:2},sidebar:"mySidebar",previous:{title:"server",permalink:"/cli/server"},next:{title:"certificate",permalink:"/cli/certificate"}},d={},p=[{value:"Logging",id:"logging",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Data",id:"data",level:3},{value:"Node",id:"node",level:3},{value:"Runtime",id:"runtime",level:3},{value:"Networking",id:"networking",level:3},{value:"Customized Flags",id:"customized-flags",level:3},{value:"Experimental",id:"experimental",level:3},{value:"Deprecated",id:"deprecated",level:3},{value:"Node Labels and Taints for Agents",id:"node-labels-and-taints-for-agents",level:3},{value:"K3s Agent CLI Help",id:"k3s-agent-cli-help",level:3}],u={toc:p};function s(e){let{components:t,...n}=e;return(0,l.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("h1",{id:"k3s-agent"},"k3s agent"),(0,l.kt)("p",null,"In this section, you'll learn how to configure the K3s agent."),(0,l.kt)("p",null,"Note that servers also run an agent, so all flags listed on this page are also valid for use on servers."),(0,l.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,l.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,l.kt)("h3",{id:"logging"},"Logging"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Default"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0"),(0,l.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,l.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token value, -t")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"Token to use for authentication")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"Token file to use for authentication")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--server value, -s")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,l.kt)("td",{parentName:"tr",align:null},"Server to connect to")))),(0,l.kt)("h3",{id:"data"},"Data"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Default"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/var/lib/rancher/k3s"'),(0,l.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,l.kt)("h3",{id:"node"},"Node"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-name")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_NODE_NAME")),(0,l.kt)("td",{parentName:"tr",align:null},"Node name")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--with-node-id")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Append id to node name")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-label")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Registering and starting kubelet with set of labels")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-taint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Registering kubelet with set of taints")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--protect-kernel-defaults")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--selinux")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_SELINUX")),(0,l.kt)("td",{parentName:"tr",align:null},"Enable SELinux in containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--lb-server-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_LB_SERVER_PORT")),(0,l.kt)("td",{parentName:"tr",align:null},"Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)")))),(0,l.kt)("h3",{id:"runtime"},"Runtime"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Default"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--container-runtime-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--pause-image")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"docker.io/rancher/pause:3.1"'),(0,l.kt)("td",{parentName:"tr",align:null},"Customized pause image for containerd or docker sandbox")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--private-registry")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/etc/rancher/k3s/registries.yaml"'),(0,l.kt)("td",{parentName:"tr",align:null},"Private registry configuration file")))),(0,l.kt)("h3",{id:"networking"},"Networking"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-ip value, -i")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"IP address to advertise for node")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"External IP address to advertise for node")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--resolv-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_RESOLV_CONF")),(0,l.kt)("td",{parentName:"tr",align:null},"Kubelet resolv.conf file")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-iface")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Override default flannel interface")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Override default flannel config file")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-cni-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Override default flannel cni config file")))),(0,l.kt)("h3",{id:"customized-flags"},"Customized Flags"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,l.kt)("h3",{id:"experimental"},"Experimental"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,l.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--docker")),(0,l.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,l.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")))),(0,l.kt)("h3",{id:"deprecated"},"Deprecated"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Use ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,l.kt)("td",{parentName:"tr",align:null},"Use ",(0,l.kt)("inlineCode",{parentName:"td"},"--token"))))),(0,l.kt)("h3",{id:"node-labels-and-taints-for-agents"},"Node Labels and Taints for Agents"),(0,l.kt)("p",null,"K3s agents can be configured with the options ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-label")," and ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-taint")," which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands."),(0,l.kt)("p",null,"Below is an example showing how to add labels and a taint:"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"     --node-label foo=bar \\\n     --node-label hello=world \\\n     --node-taint key1=value1:NoExecute\n")),(0,l.kt)("p",null,"If you want to change node labels and taints after node registration you should use ",(0,l.kt)("inlineCode",{parentName:"p"},"kubectl"),". Refer to the official Kubernetes documentation for details on how to add ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"taints")," and ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"node labels.")),(0,l.kt)("h3",{id:"k3s-agent-cli-help"},"K3s Agent CLI Help"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,l.kt)("inlineCode",{parentName:"p"},"[$K3S_URL]"),", it means that the option can be passed in as an environment variable of that name.")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s agent - Run node agent\n\nUSAGE:\n   k3s agent [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --token value, -t value                    (cluster) Token to use for authentication [$K3S_TOKEN]\n   --token-file value                         (cluster) Token file to use for authentication [$K3S_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to [$K3S_URL]\n   --data-dir value, -d value                 (agent/data) Folder to hold state (default: "/var/lib/rancher/k3s")\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n')))}s.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7628],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function l(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){l(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,l=function(e,t){if(null==e)return{};var n,a,l={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(l[n]=e[n]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(l[n]=e[n])}return l}var d=a.createContext({}),p=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(d.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var n=e.components,l=e.mdxType,r=e.originalType,d=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),k=p(n),m=l,g=k["".concat(d,".").concat(m)]||k[m]||s[m]||r;return n?a.createElement(g,i(i({ref:t},u),{},{components:n})):a.createElement(g,i({ref:t},u))}));function m(e,t){var n=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=n.length,i=new Array(r);i[0]=k;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var p=2;p<r;p++)i[p]=n[p];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},1152:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>s,frontMatter:()=>r,metadata:()=>o,toc:()=>p});var a=n(3117),l=(n(7294),n(3905));const r={title:"agent",weight:2},i="k3s agent",o={unversionedId:"cli/agent",id:"cli/agent",title:"agent",description:"In this section, you'll learn how to configure the K3s agent.",source:"@site/docs/cli/agent.md",sourceDirName:"cli",slug:"/cli/agent",permalink:"/cli/agent",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"agent",weight:2},sidebar:"mySidebar",previous:{title:"server",permalink:"/cli/server"},next:{title:"certificate",permalink:"/cli/certificate"}},d={},p=[{value:"Logging",id:"logging",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Data",id:"data",level:3},{value:"Node",id:"node",level:3},{value:"Runtime",id:"runtime",level:3},{value:"Networking",id:"networking",level:3},{value:"Customized Flags",id:"customized-flags",level:3},{value:"Experimental",id:"experimental",level:3},{value:"Deprecated",id:"deprecated",level:3},{value:"Node Labels and Taints for Agents",id:"node-labels-and-taints-for-agents",level:3},{value:"K3s Agent CLI Help",id:"k3s-agent-cli-help",level:3}],u={toc:p};function s(e){let{components:t,...n}=e;return(0,l.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("h1",{id:"k3s-agent"},"k3s agent"),(0,l.kt)("p",null,"In this section, you'll learn how to configure the K3s agent."),(0,l.kt)("p",null,"Note that servers also run an agent, so all flags listed on this page are also valid for use on servers."),(0,l.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,l.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,l.kt)("h3",{id:"logging"},"Logging"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Default"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0"),(0,l.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,l.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token value, -t")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"Token to use for authentication")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"Token file to use for authentication")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--server value, -s")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,l.kt)("td",{parentName:"tr",align:null},"Server to connect to")))),(0,l.kt)("h3",{id:"data"},"Data"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Default"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/var/lib/rancher/k3s"'),(0,l.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,l.kt)("h3",{id:"node"},"Node"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-name")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_NODE_NAME")),(0,l.kt)("td",{parentName:"tr",align:null},"Node name")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--with-node-id")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Append id to node name")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-label")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Registering and starting kubelet with set of labels")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-taint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Registering kubelet with set of taints")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--protect-kernel-defaults")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--selinux")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_SELINUX")),(0,l.kt)("td",{parentName:"tr",align:null},"Enable SELinux in containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--lb-server-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_LB_SERVER_PORT")),(0,l.kt)("td",{parentName:"tr",align:null},"Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)")))),(0,l.kt)("h3",{id:"runtime"},"Runtime"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Default"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--container-runtime-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--pause-image")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"docker.io/rancher/pause:3.1"'),(0,l.kt)("td",{parentName:"tr",align:null},"Customized pause image for containerd or docker sandbox")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--private-registry")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/etc/rancher/k3s/registries.yaml"'),(0,l.kt)("td",{parentName:"tr",align:null},"Private registry configuration file")))),(0,l.kt)("h3",{id:"networking"},"Networking"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-ip value, -i")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"IP address to advertise for node")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"External IP address to advertise for node")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--resolv-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_RESOLV_CONF")),(0,l.kt)("td",{parentName:"tr",align:null},"Kubelet resolv.conf file")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-iface")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Override default flannel interface")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Override default flannel config file")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-cni-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Override default flannel cni config file")))),(0,l.kt)("h3",{id:"customized-flags"},"Customized Flags"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,l.kt)("h3",{id:"experimental"},"Experimental"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,l.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--docker")),(0,l.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,l.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")))),(0,l.kt)("h3",{id:"deprecated"},"Deprecated"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"Flag"),(0,l.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,l.kt)("th",{parentName:"tr",align:null},"Description"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"Use ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,l.kt)("td",{parentName:"tr",align:null},"Use ",(0,l.kt)("inlineCode",{parentName:"td"},"--token"))))),(0,l.kt)("h3",{id:"node-labels-and-taints-for-agents"},"Node Labels and Taints for Agents"),(0,l.kt)("p",null,"K3s agents can be configured with the options ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-label")," and ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-taint")," which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands."),(0,l.kt)("p",null,"Below is an example showing how to add labels and a taint:"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"     --node-label foo=bar \\\n     --node-label hello=world \\\n     --node-taint key1=value1:NoExecute\n")),(0,l.kt)("p",null,"If you want to change node labels and taints after node registration you should use ",(0,l.kt)("inlineCode",{parentName:"p"},"kubectl"),". Refer to the official Kubernetes documentation for details on how to add ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"taints")," and ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"node labels.")),(0,l.kt)("h3",{id:"k3s-agent-cli-help"},"K3s Agent CLI Help"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,l.kt)("inlineCode",{parentName:"p"},"[$K3S_URL]"),", it means that the option can be passed in as an environment variable of that name.")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s agent - Run node agent\n\nUSAGE:\n   k3s agent [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --token value, -t value                    (cluster) Token to use for authentication [$K3S_TOKEN]\n   --token-file value                         (cluster) Token file to use for authentication [$K3S_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to [$K3S_URL]\n   --data-dir value, -d value                 (agent/data) Folder to hold state (default: "/var/lib/rancher/k3s")\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n')))}s.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/1e924268.e30a7637.js b/assets/js/1e924268.a09c9809.js
similarity index 97%
rename from assets/js/1e924268.e30a7637.js
rename to assets/js/1e924268.a09c9809.js
index 92fa3a699..1ae06b548 100644
--- a/assets/js/1e924268.e30a7637.js
+++ b/assets/js/1e924268.a09c9809.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8614],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),d=p(n),m=a,f=d["".concat(s,".").concat(m)]||d[m]||u[m]||i;return n?r.createElement(f,o(o({ref:t},c),{},{components:n})):r.createElement(f,o({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,o=new Array(i);o[0]=d;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,o[1]=l;for(var p=2;p<i;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},4686:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const i={title:"Installation",weight:20},o=void 0,l={unversionedId:"installation/installation",id:"installation/installation",title:"Installation",description:"This section contains instructions for installing K3s in various environments. Please ensure you have met the Requirements before you begin installing K3s.",source:"@site/docs/installation/installation.md",sourceDirName:"installation",slug:"/installation/",permalink:"/installation/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Installation",weight:20},sidebar:"mySidebar",previous:{title:"Quick-Start Guide",permalink:"/quick-start/"},next:{title:"Requirements",permalink:"/installation/requirements"}},s={},p=[],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"This section contains instructions for installing K3s in various environments. Please ensure you have met the ",(0,a.kt)("a",{parentName:"p",href:"/installation/requirements"},"Requirements")," before you begin installing K3s."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/configuration"},"Configuration Options")," provides guidance on the options available to you when installing K3s."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/network-options"},"Network Options")," provides guidance on the networking options available in k3s."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/airgap"},"Air-Gap Installation")," details how to set up K3s in environments that do not have direct access to the Internet."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/server-roles"},"Managing Server Roles")," details how to set up K3s with dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," or ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," servers."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/packaged-components"},"Managing Packaged Components")," details how to disable packaged components, or install your own using auto-deploying manifests."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8614],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),d=p(n),m=a,f=d["".concat(s,".").concat(m)]||d[m]||u[m]||i;return n?r.createElement(f,o(o({ref:t},c),{},{components:n})):r.createElement(f,o({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,o=new Array(i);o[0]=d;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,o[1]=l;for(var p=2;p<i;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},4686:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const i={title:"Installation",weight:20},o=void 0,l={unversionedId:"installation/installation",id:"installation/installation",title:"Installation",description:"This section contains instructions for installing K3s in various environments. Please ensure you have met the Requirements before you begin installing K3s.",source:"@site/docs/installation/installation.md",sourceDirName:"installation",slug:"/installation/",permalink:"/installation/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Installation",weight:20},sidebar:"mySidebar",previous:{title:"Quick-Start Guide",permalink:"/quick-start/"},next:{title:"Requirements",permalink:"/installation/requirements"}},s={},p=[],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"This section contains instructions for installing K3s in various environments. Please ensure you have met the ",(0,a.kt)("a",{parentName:"p",href:"/installation/requirements"},"Requirements")," before you begin installing K3s."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/configuration"},"Configuration Options")," provides guidance on the options available to you when installing K3s."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/network-options"},"Network Options")," provides guidance on the networking options available in k3s."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/airgap"},"Air-Gap Installation")," details how to set up K3s in environments that do not have direct access to the Internet."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/server-roles"},"Managing Server Roles")," details how to set up K3s with dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," or ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," servers."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/installation/packaged-components"},"Managing Packaged Components")," details how to disable packaged components, or install your own using auto-deploying manifests."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/2a65762c.c428effd.js b/assets/js/2a65762c.ed54d27f.js
similarity index 99%
rename from assets/js/2a65762c.c428effd.js
rename to assets/js/2a65762c.ed54d27f.js
index 425e39eda..6bbdfc8ab 100644
--- a/assets/js/2a65762c.c428effd.js
+++ b/assets/js/2a65762c.ed54d27f.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1430],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,s=e.parentName,k=l(e,["components","mdxType","originalType","parentName"]),u=d(n),c=r,h=u["".concat(s,".").concat(c)]||u[c]||p[c]||o;return n?a.createElement(h,i(i({ref:t},k),{},{components:n})):a.createElement(h,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},7075:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const o={title:"token"},i="k3s token",l={unversionedId:"cli/token",id:"cli/token",title:"token",description:"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.",source:"@site/docs/cli/token.md",sourceDirName:"cli",slug:"/cli/token",permalink:"/cli/token",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/token.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"token"},sidebar:"mySidebar",previous:{title:"secrets-encrypt",permalink:"/cli/secrets-encrypt"},next:{title:"Reference",permalink:"/reference/"}},s={},d=[{value:"Token Format",id:"token-format",level:2},{value:"Secure",id:"secure",level:3},{value:"TLS Bootstrapping",id:"tls-bootstrapping",level:4},{value:"Short",id:"short",level:3},{value:"Token Types",id:"token-types",level:2},{value:"Server",id:"server",level:3},{value:"Agent",id:"agent",level:3},{value:"Bootstrap",id:"bootstrap",level:3},{value:"k3s token",id:"k3s-token-1",level:2},{value:"<code>k3s token create [token]</code>",id:"k3s-token-create-token",level:4},{value:"<code>k3s token delete</code>",id:"k3s-token-delete",level:4},{value:"<code>k3s token generate</code>",id:"k3s-token-generate",level:4},{value:"<code>k3s token list</code>",id:"k3s-token-list",level:4}],k={toc:d};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},k,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-token"},"k3s token"),(0,r.kt)("p",null,"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."),(0,r.kt)("h2",{id:"token-format"},"Token Format"),(0,r.kt)("p",null,"K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials."),(0,r.kt)("h3",{id:"secure"},"Secure"),(0,r.kt)("p",null,'The secure token format (occasionally referred to as a "full" token) contains the following parts:'),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"<prefix><cluster CA hash>::<credentials>")),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"prefix"),": a fixed ",(0,r.kt)("inlineCode",{parentName:"li"},"K10")," prefix that identifies the token format"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"cluster CA hash"),": The hash of the cluster's server CA certificate, used to authenticate the server to the joining node.  ",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},"For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  "),(0,r.kt)("li",{parentName:"ul"},"For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint."))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"credentials"),": The username and password, or bearer token, used to authenticate the joining node to the cluster.")),(0,r.kt)("h4",{id:"tls-bootstrapping"},"TLS Bootstrapping"),(0,r.kt)("p",null,"When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"With TLS verification disabled, download the CA bundle from ",(0,r.kt)("inlineCode",{parentName:"li"},"/cacerts")," on the server it is joining."),(0,r.kt)("li",{parentName:"ol"},"Calculate the SHA256 hash of the CA certificate, as described above."),(0,r.kt)("li",{parentName:"ol"},"Compare the calculated SHA256 hash to the hash from the token."),(0,r.kt)("li",{parentName:"ol"},"If the hash matches, validate that the certificate presented by the server can be validated by the server's CA bundle."),(0,r.kt)("li",{parentName:"ol"},"If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.")),(0,r.kt)("h3",{id:"short"},"Short"),(0,r.kt)("p",null,"The short token format includes only the password or bearer token used to authenticate the joining node to the cluster."),(0,r.kt)("p",null,"If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/Man-in-the-middle_attack"},"man-in-the-middle")," attack."),(0,r.kt)("h2",{id:"token-types"},"Token Types"),(0,r.kt)("p",null,"K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Type"),(0,r.kt)("th",{parentName:"tr",align:null},"CLI Option"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Server"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Agent"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a"))))),(0,r.kt)("h3",{id:"server"},"Server"),(0,r.kt)("p",null,"If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),", in secure format."),(0,r.kt)("p",null,"The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully."),(0,r.kt)("p",null,"The server token is also used as the ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/PBKDF2"},"PBKDF2")," passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself."),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.")),(0,r.kt)("p",null,"For more information on using custom CA certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/certificate#"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," documentation"),".",(0,r.kt)("br",{parentName:"p"}),"\n","For more information on backing up your cluster, see the ",(0,r.kt)("a",{parentName:"p",href:"/datastore/backup-restore"},"Backup and Restore")," documentation."),(0,r.kt)("h3",{id:"agent"},"Agent"),(0,r.kt)("p",null,"By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire."),(0,r.kt)("p",null,"The agent token is written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/agent-token"),", in secure format. If no agent token is specified, this file is a link to the server token."),(0,r.kt)("h3",{id:"bootstrap"},"Bootstrap"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Support for the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,r.kt)("p",null,"K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents."),(0,r.kt)("h2",{id:"k3s-token-1"},"k3s token"),(0,r.kt)("p",null,"K3s bootstrap tokens use the same generation and validation code as ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm token")," bootstrap tokens, and the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," CLI is similar."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"NAME:\n   k3s token - Manage bootstrap tokens\n\nUSAGE:\n   k3s token command [command options] [arguments...]\n\nCOMMANDS:\n   create    Create bootstrap tokens on the server\n   delete    Delete bootstrap tokens on the server\n   generate  Generate and print a bootstrap token, but do not create it on the server\n   list      List bootstrap tokens on the server\n\nOPTIONS:\n   --help, -h  show help\n")),(0,r.kt)("h4",{id:"k3s-token-create-token"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token create [token]")),(0,r.kt)("p",null,"Create a new token. The ",(0,r.kt)("inlineCode",{parentName:"p"},"[token]")," is the actual token to write, as generated by ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token generate"),". If no token is given, a random one will be generated."),(0,r.kt)("p",null,"A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--description")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"A human friendly description of how this token is used")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--groups")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Extra groups that this token will authenticate as when used for authentication. (default: Default: "system:bootstrappers:k3s:default-node-token")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ttl")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default: 24h0m0s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--usages")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Describes the ways in which this token can be used. (default: "signing,authentication")')))),(0,r.kt)("h4",{id:"k3s-token-delete"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token delete")),(0,r.kt)("p",null,"Delete one or more tokens. The full token can be provided, or just the token ID."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-generate"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token generate")),(0,r.kt)("p",null,"Generate a randomly-generated bootstrap token."),(0,r.kt)("p",null,"You don't have to use this command in order to generate a token. You can do so yourself as long as it is in the format \"","[a-z0-9]","{6}.","[a-z0-9]",'{16}", where the first portion is the token ID, and the second portion is the secret.'),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-list"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token list")),(0,r.kt)("p",null,"List bootstrap tokens, showing their ID, description, and remaining time-to-live."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--output")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Output format. Valid options: text, json (default: "text")')))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1430],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,s=e.parentName,k=l(e,["components","mdxType","originalType","parentName"]),u=d(n),c=r,h=u["".concat(s,".").concat(c)]||u[c]||p[c]||o;return n?a.createElement(h,i(i({ref:t},k),{},{components:n})):a.createElement(h,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},7075:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const o={title:"token"},i="k3s token",l={unversionedId:"cli/token",id:"cli/token",title:"token",description:"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.",source:"@site/docs/cli/token.md",sourceDirName:"cli",slug:"/cli/token",permalink:"/cli/token",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/token.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"token"},sidebar:"mySidebar",previous:{title:"secrets-encrypt",permalink:"/cli/secrets-encrypt"},next:{title:"Reference",permalink:"/reference/"}},s={},d=[{value:"Token Format",id:"token-format",level:2},{value:"Secure",id:"secure",level:3},{value:"TLS Bootstrapping",id:"tls-bootstrapping",level:4},{value:"Short",id:"short",level:3},{value:"Token Types",id:"token-types",level:2},{value:"Server",id:"server",level:3},{value:"Agent",id:"agent",level:3},{value:"Bootstrap",id:"bootstrap",level:3},{value:"k3s token",id:"k3s-token-1",level:2},{value:"<code>k3s token create [token]</code>",id:"k3s-token-create-token",level:4},{value:"<code>k3s token delete</code>",id:"k3s-token-delete",level:4},{value:"<code>k3s token generate</code>",id:"k3s-token-generate",level:4},{value:"<code>k3s token list</code>",id:"k3s-token-list",level:4}],k={toc:d};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},k,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-token"},"k3s token"),(0,r.kt)("p",null,"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."),(0,r.kt)("h2",{id:"token-format"},"Token Format"),(0,r.kt)("p",null,"K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials."),(0,r.kt)("h3",{id:"secure"},"Secure"),(0,r.kt)("p",null,'The secure token format (occasionally referred to as a "full" token) contains the following parts:'),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"<prefix><cluster CA hash>::<credentials>")),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"prefix"),": a fixed ",(0,r.kt)("inlineCode",{parentName:"li"},"K10")," prefix that identifies the token format"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"cluster CA hash"),": The hash of the cluster's server CA certificate, used to authenticate the server to the joining node.  ",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},"For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  "),(0,r.kt)("li",{parentName:"ul"},"For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint."))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"credentials"),": The username and password, or bearer token, used to authenticate the joining node to the cluster.")),(0,r.kt)("h4",{id:"tls-bootstrapping"},"TLS Bootstrapping"),(0,r.kt)("p",null,"When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"With TLS verification disabled, download the CA bundle from ",(0,r.kt)("inlineCode",{parentName:"li"},"/cacerts")," on the server it is joining."),(0,r.kt)("li",{parentName:"ol"},"Calculate the SHA256 hash of the CA certificate, as described above."),(0,r.kt)("li",{parentName:"ol"},"Compare the calculated SHA256 hash to the hash from the token."),(0,r.kt)("li",{parentName:"ol"},"If the hash matches, validate that the certificate presented by the server can be validated by the server's CA bundle."),(0,r.kt)("li",{parentName:"ol"},"If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.")),(0,r.kt)("h3",{id:"short"},"Short"),(0,r.kt)("p",null,"The short token format includes only the password or bearer token used to authenticate the joining node to the cluster."),(0,r.kt)("p",null,"If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/Man-in-the-middle_attack"},"man-in-the-middle")," attack."),(0,r.kt)("h2",{id:"token-types"},"Token Types"),(0,r.kt)("p",null,"K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Type"),(0,r.kt)("th",{parentName:"tr",align:null},"CLI Option"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Server"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Agent"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a"))))),(0,r.kt)("h3",{id:"server"},"Server"),(0,r.kt)("p",null,"If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),", in secure format."),(0,r.kt)("p",null,"The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully."),(0,r.kt)("p",null,"The server token is also used as the ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/PBKDF2"},"PBKDF2")," passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself."),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.")),(0,r.kt)("p",null,"For more information on using custom CA certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/certificate#"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," documentation"),".",(0,r.kt)("br",{parentName:"p"}),"\n","For more information on backing up your cluster, see the ",(0,r.kt)("a",{parentName:"p",href:"/datastore/backup-restore"},"Backup and Restore")," documentation."),(0,r.kt)("h3",{id:"agent"},"Agent"),(0,r.kt)("p",null,"By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire."),(0,r.kt)("p",null,"The agent token is written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/agent-token"),", in secure format. If no agent token is specified, this file is a link to the server token."),(0,r.kt)("h3",{id:"bootstrap"},"Bootstrap"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Support for the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,r.kt)("p",null,"K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents."),(0,r.kt)("h2",{id:"k3s-token-1"},"k3s token"),(0,r.kt)("p",null,"K3s bootstrap tokens use the same generation and validation code as ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm token")," bootstrap tokens, and the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," CLI is similar."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"NAME:\n   k3s token - Manage bootstrap tokens\n\nUSAGE:\n   k3s token command [command options] [arguments...]\n\nCOMMANDS:\n   create    Create bootstrap tokens on the server\n   delete    Delete bootstrap tokens on the server\n   generate  Generate and print a bootstrap token, but do not create it on the server\n   list      List bootstrap tokens on the server\n\nOPTIONS:\n   --help, -h  show help\n")),(0,r.kt)("h4",{id:"k3s-token-create-token"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token create [token]")),(0,r.kt)("p",null,"Create a new token. The ",(0,r.kt)("inlineCode",{parentName:"p"},"[token]")," is the actual token to write, as generated by ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token generate"),". If no token is given, a random one will be generated."),(0,r.kt)("p",null,"A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--description")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"A human friendly description of how this token is used")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--groups")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Extra groups that this token will authenticate as when used for authentication. (default: Default: "system:bootstrappers:k3s:default-node-token")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ttl")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default: 24h0m0s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--usages")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Describes the ways in which this token can be used. (default: "signing,authentication")')))),(0,r.kt)("h4",{id:"k3s-token-delete"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token delete")),(0,r.kt)("p",null,"Delete one or more tokens. The full token can be provided, or just the token ID."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-generate"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token generate")),(0,r.kt)("p",null,"Generate a randomly-generated bootstrap token."),(0,r.kt)("p",null,"You don't have to use this command in order to generate a token. You can do so yourself as long as it is in the format \"","[a-z0-9]","{6}.","[a-z0-9]",'{16}", where the first portion is the token ID, and the second portion is the secret.'),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-list"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token list")),(0,r.kt)("p",null,"List bootstrap tokens, showing their ID, description, and remaining time-to-live."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--output")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Output format. Valid options: text, json (default: "text")')))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/36f34ab4.74e122a4.js b/assets/js/36f34ab4.ec0a83d4.js
similarity index 99%
rename from assets/js/36f34ab4.74e122a4.js
rename to assets/js/36f34ab4.ec0a83d4.js
index 8b6aa072b..53487e499 100644
--- a/assets/js/36f34ab4.74e122a4.js
+++ b/assets/js/36f34ab4.ec0a83d4.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6155],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>u});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function s(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?s(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):s(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},s=Object.keys(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},d=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,s=e.originalType,i=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),m=p(a),u=r,k=m["".concat(i,".").concat(u)]||m[u]||c[u]||s;return a?n.createElement(k,l(l({ref:t},d),{},{components:a})):n.createElement(k,l({ref:t},d))}));function u(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var s=a.length,l=new Array(s);l[0]=m;var o={};for(var i in t)hasOwnProperty.call(t,i)&&(o[i]=t[i]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var p=2;p<s;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},9252:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>k,frontMatter:()=>s,metadata:()=>o,toc:()=>p});var n=a(3117),r=(a(7294),a(3905));const s={title:"etcd-snapshot"},l="k3s etcd-snapshot",o={unversionedId:"cli/etcd-snapshot",id:"cli/etcd-snapshot",title:"etcd-snapshot",description:"Available as of v1.19.1+k3s1",source:"@site/docs/cli/etcd-snapshot.md",sourceDirName:"cli",slug:"/cli/etcd-snapshot",permalink:"/cli/etcd-snapshot",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"etcd-snapshot"},sidebar:"mySidebar",previous:{title:"certificate",permalink:"/cli/certificate"},next:{title:"secrets-encrypt",permalink:"/cli/secrets-encrypt"}},i={},p=[{value:"Creating Snapshots",id:"creating-snapshots",level:4},{value:"Restoring a Cluster from a Snapshot",id:"restoring-a-cluster-from-a-snapshot",level:4},{value:"Options",id:"options",level:4},{value:"S3 Compatible API Support",id:"s3-compatible-api-support",level:4},{value:"Etcd Snapshot and Restore Subcommands",id:"etcd-snapshot-and-restore-subcommands",level:4}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},c=d("Tabs"),m=d("TabItem"),u={toc:p};function k(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-etcd-snapshot"},"k3s etcd-snapshot"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,r.kt)("p",null,"In this section, you'll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup."),(0,r.kt)("h4",{id:"creating-snapshots"},"Creating Snapshots"),(0,r.kt)("p",null,"Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the ",(0,r.kt)("a",{parentName:"p",href:"#options"},"options"),"."),(0,r.kt)("p",null,"The snapshot directory defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/snapshots"),". The data-dir value defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s")," and can be changed by setting the ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," flag."),(0,r.kt)("h4",{id:"restoring-a-cluster-from-a-snapshot"},"Restoring a Cluster from a Snapshot"),(0,r.kt)("p",null,"When K3s is restored from backup, the old data directory will be moved to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/etcd-old/"),". Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member."),(0,r.kt)("p",null,"To restore the cluster from backup:"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(m,{value:"Single Server",mdxType:"TabItem"},(0,r.kt)("p",null,"Run K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.")),(0,r.kt)(m,{value:"High Availability",mdxType:"TabItem"},(0,r.kt)("p",null,"In this example there are 3 servers, ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"S2"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"S3"),". The snapshot is located on ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),"."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags.")),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, stop K3s. Then delete the data directory, ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/db/"),":"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl stop k3s\nrm -rf /var/lib/rancher/k3s/server/db/\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s again:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, start K3s again to join the restored cluster:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n")))))),(0,r.kt)("h4",{id:"options"},"Options"),(0,r.kt)("p",null,"These options can be passed in with the command line, or in the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"configuration file,")," which may be easier to use."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */5 * * *"),"(default: ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */12 * * *"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots. (Default location: ",(0,r.kt)("inlineCode",{parentName:"td"},"${data-dir}/db/snapshots"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster. This can also be set with the environment variable ",(0,r.kt)("inlineCode",{parentName:"td"},"[$K3S_CLUSTER_RESET]"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset-restore-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Path to snapshot file to be restored")))),(0,r.kt)("h4",{id:"s3-compatible-api-support"},"S3 Compatible API Support"),(0,r.kt)("p",null,"K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots."),(0,r.kt)("p",null,"The arguments below have been added to the ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," subcommand. These flags exist for the ",(0,r.kt)("inlineCode",{parentName:"p"},"etcd-snapshot")," subcommand as well however the ",(0,r.kt)("inlineCode",{parentName:"p"},"--etcd-s3")," portion is removed to avoid redundancy."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 endpoint url")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 region / bucket location (optional). defaults to us-east-1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")))),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot and save it to S3:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot \\\n  --s3 \\\n  --s3-bucket=<S3-BUCKET-NAME> \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn't running. Then run the following commands:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-init \\\n  --cluster-reset \\\n  --etcd-s3 \\\n  --cluster-reset-restore-path=<SNAPSHOT-NAME> \\\n  --etcd-s3-bucket=<S3-BUCKET-NAME> \\\n  --etcd-s3-access-key=<S3-ACCESS-KEY> \\\n  --etcd-s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("h4",{id:"etcd-snapshot-and-restore-subcommands"},"Etcd Snapshot and Restore Subcommands"),(0,r.kt)("p",null,"k3s supports a set of subcommands for working with your etcd snapshots."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Subcommand"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"delete"),(0,r.kt)("td",{parentName:"tr",align:null},"Delete given snapshot(s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"ls, list, l"),(0,r.kt)("td",{parentName:"tr",align:null},"List snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"prune"),(0,r.kt)("td",{parentName:"tr",align:null},"Remove snapshots that exceed the configured retention count")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"save"),(0,r.kt)("td",{parentName:"tr",align:null},"Trigger an immediate etcd snapshot")))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"save")," subcommand is the same as ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),". The latter will eventually be deprecated in favor of the former.")),(0,r.kt)("p",null,"These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store."),(0,r.kt)("p",null,"For additional information on the etcd snapshot subcommands, run ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),"."),(0,r.kt)("p",null,"Delete a snapshot from S3."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot delete          \\\n  --s3                            \\\n  --s3-bucket=<S3-BUCKET-NAME>    \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY> \\\n  <SNAPSHOT-NAME>\n")),(0,r.kt)("p",null,"Prune local snapshots with the default retention policy (5). The ",(0,r.kt)("inlineCode",{parentName:"p"},"prune")," subcommand takes an additional flag ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshot-retention")," that allows for overriding the default retention policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune --snapshot-retention 10\n")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6155],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>u});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function s(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?s(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):s(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},s=Object.keys(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},d=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,s=e.originalType,i=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),m=p(a),u=r,k=m["".concat(i,".").concat(u)]||m[u]||c[u]||s;return a?n.createElement(k,l(l({ref:t},d),{},{components:a})):n.createElement(k,l({ref:t},d))}));function u(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var s=a.length,l=new Array(s);l[0]=m;var o={};for(var i in t)hasOwnProperty.call(t,i)&&(o[i]=t[i]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var p=2;p<s;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},9252:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>k,frontMatter:()=>s,metadata:()=>o,toc:()=>p});var n=a(3117),r=(a(7294),a(3905));const s={title:"etcd-snapshot"},l="k3s etcd-snapshot",o={unversionedId:"cli/etcd-snapshot",id:"cli/etcd-snapshot",title:"etcd-snapshot",description:"Available as of v1.19.1+k3s1",source:"@site/docs/cli/etcd-snapshot.md",sourceDirName:"cli",slug:"/cli/etcd-snapshot",permalink:"/cli/etcd-snapshot",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"etcd-snapshot"},sidebar:"mySidebar",previous:{title:"certificate",permalink:"/cli/certificate"},next:{title:"secrets-encrypt",permalink:"/cli/secrets-encrypt"}},i={},p=[{value:"Creating Snapshots",id:"creating-snapshots",level:4},{value:"Restoring a Cluster from a Snapshot",id:"restoring-a-cluster-from-a-snapshot",level:4},{value:"Options",id:"options",level:4},{value:"S3 Compatible API Support",id:"s3-compatible-api-support",level:4},{value:"Etcd Snapshot and Restore Subcommands",id:"etcd-snapshot-and-restore-subcommands",level:4}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},c=d("Tabs"),m=d("TabItem"),u={toc:p};function k(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-etcd-snapshot"},"k3s etcd-snapshot"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,r.kt)("p",null,"In this section, you'll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup."),(0,r.kt)("h4",{id:"creating-snapshots"},"Creating Snapshots"),(0,r.kt)("p",null,"Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the ",(0,r.kt)("a",{parentName:"p",href:"#options"},"options"),"."),(0,r.kt)("p",null,"The snapshot directory defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/snapshots"),". The data-dir value defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s")," and can be changed by setting the ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," flag."),(0,r.kt)("h4",{id:"restoring-a-cluster-from-a-snapshot"},"Restoring a Cluster from a Snapshot"),(0,r.kt)("p",null,"When K3s is restored from backup, the old data directory will be moved to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/etcd-old/"),". Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member."),(0,r.kt)("p",null,"To restore the cluster from backup:"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(m,{value:"Single Server",mdxType:"TabItem"},(0,r.kt)("p",null,"Run K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.")),(0,r.kt)(m,{value:"High Availability",mdxType:"TabItem"},(0,r.kt)("p",null,"In this example there are 3 servers, ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"S2"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"S3"),". The snapshot is located on ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),"."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags.")),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, stop K3s. Then delete the data directory, ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/db/"),":"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl stop k3s\nrm -rf /var/lib/rancher/k3s/server/db/\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s again:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, start K3s again to join the restored cluster:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n")))))),(0,r.kt)("h4",{id:"options"},"Options"),(0,r.kt)("p",null,"These options can be passed in with the command line, or in the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"configuration file,")," which may be easier to use."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */5 * * *"),"(default: ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */12 * * *"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots. (Default location: ",(0,r.kt)("inlineCode",{parentName:"td"},"${data-dir}/db/snapshots"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster. This can also be set with the environment variable ",(0,r.kt)("inlineCode",{parentName:"td"},"[$K3S_CLUSTER_RESET]"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset-restore-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Path to snapshot file to be restored")))),(0,r.kt)("h4",{id:"s3-compatible-api-support"},"S3 Compatible API Support"),(0,r.kt)("p",null,"K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots."),(0,r.kt)("p",null,"The arguments below have been added to the ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," subcommand. These flags exist for the ",(0,r.kt)("inlineCode",{parentName:"p"},"etcd-snapshot")," subcommand as well however the ",(0,r.kt)("inlineCode",{parentName:"p"},"--etcd-s3")," portion is removed to avoid redundancy."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 endpoint url")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 region / bucket location (optional). defaults to us-east-1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")))),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot and save it to S3:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot \\\n  --s3 \\\n  --s3-bucket=<S3-BUCKET-NAME> \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn't running. Then run the following commands:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-init \\\n  --cluster-reset \\\n  --etcd-s3 \\\n  --cluster-reset-restore-path=<SNAPSHOT-NAME> \\\n  --etcd-s3-bucket=<S3-BUCKET-NAME> \\\n  --etcd-s3-access-key=<S3-ACCESS-KEY> \\\n  --etcd-s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("h4",{id:"etcd-snapshot-and-restore-subcommands"},"Etcd Snapshot and Restore Subcommands"),(0,r.kt)("p",null,"k3s supports a set of subcommands for working with your etcd snapshots."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Subcommand"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"delete"),(0,r.kt)("td",{parentName:"tr",align:null},"Delete given snapshot(s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"ls, list, l"),(0,r.kt)("td",{parentName:"tr",align:null},"List snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"prune"),(0,r.kt)("td",{parentName:"tr",align:null},"Remove snapshots that exceed the configured retention count")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"save"),(0,r.kt)("td",{parentName:"tr",align:null},"Trigger an immediate etcd snapshot")))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"save")," subcommand is the same as ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),". The latter will eventually be deprecated in favor of the former.")),(0,r.kt)("p",null,"These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store."),(0,r.kt)("p",null,"For additional information on the etcd snapshot subcommands, run ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),"."),(0,r.kt)("p",null,"Delete a snapshot from S3."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot delete          \\\n  --s3                            \\\n  --s3-bucket=<S3-BUCKET-NAME>    \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY> \\\n  <SNAPSHOT-NAME>\n")),(0,r.kt)("p",null,"Prune local snapshots with the default retention policy (5). The ",(0,r.kt)("inlineCode",{parentName:"p"},"prune")," subcommand takes an additional flag ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshot-retention")," that allows for overriding the default retention policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune --snapshot-retention 10\n")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/4129286c.c7656db7.js b/assets/js/4129286c.c7656db7.js
new file mode 100644
index 000000000..2a9750376
--- /dev/null
+++ b/assets/js/4129286c.c7656db7.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5156],{2776:s=>{s.exports=JSON.parse('{"name":"@easyops-cn/docusaurus-search-local","id":"default"}')}}]);
\ No newline at end of file
diff --git a/assets/js/4455f95b.ae25dff8.js b/assets/js/4455f95b.ee2fe2ee.js
similarity index 99%
rename from assets/js/4455f95b.ae25dff8.js
rename to assets/js/4455f95b.ee2fe2ee.js
index 83f8b7689..7dd2e006e 100644
--- a/assets/js/4455f95b.ae25dff8.js
+++ b/assets/js/4455f95b.ee2fe2ee.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1340],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>k});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var d=n.createContext({}),s=function(e){var t=n.useContext(d),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=s(e.components);return n.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,d=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),m=s(a),k=r,c=m["".concat(d,".").concat(k)]||m[k]||p[k]||l;return a?n.createElement(c,i(i({ref:t},u),{},{components:a})):n.createElement(c,i({ref:t},u))}));function k(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=m;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var s=2;s<l;s++)i[s]=a[s];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},6127:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>s});var n=a(3117),r=(a(7294),a(3905));const l={title:"server",weight:1},i="k3s server",o={unversionedId:"cli/server",id:"cli/server",title:"server",description:"In this section, you'll learn how to configure the K3s server.",source:"@site/docs/cli/server.md",sourceDirName:"cli",slug:"/cli/server",permalink:"/cli/server",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/server.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"server",weight:1},sidebar:"mySidebar",previous:{title:"CLI Tools",permalink:"/cli/"},next:{title:"agent",permalink:"/cli/agent"}},d={},s=[{value:"Critical Configuration Values",id:"critical-configuration-values",level:2},{value:"Commonly Used Options",id:"commonly-used-options",level:2},{value:"Database",id:"database",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Admin Kubeconfig Options",id:"admin-kubeconfig-options",level:3},{value:"Advanced Options",id:"advanced-options",level:2},{value:"Logging",id:"logging",level:3},{value:"Listeners",id:"listeners",level:3},{value:"Data",id:"data",level:3},{value:"Secrets Encryption",id:"secrets-encryption",level:3},{value:"Networking",id:"networking",level:3},{value:"Storage Class",id:"storage-class",level:3},{value:"Kubernetes Components",id:"kubernetes-components",level:3},{value:"Customized Flags for Kubernetes Processes",id:"customized-flags-for-kubernetes-processes",level:3},{value:"Experimental Options",id:"experimental-options",level:3},{value:"Deprecated Options",id:"deprecated-options",level:3}],u={toc:s};function p(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-server"},"k3s server"),(0,r.kt)("p",null,"In this section, you'll learn how to configure the K3s server."),(0,r.kt)("p",null,"Note that servers also run an agent, so all of the configuration options listed in the ",(0,r.kt)("a",{parentName:"p",href:"/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation")," are also supported on servers."),(0,r.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,r.kt)("h2",{id:"critical-configuration-values"},"Critical Configuration Values"),(0,r.kt)("p",null,"The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--agent-token")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-cloud-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-servicelb")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--egress-selector-mode")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-backend")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-external-ip")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-ipv6-masq")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr"))),(0,r.kt)("h2",{id:"commonly-used-options"},"Commonly Used Options"),(0,r.kt)("h3",{id:"database"},"Database"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"Specify etcd, Mysql, Postgres, or Sqlite (default) data source name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS Certificate Authority file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS certification file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS key file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-expose-metrics")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Expose etcd metrics to client interface (default: false)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-name")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Set the base name of etcd snapshots. Default: etcd-snapshot-",(0,r.kt)("inlineCode",{parentName:"td"},"<unix-timestamp>"),' (default:"etcd-snapshot")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours '0 ",(0,r.kt)("em",{parentName:"td"},"/5 ",(0,r.kt)("em",{parentName:"em"}," ","*"," "),"' (default: \"0 "),"/12 ","*"," ","*"," ","*",'")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots (default: ${data-dir}/db/snapshots)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 endpoint url (default: "s3.amazonaws.com")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_ACCESS_KEY_ID")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_SECRET_ACCESS_KEY")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 region / bucket location (optional) (default: "us-east-1")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-insecure")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 over HTTPS"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-timeout")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 timeout (default: 5m0s)"),(0,r.kt)("td",{parentName:"tr",align:null})))),(0,r.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")," value, ",(0,r.kt)("inlineCode",{parentName:"td"},"-t")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join a server or agent to a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the cluster-secret/token")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join agents to the cluster, but not servers")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the agent secret")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--server")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Server to connect to, used to join a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-init")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_INIT")),(0,r.kt)("td",{parentName:"tr",align:null},"Initialize a new cluster using embedded Etcd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_RESET")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster")))),(0,r.kt)("h3",{id:"admin-kubeconfig-options"},"Admin Kubeconfig Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig value, -o")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_OUTPUT")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig for admin client to this file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_MODE")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig with this ",(0,r.kt)("a",{parentName:"td",href:"https://en.wikipedia.org/wiki/Chmod"},"mode.")," The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.")))),(0,r.kt)("h2",{id:"advanced-options"},"Advanced Options"),(0,r.kt)("h3",{id:"logging"},"Logging"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--debug")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Turn on debug logs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0"),(0,r.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,r.kt)("h3",{id:"listeners"},"Listeners"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--bind-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0.0.0.0"),(0,r.kt)("td",{parentName:"tr",align:null},"k3s bind address")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--https-listen-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"HTTPS listen port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"node-external-ip/node-ip"),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 address that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"listen-port/0"),(0,r.kt)("td",{parentName:"tr",align:null},"Port that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--tls-san")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert")))),(0,r.kt)("h3",{id:"data"},"Data"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"${HOME}/.rancher/k3s")," if not root"),(0,r.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,r.kt)("h3",{id:"secrets-encryption"},"Secrets Encryption"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--secrets-encryption")),(0,r.kt)("td",{parentName:"tr",align:null},"false"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable Secret encryption at rest")))),(0,r.kt)("h3",{id:"networking"},"Networking"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.42.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for pod IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for service IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-node-port-range")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"30000-32767"'),(0,r.kt)("td",{parentName:"tr",align:null},"Port range to reserve for services with NodePort visibility")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-dns")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.10"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 Cluster IP for coredns service. Should be in your service-cidr range")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-domain")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"cluster.local"'),(0,r.kt)("td",{parentName:"tr",align:null},"Cluster Domain")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"vxlan"'),(0,r.kt)("td",{parentName:"tr",align:null},"One of 'none', 'vxlan', 'ipsec'(deprecated), 'host-gw', 'wireguard-native', or 'wireguard'(deprecated)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Enable IPv6 masquerading for pod")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses for Flannel traffic")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--servicelb-namespace")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"kube-system"'),(0,r.kt)("td",{parentName:"tr",align:null},"Namespace of the pods for the servicelb component")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--egress-selector-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"agent"'),(0,r.kt)("td",{parentName:"tr",align:null},"Must be one of the following: ",(0,r.kt)("ul",null,(0,r.kt)("li",null,"disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs."),(0,r.kt)("li",null,"agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s."),(0,r.kt)("li",null," pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node."),(0,r.kt)("li",null,"  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.")))))),(0,r.kt)("h3",{id:"storage-class"},"Storage Class"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--default-local-storage-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Default local storage path for local provisioner storage class")))),(0,r.kt)("h3",{id:"kubernetes-components"},"Kubernetes Components"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/installation/packaged-components#using-the---disable-flag"},"Using the ",(0,r.kt)("inlineCode",{parentName:"a"},"--disable")," flag"),'"')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-scheduler")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Kubernetes default scheduler")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-cloud-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default cloud controller manager")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-kube-proxy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable running kube-proxy")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-network-policy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default network policy controller")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-helm-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Helm controller")))),(0,r.kt)("h3",{id:"customized-flags-for-kubernetes-processes"},"Customized Flags for Kubernetes Processes"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for etcd process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-apiserver-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-apiserver process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-scheduler-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-scheduler process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-cloud-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-cloud-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,r.kt)("h3",{id:"experimental-options"},"Experimental Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,r.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--enable-pprof")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable pprof endpoint on supervisor port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--docker")),(0,r.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,r.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-agent")),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/advanced/#running-agentless-servers-experimental"},"Running Agentless Servers (Experimental)"),'"')))),(0,r.kt)("h3",{id:"deprecated-options"},"Deprecated Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-deploy")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--disable"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--token"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," wireguard"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value=option1=value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," to specify the flannel config file with the backend config")))),(0,r.kt)("h1",{id:"k3s-server-cli-help"},"K3s Server CLI Help"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"[$K3S_TOKEN]"),", it means that the option can be passed in as an environment variable of that name.")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s server - Run management server\n\nUSAGE:\n   k3s server [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --bind-address value                       (listener) k3s bind address (default: 0.0.0.0)\n   --https-listen-port value                  (listener) HTTPS listen port (default: 6443)\n   --advertise-address value                  (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip)\n   --advertise-port value                     (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0)\n   --tls-san value                            (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert\n   --data-dir value, -d value                 (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root)\n   --cluster-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16)\n   --service-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16)\n   --service-node-port-range value            (networking) Port range to reserve for services with NodePort visibility (default: "30000-32767")\n   --cluster-dns value                        (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10)\n   --cluster-domain value                     (networking) Cluster Domain (default: "cluster.local")\n   --flannel-backend value                    (networking) backend<=option1=val1,option2=val2> where backend is one of \'none\', \'vxlan\', \'ipsec\' (deprecated), \'host-gw\', \'wireguard-native\', \'wireguard\' (deprecated) (default: "vxlan")\n   --flannel-ipv6-masq                        (networking) Enable IPv6 masquerading for pod\n   --flannel-external-ip                      (networking) Use node external IP addresses for Flannel traffic\n   --egress-selector-mode value               (networking) One of \'agent\', \'cluster\', \'pod\', \'disabled\' (default: "agent")\n   --servicelb-namespace value                (networking) Namespace of the pods for the servicelb component (default: "kube-system")\n   --write-kubeconfig value, -o value         (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT]\n   --write-kubeconfig-mode value              (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE]\n   --token value, -t value                    (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN]\n   --token-file value                         (cluster) File containing the token [$K3S_TOKEN_FILE]\n   --agent-token value                        (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN]\n   --agent-token-file value                   (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to, used to join a cluster [$K3S_URL]\n   --cluster-init                             (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT]\n   --cluster-reset                            (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET]\n   --cluster-reset-restore-path value         (db) Path to snapshot file to be restored\n   --kube-apiserver-arg value                 (flags) Customized flag for kube-apiserver process\n   --etcd-arg value                           (flags) Customized flag for etcd process\n   --kube-controller-manager-arg value        (flags) Customized flag for kube-controller-manager process\n   --kube-scheduler-arg value                 (flags) Customized flag for kube-scheduler process\n   --kube-cloud-controller-manager-arg value  (flags) Customized flag for kube-cloud-controller-manager process\n   --datastore-endpoint value                 (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT]\n   --datastore-cafile value                   (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE]\n   --datastore-certfile value                 (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE]\n   --datastore-keyfile value                  (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE]\n   --etcd-expose-metrics                      (db) Expose etcd metrics to client interface. (default: false)\n   --etcd-disable-snapshots                   (db) Disable automatic etcd snapshots\n   --etcd-snapshot-name value                 (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: "etcd-snapshot")\n   --etcd-snapshot-schedule-cron value        (db) Snapshot interval time in cron spec. eg. every 5 hours \'* */5 * * *\' (default: "0 */12 * * *")\n   --etcd-snapshot-retention value            (db) Number of snapshots to retain (default: 5)\n   --etcd-snapshot-dir value                  (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots)\n   --etcd-snapshot-compress                   (db) Compress etcd snapshot\n   --etcd-s3                                  (db) Enable backup to S3\n   --etcd-s3-endpoint value                   (db) S3 endpoint url (default: "s3.amazonaws.com")\n   --etcd-s3-endpoint-ca value                (db) S3 custom CA cert to connect to S3 endpoint\n   --etcd-s3-skip-ssl-verify                  (db) Disables S3 SSL certificate validation\n   --etcd-s3-access-key value                 (db) S3 access key [$AWS_ACCESS_KEY_ID]\n   --etcd-s3-secret-key value                 (db) S3 secret key [$AWS_SECRET_ACCESS_KEY]\n   --etcd-s3-bucket value                     (db) S3 bucket name\n   --etcd-s3-region value                     (db) S3 region / bucket location (optional) (default: "us-east-1")\n   --etcd-s3-folder value                     (db) S3 folder\n   --etcd-s3-insecure                         (db) Disables S3 over HTTPS\n   --etcd-s3-timeout value                    (db) S3 timeout (default: 5m0s)\n   --default-local-storage-path value         (storage) Default local storage path for local provisioner storage class\n   --disable value                            (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server)\n   --disable-scheduler                        (components) Disable Kubernetes default scheduler\n   --disable-cloud-controller                 (components) Disable k3s default cloud controller manager\n   --disable-kube-proxy                       (components) Disable running kube-proxy\n   --disable-network-policy                   (components) Disable k3s default network policy controller\n   --disable-helm-controller                  (components) Disable Helm controller\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --system-default-registry value            (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY]\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --secrets-encryption                       Enable secret encryption at rest\n   --enable-pprof                             (experimental) Enable pprof endpoint on supervisor port\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n')))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1340],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>k});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var d=n.createContext({}),s=function(e){var t=n.useContext(d),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=s(e.components);return n.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,d=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),m=s(a),k=r,c=m["".concat(d,".").concat(k)]||m[k]||p[k]||l;return a?n.createElement(c,i(i({ref:t},u),{},{components:a})):n.createElement(c,i({ref:t},u))}));function k(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=m;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var s=2;s<l;s++)i[s]=a[s];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},6127:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>s});var n=a(3117),r=(a(7294),a(3905));const l={title:"server",weight:1},i="k3s server",o={unversionedId:"cli/server",id:"cli/server",title:"server",description:"In this section, you'll learn how to configure the K3s server.",source:"@site/docs/cli/server.md",sourceDirName:"cli",slug:"/cli/server",permalink:"/cli/server",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/server.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"server",weight:1},sidebar:"mySidebar",previous:{title:"CLI Tools",permalink:"/cli/"},next:{title:"agent",permalink:"/cli/agent"}},d={},s=[{value:"Critical Configuration Values",id:"critical-configuration-values",level:2},{value:"Commonly Used Options",id:"commonly-used-options",level:2},{value:"Database",id:"database",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Admin Kubeconfig Options",id:"admin-kubeconfig-options",level:3},{value:"Advanced Options",id:"advanced-options",level:2},{value:"Logging",id:"logging",level:3},{value:"Listeners",id:"listeners",level:3},{value:"Data",id:"data",level:3},{value:"Secrets Encryption",id:"secrets-encryption",level:3},{value:"Networking",id:"networking",level:3},{value:"Storage Class",id:"storage-class",level:3},{value:"Kubernetes Components",id:"kubernetes-components",level:3},{value:"Customized Flags for Kubernetes Processes",id:"customized-flags-for-kubernetes-processes",level:3},{value:"Experimental Options",id:"experimental-options",level:3},{value:"Deprecated Options",id:"deprecated-options",level:3}],u={toc:s};function p(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-server"},"k3s server"),(0,r.kt)("p",null,"In this section, you'll learn how to configure the K3s server."),(0,r.kt)("p",null,"Note that servers also run an agent, so all of the configuration options listed in the ",(0,r.kt)("a",{parentName:"p",href:"/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation")," are also supported on servers."),(0,r.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,r.kt)("h2",{id:"critical-configuration-values"},"Critical Configuration Values"),(0,r.kt)("p",null,"The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--agent-token")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-cloud-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-servicelb")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--egress-selector-mode")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-backend")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-external-ip")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-ipv6-masq")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr"))),(0,r.kt)("h2",{id:"commonly-used-options"},"Commonly Used Options"),(0,r.kt)("h3",{id:"database"},"Database"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"Specify etcd, Mysql, Postgres, or Sqlite (default) data source name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS Certificate Authority file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS certification file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS key file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-expose-metrics")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Expose etcd metrics to client interface (default: false)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-name")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Set the base name of etcd snapshots. Default: etcd-snapshot-",(0,r.kt)("inlineCode",{parentName:"td"},"<unix-timestamp>"),' (default:"etcd-snapshot")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours '0 ",(0,r.kt)("em",{parentName:"td"},"/5 ",(0,r.kt)("em",{parentName:"em"}," ","*"," "),"' (default: \"0 "),"/12 ","*"," ","*"," ","*",'")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots (default: ${data-dir}/db/snapshots)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 endpoint url (default: "s3.amazonaws.com")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_ACCESS_KEY_ID")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_SECRET_ACCESS_KEY")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 region / bucket location (optional) (default: "us-east-1")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-insecure")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 over HTTPS"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-timeout")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 timeout (default: 5m0s)"),(0,r.kt)("td",{parentName:"tr",align:null})))),(0,r.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")," value, ",(0,r.kt)("inlineCode",{parentName:"td"},"-t")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join a server or agent to a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the cluster-secret/token")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join agents to the cluster, but not servers")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the agent secret")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--server")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Server to connect to, used to join a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-init")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_INIT")),(0,r.kt)("td",{parentName:"tr",align:null},"Initialize a new cluster using embedded Etcd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_RESET")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster")))),(0,r.kt)("h3",{id:"admin-kubeconfig-options"},"Admin Kubeconfig Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig value, -o")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_OUTPUT")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig for admin client to this file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_MODE")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig with this ",(0,r.kt)("a",{parentName:"td",href:"https://en.wikipedia.org/wiki/Chmod"},"mode.")," The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.")))),(0,r.kt)("h2",{id:"advanced-options"},"Advanced Options"),(0,r.kt)("h3",{id:"logging"},"Logging"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--debug")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Turn on debug logs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0"),(0,r.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,r.kt)("h3",{id:"listeners"},"Listeners"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--bind-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0.0.0.0"),(0,r.kt)("td",{parentName:"tr",align:null},"k3s bind address")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--https-listen-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"HTTPS listen port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"node-external-ip/node-ip"),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 address that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"listen-port/0"),(0,r.kt)("td",{parentName:"tr",align:null},"Port that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--tls-san")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert")))),(0,r.kt)("h3",{id:"data"},"Data"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"${HOME}/.rancher/k3s")," if not root"),(0,r.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,r.kt)("h3",{id:"secrets-encryption"},"Secrets Encryption"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--secrets-encryption")),(0,r.kt)("td",{parentName:"tr",align:null},"false"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable Secret encryption at rest")))),(0,r.kt)("h3",{id:"networking"},"Networking"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.42.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for pod IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for service IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-node-port-range")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"30000-32767"'),(0,r.kt)("td",{parentName:"tr",align:null},"Port range to reserve for services with NodePort visibility")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-dns")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.10"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 Cluster IP for coredns service. Should be in your service-cidr range")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-domain")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"cluster.local"'),(0,r.kt)("td",{parentName:"tr",align:null},"Cluster Domain")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"vxlan"'),(0,r.kt)("td",{parentName:"tr",align:null},"One of 'none', 'vxlan', 'ipsec'(deprecated), 'host-gw', 'wireguard-native', or 'wireguard'(deprecated)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Enable IPv6 masquerading for pod")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses for Flannel traffic")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--servicelb-namespace")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"kube-system"'),(0,r.kt)("td",{parentName:"tr",align:null},"Namespace of the pods for the servicelb component")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--egress-selector-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"agent"'),(0,r.kt)("td",{parentName:"tr",align:null},"Must be one of the following: ",(0,r.kt)("ul",null,(0,r.kt)("li",null,"disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs."),(0,r.kt)("li",null,"agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s."),(0,r.kt)("li",null," pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node."),(0,r.kt)("li",null,"  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.")))))),(0,r.kt)("h3",{id:"storage-class"},"Storage Class"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--default-local-storage-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Default local storage path for local provisioner storage class")))),(0,r.kt)("h3",{id:"kubernetes-components"},"Kubernetes Components"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/installation/packaged-components#using-the---disable-flag"},"Using the ",(0,r.kt)("inlineCode",{parentName:"a"},"--disable")," flag"),'"')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-scheduler")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Kubernetes default scheduler")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-cloud-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default cloud controller manager")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-kube-proxy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable running kube-proxy")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-network-policy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default network policy controller")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-helm-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Helm controller")))),(0,r.kt)("h3",{id:"customized-flags-for-kubernetes-processes"},"Customized Flags for Kubernetes Processes"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for etcd process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-apiserver-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-apiserver process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-scheduler-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-scheduler process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-cloud-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-cloud-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,r.kt)("h3",{id:"experimental-options"},"Experimental Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,r.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--enable-pprof")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable pprof endpoint on supervisor port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--docker")),(0,r.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,r.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-agent")),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/advanced/#running-agentless-servers-experimental"},"Running Agentless Servers (Experimental)"),'"')))),(0,r.kt)("h3",{id:"deprecated-options"},"Deprecated Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-deploy")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--disable"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--token"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," wireguard"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value=option1=value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," to specify the flannel config file with the backend config")))),(0,r.kt)("h1",{id:"k3s-server-cli-help"},"K3s Server CLI Help"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"[$K3S_TOKEN]"),", it means that the option can be passed in as an environment variable of that name.")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s server - Run management server\n\nUSAGE:\n   k3s server [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --bind-address value                       (listener) k3s bind address (default: 0.0.0.0)\n   --https-listen-port value                  (listener) HTTPS listen port (default: 6443)\n   --advertise-address value                  (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip)\n   --advertise-port value                     (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0)\n   --tls-san value                            (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert\n   --data-dir value, -d value                 (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root)\n   --cluster-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16)\n   --service-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16)\n   --service-node-port-range value            (networking) Port range to reserve for services with NodePort visibility (default: "30000-32767")\n   --cluster-dns value                        (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10)\n   --cluster-domain value                     (networking) Cluster Domain (default: "cluster.local")\n   --flannel-backend value                    (networking) backend<=option1=val1,option2=val2> where backend is one of \'none\', \'vxlan\', \'ipsec\' (deprecated), \'host-gw\', \'wireguard-native\', \'wireguard\' (deprecated) (default: "vxlan")\n   --flannel-ipv6-masq                        (networking) Enable IPv6 masquerading for pod\n   --flannel-external-ip                      (networking) Use node external IP addresses for Flannel traffic\n   --egress-selector-mode value               (networking) One of \'agent\', \'cluster\', \'pod\', \'disabled\' (default: "agent")\n   --servicelb-namespace value                (networking) Namespace of the pods for the servicelb component (default: "kube-system")\n   --write-kubeconfig value, -o value         (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT]\n   --write-kubeconfig-mode value              (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE]\n   --token value, -t value                    (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN]\n   --token-file value                         (cluster) File containing the token [$K3S_TOKEN_FILE]\n   --agent-token value                        (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN]\n   --agent-token-file value                   (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to, used to join a cluster [$K3S_URL]\n   --cluster-init                             (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT]\n   --cluster-reset                            (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET]\n   --cluster-reset-restore-path value         (db) Path to snapshot file to be restored\n   --kube-apiserver-arg value                 (flags) Customized flag for kube-apiserver process\n   --etcd-arg value                           (flags) Customized flag for etcd process\n   --kube-controller-manager-arg value        (flags) Customized flag for kube-controller-manager process\n   --kube-scheduler-arg value                 (flags) Customized flag for kube-scheduler process\n   --kube-cloud-controller-manager-arg value  (flags) Customized flag for kube-cloud-controller-manager process\n   --datastore-endpoint value                 (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT]\n   --datastore-cafile value                   (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE]\n   --datastore-certfile value                 (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE]\n   --datastore-keyfile value                  (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE]\n   --etcd-expose-metrics                      (db) Expose etcd metrics to client interface. (default: false)\n   --etcd-disable-snapshots                   (db) Disable automatic etcd snapshots\n   --etcd-snapshot-name value                 (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: "etcd-snapshot")\n   --etcd-snapshot-schedule-cron value        (db) Snapshot interval time in cron spec. eg. every 5 hours \'* */5 * * *\' (default: "0 */12 * * *")\n   --etcd-snapshot-retention value            (db) Number of snapshots to retain (default: 5)\n   --etcd-snapshot-dir value                  (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots)\n   --etcd-snapshot-compress                   (db) Compress etcd snapshot\n   --etcd-s3                                  (db) Enable backup to S3\n   --etcd-s3-endpoint value                   (db) S3 endpoint url (default: "s3.amazonaws.com")\n   --etcd-s3-endpoint-ca value                (db) S3 custom CA cert to connect to S3 endpoint\n   --etcd-s3-skip-ssl-verify                  (db) Disables S3 SSL certificate validation\n   --etcd-s3-access-key value                 (db) S3 access key [$AWS_ACCESS_KEY_ID]\n   --etcd-s3-secret-key value                 (db) S3 secret key [$AWS_SECRET_ACCESS_KEY]\n   --etcd-s3-bucket value                     (db) S3 bucket name\n   --etcd-s3-region value                     (db) S3 region / bucket location (optional) (default: "us-east-1")\n   --etcd-s3-folder value                     (db) S3 folder\n   --etcd-s3-insecure                         (db) Disables S3 over HTTPS\n   --etcd-s3-timeout value                    (db) S3 timeout (default: 5m0s)\n   --default-local-storage-path value         (storage) Default local storage path for local provisioner storage class\n   --disable value                            (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server)\n   --disable-scheduler                        (components) Disable Kubernetes default scheduler\n   --disable-cloud-controller                 (components) Disable k3s default cloud controller manager\n   --disable-kube-proxy                       (components) Disable running kube-proxy\n   --disable-network-policy                   (components) Disable k3s default network policy controller\n   --disable-helm-controller                  (components) Disable Helm controller\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --system-default-registry value            (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY]\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --secrets-encryption                       Enable secret encryption at rest\n   --enable-pprof                             (experimental) Enable pprof endpoint on supervisor port\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n')))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/4835.071674c5.js b/assets/js/4835.071674c5.js
new file mode 100644
index 000000000..4157a52ea
--- /dev/null
+++ b/assets/js/4835.071674c5.js
@@ -0,0 +1,2 @@
+/*! For license information please see 4835.071674c5.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4835],{7967:(t,e)=>{"use strict";e.N=void 0;var n=/^([^\w]*)(javascript|data|vbscript)/im,r=/&#(\w+)(^\w|;)?/g,i=/&(newline|tab);/gi,a=/[\u0000-\u001F\u007F-\u009F\u2000-\u200D\uFEFF]/gim,s=/^.+(:|&colon;)/gim,o=[".","/"];e.N=function(t){var e,c=(e=t||"",e.replace(r,(function(t,e){return String.fromCharCode(e)}))).replace(i,"").replace(a,"").trim();if(!c)return"about:blank";if(function(t){return o.indexOf(t[0])>-1}(c))return c;var l=c.match(s);if(!l)return c;var h=l[0];return n.test(h)?"about:blank":c}},3905:(t,e,n)=>{"use strict";n.d(e,{Zo:()=>h,kt:()=>p});var r=n(7294);function i(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function a(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function s(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?a(Object(n),!0).forEach((function(e){i(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,e){if(null==t)return{};var n,r,i=function(t,e){if(null==t)return{};var n,r,i={},a=Object.keys(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||(i[n]=t[n]);return i}(t,e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(i[n]=t[n])}return i}var c=r.createContext({}),l=function(t){var e=r.useContext(c),n=e;return t&&(n="function"==typeof t?t(e):s(s({},e),t)),n},h=function(t){var e=l(t.components);return r.createElement(c.Provider,{value:e},t.children)},u={inlineCode:"code",wrapper:function(t){var e=t.children;return r.createElement(r.Fragment,{},e)}},d=r.forwardRef((function(t,e){var n=t.components,i=t.mdxType,a=t.originalType,c=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),d=l(n),p=i,f=d["".concat(c,".").concat(p)]||d[p]||u[p]||a;return n?r.createElement(f,s(s({ref:e},h),{},{components:n})):r.createElement(f,s({ref:e},h))}));function p(t,e){var n=arguments,i=e&&e.mdxType;if("string"==typeof t||i){var a=n.length,s=new Array(a);s[0]=d;var o={};for(var c in e)hasOwnProperty.call(e,c)&&(o[c]=e[c]);o.originalType=t,o.mdxType="string"==typeof t?t:i,s[1]=o;for(var l=2;l<a;l++)s[l]=n[l];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},2839:(t,e,n)=>{"use strict";n.r(e),n.d(e,{default:()=>Ot});var r=n(7294),i=n(1944),a=n(902);const s=r.createContext(null);function o(t){let{children:e,content:n}=t;const i=function(t){return(0,r.useMemo)((()=>({metadata:t.metadata,frontMatter:t.frontMatter,assets:t.assets,contentTitle:t.contentTitle,toc:t.toc})),[t])}(n);return r.createElement(s.Provider,{value:i},e)}function c(){const t=(0,r.useContext)(s);if(null===t)throw new a.i6("DocProvider");return t}function l(){const{metadata:t,frontMatter:e,assets:n}=c();return r.createElement(i.d,{title:t.title,description:t.description,keywords:e.keywords,image:n.image??e.image})}var h=n(6010),u=n(7524),d=n(3117),p=n(5999),f=n(9960);function g(t){const{permalink:e,title:n,subLabel:i,isNext:a}=t;return r.createElement(f.Z,{className:(0,h.Z)("pagination-nav__link",a?"pagination-nav__link--next":"pagination-nav__link--prev"),to:e},i&&r.createElement("div",{className:"pagination-nav__sublabel"},i),r.createElement("div",{className:"pagination-nav__label"},n))}function y(t){const{previous:e,next:n}=t;return r.createElement("nav",{className:"pagination-nav docusaurus-mt-lg","aria-label":(0,p.I)({id:"theme.docs.paginator.navAriaLabel",message:"Docs pages",description:"The ARIA label for the docs pagination"})},e&&r.createElement(g,(0,d.Z)({},e,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.previous",description:"The label used to navigate to the previous doc"},"Previous")})),n&&r.createElement(g,(0,d.Z)({},n,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.next",description:"The label used to navigate to the next doc"},"Next"),isNext:!0})))}function m(){const{metadata:t}=c();return r.createElement(y,{previous:t.previous,next:t.next})}var b=n(2263),_=n(143),x=n(5281),v=n(373),k=n(4477);const w={unreleased:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unreleasedVersionLabel",description:"The label used to tell the user that he's browsing an unreleased doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is unreleased documentation for {siteTitle} {versionLabel} version.")},unmaintained:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unmaintainedVersionLabel",description:"The label used to tell the user that he's browsing an unmaintained doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is documentation for {siteTitle} {versionLabel}, which is no longer actively maintained.")}};function E(t){const e=w[t.versionMetadata.banner];return r.createElement(e,t)}function C(t){let{versionLabel:e,to:n,onClick:i}=t;return r.createElement(p.Z,{id:"theme.docs.versions.latestVersionSuggestionLabel",description:"The label used to tell the user to check the latest version",values:{versionLabel:e,latestVersionLink:r.createElement("b",null,r.createElement(f.Z,{to:n,onClick:i},r.createElement(p.Z,{id:"theme.docs.versions.latestVersionLinkLabel",description:"The label used for the latest version suggestion link label"},"latest version")))}},"For up-to-date documentation, see the {latestVersionLink} ({versionLabel}).")}function T(t){let{className:e,versionMetadata:n}=t;const{siteConfig:{title:i}}=(0,b.Z)(),{pluginId:a}=(0,_.gA)({failfast:!0}),{savePreferredVersionName:s}=(0,v.J)(a),{latestDocSuggestion:o,latestVersionSuggestion:c}=(0,_.Jo)(a),l=o??(u=c).docs.find((t=>t.id===u.mainDocId));var u;return r.createElement("div",{className:(0,h.Z)(e,x.k.docs.docVersionBanner,"alert alert--warning margin-bottom--md"),role:"alert"},r.createElement("div",null,r.createElement(E,{siteTitle:i,versionMetadata:n})),r.createElement("div",{className:"margin-top--md"},r.createElement(C,{versionLabel:c.label,to:l.path,onClick:()=>s(c.name)})))}function S(t){let{className:e}=t;const n=(0,k.E)();return n.banner?r.createElement(T,{className:e,versionMetadata:n}):null}function A(t){let{className:e}=t;const n=(0,k.E)();return n.badge?r.createElement("span",{className:(0,h.Z)(e,x.k.docs.docVersionBadge,"badge badge--secondary")},r.createElement(p.Z,{id:"theme.docs.versionBadge.label",values:{versionLabel:n.label}},"Version: {versionLabel}")):null}function L(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.atDate",description:"The words used to describe on which date a page has been last updated",values:{date:r.createElement("b",null,r.createElement("time",{dateTime:new Date(1e3*e).toISOString()},n))}}," on {date}")}function B(t){let{lastUpdatedBy:e}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.byUser",description:"The words used to describe by who the page has been last updated",values:{user:r.createElement("b",null,e)}}," by {user}")}function N(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n,lastUpdatedBy:i}=t;return r.createElement("span",{className:x.k.common.lastUpdated},r.createElement(p.Z,{id:"theme.lastUpdated.lastUpdatedAtBy",description:"The sentence used to display when a page has been last updated, and by who",values:{atDate:e&&n?r.createElement(L,{lastUpdatedAt:e,formattedLastUpdatedAt:n}):"",byUser:i?r.createElement(B,{lastUpdatedBy:i}):""}},"Last updated{atDate}{byUser}"),!1)}const D="iconEdit_Z9Sw";function O(t){let{className:e,...n}=t;return r.createElement("svg",(0,d.Z)({fill:"currentColor",height:"20",width:"20",viewBox:"0 0 40 40",className:(0,h.Z)(D,e),"aria-hidden":"true"},n),r.createElement("g",null,r.createElement("path",{d:"m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"})))}function M(t){let{editUrl:e}=t;return r.createElement("a",{href:e,target:"_blank",rel:"noreferrer noopener",className:x.k.common.editThisPage},r.createElement(O,null),r.createElement(p.Z,{id:"theme.common.editThisPage",description:"The link label to edit the current page"},"Edit this page"))}const I="tag_zVej",F="tagRegular_sFm0",$="tagWithCount_h2kH";function R(t){let{permalink:e,label:n,count:i}=t;return r.createElement(f.Z,{href:e,className:(0,h.Z)(I,i?$:F)},n,i&&r.createElement("span",null,i))}const Z="tags_jXut",P="tag_QGVx";function j(t){let{tags:e}=t;return r.createElement(r.Fragment,null,r.createElement("b",null,r.createElement(p.Z,{id:"theme.tags.tagsListLabel",description:"The label alongside a tag list"},"Tags:")),r.createElement("ul",{className:(0,h.Z)(Z,"padding--none","margin-left--sm")},e.map((t=>{let{label:e,permalink:n}=t;return r.createElement("li",{key:n,className:P},r.createElement(R,{label:e,permalink:n}))}))))}const Y="lastUpdated_vwxv";function z(t){return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterTagsRow,"row margin-bottom--sm")},r.createElement("div",{className:"col"},r.createElement(j,t)))}function U(t){let{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:i,formattedLastUpdatedAt:a}=t;return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterEditMetaRow,"row")},r.createElement("div",{className:"col"},e&&r.createElement(M,{editUrl:e})),r.createElement("div",{className:(0,h.Z)("col",Y)},(n||i)&&r.createElement(N,{lastUpdatedAt:n,formattedLastUpdatedAt:a,lastUpdatedBy:i})))}function W(){const{metadata:t}=c(),{editUrl:e,lastUpdatedAt:n,formattedLastUpdatedAt:i,lastUpdatedBy:a,tags:s}=t,o=s.length>0,l=!!(e||n||a);return o||l?r.createElement("footer",{className:(0,h.Z)(x.k.docs.docFooter,"docusaurus-mt-lg")},o&&r.createElement(z,{tags:s}),l&&r.createElement(U,{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:a,formattedLastUpdatedAt:i})):null}var q=n(6043),H=n(6668);function V(t){const e=t.map((t=>({...t,parentIndex:-1,children:[]}))),n=Array(7).fill(-1);e.forEach(((t,e)=>{const r=n.slice(2,t.level);t.parentIndex=Math.max(...r),n[t.level]=e}));const r=[];return e.forEach((t=>{const{parentIndex:n,...i}=t;n>=0?e[n].children.push(i):r.push(i)})),r}function G(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:r}=t;return e.flatMap((t=>{const e=G({toc:t.children,minHeadingLevel:n,maxHeadingLevel:r});return function(t){return t.level>=n&&t.level<=r}(t)?[{...t,children:e}]:e}))}function X(t){const e=t.getBoundingClientRect();return e.top===e.bottom?X(t.parentNode):e}function K(t,e){let{anchorTopOffset:n}=e;const r=t.find((t=>X(t).top>=n));if(r){return function(t){return t.top>0&&t.bottom<window.innerHeight/2}(X(r))?r:t[t.indexOf(r)-1]??null}return t[t.length-1]??null}function Q(){const t=(0,r.useRef)(0),{navbar:{hideOnScroll:e}}=(0,H.L)();return(0,r.useEffect)((()=>{t.current=e?0:document.querySelector(".navbar").clientHeight}),[e]),t}function J(t){const e=(0,r.useRef)(void 0),n=Q();(0,r.useEffect)((()=>{if(!t)return()=>{};const{linkClassName:r,linkActiveClassName:i,minHeadingLevel:a,maxHeadingLevel:s}=t;function o(){const t=function(t){return Array.from(document.getElementsByClassName(t))}(r),o=function(t){let{minHeadingLevel:e,maxHeadingLevel:n}=t;const r=[];for(let i=e;i<=n;i+=1)r.push(`h${i}.anchor`);return Array.from(document.querySelectorAll(r.join()))}({minHeadingLevel:a,maxHeadingLevel:s}),c=K(o,{anchorTopOffset:n.current}),l=t.find((t=>c&&c.id===function(t){return decodeURIComponent(t.href.substring(t.href.indexOf("#")+1))}(t)));t.forEach((t=>{!function(t,n){n?(e.current&&e.current!==t&&e.current.classList.remove(i),t.classList.add(i),e.current=t):t.classList.remove(i)}(t,t===l)}))}return document.addEventListener("scroll",o),document.addEventListener("resize",o),o(),()=>{document.removeEventListener("scroll",o),document.removeEventListener("resize",o)}}),[t,n])}function tt(t){let{toc:e,className:n,linkClassName:i,isChild:a}=t;return e.length?r.createElement("ul",{className:a?void 0:n},e.map((t=>r.createElement("li",{key:t.id},r.createElement("a",{href:`#${t.id}`,className:i??void 0,dangerouslySetInnerHTML:{__html:t.value}}),r.createElement(tt,{isChild:!0,toc:t.children,className:n,linkClassName:i}))))):null}const et=r.memo(tt);function nt(t){let{toc:e,className:n="table-of-contents table-of-contents__left-border",linkClassName:i="table-of-contents__link",linkActiveClassName:a,minHeadingLevel:s,maxHeadingLevel:o,...c}=t;const l=(0,H.L)(),h=s??l.tableOfContents.minHeadingLevel,u=o??l.tableOfContents.maxHeadingLevel,p=function(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:i}=t;return(0,r.useMemo)((()=>G({toc:V(e),minHeadingLevel:n,maxHeadingLevel:i})),[e,n,i])}({toc:e,minHeadingLevel:h,maxHeadingLevel:u});return J((0,r.useMemo)((()=>{if(i&&a)return{linkClassName:i,linkActiveClassName:a,minHeadingLevel:h,maxHeadingLevel:u}}),[i,a,h,u])),r.createElement(et,(0,d.Z)({toc:p,className:n,linkClassName:i},c))}const rt="tocCollapsibleButton_TO0P",it="tocCollapsibleButtonExpanded_MG3E";function at(t){let{collapsed:e,...n}=t;return r.createElement("button",(0,d.Z)({type:"button"},n,{className:(0,h.Z)("clean-btn",rt,!e&&it,n.className)}),r.createElement(p.Z,{id:"theme.TOCCollapsible.toggleButtonLabel",description:"The label used by the button on the collapsible TOC component"},"On this page"))}const st="tocCollapsible_ETCw",ot="tocCollapsibleContent_vkbj",ct="tocCollapsibleExpanded_sAul";function lt(t){let{toc:e,className:n,minHeadingLevel:i,maxHeadingLevel:a}=t;const{collapsed:s,toggleCollapsed:o}=(0,q.u)({initialState:!0});return r.createElement("div",{className:(0,h.Z)(st,!s&&ct,n)},r.createElement(at,{collapsed:s,onClick:o}),r.createElement(q.z,{lazy:!0,className:ot,collapsed:s},r.createElement(nt,{toc:e,minHeadingLevel:i,maxHeadingLevel:a})))}const ht="tocMobile_ITEo";function ut(){const{toc:t,frontMatter:e}=c();return r.createElement(lt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:(0,h.Z)(x.k.docs.docTocMobile,ht)})}const dt="tableOfContents_bqdL";function pt(t){let{className:e,...n}=t;return r.createElement("div",{className:(0,h.Z)(dt,"thin-scrollbar",e)},r.createElement(nt,(0,d.Z)({},n,{linkClassName:"table-of-contents__link toc-highlight",linkActiveClassName:"table-of-contents__link--active"})))}function ft(){const{toc:t,frontMatter:e}=c();return r.createElement(pt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:x.k.docs.docTocDesktop})}var gt=n(2503),yt=n(3905),mt=n(1769);function bt(t){let{children:e}=t;return r.createElement(yt.Zo,{components:mt.Z},e)}function _t(t){let{children:e}=t;const n=function(){const{metadata:t,frontMatter:e,contentTitle:n}=c();return e.hide_title||void 0!==n?null:t.title}();return r.createElement("div",{className:(0,h.Z)(x.k.docs.docMarkdown,"markdown")},n&&r.createElement("header",null,r.createElement(gt.Z,{as:"h1"},n)),r.createElement(bt,null,e))}var xt=n(3438),vt=n(8596),kt=n(4996);function wt(t){return r.createElement("svg",(0,d.Z)({viewBox:"0 0 24 24"},t),r.createElement("path",{d:"M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z",fill:"currentColor"}))}const Et="breadcrumbHomeIcon_YNFT";function Ct(){const t=(0,kt.Z)("/");return r.createElement("li",{className:"breadcrumbs__item"},r.createElement(f.Z,{"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.home",message:"Home page",description:"The ARIA label for the home page in the breadcrumbs"}),className:"breadcrumbs__link",href:t},r.createElement(wt,{className:Et})))}const Tt="breadcrumbsContainer_Z_bl";function St(t){let{children:e,href:n,isLast:i}=t;const a="breadcrumbs__link";return i?r.createElement("span",{className:a,itemProp:"name"},e):n?r.createElement(f.Z,{className:a,href:n,itemProp:"item"},r.createElement("span",{itemProp:"name"},e)):r.createElement("span",{className:a},e)}function At(t){let{children:e,active:n,index:i,addMicrodata:a}=t;return r.createElement("li",(0,d.Z)({},a&&{itemScope:!0,itemProp:"itemListElement",itemType:"https://schema.org/ListItem"},{className:(0,h.Z)("breadcrumbs__item",{"breadcrumbs__item--active":n})}),e,r.createElement("meta",{itemProp:"position",content:String(i+1)}))}function Lt(){const t=(0,xt.s1)(),e=(0,vt.Ns)();return t?r.createElement("nav",{className:(0,h.Z)(x.k.docs.docBreadcrumbs,Tt),"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.navAriaLabel",message:"Breadcrumbs",description:"The ARIA label for the breadcrumbs"})},r.createElement("ul",{className:"breadcrumbs",itemScope:!0,itemType:"https://schema.org/BreadcrumbList"},e&&r.createElement(Ct,null),t.map(((e,n)=>{const i=n===t.length-1;return r.createElement(At,{key:n,active:i,index:n,addMicrodata:!!e.href},r.createElement(St,{href:e.href,isLast:i},e.label))})))):null}const Bt="docItemContainer_Djhp",Nt="docItemCol_VOVn";function Dt(t){let{children:e}=t;const n=function(){const{frontMatter:t,toc:e}=c(),n=(0,u.i)(),i=t.hide_table_of_contents,a=!i&&e.length>0;return{hidden:i,mobile:a?r.createElement(ut,null):void 0,desktop:!a||"desktop"!==n&&"ssr"!==n?void 0:r.createElement(ft,null)}}();return r.createElement("div",{className:"row"},r.createElement("div",{className:(0,h.Z)("col",!n.hidden&&Nt)},r.createElement(S,null),r.createElement("div",{className:Bt},r.createElement("article",null,r.createElement(Lt,null),r.createElement(A,null),n.mobile,r.createElement(_t,null,e),r.createElement(W,null)),r.createElement(m,null))),n.desktop&&r.createElement("div",{className:"col col--3"},n.desktop))}function Ot(t){const e=`docs-doc-id-${t.content.metadata.unversionedId}`,n=t.content;return r.createElement(o,{content:t.content},r.createElement(i.FG,{className:e},r.createElement(l,null),r.createElement(Dt,null,r.createElement(n,null))))}},2503:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3117),i=n(7294),a=n(6010),s=n(5999),o=n(6668),c=n(9960);const l="anchorWithStickyNavbar_LWe7",h="anchorWithHideOnScrollNavbar_WYt5";function u(t){let{as:e,id:n,...u}=t;const{navbar:{hideOnScroll:d}}=(0,o.L)();if("h1"===e||!n)return i.createElement(e,(0,r.Z)({},u,{id:void 0}));const p=(0,s.I)({id:"theme.common.headingLinkTitle",message:"Direct link to {heading}",description:"Title for link to heading"},{heading:"string"==typeof u.children?u.children:n});return i.createElement(e,(0,r.Z)({},u,{className:(0,a.Z)("anchor",d?h:l,u.className),id:n}),u.children,i.createElement(c.Z,{className:"hash-link",to:`#${n}`,"aria-label":p,title:p},"\u200b"))}},6566:(t,e,n)=>{"use strict";n.d(e,{Z:()=>wt});var r=n(3117),i=n(7294),a=n(5742);var s=n(2389),o=n(6010),c=n(2949),l=n(6668);function h(){const{prism:t}=(0,l.L)(),{colorMode:e}=(0,c.I)(),n=t.theme,r=t.darkTheme||n;return"dark"===e?r:n}var u=n(5281),d=n(7594),p=n.n(d);const f=/title=(?<quote>["'])(?<title>.*?)\1/,g=/\{(?<range>[\d,-]+)\}/,y={js:{start:"\\/\\/",end:""},jsBlock:{start:"\\/\\*",end:"\\*\\/"},jsx:{start:"\\{\\s*\\/\\*",end:"\\*\\/\\s*\\}"},bash:{start:"#",end:""},html:{start:"\x3c!--",end:"--\x3e"}};function m(t,e){const n=t.map((t=>{const{start:n,end:r}=y[t];return`(?:${n}\\s*(${e.flatMap((t=>[t.line,t.block?.start,t.block?.end].filter(Boolean))).join("|")})\\s*${r})`})).join("|");return new RegExp(`^\\s*(?:${n})\\s*$`)}function b(t,e){let n=t.replace(/\n$/,"");const{language:r,magicComments:i,metastring:a}=e;if(a&&g.test(a)){const t=a.match(g).groups.range;if(0===i.length)throw new Error(`A highlight range has been given in code block's metastring (\`\`\` ${a}), but no magic comment config is available. Docusaurus applies the first magic comment entry's className for metastring ranges.`);const e=i[0].className,r=p()(t).filter((t=>t>0)).map((t=>[t-1,[e]]));return{lineClassNames:Object.fromEntries(r),code:n}}if(void 0===r)return{lineClassNames:{},code:n};const s=function(t,e){switch(t){case"js":case"javascript":case"ts":case"typescript":return m(["js","jsBlock"],e);case"jsx":case"tsx":return m(["js","jsBlock","jsx"],e);case"html":return m(["js","jsBlock","html"],e);case"python":case"py":case"bash":return m(["bash"],e);case"markdown":case"md":return m(["html","jsx","bash"],e);default:return m(Object.keys(y),e)}}(r,i),o=n.split("\n"),c=Object.fromEntries(i.map((t=>[t.className,{start:0,range:""}]))),l=Object.fromEntries(i.filter((t=>t.line)).map((t=>{let{className:e,line:n}=t;return[n,e]}))),h=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.start,e]}))),u=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.end,e]})));for(let p=0;p<o.length;){const t=o[p].match(s);if(!t){p+=1;continue}const e=t.slice(1).find((t=>void 0!==t));l[e]?c[l[e]].range+=`${p},`:h[e]?c[h[e]].start=p:u[e]&&(c[u[e]].range+=`${c[u[e]].start}-${p-1},`),o.splice(p,1)}n=o.join("\n");const d={};return Object.entries(c).forEach((t=>{let[e,{range:n}]=t;p()(n).forEach((t=>{d[t]??=[],d[t].push(e)}))})),{lineClassNames:d,code:n}}const _="codeBlockContainer_Ckt0";function x(t){let{as:e,...n}=t;const a=function(t){const e={color:"--prism-color",backgroundColor:"--prism-background-color"},n={};return Object.entries(t.plain).forEach((t=>{let[r,i]=t;const a=e[r];a&&"string"==typeof i&&(n[a]=i)})),n}(h());return i.createElement(e,(0,r.Z)({},n,{style:a,className:(0,o.Z)(n.className,_,u.k.common.codeBlock)}))}const v={codeBlockContent:"codeBlockContent_biex",codeBlockTitle:"codeBlockTitle_Ktv7",codeBlock:"codeBlock_bY9V",codeBlockStandalone:"codeBlockStandalone_MEMb",codeBlockLines:"codeBlockLines_e6Vv",codeBlockLinesWithNumbering:"codeBlockLinesWithNumbering_o6Pm",buttonGroup:"buttonGroup__atx"};function k(t){let{children:e,className:n}=t;return i.createElement(x,{as:"pre",tabIndex:0,className:(0,o.Z)(v.codeBlockStandalone,"thin-scrollbar",n)},i.createElement("code",{className:v.codeBlockLines},e))}var w=n(902);const E={attributes:!0,characterData:!0,childList:!0,subtree:!0};function C(t,e){const[n,r]=(0,i.useState)(),a=(0,i.useCallback)((()=>{r(t.current?.closest("[role=tabpanel][hidden]"))}),[t,r]);(0,i.useEffect)((()=>{a()}),[a]),function(t,e,n){void 0===n&&(n=E);const r=(0,w.zX)(e),a=(0,w.Ql)(n);(0,i.useEffect)((()=>{const e=new MutationObserver(r);return t&&e.observe(t,a),()=>e.disconnect()}),[t,r,a])}(n,(t=>{t.forEach((t=>{"attributes"===t.type&&"hidden"===t.attributeName&&(e(),a())}))}),{attributes:!0,characterData:!1,childList:!1,subtree:!1})}const T={plain:{backgroundColor:"#2a2734",color:"#9a86fd"},styles:[{types:["comment","prolog","doctype","cdata","punctuation"],style:{color:"#6c6783"}},{types:["namespace"],style:{opacity:.7}},{types:["tag","operator","number"],style:{color:"#e09142"}},{types:["property","function"],style:{color:"#9a86fd"}},{types:["tag-id","selector","atrule-id"],style:{color:"#eeebff"}},{types:["attr-name"],style:{color:"#c4b9fe"}},{types:["boolean","string","entity","url","attr-value","keyword","control","directive","unit","statement","regex","atrule","placeholder","variable"],style:{color:"#ffcc99"}},{types:["deleted"],style:{textDecorationLine:"line-through"}},{types:["inserted"],style:{textDecorationLine:"underline"}},{types:["italic"],style:{fontStyle:"italic"}},{types:["important","bold"],style:{fontWeight:"bold"}},{types:["important"],style:{color:"#c4b9fe"}}]};var S={Prism:n(7410).Z,theme:T};function A(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function L(){return L=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t},L.apply(this,arguments)}var B=/\r\n|\r|\n/,N=function(t){0===t.length?t.push({types:["plain"],content:"\n",empty:!0}):1===t.length&&""===t[0].content&&(t[0].content="\n",t[0].empty=!0)},D=function(t,e){var n=t.length;return n>0&&t[n-1]===e?t:t.concat(e)},O=function(t,e){var n=t.plain,r=Object.create(null),i=t.styles.reduce((function(t,n){var r=n.languages,i=n.style;return r&&!r.includes(e)||n.types.forEach((function(e){var n=L({},t[e],i);t[e]=n})),t}),r);return i.root=n,i.plain=L({},n,{backgroundColor:null}),i};function M(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&-1===e.indexOf(r)&&(n[r]=t[r]);return n}const I=function(t){function e(){for(var e=this,n=[],r=arguments.length;r--;)n[r]=arguments[r];t.apply(this,n),A(this,"getThemeDict",(function(t){if(void 0!==e.themeDict&&t.theme===e.prevTheme&&t.language===e.prevLanguage)return e.themeDict;e.prevTheme=t.theme,e.prevLanguage=t.language;var n=t.theme?O(t.theme,t.language):void 0;return e.themeDict=n})),A(this,"getLineProps",(function(t){var n=t.key,r=t.className,i=t.style,a=L({},M(t,["key","className","style","line"]),{className:"token-line",style:void 0,key:void 0}),s=e.getThemeDict(e.props);return void 0!==s&&(a.style=s.plain),void 0!==i&&(a.style=void 0!==a.style?L({},a.style,i):i),void 0!==n&&(a.key=n),r&&(a.className+=" "+r),a})),A(this,"getStyleForToken",(function(t){var n=t.types,r=t.empty,i=n.length,a=e.getThemeDict(e.props);if(void 0!==a){if(1===i&&"plain"===n[0])return r?{display:"inline-block"}:void 0;if(1===i&&!r)return a[n[0]];var s=r?{display:"inline-block"}:{},o=n.map((function(t){return a[t]}));return Object.assign.apply(Object,[s].concat(o))}})),A(this,"getTokenProps",(function(t){var n=t.key,r=t.className,i=t.style,a=t.token,s=L({},M(t,["key","className","style","token"]),{className:"token "+a.types.join(" "),children:a.content,style:e.getStyleForToken(a),key:void 0});return void 0!==i&&(s.style=void 0!==s.style?L({},s.style,i):i),void 0!==n&&(s.key=n),r&&(s.className+=" "+r),s})),A(this,"tokenize",(function(t,e,n,r){var i={code:e,grammar:n,language:r,tokens:[]};t.hooks.run("before-tokenize",i);var a=i.tokens=t.tokenize(i.code,i.grammar,i.language);return t.hooks.run("after-tokenize",i),a}))}return t&&(e.__proto__=t),e.prototype=Object.create(t&&t.prototype),e.prototype.constructor=e,e.prototype.render=function(){var t=this.props,e=t.Prism,n=t.language,r=t.code,i=t.children,a=this.getThemeDict(this.props),s=e.languages[n];return i({tokens:function(t){for(var e=[[]],n=[t],r=[0],i=[t.length],a=0,s=0,o=[],c=[o];s>-1;){for(;(a=r[s]++)<i[s];){var l=void 0,h=e[s],u=n[s][a];if("string"==typeof u?(h=s>0?h:["plain"],l=u):(h=D(h,u.type),u.alias&&(h=D(h,u.alias)),l=u.content),"string"==typeof l){var d=l.split(B),p=d.length;o.push({types:h,content:d[0]});for(var f=1;f<p;f++)N(o),c.push(o=[]),o.push({types:h,content:d[f]})}else s++,e.push(h),n.push(l),r.push(0),i.push(l.length)}s--,e.pop(),n.pop(),r.pop(),i.pop()}return N(o),c}(void 0!==s?this.tokenize(e,r,s,n):[r]),className:"prism-code language-"+n,style:void 0!==a?a.root:{},getLineProps:this.getLineProps,getTokenProps:this.getTokenProps})},e}(i.Component),F="codeLine_lJS_",$="codeLineNumber_Tfdd",R="codeLineContent_feaV";function Z(t){let{line:e,classNames:n,showLineNumbers:a,getLineProps:s,getTokenProps:c}=t;1===e.length&&"\n"===e[0].content&&(e[0].content="");const l=s({line:e,className:(0,o.Z)(n,a&&F)}),h=e.map(((t,e)=>i.createElement("span",(0,r.Z)({key:e},c({token:t,key:e})))));return i.createElement("span",l,a?i.createElement(i.Fragment,null,i.createElement("span",{className:$}),i.createElement("span",{className:R},h)):h,i.createElement("br",null))}var P=n(5999);function j(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"}))}function Y(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"}))}const z={copyButtonCopied:"copyButtonCopied_obH4",copyButtonIcons:"copyButtonIcons_eSgA",copyButtonIcon:"copyButtonIcon_y97N",copyButtonSuccessIcon:"copyButtonSuccessIcon_LjdS"};function U(t){let{code:e,className:n}=t;const[r,a]=(0,i.useState)(!1),s=(0,i.useRef)(void 0),c=(0,i.useCallback)((()=>{!function(t,e){let{target:n=document.body}=void 0===e?{}:e;if("string"!=typeof t)throw new TypeError(`Expected parameter \`text\` to be a \`string\`, got \`${typeof t}\`.`);const r=document.createElement("textarea"),i=document.activeElement;r.value=t,r.setAttribute("readonly",""),r.style.contain="strict",r.style.position="absolute",r.style.left="-9999px",r.style.fontSize="12pt";const a=document.getSelection(),s=a.rangeCount>0&&a.getRangeAt(0);n.append(r),r.select(),r.selectionStart=0,r.selectionEnd=t.length;let o=!1;try{o=document.execCommand("copy")}catch{}r.remove(),s&&(a.removeAllRanges(),a.addRange(s)),i&&i.focus()}(e),a(!0),s.current=window.setTimeout((()=>{a(!1)}),1e3)}),[e]);return(0,i.useEffect)((()=>()=>window.clearTimeout(s.current)),[]),i.createElement("button",{type:"button","aria-label":r?(0,P.I)({id:"theme.CodeBlock.copied",message:"Copied",description:"The copied button label on code blocks"}):(0,P.I)({id:"theme.CodeBlock.copyButtonAriaLabel",message:"Copy code to clipboard",description:"The ARIA label for copy code blocks button"}),title:(0,P.I)({id:"theme.CodeBlock.copy",message:"Copy",description:"The copy button label on code blocks"}),className:(0,o.Z)("clean-btn",n,z.copyButton,r&&z.copyButtonCopied),onClick:c},i.createElement("span",{className:z.copyButtonIcons,"aria-hidden":"true"},i.createElement(j,{className:z.copyButtonIcon}),i.createElement(Y,{className:z.copyButtonSuccessIcon})))}function W(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M4 19h6v-2H4v2zM20 5H4v2h16V5zm-3 6H4v2h13.25c1.1 0 2 .9 2 2s-.9 2-2 2H15v-2l-3 3l3 3v-2h2c2.21 0 4-1.79 4-4s-1.79-4-4-4z"}))}const q="wordWrapButtonIcon_Bwma",H="wordWrapButtonEnabled_EoeP";function V(t){let{className:e,onClick:n,isEnabled:r}=t;const a=(0,P.I)({id:"theme.CodeBlock.wordWrapToggle",message:"Toggle word wrap",description:"The title attribute for toggle word wrapping button of code block lines"});return i.createElement("button",{type:"button",onClick:n,className:(0,o.Z)("clean-btn",e,r&&H),"aria-label":a,title:a},i.createElement(W,{className:q,"aria-hidden":"true"}))}function G(t){let{children:e,className:n="",metastring:a,title:s,showLineNumbers:c,language:u}=t;const{prism:{defaultLanguage:d,magicComments:p}}=(0,l.L)(),g=u??n.split(" ").find((t=>t.startsWith("language-")))?.replace(/language-/,"")??d;const y=h(),m=function(){const[t,e]=(0,i.useState)(!1),[n,r]=(0,i.useState)(!1),a=(0,i.useRef)(null),s=(0,i.useCallback)((()=>{const n=a.current.querySelector("code");t?n.removeAttribute("style"):(n.style.whiteSpace="pre-wrap",n.style.overflowWrap="anywhere"),e((t=>!t))}),[a,t]),o=(0,i.useCallback)((()=>{const{scrollWidth:t,clientWidth:e}=a.current,n=t>e||a.current.querySelector("code").hasAttribute("style");r(n)}),[a]);return C(a,o),(0,i.useEffect)((()=>{o()}),[t,o]),(0,i.useEffect)((()=>(window.addEventListener("resize",o,{passive:!0}),()=>{window.removeEventListener("resize",o)})),[o]),{codeBlockRef:a,isEnabled:t,isCodeScrollable:n,toggle:s}}(),_=function(t){return t?.match(f)?.groups.title??""}(a)||s,{lineClassNames:k,code:w}=b(e,{metastring:a,language:g,magicComments:p}),E=c??function(t){return Boolean(t?.includes("showLineNumbers"))}(a);return i.createElement(x,{as:"div",className:(0,o.Z)(n,g&&!n.includes(`language-${g}`)&&`language-${g}`)},_&&i.createElement("div",{className:v.codeBlockTitle},_),i.createElement("div",{className:v.codeBlockContent},i.createElement(I,(0,r.Z)({},S,{theme:y,code:w,language:g??"text"}),(t=>{let{className:e,tokens:n,getLineProps:r,getTokenProps:a}=t;return i.createElement("pre",{tabIndex:0,ref:m.codeBlockRef,className:(0,o.Z)(e,v.codeBlock,"thin-scrollbar")},i.createElement("code",{className:(0,o.Z)(v.codeBlockLines,E&&v.codeBlockLinesWithNumbering)},n.map(((t,e)=>i.createElement(Z,{key:e,line:t,getLineProps:r,getTokenProps:a,classNames:k[e],showLineNumbers:E})))))})),i.createElement("div",{className:v.buttonGroup},(m.isEnabled||m.isCodeScrollable)&&i.createElement(V,{className:v.codeButton,onClick:()=>m.toggle(),isEnabled:m.isEnabled}),i.createElement(U,{className:v.codeButton,code:w}))))}function X(t){let{children:e,...n}=t;const a=(0,s.Z)(),o=function(t){return i.Children.toArray(t).some((t=>(0,i.isValidElement)(t)))?t:Array.isArray(t)?t.join(""):t}(e),c="string"==typeof o?G:k;return i.createElement(c,(0,r.Z)({key:String(a)},n),o)}var K=n(9960);var Q=n(6043);const J="details_lb9f",tt="isBrowser_bmU9",et="collapsibleContent_i85q";function nt(t){return!!t&&("SUMMARY"===t.tagName||nt(t.parentElement))}function rt(t,e){return!!t&&(t===e||rt(t.parentElement,e))}function it(t){let{summary:e,children:n,...a}=t;const c=(0,s.Z)(),l=(0,i.useRef)(null),{collapsed:h,setCollapsed:u}=(0,Q.u)({initialState:!a.open}),[d,p]=(0,i.useState)(a.open),f=i.isValidElement(e)?e:i.createElement("summary",null,e??"Details");return i.createElement("details",(0,r.Z)({},a,{ref:l,open:d,"data-collapsed":h,className:(0,o.Z)(J,c&&tt,a.className),onMouseDown:t=>{nt(t.target)&&t.detail>1&&t.preventDefault()},onClick:t=>{t.stopPropagation();const e=t.target;nt(e)&&rt(e,l.current)&&(t.preventDefault(),h?(u(!1),p(!0)):u(!0))}}),f,i.createElement(Q.z,{lazy:!1,collapsed:h,disableSSRStyle:!0,onCollapseTransitionEnd:t=>{u(t),p(!t)}},i.createElement("div",{className:et},n)))}const at="details_b_Ee";function st(t){let{...e}=t;return i.createElement(it,(0,r.Z)({},e,{className:(0,o.Z)("alert alert--info",at,e.className)}))}var ot=n(2503);function ct(t){return i.createElement(ot.Z,t)}const lt="containsTaskList_mC6p";const ht="img_ev3q";const ut="admonition_LlT9",dt="admonitionHeading_tbUL",pt="admonitionIcon_kALy",ft="admonitionContent_S0QG";const gt={note:{infimaClassName:"secondary",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"}))},label:i.createElement(P.Z,{id:"theme.admonition.note",description:"The default label used for the Note admonition (:::note)"},"note")},tip:{infimaClassName:"success",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.tip",description:"The default label used for the Tip admonition (:::tip)"},"tip")},danger:{infimaClassName:"danger",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"}))},label:i.createElement(P.Z,{id:"theme.admonition.danger",description:"The default label used for the Danger admonition (:::danger)"},"danger")},info:{infimaClassName:"info",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.info",description:"The default label used for the Info admonition (:::info)"},"info")},caution:{infimaClassName:"warning",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 16 16"},i.createElement("path",{fillRule:"evenodd",d:"M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"}))},label:i.createElement(P.Z,{id:"theme.admonition.caution",description:"The default label used for the Caution admonition (:::caution)"},"caution")}},yt={secondary:"note",important:"info",success:"tip",warning:"danger"};function mt(t){const{mdxAdmonitionTitle:e,rest:n}=function(t){const e=i.Children.toArray(t),n=e.find((t=>i.isValidElement(t)&&"mdxAdmonitionTitle"===t.props?.mdxType)),r=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return{mdxAdmonitionTitle:n,rest:r}}(t.children);return{...t,title:t.title??e,children:n}}function bt(t){let{children:e,fallback:n}=t;return(0,s.Z)()?i.createElement(i.Fragment,null,e?.()):n??null}var _t=n(6432);function xt(){const{colorMode:t}=(0,c.I)(),e=(0,l.L)().mermaid,n=e.theme[t],{options:r}=e;return(0,i.useMemo)((()=>({startOnLoad:!1,...r,theme:n})),[n,r])}const vt="container_lyt7";function kt(t){let{value:e}=t;const n=function(t,e){const n=xt(),r=e??n;return(0,i.useMemo)((()=>{_t.o.mermaidAPI.initialize(r);const e=`mermaid-svg-${Math.round(1e7*Math.random())}`;return _t.o.render(e,t)}),[t,r])}(e);return i.createElement("div",{className:`docusaurus-mermaid-container ${vt}`,dangerouslySetInnerHTML:{__html:n}})}const wt={head:function(t){const e=i.Children.map(t.children,(t=>i.isValidElement(t)?function(t){if(t.props?.mdxType&&t.props.originalType){const{mdxType:e,originalType:n,...r}=t.props;return i.createElement(t.props.originalType,r)}return t}(t):t));return i.createElement(a.Z,t,e)},code:function(t){const e=["a","abbr","b","br","button","cite","code","del","dfn","em","i","img","input","ins","kbd","label","object","output","q","ruby","s","small","span","strong","sub","sup","time","u","var","wbr"];return i.Children.toArray(t.children).every((t=>"string"==typeof t&&!t.includes("\n")||(0,i.isValidElement)(t)&&e.includes(t.props?.mdxType)))?i.createElement("code",t):i.createElement(X,t)},a:function(t){return i.createElement(K.Z,t)},pre:function(t){return i.createElement(X,(0,i.isValidElement)(t.children)&&"code"===t.children.props?.originalType?t.children.props:{...t})},details:function(t){const e=i.Children.toArray(t.children),n=e.find((t=>i.isValidElement(t)&&"summary"===t.props?.mdxType)),a=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return i.createElement(st,(0,r.Z)({},t,{summary:n}),a)},ul:function(t){return i.createElement("ul",(0,r.Z)({},t,{className:(e=t.className,(0,o.Z)(e,e?.includes("contains-task-list")&&lt))}));var e},img:function(t){return i.createElement("img",(0,r.Z)({loading:"lazy"},t,{className:(e=t.className,(0,o.Z)(e,ht))}));var e},h1:t=>i.createElement(ct,(0,r.Z)({as:"h1"},t)),h2:t=>i.createElement(ct,(0,r.Z)({as:"h2"},t)),h3:t=>i.createElement(ct,(0,r.Z)({as:"h3"},t)),h4:t=>i.createElement(ct,(0,r.Z)({as:"h4"},t)),h5:t=>i.createElement(ct,(0,r.Z)({as:"h5"},t)),h6:t=>i.createElement(ct,(0,r.Z)({as:"h6"},t)),admonition:function(t){const{children:e,type:n,title:r,icon:a}=mt(t),s=function(t){const e=yt[t]??t;return gt[e]||(console.warn(`No admonition config found for admonition type "${e}". Using Info as fallback.`),gt.info)}(n),c=r??s.label,{iconComponent:l}=s,h=a??i.createElement(l,null);return i.createElement("div",{className:(0,o.Z)(u.k.common.admonition,u.k.common.admonitionType(t.type),"alert",`alert--${s.infimaClassName}`,ut)},i.createElement("div",{className:dt},i.createElement("span",{className:pt},h),c),i.createElement("div",{className:ft},e))},mermaid:function(t){return i.createElement(bt,null,(()=>i.createElement(kt,t)))}}},5162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7294),i=n(6010);const a="tabItem_Ymn6";function s(t){let{children:e,hidden:n,className:s}=t;return r.createElement("div",{role:"tabpanel",className:(0,i.Z)(a,s),hidden:n},e)}},4866:(t,e,n)=>{"use strict";n.d(e,{Z:()=>k});var r=n(3117),i=n(7294),a=n(6010),s=n(2466),o=n(6775),c=n(1980),l=n(7392),h=n(12);function u(t){return function(t){return i.Children.map(t,(t=>{if(!t||(0,i.isValidElement)(t)&&function(t){const{props:e}=t;return!!e&&"object"==typeof e&&"value"in e}(t))return t;throw new Error(`Docusaurus error: Bad <Tabs> child <${"string"==typeof t.type?t.type:t.type.name}>: all children of the <Tabs> component should be <TabItem>, and every <TabItem> should have a unique "value" prop.`)}))?.filter(Boolean)??[]}(t).map((t=>{let{props:{value:e,label:n,attributes:r,default:i}}=t;return{value:e,label:n,attributes:r,default:i}}))}function d(t){const{values:e,children:n}=t;return(0,i.useMemo)((()=>{const t=e??u(n);return function(t){const e=(0,l.l)(t,((t,e)=>t.value===e.value));if(e.length>0)throw new Error(`Docusaurus error: Duplicate values "${e.map((t=>t.value)).join(", ")}" found in <Tabs>. Every value needs to be unique.`)}(t),t}),[e,n])}function p(t){let{value:e,tabValues:n}=t;return n.some((t=>t.value===e))}function f(t){let{queryString:e=!1,groupId:n}=t;const r=(0,o.k6)(),a=function(t){let{queryString:e=!1,groupId:n}=t;if("string"==typeof e)return e;if(!1===e)return null;if(!0===e&&!n)throw new Error('Docusaurus error: The <Tabs> component groupId prop is required if queryString=true, because this value is used as the search param name. You can also provide an explicit value such as queryString="my-search-param".');return n??null}({queryString:e,groupId:n});return[(0,c._X)(a),(0,i.useCallback)((t=>{if(!a)return;const e=new URLSearchParams(r.location.search);e.set(a,t),r.replace({...r.location,search:e.toString()})}),[a,r])]}function g(t){const{defaultValue:e,queryString:n=!1,groupId:r}=t,a=d(t),[s,o]=(0,i.useState)((()=>function(t){let{defaultValue:e,tabValues:n}=t;if(0===n.length)throw new Error("Docusaurus error: the <Tabs> component requires at least one <TabItem> children component");if(e){if(!p({value:e,tabValues:n}))throw new Error(`Docusaurus error: The <Tabs> has a defaultValue "${e}" but none of its children has the corresponding value. Available values are: ${n.map((t=>t.value)).join(", ")}. If you intend to show no default tab, use defaultValue={null} instead.`);return e}const r=n.find((t=>t.default))??n[0];if(!r)throw new Error("Unexpected error: 0 tabValues");return r.value}({defaultValue:e,tabValues:a}))),[c,l]=f({queryString:n,groupId:r}),[u,g]=function(t){let{groupId:e}=t;const n=function(t){return t?`docusaurus.tab.${t}`:null}(e),[r,a]=(0,h.Nk)(n);return[r,(0,i.useCallback)((t=>{n&&a.set(t)}),[n,a])]}({groupId:r}),y=(()=>{const t=c??u;return p({value:t,tabValues:a})?t:null})();(0,i.useLayoutEffect)((()=>{y&&o(y)}),[y]);return{selectedValue:s,selectValue:(0,i.useCallback)((t=>{if(!p({value:t,tabValues:a}))throw new Error(`Can't select invalid tab value=${t}`);o(t),l(t),g(t)}),[l,g,a]),tabValues:a}}var y=n(2389);const m="tabList__CuJ",b="tabItem_LNqP";function _(t){let{className:e,block:n,selectedValue:o,selectValue:c,tabValues:l}=t;const h=[],{blockElementScrollPositionUntilNextRender:u}=(0,s.o5)(),d=t=>{const e=t.currentTarget,n=h.indexOf(e),r=l[n].value;r!==o&&(u(e),c(r))},p=t=>{let e=null;switch(t.key){case"Enter":d(t);break;case"ArrowRight":{const n=h.indexOf(t.currentTarget)+1;e=h[n]??h[0];break}case"ArrowLeft":{const n=h.indexOf(t.currentTarget)-1;e=h[n]??h[h.length-1];break}}e?.focus()};return i.createElement("ul",{role:"tablist","aria-orientation":"horizontal",className:(0,a.Z)("tabs",{"tabs--block":n},e)},l.map((t=>{let{value:e,label:n,attributes:s}=t;return i.createElement("li",(0,r.Z)({role:"tab",tabIndex:o===e?0:-1,"aria-selected":o===e,key:e,ref:t=>h.push(t),onKeyDown:p,onClick:d},s,{className:(0,a.Z)("tabs__item",b,s?.className,{"tabs__item--active":o===e})}),n??e)})))}function x(t){let{lazy:e,children:n,selectedValue:r}=t;const a=(Array.isArray(n)?n:[n]).filter(Boolean);if(e){const t=a.find((t=>t.props.value===r));return t?(0,i.cloneElement)(t,{className:"margin-top--md"}):null}return i.createElement("div",{className:"margin-top--md"},a.map(((t,e)=>(0,i.cloneElement)(t,{key:e,hidden:t.props.value!==r}))))}function v(t){const e=g(t);return i.createElement("div",{className:(0,a.Z)("tabs-container",m)},i.createElement(_,(0,r.Z)({},t,e)),i.createElement(x,(0,r.Z)({},t,e)))}function k(t){const e=(0,y.Z)();return i.createElement(v,(0,r.Z)({key:String(e)},t))}},4477:(t,e,n)=>{"use strict";n.d(e,{E:()=>o,q:()=>s});var r=n(7294),i=n(902);const a=r.createContext(null);function s(t){let{children:e,version:n}=t;return r.createElement(a.Provider,{value:n},e)}function o(){const t=(0,r.useContext)(a);if(null===t)throw new i.i6("DocsVersionProvider");return t}},7484:function(t){t.exports=function(){"use strict";var t=1e3,e=6e4,n=36e5,r="millisecond",i="second",a="minute",s="hour",o="day",c="week",l="month",h="quarter",u="year",d="date",p="Invalid Date",f=/^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{1,2})?[.:]?(\d+)?$/,g=/\[([^\]]+)]|Y{1,4}|M{1,4}|D{1,2}|d{1,4}|H{1,2}|h{1,2}|a|A|m{1,2}|s{1,2}|Z{1,2}|SSS/g,y={name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),ordinal:function(t){var e=["th","st","nd","rd"],n=t%100;return"["+t+(e[(n-20)%10]||e[n]||e[0])+"]"}},m=function(t,e,n){var r=String(t);return!r||r.length>=e?t:""+Array(e+1-r.length).join(n)+t},b={s:m,z:function(t){var e=-t.utcOffset(),n=Math.abs(e),r=Math.floor(n/60),i=n%60;return(e<=0?"+":"-")+m(r,2,"0")+":"+m(i,2,"0")},m:function t(e,n){if(e.date()<n.date())return-t(n,e);var r=12*(n.year()-e.year())+(n.month()-e.month()),i=e.clone().add(r,l),a=n-i<0,s=e.clone().add(r+(a?-1:1),l);return+(-(r+(n-i)/(a?i-s:s-i))||0)},a:function(t){return t<0?Math.ceil(t)||0:Math.floor(t)},p:function(t){return{M:l,y:u,w:c,d:o,D:d,h:s,m:a,s:i,ms:r,Q:h}[t]||String(t||"").toLowerCase().replace(/s$/,"")},u:function(t){return void 0===t}},_="en",x={};x[_]=y;var v=function(t){return t instanceof C},k=function t(e,n,r){var i;if(!e)return _;if("string"==typeof e){var a=e.toLowerCase();x[a]&&(i=a),n&&(x[a]=n,i=a);var s=e.split("-");if(!i&&s.length>1)return t(s[0])}else{var o=e.name;x[o]=e,i=o}return!r&&i&&(_=i),i||!r&&_},w=function(t,e){if(v(t))return t.clone();var n="object"==typeof e?e:{};return n.date=t,n.args=arguments,new C(n)},E=b;E.l=k,E.i=v,E.w=function(t,e){return w(t,{locale:e.$L,utc:e.$u,x:e.$x,$offset:e.$offset})};var C=function(){function y(t){this.$L=k(t.locale,null,!0),this.parse(t)}var m=y.prototype;return m.parse=function(t){this.$d=function(t){var e=t.date,n=t.utc;if(null===e)return new Date(NaN);if(E.u(e))return new Date;if(e instanceof Date)return new Date(e);if("string"==typeof e&&!/Z$/i.test(e)){var r=e.match(f);if(r){var i=r[2]-1||0,a=(r[7]||"0").substring(0,3);return n?new Date(Date.UTC(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)):new Date(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)}}return new Date(e)}(t),this.$x=t.x||{},this.init()},m.init=function(){var t=this.$d;this.$y=t.getFullYear(),this.$M=t.getMonth(),this.$D=t.getDate(),this.$W=t.getDay(),this.$H=t.getHours(),this.$m=t.getMinutes(),this.$s=t.getSeconds(),this.$ms=t.getMilliseconds()},m.$utils=function(){return E},m.isValid=function(){return!(this.$d.toString()===p)},m.isSame=function(t,e){var n=w(t);return this.startOf(e)<=n&&n<=this.endOf(e)},m.isAfter=function(t,e){return w(t)<this.startOf(e)},m.isBefore=function(t,e){return this.endOf(e)<w(t)},m.$g=function(t,e,n){return E.u(t)?this[e]:this.set(n,t)},m.unix=function(){return Math.floor(this.valueOf()/1e3)},m.valueOf=function(){return this.$d.getTime()},m.startOf=function(t,e){var n=this,r=!!E.u(e)||e,h=E.p(t),p=function(t,e){var i=E.w(n.$u?Date.UTC(n.$y,e,t):new Date(n.$y,e,t),n);return r?i:i.endOf(o)},f=function(t,e){return E.w(n.toDate()[t].apply(n.toDate("s"),(r?[0,0,0,0]:[23,59,59,999]).slice(e)),n)},g=this.$W,y=this.$M,m=this.$D,b="set"+(this.$u?"UTC":"");switch(h){case u:return r?p(1,0):p(31,11);case l:return r?p(1,y):p(0,y+1);case c:var _=this.$locale().weekStart||0,x=(g<_?g+7:g)-_;return p(r?m-x:m+(6-x),y);case o:case d:return f(b+"Hours",0);case s:return f(b+"Minutes",1);case a:return f(b+"Seconds",2);case i:return f(b+"Milliseconds",3);default:return this.clone()}},m.endOf=function(t){return this.startOf(t,!1)},m.$set=function(t,e){var n,c=E.p(t),h="set"+(this.$u?"UTC":""),p=(n={},n[o]=h+"Date",n[d]=h+"Date",n[l]=h+"Month",n[u]=h+"FullYear",n[s]=h+"Hours",n[a]=h+"Minutes",n[i]=h+"Seconds",n[r]=h+"Milliseconds",n)[c],f=c===o?this.$D+(e-this.$W):e;if(c===l||c===u){var g=this.clone().set(d,1);g.$d[p](f),g.init(),this.$d=g.set(d,Math.min(this.$D,g.daysInMonth())).$d}else p&&this.$d[p](f);return this.init(),this},m.set=function(t,e){return this.clone().$set(t,e)},m.get=function(t){return this[E.p(t)]()},m.add=function(r,h){var d,p=this;r=Number(r);var f=E.p(h),g=function(t){var e=w(p);return E.w(e.date(e.date()+Math.round(t*r)),p)};if(f===l)return this.set(l,this.$M+r);if(f===u)return this.set(u,this.$y+r);if(f===o)return g(1);if(f===c)return g(7);var y=(d={},d[a]=e,d[s]=n,d[i]=t,d)[f]||1,m=this.$d.getTime()+r*y;return E.w(m,this)},m.subtract=function(t,e){return this.add(-1*t,e)},m.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return n.invalidDate||p;var r=t||"YYYY-MM-DDTHH:mm:ssZ",i=E.z(this),a=this.$H,s=this.$m,o=this.$M,c=n.weekdays,l=n.months,h=function(t,n,i,a){return t&&(t[n]||t(e,r))||i[n].slice(0,a)},u=function(t){return E.s(a%12||12,t,"0")},d=n.meridiem||function(t,e,n){var r=t<12?"AM":"PM";return n?r.toLowerCase():r},f={YY:String(this.$y).slice(-2),YYYY:this.$y,M:o+1,MM:E.s(o+1,2,"0"),MMM:h(n.monthsShort,o,l,3),MMMM:h(l,o),D:this.$D,DD:E.s(this.$D,2,"0"),d:String(this.$W),dd:h(n.weekdaysMin,this.$W,c,2),ddd:h(n.weekdaysShort,this.$W,c,3),dddd:c[this.$W],H:String(a),HH:E.s(a,2,"0"),h:u(1),hh:u(2),a:d(a,s,!0),A:d(a,s,!1),m:String(s),mm:E.s(s,2,"0"),s:String(this.$s),ss:E.s(this.$s,2,"0"),SSS:E.s(this.$ms,3,"0"),Z:i};return r.replace(g,(function(t,e){return e||f[t]||i.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(r,d,p){var f,g=E.p(d),y=w(r),m=(y.utcOffset()-this.utcOffset())*e,b=this-y,_=E.m(this,y);return _=(f={},f[u]=_/12,f[l]=_,f[h]=_/3,f[c]=(b-m)/6048e5,f[o]=(b-m)/864e5,f[s]=b/n,f[a]=b/e,f[i]=b/t,f)[g]||b,p?_:E.a(_)},m.daysInMonth=function(){return this.endOf(l).$D},m.$locale=function(){return x[this.$L]},m.locale=function(t,e){if(!t)return this.$L;var n=this.clone(),r=k(t,e,!0);return r&&(n.$L=r),n},m.clone=function(){return E.w(this.$d,this)},m.toDate=function(){return new Date(this.valueOf())},m.toJSON=function(){return this.isValid()?this.toISOString():null},m.toISOString=function(){return this.$d.toISOString()},m.toString=function(){return this.$d.toUTCString()},y}(),T=C.prototype;return w.prototype=T,[["$ms",r],["$s",i],["$m",a],["$H",s],["$W",o],["$M",l],["$y",u],["$D",d]].forEach((function(t){T[t[1]]=function(e){return this.$g(e,t[0],t[1])}})),w.extend=function(t,e){return t.$i||(t(e,C,w),t.$i=!0),w},w.locale=k,w.isDayjs=v,w.unix=function(t){return w(1e3*t)},w.en=x[_],w.Ls=x,w.p={},w}()},8734:function(t){t.exports=function(){"use strict";return function(t,e){var n=e.prototype,r=n.format;n.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return r.bind(this)(t);var i=this.$utils(),a=(t||"YYYY-MM-DDTHH:mm:ssZ").replace(/\[([^\]]+)]|Q|wo|ww|w|WW|W|zzz|z|gggg|GGGG|Do|X|x|k{1,2}|S/g,(function(t){switch(t){case"Q":return Math.ceil((e.$M+1)/3);case"Do":return n.ordinal(e.$D);case"gggg":return e.weekYear();case"GGGG":return e.isoWeekYear();case"wo":return n.ordinal(e.week(),"W");case"w":case"ww":return i.s(e.week(),"w"===t?1:2,"0");case"W":case"WW":return i.s(e.isoWeek(),"W"===t?1:2,"0");case"k":case"kk":return i.s(String(0===e.$H?24:e.$H),"k"===t?1:2,"0");case"X":return Math.floor(e.$d.getTime()/1e3);case"x":return e.$d.getTime();case"z":return"["+e.offsetName()+"]";case"zzz":return"["+e.offsetName("long")+"]";default:return t}}));return r.bind(this)(a)}}}()},285:function(t){t.exports=function(){"use strict";var t={LTS:"h:mm:ss A",LT:"h:mm A",L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},e=/(\[[^[]*\])|([-_:/.,()\s]+)|(A|a|YYYY|YY?|MM?M?M?|Do|DD?|hh?|HH?|mm?|ss?|S{1,3}|z|ZZ?)/g,n=/\d\d/,r=/\d\d?/,i=/\d*[^-_:/,()\s\d]+/,a={},s=function(t){return(t=+t)+(t>68?1900:2e3)},o=function(t){return function(e){this[t]=+e}},c=[/[+-]\d\d:?(\d\d)?|Z/,function(t){(this.zone||(this.zone={})).offset=function(t){if(!t)return 0;if("Z"===t)return 0;var e=t.match(/([+-]|\d\d)/g),n=60*e[1]+(+e[2]||0);return 0===n?0:"+"===e[0]?-n:n}(t)}],l=function(t){var e=a[t];return e&&(e.indexOf?e:e.s.concat(e.f))},h=function(t,e){var n,r=a.meridiem;if(r){for(var i=1;i<=24;i+=1)if(t.indexOf(r(i,0,e))>-1){n=i>12;break}}else n=t===(e?"pm":"PM");return n},u={A:[i,function(t){this.afternoon=h(t,!1)}],a:[i,function(t){this.afternoon=h(t,!0)}],S:[/\d/,function(t){this.milliseconds=100*+t}],SS:[n,function(t){this.milliseconds=10*+t}],SSS:[/\d{3}/,function(t){this.milliseconds=+t}],s:[r,o("seconds")],ss:[r,o("seconds")],m:[r,o("minutes")],mm:[r,o("minutes")],H:[r,o("hours")],h:[r,o("hours")],HH:[r,o("hours")],hh:[r,o("hours")],D:[r,o("day")],DD:[n,o("day")],Do:[i,function(t){var e=a.ordinal,n=t.match(/\d+/);if(this.day=n[0],e)for(var r=1;r<=31;r+=1)e(r).replace(/\[|\]/g,"")===t&&(this.day=r)}],M:[r,o("month")],MM:[n,o("month")],MMM:[i,function(t){var e=l("months"),n=(l("monthsShort")||e.map((function(t){return t.slice(0,3)}))).indexOf(t)+1;if(n<1)throw new Error;this.month=n%12||n}],MMMM:[i,function(t){var e=l("months").indexOf(t)+1;if(e<1)throw new Error;this.month=e%12||e}],Y:[/[+-]?\d+/,o("year")],YY:[n,function(t){this.year=s(t)}],YYYY:[/\d{4}/,o("year")],Z:c,ZZ:c};function d(n){var r,i;r=n,i=a&&a.formats;for(var s=(n=r.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(function(e,n,r){var a=r&&r.toUpperCase();return n||i[r]||t[r]||i[a].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(function(t,e,n){return e||n.slice(1)}))}))).match(e),o=s.length,c=0;c<o;c+=1){var l=s[c],h=u[l],d=h&&h[0],p=h&&h[1];s[c]=p?{regex:d,parser:p}:l.replace(/^\[|\]$/g,"")}return function(t){for(var e={},n=0,r=0;n<o;n+=1){var i=s[n];if("string"==typeof i)r+=i.length;else{var a=i.regex,c=i.parser,l=t.slice(r),h=a.exec(l)[0];c.call(e,h),t=t.replace(h,"")}}return function(t){var e=t.afternoon;if(void 0!==e){var n=t.hours;e?n<12&&(t.hours+=12):12===n&&(t.hours=0),delete t.afternoon}}(e),e}}return function(t,e,n){n.p.customParseFormat=!0,t&&t.parseTwoDigitYear&&(s=t.parseTwoDigitYear);var r=e.prototype,i=r.parse;r.parse=function(t){var e=t.date,r=t.utc,s=t.args;this.$u=r;var o=s[1];if("string"==typeof o){var c=!0===s[2],l=!0===s[3],h=c||l,u=s[2];l&&(u=s[2]),a=this.$locale(),!c&&u&&(a=n.Ls[u]),this.$d=function(t,e,n){try{if(["x","X"].indexOf(e)>-1)return new Date(("X"===e?1e3:1)*t);var r=d(e)(t),i=r.year,a=r.month,s=r.day,o=r.hours,c=r.minutes,l=r.seconds,h=r.milliseconds,u=r.zone,p=new Date,f=s||(i||a?1:p.getDate()),g=i||p.getFullYear(),y=0;i&&!a||(y=a>0?a-1:p.getMonth());var m=o||0,b=c||0,_=l||0,x=h||0;return u?new Date(Date.UTC(g,y,f,m,b,_,x+60*u.offset*1e3)):n?new Date(Date.UTC(g,y,f,m,b,_,x)):new Date(g,y,f,m,b,_,x)}catch(t){return new Date("")}}(e,o,r),this.init(),u&&!0!==u&&(this.$L=this.locale(u).$L),h&&e!=this.format(o)&&(this.$d=new Date("")),a={}}else if(o instanceof Array)for(var p=o.length,f=1;f<=p;f+=1){s[1]=o[f-1];var g=n.apply(this,s);if(g.isValid()){this.$d=g.$d,this.$L=g.$L,this.init();break}f===p&&(this.$d=new Date(""))}else i.call(this,t)}}}()},9542:function(t){t.exports=function(){"use strict";var t="day";return function(e,n,r){var i=function(e){return e.add(4-e.isoWeekday(),t)},a=n.prototype;a.isoWeekYear=function(){return i(this).year()},a.isoWeek=function(e){if(!this.$utils().u(e))return this.add(7*(e-this.isoWeek()),t);var n,a,s,o=i(this),c=(n=this.isoWeekYear(),s=4-(a=(this.$u?r.utc:r)().year(n).startOf("year")).isoWeekday(),a.isoWeekday()>4&&(s+=7),a.add(s,t));return o.diff(c,"week")+1},a.isoWeekday=function(t){return this.$utils().u(t)?this.day()||7:this.day(this.day()%7?t:t-7)};var s=a.startOf;a.startOf=function(t,e){var n=this.$utils(),r=!!n.u(e)||e;return"isoweek"===n.p(t)?r?this.date(this.date()-(this.isoWeekday()-1)).startOf("day"):this.date(this.date()-1-(this.isoWeekday()-1)+7).endOf("day"):s.bind(this)(t,e)}}}()},7856:function(t){t.exports=function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,n){return e=Object.setPrototypeOf||function(t,e){return t.__proto__=e,t},e(t,n)}function n(){if("undefined"==typeof Reflect||!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}function r(t,i,a){return r=n()?Reflect.construct:function(t,n,r){var i=[null];i.push.apply(i,n);var a=new(Function.bind.apply(t,i));return r&&e(a,r.prototype),a},r.apply(null,arguments)}function i(t){return a(t)||s(t)||o(t)||l()}function a(t){if(Array.isArray(t))return c(t)}function s(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]||null!=t["@@iterator"])return Array.from(t)}function o(t,e){if(t){if("string"==typeof t)return c(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n||"Set"===n?Array.from(t):"Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?c(t,e):void 0}}function c(t,e){(null==e||e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function l(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var h=Object.hasOwnProperty,u=Object.setPrototypeOf,d=Object.isFrozen,p=Object.getPrototypeOf,f=Object.getOwnPropertyDescriptor,g=Object.freeze,y=Object.seal,m=Object.create,b="undefined"!=typeof Reflect&&Reflect,_=b.apply,x=b.construct;_||(_=function(t,e,n){return t.apply(e,n)}),g||(g=function(t){return t}),y||(y=function(t){return t}),x||(x=function(t,e){return r(t,i(e))});var v=D(Array.prototype.forEach),k=D(Array.prototype.pop),w=D(Array.prototype.push),E=D(String.prototype.toLowerCase),C=D(String.prototype.toString),T=D(String.prototype.match),S=D(String.prototype.replace),A=D(String.prototype.indexOf),L=D(String.prototype.trim),B=D(RegExp.prototype.test),N=O(TypeError);function D(t){return function(e){for(var n=arguments.length,r=new Array(n>1?n-1:0),i=1;i<n;i++)r[i-1]=arguments[i];return _(t,e,r)}}function O(t){return function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];return x(t,n)}}function M(t,e,n){n=n||E,u&&u(t,null);for(var r=e.length;r--;){var i=e[r];if("string"==typeof i){var a=n(i);a!==i&&(d(e)||(e[r]=a),i=a)}t[i]=!0}return t}function I(t){var e,n=m(null);for(e in t)!0===_(h,t,[e])&&(n[e]=t[e]);return n}function F(t,e){for(;null!==t;){var n=f(t,e);if(n){if(n.get)return D(n.get);if("function"==typeof n.value)return D(n.value)}t=p(t)}function r(t){return console.warn("fallback value for",t),null}return r}var $=g(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","section","select","shadow","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),R=g(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Z=g(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),P=g(["animate","color-profile","cursor","discard","fedropshadow","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),j=g(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover"]),Y=g(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),z=g(["#text"]),U=g(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","face","for","headers","height","hidden","high","href","hreflang","id","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","xmlns","slot"]),W=g(["accent-height","accumulate","additive","alignment-baseline","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),q=g(["accent","accentunder","align","bevelled","close","columnsalign","columnlines","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lspace","lquote","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),H=g(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),V=y(/\{\{[\w\W]*|[\w\W]*\}\}/gm),G=y(/<%[\w\W]*|[\w\W]*%>/gm),X=y(/\${[\w\W]*}/gm),K=y(/^data-[\-\w.\u00B7-\uFFFF]/),Q=y(/^aria-[\-\w]+$/),J=y(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),tt=y(/^(?:\w+script|data):/i),et=y(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),nt=y(/^html$/i),rt=function(){return"undefined"==typeof window?null:window},it=function(e,n){if("object"!==t(e)||"function"!=typeof e.createPolicy)return null;var r=null,i="data-tt-policy-suffix";n.currentScript&&n.currentScript.hasAttribute(i)&&(r=n.currentScript.getAttribute(i));var a="dompurify"+(r?"#"+r:"");try{return e.createPolicy(a,{createHTML:function(t){return t},createScriptURL:function(t){return t}})}catch(s){return console.warn("TrustedTypes policy "+a+" could not be created."),null}};function at(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:rt(),n=function(t){return at(t)};if(n.version="2.4.3",n.removed=[],!e||!e.document||9!==e.document.nodeType)return n.isSupported=!1,n;var r=e.document,a=e.document,s=e.DocumentFragment,o=e.HTMLTemplateElement,c=e.Node,l=e.Element,h=e.NodeFilter,u=e.NamedNodeMap,d=void 0===u?e.NamedNodeMap||e.MozNamedAttrMap:u,p=e.HTMLFormElement,f=e.DOMParser,y=e.trustedTypes,m=l.prototype,b=F(m,"cloneNode"),_=F(m,"nextSibling"),x=F(m,"childNodes"),D=F(m,"parentNode");if("function"==typeof o){var O=a.createElement("template");O.content&&O.content.ownerDocument&&(a=O.content.ownerDocument)}var st=it(y,r),ot=st?st.createHTML(""):"",ct=a,lt=ct.implementation,ht=ct.createNodeIterator,ut=ct.createDocumentFragment,dt=ct.getElementsByTagName,pt=r.importNode,ft={};try{ft=I(a).documentMode?a.documentMode:{}}catch(De){}var gt={};n.isSupported="function"==typeof D&&lt&&void 0!==lt.createHTMLDocument&&9!==ft;var yt,mt,bt=V,_t=G,xt=X,vt=K,kt=Q,wt=tt,Et=et,Ct=J,Tt=null,St=M({},[].concat(i($),i(R),i(Z),i(j),i(z))),At=null,Lt=M({},[].concat(i(U),i(W),i(q),i(H))),Bt=Object.seal(Object.create(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),Nt=null,Dt=null,Ot=!0,Mt=!0,It=!1,Ft=!1,$t=!1,Rt=!1,Zt=!1,Pt=!1,jt=!1,Yt=!1,zt=!0,Ut=!1,Wt="user-content-",qt=!0,Ht=!1,Vt={},Gt=null,Xt=M({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","style","svg","template","thead","title","video","xmp"]),Kt=null,Qt=M({},["audio","video","img","source","image","track"]),Jt=null,te=M({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),ee="http://www.w3.org/1998/Math/MathML",ne="http://www.w3.org/2000/svg",re="http://www.w3.org/1999/xhtml",ie=re,ae=!1,se=null,oe=M({},[ee,ne,re],C),ce=["application/xhtml+xml","text/html"],le="text/html",he=null,ue=a.createElement("form"),de=function(t){return t instanceof RegExp||t instanceof Function},pe=function(e){he&&he===e||(e&&"object"===t(e)||(e={}),e=I(e),yt=yt=-1===ce.indexOf(e.PARSER_MEDIA_TYPE)?le:e.PARSER_MEDIA_TYPE,mt="application/xhtml+xml"===yt?C:E,Tt="ALLOWED_TAGS"in e?M({},e.ALLOWED_TAGS,mt):St,At="ALLOWED_ATTR"in e?M({},e.ALLOWED_ATTR,mt):Lt,se="ALLOWED_NAMESPACES"in e?M({},e.ALLOWED_NAMESPACES,C):oe,Jt="ADD_URI_SAFE_ATTR"in e?M(I(te),e.ADD_URI_SAFE_ATTR,mt):te,Kt="ADD_DATA_URI_TAGS"in e?M(I(Qt),e.ADD_DATA_URI_TAGS,mt):Qt,Gt="FORBID_CONTENTS"in e?M({},e.FORBID_CONTENTS,mt):Xt,Nt="FORBID_TAGS"in e?M({},e.FORBID_TAGS,mt):{},Dt="FORBID_ATTR"in e?M({},e.FORBID_ATTR,mt):{},Vt="USE_PROFILES"in e&&e.USE_PROFILES,Ot=!1!==e.ALLOW_ARIA_ATTR,Mt=!1!==e.ALLOW_DATA_ATTR,It=e.ALLOW_UNKNOWN_PROTOCOLS||!1,Ft=e.SAFE_FOR_TEMPLATES||!1,$t=e.WHOLE_DOCUMENT||!1,Pt=e.RETURN_DOM||!1,jt=e.RETURN_DOM_FRAGMENT||!1,Yt=e.RETURN_TRUSTED_TYPE||!1,Zt=e.FORCE_BODY||!1,zt=!1!==e.SANITIZE_DOM,Ut=e.SANITIZE_NAMED_PROPS||!1,qt=!1!==e.KEEP_CONTENT,Ht=e.IN_PLACE||!1,Ct=e.ALLOWED_URI_REGEXP||Ct,ie=e.NAMESPACE||re,e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck)&&(Bt.tagNameCheck=e.CUSTOM_ELEMENT_HANDLING.tagNameCheck),e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)&&(Bt.attributeNameCheck=e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck),e.CUSTOM_ELEMENT_HANDLING&&"boolean"==typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements&&(Bt.allowCustomizedBuiltInElements=e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements),Ft&&(Mt=!1),jt&&(Pt=!0),Vt&&(Tt=M({},i(z)),At=[],!0===Vt.html&&(M(Tt,$),M(At,U)),!0===Vt.svg&&(M(Tt,R),M(At,W),M(At,H)),!0===Vt.svgFilters&&(M(Tt,Z),M(At,W),M(At,H)),!0===Vt.mathMl&&(M(Tt,j),M(At,q),M(At,H))),e.ADD_TAGS&&(Tt===St&&(Tt=I(Tt)),M(Tt,e.ADD_TAGS,mt)),e.ADD_ATTR&&(At===Lt&&(At=I(At)),M(At,e.ADD_ATTR,mt)),e.ADD_URI_SAFE_ATTR&&M(Jt,e.ADD_URI_SAFE_ATTR,mt),e.FORBID_CONTENTS&&(Gt===Xt&&(Gt=I(Gt)),M(Gt,e.FORBID_CONTENTS,mt)),qt&&(Tt["#text"]=!0),$t&&M(Tt,["html","head","body"]),Tt.table&&(M(Tt,["tbody"]),delete Nt.tbody),g&&g(e),he=e)},fe=M({},["mi","mo","mn","ms","mtext"]),ge=M({},["foreignobject","desc","title","annotation-xml"]),ye=M({},["title","style","font","a","script"]),me=M({},R);M(me,Z),M(me,P);var be=M({},j);M(be,Y);var _e=function(t){var e=D(t);e&&e.tagName||(e={namespaceURI:ie,tagName:"template"});var n=E(t.tagName),r=E(e.tagName);return!!se[t.namespaceURI]&&(t.namespaceURI===ne?e.namespaceURI===re?"svg"===n:e.namespaceURI===ee?"svg"===n&&("annotation-xml"===r||fe[r]):Boolean(me[n]):t.namespaceURI===ee?e.namespaceURI===re?"math"===n:e.namespaceURI===ne?"math"===n&&ge[r]:Boolean(be[n]):t.namespaceURI===re?!(e.namespaceURI===ne&&!ge[r])&&!(e.namespaceURI===ee&&!fe[r])&&!be[n]&&(ye[n]||!me[n]):!("application/xhtml+xml"!==yt||!se[t.namespaceURI]))},xe=function(t){w(n.removed,{element:t});try{t.parentNode.removeChild(t)}catch(De){try{t.outerHTML=ot}catch(De){t.remove()}}},ve=function(t,e){try{w(n.removed,{attribute:e.getAttributeNode(t),from:e})}catch(De){w(n.removed,{attribute:null,from:e})}if(e.removeAttribute(t),"is"===t&&!At[t])if(Pt||jt)try{xe(e)}catch(De){}else try{e.setAttribute(t,"")}catch(De){}},ke=function(t){var e,n;if(Zt)t="<remove></remove>"+t;else{var r=T(t,/^[\r\n\t ]+/);n=r&&r[0]}"application/xhtml+xml"===yt&&ie===re&&(t='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+t+"</body></html>");var i=st?st.createHTML(t):t;if(ie===re)try{e=(new f).parseFromString(i,yt)}catch(De){}if(!e||!e.documentElement){e=lt.createDocument(ie,"template",null);try{e.documentElement.innerHTML=ae?ot:i}catch(De){}}var s=e.body||e.documentElement;return t&&n&&s.insertBefore(a.createTextNode(n),s.childNodes[0]||null),ie===re?dt.call(e,$t?"html":"body")[0]:$t?e.documentElement:s},we=function(t){return ht.call(t.ownerDocument||t,t,h.SHOW_ELEMENT|h.SHOW_COMMENT|h.SHOW_TEXT,null,!1)},Ee=function(t){return t instanceof p&&("string"!=typeof t.nodeName||"string"!=typeof t.textContent||"function"!=typeof t.removeChild||!(t.attributes instanceof d)||"function"!=typeof t.removeAttribute||"function"!=typeof t.setAttribute||"string"!=typeof t.namespaceURI||"function"!=typeof t.insertBefore||"function"!=typeof t.hasChildNodes)},Ce=function(e){return"object"===t(c)?e instanceof c:e&&"object"===t(e)&&"number"==typeof e.nodeType&&"string"==typeof e.nodeName},Te=function(t,e,r){gt[t]&&v(gt[t],(function(t){t.call(n,e,r,he)}))},Se=function(t){var e;if(Te("beforeSanitizeElements",t,null),Ee(t))return xe(t),!0;if(B(/[\u0080-\uFFFF]/,t.nodeName))return xe(t),!0;var r=mt(t.nodeName);if(Te("uponSanitizeElement",t,{tagName:r,allowedTags:Tt}),t.hasChildNodes()&&!Ce(t.firstElementChild)&&(!Ce(t.content)||!Ce(t.content.firstElementChild))&&B(/<[/\w]/g,t.innerHTML)&&B(/<[/\w]/g,t.textContent))return xe(t),!0;if("select"===r&&B(/<template/i,t.innerHTML))return xe(t),!0;if(!Tt[r]||Nt[r]){if(!Nt[r]&&Le(r)){if(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,r))return!1;if(Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(r))return!1}if(qt&&!Gt[r]){var i=D(t)||t.parentNode,a=x(t)||t.childNodes;if(a&&i)for(var s=a.length-1;s>=0;--s)i.insertBefore(b(a[s],!0),_(t))}return xe(t),!0}return t instanceof l&&!_e(t)?(xe(t),!0):"noscript"!==r&&"noembed"!==r||!B(/<\/no(script|embed)/i,t.innerHTML)?(Ft&&3===t.nodeType&&(e=t.textContent,e=S(e,bt," "),e=S(e,_t," "),e=S(e,xt," "),t.textContent!==e&&(w(n.removed,{element:t.cloneNode()}),t.textContent=e)),Te("afterSanitizeElements",t,null),!1):(xe(t),!0)},Ae=function(t,e,n){if(zt&&("id"===e||"name"===e)&&(n in a||n in ue))return!1;if(Mt&&!Dt[e]&&B(vt,e));else if(Ot&&B(kt,e));else if(!At[e]||Dt[e]){if(!(Le(t)&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,t)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(t))&&(Bt.attributeNameCheck instanceof RegExp&&B(Bt.attributeNameCheck,e)||Bt.attributeNameCheck instanceof Function&&Bt.attributeNameCheck(e))||"is"===e&&Bt.allowCustomizedBuiltInElements&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,n)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(n))))return!1}else if(Jt[e]);else if(B(Ct,S(n,Et,"")));else if("src"!==e&&"xlink:href"!==e&&"href"!==e||"script"===t||0!==A(n,"data:")||!Kt[t])if(It&&!B(wt,S(n,Et,"")));else if(n)return!1;return!0},Le=function(t){return t.indexOf("-")>0},Be=function(e){var r,i,a,s;Te("beforeSanitizeAttributes",e,null);var o=e.attributes;if(o){var c={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:At};for(s=o.length;s--;){var l=r=o[s],h=l.name,u=l.namespaceURI;if(i="value"===h?r.value:L(r.value),a=mt(h),c.attrName=a,c.attrValue=i,c.keepAttr=!0,c.forceKeepAttr=void 0,Te("uponSanitizeAttribute",e,c),i=c.attrValue,!c.forceKeepAttr&&(ve(h,e),c.keepAttr))if(B(/\/>/i,i))ve(h,e);else{Ft&&(i=S(i,bt," "),i=S(i,_t," "),i=S(i,xt," "));var d=mt(e.nodeName);if(Ae(d,a,i)){if(!Ut||"id"!==a&&"name"!==a||(ve(h,e),i=Wt+i),st&&"object"===t(y)&&"function"==typeof y.getAttributeType)if(u);else switch(y.getAttributeType(d,a)){case"TrustedHTML":i=st.createHTML(i);break;case"TrustedScriptURL":i=st.createScriptURL(i)}try{u?e.setAttributeNS(u,h,i):e.setAttribute(h,i),k(n.removed)}catch(De){}}}}Te("afterSanitizeAttributes",e,null)}},Ne=function t(e){var n,r=we(e);for(Te("beforeSanitizeShadowDOM",e,null);n=r.nextNode();)Te("uponSanitizeShadowNode",n,null),Se(n)||(n.content instanceof s&&t(n.content),Be(n));Te("afterSanitizeShadowDOM",e,null)};return n.sanitize=function(i){var a,o,l,h,u,d=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};if((ae=!i)&&(i="\x3c!--\x3e"),"string"!=typeof i&&!Ce(i)){if("function"!=typeof i.toString)throw N("toString is not a function");if("string"!=typeof(i=i.toString()))throw N("dirty is not a string, aborting")}if(!n.isSupported){if("object"===t(e.toStaticHTML)||"function"==typeof e.toStaticHTML){if("string"==typeof i)return e.toStaticHTML(i);if(Ce(i))return e.toStaticHTML(i.outerHTML)}return i}if(Rt||pe(d),n.removed=[],"string"==typeof i&&(Ht=!1),Ht){if(i.nodeName){var p=mt(i.nodeName);if(!Tt[p]||Nt[p])throw N("root node is forbidden and cannot be sanitized in-place")}}else if(i instanceof c)1===(o=(a=ke("\x3c!----\x3e")).ownerDocument.importNode(i,!0)).nodeType&&"BODY"===o.nodeName||"HTML"===o.nodeName?a=o:a.appendChild(o);else{if(!Pt&&!Ft&&!$t&&-1===i.indexOf("<"))return st&&Yt?st.createHTML(i):i;if(!(a=ke(i)))return Pt?null:Yt?ot:""}a&&Zt&&xe(a.firstChild);for(var f=we(Ht?i:a);l=f.nextNode();)3===l.nodeType&&l===h||Se(l)||(l.content instanceof s&&Ne(l.content),Be(l),h=l);if(h=null,Ht)return i;if(Pt){if(jt)for(u=ut.call(a.ownerDocument);a.firstChild;)u.appendChild(a.firstChild);else u=a;return At.shadowroot&&(u=pt.call(r,u,!0)),u}var g=$t?a.outerHTML:a.innerHTML;return $t&&Tt["!doctype"]&&a.ownerDocument&&a.ownerDocument.doctype&&a.ownerDocument.doctype.name&&B(nt,a.ownerDocument.doctype.name)&&(g="<!DOCTYPE "+a.ownerDocument.doctype.name+">\n"+g),Ft&&(g=S(g,bt," "),g=S(g,_t," "),g=S(g,xt," ")),st&&Yt?st.createHTML(g):g},n.setConfig=function(t){pe(t),Rt=!0},n.clearConfig=function(){he=null,Rt=!1},n.isValidAttribute=function(t,e,n){he||pe({});var r=mt(t),i=mt(e);return Ae(r,i,n)},n.addHook=function(t,e){"function"==typeof e&&(gt[t]=gt[t]||[],w(gt[t],e))},n.removeHook=function(t){if(gt[t])return k(gt[t])},n.removeHooks=function(t){gt[t]&&(gt[t]=[])},n.removeAllHooks=function(){gt={}},n}return at()}()},6432:(t,e,n)=>{"use strict";n.d(e,{a:()=>Mn,b:()=>Fs,c:()=>Yt,d:()=>Dn,e:()=>Pt,f:()=>Ys,g:()=>ar,h:()=>mc,i:()=>hs,j:()=>Pr,k:()=>Yr,l:()=>Nt,m:()=>Dr,n:()=>Ft,o:()=>dp,p:()=>bo,s:()=>pr});const r=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];var r=Array.from("string"==typeof t?[t]:t);r[r.length-1]=r[r.length-1].replace(/\r?\n([\t ]*)$/,"");var i=r.reduce((function(t,e){var n=e.match(/\n([\t ]+|(?!\s).)/g);return n?t.concat(n.map((function(t){var e,n;return null!==(n=null===(e=t.match(/[\t ]/g))||void 0===e?void 0:e.length)&&void 0!==n?n:0}))):t}),[]);if(i.length){var a=new RegExp("\n[\t ]{"+Math.min.apply(Math,i)+"}","g");r=r.map((function(t){return t.replace(a,"\n")}))}r[0]=r[0].replace(/^\r?\n/,"");var s=r[0];return e.forEach((function(t,e){var n=s.match(/(?:^|\n)( *)$/),i=n?n[1]:"",a=t;"string"==typeof t&&t.includes("\n")&&(a=String(t).split("\n").map((function(t,e){return 0===e?t:""+i+t})).join("\n")),s+=a+r[e+1]})),s};var i=n(7484),a=n.n(i),s=n(7967),o=n(9373),l=n(7856),h=n.n(l),u=n(1610),d=n(1691);const p=(t,e)=>{const n=u.Z.parse(t);for(const r in e)n[r]=d.Z.channel.clamp[r](e[r]);return u.Z.stringify(n)},f=(t,e)=>{const n=u.Z.parse(t),r={};for(const i in e)e[i]&&(r[i]=n[i]+e[i]);return p(t,r)};var g=n(1883);const y=(t,e,n=0,r=1)=>{if("number"!=typeof t)return p(t,{a:e});const i=g.Z.set({r:d.Z.channel.clamp.r(t),g:d.Z.channel.clamp.g(e),b:d.Z.channel.clamp.b(n),a:d.Z.channel.clamp.a(r)});return u.Z.stringify(i)},m=(t,e,n=50)=>{const{r:r,g:i,b:a,a:s}=u.Z.parse(t),{r:o,g:c,b:l,a:h}=u.Z.parse(e),d=n/100,p=2*d-1,f=s-h,g=((p*f==-1?p:(p+f)/(1+p*f))+1)/2,m=1-g;return y(r*g+o*m,i*g+c*m,a*g+l*m,s*d+h*(1-d))},b=(t,e=100)=>{const n=u.Z.parse(t);return n.r=255-n.r,n.g=255-n.g,n.b=255-n.b,m(n,t,e)};var _=n(7201),x=n(5920),v=n(2454),k="comm",w="rule",E="decl",C=Math.abs,T=String.fromCharCode;Object.assign;function S(t){return t.trim()}function A(t,e,n){return t.replace(e,n)}function L(t,e){return t.indexOf(e)}function B(t,e){return 0|t.charCodeAt(e)}function N(t,e,n){return t.slice(e,n)}function D(t){return t.length}function O(t){return t.length}function M(t,e){return e.push(t),t}function I(t,e){for(var n="",r=O(t),i=0;i<r;i++)n+=e(t[i],i,t,e)||"";return n}function F(t,e,n,r){switch(t.type){case"@import":case E:return t.return=t.return||t.value;case k:return"";case"@keyframes":return t.return=t.value+"{"+I(t.children,r)+"}";case w:t.value=t.props.join(",")}return D(n=I(t.children,r))?t.return=t.value+"{"+n+"}":""}var $=1,R=1,Z=0,P=0,j=0,Y="";function z(t,e,n,r,i,a,s){return{value:t,root:e,parent:n,type:r,props:i,children:a,line:$,column:R,length:s,return:""}}function U(){return j=P>0?B(Y,--P):0,R--,10===j&&(R=1,$--),j}function W(){return j=P<Z?B(Y,P++):0,R++,10===j&&(R=1,$++),j}function q(){return B(Y,P)}function H(){return P}function V(t,e){return N(Y,t,e)}function G(t){switch(t){case 0:case 9:case 10:case 13:case 32:return 5;case 33:case 43:case 44:case 47:case 62:case 64:case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function X(t){return $=R=1,Z=D(Y=t),P=0,[]}function K(t){return Y="",t}function Q(t){return S(V(P-1,et(91===t?t+2:40===t?t+1:t)))}function J(t){for(;(j=q())&&j<33;)W();return G(t)>2||G(j)>3?"":" "}function tt(t,e){for(;--e&&W()&&!(j<48||j>102||j>57&&j<65||j>70&&j<97););return V(t,H()+(e<6&&32==q()&&32==W()))}function et(t){for(;W();)switch(j){case t:return P;case 34:case 39:34!==t&&39!==t&&et(j);break;case 40:41===t&&et(t);break;case 92:W()}return P}function nt(t,e){for(;W()&&t+j!==57&&(t+j!==84||47!==q()););return"/*"+V(e,P-1)+"*"+T(47===t?t:W())}function rt(t){for(;!G(q());)W();return V(t,P)}function it(t){return K(at("",null,null,null,[""],t=X(t),0,[0],t))}function at(t,e,n,r,i,a,s,o,c){for(var l=0,h=0,u=s,d=0,p=0,f=0,g=1,y=1,m=1,b=0,_="",x=i,v=a,k=r,w=_;y;)switch(f=b,b=W()){case 40:if(108!=f&&58==B(w,u-1)){-1!=L(w+=A(Q(b),"&","&\f"),"&\f")&&(m=-1);break}case 34:case 39:case 91:w+=Q(b);break;case 9:case 10:case 13:case 32:w+=J(f);break;case 92:w+=tt(H()-1,7);continue;case 47:switch(q()){case 42:case 47:M(ot(nt(W(),H()),e,n),c);break;default:w+="/"}break;case 123*g:o[l++]=D(w)*m;case 125*g:case 59:case 0:switch(b){case 0:case 125:y=0;case 59+h:p>0&&D(w)-u&&M(p>32?ct(w+";",r,n,u-1):ct(A(w," ","")+";",r,n,u-2),c);break;case 59:w+=";";default:if(M(k=st(w,e,n,l,h,i,o,_,x=[],v=[],u),a),123===b)if(0===h)at(w,e,k,k,x,a,u,o,v);else switch(99===d&&110===B(w,3)?100:d){case 100:case 109:case 115:at(t,k,k,r&&M(st(t,k,k,0,0,i,o,_,i,x=[],u),v),i,v,u,o,r?x:v);break;default:at(w,k,k,k,[""],v,0,o,v)}}l=h=p=0,g=m=1,_=w="",u=s;break;case 58:u=1+D(w),p=f;default:if(g<1)if(123==b)--g;else if(125==b&&0==g++&&125==U())continue;switch(w+=T(b),b*g){case 38:m=h>0?1:(w+="\f",-1);break;case 44:o[l++]=(D(w)-1)*m,m=1;break;case 64:45===q()&&(w+=Q(W())),d=q(),h=u=D(_=w+=rt(H())),b++;break;case 45:45===f&&2==D(w)&&(g=0)}}return a}function st(t,e,n,r,i,a,s,o,c,l,h){for(var u=i-1,d=0===i?a:[""],p=O(d),f=0,g=0,y=0;f<r;++f)for(var m=0,b=N(t,u+1,u=C(g=s[f])),_=t;m<p;++m)(_=S(g>0?d[m]+" "+b:A(b,/&\f/g,d[m])))&&(c[y++]=_);return z(t,e,n,0===i?w:o,c,l,h)}function ot(t,e,n){return z(t,e,n,k,T(j),N(t,2,-2),0)}function ct(t,e,n,r){return z(t,e,n,E,N(t,0,r),N(t,r+1,-1),r)}var lt=n(277),ht=n(5625),ut=n(9354);const dt=[];for(let c=0;c<256;++c)dt.push((c+256).toString(16).slice(1));function pt(t,e=0){return(dt[t[e+0]]+dt[t[e+1]]+dt[t[e+2]]+dt[t[e+3]]+"-"+dt[t[e+4]]+dt[t[e+5]]+"-"+dt[t[e+6]]+dt[t[e+7]]+"-"+dt[t[e+8]]+dt[t[e+9]]+"-"+dt[t[e+10]]+dt[t[e+11]]+dt[t[e+12]]+dt[t[e+13]]+dt[t[e+14]]+dt[t[e+15]]).toLowerCase()}const ft=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000)$/i;const gt=function(t){return"string"==typeof t&&ft.test(t)};const yt=function(t){if(!gt(t))throw TypeError("Invalid UUID");let e;const n=new Uint8Array(16);return n[0]=(e=parseInt(t.slice(0,8),16))>>>24,n[1]=e>>>16&255,n[2]=e>>>8&255,n[3]=255&e,n[4]=(e=parseInt(t.slice(9,13),16))>>>8,n[5]=255&e,n[6]=(e=parseInt(t.slice(14,18),16))>>>8,n[7]=255&e,n[8]=(e=parseInt(t.slice(19,23),16))>>>8,n[9]=255&e,n[10]=(e=parseInt(t.slice(24,36),16))/1099511627776&255,n[11]=e/4294967296&255,n[12]=e>>>24&255,n[13]=e>>>16&255,n[14]=e>>>8&255,n[15]=255&e,n};function mt(t,e,n,r){switch(t){case 0:return e&n^~e&r;case 1:case 3:return e^n^r;case 2:return e&n^e&r^n&r}}function bt(t,e){return t<<e|t>>>32-e}const _t=function(t){const e=[1518500249,1859775393,2400959708,3395469782],n=[1732584193,4023233417,2562383102,271733878,3285377520];if("string"==typeof t){const e=unescape(encodeURIComponent(t));t=[];for(let n=0;n<e.length;++n)t.push(e.charCodeAt(n))}else Array.isArray(t)||(t=Array.prototype.slice.call(t));t.push(128);const r=t.length/4+2,i=Math.ceil(r/16),a=new Array(i);for(let s=0;s<i;++s){const e=new Uint32Array(16);for(let n=0;n<16;++n)e[n]=t[64*s+4*n]<<24|t[64*s+4*n+1]<<16|t[64*s+4*n+2]<<8|t[64*s+4*n+3];a[s]=e}a[i-1][14]=8*(t.length-1)/Math.pow(2,32),a[i-1][14]=Math.floor(a[i-1][14]),a[i-1][15]=8*(t.length-1)&4294967295;for(let s=0;s<i;++s){const t=new Uint32Array(80);for(let e=0;e<16;++e)t[e]=a[s][e];for(let e=16;e<80;++e)t[e]=bt(t[e-3]^t[e-8]^t[e-14]^t[e-16],1);let r=n[0],i=n[1],o=n[2],c=n[3],l=n[4];for(let n=0;n<80;++n){const a=Math.floor(n/20),s=bt(r,5)+mt(a,i,o,c)+l+e[a]+t[n]>>>0;l=c,c=o,o=bt(i,30)>>>0,i=r,r=s}n[0]=n[0]+r>>>0,n[1]=n[1]+i>>>0,n[2]=n[2]+o>>>0,n[3]=n[3]+c>>>0,n[4]=n[4]+l>>>0}return[n[0]>>24&255,n[0]>>16&255,n[0]>>8&255,255&n[0],n[1]>>24&255,n[1]>>16&255,n[1]>>8&255,255&n[1],n[2]>>24&255,n[2]>>16&255,n[2]>>8&255,255&n[2],n[3]>>24&255,n[3]>>16&255,n[3]>>8&255,255&n[3],n[4]>>24&255,n[4]>>16&255,n[4]>>8&255,255&n[4]]},xt=function(t,e,n){function r(t,r,i,a){var s;if("string"==typeof t&&(t=function(t){t=unescape(encodeURIComponent(t));const e=[];for(let n=0;n<t.length;++n)e.push(t.charCodeAt(n));return e}(t)),"string"==typeof r&&(r=yt(r)),16!==(null===(s=r)||void 0===s?void 0:s.length))throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");let o=new Uint8Array(16+t.length);if(o.set(r),o.set(t,r.length),o=n(o),o[6]=15&o[6]|e,o[8]=63&o[8]|128,i){a=a||0;for(let t=0;t<16;++t)i[a+t]=o[t];return i}return pt(o)}try{r.name=t}catch(i){}return r.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",r.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8",r}("v5",80,_t),vt=xt;n(1518),n(6225);var kt=n(3349),wt=(n(3352),n(2930),n(9542)),Et=n.n(wt),Ct=n(285),Tt=n.n(Ct),St=n(8734),At=n.n(St),Lt=n(9697);const Bt={trace:0,debug:1,info:2,warn:3,error:4,fatal:5},Nt={trace:(...t)=>{},debug:(...t)=>{},info:(...t)=>{},warn:(...t)=>{},error:(...t)=>{},fatal:(...t)=>{}},Dt=function(t="fatal"){let e=Bt.fatal;"string"==typeof t?(t=t.toLowerCase())in Bt&&(e=Bt[t]):"number"==typeof t&&(e=t),Nt.trace=()=>{},Nt.debug=()=>{},Nt.info=()=>{},Nt.warn=()=>{},Nt.error=()=>{},Nt.fatal=()=>{},e<=Bt.fatal&&(Nt.fatal=console.error?console.error.bind(console,Ot("FATAL"),"color: orange"):console.log.bind(console,"\x1b[35m",Ot("FATAL"))),e<=Bt.error&&(Nt.error=console.error?console.error.bind(console,Ot("ERROR"),"color: orange"):console.log.bind(console,"\x1b[31m",Ot("ERROR"))),e<=Bt.warn&&(Nt.warn=console.warn?console.warn.bind(console,Ot("WARN"),"color: orange"):console.log.bind(console,"\x1b[33m",Ot("WARN"))),e<=Bt.info&&(Nt.info=console.info?console.info.bind(console,Ot("INFO"),"color: lightblue"):console.log.bind(console,"\x1b[34m",Ot("INFO"))),e<=Bt.debug&&(Nt.debug=console.debug?console.debug.bind(console,Ot("DEBUG"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("DEBUG"))),e<=Bt.trace&&(Nt.trace=console.debug?console.debug.bind(console,Ot("TRACE"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("TRACE")))},Ot=t=>`%c${a()().format("ss.SSS")} : ${t} : `,Mt=t=>h().sanitize(t),It=(t,e)=>{var n;if(!1!==(null==(n=e.flowchart)?void 0:n.htmlLabels)){const n=e.securityLevel;"antiscript"===n||"strict"===n?t=Mt(t):"loose"!==n&&(t=(t=(t=Zt(t)).replace(/</g,"&lt;").replace(/>/g,"&gt;")).replace(/=/g,"&equals;"),t=Rt(t))}return t},Ft=(t,e)=>t?t=e.dompurifyConfig?h().sanitize(It(t,e),e.dompurifyConfig).toString():h().sanitize(It(t,e),{FORBID_TAGS:["style"]}).toString():t,$t=/<br\s*\/?>/gi,Rt=t=>t.replace(/#br#/g,"<br/>"),Zt=t=>t.replace($t,"#br#"),Pt=t=>!1!==t&&!["false","null","0"].includes(String(t).trim().toLowerCase()),jt=function(t){let e=t;if(t.split("~").length-1>=2){let t=e;do{e=t,t=e.replace(/~([^\s,:;]+)~/,"<$1>")}while(t!=e);return jt(t)}return e},Yt={getRows:t=>{if(!t)return[""];return Zt(t).replace(/\\n/g,"#br#").split("#br#")},sanitizeText:Ft,sanitizeTextOrArray:(t,e)=>"string"==typeof t?Ft(t,e):t.flat().map((t=>Ft(t,e))),hasBreaks:t=>$t.test(t),splitBreaks:t=>t.split($t),lineBreakRegex:$t,removeScript:Mt,getUrl:t=>{let e="";return t&&(e=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,e=e.replaceAll(/\(/g,"\\("),e=e.replaceAll(/\)/g,"\\)")),e},evaluate:Pt},zt=(t,e)=>f(t,e?{s:-40,l:10}:{s:-40,l:-10}),Ut="#ffffff",Wt="#f2f2f2";class qt{constructor(){this.primaryColor="#eee",this.contrast="#707070",this.secondaryColor=(0,x.Z)(this.contrast,55),this.background="#ffffff",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#eee",this.secondBkg="calculated",this.lineColor="#666",this.border1="#999",this.border2="calculated",this.note="#ffa",this.text="#333",this.critical="#d42",this.done="#bbb",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="white",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="calculated",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="white",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBkgColor="calculated",this.critBorderColor="calculated",this.todayLineColor="calculated",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.secondBkg=(0,x.Z)(this.contrast,55),this.border2=this.contrast,this.cScale0=this.cScale0||"#555",this.cScale1=this.cScale1||"#F4F4F4",this.cScale2=this.cScale2||"#555",this.cScale3=this.cScale3||"#BBB",this.cScale4=this.cScale4||"#777",this.cScale5=this.cScale5||"#999",this.cScale6=this.cScale6||"#DDD",this.cScale7=this.cScale7||"#FFF",this.cScale8=this.cScale8||"#DDD",this.cScale9=this.cScale9||"#BBB",this.cScale10=this.cScale10||"#999",this.cScale11=this.cScale11||"#777";for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this.darkMode?this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10):this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],10);this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor),this.cScaleLabel0=this.cScaleLabel0||this.cScale1,this.cScaleLabel2=this.cScaleLabel2||this.cScale1;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.text,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.actorTextColor=this.text,this.actorLineColor=this.lineColor,this.signalColor=this.text,this.signalTextColor=this.text,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.text,this.loopTextColor=this.text,this.noteBorderColor="#999",this.noteBkgColor="#666",this.noteTextColor="#fff",this.sectionBkgColor=(0,x.Z)(this.contrast,30),this.sectionBkgColor2=(0,x.Z)(this.contrast,30),this.taskBorderColor=(0,_.Z)(this.contrast,10),this.taskBkgColor=this.contrast,this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor=this.text,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.gridColor=(0,x.Z)(this.border1,30),this.doneTaskBkgColor=this.done,this.doneTaskBorderColor=this.lineColor,this.critBkgColor=this.critical,this.critBorderColor=(0,_.Z)(this.critBkgColor,10),this.todayLineColor=this.critBkgColor,this.transitionColor=this.transitionColor||"#000",this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f4f4f4",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.stateBorder=this.stateBorder||"#000",this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#222",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pie12=this.pie0,this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,_.Z)(this.pie1,25)||this.primaryColor,this.git1=this.pie2||this.secondaryColor,this.git2=this.pie3||this.tertiaryColor,this.git3=this.pie4||f(this.primaryColor,{h:-30}),this.git4=this.pie5||f(this.primaryColor,{h:-60}),this.git5=this.pie6||f(this.primaryColor,{h:-90}),this.git6=this.pie7||f(this.primaryColor,{h:60}),this.git7=this.pie8||f(this.primaryColor,{h:120}),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||this.labelTextColor,this.gitBranchLabel0=this.branchLabelColor,this.gitBranchLabel1="white",this.gitBranchLabel2=this.branchLabelColor,this.gitBranchLabel3="white",this.gitBranchLabel4=this.branchLabelColor,this.gitBranchLabel5=this.branchLabelColor,this.gitBranchLabel6=this.branchLabelColor,this.gitBranchLabel7=this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}}const Ht={base:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#fff4dd",this.noteBkgColor="#fff5ad",this.noteTextColor="#333",this.THEME_COLOR_LIMIT=12,this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px"}updateColors(){if(this.primaryTextColor=this.primaryTextColor||(this.darkMode?"#eee":"#333"),this.secondaryColor=this.secondaryColor||f(this.primaryColor,{h:-120}),this.tertiaryColor=this.tertiaryColor||f(this.primaryColor,{h:180,l:5}),this.primaryBorderColor=this.primaryBorderColor||zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=this.secondaryBorderColor||zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=this.tertiaryBorderColor||zt(this.tertiaryColor,this.darkMode),this.noteBorderColor=this.noteBorderColor||zt(this.noteBkgColor,this.darkMode),this.noteBkgColor=this.noteBkgColor||"#fff5ad",this.noteTextColor=this.noteTextColor||"#333",this.secondaryTextColor=this.secondaryTextColor||b(this.secondaryColor),this.tertiaryTextColor=this.tertiaryTextColor||b(this.tertiaryColor),this.lineColor=this.lineColor||b(this.background),this.textColor=this.textColor||this.primaryTextColor,this.nodeBkg=this.nodeBkg||this.primaryColor,this.mainBkg=this.mainBkg||this.primaryColor,this.nodeBorder=this.nodeBorder||this.primaryBorderColor,this.clusterBkg=this.clusterBkg||this.tertiaryColor,this.clusterBorder=this.clusterBorder||this.tertiaryBorderColor,this.defaultLinkColor=this.defaultLinkColor||this.lineColor,this.titleColor=this.titleColor||this.tertiaryTextColor,this.edgeLabelBackground=this.edgeLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.nodeTextColor=this.nodeTextColor||this.primaryTextColor,this.actorBorder=this.actorBorder||this.primaryBorderColor,this.actorBkg=this.actorBkg||this.mainBkg,this.actorTextColor=this.actorTextColor||this.primaryTextColor,this.actorLineColor=this.actorLineColor||"grey",this.labelBoxBkgColor=this.labelBoxBkgColor||this.actorBkg,this.signalColor=this.signalColor||this.textColor,this.signalTextColor=this.signalTextColor||this.textColor,this.labelBoxBorderColor=this.labelBoxBorderColor||this.actorBorder,this.labelTextColor=this.labelTextColor||this.actorTextColor,this.loopTextColor=this.loopTextColor||this.actorTextColor,this.activationBorderColor=this.activationBorderColor||(0,_.Z)(this.secondaryColor,10),this.activationBkgColor=this.activationBkgColor||this.secondaryColor,this.sequenceNumberColor=this.sequenceNumberColor||b(this.lineColor),this.sectionBkgColor=this.sectionBkgColor||this.tertiaryColor,this.altSectionBkgColor=this.altSectionBkgColor||"white",this.sectionBkgColor=this.sectionBkgColor||this.secondaryColor,this.sectionBkgColor2=this.sectionBkgColor2||this.primaryColor,this.excludeBkgColor=this.excludeBkgColor||"#eeeeee",this.taskBorderColor=this.taskBorderColor||this.primaryBorderColor,this.taskBkgColor=this.taskBkgColor||this.primaryColor,this.activeTaskBorderColor=this.activeTaskBorderColor||this.primaryColor,this.activeTaskBkgColor=this.activeTaskBkgColor||(0,x.Z)(this.primaryColor,23),this.gridColor=this.gridColor||"lightgrey",this.doneTaskBkgColor=this.doneTaskBkgColor||"lightgrey",this.doneTaskBorderColor=this.doneTaskBorderColor||"grey",this.critBorderColor=this.critBorderColor||"#ff8888",this.critBkgColor=this.critBkgColor||"red",this.todayLineColor=this.todayLineColor||"red",this.taskTextColor=this.taskTextColor||this.textColor,this.taskTextOutsideColor=this.taskTextOutsideColor||this.textColor,this.taskTextLightColor=this.taskTextLightColor||this.textColor,this.taskTextColor=this.taskTextColor||this.primaryTextColor,this.taskTextDarkColor=this.taskTextDarkColor||this.textColor,this.taskTextClickableColor=this.taskTextClickableColor||"#003163",this.personBorder=this.personBorder||this.primaryBorderColor,this.personBkg=this.personBkg||this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||this.tertiaryColor,this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.specialStateColor=this.lineColor,this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210,l:150}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.darkMode)for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],75);else for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],25);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleInv"+e]=this["cScaleInv"+e]||b(this["cScale"+e]);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this.darkMode?this["cScalePeer"+e]=this["cScalePeer"+e]||(0,x.Z)(this["cScale"+e],10):this["cScalePeer"+e]=this["cScalePeer"+e]||(0,_.Z)(this["cScale"+e],10);this.scaleLabelColor=this.scaleLabelColor||this.labelTextColor;for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleLabel"+e]=this["cScaleLabel"+e]||this.scaleLabelColor;const t=this.darkMode?-4:-1;for(let e=0;e<5;e++)this["surface"+e]=this["surface"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(5+3*e)}),this["surfacePeer"+e]=this["surfacePeer"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(8+3*e)});this.classText=this.classText||this.textColor,this.fillType0=this.fillType0||this.primaryColor,this.fillType1=this.fillType1||this.secondaryColor,this.fillType2=this.fillType2||f(this.primaryColor,{h:64}),this.fillType3=this.fillType3||f(this.secondaryColor,{h:64}),this.fillType4=this.fillType4||f(this.primaryColor,{h:-64}),this.fillType5=this.fillType5||f(this.secondaryColor,{h:-64}),this.fillType6=this.fillType6||f(this.primaryColor,{h:128}),this.fillType7=this.fillType7||f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-10}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-10}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-20}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-20}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-10}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||(this.darkMode?"black":this.labelTextColor),this.gitBranchLabel0=this.gitBranchLabel0||this.branchLabelColor,this.gitBranchLabel1=this.gitBranchLabel1||this.branchLabelColor,this.gitBranchLabel2=this.gitBranchLabel2||this.branchLabelColor,this.gitBranchLabel3=this.gitBranchLabel3||this.branchLabelColor,this.gitBranchLabel4=this.gitBranchLabel4||this.branchLabelColor,this.gitBranchLabel5=this.gitBranchLabel5||this.branchLabelColor,this.gitBranchLabel6=this.gitBranchLabel6||this.branchLabelColor,this.gitBranchLabel7=this.gitBranchLabel7||this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},dark:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#333",this.primaryColor="#1f2020",this.secondaryColor=(0,x.Z)(this.primaryColor,16),this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=b(this.background),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#1f2020",this.secondBkg="calculated",this.mainContrastColor="lightgrey",this.darkTextColor=(0,x.Z)(b("#323D47"),10),this.lineColor="calculated",this.border1="#81B1DB",this.border2=y(255,255,255,.25),this.arrowheadColor="calculated",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#181818",this.textColor="#ccc",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#F9FFFE",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="calculated",this.activationBkgColor="calculated",this.sequenceNumberColor="black",this.sectionBkgColor=(0,_.Z)("#EAE8D9",30),this.altSectionBkgColor="calculated",this.sectionBkgColor2="#EAE8D9",this.taskBorderColor=y(255,255,255,70),this.taskBkgColor="calculated",this.taskTextColor="calculated",this.taskTextLightColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor=y(255,255,255,50),this.activeTaskBkgColor="#81B1DB",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="grey",this.critBorderColor="#E83737",this.critBkgColor="#E83737",this.taskTextDarkColor="calculated",this.todayLineColor="#DB5757",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="calculated",this.errorBkgColor="#a44141",this.errorTextColor="#ddd"}updateColors(){this.secondBkg=(0,x.Z)(this.mainBkg,16),this.lineColor=this.mainContrastColor,this.arrowheadColor=this.mainContrastColor,this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.edgeLabelBackground=(0,x.Z)(this.labelBackground,25),this.actorBorder=this.border1,this.actorBkg=this.mainBkg,this.actorTextColor=this.mainContrastColor,this.actorLineColor=this.mainContrastColor,this.signalColor=this.mainContrastColor,this.signalTextColor=this.mainContrastColor,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.mainContrastColor,this.loopTextColor=this.mainContrastColor,this.noteBorderColor=this.secondaryBorderColor,this.noteBkgColor=this.secondBkg,this.noteTextColor=this.secondaryTextColor,this.activationBorderColor=this.border1,this.activationBkgColor=this.secondBkg,this.altSectionBkgColor=this.background,this.taskBkgColor=(0,x.Z)(this.mainBkg,23),this.taskTextColor=this.darkTextColor,this.taskTextLightColor=this.mainContrastColor,this.taskTextOutsideColor=this.taskTextLightColor,this.gridColor=this.mainContrastColor,this.doneTaskBkgColor=this.mainContrastColor,this.taskTextDarkColor=this.darkTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#555",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#f4f4f4",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.cScale1=this.cScale1||"#0b0000",this.cScale2=this.cScale2||"#4d1037",this.cScale3=this.cScale3||"#3f5258",this.cScale4=this.cScale4||"#4f2f1b",this.cScale5=this.cScale5||"#6e0a0a",this.cScale6=this.cScale6||"#3b0048",this.cScale7=this.cScale7||"#995a01",this.cScale8=this.cScale8||"#154706",this.cScale9=this.cScale9||"#161722",this.cScale10=this.cScale10||"#00296f",this.cScale11=this.cScale11||"#01629c",this.cScale12=this.cScale12||"#010029",this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10);for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-10)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-7)});this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.classText=this.primaryTextColor,this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,x.Z)(this.secondaryColor,20),this.git1=(0,x.Z)(this.pie2||this.secondaryColor,20),this.git2=(0,x.Z)(this.pie3||this.tertiaryColor,20),this.git3=(0,x.Z)(this.pie4||f(this.primaryColor,{h:-30}),20),this.git4=(0,x.Z)(this.pie5||f(this.primaryColor,{h:-60}),20),this.git5=(0,x.Z)(this.pie6||f(this.primaryColor,{h:-90}),10),this.git6=(0,x.Z)(this.pie7||f(this.primaryColor,{h:60}),10),this.git7=(0,x.Z)(this.pie8||f(this.primaryColor,{h:120}),20),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||(0,x.Z)(this.background,12),this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||(0,x.Z)(this.background,2)}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},default:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#ECECFF",this.secondaryColor=f(this.primaryColor,{h:120}),this.secondaryColor="#ffffde",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.background="white",this.mainBkg="#ECECFF",this.secondBkg="#ffffde",this.lineColor="#333333",this.border1="#9370DB",this.border2="#aaaa33",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#e8e8e8",this.textColor="#333",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="calculated",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="calculated",this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor="calculated",this.taskTextOutsideColor=this.taskTextDarkColor,this.taskTextClickableColor="calculated",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBorderColor="calculated",this.critBkgColor="calculated",this.todayLineColor="calculated",this.sectionBkgColor=y(102,102,255,.49),this.altSectionBkgColor="white",this.sectionBkgColor2="#fff400",this.taskBorderColor="#534fbc",this.taskBkgColor="#8a90dd",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="#534fbc",this.activeTaskBkgColor="#bfc7ff",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222",this.updateColors()}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,l:-(7+5*t)});if(this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor,"calculated"!==this.labelTextColor){this.cScaleLabel0=this.cScaleLabel0||b(this.labelTextColor),this.cScaleLabel3=this.cScaleLabel3||b(this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.labelTextColor}this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.textColor,this.edgeLabelBackground=this.labelBackground,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.signalColor=this.textColor,this.signalTextColor=this.textColor,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||f(this.tertiaryColor,{l:-40}),this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-20}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-20}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-40}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:-40}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-40}),this.pie11=this.pie11||f(this.primaryColor,{h:-90,l:-40}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-30}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.labelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||(0,_.Z)(b(this.git0),25),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.gitBranchLabel0=this.gitBranchLabel0||b(this.labelTextColor),this.gitBranchLabel1=this.gitBranchLabel1||this.labelTextColor,this.gitBranchLabel2=this.gitBranchLabel2||this.labelTextColor,this.gitBranchLabel3=this.gitBranchLabel3||b(this.labelTextColor),this.gitBranchLabel4=this.gitBranchLabel4||this.labelTextColor,this.gitBranchLabel5=this.gitBranchLabel5||this.labelTextColor,this.gitBranchLabel6=this.gitBranchLabel6||this.labelTextColor,this.gitBranchLabel7=this.gitBranchLabel7||this.labelTextColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},forest:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#cde498",this.secondaryColor="#cdffb2",this.background="white",this.mainBkg="#cde498",this.secondBkg="#cdffb2",this.lineColor="green",this.border1="#13540c",this.border2="#6eaa49",this.arrowheadColor="green",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.tertiaryColor=(0,x.Z)("#cde498",10),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.primaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#333",this.edgeLabelBackground="#e8e8e8",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="#333",this.signalTextColor="#333",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="#326932",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="#6eaa49",this.altSectionBkgColor="white",this.sectionBkgColor2="#6eaa49",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="#487e3a",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.actorBorder=(0,_.Z)(this.mainBkg,20),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskBorderColor=this.border1,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-30}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{h:40,l:-40}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-50}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-50}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-50}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},neutral:{getThemeVariables:t=>{const e=new qt;return e.calculate(t),e}}},Vt={theme:"default",themeVariables:Ht.default.getThemeVariables(),themeCSS:void 0,maxTextSize:5e4,darkMode:!1,fontFamily:'"trebuchet ms", verdana, arial, sans-serif;',logLevel:5,securityLevel:"strict",startOnLoad:!0,arrowMarkerAbsolute:!1,secure:["secure","securityLevel","startOnLoad","maxTextSize"],deterministicIds:!1,deterministicIDSeed:void 0,flowchart:{titleTopMargin:25,diagramPadding:8,htmlLabels:!0,nodeSpacing:50,rankSpacing:50,curve:"basis",padding:15,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},sequence:{hideUnusedParticipants:!1,activationWidth:10,diagramMarginX:50,diagramMarginY:10,actorMargin:50,width:150,height:65,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",mirrorActors:!0,forceMenus:!1,bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,showSequenceNumbers:!1,actorFontSize:14,actorFontFamily:'"Open Sans", sans-serif',actorFontWeight:400,noteFontSize:14,noteFontFamily:'"trebuchet ms", verdana, arial, sans-serif',noteFontWeight:400,noteAlign:"center",messageFontSize:16,messageFontFamily:'"trebuchet ms", verdana, arial, sans-serif',messageFontWeight:400,wrap:!1,wrapPadding:10,labelBoxWidth:50,labelBoxHeight:20,messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},noteFont:function(){return{fontFamily:this.noteFontFamily,fontSize:this.noteFontSize,fontWeight:this.noteFontWeight}},actorFont:function(){return{fontFamily:this.actorFontFamily,fontSize:this.actorFontSize,fontWeight:this.actorFontWeight}}},gantt:{titleTopMargin:25,barHeight:20,barGap:4,topPadding:50,rightPadding:75,leftPadding:75,gridLineStartPadding:35,fontSize:11,sectionFontSize:11,numberSectionStyles:4,axisFormat:"%Y-%m-%d",tickInterval:void 0,useMaxWidth:!0,topAxis:!1,useWidth:void 0},journey:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"]},timeline:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"],disableMulticolor:!1},class:{titleTopMargin:25,arrowMarkerAbsolute:!1,dividerMargin:10,padding:5,textHeight:10,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},state:{titleTopMargin:25,dividerMargin:10,sizeUnit:5,padding:8,textHeight:10,titleShift:-15,noteMargin:10,forkWidth:70,forkHeight:7,miniPadding:2,fontSizeFactor:5.02,fontSize:24,labelHeight:16,edgeLengthFactor:"20",compositTitleSize:35,radius:5,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},er:{titleTopMargin:25,diagramPadding:20,layoutDirection:"TB",minEntityWidth:100,minEntityHeight:75,entityPadding:15,stroke:"gray",fill:"honeydew",fontSize:12,useMaxWidth:!0},pie:{useWidth:void 0,useMaxWidth:!0},requirement:{useWidth:void 0,useMaxWidth:!0,rect_fill:"#f9f9f9",text_color:"#333",rect_border_size:"0.5px",rect_border_color:"#bbb",rect_min_width:200,rect_min_height:200,fontSize:14,rect_padding:10,line_height:20},gitGraph:{titleTopMargin:25,diagramPadding:8,nodeLabel:{width:75,height:100,x:-25,y:0},mainBranchName:"main",mainBranchOrder:0,showCommitLabel:!0,showBranches:!0,rotateCommitLabel:!0},c4:{useWidth:void 0,diagramMarginX:50,diagramMarginY:10,c4ShapeMargin:50,c4ShapePadding:20,width:216,height:60,boxMargin:10,useMaxWidth:!0,c4ShapeInRow:4,nextLinePaddingX:0,c4BoundaryInRow:2,personFontSize:14,personFontFamily:'"Open Sans", sans-serif',personFontWeight:"normal",external_personFontSize:14,external_personFontFamily:'"Open Sans", sans-serif',external_personFontWeight:"normal",systemFontSize:14,systemFontFamily:'"Open Sans", sans-serif',systemFontWeight:"normal",external_systemFontSize:14,external_systemFontFamily:'"Open Sans", sans-serif',external_systemFontWeight:"normal",system_dbFontSize:14,system_dbFontFamily:'"Open Sans", sans-serif',system_dbFontWeight:"normal",external_system_dbFontSize:14,external_system_dbFontFamily:'"Open Sans", sans-serif',external_system_dbFontWeight:"normal",system_queueFontSize:14,system_queueFontFamily:'"Open Sans", sans-serif',system_queueFontWeight:"normal",external_system_queueFontSize:14,external_system_queueFontFamily:'"Open Sans", sans-serif',external_system_queueFontWeight:"normal",boundaryFontSize:14,boundaryFontFamily:'"Open Sans", sans-serif',boundaryFontWeight:"normal",messageFontSize:12,messageFontFamily:'"Open Sans", sans-serif',messageFontWeight:"normal",containerFontSize:14,containerFontFamily:'"Open Sans", sans-serif',containerFontWeight:"normal",external_containerFontSize:14,external_containerFontFamily:'"Open Sans", sans-serif',external_containerFontWeight:"normal",container_dbFontSize:14,container_dbFontFamily:'"Open Sans", sans-serif',container_dbFontWeight:"normal",external_container_dbFontSize:14,external_container_dbFontFamily:'"Open Sans", sans-serif',external_container_dbFontWeight:"normal",container_queueFontSize:14,container_queueFontFamily:'"Open Sans", sans-serif',container_queueFontWeight:"normal",external_container_queueFontSize:14,external_container_queueFontFamily:'"Open Sans", sans-serif',external_container_queueFontWeight:"normal",componentFontSize:14,componentFontFamily:'"Open Sans", sans-serif',componentFontWeight:"normal",external_componentFontSize:14,external_componentFontFamily:'"Open Sans", sans-serif',external_componentFontWeight:"normal",component_dbFontSize:14,component_dbFontFamily:'"Open Sans", sans-serif',component_dbFontWeight:"normal",external_component_dbFontSize:14,external_component_dbFontFamily:'"Open Sans", sans-serif',external_component_dbFontWeight:"normal",component_queueFontSize:14,component_queueFontFamily:'"Open Sans", sans-serif',component_queueFontWeight:"normal",external_component_queueFontSize:14,external_component_queueFontFamily:'"Open Sans", sans-serif',external_component_queueFontWeight:"normal",wrap:!0,wrapPadding:10,personFont:function(){return{fontFamily:this.personFontFamily,fontSize:this.personFontSize,fontWeight:this.personFontWeight}},external_personFont:function(){return{fontFamily:this.external_personFontFamily,fontSize:this.external_personFontSize,fontWeight:this.external_personFontWeight}},systemFont:function(){return{fontFamily:this.systemFontFamily,fontSize:this.systemFontSize,fontWeight:this.systemFontWeight}},external_systemFont:function(){return{fontFamily:this.external_systemFontFamily,fontSize:this.external_systemFontSize,fontWeight:this.external_systemFontWeight}},system_dbFont:function(){return{fontFamily:this.system_dbFontFamily,fontSize:this.system_dbFontSize,fontWeight:this.system_dbFontWeight}},external_system_dbFont:function(){return{fontFamily:this.external_system_dbFontFamily,fontSize:this.external_system_dbFontSize,fontWeight:this.external_system_dbFontWeight}},system_queueFont:function(){return{fontFamily:this.system_queueFontFamily,fontSize:this.system_queueFontSize,fontWeight:this.system_queueFontWeight}},external_system_queueFont:function(){return{fontFamily:this.external_system_queueFontFamily,fontSize:this.external_system_queueFontSize,fontWeight:this.external_system_queueFontWeight}},containerFont:function(){return{fontFamily:this.containerFontFamily,fontSize:this.containerFontSize,fontWeight:this.containerFontWeight}},external_containerFont:function(){return{fontFamily:this.external_containerFontFamily,fontSize:this.external_containerFontSize,fontWeight:this.external_containerFontWeight}},container_dbFont:function(){return{fontFamily:this.container_dbFontFamily,fontSize:this.container_dbFontSize,fontWeight:this.container_dbFontWeight}},external_container_dbFont:function(){return{fontFamily:this.external_container_dbFontFamily,fontSize:this.external_container_dbFontSize,fontWeight:this.external_container_dbFontWeight}},container_queueFont:function(){return{fontFamily:this.container_queueFontFamily,fontSize:this.container_queueFontSize,fontWeight:this.container_queueFontWeight}},external_container_queueFont:function(){return{fontFamily:this.external_container_queueFontFamily,fontSize:this.external_container_queueFontSize,fontWeight:this.external_container_queueFontWeight}},componentFont:function(){return{fontFamily:this.componentFontFamily,fontSize:this.componentFontSize,fontWeight:this.componentFontWeight}},external_componentFont:function(){return{fontFamily:this.external_componentFontFamily,fontSize:this.external_componentFontSize,fontWeight:this.external_componentFontWeight}},component_dbFont:function(){return{fontFamily:this.component_dbFontFamily,fontSize:this.component_dbFontSize,fontWeight:this.component_dbFontWeight}},external_component_dbFont:function(){return{fontFamily:this.external_component_dbFontFamily,fontSize:this.external_component_dbFontSize,fontWeight:this.external_component_dbFontWeight}},component_queueFont:function(){return{fontFamily:this.component_queueFontFamily,fontSize:this.component_queueFontSize,fontWeight:this.component_queueFontWeight}},external_component_queueFont:function(){return{fontFamily:this.external_component_queueFontFamily,fontSize:this.external_component_queueFontSize,fontWeight:this.external_component_queueFontWeight}},boundaryFont:function(){return{fontFamily:this.boundaryFontFamily,fontSize:this.boundaryFontSize,fontWeight:this.boundaryFontWeight}},messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},person_bg_color:"#08427B",person_border_color:"#073B6F",external_person_bg_color:"#686868",external_person_border_color:"#8A8A8A",system_bg_color:"#1168BD",system_border_color:"#3C7FC0",system_db_bg_color:"#1168BD",system_db_border_color:"#3C7FC0",system_queue_bg_color:"#1168BD",system_queue_border_color:"#3C7FC0",external_system_bg_color:"#999999",external_system_border_color:"#8A8A8A",external_system_db_bg_color:"#999999",external_system_db_border_color:"#8A8A8A",external_system_queue_bg_color:"#999999",external_system_queue_border_color:"#8A8A8A",container_bg_color:"#438DD5",container_border_color:"#3C7FC0",container_db_bg_color:"#438DD5",container_db_border_color:"#3C7FC0",container_queue_bg_color:"#438DD5",container_queue_border_color:"#3C7FC0",external_container_bg_color:"#B3B3B3",external_container_border_color:"#A6A6A6",external_container_db_bg_color:"#B3B3B3",external_container_db_border_color:"#A6A6A6",external_container_queue_bg_color:"#B3B3B3",external_container_queue_border_color:"#A6A6A6",component_bg_color:"#85BBF0",component_border_color:"#78A8D8",component_db_bg_color:"#85BBF0",component_db_border_color:"#78A8D8",component_queue_bg_color:"#85BBF0",component_queue_border_color:"#78A8D8",external_component_bg_color:"#CCCCCC",external_component_border_color:"#BFBFBF",external_component_db_bg_color:"#CCCCCC",external_component_db_border_color:"#BFBFBF",external_component_queue_bg_color:"#CCCCCC",external_component_queue_border_color:"#BFBFBF"},mindmap:{useMaxWidth:!0,padding:10,maxNodeWidth:200},fontSize:16};Vt.class&&(Vt.class.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute),Vt.gitGraph&&(Vt.gitGraph.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute);const Gt=(t,e="")=>Object.keys(t).reduce(((n,r)=>Array.isArray(t[r])?n:"object"==typeof t[r]&&null!==t[r]?[...n,e+r,...Gt(t[r],"")]:[...n,e+r]),[]),Xt=Gt(Vt,""),Kt=Vt;function Qt(t){return null==t}var Jt={isNothing:Qt,isObject:function(t){return"object"==typeof t&&null!==t},toArray:function(t){return Array.isArray(t)?t:Qt(t)?[]:[t]},repeat:function(t,e){var n,r="";for(n=0;n<e;n+=1)r+=t;return r},isNegativeZero:function(t){return 0===t&&Number.NEGATIVE_INFINITY===1/t},extend:function(t,e){var n,r,i,a;if(e)for(n=0,r=(a=Object.keys(e)).length;n<r;n+=1)t[i=a[n]]=e[i];return t}};function te(t,e){var n="",r=t.reason||"(unknown reason)";return t.mark?(t.mark.name&&(n+='in "'+t.mark.name+'" '),n+="("+(t.mark.line+1)+":"+(t.mark.column+1)+")",!e&&t.mark.snippet&&(n+="\n\n"+t.mark.snippet),r+" "+n):r}function ee(t,e){Error.call(this),this.name="YAMLException",this.reason=t,this.mark=e,this.message=te(this,!1),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=(new Error).stack||""}ee.prototype=Object.create(Error.prototype),ee.prototype.constructor=ee,ee.prototype.toString=function(t){return this.name+": "+te(this,t)};var ne=ee;function re(t,e,n,r,i){var a="",s="",o=Math.floor(i/2)-1;return r-e>o&&(e=r-o+(a=" ... ").length),n-r>o&&(n=r+o-(s=" ...").length),{str:a+t.slice(e,n).replace(/\t/g,"\u2192")+s,pos:r-e+a.length}}function ie(t,e){return Jt.repeat(" ",e-t.length)+t}var ae=function(t,e){if(e=Object.create(e||null),!t.buffer)return null;e.maxLength||(e.maxLength=79),"number"!=typeof e.indent&&(e.indent=1),"number"!=typeof e.linesBefore&&(e.linesBefore=3),"number"!=typeof e.linesAfter&&(e.linesAfter=2);for(var n,r=/\r?\n|\r|\0/g,i=[0],a=[],s=-1;n=r.exec(t.buffer);)a.push(n.index),i.push(n.index+n[0].length),t.position<=n.index&&s<0&&(s=i.length-2);s<0&&(s=i.length-1);var o,c,l="",h=Math.min(t.line+e.linesAfter,a.length).toString().length,u=e.maxLength-(e.indent+h+3);for(o=1;o<=e.linesBefore&&!(s-o<0);o++)c=re(t.buffer,i[s-o],a[s-o],t.position-(i[s]-i[s-o]),u),l=Jt.repeat(" ",e.indent)+ie((t.line-o+1).toString(),h)+" | "+c.str+"\n"+l;for(c=re(t.buffer,i[s],a[s],t.position,u),l+=Jt.repeat(" ",e.indent)+ie((t.line+1).toString(),h)+" | "+c.str+"\n",l+=Jt.repeat("-",e.indent+h+3+c.pos)+"^\n",o=1;o<=e.linesAfter&&!(s+o>=a.length);o++)c=re(t.buffer,i[s+o],a[s+o],t.position-(i[s]-i[s+o]),u),l+=Jt.repeat(" ",e.indent)+ie((t.line+o+1).toString(),h)+" | "+c.str+"\n";return l.replace(/\n$/,"")},se=["kind","multi","resolve","construct","instanceOf","predicate","represent","representName","defaultStyle","styleAliases"],oe=["scalar","sequence","mapping"];var ce=function(t,e){var n,r;if(e=e||{},Object.keys(e).forEach((function(e){if(-1===se.indexOf(e))throw new ne('Unknown option "'+e+'" is met in definition of "'+t+'" YAML type.')})),this.options=e,this.tag=t,this.kind=e.kind||null,this.resolve=e.resolve||function(){return!0},this.construct=e.construct||function(t){return t},this.instanceOf=e.instanceOf||null,this.predicate=e.predicate||null,this.represent=e.represent||null,this.representName=e.representName||null,this.defaultStyle=e.defaultStyle||null,this.multi=e.multi||!1,this.styleAliases=(n=e.styleAliases||null,r={},null!==n&&Object.keys(n).forEach((function(t){n[t].forEach((function(e){r[String(e)]=t}))})),r),-1===oe.indexOf(this.kind))throw new ne('Unknown kind "'+this.kind+'" is specified for "'+t+'" YAML type.')};function le(t,e){var n=[];return t[e].forEach((function(t){var e=n.length;n.forEach((function(n,r){n.tag===t.tag&&n.kind===t.kind&&n.multi===t.multi&&(e=r)})),n[e]=t})),n}function he(t){return this.extend(t)}he.prototype.extend=function(t){var e=[],n=[];if(t instanceof ce)n.push(t);else if(Array.isArray(t))n=n.concat(t);else{if(!t||!Array.isArray(t.implicit)&&!Array.isArray(t.explicit))throw new ne("Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })");t.implicit&&(e=e.concat(t.implicit)),t.explicit&&(n=n.concat(t.explicit))}e.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.");if(t.loadKind&&"scalar"!==t.loadKind)throw new ne("There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.");if(t.multi)throw new ne("There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.")})),n.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.")}));var r=Object.create(he.prototype);return r.implicit=(this.implicit||[]).concat(e),r.explicit=(this.explicit||[]).concat(n),r.compiledImplicit=le(r,"implicit"),r.compiledExplicit=le(r,"explicit"),r.compiledTypeMap=function(){var t,e,n={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}};function r(t){t.multi?(n.multi[t.kind].push(t),n.multi.fallback.push(t)):n[t.kind][t.tag]=n.fallback[t.tag]=t}for(t=0,e=arguments.length;t<e;t+=1)arguments[t].forEach(r);return n}(r.compiledImplicit,r.compiledExplicit),r};var ue=new he({explicit:[new ce("tag:yaml.org,2002:str",{kind:"scalar",construct:function(t){return null!==t?t:""}}),new ce("tag:yaml.org,2002:seq",{kind:"sequence",construct:function(t){return null!==t?t:[]}}),new ce("tag:yaml.org,2002:map",{kind:"mapping",construct:function(t){return null!==t?t:{}}})]});var de=new ce("tag:yaml.org,2002:null",{kind:"scalar",resolve:function(t){if(null===t)return!0;var e=t.length;return 1===e&&"~"===t||4===e&&("null"===t||"Null"===t||"NULL"===t)},construct:function(){return null},predicate:function(t){return null===t},represent:{canonical:function(){return"~"},lowercase:function(){return"null"},uppercase:function(){return"NULL"},camelcase:function(){return"Null"},empty:function(){return""}},defaultStyle:"lowercase"});var pe=new ce("tag:yaml.org,2002:bool",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e=t.length;return 4===e&&("true"===t||"True"===t||"TRUE"===t)||5===e&&("false"===t||"False"===t||"FALSE"===t)},construct:function(t){return"true"===t||"True"===t||"TRUE"===t},predicate:function(t){return"[object Boolean]"===Object.prototype.toString.call(t)},represent:{lowercase:function(t){return t?"true":"false"},uppercase:function(t){return t?"TRUE":"FALSE"},camelcase:function(t){return t?"True":"False"}},defaultStyle:"lowercase"});function fe(t){return 48<=t&&t<=55}function ge(t){return 48<=t&&t<=57}var ye=new ce("tag:yaml.org,2002:int",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=t.length,i=0,a=!1;if(!r)return!1;if("-"!==(e=t[i])&&"+"!==e||(e=t[++i]),"0"===e){if(i+1===r)return!0;if("b"===(e=t[++i])){for(i++;i<r;i++)if("_"!==(e=t[i])){if("0"!==e&&"1"!==e)return!1;a=!0}return a&&"_"!==e}if("x"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!(48<=(n=t.charCodeAt(i))&&n<=57||65<=n&&n<=70||97<=n&&n<=102))return!1;a=!0}return a&&"_"!==e}if("o"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!fe(t.charCodeAt(i)))return!1;a=!0}return a&&"_"!==e}}if("_"===e)return!1;for(;i<r;i++)if("_"!==(e=t[i])){if(!ge(t.charCodeAt(i)))return!1;a=!0}return!(!a||"_"===e)},construct:function(t){var e,n=t,r=1;if(-1!==n.indexOf("_")&&(n=n.replace(/_/g,"")),"-"!==(e=n[0])&&"+"!==e||("-"===e&&(r=-1),e=(n=n.slice(1))[0]),"0"===n)return 0;if("0"===e){if("b"===n[1])return r*parseInt(n.slice(2),2);if("x"===n[1])return r*parseInt(n.slice(2),16);if("o"===n[1])return r*parseInt(n.slice(2),8)}return r*parseInt(n,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&t%1==0&&!Jt.isNegativeZero(t)},represent:{binary:function(t){return t>=0?"0b"+t.toString(2):"-0b"+t.toString(2).slice(1)},octal:function(t){return t>=0?"0o"+t.toString(8):"-0o"+t.toString(8).slice(1)},decimal:function(t){return t.toString(10)},hexadecimal:function(t){return t>=0?"0x"+t.toString(16).toUpperCase():"-0x"+t.toString(16).toUpperCase().slice(1)}},defaultStyle:"decimal",styleAliases:{binary:[2,"bin"],octal:[8,"oct"],decimal:[10,"dec"],hexadecimal:[16,"hex"]}}),me=new RegExp("^(?:[-+]?(?:[0-9][0-9_]*)(?:\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\.(?:inf|Inf|INF)|\\.(?:nan|NaN|NAN))$");var be=/^[-+]?[0-9]+e/;var _e=new ce("tag:yaml.org,2002:float",{kind:"scalar",resolve:function(t){return null!==t&&!(!me.test(t)||"_"===t[t.length-1])},construct:function(t){var e,n;return n="-"===(e=t.replace(/_/g,"").toLowerCase())[0]?-1:1,"+-".indexOf(e[0])>=0&&(e=e.slice(1)),".inf"===e?1===n?Number.POSITIVE_INFINITY:Number.NEGATIVE_INFINITY:".nan"===e?NaN:n*parseFloat(e,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&(t%1!=0||Jt.isNegativeZero(t))},represent:function(t,e){var n;if(isNaN(t))switch(e){case"lowercase":return".nan";case"uppercase":return".NAN";case"camelcase":return".NaN"}else if(Number.POSITIVE_INFINITY===t)switch(e){case"lowercase":return".inf";case"uppercase":return".INF";case"camelcase":return".Inf"}else if(Number.NEGATIVE_INFINITY===t)switch(e){case"lowercase":return"-.inf";case"uppercase":return"-.INF";case"camelcase":return"-.Inf"}else if(Jt.isNegativeZero(t))return"-0.0";return n=t.toString(10),be.test(n)?n.replace("e",".e"):n},defaultStyle:"lowercase"}),xe=ue.extend({implicit:[de,pe,ye,_e]}),ve=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$"),ke=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\.([0-9]*))?(?:[ \\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$");var we=new ce("tag:yaml.org,2002:timestamp",{kind:"scalar",resolve:function(t){return null!==t&&(null!==ve.exec(t)||null!==ke.exec(t))},construct:function(t){var e,n,r,i,a,s,o,c,l=0,h=null;if(null===(e=ve.exec(t))&&(e=ke.exec(t)),null===e)throw new Error("Date resolve error");if(n=+e[1],r=+e[2]-1,i=+e[3],!e[4])return new Date(Date.UTC(n,r,i));if(a=+e[4],s=+e[5],o=+e[6],e[7]){for(l=e[7].slice(0,3);l.length<3;)l+="0";l=+l}return e[9]&&(h=6e4*(60*+e[10]+ +(e[11]||0)),"-"===e[9]&&(h=-h)),c=new Date(Date.UTC(n,r,i,a,s,o,l)),h&&c.setTime(c.getTime()-h),c},instanceOf:Date,represent:function(t){return t.toISOString()}});var Ee=new ce("tag:yaml.org,2002:merge",{kind:"scalar",resolve:function(t){return"<<"===t||null===t}}),Ce="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\n\r";var Te=new ce("tag:yaml.org,2002:binary",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=0,i=t.length,a=Ce;for(n=0;n<i;n++)if(!((e=a.indexOf(t.charAt(n)))>64)){if(e<0)return!1;r+=6}return r%8==0},construct:function(t){var e,n,r=t.replace(/[\r\n=]/g,""),i=r.length,a=Ce,s=0,o=[];for(e=0;e<i;e++)e%4==0&&e&&(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)),s=s<<6|a.indexOf(r.charAt(e));return 0===(n=i%4*6)?(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)):18===n?(o.push(s>>10&255),o.push(s>>2&255)):12===n&&o.push(s>>4&255),new Uint8Array(o)},predicate:function(t){return"[object Uint8Array]"===Object.prototype.toString.call(t)},represent:function(t){var e,n,r="",i=0,a=t.length,s=Ce;for(e=0;e<a;e++)e%3==0&&e&&(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]),i=(i<<8)+t[e];return 0===(n=a%3)?(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]):2===n?(r+=s[i>>10&63],r+=s[i>>4&63],r+=s[i<<2&63],r+=s[64]):1===n&&(r+=s[i>>2&63],r+=s[i<<4&63],r+=s[64],r+=s[64]),r}}),Se=Object.prototype.hasOwnProperty,Ae=Object.prototype.toString;var Le=new ce("tag:yaml.org,2002:omap",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=[],o=t;for(e=0,n=o.length;e<n;e+=1){if(r=o[e],a=!1,"[object Object]"!==Ae.call(r))return!1;for(i in r)if(Se.call(r,i)){if(a)return!1;a=!0}if(!a)return!1;if(-1!==s.indexOf(i))return!1;s.push(i)}return!0},construct:function(t){return null!==t?t:[]}}),Be=Object.prototype.toString;var Ne=new ce("tag:yaml.org,2002:pairs",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1){if(r=s[e],"[object Object]"!==Be.call(r))return!1;if(1!==(i=Object.keys(r)).length)return!1;a[e]=[i[0],r[i[0]]]}return!0},construct:function(t){if(null===t)return[];var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1)r=s[e],i=Object.keys(r),a[e]=[i[0],r[i[0]]];return a}}),De=Object.prototype.hasOwnProperty;var Oe=new ce("tag:yaml.org,2002:set",{kind:"mapping",resolve:function(t){if(null===t)return!0;var e,n=t;for(e in n)if(De.call(n,e)&&null!==n[e])return!1;return!0},construct:function(t){return null!==t?t:{}}}),Me=xe.extend({implicit:[we,Ee],explicit:[Te,Le,Ne,Oe]}),Ie=Object.prototype.hasOwnProperty,Fe=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x84\x86-\x9F\uFFFE\uFFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/,$e=/[\x85\u2028\u2029]/,Re=/[,\[\]\{\}]/,Ze=/^(?:!|!!|![a-z\-]+!)$/i,Pe=/^(?:!|[^,\[\]\{\}])(?:%[0-9a-f]{2}|[0-9a-z\-#;\/\?:@&=\+\$,_\.!~\*'\(\)\[\]])*$/i;function je(t){return Object.prototype.toString.call(t)}function Ye(t){return 10===t||13===t}function ze(t){return 9===t||32===t}function Ue(t){return 9===t||32===t||10===t||13===t}function We(t){return 44===t||91===t||93===t||123===t||125===t}function qe(t){var e;return 48<=t&&t<=57?t-48:97<=(e=32|t)&&e<=102?e-97+10:-1}function He(t){return 48===t?"\0":97===t?"\x07":98===t?"\b":116===t||9===t?"\t":110===t?"\n":118===t?"\v":102===t?"\f":114===t?"\r":101===t?"\x1b":32===t?" ":34===t?'"':47===t?"/":92===t?"\\":78===t?"\x85":95===t?"\xa0":76===t?"\u2028":80===t?"\u2029":""}function Ve(t){return t<=65535?String.fromCharCode(t):String.fromCharCode(55296+(t-65536>>10),56320+(t-65536&1023))}for(var Ge=new Array(256),Xe=new Array(256),Ke=0;Ke<256;Ke++)Ge[Ke]=He(Ke)?1:0,Xe[Ke]=He(Ke);function Qe(t,e){this.input=t,this.filename=e.filename||null,this.schema=e.schema||Me,this.onWarning=e.onWarning||null,this.legacy=e.legacy||!1,this.json=e.json||!1,this.listener=e.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=t.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Je(t,e){var n={name:t.filename,buffer:t.input.slice(0,-1),position:t.position,line:t.line,column:t.position-t.lineStart};return n.snippet=ae(n),new ne(e,n)}function tn(t,e){throw Je(t,e)}function en(t,e){t.onWarning&&t.onWarning.call(null,Je(t,e))}var nn={YAML:function(t,e,n){var r,i,a;null!==t.version&&tn(t,"duplication of %YAML directive"),1!==n.length&&tn(t,"YAML directive accepts exactly one argument"),null===(r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]))&&tn(t,"ill-formed argument of the YAML directive"),i=parseInt(r[1],10),a=parseInt(r[2],10),1!==i&&tn(t,"unacceptable YAML version of the document"),t.version=n[0],t.checkLineBreaks=a<2,1!==a&&2!==a&&en(t,"unsupported YAML version of the document")},TAG:function(t,e,n){var r,i;2!==n.length&&tn(t,"TAG directive accepts exactly two arguments"),r=n[0],i=n[1],Ze.test(r)||tn(t,"ill-formed tag handle (first argument) of the TAG directive"),Ie.call(t.tagMap,r)&&tn(t,'there is a previously declared suffix for "'+r+'" tag handle'),Pe.test(i)||tn(t,"ill-formed tag prefix (second argument) of the TAG directive");try{i=decodeURIComponent(i)}catch(a){tn(t,"tag prefix is malformed: "+i)}t.tagMap[r]=i}};function rn(t,e,n,r){var i,a,s,o;if(e<n){if(o=t.input.slice(e,n),r)for(i=0,a=o.length;i<a;i+=1)9===(s=o.charCodeAt(i))||32<=s&&s<=1114111||tn(t,"expected valid JSON character");else Fe.test(o)&&tn(t,"the stream contains non-printable characters");t.result+=o}}function an(t,e,n,r){var i,a,s,o;for(Jt.isObject(n)||tn(t,"cannot merge mappings; the provided source object is unacceptable"),s=0,o=(i=Object.keys(n)).length;s<o;s+=1)a=i[s],Ie.call(e,a)||(e[a]=n[a],r[a]=!0)}function sn(t,e,n,r,i,a,s,o,c){var l,h;if(Array.isArray(i))for(l=0,h=(i=Array.prototype.slice.call(i)).length;l<h;l+=1)Array.isArray(i[l])&&tn(t,"nested arrays are not supported inside keys"),"object"==typeof i&&"[object Object]"===je(i[l])&&(i[l]="[object Object]");if("object"==typeof i&&"[object Object]"===je(i)&&(i="[object Object]"),i=String(i),null===e&&(e={}),"tag:yaml.org,2002:merge"===r)if(Array.isArray(a))for(l=0,h=a.length;l<h;l+=1)an(t,e,a[l],n);else an(t,e,a,n);else t.json||Ie.call(n,i)||!Ie.call(e,i)||(t.line=s||t.line,t.lineStart=o||t.lineStart,t.position=c||t.position,tn(t,"duplicated mapping key")),"__proto__"===i?Object.defineProperty(e,i,{configurable:!0,enumerable:!0,writable:!0,value:a}):e[i]=a,delete n[i];return e}function on(t){var e;10===(e=t.input.charCodeAt(t.position))?t.position++:13===e?(t.position++,10===t.input.charCodeAt(t.position)&&t.position++):tn(t,"a line break is expected"),t.line+=1,t.lineStart=t.position,t.firstTabInLine=-1}function cn(t,e,n){for(var r=0,i=t.input.charCodeAt(t.position);0!==i;){for(;ze(i);)9===i&&-1===t.firstTabInLine&&(t.firstTabInLine=t.position),i=t.input.charCodeAt(++t.position);if(e&&35===i)do{i=t.input.charCodeAt(++t.position)}while(10!==i&&13!==i&&0!==i);if(!Ye(i))break;for(on(t),i=t.input.charCodeAt(t.position),r++,t.lineIndent=0;32===i;)t.lineIndent++,i=t.input.charCodeAt(++t.position)}return-1!==n&&0!==r&&t.lineIndent<n&&en(t,"deficient indentation"),r}function ln(t){var e,n=t.position;return!(45!==(e=t.input.charCodeAt(n))&&46!==e||e!==t.input.charCodeAt(n+1)||e!==t.input.charCodeAt(n+2)||(n+=3,0!==(e=t.input.charCodeAt(n))&&!Ue(e)))}function hn(t,e){1===e?t.result+=" ":e>1&&(t.result+=Jt.repeat("\n",e-1))}function un(t,e){var n,r,i=t.tag,a=t.anchor,s=[],o=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=s),r=t.input.charCodeAt(t.position);0!==r&&(-1!==t.firstTabInLine&&(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),45===r)&&Ue(t.input.charCodeAt(t.position+1));)if(o=!0,t.position++,cn(t,!0,-1)&&t.lineIndent<=e)s.push(null),r=t.input.charCodeAt(t.position);else if(n=t.line,fn(t,e,3,!1,!0),s.push(t.result),cn(t,!0,-1),r=t.input.charCodeAt(t.position),(t.line===n||t.lineIndent>e)&&0!==r)tn(t,"bad indentation of a sequence entry");else if(t.lineIndent<e)break;return!!o&&(t.tag=i,t.anchor=a,t.kind="sequence",t.result=s,!0)}function dn(t){var e,n,r,i,a=!1,s=!1;if(33!==(i=t.input.charCodeAt(t.position)))return!1;if(null!==t.tag&&tn(t,"duplication of a tag property"),60===(i=t.input.charCodeAt(++t.position))?(a=!0,i=t.input.charCodeAt(++t.position)):33===i?(s=!0,n="!!",i=t.input.charCodeAt(++t.position)):n="!",e=t.position,a){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&62!==i);t.position<t.length?(r=t.input.slice(e,t.position),i=t.input.charCodeAt(++t.position)):tn(t,"unexpected end of the stream within a verbatim tag")}else{for(;0!==i&&!Ue(i);)33===i&&(s?tn(t,"tag suffix cannot contain exclamation marks"):(n=t.input.slice(e-1,t.position+1),Ze.test(n)||tn(t,"named tag handle cannot contain such characters"),s=!0,e=t.position+1)),i=t.input.charCodeAt(++t.position);r=t.input.slice(e,t.position),Re.test(r)&&tn(t,"tag suffix cannot contain flow indicator characters")}r&&!Pe.test(r)&&tn(t,"tag name cannot contain such characters: "+r);try{r=decodeURIComponent(r)}catch(o){tn(t,"tag name is malformed: "+r)}return a?t.tag=r:Ie.call(t.tagMap,n)?t.tag=t.tagMap[n]+r:"!"===n?t.tag="!"+r:"!!"===n?t.tag="tag:yaml.org,2002:"+r:tn(t,'undeclared tag handle "'+n+'"'),!0}function pn(t){var e,n;if(38!==(n=t.input.charCodeAt(t.position)))return!1;for(null!==t.anchor&&tn(t,"duplication of an anchor property"),n=t.input.charCodeAt(++t.position),e=t.position;0!==n&&!Ue(n)&&!We(n);)n=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an anchor node must contain at least one character"),t.anchor=t.input.slice(e,t.position),!0}function fn(t,e,n,r,i){var a,s,o,c,l,h,u,d,p,f=1,g=!1,y=!1;if(null!==t.listener&&t.listener("open",t),t.tag=null,t.anchor=null,t.kind=null,t.result=null,a=s=o=4===n||3===n,r&&cn(t,!0,-1)&&(g=!0,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)),1===f)for(;dn(t)||pn(t);)cn(t,!0,-1)?(g=!0,o=a,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)):o=!1;if(o&&(o=g||i),1!==f&&4!==n||(d=1===n||2===n?e:e+1,p=t.position-t.lineStart,1===f?o&&(un(t,p)||function(t,e,n){var r,i,a,s,o,c,l,h=t.tag,u=t.anchor,d={},p=Object.create(null),f=null,g=null,y=null,m=!1,b=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=d),l=t.input.charCodeAt(t.position);0!==l;){if(m||-1===t.firstTabInLine||(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),r=t.input.charCodeAt(t.position+1),a=t.line,63!==l&&58!==l||!Ue(r)){if(s=t.line,o=t.lineStart,c=t.position,!fn(t,n,2,!1,!0))break;if(t.line===a){for(l=t.input.charCodeAt(t.position);ze(l);)l=t.input.charCodeAt(++t.position);if(58===l)Ue(l=t.input.charCodeAt(++t.position))||tn(t,"a whitespace character is expected after the key-value separator within a block mapping"),m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!1,i=!1,f=t.tag,g=t.result;else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read an implicit mapping pair; a colon is missed")}}else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read a block mapping entry; a multiline key may not be an implicit key")}}else 63===l?(m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!0,i=!0):m?(m=!1,i=!0):tn(t,"incomplete explicit mapping pair; a key node is missed; or followed by a non-tabulated empty line"),t.position+=1,l=r;if((t.line===a||t.lineIndent>e)&&(m&&(s=t.line,o=t.lineStart,c=t.position),fn(t,e,4,!0,i)&&(m?g=t.result:y=t.result),m||(sn(t,d,p,f,g,y,s,o,c),f=g=y=null),cn(t,!0,-1),l=t.input.charCodeAt(t.position)),(t.line===a||t.lineIndent>e)&&0!==l)tn(t,"bad indentation of a mapping entry");else if(t.lineIndent<e)break}return m&&sn(t,d,p,f,g,null,s,o,c),b&&(t.tag=h,t.anchor=u,t.kind="mapping",t.result=d),b}(t,p,d))||function(t,e){var n,r,i,a,s,o,c,l,h,u,d,p,f=!0,g=t.tag,y=t.anchor,m=Object.create(null);if(91===(p=t.input.charCodeAt(t.position)))s=93,l=!1,a=[];else{if(123!==p)return!1;s=125,l=!0,a={}}for(null!==t.anchor&&(t.anchorMap[t.anchor]=a),p=t.input.charCodeAt(++t.position);0!==p;){if(cn(t,!0,e),(p=t.input.charCodeAt(t.position))===s)return t.position++,t.tag=g,t.anchor=y,t.kind=l?"mapping":"sequence",t.result=a,!0;f?44===p&&tn(t,"expected the node content, but found ','"):tn(t,"missed comma between flow collection entries"),d=null,o=c=!1,63===p&&Ue(t.input.charCodeAt(t.position+1))&&(o=c=!0,t.position++,cn(t,!0,e)),n=t.line,r=t.lineStart,i=t.position,fn(t,e,1,!1,!0),u=t.tag,h=t.result,cn(t,!0,e),p=t.input.charCodeAt(t.position),!c&&t.line!==n||58!==p||(o=!0,p=t.input.charCodeAt(++t.position),cn(t,!0,e),fn(t,e,1,!1,!0),d=t.result),l?sn(t,a,m,u,h,d,n,r,i):o?a.push(sn(t,null,m,u,h,d,n,r,i)):a.push(h),cn(t,!0,e),44===(p=t.input.charCodeAt(t.position))?(f=!0,p=t.input.charCodeAt(++t.position)):f=!1}tn(t,"unexpected end of the stream within a flow collection")}(t,d)?y=!0:(s&&function(t,e){var n,r,i,a,s,o=1,c=!1,l=!1,h=e,u=0,d=!1;if(124===(a=t.input.charCodeAt(t.position)))r=!1;else{if(62!==a)return!1;r=!0}for(t.kind="scalar",t.result="";0!==a;)if(43===(a=t.input.charCodeAt(++t.position))||45===a)1===o?o=43===a?3:2:tn(t,"repeat of a chomping mode identifier");else{if(!((i=48<=(s=a)&&s<=57?s-48:-1)>=0))break;0===i?tn(t,"bad explicit indentation width of a block scalar; it cannot be less than one"):l?tn(t,"repeat of an indentation width identifier"):(h=e+i-1,l=!0)}if(ze(a)){do{a=t.input.charCodeAt(++t.position)}while(ze(a));if(35===a)do{a=t.input.charCodeAt(++t.position)}while(!Ye(a)&&0!==a)}for(;0!==a;){for(on(t),t.lineIndent=0,a=t.input.charCodeAt(t.position);(!l||t.lineIndent<h)&&32===a;)t.lineIndent++,a=t.input.charCodeAt(++t.position);if(!l&&t.lineIndent>h&&(h=t.lineIndent),Ye(a))u++;else{if(t.lineIndent<h){3===o?t.result+=Jt.repeat("\n",c?1+u:u):1===o&&c&&(t.result+="\n");break}for(r?ze(a)?(d=!0,t.result+=Jt.repeat("\n",c?1+u:u)):d?(d=!1,t.result+=Jt.repeat("\n",u+1)):0===u?c&&(t.result+=" "):t.result+=Jt.repeat("\n",u):t.result+=Jt.repeat("\n",c?1+u:u),c=!0,l=!0,u=0,n=t.position;!Ye(a)&&0!==a;)a=t.input.charCodeAt(++t.position);rn(t,n,t.position,!1)}}return!0}(t,d)||function(t,e){var n,r,i;if(39!==(n=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,r=i=t.position;0!==(n=t.input.charCodeAt(t.position));)if(39===n){if(rn(t,r,t.position,!0),39!==(n=t.input.charCodeAt(++t.position)))return!0;r=t.position,t.position++,i=t.position}else Ye(n)?(rn(t,r,i,!0),hn(t,cn(t,!1,e)),r=i=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a single quoted scalar"):(t.position++,i=t.position);tn(t,"unexpected end of the stream within a single quoted scalar")}(t,d)||function(t,e){var n,r,i,a,s,o,c;if(34!==(o=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,n=r=t.position;0!==(o=t.input.charCodeAt(t.position));){if(34===o)return rn(t,n,t.position,!0),t.position++,!0;if(92===o){if(rn(t,n,t.position,!0),Ye(o=t.input.charCodeAt(++t.position)))cn(t,!1,e);else if(o<256&&Ge[o])t.result+=Xe[o],t.position++;else if((s=120===(c=o)?2:117===c?4:85===c?8:0)>0){for(i=s,a=0;i>0;i--)(s=qe(o=t.input.charCodeAt(++t.position)))>=0?a=(a<<4)+s:tn(t,"expected hexadecimal character");t.result+=Ve(a),t.position++}else tn(t,"unknown escape sequence");n=r=t.position}else Ye(o)?(rn(t,n,r,!0),hn(t,cn(t,!1,e)),n=r=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a double quoted scalar"):(t.position++,r=t.position)}tn(t,"unexpected end of the stream within a double quoted scalar")}(t,d)?y=!0:!function(t){var e,n,r;if(42!==(r=t.input.charCodeAt(t.position)))return!1;for(r=t.input.charCodeAt(++t.position),e=t.position;0!==r&&!Ue(r)&&!We(r);)r=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an alias node must contain at least one character"),n=t.input.slice(e,t.position),Ie.call(t.anchorMap,n)||tn(t,'unidentified alias "'+n+'"'),t.result=t.anchorMap[n],cn(t,!0,-1),!0}(t)?function(t,e,n){var r,i,a,s,o,c,l,h,u=t.kind,d=t.result;if(Ue(h=t.input.charCodeAt(t.position))||We(h)||35===h||38===h||42===h||33===h||124===h||62===h||39===h||34===h||37===h||64===h||96===h)return!1;if((63===h||45===h)&&(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r)))return!1;for(t.kind="scalar",t.result="",i=a=t.position,s=!1;0!==h;){if(58===h){if(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r))break}else if(35===h){if(Ue(t.input.charCodeAt(t.position-1)))break}else{if(t.position===t.lineStart&&ln(t)||n&&We(h))break;if(Ye(h)){if(o=t.line,c=t.lineStart,l=t.lineIndent,cn(t,!1,-1),t.lineIndent>=e){s=!0,h=t.input.charCodeAt(t.position);continue}t.position=a,t.line=o,t.lineStart=c,t.lineIndent=l;break}}s&&(rn(t,i,a,!1),hn(t,t.line-o),i=a=t.position,s=!1),ze(h)||(a=t.position+1),h=t.input.charCodeAt(++t.position)}return rn(t,i,a,!1),!!t.result||(t.kind=u,t.result=d,!1)}(t,d,1===n)&&(y=!0,null===t.tag&&(t.tag="?")):(y=!0,null===t.tag&&null===t.anchor||tn(t,"alias node should not have any properties")),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):0===f&&(y=o&&un(t,p))),null===t.tag)null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);else if("?"===t.tag){for(null!==t.result&&"scalar"!==t.kind&&tn(t,'unacceptable node kind for !<?> tag; it should be "scalar", not "'+t.kind+'"'),c=0,l=t.implicitTypes.length;c<l;c+=1)if((u=t.implicitTypes[c]).resolve(t.result)){t.result=u.construct(t.result),t.tag=u.tag,null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);break}}else if("!"!==t.tag){if(Ie.call(t.typeMap[t.kind||"fallback"],t.tag))u=t.typeMap[t.kind||"fallback"][t.tag];else for(u=null,c=0,l=(h=t.typeMap.multi[t.kind||"fallback"]).length;c<l;c+=1)if(t.tag.slice(0,h[c].tag.length)===h[c].tag){u=h[c];break}u||tn(t,"unknown tag !<"+t.tag+">"),null!==t.result&&u.kind!==t.kind&&tn(t,"unacceptable node kind for !<"+t.tag+'> tag; it should be "'+u.kind+'", not "'+t.kind+'"'),u.resolve(t.result,t.tag)?(t.result=u.construct(t.result,t.tag),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):tn(t,"cannot resolve a node with !<"+t.tag+"> explicit tag")}return null!==t.listener&&t.listener("close",t),null!==t.tag||null!==t.anchor||y}function gn(t){var e,n,r,i,a=t.position,s=!1;for(t.version=null,t.checkLineBreaks=t.legacy,t.tagMap=Object.create(null),t.anchorMap=Object.create(null);0!==(i=t.input.charCodeAt(t.position))&&(cn(t,!0,-1),i=t.input.charCodeAt(t.position),!(t.lineIndent>0||37!==i));){for(s=!0,i=t.input.charCodeAt(++t.position),e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);for(r=[],(n=t.input.slice(e,t.position)).length<1&&tn(t,"directive name must not be less than one character in length");0!==i;){for(;ze(i);)i=t.input.charCodeAt(++t.position);if(35===i){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&!Ye(i));break}if(Ye(i))break;for(e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);r.push(t.input.slice(e,t.position))}0!==i&&on(t),Ie.call(nn,n)?nn[n](t,n,r):en(t,'unknown document directive "'+n+'"')}cn(t,!0,-1),0===t.lineIndent&&45===t.input.charCodeAt(t.position)&&45===t.input.charCodeAt(t.position+1)&&45===t.input.charCodeAt(t.position+2)?(t.position+=3,cn(t,!0,-1)):s&&tn(t,"directives end mark is expected"),fn(t,t.lineIndent-1,4,!1,!0),cn(t,!0,-1),t.checkLineBreaks&&$e.test(t.input.slice(a,t.position))&&en(t,"non-ASCII line breaks are interpreted as content"),t.documents.push(t.result),t.position===t.lineStart&&ln(t)?46===t.input.charCodeAt(t.position)&&(t.position+=3,cn(t,!0,-1)):t.position<t.length-1&&tn(t,"end of the stream or a document separator is expected")}function yn(t,e){e=e||{},0!==(t=String(t)).length&&(10!==t.charCodeAt(t.length-1)&&13!==t.charCodeAt(t.length-1)&&(t+="\n"),65279===t.charCodeAt(0)&&(t=t.slice(1)));var n=new Qe(t,e),r=t.indexOf("\0");for(-1!==r&&(n.position=r,tn(n,"null byte is not allowed in input")),n.input+="\0";32===n.input.charCodeAt(n.position);)n.lineIndent+=1,n.position+=1;for(;n.position<n.length-1;)gn(n);return n.documents}var mn=ue,bn={loadAll:function(t,e,n){null!==e&&"object"==typeof e&&void 0===n&&(n=e,e=null);var r=yn(t,n);if("function"!=typeof e)return r;for(var i=0,a=r.length;i<a;i+=1)e(r[i])},load:function(t,e){var n=yn(t,e);if(0!==n.length){if(1===n.length)return n[0];throw new ne("expected a single document in the stream, but found more")}}}.load;const _n=/^-{3}\s*[\n\r](.*?)[\n\r]-{3}\s*[\n\r]+/s;const xn=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,vn=/\s*%%.*\n/gm,kn={},wn=function(t,e){t=t.replace(_n,"").replace(xn,"").replace(vn,"\n");for(const[n,{detector:r}]of Object.entries(kn)){if(r(t,e))return n}throw new Error(`No diagram type detected for text: ${t}`)},En=(...t)=>{for(const{id:e,detector:n,loader:r}of t)Cn(e,n,r)},Cn=(t,e,n)=>{kn[t]?Nt.error(`Detector with key ${t} already exists`):kn[t]={detector:e,loader:n},Nt.debug(`Detector with key ${t} added${n?" with loader":""}`)},Tn=function(t,e,n){const{depth:r,clobber:i}=Object.assign({depth:2,clobber:!1},n);return Array.isArray(e)&&!Array.isArray(t)?(e.forEach((e=>Tn(t,e,n))),t):Array.isArray(e)&&Array.isArray(t)?(e.forEach((e=>{t.includes(e)||t.push(e)})),t):void 0===t||r<=0?null!=t&&"object"==typeof t&&"object"==typeof e?Object.assign(t,e):e:(void 0!==e&&"object"==typeof t&&"object"==typeof e&&Object.keys(e).forEach((n=>{"object"!=typeof e[n]||void 0!==t[n]&&"object"!=typeof t[n]?(i||"object"!=typeof t[n]&&"object"!=typeof e[n])&&(t[n]=e[n]):(void 0===t[n]&&(t[n]=Array.isArray(e[n])?[]:{}),t[n]=Tn(t[n],e[n],{depth:r-1,clobber:i}))})),t)},Sn=Tn,An={curveBasis:o.$0Z,curveBasisClosed:o.Dts,curveBasisOpen:o.WQY,curveBumpX:o.qpX,curveBumpY:o.u93,curveBundle:o.tFB,curveCardinalClosed:o.OvA,curveCardinalOpen:o.dCK,curveCardinal:o.YY7,curveCatmullRomClosed:o.fGX,curveCatmullRomOpen:o.$m7,curveCatmullRom:o.zgE,curveLinear:o.c_6,curveLinearClosed:o.fxm,curveMonotoneX:o.FdL,curveMonotoneY:o.ak_,curveNatural:o.SxZ,curveStep:o.eA_,curveStepAfter:o.jsv,curveStepBefore:o.iJ},Ln=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Bn=/\s*(?:(\w+)(?=:):|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Nn=function(t,e=null){try{const n=new RegExp(`[%]{2}(?![{]${Bn.source})(?=[}][%]{2}).*\n`,"ig");let r;t=t.trim().replace(n,"").replace(/'/gm,'"'),Nt.debug(`Detecting diagram directive${null!==e?" type:"+e:""} based on the text:${t}`);const i=[];for(;null!==(r=Ln.exec(t));)if(r.index===Ln.lastIndex&&Ln.lastIndex++,r&&!e||e&&r[1]&&r[1].match(e)||e&&r[2]&&r[2].match(e)){const t=r[1]?r[1]:r[2],e=r[3]?r[3].trim():r[4]?JSON.parse(r[4].trim()):null;i.push({type:t,args:e})}return 0===i.length&&i.push({type:t,args:null}),1===i.length?i[0]:i}catch(n){return Nt.error(`ERROR: ${n.message} - Unable to parse directive\n      ${null!==e?" type:"+e:""} based on the text:${t}`),{type:null,args:null}}};function Dn(t,e){if(!t)return e;const n=`curve${t.charAt(0).toUpperCase()+t.slice(1)}`;return An[n]||e}function On(t,e){return t&&e?Math.sqrt(Math.pow(e.x-t.x,2)+Math.pow(e.y-t.y,2)):0}function Mn(t){let e="",n="";for(const r of t)void 0!==r&&(r.startsWith("color:")||r.startsWith("text-align:")?n=n+r+";":e=e+r+";");return{style:e,labelStyle:n}}let In=0;const Fn=()=>(In++,"id-"+Math.random().toString(36).substr(2,12)+"-"+In);const $n=t=>function(t){let e="";const n="0123456789abcdef",r=n.length;for(let i=0;i<t;i++)e+=n.charAt(Math.floor(Math.random()*r));return e}(t.length),Rn=function(t,e){const n=e.text.replace(Yt.lineBreakRegex," "),[,r]=Vn(e.fontSize),i=t.append("text");i.attr("x",e.x),i.attr("y",e.y),i.style("text-anchor",e.anchor),i.style("font-family",e.fontFamily),i.style("font-size",r),i.style("font-weight",e.fontWeight),i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class);const a=i.append("tspan");return a.attr("x",e.x+2*e.textMargin),a.attr("fill",e.fill),a.text(n),i},Zn=(0,v.Z)(((t,e,n)=>{if(!t)return t;if(n=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",joinWith:"<br/>"},n),Yt.lineBreakRegex.test(t))return t;const r=t.split(" "),i=[];let a="";return r.forEach(((t,s)=>{const o=Yn(`${t} `,n),c=Yn(a,n);if(o>e){const{hyphenatedStrings:r,remainingWord:s}=Pn(t,e,"-",n);i.push(a,...r),a=s}else c+o>=e?(i.push(a),a=t):a=[a,t].filter(Boolean).join(" ");s+1===r.length&&i.push(a)})),i.filter((t=>""!==t)).join(n.joinWith)}),((t,e,n)=>`${t}${e}${n.fontSize}${n.fontWeight}${n.fontFamily}${n.joinWith}`)),Pn=(0,v.Z)(((t,e,n="-",r)=>{r=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:0},r);const i=[...t],a=[];let s="";return i.forEach(((t,o)=>{const c=`${s}${t}`;if(Yn(c,r)>=e){const t=o+1,e=i.length===t,r=`${c}${n}`;a.push(e?c:r),s=""}else s=c})),{hyphenatedStrings:a,remainingWord:s}}),((t,e,n="-",r)=>`${t}${e}${n}${r.fontSize}${r.fontWeight}${r.fontFamily}`));function jn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:15},e),zn(t,e).height}function Yn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e),zn(t,e).width}const zn=(0,v.Z)(((t,e)=>{e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e);const{fontSize:n,fontFamily:r,fontWeight:i}=e;if(!t)return{width:0,height:0};const[,a]=Vn(n),s=["sans-serif",r],c=t.split(Yt.lineBreakRegex),l=[],h=(0,o.Ys)("body");if(!h.remove)return{width:0,height:0,lineHeight:0};const u=h.append("svg");for(const o of s){let t=0;const e={width:0,height:0,lineHeight:0};for(const n of c){const r={x:0,y:0,fill:void 0,anchor:"start",style:"#666",width:100,height:100,textMargin:0,rx:0,ry:0,valign:void 0};r.text=n;const s=Rn(u,r).style("font-size",a).style("font-weight",i).style("font-family",o),c=(s._groups||s)[0][0].getBBox();e.width=Math.round(Math.max(e.width,c.width)),t=Math.round(c.height),e.height+=t,e.lineHeight=Math.round(Math.max(e.lineHeight,t))}l.push(e)}u.remove();return l[isNaN(l[1].height)||isNaN(l[1].width)||isNaN(l[1].lineHeight)||l[0].height>l[1].height&&l[0].width>l[1].width&&l[0].lineHeight>l[1].lineHeight?0:1]}),((t,e)=>`${t}${e.fontSize}${e.fontWeight}${e.fontFamily}`));let Un;const Wn=t=>{if(Nt.debug("directiveSanitizer called with",t),"object"==typeof t&&(t.length?t.forEach((t=>Wn(t))):Object.keys(t).forEach((e=>{Nt.debug("Checking key",e),e.startsWith("__")&&(Nt.debug("sanitize deleting __ option",e),delete t[e]),e.includes("proto")&&(Nt.debug("sanitize deleting proto option",e),delete t[e]),e.includes("constr")&&(Nt.debug("sanitize deleting constr option",e),delete t[e]),e.includes("themeCSS")&&(Nt.debug("sanitizing themeCss option"),t[e]=qn(t[e])),e.includes("fontFamily")&&(Nt.debug("sanitizing fontFamily option"),t[e]=qn(t[e])),e.includes("altFontFamily")&&(Nt.debug("sanitizing altFontFamily option"),t[e]=qn(t[e])),Xt.includes(e)?"object"==typeof t[e]&&(Nt.debug("sanitize deleting object",e),Wn(t[e])):(Nt.debug("sanitize deleting option",e),delete t[e])}))),t.themeVariables){const e=Object.keys(t.themeVariables);for(const n of e){const e=t.themeVariables[n];e&&e.match&&!e.match(/^[\d "#%(),.;A-Za-z]+$/)&&(t.themeVariables[n]="")}}Nt.debug("After sanitization",t)},qn=t=>{let e=0,n=0;for(const r of t){if(e<n)return"{ /* ERROR: Unbalanced CSS */ }";"{"===r?e++:"}"===r&&n++}return e!==n?"{ /* ERROR: Unbalanced CSS */ }":t};function Hn(t){return"str"in t}const Vn=t=>{if("number"==typeof t)return[t,t+"px"];const e=parseInt(t,10);return Number.isNaN(e)?[void 0,void 0]:t===String(e)?[e,t+"px"]:[e,t]},Gn={assignWithDepth:Sn,wrapLabel:Zn,calculateTextHeight:jn,calculateTextWidth:Yn,calculateTextDimensions:zn,detectInit:function(t,e){const n=Nn(t,/(?:init\b)|(?:initialize\b)/);let r={};if(Array.isArray(n)){const t=n.map((t=>t.args));Wn(t),r=Sn(r,[...t])}else r=n.args;if(r){let n=wn(t,e);["config"].forEach((t=>{void 0!==r[t]&&("flowchart-v2"===n&&(n="flowchart"),r[n]=r[t],delete r[t])}))}return r},detectDirective:Nn,isSubstringInArray:function(t,e){for(const[n,r]of e.entries())if(r.match(t))return n;return-1},interpolateToCurve:Dn,calcLabelPosition:function(t){return 1===t.length?t[0]:function(t){let e,n=0;t.forEach((t=>{n+=On(t,e),e=t}));let r,i=n/2;return e=void 0,t.forEach((t=>{if(e&&!r){const n=On(t,e);if(n<i)i-=n;else{const a=i/n;a<=0&&(r=e),a>=1&&(r={x:t.x,y:t.y}),a>0&&a<1&&(r={x:(1-a)*e.x+a*t.x,y:(1-a)*e.y+a*t.y})}}e=t})),r}(t)},calcCardinalityPosition:(t,e,n)=>{let r;Nt.info(`our points ${JSON.stringify(e)}`),e[0]!==n&&(e=e.reverse());let i,a=25;r=void 0,e.forEach((t=>{if(r&&!i){const e=On(t,r);if(e<a)a-=e;else{const n=a/e;n<=0&&(i=r),n>=1&&(i={x:t.x,y:t.y}),n>0&&n<1&&(i={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const s=t?10:5,o=Math.atan2(e[0].y-i.y,e[0].x-i.x),c={x:0,y:0};return c.x=Math.sin(o)*s+(e[0].x+i.x)/2,c.y=-Math.cos(o)*s+(e[0].y+i.y)/2,c},calcTerminalLabelPosition:function(t,e,n){let r,i=JSON.parse(JSON.stringify(n));Nt.info("our points",i),"start_left"!==e&&"start_right"!==e&&(i=i.reverse()),i.forEach((t=>{r=t}));let a,s=25+t;r=void 0,i.forEach((t=>{if(r&&!a){const e=On(t,r);if(e<s)s-=e;else{const n=s/e;n<=0&&(a=r),n>=1&&(a={x:t.x,y:t.y}),n>0&&n<1&&(a={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const o=10+.5*t,c=Math.atan2(i[0].y-a.y,i[0].x-a.x),l={x:0,y:0};return l.x=Math.sin(c)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2,"start_left"===e&&(l.x=Math.sin(c+Math.PI)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c+Math.PI)*o+(i[0].y+a.y)/2),"end_right"===e&&(l.x=Math.sin(c-Math.PI)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c-Math.PI)*o+(i[0].y+a.y)/2-5),"end_left"===e&&(l.x=Math.sin(c)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2-5),l},formatUrl:function(t,e){const n=t.trim();if(n)return"loose"!==e.securityLevel?(0,s.N)(n):n},getStylesFromArray:Mn,generateId:Fn,random:$n,runFunc:(t,...e)=>{const n=t.split("."),r=n.length-1,i=n[r];let a=window;for(let s=0;s<r;s++)if(a=a[n[s]],!a)return;a[i](...e)},entityDecode:function(t){return Un=Un||document.createElement("div"),t=escape(t).replace(/%26/g,"&").replace(/%23/g,"#").replace(/%3B/g,";"),Un.innerHTML=t,unescape(Un.textContent)},initIdGenerator:class{constructor(t,e){this.deterministic=t,this.seed=e,this.count=e?e.length:0}next(){return this.deterministic?this.count++:Date.now()}},directiveSanitizer:Wn,sanitizeCss:qn,insertTitle:(t,e,n,r)=>{if(!r)return;const i=t.node().getBBox();t.append("text").text(r).attr("x",i.x+i.width/2).attr("y",-n).attr("class",e)},parseFontSize:Vn},Xn="9.4.3",Kn=Object.freeze(Kt);let Qn,Jn=Sn({},Kn),tr=[],er=Sn({},Kn);const nr=(t,e)=>{let n=Sn({},t),r={};for(const i of e)sr(i),r=Sn(r,i);if(n=Sn(n,r),r.theme&&r.theme in Ht){const t=Sn({},Qn),e=Sn(t.themeVariables||{},r.themeVariables);n.theme&&n.theme in Ht&&(n.themeVariables=Ht[n.theme].getThemeVariables(e))}return er=n,ur(er),er},rr=()=>Sn({},Jn),ir=t=>(ur(t),Sn(er,t),ar()),ar=()=>Sn({},er),sr=t=>{["secure",...Jn.secure??[]].forEach((e=>{void 0!==t[e]&&(Nt.debug(`Denied attempt to modify a secure key ${e}`,t[e]),delete t[e])})),Object.keys(t).forEach((e=>{0===e.indexOf("__")&&delete t[e]})),Object.keys(t).forEach((e=>{"string"==typeof t[e]&&(t[e].includes("<")||t[e].includes(">")||t[e].includes("url(data:"))&&delete t[e],"object"==typeof t[e]&&sr(t[e])}))},or=t=>{t.fontFamily&&(t.themeVariables&&t.themeVariables.fontFamily||(t.themeVariables={fontFamily:t.fontFamily})),tr.push(t),nr(Jn,tr)},cr=(t=Jn)=>{tr=[],nr(t,tr)};var lr=(t=>(t.LAZY_LOAD_DEPRECATED="The configuration options lazyLoadedDiagrams and loadExternalDiagramsAtStartup are deprecated. Please use registerExternalDiagrams instead.",t))(lr||{});const hr={},ur=t=>{var e;t&&((t.lazyLoadedDiagrams||t.loadExternalDiagramsAtStartup)&&(hr[e="LAZY_LOAD_DEPRECATED"]||(Nt.warn(lr[e]),hr[e]=!0)))},dr=function(t,e,n,r){const i=function(t,e,n){let r=new Map;return n?(r.set("width","100%"),r.set("style",`max-width: ${e}px;`)):(r.set("height",t),r.set("width",e)),r}(e,n,r);!function(t,e){for(let n of e)t.attr(n[0],n[1])}(t,i)},pr=function(t,e,n,r){const i=e.node().getBBox(),a=i.width,s=i.height;Nt.info(`SVG bounds: ${a}x${s}`,i);let o=0,c=0;Nt.info(`Graph bounds: ${o}x${c}`,t),o=a+2*n,c=s+2*n,Nt.info(`Calculated bounds: ${o}x${c}`),dr(e,c,o,r);const l=`${i.x-n} ${i.y-n} ${i.width+2*n} ${i.height+2*n}`;e.attr("viewBox",l)},fr=t=>`g.classGroup text {\n  fill: ${t.nodeBorder};\n  fill: ${t.classText};\n  stroke: none;\n  font-family: ${t.fontFamily};\n  font-size: 10px;\n\n  .title {\n    font-weight: bolder;\n  }\n\n}\n\n.nodeLabel, .edgeLabel {\n  color: ${t.classText};\n}\n.edgeLabel .label rect {\n  fill: ${t.mainBkg};\n}\n.label text {\n  fill: ${t.classText};\n}\n.edgeLabel .label span {\n  background: ${t.mainBkg};\n}\n\n.classTitle {\n  font-weight: bolder;\n}\n.node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n\n.divider {\n  stroke: ${t.nodeBorder};\n  stroke: 1;\n}\n\ng.clickable {\n  cursor: pointer;\n}\n\ng.classGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.classGroup line {\n  stroke: ${t.nodeBorder};\n  stroke-width: 1;\n}\n\n.classLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.classLabel .label {\n  fill: ${t.nodeBorder};\n  font-size: 10px;\n}\n\n.relation {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.dashed-line{\n  stroke-dasharray: 3;\n}\n\n.dotted-line{\n  stroke-dasharray: 1 2;\n}\n\n#compositionStart, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#compositionEnd, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionStart, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionEnd, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationStart, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationEnd, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopStart, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopEnd, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n.edgeTerminals {\n  font-size: 11px;\n}\n\n.classTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,gr=t=>`\n  .entityBox {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxOdd {\n    fill: ${t.attributeBackgroundColorOdd};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxEven {\n    fill:  ${t.attributeBackgroundColorEven};\n    stroke: ${t.nodeBorder};\n  }\n\n  .relationshipLabelBox {\n    fill: ${t.tertiaryColor};\n    opacity: 0.7;\n    background-color: ${t.tertiaryColor};\n      rect {\n        opacity: 0.5;\n      }\n  }\n\n    .relationshipLine {\n      stroke: ${t.lineColor};\n    }\n\n  .entityTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }    \n`,yr=()=>"",mr=t=>`.label {\n    font-family: ${t.fontFamily};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n  .cluster-label text {\n    fill: ${t.titleColor};\n  }\n  .cluster-label span {\n    color: ${t.titleColor};\n  }\n\n  .label text,span {\n    fill: ${t.nodeTextColor||t.textColor};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 2.0px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n      background-color: ${t.edgeLabelBackground};\n      fill: ${t.edgeLabelBackground};\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n    fill: ${t.clusterBkg};\n    stroke: ${t.clusterBorder};\n    stroke-width: 1px;\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  .cluster span {\n    color: ${t.titleColor};\n  }\n  /* .cluster div {\n    color: ${t.titleColor};\n  } */\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: ${t.fontFamily};\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .flowchartTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n`,br=t=>`\n  .mermaid-main-font {\n    font-family: "trebuchet ms", verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  .exclude-range {\n    fill: ${t.excludeBkgColor};\n  }\n\n  .section {\n    stroke: none;\n    opacity: 0.2;\n  }\n\n  .section0 {\n    fill: ${t.sectionBkgColor};\n  }\n\n  .section2 {\n    fill: ${t.sectionBkgColor2};\n  }\n\n  .section1,\n  .section3 {\n    fill: ${t.altSectionBkgColor};\n    opacity: 0.2;\n  }\n\n  .sectionTitle0 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle1 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle2 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle3 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle {\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    // text-height: 14px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n\n  /* Grid and axis */\n\n  .grid .tick {\n    stroke: ${t.gridColor};\n    opacity: 0.8;\n    shape-rendering: crispEdges;\n    text {\n      font-family: ${t.fontFamily};\n      fill: ${t.textColor};\n    }\n  }\n\n  .grid path {\n    stroke-width: 0;\n  }\n\n\n  /* Today line */\n\n  .today {\n    fill: none;\n    stroke: ${t.todayLineColor};\n    stroke-width: 2px;\n  }\n\n\n  /* Task styling */\n\n  /* Default task */\n\n  .task {\n    stroke-width: 2;\n  }\n\n  .taskText {\n    text-anchor: middle;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n\n  // .taskText:not([font-size]) {\n  //   font-size: ${t.ganttFontSize};\n  // }\n\n  .taskTextOutsideRight {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n  .taskTextOutsideLeft {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: end;\n    // font-size: ${t.ganttFontSize};\n  }\n\n  /* Special case clickable */\n  .task.clickable {\n    cursor: pointer;\n  }\n  .taskText.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideLeft.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideRight.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  /* Specific task settings for the sections*/\n\n  .taskText0,\n  .taskText1,\n  .taskText2,\n  .taskText3 {\n    fill: ${t.taskTextColor};\n  }\n\n  .task0,\n  .task1,\n  .task2,\n  .task3 {\n    fill: ${t.taskBkgColor};\n    stroke: ${t.taskBorderColor};\n  }\n\n  .taskTextOutside0,\n  .taskTextOutside2\n  {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n  .taskTextOutside1,\n  .taskTextOutside3 {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n\n  /* Active task */\n\n  .active0,\n  .active1,\n  .active2,\n  .active3 {\n    fill: ${t.activeTaskBkgColor};\n    stroke: ${t.activeTaskBorderColor};\n  }\n\n  .activeText0,\n  .activeText1,\n  .activeText2,\n  .activeText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Completed task */\n\n  .done0,\n  .done1,\n  .done2,\n  .done3 {\n    stroke: ${t.doneTaskBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneText0,\n  .doneText1,\n  .doneText2,\n  .doneText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Tasks on the critical line */\n\n  .crit0,\n  .crit1,\n  .crit2,\n  .crit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.critBkgColor};\n    stroke-width: 2;\n  }\n\n  .activeCrit0,\n  .activeCrit1,\n  .activeCrit2,\n  .activeCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.activeTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneCrit0,\n  .doneCrit1,\n  .doneCrit2,\n  .doneCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n    cursor: pointer;\n    shape-rendering: crispEdges;\n  }\n\n  .milestone {\n    transform: rotate(45deg) scale(0.8,0.8);\n  }\n\n  .milestoneText {\n    font-style: italic;\n  }\n  .doneCritText0,\n  .doneCritText1,\n  .doneCritText2,\n  .doneCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .activeCritText0,\n  .activeCritText1,\n  .activeCritText2,\n  .activeCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .titleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor}    ;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n`,_r=()=>"",xr=t=>`\n  .pieCircle{\n    stroke: ${t.pieStrokeColor};\n    stroke-width : ${t.pieStrokeWidth};\n    opacity : ${t.pieOpacity};\n  }\n  .pieTitleText {\n    text-anchor: middle;\n    font-size: ${t.pieTitleTextSize};\n    fill: ${t.pieTitleTextColor};\n    font-family: ${t.fontFamily};\n  }\n  .slice {\n    font-family: ${t.fontFamily};\n    fill: ${t.pieSectionTextColor};\n    font-size:${t.pieSectionTextSize};\n    // fill: white;\n  }\n  .legend text {\n    fill: ${t.pieLegendTextColor};\n    font-family: ${t.fontFamily};\n    font-size: ${t.pieLegendTextSize};\n  }\n`,vr=t=>`\n\n  marker {\n    fill: ${t.relationColor};\n    stroke: ${t.relationColor};\n  }\n\n  marker.cross {\n    stroke: ${t.lineColor};\n  }\n\n  svg {\n    font-family: ${t.fontFamily};\n    font-size: ${t.fontSize};\n  }\n\n  .reqBox {\n    fill: ${t.requirementBackground};\n    fill-opacity: 100%;\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  \n  .reqTitle, .reqLabel{\n    fill:  ${t.requirementTextColor};\n  }\n  .reqLabelBox {\n    fill: ${t.relationLabelBackground};\n    fill-opacity: 100%;\n  }\n\n  .req-title-line {\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  .relationshipLine {\n    stroke: ${t.relationColor};\n    stroke-width: 1;\n  }\n  .relationshipLabel {\n    fill: ${t.relationLabelColor};\n  }\n\n`,kr=t=>`.actor {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n\n  text.actor > tspan {\n    fill: ${t.actorTextColor};\n    stroke: none;\n  }\n\n  .actor-line {\n    stroke: ${t.actorLineColor};\n  }\n\n  .messageLine0 {\n    stroke-width: 1.5;\n    stroke-dasharray: none;\n    stroke: ${t.signalColor};\n  }\n\n  .messageLine1 {\n    stroke-width: 1.5;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.signalColor};\n  }\n\n  #arrowhead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .sequenceNumber {\n    fill: ${t.sequenceNumberColor};\n  }\n\n  #sequencenumber {\n    fill: ${t.signalColor};\n  }\n\n  #crosshead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .messageText {\n    fill: ${t.signalTextColor};\n    stroke: none;\n  }\n\n  .labelBox {\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBkgColor};\n  }\n\n  .labelText, .labelText > tspan {\n    fill: ${t.labelTextColor};\n    stroke: none;\n  }\n\n  .loopText, .loopText > tspan {\n    fill: ${t.loopTextColor};\n    stroke: none;\n  }\n\n  .loopLine {\n    stroke-width: 2px;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBorderColor};\n  }\n\n  .note {\n    //stroke: #decc93;\n    stroke: ${t.noteBorderColor};\n    fill: ${t.noteBkgColor};\n  }\n\n  .noteText, .noteText > tspan {\n    fill: ${t.noteTextColor};\n    stroke: none;\n  }\n\n  .activation0 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation1 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation2 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .actorPopupMenu {\n    position: absolute;\n  }\n\n  .actorPopupMenuPanel {\n    position: absolute;\n    fill: ${t.actorBkg};\n    box-shadow: 0px 8px 16px 0px rgba(0,0,0,0.2);\n    filter: drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));\n}\n  .actor-man line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n  .actor-man circle, line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n    stroke-width: 2px;\n  }\n`,wr=t=>`\ndefs #statediagram-barbEnd {\n    fill: ${t.transitionColor};\n    stroke: ${t.transitionColor};\n  }\ng.stateGroup text {\n  fill: ${t.nodeBorder};\n  stroke: none;\n  font-size: 10px;\n}\ng.stateGroup text {\n  fill: ${t.textColor};\n  stroke: none;\n  font-size: 10px;\n\n}\ng.stateGroup .state-title {\n  font-weight: bolder;\n  fill: ${t.stateLabelColor};\n}\n\ng.stateGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.stateGroup line {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.transition {\n  stroke: ${t.transitionColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.stateGroup .composit {\n  fill: ${t.background};\n  border-bottom: 1px\n}\n\n.stateGroup .alt-composit {\n  fill: #e0e0e0;\n  border-bottom: 1px\n}\n\n.state-note {\n  stroke: ${t.noteBorderColor};\n  fill: ${t.noteBkgColor};\n\n  text {\n    fill: ${t.noteTextColor};\n    stroke: none;\n    font-size: 10px;\n  }\n}\n\n.stateLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.edgeLabel .label rect {\n  fill: ${t.labelBackgroundColor};\n  opacity: 0.5;\n}\n.edgeLabel .label text {\n  fill: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n.label div .edgeLabel {\n  color: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n\n.stateLabel text {\n  fill: ${t.stateLabelColor};\n  font-size: 10px;\n  font-weight: bold;\n}\n\n.node circle.state-start {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node .fork-join {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node circle.state-end {\n  fill: ${t.innerEndBackground};\n  stroke: ${t.background};\n  stroke-width: 1.5\n}\n.end-state-inner {\n  fill: ${t.compositeBackground||t.background};\n  // stroke: ${t.background};\n  stroke-width: 1.5\n}\n\n.node rect {\n  fill: ${t.stateBkg||t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n.node polygon {\n  fill: ${t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};;\n  stroke-width: 1px;\n}\n#statediagram-barbEnd {\n  fill: ${t.lineColor};\n}\n\n.statediagram-cluster rect {\n  fill: ${t.compositeTitleBackground};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n\n.cluster-label, .nodeLabel {\n  color: ${t.stateLabelColor};\n}\n\n.statediagram-cluster rect.outer {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state .divider {\n  stroke: ${t.stateBorder||t.nodeBorder};\n}\n\n.statediagram-state .title-state {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-cluster.statediagram-cluster .inner {\n  fill: ${t.compositeBackground||t.background};\n}\n.statediagram-cluster.statediagram-cluster-alt .inner {\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.statediagram-cluster .inner {\n  rx:0;\n  ry:0;\n}\n\n.statediagram-state rect.basic {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state rect.divider {\n  stroke-dasharray: 10,10;\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.note-edge {\n  stroke-dasharray: 5;\n}\n\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n\n.statediagram-note text {\n  fill: ${t.noteTextColor};\n}\n\n.statediagram-note .nodeLabel {\n  color: ${t.noteTextColor};\n}\n.statediagram .edgeLabel {\n  color: red; // ${t.noteTextColor};\n}\n\n#dependencyStart, #dependencyEnd {\n  fill: ${t.lineColor};\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.statediagramTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,Er=t=>`.label {\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    color: ${t.textColor};\n  }\n  .mouth {\n    stroke: #666;\n  }\n\n  line {\n    stroke: ${t.textColor}\n  }\n\n  .legend {\n    fill: ${t.textColor};\n  }\n\n  .label text {\n    fill: #333;\n  }\n  .label {\n    color: ${t.textColor}\n  }\n\n  .face {\n    ${t.faceColor?`fill: ${t.faceColor}`:"fill: #FFF8DC"};\n    stroke: #999;\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 1.5px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .task-type-0, .section-type-0  {\n    ${t.fillType0?`fill: ${t.fillType0}`:""};\n  }\n  .task-type-1, .section-type-1  {\n    ${t.fillType0?`fill: ${t.fillType1}`:""};\n  }\n  .task-type-2, .section-type-2  {\n    ${t.fillType0?`fill: ${t.fillType2}`:""};\n  }\n  .task-type-3, .section-type-3  {\n    ${t.fillType0?`fill: ${t.fillType3}`:""};\n  }\n  .task-type-4, .section-type-4  {\n    ${t.fillType0?`fill: ${t.fillType4}`:""};\n  }\n  .task-type-5, .section-type-5  {\n    ${t.fillType0?`fill: ${t.fillType5}`:""};\n  }\n  .task-type-6, .section-type-6  {\n    ${t.fillType0?`fill: ${t.fillType6}`:""};\n  }\n  .task-type-7, .section-type-7  {\n    ${t.fillType0?`fill: ${t.fillType7}`:""};\n  }\n\n  .actor-0 {\n    ${t.actor0?`fill: ${t.actor0}`:""};\n  }\n  .actor-1 {\n    ${t.actor1?`fill: ${t.actor1}`:""};\n  }\n  .actor-2 {\n    ${t.actor2?`fill: ${t.actor2}`:""};\n  }\n  .actor-3 {\n    ${t.actor3?`fill: ${t.actor3}`:""};\n  }\n  .actor-4 {\n    ${t.actor4?`fill: ${t.actor4}`:""};\n  }\n  .actor-5 {\n    ${t.actor5?`fill: ${t.actor5}`:""};\n  }\n`,Cr=t=>`.person {\n    stroke: ${t.personBorder};\n    fill: ${t.personBkg};\n  }\n`,Tr={flowchart:mr,"flowchart-v2":mr,sequence:kr,gantt:br,classDiagram:fr,"classDiagram-v2":fr,class:fr,stateDiagram:wr,state:wr,info:_r,pie:xr,er:gr,error:yr,journey:Er,requirement:vr,c4:Cr},Sr=(t,e,n)=>{let r="";return t in Tr&&Tr[t]?r=Tr[t](n):Nt.warn(`No theme found for ${t}`),` & {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n    fill: ${n.textColor}\n  }\n\n  /* Classes common for multiple diagrams */\n\n  & .error-icon {\n    fill: ${n.errorBkgColor};\n  }\n  & .error-text {\n    fill: ${n.errorTextColor};\n    stroke: ${n.errorTextColor};\n  }\n\n  & .edge-thickness-normal {\n    stroke-width: 2px;\n  }\n  & .edge-thickness-thick {\n    stroke-width: 3.5px\n  }\n  & .edge-pattern-solid {\n    stroke-dasharray: 0;\n  }\n\n  & .edge-pattern-dashed{\n    stroke-dasharray: 3;\n  }\n  .edge-pattern-dotted {\n    stroke-dasharray: 2;\n  }\n\n  & .marker {\n    fill: ${n.lineColor};\n    stroke: ${n.lineColor};\n  }\n  & .marker.cross {\n    stroke: ${n.lineColor};\n  }\n\n  & svg {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n  }\n\n  ${r}\n\n  ${e}\n`};let Ar="",Lr="",Br="";const Nr=t=>Ft(t,ar()),Dr=function(){Ar="",Br="",Lr=""},Or=function(t){Ar=Nr(t).replace(/^\s+/g,"")},Mr=function(){return Ar||Lr},Ir=function(t){Br=Nr(t).replace(/\n\s+/g,"\n")},Fr=function(){return Br},$r=function(t){Lr=Nr(t)},Rr=function(){return Lr},Zr={setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,getAccDescription:Fr,setAccDescription:Ir,clear:Dr},Pr=Object.freeze(Object.defineProperty({__proto__:null,clear:Dr,default:Zr,getAccDescription:Fr,getAccTitle:Mr,getDiagramTitle:Rr,setAccDescription:Ir,setAccTitle:Or,setDiagramTitle:$r},Symbol.toStringTag,{value:"Module"}));let jr={};const Yr=function(t,e,n,r){Nt.debug("parseDirective is being called",e,n,r);try{if(void 0!==e)switch(e=e.trim(),n){case"open_directive":jr={};break;case"type_directive":if(!jr)throw new Error("currentDirective is undefined");jr.type=e.toLowerCase();break;case"arg_directive":if(!jr)throw new Error("currentDirective is undefined");jr.args=JSON.parse(e);break;case"close_directive":zr(t,jr,r),jr=void 0}}catch(i){Nt.error(`Error while rendering sequenceDiagram directive: ${e} jison context: ${n}`),Nt.error(i.message)}},zr=function(t,e,n){switch(Nt.info(`Directive type=${e.type} with args:`,e.args),e.type){case"init":case"initialize":["config"].forEach((t=>{void 0!==e.args[t]&&("flowchart-v2"===n&&(n="flowchart"),e.args[n]=e.args[t],delete e.args[t])})),Nt.info("sanitize in handleDirective",e.args),Wn(e.args),Nt.info("sanitize in handleDirective (done)",e.args),or(e.args);break;case"wrap":case"nowrap":t&&t.setWrap&&t.setWrap("wrap"===e.type);break;case"themeCss":Nt.warn("themeCss encountered");break;default:Nt.warn(`Unhandled directive: source: '%%{${e.type}: ${JSON.stringify(e.args?e.args:{})}}%%`,e)}},Ur=Nt,Wr=Dt,qr=ar,Hr=t=>Ft(t,qr()),Vr=pr,Gr=(t,e,n,r)=>Yr(t,e,n,r),Xr={},Kr=(t,e,n)=>{if(Xr[t])throw new Error(`Diagram ${t} already registered.`);var r,i;Xr[t]=e,n&&Cn(t,n),r=t,i=e.styles,Tr[r]=i,e.injectUtils&&e.injectUtils(Ur,Wr,qr,Hr,Vr,Pr,Gr)},Qr=t=>{if(t in Xr)return Xr[t];throw new Error(`Diagram ${t} not found.`)};var Jr=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,7],i=[1,5],a=[1,9],s=[1,6],o=[2,6],c=[1,16],l=[6,8,14,20,22,24,25,27,29,32,37,40,50,55],h=[8,14,20,22,24,25,27,29,32,37,40],u=[8,13,14,20,22,24,25,27,29,32,37,40],d=[1,26],p=[6,8,14,50,55],f=[8,14,55],g=[1,53],y=[1,52],m=[8,14,30,33,35,38,55],b=[1,67],_=[1,68],x=[1,69],v=[8,14,33,35,42,55],k={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,GG:6,document:7,EOF:8,":":9,DIR:10,options:11,body:12,OPT:13,NL:14,line:15,statement:16,commitStatement:17,mergeStatement:18,cherryPickStatement:19,acc_title:20,acc_title_value:21,acc_descr:22,acc_descr_value:23,acc_descr_multiline_value:24,section:25,branchStatement:26,CHECKOUT:27,ref:28,BRANCH:29,ORDER:30,NUM:31,CHERRY_PICK:32,COMMIT_ID:33,STR:34,COMMIT_TAG:35,EMPTYSTR:36,MERGE:37,COMMIT_TYPE:38,commitType:39,COMMIT:40,commit_arg:41,COMMIT_MSG:42,NORMAL:43,REVERSE:44,HIGHLIGHT:45,openDirective:46,typeDirective:47,closeDirective:48,argDirective:49,open_directive:50,type_directive:51,arg_directive:52,close_directive:53,ID:54,";":55,$accept:0,$end:1},terminals_:{2:"error",6:"GG",8:"EOF",9:":",10:"DIR",13:"OPT",14:"NL",20:"acc_title",21:"acc_title_value",22:"acc_descr",23:"acc_descr_value",24:"acc_descr_multiline_value",25:"section",27:"CHECKOUT",29:"BRANCH",30:"ORDER",31:"NUM",32:"CHERRY_PICK",33:"COMMIT_ID",34:"STR",35:"COMMIT_TAG",36:"EMPTYSTR",37:"MERGE",38:"COMMIT_TYPE",40:"COMMIT",42:"COMMIT_MSG",43:"NORMAL",44:"REVERSE",45:"HIGHLIGHT",50:"open_directive",51:"type_directive",52:"arg_directive",53:"close_directive",54:"ID",55:";"},productions_:[0,[3,2],[3,2],[3,3],[3,4],[3,5],[7,0],[7,2],[11,2],[11,1],[12,0],[12,2],[15,2],[15,1],[16,1],[16,1],[16,1],[16,2],[16,2],[16,1],[16,1],[16,1],[16,2],[26,2],[26,4],[19,3],[19,5],[19,5],[19,5],[19,5],[18,2],[18,4],[18,4],[18,4],[18,6],[18,6],[18,6],[18,6],[18,6],[18,6],[18,8],[18,8],[18,8],[18,8],[18,8],[18,8],[17,2],[17,3],[17,3],[17,5],[17,5],[17,3],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,3],[17,5],[17,5],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[41,0],[41,1],[39,1],[39,1],[39,1],[5,3],[5,5],[46,1],[47,1],[49,1],[48,1],[28,1],[28,1],[4,1],[4,1],[4,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 3:return a[o];case 4:return a[o-1];case 5:return r.setDirection(a[o-3]),a[o-1];case 7:r.setOptions(a[o-1]),this.$=a[o];break;case 8:a[o-1]+=a[o],this.$=a[o-1];break;case 10:this.$=[];break;case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 12:this.$=a[o-1];break;case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 20:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 22:r.checkout(a[o]);break;case 23:r.branch(a[o]);break;case 24:r.branch(a[o-2],a[o]);break;case 25:r.cherryPick(a[o],"",void 0);break;case 26:r.cherryPick(a[o-2],"",a[o]);break;case 27:case 29:r.cherryPick(a[o-2],"","");break;case 28:r.cherryPick(a[o],"",a[o-2]);break;case 30:r.merge(a[o],"","","");break;case 31:r.merge(a[o-2],a[o],"","");break;case 32:r.merge(a[o-2],"",a[o],"");break;case 33:r.merge(a[o-2],"","",a[o]);break;case 34:r.merge(a[o-4],a[o],"",a[o-2]);break;case 35:r.merge(a[o-4],"",a[o],a[o-2]);break;case 36:r.merge(a[o-4],"",a[o-2],a[o]);break;case 37:r.merge(a[o-4],a[o-2],a[o],"");break;case 38:r.merge(a[o-4],a[o-2],"",a[o]);break;case 39:r.merge(a[o-4],a[o],a[o-2],"");break;case 40:r.merge(a[o-6],a[o-4],a[o-2],a[o]);break;case 41:r.merge(a[o-6],a[o],a[o-4],a[o-2]);break;case 42:r.merge(a[o-6],a[o-4],a[o],a[o-2]);break;case 43:r.merge(a[o-6],a[o-2],a[o-4],a[o]);break;case 44:r.merge(a[o-6],a[o],a[o-2],a[o-4]);break;case 45:r.merge(a[o-6],a[o-2],a[o],a[o-4]);break;case 46:r.commit(a[o]);break;case 47:r.commit("","",r.commitType.NORMAL,a[o]);break;case 48:r.commit("","",a[o],"");break;case 49:r.commit("","",a[o],a[o-2]);break;case 50:r.commit("","",a[o-2],a[o]);break;case 51:r.commit("",a[o],r.commitType.NORMAL,"");break;case 52:r.commit("",a[o-2],r.commitType.NORMAL,a[o]);break;case 53:r.commit("",a[o],r.commitType.NORMAL,a[o-2]);break;case 54:r.commit("",a[o-2],a[o],"");break;case 55:r.commit("",a[o],a[o-2],"");break;case 56:r.commit("",a[o-4],a[o-2],a[o]);break;case 57:r.commit("",a[o-4],a[o],a[o-2]);break;case 58:r.commit("",a[o-2],a[o-4],a[o]);break;case 59:r.commit("",a[o],a[o-4],a[o-2]);break;case 60:r.commit("",a[o],a[o-2],a[o-4]);break;case 61:r.commit("",a[o-2],a[o],a[o-4]);break;case 62:r.commit(a[o],"",r.commitType.NORMAL,"");break;case 63:r.commit(a[o],"",r.commitType.NORMAL,a[o-2]);break;case 64:r.commit(a[o-2],"",r.commitType.NORMAL,a[o]);break;case 65:r.commit(a[o-2],"",a[o],"");break;case 66:r.commit(a[o],"",a[o-2],"");break;case 67:r.commit(a[o],a[o-2],r.commitType.NORMAL,"");break;case 68:r.commit(a[o-2],a[o],r.commitType.NORMAL,"");break;case 69:r.commit(a[o-4],"",a[o-2],a[o]);break;case 70:r.commit(a[o-4],"",a[o],a[o-2]);break;case 71:r.commit(a[o-2],"",a[o-4],a[o]);break;case 72:r.commit(a[o],"",a[o-4],a[o-2]);break;case 73:r.commit(a[o],"",a[o-2],a[o-4]);break;case 74:r.commit(a[o-2],"",a[o],a[o-4]);break;case 75:r.commit(a[o-4],a[o],a[o-2],"");break;case 76:r.commit(a[o-4],a[o-2],a[o],"");break;case 77:r.commit(a[o-2],a[o],a[o-4],"");break;case 78:r.commit(a[o],a[o-2],a[o-4],"");break;case 79:r.commit(a[o],a[o-4],a[o-2],"");break;case 80:r.commit(a[o-2],a[o-4],a[o],"");break;case 81:r.commit(a[o-4],a[o],r.commitType.NORMAL,a[o-2]);break;case 82:r.commit(a[o-4],a[o-2],r.commitType.NORMAL,a[o]);break;case 83:r.commit(a[o-2],a[o],r.commitType.NORMAL,a[o-4]);break;case 84:r.commit(a[o],a[o-2],r.commitType.NORMAL,a[o-4]);break;case 85:r.commit(a[o],a[o-4],r.commitType.NORMAL,a[o-2]);break;case 86:r.commit(a[o-2],a[o-4],r.commitType.NORMAL,a[o]);break;case 87:r.commit(a[o-6],a[o-4],a[o-2],a[o]);break;case 88:r.commit(a[o-6],a[o-4],a[o],a[o-2]);break;case 89:r.commit(a[o-6],a[o-2],a[o-4],a[o]);break;case 90:r.commit(a[o-6],a[o],a[o-4],a[o-2]);break;case 91:r.commit(a[o-6],a[o-2],a[o],a[o-4]);break;case 92:r.commit(a[o-6],a[o],a[o-2],a[o-4]);break;case 93:r.commit(a[o-4],a[o-6],a[o-2],a[o]);break;case 94:r.commit(a[o-4],a[o-6],a[o],a[o-2]);break;case 95:r.commit(a[o-2],a[o-6],a[o-4],a[o]);break;case 96:r.commit(a[o],a[o-6],a[o-4],a[o-2]);break;case 97:r.commit(a[o-2],a[o-6],a[o],a[o-4]);break;case 98:r.commit(a[o],a[o-6],a[o-2],a[o-4]);break;case 99:r.commit(a[o],a[o-4],a[o-2],a[o-6]);break;case 100:r.commit(a[o-2],a[o-4],a[o],a[o-6]);break;case 101:r.commit(a[o],a[o-2],a[o-4],a[o-6]);break;case 102:r.commit(a[o-2],a[o],a[o-4],a[o-6]);break;case 103:r.commit(a[o-4],a[o-2],a[o],a[o-6]);break;case 104:r.commit(a[o-4],a[o],a[o-2],a[o-6]);break;case 105:r.commit(a[o-2],a[o-4],a[o-6],a[o]);break;case 106:r.commit(a[o],a[o-4],a[o-6],a[o-2]);break;case 107:r.commit(a[o-2],a[o],a[o-6],a[o-4]);break;case 108:r.commit(a[o],a[o-2],a[o-6],a[o-4]);break;case 109:r.commit(a[o-4],a[o-2],a[o-6],a[o]);break;case 110:r.commit(a[o-4],a[o],a[o-6],a[o-2]);break;case 111:this.$="";break;case 112:this.$=a[o];break;case 113:this.$=r.commitType.NORMAL;break;case 114:this.$=r.commitType.REVERSE;break;case 115:this.$=r.commitType.HIGHLIGHT;break;case 118:r.parseDirective("%%{","open_directive");break;case 119:r.parseDirective(a[o],"type_directive");break;case 120:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 121:r.parseDirective("}%%","close_directive","gitGraph")}},table:[{3:1,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{1:[3]},{3:10,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{3:11,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{7:12,8:o,9:[1,13],10:[1,14],11:15,14:c},e(l,[2,124]),e(l,[2,125]),e(l,[2,126]),{47:17,51:[1,18]},{51:[2,118]},{1:[2,1]},{1:[2,2]},{8:[1,19]},{7:20,8:o,11:15,14:c},{9:[1,21]},e(h,[2,10],{12:22,13:[1,23]}),e(u,[2,9]),{9:[1,25],48:24,53:d},e([9,53],[2,119]),{1:[2,3]},{8:[1,27]},{7:28,8:o,11:15,14:c},{8:[2,7],14:[1,31],15:29,16:30,17:32,18:33,19:34,20:[1,35],22:[1,36],24:[1,37],25:[1,38],26:39,27:[1,40],29:[1,44],32:[1,43],37:[1,42],40:[1,41]},e(u,[2,8]),e(p,[2,116]),{49:45,52:[1,46]},e(p,[2,121]),{1:[2,4]},{8:[1,47]},e(h,[2,11]),{4:48,8:r,14:i,55:s},e(h,[2,13]),e(f,[2,14]),e(f,[2,15]),e(f,[2,16]),{21:[1,49]},{23:[1,50]},e(f,[2,19]),e(f,[2,20]),e(f,[2,21]),{28:51,34:g,54:y},e(f,[2,111],{41:54,33:[1,57],34:[1,59],35:[1,55],38:[1,56],42:[1,58]}),{28:60,34:g,54:y},{33:[1,61],35:[1,62]},{28:63,34:g,54:y},{48:64,53:d},{53:[2,120]},{1:[2,5]},e(h,[2,12]),e(f,[2,17]),e(f,[2,18]),e(f,[2,22]),e(m,[2,122]),e(m,[2,123]),e(f,[2,46]),{34:[1,65]},{39:66,43:b,44:_,45:x},{34:[1,70]},{34:[1,71]},e(f,[2,112]),e(f,[2,30],{33:[1,72],35:[1,74],38:[1,73]}),{34:[1,75]},{34:[1,76],36:[1,77]},e(f,[2,23],{30:[1,78]}),e(p,[2,117]),e(f,[2,47],{33:[1,80],38:[1,79],42:[1,81]}),e(f,[2,48],{33:[1,83],35:[1,82],42:[1,84]}),e(v,[2,113]),e(v,[2,114]),e(v,[2,115]),e(f,[2,51],{35:[1,85],38:[1,86],42:[1,87]}),e(f,[2,62],{33:[1,90],35:[1,88],38:[1,89]}),{34:[1,91]},{39:92,43:b,44:_,45:x},{34:[1,93]},e(f,[2,25],{35:[1,94]}),{33:[1,95]},{33:[1,96]},{31:[1,97]},{39:98,43:b,44:_,45:x},{34:[1,99]},{34:[1,100]},{34:[1,101]},{34:[1,102]},{34:[1,103]},{34:[1,104]},{39:105,43:b,44:_,45:x},{34:[1,106]},{34:[1,107]},{39:108,43:b,44:_,45:x},{34:[1,109]},e(f,[2,31],{35:[1,111],38:[1,110]}),e(f,[2,32],{33:[1,113],35:[1,112]}),e(f,[2,33],{33:[1,114],38:[1,115]}),{34:[1,116],36:[1,117]},{34:[1,118]},{34:[1,119]},e(f,[2,24]),e(f,[2,49],{33:[1,120],42:[1,121]}),e(f,[2,53],{38:[1,122],42:[1,123]}),e(f,[2,63],{33:[1,125],38:[1,124]}),e(f,[2,50],{33:[1,126],42:[1,127]}),e(f,[2,55],{35:[1,128],42:[1,129]}),e(f,[2,66],{33:[1,131],35:[1,130]}),e(f,[2,52],{38:[1,132],42:[1,133]}),e(f,[2,54],{35:[1,134],42:[1,135]}),e(f,[2,67],{35:[1,137],38:[1,136]}),e(f,[2,64],{33:[1,139],38:[1,138]}),e(f,[2,65],{33:[1,141],35:[1,140]}),e(f,[2,68],{35:[1,143],38:[1,142]}),{39:144,43:b,44:_,45:x},{34:[1,145]},{34:[1,146]},{34:[1,147]},{34:[1,148]},{39:149,43:b,44:_,45:x},e(f,[2,26]),e(f,[2,27]),e(f,[2,28]),e(f,[2,29]),{34:[1,150]},{34:[1,151]},{39:152,43:b,44:_,45:x},{34:[1,153]},{39:154,43:b,44:_,45:x},{34:[1,155]},{34:[1,156]},{34:[1,157]},{34:[1,158]},{34:[1,159]},{34:[1,160]},{34:[1,161]},{39:162,43:b,44:_,45:x},{34:[1,163]},{34:[1,164]},{34:[1,165]},{39:166,43:b,44:_,45:x},{34:[1,167]},{39:168,43:b,44:_,45:x},{34:[1,169]},{34:[1,170]},{34:[1,171]},{39:172,43:b,44:_,45:x},{34:[1,173]},e(f,[2,37],{35:[1,174]}),e(f,[2,38],{38:[1,175]}),e(f,[2,36],{33:[1,176]}),e(f,[2,39],{35:[1,177]}),e(f,[2,34],{38:[1,178]}),e(f,[2,35],{33:[1,179]}),e(f,[2,60],{42:[1,180]}),e(f,[2,73],{33:[1,181]}),e(f,[2,61],{42:[1,182]}),e(f,[2,84],{38:[1,183]}),e(f,[2,74],{33:[1,184]}),e(f,[2,83],{38:[1,185]}),e(f,[2,59],{42:[1,186]}),e(f,[2,72],{33:[1,187]}),e(f,[2,58],{42:[1,188]}),e(f,[2,78],{35:[1,189]}),e(f,[2,71],{33:[1,190]}),e(f,[2,77],{35:[1,191]}),e(f,[2,57],{42:[1,192]}),e(f,[2,85],{38:[1,193]}),e(f,[2,56],{42:[1,194]}),e(f,[2,79],{35:[1,195]}),e(f,[2,80],{35:[1,196]}),e(f,[2,86],{38:[1,197]}),e(f,[2,70],{33:[1,198]}),e(f,[2,81],{38:[1,199]}),e(f,[2,69],{33:[1,200]}),e(f,[2,75],{35:[1,201]}),e(f,[2,76],{35:[1,202]}),e(f,[2,82],{38:[1,203]}),{34:[1,204]},{39:205,43:b,44:_,45:x},{34:[1,206]},{34:[1,207]},{39:208,43:b,44:_,45:x},{34:[1,209]},{34:[1,210]},{34:[1,211]},{34:[1,212]},{39:213,43:b,44:_,45:x},{34:[1,214]},{39:215,43:b,44:_,45:x},{34:[1,216]},{34:[1,217]},{34:[1,218]},{34:[1,219]},{34:[1,220]},{34:[1,221]},{34:[1,222]},{39:223,43:b,44:_,45:x},{34:[1,224]},{34:[1,225]},{34:[1,226]},{39:227,43:b,44:_,45:x},{34:[1,228]},{39:229,43:b,44:_,45:x},{34:[1,230]},{34:[1,231]},{34:[1,232]},{39:233,43:b,44:_,45:x},e(f,[2,40]),e(f,[2,42]),e(f,[2,41]),e(f,[2,43]),e(f,[2,45]),e(f,[2,44]),e(f,[2,101]),e(f,[2,102]),e(f,[2,99]),e(f,[2,100]),e(f,[2,104]),e(f,[2,103]),e(f,[2,108]),e(f,[2,107]),e(f,[2,106]),e(f,[2,105]),e(f,[2,110]),e(f,[2,109]),e(f,[2,98]),e(f,[2,97]),e(f,[2,96]),e(f,[2,95]),e(f,[2,93]),e(f,[2,94]),e(f,[2,92]),e(f,[2,91]),e(f,[2,90]),e(f,[2,89]),e(f,[2,87]),e(f,[2,88])],defaultActions:{9:[2,118],10:[2,1],11:[2,2],19:[2,3],27:[2,4],46:[2,120],47:[2,5]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),50;case 1:return this.begin("type_directive"),51;case 2:return this.popState(),this.begin("arg_directive"),9;case 3:return this.popState(),this.popState(),53;case 4:return 52;case 5:return this.begin("acc_title"),20;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),22;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 34:case 38:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:return 14;case 13:case 14:break;case 15:return 6;case 16:return 40;case 17:return 33;case 18:return 38;case 19:return 42;case 20:return 43;case 21:return 44;case 22:return 45;case 23:return 35;case 24:return 29;case 25:return 30;case 26:return 37;case 27:return 32;case 28:return 27;case 29:case 30:return 10;case 31:return 9;case 32:return"CARET";case 33:this.begin("options");break;case 35:return 13;case 36:return 36;case 37:this.begin("string");break;case 39:return 34;case 40:return 31;case 41:return 54;case 42:return 8}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:gitGraph\b)/i,/^(?:commit(?=\s|$))/i,/^(?:id:)/i,/^(?:type:)/i,/^(?:msg:)/i,/^(?:NORMAL\b)/i,/^(?:REVERSE\b)/i,/^(?:HIGHLIGHT\b)/i,/^(?:tag:)/i,/^(?:branch(?=\s|$))/i,/^(?:order:)/i,/^(?:merge(?=\s|$))/i,/^(?:cherry-pick(?=\s|$))/i,/^(?:checkout(?=\s|$))/i,/^(?:LR\b)/i,/^(?:BT\b)/i,/^(?::)/i,/^(?:\^)/i,/^(?:options\r?\n)/i,/^(?:[ \r\n\t]+end\b)/i,/^(?:[\s\S]+(?=[ \r\n\t]+end))/i,/^(?:["]["])/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[0-9]+(?=\s|$))/i,/^(?:\w([-\./\w]*[-\w])?)/i,/^(?:$)/i,/^(?:\s+)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},options:{rules:[34,35],inclusive:!1},string:{rules:[38,39],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,36,37,40,41,42,43],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Jr.parser=Jr;const ti=Jr,ei=t=>null!==t.match(/^\s*gitGraph/);let ni=ar().gitGraph.mainBranchName,ri=ar().gitGraph.mainBranchOrder,ii={},ai=null,si={};si[ni]={name:ni,order:ri};let oi={};oi[ni]=ai;let ci=ni,li="LR",hi=0;function ui(){return $n({length:7})}let di={};const pi=function(t){if(t=Yt.sanitizeText(t,ar()),void 0===oi[t]){let e=new Error('Trying to checkout branch which is not yet created. (Help try using "branch '+t+'")');throw e.hash={text:"checkout "+t,token:"checkout "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"branch '+t+'"']},e}{ci=t;const e=oi[ci];ai=ii[e]}};function fi(t,e,n){const r=t.indexOf(e);-1===r?t.push(n):t.splice(r,1,n)}function gi(t){const e=t.reduce(((t,e)=>t.seq>e.seq?t:e),t[0]);let n="";t.forEach((function(t){n+=t===e?"\t*":"\t|"}));const r=[n,e.id,e.seq];for(let i in oi)oi[i]===e.id&&r.push(i);if(Nt.debug(r.join(" ")),e.parents&&2==e.parents.length){const n=ii[e.parents[0]];fi(t,e,n),t.push(ii[e.parents[1]])}else{if(0==e.parents.length)return;{const n=ii[e.parents];fi(t,e,n)}}gi(t=function(t,e){const n=Object.create(null);return t.reduce(((t,r)=>{const i=e(r);return n[i]||(n[i]=!0,t.push(r)),t}),[])}(t,(t=>t.id)))}const yi=function(){const t=Object.keys(ii).map((function(t){return ii[t]}));return t.forEach((function(t){Nt.debug(t.id)})),t.sort(((t,e)=>t.seq-e.seq)),t},mi={NORMAL:0,REVERSE:1,HIGHLIGHT:2,MERGE:3,CHERRY_PICK:4},bi={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gitGraph,setDirection:function(t){li=t},setOptions:function(t){Nt.debug("options str",t),t=(t=t&&t.trim())||"{}";try{di=JSON.parse(t)}catch(e){Nt.error("error while parsing gitGraph options",e.message)}},getOptions:function(){return di},commit:function(t,e,n,r){Nt.debug("Entering commit:",t,e,n,r),e=Yt.sanitizeText(e,ar()),t=Yt.sanitizeText(t,ar()),r=Yt.sanitizeText(r,ar());const i={id:e||hi+"-"+ui(),message:t,seq:hi++,type:n||mi.NORMAL,tag:r||"",parents:null==ai?[]:[ai.id],branch:ci};ai=i,ii[i.id]=i,oi[ci]=i.id,Nt.debug("in pushCommit "+i.id)},branch:function(t,e){if(t=Yt.sanitizeText(t,ar()),void 0!==oi[t]){let e=new Error('Trying to create an existing branch. (Help: Either use a new name if you want create a new branch or try using "checkout '+t+'")');throw e.hash={text:"branch "+t,token:"branch "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"checkout '+t+'"']},e}oi[t]=null!=ai?ai.id:null,si[t]={name:t,order:e?parseInt(e,10):null},pi(t),Nt.debug("in createBranch")},merge:function(t,e,n,r){t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar());const i=ii[oi[ci]],a=ii[oi[t]];if(ci===t){let e=new Error('Incorrect usage of "merge". Cannot merge a branch to itself');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(void 0===i||!i){let e=new Error('Incorrect usage of "merge". Current branch ('+ci+")has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["commit"]},e}if(void 0===oi[t]){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") does not exist");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch "+t]},e}if(void 0===a||!a){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"commit"']},e}if(i===a){let e=new Error('Incorrect usage of "merge". Both branches have same head');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(e&&void 0!==ii[e]){let i=new Error('Incorrect usage of "merge". Commit with id:'+e+" already exists, use different custom Id");throw i.hash={text:"merge "+t+e+n+r,token:"merge "+t+e+n+r,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["merge "+t+" "+e+"_UNIQUE "+n+" "+r]},i}const s={id:e||hi+"-"+ui(),message:"merged branch "+t+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,oi[t]],branch:ci,type:mi.MERGE,customType:n,customId:!!e,tag:r||""};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in mergeBranch")},cherryPick:function(t,e,n){if(Nt.debug("Entering cherryPick:",t,e,n),t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar()),n=Yt.sanitizeText(n,ar()),!t||void 0===ii[t]){let n=new Error('Incorrect usage of "cherryPick". Source commit id should exist and provided');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}let r=ii[t],i=r.branch;if(r.type===mi.MERGE){let n=new Error('Incorrect usage of "cherryPick". Source commit should not be a merge commit');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}if(!e||void 0===ii[e]){if(i===ci){let n=new Error('Incorrect usage of "cherryPick". Source commit is already on current branch');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const a=ii[oi[ci]];if(void 0===a||!a){let n=new Error('Incorrect usage of "cherry-pick". Current branch ('+ci+")has no commits");throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const s={id:hi+"-"+ui(),message:"cherry-picked "+r+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,r.id],branch:ci,type:mi.CHERRY_PICK,tag:n??"cherry-pick:"+r.id};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in cherryPick")}},checkout:pi,prettyPrint:function(){Nt.debug(ii);gi([yi()[0]])},clear:function(){ii={},ai=null;let t=ar().gitGraph.mainBranchName,e=ar().gitGraph.mainBranchOrder;oi={},oi[t]=null,si={},si[t]={name:t,order:e},ci=t,hi=0,Dr()},getBranchesAsObjArray:function(){const t=Object.values(si).map(((t,e)=>null!==t.order?t:{...t,order:parseFloat(`0.${e}`,10)})).sort(((t,e)=>t.order-e.order)).map((({name:t})=>({name:t})));return t},getBranches:function(){return oi},getCommits:function(){return ii},getCommitsArray:yi,getCurrentBranch:function(){return ci},getDirection:function(){return li},getHead:function(){return ai},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,setDiagramTitle:$r,getDiagramTitle:Rr,commitType:mi};let _i={};const xi=0,vi=1,ki=2,wi=3,Ei=4;let Ci={},Ti={},Si=[],Ai=0;const Li=(t,e,n)=>{const r=qr().gitGraph,i=t.append("g").attr("class","commit-bullets"),a=t.append("g").attr("class","commit-labels");let s=0;Object.keys(e).sort(((t,n)=>e[t].seq-e[n].seq)).forEach((t=>{const o=e[t],c=Ci[o.branch].pos,l=s+10;if(n){let t,e=void 0!==o.customType&&""!==o.customType?o.customType:o.type;switch(e){case xi:t="commit-normal";break;case vi:t="commit-reverse";break;case ki:t="commit-highlight";break;case wi:t="commit-merge";break;case Ei:t="commit-cherry-pick";break;default:t="commit-normal"}if(e===ki){const e=i.append("rect");e.attr("x",l-10),e.attr("y",c-10),e.attr("height",20),e.attr("width",20),e.attr("class",`commit ${o.id} commit-highlight${Ci[o.branch].index%8} ${t}-outer`),i.append("rect").attr("x",l-6).attr("y",c-6).attr("height",12).attr("width",12).attr("class",`commit ${o.id} commit${Ci[o.branch].index%8} ${t}-inner`)}else if(e===Ei)i.append("circle").attr("cx",l).attr("cy",c).attr("r",10).attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l-3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l+3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l+3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l-3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`);else{const n=i.append("circle");if(n.attr("cx",l),n.attr("cy",c),n.attr("r",o.type===wi?9:10),n.attr("class",`commit ${o.id} commit${Ci[o.branch].index%8}`),e===wi){const e=i.append("circle");e.attr("cx",l),e.attr("cy",c),e.attr("r",6),e.attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}if(e===vi){i.append("path").attr("d",`M ${l-5},${c-5}L${l+5},${c+5}M${l-5},${c+5}L${l+5},${c-5}`).attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}}}if(Ti[o.id]={x:s+10,y:c},n){const t=4,e=2;if(o.type!==Ei&&(o.customId&&o.type===wi||o.type!==wi)&&r.showCommitLabel){const t=a.append("g"),n=t.insert("rect").attr("class","commit-label-bkg"),i=t.append("text").attr("x",s).attr("y",c+25).attr("class","commit-label").text(o.id);let l=i.node().getBBox();if(n.attr("x",s+10-l.width/2-e).attr("y",c+13.5).attr("width",l.width+2*e).attr("height",l.height+2*e),i.attr("x",s+10-l.width/2),r.rotateCommitLabel){let e=-7.5-(l.width+10)/25*9.5,n=10+l.width/25*8.5;t.attr("transform","translate("+e+", "+n+") rotate("+"-45, "+s+", "+c+")")}}if(o.tag){const n=a.insert("polygon"),r=a.append("circle"),i=a.append("text").attr("y",c-16).attr("class","tag-label").text(o.tag);let l=i.node().getBBox();i.attr("x",s+10-l.width/2);const h=l.height/2,u=c-19.2;n.attr("class","tag-label-bkg").attr("points",`\n          ${s-l.width/2-t/2},${u+e}\n          ${s-l.width/2-t/2},${u-e}\n          ${s+10-l.width/2-t},${u-h-e}\n          ${s+10+l.width/2+t},${u-h-e}\n          ${s+10+l.width/2+t},${u+h+e}\n          ${s+10-l.width/2-t},${u+h+e}`),r.attr("cx",s-l.width/2+t/2).attr("cy",u).attr("r",1.5).attr("class","tag-hole")}}s+=50,s>Ai&&(Ai=s)}))},Bi=(t,e,n=0)=>{const r=t+Math.abs(t-e)/2;if(n>5)return r;if(Si.every((t=>Math.abs(t-r)>=10)))return Si.push(r),r;const i=Math.abs(t-e);return Bi(t,e-i/5,n+1)},Ni=(t,e,n,r)=>{const i=Ti[e.id],a=Ti[n.id],s=((t,e,n)=>Object.keys(n).filter((r=>n[r].branch===e.branch&&n[r].seq>t.seq&&n[r].seq<e.seq)).length>0)(e,n,r);let o,c="",l="",h=0,u=0,d=Ci[n.branch].index;if(s){c="A 10 10, 0, 0, 0,",l="A 10 10, 0, 0, 1,",h=10,u=10,d=Ci[n.branch].index;const t=i.y<a.y?Bi(i.y,a.y):Bi(a.y,i.y);o=i.y<a.y?`M ${i.x} ${i.y} L ${i.x} ${t-h} ${c} ${i.x+u} ${t} L ${a.x-h} ${t} ${l} ${a.x} ${t+u} L ${a.x} ${a.y}`:`M ${i.x} ${i.y} L ${i.x} ${t+h} ${l} ${i.x+u} ${t} L ${a.x-h} ${t} ${c} ${a.x} ${t-u} L ${a.x} ${a.y}`}else i.y<a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[n.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`),i.y>a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${a.x-h} ${i.y} ${c} ${a.x} ${i.y-u} L ${a.x} ${a.y}`),i.y===a.y&&(d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`);t.append("path").attr("d",o).attr("class","arrow arrow"+d%8)},Di=(t,e)=>{const n=qr().gitGraph,r=t.append("g");e.forEach(((t,e)=>{const i=e%8,a=Ci[t.name].pos,s=r.append("line");s.attr("x1",0),s.attr("y1",a),s.attr("x2",Ai),s.attr("y2",a),s.attr("class","branch branch"+i),Si.push(a);const o=(t=>{const e=document.createElementNS("http://www.w3.org/2000/svg","text");let n=[];n="string"==typeof t?t.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(t)?t:[];for(const r of n){const t=document.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),t.setAttribute("dy","1em"),t.setAttribute("x","0"),t.setAttribute("class","row"),t.textContent=r.trim(),e.appendChild(t)}return e})(t.name),c=r.insert("rect"),l=r.insert("g").attr("class","branchLabel").insert("g").attr("class","label branch-label"+i);l.node().appendChild(o);let h=o.getBBox();c.attr("class","branchLabelBkg label"+i).attr("rx",4).attr("ry",4).attr("x",-h.width-4-(!0===n.rotateCommitLabel?30:0)).attr("y",-h.height/2+8).attr("width",h.width+18).attr("height",h.height+4),l.attr("transform","translate("+(-h.width-14-(!0===n.rotateCommitLabel?30:0))+", "+(a-h.height/2-1)+")"),c.attr("transform","translate(-19, "+(a-h.height/2)+")")}))},Oi={draw:function(t,e,n,r){Ci={},Ti={},_i={},Ai=0,Si=[];const i=qr(),a=i.gitGraph;Nt.debug("in gitgraph renderer",t+"\n","id:",e,n),_i=r.db.getCommits();const s=r.db.getBranchesAsObjArray();let c=0;s.forEach(((t,e)=>{Ci[t.name]={pos:c,index:e},c+=50+(a.rotateCommitLabel?40:0)}));const l=(0,o.Ys)(`[id="${e}"]`);Li(l,_i,!1),a.showBranches&&Di(l,s),((t,e)=>{const n=t.append("g").attr("class","commit-arrows");Object.keys(e).forEach((t=>{const r=e[t];r.parents&&r.parents.length>0&&r.parents.forEach((t=>{Ni(n,e[t],r,e)}))}))})(l,_i),Li(l,_i,!0),Gn.insertTitle(l,"gitTitleText",a.titleTopMargin,r.db.getDiagramTitle()),Vr(void 0,l,a.diagramPadding,a.useMaxWidth??i.useMaxWidth)}},Mi=t=>`\n  .commit-id,\n  .commit-msg,\n  .branch-label {\n    fill: lightgrey;\n    color: lightgrey;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  ${[0,1,2,3,4,5,6,7].map((e=>`\n        .branch-label${e} { fill: ${t["gitBranchLabel"+e]}; }\n        .commit${e} { stroke: ${t["git"+e]}; fill: ${t["git"+e]}; }\n        .commit-highlight${e} { stroke: ${t["gitInv"+e]}; fill: ${t["gitInv"+e]}; }\n        .label${e}  { fill: ${t["git"+e]}; }\n        .arrow${e} { stroke: ${t["git"+e]}; }\n        `)).join("\n")}\n\n  .branch {\n    stroke-width: 1;\n    stroke: ${t.lineColor};\n    stroke-dasharray: 2;\n  }\n  .commit-label { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelColor};}\n  .commit-label-bkg { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelBackground}; opacity: 0.5; }\n  .tag-label { font-size: ${t.tagLabelFontSize}; fill: ${t.tagLabelColor};}\n  .tag-label-bkg { fill: ${t.tagLabelBackground}; stroke: ${t.tagLabelBorder}; }\n  .tag-hole { fill: ${t.textColor}; }\n\n  .commit-merge {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n  .commit-reverse {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n    stroke-width: 3;\n  }\n  .commit-highlight-outer {\n  }\n  .commit-highlight-inner {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n\n  .arrow { stroke-width: 8; stroke-linecap: round; fill: none}\n  .gitTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n  }\n`;var Ii=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,6],r=[1,7],i=[1,8],a=[1,9],s=[1,16],o=[1,11],l=[1,12],h=[1,13],u=[1,14],d=[1,15],p=[1,27],f=[1,33],g=[1,34],y=[1,35],m=[1,36],b=[1,37],_=[1,72],x=[1,73],v=[1,74],k=[1,75],w=[1,76],E=[1,77],C=[1,78],T=[1,38],S=[1,39],A=[1,40],L=[1,41],B=[1,42],N=[1,43],D=[1,44],O=[1,45],M=[1,46],I=[1,47],F=[1,48],$=[1,49],R=[1,50],Z=[1,51],P=[1,52],j=[1,53],Y=[1,54],z=[1,55],U=[1,56],W=[1,57],q=[1,59],H=[1,60],V=[1,61],G=[1,62],X=[1,63],K=[1,64],Q=[1,65],J=[1,66],tt=[1,67],et=[1,68],nt=[1,69],rt=[24,52],it=[24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],at=[15,24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],st=[1,94],ot=[1,95],ct=[1,96],lt=[1,97],ht=[15,24,52],ut=[7,8,9,10,18,22,25,26,27,28],dt=[15,24,43,52],pt=[15,24,43,52,86,87,89,90],ft=[15,43],gt=[44,46,47,48,49,50,51,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],yt={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,direction:5,directive:6,direction_tb:7,direction_bt:8,direction_rl:9,direction_lr:10,graphConfig:11,openDirective:12,typeDirective:13,closeDirective:14,NEWLINE:15,":":16,argDirective:17,open_directive:18,type_directive:19,arg_directive:20,close_directive:21,C4_CONTEXT:22,statements:23,EOF:24,C4_CONTAINER:25,C4_COMPONENT:26,C4_DYNAMIC:27,C4_DEPLOYMENT:28,otherStatements:29,diagramStatements:30,otherStatement:31,title:32,accDescription:33,acc_title:34,acc_title_value:35,acc_descr:36,acc_descr_value:37,acc_descr_multiline_value:38,boundaryStatement:39,boundaryStartStatement:40,boundaryStopStatement:41,boundaryStart:42,LBRACE:43,ENTERPRISE_BOUNDARY:44,attributes:45,SYSTEM_BOUNDARY:46,BOUNDARY:47,CONTAINER_BOUNDARY:48,NODE:49,NODE_L:50,NODE_R:51,RBRACE:52,diagramStatement:53,PERSON:54,PERSON_EXT:55,SYSTEM:56,SYSTEM_DB:57,SYSTEM_QUEUE:58,SYSTEM_EXT:59,SYSTEM_EXT_DB:60,SYSTEM_EXT_QUEUE:61,CONTAINER:62,CONTAINER_DB:63,CONTAINER_QUEUE:64,CONTAINER_EXT:65,CONTAINER_EXT_DB:66,CONTAINER_EXT_QUEUE:67,COMPONENT:68,COMPONENT_DB:69,COMPONENT_QUEUE:70,COMPONENT_EXT:71,COMPONENT_EXT_DB:72,COMPONENT_EXT_QUEUE:73,REL:74,BIREL:75,REL_U:76,REL_D:77,REL_L:78,REL_R:79,REL_B:80,REL_INDEX:81,UPDATE_EL_STYLE:82,UPDATE_REL_STYLE:83,UPDATE_LAYOUT_CONFIG:84,attribute:85,STR:86,STR_KEY:87,STR_VALUE:88,ATTRIBUTE:89,ATTRIBUTE_EMPTY:90,$accept:0,$end:1},terminals_:{2:"error",7:"direction_tb",8:"direction_bt",9:"direction_rl",10:"direction_lr",15:"NEWLINE",16:":",18:"open_directive",19:"type_directive",20:"arg_directive",21:"close_directive",22:"C4_CONTEXT",24:"EOF",25:"C4_CONTAINER",26:"C4_COMPONENT",27:"C4_DYNAMIC",28:"C4_DEPLOYMENT",32:"title",33:"accDescription",34:"acc_title",35:"acc_title_value",36:"acc_descr",37:"acc_descr_value",38:"acc_descr_multiline_value",43:"LBRACE",44:"ENTERPRISE_BOUNDARY",46:"SYSTEM_BOUNDARY",47:"BOUNDARY",48:"CONTAINER_BOUNDARY",49:"NODE",50:"NODE_L",51:"NODE_R",52:"RBRACE",54:"PERSON",55:"PERSON_EXT",56:"SYSTEM",57:"SYSTEM_DB",58:"SYSTEM_QUEUE",59:"SYSTEM_EXT",60:"SYSTEM_EXT_DB",61:"SYSTEM_EXT_QUEUE",62:"CONTAINER",63:"CONTAINER_DB",64:"CONTAINER_QUEUE",65:"CONTAINER_EXT",66:"CONTAINER_EXT_DB",67:"CONTAINER_EXT_QUEUE",68:"COMPONENT",69:"COMPONENT_DB",70:"COMPONENT_QUEUE",71:"COMPONENT_EXT",72:"COMPONENT_EXT_DB",73:"COMPONENT_EXT_QUEUE",74:"REL",75:"BIREL",76:"REL_U",77:"REL_D",78:"REL_L",79:"REL_R",80:"REL_B",81:"REL_INDEX",82:"UPDATE_EL_STYLE",83:"UPDATE_REL_STYLE",84:"UPDATE_LAYOUT_CONFIG",86:"STR",87:"STR_KEY",88:"STR_VALUE",89:"ATTRIBUTE",90:"ATTRIBUTE_EMPTY"},productions_:[0,[3,1],[3,1],[3,2],[5,1],[5,1],[5,1],[5,1],[4,1],[6,4],[6,6],[12,1],[13,1],[17,1],[14,1],[11,4],[11,4],[11,4],[11,4],[11,4],[23,1],[23,1],[23,2],[29,1],[29,2],[29,3],[31,1],[31,1],[31,2],[31,2],[31,1],[39,3],[40,3],[40,3],[40,4],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[41,1],[30,1],[30,2],[30,3],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,1],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[45,1],[45,2],[85,1],[85,2],[85,1],[85,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setDirection("TB");break;case 5:r.setDirection("BT");break;case 6:r.setDirection("RL");break;case 7:r.setDirection("LR");break;case 11:r.parseDirective("%%{","open_directive");break;case 12:break;case 13:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 14:r.parseDirective("}%%","close_directive","c4Context");break;case 15:case 16:case 17:case 18:case 19:r.setC4Type(a[o-3]);break;case 26:r.setTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 27:r.setAccDescription(a[o].substring(15)),this.$=a[o].substring(15);break;case 28:this.$=a[o].trim(),r.setTitle(this.$);break;case 29:case 30:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 35:case 36:a[o].splice(2,0,"ENTERPRISE"),r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 37:r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 38:a[o].splice(2,0,"CONTAINER"),r.addContainerBoundary(...a[o]),this.$=a[o];break;case 39:r.addDeploymentNode("node",...a[o]),this.$=a[o];break;case 40:r.addDeploymentNode("nodeL",...a[o]),this.$=a[o];break;case 41:r.addDeploymentNode("nodeR",...a[o]),this.$=a[o];break;case 42:r.popBoundaryParseStack();break;case 46:r.addPersonOrSystem("person",...a[o]),this.$=a[o];break;case 47:r.addPersonOrSystem("external_person",...a[o]),this.$=a[o];break;case 48:r.addPersonOrSystem("system",...a[o]),this.$=a[o];break;case 49:r.addPersonOrSystem("system_db",...a[o]),this.$=a[o];break;case 50:r.addPersonOrSystem("system_queue",...a[o]),this.$=a[o];break;case 51:r.addPersonOrSystem("external_system",...a[o]),this.$=a[o];break;case 52:r.addPersonOrSystem("external_system_db",...a[o]),this.$=a[o];break;case 53:r.addPersonOrSystem("external_system_queue",...a[o]),this.$=a[o];break;case 54:r.addContainer("container",...a[o]),this.$=a[o];break;case 55:r.addContainer("container_db",...a[o]),this.$=a[o];break;case 56:r.addContainer("container_queue",...a[o]),this.$=a[o];break;case 57:r.addContainer("external_container",...a[o]),this.$=a[o];break;case 58:r.addContainer("external_container_db",...a[o]),this.$=a[o];break;case 59:r.addContainer("external_container_queue",...a[o]),this.$=a[o];break;case 60:r.addComponent("component",...a[o]),this.$=a[o];break;case 61:r.addComponent("component_db",...a[o]),this.$=a[o];break;case 62:r.addComponent("component_queue",...a[o]),this.$=a[o];break;case 63:r.addComponent("external_component",...a[o]),this.$=a[o];break;case 64:r.addComponent("external_component_db",...a[o]),this.$=a[o];break;case 65:r.addComponent("external_component_queue",...a[o]),this.$=a[o];break;case 67:r.addRel("rel",...a[o]),this.$=a[o];break;case 68:r.addRel("birel",...a[o]),this.$=a[o];break;case 69:r.addRel("rel_u",...a[o]),this.$=a[o];break;case 70:r.addRel("rel_d",...a[o]),this.$=a[o];break;case 71:r.addRel("rel_l",...a[o]),this.$=a[o];break;case 72:r.addRel("rel_r",...a[o]),this.$=a[o];break;case 73:r.addRel("rel_b",...a[o]),this.$=a[o];break;case 74:a[o].splice(0,1),r.addRel("rel",...a[o]),this.$=a[o];break;case 75:r.updateElStyle("update_el_style",...a[o]),this.$=a[o];break;case 76:r.updateRelStyle("update_rel_style",...a[o]),this.$=a[o];break;case 77:r.updateLayoutConfig("update_layout_config",...a[o]),this.$=a[o];break;case 78:this.$=[a[o]];break;case 79:a[o].unshift(a[o-1]),this.$=a[o];break;case 80:case 82:this.$=a[o].trim();break;case 81:let t={};t[a[o-1].trim()]=a[o].trim(),this.$=t;break;case 83:this.$=""}},table:[{3:1,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[3]},{1:[2,1]},{1:[2,2]},{3:17,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[2,8]},{1:[2,4]},{1:[2,5]},{1:[2,6]},{1:[2,7]},{13:18,19:[1,19]},{15:[1,20]},{15:[1,21]},{15:[1,22]},{15:[1,23]},{15:[1,24]},{19:[2,11]},{1:[2,3]},{14:25,16:[1,26],21:p},e([16,21],[2,12]),{23:28,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:79,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:80,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:81,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:82,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,83]},{17:84,20:[1,85]},{15:[2,14]},{24:[1,86]},e(rt,[2,20],{53:32,39:58,40:70,42:71,30:87,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(rt,[2,21]),e(it,[2,23],{15:[1,88]}),e(rt,[2,43],{15:[1,89]}),e(at,[2,26]),e(at,[2,27]),{35:[1,90]},{37:[1,91]},e(at,[2,30]),{45:92,85:93,86:st,87:ot,89:ct,90:lt},{45:98,85:93,86:st,87:ot,89:ct,90:lt},{45:99,85:93,86:st,87:ot,89:ct,90:lt},{45:100,85:93,86:st,87:ot,89:ct,90:lt},{45:101,85:93,86:st,87:ot,89:ct,90:lt},{45:102,85:93,86:st,87:ot,89:ct,90:lt},{45:103,85:93,86:st,87:ot,89:ct,90:lt},{45:104,85:93,86:st,87:ot,89:ct,90:lt},{45:105,85:93,86:st,87:ot,89:ct,90:lt},{45:106,85:93,86:st,87:ot,89:ct,90:lt},{45:107,85:93,86:st,87:ot,89:ct,90:lt},{45:108,85:93,86:st,87:ot,89:ct,90:lt},{45:109,85:93,86:st,87:ot,89:ct,90:lt},{45:110,85:93,86:st,87:ot,89:ct,90:lt},{45:111,85:93,86:st,87:ot,89:ct,90:lt},{45:112,85:93,86:st,87:ot,89:ct,90:lt},{45:113,85:93,86:st,87:ot,89:ct,90:lt},{45:114,85:93,86:st,87:ot,89:ct,90:lt},{45:115,85:93,86:st,87:ot,89:ct,90:lt},{45:116,85:93,86:st,87:ot,89:ct,90:lt},e(ht,[2,66]),{45:117,85:93,86:st,87:ot,89:ct,90:lt},{45:118,85:93,86:st,87:ot,89:ct,90:lt},{45:119,85:93,86:st,87:ot,89:ct,90:lt},{45:120,85:93,86:st,87:ot,89:ct,90:lt},{45:121,85:93,86:st,87:ot,89:ct,90:lt},{45:122,85:93,86:st,87:ot,89:ct,90:lt},{45:123,85:93,86:st,87:ot,89:ct,90:lt},{45:124,85:93,86:st,87:ot,89:ct,90:lt},{45:125,85:93,86:st,87:ot,89:ct,90:lt},{45:126,85:93,86:st,87:ot,89:ct,90:lt},{45:127,85:93,86:st,87:ot,89:ct,90:lt},{30:128,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,130],43:[1,129]},{45:131,85:93,86:st,87:ot,89:ct,90:lt},{45:132,85:93,86:st,87:ot,89:ct,90:lt},{45:133,85:93,86:st,87:ot,89:ct,90:lt},{45:134,85:93,86:st,87:ot,89:ct,90:lt},{45:135,85:93,86:st,87:ot,89:ct,90:lt},{45:136,85:93,86:st,87:ot,89:ct,90:lt},{45:137,85:93,86:st,87:ot,89:ct,90:lt},{24:[1,138]},{24:[1,139]},{24:[1,140]},{24:[1,141]},e(ut,[2,9]),{14:142,21:p},{21:[2,13]},{1:[2,15]},e(rt,[2,22]),e(it,[2,24],{31:31,29:143,32:f,33:g,34:y,36:m,38:b}),e(rt,[2,44],{29:29,30:30,31:31,53:32,39:58,40:70,42:71,23:144,32:f,33:g,34:y,36:m,38:b,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(at,[2,28]),e(at,[2,29]),e(ht,[2,46]),e(dt,[2,78],{85:93,45:145,86:st,87:ot,89:ct,90:lt}),e(pt,[2,80]),{88:[1,146]},e(pt,[2,82]),e(pt,[2,83]),e(ht,[2,47]),e(ht,[2,48]),e(ht,[2,49]),e(ht,[2,50]),e(ht,[2,51]),e(ht,[2,52]),e(ht,[2,53]),e(ht,[2,54]),e(ht,[2,55]),e(ht,[2,56]),e(ht,[2,57]),e(ht,[2,58]),e(ht,[2,59]),e(ht,[2,60]),e(ht,[2,61]),e(ht,[2,62]),e(ht,[2,63]),e(ht,[2,64]),e(ht,[2,65]),e(ht,[2,67]),e(ht,[2,68]),e(ht,[2,69]),e(ht,[2,70]),e(ht,[2,71]),e(ht,[2,72]),e(ht,[2,73]),e(ht,[2,74]),e(ht,[2,75]),e(ht,[2,76]),e(ht,[2,77]),{41:147,52:[1,148]},{15:[1,149]},{43:[1,150]},e(ft,[2,35]),e(ft,[2,36]),e(ft,[2,37]),e(ft,[2,38]),e(ft,[2,39]),e(ft,[2,40]),e(ft,[2,41]),{1:[2,16]},{1:[2,17]},{1:[2,18]},{1:[2,19]},{15:[1,151]},e(it,[2,25]),e(rt,[2,45]),e(dt,[2,79]),e(pt,[2,81]),e(ht,[2,31]),e(ht,[2,42]),e(gt,[2,32]),e(gt,[2,33],{15:[1,152]}),e(ut,[2,10]),e(gt,[2,34])],defaultActions:{2:[2,1],3:[2,2],5:[2,8],6:[2,4],7:[2,5],8:[2,6],9:[2,7],16:[2,11],17:[2,3],27:[2,14],85:[2,13],86:[2,15],138:[2,16],139:[2,17],140:[2,18],141:[2,19]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},mt=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),18;case 1:return 7;case 2:return 8;case 3:return 9;case 4:return 10;case 5:return this.begin("type_directive"),19;case 6:return this.popState(),this.begin("arg_directive"),16;case 7:return this.popState(),this.popState(),21;case 8:return 20;case 9:return 32;case 10:return 33;case 11:return this.begin("acc_title"),34;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),36;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 78:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:case 21:case 75:break;case 19:c;break;case 20:return 15;case 22:return 22;case 23:return 25;case 24:return 26;case 25:return 27;case 26:return 28;case 27:return this.begin("person_ext"),55;case 28:return this.begin("person"),54;case 29:return this.begin("system_ext_queue"),61;case 30:return this.begin("system_ext_db"),60;case 31:return this.begin("system_ext"),59;case 32:return this.begin("system_queue"),58;case 33:return this.begin("system_db"),57;case 34:return this.begin("system"),56;case 35:return this.begin("boundary"),47;case 36:return this.begin("enterprise_boundary"),44;case 37:return this.begin("system_boundary"),46;case 38:return this.begin("container_ext_queue"),67;case 39:return this.begin("container_ext_db"),66;case 40:return this.begin("container_ext"),65;case 41:return this.begin("container_queue"),64;case 42:return this.begin("container_db"),63;case 43:return this.begin("container"),62;case 44:return this.begin("container_boundary"),48;case 45:return this.begin("component_ext_queue"),73;case 46:return this.begin("component_ext_db"),72;case 47:return this.begin("component_ext"),71;case 48:return this.begin("component_queue"),70;case 49:return this.begin("component_db"),69;case 50:return this.begin("component"),68;case 51:case 52:return this.begin("node"),49;case 53:return this.begin("node_l"),50;case 54:return this.begin("node_r"),51;case 55:return this.begin("rel"),74;case 56:return this.begin("birel"),75;case 57:case 58:return this.begin("rel_u"),76;case 59:case 60:return this.begin("rel_d"),77;case 61:case 62:return this.begin("rel_l"),78;case 63:case 64:return this.begin("rel_r"),79;case 65:return this.begin("rel_b"),80;case 66:return this.begin("rel_index"),81;case 67:return this.begin("update_el_style"),82;case 68:return this.begin("update_rel_style"),83;case 69:return this.begin("update_layout_config"),84;case 70:return"EOF_IN_STRUCT";case 71:return this.begin("attribute"),"ATTRIBUTE_EMPTY";case 72:this.begin("attribute");break;case 73:case 84:this.popState(),this.popState();break;case 74:case 76:return 90;case 77:this.begin("string");break;case 79:case 85:return"STR";case 80:this.begin("string_kv");break;case 81:return this.begin("string_kv_key"),"STR_KEY";case 82:this.popState(),this.begin("string_kv_value");break;case 83:return"STR_VALUE";case 86:return"LBRACE";case 87:return"RBRACE";case 88:return"SPACE";case 89:return"EOL";case 90:return 24}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:title\s[^#\n;]+)/,/^(?:accDescription\s[^#\n;]+)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:C4Context\b)/,/^(?:C4Container\b)/,/^(?:C4Component\b)/,/^(?:C4Dynamic\b)/,/^(?:C4Deployment\b)/,/^(?:Person_Ext\b)/,/^(?:Person\b)/,/^(?:SystemQueue_Ext\b)/,/^(?:SystemDb_Ext\b)/,/^(?:System_Ext\b)/,/^(?:SystemQueue\b)/,/^(?:SystemDb\b)/,/^(?:System\b)/,/^(?:Boundary\b)/,/^(?:Enterprise_Boundary\b)/,/^(?:System_Boundary\b)/,/^(?:ContainerQueue_Ext\b)/,/^(?:ContainerDb_Ext\b)/,/^(?:Container_Ext\b)/,/^(?:ContainerQueue\b)/,/^(?:ContainerDb\b)/,/^(?:Container\b)/,/^(?:Container_Boundary\b)/,/^(?:ComponentQueue_Ext\b)/,/^(?:ComponentDb_Ext\b)/,/^(?:Component_Ext\b)/,/^(?:ComponentQueue\b)/,/^(?:ComponentDb\b)/,/^(?:Component\b)/,/^(?:Deployment_Node\b)/,/^(?:Node\b)/,/^(?:Node_L\b)/,/^(?:Node_R\b)/,/^(?:Rel\b)/,/^(?:BiRel\b)/,/^(?:Rel_Up\b)/,/^(?:Rel_U\b)/,/^(?:Rel_Down\b)/,/^(?:Rel_D\b)/,/^(?:Rel_Left\b)/,/^(?:Rel_L\b)/,/^(?:Rel_Right\b)/,/^(?:Rel_R\b)/,/^(?:Rel_Back\b)/,/^(?:RelIndex\b)/,/^(?:UpdateElementStyle\b)/,/^(?:UpdateRelStyle\b)/,/^(?:UpdateLayoutConfig\b)/,/^(?:$)/,/^(?:[(][ ]*[,])/,/^(?:[(])/,/^(?:[)])/,/^(?:,,)/,/^(?:,)/,/^(?:[ ]*["]["])/,/^(?:[ ]*["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[ ]*[\$])/,/^(?:[^=]*)/,/^(?:[=][ ]*["])/,/^(?:[^"]+)/,/^(?:["])/,/^(?:[^,]+)/,/^(?:\{)/,/^(?:\})/,/^(?:[\s]+)/,/^(?:[\n\r]+)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},string_kv_value:{rules:[83,84],inclusive:!1},string_kv_key:{rules:[82],inclusive:!1},string_kv:{rules:[81],inclusive:!1},string:{rules:[78,79],inclusive:!1},attribute:{rules:[73,74,75,76,77,80,85],inclusive:!1},update_layout_config:{rules:[70,71,72,73],inclusive:!1},update_rel_style:{rules:[70,71,72,73],inclusive:!1},update_el_style:{rules:[70,71,72,73],inclusive:!1},rel_b:{rules:[70,71,72,73],inclusive:!1},rel_r:{rules:[70,71,72,73],inclusive:!1},rel_l:{rules:[70,71,72,73],inclusive:!1},rel_d:{rules:[70,71,72,73],inclusive:!1},rel_u:{rules:[70,71,72,73],inclusive:!1},rel_bi:{rules:[],inclusive:!1},rel:{rules:[70,71,72,73],inclusive:!1},node_r:{rules:[70,71,72,73],inclusive:!1},node_l:{rules:[70,71,72,73],inclusive:!1},node:{rules:[70,71,72,73],inclusive:!1},index:{rules:[],inclusive:!1},rel_index:{rules:[70,71,72,73],inclusive:!1},component_ext_queue:{rules:[],inclusive:!1},component_ext_db:{rules:[70,71,72,73],inclusive:!1},component_ext:{rules:[70,71,72,73],inclusive:!1},component_queue:{rules:[70,71,72,73],inclusive:!1},component_db:{rules:[70,71,72,73],inclusive:!1},component:{rules:[70,71,72,73],inclusive:!1},container_boundary:{rules:[70,71,72,73],inclusive:!1},container_ext_queue:{rules:[],inclusive:!1},container_ext_db:{rules:[70,71,72,73],inclusive:!1},container_ext:{rules:[70,71,72,73],inclusive:!1},container_queue:{rules:[70,71,72,73],inclusive:!1},container_db:{rules:[70,71,72,73],inclusive:!1},container:{rules:[70,71,72,73],inclusive:!1},birel:{rules:[70,71,72,73],inclusive:!1},system_boundary:{rules:[70,71,72,73],inclusive:!1},enterprise_boundary:{rules:[70,71,72,73],inclusive:!1},boundary:{rules:[70,71,72,73],inclusive:!1},system_ext_queue:{rules:[70,71,72,73],inclusive:!1},system_ext_db:{rules:[70,71,72,73],inclusive:!1},system_ext:{rules:[70,71,72,73],inclusive:!1},system_queue:{rules:[70,71,72,73],inclusive:!1},system_db:{rules:[70,71,72,73],inclusive:!1},system:{rules:[70,71,72,73],inclusive:!1},person_ext:{rules:[70,71,72,73],inclusive:!1},person:{rules:[70,71,72,73],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,86,87,88,89,90],inclusive:!0}}},t);function bt(){this.yy={}}return yt.lexer=mt,bt.prototype=yt,yt.Parser=bt,new bt}();Ii.parser=Ii;const Fi=Ii,$i=t=>null!==t.match(/^\s*C4Context|C4Container|C4Component|C4Dynamic|C4Deployment/);let Ri=[],Zi=[""],Pi="global",ji="",Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],zi=[],Ui="",Wi=!1,qi=4,Hi=2;var Vi;const Gi=function(t){return null==t?Ri:Ri.filter((e=>e.parentBoundary===t))},Xi=function(){return Wi},Ki={addPersonOrSystem:function(t,e,n,r,i,a,s){if(null===e||null===n)return;let o={};const c=Ri.find((t=>t.alias===e));if(c&&e===c.alias?o=c:(o.alias=e,Ri.push(o)),o.label=null==n?{text:""}:{text:n},null==r)o.descr={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]={text:e}}else o.descr={text:r};if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.sprite=i;if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=e}else o.tags=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=e}else o.link=s;o.typeC4Shape={text:t},o.parentBoundary=Pi,o.wrap=Xi()},addPersonOrSystemBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"system"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addContainer:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addContainerBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"container"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addComponent:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addDeploymentNode:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Yi.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Yi.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.type={text:"node"};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.type={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.nodeType=t,c.parentBoundary=Pi,c.wrap=Xi(),ji=Pi,Pi=e,Zi.push(ji)},popBoundaryParseStack:function(){Pi=ji,Zi.pop(),ji=Zi.pop(),Zi.push(ji)},addRel:function(t,e,n,r,i,a,s,o,c){if(null==t||null==e||null==n||null==r)return;let l={};const h=zi.find((t=>t.from===e&&t.to===n));if(h?l=h:zi.push(l),l.type=t,l.from=e,l.to=n,l.label={text:r},null==i)l.techn={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];l[t]={text:e}}else l.techn={text:i};if(null==a)l.descr={text:""};else if("object"==typeof a){let[t,e]=Object.entries(a)[0];l[t]={text:e}}else l.descr={text:a};if("object"==typeof s){let[t,e]=Object.entries(s)[0];l[t]=e}else l.sprite=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];l[t]=e}else l.tags=o;if("object"==typeof c){let[t,e]=Object.entries(c)[0];l[t]=e}else l.link=c;l.wrap=Xi()},updateElStyle:function(t,e,n,r,i,a,s,o,c,l,h){let u=Ri.find((t=>t.alias===e));if(void 0!==u||(u=Yi.find((t=>t.alias===e)),void 0!==u)){if(null!=n)if("object"==typeof n){let[t,e]=Object.entries(n)[0];u[t]=e}else u.bgColor=n;if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];u[t]=e}else u.fontColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];u[t]=e}else u.borderColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];u[t]=e}else u.shadowing=a;if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];u[t]=e}else u.shape=s;if(null!=o)if("object"==typeof o){let[t,e]=Object.entries(o)[0];u[t]=e}else u.sprite=o;if(null!=c)if("object"==typeof c){let[t,e]=Object.entries(c)[0];u[t]=e}else u.techn=c;if(null!=l)if("object"==typeof l){let[t,e]=Object.entries(l)[0];u[t]=e}else u.legendText=l;if(null!=h)if("object"==typeof h){let[t,e]=Object.entries(h)[0];u[t]=e}else u.legendSprite=h}},updateRelStyle:function(t,e,n,r,i,a,s){const o=zi.find((t=>t.from===e&&t.to===n));if(void 0!==o){if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]=e}else o.textColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.lineColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=parseInt(e)}else o.offsetX=parseInt(a);if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=parseInt(e)}else o.offsetY=parseInt(s)}},updateLayoutConfig:function(t,e,n){let r=qi,i=Hi;if("object"==typeof e){const t=Object.values(e)[0];r=parseInt(t)}else r=parseInt(e);if("object"==typeof n){const t=Object.values(n)[0];i=parseInt(t)}else i=parseInt(n);r>=1&&(qi=r),i>=1&&(Hi=i)},autoWrap:Xi,setWrap:function(t){Wi=t},getC4ShapeArray:Gi,getC4Shape:function(t){return Ri.find((e=>e.alias===t))},getC4ShapeKeys:function(t){return Object.keys(Gi(t))},getBoundarys:function(t){return null==t?Yi:Yi.filter((e=>e.parentBoundary===t))},getCurrentBoundaryParse:function(){return Pi},getParentBoundaryParse:function(){return ji},getRels:function(){return zi},getTitle:function(){return Ui},getC4Type:function(){return Vi},getC4ShapeInRow:function(){return qi},getC4BoundaryInRow:function(){return Hi},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().c4,clear:function(){Ri=[],Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],ji="",Pi="global",Zi=[""],zi=[],Zi=[""],Ui="",Wi=!1,qi=4,Hi=2},LINETYPE:{SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25},ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},setTitle:function(t){let e=Ft(t,ar());Ui=e},setC4Type:function(t){let e=Ft(t,ar());Vi=e}},Qi=function(t,e){const n=t.append("rect");if(n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),"undefined"!==e.attrs&&null!==e.attrs)for(let r in e.attrs)n.attr(r,e.attrs[r]);return"undefined"!==e.class&&n.attr("class",e.class),n},Ji=function(t,e,n,r,i,a){const o=t.append("image");o.attr("width",e),o.attr("height",n),o.attr("x",r),o.attr("y",i);let c=a.startsWith("data:image/png;base64")?a:(0,s.N)(a);o.attr("xlink:href",c)},ta=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},ea=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),na=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{fontSize:l,fontFamily:h,fontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,s=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").attr("dominant-baseline","middle").style("font-size",l).style("font-weight",u).style("font-family",h);s.append("tspan").attr("dy",t).text(d[p]).attr("alignment-baseline","mathematical"),r(s,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,0,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),ra=function(t,e,n){const r=t.append("g");let i=e.bgColor?e.bgColor:"none",a=e.borderColor?e.borderColor:"#444444",s=e.fontColor?e.fontColor:"black",o={"stroke-width":1,"stroke-dasharray":"7.0,7.0"};e.nodeType&&(o={"stroke-width":1});let c={x:e.x,y:e.y,fill:i,stroke:a,width:e.width,height:e.height,rx:2.5,ry:2.5,attrs:o};Qi(r,c);let l=n.boundaryFont();l.fontWeight="bold",l.fontSize=l.fontSize+2,l.fontColor=s,na(n)(e.label.text,r,e.x,e.y+e.label.Y,e.width,e.height,{fill:"#444444"},l),e.type&&""!==e.type.text&&(l=n.boundaryFont(),l.fontColor=s,na(n)(e.type.text,r,e.x,e.y+e.type.Y,e.width,e.height,{fill:"#444444"},l)),e.descr&&""!==e.descr.text&&(l=n.boundaryFont(),l.fontSize=l.fontSize-2,l.fontColor=s,na(n)(e.descr.text,r,e.x,e.y+e.descr.Y,e.width,e.height,{fill:"#444444"},l))},ia=function(t,e,n){var r;let i=e.bgColor?e.bgColor:n[e.typeC4Shape.text+"_bg_color"],a=e.borderColor?e.borderColor:n[e.typeC4Shape.text+"_border_color"],s=e.fontColor?e.fontColor:"#FFFFFF",o="data:image/png;base64,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";switch(e.typeC4Shape.text){case"person":o="data:image/png;base64,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";break;case"external_person":o="data:image/png;base64,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"}const c=t.append("g");c.attr("class","person-man");const l=ta();switch(e.typeC4Shape.text){case"person":case"external_person":case"system":case"external_system":case"container":case"external_container":case"component":case"external_component":l.x=e.x,l.y=e.y,l.fill=i,l.width=e.width,l.height=e.height,l.stroke=a,l.rx=2.5,l.ry=2.5,l.attrs={"stroke-width":.5},Qi(c,l);break;case"system_db":case"external_system_db":case"container_db":case"external_container_db":case"component_db":case"external_component_db":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,-10 half,-10 half,-10c0,0 half,0 half,10l0,heightc0,10 -half,10 -half,10c0,0 -half,0 -half,-10l0,-height".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2).replaceAll("height",e.height)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,10 half,10 half,10c0,0 half,0 half,-10".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2));break;case"system_queue":case"external_system_queue":case"container_queue":case"external_container_queue":case"component_queue":case"external_component_queue":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startylwidth,0c5,0 5,half 5,halfc0,0 0,half -5,halfl-width,0c-5,0 -5,-half -5,-halfc0,0 0,-half 5,-half".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("width",e.width).replaceAll("half",e.height/2)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc-5,0 -5,half -5,halfc0,half 5,half 5,half".replaceAll("startx",e.x+e.width).replaceAll("starty",e.y).replaceAll("half",e.height/2))}let h=ea(n,e.typeC4Shape.text);switch(c.append("text").attr("fill",s).attr("font-family",h.fontFamily).attr("font-size",h.fontSize-2).attr("font-style","italic").attr("lengthAdjust","spacing").attr("textLength",e.typeC4Shape.width).attr("x",e.x+e.width/2-e.typeC4Shape.width/2).attr("y",e.y+e.typeC4Shape.Y).text("<<"+e.typeC4Shape.text+">>"),e.typeC4Shape.text){case"person":case"external_person":Ji(c,48,48,e.x+e.width/2-24,e.y+e.image.Y,o)}let u=n[e.typeC4Shape.text+"Font"]();return u.fontWeight="bold",u.fontSize=u.fontSize+2,u.fontColor=s,na(n)(e.label.text,c,e.x,e.y+e.label.Y,e.width,e.height,{fill:s},u),u=n[e.typeC4Shape.text+"Font"](),u.fontColor=s,e.techn&&""!==(null==(r=e.techn)?void 0:r.text)?na(n)(e.techn.text,c,e.x,e.y+e.techn.Y,e.width,e.height,{fill:s,"font-style":"italic"},u):e.type&&""!==e.type.text&&na(n)(e.type.text,c,e.x,e.y+e.type.Y,e.width,e.height,{fill:s,"font-style":"italic"},u),e.descr&&""!==e.descr.text&&(u=n.personFont(),u.fontColor=s,na(n)(e.descr.text,c,e.x,e.y+e.descr.Y,e.width,e.height,{fill:s},u)),e.height},aa=(t,e,n)=>{const r=t.append("g");let i=0;for(let a of e){let t=a.textColor?a.textColor:"#444444",e=a.lineColor?a.lineColor:"#444444",s=a.offsetX?parseInt(a.offsetX):0,o=a.offsetY?parseInt(a.offsetY):0,c="";if(0===i){let t=r.append("line");t.attr("x1",a.startPoint.x),t.attr("y1",a.startPoint.y),t.attr("x2",a.endPoint.x),t.attr("y2",a.endPoint.y),t.attr("stroke-width","1"),t.attr("stroke",e),t.style("fill","none"),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)"),i=-1}else{let t=r.append("path");t.attr("fill","none").attr("stroke-width","1").attr("stroke",e).attr("d","Mstartx,starty Qcontrolx,controly stopx,stopy ".replaceAll("startx",a.startPoint.x).replaceAll("starty",a.startPoint.y).replaceAll("controlx",a.startPoint.x+(a.endPoint.x-a.startPoint.x)/2-(a.endPoint.x-a.startPoint.x)/4).replaceAll("controly",a.startPoint.y+(a.endPoint.y-a.startPoint.y)/2).replaceAll("stopx",a.endPoint.x).replaceAll("stopy",a.endPoint.y)),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)")}let l=n.messageFont();na(n)(a.label.text,r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+o,a.label.width,a.label.height,{fill:t},l),a.techn&&""!==a.techn.text&&(l=n.messageFont(),na(n)("["+a.techn.text+"]",r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+n.messageFontSize+5+o,Math.max(a.label.width,a.techn.width),a.techn.height,{fill:t,"font-style":"italic"},l))}},sa=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},oa=function(t){t.append("defs").append("marker").attr("id","arrowend").attr("refX",1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 10 0 L 0 5 L 10 10 z")},ca=function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},la=function(t){const e=t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",16).attr("refY",4);e.append("path").attr("fill","black").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 9,2 V 6 L16,4 Z"),e.append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 0,1 L 6,7 M 6,1 L 0,7")},ha=function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},ua=function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},da=function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")};s.N;let pa=0,fa=0,ga=4,ya=2;Ii.yy=Ki;let ma={};class ba{constructor(t){this.name="",this.data={},this.data.startx=void 0,this.data.stopx=void 0,this.data.starty=void 0,this.data.stopy=void 0,this.data.widthLimit=void 0,this.nextData={},this.nextData.startx=void 0,this.nextData.stopx=void 0,this.nextData.starty=void 0,this.nextData.stopy=void 0,this.nextData.cnt=0,_a(t.db.getConfig())}setData(t,e,n,r){this.nextData.startx=this.data.startx=t,this.nextData.stopx=this.data.stopx=e,this.nextData.starty=this.data.starty=n,this.nextData.stopy=this.data.stopy=r}updateVal(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])}insert(t){this.nextData.cnt=this.nextData.cnt+1;let e=this.nextData.startx===this.nextData.stopx?this.nextData.stopx+t.margin:this.nextData.stopx+2*t.margin,n=e+t.width,r=this.nextData.starty+2*t.margin,i=r+t.height;(e>=this.data.widthLimit||n>=this.data.widthLimit||this.nextData.cnt>ga)&&(e=this.nextData.startx+t.margin+ma.nextLinePaddingX,r=this.nextData.stopy+2*t.margin,this.nextData.stopx=n=e+t.width,this.nextData.starty=this.nextData.stopy,this.nextData.stopy=i=r+t.height,this.nextData.cnt=1),t.x=e,t.y=r,this.updateVal(this.data,"startx",e,Math.min),this.updateVal(this.data,"starty",r,Math.min),this.updateVal(this.data,"stopx",n,Math.max),this.updateVal(this.data,"stopy",i,Math.max),this.updateVal(this.nextData,"startx",e,Math.min),this.updateVal(this.nextData,"starty",r,Math.min),this.updateVal(this.nextData,"stopx",n,Math.max),this.updateVal(this.nextData,"stopy",i,Math.max)}init(t){this.name="",this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,widthLimit:void 0},this.nextData={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,cnt:0},_a(t.db.getConfig())}bumpLastMargin(t){this.data.stopx+=t,this.data.stopy+=t}}const _a=function(t){Sn(ma,t),t.fontFamily&&(ma.personFontFamily=ma.systemFontFamily=ma.messageFontFamily=t.fontFamily),t.fontSize&&(ma.personFontSize=ma.systemFontSize=ma.messageFontSize=t.fontSize),t.fontWeight&&(ma.personFontWeight=ma.systemFontWeight=ma.messageFontWeight=t.fontWeight)},xa=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),va=t=>({fontFamily:t.boundaryFontFamily,fontSize:t.boundaryFontSize,fontWeight:t.boundaryFontWeight});function ka(t,e,n,r,i){if(!e[t].width)if(n)e[t].text=Zn(e[t].text,i,r),e[t].textLines=e[t].text.split(Yt.lineBreakRegex).length,e[t].width=i,e[t].height=jn(e[t].text,r);else{let n=e[t].text.split(Yt.lineBreakRegex);e[t].textLines=n.length;let i=0;e[t].height=0,e[t].width=0;for(const a of n)e[t].width=Math.max(Yn(a,r),e[t].width),i=jn(a,r),e[t].height=e[t].height+i}}const wa=function(t,e,n){e.x=n.data.startx,e.y=n.data.starty,e.width=n.data.stopx-n.data.startx,e.height=n.data.stopy-n.data.starty,e.label.y=ma.c4ShapeMargin-35;let r=e.wrap&&ma.wrap,i=va(ma);i.fontSize=i.fontSize+2,i.fontWeight="bold",ka("label",e,r,i,Yn(e.label.text,i)),ra(t,e,ma)},Ea=function(t,e,n,r){let i=0;for(const a of r){i=0;const r=n[a];let s=xa(ma,r.typeC4Shape.text);switch(s.fontSize=s.fontSize-2,r.typeC4Shape.width=Yn("<<"+r.typeC4Shape.text+">>",s),r.typeC4Shape.height=s.fontSize+2,r.typeC4Shape.Y=ma.c4ShapePadding,i=r.typeC4Shape.Y+r.typeC4Shape.height-4,r.image={width:0,height:0,Y:0},r.typeC4Shape.text){case"person":case"external_person":r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height}r.sprite&&(r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height);let o=r.wrap&&ma.wrap,c=ma.width-2*ma.c4ShapePadding,l=xa(ma,r.typeC4Shape.text);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",r,o,l,c),r.label.Y=i+8,i=r.label.Y+r.label.height,r.type&&""!==r.type.text){r.type.text="["+r.type.text+"]",ka("type",r,o,xa(ma,r.typeC4Shape.text),c),r.type.Y=i+5,i=r.type.Y+r.type.height}else if(r.techn&&""!==r.techn.text){r.techn.text="["+r.techn.text+"]",ka("techn",r,o,xa(ma,r.techn.text),c),r.techn.Y=i+5,i=r.techn.Y+r.techn.height}let h=i,u=r.label.width;if(r.descr&&""!==r.descr.text){ka("descr",r,o,xa(ma,r.typeC4Shape.text),c),r.descr.Y=i+20,i=r.descr.Y+r.descr.height,u=Math.max(r.label.width,r.descr.width),h=i-5*r.descr.textLines}u+=ma.c4ShapePadding,r.width=Math.max(r.width||ma.width,u,ma.width),r.height=Math.max(r.height||ma.height,h,ma.height),r.margin=r.margin||ma.c4ShapeMargin,t.insert(r),ia(e,r,ma)}t.bumpLastMargin(ma.c4ShapeMargin)};class Ca{constructor(t,e){this.x=t,this.y=e}}let Ta=function(t,e){let n=t.x,r=t.y,i=e.x,a=e.y,s=n+t.width/2,o=r+t.height/2,c=Math.abs(n-i),l=Math.abs(r-a),h=l/c,u=t.height/t.width,d=null;return r==a&&n<i?d=new Ca(n+t.width,o):r==a&&n>i?d=new Ca(n,o):n==i&&r<a?d=new Ca(s,r+t.height):n==i&&r>a&&(d=new Ca(s,r)),n>i&&r<a?d=u>=h?new Ca(n,o+h*t.width/2):new Ca(s-c/l*t.height/2,r+t.height):n<i&&r<a?d=u>=h?new Ca(n+t.width,o+h*t.width/2):new Ca(s+c/l*t.height/2,r+t.height):n<i&&r>a?d=u>=h?new Ca(n+t.width,o-h*t.width/2):new Ca(s+t.height/2*c/l,r):n>i&&r>a&&(d=u>=h?new Ca(n,o-t.width/2*h):new Ca(s-t.height/2*c/l,r)),d},Sa=function(t,e){let n={x:0,y:0};n.x=e.x+e.width/2,n.y=e.y+e.height/2;let r=Ta(t,n);return n.x=t.x+t.width/2,n.y=t.y+t.height/2,{startPoint:r,endPoint:Ta(e,n)}};function Aa(t,e,n,r,i){let a=new ba(i);a.data.widthLimit=n.data.widthLimit/Math.min(ya,r.length);for(let[s,o]of r.entries()){let r=0;o.image={width:0,height:0,Y:0},o.sprite&&(o.image.width=48,o.image.height=48,o.image.Y=r,r=o.image.Y+o.image.height);let c=o.wrap&&ma.wrap,l=va(ma);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",o,c,l,a.data.widthLimit),o.label.Y=r+8,r=o.label.Y+o.label.height,o.type&&""!==o.type.text){o.type.text="["+o.type.text+"]",ka("type",o,c,va(ma),a.data.widthLimit),o.type.Y=r+5,r=o.type.Y+o.type.height}if(o.descr&&""!==o.descr.text){let t=va(ma);t.fontSize=t.fontSize-2,ka("descr",o,c,t,a.data.widthLimit),o.descr.Y=r+20,r=o.descr.Y+o.descr.height}if(0==s||s%ya==0){let t=n.data.startx+ma.diagramMarginX,e=n.data.stopy+ma.diagramMarginY+r;a.setData(t,t,e,e)}else{let t=a.data.stopx!==a.data.startx?a.data.stopx+ma.diagramMarginX:a.data.startx,e=a.data.starty;a.setData(t,t,e,e)}a.name=o.alias;let h=i.db.getC4ShapeArray(o.alias),u=i.db.getC4ShapeKeys(o.alias);u.length>0&&Ea(a,t,h,u),e=o.alias;let d=i.db.getBoundarys(e);d.length>0&&Aa(t,e,a,d,i),"global"!==o.alias&&wa(t,o,a),n.data.stopy=Math.max(a.data.stopy+ma.c4ShapeMargin,n.data.stopy),n.data.stopx=Math.max(a.data.stopx+ma.c4ShapeMargin,n.data.stopx),pa=Math.max(pa,n.data.stopx),fa=Math.max(fa,n.data.stopy)}}const La={drawPersonOrSystemArray:Ea,drawBoundary:wa,setConf:_a,draw:function(t,e,n,r){ma=ar().c4;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body");let c=r.db;r.db.setWrap(ma.wrap),ga=c.getC4ShapeInRow(),ya=c.getC4BoundaryInRow(),Nt.debug(`C:${JSON.stringify(ma,null,2)}`);const l="sandbox"===i?s.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`);ua(l),ha(l),da(l);let h=new ba(r);h.setData(ma.diagramMarginX,ma.diagramMarginX,ma.diagramMarginY,ma.diagramMarginY),h.data.widthLimit=screen.availWidth,pa=ma.diagramMarginX,fa=ma.diagramMarginY;const u=r.db.getTitle();Aa(l,"",h,r.db.getBoundarys(""),r),sa(l),oa(l),la(l),ca(l),function(t,e,n,r){let i=0;for(let s of e){i+=1;let t=s.wrap&&ma.wrap,e={fontFamily:(a=ma).messageFontFamily,fontSize:a.messageFontSize,fontWeight:a.messageFontWeight};"C4Dynamic"===r.db.getC4Type()&&(s.label.text=i+": "+s.label.text);let o=Yn(s.label.text,e);ka("label",s,t,e,o),s.techn&&""!==s.techn.text&&(o=Yn(s.techn.text,e),ka("techn",s,t,e,o)),s.descr&&""!==s.descr.text&&(o=Yn(s.descr.text,e),ka("descr",s,t,e,o));let c=n(s.from),l=n(s.to),h=Sa(c,l);s.startPoint=h.startPoint,s.endPoint=h.endPoint}var a;aa(t,e,ma)}(l,r.db.getRels(),r.db.getC4Shape,r),h.data.stopx=pa,h.data.stopy=fa;const d=h.data;let p=d.stopy-d.starty+2*ma.diagramMarginY;const f=d.stopx-d.startx+2*ma.diagramMarginX;u&&l.append("text").text(u).attr("x",(d.stopx-d.startx)/2-4*ma.diagramMarginX).attr("y",d.starty+ma.diagramMarginY),dr(l,p,f,ma.useMaxWidth);const g=u?60:0;l.attr("viewBox",d.startx-ma.diagramMarginX+" -"+(ma.diagramMarginY+g)+" "+f+" "+(p+g)),Nt.debug("models:",d)}};var Ba=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,7],i=[1,8],a=[1,9],s=[1,10],o=[1,13],c=[1,12],l=[1,16,25],h=[1,20],u=[1,32],d=[1,33],p=[1,34],f=[1,36],g=[1,39],y=[1,37],m=[1,38],b=[1,44],_=[1,45],x=[1,40],v=[1,41],k=[1,42],w=[1,43],E=[1,48],C=[1,49],T=[1,50],S=[1,51],A=[16,25],L=[1,65],B=[1,66],N=[1,67],D=[1,68],O=[1,69],M=[1,70],I=[1,71],F=[1,80],$=[16,25,32,45,46,54,60,61,62,63,64,65,66,71,73],R=[16,25,30,32,45,46,50,54,60,61,62,63,64,65,66,71,73,88,89,90,91],Z=[5,8,9,10,11,16,19,23,25],P=[54,88,89,90,91],j=[54,65,66,88,89,90,91],Y=[54,60,61,62,63,64,88,89,90,91],z=[16,25,32],U=[1,107],W={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,statments:5,direction:6,directive:7,direction_tb:8,direction_bt:9,direction_rl:10,direction_lr:11,graphConfig:12,openDirective:13,typeDirective:14,closeDirective:15,NEWLINE:16,":":17,argDirective:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,CLASS_DIAGRAM:23,statements:24,EOF:25,statement:26,className:27,alphaNumToken:28,classLiteralName:29,GENERICTYPE:30,relationStatement:31,LABEL:32,classStatement:33,methodStatement:34,annotationStatement:35,clickStatement:36,cssClassStatement:37,noteStatement:38,acc_title:39,acc_title_value:40,acc_descr:41,acc_descr_value:42,acc_descr_multiline_value:43,CLASS:44,STYLE_SEPARATOR:45,STRUCT_START:46,members:47,STRUCT_STOP:48,ANNOTATION_START:49,ANNOTATION_END:50,MEMBER:51,SEPARATOR:52,relation:53,STR:54,NOTE_FOR:55,noteText:56,NOTE:57,relationType:58,lineType:59,AGGREGATION:60,EXTENSION:61,COMPOSITION:62,DEPENDENCY:63,LOLLIPOP:64,LINE:65,DOTTED_LINE:66,CALLBACK:67,LINK:68,LINK_TARGET:69,CLICK:70,CALLBACK_NAME:71,CALLBACK_ARGS:72,HREF:73,CSSCLASS:74,commentToken:75,textToken:76,graphCodeTokens:77,textNoTagsToken:78,TAGSTART:79,TAGEND:80,"==":81,"--":82,PCT:83,DEFAULT:84,SPACE:85,MINUS:86,keywords:87,UNICODE_TEXT:88,NUM:89,ALPHA:90,BQUOTE_STR:91,$accept:0,$end:1},terminals_:{2:"error",5:"statments",8:"direction_tb",9:"direction_bt",10:"direction_rl",11:"direction_lr",16:"NEWLINE",17:":",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",23:"CLASS_DIAGRAM",25:"EOF",30:"GENERICTYPE",32:"LABEL",39:"acc_title",40:"acc_title_value",41:"acc_descr",42:"acc_descr_value",43:"acc_descr_multiline_value",44:"CLASS",45:"STYLE_SEPARATOR",46:"STRUCT_START",48:"STRUCT_STOP",49:"ANNOTATION_START",50:"ANNOTATION_END",51:"MEMBER",52:"SEPARATOR",54:"STR",55:"NOTE_FOR",57:"NOTE",60:"AGGREGATION",61:"EXTENSION",62:"COMPOSITION",63:"DEPENDENCY",64:"LOLLIPOP",65:"LINE",66:"DOTTED_LINE",67:"CALLBACK",68:"LINK",69:"LINK_TARGET",70:"CLICK",71:"CALLBACK_NAME",72:"CALLBACK_ARGS",73:"HREF",74:"CSSCLASS",77:"graphCodeTokens",79:"TAGSTART",80:"TAGEND",81:"==",82:"--",83:"PCT",84:"DEFAULT",85:"SPACE",86:"MINUS",87:"keywords",88:"UNICODE_TEXT",89:"NUM",90:"ALPHA",91:"BQUOTE_STR"},productions_:[0,[3,1],[3,1],[3,1],[3,2],[6,1],[6,1],[6,1],[6,1],[4,1],[7,4],[7,6],[13,1],[14,1],[18,1],[15,1],[12,4],[24,1],[24,2],[24,3],[27,1],[27,1],[27,2],[27,2],[27,2],[26,1],[26,2],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,2],[26,2],[26,1],[33,2],[33,4],[33,5],[33,7],[35,4],[47,1],[47,2],[34,1],[34,2],[34,1],[34,1],[31,3],[31,4],[31,4],[31,5],[38,3],[38,2],[53,3],[53,2],[53,2],[53,1],[58,1],[58,1],[58,1],[58,1],[58,1],[59,1],[59,1],[36,3],[36,4],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[37,3],[75,1],[75,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[78,1],[78,1],[78,1],[78,1],[28,1],[28,1],[28,1],[29,1],[56,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.setDirection("TB");break;case 6:r.setDirection("BT");break;case 7:r.setDirection("RL");break;case 8:r.setDirection("LR");break;case 12:r.parseDirective("%%{","open_directive");break;case 13:r.parseDirective(a[o],"type_directive");break;case 14:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 15:r.parseDirective("}%%","close_directive","class");break;case 20:case 21:this.$=a[o];break;case 22:this.$=a[o-1]+a[o];break;case 23:case 24:this.$=a[o-1]+"~"+a[o];break;case 25:r.addRelation(a[o]);break;case 26:a[o-1].title=r.cleanupLabel(a[o]),r.addRelation(a[o-1]);break;case 35:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 36:case 37:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 38:r.addClass(a[o]);break;case 39:r.addClass(a[o-2]),r.setCssClass(a[o-2],a[o]);break;case 40:r.addClass(a[o-3]),r.addMembers(a[o-3],a[o-1]);break;case 41:r.addClass(a[o-5]),r.setCssClass(a[o-5],a[o-3]),r.addMembers(a[o-5],a[o-1]);break;case 42:r.addAnnotation(a[o],a[o-2]);break;case 43:this.$=[a[o]];break;case 44:a[o].push(a[o-1]),this.$=a[o];break;case 45:case 47:case 48:break;case 46:r.addMember(a[o-1],r.cleanupLabel(a[o]));break;case 49:this.$={id1:a[o-2],id2:a[o],relation:a[o-1],relationTitle1:"none",relationTitle2:"none"};break;case 50:this.$={id1:a[o-3],id2:a[o],relation:a[o-1],relationTitle1:a[o-2],relationTitle2:"none"};break;case 51:this.$={id1:a[o-3],id2:a[o],relation:a[o-2],relationTitle1:"none",relationTitle2:a[o-1]};break;case 52:this.$={id1:a[o-4],id2:a[o],relation:a[o-2],relationTitle1:a[o-3],relationTitle2:a[o-1]};break;case 53:r.addNote(a[o],a[o-1]);break;case 54:r.addNote(a[o]);break;case 55:this.$={type1:a[o-2],type2:a[o],lineType:a[o-1]};break;case 56:this.$={type1:"none",type2:a[o],lineType:a[o-1]};break;case 57:this.$={type1:a[o-1],type2:"none",lineType:a[o]};break;case 58:this.$={type1:"none",type2:"none",lineType:a[o]};break;case 59:this.$=r.relationType.AGGREGATION;break;case 60:this.$=r.relationType.EXTENSION;break;case 61:this.$=r.relationType.COMPOSITION;break;case 62:this.$=r.relationType.DEPENDENCY;break;case 63:this.$=r.relationType.LOLLIPOP;break;case 64:this.$=r.lineType.LINE;break;case 65:this.$=r.lineType.DOTTED_LINE;break;case 66:case 72:this.$=a[o-2],r.setClickEvent(a[o-1],a[o]);break;case 67:case 73:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 68:case 76:this.$=a[o-2],r.setLink(a[o-1],a[o]);break;case 69:case 77:this.$=a[o-3],r.setLink(a[o-2],a[o-1],a[o]);break;case 70:case 78:this.$=a[o-3],r.setLink(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 71:case 79:this.$=a[o-4],r.setLink(a[o-3],a[o-2],a[o]),r.setTooltip(a[o-3],a[o-1]);break;case 74:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 75:this.$=a[o-4],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setTooltip(a[o-3],a[o]);break;case 80:r.setCssClass(a[o-1],a[o])}},table:[{3:1,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[3]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{3:14,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[2,9]},e(l,[2,5]),e(l,[2,6]),e(l,[2,7]),e(l,[2,8]),{14:15,20:[1,16]},{16:[1,17]},{20:[2,12]},{1:[2,4]},{15:18,17:[1,19],22:h},e([17,22],[2,13]),{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:21,26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},{16:[1,52]},{18:53,21:[1,54]},{16:[2,15]},{25:[1,55]},{16:[1,56],25:[2,17]},e(A,[2,25],{32:[1,57]}),e(A,[2,27]),e(A,[2,28]),e(A,[2,29]),e(A,[2,30]),e(A,[2,31]),e(A,[2,32]),e(A,[2,33]),e(A,[2,34]),{40:[1,58]},{42:[1,59]},e(A,[2,37]),e(A,[2,45],{53:60,58:63,59:64,32:[1,62],54:[1,61],60:L,61:B,62:N,63:D,64:O,65:M,66:I}),{27:72,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,47]),e(A,[2,48]),{28:73,88:E,89:C,90:T},{27:74,28:46,29:47,88:E,89:C,90:T,91:S},{27:75,28:46,29:47,88:E,89:C,90:T,91:S},{27:76,28:46,29:47,88:E,89:C,90:T,91:S},{54:[1,77]},{27:78,28:46,29:47,88:E,89:C,90:T,91:S},{54:F,56:79},e($,[2,20],{28:46,29:47,27:81,30:[1,82],88:E,89:C,90:T,91:S}),e($,[2,21],{30:[1,83]}),e(R,[2,94]),e(R,[2,95]),e(R,[2,96]),e([16,25,30,32,45,46,54,60,61,62,63,64,65,66,71,73],[2,97]),e(Z,[2,10]),{15:84,22:h},{22:[2,14]},{1:[2,16]},{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:85,25:[2,18],26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},e(A,[2,26]),e(A,[2,35]),e(A,[2,36]),{27:86,28:46,29:47,54:[1,87],88:E,89:C,90:T,91:S},{53:88,58:63,59:64,60:L,61:B,62:N,63:D,64:O,65:M,66:I},e(A,[2,46]),{59:89,65:M,66:I},e(P,[2,58],{58:90,60:L,61:B,62:N,63:D,64:O}),e(j,[2,59]),e(j,[2,60]),e(j,[2,61]),e(j,[2,62]),e(j,[2,63]),e(Y,[2,64]),e(Y,[2,65]),e(A,[2,38],{45:[1,91],46:[1,92]}),{50:[1,93]},{54:[1,94]},{54:[1,95]},{71:[1,96],73:[1,97]},{28:98,88:E,89:C,90:T},{54:F,56:99},e(A,[2,54]),e(A,[2,98]),e($,[2,22]),e($,[2,23]),e($,[2,24]),{16:[1,100]},{25:[2,19]},e(z,[2,49]),{27:101,28:46,29:47,88:E,89:C,90:T,91:S},{27:102,28:46,29:47,54:[1,103],88:E,89:C,90:T,91:S},e(P,[2,57],{58:104,60:L,61:B,62:N,63:D,64:O}),e(P,[2,56]),{28:105,88:E,89:C,90:T},{47:106,51:U},{27:108,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,66],{54:[1,109]}),e(A,[2,68],{54:[1,111],69:[1,110]}),e(A,[2,72],{54:[1,112],72:[1,113]}),e(A,[2,76],{54:[1,115],69:[1,114]}),e(A,[2,80]),e(A,[2,53]),e(Z,[2,11]),e(z,[2,51]),e(z,[2,50]),{27:116,28:46,29:47,88:E,89:C,90:T,91:S},e(P,[2,55]),e(A,[2,39],{46:[1,117]}),{48:[1,118]},{47:119,48:[2,43],51:U},e(A,[2,42]),e(A,[2,67]),e(A,[2,69]),e(A,[2,70],{69:[1,120]}),e(A,[2,73]),e(A,[2,74],{54:[1,121]}),e(A,[2,77]),e(A,[2,78],{69:[1,122]}),e(z,[2,52]),{47:123,51:U},e(A,[2,40]),{48:[2,44]},e(A,[2,71]),e(A,[2,75]),e(A,[2,79]),{48:[1,124]},e(A,[2,41])],defaultActions:{2:[2,1],3:[2,2],4:[2,3],6:[2,9],13:[2,12],14:[2,4],20:[2,15],54:[2,14],55:[2,16],85:[2,19],119:[2,44]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},q=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return 8;case 2:return 9;case 3:return 10;case 4:return 11;case 5:return this.begin("type_directive"),20;case 6:return this.popState(),this.begin("arg_directive"),17;case 7:return this.popState(),this.popState(),22;case 8:return 21;case 9:case 10:case 19:case 27:break;case 11:return this.begin("acc_title"),39;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),41;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 39:case 42:case 45:case 48:case 51:case 54:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:return 16;case 20:case 21:return 23;case 22:return this.begin("struct"),46;case 23:return"EDGE_STATE";case 24:return"EOF_IN_STRUCT";case 25:return"OPEN_IN_STRUCT";case 26:return this.popState(),48;case 28:return"MEMBER";case 29:return 44;case 30:return 74;case 31:return 67;case 32:return 68;case 33:return 70;case 34:return 55;case 35:return 57;case 36:return 49;case 37:return 50;case 38:this.begin("generic");break;case 40:return"GENERICTYPE";case 41:this.begin("string");break;case 43:return"STR";case 44:this.begin("bqstring");break;case 46:return"BQUOTE_STR";case 47:this.begin("href");break;case 49:return 73;case 50:this.begin("callback_name");break;case 52:this.popState(),this.begin("callback_args");break;case 53:return 71;case 55:return 72;case 56:case 57:case 58:case 59:return 69;case 60:case 61:return 61;case 62:case 63:return 63;case 64:return 62;case 65:return 60;case 66:return 64;case 67:return 65;case 68:return 66;case 69:return 32;case 70:return 45;case 71:return 86;case 72:return"DOT";case 73:return"PLUS";case 74:return 83;case 75:case 76:return"EQUALS";case 77:return 90;case 78:return"PUNCTUATION";case 79:return 89;case 80:return 88;case 81:return 85;case 82:return 25}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:classDiagram-v2\b)/,/^(?:classDiagram\b)/,/^(?:[{])/,/^(?:\[\*\])/,/^(?:$)/,/^(?:[{])/,/^(?:[}])/,/^(?:[\n])/,/^(?:[^{}\n]*)/,/^(?:class\b)/,/^(?:cssClass\b)/,/^(?:callback\b)/,/^(?:link\b)/,/^(?:click\b)/,/^(?:note for\b)/,/^(?:note\b)/,/^(?:<<)/,/^(?:>>)/,/^(?:[~])/,/^(?:[~])/,/^(?:[^~]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[`])/,/^(?:[`])/,/^(?:[^`]+)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:\s*<\|)/,/^(?:\s*\|>)/,/^(?:\s*>)/,/^(?:\s*<)/,/^(?:\s*\*)/,/^(?:\s*o\b)/,/^(?:\s*\(\))/,/^(?:--)/,/^(?:\.\.)/,/^(?::{1}[^:\n;]+)/,/^(?::{3})/,/^(?:-)/,/^(?:\.)/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:\w+)/,/^(?:[!"#$%&'*+,-.`?\\/])/,/^(?:[0-9]+)/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\s)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},callback_args:{rules:[54,55],inclusive:!1},callback_name:{rules:[51,52,53],inclusive:!1},href:{rules:[48,49],inclusive:!1},struct:{rules:[23,24,25,26,27,28],inclusive:!1},generic:{rules:[39,40],inclusive:!1},bqstring:{rules:[45,46],inclusive:!1},string:{rules:[42,43],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,29,30,31,32,33,34,35,36,37,38,41,44,47,50,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],inclusive:!0}}},t);function H(){this.yy={}}return W.lexer=q,H.prototype=W,W.Parser=H,new H}();Ba.parser=Ba;const Na=Ba,Da=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*classDiagram/)},Oa=(t,e)=>{var n;return null!==t.match(/^\s*classDiagram/)&&"dagre-wrapper"===(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)||null!==t.match(/^\s*classDiagram-v2/)},Ma="classid-";let Ia=[],Fa={},$a=[],Ra=0,Za=[];const Pa=t=>Yt.sanitizeText(t,ar()),ja=function(t){let e="",n=t;if(t.indexOf("~")>0){let r=t.split("~");n=r[0],e=Yt.sanitizeText(r[1],ar())}return{className:n,type:e}},Ya=function(t){let e=ja(t);void 0===Fa[e.className]&&(Fa[e.className]={id:e.className,type:e.type,cssClasses:[],methods:[],members:[],annotations:[],domId:Ma+e.className+"-"+Ra},Ra++)},za=function(t){const e=Object.keys(Fa);for(const n of e)if(Fa[n].id===t)return Fa[n].domId},Ua=function(t,e){const n=ja(t).className,r=Fa[n];if("string"==typeof e){const t=e.trim();t.startsWith("<<")&&t.endsWith(">>")?r.annotations.push(Pa(t.substring(2,t.length-2))):t.indexOf(")")>0?r.methods.push(Pa(t)):t&&r.members.push(Pa(t))}},Wa=function(t,e){t.split(",").forEach((function(t){let n=t;t[0].match(/\d/)&&(n=Ma+n),void 0!==Fa[n]&&Fa[n].cssClasses.push(e)}))},qa=function(t,e,n){const r=ar();let i=t,a=za(i);if("loose"===r.securityLevel&&void 0!==e&&void 0!==Fa[i]){let t=[];if("string"==typeof n){t=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let e=0;e<t.length;e++){let n=t[e].trim();'"'===n.charAt(0)&&'"'===n.charAt(n.length-1)&&(n=n.substr(1,n.length-2)),t[e]=n}}0===t.length&&t.push(a),Za.push((function(){const n=document.querySelector(`[id="${a}"]`);null!==n&&n.addEventListener("click",(function(){Gn.runFunc(e,...t)}),!1)}))}},Ha=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Za.push(Ha);let Va="TB";const Ga={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,getConfig:()=>ar().class,addClass:Ya,bindFunctions:function(t){Za.forEach((function(e){e(t)}))},clear:function(){Ia=[],Fa={},$a=[],Za=[],Za.push(Ha),Dr()},getClass:function(t){return Fa[t]},getClasses:function(){return Fa},getNotes:function(){return $a},addAnnotation:function(t,e){const n=ja(t).className;Fa[n].annotations.push(e)},addNote:function(t,e){const n={id:`note${$a.length}`,class:e,text:t};$a.push(n)},getRelations:function(){return Ia},addRelation:function(t){Nt.debug("Adding relation: "+JSON.stringify(t)),Ya(t.id1),Ya(t.id2),t.id1=ja(t.id1).className,t.id2=ja(t.id2).className,t.relationTitle1=Yt.sanitizeText(t.relationTitle1.trim(),ar()),t.relationTitle2=Yt.sanitizeText(t.relationTitle2.trim(),ar()),Ia.push(t)},getDirection:()=>Va,setDirection:t=>{Va=t},addMember:Ua,addMembers:function(t,e){Array.isArray(e)&&(e.reverse(),e.forEach((e=>Ua(t,e))))},cleanupLabel:function(t){return":"===t.substring(0,1)?Yt.sanitizeText(t.substr(1).trim(),ar()):Pa(t.trim())},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3,LOLLIPOP:4},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){qa(t,e,n),Fa[t].haveCallback=!0})),Wa(t,"clickable")},setCssClass:Wa,setLink:function(t,e,n){const r=ar();t.split(",").forEach((function(t){let i=t;t[0].match(/\d/)&&(i=Ma+i),void 0!==Fa[i]&&(Fa[i].link=Gn.formatUrl(e,r),"sandbox"===r.securityLevel?Fa[i].linkTarget="_top":Fa[i].linkTarget="string"==typeof n?Pa(n):"_blank")})),Wa(t,"clickable")},getTooltip:function(t){return Fa[t].tooltip},setTooltip:function(t,e){const n=ar();t.split(",").forEach((function(t){void 0!==e&&(Fa[t].tooltip=Yt.sanitizeText(e,n))}))},lookUpDomId:za,setDiagramTitle:$r,getDiagramTitle:Rr};let Xa=0;const Ka=function(t){let e=t.match(/^([#+~-])?(\w+)(~\w+~|\[])?\s+(\w+) *([$*])?$/),n=t.match(/^([#+|~-])?(\w+) *\( *(.*)\) *([$*])? *(\w*[[\]|~]*\s*\w*~?)$/);return e&&!n?Qa(e):n?Ja(n):ts(t)},Qa=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"",o=t[5]?t[5].trim():"";n=r+i+a+" "+s,e=ns(o)}catch(r){n=t}return{displayText:n,cssStyle:e}},Ja=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"";n=r+i+"("+a+")"+(t[5]?" : "+jt(t[5]).trim():""),e=ns(s)}catch(r){n=t}return{displayText:n,cssStyle:e}},ts=function(t){let e="",n="",r="",i=t.indexOf("("),a=t.indexOf(")");if(i>1&&a>i&&a<=t.length){let s="",o="",c=t.substring(0,1);c.match(/\w/)?o=t.substring(0,i).trim():(c.match(/[#+~-]/)&&(s=c),o=t.substring(1,i).trim());const l=t.substring(i+1,a);t.substring(a+1,1),n=ns(t.substring(a+1,a+2)),e=s+o+"("+jt(l.trim())+")",a<t.length&&(r=t.substring(a+2).trim(),""!==r&&(r=" : "+jt(r),e+=r))}else e=jt(t);return{displayText:e,cssStyle:n}},es=function(t,e,n,r){let i=Ka(e);const a=t.append("tspan").attr("x",r.padding).text(i.displayText);""!==i.cssStyle&&a.attr("style",i.cssStyle),n||a.attr("dy",r.textHeight)},ns=function(t){switch(t){case"*":return"font-style:italic;";case"$":return"text-decoration:underline;";default:return""}},rs=function(t,e,n,r){Nt.debug("Rendering class ",e,n);const i=e.id,a={id:i,label:e.id,width:0,height:0},s=t.append("g").attr("id",r.db.lookUpDomId(i)).attr("class","classGroup");let o;o=e.link?s.append("svg:a").attr("xlink:href",e.link).attr("target",e.linkTarget).append("text").attr("y",n.textHeight+n.padding).attr("x",0):s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);let c=!0;e.annotations.forEach((function(t){const e=o.append("tspan").text("\xab"+t+"\xbb");c||e.attr("dy",n.textHeight),c=!1}));let l=e.id;void 0!==e.type&&""!==e.type&&(l+="<"+e.type+">");const h=o.append("tspan").text(l).attr("class","title");c||h.attr("dy",n.textHeight);const u=o.node().getBBox().height,d=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin/2).attr("y2",n.padding+u+n.dividerMargin/2),p=s.append("text").attr("x",n.padding).attr("y",u+n.dividerMargin+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.members.forEach((function(t){es(p,t,c,n),c=!1}));const f=p.node().getBBox(),g=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin+f.height).attr("y2",n.padding+u+n.dividerMargin+f.height),y=s.append("text").attr("x",n.padding).attr("y",u+2*n.dividerMargin+f.height+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.methods.forEach((function(t){es(y,t,c,n),c=!1}));const m=s.node().getBBox();var b=" ";e.cssClasses.length>0&&(b+=e.cssClasses.join(" "));const _=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",m.width+2*n.padding).attr("height",m.height+n.padding+.5*n.dividerMargin).attr("class",b).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(_-t.getBBox().width)/2)})),e.tooltip&&o.insert("title").text(e.tooltip),d.attr("x2",_),g.attr("x2",_),a.width=_,a.height=m.height+n.padding+.5*n.dividerMargin,a},is=function(t,e,n,r,i){const a=function(t){switch(t){case i.db.relationType.AGGREGATION:return"aggregation";case i.db.relationType.EXTENSION:return"extension";case i.db.relationType.COMPOSITION:return"composition";case i.db.relationType.DEPENDENCY:return"dependency";case i.db.relationType.LOLLIPOP:return"lollipop"}};e.points=e.points.filter((t=>!Number.isNaN(t.y)));const s=e.points,c=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),l=t.append("path").attr("d",c(s)).attr("id","edge"+Xa).attr("class","relation");let h,u,d="";r.arrowMarkerAbsolute&&(d=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,d=d.replace(/\(/g,"\\("),d=d.replace(/\)/g,"\\)")),1==n.relation.lineType&&l.attr("class","relation dashed-line"),10==n.relation.lineType&&l.attr("class","relation dotted-line"),"none"!==n.relation.type1&&l.attr("marker-start","url("+d+"#"+a(n.relation.type1)+"Start)"),"none"!==n.relation.type2&&l.attr("marker-end","url("+d+"#"+a(n.relation.type2)+"End)");const p=e.points.length;let f,g,y,m,b=Gn.calcLabelPosition(e.points);if(h=b.x,u=b.y,p%2!=0&&p>1){let t=Gn.calcCardinalityPosition("none"!==n.relation.type1,e.points,e.points[0]),r=Gn.calcCardinalityPosition("none"!==n.relation.type2,e.points,e.points[p-1]);Nt.debug("cardinality_1_point "+JSON.stringify(t)),Nt.debug("cardinality_2_point "+JSON.stringify(r)),f=t.x,g=t.y,y=r.x,m=r.y}if(void 0!==n.title){const e=t.append("g").attr("class","classLabel"),i=e.append("text").attr("class","label").attr("x",h).attr("y",u).attr("fill","red").attr("text-anchor","middle").text(n.title);window.label=i;const a=i.node().getBBox();e.insert("rect",":first-child").attr("class","box").attr("x",a.x-r.padding/2).attr("y",a.y-r.padding/2).attr("width",a.width+r.padding).attr("height",a.height+r.padding)}if(Nt.info("Rendering relation "+JSON.stringify(n)),void 0!==n.relationTitle1&&"none"!==n.relationTitle1){t.append("g").attr("class","cardinality").append("text").attr("class","type1").attr("x",f).attr("y",g).attr("fill","black").attr("font-size","6").text(n.relationTitle1)}if(void 0!==n.relationTitle2&&"none"!==n.relationTitle2){t.append("g").attr("class","cardinality").append("text").attr("class","type2").attr("x",y).attr("y",m).attr("fill","black").attr("font-size","6").text(n.relationTitle2)}Xa++},as=function(t,e,n,r){Nt.debug("Rendering note ",e,n);const i=e.id,a={id:i,text:e.text,width:0,height:0},s=t.append("g").attr("id",i).attr("class","classGroup");let o=s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);const c=JSON.parse(`"${e.text}"`).split("\n");c.forEach((function(t){Nt.debug(`Adding line: ${t}`),o.append("tspan").text(t).attr("class","title").attr("dy",n.textHeight)}));const l=s.node().getBBox(),h=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",l.width+2*n.padding).attr("height",l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(h-t.getBBox().width)/2)})),a.width=h,a.height=l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin,a};let ss={};const os=function(t){const e=Object.entries(ss).find((e=>e[1].label===t));if(e)return e[0]},cs={draw:function(t,e,n,r){const i=ar().class;ss={},Nt.info("Rendering diagram "+t);const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l=c.select(`[id='${e}']`);var h;(h=l).append("defs").append("marker").attr("id","extensionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),h.append("defs").append("marker").attr("id","extensionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z"),h.append("defs").append("marker").attr("id","compositionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","compositionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z");const u=new ht.k({multigraph:!0});u.setGraph({isMultiGraph:!0}),u.setDefaultEdgeLabel((function(){return{}}));const d=r.db.getClasses(),p=Object.keys(d);for(const o of p){const t=d[o],e=rs(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),Nt.info("Org height: "+e.height)}r.db.getRelations().forEach((function(t){Nt.info("tjoho"+os(t.id1)+os(t.id2)+JSON.stringify(t)),u.setEdge(os(t.id1),os(t.id2),{relation:t},t.title||"DEFAULT")}));r.db.getNotes().forEach((function(t){Nt.debug(`Adding note: ${JSON.stringify(t)}`);const e=as(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),t.class&&t.class in d&&u.setEdge(t.id,os(t.class),{relation:{id1:t.id,id2:t.class,relation:{type1:"none",type2:"none",lineType:10}}},"DEFAULT")})),(0,lt.bK)(u),u.nodes().forEach((function(t){void 0!==t&&void 0!==u.node(t)&&(Nt.debug("Node "+t+": "+JSON.stringify(u.node(t))),c.select("#"+(r.db.lookUpDomId(t)||t)).attr("transform","translate("+(u.node(t).x-u.node(t).width/2)+","+(u.node(t).y-u.node(t).height/2)+" )"))})),u.edges().forEach((function(t){void 0!==t&&void 0!==u.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(u.edge(t))),is(l,u.edge(t),u.edge(t).relation,i,r))}));const f=l.node().getBBox(),g=f.width+40,y=f.height+40;dr(l,y,g,i.useMaxWidth);const m=`${f.x-20} ${f.y-20} ${g} ${y}`;Nt.debug(`viewBox ${m}`),l.attr("viewBox",m)}},ls={extension:(t,e,n)=>{Nt.trace("Making markers for ",n),t.append("defs").append("marker").attr("id",e+"-extensionStart").attr("class","marker extension "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),t.append("defs").append("marker").attr("id",e+"-extensionEnd").attr("class","marker extension "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z")},composition:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-compositionStart").attr("class","marker composition "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-compositionEnd").attr("class","marker composition "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},aggregation:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-aggregationStart").attr("class","marker aggregation "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-aggregationEnd").attr("class","marker aggregation "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},dependency:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-dependencyStart").attr("class","marker dependency "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-dependencyEnd").attr("class","marker dependency "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},lollipop:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-lollipopStart").attr("class","marker lollipop "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("circle").attr("stroke","black").attr("fill","white").attr("cx",6).attr("cy",7).attr("r",6)},point:(t,e)=>{t.append("marker").attr("id",e+"-pointEnd").attr("class","marker "+e).attr("viewBox","0 0 12 20").attr("refX",10).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-pointStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",0).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 5 L 10 10 L 10 0 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},circle:(t,e)=>{t.append("marker").attr("id",e+"-circleEnd").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",11).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-circleStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",-1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},cross:(t,e)=>{t.append("marker").attr("id",e+"-crossEnd").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",12).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-crossStart").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",-1).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0")},barb:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-barbEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",14).attr("markerUnits","strokeWidth").attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z")}},hs=(t,e,n,r)=>{e.forEach((e=>{ls[e](t,n,r)}))};const us=(t,e,n,r)=>{let i=t||"";if("object"==typeof i&&(i=i[0]),Pt(ar().flowchart.htmlLabels)){i=i.replace(/\\n|\n/g,"<br />"),Nt.info("vertexText"+i);let t=function(t){const e=(0,o.Ys)(document.createElementNS("http://www.w3.org/2000/svg","foreignObject")),n=e.append("xhtml:div"),r=t.label,i=t.isNode?"nodeLabel":"edgeLabel";var a,s;return n.html('<span class="'+i+'" '+(t.labelStyle?'style="'+t.labelStyle+'"':"")+">"+r+"</span>"),a=n,(s=t.labelStyle)&&a.attr("style",s),n.style("display","inline-block"),n.style("white-space","nowrap"),n.attr("xmlns","http://www.w3.org/1999/xhtml"),e.node()}({isNode:r,label:Xd(i).replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`)),labelStyle:e.replace("fill:","color:")});return t}{const t=document.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",e.replace("color:","fill:"));let r=[];r="string"==typeof i?i.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(i)?i:[];for(const e of r){const r=document.createElementNS("http://www.w3.org/2000/svg","tspan");r.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),r.setAttribute("dy","1em"),r.setAttribute("x","0"),n?r.setAttribute("class","title-row"):r.setAttribute("class","row"),r.textContent=e.trim(),t.appendChild(r)}return t}},ds=(t,e,n,r)=>{let i;i=n||"node default";const a=t.insert("g").attr("class",i).attr("id",e.domId||e.id),s=a.insert("g").attr("class","label").attr("style",e.labelStyle);let c;c=void 0===e.labelText?"":"string"==typeof e.labelText?e.labelText:e.labelText[0];const l=s.node().appendChild(us(Ft(Xd(c),ar()),e.labelStyle,!1,r));let h=l.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=l.children[0],e=(0,o.Ys)(l);h=t.getBoundingClientRect(),e.attr("width",h.width),e.attr("height",h.height)}const u=e.padding/2;return s.attr("transform","translate("+-h.width/2+", "+-h.height/2+")"),{shapeSvg:a,bbox:h,halfPadding:u,label:s}},ps=(t,e)=>{const n=e.node().getBBox();t.width=n.width,t.height=n.height};function fs(t,e,n,r){return t.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","label-container").attr("transform","translate("+-e/2+","+n/2+")")}let gs={},ys={},ms={};const bs=(t,e)=>(Nt.trace("In isDecendant",e," ",t," = ",ys[e].includes(t)),!!ys[e].includes(t)),_s=(t,e,n,r)=>{Nt.warn("Copying children of ",t,"root",r,"data",e.node(t),r);const i=e.children(t)||[];t!==r&&i.push(t),Nt.warn("Copying (nodes) clusterId",t,"nodes",i),i.forEach((i=>{if(e.children(i).length>0)_s(i,e,n,r);else{const a=e.node(i);Nt.info("cp ",i," to ",r," with parent ",t),n.setNode(i,a),r!==e.parent(i)&&(Nt.warn("Setting parent",i,e.parent(i)),n.setParent(i,e.parent(i))),t!==r&&i!==t?(Nt.debug("Setting parent",i,t),n.setParent(i,t)):(Nt.info("In copy ",t,"root",r,"data",e.node(t),r),Nt.debug("Not Setting parent for node=",i,"cluster!==rootId",t!==r,"node!==clusterId",i!==t));const s=e.edges(i);Nt.debug("Copying Edges",s),s.forEach((i=>{Nt.info("Edge",i);const a=e.edge(i.v,i.w,i.name);Nt.info("Edge data",a,r);try{((t,e)=>(Nt.info("Decendants of ",e," is ",ys[e]),Nt.info("Edge is ",t),t.v!==e&&t.w!==e&&(ys[e]?ys[e].includes(t.v)||bs(t.v,e)||bs(t.w,e)||ys[e].includes(t.w):(Nt.debug("Tilt, ",e,",not in decendants"),!1))))(i,r)?(Nt.info("Copying as ",i.v,i.w,a,i.name),n.setEdge(i.v,i.w,a,i.name),Nt.info("newGraph edges ",n.edges(),n.edge(n.edges()[0]))):Nt.info("Skipping copy of edge ",i.v,"--\x3e",i.w," rootId: ",r," clusterId:",t)}catch(s){Nt.error(s)}}))}Nt.debug("Removing node",i),e.removeNode(i)}))},xs=(t,e)=>{const n=e.children(t);let r=[...n];for(const i of n)ms[i]=t,r=[...r,...xs(i,e)];return r},vs=(t,e)=>{Nt.trace("Searching",t);const n=e.children(t);if(Nt.trace("Searching children of id ",t,n),n.length<1)return Nt.trace("This is a valid node",t),t;for(const r of n){const n=vs(r,e);if(n)return Nt.trace("Found replacement for",t," => ",n),n}},ks=t=>gs[t]&&gs[t].externalConnections&&gs[t]?gs[t].id:t,ws=(t,e)=>{if(Nt.warn("extractor - ",e,ut.c(t),t.children("D")),e>10)return void Nt.error("Bailing out");let n=t.nodes(),r=!1;for(const i of n){const e=t.children(i);r=r||e.length>0}if(r){Nt.debug("Nodes = ",n,e);for(const r of n)if(Nt.debug("Extracting node",r,gs,gs[r]&&!gs[r].externalConnections,!t.parent(r),t.node(r),t.children("D")," Depth ",e),gs[r])if(!gs[r].externalConnections&&t.children(r)&&t.children(r).length>0){Nt.warn("Cluster without external connections, without a parent and with children",r,e);let n="TB"===t.graph().rankdir?"LR":"TB";gs[r]&&gs[r].clusterData&&gs[r].clusterData.dir&&(n=gs[r].clusterData.dir,Nt.warn("Fixing dir",gs[r].clusterData.dir,n));const i=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:n,nodesep:50,ranksep:50,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));Nt.warn("Old graph before copy",ut.c(t)),_s(r,t,i,r),t.setNode(r,{clusterNode:!0,id:r,clusterData:gs[r].clusterData,labelText:gs[r].labelText,graph:i}),Nt.warn("New graph after copy node: (",r,")",ut.c(i)),Nt.debug("Old graph after copy",ut.c(t))}else Nt.warn("Cluster ** ",r," **not meeting the criteria !externalConnections:",!gs[r].externalConnections," no parent: ",!t.parent(r)," children ",t.children(r)&&t.children(r).length>0,t.children("D"),e),Nt.debug(gs);else Nt.debug("Not a cluster",r,e);n=t.nodes(),Nt.warn("New list of nodes",n);for(const r of n){const n=t.node(r);Nt.warn(" Now next level",r,n),n.clusterNode&&ws(n.graph,e+1)}}else Nt.debug("Done, no node has children",t.nodes())},Es=(t,e)=>{if(0===e.length)return[];let n=Object.assign(e);return e.forEach((e=>{const r=t.children(e),i=Es(t,r);n=[...n,...i]})),n};function Cs(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}function Ts(t,e,n,r){var i,a,s,o,c,l,h,u,d,p,f,g,y;if(i=e.y-t.y,s=t.x-e.x,c=e.x*t.y-t.x*e.y,d=i*n.x+s*n.y+c,p=i*r.x+s*r.y+c,!(0!==d&&0!==p&&Ss(d,p)||(a=r.y-n.y,o=n.x-r.x,l=r.x*n.y-n.x*r.y,h=a*t.x+o*t.y+l,u=a*e.x+o*e.y+l,0!==h&&0!==u&&Ss(h,u)||0==(f=i*o-a*s))))return g=Math.abs(f/2),{x:(y=s*l-o*c)<0?(y-g)/f:(y+g)/f,y:(y=a*c-i*l)<0?(y-g)/f:(y+g)/f}}function Ss(t,e){return t*e>0}const As=(t,e)=>{var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}},Ls={node:function(t,e){return t.intersect(e)},circle:function(t,e,n){return Cs(t,e,e,n)},ellipse:Cs,polygon:function(t,e,n){var r=t.x,i=t.y,a=[],s=Number.POSITIVE_INFINITY,o=Number.POSITIVE_INFINITY;"function"==typeof e.forEach?e.forEach((function(t){s=Math.min(s,t.x),o=Math.min(o,t.y)})):(s=Math.min(s,e.x),o=Math.min(o,e.y));for(var c=r-t.width/2-s,l=i-t.height/2-o,h=0;h<e.length;h++){var u=e[h],d=e[h<e.length-1?h+1:0],p=Ts(t,n,{x:c+u.x,y:l+u.y},{x:c+d.x,y:l+d.y});p&&a.push(p)}return a.length?(a.length>1&&a.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),a[0]):t},rect:As},Bs=(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.info("Classes = ",e.classes);const a=n.insert("rect",":first-child");return a.attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},Ns=(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding+(r.height+e.padding),a=[{x:i/2,y:0},{x:i,y:-i/2},{x:i/2,y:-i},{x:0,y:-i/2}];Nt.info("Question main (Circle)");const s=fs(n,i,i,a);return s.attr("style",e.style),ps(e,s),e.intersect=function(t){return Nt.warn("Intersect called"),Ls.polygon(e,a,t)},n};function Ds(t,e,n,r){const i=[],a=t=>{i.push(t,0)},s=t=>{i.push(0,t)};e.includes("t")?(Nt.debug("add top border"),a(n)):s(n),e.includes("r")?(Nt.debug("add right border"),a(r)):s(r),e.includes("b")?(Nt.debug("add bottom border"),a(n)):s(n),e.includes("l")?(Nt.debug("add left border"),a(r)):s(r),t.attr("stroke-dasharray",i.join(" "))}const Os=(t,e,n)=>{const r=t.insert("g").attr("class","node default").attr("id",e.domId||e.id);let i=70,a=10;"LR"===n&&(i=10,a=70);const s=r.append("rect").attr("x",-1*i/2).attr("y",-1*a/2).attr("width",i).attr("height",a).attr("class","fork-join");return ps(e,s),e.height=e.height+e.padding/2,e.width=e.width+e.padding/2,e.intersect=function(t){return Ls.rect(e,t)},r},Ms={rhombus:Ns,question:Ns,rect:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.trace("Classes = ",e.classes);const a=n.insert("rect",":first-child"),s=r.width+e.padding,o=r.height+e.padding;if(a.attr("class","basic label-container").attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",s).attr("height",o),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(a,e.props.borders,s,o),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},labelRect:(t,e)=>{const{shapeSvg:n}=ds(t,e,"label",!0);Nt.trace("Classes = ",e.classes);const r=n.insert("rect",":first-child");if(r.attr("width",0).attr("height",0),n.attr("class","label edgeLabel"),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(r,e.props.borders,0,0),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,r),e.intersect=function(t){return Ls.rect(e,t)},n},rectWithTitle:(t,e)=>{let n;n=e.classes?"node "+e.classes:"node default";const r=t.insert("g").attr("class",n).attr("id",e.domId||e.id),i=r.insert("rect",":first-child"),a=r.insert("line"),s=r.insert("g").attr("class","label"),c=e.labelText.flat?e.labelText.flat():e.labelText;let l="";l="object"==typeof c?c[0]:c,Nt.info("Label text abc79",l,c,"object"==typeof c);const h=s.node().appendChild(us(l,e.labelStyle,!0,!0));let u={width:0,height:0};if(Pt(ar().flowchart.htmlLabels)){const t=h.children[0],e=(0,o.Ys)(h);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}Nt.info("Text 2",c);const d=c.slice(1,c.length);let p=h.getBBox();const f=s.node().appendChild(us(d.join?d.join("<br/>"):d,e.labelStyle,!0,!0));if(Pt(ar().flowchart.htmlLabels)){const t=f.children[0],e=(0,o.Ys)(f);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}const g=e.padding/2;return(0,o.Ys)(f).attr("transform","translate( "+(u.width>p.width?0:(p.width-u.width)/2)+", "+(p.height+g+5)+")"),(0,o.Ys)(h).attr("transform","translate( "+(u.width<p.width?0:-(p.width-u.width)/2)+", 0)"),u=s.node().getBBox(),s.attr("transform","translate("+-u.width/2+", "+(-u.height/2-g+3)+")"),i.attr("class","outer title-state").attr("x",-u.width/2-g).attr("y",-u.height/2-g).attr("width",u.width+e.padding).attr("height",u.height+e.padding),a.attr("class","divider").attr("x1",-u.width/2-g).attr("x2",u.width/2+g).attr("y1",-u.height/2-g+p.height+g).attr("y2",-u.height/2-g+p.height+g),ps(e,i),e.intersect=function(t){return Ls.rect(e,t)},r},choice:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=[{x:0,y:14},{x:14,y:0},{x:0,y:-14},{x:-14,y:0}];return n.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","state-start").attr("r",7).attr("width",28).attr("height",28),e.width=28,e.height=28,e.intersect=function(t){return Ls.circle(e,14,t)},n},circle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("circle",":first-child");return a.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("Circle main"),ps(e,a),e.intersect=function(t){return Nt.info("Circle intersect",e,r.width/2+i,t),Ls.circle(e,r.width/2+i,t)},n},doublecircle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("g",":first-child"),s=a.insert("circle"),o=a.insert("circle");return s.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i+5).attr("width",r.width+e.padding+10).attr("height",r.height+e.padding+10),o.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("DoubleCircle main"),ps(e,s),e.intersect=function(t){return Nt.info("DoubleCircle intersect",e,r.width/2+i+5,t),Ls.circle(e,r.width/2+i+5,t)},n},stadium:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=r.width+i/4+e.padding,s=n.insert("rect",":first-child").attr("style",e.style).attr("rx",i/2).attr("ry",i/2).attr("x",-a/2).attr("y",-i/2).attr("width",a).attr("height",i);return ps(e,s),e.intersect=function(t){return Ls.rect(e,t)},n},hexagon:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=i/4,s=r.width+2*a+e.padding,o=[{x:a,y:0},{x:s-a,y:0},{x:s,y:-i/2},{x:s-a,y:-i},{x:a,y:-i},{x:0,y:-i/2}],c=fs(n,s,i,o);return c.attr("style",e.style),ps(e,c),e.intersect=function(t){return Ls.polygon(e,o,t)},n},rect_left_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-a/2,y:0},{x:i,y:0},{x:i,y:-a},{x:-a/2,y:-a},{x:0,y:-a/2}];return fs(n,i,a,s).attr("style",e.style),e.width=i+a,e.height=a,e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_right:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_left:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:2*a/6,y:0},{x:i+a/6,y:0},{x:i-2*a/6,y:-a},{x:-a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i+2*a/6,y:0},{x:i-a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},inv_trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:-2*a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},rect_right_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i+a/2,y:0},{x:i,y:-a/2},{x:i+a/2,y:-a},{x:0,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},cylinder:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=i/2,s=a/(2.5+i/50),o=r.height+s+e.padding,c="M 0,"+s+" a "+a+","+s+" 0,0,0 "+i+" 0 a "+a+","+s+" 0,0,0 "+-i+" 0 l 0,"+o+" a "+a+","+s+" 0,0,0 "+i+" 0 l 0,"+-o,l=n.attr("label-offset-y",s).insert("path",":first-child").attr("style",e.style).attr("d",c).attr("transform","translate("+-i/2+","+-(o/2+s)+")");return ps(e,l),e.intersect=function(t){const n=Ls.rect(e,t),r=n.x-e.x;if(0!=a&&(Math.abs(r)<e.width/2||Math.abs(r)==e.width/2&&Math.abs(n.y-e.y)>e.height/2-s)){let i=s*s*(1-r*r/(a*a));0!=i&&(i=Math.sqrt(i)),i=s-i,t.y-e.y>0&&(i=-i),n.y+=i}return n},n},start:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child");return r.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),ps(e,r),e.intersect=function(t){return Ls.circle(e,7,t)},n},end:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child"),i=n.insert("circle",":first-child");return i.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),r.attr("class","state-end").attr("r",5).attr("width",10).attr("height",10),ps(e,i),e.intersect=function(t){return Ls.circle(e,7,t)},n},note:Bs,subroutine:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i,y:0},{x:i,y:-a},{x:0,y:-a},{x:0,y:0},{x:-8,y:0},{x:i+8,y:0},{x:i+8,y:-a},{x:-8,y:-a},{x:-8,y:0}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},fork:Os,join:Os,class_box:(t,e)=>{const n=e.padding/2;let r;r=e.classes?"node "+e.classes:"node default";const i=t.insert("g").attr("class",r).attr("id",e.domId||e.id),a=i.insert("rect",":first-child"),s=i.insert("line"),c=i.insert("line");let l=0,h=4;const u=i.insert("g").attr("class","label");let d=0;const p=e.classData.annotations&&e.classData.annotations[0],f=e.classData.annotations[0]?"\xab"+e.classData.annotations[0]+"\xbb":"",g=u.node().appendChild(us(f,e.labelStyle,!0,!0));let y=g.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=g.children[0],e=(0,o.Ys)(g);y=t.getBoundingClientRect(),e.attr("width",y.width),e.attr("height",y.height)}e.classData.annotations[0]&&(h+=y.height+4,l+=y.width);let m=e.classData.id;void 0!==e.classData.type&&""!==e.classData.type&&(ar().flowchart.htmlLabels?m+="&lt;"+e.classData.type+"&gt;":m+="<"+e.classData.type+">");const b=u.node().appendChild(us(m,e.labelStyle,!0,!0));(0,o.Ys)(b).attr("class","classTitle");let _=b.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=b.children[0],e=(0,o.Ys)(b);_=t.getBoundingClientRect(),e.attr("width",_.width),e.attr("height",_.height)}h+=_.height+4,_.width>l&&(l=_.width);const x=[];e.classData.members.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,x.push(i)})),h+=8;const v=[];if(e.classData.methods.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,v.push(i)})),h+=8,p){let t=(l-y.width)/2;(0,o.Ys)(g).attr("transform","translate( "+(-1*l/2+t)+", "+-1*h/2+")"),d=y.height+4}let k=(l-_.width)/2;return(0,o.Ys)(b).attr("transform","translate( "+(-1*l/2+k)+", "+(-1*h/2+d)+")"),d+=_.height+4,s.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,x.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d+4)+")"),d+=_.height+4})),d+=8,c.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,v.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d)+")"),d+=_.height+4})),a.attr("class","outer title-state").attr("x",-l/2-n).attr("y",-h/2-n).attr("width",l+e.padding).attr("height",h+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},i}};let Is={};const Fs=(t,e,n)=>{let r,i;if(e.link){let a;"sandbox"===ar().securityLevel?a="_top":e.linkTarget&&(a=e.linkTarget||"_blank"),r=t.insert("svg:a").attr("xlink:href",e.link).attr("target",a),i=Ms[e.shape](r,e,n)}else i=Ms[e.shape](t,e,n),r=i;return e.tooltip&&i.attr("title",e.tooltip),e.class&&i.attr("class","node default "+e.class),Is[e.id]=r,e.haveCallback&&Is[e.id].attr("class",Is[e.id].attr("class")+" clickable"),r},$s=t=>{const e=Is[t.id];Nt.trace("Transforming node",t.diff,t,"translate("+(t.x-t.width/2-5)+", "+t.width/2+")");const n=t.diff||0;return t.clusterNode?e.attr("transform","translate("+(t.x+n-t.width/2)+", "+(t.y-t.height/2-8)+")"):e.attr("transform","translate("+t.x+", "+t.y+")"),n},Rs={rect:(t,e)=>{Nt.trace("Creating subgraph rect for ",e.id,e);const n=t.insert("g").attr("class","cluster"+(e.class?" "+e.class:"")).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let s=a.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=a.children[0],e=(0,o.Ys)(a);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}const c=0*e.padding,l=c/2,h=e.width<=s.width+c?s.width+c:e.width;e.width<=s.width+c?e.diff=(s.width-e.width)/2-e.padding/2:e.diff=-e.padding/2,Nt.trace("Data ",e,JSON.stringify(e)),r.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-h/2).attr("y",e.y-e.height/2-l).attr("width",h).attr("height",e.height+c),i.attr("transform","translate("+(e.x-s.width/2)+", "+(e.y-e.height/2)+")");const u=r.node().getBBox();return e.width=u.width,e.height=u.height,e.intersect=function(t){return As(e,t)},n},roundedWithTitle:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=n.append("rect"),s=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let c=s.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=s.children[0],e=(0,o.Ys)(s);c=t.getBoundingClientRect(),e.attr("width",c.width),e.attr("height",c.height)}c=s.getBBox();const l=0*e.padding,h=l/2,u=e.width<=c.width+e.padding?c.width+e.padding:e.width;e.width<=c.width+e.padding?e.diff=(c.width+0*e.padding-e.width)/2:e.diff=-e.padding/2,r.attr("class","outer").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h).attr("width",u+l).attr("height",e.height+l),a.attr("class","inner").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h+c.height-1).attr("width",u+l).attr("height",e.height+l-c.height-3),i.attr("transform","translate("+(e.x-c.width/2)+", "+(e.y-e.height/2-e.padding/3+(Pt(ar().flowchart.htmlLabels)?5:3))+")");const d=r.node().getBBox();return e.height=d.height,e.intersect=function(t){return As(e,t)},n},noteGroup:(t,e)=>{const n=t.insert("g").attr("class","note-cluster").attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2-a).attr("width",e.width+i).attr("height",e.height+i).attr("fill","none");const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.intersect=function(t){return As(e,t)},n},divider:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("class","divider").attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2).attr("width",e.width+i).attr("height",e.height+i);const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.diff=-e.padding/2,e.intersect=function(t){return As(e,t)},n}};let Zs={};let Ps={},js={};const Ys=(t,e)=>{const n=us(e.label,e.labelStyle),r=t.insert("g").attr("class","edgeLabel"),i=r.insert("g").attr("class","label");i.node().appendChild(n);let a,s=n.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=n.children[0],e=(0,o.Ys)(n);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}if(i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),Ps[e.id]=r,e.width=s.width,e.height=s.height,e.startLabelLeft){const n=us(e.startLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startLeft=r,zs(a,e.startLabelLeft)}if(e.startLabelRight){const n=us(e.startLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=r.node().appendChild(n),i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startRight=r,zs(a,e.startLabelRight)}if(e.endLabelLeft){const n=us(e.endLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endLeft=r,zs(a,e.endLabelLeft)}if(e.endLabelRight){const n=us(e.endLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endRight=r,zs(a,e.endLabelRight)}return n};function zs(t,e){ar().flowchart.htmlLabels&&t&&(t.style.width=9*e.length+"px",t.style.height="12px")}const Us=(t,e)=>{Nt.warn("abc88 cutPathAtIntersect",t,e);let n=[],r=t[0],i=!1;return t.forEach((t=>{if(Nt.info("abc88 checking point",t,e),((t,e)=>{const n=t.x,r=t.y,i=Math.abs(e.x-n),a=Math.abs(e.y-r),s=t.width/2,o=t.height/2;return i>=s||a>=o})(e,t)||i)Nt.warn("abc88 outside",t,r),r=t,i||n.push(t);else{const a=((t,e,n)=>{Nt.warn(`intersection calc abc89:\n  outsidePoint: ${JSON.stringify(e)}\n  insidePoint : ${JSON.stringify(n)}\n  node        : x:${t.x} y:${t.y} w:${t.width} h:${t.height}`);const r=t.x,i=t.y,a=Math.abs(r-n.x),s=t.width/2;let o=n.x<e.x?s-a:s+a;const c=t.height/2,l=Math.abs(e.y-n.y),h=Math.abs(e.x-n.x);if(Math.abs(i-e.y)*s>Math.abs(r-e.x)*c){let t=n.y<e.y?e.y-c-i:i-c-e.y;o=h*t/l;const r={x:n.x<e.x?n.x+o:n.x-h+o,y:n.y<e.y?n.y+l-t:n.y-l+t};return 0===o&&(r.x=e.x,r.y=e.y),0===h&&(r.x=e.x),0===l&&(r.y=e.y),Nt.warn(`abc89 topp/bott calc, Q ${l}, q ${t}, R ${h}, r ${o}`,r),r}{o=n.x<e.x?e.x-s-r:r-s-e.x;let t=l*o/h,i=n.x<e.x?n.x+h-o:n.x-h+o,a=n.y<e.y?n.y+t:n.y-t;return Nt.warn(`sides calc abc89, Q ${l}, q ${t}, R ${h}, r ${o}`,{_x:i,_y:a}),0===o&&(i=e.x,a=e.y),0===h&&(i=e.x),0===l&&(a=e.y),{x:i,y:a}}})(e,r,t);Nt.warn("abc88 inside",t,r,a),Nt.warn("abc88 intersection",a);let s=!1;n.forEach((t=>{s=s||t.x===a.x&&t.y===a.y})),n.some((t=>t.x===a.x&&t.y===a.y))?Nt.warn("abc88 no intersect",a,n):n.push(a),i=!0}})),Nt.warn("abc88 returning points",n),n},Ws=(t,e,n,r)=>{Nt.info("Graph in recursive render: XXX",ut.c(e),r);const i=e.graph().rankdir;Nt.trace("Dir in recursive render - dir:",i);const a=t.insert("g").attr("class","root");e.nodes()?Nt.info("Recursive render XXX",e.nodes()):Nt.info("No nodes found for",e),e.edges().length>0&&Nt.trace("Recursive edges",e.edge(e.edges()[0]));const s=a.insert("g").attr("class","clusters"),c=a.insert("g").attr("class","edgePaths"),l=a.insert("g").attr("class","edgeLabels"),h=a.insert("g").attr("class","nodes");e.nodes().forEach((function(t){const a=e.node(t);if(void 0!==r){const n=JSON.parse(JSON.stringify(r.clusterData));Nt.info("Setting data for cluster XXX (",t,") ",n,r),e.setNode(r.id,n),e.parent(t)||(Nt.trace("Setting parent",t,r.id),e.setParent(t,r.id,n))}if(Nt.info("(Insert) Node XXX"+t+": "+JSON.stringify(e.node(t))),a&&a.clusterNode){Nt.info("Cluster identified",t,a.width,e.node(t));const r=Ws(h,a.graph,n,e.node(t)),i=r.elem;ps(a,i),a.diff=r.diff||0,Nt.info("Node bounds (abc123)",t,a,a.width,a.x,a.y),((t,e)=>{Is[e.id]=t})(i,a),Nt.warn("Recursive render complete ",i,a)}else e.children(t).length>0?(Nt.info("Cluster - the non recursive path XXX",t,a.id,a,e),Nt.info(vs(a.id,e)),gs[a.id]={id:vs(a.id,e),node:a}):(Nt.info("Node - the non recursive path",t,a.id,a),Fs(h,e.node(t),i))})),e.edges().forEach((function(t){const n=e.edge(t.v,t.w,t.name);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t)),Nt.info("Edge "+t.v+" -> "+t.w+": ",t," ",JSON.stringify(e.edge(t))),Nt.info("Fix",gs,"ids:",t.v,t.w,"Translateing: ",gs[t.v],gs[t.w]),Ys(l,n)})),e.edges().forEach((function(t){Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t))})),Nt.info("#############################################"),Nt.info("###                Layout                 ###"),Nt.info("#############################################"),Nt.info(e),(0,lt.bK)(e),Nt.info("Graph after layout:",ut.c(e));let u=0;return(t=>Es(t,t.children()))(e).forEach((function(t){const n=e.node(t);Nt.info("Position "+t+": "+JSON.stringify(e.node(t))),Nt.info("Position "+t+": ("+n.x,","+n.y,") width: ",n.width," height: ",n.height),n&&n.clusterNode?$s(n):e.children(t).length>0?(((t,e)=>{Nt.trace("Inserting cluster");const n=e.shape||"rect";Zs[e.id]=Rs[n](t,e)})(s,n),gs[n.id].node=n):$s(n)})),e.edges().forEach((function(t){const r=e.edge(t);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(r),r);const i=function(t,e,n,r,i,a){let s=n.points,c=!1;const l=a.node(e.v);var h=a.node(e.w);Nt.info("abc88 InsertEdge: ",n),h.intersect&&l.intersect&&(s=s.slice(1,n.points.length-1),s.unshift(l.intersect(s[0])),Nt.info("Last point",s[s.length-1],h,h.intersect(s[s.length-1])),s.push(h.intersect(s[s.length-1]))),n.toCluster&&(Nt.info("to cluster abc88",r[n.toCluster]),s=Us(n.points,r[n.toCluster].node),c=!0),n.fromCluster&&(Nt.info("from cluster abc88",r[n.fromCluster]),s=Us(s.reverse(),r[n.fromCluster].node).reverse(),c=!0);const u=s.filter((t=>!Number.isNaN(t.y)));let d;d=("graph"===i||"flowchart"===i)&&n.curve||o.$0Z;const p=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(d);let f;switch(n.thickness){case"normal":f="edge-thickness-normal";break;case"thick":f="edge-thickness-thick";break;default:f=""}switch(n.pattern){case"solid":f+=" edge-pattern-solid";break;case"dotted":f+=" edge-pattern-dotted";break;case"dashed":f+=" edge-pattern-dashed"}const g=t.append("path").attr("d",p(u)).attr("id",n.id).attr("class"," "+f+(n.classes?" "+n.classes:"")).attr("style",n.style);let y="";switch((ar().flowchart.arrowMarkerAbsolute||ar().state.arrowMarkerAbsolute)&&(y=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,y=y.replace(/\(/g,"\\("),y=y.replace(/\)/g,"\\)")),Nt.info("arrowTypeStart",n.arrowTypeStart),Nt.info("arrowTypeEnd",n.arrowTypeEnd),n.arrowTypeStart){case"arrow_cross":g.attr("marker-start","url("+y+"#"+i+"-crossStart)");break;case"arrow_point":g.attr("marker-start","url("+y+"#"+i+"-pointStart)");break;case"arrow_barb":g.attr("marker-start","url("+y+"#"+i+"-barbStart)");break;case"arrow_circle":g.attr("marker-start","url("+y+"#"+i+"-circleStart)");break;case"aggregation":g.attr("marker-start","url("+y+"#"+i+"-aggregationStart)");break;case"extension":g.attr("marker-start","url("+y+"#"+i+"-extensionStart)");break;case"composition":g.attr("marker-start","url("+y+"#"+i+"-compositionStart)");break;case"dependency":g.attr("marker-start","url("+y+"#"+i+"-dependencyStart)");break;case"lollipop":g.attr("marker-start","url("+y+"#"+i+"-lollipopStart)")}switch(n.arrowTypeEnd){case"arrow_cross":g.attr("marker-end","url("+y+"#"+i+"-crossEnd)");break;case"arrow_point":g.attr("marker-end","url("+y+"#"+i+"-pointEnd)");break;case"arrow_barb":g.attr("marker-end","url("+y+"#"+i+"-barbEnd)");break;case"arrow_circle":g.attr("marker-end","url("+y+"#"+i+"-circleEnd)");break;case"aggregation":g.attr("marker-end","url("+y+"#"+i+"-aggregationEnd)");break;case"extension":g.attr("marker-end","url("+y+"#"+i+"-extensionEnd)");break;case"composition":g.attr("marker-end","url("+y+"#"+i+"-compositionEnd)");break;case"dependency":g.attr("marker-end","url("+y+"#"+i+"-dependencyEnd)");break;case"lollipop":g.attr("marker-end","url("+y+"#"+i+"-lollipopEnd)")}let m={};return c&&(m.updatedPath=s),m.originalPath=n.points,m}(c,t,r,gs,n,e);((t,e)=>{Nt.info("Moving label abc78 ",t.id,t.label,Ps[t.id]);let n=e.updatedPath?e.updatedPath:e.originalPath;if(t.label){const r=Ps[t.id];let i=t.x,a=t.y;if(n){const r=Gn.calcLabelPosition(n);Nt.info("Moving label "+t.label+" from (",i,",",a,") to (",r.x,",",r.y,") abc78"),e.updatedPath&&(i=r.x,a=r.y)}r.attr("transform","translate("+i+", "+a+")")}if(t.startLabelLeft){const e=js[t.id].startLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.startLabelRight){const e=js[t.id].startRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelLeft){const e=js[t.id].endLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelRight){const e=js[t.id].endRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}})(r,i)})),e.nodes().forEach((function(t){const n=e.node(t);Nt.info(t,n.type,n.diff),"group"===n.type&&(u=n.diff)})),{elem:a,diff:u}},qs=(t,e,n,r,i)=>{hs(t,n,r,i),Is={},Ps={},js={},Zs={},ys={},ms={},gs={},Nt.warn("Graph at first:",ut.c(e)),((t,e)=>{!t||e>10?Nt.debug("Opting out, no graph "):(Nt.debug("Opting in, graph "),t.nodes().forEach((function(e){t.children(e).length>0&&(Nt.warn("Cluster identified",e," Replacement id in edges: ",vs(e,t)),ys[e]=xs(e,t),gs[e]={id:vs(e,t),clusterData:t.node(e)})})),t.nodes().forEach((function(e){const n=t.children(e),r=t.edges();n.length>0?(Nt.debug("Cluster identified",e,ys),r.forEach((t=>{t.v!==e&&t.w!==e&&bs(t.v,e)^bs(t.w,e)&&(Nt.warn("Edge: ",t," leaves cluster ",e),Nt.warn("Decendants of XXX ",e,": ",ys[e]),gs[e].externalConnections=!0)}))):Nt.debug("Not a cluster ",e,ys)})),t.edges().forEach((function(e){const n=t.edge(e);Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(e)),Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(t.edge(e)));let r=e.v,i=e.w;if(Nt.warn("Fix XXX",gs,"ids:",e.v,e.w,"Translating: ",gs[e.v]," --- ",gs[e.w]),gs[e.v]&&gs[e.w]&&gs[e.v]===gs[e.w]){Nt.warn("Fixing and trixing link to self - removing XXX",e.v,e.w,e.name),Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name);const a=e.w+"---"+e.v;t.setNode(a,{domId:a,id:a,labelStyle:"",labelText:n.label,padding:0,shape:"labelRect",style:""});const s=JSON.parse(JSON.stringify(n)),o=JSON.parse(JSON.stringify(n));s.label="",s.arrowTypeEnd="none",o.label="",s.fromCluster=e.v,o.toCluster=e.v,t.setEdge(r,a,s,e.name+"-cyclic-special"),t.setEdge(a,i,o,e.name+"-cyclic-special")}else(gs[e.v]||gs[e.w])&&(Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name),r!==e.v&&(n.fromCluster=e.v),i!==e.w&&(n.toCluster=e.w),Nt.warn("Fix Replacing with XXX",r,i,e.name),t.setEdge(r,i,n,e.name))})),Nt.warn("Adjusted Graph",ut.c(t)),ws(t,0),Nt.trace(gs))})(e),Nt.warn("Graph after:",ut.c(e)),Ws(t,e,r)},Hs=t=>Yt.sanitizeText(t,ar());let Vs={dividerMargin:10,padding:5,textHeight:10};function Gs(t){let e;switch(t){case 0:e="aggregation";break;case 1:e="extension";break;case 2:e="composition";break;case 3:e="dependency";break;case 4:e="lollipop";break;default:e="none"}return e}const Xs={setConf:function(t){Object.keys(t).forEach((function(e){Vs[e]=t[e]}))},draw:function(t,e,n,r){Nt.info("Drawing class - ",e);const i=ar().flowchart,a=ar().securityLevel;Nt.info("config:",i);const s=i.nodeSpacing||50,c=i.rankSpacing||50,l=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:r.db.getDirection(),nodesep:s,ranksep:c,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}})),h=r.db.getClasses(),u=r.db.getRelations(),d=r.db.getNotes();let p;Nt.info(u),function(t,e,n,r){const i=Object.keys(t);Nt.info("keys:",i),Nt.info(t),i.forEach((function(n){const i=t[n];let a="";i.cssClasses.length>0&&(a=a+" "+i.cssClasses.join(" "));const s={labelStyle:""};let o=void 0!==i.text?i.text:i.id,c="";i.type,c="class_box",e.setNode(i.id,{labelStyle:s.labelStyle,shape:c,labelText:Hs(o),classData:i,rx:0,ry:0,class:a,style:s.style,id:i.id,domId:i.domId,tooltip:r.db.getTooltip(i.id)||"",haveCallback:i.haveCallback,link:i.link,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s.labelStyle,shape:c,labelText:o,rx:0,ry:0,class:a,style:s.style,id:i.id,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding})}))}(h,l,0,r),function(t,e){const n=ar().flowchart;let r=0;t.forEach((function(i){r++;const a={classes:"relation"};a.pattern=1==i.relation.lineType?"dashed":"solid",a.id="id"+r,"arrow_open"===i.type?a.arrowhead="none":a.arrowhead="normal",Nt.info(a,i),a.startLabelRight="none"===i.relationTitle1?"":i.relationTitle1,a.endLabelLeft="none"===i.relationTitle2?"":i.relationTitle2,a.arrowTypeStart=Gs(i.relation.type1),a.arrowTypeEnd=Gs(i.relation.type2);let s="",c="";if(void 0!==i.style){const t=Mn(i.style);s=t.style,c=t.labelStyle}else s="fill:none";a.style=s,a.labelStyle=c,void 0!==i.interpolate?a.curve=Dn(i.interpolate,o.c_6):void 0!==t.defaultInterpolate?a.curve=Dn(t.defaultInterpolate,o.c_6):a.curve=Dn(n.curve,o.c_6),i.text=i.title,void 0===i.text?void 0!==i.style&&(a.arrowheadStyle="fill: #333"):(a.arrowheadStyle="fill: #333",a.labelpos="c",ar().flowchart.htmlLabels?(a.labelType="html",a.label='<span class="edgeLabel">'+i.text+"</span>"):(a.labelType="text",a.label=i.text.replace(Yt.lineBreakRegex,"\n"),void 0===i.style&&(a.style=a.style||"stroke: #333; stroke-width: 1.5px;fill:none"),a.labelStyle=a.labelStyle.replace("color:","fill:"))),e.setEdge(i.id1,i.id2,a,r)}))}(u,l),function(t,e,n,r){Nt.info(t),t.forEach((function(t,i){const a=t,s="",c="";let l=a.text,h="note";if(e.setNode(a.id,{labelStyle:s,shape:h,labelText:Hs(l),noteData:a,rx:0,ry:0,class:"",style:c,id:a.id,domId:a.id,tooltip:"",type:"note",padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s,shape:h,labelText:l,rx:0,ry:0,style:c,id:a.id,type:"note",padding:ar().flowchart.padding}),!a.class||!(a.class in r))return;const u=n+i,d={classes:"relation",pattern:"dotted"};d.id=`edgeNote${u}`,d.arrowhead="none",Nt.info(`Note edge: ${JSON.stringify(d)}, ${JSON.stringify(a)}`),d.startLabelRight="",d.endLabelLeft="",d.arrowTypeStart="none",d.arrowTypeEnd="none",d.style="fill:none",d.labelStyle="",d.curve=Dn(Vs.curve,o.c_6),e.setEdge(a.id,a.class,d,u)}))}(d,l,u.length+1,h),"sandbox"===a&&(p=(0,o.Ys)("#i"+e));const f="sandbox"===a?(0,o.Ys)(p.nodes()[0].contentDocument.body):(0,o.Ys)("body"),g=f.select(`[id="${e}"]`),y=f.select("#"+e+" g");if(qs(y,l,["aggregation","extension","composition","dependency","lollipop"],"classDiagram",e),Gn.insertTitle(g,"classTitleText",i.titleTopMargin,r.db.getDiagramTitle()),pr(l,g,i.diagramPadding,i.useMaxWidth),!i.htmlLabels){const t="sandbox"===a?p.nodes()[0].contentDocument:document,n=t.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of n){const n=e.getBBox(),r=t.createElementNS("http://www.w3.org/2000/svg","rect");r.setAttribute("rx",0),r.setAttribute("ry",0),r.setAttribute("width",n.width),r.setAttribute("height",n.height),e.insertBefore(r,e.firstChild)}}}};var Ks=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,23,25,27,29,30,31,51],a=[1,17],s=[1,18],o=[1,19],c=[1,20],l=[1,21],h=[1,22],u=[1,25],d=[1,30],p=[1,31],f=[1,32],g=[1,33],y=[6,9,11,15,20,23,25,27,29,30,31,44,45,46,47,51],m=[1,45],b=[30,31,48,49],_=[4,6,9,11,23,25,27,29,30,31,51],x=[44,45,46,47],v=[22,37],k=[1,65],w=[1,64],E=[22,37,39,41],C={trace:function(){},yy:{},symbols_:{error:2,start:3,ER_DIAGRAM:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,entityName:17,relSpec:18,role:19,BLOCK_START:20,attributes:21,BLOCK_STOP:22,title:23,title_value:24,acc_title:25,acc_title_value:26,acc_descr:27,acc_descr_value:28,acc_descr_multiline_value:29,ALPHANUM:30,ENTITY_NAME:31,attribute:32,attributeType:33,attributeName:34,attributeKeyTypeList:35,attributeComment:36,ATTRIBUTE_WORD:37,attributeKeyType:38,COMMA:39,ATTRIBUTE_KEY:40,COMMENT:41,cardinality:42,relType:43,ZERO_OR_ONE:44,ZERO_OR_MORE:45,ONE_OR_MORE:46,ONLY_ONE:47,NON_IDENTIFYING:48,IDENTIFYING:49,WORD:50,open_directive:51,type_directive:52,arg_directive:53,close_directive:54,$accept:0,$end:1},terminals_:{2:"error",4:"ER_DIAGRAM",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",20:"BLOCK_START",22:"BLOCK_STOP",23:"title",24:"title_value",25:"acc_title",26:"acc_title_value",27:"acc_descr",28:"acc_descr_value",29:"acc_descr_multiline_value",30:"ALPHANUM",31:"ENTITY_NAME",37:"ATTRIBUTE_WORD",39:"COMMA",40:"ATTRIBUTE_KEY",41:"COMMENT",44:"ZERO_OR_ONE",45:"ZERO_OR_MORE",46:"ONE_OR_MORE",47:"ONLY_ONE",48:"NON_IDENTIFYING",49:"IDENTIFYING",50:"WORD",51:"open_directive",52:"type_directive",53:"arg_directive",54:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,5],[10,4],[10,3],[10,1],[10,2],[10,2],[10,2],[10,1],[17,1],[17,1],[21,1],[21,2],[32,2],[32,3],[32,3],[32,4],[33,1],[34,1],[35,1],[35,3],[38,1],[36,1],[18,3],[42,1],[42,1],[42,1],[42,1],[43,1],[43,1],[19,1],[19,1],[19,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:break;case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:case 20:case 43:case 28:case 29:case 32:this.$=a[o];break;case 12:r.addEntity(a[o-4]),r.addEntity(a[o-2]),r.addRelationship(a[o-4],a[o],a[o-2],a[o-3]);break;case 13:r.addEntity(a[o-3]),r.addAttributes(a[o-3],a[o-1]);break;case 14:r.addEntity(a[o-2]);break;case 15:r.addEntity(a[o]);break;case 16:case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:case 41:case 42:case 33:this.$=a[o].replace(/"/g,"");break;case 22:case 30:this.$=[a[o]];break;case 23:a[o].push(a[o-1]),this.$=a[o];break;case 24:this.$={attributeType:a[o-1],attributeName:a[o]};break;case 25:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeKeyTypeList:a[o]};break;case 26:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeComment:a[o]};break;case 27:this.$={attributeType:a[o-3],attributeName:a[o-2],attributeKeyTypeList:a[o-1],attributeComment:a[o]};break;case 31:a[o-2].push(a[o]),this.$=a[o-2];break;case 34:this.$={cardA:a[o],relType:a[o-1],cardB:a[o-2]};break;case 35:this.$=r.Cardinality.ZERO_OR_ONE;break;case 36:this.$=r.Cardinality.ZERO_OR_MORE;break;case 37:this.$=r.Cardinality.ONE_OR_MORE;break;case 38:this.$=r.Cardinality.ONLY_ONE;break;case 39:this.$=r.Identification.NON_IDENTIFYING;break;case 40:this.$=r.Identification.IDENTIFYING;break;case 44:r.parseDirective("%%{","open_directive");break;case 45:r.parseDirective(a[o],"type_directive");break;case 46:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 47:r.parseDirective("}%%","close_directive","er")}},table:[{3:1,4:n,7:3,12:4,51:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,51:r},{13:8,52:[1,9]},{52:[2,44]},{6:[1,10],7:15,8:11,9:[1,12],10:13,11:[1,14],12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},{1:[2,2]},{14:23,15:[1,24],54:u},e([15,54],[2,45]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:15,10:26,12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),e(i,[2,15],{18:27,42:29,20:[1,28],44:d,45:p,46:f,47:g}),{24:[1,34]},{26:[1,35]},{28:[1,36]},e(i,[2,19]),e(y,[2,20]),e(y,[2,21]),{11:[1,37]},{16:38,53:[1,39]},{11:[2,47]},e(i,[2,5]),{17:40,30:l,31:h},{21:41,22:[1,42],32:43,33:44,37:m},{43:46,48:[1,47],49:[1,48]},e(b,[2,35]),e(b,[2,36]),e(b,[2,37]),e(b,[2,38]),e(i,[2,16]),e(i,[2,17]),e(i,[2,18]),e(_,[2,9]),{14:49,54:u},{54:[2,46]},{15:[1,50]},{22:[1,51]},e(i,[2,14]),{21:52,22:[2,22],32:43,33:44,37:m},{34:53,37:[1,54]},{37:[2,28]},{42:55,44:d,45:p,46:f,47:g},e(x,[2,39]),e(x,[2,40]),{11:[1,56]},{19:57,30:[1,60],31:[1,59],50:[1,58]},e(i,[2,13]),{22:[2,23]},e(v,[2,24],{35:61,36:62,38:63,40:k,41:w}),e([22,37,40,41],[2,29]),e([30,31],[2,34]),e(_,[2,10]),e(i,[2,12]),e(i,[2,41]),e(i,[2,42]),e(i,[2,43]),e(v,[2,25],{36:66,39:[1,67],41:w}),e(v,[2,26]),e(E,[2,30]),e(v,[2,33]),e(E,[2,32]),e(v,[2,27]),{38:68,40:k},e(E,[2,31])],defaultActions:{5:[2,44],7:[2,2],25:[2,47],39:[2,46],45:[2,28],52:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},T=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("acc_title"),25;case 1:return this.popState(),"acc_title_value";case 2:return this.begin("acc_descr"),27;case 3:return this.popState(),"acc_descr_value";case 4:this.begin("acc_descr_multiline");break;case 5:this.popState();break;case 6:return"acc_descr_multiline_value";case 7:return this.begin("open_directive"),51;case 8:return this.begin("type_directive"),52;case 9:return this.popState(),this.begin("arg_directive"),15;case 10:return this.popState(),this.popState(),54;case 11:return 53;case 12:case 13:case 15:case 22:case 27:break;case 14:return 11;case 16:return 9;case 17:return 31;case 18:return 50;case 19:return 4;case 20:return this.begin("block"),20;case 21:return 39;case 23:return 40;case 24:case 25:return 37;case 26:return 41;case 28:return this.popState(),22;case 29:case 58:return e.yytext[0];case 30:case 34:case 35:case 48:return 44;case 31:case 32:case 33:case 41:case 43:case 50:return 46;case 36:case 37:case 38:case 39:case 40:case 42:case 49:return 45;case 44:case 45:case 46:case 47:return 47;case 51:case 54:case 55:case 56:return 48;case 52:case 53:return 49;case 57:return 30;case 59:return 6}},rules:[/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:[\s]+)/i,/^(?:"[^"%\r\n\v\b\\]+")/i,/^(?:"[^"]*")/i,/^(?:erDiagram\b)/i,/^(?:\{)/i,/^(?:,)/i,/^(?:\s+)/i,/^(?:\b((?:PK)|(?:FK)|(?:UK))\b)/i,/^(?:(.*?)[~](.*?)*[~])/i,/^(?:[A-Za-z_][A-Za-z0-9\-_\[\]\(\)]*)/i,/^(?:"[^"]*")/i,/^(?:[\n]+)/i,/^(?:\})/i,/^(?:.)/i,/^(?:one or zero\b)/i,/^(?:one or more\b)/i,/^(?:one or many\b)/i,/^(?:1\+)/i,/^(?:\|o\b)/i,/^(?:zero or one\b)/i,/^(?:zero or more\b)/i,/^(?:zero or many\b)/i,/^(?:0\+)/i,/^(?:\}o\b)/i,/^(?:many\(0\))/i,/^(?:many\(1\))/i,/^(?:many\b)/i,/^(?:\}\|)/i,/^(?:one\b)/i,/^(?:only one\b)/i,/^(?:1\b)/i,/^(?:\|\|)/i,/^(?:o\|)/i,/^(?:o\{)/i,/^(?:\|\{)/i,/^(?:\.\.)/i,/^(?:--)/i,/^(?:to\b)/i,/^(?:optionally to\b)/i,/^(?:\.-)/i,/^(?:-\.)/i,/^(?:[A-Za-z][A-Za-z0-9\-_]*)/i,/^(?:.)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[5,6],inclusive:!1},acc_descr:{rules:[3],inclusive:!1},acc_title:{rules:[1],inclusive:!1},open_directive:{rules:[8],inclusive:!1},type_directive:{rules:[9,10],inclusive:!1},arg_directive:{rules:[10,11],inclusive:!1},block:{rules:[21,22,23,24,25,26,27,28,29],inclusive:!1},INITIAL:{rules:[0,2,4,7,12,13,14,15,16,17,18,19,20,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],inclusive:!0}}},t);function S(){this.yy={}}return C.lexer=T,S.prototype=C,C.Parser=S,new S}();Ks.parser=Ks;const Qs=Ks,Js=t=>null!==t.match(/^\s*erDiagram/);let to={},eo=[];const no=function(t){return void 0===to[t]&&(to[t]={attributes:[]},Nt.info("Added new entity :",t)),to[t]},ro={Cardinality:{ZERO_OR_ONE:"ZERO_OR_ONE",ZERO_OR_MORE:"ZERO_OR_MORE",ONE_OR_MORE:"ONE_OR_MORE",ONLY_ONE:"ONLY_ONE"},Identification:{NON_IDENTIFYING:"NON_IDENTIFYING",IDENTIFYING:"IDENTIFYING"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().er,addEntity:no,addAttributes:function(t,e){let n,r=no(t);for(n=e.length-1;n>=0;n--)r.attributes.push(e[n]),Nt.debug("Added attribute ",e[n].attributeName)},getEntities:()=>to,addRelationship:function(t,e,n,r){let i={entityA:t,roleA:e,entityB:n,relSpec:r};eo.push(i),Nt.debug("Added new relationship :",i)},getRelationships:()=>eo,clear:function(){to={},eo=[],Dr()},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,setDiagramTitle:$r,getDiagramTitle:Rr},io={ONLY_ONE_START:"ONLY_ONE_START",ONLY_ONE_END:"ONLY_ONE_END",ZERO_OR_ONE_START:"ZERO_OR_ONE_START",ZERO_OR_ONE_END:"ZERO_OR_ONE_END",ONE_OR_MORE_START:"ONE_OR_MORE_START",ONE_OR_MORE_END:"ONE_OR_MORE_END",ZERO_OR_MORE_START:"ZERO_OR_MORE_START",ZERO_OR_MORE_END:"ZERO_OR_MORE_END"},ao=io,so=function(t,e){let n;t.append("defs").append("marker").attr("id",io.ONLY_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18 M15,0 L15,18"),t.append("defs").append("marker").attr("id",io.ONLY_ONE_END).attr("refX",18).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,0 L3,18 M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",21).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_END).attr("refX",30).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,0 L21,18"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q 18,0 36,18 Q 18,36 0,18 M42,9 L42,27"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_END).attr("refX",27).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,9 L3,27 M9,18 Q27,0 45,18 Q27,36 9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",48).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q18,0 36,18 Q18,36 0,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_END).attr("refX",39).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,18 Q39,0 57,18 Q39,36 21,18")},oo=/[^\dA-Za-z](\W)*/g;let co={},lo=new Map;const ho=function(t,e,n){let r;return Object.keys(e).forEach((function(i){const a=function(t="",e=""){const n=t.replace(oo,"");return`${go(e)}${go(n)}${vt(t,fo)}`}(i,"entity");lo.set(i,a);const s=t.append("g").attr("id",a);r=void 0===r?a:r;const o="text-"+a,c=s.append("text").classed("er entityLabel",!0).attr("id",o).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(i),{width:l,height:h}=((t,e,n)=>{const r=co.entityPadding/3,i=co.entityPadding/3,a=.85*co.fontSize,s=e.node().getBBox(),o=[];let c=!1,l=!1,h=0,u=0,d=0,p=0,f=s.height+2*r,g=1;n.forEach((t=>{void 0!==t.attributeKeyTypeList&&t.attributeKeyTypeList.length>0&&(c=!0),void 0!==t.attributeComment&&(l=!0)})),n.forEach((n=>{const i=`${e.node().id}-attr-${g}`;let s=0;const y=jt(n.attributeType),m=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-type`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(y),b=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-name`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeName),_={};_.tn=m,_.nn=b;const x=m.node().getBBox(),v=b.node().getBBox();if(h=Math.max(h,x.width),u=Math.max(u,v.width),s=Math.max(x.height,v.height),c){const e=void 0!==n.attributeKeyTypeList?n.attributeKeyTypeList.join(","):"",r=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-key`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(e);_.kn=r;const o=r.node().getBBox();d=Math.max(d,o.width),s=Math.max(s,o.height)}if(l){const e=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-comment`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeComment||"");_.cn=e;const r=e.node().getBBox();p=Math.max(p,r.width),s=Math.max(s,r.height)}_.height=s,o.push(_),f+=s+2*r,g+=1}));let y=4;c&&(y+=2),l&&(y+=2);const m=h+u+d+p,b={width:Math.max(co.minEntityWidth,Math.max(s.width+2*co.entityPadding,m+i*y)),height:n.length>0?f:Math.max(co.minEntityHeight,s.height+2*co.entityPadding)};if(n.length>0){const n=Math.max(0,(b.width-m-i*y)/(y/2));e.attr("transform","translate("+b.width/2+","+(r+s.height/2)+")");let a=s.height+2*r,f="attributeBoxOdd";o.forEach((e=>{const s=a+r+e.height/2;e.tn.attr("transform","translate("+i+","+s+")");const o=t.insert("rect","#"+e.tn.node().id).classed(`er ${f}`,!0).attr("x",0).attr("y",a).attr("width",h+2*i+n).attr("height",e.height+2*r),g=parseFloat(o.attr("x"))+parseFloat(o.attr("width"));e.nn.attr("transform","translate("+(g+i)+","+s+")");const y=t.insert("rect","#"+e.nn.node().id).classed(`er ${f}`,!0).attr("x",g).attr("y",a).attr("width",u+2*i+n).attr("height",e.height+2*r);let m=parseFloat(y.attr("x"))+parseFloat(y.attr("width"));if(c){e.kn.attr("transform","translate("+(m+i)+","+s+")");const o=t.insert("rect","#"+e.kn.node().id).classed(`er ${f}`,!0).attr("x",m).attr("y",a).attr("width",d+2*i+n).attr("height",e.height+2*r);m=parseFloat(o.attr("x"))+parseFloat(o.attr("width"))}l&&(e.cn.attr("transform","translate("+(m+i)+","+s+")"),t.insert("rect","#"+e.cn.node().id).classed(`er ${f}`,"true").attr("x",m).attr("y",a).attr("width",p+2*i+n).attr("height",e.height+2*r)),a+=e.height+2*r,f="attributeBoxOdd"===f?"attributeBoxEven":"attributeBoxOdd"}))}else b.height=Math.max(co.minEntityHeight,f),e.attr("transform","translate("+b.width/2+","+b.height/2+")");return b})(s,c,e[i].attributes),u=s.insert("rect","#"+o).classed("er entityBox",!0).attr("x",0).attr("y",0).attr("width",l).attr("height",h).node().getBBox();n.setNode(a,{width:u.width,height:u.height,shape:"rect",id:a})})),r},uo=function(t){return(t.entityA+t.roleA+t.entityB).replace(/\s/g,"")};let po=0;const fo="28e9f9db-3c8d-5aa5-9faf-44286ae5937c";function go(t=""){return t.length>0?`${t}-`:""}const yo={setConf:function(t){const e=Object.keys(t);for(const n of e)co[n]=t[n]},draw:function(t,e,n,r){co=ar().er,Nt.info("Drawing ER diagram");const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);let c;so(s,co),c=new ht.k({multigraph:!0,directed:!0,compound:!1}).setGraph({rankdir:co.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));const l=ho(s,r.db.getEntities(),c),h=function(t,e){return t.forEach((function(t){e.setEdge(lo.get(t.entityA),lo.get(t.entityB),{relationship:t},uo(t))})),t}(r.db.getRelationships(),c);var u,d;(0,lt.bK)(c),u=s,(d=c).nodes().forEach((function(t){void 0!==t&&void 0!==d.node(t)&&u.select("#"+t).attr("transform","translate("+(d.node(t).x-d.node(t).width/2)+","+(d.node(t).y-d.node(t).height/2)+" )")})),h.forEach((function(t){!function(t,e,n,r,i){po++;const a=n.edge(lo.get(e.entityA),lo.get(e.entityB),uo(e)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),c=t.insert("path","#"+r).classed("er relationshipLine",!0).attr("d",s(a.points)).style("stroke",co.stroke).style("fill","none");e.relSpec.relType===i.db.Identification.NON_IDENTIFYING&&c.attr("stroke-dasharray","8,8");let l="";switch(co.arrowMarkerAbsolute&&(l=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,l=l.replace(/\(/g,"\\("),l=l.replace(/\)/g,"\\)")),e.relSpec.cardA){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_ONE_END+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_MORE_END+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ONE_OR_MORE_END+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-end","url("+l+"#"+ao.ONLY_ONE_END+")")}switch(e.relSpec.cardB){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_ONE_START+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_MORE_START+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ONE_OR_MORE_START+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-start","url("+l+"#"+ao.ONLY_ONE_START+")")}const h=c.node().getTotalLength(),u=c.node().getPointAtLength(.5*h),d="rel"+po,p=t.append("text").classed("er relationshipLabel",!0).attr("id",d).attr("x",u.x).attr("y",u.y).style("text-anchor","middle").style("dominant-baseline","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(e.roleA).node().getBBox();t.insert("rect","#"+d).classed("er relationshipLabelBox",!0).attr("x",u.x-p.width/2).attr("y",u.y-p.height/2).attr("width",p.width).attr("height",p.height)}(s,t,c,l,r)}));const p=co.diagramPadding;Gn.insertTitle(s,"entityTitleText",co.titleTopMargin,r.db.getDiagramTitle());const f=s.node().getBBox(),g=f.width+2*p,y=f.height+2*p;dr(s,y,g,co.useMaxWidth),s.attr("viewBox",`${f.x-p} ${f.y-p} ${g} ${y}`)}};var mo=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,9],r=[1,7],i=[1,6],a=[1,8],s=[1,20,21,22,23,38,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],o=[2,10],c=[1,20],l=[1,21],h=[1,22],u=[1,23],d=[1,30],p=[1,32],f=[1,33],g=[1,34],y=[1,62],m=[1,48],b=[1,52],_=[1,36],x=[1,37],v=[1,38],k=[1,39],w=[1,40],E=[1,56],C=[1,63],T=[1,51],S=[1,53],A=[1,55],L=[1,59],B=[1,60],N=[1,41],D=[1,42],O=[1,43],M=[1,44],I=[1,61],F=[1,50],$=[1,54],R=[1,57],Z=[1,58],P=[1,49],j=[1,66],Y=[1,71],z=[1,20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],U=[1,75],W=[1,74],q=[1,76],H=[20,21,23,81,82],V=[1,99],G=[1,104],X=[1,107],K=[1,108],Q=[1,101],J=[1,106],tt=[1,109],et=[1,102],nt=[1,114],rt=[1,113],it=[1,103],at=[1,105],st=[1,110],ot=[1,111],ct=[1,112],lt=[1,115],ht=[20,21,22,23,81,82],ut=[20,21,22,23,53,81,82],dt=[20,21,22,23,40,52,53,55,57,59,61,63,65,66,67,69,71,73,74,76,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],pt=[20,21,23],ft=[20,21,23,52,66,67,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],gt=[1,12,20,21,22,23,24,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],yt=[52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],mt=[1,149],bt=[1,157],_t=[1,158],xt=[1,159],vt=[1,160],kt=[1,144],wt=[1,145],Et=[1,141],Ct=[1,152],Tt=[1,153],St=[1,154],At=[1,155],Lt=[1,156],Bt=[1,161],Nt=[1,162],Dt=[1,147],Ot=[1,150],Mt=[1,146],It=[1,143],Ft=[20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],$t=[1,165],Rt=[20,21,22,23,26,52,66,67,91,105,106,109,111,112,122,123,124,125,126,127],Zt=[20,21,22,23,24,26,38,40,41,42,52,56,58,60,62,64,66,67,68,70,72,73,75,77,81,82,86,87,88,89,90,91,92,95,105,106,109,111,112,113,114,122,123,124,125,126,127],Pt=[12,21,22,24],jt=[22,106],Yt=[1,250],zt=[1,245],Ut=[1,246],Wt=[1,254],qt=[1,251],Ht=[1,248],Vt=[1,247],Gt=[1,249],Xt=[1,252],Kt=[1,253],Qt=[1,255],Jt=[1,273],te=[20,21,23,106],ee=[20,21,22,23,66,67,86,102,105,106,109,110,111,112,113],ne={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,directive:5,openDirective:6,typeDirective:7,closeDirective:8,separator:9,":":10,argDirective:11,open_directive:12,type_directive:13,arg_directive:14,close_directive:15,graphConfig:16,document:17,line:18,statement:19,SEMI:20,NEWLINE:21,SPACE:22,EOF:23,GRAPH:24,NODIR:25,DIR:26,FirstStmtSeperator:27,ending:28,endToken:29,spaceList:30,spaceListNewline:31,verticeStatement:32,styleStatement:33,linkStyleStatement:34,classDefStatement:35,classStatement:36,clickStatement:37,subgraph:38,text:39,SQS:40,SQE:41,end:42,direction:43,acc_title:44,acc_title_value:45,acc_descr:46,acc_descr_value:47,acc_descr_multiline_value:48,link:49,node:50,vertex:51,AMP:52,STYLE_SEPARATOR:53,idString:54,DOUBLECIRCLESTART:55,DOUBLECIRCLEEND:56,PS:57,PE:58,"(-":59,"-)":60,STADIUMSTART:61,STADIUMEND:62,SUBROUTINESTART:63,SUBROUTINEEND:64,VERTEX_WITH_PROPS_START:65,ALPHA:66,COLON:67,PIPE:68,CYLINDERSTART:69,CYLINDEREND:70,DIAMOND_START:71,DIAMOND_STOP:72,TAGEND:73,TRAPSTART:74,TRAPEND:75,INVTRAPSTART:76,INVTRAPEND:77,linkStatement:78,arrowText:79,TESTSTR:80,START_LINK:81,LINK:82,textToken:83,STR:84,keywords:85,STYLE:86,LINKSTYLE:87,CLASSDEF:88,CLASS:89,CLICK:90,DOWN:91,UP:92,textNoTags:93,textNoTagsToken:94,DEFAULT:95,stylesOpt:96,alphaNum:97,CALLBACKNAME:98,CALLBACKARGS:99,HREF:100,LINK_TARGET:101,HEX:102,numList:103,INTERPOLATE:104,NUM:105,COMMA:106,style:107,styleComponent:108,MINUS:109,UNIT:110,BRKT:111,DOT:112,PCT:113,TAGSTART:114,alphaNumToken:115,idStringToken:116,alphaNumStatement:117,direction_tb:118,direction_bt:119,direction_rl:120,direction_lr:121,PUNCTUATION:122,UNICODE_TEXT:123,PLUS:124,EQUALS:125,MULT:126,UNDERSCORE:127,graphCodeTokens:128,ARROW_CROSS:129,ARROW_POINT:130,ARROW_CIRCLE:131,ARROW_OPEN:132,QUOTE:133,$accept:0,$end:1},terminals_:{2:"error",10:":",12:"open_directive",13:"type_directive",14:"arg_directive",15:"close_directive",20:"SEMI",21:"NEWLINE",22:"SPACE",23:"EOF",24:"GRAPH",25:"NODIR",26:"DIR",38:"subgraph",40:"SQS",41:"SQE",42:"end",44:"acc_title",45:"acc_title_value",46:"acc_descr",47:"acc_descr_value",48:"acc_descr_multiline_value",52:"AMP",53:"STYLE_SEPARATOR",55:"DOUBLECIRCLESTART",56:"DOUBLECIRCLEEND",57:"PS",58:"PE",59:"(-",60:"-)",61:"STADIUMSTART",62:"STADIUMEND",63:"SUBROUTINESTART",64:"SUBROUTINEEND",65:"VERTEX_WITH_PROPS_START",66:"ALPHA",67:"COLON",68:"PIPE",69:"CYLINDERSTART",70:"CYLINDEREND",71:"DIAMOND_START",72:"DIAMOND_STOP",73:"TAGEND",74:"TRAPSTART",75:"TRAPEND",76:"INVTRAPSTART",77:"INVTRAPEND",80:"TESTSTR",81:"START_LINK",82:"LINK",84:"STR",86:"STYLE",87:"LINKSTYLE",88:"CLASSDEF",89:"CLASS",90:"CLICK",91:"DOWN",92:"UP",95:"DEFAULT",98:"CALLBACKNAME",99:"CALLBACKARGS",100:"HREF",101:"LINK_TARGET",102:"HEX",104:"INTERPOLATE",105:"NUM",106:"COMMA",109:"MINUS",110:"UNIT",111:"BRKT",112:"DOT",113:"PCT",114:"TAGSTART",118:"direction_tb",119:"direction_bt",120:"direction_rl",121:"direction_lr",122:"PUNCTUATION",123:"UNICODE_TEXT",124:"PLUS",125:"EQUALS",126:"MULT",127:"UNDERSCORE",129:"ARROW_CROSS",130:"ARROW_POINT",131:"ARROW_CIRCLE",132:"ARROW_OPEN",133:"QUOTE"},productions_:[0,[3,1],[3,2],[5,4],[5,6],[6,1],[7,1],[11,1],[8,1],[4,2],[17,0],[17,2],[18,1],[18,1],[18,1],[18,1],[18,1],[16,2],[16,2],[16,2],[16,3],[28,2],[28,1],[29,1],[29,1],[29,1],[27,1],[27,1],[27,2],[31,2],[31,2],[31,1],[31,1],[30,2],[30,1],[19,2],[19,2],[19,2],[19,2],[19,2],[19,2],[19,9],[19,6],[19,4],[19,1],[19,2],[19,2],[19,1],[9,1],[9,1],[9,1],[32,3],[32,4],[32,2],[32,1],[50,1],[50,5],[50,3],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,8],[51,4],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,4],[51,4],[51,1],[49,2],[49,3],[49,3],[49,1],[49,3],[78,1],[79,3],[39,1],[39,2],[39,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[93,1],[93,2],[35,5],[35,5],[36,5],[37,2],[37,4],[37,3],[37,5],[37,2],[37,4],[37,4],[37,6],[37,2],[37,4],[37,2],[37,4],[37,4],[37,6],[33,5],[33,5],[34,5],[34,5],[34,9],[34,9],[34,7],[34,7],[103,1],[103,3],[96,1],[96,3],[107,1],[107,2],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[83,1],[83,1],[83,1],[83,1],[83,1],[83,1],[94,1],[94,1],[94,1],[94,1],[54,1],[54,2],[97,1],[97,2],[117,1],[117,1],[117,1],[117,1],[43,1],[43,1],[43,1],[43,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.parseDirective("%%{","open_directive");break;case 6:r.parseDirective(a[o],"type_directive");break;case 7:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 8:r.parseDirective("}%%","close_directive","flowchart");break;case 10:case 36:case 37:case 38:case 39:case 40:this.$=[];break;case 11:(!Array.isArray(a[o])||a[o].length>0)&&a[o-1].push(a[o]),this.$=a[o-1];break;case 12:case 82:case 84:case 96:case 152:case 154:case 155:case 78:case 150:this.$=a[o];break;case 19:r.setDirection("TB"),this.$="TB";break;case 20:r.setDirection(a[o-1]),this.$=a[o-1];break;case 35:this.$=a[o-1].nodes;break;case 41:this.$=r.addSubGraph(a[o-6],a[o-1],a[o-4]);break;case 42:this.$=r.addSubGraph(a[o-3],a[o-1],a[o-3]);break;case 43:this.$=r.addSubGraph(void 0,a[o-1],void 0);break;case 45:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 46:case 47:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 51:r.addLink(a[o-2].stmt,a[o],a[o-1]),this.$={stmt:a[o],nodes:a[o].concat(a[o-2].nodes)};break;case 52:r.addLink(a[o-3].stmt,a[o-1],a[o-2]),this.$={stmt:a[o-1],nodes:a[o-1].concat(a[o-3].nodes)};break;case 53:this.$={stmt:a[o-1],nodes:a[o-1]};break;case 54:this.$={stmt:a[o],nodes:a[o]};break;case 55:case 123:case 125:this.$=[a[o]];break;case 56:this.$=a[o-4].concat(a[o]);break;case 57:this.$=[a[o-2]],r.setClass(a[o-2],a[o]);break;case 58:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"square");break;case 59:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"doublecircle");break;case 60:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"circle");break;case 61:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"ellipse");break;case 62:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"stadium");break;case 63:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"subroutine");break;case 64:this.$=a[o-7],r.addVertex(a[o-7],a[o-1],"rect",void 0,void 0,void 0,Object.fromEntries([[a[o-5],a[o-3]]]));break;case 65:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"cylinder");break;case 66:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"round");break;case 67:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"diamond");break;case 68:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"hexagon");break;case 69:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"odd");break;case 70:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"trapezoid");break;case 71:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"inv_trapezoid");break;case 72:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_right");break;case 73:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_left");break;case 74:this.$=a[o],r.addVertex(a[o]);break;case 75:a[o-1].text=a[o],this.$=a[o-1];break;case 76:case 77:a[o-2].text=a[o-1],this.$=a[o-2];break;case 79:var c=r.destructLink(a[o],a[o-2]);this.$={type:c.type,stroke:c.stroke,length:c.length,text:a[o-1]};break;case 80:c=r.destructLink(a[o]);this.$={type:c.type,stroke:c.stroke,length:c.length};break;case 81:this.$=a[o-1];break;case 83:case 97:case 153:case 151:this.$=a[o-1]+""+a[o];break;case 98:case 99:this.$=a[o-4],r.addClass(a[o-2],a[o]);break;case 100:this.$=a[o-4],r.setClass(a[o-2],a[o]);break;case 101:case 109:this.$=a[o-1],r.setClickEvent(a[o-1],a[o]);break;case 102:case 110:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 103:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 104:this.$=a[o-4],r.setClickEvent(a[o-4],a[o-3],a[o-2]),r.setTooltip(a[o-4],a[o]);break;case 105:case 111:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 106:case 112:this.$=a[o-3],r.setLink(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 107:case 113:this.$=a[o-3],r.setLink(a[o-3],a[o-2],a[o]);break;case 108:case 114:this.$=a[o-5],r.setLink(a[o-5],a[o-4],a[o]),r.setTooltip(a[o-5],a[o-2]);break;case 115:this.$=a[o-4],r.addVertex(a[o-2],void 0,void 0,a[o]);break;case 116:case 118:this.$=a[o-4],r.updateLink(a[o-2],a[o]);break;case 117:this.$=a[o-4],r.updateLink([a[o-2]],a[o]);break;case 119:this.$=a[o-8],r.updateLinkInterpolate([a[o-6]],a[o-2]),r.updateLink([a[o-6]],a[o]);break;case 120:this.$=a[o-8],r.updateLinkInterpolate(a[o-6],a[o-2]),r.updateLink(a[o-6],a[o]);break;case 121:this.$=a[o-6],r.updateLinkInterpolate([a[o-4]],a[o]);break;case 122:this.$=a[o-6],r.updateLinkInterpolate(a[o-4],a[o]);break;case 124:case 126:a[o-2].push(a[o]),this.$=a[o-2];break;case 128:this.$=a[o-1]+a[o];break;case 156:this.$="v";break;case 157:this.$="-";break;case 158:this.$={stmt:"dir",value:"TB"};break;case 159:this.$={stmt:"dir",value:"BT"};break;case 160:this.$={stmt:"dir",value:"RL"};break;case 161:this.$={stmt:"dir",value:"LR"}}},table:[{3:1,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},{1:[3]},{1:[2,1]},{3:10,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},e(s,o,{17:11}),{7:12,13:[1,13]},{16:14,21:r,22:i,24:a},{16:15,21:r,22:i,24:a},{25:[1,16],26:[1,17]},{13:[2,5]},{1:[2,2]},{1:[2,9],18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{8:64,10:[1,65],15:j},e([10,15],[2,6]),e(s,[2,17]),e(s,[2,18]),e(s,[2,19]),{20:[1,68],21:[1,69],22:Y,27:67,30:70},e(z,[2,11]),e(z,[2,12]),e(z,[2,13]),e(z,[2,14]),e(z,[2,15]),e(z,[2,16]),{9:72,20:U,21:W,23:q,49:73,78:77,81:[1,78],82:[1,79]},{9:80,20:U,21:W,23:q},{9:81,20:U,21:W,23:q},{9:82,20:U,21:W,23:q},{9:83,20:U,21:W,23:q},{9:84,20:U,21:W,23:q},{9:86,20:U,21:W,22:[1,85],23:q},e(z,[2,44]),{45:[1,87]},{47:[1,88]},e(z,[2,47]),e(H,[2,54],{30:89,22:Y}),{22:[1,90]},{22:[1,91]},{22:[1,92]},{22:[1,93]},{26:V,52:G,66:X,67:K,84:[1,97],91:Q,97:96,98:[1,94],100:[1,95],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(z,[2,158]),e(z,[2,159]),e(z,[2,160]),e(z,[2,161]),e(ht,[2,55],{53:[1,116]}),e(ut,[2,74],{116:129,40:[1,117],52:y,55:[1,118],57:[1,119],59:[1,120],61:[1,121],63:[1,122],65:[1,123],66:m,67:b,69:[1,124],71:[1,125],73:[1,126],74:[1,127],76:[1,128],91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),e(dt,[2,150]),e(dt,[2,175]),e(dt,[2,176]),e(dt,[2,177]),e(dt,[2,178]),e(dt,[2,179]),e(dt,[2,180]),e(dt,[2,181]),e(dt,[2,182]),e(dt,[2,183]),e(dt,[2,184]),e(dt,[2,185]),e(dt,[2,186]),e(dt,[2,187]),e(dt,[2,188]),e(dt,[2,189]),e(dt,[2,190]),{9:130,20:U,21:W,23:q},{11:131,14:[1,132]},e(pt,[2,8]),e(s,[2,20]),e(s,[2,26]),e(s,[2,27]),{21:[1,133]},e(ft,[2,34],{30:134,22:Y}),e(z,[2,35]),{50:135,51:45,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},e(gt,[2,48]),e(gt,[2,49]),e(gt,[2,50]),e(yt,[2,78],{79:136,68:[1,138],80:[1,137]}),{22:mt,24:bt,26:_t,38:xt,39:139,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e([52,66,67,68,80,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,80]),e(z,[2,36]),e(z,[2,37]),e(z,[2,38]),e(z,[2,39]),e(z,[2,40]),{22:mt,24:bt,26:_t,38:xt,39:163,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:164}),e(z,[2,45]),e(z,[2,46]),e(H,[2,53],{52:$t}),{26:V,52:G,66:X,67:K,91:Q,97:166,102:[1,167],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{95:[1,168],103:169,105:[1,170]},{26:V,52:G,66:X,67:K,91:Q,95:[1,171],97:172,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:173,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,101],{22:[1,174],99:[1,175]}),e(pt,[2,105],{22:[1,176]}),e(pt,[2,109],{115:100,117:178,22:[1,177],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,111],{22:[1,179]}),e(Rt,[2,152]),e(Rt,[2,154]),e(Rt,[2,155]),e(Rt,[2,156]),e(Rt,[2,157]),e(Zt,[2,162]),e(Zt,[2,163]),e(Zt,[2,164]),e(Zt,[2,165]),e(Zt,[2,166]),e(Zt,[2,167]),e(Zt,[2,168]),e(Zt,[2,169]),e(Zt,[2,170]),e(Zt,[2,171]),e(Zt,[2,172]),e(Zt,[2,173]),e(Zt,[2,174]),{52:y,54:180,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:mt,24:bt,26:_t,38:xt,39:181,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:182,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:184,42:vt,52:G,57:[1,183],66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:185,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:186,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:187,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{66:[1,188]},{22:mt,24:bt,26:_t,38:xt,39:189,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:190,42:vt,52:G,66:X,67:K,71:[1,191],73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:192,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:193,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:194,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(dt,[2,151]),e(Pt,[2,3]),{8:195,15:j},{15:[2,7]},e(s,[2,28]),e(ft,[2,33]),e(H,[2,51],{30:196,22:Y}),e(yt,[2,75],{22:[1,197]}),{22:[1,198]},{22:mt,24:bt,26:_t,38:xt,39:199,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,81:wt,82:[1,200],83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Zt,[2,82]),e(Zt,[2,84]),e(Zt,[2,140]),e(Zt,[2,141]),e(Zt,[2,142]),e(Zt,[2,143]),e(Zt,[2,144]),e(Zt,[2,145]),e(Zt,[2,146]),e(Zt,[2,147]),e(Zt,[2,148]),e(Zt,[2,149]),e(Zt,[2,85]),e(Zt,[2,86]),e(Zt,[2,87]),e(Zt,[2,88]),e(Zt,[2,89]),e(Zt,[2,90]),e(Zt,[2,91]),e(Zt,[2,92]),e(Zt,[2,93]),e(Zt,[2,94]),e(Zt,[2,95]),{9:203,20:U,21:W,22:mt,23:q,24:bt,26:_t,38:xt,40:[1,202],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,204],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Y,30:205},{22:[1,206],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,207]},{22:[1,208]},{22:[1,209],106:[1,210]},e(jt,[2,123]),{22:[1,211]},{22:[1,212],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,213],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{84:[1,214]},e(pt,[2,103],{22:[1,215]}),{84:[1,216],101:[1,217]},{84:[1,218]},e(Rt,[2,153]),{84:[1,219],101:[1,220]},e(ht,[2,57],{116:129,52:y,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),{22:mt,24:bt,26:_t,38:xt,41:[1,221],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,56:[1,222],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:223,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,224],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,60:[1,225],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,62:[1,226],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,64:[1,227],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{67:[1,228]},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,70:[1,229],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,230],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:231,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,41:[1,232],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,233],77:[1,234],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,236],77:[1,235],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{9:237,20:U,21:W,23:q},e(H,[2,52],{52:$t}),e(yt,[2,77]),e(yt,[2,76]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,68:[1,238],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(yt,[2,79]),e(Zt,[2,83]),{22:mt,24:bt,26:_t,38:xt,39:239,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:240}),e(z,[2,43]),{51:241,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:242,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:256,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:257,102:qt,104:[1,258],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:259,102:qt,104:[1,260],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{105:[1,261]},{22:Yt,66:zt,67:Ut,86:Wt,96:262,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:263,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{26:V,52:G,66:X,67:K,91:Q,97:264,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,102]),{84:[1,265]},e(pt,[2,106],{22:[1,266]}),e(pt,[2,107]),e(pt,[2,110]),e(pt,[2,112],{22:[1,267]}),e(pt,[2,113]),e(ut,[2,58]),e(ut,[2,59]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,268],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,66]),e(ut,[2,61]),e(ut,[2,62]),e(ut,[2,63]),{66:[1,269]},e(ut,[2,65]),e(ut,[2,67]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,270],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,69]),e(ut,[2,70]),e(ut,[2,72]),e(ut,[2,71]),e(ut,[2,73]),e(Pt,[2,4]),e([22,52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,81]),{22:mt,24:bt,26:_t,38:xt,41:[1,271],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,272],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},e(ht,[2,56]),e(pt,[2,115],{106:Jt}),e(te,[2,125],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(ee,[2,127]),e(ee,[2,129]),e(ee,[2,130]),e(ee,[2,131]),e(ee,[2,132]),e(ee,[2,133]),e(ee,[2,134]),e(ee,[2,135]),e(ee,[2,136]),e(ee,[2,137]),e(ee,[2,138]),e(ee,[2,139]),e(pt,[2,116],{106:Jt}),e(pt,[2,117],{106:Jt}),{22:[1,275]},e(pt,[2,118],{106:Jt}),{22:[1,276]},e(jt,[2,124]),e(pt,[2,98],{106:Jt}),e(pt,[2,99],{106:Jt}),e(pt,[2,100],{115:100,117:178,26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,104]),{101:[1,277]},{101:[1,278]},{58:[1,279]},{68:[1,280]},{72:[1,281]},{9:282,20:U,21:W,23:q},e(z,[2,42]),{22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,107:283,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ee,[2,128]),{26:V,52:G,66:X,67:K,91:Q,97:284,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:285,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,108]),e(pt,[2,114]),e(ut,[2,60]),{22:mt,24:bt,26:_t,38:xt,39:286,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,68]),e(Ft,o,{17:287}),e(te,[2,126],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(pt,[2,121],{115:100,117:178,22:[1,288],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,122],{115:100,117:178,22:[1,289],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),{22:mt,24:bt,26:_t,38:xt,41:[1,290],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,291],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:292,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:293,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ut,[2,64]),e(z,[2,41]),e(pt,[2,119],{106:Jt}),e(pt,[2,120],{106:Jt})],defaultActions:{2:[2,1],9:[2,5],10:[2,2],132:[2,7]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},re=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),12;case 1:return this.begin("type_directive"),13;case 2:return this.popState(),this.begin("arg_directive"),10;case 3:return this.popState(),this.popState(),15;case 4:return 14;case 5:case 6:break;case 7:return this.begin("acc_title"),44;case 8:return this.popState(),"acc_title_value";case 9:return this.begin("acc_descr"),46;case 10:return this.popState(),"acc_descr_value";case 11:this.begin("acc_descr_multiline");break;case 12:case 15:case 24:case 27:case 30:case 33:this.popState();break;case 13:return"acc_descr_multiline_value";case 14:this.begin("string");break;case 16:return"STR";case 17:return 86;case 18:return 95;case 19:return 87;case 20:return 104;case 21:return 88;case 22:return 89;case 23:this.begin("href");break;case 25:return 100;case 26:this.begin("callbackname");break;case 28:this.popState(),this.begin("callbackargs");break;case 29:return 98;case 31:return 99;case 32:this.begin("click");break;case 34:return 90;case 35:case 36:case 37:return t.lex.firstGraph()&&this.begin("dir"),24;case 38:return 38;case 39:return 42;case 40:case 41:case 42:case 43:return 101;case 44:return this.popState(),25;case 45:case 46:case 47:case 48:case 49:case 50:case 51:case 52:case 53:case 54:return this.popState(),26;case 55:return 118;case 56:return 119;case 57:return 120;case 58:return 121;case 59:return 105;case 60:return 111;case 61:return 53;case 62:return 67;case 63:return 52;case 64:return 20;case 65:return 106;case 66:return 126;case 67:case 68:case 69:return 82;case 70:case 71:case 72:return 81;case 73:return 59;case 74:return 60;case 75:return 61;case 76:return 62;case 77:return 63;case 78:return 64;case 79:return 65;case 80:return 69;case 81:return 70;case 82:return 55;case 83:return 56;case 84:return 109;case 85:return 112;case 86:return 127;case 87:return 124;case 88:return 113;case 89:case 90:return 125;case 91:return 114;case 92:return 73;case 93:return 92;case 94:return"SEP";case 95:return 91;case 96:return 66;case 97:return 75;case 98:return 74;case 99:return 77;case 100:return 76;case 101:return 122;case 102:return 123;case 103:return 68;case 104:return 57;case 105:return 58;case 106:return 40;case 107:return 41;case 108:return 71;case 109:return 72;case 110:return 133;case 111:return 21;case 112:return 22;case 113:return 23}},rules:[/^(?:%%\{)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)[^\n]*)/,/^(?:[^\}]%%[^\n]*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:style\b)/,/^(?:default\b)/,/^(?:linkStyle\b)/,/^(?:interpolate\b)/,/^(?:classDef\b)/,/^(?:class\b)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:click[\s]+)/,/^(?:[\s\n])/,/^(?:[^\s\n]*)/,/^(?:flowchart-elk\b)/,/^(?:graph\b)/,/^(?:flowchart\b)/,/^(?:subgraph\b)/,/^(?:end\b\s*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:(\r?\n)*\s*\n)/,/^(?:\s*LR\b)/,/^(?:\s*RL\b)/,/^(?:\s*TB\b)/,/^(?:\s*BT\b)/,/^(?:\s*TD\b)/,/^(?:\s*BR\b)/,/^(?:\s*<)/,/^(?:\s*>)/,/^(?:\s*\^)/,/^(?:\s*v\b)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:[0-9]+)/,/^(?:#)/,/^(?::::)/,/^(?::)/,/^(?:&)/,/^(?:;)/,/^(?:,)/,/^(?:\*)/,/^(?:\s*[xo<]?--+[-xo>]\s*)/,/^(?:\s*[xo<]?==+[=xo>]\s*)/,/^(?:\s*[xo<]?-?\.+-[xo>]?\s*)/,/^(?:\s*[xo<]?--\s*)/,/^(?:\s*[xo<]?==\s*)/,/^(?:\s*[xo<]?-\.\s*)/,/^(?:\(-)/,/^(?:-\))/,/^(?:\(\[)/,/^(?:\]\))/,/^(?:\[\[)/,/^(?:\]\])/,/^(?:\[\|)/,/^(?:\[\()/,/^(?:\)\])/,/^(?:\(\(\()/,/^(?:\)\)\))/,/^(?:-)/,/^(?:\.)/,/^(?:[\_])/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:<)/,/^(?:>)/,/^(?:\^)/,/^(?:\\\|)/,/^(?:v\b)/,/^(?:[A-Za-z]+)/,/^(?:\\\])/,/^(?:\[\/)/,/^(?:\/\])/,/^(?:\[\\)/,/^(?:[!"#$%&'*+,-.`?\\_/])/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\|)/,/^(?:\()/,/^(?:\))/,/^(?:\[)/,/^(?:\])/,/^(?:\{)/,/^(?:\})/,/^(?:")/,/^(?:(\r?\n)+)/,/^(?:\s)/,/^(?:$)/],conditions:{close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[30,31],inclusive:!1},callbackname:{rules:[27,28,29],inclusive:!1},href:{rules:[24,25],inclusive:!1},click:{rules:[33,34],inclusive:!1},vertex:{rules:[],inclusive:!1},dir:{rules:[44,45,46,47,48,49,50,51,52,53,54],inclusive:!1},acc_descr_multiline:{rules:[12,13],inclusive:!1},acc_descr:{rules:[10],inclusive:!1},acc_title:{rules:[8],inclusive:!1},string:{rules:[15,16],inclusive:!1},INITIAL:{rules:[0,5,6,7,9,11,14,17,18,19,20,21,22,23,26,32,35,36,37,38,39,40,41,42,43,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],inclusive:!0}}},t);function ie(){this.yy={}}return ne.lexer=re,ie.prototype=ne,ne.Parser=ie,new ie}();mo.parser=mo;const bo=mo,_o=(t,e)=>{var n,r;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&null!==t.match(/^\s*graph/))},xo=(t,e)=>{var n,r;return"dagre-d3"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&(null!==t.match(/^\s*graph/)||null!==t.match(/^\s*flowchart/)))};let vo,ko,wo=0,Eo=ar(),Co={},To=[],So={},Ao=[],Lo={},Bo={},No=0,Do=!0,Oo=[];const Mo=t=>Yt.sanitizeText(t,Eo),Io=function(t,e,n){ap.parseDirective(this,t,e,n)},Fo=function(t){const e=Object.keys(Co);for(const n of e)if(Co[n].id===t)return Co[n].domId;return t},$o=function(t,e,n,r,i,a,s={}){let o,c=t;void 0!==c&&0!==c.trim().length&&(void 0===Co[c]&&(Co[c]={id:c,domId:"flowchart-"+c+"-"+wo,styles:[],classes:[]}),wo++,void 0!==e?(Eo=ar(),o=Mo(e.trim()),'"'===o[0]&&'"'===o[o.length-1]&&(o=o.substring(1,o.length-1)),Co[c].text=o):void 0===Co[c].text&&(Co[c].text=t),void 0!==n&&(Co[c].type=n),null!=r&&r.forEach((function(t){Co[c].styles.push(t)})),null!=i&&i.forEach((function(t){Co[c].classes.push(t)})),void 0!==a&&(Co[c].dir=a),void 0===Co[c].props?Co[c].props=s:void 0!==s&&Object.assign(Co[c].props,s))},Ro=function(t,e,n,r){const i={start:t,end:e,type:void 0,text:""};void 0!==(r=n.text)&&(i.text=Mo(r.trim()),'"'===i.text[0]&&'"'===i.text[i.text.length-1]&&(i.text=i.text.substring(1,i.text.length-1))),void 0!==n&&(i.type=n.type,i.stroke=n.stroke,i.length=n.length),To.push(i)},Zo=function(t,e,n,r){let i,a;for(i=0;i<t.length;i++)for(a=0;a<e.length;a++)Ro(t[i],e[a],n,r)},Po=function(t,e){t.forEach((function(t){"default"===t?To.defaultInterpolate=e:To[t].interpolate=e}))},jo=function(t,e){t.forEach((function(t){"default"===t?To.defaultStyle=e:(-1===Gn.isSubstringInArray("fill",e)&&e.push("fill:none"),To[t].style=e)}))},Yo=function(t,e){void 0===So[t]&&(So[t]={id:t,styles:[],textStyles:[]}),null!=e&&e.forEach((function(e){if(e.match("color")){const n=e.replace("fill","bgFill").replace("color","fill");So[t].textStyles.push(n)}So[t].styles.push(e)}))},zo=function(t){vo=t,vo.match(/.*</)&&(vo="RL"),vo.match(/.*\^/)&&(vo="BT"),vo.match(/.*>/)&&(vo="LR"),vo.match(/.*v/)&&(vo="TB"),"TD"===vo&&(vo="TB")},Uo=function(t,e){t.split(",").forEach((function(t){let n=t;void 0!==Co[n]&&Co[n].classes.push(e),void 0!==Lo[n]&&Lo[n].classes.push(e)}))},Wo=function(t,e,n){t.split(",").forEach((function(t){void 0!==Co[t]&&(Co[t].link=Gn.formatUrl(e,Eo),Co[t].linkTarget=n)})),Uo(t,"clickable")},qo=function(t){return Bo[t]},Ho=function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){let r=Fo(t);if("loose"!==ar().securityLevel)return;if(void 0===e)return;let i=[];if("string"==typeof n){i=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<i.length;t++){let e=i[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),i[t]=e}}0===i.length&&i.push(t),void 0!==Co[t]&&(Co[t].haveCallback=!0,Oo.push((function(){const t=document.querySelector(`[id="${r}"]`);null!==t&&t.addEventListener("click",(function(){Gn.runFunc(e,...i)}),!1)})))}(t,e,n)})),Uo(t,"clickable")},Vo=function(t){Oo.forEach((function(e){e(t)}))},Go=function(){return vo.trim()},Xo=function(){return Co},Ko=function(){return To},Qo=function(){return So},Jo=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Oo.push(Jo);const tc=function(t="gen-1"){Co={},So={},To=[],Oo=[Jo],Ao=[],Lo={},No=0,Bo=[],Do=!0,ko=t,Dr()},ec=t=>{ko=t||"gen-2"},nc=function(){return"fill:#ffa;stroke: #f66; stroke-width: 3px; stroke-dasharray: 5, 5;fill:#ffa;stroke: #666;"},rc=function(t,e,n){let r=t.trim(),i=n;t===n&&n.match(/\s/)&&(r=void 0);let a=[];const{nodeList:s,dir:o}=function(t){const e={boolean:{},number:{},string:{}},n=[];let r;return{nodeList:t.filter((function(t){const i=typeof t;return t.stmt&&"dir"===t.stmt?(r=t.value,!1):""!==t.trim()&&(i in e?!e[i].hasOwnProperty(t)&&(e[i][t]=!0):!n.includes(t)&&n.push(t))})),dir:r}}(a.concat.apply(a,e));if(a=s,"gen-1"===ko)for(let l=0;l<a.length;l++)a[l]=Fo(a[l]);r=r||"subGraph"+No,i=i||"",i=Mo(i),No+=1;const c={id:r,nodes:a,title:i.trim(),classes:[],dir:o};return Nt.info("Adding",c.id,c.nodes,c.dir),c.nodes=fc(c,Ao).nodes,Ao.push(c),Lo[r]=c,r},ic=function(t){for(const[e,n]of Ao.entries())if(n.id===t)return e;return-1};let ac=-1;const sc=[],oc=function(t,e){const n=Ao[e].nodes;if(ac+=1,ac>2e3)return;if(sc[ac]=e,Ao[e].id===t)return{result:!0,count:0};let r=0,i=1;for(;r<n.length;){const e=ic(n[r]);if(e>=0){const n=oc(t,e);if(n.result)return{result:!0,count:i+n.count};i+=n.count}r+=1}return{result:!1,count:i}},cc=function(t){return sc[t]},lc=function(){ac=-1,Ao.length>0&&oc("none",Ao.length-1)},hc=function(){return Ao},uc=()=>!!Do&&(Do=!1,!0),dc=(t,e)=>{const n=(t=>{const e=t.trim();let n=e.slice(0,-1),r="arrow_open";switch(e.slice(-1)){case"x":r="arrow_cross","x"===e[0]&&(r="double_"+r,n=n.slice(1));break;case">":r="arrow_point","<"===e[0]&&(r="double_"+r,n=n.slice(1));break;case"o":r="arrow_circle","o"===e[0]&&(r="double_"+r,n=n.slice(1))}let i="normal",a=n.length-1;"="===n[0]&&(i="thick");let s=((t,e)=>{const n=e.length;let r=0;for(let i=0;i<n;++i)e[i]===t&&++r;return r})(".",n);return s&&(i="dotted",a=s),{type:r,stroke:i,length:a}})(t);let r;if(e){if(r=(t=>{let e=t.trim(),n="arrow_open";switch(e[0]){case"<":n="arrow_point",e=e.slice(1);break;case"x":n="arrow_cross",e=e.slice(1);break;case"o":n="arrow_circle",e=e.slice(1)}let r="normal";return e.includes("=")&&(r="thick"),e.includes(".")&&(r="dotted"),{type:n,stroke:r}})(e),r.stroke!==n.stroke)return{type:"INVALID",stroke:"INVALID"};if("arrow_open"===r.type)r.type=n.type;else{if(r.type!==n.type)return{type:"INVALID",stroke:"INVALID"};r.type="double_"+r.type}return"double_arrow"===r.type&&(r.type="double_arrow_point"),r.length=n.length,r}return n},pc=(t,e)=>{let n=!1;return t.forEach((t=>{t.nodes.indexOf(e)>=0&&(n=!0)})),n},fc=(t,e)=>{const n=[];return t.nodes.forEach(((r,i)=>{pc(e,r)||n.push(t.nodes[i])})),{nodes:n}},gc={firstGraph:uc},yc={parseDirective:Io,defaultConfig:()=>Kn.flowchart,setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,addVertex:$o,lookUpDomId:Fo,addLink:Zo,updateLinkInterpolate:Po,updateLink:jo,addClass:Yo,setDirection:zo,setClass:Uo,setTooltip:function(t,e){t.split(",").forEach((function(t){void 0!==e&&(Bo["gen-1"===ko?Fo(t):t]=Mo(e))}))},getTooltip:qo,setClickEvent:Ho,setLink:Wo,bindFunctions:Vo,getDirection:Go,getVertices:Xo,getEdges:Ko,getClasses:Qo,clear:tc,setGen:ec,defaultStyle:nc,addSubGraph:rc,getDepthFirstPos:cc,indexNodes:lc,getSubGraphs:hc,destructLink:dc,lex:gc,exists:pc,makeUniq:fc,setDiagramTitle:$r,getDiagramTitle:Rr},mc=Object.freeze(Object.defineProperty({__proto__:null,addClass:Yo,addLink:Zo,addSingleLink:Ro,addSubGraph:rc,addVertex:$o,bindFunctions:Vo,clear:tc,default:yc,defaultStyle:nc,destructLink:dc,firstGraph:uc,getClasses:Qo,getDepthFirstPos:cc,getDirection:Go,getEdges:Ko,getSubGraphs:hc,getTooltip:qo,getVertices:Xo,indexNodes:lc,lex:gc,lookUpDomId:Fo,parseDirective:Io,setClass:Uo,setClickEvent:Ho,setDirection:zo,setGen:ec,setLink:Wo,updateLink:jo,updateLinkInterpolate:Po},Symbol.toStringTag,{value:"Module"}));const bc={},_c=function(t){const e=Object.keys(t);for(const n of e)bc[n]=t[n]},xc={},vc=function(t,e,n,r,i,a){const s=r.select(`[id="${n}"]`);Object.keys(t).forEach((function(n){const r=t[n];let o="default";r.classes.length>0&&(o=r.classes.join(" "));const c=Mn(r.styles);let l,h=void 0!==r.text?r.text:r.id;if(Pt(ar().flowchart.htmlLabels)){const t={label:h.replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`))};l=(0,kt.a)(s,t).node(),l.parentNode.removeChild(l)}else{const t=i.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",c.labelStyle.replace("color:","fill:"));const e=h.split(Yt.lineBreakRegex);for(const n of e){const e=i.createElementNS("http://www.w3.org/2000/svg","tspan");e.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),e.setAttribute("dy","1em"),e.setAttribute("x","1"),e.textContent=n,t.appendChild(e)}l=t}let u=0,d="";switch(r.type){case"round":u=5,d="rect";break;case"square":case"group":default:d="rect";break;case"diamond":d="question";break;case"hexagon":d="hexagon";break;case"odd":case"odd_right":d="rect_left_inv_arrow";break;case"lean_right":d="lean_right";break;case"lean_left":d="lean_left";break;case"trapezoid":d="trapezoid";break;case"inv_trapezoid":d="inv_trapezoid";break;case"circle":d="circle";break;case"ellipse":d="ellipse";break;case"stadium":d="stadium";break;case"subroutine":d="subroutine";break;case"cylinder":d="cylinder";break;case"doublecircle":d="doublecircle"}e.setNode(r.id,{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,link:r.link,linkTarget:r.linkTarget,tooltip:a.db.getTooltip(r.id)||"",domId:a.db.lookUpDomId(r.id),haveCallback:r.haveCallback,width:"group"===r.type?500:void 0,dir:r.dir,type:r.type,props:r.props,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,domId:a.db.lookUpDomId(r.id),width:"group"===r.type?500:void 0,type:r.type,dir:r.dir,props:r.props,padding:ar().flowchart.padding})}))},kc=function(t,e,n){Nt.info("abc78 edges = ",t);let r,i,a=0,s={};if(void 0!==t.defaultStyle){const e=Mn(t.defaultStyle);r=e.style,i=e.labelStyle}t.forEach((function(n){a++;var c="L-"+n.start+"-"+n.end;void 0===s[c]?(s[c]=0,Nt.info("abc78 new entry",c,s[c])):(s[c]++,Nt.info("abc78 new entry",c,s[c]));let l=c+"-"+s[c];Nt.info("abc78 new link id to be used is",c,l,s[c]);var h="LS-"+n.start,u="LE-"+n.end;const d={style:"",labelStyle:""};switch(d.minlen=n.length||1,"arrow_open"===n.type?d.arrowhead="none":d.arrowhead="normal",d.arrowTypeStart="arrow_open",d.arrowTypeEnd="arrow_open",n.type){case"double_arrow_cross":d.arrowTypeStart="arrow_cross";case"arrow_cross":d.arrowTypeEnd="arrow_cross";break;case"double_arrow_point":d.arrowTypeStart="arrow_point";case"arrow_point":d.arrowTypeEnd="arrow_point";break;case"double_arrow_circle":d.arrowTypeStart="arrow_circle";case"arrow_circle":d.arrowTypeEnd="arrow_circle"}let p="",f="";switch(n.stroke){case"normal":p="fill:none;",void 0!==r&&(p=r),void 0!==i&&(f=i),d.thickness="normal",d.pattern="solid";break;case"dotted":d.thickness="normal",d.pattern="dotted",d.style="fill:none;stroke-width:2px;stroke-dasharray:3;";break;case"thick":d.thickness="thick",d.pattern="solid",d.style="stroke-width: 3.5px;fill:none;"}if(void 0!==n.style){const t=Mn(n.style);p=t.style,f=t.labelStyle}d.style=d.style+=p,d.labelStyle=d.labelStyle+=f,void 0!==n.interpolate?d.curve=Dn(n.interpolate,o.c_6):void 0!==t.defaultInterpolate?d.curve=Dn(t.defaultInterpolate,o.c_6):d.curve=Dn(xc.curve,o.c_6),void 0===n.text?void 0!==n.style&&(d.arrowheadStyle="fill: #333"):(d.arrowheadStyle="fill: #333",d.labelpos="c"),d.labelType="text",d.label=n.text.replace(Yt.lineBreakRegex,"\n"),void 0===n.style&&(d.style=d.style||"stroke: #333; stroke-width: 1.5px;fill:none;"),d.labelStyle=d.labelStyle.replace("color:","fill:"),d.id=l,d.classes="flowchart-link "+h+" "+u,e.setEdge(n.start,n.end,d,a)}))},wc={setConf:function(t){const e=Object.keys(t);for(const n of e)xc[n]=t[n]},addVertices:vc,addEdges:kc,getClasses:function(t,e){Nt.info("Extracting classes"),e.db.clear();try{return e.parse(t),e.db.getClasses()}catch(n){return}},draw:function(t,e,n,r){Nt.info("Drawing flowchart"),r.db.clear(),yc.setGen("gen-2"),r.parser.parse(t);let i=r.db.getDirection();void 0===i&&(i="TD");const{securityLevel:a,flowchart:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;let h;"sandbox"===a&&(h=(0,o.Ys)("#i"+e));const u="sandbox"===a?(0,o.Ys)(h.nodes()[0].contentDocument.body):(0,o.Ys)("body"),d="sandbox"===a?h.nodes()[0].contentDocument:document,p=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:i,nodesep:c,ranksep:l,marginx:0,marginy:0}).setDefaultEdgeLabel((function(){return{}}));let f;const g=r.db.getSubGraphs();Nt.info("Subgraphs - ",g);for(let o=g.length-1;o>=0;o--)f=g[o],Nt.info("Subgraph - ",f),r.db.addVertex(f.id,f.title,"group",void 0,f.classes,f.dir);const y=r.db.getVertices(),m=r.db.getEdges();Nt.info("Edges",m);let b=0;for(b=g.length-1;b>=0;b--){f=g[b],(0,o.td_)("cluster").append("text");for(let t=0;t<f.nodes.length;t++)Nt.info("Setting up subgraphs",f.nodes[t],f.id),p.setParent(f.nodes[t],f.id)}vc(y,p,e,u,d,r),kc(m,p);const _=u.select(`[id="${e}"]`),x=u.select("#"+e+" g");if(qs(x,p,["point","circle","cross"],"flowchart",e),Gn.insertTitle(_,"flowchartTitleText",s.titleTopMargin,r.db.getDiagramTitle()),pr(p,_,s.diagramPadding,s.useMaxWidth),r.db.indexNodes("subGraph"+b),!s.htmlLabels){const t=d.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of t){const t=e.getBBox(),n=d.createElementNS("http://www.w3.org/2000/svg","rect");n.setAttribute("rx",0),n.setAttribute("ry",0),n.setAttribute("width",t.width),n.setAttribute("height",t.height),e.insertBefore(n,e.firstChild)}}Object.keys(y).forEach((function(t){const n=y[t];if(n.link){const r=(0,o.Ys)("#"+e+' [id="'+t+'"]');if(r){const t=d.createElementNS("http://www.w3.org/2000/svg","a");t.setAttributeNS("http://www.w3.org/2000/svg","class",n.classes.join(" ")),t.setAttributeNS("http://www.w3.org/2000/svg","href",n.link),t.setAttributeNS("http://www.w3.org/2000/svg","rel","noopener"),"sandbox"===a?t.setAttributeNS("http://www.w3.org/2000/svg","target","_top"):n.linkTarget&&t.setAttributeNS("http://www.w3.org/2000/svg","target",n.linkTarget);const e=r.insert((function(){return t}),":first-child"),i=r.select(".label-container");i&&e.append((function(){return i.node()}));const s=r.select(".label");s&&e.append((function(){return s.node()}))}}}))}};var Ec=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,21],d=[1,22],p=[1,23],f=[1,24],g=[1,25],y=[1,26],m=[1,27],b=[1,29],_=[1,31],x=[1,34],v=[5,7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],k={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,gantt:5,document:6,EOF:7,line:8,SPACE:9,statement:10,NL:11,dateFormat:12,inclusiveEndDates:13,topAxis:14,axisFormat:15,tickInterval:16,excludes:17,includes:18,todayMarker:19,title:20,acc_title:21,acc_title_value:22,acc_descr:23,acc_descr_value:24,acc_descr_multiline_value:25,section:26,clickStatement:27,taskTxt:28,taskData:29,openDirective:30,typeDirective:31,closeDirective:32,":":33,argDirective:34,click:35,callbackname:36,callbackargs:37,href:38,clickStatementDebug:39,open_directive:40,type_directive:41,arg_directive:42,close_directive:43,$accept:0,$end:1},terminals_:{2:"error",5:"gantt",7:"EOF",9:"SPACE",11:"NL",12:"dateFormat",13:"inclusiveEndDates",14:"topAxis",15:"axisFormat",16:"tickInterval",17:"excludes",18:"includes",19:"todayMarker",20:"title",21:"acc_title",22:"acc_title_value",23:"acc_descr",24:"acc_descr_value",25:"acc_descr_multiline_value",26:"section",28:"taskTxt",29:"taskData",33:":",35:"click",36:"callbackname",37:"callbackargs",38:"href",40:"open_directive",41:"type_directive",42:"arg_directive",43:"close_directive"},productions_:[0,[3,2],[3,3],[6,0],[6,2],[8,2],[8,1],[8,1],[8,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,2],[10,2],[10,1],[10,1],[10,1],[10,2],[10,1],[4,4],[4,6],[27,2],[27,3],[27,3],[27,4],[27,3],[27,4],[27,2],[39,2],[39,3],[39,3],[39,4],[39,3],[39,4],[39,2],[30,1],[31,1],[34,1],[32,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 2:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 9:r.setDateFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 10:r.enableInclusiveEndDates(),this.$=a[o].substr(18);break;case 11:r.TopAxis(),this.$=a[o].substr(8);break;case 12:r.setAxisFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 13:r.setTickInterval(a[o].substr(13)),this.$=a[o].substr(13);break;case 14:r.setExcludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 15:r.setIncludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 16:r.setTodayMarker(a[o].substr(12)),this.$=a[o].substr(12);break;case 17:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 18:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 19:case 20:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 23:r.addTask(a[o-1],a[o]),this.$="task";break;case 27:this.$=a[o-1],r.setClickEvent(a[o-1],a[o],null);break;case 28:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 29:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],null),r.setLink(a[o-2],a[o]);break;case 30:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setLink(a[o-3],a[o]);break;case 31:this.$=a[o-2],r.setClickEvent(a[o-2],a[o],null),r.setLink(a[o-2],a[o-1]);break;case 32:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-1],a[o]),r.setLink(a[o-3],a[o-2]);break;case 33:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 34:case 40:this.$=a[o-1]+" "+a[o];break;case 35:case 36:case 38:this.$=a[o-2]+" "+a[o-1]+" "+a[o];break;case 37:case 39:this.$=a[o-3]+" "+a[o-2]+" "+a[o-1]+" "+a[o];break;case 41:r.parseDirective("%%{","open_directive");break;case 42:r.parseDirective(a[o],"type_directive");break;case 43:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 44:r.parseDirective("}%%","close_directive","gantt")}},table:[{3:1,4:2,5:n,30:4,40:r},{1:[3]},{3:6,4:2,5:n,30:4,40:r},e(i,[2,3],{6:7}),{31:8,41:[1,9]},{41:[2,41]},{1:[2,1]},{4:30,7:[1,10],8:11,9:[1,12],10:13,11:[1,14],12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},{32:32,33:[1,33],43:x},e([33,43],[2,42]),e(i,[2,8],{1:[2,2]}),e(i,[2,4]),{4:30,10:35,12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,9]),e(i,[2,10]),e(i,[2,11]),e(i,[2,12]),e(i,[2,13]),e(i,[2,14]),e(i,[2,15]),e(i,[2,16]),e(i,[2,17]),{22:[1,36]},{24:[1,37]},e(i,[2,20]),e(i,[2,21]),e(i,[2,22]),{29:[1,38]},e(i,[2,24]),{36:[1,39],38:[1,40]},{11:[1,41]},{34:42,42:[1,43]},{11:[2,44]},e(i,[2,5]),e(i,[2,18]),e(i,[2,19]),e(i,[2,23]),e(i,[2,27],{37:[1,44],38:[1,45]}),e(i,[2,33],{36:[1,46]}),e(v,[2,25]),{32:47,43:x},{43:[2,43]},e(i,[2,28],{38:[1,48]}),e(i,[2,29]),e(i,[2,31],{37:[1,49]}),{11:[1,50]},e(i,[2,30]),e(i,[2,32]),e(v,[2,26])],defaultActions:{5:[2,41],6:[2,1],34:[2,44],43:[2,43]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),40;case 1:return this.begin("type_directive"),41;case 2:return this.popState(),this.begin("arg_directive"),33;case 3:return this.popState(),this.popState(),43;case 4:return 42;case 5:return this.begin("acc_title"),21;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),23;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 20:case 23:case 26:case 29:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:case 13:case 14:case 16:case 17:case 18:break;case 15:return 11;case 19:this.begin("href");break;case 21:return 38;case 22:this.begin("callbackname");break;case 24:this.popState(),this.begin("callbackargs");break;case 25:return 36;case 27:return 37;case 28:this.begin("click");break;case 30:return 35;case 31:return 5;case 32:return 12;case 33:return 13;case 34:return 14;case 35:return 15;case 36:return 16;case 37:return 18;case 38:return 17;case 39:return 19;case 40:return"date";case 41:return 20;case 42:return"accDescription";case 43:return 26;case 44:return 28;case 45:return 29;case 46:return 33;case 47:return 7;case 48:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%(?!\{)*[^\n]*)/i,/^(?:[^\}]%%*[^\n]*)/i,/^(?:%%*[^\n]*[\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:href[\s]+["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:call[\s]+)/i,/^(?:\([\s]*\))/i,/^(?:\()/i,/^(?:[^(]*)/i,/^(?:\))/i,/^(?:[^)]*)/i,/^(?:click[\s]+)/i,/^(?:[\s\n])/i,/^(?:[^\s\n]*)/i,/^(?:gantt\b)/i,/^(?:dateFormat\s[^#\n;]+)/i,/^(?:inclusiveEndDates\b)/i,/^(?:topAxis\b)/i,/^(?:axisFormat\s[^#\n;]+)/i,/^(?:tickInterval\s[^#\n;]+)/i,/^(?:includes\s[^#\n;]+)/i,/^(?:excludes\s[^#\n;]+)/i,/^(?:todayMarker\s[^\n;]+)/i,/^(?:\d\d\d\d-\d\d-\d\d\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accDescription\s[^#\n;]+)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[26,27],inclusive:!1},callbackname:{rules:[23,24,25],inclusive:!1},href:{rules:[20,21],inclusive:!1},click:{rules:[29,30],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,22,28,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Ec.parser=Ec;const Cc=Ec,Tc=t=>null!==t.match(/^\s*gantt/);a().extend(Et()),a().extend(Tt()),a().extend(At());let Sc,Ac="",Lc="",Bc="",Nc=[],Dc=[],Oc={},Mc=[],Ic=[],Fc="";const $c=["active","done","crit","milestone"];let Rc=[],Zc=!1,Pc=!1,jc=0;const Yc=function(t,e,n,r){return!r.includes(t.format(e.trim()))&&(!!(t.isoWeekday()>=6&&n.includes("weekends"))||(!!n.includes(t.format("dddd").toLowerCase())||n.includes(t.format(e.trim()))))},zc=function(t,e,n,r){if(!n.length||t.manualEndTime)return;let i,s;i=t.startTime instanceof Date?a()(t.startTime):a()(t.startTime,e,!0),i=i.add(1,"d"),s=t.endTime instanceof Date?a()(t.endTime):a()(t.endTime,e,!0);const[o,c]=Uc(i,s,e,n,r);t.endTime=o.toDate(),t.renderEndTime=c},Uc=function(t,e,n,r,i){let a=!1,s=null;for(;t<=e;)a||(s=e.toDate()),a=Yc(t,n,r,i),a&&(e=e.add(1,"d")),t=t.add(1,"d");return[e,s]},Wc=function(t,e,n){n=n.trim();const r=/^after\s+([\d\w- ]+)/.exec(n.trim());if(null!==r){let t=null;if(r[1].split(" ").forEach((function(e){let n=tl(e);void 0!==n&&(t?n.endTime>t.endTime&&(t=n):t=n)})),t)return t.endTime;{const t=new Date;return t.setHours(0,0,0,0),t}}let i=a()(n,e.trim(),!0);if(i.isValid())return i.toDate();{Nt.debug("Invalid date:"+n),Nt.debug("With date format:"+e.trim());const t=new Date(n);if(void 0===t||isNaN(t.getTime()))throw new Error("Invalid date:"+n);return t}},qc=function(t){const e=/^(\d+(?:\.\d+)?)([Mdhmswy]|ms)$/.exec(t.trim());return null!==e?[Number.parseFloat(e[1]),e[2]]:[NaN,"ms"]},Hc=function(t,e,n,r=!1){n=n.trim();let i=a()(n,e.trim(),!0);if(i.isValid())return r&&(i=i.add(1,"d")),i.toDate();let s=a()(t);const[o,c]=qc(n);if(!Number.isNaN(o)){const t=s.add(o,c);t.isValid()&&(s=t)}return s.toDate()};let Vc=0;const Gc=function(t){return void 0===t?(Vc+=1,"task"+Vc):t};let Xc,Kc,Qc=[];const Jc={},tl=function(t){const e=Jc[t];return Qc[e]},el=function(){const t=function(t){const e=Qc[t];let n="";switch(Qc[t].raw.startTime.type){case"prevTaskEnd":{const t=tl(e.prevTaskId);e.startTime=t.endTime;break}case"getStartDate":n=Wc(0,Ac,Qc[t].raw.startTime.startData),n&&(Qc[t].startTime=n)}return Qc[t].startTime&&(Qc[t].endTime=Hc(Qc[t].startTime,Ac,Qc[t].raw.endTime.data,Zc),Qc[t].endTime&&(Qc[t].processed=!0,Qc[t].manualEndTime=a()(Qc[t].raw.endTime.data,"YYYY-MM-DD",!0).isValid(),zc(Qc[t],Ac,Dc,Nc))),Qc[t].processed};let e=!0;for(const[n,r]of Qc.entries())t(n),e=e&&r.processed;return e},nl=function(t,e){t.split(",").forEach((function(t){let n=tl(t);void 0!==n&&n.classes.push(e)}))},rl=function(t,e){Rc.push((function(){const n=document.querySelector(`[id="${t}"]`);null!==n&&n.addEventListener("click",(function(){e()}))}),(function(){const n=document.querySelector(`[id="${t}-text"]`);null!==n&&n.addEventListener("click",(function(){e()}))}))},il={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gantt,clear:function(){Mc=[],Ic=[],Fc="",Rc=[],Vc=0,Xc=void 0,Kc=void 0,Qc=[],Ac="",Lc="",Sc=void 0,Bc="",Nc=[],Dc=[],Zc=!1,Pc=!1,jc=0,Oc={},Dr()},setDateFormat:function(t){Ac=t},getDateFormat:function(){return Ac},enableInclusiveEndDates:function(){Zc=!0},endDatesAreInclusive:function(){return Zc},enableTopAxis:function(){Pc=!0},topAxisEnabled:function(){return Pc},setAxisFormat:function(t){Lc=t},getAxisFormat:function(){return Lc},setTickInterval:function(t){Sc=t},getTickInterval:function(){return Sc},setTodayMarker:function(t){Bc=t},getTodayMarker:function(){return Bc},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){Fc=t,Mc.push(t)},getSections:function(){return Mc},getTasks:function(){let t=el();let e=0;for(;!t&&e<10;)t=el(),e++;return Ic=Qc,Ic},addTask:function(t,e){const n={section:Fc,type:Fc,processed:!1,manualEndTime:!1,renderEndTime:null,raw:{data:e},task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();switch(r.length){case 1:i.id=Gc(),i.startTime={type:"prevTaskEnd",id:t},i.endTime={data:r[0]};break;case 2:i.id=Gc(),i.startTime={type:"getStartDate",startData:r[0]},i.endTime={data:r[1]};break;case 3:i.id=Gc(r[0]),i.startTime={type:"getStartDate",startData:r[1]},i.endTime={data:r[2]}}return i}(Kc,e);n.raw.startTime=r.startTime,n.raw.endTime=r.endTime,n.id=r.id,n.prevTaskId=Kc,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,n.order=jc,jc++;const i=Qc.push(n);Kc=n.id,Jc[n.id]=i-1},findTaskById:tl,addTaskOrg:function(t,e){const n={section:Fc,type:Fc,description:t,task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();let s="";switch(r.length){case 1:i.id=Gc(),i.startTime=t.endTime,s=r[0];break;case 2:i.id=Gc(),i.startTime=Wc(0,Ac,r[0]),s=r[1];break;case 3:i.id=Gc(r[0]),i.startTime=Wc(0,Ac,r[1]),s=r[2]}return s&&(i.endTime=Hc(i.startTime,Ac,s,Zc),i.manualEndTime=a()(s,"YYYY-MM-DD",!0).isValid(),zc(i,Ac,Dc,Nc)),i}(Xc,e);n.startTime=r.startTime,n.endTime=r.endTime,n.id=r.id,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,Xc=n,Ic.push(n)},setIncludes:function(t){Nc=t.toLowerCase().split(/[\s,]+/)},getIncludes:function(){return Nc},setExcludes:function(t){Dc=t.toLowerCase().split(/[\s,]+/)},getExcludes:function(){return Dc},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){if("loose"!==ar().securityLevel)return;if(void 0===e)return;let r=[];if("string"==typeof n){r=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<r.length;t++){let e=r[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),r[t]=e}}0===r.length&&r.push(t),void 0!==tl(t)&&rl(t,(()=>{Gn.runFunc(e,...r)}))}(t,e,n)})),nl(t,"clickable")},setLink:function(t,e){let n=e;"loose"!==ar().securityLevel&&(n=(0,s.N)(e)),t.split(",").forEach((function(t){void 0!==tl(t)&&(rl(t,(()=>{window.open(n,"_self")})),Oc[t]=n)})),nl(t,"clickable")},getLinks:function(){return Oc},bindFunctions:function(t){Rc.forEach((function(e){e(t)}))},parseDuration:qc,isInvalidDate:Yc};function al(t,e,n){let r=!0;for(;r;)r=!1,n.forEach((function(n){const i=new RegExp("^\\s*"+n+"\\s*$");t[0].match(i)&&(e[n]=!0,t.shift(1),r=!0)}))}let sl;const ol={setConf:function(){Nt.debug("Something is calling, setConf, remove the call")},draw:function(t,e,n,r){const i=ar().gantt,s=ar().securityLevel;let c;"sandbox"===s&&(c=(0,o.Ys)("#i"+e));const l="sandbox"===s?(0,o.Ys)(c.nodes()[0].contentDocument.body):(0,o.Ys)("body"),h="sandbox"===s?c.nodes()[0].contentDocument:document,u=h.getElementById(e);sl=u.parentElement.offsetWidth,void 0===sl&&(sl=1200),void 0!==i.useWidth&&(sl=i.useWidth);const d=r.db.getTasks(),p=d.length*(i.barHeight+i.barGap)+2*i.topPadding;u.setAttribute("viewBox","0 0 "+sl+" "+p);const f=l.select(`[id="${e}"]`),g=(0,o.Xf)().domain([(0,o.VV$)(d,(function(t){return t.startTime})),(0,o.Fp7)(d,(function(t){return t.endTime}))]).rangeRound([0,sl-i.leftPadding-i.rightPadding]);let y=[];for(const a of d)y.push(a.type);const m=y;function b(t,e){return function(t){let e=t.length;const n={};for(;e;)n[t[--e]]=(n[t[e]]||0)+1;return n}(e)[t]||0}y=function(t){const e={},n=[];for(let r=0,i=t.length;r<i;++r)Object.prototype.hasOwnProperty.call(e,t[r])||(e[t[r]]=!0,n.push(t[r]));return n}(y),d.sort((function(t,e){const n=t.startTime,r=e.startTime;let i=0;return n>r?i=1:n<r&&(i=-1),i})),function(t,n,s){const c=i.barHeight,l=c+i.barGap,u=i.topPadding,d=i.leftPadding;(0,o.BYU)().domain([0,y.length]).range(["#00B9FA","#F95002"]).interpolate(o.JHv);(function(t,e,n,s,o,c,l,h){const u=c.reduce(((t,{startTime:e})=>t?Math.min(t,e):e),0),d=c.reduce(((t,{endTime:e})=>t?Math.max(t,e):e),0),p=r.db.getDateFormat();if(!u||!d)return;const y=[];let m=null,b=a()(u);for(;b.valueOf()<=d;)r.db.isInvalidDate(b,p,l,h)?m?m.end=b:m={start:b,end:b}:m&&(y.push(m),m=null),b=b.add(1,"d");f.append("g").selectAll("rect").data(y).enter().append("rect").attr("id",(function(t){return"exclude-"+t.start.format("YYYY-MM-DD")})).attr("x",(function(t){return g(t.start)+n})).attr("y",i.gridLineStartPadding).attr("width",(function(t){const e=t.end.add(1,"day");return g(e)-g(t.start)})).attr("height",o-e-i.gridLineStartPadding).attr("transform-origin",(function(e,r){return(g(e.start)+n+.5*(g(e.end)-g(e.start))).toString()+"px "+(r*t+.5*o).toString()+"px"})).attr("class","exclude-range")})(l,u,d,0,s,t,r.db.getExcludes(),r.db.getIncludes()),function(t,e,n,a){let s=(0,o.LLu)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));const c=/^([1-9]\d*)(minute|hour|day|week|month)$/.exec(r.db.getTickInterval()||i.tickInterval);if(null!==c){const t=c[1];switch(c[2]){case"minute":s.ticks(o.Z_i.every(t));break;case"hour":s.ticks(o.WQD.every(t));break;case"day":s.ticks(o.rr1.every(t));break;case"week":s.ticks(o.NGh.every(t));break;case"month":s.ticks(o.F0B.every(t))}}if(f.append("g").attr("class","grid").attr("transform","translate("+t+", "+(a-50)+")").call(s).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10).attr("dy","1em"),r.db.topAxisEnabled()||i.topAxis){let n=(0,o.F5q)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));if(null!==c){const t=c[1];switch(c[2]){case"minute":n.ticks(o.Z_i.every(t));break;case"hour":n.ticks(o.WQD.every(t));break;case"day":n.ticks(o.rr1.every(t));break;case"week":n.ticks(o.NGh.every(t));break;case"month":n.ticks(o.F0B.every(t))}}f.append("g").attr("class","grid").attr("transform","translate("+t+", "+e+")").call(n).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10)}}(d,u,0,s),function(t,n,a,s,c,l,h){f.append("g").selectAll("rect").data(t).enter().append("rect").attr("x",0).attr("y",(function(t,e){return t.order*n+a-2})).attr("width",(function(){return h-i.rightPadding/2})).attr("height",n).attr("class",(function(t){for(const[e,n]of y.entries())if(t.type===n)return"section section"+e%i.numberSectionStyles;return"section section0"}));const u=f.append("g").selectAll("rect").data(t).enter(),d=r.db.getLinks();u.append("rect").attr("id",(function(t){return t.id})).attr("rx",3).attr("ry",3).attr("x",(function(t){return t.milestone?g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))-.5*c:g(t.startTime)+s})).attr("y",(function(t,e){return t.order*n+a})).attr("width",(function(t){return t.milestone?c:g(t.renderEndTime||t.endTime)-g(t.startTime)})).attr("height",c).attr("transform-origin",(function(t,e){return e=t.order,(g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))).toString()+"px "+(e*n+a+.5*c).toString()+"px"})).attr("class",(function(t){const e="task";let n="";t.classes.length>0&&(n=t.classes.join(" "));let r=0;for(const[s,o]of y.entries())t.type===o&&(r=s%i.numberSectionStyles);let a="";return t.active?t.crit?a+=" activeCrit":a=" active":t.done?a=t.crit?" doneCrit":" done":t.crit&&(a+=" crit"),0===a.length&&(a=" task"),t.milestone&&(a=" milestone "+a),a+=r,a+=" "+n,e+a})),u.append("text").attr("id",(function(t){return t.id+"-text"})).text((function(t){return t.task})).attr("font-size",i.fontSize).attr("x",(function(t){let e=g(t.startTime),n=g(t.renderEndTime||t.endTime);t.milestone&&(e+=.5*(g(t.endTime)-g(t.startTime))-.5*c),t.milestone&&(n=e+c);const r=this.getBBox().width;return r>n-e?n+r+1.5*i.leftPadding>h?e+s-5:n+s+5:(n-e)/2+e+s})).attr("y",(function(t,e){return t.order*n+i.barHeight/2+(i.fontSize/2-2)+a})).attr("text-height",c).attr("class",(function(t){const e=g(t.startTime);let n=g(t.endTime);t.milestone&&(n=e+c);const r=this.getBBox().width;let a="";t.classes.length>0&&(a=t.classes.join(" "));let s=0;for(const[c,l]of y.entries())t.type===l&&(s=c%i.numberSectionStyles);let o="";return t.active&&(o=t.crit?"activeCritText"+s:"activeText"+s),t.done?o=t.crit?o+" doneCritText"+s:o+" doneText"+s:t.crit&&(o=o+" critText"+s),t.milestone&&(o+=" milestoneText"),r>n-e?n+r+1.5*i.leftPadding>h?a+" taskTextOutsideLeft taskTextOutside"+s+" "+o:a+" taskTextOutsideRight taskTextOutside"+s+" "+o+" width-"+r:a+" taskText taskText"+s+" "+o+" width-"+r}));if("sandbox"===ar().securityLevel){let t;t=(0,o.Ys)("#i"+e);const n=t.nodes()[0].contentDocument;u.filter((function(t){return void 0!==d[t.id]})).each((function(t){var e=n.querySelector("#"+t.id),r=n.querySelector("#"+t.id+"-text");const i=e.parentNode;var a=n.createElement("a");a.setAttribute("xlink:href",d[t.id]),a.setAttribute("target","_top"),i.appendChild(a),a.appendChild(e),a.appendChild(r)}))}}(t,l,u,d,c,0,n),function(t,e){const n=[];let r=0;for(const[i,a]of y.entries())n[i]=[a,b(a,m)];f.append("g").selectAll("text").data(n).enter().append((function(t){const e=t[0].split(Yt.lineBreakRegex),n=-(e.length-1)/2,r=h.createElementNS("http://www.w3.org/2000/svg","text");r.setAttribute("dy",n+"em");for(const[i,a]of e.entries()){const t=h.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttribute("alignment-baseline","central"),t.setAttribute("x","10"),i>0&&t.setAttribute("dy","1em"),t.textContent=a,r.appendChild(t)}return r})).attr("x",10).attr("y",(function(i,a){if(!(a>0))return i[1]*t/2+e;for(let s=0;s<a;s++)return r+=n[a-1][1],i[1]*t/2+r*t+e})).attr("font-size",i.sectionFontSize).attr("font-size",i.sectionFontSize).attr("class",(function(t){for(const[e,n]of y.entries())if(t[0]===n)return"sectionTitle sectionTitle"+e%i.numberSectionStyles;return"sectionTitle"}))}(l,u),function(t,e,n,a){const s=r.db.getTodayMarker();if("off"===s)return;const o=f.append("g").attr("class","today"),c=new Date,l=o.append("line");l.attr("x1",g(c)+t).attr("x2",g(c)+t).attr("y1",i.titleTopMargin).attr("y2",a-i.titleTopMargin).attr("class","today"),""!==s&&l.attr("style",s.replace(/,/g,";"))}(d,0,0,s)}(d,sl,p),dr(f,p,sl,i.useMaxWidth),f.append("text").text(r.db.getDiagramTitle()).attr("x",sl/2).attr("y",i.titleTopMargin).attr("class","titleText")}};var cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[6,9,10],r={trace:function(){},yy:{},symbols_:{error:2,start:3,info:4,document:5,EOF:6,line:7,statement:8,NL:9,showInfo:10,$accept:0,$end:1},terminals_:{2:"error",4:"info",6:"EOF",9:"NL",10:"showInfo"},productions_:[0,[3,3],[5,0],[5,2],[7,1],[7,1],[8,1]],performAction:function(t,e,n,r,i,a,s){switch(a.length,i){case 1:return r;case 4:break;case 6:r.setInfo(!0)}},table:[{3:1,4:[1,2]},{1:[3]},e(n,[2,2],{5:3}),{6:[1,4],7:5,8:6,9:[1,7],10:[1,8]},{1:[2,1]},e(n,[2,3]),e(n,[2,4]),e(n,[2,5]),e(n,[2,6])],defaultActions:{4:[2,1]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},i=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 4;case 1:return 9;case 2:return"space";case 3:return 10;case 4:return 6;case 5:return"TXT"}},rules:[/^(?:info\b)/i,/^(?:[\s\n\r]+)/i,/^(?:[\s]+)/i,/^(?:showInfo\b)/i,/^(?:$)/i,/^(?:.)/i],conditions:{INITIAL:{rules:[0,1,2,3,4,5],inclusive:!0}}},t);function a(){this.yy={}}return r.lexer=i,a.prototype=r,r.Parser=a,new a}();cl.parser=cl;const ll=cl;var hl="",ul=!1;const dl={setMessage:t=>{Nt.debug("Setting message to: "+t),hl=t},getMessage:()=>hl,setInfo:t=>{ul=t},getInfo:()=>ul,clear:Dr},pl={draw:(t,e,n)=>{try{Nt.debug("Rendering info diagram\n"+t);const r=ar().securityLevel;let i;"sandbox"===r&&(i=(0,o.Ys)("#i"+e));const a=("sandbox"===r?(0,o.Ys)(i.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select("#"+e);a.append("g").append("text").attr("x",100).attr("y",40).attr("class","version").attr("font-size","32px").style("text-anchor","middle").text("v "+n),a.attr("height",100),a.attr("width",400)}catch(r){Nt.error("Error while rendering info diagram"),Nt.error(r.message)}}},fl=t=>null!==t.match(/^\s*info/);var gl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,5],i=[1,6],a=[1,7],s=[1,9],o=[1,11,13,15,17,19,20,26,27,28,29],c=[2,5],l=[1,6,11,13,15,17,19,20,26,27,28,29],h=[26,27,28],u=[2,8],d=[1,18],p=[1,19],f=[1,20],g=[1,21],y=[1,22],m=[1,23],b=[1,28],_=[6,26,27,28,29],x={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,PIE:6,document:7,showData:8,line:9,statement:10,txt:11,value:12,title:13,title_value:14,acc_title:15,acc_title_value:16,acc_descr:17,acc_descr_value:18,acc_descr_multiline_value:19,section:20,openDirective:21,typeDirective:22,closeDirective:23,":":24,argDirective:25,NEWLINE:26,";":27,EOF:28,open_directive:29,type_directive:30,arg_directive:31,close_directive:32,$accept:0,$end:1},terminals_:{2:"error",6:"PIE",8:"showData",11:"txt",12:"value",13:"title",14:"title_value",15:"acc_title",16:"acc_title_value",17:"acc_descr",18:"acc_descr_value",19:"acc_descr_multiline_value",20:"section",24:":",26:"NEWLINE",27:";",28:"EOF",29:"open_directive",30:"type_directive",31:"arg_directive",32:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,3],[7,0],[7,2],[9,2],[10,0],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,1],[5,3],[5,5],[4,1],[4,1],[4,1],[21,1],[22,1],[25,1],[23,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setShowData(!0);break;case 7:this.$=a[o-1];break;case 9:r.addSection(a[o-1],r.cleanupValue(a[o]));break;case 10:this.$=a[o].trim(),r.setDiagramTitle(this.$);break;case 11:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 12:case 13:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 14:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 21:r.parseDirective("%%{","open_directive");break;case 22:r.parseDirective(a[o],"type_directive");break;case 23:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 24:r.parseDirective("}%%","close_directive","pie")}},table:[{3:1,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{1:[3]},{3:10,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{3:11,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},e(o,c,{7:12,8:[1,13]}),e(l,[2,18]),e(l,[2,19]),e(l,[2,20]),{22:14,30:[1,15]},{30:[2,21]},{1:[2,1]},{1:[2,2]},e(h,u,{21:8,9:16,10:17,5:24,1:[2,3],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(o,c,{7:25}),{23:26,24:[1,27],32:b},e([24,32],[2,22]),e(o,[2,6]),{4:29,26:r,27:i,28:a},{12:[1,30]},{14:[1,31]},{16:[1,32]},{18:[1,33]},e(h,[2,13]),e(h,[2,14]),e(h,[2,15]),e(h,u,{21:8,9:16,10:17,5:24,1:[2,4],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(_,[2,16]),{25:34,31:[1,35]},e(_,[2,24]),e(o,[2,7]),e(h,[2,9]),e(h,[2,10]),e(h,[2,11]),e(h,[2,12]),{23:36,32:b},{32:[2,23]},e(_,[2,17])],defaultActions:{9:[2,21],10:[2,1],11:[2,2],35:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},v=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),29;case 1:return this.begin("type_directive"),30;case 2:return this.popState(),this.begin("arg_directive"),24;case 3:return this.popState(),this.popState(),32;case 4:return 31;case 5:case 6:case 8:case 9:break;case 7:return 26;case 10:return this.begin("title"),13;case 11:return this.popState(),"title_value";case 12:return this.begin("acc_title"),15;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),17;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:case 20:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:this.begin("string");break;case 21:return"txt";case 22:return 6;case 23:return 8;case 24:return"value";case 25:return 28}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n\r]+)/i,/^(?:%%[^\n]*)/i,/^(?:[\s]+)/i,/^(?:title\b)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:pie\b)/i,/^(?:showData\b)/i,/^(?::[\s]*[\d]+(?:\.[\d]+)?)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},title:{rules:[11],inclusive:!1},string:{rules:[20,21],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,12,14,16,19,22,23,24,25],inclusive:!0}}},t);function k(){this.yy={}}return x.lexer=v,k.prototype=x,x.Parser=k,new k}();gl.parser=gl;const yl=gl,ml=t=>null!==t.match(/^\s*pie/)||null!==t.match(/^\s*bar/);let bl={},_l=!1;const xl={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().pie,addSection:function(t,e){t=Yt.sanitizeText(t,ar()),void 0===bl[t]&&(bl[t]=e,Nt.debug("Added new section :",t))},getSections:()=>bl,cleanupValue:function(t){return":"===t.substring(0,1)?(t=t.substring(1).trim(),Number(t.trim())):Number(t.trim())},clear:function(){bl={},_l=!1,Dr()},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setShowData:function(t){_l=t},getShowData:function(){return _l},getAccDescription:Fr,setAccDescription:Ir};let vl,kl=ar();const wl=450,El={draw:(t,e,n,r)=>{try{kl=ar(),Nt.debug("Rendering info diagram\n"+t);const n=ar().securityLevel;let y;"sandbox"===n&&(y=(0,o.Ys)("#i"+e));const m="sandbox"===n?(0,o.Ys)(y.nodes()[0].contentDocument.body):(0,o.Ys)("body"),b="sandbox"===n?y.nodes()[0].contentDocument:document;r.db.clear(),r.parser.parse(t),Nt.debug("Parsed info diagram");const _=b.getElementById(e);vl=_.parentElement.offsetWidth,void 0===vl&&(vl=1200),void 0!==kl.useWidth&&(vl=kl.useWidth),void 0!==kl.pie.useWidth&&(vl=kl.pie.useWidth);const x=m.select("#"+e);dr(x,wl,vl,kl.pie.useMaxWidth),_.setAttribute("viewBox","0 0 "+vl+" "+wl);var i=18,a=Math.min(vl,wl)/2-40,s=x.append("g").attr("transform","translate("+vl/2+",225)"),c=r.db.getSections(),l=0;Object.keys(c).forEach((function(t){l+=c[t]}));const v=kl.themeVariables;var h=[v.pie1,v.pie2,v.pie3,v.pie4,v.pie5,v.pie6,v.pie7,v.pie8,v.pie9,v.pie10,v.pie11,v.pie12],u=(0,o.PKp)().range(h),d=Object.entries(c).map((function(t,e){return{order:e,name:t[0],value:t[1]}})),p=(0,o.ve8)().value((function(t){return t.value})).sort((function(t,e){return t.order-e.order}))(d),f=(0,o.Nb1)().innerRadius(0).outerRadius(a);s.selectAll("mySlices").data(p).enter().append("path").attr("d",f).attr("fill",(function(t){return u(t.data.name)})).attr("class","pieCircle"),s.selectAll("mySlices").data(p).enter().append("text").text((function(t){return(t.data.value/l*100).toFixed(0)+"%"})).attr("transform",(function(t){return"translate("+f.centroid(t)+")"})).style("text-anchor","middle").attr("class","slice"),s.append("text").text(r.db.getDiagramTitle()).attr("x",0).attr("y",-200).attr("class","pieTitleText");var g=s.selectAll(".legend").data(u.domain()).enter().append("g").attr("class","legend").attr("transform",(function(t,e){return"translate(216,"+(22*e-22*u.domain().length/2)+")"}));g.append("rect").attr("width",i).attr("height",i).style("fill",u).style("stroke",u),g.data(p).append("text").attr("x",22).attr("y",14).text((function(t){return r.db.getShowData()||kl.showData||kl.pie.showData?t.data.name+" ["+t.data.value+"]":t.data.name}))}catch(y){Nt.error("Error while rendering info diagram"),Nt.error(y)}}};var Cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[1,6],a=[1,7],s=[1,8],o=[5,6,8,14,16,18,19,40,41,42,43,44,45,53,71,72],c=[1,22],l=[2,13],h=[1,26],u=[1,27],d=[1,28],p=[1,29],f=[1,30],g=[1,31],y=[1,24],m=[1,32],b=[1,33],_=[1,36],x=[71,72],v=[5,8,14,16,18,19,40,41,42,43,44,45,53,60,62,71,72],k=[1,56],w=[1,57],E=[1,58],C=[1,59],T=[1,60],S=[1,61],A=[1,62],L=[62,63],B=[1,74],N=[1,70],D=[1,71],O=[1,72],M=[1,73],I=[1,75],F=[1,79],$=[1,80],R=[1,77],Z=[1,78],P=[5,8,14,16,18,19,40,41,42,43,44,45,53,71,72],j={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,NEWLINE:5,RD:6,diagram:7,EOF:8,openDirective:9,typeDirective:10,closeDirective:11,":":12,argDirective:13,acc_title:14,acc_title_value:15,acc_descr:16,acc_descr_value:17,acc_descr_multiline_value:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,requirementDef:23,elementDef:24,relationshipDef:25,requirementType:26,requirementName:27,STRUCT_START:28,requirementBody:29,ID:30,COLONSEP:31,id:32,TEXT:33,text:34,RISK:35,riskLevel:36,VERIFYMTHD:37,verifyType:38,STRUCT_STOP:39,REQUIREMENT:40,FUNCTIONAL_REQUIREMENT:41,INTERFACE_REQUIREMENT:42,PERFORMANCE_REQUIREMENT:43,PHYSICAL_REQUIREMENT:44,DESIGN_CONSTRAINT:45,LOW_RISK:46,MED_RISK:47,HIGH_RISK:48,VERIFY_ANALYSIS:49,VERIFY_DEMONSTRATION:50,VERIFY_INSPECTION:51,VERIFY_TEST:52,ELEMENT:53,elementName:54,elementBody:55,TYPE:56,type:57,DOCREF:58,ref:59,END_ARROW_L:60,relationship:61,LINE:62,END_ARROW_R:63,CONTAINS:64,COPIES:65,DERIVES:66,SATISFIES:67,VERIFIES:68,REFINES:69,TRACES:70,unqString:71,qString:72,$accept:0,$end:1},terminals_:{2:"error",5:"NEWLINE",6:"RD",8:"EOF",12:":",14:"acc_title",15:"acc_title_value",16:"acc_descr",17:"acc_descr_value",18:"acc_descr_multiline_value",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",28:"STRUCT_START",30:"ID",31:"COLONSEP",33:"TEXT",35:"RISK",37:"VERIFYMTHD",39:"STRUCT_STOP",40:"REQUIREMENT",41:"FUNCTIONAL_REQUIREMENT",42:"INTERFACE_REQUIREMENT",43:"PERFORMANCE_REQUIREMENT",44:"PHYSICAL_REQUIREMENT",45:"DESIGN_CONSTRAINT",46:"LOW_RISK",47:"MED_RISK",48:"HIGH_RISK",49:"VERIFY_ANALYSIS",50:"VERIFY_DEMONSTRATION",51:"VERIFY_INSPECTION",52:"VERIFY_TEST",53:"ELEMENT",56:"TYPE",58:"DOCREF",60:"END_ARROW_L",62:"LINE",63:"END_ARROW_R",64:"CONTAINS",65:"COPIES",66:"DERIVES",67:"SATISFIES",68:"VERIFIES",69:"REFINES",70:"TRACES",71:"unqString",72:"qString"},productions_:[0,[3,3],[3,2],[3,4],[4,3],[4,5],[4,2],[4,2],[4,1],[9,1],[10,1],[13,1],[11,1],[7,0],[7,2],[7,2],[7,2],[7,2],[7,2],[23,5],[29,5],[29,5],[29,5],[29,5],[29,2],[29,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[36,1],[36,1],[36,1],[38,1],[38,1],[38,1],[38,1],[24,5],[55,5],[55,5],[55,2],[55,1],[25,5],[25,5],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[27,1],[27,1],[32,1],[32,1],[34,1],[34,1],[54,1],[54,1],[57,1],[57,1],[59,1],[59,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 6:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 7:case 8:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 9:r.parseDirective("%%{","open_directive");break;case 10:r.parseDirective(a[o],"type_directive");break;case 11:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 12:r.parseDirective("}%%","close_directive","pie");break;case 13:this.$=[];break;case 19:r.addRequirement(a[o-3],a[o-4]);break;case 20:r.setNewReqId(a[o-2]);break;case 21:r.setNewReqText(a[o-2]);break;case 22:r.setNewReqRisk(a[o-2]);break;case 23:r.setNewReqVerifyMethod(a[o-2]);break;case 26:this.$=r.RequirementType.REQUIREMENT;break;case 27:this.$=r.RequirementType.FUNCTIONAL_REQUIREMENT;break;case 28:this.$=r.RequirementType.INTERFACE_REQUIREMENT;break;case 29:this.$=r.RequirementType.PERFORMANCE_REQUIREMENT;break;case 30:this.$=r.RequirementType.PHYSICAL_REQUIREMENT;break;case 31:this.$=r.RequirementType.DESIGN_CONSTRAINT;break;case 32:this.$=r.RiskLevel.LOW_RISK;break;case 33:this.$=r.RiskLevel.MED_RISK;break;case 34:this.$=r.RiskLevel.HIGH_RISK;break;case 35:this.$=r.VerifyType.VERIFY_ANALYSIS;break;case 36:this.$=r.VerifyType.VERIFY_DEMONSTRATION;break;case 37:this.$=r.VerifyType.VERIFY_INSPECTION;break;case 38:this.$=r.VerifyType.VERIFY_TEST;break;case 39:r.addElement(a[o-3]);break;case 40:r.setNewElementType(a[o-2]);break;case 41:r.setNewElementDocRef(a[o-2]);break;case 44:r.addRelationship(a[o-2],a[o],a[o-4]);break;case 45:r.addRelationship(a[o-2],a[o-4],a[o]);break;case 46:this.$=r.Relationships.CONTAINS;break;case 47:this.$=r.Relationships.COPIES;break;case 48:this.$=r.Relationships.DERIVES;break;case 49:this.$=r.Relationships.SATISFIES;break;case 50:this.$=r.Relationships.VERIFIES;break;case 51:this.$=r.Relationships.REFINES;break;case 52:this.$=r.Relationships.TRACES}},table:[{3:1,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[3]},{3:10,4:2,5:[1,9],6:n,9:4,14:r,16:i,18:a,19:s},{5:[1,11]},{10:12,20:[1,13]},{15:[1,14]},{17:[1,15]},e(o,[2,8]),{20:[2,9]},{3:16,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[2,2]},{4:21,5:c,7:17,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{11:34,12:[1,35],22:_},e([12,22],[2,10]),e(o,[2,6]),e(o,[2,7]),{1:[2,1]},{8:[1,37]},{4:21,5:c,7:38,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:39,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:40,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:41,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:42,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{27:43,71:[1,44],72:[1,45]},{54:46,71:[1,47],72:[1,48]},{60:[1,49],62:[1,50]},e(x,[2,26]),e(x,[2,27]),e(x,[2,28]),e(x,[2,29]),e(x,[2,30]),e(x,[2,31]),e(v,[2,55]),e(v,[2,56]),e(o,[2,4]),{13:51,21:[1,52]},e(o,[2,12]),{1:[2,3]},{8:[2,14]},{8:[2,15]},{8:[2,16]},{8:[2,17]},{8:[2,18]},{28:[1,53]},{28:[2,53]},{28:[2,54]},{28:[1,54]},{28:[2,59]},{28:[2,60]},{61:55,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{61:63,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{11:64,22:_},{22:[2,11]},{5:[1,65]},{5:[1,66]},{62:[1,67]},e(L,[2,46]),e(L,[2,47]),e(L,[2,48]),e(L,[2,49]),e(L,[2,50]),e(L,[2,51]),e(L,[2,52]),{63:[1,68]},e(o,[2,5]),{5:B,29:69,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:76,56:R,58:Z},{32:81,71:m,72:b},{32:82,71:m,72:b},e(P,[2,19]),{31:[1,83]},{31:[1,84]},{31:[1,85]},{31:[1,86]},{5:B,29:87,30:N,33:D,35:O,37:M,39:I},e(P,[2,25]),e(P,[2,39]),{31:[1,88]},{31:[1,89]},{5:F,39:$,55:90,56:R,58:Z},e(P,[2,43]),e(P,[2,44]),e(P,[2,45]),{32:91,71:m,72:b},{34:92,71:[1,93],72:[1,94]},{36:95,46:[1,96],47:[1,97],48:[1,98]},{38:99,49:[1,100],50:[1,101],51:[1,102],52:[1,103]},e(P,[2,24]),{57:104,71:[1,105],72:[1,106]},{59:107,71:[1,108],72:[1,109]},e(P,[2,42]),{5:[1,110]},{5:[1,111]},{5:[2,57]},{5:[2,58]},{5:[1,112]},{5:[2,32]},{5:[2,33]},{5:[2,34]},{5:[1,113]},{5:[2,35]},{5:[2,36]},{5:[2,37]},{5:[2,38]},{5:[1,114]},{5:[2,61]},{5:[2,62]},{5:[1,115]},{5:[2,63]},{5:[2,64]},{5:B,29:116,30:N,33:D,35:O,37:M,39:I},{5:B,29:117,30:N,33:D,35:O,37:M,39:I},{5:B,29:118,30:N,33:D,35:O,37:M,39:I},{5:B,29:119,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:120,56:R,58:Z},{5:F,39:$,55:121,56:R,58:Z},e(P,[2,20]),e(P,[2,21]),e(P,[2,22]),e(P,[2,23]),e(P,[2,40]),e(P,[2,41])],defaultActions:{8:[2,9],10:[2,2],16:[2,1],37:[2,3],38:[2,14],39:[2,15],40:[2,16],41:[2,17],42:[2,18],44:[2,53],45:[2,54],47:[2,59],48:[2,60],52:[2,11],93:[2,57],94:[2,58],96:[2,32],97:[2,33],98:[2,34],100:[2,35],101:[2,36],102:[2,37],103:[2,38],105:[2,61],106:[2,62],108:[2,63],109:[2,64]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},Y=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return this.begin("type_directive"),20;case 2:return this.popState(),this.begin("arg_directive"),12;case 3:return this.popState(),this.popState(),22;case 4:return 21;case 5:return"title";case 6:return this.begin("acc_title"),14;case 7:return this.popState(),"acc_title_value";case 8:return this.begin("acc_descr"),16;case 9:return this.popState(),"acc_descr_value";case 10:this.begin("acc_descr_multiline");break;case 11:case 53:this.popState();break;case 12:return"acc_descr_multiline_value";case 13:return 5;case 14:case 15:case 16:break;case 17:return 8;case 18:return 6;case 19:return 28;case 20:return 39;case 21:return 31;case 22:return 30;case 23:return 33;case 24:return 35;case 25:return 37;case 26:return 40;case 27:return 41;case 28:return 42;case 29:return 43;case 30:return 44;case 31:return 45;case 32:return 46;case 33:return 47;case 34:return 48;case 35:return 49;case 36:return 50;case 37:return 51;case 38:return 52;case 39:return 53;case 40:return 64;case 41:return 65;case 42:return 66;case 43:return 67;case 44:return 68;case 45:return 69;case 46:return 70;case 47:return 56;case 48:return 58;case 49:return 60;case 50:return 63;case 51:return 62;case 52:this.begin("string");break;case 54:return"qString";case 55:return e.yytext=e.yytext.trim(),71}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:$)/i,/^(?:requirementDiagram\b)/i,/^(?:\{)/i,/^(?:\})/i,/^(?::)/i,/^(?:id\b)/i,/^(?:text\b)/i,/^(?:risk\b)/i,/^(?:verifyMethod\b)/i,/^(?:requirement\b)/i,/^(?:functionalRequirement\b)/i,/^(?:interfaceRequirement\b)/i,/^(?:performanceRequirement\b)/i,/^(?:physicalRequirement\b)/i,/^(?:designConstraint\b)/i,/^(?:low\b)/i,/^(?:medium\b)/i,/^(?:high\b)/i,/^(?:analysis\b)/i,/^(?:demonstration\b)/i,/^(?:inspection\b)/i,/^(?:test\b)/i,/^(?:element\b)/i,/^(?:contains\b)/i,/^(?:copies\b)/i,/^(?:derives\b)/i,/^(?:satisfies\b)/i,/^(?:verifies\b)/i,/^(?:refines\b)/i,/^(?:traces\b)/i,/^(?:type\b)/i,/^(?:docref\b)/i,/^(?:<-)/i,/^(?:->)/i,/^(?:-)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[\w][^\r\n\{\<\>\-\=]*)/i],conditions:{acc_descr_multiline:{rules:[11,12],inclusive:!1},acc_descr:{rules:[9],inclusive:!1},acc_title:{rules:[7],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},unqString:{rules:[],inclusive:!1},token:{rules:[],inclusive:!1},string:{rules:[53,54],inclusive:!1},INITIAL:{rules:[0,5,6,8,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,55],inclusive:!0}}},t);function z(){this.yy={}}return j.lexer=Y,z.prototype=j,j.Parser=z,new z}();Cl.parser=Cl;const Tl=Cl,Sl=t=>null!==t.match(/^\s*requirement(Diagram)?/);let Al=[],Ll={},Bl={},Nl={},Dl={};const Ol={RequirementType:{REQUIREMENT:"Requirement",FUNCTIONAL_REQUIREMENT:"Functional Requirement",INTERFACE_REQUIREMENT:"Interface Requirement",PERFORMANCE_REQUIREMENT:"Performance Requirement",PHYSICAL_REQUIREMENT:"Physical Requirement",DESIGN_CONSTRAINT:"Design Constraint"},RiskLevel:{LOW_RISK:"Low",MED_RISK:"Medium",HIGH_RISK:"High"},VerifyType:{VERIFY_ANALYSIS:"Analysis",VERIFY_DEMONSTRATION:"Demonstration",VERIFY_INSPECTION:"Inspection",VERIFY_TEST:"Test"},Relationships:{CONTAINS:"contains",COPIES:"copies",DERIVES:"derives",SATISFIES:"satisfies",VERIFIES:"verifies",REFINES:"refines",TRACES:"traces"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().req,addRequirement:(t,e)=>(void 0===Bl[t]&&(Bl[t]={name:t,type:e,id:Ll.id,text:Ll.text,risk:Ll.risk,verifyMethod:Ll.verifyMethod}),Ll={},Bl[t]),getRequirements:()=>Bl,setNewReqId:t=>{void 0!==Ll&&(Ll.id=t)},setNewReqText:t=>{void 0!==Ll&&(Ll.text=t)},setNewReqRisk:t=>{void 0!==Ll&&(Ll.risk=t)},setNewReqVerifyMethod:t=>{void 0!==Ll&&(Ll.verifyMethod=t)},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addElement:t=>(void 0===Dl[t]&&(Dl[t]={name:t,type:Nl.type,docRef:Nl.docRef},Nt.info("Added new requirement: ",t)),Nl={},Dl[t]),getElements:()=>Dl,setNewElementType:t=>{void 0!==Nl&&(Nl.type=t)},setNewElementDocRef:t=>{void 0!==Nl&&(Nl.docRef=t)},addRelationship:(t,e,n)=>{Al.push({type:t,src:e,dst:n})},getRelationships:()=>Al,clear:()=>{Al=[],Ll={},Bl={},Nl={},Dl={},Dr()}},Ml={CONTAINS:"contains",ARROW:"arrow"},Il=Ml,Fl=(t,e)=>{let n=t.append("defs").append("marker").attr("id",Ml.CONTAINS+"_line_ending").attr("refX",0).attr("refY",e.line_height/2).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("g");n.append("circle").attr("cx",e.line_height/2).attr("cy",e.line_height/2).attr("r",e.line_height/2).attr("fill","none"),n.append("line").attr("x1",0).attr("x2",e.line_height).attr("y1",e.line_height/2).attr("y2",e.line_height/2).attr("stroke-width",1),n.append("line").attr("y1",0).attr("y2",e.line_height).attr("x1",e.line_height/2).attr("x2",e.line_height/2).attr("stroke-width",1),t.append("defs").append("marker").attr("id",Ml.ARROW+"_line_ending").attr("refX",e.line_height).attr("refY",.5*e.line_height).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("path").attr("d",`M0,0\n      L${e.line_height},${e.line_height/2}\n      M${e.line_height},${e.line_height/2}\n      L0,${e.line_height}`).attr("stroke-width",1)};let $l={},Rl=0;const Zl=(t,e)=>t.insert("rect","#"+e).attr("class","req reqBox").attr("x",0).attr("y",0).attr("width",$l.rect_min_width+"px").attr("height",$l.rect_min_height+"px"),Pl=(t,e,n)=>{let r=$l.rect_min_width/2,i=t.append("text").attr("class","req reqLabel reqTitle").attr("id",e).attr("x",r).attr("y",$l.rect_padding).attr("dominant-baseline","hanging"),a=0;n.forEach((t=>{0==a?i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",0).text(t):i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",.75*$l.line_height).text(t),a++}));let s=1.5*$l.rect_padding+a*$l.line_height*.75;return t.append("line").attr("class","req-title-line").attr("x1","0").attr("x2",$l.rect_min_width).attr("y1",s).attr("y2",s),{titleNode:i,y:s}},jl=(t,e,n,r)=>{let i=t.append("text").attr("class","req reqLabel").attr("id",e).attr("x",$l.rect_padding).attr("y",r).attr("dominant-baseline","hanging"),a=0;let s=[];return n.forEach((t=>{let e=t.length;for(;e>30&&a<3;){let n=t.substring(0,30);e=(t=t.substring(30,t.length)).length,s[s.length]=n,a++}if(3==a){let t=s[s.length-1];s[s.length-1]=t.substring(0,t.length-4)+"..."}else s[s.length]=t;a=0})),s.forEach((t=>{i.append("tspan").attr("x",$l.rect_padding).attr("dy",$l.line_height).text(t)})),i},Yl=function(t,e,n,r,i){const a=n.edge(zl(e.src),zl(e.dst)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})),c=t.insert("path","#"+r).attr("class","er relationshipLine").attr("d",s(a.points)).attr("fill","none");e.type==i.db.Relationships.CONTAINS?c.attr("marker-start","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+e.type+"_line_ending)"):(c.attr("stroke-dasharray","10,7"),c.attr("marker-end","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+Il.ARROW+"_line_ending)")),((t,e,n,r)=>{const i=e.node().getTotalLength(),a=e.node().getPointAtLength(.5*i),s="rel"+Rl;Rl++;const o=t.append("text").attr("class","req relationshipLabel").attr("id",s).attr("x",a.x).attr("y",a.y).attr("text-anchor","middle").attr("dominant-baseline","middle").text(r).node().getBBox();t.insert("rect","#"+s).attr("class","req reqLabelBox").attr("x",a.x-o.width/2).attr("y",a.y-o.height/2).attr("width",o.width).attr("height",o.height).attr("fill","white").attr("fill-opacity","85%")})(t,c,0,`<<${e.type}>>`)},zl=t=>t.replace(/\s/g,"").replace(/\./g,"_"),Ul={draw:(t,e,n,r)=>{$l=ar().requirement,r.db.clear(),r.parser.parse(t);const i=$l.securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);Fl(s,$l);const c=new ht.k({multigraph:!1,compound:!1,directed:!0}).setGraph({rankdir:$l.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));let l=r.db.getRequirements(),h=r.db.getElements(),u=r.db.getRelationships();var d,p,f;d=l,p=c,f=s,Object.keys(d).forEach((t=>{let e=d[t];t=zl(t),Nt.info("Added new requirement: ",t);const n=f.append("g").attr("id",t),r=Zl(n,"req-"+t);let i=Pl(n,t+"_title",[`<<${e.type}>>`,`${e.name}`]);jl(n,t+"_body",[`Id: ${e.id}`,`Text: ${e.text}`,`Risk: ${e.risk}`,`Verification: ${e.verifyMethod}`],i.y);const a=r.node().getBBox();p.setNode(t,{width:a.width,height:a.height,shape:"rect",id:t})})),((t,e,n)=>{Object.keys(t).forEach((r=>{let i=t[r];const a=zl(r),s=n.append("g").attr("id",a),o="element-"+a,c=Zl(s,o);let l=Pl(s,o+"_title",["<<Element>>",`${r}`]);jl(s,o+"_body",[`Type: ${i.type||"Not Specified"}`,`Doc Ref: ${i.docRef||"None"}`],l.y);const h=c.node().getBBox();e.setNode(a,{width:h.width,height:h.height,shape:"rect",id:a})}))})(h,c,s),((t,e)=>{t.forEach((function(t){let n=zl(t.src),r=zl(t.dst);e.setEdge(n,r,{relationship:t})}))})(u,c),(0,lt.bK)(c),function(t,e){e.nodes().forEach((function(n){void 0!==n&&void 0!==e.node(n)&&(t.select("#"+n),t.select("#"+n).attr("transform","translate("+(e.node(n).x-e.node(n).width/2)+","+(e.node(n).y-e.node(n).height/2)+" )"))}))}(s,c),u.forEach((function(t){Yl(s,t,c,e,r)}));const g=$l.rect_padding,y=s.node().getBBox(),m=y.width+2*g,b=y.height+2*g;dr(s,b,m,$l.useMaxWidth),s.attr("viewBox",`${y.x-g} ${y.y-g} ${m} ${b}`)}};var Wl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,19],h=[1,21],u=[1,22],d=[1,23],p=[1,29],f=[1,30],g=[1,31],y=[1,32],m=[1,33],b=[1,34],_=[1,35],x=[1,36],v=[1,37],k=[1,38],w=[1,39],E=[1,40],C=[1,42],T=[1,43],S=[1,45],A=[1,46],L=[1,47],B=[1,48],N=[1,49],D=[1,50],O=[1,53],M=[1,4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],I=[4,5,21,54,56],F=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],$=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,53,54,56,57,62,63,64,65,73,83],R=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,52,54,56,57,62,63,64,65,73,83],Z=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,54,56,57,62,63,64,65,73,83],P=[71,72,73],j=[1,125],Y=[1,4,5,7,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],z={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NEWLINE:5,directive:6,SD:7,document:8,line:9,statement:10,box_section:11,box_line:12,participant_statement:13,openDirective:14,typeDirective:15,closeDirective:16,":":17,argDirective:18,box:19,restOfLine:20,end:21,signal:22,autonumber:23,NUM:24,off:25,activate:26,actor:27,deactivate:28,note_statement:29,links_statement:30,link_statement:31,properties_statement:32,details_statement:33,title:34,legacy_title:35,acc_title:36,acc_title_value:37,acc_descr:38,acc_descr_value:39,acc_descr_multiline_value:40,loop:41,rect:42,opt:43,alt:44,else_sections:45,par:46,par_sections:47,critical:48,option_sections:49,break:50,option:51,and:52,else:53,participant:54,AS:55,participant_actor:56,note:57,placement:58,text2:59,over:60,actor_pair:61,links:62,link:63,properties:64,details:65,spaceList:66,",":67,left_of:68,right_of:69,signaltype:70,"+":71,"-":72,ACTOR:73,SOLID_OPEN_ARROW:74,DOTTED_OPEN_ARROW:75,SOLID_ARROW:76,DOTTED_ARROW:77,SOLID_CROSS:78,DOTTED_CROSS:79,SOLID_POINT:80,DOTTED_POINT:81,TXT:82,open_directive:83,type_directive:84,arg_directive:85,close_directive:86,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NEWLINE",7:"SD",17:":",19:"box",20:"restOfLine",21:"end",23:"autonumber",24:"NUM",25:"off",26:"activate",28:"deactivate",34:"title",35:"legacy_title",36:"acc_title",37:"acc_title_value",38:"acc_descr",39:"acc_descr_value",40:"acc_descr_multiline_value",41:"loop",42:"rect",43:"opt",44:"alt",46:"par",48:"critical",50:"break",51:"option",52:"and",53:"else",54:"participant",55:"AS",56:"participant_actor",57:"note",60:"over",62:"links",63:"link",64:"properties",65:"details",67:",",68:"left_of",69:"right_of",71:"+",72:"-",73:"ACTOR",74:"SOLID_OPEN_ARROW",75:"DOTTED_OPEN_ARROW",76:"SOLID_ARROW",77:"DOTTED_ARROW",78:"SOLID_CROSS",79:"DOTTED_CROSS",80:"SOLID_POINT",81:"DOTTED_POINT",82:"TXT",83:"open_directive",84:"type_directive",85:"arg_directive",86:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[11,0],[11,2],[12,2],[12,1],[12,1],[6,4],[6,6],[10,1],[10,4],[10,2],[10,4],[10,3],[10,3],[10,2],[10,3],[10,3],[10,2],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,2],[10,2],[10,1],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,1],[49,1],[49,4],[47,1],[47,4],[45,1],[45,4],[13,5],[13,3],[13,5],[13,3],[29,4],[29,4],[30,3],[31,3],[32,3],[33,3],[66,2],[66,1],[61,3],[61,1],[58,1],[58,1],[22,5],[22,5],[22,4],[27,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[59,1],[14,1],[15,1],[18,1],[16,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.apply(a[o]),a[o];case 5:case 10:case 9:case 14:this.$=[];break;case 6:case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 7:case 8:case 12:case 13:case 63:this.$=a[o];break;case 18:a[o-1].unshift({type:"boxStart",boxData:r.parseBoxData(a[o-2])}),a[o-1].push({type:"boxEnd",boxText:a[o-2]}),this.$=a[o-1];break;case 20:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-2]),sequenceIndexStep:Number(a[o-1]),sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 21:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-1]),sequenceIndexStep:1,sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 22:this.$={type:"sequenceIndex",sequenceVisible:!1,signalType:r.LINETYPE.AUTONUMBER};break;case 23:this.$={type:"sequenceIndex",sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 24:this.$={type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]};break;case 25:this.$={type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-1]};break;case 31:r.setDiagramTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 32:r.setDiagramTitle(a[o].substring(7)),this.$=a[o].substring(7);break;case 33:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 34:case 35:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 36:a[o-1].unshift({type:"loopStart",loopText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.LOOP_START}),a[o-1].push({type:"loopEnd",loopText:a[o-2],signalType:r.LINETYPE.LOOP_END}),this.$=a[o-1];break;case 37:a[o-1].unshift({type:"rectStart",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_START}),a[o-1].push({type:"rectEnd",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_END}),this.$=a[o-1];break;case 38:a[o-1].unshift({type:"optStart",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_START}),a[o-1].push({type:"optEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_END}),this.$=a[o-1];break;case 39:a[o-1].unshift({type:"altStart",altText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.ALT_START}),a[o-1].push({type:"altEnd",signalType:r.LINETYPE.ALT_END}),this.$=a[o-1];break;case 40:a[o-1].unshift({type:"parStart",parText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.PAR_START}),a[o-1].push({type:"parEnd",signalType:r.LINETYPE.PAR_END}),this.$=a[o-1];break;case 41:a[o-1].unshift({type:"criticalStart",criticalText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.CRITICAL_START}),a[o-1].push({type:"criticalEnd",signalType:r.LINETYPE.CRITICAL_END}),this.$=a[o-1];break;case 42:a[o-1].unshift({type:"breakStart",breakText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_START}),a[o-1].push({type:"breakEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_END}),this.$=a[o-1];break;case 45:this.$=a[o-3].concat([{type:"option",optionText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.CRITICAL_OPTION},a[o]]);break;case 47:this.$=a[o-3].concat([{type:"and",parText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.PAR_AND},a[o]]);break;case 49:this.$=a[o-3].concat([{type:"else",altText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.ALT_ELSE},a[o]]);break;case 50:a[o-3].type="addParticipant",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 51:a[o-1].type="addParticipant",this.$=a[o-1];break;case 52:a[o-3].type="addActor",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 53:a[o-1].type="addActor",this.$=a[o-1];break;case 54:this.$=[a[o-1],{type:"addNote",placement:a[o-2],actor:a[o-1].actor,text:a[o]}];break;case 55:a[o-2]=[].concat(a[o-1],a[o-1]).slice(0,2),a[o-2][0]=a[o-2][0].actor,a[o-2][1]=a[o-2][1].actor,this.$=[a[o-1],{type:"addNote",placement:r.PLACEMENT.OVER,actor:a[o-2].slice(0,2),text:a[o]}];break;case 56:this.$=[a[o-1],{type:"addLinks",actor:a[o-1].actor,text:a[o]}];break;case 57:this.$=[a[o-1],{type:"addALink",actor:a[o-1].actor,text:a[o]}];break;case 58:this.$=[a[o-1],{type:"addProperties",actor:a[o-1].actor,text:a[o]}];break;case 59:this.$=[a[o-1],{type:"addDetails",actor:a[o-1].actor,text:a[o]}];break;case 62:this.$=[a[o-2],a[o]];break;case 64:this.$=r.PLACEMENT.LEFTOF;break;case 65:this.$=r.PLACEMENT.RIGHTOF;break;case 66:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]}];break;case 67:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-4]}];break;case 68:this.$=[a[o-3],a[o-1],{type:"addMessage",from:a[o-3].actor,to:a[o-1].actor,signalType:a[o-2],msg:a[o]}];break;case 69:this.$={type:"addParticipant",actor:a[o]};break;case 70:this.$=r.LINETYPE.SOLID_OPEN;break;case 71:this.$=r.LINETYPE.DOTTED_OPEN;break;case 72:this.$=r.LINETYPE.SOLID;break;case 73:this.$=r.LINETYPE.DOTTED;break;case 74:this.$=r.LINETYPE.SOLID_CROSS;break;case 75:this.$=r.LINETYPE.DOTTED_CROSS;break;case 76:this.$=r.LINETYPE.SOLID_POINT;break;case 77:this.$=r.LINETYPE.DOTTED_POINT;break;case 78:this.$=r.parseMessage(a[o].trim().substring(1));break;case 79:r.parseDirective("%%{","open_directive");break;case 80:r.parseDirective(a[o],"type_directive");break;case 81:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 82:r.parseDirective("}%%","close_directive","sequence")}},table:[{3:1,4:n,5:r,6:4,7:i,14:6,83:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,14:6,83:a},{3:9,4:n,5:r,6:4,7:i,14:6,83:a},{3:10,4:n,5:r,6:4,7:i,14:6,83:a},e([1,4,5,19,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],s,{8:11}),{15:12,84:[1,13]},{84:[2,79]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{16:51,17:[1,52],86:O},e([17,86],[2,80]),e(M,[2,6]),{6:41,10:54,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},e(M,[2,8]),e(M,[2,9]),e(M,[2,17]),{20:[1,55]},{5:[1,56]},{5:[1,59],24:[1,57],25:[1,58]},{27:60,73:D},{27:61,73:D},{5:[1,62]},{5:[1,63]},{5:[1,64]},{5:[1,65]},{5:[1,66]},e(M,[2,31]),e(M,[2,32]),{37:[1,67]},{39:[1,68]},e(M,[2,35]),{20:[1,69]},{20:[1,70]},{20:[1,71]},{20:[1,72]},{20:[1,73]},{20:[1,74]},{20:[1,75]},e(M,[2,43]),{27:76,73:D},{27:77,73:D},{70:78,74:[1,79],75:[1,80],76:[1,81],77:[1,82],78:[1,83],79:[1,84],80:[1,85],81:[1,86]},{58:87,60:[1,88],68:[1,89],69:[1,90]},{27:91,73:D},{27:92,73:D},{27:93,73:D},{27:94,73:D},e([5,55,67,74,75,76,77,78,79,80,81,82],[2,69]),{5:[1,95]},{18:96,85:[1,97]},{5:[2,82]},e(M,[2,7]),e(I,[2,10],{11:98}),e(M,[2,19]),{5:[1,100],24:[1,99]},{5:[1,101]},e(M,[2,23]),{5:[1,102]},{5:[1,103]},e(M,[2,26]),e(M,[2,27]),e(M,[2,28]),e(M,[2,29]),e(M,[2,30]),e(M,[2,33]),e(M,[2,34]),e(F,s,{8:104}),e(F,s,{8:105}),e(F,s,{8:106}),e($,s,{45:107,8:108}),e(R,s,{47:109,8:110}),e(Z,s,{49:111,8:112}),e(F,s,{8:113}),{5:[1,115],55:[1,114]},{5:[1,117],55:[1,116]},{27:120,71:[1,118],72:[1,119],73:D},e(P,[2,70]),e(P,[2,71]),e(P,[2,72]),e(P,[2,73]),e(P,[2,74]),e(P,[2,75]),e(P,[2,76]),e(P,[2,77]),{27:121,73:D},{27:123,61:122,73:D},{73:[2,64]},{73:[2,65]},{59:124,82:j},{59:126,82:j},{59:127,82:j},{59:128,82:j},e(Y,[2,15]),{16:129,86:O},{86:[2,81]},{4:[1,132],5:[1,134],12:131,13:133,21:[1,130],54:C,56:T},{5:[1,135]},e(M,[2,21]),e(M,[2,22]),e(M,[2,24]),e(M,[2,25]),{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,136],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,137],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,138],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,139]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,48],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,53:[1,140],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,141]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,46],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,52:[1,142],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,143]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,44],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,51:[1,144],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,145],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{20:[1,146]},e(M,[2,51]),{20:[1,147]},e(M,[2,53]),{27:148,73:D},{27:149,73:D},{59:150,82:j},{59:151,82:j},{59:152,82:j},{67:[1,153],82:[2,63]},{5:[2,56]},{5:[2,78]},{5:[2,57]},{5:[2,58]},{5:[2,59]},{5:[1,154]},e(M,[2,18]),e(I,[2,11]),{13:155,54:C,56:T},e(I,[2,13]),e(I,[2,14]),e(M,[2,20]),e(M,[2,36]),e(M,[2,37]),e(M,[2,38]),e(M,[2,39]),{20:[1,156]},e(M,[2,40]),{20:[1,157]},e(M,[2,41]),{20:[1,158]},e(M,[2,42]),{5:[1,159]},{5:[1,160]},{59:161,82:j},{59:162,82:j},{5:[2,68]},{5:[2,54]},{5:[2,55]},{27:163,73:D},e(Y,[2,16]),e(I,[2,12]),e($,s,{8:108,45:164}),e(R,s,{8:110,47:165}),e(Z,s,{8:112,49:166}),e(M,[2,50]),e(M,[2,52]),{5:[2,66]},{5:[2,67]},{82:[2,62]},{21:[2,49]},{21:[2,47]},{21:[2,45]}],defaultActions:{7:[2,79],8:[2,1],9:[2,2],10:[2,3],53:[2,82],89:[2,64],90:[2,65],97:[2,81],124:[2,56],125:[2,78],126:[2,57],127:[2,58],128:[2,59],150:[2,68],151:[2,54],152:[2,55],161:[2,66],162:[2,67],163:[2,62],164:[2,49],165:[2,47],166:[2,45]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},U=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),83;case 1:return this.begin("type_directive"),84;case 2:return this.popState(),this.begin("arg_directive"),17;case 3:return this.popState(),this.popState(),86;case 4:return 85;case 5:case 53:case 66:return 5;case 6:case 7:case 8:case 9:case 10:break;case 11:return 24;case 12:return this.begin("LINE"),19;case 13:return this.begin("ID"),54;case 14:return this.begin("ID"),56;case 15:return e.yytext=e.yytext.trim(),this.begin("ALIAS"),73;case 16:return this.popState(),this.popState(),this.begin("LINE"),55;case 17:return this.popState(),this.popState(),5;case 18:return this.begin("LINE"),41;case 19:return this.begin("LINE"),42;case 20:return this.begin("LINE"),43;case 21:return this.begin("LINE"),44;case 22:return this.begin("LINE"),53;case 23:return this.begin("LINE"),46;case 24:return this.begin("LINE"),52;case 25:return this.begin("LINE"),48;case 26:return this.begin("LINE"),51;case 27:return this.begin("LINE"),50;case 28:return this.popState(),20;case 29:return 21;case 30:return 68;case 31:return 69;case 32:return 62;case 33:return 63;case 34:return 64;case 35:return 65;case 36:return 60;case 37:return 57;case 38:return this.begin("ID"),26;case 39:return this.begin("ID"),28;case 40:return 34;case 41:return 35;case 42:return this.begin("acc_title"),36;case 43:return this.popState(),"acc_title_value";case 44:return this.begin("acc_descr"),38;case 45:return this.popState(),"acc_descr_value";case 46:this.begin("acc_descr_multiline");break;case 47:this.popState();break;case 48:return"acc_descr_multiline_value";case 49:return 7;case 50:return 23;case 51:return 25;case 52:return 67;case 54:return e.yytext=e.yytext.trim(),73;case 55:return 76;case 56:return 77;case 57:return 74;case 58:return 75;case 59:return 78;case 60:return 79;case 61:return 80;case 62:return 81;case 63:return 82;case 64:return 71;case 65:return 72;case 67:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[0-9]+(?=[ \n]+))/i,/^(?:box\b)/i,/^(?:participant\b)/i,/^(?:actor\b)/i,/^(?:[^\->:\n,;]+?([\-]*[^\->:\n,;]+?)*?(?=((?!\n)\s)+as(?!\n)\s|[#\n;]|$))/i,/^(?:as\b)/i,/^(?:(?:))/i,/^(?:loop\b)/i,/^(?:rect\b)/i,/^(?:opt\b)/i,/^(?:alt\b)/i,/^(?:else\b)/i,/^(?:par\b)/i,/^(?:and\b)/i,/^(?:critical\b)/i,/^(?:option\b)/i,/^(?:break\b)/i,/^(?:(?:[:]?(?:no)?wrap)?[^#\n;]*)/i,/^(?:end\b)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:links\b)/i,/^(?:link\b)/i,/^(?:properties\b)/i,/^(?:details\b)/i,/^(?:over\b)/i,/^(?:note\b)/i,/^(?:activate\b)/i,/^(?:deactivate\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:title:\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:sequenceDiagram\b)/i,/^(?:autonumber\b)/i,/^(?:off\b)/i,/^(?:,)/i,/^(?:;)/i,/^(?:[^\+\->:\n,;]+((?!(-x|--x|-\)|--\)))[\-]*[^\+\->:\n,;]+)*)/i,/^(?:->>)/i,/^(?:-->>)/i,/^(?:->)/i,/^(?:-->)/i,/^(?:-[x])/i,/^(?:--[x])/i,/^(?:-[\)])/i,/^(?:--[\)])/i,/^(?::(?:(?:no)?wrap)?[^#\n;]+)/i,/^(?:\+)/i,/^(?:-)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[47,48],inclusive:!1},acc_descr:{rules:[45],inclusive:!1},acc_title:{rules:[43],inclusive:!1},open_directive:{rules:[1,8],inclusive:!1},type_directive:{rules:[2,3,8],inclusive:!1},arg_directive:{rules:[3,4,8],inclusive:!1},ID:{rules:[7,8,15],inclusive:!1},ALIAS:{rules:[7,8,16,17],inclusive:!1},LINE:{rules:[7,8,28],inclusive:!1},INITIAL:{rules:[0,5,6,8,9,10,11,12,13,14,18,19,20,21,22,23,24,25,26,27,29,30,31,32,33,34,35,36,37,38,39,40,41,42,44,46,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],inclusive:!0}}},t);function W(){this.yy={}}return z.lexer=U,W.prototype=z,z.Parser=W,new W}();Wl.parser=Wl;const ql=Wl,Hl=t=>null!==t.match(/^\s*sequenceDiagram/);let Vl,Gl,Xl,Kl={},Ql=[],Jl=[],th=!1;const eh=function(t,e,n,r){let i=Xl;const a=Kl[t];if(a){if(Xl&&a.box&&Xl!==a.box)throw new Error("A same participant should only be defined in one Box: "+a.name+" can't be in '"+a.box.name+"' and in '"+Xl.name+"' at the same time.");if(i=a.box?a.box:Xl,a.box=i,a&&e===a.name&&null==n)return}null!=n&&null!=n.text||(n={text:e,wrap:null,type:r}),null!=r&&null!=n.text||(n={text:e,wrap:null,type:r}),Kl[t]={box:i,name:e,description:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,prevActor:Vl,links:{},properties:{},actorCnt:null,rectData:null,type:r||"participant"},Vl&&Kl[Vl]&&(Kl[Vl].nextActor=t),Xl&&Xl.actorKeys.push(t),Vl=t},nh=function(t,e,n={text:void 0,wrap:void 0},r){if(r===ah.ACTIVE_END){const e=(t=>{let e,n=0;for(e=0;e<Jl.length;e++)Jl[e].type===ah.ACTIVE_START&&Jl[e].from.actor===t&&n++,Jl[e].type===ah.ACTIVE_END&&Jl[e].from.actor===t&&n--;return n})(t.actor);if(e<1){let e=new Error("Trying to inactivate an inactive participant ("+t.actor+")");throw e.hash={text:"->>-",token:"->>-",line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["'ACTIVE_PARTICIPANT'"]},e}}return Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:r}),!0},rh=function(t){return Kl[t]},ih=()=>void 0!==Gl?Gl:ar().sequence.wrap,ah={SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25,AUTONUMBER:26,CRITICAL_START:27,CRITICAL_OPTION:28,CRITICAL_END:29,BREAK_START:30,BREAK_END:31},sh=function(t,e,n){n.text,void 0===n.wrap&&ih()||n.wrap;const r=[].concat(t,t);Jl.push({from:r[0],to:r[1],message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:ah.NOTE,placement:e})},oh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());t=t.replace(/&amp;/g,"&"),t=t.replace(/&equals;/g,"=");ch(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor link text",r)}};function ch(t,e){if(null==t.links)t.links=e;else for(let n in e)t.links[n]=e[n]}const lh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());hh(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor properties text",r)}};function hh(t,e){if(null==t.properties)t.properties=e;else for(let n in e)t.properties[n]=e[n]}const uh=function(t,e){const n=rh(t),r=document.getElementById(e.text);try{const t=r.innerHTML,e=JSON.parse(t);e.properties&&hh(n,e.properties),e.links&&ch(n,e.links)}catch(i){Nt.error("error while parsing actor details text",i)}},dh=function(t){if(Array.isArray(t))t.forEach((function(t){dh(t)}));else switch(t.type){case"sequenceIndex":Jl.push({from:void 0,to:void 0,message:{start:t.sequenceIndex,step:t.sequenceIndexStep,visible:t.sequenceVisible},wrap:!1,type:t.signalType});break;case"addParticipant":eh(t.actor,t.actor,t.description,"participant");break;case"addActor":eh(t.actor,t.actor,t.description,"actor");break;case"activeStart":case"activeEnd":nh(t.actor,void 0,void 0,t.signalType);break;case"addNote":sh(t.actor,t.placement,t.text);break;case"addLinks":oh(t.actor,t.text);break;case"addALink":!function(t,e){const n=rh(t);try{const t={};let s=Ft(e.text,ar());var r=s.indexOf("@");s=s.replace(/&amp;/g,"&"),s=s.replace(/&equals;/g,"=");var i=s.slice(0,r-1).trim(),a=s.slice(r+1).trim();t[i]=a,ch(n,t)}catch(s){Nt.error("error while parsing actor link text",s)}}(t.actor,t.text);break;case"addProperties":lh(t.actor,t.text);break;case"addDetails":uh(t.actor,t.text);break;case"addMessage":nh(t.from,t.to,t.msg,t.signalType);break;case"boxStart":e=t.boxData,Ql.push({name:e.text,wrap:void 0===e.wrap&&ih()||!!e.wrap,fill:e.color,actorKeys:[]}),Xl=Ql.slice(-1)[0];break;case"boxEnd":Xl=void 0;break;case"loopStart":nh(void 0,void 0,t.loopText,t.signalType);break;case"loopEnd":case"rectEnd":case"optEnd":case"altEnd":case"parEnd":case"criticalEnd":case"breakEnd":nh(void 0,void 0,void 0,t.signalType);break;case"rectStart":nh(void 0,void 0,t.color,t.signalType);break;case"optStart":nh(void 0,void 0,t.optText,t.signalType);break;case"altStart":case"else":nh(void 0,void 0,t.altText,t.signalType);break;case"setAccTitle":Or(t.text);break;case"parStart":case"and":nh(void 0,void 0,t.parText,t.signalType);break;case"criticalStart":nh(void 0,void 0,t.criticalText,t.signalType);break;case"option":nh(void 0,void 0,t.optionText,t.signalType);break;case"breakStart":nh(void 0,void 0,t.breakText,t.signalType)}var e},ph={addActor:eh,addMessage:function(t,e,n,r){Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,answer:r})},addSignal:nh,addLinks:oh,addDetails:uh,addProperties:lh,autoWrap:ih,setWrap:function(t){Gl=t},enableSequenceNumbers:function(){th=!0},disableSequenceNumbers:function(){th=!1},showSequenceNumbers:()=>th,getMessages:function(){return Jl},getActors:function(){return Kl},getActor:rh,getActorKeys:function(){return Object.keys(Kl)},getActorProperty:function(t,e){if(void 0!==t&&void 0!==t.properties)return t.properties[e]},getAccTitle:Mr,getBoxes:function(){return Ql},getDiagramTitle:Rr,setDiagramTitle:$r,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().sequence,clear:function(){Kl={},Ql=[],Jl=[],th=!1,Dr()},parseMessage:function(t){const e=t.trim(),n={text:e.replace(/^:?(?:no)?wrap:/,"").trim(),wrap:null!==e.match(/^:?wrap:/)||null===e.match(/^:?nowrap:/)&&void 0};return Nt.debug("parseMessage:",n),n},parseBoxData:function(t){const e=t.match(/^((?:rgba?|hsla?)\s*\(.*\)|\w*)(.*)$/);let n=null!=e&&e[1]?e[1].trim():"transparent",r=null!=e&&e[2]?e[2].trim():void 0;if(window&&window.CSS)window.CSS.supports("color",n)||(n="transparent",r=t.trim());else{const e=(new Option).style;e.color=n,e.color!==n&&(n="transparent",r=t.trim())}return{color:n,text:void 0!==r?Ft(r.replace(/^:?(?:no)?wrap:/,""),ar()):void 0,wrap:void 0!==r?null!==r.match(/^:?wrap:/)||null===r.match(/^:?nowrap:/)&&void 0:void 0}},LINETYPE:ah,ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},addNote:sh,setAccTitle:Or,apply:dh,setAccDescription:Ir,getAccDescription:Fr,hasAtLeastOneBox:function(){return Ql.length>0},hasAtLeastOneBoxWithTitle:function(){return Ql.some((t=>t.name))}};let fh=[];const gh=()=>{fh.forEach((t=>{t()})),fh=[]},yh=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},mh=(t,e)=>{var n;n=()=>{const n=document.querySelectorAll(t);0!==n.length&&(n[0].addEventListener("mouseover",(function(){xh("actor"+e+"_popup")})),n[0].addEventListener("mouseout",(function(){vh("actor"+e+"_popup")})))},fh.push(n)},bh=function(t,e,n,r){const i=t.append("image");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href",a)},_h=function(t,e,n,r){const i=t.append("use");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href","#"+a)},xh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="block")},vh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="none")},kh=function(t,e){let n=0,r=0;const i=e.text.split(Yt.lineBreakRegex),[a,s]=Vn(e.fontSize);let o=[],c=0,l=()=>e.y;if(void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0)switch(e.valign){case"top":case"start":l=()=>Math.round(e.y+e.textMargin);break;case"middle":case"center":l=()=>Math.round(e.y+(n+r+e.textMargin)/2);break;case"bottom":case"end":l=()=>Math.round(e.y+(n+r+2*e.textMargin)-e.textMargin)}if(void 0!==e.anchor&&void 0!==e.textMargin&&void 0!==e.width)switch(e.anchor){case"left":case"start":e.x=Math.round(e.x+e.textMargin),e.anchor="start",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"middle":case"center":e.x=Math.round(e.x+e.width/2),e.anchor="middle",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"right":case"end":e.x=Math.round(e.x+e.width-e.textMargin),e.anchor="end",e.dominantBaseline="middle",e.alignmentBaseline="middle"}for(let[h,u]of i.entries()){void 0!==e.textMargin&&0===e.textMargin&&void 0!==a&&(c=h*a);const i=t.append("text");if(i.attr("x",e.x),i.attr("y",l()),void 0!==e.anchor&&i.attr("text-anchor",e.anchor).attr("dominant-baseline",e.dominantBaseline).attr("alignment-baseline",e.alignmentBaseline),void 0!==e.fontFamily&&i.style("font-family",e.fontFamily),void 0!==s&&i.style("font-size",s),void 0!==e.fontWeight&&i.style("font-weight",e.fontWeight),void 0!==e.fill&&i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class),void 0!==e.dy?i.attr("dy",e.dy):0!==c&&i.attr("dy",c),e.tspan){const t=i.append("tspan");t.attr("x",e.x),void 0!==e.fill&&t.attr("fill",e.fill),t.text(u)}else i.text(u);void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0&&(r+=(i._groups||i)[0][0].getBBox().height,n=r),o.push(i)}return o},wh=function(t,e){const n=t.append("polygon");var r,i,a,s,o;return n.attr("points",(r=e.x,i=e.y,a=e.width,s=e.height,r+","+i+" "+(r+a)+","+i+" "+(r+a)+","+(i+s-(o=7))+" "+(r+a-1.2*o)+","+(i+s)+" "+r+","+(i+s))),n.attr("class","labelBox"),e.y=e.y+e.height/2,kh(t,e),n};let Eh=-1;const Ch=(t,e)=>{t.selectAll&&t.selectAll(".actor-line").attr("class","200").attr("y2",e-55)},Th=function(t,e){yh(t,{x:e.startx,y:e.starty,width:e.stopx-e.startx,height:e.stopy-e.starty,fill:e.fill,stroke:e.stroke,class:"rect"}).lower()},Sh=function(){return{x:0,y:0,fill:void 0,anchor:void 0,style:"#666",width:void 0,height:void 0,textMargin:0,rx:0,ry:0,tspan:!0,valign:void 0}},Ah=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},Lh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,[d,p]=Vn(l),f=t.split(Yt.lineBreakRegex);for(let g=0;g<f.length;g++){const t=g*d-d*(f.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").style("font-size",p).style("font-weight",u).style("font-family",h);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(f[g]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Bh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,a=e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").style("font-size",l).style("font-weight",u).style("font-family",h);a.append("tspan").attr("x",n).attr("dy",t).text(d[p]),a.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(a,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,0,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Nh={drawRect:yh,drawText:kh,drawLabel:wh,drawActor:function(t,e,n,r){switch(e.type){case"actor":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+80;r||(Eh++,t.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"));const s=t.append("g");s.attr("class","actor-man");const o=Ah();o.x=e.x,o.y=e.y,o.fill="#eaeaea",o.width=e.width,o.height=e.height,o.class="actor",o.rx=3,o.ry=3,s.append("line").attr("id","actor-man-torso"+Eh).attr("x1",i).attr("y1",e.y+25).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("id","actor-man-arms"+Eh).attr("x1",i-18).attr("y1",e.y+33).attr("x2",i+18).attr("y2",e.y+33),s.append("line").attr("x1",i-18).attr("y1",e.y+60).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("x1",i).attr("y1",e.y+45).attr("x2",i+16).attr("y2",e.y+60);const c=s.append("circle");c.attr("cx",e.x+e.width/2),c.attr("cy",e.y+10),c.attr("r",15),c.attr("width",e.width),c.attr("height",e.height);const l=s.node().getBBox();return e.height=l.height,Lh(n)(e.description,s,o.x,o.y+35,o.width,o.height,{class:"actor"},n),e.height}(t,e,n,r);case"participant":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+5,s=t.append("g");var o=s;r||(Eh++,o.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"),o=s.append("g"),e.actorCnt=Eh,null!=e.links&&(o.attr("id","root-"+Eh),mh("#root-"+Eh,Eh)));const c=Ah();var l="actor";null!=e.properties&&e.properties.class?l=e.properties.class:c.fill="#eaeaea",c.x=e.x,c.y=e.y,c.width=e.width,c.height=e.height,c.class=l,c.rx=3,c.ry=3;const h=yh(o,c);if(e.rectData=c,null!=e.properties&&e.properties.icon){const t=e.properties.icon.trim();"@"===t.charAt(0)?_h(o,c.x+c.width-20,c.y+10,t.substr(1)):bh(o,c.x+c.width-20,c.y+10,t)}Lh(n)(e.description,o,c.x,c.y,c.width,c.height,{class:"actor"},n);let u=e.height;if(h.node){const t=h.node().getBBox();e.height=t.height,u=t.height}return u}(t,e,n,r)}},drawBox:function(t,e,n){const r=t.append("g");Th(r,e),e.name&&Lh(n)(e.name,r,e.x,e.y+(e.textMaxHeight||0)/2,e.width,0,{class:"text"},n),r.lower()},drawPopup:function(t,e,n,r,i){if(void 0===e.links||null===e.links||0===Object.keys(e.links).length)return{height:0,width:0};const a=e.links,o=e.actorCnt,c=e.rectData;var l="none";i&&(l="block !important");const h=t.append("g");h.attr("id","actor"+o+"_popup"),h.attr("class","actorPopupMenu"),h.attr("display",l),mh("#actor"+o+"_popup",o);var u="";void 0!==c.class&&(u=" "+c.class);let d=c.width>n?c.width:n;const p=h.append("rect");if(p.attr("class","actorPopupMenuPanel"+u),p.attr("x",c.x),p.attr("y",c.height),p.attr("fill",c.fill),p.attr("stroke",c.stroke),p.attr("width",d),p.attr("height",c.height),p.attr("rx",c.rx),p.attr("ry",c.ry),null!=a){var f=20;for(let t in a){var g=h.append("a"),y=(0,s.N)(a[t]);g.attr("xlink:href",y),g.attr("target","_blank"),Bh(r)(t,g,c.x+10,c.height+f,d,20,{class:"actor"},r),f+=30}}return p.attr("height",f),{height:c.height+f,width:d}},drawImage:bh,drawEmbeddedImage:_h,anchorElement:function(t){return t.append("g")},drawActivation:function(t,e,n,r,i){const a=Ah(),s=e.anchored;a.x=e.startx,a.y=e.starty,a.class="activation"+i%3,a.width=e.stopx-e.startx,a.height=n-e.starty,yh(s,a)},drawLoop:function(t,e,n,r){const{boxMargin:i,boxTextMargin:a,labelBoxHeight:s,labelBoxWidth:o,messageFontFamily:c,messageFontSize:l,messageFontWeight:h}=r,u=t.append("g"),d=function(t,e,n,r){return u.append("line").attr("x1",t).attr("y1",e).attr("x2",n).attr("y2",r).attr("class","loopLine")};d(e.startx,e.starty,e.stopx,e.starty),d(e.stopx,e.starty,e.stopx,e.stopy),d(e.startx,e.stopy,e.stopx,e.stopy),d(e.startx,e.starty,e.startx,e.stopy),void 0!==e.sections&&e.sections.forEach((function(t){d(e.startx,t.y,e.stopx,t.y).style("stroke-dasharray","3, 3")}));let p=Sh();p.text=n,p.x=e.startx,p.y=e.starty,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.anchor="middle",p.valign="middle",p.tspan=!1,p.width=o||50,p.height=s||20,p.textMargin=a,p.class="labelText",wh(u,p),p=Sh(),p.text=e.title,p.x=e.startx+o/2+(e.stopx-e.startx)/2,p.y=e.starty+i+a,p.anchor="middle",p.valign="middle",p.textMargin=a,p.class="loopText",p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=!0;let f=kh(u,p);return void 0!==e.sectionTitles&&e.sectionTitles.forEach((function(t,n){if(t.message){p.text=t.message,p.x=e.startx+(e.stopx-e.startx)/2,p.y=e.sections[n].y+i+a,p.class="loopText",p.anchor="middle",p.valign="middle",p.tspan=!1,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=e.wrap,f=kh(u,p);let r=Math.round(f.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));e.sections[n].height+=r-(i+a)}})),e.height=Math.round(e.stopy-e.starty),u},drawBackgroundRect:Th,insertArrowHead:function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},insertArrowFilledHead:function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},insertSequenceNumber:function(t){t.append("defs").append("marker").attr("id","sequencenumber").attr("refX",15).attr("refY",15).attr("markerWidth",60).attr("markerHeight",40).attr("orient","auto").append("circle").attr("cx",15).attr("cy",15).attr("r",6)},insertArrowCrossHead:function(t){t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",4).attr("refY",5).append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1pt").attr("d","M 1,2 L 6,7 M 6,2 L 1,7")},insertDatabaseIcon:function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},insertComputerIcon:function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},insertClockIcon:function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")},getTextObj:Sh,getNoteRect:Ah,popupMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'block'; }"},popdownMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'none'; }"},fixLifeLineHeights:Ch,sanitizeUrl:s.N};let Dh={};const Oh={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],activations:[],models:{getHeight:function(){return Math.max.apply(null,0===this.actors.length?[0]:this.actors.map((t=>t.height||0)))+(0===this.loops.length?0:this.loops.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.messages.length?0:this.messages.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.notes.length?0:this.notes.map((t=>t.height||0)).reduce(((t,e)=>t+e)))},clear:function(){this.actors=[],this.boxes=[],this.loops=[],this.messages=[],this.notes=[]},addBox:function(t){this.boxes.push(t)},addActor:function(t){this.actors.push(t)},addLoop:function(t){this.loops.push(t)},addMessage:function(t){this.messages.push(t)},addNote:function(t){this.notes.push(t)},lastActor:function(){return this.actors[this.actors.length-1]},lastLoop:function(){return this.loops[this.loops.length-1]},lastMessage:function(){return this.messages[this.messages.length-1]},lastNote:function(){return this.notes[this.notes.length-1]},actors:[],boxes:[],loops:[],messages:[],notes:[]},init:function(){this.sequenceItems=[],this.activations=[],this.models.clear(),this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0,Zh(ar())},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=this;let a=0;function s(s){return function(o){a++;const c=i.sequenceItems.length-a+1;i.updateVal(o,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopy",r+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopx",n+c*Dh.boxMargin,Math.max),"activation"!==s&&(i.updateVal(o,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopx",n+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopy",r+c*Dh.boxMargin,Math.max))}}this.sequenceItems.forEach(s()),this.activations.forEach(s("activation"))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(Oh.data,"startx",i,Math.min),this.updateVal(Oh.data,"starty",s,Math.min),this.updateVal(Oh.data,"stopx",a,Math.max),this.updateVal(Oh.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},newActivation:function(t,e,n){const r=n[t.from.actor],i=Ph(t.from.actor).length||0,a=r.x+r.width/2+(i-1)*Dh.activationWidth/2;this.activations.push({startx:a,starty:this.verticalPos+2,stopx:a+Dh.activationWidth,stopy:void 0,actor:t.from.actor,anchored:Nh.anchorElement(e)})},endActivation:function(t){const e=this.activations.map((function(t){return t.actor})).lastIndexOf(t.from.actor);return this.activations.splice(e,1)[0]},createLoop:function(t={message:void 0,wrap:!1,width:void 0},e){return{startx:void 0,starty:this.verticalPos,stopx:void 0,stopy:void 0,title:t.message,wrap:t.wrap,width:t.width,height:0,fill:e}},newLoop:function(t={message:void 0,wrap:!1,width:void 0},e){this.sequenceItems.push(this.createLoop(t,e))},endLoop:function(){return this.sequenceItems.pop()},addSectionToLoop:function(t){const e=this.sequenceItems.pop();e.sections=e.sections||[],e.sectionTitles=e.sectionTitles||[],e.sections.push({y:Oh.getVerticalPos(),height:0}),e.sectionTitles.push(t),this.sequenceItems.push(e)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return{bounds:this.data,models:this.models}}},Mh=t=>({fontFamily:t.messageFontFamily,fontSize:t.messageFontSize,fontWeight:t.messageFontWeight}),Ih=t=>({fontFamily:t.noteFontFamily,fontSize:t.noteFontSize,fontWeight:t.noteFontWeight}),Fh=t=>({fontFamily:t.actorFontFamily,fontSize:t.actorFontSize,fontWeight:t.actorFontWeight});const $h=function(t,e,n,r,i,a,s){if(!0===i.hideUnusedParticipants){const t=new Set;a.forEach((e=>{t.add(e.from),t.add(e.to)})),n=n.filter((e=>t.has(e)))}let o,c=0,l=0,h=0;for(const u of n){const n=e[u],i=n.box;o&&o!=i&&(s||Oh.models.addBox(o),l+=Dh.boxMargin+o.margin),i&&i!=o&&(s||(i.x=c+l,i.y=r),l+=i.margin),n.width=n.width||Dh.width,n.height=Math.max(n.height||Dh.height,Dh.height),n.margin=n.margin||Dh.actorMargin,n.x=c+l,n.y=Oh.getVerticalPos();const a=Nh.drawActor(t,n,Dh,s);h=Math.max(h,a),Oh.insert(n.x,r,n.x+n.width,n.height),c+=n.width+l,n.box&&(n.box.width=c+i.margin-n.box.x),l=n.margin,o=n.box,Oh.models.addActor(n)}o&&!s&&Oh.models.addBox(o),Oh.bumpVerticalPos(h)},Rh=function(t,e,n,r){let i=0,a=0;for(const s of n){const n=e[s],o=zh(n),c=Nh.drawPopup(t,n,o,Dh,Dh.forceMenus,r);c.height>i&&(i=c.height),c.width+n.x>a&&(a=c.width+n.x)}return{maxHeight:i,maxWidth:a}},Zh=function(t){Sn(Dh,t),t.fontFamily&&(Dh.actorFontFamily=Dh.noteFontFamily=Dh.messageFontFamily=t.fontFamily),t.fontSize&&(Dh.actorFontSize=Dh.noteFontSize=Dh.messageFontSize=t.fontSize),t.fontWeight&&(Dh.actorFontWeight=Dh.noteFontWeight=Dh.messageFontWeight=t.fontWeight)},Ph=function(t){return Oh.activations.filter((function(e){return e.actor===t}))},jh=function(t,e){const n=e[t],r=Ph(t);return[r.reduce((function(t,e){return Math.min(t,e.startx)}),n.x+n.width/2),r.reduce((function(t,e){return Math.max(t,e.stopx)}),n.x+n.width/2)]};function Yh(t,e,n,r,i){Oh.bumpVerticalPos(n);let a=r;if(e.id&&e.message&&t[e.id]){const n=t[e.id].width,i=Mh(Dh);e.message=Gn.wrapLabel(`[${e.message}]`,n-2*Dh.wrapPadding,i),e.width=n,e.wrap=!0;const s=Gn.calculateTextDimensions(e.message,i),o=Math.max(s.height,Dh.labelBoxHeight);a=r+o,Nt.debug(`${o} - ${e.message}`)}i(e),Oh.bumpVerticalPos(a)}const zh=function(t){let e=0;const n=Fh(Dh);for(const r in t.links){const t=Gn.calculateTextDimensions(r,n).width+2*Dh.wrapPadding+2*Dh.boxMargin;e<t&&(e=t)}return e};const Uh=function(t,e,n,r){const i={},a=[];let s,o,c;return t.forEach((function(t){switch(t.id=Gn.random({length:10}),t.type){case r.db.LINETYPE.LOOP_START:case r.db.LINETYPE.ALT_START:case r.db.LINETYPE.OPT_START:case r.db.LINETYPE.PAR_START:case r.db.LINETYPE.CRITICAL_START:case r.db.LINETYPE.BREAK_START:a.push({id:t.id,msg:t.message,from:Number.MAX_SAFE_INTEGER,to:Number.MIN_SAFE_INTEGER,width:0});break;case r.db.LINETYPE.ALT_ELSE:case r.db.LINETYPE.PAR_AND:case r.db.LINETYPE.CRITICAL_OPTION:t.message&&(s=a.pop(),i[s.id]=s,i[t.id]=s,a.push(s));break;case r.db.LINETYPE.LOOP_END:case r.db.LINETYPE.ALT_END:case r.db.LINETYPE.OPT_END:case r.db.LINETYPE.PAR_END:case r.db.LINETYPE.CRITICAL_END:case r.db.LINETYPE.BREAK_END:s=a.pop(),i[s.id]=s;break;case r.db.LINETYPE.ACTIVE_START:{const n=e[t.from?t.from.actor:t.to.actor],r=Ph(t.from?t.from.actor:t.to.actor).length,i=n.x+n.width/2+(r-1)*Dh.activationWidth/2,a={startx:i,stopx:i+Dh.activationWidth,actor:t.from.actor,enabled:!0};Oh.activations.push(a)}break;case r.db.LINETYPE.ACTIVE_END:{const e=Oh.activations.map((t=>t.actor)).lastIndexOf(t.from.actor);delete Oh.activations.splice(e,1)[0]}}void 0!==t.placement?(o=function(t,e,n){const r=e[t.from].x,i=e[t.to].x,a=t.wrap&&t.message;let s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Dh.width,Ih(Dh)):t.message,Ih(Dh));const o={width:a?Dh.width:Math.max(Dh.width,s.width+2*Dh.noteMargin),height:0,startx:e[t.from].x,stopx:0,starty:0,stopy:0,message:t.message};return t.placement===n.db.PLACEMENT.RIGHTOF?(o.width=a?Math.max(Dh.width,s.width):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width+Dh.actorMargin)/2):t.placement===n.db.PLACEMENT.LEFTOF?(o.width=a?Math.max(Dh.width,s.width+2*Dh.noteMargin):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r-o.width+(e[t.from].width-Dh.actorMargin)/2):t.to===t.from?(s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Math.max(Dh.width,e[t.from].width),Ih(Dh)):t.message,Ih(Dh)),o.width=a?Math.max(Dh.width,e[t.from].width):Math.max(e[t.from].width,Dh.width,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width-o.width)/2):(o.width=Math.abs(r+e[t.from].width/2-(i+e[t.to].width/2))+Dh.actorMargin,o.startx=r<i?r+e[t.from].width/2-Dh.actorMargin/2:i+e[t.to].width/2-Dh.actorMargin/2),a&&(o.message=Gn.wrapLabel(t.message,o.width-2*Dh.wrapPadding,Ih(Dh))),Nt.debug(`NM:[${o.startx},${o.stopx},${o.starty},${o.stopy}:${o.width},${o.height}=${t.message}]`),o}(t,e,r),t.noteModel=o,a.forEach((t=>{s=t,s.from=Math.min(s.from,o.startx),s.to=Math.max(s.to,o.startx+o.width),s.width=Math.max(s.width,Math.abs(s.from-s.to))-Dh.labelBoxWidth}))):(c=function(t,e,n){let r=!1;if([n.db.LINETYPE.SOLID_OPEN,n.db.LINETYPE.DOTTED_OPEN,n.db.LINETYPE.SOLID,n.db.LINETYPE.DOTTED,n.db.LINETYPE.SOLID_CROSS,n.db.LINETYPE.DOTTED_CROSS,n.db.LINETYPE.SOLID_POINT,n.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(r=!0),!r)return{};const i=jh(t.from,e),a=jh(t.to,e),s=i[0]<=a[0]?1:0,o=i[0]<a[0]?0:1,c=[...i,...a],l=Math.abs(a[o]-i[s]);t.wrap&&t.message&&(t.message=Gn.wrapLabel(t.message,Math.max(l+2*Dh.wrapPadding,Dh.width),Mh(Dh)));const h=Gn.calculateTextDimensions(t.message,Mh(Dh));return{width:Math.max(t.wrap?0:h.width+2*Dh.wrapPadding,l+2*Dh.wrapPadding,Dh.width),height:0,startx:i[s],stopx:a[o],starty:0,stopy:0,message:t.message,type:t.type,wrap:t.wrap,fromBounds:Math.min.apply(null,c),toBounds:Math.max.apply(null,c)}}(t,e,r),t.msgModel=c,c.startx&&c.stopx&&a.length>0&&a.forEach((n=>{if(s=n,c.startx===c.stopx){const n=e[t.from],r=e[t.to];s.from=Math.min(n.x-c.width/2,n.x-n.width/2,s.from),s.to=Math.max(r.x+c.width/2,r.x+n.width/2,s.to),s.width=Math.max(s.width,Math.abs(s.to-s.from))-Dh.labelBoxWidth}else s.from=Math.min(c.startx,s.from),s.to=Math.max(c.stopx,s.to),s.width=Math.max(s.width,c.width)-Dh.labelBoxWidth})))})),Oh.activations=[],Nt.debug("Loop type widths:",i),i},Wh={bounds:Oh,drawActors:$h,drawActorsPopup:Rh,setConf:Zh,draw:function(t,e,n,r){const{securityLevel:i,sequence:a}=ar();let s;Dh=a,r.db.clear(),r.parser.parse(t),"sandbox"===i&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===i?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l="sandbox"===i?s.nodes()[0].contentDocument:document;Oh.init(),Nt.debug(r.db);const h="sandbox"===i?c.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`),u=r.db.getActors(),d=r.db.getBoxes(),p=r.db.getActorKeys(),f=r.db.getMessages(),g=r.db.getDiagramTitle(),y=r.db.hasAtLeastOneBox(),m=r.db.hasAtLeastOneBoxWithTitle(),b=function(t,e,n){const r={};return e.forEach((function(e){if(t[e.to]&&t[e.from]){const i=t[e.to];if(e.placement===n.db.PLACEMENT.LEFTOF&&!i.prevActor)return;if(e.placement===n.db.PLACEMENT.RIGHTOF&&!i.nextActor)return;const a=void 0!==e.placement,s=!a,o=a?Ih(Dh):Mh(Dh),c=e.wrap?Gn.wrapLabel(e.message,Dh.width-2*Dh.wrapPadding,o):e.message,l=Gn.calculateTextDimensions(c,o).width+2*Dh.wrapPadding;s&&e.from===i.nextActor?r[e.to]=Math.max(r[e.to]||0,l):s&&e.from===i.prevActor?r[e.from]=Math.max(r[e.from]||0,l):s&&e.from===e.to?(r[e.from]=Math.max(r[e.from]||0,l/2),r[e.to]=Math.max(r[e.to]||0,l/2)):e.placement===n.db.PLACEMENT.RIGHTOF?r[e.from]=Math.max(r[e.from]||0,l):e.placement===n.db.PLACEMENT.LEFTOF?r[i.prevActor]=Math.max(r[i.prevActor]||0,l):e.placement===n.db.PLACEMENT.OVER&&(i.prevActor&&(r[i.prevActor]=Math.max(r[i.prevActor]||0,l/2)),i.nextActor&&(r[e.from]=Math.max(r[e.from]||0,l/2)))}})),Nt.debug("maxMessageWidthPerActor:",r),r}(u,f,r);Dh.height=function(t,e,n){let r=0;Object.keys(t).forEach((e=>{const n=t[e];n.wrap&&(n.description=Gn.wrapLabel(n.description,Dh.width-2*Dh.wrapPadding,Fh(Dh)));const i=Gn.calculateTextDimensions(n.description,Fh(Dh));n.width=n.wrap?Dh.width:Math.max(Dh.width,i.width+2*Dh.wrapPadding),n.height=n.wrap?Math.max(i.height,Dh.height):Dh.height,r=Math.max(r,n.height)}));for(const a in e){const n=t[a];if(!n)continue;const r=t[n.nextActor];if(!r){const t=e[a]+Dh.actorMargin-n.width/2;n.margin=Math.max(t,Dh.actorMargin);continue}const i=e[a]+Dh.actorMargin-n.width/2-r.width/2;n.margin=Math.max(i,Dh.actorMargin)}let i=0;return n.forEach((e=>{const n=Mh(Dh);let r=e.actorKeys.reduce(((e,n)=>e+(t[n].width+(t[n].margin||0))),0);r-=2*Dh.boxTextMargin,e.wrap&&(e.name=Gn.wrapLabel(e.name,r-2*Dh.wrapPadding,n));const a=Gn.calculateTextDimensions(e.name,n);i=Math.max(a.height,i);const s=Math.max(r,a.width+2*Dh.wrapPadding);if(e.margin=Dh.boxTextMargin,r<s){const t=(s-r)/2;e.margin+=t}})),n.forEach((t=>t.textMaxHeight=i)),Math.max(r,Dh.height)}(u,b,d),Nh.insertComputerIcon(h),Nh.insertDatabaseIcon(h),Nh.insertClockIcon(h),y&&(Oh.bumpVerticalPos(Dh.boxMargin),m&&Oh.bumpVerticalPos(d[0].textMaxHeight)),$h(h,u,p,0,Dh,f,!1);const _=Uh(f,u,b,r);Nh.insertArrowHead(h),Nh.insertArrowCrossHead(h),Nh.insertArrowFilledHead(h),Nh.insertSequenceNumber(h);let x=1,v=1;const k=[];f.forEach((function(t){let e,n,i;switch(t.type){case r.db.LINETYPE.NOTE:n=t.noteModel,function(t,e){Oh.bumpVerticalPos(Dh.boxMargin),e.height=Dh.boxMargin,e.starty=Oh.getVerticalPos();const n=Nh.getNoteRect();n.x=e.startx,n.y=e.starty,n.width=e.width||Dh.width,n.class="note";const r=t.append("g"),i=Nh.drawRect(r,n),a=Nh.getTextObj();a.x=e.startx,a.y=e.starty,a.width=n.width,a.dy="1em",a.text=e.message,a.class="noteText",a.fontFamily=Dh.noteFontFamily,a.fontSize=Dh.noteFontSize,a.fontWeight=Dh.noteFontWeight,a.anchor=Dh.noteAlign,a.textMargin=Dh.noteMargin,a.valign="center";const s=kh(r,a),o=Math.round(s.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));i.attr("height",o+2*Dh.noteMargin),e.height+=o+2*Dh.noteMargin,Oh.bumpVerticalPos(o+2*Dh.noteMargin),e.stopy=e.starty+o+2*Dh.noteMargin,e.stopx=e.startx+n.width,Oh.insert(e.startx,e.starty,e.stopx,e.stopy),Oh.models.addNote(e)}(h,n);break;case r.db.LINETYPE.ACTIVE_START:Oh.newActivation(t,h,u);break;case r.db.LINETYPE.ACTIVE_END:!function(t,e){const n=Oh.endActivation(t);n.starty+18>e&&(n.starty=e-6,e+=12),Nh.drawActivation(h,n,e,Dh,Ph(t.from.actor).length),Oh.insert(n.startx,e-10,n.stopx,e)}(t,Oh.getVerticalPos());break;case r.db.LINETYPE.LOOP_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.LOOP_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"loop",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.RECT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin,(t=>Oh.newLoop(void 0,t.message)));break;case r.db.LINETYPE.RECT_END:e=Oh.endLoop(),Nh.drawBackgroundRect(h,e),Oh.models.addLoop(e),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos());break;case r.db.LINETYPE.OPT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.OPT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"opt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.ALT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.ALT_ELSE:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.ALT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"alt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.PAR_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.PAR_AND:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.PAR_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"par",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.AUTONUMBER:x=t.message.start||x,v=t.message.step||v,t.message.visible?r.db.enableSequenceNumbers():r.db.disableSequenceNumbers();break;case r.db.LINETYPE.CRITICAL_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.CRITICAL_OPTION:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.CRITICAL_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"critical",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.BREAK_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.BREAK_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"break",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;default:try{i=t.msgModel,i.starty=Oh.getVerticalPos(),i.sequenceIndex=x,i.sequenceVisible=r.db.showSequenceNumbers();const e=function(t,e){Oh.bumpVerticalPos(10);const{startx:n,stopx:r,message:i}=e,a=Yt.splitBreaks(i).length,s=Gn.calculateTextDimensions(i,Mh(Dh)),o=s.height/a;let c;e.height+=o,Oh.bumpVerticalPos(o);let l=s.height-10;const h=s.width;if(n===r){c=Oh.getVerticalPos()+l,Dh.rightAngles||(l+=Dh.boxMargin,c=Oh.getVerticalPos()+l),l+=30;const t=Math.max(h/2,Dh.width/2);Oh.insert(n-t,Oh.getVerticalPos()-10+l,r+t,Oh.getVerticalPos()+30+l)}else l+=Dh.boxMargin,c=Oh.getVerticalPos()+l,Oh.insert(n,c-10,r,c);return Oh.bumpVerticalPos(l),e.height+=l,e.stopy=e.starty+e.height,Oh.insert(e.fromBounds,e.starty,e.toBounds,e.stopy),c}(0,i);k.push({messageModel:i,lineStartY:e}),Oh.models.addMessage(i)}catch(a){Nt.error("error while drawing message",a)}}[r.db.LINETYPE.SOLID_OPEN,r.db.LINETYPE.DOTTED_OPEN,r.db.LINETYPE.SOLID,r.db.LINETYPE.DOTTED,r.db.LINETYPE.SOLID_CROSS,r.db.LINETYPE.DOTTED_CROSS,r.db.LINETYPE.SOLID_POINT,r.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(x+=v)})),k.forEach((t=>function(t,e,n,r){const{startx:i,stopx:a,starty:s,message:o,type:c,sequenceIndex:l,sequenceVisible:h}=e,u=Gn.calculateTextDimensions(o,Mh(Dh)),d=Nh.getTextObj();d.x=i,d.y=s+10,d.width=a-i,d.class="messageText",d.dy="1em",d.text=o,d.fontFamily=Dh.messageFontFamily,d.fontSize=Dh.messageFontSize,d.fontWeight=Dh.messageFontWeight,d.anchor=Dh.messageAlign,d.valign="center",d.textMargin=Dh.wrapPadding,d.tspan=!1,kh(t,d);const p=u.width;let f;i===a?f=Dh.rightAngles?t.append("path").attr("d",`M  ${i},${n} H ${i+Math.max(Dh.width/2,p/2)} V ${n+25} H ${i}`):t.append("path").attr("d","M "+i+","+n+" C "+(i+60)+","+(n-10)+" "+(i+60)+","+(n+30)+" "+i+","+(n+20)):(f=t.append("line"),f.attr("x1",i),f.attr("y1",n),f.attr("x2",a),f.attr("y2",n)),c===r.db.LINETYPE.DOTTED||c===r.db.LINETYPE.DOTTED_CROSS||c===r.db.LINETYPE.DOTTED_POINT||c===r.db.LINETYPE.DOTTED_OPEN?(f.style("stroke-dasharray","3, 3"),f.attr("class","messageLine1")):f.attr("class","messageLine0");let g="";Dh.arrowMarkerAbsolute&&(g=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,g=g.replace(/\(/g,"\\("),g=g.replace(/\)/g,"\\)")),f.attr("stroke-width",2),f.attr("stroke","none"),f.style("fill","none"),c!==r.db.LINETYPE.SOLID&&c!==r.db.LINETYPE.DOTTED||f.attr("marker-end","url("+g+"#arrowhead)"),c!==r.db.LINETYPE.SOLID_POINT&&c!==r.db.LINETYPE.DOTTED_POINT||f.attr("marker-end","url("+g+"#filled-head)"),c!==r.db.LINETYPE.SOLID_CROSS&&c!==r.db.LINETYPE.DOTTED_CROSS||f.attr("marker-end","url("+g+"#crosshead)"),(h||Dh.showSequenceNumbers)&&(f.attr("marker-start","url("+g+"#sequencenumber)"),t.append("text").attr("x",i).attr("y",n+4).attr("font-family","sans-serif").attr("font-size","12px").attr("text-anchor","middle").attr("class","sequenceNumber").text(l))}(h,t.messageModel,t.lineStartY,r))),Dh.mirrorActors&&(Oh.bumpVerticalPos(2*Dh.boxMargin),$h(h,u,p,Oh.getVerticalPos(),Dh,f,!0),Oh.bumpVerticalPos(Dh.boxMargin),Ch(h,Oh.getVerticalPos())),Oh.models.boxes.forEach((function(t){t.height=Oh.getVerticalPos()-t.y,Oh.insert(t.x,t.y,t.x+t.width,t.height),t.startx=t.x,t.starty=t.y,t.stopx=t.startx+t.width,t.stopy=t.starty+t.height,t.stroke="rgb(0,0,0, 0.5)",Nh.drawBox(h,t,Dh)})),y&&Oh.bumpVerticalPos(Dh.boxMargin);const w=Rh(h,u,p,l),{bounds:E}=Oh.getBounds();Nt.debug("For line height fix Querying: #"+e+" .actor-line");(0,o.td_)("#"+e+" .actor-line").attr("y2",E.stopy);let C=E.stopy-E.starty;C<w.maxHeight&&(C=w.maxHeight);let T=C+2*Dh.diagramMarginY;Dh.mirrorActors&&(T=T-Dh.boxMargin+Dh.bottomMarginAdj);let S=E.stopx-E.startx;S<w.maxWidth&&(S=w.maxWidth);const A=S+2*Dh.diagramMarginX;g&&h.append("text").text(g).attr("x",(E.stopx-E.startx)/2-2*Dh.diagramMarginX).attr("y",-25),dr(h,T,A,Dh.useMaxWidth);const L=g?40:0;h.attr("viewBox",E.startx-Dh.diagramMarginX+" -"+(Dh.diagramMarginY+L)+" "+A+" "+(T+L)),Nt.debug("models:",Oh.models)}};var qh=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,21],h=[1,22],u=[1,23],d=[1,24],p=[1,37],f=[1,25],g=[1,26],y=[1,27],m=[1,28],b=[1,29],_=[1,32],x=[1,33],v=[1,34],k=[1,35],w=[1,36],E=[1,39],C=[1,40],T=[1,41],S=[1,42],A=[1,38],L=[1,45],B=[1,4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],N=[1,4,5,14,15,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],D=[1,4,5,7,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],O=[4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],M={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NL:5,directive:6,SD:7,document:8,line:9,statement:10,classDefStatement:11,cssClassStatement:12,idStatement:13,DESCR:14,"--\x3e":15,HIDE_EMPTY:16,scale:17,WIDTH:18,COMPOSIT_STATE:19,STRUCT_START:20,STRUCT_STOP:21,STATE_DESCR:22,AS:23,ID:24,FORK:25,JOIN:26,CHOICE:27,CONCURRENT:28,note:29,notePosition:30,NOTE_TEXT:31,direction:32,acc_title:33,acc_title_value:34,acc_descr:35,acc_descr_value:36,acc_descr_multiline_value:37,classDef:38,CLASSDEF_ID:39,CLASSDEF_STYLEOPTS:40,DEFAULT:41,class:42,CLASSENTITY_IDS:43,STYLECLASS:44,openDirective:45,typeDirective:46,closeDirective:47,":":48,argDirective:49,direction_tb:50,direction_bt:51,direction_rl:52,direction_lr:53,eol:54,";":55,EDGE_STATE:56,STYLE_SEPARATOR:57,left_of:58,right_of:59,open_directive:60,type_directive:61,arg_directive:62,close_directive:63,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NL",7:"SD",14:"DESCR",15:"--\x3e",16:"HIDE_EMPTY",17:"scale",18:"WIDTH",19:"COMPOSIT_STATE",20:"STRUCT_START",21:"STRUCT_STOP",22:"STATE_DESCR",23:"AS",24:"ID",25:"FORK",26:"JOIN",27:"CHOICE",28:"CONCURRENT",29:"note",31:"NOTE_TEXT",33:"acc_title",34:"acc_title_value",35:"acc_descr",36:"acc_descr_value",37:"acc_descr_multiline_value",38:"classDef",39:"CLASSDEF_ID",40:"CLASSDEF_STYLEOPTS",41:"DEFAULT",42:"class",43:"CLASSENTITY_IDS",44:"STYLECLASS",48:":",50:"direction_tb",51:"direction_bt",52:"direction_rl",53:"direction_lr",55:";",56:"EDGE_STATE",57:"STYLE_SEPARATOR",58:"left_of",59:"right_of",60:"open_directive",61:"type_directive",62:"arg_directive",63:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[10,1],[10,1],[10,1],[10,2],[10,3],[10,4],[10,1],[10,2],[10,1],[10,4],[10,3],[10,6],[10,1],[10,1],[10,1],[10,1],[10,4],[10,4],[10,1],[10,1],[10,2],[10,2],[10,1],[11,3],[11,3],[12,3],[6,3],[6,5],[32,1],[32,1],[32,1],[32,1],[54,1],[54,1],[13,1],[13,1],[13,3],[13,3],[30,1],[30,1],[45,1],[46,1],[49,1],[47,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.setRootDoc(a[o]),a[o];case 5:this.$=[];break;case 6:"nl"!=a[o]&&(a[o-1].push(a[o]),this.$=a[o-1]);break;case 7:case 8:case 12:this.$=a[o];break;case 9:this.$="nl";break;case 13:const t=a[o-1];t.description=r.trimColon(a[o]),this.$=t;break;case 14:this.$={stmt:"relation",state1:a[o-2],state2:a[o]};break;case 15:const e=r.trimColon(a[o]);this.$={stmt:"relation",state1:a[o-3],state2:a[o-1],description:e};break;case 19:this.$={stmt:"state",id:a[o-3],type:"default",description:"",doc:a[o-1]};break;case 20:var c=a[o],l=a[o-2].trim();if(a[o].match(":")){var h=a[o].split(":");c=h[0],l=[l,h[1]]}this.$={stmt:"state",id:c,type:"default",description:l};break;case 21:this.$={stmt:"state",id:a[o-3],type:"default",description:a[o-5],doc:a[o-1]};break;case 22:this.$={stmt:"state",id:a[o],type:"fork"};break;case 23:this.$={stmt:"state",id:a[o],type:"join"};break;case 24:this.$={stmt:"state",id:a[o],type:"choice"};break;case 25:this.$={stmt:"state",id:r.getDividerId(),type:"divider"};break;case 26:this.$={stmt:"state",id:a[o-1].trim(),note:{position:a[o-2].trim(),text:a[o].trim()}};break;case 30:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 31:case 32:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 33:case 34:this.$={stmt:"classDef",id:a[o-1].trim(),classes:a[o].trim()};break;case 35:this.$={stmt:"applyClass",id:a[o-1].trim(),styleClass:a[o].trim()};break;case 38:r.setDirection("TB"),this.$={stmt:"dir",value:"TB"};break;case 39:r.setDirection("BT"),this.$={stmt:"dir",value:"BT"};break;case 40:r.setDirection("RL"),this.$={stmt:"dir",value:"RL"};break;case 41:r.setDirection("LR"),this.$={stmt:"dir",value:"LR"};break;case 44:case 45:this.$={stmt:"state",id:a[o].trim(),type:"default",description:""};break;case 46:case 47:this.$={stmt:"state",id:a[o-2].trim(),classes:[a[o].trim()],type:"default",description:""};break;case 50:r.parseDirective("%%{","open_directive");break;case 51:r.parseDirective(a[o],"type_directive");break;case 52:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 53:r.parseDirective("}%%","close_directive","state")}},table:[{3:1,4:n,5:r,6:4,7:i,45:6,60:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,45:6,60:a},{3:9,4:n,5:r,6:4,7:i,45:6,60:a},{3:10,4:n,5:r,6:4,7:i,45:6,60:a},e([1,4,5,16,17,19,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],s,{8:11}),{46:12,61:[1,13]},{61:[2,50]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},{47:43,48:[1,44],63:L},e([48,63],[2,51]),e(B,[2,6]),{6:30,10:46,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,8]),e(B,[2,9]),e(B,[2,10]),e(B,[2,11]),e(B,[2,12],{14:[1,47],15:[1,48]}),e(B,[2,16]),{18:[1,49]},e(B,[2,18],{20:[1,50]}),{23:[1,51]},e(B,[2,22]),e(B,[2,23]),e(B,[2,24]),e(B,[2,25]),{30:52,31:[1,53],58:[1,54],59:[1,55]},e(B,[2,28]),e(B,[2,29]),{34:[1,56]},{36:[1,57]},e(B,[2,32]),{39:[1,58],41:[1,59]},{43:[1,60]},e(N,[2,44],{57:[1,61]}),e(N,[2,45],{57:[1,62]}),e(B,[2,38]),e(B,[2,39]),e(B,[2,40]),e(B,[2,41]),e(D,[2,36]),{49:63,62:[1,64]},e(D,[2,53]),e(B,[2,7]),e(B,[2,13]),{13:65,24:p,56:A},e(B,[2,17]),e(O,s,{8:66}),{24:[1,67]},{24:[1,68]},{23:[1,69]},{24:[2,48]},{24:[2,49]},e(B,[2,30]),e(B,[2,31]),{40:[1,70]},{40:[1,71]},{44:[1,72]},{24:[1,73]},{24:[1,74]},{47:75,63:L},{63:[2,52]},e(B,[2,14],{14:[1,76]}),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,77],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,20],{20:[1,78]}),{31:[1,79]},{24:[1,80]},e(B,[2,33]),e(B,[2,34]),e(B,[2,35]),e(N,[2,46]),e(N,[2,47]),e(D,[2,37]),e(B,[2,15]),e(B,[2,19]),e(O,s,{8:81}),e(B,[2,26]),e(B,[2,27]),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,82],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,21])],defaultActions:{7:[2,50],8:[2,1],9:[2,2],10:[2,3],54:[2,48],55:[2,49],64:[2,52]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},I=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 41;case 1:case 44:return 50;case 2:case 45:return 51;case 3:case 46:return 52;case 4:case 47:return 53;case 5:return this.begin("open_directive"),60;case 6:return this.begin("type_directive"),61;case 7:return this.popState(),this.begin("arg_directive"),48;case 8:return this.popState(),this.popState(),63;case 9:return 62;case 10:case 11:case 13:case 14:case 15:case 16:case 56:case 58:case 64:break;case 12:case 79:return 5;case 17:case 34:return this.pushState("SCALE"),17;case 18:case 35:return 18;case 19:case 25:case 36:case 51:case 54:this.popState();break;case 20:return this.begin("acc_title"),33;case 21:return this.popState(),"acc_title_value";case 22:return this.begin("acc_descr"),35;case 23:return this.popState(),"acc_descr_value";case 24:this.begin("acc_descr_multiline");break;case 26:return"acc_descr_multiline_value";case 27:return this.pushState("CLASSDEF"),38;case 28:return this.popState(),this.pushState("CLASSDEFID"),"DEFAULT_CLASSDEF_ID";case 29:return this.popState(),this.pushState("CLASSDEFID"),39;case 30:return this.popState(),40;case 31:return this.pushState("CLASS"),42;case 32:return this.popState(),this.pushState("CLASS_STYLE"),43;case 33:return this.popState(),44;case 37:this.pushState("STATE");break;case 38:case 41:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),25;case 39:case 42:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),26;case 40:case 43:return this.popState(),e.yytext=e.yytext.slice(0,-10).trim(),27;case 48:this.pushState("STATE_STRING");break;case 49:return this.pushState("STATE_ID"),"AS";case 50:case 66:return this.popState(),"ID";case 52:return"STATE_DESCR";case 53:return 19;case 55:return this.popState(),this.pushState("struct"),20;case 57:return this.popState(),21;case 59:return this.begin("NOTE"),29;case 60:return this.popState(),this.pushState("NOTE_ID"),58;case 61:return this.popState(),this.pushState("NOTE_ID"),59;case 62:this.popState(),this.pushState("FLOATING_NOTE");break;case 63:return this.popState(),this.pushState("FLOATING_NOTE_ID"),"AS";case 65:return"NOTE_TEXT";case 67:return this.popState(),this.pushState("NOTE_TEXT"),24;case 68:return this.popState(),e.yytext=e.yytext.substr(2).trim(),31;case 69:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),31;case 70:case 71:return 7;case 72:return 16;case 73:return 56;case 74:return 24;case 75:return e.yytext=e.yytext.trim(),14;case 76:return 15;case 77:return 28;case 78:return 57;case 80:return"INVALID"}},rules:[/^(?:default\b)/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:[\s]+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:classDef\s+)/i,/^(?:DEFAULT\s+)/i,/^(?:\w+\s+)/i,/^(?:[^\n]*)/i,/^(?:class\s+)/i,/^(?:(\w+)+((,\s*\w+)*))/i,/^(?:[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:state\s+)/i,/^(?:.*<<fork>>)/i,/^(?:.*<<join>>)/i,/^(?:.*<<choice>>)/i,/^(?:.*\[\[fork\]\])/i,/^(?:.*\[\[join\]\])/i,/^(?:.*\[\[choice\]\])/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:["])/i,/^(?:\s*as\s+)/i,/^(?:[^\n\{]*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n\s\{]+)/i,/^(?:\n)/i,/^(?:\{)/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:\})/i,/^(?:[\n])/i,/^(?:note\s+)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:")/i,/^(?:\s*as\s*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n]*)/i,/^(?:\s*[^:\n\s\-]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:[\s\S]*?end note\b)/i,/^(?:stateDiagram\s+)/i,/^(?:stateDiagram-v2\s+)/i,/^(?:hide empty description\b)/i,/^(?:\[\*\])/i,/^(?:[^:\n\s\-\{]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:-->)/i,/^(?:--)/i,/^(?::::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{LINE:{rules:[14,15],inclusive:!1},close_directive:{rules:[14,15],inclusive:!1},arg_directive:{rules:[8,9,14,15],inclusive:!1},type_directive:{rules:[7,8,14,15],inclusive:!1},open_directive:{rules:[6,14,15],inclusive:!1},struct:{rules:[14,15,27,31,37,44,45,46,47,56,57,58,59,73,74,75,76,77],inclusive:!1},FLOATING_NOTE_ID:{rules:[66],inclusive:!1},FLOATING_NOTE:{rules:[63,64,65],inclusive:!1},NOTE_TEXT:{rules:[68,69],inclusive:!1},NOTE_ID:{rules:[67],inclusive:!1},NOTE:{rules:[60,61,62],inclusive:!1},CLASS_STYLE:{rules:[33],inclusive:!1},CLASS:{rules:[32],inclusive:!1},CLASSDEFID:{rules:[30],inclusive:!1},CLASSDEF:{rules:[28,29],inclusive:!1},acc_descr_multiline:{rules:[25,26],inclusive:!1},acc_descr:{rules:[23],inclusive:!1},acc_title:{rules:[21],inclusive:!1},SCALE:{rules:[18,19,35,36],inclusive:!1},ALIAS:{rules:[],inclusive:!1},STATE_ID:{rules:[50],inclusive:!1},STATE_STRING:{rules:[51,52],inclusive:!1},FORK_STATE:{rules:[],inclusive:!1},STATE:{rules:[14,15,38,39,40,41,42,43,48,49,53,54,55],inclusive:!1},ID:{rules:[14,15],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,5,10,11,12,13,15,16,17,20,22,24,27,31,34,37,55,59,70,71,72,73,74,75,76,78,79,80],inclusive:!0}}},t);function F(){this.yy={}}return M.lexer=I,F.prototype=M,M.Parser=F,new F}();qh.parser=qh;const Hh=qh,Vh=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*stateDiagram/)},Gh=(t,e)=>{var n;return null!==t.match(/^\s*stateDiagram-v2/)||!(!t.match(/^\s*stateDiagram/)||"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer))},Xh="state",Kh="relation",Qh="default",Jh="divider",tu="[*]",eu="start",nu="color",ru="fill";let iu="LR",au=[],su={};let ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,hu=0;const uu=t=>JSON.parse(JSON.stringify(t)),du=(t,e,n)=>{if(e.stmt===Kh)du(t,e.state1,!0),du(t,e.state2,!1);else if(e.stmt===Xh&&("[*]"===e.id?(e.id=n?t.id+"_start":t.id+"_end",e.start=n):e.id=e.id.trim()),e.doc){const t=[];let n,r=[];for(n=0;n<e.doc.length;n++)if(e.doc[n].type===Jh){const i=uu(e.doc[n]);i.doc=uu(r),t.push(i),r=[]}else r.push(e.doc[n]);if(t.length>0&&r.length>0){const n={stmt:Xh,id:Fn(),type:"divider",doc:uu(r)};t.push(uu(n)),e.doc=t}e.doc.forEach((t=>du(e,t,!0)))}},pu=function(t,e="default",n=null,r=null,i=null,a=null,s=null,o=null){const c=null==t?void 0:t.trim();if(void 0===cu.states[c]?(Nt.info("Adding state ",c,r),cu.states[c]={id:c,descriptions:[],type:e,doc:n,note:i,classes:[],styles:[],textStyles:[]}):(cu.states[c].doc||(cu.states[c].doc=n),cu.states[c].type||(cu.states[c].type=e)),r&&(Nt.info("Setting state description",c,r),"string"==typeof r&&_u(c,r.trim()),"object"==typeof r&&r.forEach((t=>_u(c,t.trim())))),i&&(cu.states[c].note=i,cu.states[c].note.text=Yt.sanitizeText(cu.states[c].note.text,ar())),a){Nt.info("Setting state classes",c,a);("string"==typeof a?[a]:a).forEach((t=>vu(c,t.trim())))}if(s){Nt.info("Setting state styles",c,s);("string"==typeof s?[s]:s).forEach((t=>ku(c,t.trim())))}if(o){Nt.info("Setting state styles",c,s);("string"==typeof o?[o]:o).forEach((t=>wu(c,t.trim())))}},fu=function(t){ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,su={},t||Dr()},gu=function(t){return cu.states[t]};function yu(t=""){let e=t;return t===tu&&(lu++,e=`start${lu}`),e}function mu(t="",e="default"){return t===tu?eu:e}const bu=function(t,e,n){if("object"==typeof t)!function(t,e,n){let r=yu(t.id.trim()),i=mu(t.id.trim(),t.type),a=yu(e.id.trim()),s=mu(e.id.trim(),e.type);pu(r,i,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles),pu(a,s,e.doc,e.description,e.note,e.classes,e.styles,e.textStyles),cu.relations.push({id1:r,id2:a,relationTitle:Yt.sanitizeText(n,ar())})}(t,e,n);else{const r=yu(t.trim()),i=mu(t),a=function(t=""){let e=t;return"[*]"===t&&(lu++,e=`end${lu}`),e}(e.trim()),s=function(t="",e="default"){return"[*]"===t?"end":e}(e);pu(r,i),pu(a,s),cu.relations.push({id1:r,id2:a,title:Yt.sanitizeText(n,ar())})}},_u=function(t,e){const n=cu.states[t],r=e.startsWith(":")?e.replace(":","").trim():e;n.descriptions.push(Yt.sanitizeText(r,ar()))},xu=function(t,e=""){void 0===su[t]&&(su[t]={id:t,styles:[],textStyles:[]});const n=su[t];null!=e&&e.split(",").forEach((t=>{const e=t.replace(/([^;]*);/,"$1").trim();if(t.match(nu)){const t=e.replace(ru,"bgFill").replace(nu,ru);n.textStyles.push(t)}n.styles.push(e)}))},vu=function(t,e){t.split(",").forEach((function(t){let n=gu(t);if(void 0===n){const e=t.trim();pu(e),n=gu(e)}n.classes.push(e)}))},ku=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},wu=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},Eu={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().state,addState:pu,clear:fu,getState:gu,getStates:function(){return cu.states},getRelations:function(){return cu.relations},getClasses:function(){return su},getDirection:()=>iu,addRelation:bu,getDividerId:()=>(hu++,"divider-id-"+hu),setDirection:t=>{iu=t},cleanupLabel:function(t){return":"===t.substring(0,1)?t.substr(2).trim():t.trim()},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3},logDocuments:function(){Nt.info("Documents = ",ou)},getRootDoc:()=>au,setRootDoc:t=>{Nt.info("Setting root doc",t),au=t},getRootDocV2:()=>(du({id:"root"},{id:"root",doc:au},!0),{id:"root",doc:au}),extract:t=>{let e;e=t.doc?t.doc:t,Nt.info(e),fu(!0),Nt.info("Extract",e),e.forEach((t=>{switch(t.stmt){case Xh:pu(t.id.trim(),t.type,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles);break;case Kh:bu(t.state1,t.state2,t.description);break;case"classDef":xu(t.id.trim(),t.classes);break;case"applyClass":vu(t.id.trim(),t.styleClass)}}))},trimColon:t=>t&&":"===t[0]?t.substr(1).trim():t.trim(),getAccTitle:Mr,setAccTitle:Or,getAccDescription:Fr,setAccDescription:Ir,addStyleClass:xu,setCssClass:vu,addDescription:_u,setDiagramTitle:$r,getDiagramTitle:Rr},Cu={},Tu=(t,e)=>{Cu[t]=e},Su=(t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+1.3*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.descriptions[0]).node().getBBox(),r=n.height,i=t.append("text").attr("x",ar().state.padding).attr("y",r+.4*ar().state.padding+ar().state.dividerMargin+ar().state.textHeight).attr("class","state-description");let a=!0,s=!0;e.descriptions.forEach((function(t){a||(!function(t,e,n){const r=t.append("tspan").attr("x",2*ar().state.padding).text(e);n||r.attr("dy",ar().state.textHeight)}(i,t,s),s=!1),a=!1}));const o=t.append("line").attr("x1",ar().state.padding).attr("y1",ar().state.padding+r+ar().state.dividerMargin/2).attr("y2",ar().state.padding+r+ar().state.dividerMargin/2).attr("class","descr-divider"),c=i.node().getBBox(),l=Math.max(c.width,n.width);return o.attr("x2",l+3*ar().state.padding),t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",l+2*ar().state.padding).attr("height",c.height+r+2*ar().state.padding).attr("rx",ar().state.radius),t},Au=(t,e,n)=>{const r=ar().state.padding,i=2*ar().state.padding,a=t.node().getBBox(),s=a.width,o=a.x,c=t.append("text").attr("x",0).attr("y",ar().state.titleShift).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),l=c.node().getBBox().width+i;let h,u=Math.max(l,s);u===s&&(u+=i);const d=t.node().getBBox();e.doc,h=o-r,l>s&&(h=(s-u)/2+r),Math.abs(o-d.x)<r&&l>s&&(h=o-(l-s)/2);const p=1-ar().state.textHeight;return t.insert("rect",":first-child").attr("x",h).attr("y",p).attr("class",n?"alt-composit":"composit").attr("width",u).attr("height",d.height+ar().state.textHeight+ar().state.titleShift+1).attr("rx","0"),c.attr("x",h+r),l<=s&&c.attr("x",o+(u-i)/2-l/2+r),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",3*ar().state.textHeight).attr("rx",ar().state.radius),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",d.height+3+2*ar().state.textHeight).attr("rx",ar().state.radius),t},Lu=(t,e)=>{e.attr("class","state-note");const n=e.append("rect").attr("x",0).attr("y",ar().state.padding),r=e.append("g"),{textWidth:i,textHeight:a}=((t,e,n,r)=>{let i=0;const a=r.append("text");a.style("text-anchor","start"),a.attr("class","noteText");let s=t.replace(/\r\n/g,"<br/>");s=s.replace(/\n/g,"<br/>");const o=s.split(Yt.lineBreakRegex);let c=1.25*ar().state.noteMargin;for(const l of o){const t=l.trim();if(t.length>0){const r=a.append("tspan");r.text(t),0===c&&(c+=r.node().getBBox().height),i+=c,r.attr("x",e+ar().state.noteMargin),r.attr("y",n+i+1.25*ar().state.noteMargin)}}return{textWidth:a.node().getBBox().width,textHeight:i}})(t,0,0,r);return n.attr("height",a+2*ar().state.noteMargin),n.attr("width",i+2*ar().state.noteMargin),n},Bu=function(t,e){const n=e.id,r={id:n,label:e.id,width:0,height:0},i=t.append("g").attr("id",n).attr("class","stateGroup");"start"===e.type&&(t=>{t.append("circle").attr("class","start-state").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit).attr("cy",ar().state.padding+ar().state.sizeUnit)})(i),"end"===e.type&&(t=>{t.append("circle").attr("class","end-state-outer").attr("r",ar().state.sizeUnit+ar().state.miniPadding).attr("cx",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding).attr("cy",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding),t.append("circle").attr("class","end-state-inner").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit+2).attr("cy",ar().state.padding+ar().state.sizeUnit+2)})(i),"fork"!==e.type&&"join"!==e.type||((t,e)=>{let n=ar().state.forkWidth,r=ar().state.forkHeight;if(e.parentId){let t=n;n=r,r=t}t.append("rect").style("stroke","black").style("fill","black").attr("width",n).attr("height",r).attr("x",ar().state.padding).attr("y",ar().state.padding)})(i,e),"note"===e.type&&Lu(e.note.text,i),"divider"===e.type&&(t=>{t.append("line").style("stroke","grey").style("stroke-dasharray","3").attr("x1",ar().state.textHeight).attr("class","divider").attr("x2",2*ar().state.textHeight).attr("y1",0).attr("y2",0)})(i),"default"===e.type&&0===e.descriptions.length&&((t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+2*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),r=n.node().getBBox();t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",r.width+2*ar().state.padding).attr("height",r.height+2*ar().state.padding).attr("rx",ar().state.radius)})(i,e),"default"===e.type&&e.descriptions.length>0&&Su(i,e);const a=i.node().getBBox();return r.width=a.width+2*ar().state.padding,r.height=a.height+2*ar().state.padding,Tu(n,r),r};let Nu=0;let Du;const Ou={},Mu=(t,e,n,r,i,a,s)=>{const c=new ht.k({compound:!0,multigraph:!0});let l,h=!0;for(l=0;l<t.length;l++)if("relation"===t[l].stmt){h=!1;break}n?c.setGraph({rankdir:"LR",multigraph:!0,compound:!0,ranker:"tight-tree",ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,isMultiGraph:!0}):c.setGraph({rankdir:"TB",multigraph:!0,compound:!0,ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,ranker:"tight-tree",isMultiGraph:!0}),c.setDefaultEdgeLabel((function(){return{}})),s.db.extract(t);const u=s.db.getStates(),d=s.db.getRelations(),p=Object.keys(u);for(const o of p){const t=u[o];let l;if(n&&(t.parentId=n),t.doc){let n=e.append("g").attr("id",t.id).attr("class","stateGroup");l=Mu(t.doc,n,t.id,!r,i,a,s);{n=Au(n,t,r);let e=n.node().getBBox();l.width=e.width,l.height=e.height+Du.padding/2,Ou[t.id]={y:Du.compositTitleSize}}}else l=Bu(e,t);if(t.note){const n={descriptions:[],id:t.id+"-note",note:t.note,type:"note"},r=Bu(e,n);"left of"===t.note.position?(c.setNode(l.id+"-note",r),c.setNode(l.id,l)):(c.setNode(l.id,l),c.setNode(l.id+"-note",r)),c.setParent(l.id,l.id+"-group"),c.setParent(l.id+"-note",l.id+"-group")}else c.setNode(l.id,l)}Nt.debug("Count=",c.nodeCount(),c);let f=0;d.forEach((function(t){var e;f++,Nt.debug("Setting edge",t),c.setEdge(t.id1,t.id2,{relation:t,width:(e=t.title,e?e.length*Du.fontSizeFactor:1),height:Du.labelHeight*Yt.getRows(t.title).length,labelpos:"c"},"id"+f)})),(0,lt.bK)(c),Nt.debug("Graph after layout",c.nodes());const g=e.node();c.nodes().forEach((function(t){if(void 0!==t&&void 0!==c.node(t)){Nt.warn("Node "+t+": "+JSON.stringify(c.node(t))),i.select("#"+g.id+" #"+t).attr("transform","translate("+(c.node(t).x-c.node(t).width/2)+","+(c.node(t).y+(Ou[t]?Ou[t].y:0)-c.node(t).height/2)+" )"),i.select("#"+g.id+" #"+t).attr("data-x-shift",c.node(t).x-c.node(t).width/2);a.querySelectorAll("#"+g.id+" #"+t+" .divider").forEach((t=>{const e=t.parentElement;let n=0,r=0;e&&(e.parentElement&&(n=e.parentElement.getBBox().width),r=parseInt(e.getAttribute("data-x-shift"),10),Number.isNaN(r)&&(r=0)),t.setAttribute("x1",0-r+8),t.setAttribute("x2",n-r-8)}))}else Nt.debug("No Node "+t+": "+JSON.stringify(c.node(t)))}));let y=g.getBBox();c.edges().forEach((function(t){void 0!==t&&void 0!==c.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(c.edge(t))),function(t,e,n){e.points=e.points.filter((t=>!Number.isNaN(t.y)));const r=e.points,i=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),a=t.append("path").attr("d",i(r)).attr("id","edge"+Nu).attr("class","transition");let s="";if(ar().state.arrowMarkerAbsolute&&(s=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,s=s.replace(/\(/g,"\\("),s=s.replace(/\)/g,"\\)")),a.attr("marker-end","url("+s+"#"+function(t){switch(t){case Eu.relationType.AGGREGATION:return"aggregation";case Eu.relationType.EXTENSION:return"extension";case Eu.relationType.COMPOSITION:return"composition";case Eu.relationType.DEPENDENCY:return"dependency"}}(Eu.relationType.DEPENDENCY)+"End)"),void 0!==n.title){const r=t.append("g").attr("class","stateLabel"),{x:i,y:a}=Gn.calcLabelPosition(e.points),s=Yt.getRows(n.title);let o=0;const c=[];let l=0,h=0;for(let t=0;t<=s.length;t++){const e=r.append("text").attr("text-anchor","middle").text(s[t]).attr("x",i).attr("y",a+o),n=e.node().getBBox();if(l=Math.max(l,n.width),h=Math.min(h,n.x),Nt.info(n.x,i,a+o),0===o){const t=e.node().getBBox();o=t.height,Nt.info("Title height",o,a)}c.push(e)}let u=o*s.length;if(s.length>1){const t=(s.length-1)*o*.5;c.forEach(((e,n)=>e.attr("y",a+n*o-t))),u=o*s.length}const d=r.node().getBBox();r.insert("rect",":first-child").attr("class","box").attr("x",i-l/2-ar().state.padding/2).attr("y",a-u/2-ar().state.padding/2-3.5).attr("width",l+ar().state.padding).attr("height",u+ar().state.padding),Nt.info(d)}Nu++}(e,c.edge(t),c.edge(t).relation))})),y=g.getBBox();const m={id:n||"root",label:n||"root",width:0,height:0};return m.width=y.width+2*Du.padding,m.height=y.height+2*Du.padding,Nt.debug("Doc rendered",m,c),m},Iu={setConf:function(){},draw:function(t,e,n,r){Du=ar().state;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body"),c="sandbox"===i?a.nodes()[0].contentDocument:document;Nt.debug("Rendering diagram "+t);const l=s.select(`[id='${e}']`);l.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z");new ht.k({multigraph:!0,compound:!0,rankdir:"RL"}).setDefaultEdgeLabel((function(){return{}}));const h=r.db.getRootDoc();Mu(h,l,void 0,!1,s,c,r);const u=Du.padding,d=l.node().getBBox(),p=d.width+2*u,f=d.height+2*u;dr(l,f,1.75*p,Du.useMaxWidth),l.attr("viewBox",`${d.x-Du.padding}  ${d.y-Du.padding} `+p+" "+f)}},Fu="rect",$u="rectWithTitle",Ru="statediagram",Zu="transition",Pu="parent",ju="note",Yu="----parent",zu="fill:none",Uu="fill: #333",Wu="text",qu="normal";let Hu={},Vu=0;function Gu(t="",e=0,n="",r="----"){return`state-${t}${null!==n&&n.length>0?`${r}${n}`:""}-${e}`}const Xu=(t,e,n,r,i,a)=>{const s=n.id,o=null==(c=r[s])?"":c.classes?c.classes.join(" "):"";var c;if("root"!==s){let e=Fu;!0===n.start&&(e="start"),!1===n.start&&(e="end"),n.type!==Qh&&(e=n.type),Hu[s]||(Hu[s]={id:s,shape:e,description:Yt.sanitizeText(s,ar()),classes:`${o} statediagram-state`});const r=Hu[s];n.description&&(Array.isArray(r.description)?(r.shape=$u,r.description.push(n.description)):r.description.length>0?(r.shape=$u,r.description===s?r.description=[n.description]:r.description=[r.description,n.description]):(r.shape=Fu,r.description=n.description),r.description=Yt.sanitizeTextOrArray(r.description,ar())),1===r.description.length&&r.shape===$u&&(r.shape=Fu),!r.type&&n.doc&&(Nt.info("Setting cluster for ",s,Qu(n)),r.type="group",r.dir=Qu(n),r.shape=n.type===Jh?"divider":"roundedWithTitle",r.classes=r.classes+" statediagram-cluster "+(a?"statediagram-cluster-alt":""));const i={labelStyle:"",shape:r.shape,labelText:r.description,classes:r.classes,style:"",id:s,dir:r.dir,domId:Gu(s,Vu),type:r.type,padding:15};if(n.note){const e={labelStyle:"",shape:"note",labelText:n.note.text,classes:"statediagram-note",style:"",id:s+"----note-"+Vu,domId:Gu(s,Vu,ju),type:r.type,padding:15},a={labelStyle:"",shape:"noteGroup",labelText:n.note.text,classes:r.classes,style:"",id:s+Yu,domId:Gu(s,Vu,Pu),type:"group",padding:0};Vu++;const o=s+Yu;t.setNode(o,a),t.setNode(e.id,e),t.setNode(s,i),t.setParent(s,o),t.setParent(e.id,o);let c=s,l=e.id;"left of"===n.note.position&&(c=e.id,l=s),t.setEdge(c,l,{arrowhead:"none",arrowType:"",style:zu,labelStyle:"",classes:"transition note-edge",arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu})}else t.setNode(s,i)}e&&"root"!==e.id&&(Nt.trace("Setting node ",s," to be child of its parent ",e.id),t.setParent(s,e.id)),n.doc&&(Nt.trace("Adding nodes children "),Ku(t,n,n.doc,r,i,!a))},Ku=(t,e,n,r,i,a)=>{Nt.trace("items",n),n.forEach((n=>{switch(n.stmt){case Xh:case Qh:Xu(t,e,n,r,i,a);break;case Kh:{Xu(t,e,n.state1,r,i,a),Xu(t,e,n.state2,r,i,a);const s={id:"edge"+Vu,arrowhead:"normal",arrowTypeEnd:"arrow_barb",style:zu,labelStyle:"",label:Yt.sanitizeText(n.description,ar()),arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu,classes:Zu};t.setEdge(n.state1.id,n.state2.id,s,Vu),Vu++}}}))},Qu=(t,e="TB")=>{let n=e;if(t.doc)for(let r=0;r<t.doc.length;r++){const e=t.doc[r];"dir"===e.stmt&&(n=e.value)}return n},Ju={setConf:function(t){const e=Object.keys(t);for(const n of e)t[n]},getClasses:function(t,e){Nt.trace("Extracting classes"),e.db.clear();try{return e.parser.parse(t),e.db.extract(e.db.getRootDocV2()),e.db.getClasses()}catch(n){return n}},draw:function(t,e,n,r){Nt.info("Drawing state diagram (v2)",e),Hu={};let i=r.db.getDirection();void 0===i&&(i="LR");const{securityLevel:a,state:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;Nt.info(r.db.getRootDocV2()),r.db.extract(r.db.getRootDocV2()),Nt.info(r.db.getRootDocV2());const h=r.db.getStates(),u=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:Qu(r.db.getRootDocV2()),nodesep:c,ranksep:l,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));let d;Xu(u,void 0,r.db.getRootDocV2(),h,r.db,!0),"sandbox"===a&&(d=(0,o.Ys)("#i"+e));const p="sandbox"===a?(0,o.Ys)(d.nodes()[0].contentDocument.body):(0,o.Ys)("body"),f=p.select(`[id="${e}"]`),g=p.select("#"+e+" g");qs(g,u,["barb"],Ru,e);Gn.insertTitle(f,"statediagramTitleText",s.titleTopMargin,r.db.getDiagramTitle());const y=f.node().getBBox(),m=y.width+16,b=y.height+16;f.attr("class",Ru);const _=f.node().getBBox();dr(f,b,m,s.useMaxWidth);const x=`${_.x-8} ${_.y-8} ${m} ${b}`;Nt.debug(`viewBox ${x}`),f.attr("viewBox",x);const v=document.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const o of v){const t=o.getBBox(),e=document.createElementNS("http://www.w3.org/2000/svg",Fu);e.setAttribute("rx",0),e.setAttribute("ry",0),e.setAttribute("width",t.width),e.setAttribute("height",t.height),o.insertBefore(e,o.firstChild)}}};var td=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,17,18,20,22,23,24,26],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,24],d=[4,6,9,11,17,18,20,22,23,24,26],p={trace:function(){},yy:{},symbols_:{error:2,start:3,journey:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,title:17,acc_title:18,acc_title_value:19,acc_descr:20,acc_descr_value:21,acc_descr_multiline_value:22,section:23,taskName:24,taskData:25,open_directive:26,type_directive:27,arg_directive:28,close_directive:29,$accept:0,$end:1},terminals_:{2:"error",4:"journey",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",17:"title",18:"acc_title",19:"acc_title_value",20:"acc_descr",21:"acc_descr_value",22:"acc_descr_multiline_value",23:"section",24:"taskName",25:"taskData",26:"open_directive",27:"type_directive",28:"arg_directive",29:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,2],[10,2],[10,1],[10,1],[10,2],[10,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 11:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 12:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 13:case 14:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 15:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 16:r.addTask(a[o-1],a[o]),this.$="task";break;case 18:r.parseDirective("%%{","open_directive");break;case 19:r.parseDirective(a[o],"type_directive");break;case 20:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 21:r.parseDirective("}%%","close_directive","journey")}},table:[{3:1,4:n,7:3,12:4,26:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,26:r},{13:8,27:[1,9]},{27:[2,18]},{6:[1,10],7:21,8:11,9:[1,12],10:13,11:[1,14],12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},{1:[2,2]},{14:22,15:[1,23],29:u},e([15,29],[2,19]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:21,10:25,12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),{19:[1,26]},{21:[1,27]},e(i,[2,14]),e(i,[2,15]),{25:[1,28]},e(i,[2,17]),{11:[1,29]},{16:30,28:[1,31]},{11:[2,21]},e(i,[2,5]),e(i,[2,12]),e(i,[2,13]),e(i,[2,16]),e(d,[2,9]),{14:32,29:u},{29:[2,20]},{11:[1,33]},e(d,[2,10])],defaultActions:{5:[2,18],7:[2,2],24:[2,21],31:[2,20]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},f=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),26;case 1:return this.begin("type_directive"),27;case 2:return this.popState(),this.begin("arg_directive"),15;case 3:return this.popState(),this.popState(),29;case 4:return 28;case 5:case 6:case 8:case 9:break;case 7:return 11;case 10:return 4;case 11:return 17;case 12:return this.begin("acc_title"),18;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),20;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:return 23;case 20:return 24;case 21:return 25;case 22:return 15;case 23:return 6;case 24:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:journey\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{open_directive:{rules:[1],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,11,12,14,16,19,20,21,22,23,24],inclusive:!0}}},t);function g(){this.yy={}}return p.lexer=f,g.prototype=p,p.Parser=g,new g}();td.parser=td;const ed=td,nd=t=>null!==t.match(/^\s*journey/);let rd="";const id=[],ad=[],sd=[],od=function(){let t=!0;for(const[e,n]of sd.entries())sd[e].processed,t=t&&n.processed;return t},cd={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().journey,clear:function(){id.length=0,ad.length=0,rd="",sd.length=0,Dr()},setDiagramTitle:$r,getDiagramTitle:Rr,setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){rd=t,id.push(t)},getSections:function(){return id},getTasks:function(){let t=od();let e=0;for(;!t&&e<100;)t=od(),e++;return ad.push(...sd),ad},addTask:function(t,e){const n=e.substr(1).split(":");let r=0,i=[];1===n.length?(r=Number(n[0]),i=[]):(r=Number(n[0]),i=n[1].split(","));const a=i.map((t=>t.trim())),s={section:rd,type:rd,people:a,task:t,score:r};sd.push(s)},addTaskOrg:function(t){const e={section:rd,type:rd,description:t,task:t,classes:[]};ad.push(e)},getActors:function(){return function(){const t=[];return ad.forEach((e=>{e.people&&t.push(...e.people)})),[...new Set(t)].sort()}()}},ld=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},hd=function(t,e){const n=t.append("circle");return n.attr("cx",e.cx),n.attr("cy",e.cy),n.attr("class","actor-"+e.pos),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("r",e.r),void 0!==n.class&&n.attr("class",n.class),void 0!==e.title&&n.append("title").text(e.title),n},ud=function(t,e){const n=e.text.replace(/<br\s*\/?>/gi," "),r=t.append("text");r.attr("x",e.x),r.attr("y",e.y),r.attr("class","legend"),r.style("text-anchor",e.anchor),void 0!==e.class&&r.attr("class",e.class);const i=r.append("tspan");return i.attr("x",e.x+2*e.textMargin),i.text(n),r};let dd=-1;const pd=function(){return{x:0,y:0,width:100,anchor:"start",height:100,rx:0,ry:0}},fd=function(){function t(t,e,n,i,a,s,o,c){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("font-color",c).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c,l){const{taskFontSize:h,taskFontFamily:u}=c,d=t.split(/<br\s*\/?>/gi);for(let p=0;p<d.length;p++){const t=p*h-h*(d.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).attr("fill",l).style("text-anchor","middle").style("font-size",h).style("font-family",u);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(d[p]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).attr("position","fixed").append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").attr("class","label").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)n in e&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),gd=hd,yd=function(t,e,n){const r=t.append("g"),i=pd();i.x=e.x,i.y=e.y,i.fill=e.fill,i.width=n.width,i.height=n.height,i.class="journey-section section-type-"+e.num,i.rx=3,i.ry=3,ld(r,i),fd(n)(e.text,r,i.x,i.y,i.width,i.height,{class:"journey-section section-type-"+e.num},n,e.colour)},md=ud,bd=function(t,e,n){const r=e.x+n.width/2,i=t.append("g");dd++;i.append("line").attr("id","task"+dd).attr("x1",r).attr("y1",e.y).attr("x2",r).attr("y2",450).attr("class","task-line").attr("stroke-width","1px").attr("stroke-dasharray","4 2").attr("stroke","#666"),function(t,e){const n=15,r=t.append("circle").attr("cx",e.cx).attr("cy",e.cy).attr("class","face").attr("r",n).attr("stroke-width",2).attr("overflow","visible"),i=t.append("g");i.append("circle").attr("cx",e.cx-5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),i.append("circle").attr("cx",e.cx+5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),e.score>3?function(t){const r=(0,o.Nb1)().startAngle(Math.PI/2).endAngle(Math.PI/2*3).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+2)+")")}(i):e.score<3?function(t){const r=(0,o.Nb1)().startAngle(3*Math.PI/2).endAngle(Math.PI/2*5).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+7)+")")}(i):i.append("line").attr("class","mouth").attr("stroke",2).attr("x1",e.cx-5).attr("y1",e.cy+7).attr("x2",e.cx+5).attr("y2",e.cy+7).attr("class","mouth").attr("stroke-width","1px").attr("stroke","#666")}(i,{cx:r,cy:300+30*(5-e.score),score:e.score});const a=pd();a.x=e.x,a.y=e.y,a.fill=e.fill,a.width=n.width,a.height=n.height,a.class="task task-type-"+e.num,a.rx=3,a.ry=3,ld(i,a);let s=e.x+14;e.people.forEach((t=>{const n=e.actors[t].color,r={cx:s,cy:e.y,r:7,fill:n,stroke:"#000",title:t,pos:e.actors[t].position};hd(i,r),s+=10})),fd(n)(e.task,i,a.x,a.y,a.width,a.height,{class:"task"},n,e.colour)},_d=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",5).attr("refY",2).attr("markerWidth",6).attr("markerHeight",4).attr("orient","auto").append("path").attr("d","M 0,0 V 4 L6,2 Z")},xd={};const vd=ar().journey,kd=vd.leftMargin,wd={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],init:function(){this.sequenceItems=[],this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=ar().journey,a=this;let s=0;var o;this.sequenceItems.forEach((function(c){s++;const l=a.sequenceItems.length-s+1;a.updateVal(c,"starty",e-l*i.boxMargin,Math.min),a.updateVal(c,"stopy",r+l*i.boxMargin,Math.max),a.updateVal(wd.data,"startx",t-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopx",n+l*i.boxMargin,Math.max),"activation"!==o&&(a.updateVal(c,"startx",t-l*i.boxMargin,Math.min),a.updateVal(c,"stopx",n+l*i.boxMargin,Math.max),a.updateVal(wd.data,"starty",e-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopy",r+l*i.boxMargin,Math.max))}))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(wd.data,"startx",i,Math.min),this.updateVal(wd.data,"starty",s,Math.min),this.updateVal(wd.data,"stopx",a,Math.max),this.updateVal(wd.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return this.data}},Ed=vd.sectionFills,Cd=vd.sectionColours,Td=function(t,e,n){const r=ar().journey;let i="";const a=n+(2*r.height+r.diagramMarginY);let s=0,o="#CCC",c="black",l=0;for(const[h,u]of e.entries()){if(i!==u.section){o=Ed[s%Ed.length],l=s%Ed.length,c=Cd[s%Cd.length];const e={x:h*r.taskMargin+h*r.width+kd,y:50,text:u.section,fill:o,num:l,colour:c};yd(t,e,r),i=u.section,s++}const e=u.people.reduce(((t,e)=>(xd[e]&&(t[e]=xd[e]),t)),{});u.x=h*r.taskMargin+h*r.width+kd,u.y=a,u.width=r.diagramMarginX,u.height=r.diagramMarginY,u.colour=c,u.fill=o,u.num=l,u.actors=e,bd(t,u,r),wd.insert(u.x,u.y,u.x+u.width+r.taskMargin,450)}},Sd={setConf:function(t){Object.keys(t).forEach((function(e){vd[e]=t[e]}))},draw:function(t,e,n,r){const i=ar().journey;r.db.clear(),r.parser.parse(t+"\n");const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body");wd.init();const l=c.select("#"+e);_d(l);const h=r.db.getTasks(),u=r.db.getDiagramTitle(),d=r.db.getActors();for(const o in xd)delete xd[o];let p=0;d.forEach((t=>{xd[t]={color:i.actorColours[p%i.actorColours.length],position:p},p++})),function(t){const e=ar().journey;let n=60;Object.keys(xd).forEach((r=>{const i=xd[r].color,a={cx:20,cy:n,r:7,fill:i,stroke:"#000",pos:xd[r].position};gd(t,a);const s={x:40,y:n+7,fill:"#666",text:r,textMargin:5|e.boxTextMargin};md(t,s),n+=20}))}(l),wd.insert(0,0,kd,50*Object.keys(xd).length),Td(l,h,0);const f=wd.getBounds();u&&l.append("text").text(u).attr("x",kd).attr("font-size","4ex").attr("font-weight","bold").attr("y",25);const g=f.stopy-f.starty+2*i.diagramMarginY,y=kd+f.stopx+2*i.diagramMarginX;dr(l,g,y,i.useMaxWidth),l.append("line").attr("x1",kd).attr("y1",4*i.height).attr("x2",y-kd-4).attr("y2",4*i.height).attr("stroke-width",4).attr("stroke","black").attr("marker-end","url(#arrowhead)");const m=u?70:0;l.attr("viewBox",`${f.startx} -25 ${y} ${g+m}`),l.attr("preserveAspectRatio","xMinYMin meet"),l.attr("height",g+m+25)}};let Ad={};const Ld={setConf:function(t){Ad={...Ad,...t}},draw:(t,e,n)=>{try{Nt.debug("Renering svg for syntax error\n");const t=(0,o.Ys)("#"+e),r=t.append("g");r.append("path").attr("class","error-icon").attr("d","m411.313,123.313c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32-9.375,9.375-20.688-20.688c-12.484-12.5-32.766-12.5-45.25,0l-16,16c-1.261,1.261-2.304,2.648-3.31,4.051-21.739-8.561-45.324-13.426-70.065-13.426-105.867,0-192,86.133-192,192s86.133,192 192,192 192-86.133 192-192c0-24.741-4.864-48.327-13.426-70.065 1.402-1.007 2.79-2.049 4.051-3.31l16-16c12.5-12.492 12.5-32.758 0-45.25l-20.688-20.688 9.375-9.375 32.001-31.999zm-219.313,100.687c-52.938,0-96,43.063-96,96 0,8.836-7.164,16-16,16s-16-7.164-16-16c0-70.578 57.422-128 128-128 8.836,0 16,7.164 16,16s-7.164,16-16,16z"),r.append("path").attr("class","error-icon").attr("d","m459.02,148.98c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l16,16c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16.001-16z"),r.append("path").attr("class","error-icon").attr("d","m340.395,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16-16c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l15.999,16z"),r.append("path").attr("class","error-icon").attr("d","m400,64c8.844,0 16-7.164 16-16v-32c0-8.836-7.156-16-16-16-8.844,0-16,7.164-16,16v32c0,8.836 7.156,16 16,16z"),r.append("path").attr("class","error-icon").attr("d","m496,96.586h-32c-8.844,0-16,7.164-16,16 0,8.836 7.156,16 16,16h32c8.844,0 16-7.164 16-16 0-8.836-7.156-16-16-16z"),r.append("path").attr("class","error-icon").attr("d","m436.98,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688l32-32c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32c-6.251,6.25-6.251,16.375-0.001,22.625z"),r.append("text").attr("class","error-text").attr("x",1440).attr("y",250).attr("font-size","150px").style("text-anchor","middle").text("Syntax error in graph"),r.append("text").attr("class","error-text").attr("x",1250).attr("y",400).attr("font-size","100px").style("text-anchor","middle").text("mermaid version "+n),t.attr("height",100),t.attr("width",500),t.attr("viewBox","768 0 912 512")}catch(i){Nt.error("Error while rendering info diagram"),Nt.error((r=i)instanceof Error?r.message:String(r))}var r}},Bd="flowchart-elk",Nd={id:Bd,detector:(t,e)=>{var n;return!!(t.match(/^\s*flowchart-elk/)||t.match(/^\s*flowchart|graph/)&&"elk"===(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer))},loader:async()=>{const{diagram:t}=await n.e(9487).then(n.bind(n,9487));return{id:Bd,diagram:t}}},Dd="timeline",Od={id:Dd,detector:t=>null!==t.match(/^\s*timeline/),loader:async()=>{const{diagram:t}=await n.e(6316).then(n.bind(n,6316));return{id:Dd,diagram:t}}},Md="mindmap",Id={id:Md,detector:t=>null!==t.match(/^\s*mindmap/),loader:async()=>{const{diagram:t}=await n.e(7724).then(n.bind(n,7724));return{id:Md,diagram:t}}};let Fd=!1;const $d=()=>{Fd||(Fd=!0,En(Nd,Od,Id),Kr("error",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{}},init:()=>{}},(t=>"error"===t.toLowerCase().trim())),Kr("---",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{throw new Error("Diagrams beginning with --- are not valid. If you were trying to use a YAML front-matter, please ensure that you've correctly opened and closed the YAML front-matter with unindented `---` blocks")}},init:()=>null},(t=>t.toLowerCase().trimStart().startsWith("---"))),Kr("c4",{parser:Fi,db:Ki,renderer:La,styles:Cr,init:t=>{La.setConf(t.c4)}},$i),Kr("class",{parser:Na,db:Ga,renderer:cs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Da),Kr("classDiagram",{parser:Na,db:Ga,renderer:Xs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Oa),Kr("er",{parser:Qs,db:ro,renderer:yo,styles:gr},Js),Kr("gantt",{parser:Cc,db:il,renderer:ol,styles:br},Tc),Kr("info",{parser:ll,db:dl,renderer:pl,styles:_r},fl),Kr("pie",{parser:yl,db:xl,renderer:El,styles:xr},ml),Kr("requirement",{parser:Tl,db:Ol,renderer:Ul,styles:vr},Sl),Kr("sequence",{parser:ql,db:ph,renderer:Wh,styles:kr,init:t=>{if(t.sequence||(t.sequence={}),t.sequence.arrowMarkerAbsolute=t.arrowMarkerAbsolute,"sequenceDiagram"in t)throw new Error("`mermaid config.sequenceDiagram` has been renamed to `config.sequence`. Please update your mermaid config.");ph.setWrap(t.wrap),Wh.setConf(t.sequence)}},Hl),Kr("state",{parser:Hh,db:Eu,renderer:Iu,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Vh),Kr("stateDiagram",{parser:Hh,db:Eu,renderer:Ju,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Gh),Kr("journey",{parser:ed,db:cd,renderer:Sd,styles:Er,init:t=>{Sd.setConf(t.journey),cd.clear()}},nd),Kr("flowchart",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,_c(t.flowchart),yc.clear(),yc.setGen("gen-1")}},_o),Kr("flowchart-v2",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,ir({flowchart:{arrowMarkerAbsolute:t.arrowMarkerAbsolute}}),wc.setConf(t.flowchart),yc.clear(),yc.setGen("gen-2")}},xo),Kr("gitGraph",{parser:ti,db:bi,renderer:Oi,styles:Mi},ei))};class Rd{constructor(t,e){var n,r;this.txt=t,this.type="graph",this.detectTypeFailed=!1;const i=ar();this.txt=t;try{this.type=wn(t,i)}catch(o){this.handleError(o,e),this.type="error",this.detectTypeFailed=!0}const a=Qr(this.type);Nt.debug("Type "+this.type),this.db=a.db,null==(r=(n=this.db).clear)||r.call(n),this.renderer=a.renderer,this.parser=a.parser;const s=this.parser.parse.bind(this.parser);this.parser.parse=t=>s(function(t,e){var n;const r=t.match(_n);if(r){const i=bn(r[1],{schema:mn});return(null==i?void 0:i.title)&&(null==(n=e.setDiagramTitle)||n.call(e,i.title)),t.slice(r[0].length)}return t}(t,this.db)),this.parser.parser.yy=this.db,a.init&&(a.init(i),Nt.info("Initialized diagram "+this.type,i)),this.txt+="\n",this.parse(this.txt,e)}parse(t,e){var n,r;if(this.detectTypeFailed)return!1;try{return t+="\n",null==(r=(n=this.db).clear)||r.call(n),this.parser.parse(t),!0}catch(i){this.handleError(i,e)}return!1}handleError(t,e){if(void 0===e)throw t;Hn(t)?e(t.str,t.hash):e(t)}getParser(){return this.parser}getType(){return this.type}}const Zd=(t,e)=>{const n=wn(t,ar());try{Qr(n)}catch(r){const i=kn[n].loader;if(!i)throw new Error(`Diagram ${n} not found.`);return i().then((({diagram:r})=>(Kr(n,r,void 0),new Rd(t,e))))}return new Rd(t,e)},Pd=Rd;const jd=["graph","flowchart","flowchart-v2","stateDiagram","stateDiagram-v2"],Yd="graph TB;a[Maximum text size in diagram exceeded];style a fill:#faa",zd="sandbox",Ud="loose",Wd="http://www.w3.org/1999/xlink",qd="http://www.w3.org/1999/xhtml",Hd=["foreignobject"],Vd=["dominant-baseline"];const Gd=function(t){let e=t;return e=e.replace(/style.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/classDef.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/#\w+;/g,(function(t){const e=t.substring(1,t.length-1);return/^\+?\d+$/.test(e)?"\ufb02\xb0\xb0"+e+"\xb6\xdf":"\ufb02\xb0"+e+"\xb6\xdf"})),e},Xd=function(t){let e=t;return e=e.replace(/\ufb02\xb0\xb0/g,"&#"),e=e.replace(/\ufb02\xb0/g,"&"),e=e.replace(/\xb6\xdf/g,";"),e},Kd=(t,e,n=[])=>`\n.${t} ${e} { ${n.join(" !important; ")} !important; }`,Qd=(t,e,n,r)=>{const i=((t,e,n={})=>{var r;let i="";if(void 0!==t.themeCSS&&(i+=`\n${t.themeCSS}`),void 0!==t.fontFamily&&(i+=`\n:root { --mermaid-font-family: ${t.fontFamily}}`),void 0!==t.altFontFamily&&(i+=`\n:root { --mermaid-alt-font-family: ${t.altFontFamily}}`),!(0,Lt.Z)(n)&&jd.includes(e)){const e=["> *","span"],a=["rect","polygon","ellipse","circle","path"],s=t.htmlLabels||(null==(r=t.flowchart)?void 0:r.htmlLabels)?e:a;for(const t in n){const e=n[t];(0,Lt.Z)(e.styles)||s.forEach((t=>{i+=Kd(e.id,t,e.styles)})),(0,Lt.Z)(e.textStyles)||(i+=Kd(e.id,"tspan",e.textStyles))}}return i})(t,e,n);return I(it(`${r}{${Sr(e,i,t.themeVariables)}}`),F)},Jd=(t="",e,n)=>{let r=t;return n||e||(r=r.replace(/marker-end="url\(.*?#/g,'marker-end="url(#')),r=Xd(r),r=r.replace(/<br>/g,"<br/>"),r},tp=(t="",e)=>`<iframe style="width:100%;height:${e?e.viewBox.baseVal.height+"px":"100%"};border:0;margin:0;" src="data:text/html;base64,${btoa('<body style="margin:0">'+t+"</body>")}" sandbox="allow-top-navigation-by-user-activation allow-popups">\n  The "iframe" tag is not supported by your browser.\n</iframe>`,ep=(t,e,n,r,i)=>{const a=t.append("div");a.attr("id",n),r&&a.attr("style",r);const s=a.append("svg").attr("id",e).attr("width","100%").attr("xmlns","http://www.w3.org/2000/svg");return i&&s.attr("xmlns:xlink",i),s.append("g"),t};function np(t,e){return t.append("iframe").attr("id",e).attr("style","width: 100%; height: 100%;").attr("sandbox","")}const rp=(t,e,n,r)=>{var i,a,s;null==(i=t.getElementById(e))||i.remove(),null==(a=t.getElementById(n))||a.remove(),null==(s=t.getElementById(r))||s.remove()};function ip(t,e,n,r){var i,a;a=t,(i=e).attr("role","graphics-document document"),(0,Lt.Z)(a)||i.attr("aria-roledescription",a),function(t,e,n,r){if(void 0!==t.insert&&(e||n)){if(n){const e="chart-desc-"+r;t.attr("aria-describedby",e),t.insert("desc",":first-child").attr("id",e).text(n)}if(e){const n="chart-title-"+r;t.attr("aria-labelledby",n),t.insert("title",":first-child").attr("id",n).text(e)}}}(e,n,r,e.attr("id"))}const ap=Object.freeze({render:function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{if(v=Zd(e),"then"in v)throw new Error("Diagram is a promise. Use renderAsync.")}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},renderAsync:async function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{v=await Zd(e)}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{await v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},parse:function(t,e){return $d(),new Pd(t,e).parse(t,e)},parseAsync:async function(t,e){return $d(),(await Zd(t,e)).parse(t,e)},parseDirective:Yr,initialize:function(t={}){var e;(null==t?void 0:t.fontFamily)&&!(null==(e=t.themeVariables)?void 0:e.fontFamily)&&(t.themeVariables={fontFamily:t.fontFamily}),Qn=Sn({},t),(null==t?void 0:t.theme)&&t.theme in Ht?t.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables):t&&(t.themeVariables=Ht.default.getThemeVariables(t.themeVariables));const n="object"==typeof t?(t=>(Jn=Sn({},Kn),Jn=Sn(Jn,t),t.theme&&Ht[t.theme]&&(Jn.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables)),nr(Jn,tr),Jn))(t):rr();Dt(n.logLevel),$d()},getConfig:ar,setConfig:ir,getSiteConfig:rr,updateSiteConfig:t=>(Jn=Sn(Jn,t),nr(Jn,tr),Jn),reset:()=>{cr()},globalReset:()=>{cr(Kn)},defaultConfig:Kn});Dt(ar().logLevel),cr(ar());const sp=(t,e,n)=>{Nt.warn(t),Hn(t)?(n&&n(t.str,t.hash),e.push({...t,message:t.str,error:t})):(n&&n(t),t instanceof Error&&e.push({str:t.message,message:t.message,hash:t.name,error:t}))},op=async function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{await ap.renderAsync(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},cp=function(){if(dp.startOnLoad){const{startOnLoad:t}=ap.getConfig();t&&dp.init().catch((t=>Nt.error("Mermaid failed to initialize",t)))}};"undefined"!=typeof document&&window.addEventListener("load",cp,!1);const lp=[];let hp=!1;const up=async()=>{if(!hp){for(hp=!0;lp.length>0;){const e=lp.shift();if(e)try{await e()}catch(t){Nt.error("Error executing queue",t)}}hp=!1}},dp={startOnLoad:!0,diagrams:{},mermaidAPI:ap,parse:t=>ap.parse(t,dp.parseError),parseAsync:t=>new Promise(((e,n)=>{lp.push((()=>new Promise(((r,i)=>{ap.parseAsync(t,dp.parseError).then((t=>{r(t),e(t)}),(t=>{Nt.error("Error parsing",t),i(t),n(t)}))})))),up().catch(n)})),render:ap.render,renderAsync:(t,e,n,r)=>new Promise(((i,a)=>{lp.push((()=>new Promise(((s,o)=>{ap.renderAsync(t,e,n,r).then((t=>{s(t),i(t)}),(t=>{Nt.error("Error parsing",t),o(t),a(t)}))})))),up().catch(a)})),init:async function(t,e,n){try{await op(t,e,n)}catch(r){Nt.warn("Syntax Error rendering"),Hn(r)&&Nt.warn(r.str),dp.parseError&&dp.parseError(r)}},initThrowsErrors:function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{ap.render(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},initThrowsErrorsAsync:op,registerExternalDiagrams:async(t,{lazyLoad:e=!0}={})=>{e?En(...t):await(async(...t)=>{Nt.debug(`Loading ${t.length} external diagrams`);const e=(await Promise.allSettled(t.map((async({id:t,detector:e,loader:n})=>{const{diagram:r}=await n();Kr(t,r,e)})))).filter((t=>"rejected"===t.status));if(e.length>0){Nt.error(`Failed to load ${e.length} external diagrams`);for(const t of e)Nt.error(t);throw new Error(`Failed to load ${e.length} external diagrams`)}})(...t)},initialize:function(t){ap.initialize(t)},parseError:void 0,contentLoaded:cp,setParseErrorHandler:function(t){dp.parseError=t}}},7594:(t,e)=>{function n(t){let e,n=[];for(let r of t.split(",").map((t=>t.trim())))if(/^-?\d+$/.test(r))n.push(parseInt(r,10));else if(e=r.match(/^(-?\d+)(-|\.\.\.?|\u2025|\u2026|\u22EF)(-?\d+)$/)){let[t,r,i,a]=e;if(r&&a){r=parseInt(r),a=parseInt(a);const t=r<a?1:-1;"-"!==i&&".."!==i&&"\u2025"!==i||(a+=t);for(let e=r;e!==a;e+=t)n.push(e)}}return n}e.default=n,t.exports=n},9373:(t,e,n)=>{"use strict";function r(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n<r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n<i||void 0===n&&i>=i)&&(n=i)}return n}function i(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n>r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n>i||void 0===n&&i>=i)&&(n=i)}return n}function a(t){return t}n.d(e,{Nb1:()=>ao,LLu:()=>f,F5q:()=>p,$0Z:()=>_o,Dts:()=>vo,WQY:()=>wo,qpX:()=>Co,u93:()=>To,tFB:()=>Ao,YY7:()=>No,OvA:()=>Oo,dCK:()=>Io,zgE:()=>Ro,fGX:()=>Po,$m7:()=>Yo,c_6:()=>co,fxm:()=>Uo,FdL:()=>Qo,ak_:()=>Jo,SxZ:()=>nc,eA_:()=>ic,jsv:()=>sc,iJ:()=>ac,JHv:()=>dr,jvg:()=>uo,Fp7:()=>r,VV$:()=>i,ve8:()=>go,BYU:()=>ai,PKp:()=>di,Xf:()=>As,Ys:()=>Ls,td_:()=>Bs,YPS:()=>Hn,rr1:()=>Li,i$Z:()=>oa,WQD:()=>Si,Z_i:()=>Ci,F0B:()=>Vi,NGh:()=>Oi});var s=1e-6;function o(t){return"translate("+t+",0)"}function c(t){return"translate(0,"+t+")"}function l(t){return e=>+t(e)}function h(t,e){return e=Math.max(0,t.bandwidth()-2*e)/2,t.round()&&(e=Math.round(e)),n=>+t(n)+e}function u(){return!this.__axis}function d(t,e){var n=[],r=null,i=null,d=6,p=6,f=3,g="undefined"!=typeof window&&window.devicePixelRatio>1?0:.5,y=1===t||4===t?-1:1,m=4===t||2===t?"x":"y",b=1===t||3===t?o:c;function _(o){var c=null==r?e.ticks?e.ticks.apply(e,n):e.domain():r,_=null==i?e.tickFormat?e.tickFormat.apply(e,n):a:i,x=Math.max(d,0)+f,v=e.range(),k=+v[0]+g,w=+v[v.length-1]+g,E=(e.bandwidth?h:l)(e.copy(),g),C=o.selection?o.selection():o,T=C.selectAll(".domain").data([null]),S=C.selectAll(".tick").data(c,e).order(),A=S.exit(),L=S.enter().append("g").attr("class","tick"),B=S.select("line"),N=S.select("text");T=T.merge(T.enter().insert("path",".tick").attr("class","domain").attr("stroke","currentColor")),S=S.merge(L),B=B.merge(L.append("line").attr("stroke","currentColor").attr(m+"2",y*d)),N=N.merge(L.append("text").attr("fill","currentColor").attr(m,y*x).attr("dy",1===t?"0em":3===t?"0.71em":"0.32em")),o!==C&&(T=T.transition(o),S=S.transition(o),B=B.transition(o),N=N.transition(o),A=A.transition(o).attr("opacity",s).attr("transform",(function(t){return isFinite(t=E(t))?b(t+g):this.getAttribute("transform")})),L.attr("opacity",s).attr("transform",(function(t){var e=this.parentNode.__axis;return b((e&&isFinite(e=e(t))?e:E(t))+g)}))),A.remove(),T.attr("d",4===t||2===t?p?"M"+y*p+","+k+"H"+g+"V"+w+"H"+y*p:"M"+g+","+k+"V"+w:p?"M"+k+","+y*p+"V"+g+"H"+w+"V"+y*p:"M"+k+","+g+"H"+w),S.attr("opacity",1).attr("transform",(function(t){return b(E(t)+g)})),B.attr(m+"2",y*d),N.attr(m,y*x).text(_),C.filter(u).attr("fill","none").attr("font-size",10).attr("font-family","sans-serif").attr("text-anchor",2===t?"start":4===t?"end":"middle"),C.each((function(){this.__axis=E}))}return _.scale=function(t){return arguments.length?(e=t,_):e},_.ticks=function(){return n=Array.from(arguments),_},_.tickArguments=function(t){return arguments.length?(n=null==t?[]:Array.from(t),_):n.slice()},_.tickValues=function(t){return arguments.length?(r=null==t?null:Array.from(t),_):r&&r.slice()},_.tickFormat=function(t){return arguments.length?(i=t,_):i},_.tickSize=function(t){return arguments.length?(d=p=+t,_):d},_.tickSizeInner=function(t){return arguments.length?(d=+t,_):d},_.tickSizeOuter=function(t){return arguments.length?(p=+t,_):p},_.tickPadding=function(t){return arguments.length?(f=+t,_):f},_.offset=function(t){return arguments.length?(g=+t,_):g},_}function p(t){return d(1,t)}function f(t){return d(3,t)}function g(){}function y(t){return null==t?g:function(){return this.querySelector(t)}}function m(t){return null==t?[]:Array.isArray(t)?t:Array.from(t)}function b(){return[]}function _(t){return null==t?b:function(){return this.querySelectorAll(t)}}function x(t){return function(){return this.matches(t)}}function v(t){return function(e){return e.matches(t)}}var k=Array.prototype.find;function w(){return this.firstElementChild}var E=Array.prototype.filter;function C(){return Array.from(this.children)}function T(t){return new Array(t.length)}function S(t,e){this.ownerDocument=t.ownerDocument,this.namespaceURI=t.namespaceURI,this._next=null,this._parent=t,this.__data__=e}function A(t){return function(){return t}}function L(t,e,n,r,i,a){for(var s,o=0,c=e.length,l=a.length;o<l;++o)(s=e[o])?(s.__data__=a[o],r[o]=s):n[o]=new S(t,a[o]);for(;o<c;++o)(s=e[o])&&(i[o]=s)}function B(t,e,n,r,i,a,s){var o,c,l,h=new Map,u=e.length,d=a.length,p=new Array(u);for(o=0;o<u;++o)(c=e[o])&&(p[o]=l=s.call(c,c.__data__,o,e)+"",h.has(l)?i[o]=c:h.set(l,c));for(o=0;o<d;++o)l=s.call(t,a[o],o,a)+"",(c=h.get(l))?(r[o]=c,c.__data__=a[o],h.delete(l)):n[o]=new S(t,a[o]);for(o=0;o<u;++o)(c=e[o])&&h.get(p[o])===c&&(i[o]=c)}function N(t){return t.__data__}function D(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function O(t,e){return t<e?-1:t>e?1:t>=e?0:NaN}S.prototype={constructor:S,appendChild:function(t){return this._parent.insertBefore(t,this._next)},insertBefore:function(t,e){return this._parent.insertBefore(t,e)},querySelector:function(t){return this._parent.querySelector(t)},querySelectorAll:function(t){return this._parent.querySelectorAll(t)}};var M="http://www.w3.org/1999/xhtml";const I={svg:"http://www.w3.org/2000/svg",xhtml:M,xlink:"http://www.w3.org/1999/xlink",xml:"http://www.w3.org/XML/1998/namespace",xmlns:"http://www.w3.org/2000/xmlns/"};function F(t){var e=t+="",n=e.indexOf(":");return n>=0&&"xmlns"!==(e=t.slice(0,n))&&(t=t.slice(n+1)),I.hasOwnProperty(e)?{space:I[e],local:t}:t}function $(t){return function(){this.removeAttribute(t)}}function R(t){return function(){this.removeAttributeNS(t.space,t.local)}}function Z(t,e){return function(){this.setAttribute(t,e)}}function P(t,e){return function(){this.setAttributeNS(t.space,t.local,e)}}function j(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttribute(t):this.setAttribute(t,n)}}function Y(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttributeNS(t.space,t.local):this.setAttributeNS(t.space,t.local,n)}}function z(t){return t.ownerDocument&&t.ownerDocument.defaultView||t.document&&t||t.defaultView}function U(t){return function(){this.style.removeProperty(t)}}function W(t,e,n){return function(){this.style.setProperty(t,e,n)}}function q(t,e,n){return function(){var r=e.apply(this,arguments);null==r?this.style.removeProperty(t):this.style.setProperty(t,r,n)}}function H(t,e){return t.style.getPropertyValue(e)||z(t).getComputedStyle(t,null).getPropertyValue(e)}function V(t){return function(){delete this[t]}}function G(t,e){return function(){this[t]=e}}function X(t,e){return function(){var n=e.apply(this,arguments);null==n?delete this[t]:this[t]=n}}function K(t){return t.trim().split(/^|\s+/)}function Q(t){return t.classList||new J(t)}function J(t){this._node=t,this._names=K(t.getAttribute("class")||"")}function tt(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.add(e[r])}function et(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.remove(e[r])}function nt(t){return function(){tt(this,t)}}function rt(t){return function(){et(this,t)}}function it(t,e){return function(){(e.apply(this,arguments)?tt:et)(this,t)}}function at(){this.textContent=""}function st(t){return function(){this.textContent=t}}function ot(t){return function(){var e=t.apply(this,arguments);this.textContent=null==e?"":e}}function ct(){this.innerHTML=""}function lt(t){return function(){this.innerHTML=t}}function ht(t){return function(){var e=t.apply(this,arguments);this.innerHTML=null==e?"":e}}function ut(){this.nextSibling&&this.parentNode.appendChild(this)}function dt(){this.previousSibling&&this.parentNode.insertBefore(this,this.parentNode.firstChild)}function pt(t){return function(){var e=this.ownerDocument,n=this.namespaceURI;return n===M&&e.documentElement.namespaceURI===M?e.createElement(t):e.createElementNS(n,t)}}function ft(t){return function(){return this.ownerDocument.createElementNS(t.space,t.local)}}function gt(t){var e=F(t);return(e.local?ft:pt)(e)}function yt(){return null}function mt(){var t=this.parentNode;t&&t.removeChild(this)}function bt(){var t=this.cloneNode(!1),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function _t(){var t=this.cloneNode(!0),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function xt(t){return t.trim().split(/^|\s+/).map((function(t){var e="",n=t.indexOf(".");return n>=0&&(e=t.slice(n+1),t=t.slice(0,n)),{type:t,name:e}}))}function vt(t){return function(){var e=this.__on;if(e){for(var n,r=0,i=-1,a=e.length;r<a;++r)n=e[r],t.type&&n.type!==t.type||n.name!==t.name?e[++i]=n:this.removeEventListener(n.type,n.listener,n.options);++i?e.length=i:delete this.__on}}}function kt(t,e,n){return function(){var r,i=this.__on,a=function(t){return function(e){t.call(this,e,this.__data__)}}(e);if(i)for(var s=0,o=i.length;s<o;++s)if((r=i[s]).type===t.type&&r.name===t.name)return this.removeEventListener(r.type,r.listener,r.options),this.addEventListener(r.type,r.listener=a,r.options=n),void(r.value=e);this.addEventListener(t.type,a,n),r={type:t.type,name:t.name,value:e,listener:a,options:n},i?i.push(r):this.__on=[r]}}function wt(t,e,n){var r=z(t),i=r.CustomEvent;"function"==typeof i?i=new i(e,n):(i=r.document.createEvent("Event"),n?(i.initEvent(e,n.bubbles,n.cancelable),i.detail=n.detail):i.initEvent(e,!1,!1)),t.dispatchEvent(i)}function Et(t,e){return function(){return wt(this,t,e)}}function Ct(t,e){return function(){return wt(this,t,e.apply(this,arguments))}}J.prototype={add:function(t){this._names.indexOf(t)<0&&(this._names.push(t),this._node.setAttribute("class",this._names.join(" ")))},remove:function(t){var e=this._names.indexOf(t);e>=0&&(this._names.splice(e,1),this._node.setAttribute("class",this._names.join(" ")))},contains:function(t){return this._names.indexOf(t)>=0}};var Tt=[null];function St(t,e){this._groups=t,this._parents=e}function At(){return new St([[document.documentElement]],Tt)}St.prototype=At.prototype={constructor:St,select:function(t){"function"!=typeof t&&(t=y(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s,o=e[i],c=o.length,l=r[i]=new Array(c),h=0;h<c;++h)(a=o[h])&&(s=t.call(a,a.__data__,h,o))&&("__data__"in a&&(s.__data__=a.__data__),l[h]=s);return new St(r,this._parents)},selectAll:function(t){t="function"==typeof t?function(t){return function(){return m(t.apply(this,arguments))}}(t):_(t);for(var e=this._groups,n=e.length,r=[],i=[],a=0;a<n;++a)for(var s,o=e[a],c=o.length,l=0;l<c;++l)(s=o[l])&&(r.push(t.call(s,s.__data__,l,o)),i.push(s));return new St(r,i)},selectChild:function(t){return this.select(null==t?w:function(t){return function(){return k.call(this.children,t)}}("function"==typeof t?t:v(t)))},selectChildren:function(t){return this.selectAll(null==t?C:function(t){return function(){return E.call(this.children,t)}}("function"==typeof t?t:v(t)))},filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new St(r,this._parents)},data:function(t,e){if(!arguments.length)return Array.from(this,N);var n=e?B:L,r=this._parents,i=this._groups;"function"!=typeof t&&(t=A(t));for(var a=i.length,s=new Array(a),o=new Array(a),c=new Array(a),l=0;l<a;++l){var h=r[l],u=i[l],d=u.length,p=D(t.call(h,h&&h.__data__,l,r)),f=p.length,g=o[l]=new Array(f),y=s[l]=new Array(f),m=c[l]=new Array(d);n(h,u,g,y,m,p,e);for(var b,_,x=0,v=0;x<f;++x)if(b=g[x]){for(x>=v&&(v=x+1);!(_=y[v])&&++v<f;);b._next=_||null}}return(s=new St(s,r))._enter=o,s._exit=c,s},enter:function(){return new St(this._enter||this._groups.map(T),this._parents)},exit:function(){return new St(this._exit||this._groups.map(T),this._parents)},join:function(t,e,n){var r=this.enter(),i=this,a=this.exit();return"function"==typeof t?(r=t(r))&&(r=r.selection()):r=r.append(t+""),null!=e&&(i=e(i))&&(i=i.selection()),null==n?a.remove():n(a),r&&i?r.merge(i).order():i},merge:function(t){for(var e=t.selection?t.selection():t,n=this._groups,r=e._groups,i=n.length,a=r.length,s=Math.min(i,a),o=new Array(i),c=0;c<s;++c)for(var l,h=n[c],u=r[c],d=h.length,p=o[c]=new Array(d),f=0;f<d;++f)(l=h[f]||u[f])&&(p[f]=l);for(;c<i;++c)o[c]=n[c];return new St(o,this._parents)},selection:function(){return this},order:function(){for(var t=this._groups,e=-1,n=t.length;++e<n;)for(var r,i=t[e],a=i.length-1,s=i[a];--a>=0;)(r=i[a])&&(s&&4^r.compareDocumentPosition(s)&&s.parentNode.insertBefore(r,s),s=r);return this},sort:function(t){function e(e,n){return e&&n?t(e.__data__,n.__data__):!e-!n}t||(t=O);for(var n=this._groups,r=n.length,i=new Array(r),a=0;a<r;++a){for(var s,o=n[a],c=o.length,l=i[a]=new Array(c),h=0;h<c;++h)(s=o[h])&&(l[h]=s);l.sort(e)}return new St(i,this._parents).order()},call:function(){var t=arguments[0];return arguments[0]=this,t.apply(null,arguments),this},nodes:function(){return Array.from(this)},node:function(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r=t[e],i=0,a=r.length;i<a;++i){var s=r[i];if(s)return s}return null},size:function(){let t=0;for(const e of this)++t;return t},empty:function(){return!this.node()},each:function(t){for(var e=this._groups,n=0,r=e.length;n<r;++n)for(var i,a=e[n],s=0,o=a.length;s<o;++s)(i=a[s])&&t.call(i,i.__data__,s,a);return this},attr:function(t,e){var n=F(t);if(arguments.length<2){var r=this.node();return n.local?r.getAttributeNS(n.space,n.local):r.getAttribute(n)}return this.each((null==e?n.local?R:$:"function"==typeof e?n.local?Y:j:n.local?P:Z)(n,e))},style:function(t,e,n){return arguments.length>1?this.each((null==e?U:"function"==typeof e?q:W)(t,e,null==n?"":n)):H(this.node(),t)},property:function(t,e){return arguments.length>1?this.each((null==e?V:"function"==typeof e?X:G)(t,e)):this.node()[t]},classed:function(t,e){var n=K(t+"");if(arguments.length<2){for(var r=Q(this.node()),i=-1,a=n.length;++i<a;)if(!r.contains(n[i]))return!1;return!0}return this.each(("function"==typeof e?it:e?nt:rt)(n,e))},text:function(t){return arguments.length?this.each(null==t?at:("function"==typeof t?ot:st)(t)):this.node().textContent},html:function(t){return arguments.length?this.each(null==t?ct:("function"==typeof t?ht:lt)(t)):this.node().innerHTML},raise:function(){return this.each(ut)},lower:function(){return this.each(dt)},append:function(t){var e="function"==typeof t?t:gt(t);return this.select((function(){return this.appendChild(e.apply(this,arguments))}))},insert:function(t,e){var n="function"==typeof t?t:gt(t),r=null==e?yt:"function"==typeof e?e:y(e);return this.select((function(){return this.insertBefore(n.apply(this,arguments),r.apply(this,arguments)||null)}))},remove:function(){return this.each(mt)},clone:function(t){return this.select(t?_t:bt)},datum:function(t){return arguments.length?this.property("__data__",t):this.node().__data__},on:function(t,e,n){var r,i,a=xt(t+""),s=a.length;if(!(arguments.length<2)){for(o=e?kt:vt,r=0;r<s;++r)this.each(o(a[r],e,n));return this}var o=this.node().__on;if(o)for(var c,l=0,h=o.length;l<h;++l)for(r=0,c=o[l];r<s;++r)if((i=a[r]).type===c.type&&i.name===c.name)return c.value},dispatch:function(t,e){return this.each(("function"==typeof e?Ct:Et)(t,e))},[Symbol.iterator]:function*(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r,i=t[e],a=0,s=i.length;a<s;++a)(r=i[a])&&(yield r)}};const Lt=At;var Bt={value:()=>{}};function Nt(){for(var t,e=0,n=arguments.length,r={};e<n;++e){if(!(t=arguments[e]+"")||t in r||/[\s.]/.test(t))throw new Error("illegal type: "+t);r[t]=[]}return new Dt(r)}function Dt(t){this._=t}function Ot(t,e){return t.trim().split(/^|\s+/).map((function(t){var n="",r=t.indexOf(".");if(r>=0&&(n=t.slice(r+1),t=t.slice(0,r)),t&&!e.hasOwnProperty(t))throw new Error("unknown type: "+t);return{type:t,name:n}}))}function Mt(t,e){for(var n,r=0,i=t.length;r<i;++r)if((n=t[r]).name===e)return n.value}function It(t,e,n){for(var r=0,i=t.length;r<i;++r)if(t[r].name===e){t[r]=Bt,t=t.slice(0,r).concat(t.slice(r+1));break}return null!=n&&t.push({name:e,value:n}),t}Dt.prototype=Nt.prototype={constructor:Dt,on:function(t,e){var n,r=this._,i=Ot(t+"",r),a=-1,s=i.length;if(!(arguments.length<2)){if(null!=e&&"function"!=typeof e)throw new Error("invalid callback: "+e);for(;++a<s;)if(n=(t=i[a]).type)r[n]=It(r[n],t.name,e);else if(null==e)for(n in r)r[n]=It(r[n],t.name,null);return this}for(;++a<s;)if((n=(t=i[a]).type)&&(n=Mt(r[n],t.name)))return n},copy:function(){var t={},e=this._;for(var n in e)t[n]=e[n].slice();return new Dt(t)},call:function(t,e){if((n=arguments.length-2)>0)for(var n,r,i=new Array(n),a=0;a<n;++a)i[a]=arguments[a+2];if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(a=0,n=(r=this._[t]).length;a<n;++a)r[a].value.apply(e,i)},apply:function(t,e,n){if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(var r=this._[t],i=0,a=r.length;i<a;++i)r[i].value.apply(e,n)}};const Ft=Nt;var $t,Rt,Zt=0,Pt=0,jt=0,Yt=0,zt=0,Ut=0,Wt="object"==typeof performance&&performance.now?performance:Date,qt="object"==typeof window&&window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(t){setTimeout(t,17)};function Ht(){return zt||(qt(Vt),zt=Wt.now()+Ut)}function Vt(){zt=0}function Gt(){this._call=this._time=this._next=null}function Xt(t,e,n){var r=new Gt;return r.restart(t,e,n),r}function Kt(){zt=(Yt=Wt.now())+Ut,Zt=Pt=0;try{!function(){Ht(),++Zt;for(var t,e=$t;e;)(t=zt-e._time)>=0&&e._call.call(void 0,t),e=e._next;--Zt}()}finally{Zt=0,function(){var t,e,n=$t,r=1/0;for(;n;)n._call?(r>n._time&&(r=n._time),t=n,n=n._next):(e=n._next,n._next=null,n=t?t._next=e:$t=e);Rt=t,Jt(r)}(),zt=0}}function Qt(){var t=Wt.now(),e=t-Yt;e>1e3&&(Ut-=e,Yt=t)}function Jt(t){Zt||(Pt&&(Pt=clearTimeout(Pt)),t-zt>24?(t<1/0&&(Pt=setTimeout(Kt,t-Wt.now()-Ut)),jt&&(jt=clearInterval(jt))):(jt||(Yt=Wt.now(),jt=setInterval(Qt,1e3)),Zt=1,qt(Kt)))}function te(t,e,n){var r=new Gt;return e=null==e?0:+e,r.restart((n=>{r.stop(),t(n+e)}),e,n),r}Gt.prototype=Xt.prototype={constructor:Gt,restart:function(t,e,n){if("function"!=typeof t)throw new TypeError("callback is not a function");n=(null==n?Ht():+n)+(null==e?0:+e),this._next||Rt===this||(Rt?Rt._next=this:$t=this,Rt=this),this._call=t,this._time=n,Jt()},stop:function(){this._call&&(this._call=null,this._time=1/0,Jt())}};var ee=Ft("start","end","cancel","interrupt"),ne=[];function re(t,e,n,r,i,a){var s=t.__transition;if(s){if(n in s)return}else t.__transition={};!function(t,e,n){var r,i=t.__transition;function a(t){n.state=1,n.timer.restart(s,n.delay,n.time),n.delay<=t&&s(t-n.delay)}function s(a){var l,h,u,d;if(1!==n.state)return c();for(l in i)if((d=i[l]).name===n.name){if(3===d.state)return te(s);4===d.state?(d.state=6,d.timer.stop(),d.on.call("interrupt",t,t.__data__,d.index,d.group),delete i[l]):+l<e&&(d.state=6,d.timer.stop(),d.on.call("cancel",t,t.__data__,d.index,d.group),delete i[l])}if(te((function(){3===n.state&&(n.state=4,n.timer.restart(o,n.delay,n.time),o(a))})),n.state=2,n.on.call("start",t,t.__data__,n.index,n.group),2===n.state){for(n.state=3,r=new Array(u=n.tween.length),l=0,h=-1;l<u;++l)(d=n.tween[l].value.call(t,t.__data__,n.index,n.group))&&(r[++h]=d);r.length=h+1}}function o(e){for(var i=e<n.duration?n.ease.call(null,e/n.duration):(n.timer.restart(c),n.state=5,1),a=-1,s=r.length;++a<s;)r[a].call(t,i);5===n.state&&(n.on.call("end",t,t.__data__,n.index,n.group),c())}function c(){for(var r in n.state=6,n.timer.stop(),delete i[e],i)return;delete t.__transition}i[e]=n,n.timer=Xt(a,0,n.time)}(t,n,{name:e,index:r,group:i,on:ee,tween:ne,time:a.time,delay:a.delay,duration:a.duration,ease:a.ease,timer:null,state:0})}function ie(t,e){var n=se(t,e);if(n.state>0)throw new Error("too late; already scheduled");return n}function ae(t,e){var n=se(t,e);if(n.state>3)throw new Error("too late; already running");return n}function se(t,e){var n=t.__transition;if(!n||!(n=n[e]))throw new Error("transition not found");return n}function oe(t,e){return t=+t,e=+e,function(n){return t*(1-n)+e*n}}var ce,le=180/Math.PI,he={translateX:0,translateY:0,rotate:0,skewX:0,scaleX:1,scaleY:1};function ue(t,e,n,r,i,a){var s,o,c;return(s=Math.sqrt(t*t+e*e))&&(t/=s,e/=s),(c=t*n+e*r)&&(n-=t*c,r-=e*c),(o=Math.sqrt(n*n+r*r))&&(n/=o,r/=o,c/=o),t*r<e*n&&(t=-t,e=-e,c=-c,s=-s),{translateX:i,translateY:a,rotate:Math.atan2(e,t)*le,skewX:Math.atan(c)*le,scaleX:s,scaleY:o}}function de(t,e,n,r){function i(t){return t.length?t.pop()+" ":""}return function(a,s){var o=[],c=[];return a=t(a),s=t(s),function(t,r,i,a,s,o){if(t!==i||r!==a){var c=s.push("translate(",null,e,null,n);o.push({i:c-4,x:oe(t,i)},{i:c-2,x:oe(r,a)})}else(i||a)&&s.push("translate("+i+e+a+n)}(a.translateX,a.translateY,s.translateX,s.translateY,o,c),function(t,e,n,a){t!==e?(t-e>180?e+=360:e-t>180&&(t+=360),a.push({i:n.push(i(n)+"rotate(",null,r)-2,x:oe(t,e)})):e&&n.push(i(n)+"rotate("+e+r)}(a.rotate,s.rotate,o,c),function(t,e,n,a){t!==e?a.push({i:n.push(i(n)+"skewX(",null,r)-2,x:oe(t,e)}):e&&n.push(i(n)+"skewX("+e+r)}(a.skewX,s.skewX,o,c),function(t,e,n,r,a,s){if(t!==n||e!==r){var o=a.push(i(a)+"scale(",null,",",null,")");s.push({i:o-4,x:oe(t,n)},{i:o-2,x:oe(e,r)})}else 1===n&&1===r||a.push(i(a)+"scale("+n+","+r+")")}(a.scaleX,a.scaleY,s.scaleX,s.scaleY,o,c),a=s=null,function(t){for(var e,n=-1,r=c.length;++n<r;)o[(e=c[n]).i]=e.x(t);return o.join("")}}}var pe=de((function(t){const e=new("function"==typeof DOMMatrix?DOMMatrix:WebKitCSSMatrix)(t+"");return e.isIdentity?he:ue(e.a,e.b,e.c,e.d,e.e,e.f)}),"px, ","px)","deg)"),fe=de((function(t){return null==t?he:(ce||(ce=document.createElementNS("http://www.w3.org/2000/svg","g")),ce.setAttribute("transform",t),(t=ce.transform.baseVal.consolidate())?ue((t=t.matrix).a,t.b,t.c,t.d,t.e,t.f):he)}),", ",")",")");function ge(t,e){var n,r;return function(){var i=ae(this,t),a=i.tween;if(a!==n)for(var s=0,o=(r=n=a).length;s<o;++s)if(r[s].name===e){(r=r.slice()).splice(s,1);break}i.tween=r}}function ye(t,e,n){var r,i;if("function"!=typeof n)throw new Error;return function(){var a=ae(this,t),s=a.tween;if(s!==r){i=(r=s).slice();for(var o={name:e,value:n},c=0,l=i.length;c<l;++c)if(i[c].name===e){i[c]=o;break}c===l&&i.push(o)}a.tween=i}}function me(t,e,n){var r=t._id;return t.each((function(){var t=ae(this,r);(t.value||(t.value={}))[e]=n.apply(this,arguments)})),function(t){return se(t,r).value[e]}}function be(t,e,n){t.prototype=e.prototype=n,n.constructor=t}function _e(t,e){var n=Object.create(t.prototype);for(var r in e)n[r]=e[r];return n}function xe(){}var ve=.7,ke=1/ve,we="\\s*([+-]?\\d+)\\s*",Ee="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)\\s*",Ce="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)%\\s*",Te=/^#([0-9a-f]{3,8})$/,Se=new RegExp(`^rgb\\(${we},${we},${we}\\)$`),Ae=new RegExp(`^rgb\\(${Ce},${Ce},${Ce}\\)$`),Le=new RegExp(`^rgba\\(${we},${we},${we},${Ee}\\)$`),Be=new RegExp(`^rgba\\(${Ce},${Ce},${Ce},${Ee}\\)$`),Ne=new RegExp(`^hsl\\(${Ee},${Ce},${Ce}\\)$`),De=new RegExp(`^hsla\\(${Ee},${Ce},${Ce},${Ee}\\)$`),Oe={aliceblue:15792383,antiquewhite:16444375,aqua:65535,aquamarine:8388564,azure:15794175,beige:16119260,bisque:16770244,black:0,blanchedalmond:16772045,blue:255,blueviolet:9055202,brown:10824234,burlywood:14596231,cadetblue:6266528,chartreuse:8388352,chocolate:13789470,coral:16744272,cornflowerblue:6591981,cornsilk:16775388,crimson:14423100,cyan:65535,darkblue:139,darkcyan:35723,darkgoldenrod:12092939,darkgray:11119017,darkgreen:25600,darkgrey:11119017,darkkhaki:12433259,darkmagenta:9109643,darkolivegreen:5597999,darkorange:16747520,darkorchid:10040012,darkred:9109504,darksalmon:15308410,darkseagreen:9419919,darkslateblue:4734347,darkslategray:3100495,darkslategrey:3100495,darkturquoise:52945,darkviolet:9699539,deeppink:16716947,deepskyblue:49151,dimgray:6908265,dimgrey:6908265,dodgerblue:2003199,firebrick:11674146,floralwhite:16775920,forestgreen:2263842,fuchsia:16711935,gainsboro:14474460,ghostwhite:16316671,gold:16766720,goldenrod:14329120,gray:8421504,green:32768,greenyellow:11403055,grey:8421504,honeydew:15794160,hotpink:16738740,indianred:13458524,indigo:4915330,ivory:16777200,khaki:15787660,lavender:15132410,lavenderblush:16773365,lawngreen:8190976,lemonchiffon:16775885,lightblue:11393254,lightcoral:15761536,lightcyan:14745599,lightgoldenrodyellow:16448210,lightgray:13882323,lightgreen:9498256,lightgrey:13882323,lightpink:16758465,lightsalmon:16752762,lightseagreen:2142890,lightskyblue:8900346,lightslategray:7833753,lightslategrey:7833753,lightsteelblue:11584734,lightyellow:16777184,lime:65280,limegreen:3329330,linen:16445670,magenta:16711935,maroon:8388608,mediumaquamarine:6737322,mediumblue:205,mediumorchid:12211667,mediumpurple:9662683,mediumseagreen:3978097,mediumslateblue:8087790,mediumspringgreen:64154,mediumturquoise:4772300,mediumvioletred:13047173,midnightblue:1644912,mintcream:16121850,mistyrose:16770273,moccasin:16770229,navajowhite:16768685,navy:128,oldlace:16643558,olive:8421376,olivedrab:7048739,orange:16753920,orangered:16729344,orchid:14315734,palegoldenrod:15657130,palegreen:10025880,paleturquoise:11529966,palevioletred:14381203,papayawhip:16773077,peachpuff:16767673,peru:13468991,pink:16761035,plum:14524637,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateblue:6970061,slategray:7372944,slategrey:7372944,snow:16775930,springgreen:65407,steelblue:4620980,tan:13808780,teal:32896,thistle:14204888,tomato:16737095,turquoise:4251856,violet:15631086,wheat:16113331,white:16777215,whitesmoke:16119285,yellow:16776960,yellowgreen:10145074};function Me(){return this.rgb().formatHex()}function Ie(){return this.rgb().formatRgb()}function Fe(t){var e,n;return t=(t+"").trim().toLowerCase(),(e=Te.exec(t))?(n=e[1].length,e=parseInt(e[1],16),6===n?$e(e):3===n?new je(e>>8&15|e>>4&240,e>>4&15|240&e,(15&e)<<4|15&e,1):8===n?Re(e>>24&255,e>>16&255,e>>8&255,(255&e)/255):4===n?Re(e>>12&15|e>>8&240,e>>8&15|e>>4&240,e>>4&15|240&e,((15&e)<<4|15&e)/255):null):(e=Se.exec(t))?new je(e[1],e[2],e[3],1):(e=Ae.exec(t))?new je(255*e[1]/100,255*e[2]/100,255*e[3]/100,1):(e=Le.exec(t))?Re(e[1],e[2],e[3],e[4]):(e=Be.exec(t))?Re(255*e[1]/100,255*e[2]/100,255*e[3]/100,e[4]):(e=Ne.exec(t))?He(e[1],e[2]/100,e[3]/100,1):(e=De.exec(t))?He(e[1],e[2]/100,e[3]/100,e[4]):Oe.hasOwnProperty(t)?$e(Oe[t]):"transparent"===t?new je(NaN,NaN,NaN,0):null}function $e(t){return new je(t>>16&255,t>>8&255,255&t,1)}function Re(t,e,n,r){return r<=0&&(t=e=n=NaN),new je(t,e,n,r)}function Ze(t){return t instanceof xe||(t=Fe(t)),t?new je((t=t.rgb()).r,t.g,t.b,t.opacity):new je}function Pe(t,e,n,r){return 1===arguments.length?Ze(t):new je(t,e,n,null==r?1:r)}function je(t,e,n,r){this.r=+t,this.g=+e,this.b=+n,this.opacity=+r}function Ye(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}`}function ze(){const t=Ue(this.opacity);return`${1===t?"rgb(":"rgba("}${We(this.r)}, ${We(this.g)}, ${We(this.b)}${1===t?")":`, ${t})`}`}function Ue(t){return isNaN(t)?1:Math.max(0,Math.min(1,t))}function We(t){return Math.max(0,Math.min(255,Math.round(t)||0))}function qe(t){return((t=We(t))<16?"0":"")+t.toString(16)}function He(t,e,n,r){return r<=0?t=e=n=NaN:n<=0||n>=1?t=e=NaN:e<=0&&(t=NaN),new Ge(t,e,n,r)}function Ve(t){if(t instanceof Ge)return new Ge(t.h,t.s,t.l,t.opacity);if(t instanceof xe||(t=Fe(t)),!t)return new Ge;if(t instanceof Ge)return t;var e=(t=t.rgb()).r/255,n=t.g/255,r=t.b/255,i=Math.min(e,n,r),a=Math.max(e,n,r),s=NaN,o=a-i,c=(a+i)/2;return o?(s=e===a?(n-r)/o+6*(n<r):n===a?(r-e)/o+2:(e-n)/o+4,o/=c<.5?a+i:2-a-i,s*=60):o=c>0&&c<1?0:s,new Ge(s,o,c,t.opacity)}function Ge(t,e,n,r){this.h=+t,this.s=+e,this.l=+n,this.opacity=+r}function Xe(t){return(t=(t||0)%360)<0?t+360:t}function Ke(t){return Math.max(0,Math.min(1,t||0))}function Qe(t,e,n){return 255*(t<60?e+(n-e)*t/60:t<180?n:t<240?e+(n-e)*(240-t)/60:e)}function Je(t,e,n,r,i){var a=t*t,s=a*t;return((1-3*t+3*a-s)*e+(4-6*a+3*s)*n+(1+3*t+3*a-3*s)*r+s*i)/6}be(xe,Fe,{copy(t){return Object.assign(new this.constructor,this,t)},displayable(){return this.rgb().displayable()},hex:Me,formatHex:Me,formatHex8:function(){return this.rgb().formatHex8()},formatHsl:function(){return Ve(this).formatHsl()},formatRgb:Ie,toString:Ie}),be(je,Pe,_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},rgb(){return this},clamp(){return new je(We(this.r),We(this.g),We(this.b),Ue(this.opacity))},displayable(){return-.5<=this.r&&this.r<255.5&&-.5<=this.g&&this.g<255.5&&-.5<=this.b&&this.b<255.5&&0<=this.opacity&&this.opacity<=1},hex:Ye,formatHex:Ye,formatHex8:function(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}${qe(255*(isNaN(this.opacity)?1:this.opacity))}`},formatRgb:ze,toString:ze})),be(Ge,(function(t,e,n,r){return 1===arguments.length?Ve(t):new Ge(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new Ge(this.h,this.s,this.l*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new Ge(this.h,this.s,this.l*t,this.opacity)},rgb(){var t=this.h%360+360*(this.h<0),e=isNaN(t)||isNaN(this.s)?0:this.s,n=this.l,r=n+(n<.5?n:1-n)*e,i=2*n-r;return new je(Qe(t>=240?t-240:t+120,i,r),Qe(t,i,r),Qe(t<120?t+240:t-120,i,r),this.opacity)},clamp(){return new Ge(Xe(this.h),Ke(this.s),Ke(this.l),Ue(this.opacity))},displayable(){return(0<=this.s&&this.s<=1||isNaN(this.s))&&0<=this.l&&this.l<=1&&0<=this.opacity&&this.opacity<=1},formatHsl(){const t=Ue(this.opacity);return`${1===t?"hsl(":"hsla("}${Xe(this.h)}, ${100*Ke(this.s)}%, ${100*Ke(this.l)}%${1===t?")":`, ${t})`}`}}));const tn=t=>()=>t;function en(t,e){return function(n){return t+n*e}}function nn(t){return 1==(t=+t)?rn:function(e,n){return n-e?function(t,e,n){return t=Math.pow(t,n),e=Math.pow(e,n)-t,n=1/n,function(r){return Math.pow(t+r*e,n)}}(e,n,t):tn(isNaN(e)?n:e)}}function rn(t,e){var n=e-t;return n?en(t,n):tn(isNaN(t)?e:t)}const an=function t(e){var n=nn(e);function r(t,e){var r=n((t=Pe(t)).r,(e=Pe(e)).r),i=n(t.g,e.g),a=n(t.b,e.b),s=rn(t.opacity,e.opacity);return function(e){return t.r=r(e),t.g=i(e),t.b=a(e),t.opacity=s(e),t+""}}return r.gamma=t,r}(1);function sn(t){return function(e){var n,r,i=e.length,a=new Array(i),s=new Array(i),o=new Array(i);for(n=0;n<i;++n)r=Pe(e[n]),a[n]=r.r||0,s[n]=r.g||0,o[n]=r.b||0;return a=t(a),s=t(s),o=t(o),r.opacity=1,function(t){return r.r=a(t),r.g=s(t),r.b=o(t),r+""}}}sn((function(t){var e=t.length-1;return function(n){var r=n<=0?n=0:n>=1?(n=1,e-1):Math.floor(n*e),i=t[r],a=t[r+1],s=r>0?t[r-1]:2*i-a,o=r<e-1?t[r+2]:2*a-i;return Je((n-r/e)*e,s,i,a,o)}})),sn((function(t){var e=t.length;return function(n){var r=Math.floor(((n%=1)<0?++n:n)*e),i=t[(r+e-1)%e],a=t[r%e],s=t[(r+1)%e],o=t[(r+2)%e];return Je((n-r/e)*e,i,a,s,o)}}));var on=/[-+]?(?:\d+\.?\d*|\.?\d+)(?:[eE][-+]?\d+)?/g,cn=new RegExp(on.source,"g");function ln(t,e){var n,r,i,a=on.lastIndex=cn.lastIndex=0,s=-1,o=[],c=[];for(t+="",e+="";(n=on.exec(t))&&(r=cn.exec(e));)(i=r.index)>a&&(i=e.slice(a,i),o[s]?o[s]+=i:o[++s]=i),(n=n[0])===(r=r[0])?o[s]?o[s]+=r:o[++s]=r:(o[++s]=null,c.push({i:s,x:oe(n,r)})),a=cn.lastIndex;return a<e.length&&(i=e.slice(a),o[s]?o[s]+=i:o[++s]=i),o.length<2?c[0]?function(t){return function(e){return t(e)+""}}(c[0].x):function(t){return function(){return t}}(e):(e=c.length,function(t){for(var n,r=0;r<e;++r)o[(n=c[r]).i]=n.x(t);return o.join("")})}function hn(t,e){var n;return("number"==typeof e?oe:e instanceof Fe?an:(n=Fe(e))?(e=n,an):ln)(t,e)}function un(t){return function(){this.removeAttribute(t)}}function dn(t){return function(){this.removeAttributeNS(t.space,t.local)}}function pn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttribute(t);return s===a?null:s===r?i:i=e(r=s,n)}}function fn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttributeNS(t.space,t.local);return s===a?null:s===r?i:i=e(r=s,n)}}function gn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttribute(t))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttribute(t)}}function yn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttributeNS(t.space,t.local))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttributeNS(t.space,t.local)}}function mn(t,e){return function(n){this.setAttribute(t,e.call(this,n))}}function bn(t,e){return function(n){this.setAttributeNS(t.space,t.local,e.call(this,n))}}function _n(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&bn(t,i)),n}return i._value=e,i}function xn(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&mn(t,i)),n}return i._value=e,i}function vn(t,e){return function(){ie(this,t).delay=+e.apply(this,arguments)}}function kn(t,e){return e=+e,function(){ie(this,t).delay=e}}function wn(t,e){return function(){ae(this,t).duration=+e.apply(this,arguments)}}function En(t,e){return e=+e,function(){ae(this,t).duration=e}}function Cn(t,e){if("function"!=typeof e)throw new Error;return function(){ae(this,t).ease=e}}function Tn(t,e,n){var r,i,a=function(t){return(t+"").trim().split(/^|\s+/).every((function(t){var e=t.indexOf(".");return e>=0&&(t=t.slice(0,e)),!t||"start"===t}))}(e)?ie:ae;return function(){var s=a(this,t),o=s.on;o!==r&&(i=(r=o).copy()).on(e,n),s.on=i}}var Sn=Lt.prototype.constructor;function An(t){return function(){this.style.removeProperty(t)}}function Ln(t,e,n){return function(r){this.style.setProperty(t,e.call(this,r),n)}}function Bn(t,e,n){var r,i;function a(){var a=e.apply(this,arguments);return a!==i&&(r=(i=a)&&Ln(t,a,n)),r}return a._value=e,a}function Nn(t){return function(e){this.textContent=t.call(this,e)}}function Dn(t){var e,n;function r(){var r=t.apply(this,arguments);return r!==n&&(e=(n=r)&&Nn(r)),e}return r._value=t,r}var On=0;function Mn(t,e,n,r){this._groups=t,this._parents=e,this._name=n,this._id=r}function In(){return++On}var Fn=Lt.prototype;Mn.prototype=function(t){return Lt().transition(t)}.prototype={constructor:Mn,select:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=y(t));for(var r=this._groups,i=r.length,a=new Array(i),s=0;s<i;++s)for(var o,c,l=r[s],h=l.length,u=a[s]=new Array(h),d=0;d<h;++d)(o=l[d])&&(c=t.call(o,o.__data__,d,l))&&("__data__"in o&&(c.__data__=o.__data__),u[d]=c,re(u[d],e,n,d,u,se(o,n)));return new Mn(a,this._parents,e,n)},selectAll:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=_(t));for(var r=this._groups,i=r.length,a=[],s=[],o=0;o<i;++o)for(var c,l=r[o],h=l.length,u=0;u<h;++u)if(c=l[u]){for(var d,p=t.call(c,c.__data__,u,l),f=se(c,n),g=0,y=p.length;g<y;++g)(d=p[g])&&re(d,e,n,g,p,f);a.push(p),s.push(c)}return new Mn(a,s,e,n)},selectChild:Fn.selectChild,selectChildren:Fn.selectChildren,filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new Mn(r,this._parents,this._name,this._id)},merge:function(t){if(t._id!==this._id)throw new Error;for(var e=this._groups,n=t._groups,r=e.length,i=n.length,a=Math.min(r,i),s=new Array(r),o=0;o<a;++o)for(var c,l=e[o],h=n[o],u=l.length,d=s[o]=new Array(u),p=0;p<u;++p)(c=l[p]||h[p])&&(d[p]=c);for(;o<r;++o)s[o]=e[o];return new Mn(s,this._parents,this._name,this._id)},selection:function(){return new Sn(this._groups,this._parents)},transition:function(){for(var t=this._name,e=this._id,n=In(),r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)if(s=o[l]){var h=se(s,e);re(s,t,n,l,o,{time:h.time+h.delay+h.duration,delay:0,duration:h.duration,ease:h.ease})}return new Mn(r,this._parents,t,n)},call:Fn.call,nodes:Fn.nodes,node:Fn.node,size:Fn.size,empty:Fn.empty,each:Fn.each,on:function(t,e){var n=this._id;return arguments.length<2?se(this.node(),n).on.on(t):this.each(Tn(n,t,e))},attr:function(t,e){var n=F(t),r="transform"===n?fe:hn;return this.attrTween(t,"function"==typeof e?(n.local?yn:gn)(n,r,me(this,"attr."+t,e)):null==e?(n.local?dn:un)(n):(n.local?fn:pn)(n,r,e))},attrTween:function(t,e){var n="attr."+t;if(arguments.length<2)return(n=this.tween(n))&&n._value;if(null==e)return this.tween(n,null);if("function"!=typeof e)throw new Error;var r=F(t);return this.tween(n,(r.local?_n:xn)(r,e))},style:function(t,e,n){var r="transform"==(t+="")?pe:hn;return null==e?this.styleTween(t,function(t,e){var n,r,i;return function(){var a=H(this,t),s=(this.style.removeProperty(t),H(this,t));return a===s?null:a===n&&s===r?i:i=e(n=a,r=s)}}(t,r)).on("end.style."+t,An(t)):"function"==typeof e?this.styleTween(t,function(t,e,n){var r,i,a;return function(){var s=H(this,t),o=n(this),c=o+"";return null==o&&(this.style.removeProperty(t),c=o=H(this,t)),s===c?null:s===r&&c===i?a:(i=c,a=e(r=s,o))}}(t,r,me(this,"style."+t,e))).each(function(t,e){var n,r,i,a,s="style."+e,o="end."+s;return function(){var c=ae(this,t),l=c.on,h=null==c.value[s]?a||(a=An(e)):void 0;l===n&&i===h||(r=(n=l).copy()).on(o,i=h),c.on=r}}(this._id,t)):this.styleTween(t,function(t,e,n){var r,i,a=n+"";return function(){var s=H(this,t);return s===a?null:s===r?i:i=e(r=s,n)}}(t,r,e),n).on("end.style."+t,null)},styleTween:function(t,e,n){var r="style."+(t+="");if(arguments.length<2)return(r=this.tween(r))&&r._value;if(null==e)return this.tween(r,null);if("function"!=typeof e)throw new Error;return this.tween(r,Bn(t,e,null==n?"":n))},text:function(t){return this.tween("text","function"==typeof t?function(t){return function(){var e=t(this);this.textContent=null==e?"":e}}(me(this,"text",t)):function(t){return function(){this.textContent=t}}(null==t?"":t+""))},textTween:function(t){var e="text";if(arguments.length<1)return(e=this.tween(e))&&e._value;if(null==t)return this.tween(e,null);if("function"!=typeof t)throw new Error;return this.tween(e,Dn(t))},remove:function(){return this.on("end.remove",function(t){return function(){var e=this.parentNode;for(var n in this.__transition)if(+n!==t)return;e&&e.removeChild(this)}}(this._id))},tween:function(t,e){var n=this._id;if(t+="",arguments.length<2){for(var r,i=se(this.node(),n).tween,a=0,s=i.length;a<s;++a)if((r=i[a]).name===t)return r.value;return null}return this.each((null==e?ge:ye)(n,t,e))},delay:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?vn:kn)(e,t)):se(this.node(),e).delay},duration:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?wn:En)(e,t)):se(this.node(),e).duration},ease:function(t){var e=this._id;return arguments.length?this.each(Cn(e,t)):se(this.node(),e).ease},easeVarying:function(t){if("function"!=typeof t)throw new Error;return this.each(function(t,e){return function(){var n=e.apply(this,arguments);if("function"!=typeof n)throw new Error;ae(this,t).ease=n}}(this._id,t))},end:function(){var t,e,n=this,r=n._id,i=n.size();return new Promise((function(a,s){var o={value:s},c={value:function(){0==--i&&a()}};n.each((function(){var n=ae(this,r),i=n.on;i!==t&&((e=(t=i).copy())._.cancel.push(o),e._.interrupt.push(o),e._.end.push(c)),n.on=e})),0===i&&a()}))},[Symbol.iterator]:Fn[Symbol.iterator]};var $n={time:null,delay:0,duration:250,ease:function(t){return((t*=2)<=1?t*t*t:(t-=2)*t*t+2)/2}};function Rn(t,e){for(var n;!(n=t.__transition)||!(n=n[e]);)if(!(t=t.parentNode))throw new Error(`transition ${e} not found`);return n}Lt.prototype.interrupt=function(t){return this.each((function(){!function(t,e){var n,r,i,a=t.__transition,s=!0;if(a){for(i in e=null==e?null:e+"",a)(n=a[i]).name===e?(r=n.state>2&&n.state<5,n.state=6,n.timer.stop(),n.on.call(r?"interrupt":"cancel",t,t.__data__,n.index,n.group),delete a[i]):s=!1;s&&delete t.__transition}}(this,t)}))},Lt.prototype.transition=function(t){var e,n;t instanceof Mn?(e=t._id,t=t._name):(e=In(),(n=$n).time=Ht(),t=null==t?null:t+"");for(var r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)(s=o[l])&&re(s,t,e,l,o,n||Rn(s,e));return new Mn(r,this._parents,t,e)};const{abs:Zn,max:Pn,min:jn}=Math;function Yn(t){return[+t[0],+t[1]]}function zn(t){return[Yn(t[0]),Yn(t[1])]}["w","e"].map(Un),["n","s"].map(Un),["n","w","e","s","nw","ne","sw","se"].map(Un);function Un(t){return{type:t}}function Wn(t){if(!t.ok)throw new Error(t.status+" "+t.statusText);return t.text()}function qn(t){return(e,n)=>function(t,e){return fetch(t,e).then(Wn)}(e,n).then((e=>(new DOMParser).parseFromString(e,t)))}qn("application/xml");qn("text/html");var Hn=qn("image/svg+xml");const Vn=Math.PI/180,Gn=180/Math.PI,Xn=.96422,Kn=.82521,Qn=4/29,Jn=6/29,tr=3*Jn*Jn;function er(t){if(t instanceof nr)return new nr(t.l,t.a,t.b,t.opacity);if(t instanceof lr)return hr(t);t instanceof je||(t=Ze(t));var e,n,r=sr(t.r),i=sr(t.g),a=sr(t.b),s=rr((.2225045*r+.7168786*i+.0606169*a)/1);return r===i&&i===a?e=n=s:(e=rr((.4360747*r+.3850649*i+.1430804*a)/Xn),n=rr((.0139322*r+.0971045*i+.7141733*a)/Kn)),new nr(116*s-16,500*(e-s),200*(s-n),t.opacity)}function nr(t,e,n,r){this.l=+t,this.a=+e,this.b=+n,this.opacity=+r}function rr(t){return t>.008856451679035631?Math.pow(t,1/3):t/tr+Qn}function ir(t){return t>Jn?t*t*t:tr*(t-Qn)}function ar(t){return 255*(t<=.0031308?12.92*t:1.055*Math.pow(t,1/2.4)-.055)}function sr(t){return(t/=255)<=.04045?t/12.92:Math.pow((t+.055)/1.055,2.4)}function or(t){if(t instanceof lr)return new lr(t.h,t.c,t.l,t.opacity);if(t instanceof nr||(t=er(t)),0===t.a&&0===t.b)return new lr(NaN,0<t.l&&t.l<100?0:NaN,t.l,t.opacity);var e=Math.atan2(t.b,t.a)*Gn;return new lr(e<0?e+360:e,Math.sqrt(t.a*t.a+t.b*t.b),t.l,t.opacity)}function cr(t,e,n,r){return 1===arguments.length?or(t):new lr(t,e,n,null==r?1:r)}function lr(t,e,n,r){this.h=+t,this.c=+e,this.l=+n,this.opacity=+r}function hr(t){if(isNaN(t.h))return new nr(t.l,0,0,t.opacity);var e=t.h*Vn;return new nr(t.l,Math.cos(e)*t.c,Math.sin(e)*t.c,t.opacity)}function ur(t){return function(e,n){var r=t((e=cr(e)).h,(n=cr(n)).h),i=rn(e.c,n.c),a=rn(e.l,n.l),s=rn(e.opacity,n.opacity);return function(t){return e.h=r(t),e.c=i(t),e.l=a(t),e.opacity=s(t),e+""}}}be(nr,(function(t,e,n,r){return 1===arguments.length?er(t):new nr(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return new nr(this.l+18*(null==t?1:t),this.a,this.b,this.opacity)},darker(t){return new nr(this.l-18*(null==t?1:t),this.a,this.b,this.opacity)},rgb(){var t=(this.l+16)/116,e=isNaN(this.a)?t:t+this.a/500,n=isNaN(this.b)?t:t-this.b/200;return new je(ar(3.1338561*(e=Xn*ir(e))-1.6168667*(t=1*ir(t))-.4906146*(n=Kn*ir(n))),ar(-.9787684*e+1.9161415*t+.033454*n),ar(.0719453*e-.2289914*t+1.4052427*n),this.opacity)}})),be(lr,cr,_e(xe,{brighter(t){return new lr(this.h,this.c,this.l+18*(null==t?1:t),this.opacity)},darker(t){return new lr(this.h,this.c,this.l-18*(null==t?1:t),this.opacity)},rgb(){return hr(this).rgb()}}));const dr=ur((function(t,e){var n=e-t;return n?en(t,n>180||n<-180?n-360*Math.round(n/360):n):tn(isNaN(t)?e:t)}));ur(rn);const pr=Math.sqrt(50),fr=Math.sqrt(10),gr=Math.sqrt(2);function yr(t,e,n){const r=(e-t)/Math.max(0,n),i=Math.floor(Math.log10(r)),a=r/Math.pow(10,i),s=a>=pr?10:a>=fr?5:a>=gr?2:1;let o,c,l;return i<0?(l=Math.pow(10,-i)/s,o=Math.round(t*l),c=Math.round(e*l),o/l<t&&++o,c/l>e&&--c,l=-l):(l=Math.pow(10,i)*s,o=Math.round(t/l),c=Math.round(e/l),o*l<t&&++o,c*l>e&&--c),c<o&&.5<=n&&n<2?yr(t,e,2*n):[o,c,l]}function mr(t,e,n){return yr(t=+t,e=+e,n=+n)[2]}function br(t,e,n){n=+n;const r=(e=+e)<(t=+t),i=r?mr(e,t,n):mr(t,e,n);return(r?-1:1)*(i<0?1/-i:i)}function _r(t,e){return null==t||null==e?NaN:t<e?-1:t>e?1:t>=e?0:NaN}function xr(t,e){return null==t||null==e?NaN:e<t?-1:e>t?1:e>=t?0:NaN}function vr(t){let e,n,r;function i(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<0?i=e+1:a=e}while(i<a)}return i}return 2!==t.length?(e=_r,n=(e,n)=>_r(t(e),n),r=(e,n)=>t(e)-n):(e=t===_r||t===xr?t:kr,n=t,r=t),{left:i,center:function(t,e,n=0,a=t.length){const s=i(t,e,n,a-1);return s>n&&r(t[s-1],e)>-r(t[s],e)?s-1:s},right:function(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<=0?i=e+1:a=e}while(i<a)}return i}}}function kr(){return 0}const wr=vr(_r),Er=wr.right,Cr=(wr.left,vr((function(t){return null===t?NaN:+t})).center,Er);function Tr(t,e){var n,r=e?e.length:0,i=t?Math.min(r,t.length):0,a=new Array(i),s=new Array(r);for(n=0;n<i;++n)a[n]=Br(t[n],e[n]);for(;n<r;++n)s[n]=e[n];return function(t){for(n=0;n<i;++n)s[n]=a[n](t);return s}}function Sr(t,e){var n=new Date;return t=+t,e=+e,function(r){return n.setTime(t*(1-r)+e*r),n}}function Ar(t,e){var n,r={},i={};for(n in null!==t&&"object"==typeof t||(t={}),null!==e&&"object"==typeof e||(e={}),e)n in t?r[n]=Br(t[n],e[n]):i[n]=e[n];return function(t){for(n in r)i[n]=r[n](t);return i}}function Lr(t,e){e||(e=[]);var n,r=t?Math.min(e.length,t.length):0,i=e.slice();return function(a){for(n=0;n<r;++n)i[n]=t[n]*(1-a)+e[n]*a;return i}}function Br(t,e){var n,r,i=typeof e;return null==e||"boolean"===i?tn(e):("number"===i?oe:"string"===i?(n=Fe(e))?(e=n,an):ln:e instanceof Fe?an:e instanceof Date?Sr:(r=e,!ArrayBuffer.isView(r)||r instanceof DataView?Array.isArray(e)?Tr:"function"!=typeof e.valueOf&&"function"!=typeof e.toString||isNaN(e)?Ar:oe:Lr))(t,e)}function Nr(t,e){return t=+t,e=+e,function(n){return Math.round(t*(1-n)+e*n)}}function Dr(t){return+t}var Or=[0,1];function Mr(t){return t}function Ir(t,e){return(e-=t=+t)?function(n){return(n-t)/e}:(n=isNaN(e)?NaN:.5,function(){return n});var n}function Fr(t,e,n){var r=t[0],i=t[1],a=e[0],s=e[1];return i<r?(r=Ir(i,r),a=n(s,a)):(r=Ir(r,i),a=n(a,s)),function(t){return a(r(t))}}function $r(t,e,n){var r=Math.min(t.length,e.length)-1,i=new Array(r),a=new Array(r),s=-1;for(t[r]<t[0]&&(t=t.slice().reverse(),e=e.slice().reverse());++s<r;)i[s]=Ir(t[s],t[s+1]),a[s]=n(e[s],e[s+1]);return function(e){var n=Cr(t,e,1,r)-1;return a[n](i[n](e))}}function Rr(t,e){return e.domain(t.domain()).range(t.range()).interpolate(t.interpolate()).clamp(t.clamp()).unknown(t.unknown())}function Zr(){var t,e,n,r,i,a,s=Or,o=Or,c=Br,l=Mr;function h(){var t,e,n,c=Math.min(s.length,o.length);return l!==Mr&&(t=s[0],e=s[c-1],t>e&&(n=t,t=e,e=n),l=function(n){return Math.max(t,Math.min(e,n))}),r=c>2?$r:Fr,i=a=null,u}function u(e){return null==e||isNaN(e=+e)?n:(i||(i=r(s.map(t),o,c)))(t(l(e)))}return u.invert=function(n){return l(e((a||(a=r(o,s.map(t),oe)))(n)))},u.domain=function(t){return arguments.length?(s=Array.from(t,Dr),h()):s.slice()},u.range=function(t){return arguments.length?(o=Array.from(t),h()):o.slice()},u.rangeRound=function(t){return o=Array.from(t),c=Nr,h()},u.clamp=function(t){return arguments.length?(l=!!t||Mr,h()):l!==Mr},u.interpolate=function(t){return arguments.length?(c=t,h()):c},u.unknown=function(t){return arguments.length?(n=t,u):n},function(n,r){return t=n,e=r,h()}}function Pr(){return Zr()(Mr,Mr)}function jr(t,e){switch(arguments.length){case 0:break;case 1:this.range(t);break;default:this.range(e).domain(t)}return this}var Yr,zr=/^(?:(.)?([<>=^]))?([+\-( ])?([$#])?(0)?(\d+)?(,)?(\.\d+)?(~)?([a-z%])?$/i;function Ur(t){if(!(e=zr.exec(t)))throw new Error("invalid format: "+t);var e;return new Wr({fill:e[1],align:e[2],sign:e[3],symbol:e[4],zero:e[5],width:e[6],comma:e[7],precision:e[8]&&e[8].slice(1),trim:e[9],type:e[10]})}function Wr(t){this.fill=void 0===t.fill?" ":t.fill+"",this.align=void 0===t.align?">":t.align+"",this.sign=void 0===t.sign?"-":t.sign+"",this.symbol=void 0===t.symbol?"":t.symbol+"",this.zero=!!t.zero,this.width=void 0===t.width?void 0:+t.width,this.comma=!!t.comma,this.precision=void 0===t.precision?void 0:+t.precision,this.trim=!!t.trim,this.type=void 0===t.type?"":t.type+""}function qr(t,e){if((n=(t=e?t.toExponential(e-1):t.toExponential()).indexOf("e"))<0)return null;var n,r=t.slice(0,n);return[r.length>1?r[0]+r.slice(2):r,+t.slice(n+1)]}function Hr(t){return(t=qr(Math.abs(t)))?t[1]:NaN}function Vr(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1];return i<0?"0."+new Array(-i).join("0")+r:r.length>i+1?r.slice(0,i+1)+"."+r.slice(i+1):r+new Array(i-r.length+2).join("0")}Ur.prototype=Wr.prototype,Wr.prototype.toString=function(){return this.fill+this.align+this.sign+this.symbol+(this.zero?"0":"")+(void 0===this.width?"":Math.max(1,0|this.width))+(this.comma?",":"")+(void 0===this.precision?"":"."+Math.max(0,0|this.precision))+(this.trim?"~":"")+this.type};const Gr={"%":(t,e)=>(100*t).toFixed(e),b:t=>Math.round(t).toString(2),c:t=>t+"",d:function(t){return Math.abs(t=Math.round(t))>=1e21?t.toLocaleString("en").replace(/,/g,""):t.toString(10)},e:(t,e)=>t.toExponential(e),f:(t,e)=>t.toFixed(e),g:(t,e)=>t.toPrecision(e),o:t=>Math.round(t).toString(8),p:(t,e)=>Vr(100*t,e),r:Vr,s:function(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1],a=i-(Yr=3*Math.max(-8,Math.min(8,Math.floor(i/3))))+1,s=r.length;return a===s?r:a>s?r+new Array(a-s+1).join("0"):a>0?r.slice(0,a)+"."+r.slice(a):"0."+new Array(1-a).join("0")+qr(t,Math.max(0,e+a-1))[0]},X:t=>Math.round(t).toString(16).toUpperCase(),x:t=>Math.round(t).toString(16)};function Xr(t){return t}var Kr,Qr,Jr,ti=Array.prototype.map,ei=["y","z","a","f","p","n","\xb5","m","","k","M","G","T","P","E","Z","Y"];function ni(t){var e,n,r=void 0===t.grouping||void 0===t.thousands?Xr:(e=ti.call(t.grouping,Number),n=t.thousands+"",function(t,r){for(var i=t.length,a=[],s=0,o=e[0],c=0;i>0&&o>0&&(c+o+1>r&&(o=Math.max(1,r-c)),a.push(t.substring(i-=o,i+o)),!((c+=o+1)>r));)o=e[s=(s+1)%e.length];return a.reverse().join(n)}),i=void 0===t.currency?"":t.currency[0]+"",a=void 0===t.currency?"":t.currency[1]+"",s=void 0===t.decimal?".":t.decimal+"",o=void 0===t.numerals?Xr:function(t){return function(e){return e.replace(/[0-9]/g,(function(e){return t[+e]}))}}(ti.call(t.numerals,String)),c=void 0===t.percent?"%":t.percent+"",l=void 0===t.minus?"\u2212":t.minus+"",h=void 0===t.nan?"NaN":t.nan+"";function u(t){var e=(t=Ur(t)).fill,n=t.align,u=t.sign,d=t.symbol,p=t.zero,f=t.width,g=t.comma,y=t.precision,m=t.trim,b=t.type;"n"===b?(g=!0,b="g"):Gr[b]||(void 0===y&&(y=12),m=!0,b="g"),(p||"0"===e&&"="===n)&&(p=!0,e="0",n="=");var _="$"===d?i:"#"===d&&/[boxX]/.test(b)?"0"+b.toLowerCase():"",x="$"===d?a:/[%p]/.test(b)?c:"",v=Gr[b],k=/[defgprs%]/.test(b);function w(t){var i,a,c,d=_,w=x;if("c"===b)w=v(t)+w,t="";else{var E=(t=+t)<0||1/t<0;if(t=isNaN(t)?h:v(Math.abs(t),y),m&&(t=function(t){t:for(var e,n=t.length,r=1,i=-1;r<n;++r)switch(t[r]){case".":i=e=r;break;case"0":0===i&&(i=r),e=r;break;default:if(!+t[r])break t;i>0&&(i=0)}return i>0?t.slice(0,i)+t.slice(e+1):t}(t)),E&&0==+t&&"+"!==u&&(E=!1),d=(E?"("===u?u:l:"-"===u||"("===u?"":u)+d,w=("s"===b?ei[8+Yr/3]:"")+w+(E&&"("===u?")":""),k)for(i=-1,a=t.length;++i<a;)if(48>(c=t.charCodeAt(i))||c>57){w=(46===c?s+t.slice(i+1):t.slice(i))+w,t=t.slice(0,i);break}}g&&!p&&(t=r(t,1/0));var C=d.length+t.length+w.length,T=C<f?new Array(f-C+1).join(e):"";switch(g&&p&&(t=r(T+t,T.length?f-w.length:1/0),T=""),n){case"<":t=d+t+w+T;break;case"=":t=d+T+t+w;break;case"^":t=T.slice(0,C=T.length>>1)+d+t+w+T.slice(C);break;default:t=T+d+t+w}return o(t)}return y=void 0===y?6:/[gprs]/.test(b)?Math.max(1,Math.min(21,y)):Math.max(0,Math.min(20,y)),w.toString=function(){return t+""},w}return{format:u,formatPrefix:function(t,e){var n=u(((t=Ur(t)).type="f",t)),r=3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3))),i=Math.pow(10,-r),a=ei[8+r/3];return function(t){return n(i*t)+a}}}}function ri(t,e,n,r){var i,a=br(t,e,n);switch((r=Ur(null==r?",f":r)).type){case"s":var s=Math.max(Math.abs(t),Math.abs(e));return null!=r.precision||isNaN(i=function(t,e){return Math.max(0,3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3)))-Hr(Math.abs(t)))}(a,s))||(r.precision=i),Jr(r,s);case"":case"e":case"g":case"p":case"r":null!=r.precision||isNaN(i=function(t,e){return t=Math.abs(t),e=Math.abs(e)-t,Math.max(0,Hr(e)-Hr(t))+1}(a,Math.max(Math.abs(t),Math.abs(e))))||(r.precision=i-("e"===r.type));break;case"f":case"%":null!=r.precision||isNaN(i=function(t){return Math.max(0,-Hr(Math.abs(t)))}(a))||(r.precision=i-2*("%"===r.type))}return Qr(r)}function ii(t){var e=t.domain;return t.ticks=function(t){var n=e();return function(t,e,n){if(!((n=+n)>0))return[];if((t=+t)==(e=+e))return[t];const r=e<t,[i,a,s]=r?yr(e,t,n):yr(t,e,n);if(!(a>=i))return[];const o=a-i+1,c=new Array(o);if(r)if(s<0)for(let l=0;l<o;++l)c[l]=(a-l)/-s;else for(let l=0;l<o;++l)c[l]=(a-l)*s;else if(s<0)for(let l=0;l<o;++l)c[l]=(i+l)/-s;else for(let l=0;l<o;++l)c[l]=(i+l)*s;return c}(n[0],n[n.length-1],null==t?10:t)},t.tickFormat=function(t,n){var r=e();return ri(r[0],r[r.length-1],null==t?10:t,n)},t.nice=function(n){null==n&&(n=10);var r,i,a=e(),s=0,o=a.length-1,c=a[s],l=a[o],h=10;for(l<c&&(i=c,c=l,l=i,i=s,s=o,o=i);h-- >0;){if((i=mr(c,l,n))===r)return a[s]=c,a[o]=l,e(a);if(i>0)c=Math.floor(c/i)*i,l=Math.ceil(l/i)*i;else{if(!(i<0))break;c=Math.ceil(c*i)/i,l=Math.floor(l*i)/i}r=i}return t},t}function ai(){var t=Pr();return t.copy=function(){return Rr(t,ai())},jr.apply(t,arguments),ii(t)}Kr=ni({thousands:",",grouping:[3],currency:["$",""]}),Qr=Kr.format,Jr=Kr.formatPrefix;class si extends Map{constructor(t,e=hi){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:e}}),null!=t)for(const[n,r]of t)this.set(n,r)}get(t){return super.get(oi(this,t))}has(t){return super.has(oi(this,t))}set(t,e){return super.set(ci(this,t),e)}delete(t){return super.delete(li(this,t))}}Set;function oi({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):n}function ci({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):(t.set(r,n),n)}function li({_intern:t,_key:e},n){const r=e(n);return t.has(r)&&(n=t.get(r),t.delete(r)),n}function hi(t){return null!==t&&"object"==typeof t?t.valueOf():t}const ui=Symbol("implicit");function di(){var t=new si,e=[],n=[],r=ui;function i(i){let a=t.get(i);if(void 0===a){if(r!==ui)return r;t.set(i,a=e.push(i)-1)}return n[a%n.length]}return i.domain=function(n){if(!arguments.length)return e.slice();e=[],t=new si;for(const r of n)t.has(r)||t.set(r,e.push(r)-1);return i},i.range=function(t){return arguments.length?(n=Array.from(t),i):n.slice()},i.unknown=function(t){return arguments.length?(r=t,i):r},i.copy=function(){return di(e,n).unknown(r)},jr.apply(i,arguments),i}const pi=1e3,fi=6e4,gi=36e5,yi=864e5,mi=6048e5,bi=2592e6,_i=31536e6,xi=new Date,vi=new Date;function ki(t,e,n,r){function i(e){return t(e=0===arguments.length?new Date:new Date(+e)),e}return i.floor=e=>(t(e=new Date(+e)),e),i.ceil=n=>(t(n=new Date(n-1)),e(n,1),t(n),n),i.round=t=>{const e=i(t),n=i.ceil(t);return t-e<n-t?e:n},i.offset=(t,n)=>(e(t=new Date(+t),null==n?1:Math.floor(n)),t),i.range=(n,r,a)=>{const s=[];if(n=i.ceil(n),a=null==a?1:Math.floor(a),!(n<r&&a>0))return s;let o;do{s.push(o=new Date(+n)),e(n,a),t(n)}while(o<n&&n<r);return s},i.filter=n=>ki((e=>{if(e>=e)for(;t(e),!n(e);)e.setTime(e-1)}),((t,r)=>{if(t>=t)if(r<0)for(;++r<=0;)for(;e(t,-1),!n(t););else for(;--r>=0;)for(;e(t,1),!n(t););})),n&&(i.count=(e,r)=>(xi.setTime(+e),vi.setTime(+r),t(xi),t(vi),Math.floor(n(xi,vi))),i.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?i.filter(r?e=>r(e)%t==0:e=>i.count(0,e)%t==0):i:null)),i}const wi=ki((()=>{}),((t,e)=>{t.setTime(+t+e)}),((t,e)=>e-t));wi.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?ki((e=>{e.setTime(Math.floor(e/t)*t)}),((e,n)=>{e.setTime(+e+n*t)}),((e,n)=>(n-e)/t)):wi:null);wi.range;const Ei=ki((t=>{t.setTime(t-t.getMilliseconds())}),((t,e)=>{t.setTime(+t+e*pi)}),((t,e)=>(e-t)/pi),(t=>t.getUTCSeconds())),Ci=(Ei.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getMinutes()))),Ti=(Ci.range,ki((t=>{t.setUTCSeconds(0,0)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getUTCMinutes()))),Si=(Ti.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi-t.getMinutes()*fi)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getHours()))),Ai=(Si.range,ki((t=>{t.setUTCMinutes(0,0,0)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getUTCHours()))),Li=(Ai.range,ki((t=>t.setHours(0,0,0,0)),((t,e)=>t.setDate(t.getDate()+e)),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/yi),(t=>t.getDate()-1))),Bi=(Li.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>t.getUTCDate()-1))),Ni=(Bi.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>Math.floor(t/yi))));Ni.range;function Di(t){return ki((e=>{e.setDate(e.getDate()-(e.getDay()+7-t)%7),e.setHours(0,0,0,0)}),((t,e)=>{t.setDate(t.getDate()+7*e)}),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/mi))}const Oi=Di(0),Mi=Di(1),Ii=Di(2),Fi=Di(3),$i=Di(4),Ri=Di(5),Zi=Di(6);Oi.range,Mi.range,Ii.range,Fi.range,$i.range,Ri.range,Zi.range;function Pi(t){return ki((e=>{e.setUTCDate(e.getUTCDate()-(e.getUTCDay()+7-t)%7),e.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+7*e)}),((t,e)=>(e-t)/mi))}const ji=Pi(0),Yi=Pi(1),zi=Pi(2),Ui=Pi(3),Wi=Pi(4),qi=Pi(5),Hi=Pi(6),Vi=(ji.range,Yi.range,zi.range,Ui.range,Wi.range,qi.range,Hi.range,ki((t=>{t.setDate(1),t.setHours(0,0,0,0)}),((t,e)=>{t.setMonth(t.getMonth()+e)}),((t,e)=>e.getMonth()-t.getMonth()+12*(e.getFullYear()-t.getFullYear())),(t=>t.getMonth()))),Gi=(Vi.range,ki((t=>{t.setUTCDate(1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCMonth(t.getUTCMonth()+e)}),((t,e)=>e.getUTCMonth()-t.getUTCMonth()+12*(e.getUTCFullYear()-t.getUTCFullYear())),(t=>t.getUTCMonth()))),Xi=(Gi.range,ki((t=>{t.setMonth(0,1),t.setHours(0,0,0,0)}),((t,e)=>{t.setFullYear(t.getFullYear()+e)}),((t,e)=>e.getFullYear()-t.getFullYear()),(t=>t.getFullYear())));Xi.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setFullYear(Math.floor(e.getFullYear()/t)*t),e.setMonth(0,1),e.setHours(0,0,0,0)}),((e,n)=>{e.setFullYear(e.getFullYear()+n*t)})):null;Xi.range;const Ki=ki((t=>{t.setUTCMonth(0,1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCFullYear(t.getUTCFullYear()+e)}),((t,e)=>e.getUTCFullYear()-t.getUTCFullYear()),(t=>t.getUTCFullYear()));Ki.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setUTCFullYear(Math.floor(e.getUTCFullYear()/t)*t),e.setUTCMonth(0,1),e.setUTCHours(0,0,0,0)}),((e,n)=>{e.setUTCFullYear(e.getUTCFullYear()+n*t)})):null;Ki.range;function Qi(t,e,n,r,i,a){const s=[[Ei,1,pi],[Ei,5,5e3],[Ei,15,15e3],[Ei,30,3e4],[a,1,fi],[a,5,3e5],[a,15,9e5],[a,30,18e5],[i,1,gi],[i,3,108e5],[i,6,216e5],[i,12,432e5],[r,1,yi],[r,2,1728e5],[n,1,mi],[e,1,bi],[e,3,7776e6],[t,1,_i]];function o(e,n,r){const i=Math.abs(n-e)/r,a=vr((([,,t])=>t)).right(s,i);if(a===s.length)return t.every(br(e/_i,n/_i,r));if(0===a)return wi.every(Math.max(br(e,n,r),1));const[o,c]=s[i/s[a-1][2]<s[a][2]/i?a-1:a];return o.every(c)}return[function(t,e,n){const r=e<t;r&&([t,e]=[e,t]);const i=n&&"function"==typeof n.range?n:o(t,e,n),a=i?i.range(t,+e+1):[];return r?a.reverse():a},o]}const[Ji,ta]=Qi(Ki,Gi,ji,Ni,Ai,Ti),[ea,na]=Qi(Xi,Vi,Oi,Li,Si,Ci);function ra(t){if(0<=t.y&&t.y<100){var e=new Date(-1,t.m,t.d,t.H,t.M,t.S,t.L);return e.setFullYear(t.y),e}return new Date(t.y,t.m,t.d,t.H,t.M,t.S,t.L)}function ia(t){if(0<=t.y&&t.y<100){var e=new Date(Date.UTC(-1,t.m,t.d,t.H,t.M,t.S,t.L));return e.setUTCFullYear(t.y),e}return new Date(Date.UTC(t.y,t.m,t.d,t.H,t.M,t.S,t.L))}function aa(t,e,n){return{y:t,m:e,d:n,H:0,M:0,S:0,L:0}}var sa,oa,ca={"-":"",_:" ",0:"0"},la=/^\s*\d+/,ha=/^%/,ua=/[\\^$*+?|[\]().{}]/g;function da(t,e,n){var r=t<0?"-":"",i=(r?-t:t)+"",a=i.length;return r+(a<n?new Array(n-a+1).join(e)+i:i)}function pa(t){return t.replace(ua,"\\$&")}function fa(t){return new RegExp("^(?:"+t.map(pa).join("|")+")","i")}function ga(t){return new Map(t.map(((t,e)=>[t.toLowerCase(),e])))}function ya(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.w=+r[0],n+r[0].length):-1}function ma(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.u=+r[0],n+r[0].length):-1}function ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.U=+r[0],n+r[0].length):-1}function _a(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.V=+r[0],n+r[0].length):-1}function xa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.W=+r[0],n+r[0].length):-1}function va(t,e,n){var r=la.exec(e.slice(n,n+4));return r?(t.y=+r[0],n+r[0].length):-1}function ka(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.y=+r[0]+(+r[0]>68?1900:2e3),n+r[0].length):-1}function wa(t,e,n){var r=/^(Z)|([+-]\d\d)(?::?(\d\d))?/.exec(e.slice(n,n+6));return r?(t.Z=r[1]?0:-(r[2]+(r[3]||"00")),n+r[0].length):-1}function Ea(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.q=3*r[0]-3,n+r[0].length):-1}function Ca(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.m=r[0]-1,n+r[0].length):-1}function Ta(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.d=+r[0],n+r[0].length):-1}function Sa(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.m=0,t.d=+r[0],n+r[0].length):-1}function Aa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.H=+r[0],n+r[0].length):-1}function La(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.M=+r[0],n+r[0].length):-1}function Ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.S=+r[0],n+r[0].length):-1}function Na(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.L=+r[0],n+r[0].length):-1}function Da(t,e,n){var r=la.exec(e.slice(n,n+6));return r?(t.L=Math.floor(r[0]/1e3),n+r[0].length):-1}function Oa(t,e,n){var r=ha.exec(e.slice(n,n+1));return r?n+r[0].length:-1}function Ma(t,e,n){var r=la.exec(e.slice(n));return r?(t.Q=+r[0],n+r[0].length):-1}function Ia(t,e,n){var r=la.exec(e.slice(n));return r?(t.s=+r[0],n+r[0].length):-1}function Fa(t,e){return da(t.getDate(),e,2)}function $a(t,e){return da(t.getHours(),e,2)}function Ra(t,e){return da(t.getHours()%12||12,e,2)}function Za(t,e){return da(1+Li.count(Xi(t),t),e,3)}function Pa(t,e){return da(t.getMilliseconds(),e,3)}function ja(t,e){return Pa(t,e)+"000"}function Ya(t,e){return da(t.getMonth()+1,e,2)}function za(t,e){return da(t.getMinutes(),e,2)}function Ua(t,e){return da(t.getSeconds(),e,2)}function Wa(t){var e=t.getDay();return 0===e?7:e}function qa(t,e){return da(Oi.count(Xi(t)-1,t),e,2)}function Ha(t){var e=t.getDay();return e>=4||0===e?$i(t):$i.ceil(t)}function Va(t,e){return t=Ha(t),da($i.count(Xi(t),t)+(4===Xi(t).getDay()),e,2)}function Ga(t){return t.getDay()}function Xa(t,e){return da(Mi.count(Xi(t)-1,t),e,2)}function Ka(t,e){return da(t.getFullYear()%100,e,2)}function Qa(t,e){return da((t=Ha(t)).getFullYear()%100,e,2)}function Ja(t,e){return da(t.getFullYear()%1e4,e,4)}function ts(t,e){var n=t.getDay();return da((t=n>=4||0===n?$i(t):$i.ceil(t)).getFullYear()%1e4,e,4)}function es(t){var e=t.getTimezoneOffset();return(e>0?"-":(e*=-1,"+"))+da(e/60|0,"0",2)+da(e%60,"0",2)}function ns(t,e){return da(t.getUTCDate(),e,2)}function rs(t,e){return da(t.getUTCHours(),e,2)}function is(t,e){return da(t.getUTCHours()%12||12,e,2)}function as(t,e){return da(1+Bi.count(Ki(t),t),e,3)}function ss(t,e){return da(t.getUTCMilliseconds(),e,3)}function os(t,e){return ss(t,e)+"000"}function cs(t,e){return da(t.getUTCMonth()+1,e,2)}function ls(t,e){return da(t.getUTCMinutes(),e,2)}function hs(t,e){return da(t.getUTCSeconds(),e,2)}function us(t){var e=t.getUTCDay();return 0===e?7:e}function ds(t,e){return da(ji.count(Ki(t)-1,t),e,2)}function ps(t){var e=t.getUTCDay();return e>=4||0===e?Wi(t):Wi.ceil(t)}function fs(t,e){return t=ps(t),da(Wi.count(Ki(t),t)+(4===Ki(t).getUTCDay()),e,2)}function gs(t){return t.getUTCDay()}function ys(t,e){return da(Yi.count(Ki(t)-1,t),e,2)}function ms(t,e){return da(t.getUTCFullYear()%100,e,2)}function bs(t,e){return da((t=ps(t)).getUTCFullYear()%100,e,2)}function _s(t,e){return da(t.getUTCFullYear()%1e4,e,4)}function xs(t,e){var n=t.getUTCDay();return da((t=n>=4||0===n?Wi(t):Wi.ceil(t)).getUTCFullYear()%1e4,e,4)}function vs(){return"+0000"}function ks(){return"%"}function ws(t){return+t}function Es(t){return Math.floor(+t/1e3)}function Cs(t){return new Date(t)}function Ts(t){return t instanceof Date?+t:+new Date(+t)}function Ss(t,e,n,r,i,a,s,o,c,l){var h=Pr(),u=h.invert,d=h.domain,p=l(".%L"),f=l(":%S"),g=l("%I:%M"),y=l("%I %p"),m=l("%a %d"),b=l("%b %d"),_=l("%B"),x=l("%Y");function v(t){return(c(t)<t?p:o(t)<t?f:s(t)<t?g:a(t)<t?y:r(t)<t?i(t)<t?m:b:n(t)<t?_:x)(t)}return h.invert=function(t){return new Date(u(t))},h.domain=function(t){return arguments.length?d(Array.from(t,Ts)):d().map(Cs)},h.ticks=function(e){var n=d();return t(n[0],n[n.length-1],null==e?10:e)},h.tickFormat=function(t,e){return null==e?v:l(e)},h.nice=function(t){var n=d();return t&&"function"==typeof t.range||(t=e(n[0],n[n.length-1],null==t?10:t)),t?d(function(t,e){var n,r=0,i=(t=t.slice()).length-1,a=t[r],s=t[i];return s<a&&(n=r,r=i,i=n,n=a,a=s,s=n),t[r]=e.floor(a),t[i]=e.ceil(s),t}(n,t)):h},h.copy=function(){return Rr(h,Ss(t,e,n,r,i,a,s,o,c,l))},h}function As(){return jr.apply(Ss(ea,na,Xi,Vi,Oi,Li,Si,Ci,Ei,oa).domain([new Date(2e3,0,1),new Date(2e3,0,2)]),arguments)}function Ls(t){return"string"==typeof t?new St([[document.querySelector(t)]],[document.documentElement]):new St([[t]],Tt)}function Bs(t){return"string"==typeof t?new St([document.querySelectorAll(t)],[document.documentElement]):new St([m(t)],Tt)}function Ns(t){return function(){return t}}!function(t){sa=function(t){var e=t.dateTime,n=t.date,r=t.time,i=t.periods,a=t.days,s=t.shortDays,o=t.months,c=t.shortMonths,l=fa(i),h=ga(i),u=fa(a),d=ga(a),p=fa(s),f=ga(s),g=fa(o),y=ga(o),m=fa(c),b=ga(c),_={a:function(t){return s[t.getDay()]},A:function(t){return a[t.getDay()]},b:function(t){return c[t.getMonth()]},B:function(t){return o[t.getMonth()]},c:null,d:Fa,e:Fa,f:ja,g:Qa,G:ts,H:$a,I:Ra,j:Za,L:Pa,m:Ya,M:za,p:function(t){return i[+(t.getHours()>=12)]},q:function(t){return 1+~~(t.getMonth()/3)},Q:ws,s:Es,S:Ua,u:Wa,U:qa,V:Va,w:Ga,W:Xa,x:null,X:null,y:Ka,Y:Ja,Z:es,"%":ks},x={a:function(t){return s[t.getUTCDay()]},A:function(t){return a[t.getUTCDay()]},b:function(t){return c[t.getUTCMonth()]},B:function(t){return o[t.getUTCMonth()]},c:null,d:ns,e:ns,f:os,g:bs,G:xs,H:rs,I:is,j:as,L:ss,m:cs,M:ls,p:function(t){return i[+(t.getUTCHours()>=12)]},q:function(t){return 1+~~(t.getUTCMonth()/3)},Q:ws,s:Es,S:hs,u:us,U:ds,V:fs,w:gs,W:ys,x:null,X:null,y:ms,Y:_s,Z:vs,"%":ks},v={a:function(t,e,n){var r=p.exec(e.slice(n));return r?(t.w=f.get(r[0].toLowerCase()),n+r[0].length):-1},A:function(t,e,n){var r=u.exec(e.slice(n));return r?(t.w=d.get(r[0].toLowerCase()),n+r[0].length):-1},b:function(t,e,n){var r=m.exec(e.slice(n));return r?(t.m=b.get(r[0].toLowerCase()),n+r[0].length):-1},B:function(t,e,n){var r=g.exec(e.slice(n));return r?(t.m=y.get(r[0].toLowerCase()),n+r[0].length):-1},c:function(t,n,r){return E(t,e,n,r)},d:Ta,e:Ta,f:Da,g:ka,G:va,H:Aa,I:Aa,j:Sa,L:Na,m:Ca,M:La,p:function(t,e,n){var r=l.exec(e.slice(n));return r?(t.p=h.get(r[0].toLowerCase()),n+r[0].length):-1},q:Ea,Q:Ma,s:Ia,S:Ba,u:ma,U:ba,V:_a,w:ya,W:xa,x:function(t,e,r){return E(t,n,e,r)},X:function(t,e,n){return E(t,r,e,n)},y:ka,Y:va,Z:wa,"%":Oa};function k(t,e){return function(n){var r,i,a,s=[],o=-1,c=0,l=t.length;for(n instanceof Date||(n=new Date(+n));++o<l;)37===t.charCodeAt(o)&&(s.push(t.slice(c,o)),null!=(i=ca[r=t.charAt(++o)])?r=t.charAt(++o):i="e"===r?" ":"0",(a=e[r])&&(r=a(n,i)),s.push(r),c=o+1);return s.push(t.slice(c,o)),s.join("")}}function w(t,e){return function(n){var r,i,a=aa(1900,void 0,1);if(E(a,t,n+="",0)!=n.length)return null;if("Q"in a)return new Date(a.Q);if("s"in a)return new Date(1e3*a.s+("L"in a?a.L:0));if(e&&!("Z"in a)&&(a.Z=0),"p"in a&&(a.H=a.H%12+12*a.p),void 0===a.m&&(a.m="q"in a?a.q:0),"V"in a){if(a.V<1||a.V>53)return null;"w"in a||(a.w=1),"Z"in a?(i=(r=ia(aa(a.y,0,1))).getUTCDay(),r=i>4||0===i?Yi.ceil(r):Yi(r),r=Bi.offset(r,7*(a.V-1)),a.y=r.getUTCFullYear(),a.m=r.getUTCMonth(),a.d=r.getUTCDate()+(a.w+6)%7):(i=(r=ra(aa(a.y,0,1))).getDay(),r=i>4||0===i?Mi.ceil(r):Mi(r),r=Li.offset(r,7*(a.V-1)),a.y=r.getFullYear(),a.m=r.getMonth(),a.d=r.getDate()+(a.w+6)%7)}else("W"in a||"U"in a)&&("w"in a||(a.w="u"in a?a.u%7:"W"in a?1:0),i="Z"in a?ia(aa(a.y,0,1)).getUTCDay():ra(aa(a.y,0,1)).getDay(),a.m=0,a.d="W"in a?(a.w+6)%7+7*a.W-(i+5)%7:a.w+7*a.U-(i+6)%7);return"Z"in a?(a.H+=a.Z/100|0,a.M+=a.Z%100,ia(a)):ra(a)}}function E(t,e,n,r){for(var i,a,s=0,o=e.length,c=n.length;s<o;){if(r>=c)return-1;if(37===(i=e.charCodeAt(s++))){if(i=e.charAt(s++),!(a=v[i in ca?e.charAt(s++):i])||(r=a(t,n,r))<0)return-1}else if(i!=n.charCodeAt(r++))return-1}return r}return _.x=k(n,_),_.X=k(r,_),_.c=k(e,_),x.x=k(n,x),x.X=k(r,x),x.c=k(e,x),{format:function(t){var e=k(t+="",_);return e.toString=function(){return t},e},parse:function(t){var e=w(t+="",!1);return e.toString=function(){return t},e},utcFormat:function(t){var e=k(t+="",x);return e.toString=function(){return t},e},utcParse:function(t){var e=w(t+="",!0);return e.toString=function(){return t},e}}}(t),oa=sa.format,sa.parse,sa.utcFormat,sa.utcParse}({dateTime:"%x, %X",date:"%-m/%-d/%Y",time:"%-I:%M:%S %p",periods:["AM","PM"],days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],shortDays:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});const Ds=Math.abs,Os=Math.atan2,Ms=Math.cos,Is=Math.max,Fs=Math.min,$s=Math.sin,Rs=Math.sqrt,Zs=1e-12,Ps=Math.PI,js=Ps/2,Ys=2*Ps;function zs(t){return t>1?0:t<-1?Ps:Math.acos(t)}function Us(t){return t>=1?js:t<=-1?-js:Math.asin(t)}const Ws=Math.PI,qs=2*Ws,Hs=1e-6,Vs=qs-Hs;function Gs(t){this._+=t[0];for(let e=1,n=t.length;e<n;++e)this._+=arguments[e]+t[e]}class Xs{constructor(t){this._x0=this._y0=this._x1=this._y1=null,this._="",this._append=null==t?Gs:function(t){let e=Math.floor(t);if(!(e>=0))throw new Error(`invalid digits: ${t}`);if(e>15)return Gs;const n=10**e;return function(t){this._+=t[0];for(let e=1,r=t.length;e<r;++e)this._+=Math.round(arguments[e]*n)/n+t[e]}}(t)}moveTo(t,e){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}`}closePath(){null!==this._x1&&(this._x1=this._x0,this._y1=this._y0,this._append`Z`)}lineTo(t,e){this._append`L${this._x1=+t},${this._y1=+e}`}quadraticCurveTo(t,e,n,r){this._append`Q${+t},${+e},${this._x1=+n},${this._y1=+r}`}bezierCurveTo(t,e,n,r,i,a){this._append`C${+t},${+e},${+n},${+r},${this._x1=+i},${this._y1=+a}`}arcTo(t,e,n,r,i){if(t=+t,e=+e,n=+n,r=+r,(i=+i)<0)throw new Error(`negative radius: ${i}`);let a=this._x1,s=this._y1,o=n-t,c=r-e,l=a-t,h=s-e,u=l*l+h*h;if(null===this._x1)this._append`M${this._x1=t},${this._y1=e}`;else if(u>Hs)if(Math.abs(h*o-c*l)>Hs&&i){let d=n-a,p=r-s,f=o*o+c*c,g=d*d+p*p,y=Math.sqrt(f),m=Math.sqrt(u),b=i*Math.tan((Ws-Math.acos((f+u-g)/(2*y*m)))/2),_=b/m,x=b/y;Math.abs(_-1)>Hs&&this._append`L${t+_*l},${e+_*h}`,this._append`A${i},${i},0,0,${+(h*d>l*p)},${this._x1=t+x*o},${this._y1=e+x*c}`}else this._append`L${this._x1=t},${this._y1=e}`;else;}arc(t,e,n,r,i,a){if(t=+t,e=+e,a=!!a,(n=+n)<0)throw new Error(`negative radius: ${n}`);let s=n*Math.cos(r),o=n*Math.sin(r),c=t+s,l=e+o,h=1^a,u=a?r-i:i-r;null===this._x1?this._append`M${c},${l}`:(Math.abs(this._x1-c)>Hs||Math.abs(this._y1-l)>Hs)&&this._append`L${c},${l}`,n&&(u<0&&(u=u%qs+qs),u>Vs?this._append`A${n},${n},0,1,${h},${t-s},${e-o}A${n},${n},0,1,${h},${this._x1=c},${this._y1=l}`:u>Hs&&this._append`A${n},${n},0,${+(u>=Ws)},${h},${this._x1=t+n*Math.cos(i)},${this._y1=e+n*Math.sin(i)}`)}rect(t,e,n,r){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}h${n=+n}v${+r}h${-n}Z`}toString(){return this._}}function Ks(t){let e=3;return t.digits=function(n){if(!arguments.length)return e;if(null==n)e=null;else{const t=Math.floor(n);if(!(t>=0))throw new RangeError(`invalid digits: ${n}`);e=t}return t},()=>new Xs(e)}function Qs(t){return t.innerRadius}function Js(t){return t.outerRadius}function to(t){return t.startAngle}function eo(t){return t.endAngle}function no(t){return t&&t.padAngle}function ro(t,e,n,r,i,a,s,o){var c=n-t,l=r-e,h=s-i,u=o-a,d=u*c-h*l;if(!(d*d<Zs))return[t+(d=(h*(e-a)-u*(t-i))/d)*c,e+d*l]}function io(t,e,n,r,i,a,s){var o=t-n,c=e-r,l=(s?a:-a)/Rs(o*o+c*c),h=l*c,u=-l*o,d=t+h,p=e+u,f=n+h,g=r+u,y=(d+f)/2,m=(p+g)/2,b=f-d,_=g-p,x=b*b+_*_,v=i-a,k=d*g-f*p,w=(_<0?-1:1)*Rs(Is(0,v*v*x-k*k)),E=(k*_-b*w)/x,C=(-k*b-_*w)/x,T=(k*_+b*w)/x,S=(-k*b+_*w)/x,A=E-y,L=C-m,B=T-y,N=S-m;return A*A+L*L>B*B+N*N&&(E=T,C=S),{cx:E,cy:C,x01:-h,y01:-u,x11:E*(i/v-1),y11:C*(i/v-1)}}function ao(){var t=Qs,e=Js,n=Ns(0),r=null,i=to,a=eo,s=no,o=null,c=Ks(l);function l(){var l,h,u=+t.apply(this,arguments),d=+e.apply(this,arguments),p=i.apply(this,arguments)-js,f=a.apply(this,arguments)-js,g=Ds(f-p),y=f>p;if(o||(o=l=c()),d<u&&(h=d,d=u,u=h),d>Zs)if(g>Ys-Zs)o.moveTo(d*Ms(p),d*$s(p)),o.arc(0,0,d,p,f,!y),u>Zs&&(o.moveTo(u*Ms(f),u*$s(f)),o.arc(0,0,u,f,p,y));else{var m,b,_=p,x=f,v=p,k=f,w=g,E=g,C=s.apply(this,arguments)/2,T=C>Zs&&(r?+r.apply(this,arguments):Rs(u*u+d*d)),S=Fs(Ds(d-u)/2,+n.apply(this,arguments)),A=S,L=S;if(T>Zs){var B=Us(T/u*$s(C)),N=Us(T/d*$s(C));(w-=2*B)>Zs?(v+=B*=y?1:-1,k-=B):(w=0,v=k=(p+f)/2),(E-=2*N)>Zs?(_+=N*=y?1:-1,x-=N):(E=0,_=x=(p+f)/2)}var D=d*Ms(_),O=d*$s(_),M=u*Ms(k),I=u*$s(k);if(S>Zs){var F,$=d*Ms(x),R=d*$s(x),Z=u*Ms(v),P=u*$s(v);if(g<Ps)if(F=ro(D,O,Z,P,$,R,M,I)){var j=D-F[0],Y=O-F[1],z=$-F[0],U=R-F[1],W=1/$s(zs((j*z+Y*U)/(Rs(j*j+Y*Y)*Rs(z*z+U*U)))/2),q=Rs(F[0]*F[0]+F[1]*F[1]);A=Fs(S,(u-q)/(W-1)),L=Fs(S,(d-q)/(W+1))}else A=L=0}E>Zs?L>Zs?(m=io(Z,P,D,O,d,L,y),b=io($,R,M,I,d,L,y),o.moveTo(m.cx+m.x01,m.cy+m.y01),L<S?o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,d,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),!y),o.arc(b.cx,b.cy,L,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):(o.moveTo(D,O),o.arc(0,0,d,_,x,!y)):o.moveTo(D,O),u>Zs&&w>Zs?A>Zs?(m=io(M,I,$,R,u,-A,y),b=io(D,O,Z,P,u,-A,y),o.lineTo(m.cx+m.x01,m.cy+m.y01),A<S?o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,u,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),y),o.arc(b.cx,b.cy,A,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):o.arc(0,0,u,k,v,y):o.lineTo(M,I)}else o.moveTo(0,0);if(o.closePath(),l)return o=null,l+""||null}return l.centroid=function(){var n=(+t.apply(this,arguments)+ +e.apply(this,arguments))/2,r=(+i.apply(this,arguments)+ +a.apply(this,arguments))/2-Ps/2;return[Ms(r)*n,$s(r)*n]},l.innerRadius=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),l):t},l.outerRadius=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),l):e},l.cornerRadius=function(t){return arguments.length?(n="function"==typeof t?t:Ns(+t),l):n},l.padRadius=function(t){return arguments.length?(r=null==t?null:"function"==typeof t?t:Ns(+t),l):r},l.startAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),l):i},l.endAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),l):a},l.padAngle=function(t){return arguments.length?(s="function"==typeof t?t:Ns(+t),l):s},l.context=function(t){return arguments.length?(o=null==t?null:t,l):o},l}Array.prototype.slice;function so(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function oo(t){this._context=t}function co(t){return new oo(t)}function lo(t){return t[0]}function ho(t){return t[1]}function uo(t,e){var n=Ns(!0),r=null,i=co,a=null,s=Ks(o);function o(o){var c,l,h,u=(o=so(o)).length,d=!1;for(null==r&&(a=i(h=s())),c=0;c<=u;++c)!(c<u&&n(l=o[c],c,o))===d&&((d=!d)?a.lineStart():a.lineEnd()),d&&a.point(+t(l,c,o),+e(l,c,o));if(h)return a=null,h+""||null}return t="function"==typeof t?t:void 0===t?lo:Ns(t),e="function"==typeof e?e:void 0===e?ho:Ns(e),o.x=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),o):t},o.y=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),o):e},o.defined=function(t){return arguments.length?(n="function"==typeof t?t:Ns(!!t),o):n},o.curve=function(t){return arguments.length?(i=t,null!=r&&(a=i(r)),o):i},o.context=function(t){return arguments.length?(null==t?r=a=null:a=i(r=t),o):r},o}function po(t,e){return e<t?-1:e>t?1:e>=t?0:NaN}function fo(t){return t}function go(){var t=fo,e=po,n=null,r=Ns(0),i=Ns(Ys),a=Ns(0);function s(s){var o,c,l,h,u,d=(s=so(s)).length,p=0,f=new Array(d),g=new Array(d),y=+r.apply(this,arguments),m=Math.min(Ys,Math.max(-Ys,i.apply(this,arguments)-y)),b=Math.min(Math.abs(m)/d,a.apply(this,arguments)),_=b*(m<0?-1:1);for(o=0;o<d;++o)(u=g[f[o]=o]=+t(s[o],o,s))>0&&(p+=u);for(null!=e?f.sort((function(t,n){return e(g[t],g[n])})):null!=n&&f.sort((function(t,e){return n(s[t],s[e])})),o=0,l=p?(m-d*_)/p:0;o<d;++o,y=h)c=f[o],h=y+((u=g[c])>0?u*l:0)+_,g[c]={data:s[c],index:o,value:u,startAngle:y,endAngle:h,padAngle:b};return g}return s.value=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),s):t},s.sortValues=function(t){return arguments.length?(e=t,n=null,s):e},s.sort=function(t){return arguments.length?(n=t,e=null,s):n},s.startAngle=function(t){return arguments.length?(r="function"==typeof t?t:Ns(+t),s):r},s.endAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),s):i},s.padAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),s):a},s}function yo(){}function mo(t,e,n){t._context.bezierCurveTo((2*t._x0+t._x1)/3,(2*t._y0+t._y1)/3,(t._x0+2*t._x1)/3,(t._y0+2*t._y1)/3,(t._x0+4*t._x1+e)/6,(t._y0+4*t._y1+n)/6)}function bo(t){this._context=t}function _o(t){return new bo(t)}function xo(t){this._context=t}function vo(t){return new xo(t)}function ko(t){this._context=t}function wo(t){return new ko(t)}oo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._point=0},lineEnd:function(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._context.lineTo(t,e)}}},bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){switch(this._point){case 3:mo(this,this._x1,this._y1);case 2:this._context.lineTo(this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,this._context.lineTo((5*this._x0+this._x1)/6,(5*this._y0+this._y1)/6);default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},xo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._y0=this._y1=this._y2=this._y3=this._y4=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x2,this._y2),this._context.closePath();break;case 2:this._context.moveTo((this._x2+2*this._x3)/3,(this._y2+2*this._y3)/3),this._context.lineTo((this._x3+2*this._x2)/3,(this._y3+2*this._y2)/3),this._context.closePath();break;case 3:this.point(this._x2,this._y2),this.point(this._x3,this._y3),this.point(this._x4,this._y4)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x2=t,this._y2=e;break;case 1:this._point=2,this._x3=t,this._y3=e;break;case 2:this._point=3,this._x4=t,this._y4=e,this._context.moveTo((this._x0+4*this._x1+t)/6,(this._y0+4*this._y1+e)/6);break;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},ko.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3;var n=(this._x0+4*this._x1+t)/6,r=(this._y0+4*this._y1+e)/6;this._line?this._context.lineTo(n,r):this._context.moveTo(n,r);break;case 3:this._point=4;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}};class Eo{constructor(t,e){this._context=t,this._x=e}areaStart(){this._line=0}areaEnd(){this._line=NaN}lineStart(){this._point=0}lineEnd(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line}point(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._x?this._context.bezierCurveTo(this._x0=(this._x0+t)/2,this._y0,this._x0,e,t,e):this._context.bezierCurveTo(this._x0,this._y0=(this._y0+e)/2,t,this._y0,t,e)}this._x0=t,this._y0=e}}function Co(t){return new Eo(t,!0)}function To(t){return new Eo(t,!1)}function So(t,e){this._basis=new bo(t),this._beta=e}So.prototype={lineStart:function(){this._x=[],this._y=[],this._basis.lineStart()},lineEnd:function(){var t=this._x,e=this._y,n=t.length-1;if(n>0)for(var r,i=t[0],a=e[0],s=t[n]-i,o=e[n]-a,c=-1;++c<=n;)r=c/n,this._basis.point(this._beta*t[c]+(1-this._beta)*(i+r*s),this._beta*e[c]+(1-this._beta)*(a+r*o));this._x=this._y=null,this._basis.lineEnd()},point:function(t,e){this._x.push(+t),this._y.push(+e)}};const Ao=function t(e){function n(t){return 1===e?new bo(t):new So(t,e)}return n.beta=function(e){return t(+e)},n}(.85);function Lo(t,e,n){t._context.bezierCurveTo(t._x1+t._k*(t._x2-t._x0),t._y1+t._k*(t._y2-t._y0),t._x2+t._k*(t._x1-e),t._y2+t._k*(t._y1-n),t._x2,t._y2)}function Bo(t,e){this._context=t,this._k=(1-e)/6}Bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:Lo(this,this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2,this._x1=t,this._y1=e;break;case 2:this._point=3;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const No=function t(e){function n(t){return new Bo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Do(t,e){this._context=t,this._k=(1-e)/6}Do.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Oo=function t(e){function n(t){return new Do(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Mo(t,e){this._context=t,this._k=(1-e)/6}Mo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Io=function t(e){function n(t){return new Mo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Fo(t,e,n){var r=t._x1,i=t._y1,a=t._x2,s=t._y2;if(t._l01_a>Zs){var o=2*t._l01_2a+3*t._l01_a*t._l12_a+t._l12_2a,c=3*t._l01_a*(t._l01_a+t._l12_a);r=(r*o-t._x0*t._l12_2a+t._x2*t._l01_2a)/c,i=(i*o-t._y0*t._l12_2a+t._y2*t._l01_2a)/c}if(t._l23_a>Zs){var l=2*t._l23_2a+3*t._l23_a*t._l12_a+t._l12_2a,h=3*t._l23_a*(t._l23_a+t._l12_a);a=(a*l+t._x1*t._l23_2a-e*t._l12_2a)/h,s=(s*l+t._y1*t._l23_2a-n*t._l12_2a)/h}t._context.bezierCurveTo(r,i,a,s,t._x2,t._y2)}function $o(t,e){this._context=t,this._alpha=e}$o.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:this.point(this._x2,this._y2)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Ro=function t(e){function n(t){return e?new $o(t,e):new Bo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function Zo(t,e){this._context=t,this._alpha=e}Zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Po=function t(e){function n(t){return e?new Zo(t,e):new Do(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function jo(t,e){this._context=t,this._alpha=e}jo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Yo=function t(e){function n(t){return e?new jo(t,e):new Mo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function zo(t){this._context=t}function Uo(t){return new zo(t)}function Wo(t){return t<0?-1:1}function qo(t,e,n){var r=t._x1-t._x0,i=e-t._x1,a=(t._y1-t._y0)/(r||i<0&&-0),s=(n-t._y1)/(i||r<0&&-0),o=(a*i+s*r)/(r+i);return(Wo(a)+Wo(s))*Math.min(Math.abs(a),Math.abs(s),.5*Math.abs(o))||0}function Ho(t,e){var n=t._x1-t._x0;return n?(3*(t._y1-t._y0)/n-e)/2:e}function Vo(t,e,n){var r=t._x0,i=t._y0,a=t._x1,s=t._y1,o=(a-r)/3;t._context.bezierCurveTo(r+o,i+o*e,a-o,s-o*n,a,s)}function Go(t){this._context=t}function Xo(t){this._context=new Ko(t)}function Ko(t){this._context=t}function Qo(t){return new Go(t)}function Jo(t){return new Xo(t)}function tc(t){this._context=t}function ec(t){var e,n,r=t.length-1,i=new Array(r),a=new Array(r),s=new Array(r);for(i[0]=0,a[0]=2,s[0]=t[0]+2*t[1],e=1;e<r-1;++e)i[e]=1,a[e]=4,s[e]=4*t[e]+2*t[e+1];for(i[r-1]=2,a[r-1]=7,s[r-1]=8*t[r-1]+t[r],e=1;e<r;++e)n=i[e]/a[e-1],a[e]-=n,s[e]-=n*s[e-1];for(i[r-1]=s[r-1]/a[r-1],e=r-2;e>=0;--e)i[e]=(s[e]-i[e+1])/a[e];for(a[r-1]=(t[r]+i[r-1])/2,e=0;e<r-1;++e)a[e]=2*t[e+1]-i[e+1];return[i,a]}function nc(t){return new tc(t)}function rc(t,e){this._context=t,this._t=e}function ic(t){return new rc(t,.5)}function ac(t){return new rc(t,0)}function sc(t){return new rc(t,1)}function oc(t,e,n){this.k=t,this.x=e,this.y=n}zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._point=0},lineEnd:function(){this._point&&this._context.closePath()},point:function(t,e){t=+t,e=+e,this._point?this._context.lineTo(t,e):(this._point=1,this._context.moveTo(t,e))}},Go.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=this._t0=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x1,this._y1);break;case 3:Vo(this,this._t0,Ho(this,this._t0))}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){var n=NaN;if(e=+e,(t=+t)!==this._x1||e!==this._y1){switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,Vo(this,Ho(this,n=qo(this,t,e)),n);break;default:Vo(this,this._t0,n=qo(this,t,e))}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e,this._t0=n}}},(Xo.prototype=Object.create(Go.prototype)).point=function(t,e){Go.prototype.point.call(this,e,t)},Ko.prototype={moveTo:function(t,e){this._context.moveTo(e,t)},closePath:function(){this._context.closePath()},lineTo:function(t,e){this._context.lineTo(e,t)},bezierCurveTo:function(t,e,n,r,i,a){this._context.bezierCurveTo(e,t,r,n,a,i)}},tc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=[],this._y=[]},lineEnd:function(){var t=this._x,e=this._y,n=t.length;if(n)if(this._line?this._context.lineTo(t[0],e[0]):this._context.moveTo(t[0],e[0]),2===n)this._context.lineTo(t[1],e[1]);else for(var r=ec(t),i=ec(e),a=0,s=1;s<n;++a,++s)this._context.bezierCurveTo(r[0][a],i[0][a],r[1][a],i[1][a],t[s],e[s]);(this._line||0!==this._line&&1===n)&&this._context.closePath(),this._line=1-this._line,this._x=this._y=null},point:function(t,e){this._x.push(+t),this._y.push(+e)}},rc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=this._y=NaN,this._point=0},lineEnd:function(){0<this._t&&this._t<1&&2===this._point&&this._context.lineTo(this._x,this._y),(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line>=0&&(this._t=1-this._t,this._line=1-this._line)},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:if(this._t<=0)this._context.lineTo(this._x,e),this._context.lineTo(t,e);else{var n=this._x*(1-this._t)+t*this._t;this._context.lineTo(n,this._y),this._context.lineTo(n,e)}}this._x=t,this._y=e}},oc.prototype={constructor:oc,scale:function(t){return 1===t?this:new oc(this.k*t,this.x,this.y)},translate:function(t,e){return 0===t&0===e?this:new oc(this.k,this.x+this.k*t,this.y+this.k*e)},apply:function(t){return[t[0]*this.k+this.x,t[1]*this.k+this.y]},applyX:function(t){return t*this.k+this.x},applyY:function(t){return t*this.k+this.y},invert:function(t){return[(t[0]-this.x)/this.k,(t[1]-this.y)/this.k]},invertX:function(t){return(t-this.x)/this.k},invertY:function(t){return(t-this.y)/this.k},rescaleX:function(t){return t.copy().domain(t.range().map(this.invertX,this).map(t.invert,t))},rescaleY:function(t){return t.copy().domain(t.range().map(this.invertY,this).map(t.invert,t))},toString:function(){return"translate("+this.x+","+this.y+") scale("+this.k+")"}};new oc(1,0,0);oc.prototype},3352:(t,e,n)=>{"use strict";function r(t,e,n,r){var a,s,o,c,l,h,u,d,p,f,g,y,m;if(a=e.y-t.y,o=t.x-e.x,l=e.x*t.y-t.x*e.y,p=a*n.x+o*n.y+l,f=a*r.x+o*r.y+l,!(0!==p&&0!==f&&i(p,f)||(s=r.y-n.y,c=n.x-r.x,h=r.x*n.y-n.x*r.y,u=s*t.x+c*t.y+h,d=s*e.x+c*e.y+h,0!==u&&0!==d&&i(u,d)||0==(g=a*c-s*o))))return y=Math.abs(g/2),{x:(m=o*h-c*l)<0?(m-y)/g:(m+y)/g,y:(m=s*l-a*h)<0?(m-y)/g:(m+y)/g}}function i(t,e){return t*e>0}function a(t,e,n){var i=t.x,a=t.y,s=[],o=Number.POSITIVE_INFINITY,c=Number.POSITIVE_INFINITY;e.forEach((function(t){o=Math.min(o,t.x),c=Math.min(c,t.y)}));for(var l=i-t.width/2-o,h=a-t.height/2-c,u=0;u<e.length;u++){var d=e[u],p=e[u<e.length-1?u+1:0],f=r(t,n,{x:l+d.x,y:h+d.y},{x:l+p.x,y:h+p.y});f&&s.push(f)}return s.length?(s.length>1&&s.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),s[0]):(console.log("NO INTERSECTION FOUND, RETURN NODE CENTER",t),t)}n.d(e,{A:()=>a})},2930:(t,e,n)=>{"use strict";function r(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}}n.d(e,{q:()=>r})},3349:(t,e,n)=>{"use strict";n.d(e,{a:()=>i});var r=n(6225);function i(t,e){var n=t.append("foreignObject").attr("width","100000"),i=n.append("xhtml:div");i.attr("xmlns","http://www.w3.org/1999/xhtml");var a=e.label;switch(typeof a){case"function":i.insert(a);break;case"object":i.insert((function(){return a}));break;default:i.html(a)}r.bg(i,e.labelStyle),i.style("display","inline-block"),i.style("white-space","nowrap");var s=i.node().getBoundingClientRect();return n.attr("width",s.width).attr("height",s.height),n}},6225:(t,e,n)=>{"use strict";n.d(e,{$p:()=>h,O1:()=>s,WR:()=>u,bF:()=>a,bg:()=>l});var r=n(7514),i=n(3234);function a(t,e){return!!t.children(e).length}function s(t){return c(t.v)+":"+c(t.w)+":"+c(t.name)}var o=/:/g;function c(t){return t?String(t).replace(o,"\\:"):""}function l(t,e){e&&t.attr("style",e)}function h(t,e,n){e&&t.attr("class",e).attr("class",n+" "+t.attr("class"))}function u(t,e){var n=e.graph();if(r.Z(n)){var a=n.transition;if(i.Z(a))return a(t)}return t}},277:(t,e,n)=>{"use strict";n.d(e,{bK:()=>Ve});var r=n(870),i=n(6749),a=n(7452),s=n(2002),o=n(7961),c=n(3836),l=n(4379),h=n(5625);class u{constructor(){var t={};t._next=t._prev=t,this._sentinel=t}dequeue(){var t=this._sentinel,e=t._prev;if(e!==t)return d(e),e}enqueue(t){var e=this._sentinel;t._prev&&t._next&&d(t),t._next=e._next,e._next._prev=t,e._next=t,t._prev=e}toString(){for(var t=[],e=this._sentinel,n=e._prev;n!==e;)t.push(JSON.stringify(n,p)),n=n._prev;return"["+t.join(", ")+"]"}}function d(t){t._prev._next=t._next,t._next._prev=t._prev,delete t._next,delete t._prev}function p(t,e){if("_next"!==t&&"_prev"!==t)return e}var f=s.Z(1);function g(t,e){if(t.nodeCount()<=1)return[];var n=function(t,e){var n=new h.k,i=0,a=0;r.Z(t.nodes(),(function(t){n.setNode(t,{v:t,in:0,out:0})})),r.Z(t.edges(),(function(t){var r=n.edge(t.v,t.w)||0,s=e(t),o=r+s;n.setEdge(t.v,t.w,o),a=Math.max(a,n.node(t.v).out+=s),i=Math.max(i,n.node(t.w).in+=s)}));var s=l.Z(a+i+3).map((function(){return new u})),o=i+1;return r.Z(n.nodes(),(function(t){m(s,o,n.node(t))})),{graph:n,buckets:s,zeroIdx:o}}(t,e||f),i=function(t,e,n){var r,i=[],a=e[e.length-1],s=e[0];for(;t.nodeCount();){for(;r=s.dequeue();)y(t,e,n,r);for(;r=a.dequeue();)y(t,e,n,r);if(t.nodeCount())for(var o=e.length-2;o>0;--o)if(r=e[o].dequeue()){i=i.concat(y(t,e,n,r,!0));break}}return i}(n.graph,n.buckets,n.zeroIdx);return o.Z(c.Z(i,(function(e){return t.outEdges(e.v,e.w)})))}function y(t,e,n,i,a){var s=a?[]:void 0;return r.Z(t.inEdges(i.v),(function(r){var i=t.edge(r),o=t.node(r.v);a&&s.push({v:r.v,w:r.w}),o.out-=i,m(e,n,o)})),r.Z(t.outEdges(i.v),(function(r){var i=t.edge(r),a=r.w,s=t.node(a);s.in-=i,m(e,n,s)})),t.removeNode(i.v),s}function m(t,e,n){n.out?n.in?t[n.out-n.in+e].enqueue(n):t[t.length-1].enqueue(n):t[0].enqueue(n)}function b(t){var e="greedy"===t.graph().acyclicer?g(t,function(t){return function(e){return t.edge(e).weight}}(t)):function(t){var e=[],n={},i={};function s(o){a.Z(i,o)||(i[o]=!0,n[o]=!0,r.Z(t.outEdges(o),(function(t){a.Z(n,t.w)?e.push(t):s(t.w)})),delete n[o])}return r.Z(t.nodes(),s),e}(t);r.Z(e,(function(e){var n=t.edge(e);t.removeEdge(e),n.forwardName=e.name,n.reversed=!0,t.setEdge(e.w,e.v,n,i.Z("rev"))}))}var _=n(1667),x=n(4752),v=n(9651);const k=function(t,e,n){(void 0!==n&&!(0,v.Z)(t[e],n)||void 0===n&&!(e in t))&&(0,x.Z)(t,e,n)};var w=n(1395),E=n(1050),C=n(2701),T=n(7215),S=n(3658),A=n(9169),L=n(7771),B=n(836),N=n(7008),D=n(3234),O=n(7226),M=n(7514),I=n(8843);const F=function(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]};var $=n(1899),R=n(2957);const Z=function(t){return(0,$.Z)(t,(0,R.Z)(t))};const P=function(t,e,n,r,i,a,s){var o=F(t,n),c=F(e,n),l=s.get(c);if(l)k(t,n,l);else{var h=a?a(o,c,n+"",t,e,s):void 0,u=void 0===h;if(u){var d=(0,L.Z)(c),p=!d&&(0,N.Z)(c),f=!d&&!p&&(0,I.Z)(c);h=c,d||p||f?(0,L.Z)(o)?h=o:(0,B.Z)(o)?h=(0,T.Z)(o):p?(u=!1,h=(0,E.Z)(c,!0)):f?(u=!1,h=(0,C.Z)(c,!0)):h=[]:(0,M.Z)(c)||(0,A.Z)(c)?(h=o,(0,A.Z)(o)?h=Z(o):(0,O.Z)(o)&&!(0,D.Z)(o)||(h=(0,S.Z)(c))):u=!1}u&&(s.set(c,h),i(h,c,r,a,s),s.delete(c)),k(t,n,h)}};const j=function t(e,n,r,i,a){e!==n&&(0,w.Z)(n,(function(s,o){if(a||(a=new _.Z),(0,O.Z)(s))P(e,n,o,r,t,i,a);else{var c=i?i(F(e,o),s,o+"",e,n,a):void 0;void 0===c&&(c=s),k(e,o,c)}}),R.Z)};var Y=n(9581),z=n(439);const U=function(t){return(0,Y.Z)((function(e,n){var r=-1,i=n.length,a=i>1?n[i-1]:void 0,s=i>2?n[2]:void 0;for(a=t.length>3&&"function"==typeof a?(i--,a):void 0,s&&(0,z.Z)(n[0],n[1],s)&&(a=i<3?void 0:a,i=1),e=Object(e);++r<i;){var o=n[r];o&&t(e,o,r,a)}return e}))}((function(t,e,n){j(t,e,n)}));var W=n(1666),q=n(3688),H=n(2714);const V=function(t,e,n){for(var r=-1,i=t.length;++r<i;){var a=t[r],s=e(a);if(null!=s&&(void 0===o?s==s&&!(0,H.Z)(s):n(s,o)))var o=s,c=a}return c};const G=function(t,e){return t>e};var X=n(9203);const K=function(t){return t&&t.length?V(t,X.Z,G):void 0};const Q=function(t){var e=null==t?0:t.length;return e?t[e-1]:void 0};var J=n(2693),tt=n(4765);const et=function(t,e){var n={};return e=(0,tt.Z)(e,3),(0,J.Z)(t,(function(t,r,i){(0,x.Z)(n,r,e(t,r,i))})),n};var nt=n(9360);const rt=function(t,e){return t<e};const it=function(t){return t&&t.length?V(t,X.Z,rt):void 0};var at=n(6092);const st=function(){return at.Z.Date.now()};function ot(t,e,n,r){var a;do{a=i.Z(r)}while(t.hasNode(a));return n.dummy=e,t.setNode(a,n),a}function ct(t){var e=new h.k({multigraph:t.isMultigraph()}).setGraph(t.graph());return r.Z(t.nodes(),(function(n){t.children(n).length||e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){e.setEdge(n,t.edge(n))})),e}function lt(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;if(!s&&!o)throw new Error("Not possible to find intersection inside of the rectangle");return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=l*s/o,r=l):(s<0&&(c=-c),n=c,r=c*o/s),{x:i+n,y:a+r}}function ht(t){var e=c.Z(l.Z(dt(t)+1),(function(){return[]}));return r.Z(t.nodes(),(function(n){var r=t.node(n),i=r.rank;nt.Z(i)||(e[i][r.order]=n)})),e}function ut(t,e,n,r){var i={width:0,height:0};return arguments.length>=4&&(i.rank=n,i.order=r),ot(t,"border",i,e)}function dt(t){return K(c.Z(t.nodes(),(function(e){var n=t.node(e).rank;if(!nt.Z(n))return n})))}function pt(t,e){var n=st();try{return e()}finally{console.log(t+" time: "+(st()-n)+"ms")}}function ft(t,e){return e()}function gt(t,e,n,r,i,a){var s={width:0,height:0,rank:a,borderType:e},o=i[e][a-1],c=ot(t,"border",s,n);i[e][a]=c,t.setParent(c,r),o&&t.setEdge(o,c,{weight:1})}function yt(t){var e=t.graph().rankdir.toLowerCase();"bt"!==e&&"rl"!==e||function(t){r.Z(t.nodes(),(function(e){_t(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,_t),a.Z(n,"y")&&_t(n)}))}(t),"lr"!==e&&"rl"!==e||(!function(t){r.Z(t.nodes(),(function(e){xt(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,xt),a.Z(n,"x")&&xt(n)}))}(t),mt(t))}function mt(t){r.Z(t.nodes(),(function(e){bt(t.node(e))})),r.Z(t.edges(),(function(e){bt(t.edge(e))}))}function bt(t){var e=t.width;t.width=t.height,t.height=e}function _t(t){t.y=-t.y}function xt(t){var e=t.x;t.x=t.y,t.y=e}function vt(t){t.graph().dummyChains=[],r.Z(t.edges(),(function(e){!function(t,e){var n,r,i,a=e.v,s=t.node(a).rank,o=e.w,c=t.node(o).rank,l=e.name,h=t.edge(e),u=h.labelRank;if(c===s+1)return;for(t.removeEdge(e),i=0,++s;s<c;++i,++s)h.points=[],n=ot(t,"edge",r={width:0,height:0,edgeLabel:h,edgeObj:e,rank:s},"_d"),s===u&&(r.width=h.width,r.height=h.height,r.dummy="edge-label",r.labelpos=h.labelpos),t.setEdge(a,n,{weight:h.weight},l),0===i&&t.graph().dummyChains.push(n),a=n;t.setEdge(a,o,{weight:h.weight},l)}(t,e)}))}const kt=function(t,e){return t&&t.length?V(t,(0,tt.Z)(e,2),rt):void 0};function wt(t){var e={};r.Z(t.sources(),(function n(r){var i=t.node(r);if(a.Z(e,r))return i.rank;e[r]=!0;var s=it(c.Z(t.outEdges(r),(function(e){return n(e.w)-t.edge(e).minlen})));return s!==Number.POSITIVE_INFINITY&&null!=s||(s=0),i.rank=s}))}function Et(t,e){return t.node(e.w).rank-t.node(e.v).rank-t.edge(e).minlen}function Ct(t){var e,n,r=new h.k({directed:!1}),i=t.nodes()[0],a=t.nodeCount();for(r.setNode(i,{});Tt(r,t)<a;)e=St(r,t),n=r.hasNode(e.v)?Et(t,e):-Et(t,e),At(r,t,n);return r}function Tt(t,e){return r.Z(t.nodes(),(function n(i){r.Z(e.nodeEdges(i),(function(r){var a=r.v,s=i===a?r.w:a;t.hasNode(s)||Et(e,r)||(t.setNode(s,{}),t.setEdge(i,s,{}),n(s))}))})),t.nodeCount()}function St(t,e){return kt(e.edges(),(function(n){if(t.hasNode(n.v)!==t.hasNode(n.w))return Et(e,n)}))}function At(t,e,n){r.Z(t.nodes(),(function(t){e.node(t).rank+=n}))}var Lt=n(585),Bt=n(7179);const Nt=function(t){return function(e,n,r){var i=Object(e);if(!(0,Lt.Z)(e)){var a=(0,tt.Z)(n,3);e=(0,Bt.Z)(e),n=function(t){return a(i[t],t,i)}}var s=t(e,n,r);return s>-1?i[a?e[s]:s]:void 0}};var Dt=n(1692),Ot=n(4099);const Mt=function(t){var e=(0,Ot.Z)(t),n=e%1;return e==e?n?e-n:e:0};var It=Math.max;const Ft=Nt((function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var i=null==n?0:Mt(n);return i<0&&(i=It(r+i,0)),(0,Dt.Z)(t,(0,tt.Z)(e,3),i)}));var $t=n(3445);s.Z(1);s.Z(1);n(9473),n(3970),n(3589),n(8533);(0,n(4193).Z)("length");RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");var Rt="[\\ud800-\\udfff]",Zt="[\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff]",Pt="\\ud83c[\\udffb-\\udfff]",jt="[^\\ud800-\\udfff]",Yt="(?:\\ud83c[\\udde6-\\uddff]){2}",zt="[\\ud800-\\udbff][\\udc00-\\udfff]",Ut="(?:"+Zt+"|"+Pt+")"+"?",Wt="[\\ufe0e\\ufe0f]?",qt=Wt+Ut+("(?:\\u200d(?:"+[jt,Yt,zt].join("|")+")"+Wt+Ut+")*"),Ht="(?:"+[jt+Zt+"?",Zt,Yt,zt,Rt].join("|")+")";RegExp(Pt+"(?="+Pt+")|"+Ht+qt,"g");function Vt(){}function Gt(t,e,n){L.Z(e)||(e=[e]);var i=(t.isDirected()?t.successors:t.neighbors).bind(t),a=[],s={};return r.Z(e,(function(e){if(!t.hasNode(e))throw new Error("Graph does not have node: "+e);Xt(t,e,"post"===n,s,i,a)})),a}function Xt(t,e,n,i,s,o){a.Z(i,e)||(i[e]=!0,n||o.push(e),r.Z(s(e),(function(e){Xt(t,e,n,i,s,o)})),n&&o.push(e))}Vt.prototype=new Error;n(2544);function Kt(t){t=function(t){var e=(new h.k).setGraph(t.graph());return r.Z(t.nodes(),(function(n){e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){var r=e.edge(n.v,n.w)||{weight:0,minlen:1},i=t.edge(n);e.setEdge(n.v,n.w,{weight:r.weight+i.weight,minlen:Math.max(r.minlen,i.minlen)})})),e}(t),wt(t);var e,n=Ct(t);for(te(n),Qt(n,t);e=ne(n);)ie(n,t,e,re(n,t,e))}function Qt(t,e){var n=function(t,e){return Gt(t,e,"post")}(t,t.nodes());n=n.slice(0,n.length-1),r.Z(n,(function(n){!function(t,e,n){var r=t.node(n).parent;t.edge(n,r).cutvalue=Jt(t,e,n)}(t,e,n)}))}function Jt(t,e,n){var i=t.node(n).parent,a=!0,s=e.edge(n,i),o=0;return s||(a=!1,s=e.edge(i,n)),o=s.weight,r.Z(e.nodeEdges(n),(function(r){var s,c,l=r.v===n,h=l?r.w:r.v;if(h!==i){var u=l===a,d=e.edge(r).weight;if(o+=u?d:-d,s=n,c=h,t.hasEdge(s,c)){var p=t.edge(n,h).cutvalue;o+=u?-p:p}}})),o}function te(t,e){arguments.length<2&&(e=t.nodes()[0]),ee(t,{},1,e)}function ee(t,e,n,i,s){var o=n,c=t.node(i);return e[i]=!0,r.Z(t.neighbors(i),(function(r){a.Z(e,r)||(n=ee(t,e,n,r,i))})),c.low=o,c.lim=n++,s?c.parent=s:delete c.parent,n}function ne(t){return Ft(t.edges(),(function(e){return t.edge(e).cutvalue<0}))}function re(t,e,n){var r=n.v,i=n.w;e.hasEdge(r,i)||(r=n.w,i=n.v);var a=t.node(r),s=t.node(i),o=a,c=!1;a.lim>s.lim&&(o=s,c=!0);var l=$t.Z(e.edges(),(function(e){return c===ae(t,t.node(e.v),o)&&c!==ae(t,t.node(e.w),o)}));return kt(l,(function(t){return Et(e,t)}))}function ie(t,e,n,i){var a=n.v,s=n.w;t.removeEdge(a,s),t.setEdge(i.v,i.w,{}),te(t),Qt(t,e),function(t,e){var n=Ft(t.nodes(),(function(t){return!e.node(t).parent})),i=function(t,e){return Gt(t,e,"pre")}(t,n);i=i.slice(1),r.Z(i,(function(n){var r=t.node(n).parent,i=e.edge(n,r),a=!1;i||(i=e.edge(r,n),a=!0),e.node(n).rank=e.node(r).rank+(a?i.minlen:-i.minlen)}))}(t,e)}function ae(t,e,n){return n.low<=e.lim&&e.lim<=n.lim}function se(t){switch(t.graph().ranker){case"network-simplex":default:ce(t);break;case"tight-tree":!function(t){wt(t),Ct(t)}(t);break;case"longest-path":oe(t)}}Kt.initLowLimValues=te,Kt.initCutValues=Qt,Kt.calcCutValue=Jt,Kt.leaveEdge=ne,Kt.enterEdge=re,Kt.exchangeEdges=ie;var oe=wt;function ce(t){Kt(t)}var le=n(4148),he=n(2344);function ue(t){var e=ot(t,"root",{},"_root"),n=function(t){var e={};function n(i,a){var s=t.children(i);s&&s.length&&r.Z(s,(function(t){n(t,a+1)})),e[i]=a}return r.Z(t.children(),(function(t){n(t,1)})),e}(t),i=K(le.Z(n))-1,a=2*i+1;t.graph().nestingRoot=e,r.Z(t.edges(),(function(e){t.edge(e).minlen*=a}));var s=function(t){return he.Z(t.edges(),(function(e,n){return e+t.edge(n).weight}),0)}(t)+1;r.Z(t.children(),(function(r){de(t,e,a,s,i,n,r)})),t.graph().nodeRankFactor=a}function de(t,e,n,i,a,s,o){var c=t.children(o);if(c.length){var l=ut(t,"_bt"),h=ut(t,"_bb"),u=t.node(o);t.setParent(l,o),u.borderTop=l,t.setParent(h,o),u.borderBottom=h,r.Z(c,(function(r){de(t,e,n,i,a,s,r);var c=t.node(r),u=c.borderTop?c.borderTop:r,d=c.borderBottom?c.borderBottom:r,p=c.borderTop?i:2*i,f=u!==d?1:a-s[o]+1;t.setEdge(l,u,{weight:p,minlen:f,nestingEdge:!0}),t.setEdge(d,h,{weight:p,minlen:f,nestingEdge:!0})})),t.parent(o)||t.setEdge(e,l,{weight:0,minlen:a+s[o]})}else o!==e&&t.setEdge(e,o,{weight:0,minlen:n})}var pe=n(8451);const fe=function(t){return(0,pe.Z)(t,5)};function ge(t,e,n){var s=function(t){var e;for(;t.hasNode(e=i.Z("_root")););return e}(t),o=new h.k({compound:!0}).setGraph({root:s}).setDefaultNodeLabel((function(e){return t.node(e)}));return r.Z(t.nodes(),(function(i){var c=t.node(i),l=t.parent(i);(c.rank===e||c.minRank<=e&&e<=c.maxRank)&&(o.setNode(i),o.setParent(i,l||s),r.Z(t[n](i),(function(e){var n=e.v===i?e.w:e.v,r=o.edge(n,i),a=nt.Z(r)?0:r.weight;o.setEdge(n,i,{weight:t.edge(e).weight+a})})),a.Z(c,"minRank")&&o.setNode(i,{borderLeft:c.borderLeft[e],borderRight:c.borderRight[e]}))})),o}var ye=n(2954);const me=function(t,e,n){for(var r=-1,i=t.length,a=e.length,s={};++r<i;){var o=r<a?e[r]:void 0;n(s,t[r],o)}return s};const be=function(t,e){return me(t||[],e||[],ye.Z)};var _e=n(626),xe=n(4073),ve=n(3317),ke=n(1018);const we=function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t};var Ee=n(1162);const Ce=function(t,e){if(t!==e){var n=void 0!==t,r=null===t,i=t==t,a=(0,H.Z)(t),s=void 0!==e,o=null===e,c=e==e,l=(0,H.Z)(e);if(!o&&!l&&!a&&t>e||a&&s&&c&&!o&&!l||r&&s&&c||!n&&c||!i)return 1;if(!r&&!a&&!l&&t<e||l&&n&&i&&!r&&!a||o&&n&&i||!s&&i||!c)return-1}return 0};const Te=function(t,e,n){for(var r=-1,i=t.criteria,a=e.criteria,s=i.length,o=n.length;++r<s;){var c=Ce(i[r],a[r]);if(c)return r>=o?c:c*("desc"==n[r]?-1:1)}return t.index-e.index};const Se=function(t,e,n){e=e.length?(0,xe.Z)(e,(function(t){return(0,L.Z)(t)?function(e){return(0,ve.Z)(e,1===t.length?t[0]:t)}:t})):[X.Z];var r=-1;e=(0,xe.Z)(e,(0,Ee.Z)(tt.Z));var i=(0,ke.Z)(t,(function(t,n,i){return{criteria:(0,xe.Z)(e,(function(e){return e(t)})),index:++r,value:t}}));return we(i,(function(t,e){return Te(t,e,n)}))};const Ae=(0,Y.Z)((function(t,e){if(null==t)return[];var n=e.length;return n>1&&(0,z.Z)(t,e[0],e[1])?e=[]:n>2&&(0,z.Z)(e[0],e[1],e[2])&&(e=[e[0]]),Se(t,(0,_e.Z)(e,1),[])}));function Le(t,e){for(var n=0,r=1;r<e.length;++r)n+=Be(t,e[r-1],e[r]);return n}function Be(t,e,n){for(var i=be(n,c.Z(n,(function(t,e){return e}))),a=o.Z(c.Z(e,(function(e){return Ae(c.Z(t.outEdges(e),(function(e){return{pos:i[e.w],weight:t.edge(e).weight}})),"pos")}))),s=1;s<n.length;)s<<=1;var l=2*s-1;s-=1;var h=c.Z(new Array(l),(function(){return 0})),u=0;return r.Z(a.forEach((function(t){var e=t.pos+s;h[e]+=t.weight;for(var n=0;e>0;)e%2&&(n+=h[e+1]),h[e=e-1>>1]+=t.weight;u+=t.weight*n}))),u}function Ne(t,e){var n={};return r.Z(t,(function(t,e){var r=n[t.v]={indegree:0,in:[],out:[],vs:[t.v],i:e};nt.Z(t.barycenter)||(r.barycenter=t.barycenter,r.weight=t.weight)})),r.Z(e.edges(),(function(t){var e=n[t.v],r=n[t.w];nt.Z(e)||nt.Z(r)||(r.indegree++,e.out.push(n[t.w]))})),function(t){var e=[];function n(t){return function(e){e.merged||(nt.Z(e.barycenter)||nt.Z(t.barycenter)||e.barycenter>=t.barycenter)&&function(t,e){var n=0,r=0;t.weight&&(n+=t.barycenter*t.weight,r+=t.weight);e.weight&&(n+=e.barycenter*e.weight,r+=e.weight);t.vs=e.vs.concat(t.vs),t.barycenter=n/r,t.weight=r,t.i=Math.min(e.i,t.i),e.merged=!0}(t,e)}}function i(e){return function(n){n.in.push(e),0==--n.indegree&&t.push(n)}}for(;t.length;){var a=t.pop();e.push(a),r.Z(a.in.reverse(),n(a)),r.Z(a.out,i(a))}return c.Z($t.Z(e,(function(t){return!t.merged})),(function(t){return W.Z(t,["vs","i","barycenter","weight"])}))}($t.Z(n,(function(t){return!t.indegree})))}function De(t,e){var n,i=function(t,e){var n={lhs:[],rhs:[]};return r.Z(t,(function(t){e(t)?n.lhs.push(t):n.rhs.push(t)})),n}(t,(function(t){return a.Z(t,"barycenter")})),s=i.lhs,c=Ae(i.rhs,(function(t){return-t.i})),l=[],h=0,u=0,d=0;s.sort((n=!!e,function(t,e){return t.barycenter<e.barycenter?-1:t.barycenter>e.barycenter?1:n?e.i-t.i:t.i-e.i})),d=Oe(l,c,d),r.Z(s,(function(t){d+=t.vs.length,l.push(t.vs),h+=t.barycenter*t.weight,u+=t.weight,d=Oe(l,c,d)}));var p={vs:o.Z(l)};return u&&(p.barycenter=h/u,p.weight=u),p}function Oe(t,e,n){for(var r;e.length&&(r=Q(e)).i<=n;)e.pop(),t.push(r.vs),n++;return n}function Me(t,e,n,i){var s=t.children(e),l=t.node(e),h=l?l.borderLeft:void 0,u=l?l.borderRight:void 0,d={};h&&(s=$t.Z(s,(function(t){return t!==h&&t!==u})));var p=function(t,e){return c.Z(e,(function(e){var n=t.inEdges(e);if(n.length){var r=he.Z(n,(function(e,n){var r=t.edge(n),i=t.node(n.v);return{sum:e.sum+r.weight*i.order,weight:e.weight+r.weight}}),{sum:0,weight:0});return{v:e,barycenter:r.sum/r.weight,weight:r.weight}}return{v:e}}))}(t,s);r.Z(p,(function(e){if(t.children(e.v).length){var r=Me(t,e.v,n,i);d[e.v]=r,a.Z(r,"barycenter")&&(s=e,o=r,nt.Z(s.barycenter)?(s.barycenter=o.barycenter,s.weight=o.weight):(s.barycenter=(s.barycenter*s.weight+o.barycenter*o.weight)/(s.weight+o.weight),s.weight+=o.weight))}var s,o}));var f=Ne(p,n);!function(t,e){r.Z(t,(function(t){t.vs=o.Z(t.vs.map((function(t){return e[t]?e[t].vs:t})))}))}(f,d);var g=De(f,i);if(h&&(g.vs=o.Z([h,g.vs,u]),t.predecessors(h).length)){var y=t.node(t.predecessors(h)[0]),m=t.node(t.predecessors(u)[0]);a.Z(g,"barycenter")||(g.barycenter=0,g.weight=0),g.barycenter=(g.barycenter*g.weight+y.order+m.order)/(g.weight+2),g.weight+=2}return g}function Ie(t){var e=dt(t),n=Fe(t,l.Z(1,e+1),"inEdges"),i=Fe(t,l.Z(e-1,-1,-1),"outEdges"),s=function(t){var e={},n=$t.Z(t.nodes(),(function(e){return!t.children(e).length})),i=K(c.Z(n,(function(e){return t.node(e).rank}))),s=c.Z(l.Z(i+1),(function(){return[]})),o=Ae(n,(function(e){return t.node(e).rank}));return r.Z(o,(function n(i){if(!a.Z(e,i)){e[i]=!0;var o=t.node(i);s[o.rank].push(i),r.Z(t.successors(i),n)}})),s}(t);Re(t,s);for(var o,h=Number.POSITIVE_INFINITY,u=0,d=0;d<4;++u,++d){$e(u%2?n:i,u%4>=2);var p=Le(t,s=ht(t));p<h&&(d=0,o=fe(s),h=p)}Re(t,o)}function Fe(t,e,n){return c.Z(e,(function(e){return ge(t,e,n)}))}function $e(t,e){var n=new h.k;r.Z(t,(function(t){var i=t.graph().root,a=Me(t,i,n,e);r.Z(a.vs,(function(e,n){t.node(e).order=n})),function(t,e,n){var i,a={};r.Z(n,(function(n){for(var r,s,o=t.parent(n);o;){if((r=t.parent(o))?(s=a[r],a[r]=o):(s=i,i=o),s&&s!==o)return void e.setEdge(s,o);o=r}}))}(t,n,a.vs)}))}function Re(t,e){r.Z(e,(function(e){r.Z(e,(function(e,n){t.node(e).order=n}))}))}function Ze(t){var e=function(t){var e={},n=0;function i(a){var s=n;r.Z(t.children(a),i),e[a]={low:s,lim:n++}}return r.Z(t.children(),i),e}(t);r.Z(t.graph().dummyChains,(function(n){for(var r=t.node(n),i=r.edgeObj,a=function(t,e,n,r){var i,a,s=[],o=[],c=Math.min(e[n].low,e[r].low),l=Math.max(e[n].lim,e[r].lim);i=n;do{i=t.parent(i),s.push(i)}while(i&&(e[i].low>c||l>e[i].lim));a=i,i=r;for(;(i=t.parent(i))!==a;)o.push(i);return{path:s.concat(o.reverse()),lca:a}}(t,e,i.v,i.w),s=a.path,o=a.lca,c=0,l=s[c],h=!0;n!==i.w;){if(r=t.node(n),h){for(;(l=s[c])!==o&&t.node(l).maxRank<r.rank;)c++;l===o&&(h=!1)}if(!h){for(;c<s.length-1&&t.node(l=s[c+1]).minRank<=r.rank;)c++;l=s[c]}t.setParent(n,l),n=t.successors(n)[0]}}))}var Pe=n(8882);const je=function(t,e){return null==t?t:(0,w.Z)(t,(0,Pe.Z)(e),R.Z)};function Ye(t,e){var n={};return he.Z(e,(function(e,i){var a=0,s=0,o=e.length,c=Q(i);return r.Z(i,(function(e,l){var h=function(t,e){if(t.node(e).dummy)return Ft(t.predecessors(e),(function(e){return t.node(e).dummy}))}(t,e),u=h?t.node(h).order:o;(h||e===c)&&(r.Z(i.slice(s,l+1),(function(e){r.Z(t.predecessors(e),(function(r){var i=t.node(r),s=i.order;!(s<a||u<s)||i.dummy&&t.node(e).dummy||ze(n,r,e)}))})),s=l+1,a=u)})),i})),n}function ze(t,e,n){if(e>n){var r=e;e=n,n=r}var i=t[e];i||(t[e]=i={}),i[n]=!0}function Ue(t,e,n){if(e>n){var r=e;e=n,n=r}return a.Z(t[e],n)}function We(t,e,n,i,s){var o={},c=function(t,e,n,i){var s=new h.k,o=t.graph(),c=function(t,e,n){return function(r,i,s){var o,c=r.node(i),l=r.node(s),h=0;if(h+=c.width/2,a.Z(c,"labelpos"))switch(c.labelpos.toLowerCase()){case"l":o=-c.width/2;break;case"r":o=c.width/2}if(o&&(h+=n?o:-o),o=0,h+=(c.dummy?e:t)/2,h+=(l.dummy?e:t)/2,h+=l.width/2,a.Z(l,"labelpos"))switch(l.labelpos.toLowerCase()){case"l":o=l.width/2;break;case"r":o=-l.width/2}return o&&(h+=n?o:-o),o=0,h}}(o.nodesep,o.edgesep,i);return r.Z(e,(function(e){var i;r.Z(e,(function(e){var r=n[e];if(s.setNode(r),i){var a=n[i],o=s.edge(a,r);s.setEdge(a,r,Math.max(c(t,e,i),o||0))}i=e}))})),s}(t,e,n,s),l=s?"borderLeft":"borderRight";function u(t,e){for(var n=c.nodes(),r=n.pop(),i={};r;)i[r]?t(r):(i[r]=!0,n.push(r),n=n.concat(e(r))),r=n.pop()}return u((function(t){o[t]=c.inEdges(t).reduce((function(t,e){return Math.max(t,o[e.v]+c.edge(e))}),0)}),c.predecessors.bind(c)),u((function(e){var n=c.outEdges(e).reduce((function(t,e){return Math.min(t,o[e.w]-c.edge(e))}),Number.POSITIVE_INFINITY),r=t.node(e);n!==Number.POSITIVE_INFINITY&&r.borderType!==l&&(o[e]=Math.max(o[e],n))}),c.successors.bind(c)),r.Z(i,(function(t){o[t]=o[n[t]]})),o}function qe(t){var e,n=ht(t),i=U(Ye(t,n),function(t,e){var n={};function i(e,i,a,s,o){var c;r.Z(l.Z(i,a),(function(i){c=e[i],t.node(c).dummy&&r.Z(t.predecessors(c),(function(e){var r=t.node(e);r.dummy&&(r.order<s||r.order>o)&&ze(n,e,c)}))}))}return he.Z(e,(function(e,n){var a,s=-1,o=0;return r.Z(n,(function(r,c){if("border"===t.node(r).dummy){var l=t.predecessors(r);l.length&&(a=t.node(l[0]).order,i(n,o,c,s,a),o=c,s=a)}i(n,o,n.length,a,e.length)})),n})),n}(t,n)),a={};r.Z(["u","d"],(function(s){e="u"===s?n:le.Z(n).reverse(),r.Z(["l","r"],(function(n){"r"===n&&(e=c.Z(e,(function(t){return le.Z(t).reverse()})));var o=("u"===s?t.predecessors:t.successors).bind(t),l=function(t,e,n,i){var a={},s={},o={};return r.Z(e,(function(t){r.Z(t,(function(t,e){a[t]=t,s[t]=t,o[t]=e}))})),r.Z(e,(function(t){var e=-1;r.Z(t,(function(t){var r=i(t);if(r.length){r=Ae(r,(function(t){return o[t]}));for(var c=(r.length-1)/2,l=Math.floor(c),h=Math.ceil(c);l<=h;++l){var u=r[l];s[t]===t&&e<o[u]&&!Ue(n,t,u)&&(s[u]=t,s[t]=a[t]=a[u],e=o[u])}}}))})),{root:a,align:s}}(0,e,i,o),h=We(t,e,l.root,l.align,"r"===n);"r"===n&&(h=et(h,(function(t){return-t}))),a[s+n]=h}))}));var s=function(t,e){return kt(le.Z(e),(function(e){var n=Number.NEGATIVE_INFINITY,r=Number.POSITIVE_INFINITY;return je(e,(function(e,i){var a=function(t,e){return t.node(e).width}(t,i)/2;n=Math.max(e+a,n),r=Math.min(e-a,r)})),n-r}))}(t,a);return function(t,e){var n=le.Z(e),i=it(n),a=K(n);r.Z(["u","d"],(function(n){r.Z(["l","r"],(function(r){var s,o=n+r,c=t[o];if(c!==e){var l=le.Z(c);(s="l"===r?i-it(l):a-K(l))&&(t[o]=et(c,(function(t){return t+s})))}}))}))}(a,s),function(t,e){return et(t.ul,(function(n,r){if(e)return t[e.toLowerCase()][r];var i=Ae(c.Z(t,r));return(i[1]+i[2])/2}))}(a,t.graph().align)}function He(t){(function(t){var e=ht(t),n=t.graph().ranksep,i=0;r.Z(e,(function(e){var a=K(c.Z(e,(function(e){return t.node(e).height})));r.Z(e,(function(e){t.node(e).y=i+a/2})),i+=a+n}))})(t=ct(t)),r.Z(qe(t),(function(e,n){t.node(n).x=e}))}function Ve(t,e){var n=e&&e.debugTiming?pt:ft;n("layout",(function(){var e=n("  buildLayoutGraph",(function(){return function(t){var e=new h.k({multigraph:!0,compound:!0}),n=an(t.graph());return e.setGraph(U({},Xe,rn(n,Ge),W.Z(n,Ke))),r.Z(t.nodes(),(function(n){var r=an(t.node(n));e.setNode(n,q.Z(rn(r,Qe),Je)),e.setParent(n,t.parent(n))})),r.Z(t.edges(),(function(n){var r=an(t.edge(n));e.setEdge(n,U({},en,rn(r,tn),W.Z(r,nn)))})),e}(t)}));n("  runLayout",(function(){!function(t,e){e("    makeSpaceForEdgeLabels",(function(){!function(t){var e=t.graph();e.ranksep/=2,r.Z(t.edges(),(function(n){var r=t.edge(n);r.minlen*=2,"c"!==r.labelpos.toLowerCase()&&("TB"===e.rankdir||"BT"===e.rankdir?r.width+=r.labeloffset:r.height+=r.labeloffset)}))}(t)})),e("    removeSelfEdges",(function(){!function(t){r.Z(t.edges(),(function(e){if(e.v===e.w){var n=t.node(e.v);n.selfEdges||(n.selfEdges=[]),n.selfEdges.push({e:e,label:t.edge(e)}),t.removeEdge(e)}}))}(t)})),e("    acyclic",(function(){b(t)})),e("    nestingGraph.run",(function(){ue(t)})),e("    rank",(function(){se(ct(t))})),e("    injectEdgeLabelProxies",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.width&&n.height){var r=t.node(e.v),i={rank:(t.node(e.w).rank-r.rank)/2+r.rank,e:e};ot(t,"edge-proxy",i,"_ep")}}))}(t)})),e("    removeEmptyRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank}))),n=[];r.Z(t.nodes(),(function(r){var i=t.node(r).rank-e;n[i]||(n[i]=[]),n[i].push(r)}));var i=0,a=t.graph().nodeRankFactor;r.Z(n,(function(e,n){nt.Z(e)&&n%a!=0?--i:i&&r.Z(e,(function(e){t.node(e).rank+=i}))}))}(t)})),e("    nestingGraph.cleanup",(function(){!function(t){var e=t.graph();t.removeNode(e.nestingRoot),delete e.nestingRoot,r.Z(t.edges(),(function(e){t.edge(e).nestingEdge&&t.removeEdge(e)}))}(t)})),e("    normalizeRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank})));r.Z(t.nodes(),(function(n){var r=t.node(n);a.Z(r,"rank")&&(r.rank-=e)}))}(t)})),e("    assignRankMinMax",(function(){!function(t){var e=0;r.Z(t.nodes(),(function(n){var r=t.node(n);r.borderTop&&(r.minRank=t.node(r.borderTop).rank,r.maxRank=t.node(r.borderBottom).rank,e=K(e,r.maxRank))})),t.graph().maxRank=e}(t)})),e("    removeEdgeLabelProxies",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);"edge-proxy"===n.dummy&&(t.edge(n.e).labelRank=n.rank,t.removeNode(e))}))}(t)})),e("    normalize.run",(function(){vt(t)})),e("    parentDummyChains",(function(){Ze(t)})),e("    addBorderSegments",(function(){!function(t){r.Z(t.children(),(function e(n){var i=t.children(n),s=t.node(n);if(i.length&&r.Z(i,e),a.Z(s,"minRank")){s.borderLeft=[],s.borderRight=[];for(var o=s.minRank,c=s.maxRank+1;o<c;++o)gt(t,"borderLeft","_bl",n,s,o),gt(t,"borderRight","_br",n,s,o)}}))}(t)})),e("    order",(function(){Ie(t)})),e("    insertSelfEdges",(function(){!function(t){var e=ht(t);r.Z(e,(function(e){var n=0;r.Z(e,(function(e,i){var a=t.node(e);a.order=i+n,r.Z(a.selfEdges,(function(e){ot(t,"selfedge",{width:e.label.width,height:e.label.height,rank:a.rank,order:i+ ++n,e:e.e,label:e.label},"_se")})),delete a.selfEdges}))}))}(t)})),e("    adjustCoordinateSystem",(function(){!function(t){var e=t.graph().rankdir.toLowerCase();"lr"!==e&&"rl"!==e||mt(t)}(t)})),e("    position",(function(){He(t)})),e("    positionSelfEdges",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);if("selfedge"===n.dummy){var r=t.node(n.e.v),i=r.x+r.width/2,a=r.y,s=n.x-i,o=r.height/2;t.setEdge(n.e,n.label),t.removeNode(e),n.label.points=[{x:i+2*s/3,y:a-o},{x:i+5*s/6,y:a-o},{x:i+s,y:a},{x:i+5*s/6,y:a+o},{x:i+2*s/3,y:a+o}],n.label.x=n.x,n.label.y=n.y}}))}(t)})),e("    removeBorderNodes",(function(){!function(t){r.Z(t.nodes(),(function(e){if(t.children(e).length){var n=t.node(e),r=t.node(n.borderTop),i=t.node(n.borderBottom),a=t.node(Q(n.borderLeft)),s=t.node(Q(n.borderRight));n.width=Math.abs(s.x-a.x),n.height=Math.abs(i.y-r.y),n.x=a.x+n.width/2,n.y=r.y+n.height/2}})),r.Z(t.nodes(),(function(e){"border"===t.node(e).dummy&&t.removeNode(e)}))}(t)})),e("    normalize.undo",(function(){!function(t){r.Z(t.graph().dummyChains,(function(e){var n,r=t.node(e),i=r.edgeLabel;for(t.setEdge(r.edgeObj,i);r.dummy;)n=t.successors(e)[0],t.removeNode(e),i.points.push({x:r.x,y:r.y}),"edge-label"===r.dummy&&(i.x=r.x,i.y=r.y,i.width=r.width,i.height=r.height),e=n,r=t.node(e)}))}(t)})),e("    fixupEdgeLabelCoords",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(a.Z(n,"x"))switch("l"!==n.labelpos&&"r"!==n.labelpos||(n.width-=n.labeloffset),n.labelpos){case"l":n.x-=n.width/2+n.labeloffset;break;case"r":n.x+=n.width/2+n.labeloffset}}))}(t)})),e("    undoCoordinateSystem",(function(){yt(t)})),e("    translateGraph",(function(){!function(t){var e=Number.POSITIVE_INFINITY,n=0,i=Number.POSITIVE_INFINITY,s=0,o=t.graph(),c=o.marginx||0,l=o.marginy||0;function h(t){var r=t.x,a=t.y,o=t.width,c=t.height;e=Math.min(e,r-o/2),n=Math.max(n,r+o/2),i=Math.min(i,a-c/2),s=Math.max(s,a+c/2)}r.Z(t.nodes(),(function(e){h(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);a.Z(n,"x")&&h(n)})),e-=c,i-=l,r.Z(t.nodes(),(function(n){var r=t.node(n);r.x-=e,r.y-=i})),r.Z(t.edges(),(function(n){var s=t.edge(n);r.Z(s.points,(function(t){t.x-=e,t.y-=i})),a.Z(s,"x")&&(s.x-=e),a.Z(s,"y")&&(s.y-=i)})),o.width=n-e+c,o.height=s-i+l}(t)})),e("    assignNodeIntersects",(function(){!function(t){r.Z(t.edges(),(function(e){var n,r,i=t.edge(e),a=t.node(e.v),s=t.node(e.w);i.points?(n=i.points[0],r=i.points[i.points.length-1]):(i.points=[],n=s,r=a),i.points.unshift(lt(a,n)),i.points.push(lt(s,r))}))}(t)})),e("    reversePoints",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);n.reversed&&n.points.reverse()}))}(t)})),e("    acyclic.undo",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.reversed){t.removeEdge(e);var r=n.forwardName;delete n.reversed,delete n.forwardName,t.setEdge(e.w,e.v,n,r)}}))}(t)}))}(e,n)})),n("  updateInputGraph",(function(){!function(t,e){r.Z(t.nodes(),(function(n){var r=t.node(n),i=e.node(n);r&&(r.x=i.x,r.y=i.y,e.children(n).length&&(r.width=i.width,r.height=i.height))})),r.Z(t.edges(),(function(n){var r=t.edge(n),i=e.edge(n);r.points=i.points,a.Z(i,"x")&&(r.x=i.x,r.y=i.y)})),t.graph().width=e.graph().width,t.graph().height=e.graph().height}(t,e)}))}))}var Ge=["nodesep","edgesep","ranksep","marginx","marginy"],Xe={ranksep:50,edgesep:20,nodesep:50,rankdir:"tb"},Ke=["acyclicer","ranker","rankdir","align"],Qe=["width","height"],Je={width:0,height:0},tn=["minlen","weight","width","height","labeloffset"],en={minlen:1,weight:1,width:0,height:0,labeloffset:10,labelpos:"r"},nn=["labelpos"];function rn(t,e){return et(W.Z(t,e),Number)}function an(t){var e={};return r.Z(t,(function(t,n){e[n.toLowerCase()]=t})),e}},2544:(t,e,n)=>{"use strict";n.d(e,{k:()=>D});var r=n(7452),i=n(2002),a=n(3234),s=n(7179),o=n(3445),c=n(9697),l=n(870),h=n(9360),u=n(626),d=n(9581),p=n(3001),f=n(1692);const g=function(t){return t!=t};const y=function(t,e,n){for(var r=n-1,i=t.length;++r<i;)if(t[r]===e)return r;return-1};const m=function(t,e,n){return e==e?y(t,e,n):(0,f.Z)(t,g,n)};const b=function(t,e){return!!(null==t?0:t.length)&&m(t,e,0)>-1};const _=function(t,e,n){for(var r=-1,i=null==t?0:t.length;++r<i;)if(n(e,t[r]))return!0;return!1};var x=n(9548),v=n(3203);const k=function(){};var w=n(6545),E=v.Z&&1/(0,w.Z)(new v.Z([,-0]))[1]==1/0?function(t){return new v.Z(t)}:k;const C=E;const T=function(t,e,n){var r=-1,i=b,a=t.length,s=!0,o=[],c=o;if(n)s=!1,i=_;else if(a>=200){var l=e?null:C(t);if(l)return(0,w.Z)(l);s=!1,i=x.Z,c=new p.Z}else c=e?[]:o;t:for(;++r<a;){var h=t[r],u=e?e(h):h;if(h=n||0!==h?h:0,s&&u==u){for(var d=c.length;d--;)if(c[d]===u)continue t;e&&c.push(u),o.push(h)}else i(c,u,n)||(c!==o&&c.push(u),o.push(h))}return o};var S=n(836);const A=(0,d.Z)((function(t){return T((0,u.Z)(t,1,S.Z,!0))}));var L=n(4148),B=n(2344),N="\0";class D{constructor(t={}){this._isDirected=!r.Z(t,"directed")||t.directed,this._isMultigraph=!!r.Z(t,"multigraph")&&t.multigraph,this._isCompound=!!r.Z(t,"compound")&&t.compound,this._label=void 0,this._defaultNodeLabelFn=i.Z(void 0),this._defaultEdgeLabelFn=i.Z(void 0),this._nodes={},this._isCompound&&(this._parent={},this._children={},this._children["\0"]={}),this._in={},this._preds={},this._out={},this._sucs={},this._edgeObjs={},this._edgeLabels={}}isDirected(){return this._isDirected}isMultigraph(){return this._isMultigraph}isCompound(){return this._isCompound}setGraph(t){return this._label=t,this}graph(){return this._label}setDefaultNodeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultNodeLabelFn=t,this}nodeCount(){return this._nodeCount}nodes(){return s.Z(this._nodes)}sources(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._in[e])}))}sinks(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._out[e])}))}setNodes(t,e){var n=arguments,r=this;return l.Z(t,(function(t){n.length>1?r.setNode(t,e):r.setNode(t)})),this}setNode(t,e){return r.Z(this._nodes,t)?(arguments.length>1&&(this._nodes[t]=e),this):(this._nodes[t]=arguments.length>1?e:this._defaultNodeLabelFn(t),this._isCompound&&(this._parent[t]=N,this._children[t]={},this._children["\0"][t]=!0),this._in[t]={},this._preds[t]={},this._out[t]={},this._sucs[t]={},++this._nodeCount,this)}node(t){return this._nodes[t]}hasNode(t){return r.Z(this._nodes,t)}removeNode(t){var e=this;if(r.Z(this._nodes,t)){var n=function(t){e.removeEdge(e._edgeObjs[t])};delete this._nodes[t],this._isCompound&&(this._removeFromParentsChildList(t),delete this._parent[t],l.Z(this.children(t),(function(t){e.setParent(t)})),delete this._children[t]),l.Z(s.Z(this._in[t]),n),delete this._in[t],delete this._preds[t],l.Z(s.Z(this._out[t]),n),delete this._out[t],delete this._sucs[t],--this._nodeCount}return this}setParent(t,e){if(!this._isCompound)throw new Error("Cannot set parent in a non-compound graph");if(h.Z(e))e=N;else{for(var n=e+="";!h.Z(n);n=this.parent(n))if(n===t)throw new Error("Setting "+e+" as parent of "+t+" would create a cycle");this.setNode(e)}return this.setNode(t),this._removeFromParentsChildList(t),this._parent[t]=e,this._children[e][t]=!0,this}_removeFromParentsChildList(t){delete this._children[this._parent[t]][t]}parent(t){if(this._isCompound){var e=this._parent[t];if(e!==N)return e}}children(t){if(h.Z(t)&&(t=N),this._isCompound){var e=this._children[t];if(e)return s.Z(e)}else{if(t===N)return this.nodes();if(this.hasNode(t))return[]}}predecessors(t){var e=this._preds[t];if(e)return s.Z(e)}successors(t){var e=this._sucs[t];if(e)return s.Z(e)}neighbors(t){var e=this.predecessors(t);if(e)return A(e,this.successors(t))}isLeaf(t){return 0===(this.isDirected()?this.successors(t):this.neighbors(t)).length}filterNodes(t){var e=new this.constructor({directed:this._isDirected,multigraph:this._isMultigraph,compound:this._isCompound});e.setGraph(this.graph());var n=this;l.Z(this._nodes,(function(n,r){t(r)&&e.setNode(r,n)})),l.Z(this._edgeObjs,(function(t){e.hasNode(t.v)&&e.hasNode(t.w)&&e.setEdge(t,n.edge(t))}));var r={};function i(t){var a=n.parent(t);return void 0===a||e.hasNode(a)?(r[t]=a,a):a in r?r[a]:i(a)}return this._isCompound&&l.Z(e.nodes(),(function(t){e.setParent(t,i(t))})),e}setDefaultEdgeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultEdgeLabelFn=t,this}edgeCount(){return this._edgeCount}edges(){return L.Z(this._edgeObjs)}setPath(t,e){var n=this,r=arguments;return B.Z(t,(function(t,i){return r.length>1?n.setEdge(t,i,e):n.setEdge(t,i),i})),this}setEdge(){var t,e,n,i,a=!1,s=arguments[0];"object"==typeof s&&null!==s&&"v"in s?(t=s.v,e=s.w,n=s.name,2===arguments.length&&(i=arguments[1],a=!0)):(t=s,e=arguments[1],n=arguments[3],arguments.length>2&&(i=arguments[2],a=!0)),t=""+t,e=""+e,h.Z(n)||(n=""+n);var o=I(this._isDirected,t,e,n);if(r.Z(this._edgeLabels,o))return a&&(this._edgeLabels[o]=i),this;if(!h.Z(n)&&!this._isMultigraph)throw new Error("Cannot set a named edge when isMultigraph = false");this.setNode(t),this.setNode(e),this._edgeLabels[o]=a?i:this._defaultEdgeLabelFn(t,e,n);var c=function(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}var o={v:i,w:a};r&&(o.name=r);return o}(this._isDirected,t,e,n);return t=c.v,e=c.w,Object.freeze(c),this._edgeObjs[o]=c,O(this._preds[e],t),O(this._sucs[t],e),this._in[e][o]=c,this._out[t][o]=c,this._edgeCount++,this}edge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return this._edgeLabels[r]}hasEdge(t,e,n){var i=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return r.Z(this._edgeLabels,i)}removeEdge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n),i=this._edgeObjs[r];return i&&(t=i.v,e=i.w,delete this._edgeLabels[r],delete this._edgeObjs[r],M(this._preds[e],t),M(this._sucs[t],e),delete this._in[e][r],delete this._out[t][r],this._edgeCount--),this}inEdges(t,e){var n=this._in[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.v===e})):r}}outEdges(t,e){var n=this._out[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.w===e})):r}}nodeEdges(t,e){var n=this.inEdges(t,e);if(n)return n.concat(this.outEdges(t,e))}}function O(t,e){t[e]?t[e]++:t[e]=1}function M(t,e){--t[e]||delete t[e]}function I(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}return i+"\x01"+a+"\x01"+(h.Z(r)?"\0":r)}function F(t,e){return I(t,e.v,e.w,e.name)}D.prototype._nodeCount=0,D.prototype._edgeCount=0},5625:(t,e,n)=>{"use strict";n.d(e,{k:()=>r.k});var r=n(2544)},9354:(t,e,n)=>{"use strict";n.d(e,{c:()=>o});var r=n(9360),i=n(8451);const a=function(t){return(0,i.Z)(t,4)};var s=n(3836);n(2544);function o(t){var e={options:{directed:t.isDirected(),multigraph:t.isMultigraph(),compound:t.isCompound()},nodes:c(t),edges:l(t)};return r.Z(t.graph())||(e.value=a(t.graph())),e}function c(t){return s.Z(t.nodes(),(function(e){var n=t.node(e),i=t.parent(e),a={v:e};return r.Z(n)||(a.value=n),r.Z(i)||(a.parent=i),a}))}function l(t){return s.Z(t.edges(),(function(e){var n=t.edge(e),i={v:e.v,w:e.w};return r.Z(e.name)||(i.name=e.name),r.Z(n)||(i.value=n),i}))}},1518:(t,e,n)=>{"use strict";n.d(e,{sY:()=>N});var r=n(9373),i=n(7452),a=n(3688),s=n(870),o=n(277),c=n(6225),l={normal:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},vee:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 L 4 5 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},undirected:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 5 L 10 5").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])}};function h(t){l=t}var u=n(3349);function d(t,e,n){var r=e.label,i=t.append("g");"svg"===e.labelType?function(t,e){var n=t;n.node().appendChild(e.label),c.bg(n,e.labelStyle)}(i,e):"string"!=typeof r||"html"===e.labelType?(0,u.a)(i,e):function(t,e){for(var n=t.append("text"),r=function(t){for(var e,n="",r=!1,i=0;i<t.length;++i)e=t[i],r?(n+="n"===e?"\n":e,r=!1):"\\"===e?r=!0:n+=e;return n}(e.label).split("\n"),i=0;i<r.length;i++)n.append("tspan").attr("xml:space","preserve").attr("dy","1em").attr("x","1").text(r[i]);c.bg(n,e.labelStyle)}(i,e);var a,s=i.node().getBBox();switch(n){case"top":a=-e.height/2;break;case"bottom":a=e.height/2-s.height;break;default:a=-s.height/2}return i.attr("transform","translate("+-s.width/2+","+a+")"),i}var p=function(t,e){var n=e.nodes().filter((function(t){return c.bF(e,t)})),i=t.selectAll("g.cluster").data(n,(function(t){return t}));c.WR(i.exit(),e).style("opacity",0).remove();var a=i.enter().append("g").attr("class","cluster").attr("id",(function(t){return e.node(t).id})).style("opacity",0).each((function(t){var n=e.node(t),i=r.Ys(this);r.Ys(this).append("rect"),d(i.append("g").attr("class","label"),n,n.clusterLabelPos)}));return i=i.merge(a),(i=c.WR(i,e).style("opacity",1)).selectAll("rect").each((function(t){var n=e.node(t),i=r.Ys(this);c.bg(i,n.style)})),i};function f(t){p=t}let g=function(t,e){var n,a=t.selectAll("g.edgeLabel").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0);return a.exit().remove(),a.enter().append("g").classed("edgeLabel",!0).style("opacity",0),(a=t.selectAll("g.edgeLabel")).each((function(t){var n=r.Ys(this);n.select(".label").remove();var a=e.edge(t),s=d(n,e.edge(t),0).classed("label",!0),o=s.node().getBBox();a.labelId&&s.attr("id",a.labelId),i.Z(a,"width")||(a.width=o.width),i.Z(a,"height")||(a.height=o.height)})),n=a.exit?a.exit():a.selectAll(null),c.WR(n,e).style("opacity",0).remove(),a};function y(t){g=t}var m=n(6749),b=n(4379);function _(t,e){return t.intersect(e)}var x=function(t,e,n){var i=t.selectAll("g.edgePath").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0),a=function(t,e){var n=t.enter().append("g").attr("class","edgePath").style("opacity",0);return n.append("path").attr("class","path").attr("d",(function(t){var n=e.edge(t),r=e.node(t.v).elem;return k(n,b.Z(n.points.length).map((function(){return e=(t=r).getBBox(),{x:(n=t.ownerSVGElement.getScreenCTM().inverse().multiply(t.getScreenCTM()).translate(e.width/2,e.height/2)).e,y:n.f};var t,e,n})))})),n.append("defs"),n}(i,e);!function(t,e){var n=t.exit();c.WR(n,e).style("opacity",0).remove()}(i,e);var s=void 0!==i.merge?i.merge(a):i;return c.WR(s,e).style("opacity",1),s.each((function(t){var n=r.Ys(this),i=e.edge(t);i.elem=this,i.id&&n.attr("id",i.id),c.$p(n,i.class,(n.classed("update")?"update ":"")+"edgePath")})),s.selectAll("path.path").each((function(t){var n=e.edge(t);n.arrowheadId=m.Z("arrowhead");var i=r.Ys(this).attr("marker-end",(function(){return"url("+(t=location.href,e=n.arrowheadId,t.split("#")[0]+"#"+e+")");var t,e})).style("fill","none");c.WR(i,e).attr("d",(function(t){return function(t,e){var n=t.edge(e),r=t.node(e.v),i=t.node(e.w),a=n.points.slice(1,n.points.length-1);return a.unshift(_(r,a[0])),a.push(_(i,a[a.length-1])),k(n,a)}(e,t)})),c.bg(i,n.style)})),s.selectAll("defs *").remove(),s.selectAll("defs").each((function(t){var i=e.edge(t);(0,n[i.arrowhead])(r.Ys(this),i.arrowheadId,i,"arrowhead")})),s};function v(t){x=t}function k(t,e){var n=(r.jvg||r.YPS.line)().x((function(t){return t.x})).y((function(t){return t.y}));return(n.curve||n.interpolate)(t.curve),n(e)}var w=n(1666),E=function(t,e,n){var a,s=e.nodes().filter((function(t){return!c.bF(e,t)})),o=t.selectAll("g.node").data(s,(function(t){return t})).classed("update",!0);return o.exit().remove(),o.enter().append("g").attr("class","node").style("opacity",0),(o=t.selectAll("g.node")).each((function(t){var a=e.node(t),s=r.Ys(this);c.$p(s,a.class,(s.classed("update")?"update ":"")+"node"),s.select("g.label").remove();var o=s.append("g").attr("class","label"),l=d(o,a),h=n[a.shape],u=w.Z(l.node().getBBox(),"width","height");a.elem=this,a.id&&s.attr("id",a.id),a.labelId&&o.attr("id",a.labelId),i.Z(a,"width")&&(u.width=a.width),i.Z(a,"height")&&(u.height=a.height),u.width+=a.paddingLeft+a.paddingRight,u.height+=a.paddingTop+a.paddingBottom,o.attr("transform","translate("+(a.paddingLeft-a.paddingRight)/2+","+(a.paddingTop-a.paddingBottom)/2+")");var p=r.Ys(this);p.select(".label-container").remove();var f=h(p,u,a).classed("label-container",!0);c.bg(f,a.style);var g=f.node().getBBox();a.width=g.width,a.height=g.height})),a=o.exit?o.exit():o.selectAll(null),c.WR(a,e).style("opacity",0).remove(),o};function C(t){E=t}function T(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}var S=n(3352),A=n(2930),L={rect:function(t,e,n){var r=t.insert("rect",":first-child").attr("rx",n.rx).attr("ry",n.ry).attr("x",-e.width/2).attr("y",-e.height/2).attr("width",e.width).attr("height",e.height);return n.intersect=function(t){return(0,A.q)(n,t)},r},ellipse:function(t,e,n){var r=e.width/2,i=e.height/2,a=t.insert("ellipse",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("rx",r).attr("ry",i);return n.intersect=function(t){return T(n,r,i,t)},a},circle:function(t,e,n){var r=Math.max(e.width,e.height)/2,i=t.insert("circle",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("r",r);return n.intersect=function(t){return function(t,e,n){return T(t,e,e,n)}(n,r,t)},i},diamond:function(t,e,n){var r=e.width*Math.SQRT2/2,i=e.height*Math.SQRT2/2,a=[{x:0,y:-i},{x:-r,y:0},{x:0,y:i},{x:r,y:0}],s=t.insert("polygon",":first-child").attr("points",a.map((function(t){return t.x+","+t.y})).join(" "));return n.intersect=function(t){return(0,S.A)(n,a,t)},s}};function B(t){L=t}function N(){var t=function(t,e){!function(t){t.nodes().forEach((function(e){var n=t.node(e);i.Z(n,"label")||t.children(e).length||(n.label=e),i.Z(n,"paddingX")&&a.Z(n,{paddingLeft:n.paddingX,paddingRight:n.paddingX}),i.Z(n,"paddingY")&&a.Z(n,{paddingTop:n.paddingY,paddingBottom:n.paddingY}),i.Z(n,"padding")&&a.Z(n,{paddingLeft:n.padding,paddingRight:n.padding,paddingTop:n.padding,paddingBottom:n.padding}),a.Z(n,D),s.Z(["paddingLeft","paddingRight","paddingTop","paddingBottom"],(function(t){n[t]=Number(n[t])})),i.Z(n,"width")&&(n._prevWidth=n.width),i.Z(n,"height")&&(n._prevHeight=n.height)})),t.edges().forEach((function(e){var n=t.edge(e);i.Z(n,"label")||(n.label=""),a.Z(n,O)}))}(e);var n=M(t,"output"),h=M(n,"clusters"),u=M(n,"edgePaths"),d=g(M(n,"edgeLabels"),e),f=E(M(n,"nodes"),e,L);(0,o.bK)(e),function(t,e){function n(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(f,e),function(t,e){function n(t){var n=e.edge(t);return i.Z(n,"x")?"translate("+n.x+","+n.y+")":""}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(d,e),x(u,e,l),function(t,e){var n=t.filter((function(){return!r.Ys(this).classed("update")}));function i(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}n.attr("transform",i),c.WR(t,e).style("opacity",1).attr("transform",i),c.WR(n.selectAll("rect"),e).attr("width",(function(t){return e.node(t).width})).attr("height",(function(t){return e.node(t).height})).attr("x",(function(t){return-e.node(t).width/2})).attr("y",(function(t){return-e.node(t).height/2}))}(p(h,e),e),function(t){s.Z(t.nodes(),(function(e){var n=t.node(e);i.Z(n,"_prevWidth")?n.width=n._prevWidth:delete n.width,i.Z(n,"_prevHeight")?n.height=n._prevHeight:delete n.height,delete n._prevWidth,delete n._prevHeight}))}(e)};return t.createNodes=function(e){return arguments.length?(C(e),t):E},t.createClusters=function(e){return arguments.length?(f(e),t):p},t.createEdgeLabels=function(e){return arguments.length?(y(e),t):g},t.createEdgePaths=function(e){return arguments.length?(v(e),t):x},t.shapes=function(e){return arguments.length?(B(e),t):L},t.arrows=function(e){return arguments.length?(h(e),t):l},t}var D={paddingLeft:10,paddingRight:10,paddingTop:10,paddingBottom:10,rx:0,ry:0,shape:"rect"},O={arrowhead:"normal",curve:r.c_6};function M(t,e){var n=t.select("g."+e);return n.empty()&&(n=t.append("g").attr("class",e)),n}n(5625)},1883:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(1691),i=n(2142);const a=class{constructor(){this.type=i.w.ALL}get(){return this.type}set(t){if(this.type&&this.type!==t)throw new Error("Cannot change both RGB and HSL channels at the same time");this.type=t}reset(){this.type=i.w.ALL}is(t){return this.type===t}};const s=new class{constructor(t,e){this.color=e,this.changed=!1,this.data=t,this.type=new a}set(t,e){return this.color=e,this.changed=!1,this.data=t,this.type.type=i.w.ALL,this}_ensureHSL(){const t=this.data,{h:e,s:n,l:i}=t;void 0===e&&(t.h=r.Z.channel.rgb2hsl(t,"h")),void 0===n&&(t.s=r.Z.channel.rgb2hsl(t,"s")),void 0===i&&(t.l=r.Z.channel.rgb2hsl(t,"l"))}_ensureRGB(){const t=this.data,{r:e,g:n,b:i}=t;void 0===e&&(t.r=r.Z.channel.hsl2rgb(t,"r")),void 0===n&&(t.g=r.Z.channel.hsl2rgb(t,"g")),void 0===i&&(t.b=r.Z.channel.hsl2rgb(t,"b"))}get r(){const t=this.data,e=t.r;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"r")):e}get g(){const t=this.data,e=t.g;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"g")):e}get b(){const t=this.data,e=t.b;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"b")):e}get h(){const t=this.data,e=t.h;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"h")):e}get s(){const t=this.data,e=t.s;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"s")):e}get l(){const t=this.data,e=t.l;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"l")):e}get a(){return this.data.a}set r(t){this.type.set(i.w.RGB),this.changed=!0,this.data.r=t}set g(t){this.type.set(i.w.RGB),this.changed=!0,this.data.g=t}set b(t){this.type.set(i.w.RGB),this.changed=!0,this.data.b=t}set h(t){this.type.set(i.w.HSL),this.changed=!0,this.data.h=t}set s(t){this.type.set(i.w.HSL),this.changed=!0,this.data.s=t}set l(t){this.type.set(i.w.HSL),this.changed=!0,this.data.l=t}set a(t){this.changed=!0,this.data.a=t}}({r:0,g:0,b:0,a:0},"transparent")},1610:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=n(1883),i=n(2142);const a={re:/^#((?:[a-f0-9]{2}){2,4}|[a-f0-9]{3})$/i,parse:t=>{if(35!==t.charCodeAt(0))return;const e=t.match(a.re);if(!e)return;const n=e[1],i=parseInt(n,16),s=n.length,o=s%4==0,c=s>4,l=c?1:17,h=c?8:4,u=o?0:-1,d=c?255:15;return r.Z.set({r:(i>>h*(u+3)&d)*l,g:(i>>h*(u+2)&d)*l,b:(i>>h*(u+1)&d)*l,a:o?(i&d)*l/255:1},t)},stringify:t=>{const{r:e,g:n,b:r,a:a}=t;return a<1?`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}${i.Q[Math.round(255*a)]}`:`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}`}},s=a;var o=n(1691);const c={re:/^hsla?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(?:deg|grad|rad|turn)?)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(%)?))?\s*?\)$/i,hueRe:/^(.+?)(deg|grad|rad|turn)$/i,_hue2deg:t=>{const e=t.match(c.hueRe);if(e){const[,t,n]=e;switch(n){case"grad":return o.Z.channel.clamp.h(.9*parseFloat(t));case"rad":return o.Z.channel.clamp.h(180*parseFloat(t)/Math.PI);case"turn":return o.Z.channel.clamp.h(360*parseFloat(t))}}return o.Z.channel.clamp.h(parseFloat(t))},parse:t=>{const e=t.charCodeAt(0);if(104!==e&&72!==e)return;const n=t.match(c.re);if(!n)return;const[,i,a,s,l,h]=n;return r.Z.set({h:c._hue2deg(i),s:o.Z.channel.clamp.s(parseFloat(a)),l:o.Z.channel.clamp.l(parseFloat(s)),a:l?o.Z.channel.clamp.a(h?parseFloat(l)/100:parseFloat(l)):1},t)},stringify:t=>{const{h:e,s:n,l:r,a:i}=t;return i<1?`hsla(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%, ${i})`:`hsl(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%)`}},l=c,h={colors:{aliceblue:"#f0f8ff",antiquewhite:"#faebd7",aqua:"#00ffff",aquamarine:"#7fffd4",azure:"#f0ffff",beige:"#f5f5dc",bisque:"#ffe4c4",black:"#000000",blanchedalmond:"#ffebcd",blue:"#0000ff",blueviolet:"#8a2be2",brown:"#a52a2a",burlywood:"#deb887",cadetblue:"#5f9ea0",chartreuse:"#7fff00",chocolate:"#d2691e",coral:"#ff7f50",cornflowerblue:"#6495ed",cornsilk:"#fff8dc",crimson:"#dc143c",cyanaqua:"#00ffff",darkblue:"#00008b",darkcyan:"#008b8b",darkgoldenrod:"#b8860b",darkgray:"#a9a9a9",darkgreen:"#006400",darkgrey:"#a9a9a9",darkkhaki:"#bdb76b",darkmagenta:"#8b008b",darkolivegreen:"#556b2f",darkorange:"#ff8c00",darkorchid:"#9932cc",darkred:"#8b0000",darksalmon:"#e9967a",darkseagreen:"#8fbc8f",darkslateblue:"#483d8b",darkslategray:"#2f4f4f",darkslategrey:"#2f4f4f",darkturquoise:"#00ced1",darkviolet:"#9400d3",deeppink:"#ff1493",deepskyblue:"#00bfff",dimgray:"#696969",dimgrey:"#696969",dodgerblue:"#1e90ff",firebrick:"#b22222",floralwhite:"#fffaf0",forestgreen:"#228b22",fuchsia:"#ff00ff",gainsboro:"#dcdcdc",ghostwhite:"#f8f8ff",gold:"#ffd700",goldenrod:"#daa520",gray:"#808080",green:"#008000",greenyellow:"#adff2f",grey:"#808080",honeydew:"#f0fff0",hotpink:"#ff69b4",indianred:"#cd5c5c",indigo:"#4b0082",ivory:"#fffff0",khaki:"#f0e68c",lavender:"#e6e6fa",lavenderblush:"#fff0f5",lawngreen:"#7cfc00",lemonchiffon:"#fffacd",lightblue:"#add8e6",lightcoral:"#f08080",lightcyan:"#e0ffff",lightgoldenrodyellow:"#fafad2",lightgray:"#d3d3d3",lightgreen:"#90ee90",lightgrey:"#d3d3d3",lightpink:"#ffb6c1",lightsalmon:"#ffa07a",lightseagreen:"#20b2aa",lightskyblue:"#87cefa",lightslategray:"#778899",lightslategrey:"#778899",lightsteelblue:"#b0c4de",lightyellow:"#ffffe0",lime:"#00ff00",limegreen:"#32cd32",linen:"#faf0e6",magenta:"#ff00ff",maroon:"#800000",mediumaquamarine:"#66cdaa",mediumblue:"#0000cd",mediumorchid:"#ba55d3",mediumpurple:"#9370db",mediumseagreen:"#3cb371",mediumslateblue:"#7b68ee",mediumspringgreen:"#00fa9a",mediumturquoise:"#48d1cc",mediumvioletred:"#c71585",midnightblue:"#191970",mintcream:"#f5fffa",mistyrose:"#ffe4e1",moccasin:"#ffe4b5",navajowhite:"#ffdead",navy:"#000080",oldlace:"#fdf5e6",olive:"#808000",olivedrab:"#6b8e23",orange:"#ffa500",orangered:"#ff4500",orchid:"#da70d6",palegoldenrod:"#eee8aa",palegreen:"#98fb98",paleturquoise:"#afeeee",palevioletred:"#db7093",papayawhip:"#ffefd5",peachpuff:"#ffdab9",peru:"#cd853f",pink:"#ffc0cb",plum:"#dda0dd",powderblue:"#b0e0e6",purple:"#800080",rebeccapurple:"#663399",red:"#ff0000",rosybrown:"#bc8f8f",royalblue:"#4169e1",saddlebrown:"#8b4513",salmon:"#fa8072",sandybrown:"#f4a460",seagreen:"#2e8b57",seashell:"#fff5ee",sienna:"#a0522d",silver:"#c0c0c0",skyblue:"#87ceeb",slateblue:"#6a5acd",slategray:"#708090",slategrey:"#708090",snow:"#fffafa",springgreen:"#00ff7f",tan:"#d2b48c",teal:"#008080",thistle:"#d8bfd8",transparent:"#00000000",turquoise:"#40e0d0",violet:"#ee82ee",wheat:"#f5deb3",white:"#ffffff",whitesmoke:"#f5f5f5",yellow:"#ffff00",yellowgreen:"#9acd32"},parse:t=>{t=t.toLowerCase();const e=h.colors[t];if(e)return s.parse(e)},stringify:t=>{const e=s.stringify(t);for(const n in h.colors)if(h.colors[n]===e)return n}},u=h,d={re:/^rgba?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?)))?\s*?\)$/i,parse:t=>{const e=t.charCodeAt(0);if(114!==e&&82!==e)return;const n=t.match(d.re);if(!n)return;const[,i,a,s,c,l,h,u,p]=n;return r.Z.set({r:o.Z.channel.clamp.r(a?2.55*parseFloat(i):parseFloat(i)),g:o.Z.channel.clamp.g(c?2.55*parseFloat(s):parseFloat(s)),b:o.Z.channel.clamp.b(h?2.55*parseFloat(l):parseFloat(l)),a:u?o.Z.channel.clamp.a(p?parseFloat(u)/100:parseFloat(u)):1},t)},stringify:t=>{const{r:e,g:n,b:r,a:i}=t;return i<1?`rgba(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)}, ${o.Z.lang.round(i)})`:`rgb(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)})`}},p=d,f={format:{keyword:h,hex:s,rgb:d,rgba:d,hsl:c,hsla:c},parse:t=>{if("string"!=typeof t)return t;const e=s.parse(t)||p.parse(t)||l.parse(t)||u.parse(t);if(e)return e;throw new Error(`Unsupported color format: "${t}"`)},stringify:t=>!t.changed&&t.color?t.color:t.type.is(i.w.HSL)||void 0===t.data.r?l.stringify(t):t.a<1||!Number.isInteger(t.r)||!Number.isInteger(t.g)||!Number.isInteger(t.b)?p.stringify(t):s.stringify(t)},g=f},2142:(t,e,n)=>{"use strict";n.d(e,{Q:()=>i,w:()=>a});var r=n(1691);const i={};for(let s=0;s<=255;s++)i[s]=r.Z.unit.dec2hex(s);const a={ALL:0,RGB:1,HSL:2}},1506:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1691),i=n(1610);const a=(t,e,n)=>{const a=i.Z.parse(t),s=a[e],o=r.Z.channel.clamp[e](s+n);return s!==o&&(a[e]=o),i.Z.stringify(a)}},7201:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",-e)},5920:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",e)},1691:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});const r={min:{r:0,g:0,b:0,s:0,l:0,a:0},max:{r:255,g:255,b:255,h:360,s:100,l:100,a:1},clamp:{r:t=>t>=255?255:t<0?0:t,g:t=>t>=255?255:t<0?0:t,b:t=>t>=255?255:t<0?0:t,h:t=>t%360,s:t=>t>=100?100:t<0?0:t,l:t=>t>=100?100:t<0?0:t,a:t=>t>=1?1:t<0?0:t},toLinear:t=>{const e=t/255;return t>.03928?Math.pow((e+.055)/1.055,2.4):e/12.92},hue2rgb:(t,e,n)=>(n<0&&(n+=1),n>1&&(n-=1),n<1/6?t+6*(e-t)*n:n<.5?e:n<2/3?t+(e-t)*(2/3-n)*6:t),hsl2rgb:({h:t,s:e,l:n},i)=>{if(!e)return 2.55*n;t/=360,e/=100;const a=(n/=100)<.5?n*(1+e):n+e-n*e,s=2*n-a;switch(i){case"r":return 255*r.hue2rgb(s,a,t+1/3);case"g":return 255*r.hue2rgb(s,a,t);case"b":return 255*r.hue2rgb(s,a,t-1/3)}},rgb2hsl:({r:t,g:e,b:n},r)=>{t/=255,e/=255,n/=255;const i=Math.max(t,e,n),a=Math.min(t,e,n),s=(i+a)/2;if("l"===r)return 100*s;if(i===a)return 0;const o=i-a;if("s"===r)return 100*(s>.5?o/(2-i-a):o/(i+a));switch(i){case t:return 60*((e-n)/o+(e<n?6:0));case e:return 60*((n-t)/o+2);case n:return 60*((t-e)/o+4);default:return-1}}},i={channel:r,lang:{clamp:(t,e,n)=>e>n?Math.min(e,Math.max(n,t)):Math.min(n,Math.max(e,t)),round:t=>Math.round(1e10*t)/1e10},unit:{dec2hex:t=>{const e=Math.round(t).toString(16);return e.length>1?e:`0${e}`}}}},7308:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});const r=function(){this.__data__=[],this.size=0};var i=n(9651);const a=function(t,e){for(var n=t.length;n--;)if((0,i.Z)(t[n][0],e))return n;return-1};var s=Array.prototype.splice;const o=function(t){var e=this.__data__,n=a(e,t);return!(n<0)&&(n==e.length-1?e.pop():s.call(e,n,1),--this.size,!0)};const c=function(t){var e=this.__data__,n=a(e,t);return n<0?void 0:e[n][1]};const l=function(t){return a(this.__data__,t)>-1};const h=function(t,e){var n=this.__data__,r=a(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=r,u.prototype.delete=o,u.prototype.get=c,u.prototype.has=l,u.prototype.set=h;const d=u},6183:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Map")},7834:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});const r=(0,n(2508).Z)(Object,"create");const i=function(){this.__data__=r?r(null):{},this.size=0};const a=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e};var s=Object.prototype.hasOwnProperty;const o=function(t){var e=this.__data__;if(r){var n=e[t];return"__lodash_hash_undefined__"===n?void 0:n}return s.call(e,t)?e[t]:void 0};var c=Object.prototype.hasOwnProperty;const l=function(t){var e=this.__data__;return r?void 0!==e[t]:c.call(e,t)};const h=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=r&&void 0===e?"__lodash_hash_undefined__":e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=o,u.prototype.has=l,u.prototype.set=h;const d=u;var p=n(7308),f=n(6183);const g=function(){this.size=0,this.__data__={hash:new d,map:new(f.Z||p.Z),string:new d}};const y=function(t){var e=typeof t;return"string"==e||"number"==e||"symbol"==e||"boolean"==e?"__proto__"!==t:null===t};const m=function(t,e){var n=t.__data__;return y(e)?n["string"==typeof e?"string":"hash"]:n.map};const b=function(t){var e=m(this,t).delete(t);return this.size-=e?1:0,e};const _=function(t){return m(this,t).get(t)};const x=function(t){return m(this,t).has(t)};const v=function(t,e){var n=m(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this};function k(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}k.prototype.clear=g,k.prototype.delete=b,k.prototype.get=_,k.prototype.has=x,k.prototype.set=v;const w=k},3203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Set")},3001:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7834);const i=function(t){return this.__data__.set(t,"__lodash_hash_undefined__"),this};const a=function(t){return this.__data__.has(t)};function s(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r.Z;++e<n;)this.add(t[e])}s.prototype.add=s.prototype.push=i,s.prototype.has=a;const o=s},1667:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7308);const i=function(){this.__data__=new r.Z,this.size=0};const a=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n};const s=function(t){return this.__data__.get(t)};const o=function(t){return this.__data__.has(t)};var c=n(6183),l=n(7834);const h=function(t,e){var n=this.__data__;if(n instanceof r.Z){var i=n.__data__;if(!c.Z||i.length<199)return i.push([t,e]),this.size=++n.size,this;n=this.__data__=new l.Z(i)}return n.set(t,e),this.size=n.size,this};function u(t){var e=this.__data__=new r.Z(t);this.size=e.size}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=s,u.prototype.has=o,u.prototype.set=h;const d=u},7685:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Symbol},7623:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Uint8Array},6579:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}},8774:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=0,a=[];++n<r;){var s=t[n];e(s,n,t)&&(a[i++]=s)}return a}},7668:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});const r=function(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r};var i=n(9169),a=n(7771),s=n(7008),o=n(6009),c=n(8843),l=Object.prototype.hasOwnProperty;const h=function(t,e){var n=(0,a.Z)(t),h=!n&&(0,i.Z)(t),u=!n&&!h&&(0,s.Z)(t),d=!n&&!h&&!u&&(0,c.Z)(t),p=n||h||u||d,f=p?r(t.length,String):[],g=f.length;for(var y in t)!e&&!l.call(t,y)||p&&("length"==y||u&&("offset"==y||"parent"==y)||d&&("buffer"==y||"byteLength"==y||"byteOffset"==y)||(0,o.Z)(y,g))||f.push(y);return f}},4073:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=Array(r);++n<r;)i[n]=e(t[n],n,t);return i}},8694:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=e.length,i=t.length;++n<r;)t[i+n]=e[n];return t}},2954:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4752),i=n(9651),a=Object.prototype.hasOwnProperty;const s=function(t,e,n){var s=t[e];a.call(t,e)&&(0,i.Z)(s,n)&&(void 0!==n||e in t)||(0,r.Z)(t,e,n)}},4752:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7904);const i=function(t,e,n){"__proto__"==e&&r.Z?(0,r.Z)(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}},8451:(t,e,n)=>{"use strict";n.d(e,{Z:()=>J});var r=n(1667),i=n(6579),a=n(2954),s=n(1899),o=n(7179);const c=function(t,e){return t&&(0,s.Z)(e,(0,o.Z)(e),t)};var l=n(2957);const h=function(t,e){return t&&(0,s.Z)(e,(0,l.Z)(e),t)};var u=n(1050),d=n(7215),p=n(5695);const f=function(t,e){return(0,s.Z)(t,(0,p.Z)(t),e)};var g=n(8694),y=n(2513),m=n(532);const b=Object.getOwnPropertySymbols?function(t){for(var e=[];t;)(0,g.Z)(e,(0,p.Z)(t)),t=(0,y.Z)(t);return e}:m.Z;const _=function(t,e){return(0,s.Z)(t,b(t),e)};var x=n(1808),v=n(3327);const k=function(t){return(0,v.Z)(t,l.Z,b)};var w=n(3970),E=Object.prototype.hasOwnProperty;const C=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&E.call(t,"index")&&(n.index=t.index,n.input=t.input),n};var T=n(1884);const S=function(t,e){var n=e?(0,T.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)};var A=/\w*$/;const L=function(t){var e=new t.constructor(t.source,A.exec(t));return e.lastIndex=t.lastIndex,e};var B=n(7685),N=B.Z?B.Z.prototype:void 0,D=N?N.valueOf:void 0;const O=function(t){return D?Object(D.call(t)):{}};var M=n(2701);const I=function(t,e,n){var r=t.constructor;switch(e){case"[object ArrayBuffer]":return(0,T.Z)(t);case"[object Boolean]":case"[object Date]":return new r(+t);case"[object DataView]":return S(t,n);case"[object Float32Array]":case"[object Float64Array]":case"[object Int8Array]":case"[object Int16Array]":case"[object Int32Array]":case"[object Uint8Array]":case"[object Uint8ClampedArray]":case"[object Uint16Array]":case"[object Uint32Array]":return(0,M.Z)(t,n);case"[object Map]":case"[object Set]":return new r;case"[object Number]":case"[object String]":return new r(t);case"[object RegExp]":return L(t);case"[object Symbol]":return O(t)}};var F=n(3658),$=n(7771),R=n(7008),Z=n(8533);const P=function(t){return(0,Z.Z)(t)&&"[object Map]"==(0,w.Z)(t)};var j=n(1162),Y=n(8351),z=Y.Z&&Y.Z.isMap;const U=z?(0,j.Z)(z):P;var W=n(7226);const q=function(t){return(0,Z.Z)(t)&&"[object Set]"==(0,w.Z)(t)};var H=Y.Z&&Y.Z.isSet;const V=H?(0,j.Z)(H):q;var G="[object Arguments]",X="[object Function]",K="[object Object]",Q={};Q[G]=Q["[object Array]"]=Q["[object ArrayBuffer]"]=Q["[object DataView]"]=Q["[object Boolean]"]=Q["[object Date]"]=Q["[object Float32Array]"]=Q["[object Float64Array]"]=Q["[object Int8Array]"]=Q["[object Int16Array]"]=Q["[object Int32Array]"]=Q["[object Map]"]=Q["[object Number]"]=Q[K]=Q["[object RegExp]"]=Q["[object Set]"]=Q["[object String]"]=Q["[object Symbol]"]=Q["[object Uint8Array]"]=Q["[object Uint8ClampedArray]"]=Q["[object Uint16Array]"]=Q["[object Uint32Array]"]=!0,Q["[object Error]"]=Q[X]=Q["[object WeakMap]"]=!1;const J=function t(e,n,s,p,g,y){var m,b=1&n,v=2&n,E=4&n;if(s&&(m=g?s(e,p,g,y):s(e)),void 0!==m)return m;if(!(0,W.Z)(e))return e;var T=(0,$.Z)(e);if(T){if(m=C(e),!b)return(0,d.Z)(e,m)}else{var S=(0,w.Z)(e),A=S==X||"[object GeneratorFunction]"==S;if((0,R.Z)(e))return(0,u.Z)(e,b);if(S==K||S==G||A&&!g){if(m=v||A?{}:(0,F.Z)(e),!b)return v?_(e,h(m,e)):f(e,c(m,e))}else{if(!Q[S])return g?e:{};m=I(e,S,b)}}y||(y=new r.Z);var L=y.get(e);if(L)return L;y.set(e,m),V(e)?e.forEach((function(r){m.add(t(r,n,s,r,e,y))})):U(e)&&e.forEach((function(r,i){m.set(i,t(r,n,s,i,e,y))}));var B=E?v?k:x.Z:v?l.Z:o.Z,N=T?void 0:B(e);return(0,i.Z)(N||e,(function(r,i){N&&(r=e[i=r]),(0,a.Z)(m,i,t(r,n,s,i,e,y))})),m}},9811:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2693),i=n(585);const a=function(t,e){return function(n,r){if(null==n)return n;if(!(0,i.Z)(n))return t(n,r);for(var a=n.length,s=e?a:-1,o=Object(n);(e?s--:++s<a)&&!1!==r(o[s],s,o););return n}}(r.Z)},1692:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e,n,r){for(var i=t.length,a=n+(r?1:-1);r?a--:++a<i;)if(e(t[a],a,t))return a;return-1}},626:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(8694),i=n(7685),a=n(9169),s=n(7771),o=i.Z?i.Z.isConcatSpreadable:void 0;const c=function(t){return(0,s.Z)(t)||(0,a.Z)(t)||!!(o&&t&&t[o])};const l=function t(e,n,i,a,s){var o=-1,l=e.length;for(i||(i=c),s||(s=[]);++o<l;){var h=e[o];n>0&&i(h)?n>1?t(h,n-1,i,a,s):(0,r.Z)(s,h):a||(s[s.length]=h)}return s}},1395:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e,n,r){for(var i=-1,a=Object(e),s=r(e),o=s.length;o--;){var c=s[t?o:++i];if(!1===n(a[c],c,a))break}return e}}()},2693:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1395),i=n(7179);const a=function(t,e){return t&&(0,r.Z)(t,e,i.Z)}},3317:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2823),i=n(2281);const a=function(t,e){for(var n=0,a=(e=(0,r.Z)(e,t)).length;null!=t&&n<a;)t=t[(0,i.Z)(e[n++])];return n&&n==a?t:void 0}},3327:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(8694),i=n(7771);const a=function(t,e,n){var a=e(t);return(0,i.Z)(t)?a:(0,r.Z)(a,n(t))}},3589:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7685),i=Object.prototype,a=i.hasOwnProperty,s=i.toString,o=r.Z?r.Z.toStringTag:void 0;const c=function(t){var e=a.call(t,o),n=t[o];try{t[o]=void 0;var r=!0}catch(c){}var i=s.call(t);return r&&(e?t[o]=n:delete t[o]),i};var l=Object.prototype.toString;const h=function(t){return l.call(t)};var u=r.Z?r.Z.toStringTag:void 0;const d=function(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":u&&u in Object(t)?c(t):h(t)}},4765:(t,e,n)=>{"use strict";n.d(e,{Z:()=>H});var r=n(1667),i=n(3001);const a=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1};var s=n(9548);const o=function(t,e,n,r,o,c){var l=1&n,h=t.length,u=e.length;if(h!=u&&!(l&&u>h))return!1;var d=c.get(t),p=c.get(e);if(d&&p)return d==e&&p==t;var f=-1,g=!0,y=2&n?new i.Z:void 0;for(c.set(t,e),c.set(e,t);++f<h;){var m=t[f],b=e[f];if(r)var _=l?r(b,m,f,e,t,c):r(m,b,f,t,e,c);if(void 0!==_){if(_)continue;g=!1;break}if(y){if(!a(e,(function(t,e){if(!(0,s.Z)(y,e)&&(m===t||o(m,t,n,r,c)))return y.push(e)}))){g=!1;break}}else if(m!==b&&!o(m,b,n,r,c)){g=!1;break}}return c.delete(t),c.delete(e),g};var c=n(7685),l=n(7623),h=n(9651);const u=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t,r){n[++e]=[r,t]})),n};var d=n(6545),p=c.Z?c.Z.prototype:void 0,f=p?p.valueOf:void 0;const g=function(t,e,n,r,i,a,s){switch(n){case"[object DataView]":if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case"[object ArrayBuffer]":return!(t.byteLength!=e.byteLength||!a(new l.Z(t),new l.Z(e)));case"[object Boolean]":case"[object Date]":case"[object Number]":return(0,h.Z)(+t,+e);case"[object Error]":return t.name==e.name&&t.message==e.message;case"[object RegExp]":case"[object String]":return t==e+"";case"[object Map]":var c=u;case"[object Set]":var p=1&r;if(c||(c=d.Z),t.size!=e.size&&!p)return!1;var g=s.get(t);if(g)return g==e;r|=2,s.set(t,e);var y=o(c(t),c(e),r,i,a,s);return s.delete(t),y;case"[object Symbol]":if(f)return f.call(t)==f.call(e)}return!1};var y=n(1808),m=Object.prototype.hasOwnProperty;const b=function(t,e,n,r,i,a){var s=1&n,o=(0,y.Z)(t),c=o.length;if(c!=(0,y.Z)(e).length&&!s)return!1;for(var l=c;l--;){var h=o[l];if(!(s?h in e:m.call(e,h)))return!1}var u=a.get(t),d=a.get(e);if(u&&d)return u==e&&d==t;var p=!0;a.set(t,e),a.set(e,t);for(var f=s;++l<c;){var g=t[h=o[l]],b=e[h];if(r)var _=s?r(b,g,h,e,t,a):r(g,b,h,t,e,a);if(!(void 0===_?g===b||i(g,b,n,r,a):_)){p=!1;break}f||(f="constructor"==h)}if(p&&!f){var x=t.constructor,v=e.constructor;x==v||!("constructor"in t)||!("constructor"in e)||"function"==typeof x&&x instanceof x&&"function"==typeof v&&v instanceof v||(p=!1)}return a.delete(t),a.delete(e),p};var _=n(3970),x=n(7771),v=n(7008),k=n(8843),w="[object Arguments]",E="[object Array]",C="[object Object]",T=Object.prototype.hasOwnProperty;const S=function(t,e,n,i,a,s){var c=(0,x.Z)(t),l=(0,x.Z)(e),h=c?E:(0,_.Z)(t),u=l?E:(0,_.Z)(e),d=(h=h==w?C:h)==C,p=(u=u==w?C:u)==C,f=h==u;if(f&&(0,v.Z)(t)){if(!(0,v.Z)(e))return!1;c=!0,d=!1}if(f&&!d)return s||(s=new r.Z),c||(0,k.Z)(t)?o(t,e,n,i,a,s):g(t,e,h,n,i,a,s);if(!(1&n)){var y=d&&T.call(t,"__wrapped__"),m=p&&T.call(e,"__wrapped__");if(y||m){var S=y?t.value():t,A=m?e.value():e;return s||(s=new r.Z),a(S,A,n,i,s)}}return!!f&&(s||(s=new r.Z),b(t,e,n,i,a,s))};var A=n(8533);const L=function t(e,n,r,i,a){return e===n||(null==e||null==n||!(0,A.Z)(e)&&!(0,A.Z)(n)?e!=e&&n!=n:S(e,n,r,i,t,a))};const B=function(t,e,n,i){var a=n.length,s=a,o=!i;if(null==t)return!s;for(t=Object(t);a--;){var c=n[a];if(o&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++a<s;){var l=(c=n[a])[0],h=t[l],u=c[1];if(o&&c[2]){if(void 0===h&&!(l in t))return!1}else{var d=new r.Z;if(i)var p=i(h,u,l,t,e,d);if(!(void 0===p?L(u,h,3,i,d):p))return!1}}return!0};var N=n(7226);const D=function(t){return t==t&&!(0,N.Z)(t)};var O=n(7179);const M=function(t){for(var e=(0,O.Z)(t),n=e.length;n--;){var r=e[n],i=t[r];e[n]=[r,i,D(i)]}return e};const I=function(t,e){return function(n){return null!=n&&(n[t]===e&&(void 0!==e||t in Object(n)))}};const F=function(t){var e=M(t);return 1==e.length&&e[0][2]?I(e[0][0],e[0][1]):function(n){return n===t||B(n,t,e)}};var $=n(3317);const R=function(t,e,n){var r=null==t?void 0:(0,$.Z)(t,e);return void 0===r?n:r};var Z=n(5487),P=n(9365),j=n(2281);const Y=function(t,e){return(0,P.Z)(t)&&D(e)?I((0,j.Z)(t),e):function(n){var r=R(n,t);return void 0===r&&r===e?(0,Z.Z)(n,t):L(e,r,3)}};var z=n(9203),U=n(4193);const W=function(t){return function(e){return(0,$.Z)(e,t)}};const q=function(t){return(0,P.Z)(t)?(0,U.Z)((0,j.Z)(t)):W(t)};const H=function(t){return"function"==typeof t?t:null==t?z.Z:"object"==typeof t?(0,x.Z)(t)?Y(t[0],t[1]):F(t):q(t)}},9473:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(2764);const i=(0,n(1851).Z)(Object.keys,Object);var a=Object.prototype.hasOwnProperty;const s=function(t){if(!(0,r.Z)(t))return i(t);var e=[];for(var n in Object(t))a.call(t,n)&&"constructor"!=n&&e.push(n);return e}},1018:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(9811),i=n(585);const a=function(t,e){var n=-1,a=(0,i.Z)(t)?Array(t.length):[];return(0,r.Z)(t,(function(t,r,i){a[++n]=e(t,r,i)})),a}},4193:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return null==e?void 0:e[t]}}},9581:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(9203),i=n(1211),a=n(7227);const s=function(t,e){return(0,a.Z)((0,i.Z)(t,e,r.Z),t+"")}},1162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return t(e)}}},9548:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t.has(e)}},8882:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(9203);const i=function(t){return"function"==typeof t?t:r.Z}},2823:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7771),i=n(9365),a=n(2454);var s=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,o=/\\(\\)?/g;const c=function(t){var e=(0,a.Z)(t,(function(t){return 500===n.size&&n.clear(),t})),n=e.cache;return e}((function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(s,(function(t,n,r,i){e.push(r?i.replace(o,"$1"):n||t)})),e}));var l=n(751);const h=function(t,e){return(0,r.Z)(t)?t:(0,i.Z)(t,e)?[t]:c((0,l.Z)(t))}},1884:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7623);const i=function(t){var e=new t.constructor(t.byteLength);return new r.Z(e).set(new r.Z(t)),e}},1050:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i?r.Z.Buffer:void 0,o=s?s.allocUnsafe:void 0;const c=function(t,e){if(e)return t.slice();var n=t.length,r=o?o(n):new t.constructor(n);return t.copy(r),r}},2701:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1884);const i=function(t,e){var n=e?(0,r.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}},7215:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){var n=-1,r=t.length;for(e||(e=Array(r));++n<r;)e[n]=t[n];return e}},1899:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2954),i=n(4752);const a=function(t,e,n,a){var s=!n;n||(n={});for(var o=-1,c=e.length;++o<c;){var l=e[o],h=a?a(n[l],t[l],l,n,t):void 0;void 0===h&&(h=t[l]),s?(0,i.Z)(n,l,h):(0,r.Z)(n,l,h)}return n}},7904:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2508);const i=function(){try{var t=(0,r.Z)(Object,"defineProperty");return t({},"",{}),t}catch(e){}}()},3413:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r="object"==typeof global&&global&&global.Object===Object&&global},1808:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(3327),i=n(5695),a=n(7179);const s=function(t){return(0,r.Z)(t,a.Z,i.Z)}},2508:(t,e,n)=>{"use strict";n.d(e,{Z:()=>b});var r=n(3234);const i=n(6092).Z["__core-js_shared__"];var a,s=(a=/[^.]+$/.exec(i&&i.keys&&i.keys.IE_PROTO||""))?"Symbol(src)_1."+a:"";const o=function(t){return!!s&&s in t};var c=n(7226),l=n(19),h=/^\[object .+?Constructor\]$/,u=Function.prototype,d=Object.prototype,p=u.toString,f=d.hasOwnProperty,g=RegExp("^"+p.call(f).replace(/[\\^$.*+?()[\]{}|]/g,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$");const y=function(t){return!(!(0,c.Z)(t)||o(t))&&((0,r.Z)(t)?g:h).test((0,l.Z)(t))};const m=function(t,e){return null==t?void 0:t[e]};const b=function(t,e){var n=m(t,e);return y(n)?n:void 0}},2513:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=(0,n(1851).Z)(Object.getPrototypeOf,Object)},5695:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(8774),i=n(532),a=Object.prototype.propertyIsEnumerable,s=Object.getOwnPropertySymbols;const o=s?function(t){return null==t?[]:(t=Object(t),(0,r.Z)(s(t),(function(e){return a.call(t,e)})))}:i.Z},3970:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"DataView");var s=n(6183);const o=(0,r.Z)(i.Z,"Promise");var c=n(3203);const l=(0,r.Z)(i.Z,"WeakMap");var h=n(3589),u=n(19),d="[object Map]",p="[object Promise]",f="[object Set]",g="[object WeakMap]",y="[object DataView]",m=(0,u.Z)(a),b=(0,u.Z)(s.Z),_=(0,u.Z)(o),x=(0,u.Z)(c.Z),v=(0,u.Z)(l),k=h.Z;(a&&k(new a(new ArrayBuffer(1)))!=y||s.Z&&k(new s.Z)!=d||o&&k(o.resolve())!=p||c.Z&&k(new c.Z)!=f||l&&k(new l)!=g)&&(k=function(t){var e=(0,h.Z)(t),n="[object Object]"==e?t.constructor:void 0,r=n?(0,u.Z)(n):"";if(r)switch(r){case m:return y;case b:return d;case _:return p;case x:return f;case v:return g}return e});const w=k},6174:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(2823),i=n(9169),a=n(7771),s=n(6009),o=n(1656),c=n(2281);const l=function(t,e,n){for(var l=-1,h=(e=(0,r.Z)(e,t)).length,u=!1;++l<h;){var d=(0,c.Z)(e[l]);if(!(u=null!=t&&n(t,d)))break;t=t[d]}return u||++l!=h?u:!!(h=null==t?0:t.length)&&(0,o.Z)(h)&&(0,s.Z)(d,h)&&((0,a.Z)(t)||(0,i.Z)(t))}},3658:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(7226),i=Object.create;const a=function(){function t(){}return function(e){if(!(0,r.Z)(e))return{};if(i)return i(e);t.prototype=e;var n=new t;return t.prototype=void 0,n}}();var s=n(2513),o=n(2764);const c=function(t){return"function"!=typeof t.constructor||(0,o.Z)(t)?{}:a((0,s.Z)(t))}},6009:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=/^(?:0|[1-9]\d*)$/;const i=function(t,e){var n=typeof t;return!!(e=null==e?9007199254740991:e)&&("number"==n||"symbol"!=n&&r.test(t))&&t>-1&&t%1==0&&t<e}},439:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(9651),i=n(585),a=n(6009),s=n(7226);const o=function(t,e,n){if(!(0,s.Z)(n))return!1;var o=typeof e;return!!("number"==o?(0,i.Z)(n)&&(0,a.Z)(e,n.length):"string"==o&&e in n)&&(0,r.Z)(n[e],t)}},9365:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7771),i=n(2714),a=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,s=/^\w*$/;const o=function(t,e){if((0,r.Z)(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!(0,i.Z)(t))||(s.test(t)||!a.test(t)||null!=e&&t in Object(e))}},2764:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Object.prototype;const i=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||r)}},8351:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(3413),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i&&r.Z.process;const o=function(){try{var t=a&&a.require&&a.require("util").types;return t||s&&s.binding&&s.binding("util")}catch(e){}}()},1851:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return function(n){return t(e(n))}}},1211:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)};var i=Math.max;const a=function(t,e,n){return e=i(void 0===e?t.length-1:e,0),function(){for(var a=arguments,s=-1,o=i(a.length-e,0),c=Array(o);++s<o;)c[s]=a[e+s];s=-1;for(var l=Array(e+1);++s<e;)l[s]=a[s];return l[e]=n(c),r(t,this,l)}}},6092:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3413),i="object"==typeof self&&self&&self.Object===Object&&self;const a=r.Z||i||Function("return this")()},6545:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t){n[++e]=t})),n}},7227:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(2002),i=n(7904),a=n(9203);const s=i.Z?function(t,e){return(0,i.Z)(t,"toString",{configurable:!0,enumerable:!1,value:(0,r.Z)(e),writable:!0})}:a.Z;var o=Date.now;const c=function(t){var e=0,n=0;return function(){var r=o(),i=16-(r-n);if(n=r,i>0){if(++e>=800)return arguments[0]}else e=0;return t.apply(void 0,arguments)}}(s)},2281:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2714);const i=function(t){if("string"==typeof t||(0,r.Z)(t))return t;var e=t+"";return"0"==e&&1/t==-Infinity?"-0":e}},19:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Function.prototype.toString;const i=function(t){if(null!=t){try{return r.call(t)}catch(e){}try{return t+""}catch(e){}}return""}},2002:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(){return t}}},3688:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(9581),i=n(9651),a=n(439),s=n(2957),o=Object.prototype,c=o.hasOwnProperty;const l=(0,r.Z)((function(t,e){t=Object(t);var n=-1,r=e.length,l=r>2?e[2]:void 0;for(l&&(0,a.Z)(e[0],e[1],l)&&(r=1);++n<r;)for(var h=e[n],u=(0,s.Z)(h),d=-1,p=u.length;++d<p;){var f=u[d],g=t[f];(void 0===g||(0,i.Z)(g,o[f])&&!c.call(t,f))&&(t[f]=h[f])}return t}))},9651:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t===e||t!=t&&e!=e}},3445:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(8774),i=n(9811);const a=function(t,e){var n=[];return(0,i.Z)(t,(function(t,r,i){e(t,r,i)&&n.push(t)})),n};var s=n(4765),o=n(7771);const c=function(t,e){return((0,o.Z)(t)?r.Z:a)(t,(0,s.Z)(e,3))}},7961:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(626);const i=function(t){return(null==t?0:t.length)?(0,r.Z)(t,1):[]}},870:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(6579),i=n(9811),a=n(8882),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:i.Z)(t,(0,a.Z)(e))}},7452:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=Object.prototype.hasOwnProperty;const i=function(t,e){return null!=t&&r.call(t,e)};var a=n(6174);const s=function(t,e){return null!=t&&(0,a.Z)(t,e,i)}},5487:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e){return null!=t&&e in Object(t)};var i=n(6174);const a=function(t,e){return null!=t&&(0,i.Z)(t,e,r)}},9203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return t}},9169:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(3589),i=n(8533);const a=function(t){return(0,i.Z)(t)&&"[object Arguments]"==(0,r.Z)(t)};var s=Object.prototype,o=s.hasOwnProperty,c=s.propertyIsEnumerable;const l=a(function(){return arguments}())?a:function(t){return(0,i.Z)(t)&&o.call(t,"callee")&&!c.call(t,"callee")}},7771:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=Array.isArray},585:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3234),i=n(1656);const a=function(t){return null!=t&&(0,i.Z)(t.length)&&!(0,r.Z)(t)}},836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(585),i=n(8533);const a=function(t){return(0,i.Z)(t)&&(0,r.Z)(t)}},7008:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092);const i=function(){return!1};var a="object"==typeof exports&&exports&&!exports.nodeType&&exports,s=a&&"object"==typeof module&&module&&!module.nodeType&&module,o=s&&s.exports===a?r.Z.Buffer:void 0;const c=(o?o.isBuffer:void 0)||i},9697:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(9473),i=n(3970),a=n(9169),s=n(7771),o=n(585),c=n(7008),l=n(2764),h=n(8843),u=Object.prototype.hasOwnProperty;const d=function(t){if(null==t)return!0;if((0,o.Z)(t)&&((0,s.Z)(t)||"string"==typeof t||"function"==typeof t.splice||(0,c.Z)(t)||(0,h.Z)(t)||(0,a.Z)(t)))return!t.length;var e=(0,i.Z)(t);if("[object Map]"==e||"[object Set]"==e)return!t.size;if((0,l.Z)(t))return!(0,r.Z)(t).length;for(var n in t)if(u.call(t,n))return!1;return!0}},3234:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(7226);const a=function(t){if(!(0,i.Z)(t))return!1;var e=(0,r.Z)(t);return"[object Function]"==e||"[object GeneratorFunction]"==e||"[object AsyncFunction]"==e||"[object Proxy]"==e}},1656:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=9007199254740991}},7226:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},8533:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return null!=t&&"object"==typeof t}},7514:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(2513),a=n(8533),s=Function.prototype,o=Object.prototype,c=s.toString,l=o.hasOwnProperty,h=c.call(Object);const u=function(t){if(!(0,a.Z)(t)||"[object Object]"!=(0,r.Z)(t))return!1;var e=(0,i.Z)(t);if(null===e)return!0;var n=l.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&c.call(n)==h}},2714:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(8533);const a=function(t){return"symbol"==typeof t||(0,i.Z)(t)&&"[object Symbol]"==(0,r.Z)(t)}},8843:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(1656),a=n(8533),s={};s["[object Float32Array]"]=s["[object Float64Array]"]=s["[object Int8Array]"]=s["[object Int16Array]"]=s["[object Int32Array]"]=s["[object Uint8Array]"]=s["[object Uint8ClampedArray]"]=s["[object Uint16Array]"]=s["[object Uint32Array]"]=!0,s["[object Arguments]"]=s["[object Array]"]=s["[object ArrayBuffer]"]=s["[object Boolean]"]=s["[object DataView]"]=s["[object Date]"]=s["[object Error]"]=s["[object Function]"]=s["[object Map]"]=s["[object Number]"]=s["[object Object]"]=s["[object RegExp]"]=s["[object Set]"]=s["[object String]"]=s["[object WeakMap]"]=!1;const o=function(t){return(0,a.Z)(t)&&(0,i.Z)(t.length)&&!!s[(0,r.Z)(t)]};var c=n(1162),l=n(8351),h=l.Z&&l.Z.isTypedArray;const u=h?(0,c.Z)(h):o},9360:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return void 0===t}},7179:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7668),i=n(9473),a=n(585);const s=function(t){return(0,a.Z)(t)?(0,r.Z)(t):(0,i.Z)(t)}},2957:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7668),i=n(7226),a=n(2764);const s=function(t){var e=[];if(null!=t)for(var n in Object(t))e.push(n);return e};var o=Object.prototype.hasOwnProperty;const c=function(t){if(!(0,i.Z)(t))return s(t);var e=(0,a.Z)(t),n=[];for(var r in t)("constructor"!=r||!e&&o.call(t,r))&&n.push(r);return n};var l=n(585);const h=function(t){return(0,l.Z)(t)?(0,r.Z)(t,!0):c(t)}},3836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(4073),i=n(4765),a=n(1018),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:a.Z)(t,(0,i.Z)(e,3))}},2454:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(7834);function i(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new TypeError("Expected a function");var n=function(){var r=arguments,i=e?e.apply(this,r):r[0],a=n.cache;if(a.has(i))return a.get(i);var s=t.apply(this,r);return n.cache=a.set(i,s)||a,s};return n.cache=new(i.Cache||r.Z),n}i.Cache=r.Z;const a=i},1666:(t,e,n)=>{"use strict";n.d(e,{Z:()=>y});var r=n(3317),i=n(2954),a=n(2823),s=n(6009),o=n(7226),c=n(2281);const l=function(t,e,n,r){if(!(0,o.Z)(t))return t;for(var l=-1,h=(e=(0,a.Z)(e,t)).length,u=h-1,d=t;null!=d&&++l<h;){var p=(0,c.Z)(e[l]),f=n;if("__proto__"===p||"constructor"===p||"prototype"===p)return t;if(l!=u){var g=d[p];void 0===(f=r?r(g,p,d):void 0)&&(f=(0,o.Z)(g)?g:(0,s.Z)(e[l+1])?[]:{})}(0,i.Z)(d,p,f),d=d[p]}return t};const h=function(t,e,n){for(var i=-1,s=e.length,o={};++i<s;){var c=e[i],h=(0,r.Z)(t,c);n(h,c)&&l(o,(0,a.Z)(c,t),h)}return o};var u=n(5487);const d=function(t,e){return h(t,e,(function(e,n){return(0,u.Z)(t,n)}))};var p=n(7961),f=n(1211),g=n(7227);const y=function(t){return(0,g.Z)((0,f.Z)(t,void 0,p.Z),t+"")}((function(t,e){return null==t?{}:d(t,e)}))},4379:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=Math.ceil,i=Math.max;const a=function(t,e,n,a){for(var s=-1,o=i(r((e-t)/(n||1)),0),c=Array(o);o--;)c[a?o:++s]=t,t+=n;return c};var s=n(439),o=n(4099);const c=function(t){return function(e,n,r){return r&&"number"!=typeof r&&(0,s.Z)(e,n,r)&&(n=r=void 0),e=(0,o.Z)(e),void 0===n?(n=e,e=0):n=(0,o.Z)(n),r=void 0===r?e<n?1:-1:(0,o.Z)(r),a(e,n,r,t)}}()},2344:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});const r=function(t,e,n,r){var i=-1,a=null==t?0:t.length;for(r&&a&&(n=t[++i]);++i<a;)n=e(n,t[i],i,t);return n};var i=n(9811),a=n(4765);const s=function(t,e,n,r,i){return i(t,(function(t,i,a){n=r?(r=!1,t):e(n,t,i,a)})),n};var o=n(7771);const c=function(t,e,n){var c=(0,o.Z)(t)?r:s,l=arguments.length<3;return c(t,(0,a.Z)(e,4),n,l,i.Z)}},532:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(){return[]}},4099:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=/\s/;const i=function(t){for(var e=t.length;e--&&r.test(t.charAt(e)););return e};var a=/^\s+/;const s=function(t){return t?t.slice(0,i(t)+1).replace(a,""):t};var o=n(7226),c=n(2714),l=/^[-+]0x[0-9a-f]+$/i,h=/^0b[01]+$/i,u=/^0o[0-7]+$/i,d=parseInt;const p=function(t){if("number"==typeof t)return t;if((0,c.Z)(t))return NaN;if((0,o.Z)(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=(0,o.Z)(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=s(t);var n=h.test(t);return n||u.test(t)?d(t.slice(2),n?2:8):l.test(t)?NaN:+t};var f=1/0;const g=function(t){return t?(t=p(t))===f||t===-1/0?17976931348623157e292*(t<0?-1:1):t==t?t:0:0===t?t:0}},751:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7685),i=n(4073),a=n(7771),s=n(2714),o=r.Z?r.Z.prototype:void 0,c=o?o.toString:void 0;const l=function t(e){if("string"==typeof e)return e;if((0,a.Z)(e))return(0,i.Z)(e,t)+"";if((0,s.Z)(e))return c?c.call(e):"";var n=e+"";return"0"==n&&1/e==-Infinity?"-0":n};const h=function(t){return null==t?"":l(t)}},6749:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(751),i=0;const a=function(t){var e=++i;return(0,r.Z)(t)+e}},4148:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4073);const i=function(t,e){return(0,r.Z)(e,(function(e){return t[e]}))};var a=n(7179);const s=function(t){return null==t?[]:i(t,(0,a.Z)(t))}}}]);
\ No newline at end of file
diff --git a/assets/js/4835.0e2e1b5f.js.LICENSE.txt b/assets/js/4835.071674c5.js.LICENSE.txt
similarity index 100%
rename from assets/js/4835.0e2e1b5f.js.LICENSE.txt
rename to assets/js/4835.071674c5.js.LICENSE.txt
diff --git a/assets/js/4835.0e2e1b5f.js b/assets/js/4835.0e2e1b5f.js
deleted file mode 100644
index 264a0b12b..000000000
--- a/assets/js/4835.0e2e1b5f.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see 4835.0e2e1b5f.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4835],{7967:(t,e)=>{"use strict";e.N=void 0;var n=/^([^\w]*)(javascript|data|vbscript)/im,r=/&#(\w+)(^\w|;)?/g,i=/&(newline|tab);/gi,a=/[\u0000-\u001F\u007F-\u009F\u2000-\u200D\uFEFF]/gim,s=/^.+(:|&colon;)/gim,o=[".","/"];e.N=function(t){var e,c=(e=t||"",e.replace(r,(function(t,e){return String.fromCharCode(e)}))).replace(i,"").replace(a,"").trim();if(!c)return"about:blank";if(function(t){return o.indexOf(t[0])>-1}(c))return c;var l=c.match(s);if(!l)return c;var h=l[0];return n.test(h)?"about:blank":c}},3905:(t,e,n)=>{"use strict";n.d(e,{Zo:()=>h,kt:()=>p});var r=n(7294);function i(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function a(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function s(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?a(Object(n),!0).forEach((function(e){i(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,e){if(null==t)return{};var n,r,i=function(t,e){if(null==t)return{};var n,r,i={},a=Object.keys(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||(i[n]=t[n]);return i}(t,e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(i[n]=t[n])}return i}var c=r.createContext({}),l=function(t){var e=r.useContext(c),n=e;return t&&(n="function"==typeof t?t(e):s(s({},e),t)),n},h=function(t){var e=l(t.components);return r.createElement(c.Provider,{value:e},t.children)},u={inlineCode:"code",wrapper:function(t){var e=t.children;return r.createElement(r.Fragment,{},e)}},d=r.forwardRef((function(t,e){var n=t.components,i=t.mdxType,a=t.originalType,c=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),d=l(n),p=i,f=d["".concat(c,".").concat(p)]||d[p]||u[p]||a;return n?r.createElement(f,s(s({ref:e},h),{},{components:n})):r.createElement(f,s({ref:e},h))}));function p(t,e){var n=arguments,i=e&&e.mdxType;if("string"==typeof t||i){var a=n.length,s=new Array(a);s[0]=d;var o={};for(var c in e)hasOwnProperty.call(e,c)&&(o[c]=e[c]);o.originalType=t,o.mdxType="string"==typeof t?t:i,s[1]=o;for(var l=2;l<a;l++)s[l]=n[l];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},2839:(t,e,n)=>{"use strict";n.r(e),n.d(e,{default:()=>Ot});var r=n(7294),i=n(833),a=n(902);const s=r.createContext(null);function o(t){let{children:e,content:n}=t;const i=function(t){return(0,r.useMemo)((()=>({metadata:t.metadata,frontMatter:t.frontMatter,assets:t.assets,contentTitle:t.contentTitle,toc:t.toc})),[t])}(n);return r.createElement(s.Provider,{value:i},e)}function c(){const t=(0,r.useContext)(s);if(null===t)throw new a.i6("DocProvider");return t}function l(){const{metadata:t,frontMatter:e,assets:n}=c();return r.createElement(i.d,{title:t.title,description:t.description,keywords:e.keywords,image:n.image??e.image})}var h=n(6010),u=n(7524),d=n(3117),p=n(5999),f=n(9960);function g(t){const{permalink:e,title:n,subLabel:i,isNext:a}=t;return r.createElement(f.Z,{className:(0,h.Z)("pagination-nav__link",a?"pagination-nav__link--next":"pagination-nav__link--prev"),to:e},i&&r.createElement("div",{className:"pagination-nav__sublabel"},i),r.createElement("div",{className:"pagination-nav__label"},n))}function y(t){const{previous:e,next:n}=t;return r.createElement("nav",{className:"pagination-nav docusaurus-mt-lg","aria-label":(0,p.I)({id:"theme.docs.paginator.navAriaLabel",message:"Docs pages",description:"The ARIA label for the docs pagination"})},e&&r.createElement(g,(0,d.Z)({},e,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.previous",description:"The label used to navigate to the previous doc"},"Previous")})),n&&r.createElement(g,(0,d.Z)({},n,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.next",description:"The label used to navigate to the next doc"},"Next"),isNext:!0})))}function m(){const{metadata:t}=c();return r.createElement(y,{previous:t.previous,next:t.next})}var b=n(2263),_=n(143),x=n(5281),v=n(373),k=n(4477);const w={unreleased:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unreleasedVersionLabel",description:"The label used to tell the user that he's browsing an unreleased doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is unreleased documentation for {siteTitle} {versionLabel} version.")},unmaintained:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unmaintainedVersionLabel",description:"The label used to tell the user that he's browsing an unmaintained doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is documentation for {siteTitle} {versionLabel}, which is no longer actively maintained.")}};function E(t){const e=w[t.versionMetadata.banner];return r.createElement(e,t)}function C(t){let{versionLabel:e,to:n,onClick:i}=t;return r.createElement(p.Z,{id:"theme.docs.versions.latestVersionSuggestionLabel",description:"The label used to tell the user to check the latest version",values:{versionLabel:e,latestVersionLink:r.createElement("b",null,r.createElement(f.Z,{to:n,onClick:i},r.createElement(p.Z,{id:"theme.docs.versions.latestVersionLinkLabel",description:"The label used for the latest version suggestion link label"},"latest version")))}},"For up-to-date documentation, see the {latestVersionLink} ({versionLabel}).")}function T(t){let{className:e,versionMetadata:n}=t;const{siteConfig:{title:i}}=(0,b.Z)(),{pluginId:a}=(0,_.gA)({failfast:!0}),{savePreferredVersionName:s}=(0,v.J)(a),{latestDocSuggestion:o,latestVersionSuggestion:c}=(0,_.Jo)(a),l=o??(u=c).docs.find((t=>t.id===u.mainDocId));var u;return r.createElement("div",{className:(0,h.Z)(e,x.k.docs.docVersionBanner,"alert alert--warning margin-bottom--md"),role:"alert"},r.createElement("div",null,r.createElement(E,{siteTitle:i,versionMetadata:n})),r.createElement("div",{className:"margin-top--md"},r.createElement(C,{versionLabel:c.label,to:l.path,onClick:()=>s(c.name)})))}function S(t){let{className:e}=t;const n=(0,k.E)();return n.banner?r.createElement(T,{className:e,versionMetadata:n}):null}function A(t){let{className:e}=t;const n=(0,k.E)();return n.badge?r.createElement("span",{className:(0,h.Z)(e,x.k.docs.docVersionBadge,"badge badge--secondary")},r.createElement(p.Z,{id:"theme.docs.versionBadge.label",values:{versionLabel:n.label}},"Version: {versionLabel}")):null}function L(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.atDate",description:"The words used to describe on which date a page has been last updated",values:{date:r.createElement("b",null,r.createElement("time",{dateTime:new Date(1e3*e).toISOString()},n))}}," on {date}")}function B(t){let{lastUpdatedBy:e}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.byUser",description:"The words used to describe by who the page has been last updated",values:{user:r.createElement("b",null,e)}}," by {user}")}function N(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n,lastUpdatedBy:i}=t;return r.createElement("span",{className:x.k.common.lastUpdated},r.createElement(p.Z,{id:"theme.lastUpdated.lastUpdatedAtBy",description:"The sentence used to display when a page has been last updated, and by who",values:{atDate:e&&n?r.createElement(L,{lastUpdatedAt:e,formattedLastUpdatedAt:n}):"",byUser:i?r.createElement(B,{lastUpdatedBy:i}):""}},"Last updated{atDate}{byUser}"),!1)}const D="iconEdit_Z9Sw";function O(t){let{className:e,...n}=t;return r.createElement("svg",(0,d.Z)({fill:"currentColor",height:"20",width:"20",viewBox:"0 0 40 40",className:(0,h.Z)(D,e),"aria-hidden":"true"},n),r.createElement("g",null,r.createElement("path",{d:"m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"})))}function M(t){let{editUrl:e}=t;return r.createElement("a",{href:e,target:"_blank",rel:"noreferrer noopener",className:x.k.common.editThisPage},r.createElement(O,null),r.createElement(p.Z,{id:"theme.common.editThisPage",description:"The link label to edit the current page"},"Edit this page"))}const I="tag_zVej",F="tagRegular_sFm0",$="tagWithCount_h2kH";function R(t){let{permalink:e,label:n,count:i}=t;return r.createElement(f.Z,{href:e,className:(0,h.Z)(I,i?$:F)},n,i&&r.createElement("span",null,i))}const Z="tags_jXut",P="tag_QGVx";function j(t){let{tags:e}=t;return r.createElement(r.Fragment,null,r.createElement("b",null,r.createElement(p.Z,{id:"theme.tags.tagsListLabel",description:"The label alongside a tag list"},"Tags:")),r.createElement("ul",{className:(0,h.Z)(Z,"padding--none","margin-left--sm")},e.map((t=>{let{label:e,permalink:n}=t;return r.createElement("li",{key:n,className:P},r.createElement(R,{label:e,permalink:n}))}))))}const Y="lastUpdated_vwxv";function z(t){return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterTagsRow,"row margin-bottom--sm")},r.createElement("div",{className:"col"},r.createElement(j,t)))}function U(t){let{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:i,formattedLastUpdatedAt:a}=t;return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterEditMetaRow,"row")},r.createElement("div",{className:"col"},e&&r.createElement(M,{editUrl:e})),r.createElement("div",{className:(0,h.Z)("col",Y)},(n||i)&&r.createElement(N,{lastUpdatedAt:n,formattedLastUpdatedAt:a,lastUpdatedBy:i})))}function W(){const{metadata:t}=c(),{editUrl:e,lastUpdatedAt:n,formattedLastUpdatedAt:i,lastUpdatedBy:a,tags:s}=t,o=s.length>0,l=!!(e||n||a);return o||l?r.createElement("footer",{className:(0,h.Z)(x.k.docs.docFooter,"docusaurus-mt-lg")},o&&r.createElement(z,{tags:s}),l&&r.createElement(U,{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:a,formattedLastUpdatedAt:i})):null}var q=n(6043),H=n(6668);function V(t){const e=t.map((t=>({...t,parentIndex:-1,children:[]}))),n=Array(7).fill(-1);e.forEach(((t,e)=>{const r=n.slice(2,t.level);t.parentIndex=Math.max(...r),n[t.level]=e}));const r=[];return e.forEach((t=>{const{parentIndex:n,...i}=t;n>=0?e[n].children.push(i):r.push(i)})),r}function G(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:r}=t;return e.flatMap((t=>{const e=G({toc:t.children,minHeadingLevel:n,maxHeadingLevel:r});return function(t){return t.level>=n&&t.level<=r}(t)?[{...t,children:e}]:e}))}function X(t){const e=t.getBoundingClientRect();return e.top===e.bottom?X(t.parentNode):e}function K(t,e){let{anchorTopOffset:n}=e;const r=t.find((t=>X(t).top>=n));if(r){return function(t){return t.top>0&&t.bottom<window.innerHeight/2}(X(r))?r:t[t.indexOf(r)-1]??null}return t[t.length-1]??null}function Q(){const t=(0,r.useRef)(0),{navbar:{hideOnScroll:e}}=(0,H.L)();return(0,r.useEffect)((()=>{t.current=e?0:document.querySelector(".navbar").clientHeight}),[e]),t}function J(t){const e=(0,r.useRef)(void 0),n=Q();(0,r.useEffect)((()=>{if(!t)return()=>{};const{linkClassName:r,linkActiveClassName:i,minHeadingLevel:a,maxHeadingLevel:s}=t;function o(){const t=function(t){return Array.from(document.getElementsByClassName(t))}(r),o=function(t){let{minHeadingLevel:e,maxHeadingLevel:n}=t;const r=[];for(let i=e;i<=n;i+=1)r.push(`h${i}.anchor`);return Array.from(document.querySelectorAll(r.join()))}({minHeadingLevel:a,maxHeadingLevel:s}),c=K(o,{anchorTopOffset:n.current}),l=t.find((t=>c&&c.id===function(t){return decodeURIComponent(t.href.substring(t.href.indexOf("#")+1))}(t)));t.forEach((t=>{!function(t,n){n?(e.current&&e.current!==t&&e.current.classList.remove(i),t.classList.add(i),e.current=t):t.classList.remove(i)}(t,t===l)}))}return document.addEventListener("scroll",o),document.addEventListener("resize",o),o(),()=>{document.removeEventListener("scroll",o),document.removeEventListener("resize",o)}}),[t,n])}function tt(t){let{toc:e,className:n,linkClassName:i,isChild:a}=t;return e.length?r.createElement("ul",{className:a?void 0:n},e.map((t=>r.createElement("li",{key:t.id},r.createElement("a",{href:`#${t.id}`,className:i??void 0,dangerouslySetInnerHTML:{__html:t.value}}),r.createElement(tt,{isChild:!0,toc:t.children,className:n,linkClassName:i}))))):null}const et=r.memo(tt);function nt(t){let{toc:e,className:n="table-of-contents table-of-contents__left-border",linkClassName:i="table-of-contents__link",linkActiveClassName:a,minHeadingLevel:s,maxHeadingLevel:o,...c}=t;const l=(0,H.L)(),h=s??l.tableOfContents.minHeadingLevel,u=o??l.tableOfContents.maxHeadingLevel,p=function(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:i}=t;return(0,r.useMemo)((()=>G({toc:V(e),minHeadingLevel:n,maxHeadingLevel:i})),[e,n,i])}({toc:e,minHeadingLevel:h,maxHeadingLevel:u});return J((0,r.useMemo)((()=>{if(i&&a)return{linkClassName:i,linkActiveClassName:a,minHeadingLevel:h,maxHeadingLevel:u}}),[i,a,h,u])),r.createElement(et,(0,d.Z)({toc:p,className:n,linkClassName:i},c))}const rt="tocCollapsibleButton_TO0P",it="tocCollapsibleButtonExpanded_MG3E";function at(t){let{collapsed:e,...n}=t;return r.createElement("button",(0,d.Z)({type:"button"},n,{className:(0,h.Z)("clean-btn",rt,!e&&it,n.className)}),r.createElement(p.Z,{id:"theme.TOCCollapsible.toggleButtonLabel",description:"The label used by the button on the collapsible TOC component"},"On this page"))}const st="tocCollapsible_ETCw",ot="tocCollapsibleContent_vkbj",ct="tocCollapsibleExpanded_sAul";function lt(t){let{toc:e,className:n,minHeadingLevel:i,maxHeadingLevel:a}=t;const{collapsed:s,toggleCollapsed:o}=(0,q.u)({initialState:!0});return r.createElement("div",{className:(0,h.Z)(st,!s&&ct,n)},r.createElement(at,{collapsed:s,onClick:o}),r.createElement(q.z,{lazy:!0,className:ot,collapsed:s},r.createElement(nt,{toc:e,minHeadingLevel:i,maxHeadingLevel:a})))}const ht="tocMobile_ITEo";function ut(){const{toc:t,frontMatter:e}=c();return r.createElement(lt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:(0,h.Z)(x.k.docs.docTocMobile,ht)})}const dt="tableOfContents_bqdL";function pt(t){let{className:e,...n}=t;return r.createElement("div",{className:(0,h.Z)(dt,"thin-scrollbar",e)},r.createElement(nt,(0,d.Z)({},n,{linkClassName:"table-of-contents__link toc-highlight",linkActiveClassName:"table-of-contents__link--active"})))}function ft(){const{toc:t,frontMatter:e}=c();return r.createElement(pt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:x.k.docs.docTocDesktop})}var gt=n(2503),yt=n(3905),mt=n(1769);function bt(t){let{children:e}=t;return r.createElement(yt.Zo,{components:mt.Z},e)}function _t(t){let{children:e}=t;const n=function(){const{metadata:t,frontMatter:e,contentTitle:n}=c();return e.hide_title||void 0!==n?null:t.title}();return r.createElement("div",{className:(0,h.Z)(x.k.docs.docMarkdown,"markdown")},n&&r.createElement("header",null,r.createElement(gt.Z,{as:"h1"},n)),r.createElement(bt,null,e))}var xt=n(3438),vt=n(8596),kt=n(4996);function wt(t){return r.createElement("svg",(0,d.Z)({viewBox:"0 0 24 24"},t),r.createElement("path",{d:"M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z",fill:"currentColor"}))}const Et="breadcrumbHomeIcon_YNFT";function Ct(){const t=(0,kt.Z)("/");return r.createElement("li",{className:"breadcrumbs__item"},r.createElement(f.Z,{"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.home",message:"Home page",description:"The ARIA label for the home page in the breadcrumbs"}),className:"breadcrumbs__link",href:t},r.createElement(wt,{className:Et})))}const Tt="breadcrumbsContainer_Z_bl";function St(t){let{children:e,href:n,isLast:i}=t;const a="breadcrumbs__link";return i?r.createElement("span",{className:a,itemProp:"name"},e):n?r.createElement(f.Z,{className:a,href:n,itemProp:"item"},r.createElement("span",{itemProp:"name"},e)):r.createElement("span",{className:a},e)}function At(t){let{children:e,active:n,index:i,addMicrodata:a}=t;return r.createElement("li",(0,d.Z)({},a&&{itemScope:!0,itemProp:"itemListElement",itemType:"https://schema.org/ListItem"},{className:(0,h.Z)("breadcrumbs__item",{"breadcrumbs__item--active":n})}),e,r.createElement("meta",{itemProp:"position",content:String(i+1)}))}function Lt(){const t=(0,xt.s1)(),e=(0,vt.Ns)();return t?r.createElement("nav",{className:(0,h.Z)(x.k.docs.docBreadcrumbs,Tt),"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.navAriaLabel",message:"Breadcrumbs",description:"The ARIA label for the breadcrumbs"})},r.createElement("ul",{className:"breadcrumbs",itemScope:!0,itemType:"https://schema.org/BreadcrumbList"},e&&r.createElement(Ct,null),t.map(((e,n)=>{const i=n===t.length-1;return r.createElement(At,{key:n,active:i,index:n,addMicrodata:!!e.href},r.createElement(St,{href:e.href,isLast:i},e.label))})))):null}const Bt="docItemContainer_Djhp",Nt="docItemCol_VOVn";function Dt(t){let{children:e}=t;const n=function(){const{frontMatter:t,toc:e}=c(),n=(0,u.i)(),i=t.hide_table_of_contents,a=!i&&e.length>0;return{hidden:i,mobile:a?r.createElement(ut,null):void 0,desktop:!a||"desktop"!==n&&"ssr"!==n?void 0:r.createElement(ft,null)}}();return r.createElement("div",{className:"row"},r.createElement("div",{className:(0,h.Z)("col",!n.hidden&&Nt)},r.createElement(S,null),r.createElement("div",{className:Bt},r.createElement("article",null,r.createElement(Lt,null),r.createElement(A,null),n.mobile,r.createElement(_t,null,e),r.createElement(W,null)),r.createElement(m,null))),n.desktop&&r.createElement("div",{className:"col col--3"},n.desktop))}function Ot(t){const e=`docs-doc-id-${t.content.metadata.unversionedId}`,n=t.content;return r.createElement(o,{content:t.content},r.createElement(i.FG,{className:e},r.createElement(l,null),r.createElement(Dt,null,r.createElement(n,null))))}},2503:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3117),i=n(7294),a=n(6010),s=n(5999),o=n(6668),c=n(9960);const l="anchorWithStickyNavbar_LWe7",h="anchorWithHideOnScrollNavbar_WYt5";function u(t){let{as:e,id:n,...u}=t;const{navbar:{hideOnScroll:d}}=(0,o.L)();if("h1"===e||!n)return i.createElement(e,(0,r.Z)({},u,{id:void 0}));const p=(0,s.I)({id:"theme.common.headingLinkTitle",message:"Direct link to {heading}",description:"Title for link to heading"},{heading:"string"==typeof u.children?u.children:n});return i.createElement(e,(0,r.Z)({},u,{className:(0,a.Z)("anchor",d?h:l,u.className),id:n}),u.children,i.createElement(c.Z,{className:"hash-link",to:`#${n}`,"aria-label":p,title:p},"\u200b"))}},6566:(t,e,n)=>{"use strict";n.d(e,{Z:()=>wt});var r=n(3117),i=n(7294),a=n(5742);var s=n(2389),o=n(6010),c=n(2949),l=n(6668);function h(){const{prism:t}=(0,l.L)(),{colorMode:e}=(0,c.I)(),n=t.theme,r=t.darkTheme||n;return"dark"===e?r:n}var u=n(5281),d=n(7594),p=n.n(d);const f=/title=(?<quote>["'])(?<title>.*?)\1/,g=/\{(?<range>[\d,-]+)\}/,y={js:{start:"\\/\\/",end:""},jsBlock:{start:"\\/\\*",end:"\\*\\/"},jsx:{start:"\\{\\s*\\/\\*",end:"\\*\\/\\s*\\}"},bash:{start:"#",end:""},html:{start:"\x3c!--",end:"--\x3e"}};function m(t,e){const n=t.map((t=>{const{start:n,end:r}=y[t];return`(?:${n}\\s*(${e.flatMap((t=>[t.line,t.block?.start,t.block?.end].filter(Boolean))).join("|")})\\s*${r})`})).join("|");return new RegExp(`^\\s*(?:${n})\\s*$`)}function b(t,e){let n=t.replace(/\n$/,"");const{language:r,magicComments:i,metastring:a}=e;if(a&&g.test(a)){const t=a.match(g).groups.range;if(0===i.length)throw new Error(`A highlight range has been given in code block's metastring (\`\`\` ${a}), but no magic comment config is available. Docusaurus applies the first magic comment entry's className for metastring ranges.`);const e=i[0].className,r=p()(t).filter((t=>t>0)).map((t=>[t-1,[e]]));return{lineClassNames:Object.fromEntries(r),code:n}}if(void 0===r)return{lineClassNames:{},code:n};const s=function(t,e){switch(t){case"js":case"javascript":case"ts":case"typescript":return m(["js","jsBlock"],e);case"jsx":case"tsx":return m(["js","jsBlock","jsx"],e);case"html":return m(["js","jsBlock","html"],e);case"python":case"py":case"bash":return m(["bash"],e);case"markdown":case"md":return m(["html","jsx","bash"],e);default:return m(Object.keys(y),e)}}(r,i),o=n.split("\n"),c=Object.fromEntries(i.map((t=>[t.className,{start:0,range:""}]))),l=Object.fromEntries(i.filter((t=>t.line)).map((t=>{let{className:e,line:n}=t;return[n,e]}))),h=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.start,e]}))),u=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.end,e]})));for(let p=0;p<o.length;){const t=o[p].match(s);if(!t){p+=1;continue}const e=t.slice(1).find((t=>void 0!==t));l[e]?c[l[e]].range+=`${p},`:h[e]?c[h[e]].start=p:u[e]&&(c[u[e]].range+=`${c[u[e]].start}-${p-1},`),o.splice(p,1)}n=o.join("\n");const d={};return Object.entries(c).forEach((t=>{let[e,{range:n}]=t;p()(n).forEach((t=>{d[t]??=[],d[t].push(e)}))})),{lineClassNames:d,code:n}}const _="codeBlockContainer_Ckt0";function x(t){let{as:e,...n}=t;const a=function(t){const e={color:"--prism-color",backgroundColor:"--prism-background-color"},n={};return Object.entries(t.plain).forEach((t=>{let[r,i]=t;const a=e[r];a&&"string"==typeof i&&(n[a]=i)})),n}(h());return i.createElement(e,(0,r.Z)({},n,{style:a,className:(0,o.Z)(n.className,_,u.k.common.codeBlock)}))}const v={codeBlockContent:"codeBlockContent_biex",codeBlockTitle:"codeBlockTitle_Ktv7",codeBlock:"codeBlock_bY9V",codeBlockStandalone:"codeBlockStandalone_MEMb",codeBlockLines:"codeBlockLines_e6Vv",codeBlockLinesWithNumbering:"codeBlockLinesWithNumbering_o6Pm",buttonGroup:"buttonGroup__atx"};function k(t){let{children:e,className:n}=t;return i.createElement(x,{as:"pre",tabIndex:0,className:(0,o.Z)(v.codeBlockStandalone,"thin-scrollbar",n)},i.createElement("code",{className:v.codeBlockLines},e))}var w=n(902);const E={attributes:!0,characterData:!0,childList:!0,subtree:!0};function C(t,e){const[n,r]=(0,i.useState)(),a=(0,i.useCallback)((()=>{r(t.current?.closest("[role=tabpanel][hidden]"))}),[t,r]);(0,i.useEffect)((()=>{a()}),[a]),function(t,e,n){void 0===n&&(n=E);const r=(0,w.zX)(e),a=(0,w.Ql)(n);(0,i.useEffect)((()=>{const e=new MutationObserver(r);return t&&e.observe(t,a),()=>e.disconnect()}),[t,r,a])}(n,(t=>{t.forEach((t=>{"attributes"===t.type&&"hidden"===t.attributeName&&(e(),a())}))}),{attributes:!0,characterData:!1,childList:!1,subtree:!1})}const T={plain:{backgroundColor:"#2a2734",color:"#9a86fd"},styles:[{types:["comment","prolog","doctype","cdata","punctuation"],style:{color:"#6c6783"}},{types:["namespace"],style:{opacity:.7}},{types:["tag","operator","number"],style:{color:"#e09142"}},{types:["property","function"],style:{color:"#9a86fd"}},{types:["tag-id","selector","atrule-id"],style:{color:"#eeebff"}},{types:["attr-name"],style:{color:"#c4b9fe"}},{types:["boolean","string","entity","url","attr-value","keyword","control","directive","unit","statement","regex","atrule","placeholder","variable"],style:{color:"#ffcc99"}},{types:["deleted"],style:{textDecorationLine:"line-through"}},{types:["inserted"],style:{textDecorationLine:"underline"}},{types:["italic"],style:{fontStyle:"italic"}},{types:["important","bold"],style:{fontWeight:"bold"}},{types:["important"],style:{color:"#c4b9fe"}}]};var S={Prism:n(7410).Z,theme:T};function A(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function L(){return L=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t},L.apply(this,arguments)}var B=/\r\n|\r|\n/,N=function(t){0===t.length?t.push({types:["plain"],content:"\n",empty:!0}):1===t.length&&""===t[0].content&&(t[0].content="\n",t[0].empty=!0)},D=function(t,e){var n=t.length;return n>0&&t[n-1]===e?t:t.concat(e)},O=function(t,e){var n=t.plain,r=Object.create(null),i=t.styles.reduce((function(t,n){var r=n.languages,i=n.style;return r&&!r.includes(e)||n.types.forEach((function(e){var n=L({},t[e],i);t[e]=n})),t}),r);return i.root=n,i.plain=L({},n,{backgroundColor:null}),i};function M(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&-1===e.indexOf(r)&&(n[r]=t[r]);return n}const I=function(t){function e(){for(var e=this,n=[],r=arguments.length;r--;)n[r]=arguments[r];t.apply(this,n),A(this,"getThemeDict",(function(t){if(void 0!==e.themeDict&&t.theme===e.prevTheme&&t.language===e.prevLanguage)return e.themeDict;e.prevTheme=t.theme,e.prevLanguage=t.language;var n=t.theme?O(t.theme,t.language):void 0;return e.themeDict=n})),A(this,"getLineProps",(function(t){var n=t.key,r=t.className,i=t.style,a=L({},M(t,["key","className","style","line"]),{className:"token-line",style:void 0,key:void 0}),s=e.getThemeDict(e.props);return void 0!==s&&(a.style=s.plain),void 0!==i&&(a.style=void 0!==a.style?L({},a.style,i):i),void 0!==n&&(a.key=n),r&&(a.className+=" "+r),a})),A(this,"getStyleForToken",(function(t){var n=t.types,r=t.empty,i=n.length,a=e.getThemeDict(e.props);if(void 0!==a){if(1===i&&"plain"===n[0])return r?{display:"inline-block"}:void 0;if(1===i&&!r)return a[n[0]];var s=r?{display:"inline-block"}:{},o=n.map((function(t){return a[t]}));return Object.assign.apply(Object,[s].concat(o))}})),A(this,"getTokenProps",(function(t){var n=t.key,r=t.className,i=t.style,a=t.token,s=L({},M(t,["key","className","style","token"]),{className:"token "+a.types.join(" "),children:a.content,style:e.getStyleForToken(a),key:void 0});return void 0!==i&&(s.style=void 0!==s.style?L({},s.style,i):i),void 0!==n&&(s.key=n),r&&(s.className+=" "+r),s})),A(this,"tokenize",(function(t,e,n,r){var i={code:e,grammar:n,language:r,tokens:[]};t.hooks.run("before-tokenize",i);var a=i.tokens=t.tokenize(i.code,i.grammar,i.language);return t.hooks.run("after-tokenize",i),a}))}return t&&(e.__proto__=t),e.prototype=Object.create(t&&t.prototype),e.prototype.constructor=e,e.prototype.render=function(){var t=this.props,e=t.Prism,n=t.language,r=t.code,i=t.children,a=this.getThemeDict(this.props),s=e.languages[n];return i({tokens:function(t){for(var e=[[]],n=[t],r=[0],i=[t.length],a=0,s=0,o=[],c=[o];s>-1;){for(;(a=r[s]++)<i[s];){var l=void 0,h=e[s],u=n[s][a];if("string"==typeof u?(h=s>0?h:["plain"],l=u):(h=D(h,u.type),u.alias&&(h=D(h,u.alias)),l=u.content),"string"==typeof l){var d=l.split(B),p=d.length;o.push({types:h,content:d[0]});for(var f=1;f<p;f++)N(o),c.push(o=[]),o.push({types:h,content:d[f]})}else s++,e.push(h),n.push(l),r.push(0),i.push(l.length)}s--,e.pop(),n.pop(),r.pop(),i.pop()}return N(o),c}(void 0!==s?this.tokenize(e,r,s,n):[r]),className:"prism-code language-"+n,style:void 0!==a?a.root:{},getLineProps:this.getLineProps,getTokenProps:this.getTokenProps})},e}(i.Component),F="codeLine_lJS_",$="codeLineNumber_Tfdd",R="codeLineContent_feaV";function Z(t){let{line:e,classNames:n,showLineNumbers:a,getLineProps:s,getTokenProps:c}=t;1===e.length&&"\n"===e[0].content&&(e[0].content="");const l=s({line:e,className:(0,o.Z)(n,a&&F)}),h=e.map(((t,e)=>i.createElement("span",(0,r.Z)({key:e},c({token:t,key:e})))));return i.createElement("span",l,a?i.createElement(i.Fragment,null,i.createElement("span",{className:$}),i.createElement("span",{className:R},h)):h,i.createElement("br",null))}var P=n(5999);function j(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"}))}function Y(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"}))}const z={copyButtonCopied:"copyButtonCopied_obH4",copyButtonIcons:"copyButtonIcons_eSgA",copyButtonIcon:"copyButtonIcon_y97N",copyButtonSuccessIcon:"copyButtonSuccessIcon_LjdS"};function U(t){let{code:e,className:n}=t;const[r,a]=(0,i.useState)(!1),s=(0,i.useRef)(void 0),c=(0,i.useCallback)((()=>{!function(t,e){let{target:n=document.body}=void 0===e?{}:e;if("string"!=typeof t)throw new TypeError(`Expected parameter \`text\` to be a \`string\`, got \`${typeof t}\`.`);const r=document.createElement("textarea"),i=document.activeElement;r.value=t,r.setAttribute("readonly",""),r.style.contain="strict",r.style.position="absolute",r.style.left="-9999px",r.style.fontSize="12pt";const a=document.getSelection(),s=a.rangeCount>0&&a.getRangeAt(0);n.append(r),r.select(),r.selectionStart=0,r.selectionEnd=t.length;let o=!1;try{o=document.execCommand("copy")}catch{}r.remove(),s&&(a.removeAllRanges(),a.addRange(s)),i&&i.focus()}(e),a(!0),s.current=window.setTimeout((()=>{a(!1)}),1e3)}),[e]);return(0,i.useEffect)((()=>()=>window.clearTimeout(s.current)),[]),i.createElement("button",{type:"button","aria-label":r?(0,P.I)({id:"theme.CodeBlock.copied",message:"Copied",description:"The copied button label on code blocks"}):(0,P.I)({id:"theme.CodeBlock.copyButtonAriaLabel",message:"Copy code to clipboard",description:"The ARIA label for copy code blocks button"}),title:(0,P.I)({id:"theme.CodeBlock.copy",message:"Copy",description:"The copy button label on code blocks"}),className:(0,o.Z)("clean-btn",n,z.copyButton,r&&z.copyButtonCopied),onClick:c},i.createElement("span",{className:z.copyButtonIcons,"aria-hidden":"true"},i.createElement(j,{className:z.copyButtonIcon}),i.createElement(Y,{className:z.copyButtonSuccessIcon})))}function W(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M4 19h6v-2H4v2zM20 5H4v2h16V5zm-3 6H4v2h13.25c1.1 0 2 .9 2 2s-.9 2-2 2H15v-2l-3 3l3 3v-2h2c2.21 0 4-1.79 4-4s-1.79-4-4-4z"}))}const q="wordWrapButtonIcon_Bwma",H="wordWrapButtonEnabled_EoeP";function V(t){let{className:e,onClick:n,isEnabled:r}=t;const a=(0,P.I)({id:"theme.CodeBlock.wordWrapToggle",message:"Toggle word wrap",description:"The title attribute for toggle word wrapping button of code block lines"});return i.createElement("button",{type:"button",onClick:n,className:(0,o.Z)("clean-btn",e,r&&H),"aria-label":a,title:a},i.createElement(W,{className:q,"aria-hidden":"true"}))}function G(t){let{children:e,className:n="",metastring:a,title:s,showLineNumbers:c,language:u}=t;const{prism:{defaultLanguage:d,magicComments:p}}=(0,l.L)(),g=u??n.split(" ").find((t=>t.startsWith("language-")))?.replace(/language-/,"")??d;const y=h(),m=function(){const[t,e]=(0,i.useState)(!1),[n,r]=(0,i.useState)(!1),a=(0,i.useRef)(null),s=(0,i.useCallback)((()=>{const n=a.current.querySelector("code");t?n.removeAttribute("style"):(n.style.whiteSpace="pre-wrap",n.style.overflowWrap="anywhere"),e((t=>!t))}),[a,t]),o=(0,i.useCallback)((()=>{const{scrollWidth:t,clientWidth:e}=a.current,n=t>e||a.current.querySelector("code").hasAttribute("style");r(n)}),[a]);return C(a,o),(0,i.useEffect)((()=>{o()}),[t,o]),(0,i.useEffect)((()=>(window.addEventListener("resize",o,{passive:!0}),()=>{window.removeEventListener("resize",o)})),[o]),{codeBlockRef:a,isEnabled:t,isCodeScrollable:n,toggle:s}}(),_=function(t){return t?.match(f)?.groups.title??""}(a)||s,{lineClassNames:k,code:w}=b(e,{metastring:a,language:g,magicComments:p}),E=c??function(t){return Boolean(t?.includes("showLineNumbers"))}(a);return i.createElement(x,{as:"div",className:(0,o.Z)(n,g&&!n.includes(`language-${g}`)&&`language-${g}`)},_&&i.createElement("div",{className:v.codeBlockTitle},_),i.createElement("div",{className:v.codeBlockContent},i.createElement(I,(0,r.Z)({},S,{theme:y,code:w,language:g??"text"}),(t=>{let{className:e,tokens:n,getLineProps:r,getTokenProps:a}=t;return i.createElement("pre",{tabIndex:0,ref:m.codeBlockRef,className:(0,o.Z)(e,v.codeBlock,"thin-scrollbar")},i.createElement("code",{className:(0,o.Z)(v.codeBlockLines,E&&v.codeBlockLinesWithNumbering)},n.map(((t,e)=>i.createElement(Z,{key:e,line:t,getLineProps:r,getTokenProps:a,classNames:k[e],showLineNumbers:E})))))})),i.createElement("div",{className:v.buttonGroup},(m.isEnabled||m.isCodeScrollable)&&i.createElement(V,{className:v.codeButton,onClick:()=>m.toggle(),isEnabled:m.isEnabled}),i.createElement(U,{className:v.codeButton,code:w}))))}function X(t){let{children:e,...n}=t;const a=(0,s.Z)(),o=function(t){return i.Children.toArray(t).some((t=>(0,i.isValidElement)(t)))?t:Array.isArray(t)?t.join(""):t}(e),c="string"==typeof o?G:k;return i.createElement(c,(0,r.Z)({key:String(a)},n),o)}var K=n(9960);var Q=n(6043);const J="details_lb9f",tt="isBrowser_bmU9",et="collapsibleContent_i85q";function nt(t){return!!t&&("SUMMARY"===t.tagName||nt(t.parentElement))}function rt(t,e){return!!t&&(t===e||rt(t.parentElement,e))}function it(t){let{summary:e,children:n,...a}=t;const c=(0,s.Z)(),l=(0,i.useRef)(null),{collapsed:h,setCollapsed:u}=(0,Q.u)({initialState:!a.open}),[d,p]=(0,i.useState)(a.open),f=i.isValidElement(e)?e:i.createElement("summary",null,e??"Details");return i.createElement("details",(0,r.Z)({},a,{ref:l,open:d,"data-collapsed":h,className:(0,o.Z)(J,c&&tt,a.className),onMouseDown:t=>{nt(t.target)&&t.detail>1&&t.preventDefault()},onClick:t=>{t.stopPropagation();const e=t.target;nt(e)&&rt(e,l.current)&&(t.preventDefault(),h?(u(!1),p(!0)):u(!0))}}),f,i.createElement(Q.z,{lazy:!1,collapsed:h,disableSSRStyle:!0,onCollapseTransitionEnd:t=>{u(t),p(!t)}},i.createElement("div",{className:et},n)))}const at="details_b_Ee";function st(t){let{...e}=t;return i.createElement(it,(0,r.Z)({},e,{className:(0,o.Z)("alert alert--info",at,e.className)}))}var ot=n(2503);function ct(t){return i.createElement(ot.Z,t)}const lt="containsTaskList_mC6p";const ht="img_ev3q";const ut="admonition_LlT9",dt="admonitionHeading_tbUL",pt="admonitionIcon_kALy",ft="admonitionContent_S0QG";const gt={note:{infimaClassName:"secondary",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"}))},label:i.createElement(P.Z,{id:"theme.admonition.note",description:"The default label used for the Note admonition (:::note)"},"note")},tip:{infimaClassName:"success",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.tip",description:"The default label used for the Tip admonition (:::tip)"},"tip")},danger:{infimaClassName:"danger",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"}))},label:i.createElement(P.Z,{id:"theme.admonition.danger",description:"The default label used for the Danger admonition (:::danger)"},"danger")},info:{infimaClassName:"info",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.info",description:"The default label used for the Info admonition (:::info)"},"info")},caution:{infimaClassName:"warning",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 16 16"},i.createElement("path",{fillRule:"evenodd",d:"M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"}))},label:i.createElement(P.Z,{id:"theme.admonition.caution",description:"The default label used for the Caution admonition (:::caution)"},"caution")}},yt={secondary:"note",important:"info",success:"tip",warning:"danger"};function mt(t){const{mdxAdmonitionTitle:e,rest:n}=function(t){const e=i.Children.toArray(t),n=e.find((t=>i.isValidElement(t)&&"mdxAdmonitionTitle"===t.props?.mdxType)),r=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return{mdxAdmonitionTitle:n,rest:r}}(t.children);return{...t,title:t.title??e,children:n}}function bt(t){let{children:e,fallback:n}=t;return(0,s.Z)()?i.createElement(i.Fragment,null,e?.()):n??null}var _t=n(6432);function xt(){const{colorMode:t}=(0,c.I)(),e=(0,l.L)().mermaid,n=e.theme[t],{options:r}=e;return(0,i.useMemo)((()=>({startOnLoad:!1,...r,theme:n})),[n,r])}const vt="container_lyt7";function kt(t){let{value:e}=t;const n=function(t,e){const n=xt(),r=e??n;return(0,i.useMemo)((()=>{_t.o.mermaidAPI.initialize(r);const e=`mermaid-svg-${Math.round(1e7*Math.random())}`;return _t.o.render(e,t)}),[t,r])}(e);return i.createElement("div",{className:`docusaurus-mermaid-container ${vt}`,dangerouslySetInnerHTML:{__html:n}})}const wt={head:function(t){const e=i.Children.map(t.children,(t=>i.isValidElement(t)?function(t){if(t.props?.mdxType&&t.props.originalType){const{mdxType:e,originalType:n,...r}=t.props;return i.createElement(t.props.originalType,r)}return t}(t):t));return i.createElement(a.Z,t,e)},code:function(t){const e=["a","abbr","b","br","button","cite","code","del","dfn","em","i","img","input","ins","kbd","label","object","output","q","ruby","s","small","span","strong","sub","sup","time","u","var","wbr"];return i.Children.toArray(t.children).every((t=>"string"==typeof t&&!t.includes("\n")||(0,i.isValidElement)(t)&&e.includes(t.props?.mdxType)))?i.createElement("code",t):i.createElement(X,t)},a:function(t){return i.createElement(K.Z,t)},pre:function(t){return i.createElement(X,(0,i.isValidElement)(t.children)&&"code"===t.children.props?.originalType?t.children.props:{...t})},details:function(t){const e=i.Children.toArray(t.children),n=e.find((t=>i.isValidElement(t)&&"summary"===t.props?.mdxType)),a=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return i.createElement(st,(0,r.Z)({},t,{summary:n}),a)},ul:function(t){return i.createElement("ul",(0,r.Z)({},t,{className:(e=t.className,(0,o.Z)(e,e?.includes("contains-task-list")&&lt))}));var e},img:function(t){return i.createElement("img",(0,r.Z)({loading:"lazy"},t,{className:(e=t.className,(0,o.Z)(e,ht))}));var e},h1:t=>i.createElement(ct,(0,r.Z)({as:"h1"},t)),h2:t=>i.createElement(ct,(0,r.Z)({as:"h2"},t)),h3:t=>i.createElement(ct,(0,r.Z)({as:"h3"},t)),h4:t=>i.createElement(ct,(0,r.Z)({as:"h4"},t)),h5:t=>i.createElement(ct,(0,r.Z)({as:"h5"},t)),h6:t=>i.createElement(ct,(0,r.Z)({as:"h6"},t)),admonition:function(t){const{children:e,type:n,title:r,icon:a}=mt(t),s=function(t){const e=yt[t]??t;return gt[e]||(console.warn(`No admonition config found for admonition type "${e}". Using Info as fallback.`),gt.info)}(n),c=r??s.label,{iconComponent:l}=s,h=a??i.createElement(l,null);return i.createElement("div",{className:(0,o.Z)(u.k.common.admonition,u.k.common.admonitionType(t.type),"alert",`alert--${s.infimaClassName}`,ut)},i.createElement("div",{className:dt},i.createElement("span",{className:pt},h),c),i.createElement("div",{className:ft},e))},mermaid:function(t){return i.createElement(bt,null,(()=>i.createElement(kt,t)))}}},5162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7294),i=n(6010);const a="tabItem_Ymn6";function s(t){let{children:e,hidden:n,className:s}=t;return r.createElement("div",{role:"tabpanel",className:(0,i.Z)(a,s),hidden:n},e)}},4866:(t,e,n)=>{"use strict";n.d(e,{Z:()=>k});var r=n(3117),i=n(7294),a=n(6010),s=n(2466),o=n(6775),c=n(1980),l=n(7392),h=n(12);function u(t){return function(t){return i.Children.map(t,(t=>{if(!t||(0,i.isValidElement)(t)&&function(t){const{props:e}=t;return!!e&&"object"==typeof e&&"value"in e}(t))return t;throw new Error(`Docusaurus error: Bad <Tabs> child <${"string"==typeof t.type?t.type:t.type.name}>: all children of the <Tabs> component should be <TabItem>, and every <TabItem> should have a unique "value" prop.`)}))?.filter(Boolean)??[]}(t).map((t=>{let{props:{value:e,label:n,attributes:r,default:i}}=t;return{value:e,label:n,attributes:r,default:i}}))}function d(t){const{values:e,children:n}=t;return(0,i.useMemo)((()=>{const t=e??u(n);return function(t){const e=(0,l.l)(t,((t,e)=>t.value===e.value));if(e.length>0)throw new Error(`Docusaurus error: Duplicate values "${e.map((t=>t.value)).join(", ")}" found in <Tabs>. Every value needs to be unique.`)}(t),t}),[e,n])}function p(t){let{value:e,tabValues:n}=t;return n.some((t=>t.value===e))}function f(t){let{queryString:e=!1,groupId:n}=t;const r=(0,o.k6)(),a=function(t){let{queryString:e=!1,groupId:n}=t;if("string"==typeof e)return e;if(!1===e)return null;if(!0===e&&!n)throw new Error('Docusaurus error: The <Tabs> component groupId prop is required if queryString=true, because this value is used as the search param name. You can also provide an explicit value such as queryString="my-search-param".');return n??null}({queryString:e,groupId:n});return[(0,c._X)(a),(0,i.useCallback)((t=>{if(!a)return;const e=new URLSearchParams(r.location.search);e.set(a,t),r.replace({...r.location,search:e.toString()})}),[a,r])]}function g(t){const{defaultValue:e,queryString:n=!1,groupId:r}=t,a=d(t),[s,o]=(0,i.useState)((()=>function(t){let{defaultValue:e,tabValues:n}=t;if(0===n.length)throw new Error("Docusaurus error: the <Tabs> component requires at least one <TabItem> children component");if(e){if(!p({value:e,tabValues:n}))throw new Error(`Docusaurus error: The <Tabs> has a defaultValue "${e}" but none of its children has the corresponding value. Available values are: ${n.map((t=>t.value)).join(", ")}. If you intend to show no default tab, use defaultValue={null} instead.`);return e}const r=n.find((t=>t.default))??n[0];if(!r)throw new Error("Unexpected error: 0 tabValues");return r.value}({defaultValue:e,tabValues:a}))),[c,l]=f({queryString:n,groupId:r}),[u,g]=function(t){let{groupId:e}=t;const n=function(t){return t?`docusaurus.tab.${t}`:null}(e),[r,a]=(0,h.Nk)(n);return[r,(0,i.useCallback)((t=>{n&&a.set(t)}),[n,a])]}({groupId:r}),y=(()=>{const t=c??u;return p({value:t,tabValues:a})?t:null})();(0,i.useLayoutEffect)((()=>{y&&o(y)}),[y]);return{selectedValue:s,selectValue:(0,i.useCallback)((t=>{if(!p({value:t,tabValues:a}))throw new Error(`Can't select invalid tab value=${t}`);o(t),l(t),g(t)}),[l,g,a]),tabValues:a}}var y=n(2389);const m="tabList__CuJ",b="tabItem_LNqP";function _(t){let{className:e,block:n,selectedValue:o,selectValue:c,tabValues:l}=t;const h=[],{blockElementScrollPositionUntilNextRender:u}=(0,s.o5)(),d=t=>{const e=t.currentTarget,n=h.indexOf(e),r=l[n].value;r!==o&&(u(e),c(r))},p=t=>{let e=null;switch(t.key){case"Enter":d(t);break;case"ArrowRight":{const n=h.indexOf(t.currentTarget)+1;e=h[n]??h[0];break}case"ArrowLeft":{const n=h.indexOf(t.currentTarget)-1;e=h[n]??h[h.length-1];break}}e?.focus()};return i.createElement("ul",{role:"tablist","aria-orientation":"horizontal",className:(0,a.Z)("tabs",{"tabs--block":n},e)},l.map((t=>{let{value:e,label:n,attributes:s}=t;return i.createElement("li",(0,r.Z)({role:"tab",tabIndex:o===e?0:-1,"aria-selected":o===e,key:e,ref:t=>h.push(t),onKeyDown:p,onClick:d},s,{className:(0,a.Z)("tabs__item",b,s?.className,{"tabs__item--active":o===e})}),n??e)})))}function x(t){let{lazy:e,children:n,selectedValue:r}=t;const a=(Array.isArray(n)?n:[n]).filter(Boolean);if(e){const t=a.find((t=>t.props.value===r));return t?(0,i.cloneElement)(t,{className:"margin-top--md"}):null}return i.createElement("div",{className:"margin-top--md"},a.map(((t,e)=>(0,i.cloneElement)(t,{key:e,hidden:t.props.value!==r}))))}function v(t){const e=g(t);return i.createElement("div",{className:(0,a.Z)("tabs-container",m)},i.createElement(_,(0,r.Z)({},t,e)),i.createElement(x,(0,r.Z)({},t,e)))}function k(t){const e=(0,y.Z)();return i.createElement(v,(0,r.Z)({key:String(e)},t))}},4477:(t,e,n)=>{"use strict";n.d(e,{E:()=>o,q:()=>s});var r=n(7294),i=n(902);const a=r.createContext(null);function s(t){let{children:e,version:n}=t;return r.createElement(a.Provider,{value:n},e)}function o(){const t=(0,r.useContext)(a);if(null===t)throw new i.i6("DocsVersionProvider");return t}},7484:function(t){t.exports=function(){"use strict";var t=1e3,e=6e4,n=36e5,r="millisecond",i="second",a="minute",s="hour",o="day",c="week",l="month",h="quarter",u="year",d="date",p="Invalid Date",f=/^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{1,2})?[.:]?(\d+)?$/,g=/\[([^\]]+)]|Y{1,4}|M{1,4}|D{1,2}|d{1,4}|H{1,2}|h{1,2}|a|A|m{1,2}|s{1,2}|Z{1,2}|SSS/g,y={name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),ordinal:function(t){var e=["th","st","nd","rd"],n=t%100;return"["+t+(e[(n-20)%10]||e[n]||e[0])+"]"}},m=function(t,e,n){var r=String(t);return!r||r.length>=e?t:""+Array(e+1-r.length).join(n)+t},b={s:m,z:function(t){var e=-t.utcOffset(),n=Math.abs(e),r=Math.floor(n/60),i=n%60;return(e<=0?"+":"-")+m(r,2,"0")+":"+m(i,2,"0")},m:function t(e,n){if(e.date()<n.date())return-t(n,e);var r=12*(n.year()-e.year())+(n.month()-e.month()),i=e.clone().add(r,l),a=n-i<0,s=e.clone().add(r+(a?-1:1),l);return+(-(r+(n-i)/(a?i-s:s-i))||0)},a:function(t){return t<0?Math.ceil(t)||0:Math.floor(t)},p:function(t){return{M:l,y:u,w:c,d:o,D:d,h:s,m:a,s:i,ms:r,Q:h}[t]||String(t||"").toLowerCase().replace(/s$/,"")},u:function(t){return void 0===t}},_="en",x={};x[_]=y;var v=function(t){return t instanceof C},k=function t(e,n,r){var i;if(!e)return _;if("string"==typeof e){var a=e.toLowerCase();x[a]&&(i=a),n&&(x[a]=n,i=a);var s=e.split("-");if(!i&&s.length>1)return t(s[0])}else{var o=e.name;x[o]=e,i=o}return!r&&i&&(_=i),i||!r&&_},w=function(t,e){if(v(t))return t.clone();var n="object"==typeof e?e:{};return n.date=t,n.args=arguments,new C(n)},E=b;E.l=k,E.i=v,E.w=function(t,e){return w(t,{locale:e.$L,utc:e.$u,x:e.$x,$offset:e.$offset})};var C=function(){function y(t){this.$L=k(t.locale,null,!0),this.parse(t)}var m=y.prototype;return m.parse=function(t){this.$d=function(t){var e=t.date,n=t.utc;if(null===e)return new Date(NaN);if(E.u(e))return new Date;if(e instanceof Date)return new Date(e);if("string"==typeof e&&!/Z$/i.test(e)){var r=e.match(f);if(r){var i=r[2]-1||0,a=(r[7]||"0").substring(0,3);return n?new Date(Date.UTC(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)):new Date(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)}}return new Date(e)}(t),this.$x=t.x||{},this.init()},m.init=function(){var t=this.$d;this.$y=t.getFullYear(),this.$M=t.getMonth(),this.$D=t.getDate(),this.$W=t.getDay(),this.$H=t.getHours(),this.$m=t.getMinutes(),this.$s=t.getSeconds(),this.$ms=t.getMilliseconds()},m.$utils=function(){return E},m.isValid=function(){return!(this.$d.toString()===p)},m.isSame=function(t,e){var n=w(t);return this.startOf(e)<=n&&n<=this.endOf(e)},m.isAfter=function(t,e){return w(t)<this.startOf(e)},m.isBefore=function(t,e){return this.endOf(e)<w(t)},m.$g=function(t,e,n){return E.u(t)?this[e]:this.set(n,t)},m.unix=function(){return Math.floor(this.valueOf()/1e3)},m.valueOf=function(){return this.$d.getTime()},m.startOf=function(t,e){var n=this,r=!!E.u(e)||e,h=E.p(t),p=function(t,e){var i=E.w(n.$u?Date.UTC(n.$y,e,t):new Date(n.$y,e,t),n);return r?i:i.endOf(o)},f=function(t,e){return E.w(n.toDate()[t].apply(n.toDate("s"),(r?[0,0,0,0]:[23,59,59,999]).slice(e)),n)},g=this.$W,y=this.$M,m=this.$D,b="set"+(this.$u?"UTC":"");switch(h){case u:return r?p(1,0):p(31,11);case l:return r?p(1,y):p(0,y+1);case c:var _=this.$locale().weekStart||0,x=(g<_?g+7:g)-_;return p(r?m-x:m+(6-x),y);case o:case d:return f(b+"Hours",0);case s:return f(b+"Minutes",1);case a:return f(b+"Seconds",2);case i:return f(b+"Milliseconds",3);default:return this.clone()}},m.endOf=function(t){return this.startOf(t,!1)},m.$set=function(t,e){var n,c=E.p(t),h="set"+(this.$u?"UTC":""),p=(n={},n[o]=h+"Date",n[d]=h+"Date",n[l]=h+"Month",n[u]=h+"FullYear",n[s]=h+"Hours",n[a]=h+"Minutes",n[i]=h+"Seconds",n[r]=h+"Milliseconds",n)[c],f=c===o?this.$D+(e-this.$W):e;if(c===l||c===u){var g=this.clone().set(d,1);g.$d[p](f),g.init(),this.$d=g.set(d,Math.min(this.$D,g.daysInMonth())).$d}else p&&this.$d[p](f);return this.init(),this},m.set=function(t,e){return this.clone().$set(t,e)},m.get=function(t){return this[E.p(t)]()},m.add=function(r,h){var d,p=this;r=Number(r);var f=E.p(h),g=function(t){var e=w(p);return E.w(e.date(e.date()+Math.round(t*r)),p)};if(f===l)return this.set(l,this.$M+r);if(f===u)return this.set(u,this.$y+r);if(f===o)return g(1);if(f===c)return g(7);var y=(d={},d[a]=e,d[s]=n,d[i]=t,d)[f]||1,m=this.$d.getTime()+r*y;return E.w(m,this)},m.subtract=function(t,e){return this.add(-1*t,e)},m.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return n.invalidDate||p;var r=t||"YYYY-MM-DDTHH:mm:ssZ",i=E.z(this),a=this.$H,s=this.$m,o=this.$M,c=n.weekdays,l=n.months,h=function(t,n,i,a){return t&&(t[n]||t(e,r))||i[n].slice(0,a)},u=function(t){return E.s(a%12||12,t,"0")},d=n.meridiem||function(t,e,n){var r=t<12?"AM":"PM";return n?r.toLowerCase():r},f={YY:String(this.$y).slice(-2),YYYY:this.$y,M:o+1,MM:E.s(o+1,2,"0"),MMM:h(n.monthsShort,o,l,3),MMMM:h(l,o),D:this.$D,DD:E.s(this.$D,2,"0"),d:String(this.$W),dd:h(n.weekdaysMin,this.$W,c,2),ddd:h(n.weekdaysShort,this.$W,c,3),dddd:c[this.$W],H:String(a),HH:E.s(a,2,"0"),h:u(1),hh:u(2),a:d(a,s,!0),A:d(a,s,!1),m:String(s),mm:E.s(s,2,"0"),s:String(this.$s),ss:E.s(this.$s,2,"0"),SSS:E.s(this.$ms,3,"0"),Z:i};return r.replace(g,(function(t,e){return e||f[t]||i.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(r,d,p){var f,g=E.p(d),y=w(r),m=(y.utcOffset()-this.utcOffset())*e,b=this-y,_=E.m(this,y);return _=(f={},f[u]=_/12,f[l]=_,f[h]=_/3,f[c]=(b-m)/6048e5,f[o]=(b-m)/864e5,f[s]=b/n,f[a]=b/e,f[i]=b/t,f)[g]||b,p?_:E.a(_)},m.daysInMonth=function(){return this.endOf(l).$D},m.$locale=function(){return x[this.$L]},m.locale=function(t,e){if(!t)return this.$L;var n=this.clone(),r=k(t,e,!0);return r&&(n.$L=r),n},m.clone=function(){return E.w(this.$d,this)},m.toDate=function(){return new Date(this.valueOf())},m.toJSON=function(){return this.isValid()?this.toISOString():null},m.toISOString=function(){return this.$d.toISOString()},m.toString=function(){return this.$d.toUTCString()},y}(),T=C.prototype;return w.prototype=T,[["$ms",r],["$s",i],["$m",a],["$H",s],["$W",o],["$M",l],["$y",u],["$D",d]].forEach((function(t){T[t[1]]=function(e){return this.$g(e,t[0],t[1])}})),w.extend=function(t,e){return t.$i||(t(e,C,w),t.$i=!0),w},w.locale=k,w.isDayjs=v,w.unix=function(t){return w(1e3*t)},w.en=x[_],w.Ls=x,w.p={},w}()},8734:function(t){t.exports=function(){"use strict";return function(t,e){var n=e.prototype,r=n.format;n.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return r.bind(this)(t);var i=this.$utils(),a=(t||"YYYY-MM-DDTHH:mm:ssZ").replace(/\[([^\]]+)]|Q|wo|ww|w|WW|W|zzz|z|gggg|GGGG|Do|X|x|k{1,2}|S/g,(function(t){switch(t){case"Q":return Math.ceil((e.$M+1)/3);case"Do":return n.ordinal(e.$D);case"gggg":return e.weekYear();case"GGGG":return e.isoWeekYear();case"wo":return n.ordinal(e.week(),"W");case"w":case"ww":return i.s(e.week(),"w"===t?1:2,"0");case"W":case"WW":return i.s(e.isoWeek(),"W"===t?1:2,"0");case"k":case"kk":return i.s(String(0===e.$H?24:e.$H),"k"===t?1:2,"0");case"X":return Math.floor(e.$d.getTime()/1e3);case"x":return e.$d.getTime();case"z":return"["+e.offsetName()+"]";case"zzz":return"["+e.offsetName("long")+"]";default:return t}}));return r.bind(this)(a)}}}()},285:function(t){t.exports=function(){"use strict";var t={LTS:"h:mm:ss A",LT:"h:mm A",L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},e=/(\[[^[]*\])|([-_:/.,()\s]+)|(A|a|YYYY|YY?|MM?M?M?|Do|DD?|hh?|HH?|mm?|ss?|S{1,3}|z|ZZ?)/g,n=/\d\d/,r=/\d\d?/,i=/\d*[^-_:/,()\s\d]+/,a={},s=function(t){return(t=+t)+(t>68?1900:2e3)},o=function(t){return function(e){this[t]=+e}},c=[/[+-]\d\d:?(\d\d)?|Z/,function(t){(this.zone||(this.zone={})).offset=function(t){if(!t)return 0;if("Z"===t)return 0;var e=t.match(/([+-]|\d\d)/g),n=60*e[1]+(+e[2]||0);return 0===n?0:"+"===e[0]?-n:n}(t)}],l=function(t){var e=a[t];return e&&(e.indexOf?e:e.s.concat(e.f))},h=function(t,e){var n,r=a.meridiem;if(r){for(var i=1;i<=24;i+=1)if(t.indexOf(r(i,0,e))>-1){n=i>12;break}}else n=t===(e?"pm":"PM");return n},u={A:[i,function(t){this.afternoon=h(t,!1)}],a:[i,function(t){this.afternoon=h(t,!0)}],S:[/\d/,function(t){this.milliseconds=100*+t}],SS:[n,function(t){this.milliseconds=10*+t}],SSS:[/\d{3}/,function(t){this.milliseconds=+t}],s:[r,o("seconds")],ss:[r,o("seconds")],m:[r,o("minutes")],mm:[r,o("minutes")],H:[r,o("hours")],h:[r,o("hours")],HH:[r,o("hours")],hh:[r,o("hours")],D:[r,o("day")],DD:[n,o("day")],Do:[i,function(t){var e=a.ordinal,n=t.match(/\d+/);if(this.day=n[0],e)for(var r=1;r<=31;r+=1)e(r).replace(/\[|\]/g,"")===t&&(this.day=r)}],M:[r,o("month")],MM:[n,o("month")],MMM:[i,function(t){var e=l("months"),n=(l("monthsShort")||e.map((function(t){return t.slice(0,3)}))).indexOf(t)+1;if(n<1)throw new Error;this.month=n%12||n}],MMMM:[i,function(t){var e=l("months").indexOf(t)+1;if(e<1)throw new Error;this.month=e%12||e}],Y:[/[+-]?\d+/,o("year")],YY:[n,function(t){this.year=s(t)}],YYYY:[/\d{4}/,o("year")],Z:c,ZZ:c};function d(n){var r,i;r=n,i=a&&a.formats;for(var s=(n=r.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(function(e,n,r){var a=r&&r.toUpperCase();return n||i[r]||t[r]||i[a].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(function(t,e,n){return e||n.slice(1)}))}))).match(e),o=s.length,c=0;c<o;c+=1){var l=s[c],h=u[l],d=h&&h[0],p=h&&h[1];s[c]=p?{regex:d,parser:p}:l.replace(/^\[|\]$/g,"")}return function(t){for(var e={},n=0,r=0;n<o;n+=1){var i=s[n];if("string"==typeof i)r+=i.length;else{var a=i.regex,c=i.parser,l=t.slice(r),h=a.exec(l)[0];c.call(e,h),t=t.replace(h,"")}}return function(t){var e=t.afternoon;if(void 0!==e){var n=t.hours;e?n<12&&(t.hours+=12):12===n&&(t.hours=0),delete t.afternoon}}(e),e}}return function(t,e,n){n.p.customParseFormat=!0,t&&t.parseTwoDigitYear&&(s=t.parseTwoDigitYear);var r=e.prototype,i=r.parse;r.parse=function(t){var e=t.date,r=t.utc,s=t.args;this.$u=r;var o=s[1];if("string"==typeof o){var c=!0===s[2],l=!0===s[3],h=c||l,u=s[2];l&&(u=s[2]),a=this.$locale(),!c&&u&&(a=n.Ls[u]),this.$d=function(t,e,n){try{if(["x","X"].indexOf(e)>-1)return new Date(("X"===e?1e3:1)*t);var r=d(e)(t),i=r.year,a=r.month,s=r.day,o=r.hours,c=r.minutes,l=r.seconds,h=r.milliseconds,u=r.zone,p=new Date,f=s||(i||a?1:p.getDate()),g=i||p.getFullYear(),y=0;i&&!a||(y=a>0?a-1:p.getMonth());var m=o||0,b=c||0,_=l||0,x=h||0;return u?new Date(Date.UTC(g,y,f,m,b,_,x+60*u.offset*1e3)):n?new Date(Date.UTC(g,y,f,m,b,_,x)):new Date(g,y,f,m,b,_,x)}catch(t){return new Date("")}}(e,o,r),this.init(),u&&!0!==u&&(this.$L=this.locale(u).$L),h&&e!=this.format(o)&&(this.$d=new Date("")),a={}}else if(o instanceof Array)for(var p=o.length,f=1;f<=p;f+=1){s[1]=o[f-1];var g=n.apply(this,s);if(g.isValid()){this.$d=g.$d,this.$L=g.$L,this.init();break}f===p&&(this.$d=new Date(""))}else i.call(this,t)}}}()},9542:function(t){t.exports=function(){"use strict";var t="day";return function(e,n,r){var i=function(e){return e.add(4-e.isoWeekday(),t)},a=n.prototype;a.isoWeekYear=function(){return i(this).year()},a.isoWeek=function(e){if(!this.$utils().u(e))return this.add(7*(e-this.isoWeek()),t);var n,a,s,o=i(this),c=(n=this.isoWeekYear(),s=4-(a=(this.$u?r.utc:r)().year(n).startOf("year")).isoWeekday(),a.isoWeekday()>4&&(s+=7),a.add(s,t));return o.diff(c,"week")+1},a.isoWeekday=function(t){return this.$utils().u(t)?this.day()||7:this.day(this.day()%7?t:t-7)};var s=a.startOf;a.startOf=function(t,e){var n=this.$utils(),r=!!n.u(e)||e;return"isoweek"===n.p(t)?r?this.date(this.date()-(this.isoWeekday()-1)).startOf("day"):this.date(this.date()-1-(this.isoWeekday()-1)+7).endOf("day"):s.bind(this)(t,e)}}}()},7856:function(t){t.exports=function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,n){return e=Object.setPrototypeOf||function(t,e){return t.__proto__=e,t},e(t,n)}function n(){if("undefined"==typeof Reflect||!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}function r(t,i,a){return r=n()?Reflect.construct:function(t,n,r){var i=[null];i.push.apply(i,n);var a=new(Function.bind.apply(t,i));return r&&e(a,r.prototype),a},r.apply(null,arguments)}function i(t){return a(t)||s(t)||o(t)||l()}function a(t){if(Array.isArray(t))return c(t)}function s(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]||null!=t["@@iterator"])return Array.from(t)}function o(t,e){if(t){if("string"==typeof t)return c(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n||"Set"===n?Array.from(t):"Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?c(t,e):void 0}}function c(t,e){(null==e||e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function l(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var h=Object.hasOwnProperty,u=Object.setPrototypeOf,d=Object.isFrozen,p=Object.getPrototypeOf,f=Object.getOwnPropertyDescriptor,g=Object.freeze,y=Object.seal,m=Object.create,b="undefined"!=typeof Reflect&&Reflect,_=b.apply,x=b.construct;_||(_=function(t,e,n){return t.apply(e,n)}),g||(g=function(t){return t}),y||(y=function(t){return t}),x||(x=function(t,e){return r(t,i(e))});var v=D(Array.prototype.forEach),k=D(Array.prototype.pop),w=D(Array.prototype.push),E=D(String.prototype.toLowerCase),C=D(String.prototype.toString),T=D(String.prototype.match),S=D(String.prototype.replace),A=D(String.prototype.indexOf),L=D(String.prototype.trim),B=D(RegExp.prototype.test),N=O(TypeError);function D(t){return function(e){for(var n=arguments.length,r=new Array(n>1?n-1:0),i=1;i<n;i++)r[i-1]=arguments[i];return _(t,e,r)}}function O(t){return function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];return x(t,n)}}function M(t,e,n){n=n||E,u&&u(t,null);for(var r=e.length;r--;){var i=e[r];if("string"==typeof i){var a=n(i);a!==i&&(d(e)||(e[r]=a),i=a)}t[i]=!0}return t}function I(t){var e,n=m(null);for(e in t)!0===_(h,t,[e])&&(n[e]=t[e]);return n}function F(t,e){for(;null!==t;){var n=f(t,e);if(n){if(n.get)return D(n.get);if("function"==typeof n.value)return D(n.value)}t=p(t)}function r(t){return console.warn("fallback value for",t),null}return r}var $=g(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","section","select","shadow","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),R=g(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Z=g(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),P=g(["animate","color-profile","cursor","discard","fedropshadow","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),j=g(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover"]),Y=g(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),z=g(["#text"]),U=g(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","face","for","headers","height","hidden","high","href","hreflang","id","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","xmlns","slot"]),W=g(["accent-height","accumulate","additive","alignment-baseline","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),q=g(["accent","accentunder","align","bevelled","close","columnsalign","columnlines","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lspace","lquote","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),H=g(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),V=y(/\{\{[\w\W]*|[\w\W]*\}\}/gm),G=y(/<%[\w\W]*|[\w\W]*%>/gm),X=y(/\${[\w\W]*}/gm),K=y(/^data-[\-\w.\u00B7-\uFFFF]/),Q=y(/^aria-[\-\w]+$/),J=y(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),tt=y(/^(?:\w+script|data):/i),et=y(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),nt=y(/^html$/i),rt=function(){return"undefined"==typeof window?null:window},it=function(e,n){if("object"!==t(e)||"function"!=typeof e.createPolicy)return null;var r=null,i="data-tt-policy-suffix";n.currentScript&&n.currentScript.hasAttribute(i)&&(r=n.currentScript.getAttribute(i));var a="dompurify"+(r?"#"+r:"");try{return e.createPolicy(a,{createHTML:function(t){return t},createScriptURL:function(t){return t}})}catch(s){return console.warn("TrustedTypes policy "+a+" could not be created."),null}};function at(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:rt(),n=function(t){return at(t)};if(n.version="2.4.3",n.removed=[],!e||!e.document||9!==e.document.nodeType)return n.isSupported=!1,n;var r=e.document,a=e.document,s=e.DocumentFragment,o=e.HTMLTemplateElement,c=e.Node,l=e.Element,h=e.NodeFilter,u=e.NamedNodeMap,d=void 0===u?e.NamedNodeMap||e.MozNamedAttrMap:u,p=e.HTMLFormElement,f=e.DOMParser,y=e.trustedTypes,m=l.prototype,b=F(m,"cloneNode"),_=F(m,"nextSibling"),x=F(m,"childNodes"),D=F(m,"parentNode");if("function"==typeof o){var O=a.createElement("template");O.content&&O.content.ownerDocument&&(a=O.content.ownerDocument)}var st=it(y,r),ot=st?st.createHTML(""):"",ct=a,lt=ct.implementation,ht=ct.createNodeIterator,ut=ct.createDocumentFragment,dt=ct.getElementsByTagName,pt=r.importNode,ft={};try{ft=I(a).documentMode?a.documentMode:{}}catch(De){}var gt={};n.isSupported="function"==typeof D&&lt&&void 0!==lt.createHTMLDocument&&9!==ft;var yt,mt,bt=V,_t=G,xt=X,vt=K,kt=Q,wt=tt,Et=et,Ct=J,Tt=null,St=M({},[].concat(i($),i(R),i(Z),i(j),i(z))),At=null,Lt=M({},[].concat(i(U),i(W),i(q),i(H))),Bt=Object.seal(Object.create(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),Nt=null,Dt=null,Ot=!0,Mt=!0,It=!1,Ft=!1,$t=!1,Rt=!1,Zt=!1,Pt=!1,jt=!1,Yt=!1,zt=!0,Ut=!1,Wt="user-content-",qt=!0,Ht=!1,Vt={},Gt=null,Xt=M({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","style","svg","template","thead","title","video","xmp"]),Kt=null,Qt=M({},["audio","video","img","source","image","track"]),Jt=null,te=M({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),ee="http://www.w3.org/1998/Math/MathML",ne="http://www.w3.org/2000/svg",re="http://www.w3.org/1999/xhtml",ie=re,ae=!1,se=null,oe=M({},[ee,ne,re],C),ce=["application/xhtml+xml","text/html"],le="text/html",he=null,ue=a.createElement("form"),de=function(t){return t instanceof RegExp||t instanceof Function},pe=function(e){he&&he===e||(e&&"object"===t(e)||(e={}),e=I(e),yt=yt=-1===ce.indexOf(e.PARSER_MEDIA_TYPE)?le:e.PARSER_MEDIA_TYPE,mt="application/xhtml+xml"===yt?C:E,Tt="ALLOWED_TAGS"in e?M({},e.ALLOWED_TAGS,mt):St,At="ALLOWED_ATTR"in e?M({},e.ALLOWED_ATTR,mt):Lt,se="ALLOWED_NAMESPACES"in e?M({},e.ALLOWED_NAMESPACES,C):oe,Jt="ADD_URI_SAFE_ATTR"in e?M(I(te),e.ADD_URI_SAFE_ATTR,mt):te,Kt="ADD_DATA_URI_TAGS"in e?M(I(Qt),e.ADD_DATA_URI_TAGS,mt):Qt,Gt="FORBID_CONTENTS"in e?M({},e.FORBID_CONTENTS,mt):Xt,Nt="FORBID_TAGS"in e?M({},e.FORBID_TAGS,mt):{},Dt="FORBID_ATTR"in e?M({},e.FORBID_ATTR,mt):{},Vt="USE_PROFILES"in e&&e.USE_PROFILES,Ot=!1!==e.ALLOW_ARIA_ATTR,Mt=!1!==e.ALLOW_DATA_ATTR,It=e.ALLOW_UNKNOWN_PROTOCOLS||!1,Ft=e.SAFE_FOR_TEMPLATES||!1,$t=e.WHOLE_DOCUMENT||!1,Pt=e.RETURN_DOM||!1,jt=e.RETURN_DOM_FRAGMENT||!1,Yt=e.RETURN_TRUSTED_TYPE||!1,Zt=e.FORCE_BODY||!1,zt=!1!==e.SANITIZE_DOM,Ut=e.SANITIZE_NAMED_PROPS||!1,qt=!1!==e.KEEP_CONTENT,Ht=e.IN_PLACE||!1,Ct=e.ALLOWED_URI_REGEXP||Ct,ie=e.NAMESPACE||re,e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck)&&(Bt.tagNameCheck=e.CUSTOM_ELEMENT_HANDLING.tagNameCheck),e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)&&(Bt.attributeNameCheck=e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck),e.CUSTOM_ELEMENT_HANDLING&&"boolean"==typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements&&(Bt.allowCustomizedBuiltInElements=e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements),Ft&&(Mt=!1),jt&&(Pt=!0),Vt&&(Tt=M({},i(z)),At=[],!0===Vt.html&&(M(Tt,$),M(At,U)),!0===Vt.svg&&(M(Tt,R),M(At,W),M(At,H)),!0===Vt.svgFilters&&(M(Tt,Z),M(At,W),M(At,H)),!0===Vt.mathMl&&(M(Tt,j),M(At,q),M(At,H))),e.ADD_TAGS&&(Tt===St&&(Tt=I(Tt)),M(Tt,e.ADD_TAGS,mt)),e.ADD_ATTR&&(At===Lt&&(At=I(At)),M(At,e.ADD_ATTR,mt)),e.ADD_URI_SAFE_ATTR&&M(Jt,e.ADD_URI_SAFE_ATTR,mt),e.FORBID_CONTENTS&&(Gt===Xt&&(Gt=I(Gt)),M(Gt,e.FORBID_CONTENTS,mt)),qt&&(Tt["#text"]=!0),$t&&M(Tt,["html","head","body"]),Tt.table&&(M(Tt,["tbody"]),delete Nt.tbody),g&&g(e),he=e)},fe=M({},["mi","mo","mn","ms","mtext"]),ge=M({},["foreignobject","desc","title","annotation-xml"]),ye=M({},["title","style","font","a","script"]),me=M({},R);M(me,Z),M(me,P);var be=M({},j);M(be,Y);var _e=function(t){var e=D(t);e&&e.tagName||(e={namespaceURI:ie,tagName:"template"});var n=E(t.tagName),r=E(e.tagName);return!!se[t.namespaceURI]&&(t.namespaceURI===ne?e.namespaceURI===re?"svg"===n:e.namespaceURI===ee?"svg"===n&&("annotation-xml"===r||fe[r]):Boolean(me[n]):t.namespaceURI===ee?e.namespaceURI===re?"math"===n:e.namespaceURI===ne?"math"===n&&ge[r]:Boolean(be[n]):t.namespaceURI===re?!(e.namespaceURI===ne&&!ge[r])&&!(e.namespaceURI===ee&&!fe[r])&&!be[n]&&(ye[n]||!me[n]):!("application/xhtml+xml"!==yt||!se[t.namespaceURI]))},xe=function(t){w(n.removed,{element:t});try{t.parentNode.removeChild(t)}catch(De){try{t.outerHTML=ot}catch(De){t.remove()}}},ve=function(t,e){try{w(n.removed,{attribute:e.getAttributeNode(t),from:e})}catch(De){w(n.removed,{attribute:null,from:e})}if(e.removeAttribute(t),"is"===t&&!At[t])if(Pt||jt)try{xe(e)}catch(De){}else try{e.setAttribute(t,"")}catch(De){}},ke=function(t){var e,n;if(Zt)t="<remove></remove>"+t;else{var r=T(t,/^[\r\n\t ]+/);n=r&&r[0]}"application/xhtml+xml"===yt&&ie===re&&(t='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+t+"</body></html>");var i=st?st.createHTML(t):t;if(ie===re)try{e=(new f).parseFromString(i,yt)}catch(De){}if(!e||!e.documentElement){e=lt.createDocument(ie,"template",null);try{e.documentElement.innerHTML=ae?ot:i}catch(De){}}var s=e.body||e.documentElement;return t&&n&&s.insertBefore(a.createTextNode(n),s.childNodes[0]||null),ie===re?dt.call(e,$t?"html":"body")[0]:$t?e.documentElement:s},we=function(t){return ht.call(t.ownerDocument||t,t,h.SHOW_ELEMENT|h.SHOW_COMMENT|h.SHOW_TEXT,null,!1)},Ee=function(t){return t instanceof p&&("string"!=typeof t.nodeName||"string"!=typeof t.textContent||"function"!=typeof t.removeChild||!(t.attributes instanceof d)||"function"!=typeof t.removeAttribute||"function"!=typeof t.setAttribute||"string"!=typeof t.namespaceURI||"function"!=typeof t.insertBefore||"function"!=typeof t.hasChildNodes)},Ce=function(e){return"object"===t(c)?e instanceof c:e&&"object"===t(e)&&"number"==typeof e.nodeType&&"string"==typeof e.nodeName},Te=function(t,e,r){gt[t]&&v(gt[t],(function(t){t.call(n,e,r,he)}))},Se=function(t){var e;if(Te("beforeSanitizeElements",t,null),Ee(t))return xe(t),!0;if(B(/[\u0080-\uFFFF]/,t.nodeName))return xe(t),!0;var r=mt(t.nodeName);if(Te("uponSanitizeElement",t,{tagName:r,allowedTags:Tt}),t.hasChildNodes()&&!Ce(t.firstElementChild)&&(!Ce(t.content)||!Ce(t.content.firstElementChild))&&B(/<[/\w]/g,t.innerHTML)&&B(/<[/\w]/g,t.textContent))return xe(t),!0;if("select"===r&&B(/<template/i,t.innerHTML))return xe(t),!0;if(!Tt[r]||Nt[r]){if(!Nt[r]&&Le(r)){if(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,r))return!1;if(Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(r))return!1}if(qt&&!Gt[r]){var i=D(t)||t.parentNode,a=x(t)||t.childNodes;if(a&&i)for(var s=a.length-1;s>=0;--s)i.insertBefore(b(a[s],!0),_(t))}return xe(t),!0}return t instanceof l&&!_e(t)?(xe(t),!0):"noscript"!==r&&"noembed"!==r||!B(/<\/no(script|embed)/i,t.innerHTML)?(Ft&&3===t.nodeType&&(e=t.textContent,e=S(e,bt," "),e=S(e,_t," "),e=S(e,xt," "),t.textContent!==e&&(w(n.removed,{element:t.cloneNode()}),t.textContent=e)),Te("afterSanitizeElements",t,null),!1):(xe(t),!0)},Ae=function(t,e,n){if(zt&&("id"===e||"name"===e)&&(n in a||n in ue))return!1;if(Mt&&!Dt[e]&&B(vt,e));else if(Ot&&B(kt,e));else if(!At[e]||Dt[e]){if(!(Le(t)&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,t)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(t))&&(Bt.attributeNameCheck instanceof RegExp&&B(Bt.attributeNameCheck,e)||Bt.attributeNameCheck instanceof Function&&Bt.attributeNameCheck(e))||"is"===e&&Bt.allowCustomizedBuiltInElements&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,n)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(n))))return!1}else if(Jt[e]);else if(B(Ct,S(n,Et,"")));else if("src"!==e&&"xlink:href"!==e&&"href"!==e||"script"===t||0!==A(n,"data:")||!Kt[t])if(It&&!B(wt,S(n,Et,"")));else if(n)return!1;return!0},Le=function(t){return t.indexOf("-")>0},Be=function(e){var r,i,a,s;Te("beforeSanitizeAttributes",e,null);var o=e.attributes;if(o){var c={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:At};for(s=o.length;s--;){var l=r=o[s],h=l.name,u=l.namespaceURI;if(i="value"===h?r.value:L(r.value),a=mt(h),c.attrName=a,c.attrValue=i,c.keepAttr=!0,c.forceKeepAttr=void 0,Te("uponSanitizeAttribute",e,c),i=c.attrValue,!c.forceKeepAttr&&(ve(h,e),c.keepAttr))if(B(/\/>/i,i))ve(h,e);else{Ft&&(i=S(i,bt," "),i=S(i,_t," "),i=S(i,xt," "));var d=mt(e.nodeName);if(Ae(d,a,i)){if(!Ut||"id"!==a&&"name"!==a||(ve(h,e),i=Wt+i),st&&"object"===t(y)&&"function"==typeof y.getAttributeType)if(u);else switch(y.getAttributeType(d,a)){case"TrustedHTML":i=st.createHTML(i);break;case"TrustedScriptURL":i=st.createScriptURL(i)}try{u?e.setAttributeNS(u,h,i):e.setAttribute(h,i),k(n.removed)}catch(De){}}}}Te("afterSanitizeAttributes",e,null)}},Ne=function t(e){var n,r=we(e);for(Te("beforeSanitizeShadowDOM",e,null);n=r.nextNode();)Te("uponSanitizeShadowNode",n,null),Se(n)||(n.content instanceof s&&t(n.content),Be(n));Te("afterSanitizeShadowDOM",e,null)};return n.sanitize=function(i){var a,o,l,h,u,d=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};if((ae=!i)&&(i="\x3c!--\x3e"),"string"!=typeof i&&!Ce(i)){if("function"!=typeof i.toString)throw N("toString is not a function");if("string"!=typeof(i=i.toString()))throw N("dirty is not a string, aborting")}if(!n.isSupported){if("object"===t(e.toStaticHTML)||"function"==typeof e.toStaticHTML){if("string"==typeof i)return e.toStaticHTML(i);if(Ce(i))return e.toStaticHTML(i.outerHTML)}return i}if(Rt||pe(d),n.removed=[],"string"==typeof i&&(Ht=!1),Ht){if(i.nodeName){var p=mt(i.nodeName);if(!Tt[p]||Nt[p])throw N("root node is forbidden and cannot be sanitized in-place")}}else if(i instanceof c)1===(o=(a=ke("\x3c!----\x3e")).ownerDocument.importNode(i,!0)).nodeType&&"BODY"===o.nodeName||"HTML"===o.nodeName?a=o:a.appendChild(o);else{if(!Pt&&!Ft&&!$t&&-1===i.indexOf("<"))return st&&Yt?st.createHTML(i):i;if(!(a=ke(i)))return Pt?null:Yt?ot:""}a&&Zt&&xe(a.firstChild);for(var f=we(Ht?i:a);l=f.nextNode();)3===l.nodeType&&l===h||Se(l)||(l.content instanceof s&&Ne(l.content),Be(l),h=l);if(h=null,Ht)return i;if(Pt){if(jt)for(u=ut.call(a.ownerDocument);a.firstChild;)u.appendChild(a.firstChild);else u=a;return At.shadowroot&&(u=pt.call(r,u,!0)),u}var g=$t?a.outerHTML:a.innerHTML;return $t&&Tt["!doctype"]&&a.ownerDocument&&a.ownerDocument.doctype&&a.ownerDocument.doctype.name&&B(nt,a.ownerDocument.doctype.name)&&(g="<!DOCTYPE "+a.ownerDocument.doctype.name+">\n"+g),Ft&&(g=S(g,bt," "),g=S(g,_t," "),g=S(g,xt," ")),st&&Yt?st.createHTML(g):g},n.setConfig=function(t){pe(t),Rt=!0},n.clearConfig=function(){he=null,Rt=!1},n.isValidAttribute=function(t,e,n){he||pe({});var r=mt(t),i=mt(e);return Ae(r,i,n)},n.addHook=function(t,e){"function"==typeof e&&(gt[t]=gt[t]||[],w(gt[t],e))},n.removeHook=function(t){if(gt[t])return k(gt[t])},n.removeHooks=function(t){gt[t]&&(gt[t]=[])},n.removeAllHooks=function(){gt={}},n}return at()}()},6432:(t,e,n)=>{"use strict";n.d(e,{a:()=>Mn,b:()=>Fs,c:()=>Yt,d:()=>Dn,e:()=>Pt,f:()=>Ys,g:()=>ar,h:()=>mc,i:()=>hs,j:()=>Pr,k:()=>Yr,l:()=>Nt,m:()=>Dr,n:()=>Ft,o:()=>dp,p:()=>bo,s:()=>pr});const r=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];var r=Array.from("string"==typeof t?[t]:t);r[r.length-1]=r[r.length-1].replace(/\r?\n([\t ]*)$/,"");var i=r.reduce((function(t,e){var n=e.match(/\n([\t ]+|(?!\s).)/g);return n?t.concat(n.map((function(t){var e,n;return null!==(n=null===(e=t.match(/[\t ]/g))||void 0===e?void 0:e.length)&&void 0!==n?n:0}))):t}),[]);if(i.length){var a=new RegExp("\n[\t ]{"+Math.min.apply(Math,i)+"}","g");r=r.map((function(t){return t.replace(a,"\n")}))}r[0]=r[0].replace(/^\r?\n/,"");var s=r[0];return e.forEach((function(t,e){var n=s.match(/(?:^|\n)( *)$/),i=n?n[1]:"",a=t;"string"==typeof t&&t.includes("\n")&&(a=String(t).split("\n").map((function(t,e){return 0===e?t:""+i+t})).join("\n")),s+=a+r[e+1]})),s};var i=n(7484),a=n.n(i),s=n(7967),o=n(9373),l=n(7856),h=n.n(l),u=n(1610),d=n(1691);const p=(t,e)=>{const n=u.Z.parse(t);for(const r in e)n[r]=d.Z.channel.clamp[r](e[r]);return u.Z.stringify(n)},f=(t,e)=>{const n=u.Z.parse(t),r={};for(const i in e)e[i]&&(r[i]=n[i]+e[i]);return p(t,r)};var g=n(1883);const y=(t,e,n=0,r=1)=>{if("number"!=typeof t)return p(t,{a:e});const i=g.Z.set({r:d.Z.channel.clamp.r(t),g:d.Z.channel.clamp.g(e),b:d.Z.channel.clamp.b(n),a:d.Z.channel.clamp.a(r)});return u.Z.stringify(i)},m=(t,e,n=50)=>{const{r:r,g:i,b:a,a:s}=u.Z.parse(t),{r:o,g:c,b:l,a:h}=u.Z.parse(e),d=n/100,p=2*d-1,f=s-h,g=((p*f==-1?p:(p+f)/(1+p*f))+1)/2,m=1-g;return y(r*g+o*m,i*g+c*m,a*g+l*m,s*d+h*(1-d))},b=(t,e=100)=>{const n=u.Z.parse(t);return n.r=255-n.r,n.g=255-n.g,n.b=255-n.b,m(n,t,e)};var _=n(7201),x=n(5920),v=n(2454),k="comm",w="rule",E="decl",C=Math.abs,T=String.fromCharCode;Object.assign;function S(t){return t.trim()}function A(t,e,n){return t.replace(e,n)}function L(t,e){return t.indexOf(e)}function B(t,e){return 0|t.charCodeAt(e)}function N(t,e,n){return t.slice(e,n)}function D(t){return t.length}function O(t){return t.length}function M(t,e){return e.push(t),t}function I(t,e){for(var n="",r=O(t),i=0;i<r;i++)n+=e(t[i],i,t,e)||"";return n}function F(t,e,n,r){switch(t.type){case"@import":case E:return t.return=t.return||t.value;case k:return"";case"@keyframes":return t.return=t.value+"{"+I(t.children,r)+"}";case w:t.value=t.props.join(",")}return D(n=I(t.children,r))?t.return=t.value+"{"+n+"}":""}var $=1,R=1,Z=0,P=0,j=0,Y="";function z(t,e,n,r,i,a,s){return{value:t,root:e,parent:n,type:r,props:i,children:a,line:$,column:R,length:s,return:""}}function U(){return j=P>0?B(Y,--P):0,R--,10===j&&(R=1,$--),j}function W(){return j=P<Z?B(Y,P++):0,R++,10===j&&(R=1,$++),j}function q(){return B(Y,P)}function H(){return P}function V(t,e){return N(Y,t,e)}function G(t){switch(t){case 0:case 9:case 10:case 13:case 32:return 5;case 33:case 43:case 44:case 47:case 62:case 64:case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function X(t){return $=R=1,Z=D(Y=t),P=0,[]}function K(t){return Y="",t}function Q(t){return S(V(P-1,et(91===t?t+2:40===t?t+1:t)))}function J(t){for(;(j=q())&&j<33;)W();return G(t)>2||G(j)>3?"":" "}function tt(t,e){for(;--e&&W()&&!(j<48||j>102||j>57&&j<65||j>70&&j<97););return V(t,H()+(e<6&&32==q()&&32==W()))}function et(t){for(;W();)switch(j){case t:return P;case 34:case 39:34!==t&&39!==t&&et(j);break;case 40:41===t&&et(t);break;case 92:W()}return P}function nt(t,e){for(;W()&&t+j!==57&&(t+j!==84||47!==q()););return"/*"+V(e,P-1)+"*"+T(47===t?t:W())}function rt(t){for(;!G(q());)W();return V(t,P)}function it(t){return K(at("",null,null,null,[""],t=X(t),0,[0],t))}function at(t,e,n,r,i,a,s,o,c){for(var l=0,h=0,u=s,d=0,p=0,f=0,g=1,y=1,m=1,b=0,_="",x=i,v=a,k=r,w=_;y;)switch(f=b,b=W()){case 40:if(108!=f&&58==B(w,u-1)){-1!=L(w+=A(Q(b),"&","&\f"),"&\f")&&(m=-1);break}case 34:case 39:case 91:w+=Q(b);break;case 9:case 10:case 13:case 32:w+=J(f);break;case 92:w+=tt(H()-1,7);continue;case 47:switch(q()){case 42:case 47:M(ot(nt(W(),H()),e,n),c);break;default:w+="/"}break;case 123*g:o[l++]=D(w)*m;case 125*g:case 59:case 0:switch(b){case 0:case 125:y=0;case 59+h:p>0&&D(w)-u&&M(p>32?ct(w+";",r,n,u-1):ct(A(w," ","")+";",r,n,u-2),c);break;case 59:w+=";";default:if(M(k=st(w,e,n,l,h,i,o,_,x=[],v=[],u),a),123===b)if(0===h)at(w,e,k,k,x,a,u,o,v);else switch(99===d&&110===B(w,3)?100:d){case 100:case 109:case 115:at(t,k,k,r&&M(st(t,k,k,0,0,i,o,_,i,x=[],u),v),i,v,u,o,r?x:v);break;default:at(w,k,k,k,[""],v,0,o,v)}}l=h=p=0,g=m=1,_=w="",u=s;break;case 58:u=1+D(w),p=f;default:if(g<1)if(123==b)--g;else if(125==b&&0==g++&&125==U())continue;switch(w+=T(b),b*g){case 38:m=h>0?1:(w+="\f",-1);break;case 44:o[l++]=(D(w)-1)*m,m=1;break;case 64:45===q()&&(w+=Q(W())),d=q(),h=u=D(_=w+=rt(H())),b++;break;case 45:45===f&&2==D(w)&&(g=0)}}return a}function st(t,e,n,r,i,a,s,o,c,l,h){for(var u=i-1,d=0===i?a:[""],p=O(d),f=0,g=0,y=0;f<r;++f)for(var m=0,b=N(t,u+1,u=C(g=s[f])),_=t;m<p;++m)(_=S(g>0?d[m]+" "+b:A(b,/&\f/g,d[m])))&&(c[y++]=_);return z(t,e,n,0===i?w:o,c,l,h)}function ot(t,e,n){return z(t,e,n,k,T(j),N(t,2,-2),0)}function ct(t,e,n,r){return z(t,e,n,E,N(t,0,r),N(t,r+1,-1),r)}var lt=n(277),ht=n(5625),ut=n(9354);const dt=[];for(let c=0;c<256;++c)dt.push((c+256).toString(16).slice(1));function pt(t,e=0){return(dt[t[e+0]]+dt[t[e+1]]+dt[t[e+2]]+dt[t[e+3]]+"-"+dt[t[e+4]]+dt[t[e+5]]+"-"+dt[t[e+6]]+dt[t[e+7]]+"-"+dt[t[e+8]]+dt[t[e+9]]+"-"+dt[t[e+10]]+dt[t[e+11]]+dt[t[e+12]]+dt[t[e+13]]+dt[t[e+14]]+dt[t[e+15]]).toLowerCase()}const ft=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000)$/i;const gt=function(t){return"string"==typeof t&&ft.test(t)};const yt=function(t){if(!gt(t))throw TypeError("Invalid UUID");let e;const n=new Uint8Array(16);return n[0]=(e=parseInt(t.slice(0,8),16))>>>24,n[1]=e>>>16&255,n[2]=e>>>8&255,n[3]=255&e,n[4]=(e=parseInt(t.slice(9,13),16))>>>8,n[5]=255&e,n[6]=(e=parseInt(t.slice(14,18),16))>>>8,n[7]=255&e,n[8]=(e=parseInt(t.slice(19,23),16))>>>8,n[9]=255&e,n[10]=(e=parseInt(t.slice(24,36),16))/1099511627776&255,n[11]=e/4294967296&255,n[12]=e>>>24&255,n[13]=e>>>16&255,n[14]=e>>>8&255,n[15]=255&e,n};function mt(t,e,n,r){switch(t){case 0:return e&n^~e&r;case 1:case 3:return e^n^r;case 2:return e&n^e&r^n&r}}function bt(t,e){return t<<e|t>>>32-e}const _t=function(t){const e=[1518500249,1859775393,2400959708,3395469782],n=[1732584193,4023233417,2562383102,271733878,3285377520];if("string"==typeof t){const e=unescape(encodeURIComponent(t));t=[];for(let n=0;n<e.length;++n)t.push(e.charCodeAt(n))}else Array.isArray(t)||(t=Array.prototype.slice.call(t));t.push(128);const r=t.length/4+2,i=Math.ceil(r/16),a=new Array(i);for(let s=0;s<i;++s){const e=new Uint32Array(16);for(let n=0;n<16;++n)e[n]=t[64*s+4*n]<<24|t[64*s+4*n+1]<<16|t[64*s+4*n+2]<<8|t[64*s+4*n+3];a[s]=e}a[i-1][14]=8*(t.length-1)/Math.pow(2,32),a[i-1][14]=Math.floor(a[i-1][14]),a[i-1][15]=8*(t.length-1)&4294967295;for(let s=0;s<i;++s){const t=new Uint32Array(80);for(let e=0;e<16;++e)t[e]=a[s][e];for(let e=16;e<80;++e)t[e]=bt(t[e-3]^t[e-8]^t[e-14]^t[e-16],1);let r=n[0],i=n[1],o=n[2],c=n[3],l=n[4];for(let n=0;n<80;++n){const a=Math.floor(n/20),s=bt(r,5)+mt(a,i,o,c)+l+e[a]+t[n]>>>0;l=c,c=o,o=bt(i,30)>>>0,i=r,r=s}n[0]=n[0]+r>>>0,n[1]=n[1]+i>>>0,n[2]=n[2]+o>>>0,n[3]=n[3]+c>>>0,n[4]=n[4]+l>>>0}return[n[0]>>24&255,n[0]>>16&255,n[0]>>8&255,255&n[0],n[1]>>24&255,n[1]>>16&255,n[1]>>8&255,255&n[1],n[2]>>24&255,n[2]>>16&255,n[2]>>8&255,255&n[2],n[3]>>24&255,n[3]>>16&255,n[3]>>8&255,255&n[3],n[4]>>24&255,n[4]>>16&255,n[4]>>8&255,255&n[4]]},xt=function(t,e,n){function r(t,r,i,a){var s;if("string"==typeof t&&(t=function(t){t=unescape(encodeURIComponent(t));const e=[];for(let n=0;n<t.length;++n)e.push(t.charCodeAt(n));return e}(t)),"string"==typeof r&&(r=yt(r)),16!==(null===(s=r)||void 0===s?void 0:s.length))throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");let o=new Uint8Array(16+t.length);if(o.set(r),o.set(t,r.length),o=n(o),o[6]=15&o[6]|e,o[8]=63&o[8]|128,i){a=a||0;for(let t=0;t<16;++t)i[a+t]=o[t];return i}return pt(o)}try{r.name=t}catch(i){}return r.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",r.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8",r}("v5",80,_t),vt=xt;n(1518),n(6225);var kt=n(3349),wt=(n(3352),n(2930),n(9542)),Et=n.n(wt),Ct=n(285),Tt=n.n(Ct),St=n(8734),At=n.n(St),Lt=n(9697);const Bt={trace:0,debug:1,info:2,warn:3,error:4,fatal:5},Nt={trace:(...t)=>{},debug:(...t)=>{},info:(...t)=>{},warn:(...t)=>{},error:(...t)=>{},fatal:(...t)=>{}},Dt=function(t="fatal"){let e=Bt.fatal;"string"==typeof t?(t=t.toLowerCase())in Bt&&(e=Bt[t]):"number"==typeof t&&(e=t),Nt.trace=()=>{},Nt.debug=()=>{},Nt.info=()=>{},Nt.warn=()=>{},Nt.error=()=>{},Nt.fatal=()=>{},e<=Bt.fatal&&(Nt.fatal=console.error?console.error.bind(console,Ot("FATAL"),"color: orange"):console.log.bind(console,"\x1b[35m",Ot("FATAL"))),e<=Bt.error&&(Nt.error=console.error?console.error.bind(console,Ot("ERROR"),"color: orange"):console.log.bind(console,"\x1b[31m",Ot("ERROR"))),e<=Bt.warn&&(Nt.warn=console.warn?console.warn.bind(console,Ot("WARN"),"color: orange"):console.log.bind(console,"\x1b[33m",Ot("WARN"))),e<=Bt.info&&(Nt.info=console.info?console.info.bind(console,Ot("INFO"),"color: lightblue"):console.log.bind(console,"\x1b[34m",Ot("INFO"))),e<=Bt.debug&&(Nt.debug=console.debug?console.debug.bind(console,Ot("DEBUG"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("DEBUG"))),e<=Bt.trace&&(Nt.trace=console.debug?console.debug.bind(console,Ot("TRACE"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("TRACE")))},Ot=t=>`%c${a()().format("ss.SSS")} : ${t} : `,Mt=t=>h().sanitize(t),It=(t,e)=>{var n;if(!1!==(null==(n=e.flowchart)?void 0:n.htmlLabels)){const n=e.securityLevel;"antiscript"===n||"strict"===n?t=Mt(t):"loose"!==n&&(t=(t=(t=Zt(t)).replace(/</g,"&lt;").replace(/>/g,"&gt;")).replace(/=/g,"&equals;"),t=Rt(t))}return t},Ft=(t,e)=>t?t=e.dompurifyConfig?h().sanitize(It(t,e),e.dompurifyConfig).toString():h().sanitize(It(t,e),{FORBID_TAGS:["style"]}).toString():t,$t=/<br\s*\/?>/gi,Rt=t=>t.replace(/#br#/g,"<br/>"),Zt=t=>t.replace($t,"#br#"),Pt=t=>!1!==t&&!["false","null","0"].includes(String(t).trim().toLowerCase()),jt=function(t){let e=t;if(t.split("~").length-1>=2){let t=e;do{e=t,t=e.replace(/~([^\s,:;]+)~/,"<$1>")}while(t!=e);return jt(t)}return e},Yt={getRows:t=>{if(!t)return[""];return Zt(t).replace(/\\n/g,"#br#").split("#br#")},sanitizeText:Ft,sanitizeTextOrArray:(t,e)=>"string"==typeof t?Ft(t,e):t.flat().map((t=>Ft(t,e))),hasBreaks:t=>$t.test(t),splitBreaks:t=>t.split($t),lineBreakRegex:$t,removeScript:Mt,getUrl:t=>{let e="";return t&&(e=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,e=e.replaceAll(/\(/g,"\\("),e=e.replaceAll(/\)/g,"\\)")),e},evaluate:Pt},zt=(t,e)=>f(t,e?{s:-40,l:10}:{s:-40,l:-10}),Ut="#ffffff",Wt="#f2f2f2";class qt{constructor(){this.primaryColor="#eee",this.contrast="#707070",this.secondaryColor=(0,x.Z)(this.contrast,55),this.background="#ffffff",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#eee",this.secondBkg="calculated",this.lineColor="#666",this.border1="#999",this.border2="calculated",this.note="#ffa",this.text="#333",this.critical="#d42",this.done="#bbb",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="white",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="calculated",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="white",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBkgColor="calculated",this.critBorderColor="calculated",this.todayLineColor="calculated",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.secondBkg=(0,x.Z)(this.contrast,55),this.border2=this.contrast,this.cScale0=this.cScale0||"#555",this.cScale1=this.cScale1||"#F4F4F4",this.cScale2=this.cScale2||"#555",this.cScale3=this.cScale3||"#BBB",this.cScale4=this.cScale4||"#777",this.cScale5=this.cScale5||"#999",this.cScale6=this.cScale6||"#DDD",this.cScale7=this.cScale7||"#FFF",this.cScale8=this.cScale8||"#DDD",this.cScale9=this.cScale9||"#BBB",this.cScale10=this.cScale10||"#999",this.cScale11=this.cScale11||"#777";for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this.darkMode?this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10):this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],10);this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor),this.cScaleLabel0=this.cScaleLabel0||this.cScale1,this.cScaleLabel2=this.cScaleLabel2||this.cScale1;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.text,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.actorTextColor=this.text,this.actorLineColor=this.lineColor,this.signalColor=this.text,this.signalTextColor=this.text,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.text,this.loopTextColor=this.text,this.noteBorderColor="#999",this.noteBkgColor="#666",this.noteTextColor="#fff",this.sectionBkgColor=(0,x.Z)(this.contrast,30),this.sectionBkgColor2=(0,x.Z)(this.contrast,30),this.taskBorderColor=(0,_.Z)(this.contrast,10),this.taskBkgColor=this.contrast,this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor=this.text,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.gridColor=(0,x.Z)(this.border1,30),this.doneTaskBkgColor=this.done,this.doneTaskBorderColor=this.lineColor,this.critBkgColor=this.critical,this.critBorderColor=(0,_.Z)(this.critBkgColor,10),this.todayLineColor=this.critBkgColor,this.transitionColor=this.transitionColor||"#000",this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f4f4f4",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.stateBorder=this.stateBorder||"#000",this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#222",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pie12=this.pie0,this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,_.Z)(this.pie1,25)||this.primaryColor,this.git1=this.pie2||this.secondaryColor,this.git2=this.pie3||this.tertiaryColor,this.git3=this.pie4||f(this.primaryColor,{h:-30}),this.git4=this.pie5||f(this.primaryColor,{h:-60}),this.git5=this.pie6||f(this.primaryColor,{h:-90}),this.git6=this.pie7||f(this.primaryColor,{h:60}),this.git7=this.pie8||f(this.primaryColor,{h:120}),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||this.labelTextColor,this.gitBranchLabel0=this.branchLabelColor,this.gitBranchLabel1="white",this.gitBranchLabel2=this.branchLabelColor,this.gitBranchLabel3="white",this.gitBranchLabel4=this.branchLabelColor,this.gitBranchLabel5=this.branchLabelColor,this.gitBranchLabel6=this.branchLabelColor,this.gitBranchLabel7=this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}}const Ht={base:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#fff4dd",this.noteBkgColor="#fff5ad",this.noteTextColor="#333",this.THEME_COLOR_LIMIT=12,this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px"}updateColors(){if(this.primaryTextColor=this.primaryTextColor||(this.darkMode?"#eee":"#333"),this.secondaryColor=this.secondaryColor||f(this.primaryColor,{h:-120}),this.tertiaryColor=this.tertiaryColor||f(this.primaryColor,{h:180,l:5}),this.primaryBorderColor=this.primaryBorderColor||zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=this.secondaryBorderColor||zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=this.tertiaryBorderColor||zt(this.tertiaryColor,this.darkMode),this.noteBorderColor=this.noteBorderColor||zt(this.noteBkgColor,this.darkMode),this.noteBkgColor=this.noteBkgColor||"#fff5ad",this.noteTextColor=this.noteTextColor||"#333",this.secondaryTextColor=this.secondaryTextColor||b(this.secondaryColor),this.tertiaryTextColor=this.tertiaryTextColor||b(this.tertiaryColor),this.lineColor=this.lineColor||b(this.background),this.textColor=this.textColor||this.primaryTextColor,this.nodeBkg=this.nodeBkg||this.primaryColor,this.mainBkg=this.mainBkg||this.primaryColor,this.nodeBorder=this.nodeBorder||this.primaryBorderColor,this.clusterBkg=this.clusterBkg||this.tertiaryColor,this.clusterBorder=this.clusterBorder||this.tertiaryBorderColor,this.defaultLinkColor=this.defaultLinkColor||this.lineColor,this.titleColor=this.titleColor||this.tertiaryTextColor,this.edgeLabelBackground=this.edgeLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.nodeTextColor=this.nodeTextColor||this.primaryTextColor,this.actorBorder=this.actorBorder||this.primaryBorderColor,this.actorBkg=this.actorBkg||this.mainBkg,this.actorTextColor=this.actorTextColor||this.primaryTextColor,this.actorLineColor=this.actorLineColor||"grey",this.labelBoxBkgColor=this.labelBoxBkgColor||this.actorBkg,this.signalColor=this.signalColor||this.textColor,this.signalTextColor=this.signalTextColor||this.textColor,this.labelBoxBorderColor=this.labelBoxBorderColor||this.actorBorder,this.labelTextColor=this.labelTextColor||this.actorTextColor,this.loopTextColor=this.loopTextColor||this.actorTextColor,this.activationBorderColor=this.activationBorderColor||(0,_.Z)(this.secondaryColor,10),this.activationBkgColor=this.activationBkgColor||this.secondaryColor,this.sequenceNumberColor=this.sequenceNumberColor||b(this.lineColor),this.sectionBkgColor=this.sectionBkgColor||this.tertiaryColor,this.altSectionBkgColor=this.altSectionBkgColor||"white",this.sectionBkgColor=this.sectionBkgColor||this.secondaryColor,this.sectionBkgColor2=this.sectionBkgColor2||this.primaryColor,this.excludeBkgColor=this.excludeBkgColor||"#eeeeee",this.taskBorderColor=this.taskBorderColor||this.primaryBorderColor,this.taskBkgColor=this.taskBkgColor||this.primaryColor,this.activeTaskBorderColor=this.activeTaskBorderColor||this.primaryColor,this.activeTaskBkgColor=this.activeTaskBkgColor||(0,x.Z)(this.primaryColor,23),this.gridColor=this.gridColor||"lightgrey",this.doneTaskBkgColor=this.doneTaskBkgColor||"lightgrey",this.doneTaskBorderColor=this.doneTaskBorderColor||"grey",this.critBorderColor=this.critBorderColor||"#ff8888",this.critBkgColor=this.critBkgColor||"red",this.todayLineColor=this.todayLineColor||"red",this.taskTextColor=this.taskTextColor||this.textColor,this.taskTextOutsideColor=this.taskTextOutsideColor||this.textColor,this.taskTextLightColor=this.taskTextLightColor||this.textColor,this.taskTextColor=this.taskTextColor||this.primaryTextColor,this.taskTextDarkColor=this.taskTextDarkColor||this.textColor,this.taskTextClickableColor=this.taskTextClickableColor||"#003163",this.personBorder=this.personBorder||this.primaryBorderColor,this.personBkg=this.personBkg||this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||this.tertiaryColor,this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.specialStateColor=this.lineColor,this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210,l:150}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.darkMode)for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],75);else for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],25);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleInv"+e]=this["cScaleInv"+e]||b(this["cScale"+e]);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this.darkMode?this["cScalePeer"+e]=this["cScalePeer"+e]||(0,x.Z)(this["cScale"+e],10):this["cScalePeer"+e]=this["cScalePeer"+e]||(0,_.Z)(this["cScale"+e],10);this.scaleLabelColor=this.scaleLabelColor||this.labelTextColor;for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleLabel"+e]=this["cScaleLabel"+e]||this.scaleLabelColor;const t=this.darkMode?-4:-1;for(let e=0;e<5;e++)this["surface"+e]=this["surface"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(5+3*e)}),this["surfacePeer"+e]=this["surfacePeer"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(8+3*e)});this.classText=this.classText||this.textColor,this.fillType0=this.fillType0||this.primaryColor,this.fillType1=this.fillType1||this.secondaryColor,this.fillType2=this.fillType2||f(this.primaryColor,{h:64}),this.fillType3=this.fillType3||f(this.secondaryColor,{h:64}),this.fillType4=this.fillType4||f(this.primaryColor,{h:-64}),this.fillType5=this.fillType5||f(this.secondaryColor,{h:-64}),this.fillType6=this.fillType6||f(this.primaryColor,{h:128}),this.fillType7=this.fillType7||f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-10}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-10}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-20}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-20}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-10}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||(this.darkMode?"black":this.labelTextColor),this.gitBranchLabel0=this.gitBranchLabel0||this.branchLabelColor,this.gitBranchLabel1=this.gitBranchLabel1||this.branchLabelColor,this.gitBranchLabel2=this.gitBranchLabel2||this.branchLabelColor,this.gitBranchLabel3=this.gitBranchLabel3||this.branchLabelColor,this.gitBranchLabel4=this.gitBranchLabel4||this.branchLabelColor,this.gitBranchLabel5=this.gitBranchLabel5||this.branchLabelColor,this.gitBranchLabel6=this.gitBranchLabel6||this.branchLabelColor,this.gitBranchLabel7=this.gitBranchLabel7||this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},dark:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#333",this.primaryColor="#1f2020",this.secondaryColor=(0,x.Z)(this.primaryColor,16),this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=b(this.background),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#1f2020",this.secondBkg="calculated",this.mainContrastColor="lightgrey",this.darkTextColor=(0,x.Z)(b("#323D47"),10),this.lineColor="calculated",this.border1="#81B1DB",this.border2=y(255,255,255,.25),this.arrowheadColor="calculated",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#181818",this.textColor="#ccc",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#F9FFFE",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="calculated",this.activationBkgColor="calculated",this.sequenceNumberColor="black",this.sectionBkgColor=(0,_.Z)("#EAE8D9",30),this.altSectionBkgColor="calculated",this.sectionBkgColor2="#EAE8D9",this.taskBorderColor=y(255,255,255,70),this.taskBkgColor="calculated",this.taskTextColor="calculated",this.taskTextLightColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor=y(255,255,255,50),this.activeTaskBkgColor="#81B1DB",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="grey",this.critBorderColor="#E83737",this.critBkgColor="#E83737",this.taskTextDarkColor="calculated",this.todayLineColor="#DB5757",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="calculated",this.errorBkgColor="#a44141",this.errorTextColor="#ddd"}updateColors(){this.secondBkg=(0,x.Z)(this.mainBkg,16),this.lineColor=this.mainContrastColor,this.arrowheadColor=this.mainContrastColor,this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.edgeLabelBackground=(0,x.Z)(this.labelBackground,25),this.actorBorder=this.border1,this.actorBkg=this.mainBkg,this.actorTextColor=this.mainContrastColor,this.actorLineColor=this.mainContrastColor,this.signalColor=this.mainContrastColor,this.signalTextColor=this.mainContrastColor,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.mainContrastColor,this.loopTextColor=this.mainContrastColor,this.noteBorderColor=this.secondaryBorderColor,this.noteBkgColor=this.secondBkg,this.noteTextColor=this.secondaryTextColor,this.activationBorderColor=this.border1,this.activationBkgColor=this.secondBkg,this.altSectionBkgColor=this.background,this.taskBkgColor=(0,x.Z)(this.mainBkg,23),this.taskTextColor=this.darkTextColor,this.taskTextLightColor=this.mainContrastColor,this.taskTextOutsideColor=this.taskTextLightColor,this.gridColor=this.mainContrastColor,this.doneTaskBkgColor=this.mainContrastColor,this.taskTextDarkColor=this.darkTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#555",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#f4f4f4",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.cScale1=this.cScale1||"#0b0000",this.cScale2=this.cScale2||"#4d1037",this.cScale3=this.cScale3||"#3f5258",this.cScale4=this.cScale4||"#4f2f1b",this.cScale5=this.cScale5||"#6e0a0a",this.cScale6=this.cScale6||"#3b0048",this.cScale7=this.cScale7||"#995a01",this.cScale8=this.cScale8||"#154706",this.cScale9=this.cScale9||"#161722",this.cScale10=this.cScale10||"#00296f",this.cScale11=this.cScale11||"#01629c",this.cScale12=this.cScale12||"#010029",this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10);for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-10)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-7)});this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.classText=this.primaryTextColor,this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,x.Z)(this.secondaryColor,20),this.git1=(0,x.Z)(this.pie2||this.secondaryColor,20),this.git2=(0,x.Z)(this.pie3||this.tertiaryColor,20),this.git3=(0,x.Z)(this.pie4||f(this.primaryColor,{h:-30}),20),this.git4=(0,x.Z)(this.pie5||f(this.primaryColor,{h:-60}),20),this.git5=(0,x.Z)(this.pie6||f(this.primaryColor,{h:-90}),10),this.git6=(0,x.Z)(this.pie7||f(this.primaryColor,{h:60}),10),this.git7=(0,x.Z)(this.pie8||f(this.primaryColor,{h:120}),20),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||(0,x.Z)(this.background,12),this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||(0,x.Z)(this.background,2)}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},default:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#ECECFF",this.secondaryColor=f(this.primaryColor,{h:120}),this.secondaryColor="#ffffde",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.background="white",this.mainBkg="#ECECFF",this.secondBkg="#ffffde",this.lineColor="#333333",this.border1="#9370DB",this.border2="#aaaa33",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#e8e8e8",this.textColor="#333",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="calculated",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="calculated",this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor="calculated",this.taskTextOutsideColor=this.taskTextDarkColor,this.taskTextClickableColor="calculated",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBorderColor="calculated",this.critBkgColor="calculated",this.todayLineColor="calculated",this.sectionBkgColor=y(102,102,255,.49),this.altSectionBkgColor="white",this.sectionBkgColor2="#fff400",this.taskBorderColor="#534fbc",this.taskBkgColor="#8a90dd",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="#534fbc",this.activeTaskBkgColor="#bfc7ff",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222",this.updateColors()}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,l:-(7+5*t)});if(this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor,"calculated"!==this.labelTextColor){this.cScaleLabel0=this.cScaleLabel0||b(this.labelTextColor),this.cScaleLabel3=this.cScaleLabel3||b(this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.labelTextColor}this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.textColor,this.edgeLabelBackground=this.labelBackground,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.signalColor=this.textColor,this.signalTextColor=this.textColor,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||f(this.tertiaryColor,{l:-40}),this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-20}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-20}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-40}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:-40}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-40}),this.pie11=this.pie11||f(this.primaryColor,{h:-90,l:-40}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-30}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.labelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||(0,_.Z)(b(this.git0),25),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.gitBranchLabel0=this.gitBranchLabel0||b(this.labelTextColor),this.gitBranchLabel1=this.gitBranchLabel1||this.labelTextColor,this.gitBranchLabel2=this.gitBranchLabel2||this.labelTextColor,this.gitBranchLabel3=this.gitBranchLabel3||b(this.labelTextColor),this.gitBranchLabel4=this.gitBranchLabel4||this.labelTextColor,this.gitBranchLabel5=this.gitBranchLabel5||this.labelTextColor,this.gitBranchLabel6=this.gitBranchLabel6||this.labelTextColor,this.gitBranchLabel7=this.gitBranchLabel7||this.labelTextColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},forest:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#cde498",this.secondaryColor="#cdffb2",this.background="white",this.mainBkg="#cde498",this.secondBkg="#cdffb2",this.lineColor="green",this.border1="#13540c",this.border2="#6eaa49",this.arrowheadColor="green",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.tertiaryColor=(0,x.Z)("#cde498",10),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.primaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#333",this.edgeLabelBackground="#e8e8e8",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="#333",this.signalTextColor="#333",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="#326932",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="#6eaa49",this.altSectionBkgColor="white",this.sectionBkgColor2="#6eaa49",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="#487e3a",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.actorBorder=(0,_.Z)(this.mainBkg,20),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskBorderColor=this.border1,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-30}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{h:40,l:-40}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-50}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-50}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-50}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},neutral:{getThemeVariables:t=>{const e=new qt;return e.calculate(t),e}}},Vt={theme:"default",themeVariables:Ht.default.getThemeVariables(),themeCSS:void 0,maxTextSize:5e4,darkMode:!1,fontFamily:'"trebuchet ms", verdana, arial, sans-serif;',logLevel:5,securityLevel:"strict",startOnLoad:!0,arrowMarkerAbsolute:!1,secure:["secure","securityLevel","startOnLoad","maxTextSize"],deterministicIds:!1,deterministicIDSeed:void 0,flowchart:{titleTopMargin:25,diagramPadding:8,htmlLabels:!0,nodeSpacing:50,rankSpacing:50,curve:"basis",padding:15,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},sequence:{hideUnusedParticipants:!1,activationWidth:10,diagramMarginX:50,diagramMarginY:10,actorMargin:50,width:150,height:65,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",mirrorActors:!0,forceMenus:!1,bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,showSequenceNumbers:!1,actorFontSize:14,actorFontFamily:'"Open Sans", sans-serif',actorFontWeight:400,noteFontSize:14,noteFontFamily:'"trebuchet ms", verdana, arial, sans-serif',noteFontWeight:400,noteAlign:"center",messageFontSize:16,messageFontFamily:'"trebuchet ms", verdana, arial, sans-serif',messageFontWeight:400,wrap:!1,wrapPadding:10,labelBoxWidth:50,labelBoxHeight:20,messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},noteFont:function(){return{fontFamily:this.noteFontFamily,fontSize:this.noteFontSize,fontWeight:this.noteFontWeight}},actorFont:function(){return{fontFamily:this.actorFontFamily,fontSize:this.actorFontSize,fontWeight:this.actorFontWeight}}},gantt:{titleTopMargin:25,barHeight:20,barGap:4,topPadding:50,rightPadding:75,leftPadding:75,gridLineStartPadding:35,fontSize:11,sectionFontSize:11,numberSectionStyles:4,axisFormat:"%Y-%m-%d",tickInterval:void 0,useMaxWidth:!0,topAxis:!1,useWidth:void 0},journey:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"]},timeline:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"],disableMulticolor:!1},class:{titleTopMargin:25,arrowMarkerAbsolute:!1,dividerMargin:10,padding:5,textHeight:10,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},state:{titleTopMargin:25,dividerMargin:10,sizeUnit:5,padding:8,textHeight:10,titleShift:-15,noteMargin:10,forkWidth:70,forkHeight:7,miniPadding:2,fontSizeFactor:5.02,fontSize:24,labelHeight:16,edgeLengthFactor:"20",compositTitleSize:35,radius:5,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},er:{titleTopMargin:25,diagramPadding:20,layoutDirection:"TB",minEntityWidth:100,minEntityHeight:75,entityPadding:15,stroke:"gray",fill:"honeydew",fontSize:12,useMaxWidth:!0},pie:{useWidth:void 0,useMaxWidth:!0},requirement:{useWidth:void 0,useMaxWidth:!0,rect_fill:"#f9f9f9",text_color:"#333",rect_border_size:"0.5px",rect_border_color:"#bbb",rect_min_width:200,rect_min_height:200,fontSize:14,rect_padding:10,line_height:20},gitGraph:{titleTopMargin:25,diagramPadding:8,nodeLabel:{width:75,height:100,x:-25,y:0},mainBranchName:"main",mainBranchOrder:0,showCommitLabel:!0,showBranches:!0,rotateCommitLabel:!0},c4:{useWidth:void 0,diagramMarginX:50,diagramMarginY:10,c4ShapeMargin:50,c4ShapePadding:20,width:216,height:60,boxMargin:10,useMaxWidth:!0,c4ShapeInRow:4,nextLinePaddingX:0,c4BoundaryInRow:2,personFontSize:14,personFontFamily:'"Open Sans", sans-serif',personFontWeight:"normal",external_personFontSize:14,external_personFontFamily:'"Open Sans", sans-serif',external_personFontWeight:"normal",systemFontSize:14,systemFontFamily:'"Open Sans", sans-serif',systemFontWeight:"normal",external_systemFontSize:14,external_systemFontFamily:'"Open Sans", sans-serif',external_systemFontWeight:"normal",system_dbFontSize:14,system_dbFontFamily:'"Open Sans", sans-serif',system_dbFontWeight:"normal",external_system_dbFontSize:14,external_system_dbFontFamily:'"Open Sans", sans-serif',external_system_dbFontWeight:"normal",system_queueFontSize:14,system_queueFontFamily:'"Open Sans", sans-serif',system_queueFontWeight:"normal",external_system_queueFontSize:14,external_system_queueFontFamily:'"Open Sans", sans-serif',external_system_queueFontWeight:"normal",boundaryFontSize:14,boundaryFontFamily:'"Open Sans", sans-serif',boundaryFontWeight:"normal",messageFontSize:12,messageFontFamily:'"Open Sans", sans-serif',messageFontWeight:"normal",containerFontSize:14,containerFontFamily:'"Open Sans", sans-serif',containerFontWeight:"normal",external_containerFontSize:14,external_containerFontFamily:'"Open Sans", sans-serif',external_containerFontWeight:"normal",container_dbFontSize:14,container_dbFontFamily:'"Open Sans", sans-serif',container_dbFontWeight:"normal",external_container_dbFontSize:14,external_container_dbFontFamily:'"Open Sans", sans-serif',external_container_dbFontWeight:"normal",container_queueFontSize:14,container_queueFontFamily:'"Open Sans", sans-serif',container_queueFontWeight:"normal",external_container_queueFontSize:14,external_container_queueFontFamily:'"Open Sans", sans-serif',external_container_queueFontWeight:"normal",componentFontSize:14,componentFontFamily:'"Open Sans", sans-serif',componentFontWeight:"normal",external_componentFontSize:14,external_componentFontFamily:'"Open Sans", sans-serif',external_componentFontWeight:"normal",component_dbFontSize:14,component_dbFontFamily:'"Open Sans", sans-serif',component_dbFontWeight:"normal",external_component_dbFontSize:14,external_component_dbFontFamily:'"Open Sans", sans-serif',external_component_dbFontWeight:"normal",component_queueFontSize:14,component_queueFontFamily:'"Open Sans", sans-serif',component_queueFontWeight:"normal",external_component_queueFontSize:14,external_component_queueFontFamily:'"Open Sans", sans-serif',external_component_queueFontWeight:"normal",wrap:!0,wrapPadding:10,personFont:function(){return{fontFamily:this.personFontFamily,fontSize:this.personFontSize,fontWeight:this.personFontWeight}},external_personFont:function(){return{fontFamily:this.external_personFontFamily,fontSize:this.external_personFontSize,fontWeight:this.external_personFontWeight}},systemFont:function(){return{fontFamily:this.systemFontFamily,fontSize:this.systemFontSize,fontWeight:this.systemFontWeight}},external_systemFont:function(){return{fontFamily:this.external_systemFontFamily,fontSize:this.external_systemFontSize,fontWeight:this.external_systemFontWeight}},system_dbFont:function(){return{fontFamily:this.system_dbFontFamily,fontSize:this.system_dbFontSize,fontWeight:this.system_dbFontWeight}},external_system_dbFont:function(){return{fontFamily:this.external_system_dbFontFamily,fontSize:this.external_system_dbFontSize,fontWeight:this.external_system_dbFontWeight}},system_queueFont:function(){return{fontFamily:this.system_queueFontFamily,fontSize:this.system_queueFontSize,fontWeight:this.system_queueFontWeight}},external_system_queueFont:function(){return{fontFamily:this.external_system_queueFontFamily,fontSize:this.external_system_queueFontSize,fontWeight:this.external_system_queueFontWeight}},containerFont:function(){return{fontFamily:this.containerFontFamily,fontSize:this.containerFontSize,fontWeight:this.containerFontWeight}},external_containerFont:function(){return{fontFamily:this.external_containerFontFamily,fontSize:this.external_containerFontSize,fontWeight:this.external_containerFontWeight}},container_dbFont:function(){return{fontFamily:this.container_dbFontFamily,fontSize:this.container_dbFontSize,fontWeight:this.container_dbFontWeight}},external_container_dbFont:function(){return{fontFamily:this.external_container_dbFontFamily,fontSize:this.external_container_dbFontSize,fontWeight:this.external_container_dbFontWeight}},container_queueFont:function(){return{fontFamily:this.container_queueFontFamily,fontSize:this.container_queueFontSize,fontWeight:this.container_queueFontWeight}},external_container_queueFont:function(){return{fontFamily:this.external_container_queueFontFamily,fontSize:this.external_container_queueFontSize,fontWeight:this.external_container_queueFontWeight}},componentFont:function(){return{fontFamily:this.componentFontFamily,fontSize:this.componentFontSize,fontWeight:this.componentFontWeight}},external_componentFont:function(){return{fontFamily:this.external_componentFontFamily,fontSize:this.external_componentFontSize,fontWeight:this.external_componentFontWeight}},component_dbFont:function(){return{fontFamily:this.component_dbFontFamily,fontSize:this.component_dbFontSize,fontWeight:this.component_dbFontWeight}},external_component_dbFont:function(){return{fontFamily:this.external_component_dbFontFamily,fontSize:this.external_component_dbFontSize,fontWeight:this.external_component_dbFontWeight}},component_queueFont:function(){return{fontFamily:this.component_queueFontFamily,fontSize:this.component_queueFontSize,fontWeight:this.component_queueFontWeight}},external_component_queueFont:function(){return{fontFamily:this.external_component_queueFontFamily,fontSize:this.external_component_queueFontSize,fontWeight:this.external_component_queueFontWeight}},boundaryFont:function(){return{fontFamily:this.boundaryFontFamily,fontSize:this.boundaryFontSize,fontWeight:this.boundaryFontWeight}},messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},person_bg_color:"#08427B",person_border_color:"#073B6F",external_person_bg_color:"#686868",external_person_border_color:"#8A8A8A",system_bg_color:"#1168BD",system_border_color:"#3C7FC0",system_db_bg_color:"#1168BD",system_db_border_color:"#3C7FC0",system_queue_bg_color:"#1168BD",system_queue_border_color:"#3C7FC0",external_system_bg_color:"#999999",external_system_border_color:"#8A8A8A",external_system_db_bg_color:"#999999",external_system_db_border_color:"#8A8A8A",external_system_queue_bg_color:"#999999",external_system_queue_border_color:"#8A8A8A",container_bg_color:"#438DD5",container_border_color:"#3C7FC0",container_db_bg_color:"#438DD5",container_db_border_color:"#3C7FC0",container_queue_bg_color:"#438DD5",container_queue_border_color:"#3C7FC0",external_container_bg_color:"#B3B3B3",external_container_border_color:"#A6A6A6",external_container_db_bg_color:"#B3B3B3",external_container_db_border_color:"#A6A6A6",external_container_queue_bg_color:"#B3B3B3",external_container_queue_border_color:"#A6A6A6",component_bg_color:"#85BBF0",component_border_color:"#78A8D8",component_db_bg_color:"#85BBF0",component_db_border_color:"#78A8D8",component_queue_bg_color:"#85BBF0",component_queue_border_color:"#78A8D8",external_component_bg_color:"#CCCCCC",external_component_border_color:"#BFBFBF",external_component_db_bg_color:"#CCCCCC",external_component_db_border_color:"#BFBFBF",external_component_queue_bg_color:"#CCCCCC",external_component_queue_border_color:"#BFBFBF"},mindmap:{useMaxWidth:!0,padding:10,maxNodeWidth:200},fontSize:16};Vt.class&&(Vt.class.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute),Vt.gitGraph&&(Vt.gitGraph.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute);const Gt=(t,e="")=>Object.keys(t).reduce(((n,r)=>Array.isArray(t[r])?n:"object"==typeof t[r]&&null!==t[r]?[...n,e+r,...Gt(t[r],"")]:[...n,e+r]),[]),Xt=Gt(Vt,""),Kt=Vt;function Qt(t){return null==t}var Jt={isNothing:Qt,isObject:function(t){return"object"==typeof t&&null!==t},toArray:function(t){return Array.isArray(t)?t:Qt(t)?[]:[t]},repeat:function(t,e){var n,r="";for(n=0;n<e;n+=1)r+=t;return r},isNegativeZero:function(t){return 0===t&&Number.NEGATIVE_INFINITY===1/t},extend:function(t,e){var n,r,i,a;if(e)for(n=0,r=(a=Object.keys(e)).length;n<r;n+=1)t[i=a[n]]=e[i];return t}};function te(t,e){var n="",r=t.reason||"(unknown reason)";return t.mark?(t.mark.name&&(n+='in "'+t.mark.name+'" '),n+="("+(t.mark.line+1)+":"+(t.mark.column+1)+")",!e&&t.mark.snippet&&(n+="\n\n"+t.mark.snippet),r+" "+n):r}function ee(t,e){Error.call(this),this.name="YAMLException",this.reason=t,this.mark=e,this.message=te(this,!1),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=(new Error).stack||""}ee.prototype=Object.create(Error.prototype),ee.prototype.constructor=ee,ee.prototype.toString=function(t){return this.name+": "+te(this,t)};var ne=ee;function re(t,e,n,r,i){var a="",s="",o=Math.floor(i/2)-1;return r-e>o&&(e=r-o+(a=" ... ").length),n-r>o&&(n=r+o-(s=" ...").length),{str:a+t.slice(e,n).replace(/\t/g,"\u2192")+s,pos:r-e+a.length}}function ie(t,e){return Jt.repeat(" ",e-t.length)+t}var ae=function(t,e){if(e=Object.create(e||null),!t.buffer)return null;e.maxLength||(e.maxLength=79),"number"!=typeof e.indent&&(e.indent=1),"number"!=typeof e.linesBefore&&(e.linesBefore=3),"number"!=typeof e.linesAfter&&(e.linesAfter=2);for(var n,r=/\r?\n|\r|\0/g,i=[0],a=[],s=-1;n=r.exec(t.buffer);)a.push(n.index),i.push(n.index+n[0].length),t.position<=n.index&&s<0&&(s=i.length-2);s<0&&(s=i.length-1);var o,c,l="",h=Math.min(t.line+e.linesAfter,a.length).toString().length,u=e.maxLength-(e.indent+h+3);for(o=1;o<=e.linesBefore&&!(s-o<0);o++)c=re(t.buffer,i[s-o],a[s-o],t.position-(i[s]-i[s-o]),u),l=Jt.repeat(" ",e.indent)+ie((t.line-o+1).toString(),h)+" | "+c.str+"\n"+l;for(c=re(t.buffer,i[s],a[s],t.position,u),l+=Jt.repeat(" ",e.indent)+ie((t.line+1).toString(),h)+" | "+c.str+"\n",l+=Jt.repeat("-",e.indent+h+3+c.pos)+"^\n",o=1;o<=e.linesAfter&&!(s+o>=a.length);o++)c=re(t.buffer,i[s+o],a[s+o],t.position-(i[s]-i[s+o]),u),l+=Jt.repeat(" ",e.indent)+ie((t.line+o+1).toString(),h)+" | "+c.str+"\n";return l.replace(/\n$/,"")},se=["kind","multi","resolve","construct","instanceOf","predicate","represent","representName","defaultStyle","styleAliases"],oe=["scalar","sequence","mapping"];var ce=function(t,e){var n,r;if(e=e||{},Object.keys(e).forEach((function(e){if(-1===se.indexOf(e))throw new ne('Unknown option "'+e+'" is met in definition of "'+t+'" YAML type.')})),this.options=e,this.tag=t,this.kind=e.kind||null,this.resolve=e.resolve||function(){return!0},this.construct=e.construct||function(t){return t},this.instanceOf=e.instanceOf||null,this.predicate=e.predicate||null,this.represent=e.represent||null,this.representName=e.representName||null,this.defaultStyle=e.defaultStyle||null,this.multi=e.multi||!1,this.styleAliases=(n=e.styleAliases||null,r={},null!==n&&Object.keys(n).forEach((function(t){n[t].forEach((function(e){r[String(e)]=t}))})),r),-1===oe.indexOf(this.kind))throw new ne('Unknown kind "'+this.kind+'" is specified for "'+t+'" YAML type.')};function le(t,e){var n=[];return t[e].forEach((function(t){var e=n.length;n.forEach((function(n,r){n.tag===t.tag&&n.kind===t.kind&&n.multi===t.multi&&(e=r)})),n[e]=t})),n}function he(t){return this.extend(t)}he.prototype.extend=function(t){var e=[],n=[];if(t instanceof ce)n.push(t);else if(Array.isArray(t))n=n.concat(t);else{if(!t||!Array.isArray(t.implicit)&&!Array.isArray(t.explicit))throw new ne("Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })");t.implicit&&(e=e.concat(t.implicit)),t.explicit&&(n=n.concat(t.explicit))}e.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.");if(t.loadKind&&"scalar"!==t.loadKind)throw new ne("There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.");if(t.multi)throw new ne("There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.")})),n.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.")}));var r=Object.create(he.prototype);return r.implicit=(this.implicit||[]).concat(e),r.explicit=(this.explicit||[]).concat(n),r.compiledImplicit=le(r,"implicit"),r.compiledExplicit=le(r,"explicit"),r.compiledTypeMap=function(){var t,e,n={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}};function r(t){t.multi?(n.multi[t.kind].push(t),n.multi.fallback.push(t)):n[t.kind][t.tag]=n.fallback[t.tag]=t}for(t=0,e=arguments.length;t<e;t+=1)arguments[t].forEach(r);return n}(r.compiledImplicit,r.compiledExplicit),r};var ue=new he({explicit:[new ce("tag:yaml.org,2002:str",{kind:"scalar",construct:function(t){return null!==t?t:""}}),new ce("tag:yaml.org,2002:seq",{kind:"sequence",construct:function(t){return null!==t?t:[]}}),new ce("tag:yaml.org,2002:map",{kind:"mapping",construct:function(t){return null!==t?t:{}}})]});var de=new ce("tag:yaml.org,2002:null",{kind:"scalar",resolve:function(t){if(null===t)return!0;var e=t.length;return 1===e&&"~"===t||4===e&&("null"===t||"Null"===t||"NULL"===t)},construct:function(){return null},predicate:function(t){return null===t},represent:{canonical:function(){return"~"},lowercase:function(){return"null"},uppercase:function(){return"NULL"},camelcase:function(){return"Null"},empty:function(){return""}},defaultStyle:"lowercase"});var pe=new ce("tag:yaml.org,2002:bool",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e=t.length;return 4===e&&("true"===t||"True"===t||"TRUE"===t)||5===e&&("false"===t||"False"===t||"FALSE"===t)},construct:function(t){return"true"===t||"True"===t||"TRUE"===t},predicate:function(t){return"[object Boolean]"===Object.prototype.toString.call(t)},represent:{lowercase:function(t){return t?"true":"false"},uppercase:function(t){return t?"TRUE":"FALSE"},camelcase:function(t){return t?"True":"False"}},defaultStyle:"lowercase"});function fe(t){return 48<=t&&t<=55}function ge(t){return 48<=t&&t<=57}var ye=new ce("tag:yaml.org,2002:int",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=t.length,i=0,a=!1;if(!r)return!1;if("-"!==(e=t[i])&&"+"!==e||(e=t[++i]),"0"===e){if(i+1===r)return!0;if("b"===(e=t[++i])){for(i++;i<r;i++)if("_"!==(e=t[i])){if("0"!==e&&"1"!==e)return!1;a=!0}return a&&"_"!==e}if("x"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!(48<=(n=t.charCodeAt(i))&&n<=57||65<=n&&n<=70||97<=n&&n<=102))return!1;a=!0}return a&&"_"!==e}if("o"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!fe(t.charCodeAt(i)))return!1;a=!0}return a&&"_"!==e}}if("_"===e)return!1;for(;i<r;i++)if("_"!==(e=t[i])){if(!ge(t.charCodeAt(i)))return!1;a=!0}return!(!a||"_"===e)},construct:function(t){var e,n=t,r=1;if(-1!==n.indexOf("_")&&(n=n.replace(/_/g,"")),"-"!==(e=n[0])&&"+"!==e||("-"===e&&(r=-1),e=(n=n.slice(1))[0]),"0"===n)return 0;if("0"===e){if("b"===n[1])return r*parseInt(n.slice(2),2);if("x"===n[1])return r*parseInt(n.slice(2),16);if("o"===n[1])return r*parseInt(n.slice(2),8)}return r*parseInt(n,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&t%1==0&&!Jt.isNegativeZero(t)},represent:{binary:function(t){return t>=0?"0b"+t.toString(2):"-0b"+t.toString(2).slice(1)},octal:function(t){return t>=0?"0o"+t.toString(8):"-0o"+t.toString(8).slice(1)},decimal:function(t){return t.toString(10)},hexadecimal:function(t){return t>=0?"0x"+t.toString(16).toUpperCase():"-0x"+t.toString(16).toUpperCase().slice(1)}},defaultStyle:"decimal",styleAliases:{binary:[2,"bin"],octal:[8,"oct"],decimal:[10,"dec"],hexadecimal:[16,"hex"]}}),me=new RegExp("^(?:[-+]?(?:[0-9][0-9_]*)(?:\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\.(?:inf|Inf|INF)|\\.(?:nan|NaN|NAN))$");var be=/^[-+]?[0-9]+e/;var _e=new ce("tag:yaml.org,2002:float",{kind:"scalar",resolve:function(t){return null!==t&&!(!me.test(t)||"_"===t[t.length-1])},construct:function(t){var e,n;return n="-"===(e=t.replace(/_/g,"").toLowerCase())[0]?-1:1,"+-".indexOf(e[0])>=0&&(e=e.slice(1)),".inf"===e?1===n?Number.POSITIVE_INFINITY:Number.NEGATIVE_INFINITY:".nan"===e?NaN:n*parseFloat(e,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&(t%1!=0||Jt.isNegativeZero(t))},represent:function(t,e){var n;if(isNaN(t))switch(e){case"lowercase":return".nan";case"uppercase":return".NAN";case"camelcase":return".NaN"}else if(Number.POSITIVE_INFINITY===t)switch(e){case"lowercase":return".inf";case"uppercase":return".INF";case"camelcase":return".Inf"}else if(Number.NEGATIVE_INFINITY===t)switch(e){case"lowercase":return"-.inf";case"uppercase":return"-.INF";case"camelcase":return"-.Inf"}else if(Jt.isNegativeZero(t))return"-0.0";return n=t.toString(10),be.test(n)?n.replace("e",".e"):n},defaultStyle:"lowercase"}),xe=ue.extend({implicit:[de,pe,ye,_e]}),ve=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$"),ke=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\.([0-9]*))?(?:[ \\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$");var we=new ce("tag:yaml.org,2002:timestamp",{kind:"scalar",resolve:function(t){return null!==t&&(null!==ve.exec(t)||null!==ke.exec(t))},construct:function(t){var e,n,r,i,a,s,o,c,l=0,h=null;if(null===(e=ve.exec(t))&&(e=ke.exec(t)),null===e)throw new Error("Date resolve error");if(n=+e[1],r=+e[2]-1,i=+e[3],!e[4])return new Date(Date.UTC(n,r,i));if(a=+e[4],s=+e[5],o=+e[6],e[7]){for(l=e[7].slice(0,3);l.length<3;)l+="0";l=+l}return e[9]&&(h=6e4*(60*+e[10]+ +(e[11]||0)),"-"===e[9]&&(h=-h)),c=new Date(Date.UTC(n,r,i,a,s,o,l)),h&&c.setTime(c.getTime()-h),c},instanceOf:Date,represent:function(t){return t.toISOString()}});var Ee=new ce("tag:yaml.org,2002:merge",{kind:"scalar",resolve:function(t){return"<<"===t||null===t}}),Ce="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\n\r";var Te=new ce("tag:yaml.org,2002:binary",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=0,i=t.length,a=Ce;for(n=0;n<i;n++)if(!((e=a.indexOf(t.charAt(n)))>64)){if(e<0)return!1;r+=6}return r%8==0},construct:function(t){var e,n,r=t.replace(/[\r\n=]/g,""),i=r.length,a=Ce,s=0,o=[];for(e=0;e<i;e++)e%4==0&&e&&(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)),s=s<<6|a.indexOf(r.charAt(e));return 0===(n=i%4*6)?(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)):18===n?(o.push(s>>10&255),o.push(s>>2&255)):12===n&&o.push(s>>4&255),new Uint8Array(o)},predicate:function(t){return"[object Uint8Array]"===Object.prototype.toString.call(t)},represent:function(t){var e,n,r="",i=0,a=t.length,s=Ce;for(e=0;e<a;e++)e%3==0&&e&&(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]),i=(i<<8)+t[e];return 0===(n=a%3)?(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]):2===n?(r+=s[i>>10&63],r+=s[i>>4&63],r+=s[i<<2&63],r+=s[64]):1===n&&(r+=s[i>>2&63],r+=s[i<<4&63],r+=s[64],r+=s[64]),r}}),Se=Object.prototype.hasOwnProperty,Ae=Object.prototype.toString;var Le=new ce("tag:yaml.org,2002:omap",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=[],o=t;for(e=0,n=o.length;e<n;e+=1){if(r=o[e],a=!1,"[object Object]"!==Ae.call(r))return!1;for(i in r)if(Se.call(r,i)){if(a)return!1;a=!0}if(!a)return!1;if(-1!==s.indexOf(i))return!1;s.push(i)}return!0},construct:function(t){return null!==t?t:[]}}),Be=Object.prototype.toString;var Ne=new ce("tag:yaml.org,2002:pairs",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1){if(r=s[e],"[object Object]"!==Be.call(r))return!1;if(1!==(i=Object.keys(r)).length)return!1;a[e]=[i[0],r[i[0]]]}return!0},construct:function(t){if(null===t)return[];var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1)r=s[e],i=Object.keys(r),a[e]=[i[0],r[i[0]]];return a}}),De=Object.prototype.hasOwnProperty;var Oe=new ce("tag:yaml.org,2002:set",{kind:"mapping",resolve:function(t){if(null===t)return!0;var e,n=t;for(e in n)if(De.call(n,e)&&null!==n[e])return!1;return!0},construct:function(t){return null!==t?t:{}}}),Me=xe.extend({implicit:[we,Ee],explicit:[Te,Le,Ne,Oe]}),Ie=Object.prototype.hasOwnProperty,Fe=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x84\x86-\x9F\uFFFE\uFFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/,$e=/[\x85\u2028\u2029]/,Re=/[,\[\]\{\}]/,Ze=/^(?:!|!!|![a-z\-]+!)$/i,Pe=/^(?:!|[^,\[\]\{\}])(?:%[0-9a-f]{2}|[0-9a-z\-#;\/\?:@&=\+\$,_\.!~\*'\(\)\[\]])*$/i;function je(t){return Object.prototype.toString.call(t)}function Ye(t){return 10===t||13===t}function ze(t){return 9===t||32===t}function Ue(t){return 9===t||32===t||10===t||13===t}function We(t){return 44===t||91===t||93===t||123===t||125===t}function qe(t){var e;return 48<=t&&t<=57?t-48:97<=(e=32|t)&&e<=102?e-97+10:-1}function He(t){return 48===t?"\0":97===t?"\x07":98===t?"\b":116===t||9===t?"\t":110===t?"\n":118===t?"\v":102===t?"\f":114===t?"\r":101===t?"\x1b":32===t?" ":34===t?'"':47===t?"/":92===t?"\\":78===t?"\x85":95===t?"\xa0":76===t?"\u2028":80===t?"\u2029":""}function Ve(t){return t<=65535?String.fromCharCode(t):String.fromCharCode(55296+(t-65536>>10),56320+(t-65536&1023))}for(var Ge=new Array(256),Xe=new Array(256),Ke=0;Ke<256;Ke++)Ge[Ke]=He(Ke)?1:0,Xe[Ke]=He(Ke);function Qe(t,e){this.input=t,this.filename=e.filename||null,this.schema=e.schema||Me,this.onWarning=e.onWarning||null,this.legacy=e.legacy||!1,this.json=e.json||!1,this.listener=e.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=t.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Je(t,e){var n={name:t.filename,buffer:t.input.slice(0,-1),position:t.position,line:t.line,column:t.position-t.lineStart};return n.snippet=ae(n),new ne(e,n)}function tn(t,e){throw Je(t,e)}function en(t,e){t.onWarning&&t.onWarning.call(null,Je(t,e))}var nn={YAML:function(t,e,n){var r,i,a;null!==t.version&&tn(t,"duplication of %YAML directive"),1!==n.length&&tn(t,"YAML directive accepts exactly one argument"),null===(r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]))&&tn(t,"ill-formed argument of the YAML directive"),i=parseInt(r[1],10),a=parseInt(r[2],10),1!==i&&tn(t,"unacceptable YAML version of the document"),t.version=n[0],t.checkLineBreaks=a<2,1!==a&&2!==a&&en(t,"unsupported YAML version of the document")},TAG:function(t,e,n){var r,i;2!==n.length&&tn(t,"TAG directive accepts exactly two arguments"),r=n[0],i=n[1],Ze.test(r)||tn(t,"ill-formed tag handle (first argument) of the TAG directive"),Ie.call(t.tagMap,r)&&tn(t,'there is a previously declared suffix for "'+r+'" tag handle'),Pe.test(i)||tn(t,"ill-formed tag prefix (second argument) of the TAG directive");try{i=decodeURIComponent(i)}catch(a){tn(t,"tag prefix is malformed: "+i)}t.tagMap[r]=i}};function rn(t,e,n,r){var i,a,s,o;if(e<n){if(o=t.input.slice(e,n),r)for(i=0,a=o.length;i<a;i+=1)9===(s=o.charCodeAt(i))||32<=s&&s<=1114111||tn(t,"expected valid JSON character");else Fe.test(o)&&tn(t,"the stream contains non-printable characters");t.result+=o}}function an(t,e,n,r){var i,a,s,o;for(Jt.isObject(n)||tn(t,"cannot merge mappings; the provided source object is unacceptable"),s=0,o=(i=Object.keys(n)).length;s<o;s+=1)a=i[s],Ie.call(e,a)||(e[a]=n[a],r[a]=!0)}function sn(t,e,n,r,i,a,s,o,c){var l,h;if(Array.isArray(i))for(l=0,h=(i=Array.prototype.slice.call(i)).length;l<h;l+=1)Array.isArray(i[l])&&tn(t,"nested arrays are not supported inside keys"),"object"==typeof i&&"[object Object]"===je(i[l])&&(i[l]="[object Object]");if("object"==typeof i&&"[object Object]"===je(i)&&(i="[object Object]"),i=String(i),null===e&&(e={}),"tag:yaml.org,2002:merge"===r)if(Array.isArray(a))for(l=0,h=a.length;l<h;l+=1)an(t,e,a[l],n);else an(t,e,a,n);else t.json||Ie.call(n,i)||!Ie.call(e,i)||(t.line=s||t.line,t.lineStart=o||t.lineStart,t.position=c||t.position,tn(t,"duplicated mapping key")),"__proto__"===i?Object.defineProperty(e,i,{configurable:!0,enumerable:!0,writable:!0,value:a}):e[i]=a,delete n[i];return e}function on(t){var e;10===(e=t.input.charCodeAt(t.position))?t.position++:13===e?(t.position++,10===t.input.charCodeAt(t.position)&&t.position++):tn(t,"a line break is expected"),t.line+=1,t.lineStart=t.position,t.firstTabInLine=-1}function cn(t,e,n){for(var r=0,i=t.input.charCodeAt(t.position);0!==i;){for(;ze(i);)9===i&&-1===t.firstTabInLine&&(t.firstTabInLine=t.position),i=t.input.charCodeAt(++t.position);if(e&&35===i)do{i=t.input.charCodeAt(++t.position)}while(10!==i&&13!==i&&0!==i);if(!Ye(i))break;for(on(t),i=t.input.charCodeAt(t.position),r++,t.lineIndent=0;32===i;)t.lineIndent++,i=t.input.charCodeAt(++t.position)}return-1!==n&&0!==r&&t.lineIndent<n&&en(t,"deficient indentation"),r}function ln(t){var e,n=t.position;return!(45!==(e=t.input.charCodeAt(n))&&46!==e||e!==t.input.charCodeAt(n+1)||e!==t.input.charCodeAt(n+2)||(n+=3,0!==(e=t.input.charCodeAt(n))&&!Ue(e)))}function hn(t,e){1===e?t.result+=" ":e>1&&(t.result+=Jt.repeat("\n",e-1))}function un(t,e){var n,r,i=t.tag,a=t.anchor,s=[],o=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=s),r=t.input.charCodeAt(t.position);0!==r&&(-1!==t.firstTabInLine&&(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),45===r)&&Ue(t.input.charCodeAt(t.position+1));)if(o=!0,t.position++,cn(t,!0,-1)&&t.lineIndent<=e)s.push(null),r=t.input.charCodeAt(t.position);else if(n=t.line,fn(t,e,3,!1,!0),s.push(t.result),cn(t,!0,-1),r=t.input.charCodeAt(t.position),(t.line===n||t.lineIndent>e)&&0!==r)tn(t,"bad indentation of a sequence entry");else if(t.lineIndent<e)break;return!!o&&(t.tag=i,t.anchor=a,t.kind="sequence",t.result=s,!0)}function dn(t){var e,n,r,i,a=!1,s=!1;if(33!==(i=t.input.charCodeAt(t.position)))return!1;if(null!==t.tag&&tn(t,"duplication of a tag property"),60===(i=t.input.charCodeAt(++t.position))?(a=!0,i=t.input.charCodeAt(++t.position)):33===i?(s=!0,n="!!",i=t.input.charCodeAt(++t.position)):n="!",e=t.position,a){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&62!==i);t.position<t.length?(r=t.input.slice(e,t.position),i=t.input.charCodeAt(++t.position)):tn(t,"unexpected end of the stream within a verbatim tag")}else{for(;0!==i&&!Ue(i);)33===i&&(s?tn(t,"tag suffix cannot contain exclamation marks"):(n=t.input.slice(e-1,t.position+1),Ze.test(n)||tn(t,"named tag handle cannot contain such characters"),s=!0,e=t.position+1)),i=t.input.charCodeAt(++t.position);r=t.input.slice(e,t.position),Re.test(r)&&tn(t,"tag suffix cannot contain flow indicator characters")}r&&!Pe.test(r)&&tn(t,"tag name cannot contain such characters: "+r);try{r=decodeURIComponent(r)}catch(o){tn(t,"tag name is malformed: "+r)}return a?t.tag=r:Ie.call(t.tagMap,n)?t.tag=t.tagMap[n]+r:"!"===n?t.tag="!"+r:"!!"===n?t.tag="tag:yaml.org,2002:"+r:tn(t,'undeclared tag handle "'+n+'"'),!0}function pn(t){var e,n;if(38!==(n=t.input.charCodeAt(t.position)))return!1;for(null!==t.anchor&&tn(t,"duplication of an anchor property"),n=t.input.charCodeAt(++t.position),e=t.position;0!==n&&!Ue(n)&&!We(n);)n=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an anchor node must contain at least one character"),t.anchor=t.input.slice(e,t.position),!0}function fn(t,e,n,r,i){var a,s,o,c,l,h,u,d,p,f=1,g=!1,y=!1;if(null!==t.listener&&t.listener("open",t),t.tag=null,t.anchor=null,t.kind=null,t.result=null,a=s=o=4===n||3===n,r&&cn(t,!0,-1)&&(g=!0,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)),1===f)for(;dn(t)||pn(t);)cn(t,!0,-1)?(g=!0,o=a,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)):o=!1;if(o&&(o=g||i),1!==f&&4!==n||(d=1===n||2===n?e:e+1,p=t.position-t.lineStart,1===f?o&&(un(t,p)||function(t,e,n){var r,i,a,s,o,c,l,h=t.tag,u=t.anchor,d={},p=Object.create(null),f=null,g=null,y=null,m=!1,b=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=d),l=t.input.charCodeAt(t.position);0!==l;){if(m||-1===t.firstTabInLine||(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),r=t.input.charCodeAt(t.position+1),a=t.line,63!==l&&58!==l||!Ue(r)){if(s=t.line,o=t.lineStart,c=t.position,!fn(t,n,2,!1,!0))break;if(t.line===a){for(l=t.input.charCodeAt(t.position);ze(l);)l=t.input.charCodeAt(++t.position);if(58===l)Ue(l=t.input.charCodeAt(++t.position))||tn(t,"a whitespace character is expected after the key-value separator within a block mapping"),m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!1,i=!1,f=t.tag,g=t.result;else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read an implicit mapping pair; a colon is missed")}}else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read a block mapping entry; a multiline key may not be an implicit key")}}else 63===l?(m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!0,i=!0):m?(m=!1,i=!0):tn(t,"incomplete explicit mapping pair; a key node is missed; or followed by a non-tabulated empty line"),t.position+=1,l=r;if((t.line===a||t.lineIndent>e)&&(m&&(s=t.line,o=t.lineStart,c=t.position),fn(t,e,4,!0,i)&&(m?g=t.result:y=t.result),m||(sn(t,d,p,f,g,y,s,o,c),f=g=y=null),cn(t,!0,-1),l=t.input.charCodeAt(t.position)),(t.line===a||t.lineIndent>e)&&0!==l)tn(t,"bad indentation of a mapping entry");else if(t.lineIndent<e)break}return m&&sn(t,d,p,f,g,null,s,o,c),b&&(t.tag=h,t.anchor=u,t.kind="mapping",t.result=d),b}(t,p,d))||function(t,e){var n,r,i,a,s,o,c,l,h,u,d,p,f=!0,g=t.tag,y=t.anchor,m=Object.create(null);if(91===(p=t.input.charCodeAt(t.position)))s=93,l=!1,a=[];else{if(123!==p)return!1;s=125,l=!0,a={}}for(null!==t.anchor&&(t.anchorMap[t.anchor]=a),p=t.input.charCodeAt(++t.position);0!==p;){if(cn(t,!0,e),(p=t.input.charCodeAt(t.position))===s)return t.position++,t.tag=g,t.anchor=y,t.kind=l?"mapping":"sequence",t.result=a,!0;f?44===p&&tn(t,"expected the node content, but found ','"):tn(t,"missed comma between flow collection entries"),d=null,o=c=!1,63===p&&Ue(t.input.charCodeAt(t.position+1))&&(o=c=!0,t.position++,cn(t,!0,e)),n=t.line,r=t.lineStart,i=t.position,fn(t,e,1,!1,!0),u=t.tag,h=t.result,cn(t,!0,e),p=t.input.charCodeAt(t.position),!c&&t.line!==n||58!==p||(o=!0,p=t.input.charCodeAt(++t.position),cn(t,!0,e),fn(t,e,1,!1,!0),d=t.result),l?sn(t,a,m,u,h,d,n,r,i):o?a.push(sn(t,null,m,u,h,d,n,r,i)):a.push(h),cn(t,!0,e),44===(p=t.input.charCodeAt(t.position))?(f=!0,p=t.input.charCodeAt(++t.position)):f=!1}tn(t,"unexpected end of the stream within a flow collection")}(t,d)?y=!0:(s&&function(t,e){var n,r,i,a,s,o=1,c=!1,l=!1,h=e,u=0,d=!1;if(124===(a=t.input.charCodeAt(t.position)))r=!1;else{if(62!==a)return!1;r=!0}for(t.kind="scalar",t.result="";0!==a;)if(43===(a=t.input.charCodeAt(++t.position))||45===a)1===o?o=43===a?3:2:tn(t,"repeat of a chomping mode identifier");else{if(!((i=48<=(s=a)&&s<=57?s-48:-1)>=0))break;0===i?tn(t,"bad explicit indentation width of a block scalar; it cannot be less than one"):l?tn(t,"repeat of an indentation width identifier"):(h=e+i-1,l=!0)}if(ze(a)){do{a=t.input.charCodeAt(++t.position)}while(ze(a));if(35===a)do{a=t.input.charCodeAt(++t.position)}while(!Ye(a)&&0!==a)}for(;0!==a;){for(on(t),t.lineIndent=0,a=t.input.charCodeAt(t.position);(!l||t.lineIndent<h)&&32===a;)t.lineIndent++,a=t.input.charCodeAt(++t.position);if(!l&&t.lineIndent>h&&(h=t.lineIndent),Ye(a))u++;else{if(t.lineIndent<h){3===o?t.result+=Jt.repeat("\n",c?1+u:u):1===o&&c&&(t.result+="\n");break}for(r?ze(a)?(d=!0,t.result+=Jt.repeat("\n",c?1+u:u)):d?(d=!1,t.result+=Jt.repeat("\n",u+1)):0===u?c&&(t.result+=" "):t.result+=Jt.repeat("\n",u):t.result+=Jt.repeat("\n",c?1+u:u),c=!0,l=!0,u=0,n=t.position;!Ye(a)&&0!==a;)a=t.input.charCodeAt(++t.position);rn(t,n,t.position,!1)}}return!0}(t,d)||function(t,e){var n,r,i;if(39!==(n=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,r=i=t.position;0!==(n=t.input.charCodeAt(t.position));)if(39===n){if(rn(t,r,t.position,!0),39!==(n=t.input.charCodeAt(++t.position)))return!0;r=t.position,t.position++,i=t.position}else Ye(n)?(rn(t,r,i,!0),hn(t,cn(t,!1,e)),r=i=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a single quoted scalar"):(t.position++,i=t.position);tn(t,"unexpected end of the stream within a single quoted scalar")}(t,d)||function(t,e){var n,r,i,a,s,o,c;if(34!==(o=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,n=r=t.position;0!==(o=t.input.charCodeAt(t.position));){if(34===o)return rn(t,n,t.position,!0),t.position++,!0;if(92===o){if(rn(t,n,t.position,!0),Ye(o=t.input.charCodeAt(++t.position)))cn(t,!1,e);else if(o<256&&Ge[o])t.result+=Xe[o],t.position++;else if((s=120===(c=o)?2:117===c?4:85===c?8:0)>0){for(i=s,a=0;i>0;i--)(s=qe(o=t.input.charCodeAt(++t.position)))>=0?a=(a<<4)+s:tn(t,"expected hexadecimal character");t.result+=Ve(a),t.position++}else tn(t,"unknown escape sequence");n=r=t.position}else Ye(o)?(rn(t,n,r,!0),hn(t,cn(t,!1,e)),n=r=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a double quoted scalar"):(t.position++,r=t.position)}tn(t,"unexpected end of the stream within a double quoted scalar")}(t,d)?y=!0:!function(t){var e,n,r;if(42!==(r=t.input.charCodeAt(t.position)))return!1;for(r=t.input.charCodeAt(++t.position),e=t.position;0!==r&&!Ue(r)&&!We(r);)r=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an alias node must contain at least one character"),n=t.input.slice(e,t.position),Ie.call(t.anchorMap,n)||tn(t,'unidentified alias "'+n+'"'),t.result=t.anchorMap[n],cn(t,!0,-1),!0}(t)?function(t,e,n){var r,i,a,s,o,c,l,h,u=t.kind,d=t.result;if(Ue(h=t.input.charCodeAt(t.position))||We(h)||35===h||38===h||42===h||33===h||124===h||62===h||39===h||34===h||37===h||64===h||96===h)return!1;if((63===h||45===h)&&(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r)))return!1;for(t.kind="scalar",t.result="",i=a=t.position,s=!1;0!==h;){if(58===h){if(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r))break}else if(35===h){if(Ue(t.input.charCodeAt(t.position-1)))break}else{if(t.position===t.lineStart&&ln(t)||n&&We(h))break;if(Ye(h)){if(o=t.line,c=t.lineStart,l=t.lineIndent,cn(t,!1,-1),t.lineIndent>=e){s=!0,h=t.input.charCodeAt(t.position);continue}t.position=a,t.line=o,t.lineStart=c,t.lineIndent=l;break}}s&&(rn(t,i,a,!1),hn(t,t.line-o),i=a=t.position,s=!1),ze(h)||(a=t.position+1),h=t.input.charCodeAt(++t.position)}return rn(t,i,a,!1),!!t.result||(t.kind=u,t.result=d,!1)}(t,d,1===n)&&(y=!0,null===t.tag&&(t.tag="?")):(y=!0,null===t.tag&&null===t.anchor||tn(t,"alias node should not have any properties")),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):0===f&&(y=o&&un(t,p))),null===t.tag)null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);else if("?"===t.tag){for(null!==t.result&&"scalar"!==t.kind&&tn(t,'unacceptable node kind for !<?> tag; it should be "scalar", not "'+t.kind+'"'),c=0,l=t.implicitTypes.length;c<l;c+=1)if((u=t.implicitTypes[c]).resolve(t.result)){t.result=u.construct(t.result),t.tag=u.tag,null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);break}}else if("!"!==t.tag){if(Ie.call(t.typeMap[t.kind||"fallback"],t.tag))u=t.typeMap[t.kind||"fallback"][t.tag];else for(u=null,c=0,l=(h=t.typeMap.multi[t.kind||"fallback"]).length;c<l;c+=1)if(t.tag.slice(0,h[c].tag.length)===h[c].tag){u=h[c];break}u||tn(t,"unknown tag !<"+t.tag+">"),null!==t.result&&u.kind!==t.kind&&tn(t,"unacceptable node kind for !<"+t.tag+'> tag; it should be "'+u.kind+'", not "'+t.kind+'"'),u.resolve(t.result,t.tag)?(t.result=u.construct(t.result,t.tag),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):tn(t,"cannot resolve a node with !<"+t.tag+"> explicit tag")}return null!==t.listener&&t.listener("close",t),null!==t.tag||null!==t.anchor||y}function gn(t){var e,n,r,i,a=t.position,s=!1;for(t.version=null,t.checkLineBreaks=t.legacy,t.tagMap=Object.create(null),t.anchorMap=Object.create(null);0!==(i=t.input.charCodeAt(t.position))&&(cn(t,!0,-1),i=t.input.charCodeAt(t.position),!(t.lineIndent>0||37!==i));){for(s=!0,i=t.input.charCodeAt(++t.position),e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);for(r=[],(n=t.input.slice(e,t.position)).length<1&&tn(t,"directive name must not be less than one character in length");0!==i;){for(;ze(i);)i=t.input.charCodeAt(++t.position);if(35===i){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&!Ye(i));break}if(Ye(i))break;for(e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);r.push(t.input.slice(e,t.position))}0!==i&&on(t),Ie.call(nn,n)?nn[n](t,n,r):en(t,'unknown document directive "'+n+'"')}cn(t,!0,-1),0===t.lineIndent&&45===t.input.charCodeAt(t.position)&&45===t.input.charCodeAt(t.position+1)&&45===t.input.charCodeAt(t.position+2)?(t.position+=3,cn(t,!0,-1)):s&&tn(t,"directives end mark is expected"),fn(t,t.lineIndent-1,4,!1,!0),cn(t,!0,-1),t.checkLineBreaks&&$e.test(t.input.slice(a,t.position))&&en(t,"non-ASCII line breaks are interpreted as content"),t.documents.push(t.result),t.position===t.lineStart&&ln(t)?46===t.input.charCodeAt(t.position)&&(t.position+=3,cn(t,!0,-1)):t.position<t.length-1&&tn(t,"end of the stream or a document separator is expected")}function yn(t,e){e=e||{},0!==(t=String(t)).length&&(10!==t.charCodeAt(t.length-1)&&13!==t.charCodeAt(t.length-1)&&(t+="\n"),65279===t.charCodeAt(0)&&(t=t.slice(1)));var n=new Qe(t,e),r=t.indexOf("\0");for(-1!==r&&(n.position=r,tn(n,"null byte is not allowed in input")),n.input+="\0";32===n.input.charCodeAt(n.position);)n.lineIndent+=1,n.position+=1;for(;n.position<n.length-1;)gn(n);return n.documents}var mn=ue,bn={loadAll:function(t,e,n){null!==e&&"object"==typeof e&&void 0===n&&(n=e,e=null);var r=yn(t,n);if("function"!=typeof e)return r;for(var i=0,a=r.length;i<a;i+=1)e(r[i])},load:function(t,e){var n=yn(t,e);if(0!==n.length){if(1===n.length)return n[0];throw new ne("expected a single document in the stream, but found more")}}}.load;const _n=/^-{3}\s*[\n\r](.*?)[\n\r]-{3}\s*[\n\r]+/s;const xn=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,vn=/\s*%%.*\n/gm,kn={},wn=function(t,e){t=t.replace(_n,"").replace(xn,"").replace(vn,"\n");for(const[n,{detector:r}]of Object.entries(kn)){if(r(t,e))return n}throw new Error(`No diagram type detected for text: ${t}`)},En=(...t)=>{for(const{id:e,detector:n,loader:r}of t)Cn(e,n,r)},Cn=(t,e,n)=>{kn[t]?Nt.error(`Detector with key ${t} already exists`):kn[t]={detector:e,loader:n},Nt.debug(`Detector with key ${t} added${n?" with loader":""}`)},Tn=function(t,e,n){const{depth:r,clobber:i}=Object.assign({depth:2,clobber:!1},n);return Array.isArray(e)&&!Array.isArray(t)?(e.forEach((e=>Tn(t,e,n))),t):Array.isArray(e)&&Array.isArray(t)?(e.forEach((e=>{t.includes(e)||t.push(e)})),t):void 0===t||r<=0?null!=t&&"object"==typeof t&&"object"==typeof e?Object.assign(t,e):e:(void 0!==e&&"object"==typeof t&&"object"==typeof e&&Object.keys(e).forEach((n=>{"object"!=typeof e[n]||void 0!==t[n]&&"object"!=typeof t[n]?(i||"object"!=typeof t[n]&&"object"!=typeof e[n])&&(t[n]=e[n]):(void 0===t[n]&&(t[n]=Array.isArray(e[n])?[]:{}),t[n]=Tn(t[n],e[n],{depth:r-1,clobber:i}))})),t)},Sn=Tn,An={curveBasis:o.$0Z,curveBasisClosed:o.Dts,curveBasisOpen:o.WQY,curveBumpX:o.qpX,curveBumpY:o.u93,curveBundle:o.tFB,curveCardinalClosed:o.OvA,curveCardinalOpen:o.dCK,curveCardinal:o.YY7,curveCatmullRomClosed:o.fGX,curveCatmullRomOpen:o.$m7,curveCatmullRom:o.zgE,curveLinear:o.c_6,curveLinearClosed:o.fxm,curveMonotoneX:o.FdL,curveMonotoneY:o.ak_,curveNatural:o.SxZ,curveStep:o.eA_,curveStepAfter:o.jsv,curveStepBefore:o.iJ},Ln=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Bn=/\s*(?:(\w+)(?=:):|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Nn=function(t,e=null){try{const n=new RegExp(`[%]{2}(?![{]${Bn.source})(?=[}][%]{2}).*\n`,"ig");let r;t=t.trim().replace(n,"").replace(/'/gm,'"'),Nt.debug(`Detecting diagram directive${null!==e?" type:"+e:""} based on the text:${t}`);const i=[];for(;null!==(r=Ln.exec(t));)if(r.index===Ln.lastIndex&&Ln.lastIndex++,r&&!e||e&&r[1]&&r[1].match(e)||e&&r[2]&&r[2].match(e)){const t=r[1]?r[1]:r[2],e=r[3]?r[3].trim():r[4]?JSON.parse(r[4].trim()):null;i.push({type:t,args:e})}return 0===i.length&&i.push({type:t,args:null}),1===i.length?i[0]:i}catch(n){return Nt.error(`ERROR: ${n.message} - Unable to parse directive\n      ${null!==e?" type:"+e:""} based on the text:${t}`),{type:null,args:null}}};function Dn(t,e){if(!t)return e;const n=`curve${t.charAt(0).toUpperCase()+t.slice(1)}`;return An[n]||e}function On(t,e){return t&&e?Math.sqrt(Math.pow(e.x-t.x,2)+Math.pow(e.y-t.y,2)):0}function Mn(t){let e="",n="";for(const r of t)void 0!==r&&(r.startsWith("color:")||r.startsWith("text-align:")?n=n+r+";":e=e+r+";");return{style:e,labelStyle:n}}let In=0;const Fn=()=>(In++,"id-"+Math.random().toString(36).substr(2,12)+"-"+In);const $n=t=>function(t){let e="";const n="0123456789abcdef",r=n.length;for(let i=0;i<t;i++)e+=n.charAt(Math.floor(Math.random()*r));return e}(t.length),Rn=function(t,e){const n=e.text.replace(Yt.lineBreakRegex," "),[,r]=Vn(e.fontSize),i=t.append("text");i.attr("x",e.x),i.attr("y",e.y),i.style("text-anchor",e.anchor),i.style("font-family",e.fontFamily),i.style("font-size",r),i.style("font-weight",e.fontWeight),i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class);const a=i.append("tspan");return a.attr("x",e.x+2*e.textMargin),a.attr("fill",e.fill),a.text(n),i},Zn=(0,v.Z)(((t,e,n)=>{if(!t)return t;if(n=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",joinWith:"<br/>"},n),Yt.lineBreakRegex.test(t))return t;const r=t.split(" "),i=[];let a="";return r.forEach(((t,s)=>{const o=Yn(`${t} `,n),c=Yn(a,n);if(o>e){const{hyphenatedStrings:r,remainingWord:s}=Pn(t,e,"-",n);i.push(a,...r),a=s}else c+o>=e?(i.push(a),a=t):a=[a,t].filter(Boolean).join(" ");s+1===r.length&&i.push(a)})),i.filter((t=>""!==t)).join(n.joinWith)}),((t,e,n)=>`${t}${e}${n.fontSize}${n.fontWeight}${n.fontFamily}${n.joinWith}`)),Pn=(0,v.Z)(((t,e,n="-",r)=>{r=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:0},r);const i=[...t],a=[];let s="";return i.forEach(((t,o)=>{const c=`${s}${t}`;if(Yn(c,r)>=e){const t=o+1,e=i.length===t,r=`${c}${n}`;a.push(e?c:r),s=""}else s=c})),{hyphenatedStrings:a,remainingWord:s}}),((t,e,n="-",r)=>`${t}${e}${n}${r.fontSize}${r.fontWeight}${r.fontFamily}`));function jn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:15},e),zn(t,e).height}function Yn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e),zn(t,e).width}const zn=(0,v.Z)(((t,e)=>{e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e);const{fontSize:n,fontFamily:r,fontWeight:i}=e;if(!t)return{width:0,height:0};const[,a]=Vn(n),s=["sans-serif",r],c=t.split(Yt.lineBreakRegex),l=[],h=(0,o.Ys)("body");if(!h.remove)return{width:0,height:0,lineHeight:0};const u=h.append("svg");for(const o of s){let t=0;const e={width:0,height:0,lineHeight:0};for(const n of c){const r={x:0,y:0,fill:void 0,anchor:"start",style:"#666",width:100,height:100,textMargin:0,rx:0,ry:0,valign:void 0};r.text=n;const s=Rn(u,r).style("font-size",a).style("font-weight",i).style("font-family",o),c=(s._groups||s)[0][0].getBBox();e.width=Math.round(Math.max(e.width,c.width)),t=Math.round(c.height),e.height+=t,e.lineHeight=Math.round(Math.max(e.lineHeight,t))}l.push(e)}u.remove();return l[isNaN(l[1].height)||isNaN(l[1].width)||isNaN(l[1].lineHeight)||l[0].height>l[1].height&&l[0].width>l[1].width&&l[0].lineHeight>l[1].lineHeight?0:1]}),((t,e)=>`${t}${e.fontSize}${e.fontWeight}${e.fontFamily}`));let Un;const Wn=t=>{if(Nt.debug("directiveSanitizer called with",t),"object"==typeof t&&(t.length?t.forEach((t=>Wn(t))):Object.keys(t).forEach((e=>{Nt.debug("Checking key",e),e.startsWith("__")&&(Nt.debug("sanitize deleting __ option",e),delete t[e]),e.includes("proto")&&(Nt.debug("sanitize deleting proto option",e),delete t[e]),e.includes("constr")&&(Nt.debug("sanitize deleting constr option",e),delete t[e]),e.includes("themeCSS")&&(Nt.debug("sanitizing themeCss option"),t[e]=qn(t[e])),e.includes("fontFamily")&&(Nt.debug("sanitizing fontFamily option"),t[e]=qn(t[e])),e.includes("altFontFamily")&&(Nt.debug("sanitizing altFontFamily option"),t[e]=qn(t[e])),Xt.includes(e)?"object"==typeof t[e]&&(Nt.debug("sanitize deleting object",e),Wn(t[e])):(Nt.debug("sanitize deleting option",e),delete t[e])}))),t.themeVariables){const e=Object.keys(t.themeVariables);for(const n of e){const e=t.themeVariables[n];e&&e.match&&!e.match(/^[\d "#%(),.;A-Za-z]+$/)&&(t.themeVariables[n]="")}}Nt.debug("After sanitization",t)},qn=t=>{let e=0,n=0;for(const r of t){if(e<n)return"{ /* ERROR: Unbalanced CSS */ }";"{"===r?e++:"}"===r&&n++}return e!==n?"{ /* ERROR: Unbalanced CSS */ }":t};function Hn(t){return"str"in t}const Vn=t=>{if("number"==typeof t)return[t,t+"px"];const e=parseInt(t,10);return Number.isNaN(e)?[void 0,void 0]:t===String(e)?[e,t+"px"]:[e,t]},Gn={assignWithDepth:Sn,wrapLabel:Zn,calculateTextHeight:jn,calculateTextWidth:Yn,calculateTextDimensions:zn,detectInit:function(t,e){const n=Nn(t,/(?:init\b)|(?:initialize\b)/);let r={};if(Array.isArray(n)){const t=n.map((t=>t.args));Wn(t),r=Sn(r,[...t])}else r=n.args;if(r){let n=wn(t,e);["config"].forEach((t=>{void 0!==r[t]&&("flowchart-v2"===n&&(n="flowchart"),r[n]=r[t],delete r[t])}))}return r},detectDirective:Nn,isSubstringInArray:function(t,e){for(const[n,r]of e.entries())if(r.match(t))return n;return-1},interpolateToCurve:Dn,calcLabelPosition:function(t){return 1===t.length?t[0]:function(t){let e,n=0;t.forEach((t=>{n+=On(t,e),e=t}));let r,i=n/2;return e=void 0,t.forEach((t=>{if(e&&!r){const n=On(t,e);if(n<i)i-=n;else{const a=i/n;a<=0&&(r=e),a>=1&&(r={x:t.x,y:t.y}),a>0&&a<1&&(r={x:(1-a)*e.x+a*t.x,y:(1-a)*e.y+a*t.y})}}e=t})),r}(t)},calcCardinalityPosition:(t,e,n)=>{let r;Nt.info(`our points ${JSON.stringify(e)}`),e[0]!==n&&(e=e.reverse());let i,a=25;r=void 0,e.forEach((t=>{if(r&&!i){const e=On(t,r);if(e<a)a-=e;else{const n=a/e;n<=0&&(i=r),n>=1&&(i={x:t.x,y:t.y}),n>0&&n<1&&(i={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const s=t?10:5,o=Math.atan2(e[0].y-i.y,e[0].x-i.x),c={x:0,y:0};return c.x=Math.sin(o)*s+(e[0].x+i.x)/2,c.y=-Math.cos(o)*s+(e[0].y+i.y)/2,c},calcTerminalLabelPosition:function(t,e,n){let r,i=JSON.parse(JSON.stringify(n));Nt.info("our points",i),"start_left"!==e&&"start_right"!==e&&(i=i.reverse()),i.forEach((t=>{r=t}));let a,s=25+t;r=void 0,i.forEach((t=>{if(r&&!a){const e=On(t,r);if(e<s)s-=e;else{const n=s/e;n<=0&&(a=r),n>=1&&(a={x:t.x,y:t.y}),n>0&&n<1&&(a={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const o=10+.5*t,c=Math.atan2(i[0].y-a.y,i[0].x-a.x),l={x:0,y:0};return l.x=Math.sin(c)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2,"start_left"===e&&(l.x=Math.sin(c+Math.PI)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c+Math.PI)*o+(i[0].y+a.y)/2),"end_right"===e&&(l.x=Math.sin(c-Math.PI)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c-Math.PI)*o+(i[0].y+a.y)/2-5),"end_left"===e&&(l.x=Math.sin(c)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2-5),l},formatUrl:function(t,e){const n=t.trim();if(n)return"loose"!==e.securityLevel?(0,s.N)(n):n},getStylesFromArray:Mn,generateId:Fn,random:$n,runFunc:(t,...e)=>{const n=t.split("."),r=n.length-1,i=n[r];let a=window;for(let s=0;s<r;s++)if(a=a[n[s]],!a)return;a[i](...e)},entityDecode:function(t){return Un=Un||document.createElement("div"),t=escape(t).replace(/%26/g,"&").replace(/%23/g,"#").replace(/%3B/g,";"),Un.innerHTML=t,unescape(Un.textContent)},initIdGenerator:class{constructor(t,e){this.deterministic=t,this.seed=e,this.count=e?e.length:0}next(){return this.deterministic?this.count++:Date.now()}},directiveSanitizer:Wn,sanitizeCss:qn,insertTitle:(t,e,n,r)=>{if(!r)return;const i=t.node().getBBox();t.append("text").text(r).attr("x",i.x+i.width/2).attr("y",-n).attr("class",e)},parseFontSize:Vn},Xn="9.4.3",Kn=Object.freeze(Kt);let Qn,Jn=Sn({},Kn),tr=[],er=Sn({},Kn);const nr=(t,e)=>{let n=Sn({},t),r={};for(const i of e)sr(i),r=Sn(r,i);if(n=Sn(n,r),r.theme&&r.theme in Ht){const t=Sn({},Qn),e=Sn(t.themeVariables||{},r.themeVariables);n.theme&&n.theme in Ht&&(n.themeVariables=Ht[n.theme].getThemeVariables(e))}return er=n,ur(er),er},rr=()=>Sn({},Jn),ir=t=>(ur(t),Sn(er,t),ar()),ar=()=>Sn({},er),sr=t=>{["secure",...Jn.secure??[]].forEach((e=>{void 0!==t[e]&&(Nt.debug(`Denied attempt to modify a secure key ${e}`,t[e]),delete t[e])})),Object.keys(t).forEach((e=>{0===e.indexOf("__")&&delete t[e]})),Object.keys(t).forEach((e=>{"string"==typeof t[e]&&(t[e].includes("<")||t[e].includes(">")||t[e].includes("url(data:"))&&delete t[e],"object"==typeof t[e]&&sr(t[e])}))},or=t=>{t.fontFamily&&(t.themeVariables&&t.themeVariables.fontFamily||(t.themeVariables={fontFamily:t.fontFamily})),tr.push(t),nr(Jn,tr)},cr=(t=Jn)=>{tr=[],nr(t,tr)};var lr=(t=>(t.LAZY_LOAD_DEPRECATED="The configuration options lazyLoadedDiagrams and loadExternalDiagramsAtStartup are deprecated. Please use registerExternalDiagrams instead.",t))(lr||{});const hr={},ur=t=>{var e;t&&((t.lazyLoadedDiagrams||t.loadExternalDiagramsAtStartup)&&(hr[e="LAZY_LOAD_DEPRECATED"]||(Nt.warn(lr[e]),hr[e]=!0)))},dr=function(t,e,n,r){const i=function(t,e,n){let r=new Map;return n?(r.set("width","100%"),r.set("style",`max-width: ${e}px;`)):(r.set("height",t),r.set("width",e)),r}(e,n,r);!function(t,e){for(let n of e)t.attr(n[0],n[1])}(t,i)},pr=function(t,e,n,r){const i=e.node().getBBox(),a=i.width,s=i.height;Nt.info(`SVG bounds: ${a}x${s}`,i);let o=0,c=0;Nt.info(`Graph bounds: ${o}x${c}`,t),o=a+2*n,c=s+2*n,Nt.info(`Calculated bounds: ${o}x${c}`),dr(e,c,o,r);const l=`${i.x-n} ${i.y-n} ${i.width+2*n} ${i.height+2*n}`;e.attr("viewBox",l)},fr=t=>`g.classGroup text {\n  fill: ${t.nodeBorder};\n  fill: ${t.classText};\n  stroke: none;\n  font-family: ${t.fontFamily};\n  font-size: 10px;\n\n  .title {\n    font-weight: bolder;\n  }\n\n}\n\n.nodeLabel, .edgeLabel {\n  color: ${t.classText};\n}\n.edgeLabel .label rect {\n  fill: ${t.mainBkg};\n}\n.label text {\n  fill: ${t.classText};\n}\n.edgeLabel .label span {\n  background: ${t.mainBkg};\n}\n\n.classTitle {\n  font-weight: bolder;\n}\n.node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n\n.divider {\n  stroke: ${t.nodeBorder};\n  stroke: 1;\n}\n\ng.clickable {\n  cursor: pointer;\n}\n\ng.classGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.classGroup line {\n  stroke: ${t.nodeBorder};\n  stroke-width: 1;\n}\n\n.classLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.classLabel .label {\n  fill: ${t.nodeBorder};\n  font-size: 10px;\n}\n\n.relation {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.dashed-line{\n  stroke-dasharray: 3;\n}\n\n.dotted-line{\n  stroke-dasharray: 1 2;\n}\n\n#compositionStart, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#compositionEnd, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionStart, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionEnd, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationStart, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationEnd, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopStart, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopEnd, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n.edgeTerminals {\n  font-size: 11px;\n}\n\n.classTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,gr=t=>`\n  .entityBox {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxOdd {\n    fill: ${t.attributeBackgroundColorOdd};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxEven {\n    fill:  ${t.attributeBackgroundColorEven};\n    stroke: ${t.nodeBorder};\n  }\n\n  .relationshipLabelBox {\n    fill: ${t.tertiaryColor};\n    opacity: 0.7;\n    background-color: ${t.tertiaryColor};\n      rect {\n        opacity: 0.5;\n      }\n  }\n\n    .relationshipLine {\n      stroke: ${t.lineColor};\n    }\n\n  .entityTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }    \n`,yr=()=>"",mr=t=>`.label {\n    font-family: ${t.fontFamily};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n  .cluster-label text {\n    fill: ${t.titleColor};\n  }\n  .cluster-label span {\n    color: ${t.titleColor};\n  }\n\n  .label text,span {\n    fill: ${t.nodeTextColor||t.textColor};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 2.0px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n      background-color: ${t.edgeLabelBackground};\n      fill: ${t.edgeLabelBackground};\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n    fill: ${t.clusterBkg};\n    stroke: ${t.clusterBorder};\n    stroke-width: 1px;\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  .cluster span {\n    color: ${t.titleColor};\n  }\n  /* .cluster div {\n    color: ${t.titleColor};\n  } */\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: ${t.fontFamily};\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .flowchartTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n`,br=t=>`\n  .mermaid-main-font {\n    font-family: "trebuchet ms", verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  .exclude-range {\n    fill: ${t.excludeBkgColor};\n  }\n\n  .section {\n    stroke: none;\n    opacity: 0.2;\n  }\n\n  .section0 {\n    fill: ${t.sectionBkgColor};\n  }\n\n  .section2 {\n    fill: ${t.sectionBkgColor2};\n  }\n\n  .section1,\n  .section3 {\n    fill: ${t.altSectionBkgColor};\n    opacity: 0.2;\n  }\n\n  .sectionTitle0 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle1 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle2 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle3 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle {\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    // text-height: 14px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n\n  /* Grid and axis */\n\n  .grid .tick {\n    stroke: ${t.gridColor};\n    opacity: 0.8;\n    shape-rendering: crispEdges;\n    text {\n      font-family: ${t.fontFamily};\n      fill: ${t.textColor};\n    }\n  }\n\n  .grid path {\n    stroke-width: 0;\n  }\n\n\n  /* Today line */\n\n  .today {\n    fill: none;\n    stroke: ${t.todayLineColor};\n    stroke-width: 2px;\n  }\n\n\n  /* Task styling */\n\n  /* Default task */\n\n  .task {\n    stroke-width: 2;\n  }\n\n  .taskText {\n    text-anchor: middle;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n\n  // .taskText:not([font-size]) {\n  //   font-size: ${t.ganttFontSize};\n  // }\n\n  .taskTextOutsideRight {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n  .taskTextOutsideLeft {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: end;\n    // font-size: ${t.ganttFontSize};\n  }\n\n  /* Special case clickable */\n  .task.clickable {\n    cursor: pointer;\n  }\n  .taskText.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideLeft.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideRight.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  /* Specific task settings for the sections*/\n\n  .taskText0,\n  .taskText1,\n  .taskText2,\n  .taskText3 {\n    fill: ${t.taskTextColor};\n  }\n\n  .task0,\n  .task1,\n  .task2,\n  .task3 {\n    fill: ${t.taskBkgColor};\n    stroke: ${t.taskBorderColor};\n  }\n\n  .taskTextOutside0,\n  .taskTextOutside2\n  {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n  .taskTextOutside1,\n  .taskTextOutside3 {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n\n  /* Active task */\n\n  .active0,\n  .active1,\n  .active2,\n  .active3 {\n    fill: ${t.activeTaskBkgColor};\n    stroke: ${t.activeTaskBorderColor};\n  }\n\n  .activeText0,\n  .activeText1,\n  .activeText2,\n  .activeText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Completed task */\n\n  .done0,\n  .done1,\n  .done2,\n  .done3 {\n    stroke: ${t.doneTaskBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneText0,\n  .doneText1,\n  .doneText2,\n  .doneText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Tasks on the critical line */\n\n  .crit0,\n  .crit1,\n  .crit2,\n  .crit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.critBkgColor};\n    stroke-width: 2;\n  }\n\n  .activeCrit0,\n  .activeCrit1,\n  .activeCrit2,\n  .activeCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.activeTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneCrit0,\n  .doneCrit1,\n  .doneCrit2,\n  .doneCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n    cursor: pointer;\n    shape-rendering: crispEdges;\n  }\n\n  .milestone {\n    transform: rotate(45deg) scale(0.8,0.8);\n  }\n\n  .milestoneText {\n    font-style: italic;\n  }\n  .doneCritText0,\n  .doneCritText1,\n  .doneCritText2,\n  .doneCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .activeCritText0,\n  .activeCritText1,\n  .activeCritText2,\n  .activeCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .titleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor}    ;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n`,_r=()=>"",xr=t=>`\n  .pieCircle{\n    stroke: ${t.pieStrokeColor};\n    stroke-width : ${t.pieStrokeWidth};\n    opacity : ${t.pieOpacity};\n  }\n  .pieTitleText {\n    text-anchor: middle;\n    font-size: ${t.pieTitleTextSize};\n    fill: ${t.pieTitleTextColor};\n    font-family: ${t.fontFamily};\n  }\n  .slice {\n    font-family: ${t.fontFamily};\n    fill: ${t.pieSectionTextColor};\n    font-size:${t.pieSectionTextSize};\n    // fill: white;\n  }\n  .legend text {\n    fill: ${t.pieLegendTextColor};\n    font-family: ${t.fontFamily};\n    font-size: ${t.pieLegendTextSize};\n  }\n`,vr=t=>`\n\n  marker {\n    fill: ${t.relationColor};\n    stroke: ${t.relationColor};\n  }\n\n  marker.cross {\n    stroke: ${t.lineColor};\n  }\n\n  svg {\n    font-family: ${t.fontFamily};\n    font-size: ${t.fontSize};\n  }\n\n  .reqBox {\n    fill: ${t.requirementBackground};\n    fill-opacity: 100%;\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  \n  .reqTitle, .reqLabel{\n    fill:  ${t.requirementTextColor};\n  }\n  .reqLabelBox {\n    fill: ${t.relationLabelBackground};\n    fill-opacity: 100%;\n  }\n\n  .req-title-line {\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  .relationshipLine {\n    stroke: ${t.relationColor};\n    stroke-width: 1;\n  }\n  .relationshipLabel {\n    fill: ${t.relationLabelColor};\n  }\n\n`,kr=t=>`.actor {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n\n  text.actor > tspan {\n    fill: ${t.actorTextColor};\n    stroke: none;\n  }\n\n  .actor-line {\n    stroke: ${t.actorLineColor};\n  }\n\n  .messageLine0 {\n    stroke-width: 1.5;\n    stroke-dasharray: none;\n    stroke: ${t.signalColor};\n  }\n\n  .messageLine1 {\n    stroke-width: 1.5;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.signalColor};\n  }\n\n  #arrowhead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .sequenceNumber {\n    fill: ${t.sequenceNumberColor};\n  }\n\n  #sequencenumber {\n    fill: ${t.signalColor};\n  }\n\n  #crosshead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .messageText {\n    fill: ${t.signalTextColor};\n    stroke: none;\n  }\n\n  .labelBox {\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBkgColor};\n  }\n\n  .labelText, .labelText > tspan {\n    fill: ${t.labelTextColor};\n    stroke: none;\n  }\n\n  .loopText, .loopText > tspan {\n    fill: ${t.loopTextColor};\n    stroke: none;\n  }\n\n  .loopLine {\n    stroke-width: 2px;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBorderColor};\n  }\n\n  .note {\n    //stroke: #decc93;\n    stroke: ${t.noteBorderColor};\n    fill: ${t.noteBkgColor};\n  }\n\n  .noteText, .noteText > tspan {\n    fill: ${t.noteTextColor};\n    stroke: none;\n  }\n\n  .activation0 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation1 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation2 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .actorPopupMenu {\n    position: absolute;\n  }\n\n  .actorPopupMenuPanel {\n    position: absolute;\n    fill: ${t.actorBkg};\n    box-shadow: 0px 8px 16px 0px rgba(0,0,0,0.2);\n    filter: drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));\n}\n  .actor-man line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n  .actor-man circle, line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n    stroke-width: 2px;\n  }\n`,wr=t=>`\ndefs #statediagram-barbEnd {\n    fill: ${t.transitionColor};\n    stroke: ${t.transitionColor};\n  }\ng.stateGroup text {\n  fill: ${t.nodeBorder};\n  stroke: none;\n  font-size: 10px;\n}\ng.stateGroup text {\n  fill: ${t.textColor};\n  stroke: none;\n  font-size: 10px;\n\n}\ng.stateGroup .state-title {\n  font-weight: bolder;\n  fill: ${t.stateLabelColor};\n}\n\ng.stateGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.stateGroup line {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.transition {\n  stroke: ${t.transitionColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.stateGroup .composit {\n  fill: ${t.background};\n  border-bottom: 1px\n}\n\n.stateGroup .alt-composit {\n  fill: #e0e0e0;\n  border-bottom: 1px\n}\n\n.state-note {\n  stroke: ${t.noteBorderColor};\n  fill: ${t.noteBkgColor};\n\n  text {\n    fill: ${t.noteTextColor};\n    stroke: none;\n    font-size: 10px;\n  }\n}\n\n.stateLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.edgeLabel .label rect {\n  fill: ${t.labelBackgroundColor};\n  opacity: 0.5;\n}\n.edgeLabel .label text {\n  fill: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n.label div .edgeLabel {\n  color: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n\n.stateLabel text {\n  fill: ${t.stateLabelColor};\n  font-size: 10px;\n  font-weight: bold;\n}\n\n.node circle.state-start {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node .fork-join {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node circle.state-end {\n  fill: ${t.innerEndBackground};\n  stroke: ${t.background};\n  stroke-width: 1.5\n}\n.end-state-inner {\n  fill: ${t.compositeBackground||t.background};\n  // stroke: ${t.background};\n  stroke-width: 1.5\n}\n\n.node rect {\n  fill: ${t.stateBkg||t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n.node polygon {\n  fill: ${t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};;\n  stroke-width: 1px;\n}\n#statediagram-barbEnd {\n  fill: ${t.lineColor};\n}\n\n.statediagram-cluster rect {\n  fill: ${t.compositeTitleBackground};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n\n.cluster-label, .nodeLabel {\n  color: ${t.stateLabelColor};\n}\n\n.statediagram-cluster rect.outer {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state .divider {\n  stroke: ${t.stateBorder||t.nodeBorder};\n}\n\n.statediagram-state .title-state {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-cluster.statediagram-cluster .inner {\n  fill: ${t.compositeBackground||t.background};\n}\n.statediagram-cluster.statediagram-cluster-alt .inner {\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.statediagram-cluster .inner {\n  rx:0;\n  ry:0;\n}\n\n.statediagram-state rect.basic {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state rect.divider {\n  stroke-dasharray: 10,10;\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.note-edge {\n  stroke-dasharray: 5;\n}\n\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n\n.statediagram-note text {\n  fill: ${t.noteTextColor};\n}\n\n.statediagram-note .nodeLabel {\n  color: ${t.noteTextColor};\n}\n.statediagram .edgeLabel {\n  color: red; // ${t.noteTextColor};\n}\n\n#dependencyStart, #dependencyEnd {\n  fill: ${t.lineColor};\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.statediagramTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,Er=t=>`.label {\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    color: ${t.textColor};\n  }\n  .mouth {\n    stroke: #666;\n  }\n\n  line {\n    stroke: ${t.textColor}\n  }\n\n  .legend {\n    fill: ${t.textColor};\n  }\n\n  .label text {\n    fill: #333;\n  }\n  .label {\n    color: ${t.textColor}\n  }\n\n  .face {\n    ${t.faceColor?`fill: ${t.faceColor}`:"fill: #FFF8DC"};\n    stroke: #999;\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 1.5px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .task-type-0, .section-type-0  {\n    ${t.fillType0?`fill: ${t.fillType0}`:""};\n  }\n  .task-type-1, .section-type-1  {\n    ${t.fillType0?`fill: ${t.fillType1}`:""};\n  }\n  .task-type-2, .section-type-2  {\n    ${t.fillType0?`fill: ${t.fillType2}`:""};\n  }\n  .task-type-3, .section-type-3  {\n    ${t.fillType0?`fill: ${t.fillType3}`:""};\n  }\n  .task-type-4, .section-type-4  {\n    ${t.fillType0?`fill: ${t.fillType4}`:""};\n  }\n  .task-type-5, .section-type-5  {\n    ${t.fillType0?`fill: ${t.fillType5}`:""};\n  }\n  .task-type-6, .section-type-6  {\n    ${t.fillType0?`fill: ${t.fillType6}`:""};\n  }\n  .task-type-7, .section-type-7  {\n    ${t.fillType0?`fill: ${t.fillType7}`:""};\n  }\n\n  .actor-0 {\n    ${t.actor0?`fill: ${t.actor0}`:""};\n  }\n  .actor-1 {\n    ${t.actor1?`fill: ${t.actor1}`:""};\n  }\n  .actor-2 {\n    ${t.actor2?`fill: ${t.actor2}`:""};\n  }\n  .actor-3 {\n    ${t.actor3?`fill: ${t.actor3}`:""};\n  }\n  .actor-4 {\n    ${t.actor4?`fill: ${t.actor4}`:""};\n  }\n  .actor-5 {\n    ${t.actor5?`fill: ${t.actor5}`:""};\n  }\n`,Cr=t=>`.person {\n    stroke: ${t.personBorder};\n    fill: ${t.personBkg};\n  }\n`,Tr={flowchart:mr,"flowchart-v2":mr,sequence:kr,gantt:br,classDiagram:fr,"classDiagram-v2":fr,class:fr,stateDiagram:wr,state:wr,info:_r,pie:xr,er:gr,error:yr,journey:Er,requirement:vr,c4:Cr},Sr=(t,e,n)=>{let r="";return t in Tr&&Tr[t]?r=Tr[t](n):Nt.warn(`No theme found for ${t}`),` & {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n    fill: ${n.textColor}\n  }\n\n  /* Classes common for multiple diagrams */\n\n  & .error-icon {\n    fill: ${n.errorBkgColor};\n  }\n  & .error-text {\n    fill: ${n.errorTextColor};\n    stroke: ${n.errorTextColor};\n  }\n\n  & .edge-thickness-normal {\n    stroke-width: 2px;\n  }\n  & .edge-thickness-thick {\n    stroke-width: 3.5px\n  }\n  & .edge-pattern-solid {\n    stroke-dasharray: 0;\n  }\n\n  & .edge-pattern-dashed{\n    stroke-dasharray: 3;\n  }\n  .edge-pattern-dotted {\n    stroke-dasharray: 2;\n  }\n\n  & .marker {\n    fill: ${n.lineColor};\n    stroke: ${n.lineColor};\n  }\n  & .marker.cross {\n    stroke: ${n.lineColor};\n  }\n\n  & svg {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n  }\n\n  ${r}\n\n  ${e}\n`};let Ar="",Lr="",Br="";const Nr=t=>Ft(t,ar()),Dr=function(){Ar="",Br="",Lr=""},Or=function(t){Ar=Nr(t).replace(/^\s+/g,"")},Mr=function(){return Ar||Lr},Ir=function(t){Br=Nr(t).replace(/\n\s+/g,"\n")},Fr=function(){return Br},$r=function(t){Lr=Nr(t)},Rr=function(){return Lr},Zr={setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,getAccDescription:Fr,setAccDescription:Ir,clear:Dr},Pr=Object.freeze(Object.defineProperty({__proto__:null,clear:Dr,default:Zr,getAccDescription:Fr,getAccTitle:Mr,getDiagramTitle:Rr,setAccDescription:Ir,setAccTitle:Or,setDiagramTitle:$r},Symbol.toStringTag,{value:"Module"}));let jr={};const Yr=function(t,e,n,r){Nt.debug("parseDirective is being called",e,n,r);try{if(void 0!==e)switch(e=e.trim(),n){case"open_directive":jr={};break;case"type_directive":if(!jr)throw new Error("currentDirective is undefined");jr.type=e.toLowerCase();break;case"arg_directive":if(!jr)throw new Error("currentDirective is undefined");jr.args=JSON.parse(e);break;case"close_directive":zr(t,jr,r),jr=void 0}}catch(i){Nt.error(`Error while rendering sequenceDiagram directive: ${e} jison context: ${n}`),Nt.error(i.message)}},zr=function(t,e,n){switch(Nt.info(`Directive type=${e.type} with args:`,e.args),e.type){case"init":case"initialize":["config"].forEach((t=>{void 0!==e.args[t]&&("flowchart-v2"===n&&(n="flowchart"),e.args[n]=e.args[t],delete e.args[t])})),Nt.info("sanitize in handleDirective",e.args),Wn(e.args),Nt.info("sanitize in handleDirective (done)",e.args),or(e.args);break;case"wrap":case"nowrap":t&&t.setWrap&&t.setWrap("wrap"===e.type);break;case"themeCss":Nt.warn("themeCss encountered");break;default:Nt.warn(`Unhandled directive: source: '%%{${e.type}: ${JSON.stringify(e.args?e.args:{})}}%%`,e)}},Ur=Nt,Wr=Dt,qr=ar,Hr=t=>Ft(t,qr()),Vr=pr,Gr=(t,e,n,r)=>Yr(t,e,n,r),Xr={},Kr=(t,e,n)=>{if(Xr[t])throw new Error(`Diagram ${t} already registered.`);var r,i;Xr[t]=e,n&&Cn(t,n),r=t,i=e.styles,Tr[r]=i,e.injectUtils&&e.injectUtils(Ur,Wr,qr,Hr,Vr,Pr,Gr)},Qr=t=>{if(t in Xr)return Xr[t];throw new Error(`Diagram ${t} not found.`)};var Jr=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,7],i=[1,5],a=[1,9],s=[1,6],o=[2,6],c=[1,16],l=[6,8,14,20,22,24,25,27,29,32,37,40,50,55],h=[8,14,20,22,24,25,27,29,32,37,40],u=[8,13,14,20,22,24,25,27,29,32,37,40],d=[1,26],p=[6,8,14,50,55],f=[8,14,55],g=[1,53],y=[1,52],m=[8,14,30,33,35,38,55],b=[1,67],_=[1,68],x=[1,69],v=[8,14,33,35,42,55],k={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,GG:6,document:7,EOF:8,":":9,DIR:10,options:11,body:12,OPT:13,NL:14,line:15,statement:16,commitStatement:17,mergeStatement:18,cherryPickStatement:19,acc_title:20,acc_title_value:21,acc_descr:22,acc_descr_value:23,acc_descr_multiline_value:24,section:25,branchStatement:26,CHECKOUT:27,ref:28,BRANCH:29,ORDER:30,NUM:31,CHERRY_PICK:32,COMMIT_ID:33,STR:34,COMMIT_TAG:35,EMPTYSTR:36,MERGE:37,COMMIT_TYPE:38,commitType:39,COMMIT:40,commit_arg:41,COMMIT_MSG:42,NORMAL:43,REVERSE:44,HIGHLIGHT:45,openDirective:46,typeDirective:47,closeDirective:48,argDirective:49,open_directive:50,type_directive:51,arg_directive:52,close_directive:53,ID:54,";":55,$accept:0,$end:1},terminals_:{2:"error",6:"GG",8:"EOF",9:":",10:"DIR",13:"OPT",14:"NL",20:"acc_title",21:"acc_title_value",22:"acc_descr",23:"acc_descr_value",24:"acc_descr_multiline_value",25:"section",27:"CHECKOUT",29:"BRANCH",30:"ORDER",31:"NUM",32:"CHERRY_PICK",33:"COMMIT_ID",34:"STR",35:"COMMIT_TAG",36:"EMPTYSTR",37:"MERGE",38:"COMMIT_TYPE",40:"COMMIT",42:"COMMIT_MSG",43:"NORMAL",44:"REVERSE",45:"HIGHLIGHT",50:"open_directive",51:"type_directive",52:"arg_directive",53:"close_directive",54:"ID",55:";"},productions_:[0,[3,2],[3,2],[3,3],[3,4],[3,5],[7,0],[7,2],[11,2],[11,1],[12,0],[12,2],[15,2],[15,1],[16,1],[16,1],[16,1],[16,2],[16,2],[16,1],[16,1],[16,1],[16,2],[26,2],[26,4],[19,3],[19,5],[19,5],[19,5],[19,5],[18,2],[18,4],[18,4],[18,4],[18,6],[18,6],[18,6],[18,6],[18,6],[18,6],[18,8],[18,8],[18,8],[18,8],[18,8],[18,8],[17,2],[17,3],[17,3],[17,5],[17,5],[17,3],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,3],[17,5],[17,5],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[41,0],[41,1],[39,1],[39,1],[39,1],[5,3],[5,5],[46,1],[47,1],[49,1],[48,1],[28,1],[28,1],[4,1],[4,1],[4,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 3:return a[o];case 4:return a[o-1];case 5:return r.setDirection(a[o-3]),a[o-1];case 7:r.setOptions(a[o-1]),this.$=a[o];break;case 8:a[o-1]+=a[o],this.$=a[o-1];break;case 10:this.$=[];break;case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 12:this.$=a[o-1];break;case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 20:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 22:r.checkout(a[o]);break;case 23:r.branch(a[o]);break;case 24:r.branch(a[o-2],a[o]);break;case 25:r.cherryPick(a[o],"",void 0);break;case 26:r.cherryPick(a[o-2],"",a[o]);break;case 27:case 29:r.cherryPick(a[o-2],"","");break;case 28:r.cherryPick(a[o],"",a[o-2]);break;case 30:r.merge(a[o],"","","");break;case 31:r.merge(a[o-2],a[o],"","");break;case 32:r.merge(a[o-2],"",a[o],"");break;case 33:r.merge(a[o-2],"","",a[o]);break;case 34:r.merge(a[o-4],a[o],"",a[o-2]);break;case 35:r.merge(a[o-4],"",a[o],a[o-2]);break;case 36:r.merge(a[o-4],"",a[o-2],a[o]);break;case 37:r.merge(a[o-4],a[o-2],a[o],"");break;case 38:r.merge(a[o-4],a[o-2],"",a[o]);break;case 39:r.merge(a[o-4],a[o],a[o-2],"");break;case 40:r.merge(a[o-6],a[o-4],a[o-2],a[o]);break;case 41:r.merge(a[o-6],a[o],a[o-4],a[o-2]);break;case 42:r.merge(a[o-6],a[o-4],a[o],a[o-2]);break;case 43:r.merge(a[o-6],a[o-2],a[o-4],a[o]);break;case 44:r.merge(a[o-6],a[o],a[o-2],a[o-4]);break;case 45:r.merge(a[o-6],a[o-2],a[o],a[o-4]);break;case 46:r.commit(a[o]);break;case 47:r.commit("","",r.commitType.NORMAL,a[o]);break;case 48:r.commit("","",a[o],"");break;case 49:r.commit("","",a[o],a[o-2]);break;case 50:r.commit("","",a[o-2],a[o]);break;case 51:r.commit("",a[o],r.commitType.NORMAL,"");break;case 52:r.commit("",a[o-2],r.commitType.NORMAL,a[o]);break;case 53:r.commit("",a[o],r.commitType.NORMAL,a[o-2]);break;case 54:r.commit("",a[o-2],a[o],"");break;case 55:r.commit("",a[o],a[o-2],"");break;case 56:r.commit("",a[o-4],a[o-2],a[o]);break;case 57:r.commit("",a[o-4],a[o],a[o-2]);break;case 58:r.commit("",a[o-2],a[o-4],a[o]);break;case 59:r.commit("",a[o],a[o-4],a[o-2]);break;case 60:r.commit("",a[o],a[o-2],a[o-4]);break;case 61:r.commit("",a[o-2],a[o],a[o-4]);break;case 62:r.commit(a[o],"",r.commitType.NORMAL,"");break;case 63:r.commit(a[o],"",r.commitType.NORMAL,a[o-2]);break;case 64:r.commit(a[o-2],"",r.commitType.NORMAL,a[o]);break;case 65:r.commit(a[o-2],"",a[o],"");break;case 66:r.commit(a[o],"",a[o-2],"");break;case 67:r.commit(a[o],a[o-2],r.commitType.NORMAL,"");break;case 68:r.commit(a[o-2],a[o],r.commitType.NORMAL,"");break;case 69:r.commit(a[o-4],"",a[o-2],a[o]);break;case 70:r.commit(a[o-4],"",a[o],a[o-2]);break;case 71:r.commit(a[o-2],"",a[o-4],a[o]);break;case 72:r.commit(a[o],"",a[o-4],a[o-2]);break;case 73:r.commit(a[o],"",a[o-2],a[o-4]);break;case 74:r.commit(a[o-2],"",a[o],a[o-4]);break;case 75:r.commit(a[o-4],a[o],a[o-2],"");break;case 76:r.commit(a[o-4],a[o-2],a[o],"");break;case 77:r.commit(a[o-2],a[o],a[o-4],"");break;case 78:r.commit(a[o],a[o-2],a[o-4],"");break;case 79:r.commit(a[o],a[o-4],a[o-2],"");break;case 80:r.commit(a[o-2],a[o-4],a[o],"");break;case 81:r.commit(a[o-4],a[o],r.commitType.NORMAL,a[o-2]);break;case 82:r.commit(a[o-4],a[o-2],r.commitType.NORMAL,a[o]);break;case 83:r.commit(a[o-2],a[o],r.commitType.NORMAL,a[o-4]);break;case 84:r.commit(a[o],a[o-2],r.commitType.NORMAL,a[o-4]);break;case 85:r.commit(a[o],a[o-4],r.commitType.NORMAL,a[o-2]);break;case 86:r.commit(a[o-2],a[o-4],r.commitType.NORMAL,a[o]);break;case 87:r.commit(a[o-6],a[o-4],a[o-2],a[o]);break;case 88:r.commit(a[o-6],a[o-4],a[o],a[o-2]);break;case 89:r.commit(a[o-6],a[o-2],a[o-4],a[o]);break;case 90:r.commit(a[o-6],a[o],a[o-4],a[o-2]);break;case 91:r.commit(a[o-6],a[o-2],a[o],a[o-4]);break;case 92:r.commit(a[o-6],a[o],a[o-2],a[o-4]);break;case 93:r.commit(a[o-4],a[o-6],a[o-2],a[o]);break;case 94:r.commit(a[o-4],a[o-6],a[o],a[o-2]);break;case 95:r.commit(a[o-2],a[o-6],a[o-4],a[o]);break;case 96:r.commit(a[o],a[o-6],a[o-4],a[o-2]);break;case 97:r.commit(a[o-2],a[o-6],a[o],a[o-4]);break;case 98:r.commit(a[o],a[o-6],a[o-2],a[o-4]);break;case 99:r.commit(a[o],a[o-4],a[o-2],a[o-6]);break;case 100:r.commit(a[o-2],a[o-4],a[o],a[o-6]);break;case 101:r.commit(a[o],a[o-2],a[o-4],a[o-6]);break;case 102:r.commit(a[o-2],a[o],a[o-4],a[o-6]);break;case 103:r.commit(a[o-4],a[o-2],a[o],a[o-6]);break;case 104:r.commit(a[o-4],a[o],a[o-2],a[o-6]);break;case 105:r.commit(a[o-2],a[o-4],a[o-6],a[o]);break;case 106:r.commit(a[o],a[o-4],a[o-6],a[o-2]);break;case 107:r.commit(a[o-2],a[o],a[o-6],a[o-4]);break;case 108:r.commit(a[o],a[o-2],a[o-6],a[o-4]);break;case 109:r.commit(a[o-4],a[o-2],a[o-6],a[o]);break;case 110:r.commit(a[o-4],a[o],a[o-6],a[o-2]);break;case 111:this.$="";break;case 112:this.$=a[o];break;case 113:this.$=r.commitType.NORMAL;break;case 114:this.$=r.commitType.REVERSE;break;case 115:this.$=r.commitType.HIGHLIGHT;break;case 118:r.parseDirective("%%{","open_directive");break;case 119:r.parseDirective(a[o],"type_directive");break;case 120:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 121:r.parseDirective("}%%","close_directive","gitGraph")}},table:[{3:1,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{1:[3]},{3:10,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{3:11,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{7:12,8:o,9:[1,13],10:[1,14],11:15,14:c},e(l,[2,124]),e(l,[2,125]),e(l,[2,126]),{47:17,51:[1,18]},{51:[2,118]},{1:[2,1]},{1:[2,2]},{8:[1,19]},{7:20,8:o,11:15,14:c},{9:[1,21]},e(h,[2,10],{12:22,13:[1,23]}),e(u,[2,9]),{9:[1,25],48:24,53:d},e([9,53],[2,119]),{1:[2,3]},{8:[1,27]},{7:28,8:o,11:15,14:c},{8:[2,7],14:[1,31],15:29,16:30,17:32,18:33,19:34,20:[1,35],22:[1,36],24:[1,37],25:[1,38],26:39,27:[1,40],29:[1,44],32:[1,43],37:[1,42],40:[1,41]},e(u,[2,8]),e(p,[2,116]),{49:45,52:[1,46]},e(p,[2,121]),{1:[2,4]},{8:[1,47]},e(h,[2,11]),{4:48,8:r,14:i,55:s},e(h,[2,13]),e(f,[2,14]),e(f,[2,15]),e(f,[2,16]),{21:[1,49]},{23:[1,50]},e(f,[2,19]),e(f,[2,20]),e(f,[2,21]),{28:51,34:g,54:y},e(f,[2,111],{41:54,33:[1,57],34:[1,59],35:[1,55],38:[1,56],42:[1,58]}),{28:60,34:g,54:y},{33:[1,61],35:[1,62]},{28:63,34:g,54:y},{48:64,53:d},{53:[2,120]},{1:[2,5]},e(h,[2,12]),e(f,[2,17]),e(f,[2,18]),e(f,[2,22]),e(m,[2,122]),e(m,[2,123]),e(f,[2,46]),{34:[1,65]},{39:66,43:b,44:_,45:x},{34:[1,70]},{34:[1,71]},e(f,[2,112]),e(f,[2,30],{33:[1,72],35:[1,74],38:[1,73]}),{34:[1,75]},{34:[1,76],36:[1,77]},e(f,[2,23],{30:[1,78]}),e(p,[2,117]),e(f,[2,47],{33:[1,80],38:[1,79],42:[1,81]}),e(f,[2,48],{33:[1,83],35:[1,82],42:[1,84]}),e(v,[2,113]),e(v,[2,114]),e(v,[2,115]),e(f,[2,51],{35:[1,85],38:[1,86],42:[1,87]}),e(f,[2,62],{33:[1,90],35:[1,88],38:[1,89]}),{34:[1,91]},{39:92,43:b,44:_,45:x},{34:[1,93]},e(f,[2,25],{35:[1,94]}),{33:[1,95]},{33:[1,96]},{31:[1,97]},{39:98,43:b,44:_,45:x},{34:[1,99]},{34:[1,100]},{34:[1,101]},{34:[1,102]},{34:[1,103]},{34:[1,104]},{39:105,43:b,44:_,45:x},{34:[1,106]},{34:[1,107]},{39:108,43:b,44:_,45:x},{34:[1,109]},e(f,[2,31],{35:[1,111],38:[1,110]}),e(f,[2,32],{33:[1,113],35:[1,112]}),e(f,[2,33],{33:[1,114],38:[1,115]}),{34:[1,116],36:[1,117]},{34:[1,118]},{34:[1,119]},e(f,[2,24]),e(f,[2,49],{33:[1,120],42:[1,121]}),e(f,[2,53],{38:[1,122],42:[1,123]}),e(f,[2,63],{33:[1,125],38:[1,124]}),e(f,[2,50],{33:[1,126],42:[1,127]}),e(f,[2,55],{35:[1,128],42:[1,129]}),e(f,[2,66],{33:[1,131],35:[1,130]}),e(f,[2,52],{38:[1,132],42:[1,133]}),e(f,[2,54],{35:[1,134],42:[1,135]}),e(f,[2,67],{35:[1,137],38:[1,136]}),e(f,[2,64],{33:[1,139],38:[1,138]}),e(f,[2,65],{33:[1,141],35:[1,140]}),e(f,[2,68],{35:[1,143],38:[1,142]}),{39:144,43:b,44:_,45:x},{34:[1,145]},{34:[1,146]},{34:[1,147]},{34:[1,148]},{39:149,43:b,44:_,45:x},e(f,[2,26]),e(f,[2,27]),e(f,[2,28]),e(f,[2,29]),{34:[1,150]},{34:[1,151]},{39:152,43:b,44:_,45:x},{34:[1,153]},{39:154,43:b,44:_,45:x},{34:[1,155]},{34:[1,156]},{34:[1,157]},{34:[1,158]},{34:[1,159]},{34:[1,160]},{34:[1,161]},{39:162,43:b,44:_,45:x},{34:[1,163]},{34:[1,164]},{34:[1,165]},{39:166,43:b,44:_,45:x},{34:[1,167]},{39:168,43:b,44:_,45:x},{34:[1,169]},{34:[1,170]},{34:[1,171]},{39:172,43:b,44:_,45:x},{34:[1,173]},e(f,[2,37],{35:[1,174]}),e(f,[2,38],{38:[1,175]}),e(f,[2,36],{33:[1,176]}),e(f,[2,39],{35:[1,177]}),e(f,[2,34],{38:[1,178]}),e(f,[2,35],{33:[1,179]}),e(f,[2,60],{42:[1,180]}),e(f,[2,73],{33:[1,181]}),e(f,[2,61],{42:[1,182]}),e(f,[2,84],{38:[1,183]}),e(f,[2,74],{33:[1,184]}),e(f,[2,83],{38:[1,185]}),e(f,[2,59],{42:[1,186]}),e(f,[2,72],{33:[1,187]}),e(f,[2,58],{42:[1,188]}),e(f,[2,78],{35:[1,189]}),e(f,[2,71],{33:[1,190]}),e(f,[2,77],{35:[1,191]}),e(f,[2,57],{42:[1,192]}),e(f,[2,85],{38:[1,193]}),e(f,[2,56],{42:[1,194]}),e(f,[2,79],{35:[1,195]}),e(f,[2,80],{35:[1,196]}),e(f,[2,86],{38:[1,197]}),e(f,[2,70],{33:[1,198]}),e(f,[2,81],{38:[1,199]}),e(f,[2,69],{33:[1,200]}),e(f,[2,75],{35:[1,201]}),e(f,[2,76],{35:[1,202]}),e(f,[2,82],{38:[1,203]}),{34:[1,204]},{39:205,43:b,44:_,45:x},{34:[1,206]},{34:[1,207]},{39:208,43:b,44:_,45:x},{34:[1,209]},{34:[1,210]},{34:[1,211]},{34:[1,212]},{39:213,43:b,44:_,45:x},{34:[1,214]},{39:215,43:b,44:_,45:x},{34:[1,216]},{34:[1,217]},{34:[1,218]},{34:[1,219]},{34:[1,220]},{34:[1,221]},{34:[1,222]},{39:223,43:b,44:_,45:x},{34:[1,224]},{34:[1,225]},{34:[1,226]},{39:227,43:b,44:_,45:x},{34:[1,228]},{39:229,43:b,44:_,45:x},{34:[1,230]},{34:[1,231]},{34:[1,232]},{39:233,43:b,44:_,45:x},e(f,[2,40]),e(f,[2,42]),e(f,[2,41]),e(f,[2,43]),e(f,[2,45]),e(f,[2,44]),e(f,[2,101]),e(f,[2,102]),e(f,[2,99]),e(f,[2,100]),e(f,[2,104]),e(f,[2,103]),e(f,[2,108]),e(f,[2,107]),e(f,[2,106]),e(f,[2,105]),e(f,[2,110]),e(f,[2,109]),e(f,[2,98]),e(f,[2,97]),e(f,[2,96]),e(f,[2,95]),e(f,[2,93]),e(f,[2,94]),e(f,[2,92]),e(f,[2,91]),e(f,[2,90]),e(f,[2,89]),e(f,[2,87]),e(f,[2,88])],defaultActions:{9:[2,118],10:[2,1],11:[2,2],19:[2,3],27:[2,4],46:[2,120],47:[2,5]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),50;case 1:return this.begin("type_directive"),51;case 2:return this.popState(),this.begin("arg_directive"),9;case 3:return this.popState(),this.popState(),53;case 4:return 52;case 5:return this.begin("acc_title"),20;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),22;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 34:case 38:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:return 14;case 13:case 14:break;case 15:return 6;case 16:return 40;case 17:return 33;case 18:return 38;case 19:return 42;case 20:return 43;case 21:return 44;case 22:return 45;case 23:return 35;case 24:return 29;case 25:return 30;case 26:return 37;case 27:return 32;case 28:return 27;case 29:case 30:return 10;case 31:return 9;case 32:return"CARET";case 33:this.begin("options");break;case 35:return 13;case 36:return 36;case 37:this.begin("string");break;case 39:return 34;case 40:return 31;case 41:return 54;case 42:return 8}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:gitGraph\b)/i,/^(?:commit(?=\s|$))/i,/^(?:id:)/i,/^(?:type:)/i,/^(?:msg:)/i,/^(?:NORMAL\b)/i,/^(?:REVERSE\b)/i,/^(?:HIGHLIGHT\b)/i,/^(?:tag:)/i,/^(?:branch(?=\s|$))/i,/^(?:order:)/i,/^(?:merge(?=\s|$))/i,/^(?:cherry-pick(?=\s|$))/i,/^(?:checkout(?=\s|$))/i,/^(?:LR\b)/i,/^(?:BT\b)/i,/^(?::)/i,/^(?:\^)/i,/^(?:options\r?\n)/i,/^(?:[ \r\n\t]+end\b)/i,/^(?:[\s\S]+(?=[ \r\n\t]+end))/i,/^(?:["]["])/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[0-9]+(?=\s|$))/i,/^(?:\w([-\./\w]*[-\w])?)/i,/^(?:$)/i,/^(?:\s+)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},options:{rules:[34,35],inclusive:!1},string:{rules:[38,39],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,36,37,40,41,42,43],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Jr.parser=Jr;const ti=Jr,ei=t=>null!==t.match(/^\s*gitGraph/);let ni=ar().gitGraph.mainBranchName,ri=ar().gitGraph.mainBranchOrder,ii={},ai=null,si={};si[ni]={name:ni,order:ri};let oi={};oi[ni]=ai;let ci=ni,li="LR",hi=0;function ui(){return $n({length:7})}let di={};const pi=function(t){if(t=Yt.sanitizeText(t,ar()),void 0===oi[t]){let e=new Error('Trying to checkout branch which is not yet created. (Help try using "branch '+t+'")');throw e.hash={text:"checkout "+t,token:"checkout "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"branch '+t+'"']},e}{ci=t;const e=oi[ci];ai=ii[e]}};function fi(t,e,n){const r=t.indexOf(e);-1===r?t.push(n):t.splice(r,1,n)}function gi(t){const e=t.reduce(((t,e)=>t.seq>e.seq?t:e),t[0]);let n="";t.forEach((function(t){n+=t===e?"\t*":"\t|"}));const r=[n,e.id,e.seq];for(let i in oi)oi[i]===e.id&&r.push(i);if(Nt.debug(r.join(" ")),e.parents&&2==e.parents.length){const n=ii[e.parents[0]];fi(t,e,n),t.push(ii[e.parents[1]])}else{if(0==e.parents.length)return;{const n=ii[e.parents];fi(t,e,n)}}gi(t=function(t,e){const n=Object.create(null);return t.reduce(((t,r)=>{const i=e(r);return n[i]||(n[i]=!0,t.push(r)),t}),[])}(t,(t=>t.id)))}const yi=function(){const t=Object.keys(ii).map((function(t){return ii[t]}));return t.forEach((function(t){Nt.debug(t.id)})),t.sort(((t,e)=>t.seq-e.seq)),t},mi={NORMAL:0,REVERSE:1,HIGHLIGHT:2,MERGE:3,CHERRY_PICK:4},bi={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gitGraph,setDirection:function(t){li=t},setOptions:function(t){Nt.debug("options str",t),t=(t=t&&t.trim())||"{}";try{di=JSON.parse(t)}catch(e){Nt.error("error while parsing gitGraph options",e.message)}},getOptions:function(){return di},commit:function(t,e,n,r){Nt.debug("Entering commit:",t,e,n,r),e=Yt.sanitizeText(e,ar()),t=Yt.sanitizeText(t,ar()),r=Yt.sanitizeText(r,ar());const i={id:e||hi+"-"+ui(),message:t,seq:hi++,type:n||mi.NORMAL,tag:r||"",parents:null==ai?[]:[ai.id],branch:ci};ai=i,ii[i.id]=i,oi[ci]=i.id,Nt.debug("in pushCommit "+i.id)},branch:function(t,e){if(t=Yt.sanitizeText(t,ar()),void 0!==oi[t]){let e=new Error('Trying to create an existing branch. (Help: Either use a new name if you want create a new branch or try using "checkout '+t+'")');throw e.hash={text:"branch "+t,token:"branch "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"checkout '+t+'"']},e}oi[t]=null!=ai?ai.id:null,si[t]={name:t,order:e?parseInt(e,10):null},pi(t),Nt.debug("in createBranch")},merge:function(t,e,n,r){t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar());const i=ii[oi[ci]],a=ii[oi[t]];if(ci===t){let e=new Error('Incorrect usage of "merge". Cannot merge a branch to itself');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(void 0===i||!i){let e=new Error('Incorrect usage of "merge". Current branch ('+ci+")has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["commit"]},e}if(void 0===oi[t]){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") does not exist");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch "+t]},e}if(void 0===a||!a){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"commit"']},e}if(i===a){let e=new Error('Incorrect usage of "merge". Both branches have same head');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(e&&void 0!==ii[e]){let i=new Error('Incorrect usage of "merge". Commit with id:'+e+" already exists, use different custom Id");throw i.hash={text:"merge "+t+e+n+r,token:"merge "+t+e+n+r,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["merge "+t+" "+e+"_UNIQUE "+n+" "+r]},i}const s={id:e||hi+"-"+ui(),message:"merged branch "+t+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,oi[t]],branch:ci,type:mi.MERGE,customType:n,customId:!!e,tag:r||""};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in mergeBranch")},cherryPick:function(t,e,n){if(Nt.debug("Entering cherryPick:",t,e,n),t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar()),n=Yt.sanitizeText(n,ar()),!t||void 0===ii[t]){let n=new Error('Incorrect usage of "cherryPick". Source commit id should exist and provided');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}let r=ii[t],i=r.branch;if(r.type===mi.MERGE){let n=new Error('Incorrect usage of "cherryPick". Source commit should not be a merge commit');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}if(!e||void 0===ii[e]){if(i===ci){let n=new Error('Incorrect usage of "cherryPick". Source commit is already on current branch');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const a=ii[oi[ci]];if(void 0===a||!a){let n=new Error('Incorrect usage of "cherry-pick". Current branch ('+ci+")has no commits");throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const s={id:hi+"-"+ui(),message:"cherry-picked "+r+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,r.id],branch:ci,type:mi.CHERRY_PICK,tag:n??"cherry-pick:"+r.id};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in cherryPick")}},checkout:pi,prettyPrint:function(){Nt.debug(ii);gi([yi()[0]])},clear:function(){ii={},ai=null;let t=ar().gitGraph.mainBranchName,e=ar().gitGraph.mainBranchOrder;oi={},oi[t]=null,si={},si[t]={name:t,order:e},ci=t,hi=0,Dr()},getBranchesAsObjArray:function(){const t=Object.values(si).map(((t,e)=>null!==t.order?t:{...t,order:parseFloat(`0.${e}`,10)})).sort(((t,e)=>t.order-e.order)).map((({name:t})=>({name:t})));return t},getBranches:function(){return oi},getCommits:function(){return ii},getCommitsArray:yi,getCurrentBranch:function(){return ci},getDirection:function(){return li},getHead:function(){return ai},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,setDiagramTitle:$r,getDiagramTitle:Rr,commitType:mi};let _i={};const xi=0,vi=1,ki=2,wi=3,Ei=4;let Ci={},Ti={},Si=[],Ai=0;const Li=(t,e,n)=>{const r=qr().gitGraph,i=t.append("g").attr("class","commit-bullets"),a=t.append("g").attr("class","commit-labels");let s=0;Object.keys(e).sort(((t,n)=>e[t].seq-e[n].seq)).forEach((t=>{const o=e[t],c=Ci[o.branch].pos,l=s+10;if(n){let t,e=void 0!==o.customType&&""!==o.customType?o.customType:o.type;switch(e){case xi:t="commit-normal";break;case vi:t="commit-reverse";break;case ki:t="commit-highlight";break;case wi:t="commit-merge";break;case Ei:t="commit-cherry-pick";break;default:t="commit-normal"}if(e===ki){const e=i.append("rect");e.attr("x",l-10),e.attr("y",c-10),e.attr("height",20),e.attr("width",20),e.attr("class",`commit ${o.id} commit-highlight${Ci[o.branch].index%8} ${t}-outer`),i.append("rect").attr("x",l-6).attr("y",c-6).attr("height",12).attr("width",12).attr("class",`commit ${o.id} commit${Ci[o.branch].index%8} ${t}-inner`)}else if(e===Ei)i.append("circle").attr("cx",l).attr("cy",c).attr("r",10).attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l-3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l+3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l+3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l-3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`);else{const n=i.append("circle");if(n.attr("cx",l),n.attr("cy",c),n.attr("r",o.type===wi?9:10),n.attr("class",`commit ${o.id} commit${Ci[o.branch].index%8}`),e===wi){const e=i.append("circle");e.attr("cx",l),e.attr("cy",c),e.attr("r",6),e.attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}if(e===vi){i.append("path").attr("d",`M ${l-5},${c-5}L${l+5},${c+5}M${l-5},${c+5}L${l+5},${c-5}`).attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}}}if(Ti[o.id]={x:s+10,y:c},n){const t=4,e=2;if(o.type!==Ei&&(o.customId&&o.type===wi||o.type!==wi)&&r.showCommitLabel){const t=a.append("g"),n=t.insert("rect").attr("class","commit-label-bkg"),i=t.append("text").attr("x",s).attr("y",c+25).attr("class","commit-label").text(o.id);let l=i.node().getBBox();if(n.attr("x",s+10-l.width/2-e).attr("y",c+13.5).attr("width",l.width+2*e).attr("height",l.height+2*e),i.attr("x",s+10-l.width/2),r.rotateCommitLabel){let e=-7.5-(l.width+10)/25*9.5,n=10+l.width/25*8.5;t.attr("transform","translate("+e+", "+n+") rotate("+"-45, "+s+", "+c+")")}}if(o.tag){const n=a.insert("polygon"),r=a.append("circle"),i=a.append("text").attr("y",c-16).attr("class","tag-label").text(o.tag);let l=i.node().getBBox();i.attr("x",s+10-l.width/2);const h=l.height/2,u=c-19.2;n.attr("class","tag-label-bkg").attr("points",`\n          ${s-l.width/2-t/2},${u+e}\n          ${s-l.width/2-t/2},${u-e}\n          ${s+10-l.width/2-t},${u-h-e}\n          ${s+10+l.width/2+t},${u-h-e}\n          ${s+10+l.width/2+t},${u+h+e}\n          ${s+10-l.width/2-t},${u+h+e}`),r.attr("cx",s-l.width/2+t/2).attr("cy",u).attr("r",1.5).attr("class","tag-hole")}}s+=50,s>Ai&&(Ai=s)}))},Bi=(t,e,n=0)=>{const r=t+Math.abs(t-e)/2;if(n>5)return r;if(Si.every((t=>Math.abs(t-r)>=10)))return Si.push(r),r;const i=Math.abs(t-e);return Bi(t,e-i/5,n+1)},Ni=(t,e,n,r)=>{const i=Ti[e.id],a=Ti[n.id],s=((t,e,n)=>Object.keys(n).filter((r=>n[r].branch===e.branch&&n[r].seq>t.seq&&n[r].seq<e.seq)).length>0)(e,n,r);let o,c="",l="",h=0,u=0,d=Ci[n.branch].index;if(s){c="A 10 10, 0, 0, 0,",l="A 10 10, 0, 0, 1,",h=10,u=10,d=Ci[n.branch].index;const t=i.y<a.y?Bi(i.y,a.y):Bi(a.y,i.y);o=i.y<a.y?`M ${i.x} ${i.y} L ${i.x} ${t-h} ${c} ${i.x+u} ${t} L ${a.x-h} ${t} ${l} ${a.x} ${t+u} L ${a.x} ${a.y}`:`M ${i.x} ${i.y} L ${i.x} ${t+h} ${l} ${i.x+u} ${t} L ${a.x-h} ${t} ${c} ${a.x} ${t-u} L ${a.x} ${a.y}`}else i.y<a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[n.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`),i.y>a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${a.x-h} ${i.y} ${c} ${a.x} ${i.y-u} L ${a.x} ${a.y}`),i.y===a.y&&(d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`);t.append("path").attr("d",o).attr("class","arrow arrow"+d%8)},Di=(t,e)=>{const n=qr().gitGraph,r=t.append("g");e.forEach(((t,e)=>{const i=e%8,a=Ci[t.name].pos,s=r.append("line");s.attr("x1",0),s.attr("y1",a),s.attr("x2",Ai),s.attr("y2",a),s.attr("class","branch branch"+i),Si.push(a);const o=(t=>{const e=document.createElementNS("http://www.w3.org/2000/svg","text");let n=[];n="string"==typeof t?t.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(t)?t:[];for(const r of n){const t=document.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),t.setAttribute("dy","1em"),t.setAttribute("x","0"),t.setAttribute("class","row"),t.textContent=r.trim(),e.appendChild(t)}return e})(t.name),c=r.insert("rect"),l=r.insert("g").attr("class","branchLabel").insert("g").attr("class","label branch-label"+i);l.node().appendChild(o);let h=o.getBBox();c.attr("class","branchLabelBkg label"+i).attr("rx",4).attr("ry",4).attr("x",-h.width-4-(!0===n.rotateCommitLabel?30:0)).attr("y",-h.height/2+8).attr("width",h.width+18).attr("height",h.height+4),l.attr("transform","translate("+(-h.width-14-(!0===n.rotateCommitLabel?30:0))+", "+(a-h.height/2-1)+")"),c.attr("transform","translate(-19, "+(a-h.height/2)+")")}))},Oi={draw:function(t,e,n,r){Ci={},Ti={},_i={},Ai=0,Si=[];const i=qr(),a=i.gitGraph;Nt.debug("in gitgraph renderer",t+"\n","id:",e,n),_i=r.db.getCommits();const s=r.db.getBranchesAsObjArray();let c=0;s.forEach(((t,e)=>{Ci[t.name]={pos:c,index:e},c+=50+(a.rotateCommitLabel?40:0)}));const l=(0,o.Ys)(`[id="${e}"]`);Li(l,_i,!1),a.showBranches&&Di(l,s),((t,e)=>{const n=t.append("g").attr("class","commit-arrows");Object.keys(e).forEach((t=>{const r=e[t];r.parents&&r.parents.length>0&&r.parents.forEach((t=>{Ni(n,e[t],r,e)}))}))})(l,_i),Li(l,_i,!0),Gn.insertTitle(l,"gitTitleText",a.titleTopMargin,r.db.getDiagramTitle()),Vr(void 0,l,a.diagramPadding,a.useMaxWidth??i.useMaxWidth)}},Mi=t=>`\n  .commit-id,\n  .commit-msg,\n  .branch-label {\n    fill: lightgrey;\n    color: lightgrey;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  ${[0,1,2,3,4,5,6,7].map((e=>`\n        .branch-label${e} { fill: ${t["gitBranchLabel"+e]}; }\n        .commit${e} { stroke: ${t["git"+e]}; fill: ${t["git"+e]}; }\n        .commit-highlight${e} { stroke: ${t["gitInv"+e]}; fill: ${t["gitInv"+e]}; }\n        .label${e}  { fill: ${t["git"+e]}; }\n        .arrow${e} { stroke: ${t["git"+e]}; }\n        `)).join("\n")}\n\n  .branch {\n    stroke-width: 1;\n    stroke: ${t.lineColor};\n    stroke-dasharray: 2;\n  }\n  .commit-label { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelColor};}\n  .commit-label-bkg { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelBackground}; opacity: 0.5; }\n  .tag-label { font-size: ${t.tagLabelFontSize}; fill: ${t.tagLabelColor};}\n  .tag-label-bkg { fill: ${t.tagLabelBackground}; stroke: ${t.tagLabelBorder}; }\n  .tag-hole { fill: ${t.textColor}; }\n\n  .commit-merge {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n  .commit-reverse {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n    stroke-width: 3;\n  }\n  .commit-highlight-outer {\n  }\n  .commit-highlight-inner {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n\n  .arrow { stroke-width: 8; stroke-linecap: round; fill: none}\n  .gitTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n  }\n`;var Ii=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,6],r=[1,7],i=[1,8],a=[1,9],s=[1,16],o=[1,11],l=[1,12],h=[1,13],u=[1,14],d=[1,15],p=[1,27],f=[1,33],g=[1,34],y=[1,35],m=[1,36],b=[1,37],_=[1,72],x=[1,73],v=[1,74],k=[1,75],w=[1,76],E=[1,77],C=[1,78],T=[1,38],S=[1,39],A=[1,40],L=[1,41],B=[1,42],N=[1,43],D=[1,44],O=[1,45],M=[1,46],I=[1,47],F=[1,48],$=[1,49],R=[1,50],Z=[1,51],P=[1,52],j=[1,53],Y=[1,54],z=[1,55],U=[1,56],W=[1,57],q=[1,59],H=[1,60],V=[1,61],G=[1,62],X=[1,63],K=[1,64],Q=[1,65],J=[1,66],tt=[1,67],et=[1,68],nt=[1,69],rt=[24,52],it=[24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],at=[15,24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],st=[1,94],ot=[1,95],ct=[1,96],lt=[1,97],ht=[15,24,52],ut=[7,8,9,10,18,22,25,26,27,28],dt=[15,24,43,52],pt=[15,24,43,52,86,87,89,90],ft=[15,43],gt=[44,46,47,48,49,50,51,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],yt={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,direction:5,directive:6,direction_tb:7,direction_bt:8,direction_rl:9,direction_lr:10,graphConfig:11,openDirective:12,typeDirective:13,closeDirective:14,NEWLINE:15,":":16,argDirective:17,open_directive:18,type_directive:19,arg_directive:20,close_directive:21,C4_CONTEXT:22,statements:23,EOF:24,C4_CONTAINER:25,C4_COMPONENT:26,C4_DYNAMIC:27,C4_DEPLOYMENT:28,otherStatements:29,diagramStatements:30,otherStatement:31,title:32,accDescription:33,acc_title:34,acc_title_value:35,acc_descr:36,acc_descr_value:37,acc_descr_multiline_value:38,boundaryStatement:39,boundaryStartStatement:40,boundaryStopStatement:41,boundaryStart:42,LBRACE:43,ENTERPRISE_BOUNDARY:44,attributes:45,SYSTEM_BOUNDARY:46,BOUNDARY:47,CONTAINER_BOUNDARY:48,NODE:49,NODE_L:50,NODE_R:51,RBRACE:52,diagramStatement:53,PERSON:54,PERSON_EXT:55,SYSTEM:56,SYSTEM_DB:57,SYSTEM_QUEUE:58,SYSTEM_EXT:59,SYSTEM_EXT_DB:60,SYSTEM_EXT_QUEUE:61,CONTAINER:62,CONTAINER_DB:63,CONTAINER_QUEUE:64,CONTAINER_EXT:65,CONTAINER_EXT_DB:66,CONTAINER_EXT_QUEUE:67,COMPONENT:68,COMPONENT_DB:69,COMPONENT_QUEUE:70,COMPONENT_EXT:71,COMPONENT_EXT_DB:72,COMPONENT_EXT_QUEUE:73,REL:74,BIREL:75,REL_U:76,REL_D:77,REL_L:78,REL_R:79,REL_B:80,REL_INDEX:81,UPDATE_EL_STYLE:82,UPDATE_REL_STYLE:83,UPDATE_LAYOUT_CONFIG:84,attribute:85,STR:86,STR_KEY:87,STR_VALUE:88,ATTRIBUTE:89,ATTRIBUTE_EMPTY:90,$accept:0,$end:1},terminals_:{2:"error",7:"direction_tb",8:"direction_bt",9:"direction_rl",10:"direction_lr",15:"NEWLINE",16:":",18:"open_directive",19:"type_directive",20:"arg_directive",21:"close_directive",22:"C4_CONTEXT",24:"EOF",25:"C4_CONTAINER",26:"C4_COMPONENT",27:"C4_DYNAMIC",28:"C4_DEPLOYMENT",32:"title",33:"accDescription",34:"acc_title",35:"acc_title_value",36:"acc_descr",37:"acc_descr_value",38:"acc_descr_multiline_value",43:"LBRACE",44:"ENTERPRISE_BOUNDARY",46:"SYSTEM_BOUNDARY",47:"BOUNDARY",48:"CONTAINER_BOUNDARY",49:"NODE",50:"NODE_L",51:"NODE_R",52:"RBRACE",54:"PERSON",55:"PERSON_EXT",56:"SYSTEM",57:"SYSTEM_DB",58:"SYSTEM_QUEUE",59:"SYSTEM_EXT",60:"SYSTEM_EXT_DB",61:"SYSTEM_EXT_QUEUE",62:"CONTAINER",63:"CONTAINER_DB",64:"CONTAINER_QUEUE",65:"CONTAINER_EXT",66:"CONTAINER_EXT_DB",67:"CONTAINER_EXT_QUEUE",68:"COMPONENT",69:"COMPONENT_DB",70:"COMPONENT_QUEUE",71:"COMPONENT_EXT",72:"COMPONENT_EXT_DB",73:"COMPONENT_EXT_QUEUE",74:"REL",75:"BIREL",76:"REL_U",77:"REL_D",78:"REL_L",79:"REL_R",80:"REL_B",81:"REL_INDEX",82:"UPDATE_EL_STYLE",83:"UPDATE_REL_STYLE",84:"UPDATE_LAYOUT_CONFIG",86:"STR",87:"STR_KEY",88:"STR_VALUE",89:"ATTRIBUTE",90:"ATTRIBUTE_EMPTY"},productions_:[0,[3,1],[3,1],[3,2],[5,1],[5,1],[5,1],[5,1],[4,1],[6,4],[6,6],[12,1],[13,1],[17,1],[14,1],[11,4],[11,4],[11,4],[11,4],[11,4],[23,1],[23,1],[23,2],[29,1],[29,2],[29,3],[31,1],[31,1],[31,2],[31,2],[31,1],[39,3],[40,3],[40,3],[40,4],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[41,1],[30,1],[30,2],[30,3],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,1],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[45,1],[45,2],[85,1],[85,2],[85,1],[85,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setDirection("TB");break;case 5:r.setDirection("BT");break;case 6:r.setDirection("RL");break;case 7:r.setDirection("LR");break;case 11:r.parseDirective("%%{","open_directive");break;case 12:break;case 13:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 14:r.parseDirective("}%%","close_directive","c4Context");break;case 15:case 16:case 17:case 18:case 19:r.setC4Type(a[o-3]);break;case 26:r.setTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 27:r.setAccDescription(a[o].substring(15)),this.$=a[o].substring(15);break;case 28:this.$=a[o].trim(),r.setTitle(this.$);break;case 29:case 30:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 35:case 36:a[o].splice(2,0,"ENTERPRISE"),r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 37:r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 38:a[o].splice(2,0,"CONTAINER"),r.addContainerBoundary(...a[o]),this.$=a[o];break;case 39:r.addDeploymentNode("node",...a[o]),this.$=a[o];break;case 40:r.addDeploymentNode("nodeL",...a[o]),this.$=a[o];break;case 41:r.addDeploymentNode("nodeR",...a[o]),this.$=a[o];break;case 42:r.popBoundaryParseStack();break;case 46:r.addPersonOrSystem("person",...a[o]),this.$=a[o];break;case 47:r.addPersonOrSystem("external_person",...a[o]),this.$=a[o];break;case 48:r.addPersonOrSystem("system",...a[o]),this.$=a[o];break;case 49:r.addPersonOrSystem("system_db",...a[o]),this.$=a[o];break;case 50:r.addPersonOrSystem("system_queue",...a[o]),this.$=a[o];break;case 51:r.addPersonOrSystem("external_system",...a[o]),this.$=a[o];break;case 52:r.addPersonOrSystem("external_system_db",...a[o]),this.$=a[o];break;case 53:r.addPersonOrSystem("external_system_queue",...a[o]),this.$=a[o];break;case 54:r.addContainer("container",...a[o]),this.$=a[o];break;case 55:r.addContainer("container_db",...a[o]),this.$=a[o];break;case 56:r.addContainer("container_queue",...a[o]),this.$=a[o];break;case 57:r.addContainer("external_container",...a[o]),this.$=a[o];break;case 58:r.addContainer("external_container_db",...a[o]),this.$=a[o];break;case 59:r.addContainer("external_container_queue",...a[o]),this.$=a[o];break;case 60:r.addComponent("component",...a[o]),this.$=a[o];break;case 61:r.addComponent("component_db",...a[o]),this.$=a[o];break;case 62:r.addComponent("component_queue",...a[o]),this.$=a[o];break;case 63:r.addComponent("external_component",...a[o]),this.$=a[o];break;case 64:r.addComponent("external_component_db",...a[o]),this.$=a[o];break;case 65:r.addComponent("external_component_queue",...a[o]),this.$=a[o];break;case 67:r.addRel("rel",...a[o]),this.$=a[o];break;case 68:r.addRel("birel",...a[o]),this.$=a[o];break;case 69:r.addRel("rel_u",...a[o]),this.$=a[o];break;case 70:r.addRel("rel_d",...a[o]),this.$=a[o];break;case 71:r.addRel("rel_l",...a[o]),this.$=a[o];break;case 72:r.addRel("rel_r",...a[o]),this.$=a[o];break;case 73:r.addRel("rel_b",...a[o]),this.$=a[o];break;case 74:a[o].splice(0,1),r.addRel("rel",...a[o]),this.$=a[o];break;case 75:r.updateElStyle("update_el_style",...a[o]),this.$=a[o];break;case 76:r.updateRelStyle("update_rel_style",...a[o]),this.$=a[o];break;case 77:r.updateLayoutConfig("update_layout_config",...a[o]),this.$=a[o];break;case 78:this.$=[a[o]];break;case 79:a[o].unshift(a[o-1]),this.$=a[o];break;case 80:case 82:this.$=a[o].trim();break;case 81:let t={};t[a[o-1].trim()]=a[o].trim(),this.$=t;break;case 83:this.$=""}},table:[{3:1,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[3]},{1:[2,1]},{1:[2,2]},{3:17,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[2,8]},{1:[2,4]},{1:[2,5]},{1:[2,6]},{1:[2,7]},{13:18,19:[1,19]},{15:[1,20]},{15:[1,21]},{15:[1,22]},{15:[1,23]},{15:[1,24]},{19:[2,11]},{1:[2,3]},{14:25,16:[1,26],21:p},e([16,21],[2,12]),{23:28,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:79,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:80,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:81,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:82,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,83]},{17:84,20:[1,85]},{15:[2,14]},{24:[1,86]},e(rt,[2,20],{53:32,39:58,40:70,42:71,30:87,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(rt,[2,21]),e(it,[2,23],{15:[1,88]}),e(rt,[2,43],{15:[1,89]}),e(at,[2,26]),e(at,[2,27]),{35:[1,90]},{37:[1,91]},e(at,[2,30]),{45:92,85:93,86:st,87:ot,89:ct,90:lt},{45:98,85:93,86:st,87:ot,89:ct,90:lt},{45:99,85:93,86:st,87:ot,89:ct,90:lt},{45:100,85:93,86:st,87:ot,89:ct,90:lt},{45:101,85:93,86:st,87:ot,89:ct,90:lt},{45:102,85:93,86:st,87:ot,89:ct,90:lt},{45:103,85:93,86:st,87:ot,89:ct,90:lt},{45:104,85:93,86:st,87:ot,89:ct,90:lt},{45:105,85:93,86:st,87:ot,89:ct,90:lt},{45:106,85:93,86:st,87:ot,89:ct,90:lt},{45:107,85:93,86:st,87:ot,89:ct,90:lt},{45:108,85:93,86:st,87:ot,89:ct,90:lt},{45:109,85:93,86:st,87:ot,89:ct,90:lt},{45:110,85:93,86:st,87:ot,89:ct,90:lt},{45:111,85:93,86:st,87:ot,89:ct,90:lt},{45:112,85:93,86:st,87:ot,89:ct,90:lt},{45:113,85:93,86:st,87:ot,89:ct,90:lt},{45:114,85:93,86:st,87:ot,89:ct,90:lt},{45:115,85:93,86:st,87:ot,89:ct,90:lt},{45:116,85:93,86:st,87:ot,89:ct,90:lt},e(ht,[2,66]),{45:117,85:93,86:st,87:ot,89:ct,90:lt},{45:118,85:93,86:st,87:ot,89:ct,90:lt},{45:119,85:93,86:st,87:ot,89:ct,90:lt},{45:120,85:93,86:st,87:ot,89:ct,90:lt},{45:121,85:93,86:st,87:ot,89:ct,90:lt},{45:122,85:93,86:st,87:ot,89:ct,90:lt},{45:123,85:93,86:st,87:ot,89:ct,90:lt},{45:124,85:93,86:st,87:ot,89:ct,90:lt},{45:125,85:93,86:st,87:ot,89:ct,90:lt},{45:126,85:93,86:st,87:ot,89:ct,90:lt},{45:127,85:93,86:st,87:ot,89:ct,90:lt},{30:128,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,130],43:[1,129]},{45:131,85:93,86:st,87:ot,89:ct,90:lt},{45:132,85:93,86:st,87:ot,89:ct,90:lt},{45:133,85:93,86:st,87:ot,89:ct,90:lt},{45:134,85:93,86:st,87:ot,89:ct,90:lt},{45:135,85:93,86:st,87:ot,89:ct,90:lt},{45:136,85:93,86:st,87:ot,89:ct,90:lt},{45:137,85:93,86:st,87:ot,89:ct,90:lt},{24:[1,138]},{24:[1,139]},{24:[1,140]},{24:[1,141]},e(ut,[2,9]),{14:142,21:p},{21:[2,13]},{1:[2,15]},e(rt,[2,22]),e(it,[2,24],{31:31,29:143,32:f,33:g,34:y,36:m,38:b}),e(rt,[2,44],{29:29,30:30,31:31,53:32,39:58,40:70,42:71,23:144,32:f,33:g,34:y,36:m,38:b,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(at,[2,28]),e(at,[2,29]),e(ht,[2,46]),e(dt,[2,78],{85:93,45:145,86:st,87:ot,89:ct,90:lt}),e(pt,[2,80]),{88:[1,146]},e(pt,[2,82]),e(pt,[2,83]),e(ht,[2,47]),e(ht,[2,48]),e(ht,[2,49]),e(ht,[2,50]),e(ht,[2,51]),e(ht,[2,52]),e(ht,[2,53]),e(ht,[2,54]),e(ht,[2,55]),e(ht,[2,56]),e(ht,[2,57]),e(ht,[2,58]),e(ht,[2,59]),e(ht,[2,60]),e(ht,[2,61]),e(ht,[2,62]),e(ht,[2,63]),e(ht,[2,64]),e(ht,[2,65]),e(ht,[2,67]),e(ht,[2,68]),e(ht,[2,69]),e(ht,[2,70]),e(ht,[2,71]),e(ht,[2,72]),e(ht,[2,73]),e(ht,[2,74]),e(ht,[2,75]),e(ht,[2,76]),e(ht,[2,77]),{41:147,52:[1,148]},{15:[1,149]},{43:[1,150]},e(ft,[2,35]),e(ft,[2,36]),e(ft,[2,37]),e(ft,[2,38]),e(ft,[2,39]),e(ft,[2,40]),e(ft,[2,41]),{1:[2,16]},{1:[2,17]},{1:[2,18]},{1:[2,19]},{15:[1,151]},e(it,[2,25]),e(rt,[2,45]),e(dt,[2,79]),e(pt,[2,81]),e(ht,[2,31]),e(ht,[2,42]),e(gt,[2,32]),e(gt,[2,33],{15:[1,152]}),e(ut,[2,10]),e(gt,[2,34])],defaultActions:{2:[2,1],3:[2,2],5:[2,8],6:[2,4],7:[2,5],8:[2,6],9:[2,7],16:[2,11],17:[2,3],27:[2,14],85:[2,13],86:[2,15],138:[2,16],139:[2,17],140:[2,18],141:[2,19]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},mt=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),18;case 1:return 7;case 2:return 8;case 3:return 9;case 4:return 10;case 5:return this.begin("type_directive"),19;case 6:return this.popState(),this.begin("arg_directive"),16;case 7:return this.popState(),this.popState(),21;case 8:return 20;case 9:return 32;case 10:return 33;case 11:return this.begin("acc_title"),34;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),36;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 78:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:case 21:case 75:break;case 19:c;break;case 20:return 15;case 22:return 22;case 23:return 25;case 24:return 26;case 25:return 27;case 26:return 28;case 27:return this.begin("person_ext"),55;case 28:return this.begin("person"),54;case 29:return this.begin("system_ext_queue"),61;case 30:return this.begin("system_ext_db"),60;case 31:return this.begin("system_ext"),59;case 32:return this.begin("system_queue"),58;case 33:return this.begin("system_db"),57;case 34:return this.begin("system"),56;case 35:return this.begin("boundary"),47;case 36:return this.begin("enterprise_boundary"),44;case 37:return this.begin("system_boundary"),46;case 38:return this.begin("container_ext_queue"),67;case 39:return this.begin("container_ext_db"),66;case 40:return this.begin("container_ext"),65;case 41:return this.begin("container_queue"),64;case 42:return this.begin("container_db"),63;case 43:return this.begin("container"),62;case 44:return this.begin("container_boundary"),48;case 45:return this.begin("component_ext_queue"),73;case 46:return this.begin("component_ext_db"),72;case 47:return this.begin("component_ext"),71;case 48:return this.begin("component_queue"),70;case 49:return this.begin("component_db"),69;case 50:return this.begin("component"),68;case 51:case 52:return this.begin("node"),49;case 53:return this.begin("node_l"),50;case 54:return this.begin("node_r"),51;case 55:return this.begin("rel"),74;case 56:return this.begin("birel"),75;case 57:case 58:return this.begin("rel_u"),76;case 59:case 60:return this.begin("rel_d"),77;case 61:case 62:return this.begin("rel_l"),78;case 63:case 64:return this.begin("rel_r"),79;case 65:return this.begin("rel_b"),80;case 66:return this.begin("rel_index"),81;case 67:return this.begin("update_el_style"),82;case 68:return this.begin("update_rel_style"),83;case 69:return this.begin("update_layout_config"),84;case 70:return"EOF_IN_STRUCT";case 71:return this.begin("attribute"),"ATTRIBUTE_EMPTY";case 72:this.begin("attribute");break;case 73:case 84:this.popState(),this.popState();break;case 74:case 76:return 90;case 77:this.begin("string");break;case 79:case 85:return"STR";case 80:this.begin("string_kv");break;case 81:return this.begin("string_kv_key"),"STR_KEY";case 82:this.popState(),this.begin("string_kv_value");break;case 83:return"STR_VALUE";case 86:return"LBRACE";case 87:return"RBRACE";case 88:return"SPACE";case 89:return"EOL";case 90:return 24}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:title\s[^#\n;]+)/,/^(?:accDescription\s[^#\n;]+)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:C4Context\b)/,/^(?:C4Container\b)/,/^(?:C4Component\b)/,/^(?:C4Dynamic\b)/,/^(?:C4Deployment\b)/,/^(?:Person_Ext\b)/,/^(?:Person\b)/,/^(?:SystemQueue_Ext\b)/,/^(?:SystemDb_Ext\b)/,/^(?:System_Ext\b)/,/^(?:SystemQueue\b)/,/^(?:SystemDb\b)/,/^(?:System\b)/,/^(?:Boundary\b)/,/^(?:Enterprise_Boundary\b)/,/^(?:System_Boundary\b)/,/^(?:ContainerQueue_Ext\b)/,/^(?:ContainerDb_Ext\b)/,/^(?:Container_Ext\b)/,/^(?:ContainerQueue\b)/,/^(?:ContainerDb\b)/,/^(?:Container\b)/,/^(?:Container_Boundary\b)/,/^(?:ComponentQueue_Ext\b)/,/^(?:ComponentDb_Ext\b)/,/^(?:Component_Ext\b)/,/^(?:ComponentQueue\b)/,/^(?:ComponentDb\b)/,/^(?:Component\b)/,/^(?:Deployment_Node\b)/,/^(?:Node\b)/,/^(?:Node_L\b)/,/^(?:Node_R\b)/,/^(?:Rel\b)/,/^(?:BiRel\b)/,/^(?:Rel_Up\b)/,/^(?:Rel_U\b)/,/^(?:Rel_Down\b)/,/^(?:Rel_D\b)/,/^(?:Rel_Left\b)/,/^(?:Rel_L\b)/,/^(?:Rel_Right\b)/,/^(?:Rel_R\b)/,/^(?:Rel_Back\b)/,/^(?:RelIndex\b)/,/^(?:UpdateElementStyle\b)/,/^(?:UpdateRelStyle\b)/,/^(?:UpdateLayoutConfig\b)/,/^(?:$)/,/^(?:[(][ ]*[,])/,/^(?:[(])/,/^(?:[)])/,/^(?:,,)/,/^(?:,)/,/^(?:[ ]*["]["])/,/^(?:[ ]*["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[ ]*[\$])/,/^(?:[^=]*)/,/^(?:[=][ ]*["])/,/^(?:[^"]+)/,/^(?:["])/,/^(?:[^,]+)/,/^(?:\{)/,/^(?:\})/,/^(?:[\s]+)/,/^(?:[\n\r]+)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},string_kv_value:{rules:[83,84],inclusive:!1},string_kv_key:{rules:[82],inclusive:!1},string_kv:{rules:[81],inclusive:!1},string:{rules:[78,79],inclusive:!1},attribute:{rules:[73,74,75,76,77,80,85],inclusive:!1},update_layout_config:{rules:[70,71,72,73],inclusive:!1},update_rel_style:{rules:[70,71,72,73],inclusive:!1},update_el_style:{rules:[70,71,72,73],inclusive:!1},rel_b:{rules:[70,71,72,73],inclusive:!1},rel_r:{rules:[70,71,72,73],inclusive:!1},rel_l:{rules:[70,71,72,73],inclusive:!1},rel_d:{rules:[70,71,72,73],inclusive:!1},rel_u:{rules:[70,71,72,73],inclusive:!1},rel_bi:{rules:[],inclusive:!1},rel:{rules:[70,71,72,73],inclusive:!1},node_r:{rules:[70,71,72,73],inclusive:!1},node_l:{rules:[70,71,72,73],inclusive:!1},node:{rules:[70,71,72,73],inclusive:!1},index:{rules:[],inclusive:!1},rel_index:{rules:[70,71,72,73],inclusive:!1},component_ext_queue:{rules:[],inclusive:!1},component_ext_db:{rules:[70,71,72,73],inclusive:!1},component_ext:{rules:[70,71,72,73],inclusive:!1},component_queue:{rules:[70,71,72,73],inclusive:!1},component_db:{rules:[70,71,72,73],inclusive:!1},component:{rules:[70,71,72,73],inclusive:!1},container_boundary:{rules:[70,71,72,73],inclusive:!1},container_ext_queue:{rules:[],inclusive:!1},container_ext_db:{rules:[70,71,72,73],inclusive:!1},container_ext:{rules:[70,71,72,73],inclusive:!1},container_queue:{rules:[70,71,72,73],inclusive:!1},container_db:{rules:[70,71,72,73],inclusive:!1},container:{rules:[70,71,72,73],inclusive:!1},birel:{rules:[70,71,72,73],inclusive:!1},system_boundary:{rules:[70,71,72,73],inclusive:!1},enterprise_boundary:{rules:[70,71,72,73],inclusive:!1},boundary:{rules:[70,71,72,73],inclusive:!1},system_ext_queue:{rules:[70,71,72,73],inclusive:!1},system_ext_db:{rules:[70,71,72,73],inclusive:!1},system_ext:{rules:[70,71,72,73],inclusive:!1},system_queue:{rules:[70,71,72,73],inclusive:!1},system_db:{rules:[70,71,72,73],inclusive:!1},system:{rules:[70,71,72,73],inclusive:!1},person_ext:{rules:[70,71,72,73],inclusive:!1},person:{rules:[70,71,72,73],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,86,87,88,89,90],inclusive:!0}}},t);function bt(){this.yy={}}return yt.lexer=mt,bt.prototype=yt,yt.Parser=bt,new bt}();Ii.parser=Ii;const Fi=Ii,$i=t=>null!==t.match(/^\s*C4Context|C4Container|C4Component|C4Dynamic|C4Deployment/);let Ri=[],Zi=[""],Pi="global",ji="",Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],zi=[],Ui="",Wi=!1,qi=4,Hi=2;var Vi;const Gi=function(t){return null==t?Ri:Ri.filter((e=>e.parentBoundary===t))},Xi=function(){return Wi},Ki={addPersonOrSystem:function(t,e,n,r,i,a,s){if(null===e||null===n)return;let o={};const c=Ri.find((t=>t.alias===e));if(c&&e===c.alias?o=c:(o.alias=e,Ri.push(o)),o.label=null==n?{text:""}:{text:n},null==r)o.descr={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]={text:e}}else o.descr={text:r};if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.sprite=i;if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=e}else o.tags=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=e}else o.link=s;o.typeC4Shape={text:t},o.parentBoundary=Pi,o.wrap=Xi()},addPersonOrSystemBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"system"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addContainer:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addContainerBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"container"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addComponent:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addDeploymentNode:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Yi.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Yi.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.type={text:"node"};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.type={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.nodeType=t,c.parentBoundary=Pi,c.wrap=Xi(),ji=Pi,Pi=e,Zi.push(ji)},popBoundaryParseStack:function(){Pi=ji,Zi.pop(),ji=Zi.pop(),Zi.push(ji)},addRel:function(t,e,n,r,i,a,s,o,c){if(null==t||null==e||null==n||null==r)return;let l={};const h=zi.find((t=>t.from===e&&t.to===n));if(h?l=h:zi.push(l),l.type=t,l.from=e,l.to=n,l.label={text:r},null==i)l.techn={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];l[t]={text:e}}else l.techn={text:i};if(null==a)l.descr={text:""};else if("object"==typeof a){let[t,e]=Object.entries(a)[0];l[t]={text:e}}else l.descr={text:a};if("object"==typeof s){let[t,e]=Object.entries(s)[0];l[t]=e}else l.sprite=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];l[t]=e}else l.tags=o;if("object"==typeof c){let[t,e]=Object.entries(c)[0];l[t]=e}else l.link=c;l.wrap=Xi()},updateElStyle:function(t,e,n,r,i,a,s,o,c,l,h){let u=Ri.find((t=>t.alias===e));if(void 0!==u||(u=Yi.find((t=>t.alias===e)),void 0!==u)){if(null!=n)if("object"==typeof n){let[t,e]=Object.entries(n)[0];u[t]=e}else u.bgColor=n;if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];u[t]=e}else u.fontColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];u[t]=e}else u.borderColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];u[t]=e}else u.shadowing=a;if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];u[t]=e}else u.shape=s;if(null!=o)if("object"==typeof o){let[t,e]=Object.entries(o)[0];u[t]=e}else u.sprite=o;if(null!=c)if("object"==typeof c){let[t,e]=Object.entries(c)[0];u[t]=e}else u.techn=c;if(null!=l)if("object"==typeof l){let[t,e]=Object.entries(l)[0];u[t]=e}else u.legendText=l;if(null!=h)if("object"==typeof h){let[t,e]=Object.entries(h)[0];u[t]=e}else u.legendSprite=h}},updateRelStyle:function(t,e,n,r,i,a,s){const o=zi.find((t=>t.from===e&&t.to===n));if(void 0!==o){if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]=e}else o.textColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.lineColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=parseInt(e)}else o.offsetX=parseInt(a);if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=parseInt(e)}else o.offsetY=parseInt(s)}},updateLayoutConfig:function(t,e,n){let r=qi,i=Hi;if("object"==typeof e){const t=Object.values(e)[0];r=parseInt(t)}else r=parseInt(e);if("object"==typeof n){const t=Object.values(n)[0];i=parseInt(t)}else i=parseInt(n);r>=1&&(qi=r),i>=1&&(Hi=i)},autoWrap:Xi,setWrap:function(t){Wi=t},getC4ShapeArray:Gi,getC4Shape:function(t){return Ri.find((e=>e.alias===t))},getC4ShapeKeys:function(t){return Object.keys(Gi(t))},getBoundarys:function(t){return null==t?Yi:Yi.filter((e=>e.parentBoundary===t))},getCurrentBoundaryParse:function(){return Pi},getParentBoundaryParse:function(){return ji},getRels:function(){return zi},getTitle:function(){return Ui},getC4Type:function(){return Vi},getC4ShapeInRow:function(){return qi},getC4BoundaryInRow:function(){return Hi},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().c4,clear:function(){Ri=[],Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],ji="",Pi="global",Zi=[""],zi=[],Zi=[""],Ui="",Wi=!1,qi=4,Hi=2},LINETYPE:{SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25},ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},setTitle:function(t){let e=Ft(t,ar());Ui=e},setC4Type:function(t){let e=Ft(t,ar());Vi=e}},Qi=function(t,e){const n=t.append("rect");if(n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),"undefined"!==e.attrs&&null!==e.attrs)for(let r in e.attrs)n.attr(r,e.attrs[r]);return"undefined"!==e.class&&n.attr("class",e.class),n},Ji=function(t,e,n,r,i,a){const o=t.append("image");o.attr("width",e),o.attr("height",n),o.attr("x",r),o.attr("y",i);let c=a.startsWith("data:image/png;base64")?a:(0,s.N)(a);o.attr("xlink:href",c)},ta=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},ea=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),na=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{fontSize:l,fontFamily:h,fontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,s=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").attr("dominant-baseline","middle").style("font-size",l).style("font-weight",u).style("font-family",h);s.append("tspan").attr("dy",t).text(d[p]).attr("alignment-baseline","mathematical"),r(s,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,0,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),ra=function(t,e,n){const r=t.append("g");let i=e.bgColor?e.bgColor:"none",a=e.borderColor?e.borderColor:"#444444",s=e.fontColor?e.fontColor:"black",o={"stroke-width":1,"stroke-dasharray":"7.0,7.0"};e.nodeType&&(o={"stroke-width":1});let c={x:e.x,y:e.y,fill:i,stroke:a,width:e.width,height:e.height,rx:2.5,ry:2.5,attrs:o};Qi(r,c);let l=n.boundaryFont();l.fontWeight="bold",l.fontSize=l.fontSize+2,l.fontColor=s,na(n)(e.label.text,r,e.x,e.y+e.label.Y,e.width,e.height,{fill:"#444444"},l),e.type&&""!==e.type.text&&(l=n.boundaryFont(),l.fontColor=s,na(n)(e.type.text,r,e.x,e.y+e.type.Y,e.width,e.height,{fill:"#444444"},l)),e.descr&&""!==e.descr.text&&(l=n.boundaryFont(),l.fontSize=l.fontSize-2,l.fontColor=s,na(n)(e.descr.text,r,e.x,e.y+e.descr.Y,e.width,e.height,{fill:"#444444"},l))},ia=function(t,e,n){var r;let i=e.bgColor?e.bgColor:n[e.typeC4Shape.text+"_bg_color"],a=e.borderColor?e.borderColor:n[e.typeC4Shape.text+"_border_color"],s=e.fontColor?e.fontColor:"#FFFFFF",o="data:image/png;base64,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";switch(e.typeC4Shape.text){case"person":o="data:image/png;base64,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";break;case"external_person":o="data:image/png;base64,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"}const c=t.append("g");c.attr("class","person-man");const l=ta();switch(e.typeC4Shape.text){case"person":case"external_person":case"system":case"external_system":case"container":case"external_container":case"component":case"external_component":l.x=e.x,l.y=e.y,l.fill=i,l.width=e.width,l.height=e.height,l.stroke=a,l.rx=2.5,l.ry=2.5,l.attrs={"stroke-width":.5},Qi(c,l);break;case"system_db":case"external_system_db":case"container_db":case"external_container_db":case"component_db":case"external_component_db":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,-10 half,-10 half,-10c0,0 half,0 half,10l0,heightc0,10 -half,10 -half,10c0,0 -half,0 -half,-10l0,-height".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2).replaceAll("height",e.height)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,10 half,10 half,10c0,0 half,0 half,-10".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2));break;case"system_queue":case"external_system_queue":case"container_queue":case"external_container_queue":case"component_queue":case"external_component_queue":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startylwidth,0c5,0 5,half 5,halfc0,0 0,half -5,halfl-width,0c-5,0 -5,-half -5,-halfc0,0 0,-half 5,-half".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("width",e.width).replaceAll("half",e.height/2)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc-5,0 -5,half -5,halfc0,half 5,half 5,half".replaceAll("startx",e.x+e.width).replaceAll("starty",e.y).replaceAll("half",e.height/2))}let h=ea(n,e.typeC4Shape.text);switch(c.append("text").attr("fill",s).attr("font-family",h.fontFamily).attr("font-size",h.fontSize-2).attr("font-style","italic").attr("lengthAdjust","spacing").attr("textLength",e.typeC4Shape.width).attr("x",e.x+e.width/2-e.typeC4Shape.width/2).attr("y",e.y+e.typeC4Shape.Y).text("<<"+e.typeC4Shape.text+">>"),e.typeC4Shape.text){case"person":case"external_person":Ji(c,48,48,e.x+e.width/2-24,e.y+e.image.Y,o)}let u=n[e.typeC4Shape.text+"Font"]();return u.fontWeight="bold",u.fontSize=u.fontSize+2,u.fontColor=s,na(n)(e.label.text,c,e.x,e.y+e.label.Y,e.width,e.height,{fill:s},u),u=n[e.typeC4Shape.text+"Font"](),u.fontColor=s,e.techn&&""!==(null==(r=e.techn)?void 0:r.text)?na(n)(e.techn.text,c,e.x,e.y+e.techn.Y,e.width,e.height,{fill:s,"font-style":"italic"},u):e.type&&""!==e.type.text&&na(n)(e.type.text,c,e.x,e.y+e.type.Y,e.width,e.height,{fill:s,"font-style":"italic"},u),e.descr&&""!==e.descr.text&&(u=n.personFont(),u.fontColor=s,na(n)(e.descr.text,c,e.x,e.y+e.descr.Y,e.width,e.height,{fill:s},u)),e.height},aa=(t,e,n)=>{const r=t.append("g");let i=0;for(let a of e){let t=a.textColor?a.textColor:"#444444",e=a.lineColor?a.lineColor:"#444444",s=a.offsetX?parseInt(a.offsetX):0,o=a.offsetY?parseInt(a.offsetY):0,c="";if(0===i){let t=r.append("line");t.attr("x1",a.startPoint.x),t.attr("y1",a.startPoint.y),t.attr("x2",a.endPoint.x),t.attr("y2",a.endPoint.y),t.attr("stroke-width","1"),t.attr("stroke",e),t.style("fill","none"),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)"),i=-1}else{let t=r.append("path");t.attr("fill","none").attr("stroke-width","1").attr("stroke",e).attr("d","Mstartx,starty Qcontrolx,controly stopx,stopy ".replaceAll("startx",a.startPoint.x).replaceAll("starty",a.startPoint.y).replaceAll("controlx",a.startPoint.x+(a.endPoint.x-a.startPoint.x)/2-(a.endPoint.x-a.startPoint.x)/4).replaceAll("controly",a.startPoint.y+(a.endPoint.y-a.startPoint.y)/2).replaceAll("stopx",a.endPoint.x).replaceAll("stopy",a.endPoint.y)),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)")}let l=n.messageFont();na(n)(a.label.text,r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+o,a.label.width,a.label.height,{fill:t},l),a.techn&&""!==a.techn.text&&(l=n.messageFont(),na(n)("["+a.techn.text+"]",r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+n.messageFontSize+5+o,Math.max(a.label.width,a.techn.width),a.techn.height,{fill:t,"font-style":"italic"},l))}},sa=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},oa=function(t){t.append("defs").append("marker").attr("id","arrowend").attr("refX",1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 10 0 L 0 5 L 10 10 z")},ca=function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},la=function(t){const e=t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",16).attr("refY",4);e.append("path").attr("fill","black").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 9,2 V 6 L16,4 Z"),e.append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 0,1 L 6,7 M 6,1 L 0,7")},ha=function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},ua=function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},da=function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")};s.N;let pa=0,fa=0,ga=4,ya=2;Ii.yy=Ki;let ma={};class ba{constructor(t){this.name="",this.data={},this.data.startx=void 0,this.data.stopx=void 0,this.data.starty=void 0,this.data.stopy=void 0,this.data.widthLimit=void 0,this.nextData={},this.nextData.startx=void 0,this.nextData.stopx=void 0,this.nextData.starty=void 0,this.nextData.stopy=void 0,this.nextData.cnt=0,_a(t.db.getConfig())}setData(t,e,n,r){this.nextData.startx=this.data.startx=t,this.nextData.stopx=this.data.stopx=e,this.nextData.starty=this.data.starty=n,this.nextData.stopy=this.data.stopy=r}updateVal(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])}insert(t){this.nextData.cnt=this.nextData.cnt+1;let e=this.nextData.startx===this.nextData.stopx?this.nextData.stopx+t.margin:this.nextData.stopx+2*t.margin,n=e+t.width,r=this.nextData.starty+2*t.margin,i=r+t.height;(e>=this.data.widthLimit||n>=this.data.widthLimit||this.nextData.cnt>ga)&&(e=this.nextData.startx+t.margin+ma.nextLinePaddingX,r=this.nextData.stopy+2*t.margin,this.nextData.stopx=n=e+t.width,this.nextData.starty=this.nextData.stopy,this.nextData.stopy=i=r+t.height,this.nextData.cnt=1),t.x=e,t.y=r,this.updateVal(this.data,"startx",e,Math.min),this.updateVal(this.data,"starty",r,Math.min),this.updateVal(this.data,"stopx",n,Math.max),this.updateVal(this.data,"stopy",i,Math.max),this.updateVal(this.nextData,"startx",e,Math.min),this.updateVal(this.nextData,"starty",r,Math.min),this.updateVal(this.nextData,"stopx",n,Math.max),this.updateVal(this.nextData,"stopy",i,Math.max)}init(t){this.name="",this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,widthLimit:void 0},this.nextData={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,cnt:0},_a(t.db.getConfig())}bumpLastMargin(t){this.data.stopx+=t,this.data.stopy+=t}}const _a=function(t){Sn(ma,t),t.fontFamily&&(ma.personFontFamily=ma.systemFontFamily=ma.messageFontFamily=t.fontFamily),t.fontSize&&(ma.personFontSize=ma.systemFontSize=ma.messageFontSize=t.fontSize),t.fontWeight&&(ma.personFontWeight=ma.systemFontWeight=ma.messageFontWeight=t.fontWeight)},xa=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),va=t=>({fontFamily:t.boundaryFontFamily,fontSize:t.boundaryFontSize,fontWeight:t.boundaryFontWeight});function ka(t,e,n,r,i){if(!e[t].width)if(n)e[t].text=Zn(e[t].text,i,r),e[t].textLines=e[t].text.split(Yt.lineBreakRegex).length,e[t].width=i,e[t].height=jn(e[t].text,r);else{let n=e[t].text.split(Yt.lineBreakRegex);e[t].textLines=n.length;let i=0;e[t].height=0,e[t].width=0;for(const a of n)e[t].width=Math.max(Yn(a,r),e[t].width),i=jn(a,r),e[t].height=e[t].height+i}}const wa=function(t,e,n){e.x=n.data.startx,e.y=n.data.starty,e.width=n.data.stopx-n.data.startx,e.height=n.data.stopy-n.data.starty,e.label.y=ma.c4ShapeMargin-35;let r=e.wrap&&ma.wrap,i=va(ma);i.fontSize=i.fontSize+2,i.fontWeight="bold",ka("label",e,r,i,Yn(e.label.text,i)),ra(t,e,ma)},Ea=function(t,e,n,r){let i=0;for(const a of r){i=0;const r=n[a];let s=xa(ma,r.typeC4Shape.text);switch(s.fontSize=s.fontSize-2,r.typeC4Shape.width=Yn("<<"+r.typeC4Shape.text+">>",s),r.typeC4Shape.height=s.fontSize+2,r.typeC4Shape.Y=ma.c4ShapePadding,i=r.typeC4Shape.Y+r.typeC4Shape.height-4,r.image={width:0,height:0,Y:0},r.typeC4Shape.text){case"person":case"external_person":r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height}r.sprite&&(r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height);let o=r.wrap&&ma.wrap,c=ma.width-2*ma.c4ShapePadding,l=xa(ma,r.typeC4Shape.text);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",r,o,l,c),r.label.Y=i+8,i=r.label.Y+r.label.height,r.type&&""!==r.type.text){r.type.text="["+r.type.text+"]",ka("type",r,o,xa(ma,r.typeC4Shape.text),c),r.type.Y=i+5,i=r.type.Y+r.type.height}else if(r.techn&&""!==r.techn.text){r.techn.text="["+r.techn.text+"]",ka("techn",r,o,xa(ma,r.techn.text),c),r.techn.Y=i+5,i=r.techn.Y+r.techn.height}let h=i,u=r.label.width;if(r.descr&&""!==r.descr.text){ka("descr",r,o,xa(ma,r.typeC4Shape.text),c),r.descr.Y=i+20,i=r.descr.Y+r.descr.height,u=Math.max(r.label.width,r.descr.width),h=i-5*r.descr.textLines}u+=ma.c4ShapePadding,r.width=Math.max(r.width||ma.width,u,ma.width),r.height=Math.max(r.height||ma.height,h,ma.height),r.margin=r.margin||ma.c4ShapeMargin,t.insert(r),ia(e,r,ma)}t.bumpLastMargin(ma.c4ShapeMargin)};class Ca{constructor(t,e){this.x=t,this.y=e}}let Ta=function(t,e){let n=t.x,r=t.y,i=e.x,a=e.y,s=n+t.width/2,o=r+t.height/2,c=Math.abs(n-i),l=Math.abs(r-a),h=l/c,u=t.height/t.width,d=null;return r==a&&n<i?d=new Ca(n+t.width,o):r==a&&n>i?d=new Ca(n,o):n==i&&r<a?d=new Ca(s,r+t.height):n==i&&r>a&&(d=new Ca(s,r)),n>i&&r<a?d=u>=h?new Ca(n,o+h*t.width/2):new Ca(s-c/l*t.height/2,r+t.height):n<i&&r<a?d=u>=h?new Ca(n+t.width,o+h*t.width/2):new Ca(s+c/l*t.height/2,r+t.height):n<i&&r>a?d=u>=h?new Ca(n+t.width,o-h*t.width/2):new Ca(s+t.height/2*c/l,r):n>i&&r>a&&(d=u>=h?new Ca(n,o-t.width/2*h):new Ca(s-t.height/2*c/l,r)),d},Sa=function(t,e){let n={x:0,y:0};n.x=e.x+e.width/2,n.y=e.y+e.height/2;let r=Ta(t,n);return n.x=t.x+t.width/2,n.y=t.y+t.height/2,{startPoint:r,endPoint:Ta(e,n)}};function Aa(t,e,n,r,i){let a=new ba(i);a.data.widthLimit=n.data.widthLimit/Math.min(ya,r.length);for(let[s,o]of r.entries()){let r=0;o.image={width:0,height:0,Y:0},o.sprite&&(o.image.width=48,o.image.height=48,o.image.Y=r,r=o.image.Y+o.image.height);let c=o.wrap&&ma.wrap,l=va(ma);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",o,c,l,a.data.widthLimit),o.label.Y=r+8,r=o.label.Y+o.label.height,o.type&&""!==o.type.text){o.type.text="["+o.type.text+"]",ka("type",o,c,va(ma),a.data.widthLimit),o.type.Y=r+5,r=o.type.Y+o.type.height}if(o.descr&&""!==o.descr.text){let t=va(ma);t.fontSize=t.fontSize-2,ka("descr",o,c,t,a.data.widthLimit),o.descr.Y=r+20,r=o.descr.Y+o.descr.height}if(0==s||s%ya==0){let t=n.data.startx+ma.diagramMarginX,e=n.data.stopy+ma.diagramMarginY+r;a.setData(t,t,e,e)}else{let t=a.data.stopx!==a.data.startx?a.data.stopx+ma.diagramMarginX:a.data.startx,e=a.data.starty;a.setData(t,t,e,e)}a.name=o.alias;let h=i.db.getC4ShapeArray(o.alias),u=i.db.getC4ShapeKeys(o.alias);u.length>0&&Ea(a,t,h,u),e=o.alias;let d=i.db.getBoundarys(e);d.length>0&&Aa(t,e,a,d,i),"global"!==o.alias&&wa(t,o,a),n.data.stopy=Math.max(a.data.stopy+ma.c4ShapeMargin,n.data.stopy),n.data.stopx=Math.max(a.data.stopx+ma.c4ShapeMargin,n.data.stopx),pa=Math.max(pa,n.data.stopx),fa=Math.max(fa,n.data.stopy)}}const La={drawPersonOrSystemArray:Ea,drawBoundary:wa,setConf:_a,draw:function(t,e,n,r){ma=ar().c4;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body");let c=r.db;r.db.setWrap(ma.wrap),ga=c.getC4ShapeInRow(),ya=c.getC4BoundaryInRow(),Nt.debug(`C:${JSON.stringify(ma,null,2)}`);const l="sandbox"===i?s.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`);ua(l),ha(l),da(l);let h=new ba(r);h.setData(ma.diagramMarginX,ma.diagramMarginX,ma.diagramMarginY,ma.diagramMarginY),h.data.widthLimit=screen.availWidth,pa=ma.diagramMarginX,fa=ma.diagramMarginY;const u=r.db.getTitle();Aa(l,"",h,r.db.getBoundarys(""),r),sa(l),oa(l),la(l),ca(l),function(t,e,n,r){let i=0;for(let s of e){i+=1;let t=s.wrap&&ma.wrap,e={fontFamily:(a=ma).messageFontFamily,fontSize:a.messageFontSize,fontWeight:a.messageFontWeight};"C4Dynamic"===r.db.getC4Type()&&(s.label.text=i+": "+s.label.text);let o=Yn(s.label.text,e);ka("label",s,t,e,o),s.techn&&""!==s.techn.text&&(o=Yn(s.techn.text,e),ka("techn",s,t,e,o)),s.descr&&""!==s.descr.text&&(o=Yn(s.descr.text,e),ka("descr",s,t,e,o));let c=n(s.from),l=n(s.to),h=Sa(c,l);s.startPoint=h.startPoint,s.endPoint=h.endPoint}var a;aa(t,e,ma)}(l,r.db.getRels(),r.db.getC4Shape,r),h.data.stopx=pa,h.data.stopy=fa;const d=h.data;let p=d.stopy-d.starty+2*ma.diagramMarginY;const f=d.stopx-d.startx+2*ma.diagramMarginX;u&&l.append("text").text(u).attr("x",(d.stopx-d.startx)/2-4*ma.diagramMarginX).attr("y",d.starty+ma.diagramMarginY),dr(l,p,f,ma.useMaxWidth);const g=u?60:0;l.attr("viewBox",d.startx-ma.diagramMarginX+" -"+(ma.diagramMarginY+g)+" "+f+" "+(p+g)),Nt.debug("models:",d)}};var Ba=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,7],i=[1,8],a=[1,9],s=[1,10],o=[1,13],c=[1,12],l=[1,16,25],h=[1,20],u=[1,32],d=[1,33],p=[1,34],f=[1,36],g=[1,39],y=[1,37],m=[1,38],b=[1,44],_=[1,45],x=[1,40],v=[1,41],k=[1,42],w=[1,43],E=[1,48],C=[1,49],T=[1,50],S=[1,51],A=[16,25],L=[1,65],B=[1,66],N=[1,67],D=[1,68],O=[1,69],M=[1,70],I=[1,71],F=[1,80],$=[16,25,32,45,46,54,60,61,62,63,64,65,66,71,73],R=[16,25,30,32,45,46,50,54,60,61,62,63,64,65,66,71,73,88,89,90,91],Z=[5,8,9,10,11,16,19,23,25],P=[54,88,89,90,91],j=[54,65,66,88,89,90,91],Y=[54,60,61,62,63,64,88,89,90,91],z=[16,25,32],U=[1,107],W={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,statments:5,direction:6,directive:7,direction_tb:8,direction_bt:9,direction_rl:10,direction_lr:11,graphConfig:12,openDirective:13,typeDirective:14,closeDirective:15,NEWLINE:16,":":17,argDirective:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,CLASS_DIAGRAM:23,statements:24,EOF:25,statement:26,className:27,alphaNumToken:28,classLiteralName:29,GENERICTYPE:30,relationStatement:31,LABEL:32,classStatement:33,methodStatement:34,annotationStatement:35,clickStatement:36,cssClassStatement:37,noteStatement:38,acc_title:39,acc_title_value:40,acc_descr:41,acc_descr_value:42,acc_descr_multiline_value:43,CLASS:44,STYLE_SEPARATOR:45,STRUCT_START:46,members:47,STRUCT_STOP:48,ANNOTATION_START:49,ANNOTATION_END:50,MEMBER:51,SEPARATOR:52,relation:53,STR:54,NOTE_FOR:55,noteText:56,NOTE:57,relationType:58,lineType:59,AGGREGATION:60,EXTENSION:61,COMPOSITION:62,DEPENDENCY:63,LOLLIPOP:64,LINE:65,DOTTED_LINE:66,CALLBACK:67,LINK:68,LINK_TARGET:69,CLICK:70,CALLBACK_NAME:71,CALLBACK_ARGS:72,HREF:73,CSSCLASS:74,commentToken:75,textToken:76,graphCodeTokens:77,textNoTagsToken:78,TAGSTART:79,TAGEND:80,"==":81,"--":82,PCT:83,DEFAULT:84,SPACE:85,MINUS:86,keywords:87,UNICODE_TEXT:88,NUM:89,ALPHA:90,BQUOTE_STR:91,$accept:0,$end:1},terminals_:{2:"error",5:"statments",8:"direction_tb",9:"direction_bt",10:"direction_rl",11:"direction_lr",16:"NEWLINE",17:":",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",23:"CLASS_DIAGRAM",25:"EOF",30:"GENERICTYPE",32:"LABEL",39:"acc_title",40:"acc_title_value",41:"acc_descr",42:"acc_descr_value",43:"acc_descr_multiline_value",44:"CLASS",45:"STYLE_SEPARATOR",46:"STRUCT_START",48:"STRUCT_STOP",49:"ANNOTATION_START",50:"ANNOTATION_END",51:"MEMBER",52:"SEPARATOR",54:"STR",55:"NOTE_FOR",57:"NOTE",60:"AGGREGATION",61:"EXTENSION",62:"COMPOSITION",63:"DEPENDENCY",64:"LOLLIPOP",65:"LINE",66:"DOTTED_LINE",67:"CALLBACK",68:"LINK",69:"LINK_TARGET",70:"CLICK",71:"CALLBACK_NAME",72:"CALLBACK_ARGS",73:"HREF",74:"CSSCLASS",77:"graphCodeTokens",79:"TAGSTART",80:"TAGEND",81:"==",82:"--",83:"PCT",84:"DEFAULT",85:"SPACE",86:"MINUS",87:"keywords",88:"UNICODE_TEXT",89:"NUM",90:"ALPHA",91:"BQUOTE_STR"},productions_:[0,[3,1],[3,1],[3,1],[3,2],[6,1],[6,1],[6,1],[6,1],[4,1],[7,4],[7,6],[13,1],[14,1],[18,1],[15,1],[12,4],[24,1],[24,2],[24,3],[27,1],[27,1],[27,2],[27,2],[27,2],[26,1],[26,2],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,2],[26,2],[26,1],[33,2],[33,4],[33,5],[33,7],[35,4],[47,1],[47,2],[34,1],[34,2],[34,1],[34,1],[31,3],[31,4],[31,4],[31,5],[38,3],[38,2],[53,3],[53,2],[53,2],[53,1],[58,1],[58,1],[58,1],[58,1],[58,1],[59,1],[59,1],[36,3],[36,4],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[37,3],[75,1],[75,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[78,1],[78,1],[78,1],[78,1],[28,1],[28,1],[28,1],[29,1],[56,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.setDirection("TB");break;case 6:r.setDirection("BT");break;case 7:r.setDirection("RL");break;case 8:r.setDirection("LR");break;case 12:r.parseDirective("%%{","open_directive");break;case 13:r.parseDirective(a[o],"type_directive");break;case 14:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 15:r.parseDirective("}%%","close_directive","class");break;case 20:case 21:this.$=a[o];break;case 22:this.$=a[o-1]+a[o];break;case 23:case 24:this.$=a[o-1]+"~"+a[o];break;case 25:r.addRelation(a[o]);break;case 26:a[o-1].title=r.cleanupLabel(a[o]),r.addRelation(a[o-1]);break;case 35:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 36:case 37:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 38:r.addClass(a[o]);break;case 39:r.addClass(a[o-2]),r.setCssClass(a[o-2],a[o]);break;case 40:r.addClass(a[o-3]),r.addMembers(a[o-3],a[o-1]);break;case 41:r.addClass(a[o-5]),r.setCssClass(a[o-5],a[o-3]),r.addMembers(a[o-5],a[o-1]);break;case 42:r.addAnnotation(a[o],a[o-2]);break;case 43:this.$=[a[o]];break;case 44:a[o].push(a[o-1]),this.$=a[o];break;case 45:case 47:case 48:break;case 46:r.addMember(a[o-1],r.cleanupLabel(a[o]));break;case 49:this.$={id1:a[o-2],id2:a[o],relation:a[o-1],relationTitle1:"none",relationTitle2:"none"};break;case 50:this.$={id1:a[o-3],id2:a[o],relation:a[o-1],relationTitle1:a[o-2],relationTitle2:"none"};break;case 51:this.$={id1:a[o-3],id2:a[o],relation:a[o-2],relationTitle1:"none",relationTitle2:a[o-1]};break;case 52:this.$={id1:a[o-4],id2:a[o],relation:a[o-2],relationTitle1:a[o-3],relationTitle2:a[o-1]};break;case 53:r.addNote(a[o],a[o-1]);break;case 54:r.addNote(a[o]);break;case 55:this.$={type1:a[o-2],type2:a[o],lineType:a[o-1]};break;case 56:this.$={type1:"none",type2:a[o],lineType:a[o-1]};break;case 57:this.$={type1:a[o-1],type2:"none",lineType:a[o]};break;case 58:this.$={type1:"none",type2:"none",lineType:a[o]};break;case 59:this.$=r.relationType.AGGREGATION;break;case 60:this.$=r.relationType.EXTENSION;break;case 61:this.$=r.relationType.COMPOSITION;break;case 62:this.$=r.relationType.DEPENDENCY;break;case 63:this.$=r.relationType.LOLLIPOP;break;case 64:this.$=r.lineType.LINE;break;case 65:this.$=r.lineType.DOTTED_LINE;break;case 66:case 72:this.$=a[o-2],r.setClickEvent(a[o-1],a[o]);break;case 67:case 73:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 68:case 76:this.$=a[o-2],r.setLink(a[o-1],a[o]);break;case 69:case 77:this.$=a[o-3],r.setLink(a[o-2],a[o-1],a[o]);break;case 70:case 78:this.$=a[o-3],r.setLink(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 71:case 79:this.$=a[o-4],r.setLink(a[o-3],a[o-2],a[o]),r.setTooltip(a[o-3],a[o-1]);break;case 74:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 75:this.$=a[o-4],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setTooltip(a[o-3],a[o]);break;case 80:r.setCssClass(a[o-1],a[o])}},table:[{3:1,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[3]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{3:14,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[2,9]},e(l,[2,5]),e(l,[2,6]),e(l,[2,7]),e(l,[2,8]),{14:15,20:[1,16]},{16:[1,17]},{20:[2,12]},{1:[2,4]},{15:18,17:[1,19],22:h},e([17,22],[2,13]),{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:21,26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},{16:[1,52]},{18:53,21:[1,54]},{16:[2,15]},{25:[1,55]},{16:[1,56],25:[2,17]},e(A,[2,25],{32:[1,57]}),e(A,[2,27]),e(A,[2,28]),e(A,[2,29]),e(A,[2,30]),e(A,[2,31]),e(A,[2,32]),e(A,[2,33]),e(A,[2,34]),{40:[1,58]},{42:[1,59]},e(A,[2,37]),e(A,[2,45],{53:60,58:63,59:64,32:[1,62],54:[1,61],60:L,61:B,62:N,63:D,64:O,65:M,66:I}),{27:72,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,47]),e(A,[2,48]),{28:73,88:E,89:C,90:T},{27:74,28:46,29:47,88:E,89:C,90:T,91:S},{27:75,28:46,29:47,88:E,89:C,90:T,91:S},{27:76,28:46,29:47,88:E,89:C,90:T,91:S},{54:[1,77]},{27:78,28:46,29:47,88:E,89:C,90:T,91:S},{54:F,56:79},e($,[2,20],{28:46,29:47,27:81,30:[1,82],88:E,89:C,90:T,91:S}),e($,[2,21],{30:[1,83]}),e(R,[2,94]),e(R,[2,95]),e(R,[2,96]),e([16,25,30,32,45,46,54,60,61,62,63,64,65,66,71,73],[2,97]),e(Z,[2,10]),{15:84,22:h},{22:[2,14]},{1:[2,16]},{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:85,25:[2,18],26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},e(A,[2,26]),e(A,[2,35]),e(A,[2,36]),{27:86,28:46,29:47,54:[1,87],88:E,89:C,90:T,91:S},{53:88,58:63,59:64,60:L,61:B,62:N,63:D,64:O,65:M,66:I},e(A,[2,46]),{59:89,65:M,66:I},e(P,[2,58],{58:90,60:L,61:B,62:N,63:D,64:O}),e(j,[2,59]),e(j,[2,60]),e(j,[2,61]),e(j,[2,62]),e(j,[2,63]),e(Y,[2,64]),e(Y,[2,65]),e(A,[2,38],{45:[1,91],46:[1,92]}),{50:[1,93]},{54:[1,94]},{54:[1,95]},{71:[1,96],73:[1,97]},{28:98,88:E,89:C,90:T},{54:F,56:99},e(A,[2,54]),e(A,[2,98]),e($,[2,22]),e($,[2,23]),e($,[2,24]),{16:[1,100]},{25:[2,19]},e(z,[2,49]),{27:101,28:46,29:47,88:E,89:C,90:T,91:S},{27:102,28:46,29:47,54:[1,103],88:E,89:C,90:T,91:S},e(P,[2,57],{58:104,60:L,61:B,62:N,63:D,64:O}),e(P,[2,56]),{28:105,88:E,89:C,90:T},{47:106,51:U},{27:108,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,66],{54:[1,109]}),e(A,[2,68],{54:[1,111],69:[1,110]}),e(A,[2,72],{54:[1,112],72:[1,113]}),e(A,[2,76],{54:[1,115],69:[1,114]}),e(A,[2,80]),e(A,[2,53]),e(Z,[2,11]),e(z,[2,51]),e(z,[2,50]),{27:116,28:46,29:47,88:E,89:C,90:T,91:S},e(P,[2,55]),e(A,[2,39],{46:[1,117]}),{48:[1,118]},{47:119,48:[2,43],51:U},e(A,[2,42]),e(A,[2,67]),e(A,[2,69]),e(A,[2,70],{69:[1,120]}),e(A,[2,73]),e(A,[2,74],{54:[1,121]}),e(A,[2,77]),e(A,[2,78],{69:[1,122]}),e(z,[2,52]),{47:123,51:U},e(A,[2,40]),{48:[2,44]},e(A,[2,71]),e(A,[2,75]),e(A,[2,79]),{48:[1,124]},e(A,[2,41])],defaultActions:{2:[2,1],3:[2,2],4:[2,3],6:[2,9],13:[2,12],14:[2,4],20:[2,15],54:[2,14],55:[2,16],85:[2,19],119:[2,44]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},q=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return 8;case 2:return 9;case 3:return 10;case 4:return 11;case 5:return this.begin("type_directive"),20;case 6:return this.popState(),this.begin("arg_directive"),17;case 7:return this.popState(),this.popState(),22;case 8:return 21;case 9:case 10:case 19:case 27:break;case 11:return this.begin("acc_title"),39;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),41;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 39:case 42:case 45:case 48:case 51:case 54:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:return 16;case 20:case 21:return 23;case 22:return this.begin("struct"),46;case 23:return"EDGE_STATE";case 24:return"EOF_IN_STRUCT";case 25:return"OPEN_IN_STRUCT";case 26:return this.popState(),48;case 28:return"MEMBER";case 29:return 44;case 30:return 74;case 31:return 67;case 32:return 68;case 33:return 70;case 34:return 55;case 35:return 57;case 36:return 49;case 37:return 50;case 38:this.begin("generic");break;case 40:return"GENERICTYPE";case 41:this.begin("string");break;case 43:return"STR";case 44:this.begin("bqstring");break;case 46:return"BQUOTE_STR";case 47:this.begin("href");break;case 49:return 73;case 50:this.begin("callback_name");break;case 52:this.popState(),this.begin("callback_args");break;case 53:return 71;case 55:return 72;case 56:case 57:case 58:case 59:return 69;case 60:case 61:return 61;case 62:case 63:return 63;case 64:return 62;case 65:return 60;case 66:return 64;case 67:return 65;case 68:return 66;case 69:return 32;case 70:return 45;case 71:return 86;case 72:return"DOT";case 73:return"PLUS";case 74:return 83;case 75:case 76:return"EQUALS";case 77:return 90;case 78:return"PUNCTUATION";case 79:return 89;case 80:return 88;case 81:return 85;case 82:return 25}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:classDiagram-v2\b)/,/^(?:classDiagram\b)/,/^(?:[{])/,/^(?:\[\*\])/,/^(?:$)/,/^(?:[{])/,/^(?:[}])/,/^(?:[\n])/,/^(?:[^{}\n]*)/,/^(?:class\b)/,/^(?:cssClass\b)/,/^(?:callback\b)/,/^(?:link\b)/,/^(?:click\b)/,/^(?:note for\b)/,/^(?:note\b)/,/^(?:<<)/,/^(?:>>)/,/^(?:[~])/,/^(?:[~])/,/^(?:[^~]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[`])/,/^(?:[`])/,/^(?:[^`]+)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:\s*<\|)/,/^(?:\s*\|>)/,/^(?:\s*>)/,/^(?:\s*<)/,/^(?:\s*\*)/,/^(?:\s*o\b)/,/^(?:\s*\(\))/,/^(?:--)/,/^(?:\.\.)/,/^(?::{1}[^:\n;]+)/,/^(?::{3})/,/^(?:-)/,/^(?:\.)/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:\w+)/,/^(?:[!"#$%&'*+,-.`?\\/])/,/^(?:[0-9]+)/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\s)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},callback_args:{rules:[54,55],inclusive:!1},callback_name:{rules:[51,52,53],inclusive:!1},href:{rules:[48,49],inclusive:!1},struct:{rules:[23,24,25,26,27,28],inclusive:!1},generic:{rules:[39,40],inclusive:!1},bqstring:{rules:[45,46],inclusive:!1},string:{rules:[42,43],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,29,30,31,32,33,34,35,36,37,38,41,44,47,50,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],inclusive:!0}}},t);function H(){this.yy={}}return W.lexer=q,H.prototype=W,W.Parser=H,new H}();Ba.parser=Ba;const Na=Ba,Da=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*classDiagram/)},Oa=(t,e)=>{var n;return null!==t.match(/^\s*classDiagram/)&&"dagre-wrapper"===(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)||null!==t.match(/^\s*classDiagram-v2/)},Ma="classid-";let Ia=[],Fa={},$a=[],Ra=0,Za=[];const Pa=t=>Yt.sanitizeText(t,ar()),ja=function(t){let e="",n=t;if(t.indexOf("~")>0){let r=t.split("~");n=r[0],e=Yt.sanitizeText(r[1],ar())}return{className:n,type:e}},Ya=function(t){let e=ja(t);void 0===Fa[e.className]&&(Fa[e.className]={id:e.className,type:e.type,cssClasses:[],methods:[],members:[],annotations:[],domId:Ma+e.className+"-"+Ra},Ra++)},za=function(t){const e=Object.keys(Fa);for(const n of e)if(Fa[n].id===t)return Fa[n].domId},Ua=function(t,e){const n=ja(t).className,r=Fa[n];if("string"==typeof e){const t=e.trim();t.startsWith("<<")&&t.endsWith(">>")?r.annotations.push(Pa(t.substring(2,t.length-2))):t.indexOf(")")>0?r.methods.push(Pa(t)):t&&r.members.push(Pa(t))}},Wa=function(t,e){t.split(",").forEach((function(t){let n=t;t[0].match(/\d/)&&(n=Ma+n),void 0!==Fa[n]&&Fa[n].cssClasses.push(e)}))},qa=function(t,e,n){const r=ar();let i=t,a=za(i);if("loose"===r.securityLevel&&void 0!==e&&void 0!==Fa[i]){let t=[];if("string"==typeof n){t=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let e=0;e<t.length;e++){let n=t[e].trim();'"'===n.charAt(0)&&'"'===n.charAt(n.length-1)&&(n=n.substr(1,n.length-2)),t[e]=n}}0===t.length&&t.push(a),Za.push((function(){const n=document.querySelector(`[id="${a}"]`);null!==n&&n.addEventListener("click",(function(){Gn.runFunc(e,...t)}),!1)}))}},Ha=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Za.push(Ha);let Va="TB";const Ga={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,getConfig:()=>ar().class,addClass:Ya,bindFunctions:function(t){Za.forEach((function(e){e(t)}))},clear:function(){Ia=[],Fa={},$a=[],Za=[],Za.push(Ha),Dr()},getClass:function(t){return Fa[t]},getClasses:function(){return Fa},getNotes:function(){return $a},addAnnotation:function(t,e){const n=ja(t).className;Fa[n].annotations.push(e)},addNote:function(t,e){const n={id:`note${$a.length}`,class:e,text:t};$a.push(n)},getRelations:function(){return Ia},addRelation:function(t){Nt.debug("Adding relation: "+JSON.stringify(t)),Ya(t.id1),Ya(t.id2),t.id1=ja(t.id1).className,t.id2=ja(t.id2).className,t.relationTitle1=Yt.sanitizeText(t.relationTitle1.trim(),ar()),t.relationTitle2=Yt.sanitizeText(t.relationTitle2.trim(),ar()),Ia.push(t)},getDirection:()=>Va,setDirection:t=>{Va=t},addMember:Ua,addMembers:function(t,e){Array.isArray(e)&&(e.reverse(),e.forEach((e=>Ua(t,e))))},cleanupLabel:function(t){return":"===t.substring(0,1)?Yt.sanitizeText(t.substr(1).trim(),ar()):Pa(t.trim())},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3,LOLLIPOP:4},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){qa(t,e,n),Fa[t].haveCallback=!0})),Wa(t,"clickable")},setCssClass:Wa,setLink:function(t,e,n){const r=ar();t.split(",").forEach((function(t){let i=t;t[0].match(/\d/)&&(i=Ma+i),void 0!==Fa[i]&&(Fa[i].link=Gn.formatUrl(e,r),"sandbox"===r.securityLevel?Fa[i].linkTarget="_top":Fa[i].linkTarget="string"==typeof n?Pa(n):"_blank")})),Wa(t,"clickable")},getTooltip:function(t){return Fa[t].tooltip},setTooltip:function(t,e){const n=ar();t.split(",").forEach((function(t){void 0!==e&&(Fa[t].tooltip=Yt.sanitizeText(e,n))}))},lookUpDomId:za,setDiagramTitle:$r,getDiagramTitle:Rr};let Xa=0;const Ka=function(t){let e=t.match(/^([#+~-])?(\w+)(~\w+~|\[])?\s+(\w+) *([$*])?$/),n=t.match(/^([#+|~-])?(\w+) *\( *(.*)\) *([$*])? *(\w*[[\]|~]*\s*\w*~?)$/);return e&&!n?Qa(e):n?Ja(n):ts(t)},Qa=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"",o=t[5]?t[5].trim():"";n=r+i+a+" "+s,e=ns(o)}catch(r){n=t}return{displayText:n,cssStyle:e}},Ja=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"";n=r+i+"("+a+")"+(t[5]?" : "+jt(t[5]).trim():""),e=ns(s)}catch(r){n=t}return{displayText:n,cssStyle:e}},ts=function(t){let e="",n="",r="",i=t.indexOf("("),a=t.indexOf(")");if(i>1&&a>i&&a<=t.length){let s="",o="",c=t.substring(0,1);c.match(/\w/)?o=t.substring(0,i).trim():(c.match(/[#+~-]/)&&(s=c),o=t.substring(1,i).trim());const l=t.substring(i+1,a);t.substring(a+1,1),n=ns(t.substring(a+1,a+2)),e=s+o+"("+jt(l.trim())+")",a<t.length&&(r=t.substring(a+2).trim(),""!==r&&(r=" : "+jt(r),e+=r))}else e=jt(t);return{displayText:e,cssStyle:n}},es=function(t,e,n,r){let i=Ka(e);const a=t.append("tspan").attr("x",r.padding).text(i.displayText);""!==i.cssStyle&&a.attr("style",i.cssStyle),n||a.attr("dy",r.textHeight)},ns=function(t){switch(t){case"*":return"font-style:italic;";case"$":return"text-decoration:underline;";default:return""}},rs=function(t,e,n,r){Nt.debug("Rendering class ",e,n);const i=e.id,a={id:i,label:e.id,width:0,height:0},s=t.append("g").attr("id",r.db.lookUpDomId(i)).attr("class","classGroup");let o;o=e.link?s.append("svg:a").attr("xlink:href",e.link).attr("target",e.linkTarget).append("text").attr("y",n.textHeight+n.padding).attr("x",0):s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);let c=!0;e.annotations.forEach((function(t){const e=o.append("tspan").text("\xab"+t+"\xbb");c||e.attr("dy",n.textHeight),c=!1}));let l=e.id;void 0!==e.type&&""!==e.type&&(l+="<"+e.type+">");const h=o.append("tspan").text(l).attr("class","title");c||h.attr("dy",n.textHeight);const u=o.node().getBBox().height,d=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin/2).attr("y2",n.padding+u+n.dividerMargin/2),p=s.append("text").attr("x",n.padding).attr("y",u+n.dividerMargin+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.members.forEach((function(t){es(p,t,c,n),c=!1}));const f=p.node().getBBox(),g=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin+f.height).attr("y2",n.padding+u+n.dividerMargin+f.height),y=s.append("text").attr("x",n.padding).attr("y",u+2*n.dividerMargin+f.height+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.methods.forEach((function(t){es(y,t,c,n),c=!1}));const m=s.node().getBBox();var b=" ";e.cssClasses.length>0&&(b+=e.cssClasses.join(" "));const _=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",m.width+2*n.padding).attr("height",m.height+n.padding+.5*n.dividerMargin).attr("class",b).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(_-t.getBBox().width)/2)})),e.tooltip&&o.insert("title").text(e.tooltip),d.attr("x2",_),g.attr("x2",_),a.width=_,a.height=m.height+n.padding+.5*n.dividerMargin,a},is=function(t,e,n,r,i){const a=function(t){switch(t){case i.db.relationType.AGGREGATION:return"aggregation";case i.db.relationType.EXTENSION:return"extension";case i.db.relationType.COMPOSITION:return"composition";case i.db.relationType.DEPENDENCY:return"dependency";case i.db.relationType.LOLLIPOP:return"lollipop"}};e.points=e.points.filter((t=>!Number.isNaN(t.y)));const s=e.points,c=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),l=t.append("path").attr("d",c(s)).attr("id","edge"+Xa).attr("class","relation");let h,u,d="";r.arrowMarkerAbsolute&&(d=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,d=d.replace(/\(/g,"\\("),d=d.replace(/\)/g,"\\)")),1==n.relation.lineType&&l.attr("class","relation dashed-line"),10==n.relation.lineType&&l.attr("class","relation dotted-line"),"none"!==n.relation.type1&&l.attr("marker-start","url("+d+"#"+a(n.relation.type1)+"Start)"),"none"!==n.relation.type2&&l.attr("marker-end","url("+d+"#"+a(n.relation.type2)+"End)");const p=e.points.length;let f,g,y,m,b=Gn.calcLabelPosition(e.points);if(h=b.x,u=b.y,p%2!=0&&p>1){let t=Gn.calcCardinalityPosition("none"!==n.relation.type1,e.points,e.points[0]),r=Gn.calcCardinalityPosition("none"!==n.relation.type2,e.points,e.points[p-1]);Nt.debug("cardinality_1_point "+JSON.stringify(t)),Nt.debug("cardinality_2_point "+JSON.stringify(r)),f=t.x,g=t.y,y=r.x,m=r.y}if(void 0!==n.title){const e=t.append("g").attr("class","classLabel"),i=e.append("text").attr("class","label").attr("x",h).attr("y",u).attr("fill","red").attr("text-anchor","middle").text(n.title);window.label=i;const a=i.node().getBBox();e.insert("rect",":first-child").attr("class","box").attr("x",a.x-r.padding/2).attr("y",a.y-r.padding/2).attr("width",a.width+r.padding).attr("height",a.height+r.padding)}if(Nt.info("Rendering relation "+JSON.stringify(n)),void 0!==n.relationTitle1&&"none"!==n.relationTitle1){t.append("g").attr("class","cardinality").append("text").attr("class","type1").attr("x",f).attr("y",g).attr("fill","black").attr("font-size","6").text(n.relationTitle1)}if(void 0!==n.relationTitle2&&"none"!==n.relationTitle2){t.append("g").attr("class","cardinality").append("text").attr("class","type2").attr("x",y).attr("y",m).attr("fill","black").attr("font-size","6").text(n.relationTitle2)}Xa++},as=function(t,e,n,r){Nt.debug("Rendering note ",e,n);const i=e.id,a={id:i,text:e.text,width:0,height:0},s=t.append("g").attr("id",i).attr("class","classGroup");let o=s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);const c=JSON.parse(`"${e.text}"`).split("\n");c.forEach((function(t){Nt.debug(`Adding line: ${t}`),o.append("tspan").text(t).attr("class","title").attr("dy",n.textHeight)}));const l=s.node().getBBox(),h=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",l.width+2*n.padding).attr("height",l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(h-t.getBBox().width)/2)})),a.width=h,a.height=l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin,a};let ss={};const os=function(t){const e=Object.entries(ss).find((e=>e[1].label===t));if(e)return e[0]},cs={draw:function(t,e,n,r){const i=ar().class;ss={},Nt.info("Rendering diagram "+t);const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l=c.select(`[id='${e}']`);var h;(h=l).append("defs").append("marker").attr("id","extensionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),h.append("defs").append("marker").attr("id","extensionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z"),h.append("defs").append("marker").attr("id","compositionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","compositionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z");const u=new ht.k({multigraph:!0});u.setGraph({isMultiGraph:!0}),u.setDefaultEdgeLabel((function(){return{}}));const d=r.db.getClasses(),p=Object.keys(d);for(const o of p){const t=d[o],e=rs(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),Nt.info("Org height: "+e.height)}r.db.getRelations().forEach((function(t){Nt.info("tjoho"+os(t.id1)+os(t.id2)+JSON.stringify(t)),u.setEdge(os(t.id1),os(t.id2),{relation:t},t.title||"DEFAULT")}));r.db.getNotes().forEach((function(t){Nt.debug(`Adding note: ${JSON.stringify(t)}`);const e=as(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),t.class&&t.class in d&&u.setEdge(t.id,os(t.class),{relation:{id1:t.id,id2:t.class,relation:{type1:"none",type2:"none",lineType:10}}},"DEFAULT")})),(0,lt.bK)(u),u.nodes().forEach((function(t){void 0!==t&&void 0!==u.node(t)&&(Nt.debug("Node "+t+": "+JSON.stringify(u.node(t))),c.select("#"+(r.db.lookUpDomId(t)||t)).attr("transform","translate("+(u.node(t).x-u.node(t).width/2)+","+(u.node(t).y-u.node(t).height/2)+" )"))})),u.edges().forEach((function(t){void 0!==t&&void 0!==u.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(u.edge(t))),is(l,u.edge(t),u.edge(t).relation,i,r))}));const f=l.node().getBBox(),g=f.width+40,y=f.height+40;dr(l,y,g,i.useMaxWidth);const m=`${f.x-20} ${f.y-20} ${g} ${y}`;Nt.debug(`viewBox ${m}`),l.attr("viewBox",m)}},ls={extension:(t,e,n)=>{Nt.trace("Making markers for ",n),t.append("defs").append("marker").attr("id",e+"-extensionStart").attr("class","marker extension "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),t.append("defs").append("marker").attr("id",e+"-extensionEnd").attr("class","marker extension "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z")},composition:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-compositionStart").attr("class","marker composition "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-compositionEnd").attr("class","marker composition "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},aggregation:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-aggregationStart").attr("class","marker aggregation "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-aggregationEnd").attr("class","marker aggregation "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},dependency:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-dependencyStart").attr("class","marker dependency "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-dependencyEnd").attr("class","marker dependency "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},lollipop:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-lollipopStart").attr("class","marker lollipop "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("circle").attr("stroke","black").attr("fill","white").attr("cx",6).attr("cy",7).attr("r",6)},point:(t,e)=>{t.append("marker").attr("id",e+"-pointEnd").attr("class","marker "+e).attr("viewBox","0 0 12 20").attr("refX",10).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-pointStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",0).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 5 L 10 10 L 10 0 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},circle:(t,e)=>{t.append("marker").attr("id",e+"-circleEnd").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",11).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-circleStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",-1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},cross:(t,e)=>{t.append("marker").attr("id",e+"-crossEnd").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",12).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-crossStart").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",-1).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0")},barb:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-barbEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",14).attr("markerUnits","strokeWidth").attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z")}},hs=(t,e,n,r)=>{e.forEach((e=>{ls[e](t,n,r)}))};const us=(t,e,n,r)=>{let i=t||"";if("object"==typeof i&&(i=i[0]),Pt(ar().flowchart.htmlLabels)){i=i.replace(/\\n|\n/g,"<br />"),Nt.info("vertexText"+i);let t=function(t){const e=(0,o.Ys)(document.createElementNS("http://www.w3.org/2000/svg","foreignObject")),n=e.append("xhtml:div"),r=t.label,i=t.isNode?"nodeLabel":"edgeLabel";var a,s;return n.html('<span class="'+i+'" '+(t.labelStyle?'style="'+t.labelStyle+'"':"")+">"+r+"</span>"),a=n,(s=t.labelStyle)&&a.attr("style",s),n.style("display","inline-block"),n.style("white-space","nowrap"),n.attr("xmlns","http://www.w3.org/1999/xhtml"),e.node()}({isNode:r,label:Xd(i).replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`)),labelStyle:e.replace("fill:","color:")});return t}{const t=document.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",e.replace("color:","fill:"));let r=[];r="string"==typeof i?i.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(i)?i:[];for(const e of r){const r=document.createElementNS("http://www.w3.org/2000/svg","tspan");r.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),r.setAttribute("dy","1em"),r.setAttribute("x","0"),n?r.setAttribute("class","title-row"):r.setAttribute("class","row"),r.textContent=e.trim(),t.appendChild(r)}return t}},ds=(t,e,n,r)=>{let i;i=n||"node default";const a=t.insert("g").attr("class",i).attr("id",e.domId||e.id),s=a.insert("g").attr("class","label").attr("style",e.labelStyle);let c;c=void 0===e.labelText?"":"string"==typeof e.labelText?e.labelText:e.labelText[0];const l=s.node().appendChild(us(Ft(Xd(c),ar()),e.labelStyle,!1,r));let h=l.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=l.children[0],e=(0,o.Ys)(l);h=t.getBoundingClientRect(),e.attr("width",h.width),e.attr("height",h.height)}const u=e.padding/2;return s.attr("transform","translate("+-h.width/2+", "+-h.height/2+")"),{shapeSvg:a,bbox:h,halfPadding:u,label:s}},ps=(t,e)=>{const n=e.node().getBBox();t.width=n.width,t.height=n.height};function fs(t,e,n,r){return t.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","label-container").attr("transform","translate("+-e/2+","+n/2+")")}let gs={},ys={},ms={};const bs=(t,e)=>(Nt.trace("In isDecendant",e," ",t," = ",ys[e].includes(t)),!!ys[e].includes(t)),_s=(t,e,n,r)=>{Nt.warn("Copying children of ",t,"root",r,"data",e.node(t),r);const i=e.children(t)||[];t!==r&&i.push(t),Nt.warn("Copying (nodes) clusterId",t,"nodes",i),i.forEach((i=>{if(e.children(i).length>0)_s(i,e,n,r);else{const a=e.node(i);Nt.info("cp ",i," to ",r," with parent ",t),n.setNode(i,a),r!==e.parent(i)&&(Nt.warn("Setting parent",i,e.parent(i)),n.setParent(i,e.parent(i))),t!==r&&i!==t?(Nt.debug("Setting parent",i,t),n.setParent(i,t)):(Nt.info("In copy ",t,"root",r,"data",e.node(t),r),Nt.debug("Not Setting parent for node=",i,"cluster!==rootId",t!==r,"node!==clusterId",i!==t));const s=e.edges(i);Nt.debug("Copying Edges",s),s.forEach((i=>{Nt.info("Edge",i);const a=e.edge(i.v,i.w,i.name);Nt.info("Edge data",a,r);try{((t,e)=>(Nt.info("Decendants of ",e," is ",ys[e]),Nt.info("Edge is ",t),t.v!==e&&t.w!==e&&(ys[e]?ys[e].includes(t.v)||bs(t.v,e)||bs(t.w,e)||ys[e].includes(t.w):(Nt.debug("Tilt, ",e,",not in decendants"),!1))))(i,r)?(Nt.info("Copying as ",i.v,i.w,a,i.name),n.setEdge(i.v,i.w,a,i.name),Nt.info("newGraph edges ",n.edges(),n.edge(n.edges()[0]))):Nt.info("Skipping copy of edge ",i.v,"--\x3e",i.w," rootId: ",r," clusterId:",t)}catch(s){Nt.error(s)}}))}Nt.debug("Removing node",i),e.removeNode(i)}))},xs=(t,e)=>{const n=e.children(t);let r=[...n];for(const i of n)ms[i]=t,r=[...r,...xs(i,e)];return r},vs=(t,e)=>{Nt.trace("Searching",t);const n=e.children(t);if(Nt.trace("Searching children of id ",t,n),n.length<1)return Nt.trace("This is a valid node",t),t;for(const r of n){const n=vs(r,e);if(n)return Nt.trace("Found replacement for",t," => ",n),n}},ks=t=>gs[t]&&gs[t].externalConnections&&gs[t]?gs[t].id:t,ws=(t,e)=>{if(Nt.warn("extractor - ",e,ut.c(t),t.children("D")),e>10)return void Nt.error("Bailing out");let n=t.nodes(),r=!1;for(const i of n){const e=t.children(i);r=r||e.length>0}if(r){Nt.debug("Nodes = ",n,e);for(const r of n)if(Nt.debug("Extracting node",r,gs,gs[r]&&!gs[r].externalConnections,!t.parent(r),t.node(r),t.children("D")," Depth ",e),gs[r])if(!gs[r].externalConnections&&t.children(r)&&t.children(r).length>0){Nt.warn("Cluster without external connections, without a parent and with children",r,e);let n="TB"===t.graph().rankdir?"LR":"TB";gs[r]&&gs[r].clusterData&&gs[r].clusterData.dir&&(n=gs[r].clusterData.dir,Nt.warn("Fixing dir",gs[r].clusterData.dir,n));const i=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:n,nodesep:50,ranksep:50,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));Nt.warn("Old graph before copy",ut.c(t)),_s(r,t,i,r),t.setNode(r,{clusterNode:!0,id:r,clusterData:gs[r].clusterData,labelText:gs[r].labelText,graph:i}),Nt.warn("New graph after copy node: (",r,")",ut.c(i)),Nt.debug("Old graph after copy",ut.c(t))}else Nt.warn("Cluster ** ",r," **not meeting the criteria !externalConnections:",!gs[r].externalConnections," no parent: ",!t.parent(r)," children ",t.children(r)&&t.children(r).length>0,t.children("D"),e),Nt.debug(gs);else Nt.debug("Not a cluster",r,e);n=t.nodes(),Nt.warn("New list of nodes",n);for(const r of n){const n=t.node(r);Nt.warn(" Now next level",r,n),n.clusterNode&&ws(n.graph,e+1)}}else Nt.debug("Done, no node has children",t.nodes())},Es=(t,e)=>{if(0===e.length)return[];let n=Object.assign(e);return e.forEach((e=>{const r=t.children(e),i=Es(t,r);n=[...n,...i]})),n};function Cs(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}function Ts(t,e,n,r){var i,a,s,o,c,l,h,u,d,p,f,g,y;if(i=e.y-t.y,s=t.x-e.x,c=e.x*t.y-t.x*e.y,d=i*n.x+s*n.y+c,p=i*r.x+s*r.y+c,!(0!==d&&0!==p&&Ss(d,p)||(a=r.y-n.y,o=n.x-r.x,l=r.x*n.y-n.x*r.y,h=a*t.x+o*t.y+l,u=a*e.x+o*e.y+l,0!==h&&0!==u&&Ss(h,u)||0==(f=i*o-a*s))))return g=Math.abs(f/2),{x:(y=s*l-o*c)<0?(y-g)/f:(y+g)/f,y:(y=a*c-i*l)<0?(y-g)/f:(y+g)/f}}function Ss(t,e){return t*e>0}const As=(t,e)=>{var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}},Ls={node:function(t,e){return t.intersect(e)},circle:function(t,e,n){return Cs(t,e,e,n)},ellipse:Cs,polygon:function(t,e,n){var r=t.x,i=t.y,a=[],s=Number.POSITIVE_INFINITY,o=Number.POSITIVE_INFINITY;"function"==typeof e.forEach?e.forEach((function(t){s=Math.min(s,t.x),o=Math.min(o,t.y)})):(s=Math.min(s,e.x),o=Math.min(o,e.y));for(var c=r-t.width/2-s,l=i-t.height/2-o,h=0;h<e.length;h++){var u=e[h],d=e[h<e.length-1?h+1:0],p=Ts(t,n,{x:c+u.x,y:l+u.y},{x:c+d.x,y:l+d.y});p&&a.push(p)}return a.length?(a.length>1&&a.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),a[0]):t},rect:As},Bs=(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.info("Classes = ",e.classes);const a=n.insert("rect",":first-child");return a.attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},Ns=(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding+(r.height+e.padding),a=[{x:i/2,y:0},{x:i,y:-i/2},{x:i/2,y:-i},{x:0,y:-i/2}];Nt.info("Question main (Circle)");const s=fs(n,i,i,a);return s.attr("style",e.style),ps(e,s),e.intersect=function(t){return Nt.warn("Intersect called"),Ls.polygon(e,a,t)},n};function Ds(t,e,n,r){const i=[],a=t=>{i.push(t,0)},s=t=>{i.push(0,t)};e.includes("t")?(Nt.debug("add top border"),a(n)):s(n),e.includes("r")?(Nt.debug("add right border"),a(r)):s(r),e.includes("b")?(Nt.debug("add bottom border"),a(n)):s(n),e.includes("l")?(Nt.debug("add left border"),a(r)):s(r),t.attr("stroke-dasharray",i.join(" "))}const Os=(t,e,n)=>{const r=t.insert("g").attr("class","node default").attr("id",e.domId||e.id);let i=70,a=10;"LR"===n&&(i=10,a=70);const s=r.append("rect").attr("x",-1*i/2).attr("y",-1*a/2).attr("width",i).attr("height",a).attr("class","fork-join");return ps(e,s),e.height=e.height+e.padding/2,e.width=e.width+e.padding/2,e.intersect=function(t){return Ls.rect(e,t)},r},Ms={rhombus:Ns,question:Ns,rect:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.trace("Classes = ",e.classes);const a=n.insert("rect",":first-child"),s=r.width+e.padding,o=r.height+e.padding;if(a.attr("class","basic label-container").attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",s).attr("height",o),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(a,e.props.borders,s,o),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},labelRect:(t,e)=>{const{shapeSvg:n}=ds(t,e,"label",!0);Nt.trace("Classes = ",e.classes);const r=n.insert("rect",":first-child");if(r.attr("width",0).attr("height",0),n.attr("class","label edgeLabel"),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(r,e.props.borders,0,0),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,r),e.intersect=function(t){return Ls.rect(e,t)},n},rectWithTitle:(t,e)=>{let n;n=e.classes?"node "+e.classes:"node default";const r=t.insert("g").attr("class",n).attr("id",e.domId||e.id),i=r.insert("rect",":first-child"),a=r.insert("line"),s=r.insert("g").attr("class","label"),c=e.labelText.flat?e.labelText.flat():e.labelText;let l="";l="object"==typeof c?c[0]:c,Nt.info("Label text abc79",l,c,"object"==typeof c);const h=s.node().appendChild(us(l,e.labelStyle,!0,!0));let u={width:0,height:0};if(Pt(ar().flowchart.htmlLabels)){const t=h.children[0],e=(0,o.Ys)(h);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}Nt.info("Text 2",c);const d=c.slice(1,c.length);let p=h.getBBox();const f=s.node().appendChild(us(d.join?d.join("<br/>"):d,e.labelStyle,!0,!0));if(Pt(ar().flowchart.htmlLabels)){const t=f.children[0],e=(0,o.Ys)(f);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}const g=e.padding/2;return(0,o.Ys)(f).attr("transform","translate( "+(u.width>p.width?0:(p.width-u.width)/2)+", "+(p.height+g+5)+")"),(0,o.Ys)(h).attr("transform","translate( "+(u.width<p.width?0:-(p.width-u.width)/2)+", 0)"),u=s.node().getBBox(),s.attr("transform","translate("+-u.width/2+", "+(-u.height/2-g+3)+")"),i.attr("class","outer title-state").attr("x",-u.width/2-g).attr("y",-u.height/2-g).attr("width",u.width+e.padding).attr("height",u.height+e.padding),a.attr("class","divider").attr("x1",-u.width/2-g).attr("x2",u.width/2+g).attr("y1",-u.height/2-g+p.height+g).attr("y2",-u.height/2-g+p.height+g),ps(e,i),e.intersect=function(t){return Ls.rect(e,t)},r},choice:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=[{x:0,y:14},{x:14,y:0},{x:0,y:-14},{x:-14,y:0}];return n.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","state-start").attr("r",7).attr("width",28).attr("height",28),e.width=28,e.height=28,e.intersect=function(t){return Ls.circle(e,14,t)},n},circle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("circle",":first-child");return a.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("Circle main"),ps(e,a),e.intersect=function(t){return Nt.info("Circle intersect",e,r.width/2+i,t),Ls.circle(e,r.width/2+i,t)},n},doublecircle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("g",":first-child"),s=a.insert("circle"),o=a.insert("circle");return s.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i+5).attr("width",r.width+e.padding+10).attr("height",r.height+e.padding+10),o.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("DoubleCircle main"),ps(e,s),e.intersect=function(t){return Nt.info("DoubleCircle intersect",e,r.width/2+i+5,t),Ls.circle(e,r.width/2+i+5,t)},n},stadium:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=r.width+i/4+e.padding,s=n.insert("rect",":first-child").attr("style",e.style).attr("rx",i/2).attr("ry",i/2).attr("x",-a/2).attr("y",-i/2).attr("width",a).attr("height",i);return ps(e,s),e.intersect=function(t){return Ls.rect(e,t)},n},hexagon:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=i/4,s=r.width+2*a+e.padding,o=[{x:a,y:0},{x:s-a,y:0},{x:s,y:-i/2},{x:s-a,y:-i},{x:a,y:-i},{x:0,y:-i/2}],c=fs(n,s,i,o);return c.attr("style",e.style),ps(e,c),e.intersect=function(t){return Ls.polygon(e,o,t)},n},rect_left_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-a/2,y:0},{x:i,y:0},{x:i,y:-a},{x:-a/2,y:-a},{x:0,y:-a/2}];return fs(n,i,a,s).attr("style",e.style),e.width=i+a,e.height=a,e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_right:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_left:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:2*a/6,y:0},{x:i+a/6,y:0},{x:i-2*a/6,y:-a},{x:-a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i+2*a/6,y:0},{x:i-a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},inv_trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:-2*a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},rect_right_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i+a/2,y:0},{x:i,y:-a/2},{x:i+a/2,y:-a},{x:0,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},cylinder:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=i/2,s=a/(2.5+i/50),o=r.height+s+e.padding,c="M 0,"+s+" a "+a+","+s+" 0,0,0 "+i+" 0 a "+a+","+s+" 0,0,0 "+-i+" 0 l 0,"+o+" a "+a+","+s+" 0,0,0 "+i+" 0 l 0,"+-o,l=n.attr("label-offset-y",s).insert("path",":first-child").attr("style",e.style).attr("d",c).attr("transform","translate("+-i/2+","+-(o/2+s)+")");return ps(e,l),e.intersect=function(t){const n=Ls.rect(e,t),r=n.x-e.x;if(0!=a&&(Math.abs(r)<e.width/2||Math.abs(r)==e.width/2&&Math.abs(n.y-e.y)>e.height/2-s)){let i=s*s*(1-r*r/(a*a));0!=i&&(i=Math.sqrt(i)),i=s-i,t.y-e.y>0&&(i=-i),n.y+=i}return n},n},start:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child");return r.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),ps(e,r),e.intersect=function(t){return Ls.circle(e,7,t)},n},end:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child"),i=n.insert("circle",":first-child");return i.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),r.attr("class","state-end").attr("r",5).attr("width",10).attr("height",10),ps(e,i),e.intersect=function(t){return Ls.circle(e,7,t)},n},note:Bs,subroutine:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i,y:0},{x:i,y:-a},{x:0,y:-a},{x:0,y:0},{x:-8,y:0},{x:i+8,y:0},{x:i+8,y:-a},{x:-8,y:-a},{x:-8,y:0}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},fork:Os,join:Os,class_box:(t,e)=>{const n=e.padding/2;let r;r=e.classes?"node "+e.classes:"node default";const i=t.insert("g").attr("class",r).attr("id",e.domId||e.id),a=i.insert("rect",":first-child"),s=i.insert("line"),c=i.insert("line");let l=0,h=4;const u=i.insert("g").attr("class","label");let d=0;const p=e.classData.annotations&&e.classData.annotations[0],f=e.classData.annotations[0]?"\xab"+e.classData.annotations[0]+"\xbb":"",g=u.node().appendChild(us(f,e.labelStyle,!0,!0));let y=g.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=g.children[0],e=(0,o.Ys)(g);y=t.getBoundingClientRect(),e.attr("width",y.width),e.attr("height",y.height)}e.classData.annotations[0]&&(h+=y.height+4,l+=y.width);let m=e.classData.id;void 0!==e.classData.type&&""!==e.classData.type&&(ar().flowchart.htmlLabels?m+="&lt;"+e.classData.type+"&gt;":m+="<"+e.classData.type+">");const b=u.node().appendChild(us(m,e.labelStyle,!0,!0));(0,o.Ys)(b).attr("class","classTitle");let _=b.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=b.children[0],e=(0,o.Ys)(b);_=t.getBoundingClientRect(),e.attr("width",_.width),e.attr("height",_.height)}h+=_.height+4,_.width>l&&(l=_.width);const x=[];e.classData.members.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,x.push(i)})),h+=8;const v=[];if(e.classData.methods.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,v.push(i)})),h+=8,p){let t=(l-y.width)/2;(0,o.Ys)(g).attr("transform","translate( "+(-1*l/2+t)+", "+-1*h/2+")"),d=y.height+4}let k=(l-_.width)/2;return(0,o.Ys)(b).attr("transform","translate( "+(-1*l/2+k)+", "+(-1*h/2+d)+")"),d+=_.height+4,s.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,x.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d+4)+")"),d+=_.height+4})),d+=8,c.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,v.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d)+")"),d+=_.height+4})),a.attr("class","outer title-state").attr("x",-l/2-n).attr("y",-h/2-n).attr("width",l+e.padding).attr("height",h+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},i}};let Is={};const Fs=(t,e,n)=>{let r,i;if(e.link){let a;"sandbox"===ar().securityLevel?a="_top":e.linkTarget&&(a=e.linkTarget||"_blank"),r=t.insert("svg:a").attr("xlink:href",e.link).attr("target",a),i=Ms[e.shape](r,e,n)}else i=Ms[e.shape](t,e,n),r=i;return e.tooltip&&i.attr("title",e.tooltip),e.class&&i.attr("class","node default "+e.class),Is[e.id]=r,e.haveCallback&&Is[e.id].attr("class",Is[e.id].attr("class")+" clickable"),r},$s=t=>{const e=Is[t.id];Nt.trace("Transforming node",t.diff,t,"translate("+(t.x-t.width/2-5)+", "+t.width/2+")");const n=t.diff||0;return t.clusterNode?e.attr("transform","translate("+(t.x+n-t.width/2)+", "+(t.y-t.height/2-8)+")"):e.attr("transform","translate("+t.x+", "+t.y+")"),n},Rs={rect:(t,e)=>{Nt.trace("Creating subgraph rect for ",e.id,e);const n=t.insert("g").attr("class","cluster"+(e.class?" "+e.class:"")).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let s=a.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=a.children[0],e=(0,o.Ys)(a);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}const c=0*e.padding,l=c/2,h=e.width<=s.width+c?s.width+c:e.width;e.width<=s.width+c?e.diff=(s.width-e.width)/2-e.padding/2:e.diff=-e.padding/2,Nt.trace("Data ",e,JSON.stringify(e)),r.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-h/2).attr("y",e.y-e.height/2-l).attr("width",h).attr("height",e.height+c),i.attr("transform","translate("+(e.x-s.width/2)+", "+(e.y-e.height/2)+")");const u=r.node().getBBox();return e.width=u.width,e.height=u.height,e.intersect=function(t){return As(e,t)},n},roundedWithTitle:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=n.append("rect"),s=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let c=s.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=s.children[0],e=(0,o.Ys)(s);c=t.getBoundingClientRect(),e.attr("width",c.width),e.attr("height",c.height)}c=s.getBBox();const l=0*e.padding,h=l/2,u=e.width<=c.width+e.padding?c.width+e.padding:e.width;e.width<=c.width+e.padding?e.diff=(c.width+0*e.padding-e.width)/2:e.diff=-e.padding/2,r.attr("class","outer").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h).attr("width",u+l).attr("height",e.height+l),a.attr("class","inner").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h+c.height-1).attr("width",u+l).attr("height",e.height+l-c.height-3),i.attr("transform","translate("+(e.x-c.width/2)+", "+(e.y-e.height/2-e.padding/3+(Pt(ar().flowchart.htmlLabels)?5:3))+")");const d=r.node().getBBox();return e.height=d.height,e.intersect=function(t){return As(e,t)},n},noteGroup:(t,e)=>{const n=t.insert("g").attr("class","note-cluster").attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2-a).attr("width",e.width+i).attr("height",e.height+i).attr("fill","none");const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.intersect=function(t){return As(e,t)},n},divider:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("class","divider").attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2).attr("width",e.width+i).attr("height",e.height+i);const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.diff=-e.padding/2,e.intersect=function(t){return As(e,t)},n}};let Zs={};let Ps={},js={};const Ys=(t,e)=>{const n=us(e.label,e.labelStyle),r=t.insert("g").attr("class","edgeLabel"),i=r.insert("g").attr("class","label");i.node().appendChild(n);let a,s=n.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=n.children[0],e=(0,o.Ys)(n);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}if(i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),Ps[e.id]=r,e.width=s.width,e.height=s.height,e.startLabelLeft){const n=us(e.startLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startLeft=r,zs(a,e.startLabelLeft)}if(e.startLabelRight){const n=us(e.startLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=r.node().appendChild(n),i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startRight=r,zs(a,e.startLabelRight)}if(e.endLabelLeft){const n=us(e.endLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endLeft=r,zs(a,e.endLabelLeft)}if(e.endLabelRight){const n=us(e.endLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endRight=r,zs(a,e.endLabelRight)}return n};function zs(t,e){ar().flowchart.htmlLabels&&t&&(t.style.width=9*e.length+"px",t.style.height="12px")}const Us=(t,e)=>{Nt.warn("abc88 cutPathAtIntersect",t,e);let n=[],r=t[0],i=!1;return t.forEach((t=>{if(Nt.info("abc88 checking point",t,e),((t,e)=>{const n=t.x,r=t.y,i=Math.abs(e.x-n),a=Math.abs(e.y-r),s=t.width/2,o=t.height/2;return i>=s||a>=o})(e,t)||i)Nt.warn("abc88 outside",t,r),r=t,i||n.push(t);else{const a=((t,e,n)=>{Nt.warn(`intersection calc abc89:\n  outsidePoint: ${JSON.stringify(e)}\n  insidePoint : ${JSON.stringify(n)}\n  node        : x:${t.x} y:${t.y} w:${t.width} h:${t.height}`);const r=t.x,i=t.y,a=Math.abs(r-n.x),s=t.width/2;let o=n.x<e.x?s-a:s+a;const c=t.height/2,l=Math.abs(e.y-n.y),h=Math.abs(e.x-n.x);if(Math.abs(i-e.y)*s>Math.abs(r-e.x)*c){let t=n.y<e.y?e.y-c-i:i-c-e.y;o=h*t/l;const r={x:n.x<e.x?n.x+o:n.x-h+o,y:n.y<e.y?n.y+l-t:n.y-l+t};return 0===o&&(r.x=e.x,r.y=e.y),0===h&&(r.x=e.x),0===l&&(r.y=e.y),Nt.warn(`abc89 topp/bott calc, Q ${l}, q ${t}, R ${h}, r ${o}`,r),r}{o=n.x<e.x?e.x-s-r:r-s-e.x;let t=l*o/h,i=n.x<e.x?n.x+h-o:n.x-h+o,a=n.y<e.y?n.y+t:n.y-t;return Nt.warn(`sides calc abc89, Q ${l}, q ${t}, R ${h}, r ${o}`,{_x:i,_y:a}),0===o&&(i=e.x,a=e.y),0===h&&(i=e.x),0===l&&(a=e.y),{x:i,y:a}}})(e,r,t);Nt.warn("abc88 inside",t,r,a),Nt.warn("abc88 intersection",a);let s=!1;n.forEach((t=>{s=s||t.x===a.x&&t.y===a.y})),n.some((t=>t.x===a.x&&t.y===a.y))?Nt.warn("abc88 no intersect",a,n):n.push(a),i=!0}})),Nt.warn("abc88 returning points",n),n},Ws=(t,e,n,r)=>{Nt.info("Graph in recursive render: XXX",ut.c(e),r);const i=e.graph().rankdir;Nt.trace("Dir in recursive render - dir:",i);const a=t.insert("g").attr("class","root");e.nodes()?Nt.info("Recursive render XXX",e.nodes()):Nt.info("No nodes found for",e),e.edges().length>0&&Nt.trace("Recursive edges",e.edge(e.edges()[0]));const s=a.insert("g").attr("class","clusters"),c=a.insert("g").attr("class","edgePaths"),l=a.insert("g").attr("class","edgeLabels"),h=a.insert("g").attr("class","nodes");e.nodes().forEach((function(t){const a=e.node(t);if(void 0!==r){const n=JSON.parse(JSON.stringify(r.clusterData));Nt.info("Setting data for cluster XXX (",t,") ",n,r),e.setNode(r.id,n),e.parent(t)||(Nt.trace("Setting parent",t,r.id),e.setParent(t,r.id,n))}if(Nt.info("(Insert) Node XXX"+t+": "+JSON.stringify(e.node(t))),a&&a.clusterNode){Nt.info("Cluster identified",t,a.width,e.node(t));const r=Ws(h,a.graph,n,e.node(t)),i=r.elem;ps(a,i),a.diff=r.diff||0,Nt.info("Node bounds (abc123)",t,a,a.width,a.x,a.y),((t,e)=>{Is[e.id]=t})(i,a),Nt.warn("Recursive render complete ",i,a)}else e.children(t).length>0?(Nt.info("Cluster - the non recursive path XXX",t,a.id,a,e),Nt.info(vs(a.id,e)),gs[a.id]={id:vs(a.id,e),node:a}):(Nt.info("Node - the non recursive path",t,a.id,a),Fs(h,e.node(t),i))})),e.edges().forEach((function(t){const n=e.edge(t.v,t.w,t.name);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t)),Nt.info("Edge "+t.v+" -> "+t.w+": ",t," ",JSON.stringify(e.edge(t))),Nt.info("Fix",gs,"ids:",t.v,t.w,"Translateing: ",gs[t.v],gs[t.w]),Ys(l,n)})),e.edges().forEach((function(t){Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t))})),Nt.info("#############################################"),Nt.info("###                Layout                 ###"),Nt.info("#############################################"),Nt.info(e),(0,lt.bK)(e),Nt.info("Graph after layout:",ut.c(e));let u=0;return(t=>Es(t,t.children()))(e).forEach((function(t){const n=e.node(t);Nt.info("Position "+t+": "+JSON.stringify(e.node(t))),Nt.info("Position "+t+": ("+n.x,","+n.y,") width: ",n.width," height: ",n.height),n&&n.clusterNode?$s(n):e.children(t).length>0?(((t,e)=>{Nt.trace("Inserting cluster");const n=e.shape||"rect";Zs[e.id]=Rs[n](t,e)})(s,n),gs[n.id].node=n):$s(n)})),e.edges().forEach((function(t){const r=e.edge(t);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(r),r);const i=function(t,e,n,r,i,a){let s=n.points,c=!1;const l=a.node(e.v);var h=a.node(e.w);Nt.info("abc88 InsertEdge: ",n),h.intersect&&l.intersect&&(s=s.slice(1,n.points.length-1),s.unshift(l.intersect(s[0])),Nt.info("Last point",s[s.length-1],h,h.intersect(s[s.length-1])),s.push(h.intersect(s[s.length-1]))),n.toCluster&&(Nt.info("to cluster abc88",r[n.toCluster]),s=Us(n.points,r[n.toCluster].node),c=!0),n.fromCluster&&(Nt.info("from cluster abc88",r[n.fromCluster]),s=Us(s.reverse(),r[n.fromCluster].node).reverse(),c=!0);const u=s.filter((t=>!Number.isNaN(t.y)));let d;d=("graph"===i||"flowchart"===i)&&n.curve||o.$0Z;const p=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(d);let f;switch(n.thickness){case"normal":f="edge-thickness-normal";break;case"thick":f="edge-thickness-thick";break;default:f=""}switch(n.pattern){case"solid":f+=" edge-pattern-solid";break;case"dotted":f+=" edge-pattern-dotted";break;case"dashed":f+=" edge-pattern-dashed"}const g=t.append("path").attr("d",p(u)).attr("id",n.id).attr("class"," "+f+(n.classes?" "+n.classes:"")).attr("style",n.style);let y="";switch((ar().flowchart.arrowMarkerAbsolute||ar().state.arrowMarkerAbsolute)&&(y=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,y=y.replace(/\(/g,"\\("),y=y.replace(/\)/g,"\\)")),Nt.info("arrowTypeStart",n.arrowTypeStart),Nt.info("arrowTypeEnd",n.arrowTypeEnd),n.arrowTypeStart){case"arrow_cross":g.attr("marker-start","url("+y+"#"+i+"-crossStart)");break;case"arrow_point":g.attr("marker-start","url("+y+"#"+i+"-pointStart)");break;case"arrow_barb":g.attr("marker-start","url("+y+"#"+i+"-barbStart)");break;case"arrow_circle":g.attr("marker-start","url("+y+"#"+i+"-circleStart)");break;case"aggregation":g.attr("marker-start","url("+y+"#"+i+"-aggregationStart)");break;case"extension":g.attr("marker-start","url("+y+"#"+i+"-extensionStart)");break;case"composition":g.attr("marker-start","url("+y+"#"+i+"-compositionStart)");break;case"dependency":g.attr("marker-start","url("+y+"#"+i+"-dependencyStart)");break;case"lollipop":g.attr("marker-start","url("+y+"#"+i+"-lollipopStart)")}switch(n.arrowTypeEnd){case"arrow_cross":g.attr("marker-end","url("+y+"#"+i+"-crossEnd)");break;case"arrow_point":g.attr("marker-end","url("+y+"#"+i+"-pointEnd)");break;case"arrow_barb":g.attr("marker-end","url("+y+"#"+i+"-barbEnd)");break;case"arrow_circle":g.attr("marker-end","url("+y+"#"+i+"-circleEnd)");break;case"aggregation":g.attr("marker-end","url("+y+"#"+i+"-aggregationEnd)");break;case"extension":g.attr("marker-end","url("+y+"#"+i+"-extensionEnd)");break;case"composition":g.attr("marker-end","url("+y+"#"+i+"-compositionEnd)");break;case"dependency":g.attr("marker-end","url("+y+"#"+i+"-dependencyEnd)");break;case"lollipop":g.attr("marker-end","url("+y+"#"+i+"-lollipopEnd)")}let m={};return c&&(m.updatedPath=s),m.originalPath=n.points,m}(c,t,r,gs,n,e);((t,e)=>{Nt.info("Moving label abc78 ",t.id,t.label,Ps[t.id]);let n=e.updatedPath?e.updatedPath:e.originalPath;if(t.label){const r=Ps[t.id];let i=t.x,a=t.y;if(n){const r=Gn.calcLabelPosition(n);Nt.info("Moving label "+t.label+" from (",i,",",a,") to (",r.x,",",r.y,") abc78"),e.updatedPath&&(i=r.x,a=r.y)}r.attr("transform","translate("+i+", "+a+")")}if(t.startLabelLeft){const e=js[t.id].startLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.startLabelRight){const e=js[t.id].startRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelLeft){const e=js[t.id].endLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelRight){const e=js[t.id].endRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}})(r,i)})),e.nodes().forEach((function(t){const n=e.node(t);Nt.info(t,n.type,n.diff),"group"===n.type&&(u=n.diff)})),{elem:a,diff:u}},qs=(t,e,n,r,i)=>{hs(t,n,r,i),Is={},Ps={},js={},Zs={},ys={},ms={},gs={},Nt.warn("Graph at first:",ut.c(e)),((t,e)=>{!t||e>10?Nt.debug("Opting out, no graph "):(Nt.debug("Opting in, graph "),t.nodes().forEach((function(e){t.children(e).length>0&&(Nt.warn("Cluster identified",e," Replacement id in edges: ",vs(e,t)),ys[e]=xs(e,t),gs[e]={id:vs(e,t),clusterData:t.node(e)})})),t.nodes().forEach((function(e){const n=t.children(e),r=t.edges();n.length>0?(Nt.debug("Cluster identified",e,ys),r.forEach((t=>{t.v!==e&&t.w!==e&&bs(t.v,e)^bs(t.w,e)&&(Nt.warn("Edge: ",t," leaves cluster ",e),Nt.warn("Decendants of XXX ",e,": ",ys[e]),gs[e].externalConnections=!0)}))):Nt.debug("Not a cluster ",e,ys)})),t.edges().forEach((function(e){const n=t.edge(e);Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(e)),Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(t.edge(e)));let r=e.v,i=e.w;if(Nt.warn("Fix XXX",gs,"ids:",e.v,e.w,"Translating: ",gs[e.v]," --- ",gs[e.w]),gs[e.v]&&gs[e.w]&&gs[e.v]===gs[e.w]){Nt.warn("Fixing and trixing link to self - removing XXX",e.v,e.w,e.name),Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name);const a=e.w+"---"+e.v;t.setNode(a,{domId:a,id:a,labelStyle:"",labelText:n.label,padding:0,shape:"labelRect",style:""});const s=JSON.parse(JSON.stringify(n)),o=JSON.parse(JSON.stringify(n));s.label="",s.arrowTypeEnd="none",o.label="",s.fromCluster=e.v,o.toCluster=e.v,t.setEdge(r,a,s,e.name+"-cyclic-special"),t.setEdge(a,i,o,e.name+"-cyclic-special")}else(gs[e.v]||gs[e.w])&&(Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name),r!==e.v&&(n.fromCluster=e.v),i!==e.w&&(n.toCluster=e.w),Nt.warn("Fix Replacing with XXX",r,i,e.name),t.setEdge(r,i,n,e.name))})),Nt.warn("Adjusted Graph",ut.c(t)),ws(t,0),Nt.trace(gs))})(e),Nt.warn("Graph after:",ut.c(e)),Ws(t,e,r)},Hs=t=>Yt.sanitizeText(t,ar());let Vs={dividerMargin:10,padding:5,textHeight:10};function Gs(t){let e;switch(t){case 0:e="aggregation";break;case 1:e="extension";break;case 2:e="composition";break;case 3:e="dependency";break;case 4:e="lollipop";break;default:e="none"}return e}const Xs={setConf:function(t){Object.keys(t).forEach((function(e){Vs[e]=t[e]}))},draw:function(t,e,n,r){Nt.info("Drawing class - ",e);const i=ar().flowchart,a=ar().securityLevel;Nt.info("config:",i);const s=i.nodeSpacing||50,c=i.rankSpacing||50,l=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:r.db.getDirection(),nodesep:s,ranksep:c,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}})),h=r.db.getClasses(),u=r.db.getRelations(),d=r.db.getNotes();let p;Nt.info(u),function(t,e,n,r){const i=Object.keys(t);Nt.info("keys:",i),Nt.info(t),i.forEach((function(n){const i=t[n];let a="";i.cssClasses.length>0&&(a=a+" "+i.cssClasses.join(" "));const s={labelStyle:""};let o=void 0!==i.text?i.text:i.id,c="";i.type,c="class_box",e.setNode(i.id,{labelStyle:s.labelStyle,shape:c,labelText:Hs(o),classData:i,rx:0,ry:0,class:a,style:s.style,id:i.id,domId:i.domId,tooltip:r.db.getTooltip(i.id)||"",haveCallback:i.haveCallback,link:i.link,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s.labelStyle,shape:c,labelText:o,rx:0,ry:0,class:a,style:s.style,id:i.id,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding})}))}(h,l,0,r),function(t,e){const n=ar().flowchart;let r=0;t.forEach((function(i){r++;const a={classes:"relation"};a.pattern=1==i.relation.lineType?"dashed":"solid",a.id="id"+r,"arrow_open"===i.type?a.arrowhead="none":a.arrowhead="normal",Nt.info(a,i),a.startLabelRight="none"===i.relationTitle1?"":i.relationTitle1,a.endLabelLeft="none"===i.relationTitle2?"":i.relationTitle2,a.arrowTypeStart=Gs(i.relation.type1),a.arrowTypeEnd=Gs(i.relation.type2);let s="",c="";if(void 0!==i.style){const t=Mn(i.style);s=t.style,c=t.labelStyle}else s="fill:none";a.style=s,a.labelStyle=c,void 0!==i.interpolate?a.curve=Dn(i.interpolate,o.c_6):void 0!==t.defaultInterpolate?a.curve=Dn(t.defaultInterpolate,o.c_6):a.curve=Dn(n.curve,o.c_6),i.text=i.title,void 0===i.text?void 0!==i.style&&(a.arrowheadStyle="fill: #333"):(a.arrowheadStyle="fill: #333",a.labelpos="c",ar().flowchart.htmlLabels?(a.labelType="html",a.label='<span class="edgeLabel">'+i.text+"</span>"):(a.labelType="text",a.label=i.text.replace(Yt.lineBreakRegex,"\n"),void 0===i.style&&(a.style=a.style||"stroke: #333; stroke-width: 1.5px;fill:none"),a.labelStyle=a.labelStyle.replace("color:","fill:"))),e.setEdge(i.id1,i.id2,a,r)}))}(u,l),function(t,e,n,r){Nt.info(t),t.forEach((function(t,i){const a=t,s="",c="";let l=a.text,h="note";if(e.setNode(a.id,{labelStyle:s,shape:h,labelText:Hs(l),noteData:a,rx:0,ry:0,class:"",style:c,id:a.id,domId:a.id,tooltip:"",type:"note",padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s,shape:h,labelText:l,rx:0,ry:0,style:c,id:a.id,type:"note",padding:ar().flowchart.padding}),!a.class||!(a.class in r))return;const u=n+i,d={classes:"relation",pattern:"dotted"};d.id=`edgeNote${u}`,d.arrowhead="none",Nt.info(`Note edge: ${JSON.stringify(d)}, ${JSON.stringify(a)}`),d.startLabelRight="",d.endLabelLeft="",d.arrowTypeStart="none",d.arrowTypeEnd="none",d.style="fill:none",d.labelStyle="",d.curve=Dn(Vs.curve,o.c_6),e.setEdge(a.id,a.class,d,u)}))}(d,l,u.length+1,h),"sandbox"===a&&(p=(0,o.Ys)("#i"+e));const f="sandbox"===a?(0,o.Ys)(p.nodes()[0].contentDocument.body):(0,o.Ys)("body"),g=f.select(`[id="${e}"]`),y=f.select("#"+e+" g");if(qs(y,l,["aggregation","extension","composition","dependency","lollipop"],"classDiagram",e),Gn.insertTitle(g,"classTitleText",i.titleTopMargin,r.db.getDiagramTitle()),pr(l,g,i.diagramPadding,i.useMaxWidth),!i.htmlLabels){const t="sandbox"===a?p.nodes()[0].contentDocument:document,n=t.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of n){const n=e.getBBox(),r=t.createElementNS("http://www.w3.org/2000/svg","rect");r.setAttribute("rx",0),r.setAttribute("ry",0),r.setAttribute("width",n.width),r.setAttribute("height",n.height),e.insertBefore(r,e.firstChild)}}}};var Ks=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,23,25,27,29,30,31,51],a=[1,17],s=[1,18],o=[1,19],c=[1,20],l=[1,21],h=[1,22],u=[1,25],d=[1,30],p=[1,31],f=[1,32],g=[1,33],y=[6,9,11,15,20,23,25,27,29,30,31,44,45,46,47,51],m=[1,45],b=[30,31,48,49],_=[4,6,9,11,23,25,27,29,30,31,51],x=[44,45,46,47],v=[22,37],k=[1,65],w=[1,64],E=[22,37,39,41],C={trace:function(){},yy:{},symbols_:{error:2,start:3,ER_DIAGRAM:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,entityName:17,relSpec:18,role:19,BLOCK_START:20,attributes:21,BLOCK_STOP:22,title:23,title_value:24,acc_title:25,acc_title_value:26,acc_descr:27,acc_descr_value:28,acc_descr_multiline_value:29,ALPHANUM:30,ENTITY_NAME:31,attribute:32,attributeType:33,attributeName:34,attributeKeyTypeList:35,attributeComment:36,ATTRIBUTE_WORD:37,attributeKeyType:38,COMMA:39,ATTRIBUTE_KEY:40,COMMENT:41,cardinality:42,relType:43,ZERO_OR_ONE:44,ZERO_OR_MORE:45,ONE_OR_MORE:46,ONLY_ONE:47,NON_IDENTIFYING:48,IDENTIFYING:49,WORD:50,open_directive:51,type_directive:52,arg_directive:53,close_directive:54,$accept:0,$end:1},terminals_:{2:"error",4:"ER_DIAGRAM",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",20:"BLOCK_START",22:"BLOCK_STOP",23:"title",24:"title_value",25:"acc_title",26:"acc_title_value",27:"acc_descr",28:"acc_descr_value",29:"acc_descr_multiline_value",30:"ALPHANUM",31:"ENTITY_NAME",37:"ATTRIBUTE_WORD",39:"COMMA",40:"ATTRIBUTE_KEY",41:"COMMENT",44:"ZERO_OR_ONE",45:"ZERO_OR_MORE",46:"ONE_OR_MORE",47:"ONLY_ONE",48:"NON_IDENTIFYING",49:"IDENTIFYING",50:"WORD",51:"open_directive",52:"type_directive",53:"arg_directive",54:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,5],[10,4],[10,3],[10,1],[10,2],[10,2],[10,2],[10,1],[17,1],[17,1],[21,1],[21,2],[32,2],[32,3],[32,3],[32,4],[33,1],[34,1],[35,1],[35,3],[38,1],[36,1],[18,3],[42,1],[42,1],[42,1],[42,1],[43,1],[43,1],[19,1],[19,1],[19,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:break;case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:case 20:case 43:case 28:case 29:case 32:this.$=a[o];break;case 12:r.addEntity(a[o-4]),r.addEntity(a[o-2]),r.addRelationship(a[o-4],a[o],a[o-2],a[o-3]);break;case 13:r.addEntity(a[o-3]),r.addAttributes(a[o-3],a[o-1]);break;case 14:r.addEntity(a[o-2]);break;case 15:r.addEntity(a[o]);break;case 16:case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:case 41:case 42:case 33:this.$=a[o].replace(/"/g,"");break;case 22:case 30:this.$=[a[o]];break;case 23:a[o].push(a[o-1]),this.$=a[o];break;case 24:this.$={attributeType:a[o-1],attributeName:a[o]};break;case 25:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeKeyTypeList:a[o]};break;case 26:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeComment:a[o]};break;case 27:this.$={attributeType:a[o-3],attributeName:a[o-2],attributeKeyTypeList:a[o-1],attributeComment:a[o]};break;case 31:a[o-2].push(a[o]),this.$=a[o-2];break;case 34:this.$={cardA:a[o],relType:a[o-1],cardB:a[o-2]};break;case 35:this.$=r.Cardinality.ZERO_OR_ONE;break;case 36:this.$=r.Cardinality.ZERO_OR_MORE;break;case 37:this.$=r.Cardinality.ONE_OR_MORE;break;case 38:this.$=r.Cardinality.ONLY_ONE;break;case 39:this.$=r.Identification.NON_IDENTIFYING;break;case 40:this.$=r.Identification.IDENTIFYING;break;case 44:r.parseDirective("%%{","open_directive");break;case 45:r.parseDirective(a[o],"type_directive");break;case 46:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 47:r.parseDirective("}%%","close_directive","er")}},table:[{3:1,4:n,7:3,12:4,51:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,51:r},{13:8,52:[1,9]},{52:[2,44]},{6:[1,10],7:15,8:11,9:[1,12],10:13,11:[1,14],12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},{1:[2,2]},{14:23,15:[1,24],54:u},e([15,54],[2,45]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:15,10:26,12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),e(i,[2,15],{18:27,42:29,20:[1,28],44:d,45:p,46:f,47:g}),{24:[1,34]},{26:[1,35]},{28:[1,36]},e(i,[2,19]),e(y,[2,20]),e(y,[2,21]),{11:[1,37]},{16:38,53:[1,39]},{11:[2,47]},e(i,[2,5]),{17:40,30:l,31:h},{21:41,22:[1,42],32:43,33:44,37:m},{43:46,48:[1,47],49:[1,48]},e(b,[2,35]),e(b,[2,36]),e(b,[2,37]),e(b,[2,38]),e(i,[2,16]),e(i,[2,17]),e(i,[2,18]),e(_,[2,9]),{14:49,54:u},{54:[2,46]},{15:[1,50]},{22:[1,51]},e(i,[2,14]),{21:52,22:[2,22],32:43,33:44,37:m},{34:53,37:[1,54]},{37:[2,28]},{42:55,44:d,45:p,46:f,47:g},e(x,[2,39]),e(x,[2,40]),{11:[1,56]},{19:57,30:[1,60],31:[1,59],50:[1,58]},e(i,[2,13]),{22:[2,23]},e(v,[2,24],{35:61,36:62,38:63,40:k,41:w}),e([22,37,40,41],[2,29]),e([30,31],[2,34]),e(_,[2,10]),e(i,[2,12]),e(i,[2,41]),e(i,[2,42]),e(i,[2,43]),e(v,[2,25],{36:66,39:[1,67],41:w}),e(v,[2,26]),e(E,[2,30]),e(v,[2,33]),e(E,[2,32]),e(v,[2,27]),{38:68,40:k},e(E,[2,31])],defaultActions:{5:[2,44],7:[2,2],25:[2,47],39:[2,46],45:[2,28],52:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},T=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("acc_title"),25;case 1:return this.popState(),"acc_title_value";case 2:return this.begin("acc_descr"),27;case 3:return this.popState(),"acc_descr_value";case 4:this.begin("acc_descr_multiline");break;case 5:this.popState();break;case 6:return"acc_descr_multiline_value";case 7:return this.begin("open_directive"),51;case 8:return this.begin("type_directive"),52;case 9:return this.popState(),this.begin("arg_directive"),15;case 10:return this.popState(),this.popState(),54;case 11:return 53;case 12:case 13:case 15:case 22:case 27:break;case 14:return 11;case 16:return 9;case 17:return 31;case 18:return 50;case 19:return 4;case 20:return this.begin("block"),20;case 21:return 39;case 23:return 40;case 24:case 25:return 37;case 26:return 41;case 28:return this.popState(),22;case 29:case 58:return e.yytext[0];case 30:case 34:case 35:case 48:return 44;case 31:case 32:case 33:case 41:case 43:case 50:return 46;case 36:case 37:case 38:case 39:case 40:case 42:case 49:return 45;case 44:case 45:case 46:case 47:return 47;case 51:case 54:case 55:case 56:return 48;case 52:case 53:return 49;case 57:return 30;case 59:return 6}},rules:[/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:[\s]+)/i,/^(?:"[^"%\r\n\v\b\\]+")/i,/^(?:"[^"]*")/i,/^(?:erDiagram\b)/i,/^(?:\{)/i,/^(?:,)/i,/^(?:\s+)/i,/^(?:\b((?:PK)|(?:FK)|(?:UK))\b)/i,/^(?:(.*?)[~](.*?)*[~])/i,/^(?:[A-Za-z_][A-Za-z0-9\-_\[\]\(\)]*)/i,/^(?:"[^"]*")/i,/^(?:[\n]+)/i,/^(?:\})/i,/^(?:.)/i,/^(?:one or zero\b)/i,/^(?:one or more\b)/i,/^(?:one or many\b)/i,/^(?:1\+)/i,/^(?:\|o\b)/i,/^(?:zero or one\b)/i,/^(?:zero or more\b)/i,/^(?:zero or many\b)/i,/^(?:0\+)/i,/^(?:\}o\b)/i,/^(?:many\(0\))/i,/^(?:many\(1\))/i,/^(?:many\b)/i,/^(?:\}\|)/i,/^(?:one\b)/i,/^(?:only one\b)/i,/^(?:1\b)/i,/^(?:\|\|)/i,/^(?:o\|)/i,/^(?:o\{)/i,/^(?:\|\{)/i,/^(?:\.\.)/i,/^(?:--)/i,/^(?:to\b)/i,/^(?:optionally to\b)/i,/^(?:\.-)/i,/^(?:-\.)/i,/^(?:[A-Za-z][A-Za-z0-9\-_]*)/i,/^(?:.)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[5,6],inclusive:!1},acc_descr:{rules:[3],inclusive:!1},acc_title:{rules:[1],inclusive:!1},open_directive:{rules:[8],inclusive:!1},type_directive:{rules:[9,10],inclusive:!1},arg_directive:{rules:[10,11],inclusive:!1},block:{rules:[21,22,23,24,25,26,27,28,29],inclusive:!1},INITIAL:{rules:[0,2,4,7,12,13,14,15,16,17,18,19,20,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],inclusive:!0}}},t);function S(){this.yy={}}return C.lexer=T,S.prototype=C,C.Parser=S,new S}();Ks.parser=Ks;const Qs=Ks,Js=t=>null!==t.match(/^\s*erDiagram/);let to={},eo=[];const no=function(t){return void 0===to[t]&&(to[t]={attributes:[]},Nt.info("Added new entity :",t)),to[t]},ro={Cardinality:{ZERO_OR_ONE:"ZERO_OR_ONE",ZERO_OR_MORE:"ZERO_OR_MORE",ONE_OR_MORE:"ONE_OR_MORE",ONLY_ONE:"ONLY_ONE"},Identification:{NON_IDENTIFYING:"NON_IDENTIFYING",IDENTIFYING:"IDENTIFYING"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().er,addEntity:no,addAttributes:function(t,e){let n,r=no(t);for(n=e.length-1;n>=0;n--)r.attributes.push(e[n]),Nt.debug("Added attribute ",e[n].attributeName)},getEntities:()=>to,addRelationship:function(t,e,n,r){let i={entityA:t,roleA:e,entityB:n,relSpec:r};eo.push(i),Nt.debug("Added new relationship :",i)},getRelationships:()=>eo,clear:function(){to={},eo=[],Dr()},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,setDiagramTitle:$r,getDiagramTitle:Rr},io={ONLY_ONE_START:"ONLY_ONE_START",ONLY_ONE_END:"ONLY_ONE_END",ZERO_OR_ONE_START:"ZERO_OR_ONE_START",ZERO_OR_ONE_END:"ZERO_OR_ONE_END",ONE_OR_MORE_START:"ONE_OR_MORE_START",ONE_OR_MORE_END:"ONE_OR_MORE_END",ZERO_OR_MORE_START:"ZERO_OR_MORE_START",ZERO_OR_MORE_END:"ZERO_OR_MORE_END"},ao=io,so=function(t,e){let n;t.append("defs").append("marker").attr("id",io.ONLY_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18 M15,0 L15,18"),t.append("defs").append("marker").attr("id",io.ONLY_ONE_END).attr("refX",18).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,0 L3,18 M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",21).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_END).attr("refX",30).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,0 L21,18"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q 18,0 36,18 Q 18,36 0,18 M42,9 L42,27"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_END).attr("refX",27).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,9 L3,27 M9,18 Q27,0 45,18 Q27,36 9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",48).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q18,0 36,18 Q18,36 0,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_END).attr("refX",39).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,18 Q39,0 57,18 Q39,36 21,18")},oo=/[^\dA-Za-z](\W)*/g;let co={},lo=new Map;const ho=function(t,e,n){let r;return Object.keys(e).forEach((function(i){const a=function(t="",e=""){const n=t.replace(oo,"");return`${go(e)}${go(n)}${vt(t,fo)}`}(i,"entity");lo.set(i,a);const s=t.append("g").attr("id",a);r=void 0===r?a:r;const o="text-"+a,c=s.append("text").classed("er entityLabel",!0).attr("id",o).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(i),{width:l,height:h}=((t,e,n)=>{const r=co.entityPadding/3,i=co.entityPadding/3,a=.85*co.fontSize,s=e.node().getBBox(),o=[];let c=!1,l=!1,h=0,u=0,d=0,p=0,f=s.height+2*r,g=1;n.forEach((t=>{void 0!==t.attributeKeyTypeList&&t.attributeKeyTypeList.length>0&&(c=!0),void 0!==t.attributeComment&&(l=!0)})),n.forEach((n=>{const i=`${e.node().id}-attr-${g}`;let s=0;const y=jt(n.attributeType),m=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-type`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(y),b=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-name`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeName),_={};_.tn=m,_.nn=b;const x=m.node().getBBox(),v=b.node().getBBox();if(h=Math.max(h,x.width),u=Math.max(u,v.width),s=Math.max(x.height,v.height),c){const e=void 0!==n.attributeKeyTypeList?n.attributeKeyTypeList.join(","):"",r=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-key`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(e);_.kn=r;const o=r.node().getBBox();d=Math.max(d,o.width),s=Math.max(s,o.height)}if(l){const e=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-comment`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeComment||"");_.cn=e;const r=e.node().getBBox();p=Math.max(p,r.width),s=Math.max(s,r.height)}_.height=s,o.push(_),f+=s+2*r,g+=1}));let y=4;c&&(y+=2),l&&(y+=2);const m=h+u+d+p,b={width:Math.max(co.minEntityWidth,Math.max(s.width+2*co.entityPadding,m+i*y)),height:n.length>0?f:Math.max(co.minEntityHeight,s.height+2*co.entityPadding)};if(n.length>0){const n=Math.max(0,(b.width-m-i*y)/(y/2));e.attr("transform","translate("+b.width/2+","+(r+s.height/2)+")");let a=s.height+2*r,f="attributeBoxOdd";o.forEach((e=>{const s=a+r+e.height/2;e.tn.attr("transform","translate("+i+","+s+")");const o=t.insert("rect","#"+e.tn.node().id).classed(`er ${f}`,!0).attr("x",0).attr("y",a).attr("width",h+2*i+n).attr("height",e.height+2*r),g=parseFloat(o.attr("x"))+parseFloat(o.attr("width"));e.nn.attr("transform","translate("+(g+i)+","+s+")");const y=t.insert("rect","#"+e.nn.node().id).classed(`er ${f}`,!0).attr("x",g).attr("y",a).attr("width",u+2*i+n).attr("height",e.height+2*r);let m=parseFloat(y.attr("x"))+parseFloat(y.attr("width"));if(c){e.kn.attr("transform","translate("+(m+i)+","+s+")");const o=t.insert("rect","#"+e.kn.node().id).classed(`er ${f}`,!0).attr("x",m).attr("y",a).attr("width",d+2*i+n).attr("height",e.height+2*r);m=parseFloat(o.attr("x"))+parseFloat(o.attr("width"))}l&&(e.cn.attr("transform","translate("+(m+i)+","+s+")"),t.insert("rect","#"+e.cn.node().id).classed(`er ${f}`,"true").attr("x",m).attr("y",a).attr("width",p+2*i+n).attr("height",e.height+2*r)),a+=e.height+2*r,f="attributeBoxOdd"===f?"attributeBoxEven":"attributeBoxOdd"}))}else b.height=Math.max(co.minEntityHeight,f),e.attr("transform","translate("+b.width/2+","+b.height/2+")");return b})(s,c,e[i].attributes),u=s.insert("rect","#"+o).classed("er entityBox",!0).attr("x",0).attr("y",0).attr("width",l).attr("height",h).node().getBBox();n.setNode(a,{width:u.width,height:u.height,shape:"rect",id:a})})),r},uo=function(t){return(t.entityA+t.roleA+t.entityB).replace(/\s/g,"")};let po=0;const fo="28e9f9db-3c8d-5aa5-9faf-44286ae5937c";function go(t=""){return t.length>0?`${t}-`:""}const yo={setConf:function(t){const e=Object.keys(t);for(const n of e)co[n]=t[n]},draw:function(t,e,n,r){co=ar().er,Nt.info("Drawing ER diagram");const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);let c;so(s,co),c=new ht.k({multigraph:!0,directed:!0,compound:!1}).setGraph({rankdir:co.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));const l=ho(s,r.db.getEntities(),c),h=function(t,e){return t.forEach((function(t){e.setEdge(lo.get(t.entityA),lo.get(t.entityB),{relationship:t},uo(t))})),t}(r.db.getRelationships(),c);var u,d;(0,lt.bK)(c),u=s,(d=c).nodes().forEach((function(t){void 0!==t&&void 0!==d.node(t)&&u.select("#"+t).attr("transform","translate("+(d.node(t).x-d.node(t).width/2)+","+(d.node(t).y-d.node(t).height/2)+" )")})),h.forEach((function(t){!function(t,e,n,r,i){po++;const a=n.edge(lo.get(e.entityA),lo.get(e.entityB),uo(e)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),c=t.insert("path","#"+r).classed("er relationshipLine",!0).attr("d",s(a.points)).style("stroke",co.stroke).style("fill","none");e.relSpec.relType===i.db.Identification.NON_IDENTIFYING&&c.attr("stroke-dasharray","8,8");let l="";switch(co.arrowMarkerAbsolute&&(l=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,l=l.replace(/\(/g,"\\("),l=l.replace(/\)/g,"\\)")),e.relSpec.cardA){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_ONE_END+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_MORE_END+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ONE_OR_MORE_END+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-end","url("+l+"#"+ao.ONLY_ONE_END+")")}switch(e.relSpec.cardB){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_ONE_START+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_MORE_START+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ONE_OR_MORE_START+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-start","url("+l+"#"+ao.ONLY_ONE_START+")")}const h=c.node().getTotalLength(),u=c.node().getPointAtLength(.5*h),d="rel"+po,p=t.append("text").classed("er relationshipLabel",!0).attr("id",d).attr("x",u.x).attr("y",u.y).style("text-anchor","middle").style("dominant-baseline","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(e.roleA).node().getBBox();t.insert("rect","#"+d).classed("er relationshipLabelBox",!0).attr("x",u.x-p.width/2).attr("y",u.y-p.height/2).attr("width",p.width).attr("height",p.height)}(s,t,c,l,r)}));const p=co.diagramPadding;Gn.insertTitle(s,"entityTitleText",co.titleTopMargin,r.db.getDiagramTitle());const f=s.node().getBBox(),g=f.width+2*p,y=f.height+2*p;dr(s,y,g,co.useMaxWidth),s.attr("viewBox",`${f.x-p} ${f.y-p} ${g} ${y}`)}};var mo=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,9],r=[1,7],i=[1,6],a=[1,8],s=[1,20,21,22,23,38,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],o=[2,10],c=[1,20],l=[1,21],h=[1,22],u=[1,23],d=[1,30],p=[1,32],f=[1,33],g=[1,34],y=[1,62],m=[1,48],b=[1,52],_=[1,36],x=[1,37],v=[1,38],k=[1,39],w=[1,40],E=[1,56],C=[1,63],T=[1,51],S=[1,53],A=[1,55],L=[1,59],B=[1,60],N=[1,41],D=[1,42],O=[1,43],M=[1,44],I=[1,61],F=[1,50],$=[1,54],R=[1,57],Z=[1,58],P=[1,49],j=[1,66],Y=[1,71],z=[1,20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],U=[1,75],W=[1,74],q=[1,76],H=[20,21,23,81,82],V=[1,99],G=[1,104],X=[1,107],K=[1,108],Q=[1,101],J=[1,106],tt=[1,109],et=[1,102],nt=[1,114],rt=[1,113],it=[1,103],at=[1,105],st=[1,110],ot=[1,111],ct=[1,112],lt=[1,115],ht=[20,21,22,23,81,82],ut=[20,21,22,23,53,81,82],dt=[20,21,22,23,40,52,53,55,57,59,61,63,65,66,67,69,71,73,74,76,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],pt=[20,21,23],ft=[20,21,23,52,66,67,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],gt=[1,12,20,21,22,23,24,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],yt=[52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],mt=[1,149],bt=[1,157],_t=[1,158],xt=[1,159],vt=[1,160],kt=[1,144],wt=[1,145],Et=[1,141],Ct=[1,152],Tt=[1,153],St=[1,154],At=[1,155],Lt=[1,156],Bt=[1,161],Nt=[1,162],Dt=[1,147],Ot=[1,150],Mt=[1,146],It=[1,143],Ft=[20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],$t=[1,165],Rt=[20,21,22,23,26,52,66,67,91,105,106,109,111,112,122,123,124,125,126,127],Zt=[20,21,22,23,24,26,38,40,41,42,52,56,58,60,62,64,66,67,68,70,72,73,75,77,81,82,86,87,88,89,90,91,92,95,105,106,109,111,112,113,114,122,123,124,125,126,127],Pt=[12,21,22,24],jt=[22,106],Yt=[1,250],zt=[1,245],Ut=[1,246],Wt=[1,254],qt=[1,251],Ht=[1,248],Vt=[1,247],Gt=[1,249],Xt=[1,252],Kt=[1,253],Qt=[1,255],Jt=[1,273],te=[20,21,23,106],ee=[20,21,22,23,66,67,86,102,105,106,109,110,111,112,113],ne={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,directive:5,openDirective:6,typeDirective:7,closeDirective:8,separator:9,":":10,argDirective:11,open_directive:12,type_directive:13,arg_directive:14,close_directive:15,graphConfig:16,document:17,line:18,statement:19,SEMI:20,NEWLINE:21,SPACE:22,EOF:23,GRAPH:24,NODIR:25,DIR:26,FirstStmtSeperator:27,ending:28,endToken:29,spaceList:30,spaceListNewline:31,verticeStatement:32,styleStatement:33,linkStyleStatement:34,classDefStatement:35,classStatement:36,clickStatement:37,subgraph:38,text:39,SQS:40,SQE:41,end:42,direction:43,acc_title:44,acc_title_value:45,acc_descr:46,acc_descr_value:47,acc_descr_multiline_value:48,link:49,node:50,vertex:51,AMP:52,STYLE_SEPARATOR:53,idString:54,DOUBLECIRCLESTART:55,DOUBLECIRCLEEND:56,PS:57,PE:58,"(-":59,"-)":60,STADIUMSTART:61,STADIUMEND:62,SUBROUTINESTART:63,SUBROUTINEEND:64,VERTEX_WITH_PROPS_START:65,ALPHA:66,COLON:67,PIPE:68,CYLINDERSTART:69,CYLINDEREND:70,DIAMOND_START:71,DIAMOND_STOP:72,TAGEND:73,TRAPSTART:74,TRAPEND:75,INVTRAPSTART:76,INVTRAPEND:77,linkStatement:78,arrowText:79,TESTSTR:80,START_LINK:81,LINK:82,textToken:83,STR:84,keywords:85,STYLE:86,LINKSTYLE:87,CLASSDEF:88,CLASS:89,CLICK:90,DOWN:91,UP:92,textNoTags:93,textNoTagsToken:94,DEFAULT:95,stylesOpt:96,alphaNum:97,CALLBACKNAME:98,CALLBACKARGS:99,HREF:100,LINK_TARGET:101,HEX:102,numList:103,INTERPOLATE:104,NUM:105,COMMA:106,style:107,styleComponent:108,MINUS:109,UNIT:110,BRKT:111,DOT:112,PCT:113,TAGSTART:114,alphaNumToken:115,idStringToken:116,alphaNumStatement:117,direction_tb:118,direction_bt:119,direction_rl:120,direction_lr:121,PUNCTUATION:122,UNICODE_TEXT:123,PLUS:124,EQUALS:125,MULT:126,UNDERSCORE:127,graphCodeTokens:128,ARROW_CROSS:129,ARROW_POINT:130,ARROW_CIRCLE:131,ARROW_OPEN:132,QUOTE:133,$accept:0,$end:1},terminals_:{2:"error",10:":",12:"open_directive",13:"type_directive",14:"arg_directive",15:"close_directive",20:"SEMI",21:"NEWLINE",22:"SPACE",23:"EOF",24:"GRAPH",25:"NODIR",26:"DIR",38:"subgraph",40:"SQS",41:"SQE",42:"end",44:"acc_title",45:"acc_title_value",46:"acc_descr",47:"acc_descr_value",48:"acc_descr_multiline_value",52:"AMP",53:"STYLE_SEPARATOR",55:"DOUBLECIRCLESTART",56:"DOUBLECIRCLEEND",57:"PS",58:"PE",59:"(-",60:"-)",61:"STADIUMSTART",62:"STADIUMEND",63:"SUBROUTINESTART",64:"SUBROUTINEEND",65:"VERTEX_WITH_PROPS_START",66:"ALPHA",67:"COLON",68:"PIPE",69:"CYLINDERSTART",70:"CYLINDEREND",71:"DIAMOND_START",72:"DIAMOND_STOP",73:"TAGEND",74:"TRAPSTART",75:"TRAPEND",76:"INVTRAPSTART",77:"INVTRAPEND",80:"TESTSTR",81:"START_LINK",82:"LINK",84:"STR",86:"STYLE",87:"LINKSTYLE",88:"CLASSDEF",89:"CLASS",90:"CLICK",91:"DOWN",92:"UP",95:"DEFAULT",98:"CALLBACKNAME",99:"CALLBACKARGS",100:"HREF",101:"LINK_TARGET",102:"HEX",104:"INTERPOLATE",105:"NUM",106:"COMMA",109:"MINUS",110:"UNIT",111:"BRKT",112:"DOT",113:"PCT",114:"TAGSTART",118:"direction_tb",119:"direction_bt",120:"direction_rl",121:"direction_lr",122:"PUNCTUATION",123:"UNICODE_TEXT",124:"PLUS",125:"EQUALS",126:"MULT",127:"UNDERSCORE",129:"ARROW_CROSS",130:"ARROW_POINT",131:"ARROW_CIRCLE",132:"ARROW_OPEN",133:"QUOTE"},productions_:[0,[3,1],[3,2],[5,4],[5,6],[6,1],[7,1],[11,1],[8,1],[4,2],[17,0],[17,2],[18,1],[18,1],[18,1],[18,1],[18,1],[16,2],[16,2],[16,2],[16,3],[28,2],[28,1],[29,1],[29,1],[29,1],[27,1],[27,1],[27,2],[31,2],[31,2],[31,1],[31,1],[30,2],[30,1],[19,2],[19,2],[19,2],[19,2],[19,2],[19,2],[19,9],[19,6],[19,4],[19,1],[19,2],[19,2],[19,1],[9,1],[9,1],[9,1],[32,3],[32,4],[32,2],[32,1],[50,1],[50,5],[50,3],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,8],[51,4],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,4],[51,4],[51,1],[49,2],[49,3],[49,3],[49,1],[49,3],[78,1],[79,3],[39,1],[39,2],[39,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[93,1],[93,2],[35,5],[35,5],[36,5],[37,2],[37,4],[37,3],[37,5],[37,2],[37,4],[37,4],[37,6],[37,2],[37,4],[37,2],[37,4],[37,4],[37,6],[33,5],[33,5],[34,5],[34,5],[34,9],[34,9],[34,7],[34,7],[103,1],[103,3],[96,1],[96,3],[107,1],[107,2],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[83,1],[83,1],[83,1],[83,1],[83,1],[83,1],[94,1],[94,1],[94,1],[94,1],[54,1],[54,2],[97,1],[97,2],[117,1],[117,1],[117,1],[117,1],[43,1],[43,1],[43,1],[43,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.parseDirective("%%{","open_directive");break;case 6:r.parseDirective(a[o],"type_directive");break;case 7:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 8:r.parseDirective("}%%","close_directive","flowchart");break;case 10:case 36:case 37:case 38:case 39:case 40:this.$=[];break;case 11:(!Array.isArray(a[o])||a[o].length>0)&&a[o-1].push(a[o]),this.$=a[o-1];break;case 12:case 82:case 84:case 96:case 152:case 154:case 155:case 78:case 150:this.$=a[o];break;case 19:r.setDirection("TB"),this.$="TB";break;case 20:r.setDirection(a[o-1]),this.$=a[o-1];break;case 35:this.$=a[o-1].nodes;break;case 41:this.$=r.addSubGraph(a[o-6],a[o-1],a[o-4]);break;case 42:this.$=r.addSubGraph(a[o-3],a[o-1],a[o-3]);break;case 43:this.$=r.addSubGraph(void 0,a[o-1],void 0);break;case 45:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 46:case 47:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 51:r.addLink(a[o-2].stmt,a[o],a[o-1]),this.$={stmt:a[o],nodes:a[o].concat(a[o-2].nodes)};break;case 52:r.addLink(a[o-3].stmt,a[o-1],a[o-2]),this.$={stmt:a[o-1],nodes:a[o-1].concat(a[o-3].nodes)};break;case 53:this.$={stmt:a[o-1],nodes:a[o-1]};break;case 54:this.$={stmt:a[o],nodes:a[o]};break;case 55:case 123:case 125:this.$=[a[o]];break;case 56:this.$=a[o-4].concat(a[o]);break;case 57:this.$=[a[o-2]],r.setClass(a[o-2],a[o]);break;case 58:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"square");break;case 59:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"doublecircle");break;case 60:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"circle");break;case 61:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"ellipse");break;case 62:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"stadium");break;case 63:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"subroutine");break;case 64:this.$=a[o-7],r.addVertex(a[o-7],a[o-1],"rect",void 0,void 0,void 0,Object.fromEntries([[a[o-5],a[o-3]]]));break;case 65:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"cylinder");break;case 66:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"round");break;case 67:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"diamond");break;case 68:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"hexagon");break;case 69:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"odd");break;case 70:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"trapezoid");break;case 71:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"inv_trapezoid");break;case 72:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_right");break;case 73:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_left");break;case 74:this.$=a[o],r.addVertex(a[o]);break;case 75:a[o-1].text=a[o],this.$=a[o-1];break;case 76:case 77:a[o-2].text=a[o-1],this.$=a[o-2];break;case 79:var c=r.destructLink(a[o],a[o-2]);this.$={type:c.type,stroke:c.stroke,length:c.length,text:a[o-1]};break;case 80:c=r.destructLink(a[o]);this.$={type:c.type,stroke:c.stroke,length:c.length};break;case 81:this.$=a[o-1];break;case 83:case 97:case 153:case 151:this.$=a[o-1]+""+a[o];break;case 98:case 99:this.$=a[o-4],r.addClass(a[o-2],a[o]);break;case 100:this.$=a[o-4],r.setClass(a[o-2],a[o]);break;case 101:case 109:this.$=a[o-1],r.setClickEvent(a[o-1],a[o]);break;case 102:case 110:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 103:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 104:this.$=a[o-4],r.setClickEvent(a[o-4],a[o-3],a[o-2]),r.setTooltip(a[o-4],a[o]);break;case 105:case 111:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 106:case 112:this.$=a[o-3],r.setLink(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 107:case 113:this.$=a[o-3],r.setLink(a[o-3],a[o-2],a[o]);break;case 108:case 114:this.$=a[o-5],r.setLink(a[o-5],a[o-4],a[o]),r.setTooltip(a[o-5],a[o-2]);break;case 115:this.$=a[o-4],r.addVertex(a[o-2],void 0,void 0,a[o]);break;case 116:case 118:this.$=a[o-4],r.updateLink(a[o-2],a[o]);break;case 117:this.$=a[o-4],r.updateLink([a[o-2]],a[o]);break;case 119:this.$=a[o-8],r.updateLinkInterpolate([a[o-6]],a[o-2]),r.updateLink([a[o-6]],a[o]);break;case 120:this.$=a[o-8],r.updateLinkInterpolate(a[o-6],a[o-2]),r.updateLink(a[o-6],a[o]);break;case 121:this.$=a[o-6],r.updateLinkInterpolate([a[o-4]],a[o]);break;case 122:this.$=a[o-6],r.updateLinkInterpolate(a[o-4],a[o]);break;case 124:case 126:a[o-2].push(a[o]),this.$=a[o-2];break;case 128:this.$=a[o-1]+a[o];break;case 156:this.$="v";break;case 157:this.$="-";break;case 158:this.$={stmt:"dir",value:"TB"};break;case 159:this.$={stmt:"dir",value:"BT"};break;case 160:this.$={stmt:"dir",value:"RL"};break;case 161:this.$={stmt:"dir",value:"LR"}}},table:[{3:1,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},{1:[3]},{1:[2,1]},{3:10,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},e(s,o,{17:11}),{7:12,13:[1,13]},{16:14,21:r,22:i,24:a},{16:15,21:r,22:i,24:a},{25:[1,16],26:[1,17]},{13:[2,5]},{1:[2,2]},{1:[2,9],18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{8:64,10:[1,65],15:j},e([10,15],[2,6]),e(s,[2,17]),e(s,[2,18]),e(s,[2,19]),{20:[1,68],21:[1,69],22:Y,27:67,30:70},e(z,[2,11]),e(z,[2,12]),e(z,[2,13]),e(z,[2,14]),e(z,[2,15]),e(z,[2,16]),{9:72,20:U,21:W,23:q,49:73,78:77,81:[1,78],82:[1,79]},{9:80,20:U,21:W,23:q},{9:81,20:U,21:W,23:q},{9:82,20:U,21:W,23:q},{9:83,20:U,21:W,23:q},{9:84,20:U,21:W,23:q},{9:86,20:U,21:W,22:[1,85],23:q},e(z,[2,44]),{45:[1,87]},{47:[1,88]},e(z,[2,47]),e(H,[2,54],{30:89,22:Y}),{22:[1,90]},{22:[1,91]},{22:[1,92]},{22:[1,93]},{26:V,52:G,66:X,67:K,84:[1,97],91:Q,97:96,98:[1,94],100:[1,95],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(z,[2,158]),e(z,[2,159]),e(z,[2,160]),e(z,[2,161]),e(ht,[2,55],{53:[1,116]}),e(ut,[2,74],{116:129,40:[1,117],52:y,55:[1,118],57:[1,119],59:[1,120],61:[1,121],63:[1,122],65:[1,123],66:m,67:b,69:[1,124],71:[1,125],73:[1,126],74:[1,127],76:[1,128],91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),e(dt,[2,150]),e(dt,[2,175]),e(dt,[2,176]),e(dt,[2,177]),e(dt,[2,178]),e(dt,[2,179]),e(dt,[2,180]),e(dt,[2,181]),e(dt,[2,182]),e(dt,[2,183]),e(dt,[2,184]),e(dt,[2,185]),e(dt,[2,186]),e(dt,[2,187]),e(dt,[2,188]),e(dt,[2,189]),e(dt,[2,190]),{9:130,20:U,21:W,23:q},{11:131,14:[1,132]},e(pt,[2,8]),e(s,[2,20]),e(s,[2,26]),e(s,[2,27]),{21:[1,133]},e(ft,[2,34],{30:134,22:Y}),e(z,[2,35]),{50:135,51:45,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},e(gt,[2,48]),e(gt,[2,49]),e(gt,[2,50]),e(yt,[2,78],{79:136,68:[1,138],80:[1,137]}),{22:mt,24:bt,26:_t,38:xt,39:139,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e([52,66,67,68,80,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,80]),e(z,[2,36]),e(z,[2,37]),e(z,[2,38]),e(z,[2,39]),e(z,[2,40]),{22:mt,24:bt,26:_t,38:xt,39:163,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:164}),e(z,[2,45]),e(z,[2,46]),e(H,[2,53],{52:$t}),{26:V,52:G,66:X,67:K,91:Q,97:166,102:[1,167],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{95:[1,168],103:169,105:[1,170]},{26:V,52:G,66:X,67:K,91:Q,95:[1,171],97:172,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:173,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,101],{22:[1,174],99:[1,175]}),e(pt,[2,105],{22:[1,176]}),e(pt,[2,109],{115:100,117:178,22:[1,177],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,111],{22:[1,179]}),e(Rt,[2,152]),e(Rt,[2,154]),e(Rt,[2,155]),e(Rt,[2,156]),e(Rt,[2,157]),e(Zt,[2,162]),e(Zt,[2,163]),e(Zt,[2,164]),e(Zt,[2,165]),e(Zt,[2,166]),e(Zt,[2,167]),e(Zt,[2,168]),e(Zt,[2,169]),e(Zt,[2,170]),e(Zt,[2,171]),e(Zt,[2,172]),e(Zt,[2,173]),e(Zt,[2,174]),{52:y,54:180,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:mt,24:bt,26:_t,38:xt,39:181,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:182,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:184,42:vt,52:G,57:[1,183],66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:185,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:186,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:187,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{66:[1,188]},{22:mt,24:bt,26:_t,38:xt,39:189,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:190,42:vt,52:G,66:X,67:K,71:[1,191],73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:192,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:193,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:194,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(dt,[2,151]),e(Pt,[2,3]),{8:195,15:j},{15:[2,7]},e(s,[2,28]),e(ft,[2,33]),e(H,[2,51],{30:196,22:Y}),e(yt,[2,75],{22:[1,197]}),{22:[1,198]},{22:mt,24:bt,26:_t,38:xt,39:199,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,81:wt,82:[1,200],83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Zt,[2,82]),e(Zt,[2,84]),e(Zt,[2,140]),e(Zt,[2,141]),e(Zt,[2,142]),e(Zt,[2,143]),e(Zt,[2,144]),e(Zt,[2,145]),e(Zt,[2,146]),e(Zt,[2,147]),e(Zt,[2,148]),e(Zt,[2,149]),e(Zt,[2,85]),e(Zt,[2,86]),e(Zt,[2,87]),e(Zt,[2,88]),e(Zt,[2,89]),e(Zt,[2,90]),e(Zt,[2,91]),e(Zt,[2,92]),e(Zt,[2,93]),e(Zt,[2,94]),e(Zt,[2,95]),{9:203,20:U,21:W,22:mt,23:q,24:bt,26:_t,38:xt,40:[1,202],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,204],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Y,30:205},{22:[1,206],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,207]},{22:[1,208]},{22:[1,209],106:[1,210]},e(jt,[2,123]),{22:[1,211]},{22:[1,212],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,213],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{84:[1,214]},e(pt,[2,103],{22:[1,215]}),{84:[1,216],101:[1,217]},{84:[1,218]},e(Rt,[2,153]),{84:[1,219],101:[1,220]},e(ht,[2,57],{116:129,52:y,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),{22:mt,24:bt,26:_t,38:xt,41:[1,221],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,56:[1,222],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:223,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,224],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,60:[1,225],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,62:[1,226],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,64:[1,227],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{67:[1,228]},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,70:[1,229],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,230],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:231,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,41:[1,232],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,233],77:[1,234],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,236],77:[1,235],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{9:237,20:U,21:W,23:q},e(H,[2,52],{52:$t}),e(yt,[2,77]),e(yt,[2,76]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,68:[1,238],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(yt,[2,79]),e(Zt,[2,83]),{22:mt,24:bt,26:_t,38:xt,39:239,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:240}),e(z,[2,43]),{51:241,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:242,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:256,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:257,102:qt,104:[1,258],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:259,102:qt,104:[1,260],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{105:[1,261]},{22:Yt,66:zt,67:Ut,86:Wt,96:262,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:263,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{26:V,52:G,66:X,67:K,91:Q,97:264,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,102]),{84:[1,265]},e(pt,[2,106],{22:[1,266]}),e(pt,[2,107]),e(pt,[2,110]),e(pt,[2,112],{22:[1,267]}),e(pt,[2,113]),e(ut,[2,58]),e(ut,[2,59]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,268],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,66]),e(ut,[2,61]),e(ut,[2,62]),e(ut,[2,63]),{66:[1,269]},e(ut,[2,65]),e(ut,[2,67]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,270],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,69]),e(ut,[2,70]),e(ut,[2,72]),e(ut,[2,71]),e(ut,[2,73]),e(Pt,[2,4]),e([22,52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,81]),{22:mt,24:bt,26:_t,38:xt,41:[1,271],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,272],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},e(ht,[2,56]),e(pt,[2,115],{106:Jt}),e(te,[2,125],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(ee,[2,127]),e(ee,[2,129]),e(ee,[2,130]),e(ee,[2,131]),e(ee,[2,132]),e(ee,[2,133]),e(ee,[2,134]),e(ee,[2,135]),e(ee,[2,136]),e(ee,[2,137]),e(ee,[2,138]),e(ee,[2,139]),e(pt,[2,116],{106:Jt}),e(pt,[2,117],{106:Jt}),{22:[1,275]},e(pt,[2,118],{106:Jt}),{22:[1,276]},e(jt,[2,124]),e(pt,[2,98],{106:Jt}),e(pt,[2,99],{106:Jt}),e(pt,[2,100],{115:100,117:178,26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,104]),{101:[1,277]},{101:[1,278]},{58:[1,279]},{68:[1,280]},{72:[1,281]},{9:282,20:U,21:W,23:q},e(z,[2,42]),{22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,107:283,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ee,[2,128]),{26:V,52:G,66:X,67:K,91:Q,97:284,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:285,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,108]),e(pt,[2,114]),e(ut,[2,60]),{22:mt,24:bt,26:_t,38:xt,39:286,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,68]),e(Ft,o,{17:287}),e(te,[2,126],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(pt,[2,121],{115:100,117:178,22:[1,288],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,122],{115:100,117:178,22:[1,289],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),{22:mt,24:bt,26:_t,38:xt,41:[1,290],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,291],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:292,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:293,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ut,[2,64]),e(z,[2,41]),e(pt,[2,119],{106:Jt}),e(pt,[2,120],{106:Jt})],defaultActions:{2:[2,1],9:[2,5],10:[2,2],132:[2,7]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},re=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),12;case 1:return this.begin("type_directive"),13;case 2:return this.popState(),this.begin("arg_directive"),10;case 3:return this.popState(),this.popState(),15;case 4:return 14;case 5:case 6:break;case 7:return this.begin("acc_title"),44;case 8:return this.popState(),"acc_title_value";case 9:return this.begin("acc_descr"),46;case 10:return this.popState(),"acc_descr_value";case 11:this.begin("acc_descr_multiline");break;case 12:case 15:case 24:case 27:case 30:case 33:this.popState();break;case 13:return"acc_descr_multiline_value";case 14:this.begin("string");break;case 16:return"STR";case 17:return 86;case 18:return 95;case 19:return 87;case 20:return 104;case 21:return 88;case 22:return 89;case 23:this.begin("href");break;case 25:return 100;case 26:this.begin("callbackname");break;case 28:this.popState(),this.begin("callbackargs");break;case 29:return 98;case 31:return 99;case 32:this.begin("click");break;case 34:return 90;case 35:case 36:case 37:return t.lex.firstGraph()&&this.begin("dir"),24;case 38:return 38;case 39:return 42;case 40:case 41:case 42:case 43:return 101;case 44:return this.popState(),25;case 45:case 46:case 47:case 48:case 49:case 50:case 51:case 52:case 53:case 54:return this.popState(),26;case 55:return 118;case 56:return 119;case 57:return 120;case 58:return 121;case 59:return 105;case 60:return 111;case 61:return 53;case 62:return 67;case 63:return 52;case 64:return 20;case 65:return 106;case 66:return 126;case 67:case 68:case 69:return 82;case 70:case 71:case 72:return 81;case 73:return 59;case 74:return 60;case 75:return 61;case 76:return 62;case 77:return 63;case 78:return 64;case 79:return 65;case 80:return 69;case 81:return 70;case 82:return 55;case 83:return 56;case 84:return 109;case 85:return 112;case 86:return 127;case 87:return 124;case 88:return 113;case 89:case 90:return 125;case 91:return 114;case 92:return 73;case 93:return 92;case 94:return"SEP";case 95:return 91;case 96:return 66;case 97:return 75;case 98:return 74;case 99:return 77;case 100:return 76;case 101:return 122;case 102:return 123;case 103:return 68;case 104:return 57;case 105:return 58;case 106:return 40;case 107:return 41;case 108:return 71;case 109:return 72;case 110:return 133;case 111:return 21;case 112:return 22;case 113:return 23}},rules:[/^(?:%%\{)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)[^\n]*)/,/^(?:[^\}]%%[^\n]*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:style\b)/,/^(?:default\b)/,/^(?:linkStyle\b)/,/^(?:interpolate\b)/,/^(?:classDef\b)/,/^(?:class\b)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:click[\s]+)/,/^(?:[\s\n])/,/^(?:[^\s\n]*)/,/^(?:flowchart-elk\b)/,/^(?:graph\b)/,/^(?:flowchart\b)/,/^(?:subgraph\b)/,/^(?:end\b\s*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:(\r?\n)*\s*\n)/,/^(?:\s*LR\b)/,/^(?:\s*RL\b)/,/^(?:\s*TB\b)/,/^(?:\s*BT\b)/,/^(?:\s*TD\b)/,/^(?:\s*BR\b)/,/^(?:\s*<)/,/^(?:\s*>)/,/^(?:\s*\^)/,/^(?:\s*v\b)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:[0-9]+)/,/^(?:#)/,/^(?::::)/,/^(?::)/,/^(?:&)/,/^(?:;)/,/^(?:,)/,/^(?:\*)/,/^(?:\s*[xo<]?--+[-xo>]\s*)/,/^(?:\s*[xo<]?==+[=xo>]\s*)/,/^(?:\s*[xo<]?-?\.+-[xo>]?\s*)/,/^(?:\s*[xo<]?--\s*)/,/^(?:\s*[xo<]?==\s*)/,/^(?:\s*[xo<]?-\.\s*)/,/^(?:\(-)/,/^(?:-\))/,/^(?:\(\[)/,/^(?:\]\))/,/^(?:\[\[)/,/^(?:\]\])/,/^(?:\[\|)/,/^(?:\[\()/,/^(?:\)\])/,/^(?:\(\(\()/,/^(?:\)\)\))/,/^(?:-)/,/^(?:\.)/,/^(?:[\_])/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:<)/,/^(?:>)/,/^(?:\^)/,/^(?:\\\|)/,/^(?:v\b)/,/^(?:[A-Za-z]+)/,/^(?:\\\])/,/^(?:\[\/)/,/^(?:\/\])/,/^(?:\[\\)/,/^(?:[!"#$%&'*+,-.`?\\_/])/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\|)/,/^(?:\()/,/^(?:\))/,/^(?:\[)/,/^(?:\])/,/^(?:\{)/,/^(?:\})/,/^(?:")/,/^(?:(\r?\n)+)/,/^(?:\s)/,/^(?:$)/],conditions:{close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[30,31],inclusive:!1},callbackname:{rules:[27,28,29],inclusive:!1},href:{rules:[24,25],inclusive:!1},click:{rules:[33,34],inclusive:!1},vertex:{rules:[],inclusive:!1},dir:{rules:[44,45,46,47,48,49,50,51,52,53,54],inclusive:!1},acc_descr_multiline:{rules:[12,13],inclusive:!1},acc_descr:{rules:[10],inclusive:!1},acc_title:{rules:[8],inclusive:!1},string:{rules:[15,16],inclusive:!1},INITIAL:{rules:[0,5,6,7,9,11,14,17,18,19,20,21,22,23,26,32,35,36,37,38,39,40,41,42,43,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],inclusive:!0}}},t);function ie(){this.yy={}}return ne.lexer=re,ie.prototype=ne,ne.Parser=ie,new ie}();mo.parser=mo;const bo=mo,_o=(t,e)=>{var n,r;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&null!==t.match(/^\s*graph/))},xo=(t,e)=>{var n,r;return"dagre-d3"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&(null!==t.match(/^\s*graph/)||null!==t.match(/^\s*flowchart/)))};let vo,ko,wo=0,Eo=ar(),Co={},To=[],So={},Ao=[],Lo={},Bo={},No=0,Do=!0,Oo=[];const Mo=t=>Yt.sanitizeText(t,Eo),Io=function(t,e,n){ap.parseDirective(this,t,e,n)},Fo=function(t){const e=Object.keys(Co);for(const n of e)if(Co[n].id===t)return Co[n].domId;return t},$o=function(t,e,n,r,i,a,s={}){let o,c=t;void 0!==c&&0!==c.trim().length&&(void 0===Co[c]&&(Co[c]={id:c,domId:"flowchart-"+c+"-"+wo,styles:[],classes:[]}),wo++,void 0!==e?(Eo=ar(),o=Mo(e.trim()),'"'===o[0]&&'"'===o[o.length-1]&&(o=o.substring(1,o.length-1)),Co[c].text=o):void 0===Co[c].text&&(Co[c].text=t),void 0!==n&&(Co[c].type=n),null!=r&&r.forEach((function(t){Co[c].styles.push(t)})),null!=i&&i.forEach((function(t){Co[c].classes.push(t)})),void 0!==a&&(Co[c].dir=a),void 0===Co[c].props?Co[c].props=s:void 0!==s&&Object.assign(Co[c].props,s))},Ro=function(t,e,n,r){const i={start:t,end:e,type:void 0,text:""};void 0!==(r=n.text)&&(i.text=Mo(r.trim()),'"'===i.text[0]&&'"'===i.text[i.text.length-1]&&(i.text=i.text.substring(1,i.text.length-1))),void 0!==n&&(i.type=n.type,i.stroke=n.stroke,i.length=n.length),To.push(i)},Zo=function(t,e,n,r){let i,a;for(i=0;i<t.length;i++)for(a=0;a<e.length;a++)Ro(t[i],e[a],n,r)},Po=function(t,e){t.forEach((function(t){"default"===t?To.defaultInterpolate=e:To[t].interpolate=e}))},jo=function(t,e){t.forEach((function(t){"default"===t?To.defaultStyle=e:(-1===Gn.isSubstringInArray("fill",e)&&e.push("fill:none"),To[t].style=e)}))},Yo=function(t,e){void 0===So[t]&&(So[t]={id:t,styles:[],textStyles:[]}),null!=e&&e.forEach((function(e){if(e.match("color")){const n=e.replace("fill","bgFill").replace("color","fill");So[t].textStyles.push(n)}So[t].styles.push(e)}))},zo=function(t){vo=t,vo.match(/.*</)&&(vo="RL"),vo.match(/.*\^/)&&(vo="BT"),vo.match(/.*>/)&&(vo="LR"),vo.match(/.*v/)&&(vo="TB"),"TD"===vo&&(vo="TB")},Uo=function(t,e){t.split(",").forEach((function(t){let n=t;void 0!==Co[n]&&Co[n].classes.push(e),void 0!==Lo[n]&&Lo[n].classes.push(e)}))},Wo=function(t,e,n){t.split(",").forEach((function(t){void 0!==Co[t]&&(Co[t].link=Gn.formatUrl(e,Eo),Co[t].linkTarget=n)})),Uo(t,"clickable")},qo=function(t){return Bo[t]},Ho=function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){let r=Fo(t);if("loose"!==ar().securityLevel)return;if(void 0===e)return;let i=[];if("string"==typeof n){i=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<i.length;t++){let e=i[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),i[t]=e}}0===i.length&&i.push(t),void 0!==Co[t]&&(Co[t].haveCallback=!0,Oo.push((function(){const t=document.querySelector(`[id="${r}"]`);null!==t&&t.addEventListener("click",(function(){Gn.runFunc(e,...i)}),!1)})))}(t,e,n)})),Uo(t,"clickable")},Vo=function(t){Oo.forEach((function(e){e(t)}))},Go=function(){return vo.trim()},Xo=function(){return Co},Ko=function(){return To},Qo=function(){return So},Jo=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Oo.push(Jo);const tc=function(t="gen-1"){Co={},So={},To=[],Oo=[Jo],Ao=[],Lo={},No=0,Bo=[],Do=!0,ko=t,Dr()},ec=t=>{ko=t||"gen-2"},nc=function(){return"fill:#ffa;stroke: #f66; stroke-width: 3px; stroke-dasharray: 5, 5;fill:#ffa;stroke: #666;"},rc=function(t,e,n){let r=t.trim(),i=n;t===n&&n.match(/\s/)&&(r=void 0);let a=[];const{nodeList:s,dir:o}=function(t){const e={boolean:{},number:{},string:{}},n=[];let r;return{nodeList:t.filter((function(t){const i=typeof t;return t.stmt&&"dir"===t.stmt?(r=t.value,!1):""!==t.trim()&&(i in e?!e[i].hasOwnProperty(t)&&(e[i][t]=!0):!n.includes(t)&&n.push(t))})),dir:r}}(a.concat.apply(a,e));if(a=s,"gen-1"===ko)for(let l=0;l<a.length;l++)a[l]=Fo(a[l]);r=r||"subGraph"+No,i=i||"",i=Mo(i),No+=1;const c={id:r,nodes:a,title:i.trim(),classes:[],dir:o};return Nt.info("Adding",c.id,c.nodes,c.dir),c.nodes=fc(c,Ao).nodes,Ao.push(c),Lo[r]=c,r},ic=function(t){for(const[e,n]of Ao.entries())if(n.id===t)return e;return-1};let ac=-1;const sc=[],oc=function(t,e){const n=Ao[e].nodes;if(ac+=1,ac>2e3)return;if(sc[ac]=e,Ao[e].id===t)return{result:!0,count:0};let r=0,i=1;for(;r<n.length;){const e=ic(n[r]);if(e>=0){const n=oc(t,e);if(n.result)return{result:!0,count:i+n.count};i+=n.count}r+=1}return{result:!1,count:i}},cc=function(t){return sc[t]},lc=function(){ac=-1,Ao.length>0&&oc("none",Ao.length-1)},hc=function(){return Ao},uc=()=>!!Do&&(Do=!1,!0),dc=(t,e)=>{const n=(t=>{const e=t.trim();let n=e.slice(0,-1),r="arrow_open";switch(e.slice(-1)){case"x":r="arrow_cross","x"===e[0]&&(r="double_"+r,n=n.slice(1));break;case">":r="arrow_point","<"===e[0]&&(r="double_"+r,n=n.slice(1));break;case"o":r="arrow_circle","o"===e[0]&&(r="double_"+r,n=n.slice(1))}let i="normal",a=n.length-1;"="===n[0]&&(i="thick");let s=((t,e)=>{const n=e.length;let r=0;for(let i=0;i<n;++i)e[i]===t&&++r;return r})(".",n);return s&&(i="dotted",a=s),{type:r,stroke:i,length:a}})(t);let r;if(e){if(r=(t=>{let e=t.trim(),n="arrow_open";switch(e[0]){case"<":n="arrow_point",e=e.slice(1);break;case"x":n="arrow_cross",e=e.slice(1);break;case"o":n="arrow_circle",e=e.slice(1)}let r="normal";return e.includes("=")&&(r="thick"),e.includes(".")&&(r="dotted"),{type:n,stroke:r}})(e),r.stroke!==n.stroke)return{type:"INVALID",stroke:"INVALID"};if("arrow_open"===r.type)r.type=n.type;else{if(r.type!==n.type)return{type:"INVALID",stroke:"INVALID"};r.type="double_"+r.type}return"double_arrow"===r.type&&(r.type="double_arrow_point"),r.length=n.length,r}return n},pc=(t,e)=>{let n=!1;return t.forEach((t=>{t.nodes.indexOf(e)>=0&&(n=!0)})),n},fc=(t,e)=>{const n=[];return t.nodes.forEach(((r,i)=>{pc(e,r)||n.push(t.nodes[i])})),{nodes:n}},gc={firstGraph:uc},yc={parseDirective:Io,defaultConfig:()=>Kn.flowchart,setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,addVertex:$o,lookUpDomId:Fo,addLink:Zo,updateLinkInterpolate:Po,updateLink:jo,addClass:Yo,setDirection:zo,setClass:Uo,setTooltip:function(t,e){t.split(",").forEach((function(t){void 0!==e&&(Bo["gen-1"===ko?Fo(t):t]=Mo(e))}))},getTooltip:qo,setClickEvent:Ho,setLink:Wo,bindFunctions:Vo,getDirection:Go,getVertices:Xo,getEdges:Ko,getClasses:Qo,clear:tc,setGen:ec,defaultStyle:nc,addSubGraph:rc,getDepthFirstPos:cc,indexNodes:lc,getSubGraphs:hc,destructLink:dc,lex:gc,exists:pc,makeUniq:fc,setDiagramTitle:$r,getDiagramTitle:Rr},mc=Object.freeze(Object.defineProperty({__proto__:null,addClass:Yo,addLink:Zo,addSingleLink:Ro,addSubGraph:rc,addVertex:$o,bindFunctions:Vo,clear:tc,default:yc,defaultStyle:nc,destructLink:dc,firstGraph:uc,getClasses:Qo,getDepthFirstPos:cc,getDirection:Go,getEdges:Ko,getSubGraphs:hc,getTooltip:qo,getVertices:Xo,indexNodes:lc,lex:gc,lookUpDomId:Fo,parseDirective:Io,setClass:Uo,setClickEvent:Ho,setDirection:zo,setGen:ec,setLink:Wo,updateLink:jo,updateLinkInterpolate:Po},Symbol.toStringTag,{value:"Module"}));const bc={},_c=function(t){const e=Object.keys(t);for(const n of e)bc[n]=t[n]},xc={},vc=function(t,e,n,r,i,a){const s=r.select(`[id="${n}"]`);Object.keys(t).forEach((function(n){const r=t[n];let o="default";r.classes.length>0&&(o=r.classes.join(" "));const c=Mn(r.styles);let l,h=void 0!==r.text?r.text:r.id;if(Pt(ar().flowchart.htmlLabels)){const t={label:h.replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`))};l=(0,kt.a)(s,t).node(),l.parentNode.removeChild(l)}else{const t=i.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",c.labelStyle.replace("color:","fill:"));const e=h.split(Yt.lineBreakRegex);for(const n of e){const e=i.createElementNS("http://www.w3.org/2000/svg","tspan");e.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),e.setAttribute("dy","1em"),e.setAttribute("x","1"),e.textContent=n,t.appendChild(e)}l=t}let u=0,d="";switch(r.type){case"round":u=5,d="rect";break;case"square":case"group":default:d="rect";break;case"diamond":d="question";break;case"hexagon":d="hexagon";break;case"odd":case"odd_right":d="rect_left_inv_arrow";break;case"lean_right":d="lean_right";break;case"lean_left":d="lean_left";break;case"trapezoid":d="trapezoid";break;case"inv_trapezoid":d="inv_trapezoid";break;case"circle":d="circle";break;case"ellipse":d="ellipse";break;case"stadium":d="stadium";break;case"subroutine":d="subroutine";break;case"cylinder":d="cylinder";break;case"doublecircle":d="doublecircle"}e.setNode(r.id,{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,link:r.link,linkTarget:r.linkTarget,tooltip:a.db.getTooltip(r.id)||"",domId:a.db.lookUpDomId(r.id),haveCallback:r.haveCallback,width:"group"===r.type?500:void 0,dir:r.dir,type:r.type,props:r.props,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,domId:a.db.lookUpDomId(r.id),width:"group"===r.type?500:void 0,type:r.type,dir:r.dir,props:r.props,padding:ar().flowchart.padding})}))},kc=function(t,e,n){Nt.info("abc78 edges = ",t);let r,i,a=0,s={};if(void 0!==t.defaultStyle){const e=Mn(t.defaultStyle);r=e.style,i=e.labelStyle}t.forEach((function(n){a++;var c="L-"+n.start+"-"+n.end;void 0===s[c]?(s[c]=0,Nt.info("abc78 new entry",c,s[c])):(s[c]++,Nt.info("abc78 new entry",c,s[c]));let l=c+"-"+s[c];Nt.info("abc78 new link id to be used is",c,l,s[c]);var h="LS-"+n.start,u="LE-"+n.end;const d={style:"",labelStyle:""};switch(d.minlen=n.length||1,"arrow_open"===n.type?d.arrowhead="none":d.arrowhead="normal",d.arrowTypeStart="arrow_open",d.arrowTypeEnd="arrow_open",n.type){case"double_arrow_cross":d.arrowTypeStart="arrow_cross";case"arrow_cross":d.arrowTypeEnd="arrow_cross";break;case"double_arrow_point":d.arrowTypeStart="arrow_point";case"arrow_point":d.arrowTypeEnd="arrow_point";break;case"double_arrow_circle":d.arrowTypeStart="arrow_circle";case"arrow_circle":d.arrowTypeEnd="arrow_circle"}let p="",f="";switch(n.stroke){case"normal":p="fill:none;",void 0!==r&&(p=r),void 0!==i&&(f=i),d.thickness="normal",d.pattern="solid";break;case"dotted":d.thickness="normal",d.pattern="dotted",d.style="fill:none;stroke-width:2px;stroke-dasharray:3;";break;case"thick":d.thickness="thick",d.pattern="solid",d.style="stroke-width: 3.5px;fill:none;"}if(void 0!==n.style){const t=Mn(n.style);p=t.style,f=t.labelStyle}d.style=d.style+=p,d.labelStyle=d.labelStyle+=f,void 0!==n.interpolate?d.curve=Dn(n.interpolate,o.c_6):void 0!==t.defaultInterpolate?d.curve=Dn(t.defaultInterpolate,o.c_6):d.curve=Dn(xc.curve,o.c_6),void 0===n.text?void 0!==n.style&&(d.arrowheadStyle="fill: #333"):(d.arrowheadStyle="fill: #333",d.labelpos="c"),d.labelType="text",d.label=n.text.replace(Yt.lineBreakRegex,"\n"),void 0===n.style&&(d.style=d.style||"stroke: #333; stroke-width: 1.5px;fill:none;"),d.labelStyle=d.labelStyle.replace("color:","fill:"),d.id=l,d.classes="flowchart-link "+h+" "+u,e.setEdge(n.start,n.end,d,a)}))},wc={setConf:function(t){const e=Object.keys(t);for(const n of e)xc[n]=t[n]},addVertices:vc,addEdges:kc,getClasses:function(t,e){Nt.info("Extracting classes"),e.db.clear();try{return e.parse(t),e.db.getClasses()}catch(n){return}},draw:function(t,e,n,r){Nt.info("Drawing flowchart"),r.db.clear(),yc.setGen("gen-2"),r.parser.parse(t);let i=r.db.getDirection();void 0===i&&(i="TD");const{securityLevel:a,flowchart:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;let h;"sandbox"===a&&(h=(0,o.Ys)("#i"+e));const u="sandbox"===a?(0,o.Ys)(h.nodes()[0].contentDocument.body):(0,o.Ys)("body"),d="sandbox"===a?h.nodes()[0].contentDocument:document,p=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:i,nodesep:c,ranksep:l,marginx:0,marginy:0}).setDefaultEdgeLabel((function(){return{}}));let f;const g=r.db.getSubGraphs();Nt.info("Subgraphs - ",g);for(let o=g.length-1;o>=0;o--)f=g[o],Nt.info("Subgraph - ",f),r.db.addVertex(f.id,f.title,"group",void 0,f.classes,f.dir);const y=r.db.getVertices(),m=r.db.getEdges();Nt.info("Edges",m);let b=0;for(b=g.length-1;b>=0;b--){f=g[b],(0,o.td_)("cluster").append("text");for(let t=0;t<f.nodes.length;t++)Nt.info("Setting up subgraphs",f.nodes[t],f.id),p.setParent(f.nodes[t],f.id)}vc(y,p,e,u,d,r),kc(m,p);const _=u.select(`[id="${e}"]`),x=u.select("#"+e+" g");if(qs(x,p,["point","circle","cross"],"flowchart",e),Gn.insertTitle(_,"flowchartTitleText",s.titleTopMargin,r.db.getDiagramTitle()),pr(p,_,s.diagramPadding,s.useMaxWidth),r.db.indexNodes("subGraph"+b),!s.htmlLabels){const t=d.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of t){const t=e.getBBox(),n=d.createElementNS("http://www.w3.org/2000/svg","rect");n.setAttribute("rx",0),n.setAttribute("ry",0),n.setAttribute("width",t.width),n.setAttribute("height",t.height),e.insertBefore(n,e.firstChild)}}Object.keys(y).forEach((function(t){const n=y[t];if(n.link){const r=(0,o.Ys)("#"+e+' [id="'+t+'"]');if(r){const t=d.createElementNS("http://www.w3.org/2000/svg","a");t.setAttributeNS("http://www.w3.org/2000/svg","class",n.classes.join(" ")),t.setAttributeNS("http://www.w3.org/2000/svg","href",n.link),t.setAttributeNS("http://www.w3.org/2000/svg","rel","noopener"),"sandbox"===a?t.setAttributeNS("http://www.w3.org/2000/svg","target","_top"):n.linkTarget&&t.setAttributeNS("http://www.w3.org/2000/svg","target",n.linkTarget);const e=r.insert((function(){return t}),":first-child"),i=r.select(".label-container");i&&e.append((function(){return i.node()}));const s=r.select(".label");s&&e.append((function(){return s.node()}))}}}))}};var Ec=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,21],d=[1,22],p=[1,23],f=[1,24],g=[1,25],y=[1,26],m=[1,27],b=[1,29],_=[1,31],x=[1,34],v=[5,7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],k={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,gantt:5,document:6,EOF:7,line:8,SPACE:9,statement:10,NL:11,dateFormat:12,inclusiveEndDates:13,topAxis:14,axisFormat:15,tickInterval:16,excludes:17,includes:18,todayMarker:19,title:20,acc_title:21,acc_title_value:22,acc_descr:23,acc_descr_value:24,acc_descr_multiline_value:25,section:26,clickStatement:27,taskTxt:28,taskData:29,openDirective:30,typeDirective:31,closeDirective:32,":":33,argDirective:34,click:35,callbackname:36,callbackargs:37,href:38,clickStatementDebug:39,open_directive:40,type_directive:41,arg_directive:42,close_directive:43,$accept:0,$end:1},terminals_:{2:"error",5:"gantt",7:"EOF",9:"SPACE",11:"NL",12:"dateFormat",13:"inclusiveEndDates",14:"topAxis",15:"axisFormat",16:"tickInterval",17:"excludes",18:"includes",19:"todayMarker",20:"title",21:"acc_title",22:"acc_title_value",23:"acc_descr",24:"acc_descr_value",25:"acc_descr_multiline_value",26:"section",28:"taskTxt",29:"taskData",33:":",35:"click",36:"callbackname",37:"callbackargs",38:"href",40:"open_directive",41:"type_directive",42:"arg_directive",43:"close_directive"},productions_:[0,[3,2],[3,3],[6,0],[6,2],[8,2],[8,1],[8,1],[8,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,2],[10,2],[10,1],[10,1],[10,1],[10,2],[10,1],[4,4],[4,6],[27,2],[27,3],[27,3],[27,4],[27,3],[27,4],[27,2],[39,2],[39,3],[39,3],[39,4],[39,3],[39,4],[39,2],[30,1],[31,1],[34,1],[32,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 2:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 9:r.setDateFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 10:r.enableInclusiveEndDates(),this.$=a[o].substr(18);break;case 11:r.TopAxis(),this.$=a[o].substr(8);break;case 12:r.setAxisFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 13:r.setTickInterval(a[o].substr(13)),this.$=a[o].substr(13);break;case 14:r.setExcludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 15:r.setIncludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 16:r.setTodayMarker(a[o].substr(12)),this.$=a[o].substr(12);break;case 17:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 18:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 19:case 20:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 23:r.addTask(a[o-1],a[o]),this.$="task";break;case 27:this.$=a[o-1],r.setClickEvent(a[o-1],a[o],null);break;case 28:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 29:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],null),r.setLink(a[o-2],a[o]);break;case 30:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setLink(a[o-3],a[o]);break;case 31:this.$=a[o-2],r.setClickEvent(a[o-2],a[o],null),r.setLink(a[o-2],a[o-1]);break;case 32:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-1],a[o]),r.setLink(a[o-3],a[o-2]);break;case 33:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 34:case 40:this.$=a[o-1]+" "+a[o];break;case 35:case 36:case 38:this.$=a[o-2]+" "+a[o-1]+" "+a[o];break;case 37:case 39:this.$=a[o-3]+" "+a[o-2]+" "+a[o-1]+" "+a[o];break;case 41:r.parseDirective("%%{","open_directive");break;case 42:r.parseDirective(a[o],"type_directive");break;case 43:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 44:r.parseDirective("}%%","close_directive","gantt")}},table:[{3:1,4:2,5:n,30:4,40:r},{1:[3]},{3:6,4:2,5:n,30:4,40:r},e(i,[2,3],{6:7}),{31:8,41:[1,9]},{41:[2,41]},{1:[2,1]},{4:30,7:[1,10],8:11,9:[1,12],10:13,11:[1,14],12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},{32:32,33:[1,33],43:x},e([33,43],[2,42]),e(i,[2,8],{1:[2,2]}),e(i,[2,4]),{4:30,10:35,12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,9]),e(i,[2,10]),e(i,[2,11]),e(i,[2,12]),e(i,[2,13]),e(i,[2,14]),e(i,[2,15]),e(i,[2,16]),e(i,[2,17]),{22:[1,36]},{24:[1,37]},e(i,[2,20]),e(i,[2,21]),e(i,[2,22]),{29:[1,38]},e(i,[2,24]),{36:[1,39],38:[1,40]},{11:[1,41]},{34:42,42:[1,43]},{11:[2,44]},e(i,[2,5]),e(i,[2,18]),e(i,[2,19]),e(i,[2,23]),e(i,[2,27],{37:[1,44],38:[1,45]}),e(i,[2,33],{36:[1,46]}),e(v,[2,25]),{32:47,43:x},{43:[2,43]},e(i,[2,28],{38:[1,48]}),e(i,[2,29]),e(i,[2,31],{37:[1,49]}),{11:[1,50]},e(i,[2,30]),e(i,[2,32]),e(v,[2,26])],defaultActions:{5:[2,41],6:[2,1],34:[2,44],43:[2,43]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),40;case 1:return this.begin("type_directive"),41;case 2:return this.popState(),this.begin("arg_directive"),33;case 3:return this.popState(),this.popState(),43;case 4:return 42;case 5:return this.begin("acc_title"),21;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),23;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 20:case 23:case 26:case 29:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:case 13:case 14:case 16:case 17:case 18:break;case 15:return 11;case 19:this.begin("href");break;case 21:return 38;case 22:this.begin("callbackname");break;case 24:this.popState(),this.begin("callbackargs");break;case 25:return 36;case 27:return 37;case 28:this.begin("click");break;case 30:return 35;case 31:return 5;case 32:return 12;case 33:return 13;case 34:return 14;case 35:return 15;case 36:return 16;case 37:return 18;case 38:return 17;case 39:return 19;case 40:return"date";case 41:return 20;case 42:return"accDescription";case 43:return 26;case 44:return 28;case 45:return 29;case 46:return 33;case 47:return 7;case 48:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%(?!\{)*[^\n]*)/i,/^(?:[^\}]%%*[^\n]*)/i,/^(?:%%*[^\n]*[\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:href[\s]+["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:call[\s]+)/i,/^(?:\([\s]*\))/i,/^(?:\()/i,/^(?:[^(]*)/i,/^(?:\))/i,/^(?:[^)]*)/i,/^(?:click[\s]+)/i,/^(?:[\s\n])/i,/^(?:[^\s\n]*)/i,/^(?:gantt\b)/i,/^(?:dateFormat\s[^#\n;]+)/i,/^(?:inclusiveEndDates\b)/i,/^(?:topAxis\b)/i,/^(?:axisFormat\s[^#\n;]+)/i,/^(?:tickInterval\s[^#\n;]+)/i,/^(?:includes\s[^#\n;]+)/i,/^(?:excludes\s[^#\n;]+)/i,/^(?:todayMarker\s[^\n;]+)/i,/^(?:\d\d\d\d-\d\d-\d\d\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accDescription\s[^#\n;]+)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[26,27],inclusive:!1},callbackname:{rules:[23,24,25],inclusive:!1},href:{rules:[20,21],inclusive:!1},click:{rules:[29,30],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,22,28,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Ec.parser=Ec;const Cc=Ec,Tc=t=>null!==t.match(/^\s*gantt/);a().extend(Et()),a().extend(Tt()),a().extend(At());let Sc,Ac="",Lc="",Bc="",Nc=[],Dc=[],Oc={},Mc=[],Ic=[],Fc="";const $c=["active","done","crit","milestone"];let Rc=[],Zc=!1,Pc=!1,jc=0;const Yc=function(t,e,n,r){return!r.includes(t.format(e.trim()))&&(!!(t.isoWeekday()>=6&&n.includes("weekends"))||(!!n.includes(t.format("dddd").toLowerCase())||n.includes(t.format(e.trim()))))},zc=function(t,e,n,r){if(!n.length||t.manualEndTime)return;let i,s;i=t.startTime instanceof Date?a()(t.startTime):a()(t.startTime,e,!0),i=i.add(1,"d"),s=t.endTime instanceof Date?a()(t.endTime):a()(t.endTime,e,!0);const[o,c]=Uc(i,s,e,n,r);t.endTime=o.toDate(),t.renderEndTime=c},Uc=function(t,e,n,r,i){let a=!1,s=null;for(;t<=e;)a||(s=e.toDate()),a=Yc(t,n,r,i),a&&(e=e.add(1,"d")),t=t.add(1,"d");return[e,s]},Wc=function(t,e,n){n=n.trim();const r=/^after\s+([\d\w- ]+)/.exec(n.trim());if(null!==r){let t=null;if(r[1].split(" ").forEach((function(e){let n=tl(e);void 0!==n&&(t?n.endTime>t.endTime&&(t=n):t=n)})),t)return t.endTime;{const t=new Date;return t.setHours(0,0,0,0),t}}let i=a()(n,e.trim(),!0);if(i.isValid())return i.toDate();{Nt.debug("Invalid date:"+n),Nt.debug("With date format:"+e.trim());const t=new Date(n);if(void 0===t||isNaN(t.getTime()))throw new Error("Invalid date:"+n);return t}},qc=function(t){const e=/^(\d+(?:\.\d+)?)([Mdhmswy]|ms)$/.exec(t.trim());return null!==e?[Number.parseFloat(e[1]),e[2]]:[NaN,"ms"]},Hc=function(t,e,n,r=!1){n=n.trim();let i=a()(n,e.trim(),!0);if(i.isValid())return r&&(i=i.add(1,"d")),i.toDate();let s=a()(t);const[o,c]=qc(n);if(!Number.isNaN(o)){const t=s.add(o,c);t.isValid()&&(s=t)}return s.toDate()};let Vc=0;const Gc=function(t){return void 0===t?(Vc+=1,"task"+Vc):t};let Xc,Kc,Qc=[];const Jc={},tl=function(t){const e=Jc[t];return Qc[e]},el=function(){const t=function(t){const e=Qc[t];let n="";switch(Qc[t].raw.startTime.type){case"prevTaskEnd":{const t=tl(e.prevTaskId);e.startTime=t.endTime;break}case"getStartDate":n=Wc(0,Ac,Qc[t].raw.startTime.startData),n&&(Qc[t].startTime=n)}return Qc[t].startTime&&(Qc[t].endTime=Hc(Qc[t].startTime,Ac,Qc[t].raw.endTime.data,Zc),Qc[t].endTime&&(Qc[t].processed=!0,Qc[t].manualEndTime=a()(Qc[t].raw.endTime.data,"YYYY-MM-DD",!0).isValid(),zc(Qc[t],Ac,Dc,Nc))),Qc[t].processed};let e=!0;for(const[n,r]of Qc.entries())t(n),e=e&&r.processed;return e},nl=function(t,e){t.split(",").forEach((function(t){let n=tl(t);void 0!==n&&n.classes.push(e)}))},rl=function(t,e){Rc.push((function(){const n=document.querySelector(`[id="${t}"]`);null!==n&&n.addEventListener("click",(function(){e()}))}),(function(){const n=document.querySelector(`[id="${t}-text"]`);null!==n&&n.addEventListener("click",(function(){e()}))}))},il={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gantt,clear:function(){Mc=[],Ic=[],Fc="",Rc=[],Vc=0,Xc=void 0,Kc=void 0,Qc=[],Ac="",Lc="",Sc=void 0,Bc="",Nc=[],Dc=[],Zc=!1,Pc=!1,jc=0,Oc={},Dr()},setDateFormat:function(t){Ac=t},getDateFormat:function(){return Ac},enableInclusiveEndDates:function(){Zc=!0},endDatesAreInclusive:function(){return Zc},enableTopAxis:function(){Pc=!0},topAxisEnabled:function(){return Pc},setAxisFormat:function(t){Lc=t},getAxisFormat:function(){return Lc},setTickInterval:function(t){Sc=t},getTickInterval:function(){return Sc},setTodayMarker:function(t){Bc=t},getTodayMarker:function(){return Bc},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){Fc=t,Mc.push(t)},getSections:function(){return Mc},getTasks:function(){let t=el();let e=0;for(;!t&&e<10;)t=el(),e++;return Ic=Qc,Ic},addTask:function(t,e){const n={section:Fc,type:Fc,processed:!1,manualEndTime:!1,renderEndTime:null,raw:{data:e},task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();switch(r.length){case 1:i.id=Gc(),i.startTime={type:"prevTaskEnd",id:t},i.endTime={data:r[0]};break;case 2:i.id=Gc(),i.startTime={type:"getStartDate",startData:r[0]},i.endTime={data:r[1]};break;case 3:i.id=Gc(r[0]),i.startTime={type:"getStartDate",startData:r[1]},i.endTime={data:r[2]}}return i}(Kc,e);n.raw.startTime=r.startTime,n.raw.endTime=r.endTime,n.id=r.id,n.prevTaskId=Kc,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,n.order=jc,jc++;const i=Qc.push(n);Kc=n.id,Jc[n.id]=i-1},findTaskById:tl,addTaskOrg:function(t,e){const n={section:Fc,type:Fc,description:t,task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();let s="";switch(r.length){case 1:i.id=Gc(),i.startTime=t.endTime,s=r[0];break;case 2:i.id=Gc(),i.startTime=Wc(0,Ac,r[0]),s=r[1];break;case 3:i.id=Gc(r[0]),i.startTime=Wc(0,Ac,r[1]),s=r[2]}return s&&(i.endTime=Hc(i.startTime,Ac,s,Zc),i.manualEndTime=a()(s,"YYYY-MM-DD",!0).isValid(),zc(i,Ac,Dc,Nc)),i}(Xc,e);n.startTime=r.startTime,n.endTime=r.endTime,n.id=r.id,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,Xc=n,Ic.push(n)},setIncludes:function(t){Nc=t.toLowerCase().split(/[\s,]+/)},getIncludes:function(){return Nc},setExcludes:function(t){Dc=t.toLowerCase().split(/[\s,]+/)},getExcludes:function(){return Dc},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){if("loose"!==ar().securityLevel)return;if(void 0===e)return;let r=[];if("string"==typeof n){r=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<r.length;t++){let e=r[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),r[t]=e}}0===r.length&&r.push(t),void 0!==tl(t)&&rl(t,(()=>{Gn.runFunc(e,...r)}))}(t,e,n)})),nl(t,"clickable")},setLink:function(t,e){let n=e;"loose"!==ar().securityLevel&&(n=(0,s.N)(e)),t.split(",").forEach((function(t){void 0!==tl(t)&&(rl(t,(()=>{window.open(n,"_self")})),Oc[t]=n)})),nl(t,"clickable")},getLinks:function(){return Oc},bindFunctions:function(t){Rc.forEach((function(e){e(t)}))},parseDuration:qc,isInvalidDate:Yc};function al(t,e,n){let r=!0;for(;r;)r=!1,n.forEach((function(n){const i=new RegExp("^\\s*"+n+"\\s*$");t[0].match(i)&&(e[n]=!0,t.shift(1),r=!0)}))}let sl;const ol={setConf:function(){Nt.debug("Something is calling, setConf, remove the call")},draw:function(t,e,n,r){const i=ar().gantt,s=ar().securityLevel;let c;"sandbox"===s&&(c=(0,o.Ys)("#i"+e));const l="sandbox"===s?(0,o.Ys)(c.nodes()[0].contentDocument.body):(0,o.Ys)("body"),h="sandbox"===s?c.nodes()[0].contentDocument:document,u=h.getElementById(e);sl=u.parentElement.offsetWidth,void 0===sl&&(sl=1200),void 0!==i.useWidth&&(sl=i.useWidth);const d=r.db.getTasks(),p=d.length*(i.barHeight+i.barGap)+2*i.topPadding;u.setAttribute("viewBox","0 0 "+sl+" "+p);const f=l.select(`[id="${e}"]`),g=(0,o.Xf)().domain([(0,o.VV$)(d,(function(t){return t.startTime})),(0,o.Fp7)(d,(function(t){return t.endTime}))]).rangeRound([0,sl-i.leftPadding-i.rightPadding]);let y=[];for(const a of d)y.push(a.type);const m=y;function b(t,e){return function(t){let e=t.length;const n={};for(;e;)n[t[--e]]=(n[t[e]]||0)+1;return n}(e)[t]||0}y=function(t){const e={},n=[];for(let r=0,i=t.length;r<i;++r)Object.prototype.hasOwnProperty.call(e,t[r])||(e[t[r]]=!0,n.push(t[r]));return n}(y),d.sort((function(t,e){const n=t.startTime,r=e.startTime;let i=0;return n>r?i=1:n<r&&(i=-1),i})),function(t,n,s){const c=i.barHeight,l=c+i.barGap,u=i.topPadding,d=i.leftPadding;(0,o.BYU)().domain([0,y.length]).range(["#00B9FA","#F95002"]).interpolate(o.JHv);(function(t,e,n,s,o,c,l,h){const u=c.reduce(((t,{startTime:e})=>t?Math.min(t,e):e),0),d=c.reduce(((t,{endTime:e})=>t?Math.max(t,e):e),0),p=r.db.getDateFormat();if(!u||!d)return;const y=[];let m=null,b=a()(u);for(;b.valueOf()<=d;)r.db.isInvalidDate(b,p,l,h)?m?m.end=b:m={start:b,end:b}:m&&(y.push(m),m=null),b=b.add(1,"d");f.append("g").selectAll("rect").data(y).enter().append("rect").attr("id",(function(t){return"exclude-"+t.start.format("YYYY-MM-DD")})).attr("x",(function(t){return g(t.start)+n})).attr("y",i.gridLineStartPadding).attr("width",(function(t){const e=t.end.add(1,"day");return g(e)-g(t.start)})).attr("height",o-e-i.gridLineStartPadding).attr("transform-origin",(function(e,r){return(g(e.start)+n+.5*(g(e.end)-g(e.start))).toString()+"px "+(r*t+.5*o).toString()+"px"})).attr("class","exclude-range")})(l,u,d,0,s,t,r.db.getExcludes(),r.db.getIncludes()),function(t,e,n,a){let s=(0,o.LLu)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));const c=/^([1-9]\d*)(minute|hour|day|week|month)$/.exec(r.db.getTickInterval()||i.tickInterval);if(null!==c){const t=c[1];switch(c[2]){case"minute":s.ticks(o.Z_i.every(t));break;case"hour":s.ticks(o.WQD.every(t));break;case"day":s.ticks(o.rr1.every(t));break;case"week":s.ticks(o.NGh.every(t));break;case"month":s.ticks(o.F0B.every(t))}}if(f.append("g").attr("class","grid").attr("transform","translate("+t+", "+(a-50)+")").call(s).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10).attr("dy","1em"),r.db.topAxisEnabled()||i.topAxis){let n=(0,o.F5q)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));if(null!==c){const t=c[1];switch(c[2]){case"minute":n.ticks(o.Z_i.every(t));break;case"hour":n.ticks(o.WQD.every(t));break;case"day":n.ticks(o.rr1.every(t));break;case"week":n.ticks(o.NGh.every(t));break;case"month":n.ticks(o.F0B.every(t))}}f.append("g").attr("class","grid").attr("transform","translate("+t+", "+e+")").call(n).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10)}}(d,u,0,s),function(t,n,a,s,c,l,h){f.append("g").selectAll("rect").data(t).enter().append("rect").attr("x",0).attr("y",(function(t,e){return t.order*n+a-2})).attr("width",(function(){return h-i.rightPadding/2})).attr("height",n).attr("class",(function(t){for(const[e,n]of y.entries())if(t.type===n)return"section section"+e%i.numberSectionStyles;return"section section0"}));const u=f.append("g").selectAll("rect").data(t).enter(),d=r.db.getLinks();u.append("rect").attr("id",(function(t){return t.id})).attr("rx",3).attr("ry",3).attr("x",(function(t){return t.milestone?g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))-.5*c:g(t.startTime)+s})).attr("y",(function(t,e){return t.order*n+a})).attr("width",(function(t){return t.milestone?c:g(t.renderEndTime||t.endTime)-g(t.startTime)})).attr("height",c).attr("transform-origin",(function(t,e){return e=t.order,(g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))).toString()+"px "+(e*n+a+.5*c).toString()+"px"})).attr("class",(function(t){const e="task";let n="";t.classes.length>0&&(n=t.classes.join(" "));let r=0;for(const[s,o]of y.entries())t.type===o&&(r=s%i.numberSectionStyles);let a="";return t.active?t.crit?a+=" activeCrit":a=" active":t.done?a=t.crit?" doneCrit":" done":t.crit&&(a+=" crit"),0===a.length&&(a=" task"),t.milestone&&(a=" milestone "+a),a+=r,a+=" "+n,e+a})),u.append("text").attr("id",(function(t){return t.id+"-text"})).text((function(t){return t.task})).attr("font-size",i.fontSize).attr("x",(function(t){let e=g(t.startTime),n=g(t.renderEndTime||t.endTime);t.milestone&&(e+=.5*(g(t.endTime)-g(t.startTime))-.5*c),t.milestone&&(n=e+c);const r=this.getBBox().width;return r>n-e?n+r+1.5*i.leftPadding>h?e+s-5:n+s+5:(n-e)/2+e+s})).attr("y",(function(t,e){return t.order*n+i.barHeight/2+(i.fontSize/2-2)+a})).attr("text-height",c).attr("class",(function(t){const e=g(t.startTime);let n=g(t.endTime);t.milestone&&(n=e+c);const r=this.getBBox().width;let a="";t.classes.length>0&&(a=t.classes.join(" "));let s=0;for(const[c,l]of y.entries())t.type===l&&(s=c%i.numberSectionStyles);let o="";return t.active&&(o=t.crit?"activeCritText"+s:"activeText"+s),t.done?o=t.crit?o+" doneCritText"+s:o+" doneText"+s:t.crit&&(o=o+" critText"+s),t.milestone&&(o+=" milestoneText"),r>n-e?n+r+1.5*i.leftPadding>h?a+" taskTextOutsideLeft taskTextOutside"+s+" "+o:a+" taskTextOutsideRight taskTextOutside"+s+" "+o+" width-"+r:a+" taskText taskText"+s+" "+o+" width-"+r}));if("sandbox"===ar().securityLevel){let t;t=(0,o.Ys)("#i"+e);const n=t.nodes()[0].contentDocument;u.filter((function(t){return void 0!==d[t.id]})).each((function(t){var e=n.querySelector("#"+t.id),r=n.querySelector("#"+t.id+"-text");const i=e.parentNode;var a=n.createElement("a");a.setAttribute("xlink:href",d[t.id]),a.setAttribute("target","_top"),i.appendChild(a),a.appendChild(e),a.appendChild(r)}))}}(t,l,u,d,c,0,n),function(t,e){const n=[];let r=0;for(const[i,a]of y.entries())n[i]=[a,b(a,m)];f.append("g").selectAll("text").data(n).enter().append((function(t){const e=t[0].split(Yt.lineBreakRegex),n=-(e.length-1)/2,r=h.createElementNS("http://www.w3.org/2000/svg","text");r.setAttribute("dy",n+"em");for(const[i,a]of e.entries()){const t=h.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttribute("alignment-baseline","central"),t.setAttribute("x","10"),i>0&&t.setAttribute("dy","1em"),t.textContent=a,r.appendChild(t)}return r})).attr("x",10).attr("y",(function(i,a){if(!(a>0))return i[1]*t/2+e;for(let s=0;s<a;s++)return r+=n[a-1][1],i[1]*t/2+r*t+e})).attr("font-size",i.sectionFontSize).attr("font-size",i.sectionFontSize).attr("class",(function(t){for(const[e,n]of y.entries())if(t[0]===n)return"sectionTitle sectionTitle"+e%i.numberSectionStyles;return"sectionTitle"}))}(l,u),function(t,e,n,a){const s=r.db.getTodayMarker();if("off"===s)return;const o=f.append("g").attr("class","today"),c=new Date,l=o.append("line");l.attr("x1",g(c)+t).attr("x2",g(c)+t).attr("y1",i.titleTopMargin).attr("y2",a-i.titleTopMargin).attr("class","today"),""!==s&&l.attr("style",s.replace(/,/g,";"))}(d,0,0,s)}(d,sl,p),dr(f,p,sl,i.useMaxWidth),f.append("text").text(r.db.getDiagramTitle()).attr("x",sl/2).attr("y",i.titleTopMargin).attr("class","titleText")}};var cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[6,9,10],r={trace:function(){},yy:{},symbols_:{error:2,start:3,info:4,document:5,EOF:6,line:7,statement:8,NL:9,showInfo:10,$accept:0,$end:1},terminals_:{2:"error",4:"info",6:"EOF",9:"NL",10:"showInfo"},productions_:[0,[3,3],[5,0],[5,2],[7,1],[7,1],[8,1]],performAction:function(t,e,n,r,i,a,s){switch(a.length,i){case 1:return r;case 4:break;case 6:r.setInfo(!0)}},table:[{3:1,4:[1,2]},{1:[3]},e(n,[2,2],{5:3}),{6:[1,4],7:5,8:6,9:[1,7],10:[1,8]},{1:[2,1]},e(n,[2,3]),e(n,[2,4]),e(n,[2,5]),e(n,[2,6])],defaultActions:{4:[2,1]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},i=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 4;case 1:return 9;case 2:return"space";case 3:return 10;case 4:return 6;case 5:return"TXT"}},rules:[/^(?:info\b)/i,/^(?:[\s\n\r]+)/i,/^(?:[\s]+)/i,/^(?:showInfo\b)/i,/^(?:$)/i,/^(?:.)/i],conditions:{INITIAL:{rules:[0,1,2,3,4,5],inclusive:!0}}},t);function a(){this.yy={}}return r.lexer=i,a.prototype=r,r.Parser=a,new a}();cl.parser=cl;const ll=cl;var hl="",ul=!1;const dl={setMessage:t=>{Nt.debug("Setting message to: "+t),hl=t},getMessage:()=>hl,setInfo:t=>{ul=t},getInfo:()=>ul,clear:Dr},pl={draw:(t,e,n)=>{try{Nt.debug("Rendering info diagram\n"+t);const r=ar().securityLevel;let i;"sandbox"===r&&(i=(0,o.Ys)("#i"+e));const a=("sandbox"===r?(0,o.Ys)(i.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select("#"+e);a.append("g").append("text").attr("x",100).attr("y",40).attr("class","version").attr("font-size","32px").style("text-anchor","middle").text("v "+n),a.attr("height",100),a.attr("width",400)}catch(r){Nt.error("Error while rendering info diagram"),Nt.error(r.message)}}},fl=t=>null!==t.match(/^\s*info/);var gl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,5],i=[1,6],a=[1,7],s=[1,9],o=[1,11,13,15,17,19,20,26,27,28,29],c=[2,5],l=[1,6,11,13,15,17,19,20,26,27,28,29],h=[26,27,28],u=[2,8],d=[1,18],p=[1,19],f=[1,20],g=[1,21],y=[1,22],m=[1,23],b=[1,28],_=[6,26,27,28,29],x={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,PIE:6,document:7,showData:8,line:9,statement:10,txt:11,value:12,title:13,title_value:14,acc_title:15,acc_title_value:16,acc_descr:17,acc_descr_value:18,acc_descr_multiline_value:19,section:20,openDirective:21,typeDirective:22,closeDirective:23,":":24,argDirective:25,NEWLINE:26,";":27,EOF:28,open_directive:29,type_directive:30,arg_directive:31,close_directive:32,$accept:0,$end:1},terminals_:{2:"error",6:"PIE",8:"showData",11:"txt",12:"value",13:"title",14:"title_value",15:"acc_title",16:"acc_title_value",17:"acc_descr",18:"acc_descr_value",19:"acc_descr_multiline_value",20:"section",24:":",26:"NEWLINE",27:";",28:"EOF",29:"open_directive",30:"type_directive",31:"arg_directive",32:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,3],[7,0],[7,2],[9,2],[10,0],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,1],[5,3],[5,5],[4,1],[4,1],[4,1],[21,1],[22,1],[25,1],[23,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setShowData(!0);break;case 7:this.$=a[o-1];break;case 9:r.addSection(a[o-1],r.cleanupValue(a[o]));break;case 10:this.$=a[o].trim(),r.setDiagramTitle(this.$);break;case 11:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 12:case 13:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 14:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 21:r.parseDirective("%%{","open_directive");break;case 22:r.parseDirective(a[o],"type_directive");break;case 23:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 24:r.parseDirective("}%%","close_directive","pie")}},table:[{3:1,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{1:[3]},{3:10,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{3:11,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},e(o,c,{7:12,8:[1,13]}),e(l,[2,18]),e(l,[2,19]),e(l,[2,20]),{22:14,30:[1,15]},{30:[2,21]},{1:[2,1]},{1:[2,2]},e(h,u,{21:8,9:16,10:17,5:24,1:[2,3],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(o,c,{7:25}),{23:26,24:[1,27],32:b},e([24,32],[2,22]),e(o,[2,6]),{4:29,26:r,27:i,28:a},{12:[1,30]},{14:[1,31]},{16:[1,32]},{18:[1,33]},e(h,[2,13]),e(h,[2,14]),e(h,[2,15]),e(h,u,{21:8,9:16,10:17,5:24,1:[2,4],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(_,[2,16]),{25:34,31:[1,35]},e(_,[2,24]),e(o,[2,7]),e(h,[2,9]),e(h,[2,10]),e(h,[2,11]),e(h,[2,12]),{23:36,32:b},{32:[2,23]},e(_,[2,17])],defaultActions:{9:[2,21],10:[2,1],11:[2,2],35:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},v=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),29;case 1:return this.begin("type_directive"),30;case 2:return this.popState(),this.begin("arg_directive"),24;case 3:return this.popState(),this.popState(),32;case 4:return 31;case 5:case 6:case 8:case 9:break;case 7:return 26;case 10:return this.begin("title"),13;case 11:return this.popState(),"title_value";case 12:return this.begin("acc_title"),15;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),17;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:case 20:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:this.begin("string");break;case 21:return"txt";case 22:return 6;case 23:return 8;case 24:return"value";case 25:return 28}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n\r]+)/i,/^(?:%%[^\n]*)/i,/^(?:[\s]+)/i,/^(?:title\b)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:pie\b)/i,/^(?:showData\b)/i,/^(?::[\s]*[\d]+(?:\.[\d]+)?)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},title:{rules:[11],inclusive:!1},string:{rules:[20,21],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,12,14,16,19,22,23,24,25],inclusive:!0}}},t);function k(){this.yy={}}return x.lexer=v,k.prototype=x,x.Parser=k,new k}();gl.parser=gl;const yl=gl,ml=t=>null!==t.match(/^\s*pie/)||null!==t.match(/^\s*bar/);let bl={},_l=!1;const xl={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().pie,addSection:function(t,e){t=Yt.sanitizeText(t,ar()),void 0===bl[t]&&(bl[t]=e,Nt.debug("Added new section :",t))},getSections:()=>bl,cleanupValue:function(t){return":"===t.substring(0,1)?(t=t.substring(1).trim(),Number(t.trim())):Number(t.trim())},clear:function(){bl={},_l=!1,Dr()},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setShowData:function(t){_l=t},getShowData:function(){return _l},getAccDescription:Fr,setAccDescription:Ir};let vl,kl=ar();const wl=450,El={draw:(t,e,n,r)=>{try{kl=ar(),Nt.debug("Rendering info diagram\n"+t);const n=ar().securityLevel;let y;"sandbox"===n&&(y=(0,o.Ys)("#i"+e));const m="sandbox"===n?(0,o.Ys)(y.nodes()[0].contentDocument.body):(0,o.Ys)("body"),b="sandbox"===n?y.nodes()[0].contentDocument:document;r.db.clear(),r.parser.parse(t),Nt.debug("Parsed info diagram");const _=b.getElementById(e);vl=_.parentElement.offsetWidth,void 0===vl&&(vl=1200),void 0!==kl.useWidth&&(vl=kl.useWidth),void 0!==kl.pie.useWidth&&(vl=kl.pie.useWidth);const x=m.select("#"+e);dr(x,wl,vl,kl.pie.useMaxWidth),_.setAttribute("viewBox","0 0 "+vl+" "+wl);var i=18,a=Math.min(vl,wl)/2-40,s=x.append("g").attr("transform","translate("+vl/2+",225)"),c=r.db.getSections(),l=0;Object.keys(c).forEach((function(t){l+=c[t]}));const v=kl.themeVariables;var h=[v.pie1,v.pie2,v.pie3,v.pie4,v.pie5,v.pie6,v.pie7,v.pie8,v.pie9,v.pie10,v.pie11,v.pie12],u=(0,o.PKp)().range(h),d=Object.entries(c).map((function(t,e){return{order:e,name:t[0],value:t[1]}})),p=(0,o.ve8)().value((function(t){return t.value})).sort((function(t,e){return t.order-e.order}))(d),f=(0,o.Nb1)().innerRadius(0).outerRadius(a);s.selectAll("mySlices").data(p).enter().append("path").attr("d",f).attr("fill",(function(t){return u(t.data.name)})).attr("class","pieCircle"),s.selectAll("mySlices").data(p).enter().append("text").text((function(t){return(t.data.value/l*100).toFixed(0)+"%"})).attr("transform",(function(t){return"translate("+f.centroid(t)+")"})).style("text-anchor","middle").attr("class","slice"),s.append("text").text(r.db.getDiagramTitle()).attr("x",0).attr("y",-200).attr("class","pieTitleText");var g=s.selectAll(".legend").data(u.domain()).enter().append("g").attr("class","legend").attr("transform",(function(t,e){return"translate(216,"+(22*e-22*u.domain().length/2)+")"}));g.append("rect").attr("width",i).attr("height",i).style("fill",u).style("stroke",u),g.data(p).append("text").attr("x",22).attr("y",14).text((function(t){return r.db.getShowData()||kl.showData||kl.pie.showData?t.data.name+" ["+t.data.value+"]":t.data.name}))}catch(y){Nt.error("Error while rendering info diagram"),Nt.error(y)}}};var Cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[1,6],a=[1,7],s=[1,8],o=[5,6,8,14,16,18,19,40,41,42,43,44,45,53,71,72],c=[1,22],l=[2,13],h=[1,26],u=[1,27],d=[1,28],p=[1,29],f=[1,30],g=[1,31],y=[1,24],m=[1,32],b=[1,33],_=[1,36],x=[71,72],v=[5,8,14,16,18,19,40,41,42,43,44,45,53,60,62,71,72],k=[1,56],w=[1,57],E=[1,58],C=[1,59],T=[1,60],S=[1,61],A=[1,62],L=[62,63],B=[1,74],N=[1,70],D=[1,71],O=[1,72],M=[1,73],I=[1,75],F=[1,79],$=[1,80],R=[1,77],Z=[1,78],P=[5,8,14,16,18,19,40,41,42,43,44,45,53,71,72],j={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,NEWLINE:5,RD:6,diagram:7,EOF:8,openDirective:9,typeDirective:10,closeDirective:11,":":12,argDirective:13,acc_title:14,acc_title_value:15,acc_descr:16,acc_descr_value:17,acc_descr_multiline_value:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,requirementDef:23,elementDef:24,relationshipDef:25,requirementType:26,requirementName:27,STRUCT_START:28,requirementBody:29,ID:30,COLONSEP:31,id:32,TEXT:33,text:34,RISK:35,riskLevel:36,VERIFYMTHD:37,verifyType:38,STRUCT_STOP:39,REQUIREMENT:40,FUNCTIONAL_REQUIREMENT:41,INTERFACE_REQUIREMENT:42,PERFORMANCE_REQUIREMENT:43,PHYSICAL_REQUIREMENT:44,DESIGN_CONSTRAINT:45,LOW_RISK:46,MED_RISK:47,HIGH_RISK:48,VERIFY_ANALYSIS:49,VERIFY_DEMONSTRATION:50,VERIFY_INSPECTION:51,VERIFY_TEST:52,ELEMENT:53,elementName:54,elementBody:55,TYPE:56,type:57,DOCREF:58,ref:59,END_ARROW_L:60,relationship:61,LINE:62,END_ARROW_R:63,CONTAINS:64,COPIES:65,DERIVES:66,SATISFIES:67,VERIFIES:68,REFINES:69,TRACES:70,unqString:71,qString:72,$accept:0,$end:1},terminals_:{2:"error",5:"NEWLINE",6:"RD",8:"EOF",12:":",14:"acc_title",15:"acc_title_value",16:"acc_descr",17:"acc_descr_value",18:"acc_descr_multiline_value",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",28:"STRUCT_START",30:"ID",31:"COLONSEP",33:"TEXT",35:"RISK",37:"VERIFYMTHD",39:"STRUCT_STOP",40:"REQUIREMENT",41:"FUNCTIONAL_REQUIREMENT",42:"INTERFACE_REQUIREMENT",43:"PERFORMANCE_REQUIREMENT",44:"PHYSICAL_REQUIREMENT",45:"DESIGN_CONSTRAINT",46:"LOW_RISK",47:"MED_RISK",48:"HIGH_RISK",49:"VERIFY_ANALYSIS",50:"VERIFY_DEMONSTRATION",51:"VERIFY_INSPECTION",52:"VERIFY_TEST",53:"ELEMENT",56:"TYPE",58:"DOCREF",60:"END_ARROW_L",62:"LINE",63:"END_ARROW_R",64:"CONTAINS",65:"COPIES",66:"DERIVES",67:"SATISFIES",68:"VERIFIES",69:"REFINES",70:"TRACES",71:"unqString",72:"qString"},productions_:[0,[3,3],[3,2],[3,4],[4,3],[4,5],[4,2],[4,2],[4,1],[9,1],[10,1],[13,1],[11,1],[7,0],[7,2],[7,2],[7,2],[7,2],[7,2],[23,5],[29,5],[29,5],[29,5],[29,5],[29,2],[29,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[36,1],[36,1],[36,1],[38,1],[38,1],[38,1],[38,1],[24,5],[55,5],[55,5],[55,2],[55,1],[25,5],[25,5],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[27,1],[27,1],[32,1],[32,1],[34,1],[34,1],[54,1],[54,1],[57,1],[57,1],[59,1],[59,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 6:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 7:case 8:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 9:r.parseDirective("%%{","open_directive");break;case 10:r.parseDirective(a[o],"type_directive");break;case 11:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 12:r.parseDirective("}%%","close_directive","pie");break;case 13:this.$=[];break;case 19:r.addRequirement(a[o-3],a[o-4]);break;case 20:r.setNewReqId(a[o-2]);break;case 21:r.setNewReqText(a[o-2]);break;case 22:r.setNewReqRisk(a[o-2]);break;case 23:r.setNewReqVerifyMethod(a[o-2]);break;case 26:this.$=r.RequirementType.REQUIREMENT;break;case 27:this.$=r.RequirementType.FUNCTIONAL_REQUIREMENT;break;case 28:this.$=r.RequirementType.INTERFACE_REQUIREMENT;break;case 29:this.$=r.RequirementType.PERFORMANCE_REQUIREMENT;break;case 30:this.$=r.RequirementType.PHYSICAL_REQUIREMENT;break;case 31:this.$=r.RequirementType.DESIGN_CONSTRAINT;break;case 32:this.$=r.RiskLevel.LOW_RISK;break;case 33:this.$=r.RiskLevel.MED_RISK;break;case 34:this.$=r.RiskLevel.HIGH_RISK;break;case 35:this.$=r.VerifyType.VERIFY_ANALYSIS;break;case 36:this.$=r.VerifyType.VERIFY_DEMONSTRATION;break;case 37:this.$=r.VerifyType.VERIFY_INSPECTION;break;case 38:this.$=r.VerifyType.VERIFY_TEST;break;case 39:r.addElement(a[o-3]);break;case 40:r.setNewElementType(a[o-2]);break;case 41:r.setNewElementDocRef(a[o-2]);break;case 44:r.addRelationship(a[o-2],a[o],a[o-4]);break;case 45:r.addRelationship(a[o-2],a[o-4],a[o]);break;case 46:this.$=r.Relationships.CONTAINS;break;case 47:this.$=r.Relationships.COPIES;break;case 48:this.$=r.Relationships.DERIVES;break;case 49:this.$=r.Relationships.SATISFIES;break;case 50:this.$=r.Relationships.VERIFIES;break;case 51:this.$=r.Relationships.REFINES;break;case 52:this.$=r.Relationships.TRACES}},table:[{3:1,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[3]},{3:10,4:2,5:[1,9],6:n,9:4,14:r,16:i,18:a,19:s},{5:[1,11]},{10:12,20:[1,13]},{15:[1,14]},{17:[1,15]},e(o,[2,8]),{20:[2,9]},{3:16,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[2,2]},{4:21,5:c,7:17,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{11:34,12:[1,35],22:_},e([12,22],[2,10]),e(o,[2,6]),e(o,[2,7]),{1:[2,1]},{8:[1,37]},{4:21,5:c,7:38,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:39,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:40,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:41,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:42,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{27:43,71:[1,44],72:[1,45]},{54:46,71:[1,47],72:[1,48]},{60:[1,49],62:[1,50]},e(x,[2,26]),e(x,[2,27]),e(x,[2,28]),e(x,[2,29]),e(x,[2,30]),e(x,[2,31]),e(v,[2,55]),e(v,[2,56]),e(o,[2,4]),{13:51,21:[1,52]},e(o,[2,12]),{1:[2,3]},{8:[2,14]},{8:[2,15]},{8:[2,16]},{8:[2,17]},{8:[2,18]},{28:[1,53]},{28:[2,53]},{28:[2,54]},{28:[1,54]},{28:[2,59]},{28:[2,60]},{61:55,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{61:63,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{11:64,22:_},{22:[2,11]},{5:[1,65]},{5:[1,66]},{62:[1,67]},e(L,[2,46]),e(L,[2,47]),e(L,[2,48]),e(L,[2,49]),e(L,[2,50]),e(L,[2,51]),e(L,[2,52]),{63:[1,68]},e(o,[2,5]),{5:B,29:69,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:76,56:R,58:Z},{32:81,71:m,72:b},{32:82,71:m,72:b},e(P,[2,19]),{31:[1,83]},{31:[1,84]},{31:[1,85]},{31:[1,86]},{5:B,29:87,30:N,33:D,35:O,37:M,39:I},e(P,[2,25]),e(P,[2,39]),{31:[1,88]},{31:[1,89]},{5:F,39:$,55:90,56:R,58:Z},e(P,[2,43]),e(P,[2,44]),e(P,[2,45]),{32:91,71:m,72:b},{34:92,71:[1,93],72:[1,94]},{36:95,46:[1,96],47:[1,97],48:[1,98]},{38:99,49:[1,100],50:[1,101],51:[1,102],52:[1,103]},e(P,[2,24]),{57:104,71:[1,105],72:[1,106]},{59:107,71:[1,108],72:[1,109]},e(P,[2,42]),{5:[1,110]},{5:[1,111]},{5:[2,57]},{5:[2,58]},{5:[1,112]},{5:[2,32]},{5:[2,33]},{5:[2,34]},{5:[1,113]},{5:[2,35]},{5:[2,36]},{5:[2,37]},{5:[2,38]},{5:[1,114]},{5:[2,61]},{5:[2,62]},{5:[1,115]},{5:[2,63]},{5:[2,64]},{5:B,29:116,30:N,33:D,35:O,37:M,39:I},{5:B,29:117,30:N,33:D,35:O,37:M,39:I},{5:B,29:118,30:N,33:D,35:O,37:M,39:I},{5:B,29:119,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:120,56:R,58:Z},{5:F,39:$,55:121,56:R,58:Z},e(P,[2,20]),e(P,[2,21]),e(P,[2,22]),e(P,[2,23]),e(P,[2,40]),e(P,[2,41])],defaultActions:{8:[2,9],10:[2,2],16:[2,1],37:[2,3],38:[2,14],39:[2,15],40:[2,16],41:[2,17],42:[2,18],44:[2,53],45:[2,54],47:[2,59],48:[2,60],52:[2,11],93:[2,57],94:[2,58],96:[2,32],97:[2,33],98:[2,34],100:[2,35],101:[2,36],102:[2,37],103:[2,38],105:[2,61],106:[2,62],108:[2,63],109:[2,64]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},Y=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return this.begin("type_directive"),20;case 2:return this.popState(),this.begin("arg_directive"),12;case 3:return this.popState(),this.popState(),22;case 4:return 21;case 5:return"title";case 6:return this.begin("acc_title"),14;case 7:return this.popState(),"acc_title_value";case 8:return this.begin("acc_descr"),16;case 9:return this.popState(),"acc_descr_value";case 10:this.begin("acc_descr_multiline");break;case 11:case 53:this.popState();break;case 12:return"acc_descr_multiline_value";case 13:return 5;case 14:case 15:case 16:break;case 17:return 8;case 18:return 6;case 19:return 28;case 20:return 39;case 21:return 31;case 22:return 30;case 23:return 33;case 24:return 35;case 25:return 37;case 26:return 40;case 27:return 41;case 28:return 42;case 29:return 43;case 30:return 44;case 31:return 45;case 32:return 46;case 33:return 47;case 34:return 48;case 35:return 49;case 36:return 50;case 37:return 51;case 38:return 52;case 39:return 53;case 40:return 64;case 41:return 65;case 42:return 66;case 43:return 67;case 44:return 68;case 45:return 69;case 46:return 70;case 47:return 56;case 48:return 58;case 49:return 60;case 50:return 63;case 51:return 62;case 52:this.begin("string");break;case 54:return"qString";case 55:return e.yytext=e.yytext.trim(),71}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:$)/i,/^(?:requirementDiagram\b)/i,/^(?:\{)/i,/^(?:\})/i,/^(?::)/i,/^(?:id\b)/i,/^(?:text\b)/i,/^(?:risk\b)/i,/^(?:verifyMethod\b)/i,/^(?:requirement\b)/i,/^(?:functionalRequirement\b)/i,/^(?:interfaceRequirement\b)/i,/^(?:performanceRequirement\b)/i,/^(?:physicalRequirement\b)/i,/^(?:designConstraint\b)/i,/^(?:low\b)/i,/^(?:medium\b)/i,/^(?:high\b)/i,/^(?:analysis\b)/i,/^(?:demonstration\b)/i,/^(?:inspection\b)/i,/^(?:test\b)/i,/^(?:element\b)/i,/^(?:contains\b)/i,/^(?:copies\b)/i,/^(?:derives\b)/i,/^(?:satisfies\b)/i,/^(?:verifies\b)/i,/^(?:refines\b)/i,/^(?:traces\b)/i,/^(?:type\b)/i,/^(?:docref\b)/i,/^(?:<-)/i,/^(?:->)/i,/^(?:-)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[\w][^\r\n\{\<\>\-\=]*)/i],conditions:{acc_descr_multiline:{rules:[11,12],inclusive:!1},acc_descr:{rules:[9],inclusive:!1},acc_title:{rules:[7],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},unqString:{rules:[],inclusive:!1},token:{rules:[],inclusive:!1},string:{rules:[53,54],inclusive:!1},INITIAL:{rules:[0,5,6,8,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,55],inclusive:!0}}},t);function z(){this.yy={}}return j.lexer=Y,z.prototype=j,j.Parser=z,new z}();Cl.parser=Cl;const Tl=Cl,Sl=t=>null!==t.match(/^\s*requirement(Diagram)?/);let Al=[],Ll={},Bl={},Nl={},Dl={};const Ol={RequirementType:{REQUIREMENT:"Requirement",FUNCTIONAL_REQUIREMENT:"Functional Requirement",INTERFACE_REQUIREMENT:"Interface Requirement",PERFORMANCE_REQUIREMENT:"Performance Requirement",PHYSICAL_REQUIREMENT:"Physical Requirement",DESIGN_CONSTRAINT:"Design Constraint"},RiskLevel:{LOW_RISK:"Low",MED_RISK:"Medium",HIGH_RISK:"High"},VerifyType:{VERIFY_ANALYSIS:"Analysis",VERIFY_DEMONSTRATION:"Demonstration",VERIFY_INSPECTION:"Inspection",VERIFY_TEST:"Test"},Relationships:{CONTAINS:"contains",COPIES:"copies",DERIVES:"derives",SATISFIES:"satisfies",VERIFIES:"verifies",REFINES:"refines",TRACES:"traces"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().req,addRequirement:(t,e)=>(void 0===Bl[t]&&(Bl[t]={name:t,type:e,id:Ll.id,text:Ll.text,risk:Ll.risk,verifyMethod:Ll.verifyMethod}),Ll={},Bl[t]),getRequirements:()=>Bl,setNewReqId:t=>{void 0!==Ll&&(Ll.id=t)},setNewReqText:t=>{void 0!==Ll&&(Ll.text=t)},setNewReqRisk:t=>{void 0!==Ll&&(Ll.risk=t)},setNewReqVerifyMethod:t=>{void 0!==Ll&&(Ll.verifyMethod=t)},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addElement:t=>(void 0===Dl[t]&&(Dl[t]={name:t,type:Nl.type,docRef:Nl.docRef},Nt.info("Added new requirement: ",t)),Nl={},Dl[t]),getElements:()=>Dl,setNewElementType:t=>{void 0!==Nl&&(Nl.type=t)},setNewElementDocRef:t=>{void 0!==Nl&&(Nl.docRef=t)},addRelationship:(t,e,n)=>{Al.push({type:t,src:e,dst:n})},getRelationships:()=>Al,clear:()=>{Al=[],Ll={},Bl={},Nl={},Dl={},Dr()}},Ml={CONTAINS:"contains",ARROW:"arrow"},Il=Ml,Fl=(t,e)=>{let n=t.append("defs").append("marker").attr("id",Ml.CONTAINS+"_line_ending").attr("refX",0).attr("refY",e.line_height/2).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("g");n.append("circle").attr("cx",e.line_height/2).attr("cy",e.line_height/2).attr("r",e.line_height/2).attr("fill","none"),n.append("line").attr("x1",0).attr("x2",e.line_height).attr("y1",e.line_height/2).attr("y2",e.line_height/2).attr("stroke-width",1),n.append("line").attr("y1",0).attr("y2",e.line_height).attr("x1",e.line_height/2).attr("x2",e.line_height/2).attr("stroke-width",1),t.append("defs").append("marker").attr("id",Ml.ARROW+"_line_ending").attr("refX",e.line_height).attr("refY",.5*e.line_height).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("path").attr("d",`M0,0\n      L${e.line_height},${e.line_height/2}\n      M${e.line_height},${e.line_height/2}\n      L0,${e.line_height}`).attr("stroke-width",1)};let $l={},Rl=0;const Zl=(t,e)=>t.insert("rect","#"+e).attr("class","req reqBox").attr("x",0).attr("y",0).attr("width",$l.rect_min_width+"px").attr("height",$l.rect_min_height+"px"),Pl=(t,e,n)=>{let r=$l.rect_min_width/2,i=t.append("text").attr("class","req reqLabel reqTitle").attr("id",e).attr("x",r).attr("y",$l.rect_padding).attr("dominant-baseline","hanging"),a=0;n.forEach((t=>{0==a?i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",0).text(t):i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",.75*$l.line_height).text(t),a++}));let s=1.5*$l.rect_padding+a*$l.line_height*.75;return t.append("line").attr("class","req-title-line").attr("x1","0").attr("x2",$l.rect_min_width).attr("y1",s).attr("y2",s),{titleNode:i,y:s}},jl=(t,e,n,r)=>{let i=t.append("text").attr("class","req reqLabel").attr("id",e).attr("x",$l.rect_padding).attr("y",r).attr("dominant-baseline","hanging"),a=0;let s=[];return n.forEach((t=>{let e=t.length;for(;e>30&&a<3;){let n=t.substring(0,30);e=(t=t.substring(30,t.length)).length,s[s.length]=n,a++}if(3==a){let t=s[s.length-1];s[s.length-1]=t.substring(0,t.length-4)+"..."}else s[s.length]=t;a=0})),s.forEach((t=>{i.append("tspan").attr("x",$l.rect_padding).attr("dy",$l.line_height).text(t)})),i},Yl=function(t,e,n,r,i){const a=n.edge(zl(e.src),zl(e.dst)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})),c=t.insert("path","#"+r).attr("class","er relationshipLine").attr("d",s(a.points)).attr("fill","none");e.type==i.db.Relationships.CONTAINS?c.attr("marker-start","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+e.type+"_line_ending)"):(c.attr("stroke-dasharray","10,7"),c.attr("marker-end","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+Il.ARROW+"_line_ending)")),((t,e,n,r)=>{const i=e.node().getTotalLength(),a=e.node().getPointAtLength(.5*i),s="rel"+Rl;Rl++;const o=t.append("text").attr("class","req relationshipLabel").attr("id",s).attr("x",a.x).attr("y",a.y).attr("text-anchor","middle").attr("dominant-baseline","middle").text(r).node().getBBox();t.insert("rect","#"+s).attr("class","req reqLabelBox").attr("x",a.x-o.width/2).attr("y",a.y-o.height/2).attr("width",o.width).attr("height",o.height).attr("fill","white").attr("fill-opacity","85%")})(t,c,0,`<<${e.type}>>`)},zl=t=>t.replace(/\s/g,"").replace(/\./g,"_"),Ul={draw:(t,e,n,r)=>{$l=ar().requirement,r.db.clear(),r.parser.parse(t);const i=$l.securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);Fl(s,$l);const c=new ht.k({multigraph:!1,compound:!1,directed:!0}).setGraph({rankdir:$l.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));let l=r.db.getRequirements(),h=r.db.getElements(),u=r.db.getRelationships();var d,p,f;d=l,p=c,f=s,Object.keys(d).forEach((t=>{let e=d[t];t=zl(t),Nt.info("Added new requirement: ",t);const n=f.append("g").attr("id",t),r=Zl(n,"req-"+t);let i=Pl(n,t+"_title",[`<<${e.type}>>`,`${e.name}`]);jl(n,t+"_body",[`Id: ${e.id}`,`Text: ${e.text}`,`Risk: ${e.risk}`,`Verification: ${e.verifyMethod}`],i.y);const a=r.node().getBBox();p.setNode(t,{width:a.width,height:a.height,shape:"rect",id:t})})),((t,e,n)=>{Object.keys(t).forEach((r=>{let i=t[r];const a=zl(r),s=n.append("g").attr("id",a),o="element-"+a,c=Zl(s,o);let l=Pl(s,o+"_title",["<<Element>>",`${r}`]);jl(s,o+"_body",[`Type: ${i.type||"Not Specified"}`,`Doc Ref: ${i.docRef||"None"}`],l.y);const h=c.node().getBBox();e.setNode(a,{width:h.width,height:h.height,shape:"rect",id:a})}))})(h,c,s),((t,e)=>{t.forEach((function(t){let n=zl(t.src),r=zl(t.dst);e.setEdge(n,r,{relationship:t})}))})(u,c),(0,lt.bK)(c),function(t,e){e.nodes().forEach((function(n){void 0!==n&&void 0!==e.node(n)&&(t.select("#"+n),t.select("#"+n).attr("transform","translate("+(e.node(n).x-e.node(n).width/2)+","+(e.node(n).y-e.node(n).height/2)+" )"))}))}(s,c),u.forEach((function(t){Yl(s,t,c,e,r)}));const g=$l.rect_padding,y=s.node().getBBox(),m=y.width+2*g,b=y.height+2*g;dr(s,b,m,$l.useMaxWidth),s.attr("viewBox",`${y.x-g} ${y.y-g} ${m} ${b}`)}};var Wl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,19],h=[1,21],u=[1,22],d=[1,23],p=[1,29],f=[1,30],g=[1,31],y=[1,32],m=[1,33],b=[1,34],_=[1,35],x=[1,36],v=[1,37],k=[1,38],w=[1,39],E=[1,40],C=[1,42],T=[1,43],S=[1,45],A=[1,46],L=[1,47],B=[1,48],N=[1,49],D=[1,50],O=[1,53],M=[1,4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],I=[4,5,21,54,56],F=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],$=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,53,54,56,57,62,63,64,65,73,83],R=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,52,54,56,57,62,63,64,65,73,83],Z=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,54,56,57,62,63,64,65,73,83],P=[71,72,73],j=[1,125],Y=[1,4,5,7,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],z={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NEWLINE:5,directive:6,SD:7,document:8,line:9,statement:10,box_section:11,box_line:12,participant_statement:13,openDirective:14,typeDirective:15,closeDirective:16,":":17,argDirective:18,box:19,restOfLine:20,end:21,signal:22,autonumber:23,NUM:24,off:25,activate:26,actor:27,deactivate:28,note_statement:29,links_statement:30,link_statement:31,properties_statement:32,details_statement:33,title:34,legacy_title:35,acc_title:36,acc_title_value:37,acc_descr:38,acc_descr_value:39,acc_descr_multiline_value:40,loop:41,rect:42,opt:43,alt:44,else_sections:45,par:46,par_sections:47,critical:48,option_sections:49,break:50,option:51,and:52,else:53,participant:54,AS:55,participant_actor:56,note:57,placement:58,text2:59,over:60,actor_pair:61,links:62,link:63,properties:64,details:65,spaceList:66,",":67,left_of:68,right_of:69,signaltype:70,"+":71,"-":72,ACTOR:73,SOLID_OPEN_ARROW:74,DOTTED_OPEN_ARROW:75,SOLID_ARROW:76,DOTTED_ARROW:77,SOLID_CROSS:78,DOTTED_CROSS:79,SOLID_POINT:80,DOTTED_POINT:81,TXT:82,open_directive:83,type_directive:84,arg_directive:85,close_directive:86,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NEWLINE",7:"SD",17:":",19:"box",20:"restOfLine",21:"end",23:"autonumber",24:"NUM",25:"off",26:"activate",28:"deactivate",34:"title",35:"legacy_title",36:"acc_title",37:"acc_title_value",38:"acc_descr",39:"acc_descr_value",40:"acc_descr_multiline_value",41:"loop",42:"rect",43:"opt",44:"alt",46:"par",48:"critical",50:"break",51:"option",52:"and",53:"else",54:"participant",55:"AS",56:"participant_actor",57:"note",60:"over",62:"links",63:"link",64:"properties",65:"details",67:",",68:"left_of",69:"right_of",71:"+",72:"-",73:"ACTOR",74:"SOLID_OPEN_ARROW",75:"DOTTED_OPEN_ARROW",76:"SOLID_ARROW",77:"DOTTED_ARROW",78:"SOLID_CROSS",79:"DOTTED_CROSS",80:"SOLID_POINT",81:"DOTTED_POINT",82:"TXT",83:"open_directive",84:"type_directive",85:"arg_directive",86:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[11,0],[11,2],[12,2],[12,1],[12,1],[6,4],[6,6],[10,1],[10,4],[10,2],[10,4],[10,3],[10,3],[10,2],[10,3],[10,3],[10,2],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,2],[10,2],[10,1],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,1],[49,1],[49,4],[47,1],[47,4],[45,1],[45,4],[13,5],[13,3],[13,5],[13,3],[29,4],[29,4],[30,3],[31,3],[32,3],[33,3],[66,2],[66,1],[61,3],[61,1],[58,1],[58,1],[22,5],[22,5],[22,4],[27,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[59,1],[14,1],[15,1],[18,1],[16,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.apply(a[o]),a[o];case 5:case 10:case 9:case 14:this.$=[];break;case 6:case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 7:case 8:case 12:case 13:case 63:this.$=a[o];break;case 18:a[o-1].unshift({type:"boxStart",boxData:r.parseBoxData(a[o-2])}),a[o-1].push({type:"boxEnd",boxText:a[o-2]}),this.$=a[o-1];break;case 20:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-2]),sequenceIndexStep:Number(a[o-1]),sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 21:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-1]),sequenceIndexStep:1,sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 22:this.$={type:"sequenceIndex",sequenceVisible:!1,signalType:r.LINETYPE.AUTONUMBER};break;case 23:this.$={type:"sequenceIndex",sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 24:this.$={type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]};break;case 25:this.$={type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-1]};break;case 31:r.setDiagramTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 32:r.setDiagramTitle(a[o].substring(7)),this.$=a[o].substring(7);break;case 33:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 34:case 35:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 36:a[o-1].unshift({type:"loopStart",loopText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.LOOP_START}),a[o-1].push({type:"loopEnd",loopText:a[o-2],signalType:r.LINETYPE.LOOP_END}),this.$=a[o-1];break;case 37:a[o-1].unshift({type:"rectStart",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_START}),a[o-1].push({type:"rectEnd",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_END}),this.$=a[o-1];break;case 38:a[o-1].unshift({type:"optStart",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_START}),a[o-1].push({type:"optEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_END}),this.$=a[o-1];break;case 39:a[o-1].unshift({type:"altStart",altText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.ALT_START}),a[o-1].push({type:"altEnd",signalType:r.LINETYPE.ALT_END}),this.$=a[o-1];break;case 40:a[o-1].unshift({type:"parStart",parText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.PAR_START}),a[o-1].push({type:"parEnd",signalType:r.LINETYPE.PAR_END}),this.$=a[o-1];break;case 41:a[o-1].unshift({type:"criticalStart",criticalText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.CRITICAL_START}),a[o-1].push({type:"criticalEnd",signalType:r.LINETYPE.CRITICAL_END}),this.$=a[o-1];break;case 42:a[o-1].unshift({type:"breakStart",breakText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_START}),a[o-1].push({type:"breakEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_END}),this.$=a[o-1];break;case 45:this.$=a[o-3].concat([{type:"option",optionText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.CRITICAL_OPTION},a[o]]);break;case 47:this.$=a[o-3].concat([{type:"and",parText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.PAR_AND},a[o]]);break;case 49:this.$=a[o-3].concat([{type:"else",altText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.ALT_ELSE},a[o]]);break;case 50:a[o-3].type="addParticipant",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 51:a[o-1].type="addParticipant",this.$=a[o-1];break;case 52:a[o-3].type="addActor",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 53:a[o-1].type="addActor",this.$=a[o-1];break;case 54:this.$=[a[o-1],{type:"addNote",placement:a[o-2],actor:a[o-1].actor,text:a[o]}];break;case 55:a[o-2]=[].concat(a[o-1],a[o-1]).slice(0,2),a[o-2][0]=a[o-2][0].actor,a[o-2][1]=a[o-2][1].actor,this.$=[a[o-1],{type:"addNote",placement:r.PLACEMENT.OVER,actor:a[o-2].slice(0,2),text:a[o]}];break;case 56:this.$=[a[o-1],{type:"addLinks",actor:a[o-1].actor,text:a[o]}];break;case 57:this.$=[a[o-1],{type:"addALink",actor:a[o-1].actor,text:a[o]}];break;case 58:this.$=[a[o-1],{type:"addProperties",actor:a[o-1].actor,text:a[o]}];break;case 59:this.$=[a[o-1],{type:"addDetails",actor:a[o-1].actor,text:a[o]}];break;case 62:this.$=[a[o-2],a[o]];break;case 64:this.$=r.PLACEMENT.LEFTOF;break;case 65:this.$=r.PLACEMENT.RIGHTOF;break;case 66:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]}];break;case 67:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-4]}];break;case 68:this.$=[a[o-3],a[o-1],{type:"addMessage",from:a[o-3].actor,to:a[o-1].actor,signalType:a[o-2],msg:a[o]}];break;case 69:this.$={type:"addParticipant",actor:a[o]};break;case 70:this.$=r.LINETYPE.SOLID_OPEN;break;case 71:this.$=r.LINETYPE.DOTTED_OPEN;break;case 72:this.$=r.LINETYPE.SOLID;break;case 73:this.$=r.LINETYPE.DOTTED;break;case 74:this.$=r.LINETYPE.SOLID_CROSS;break;case 75:this.$=r.LINETYPE.DOTTED_CROSS;break;case 76:this.$=r.LINETYPE.SOLID_POINT;break;case 77:this.$=r.LINETYPE.DOTTED_POINT;break;case 78:this.$=r.parseMessage(a[o].trim().substring(1));break;case 79:r.parseDirective("%%{","open_directive");break;case 80:r.parseDirective(a[o],"type_directive");break;case 81:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 82:r.parseDirective("}%%","close_directive","sequence")}},table:[{3:1,4:n,5:r,6:4,7:i,14:6,83:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,14:6,83:a},{3:9,4:n,5:r,6:4,7:i,14:6,83:a},{3:10,4:n,5:r,6:4,7:i,14:6,83:a},e([1,4,5,19,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],s,{8:11}),{15:12,84:[1,13]},{84:[2,79]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{16:51,17:[1,52],86:O},e([17,86],[2,80]),e(M,[2,6]),{6:41,10:54,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},e(M,[2,8]),e(M,[2,9]),e(M,[2,17]),{20:[1,55]},{5:[1,56]},{5:[1,59],24:[1,57],25:[1,58]},{27:60,73:D},{27:61,73:D},{5:[1,62]},{5:[1,63]},{5:[1,64]},{5:[1,65]},{5:[1,66]},e(M,[2,31]),e(M,[2,32]),{37:[1,67]},{39:[1,68]},e(M,[2,35]),{20:[1,69]},{20:[1,70]},{20:[1,71]},{20:[1,72]},{20:[1,73]},{20:[1,74]},{20:[1,75]},e(M,[2,43]),{27:76,73:D},{27:77,73:D},{70:78,74:[1,79],75:[1,80],76:[1,81],77:[1,82],78:[1,83],79:[1,84],80:[1,85],81:[1,86]},{58:87,60:[1,88],68:[1,89],69:[1,90]},{27:91,73:D},{27:92,73:D},{27:93,73:D},{27:94,73:D},e([5,55,67,74,75,76,77,78,79,80,81,82],[2,69]),{5:[1,95]},{18:96,85:[1,97]},{5:[2,82]},e(M,[2,7]),e(I,[2,10],{11:98}),e(M,[2,19]),{5:[1,100],24:[1,99]},{5:[1,101]},e(M,[2,23]),{5:[1,102]},{5:[1,103]},e(M,[2,26]),e(M,[2,27]),e(M,[2,28]),e(M,[2,29]),e(M,[2,30]),e(M,[2,33]),e(M,[2,34]),e(F,s,{8:104}),e(F,s,{8:105}),e(F,s,{8:106}),e($,s,{45:107,8:108}),e(R,s,{47:109,8:110}),e(Z,s,{49:111,8:112}),e(F,s,{8:113}),{5:[1,115],55:[1,114]},{5:[1,117],55:[1,116]},{27:120,71:[1,118],72:[1,119],73:D},e(P,[2,70]),e(P,[2,71]),e(P,[2,72]),e(P,[2,73]),e(P,[2,74]),e(P,[2,75]),e(P,[2,76]),e(P,[2,77]),{27:121,73:D},{27:123,61:122,73:D},{73:[2,64]},{73:[2,65]},{59:124,82:j},{59:126,82:j},{59:127,82:j},{59:128,82:j},e(Y,[2,15]),{16:129,86:O},{86:[2,81]},{4:[1,132],5:[1,134],12:131,13:133,21:[1,130],54:C,56:T},{5:[1,135]},e(M,[2,21]),e(M,[2,22]),e(M,[2,24]),e(M,[2,25]),{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,136],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,137],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,138],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,139]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,48],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,53:[1,140],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,141]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,46],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,52:[1,142],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,143]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,44],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,51:[1,144],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,145],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{20:[1,146]},e(M,[2,51]),{20:[1,147]},e(M,[2,53]),{27:148,73:D},{27:149,73:D},{59:150,82:j},{59:151,82:j},{59:152,82:j},{67:[1,153],82:[2,63]},{5:[2,56]},{5:[2,78]},{5:[2,57]},{5:[2,58]},{5:[2,59]},{5:[1,154]},e(M,[2,18]),e(I,[2,11]),{13:155,54:C,56:T},e(I,[2,13]),e(I,[2,14]),e(M,[2,20]),e(M,[2,36]),e(M,[2,37]),e(M,[2,38]),e(M,[2,39]),{20:[1,156]},e(M,[2,40]),{20:[1,157]},e(M,[2,41]),{20:[1,158]},e(M,[2,42]),{5:[1,159]},{5:[1,160]},{59:161,82:j},{59:162,82:j},{5:[2,68]},{5:[2,54]},{5:[2,55]},{27:163,73:D},e(Y,[2,16]),e(I,[2,12]),e($,s,{8:108,45:164}),e(R,s,{8:110,47:165}),e(Z,s,{8:112,49:166}),e(M,[2,50]),e(M,[2,52]),{5:[2,66]},{5:[2,67]},{82:[2,62]},{21:[2,49]},{21:[2,47]},{21:[2,45]}],defaultActions:{7:[2,79],8:[2,1],9:[2,2],10:[2,3],53:[2,82],89:[2,64],90:[2,65],97:[2,81],124:[2,56],125:[2,78],126:[2,57],127:[2,58],128:[2,59],150:[2,68],151:[2,54],152:[2,55],161:[2,66],162:[2,67],163:[2,62],164:[2,49],165:[2,47],166:[2,45]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},U=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),83;case 1:return this.begin("type_directive"),84;case 2:return this.popState(),this.begin("arg_directive"),17;case 3:return this.popState(),this.popState(),86;case 4:return 85;case 5:case 53:case 66:return 5;case 6:case 7:case 8:case 9:case 10:break;case 11:return 24;case 12:return this.begin("LINE"),19;case 13:return this.begin("ID"),54;case 14:return this.begin("ID"),56;case 15:return e.yytext=e.yytext.trim(),this.begin("ALIAS"),73;case 16:return this.popState(),this.popState(),this.begin("LINE"),55;case 17:return this.popState(),this.popState(),5;case 18:return this.begin("LINE"),41;case 19:return this.begin("LINE"),42;case 20:return this.begin("LINE"),43;case 21:return this.begin("LINE"),44;case 22:return this.begin("LINE"),53;case 23:return this.begin("LINE"),46;case 24:return this.begin("LINE"),52;case 25:return this.begin("LINE"),48;case 26:return this.begin("LINE"),51;case 27:return this.begin("LINE"),50;case 28:return this.popState(),20;case 29:return 21;case 30:return 68;case 31:return 69;case 32:return 62;case 33:return 63;case 34:return 64;case 35:return 65;case 36:return 60;case 37:return 57;case 38:return this.begin("ID"),26;case 39:return this.begin("ID"),28;case 40:return 34;case 41:return 35;case 42:return this.begin("acc_title"),36;case 43:return this.popState(),"acc_title_value";case 44:return this.begin("acc_descr"),38;case 45:return this.popState(),"acc_descr_value";case 46:this.begin("acc_descr_multiline");break;case 47:this.popState();break;case 48:return"acc_descr_multiline_value";case 49:return 7;case 50:return 23;case 51:return 25;case 52:return 67;case 54:return e.yytext=e.yytext.trim(),73;case 55:return 76;case 56:return 77;case 57:return 74;case 58:return 75;case 59:return 78;case 60:return 79;case 61:return 80;case 62:return 81;case 63:return 82;case 64:return 71;case 65:return 72;case 67:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[0-9]+(?=[ \n]+))/i,/^(?:box\b)/i,/^(?:participant\b)/i,/^(?:actor\b)/i,/^(?:[^\->:\n,;]+?([\-]*[^\->:\n,;]+?)*?(?=((?!\n)\s)+as(?!\n)\s|[#\n;]|$))/i,/^(?:as\b)/i,/^(?:(?:))/i,/^(?:loop\b)/i,/^(?:rect\b)/i,/^(?:opt\b)/i,/^(?:alt\b)/i,/^(?:else\b)/i,/^(?:par\b)/i,/^(?:and\b)/i,/^(?:critical\b)/i,/^(?:option\b)/i,/^(?:break\b)/i,/^(?:(?:[:]?(?:no)?wrap)?[^#\n;]*)/i,/^(?:end\b)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:links\b)/i,/^(?:link\b)/i,/^(?:properties\b)/i,/^(?:details\b)/i,/^(?:over\b)/i,/^(?:note\b)/i,/^(?:activate\b)/i,/^(?:deactivate\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:title:\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:sequenceDiagram\b)/i,/^(?:autonumber\b)/i,/^(?:off\b)/i,/^(?:,)/i,/^(?:;)/i,/^(?:[^\+\->:\n,;]+((?!(-x|--x|-\)|--\)))[\-]*[^\+\->:\n,;]+)*)/i,/^(?:->>)/i,/^(?:-->>)/i,/^(?:->)/i,/^(?:-->)/i,/^(?:-[x])/i,/^(?:--[x])/i,/^(?:-[\)])/i,/^(?:--[\)])/i,/^(?::(?:(?:no)?wrap)?[^#\n;]+)/i,/^(?:\+)/i,/^(?:-)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[47,48],inclusive:!1},acc_descr:{rules:[45],inclusive:!1},acc_title:{rules:[43],inclusive:!1},open_directive:{rules:[1,8],inclusive:!1},type_directive:{rules:[2,3,8],inclusive:!1},arg_directive:{rules:[3,4,8],inclusive:!1},ID:{rules:[7,8,15],inclusive:!1},ALIAS:{rules:[7,8,16,17],inclusive:!1},LINE:{rules:[7,8,28],inclusive:!1},INITIAL:{rules:[0,5,6,8,9,10,11,12,13,14,18,19,20,21,22,23,24,25,26,27,29,30,31,32,33,34,35,36,37,38,39,40,41,42,44,46,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],inclusive:!0}}},t);function W(){this.yy={}}return z.lexer=U,W.prototype=z,z.Parser=W,new W}();Wl.parser=Wl;const ql=Wl,Hl=t=>null!==t.match(/^\s*sequenceDiagram/);let Vl,Gl,Xl,Kl={},Ql=[],Jl=[],th=!1;const eh=function(t,e,n,r){let i=Xl;const a=Kl[t];if(a){if(Xl&&a.box&&Xl!==a.box)throw new Error("A same participant should only be defined in one Box: "+a.name+" can't be in '"+a.box.name+"' and in '"+Xl.name+"' at the same time.");if(i=a.box?a.box:Xl,a.box=i,a&&e===a.name&&null==n)return}null!=n&&null!=n.text||(n={text:e,wrap:null,type:r}),null!=r&&null!=n.text||(n={text:e,wrap:null,type:r}),Kl[t]={box:i,name:e,description:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,prevActor:Vl,links:{},properties:{},actorCnt:null,rectData:null,type:r||"participant"},Vl&&Kl[Vl]&&(Kl[Vl].nextActor=t),Xl&&Xl.actorKeys.push(t),Vl=t},nh=function(t,e,n={text:void 0,wrap:void 0},r){if(r===ah.ACTIVE_END){const e=(t=>{let e,n=0;for(e=0;e<Jl.length;e++)Jl[e].type===ah.ACTIVE_START&&Jl[e].from.actor===t&&n++,Jl[e].type===ah.ACTIVE_END&&Jl[e].from.actor===t&&n--;return n})(t.actor);if(e<1){let e=new Error("Trying to inactivate an inactive participant ("+t.actor+")");throw e.hash={text:"->>-",token:"->>-",line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["'ACTIVE_PARTICIPANT'"]},e}}return Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:r}),!0},rh=function(t){return Kl[t]},ih=()=>void 0!==Gl?Gl:ar().sequence.wrap,ah={SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25,AUTONUMBER:26,CRITICAL_START:27,CRITICAL_OPTION:28,CRITICAL_END:29,BREAK_START:30,BREAK_END:31},sh=function(t,e,n){n.text,void 0===n.wrap&&ih()||n.wrap;const r=[].concat(t,t);Jl.push({from:r[0],to:r[1],message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:ah.NOTE,placement:e})},oh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());t=t.replace(/&amp;/g,"&"),t=t.replace(/&equals;/g,"=");ch(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor link text",r)}};function ch(t,e){if(null==t.links)t.links=e;else for(let n in e)t.links[n]=e[n]}const lh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());hh(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor properties text",r)}};function hh(t,e){if(null==t.properties)t.properties=e;else for(let n in e)t.properties[n]=e[n]}const uh=function(t,e){const n=rh(t),r=document.getElementById(e.text);try{const t=r.innerHTML,e=JSON.parse(t);e.properties&&hh(n,e.properties),e.links&&ch(n,e.links)}catch(i){Nt.error("error while parsing actor details text",i)}},dh=function(t){if(Array.isArray(t))t.forEach((function(t){dh(t)}));else switch(t.type){case"sequenceIndex":Jl.push({from:void 0,to:void 0,message:{start:t.sequenceIndex,step:t.sequenceIndexStep,visible:t.sequenceVisible},wrap:!1,type:t.signalType});break;case"addParticipant":eh(t.actor,t.actor,t.description,"participant");break;case"addActor":eh(t.actor,t.actor,t.description,"actor");break;case"activeStart":case"activeEnd":nh(t.actor,void 0,void 0,t.signalType);break;case"addNote":sh(t.actor,t.placement,t.text);break;case"addLinks":oh(t.actor,t.text);break;case"addALink":!function(t,e){const n=rh(t);try{const t={};let s=Ft(e.text,ar());var r=s.indexOf("@");s=s.replace(/&amp;/g,"&"),s=s.replace(/&equals;/g,"=");var i=s.slice(0,r-1).trim(),a=s.slice(r+1).trim();t[i]=a,ch(n,t)}catch(s){Nt.error("error while parsing actor link text",s)}}(t.actor,t.text);break;case"addProperties":lh(t.actor,t.text);break;case"addDetails":uh(t.actor,t.text);break;case"addMessage":nh(t.from,t.to,t.msg,t.signalType);break;case"boxStart":e=t.boxData,Ql.push({name:e.text,wrap:void 0===e.wrap&&ih()||!!e.wrap,fill:e.color,actorKeys:[]}),Xl=Ql.slice(-1)[0];break;case"boxEnd":Xl=void 0;break;case"loopStart":nh(void 0,void 0,t.loopText,t.signalType);break;case"loopEnd":case"rectEnd":case"optEnd":case"altEnd":case"parEnd":case"criticalEnd":case"breakEnd":nh(void 0,void 0,void 0,t.signalType);break;case"rectStart":nh(void 0,void 0,t.color,t.signalType);break;case"optStart":nh(void 0,void 0,t.optText,t.signalType);break;case"altStart":case"else":nh(void 0,void 0,t.altText,t.signalType);break;case"setAccTitle":Or(t.text);break;case"parStart":case"and":nh(void 0,void 0,t.parText,t.signalType);break;case"criticalStart":nh(void 0,void 0,t.criticalText,t.signalType);break;case"option":nh(void 0,void 0,t.optionText,t.signalType);break;case"breakStart":nh(void 0,void 0,t.breakText,t.signalType)}var e},ph={addActor:eh,addMessage:function(t,e,n,r){Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,answer:r})},addSignal:nh,addLinks:oh,addDetails:uh,addProperties:lh,autoWrap:ih,setWrap:function(t){Gl=t},enableSequenceNumbers:function(){th=!0},disableSequenceNumbers:function(){th=!1},showSequenceNumbers:()=>th,getMessages:function(){return Jl},getActors:function(){return Kl},getActor:rh,getActorKeys:function(){return Object.keys(Kl)},getActorProperty:function(t,e){if(void 0!==t&&void 0!==t.properties)return t.properties[e]},getAccTitle:Mr,getBoxes:function(){return Ql},getDiagramTitle:Rr,setDiagramTitle:$r,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().sequence,clear:function(){Kl={},Ql=[],Jl=[],th=!1,Dr()},parseMessage:function(t){const e=t.trim(),n={text:e.replace(/^:?(?:no)?wrap:/,"").trim(),wrap:null!==e.match(/^:?wrap:/)||null===e.match(/^:?nowrap:/)&&void 0};return Nt.debug("parseMessage:",n),n},parseBoxData:function(t){const e=t.match(/^((?:rgba?|hsla?)\s*\(.*\)|\w*)(.*)$/);let n=null!=e&&e[1]?e[1].trim():"transparent",r=null!=e&&e[2]?e[2].trim():void 0;if(window&&window.CSS)window.CSS.supports("color",n)||(n="transparent",r=t.trim());else{const e=(new Option).style;e.color=n,e.color!==n&&(n="transparent",r=t.trim())}return{color:n,text:void 0!==r?Ft(r.replace(/^:?(?:no)?wrap:/,""),ar()):void 0,wrap:void 0!==r?null!==r.match(/^:?wrap:/)||null===r.match(/^:?nowrap:/)&&void 0:void 0}},LINETYPE:ah,ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},addNote:sh,setAccTitle:Or,apply:dh,setAccDescription:Ir,getAccDescription:Fr,hasAtLeastOneBox:function(){return Ql.length>0},hasAtLeastOneBoxWithTitle:function(){return Ql.some((t=>t.name))}};let fh=[];const gh=()=>{fh.forEach((t=>{t()})),fh=[]},yh=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},mh=(t,e)=>{var n;n=()=>{const n=document.querySelectorAll(t);0!==n.length&&(n[0].addEventListener("mouseover",(function(){xh("actor"+e+"_popup")})),n[0].addEventListener("mouseout",(function(){vh("actor"+e+"_popup")})))},fh.push(n)},bh=function(t,e,n,r){const i=t.append("image");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href",a)},_h=function(t,e,n,r){const i=t.append("use");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href","#"+a)},xh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="block")},vh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="none")},kh=function(t,e){let n=0,r=0;const i=e.text.split(Yt.lineBreakRegex),[a,s]=Vn(e.fontSize);let o=[],c=0,l=()=>e.y;if(void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0)switch(e.valign){case"top":case"start":l=()=>Math.round(e.y+e.textMargin);break;case"middle":case"center":l=()=>Math.round(e.y+(n+r+e.textMargin)/2);break;case"bottom":case"end":l=()=>Math.round(e.y+(n+r+2*e.textMargin)-e.textMargin)}if(void 0!==e.anchor&&void 0!==e.textMargin&&void 0!==e.width)switch(e.anchor){case"left":case"start":e.x=Math.round(e.x+e.textMargin),e.anchor="start",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"middle":case"center":e.x=Math.round(e.x+e.width/2),e.anchor="middle",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"right":case"end":e.x=Math.round(e.x+e.width-e.textMargin),e.anchor="end",e.dominantBaseline="middle",e.alignmentBaseline="middle"}for(let[h,u]of i.entries()){void 0!==e.textMargin&&0===e.textMargin&&void 0!==a&&(c=h*a);const i=t.append("text");if(i.attr("x",e.x),i.attr("y",l()),void 0!==e.anchor&&i.attr("text-anchor",e.anchor).attr("dominant-baseline",e.dominantBaseline).attr("alignment-baseline",e.alignmentBaseline),void 0!==e.fontFamily&&i.style("font-family",e.fontFamily),void 0!==s&&i.style("font-size",s),void 0!==e.fontWeight&&i.style("font-weight",e.fontWeight),void 0!==e.fill&&i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class),void 0!==e.dy?i.attr("dy",e.dy):0!==c&&i.attr("dy",c),e.tspan){const t=i.append("tspan");t.attr("x",e.x),void 0!==e.fill&&t.attr("fill",e.fill),t.text(u)}else i.text(u);void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0&&(r+=(i._groups||i)[0][0].getBBox().height,n=r),o.push(i)}return o},wh=function(t,e){const n=t.append("polygon");var r,i,a,s,o;return n.attr("points",(r=e.x,i=e.y,a=e.width,s=e.height,r+","+i+" "+(r+a)+","+i+" "+(r+a)+","+(i+s-(o=7))+" "+(r+a-1.2*o)+","+(i+s)+" "+r+","+(i+s))),n.attr("class","labelBox"),e.y=e.y+e.height/2,kh(t,e),n};let Eh=-1;const Ch=(t,e)=>{t.selectAll&&t.selectAll(".actor-line").attr("class","200").attr("y2",e-55)},Th=function(t,e){yh(t,{x:e.startx,y:e.starty,width:e.stopx-e.startx,height:e.stopy-e.starty,fill:e.fill,stroke:e.stroke,class:"rect"}).lower()},Sh=function(){return{x:0,y:0,fill:void 0,anchor:void 0,style:"#666",width:void 0,height:void 0,textMargin:0,rx:0,ry:0,tspan:!0,valign:void 0}},Ah=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},Lh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,[d,p]=Vn(l),f=t.split(Yt.lineBreakRegex);for(let g=0;g<f.length;g++){const t=g*d-d*(f.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").style("font-size",p).style("font-weight",u).style("font-family",h);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(f[g]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Bh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,a=e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").style("font-size",l).style("font-weight",u).style("font-family",h);a.append("tspan").attr("x",n).attr("dy",t).text(d[p]),a.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(a,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,0,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Nh={drawRect:yh,drawText:kh,drawLabel:wh,drawActor:function(t,e,n,r){switch(e.type){case"actor":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+80;r||(Eh++,t.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"));const s=t.append("g");s.attr("class","actor-man");const o=Ah();o.x=e.x,o.y=e.y,o.fill="#eaeaea",o.width=e.width,o.height=e.height,o.class="actor",o.rx=3,o.ry=3,s.append("line").attr("id","actor-man-torso"+Eh).attr("x1",i).attr("y1",e.y+25).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("id","actor-man-arms"+Eh).attr("x1",i-18).attr("y1",e.y+33).attr("x2",i+18).attr("y2",e.y+33),s.append("line").attr("x1",i-18).attr("y1",e.y+60).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("x1",i).attr("y1",e.y+45).attr("x2",i+16).attr("y2",e.y+60);const c=s.append("circle");c.attr("cx",e.x+e.width/2),c.attr("cy",e.y+10),c.attr("r",15),c.attr("width",e.width),c.attr("height",e.height);const l=s.node().getBBox();return e.height=l.height,Lh(n)(e.description,s,o.x,o.y+35,o.width,o.height,{class:"actor"},n),e.height}(t,e,n,r);case"participant":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+5,s=t.append("g");var o=s;r||(Eh++,o.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"),o=s.append("g"),e.actorCnt=Eh,null!=e.links&&(o.attr("id","root-"+Eh),mh("#root-"+Eh,Eh)));const c=Ah();var l="actor";null!=e.properties&&e.properties.class?l=e.properties.class:c.fill="#eaeaea",c.x=e.x,c.y=e.y,c.width=e.width,c.height=e.height,c.class=l,c.rx=3,c.ry=3;const h=yh(o,c);if(e.rectData=c,null!=e.properties&&e.properties.icon){const t=e.properties.icon.trim();"@"===t.charAt(0)?_h(o,c.x+c.width-20,c.y+10,t.substr(1)):bh(o,c.x+c.width-20,c.y+10,t)}Lh(n)(e.description,o,c.x,c.y,c.width,c.height,{class:"actor"},n);let u=e.height;if(h.node){const t=h.node().getBBox();e.height=t.height,u=t.height}return u}(t,e,n,r)}},drawBox:function(t,e,n){const r=t.append("g");Th(r,e),e.name&&Lh(n)(e.name,r,e.x,e.y+(e.textMaxHeight||0)/2,e.width,0,{class:"text"},n),r.lower()},drawPopup:function(t,e,n,r,i){if(void 0===e.links||null===e.links||0===Object.keys(e.links).length)return{height:0,width:0};const a=e.links,o=e.actorCnt,c=e.rectData;var l="none";i&&(l="block !important");const h=t.append("g");h.attr("id","actor"+o+"_popup"),h.attr("class","actorPopupMenu"),h.attr("display",l),mh("#actor"+o+"_popup",o);var u="";void 0!==c.class&&(u=" "+c.class);let d=c.width>n?c.width:n;const p=h.append("rect");if(p.attr("class","actorPopupMenuPanel"+u),p.attr("x",c.x),p.attr("y",c.height),p.attr("fill",c.fill),p.attr("stroke",c.stroke),p.attr("width",d),p.attr("height",c.height),p.attr("rx",c.rx),p.attr("ry",c.ry),null!=a){var f=20;for(let t in a){var g=h.append("a"),y=(0,s.N)(a[t]);g.attr("xlink:href",y),g.attr("target","_blank"),Bh(r)(t,g,c.x+10,c.height+f,d,20,{class:"actor"},r),f+=30}}return p.attr("height",f),{height:c.height+f,width:d}},drawImage:bh,drawEmbeddedImage:_h,anchorElement:function(t){return t.append("g")},drawActivation:function(t,e,n,r,i){const a=Ah(),s=e.anchored;a.x=e.startx,a.y=e.starty,a.class="activation"+i%3,a.width=e.stopx-e.startx,a.height=n-e.starty,yh(s,a)},drawLoop:function(t,e,n,r){const{boxMargin:i,boxTextMargin:a,labelBoxHeight:s,labelBoxWidth:o,messageFontFamily:c,messageFontSize:l,messageFontWeight:h}=r,u=t.append("g"),d=function(t,e,n,r){return u.append("line").attr("x1",t).attr("y1",e).attr("x2",n).attr("y2",r).attr("class","loopLine")};d(e.startx,e.starty,e.stopx,e.starty),d(e.stopx,e.starty,e.stopx,e.stopy),d(e.startx,e.stopy,e.stopx,e.stopy),d(e.startx,e.starty,e.startx,e.stopy),void 0!==e.sections&&e.sections.forEach((function(t){d(e.startx,t.y,e.stopx,t.y).style("stroke-dasharray","3, 3")}));let p=Sh();p.text=n,p.x=e.startx,p.y=e.starty,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.anchor="middle",p.valign="middle",p.tspan=!1,p.width=o||50,p.height=s||20,p.textMargin=a,p.class="labelText",wh(u,p),p=Sh(),p.text=e.title,p.x=e.startx+o/2+(e.stopx-e.startx)/2,p.y=e.starty+i+a,p.anchor="middle",p.valign="middle",p.textMargin=a,p.class="loopText",p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=!0;let f=kh(u,p);return void 0!==e.sectionTitles&&e.sectionTitles.forEach((function(t,n){if(t.message){p.text=t.message,p.x=e.startx+(e.stopx-e.startx)/2,p.y=e.sections[n].y+i+a,p.class="loopText",p.anchor="middle",p.valign="middle",p.tspan=!1,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=e.wrap,f=kh(u,p);let r=Math.round(f.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));e.sections[n].height+=r-(i+a)}})),e.height=Math.round(e.stopy-e.starty),u},drawBackgroundRect:Th,insertArrowHead:function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},insertArrowFilledHead:function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},insertSequenceNumber:function(t){t.append("defs").append("marker").attr("id","sequencenumber").attr("refX",15).attr("refY",15).attr("markerWidth",60).attr("markerHeight",40).attr("orient","auto").append("circle").attr("cx",15).attr("cy",15).attr("r",6)},insertArrowCrossHead:function(t){t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",4).attr("refY",5).append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1pt").attr("d","M 1,2 L 6,7 M 6,2 L 1,7")},insertDatabaseIcon:function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},insertComputerIcon:function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},insertClockIcon:function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")},getTextObj:Sh,getNoteRect:Ah,popupMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'block'; }"},popdownMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'none'; }"},fixLifeLineHeights:Ch,sanitizeUrl:s.N};let Dh={};const Oh={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],activations:[],models:{getHeight:function(){return Math.max.apply(null,0===this.actors.length?[0]:this.actors.map((t=>t.height||0)))+(0===this.loops.length?0:this.loops.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.messages.length?0:this.messages.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.notes.length?0:this.notes.map((t=>t.height||0)).reduce(((t,e)=>t+e)))},clear:function(){this.actors=[],this.boxes=[],this.loops=[],this.messages=[],this.notes=[]},addBox:function(t){this.boxes.push(t)},addActor:function(t){this.actors.push(t)},addLoop:function(t){this.loops.push(t)},addMessage:function(t){this.messages.push(t)},addNote:function(t){this.notes.push(t)},lastActor:function(){return this.actors[this.actors.length-1]},lastLoop:function(){return this.loops[this.loops.length-1]},lastMessage:function(){return this.messages[this.messages.length-1]},lastNote:function(){return this.notes[this.notes.length-1]},actors:[],boxes:[],loops:[],messages:[],notes:[]},init:function(){this.sequenceItems=[],this.activations=[],this.models.clear(),this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0,Zh(ar())},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=this;let a=0;function s(s){return function(o){a++;const c=i.sequenceItems.length-a+1;i.updateVal(o,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopy",r+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopx",n+c*Dh.boxMargin,Math.max),"activation"!==s&&(i.updateVal(o,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopx",n+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopy",r+c*Dh.boxMargin,Math.max))}}this.sequenceItems.forEach(s()),this.activations.forEach(s("activation"))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(Oh.data,"startx",i,Math.min),this.updateVal(Oh.data,"starty",s,Math.min),this.updateVal(Oh.data,"stopx",a,Math.max),this.updateVal(Oh.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},newActivation:function(t,e,n){const r=n[t.from.actor],i=Ph(t.from.actor).length||0,a=r.x+r.width/2+(i-1)*Dh.activationWidth/2;this.activations.push({startx:a,starty:this.verticalPos+2,stopx:a+Dh.activationWidth,stopy:void 0,actor:t.from.actor,anchored:Nh.anchorElement(e)})},endActivation:function(t){const e=this.activations.map((function(t){return t.actor})).lastIndexOf(t.from.actor);return this.activations.splice(e,1)[0]},createLoop:function(t={message:void 0,wrap:!1,width:void 0},e){return{startx:void 0,starty:this.verticalPos,stopx:void 0,stopy:void 0,title:t.message,wrap:t.wrap,width:t.width,height:0,fill:e}},newLoop:function(t={message:void 0,wrap:!1,width:void 0},e){this.sequenceItems.push(this.createLoop(t,e))},endLoop:function(){return this.sequenceItems.pop()},addSectionToLoop:function(t){const e=this.sequenceItems.pop();e.sections=e.sections||[],e.sectionTitles=e.sectionTitles||[],e.sections.push({y:Oh.getVerticalPos(),height:0}),e.sectionTitles.push(t),this.sequenceItems.push(e)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return{bounds:this.data,models:this.models}}},Mh=t=>({fontFamily:t.messageFontFamily,fontSize:t.messageFontSize,fontWeight:t.messageFontWeight}),Ih=t=>({fontFamily:t.noteFontFamily,fontSize:t.noteFontSize,fontWeight:t.noteFontWeight}),Fh=t=>({fontFamily:t.actorFontFamily,fontSize:t.actorFontSize,fontWeight:t.actorFontWeight});const $h=function(t,e,n,r,i,a,s){if(!0===i.hideUnusedParticipants){const t=new Set;a.forEach((e=>{t.add(e.from),t.add(e.to)})),n=n.filter((e=>t.has(e)))}let o,c=0,l=0,h=0;for(const u of n){const n=e[u],i=n.box;o&&o!=i&&(s||Oh.models.addBox(o),l+=Dh.boxMargin+o.margin),i&&i!=o&&(s||(i.x=c+l,i.y=r),l+=i.margin),n.width=n.width||Dh.width,n.height=Math.max(n.height||Dh.height,Dh.height),n.margin=n.margin||Dh.actorMargin,n.x=c+l,n.y=Oh.getVerticalPos();const a=Nh.drawActor(t,n,Dh,s);h=Math.max(h,a),Oh.insert(n.x,r,n.x+n.width,n.height),c+=n.width+l,n.box&&(n.box.width=c+i.margin-n.box.x),l=n.margin,o=n.box,Oh.models.addActor(n)}o&&!s&&Oh.models.addBox(o),Oh.bumpVerticalPos(h)},Rh=function(t,e,n,r){let i=0,a=0;for(const s of n){const n=e[s],o=zh(n),c=Nh.drawPopup(t,n,o,Dh,Dh.forceMenus,r);c.height>i&&(i=c.height),c.width+n.x>a&&(a=c.width+n.x)}return{maxHeight:i,maxWidth:a}},Zh=function(t){Sn(Dh,t),t.fontFamily&&(Dh.actorFontFamily=Dh.noteFontFamily=Dh.messageFontFamily=t.fontFamily),t.fontSize&&(Dh.actorFontSize=Dh.noteFontSize=Dh.messageFontSize=t.fontSize),t.fontWeight&&(Dh.actorFontWeight=Dh.noteFontWeight=Dh.messageFontWeight=t.fontWeight)},Ph=function(t){return Oh.activations.filter((function(e){return e.actor===t}))},jh=function(t,e){const n=e[t],r=Ph(t);return[r.reduce((function(t,e){return Math.min(t,e.startx)}),n.x+n.width/2),r.reduce((function(t,e){return Math.max(t,e.stopx)}),n.x+n.width/2)]};function Yh(t,e,n,r,i){Oh.bumpVerticalPos(n);let a=r;if(e.id&&e.message&&t[e.id]){const n=t[e.id].width,i=Mh(Dh);e.message=Gn.wrapLabel(`[${e.message}]`,n-2*Dh.wrapPadding,i),e.width=n,e.wrap=!0;const s=Gn.calculateTextDimensions(e.message,i),o=Math.max(s.height,Dh.labelBoxHeight);a=r+o,Nt.debug(`${o} - ${e.message}`)}i(e),Oh.bumpVerticalPos(a)}const zh=function(t){let e=0;const n=Fh(Dh);for(const r in t.links){const t=Gn.calculateTextDimensions(r,n).width+2*Dh.wrapPadding+2*Dh.boxMargin;e<t&&(e=t)}return e};const Uh=function(t,e,n,r){const i={},a=[];let s,o,c;return t.forEach((function(t){switch(t.id=Gn.random({length:10}),t.type){case r.db.LINETYPE.LOOP_START:case r.db.LINETYPE.ALT_START:case r.db.LINETYPE.OPT_START:case r.db.LINETYPE.PAR_START:case r.db.LINETYPE.CRITICAL_START:case r.db.LINETYPE.BREAK_START:a.push({id:t.id,msg:t.message,from:Number.MAX_SAFE_INTEGER,to:Number.MIN_SAFE_INTEGER,width:0});break;case r.db.LINETYPE.ALT_ELSE:case r.db.LINETYPE.PAR_AND:case r.db.LINETYPE.CRITICAL_OPTION:t.message&&(s=a.pop(),i[s.id]=s,i[t.id]=s,a.push(s));break;case r.db.LINETYPE.LOOP_END:case r.db.LINETYPE.ALT_END:case r.db.LINETYPE.OPT_END:case r.db.LINETYPE.PAR_END:case r.db.LINETYPE.CRITICAL_END:case r.db.LINETYPE.BREAK_END:s=a.pop(),i[s.id]=s;break;case r.db.LINETYPE.ACTIVE_START:{const n=e[t.from?t.from.actor:t.to.actor],r=Ph(t.from?t.from.actor:t.to.actor).length,i=n.x+n.width/2+(r-1)*Dh.activationWidth/2,a={startx:i,stopx:i+Dh.activationWidth,actor:t.from.actor,enabled:!0};Oh.activations.push(a)}break;case r.db.LINETYPE.ACTIVE_END:{const e=Oh.activations.map((t=>t.actor)).lastIndexOf(t.from.actor);delete Oh.activations.splice(e,1)[0]}}void 0!==t.placement?(o=function(t,e,n){const r=e[t.from].x,i=e[t.to].x,a=t.wrap&&t.message;let s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Dh.width,Ih(Dh)):t.message,Ih(Dh));const o={width:a?Dh.width:Math.max(Dh.width,s.width+2*Dh.noteMargin),height:0,startx:e[t.from].x,stopx:0,starty:0,stopy:0,message:t.message};return t.placement===n.db.PLACEMENT.RIGHTOF?(o.width=a?Math.max(Dh.width,s.width):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width+Dh.actorMargin)/2):t.placement===n.db.PLACEMENT.LEFTOF?(o.width=a?Math.max(Dh.width,s.width+2*Dh.noteMargin):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r-o.width+(e[t.from].width-Dh.actorMargin)/2):t.to===t.from?(s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Math.max(Dh.width,e[t.from].width),Ih(Dh)):t.message,Ih(Dh)),o.width=a?Math.max(Dh.width,e[t.from].width):Math.max(e[t.from].width,Dh.width,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width-o.width)/2):(o.width=Math.abs(r+e[t.from].width/2-(i+e[t.to].width/2))+Dh.actorMargin,o.startx=r<i?r+e[t.from].width/2-Dh.actorMargin/2:i+e[t.to].width/2-Dh.actorMargin/2),a&&(o.message=Gn.wrapLabel(t.message,o.width-2*Dh.wrapPadding,Ih(Dh))),Nt.debug(`NM:[${o.startx},${o.stopx},${o.starty},${o.stopy}:${o.width},${o.height}=${t.message}]`),o}(t,e,r),t.noteModel=o,a.forEach((t=>{s=t,s.from=Math.min(s.from,o.startx),s.to=Math.max(s.to,o.startx+o.width),s.width=Math.max(s.width,Math.abs(s.from-s.to))-Dh.labelBoxWidth}))):(c=function(t,e,n){let r=!1;if([n.db.LINETYPE.SOLID_OPEN,n.db.LINETYPE.DOTTED_OPEN,n.db.LINETYPE.SOLID,n.db.LINETYPE.DOTTED,n.db.LINETYPE.SOLID_CROSS,n.db.LINETYPE.DOTTED_CROSS,n.db.LINETYPE.SOLID_POINT,n.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(r=!0),!r)return{};const i=jh(t.from,e),a=jh(t.to,e),s=i[0]<=a[0]?1:0,o=i[0]<a[0]?0:1,c=[...i,...a],l=Math.abs(a[o]-i[s]);t.wrap&&t.message&&(t.message=Gn.wrapLabel(t.message,Math.max(l+2*Dh.wrapPadding,Dh.width),Mh(Dh)));const h=Gn.calculateTextDimensions(t.message,Mh(Dh));return{width:Math.max(t.wrap?0:h.width+2*Dh.wrapPadding,l+2*Dh.wrapPadding,Dh.width),height:0,startx:i[s],stopx:a[o],starty:0,stopy:0,message:t.message,type:t.type,wrap:t.wrap,fromBounds:Math.min.apply(null,c),toBounds:Math.max.apply(null,c)}}(t,e,r),t.msgModel=c,c.startx&&c.stopx&&a.length>0&&a.forEach((n=>{if(s=n,c.startx===c.stopx){const n=e[t.from],r=e[t.to];s.from=Math.min(n.x-c.width/2,n.x-n.width/2,s.from),s.to=Math.max(r.x+c.width/2,r.x+n.width/2,s.to),s.width=Math.max(s.width,Math.abs(s.to-s.from))-Dh.labelBoxWidth}else s.from=Math.min(c.startx,s.from),s.to=Math.max(c.stopx,s.to),s.width=Math.max(s.width,c.width)-Dh.labelBoxWidth})))})),Oh.activations=[],Nt.debug("Loop type widths:",i),i},Wh={bounds:Oh,drawActors:$h,drawActorsPopup:Rh,setConf:Zh,draw:function(t,e,n,r){const{securityLevel:i,sequence:a}=ar();let s;Dh=a,r.db.clear(),r.parser.parse(t),"sandbox"===i&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===i?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l="sandbox"===i?s.nodes()[0].contentDocument:document;Oh.init(),Nt.debug(r.db);const h="sandbox"===i?c.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`),u=r.db.getActors(),d=r.db.getBoxes(),p=r.db.getActorKeys(),f=r.db.getMessages(),g=r.db.getDiagramTitle(),y=r.db.hasAtLeastOneBox(),m=r.db.hasAtLeastOneBoxWithTitle(),b=function(t,e,n){const r={};return e.forEach((function(e){if(t[e.to]&&t[e.from]){const i=t[e.to];if(e.placement===n.db.PLACEMENT.LEFTOF&&!i.prevActor)return;if(e.placement===n.db.PLACEMENT.RIGHTOF&&!i.nextActor)return;const a=void 0!==e.placement,s=!a,o=a?Ih(Dh):Mh(Dh),c=e.wrap?Gn.wrapLabel(e.message,Dh.width-2*Dh.wrapPadding,o):e.message,l=Gn.calculateTextDimensions(c,o).width+2*Dh.wrapPadding;s&&e.from===i.nextActor?r[e.to]=Math.max(r[e.to]||0,l):s&&e.from===i.prevActor?r[e.from]=Math.max(r[e.from]||0,l):s&&e.from===e.to?(r[e.from]=Math.max(r[e.from]||0,l/2),r[e.to]=Math.max(r[e.to]||0,l/2)):e.placement===n.db.PLACEMENT.RIGHTOF?r[e.from]=Math.max(r[e.from]||0,l):e.placement===n.db.PLACEMENT.LEFTOF?r[i.prevActor]=Math.max(r[i.prevActor]||0,l):e.placement===n.db.PLACEMENT.OVER&&(i.prevActor&&(r[i.prevActor]=Math.max(r[i.prevActor]||0,l/2)),i.nextActor&&(r[e.from]=Math.max(r[e.from]||0,l/2)))}})),Nt.debug("maxMessageWidthPerActor:",r),r}(u,f,r);Dh.height=function(t,e,n){let r=0;Object.keys(t).forEach((e=>{const n=t[e];n.wrap&&(n.description=Gn.wrapLabel(n.description,Dh.width-2*Dh.wrapPadding,Fh(Dh)));const i=Gn.calculateTextDimensions(n.description,Fh(Dh));n.width=n.wrap?Dh.width:Math.max(Dh.width,i.width+2*Dh.wrapPadding),n.height=n.wrap?Math.max(i.height,Dh.height):Dh.height,r=Math.max(r,n.height)}));for(const a in e){const n=t[a];if(!n)continue;const r=t[n.nextActor];if(!r){const t=e[a]+Dh.actorMargin-n.width/2;n.margin=Math.max(t,Dh.actorMargin);continue}const i=e[a]+Dh.actorMargin-n.width/2-r.width/2;n.margin=Math.max(i,Dh.actorMargin)}let i=0;return n.forEach((e=>{const n=Mh(Dh);let r=e.actorKeys.reduce(((e,n)=>e+(t[n].width+(t[n].margin||0))),0);r-=2*Dh.boxTextMargin,e.wrap&&(e.name=Gn.wrapLabel(e.name,r-2*Dh.wrapPadding,n));const a=Gn.calculateTextDimensions(e.name,n);i=Math.max(a.height,i);const s=Math.max(r,a.width+2*Dh.wrapPadding);if(e.margin=Dh.boxTextMargin,r<s){const t=(s-r)/2;e.margin+=t}})),n.forEach((t=>t.textMaxHeight=i)),Math.max(r,Dh.height)}(u,b,d),Nh.insertComputerIcon(h),Nh.insertDatabaseIcon(h),Nh.insertClockIcon(h),y&&(Oh.bumpVerticalPos(Dh.boxMargin),m&&Oh.bumpVerticalPos(d[0].textMaxHeight)),$h(h,u,p,0,Dh,f,!1);const _=Uh(f,u,b,r);Nh.insertArrowHead(h),Nh.insertArrowCrossHead(h),Nh.insertArrowFilledHead(h),Nh.insertSequenceNumber(h);let x=1,v=1;const k=[];f.forEach((function(t){let e,n,i;switch(t.type){case r.db.LINETYPE.NOTE:n=t.noteModel,function(t,e){Oh.bumpVerticalPos(Dh.boxMargin),e.height=Dh.boxMargin,e.starty=Oh.getVerticalPos();const n=Nh.getNoteRect();n.x=e.startx,n.y=e.starty,n.width=e.width||Dh.width,n.class="note";const r=t.append("g"),i=Nh.drawRect(r,n),a=Nh.getTextObj();a.x=e.startx,a.y=e.starty,a.width=n.width,a.dy="1em",a.text=e.message,a.class="noteText",a.fontFamily=Dh.noteFontFamily,a.fontSize=Dh.noteFontSize,a.fontWeight=Dh.noteFontWeight,a.anchor=Dh.noteAlign,a.textMargin=Dh.noteMargin,a.valign="center";const s=kh(r,a),o=Math.round(s.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));i.attr("height",o+2*Dh.noteMargin),e.height+=o+2*Dh.noteMargin,Oh.bumpVerticalPos(o+2*Dh.noteMargin),e.stopy=e.starty+o+2*Dh.noteMargin,e.stopx=e.startx+n.width,Oh.insert(e.startx,e.starty,e.stopx,e.stopy),Oh.models.addNote(e)}(h,n);break;case r.db.LINETYPE.ACTIVE_START:Oh.newActivation(t,h,u);break;case r.db.LINETYPE.ACTIVE_END:!function(t,e){const n=Oh.endActivation(t);n.starty+18>e&&(n.starty=e-6,e+=12),Nh.drawActivation(h,n,e,Dh,Ph(t.from.actor).length),Oh.insert(n.startx,e-10,n.stopx,e)}(t,Oh.getVerticalPos());break;case r.db.LINETYPE.LOOP_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.LOOP_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"loop",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.RECT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin,(t=>Oh.newLoop(void 0,t.message)));break;case r.db.LINETYPE.RECT_END:e=Oh.endLoop(),Nh.drawBackgroundRect(h,e),Oh.models.addLoop(e),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos());break;case r.db.LINETYPE.OPT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.OPT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"opt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.ALT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.ALT_ELSE:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.ALT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"alt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.PAR_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.PAR_AND:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.PAR_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"par",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.AUTONUMBER:x=t.message.start||x,v=t.message.step||v,t.message.visible?r.db.enableSequenceNumbers():r.db.disableSequenceNumbers();break;case r.db.LINETYPE.CRITICAL_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.CRITICAL_OPTION:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.CRITICAL_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"critical",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.BREAK_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.BREAK_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"break",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;default:try{i=t.msgModel,i.starty=Oh.getVerticalPos(),i.sequenceIndex=x,i.sequenceVisible=r.db.showSequenceNumbers();const e=function(t,e){Oh.bumpVerticalPos(10);const{startx:n,stopx:r,message:i}=e,a=Yt.splitBreaks(i).length,s=Gn.calculateTextDimensions(i,Mh(Dh)),o=s.height/a;let c;e.height+=o,Oh.bumpVerticalPos(o);let l=s.height-10;const h=s.width;if(n===r){c=Oh.getVerticalPos()+l,Dh.rightAngles||(l+=Dh.boxMargin,c=Oh.getVerticalPos()+l),l+=30;const t=Math.max(h/2,Dh.width/2);Oh.insert(n-t,Oh.getVerticalPos()-10+l,r+t,Oh.getVerticalPos()+30+l)}else l+=Dh.boxMargin,c=Oh.getVerticalPos()+l,Oh.insert(n,c-10,r,c);return Oh.bumpVerticalPos(l),e.height+=l,e.stopy=e.starty+e.height,Oh.insert(e.fromBounds,e.starty,e.toBounds,e.stopy),c}(0,i);k.push({messageModel:i,lineStartY:e}),Oh.models.addMessage(i)}catch(a){Nt.error("error while drawing message",a)}}[r.db.LINETYPE.SOLID_OPEN,r.db.LINETYPE.DOTTED_OPEN,r.db.LINETYPE.SOLID,r.db.LINETYPE.DOTTED,r.db.LINETYPE.SOLID_CROSS,r.db.LINETYPE.DOTTED_CROSS,r.db.LINETYPE.SOLID_POINT,r.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(x+=v)})),k.forEach((t=>function(t,e,n,r){const{startx:i,stopx:a,starty:s,message:o,type:c,sequenceIndex:l,sequenceVisible:h}=e,u=Gn.calculateTextDimensions(o,Mh(Dh)),d=Nh.getTextObj();d.x=i,d.y=s+10,d.width=a-i,d.class="messageText",d.dy="1em",d.text=o,d.fontFamily=Dh.messageFontFamily,d.fontSize=Dh.messageFontSize,d.fontWeight=Dh.messageFontWeight,d.anchor=Dh.messageAlign,d.valign="center",d.textMargin=Dh.wrapPadding,d.tspan=!1,kh(t,d);const p=u.width;let f;i===a?f=Dh.rightAngles?t.append("path").attr("d",`M  ${i},${n} H ${i+Math.max(Dh.width/2,p/2)} V ${n+25} H ${i}`):t.append("path").attr("d","M "+i+","+n+" C "+(i+60)+","+(n-10)+" "+(i+60)+","+(n+30)+" "+i+","+(n+20)):(f=t.append("line"),f.attr("x1",i),f.attr("y1",n),f.attr("x2",a),f.attr("y2",n)),c===r.db.LINETYPE.DOTTED||c===r.db.LINETYPE.DOTTED_CROSS||c===r.db.LINETYPE.DOTTED_POINT||c===r.db.LINETYPE.DOTTED_OPEN?(f.style("stroke-dasharray","3, 3"),f.attr("class","messageLine1")):f.attr("class","messageLine0");let g="";Dh.arrowMarkerAbsolute&&(g=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,g=g.replace(/\(/g,"\\("),g=g.replace(/\)/g,"\\)")),f.attr("stroke-width",2),f.attr("stroke","none"),f.style("fill","none"),c!==r.db.LINETYPE.SOLID&&c!==r.db.LINETYPE.DOTTED||f.attr("marker-end","url("+g+"#arrowhead)"),c!==r.db.LINETYPE.SOLID_POINT&&c!==r.db.LINETYPE.DOTTED_POINT||f.attr("marker-end","url("+g+"#filled-head)"),c!==r.db.LINETYPE.SOLID_CROSS&&c!==r.db.LINETYPE.DOTTED_CROSS||f.attr("marker-end","url("+g+"#crosshead)"),(h||Dh.showSequenceNumbers)&&(f.attr("marker-start","url("+g+"#sequencenumber)"),t.append("text").attr("x",i).attr("y",n+4).attr("font-family","sans-serif").attr("font-size","12px").attr("text-anchor","middle").attr("class","sequenceNumber").text(l))}(h,t.messageModel,t.lineStartY,r))),Dh.mirrorActors&&(Oh.bumpVerticalPos(2*Dh.boxMargin),$h(h,u,p,Oh.getVerticalPos(),Dh,f,!0),Oh.bumpVerticalPos(Dh.boxMargin),Ch(h,Oh.getVerticalPos())),Oh.models.boxes.forEach((function(t){t.height=Oh.getVerticalPos()-t.y,Oh.insert(t.x,t.y,t.x+t.width,t.height),t.startx=t.x,t.starty=t.y,t.stopx=t.startx+t.width,t.stopy=t.starty+t.height,t.stroke="rgb(0,0,0, 0.5)",Nh.drawBox(h,t,Dh)})),y&&Oh.bumpVerticalPos(Dh.boxMargin);const w=Rh(h,u,p,l),{bounds:E}=Oh.getBounds();Nt.debug("For line height fix Querying: #"+e+" .actor-line");(0,o.td_)("#"+e+" .actor-line").attr("y2",E.stopy);let C=E.stopy-E.starty;C<w.maxHeight&&(C=w.maxHeight);let T=C+2*Dh.diagramMarginY;Dh.mirrorActors&&(T=T-Dh.boxMargin+Dh.bottomMarginAdj);let S=E.stopx-E.startx;S<w.maxWidth&&(S=w.maxWidth);const A=S+2*Dh.diagramMarginX;g&&h.append("text").text(g).attr("x",(E.stopx-E.startx)/2-2*Dh.diagramMarginX).attr("y",-25),dr(h,T,A,Dh.useMaxWidth);const L=g?40:0;h.attr("viewBox",E.startx-Dh.diagramMarginX+" -"+(Dh.diagramMarginY+L)+" "+A+" "+(T+L)),Nt.debug("models:",Oh.models)}};var qh=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,21],h=[1,22],u=[1,23],d=[1,24],p=[1,37],f=[1,25],g=[1,26],y=[1,27],m=[1,28],b=[1,29],_=[1,32],x=[1,33],v=[1,34],k=[1,35],w=[1,36],E=[1,39],C=[1,40],T=[1,41],S=[1,42],A=[1,38],L=[1,45],B=[1,4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],N=[1,4,5,14,15,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],D=[1,4,5,7,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],O=[4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],M={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NL:5,directive:6,SD:7,document:8,line:9,statement:10,classDefStatement:11,cssClassStatement:12,idStatement:13,DESCR:14,"--\x3e":15,HIDE_EMPTY:16,scale:17,WIDTH:18,COMPOSIT_STATE:19,STRUCT_START:20,STRUCT_STOP:21,STATE_DESCR:22,AS:23,ID:24,FORK:25,JOIN:26,CHOICE:27,CONCURRENT:28,note:29,notePosition:30,NOTE_TEXT:31,direction:32,acc_title:33,acc_title_value:34,acc_descr:35,acc_descr_value:36,acc_descr_multiline_value:37,classDef:38,CLASSDEF_ID:39,CLASSDEF_STYLEOPTS:40,DEFAULT:41,class:42,CLASSENTITY_IDS:43,STYLECLASS:44,openDirective:45,typeDirective:46,closeDirective:47,":":48,argDirective:49,direction_tb:50,direction_bt:51,direction_rl:52,direction_lr:53,eol:54,";":55,EDGE_STATE:56,STYLE_SEPARATOR:57,left_of:58,right_of:59,open_directive:60,type_directive:61,arg_directive:62,close_directive:63,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NL",7:"SD",14:"DESCR",15:"--\x3e",16:"HIDE_EMPTY",17:"scale",18:"WIDTH",19:"COMPOSIT_STATE",20:"STRUCT_START",21:"STRUCT_STOP",22:"STATE_DESCR",23:"AS",24:"ID",25:"FORK",26:"JOIN",27:"CHOICE",28:"CONCURRENT",29:"note",31:"NOTE_TEXT",33:"acc_title",34:"acc_title_value",35:"acc_descr",36:"acc_descr_value",37:"acc_descr_multiline_value",38:"classDef",39:"CLASSDEF_ID",40:"CLASSDEF_STYLEOPTS",41:"DEFAULT",42:"class",43:"CLASSENTITY_IDS",44:"STYLECLASS",48:":",50:"direction_tb",51:"direction_bt",52:"direction_rl",53:"direction_lr",55:";",56:"EDGE_STATE",57:"STYLE_SEPARATOR",58:"left_of",59:"right_of",60:"open_directive",61:"type_directive",62:"arg_directive",63:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[10,1],[10,1],[10,1],[10,2],[10,3],[10,4],[10,1],[10,2],[10,1],[10,4],[10,3],[10,6],[10,1],[10,1],[10,1],[10,1],[10,4],[10,4],[10,1],[10,1],[10,2],[10,2],[10,1],[11,3],[11,3],[12,3],[6,3],[6,5],[32,1],[32,1],[32,1],[32,1],[54,1],[54,1],[13,1],[13,1],[13,3],[13,3],[30,1],[30,1],[45,1],[46,1],[49,1],[47,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.setRootDoc(a[o]),a[o];case 5:this.$=[];break;case 6:"nl"!=a[o]&&(a[o-1].push(a[o]),this.$=a[o-1]);break;case 7:case 8:case 12:this.$=a[o];break;case 9:this.$="nl";break;case 13:const t=a[o-1];t.description=r.trimColon(a[o]),this.$=t;break;case 14:this.$={stmt:"relation",state1:a[o-2],state2:a[o]};break;case 15:const e=r.trimColon(a[o]);this.$={stmt:"relation",state1:a[o-3],state2:a[o-1],description:e};break;case 19:this.$={stmt:"state",id:a[o-3],type:"default",description:"",doc:a[o-1]};break;case 20:var c=a[o],l=a[o-2].trim();if(a[o].match(":")){var h=a[o].split(":");c=h[0],l=[l,h[1]]}this.$={stmt:"state",id:c,type:"default",description:l};break;case 21:this.$={stmt:"state",id:a[o-3],type:"default",description:a[o-5],doc:a[o-1]};break;case 22:this.$={stmt:"state",id:a[o],type:"fork"};break;case 23:this.$={stmt:"state",id:a[o],type:"join"};break;case 24:this.$={stmt:"state",id:a[o],type:"choice"};break;case 25:this.$={stmt:"state",id:r.getDividerId(),type:"divider"};break;case 26:this.$={stmt:"state",id:a[o-1].trim(),note:{position:a[o-2].trim(),text:a[o].trim()}};break;case 30:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 31:case 32:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 33:case 34:this.$={stmt:"classDef",id:a[o-1].trim(),classes:a[o].trim()};break;case 35:this.$={stmt:"applyClass",id:a[o-1].trim(),styleClass:a[o].trim()};break;case 38:r.setDirection("TB"),this.$={stmt:"dir",value:"TB"};break;case 39:r.setDirection("BT"),this.$={stmt:"dir",value:"BT"};break;case 40:r.setDirection("RL"),this.$={stmt:"dir",value:"RL"};break;case 41:r.setDirection("LR"),this.$={stmt:"dir",value:"LR"};break;case 44:case 45:this.$={stmt:"state",id:a[o].trim(),type:"default",description:""};break;case 46:case 47:this.$={stmt:"state",id:a[o-2].trim(),classes:[a[o].trim()],type:"default",description:""};break;case 50:r.parseDirective("%%{","open_directive");break;case 51:r.parseDirective(a[o],"type_directive");break;case 52:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 53:r.parseDirective("}%%","close_directive","state")}},table:[{3:1,4:n,5:r,6:4,7:i,45:6,60:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,45:6,60:a},{3:9,4:n,5:r,6:4,7:i,45:6,60:a},{3:10,4:n,5:r,6:4,7:i,45:6,60:a},e([1,4,5,16,17,19,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],s,{8:11}),{46:12,61:[1,13]},{61:[2,50]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},{47:43,48:[1,44],63:L},e([48,63],[2,51]),e(B,[2,6]),{6:30,10:46,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,8]),e(B,[2,9]),e(B,[2,10]),e(B,[2,11]),e(B,[2,12],{14:[1,47],15:[1,48]}),e(B,[2,16]),{18:[1,49]},e(B,[2,18],{20:[1,50]}),{23:[1,51]},e(B,[2,22]),e(B,[2,23]),e(B,[2,24]),e(B,[2,25]),{30:52,31:[1,53],58:[1,54],59:[1,55]},e(B,[2,28]),e(B,[2,29]),{34:[1,56]},{36:[1,57]},e(B,[2,32]),{39:[1,58],41:[1,59]},{43:[1,60]},e(N,[2,44],{57:[1,61]}),e(N,[2,45],{57:[1,62]}),e(B,[2,38]),e(B,[2,39]),e(B,[2,40]),e(B,[2,41]),e(D,[2,36]),{49:63,62:[1,64]},e(D,[2,53]),e(B,[2,7]),e(B,[2,13]),{13:65,24:p,56:A},e(B,[2,17]),e(O,s,{8:66}),{24:[1,67]},{24:[1,68]},{23:[1,69]},{24:[2,48]},{24:[2,49]},e(B,[2,30]),e(B,[2,31]),{40:[1,70]},{40:[1,71]},{44:[1,72]},{24:[1,73]},{24:[1,74]},{47:75,63:L},{63:[2,52]},e(B,[2,14],{14:[1,76]}),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,77],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,20],{20:[1,78]}),{31:[1,79]},{24:[1,80]},e(B,[2,33]),e(B,[2,34]),e(B,[2,35]),e(N,[2,46]),e(N,[2,47]),e(D,[2,37]),e(B,[2,15]),e(B,[2,19]),e(O,s,{8:81}),e(B,[2,26]),e(B,[2,27]),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,82],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,21])],defaultActions:{7:[2,50],8:[2,1],9:[2,2],10:[2,3],54:[2,48],55:[2,49],64:[2,52]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},I=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 41;case 1:case 44:return 50;case 2:case 45:return 51;case 3:case 46:return 52;case 4:case 47:return 53;case 5:return this.begin("open_directive"),60;case 6:return this.begin("type_directive"),61;case 7:return this.popState(),this.begin("arg_directive"),48;case 8:return this.popState(),this.popState(),63;case 9:return 62;case 10:case 11:case 13:case 14:case 15:case 16:case 56:case 58:case 64:break;case 12:case 79:return 5;case 17:case 34:return this.pushState("SCALE"),17;case 18:case 35:return 18;case 19:case 25:case 36:case 51:case 54:this.popState();break;case 20:return this.begin("acc_title"),33;case 21:return this.popState(),"acc_title_value";case 22:return this.begin("acc_descr"),35;case 23:return this.popState(),"acc_descr_value";case 24:this.begin("acc_descr_multiline");break;case 26:return"acc_descr_multiline_value";case 27:return this.pushState("CLASSDEF"),38;case 28:return this.popState(),this.pushState("CLASSDEFID"),"DEFAULT_CLASSDEF_ID";case 29:return this.popState(),this.pushState("CLASSDEFID"),39;case 30:return this.popState(),40;case 31:return this.pushState("CLASS"),42;case 32:return this.popState(),this.pushState("CLASS_STYLE"),43;case 33:return this.popState(),44;case 37:this.pushState("STATE");break;case 38:case 41:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),25;case 39:case 42:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),26;case 40:case 43:return this.popState(),e.yytext=e.yytext.slice(0,-10).trim(),27;case 48:this.pushState("STATE_STRING");break;case 49:return this.pushState("STATE_ID"),"AS";case 50:case 66:return this.popState(),"ID";case 52:return"STATE_DESCR";case 53:return 19;case 55:return this.popState(),this.pushState("struct"),20;case 57:return this.popState(),21;case 59:return this.begin("NOTE"),29;case 60:return this.popState(),this.pushState("NOTE_ID"),58;case 61:return this.popState(),this.pushState("NOTE_ID"),59;case 62:this.popState(),this.pushState("FLOATING_NOTE");break;case 63:return this.popState(),this.pushState("FLOATING_NOTE_ID"),"AS";case 65:return"NOTE_TEXT";case 67:return this.popState(),this.pushState("NOTE_TEXT"),24;case 68:return this.popState(),e.yytext=e.yytext.substr(2).trim(),31;case 69:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),31;case 70:case 71:return 7;case 72:return 16;case 73:return 56;case 74:return 24;case 75:return e.yytext=e.yytext.trim(),14;case 76:return 15;case 77:return 28;case 78:return 57;case 80:return"INVALID"}},rules:[/^(?:default\b)/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:[\s]+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:classDef\s+)/i,/^(?:DEFAULT\s+)/i,/^(?:\w+\s+)/i,/^(?:[^\n]*)/i,/^(?:class\s+)/i,/^(?:(\w+)+((,\s*\w+)*))/i,/^(?:[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:state\s+)/i,/^(?:.*<<fork>>)/i,/^(?:.*<<join>>)/i,/^(?:.*<<choice>>)/i,/^(?:.*\[\[fork\]\])/i,/^(?:.*\[\[join\]\])/i,/^(?:.*\[\[choice\]\])/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:["])/i,/^(?:\s*as\s+)/i,/^(?:[^\n\{]*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n\s\{]+)/i,/^(?:\n)/i,/^(?:\{)/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:\})/i,/^(?:[\n])/i,/^(?:note\s+)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:")/i,/^(?:\s*as\s*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n]*)/i,/^(?:\s*[^:\n\s\-]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:[\s\S]*?end note\b)/i,/^(?:stateDiagram\s+)/i,/^(?:stateDiagram-v2\s+)/i,/^(?:hide empty description\b)/i,/^(?:\[\*\])/i,/^(?:[^:\n\s\-\{]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:-->)/i,/^(?:--)/i,/^(?::::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{LINE:{rules:[14,15],inclusive:!1},close_directive:{rules:[14,15],inclusive:!1},arg_directive:{rules:[8,9,14,15],inclusive:!1},type_directive:{rules:[7,8,14,15],inclusive:!1},open_directive:{rules:[6,14,15],inclusive:!1},struct:{rules:[14,15,27,31,37,44,45,46,47,56,57,58,59,73,74,75,76,77],inclusive:!1},FLOATING_NOTE_ID:{rules:[66],inclusive:!1},FLOATING_NOTE:{rules:[63,64,65],inclusive:!1},NOTE_TEXT:{rules:[68,69],inclusive:!1},NOTE_ID:{rules:[67],inclusive:!1},NOTE:{rules:[60,61,62],inclusive:!1},CLASS_STYLE:{rules:[33],inclusive:!1},CLASS:{rules:[32],inclusive:!1},CLASSDEFID:{rules:[30],inclusive:!1},CLASSDEF:{rules:[28,29],inclusive:!1},acc_descr_multiline:{rules:[25,26],inclusive:!1},acc_descr:{rules:[23],inclusive:!1},acc_title:{rules:[21],inclusive:!1},SCALE:{rules:[18,19,35,36],inclusive:!1},ALIAS:{rules:[],inclusive:!1},STATE_ID:{rules:[50],inclusive:!1},STATE_STRING:{rules:[51,52],inclusive:!1},FORK_STATE:{rules:[],inclusive:!1},STATE:{rules:[14,15,38,39,40,41,42,43,48,49,53,54,55],inclusive:!1},ID:{rules:[14,15],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,5,10,11,12,13,15,16,17,20,22,24,27,31,34,37,55,59,70,71,72,73,74,75,76,78,79,80],inclusive:!0}}},t);function F(){this.yy={}}return M.lexer=I,F.prototype=M,M.Parser=F,new F}();qh.parser=qh;const Hh=qh,Vh=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*stateDiagram/)},Gh=(t,e)=>{var n;return null!==t.match(/^\s*stateDiagram-v2/)||!(!t.match(/^\s*stateDiagram/)||"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer))},Xh="state",Kh="relation",Qh="default",Jh="divider",tu="[*]",eu="start",nu="color",ru="fill";let iu="LR",au=[],su={};let ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,hu=0;const uu=t=>JSON.parse(JSON.stringify(t)),du=(t,e,n)=>{if(e.stmt===Kh)du(t,e.state1,!0),du(t,e.state2,!1);else if(e.stmt===Xh&&("[*]"===e.id?(e.id=n?t.id+"_start":t.id+"_end",e.start=n):e.id=e.id.trim()),e.doc){const t=[];let n,r=[];for(n=0;n<e.doc.length;n++)if(e.doc[n].type===Jh){const i=uu(e.doc[n]);i.doc=uu(r),t.push(i),r=[]}else r.push(e.doc[n]);if(t.length>0&&r.length>0){const n={stmt:Xh,id:Fn(),type:"divider",doc:uu(r)};t.push(uu(n)),e.doc=t}e.doc.forEach((t=>du(e,t,!0)))}},pu=function(t,e="default",n=null,r=null,i=null,a=null,s=null,o=null){const c=null==t?void 0:t.trim();if(void 0===cu.states[c]?(Nt.info("Adding state ",c,r),cu.states[c]={id:c,descriptions:[],type:e,doc:n,note:i,classes:[],styles:[],textStyles:[]}):(cu.states[c].doc||(cu.states[c].doc=n),cu.states[c].type||(cu.states[c].type=e)),r&&(Nt.info("Setting state description",c,r),"string"==typeof r&&_u(c,r.trim()),"object"==typeof r&&r.forEach((t=>_u(c,t.trim())))),i&&(cu.states[c].note=i,cu.states[c].note.text=Yt.sanitizeText(cu.states[c].note.text,ar())),a){Nt.info("Setting state classes",c,a);("string"==typeof a?[a]:a).forEach((t=>vu(c,t.trim())))}if(s){Nt.info("Setting state styles",c,s);("string"==typeof s?[s]:s).forEach((t=>ku(c,t.trim())))}if(o){Nt.info("Setting state styles",c,s);("string"==typeof o?[o]:o).forEach((t=>wu(c,t.trim())))}},fu=function(t){ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,su={},t||Dr()},gu=function(t){return cu.states[t]};function yu(t=""){let e=t;return t===tu&&(lu++,e=`start${lu}`),e}function mu(t="",e="default"){return t===tu?eu:e}const bu=function(t,e,n){if("object"==typeof t)!function(t,e,n){let r=yu(t.id.trim()),i=mu(t.id.trim(),t.type),a=yu(e.id.trim()),s=mu(e.id.trim(),e.type);pu(r,i,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles),pu(a,s,e.doc,e.description,e.note,e.classes,e.styles,e.textStyles),cu.relations.push({id1:r,id2:a,relationTitle:Yt.sanitizeText(n,ar())})}(t,e,n);else{const r=yu(t.trim()),i=mu(t),a=function(t=""){let e=t;return"[*]"===t&&(lu++,e=`end${lu}`),e}(e.trim()),s=function(t="",e="default"){return"[*]"===t?"end":e}(e);pu(r,i),pu(a,s),cu.relations.push({id1:r,id2:a,title:Yt.sanitizeText(n,ar())})}},_u=function(t,e){const n=cu.states[t],r=e.startsWith(":")?e.replace(":","").trim():e;n.descriptions.push(Yt.sanitizeText(r,ar()))},xu=function(t,e=""){void 0===su[t]&&(su[t]={id:t,styles:[],textStyles:[]});const n=su[t];null!=e&&e.split(",").forEach((t=>{const e=t.replace(/([^;]*);/,"$1").trim();if(t.match(nu)){const t=e.replace(ru,"bgFill").replace(nu,ru);n.textStyles.push(t)}n.styles.push(e)}))},vu=function(t,e){t.split(",").forEach((function(t){let n=gu(t);if(void 0===n){const e=t.trim();pu(e),n=gu(e)}n.classes.push(e)}))},ku=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},wu=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},Eu={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().state,addState:pu,clear:fu,getState:gu,getStates:function(){return cu.states},getRelations:function(){return cu.relations},getClasses:function(){return su},getDirection:()=>iu,addRelation:bu,getDividerId:()=>(hu++,"divider-id-"+hu),setDirection:t=>{iu=t},cleanupLabel:function(t){return":"===t.substring(0,1)?t.substr(2).trim():t.trim()},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3},logDocuments:function(){Nt.info("Documents = ",ou)},getRootDoc:()=>au,setRootDoc:t=>{Nt.info("Setting root doc",t),au=t},getRootDocV2:()=>(du({id:"root"},{id:"root",doc:au},!0),{id:"root",doc:au}),extract:t=>{let e;e=t.doc?t.doc:t,Nt.info(e),fu(!0),Nt.info("Extract",e),e.forEach((t=>{switch(t.stmt){case Xh:pu(t.id.trim(),t.type,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles);break;case Kh:bu(t.state1,t.state2,t.description);break;case"classDef":xu(t.id.trim(),t.classes);break;case"applyClass":vu(t.id.trim(),t.styleClass)}}))},trimColon:t=>t&&":"===t[0]?t.substr(1).trim():t.trim(),getAccTitle:Mr,setAccTitle:Or,getAccDescription:Fr,setAccDescription:Ir,addStyleClass:xu,setCssClass:vu,addDescription:_u,setDiagramTitle:$r,getDiagramTitle:Rr},Cu={},Tu=(t,e)=>{Cu[t]=e},Su=(t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+1.3*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.descriptions[0]).node().getBBox(),r=n.height,i=t.append("text").attr("x",ar().state.padding).attr("y",r+.4*ar().state.padding+ar().state.dividerMargin+ar().state.textHeight).attr("class","state-description");let a=!0,s=!0;e.descriptions.forEach((function(t){a||(!function(t,e,n){const r=t.append("tspan").attr("x",2*ar().state.padding).text(e);n||r.attr("dy",ar().state.textHeight)}(i,t,s),s=!1),a=!1}));const o=t.append("line").attr("x1",ar().state.padding).attr("y1",ar().state.padding+r+ar().state.dividerMargin/2).attr("y2",ar().state.padding+r+ar().state.dividerMargin/2).attr("class","descr-divider"),c=i.node().getBBox(),l=Math.max(c.width,n.width);return o.attr("x2",l+3*ar().state.padding),t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",l+2*ar().state.padding).attr("height",c.height+r+2*ar().state.padding).attr("rx",ar().state.radius),t},Au=(t,e,n)=>{const r=ar().state.padding,i=2*ar().state.padding,a=t.node().getBBox(),s=a.width,o=a.x,c=t.append("text").attr("x",0).attr("y",ar().state.titleShift).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),l=c.node().getBBox().width+i;let h,u=Math.max(l,s);u===s&&(u+=i);const d=t.node().getBBox();e.doc,h=o-r,l>s&&(h=(s-u)/2+r),Math.abs(o-d.x)<r&&l>s&&(h=o-(l-s)/2);const p=1-ar().state.textHeight;return t.insert("rect",":first-child").attr("x",h).attr("y",p).attr("class",n?"alt-composit":"composit").attr("width",u).attr("height",d.height+ar().state.textHeight+ar().state.titleShift+1).attr("rx","0"),c.attr("x",h+r),l<=s&&c.attr("x",o+(u-i)/2-l/2+r),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",3*ar().state.textHeight).attr("rx",ar().state.radius),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",d.height+3+2*ar().state.textHeight).attr("rx",ar().state.radius),t},Lu=(t,e)=>{e.attr("class","state-note");const n=e.append("rect").attr("x",0).attr("y",ar().state.padding),r=e.append("g"),{textWidth:i,textHeight:a}=((t,e,n,r)=>{let i=0;const a=r.append("text");a.style("text-anchor","start"),a.attr("class","noteText");let s=t.replace(/\r\n/g,"<br/>");s=s.replace(/\n/g,"<br/>");const o=s.split(Yt.lineBreakRegex);let c=1.25*ar().state.noteMargin;for(const l of o){const t=l.trim();if(t.length>0){const r=a.append("tspan");r.text(t),0===c&&(c+=r.node().getBBox().height),i+=c,r.attr("x",e+ar().state.noteMargin),r.attr("y",n+i+1.25*ar().state.noteMargin)}}return{textWidth:a.node().getBBox().width,textHeight:i}})(t,0,0,r);return n.attr("height",a+2*ar().state.noteMargin),n.attr("width",i+2*ar().state.noteMargin),n},Bu=function(t,e){const n=e.id,r={id:n,label:e.id,width:0,height:0},i=t.append("g").attr("id",n).attr("class","stateGroup");"start"===e.type&&(t=>{t.append("circle").attr("class","start-state").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit).attr("cy",ar().state.padding+ar().state.sizeUnit)})(i),"end"===e.type&&(t=>{t.append("circle").attr("class","end-state-outer").attr("r",ar().state.sizeUnit+ar().state.miniPadding).attr("cx",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding).attr("cy",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding),t.append("circle").attr("class","end-state-inner").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit+2).attr("cy",ar().state.padding+ar().state.sizeUnit+2)})(i),"fork"!==e.type&&"join"!==e.type||((t,e)=>{let n=ar().state.forkWidth,r=ar().state.forkHeight;if(e.parentId){let t=n;n=r,r=t}t.append("rect").style("stroke","black").style("fill","black").attr("width",n).attr("height",r).attr("x",ar().state.padding).attr("y",ar().state.padding)})(i,e),"note"===e.type&&Lu(e.note.text,i),"divider"===e.type&&(t=>{t.append("line").style("stroke","grey").style("stroke-dasharray","3").attr("x1",ar().state.textHeight).attr("class","divider").attr("x2",2*ar().state.textHeight).attr("y1",0).attr("y2",0)})(i),"default"===e.type&&0===e.descriptions.length&&((t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+2*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),r=n.node().getBBox();t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",r.width+2*ar().state.padding).attr("height",r.height+2*ar().state.padding).attr("rx",ar().state.radius)})(i,e),"default"===e.type&&e.descriptions.length>0&&Su(i,e);const a=i.node().getBBox();return r.width=a.width+2*ar().state.padding,r.height=a.height+2*ar().state.padding,Tu(n,r),r};let Nu=0;let Du;const Ou={},Mu=(t,e,n,r,i,a,s)=>{const c=new ht.k({compound:!0,multigraph:!0});let l,h=!0;for(l=0;l<t.length;l++)if("relation"===t[l].stmt){h=!1;break}n?c.setGraph({rankdir:"LR",multigraph:!0,compound:!0,ranker:"tight-tree",ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,isMultiGraph:!0}):c.setGraph({rankdir:"TB",multigraph:!0,compound:!0,ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,ranker:"tight-tree",isMultiGraph:!0}),c.setDefaultEdgeLabel((function(){return{}})),s.db.extract(t);const u=s.db.getStates(),d=s.db.getRelations(),p=Object.keys(u);for(const o of p){const t=u[o];let l;if(n&&(t.parentId=n),t.doc){let n=e.append("g").attr("id",t.id).attr("class","stateGroup");l=Mu(t.doc,n,t.id,!r,i,a,s);{n=Au(n,t,r);let e=n.node().getBBox();l.width=e.width,l.height=e.height+Du.padding/2,Ou[t.id]={y:Du.compositTitleSize}}}else l=Bu(e,t);if(t.note){const n={descriptions:[],id:t.id+"-note",note:t.note,type:"note"},r=Bu(e,n);"left of"===t.note.position?(c.setNode(l.id+"-note",r),c.setNode(l.id,l)):(c.setNode(l.id,l),c.setNode(l.id+"-note",r)),c.setParent(l.id,l.id+"-group"),c.setParent(l.id+"-note",l.id+"-group")}else c.setNode(l.id,l)}Nt.debug("Count=",c.nodeCount(),c);let f=0;d.forEach((function(t){var e;f++,Nt.debug("Setting edge",t),c.setEdge(t.id1,t.id2,{relation:t,width:(e=t.title,e?e.length*Du.fontSizeFactor:1),height:Du.labelHeight*Yt.getRows(t.title).length,labelpos:"c"},"id"+f)})),(0,lt.bK)(c),Nt.debug("Graph after layout",c.nodes());const g=e.node();c.nodes().forEach((function(t){if(void 0!==t&&void 0!==c.node(t)){Nt.warn("Node "+t+": "+JSON.stringify(c.node(t))),i.select("#"+g.id+" #"+t).attr("transform","translate("+(c.node(t).x-c.node(t).width/2)+","+(c.node(t).y+(Ou[t]?Ou[t].y:0)-c.node(t).height/2)+" )"),i.select("#"+g.id+" #"+t).attr("data-x-shift",c.node(t).x-c.node(t).width/2);a.querySelectorAll("#"+g.id+" #"+t+" .divider").forEach((t=>{const e=t.parentElement;let n=0,r=0;e&&(e.parentElement&&(n=e.parentElement.getBBox().width),r=parseInt(e.getAttribute("data-x-shift"),10),Number.isNaN(r)&&(r=0)),t.setAttribute("x1",0-r+8),t.setAttribute("x2",n-r-8)}))}else Nt.debug("No Node "+t+": "+JSON.stringify(c.node(t)))}));let y=g.getBBox();c.edges().forEach((function(t){void 0!==t&&void 0!==c.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(c.edge(t))),function(t,e,n){e.points=e.points.filter((t=>!Number.isNaN(t.y)));const r=e.points,i=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),a=t.append("path").attr("d",i(r)).attr("id","edge"+Nu).attr("class","transition");let s="";if(ar().state.arrowMarkerAbsolute&&(s=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,s=s.replace(/\(/g,"\\("),s=s.replace(/\)/g,"\\)")),a.attr("marker-end","url("+s+"#"+function(t){switch(t){case Eu.relationType.AGGREGATION:return"aggregation";case Eu.relationType.EXTENSION:return"extension";case Eu.relationType.COMPOSITION:return"composition";case Eu.relationType.DEPENDENCY:return"dependency"}}(Eu.relationType.DEPENDENCY)+"End)"),void 0!==n.title){const r=t.append("g").attr("class","stateLabel"),{x:i,y:a}=Gn.calcLabelPosition(e.points),s=Yt.getRows(n.title);let o=0;const c=[];let l=0,h=0;for(let t=0;t<=s.length;t++){const e=r.append("text").attr("text-anchor","middle").text(s[t]).attr("x",i).attr("y",a+o),n=e.node().getBBox();if(l=Math.max(l,n.width),h=Math.min(h,n.x),Nt.info(n.x,i,a+o),0===o){const t=e.node().getBBox();o=t.height,Nt.info("Title height",o,a)}c.push(e)}let u=o*s.length;if(s.length>1){const t=(s.length-1)*o*.5;c.forEach(((e,n)=>e.attr("y",a+n*o-t))),u=o*s.length}const d=r.node().getBBox();r.insert("rect",":first-child").attr("class","box").attr("x",i-l/2-ar().state.padding/2).attr("y",a-u/2-ar().state.padding/2-3.5).attr("width",l+ar().state.padding).attr("height",u+ar().state.padding),Nt.info(d)}Nu++}(e,c.edge(t),c.edge(t).relation))})),y=g.getBBox();const m={id:n||"root",label:n||"root",width:0,height:0};return m.width=y.width+2*Du.padding,m.height=y.height+2*Du.padding,Nt.debug("Doc rendered",m,c),m},Iu={setConf:function(){},draw:function(t,e,n,r){Du=ar().state;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body"),c="sandbox"===i?a.nodes()[0].contentDocument:document;Nt.debug("Rendering diagram "+t);const l=s.select(`[id='${e}']`);l.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z");new ht.k({multigraph:!0,compound:!0,rankdir:"RL"}).setDefaultEdgeLabel((function(){return{}}));const h=r.db.getRootDoc();Mu(h,l,void 0,!1,s,c,r);const u=Du.padding,d=l.node().getBBox(),p=d.width+2*u,f=d.height+2*u;dr(l,f,1.75*p,Du.useMaxWidth),l.attr("viewBox",`${d.x-Du.padding}  ${d.y-Du.padding} `+p+" "+f)}},Fu="rect",$u="rectWithTitle",Ru="statediagram",Zu="transition",Pu="parent",ju="note",Yu="----parent",zu="fill:none",Uu="fill: #333",Wu="text",qu="normal";let Hu={},Vu=0;function Gu(t="",e=0,n="",r="----"){return`state-${t}${null!==n&&n.length>0?`${r}${n}`:""}-${e}`}const Xu=(t,e,n,r,i,a)=>{const s=n.id,o=null==(c=r[s])?"":c.classes?c.classes.join(" "):"";var c;if("root"!==s){let e=Fu;!0===n.start&&(e="start"),!1===n.start&&(e="end"),n.type!==Qh&&(e=n.type),Hu[s]||(Hu[s]={id:s,shape:e,description:Yt.sanitizeText(s,ar()),classes:`${o} statediagram-state`});const r=Hu[s];n.description&&(Array.isArray(r.description)?(r.shape=$u,r.description.push(n.description)):r.description.length>0?(r.shape=$u,r.description===s?r.description=[n.description]:r.description=[r.description,n.description]):(r.shape=Fu,r.description=n.description),r.description=Yt.sanitizeTextOrArray(r.description,ar())),1===r.description.length&&r.shape===$u&&(r.shape=Fu),!r.type&&n.doc&&(Nt.info("Setting cluster for ",s,Qu(n)),r.type="group",r.dir=Qu(n),r.shape=n.type===Jh?"divider":"roundedWithTitle",r.classes=r.classes+" statediagram-cluster "+(a?"statediagram-cluster-alt":""));const i={labelStyle:"",shape:r.shape,labelText:r.description,classes:r.classes,style:"",id:s,dir:r.dir,domId:Gu(s,Vu),type:r.type,padding:15};if(n.note){const e={labelStyle:"",shape:"note",labelText:n.note.text,classes:"statediagram-note",style:"",id:s+"----note-"+Vu,domId:Gu(s,Vu,ju),type:r.type,padding:15},a={labelStyle:"",shape:"noteGroup",labelText:n.note.text,classes:r.classes,style:"",id:s+Yu,domId:Gu(s,Vu,Pu),type:"group",padding:0};Vu++;const o=s+Yu;t.setNode(o,a),t.setNode(e.id,e),t.setNode(s,i),t.setParent(s,o),t.setParent(e.id,o);let c=s,l=e.id;"left of"===n.note.position&&(c=e.id,l=s),t.setEdge(c,l,{arrowhead:"none",arrowType:"",style:zu,labelStyle:"",classes:"transition note-edge",arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu})}else t.setNode(s,i)}e&&"root"!==e.id&&(Nt.trace("Setting node ",s," to be child of its parent ",e.id),t.setParent(s,e.id)),n.doc&&(Nt.trace("Adding nodes children "),Ku(t,n,n.doc,r,i,!a))},Ku=(t,e,n,r,i,a)=>{Nt.trace("items",n),n.forEach((n=>{switch(n.stmt){case Xh:case Qh:Xu(t,e,n,r,i,a);break;case Kh:{Xu(t,e,n.state1,r,i,a),Xu(t,e,n.state2,r,i,a);const s={id:"edge"+Vu,arrowhead:"normal",arrowTypeEnd:"arrow_barb",style:zu,labelStyle:"",label:Yt.sanitizeText(n.description,ar()),arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu,classes:Zu};t.setEdge(n.state1.id,n.state2.id,s,Vu),Vu++}}}))},Qu=(t,e="TB")=>{let n=e;if(t.doc)for(let r=0;r<t.doc.length;r++){const e=t.doc[r];"dir"===e.stmt&&(n=e.value)}return n},Ju={setConf:function(t){const e=Object.keys(t);for(const n of e)t[n]},getClasses:function(t,e){Nt.trace("Extracting classes"),e.db.clear();try{return e.parser.parse(t),e.db.extract(e.db.getRootDocV2()),e.db.getClasses()}catch(n){return n}},draw:function(t,e,n,r){Nt.info("Drawing state diagram (v2)",e),Hu={};let i=r.db.getDirection();void 0===i&&(i="LR");const{securityLevel:a,state:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;Nt.info(r.db.getRootDocV2()),r.db.extract(r.db.getRootDocV2()),Nt.info(r.db.getRootDocV2());const h=r.db.getStates(),u=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:Qu(r.db.getRootDocV2()),nodesep:c,ranksep:l,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));let d;Xu(u,void 0,r.db.getRootDocV2(),h,r.db,!0),"sandbox"===a&&(d=(0,o.Ys)("#i"+e));const p="sandbox"===a?(0,o.Ys)(d.nodes()[0].contentDocument.body):(0,o.Ys)("body"),f=p.select(`[id="${e}"]`),g=p.select("#"+e+" g");qs(g,u,["barb"],Ru,e);Gn.insertTitle(f,"statediagramTitleText",s.titleTopMargin,r.db.getDiagramTitle());const y=f.node().getBBox(),m=y.width+16,b=y.height+16;f.attr("class",Ru);const _=f.node().getBBox();dr(f,b,m,s.useMaxWidth);const x=`${_.x-8} ${_.y-8} ${m} ${b}`;Nt.debug(`viewBox ${x}`),f.attr("viewBox",x);const v=document.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const o of v){const t=o.getBBox(),e=document.createElementNS("http://www.w3.org/2000/svg",Fu);e.setAttribute("rx",0),e.setAttribute("ry",0),e.setAttribute("width",t.width),e.setAttribute("height",t.height),o.insertBefore(e,o.firstChild)}}};var td=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,17,18,20,22,23,24,26],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,24],d=[4,6,9,11,17,18,20,22,23,24,26],p={trace:function(){},yy:{},symbols_:{error:2,start:3,journey:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,title:17,acc_title:18,acc_title_value:19,acc_descr:20,acc_descr_value:21,acc_descr_multiline_value:22,section:23,taskName:24,taskData:25,open_directive:26,type_directive:27,arg_directive:28,close_directive:29,$accept:0,$end:1},terminals_:{2:"error",4:"journey",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",17:"title",18:"acc_title",19:"acc_title_value",20:"acc_descr",21:"acc_descr_value",22:"acc_descr_multiline_value",23:"section",24:"taskName",25:"taskData",26:"open_directive",27:"type_directive",28:"arg_directive",29:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,2],[10,2],[10,1],[10,1],[10,2],[10,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 11:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 12:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 13:case 14:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 15:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 16:r.addTask(a[o-1],a[o]),this.$="task";break;case 18:r.parseDirective("%%{","open_directive");break;case 19:r.parseDirective(a[o],"type_directive");break;case 20:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 21:r.parseDirective("}%%","close_directive","journey")}},table:[{3:1,4:n,7:3,12:4,26:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,26:r},{13:8,27:[1,9]},{27:[2,18]},{6:[1,10],7:21,8:11,9:[1,12],10:13,11:[1,14],12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},{1:[2,2]},{14:22,15:[1,23],29:u},e([15,29],[2,19]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:21,10:25,12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),{19:[1,26]},{21:[1,27]},e(i,[2,14]),e(i,[2,15]),{25:[1,28]},e(i,[2,17]),{11:[1,29]},{16:30,28:[1,31]},{11:[2,21]},e(i,[2,5]),e(i,[2,12]),e(i,[2,13]),e(i,[2,16]),e(d,[2,9]),{14:32,29:u},{29:[2,20]},{11:[1,33]},e(d,[2,10])],defaultActions:{5:[2,18],7:[2,2],24:[2,21],31:[2,20]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},f=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),26;case 1:return this.begin("type_directive"),27;case 2:return this.popState(),this.begin("arg_directive"),15;case 3:return this.popState(),this.popState(),29;case 4:return 28;case 5:case 6:case 8:case 9:break;case 7:return 11;case 10:return 4;case 11:return 17;case 12:return this.begin("acc_title"),18;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),20;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:return 23;case 20:return 24;case 21:return 25;case 22:return 15;case 23:return 6;case 24:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:journey\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{open_directive:{rules:[1],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,11,12,14,16,19,20,21,22,23,24],inclusive:!0}}},t);function g(){this.yy={}}return p.lexer=f,g.prototype=p,p.Parser=g,new g}();td.parser=td;const ed=td,nd=t=>null!==t.match(/^\s*journey/);let rd="";const id=[],ad=[],sd=[],od=function(){let t=!0;for(const[e,n]of sd.entries())sd[e].processed,t=t&&n.processed;return t},cd={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().journey,clear:function(){id.length=0,ad.length=0,rd="",sd.length=0,Dr()},setDiagramTitle:$r,getDiagramTitle:Rr,setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){rd=t,id.push(t)},getSections:function(){return id},getTasks:function(){let t=od();let e=0;for(;!t&&e<100;)t=od(),e++;return ad.push(...sd),ad},addTask:function(t,e){const n=e.substr(1).split(":");let r=0,i=[];1===n.length?(r=Number(n[0]),i=[]):(r=Number(n[0]),i=n[1].split(","));const a=i.map((t=>t.trim())),s={section:rd,type:rd,people:a,task:t,score:r};sd.push(s)},addTaskOrg:function(t){const e={section:rd,type:rd,description:t,task:t,classes:[]};ad.push(e)},getActors:function(){return function(){const t=[];return ad.forEach((e=>{e.people&&t.push(...e.people)})),[...new Set(t)].sort()}()}},ld=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},hd=function(t,e){const n=t.append("circle");return n.attr("cx",e.cx),n.attr("cy",e.cy),n.attr("class","actor-"+e.pos),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("r",e.r),void 0!==n.class&&n.attr("class",n.class),void 0!==e.title&&n.append("title").text(e.title),n},ud=function(t,e){const n=e.text.replace(/<br\s*\/?>/gi," "),r=t.append("text");r.attr("x",e.x),r.attr("y",e.y),r.attr("class","legend"),r.style("text-anchor",e.anchor),void 0!==e.class&&r.attr("class",e.class);const i=r.append("tspan");return i.attr("x",e.x+2*e.textMargin),i.text(n),r};let dd=-1;const pd=function(){return{x:0,y:0,width:100,anchor:"start",height:100,rx:0,ry:0}},fd=function(){function t(t,e,n,i,a,s,o,c){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("font-color",c).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c,l){const{taskFontSize:h,taskFontFamily:u}=c,d=t.split(/<br\s*\/?>/gi);for(let p=0;p<d.length;p++){const t=p*h-h*(d.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).attr("fill",l).style("text-anchor","middle").style("font-size",h).style("font-family",u);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(d[p]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).attr("position","fixed").append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").attr("class","label").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)n in e&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),gd=hd,yd=function(t,e,n){const r=t.append("g"),i=pd();i.x=e.x,i.y=e.y,i.fill=e.fill,i.width=n.width,i.height=n.height,i.class="journey-section section-type-"+e.num,i.rx=3,i.ry=3,ld(r,i),fd(n)(e.text,r,i.x,i.y,i.width,i.height,{class:"journey-section section-type-"+e.num},n,e.colour)},md=ud,bd=function(t,e,n){const r=e.x+n.width/2,i=t.append("g");dd++;i.append("line").attr("id","task"+dd).attr("x1",r).attr("y1",e.y).attr("x2",r).attr("y2",450).attr("class","task-line").attr("stroke-width","1px").attr("stroke-dasharray","4 2").attr("stroke","#666"),function(t,e){const n=15,r=t.append("circle").attr("cx",e.cx).attr("cy",e.cy).attr("class","face").attr("r",n).attr("stroke-width",2).attr("overflow","visible"),i=t.append("g");i.append("circle").attr("cx",e.cx-5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),i.append("circle").attr("cx",e.cx+5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),e.score>3?function(t){const r=(0,o.Nb1)().startAngle(Math.PI/2).endAngle(Math.PI/2*3).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+2)+")")}(i):e.score<3?function(t){const r=(0,o.Nb1)().startAngle(3*Math.PI/2).endAngle(Math.PI/2*5).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+7)+")")}(i):i.append("line").attr("class","mouth").attr("stroke",2).attr("x1",e.cx-5).attr("y1",e.cy+7).attr("x2",e.cx+5).attr("y2",e.cy+7).attr("class","mouth").attr("stroke-width","1px").attr("stroke","#666")}(i,{cx:r,cy:300+30*(5-e.score),score:e.score});const a=pd();a.x=e.x,a.y=e.y,a.fill=e.fill,a.width=n.width,a.height=n.height,a.class="task task-type-"+e.num,a.rx=3,a.ry=3,ld(i,a);let s=e.x+14;e.people.forEach((t=>{const n=e.actors[t].color,r={cx:s,cy:e.y,r:7,fill:n,stroke:"#000",title:t,pos:e.actors[t].position};hd(i,r),s+=10})),fd(n)(e.task,i,a.x,a.y,a.width,a.height,{class:"task"},n,e.colour)},_d=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",5).attr("refY",2).attr("markerWidth",6).attr("markerHeight",4).attr("orient","auto").append("path").attr("d","M 0,0 V 4 L6,2 Z")},xd={};const vd=ar().journey,kd=vd.leftMargin,wd={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],init:function(){this.sequenceItems=[],this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=ar().journey,a=this;let s=0;var o;this.sequenceItems.forEach((function(c){s++;const l=a.sequenceItems.length-s+1;a.updateVal(c,"starty",e-l*i.boxMargin,Math.min),a.updateVal(c,"stopy",r+l*i.boxMargin,Math.max),a.updateVal(wd.data,"startx",t-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopx",n+l*i.boxMargin,Math.max),"activation"!==o&&(a.updateVal(c,"startx",t-l*i.boxMargin,Math.min),a.updateVal(c,"stopx",n+l*i.boxMargin,Math.max),a.updateVal(wd.data,"starty",e-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopy",r+l*i.boxMargin,Math.max))}))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(wd.data,"startx",i,Math.min),this.updateVal(wd.data,"starty",s,Math.min),this.updateVal(wd.data,"stopx",a,Math.max),this.updateVal(wd.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return this.data}},Ed=vd.sectionFills,Cd=vd.sectionColours,Td=function(t,e,n){const r=ar().journey;let i="";const a=n+(2*r.height+r.diagramMarginY);let s=0,o="#CCC",c="black",l=0;for(const[h,u]of e.entries()){if(i!==u.section){o=Ed[s%Ed.length],l=s%Ed.length,c=Cd[s%Cd.length];const e={x:h*r.taskMargin+h*r.width+kd,y:50,text:u.section,fill:o,num:l,colour:c};yd(t,e,r),i=u.section,s++}const e=u.people.reduce(((t,e)=>(xd[e]&&(t[e]=xd[e]),t)),{});u.x=h*r.taskMargin+h*r.width+kd,u.y=a,u.width=r.diagramMarginX,u.height=r.diagramMarginY,u.colour=c,u.fill=o,u.num=l,u.actors=e,bd(t,u,r),wd.insert(u.x,u.y,u.x+u.width+r.taskMargin,450)}},Sd={setConf:function(t){Object.keys(t).forEach((function(e){vd[e]=t[e]}))},draw:function(t,e,n,r){const i=ar().journey;r.db.clear(),r.parser.parse(t+"\n");const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body");wd.init();const l=c.select("#"+e);_d(l);const h=r.db.getTasks(),u=r.db.getDiagramTitle(),d=r.db.getActors();for(const o in xd)delete xd[o];let p=0;d.forEach((t=>{xd[t]={color:i.actorColours[p%i.actorColours.length],position:p},p++})),function(t){const e=ar().journey;let n=60;Object.keys(xd).forEach((r=>{const i=xd[r].color,a={cx:20,cy:n,r:7,fill:i,stroke:"#000",pos:xd[r].position};gd(t,a);const s={x:40,y:n+7,fill:"#666",text:r,textMargin:5|e.boxTextMargin};md(t,s),n+=20}))}(l),wd.insert(0,0,kd,50*Object.keys(xd).length),Td(l,h,0);const f=wd.getBounds();u&&l.append("text").text(u).attr("x",kd).attr("font-size","4ex").attr("font-weight","bold").attr("y",25);const g=f.stopy-f.starty+2*i.diagramMarginY,y=kd+f.stopx+2*i.diagramMarginX;dr(l,g,y,i.useMaxWidth),l.append("line").attr("x1",kd).attr("y1",4*i.height).attr("x2",y-kd-4).attr("y2",4*i.height).attr("stroke-width",4).attr("stroke","black").attr("marker-end","url(#arrowhead)");const m=u?70:0;l.attr("viewBox",`${f.startx} -25 ${y} ${g+m}`),l.attr("preserveAspectRatio","xMinYMin meet"),l.attr("height",g+m+25)}};let Ad={};const Ld={setConf:function(t){Ad={...Ad,...t}},draw:(t,e,n)=>{try{Nt.debug("Renering svg for syntax error\n");const t=(0,o.Ys)("#"+e),r=t.append("g");r.append("path").attr("class","error-icon").attr("d","m411.313,123.313c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32-9.375,9.375-20.688-20.688c-12.484-12.5-32.766-12.5-45.25,0l-16,16c-1.261,1.261-2.304,2.648-3.31,4.051-21.739-8.561-45.324-13.426-70.065-13.426-105.867,0-192,86.133-192,192s86.133,192 192,192 192-86.133 192-192c0-24.741-4.864-48.327-13.426-70.065 1.402-1.007 2.79-2.049 4.051-3.31l16-16c12.5-12.492 12.5-32.758 0-45.25l-20.688-20.688 9.375-9.375 32.001-31.999zm-219.313,100.687c-52.938,0-96,43.063-96,96 0,8.836-7.164,16-16,16s-16-7.164-16-16c0-70.578 57.422-128 128-128 8.836,0 16,7.164 16,16s-7.164,16-16,16z"),r.append("path").attr("class","error-icon").attr("d","m459.02,148.98c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l16,16c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16.001-16z"),r.append("path").attr("class","error-icon").attr("d","m340.395,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16-16c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l15.999,16z"),r.append("path").attr("class","error-icon").attr("d","m400,64c8.844,0 16-7.164 16-16v-32c0-8.836-7.156-16-16-16-8.844,0-16,7.164-16,16v32c0,8.836 7.156,16 16,16z"),r.append("path").attr("class","error-icon").attr("d","m496,96.586h-32c-8.844,0-16,7.164-16,16 0,8.836 7.156,16 16,16h32c8.844,0 16-7.164 16-16 0-8.836-7.156-16-16-16z"),r.append("path").attr("class","error-icon").attr("d","m436.98,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688l32-32c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32c-6.251,6.25-6.251,16.375-0.001,22.625z"),r.append("text").attr("class","error-text").attr("x",1440).attr("y",250).attr("font-size","150px").style("text-anchor","middle").text("Syntax error in graph"),r.append("text").attr("class","error-text").attr("x",1250).attr("y",400).attr("font-size","100px").style("text-anchor","middle").text("mermaid version "+n),t.attr("height",100),t.attr("width",500),t.attr("viewBox","768 0 912 512")}catch(i){Nt.error("Error while rendering info diagram"),Nt.error((r=i)instanceof Error?r.message:String(r))}var r}},Bd="flowchart-elk",Nd={id:Bd,detector:(t,e)=>{var n;return!!(t.match(/^\s*flowchart-elk/)||t.match(/^\s*flowchart|graph/)&&"elk"===(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer))},loader:async()=>{const{diagram:t}=await n.e(9487).then(n.bind(n,9487));return{id:Bd,diagram:t}}},Dd="timeline",Od={id:Dd,detector:t=>null!==t.match(/^\s*timeline/),loader:async()=>{const{diagram:t}=await n.e(6316).then(n.bind(n,6316));return{id:Dd,diagram:t}}},Md="mindmap",Id={id:Md,detector:t=>null!==t.match(/^\s*mindmap/),loader:async()=>{const{diagram:t}=await n.e(7724).then(n.bind(n,7724));return{id:Md,diagram:t}}};let Fd=!1;const $d=()=>{Fd||(Fd=!0,En(Nd,Od,Id),Kr("error",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{}},init:()=>{}},(t=>"error"===t.toLowerCase().trim())),Kr("---",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{throw new Error("Diagrams beginning with --- are not valid. If you were trying to use a YAML front-matter, please ensure that you've correctly opened and closed the YAML front-matter with unindented `---` blocks")}},init:()=>null},(t=>t.toLowerCase().trimStart().startsWith("---"))),Kr("c4",{parser:Fi,db:Ki,renderer:La,styles:Cr,init:t=>{La.setConf(t.c4)}},$i),Kr("class",{parser:Na,db:Ga,renderer:cs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Da),Kr("classDiagram",{parser:Na,db:Ga,renderer:Xs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Oa),Kr("er",{parser:Qs,db:ro,renderer:yo,styles:gr},Js),Kr("gantt",{parser:Cc,db:il,renderer:ol,styles:br},Tc),Kr("info",{parser:ll,db:dl,renderer:pl,styles:_r},fl),Kr("pie",{parser:yl,db:xl,renderer:El,styles:xr},ml),Kr("requirement",{parser:Tl,db:Ol,renderer:Ul,styles:vr},Sl),Kr("sequence",{parser:ql,db:ph,renderer:Wh,styles:kr,init:t=>{if(t.sequence||(t.sequence={}),t.sequence.arrowMarkerAbsolute=t.arrowMarkerAbsolute,"sequenceDiagram"in t)throw new Error("`mermaid config.sequenceDiagram` has been renamed to `config.sequence`. Please update your mermaid config.");ph.setWrap(t.wrap),Wh.setConf(t.sequence)}},Hl),Kr("state",{parser:Hh,db:Eu,renderer:Iu,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Vh),Kr("stateDiagram",{parser:Hh,db:Eu,renderer:Ju,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Gh),Kr("journey",{parser:ed,db:cd,renderer:Sd,styles:Er,init:t=>{Sd.setConf(t.journey),cd.clear()}},nd),Kr("flowchart",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,_c(t.flowchart),yc.clear(),yc.setGen("gen-1")}},_o),Kr("flowchart-v2",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,ir({flowchart:{arrowMarkerAbsolute:t.arrowMarkerAbsolute}}),wc.setConf(t.flowchart),yc.clear(),yc.setGen("gen-2")}},xo),Kr("gitGraph",{parser:ti,db:bi,renderer:Oi,styles:Mi},ei))};class Rd{constructor(t,e){var n,r;this.txt=t,this.type="graph",this.detectTypeFailed=!1;const i=ar();this.txt=t;try{this.type=wn(t,i)}catch(o){this.handleError(o,e),this.type="error",this.detectTypeFailed=!0}const a=Qr(this.type);Nt.debug("Type "+this.type),this.db=a.db,null==(r=(n=this.db).clear)||r.call(n),this.renderer=a.renderer,this.parser=a.parser;const s=this.parser.parse.bind(this.parser);this.parser.parse=t=>s(function(t,e){var n;const r=t.match(_n);if(r){const i=bn(r[1],{schema:mn});return(null==i?void 0:i.title)&&(null==(n=e.setDiagramTitle)||n.call(e,i.title)),t.slice(r[0].length)}return t}(t,this.db)),this.parser.parser.yy=this.db,a.init&&(a.init(i),Nt.info("Initialized diagram "+this.type,i)),this.txt+="\n",this.parse(this.txt,e)}parse(t,e){var n,r;if(this.detectTypeFailed)return!1;try{return t+="\n",null==(r=(n=this.db).clear)||r.call(n),this.parser.parse(t),!0}catch(i){this.handleError(i,e)}return!1}handleError(t,e){if(void 0===e)throw t;Hn(t)?e(t.str,t.hash):e(t)}getParser(){return this.parser}getType(){return this.type}}const Zd=(t,e)=>{const n=wn(t,ar());try{Qr(n)}catch(r){const i=kn[n].loader;if(!i)throw new Error(`Diagram ${n} not found.`);return i().then((({diagram:r})=>(Kr(n,r,void 0),new Rd(t,e))))}return new Rd(t,e)},Pd=Rd;const jd=["graph","flowchart","flowchart-v2","stateDiagram","stateDiagram-v2"],Yd="graph TB;a[Maximum text size in diagram exceeded];style a fill:#faa",zd="sandbox",Ud="loose",Wd="http://www.w3.org/1999/xlink",qd="http://www.w3.org/1999/xhtml",Hd=["foreignobject"],Vd=["dominant-baseline"];const Gd=function(t){let e=t;return e=e.replace(/style.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/classDef.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/#\w+;/g,(function(t){const e=t.substring(1,t.length-1);return/^\+?\d+$/.test(e)?"\ufb02\xb0\xb0"+e+"\xb6\xdf":"\ufb02\xb0"+e+"\xb6\xdf"})),e},Xd=function(t){let e=t;return e=e.replace(/\ufb02\xb0\xb0/g,"&#"),e=e.replace(/\ufb02\xb0/g,"&"),e=e.replace(/\xb6\xdf/g,";"),e},Kd=(t,e,n=[])=>`\n.${t} ${e} { ${n.join(" !important; ")} !important; }`,Qd=(t,e,n,r)=>{const i=((t,e,n={})=>{var r;let i="";if(void 0!==t.themeCSS&&(i+=`\n${t.themeCSS}`),void 0!==t.fontFamily&&(i+=`\n:root { --mermaid-font-family: ${t.fontFamily}}`),void 0!==t.altFontFamily&&(i+=`\n:root { --mermaid-alt-font-family: ${t.altFontFamily}}`),!(0,Lt.Z)(n)&&jd.includes(e)){const e=["> *","span"],a=["rect","polygon","ellipse","circle","path"],s=t.htmlLabels||(null==(r=t.flowchart)?void 0:r.htmlLabels)?e:a;for(const t in n){const e=n[t];(0,Lt.Z)(e.styles)||s.forEach((t=>{i+=Kd(e.id,t,e.styles)})),(0,Lt.Z)(e.textStyles)||(i+=Kd(e.id,"tspan",e.textStyles))}}return i})(t,e,n);return I(it(`${r}{${Sr(e,i,t.themeVariables)}}`),F)},Jd=(t="",e,n)=>{let r=t;return n||e||(r=r.replace(/marker-end="url\(.*?#/g,'marker-end="url(#')),r=Xd(r),r=r.replace(/<br>/g,"<br/>"),r},tp=(t="",e)=>`<iframe style="width:100%;height:${e?e.viewBox.baseVal.height+"px":"100%"};border:0;margin:0;" src="data:text/html;base64,${btoa('<body style="margin:0">'+t+"</body>")}" sandbox="allow-top-navigation-by-user-activation allow-popups">\n  The "iframe" tag is not supported by your browser.\n</iframe>`,ep=(t,e,n,r,i)=>{const a=t.append("div");a.attr("id",n),r&&a.attr("style",r);const s=a.append("svg").attr("id",e).attr("width","100%").attr("xmlns","http://www.w3.org/2000/svg");return i&&s.attr("xmlns:xlink",i),s.append("g"),t};function np(t,e){return t.append("iframe").attr("id",e).attr("style","width: 100%; height: 100%;").attr("sandbox","")}const rp=(t,e,n,r)=>{var i,a,s;null==(i=t.getElementById(e))||i.remove(),null==(a=t.getElementById(n))||a.remove(),null==(s=t.getElementById(r))||s.remove()};function ip(t,e,n,r){var i,a;a=t,(i=e).attr("role","graphics-document document"),(0,Lt.Z)(a)||i.attr("aria-roledescription",a),function(t,e,n,r){if(void 0!==t.insert&&(e||n)){if(n){const e="chart-desc-"+r;t.attr("aria-describedby",e),t.insert("desc",":first-child").attr("id",e).text(n)}if(e){const n="chart-title-"+r;t.attr("aria-labelledby",n),t.insert("title",":first-child").attr("id",n).text(e)}}}(e,n,r,e.attr("id"))}const ap=Object.freeze({render:function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{if(v=Zd(e),"then"in v)throw new Error("Diagram is a promise. Use renderAsync.")}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},renderAsync:async function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{v=await Zd(e)}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{await v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},parse:function(t,e){return $d(),new Pd(t,e).parse(t,e)},parseAsync:async function(t,e){return $d(),(await Zd(t,e)).parse(t,e)},parseDirective:Yr,initialize:function(t={}){var e;(null==t?void 0:t.fontFamily)&&!(null==(e=t.themeVariables)?void 0:e.fontFamily)&&(t.themeVariables={fontFamily:t.fontFamily}),Qn=Sn({},t),(null==t?void 0:t.theme)&&t.theme in Ht?t.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables):t&&(t.themeVariables=Ht.default.getThemeVariables(t.themeVariables));const n="object"==typeof t?(t=>(Jn=Sn({},Kn),Jn=Sn(Jn,t),t.theme&&Ht[t.theme]&&(Jn.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables)),nr(Jn,tr),Jn))(t):rr();Dt(n.logLevel),$d()},getConfig:ar,setConfig:ir,getSiteConfig:rr,updateSiteConfig:t=>(Jn=Sn(Jn,t),nr(Jn,tr),Jn),reset:()=>{cr()},globalReset:()=>{cr(Kn)},defaultConfig:Kn});Dt(ar().logLevel),cr(ar());const sp=(t,e,n)=>{Nt.warn(t),Hn(t)?(n&&n(t.str,t.hash),e.push({...t,message:t.str,error:t})):(n&&n(t),t instanceof Error&&e.push({str:t.message,message:t.message,hash:t.name,error:t}))},op=async function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{await ap.renderAsync(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},cp=function(){if(dp.startOnLoad){const{startOnLoad:t}=ap.getConfig();t&&dp.init().catch((t=>Nt.error("Mermaid failed to initialize",t)))}};"undefined"!=typeof document&&window.addEventListener("load",cp,!1);const lp=[];let hp=!1;const up=async()=>{if(!hp){for(hp=!0;lp.length>0;){const e=lp.shift();if(e)try{await e()}catch(t){Nt.error("Error executing queue",t)}}hp=!1}},dp={startOnLoad:!0,diagrams:{},mermaidAPI:ap,parse:t=>ap.parse(t,dp.parseError),parseAsync:t=>new Promise(((e,n)=>{lp.push((()=>new Promise(((r,i)=>{ap.parseAsync(t,dp.parseError).then((t=>{r(t),e(t)}),(t=>{Nt.error("Error parsing",t),i(t),n(t)}))})))),up().catch(n)})),render:ap.render,renderAsync:(t,e,n,r)=>new Promise(((i,a)=>{lp.push((()=>new Promise(((s,o)=>{ap.renderAsync(t,e,n,r).then((t=>{s(t),i(t)}),(t=>{Nt.error("Error parsing",t),o(t),a(t)}))})))),up().catch(a)})),init:async function(t,e,n){try{await op(t,e,n)}catch(r){Nt.warn("Syntax Error rendering"),Hn(r)&&Nt.warn(r.str),dp.parseError&&dp.parseError(r)}},initThrowsErrors:function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{ap.render(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},initThrowsErrorsAsync:op,registerExternalDiagrams:async(t,{lazyLoad:e=!0}={})=>{e?En(...t):await(async(...t)=>{Nt.debug(`Loading ${t.length} external diagrams`);const e=(await Promise.allSettled(t.map((async({id:t,detector:e,loader:n})=>{const{diagram:r}=await n();Kr(t,r,e)})))).filter((t=>"rejected"===t.status));if(e.length>0){Nt.error(`Failed to load ${e.length} external diagrams`);for(const t of e)Nt.error(t);throw new Error(`Failed to load ${e.length} external diagrams`)}})(...t)},initialize:function(t){ap.initialize(t)},parseError:void 0,contentLoaded:cp,setParseErrorHandler:function(t){dp.parseError=t}}},7594:(t,e)=>{function n(t){let e,n=[];for(let r of t.split(",").map((t=>t.trim())))if(/^-?\d+$/.test(r))n.push(parseInt(r,10));else if(e=r.match(/^(-?\d+)(-|\.\.\.?|\u2025|\u2026|\u22EF)(-?\d+)$/)){let[t,r,i,a]=e;if(r&&a){r=parseInt(r),a=parseInt(a);const t=r<a?1:-1;"-"!==i&&".."!==i&&"\u2025"!==i||(a+=t);for(let e=r;e!==a;e+=t)n.push(e)}}return n}e.default=n,t.exports=n},9373:(t,e,n)=>{"use strict";function r(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n<r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n<i||void 0===n&&i>=i)&&(n=i)}return n}function i(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n>r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n>i||void 0===n&&i>=i)&&(n=i)}return n}function a(t){return t}n.d(e,{Nb1:()=>ao,LLu:()=>f,F5q:()=>p,$0Z:()=>_o,Dts:()=>vo,WQY:()=>wo,qpX:()=>Co,u93:()=>To,tFB:()=>Ao,YY7:()=>No,OvA:()=>Oo,dCK:()=>Io,zgE:()=>Ro,fGX:()=>Po,$m7:()=>Yo,c_6:()=>co,fxm:()=>Uo,FdL:()=>Qo,ak_:()=>Jo,SxZ:()=>nc,eA_:()=>ic,jsv:()=>sc,iJ:()=>ac,JHv:()=>dr,jvg:()=>uo,Fp7:()=>r,VV$:()=>i,ve8:()=>go,BYU:()=>ai,PKp:()=>di,Xf:()=>As,Ys:()=>Ls,td_:()=>Bs,YPS:()=>Hn,rr1:()=>Li,i$Z:()=>oa,WQD:()=>Si,Z_i:()=>Ci,F0B:()=>Vi,NGh:()=>Oi});var s=1e-6;function o(t){return"translate("+t+",0)"}function c(t){return"translate(0,"+t+")"}function l(t){return e=>+t(e)}function h(t,e){return e=Math.max(0,t.bandwidth()-2*e)/2,t.round()&&(e=Math.round(e)),n=>+t(n)+e}function u(){return!this.__axis}function d(t,e){var n=[],r=null,i=null,d=6,p=6,f=3,g="undefined"!=typeof window&&window.devicePixelRatio>1?0:.5,y=1===t||4===t?-1:1,m=4===t||2===t?"x":"y",b=1===t||3===t?o:c;function _(o){var c=null==r?e.ticks?e.ticks.apply(e,n):e.domain():r,_=null==i?e.tickFormat?e.tickFormat.apply(e,n):a:i,x=Math.max(d,0)+f,v=e.range(),k=+v[0]+g,w=+v[v.length-1]+g,E=(e.bandwidth?h:l)(e.copy(),g),C=o.selection?o.selection():o,T=C.selectAll(".domain").data([null]),S=C.selectAll(".tick").data(c,e).order(),A=S.exit(),L=S.enter().append("g").attr("class","tick"),B=S.select("line"),N=S.select("text");T=T.merge(T.enter().insert("path",".tick").attr("class","domain").attr("stroke","currentColor")),S=S.merge(L),B=B.merge(L.append("line").attr("stroke","currentColor").attr(m+"2",y*d)),N=N.merge(L.append("text").attr("fill","currentColor").attr(m,y*x).attr("dy",1===t?"0em":3===t?"0.71em":"0.32em")),o!==C&&(T=T.transition(o),S=S.transition(o),B=B.transition(o),N=N.transition(o),A=A.transition(o).attr("opacity",s).attr("transform",(function(t){return isFinite(t=E(t))?b(t+g):this.getAttribute("transform")})),L.attr("opacity",s).attr("transform",(function(t){var e=this.parentNode.__axis;return b((e&&isFinite(e=e(t))?e:E(t))+g)}))),A.remove(),T.attr("d",4===t||2===t?p?"M"+y*p+","+k+"H"+g+"V"+w+"H"+y*p:"M"+g+","+k+"V"+w:p?"M"+k+","+y*p+"V"+g+"H"+w+"V"+y*p:"M"+k+","+g+"H"+w),S.attr("opacity",1).attr("transform",(function(t){return b(E(t)+g)})),B.attr(m+"2",y*d),N.attr(m,y*x).text(_),C.filter(u).attr("fill","none").attr("font-size",10).attr("font-family","sans-serif").attr("text-anchor",2===t?"start":4===t?"end":"middle"),C.each((function(){this.__axis=E}))}return _.scale=function(t){return arguments.length?(e=t,_):e},_.ticks=function(){return n=Array.from(arguments),_},_.tickArguments=function(t){return arguments.length?(n=null==t?[]:Array.from(t),_):n.slice()},_.tickValues=function(t){return arguments.length?(r=null==t?null:Array.from(t),_):r&&r.slice()},_.tickFormat=function(t){return arguments.length?(i=t,_):i},_.tickSize=function(t){return arguments.length?(d=p=+t,_):d},_.tickSizeInner=function(t){return arguments.length?(d=+t,_):d},_.tickSizeOuter=function(t){return arguments.length?(p=+t,_):p},_.tickPadding=function(t){return arguments.length?(f=+t,_):f},_.offset=function(t){return arguments.length?(g=+t,_):g},_}function p(t){return d(1,t)}function f(t){return d(3,t)}function g(){}function y(t){return null==t?g:function(){return this.querySelector(t)}}function m(t){return null==t?[]:Array.isArray(t)?t:Array.from(t)}function b(){return[]}function _(t){return null==t?b:function(){return this.querySelectorAll(t)}}function x(t){return function(){return this.matches(t)}}function v(t){return function(e){return e.matches(t)}}var k=Array.prototype.find;function w(){return this.firstElementChild}var E=Array.prototype.filter;function C(){return Array.from(this.children)}function T(t){return new Array(t.length)}function S(t,e){this.ownerDocument=t.ownerDocument,this.namespaceURI=t.namespaceURI,this._next=null,this._parent=t,this.__data__=e}function A(t){return function(){return t}}function L(t,e,n,r,i,a){for(var s,o=0,c=e.length,l=a.length;o<l;++o)(s=e[o])?(s.__data__=a[o],r[o]=s):n[o]=new S(t,a[o]);for(;o<c;++o)(s=e[o])&&(i[o]=s)}function B(t,e,n,r,i,a,s){var o,c,l,h=new Map,u=e.length,d=a.length,p=new Array(u);for(o=0;o<u;++o)(c=e[o])&&(p[o]=l=s.call(c,c.__data__,o,e)+"",h.has(l)?i[o]=c:h.set(l,c));for(o=0;o<d;++o)l=s.call(t,a[o],o,a)+"",(c=h.get(l))?(r[o]=c,c.__data__=a[o],h.delete(l)):n[o]=new S(t,a[o]);for(o=0;o<u;++o)(c=e[o])&&h.get(p[o])===c&&(i[o]=c)}function N(t){return t.__data__}function D(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function O(t,e){return t<e?-1:t>e?1:t>=e?0:NaN}S.prototype={constructor:S,appendChild:function(t){return this._parent.insertBefore(t,this._next)},insertBefore:function(t,e){return this._parent.insertBefore(t,e)},querySelector:function(t){return this._parent.querySelector(t)},querySelectorAll:function(t){return this._parent.querySelectorAll(t)}};var M="http://www.w3.org/1999/xhtml";const I={svg:"http://www.w3.org/2000/svg",xhtml:M,xlink:"http://www.w3.org/1999/xlink",xml:"http://www.w3.org/XML/1998/namespace",xmlns:"http://www.w3.org/2000/xmlns/"};function F(t){var e=t+="",n=e.indexOf(":");return n>=0&&"xmlns"!==(e=t.slice(0,n))&&(t=t.slice(n+1)),I.hasOwnProperty(e)?{space:I[e],local:t}:t}function $(t){return function(){this.removeAttribute(t)}}function R(t){return function(){this.removeAttributeNS(t.space,t.local)}}function Z(t,e){return function(){this.setAttribute(t,e)}}function P(t,e){return function(){this.setAttributeNS(t.space,t.local,e)}}function j(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttribute(t):this.setAttribute(t,n)}}function Y(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttributeNS(t.space,t.local):this.setAttributeNS(t.space,t.local,n)}}function z(t){return t.ownerDocument&&t.ownerDocument.defaultView||t.document&&t||t.defaultView}function U(t){return function(){this.style.removeProperty(t)}}function W(t,e,n){return function(){this.style.setProperty(t,e,n)}}function q(t,e,n){return function(){var r=e.apply(this,arguments);null==r?this.style.removeProperty(t):this.style.setProperty(t,r,n)}}function H(t,e){return t.style.getPropertyValue(e)||z(t).getComputedStyle(t,null).getPropertyValue(e)}function V(t){return function(){delete this[t]}}function G(t,e){return function(){this[t]=e}}function X(t,e){return function(){var n=e.apply(this,arguments);null==n?delete this[t]:this[t]=n}}function K(t){return t.trim().split(/^|\s+/)}function Q(t){return t.classList||new J(t)}function J(t){this._node=t,this._names=K(t.getAttribute("class")||"")}function tt(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.add(e[r])}function et(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.remove(e[r])}function nt(t){return function(){tt(this,t)}}function rt(t){return function(){et(this,t)}}function it(t,e){return function(){(e.apply(this,arguments)?tt:et)(this,t)}}function at(){this.textContent=""}function st(t){return function(){this.textContent=t}}function ot(t){return function(){var e=t.apply(this,arguments);this.textContent=null==e?"":e}}function ct(){this.innerHTML=""}function lt(t){return function(){this.innerHTML=t}}function ht(t){return function(){var e=t.apply(this,arguments);this.innerHTML=null==e?"":e}}function ut(){this.nextSibling&&this.parentNode.appendChild(this)}function dt(){this.previousSibling&&this.parentNode.insertBefore(this,this.parentNode.firstChild)}function pt(t){return function(){var e=this.ownerDocument,n=this.namespaceURI;return n===M&&e.documentElement.namespaceURI===M?e.createElement(t):e.createElementNS(n,t)}}function ft(t){return function(){return this.ownerDocument.createElementNS(t.space,t.local)}}function gt(t){var e=F(t);return(e.local?ft:pt)(e)}function yt(){return null}function mt(){var t=this.parentNode;t&&t.removeChild(this)}function bt(){var t=this.cloneNode(!1),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function _t(){var t=this.cloneNode(!0),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function xt(t){return t.trim().split(/^|\s+/).map((function(t){var e="",n=t.indexOf(".");return n>=0&&(e=t.slice(n+1),t=t.slice(0,n)),{type:t,name:e}}))}function vt(t){return function(){var e=this.__on;if(e){for(var n,r=0,i=-1,a=e.length;r<a;++r)n=e[r],t.type&&n.type!==t.type||n.name!==t.name?e[++i]=n:this.removeEventListener(n.type,n.listener,n.options);++i?e.length=i:delete this.__on}}}function kt(t,e,n){return function(){var r,i=this.__on,a=function(t){return function(e){t.call(this,e,this.__data__)}}(e);if(i)for(var s=0,o=i.length;s<o;++s)if((r=i[s]).type===t.type&&r.name===t.name)return this.removeEventListener(r.type,r.listener,r.options),this.addEventListener(r.type,r.listener=a,r.options=n),void(r.value=e);this.addEventListener(t.type,a,n),r={type:t.type,name:t.name,value:e,listener:a,options:n},i?i.push(r):this.__on=[r]}}function wt(t,e,n){var r=z(t),i=r.CustomEvent;"function"==typeof i?i=new i(e,n):(i=r.document.createEvent("Event"),n?(i.initEvent(e,n.bubbles,n.cancelable),i.detail=n.detail):i.initEvent(e,!1,!1)),t.dispatchEvent(i)}function Et(t,e){return function(){return wt(this,t,e)}}function Ct(t,e){return function(){return wt(this,t,e.apply(this,arguments))}}J.prototype={add:function(t){this._names.indexOf(t)<0&&(this._names.push(t),this._node.setAttribute("class",this._names.join(" ")))},remove:function(t){var e=this._names.indexOf(t);e>=0&&(this._names.splice(e,1),this._node.setAttribute("class",this._names.join(" ")))},contains:function(t){return this._names.indexOf(t)>=0}};var Tt=[null];function St(t,e){this._groups=t,this._parents=e}function At(){return new St([[document.documentElement]],Tt)}St.prototype=At.prototype={constructor:St,select:function(t){"function"!=typeof t&&(t=y(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s,o=e[i],c=o.length,l=r[i]=new Array(c),h=0;h<c;++h)(a=o[h])&&(s=t.call(a,a.__data__,h,o))&&("__data__"in a&&(s.__data__=a.__data__),l[h]=s);return new St(r,this._parents)},selectAll:function(t){t="function"==typeof t?function(t){return function(){return m(t.apply(this,arguments))}}(t):_(t);for(var e=this._groups,n=e.length,r=[],i=[],a=0;a<n;++a)for(var s,o=e[a],c=o.length,l=0;l<c;++l)(s=o[l])&&(r.push(t.call(s,s.__data__,l,o)),i.push(s));return new St(r,i)},selectChild:function(t){return this.select(null==t?w:function(t){return function(){return k.call(this.children,t)}}("function"==typeof t?t:v(t)))},selectChildren:function(t){return this.selectAll(null==t?C:function(t){return function(){return E.call(this.children,t)}}("function"==typeof t?t:v(t)))},filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new St(r,this._parents)},data:function(t,e){if(!arguments.length)return Array.from(this,N);var n=e?B:L,r=this._parents,i=this._groups;"function"!=typeof t&&(t=A(t));for(var a=i.length,s=new Array(a),o=new Array(a),c=new Array(a),l=0;l<a;++l){var h=r[l],u=i[l],d=u.length,p=D(t.call(h,h&&h.__data__,l,r)),f=p.length,g=o[l]=new Array(f),y=s[l]=new Array(f),m=c[l]=new Array(d);n(h,u,g,y,m,p,e);for(var b,_,x=0,v=0;x<f;++x)if(b=g[x]){for(x>=v&&(v=x+1);!(_=y[v])&&++v<f;);b._next=_||null}}return(s=new St(s,r))._enter=o,s._exit=c,s},enter:function(){return new St(this._enter||this._groups.map(T),this._parents)},exit:function(){return new St(this._exit||this._groups.map(T),this._parents)},join:function(t,e,n){var r=this.enter(),i=this,a=this.exit();return"function"==typeof t?(r=t(r))&&(r=r.selection()):r=r.append(t+""),null!=e&&(i=e(i))&&(i=i.selection()),null==n?a.remove():n(a),r&&i?r.merge(i).order():i},merge:function(t){for(var e=t.selection?t.selection():t,n=this._groups,r=e._groups,i=n.length,a=r.length,s=Math.min(i,a),o=new Array(i),c=0;c<s;++c)for(var l,h=n[c],u=r[c],d=h.length,p=o[c]=new Array(d),f=0;f<d;++f)(l=h[f]||u[f])&&(p[f]=l);for(;c<i;++c)o[c]=n[c];return new St(o,this._parents)},selection:function(){return this},order:function(){for(var t=this._groups,e=-1,n=t.length;++e<n;)for(var r,i=t[e],a=i.length-1,s=i[a];--a>=0;)(r=i[a])&&(s&&4^r.compareDocumentPosition(s)&&s.parentNode.insertBefore(r,s),s=r);return this},sort:function(t){function e(e,n){return e&&n?t(e.__data__,n.__data__):!e-!n}t||(t=O);for(var n=this._groups,r=n.length,i=new Array(r),a=0;a<r;++a){for(var s,o=n[a],c=o.length,l=i[a]=new Array(c),h=0;h<c;++h)(s=o[h])&&(l[h]=s);l.sort(e)}return new St(i,this._parents).order()},call:function(){var t=arguments[0];return arguments[0]=this,t.apply(null,arguments),this},nodes:function(){return Array.from(this)},node:function(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r=t[e],i=0,a=r.length;i<a;++i){var s=r[i];if(s)return s}return null},size:function(){let t=0;for(const e of this)++t;return t},empty:function(){return!this.node()},each:function(t){for(var e=this._groups,n=0,r=e.length;n<r;++n)for(var i,a=e[n],s=0,o=a.length;s<o;++s)(i=a[s])&&t.call(i,i.__data__,s,a);return this},attr:function(t,e){var n=F(t);if(arguments.length<2){var r=this.node();return n.local?r.getAttributeNS(n.space,n.local):r.getAttribute(n)}return this.each((null==e?n.local?R:$:"function"==typeof e?n.local?Y:j:n.local?P:Z)(n,e))},style:function(t,e,n){return arguments.length>1?this.each((null==e?U:"function"==typeof e?q:W)(t,e,null==n?"":n)):H(this.node(),t)},property:function(t,e){return arguments.length>1?this.each((null==e?V:"function"==typeof e?X:G)(t,e)):this.node()[t]},classed:function(t,e){var n=K(t+"");if(arguments.length<2){for(var r=Q(this.node()),i=-1,a=n.length;++i<a;)if(!r.contains(n[i]))return!1;return!0}return this.each(("function"==typeof e?it:e?nt:rt)(n,e))},text:function(t){return arguments.length?this.each(null==t?at:("function"==typeof t?ot:st)(t)):this.node().textContent},html:function(t){return arguments.length?this.each(null==t?ct:("function"==typeof t?ht:lt)(t)):this.node().innerHTML},raise:function(){return this.each(ut)},lower:function(){return this.each(dt)},append:function(t){var e="function"==typeof t?t:gt(t);return this.select((function(){return this.appendChild(e.apply(this,arguments))}))},insert:function(t,e){var n="function"==typeof t?t:gt(t),r=null==e?yt:"function"==typeof e?e:y(e);return this.select((function(){return this.insertBefore(n.apply(this,arguments),r.apply(this,arguments)||null)}))},remove:function(){return this.each(mt)},clone:function(t){return this.select(t?_t:bt)},datum:function(t){return arguments.length?this.property("__data__",t):this.node().__data__},on:function(t,e,n){var r,i,a=xt(t+""),s=a.length;if(!(arguments.length<2)){for(o=e?kt:vt,r=0;r<s;++r)this.each(o(a[r],e,n));return this}var o=this.node().__on;if(o)for(var c,l=0,h=o.length;l<h;++l)for(r=0,c=o[l];r<s;++r)if((i=a[r]).type===c.type&&i.name===c.name)return c.value},dispatch:function(t,e){return this.each(("function"==typeof e?Ct:Et)(t,e))},[Symbol.iterator]:function*(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r,i=t[e],a=0,s=i.length;a<s;++a)(r=i[a])&&(yield r)}};const Lt=At;var Bt={value:()=>{}};function Nt(){for(var t,e=0,n=arguments.length,r={};e<n;++e){if(!(t=arguments[e]+"")||t in r||/[\s.]/.test(t))throw new Error("illegal type: "+t);r[t]=[]}return new Dt(r)}function Dt(t){this._=t}function Ot(t,e){return t.trim().split(/^|\s+/).map((function(t){var n="",r=t.indexOf(".");if(r>=0&&(n=t.slice(r+1),t=t.slice(0,r)),t&&!e.hasOwnProperty(t))throw new Error("unknown type: "+t);return{type:t,name:n}}))}function Mt(t,e){for(var n,r=0,i=t.length;r<i;++r)if((n=t[r]).name===e)return n.value}function It(t,e,n){for(var r=0,i=t.length;r<i;++r)if(t[r].name===e){t[r]=Bt,t=t.slice(0,r).concat(t.slice(r+1));break}return null!=n&&t.push({name:e,value:n}),t}Dt.prototype=Nt.prototype={constructor:Dt,on:function(t,e){var n,r=this._,i=Ot(t+"",r),a=-1,s=i.length;if(!(arguments.length<2)){if(null!=e&&"function"!=typeof e)throw new Error("invalid callback: "+e);for(;++a<s;)if(n=(t=i[a]).type)r[n]=It(r[n],t.name,e);else if(null==e)for(n in r)r[n]=It(r[n],t.name,null);return this}for(;++a<s;)if((n=(t=i[a]).type)&&(n=Mt(r[n],t.name)))return n},copy:function(){var t={},e=this._;for(var n in e)t[n]=e[n].slice();return new Dt(t)},call:function(t,e){if((n=arguments.length-2)>0)for(var n,r,i=new Array(n),a=0;a<n;++a)i[a]=arguments[a+2];if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(a=0,n=(r=this._[t]).length;a<n;++a)r[a].value.apply(e,i)},apply:function(t,e,n){if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(var r=this._[t],i=0,a=r.length;i<a;++i)r[i].value.apply(e,n)}};const Ft=Nt;var $t,Rt,Zt=0,Pt=0,jt=0,Yt=0,zt=0,Ut=0,Wt="object"==typeof performance&&performance.now?performance:Date,qt="object"==typeof window&&window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(t){setTimeout(t,17)};function Ht(){return zt||(qt(Vt),zt=Wt.now()+Ut)}function Vt(){zt=0}function Gt(){this._call=this._time=this._next=null}function Xt(t,e,n){var r=new Gt;return r.restart(t,e,n),r}function Kt(){zt=(Yt=Wt.now())+Ut,Zt=Pt=0;try{!function(){Ht(),++Zt;for(var t,e=$t;e;)(t=zt-e._time)>=0&&e._call.call(void 0,t),e=e._next;--Zt}()}finally{Zt=0,function(){var t,e,n=$t,r=1/0;for(;n;)n._call?(r>n._time&&(r=n._time),t=n,n=n._next):(e=n._next,n._next=null,n=t?t._next=e:$t=e);Rt=t,Jt(r)}(),zt=0}}function Qt(){var t=Wt.now(),e=t-Yt;e>1e3&&(Ut-=e,Yt=t)}function Jt(t){Zt||(Pt&&(Pt=clearTimeout(Pt)),t-zt>24?(t<1/0&&(Pt=setTimeout(Kt,t-Wt.now()-Ut)),jt&&(jt=clearInterval(jt))):(jt||(Yt=Wt.now(),jt=setInterval(Qt,1e3)),Zt=1,qt(Kt)))}function te(t,e,n){var r=new Gt;return e=null==e?0:+e,r.restart((n=>{r.stop(),t(n+e)}),e,n),r}Gt.prototype=Xt.prototype={constructor:Gt,restart:function(t,e,n){if("function"!=typeof t)throw new TypeError("callback is not a function");n=(null==n?Ht():+n)+(null==e?0:+e),this._next||Rt===this||(Rt?Rt._next=this:$t=this,Rt=this),this._call=t,this._time=n,Jt()},stop:function(){this._call&&(this._call=null,this._time=1/0,Jt())}};var ee=Ft("start","end","cancel","interrupt"),ne=[];function re(t,e,n,r,i,a){var s=t.__transition;if(s){if(n in s)return}else t.__transition={};!function(t,e,n){var r,i=t.__transition;function a(t){n.state=1,n.timer.restart(s,n.delay,n.time),n.delay<=t&&s(t-n.delay)}function s(a){var l,h,u,d;if(1!==n.state)return c();for(l in i)if((d=i[l]).name===n.name){if(3===d.state)return te(s);4===d.state?(d.state=6,d.timer.stop(),d.on.call("interrupt",t,t.__data__,d.index,d.group),delete i[l]):+l<e&&(d.state=6,d.timer.stop(),d.on.call("cancel",t,t.__data__,d.index,d.group),delete i[l])}if(te((function(){3===n.state&&(n.state=4,n.timer.restart(o,n.delay,n.time),o(a))})),n.state=2,n.on.call("start",t,t.__data__,n.index,n.group),2===n.state){for(n.state=3,r=new Array(u=n.tween.length),l=0,h=-1;l<u;++l)(d=n.tween[l].value.call(t,t.__data__,n.index,n.group))&&(r[++h]=d);r.length=h+1}}function o(e){for(var i=e<n.duration?n.ease.call(null,e/n.duration):(n.timer.restart(c),n.state=5,1),a=-1,s=r.length;++a<s;)r[a].call(t,i);5===n.state&&(n.on.call("end",t,t.__data__,n.index,n.group),c())}function c(){for(var r in n.state=6,n.timer.stop(),delete i[e],i)return;delete t.__transition}i[e]=n,n.timer=Xt(a,0,n.time)}(t,n,{name:e,index:r,group:i,on:ee,tween:ne,time:a.time,delay:a.delay,duration:a.duration,ease:a.ease,timer:null,state:0})}function ie(t,e){var n=se(t,e);if(n.state>0)throw new Error("too late; already scheduled");return n}function ae(t,e){var n=se(t,e);if(n.state>3)throw new Error("too late; already running");return n}function se(t,e){var n=t.__transition;if(!n||!(n=n[e]))throw new Error("transition not found");return n}function oe(t,e){return t=+t,e=+e,function(n){return t*(1-n)+e*n}}var ce,le=180/Math.PI,he={translateX:0,translateY:0,rotate:0,skewX:0,scaleX:1,scaleY:1};function ue(t,e,n,r,i,a){var s,o,c;return(s=Math.sqrt(t*t+e*e))&&(t/=s,e/=s),(c=t*n+e*r)&&(n-=t*c,r-=e*c),(o=Math.sqrt(n*n+r*r))&&(n/=o,r/=o,c/=o),t*r<e*n&&(t=-t,e=-e,c=-c,s=-s),{translateX:i,translateY:a,rotate:Math.atan2(e,t)*le,skewX:Math.atan(c)*le,scaleX:s,scaleY:o}}function de(t,e,n,r){function i(t){return t.length?t.pop()+" ":""}return function(a,s){var o=[],c=[];return a=t(a),s=t(s),function(t,r,i,a,s,o){if(t!==i||r!==a){var c=s.push("translate(",null,e,null,n);o.push({i:c-4,x:oe(t,i)},{i:c-2,x:oe(r,a)})}else(i||a)&&s.push("translate("+i+e+a+n)}(a.translateX,a.translateY,s.translateX,s.translateY,o,c),function(t,e,n,a){t!==e?(t-e>180?e+=360:e-t>180&&(t+=360),a.push({i:n.push(i(n)+"rotate(",null,r)-2,x:oe(t,e)})):e&&n.push(i(n)+"rotate("+e+r)}(a.rotate,s.rotate,o,c),function(t,e,n,a){t!==e?a.push({i:n.push(i(n)+"skewX(",null,r)-2,x:oe(t,e)}):e&&n.push(i(n)+"skewX("+e+r)}(a.skewX,s.skewX,o,c),function(t,e,n,r,a,s){if(t!==n||e!==r){var o=a.push(i(a)+"scale(",null,",",null,")");s.push({i:o-4,x:oe(t,n)},{i:o-2,x:oe(e,r)})}else 1===n&&1===r||a.push(i(a)+"scale("+n+","+r+")")}(a.scaleX,a.scaleY,s.scaleX,s.scaleY,o,c),a=s=null,function(t){for(var e,n=-1,r=c.length;++n<r;)o[(e=c[n]).i]=e.x(t);return o.join("")}}}var pe=de((function(t){const e=new("function"==typeof DOMMatrix?DOMMatrix:WebKitCSSMatrix)(t+"");return e.isIdentity?he:ue(e.a,e.b,e.c,e.d,e.e,e.f)}),"px, ","px)","deg)"),fe=de((function(t){return null==t?he:(ce||(ce=document.createElementNS("http://www.w3.org/2000/svg","g")),ce.setAttribute("transform",t),(t=ce.transform.baseVal.consolidate())?ue((t=t.matrix).a,t.b,t.c,t.d,t.e,t.f):he)}),", ",")",")");function ge(t,e){var n,r;return function(){var i=ae(this,t),a=i.tween;if(a!==n)for(var s=0,o=(r=n=a).length;s<o;++s)if(r[s].name===e){(r=r.slice()).splice(s,1);break}i.tween=r}}function ye(t,e,n){var r,i;if("function"!=typeof n)throw new Error;return function(){var a=ae(this,t),s=a.tween;if(s!==r){i=(r=s).slice();for(var o={name:e,value:n},c=0,l=i.length;c<l;++c)if(i[c].name===e){i[c]=o;break}c===l&&i.push(o)}a.tween=i}}function me(t,e,n){var r=t._id;return t.each((function(){var t=ae(this,r);(t.value||(t.value={}))[e]=n.apply(this,arguments)})),function(t){return se(t,r).value[e]}}function be(t,e,n){t.prototype=e.prototype=n,n.constructor=t}function _e(t,e){var n=Object.create(t.prototype);for(var r in e)n[r]=e[r];return n}function xe(){}var ve=.7,ke=1/ve,we="\\s*([+-]?\\d+)\\s*",Ee="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)\\s*",Ce="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)%\\s*",Te=/^#([0-9a-f]{3,8})$/,Se=new RegExp(`^rgb\\(${we},${we},${we}\\)$`),Ae=new RegExp(`^rgb\\(${Ce},${Ce},${Ce}\\)$`),Le=new RegExp(`^rgba\\(${we},${we},${we},${Ee}\\)$`),Be=new RegExp(`^rgba\\(${Ce},${Ce},${Ce},${Ee}\\)$`),Ne=new RegExp(`^hsl\\(${Ee},${Ce},${Ce}\\)$`),De=new RegExp(`^hsla\\(${Ee},${Ce},${Ce},${Ee}\\)$`),Oe={aliceblue:15792383,antiquewhite:16444375,aqua:65535,aquamarine:8388564,azure:15794175,beige:16119260,bisque:16770244,black:0,blanchedalmond:16772045,blue:255,blueviolet:9055202,brown:10824234,burlywood:14596231,cadetblue:6266528,chartreuse:8388352,chocolate:13789470,coral:16744272,cornflowerblue:6591981,cornsilk:16775388,crimson:14423100,cyan:65535,darkblue:139,darkcyan:35723,darkgoldenrod:12092939,darkgray:11119017,darkgreen:25600,darkgrey:11119017,darkkhaki:12433259,darkmagenta:9109643,darkolivegreen:5597999,darkorange:16747520,darkorchid:10040012,darkred:9109504,darksalmon:15308410,darkseagreen:9419919,darkslateblue:4734347,darkslategray:3100495,darkslategrey:3100495,darkturquoise:52945,darkviolet:9699539,deeppink:16716947,deepskyblue:49151,dimgray:6908265,dimgrey:6908265,dodgerblue:2003199,firebrick:11674146,floralwhite:16775920,forestgreen:2263842,fuchsia:16711935,gainsboro:14474460,ghostwhite:16316671,gold:16766720,goldenrod:14329120,gray:8421504,green:32768,greenyellow:11403055,grey:8421504,honeydew:15794160,hotpink:16738740,indianred:13458524,indigo:4915330,ivory:16777200,khaki:15787660,lavender:15132410,lavenderblush:16773365,lawngreen:8190976,lemonchiffon:16775885,lightblue:11393254,lightcoral:15761536,lightcyan:14745599,lightgoldenrodyellow:16448210,lightgray:13882323,lightgreen:9498256,lightgrey:13882323,lightpink:16758465,lightsalmon:16752762,lightseagreen:2142890,lightskyblue:8900346,lightslategray:7833753,lightslategrey:7833753,lightsteelblue:11584734,lightyellow:16777184,lime:65280,limegreen:3329330,linen:16445670,magenta:16711935,maroon:8388608,mediumaquamarine:6737322,mediumblue:205,mediumorchid:12211667,mediumpurple:9662683,mediumseagreen:3978097,mediumslateblue:8087790,mediumspringgreen:64154,mediumturquoise:4772300,mediumvioletred:13047173,midnightblue:1644912,mintcream:16121850,mistyrose:16770273,moccasin:16770229,navajowhite:16768685,navy:128,oldlace:16643558,olive:8421376,olivedrab:7048739,orange:16753920,orangered:16729344,orchid:14315734,palegoldenrod:15657130,palegreen:10025880,paleturquoise:11529966,palevioletred:14381203,papayawhip:16773077,peachpuff:16767673,peru:13468991,pink:16761035,plum:14524637,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateblue:6970061,slategray:7372944,slategrey:7372944,snow:16775930,springgreen:65407,steelblue:4620980,tan:13808780,teal:32896,thistle:14204888,tomato:16737095,turquoise:4251856,violet:15631086,wheat:16113331,white:16777215,whitesmoke:16119285,yellow:16776960,yellowgreen:10145074};function Me(){return this.rgb().formatHex()}function Ie(){return this.rgb().formatRgb()}function Fe(t){var e,n;return t=(t+"").trim().toLowerCase(),(e=Te.exec(t))?(n=e[1].length,e=parseInt(e[1],16),6===n?$e(e):3===n?new je(e>>8&15|e>>4&240,e>>4&15|240&e,(15&e)<<4|15&e,1):8===n?Re(e>>24&255,e>>16&255,e>>8&255,(255&e)/255):4===n?Re(e>>12&15|e>>8&240,e>>8&15|e>>4&240,e>>4&15|240&e,((15&e)<<4|15&e)/255):null):(e=Se.exec(t))?new je(e[1],e[2],e[3],1):(e=Ae.exec(t))?new je(255*e[1]/100,255*e[2]/100,255*e[3]/100,1):(e=Le.exec(t))?Re(e[1],e[2],e[3],e[4]):(e=Be.exec(t))?Re(255*e[1]/100,255*e[2]/100,255*e[3]/100,e[4]):(e=Ne.exec(t))?He(e[1],e[2]/100,e[3]/100,1):(e=De.exec(t))?He(e[1],e[2]/100,e[3]/100,e[4]):Oe.hasOwnProperty(t)?$e(Oe[t]):"transparent"===t?new je(NaN,NaN,NaN,0):null}function $e(t){return new je(t>>16&255,t>>8&255,255&t,1)}function Re(t,e,n,r){return r<=0&&(t=e=n=NaN),new je(t,e,n,r)}function Ze(t){return t instanceof xe||(t=Fe(t)),t?new je((t=t.rgb()).r,t.g,t.b,t.opacity):new je}function Pe(t,e,n,r){return 1===arguments.length?Ze(t):new je(t,e,n,null==r?1:r)}function je(t,e,n,r){this.r=+t,this.g=+e,this.b=+n,this.opacity=+r}function Ye(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}`}function ze(){const t=Ue(this.opacity);return`${1===t?"rgb(":"rgba("}${We(this.r)}, ${We(this.g)}, ${We(this.b)}${1===t?")":`, ${t})`}`}function Ue(t){return isNaN(t)?1:Math.max(0,Math.min(1,t))}function We(t){return Math.max(0,Math.min(255,Math.round(t)||0))}function qe(t){return((t=We(t))<16?"0":"")+t.toString(16)}function He(t,e,n,r){return r<=0?t=e=n=NaN:n<=0||n>=1?t=e=NaN:e<=0&&(t=NaN),new Ge(t,e,n,r)}function Ve(t){if(t instanceof Ge)return new Ge(t.h,t.s,t.l,t.opacity);if(t instanceof xe||(t=Fe(t)),!t)return new Ge;if(t instanceof Ge)return t;var e=(t=t.rgb()).r/255,n=t.g/255,r=t.b/255,i=Math.min(e,n,r),a=Math.max(e,n,r),s=NaN,o=a-i,c=(a+i)/2;return o?(s=e===a?(n-r)/o+6*(n<r):n===a?(r-e)/o+2:(e-n)/o+4,o/=c<.5?a+i:2-a-i,s*=60):o=c>0&&c<1?0:s,new Ge(s,o,c,t.opacity)}function Ge(t,e,n,r){this.h=+t,this.s=+e,this.l=+n,this.opacity=+r}function Xe(t){return(t=(t||0)%360)<0?t+360:t}function Ke(t){return Math.max(0,Math.min(1,t||0))}function Qe(t,e,n){return 255*(t<60?e+(n-e)*t/60:t<180?n:t<240?e+(n-e)*(240-t)/60:e)}function Je(t,e,n,r,i){var a=t*t,s=a*t;return((1-3*t+3*a-s)*e+(4-6*a+3*s)*n+(1+3*t+3*a-3*s)*r+s*i)/6}be(xe,Fe,{copy(t){return Object.assign(new this.constructor,this,t)},displayable(){return this.rgb().displayable()},hex:Me,formatHex:Me,formatHex8:function(){return this.rgb().formatHex8()},formatHsl:function(){return Ve(this).formatHsl()},formatRgb:Ie,toString:Ie}),be(je,Pe,_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},rgb(){return this},clamp(){return new je(We(this.r),We(this.g),We(this.b),Ue(this.opacity))},displayable(){return-.5<=this.r&&this.r<255.5&&-.5<=this.g&&this.g<255.5&&-.5<=this.b&&this.b<255.5&&0<=this.opacity&&this.opacity<=1},hex:Ye,formatHex:Ye,formatHex8:function(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}${qe(255*(isNaN(this.opacity)?1:this.opacity))}`},formatRgb:ze,toString:ze})),be(Ge,(function(t,e,n,r){return 1===arguments.length?Ve(t):new Ge(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new Ge(this.h,this.s,this.l*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new Ge(this.h,this.s,this.l*t,this.opacity)},rgb(){var t=this.h%360+360*(this.h<0),e=isNaN(t)||isNaN(this.s)?0:this.s,n=this.l,r=n+(n<.5?n:1-n)*e,i=2*n-r;return new je(Qe(t>=240?t-240:t+120,i,r),Qe(t,i,r),Qe(t<120?t+240:t-120,i,r),this.opacity)},clamp(){return new Ge(Xe(this.h),Ke(this.s),Ke(this.l),Ue(this.opacity))},displayable(){return(0<=this.s&&this.s<=1||isNaN(this.s))&&0<=this.l&&this.l<=1&&0<=this.opacity&&this.opacity<=1},formatHsl(){const t=Ue(this.opacity);return`${1===t?"hsl(":"hsla("}${Xe(this.h)}, ${100*Ke(this.s)}%, ${100*Ke(this.l)}%${1===t?")":`, ${t})`}`}}));const tn=t=>()=>t;function en(t,e){return function(n){return t+n*e}}function nn(t){return 1==(t=+t)?rn:function(e,n){return n-e?function(t,e,n){return t=Math.pow(t,n),e=Math.pow(e,n)-t,n=1/n,function(r){return Math.pow(t+r*e,n)}}(e,n,t):tn(isNaN(e)?n:e)}}function rn(t,e){var n=e-t;return n?en(t,n):tn(isNaN(t)?e:t)}const an=function t(e){var n=nn(e);function r(t,e){var r=n((t=Pe(t)).r,(e=Pe(e)).r),i=n(t.g,e.g),a=n(t.b,e.b),s=rn(t.opacity,e.opacity);return function(e){return t.r=r(e),t.g=i(e),t.b=a(e),t.opacity=s(e),t+""}}return r.gamma=t,r}(1);function sn(t){return function(e){var n,r,i=e.length,a=new Array(i),s=new Array(i),o=new Array(i);for(n=0;n<i;++n)r=Pe(e[n]),a[n]=r.r||0,s[n]=r.g||0,o[n]=r.b||0;return a=t(a),s=t(s),o=t(o),r.opacity=1,function(t){return r.r=a(t),r.g=s(t),r.b=o(t),r+""}}}sn((function(t){var e=t.length-1;return function(n){var r=n<=0?n=0:n>=1?(n=1,e-1):Math.floor(n*e),i=t[r],a=t[r+1],s=r>0?t[r-1]:2*i-a,o=r<e-1?t[r+2]:2*a-i;return Je((n-r/e)*e,s,i,a,o)}})),sn((function(t){var e=t.length;return function(n){var r=Math.floor(((n%=1)<0?++n:n)*e),i=t[(r+e-1)%e],a=t[r%e],s=t[(r+1)%e],o=t[(r+2)%e];return Je((n-r/e)*e,i,a,s,o)}}));var on=/[-+]?(?:\d+\.?\d*|\.?\d+)(?:[eE][-+]?\d+)?/g,cn=new RegExp(on.source,"g");function ln(t,e){var n,r,i,a=on.lastIndex=cn.lastIndex=0,s=-1,o=[],c=[];for(t+="",e+="";(n=on.exec(t))&&(r=cn.exec(e));)(i=r.index)>a&&(i=e.slice(a,i),o[s]?o[s]+=i:o[++s]=i),(n=n[0])===(r=r[0])?o[s]?o[s]+=r:o[++s]=r:(o[++s]=null,c.push({i:s,x:oe(n,r)})),a=cn.lastIndex;return a<e.length&&(i=e.slice(a),o[s]?o[s]+=i:o[++s]=i),o.length<2?c[0]?function(t){return function(e){return t(e)+""}}(c[0].x):function(t){return function(){return t}}(e):(e=c.length,function(t){for(var n,r=0;r<e;++r)o[(n=c[r]).i]=n.x(t);return o.join("")})}function hn(t,e){var n;return("number"==typeof e?oe:e instanceof Fe?an:(n=Fe(e))?(e=n,an):ln)(t,e)}function un(t){return function(){this.removeAttribute(t)}}function dn(t){return function(){this.removeAttributeNS(t.space,t.local)}}function pn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttribute(t);return s===a?null:s===r?i:i=e(r=s,n)}}function fn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttributeNS(t.space,t.local);return s===a?null:s===r?i:i=e(r=s,n)}}function gn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttribute(t))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttribute(t)}}function yn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttributeNS(t.space,t.local))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttributeNS(t.space,t.local)}}function mn(t,e){return function(n){this.setAttribute(t,e.call(this,n))}}function bn(t,e){return function(n){this.setAttributeNS(t.space,t.local,e.call(this,n))}}function _n(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&bn(t,i)),n}return i._value=e,i}function xn(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&mn(t,i)),n}return i._value=e,i}function vn(t,e){return function(){ie(this,t).delay=+e.apply(this,arguments)}}function kn(t,e){return e=+e,function(){ie(this,t).delay=e}}function wn(t,e){return function(){ae(this,t).duration=+e.apply(this,arguments)}}function En(t,e){return e=+e,function(){ae(this,t).duration=e}}function Cn(t,e){if("function"!=typeof e)throw new Error;return function(){ae(this,t).ease=e}}function Tn(t,e,n){var r,i,a=function(t){return(t+"").trim().split(/^|\s+/).every((function(t){var e=t.indexOf(".");return e>=0&&(t=t.slice(0,e)),!t||"start"===t}))}(e)?ie:ae;return function(){var s=a(this,t),o=s.on;o!==r&&(i=(r=o).copy()).on(e,n),s.on=i}}var Sn=Lt.prototype.constructor;function An(t){return function(){this.style.removeProperty(t)}}function Ln(t,e,n){return function(r){this.style.setProperty(t,e.call(this,r),n)}}function Bn(t,e,n){var r,i;function a(){var a=e.apply(this,arguments);return a!==i&&(r=(i=a)&&Ln(t,a,n)),r}return a._value=e,a}function Nn(t){return function(e){this.textContent=t.call(this,e)}}function Dn(t){var e,n;function r(){var r=t.apply(this,arguments);return r!==n&&(e=(n=r)&&Nn(r)),e}return r._value=t,r}var On=0;function Mn(t,e,n,r){this._groups=t,this._parents=e,this._name=n,this._id=r}function In(){return++On}var Fn=Lt.prototype;Mn.prototype=function(t){return Lt().transition(t)}.prototype={constructor:Mn,select:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=y(t));for(var r=this._groups,i=r.length,a=new Array(i),s=0;s<i;++s)for(var o,c,l=r[s],h=l.length,u=a[s]=new Array(h),d=0;d<h;++d)(o=l[d])&&(c=t.call(o,o.__data__,d,l))&&("__data__"in o&&(c.__data__=o.__data__),u[d]=c,re(u[d],e,n,d,u,se(o,n)));return new Mn(a,this._parents,e,n)},selectAll:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=_(t));for(var r=this._groups,i=r.length,a=[],s=[],o=0;o<i;++o)for(var c,l=r[o],h=l.length,u=0;u<h;++u)if(c=l[u]){for(var d,p=t.call(c,c.__data__,u,l),f=se(c,n),g=0,y=p.length;g<y;++g)(d=p[g])&&re(d,e,n,g,p,f);a.push(p),s.push(c)}return new Mn(a,s,e,n)},selectChild:Fn.selectChild,selectChildren:Fn.selectChildren,filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new Mn(r,this._parents,this._name,this._id)},merge:function(t){if(t._id!==this._id)throw new Error;for(var e=this._groups,n=t._groups,r=e.length,i=n.length,a=Math.min(r,i),s=new Array(r),o=0;o<a;++o)for(var c,l=e[o],h=n[o],u=l.length,d=s[o]=new Array(u),p=0;p<u;++p)(c=l[p]||h[p])&&(d[p]=c);for(;o<r;++o)s[o]=e[o];return new Mn(s,this._parents,this._name,this._id)},selection:function(){return new Sn(this._groups,this._parents)},transition:function(){for(var t=this._name,e=this._id,n=In(),r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)if(s=o[l]){var h=se(s,e);re(s,t,n,l,o,{time:h.time+h.delay+h.duration,delay:0,duration:h.duration,ease:h.ease})}return new Mn(r,this._parents,t,n)},call:Fn.call,nodes:Fn.nodes,node:Fn.node,size:Fn.size,empty:Fn.empty,each:Fn.each,on:function(t,e){var n=this._id;return arguments.length<2?se(this.node(),n).on.on(t):this.each(Tn(n,t,e))},attr:function(t,e){var n=F(t),r="transform"===n?fe:hn;return this.attrTween(t,"function"==typeof e?(n.local?yn:gn)(n,r,me(this,"attr."+t,e)):null==e?(n.local?dn:un)(n):(n.local?fn:pn)(n,r,e))},attrTween:function(t,e){var n="attr."+t;if(arguments.length<2)return(n=this.tween(n))&&n._value;if(null==e)return this.tween(n,null);if("function"!=typeof e)throw new Error;var r=F(t);return this.tween(n,(r.local?_n:xn)(r,e))},style:function(t,e,n){var r="transform"==(t+="")?pe:hn;return null==e?this.styleTween(t,function(t,e){var n,r,i;return function(){var a=H(this,t),s=(this.style.removeProperty(t),H(this,t));return a===s?null:a===n&&s===r?i:i=e(n=a,r=s)}}(t,r)).on("end.style."+t,An(t)):"function"==typeof e?this.styleTween(t,function(t,e,n){var r,i,a;return function(){var s=H(this,t),o=n(this),c=o+"";return null==o&&(this.style.removeProperty(t),c=o=H(this,t)),s===c?null:s===r&&c===i?a:(i=c,a=e(r=s,o))}}(t,r,me(this,"style."+t,e))).each(function(t,e){var n,r,i,a,s="style."+e,o="end."+s;return function(){var c=ae(this,t),l=c.on,h=null==c.value[s]?a||(a=An(e)):void 0;l===n&&i===h||(r=(n=l).copy()).on(o,i=h),c.on=r}}(this._id,t)):this.styleTween(t,function(t,e,n){var r,i,a=n+"";return function(){var s=H(this,t);return s===a?null:s===r?i:i=e(r=s,n)}}(t,r,e),n).on("end.style."+t,null)},styleTween:function(t,e,n){var r="style."+(t+="");if(arguments.length<2)return(r=this.tween(r))&&r._value;if(null==e)return this.tween(r,null);if("function"!=typeof e)throw new Error;return this.tween(r,Bn(t,e,null==n?"":n))},text:function(t){return this.tween("text","function"==typeof t?function(t){return function(){var e=t(this);this.textContent=null==e?"":e}}(me(this,"text",t)):function(t){return function(){this.textContent=t}}(null==t?"":t+""))},textTween:function(t){var e="text";if(arguments.length<1)return(e=this.tween(e))&&e._value;if(null==t)return this.tween(e,null);if("function"!=typeof t)throw new Error;return this.tween(e,Dn(t))},remove:function(){return this.on("end.remove",function(t){return function(){var e=this.parentNode;for(var n in this.__transition)if(+n!==t)return;e&&e.removeChild(this)}}(this._id))},tween:function(t,e){var n=this._id;if(t+="",arguments.length<2){for(var r,i=se(this.node(),n).tween,a=0,s=i.length;a<s;++a)if((r=i[a]).name===t)return r.value;return null}return this.each((null==e?ge:ye)(n,t,e))},delay:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?vn:kn)(e,t)):se(this.node(),e).delay},duration:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?wn:En)(e,t)):se(this.node(),e).duration},ease:function(t){var e=this._id;return arguments.length?this.each(Cn(e,t)):se(this.node(),e).ease},easeVarying:function(t){if("function"!=typeof t)throw new Error;return this.each(function(t,e){return function(){var n=e.apply(this,arguments);if("function"!=typeof n)throw new Error;ae(this,t).ease=n}}(this._id,t))},end:function(){var t,e,n=this,r=n._id,i=n.size();return new Promise((function(a,s){var o={value:s},c={value:function(){0==--i&&a()}};n.each((function(){var n=ae(this,r),i=n.on;i!==t&&((e=(t=i).copy())._.cancel.push(o),e._.interrupt.push(o),e._.end.push(c)),n.on=e})),0===i&&a()}))},[Symbol.iterator]:Fn[Symbol.iterator]};var $n={time:null,delay:0,duration:250,ease:function(t){return((t*=2)<=1?t*t*t:(t-=2)*t*t+2)/2}};function Rn(t,e){for(var n;!(n=t.__transition)||!(n=n[e]);)if(!(t=t.parentNode))throw new Error(`transition ${e} not found`);return n}Lt.prototype.interrupt=function(t){return this.each((function(){!function(t,e){var n,r,i,a=t.__transition,s=!0;if(a){for(i in e=null==e?null:e+"",a)(n=a[i]).name===e?(r=n.state>2&&n.state<5,n.state=6,n.timer.stop(),n.on.call(r?"interrupt":"cancel",t,t.__data__,n.index,n.group),delete a[i]):s=!1;s&&delete t.__transition}}(this,t)}))},Lt.prototype.transition=function(t){var e,n;t instanceof Mn?(e=t._id,t=t._name):(e=In(),(n=$n).time=Ht(),t=null==t?null:t+"");for(var r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)(s=o[l])&&re(s,t,e,l,o,n||Rn(s,e));return new Mn(r,this._parents,t,e)};const{abs:Zn,max:Pn,min:jn}=Math;function Yn(t){return[+t[0],+t[1]]}function zn(t){return[Yn(t[0]),Yn(t[1])]}["w","e"].map(Un),["n","s"].map(Un),["n","w","e","s","nw","ne","sw","se"].map(Un);function Un(t){return{type:t}}function Wn(t){if(!t.ok)throw new Error(t.status+" "+t.statusText);return t.text()}function qn(t){return(e,n)=>function(t,e){return fetch(t,e).then(Wn)}(e,n).then((e=>(new DOMParser).parseFromString(e,t)))}qn("application/xml");qn("text/html");var Hn=qn("image/svg+xml");const Vn=Math.PI/180,Gn=180/Math.PI,Xn=.96422,Kn=.82521,Qn=4/29,Jn=6/29,tr=3*Jn*Jn;function er(t){if(t instanceof nr)return new nr(t.l,t.a,t.b,t.opacity);if(t instanceof lr)return hr(t);t instanceof je||(t=Ze(t));var e,n,r=sr(t.r),i=sr(t.g),a=sr(t.b),s=rr((.2225045*r+.7168786*i+.0606169*a)/1);return r===i&&i===a?e=n=s:(e=rr((.4360747*r+.3850649*i+.1430804*a)/Xn),n=rr((.0139322*r+.0971045*i+.7141733*a)/Kn)),new nr(116*s-16,500*(e-s),200*(s-n),t.opacity)}function nr(t,e,n,r){this.l=+t,this.a=+e,this.b=+n,this.opacity=+r}function rr(t){return t>.008856451679035631?Math.pow(t,1/3):t/tr+Qn}function ir(t){return t>Jn?t*t*t:tr*(t-Qn)}function ar(t){return 255*(t<=.0031308?12.92*t:1.055*Math.pow(t,1/2.4)-.055)}function sr(t){return(t/=255)<=.04045?t/12.92:Math.pow((t+.055)/1.055,2.4)}function or(t){if(t instanceof lr)return new lr(t.h,t.c,t.l,t.opacity);if(t instanceof nr||(t=er(t)),0===t.a&&0===t.b)return new lr(NaN,0<t.l&&t.l<100?0:NaN,t.l,t.opacity);var e=Math.atan2(t.b,t.a)*Gn;return new lr(e<0?e+360:e,Math.sqrt(t.a*t.a+t.b*t.b),t.l,t.opacity)}function cr(t,e,n,r){return 1===arguments.length?or(t):new lr(t,e,n,null==r?1:r)}function lr(t,e,n,r){this.h=+t,this.c=+e,this.l=+n,this.opacity=+r}function hr(t){if(isNaN(t.h))return new nr(t.l,0,0,t.opacity);var e=t.h*Vn;return new nr(t.l,Math.cos(e)*t.c,Math.sin(e)*t.c,t.opacity)}function ur(t){return function(e,n){var r=t((e=cr(e)).h,(n=cr(n)).h),i=rn(e.c,n.c),a=rn(e.l,n.l),s=rn(e.opacity,n.opacity);return function(t){return e.h=r(t),e.c=i(t),e.l=a(t),e.opacity=s(t),e+""}}}be(nr,(function(t,e,n,r){return 1===arguments.length?er(t):new nr(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return new nr(this.l+18*(null==t?1:t),this.a,this.b,this.opacity)},darker(t){return new nr(this.l-18*(null==t?1:t),this.a,this.b,this.opacity)},rgb(){var t=(this.l+16)/116,e=isNaN(this.a)?t:t+this.a/500,n=isNaN(this.b)?t:t-this.b/200;return new je(ar(3.1338561*(e=Xn*ir(e))-1.6168667*(t=1*ir(t))-.4906146*(n=Kn*ir(n))),ar(-.9787684*e+1.9161415*t+.033454*n),ar(.0719453*e-.2289914*t+1.4052427*n),this.opacity)}})),be(lr,cr,_e(xe,{brighter(t){return new lr(this.h,this.c,this.l+18*(null==t?1:t),this.opacity)},darker(t){return new lr(this.h,this.c,this.l-18*(null==t?1:t),this.opacity)},rgb(){return hr(this).rgb()}}));const dr=ur((function(t,e){var n=e-t;return n?en(t,n>180||n<-180?n-360*Math.round(n/360):n):tn(isNaN(t)?e:t)}));ur(rn);const pr=Math.sqrt(50),fr=Math.sqrt(10),gr=Math.sqrt(2);function yr(t,e,n){const r=(e-t)/Math.max(0,n),i=Math.floor(Math.log10(r)),a=r/Math.pow(10,i),s=a>=pr?10:a>=fr?5:a>=gr?2:1;let o,c,l;return i<0?(l=Math.pow(10,-i)/s,o=Math.round(t*l),c=Math.round(e*l),o/l<t&&++o,c/l>e&&--c,l=-l):(l=Math.pow(10,i)*s,o=Math.round(t/l),c=Math.round(e/l),o*l<t&&++o,c*l>e&&--c),c<o&&.5<=n&&n<2?yr(t,e,2*n):[o,c,l]}function mr(t,e,n){return yr(t=+t,e=+e,n=+n)[2]}function br(t,e,n){n=+n;const r=(e=+e)<(t=+t),i=r?mr(e,t,n):mr(t,e,n);return(r?-1:1)*(i<0?1/-i:i)}function _r(t,e){return null==t||null==e?NaN:t<e?-1:t>e?1:t>=e?0:NaN}function xr(t,e){return null==t||null==e?NaN:e<t?-1:e>t?1:e>=t?0:NaN}function vr(t){let e,n,r;function i(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<0?i=e+1:a=e}while(i<a)}return i}return 2!==t.length?(e=_r,n=(e,n)=>_r(t(e),n),r=(e,n)=>t(e)-n):(e=t===_r||t===xr?t:kr,n=t,r=t),{left:i,center:function(t,e,n=0,a=t.length){const s=i(t,e,n,a-1);return s>n&&r(t[s-1],e)>-r(t[s],e)?s-1:s},right:function(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<=0?i=e+1:a=e}while(i<a)}return i}}}function kr(){return 0}const wr=vr(_r),Er=wr.right,Cr=(wr.left,vr((function(t){return null===t?NaN:+t})).center,Er);function Tr(t,e){var n,r=e?e.length:0,i=t?Math.min(r,t.length):0,a=new Array(i),s=new Array(r);for(n=0;n<i;++n)a[n]=Br(t[n],e[n]);for(;n<r;++n)s[n]=e[n];return function(t){for(n=0;n<i;++n)s[n]=a[n](t);return s}}function Sr(t,e){var n=new Date;return t=+t,e=+e,function(r){return n.setTime(t*(1-r)+e*r),n}}function Ar(t,e){var n,r={},i={};for(n in null!==t&&"object"==typeof t||(t={}),null!==e&&"object"==typeof e||(e={}),e)n in t?r[n]=Br(t[n],e[n]):i[n]=e[n];return function(t){for(n in r)i[n]=r[n](t);return i}}function Lr(t,e){e||(e=[]);var n,r=t?Math.min(e.length,t.length):0,i=e.slice();return function(a){for(n=0;n<r;++n)i[n]=t[n]*(1-a)+e[n]*a;return i}}function Br(t,e){var n,r,i=typeof e;return null==e||"boolean"===i?tn(e):("number"===i?oe:"string"===i?(n=Fe(e))?(e=n,an):ln:e instanceof Fe?an:e instanceof Date?Sr:(r=e,!ArrayBuffer.isView(r)||r instanceof DataView?Array.isArray(e)?Tr:"function"!=typeof e.valueOf&&"function"!=typeof e.toString||isNaN(e)?Ar:oe:Lr))(t,e)}function Nr(t,e){return t=+t,e=+e,function(n){return Math.round(t*(1-n)+e*n)}}function Dr(t){return+t}var Or=[0,1];function Mr(t){return t}function Ir(t,e){return(e-=t=+t)?function(n){return(n-t)/e}:(n=isNaN(e)?NaN:.5,function(){return n});var n}function Fr(t,e,n){var r=t[0],i=t[1],a=e[0],s=e[1];return i<r?(r=Ir(i,r),a=n(s,a)):(r=Ir(r,i),a=n(a,s)),function(t){return a(r(t))}}function $r(t,e,n){var r=Math.min(t.length,e.length)-1,i=new Array(r),a=new Array(r),s=-1;for(t[r]<t[0]&&(t=t.slice().reverse(),e=e.slice().reverse());++s<r;)i[s]=Ir(t[s],t[s+1]),a[s]=n(e[s],e[s+1]);return function(e){var n=Cr(t,e,1,r)-1;return a[n](i[n](e))}}function Rr(t,e){return e.domain(t.domain()).range(t.range()).interpolate(t.interpolate()).clamp(t.clamp()).unknown(t.unknown())}function Zr(){var t,e,n,r,i,a,s=Or,o=Or,c=Br,l=Mr;function h(){var t,e,n,c=Math.min(s.length,o.length);return l!==Mr&&(t=s[0],e=s[c-1],t>e&&(n=t,t=e,e=n),l=function(n){return Math.max(t,Math.min(e,n))}),r=c>2?$r:Fr,i=a=null,u}function u(e){return null==e||isNaN(e=+e)?n:(i||(i=r(s.map(t),o,c)))(t(l(e)))}return u.invert=function(n){return l(e((a||(a=r(o,s.map(t),oe)))(n)))},u.domain=function(t){return arguments.length?(s=Array.from(t,Dr),h()):s.slice()},u.range=function(t){return arguments.length?(o=Array.from(t),h()):o.slice()},u.rangeRound=function(t){return o=Array.from(t),c=Nr,h()},u.clamp=function(t){return arguments.length?(l=!!t||Mr,h()):l!==Mr},u.interpolate=function(t){return arguments.length?(c=t,h()):c},u.unknown=function(t){return arguments.length?(n=t,u):n},function(n,r){return t=n,e=r,h()}}function Pr(){return Zr()(Mr,Mr)}function jr(t,e){switch(arguments.length){case 0:break;case 1:this.range(t);break;default:this.range(e).domain(t)}return this}var Yr,zr=/^(?:(.)?([<>=^]))?([+\-( ])?([$#])?(0)?(\d+)?(,)?(\.\d+)?(~)?([a-z%])?$/i;function Ur(t){if(!(e=zr.exec(t)))throw new Error("invalid format: "+t);var e;return new Wr({fill:e[1],align:e[2],sign:e[3],symbol:e[4],zero:e[5],width:e[6],comma:e[7],precision:e[8]&&e[8].slice(1),trim:e[9],type:e[10]})}function Wr(t){this.fill=void 0===t.fill?" ":t.fill+"",this.align=void 0===t.align?">":t.align+"",this.sign=void 0===t.sign?"-":t.sign+"",this.symbol=void 0===t.symbol?"":t.symbol+"",this.zero=!!t.zero,this.width=void 0===t.width?void 0:+t.width,this.comma=!!t.comma,this.precision=void 0===t.precision?void 0:+t.precision,this.trim=!!t.trim,this.type=void 0===t.type?"":t.type+""}function qr(t,e){if((n=(t=e?t.toExponential(e-1):t.toExponential()).indexOf("e"))<0)return null;var n,r=t.slice(0,n);return[r.length>1?r[0]+r.slice(2):r,+t.slice(n+1)]}function Hr(t){return(t=qr(Math.abs(t)))?t[1]:NaN}function Vr(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1];return i<0?"0."+new Array(-i).join("0")+r:r.length>i+1?r.slice(0,i+1)+"."+r.slice(i+1):r+new Array(i-r.length+2).join("0")}Ur.prototype=Wr.prototype,Wr.prototype.toString=function(){return this.fill+this.align+this.sign+this.symbol+(this.zero?"0":"")+(void 0===this.width?"":Math.max(1,0|this.width))+(this.comma?",":"")+(void 0===this.precision?"":"."+Math.max(0,0|this.precision))+(this.trim?"~":"")+this.type};const Gr={"%":(t,e)=>(100*t).toFixed(e),b:t=>Math.round(t).toString(2),c:t=>t+"",d:function(t){return Math.abs(t=Math.round(t))>=1e21?t.toLocaleString("en").replace(/,/g,""):t.toString(10)},e:(t,e)=>t.toExponential(e),f:(t,e)=>t.toFixed(e),g:(t,e)=>t.toPrecision(e),o:t=>Math.round(t).toString(8),p:(t,e)=>Vr(100*t,e),r:Vr,s:function(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1],a=i-(Yr=3*Math.max(-8,Math.min(8,Math.floor(i/3))))+1,s=r.length;return a===s?r:a>s?r+new Array(a-s+1).join("0"):a>0?r.slice(0,a)+"."+r.slice(a):"0."+new Array(1-a).join("0")+qr(t,Math.max(0,e+a-1))[0]},X:t=>Math.round(t).toString(16).toUpperCase(),x:t=>Math.round(t).toString(16)};function Xr(t){return t}var Kr,Qr,Jr,ti=Array.prototype.map,ei=["y","z","a","f","p","n","\xb5","m","","k","M","G","T","P","E","Z","Y"];function ni(t){var e,n,r=void 0===t.grouping||void 0===t.thousands?Xr:(e=ti.call(t.grouping,Number),n=t.thousands+"",function(t,r){for(var i=t.length,a=[],s=0,o=e[0],c=0;i>0&&o>0&&(c+o+1>r&&(o=Math.max(1,r-c)),a.push(t.substring(i-=o,i+o)),!((c+=o+1)>r));)o=e[s=(s+1)%e.length];return a.reverse().join(n)}),i=void 0===t.currency?"":t.currency[0]+"",a=void 0===t.currency?"":t.currency[1]+"",s=void 0===t.decimal?".":t.decimal+"",o=void 0===t.numerals?Xr:function(t){return function(e){return e.replace(/[0-9]/g,(function(e){return t[+e]}))}}(ti.call(t.numerals,String)),c=void 0===t.percent?"%":t.percent+"",l=void 0===t.minus?"\u2212":t.minus+"",h=void 0===t.nan?"NaN":t.nan+"";function u(t){var e=(t=Ur(t)).fill,n=t.align,u=t.sign,d=t.symbol,p=t.zero,f=t.width,g=t.comma,y=t.precision,m=t.trim,b=t.type;"n"===b?(g=!0,b="g"):Gr[b]||(void 0===y&&(y=12),m=!0,b="g"),(p||"0"===e&&"="===n)&&(p=!0,e="0",n="=");var _="$"===d?i:"#"===d&&/[boxX]/.test(b)?"0"+b.toLowerCase():"",x="$"===d?a:/[%p]/.test(b)?c:"",v=Gr[b],k=/[defgprs%]/.test(b);function w(t){var i,a,c,d=_,w=x;if("c"===b)w=v(t)+w,t="";else{var E=(t=+t)<0||1/t<0;if(t=isNaN(t)?h:v(Math.abs(t),y),m&&(t=function(t){t:for(var e,n=t.length,r=1,i=-1;r<n;++r)switch(t[r]){case".":i=e=r;break;case"0":0===i&&(i=r),e=r;break;default:if(!+t[r])break t;i>0&&(i=0)}return i>0?t.slice(0,i)+t.slice(e+1):t}(t)),E&&0==+t&&"+"!==u&&(E=!1),d=(E?"("===u?u:l:"-"===u||"("===u?"":u)+d,w=("s"===b?ei[8+Yr/3]:"")+w+(E&&"("===u?")":""),k)for(i=-1,a=t.length;++i<a;)if(48>(c=t.charCodeAt(i))||c>57){w=(46===c?s+t.slice(i+1):t.slice(i))+w,t=t.slice(0,i);break}}g&&!p&&(t=r(t,1/0));var C=d.length+t.length+w.length,T=C<f?new Array(f-C+1).join(e):"";switch(g&&p&&(t=r(T+t,T.length?f-w.length:1/0),T=""),n){case"<":t=d+t+w+T;break;case"=":t=d+T+t+w;break;case"^":t=T.slice(0,C=T.length>>1)+d+t+w+T.slice(C);break;default:t=T+d+t+w}return o(t)}return y=void 0===y?6:/[gprs]/.test(b)?Math.max(1,Math.min(21,y)):Math.max(0,Math.min(20,y)),w.toString=function(){return t+""},w}return{format:u,formatPrefix:function(t,e){var n=u(((t=Ur(t)).type="f",t)),r=3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3))),i=Math.pow(10,-r),a=ei[8+r/3];return function(t){return n(i*t)+a}}}}function ri(t,e,n,r){var i,a=br(t,e,n);switch((r=Ur(null==r?",f":r)).type){case"s":var s=Math.max(Math.abs(t),Math.abs(e));return null!=r.precision||isNaN(i=function(t,e){return Math.max(0,3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3)))-Hr(Math.abs(t)))}(a,s))||(r.precision=i),Jr(r,s);case"":case"e":case"g":case"p":case"r":null!=r.precision||isNaN(i=function(t,e){return t=Math.abs(t),e=Math.abs(e)-t,Math.max(0,Hr(e)-Hr(t))+1}(a,Math.max(Math.abs(t),Math.abs(e))))||(r.precision=i-("e"===r.type));break;case"f":case"%":null!=r.precision||isNaN(i=function(t){return Math.max(0,-Hr(Math.abs(t)))}(a))||(r.precision=i-2*("%"===r.type))}return Qr(r)}function ii(t){var e=t.domain;return t.ticks=function(t){var n=e();return function(t,e,n){if(!((n=+n)>0))return[];if((t=+t)==(e=+e))return[t];const r=e<t,[i,a,s]=r?yr(e,t,n):yr(t,e,n);if(!(a>=i))return[];const o=a-i+1,c=new Array(o);if(r)if(s<0)for(let l=0;l<o;++l)c[l]=(a-l)/-s;else for(let l=0;l<o;++l)c[l]=(a-l)*s;else if(s<0)for(let l=0;l<o;++l)c[l]=(i+l)/-s;else for(let l=0;l<o;++l)c[l]=(i+l)*s;return c}(n[0],n[n.length-1],null==t?10:t)},t.tickFormat=function(t,n){var r=e();return ri(r[0],r[r.length-1],null==t?10:t,n)},t.nice=function(n){null==n&&(n=10);var r,i,a=e(),s=0,o=a.length-1,c=a[s],l=a[o],h=10;for(l<c&&(i=c,c=l,l=i,i=s,s=o,o=i);h-- >0;){if((i=mr(c,l,n))===r)return a[s]=c,a[o]=l,e(a);if(i>0)c=Math.floor(c/i)*i,l=Math.ceil(l/i)*i;else{if(!(i<0))break;c=Math.ceil(c*i)/i,l=Math.floor(l*i)/i}r=i}return t},t}function ai(){var t=Pr();return t.copy=function(){return Rr(t,ai())},jr.apply(t,arguments),ii(t)}Kr=ni({thousands:",",grouping:[3],currency:["$",""]}),Qr=Kr.format,Jr=Kr.formatPrefix;class si extends Map{constructor(t,e=hi){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:e}}),null!=t)for(const[n,r]of t)this.set(n,r)}get(t){return super.get(oi(this,t))}has(t){return super.has(oi(this,t))}set(t,e){return super.set(ci(this,t),e)}delete(t){return super.delete(li(this,t))}}Set;function oi({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):n}function ci({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):(t.set(r,n),n)}function li({_intern:t,_key:e},n){const r=e(n);return t.has(r)&&(n=t.get(r),t.delete(r)),n}function hi(t){return null!==t&&"object"==typeof t?t.valueOf():t}const ui=Symbol("implicit");function di(){var t=new si,e=[],n=[],r=ui;function i(i){let a=t.get(i);if(void 0===a){if(r!==ui)return r;t.set(i,a=e.push(i)-1)}return n[a%n.length]}return i.domain=function(n){if(!arguments.length)return e.slice();e=[],t=new si;for(const r of n)t.has(r)||t.set(r,e.push(r)-1);return i},i.range=function(t){return arguments.length?(n=Array.from(t),i):n.slice()},i.unknown=function(t){return arguments.length?(r=t,i):r},i.copy=function(){return di(e,n).unknown(r)},jr.apply(i,arguments),i}const pi=1e3,fi=6e4,gi=36e5,yi=864e5,mi=6048e5,bi=2592e6,_i=31536e6,xi=new Date,vi=new Date;function ki(t,e,n,r){function i(e){return t(e=0===arguments.length?new Date:new Date(+e)),e}return i.floor=e=>(t(e=new Date(+e)),e),i.ceil=n=>(t(n=new Date(n-1)),e(n,1),t(n),n),i.round=t=>{const e=i(t),n=i.ceil(t);return t-e<n-t?e:n},i.offset=(t,n)=>(e(t=new Date(+t),null==n?1:Math.floor(n)),t),i.range=(n,r,a)=>{const s=[];if(n=i.ceil(n),a=null==a?1:Math.floor(a),!(n<r&&a>0))return s;let o;do{s.push(o=new Date(+n)),e(n,a),t(n)}while(o<n&&n<r);return s},i.filter=n=>ki((e=>{if(e>=e)for(;t(e),!n(e);)e.setTime(e-1)}),((t,r)=>{if(t>=t)if(r<0)for(;++r<=0;)for(;e(t,-1),!n(t););else for(;--r>=0;)for(;e(t,1),!n(t););})),n&&(i.count=(e,r)=>(xi.setTime(+e),vi.setTime(+r),t(xi),t(vi),Math.floor(n(xi,vi))),i.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?i.filter(r?e=>r(e)%t==0:e=>i.count(0,e)%t==0):i:null)),i}const wi=ki((()=>{}),((t,e)=>{t.setTime(+t+e)}),((t,e)=>e-t));wi.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?ki((e=>{e.setTime(Math.floor(e/t)*t)}),((e,n)=>{e.setTime(+e+n*t)}),((e,n)=>(n-e)/t)):wi:null);wi.range;const Ei=ki((t=>{t.setTime(t-t.getMilliseconds())}),((t,e)=>{t.setTime(+t+e*pi)}),((t,e)=>(e-t)/pi),(t=>t.getUTCSeconds())),Ci=(Ei.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getMinutes()))),Ti=(Ci.range,ki((t=>{t.setUTCSeconds(0,0)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getUTCMinutes()))),Si=(Ti.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi-t.getMinutes()*fi)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getHours()))),Ai=(Si.range,ki((t=>{t.setUTCMinutes(0,0,0)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getUTCHours()))),Li=(Ai.range,ki((t=>t.setHours(0,0,0,0)),((t,e)=>t.setDate(t.getDate()+e)),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/yi),(t=>t.getDate()-1))),Bi=(Li.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>t.getUTCDate()-1))),Ni=(Bi.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>Math.floor(t/yi))));Ni.range;function Di(t){return ki((e=>{e.setDate(e.getDate()-(e.getDay()+7-t)%7),e.setHours(0,0,0,0)}),((t,e)=>{t.setDate(t.getDate()+7*e)}),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/mi))}const Oi=Di(0),Mi=Di(1),Ii=Di(2),Fi=Di(3),$i=Di(4),Ri=Di(5),Zi=Di(6);Oi.range,Mi.range,Ii.range,Fi.range,$i.range,Ri.range,Zi.range;function Pi(t){return ki((e=>{e.setUTCDate(e.getUTCDate()-(e.getUTCDay()+7-t)%7),e.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+7*e)}),((t,e)=>(e-t)/mi))}const ji=Pi(0),Yi=Pi(1),zi=Pi(2),Ui=Pi(3),Wi=Pi(4),qi=Pi(5),Hi=Pi(6),Vi=(ji.range,Yi.range,zi.range,Ui.range,Wi.range,qi.range,Hi.range,ki((t=>{t.setDate(1),t.setHours(0,0,0,0)}),((t,e)=>{t.setMonth(t.getMonth()+e)}),((t,e)=>e.getMonth()-t.getMonth()+12*(e.getFullYear()-t.getFullYear())),(t=>t.getMonth()))),Gi=(Vi.range,ki((t=>{t.setUTCDate(1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCMonth(t.getUTCMonth()+e)}),((t,e)=>e.getUTCMonth()-t.getUTCMonth()+12*(e.getUTCFullYear()-t.getUTCFullYear())),(t=>t.getUTCMonth()))),Xi=(Gi.range,ki((t=>{t.setMonth(0,1),t.setHours(0,0,0,0)}),((t,e)=>{t.setFullYear(t.getFullYear()+e)}),((t,e)=>e.getFullYear()-t.getFullYear()),(t=>t.getFullYear())));Xi.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setFullYear(Math.floor(e.getFullYear()/t)*t),e.setMonth(0,1),e.setHours(0,0,0,0)}),((e,n)=>{e.setFullYear(e.getFullYear()+n*t)})):null;Xi.range;const Ki=ki((t=>{t.setUTCMonth(0,1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCFullYear(t.getUTCFullYear()+e)}),((t,e)=>e.getUTCFullYear()-t.getUTCFullYear()),(t=>t.getUTCFullYear()));Ki.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setUTCFullYear(Math.floor(e.getUTCFullYear()/t)*t),e.setUTCMonth(0,1),e.setUTCHours(0,0,0,0)}),((e,n)=>{e.setUTCFullYear(e.getUTCFullYear()+n*t)})):null;Ki.range;function Qi(t,e,n,r,i,a){const s=[[Ei,1,pi],[Ei,5,5e3],[Ei,15,15e3],[Ei,30,3e4],[a,1,fi],[a,5,3e5],[a,15,9e5],[a,30,18e5],[i,1,gi],[i,3,108e5],[i,6,216e5],[i,12,432e5],[r,1,yi],[r,2,1728e5],[n,1,mi],[e,1,bi],[e,3,7776e6],[t,1,_i]];function o(e,n,r){const i=Math.abs(n-e)/r,a=vr((([,,t])=>t)).right(s,i);if(a===s.length)return t.every(br(e/_i,n/_i,r));if(0===a)return wi.every(Math.max(br(e,n,r),1));const[o,c]=s[i/s[a-1][2]<s[a][2]/i?a-1:a];return o.every(c)}return[function(t,e,n){const r=e<t;r&&([t,e]=[e,t]);const i=n&&"function"==typeof n.range?n:o(t,e,n),a=i?i.range(t,+e+1):[];return r?a.reverse():a},o]}const[Ji,ta]=Qi(Ki,Gi,ji,Ni,Ai,Ti),[ea,na]=Qi(Xi,Vi,Oi,Li,Si,Ci);function ra(t){if(0<=t.y&&t.y<100){var e=new Date(-1,t.m,t.d,t.H,t.M,t.S,t.L);return e.setFullYear(t.y),e}return new Date(t.y,t.m,t.d,t.H,t.M,t.S,t.L)}function ia(t){if(0<=t.y&&t.y<100){var e=new Date(Date.UTC(-1,t.m,t.d,t.H,t.M,t.S,t.L));return e.setUTCFullYear(t.y),e}return new Date(Date.UTC(t.y,t.m,t.d,t.H,t.M,t.S,t.L))}function aa(t,e,n){return{y:t,m:e,d:n,H:0,M:0,S:0,L:0}}var sa,oa,ca={"-":"",_:" ",0:"0"},la=/^\s*\d+/,ha=/^%/,ua=/[\\^$*+?|[\]().{}]/g;function da(t,e,n){var r=t<0?"-":"",i=(r?-t:t)+"",a=i.length;return r+(a<n?new Array(n-a+1).join(e)+i:i)}function pa(t){return t.replace(ua,"\\$&")}function fa(t){return new RegExp("^(?:"+t.map(pa).join("|")+")","i")}function ga(t){return new Map(t.map(((t,e)=>[t.toLowerCase(),e])))}function ya(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.w=+r[0],n+r[0].length):-1}function ma(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.u=+r[0],n+r[0].length):-1}function ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.U=+r[0],n+r[0].length):-1}function _a(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.V=+r[0],n+r[0].length):-1}function xa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.W=+r[0],n+r[0].length):-1}function va(t,e,n){var r=la.exec(e.slice(n,n+4));return r?(t.y=+r[0],n+r[0].length):-1}function ka(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.y=+r[0]+(+r[0]>68?1900:2e3),n+r[0].length):-1}function wa(t,e,n){var r=/^(Z)|([+-]\d\d)(?::?(\d\d))?/.exec(e.slice(n,n+6));return r?(t.Z=r[1]?0:-(r[2]+(r[3]||"00")),n+r[0].length):-1}function Ea(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.q=3*r[0]-3,n+r[0].length):-1}function Ca(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.m=r[0]-1,n+r[0].length):-1}function Ta(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.d=+r[0],n+r[0].length):-1}function Sa(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.m=0,t.d=+r[0],n+r[0].length):-1}function Aa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.H=+r[0],n+r[0].length):-1}function La(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.M=+r[0],n+r[0].length):-1}function Ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.S=+r[0],n+r[0].length):-1}function Na(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.L=+r[0],n+r[0].length):-1}function Da(t,e,n){var r=la.exec(e.slice(n,n+6));return r?(t.L=Math.floor(r[0]/1e3),n+r[0].length):-1}function Oa(t,e,n){var r=ha.exec(e.slice(n,n+1));return r?n+r[0].length:-1}function Ma(t,e,n){var r=la.exec(e.slice(n));return r?(t.Q=+r[0],n+r[0].length):-1}function Ia(t,e,n){var r=la.exec(e.slice(n));return r?(t.s=+r[0],n+r[0].length):-1}function Fa(t,e){return da(t.getDate(),e,2)}function $a(t,e){return da(t.getHours(),e,2)}function Ra(t,e){return da(t.getHours()%12||12,e,2)}function Za(t,e){return da(1+Li.count(Xi(t),t),e,3)}function Pa(t,e){return da(t.getMilliseconds(),e,3)}function ja(t,e){return Pa(t,e)+"000"}function Ya(t,e){return da(t.getMonth()+1,e,2)}function za(t,e){return da(t.getMinutes(),e,2)}function Ua(t,e){return da(t.getSeconds(),e,2)}function Wa(t){var e=t.getDay();return 0===e?7:e}function qa(t,e){return da(Oi.count(Xi(t)-1,t),e,2)}function Ha(t){var e=t.getDay();return e>=4||0===e?$i(t):$i.ceil(t)}function Va(t,e){return t=Ha(t),da($i.count(Xi(t),t)+(4===Xi(t).getDay()),e,2)}function Ga(t){return t.getDay()}function Xa(t,e){return da(Mi.count(Xi(t)-1,t),e,2)}function Ka(t,e){return da(t.getFullYear()%100,e,2)}function Qa(t,e){return da((t=Ha(t)).getFullYear()%100,e,2)}function Ja(t,e){return da(t.getFullYear()%1e4,e,4)}function ts(t,e){var n=t.getDay();return da((t=n>=4||0===n?$i(t):$i.ceil(t)).getFullYear()%1e4,e,4)}function es(t){var e=t.getTimezoneOffset();return(e>0?"-":(e*=-1,"+"))+da(e/60|0,"0",2)+da(e%60,"0",2)}function ns(t,e){return da(t.getUTCDate(),e,2)}function rs(t,e){return da(t.getUTCHours(),e,2)}function is(t,e){return da(t.getUTCHours()%12||12,e,2)}function as(t,e){return da(1+Bi.count(Ki(t),t),e,3)}function ss(t,e){return da(t.getUTCMilliseconds(),e,3)}function os(t,e){return ss(t,e)+"000"}function cs(t,e){return da(t.getUTCMonth()+1,e,2)}function ls(t,e){return da(t.getUTCMinutes(),e,2)}function hs(t,e){return da(t.getUTCSeconds(),e,2)}function us(t){var e=t.getUTCDay();return 0===e?7:e}function ds(t,e){return da(ji.count(Ki(t)-1,t),e,2)}function ps(t){var e=t.getUTCDay();return e>=4||0===e?Wi(t):Wi.ceil(t)}function fs(t,e){return t=ps(t),da(Wi.count(Ki(t),t)+(4===Ki(t).getUTCDay()),e,2)}function gs(t){return t.getUTCDay()}function ys(t,e){return da(Yi.count(Ki(t)-1,t),e,2)}function ms(t,e){return da(t.getUTCFullYear()%100,e,2)}function bs(t,e){return da((t=ps(t)).getUTCFullYear()%100,e,2)}function _s(t,e){return da(t.getUTCFullYear()%1e4,e,4)}function xs(t,e){var n=t.getUTCDay();return da((t=n>=4||0===n?Wi(t):Wi.ceil(t)).getUTCFullYear()%1e4,e,4)}function vs(){return"+0000"}function ks(){return"%"}function ws(t){return+t}function Es(t){return Math.floor(+t/1e3)}function Cs(t){return new Date(t)}function Ts(t){return t instanceof Date?+t:+new Date(+t)}function Ss(t,e,n,r,i,a,s,o,c,l){var h=Pr(),u=h.invert,d=h.domain,p=l(".%L"),f=l(":%S"),g=l("%I:%M"),y=l("%I %p"),m=l("%a %d"),b=l("%b %d"),_=l("%B"),x=l("%Y");function v(t){return(c(t)<t?p:o(t)<t?f:s(t)<t?g:a(t)<t?y:r(t)<t?i(t)<t?m:b:n(t)<t?_:x)(t)}return h.invert=function(t){return new Date(u(t))},h.domain=function(t){return arguments.length?d(Array.from(t,Ts)):d().map(Cs)},h.ticks=function(e){var n=d();return t(n[0],n[n.length-1],null==e?10:e)},h.tickFormat=function(t,e){return null==e?v:l(e)},h.nice=function(t){var n=d();return t&&"function"==typeof t.range||(t=e(n[0],n[n.length-1],null==t?10:t)),t?d(function(t,e){var n,r=0,i=(t=t.slice()).length-1,a=t[r],s=t[i];return s<a&&(n=r,r=i,i=n,n=a,a=s,s=n),t[r]=e.floor(a),t[i]=e.ceil(s),t}(n,t)):h},h.copy=function(){return Rr(h,Ss(t,e,n,r,i,a,s,o,c,l))},h}function As(){return jr.apply(Ss(ea,na,Xi,Vi,Oi,Li,Si,Ci,Ei,oa).domain([new Date(2e3,0,1),new Date(2e3,0,2)]),arguments)}function Ls(t){return"string"==typeof t?new St([[document.querySelector(t)]],[document.documentElement]):new St([[t]],Tt)}function Bs(t){return"string"==typeof t?new St([document.querySelectorAll(t)],[document.documentElement]):new St([m(t)],Tt)}function Ns(t){return function(){return t}}!function(t){sa=function(t){var e=t.dateTime,n=t.date,r=t.time,i=t.periods,a=t.days,s=t.shortDays,o=t.months,c=t.shortMonths,l=fa(i),h=ga(i),u=fa(a),d=ga(a),p=fa(s),f=ga(s),g=fa(o),y=ga(o),m=fa(c),b=ga(c),_={a:function(t){return s[t.getDay()]},A:function(t){return a[t.getDay()]},b:function(t){return c[t.getMonth()]},B:function(t){return o[t.getMonth()]},c:null,d:Fa,e:Fa,f:ja,g:Qa,G:ts,H:$a,I:Ra,j:Za,L:Pa,m:Ya,M:za,p:function(t){return i[+(t.getHours()>=12)]},q:function(t){return 1+~~(t.getMonth()/3)},Q:ws,s:Es,S:Ua,u:Wa,U:qa,V:Va,w:Ga,W:Xa,x:null,X:null,y:Ka,Y:Ja,Z:es,"%":ks},x={a:function(t){return s[t.getUTCDay()]},A:function(t){return a[t.getUTCDay()]},b:function(t){return c[t.getUTCMonth()]},B:function(t){return o[t.getUTCMonth()]},c:null,d:ns,e:ns,f:os,g:bs,G:xs,H:rs,I:is,j:as,L:ss,m:cs,M:ls,p:function(t){return i[+(t.getUTCHours()>=12)]},q:function(t){return 1+~~(t.getUTCMonth()/3)},Q:ws,s:Es,S:hs,u:us,U:ds,V:fs,w:gs,W:ys,x:null,X:null,y:ms,Y:_s,Z:vs,"%":ks},v={a:function(t,e,n){var r=p.exec(e.slice(n));return r?(t.w=f.get(r[0].toLowerCase()),n+r[0].length):-1},A:function(t,e,n){var r=u.exec(e.slice(n));return r?(t.w=d.get(r[0].toLowerCase()),n+r[0].length):-1},b:function(t,e,n){var r=m.exec(e.slice(n));return r?(t.m=b.get(r[0].toLowerCase()),n+r[0].length):-1},B:function(t,e,n){var r=g.exec(e.slice(n));return r?(t.m=y.get(r[0].toLowerCase()),n+r[0].length):-1},c:function(t,n,r){return E(t,e,n,r)},d:Ta,e:Ta,f:Da,g:ka,G:va,H:Aa,I:Aa,j:Sa,L:Na,m:Ca,M:La,p:function(t,e,n){var r=l.exec(e.slice(n));return r?(t.p=h.get(r[0].toLowerCase()),n+r[0].length):-1},q:Ea,Q:Ma,s:Ia,S:Ba,u:ma,U:ba,V:_a,w:ya,W:xa,x:function(t,e,r){return E(t,n,e,r)},X:function(t,e,n){return E(t,r,e,n)},y:ka,Y:va,Z:wa,"%":Oa};function k(t,e){return function(n){var r,i,a,s=[],o=-1,c=0,l=t.length;for(n instanceof Date||(n=new Date(+n));++o<l;)37===t.charCodeAt(o)&&(s.push(t.slice(c,o)),null!=(i=ca[r=t.charAt(++o)])?r=t.charAt(++o):i="e"===r?" ":"0",(a=e[r])&&(r=a(n,i)),s.push(r),c=o+1);return s.push(t.slice(c,o)),s.join("")}}function w(t,e){return function(n){var r,i,a=aa(1900,void 0,1);if(E(a,t,n+="",0)!=n.length)return null;if("Q"in a)return new Date(a.Q);if("s"in a)return new Date(1e3*a.s+("L"in a?a.L:0));if(e&&!("Z"in a)&&(a.Z=0),"p"in a&&(a.H=a.H%12+12*a.p),void 0===a.m&&(a.m="q"in a?a.q:0),"V"in a){if(a.V<1||a.V>53)return null;"w"in a||(a.w=1),"Z"in a?(i=(r=ia(aa(a.y,0,1))).getUTCDay(),r=i>4||0===i?Yi.ceil(r):Yi(r),r=Bi.offset(r,7*(a.V-1)),a.y=r.getUTCFullYear(),a.m=r.getUTCMonth(),a.d=r.getUTCDate()+(a.w+6)%7):(i=(r=ra(aa(a.y,0,1))).getDay(),r=i>4||0===i?Mi.ceil(r):Mi(r),r=Li.offset(r,7*(a.V-1)),a.y=r.getFullYear(),a.m=r.getMonth(),a.d=r.getDate()+(a.w+6)%7)}else("W"in a||"U"in a)&&("w"in a||(a.w="u"in a?a.u%7:"W"in a?1:0),i="Z"in a?ia(aa(a.y,0,1)).getUTCDay():ra(aa(a.y,0,1)).getDay(),a.m=0,a.d="W"in a?(a.w+6)%7+7*a.W-(i+5)%7:a.w+7*a.U-(i+6)%7);return"Z"in a?(a.H+=a.Z/100|0,a.M+=a.Z%100,ia(a)):ra(a)}}function E(t,e,n,r){for(var i,a,s=0,o=e.length,c=n.length;s<o;){if(r>=c)return-1;if(37===(i=e.charCodeAt(s++))){if(i=e.charAt(s++),!(a=v[i in ca?e.charAt(s++):i])||(r=a(t,n,r))<0)return-1}else if(i!=n.charCodeAt(r++))return-1}return r}return _.x=k(n,_),_.X=k(r,_),_.c=k(e,_),x.x=k(n,x),x.X=k(r,x),x.c=k(e,x),{format:function(t){var e=k(t+="",_);return e.toString=function(){return t},e},parse:function(t){var e=w(t+="",!1);return e.toString=function(){return t},e},utcFormat:function(t){var e=k(t+="",x);return e.toString=function(){return t},e},utcParse:function(t){var e=w(t+="",!0);return e.toString=function(){return t},e}}}(t),oa=sa.format,sa.parse,sa.utcFormat,sa.utcParse}({dateTime:"%x, %X",date:"%-m/%-d/%Y",time:"%-I:%M:%S %p",periods:["AM","PM"],days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],shortDays:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});const Ds=Math.abs,Os=Math.atan2,Ms=Math.cos,Is=Math.max,Fs=Math.min,$s=Math.sin,Rs=Math.sqrt,Zs=1e-12,Ps=Math.PI,js=Ps/2,Ys=2*Ps;function zs(t){return t>1?0:t<-1?Ps:Math.acos(t)}function Us(t){return t>=1?js:t<=-1?-js:Math.asin(t)}const Ws=Math.PI,qs=2*Ws,Hs=1e-6,Vs=qs-Hs;function Gs(t){this._+=t[0];for(let e=1,n=t.length;e<n;++e)this._+=arguments[e]+t[e]}class Xs{constructor(t){this._x0=this._y0=this._x1=this._y1=null,this._="",this._append=null==t?Gs:function(t){let e=Math.floor(t);if(!(e>=0))throw new Error(`invalid digits: ${t}`);if(e>15)return Gs;const n=10**e;return function(t){this._+=t[0];for(let e=1,r=t.length;e<r;++e)this._+=Math.round(arguments[e]*n)/n+t[e]}}(t)}moveTo(t,e){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}`}closePath(){null!==this._x1&&(this._x1=this._x0,this._y1=this._y0,this._append`Z`)}lineTo(t,e){this._append`L${this._x1=+t},${this._y1=+e}`}quadraticCurveTo(t,e,n,r){this._append`Q${+t},${+e},${this._x1=+n},${this._y1=+r}`}bezierCurveTo(t,e,n,r,i,a){this._append`C${+t},${+e},${+n},${+r},${this._x1=+i},${this._y1=+a}`}arcTo(t,e,n,r,i){if(t=+t,e=+e,n=+n,r=+r,(i=+i)<0)throw new Error(`negative radius: ${i}`);let a=this._x1,s=this._y1,o=n-t,c=r-e,l=a-t,h=s-e,u=l*l+h*h;if(null===this._x1)this._append`M${this._x1=t},${this._y1=e}`;else if(u>Hs)if(Math.abs(h*o-c*l)>Hs&&i){let d=n-a,p=r-s,f=o*o+c*c,g=d*d+p*p,y=Math.sqrt(f),m=Math.sqrt(u),b=i*Math.tan((Ws-Math.acos((f+u-g)/(2*y*m)))/2),_=b/m,x=b/y;Math.abs(_-1)>Hs&&this._append`L${t+_*l},${e+_*h}`,this._append`A${i},${i},0,0,${+(h*d>l*p)},${this._x1=t+x*o},${this._y1=e+x*c}`}else this._append`L${this._x1=t},${this._y1=e}`;else;}arc(t,e,n,r,i,a){if(t=+t,e=+e,a=!!a,(n=+n)<0)throw new Error(`negative radius: ${n}`);let s=n*Math.cos(r),o=n*Math.sin(r),c=t+s,l=e+o,h=1^a,u=a?r-i:i-r;null===this._x1?this._append`M${c},${l}`:(Math.abs(this._x1-c)>Hs||Math.abs(this._y1-l)>Hs)&&this._append`L${c},${l}`,n&&(u<0&&(u=u%qs+qs),u>Vs?this._append`A${n},${n},0,1,${h},${t-s},${e-o}A${n},${n},0,1,${h},${this._x1=c},${this._y1=l}`:u>Hs&&this._append`A${n},${n},0,${+(u>=Ws)},${h},${this._x1=t+n*Math.cos(i)},${this._y1=e+n*Math.sin(i)}`)}rect(t,e,n,r){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}h${n=+n}v${+r}h${-n}Z`}toString(){return this._}}function Ks(t){let e=3;return t.digits=function(n){if(!arguments.length)return e;if(null==n)e=null;else{const t=Math.floor(n);if(!(t>=0))throw new RangeError(`invalid digits: ${n}`);e=t}return t},()=>new Xs(e)}function Qs(t){return t.innerRadius}function Js(t){return t.outerRadius}function to(t){return t.startAngle}function eo(t){return t.endAngle}function no(t){return t&&t.padAngle}function ro(t,e,n,r,i,a,s,o){var c=n-t,l=r-e,h=s-i,u=o-a,d=u*c-h*l;if(!(d*d<Zs))return[t+(d=(h*(e-a)-u*(t-i))/d)*c,e+d*l]}function io(t,e,n,r,i,a,s){var o=t-n,c=e-r,l=(s?a:-a)/Rs(o*o+c*c),h=l*c,u=-l*o,d=t+h,p=e+u,f=n+h,g=r+u,y=(d+f)/2,m=(p+g)/2,b=f-d,_=g-p,x=b*b+_*_,v=i-a,k=d*g-f*p,w=(_<0?-1:1)*Rs(Is(0,v*v*x-k*k)),E=(k*_-b*w)/x,C=(-k*b-_*w)/x,T=(k*_+b*w)/x,S=(-k*b+_*w)/x,A=E-y,L=C-m,B=T-y,N=S-m;return A*A+L*L>B*B+N*N&&(E=T,C=S),{cx:E,cy:C,x01:-h,y01:-u,x11:E*(i/v-1),y11:C*(i/v-1)}}function ao(){var t=Qs,e=Js,n=Ns(0),r=null,i=to,a=eo,s=no,o=null,c=Ks(l);function l(){var l,h,u=+t.apply(this,arguments),d=+e.apply(this,arguments),p=i.apply(this,arguments)-js,f=a.apply(this,arguments)-js,g=Ds(f-p),y=f>p;if(o||(o=l=c()),d<u&&(h=d,d=u,u=h),d>Zs)if(g>Ys-Zs)o.moveTo(d*Ms(p),d*$s(p)),o.arc(0,0,d,p,f,!y),u>Zs&&(o.moveTo(u*Ms(f),u*$s(f)),o.arc(0,0,u,f,p,y));else{var m,b,_=p,x=f,v=p,k=f,w=g,E=g,C=s.apply(this,arguments)/2,T=C>Zs&&(r?+r.apply(this,arguments):Rs(u*u+d*d)),S=Fs(Ds(d-u)/2,+n.apply(this,arguments)),A=S,L=S;if(T>Zs){var B=Us(T/u*$s(C)),N=Us(T/d*$s(C));(w-=2*B)>Zs?(v+=B*=y?1:-1,k-=B):(w=0,v=k=(p+f)/2),(E-=2*N)>Zs?(_+=N*=y?1:-1,x-=N):(E=0,_=x=(p+f)/2)}var D=d*Ms(_),O=d*$s(_),M=u*Ms(k),I=u*$s(k);if(S>Zs){var F,$=d*Ms(x),R=d*$s(x),Z=u*Ms(v),P=u*$s(v);if(g<Ps)if(F=ro(D,O,Z,P,$,R,M,I)){var j=D-F[0],Y=O-F[1],z=$-F[0],U=R-F[1],W=1/$s(zs((j*z+Y*U)/(Rs(j*j+Y*Y)*Rs(z*z+U*U)))/2),q=Rs(F[0]*F[0]+F[1]*F[1]);A=Fs(S,(u-q)/(W-1)),L=Fs(S,(d-q)/(W+1))}else A=L=0}E>Zs?L>Zs?(m=io(Z,P,D,O,d,L,y),b=io($,R,M,I,d,L,y),o.moveTo(m.cx+m.x01,m.cy+m.y01),L<S?o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,d,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),!y),o.arc(b.cx,b.cy,L,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):(o.moveTo(D,O),o.arc(0,0,d,_,x,!y)):o.moveTo(D,O),u>Zs&&w>Zs?A>Zs?(m=io(M,I,$,R,u,-A,y),b=io(D,O,Z,P,u,-A,y),o.lineTo(m.cx+m.x01,m.cy+m.y01),A<S?o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,u,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),y),o.arc(b.cx,b.cy,A,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):o.arc(0,0,u,k,v,y):o.lineTo(M,I)}else o.moveTo(0,0);if(o.closePath(),l)return o=null,l+""||null}return l.centroid=function(){var n=(+t.apply(this,arguments)+ +e.apply(this,arguments))/2,r=(+i.apply(this,arguments)+ +a.apply(this,arguments))/2-Ps/2;return[Ms(r)*n,$s(r)*n]},l.innerRadius=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),l):t},l.outerRadius=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),l):e},l.cornerRadius=function(t){return arguments.length?(n="function"==typeof t?t:Ns(+t),l):n},l.padRadius=function(t){return arguments.length?(r=null==t?null:"function"==typeof t?t:Ns(+t),l):r},l.startAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),l):i},l.endAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),l):a},l.padAngle=function(t){return arguments.length?(s="function"==typeof t?t:Ns(+t),l):s},l.context=function(t){return arguments.length?(o=null==t?null:t,l):o},l}Array.prototype.slice;function so(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function oo(t){this._context=t}function co(t){return new oo(t)}function lo(t){return t[0]}function ho(t){return t[1]}function uo(t,e){var n=Ns(!0),r=null,i=co,a=null,s=Ks(o);function o(o){var c,l,h,u=(o=so(o)).length,d=!1;for(null==r&&(a=i(h=s())),c=0;c<=u;++c)!(c<u&&n(l=o[c],c,o))===d&&((d=!d)?a.lineStart():a.lineEnd()),d&&a.point(+t(l,c,o),+e(l,c,o));if(h)return a=null,h+""||null}return t="function"==typeof t?t:void 0===t?lo:Ns(t),e="function"==typeof e?e:void 0===e?ho:Ns(e),o.x=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),o):t},o.y=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),o):e},o.defined=function(t){return arguments.length?(n="function"==typeof t?t:Ns(!!t),o):n},o.curve=function(t){return arguments.length?(i=t,null!=r&&(a=i(r)),o):i},o.context=function(t){return arguments.length?(null==t?r=a=null:a=i(r=t),o):r},o}function po(t,e){return e<t?-1:e>t?1:e>=t?0:NaN}function fo(t){return t}function go(){var t=fo,e=po,n=null,r=Ns(0),i=Ns(Ys),a=Ns(0);function s(s){var o,c,l,h,u,d=(s=so(s)).length,p=0,f=new Array(d),g=new Array(d),y=+r.apply(this,arguments),m=Math.min(Ys,Math.max(-Ys,i.apply(this,arguments)-y)),b=Math.min(Math.abs(m)/d,a.apply(this,arguments)),_=b*(m<0?-1:1);for(o=0;o<d;++o)(u=g[f[o]=o]=+t(s[o],o,s))>0&&(p+=u);for(null!=e?f.sort((function(t,n){return e(g[t],g[n])})):null!=n&&f.sort((function(t,e){return n(s[t],s[e])})),o=0,l=p?(m-d*_)/p:0;o<d;++o,y=h)c=f[o],h=y+((u=g[c])>0?u*l:0)+_,g[c]={data:s[c],index:o,value:u,startAngle:y,endAngle:h,padAngle:b};return g}return s.value=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),s):t},s.sortValues=function(t){return arguments.length?(e=t,n=null,s):e},s.sort=function(t){return arguments.length?(n=t,e=null,s):n},s.startAngle=function(t){return arguments.length?(r="function"==typeof t?t:Ns(+t),s):r},s.endAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),s):i},s.padAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),s):a},s}function yo(){}function mo(t,e,n){t._context.bezierCurveTo((2*t._x0+t._x1)/3,(2*t._y0+t._y1)/3,(t._x0+2*t._x1)/3,(t._y0+2*t._y1)/3,(t._x0+4*t._x1+e)/6,(t._y0+4*t._y1+n)/6)}function bo(t){this._context=t}function _o(t){return new bo(t)}function xo(t){this._context=t}function vo(t){return new xo(t)}function ko(t){this._context=t}function wo(t){return new ko(t)}oo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._point=0},lineEnd:function(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._context.lineTo(t,e)}}},bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){switch(this._point){case 3:mo(this,this._x1,this._y1);case 2:this._context.lineTo(this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,this._context.lineTo((5*this._x0+this._x1)/6,(5*this._y0+this._y1)/6);default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},xo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._y0=this._y1=this._y2=this._y3=this._y4=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x2,this._y2),this._context.closePath();break;case 2:this._context.moveTo((this._x2+2*this._x3)/3,(this._y2+2*this._y3)/3),this._context.lineTo((this._x3+2*this._x2)/3,(this._y3+2*this._y2)/3),this._context.closePath();break;case 3:this.point(this._x2,this._y2),this.point(this._x3,this._y3),this.point(this._x4,this._y4)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x2=t,this._y2=e;break;case 1:this._point=2,this._x3=t,this._y3=e;break;case 2:this._point=3,this._x4=t,this._y4=e,this._context.moveTo((this._x0+4*this._x1+t)/6,(this._y0+4*this._y1+e)/6);break;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},ko.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3;var n=(this._x0+4*this._x1+t)/6,r=(this._y0+4*this._y1+e)/6;this._line?this._context.lineTo(n,r):this._context.moveTo(n,r);break;case 3:this._point=4;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}};class Eo{constructor(t,e){this._context=t,this._x=e}areaStart(){this._line=0}areaEnd(){this._line=NaN}lineStart(){this._point=0}lineEnd(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line}point(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._x?this._context.bezierCurveTo(this._x0=(this._x0+t)/2,this._y0,this._x0,e,t,e):this._context.bezierCurveTo(this._x0,this._y0=(this._y0+e)/2,t,this._y0,t,e)}this._x0=t,this._y0=e}}function Co(t){return new Eo(t,!0)}function To(t){return new Eo(t,!1)}function So(t,e){this._basis=new bo(t),this._beta=e}So.prototype={lineStart:function(){this._x=[],this._y=[],this._basis.lineStart()},lineEnd:function(){var t=this._x,e=this._y,n=t.length-1;if(n>0)for(var r,i=t[0],a=e[0],s=t[n]-i,o=e[n]-a,c=-1;++c<=n;)r=c/n,this._basis.point(this._beta*t[c]+(1-this._beta)*(i+r*s),this._beta*e[c]+(1-this._beta)*(a+r*o));this._x=this._y=null,this._basis.lineEnd()},point:function(t,e){this._x.push(+t),this._y.push(+e)}};const Ao=function t(e){function n(t){return 1===e?new bo(t):new So(t,e)}return n.beta=function(e){return t(+e)},n}(.85);function Lo(t,e,n){t._context.bezierCurveTo(t._x1+t._k*(t._x2-t._x0),t._y1+t._k*(t._y2-t._y0),t._x2+t._k*(t._x1-e),t._y2+t._k*(t._y1-n),t._x2,t._y2)}function Bo(t,e){this._context=t,this._k=(1-e)/6}Bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:Lo(this,this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2,this._x1=t,this._y1=e;break;case 2:this._point=3;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const No=function t(e){function n(t){return new Bo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Do(t,e){this._context=t,this._k=(1-e)/6}Do.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Oo=function t(e){function n(t){return new Do(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Mo(t,e){this._context=t,this._k=(1-e)/6}Mo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Io=function t(e){function n(t){return new Mo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Fo(t,e,n){var r=t._x1,i=t._y1,a=t._x2,s=t._y2;if(t._l01_a>Zs){var o=2*t._l01_2a+3*t._l01_a*t._l12_a+t._l12_2a,c=3*t._l01_a*(t._l01_a+t._l12_a);r=(r*o-t._x0*t._l12_2a+t._x2*t._l01_2a)/c,i=(i*o-t._y0*t._l12_2a+t._y2*t._l01_2a)/c}if(t._l23_a>Zs){var l=2*t._l23_2a+3*t._l23_a*t._l12_a+t._l12_2a,h=3*t._l23_a*(t._l23_a+t._l12_a);a=(a*l+t._x1*t._l23_2a-e*t._l12_2a)/h,s=(s*l+t._y1*t._l23_2a-n*t._l12_2a)/h}t._context.bezierCurveTo(r,i,a,s,t._x2,t._y2)}function $o(t,e){this._context=t,this._alpha=e}$o.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:this.point(this._x2,this._y2)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Ro=function t(e){function n(t){return e?new $o(t,e):new Bo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function Zo(t,e){this._context=t,this._alpha=e}Zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Po=function t(e){function n(t){return e?new Zo(t,e):new Do(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function jo(t,e){this._context=t,this._alpha=e}jo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Yo=function t(e){function n(t){return e?new jo(t,e):new Mo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function zo(t){this._context=t}function Uo(t){return new zo(t)}function Wo(t){return t<0?-1:1}function qo(t,e,n){var r=t._x1-t._x0,i=e-t._x1,a=(t._y1-t._y0)/(r||i<0&&-0),s=(n-t._y1)/(i||r<0&&-0),o=(a*i+s*r)/(r+i);return(Wo(a)+Wo(s))*Math.min(Math.abs(a),Math.abs(s),.5*Math.abs(o))||0}function Ho(t,e){var n=t._x1-t._x0;return n?(3*(t._y1-t._y0)/n-e)/2:e}function Vo(t,e,n){var r=t._x0,i=t._y0,a=t._x1,s=t._y1,o=(a-r)/3;t._context.bezierCurveTo(r+o,i+o*e,a-o,s-o*n,a,s)}function Go(t){this._context=t}function Xo(t){this._context=new Ko(t)}function Ko(t){this._context=t}function Qo(t){return new Go(t)}function Jo(t){return new Xo(t)}function tc(t){this._context=t}function ec(t){var e,n,r=t.length-1,i=new Array(r),a=new Array(r),s=new Array(r);for(i[0]=0,a[0]=2,s[0]=t[0]+2*t[1],e=1;e<r-1;++e)i[e]=1,a[e]=4,s[e]=4*t[e]+2*t[e+1];for(i[r-1]=2,a[r-1]=7,s[r-1]=8*t[r-1]+t[r],e=1;e<r;++e)n=i[e]/a[e-1],a[e]-=n,s[e]-=n*s[e-1];for(i[r-1]=s[r-1]/a[r-1],e=r-2;e>=0;--e)i[e]=(s[e]-i[e+1])/a[e];for(a[r-1]=(t[r]+i[r-1])/2,e=0;e<r-1;++e)a[e]=2*t[e+1]-i[e+1];return[i,a]}function nc(t){return new tc(t)}function rc(t,e){this._context=t,this._t=e}function ic(t){return new rc(t,.5)}function ac(t){return new rc(t,0)}function sc(t){return new rc(t,1)}function oc(t,e,n){this.k=t,this.x=e,this.y=n}zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._point=0},lineEnd:function(){this._point&&this._context.closePath()},point:function(t,e){t=+t,e=+e,this._point?this._context.lineTo(t,e):(this._point=1,this._context.moveTo(t,e))}},Go.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=this._t0=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x1,this._y1);break;case 3:Vo(this,this._t0,Ho(this,this._t0))}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){var n=NaN;if(e=+e,(t=+t)!==this._x1||e!==this._y1){switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,Vo(this,Ho(this,n=qo(this,t,e)),n);break;default:Vo(this,this._t0,n=qo(this,t,e))}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e,this._t0=n}}},(Xo.prototype=Object.create(Go.prototype)).point=function(t,e){Go.prototype.point.call(this,e,t)},Ko.prototype={moveTo:function(t,e){this._context.moveTo(e,t)},closePath:function(){this._context.closePath()},lineTo:function(t,e){this._context.lineTo(e,t)},bezierCurveTo:function(t,e,n,r,i,a){this._context.bezierCurveTo(e,t,r,n,a,i)}},tc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=[],this._y=[]},lineEnd:function(){var t=this._x,e=this._y,n=t.length;if(n)if(this._line?this._context.lineTo(t[0],e[0]):this._context.moveTo(t[0],e[0]),2===n)this._context.lineTo(t[1],e[1]);else for(var r=ec(t),i=ec(e),a=0,s=1;s<n;++a,++s)this._context.bezierCurveTo(r[0][a],i[0][a],r[1][a],i[1][a],t[s],e[s]);(this._line||0!==this._line&&1===n)&&this._context.closePath(),this._line=1-this._line,this._x=this._y=null},point:function(t,e){this._x.push(+t),this._y.push(+e)}},rc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=this._y=NaN,this._point=0},lineEnd:function(){0<this._t&&this._t<1&&2===this._point&&this._context.lineTo(this._x,this._y),(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line>=0&&(this._t=1-this._t,this._line=1-this._line)},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:if(this._t<=0)this._context.lineTo(this._x,e),this._context.lineTo(t,e);else{var n=this._x*(1-this._t)+t*this._t;this._context.lineTo(n,this._y),this._context.lineTo(n,e)}}this._x=t,this._y=e}},oc.prototype={constructor:oc,scale:function(t){return 1===t?this:new oc(this.k*t,this.x,this.y)},translate:function(t,e){return 0===t&0===e?this:new oc(this.k,this.x+this.k*t,this.y+this.k*e)},apply:function(t){return[t[0]*this.k+this.x,t[1]*this.k+this.y]},applyX:function(t){return t*this.k+this.x},applyY:function(t){return t*this.k+this.y},invert:function(t){return[(t[0]-this.x)/this.k,(t[1]-this.y)/this.k]},invertX:function(t){return(t-this.x)/this.k},invertY:function(t){return(t-this.y)/this.k},rescaleX:function(t){return t.copy().domain(t.range().map(this.invertX,this).map(t.invert,t))},rescaleY:function(t){return t.copy().domain(t.range().map(this.invertY,this).map(t.invert,t))},toString:function(){return"translate("+this.x+","+this.y+") scale("+this.k+")"}};new oc(1,0,0);oc.prototype},3352:(t,e,n)=>{"use strict";function r(t,e,n,r){var a,s,o,c,l,h,u,d,p,f,g,y,m;if(a=e.y-t.y,o=t.x-e.x,l=e.x*t.y-t.x*e.y,p=a*n.x+o*n.y+l,f=a*r.x+o*r.y+l,!(0!==p&&0!==f&&i(p,f)||(s=r.y-n.y,c=n.x-r.x,h=r.x*n.y-n.x*r.y,u=s*t.x+c*t.y+h,d=s*e.x+c*e.y+h,0!==u&&0!==d&&i(u,d)||0==(g=a*c-s*o))))return y=Math.abs(g/2),{x:(m=o*h-c*l)<0?(m-y)/g:(m+y)/g,y:(m=s*l-a*h)<0?(m-y)/g:(m+y)/g}}function i(t,e){return t*e>0}function a(t,e,n){var i=t.x,a=t.y,s=[],o=Number.POSITIVE_INFINITY,c=Number.POSITIVE_INFINITY;e.forEach((function(t){o=Math.min(o,t.x),c=Math.min(c,t.y)}));for(var l=i-t.width/2-o,h=a-t.height/2-c,u=0;u<e.length;u++){var d=e[u],p=e[u<e.length-1?u+1:0],f=r(t,n,{x:l+d.x,y:h+d.y},{x:l+p.x,y:h+p.y});f&&s.push(f)}return s.length?(s.length>1&&s.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),s[0]):(console.log("NO INTERSECTION FOUND, RETURN NODE CENTER",t),t)}n.d(e,{A:()=>a})},2930:(t,e,n)=>{"use strict";function r(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}}n.d(e,{q:()=>r})},3349:(t,e,n)=>{"use strict";n.d(e,{a:()=>i});var r=n(6225);function i(t,e){var n=t.append("foreignObject").attr("width","100000"),i=n.append("xhtml:div");i.attr("xmlns","http://www.w3.org/1999/xhtml");var a=e.label;switch(typeof a){case"function":i.insert(a);break;case"object":i.insert((function(){return a}));break;default:i.html(a)}r.bg(i,e.labelStyle),i.style("display","inline-block"),i.style("white-space","nowrap");var s=i.node().getBoundingClientRect();return n.attr("width",s.width).attr("height",s.height),n}},6225:(t,e,n)=>{"use strict";n.d(e,{$p:()=>h,O1:()=>s,WR:()=>u,bF:()=>a,bg:()=>l});var r=n(7514),i=n(3234);function a(t,e){return!!t.children(e).length}function s(t){return c(t.v)+":"+c(t.w)+":"+c(t.name)}var o=/:/g;function c(t){return t?String(t).replace(o,"\\:"):""}function l(t,e){e&&t.attr("style",e)}function h(t,e,n){e&&t.attr("class",e).attr("class",n+" "+t.attr("class"))}function u(t,e){var n=e.graph();if(r.Z(n)){var a=n.transition;if(i.Z(a))return a(t)}return t}},277:(t,e,n)=>{"use strict";n.d(e,{bK:()=>Ve});var r=n(870),i=n(6749),a=n(7452),s=n(2002),o=n(7961),c=n(3836),l=n(4379),h=n(5625);class u{constructor(){var t={};t._next=t._prev=t,this._sentinel=t}dequeue(){var t=this._sentinel,e=t._prev;if(e!==t)return d(e),e}enqueue(t){var e=this._sentinel;t._prev&&t._next&&d(t),t._next=e._next,e._next._prev=t,e._next=t,t._prev=e}toString(){for(var t=[],e=this._sentinel,n=e._prev;n!==e;)t.push(JSON.stringify(n,p)),n=n._prev;return"["+t.join(", ")+"]"}}function d(t){t._prev._next=t._next,t._next._prev=t._prev,delete t._next,delete t._prev}function p(t,e){if("_next"!==t&&"_prev"!==t)return e}var f=s.Z(1);function g(t,e){if(t.nodeCount()<=1)return[];var n=function(t,e){var n=new h.k,i=0,a=0;r.Z(t.nodes(),(function(t){n.setNode(t,{v:t,in:0,out:0})})),r.Z(t.edges(),(function(t){var r=n.edge(t.v,t.w)||0,s=e(t),o=r+s;n.setEdge(t.v,t.w,o),a=Math.max(a,n.node(t.v).out+=s),i=Math.max(i,n.node(t.w).in+=s)}));var s=l.Z(a+i+3).map((function(){return new u})),o=i+1;return r.Z(n.nodes(),(function(t){m(s,o,n.node(t))})),{graph:n,buckets:s,zeroIdx:o}}(t,e||f),i=function(t,e,n){var r,i=[],a=e[e.length-1],s=e[0];for(;t.nodeCount();){for(;r=s.dequeue();)y(t,e,n,r);for(;r=a.dequeue();)y(t,e,n,r);if(t.nodeCount())for(var o=e.length-2;o>0;--o)if(r=e[o].dequeue()){i=i.concat(y(t,e,n,r,!0));break}}return i}(n.graph,n.buckets,n.zeroIdx);return o.Z(c.Z(i,(function(e){return t.outEdges(e.v,e.w)})))}function y(t,e,n,i,a){var s=a?[]:void 0;return r.Z(t.inEdges(i.v),(function(r){var i=t.edge(r),o=t.node(r.v);a&&s.push({v:r.v,w:r.w}),o.out-=i,m(e,n,o)})),r.Z(t.outEdges(i.v),(function(r){var i=t.edge(r),a=r.w,s=t.node(a);s.in-=i,m(e,n,s)})),t.removeNode(i.v),s}function m(t,e,n){n.out?n.in?t[n.out-n.in+e].enqueue(n):t[t.length-1].enqueue(n):t[0].enqueue(n)}function b(t){var e="greedy"===t.graph().acyclicer?g(t,function(t){return function(e){return t.edge(e).weight}}(t)):function(t){var e=[],n={},i={};function s(o){a.Z(i,o)||(i[o]=!0,n[o]=!0,r.Z(t.outEdges(o),(function(t){a.Z(n,t.w)?e.push(t):s(t.w)})),delete n[o])}return r.Z(t.nodes(),s),e}(t);r.Z(e,(function(e){var n=t.edge(e);t.removeEdge(e),n.forwardName=e.name,n.reversed=!0,t.setEdge(e.w,e.v,n,i.Z("rev"))}))}var _=n(1667),x=n(4752),v=n(9651);const k=function(t,e,n){(void 0!==n&&!(0,v.Z)(t[e],n)||void 0===n&&!(e in t))&&(0,x.Z)(t,e,n)};var w=n(1395),E=n(1050),C=n(2701),T=n(7215),S=n(3658),A=n(9169),L=n(7771),B=n(836),N=n(7008),D=n(3234),O=n(7226),M=n(7514),I=n(8843);const F=function(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]};var $=n(1899),R=n(2957);const Z=function(t){return(0,$.Z)(t,(0,R.Z)(t))};const P=function(t,e,n,r,i,a,s){var o=F(t,n),c=F(e,n),l=s.get(c);if(l)k(t,n,l);else{var h=a?a(o,c,n+"",t,e,s):void 0,u=void 0===h;if(u){var d=(0,L.Z)(c),p=!d&&(0,N.Z)(c),f=!d&&!p&&(0,I.Z)(c);h=c,d||p||f?(0,L.Z)(o)?h=o:(0,B.Z)(o)?h=(0,T.Z)(o):p?(u=!1,h=(0,E.Z)(c,!0)):f?(u=!1,h=(0,C.Z)(c,!0)):h=[]:(0,M.Z)(c)||(0,A.Z)(c)?(h=o,(0,A.Z)(o)?h=Z(o):(0,O.Z)(o)&&!(0,D.Z)(o)||(h=(0,S.Z)(c))):u=!1}u&&(s.set(c,h),i(h,c,r,a,s),s.delete(c)),k(t,n,h)}};const j=function t(e,n,r,i,a){e!==n&&(0,w.Z)(n,(function(s,o){if(a||(a=new _.Z),(0,O.Z)(s))P(e,n,o,r,t,i,a);else{var c=i?i(F(e,o),s,o+"",e,n,a):void 0;void 0===c&&(c=s),k(e,o,c)}}),R.Z)};var Y=n(9581),z=n(439);const U=function(t){return(0,Y.Z)((function(e,n){var r=-1,i=n.length,a=i>1?n[i-1]:void 0,s=i>2?n[2]:void 0;for(a=t.length>3&&"function"==typeof a?(i--,a):void 0,s&&(0,z.Z)(n[0],n[1],s)&&(a=i<3?void 0:a,i=1),e=Object(e);++r<i;){var o=n[r];o&&t(e,o,r,a)}return e}))}((function(t,e,n){j(t,e,n)}));var W=n(1666),q=n(3688),H=n(2714);const V=function(t,e,n){for(var r=-1,i=t.length;++r<i;){var a=t[r],s=e(a);if(null!=s&&(void 0===o?s==s&&!(0,H.Z)(s):n(s,o)))var o=s,c=a}return c};const G=function(t,e){return t>e};var X=n(9203);const K=function(t){return t&&t.length?V(t,X.Z,G):void 0};const Q=function(t){var e=null==t?0:t.length;return e?t[e-1]:void 0};var J=n(2693),tt=n(4765);const et=function(t,e){var n={};return e=(0,tt.Z)(e,3),(0,J.Z)(t,(function(t,r,i){(0,x.Z)(n,r,e(t,r,i))})),n};var nt=n(9360);const rt=function(t,e){return t<e};const it=function(t){return t&&t.length?V(t,X.Z,rt):void 0};var at=n(6092);const st=function(){return at.Z.Date.now()};function ot(t,e,n,r){var a;do{a=i.Z(r)}while(t.hasNode(a));return n.dummy=e,t.setNode(a,n),a}function ct(t){var e=new h.k({multigraph:t.isMultigraph()}).setGraph(t.graph());return r.Z(t.nodes(),(function(n){t.children(n).length||e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){e.setEdge(n,t.edge(n))})),e}function lt(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;if(!s&&!o)throw new Error("Not possible to find intersection inside of the rectangle");return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=l*s/o,r=l):(s<0&&(c=-c),n=c,r=c*o/s),{x:i+n,y:a+r}}function ht(t){var e=c.Z(l.Z(dt(t)+1),(function(){return[]}));return r.Z(t.nodes(),(function(n){var r=t.node(n),i=r.rank;nt.Z(i)||(e[i][r.order]=n)})),e}function ut(t,e,n,r){var i={width:0,height:0};return arguments.length>=4&&(i.rank=n,i.order=r),ot(t,"border",i,e)}function dt(t){return K(c.Z(t.nodes(),(function(e){var n=t.node(e).rank;if(!nt.Z(n))return n})))}function pt(t,e){var n=st();try{return e()}finally{console.log(t+" time: "+(st()-n)+"ms")}}function ft(t,e){return e()}function gt(t,e,n,r,i,a){var s={width:0,height:0,rank:a,borderType:e},o=i[e][a-1],c=ot(t,"border",s,n);i[e][a]=c,t.setParent(c,r),o&&t.setEdge(o,c,{weight:1})}function yt(t){var e=t.graph().rankdir.toLowerCase();"bt"!==e&&"rl"!==e||function(t){r.Z(t.nodes(),(function(e){_t(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,_t),a.Z(n,"y")&&_t(n)}))}(t),"lr"!==e&&"rl"!==e||(!function(t){r.Z(t.nodes(),(function(e){xt(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,xt),a.Z(n,"x")&&xt(n)}))}(t),mt(t))}function mt(t){r.Z(t.nodes(),(function(e){bt(t.node(e))})),r.Z(t.edges(),(function(e){bt(t.edge(e))}))}function bt(t){var e=t.width;t.width=t.height,t.height=e}function _t(t){t.y=-t.y}function xt(t){var e=t.x;t.x=t.y,t.y=e}function vt(t){t.graph().dummyChains=[],r.Z(t.edges(),(function(e){!function(t,e){var n,r,i,a=e.v,s=t.node(a).rank,o=e.w,c=t.node(o).rank,l=e.name,h=t.edge(e),u=h.labelRank;if(c===s+1)return;for(t.removeEdge(e),i=0,++s;s<c;++i,++s)h.points=[],n=ot(t,"edge",r={width:0,height:0,edgeLabel:h,edgeObj:e,rank:s},"_d"),s===u&&(r.width=h.width,r.height=h.height,r.dummy="edge-label",r.labelpos=h.labelpos),t.setEdge(a,n,{weight:h.weight},l),0===i&&t.graph().dummyChains.push(n),a=n;t.setEdge(a,o,{weight:h.weight},l)}(t,e)}))}const kt=function(t,e){return t&&t.length?V(t,(0,tt.Z)(e,2),rt):void 0};function wt(t){var e={};r.Z(t.sources(),(function n(r){var i=t.node(r);if(a.Z(e,r))return i.rank;e[r]=!0;var s=it(c.Z(t.outEdges(r),(function(e){return n(e.w)-t.edge(e).minlen})));return s!==Number.POSITIVE_INFINITY&&null!=s||(s=0),i.rank=s}))}function Et(t,e){return t.node(e.w).rank-t.node(e.v).rank-t.edge(e).minlen}function Ct(t){var e,n,r=new h.k({directed:!1}),i=t.nodes()[0],a=t.nodeCount();for(r.setNode(i,{});Tt(r,t)<a;)e=St(r,t),n=r.hasNode(e.v)?Et(t,e):-Et(t,e),At(r,t,n);return r}function Tt(t,e){return r.Z(t.nodes(),(function n(i){r.Z(e.nodeEdges(i),(function(r){var a=r.v,s=i===a?r.w:a;t.hasNode(s)||Et(e,r)||(t.setNode(s,{}),t.setEdge(i,s,{}),n(s))}))})),t.nodeCount()}function St(t,e){return kt(e.edges(),(function(n){if(t.hasNode(n.v)!==t.hasNode(n.w))return Et(e,n)}))}function At(t,e,n){r.Z(t.nodes(),(function(t){e.node(t).rank+=n}))}var Lt=n(585),Bt=n(7179);const Nt=function(t){return function(e,n,r){var i=Object(e);if(!(0,Lt.Z)(e)){var a=(0,tt.Z)(n,3);e=(0,Bt.Z)(e),n=function(t){return a(i[t],t,i)}}var s=t(e,n,r);return s>-1?i[a?e[s]:s]:void 0}};var Dt=n(1692),Ot=n(4099);const Mt=function(t){var e=(0,Ot.Z)(t),n=e%1;return e==e?n?e-n:e:0};var It=Math.max;const Ft=Nt((function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var i=null==n?0:Mt(n);return i<0&&(i=It(r+i,0)),(0,Dt.Z)(t,(0,tt.Z)(e,3),i)}));var $t=n(3445);s.Z(1);s.Z(1);n(9473),n(3970),n(3589),n(8533);(0,n(4193).Z)("length");RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");var Rt="[\\ud800-\\udfff]",Zt="[\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff]",Pt="\\ud83c[\\udffb-\\udfff]",jt="[^\\ud800-\\udfff]",Yt="(?:\\ud83c[\\udde6-\\uddff]){2}",zt="[\\ud800-\\udbff][\\udc00-\\udfff]",Ut="(?:"+Zt+"|"+Pt+")"+"?",Wt="[\\ufe0e\\ufe0f]?",qt=Wt+Ut+("(?:\\u200d(?:"+[jt,Yt,zt].join("|")+")"+Wt+Ut+")*"),Ht="(?:"+[jt+Zt+"?",Zt,Yt,zt,Rt].join("|")+")";RegExp(Pt+"(?="+Pt+")|"+Ht+qt,"g");function Vt(){}function Gt(t,e,n){L.Z(e)||(e=[e]);var i=(t.isDirected()?t.successors:t.neighbors).bind(t),a=[],s={};return r.Z(e,(function(e){if(!t.hasNode(e))throw new Error("Graph does not have node: "+e);Xt(t,e,"post"===n,s,i,a)})),a}function Xt(t,e,n,i,s,o){a.Z(i,e)||(i[e]=!0,n||o.push(e),r.Z(s(e),(function(e){Xt(t,e,n,i,s,o)})),n&&o.push(e))}Vt.prototype=new Error;n(2544);function Kt(t){t=function(t){var e=(new h.k).setGraph(t.graph());return r.Z(t.nodes(),(function(n){e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){var r=e.edge(n.v,n.w)||{weight:0,minlen:1},i=t.edge(n);e.setEdge(n.v,n.w,{weight:r.weight+i.weight,minlen:Math.max(r.minlen,i.minlen)})})),e}(t),wt(t);var e,n=Ct(t);for(te(n),Qt(n,t);e=ne(n);)ie(n,t,e,re(n,t,e))}function Qt(t,e){var n=function(t,e){return Gt(t,e,"post")}(t,t.nodes());n=n.slice(0,n.length-1),r.Z(n,(function(n){!function(t,e,n){var r=t.node(n).parent;t.edge(n,r).cutvalue=Jt(t,e,n)}(t,e,n)}))}function Jt(t,e,n){var i=t.node(n).parent,a=!0,s=e.edge(n,i),o=0;return s||(a=!1,s=e.edge(i,n)),o=s.weight,r.Z(e.nodeEdges(n),(function(r){var s,c,l=r.v===n,h=l?r.w:r.v;if(h!==i){var u=l===a,d=e.edge(r).weight;if(o+=u?d:-d,s=n,c=h,t.hasEdge(s,c)){var p=t.edge(n,h).cutvalue;o+=u?-p:p}}})),o}function te(t,e){arguments.length<2&&(e=t.nodes()[0]),ee(t,{},1,e)}function ee(t,e,n,i,s){var o=n,c=t.node(i);return e[i]=!0,r.Z(t.neighbors(i),(function(r){a.Z(e,r)||(n=ee(t,e,n,r,i))})),c.low=o,c.lim=n++,s?c.parent=s:delete c.parent,n}function ne(t){return Ft(t.edges(),(function(e){return t.edge(e).cutvalue<0}))}function re(t,e,n){var r=n.v,i=n.w;e.hasEdge(r,i)||(r=n.w,i=n.v);var a=t.node(r),s=t.node(i),o=a,c=!1;a.lim>s.lim&&(o=s,c=!0);var l=$t.Z(e.edges(),(function(e){return c===ae(t,t.node(e.v),o)&&c!==ae(t,t.node(e.w),o)}));return kt(l,(function(t){return Et(e,t)}))}function ie(t,e,n,i){var a=n.v,s=n.w;t.removeEdge(a,s),t.setEdge(i.v,i.w,{}),te(t),Qt(t,e),function(t,e){var n=Ft(t.nodes(),(function(t){return!e.node(t).parent})),i=function(t,e){return Gt(t,e,"pre")}(t,n);i=i.slice(1),r.Z(i,(function(n){var r=t.node(n).parent,i=e.edge(n,r),a=!1;i||(i=e.edge(r,n),a=!0),e.node(n).rank=e.node(r).rank+(a?i.minlen:-i.minlen)}))}(t,e)}function ae(t,e,n){return n.low<=e.lim&&e.lim<=n.lim}function se(t){switch(t.graph().ranker){case"network-simplex":default:ce(t);break;case"tight-tree":!function(t){wt(t),Ct(t)}(t);break;case"longest-path":oe(t)}}Kt.initLowLimValues=te,Kt.initCutValues=Qt,Kt.calcCutValue=Jt,Kt.leaveEdge=ne,Kt.enterEdge=re,Kt.exchangeEdges=ie;var oe=wt;function ce(t){Kt(t)}var le=n(4148),he=n(2344);function ue(t){var e=ot(t,"root",{},"_root"),n=function(t){var e={};function n(i,a){var s=t.children(i);s&&s.length&&r.Z(s,(function(t){n(t,a+1)})),e[i]=a}return r.Z(t.children(),(function(t){n(t,1)})),e}(t),i=K(le.Z(n))-1,a=2*i+1;t.graph().nestingRoot=e,r.Z(t.edges(),(function(e){t.edge(e).minlen*=a}));var s=function(t){return he.Z(t.edges(),(function(e,n){return e+t.edge(n).weight}),0)}(t)+1;r.Z(t.children(),(function(r){de(t,e,a,s,i,n,r)})),t.graph().nodeRankFactor=a}function de(t,e,n,i,a,s,o){var c=t.children(o);if(c.length){var l=ut(t,"_bt"),h=ut(t,"_bb"),u=t.node(o);t.setParent(l,o),u.borderTop=l,t.setParent(h,o),u.borderBottom=h,r.Z(c,(function(r){de(t,e,n,i,a,s,r);var c=t.node(r),u=c.borderTop?c.borderTop:r,d=c.borderBottom?c.borderBottom:r,p=c.borderTop?i:2*i,f=u!==d?1:a-s[o]+1;t.setEdge(l,u,{weight:p,minlen:f,nestingEdge:!0}),t.setEdge(d,h,{weight:p,minlen:f,nestingEdge:!0})})),t.parent(o)||t.setEdge(e,l,{weight:0,minlen:a+s[o]})}else o!==e&&t.setEdge(e,o,{weight:0,minlen:n})}var pe=n(8451);const fe=function(t){return(0,pe.Z)(t,5)};function ge(t,e,n){var s=function(t){var e;for(;t.hasNode(e=i.Z("_root")););return e}(t),o=new h.k({compound:!0}).setGraph({root:s}).setDefaultNodeLabel((function(e){return t.node(e)}));return r.Z(t.nodes(),(function(i){var c=t.node(i),l=t.parent(i);(c.rank===e||c.minRank<=e&&e<=c.maxRank)&&(o.setNode(i),o.setParent(i,l||s),r.Z(t[n](i),(function(e){var n=e.v===i?e.w:e.v,r=o.edge(n,i),a=nt.Z(r)?0:r.weight;o.setEdge(n,i,{weight:t.edge(e).weight+a})})),a.Z(c,"minRank")&&o.setNode(i,{borderLeft:c.borderLeft[e],borderRight:c.borderRight[e]}))})),o}var ye=n(2954);const me=function(t,e,n){for(var r=-1,i=t.length,a=e.length,s={};++r<i;){var o=r<a?e[r]:void 0;n(s,t[r],o)}return s};const be=function(t,e){return me(t||[],e||[],ye.Z)};var _e=n(626),xe=n(4073),ve=n(3317),ke=n(1018);const we=function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t};var Ee=n(1162);const Ce=function(t,e){if(t!==e){var n=void 0!==t,r=null===t,i=t==t,a=(0,H.Z)(t),s=void 0!==e,o=null===e,c=e==e,l=(0,H.Z)(e);if(!o&&!l&&!a&&t>e||a&&s&&c&&!o&&!l||r&&s&&c||!n&&c||!i)return 1;if(!r&&!a&&!l&&t<e||l&&n&&i&&!r&&!a||o&&n&&i||!s&&i||!c)return-1}return 0};const Te=function(t,e,n){for(var r=-1,i=t.criteria,a=e.criteria,s=i.length,o=n.length;++r<s;){var c=Ce(i[r],a[r]);if(c)return r>=o?c:c*("desc"==n[r]?-1:1)}return t.index-e.index};const Se=function(t,e,n){e=e.length?(0,xe.Z)(e,(function(t){return(0,L.Z)(t)?function(e){return(0,ve.Z)(e,1===t.length?t[0]:t)}:t})):[X.Z];var r=-1;e=(0,xe.Z)(e,(0,Ee.Z)(tt.Z));var i=(0,ke.Z)(t,(function(t,n,i){return{criteria:(0,xe.Z)(e,(function(e){return e(t)})),index:++r,value:t}}));return we(i,(function(t,e){return Te(t,e,n)}))};const Ae=(0,Y.Z)((function(t,e){if(null==t)return[];var n=e.length;return n>1&&(0,z.Z)(t,e[0],e[1])?e=[]:n>2&&(0,z.Z)(e[0],e[1],e[2])&&(e=[e[0]]),Se(t,(0,_e.Z)(e,1),[])}));function Le(t,e){for(var n=0,r=1;r<e.length;++r)n+=Be(t,e[r-1],e[r]);return n}function Be(t,e,n){for(var i=be(n,c.Z(n,(function(t,e){return e}))),a=o.Z(c.Z(e,(function(e){return Ae(c.Z(t.outEdges(e),(function(e){return{pos:i[e.w],weight:t.edge(e).weight}})),"pos")}))),s=1;s<n.length;)s<<=1;var l=2*s-1;s-=1;var h=c.Z(new Array(l),(function(){return 0})),u=0;return r.Z(a.forEach((function(t){var e=t.pos+s;h[e]+=t.weight;for(var n=0;e>0;)e%2&&(n+=h[e+1]),h[e=e-1>>1]+=t.weight;u+=t.weight*n}))),u}function Ne(t,e){var n={};return r.Z(t,(function(t,e){var r=n[t.v]={indegree:0,in:[],out:[],vs:[t.v],i:e};nt.Z(t.barycenter)||(r.barycenter=t.barycenter,r.weight=t.weight)})),r.Z(e.edges(),(function(t){var e=n[t.v],r=n[t.w];nt.Z(e)||nt.Z(r)||(r.indegree++,e.out.push(n[t.w]))})),function(t){var e=[];function n(t){return function(e){e.merged||(nt.Z(e.barycenter)||nt.Z(t.barycenter)||e.barycenter>=t.barycenter)&&function(t,e){var n=0,r=0;t.weight&&(n+=t.barycenter*t.weight,r+=t.weight);e.weight&&(n+=e.barycenter*e.weight,r+=e.weight);t.vs=e.vs.concat(t.vs),t.barycenter=n/r,t.weight=r,t.i=Math.min(e.i,t.i),e.merged=!0}(t,e)}}function i(e){return function(n){n.in.push(e),0==--n.indegree&&t.push(n)}}for(;t.length;){var a=t.pop();e.push(a),r.Z(a.in.reverse(),n(a)),r.Z(a.out,i(a))}return c.Z($t.Z(e,(function(t){return!t.merged})),(function(t){return W.Z(t,["vs","i","barycenter","weight"])}))}($t.Z(n,(function(t){return!t.indegree})))}function De(t,e){var n,i=function(t,e){var n={lhs:[],rhs:[]};return r.Z(t,(function(t){e(t)?n.lhs.push(t):n.rhs.push(t)})),n}(t,(function(t){return a.Z(t,"barycenter")})),s=i.lhs,c=Ae(i.rhs,(function(t){return-t.i})),l=[],h=0,u=0,d=0;s.sort((n=!!e,function(t,e){return t.barycenter<e.barycenter?-1:t.barycenter>e.barycenter?1:n?e.i-t.i:t.i-e.i})),d=Oe(l,c,d),r.Z(s,(function(t){d+=t.vs.length,l.push(t.vs),h+=t.barycenter*t.weight,u+=t.weight,d=Oe(l,c,d)}));var p={vs:o.Z(l)};return u&&(p.barycenter=h/u,p.weight=u),p}function Oe(t,e,n){for(var r;e.length&&(r=Q(e)).i<=n;)e.pop(),t.push(r.vs),n++;return n}function Me(t,e,n,i){var s=t.children(e),l=t.node(e),h=l?l.borderLeft:void 0,u=l?l.borderRight:void 0,d={};h&&(s=$t.Z(s,(function(t){return t!==h&&t!==u})));var p=function(t,e){return c.Z(e,(function(e){var n=t.inEdges(e);if(n.length){var r=he.Z(n,(function(e,n){var r=t.edge(n),i=t.node(n.v);return{sum:e.sum+r.weight*i.order,weight:e.weight+r.weight}}),{sum:0,weight:0});return{v:e,barycenter:r.sum/r.weight,weight:r.weight}}return{v:e}}))}(t,s);r.Z(p,(function(e){if(t.children(e.v).length){var r=Me(t,e.v,n,i);d[e.v]=r,a.Z(r,"barycenter")&&(s=e,o=r,nt.Z(s.barycenter)?(s.barycenter=o.barycenter,s.weight=o.weight):(s.barycenter=(s.barycenter*s.weight+o.barycenter*o.weight)/(s.weight+o.weight),s.weight+=o.weight))}var s,o}));var f=Ne(p,n);!function(t,e){r.Z(t,(function(t){t.vs=o.Z(t.vs.map((function(t){return e[t]?e[t].vs:t})))}))}(f,d);var g=De(f,i);if(h&&(g.vs=o.Z([h,g.vs,u]),t.predecessors(h).length)){var y=t.node(t.predecessors(h)[0]),m=t.node(t.predecessors(u)[0]);a.Z(g,"barycenter")||(g.barycenter=0,g.weight=0),g.barycenter=(g.barycenter*g.weight+y.order+m.order)/(g.weight+2),g.weight+=2}return g}function Ie(t){var e=dt(t),n=Fe(t,l.Z(1,e+1),"inEdges"),i=Fe(t,l.Z(e-1,-1,-1),"outEdges"),s=function(t){var e={},n=$t.Z(t.nodes(),(function(e){return!t.children(e).length})),i=K(c.Z(n,(function(e){return t.node(e).rank}))),s=c.Z(l.Z(i+1),(function(){return[]})),o=Ae(n,(function(e){return t.node(e).rank}));return r.Z(o,(function n(i){if(!a.Z(e,i)){e[i]=!0;var o=t.node(i);s[o.rank].push(i),r.Z(t.successors(i),n)}})),s}(t);Re(t,s);for(var o,h=Number.POSITIVE_INFINITY,u=0,d=0;d<4;++u,++d){$e(u%2?n:i,u%4>=2);var p=Le(t,s=ht(t));p<h&&(d=0,o=fe(s),h=p)}Re(t,o)}function Fe(t,e,n){return c.Z(e,(function(e){return ge(t,e,n)}))}function $e(t,e){var n=new h.k;r.Z(t,(function(t){var i=t.graph().root,a=Me(t,i,n,e);r.Z(a.vs,(function(e,n){t.node(e).order=n})),function(t,e,n){var i,a={};r.Z(n,(function(n){for(var r,s,o=t.parent(n);o;){if((r=t.parent(o))?(s=a[r],a[r]=o):(s=i,i=o),s&&s!==o)return void e.setEdge(s,o);o=r}}))}(t,n,a.vs)}))}function Re(t,e){r.Z(e,(function(e){r.Z(e,(function(e,n){t.node(e).order=n}))}))}function Ze(t){var e=function(t){var e={},n=0;function i(a){var s=n;r.Z(t.children(a),i),e[a]={low:s,lim:n++}}return r.Z(t.children(),i),e}(t);r.Z(t.graph().dummyChains,(function(n){for(var r=t.node(n),i=r.edgeObj,a=function(t,e,n,r){var i,a,s=[],o=[],c=Math.min(e[n].low,e[r].low),l=Math.max(e[n].lim,e[r].lim);i=n;do{i=t.parent(i),s.push(i)}while(i&&(e[i].low>c||l>e[i].lim));a=i,i=r;for(;(i=t.parent(i))!==a;)o.push(i);return{path:s.concat(o.reverse()),lca:a}}(t,e,i.v,i.w),s=a.path,o=a.lca,c=0,l=s[c],h=!0;n!==i.w;){if(r=t.node(n),h){for(;(l=s[c])!==o&&t.node(l).maxRank<r.rank;)c++;l===o&&(h=!1)}if(!h){for(;c<s.length-1&&t.node(l=s[c+1]).minRank<=r.rank;)c++;l=s[c]}t.setParent(n,l),n=t.successors(n)[0]}}))}var Pe=n(8882);const je=function(t,e){return null==t?t:(0,w.Z)(t,(0,Pe.Z)(e),R.Z)};function Ye(t,e){var n={};return he.Z(e,(function(e,i){var a=0,s=0,o=e.length,c=Q(i);return r.Z(i,(function(e,l){var h=function(t,e){if(t.node(e).dummy)return Ft(t.predecessors(e),(function(e){return t.node(e).dummy}))}(t,e),u=h?t.node(h).order:o;(h||e===c)&&(r.Z(i.slice(s,l+1),(function(e){r.Z(t.predecessors(e),(function(r){var i=t.node(r),s=i.order;!(s<a||u<s)||i.dummy&&t.node(e).dummy||ze(n,r,e)}))})),s=l+1,a=u)})),i})),n}function ze(t,e,n){if(e>n){var r=e;e=n,n=r}var i=t[e];i||(t[e]=i={}),i[n]=!0}function Ue(t,e,n){if(e>n){var r=e;e=n,n=r}return a.Z(t[e],n)}function We(t,e,n,i,s){var o={},c=function(t,e,n,i){var s=new h.k,o=t.graph(),c=function(t,e,n){return function(r,i,s){var o,c=r.node(i),l=r.node(s),h=0;if(h+=c.width/2,a.Z(c,"labelpos"))switch(c.labelpos.toLowerCase()){case"l":o=-c.width/2;break;case"r":o=c.width/2}if(o&&(h+=n?o:-o),o=0,h+=(c.dummy?e:t)/2,h+=(l.dummy?e:t)/2,h+=l.width/2,a.Z(l,"labelpos"))switch(l.labelpos.toLowerCase()){case"l":o=l.width/2;break;case"r":o=-l.width/2}return o&&(h+=n?o:-o),o=0,h}}(o.nodesep,o.edgesep,i);return r.Z(e,(function(e){var i;r.Z(e,(function(e){var r=n[e];if(s.setNode(r),i){var a=n[i],o=s.edge(a,r);s.setEdge(a,r,Math.max(c(t,e,i),o||0))}i=e}))})),s}(t,e,n,s),l=s?"borderLeft":"borderRight";function u(t,e){for(var n=c.nodes(),r=n.pop(),i={};r;)i[r]?t(r):(i[r]=!0,n.push(r),n=n.concat(e(r))),r=n.pop()}return u((function(t){o[t]=c.inEdges(t).reduce((function(t,e){return Math.max(t,o[e.v]+c.edge(e))}),0)}),c.predecessors.bind(c)),u((function(e){var n=c.outEdges(e).reduce((function(t,e){return Math.min(t,o[e.w]-c.edge(e))}),Number.POSITIVE_INFINITY),r=t.node(e);n!==Number.POSITIVE_INFINITY&&r.borderType!==l&&(o[e]=Math.max(o[e],n))}),c.successors.bind(c)),r.Z(i,(function(t){o[t]=o[n[t]]})),o}function qe(t){var e,n=ht(t),i=U(Ye(t,n),function(t,e){var n={};function i(e,i,a,s,o){var c;r.Z(l.Z(i,a),(function(i){c=e[i],t.node(c).dummy&&r.Z(t.predecessors(c),(function(e){var r=t.node(e);r.dummy&&(r.order<s||r.order>o)&&ze(n,e,c)}))}))}return he.Z(e,(function(e,n){var a,s=-1,o=0;return r.Z(n,(function(r,c){if("border"===t.node(r).dummy){var l=t.predecessors(r);l.length&&(a=t.node(l[0]).order,i(n,o,c,s,a),o=c,s=a)}i(n,o,n.length,a,e.length)})),n})),n}(t,n)),a={};r.Z(["u","d"],(function(s){e="u"===s?n:le.Z(n).reverse(),r.Z(["l","r"],(function(n){"r"===n&&(e=c.Z(e,(function(t){return le.Z(t).reverse()})));var o=("u"===s?t.predecessors:t.successors).bind(t),l=function(t,e,n,i){var a={},s={},o={};return r.Z(e,(function(t){r.Z(t,(function(t,e){a[t]=t,s[t]=t,o[t]=e}))})),r.Z(e,(function(t){var e=-1;r.Z(t,(function(t){var r=i(t);if(r.length){r=Ae(r,(function(t){return o[t]}));for(var c=(r.length-1)/2,l=Math.floor(c),h=Math.ceil(c);l<=h;++l){var u=r[l];s[t]===t&&e<o[u]&&!Ue(n,t,u)&&(s[u]=t,s[t]=a[t]=a[u],e=o[u])}}}))})),{root:a,align:s}}(0,e,i,o),h=We(t,e,l.root,l.align,"r"===n);"r"===n&&(h=et(h,(function(t){return-t}))),a[s+n]=h}))}));var s=function(t,e){return kt(le.Z(e),(function(e){var n=Number.NEGATIVE_INFINITY,r=Number.POSITIVE_INFINITY;return je(e,(function(e,i){var a=function(t,e){return t.node(e).width}(t,i)/2;n=Math.max(e+a,n),r=Math.min(e-a,r)})),n-r}))}(t,a);return function(t,e){var n=le.Z(e),i=it(n),a=K(n);r.Z(["u","d"],(function(n){r.Z(["l","r"],(function(r){var s,o=n+r,c=t[o];if(c!==e){var l=le.Z(c);(s="l"===r?i-it(l):a-K(l))&&(t[o]=et(c,(function(t){return t+s})))}}))}))}(a,s),function(t,e){return et(t.ul,(function(n,r){if(e)return t[e.toLowerCase()][r];var i=Ae(c.Z(t,r));return(i[1]+i[2])/2}))}(a,t.graph().align)}function He(t){(function(t){var e=ht(t),n=t.graph().ranksep,i=0;r.Z(e,(function(e){var a=K(c.Z(e,(function(e){return t.node(e).height})));r.Z(e,(function(e){t.node(e).y=i+a/2})),i+=a+n}))})(t=ct(t)),r.Z(qe(t),(function(e,n){t.node(n).x=e}))}function Ve(t,e){var n=e&&e.debugTiming?pt:ft;n("layout",(function(){var e=n("  buildLayoutGraph",(function(){return function(t){var e=new h.k({multigraph:!0,compound:!0}),n=an(t.graph());return e.setGraph(U({},Xe,rn(n,Ge),W.Z(n,Ke))),r.Z(t.nodes(),(function(n){var r=an(t.node(n));e.setNode(n,q.Z(rn(r,Qe),Je)),e.setParent(n,t.parent(n))})),r.Z(t.edges(),(function(n){var r=an(t.edge(n));e.setEdge(n,U({},en,rn(r,tn),W.Z(r,nn)))})),e}(t)}));n("  runLayout",(function(){!function(t,e){e("    makeSpaceForEdgeLabels",(function(){!function(t){var e=t.graph();e.ranksep/=2,r.Z(t.edges(),(function(n){var r=t.edge(n);r.minlen*=2,"c"!==r.labelpos.toLowerCase()&&("TB"===e.rankdir||"BT"===e.rankdir?r.width+=r.labeloffset:r.height+=r.labeloffset)}))}(t)})),e("    removeSelfEdges",(function(){!function(t){r.Z(t.edges(),(function(e){if(e.v===e.w){var n=t.node(e.v);n.selfEdges||(n.selfEdges=[]),n.selfEdges.push({e:e,label:t.edge(e)}),t.removeEdge(e)}}))}(t)})),e("    acyclic",(function(){b(t)})),e("    nestingGraph.run",(function(){ue(t)})),e("    rank",(function(){se(ct(t))})),e("    injectEdgeLabelProxies",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.width&&n.height){var r=t.node(e.v),i={rank:(t.node(e.w).rank-r.rank)/2+r.rank,e:e};ot(t,"edge-proxy",i,"_ep")}}))}(t)})),e("    removeEmptyRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank}))),n=[];r.Z(t.nodes(),(function(r){var i=t.node(r).rank-e;n[i]||(n[i]=[]),n[i].push(r)}));var i=0,a=t.graph().nodeRankFactor;r.Z(n,(function(e,n){nt.Z(e)&&n%a!=0?--i:i&&r.Z(e,(function(e){t.node(e).rank+=i}))}))}(t)})),e("    nestingGraph.cleanup",(function(){!function(t){var e=t.graph();t.removeNode(e.nestingRoot),delete e.nestingRoot,r.Z(t.edges(),(function(e){t.edge(e).nestingEdge&&t.removeEdge(e)}))}(t)})),e("    normalizeRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank})));r.Z(t.nodes(),(function(n){var r=t.node(n);a.Z(r,"rank")&&(r.rank-=e)}))}(t)})),e("    assignRankMinMax",(function(){!function(t){var e=0;r.Z(t.nodes(),(function(n){var r=t.node(n);r.borderTop&&(r.minRank=t.node(r.borderTop).rank,r.maxRank=t.node(r.borderBottom).rank,e=K(e,r.maxRank))})),t.graph().maxRank=e}(t)})),e("    removeEdgeLabelProxies",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);"edge-proxy"===n.dummy&&(t.edge(n.e).labelRank=n.rank,t.removeNode(e))}))}(t)})),e("    normalize.run",(function(){vt(t)})),e("    parentDummyChains",(function(){Ze(t)})),e("    addBorderSegments",(function(){!function(t){r.Z(t.children(),(function e(n){var i=t.children(n),s=t.node(n);if(i.length&&r.Z(i,e),a.Z(s,"minRank")){s.borderLeft=[],s.borderRight=[];for(var o=s.minRank,c=s.maxRank+1;o<c;++o)gt(t,"borderLeft","_bl",n,s,o),gt(t,"borderRight","_br",n,s,o)}}))}(t)})),e("    order",(function(){Ie(t)})),e("    insertSelfEdges",(function(){!function(t){var e=ht(t);r.Z(e,(function(e){var n=0;r.Z(e,(function(e,i){var a=t.node(e);a.order=i+n,r.Z(a.selfEdges,(function(e){ot(t,"selfedge",{width:e.label.width,height:e.label.height,rank:a.rank,order:i+ ++n,e:e.e,label:e.label},"_se")})),delete a.selfEdges}))}))}(t)})),e("    adjustCoordinateSystem",(function(){!function(t){var e=t.graph().rankdir.toLowerCase();"lr"!==e&&"rl"!==e||mt(t)}(t)})),e("    position",(function(){He(t)})),e("    positionSelfEdges",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);if("selfedge"===n.dummy){var r=t.node(n.e.v),i=r.x+r.width/2,a=r.y,s=n.x-i,o=r.height/2;t.setEdge(n.e,n.label),t.removeNode(e),n.label.points=[{x:i+2*s/3,y:a-o},{x:i+5*s/6,y:a-o},{x:i+s,y:a},{x:i+5*s/6,y:a+o},{x:i+2*s/3,y:a+o}],n.label.x=n.x,n.label.y=n.y}}))}(t)})),e("    removeBorderNodes",(function(){!function(t){r.Z(t.nodes(),(function(e){if(t.children(e).length){var n=t.node(e),r=t.node(n.borderTop),i=t.node(n.borderBottom),a=t.node(Q(n.borderLeft)),s=t.node(Q(n.borderRight));n.width=Math.abs(s.x-a.x),n.height=Math.abs(i.y-r.y),n.x=a.x+n.width/2,n.y=r.y+n.height/2}})),r.Z(t.nodes(),(function(e){"border"===t.node(e).dummy&&t.removeNode(e)}))}(t)})),e("    normalize.undo",(function(){!function(t){r.Z(t.graph().dummyChains,(function(e){var n,r=t.node(e),i=r.edgeLabel;for(t.setEdge(r.edgeObj,i);r.dummy;)n=t.successors(e)[0],t.removeNode(e),i.points.push({x:r.x,y:r.y}),"edge-label"===r.dummy&&(i.x=r.x,i.y=r.y,i.width=r.width,i.height=r.height),e=n,r=t.node(e)}))}(t)})),e("    fixupEdgeLabelCoords",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(a.Z(n,"x"))switch("l"!==n.labelpos&&"r"!==n.labelpos||(n.width-=n.labeloffset),n.labelpos){case"l":n.x-=n.width/2+n.labeloffset;break;case"r":n.x+=n.width/2+n.labeloffset}}))}(t)})),e("    undoCoordinateSystem",(function(){yt(t)})),e("    translateGraph",(function(){!function(t){var e=Number.POSITIVE_INFINITY,n=0,i=Number.POSITIVE_INFINITY,s=0,o=t.graph(),c=o.marginx||0,l=o.marginy||0;function h(t){var r=t.x,a=t.y,o=t.width,c=t.height;e=Math.min(e,r-o/2),n=Math.max(n,r+o/2),i=Math.min(i,a-c/2),s=Math.max(s,a+c/2)}r.Z(t.nodes(),(function(e){h(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);a.Z(n,"x")&&h(n)})),e-=c,i-=l,r.Z(t.nodes(),(function(n){var r=t.node(n);r.x-=e,r.y-=i})),r.Z(t.edges(),(function(n){var s=t.edge(n);r.Z(s.points,(function(t){t.x-=e,t.y-=i})),a.Z(s,"x")&&(s.x-=e),a.Z(s,"y")&&(s.y-=i)})),o.width=n-e+c,o.height=s-i+l}(t)})),e("    assignNodeIntersects",(function(){!function(t){r.Z(t.edges(),(function(e){var n,r,i=t.edge(e),a=t.node(e.v),s=t.node(e.w);i.points?(n=i.points[0],r=i.points[i.points.length-1]):(i.points=[],n=s,r=a),i.points.unshift(lt(a,n)),i.points.push(lt(s,r))}))}(t)})),e("    reversePoints",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);n.reversed&&n.points.reverse()}))}(t)})),e("    acyclic.undo",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.reversed){t.removeEdge(e);var r=n.forwardName;delete n.reversed,delete n.forwardName,t.setEdge(e.w,e.v,n,r)}}))}(t)}))}(e,n)})),n("  updateInputGraph",(function(){!function(t,e){r.Z(t.nodes(),(function(n){var r=t.node(n),i=e.node(n);r&&(r.x=i.x,r.y=i.y,e.children(n).length&&(r.width=i.width,r.height=i.height))})),r.Z(t.edges(),(function(n){var r=t.edge(n),i=e.edge(n);r.points=i.points,a.Z(i,"x")&&(r.x=i.x,r.y=i.y)})),t.graph().width=e.graph().width,t.graph().height=e.graph().height}(t,e)}))}))}var Ge=["nodesep","edgesep","ranksep","marginx","marginy"],Xe={ranksep:50,edgesep:20,nodesep:50,rankdir:"tb"},Ke=["acyclicer","ranker","rankdir","align"],Qe=["width","height"],Je={width:0,height:0},tn=["minlen","weight","width","height","labeloffset"],en={minlen:1,weight:1,width:0,height:0,labeloffset:10,labelpos:"r"},nn=["labelpos"];function rn(t,e){return et(W.Z(t,e),Number)}function an(t){var e={};return r.Z(t,(function(t,n){e[n.toLowerCase()]=t})),e}},2544:(t,e,n)=>{"use strict";n.d(e,{k:()=>D});var r=n(7452),i=n(2002),a=n(3234),s=n(7179),o=n(3445),c=n(9697),l=n(870),h=n(9360),u=n(626),d=n(9581),p=n(3001),f=n(1692);const g=function(t){return t!=t};const y=function(t,e,n){for(var r=n-1,i=t.length;++r<i;)if(t[r]===e)return r;return-1};const m=function(t,e,n){return e==e?y(t,e,n):(0,f.Z)(t,g,n)};const b=function(t,e){return!!(null==t?0:t.length)&&m(t,e,0)>-1};const _=function(t,e,n){for(var r=-1,i=null==t?0:t.length;++r<i;)if(n(e,t[r]))return!0;return!1};var x=n(9548),v=n(3203);const k=function(){};var w=n(6545),E=v.Z&&1/(0,w.Z)(new v.Z([,-0]))[1]==1/0?function(t){return new v.Z(t)}:k;const C=E;const T=function(t,e,n){var r=-1,i=b,a=t.length,s=!0,o=[],c=o;if(n)s=!1,i=_;else if(a>=200){var l=e?null:C(t);if(l)return(0,w.Z)(l);s=!1,i=x.Z,c=new p.Z}else c=e?[]:o;t:for(;++r<a;){var h=t[r],u=e?e(h):h;if(h=n||0!==h?h:0,s&&u==u){for(var d=c.length;d--;)if(c[d]===u)continue t;e&&c.push(u),o.push(h)}else i(c,u,n)||(c!==o&&c.push(u),o.push(h))}return o};var S=n(836);const A=(0,d.Z)((function(t){return T((0,u.Z)(t,1,S.Z,!0))}));var L=n(4148),B=n(2344),N="\0";class D{constructor(t={}){this._isDirected=!r.Z(t,"directed")||t.directed,this._isMultigraph=!!r.Z(t,"multigraph")&&t.multigraph,this._isCompound=!!r.Z(t,"compound")&&t.compound,this._label=void 0,this._defaultNodeLabelFn=i.Z(void 0),this._defaultEdgeLabelFn=i.Z(void 0),this._nodes={},this._isCompound&&(this._parent={},this._children={},this._children["\0"]={}),this._in={},this._preds={},this._out={},this._sucs={},this._edgeObjs={},this._edgeLabels={}}isDirected(){return this._isDirected}isMultigraph(){return this._isMultigraph}isCompound(){return this._isCompound}setGraph(t){return this._label=t,this}graph(){return this._label}setDefaultNodeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultNodeLabelFn=t,this}nodeCount(){return this._nodeCount}nodes(){return s.Z(this._nodes)}sources(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._in[e])}))}sinks(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._out[e])}))}setNodes(t,e){var n=arguments,r=this;return l.Z(t,(function(t){n.length>1?r.setNode(t,e):r.setNode(t)})),this}setNode(t,e){return r.Z(this._nodes,t)?(arguments.length>1&&(this._nodes[t]=e),this):(this._nodes[t]=arguments.length>1?e:this._defaultNodeLabelFn(t),this._isCompound&&(this._parent[t]=N,this._children[t]={},this._children["\0"][t]=!0),this._in[t]={},this._preds[t]={},this._out[t]={},this._sucs[t]={},++this._nodeCount,this)}node(t){return this._nodes[t]}hasNode(t){return r.Z(this._nodes,t)}removeNode(t){var e=this;if(r.Z(this._nodes,t)){var n=function(t){e.removeEdge(e._edgeObjs[t])};delete this._nodes[t],this._isCompound&&(this._removeFromParentsChildList(t),delete this._parent[t],l.Z(this.children(t),(function(t){e.setParent(t)})),delete this._children[t]),l.Z(s.Z(this._in[t]),n),delete this._in[t],delete this._preds[t],l.Z(s.Z(this._out[t]),n),delete this._out[t],delete this._sucs[t],--this._nodeCount}return this}setParent(t,e){if(!this._isCompound)throw new Error("Cannot set parent in a non-compound graph");if(h.Z(e))e=N;else{for(var n=e+="";!h.Z(n);n=this.parent(n))if(n===t)throw new Error("Setting "+e+" as parent of "+t+" would create a cycle");this.setNode(e)}return this.setNode(t),this._removeFromParentsChildList(t),this._parent[t]=e,this._children[e][t]=!0,this}_removeFromParentsChildList(t){delete this._children[this._parent[t]][t]}parent(t){if(this._isCompound){var e=this._parent[t];if(e!==N)return e}}children(t){if(h.Z(t)&&(t=N),this._isCompound){var e=this._children[t];if(e)return s.Z(e)}else{if(t===N)return this.nodes();if(this.hasNode(t))return[]}}predecessors(t){var e=this._preds[t];if(e)return s.Z(e)}successors(t){var e=this._sucs[t];if(e)return s.Z(e)}neighbors(t){var e=this.predecessors(t);if(e)return A(e,this.successors(t))}isLeaf(t){return 0===(this.isDirected()?this.successors(t):this.neighbors(t)).length}filterNodes(t){var e=new this.constructor({directed:this._isDirected,multigraph:this._isMultigraph,compound:this._isCompound});e.setGraph(this.graph());var n=this;l.Z(this._nodes,(function(n,r){t(r)&&e.setNode(r,n)})),l.Z(this._edgeObjs,(function(t){e.hasNode(t.v)&&e.hasNode(t.w)&&e.setEdge(t,n.edge(t))}));var r={};function i(t){var a=n.parent(t);return void 0===a||e.hasNode(a)?(r[t]=a,a):a in r?r[a]:i(a)}return this._isCompound&&l.Z(e.nodes(),(function(t){e.setParent(t,i(t))})),e}setDefaultEdgeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultEdgeLabelFn=t,this}edgeCount(){return this._edgeCount}edges(){return L.Z(this._edgeObjs)}setPath(t,e){var n=this,r=arguments;return B.Z(t,(function(t,i){return r.length>1?n.setEdge(t,i,e):n.setEdge(t,i),i})),this}setEdge(){var t,e,n,i,a=!1,s=arguments[0];"object"==typeof s&&null!==s&&"v"in s?(t=s.v,e=s.w,n=s.name,2===arguments.length&&(i=arguments[1],a=!0)):(t=s,e=arguments[1],n=arguments[3],arguments.length>2&&(i=arguments[2],a=!0)),t=""+t,e=""+e,h.Z(n)||(n=""+n);var o=I(this._isDirected,t,e,n);if(r.Z(this._edgeLabels,o))return a&&(this._edgeLabels[o]=i),this;if(!h.Z(n)&&!this._isMultigraph)throw new Error("Cannot set a named edge when isMultigraph = false");this.setNode(t),this.setNode(e),this._edgeLabels[o]=a?i:this._defaultEdgeLabelFn(t,e,n);var c=function(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}var o={v:i,w:a};r&&(o.name=r);return o}(this._isDirected,t,e,n);return t=c.v,e=c.w,Object.freeze(c),this._edgeObjs[o]=c,O(this._preds[e],t),O(this._sucs[t],e),this._in[e][o]=c,this._out[t][o]=c,this._edgeCount++,this}edge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return this._edgeLabels[r]}hasEdge(t,e,n){var i=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return r.Z(this._edgeLabels,i)}removeEdge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n),i=this._edgeObjs[r];return i&&(t=i.v,e=i.w,delete this._edgeLabels[r],delete this._edgeObjs[r],M(this._preds[e],t),M(this._sucs[t],e),delete this._in[e][r],delete this._out[t][r],this._edgeCount--),this}inEdges(t,e){var n=this._in[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.v===e})):r}}outEdges(t,e){var n=this._out[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.w===e})):r}}nodeEdges(t,e){var n=this.inEdges(t,e);if(n)return n.concat(this.outEdges(t,e))}}function O(t,e){t[e]?t[e]++:t[e]=1}function M(t,e){--t[e]||delete t[e]}function I(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}return i+"\x01"+a+"\x01"+(h.Z(r)?"\0":r)}function F(t,e){return I(t,e.v,e.w,e.name)}D.prototype._nodeCount=0,D.prototype._edgeCount=0},5625:(t,e,n)=>{"use strict";n.d(e,{k:()=>r.k});var r=n(2544)},9354:(t,e,n)=>{"use strict";n.d(e,{c:()=>o});var r=n(9360),i=n(8451);const a=function(t){return(0,i.Z)(t,4)};var s=n(3836);n(2544);function o(t){var e={options:{directed:t.isDirected(),multigraph:t.isMultigraph(),compound:t.isCompound()},nodes:c(t),edges:l(t)};return r.Z(t.graph())||(e.value=a(t.graph())),e}function c(t){return s.Z(t.nodes(),(function(e){var n=t.node(e),i=t.parent(e),a={v:e};return r.Z(n)||(a.value=n),r.Z(i)||(a.parent=i),a}))}function l(t){return s.Z(t.edges(),(function(e){var n=t.edge(e),i={v:e.v,w:e.w};return r.Z(e.name)||(i.name=e.name),r.Z(n)||(i.value=n),i}))}},1518:(t,e,n)=>{"use strict";n.d(e,{sY:()=>N});var r=n(9373),i=n(7452),a=n(3688),s=n(870),o=n(277),c=n(6225),l={normal:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},vee:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 L 4 5 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},undirected:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 5 L 10 5").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])}};function h(t){l=t}var u=n(3349);function d(t,e,n){var r=e.label,i=t.append("g");"svg"===e.labelType?function(t,e){var n=t;n.node().appendChild(e.label),c.bg(n,e.labelStyle)}(i,e):"string"!=typeof r||"html"===e.labelType?(0,u.a)(i,e):function(t,e){for(var n=t.append("text"),r=function(t){for(var e,n="",r=!1,i=0;i<t.length;++i)e=t[i],r?(n+="n"===e?"\n":e,r=!1):"\\"===e?r=!0:n+=e;return n}(e.label).split("\n"),i=0;i<r.length;i++)n.append("tspan").attr("xml:space","preserve").attr("dy","1em").attr("x","1").text(r[i]);c.bg(n,e.labelStyle)}(i,e);var a,s=i.node().getBBox();switch(n){case"top":a=-e.height/2;break;case"bottom":a=e.height/2-s.height;break;default:a=-s.height/2}return i.attr("transform","translate("+-s.width/2+","+a+")"),i}var p=function(t,e){var n=e.nodes().filter((function(t){return c.bF(e,t)})),i=t.selectAll("g.cluster").data(n,(function(t){return t}));c.WR(i.exit(),e).style("opacity",0).remove();var a=i.enter().append("g").attr("class","cluster").attr("id",(function(t){return e.node(t).id})).style("opacity",0).each((function(t){var n=e.node(t),i=r.Ys(this);r.Ys(this).append("rect"),d(i.append("g").attr("class","label"),n,n.clusterLabelPos)}));return i=i.merge(a),(i=c.WR(i,e).style("opacity",1)).selectAll("rect").each((function(t){var n=e.node(t),i=r.Ys(this);c.bg(i,n.style)})),i};function f(t){p=t}let g=function(t,e){var n,a=t.selectAll("g.edgeLabel").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0);return a.exit().remove(),a.enter().append("g").classed("edgeLabel",!0).style("opacity",0),(a=t.selectAll("g.edgeLabel")).each((function(t){var n=r.Ys(this);n.select(".label").remove();var a=e.edge(t),s=d(n,e.edge(t),0).classed("label",!0),o=s.node().getBBox();a.labelId&&s.attr("id",a.labelId),i.Z(a,"width")||(a.width=o.width),i.Z(a,"height")||(a.height=o.height)})),n=a.exit?a.exit():a.selectAll(null),c.WR(n,e).style("opacity",0).remove(),a};function y(t){g=t}var m=n(6749),b=n(4379);function _(t,e){return t.intersect(e)}var x=function(t,e,n){var i=t.selectAll("g.edgePath").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0),a=function(t,e){var n=t.enter().append("g").attr("class","edgePath").style("opacity",0);return n.append("path").attr("class","path").attr("d",(function(t){var n=e.edge(t),r=e.node(t.v).elem;return k(n,b.Z(n.points.length).map((function(){return e=(t=r).getBBox(),{x:(n=t.ownerSVGElement.getScreenCTM().inverse().multiply(t.getScreenCTM()).translate(e.width/2,e.height/2)).e,y:n.f};var t,e,n})))})),n.append("defs"),n}(i,e);!function(t,e){var n=t.exit();c.WR(n,e).style("opacity",0).remove()}(i,e);var s=void 0!==i.merge?i.merge(a):i;return c.WR(s,e).style("opacity",1),s.each((function(t){var n=r.Ys(this),i=e.edge(t);i.elem=this,i.id&&n.attr("id",i.id),c.$p(n,i.class,(n.classed("update")?"update ":"")+"edgePath")})),s.selectAll("path.path").each((function(t){var n=e.edge(t);n.arrowheadId=m.Z("arrowhead");var i=r.Ys(this).attr("marker-end",(function(){return"url("+(t=location.href,e=n.arrowheadId,t.split("#")[0]+"#"+e+")");var t,e})).style("fill","none");c.WR(i,e).attr("d",(function(t){return function(t,e){var n=t.edge(e),r=t.node(e.v),i=t.node(e.w),a=n.points.slice(1,n.points.length-1);return a.unshift(_(r,a[0])),a.push(_(i,a[a.length-1])),k(n,a)}(e,t)})),c.bg(i,n.style)})),s.selectAll("defs *").remove(),s.selectAll("defs").each((function(t){var i=e.edge(t);(0,n[i.arrowhead])(r.Ys(this),i.arrowheadId,i,"arrowhead")})),s};function v(t){x=t}function k(t,e){var n=(r.jvg||r.YPS.line)().x((function(t){return t.x})).y((function(t){return t.y}));return(n.curve||n.interpolate)(t.curve),n(e)}var w=n(1666),E=function(t,e,n){var a,s=e.nodes().filter((function(t){return!c.bF(e,t)})),o=t.selectAll("g.node").data(s,(function(t){return t})).classed("update",!0);return o.exit().remove(),o.enter().append("g").attr("class","node").style("opacity",0),(o=t.selectAll("g.node")).each((function(t){var a=e.node(t),s=r.Ys(this);c.$p(s,a.class,(s.classed("update")?"update ":"")+"node"),s.select("g.label").remove();var o=s.append("g").attr("class","label"),l=d(o,a),h=n[a.shape],u=w.Z(l.node().getBBox(),"width","height");a.elem=this,a.id&&s.attr("id",a.id),a.labelId&&o.attr("id",a.labelId),i.Z(a,"width")&&(u.width=a.width),i.Z(a,"height")&&(u.height=a.height),u.width+=a.paddingLeft+a.paddingRight,u.height+=a.paddingTop+a.paddingBottom,o.attr("transform","translate("+(a.paddingLeft-a.paddingRight)/2+","+(a.paddingTop-a.paddingBottom)/2+")");var p=r.Ys(this);p.select(".label-container").remove();var f=h(p,u,a).classed("label-container",!0);c.bg(f,a.style);var g=f.node().getBBox();a.width=g.width,a.height=g.height})),a=o.exit?o.exit():o.selectAll(null),c.WR(a,e).style("opacity",0).remove(),o};function C(t){E=t}function T(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}var S=n(3352),A=n(2930),L={rect:function(t,e,n){var r=t.insert("rect",":first-child").attr("rx",n.rx).attr("ry",n.ry).attr("x",-e.width/2).attr("y",-e.height/2).attr("width",e.width).attr("height",e.height);return n.intersect=function(t){return(0,A.q)(n,t)},r},ellipse:function(t,e,n){var r=e.width/2,i=e.height/2,a=t.insert("ellipse",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("rx",r).attr("ry",i);return n.intersect=function(t){return T(n,r,i,t)},a},circle:function(t,e,n){var r=Math.max(e.width,e.height)/2,i=t.insert("circle",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("r",r);return n.intersect=function(t){return function(t,e,n){return T(t,e,e,n)}(n,r,t)},i},diamond:function(t,e,n){var r=e.width*Math.SQRT2/2,i=e.height*Math.SQRT2/2,a=[{x:0,y:-i},{x:-r,y:0},{x:0,y:i},{x:r,y:0}],s=t.insert("polygon",":first-child").attr("points",a.map((function(t){return t.x+","+t.y})).join(" "));return n.intersect=function(t){return(0,S.A)(n,a,t)},s}};function B(t){L=t}function N(){var t=function(t,e){!function(t){t.nodes().forEach((function(e){var n=t.node(e);i.Z(n,"label")||t.children(e).length||(n.label=e),i.Z(n,"paddingX")&&a.Z(n,{paddingLeft:n.paddingX,paddingRight:n.paddingX}),i.Z(n,"paddingY")&&a.Z(n,{paddingTop:n.paddingY,paddingBottom:n.paddingY}),i.Z(n,"padding")&&a.Z(n,{paddingLeft:n.padding,paddingRight:n.padding,paddingTop:n.padding,paddingBottom:n.padding}),a.Z(n,D),s.Z(["paddingLeft","paddingRight","paddingTop","paddingBottom"],(function(t){n[t]=Number(n[t])})),i.Z(n,"width")&&(n._prevWidth=n.width),i.Z(n,"height")&&(n._prevHeight=n.height)})),t.edges().forEach((function(e){var n=t.edge(e);i.Z(n,"label")||(n.label=""),a.Z(n,O)}))}(e);var n=M(t,"output"),h=M(n,"clusters"),u=M(n,"edgePaths"),d=g(M(n,"edgeLabels"),e),f=E(M(n,"nodes"),e,L);(0,o.bK)(e),function(t,e){function n(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(f,e),function(t,e){function n(t){var n=e.edge(t);return i.Z(n,"x")?"translate("+n.x+","+n.y+")":""}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(d,e),x(u,e,l),function(t,e){var n=t.filter((function(){return!r.Ys(this).classed("update")}));function i(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}n.attr("transform",i),c.WR(t,e).style("opacity",1).attr("transform",i),c.WR(n.selectAll("rect"),e).attr("width",(function(t){return e.node(t).width})).attr("height",(function(t){return e.node(t).height})).attr("x",(function(t){return-e.node(t).width/2})).attr("y",(function(t){return-e.node(t).height/2}))}(p(h,e),e),function(t){s.Z(t.nodes(),(function(e){var n=t.node(e);i.Z(n,"_prevWidth")?n.width=n._prevWidth:delete n.width,i.Z(n,"_prevHeight")?n.height=n._prevHeight:delete n.height,delete n._prevWidth,delete n._prevHeight}))}(e)};return t.createNodes=function(e){return arguments.length?(C(e),t):E},t.createClusters=function(e){return arguments.length?(f(e),t):p},t.createEdgeLabels=function(e){return arguments.length?(y(e),t):g},t.createEdgePaths=function(e){return arguments.length?(v(e),t):x},t.shapes=function(e){return arguments.length?(B(e),t):L},t.arrows=function(e){return arguments.length?(h(e),t):l},t}var D={paddingLeft:10,paddingRight:10,paddingTop:10,paddingBottom:10,rx:0,ry:0,shape:"rect"},O={arrowhead:"normal",curve:r.c_6};function M(t,e){var n=t.select("g."+e);return n.empty()&&(n=t.append("g").attr("class",e)),n}n(5625)},1883:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(1691),i=n(2142);const a=class{constructor(){this.type=i.w.ALL}get(){return this.type}set(t){if(this.type&&this.type!==t)throw new Error("Cannot change both RGB and HSL channels at the same time");this.type=t}reset(){this.type=i.w.ALL}is(t){return this.type===t}};const s=new class{constructor(t,e){this.color=e,this.changed=!1,this.data=t,this.type=new a}set(t,e){return this.color=e,this.changed=!1,this.data=t,this.type.type=i.w.ALL,this}_ensureHSL(){const t=this.data,{h:e,s:n,l:i}=t;void 0===e&&(t.h=r.Z.channel.rgb2hsl(t,"h")),void 0===n&&(t.s=r.Z.channel.rgb2hsl(t,"s")),void 0===i&&(t.l=r.Z.channel.rgb2hsl(t,"l"))}_ensureRGB(){const t=this.data,{r:e,g:n,b:i}=t;void 0===e&&(t.r=r.Z.channel.hsl2rgb(t,"r")),void 0===n&&(t.g=r.Z.channel.hsl2rgb(t,"g")),void 0===i&&(t.b=r.Z.channel.hsl2rgb(t,"b"))}get r(){const t=this.data,e=t.r;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"r")):e}get g(){const t=this.data,e=t.g;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"g")):e}get b(){const t=this.data,e=t.b;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"b")):e}get h(){const t=this.data,e=t.h;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"h")):e}get s(){const t=this.data,e=t.s;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"s")):e}get l(){const t=this.data,e=t.l;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"l")):e}get a(){return this.data.a}set r(t){this.type.set(i.w.RGB),this.changed=!0,this.data.r=t}set g(t){this.type.set(i.w.RGB),this.changed=!0,this.data.g=t}set b(t){this.type.set(i.w.RGB),this.changed=!0,this.data.b=t}set h(t){this.type.set(i.w.HSL),this.changed=!0,this.data.h=t}set s(t){this.type.set(i.w.HSL),this.changed=!0,this.data.s=t}set l(t){this.type.set(i.w.HSL),this.changed=!0,this.data.l=t}set a(t){this.changed=!0,this.data.a=t}}({r:0,g:0,b:0,a:0},"transparent")},1610:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=n(1883),i=n(2142);const a={re:/^#((?:[a-f0-9]{2}){2,4}|[a-f0-9]{3})$/i,parse:t=>{if(35!==t.charCodeAt(0))return;const e=t.match(a.re);if(!e)return;const n=e[1],i=parseInt(n,16),s=n.length,o=s%4==0,c=s>4,l=c?1:17,h=c?8:4,u=o?0:-1,d=c?255:15;return r.Z.set({r:(i>>h*(u+3)&d)*l,g:(i>>h*(u+2)&d)*l,b:(i>>h*(u+1)&d)*l,a:o?(i&d)*l/255:1},t)},stringify:t=>{const{r:e,g:n,b:r,a:a}=t;return a<1?`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}${i.Q[Math.round(255*a)]}`:`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}`}},s=a;var o=n(1691);const c={re:/^hsla?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(?:deg|grad|rad|turn)?)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(%)?))?\s*?\)$/i,hueRe:/^(.+?)(deg|grad|rad|turn)$/i,_hue2deg:t=>{const e=t.match(c.hueRe);if(e){const[,t,n]=e;switch(n){case"grad":return o.Z.channel.clamp.h(.9*parseFloat(t));case"rad":return o.Z.channel.clamp.h(180*parseFloat(t)/Math.PI);case"turn":return o.Z.channel.clamp.h(360*parseFloat(t))}}return o.Z.channel.clamp.h(parseFloat(t))},parse:t=>{const e=t.charCodeAt(0);if(104!==e&&72!==e)return;const n=t.match(c.re);if(!n)return;const[,i,a,s,l,h]=n;return r.Z.set({h:c._hue2deg(i),s:o.Z.channel.clamp.s(parseFloat(a)),l:o.Z.channel.clamp.l(parseFloat(s)),a:l?o.Z.channel.clamp.a(h?parseFloat(l)/100:parseFloat(l)):1},t)},stringify:t=>{const{h:e,s:n,l:r,a:i}=t;return i<1?`hsla(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%, ${i})`:`hsl(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%)`}},l=c,h={colors:{aliceblue:"#f0f8ff",antiquewhite:"#faebd7",aqua:"#00ffff",aquamarine:"#7fffd4",azure:"#f0ffff",beige:"#f5f5dc",bisque:"#ffe4c4",black:"#000000",blanchedalmond:"#ffebcd",blue:"#0000ff",blueviolet:"#8a2be2",brown:"#a52a2a",burlywood:"#deb887",cadetblue:"#5f9ea0",chartreuse:"#7fff00",chocolate:"#d2691e",coral:"#ff7f50",cornflowerblue:"#6495ed",cornsilk:"#fff8dc",crimson:"#dc143c",cyanaqua:"#00ffff",darkblue:"#00008b",darkcyan:"#008b8b",darkgoldenrod:"#b8860b",darkgray:"#a9a9a9",darkgreen:"#006400",darkgrey:"#a9a9a9",darkkhaki:"#bdb76b",darkmagenta:"#8b008b",darkolivegreen:"#556b2f",darkorange:"#ff8c00",darkorchid:"#9932cc",darkred:"#8b0000",darksalmon:"#e9967a",darkseagreen:"#8fbc8f",darkslateblue:"#483d8b",darkslategray:"#2f4f4f",darkslategrey:"#2f4f4f",darkturquoise:"#00ced1",darkviolet:"#9400d3",deeppink:"#ff1493",deepskyblue:"#00bfff",dimgray:"#696969",dimgrey:"#696969",dodgerblue:"#1e90ff",firebrick:"#b22222",floralwhite:"#fffaf0",forestgreen:"#228b22",fuchsia:"#ff00ff",gainsboro:"#dcdcdc",ghostwhite:"#f8f8ff",gold:"#ffd700",goldenrod:"#daa520",gray:"#808080",green:"#008000",greenyellow:"#adff2f",grey:"#808080",honeydew:"#f0fff0",hotpink:"#ff69b4",indianred:"#cd5c5c",indigo:"#4b0082",ivory:"#fffff0",khaki:"#f0e68c",lavender:"#e6e6fa",lavenderblush:"#fff0f5",lawngreen:"#7cfc00",lemonchiffon:"#fffacd",lightblue:"#add8e6",lightcoral:"#f08080",lightcyan:"#e0ffff",lightgoldenrodyellow:"#fafad2",lightgray:"#d3d3d3",lightgreen:"#90ee90",lightgrey:"#d3d3d3",lightpink:"#ffb6c1",lightsalmon:"#ffa07a",lightseagreen:"#20b2aa",lightskyblue:"#87cefa",lightslategray:"#778899",lightslategrey:"#778899",lightsteelblue:"#b0c4de",lightyellow:"#ffffe0",lime:"#00ff00",limegreen:"#32cd32",linen:"#faf0e6",magenta:"#ff00ff",maroon:"#800000",mediumaquamarine:"#66cdaa",mediumblue:"#0000cd",mediumorchid:"#ba55d3",mediumpurple:"#9370db",mediumseagreen:"#3cb371",mediumslateblue:"#7b68ee",mediumspringgreen:"#00fa9a",mediumturquoise:"#48d1cc",mediumvioletred:"#c71585",midnightblue:"#191970",mintcream:"#f5fffa",mistyrose:"#ffe4e1",moccasin:"#ffe4b5",navajowhite:"#ffdead",navy:"#000080",oldlace:"#fdf5e6",olive:"#808000",olivedrab:"#6b8e23",orange:"#ffa500",orangered:"#ff4500",orchid:"#da70d6",palegoldenrod:"#eee8aa",palegreen:"#98fb98",paleturquoise:"#afeeee",palevioletred:"#db7093",papayawhip:"#ffefd5",peachpuff:"#ffdab9",peru:"#cd853f",pink:"#ffc0cb",plum:"#dda0dd",powderblue:"#b0e0e6",purple:"#800080",rebeccapurple:"#663399",red:"#ff0000",rosybrown:"#bc8f8f",royalblue:"#4169e1",saddlebrown:"#8b4513",salmon:"#fa8072",sandybrown:"#f4a460",seagreen:"#2e8b57",seashell:"#fff5ee",sienna:"#a0522d",silver:"#c0c0c0",skyblue:"#87ceeb",slateblue:"#6a5acd",slategray:"#708090",slategrey:"#708090",snow:"#fffafa",springgreen:"#00ff7f",tan:"#d2b48c",teal:"#008080",thistle:"#d8bfd8",transparent:"#00000000",turquoise:"#40e0d0",violet:"#ee82ee",wheat:"#f5deb3",white:"#ffffff",whitesmoke:"#f5f5f5",yellow:"#ffff00",yellowgreen:"#9acd32"},parse:t=>{t=t.toLowerCase();const e=h.colors[t];if(e)return s.parse(e)},stringify:t=>{const e=s.stringify(t);for(const n in h.colors)if(h.colors[n]===e)return n}},u=h,d={re:/^rgba?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?)))?\s*?\)$/i,parse:t=>{const e=t.charCodeAt(0);if(114!==e&&82!==e)return;const n=t.match(d.re);if(!n)return;const[,i,a,s,c,l,h,u,p]=n;return r.Z.set({r:o.Z.channel.clamp.r(a?2.55*parseFloat(i):parseFloat(i)),g:o.Z.channel.clamp.g(c?2.55*parseFloat(s):parseFloat(s)),b:o.Z.channel.clamp.b(h?2.55*parseFloat(l):parseFloat(l)),a:u?o.Z.channel.clamp.a(p?parseFloat(u)/100:parseFloat(u)):1},t)},stringify:t=>{const{r:e,g:n,b:r,a:i}=t;return i<1?`rgba(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)}, ${o.Z.lang.round(i)})`:`rgb(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)})`}},p=d,f={format:{keyword:h,hex:s,rgb:d,rgba:d,hsl:c,hsla:c},parse:t=>{if("string"!=typeof t)return t;const e=s.parse(t)||p.parse(t)||l.parse(t)||u.parse(t);if(e)return e;throw new Error(`Unsupported color format: "${t}"`)},stringify:t=>!t.changed&&t.color?t.color:t.type.is(i.w.HSL)||void 0===t.data.r?l.stringify(t):t.a<1||!Number.isInteger(t.r)||!Number.isInteger(t.g)||!Number.isInteger(t.b)?p.stringify(t):s.stringify(t)},g=f},2142:(t,e,n)=>{"use strict";n.d(e,{Q:()=>i,w:()=>a});var r=n(1691);const i={};for(let s=0;s<=255;s++)i[s]=r.Z.unit.dec2hex(s);const a={ALL:0,RGB:1,HSL:2}},1506:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1691),i=n(1610);const a=(t,e,n)=>{const a=i.Z.parse(t),s=a[e],o=r.Z.channel.clamp[e](s+n);return s!==o&&(a[e]=o),i.Z.stringify(a)}},7201:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",-e)},5920:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",e)},1691:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});const r={min:{r:0,g:0,b:0,s:0,l:0,a:0},max:{r:255,g:255,b:255,h:360,s:100,l:100,a:1},clamp:{r:t=>t>=255?255:t<0?0:t,g:t=>t>=255?255:t<0?0:t,b:t=>t>=255?255:t<0?0:t,h:t=>t%360,s:t=>t>=100?100:t<0?0:t,l:t=>t>=100?100:t<0?0:t,a:t=>t>=1?1:t<0?0:t},toLinear:t=>{const e=t/255;return t>.03928?Math.pow((e+.055)/1.055,2.4):e/12.92},hue2rgb:(t,e,n)=>(n<0&&(n+=1),n>1&&(n-=1),n<1/6?t+6*(e-t)*n:n<.5?e:n<2/3?t+(e-t)*(2/3-n)*6:t),hsl2rgb:({h:t,s:e,l:n},i)=>{if(!e)return 2.55*n;t/=360,e/=100;const a=(n/=100)<.5?n*(1+e):n+e-n*e,s=2*n-a;switch(i){case"r":return 255*r.hue2rgb(s,a,t+1/3);case"g":return 255*r.hue2rgb(s,a,t);case"b":return 255*r.hue2rgb(s,a,t-1/3)}},rgb2hsl:({r:t,g:e,b:n},r)=>{t/=255,e/=255,n/=255;const i=Math.max(t,e,n),a=Math.min(t,e,n),s=(i+a)/2;if("l"===r)return 100*s;if(i===a)return 0;const o=i-a;if("s"===r)return 100*(s>.5?o/(2-i-a):o/(i+a));switch(i){case t:return 60*((e-n)/o+(e<n?6:0));case e:return 60*((n-t)/o+2);case n:return 60*((t-e)/o+4);default:return-1}}},i={channel:r,lang:{clamp:(t,e,n)=>e>n?Math.min(e,Math.max(n,t)):Math.min(n,Math.max(e,t)),round:t=>Math.round(1e10*t)/1e10},unit:{dec2hex:t=>{const e=Math.round(t).toString(16);return e.length>1?e:`0${e}`}}}},7308:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});const r=function(){this.__data__=[],this.size=0};var i=n(9651);const a=function(t,e){for(var n=t.length;n--;)if((0,i.Z)(t[n][0],e))return n;return-1};var s=Array.prototype.splice;const o=function(t){var e=this.__data__,n=a(e,t);return!(n<0)&&(n==e.length-1?e.pop():s.call(e,n,1),--this.size,!0)};const c=function(t){var e=this.__data__,n=a(e,t);return n<0?void 0:e[n][1]};const l=function(t){return a(this.__data__,t)>-1};const h=function(t,e){var n=this.__data__,r=a(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=r,u.prototype.delete=o,u.prototype.get=c,u.prototype.has=l,u.prototype.set=h;const d=u},6183:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Map")},7834:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});const r=(0,n(2508).Z)(Object,"create");const i=function(){this.__data__=r?r(null):{},this.size=0};const a=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e};var s=Object.prototype.hasOwnProperty;const o=function(t){var e=this.__data__;if(r){var n=e[t];return"__lodash_hash_undefined__"===n?void 0:n}return s.call(e,t)?e[t]:void 0};var c=Object.prototype.hasOwnProperty;const l=function(t){var e=this.__data__;return r?void 0!==e[t]:c.call(e,t)};const h=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=r&&void 0===e?"__lodash_hash_undefined__":e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=o,u.prototype.has=l,u.prototype.set=h;const d=u;var p=n(7308),f=n(6183);const g=function(){this.size=0,this.__data__={hash:new d,map:new(f.Z||p.Z),string:new d}};const y=function(t){var e=typeof t;return"string"==e||"number"==e||"symbol"==e||"boolean"==e?"__proto__"!==t:null===t};const m=function(t,e){var n=t.__data__;return y(e)?n["string"==typeof e?"string":"hash"]:n.map};const b=function(t){var e=m(this,t).delete(t);return this.size-=e?1:0,e};const _=function(t){return m(this,t).get(t)};const x=function(t){return m(this,t).has(t)};const v=function(t,e){var n=m(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this};function k(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}k.prototype.clear=g,k.prototype.delete=b,k.prototype.get=_,k.prototype.has=x,k.prototype.set=v;const w=k},3203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Set")},3001:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7834);const i=function(t){return this.__data__.set(t,"__lodash_hash_undefined__"),this};const a=function(t){return this.__data__.has(t)};function s(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r.Z;++e<n;)this.add(t[e])}s.prototype.add=s.prototype.push=i,s.prototype.has=a;const o=s},1667:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7308);const i=function(){this.__data__=new r.Z,this.size=0};const a=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n};const s=function(t){return this.__data__.get(t)};const o=function(t){return this.__data__.has(t)};var c=n(6183),l=n(7834);const h=function(t,e){var n=this.__data__;if(n instanceof r.Z){var i=n.__data__;if(!c.Z||i.length<199)return i.push([t,e]),this.size=++n.size,this;n=this.__data__=new l.Z(i)}return n.set(t,e),this.size=n.size,this};function u(t){var e=this.__data__=new r.Z(t);this.size=e.size}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=s,u.prototype.has=o,u.prototype.set=h;const d=u},7685:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Symbol},7623:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Uint8Array},6579:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}},8774:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=0,a=[];++n<r;){var s=t[n];e(s,n,t)&&(a[i++]=s)}return a}},7668:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});const r=function(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r};var i=n(9169),a=n(7771),s=n(7008),o=n(6009),c=n(8843),l=Object.prototype.hasOwnProperty;const h=function(t,e){var n=(0,a.Z)(t),h=!n&&(0,i.Z)(t),u=!n&&!h&&(0,s.Z)(t),d=!n&&!h&&!u&&(0,c.Z)(t),p=n||h||u||d,f=p?r(t.length,String):[],g=f.length;for(var y in t)!e&&!l.call(t,y)||p&&("length"==y||u&&("offset"==y||"parent"==y)||d&&("buffer"==y||"byteLength"==y||"byteOffset"==y)||(0,o.Z)(y,g))||f.push(y);return f}},4073:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=Array(r);++n<r;)i[n]=e(t[n],n,t);return i}},8694:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=e.length,i=t.length;++n<r;)t[i+n]=e[n];return t}},2954:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4752),i=n(9651),a=Object.prototype.hasOwnProperty;const s=function(t,e,n){var s=t[e];a.call(t,e)&&(0,i.Z)(s,n)&&(void 0!==n||e in t)||(0,r.Z)(t,e,n)}},4752:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7904);const i=function(t,e,n){"__proto__"==e&&r.Z?(0,r.Z)(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}},8451:(t,e,n)=>{"use strict";n.d(e,{Z:()=>J});var r=n(1667),i=n(6579),a=n(2954),s=n(1899),o=n(7179);const c=function(t,e){return t&&(0,s.Z)(e,(0,o.Z)(e),t)};var l=n(2957);const h=function(t,e){return t&&(0,s.Z)(e,(0,l.Z)(e),t)};var u=n(1050),d=n(7215),p=n(5695);const f=function(t,e){return(0,s.Z)(t,(0,p.Z)(t),e)};var g=n(8694),y=n(2513),m=n(532);const b=Object.getOwnPropertySymbols?function(t){for(var e=[];t;)(0,g.Z)(e,(0,p.Z)(t)),t=(0,y.Z)(t);return e}:m.Z;const _=function(t,e){return(0,s.Z)(t,b(t),e)};var x=n(1808),v=n(3327);const k=function(t){return(0,v.Z)(t,l.Z,b)};var w=n(3970),E=Object.prototype.hasOwnProperty;const C=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&E.call(t,"index")&&(n.index=t.index,n.input=t.input),n};var T=n(1884);const S=function(t,e){var n=e?(0,T.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)};var A=/\w*$/;const L=function(t){var e=new t.constructor(t.source,A.exec(t));return e.lastIndex=t.lastIndex,e};var B=n(7685),N=B.Z?B.Z.prototype:void 0,D=N?N.valueOf:void 0;const O=function(t){return D?Object(D.call(t)):{}};var M=n(2701);const I=function(t,e,n){var r=t.constructor;switch(e){case"[object ArrayBuffer]":return(0,T.Z)(t);case"[object Boolean]":case"[object Date]":return new r(+t);case"[object DataView]":return S(t,n);case"[object Float32Array]":case"[object Float64Array]":case"[object Int8Array]":case"[object Int16Array]":case"[object Int32Array]":case"[object Uint8Array]":case"[object Uint8ClampedArray]":case"[object Uint16Array]":case"[object Uint32Array]":return(0,M.Z)(t,n);case"[object Map]":case"[object Set]":return new r;case"[object Number]":case"[object String]":return new r(t);case"[object RegExp]":return L(t);case"[object Symbol]":return O(t)}};var F=n(3658),$=n(7771),R=n(7008),Z=n(8533);const P=function(t){return(0,Z.Z)(t)&&"[object Map]"==(0,w.Z)(t)};var j=n(1162),Y=n(8351),z=Y.Z&&Y.Z.isMap;const U=z?(0,j.Z)(z):P;var W=n(7226);const q=function(t){return(0,Z.Z)(t)&&"[object Set]"==(0,w.Z)(t)};var H=Y.Z&&Y.Z.isSet;const V=H?(0,j.Z)(H):q;var G="[object Arguments]",X="[object Function]",K="[object Object]",Q={};Q[G]=Q["[object Array]"]=Q["[object ArrayBuffer]"]=Q["[object DataView]"]=Q["[object Boolean]"]=Q["[object Date]"]=Q["[object Float32Array]"]=Q["[object Float64Array]"]=Q["[object Int8Array]"]=Q["[object Int16Array]"]=Q["[object Int32Array]"]=Q["[object Map]"]=Q["[object Number]"]=Q[K]=Q["[object RegExp]"]=Q["[object Set]"]=Q["[object String]"]=Q["[object Symbol]"]=Q["[object Uint8Array]"]=Q["[object Uint8ClampedArray]"]=Q["[object Uint16Array]"]=Q["[object Uint32Array]"]=!0,Q["[object Error]"]=Q[X]=Q["[object WeakMap]"]=!1;const J=function t(e,n,s,p,g,y){var m,b=1&n,v=2&n,E=4&n;if(s&&(m=g?s(e,p,g,y):s(e)),void 0!==m)return m;if(!(0,W.Z)(e))return e;var T=(0,$.Z)(e);if(T){if(m=C(e),!b)return(0,d.Z)(e,m)}else{var S=(0,w.Z)(e),A=S==X||"[object GeneratorFunction]"==S;if((0,R.Z)(e))return(0,u.Z)(e,b);if(S==K||S==G||A&&!g){if(m=v||A?{}:(0,F.Z)(e),!b)return v?_(e,h(m,e)):f(e,c(m,e))}else{if(!Q[S])return g?e:{};m=I(e,S,b)}}y||(y=new r.Z);var L=y.get(e);if(L)return L;y.set(e,m),V(e)?e.forEach((function(r){m.add(t(r,n,s,r,e,y))})):U(e)&&e.forEach((function(r,i){m.set(i,t(r,n,s,i,e,y))}));var B=E?v?k:x.Z:v?l.Z:o.Z,N=T?void 0:B(e);return(0,i.Z)(N||e,(function(r,i){N&&(r=e[i=r]),(0,a.Z)(m,i,t(r,n,s,i,e,y))})),m}},9811:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2693),i=n(585);const a=function(t,e){return function(n,r){if(null==n)return n;if(!(0,i.Z)(n))return t(n,r);for(var a=n.length,s=e?a:-1,o=Object(n);(e?s--:++s<a)&&!1!==r(o[s],s,o););return n}}(r.Z)},1692:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e,n,r){for(var i=t.length,a=n+(r?1:-1);r?a--:++a<i;)if(e(t[a],a,t))return a;return-1}},626:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(8694),i=n(7685),a=n(9169),s=n(7771),o=i.Z?i.Z.isConcatSpreadable:void 0;const c=function(t){return(0,s.Z)(t)||(0,a.Z)(t)||!!(o&&t&&t[o])};const l=function t(e,n,i,a,s){var o=-1,l=e.length;for(i||(i=c),s||(s=[]);++o<l;){var h=e[o];n>0&&i(h)?n>1?t(h,n-1,i,a,s):(0,r.Z)(s,h):a||(s[s.length]=h)}return s}},1395:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e,n,r){for(var i=-1,a=Object(e),s=r(e),o=s.length;o--;){var c=s[t?o:++i];if(!1===n(a[c],c,a))break}return e}}()},2693:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1395),i=n(7179);const a=function(t,e){return t&&(0,r.Z)(t,e,i.Z)}},3317:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2823),i=n(2281);const a=function(t,e){for(var n=0,a=(e=(0,r.Z)(e,t)).length;null!=t&&n<a;)t=t[(0,i.Z)(e[n++])];return n&&n==a?t:void 0}},3327:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(8694),i=n(7771);const a=function(t,e,n){var a=e(t);return(0,i.Z)(t)?a:(0,r.Z)(a,n(t))}},3589:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7685),i=Object.prototype,a=i.hasOwnProperty,s=i.toString,o=r.Z?r.Z.toStringTag:void 0;const c=function(t){var e=a.call(t,o),n=t[o];try{t[o]=void 0;var r=!0}catch(c){}var i=s.call(t);return r&&(e?t[o]=n:delete t[o]),i};var l=Object.prototype.toString;const h=function(t){return l.call(t)};var u=r.Z?r.Z.toStringTag:void 0;const d=function(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":u&&u in Object(t)?c(t):h(t)}},4765:(t,e,n)=>{"use strict";n.d(e,{Z:()=>H});var r=n(1667),i=n(3001);const a=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1};var s=n(9548);const o=function(t,e,n,r,o,c){var l=1&n,h=t.length,u=e.length;if(h!=u&&!(l&&u>h))return!1;var d=c.get(t),p=c.get(e);if(d&&p)return d==e&&p==t;var f=-1,g=!0,y=2&n?new i.Z:void 0;for(c.set(t,e),c.set(e,t);++f<h;){var m=t[f],b=e[f];if(r)var _=l?r(b,m,f,e,t,c):r(m,b,f,t,e,c);if(void 0!==_){if(_)continue;g=!1;break}if(y){if(!a(e,(function(t,e){if(!(0,s.Z)(y,e)&&(m===t||o(m,t,n,r,c)))return y.push(e)}))){g=!1;break}}else if(m!==b&&!o(m,b,n,r,c)){g=!1;break}}return c.delete(t),c.delete(e),g};var c=n(7685),l=n(7623),h=n(9651);const u=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t,r){n[++e]=[r,t]})),n};var d=n(6545),p=c.Z?c.Z.prototype:void 0,f=p?p.valueOf:void 0;const g=function(t,e,n,r,i,a,s){switch(n){case"[object DataView]":if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case"[object ArrayBuffer]":return!(t.byteLength!=e.byteLength||!a(new l.Z(t),new l.Z(e)));case"[object Boolean]":case"[object Date]":case"[object Number]":return(0,h.Z)(+t,+e);case"[object Error]":return t.name==e.name&&t.message==e.message;case"[object RegExp]":case"[object String]":return t==e+"";case"[object Map]":var c=u;case"[object Set]":var p=1&r;if(c||(c=d.Z),t.size!=e.size&&!p)return!1;var g=s.get(t);if(g)return g==e;r|=2,s.set(t,e);var y=o(c(t),c(e),r,i,a,s);return s.delete(t),y;case"[object Symbol]":if(f)return f.call(t)==f.call(e)}return!1};var y=n(1808),m=Object.prototype.hasOwnProperty;const b=function(t,e,n,r,i,a){var s=1&n,o=(0,y.Z)(t),c=o.length;if(c!=(0,y.Z)(e).length&&!s)return!1;for(var l=c;l--;){var h=o[l];if(!(s?h in e:m.call(e,h)))return!1}var u=a.get(t),d=a.get(e);if(u&&d)return u==e&&d==t;var p=!0;a.set(t,e),a.set(e,t);for(var f=s;++l<c;){var g=t[h=o[l]],b=e[h];if(r)var _=s?r(b,g,h,e,t,a):r(g,b,h,t,e,a);if(!(void 0===_?g===b||i(g,b,n,r,a):_)){p=!1;break}f||(f="constructor"==h)}if(p&&!f){var x=t.constructor,v=e.constructor;x==v||!("constructor"in t)||!("constructor"in e)||"function"==typeof x&&x instanceof x&&"function"==typeof v&&v instanceof v||(p=!1)}return a.delete(t),a.delete(e),p};var _=n(3970),x=n(7771),v=n(7008),k=n(8843),w="[object Arguments]",E="[object Array]",C="[object Object]",T=Object.prototype.hasOwnProperty;const S=function(t,e,n,i,a,s){var c=(0,x.Z)(t),l=(0,x.Z)(e),h=c?E:(0,_.Z)(t),u=l?E:(0,_.Z)(e),d=(h=h==w?C:h)==C,p=(u=u==w?C:u)==C,f=h==u;if(f&&(0,v.Z)(t)){if(!(0,v.Z)(e))return!1;c=!0,d=!1}if(f&&!d)return s||(s=new r.Z),c||(0,k.Z)(t)?o(t,e,n,i,a,s):g(t,e,h,n,i,a,s);if(!(1&n)){var y=d&&T.call(t,"__wrapped__"),m=p&&T.call(e,"__wrapped__");if(y||m){var S=y?t.value():t,A=m?e.value():e;return s||(s=new r.Z),a(S,A,n,i,s)}}return!!f&&(s||(s=new r.Z),b(t,e,n,i,a,s))};var A=n(8533);const L=function t(e,n,r,i,a){return e===n||(null==e||null==n||!(0,A.Z)(e)&&!(0,A.Z)(n)?e!=e&&n!=n:S(e,n,r,i,t,a))};const B=function(t,e,n,i){var a=n.length,s=a,o=!i;if(null==t)return!s;for(t=Object(t);a--;){var c=n[a];if(o&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++a<s;){var l=(c=n[a])[0],h=t[l],u=c[1];if(o&&c[2]){if(void 0===h&&!(l in t))return!1}else{var d=new r.Z;if(i)var p=i(h,u,l,t,e,d);if(!(void 0===p?L(u,h,3,i,d):p))return!1}}return!0};var N=n(7226);const D=function(t){return t==t&&!(0,N.Z)(t)};var O=n(7179);const M=function(t){for(var e=(0,O.Z)(t),n=e.length;n--;){var r=e[n],i=t[r];e[n]=[r,i,D(i)]}return e};const I=function(t,e){return function(n){return null!=n&&(n[t]===e&&(void 0!==e||t in Object(n)))}};const F=function(t){var e=M(t);return 1==e.length&&e[0][2]?I(e[0][0],e[0][1]):function(n){return n===t||B(n,t,e)}};var $=n(3317);const R=function(t,e,n){var r=null==t?void 0:(0,$.Z)(t,e);return void 0===r?n:r};var Z=n(5487),P=n(9365),j=n(2281);const Y=function(t,e){return(0,P.Z)(t)&&D(e)?I((0,j.Z)(t),e):function(n){var r=R(n,t);return void 0===r&&r===e?(0,Z.Z)(n,t):L(e,r,3)}};var z=n(9203),U=n(4193);const W=function(t){return function(e){return(0,$.Z)(e,t)}};const q=function(t){return(0,P.Z)(t)?(0,U.Z)((0,j.Z)(t)):W(t)};const H=function(t){return"function"==typeof t?t:null==t?z.Z:"object"==typeof t?(0,x.Z)(t)?Y(t[0],t[1]):F(t):q(t)}},9473:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(2764);const i=(0,n(1851).Z)(Object.keys,Object);var a=Object.prototype.hasOwnProperty;const s=function(t){if(!(0,r.Z)(t))return i(t);var e=[];for(var n in Object(t))a.call(t,n)&&"constructor"!=n&&e.push(n);return e}},1018:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(9811),i=n(585);const a=function(t,e){var n=-1,a=(0,i.Z)(t)?Array(t.length):[];return(0,r.Z)(t,(function(t,r,i){a[++n]=e(t,r,i)})),a}},4193:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return null==e?void 0:e[t]}}},9581:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(9203),i=n(1211),a=n(7227);const s=function(t,e){return(0,a.Z)((0,i.Z)(t,e,r.Z),t+"")}},1162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return t(e)}}},9548:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t.has(e)}},8882:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(9203);const i=function(t){return"function"==typeof t?t:r.Z}},2823:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7771),i=n(9365),a=n(2454);var s=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,o=/\\(\\)?/g;const c=function(t){var e=(0,a.Z)(t,(function(t){return 500===n.size&&n.clear(),t})),n=e.cache;return e}((function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(s,(function(t,n,r,i){e.push(r?i.replace(o,"$1"):n||t)})),e}));var l=n(751);const h=function(t,e){return(0,r.Z)(t)?t:(0,i.Z)(t,e)?[t]:c((0,l.Z)(t))}},1884:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7623);const i=function(t){var e=new t.constructor(t.byteLength);return new r.Z(e).set(new r.Z(t)),e}},1050:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i?r.Z.Buffer:void 0,o=s?s.allocUnsafe:void 0;const c=function(t,e){if(e)return t.slice();var n=t.length,r=o?o(n):new t.constructor(n);return t.copy(r),r}},2701:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1884);const i=function(t,e){var n=e?(0,r.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}},7215:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){var n=-1,r=t.length;for(e||(e=Array(r));++n<r;)e[n]=t[n];return e}},1899:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2954),i=n(4752);const a=function(t,e,n,a){var s=!n;n||(n={});for(var o=-1,c=e.length;++o<c;){var l=e[o],h=a?a(n[l],t[l],l,n,t):void 0;void 0===h&&(h=t[l]),s?(0,i.Z)(n,l,h):(0,r.Z)(n,l,h)}return n}},7904:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2508);const i=function(){try{var t=(0,r.Z)(Object,"defineProperty");return t({},"",{}),t}catch(e){}}()},3413:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r="object"==typeof global&&global&&global.Object===Object&&global},1808:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(3327),i=n(5695),a=n(7179);const s=function(t){return(0,r.Z)(t,a.Z,i.Z)}},2508:(t,e,n)=>{"use strict";n.d(e,{Z:()=>b});var r=n(3234);const i=n(6092).Z["__core-js_shared__"];var a,s=(a=/[^.]+$/.exec(i&&i.keys&&i.keys.IE_PROTO||""))?"Symbol(src)_1."+a:"";const o=function(t){return!!s&&s in t};var c=n(7226),l=n(19),h=/^\[object .+?Constructor\]$/,u=Function.prototype,d=Object.prototype,p=u.toString,f=d.hasOwnProperty,g=RegExp("^"+p.call(f).replace(/[\\^$.*+?()[\]{}|]/g,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$");const y=function(t){return!(!(0,c.Z)(t)||o(t))&&((0,r.Z)(t)?g:h).test((0,l.Z)(t))};const m=function(t,e){return null==t?void 0:t[e]};const b=function(t,e){var n=m(t,e);return y(n)?n:void 0}},2513:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=(0,n(1851).Z)(Object.getPrototypeOf,Object)},5695:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(8774),i=n(532),a=Object.prototype.propertyIsEnumerable,s=Object.getOwnPropertySymbols;const o=s?function(t){return null==t?[]:(t=Object(t),(0,r.Z)(s(t),(function(e){return a.call(t,e)})))}:i.Z},3970:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"DataView");var s=n(6183);const o=(0,r.Z)(i.Z,"Promise");var c=n(3203);const l=(0,r.Z)(i.Z,"WeakMap");var h=n(3589),u=n(19),d="[object Map]",p="[object Promise]",f="[object Set]",g="[object WeakMap]",y="[object DataView]",m=(0,u.Z)(a),b=(0,u.Z)(s.Z),_=(0,u.Z)(o),x=(0,u.Z)(c.Z),v=(0,u.Z)(l),k=h.Z;(a&&k(new a(new ArrayBuffer(1)))!=y||s.Z&&k(new s.Z)!=d||o&&k(o.resolve())!=p||c.Z&&k(new c.Z)!=f||l&&k(new l)!=g)&&(k=function(t){var e=(0,h.Z)(t),n="[object Object]"==e?t.constructor:void 0,r=n?(0,u.Z)(n):"";if(r)switch(r){case m:return y;case b:return d;case _:return p;case x:return f;case v:return g}return e});const w=k},6174:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(2823),i=n(9169),a=n(7771),s=n(6009),o=n(1656),c=n(2281);const l=function(t,e,n){for(var l=-1,h=(e=(0,r.Z)(e,t)).length,u=!1;++l<h;){var d=(0,c.Z)(e[l]);if(!(u=null!=t&&n(t,d)))break;t=t[d]}return u||++l!=h?u:!!(h=null==t?0:t.length)&&(0,o.Z)(h)&&(0,s.Z)(d,h)&&((0,a.Z)(t)||(0,i.Z)(t))}},3658:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(7226),i=Object.create;const a=function(){function t(){}return function(e){if(!(0,r.Z)(e))return{};if(i)return i(e);t.prototype=e;var n=new t;return t.prototype=void 0,n}}();var s=n(2513),o=n(2764);const c=function(t){return"function"!=typeof t.constructor||(0,o.Z)(t)?{}:a((0,s.Z)(t))}},6009:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=/^(?:0|[1-9]\d*)$/;const i=function(t,e){var n=typeof t;return!!(e=null==e?9007199254740991:e)&&("number"==n||"symbol"!=n&&r.test(t))&&t>-1&&t%1==0&&t<e}},439:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(9651),i=n(585),a=n(6009),s=n(7226);const o=function(t,e,n){if(!(0,s.Z)(n))return!1;var o=typeof e;return!!("number"==o?(0,i.Z)(n)&&(0,a.Z)(e,n.length):"string"==o&&e in n)&&(0,r.Z)(n[e],t)}},9365:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7771),i=n(2714),a=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,s=/^\w*$/;const o=function(t,e){if((0,r.Z)(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!(0,i.Z)(t))||(s.test(t)||!a.test(t)||null!=e&&t in Object(e))}},2764:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Object.prototype;const i=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||r)}},8351:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(3413),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i&&r.Z.process;const o=function(){try{var t=a&&a.require&&a.require("util").types;return t||s&&s.binding&&s.binding("util")}catch(e){}}()},1851:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return function(n){return t(e(n))}}},1211:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)};var i=Math.max;const a=function(t,e,n){return e=i(void 0===e?t.length-1:e,0),function(){for(var a=arguments,s=-1,o=i(a.length-e,0),c=Array(o);++s<o;)c[s]=a[e+s];s=-1;for(var l=Array(e+1);++s<e;)l[s]=a[s];return l[e]=n(c),r(t,this,l)}}},6092:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3413),i="object"==typeof self&&self&&self.Object===Object&&self;const a=r.Z||i||Function("return this")()},6545:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t){n[++e]=t})),n}},7227:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(2002),i=n(7904),a=n(9203);const s=i.Z?function(t,e){return(0,i.Z)(t,"toString",{configurable:!0,enumerable:!1,value:(0,r.Z)(e),writable:!0})}:a.Z;var o=Date.now;const c=function(t){var e=0,n=0;return function(){var r=o(),i=16-(r-n);if(n=r,i>0){if(++e>=800)return arguments[0]}else e=0;return t.apply(void 0,arguments)}}(s)},2281:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2714);const i=function(t){if("string"==typeof t||(0,r.Z)(t))return t;var e=t+"";return"0"==e&&1/t==-Infinity?"-0":e}},19:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Function.prototype.toString;const i=function(t){if(null!=t){try{return r.call(t)}catch(e){}try{return t+""}catch(e){}}return""}},2002:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(){return t}}},3688:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(9581),i=n(9651),a=n(439),s=n(2957),o=Object.prototype,c=o.hasOwnProperty;const l=(0,r.Z)((function(t,e){t=Object(t);var n=-1,r=e.length,l=r>2?e[2]:void 0;for(l&&(0,a.Z)(e[0],e[1],l)&&(r=1);++n<r;)for(var h=e[n],u=(0,s.Z)(h),d=-1,p=u.length;++d<p;){var f=u[d],g=t[f];(void 0===g||(0,i.Z)(g,o[f])&&!c.call(t,f))&&(t[f]=h[f])}return t}))},9651:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t===e||t!=t&&e!=e}},3445:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(8774),i=n(9811);const a=function(t,e){var n=[];return(0,i.Z)(t,(function(t,r,i){e(t,r,i)&&n.push(t)})),n};var s=n(4765),o=n(7771);const c=function(t,e){return((0,o.Z)(t)?r.Z:a)(t,(0,s.Z)(e,3))}},7961:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(626);const i=function(t){return(null==t?0:t.length)?(0,r.Z)(t,1):[]}},870:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(6579),i=n(9811),a=n(8882),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:i.Z)(t,(0,a.Z)(e))}},7452:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=Object.prototype.hasOwnProperty;const i=function(t,e){return null!=t&&r.call(t,e)};var a=n(6174);const s=function(t,e){return null!=t&&(0,a.Z)(t,e,i)}},5487:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e){return null!=t&&e in Object(t)};var i=n(6174);const a=function(t,e){return null!=t&&(0,i.Z)(t,e,r)}},9203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return t}},9169:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(3589),i=n(8533);const a=function(t){return(0,i.Z)(t)&&"[object Arguments]"==(0,r.Z)(t)};var s=Object.prototype,o=s.hasOwnProperty,c=s.propertyIsEnumerable;const l=a(function(){return arguments}())?a:function(t){return(0,i.Z)(t)&&o.call(t,"callee")&&!c.call(t,"callee")}},7771:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=Array.isArray},585:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3234),i=n(1656);const a=function(t){return null!=t&&(0,i.Z)(t.length)&&!(0,r.Z)(t)}},836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(585),i=n(8533);const a=function(t){return(0,i.Z)(t)&&(0,r.Z)(t)}},7008:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092);const i=function(){return!1};var a="object"==typeof exports&&exports&&!exports.nodeType&&exports,s=a&&"object"==typeof module&&module&&!module.nodeType&&module,o=s&&s.exports===a?r.Z.Buffer:void 0;const c=(o?o.isBuffer:void 0)||i},9697:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(9473),i=n(3970),a=n(9169),s=n(7771),o=n(585),c=n(7008),l=n(2764),h=n(8843),u=Object.prototype.hasOwnProperty;const d=function(t){if(null==t)return!0;if((0,o.Z)(t)&&((0,s.Z)(t)||"string"==typeof t||"function"==typeof t.splice||(0,c.Z)(t)||(0,h.Z)(t)||(0,a.Z)(t)))return!t.length;var e=(0,i.Z)(t);if("[object Map]"==e||"[object Set]"==e)return!t.size;if((0,l.Z)(t))return!(0,r.Z)(t).length;for(var n in t)if(u.call(t,n))return!1;return!0}},3234:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(7226);const a=function(t){if(!(0,i.Z)(t))return!1;var e=(0,r.Z)(t);return"[object Function]"==e||"[object GeneratorFunction]"==e||"[object AsyncFunction]"==e||"[object Proxy]"==e}},1656:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=9007199254740991}},7226:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},8533:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return null!=t&&"object"==typeof t}},7514:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(2513),a=n(8533),s=Function.prototype,o=Object.prototype,c=s.toString,l=o.hasOwnProperty,h=c.call(Object);const u=function(t){if(!(0,a.Z)(t)||"[object Object]"!=(0,r.Z)(t))return!1;var e=(0,i.Z)(t);if(null===e)return!0;var n=l.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&c.call(n)==h}},2714:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(8533);const a=function(t){return"symbol"==typeof t||(0,i.Z)(t)&&"[object Symbol]"==(0,r.Z)(t)}},8843:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(1656),a=n(8533),s={};s["[object Float32Array]"]=s["[object Float64Array]"]=s["[object Int8Array]"]=s["[object Int16Array]"]=s["[object Int32Array]"]=s["[object Uint8Array]"]=s["[object Uint8ClampedArray]"]=s["[object Uint16Array]"]=s["[object Uint32Array]"]=!0,s["[object Arguments]"]=s["[object Array]"]=s["[object ArrayBuffer]"]=s["[object Boolean]"]=s["[object DataView]"]=s["[object Date]"]=s["[object Error]"]=s["[object Function]"]=s["[object Map]"]=s["[object Number]"]=s["[object Object]"]=s["[object RegExp]"]=s["[object Set]"]=s["[object String]"]=s["[object WeakMap]"]=!1;const o=function(t){return(0,a.Z)(t)&&(0,i.Z)(t.length)&&!!s[(0,r.Z)(t)]};var c=n(1162),l=n(8351),h=l.Z&&l.Z.isTypedArray;const u=h?(0,c.Z)(h):o},9360:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return void 0===t}},7179:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7668),i=n(9473),a=n(585);const s=function(t){return(0,a.Z)(t)?(0,r.Z)(t):(0,i.Z)(t)}},2957:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7668),i=n(7226),a=n(2764);const s=function(t){var e=[];if(null!=t)for(var n in Object(t))e.push(n);return e};var o=Object.prototype.hasOwnProperty;const c=function(t){if(!(0,i.Z)(t))return s(t);var e=(0,a.Z)(t),n=[];for(var r in t)("constructor"!=r||!e&&o.call(t,r))&&n.push(r);return n};var l=n(585);const h=function(t){return(0,l.Z)(t)?(0,r.Z)(t,!0):c(t)}},3836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(4073),i=n(4765),a=n(1018),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:a.Z)(t,(0,i.Z)(e,3))}},2454:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(7834);function i(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new TypeError("Expected a function");var n=function(){var r=arguments,i=e?e.apply(this,r):r[0],a=n.cache;if(a.has(i))return a.get(i);var s=t.apply(this,r);return n.cache=a.set(i,s)||a,s};return n.cache=new(i.Cache||r.Z),n}i.Cache=r.Z;const a=i},1666:(t,e,n)=>{"use strict";n.d(e,{Z:()=>y});var r=n(3317),i=n(2954),a=n(2823),s=n(6009),o=n(7226),c=n(2281);const l=function(t,e,n,r){if(!(0,o.Z)(t))return t;for(var l=-1,h=(e=(0,a.Z)(e,t)).length,u=h-1,d=t;null!=d&&++l<h;){var p=(0,c.Z)(e[l]),f=n;if("__proto__"===p||"constructor"===p||"prototype"===p)return t;if(l!=u){var g=d[p];void 0===(f=r?r(g,p,d):void 0)&&(f=(0,o.Z)(g)?g:(0,s.Z)(e[l+1])?[]:{})}(0,i.Z)(d,p,f),d=d[p]}return t};const h=function(t,e,n){for(var i=-1,s=e.length,o={};++i<s;){var c=e[i],h=(0,r.Z)(t,c);n(h,c)&&l(o,(0,a.Z)(c,t),h)}return o};var u=n(5487);const d=function(t,e){return h(t,e,(function(e,n){return(0,u.Z)(t,n)}))};var p=n(7961),f=n(1211),g=n(7227);const y=function(t){return(0,g.Z)((0,f.Z)(t,void 0,p.Z),t+"")}((function(t,e){return null==t?{}:d(t,e)}))},4379:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=Math.ceil,i=Math.max;const a=function(t,e,n,a){for(var s=-1,o=i(r((e-t)/(n||1)),0),c=Array(o);o--;)c[a?o:++s]=t,t+=n;return c};var s=n(439),o=n(4099);const c=function(t){return function(e,n,r){return r&&"number"!=typeof r&&(0,s.Z)(e,n,r)&&(n=r=void 0),e=(0,o.Z)(e),void 0===n?(n=e,e=0):n=(0,o.Z)(n),r=void 0===r?e<n?1:-1:(0,o.Z)(r),a(e,n,r,t)}}()},2344:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});const r=function(t,e,n,r){var i=-1,a=null==t?0:t.length;for(r&&a&&(n=t[++i]);++i<a;)n=e(n,t[i],i,t);return n};var i=n(9811),a=n(4765);const s=function(t,e,n,r,i){return i(t,(function(t,i,a){n=r?(r=!1,t):e(n,t,i,a)})),n};var o=n(7771);const c=function(t,e,n){var c=(0,o.Z)(t)?r:s,l=arguments.length<3;return c(t,(0,a.Z)(e,4),n,l,i.Z)}},532:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(){return[]}},4099:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=/\s/;const i=function(t){for(var e=t.length;e--&&r.test(t.charAt(e)););return e};var a=/^\s+/;const s=function(t){return t?t.slice(0,i(t)+1).replace(a,""):t};var o=n(7226),c=n(2714),l=/^[-+]0x[0-9a-f]+$/i,h=/^0b[01]+$/i,u=/^0o[0-7]+$/i,d=parseInt;const p=function(t){if("number"==typeof t)return t;if((0,c.Z)(t))return NaN;if((0,o.Z)(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=(0,o.Z)(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=s(t);var n=h.test(t);return n||u.test(t)?d(t.slice(2),n?2:8):l.test(t)?NaN:+t};var f=1/0;const g=function(t){return t?(t=p(t))===f||t===-1/0?17976931348623157e292*(t<0?-1:1):t==t?t:0:0===t?t:0}},751:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7685),i=n(4073),a=n(7771),s=n(2714),o=r.Z?r.Z.prototype:void 0,c=o?o.toString:void 0;const l=function t(e){if("string"==typeof e)return e;if((0,a.Z)(e))return(0,i.Z)(e,t)+"";if((0,s.Z)(e))return c?c.call(e):"";var n=e+"";return"0"==n&&1/e==-Infinity?"-0":n};const h=function(t){return null==t?"":l(t)}},6749:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(751),i=0;const a=function(t){var e=++i;return(0,r.Z)(t)+e}},4148:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4073);const i=function(t,e){return(0,r.Z)(e,(function(e){return t[e]}))};var a=n(7179);const s=function(t){return null==t?[]:i(t,(0,a.Z)(t))}}}]);
\ No newline at end of file
diff --git a/assets/js/4972.8e6a9569.js b/assets/js/4972.8e6a9569.js
new file mode 100644
index 000000000..6c5c128de
--- /dev/null
+++ b/assets/js/4972.8e6a9569.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4972],{4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(1944),r=n(1573);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}}}]);
\ No newline at end of file
diff --git a/assets/js/4972.f742b7fa.js b/assets/js/4972.f742b7fa.js
deleted file mode 100644
index 7406f8355..000000000
--- a/assets/js/4972.f742b7fa.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4972],{4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(833),r=n(6999);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}}}]);
\ No newline at end of file
diff --git a/assets/js/4a667cf9.c1544208.js b/assets/js/4a667cf9.04930927.js
similarity index 99%
rename from assets/js/4a667cf9.c1544208.js
rename to assets/js/4a667cf9.04930927.js
index a63f1c649..a8d4a4361 100644
--- a/assets/js/4a667cf9.c1544208.js
+++ b/assets/js/4a667cf9.04930927.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9477],{3905:(e,n,t)=>{t.d(n,{Zo:()=>d,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function l(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function o(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?l(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):l(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function s(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var i=a.createContext({}),c=function(e){var n=a.useContext(i),t=n;return e&&(t="function"==typeof e?e(n):o(o({},n),e)),t},d=function(e){var n=c(e.components);return a.createElement(i.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},u=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,d=s(e,["components","mdxType","originalType","parentName"]),u=c(t),m=r,k=u["".concat(i,".").concat(m)]||u[m]||p[m]||l;return t?a.createElement(k,o(o({ref:n},d),{},{components:t})):a.createElement(k,o({ref:n},d))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var l=t.length,o=new Array(l);o[0]=u;var s={};for(var i in n)hasOwnProperty.call(n,i)&&(s[i]=n[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<l;c++)o[c]=t[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,t)}u.displayName="MDXCreateElement"},2747:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>i,contentTitle:()=>o,default:()=>k,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const l={title:"Cluster Load Balancer",weight:30},o=void 0,s={unversionedId:"datastore/cluster-loadbalancer",id:"datastore/cluster-loadbalancer",title:"Cluster Load Balancer",description:"This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster's server nodes. Two examples are provided: Nginx and HAProxy.",source:"@site/docs/datastore/cluster-loadbalancer.md",sourceDirName:"datastore",slug:"/datastore/cluster-loadbalancer",permalink:"/datastore/cluster-loadbalancer",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Cluster Load Balancer",weight:30},sidebar:"mySidebar",previous:{title:"High Availability External DB",permalink:"/datastore/ha"},next:{title:"Cluster Access",permalink:"/cluster-access/"}},i={},c=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Setup Load Balancer",id:"setup-load-balancer",level:2},{value:"Nginx Load Balancer",id:"nginx-load-balancer",level:2}],d=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=d("Tabs"),u=d("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster's server nodes. Two examples are provided: Nginx and HAProxy."),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"External load-balancers should not be confused with the embedded ServiceLB, which is an embedded controller that allows for use of Kubernetes LoadBalancer Services without deploying a third-party load-balancer controller. For more details, see ",(0,r.kt)("a",{parentName:"p",href:"/networking/#service-load-balancer"},"Service Load Balancer"),". "),(0,r.kt)("p",{parentName:"admonition"},"External load-balancers can be used to provide a fixed registration address for registering nodes, or for external access to the Kubernetes API Server. For exposing LoadBalancer Services, external load-balancers can be used alongside or instead of ServiceLB, but in most cases, replacement load-balancer controllers such as MetalLB or Kube-VIP are a better choice.")),(0,r.kt)("h2",{id:"prerequisites"},"Prerequisites"),(0,r.kt)("p",null,"All nodes in this example are running Ubuntu 20.04."),(0,r.kt)("p",null,"For both examples, assume that a ",(0,r.kt)("a",{parentName:"p",href:"/datastore/ha-embedded"},"HA K3s cluster with embedded etcd")," has been installed on 3 nodes."),(0,r.kt)("p",null,"Each k3s server is configured with:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"# /etc/rancher/k3s/config.yaml\ntoken: lb-cluster-gd\ntls-san: 10.10.10.100\n")),(0,r.kt)("p",null,"The nodes have hostnames and IPs of: "),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"server-1: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.50")),(0,r.kt)("li",{parentName:"ul"},"server-2: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.51")),(0,r.kt)("li",{parentName:"ul"},"server-3: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.52"))),(0,r.kt)("p",null,"Two additional nodes for load balancing are configured with hostnames and IPs of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"lb-1: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.98")),(0,r.kt)("li",{parentName:"ul"},"lb-2: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.99"))),(0,r.kt)("p",null,"Three additional nodes exist with hostnames and IPs of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"agent-1: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.101")),(0,r.kt)("li",{parentName:"ul"},"agent-2: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.102")),(0,r.kt)("li",{parentName:"ul"},"agent-3: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.103"))),(0,r.kt)("h2",{id:"setup-load-balancer"},"Setup Load Balancer"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(u,{value:"HAProxy",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"http://www.haproxy.org/"},"HAProxy")," is an open source option that provides a TCP load balancer. It also supports HA for the load balancer itself, ensuring redundancy at all levels. See ",(0,r.kt)("a",{parentName:"p",href:"http://docs.haproxy.org/2.8/intro.html"},"HAProxy Documentation")," for more info."),(0,r.kt)("p",null,"Additionally, we will use KeepAlived to generate a virtual IP (VIP) that will be used to access the cluster. See ",(0,r.kt)("a",{parentName:"p",href:"https://www.keepalived.org/manpage.html"},"KeepAlived Documentation")," for more info."),(0,r.kt)("p",null,"1) Install HAProxy and KeepAlived:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt-get install haproxy keepalived\n")),(0,r.kt)("p",null,"2) Add the following to ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/haproxy/haproxy.cfg")," on lb-1 and lb-2:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"frontend k3s-frontend\n    bind *:6443\n    mode tcp\n    option tcplog\n    default_backend k3s-backend\n\nbackend k3s-backend\n    mode tcp\n    option tcp-check\n    balance roundrobin\n    default-server inter 10s downinter 5s\n    server server-1 10.10.10.50:6443 check\n    server server-2 10.10.10.51:6443 check\n    server server-3 10.10.10.52:6443 check\n")),(0,r.kt)("p",null,"3) Add the following to ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/keepalived/keepalived.conf")," on lb-1 and lb-2:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"vrrp_script chk_haproxy {\n    script 'killall -0 haproxy' # faster than pidof\n    interval 2\n}\n\nvrrp_instance haproxy-vip {\n   interface eth1\n    state <STATE> # MASTER on lb-1, BACKUP on lb-2\n    priority <PRIORITY> # 200 on lb-1, 100 on lb-2\n\n    virtual_router_id 51\n\n    virtual_ipaddress {\n        10.10.10.100/24\n    }\n\n    track_script {\n        chk_haproxy\n    }\n}\n")),(0,r.kt)("p",null,"6) Restart HAProxy and KeepAlived on lb-1 and lb-2:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl restart haproxy\nsystemctl restart keepalived\n")),(0,r.kt)("p",null,"5) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=lb-cluster-gd sh -s - agent --server https://10.10.10.100:6443\n")),(0,r.kt)("p",null,"You can now use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl")," from server node to interact with the cluster."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"root@server-1 $ k3s kubectl get nodes -A\nNAME       STATUS   ROLES                       AGE     VERSION\nagent-1    Ready    <none>                      32s     v1.27.3+k3s1\nagent-2    Ready    <none>                      20s     v1.27.3+k3s1\nagent-3    Ready    <none>                      9s      v1.27.3+k3s1\nserver-1   Ready    control-plane,etcd,master   4m22s   v1.27.3+k3s1\nserver-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1\nserver-3   Ready    control-plane,etcd,master   3m12s   v1.27.3+k3s1\n"))),(0,r.kt)(u,{value:"Nginx",mdxType:"TabItem"},(0,r.kt)("h2",{id:"nginx-load-balancer"},"Nginx Load Balancer"),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"Nginx does not natively support a High Availability (HA) configuration. If setting up an HA cluster, having a single load balancer in front of K3s will reintroduce a single point of failure.")),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"http://nginx.org/"},"Nginx Open Source")," provides a TCP load balancer. See ",(0,r.kt)("a",{parentName:"p",href:"https://nginx.org/en/docs/http/load_balancing.html"},"Using nginx as HTTP load balancer")," for more info."),(0,r.kt)("p",null,"1) Create a ",(0,r.kt)("inlineCode",{parentName:"p"},"nginx.conf")," file on lb-1 with the following contents:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"events {}\n\nstream {\n  upstream k3s_servers {\n    server 10.10.10.50:6443;\n    server 10.10.10.51:6443;\n    server 10.10.10.52:6443;\n  }\n\n  server {\n    listen 6443;\n    proxy_pass k3s_servers;\n  }\n}\n")),(0,r.kt)("p",null,"2) Run the Nginx load balancer on lb-1:"),(0,r.kt)("p",null,"Using docker:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"docker run -d --restart unless-stopped \\\n    -v ${PWD}/nginx.conf:/etc/nginx/nginx.conf \\\n    -p 6443:6443 \\\n    nginx:stable\n")),(0,r.kt)("p",null,"Or ",(0,r.kt)("a",{parentName:"p",href:"https://docs.nginx.com/nginx/admin-guide/installing-nginx/installing-nginx-open-source/"},"install nginx")," and then run:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"cp nginx.conf /etc/nginx/nginx.conf\nsystemctl start nginx\n")),(0,r.kt)("p",null,"3) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=lb-cluster-gd sh -s - agent --server https://10.10.10.99:6443\n")),(0,r.kt)("p",null,"You can now use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl")," from server node to interact with the cluster."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"root@server1 $ k3s kubectl get nodes -A\nNAME       STATUS   ROLES                       AGE     VERSION\nagent-1    Ready    <none>                      30s     v1.27.3+k3s1\nagent-2    Ready    <none>                      22s     v1.27.3+k3s1\nagent-3    Ready    <none>                      13s     v1.27.3+k3s1\nserver-1   Ready    control-plane,etcd,master   4m49s   v1.27.3+k3s1\nserver-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1\nserver-3   Ready    control-plane,etcd,master   3m16s   v1.27.3+k3s1\n")))))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9477],{3905:(e,n,t)=>{t.d(n,{Zo:()=>d,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function l(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function o(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?l(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):l(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function s(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var i=a.createContext({}),c=function(e){var n=a.useContext(i),t=n;return e&&(t="function"==typeof e?e(n):o(o({},n),e)),t},d=function(e){var n=c(e.components);return a.createElement(i.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},u=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,d=s(e,["components","mdxType","originalType","parentName"]),u=c(t),m=r,k=u["".concat(i,".").concat(m)]||u[m]||p[m]||l;return t?a.createElement(k,o(o({ref:n},d),{},{components:t})):a.createElement(k,o({ref:n},d))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var l=t.length,o=new Array(l);o[0]=u;var s={};for(var i in n)hasOwnProperty.call(n,i)&&(s[i]=n[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<l;c++)o[c]=t[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,t)}u.displayName="MDXCreateElement"},2747:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>i,contentTitle:()=>o,default:()=>k,frontMatter:()=>l,metadata:()=>s,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const l={title:"Cluster Load Balancer",weight:30},o=void 0,s={unversionedId:"datastore/cluster-loadbalancer",id:"datastore/cluster-loadbalancer",title:"Cluster Load Balancer",description:"This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster's server nodes. Two examples are provided: Nginx and HAProxy.",source:"@site/docs/datastore/cluster-loadbalancer.md",sourceDirName:"datastore",slug:"/datastore/cluster-loadbalancer",permalink:"/datastore/cluster-loadbalancer",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Cluster Load Balancer",weight:30},sidebar:"mySidebar",previous:{title:"High Availability External DB",permalink:"/datastore/ha"},next:{title:"Cluster Access",permalink:"/cluster-access/"}},i={},c=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Setup Load Balancer",id:"setup-load-balancer",level:2},{value:"Nginx Load Balancer",id:"nginx-load-balancer",level:2}],d=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=d("Tabs"),u=d("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster's server nodes. Two examples are provided: Nginx and HAProxy."),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"External load-balancers should not be confused with the embedded ServiceLB, which is an embedded controller that allows for use of Kubernetes LoadBalancer Services without deploying a third-party load-balancer controller. For more details, see ",(0,r.kt)("a",{parentName:"p",href:"/networking/#service-load-balancer"},"Service Load Balancer"),". "),(0,r.kt)("p",{parentName:"admonition"},"External load-balancers can be used to provide a fixed registration address for registering nodes, or for external access to the Kubernetes API Server. For exposing LoadBalancer Services, external load-balancers can be used alongside or instead of ServiceLB, but in most cases, replacement load-balancer controllers such as MetalLB or Kube-VIP are a better choice.")),(0,r.kt)("h2",{id:"prerequisites"},"Prerequisites"),(0,r.kt)("p",null,"All nodes in this example are running Ubuntu 20.04."),(0,r.kt)("p",null,"For both examples, assume that a ",(0,r.kt)("a",{parentName:"p",href:"/datastore/ha-embedded"},"HA K3s cluster with embedded etcd")," has been installed on 3 nodes."),(0,r.kt)("p",null,"Each k3s server is configured with:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"# /etc/rancher/k3s/config.yaml\ntoken: lb-cluster-gd\ntls-san: 10.10.10.100\n")),(0,r.kt)("p",null,"The nodes have hostnames and IPs of: "),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"server-1: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.50")),(0,r.kt)("li",{parentName:"ul"},"server-2: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.51")),(0,r.kt)("li",{parentName:"ul"},"server-3: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.52"))),(0,r.kt)("p",null,"Two additional nodes for load balancing are configured with hostnames and IPs of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"lb-1: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.98")),(0,r.kt)("li",{parentName:"ul"},"lb-2: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.99"))),(0,r.kt)("p",null,"Three additional nodes exist with hostnames and IPs of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"agent-1: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.101")),(0,r.kt)("li",{parentName:"ul"},"agent-2: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.102")),(0,r.kt)("li",{parentName:"ul"},"agent-3: ",(0,r.kt)("inlineCode",{parentName:"li"},"10.10.10.103"))),(0,r.kt)("h2",{id:"setup-load-balancer"},"Setup Load Balancer"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(u,{value:"HAProxy",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"http://www.haproxy.org/"},"HAProxy")," is an open source option that provides a TCP load balancer. It also supports HA for the load balancer itself, ensuring redundancy at all levels. See ",(0,r.kt)("a",{parentName:"p",href:"http://docs.haproxy.org/2.8/intro.html"},"HAProxy Documentation")," for more info."),(0,r.kt)("p",null,"Additionally, we will use KeepAlived to generate a virtual IP (VIP) that will be used to access the cluster. See ",(0,r.kt)("a",{parentName:"p",href:"https://www.keepalived.org/manpage.html"},"KeepAlived Documentation")," for more info."),(0,r.kt)("p",null,"1) Install HAProxy and KeepAlived:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt-get install haproxy keepalived\n")),(0,r.kt)("p",null,"2) Add the following to ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/haproxy/haproxy.cfg")," on lb-1 and lb-2:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"frontend k3s-frontend\n    bind *:6443\n    mode tcp\n    option tcplog\n    default_backend k3s-backend\n\nbackend k3s-backend\n    mode tcp\n    option tcp-check\n    balance roundrobin\n    default-server inter 10s downinter 5s\n    server server-1 10.10.10.50:6443 check\n    server server-2 10.10.10.51:6443 check\n    server server-3 10.10.10.52:6443 check\n")),(0,r.kt)("p",null,"3) Add the following to ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/keepalived/keepalived.conf")," on lb-1 and lb-2:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"vrrp_script chk_haproxy {\n    script 'killall -0 haproxy' # faster than pidof\n    interval 2\n}\n\nvrrp_instance haproxy-vip {\n   interface eth1\n    state <STATE> # MASTER on lb-1, BACKUP on lb-2\n    priority <PRIORITY> # 200 on lb-1, 100 on lb-2\n\n    virtual_router_id 51\n\n    virtual_ipaddress {\n        10.10.10.100/24\n    }\n\n    track_script {\n        chk_haproxy\n    }\n}\n")),(0,r.kt)("p",null,"6) Restart HAProxy and KeepAlived on lb-1 and lb-2:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl restart haproxy\nsystemctl restart keepalived\n")),(0,r.kt)("p",null,"5) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=lb-cluster-gd sh -s - agent --server https://10.10.10.100:6443\n")),(0,r.kt)("p",null,"You can now use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl")," from server node to interact with the cluster."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"root@server-1 $ k3s kubectl get nodes -A\nNAME       STATUS   ROLES                       AGE     VERSION\nagent-1    Ready    <none>                      32s     v1.27.3+k3s1\nagent-2    Ready    <none>                      20s     v1.27.3+k3s1\nagent-3    Ready    <none>                      9s      v1.27.3+k3s1\nserver-1   Ready    control-plane,etcd,master   4m22s   v1.27.3+k3s1\nserver-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1\nserver-3   Ready    control-plane,etcd,master   3m12s   v1.27.3+k3s1\n"))),(0,r.kt)(u,{value:"Nginx",mdxType:"TabItem"},(0,r.kt)("h2",{id:"nginx-load-balancer"},"Nginx Load Balancer"),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"Nginx does not natively support a High Availability (HA) configuration. If setting up an HA cluster, having a single load balancer in front of K3s will reintroduce a single point of failure.")),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"http://nginx.org/"},"Nginx Open Source")," provides a TCP load balancer. See ",(0,r.kt)("a",{parentName:"p",href:"https://nginx.org/en/docs/http/load_balancing.html"},"Using nginx as HTTP load balancer")," for more info."),(0,r.kt)("p",null,"1) Create a ",(0,r.kt)("inlineCode",{parentName:"p"},"nginx.conf")," file on lb-1 with the following contents:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"events {}\n\nstream {\n  upstream k3s_servers {\n    server 10.10.10.50:6443;\n    server 10.10.10.51:6443;\n    server 10.10.10.52:6443;\n  }\n\n  server {\n    listen 6443;\n    proxy_pass k3s_servers;\n  }\n}\n")),(0,r.kt)("p",null,"2) Run the Nginx load balancer on lb-1:"),(0,r.kt)("p",null,"Using docker:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"docker run -d --restart unless-stopped \\\n    -v ${PWD}/nginx.conf:/etc/nginx/nginx.conf \\\n    -p 6443:6443 \\\n    nginx:stable\n")),(0,r.kt)("p",null,"Or ",(0,r.kt)("a",{parentName:"p",href:"https://docs.nginx.com/nginx/admin-guide/installing-nginx/installing-nginx-open-source/"},"install nginx")," and then run:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"cp nginx.conf /etc/nginx/nginx.conf\nsystemctl start nginx\n")),(0,r.kt)("p",null,"3) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=lb-cluster-gd sh -s - agent --server https://10.10.10.99:6443\n")),(0,r.kt)("p",null,"You can now use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl")," from server node to interact with the cluster."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"root@server1 $ k3s kubectl get nodes -A\nNAME       STATUS   ROLES                       AGE     VERSION\nagent-1    Ready    <none>                      30s     v1.27.3+k3s1\nagent-2    Ready    <none>                      22s     v1.27.3+k3s1\nagent-3    Ready    <none>                      13s     v1.27.3+k3s1\nserver-1   Ready    control-plane,etcd,master   4m49s   v1.27.3+k3s1\nserver-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1\nserver-3   Ready    control-plane,etcd,master   3m16s   v1.27.3+k3s1\n")))))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/4aae9e46.e0883a3b.js b/assets/js/4aae9e46.0c746bfd.js
similarity index 96%
rename from assets/js/4aae9e46.e0883a3b.js
rename to assets/js/4aae9e46.0c746bfd.js
index ffbf409ce..dc8c2536b 100644
--- a/assets/js/4aae9e46.e0883a3b.js
+++ b/assets/js/4aae9e46.0c746bfd.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4443],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>g});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function l(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?l(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):l(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},l=Object.keys(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=p(r),g=a,f=d["".concat(s,".").concat(g)]||d[g]||u[g]||l;return r?n.createElement(f,i(i({ref:t},c),{},{components:r})):n.createElement(f,i({ref:t},c))}));function g(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=r.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var p=2;p<l;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5080:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>p});var n=r(3117),a=(r(7294),r(3905));const l={title:"Stopping K3s",weight:4},i=void 0,o={unversionedId:"upgrades/killall",id:"upgrades/killall",title:"Stopping K3s",description:"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.",source:"@site/docs/upgrades/killall.md",sourceDirName:"upgrades",slug:"/upgrades/killall",permalink:"/upgrades/killall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Stopping K3s",weight:4},sidebar:"mySidebar",previous:{title:"Upgrades",permalink:"/upgrades/"},next:{title:"Manual Upgrades",permalink:"/upgrades/manual"}},s={},p=[],c={toc:p};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."),(0,a.kt)("p",null,"To stop all of the K3s containers and reset the containerd state, the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," script can be used."),(0,a.kt)("p",null,"The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted."),(0,a.kt)("p",null,"To run the killall script from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-killall.sh\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4443],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>g});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function l(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?l(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):l(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},l=Object.keys(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=p(r),g=a,f=d["".concat(s,".").concat(g)]||d[g]||u[g]||l;return r?n.createElement(f,i(i({ref:t},c),{},{components:r})):n.createElement(f,i({ref:t},c))}));function g(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=r.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var p=2;p<l;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5080:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>p});var n=r(3117),a=(r(7294),r(3905));const l={title:"Stopping K3s",weight:4},i=void 0,o={unversionedId:"upgrades/killall",id:"upgrades/killall",title:"Stopping K3s",description:"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.",source:"@site/docs/upgrades/killall.md",sourceDirName:"upgrades",slug:"/upgrades/killall",permalink:"/upgrades/killall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Stopping K3s",weight:4},sidebar:"mySidebar",previous:{title:"Upgrades",permalink:"/upgrades/"},next:{title:"Manual Upgrades",permalink:"/upgrades/manual"}},s={},p=[],c={toc:p};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."),(0,a.kt)("p",null,"To stop all of the K3s containers and reset the containerd state, the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," script can be used."),(0,a.kt)("p",null,"The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted."),(0,a.kt)("p",null,"To run the killall script from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-killall.sh\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/4e366d5e.22fbc156.js b/assets/js/4e366d5e.056de5cd.js
similarity index 98%
rename from assets/js/4e366d5e.22fbc156.js
rename to assets/js/4e366d5e.056de5cd.js
index 15aa740f5..f416bc8fb 100644
--- a/assets/js/4e366d5e.22fbc156.js
+++ b/assets/js/4e366d5e.056de5cd.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3595],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),p=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},u=function(e){var t=p(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),d=p(r),f=n,m=d["".concat(l,".").concat(f)]||d[f]||c[f]||o;return r?a.createElement(m,s(s({ref:t},u),{},{components:r})):a.createElement(m,s({ref:t},u))}));function f(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,s=new Array(o);s[0]=d;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:n,s[1]=i;for(var p=2;p<o;p++)s[p]=r[p];return a.createElement.apply(null,s)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},1332:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>s,default:()=>c,frontMatter:()=>o,metadata:()=>i,toc:()=>p});var a=r(3117),n=(r(7294),r(3905));const o={title:"Upgrades",weight:25},s=void 0,i={unversionedId:"upgrades/upgrades",id:"upgrades/upgrades",title:"Upgrades",description:"Upgrading your K3s cluster",source:"@site/docs/upgrades/upgrades.md",sourceDirName:"upgrades",slug:"/upgrades/",permalink:"/upgrades/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Upgrades",weight:25},sidebar:"mySidebar",previous:{title:"Cluster Access",permalink:"/cluster-access/"},next:{title:"Stopping K3s",permalink:"/upgrades/killall"}},l={},p=[{value:"Upgrading your K3s cluster",id:"upgrading-your-k3s-cluster",level:3},{value:"Version-specific caveats",id:"version-specific-caveats",level:3}],u={toc:p};function c(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"upgrading-your-k3s-cluster"},"Upgrading your K3s cluster"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/upgrades/manual"},"Manual Upgrades")," describes several techniques for upgrading your cluster manually. It can also be used as a basis for upgrading through third-party Infrastructure-as-Code tools like ",(0,n.kt)("a",{parentName:"p",href:"https://www.terraform.io/"},"Terraform"),"."),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/upgrades/automated"},"Automated Upgrades")," describes how to perform Kubernetes-native automated upgrades using Rancher's ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller"),"."),(0,n.kt)("h3",{id:"version-specific-caveats"},"Version-specific caveats"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"Traefik:")," If Traefik is not disabled, K3s versions 1.20 and earlier will install Traefik v1, while K3s versions 1.21 and later will install Traefik v2, if v1 is not already present. To upgrade from the older Traefik v1 to Traefik v2, please refer to the ",(0,n.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik documentation")," and use the ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"migration tool"),".")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"K3s bootstrap data:")," If you are using K3s in an HA configuration with an external SQL datastore, and your server (control-plane) nodes were not started with the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," CLI flag, you will no longer be able to add additional K3s servers to the cluster without specifying the token. Ensure that you retain a copy of this token, as it is required when restoring from backup. Previously, K3s did not enforce the use of a token when using external SQL datastores. "),(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"The affected versions are <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; the patched versions are v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1.")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"You may retrieve the token value from any server already joined to the cluster as follows:"))))),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Experimental Dqlite:")," The experimental embedded Dqlite data store was deprecated in K3s v1.19.1. Please note that upgrades from experimental Dqlite to experimental embedded etcd are not supported. If you attempt an upgrade, it will not succeed, and data will be lost.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3595],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),p=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},u=function(e){var t=p(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),d=p(r),f=n,m=d["".concat(l,".").concat(f)]||d[f]||c[f]||o;return r?a.createElement(m,s(s({ref:t},u),{},{components:r})):a.createElement(m,s({ref:t},u))}));function f(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,s=new Array(o);s[0]=d;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:n,s[1]=i;for(var p=2;p<o;p++)s[p]=r[p];return a.createElement.apply(null,s)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},1332:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>s,default:()=>c,frontMatter:()=>o,metadata:()=>i,toc:()=>p});var a=r(3117),n=(r(7294),r(3905));const o={title:"Upgrades",weight:25},s=void 0,i={unversionedId:"upgrades/upgrades",id:"upgrades/upgrades",title:"Upgrades",description:"Upgrading your K3s cluster",source:"@site/docs/upgrades/upgrades.md",sourceDirName:"upgrades",slug:"/upgrades/",permalink:"/upgrades/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Upgrades",weight:25},sidebar:"mySidebar",previous:{title:"Cluster Access",permalink:"/cluster-access/"},next:{title:"Stopping K3s",permalink:"/upgrades/killall"}},l={},p=[{value:"Upgrading your K3s cluster",id:"upgrading-your-k3s-cluster",level:3},{value:"Version-specific caveats",id:"version-specific-caveats",level:3}],u={toc:p};function c(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"upgrading-your-k3s-cluster"},"Upgrading your K3s cluster"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/upgrades/manual"},"Manual Upgrades")," describes several techniques for upgrading your cluster manually. It can also be used as a basis for upgrading through third-party Infrastructure-as-Code tools like ",(0,n.kt)("a",{parentName:"p",href:"https://www.terraform.io/"},"Terraform"),"."),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/upgrades/automated"},"Automated Upgrades")," describes how to perform Kubernetes-native automated upgrades using Rancher's ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller"),"."),(0,n.kt)("h3",{id:"version-specific-caveats"},"Version-specific caveats"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"Traefik:")," If Traefik is not disabled, K3s versions 1.20 and earlier will install Traefik v1, while K3s versions 1.21 and later will install Traefik v2, if v1 is not already present. To upgrade from the older Traefik v1 to Traefik v2, please refer to the ",(0,n.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik documentation")," and use the ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"migration tool"),".")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"K3s bootstrap data:")," If you are using K3s in an HA configuration with an external SQL datastore, and your server (control-plane) nodes were not started with the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," CLI flag, you will no longer be able to add additional K3s servers to the cluster without specifying the token. Ensure that you retain a copy of this token, as it is required when restoring from backup. Previously, K3s did not enforce the use of a token when using external SQL datastores. "),(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"The affected versions are <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; the patched versions are v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1.")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"You may retrieve the token value from any server already joined to the cluster as follows:"))))),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Experimental Dqlite:")," The experimental embedded Dqlite data store was deprecated in K3s v1.19.1. Please note that upgrades from experimental Dqlite to experimental embedded etcd are not supported. If you attempt an upgrade, it will not succeed, and data will be lost.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/4fea1ac4.117e086d.js b/assets/js/4fea1ac4.d47656f7.js
similarity index 98%
rename from assets/js/4fea1ac4.117e086d.js
rename to assets/js/4fea1ac4.d47656f7.js
index c9a399ad7..0fa7347eb 100644
--- a/assets/js/4fea1ac4.117e086d.js
+++ b/assets/js/4fea1ac4.d47656f7.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1073],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>g});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=u(n),g=a,f=d["".concat(s,".").concat(g)]||d[g]||p[g]||l;return n?r.createElement(f,i(i({ref:t},c),{},{components:n})):r.createElement(f,i({ref:t},c))}));function g(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},9087:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={title:"Uninstalling K3s",weight:61},i=void 0,o={unversionedId:"installation/uninstall",id:"installation/uninstall",title:"Uninstalling K3s",description:"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",source:"@site/docs/installation/uninstall.md",sourceDirName:"installation",slug:"/installation/uninstall",permalink:"/installation/uninstall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Uninstalling K3s",weight:61},sidebar:"mySidebar",previous:{title:"Kubernetes Dashboard",permalink:"/installation/kube-dashboard"},next:{title:"Cluster Datastore",permalink:"/datastore/"}},s={},u=[{value:"Uninstalling Servers",id:"uninstalling-servers",level:3},{value:"Uninstalling Agents",id:"uninstalling-agents",level:3}],c={toc:u};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",(0,a.kt)("br",{parentName:"p"}),"\n","It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.")),(0,a.kt)("p",null,"If you installed K3s using the installation script, a script to uninstall K3s was generated during installation."),(0,a.kt)("p",null,"If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the ",(0,a.kt)("a",{parentName:"p",href:"/architecture/#how-agent-node-registration-works"},"Node Registration")," documentation for more information."),(0,a.kt)("h3",{id:"uninstalling-servers"},"Uninstalling Servers"),(0,a.kt)("p",null,"To uninstall K3s from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-uninstall.sh\n")),(0,a.kt)("h3",{id:"uninstalling-agents"},"Uninstalling Agents"),(0,a.kt)("p",null,"To uninstall K3s from an agent node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-agent-uninstall.sh\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1073],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>g});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=u(n),g=a,f=d["".concat(s,".").concat(g)]||d[g]||p[g]||l;return n?r.createElement(f,i(i({ref:t},c),{},{components:n})):r.createElement(f,i({ref:t},c))}));function g(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},9087:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={title:"Uninstalling K3s",weight:61},i=void 0,o={unversionedId:"installation/uninstall",id:"installation/uninstall",title:"Uninstalling K3s",description:"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",source:"@site/docs/installation/uninstall.md",sourceDirName:"installation",slug:"/installation/uninstall",permalink:"/installation/uninstall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Uninstalling K3s",weight:61},sidebar:"mySidebar",previous:{title:"Kubernetes Dashboard",permalink:"/installation/kube-dashboard"},next:{title:"Cluster Datastore",permalink:"/datastore/"}},s={},u=[{value:"Uninstalling Servers",id:"uninstalling-servers",level:3},{value:"Uninstalling Agents",id:"uninstalling-agents",level:3}],c={toc:u};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",(0,a.kt)("br",{parentName:"p"}),"\n","It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.")),(0,a.kt)("p",null,"If you installed K3s using the installation script, a script to uninstall K3s was generated during installation."),(0,a.kt)("p",null,"If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the ",(0,a.kt)("a",{parentName:"p",href:"/architecture/#how-agent-node-registration-works"},"Node Registration")," documentation for more information."),(0,a.kt)("h3",{id:"uninstalling-servers"},"Uninstalling Servers"),(0,a.kt)("p",null,"To uninstall K3s from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-uninstall.sh\n")),(0,a.kt)("h3",{id:"uninstalling-agents"},"Uninstalling Agents"),(0,a.kt)("p",null,"To uninstall K3s from an agent node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-agent-uninstall.sh\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/5525.ab860f59.js b/assets/js/5525.ab860f59.js
new file mode 100644
index 000000000..ead43e4a6
--- /dev/null
+++ b/assets/js/5525.ab860f59.js
@@ -0,0 +1 @@
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5525],{5525:()=>{}}]);
\ No newline at end of file
diff --git a/assets/js/57d35c99.f75bd393.js b/assets/js/57d35c99.c0214124.js
similarity index 97%
rename from assets/js/57d35c99.f75bd393.js
rename to assets/js/57d35c99.c0214124.js
index 67991755d..f87a611e1 100644
--- a/assets/js/57d35c99.f75bd393.js
+++ b/assets/js/57d35c99.c0214124.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8005],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>f});var r=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function a(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function c(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=r.createContext({}),l=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=l(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},y=r.forwardRef((function(e,t){var n=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,p=c(e,["components","mdxType","originalType","parentName"]),y=l(n),f=i,d=y["".concat(s,".").concat(f)]||y[f]||u[f]||o;return n?r.createElement(d,a(a({ref:t},p),{},{components:n})):r.createElement(d,a({ref:t},p))}));function f(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var o=n.length,a=new Array(o);a[0]=y;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:i,a[1]=c;for(var l=2;l<o;l++)a[l]=n[l];return r.createElement.apply(null,a)}return r.createElement.apply(null,n)}y.displayName="MDXCreateElement"},5001:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>a,default:()=>u,frontMatter:()=>o,metadata:()=>c,toc:()=>l});var r=n(3117),i=(n(7294),n(3905));const o={title:"Secrets Encryption",weight:26},a="Secrets Encryption Config",c={unversionedId:"security/secrets-encryption",id:"security/secrets-encryption",title:"Secrets Encryption",description:"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:",source:"@site/docs/security/secrets-encryption.md",sourceDirName:"security",slug:"/security/secrets-encryption",permalink:"/security/secrets-encryption",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Secrets Encryption",weight:26},sidebar:"mySidebar",previous:{title:"Security",permalink:"/security/"},next:{title:"CIS Hardening Guide",permalink:"/security/hardening-guide"}},s={},l=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2}],p={toc:l};function u(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("h1",{id:"secrets-encryption-config"},"Secrets Encryption Config"),(0,i.kt)("p",null,"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag ",(0,i.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," will do the following automatically:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Generate an AES-CBC key"),(0,i.kt)("li",{parentName:"ul"},"Generate an encryption config file with the generated key"),(0,i.kt)("li",{parentName:"ul"},"Pass the config to the KubeAPI as encryption-provider-config")),(0,i.kt)("admonition",{type:"tip"},(0,i.kt)("p",{parentName:"admonition"},"Secrets-encryption cannot be enabled on an existing server without restarting it.",(0,i.kt)("br",{parentName:"p"}),"\n","Use ",(0,i.kt)("inlineCode",{parentName:"p"},"curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption")," if installing from script, or other methods described in ",(0,i.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-with-install-script"},"Configuration Options"),".")),(0,i.kt)("p",null,"Example of the encryption config file:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-json"},'{\n  "kind": "EncryptionConfiguration",\n  "apiVersion": "apiserver.config.k8s.io/v1",\n  "resources": [\n    {\n      "resources": [\n        "secrets"\n      ],\n      "providers": [\n        {\n          "aescbc": {\n            "keys": [\n              {\n                "name": "aescbckey",\n                "secret": "xxxxxxxxxxxxxxxxxxx"\n              }\n            ]\n          }\n        },\n        {\n          "identity": {}\n        }\n      ]\n    }\n  ]\n}\n')),(0,i.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,i.kt)("p",null,"K3s contains a utility tool ",(0,i.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,i.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,i.kt)("p",null,"For more information, see the ",(0,i.kt)("a",{parentName:"p",href:"/cli/secrets-encrypt"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," command documentation"),"."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8005],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>f});var r=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function a(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function c(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=r.createContext({}),l=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=l(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},y=r.forwardRef((function(e,t){var n=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,p=c(e,["components","mdxType","originalType","parentName"]),y=l(n),f=i,d=y["".concat(s,".").concat(f)]||y[f]||u[f]||o;return n?r.createElement(d,a(a({ref:t},p),{},{components:n})):r.createElement(d,a({ref:t},p))}));function f(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var o=n.length,a=new Array(o);a[0]=y;var c={};for(var s in t)hasOwnProperty.call(t,s)&&(c[s]=t[s]);c.originalType=e,c.mdxType="string"==typeof e?e:i,a[1]=c;for(var l=2;l<o;l++)a[l]=n[l];return r.createElement.apply(null,a)}return r.createElement.apply(null,n)}y.displayName="MDXCreateElement"},5001:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>a,default:()=>u,frontMatter:()=>o,metadata:()=>c,toc:()=>l});var r=n(3117),i=(n(7294),n(3905));const o={title:"Secrets Encryption",weight:26},a="Secrets Encryption Config",c={unversionedId:"security/secrets-encryption",id:"security/secrets-encryption",title:"Secrets Encryption",description:"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:",source:"@site/docs/security/secrets-encryption.md",sourceDirName:"security",slug:"/security/secrets-encryption",permalink:"/security/secrets-encryption",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Secrets Encryption",weight:26},sidebar:"mySidebar",previous:{title:"Security",permalink:"/security/"},next:{title:"CIS Hardening Guide",permalink:"/security/hardening-guide"}},s={},l=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2}],p={toc:l};function u(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("h1",{id:"secrets-encryption-config"},"Secrets Encryption Config"),(0,i.kt)("p",null,"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag ",(0,i.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," will do the following automatically:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Generate an AES-CBC key"),(0,i.kt)("li",{parentName:"ul"},"Generate an encryption config file with the generated key"),(0,i.kt)("li",{parentName:"ul"},"Pass the config to the KubeAPI as encryption-provider-config")),(0,i.kt)("admonition",{type:"tip"},(0,i.kt)("p",{parentName:"admonition"},"Secrets-encryption cannot be enabled on an existing server without restarting it.",(0,i.kt)("br",{parentName:"p"}),"\n","Use ",(0,i.kt)("inlineCode",{parentName:"p"},"curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption")," if installing from script, or other methods described in ",(0,i.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-with-install-script"},"Configuration Options"),".")),(0,i.kt)("p",null,"Example of the encryption config file:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-json"},'{\n  "kind": "EncryptionConfiguration",\n  "apiVersion": "apiserver.config.k8s.io/v1",\n  "resources": [\n    {\n      "resources": [\n        "secrets"\n      ],\n      "providers": [\n        {\n          "aescbc": {\n            "keys": [\n              {\n                "name": "aescbckey",\n                "secret": "xxxxxxxxxxxxxxxxxxx"\n              }\n            ]\n          }\n        },\n        {\n          "identity": {}\n        }\n      ]\n    }\n  ]\n}\n')),(0,i.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,i.kt)("p",null,"K3s contains a utility tool ",(0,i.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,i.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,i.kt)("p",null,"For more information, see the ",(0,i.kt)("a",{parentName:"p",href:"/cli/secrets-encrypt"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," command documentation"),"."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/59b068d1.c8b83cea.js b/assets/js/59b068d1.c8b83cea.js
deleted file mode 100644
index c8f4f1e34..000000000
--- a/assets/js/59b068d1.c8b83cea.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6385],{7085:s=>{s.exports=JSON.parse('{"name":"docusaurus-theme-search-algolia","id":"default"}')}}]);
\ No newline at end of file
diff --git a/assets/js/65c5030c.3b4edb92.js b/assets/js/65c5030c.3f898541.js
similarity index 98%
rename from assets/js/65c5030c.3b4edb92.js
rename to assets/js/65c5030c.3f898541.js
index d95d8644b..d26a69b64 100644
--- a/assets/js/65c5030c.3b4edb92.js
+++ b/assets/js/65c5030c.3f898541.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7733],{3905:(e,n,t)=>{t.d(n,{Zo:()=>p,kt:()=>u});var a=t(7294);function i(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function r(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?r(Object(t),!0).forEach((function(n){i(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):r(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,i=function(e,n){if(null==e)return{};var t,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||(i[t]=e[t]);return i}(e,n);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(i[t]=e[t])}return i}var l=a.createContext({}),d=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},p=function(e){var n=d(e.components);return a.createElement(l.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,i=e.mdxType,r=e.originalType,l=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(t),u=i,f=m["".concat(l,".").concat(u)]||m[u]||c[u]||r;return t?a.createElement(f,s(s({ref:n},p),{},{components:t})):a.createElement(f,s({ref:n},p))}));function u(e,n){var t=arguments,i=n&&n.mdxType;if("string"==typeof e||i){var r=t.length,s=new Array(r);s[0]=m;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:i,s[1]=o;for(var d=2;d<r;d++)s[d]=t[d];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},6784:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>c,frontMatter:()=>r,metadata:()=>o,toc:()=>d});var a=t(3117),i=(t(7294),t(3905));const r={title:"Managing Packaged Components",weight:60},s=void 0,o={unversionedId:"installation/packaged-components",id:"installation/packaged-components",title:"Managing Packaged Components",description:"Auto-Deploying Manifests (AddOns)",source:"@site/docs/installation/packaged-components.md",sourceDirName:"installation",slug:"/installation/packaged-components",permalink:"/installation/packaged-components",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Managing Packaged Components",weight:60},sidebar:"mySidebar",previous:{title:"Managing Server Roles",permalink:"/installation/server-roles"},next:{title:"Kubernetes Dashboard",permalink:"/installation/kube-dashboard"}},l={},d=[{value:"Auto-Deploying Manifests (AddOns)",id:"auto-deploying-manifests-addons",level:2},{value:"Packaged Components",id:"packaged-components",level:3},{value:"User AddOns",id:"user-addons",level:3},{value:"File Naming Requirements",id:"file-naming-requirements",level:4},{value:"Disabling Manifests",id:"disabling-manifests",level:2},{value:"Using the <code>--disable</code> flag",id:"using-the---disable-flag",level:3},{value:"Using .skip files",id:"using-skip-files",level:3},{value:"Helm AddOns",id:"helm-addons",level:2}],p={toc:d};function c(e){let{components:n,...t}=e;return(0,i.kt)("wrapper",(0,a.Z)({},p,t,{components:n,mdxType:"MDXLayout"}),(0,i.kt)("h2",{id:"auto-deploying-manifests-addons"},"Auto-Deploying Manifests (AddOns)"),(0,i.kt)("p",null,"On server nodes, any file found in ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," will automatically be deployed to Kubernetes in a manner similar to ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl apply"),", both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster."),(0,i.kt)("p",null,"Manifests are tracked as ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," custom resources in the ",(0,i.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Any errors or warnings encountered when applying the manifest file may seen by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl describe")," on the corresponding ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),", or by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl get event -n kube-system")," to view all events for that namespace, including those from the deploy controller."),(0,i.kt)("h3",{id:"packaged-components"},"Packaged Components"),(0,i.kt)("p",null,"K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: ",(0,i.kt)("inlineCode",{parentName:"p"},"coredns"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"local-storage"),", and ",(0,i.kt)("inlineCode",{parentName:"p"},"metrics-server"),". The embedded ",(0,i.kt)("inlineCode",{parentName:"p"},"servicelb")," LoadBalancer controller does not have a manifest file, but can be disabled as if it were an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," for historical reasons."),(0,i.kt)("p",null,"Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity."),(0,i.kt)("h3",{id:"user-addons"},"User AddOns"),(0,i.kt)("p",null,"You may place additional files in the manifests directory for deployment as an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),". Each file may contain multiple Kubernetes resources, delmited by the ",(0,i.kt)("inlineCode",{parentName:"p"},"---")," YAML document separator. For more information on organizing resources in manifests, see the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/"},"Managing Resources")," section of the Kubernetes documentation."),(0,i.kt)("h4",{id:"file-naming-requirements"},"File Naming Requirements"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," name for each file in the manifest directory is derived from the file basename.\nEnsure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/names/"},"object naming restrictions"),".\nCare should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled."),(0,i.kt)("p",null,"Here is en example of an error that would be reported if the file name contains underscores:"),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("inlineCode",{parentName:"p"},"Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:\n   Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\": \n   a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character\n   (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')"))),(0,i.kt)("admonition",{type:"warning"},(0,i.kt)("p",{parentName:"admonition"},"If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.")),(0,i.kt)("h2",{id:"disabling-manifests"},"Disabling Manifests"),(0,i.kt)("p",null,"There are two ways to disable deployment of specific content from the manifests directory."),(0,i.kt)("h3",{id:"using-the---disable-flag"},"Using the ",(0,i.kt)("inlineCode",{parentName:"h3"},"--disable")," flag"),(0,i.kt)("p",null,"The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory, can be disabled with the ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable")," flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory."),(0,i.kt)("p",null,"For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable=traefik"),". Multiple items can be disabled by separating their names with commas, or by repeating the flag."),(0,i.kt)("h3",{id:"using-skip-files"},"Using .skip files"),(0,i.kt)("p",null,"For any file under ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),", you can create a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file which will cause K3s to ignore the corresponding manifest. The contents of the ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file do not matter, only its existence is checked. Note that creating a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist."),(0,i.kt)("p",null,"For example, creating an empty ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml.skip")," file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"$ ls /var/lib/rancher/k3s/server/manifests\nccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip\ncoredns.yaml  traefik.yaml\n\n$ kubectl get pods -A\nNAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE\nkube-system   local-path-provisioner-64ffb68fd-xx98j   1/1     Running   0          74s\nkube-system   metrics-server-5489f84d5d-7zwkt          1/1     Running   0          74s\nkube-system   coredns-85cb69466-vcq7j                  1/1     Running   0          74s\n")),(0,i.kt)("p",null,"If Traefik had already been deployed prior to creating the ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.skip")," file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded."),(0,i.kt)("h2",{id:"helm-addons"},"Helm AddOns"),(0,i.kt)("p",null,"For information about managing Helm charts via auto-deploying manifests, refer to the section about ",(0,i.kt)("a",{parentName:"p",href:"/helm/"},"Helm.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7733],{3905:(e,n,t)=>{t.d(n,{Zo:()=>p,kt:()=>u});var a=t(7294);function i(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function r(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?r(Object(t),!0).forEach((function(n){i(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):r(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,i=function(e,n){if(null==e)return{};var t,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||(i[t]=e[t]);return i}(e,n);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(i[t]=e[t])}return i}var l=a.createContext({}),d=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},p=function(e){var n=d(e.components);return a.createElement(l.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,i=e.mdxType,r=e.originalType,l=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(t),u=i,f=m["".concat(l,".").concat(u)]||m[u]||c[u]||r;return t?a.createElement(f,s(s({ref:n},p),{},{components:t})):a.createElement(f,s({ref:n},p))}));function u(e,n){var t=arguments,i=n&&n.mdxType;if("string"==typeof e||i){var r=t.length,s=new Array(r);s[0]=m;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:i,s[1]=o;for(var d=2;d<r;d++)s[d]=t[d];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},6784:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>c,frontMatter:()=>r,metadata:()=>o,toc:()=>d});var a=t(3117),i=(t(7294),t(3905));const r={title:"Managing Packaged Components",weight:60},s=void 0,o={unversionedId:"installation/packaged-components",id:"installation/packaged-components",title:"Managing Packaged Components",description:"Auto-Deploying Manifests (AddOns)",source:"@site/docs/installation/packaged-components.md",sourceDirName:"installation",slug:"/installation/packaged-components",permalink:"/installation/packaged-components",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Managing Packaged Components",weight:60},sidebar:"mySidebar",previous:{title:"Managing Server Roles",permalink:"/installation/server-roles"},next:{title:"Kubernetes Dashboard",permalink:"/installation/kube-dashboard"}},l={},d=[{value:"Auto-Deploying Manifests (AddOns)",id:"auto-deploying-manifests-addons",level:2},{value:"Packaged Components",id:"packaged-components",level:3},{value:"User AddOns",id:"user-addons",level:3},{value:"File Naming Requirements",id:"file-naming-requirements",level:4},{value:"Disabling Manifests",id:"disabling-manifests",level:2},{value:"Using the <code>--disable</code> flag",id:"using-the---disable-flag",level:3},{value:"Using .skip files",id:"using-skip-files",level:3},{value:"Helm AddOns",id:"helm-addons",level:2}],p={toc:d};function c(e){let{components:n,...t}=e;return(0,i.kt)("wrapper",(0,a.Z)({},p,t,{components:n,mdxType:"MDXLayout"}),(0,i.kt)("h2",{id:"auto-deploying-manifests-addons"},"Auto-Deploying Manifests (AddOns)"),(0,i.kt)("p",null,"On server nodes, any file found in ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," will automatically be deployed to Kubernetes in a manner similar to ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl apply"),", both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster."),(0,i.kt)("p",null,"Manifests are tracked as ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," custom resources in the ",(0,i.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Any errors or warnings encountered when applying the manifest file may seen by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl describe")," on the corresponding ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),", or by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl get event -n kube-system")," to view all events for that namespace, including those from the deploy controller."),(0,i.kt)("h3",{id:"packaged-components"},"Packaged Components"),(0,i.kt)("p",null,"K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: ",(0,i.kt)("inlineCode",{parentName:"p"},"coredns"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"local-storage"),", and ",(0,i.kt)("inlineCode",{parentName:"p"},"metrics-server"),". The embedded ",(0,i.kt)("inlineCode",{parentName:"p"},"servicelb")," LoadBalancer controller does not have a manifest file, but can be disabled as if it were an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," for historical reasons."),(0,i.kt)("p",null,"Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity."),(0,i.kt)("h3",{id:"user-addons"},"User AddOns"),(0,i.kt)("p",null,"You may place additional files in the manifests directory for deployment as an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),". Each file may contain multiple Kubernetes resources, delmited by the ",(0,i.kt)("inlineCode",{parentName:"p"},"---")," YAML document separator. For more information on organizing resources in manifests, see the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/"},"Managing Resources")," section of the Kubernetes documentation."),(0,i.kt)("h4",{id:"file-naming-requirements"},"File Naming Requirements"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," name for each file in the manifest directory is derived from the file basename.\nEnsure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/names/"},"object naming restrictions"),".\nCare should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled."),(0,i.kt)("p",null,"Here is en example of an error that would be reported if the file name contains underscores:"),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("inlineCode",{parentName:"p"},"Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:\n   Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\": \n   a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character\n   (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')"))),(0,i.kt)("admonition",{type:"warning"},(0,i.kt)("p",{parentName:"admonition"},"If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.")),(0,i.kt)("h2",{id:"disabling-manifests"},"Disabling Manifests"),(0,i.kt)("p",null,"There are two ways to disable deployment of specific content from the manifests directory."),(0,i.kt)("h3",{id:"using-the---disable-flag"},"Using the ",(0,i.kt)("inlineCode",{parentName:"h3"},"--disable")," flag"),(0,i.kt)("p",null,"The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory, can be disabled with the ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable")," flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory."),(0,i.kt)("p",null,"For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable=traefik"),". Multiple items can be disabled by separating their names with commas, or by repeating the flag."),(0,i.kt)("h3",{id:"using-skip-files"},"Using .skip files"),(0,i.kt)("p",null,"For any file under ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),", you can create a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file which will cause K3s to ignore the corresponding manifest. The contents of the ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file do not matter, only its existence is checked. Note that creating a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist."),(0,i.kt)("p",null,"For example, creating an empty ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml.skip")," file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"$ ls /var/lib/rancher/k3s/server/manifests\nccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip\ncoredns.yaml  traefik.yaml\n\n$ kubectl get pods -A\nNAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE\nkube-system   local-path-provisioner-64ffb68fd-xx98j   1/1     Running   0          74s\nkube-system   metrics-server-5489f84d5d-7zwkt          1/1     Running   0          74s\nkube-system   coredns-85cb69466-vcq7j                  1/1     Running   0          74s\n")),(0,i.kt)("p",null,"If Traefik had already been deployed prior to creating the ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.skip")," file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded."),(0,i.kt)("h2",{id:"helm-addons"},"Helm AddOns"),(0,i.kt)("p",null,"For information about managing Helm charts via auto-deploying manifests, refer to the section about ",(0,i.kt)("a",{parentName:"p",href:"/helm/"},"Helm.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/6647a7ce.e7fceb23.js b/assets/js/6647a7ce.e3387f7e.js
similarity index 99%
rename from assets/js/6647a7ce.e7fceb23.js
rename to assets/js/6647a7ce.e3387f7e.js
index 2285cd7dc..853ec17ea 100644
--- a/assets/js/6647a7ce.e7fceb23.js
+++ b/assets/js/6647a7ce.e3387f7e.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3353],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),p=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=p(e.components);return a.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,d=s(e,["components","mdxType","originalType","parentName"]),c=p(n),m=r,k=c["".concat(l,".").concat(m)]||c[m]||u[m]||i;return n?a.createElement(k,o(o({ref:t},d),{},{components:n})):a.createElement(k,o({ref:t},d))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var i=n.length,o=new Array(i);o[0]=c;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var p=2;p<i;p++)o[p]=n[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},3115:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>k,frontMatter:()=>i,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const i={title:"Advanced Options / Configuration",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},o=void 0,s={unversionedId:"advanced/advanced",id:"advanced/advanced",title:"Advanced Options / Configuration",description:"This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use.",source:"@site/docs/advanced/advanced.md",sourceDirName:"advanced",slug:"/advanced/",permalink:"/advanced/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Advanced Options / Configuration",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},sidebar:"mySidebar",previous:{title:"Helm",permalink:"/helm/"},next:{title:"FAQ",permalink:"/faq/"}},l={},p=[{value:"Certificate Management",id:"certificate-management",level:2},{value:"Certificate Authority Certificates",id:"certificate-authority-certificates",level:3},{value:"Client and Server certificates",id:"client-and-server-certificates",level:3},{value:"Token Management",id:"token-management",level:2},{value:"Configuring an HTTP proxy",id:"configuring-an-http-proxy",level:2},{value:"Using Docker as the Container Runtime",id:"using-docker-as-the-container-runtime",level:2},{value:"Using etcdctl",id:"using-etcdctl",level:2},{value:"Configuring containerd",id:"configuring-containerd",level:2},{value:"NVIDIA Container Runtime Support",id:"nvidia-container-runtime-support",level:2},{value:"Running Agentless Servers (Experimental)",id:"running-agentless-servers-experimental",level:2},{value:"Running Rootless Servers (Experimental)",id:"running-rootless-servers-experimental",level:2},{value:"Known Issues with Rootless mode",id:"known-issues-with-rootless-mode",level:3},{value:"Starting Rootless Servers",id:"starting-rootless-servers",level:3},{value:"Advanced Rootless Configuration",id:"advanced-rootless-configuration",level:3},{value:"Troubleshooting Rootless",id:"troubleshooting-rootless",level:3},{value:"Node Labels and Taints",id:"node-labels-and-taints",level:2},{value:"Starting the Service with the Installation Script",id:"starting-the-service-with-the-installation-script",level:2},{value:"Additional OS Preparations",id:"additional-os-preparations",level:2},{value:"Old iptables versions",id:"old-iptables-versions",level:3},{value:"Red Hat Enterprise Linux / CentOS",id:"red-hat-enterprise-linux--centos",level:3},{value:"Ubuntu",id:"ubuntu",level:3},{value:"Raspberry Pi",id:"raspberry-pi",level:3},{value:"Running K3s in Docker",id:"running-k3s-in-docker",level:2},{value:"SELinux Support",id:"selinux-support",level:2},{value:"Enabling SELinux Enforcement",id:"enabling-selinux-enforcement",level:3},{value:"Enabling Lazy Pulling of eStargz (Experimental)",id:"enabling-lazy-pulling-of-estargz-experimental",level:2},{value:"What&#39;s lazy pulling and eStargz?",id:"whats-lazy-pulling-and-estargz",level:3},{value:"Configure k3s for lazy pulling of eStargz",id:"configure-k3s-for-lazy-pulling-of-estargz",level:3},{value:"Additional Logging Sources",id:"additional-logging-sources",level:2},{value:"Additional Network Policy Logging",id:"additional-network-policy-logging",level:2}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=d("Tabs"),c=d("TabItem"),m={toc:p};function k(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use."),(0,r.kt)("h2",{id:"certificate-management"},"Certificate Management"),(0,r.kt)("h3",{id:"certificate-authority-certificates"},"Certificate Authority Certificates"),(0,r.kt)("p",null,"K3s generates self-signed Certificate Authority (CA) Certificates during startup of the first server node. These CA certificates are valid for 10 years, and are not automatically renewed."),(0,r.kt)("p",null,"For information on using custom CA certificates, or renewing the self-signed CA certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/certificate#certificate-authority-ca-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate-ca")," command documentation"),"."),(0,r.kt)("h3",{id:"client-and-server-certificates"},"Client and Server certificates"),(0,r.kt)("p",null,"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts."),(0,r.kt)("p",null,"For information on manually rotating client and server certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/certificate#client-and-server-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate")," command documentation"),"."),(0,r.kt)("h2",{id:"token-management"},"Token Management"),(0,r.kt)("p",null,"By default, K3s uses a single static token for both servers and agents. This token cannot be changed once the cluster has been created.\nIt is possible to enable a second static token that can only be used to join agents, or to create temporary ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm")," style join tokens that expire automatically.\nFor more information, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," command documentation"),"."),(0,r.kt)("h2",{id:"configuring-an-http-proxy"},"Configuring an HTTP proxy"),(0,r.kt)("p",null,"If you are running K3s in an environment, which only has external connectivity through an HTTP proxy, you can configure your proxy settings on the K3s systemd service. These proxy settings will then be used in K3s and passed down to the embedded containerd and kubelet."),(0,r.kt)("p",null,"The K3s installation script will automatically take the ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTPS_PROXY")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY"),", as well as the ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTPS_PROXY")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_NO_PROXY")," variables from the current shell, if they are present, and write them to the environment file of your systemd service, usually:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s.service.env")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s-agent.service.env"))),(0,r.kt)("p",null,"Of course, you can also configure the proxy by editing these files."),(0,r.kt)("p",null,"K3s will automatically add the cluster internal Pod and Service IP ranges and cluster DNS domain to the list of ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," entries. You should ensure that the IP address ranges used by the Kubernetes nodes themselves (i.e. the public and private IPs of the nodes) are included in the ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," list, or that the nodes can be reached through the proxy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"HTTP_PROXY=http://your-proxy.example.com:8888\nHTTPS_PROXY=http://your-proxy.example.com:8888\nNO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("p",null,"If you want to configure the proxy settings for containerd without affecting K3s and the Kubelet, you can prefix the variables with ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("h2",{id:"using-docker-as-the-container-runtime"},"Using Docker as the Container Runtime"),(0,r.kt)("p",null,"K3s includes and defaults to ",(0,r.kt)("a",{parentName:"p",href:"https://containerd.io/"},"containerd"),", an industry-standard container runtime.\nAs of Kubernetes 1.24, the Kubelet no longer includes dockershim, the component that allows the kubelet to communicate with dockerd.\nK3s 1.24 and higher include ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/Mirantis/cri-dockerd"},"cri-dockerd"),", which allows seamless upgrade from prior releases of K3s while continuing to use the Docker container runtime."),(0,r.kt)("p",null,"To use Docker instead of containerd:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Install Docker on the K3s node. One of Rancher's ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/install-docker"},"Docker installation scripts")," can be used to install Docker:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl https://releases.rancher.com/install-docker/20.10.sh | sh\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Install K3s using the ",(0,r.kt)("inlineCode",{parentName:"p"},"--docker")," option:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -s - --docker\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Confirm that the cluster is available:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ sudo k3s kubectl get pods --all-namespaces\nNAMESPACE     NAME                                     READY   STATUS      RESTARTS   AGE\nkube-system   local-path-provisioner-6d59f47c7-lncxn   1/1     Running     0          51s\nkube-system   metrics-server-7566d596c8-9tnck          1/1     Running     0          51s\nkube-system   helm-install-traefik-mbkn9               0/1     Completed   1          51s\nkube-system   coredns-8655855d6-rtbnb                  1/1     Running     0          51s\nkube-system   svclb-traefik-jbmvl                      2/2     Running     0          43s\nkube-system   traefik-758cd5fc85-2wz97                 1/1     Running     0          43s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Confirm that the Docker containers are running:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'$ sudo docker ps\nCONTAINER ID        IMAGE                     COMMAND                  CREATED              STATUS              PORTS               NAMES\n3e4d34729602        897ce3c5fc8f              "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\nbffdc9d7a65f        rancher/klipper-lb        "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n436b85c5e38d        rancher/library-traefik   "/traefik --configfi\u2026"   About a minute ago   Up About a minute                       k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nde8fded06188        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n7c6a30aeeb2f        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nae6c58cab4a7        9d12f9848b99              "local-path-provisio\u2026"   About a minute ago   Up About a minute                       k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\nbe1450e1a11e        9dd718864ce6              "/metrics-server"        About a minute ago   Up About a minute                       k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0\n4454d14e4d3f        c4d3d16fe508              "/coredns -conf /etc\u2026"   About a minute ago   Up About a minute                       k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\nc3675b87f96c        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\n4b1fddbe6ca6        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\n64d3517d4a95        rancher/pause:3.1         "/pause"\n')))),(0,r.kt)("h2",{id:"using-etcdctl"},"Using etcdctl"),(0,r.kt)("p",null,"etcdctl provides a CLI for interacting with etcd servers. K3s does not bundle etcdctl."),(0,r.kt)("p",null,"If you would like to use etcdctl to interact with K3s's embedded etcd, install etcdctl using the ",(0,r.kt)("a",{parentName:"p",href:"https://etcd.io/docs/latest/install/"},"official documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'ETCD_VERSION="v3.5.5"\nETCD_URL="https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz"\ncurl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin\n')),(0,r.kt)("p",null,"You may then use etcdctl by configuring it to use the K3s-managed certificates and keys for authentication:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo etcdctl version \\\n  --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\\n  --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\\n  --key=/var/lib/rancher/k3s/server/tls/etcd/client.key\n")),(0,r.kt)("h2",{id:"configuring-containerd"},"Configuring containerd"),(0,r.kt)("p",null,"K3s will generate config.toml for containerd in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/agent/etc/containerd/config.toml"),"."),(0,r.kt)("p",null,"For advanced customization for this file you can create another file called ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," in the same directory, and it will be used instead."),(0,r.kt)("p",null,"The ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," will be treated as a Go template file, and the ",(0,r.kt)("inlineCode",{parentName:"p"},"config.Node")," structure is being passed to the template. See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/agent/templates"},"this folder")," for Linux and Windows examples on how to use the structure to customize the configuration file.\nThe config.Node golang struct is defined ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/daemons/config/types.go#L37"},"here")),(0,r.kt)("h2",{id:"nvidia-container-runtime-support"},"NVIDIA Container Runtime Support"),(0,r.kt)("p",null,"K3s will automatically detect and configure the NVIDIA container runtime if it is present when K3s starts."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Install the nvidia-container package repository on the node by following the instructions at:\n",(0,r.kt)("a",{parentName:"li",href:"https://nvidia.github.io/libnvidia-container/"},"https://nvidia.github.io/libnvidia-container/")),(0,r.kt)("li",{parentName:"ol"},"Install the nvidia container runtime packages. For example:\n",(0,r.kt)("inlineCode",{parentName:"li"},"apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server")),(0,r.kt)("li",{parentName:"ol"},"Install K3s, or restart it if already installed:\n",(0,r.kt)("inlineCode",{parentName:"li"},"curl -ksL get.k3s.io | sh -")),(0,r.kt)("li",{parentName:"ol"},"Confirm that the nvidia container runtime has been found by k3s:\n",(0,r.kt)("inlineCode",{parentName:"li"},"grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml"))),(0,r.kt)("p",null,"This will automatically add ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia")," and/or ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia-experimental")," runtimes to the containerd configuration, depending on what runtime executables are found.\nYou must still add a RuntimeClass definition to your cluster, and deploy Pods that explicitly request the appropriate runtime by setting ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia")," in the Pod spec:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: node.k8s.io/v1\nkind: RuntimeClass\nmetadata:\n  name: nvidia\nhandler: nvidia\n---\napiVersion: v1\nkind: Pod\nmetadata:\n  name: nbody-gpu-benchmark\n  namespace: default\nspec:\n  restartPolicy: OnFailure\n  runtimeClassName: nvidia\n  containers:\n  - name: cuda-container\n    image: nvcr.io/nvidia/k8s/cuda-sample:nbody\n    args: ["nbody", "-gpu", "-benchmark"]\n    resources:\n      limits:\n        nvidia.com/gpu: 1\n    env:\n    - name: NVIDIA_VISIBLE_DEVICES\n      value: all\n    - name: NVIDIA_DRIVER_CAPABILITIES\n      value: all\n')),(0,r.kt)("p",null,"Note that the NVIDIA Container Runtime is also frequently used with the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/k8s-device-plugin/"},"NVIDIA Device Plugin")," and ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/gpu-feature-discovery/"},"GPU Feature Discovery"),", which must be installed separately, with modifications to ensure that pod specs include ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),", as mentioned above."),(0,r.kt)("h2",{id:"running-agentless-servers-experimental"},"Running Agentless Servers (Experimental)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Warning:")," This feature is experimental.")),(0,r.kt)("p",null,"When started with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-agent")," flag, servers do not run the kubelet, container runtime, or CNI. They do not register a Node resource in the cluster, and will not appear in ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get nodes")," output.\nBecause they do not host a kubelet, they cannot run pods or be managed by operators that rely on enumerating cluster nodes, including the embedded etcd controller and the system upgrade controller."),(0,r.kt)("p",null,"Running agentless servers may be advantageous if you want to obscure your control-plane nodes from discovery by agents and workloads, at the cost of increased administrative overhead caused by lack of cluster operator support."),(0,r.kt)("h2",{id:"running-rootless-servers-experimental"},"Running Rootless Servers (Experimental)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Warning:")," This feature is experimental.")),(0,r.kt)("p",null,"Rootless mode allows running K3s servers as an unprivileged user, so as to protect the real root on the host from potential container-breakout attacks."),(0,r.kt)("p",null,"See ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/")," to learn more about Rootless Kubernetes."),(0,r.kt)("h3",{id:"known-issues-with-rootless-mode"},"Known Issues with Rootless mode"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Ports")),(0,r.kt)("p",{parentName:"li"},"When running rootless a new network namespace is created.  This means that K3s instance is running with networking fairly detached from the host.\nThe only way to access Services run in K3s from the host is to set up port forwards to the K3s network namespace.\nRootless K3s includes controller that will automatically bind 6443 and service ports below 1024 to the host with an offset of 10000."),(0,r.kt)("p",{parentName:"li"},"For example, a Service on port 80 will become 10080 on the host, but 8080 will become 8080 without any offset. Currently, only LoadBalancer Services are automatically bound.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Cgroups")),(0,r.kt)("p",{parentName:"li"},'Cgroup v1 and Hybrid v1/v2 are not supported; only pure Cgroup v2 is supported. If K3s fails to start due to missing cgroups when running rootless, it is likely that your node is in Hybrid mode, and the "missing" cgroups are still bound to a v1 controller.')),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Multi-node/multi-process cluster")),(0,r.kt)("p",{parentName:"li"},"Multi-node rootless clusters, or multiple rootless k3s processes on the same node, are not currently supported. See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/6488#issuecomment-1314998091"},"#6488")," for more details."))),(0,r.kt)("h3",{id:"starting-rootless-servers"},"Starting Rootless Servers"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Enable cgroup v2 delegation, see ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/getting-started/common/cgroup2/"},"https://rootlesscontaine.rs/getting-started/common/cgroup2/")," .\nThis step is required; the rootless kubelet will fail to start without the proper cgroups delegated.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Download ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," from ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service"},(0,r.kt)("inlineCode",{parentName:"a"},"https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service")),".\nMake sure to use the same version of ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s"),".")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Install ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," to ",(0,r.kt)("inlineCode",{parentName:"p"},"~/.config/systemd/user/k3s-rootless.service"),".\nInstalling this file as a system-wide service (",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/..."),") is not supported.\nDepending on the path of ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," binary, you might need to modify the ",(0,r.kt)("inlineCode",{parentName:"p"},"ExecStart=/usr/local/bin/k3s ...")," line of the file.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Run ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user daemon-reload"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Run ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user enable --now k3s-rootless"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Run ",(0,r.kt)("inlineCode",{parentName:"p"},"KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A"),", and make sure the pods are running."))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," Don't try to run ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server --rootless")," on a terminal, as terminal sessions do not allow cgroup v2 delegation.\nIf you really need to try it on a terminal, use ",(0,r.kt)("inlineCode",{parentName:"p"},"systemd-run --user -p Delegate=yes --tty k3s server --rooless")," to wrap it in a systemd scope.")),(0,r.kt)("h3",{id:"advanced-rootless-configuration"},"Advanced Rootless Configuration"),(0,r.kt)("p",null,"Rootless K3s uses ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/rootlesskit"},"rootlesskit")," and ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/slirp4netns"},"slirp4netns")," to communicate between host and user network namespaces.\nSome of the configuration used by rootlesskit and slirp4nets can be set by environment variables. The best way to set these is to add them to the ",(0,r.kt)("inlineCode",{parentName:"p"},"Environment")," field of the k3s-rootless systemd unit."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_MTU")),(0,r.kt)("td",{parentName:"tr",align:null},"1500"),(0,r.kt)("td",{parentName:"tr",align:null},"Sets the MTU for the slirp4netns virtual interfaces.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_CIDR")),(0,r.kt)("td",{parentName:"tr",align:null},"10.41.0.0/16"),(0,r.kt)("td",{parentName:"tr",align:null},"Sets the CIDR used by slirp4netns virtual interfaces.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_ENABLE_IPV6")),(0,r.kt)("td",{parentName:"tr",align:null},"autotedected"),(0,r.kt)("td",{parentName:"tr",align:null},"Enables slirp4netns IPv6 support. If not specified, it is automatically enabled if K3s is configured for dual-stack operation.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_PORT_DRIVER")),(0,r.kt)("td",{parentName:"tr",align:null},"builtin"),(0,r.kt)("td",{parentName:"tr",align:null},"Selects the rootless port driver; either ",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"slirp4netns"),". Builtin is faster, but masquerades the original source address of inbound packets.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_DISABLE_HOST_LOOPBACK")),(0,r.kt)("td",{parentName:"tr",align:null},"true"),(0,r.kt)("td",{parentName:"tr",align:null},"Controls whether or not access to the hosts's loopback address via the gateway interface is enabled. It is recommended that this not be changed, for security reasons.")))),(0,r.kt)("h3",{id:"troubleshooting-rootless"},"Troubleshooting Rootless"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Run ",(0,r.kt)("inlineCode",{parentName:"li"},"systemctl --user status k3s-rootless")," to check the daemon status"),(0,r.kt)("li",{parentName:"ul"},"Run ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl --user -f -u k3s-rootless")," to see the daemon log"),(0,r.kt)("li",{parentName:"ul"},"See also ",(0,r.kt)("a",{parentName:"li",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/"))),(0,r.kt)("h2",{id:"node-labels-and-taints"},"Node Labels and Taints"),(0,r.kt)("p",null,"K3s agents can be configured with the options ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," which adds a label and taint to the kubelet. The two options only add labels and/or taints ",(0,r.kt)("a",{parentName:"p",href:"/cli/agent#node-labels-and-taints-for-agents"},"at registration time"),", so they can only be set when the node is first joined to the cluster."),(0,r.kt)("p",null,"All current versions of Kubernetes restrict nodes from registering with most labels with ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"k8s.io")," prefixes, specifically including the ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io/role")," label. If you attempt to start a node with a disallowed label, K3s will fail to start. As stated by the Kubernetes authors:"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"Nodes are not permitted to assert their own role labels. Node roles are typically used to identify privileged or control plane types of nodes, and allowing nodes to label themselves into that pool allows a compromised node to trivially attract workloads (like control plane daemonsets) that confer access to higher privilege credentials.")),(0,r.kt)("p",null,"See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/279-limit-node-access/README.md#proposal"},"SIG-Auth KEP 279")," for more information."),(0,r.kt)("p",null,"If you want to change node labels and taints after node registration, or add reserved labels, you should use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),". Refer to the official Kubernetes documentation for details on how to add ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"taints")," and ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"node labels.")),(0,r.kt)("h2",{id:"starting-the-service-with-the-installation-script"},"Starting the Service with the Installation Script"),(0,r.kt)("p",null,"The installation script will auto-detect if your OS is using systemd or openrc and enable and start the service as part of the installation process."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"When running with openrc, logs will be created at ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),". "),(0,r.kt)("li",{parentName:"ul"},"When running with systemd, logs will be created in ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/syslog")," and viewed using ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s")," (or ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s-agent")," on agents).")),(0,r.kt)("p",null,"An example of disabling auto-starting and service enablement with the install script:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,r.kt)("h2",{id:"additional-os-preparations"},"Additional OS Preparations"),(0,r.kt)("h3",{id:"old-iptables-versions"},"Old iptables versions"),(0,r.kt)("p",null,"Several popular Linux distributions ship a version of iptables that contain a bug which causes the accumulation of duplicate rules, which negatively affects the performance and stability of the node. See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/3117"},"Issue #3117")," for information on how to determine if you are affected by this problem."),(0,r.kt)("p",null,"K3s includes a working version of iptables (v1.8.8) which functions properly. You can tell K3s to use its bundled version of iptables by starting K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," option, or by uninstalling the iptables/nftables packages from your operating system."),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," flag is available starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1).")),(0,r.kt)("h3",{id:"red-hat-enterprise-linux--centos"},"Red Hat Enterprise Linux / CentOS"),(0,r.kt)("p",null,"It is recommended to turn off firewalld:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable firewalld --now\n")),(0,r.kt)("p",null,"If you wish to keep firewalld enabled, by default, the following rules are required:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"firewall-cmd --permanent --add-port=6443/tcp #apiserver\nfirewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods\nfirewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services\nfirewall-cmd --reload\n")),(0,r.kt)("p",null,"Additional ports may need to be opened depending on your setup. See ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements#inbound-rules-for-k3s-server-nodes"},"Inbound Rules")," for more information. If you change the default CIDR for pods or services, you will need to update the firewall rules accordingly."),(0,r.kt)("p",null,"If enabled, it is required to disable nm-cloud-setup and reboot the node:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable nm-cloud-setup.service nm-cloud-setup.timer\nreboot\n")),(0,r.kt)("h3",{id:"ubuntu"},"Ubuntu"),(0,r.kt)("p",null,"It is recommended to turn off ufw (uncomplicated firewall):"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw disable\n")),(0,r.kt)("p",null,"If you wish to keep ufw enabled, by default, the following rules are required:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw allow 6443/tcp #apiserver\nufw allow from 10.42.0.0/16 to any #pods\nufw allow from 10.43.0.0/16 to any #services\n")),(0,r.kt)("p",null,"Additional ports may need to be opened depending on your setup. See ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements#inbound-rules-for-k3s-server-nodes"},"Inbound Rules")," for more information. If you change the default CIDR for pods or services, you will need to update the firewall rules accordingly."),(0,r.kt)("h3",{id:"raspberry-pi"},"Raspberry Pi"),(0,r.kt)("p",null,"Raspberry Pi OS is Debian based, and may suffer from an old iptables version. See ",(0,r.kt)("a",{parentName:"p",href:"#old-iptables-versions"},"workarounds"),"."),(0,r.kt)("p",null,"Standard Raspberry Pi OS installations do not start with ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," enabled. ",(0,r.kt)("strong",{parentName:"p"},"K3S")," needs ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," to start the systemd service. ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"can be enabled by appending ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroup_memory=1 cgroup_enable=memory")," to ",(0,r.kt)("inlineCode",{parentName:"p"},"/boot/cmdline.txt"),"."),(0,r.kt)("p",null,"Example cmdline.txt:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory\n")),(0,r.kt)("p",null,"Starting with Ubuntu 21.10, vxlan support on Raspberry Pi has been moved into a separate kernel module. "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt install linux-modules-extra-raspi\n")),(0,r.kt)("h2",{id:"running-k3s-in-docker"},"Running K3s in Docker"),(0,r.kt)("p",null,"There are several ways to run K3s in Docker:"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(c,{value:"K3d",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3d-io/k3d"},"k3d")," is a utility designed to easily run multi-node K3s clusters in Docker."),(0,r.kt)("p",null,"k3d makes it very easy to create single- and multi-node k3s clusters in docker, e.g. for local development on Kubernetes."),(0,r.kt)("p",null,"See the ",(0,r.kt)("a",{parentName:"p",href:"https://k3d.io/#installation"},"Installation")," documentation for more information on how to install and use k3d.")),(0,r.kt)(c,{value:"Docker",mdxType:"TabItem"},(0,r.kt)("p",null,"To use Docker, ",(0,r.kt)("inlineCode",{parentName:"p"},"rancher/k3s")," images are also available to run the K3s server and agent.\nUsing the ",(0,r.kt)("inlineCode",{parentName:"p"},"docker run")," command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker run \\\n  --privileged \\\n  --name k3s-server-1 \\\n  --hostname k3s-server-1 \\\n  -p 6443:6443 \\\n  -d rancher/k3s:v1.24.10-k3s1 \\\n  server\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"You must specify a valid K3s version as the tag; the ",(0,r.kt)("inlineCode",{parentName:"p"},"latest")," tag is not maintained.",(0,r.kt)("br",{parentName:"p"}),"\n","Docker images do not allow a ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," sign in tags, use a ",(0,r.kt)("inlineCode",{parentName:"p"},"-")," in the tag instead.")),(0,r.kt)("p",null,"Once K3s is up and running, you can copy the admin kubeconfig out of the Docker container for use:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config\n")))),(0,r.kt)("h2",{id:"selinux-support"},"SELinux Support"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of v1.19.4+k3s1")),(0,r.kt)("p",null,"If you are installing K3s on a system where SELinux is enabled by default (such as CentOS), you must ensure the proper SELinux policies have been installed. "),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(c,{value:"Automatic Installation",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"The ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-with-install-script"},"install script")," will automatically install the SELinux RPM from the Rancher RPM repository if on a compatible system if not performing an air-gapped install. Automatic installation can be skipped by setting ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_SELINUX_RPM=true"),".")),(0,r.kt)(c,{value:"Manual Installation",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"The necessary policies can be installed with the following commands:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"yum install -y container-selinux selinux-policy-base\nyum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm\n")),(0,r.kt)("p",null,"To force the install script to log a warning rather than fail, you can set the following environment variable: ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SELINUX_WARN=true"),"."))),(0,r.kt)("h3",{id:"enabling-selinux-enforcement"},"Enabling SELinux Enforcement"),(0,r.kt)("p",null,"To leverage SELinux, specify the ",(0,r.kt)("inlineCode",{parentName:"p"},"--selinux")," flag when starting K3s servers and agents."),(0,r.kt)("p",null,"This option can also be specified in the K3s ",(0,r.kt)("a",{parentName:"p",href:"#"},"configuration file"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"selinux: true\n")),(0,r.kt)("p",null,"Using a custom ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," under SELinux is not supported. To customize it, you would most likely need to write your own custom policy. For guidance, you could refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containers/container-selinux"},"containers/container-selinux")," repository, which contains the SELinux policy files for Container Runtimes, and the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s-selinux"},"k3s-io/k3s-selinux")," repository, which contains the SELinux policy for K3s."),(0,r.kt)("h2",{id:"enabling-lazy-pulling-of-estargz-experimental"},"Enabling Lazy Pulling of eStargz (Experimental)"),(0,r.kt)("h3",{id:"whats-lazy-pulling-and-estargz"},"What's lazy pulling and eStargz?"),(0,r.kt)("p",null,"Pulling images is known as one of the time-consuming steps in the container lifecycle.\nAccording to ",(0,r.kt)("a",{parentName:"p",href:"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"},"Harter, et al."),","),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"pulling packages accounts for 76% of container start time, but only 6.4% of that data is read")),(0,r.kt)("p",null,"To address this issue, k3s experimentally supports ",(0,r.kt)("em",{parentName:"p"},"lazy pulling")," of image contents.\nThis allows k3s to start a container before the entire image has been pulled.\nInstead, the necessary chunks of contents (e.g. individual files) are fetched on-demand.\nEspecially for large images, this technique can shorten the container startup latency."),(0,r.kt)("p",null,"To enable lazy pulling, the target image needs to be formatted as ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter/blob/main/docs/stargz-estargz.md"},(0,r.kt)("em",{parentName:"a"},"eStargz")),".\nThis is an OCI-alternative but 100% OCI-compatible image format for lazy pulling.\nBecause of the compatibility, eStargz can be pushed to standard container registries (e.g. ghcr.io) as well as this is ",(0,r.kt)("em",{parentName:"p"},"still runnable")," even on eStargz-agnostic runtimes."),(0,r.kt)("p",null,"eStargz is developed based on the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/google/crfs"},"stargz format proposed by Google CRFS project")," but comes with practical features including content verification and performance optimization.\nFor more details about lazy pulling and eStargz, please refer to ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter"},"Stargz Snapshotter project repository"),"."),(0,r.kt)("h3",{id:"configure-k3s-for-lazy-pulling-of-estargz"},"Configure k3s for lazy pulling of eStargz"),(0,r.kt)("p",null,"As shown in the following, ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshotter=stargz")," option is needed for k3s server and agent."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --snapshotter=stargz\n")),(0,r.kt)("p",null,"With this configuration, you can perform lazy pulling for eStargz-formatted images.\nThe following example Pod manifest uses eStargz-formatted ",(0,r.kt)("inlineCode",{parentName:"p"},"node:13.13.0")," image (",(0,r.kt)("inlineCode",{parentName:"p"},"ghcr.io/stargz-containers/node:13.13.0-esgz"),").\nWhen the stargz snapshotter is enabled, K3s performs lazy pulling for this image."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: nodejs\nspec:\n  containers:\n  - name: nodejs-estargz\n    image: ghcr.io/stargz-containers/node:13.13.0-esgz\n    command: [\"node\"]\n    args:\n    - -e\n    - var http = require('http');\n      http.createServer(function(req, res) {\n        res.writeHead(200);\n        res.end('Hello World!\\n');\n      }).listen(80);\n    ports:\n    - containerPort: 80\n")),(0,r.kt)("h2",{id:"additional-logging-sources"},"Additional Logging Sources"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/"},"Rancher logging")," for K3s can be installed without using Rancher. The following instructions should be executed to do so:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"helm repo add rancher-charts https://charts.rancher.io\nhelm repo update\nhelm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd\nhelm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging\n")),(0,r.kt)("h2",{id:"additional-network-policy-logging"},"Additional Network Policy Logging"),(0,r.kt)("p",null,"Packets dropped by network policies can be logged. The packet is sent to the iptables NFLOG action, which shows the packet details, including the network policy that blocked it."),(0,r.kt)("p",null,"If there is a lot of traffic, the number of log messages could be very high. To control the log rate on a per-policy basis, set the ",(0,r.kt)("inlineCode",{parentName:"p"},"limit")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst")," iptables parameters by adding the following annotations to the network policy in question:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit=<LIMIT-VALUE>")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE>"))),(0,r.kt)("p",null,"Default values are ",(0,r.kt)("inlineCode",{parentName:"p"},"limit=10/minute")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst=10"),". Check the ",(0,r.kt)("a",{parentName:"p",href:"https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches"},"iptables manual")," for more information on the format and possible values for these fields."),(0,r.kt)("p",null,"To convert NFLOG packets to log entries, install ulogd2 and configure ",(0,r.kt)("inlineCode",{parentName:"p"},"[log1]")," to read on ",(0,r.kt)("inlineCode",{parentName:"p"},"group=100"),". Then, restart the ulogd2 service for the new config to be committed.\nWhen a packet is blocked by network policy rules, a log message will appear in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/log/ulog/syslogemu.log"),"."),(0,r.kt)("p",null,"Packets sent to the NFLOG netlink socket can also be read by using command-line tools like tcpdump or tshark:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"tcpdump -ni nflog:100\n")),(0,r.kt)("p",null,"While more readily available, tcpdump will not show the name of the network policy that blocked the packet. Use wireshark's tshark command instead to display the full NFLOG packet header, including the ",(0,r.kt)("inlineCode",{parentName:"p"},"nflog.prefix")," field that contains the policy name."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3353],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),p=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=p(e.components);return a.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,d=s(e,["components","mdxType","originalType","parentName"]),c=p(n),m=r,k=c["".concat(l,".").concat(m)]||c[m]||u[m]||i;return n?a.createElement(k,o(o({ref:t},d),{},{components:n})):a.createElement(k,o({ref:t},d))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var i=n.length,o=new Array(i);o[0]=c;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var p=2;p<i;p++)o[p]=n[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},3115:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>k,frontMatter:()=>i,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const i={title:"Advanced Options / Configuration",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},o=void 0,s={unversionedId:"advanced/advanced",id:"advanced/advanced",title:"Advanced Options / Configuration",description:"This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use.",source:"@site/docs/advanced/advanced.md",sourceDirName:"advanced",slug:"/advanced/",permalink:"/advanced/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Advanced Options / Configuration",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},sidebar:"mySidebar",previous:{title:"Helm",permalink:"/helm/"},next:{title:"FAQ",permalink:"/faq/"}},l={},p=[{value:"Certificate Management",id:"certificate-management",level:2},{value:"Certificate Authority Certificates",id:"certificate-authority-certificates",level:3},{value:"Client and Server certificates",id:"client-and-server-certificates",level:3},{value:"Token Management",id:"token-management",level:2},{value:"Configuring an HTTP proxy",id:"configuring-an-http-proxy",level:2},{value:"Using Docker as the Container Runtime",id:"using-docker-as-the-container-runtime",level:2},{value:"Using etcdctl",id:"using-etcdctl",level:2},{value:"Configuring containerd",id:"configuring-containerd",level:2},{value:"NVIDIA Container Runtime Support",id:"nvidia-container-runtime-support",level:2},{value:"Running Agentless Servers (Experimental)",id:"running-agentless-servers-experimental",level:2},{value:"Running Rootless Servers (Experimental)",id:"running-rootless-servers-experimental",level:2},{value:"Known Issues with Rootless mode",id:"known-issues-with-rootless-mode",level:3},{value:"Starting Rootless Servers",id:"starting-rootless-servers",level:3},{value:"Advanced Rootless Configuration",id:"advanced-rootless-configuration",level:3},{value:"Troubleshooting Rootless",id:"troubleshooting-rootless",level:3},{value:"Node Labels and Taints",id:"node-labels-and-taints",level:2},{value:"Starting the Service with the Installation Script",id:"starting-the-service-with-the-installation-script",level:2},{value:"Additional OS Preparations",id:"additional-os-preparations",level:2},{value:"Old iptables versions",id:"old-iptables-versions",level:3},{value:"Red Hat Enterprise Linux / CentOS",id:"red-hat-enterprise-linux--centos",level:3},{value:"Ubuntu",id:"ubuntu",level:3},{value:"Raspberry Pi",id:"raspberry-pi",level:3},{value:"Running K3s in Docker",id:"running-k3s-in-docker",level:2},{value:"SELinux Support",id:"selinux-support",level:2},{value:"Enabling SELinux Enforcement",id:"enabling-selinux-enforcement",level:3},{value:"Enabling Lazy Pulling of eStargz (Experimental)",id:"enabling-lazy-pulling-of-estargz-experimental",level:2},{value:"What&#39;s lazy pulling and eStargz?",id:"whats-lazy-pulling-and-estargz",level:3},{value:"Configure k3s for lazy pulling of eStargz",id:"configure-k3s-for-lazy-pulling-of-estargz",level:3},{value:"Additional Logging Sources",id:"additional-logging-sources",level:2},{value:"Additional Network Policy Logging",id:"additional-network-policy-logging",level:2}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=d("Tabs"),c=d("TabItem"),m={toc:p};function k(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use."),(0,r.kt)("h2",{id:"certificate-management"},"Certificate Management"),(0,r.kt)("h3",{id:"certificate-authority-certificates"},"Certificate Authority Certificates"),(0,r.kt)("p",null,"K3s generates self-signed Certificate Authority (CA) Certificates during startup of the first server node. These CA certificates are valid for 10 years, and are not automatically renewed."),(0,r.kt)("p",null,"For information on using custom CA certificates, or renewing the self-signed CA certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/certificate#certificate-authority-ca-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate-ca")," command documentation"),"."),(0,r.kt)("h3",{id:"client-and-server-certificates"},"Client and Server certificates"),(0,r.kt)("p",null,"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts."),(0,r.kt)("p",null,"For information on manually rotating client and server certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/certificate#client-and-server-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate")," command documentation"),"."),(0,r.kt)("h2",{id:"token-management"},"Token Management"),(0,r.kt)("p",null,"By default, K3s uses a single static token for both servers and agents. This token cannot be changed once the cluster has been created.\nIt is possible to enable a second static token that can only be used to join agents, or to create temporary ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm")," style join tokens that expire automatically.\nFor more information, see the ",(0,r.kt)("a",{parentName:"p",href:"/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," command documentation"),"."),(0,r.kt)("h2",{id:"configuring-an-http-proxy"},"Configuring an HTTP proxy"),(0,r.kt)("p",null,"If you are running K3s in an environment, which only has external connectivity through an HTTP proxy, you can configure your proxy settings on the K3s systemd service. These proxy settings will then be used in K3s and passed down to the embedded containerd and kubelet."),(0,r.kt)("p",null,"The K3s installation script will automatically take the ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTPS_PROXY")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY"),", as well as the ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTPS_PROXY")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_NO_PROXY")," variables from the current shell, if they are present, and write them to the environment file of your systemd service, usually:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s.service.env")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s-agent.service.env"))),(0,r.kt)("p",null,"Of course, you can also configure the proxy by editing these files."),(0,r.kt)("p",null,"K3s will automatically add the cluster internal Pod and Service IP ranges and cluster DNS domain to the list of ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," entries. You should ensure that the IP address ranges used by the Kubernetes nodes themselves (i.e. the public and private IPs of the nodes) are included in the ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," list, or that the nodes can be reached through the proxy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"HTTP_PROXY=http://your-proxy.example.com:8888\nHTTPS_PROXY=http://your-proxy.example.com:8888\nNO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("p",null,"If you want to configure the proxy settings for containerd without affecting K3s and the Kubelet, you can prefix the variables with ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("h2",{id:"using-docker-as-the-container-runtime"},"Using Docker as the Container Runtime"),(0,r.kt)("p",null,"K3s includes and defaults to ",(0,r.kt)("a",{parentName:"p",href:"https://containerd.io/"},"containerd"),", an industry-standard container runtime.\nAs of Kubernetes 1.24, the Kubelet no longer includes dockershim, the component that allows the kubelet to communicate with dockerd.\nK3s 1.24 and higher include ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/Mirantis/cri-dockerd"},"cri-dockerd"),", which allows seamless upgrade from prior releases of K3s while continuing to use the Docker container runtime."),(0,r.kt)("p",null,"To use Docker instead of containerd:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Install Docker on the K3s node. One of Rancher's ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/install-docker"},"Docker installation scripts")," can be used to install Docker:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl https://releases.rancher.com/install-docker/20.10.sh | sh\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Install K3s using the ",(0,r.kt)("inlineCode",{parentName:"p"},"--docker")," option:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -s - --docker\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Confirm that the cluster is available:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ sudo k3s kubectl get pods --all-namespaces\nNAMESPACE     NAME                                     READY   STATUS      RESTARTS   AGE\nkube-system   local-path-provisioner-6d59f47c7-lncxn   1/1     Running     0          51s\nkube-system   metrics-server-7566d596c8-9tnck          1/1     Running     0          51s\nkube-system   helm-install-traefik-mbkn9               0/1     Completed   1          51s\nkube-system   coredns-8655855d6-rtbnb                  1/1     Running     0          51s\nkube-system   svclb-traefik-jbmvl                      2/2     Running     0          43s\nkube-system   traefik-758cd5fc85-2wz97                 1/1     Running     0          43s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Confirm that the Docker containers are running:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'$ sudo docker ps\nCONTAINER ID        IMAGE                     COMMAND                  CREATED              STATUS              PORTS               NAMES\n3e4d34729602        897ce3c5fc8f              "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\nbffdc9d7a65f        rancher/klipper-lb        "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n436b85c5e38d        rancher/library-traefik   "/traefik --configfi\u2026"   About a minute ago   Up About a minute                       k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nde8fded06188        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n7c6a30aeeb2f        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nae6c58cab4a7        9d12f9848b99              "local-path-provisio\u2026"   About a minute ago   Up About a minute                       k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\nbe1450e1a11e        9dd718864ce6              "/metrics-server"        About a minute ago   Up About a minute                       k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0\n4454d14e4d3f        c4d3d16fe508              "/coredns -conf /etc\u2026"   About a minute ago   Up About a minute                       k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\nc3675b87f96c        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\n4b1fddbe6ca6        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\n64d3517d4a95        rancher/pause:3.1         "/pause"\n')))),(0,r.kt)("h2",{id:"using-etcdctl"},"Using etcdctl"),(0,r.kt)("p",null,"etcdctl provides a CLI for interacting with etcd servers. K3s does not bundle etcdctl."),(0,r.kt)("p",null,"If you would like to use etcdctl to interact with K3s's embedded etcd, install etcdctl using the ",(0,r.kt)("a",{parentName:"p",href:"https://etcd.io/docs/latest/install/"},"official documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'ETCD_VERSION="v3.5.5"\nETCD_URL="https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz"\ncurl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin\n')),(0,r.kt)("p",null,"You may then use etcdctl by configuring it to use the K3s-managed certificates and keys for authentication:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo etcdctl version \\\n  --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\\n  --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\\n  --key=/var/lib/rancher/k3s/server/tls/etcd/client.key\n")),(0,r.kt)("h2",{id:"configuring-containerd"},"Configuring containerd"),(0,r.kt)("p",null,"K3s will generate config.toml for containerd in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/agent/etc/containerd/config.toml"),"."),(0,r.kt)("p",null,"For advanced customization for this file you can create another file called ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," in the same directory, and it will be used instead."),(0,r.kt)("p",null,"The ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," will be treated as a Go template file, and the ",(0,r.kt)("inlineCode",{parentName:"p"},"config.Node")," structure is being passed to the template. See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/agent/templates"},"this folder")," for Linux and Windows examples on how to use the structure to customize the configuration file.\nThe config.Node golang struct is defined ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/daemons/config/types.go#L37"},"here")),(0,r.kt)("h2",{id:"nvidia-container-runtime-support"},"NVIDIA Container Runtime Support"),(0,r.kt)("p",null,"K3s will automatically detect and configure the NVIDIA container runtime if it is present when K3s starts."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Install the nvidia-container package repository on the node by following the instructions at:\n",(0,r.kt)("a",{parentName:"li",href:"https://nvidia.github.io/libnvidia-container/"},"https://nvidia.github.io/libnvidia-container/")),(0,r.kt)("li",{parentName:"ol"},"Install the nvidia container runtime packages. For example:\n",(0,r.kt)("inlineCode",{parentName:"li"},"apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server")),(0,r.kt)("li",{parentName:"ol"},"Install K3s, or restart it if already installed:\n",(0,r.kt)("inlineCode",{parentName:"li"},"curl -ksL get.k3s.io | sh -")),(0,r.kt)("li",{parentName:"ol"},"Confirm that the nvidia container runtime has been found by k3s:\n",(0,r.kt)("inlineCode",{parentName:"li"},"grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml"))),(0,r.kt)("p",null,"This will automatically add ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia")," and/or ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia-experimental")," runtimes to the containerd configuration, depending on what runtime executables are found.\nYou must still add a RuntimeClass definition to your cluster, and deploy Pods that explicitly request the appropriate runtime by setting ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia")," in the Pod spec:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: node.k8s.io/v1\nkind: RuntimeClass\nmetadata:\n  name: nvidia\nhandler: nvidia\n---\napiVersion: v1\nkind: Pod\nmetadata:\n  name: nbody-gpu-benchmark\n  namespace: default\nspec:\n  restartPolicy: OnFailure\n  runtimeClassName: nvidia\n  containers:\n  - name: cuda-container\n    image: nvcr.io/nvidia/k8s/cuda-sample:nbody\n    args: ["nbody", "-gpu", "-benchmark"]\n    resources:\n      limits:\n        nvidia.com/gpu: 1\n    env:\n    - name: NVIDIA_VISIBLE_DEVICES\n      value: all\n    - name: NVIDIA_DRIVER_CAPABILITIES\n      value: all\n')),(0,r.kt)("p",null,"Note that the NVIDIA Container Runtime is also frequently used with the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/k8s-device-plugin/"},"NVIDIA Device Plugin")," and ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/gpu-feature-discovery/"},"GPU Feature Discovery"),", which must be installed separately, with modifications to ensure that pod specs include ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),", as mentioned above."),(0,r.kt)("h2",{id:"running-agentless-servers-experimental"},"Running Agentless Servers (Experimental)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Warning:")," This feature is experimental.")),(0,r.kt)("p",null,"When started with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-agent")," flag, servers do not run the kubelet, container runtime, or CNI. They do not register a Node resource in the cluster, and will not appear in ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get nodes")," output.\nBecause they do not host a kubelet, they cannot run pods or be managed by operators that rely on enumerating cluster nodes, including the embedded etcd controller and the system upgrade controller."),(0,r.kt)("p",null,"Running agentless servers may be advantageous if you want to obscure your control-plane nodes from discovery by agents and workloads, at the cost of increased administrative overhead caused by lack of cluster operator support."),(0,r.kt)("h2",{id:"running-rootless-servers-experimental"},"Running Rootless Servers (Experimental)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Warning:")," This feature is experimental.")),(0,r.kt)("p",null,"Rootless mode allows running K3s servers as an unprivileged user, so as to protect the real root on the host from potential container-breakout attacks."),(0,r.kt)("p",null,"See ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/")," to learn more about Rootless Kubernetes."),(0,r.kt)("h3",{id:"known-issues-with-rootless-mode"},"Known Issues with Rootless mode"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Ports")),(0,r.kt)("p",{parentName:"li"},"When running rootless a new network namespace is created.  This means that K3s instance is running with networking fairly detached from the host.\nThe only way to access Services run in K3s from the host is to set up port forwards to the K3s network namespace.\nRootless K3s includes controller that will automatically bind 6443 and service ports below 1024 to the host with an offset of 10000."),(0,r.kt)("p",{parentName:"li"},"For example, a Service on port 80 will become 10080 on the host, but 8080 will become 8080 without any offset. Currently, only LoadBalancer Services are automatically bound.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Cgroups")),(0,r.kt)("p",{parentName:"li"},'Cgroup v1 and Hybrid v1/v2 are not supported; only pure Cgroup v2 is supported. If K3s fails to start due to missing cgroups when running rootless, it is likely that your node is in Hybrid mode, and the "missing" cgroups are still bound to a v1 controller.')),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Multi-node/multi-process cluster")),(0,r.kt)("p",{parentName:"li"},"Multi-node rootless clusters, or multiple rootless k3s processes on the same node, are not currently supported. See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/6488#issuecomment-1314998091"},"#6488")," for more details."))),(0,r.kt)("h3",{id:"starting-rootless-servers"},"Starting Rootless Servers"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Enable cgroup v2 delegation, see ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/getting-started/common/cgroup2/"},"https://rootlesscontaine.rs/getting-started/common/cgroup2/")," .\nThis step is required; the rootless kubelet will fail to start without the proper cgroups delegated.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Download ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," from ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service"},(0,r.kt)("inlineCode",{parentName:"a"},"https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service")),".\nMake sure to use the same version of ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s"),".")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Install ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," to ",(0,r.kt)("inlineCode",{parentName:"p"},"~/.config/systemd/user/k3s-rootless.service"),".\nInstalling this file as a system-wide service (",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/..."),") is not supported.\nDepending on the path of ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," binary, you might need to modify the ",(0,r.kt)("inlineCode",{parentName:"p"},"ExecStart=/usr/local/bin/k3s ...")," line of the file.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Run ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user daemon-reload"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Run ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user enable --now k3s-rootless"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"Run ",(0,r.kt)("inlineCode",{parentName:"p"},"KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A"),", and make sure the pods are running."))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," Don't try to run ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server --rootless")," on a terminal, as terminal sessions do not allow cgroup v2 delegation.\nIf you really need to try it on a terminal, use ",(0,r.kt)("inlineCode",{parentName:"p"},"systemd-run --user -p Delegate=yes --tty k3s server --rooless")," to wrap it in a systemd scope.")),(0,r.kt)("h3",{id:"advanced-rootless-configuration"},"Advanced Rootless Configuration"),(0,r.kt)("p",null,"Rootless K3s uses ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/rootlesskit"},"rootlesskit")," and ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/slirp4netns"},"slirp4netns")," to communicate between host and user network namespaces.\nSome of the configuration used by rootlesskit and slirp4nets can be set by environment variables. The best way to set these is to add them to the ",(0,r.kt)("inlineCode",{parentName:"p"},"Environment")," field of the k3s-rootless systemd unit."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_MTU")),(0,r.kt)("td",{parentName:"tr",align:null},"1500"),(0,r.kt)("td",{parentName:"tr",align:null},"Sets the MTU for the slirp4netns virtual interfaces.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_CIDR")),(0,r.kt)("td",{parentName:"tr",align:null},"10.41.0.0/16"),(0,r.kt)("td",{parentName:"tr",align:null},"Sets the CIDR used by slirp4netns virtual interfaces.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_ENABLE_IPV6")),(0,r.kt)("td",{parentName:"tr",align:null},"autotedected"),(0,r.kt)("td",{parentName:"tr",align:null},"Enables slirp4netns IPv6 support. If not specified, it is automatically enabled if K3s is configured for dual-stack operation.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_PORT_DRIVER")),(0,r.kt)("td",{parentName:"tr",align:null},"builtin"),(0,r.kt)("td",{parentName:"tr",align:null},"Selects the rootless port driver; either ",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"slirp4netns"),". Builtin is faster, but masquerades the original source address of inbound packets.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_DISABLE_HOST_LOOPBACK")),(0,r.kt)("td",{parentName:"tr",align:null},"true"),(0,r.kt)("td",{parentName:"tr",align:null},"Controls whether or not access to the hosts's loopback address via the gateway interface is enabled. It is recommended that this not be changed, for security reasons.")))),(0,r.kt)("h3",{id:"troubleshooting-rootless"},"Troubleshooting Rootless"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Run ",(0,r.kt)("inlineCode",{parentName:"li"},"systemctl --user status k3s-rootless")," to check the daemon status"),(0,r.kt)("li",{parentName:"ul"},"Run ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl --user -f -u k3s-rootless")," to see the daemon log"),(0,r.kt)("li",{parentName:"ul"},"See also ",(0,r.kt)("a",{parentName:"li",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/"))),(0,r.kt)("h2",{id:"node-labels-and-taints"},"Node Labels and Taints"),(0,r.kt)("p",null,"K3s agents can be configured with the options ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," which adds a label and taint to the kubelet. The two options only add labels and/or taints ",(0,r.kt)("a",{parentName:"p",href:"/cli/agent#node-labels-and-taints-for-agents"},"at registration time"),", so they can only be set when the node is first joined to the cluster."),(0,r.kt)("p",null,"All current versions of Kubernetes restrict nodes from registering with most labels with ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"k8s.io")," prefixes, specifically including the ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io/role")," label. If you attempt to start a node with a disallowed label, K3s will fail to start. As stated by the Kubernetes authors:"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"Nodes are not permitted to assert their own role labels. Node roles are typically used to identify privileged or control plane types of nodes, and allowing nodes to label themselves into that pool allows a compromised node to trivially attract workloads (like control plane daemonsets) that confer access to higher privilege credentials.")),(0,r.kt)("p",null,"See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/279-limit-node-access/README.md#proposal"},"SIG-Auth KEP 279")," for more information."),(0,r.kt)("p",null,"If you want to change node labels and taints after node registration, or add reserved labels, you should use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),". Refer to the official Kubernetes documentation for details on how to add ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"taints")," and ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"node labels.")),(0,r.kt)("h2",{id:"starting-the-service-with-the-installation-script"},"Starting the Service with the Installation Script"),(0,r.kt)("p",null,"The installation script will auto-detect if your OS is using systemd or openrc and enable and start the service as part of the installation process."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"When running with openrc, logs will be created at ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),". "),(0,r.kt)("li",{parentName:"ul"},"When running with systemd, logs will be created in ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/syslog")," and viewed using ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s")," (or ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s-agent")," on agents).")),(0,r.kt)("p",null,"An example of disabling auto-starting and service enablement with the install script:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,r.kt)("h2",{id:"additional-os-preparations"},"Additional OS Preparations"),(0,r.kt)("h3",{id:"old-iptables-versions"},"Old iptables versions"),(0,r.kt)("p",null,"Several popular Linux distributions ship a version of iptables that contain a bug which causes the accumulation of duplicate rules, which negatively affects the performance and stability of the node. See ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/3117"},"Issue #3117")," for information on how to determine if you are affected by this problem."),(0,r.kt)("p",null,"K3s includes a working version of iptables (v1.8.8) which functions properly. You can tell K3s to use its bundled version of iptables by starting K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," option, or by uninstalling the iptables/nftables packages from your operating system."),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," flag is available starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1).")),(0,r.kt)("h3",{id:"red-hat-enterprise-linux--centos"},"Red Hat Enterprise Linux / CentOS"),(0,r.kt)("p",null,"It is recommended to turn off firewalld:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable firewalld --now\n")),(0,r.kt)("p",null,"If you wish to keep firewalld enabled, by default, the following rules are required:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"firewall-cmd --permanent --add-port=6443/tcp #apiserver\nfirewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods\nfirewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services\nfirewall-cmd --reload\n")),(0,r.kt)("p",null,"Additional ports may need to be opened depending on your setup. See ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements#inbound-rules-for-k3s-server-nodes"},"Inbound Rules")," for more information. If you change the default CIDR for pods or services, you will need to update the firewall rules accordingly."),(0,r.kt)("p",null,"If enabled, it is required to disable nm-cloud-setup and reboot the node:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable nm-cloud-setup.service nm-cloud-setup.timer\nreboot\n")),(0,r.kt)("h3",{id:"ubuntu"},"Ubuntu"),(0,r.kt)("p",null,"It is recommended to turn off ufw (uncomplicated firewall):"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw disable\n")),(0,r.kt)("p",null,"If you wish to keep ufw enabled, by default, the following rules are required:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw allow 6443/tcp #apiserver\nufw allow from 10.42.0.0/16 to any #pods\nufw allow from 10.43.0.0/16 to any #services\n")),(0,r.kt)("p",null,"Additional ports may need to be opened depending on your setup. See ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements#inbound-rules-for-k3s-server-nodes"},"Inbound Rules")," for more information. If you change the default CIDR for pods or services, you will need to update the firewall rules accordingly."),(0,r.kt)("h3",{id:"raspberry-pi"},"Raspberry Pi"),(0,r.kt)("p",null,"Raspberry Pi OS is Debian based, and may suffer from an old iptables version. See ",(0,r.kt)("a",{parentName:"p",href:"#old-iptables-versions"},"workarounds"),"."),(0,r.kt)("p",null,"Standard Raspberry Pi OS installations do not start with ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," enabled. ",(0,r.kt)("strong",{parentName:"p"},"K3S")," needs ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," to start the systemd service. ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"can be enabled by appending ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroup_memory=1 cgroup_enable=memory")," to ",(0,r.kt)("inlineCode",{parentName:"p"},"/boot/cmdline.txt"),"."),(0,r.kt)("p",null,"Example cmdline.txt:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory\n")),(0,r.kt)("p",null,"Starting with Ubuntu 21.10, vxlan support on Raspberry Pi has been moved into a separate kernel module. "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt install linux-modules-extra-raspi\n")),(0,r.kt)("h2",{id:"running-k3s-in-docker"},"Running K3s in Docker"),(0,r.kt)("p",null,"There are several ways to run K3s in Docker:"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(c,{value:"K3d",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3d-io/k3d"},"k3d")," is a utility designed to easily run multi-node K3s clusters in Docker."),(0,r.kt)("p",null,"k3d makes it very easy to create single- and multi-node k3s clusters in docker, e.g. for local development on Kubernetes."),(0,r.kt)("p",null,"See the ",(0,r.kt)("a",{parentName:"p",href:"https://k3d.io/#installation"},"Installation")," documentation for more information on how to install and use k3d.")),(0,r.kt)(c,{value:"Docker",mdxType:"TabItem"},(0,r.kt)("p",null,"To use Docker, ",(0,r.kt)("inlineCode",{parentName:"p"},"rancher/k3s")," images are also available to run the K3s server and agent.\nUsing the ",(0,r.kt)("inlineCode",{parentName:"p"},"docker run")," command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker run \\\n  --privileged \\\n  --name k3s-server-1 \\\n  --hostname k3s-server-1 \\\n  -p 6443:6443 \\\n  -d rancher/k3s:v1.24.10-k3s1 \\\n  server\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"You must specify a valid K3s version as the tag; the ",(0,r.kt)("inlineCode",{parentName:"p"},"latest")," tag is not maintained.",(0,r.kt)("br",{parentName:"p"}),"\n","Docker images do not allow a ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," sign in tags, use a ",(0,r.kt)("inlineCode",{parentName:"p"},"-")," in the tag instead.")),(0,r.kt)("p",null,"Once K3s is up and running, you can copy the admin kubeconfig out of the Docker container for use:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config\n")))),(0,r.kt)("h2",{id:"selinux-support"},"SELinux Support"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of v1.19.4+k3s1")),(0,r.kt)("p",null,"If you are installing K3s on a system where SELinux is enabled by default (such as CentOS), you must ensure the proper SELinux policies have been installed. "),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(c,{value:"Automatic Installation",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"The ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-with-install-script"},"install script")," will automatically install the SELinux RPM from the Rancher RPM repository if on a compatible system if not performing an air-gapped install. Automatic installation can be skipped by setting ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_SELINUX_RPM=true"),".")),(0,r.kt)(c,{value:"Manual Installation",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"The necessary policies can be installed with the following commands:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"yum install -y container-selinux selinux-policy-base\nyum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm\n")),(0,r.kt)("p",null,"To force the install script to log a warning rather than fail, you can set the following environment variable: ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SELINUX_WARN=true"),"."))),(0,r.kt)("h3",{id:"enabling-selinux-enforcement"},"Enabling SELinux Enforcement"),(0,r.kt)("p",null,"To leverage SELinux, specify the ",(0,r.kt)("inlineCode",{parentName:"p"},"--selinux")," flag when starting K3s servers and agents."),(0,r.kt)("p",null,"This option can also be specified in the K3s ",(0,r.kt)("a",{parentName:"p",href:"#"},"configuration file"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"selinux: true\n")),(0,r.kt)("p",null,"Using a custom ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," under SELinux is not supported. To customize it, you would most likely need to write your own custom policy. For guidance, you could refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containers/container-selinux"},"containers/container-selinux")," repository, which contains the SELinux policy files for Container Runtimes, and the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s-selinux"},"k3s-io/k3s-selinux")," repository, which contains the SELinux policy for K3s."),(0,r.kt)("h2",{id:"enabling-lazy-pulling-of-estargz-experimental"},"Enabling Lazy Pulling of eStargz (Experimental)"),(0,r.kt)("h3",{id:"whats-lazy-pulling-and-estargz"},"What's lazy pulling and eStargz?"),(0,r.kt)("p",null,"Pulling images is known as one of the time-consuming steps in the container lifecycle.\nAccording to ",(0,r.kt)("a",{parentName:"p",href:"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"},"Harter, et al."),","),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"pulling packages accounts for 76% of container start time, but only 6.4% of that data is read")),(0,r.kt)("p",null,"To address this issue, k3s experimentally supports ",(0,r.kt)("em",{parentName:"p"},"lazy pulling")," of image contents.\nThis allows k3s to start a container before the entire image has been pulled.\nInstead, the necessary chunks of contents (e.g. individual files) are fetched on-demand.\nEspecially for large images, this technique can shorten the container startup latency."),(0,r.kt)("p",null,"To enable lazy pulling, the target image needs to be formatted as ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter/blob/main/docs/stargz-estargz.md"},(0,r.kt)("em",{parentName:"a"},"eStargz")),".\nThis is an OCI-alternative but 100% OCI-compatible image format for lazy pulling.\nBecause of the compatibility, eStargz can be pushed to standard container registries (e.g. ghcr.io) as well as this is ",(0,r.kt)("em",{parentName:"p"},"still runnable")," even on eStargz-agnostic runtimes."),(0,r.kt)("p",null,"eStargz is developed based on the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/google/crfs"},"stargz format proposed by Google CRFS project")," but comes with practical features including content verification and performance optimization.\nFor more details about lazy pulling and eStargz, please refer to ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter"},"Stargz Snapshotter project repository"),"."),(0,r.kt)("h3",{id:"configure-k3s-for-lazy-pulling-of-estargz"},"Configure k3s for lazy pulling of eStargz"),(0,r.kt)("p",null,"As shown in the following, ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshotter=stargz")," option is needed for k3s server and agent."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --snapshotter=stargz\n")),(0,r.kt)("p",null,"With this configuration, you can perform lazy pulling for eStargz-formatted images.\nThe following example Pod manifest uses eStargz-formatted ",(0,r.kt)("inlineCode",{parentName:"p"},"node:13.13.0")," image (",(0,r.kt)("inlineCode",{parentName:"p"},"ghcr.io/stargz-containers/node:13.13.0-esgz"),").\nWhen the stargz snapshotter is enabled, K3s performs lazy pulling for this image."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: nodejs\nspec:\n  containers:\n  - name: nodejs-estargz\n    image: ghcr.io/stargz-containers/node:13.13.0-esgz\n    command: [\"node\"]\n    args:\n    - -e\n    - var http = require('http');\n      http.createServer(function(req, res) {\n        res.writeHead(200);\n        res.end('Hello World!\\n');\n      }).listen(80);\n    ports:\n    - containerPort: 80\n")),(0,r.kt)("h2",{id:"additional-logging-sources"},"Additional Logging Sources"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/"},"Rancher logging")," for K3s can be installed without using Rancher. The following instructions should be executed to do so:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"helm repo add rancher-charts https://charts.rancher.io\nhelm repo update\nhelm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd\nhelm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging\n")),(0,r.kt)("h2",{id:"additional-network-policy-logging"},"Additional Network Policy Logging"),(0,r.kt)("p",null,"Packets dropped by network policies can be logged. The packet is sent to the iptables NFLOG action, which shows the packet details, including the network policy that blocked it."),(0,r.kt)("p",null,"If there is a lot of traffic, the number of log messages could be very high. To control the log rate on a per-policy basis, set the ",(0,r.kt)("inlineCode",{parentName:"p"},"limit")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst")," iptables parameters by adding the following annotations to the network policy in question:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit=<LIMIT-VALUE>")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE>"))),(0,r.kt)("p",null,"Default values are ",(0,r.kt)("inlineCode",{parentName:"p"},"limit=10/minute")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst=10"),". Check the ",(0,r.kt)("a",{parentName:"p",href:"https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches"},"iptables manual")," for more information on the format and possible values for these fields."),(0,r.kt)("p",null,"To convert NFLOG packets to log entries, install ulogd2 and configure ",(0,r.kt)("inlineCode",{parentName:"p"},"[log1]")," to read on ",(0,r.kt)("inlineCode",{parentName:"p"},"group=100"),". Then, restart the ulogd2 service for the new config to be committed.\nWhen a packet is blocked by network policy rules, a log message will appear in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/log/ulog/syslogemu.log"),"."),(0,r.kt)("p",null,"Packets sent to the NFLOG netlink socket can also be read by using command-line tools like tcpdump or tshark:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"tcpdump -ni nflog:100\n")),(0,r.kt)("p",null,"While more readily available, tcpdump will not show the name of the network policy that blocked the packet. Use wireshark's tshark command instead to display the full NFLOG packet header, including the ",(0,r.kt)("inlineCode",{parentName:"p"},"nflog.prefix")," field that contains the policy name."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/6780.6d95d5ed.js b/assets/js/6780.6d95d5ed.js
deleted file mode 100644
index 803aa19e4..000000000
--- a/assets/js/6780.6d95d5ed.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6780],{6780:(e,t,r)=>{function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t,r){var a,c=t.initialState;return{getState:function(){return c},dispatch:function(a,i){var l=function(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?n(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):n(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}({},c);c=e(c,{type:a,props:t,payload:i}),r({state:c,prevState:l})},pendingRequests:(a=[],{add:function(e){return a.push(e),e.finally((function(){a=a.filter((function(t){return t!==e}))}))},cancelAll:function(){a.forEach((function(e){return e.cancel()}))},isEmpty:function(){return 0===a.length}})}}function c(e){return e.reduce((function(e,t){return e.concat(t)}),[])}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function u(e){return 0===e.collections.length?0:e.collections.reduce((function(e,t){return e+t.items.length}),0)}r.r(t),r.d(t,{DocSearchModal:()=>Dr});var f=0;var m=function(){};function p(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function d(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function h(e,t){var r=[];return Promise.resolve(e(t)).then((function(e){return Array.isArray(e),Promise.all(e.filter((function(e){return Boolean(e)})).map((function(e){if(e.sourceId,r.includes(e.sourceId))throw new Error("[Autocomplete] The `sourceId` ".concat(JSON.stringify(e.sourceId)," is not unique."));r.push(e.sourceId);var t=function(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?p(Object(r),!0).forEach((function(t){d(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):p(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}({getItemInputValue:function(e){return e.state.query},getItemUrl:function(){},onSelect:function(e){(0,e.setIsOpen)(!1)},onActive:m},e);return Promise.resolve(t)})))}))}function v(e){return function(e){if(Array.isArray(e))return y(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return y(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return y(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function y(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function g(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function b(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?g(Object(r),!0).forEach((function(t){O(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):g(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function O(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function S(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function E(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?S(Object(r),!0).forEach((function(t){j(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):S(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function j(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function w(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function P(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?w(Object(r),!0).forEach((function(t){I(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):w(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function I(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function D(e){return function(e){if(Array.isArray(e))return k(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return k(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return k(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function k(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function C(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function A(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?C(Object(r),!0).forEach((function(t){x(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):C(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function x(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function N(e){return Boolean(e.execute)}function _(e,t){return r=e,Boolean(null==r?void 0:r.execute)?A(A({},e),{},{requests:e.queries.map((function(r){return{query:r,sourceId:t,transformResponse:e.transformResponse}}))}):{items:e,sourceId:t};var r}function R(e){var t=e.reduce((function(e,t){if(!N(t))return e.push(t),e;var r=t.searchClient,n=t.execute,o=t.requesterId,a=t.requests,c=e.find((function(e){return N(t)&&N(e)&&e.searchClient===r&&Boolean(o)&&e.requesterId===o}));if(c){var i;(i=c.items).push.apply(i,D(a))}else{var l={execute:n,requesterId:o,items:a,searchClient:r};e.push(l)}return e}),[]).map((function(e){if(!N(e))return Promise.resolve(e);var t=e,r=t.execute,n=t.items;return r({searchClient:t.searchClient,requests:n})}));return Promise.all(t).then((function(e){return c(e)}))}function q(e,t){return t.map((function(t){var r=e.filter((function(e){return e.sourceId===t.sourceId})),n=r.map((function(e){return e.items})),o=r[0].transformResponse,a=o?o(function(e){var t=e.map((function(e){var t;return P(P({},e),{},{hits:null===(t=e.hits)||void 0===t?void 0:t.map((function(t){return P(P({},t),{},{__autocomplete_indexName:e.index,__autocomplete_queryID:e.queryID})}))})}));return{results:t,hits:t.map((function(e){return e.hits})).filter(Boolean),facetHits:t.map((function(e){var t;return null===(t=e.facetHits)||void 0===t?void 0:t.map((function(e){return{label:e.value,count:e.count,_highlightResult:{label:{value:e.highlighted}}}}))})).filter(Boolean)}}(n)):n;return Array.isArray(a),a.every(Boolean),'The `getItems` function from source "'.concat(t.sourceId,'" must return an array of items but returned ').concat(JSON.stringify(void 0),".\n\nDid you forget to return items?\n\nSee: https://www.algolia.com/doc/ui-libraries/autocomplete/core-concepts/sources/#param-getitems"),{source:t,items:a}}))}function T(e,t){var r=t;return{then:function(t,n){return T(e.then(H(t,r,e),H(n,r,e)),r)},catch:function(t){return T(e.catch(H(t,r,e)),r)},finally:function(t){return t&&r.onCancelList.push(t),T(e.finally(H(t&&function(){return r.onCancelList=[],t()},r,e)),r)},cancel:function(){r.isCanceled=!0;var e=r.onCancelList;r.onCancelList=[],e.forEach((function(e){e()}))},isCanceled:function(){return!0===r.isCanceled}}}function L(e){return T(new Promise((function(t,r){return e(t,r)})),{isCanceled:!1,onCancelList:[]})}function M(e){return T(e,{isCanceled:!1,onCancelList:[]})}function H(e,t,r){return e?function(r){return t.isCanceled?r:e(r)}:r}function F(e){var t=function(e){var t=e.collections.map((function(e){return e.items.length})).reduce((function(e,t,r){var n=(e[r-1]||0)+t;return e.push(n),e}),[]).reduce((function(t,r){return r<=e.activeItemId?t+1:t}),0);return e.collections[t]}(e);if(!t)return null;var r=t.items[function(e){for(var t=e.state,r=e.collection,n=!1,o=0,a=0;!1===n;){var c=t.collections[o];if(c===r){n=!0;break}a+=c.items.length,o++}return t.activeItemId-a}({state:e,collection:t})],n=t.source;return{item:r,itemInputValue:n.getItemInputValue({item:r,state:e}),itemUrl:n.getItemUrl({item:r,state:e}),source:n}}L.resolve=function(e){return M(Promise.resolve(e))},L.reject=function(e){return M(Promise.reject(e))};var U=["event","nextState","props","query","refresh","store"];function B(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function V(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?B(Object(r),!0).forEach((function(t){K(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):B(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function K(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function J(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var $,z,W,Q=null,Z=($=-1,z=-1,W=void 0,function(e){var t=++$;return Promise.resolve(e).then((function(e){return W&&t<z?W:(z=t,W=e,e)}))});function Y(e){var t=e.event,r=e.nextState,n=void 0===r?{}:r,o=e.props,a=e.query,i=e.refresh,l=e.store,s=J(e,U);Q&&o.environment.clearTimeout(Q);var u=s.setCollections,f=s.setIsOpen,m=s.setQuery,p=s.setActiveItemId,d=s.setStatus;if(m(a),p(o.defaultActiveItemId),!a&&!1===o.openOnFocus){var h,v=l.getState().collections.map((function(e){return V(V({},e),{},{items:[]})}));d("idle"),u(v),f(null!==(h=n.isOpen)&&void 0!==h?h:o.shouldPanelOpen({state:l.getState()}));var y=M(Z(v).then((function(){return Promise.resolve()})));return l.pendingRequests.add(y)}d("loading"),Q=o.environment.setTimeout((function(){d("stalled")}),o.stallThreshold);var g=M(Z(o.getSources(V({query:a,refresh:i,state:l.getState()},s)).then((function(e){return Promise.all(e.map((function(e){return Promise.resolve(e.getItems(V({query:a,refresh:i,state:l.getState()},s))).then((function(t){return _(t,e.sourceId)}))}))).then(R).then((function(t){return q(t,e)})).then((function(e){return function(e){var t=e.collections,r=e.props,n=e.state,o=t.reduce((function(e,t){return E(E({},e),{},j({},t.source.sourceId,E(E({},t.source),{},{getItems:function(){return c(t.items)}})))}),{});return c(r.reshape({sources:Object.values(o),sourcesBySourceId:o,state:n})).filter(Boolean).map((function(e){return{source:e,items:e.getItems()}}))}({collections:e,props:o,state:l.getState()})}))})))).then((function(e){var r;d("idle"),u(e);var c=o.shouldPanelOpen({state:l.getState()});f(null!==(r=n.isOpen)&&void 0!==r?r:o.openOnFocus&&!a&&c||c);var m=F(l.getState());if(null!==l.getState().activeItemId&&m){var p=m.item,h=m.itemInputValue,v=m.itemUrl,y=m.source;y.onActive(V({event:t,item:p,itemInputValue:h,itemUrl:v,refresh:i,source:y,state:l.getState()},s))}})).finally((function(){d("idle"),Q&&o.environment.clearTimeout(Q)}));return l.pendingRequests.add(g)}var G=["event","props","refresh","store"];function X(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ee(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?X(Object(r),!0).forEach((function(t){te(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):X(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function te(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function re(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var ne=/((gt|sm)-|galaxy nexus)|samsung[- ]/i;var oe=["props","refresh","store"],ae=["inputElement","formElement","panelElement"],ce=["inputElement"],ie=["inputElement","maxLength"],le=["item","source"];function se(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ue(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?se(Object(r),!0).forEach((function(t){fe(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):se(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function fe(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function me(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function pe(e){var t=e.props,r=e.refresh,n=e.store,o=me(e,oe);return{getEnvironmentProps:function(e){var r=e.inputElement,o=e.formElement,a=e.panelElement;function c(e){!n.getState().isOpen&&n.pendingRequests.isEmpty()||e.target===r||!1===[o,a].some((function(t){return r=t,n=e.target,r===n||r.contains(n);var r,n}))&&(n.dispatch("blur",null),t.debug||n.pendingRequests.cancelAll())}return ue({onTouchStart:c,onMouseDown:c,onTouchMove:function(e){!1!==n.getState().isOpen&&r===t.environment.document.activeElement&&e.target!==r&&r.blur()}},me(e,ae))},getRootProps:function(e){return ue({role:"combobox","aria-expanded":n.getState().isOpen,"aria-haspopup":"listbox","aria-owns":n.getState().isOpen?"".concat(t.id,"-list"):void 0,"aria-labelledby":"".concat(t.id,"-label")},e)},getFormProps:function(e){e.inputElement;return ue({action:"",noValidate:!0,role:"search",onSubmit:function(a){var c;a.preventDefault(),t.onSubmit(ue({event:a,refresh:r,state:n.getState()},o)),n.dispatch("submit",null),null===(c=e.inputElement)||void 0===c||c.blur()},onReset:function(a){var c;a.preventDefault(),t.onReset(ue({event:a,refresh:r,state:n.getState()},o)),n.dispatch("reset",null),null===(c=e.inputElement)||void 0===c||c.focus()}},me(e,ce))},getLabelProps:function(e){return ue({htmlFor:"".concat(t.id,"-input"),id:"".concat(t.id,"-label")},e)},getInputProps:function(e){var a;function c(e){(t.openOnFocus||Boolean(n.getState().query))&&Y(ue({event:e,props:t,query:n.getState().completion||n.getState().query,refresh:r,store:n},o)),n.dispatch("focus",null)}var i=e||{},l=(i.inputElement,i.maxLength),s=void 0===l?512:l,u=me(i,ie),f=F(n.getState()),p=function(e){return Boolean(e&&e.match(ne))}((null===(a=t.environment.navigator)||void 0===a?void 0:a.userAgent)||""),d=null!=f&&f.itemUrl&&!p?"go":"search";return ue({"aria-autocomplete":"both","aria-activedescendant":n.getState().isOpen&&null!==n.getState().activeItemId?"".concat(t.id,"-item-").concat(n.getState().activeItemId):void 0,"aria-controls":n.getState().isOpen?"".concat(t.id,"-list"):void 0,"aria-labelledby":"".concat(t.id,"-label"),value:n.getState().completion||n.getState().query,id:"".concat(t.id,"-input"),autoComplete:"off",autoCorrect:"off",autoCapitalize:"off",enterKeyHint:d,spellCheck:"false",autoFocus:t.autoFocus,placeholder:t.placeholder,maxLength:s,type:"search",onChange:function(e){Y(ue({event:e,props:t,query:e.currentTarget.value.slice(0,s),refresh:r,store:n},o))},onKeyDown:function(e){!function(e){var t=e.event,r=e.props,n=e.refresh,o=e.store,a=re(e,G);if("ArrowUp"===t.key||"ArrowDown"===t.key){var c=function(){var e=r.environment.document.getElementById("".concat(r.id,"-item-").concat(o.getState().activeItemId));e&&(e.scrollIntoViewIfNeeded?e.scrollIntoViewIfNeeded(!1):e.scrollIntoView(!1))},i=function(){var e=F(o.getState());if(null!==o.getState().activeItemId&&e){var r=e.item,c=e.itemInputValue,i=e.itemUrl,l=e.source;l.onActive(ee({event:t,item:r,itemInputValue:c,itemUrl:i,refresh:n,source:l,state:o.getState()},a))}};t.preventDefault(),!1===o.getState().isOpen&&(r.openOnFocus||Boolean(o.getState().query))?Y(ee({event:t,props:r,query:o.getState().query,refresh:n,store:o},a)).then((function(){o.dispatch(t.key,{nextActiveItemId:r.defaultActiveItemId}),i(),setTimeout(c,0)})):(o.dispatch(t.key,{}),i(),c())}else if("Escape"===t.key)t.preventDefault(),o.dispatch(t.key,null),o.pendingRequests.cancelAll();else if("Tab"===t.key)o.dispatch("blur",null),o.pendingRequests.cancelAll();else if("Enter"===t.key){if(null===o.getState().activeItemId||o.getState().collections.every((function(e){return 0===e.items.length})))return void(r.debug||o.pendingRequests.cancelAll());t.preventDefault();var l=F(o.getState()),s=l.item,u=l.itemInputValue,f=l.itemUrl,m=l.source;if(t.metaKey||t.ctrlKey)void 0!==f&&(m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),r.navigator.navigateNewTab({itemUrl:f,item:s,state:o.getState()}));else if(t.shiftKey)void 0!==f&&(m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),r.navigator.navigateNewWindow({itemUrl:f,item:s,state:o.getState()}));else if(t.altKey);else{if(void 0!==f)return m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),void r.navigator.navigate({itemUrl:f,item:s,state:o.getState()});Y(ee({event:t,nextState:{isOpen:!1},props:r,query:u,refresh:n,store:o},a)).then((function(){m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a))}))}}}(ue({event:e,props:t,refresh:r,store:n},o))},onFocus:c,onBlur:m,onClick:function(r){e.inputElement!==t.environment.document.activeElement||n.getState().isOpen||c(r)}},u)},getPanelProps:function(e){return ue({onMouseDown:function(e){e.preventDefault()},onMouseLeave:function(){n.dispatch("mouseleave",null)}},e)},getListProps:function(e){return ue({role:"listbox","aria-labelledby":"".concat(t.id,"-label"),id:"".concat(t.id,"-list")},e)},getItemProps:function(e){var a=e.item,c=e.source,i=me(e,le);return ue({id:"".concat(t.id,"-item-").concat(a.__autocomplete_id),role:"option","aria-selected":n.getState().activeItemId===a.__autocomplete_id,onMouseMove:function(e){if(a.__autocomplete_id!==n.getState().activeItemId){n.dispatch("mousemove",a.__autocomplete_id);var t=F(n.getState());if(null!==n.getState().activeItemId&&t){var c=t.item,i=t.itemInputValue,l=t.itemUrl,s=t.source;s.onActive(ue({event:e,item:c,itemInputValue:i,itemUrl:l,refresh:r,source:s,state:n.getState()},o))}}},onMouseDown:function(e){e.preventDefault()},onClick:function(e){var i=c.getItemInputValue({item:a,state:n.getState()}),l=c.getItemUrl({item:a,state:n.getState()});(l?Promise.resolve():Y(ue({event:e,nextState:{isOpen:!1},props:t,query:i,refresh:r,store:n},o))).then((function(){c.onSelect(ue({event:e,item:a,itemInputValue:i,itemUrl:l,refresh:r,source:c,state:n.getState()},o))}))}},i)}}}var de=[{segment:"autocomplete-core",version:"1.7.4"}];function he(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ve(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?he(Object(r),!0).forEach((function(t){ye(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):he(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function ye(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function ge(e){var t,r,n,o,a=e.plugins,c=e.options,i=null===(t=((null===(r=c.__autocomplete_metadata)||void 0===r?void 0:r.userAgents)||[])[0])||void 0===t?void 0:t.segment,l=i?ye({},i,Object.keys((null===(n=c.__autocomplete_metadata)||void 0===n?void 0:n.options)||{})):{};return{plugins:a.map((function(e){return{name:e.name,options:Object.keys(e.__autocomplete_pluginOptions||[])}})),options:ve({"autocomplete-core":Object.keys(c)},l),ua:de.concat((null===(o=c.__autocomplete_metadata)||void 0===o?void 0:o.userAgents)||[])}}function be(e){var t,r=e.state;return!1===r.isOpen||null===r.activeItemId?null:(null===(t=F(r))||void 0===t?void 0:t.itemInputValue)||null}function Oe(e,t,r,n){if(!r)return null;if(e<0&&(null===t||null!==n&&0===t))return r+e;var o=(null===t?-1:t)+e;return o<=-1||o>=r?null===n?null:0:o}function Se(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Ee(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Se(Object(r),!0).forEach((function(t){je(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Se(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function je(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}var we=function(e,t){switch(t.type){case"setActiveItemId":case"mousemove":return Ee(Ee({},e),{},{activeItemId:t.payload});case"setQuery":return Ee(Ee({},e),{},{query:t.payload,completion:null});case"setCollections":return Ee(Ee({},e),{},{collections:t.payload});case"setIsOpen":return Ee(Ee({},e),{},{isOpen:t.payload});case"setStatus":return Ee(Ee({},e),{},{status:t.payload});case"setContext":return Ee(Ee({},e),{},{context:Ee(Ee({},e.context),t.payload)});case"ArrowDown":var r=Ee(Ee({},e),{},{activeItemId:t.payload.hasOwnProperty("nextActiveItemId")?t.payload.nextActiveItemId:Oe(1,e.activeItemId,u(e),t.props.defaultActiveItemId)});return Ee(Ee({},r),{},{completion:be({state:r})});case"ArrowUp":var n=Ee(Ee({},e),{},{activeItemId:Oe(-1,e.activeItemId,u(e),t.props.defaultActiveItemId)});return Ee(Ee({},n),{},{completion:be({state:n})});case"Escape":return e.isOpen?Ee(Ee({},e),{},{activeItemId:null,isOpen:!1,completion:null}):Ee(Ee({},e),{},{activeItemId:null,query:"",status:"idle",collections:[]});case"submit":return Ee(Ee({},e),{},{activeItemId:null,isOpen:!1,status:"idle"});case"reset":return Ee(Ee({},e),{},{activeItemId:!0===t.props.openOnFocus?t.props.defaultActiveItemId:null,status:"idle",query:""});case"focus":return Ee(Ee({},e),{},{activeItemId:t.props.defaultActiveItemId,isOpen:(t.props.openOnFocus||Boolean(e.query))&&t.props.shouldPanelOpen({state:e})});case"blur":return t.props.debug?e:Ee(Ee({},e),{},{isOpen:!1,activeItemId:null});case"mouseleave":return Ee(Ee({},e),{},{activeItemId:t.props.defaultActiveItemId});default:return"The reducer action ".concat(JSON.stringify(t.type)," is not supported."),e}};function Pe(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Ie(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Pe(Object(r),!0).forEach((function(t){De(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Pe(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function De(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function ke(e){var t=[],r=function(e,t){var r,n="undefined"!=typeof window?window:{},o=e.plugins||[];return b(b({debug:!1,openOnFocus:!1,placeholder:"",autoFocus:!1,defaultActiveItemId:null,stallThreshold:300,environment:n,shouldPanelOpen:function(e){return u(e.state)>0},reshape:function(e){return e.sources}},e),{},{id:null!==(r=e.id)&&void 0!==r?r:"autocomplete-".concat(f++),plugins:o,initialState:b({activeItemId:null,query:"",completion:null,collections:[],isOpen:!1,status:"idle",context:{}},e.initialState),onStateChange:function(t){var r;null===(r=e.onStateChange)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onStateChange)||void 0===r?void 0:r.call(e,t)}))},onSubmit:function(t){var r;null===(r=e.onSubmit)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onSubmit)||void 0===r?void 0:r.call(e,t)}))},onReset:function(t){var r;null===(r=e.onReset)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onReset)||void 0===r?void 0:r.call(e,t)}))},getSources:function(r){return Promise.all([].concat(v(o.map((function(e){return e.getSources}))),[e.getSources]).filter(Boolean).map((function(e){return h(e,r)}))).then((function(e){return c(e)})).then((function(e){return e.map((function(e){return b(b({},e),{},{onSelect:function(r){e.onSelect(r),t.forEach((function(e){var t;return null===(t=e.onSelect)||void 0===t?void 0:t.call(e,r)}))},onActive:function(r){e.onActive(r),t.forEach((function(e){var t;return null===(t=e.onActive)||void 0===t?void 0:t.call(e,r)}))}})}))}))},navigator:b({navigate:function(e){var t=e.itemUrl;n.location.assign(t)},navigateNewTab:function(e){var t=e.itemUrl,r=n.open(t,"_blank","noopener");null==r||r.focus()},navigateNewWindow:function(e){var t=e.itemUrl;n.open(t,"_blank","noopener")}},e.navigator)})}(e,t),n=a(we,r,(function(e){var t=e.prevState,n=e.state;r.onStateChange(Ie({prevState:t,state:n,refresh:s},o))})),o=function(e){var t=e.store;return{setActiveItemId:function(e){t.dispatch("setActiveItemId",e)},setQuery:function(e){t.dispatch("setQuery",e)},setCollections:function(e){var r=0,n=e.map((function(e){return l(l({},e),{},{items:c(e.items).map((function(e){return l(l({},e),{},{__autocomplete_id:r++})}))})}));t.dispatch("setCollections",n)},setIsOpen:function(e){t.dispatch("setIsOpen",e)},setStatus:function(e){t.dispatch("setStatus",e)},setContext:function(e){t.dispatch("setContext",e)}}}({store:n}),i=pe(Ie({props:r,refresh:s,store:n},o));function s(){return Y(Ie({event:new Event("input"),nextState:{isOpen:n.getState().isOpen},props:r,query:n.getState().query,refresh:s,store:n},o))}return r.plugins.forEach((function(e){var r;return null===(r=e.subscribe)||void 0===r?void 0:r.call(e,Ie(Ie({},o),{},{refresh:s,onSelect:function(e){t.push({onSelect:e})},onActive:function(e){t.push({onActive:e})}}))})),function(e){var t,r,n=e.metadata,o=e.environment;if(null===(t=o.navigator)||void 0===t||null===(r=t.userAgent)||void 0===r?void 0:r.includes("Algolia Crawler")){var a=o.document.createElement("meta"),c=o.document.querySelector("head");a.name="algolia:metadata",setTimeout((function(){a.content=JSON.stringify(n),c.appendChild(a)}),0)}}({metadata:ge({plugins:r.plugins,options:e}),environment:r.environment}),Ie(Ie({refresh:s},i),o)}var Ce=r(7294);function Ae(e){var t=e.translations,r=(void 0===t?{}:t).searchByText,n=void 0===r?"Search by":r;return Ce.createElement("a",{href:"https://www.algolia.com/ref/docsearch/?utm_source=".concat(window.location.hostname,"&utm_medium=referral&utm_content=powered_by&utm_campaign=docsearch"),target:"_blank",rel:"noopener noreferrer"},Ce.createElement("span",{className:"DocSearch-Label"},n),Ce.createElement("svg",{width:"77",height:"19","aria-label":"Algolia",role:"img",id:"Layer_1",xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 2196.2 500"},Ce.createElement("defs",null,Ce.createElement("style",null,".cls-1,.cls-2{fill:#003dff;}.cls-2{fill-rule:evenodd;}")),Ce.createElement("path",{className:"cls-2",d:"M1070.38,275.3V5.91c0-3.63-3.24-6.39-6.82-5.83l-50.46,7.94c-2.87,.45-4.99,2.93-4.99,5.84l.17,273.22c0,12.92,0,92.7,95.97,95.49,3.33,.1,6.09-2.58,6.09-5.91v-40.78c0-2.96-2.19-5.51-5.12-5.84-34.85-4.01-34.85-47.57-34.85-54.72Z"}),Ce.createElement("rect",{className:"cls-1",x:"1845.88",y:"104.73",width:"62.58",height:"277.9",rx:"5.9",ry:"5.9"}),Ce.createElement("path",{className:"cls-2",d:"M1851.78,71.38h50.77c3.26,0,5.9-2.64,5.9-5.9V5.9c0-3.62-3.24-6.39-6.82-5.83l-50.77,7.95c-2.87,.45-4.99,2.92-4.99,5.83v51.62c0,3.26,2.64,5.9,5.9,5.9Z"}),Ce.createElement("path",{className:"cls-2",d:"M1764.03,275.3V5.91c0-3.63-3.24-6.39-6.82-5.83l-50.46,7.94c-2.87,.45-4.99,2.93-4.99,5.84l.17,273.22c0,12.92,0,92.7,95.97,95.49,3.33,.1,6.09-2.58,6.09-5.91v-40.78c0-2.96-2.19-5.51-5.12-5.84-34.85-4.01-34.85-47.57-34.85-54.72Z"}),Ce.createElement("path",{className:"cls-2",d:"M1631.95,142.72c-11.14-12.25-24.83-21.65-40.78-28.31-15.92-6.53-33.26-9.85-52.07-9.85-18.78,0-36.15,3.17-51.92,9.85-15.59,6.66-29.29,16.05-40.76,28.31-11.47,12.23-20.38,26.87-26.76,44.03-6.38,17.17-9.24,37.37-9.24,58.36,0,20.99,3.19,36.87,9.55,54.21,6.38,17.32,15.14,32.11,26.45,44.36,11.29,12.23,24.83,21.62,40.6,28.46,15.77,6.83,40.12,10.33,52.4,10.48,12.25,0,36.78-3.82,52.7-10.48,15.92-6.68,29.46-16.23,40.78-28.46,11.29-12.25,20.05-27.04,26.25-44.36,6.22-17.34,9.24-33.22,9.24-54.21,0-20.99-3.34-41.19-10.03-58.36-6.38-17.17-15.14-31.8-26.43-44.03Zm-44.43,163.75c-11.47,15.75-27.56,23.7-48.09,23.7-20.55,0-36.63-7.8-48.1-23.7-11.47-15.75-17.21-34.01-17.21-61.2,0-26.89,5.59-49.14,17.06-64.87,11.45-15.75,27.54-23.52,48.07-23.52,20.55,0,36.63,7.78,48.09,23.52,11.47,15.57,17.36,37.98,17.36,64.87,0,27.19-5.72,45.3-17.19,61.2Z"}),Ce.createElement("path",{className:"cls-2",d:"M894.42,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-14.52,22.58-22.99,49.63-22.99,78.73,0,44.89,20.13,84.92,51.59,111.1,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47,1.23,0,2.46-.03,3.68-.09,.36-.02,.71-.05,1.07-.07,.87-.05,1.75-.11,2.62-.2,.34-.03,.68-.08,1.02-.12,.91-.1,1.82-.21,2.73-.34,.21-.03,.42-.07,.63-.1,32.89-5.07,61.56-30.82,70.9-62.81v57.83c0,3.26,2.64,5.9,5.9,5.9h50.42c3.26,0,5.9-2.64,5.9-5.9V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,206.92c-12.2,10.16-27.97,13.98-44.84,15.12-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-42.24,0-77.12-35.89-77.12-79.37,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33v142.83Z"}),Ce.createElement("path",{className:"cls-2",d:"M2133.97,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-14.52,22.58-22.99,49.63-22.99,78.73,0,44.89,20.13,84.92,51.59,111.1,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47,1.23,0,2.46-.03,3.68-.09,.36-.02,.71-.05,1.07-.07,.87-.05,1.75-.11,2.62-.2,.34-.03,.68-.08,1.02-.12,.91-.1,1.82-.21,2.73-.34,.21-.03,.42-.07,.63-.1,32.89-5.07,61.56-30.82,70.9-62.81v57.83c0,3.26,2.64,5.9,5.9,5.9h50.42c3.26,0,5.9-2.64,5.9-5.9V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,206.92c-12.2,10.16-27.97,13.98-44.84,15.12-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-42.24,0-77.12-35.89-77.12-79.37,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33v142.83Z"}),Ce.createElement("path",{className:"cls-2",d:"M1314.05,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-11.79,18.34-19.6,39.64-22.11,62.59-.58,5.3-.88,10.68-.88,16.14s.31,11.15,.93,16.59c4.28,38.09,23.14,71.61,50.66,94.52,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47h0c17.99,0,34.61-5.93,48.16-15.97,16.29-11.58,28.88-28.54,34.48-47.75v50.26h-.11v11.08c0,21.84-5.71,38.27-17.34,49.36-11.61,11.08-31.04,16.63-58.25,16.63-11.12,0-28.79-.59-46.6-2.41-2.83-.29-5.46,1.5-6.27,4.22l-12.78,43.11c-1.02,3.46,1.27,7.02,4.83,7.53,21.52,3.08,42.52,4.68,54.65,4.68,48.91,0,85.16-10.75,108.89-32.21,21.48-19.41,33.15-48.89,35.2-88.52V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,64.1s.65,139.13,0,143.36c-12.08,9.77-27.11,13.59-43.49,14.7-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-1.32,0-2.63-.03-3.94-.1-40.41-2.11-74.52-37.26-74.52-79.38,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33Z"}),Ce.createElement("path",{className:"cls-1",d:"M249.83,0C113.3,0,2,110.09,.03,246.16c-2,138.19,110.12,252.7,248.33,253.5,42.68,.25,83.79-10.19,120.3-30.03,3.56-1.93,4.11-6.83,1.08-9.51l-23.38-20.72c-4.75-4.21-11.51-5.4-17.36-2.92-25.48,10.84-53.17,16.38-81.71,16.03-111.68-1.37-201.91-94.29-200.13-205.96,1.76-110.26,92-199.41,202.67-199.41h202.69V407.41l-115-102.18c-3.72-3.31-9.42-2.66-12.42,1.31-18.46,24.44-48.53,39.64-81.93,37.34-46.33-3.2-83.87-40.5-87.34-86.81-4.15-55.24,39.63-101.52,94-101.52,49.18,0,89.68,37.85,93.91,85.95,.38,4.28,2.31,8.27,5.52,11.12l29.95,26.55c3.4,3.01,8.79,1.17,9.63-3.3,2.16-11.55,2.92-23.58,2.07-35.92-4.82-70.34-61.8-126.93-132.17-131.26-80.68-4.97-148.13,58.14-150.27,137.25-2.09,77.1,61.08,143.56,138.19,145.26,32.19,.71,62.03-9.41,86.14-26.95l150.26,133.2c6.44,5.71,16.61,1.14,16.61-7.47V9.48C499.66,4.25,495.42,0,490.18,0H249.83Z"})))}function xe(e){return Ce.createElement("svg",{width:"15",height:"15","aria-label":e.ariaLabel,role:"img"},Ce.createElement("g",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"1.2"},e.children))}function Ne(e){var t=e.translations,r=void 0===t?{}:t,n=r.selectText,o=void 0===n?"to select":n,a=r.selectKeyAriaLabel,c=void 0===a?"Enter key":a,i=r.navigateText,l=void 0===i?"to navigate":i,s=r.navigateUpKeyAriaLabel,u=void 0===s?"Arrow up":s,f=r.navigateDownKeyAriaLabel,m=void 0===f?"Arrow down":f,p=r.closeText,d=void 0===p?"to close":p,h=r.closeKeyAriaLabel,v=void 0===h?"Escape key":h,y=r.searchByText,g=void 0===y?"Search by":y;return Ce.createElement(Ce.Fragment,null,Ce.createElement("div",{className:"DocSearch-Logo"},Ce.createElement(Ae,{translations:{searchByText:g}})),Ce.createElement("ul",{className:"DocSearch-Commands"},Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:c},Ce.createElement("path",{d:"M12 3.53088v3c0 1-1 2-2 2H4M7 11.53088l-3-3 3-3"}))),Ce.createElement("span",{className:"DocSearch-Label"},o)),Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:m},Ce.createElement("path",{d:"M7.5 3.5v8M10.5 8.5l-3 3-3-3"}))),Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:u},Ce.createElement("path",{d:"M7.5 11.5v-8M10.5 6.5l-3-3-3 3"}))),Ce.createElement("span",{className:"DocSearch-Label"},l)),Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:v},Ce.createElement("path",{d:"M13.6167 8.936c-.1065.3583-.6883.962-1.4875.962-.7993 0-1.653-.9165-1.653-2.1258v-.5678c0-1.2548.7896-2.1016 1.653-2.1016.8634 0 1.3601.4778 1.4875 1.0724M9 6c-.1352-.4735-.7506-.9219-1.46-.8972-.7092.0246-1.344.57-1.344 1.2166s.4198.8812 1.3445.9805C8.465 7.3992 8.968 7.9337 9 8.5c.032.5663-.454 1.398-1.4595 1.398C6.6593 9.898 6 9 5.963 8.4851m-1.4748.5368c-.2635.5941-.8099.876-1.5443.876s-1.7073-.6248-1.7073-2.204v-.4603c0-1.0416.721-2.131 1.7073-2.131.9864 0 1.6425 1.031 1.5443 2.2492h-2.956"}))),Ce.createElement("span",{className:"DocSearch-Label"},d))))}function _e(e){var t=e.hit,r=e.children;return Ce.createElement("a",{href:t.url},r)}function Re(){return Ce.createElement("svg",{width:"40",height:"40",viewBox:"0 0 20 20",fill:"none",fillRule:"evenodd",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M19 4.8a16 16 0 00-2-1.2m-3.3-1.2A16 16 0 001.1 4.7M16.7 8a12 12 0 00-2.8-1.4M10 6a12 12 0 00-6.7 2M12.3 14.7a4 4 0 00-4.5 0M14.5 11.4A8 8 0 0010 10M3 16L18 2M10 18h0"}))}function qe(e){var t=e.translations,r=void 0===t?{}:t,n=r.titleText,o=void 0===n?"Unable to fetch results":n,a=r.helpText,c=void 0===a?"You might want to check your network connection.":a;return Ce.createElement("div",{className:"DocSearch-ErrorScreen"},Ce.createElement("div",{className:"DocSearch-Screen-Icon"},Ce.createElement(Re,null)),Ce.createElement("p",{className:"DocSearch-Title"},o),Ce.createElement("p",{className:"DocSearch-Help"},c))}function Te(){return Ce.createElement("svg",{width:"40",height:"40",viewBox:"0 0 20 20",fill:"none",fillRule:"evenodd",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M15.5 4.8c2 3 1.7 7-1 9.7h0l4.3 4.3-4.3-4.3a7.8 7.8 0 01-9.8 1m-2.2-2.2A7.8 7.8 0 0113.2 2.4M2 18L18 2"}))}var Le=["translations"];function Me(e){return function(e){if(Array.isArray(e))return He(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return He(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return He(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function He(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function Fe(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ue(e){var t=e.translations,r=void 0===t?{}:t,n=Fe(e,Le),o=r.noResultsText,a=void 0===o?"No results for":o,c=r.suggestedQueryText,i=void 0===c?"Try searching for":c,l=r.reportMissingResultsText,s=void 0===l?"Believe this query should return results?":l,u=r.reportMissingResultsLinkText,f=void 0===u?"Let us know.":u,m=n.state.context.searchSuggestions;return Ce.createElement("div",{className:"DocSearch-NoResults"},Ce.createElement("div",{className:"DocSearch-Screen-Icon"},Ce.createElement(Te,null)),Ce.createElement("p",{className:"DocSearch-Title"},a,' "',Ce.createElement("strong",null,n.state.query),'"'),m&&m.length>0&&Ce.createElement("div",{className:"DocSearch-NoResults-Prefill-List"},Ce.createElement("p",{className:"DocSearch-Help"},i,":"),Ce.createElement("ul",null,m.slice(0,3).reduce((function(e,t){return[].concat(Me(e),[Ce.createElement("li",{key:t},Ce.createElement("button",{className:"DocSearch-Prefill",key:t,type:"button",onClick:function(){n.setQuery(t.toLowerCase()+" "),n.refresh(),n.inputRef.current.focus()}},t))])}),[]))),n.getMissingResultsUrl&&Ce.createElement("p",{className:"DocSearch-Help"},"".concat(s," "),Ce.createElement("a",{href:n.getMissingResultsUrl({query:n.state.query}),target:"_blank",rel:"noopener noreferrer"},f)))}var Be=function(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M17 6v12c0 .52-.2 1-1 1H4c-.7 0-1-.33-1-1V2c0-.55.42-1 1-1h8l5 5zM14 8h-3.13c-.51 0-.87-.34-.87-.87V4",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))};function Ve(e){switch(e.type){case"lvl1":return Ce.createElement(Be,null);case"content":return Ce.createElement(Je,null);default:return Ce.createElement(Ke,null)}}function Ke(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M13 13h4-4V8H7v5h6v4-4H7V8H3h4V3v5h6V3v5h4-4v5zm-6 0v4-4H3h4z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}function Je(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M17 5H3h14zm0 5H3h14zm0 5H3h14z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))}function $e(){return Ce.createElement("svg",{className:"DocSearch-Hit-Select-Icon",width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M18 3v4c0 2-2 4-4 4H2"}),Ce.createElement("path",{d:"M8 17l-6-6 6-6"})))}var ze=["hit","attribute","tagName"];function We(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Qe(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?We(Object(r),!0).forEach((function(t){Ze(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):We(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function Ze(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function Ye(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ge(e,t){return t.split(".").reduce((function(e,t){return null!=e&&e[t]?e[t]:null}),e)}function Xe(e){var t=e.hit,r=e.attribute,n=e.tagName,o=void 0===n?"span":n,a=Ye(e,ze);return(0,Ce.createElement)(o,Qe(Qe({},a),{},{dangerouslySetInnerHTML:{__html:Ge(t,"_snippetResult.".concat(r,".value"))||Ge(t,r)}}))}function et(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==r)return;var n,o,a=[],c=!0,i=!1;try{for(r=r.call(e);!(c=(n=r.next()).done)&&(a.push(n.value),!t||a.length!==t);c=!0);}catch(l){i=!0,o=l}finally{try{c||null==r.return||r.return()}finally{if(i)throw o}}return a}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return tt(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return tt(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function tt(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function rt(){return rt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},rt.apply(this,arguments)}function nt(e){return e.collection&&0!==e.collection.items.length?Ce.createElement("section",{className:"DocSearch-Hits"},Ce.createElement("div",{className:"DocSearch-Hit-source"},e.title),Ce.createElement("ul",e.getListProps(),e.collection.items.map((function(t,r){return Ce.createElement(ot,rt({key:[e.title,t.objectID].join(":"),item:t,index:r},e))})))):null}function ot(e){var t=e.item,r=e.index,n=e.renderIcon,o=e.renderAction,a=e.getItemProps,c=e.onItemClick,i=e.collection,l=e.hitComponent,s=et(Ce.useState(!1),2),u=s[0],f=s[1],m=et(Ce.useState(!1),2),p=m[0],d=m[1],h=Ce.useRef(null),v=l;return Ce.createElement("li",rt({className:["DocSearch-Hit",t.__docsearch_parent&&"DocSearch-Hit--Child",u&&"DocSearch-Hit--deleting",p&&"DocSearch-Hit--favoriting"].filter(Boolean).join(" "),onTransitionEnd:function(){h.current&&h.current()}},a({item:t,source:i.source,onClick:function(){c(t)}})),Ce.createElement(v,{hit:t},Ce.createElement("div",{className:"DocSearch-Hit-Container"},n({item:t,index:r}),t.hierarchy[t.type]&&"lvl1"===t.type&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"hierarchy.lvl1"}),t.content&&Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"content"})),t.hierarchy[t.type]&&("lvl2"===t.type||"lvl3"===t.type||"lvl4"===t.type||"lvl5"===t.type||"lvl6"===t.type)&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"hierarchy.".concat(t.type)}),Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"hierarchy.lvl1"})),"content"===t.type&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"content"}),Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"hierarchy.lvl1"})),o({item:t,runDeleteTransition:function(e){f(!0),h.current=e},runFavoriteTransition:function(e){d(!0),h.current=e}}))))}var at=/(<mark>|<\/mark>)/g,ct=RegExp(at.source);function it(e){var t,r,n,o,a,c=e;if(!c.__docsearch_parent&&!e._highlightResult)return e.hierarchy.lvl0;var i=((c.__docsearch_parent?null===(t=c.__docsearch_parent)||void 0===t||null===(r=t._highlightResult)||void 0===r||null===(n=r.hierarchy)||void 0===n?void 0:n.lvl0:null===(o=e._highlightResult)||void 0===o||null===(a=o.hierarchy)||void 0===a?void 0:a.lvl0)||{}).value;return i&&ct.test(i)?i.replace(at,""):i}function lt(){return lt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},lt.apply(this,arguments)}function st(e){return Ce.createElement("div",{className:"DocSearch-Dropdown-Container"},e.state.collections.map((function(t){if(0===t.items.length)return null;var r=it(t.items[0]);return Ce.createElement(nt,lt({},e,{key:t.source.sourceId,title:r,collection:t,renderIcon:function(e){var r,n=e.item,o=e.index;return Ce.createElement(Ce.Fragment,null,n.__docsearch_parent&&Ce.createElement("svg",{className:"DocSearch-Hit-Tree",viewBox:"0 0 24 54"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},n.__docsearch_parent!==(null===(r=t.items[o+1])||void 0===r?void 0:r.__docsearch_parent)?Ce.createElement("path",{d:"M8 6v21M20 27H8.3"}):Ce.createElement("path",{d:"M8 6v42M20 27H8.3"}))),Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(Ve,{type:n.type})))},renderAction:function(){return Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement($e,null))}}))})),e.resultsFooterComponent&&Ce.createElement("section",{className:"DocSearch-HitsFooter"},Ce.createElement(e.resultsFooterComponent,{state:e.state})))}function ut(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M3.18 6.6a8.23 8.23 0 1112.93 9.94h0a8.23 8.23 0 01-11.63 0"}),Ce.createElement("path",{d:"M6.44 7.25H2.55V3.36M10.45 6v5.6M10.45 11.6L13 13"})))}function ft(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M10 14.2L5 17l1-5.6-4-4 5.5-.7 2.5-5 2.5 5 5.6.8-4 4 .9 5.5z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))}function mt(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M10 10l5.09-5.09L10 10l5.09 5.09L10 10zm0 0L4.91 4.91 10 10l-5.09 5.09L10 10z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}var pt=["translations"];function dt(){return dt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},dt.apply(this,arguments)}function ht(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function vt(e){var t=e.translations,r=void 0===t?{}:t,n=ht(e,pt),o=r.recentSearchesTitle,a=void 0===o?"Recent":o,c=r.noRecentSearchesText,i=void 0===c?"No recent searches":c,l=r.saveRecentSearchButtonTitle,s=void 0===l?"Save this search":l,u=r.removeRecentSearchButtonTitle,f=void 0===u?"Remove this search from history":u,m=r.favoriteSearchesTitle,p=void 0===m?"Favorite":m,d=r.removeFavoriteSearchButtonTitle,h=void 0===d?"Remove this search from favorites":d;return"idle"===n.state.status&&!1===n.hasCollections?n.disableUserPersonalization?null:Ce.createElement("div",{className:"DocSearch-StartScreen"},Ce.createElement("p",{className:"DocSearch-Help"},i)):!1===n.hasCollections?null:Ce.createElement("div",{className:"DocSearch-Dropdown-Container"},Ce.createElement(nt,dt({},n,{title:a,collection:n.state.collections[0],renderIcon:function(){return Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(ut,null))},renderAction:function(e){var t=e.item,r=e.runFavoriteTransition,o=e.runDeleteTransition;return Ce.createElement(Ce.Fragment,null,Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:s,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),r((function(){n.favoriteSearches.add(t),n.recentSearches.remove(t),n.refresh()}))}},Ce.createElement(ft,null))),Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:f,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),o((function(){n.recentSearches.remove(t),n.refresh()}))}},Ce.createElement(mt,null))))}})),Ce.createElement(nt,dt({},n,{title:p,collection:n.state.collections[1],renderIcon:function(){return Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(ft,null))},renderAction:function(e){var t=e.item,r=e.runDeleteTransition;return Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:h,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),r((function(){n.favoriteSearches.remove(t),n.refresh()}))}},Ce.createElement(mt,null)))}})))}var yt=["translations"];function gt(){return gt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},gt.apply(this,arguments)}function bt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var Ot=Ce.memo((function(e){var t=e.translations,r=void 0===t?{}:t,n=bt(e,yt);if("error"===n.state.status)return Ce.createElement(qe,{translations:null==r?void 0:r.errorScreen});var o=n.state.collections.some((function(e){return e.items.length>0}));return n.state.query?!1===o?Ce.createElement(Ue,gt({},n,{translations:null==r?void 0:r.noResultsScreen})):Ce.createElement(st,n):Ce.createElement(vt,gt({},n,{hasCollections:o,translations:null==r?void 0:r.startScreen}))}),(function(e,t){return"loading"===t.state.status||"stalled"===t.state.status}));function St(){return Ce.createElement("svg",{viewBox:"0 0 38 38",stroke:"currentColor",strokeOpacity:".5"},Ce.createElement("g",{fill:"none",fillRule:"evenodd"},Ce.createElement("g",{transform:"translate(1 1)",strokeWidth:"2"},Ce.createElement("circle",{strokeOpacity:".3",cx:"18",cy:"18",r:"18"}),Ce.createElement("path",{d:"M36 18c0-9.94-8.06-18-18-18"},Ce.createElement("animateTransform",{attributeName:"transform",type:"rotate",from:"0 18 18",to:"360 18 18",dur:"1s",repeatCount:"indefinite"})))))}var Et=r(830),jt=["translations"];function wt(){return wt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},wt.apply(this,arguments)}function Pt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function It(e){var t=e.translations,r=void 0===t?{}:t,n=Pt(e,jt),o=r.resetButtonTitle,a=void 0===o?"Clear the query":o,c=r.resetButtonAriaLabel,i=void 0===c?"Clear the query":c,l=r.cancelButtonText,s=void 0===l?"Cancel":l,u=r.cancelButtonAriaLabel,f=void 0===u?"Cancel":u,m=n.getFormProps({inputElement:n.inputRef.current}).onReset;return Ce.useEffect((function(){n.autoFocus&&n.inputRef.current&&n.inputRef.current.focus()}),[n.autoFocus,n.inputRef]),Ce.useEffect((function(){n.isFromSelection&&n.inputRef.current&&n.inputRef.current.select()}),[n.isFromSelection,n.inputRef]),Ce.createElement(Ce.Fragment,null,Ce.createElement("form",{className:"DocSearch-Form",onSubmit:function(e){e.preventDefault()},onReset:m},Ce.createElement("label",wt({className:"DocSearch-MagnifierLabel"},n.getLabelProps()),Ce.createElement(Et.W,null)),Ce.createElement("div",{className:"DocSearch-LoadingIndicator"},Ce.createElement(St,null)),Ce.createElement("input",wt({className:"DocSearch-Input",ref:n.inputRef},n.getInputProps({inputElement:n.inputRef.current,autoFocus:n.autoFocus,maxLength:64}))),Ce.createElement("button",{type:"reset",title:a,className:"DocSearch-Reset","aria-label":i,hidden:!n.state.query},Ce.createElement(mt,null))),Ce.createElement("button",{className:"DocSearch-Cancel",type:"reset","aria-label":f,onClick:n.onClose},s))}var Dt=["_highlightResult","_snippetResult"];function kt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ct(e){return!1===function(){var e="__TEST_KEY__";try{return localStorage.setItem(e,""),localStorage.removeItem(e),!0}catch(t){return!1}}()?{setItem:function(){},getItem:function(){return[]}}:{setItem:function(t){return window.localStorage.setItem(e,JSON.stringify(t))},getItem:function(){var t=window.localStorage.getItem(e);return t?JSON.parse(t):[]}}}function At(e){var t=e.key,r=e.limit,n=void 0===r?5:r,o=Ct(t),a=o.getItem().slice(0,n);return{add:function(e){var t=e,r=(t._highlightResult,t._snippetResult,kt(t,Dt)),c=a.findIndex((function(e){return e.objectID===r.objectID}));c>-1&&a.splice(c,1),a.unshift(r),a=a.slice(0,n),o.setItem(a)},remove:function(e){a=a.filter((function(t){return t.objectID!==e.objectID})),o.setItem(a)},getAll:function(){return a}}}function xt(e){const t=`algoliasearch-client-js-${e.key}`;let r;const n=()=>(void 0===r&&(r=e.localStorage||window.localStorage),r),o=()=>JSON.parse(n().getItem(t)||"{}");return{get:(e,t,r={miss:()=>Promise.resolve()})=>Promise.resolve().then((()=>{const r=JSON.stringify(e),n=o()[r];return Promise.all([n||t(),void 0!==n])})).then((([e,t])=>Promise.all([e,t||r.miss(e)]))).then((([e])=>e)),set:(e,r)=>Promise.resolve().then((()=>{const a=o();return a[JSON.stringify(e)]=r,n().setItem(t,JSON.stringify(a)),r})),delete:e=>Promise.resolve().then((()=>{const r=o();delete r[JSON.stringify(e)],n().setItem(t,JSON.stringify(r))})),clear:()=>Promise.resolve().then((()=>{n().removeItem(t)}))}}function Nt(e){const t=[...e.caches],r=t.shift();return void 0===r?{get:(e,t,r={miss:()=>Promise.resolve()})=>t().then((e=>Promise.all([e,r.miss(e)]))).then((([e])=>e)),set:(e,t)=>Promise.resolve(t),delete:e=>Promise.resolve(),clear:()=>Promise.resolve()}:{get:(e,n,o={miss:()=>Promise.resolve()})=>r.get(e,n,o).catch((()=>Nt({caches:t}).get(e,n,o))),set:(e,n)=>r.set(e,n).catch((()=>Nt({caches:t}).set(e,n))),delete:e=>r.delete(e).catch((()=>Nt({caches:t}).delete(e))),clear:()=>r.clear().catch((()=>Nt({caches:t}).clear()))}}function _t(e={serializable:!0}){let t={};return{get(r,n,o={miss:()=>Promise.resolve()}){const a=JSON.stringify(r);if(a in t)return Promise.resolve(e.serializable?JSON.parse(t[a]):t[a]);const c=n(),i=o&&o.miss||(()=>Promise.resolve());return c.then((e=>i(e))).then((()=>c))},set:(r,n)=>(t[JSON.stringify(r)]=e.serializable?JSON.stringify(n):n,Promise.resolve(n)),delete:e=>(delete t[JSON.stringify(e)],Promise.resolve()),clear:()=>(t={},Promise.resolve())}}function Rt(e){let t=e.length-1;for(;t>0;t--){const r=Math.floor(Math.random()*(t+1)),n=e[t];e[t]=e[r],e[r]=n}return e}function qt(e,t){return t?(Object.keys(t).forEach((r=>{e[r]=t[r](e)})),e):e}function Tt(e,...t){let r=0;return e.replace(/%s/g,(()=>encodeURIComponent(t[r++])))}const Lt="4.15.0",Mt={WithinQueryParameters:0,WithinHeaders:1};function Ht(e,t){const r=e||{},n=r.data||{};return Object.keys(r).forEach((e=>{-1===["timeout","headers","queryParameters","data","cacheable"].indexOf(e)&&(n[e]=r[e])})),{data:Object.entries(n).length>0?n:void 0,timeout:r.timeout||t,headers:r.headers||{},queryParameters:r.queryParameters||{},cacheable:r.cacheable}}const Ft={Read:1,Write:2,Any:3},Ut=1,Bt=2,Vt=3,Kt=12e4;function Jt(e,t=Ut){return{...e,status:t,lastUpdate:Date.now()}}function $t(e){return"string"==typeof e?{protocol:"https",url:e,accept:Ft.Any}:{protocol:e.protocol||"https",url:e.url,accept:e.accept||Ft.Any}}const zt="GET",Wt="POST";function Qt(e,t){return Promise.all(t.map((t=>e.get(t,(()=>Promise.resolve(Jt(t))))))).then((e=>{const r=e.filter((e=>function(e){return e.status===Ut||Date.now()-e.lastUpdate>Kt}(e))),n=e.filter((e=>function(e){return e.status===Vt&&Date.now()-e.lastUpdate<=Kt}(e))),o=[...r,...n];return{getTimeout:(e,t)=>(0===n.length&&0===e?1:n.length+3+e)*t,statelessHosts:o.length>0?o.map((e=>$t(e))):t}}))}function Zt(e,t,r,n){const o=[],a=function(e,t){if(e.method===zt||void 0===e.data&&void 0===t.data)return;const r=Array.isArray(e.data)?e.data:{...e.data,...t.data};return JSON.stringify(r)}(r,n),c=function(e,t){const r={...e.headers,...t.headers},n={};return Object.keys(r).forEach((e=>{const t=r[e];n[e.toLowerCase()]=t})),n}(e,n),i=r.method,l=r.method!==zt?{}:{...r.data,...n.data},s={"x-algolia-agent":e.userAgent.value,...e.queryParameters,...l,...n.queryParameters};let u=0;const f=(t,l)=>{const m=t.pop();if(void 0===m)throw{name:"RetryError",message:"Unreachable hosts - your application id may be incorrect. If the error persists, contact support@algolia.com.",transporterStackTrace:er(o)};const p={data:a,headers:c,method:i,url:Gt(m,r.path,s),connectTimeout:l(u,e.timeouts.connect),responseTimeout:l(u,n.timeout)},d=e=>{const r={request:p,response:e,host:m,triesLeft:t.length};return o.push(r),r},h={onSuccess:e=>function(e){try{return JSON.parse(e.content)}catch(t){throw function(e,t){return{name:"DeserializationError",message:e,response:t}}(t.message,e)}}(e),onRetry(r){const n=d(r);return r.isTimedOut&&u++,Promise.all([e.logger.info("Retryable failure",tr(n)),e.hostsCache.set(m,Jt(m,r.isTimedOut?Vt:Bt))]).then((()=>f(t,l)))},onFail(e){throw d(e),function({content:e,status:t},r){let n=e;try{n=JSON.parse(e).message}catch(o){}return function(e,t,r){return{name:"ApiError",message:e,status:t,transporterStackTrace:r}}(n,t,r)}(e,er(o))}};return e.requester.send(p).then((e=>((e,t)=>(e=>{const t=e.status;return e.isTimedOut||(({isTimedOut:e,status:t})=>!e&&0==~~t)(e)||2!=~~(t/100)&&4!=~~(t/100)})(e)?t.onRetry(e):(({status:e})=>2==~~(e/100))(e)?t.onSuccess(e):t.onFail(e))(e,h)))};return Qt(e.hostsCache,t).then((e=>f([...e.statelessHosts].reverse(),e.getTimeout)))}function Yt(e){const t={value:`Algolia for JavaScript (${e})`,add(e){const r=`; ${e.segment}${void 0!==e.version?` (${e.version})`:""}`;return-1===t.value.indexOf(r)&&(t.value=`${t.value}${r}`),t}};return t}function Gt(e,t,r){const n=Xt(r);let o=`${e.protocol}://${e.url}/${"/"===t.charAt(0)?t.substr(1):t}`;return n.length&&(o+=`?${n}`),o}function Xt(e){return Object.keys(e).map((t=>{return Tt("%s=%s",t,(r=e[t],"[object Object]"===Object.prototype.toString.call(r)||"[object Array]"===Object.prototype.toString.call(r)?JSON.stringify(e[t]):e[t]));var r})).join("&")}function er(e){return e.map((e=>tr(e)))}function tr(e){const t=e.request.headers["x-algolia-api-key"]?{"x-algolia-api-key":"*****"}:{};return{...e,request:{...e.request,headers:{...e.request.headers,...t}}}}const rr=e=>{const t=e.appId,r=function(e,t,r){const n={"x-algolia-api-key":r,"x-algolia-application-id":t};return{headers:()=>e===Mt.WithinHeaders?n:{},queryParameters:()=>e===Mt.WithinQueryParameters?n:{}}}(void 0!==e.authMode?e.authMode:Mt.WithinHeaders,t,e.apiKey),n=function(e){const{hostsCache:t,logger:r,requester:n,requestsCache:o,responsesCache:a,timeouts:c,userAgent:i,hosts:l,queryParameters:s,headers:u}=e,f={hostsCache:t,logger:r,requester:n,requestsCache:o,responsesCache:a,timeouts:c,userAgent:i,headers:u,queryParameters:s,hosts:l.map((e=>$t(e))),read(e,t){const r=Ht(t,f.timeouts.read),n=()=>Zt(f,f.hosts.filter((e=>0!=(e.accept&Ft.Read))),e,r);if(!0!==(void 0!==r.cacheable?r.cacheable:e.cacheable))return n();const o={request:e,mappedRequestOptions:r,transporter:{queryParameters:f.queryParameters,headers:f.headers}};return f.responsesCache.get(o,(()=>f.requestsCache.get(o,(()=>f.requestsCache.set(o,n()).then((e=>Promise.all([f.requestsCache.delete(o),e])),(e=>Promise.all([f.requestsCache.delete(o),Promise.reject(e)]))).then((([e,t])=>t))))),{miss:e=>f.responsesCache.set(o,e)})},write:(e,t)=>Zt(f,f.hosts.filter((e=>0!=(e.accept&Ft.Write))),e,Ht(t,f.timeouts.write))};return f}({hosts:[{url:`${t}-dsn.algolia.net`,accept:Ft.Read},{url:`${t}.algolia.net`,accept:Ft.Write}].concat(Rt([{url:`${t}-1.algolianet.com`},{url:`${t}-2.algolianet.com`},{url:`${t}-3.algolianet.com`}])),...e,headers:{...r.headers(),"content-type":"application/x-www-form-urlencoded",...e.headers},queryParameters:{...r.queryParameters(),...e.queryParameters}}),o={transporter:n,appId:t,addAlgoliaAgent(e,t){n.userAgent.add({segment:e,version:t})},clearCache:()=>Promise.all([n.requestsCache.clear(),n.responsesCache.clear()]).then((()=>{}))};return qt(o,e.methods)},nr=e=>(t,r)=>t.method===zt?e.transporter.read(t,r):e.transporter.write(t,r),or=e=>(t,r={})=>qt({transporter:e.transporter,appId:e.appId,indexName:t},r.methods),ar=e=>(t,r)=>{const n=t.map((e=>({...e,params:Xt(e.params||{})})));return e.transporter.read({method:Wt,path:"1/indexes/*/queries",data:{requests:n},cacheable:!0},r)},cr=e=>(t,r)=>Promise.all(t.map((t=>{const{facetName:n,facetQuery:o,...a}=t.params;return or(e)(t.indexName,{methods:{searchForFacetValues:sr}}).searchForFacetValues(n,o,{...r,...a})}))),ir=e=>(t,r,n)=>e.transporter.read({method:Wt,path:Tt("1/answers/%s/prediction",e.indexName),data:{query:t,queryLanguages:r},cacheable:!0},n),lr=e=>(t,r)=>e.transporter.read({method:Wt,path:Tt("1/indexes/%s/query",e.indexName),data:{query:t},cacheable:!0},r),sr=e=>(t,r,n)=>e.transporter.read({method:Wt,path:Tt("1/indexes/%s/facets/%s/query",e.indexName,t),data:{facetQuery:r},cacheable:!0},n),ur=1,fr=2,mr=3;function pr(e,t,r){const n={appId:e,apiKey:t,timeouts:{connect:1,read:2,write:30},requester:{send:e=>new Promise((t=>{const r=new XMLHttpRequest;r.open(e.method,e.url,!0),Object.keys(e.headers).forEach((t=>r.setRequestHeader(t,e.headers[t])));const n=(e,n)=>setTimeout((()=>{r.abort(),t({status:0,content:n,isTimedOut:!0})}),1e3*e),o=n(e.connectTimeout,"Connection timeout");let a;r.onreadystatechange=()=>{r.readyState>r.OPENED&&void 0===a&&(clearTimeout(o),a=n(e.responseTimeout,"Socket timeout"))},r.onerror=()=>{0===r.status&&(clearTimeout(o),clearTimeout(a),t({content:r.responseText||"Network request failed",status:r.status,isTimedOut:!1}))},r.onload=()=>{clearTimeout(o),clearTimeout(a),t({content:r.responseText,status:r.status,isTimedOut:!1})},r.send(e.data)}))},logger:(o=mr,{debug:(e,t)=>(ur>=o&&console.debug(e,t),Promise.resolve()),info:(e,t)=>(fr>=o&&console.info(e,t),Promise.resolve()),error:(e,t)=>(console.error(e,t),Promise.resolve())}),responsesCache:_t(),requestsCache:_t({serializable:!1}),hostsCache:Nt({caches:[xt({key:`4.15.0-${e}`}),_t()]}),userAgent:Yt(Lt).add({segment:"Browser",version:"lite"}),authMode:Mt.WithinQueryParameters};var o;return rr({...n,...r,methods:{search:ar,searchForFacetValues:cr,multipleQueries:ar,multipleSearchForFacetValues:cr,customRequest:nr,initIndex:e=>t=>or(e)(t,{methods:{search:lr,searchForFacetValues:sr,findAnswers:ir}})}})}pr.version=Lt;const dr=pr;var hr="3.3.3";function vr(){}function yr(e){return e}function gr(e,t){return e.reduce((function(e,r){var n=t(r);return e.hasOwnProperty(n)||(e[n]=[]),e[n].length<5&&e[n].push(r),e}),{})}var br=["footer","searchBox"];function Or(){return Or=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},Or.apply(this,arguments)}function Sr(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Er(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Sr(Object(r),!0).forEach((function(t){jr(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Sr(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function jr(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function wr(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==r)return;var n,o,a=[],c=!0,i=!1;try{for(r=r.call(e);!(c=(n=r.next()).done)&&(a.push(n.value),!t||a.length!==t);c=!0);}catch(l){i=!0,o=l}finally{try{c||null==r.return||r.return()}finally{if(i)throw o}}return a}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return Pr(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return Pr(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function Pr(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function Ir(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Dr(e){var t=e.appId,r=e.apiKey,n=e.indexName,o=e.placeholder,a=void 0===o?"Search docs":o,c=e.searchParameters,i=e.onClose,l=void 0===i?vr:i,s=e.transformItems,u=void 0===s?yr:s,f=e.hitComponent,m=void 0===f?_e:f,p=e.resultsFooterComponent,d=void 0===p?function(){return null}:p,h=e.navigator,v=e.initialScrollY,y=void 0===v?0:v,g=e.transformSearchClient,b=void 0===g?yr:g,O=e.disableUserPersonalization,S=void 0!==O&&O,E=e.initialQuery,j=void 0===E?"":E,w=e.translations,P=void 0===w?{}:w,I=e.getMissingResultsUrl,D=P.footer,k=P.searchBox,C=Ir(P,br),A=wr(Ce.useState({query:"",collections:[],completion:null,context:{},isOpen:!1,activeItemId:null,status:"idle"}),2),x=A[0],N=A[1],_=Ce.useRef(null),R=Ce.useRef(null),q=Ce.useRef(null),T=Ce.useRef(null),L=Ce.useRef(null),M=Ce.useRef(10),H=Ce.useRef("undefined"!=typeof window?window.getSelection().toString().slice(0,64):"").current,F=Ce.useRef(j||H).current,U=function(e,t,r){return Ce.useMemo((function(){var n=dr(e,t);return n.addAlgoliaAgent("docsearch",hr),!1===/docsearch.js \(.*\)/.test(n.transporter.userAgent.value)&&n.addAlgoliaAgent("docsearch-react",hr),r(n)}),[e,t,r])}(t,r,b),B=Ce.useRef(At({key:"__DOCSEARCH_FAVORITE_SEARCHES__".concat(n),limit:10})).current,V=Ce.useRef(At({key:"__DOCSEARCH_RECENT_SEARCHES__".concat(n),limit:0===B.getAll().length?7:4})).current,K=Ce.useCallback((function(e){if(!S){var t="content"===e.type?e.__docsearch_parent:e;t&&-1===B.getAll().findIndex((function(e){return e.objectID===t.objectID}))&&V.add(t)}}),[B,V,S]),J=Ce.useMemo((function(){return ke({id:"docsearch",defaultActiveItemId:0,placeholder:a,openOnFocus:!0,initialState:{query:F,context:{searchSuggestions:[]}},navigator:h,onStateChange:function(e){N(e.state)},getSources:function(e){var t=e.query,r=e.state,o=e.setContext,a=e.setStatus;return t?U.search([{query:t,indexName:n,params:Er({attributesToRetrieve:["hierarchy.lvl0","hierarchy.lvl1","hierarchy.lvl2","hierarchy.lvl3","hierarchy.lvl4","hierarchy.lvl5","hierarchy.lvl6","content","type","url"],attributesToSnippet:["hierarchy.lvl1:".concat(M.current),"hierarchy.lvl2:".concat(M.current),"hierarchy.lvl3:".concat(M.current),"hierarchy.lvl4:".concat(M.current),"hierarchy.lvl5:".concat(M.current),"hierarchy.lvl6:".concat(M.current),"content:".concat(M.current)],snippetEllipsisText:"\u2026",highlightPreTag:"<mark>",highlightPostTag:"</mark>",hitsPerPage:20},c)}]).catch((function(e){throw"RetryError"===e.name&&a("error"),e})).then((function(e){var t=e.results[0],n=t.hits,a=t.nbHits,c=gr(n,(function(e){return it(e)}));return r.context.searchSuggestions.length<Object.keys(c).length&&o({searchSuggestions:Object.keys(c)}),o({nbHits:a}),Object.values(c).map((function(e,t){return{sourceId:"hits".concat(t),onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return Object.values(gr(e,(function(e){return e.hierarchy.lvl1}))).map(u).map((function(e){return e.map((function(t){return Er(Er({},t),{},{__docsearch_parent:"lvl1"!==t.type&&e.find((function(e){return"lvl1"===e.type&&e.hierarchy.lvl1===t.hierarchy.lvl1}))})}))})).flat()}}}))})):S?[]:[{sourceId:"recentSearches",onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return V.getAll()}},{sourceId:"favoriteSearches",onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return B.getAll()}}]}})}),[n,c,U,l,V,B,K,F,a,h,u,S]),$=J.getEnvironmentProps,z=J.getRootProps,W=J.refresh;return function(e){var t=e.getEnvironmentProps,r=e.panelElement,n=e.formElement,o=e.inputElement;Ce.useEffect((function(){if(r&&n&&o){var e=t({panelElement:r,formElement:n,inputElement:o}),a=e.onTouchStart,c=e.onTouchMove;return window.addEventListener("touchstart",a),window.addEventListener("touchmove",c),function(){window.removeEventListener("touchstart",a),window.removeEventListener("touchmove",c)}}}),[t,r,n,o])}({getEnvironmentProps:$,panelElement:T.current,formElement:q.current,inputElement:L.current}),function(e){var t=e.container;Ce.useEffect((function(){if(t){var e=t.querySelectorAll("a[href]:not([disabled]), button:not([disabled]), input:not([disabled])"),r=e[0],n=e[e.length-1];return t.addEventListener("keydown",o),function(){t.removeEventListener("keydown",o)}}function o(e){"Tab"===e.key&&(e.shiftKey?document.activeElement===r&&(e.preventDefault(),n.focus()):document.activeElement===n&&(e.preventDefault(),r.focus()))}}),[t])}({container:_.current}),Ce.useEffect((function(){return document.body.classList.add("DocSearch--active"),function(){var e,t;document.body.classList.remove("DocSearch--active"),null===(e=(t=window).scrollTo)||void 0===e||e.call(t,0,y)}}),[]),Ce.useEffect((function(){window.matchMedia("(max-width: 768px)").matches&&(M.current=5)}),[]),Ce.useEffect((function(){T.current&&(T.current.scrollTop=0)}),[x.query]),Ce.useEffect((function(){F.length>0&&(W(),L.current&&L.current.focus())}),[F,W]),Ce.useEffect((function(){function e(){if(R.current){var e=.01*window.innerHeight;R.current.style.setProperty("--docsearch-vh","".concat(e,"px"))}}return e(),window.addEventListener("resize",e),function(){window.removeEventListener("resize",e)}}),[]),Ce.createElement("div",Or({ref:_},z({"aria-expanded":!0}),{className:["DocSearch","DocSearch-Container","stalled"===x.status&&"DocSearch-Container--Stalled","error"===x.status&&"DocSearch-Container--Errored"].filter(Boolean).join(" "),role:"button",tabIndex:0,onMouseDown:function(e){e.target===e.currentTarget&&l()}}),Ce.createElement("div",{className:"DocSearch-Modal",ref:R},Ce.createElement("header",{className:"DocSearch-SearchBar",ref:q},Ce.createElement(It,Or({},J,{state:x,autoFocus:0===F.length,inputRef:L,isFromSelection:Boolean(F)&&F===H,translations:k,onClose:l}))),Ce.createElement("div",{className:"DocSearch-Dropdown",ref:T},Ce.createElement(Ot,Or({},J,{indexName:n,state:x,hitComponent:m,resultsFooterComponent:d,disableUserPersonalization:S,recentSearches:V,favoriteSearches:B,inputRef:L,translations:C,getMissingResultsUrl:I,onItemClick:function(e){K(e),l()}}))),Ce.createElement("footer",{className:"DocSearch-Footer"},Ce.createElement(Ne,{translations:D}))))}}}]);
\ No newline at end of file
diff --git a/assets/js/6937a857.3fe495f8.js b/assets/js/6937a857.5af8e029.js
similarity index 98%
rename from assets/js/6937a857.3fe495f8.js
rename to assets/js/6937a857.5af8e029.js
index 07492a162..c0fa9acbc 100644
--- a/assets/js/6937a857.3fe495f8.js
+++ b/assets/js/6937a857.5af8e029.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8997],{3905:(e,t,a)=>{a.d(t,{Zo:()=>c,kt:()=>d});var n=a(7294);function o(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function r(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?r(Object(a),!0).forEach((function(t){o(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):r(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,n,o=function(e,t){if(null==e)return{};var a,n,o={},r=Object.keys(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||(o[a]=e[a]);return o}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(o[a]=e[a])}return o}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},c=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,o=e.mdxType,r=e.originalType,i=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),m=p(a),d=o,g=m["".concat(i,".").concat(d)]||m[d]||u[d]||r;return a?n.createElement(g,l(l({ref:t},c),{},{components:a})):n.createElement(g,l({ref:t},c))}));function d(e,t){var a=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var r=a.length,l=new Array(r);l[0]=m;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:o,l[1]=s;for(var p=2;p<r;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},9543:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>u,frontMatter:()=>r,metadata:()=>s,toc:()=>p});var n=a(3117),o=(a(7294),a(3905));const r={title:"Volumes and Storage",weight:30},l=void 0,s={unversionedId:"storage/storage",id:"storage/storage",title:"Volumes and Storage",description:"When deploying an application that needs to retain data, you\u2019ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application\u2019s pod fails.",source:"@site/docs/storage/storage.md",sourceDirName:"storage",slug:"/storage/",permalink:"/storage/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Volumes and Storage",weight:30},sidebar:"mySidebar",previous:{title:"Automated Upgrades",permalink:"/upgrades/automated"},next:{title:"Networking",permalink:"/networking/"}},i={},p=[{value:"What&#39;s different about K3s storage?",id:"whats-different-about-k3s-storage",level:2},{value:"Setting up the Local Storage Provider",id:"setting-up-the-local-storage-provider",level:2},{value:"pvc.yaml",id:"pvcyaml",level:3},{value:"pod.yaml",id:"podyaml",level:3},{value:"Setting up Longhorn",id:"setting-up-longhorn",level:2},{value:"pvc.yaml",id:"pvcyaml-1",level:3},{value:"pod.yaml",id:"podyaml-1",level:3}],c={toc:p};function u(e){let{components:t,...a}=e;return(0,o.kt)("wrapper",(0,n.Z)({},c,a,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"When deploying an application that needs to retain data, you\u2019ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application\u2019s pod fails."),(0,o.kt)("p",null,"A persistent volume (PV) is a piece of storage in the Kubernetes cluster, while a persistent volume claim (PVC) is a request for storage. For details on how PVs and PVCs work, refer to the official Kubernetes documentation on ",(0,o.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/storage/volumes/"},"storage.")),(0,o.kt)("p",null,"This page describes how to set up persistent storage with a local storage provider, or with ",(0,o.kt)("a",{parentName:"p",href:"#setting-up-longhorn"},"Longhorn.")),(0,o.kt)("h2",{id:"whats-different-about-k3s-storage"},"What's different about K3s storage?"),(0,o.kt)("p",null,'K3s removes several optional volume plugins and all built-in (sometimes referred to as "in-tree") cloud providers. We do this in order to achieve a smaller binary size and to avoid dependence on third-party cloud or data center technologies and services, which may not be available in many K3s use cases. We are able to do this because their removal affects neither core Kubernetes functionality nor conformance.'),(0,o.kt)("p",null,"The following volume plugins have been removed from K3s:"),(0,o.kt)("ul",null,(0,o.kt)("li",{parentName:"ul"},"cephfs"),(0,o.kt)("li",{parentName:"ul"},"fc"),(0,o.kt)("li",{parentName:"ul"},"flocker"),(0,o.kt)("li",{parentName:"ul"},"git_repo"),(0,o.kt)("li",{parentName:"ul"},"glusterfs"),(0,o.kt)("li",{parentName:"ul"},"portworx"),(0,o.kt)("li",{parentName:"ul"},"quobyte"),(0,o.kt)("li",{parentName:"ul"},"rbd"),(0,o.kt)("li",{parentName:"ul"},"storageos")),(0,o.kt)("p",null,"Both components have out-of-tree alternatives that can be used with K3s: The Kubernetes ",(0,o.kt)("a",{parentName:"p",href:"https://github.com/container-storage-interface/spec/blob/master/spec.md"},"Container Storage Interface (CSI)")," and ",(0,o.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/"},"Cloud Provider Interface (CPI)"),"."),(0,o.kt)("p",null,"Kubernetes maintainers are actively migrating in-tree volume plugins to CSI drivers. For more information on this migration, please refer ",(0,o.kt)("a",{parentName:"p",href:"https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/"},"here"),"."),(0,o.kt)("h2",{id:"setting-up-the-local-storage-provider"},"Setting up the Local Storage Provider"),(0,o.kt)("p",null,"K3s comes with Rancher's Local Path Provisioner and this enables the ability to create persistent volume claims out of the box using local storage on the respective node. Below we cover a simple example. For more information please reference the official documentation ",(0,o.kt)("a",{parentName:"p",href:"https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage"},"here"),"."),(0,o.kt)("p",null,"Create a hostPath backed persistent volume claim and a pod to utilize it:"),(0,o.kt)("h3",{id:"pvcyaml"},"pvc.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: local-path-pvc\n  namespace: default\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: local-path\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,o.kt)("h3",{id:"podyaml"},"pod.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: local-path-pvc\n")),(0,o.kt)("p",null,"Apply the yaml:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,o.kt)("p",null,"Confirm the PV and PVC are created:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,o.kt)("p",null,"The status should be Bound for each."),(0,o.kt)("h2",{id:"setting-up-longhorn"},"Setting up Longhorn"),(0,o.kt)("admonition",{type:"caution"},(0,o.kt)("p",{parentName:"admonition"},"Longhorn does not support ARM32.")),(0,o.kt)("p",null,"K3s supports ",(0,o.kt)("a",{parentName:"p",href:"https://github.com/longhorn/longhorn"},"Longhorn"),", an open-source distributed block storage system for Kubernetes."),(0,o.kt)("p",null,"Below we cover a simple example. For more information, refer to the ",(0,o.kt)("a",{parentName:"p",href:"https://longhorn.io/docs/latest/"},"official documentation"),"."),(0,o.kt)("p",null,"Apply the longhorn.yaml to install Longhorn:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml\n")),(0,o.kt)("p",null,"Longhorn will be installed in the namespace ",(0,o.kt)("inlineCode",{parentName:"p"},"longhorn-system"),"."),(0,o.kt)("p",null,"Apply the yaml to create the PVC and pod:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,o.kt)("h3",{id:"pvcyaml-1"},"pvc.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: longhorn-volv-pvc\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: longhorn\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,o.kt)("h3",{id:"podyaml-1"},"pod.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: longhorn-volv-pvc\n")),(0,o.kt)("p",null,"Confirm the PV and PVC are created:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,o.kt)("p",null,"The status should be Bound for each."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8997],{3905:(e,t,a)=>{a.d(t,{Zo:()=>c,kt:()=>d});var n=a(7294);function o(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function r(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?r(Object(a),!0).forEach((function(t){o(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):r(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,n,o=function(e,t){if(null==e)return{};var a,n,o={},r=Object.keys(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||(o[a]=e[a]);return o}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(o[a]=e[a])}return o}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},c=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,o=e.mdxType,r=e.originalType,i=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),m=p(a),d=o,g=m["".concat(i,".").concat(d)]||m[d]||u[d]||r;return a?n.createElement(g,l(l({ref:t},c),{},{components:a})):n.createElement(g,l({ref:t},c))}));function d(e,t){var a=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var r=a.length,l=new Array(r);l[0]=m;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:o,l[1]=s;for(var p=2;p<r;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},9543:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>u,frontMatter:()=>r,metadata:()=>s,toc:()=>p});var n=a(3117),o=(a(7294),a(3905));const r={title:"Volumes and Storage",weight:30},l=void 0,s={unversionedId:"storage/storage",id:"storage/storage",title:"Volumes and Storage",description:"When deploying an application that needs to retain data, you\u2019ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application\u2019s pod fails.",source:"@site/docs/storage/storage.md",sourceDirName:"storage",slug:"/storage/",permalink:"/storage/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Volumes and Storage",weight:30},sidebar:"mySidebar",previous:{title:"Automated Upgrades",permalink:"/upgrades/automated"},next:{title:"Networking",permalink:"/networking/"}},i={},p=[{value:"What&#39;s different about K3s storage?",id:"whats-different-about-k3s-storage",level:2},{value:"Setting up the Local Storage Provider",id:"setting-up-the-local-storage-provider",level:2},{value:"pvc.yaml",id:"pvcyaml",level:3},{value:"pod.yaml",id:"podyaml",level:3},{value:"Setting up Longhorn",id:"setting-up-longhorn",level:2},{value:"pvc.yaml",id:"pvcyaml-1",level:3},{value:"pod.yaml",id:"podyaml-1",level:3}],c={toc:p};function u(e){let{components:t,...a}=e;return(0,o.kt)("wrapper",(0,n.Z)({},c,a,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"When deploying an application that needs to retain data, you\u2019ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application\u2019s pod fails."),(0,o.kt)("p",null,"A persistent volume (PV) is a piece of storage in the Kubernetes cluster, while a persistent volume claim (PVC) is a request for storage. For details on how PVs and PVCs work, refer to the official Kubernetes documentation on ",(0,o.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/storage/volumes/"},"storage.")),(0,o.kt)("p",null,"This page describes how to set up persistent storage with a local storage provider, or with ",(0,o.kt)("a",{parentName:"p",href:"#setting-up-longhorn"},"Longhorn.")),(0,o.kt)("h2",{id:"whats-different-about-k3s-storage"},"What's different about K3s storage?"),(0,o.kt)("p",null,'K3s removes several optional volume plugins and all built-in (sometimes referred to as "in-tree") cloud providers. We do this in order to achieve a smaller binary size and to avoid dependence on third-party cloud or data center technologies and services, which may not be available in many K3s use cases. We are able to do this because their removal affects neither core Kubernetes functionality nor conformance.'),(0,o.kt)("p",null,"The following volume plugins have been removed from K3s:"),(0,o.kt)("ul",null,(0,o.kt)("li",{parentName:"ul"},"cephfs"),(0,o.kt)("li",{parentName:"ul"},"fc"),(0,o.kt)("li",{parentName:"ul"},"flocker"),(0,o.kt)("li",{parentName:"ul"},"git_repo"),(0,o.kt)("li",{parentName:"ul"},"glusterfs"),(0,o.kt)("li",{parentName:"ul"},"portworx"),(0,o.kt)("li",{parentName:"ul"},"quobyte"),(0,o.kt)("li",{parentName:"ul"},"rbd"),(0,o.kt)("li",{parentName:"ul"},"storageos")),(0,o.kt)("p",null,"Both components have out-of-tree alternatives that can be used with K3s: The Kubernetes ",(0,o.kt)("a",{parentName:"p",href:"https://github.com/container-storage-interface/spec/blob/master/spec.md"},"Container Storage Interface (CSI)")," and ",(0,o.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/"},"Cloud Provider Interface (CPI)"),"."),(0,o.kt)("p",null,"Kubernetes maintainers are actively migrating in-tree volume plugins to CSI drivers. For more information on this migration, please refer ",(0,o.kt)("a",{parentName:"p",href:"https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/"},"here"),"."),(0,o.kt)("h2",{id:"setting-up-the-local-storage-provider"},"Setting up the Local Storage Provider"),(0,o.kt)("p",null,"K3s comes with Rancher's Local Path Provisioner and this enables the ability to create persistent volume claims out of the box using local storage on the respective node. Below we cover a simple example. For more information please reference the official documentation ",(0,o.kt)("a",{parentName:"p",href:"https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage"},"here"),"."),(0,o.kt)("p",null,"Create a hostPath backed persistent volume claim and a pod to utilize it:"),(0,o.kt)("h3",{id:"pvcyaml"},"pvc.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: local-path-pvc\n  namespace: default\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: local-path\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,o.kt)("h3",{id:"podyaml"},"pod.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: local-path-pvc\n")),(0,o.kt)("p",null,"Apply the yaml:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,o.kt)("p",null,"Confirm the PV and PVC are created:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,o.kt)("p",null,"The status should be Bound for each."),(0,o.kt)("h2",{id:"setting-up-longhorn"},"Setting up Longhorn"),(0,o.kt)("admonition",{type:"caution"},(0,o.kt)("p",{parentName:"admonition"},"Longhorn does not support ARM32.")),(0,o.kt)("p",null,"K3s supports ",(0,o.kt)("a",{parentName:"p",href:"https://github.com/longhorn/longhorn"},"Longhorn"),", an open-source distributed block storage system for Kubernetes."),(0,o.kt)("p",null,"Below we cover a simple example. For more information, refer to the ",(0,o.kt)("a",{parentName:"p",href:"https://longhorn.io/docs/latest/"},"official documentation"),"."),(0,o.kt)("p",null,"Apply the longhorn.yaml to install Longhorn:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml\n")),(0,o.kt)("p",null,"Longhorn will be installed in the namespace ",(0,o.kt)("inlineCode",{parentName:"p"},"longhorn-system"),"."),(0,o.kt)("p",null,"Apply the yaml to create the PVC and pod:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,o.kt)("h3",{id:"pvcyaml-1"},"pvc.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: longhorn-volv-pvc\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: longhorn\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,o.kt)("h3",{id:"podyaml-1"},"pod.yaml"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: longhorn-volv-pvc\n")),(0,o.kt)("p",null,"Confirm the PV and PVC are created:"),(0,o.kt)("pre",null,(0,o.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,o.kt)("p",null,"The status should be Bound for each."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/6945.a46579e2.js b/assets/js/6945.a46579e2.js
deleted file mode 100644
index f4f3153e0..000000000
--- a/assets/js/6945.a46579e2.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6945],{6945:(s,k,_)=>{_.r(k)}}]);
\ No newline at end of file
diff --git a/assets/js/6ab2c2e0.b6dfbfcb.js b/assets/js/6ab2c2e0.8f404c7d.js
similarity index 98%
rename from assets/js/6ab2c2e0.b6dfbfcb.js
rename to assets/js/6ab2c2e0.8f404c7d.js
index 9f096ea47..1e7cff70d 100644
--- a/assets/js/6ab2c2e0.b6dfbfcb.js
+++ b/assets/js/6ab2c2e0.8f404c7d.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[981],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>u});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),c=d(n),u=r,k=c["".concat(s,".").concat(u)]||c[u]||m[u]||l;return n?a.createElement(k,i(i({ref:t},p),{},{components:n})):a.createElement(k,i({ref:t},p))}));function u(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=c;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},7473:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"Environment Variables",weight:3},i=void 0,o={unversionedId:"reference/env-variables",id:"reference/env-variables",title:"Environment Variables",description:"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems.",source:"@site/docs/reference/env-variables.md",sourceDirName:"reference",slug:"/reference/env-variables",permalink:"/reference/env-variables",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Environment Variables",weight:3},sidebar:"mySidebar",previous:{title:"Reference",permalink:"/reference/"},next:{title:"Resource Profiling",permalink:"/reference/resource-profiling"}},s={},d=[],p={toc:d};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"As mentioned in the ",(0,r.kt)("a",{parentName:"p",href:"/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,r.kt)("p",null,"The simplest form of this command is as follows:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"When using this method to install K3s, the following environment variables can be used to configure the installation:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not download K3s hash or binary.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYMLINK")),(0,r.kt)("td",{parentName:"tr",align:null},"By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to 'skip' will not create symlinks and 'force' will overwrite.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_ENABLE")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not enable or start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_START")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_VERSION")),(0,r.kt)("td",{parentName:"tr",align:null},"Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install K3s binary, links, and uninstall script to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/usr/local/bin")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR_READ_ONLY")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not write files to ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR"),", forces setting ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYSTEMD_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install systemd service and environment files to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/systemd/system")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_EXEC")),(0,r.kt)("td",{parentName:"tr",align:null},"Command with flags to use for launching K3s in the service. If the command is not specified, and the ",(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' is set, it will default to "agent." If ',(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' not set, it will default to "server." For help, refer to ',(0,r.kt)("a",{parentName:"td",href:"/installation/configuration#configuration-with-install-script"},"this example."))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"Name of systemd service to create, will default to 'k3s' if running k3s as a server and 'k3s-agent' if running k3s as an agent. If specified the name will be prefixed with 'k3s-'.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_TYPE")),(0,r.kt)("td",{parentName:"tr",align:null},"Type of systemd service to create, will default from the K3s exec command if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SELINUX_WARN")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will continue if k3s-selinux policy is not found.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_SELINUX_RPM")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will skip automatic installation of the k3s RPM.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Channel URL for fetching K3s download URL. Defaults to ",(0,r.kt)("a",{parentName:"td",href:"https://update.k3s.io/v1-release/channels"},"https://update.k3s.io/v1-release/channels"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL")),(0,r.kt)("td",{parentName:"tr",align:null},'Channel to use for fetching K3s download URL. Defaults to "stable". Options include: ',(0,r.kt)("inlineCode",{parentName:"td"},"stable"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"latest"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"testing"),".")))),(0,r.kt)("p",null,"This example shows where to place aforementioned environment variables as options (after the pipe):"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"Environment variables which begin with ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," will be preserved for the systemd and openrc services to use."),(0,r.kt)("p",null,"Setting ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL"),' without explicitly setting an exec command will default the command to "agent".'),(0,r.kt)("p",null,"When running the agent, ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," must also be set."))}m.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[981],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>u});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),c=d(n),u=r,k=c["".concat(s,".").concat(u)]||c[u]||m[u]||l;return n?a.createElement(k,i(i({ref:t},p),{},{components:n})):a.createElement(k,i({ref:t},p))}));function u(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=c;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},7473:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"Environment Variables",weight:3},i=void 0,o={unversionedId:"reference/env-variables",id:"reference/env-variables",title:"Environment Variables",description:"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems.",source:"@site/docs/reference/env-variables.md",sourceDirName:"reference",slug:"/reference/env-variables",permalink:"/reference/env-variables",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Environment Variables",weight:3},sidebar:"mySidebar",previous:{title:"Reference",permalink:"/reference/"},next:{title:"Resource Profiling",permalink:"/reference/resource-profiling"}},s={},d=[],p={toc:d};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"As mentioned in the ",(0,r.kt)("a",{parentName:"p",href:"/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,r.kt)("p",null,"The simplest form of this command is as follows:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"When using this method to install K3s, the following environment variables can be used to configure the installation:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not download K3s hash or binary.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYMLINK")),(0,r.kt)("td",{parentName:"tr",align:null},"By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to 'skip' will not create symlinks and 'force' will overwrite.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_ENABLE")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not enable or start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_START")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_VERSION")),(0,r.kt)("td",{parentName:"tr",align:null},"Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install K3s binary, links, and uninstall script to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/usr/local/bin")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR_READ_ONLY")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not write files to ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR"),", forces setting ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYSTEMD_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install systemd service and environment files to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/systemd/system")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_EXEC")),(0,r.kt)("td",{parentName:"tr",align:null},"Command with flags to use for launching K3s in the service. If the command is not specified, and the ",(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' is set, it will default to "agent." If ',(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' not set, it will default to "server." For help, refer to ',(0,r.kt)("a",{parentName:"td",href:"/installation/configuration#configuration-with-install-script"},"this example."))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"Name of systemd service to create, will default to 'k3s' if running k3s as a server and 'k3s-agent' if running k3s as an agent. If specified the name will be prefixed with 'k3s-'.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_TYPE")),(0,r.kt)("td",{parentName:"tr",align:null},"Type of systemd service to create, will default from the K3s exec command if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SELINUX_WARN")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will continue if k3s-selinux policy is not found.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_SELINUX_RPM")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will skip automatic installation of the k3s RPM.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Channel URL for fetching K3s download URL. Defaults to ",(0,r.kt)("a",{parentName:"td",href:"https://update.k3s.io/v1-release/channels"},"https://update.k3s.io/v1-release/channels"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL")),(0,r.kt)("td",{parentName:"tr",align:null},'Channel to use for fetching K3s download URL. Defaults to "stable". Options include: ',(0,r.kt)("inlineCode",{parentName:"td"},"stable"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"latest"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"testing"),".")))),(0,r.kt)("p",null,"This example shows where to place aforementioned environment variables as options (after the pipe):"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"Environment variables which begin with ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," will be preserved for the systemd and openrc services to use."),(0,r.kt)("p",null,"Setting ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL"),' without explicitly setting an exec command will default the command to "agent".'),(0,r.kt)("p",null,"When running the agent, ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," must also be set."))}m.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/6e9804bc.8c09418c.js b/assets/js/6e9804bc.7a495e75.js
similarity index 99%
rename from assets/js/6e9804bc.8c09418c.js
rename to assets/js/6e9804bc.7a495e75.js
index 9b62f00fa..88621d9c3 100644
--- a/assets/js/6e9804bc.8c09418c.js
+++ b/assets/js/6e9804bc.7a495e75.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[393],{3905:(e,t,r)=>{r.d(t,{Zo:()=>d,kt:()=>h});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),l=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},d=function(e){var t=l(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,d=c(e,["components","mdxType","originalType","parentName"]),u=l(r),h=a,m=u["".concat(o,".").concat(h)]||u[h]||p[h]||i;return r?n.createElement(m,s(s({ref:t},d),{},{components:r})):n.createElement(m,s({ref:t},d))}));function h(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,s=new Array(i);s[0]=u;var c={};for(var o in t)hasOwnProperty.call(t,o)&&(c[o]=t[o]);c.originalType=e,c.mdxType="string"==typeof e?e:a,s[1]=c;for(var l=2;l<i;l++)s[l]=r[l];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},7161:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>p,frontMatter:()=>i,metadata:()=>c,toc:()=>l});var n=r(3117),a=(r(7294),r(3905));const i={title:"certificate"},s="k3s certificate",c={unversionedId:"cli/certificate",id:"cli/certificate",title:"certificate",description:"Client and Server Certificates",source:"@site/docs/cli/certificate.md",sourceDirName:"cli",slug:"/cli/certificate",permalink:"/cli/certificate",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"certificate"},sidebar:"mySidebar",previous:{title:"agent",permalink:"/cli/agent"},next:{title:"etcd-snapshot",permalink:"/cli/etcd-snapshot"}},o={},l=[{value:"Client and Server Certificates",id:"client-and-server-certificates",level:2},{value:"Rotating Client and Server Certificates",id:"rotating-client-and-server-certificates",level:3},{value:"Certificate Authority (CA) Certificates",id:"certificate-authority-ca-certificates",level:2},{value:"Using Custom CA Certificates",id:"using-custom-ca-certificates",level:3},{value:"Custom CA Topology",id:"custom-ca-topology",level:4},{value:"Using the Example Script",id:"using-the-example-script",level:4},{value:"Rotating Custom CA Certificates",id:"rotating-custom-ca-certificates",level:3},{value:"Using the Example Script",id:"using-the-example-script-1",level:4},{value:"Rotating Self-Signed CA Certificates",id:"rotating-self-signed-ca-certificates",level:3},{value:"Default CA Topology",id:"default-ca-topology",level:4},{value:"Using The Example Script",id:"using-the-example-script-2",level:4},{value:"Service-Account Issuer Key Rotation",id:"service-account-issuer-key-rotation",level:2}],d={toc:l};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},d,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-certificate"},"k3s certificate"),(0,a.kt)("h2",{id:"client-and-server-certificates"},"Client and Server Certificates"),(0,a.kt)("p",null,"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts."),(0,a.kt)("h3",{id:"rotating-client-and-server-certificates"},"Rotating Client and Server Certificates"),(0,a.kt)("p",null,"To rotate client and server certificates manually, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate")," subcommand:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Stop K3s\nsystemctl stop k3s\n\n# Rotate certificates\nk3s certificate rotate\n\n# Start K3s\nsystemctl start k3s\n")),(0,a.kt)("p",null,"Individual or lists of certificates can be rotated by specifying the certificate name:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s certificate rotate --service <SERVICE>,<SERVICE>\n")),(0,a.kt)("p",null,"The following certificates can be rotated: ",(0,a.kt)("inlineCode",{parentName:"p"},"admin"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"api-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"controller-manager"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"scheduler"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"cloud-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"auth-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kubelet"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-proxy"),"."),(0,a.kt)("h2",{id:"certificate-authority-ca-certificates"},"Certificate Authority (CA) Certificates"),(0,a.kt)("p",null,"Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates"},"PKI Certificates and Requirements")," documentation."),(0,a.kt)("p",null,"By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed."),(0,a.kt)("p",null,"The authoritative CA certificates and keys are stored within the datastore's bootstrap key, encrypted using the ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#server"},"server token")," as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.\nCopies of the CA certificates and keys are extracted to disk during K3s server startup.\nAny server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"},"Certificates API")," controllers may issue additional certificates at runtime."),(0,a.kt)("p",null,"To rotate CA certificates and keys, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command.\nThe command performs integrity checks to confirm that the updated certificates and keys are usable.\nIf the updated data is acceptable, the datastore's encrypted bootstrap key is updated, and the new certificates and keys will be used the next time K3s starts.\nIf problems are encountered while validating the certificates and keys, an error is reported to the system log and the operation is cancelled without changes."),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Support for the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command and the ability to use CA certificates signed by an external CA is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,a.kt)("h3",{id:"using-custom-ca-certificates"},"Using Custom CA Certificates"),(0,a.kt)("p",null,"If CA certificates and keys are found the correct location during initial startup of the first server in the cluster, automatic generation of CA certificates will be bypassed."),(0,a.kt)("p",null,"An example script to pre-create the appropriate certificates and keys is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/generate-custom-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/generate-custom-ca-certs.sh")),".\nThis script should be run prior to starting K3s for the first time, and will create a full set of leaf CA certificates signed by common Root and Intermediate CA certificates.\nIf you have an existing Root or Intermediate CA, this script can be used (or used as a starting point) to create the correct CA certificates to provision a K3s cluster with PKI rooted in an existing authority."),(0,a.kt)("p",null,"Custom Certificate Authority files must be placed in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),". The following files are required:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: etcd files are required even if embedded etcd is not in use.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.crt"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: This is the private key used to sign service-account tokens. It does not have a corresponding certificate.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"service.key"))),(0,a.kt)("h4",{id:"custom-ca-topology"},"Custom CA Topology"),(0,a.kt)("p",null,"Custom CA Certificates should observe the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  root("Root CA")\n  intermediate("Intermediate CA")\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  root -.-|SHA256| root-hash\n  root ---\x3e intermediate\n  intermediate --\x3e server-ca ==> kube-server-certs\n  intermediate --\x3e client-ca ==> kube-client-certs\n  intermediate --\x3e request-header-ca ==> request-header-certs\n  intermediate --\x3e etcd-peer-ca ==> etcd-peer-certs\n  intermediate --\x3e etcd-server-ca ==> etcd-server-certs'}),(0,a.kt)("h4",{id:"using-the-example-script"},"Using the Example Script"),(0,a.kt)("admonition",{type:"important"},(0,a.kt)("p",{parentName:"admonition"},"If you want to sign the cluster CA certificates with an existing root CA using the example script, you must place the root and intermediate files in the target directory prior to running the script.\nIf the files do not exist, the script will create new root and intermediate CA certificates.")),(0,a.kt)("p",null,"If you want to use only an existing root CA certificate, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.key"))),(0,a.kt)("p",null,"If you want to use existing root and intermediate CA certificates, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.key"))),(0,a.kt)("p",null,"To use the example script to generate custom certs and keys before starting K3s, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create the target directory for cert generation.\nmkdir -p /var/lib/rancher/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# For the purposes of this example, we assume you have existing root and intermediate CA files in /etc/ssl.\n# If you do not have an existing root and/or intermediate CA, the script will generate them for you.\ncp /etc/ssl/certs/root-ca.pem /etc/ssl/certs/intermediate-ca.pem /etc/ssl/private/intermediate-ca.key /var/lib/rancher/k3s/server/tls\n\n# Generate custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash -\n")),(0,a.kt)("p",null,"If the command completes successfully, you may install and/or start K3s for the first time.\nIf the script generated root and/or intermediate CA files, you should back up these files so that they can be reused if it is necessary to rotate the CA certificates at a later date."),(0,a.kt)("h3",{id:"rotating-custom-ca-certificates"},"Rotating Custom CA Certificates"),(0,a.kt)("p",null,"To rotate custom CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"A cluster that has been started with custom CA certificates can renew or rotate the CA certificates and keys non-disruptively, as long as the same root CA is used."),(0,a.kt)("p",null,"If a new root CA is required, the rotation will be disruptive. The ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca --force")," option must be used, all nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token")," (including servers) will need to be reconfigured to use the new token value, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"using-the-example-script-1"},"Using the Example Script"),(0,a.kt)("p",null,"The example ",(0,a.kt)("inlineCode",{parentName:"p"},"generate-custom-ca-certs.sh")," script linked above can also be used to generate updated certs in a new temporary directory, by copying files into the correct location and setting the ",(0,a.kt)("inlineCode",{parentName:"p"},"DATA_DIR")," environment variable.\nTo use the example script to generate updated certs and keys, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation.\nmkdir -p /opt/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# Non-disruptive rotation requires the same root CA that was used to generate the original certificates.\n# If the original files are still in the data directory, you can just run:\ncp /var/lib/rancher/k3s/server/tls/root-ca.* /var/lib/rancher/k3s/server/tls/intermediate-ca.* /opt/k3s/server/tls\n\n# Copy the current service-account signing key, so that existing service-account tokens are not invalidated.\ncp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls\n\n# Generate updated custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash -\n\n# Load the updated CA certs and keys into the datastore.\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"If you used the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option or changed the root CA, ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token")," are reconfigured to use the new token value, prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h3",{id:"rotating-self-signed-ca-certificates"},"Rotating Self-Signed CA Certificates"),(0,a.kt)("p",null,"To rotate the K3s-generated self-signed CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"If the cluster has been started with default self-signed CA certificates, rotation will be disruptive. All nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token")," will need to be reconfigured to trust the new CA hash.\nIf the new CA certificates are not cross-signed by the old CA certificates, you will need to use the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option to bypass integrity checks, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"default-ca-topology"},"Default CA Topology"),(0,a.kt)("p",null,"The default self-signed CA certificates have the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca -.-|SHA256| root-hash\n  server-ca ===> kube-server-certs\n  client-ca ===> kube-client-certs\n  request-header-ca ===> request-header-certs\n  etcd-peer-ca ===> etcd-peer-certs\n  etcd-server-ca ===> etcd-server-certs'}),(0,a.kt)("p",null,"When rotating the default self-signed CAs, a modified certificate topology with intermediate CAs and a new root CA cross-signed by the old CA can be used so that there is a continuous chain of trust between the old and new CAs:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca-old("Server CA<br/>(old)")\n  client-ca-old("Client CA<br/>(old)")\n  request-header-ca-old("API Aggregation CA<br/>(old)")\n  etcd-peer-ca-old("etcd Peer CA<br/>(old)")\n  etcd-server-ca-old("etcd Server CA<br/>(old)")\n\n  root-hash>"Join token CA hash"]\n\n  server-ca-xsigned("Server CA<br/>(cross-signed)")\n  client-ca-xsigned("Client CA<br/>(cross-signed)")\n  request-header-ca-xsigned("API Aggregation CA<br/>(cross-signed)")\n  etcd-peer-ca-xsigned("etcd Peer CA<br/>(cross-signed)")\n  etcd-server-ca-xsigned("etcd Server CA<br/>(cross-signed)")\n\n  server-ca-ssigned("Server CA<br/>(self-signed)")\n  client-ca-ssigned("Client CA<br/>(self-signed)")\n  request-header-ca-ssigned("API Aggregation CA<br/>(self-signed)")\n  etcd-peer-ca-ssigned("etcd Peer CA<br/>(self-signed)")\n  etcd-server-ca-ssigned("etcd Server CA<br/>(self-signed)")\n\n  server-ca("Intermediate<br/>Server CA")\n  client-ca("Intermediate<br/>Client CA")\n  request-header-ca("Intermediate<br/>API Aggregation CA")\n  etcd-peer-ca("Intermediate<br/>etcd Peer CA")\n  etcd-server-ca("Intermediate<br>etcd Server CA")\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca-ssigned -.-|SHA256| root-hash\n  server-ca-ssigned --\x3e server-ca ==> kube-server-certs\n  server-ca-old --\x3e server-ca-xsigned --\x3e server-ca\n  client-ca-ssigned --\x3e client-ca ==> kube-client-certs\n  client-ca-old --\x3e client-ca-xsigned --\x3e client-ca\n  request-header-ca-ssigned --\x3e request-header-ca ==> request-header-certs\n  request-header-ca-old --\x3e request-header-ca-xsigned --\x3e request-header-ca\n  etcd-peer-ca-ssigned --\x3e etcd-peer-ca ==> etcd-peer-certs\n  etcd-peer-ca-old --\x3e etcd-peer-ca-xsigned --\x3e etcd-peer-ca\n  etcd-server-ca-ssigned --\x3e etcd-server-ca ==> etcd-server-certs\n  etcd-server-ca-old --\x3e etcd-server-ca-xsigned --\x3e etcd-server-ca'}),(0,a.kt)("h4",{id:"using-the-example-script-2"},"Using The Example Script"),(0,a.kt)("p",null,"An example script to create updated CA certificates and keys cross-signed by the existing CAs is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/rotate-default-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/rotate-default-ca-certs.sh")),"."),(0,a.kt)("p",null,"To use the example script to generate updated self-signed certificates that are cross-signed by the existing CAs, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create updated CA certs and keys, cross-signed by the current CAs.\n# This script will create a new temporary directory containing the updated certs, and output the new token values.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash -\n\n# Load the updated certs into the datastore; see the script output for the updated token values.\nk3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"Ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token"),", including other server nodes, are reconfigured to use the new token value prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h2",{id:"service-account-issuer-key-rotation"},"Service-Account Issuer Key Rotation"),(0,a.kt)("p",null,"The service-account issuer key is an RSA private key used to sign service-account tokens.\nWhen rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated.\nIt can be rotated independent of the cluster CAs by using the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," to install only an updated ",(0,a.kt)("inlineCode",{parentName:"p"},"service.key")," file that includes both the new and old keys."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated key into a separate directory.")),(0,a.kt)("p",null,"For example, to rotate only the service-account issuer key, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation\nmkdir -p /opt/k3s/server/tls\n\n# Check OpenSSL version\nopenssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional\n\n# Generate a new key\nopenssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048\n\n# Append the existing key to avoid invalidating current tokens\ncat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key\n\n# Load the updated key into the datastore\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"It is normal to see warnings for files that are not being updated. If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[393],{3905:(e,t,r)=>{r.d(t,{Zo:()=>d,kt:()=>h});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),l=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},d=function(e){var t=l(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,d=c(e,["components","mdxType","originalType","parentName"]),u=l(r),h=a,m=u["".concat(o,".").concat(h)]||u[h]||p[h]||i;return r?n.createElement(m,s(s({ref:t},d),{},{components:r})):n.createElement(m,s({ref:t},d))}));function h(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,s=new Array(i);s[0]=u;var c={};for(var o in t)hasOwnProperty.call(t,o)&&(c[o]=t[o]);c.originalType=e,c.mdxType="string"==typeof e?e:a,s[1]=c;for(var l=2;l<i;l++)s[l]=r[l];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},7161:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>p,frontMatter:()=>i,metadata:()=>c,toc:()=>l});var n=r(3117),a=(r(7294),r(3905));const i={title:"certificate"},s="k3s certificate",c={unversionedId:"cli/certificate",id:"cli/certificate",title:"certificate",description:"Client and Server Certificates",source:"@site/docs/cli/certificate.md",sourceDirName:"cli",slug:"/cli/certificate",permalink:"/cli/certificate",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"certificate"},sidebar:"mySidebar",previous:{title:"agent",permalink:"/cli/agent"},next:{title:"etcd-snapshot",permalink:"/cli/etcd-snapshot"}},o={},l=[{value:"Client and Server Certificates",id:"client-and-server-certificates",level:2},{value:"Rotating Client and Server Certificates",id:"rotating-client-and-server-certificates",level:3},{value:"Certificate Authority (CA) Certificates",id:"certificate-authority-ca-certificates",level:2},{value:"Using Custom CA Certificates",id:"using-custom-ca-certificates",level:3},{value:"Custom CA Topology",id:"custom-ca-topology",level:4},{value:"Using the Example Script",id:"using-the-example-script",level:4},{value:"Rotating Custom CA Certificates",id:"rotating-custom-ca-certificates",level:3},{value:"Using the Example Script",id:"using-the-example-script-1",level:4},{value:"Rotating Self-Signed CA Certificates",id:"rotating-self-signed-ca-certificates",level:3},{value:"Default CA Topology",id:"default-ca-topology",level:4},{value:"Using The Example Script",id:"using-the-example-script-2",level:4},{value:"Service-Account Issuer Key Rotation",id:"service-account-issuer-key-rotation",level:2}],d={toc:l};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},d,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-certificate"},"k3s certificate"),(0,a.kt)("h2",{id:"client-and-server-certificates"},"Client and Server Certificates"),(0,a.kt)("p",null,"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts."),(0,a.kt)("h3",{id:"rotating-client-and-server-certificates"},"Rotating Client and Server Certificates"),(0,a.kt)("p",null,"To rotate client and server certificates manually, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate")," subcommand:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Stop K3s\nsystemctl stop k3s\n\n# Rotate certificates\nk3s certificate rotate\n\n# Start K3s\nsystemctl start k3s\n")),(0,a.kt)("p",null,"Individual or lists of certificates can be rotated by specifying the certificate name:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s certificate rotate --service <SERVICE>,<SERVICE>\n")),(0,a.kt)("p",null,"The following certificates can be rotated: ",(0,a.kt)("inlineCode",{parentName:"p"},"admin"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"api-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"controller-manager"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"scheduler"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"cloud-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"auth-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kubelet"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-proxy"),"."),(0,a.kt)("h2",{id:"certificate-authority-ca-certificates"},"Certificate Authority (CA) Certificates"),(0,a.kt)("p",null,"Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates"},"PKI Certificates and Requirements")," documentation."),(0,a.kt)("p",null,"By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed."),(0,a.kt)("p",null,"The authoritative CA certificates and keys are stored within the datastore's bootstrap key, encrypted using the ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#server"},"server token")," as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.\nCopies of the CA certificates and keys are extracted to disk during K3s server startup.\nAny server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"},"Certificates API")," controllers may issue additional certificates at runtime."),(0,a.kt)("p",null,"To rotate CA certificates and keys, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command.\nThe command performs integrity checks to confirm that the updated certificates and keys are usable.\nIf the updated data is acceptable, the datastore's encrypted bootstrap key is updated, and the new certificates and keys will be used the next time K3s starts.\nIf problems are encountered while validating the certificates and keys, an error is reported to the system log and the operation is cancelled without changes."),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Support for the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command and the ability to use CA certificates signed by an external CA is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,a.kt)("h3",{id:"using-custom-ca-certificates"},"Using Custom CA Certificates"),(0,a.kt)("p",null,"If CA certificates and keys are found the correct location during initial startup of the first server in the cluster, automatic generation of CA certificates will be bypassed."),(0,a.kt)("p",null,"An example script to pre-create the appropriate certificates and keys is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/generate-custom-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/generate-custom-ca-certs.sh")),".\nThis script should be run prior to starting K3s for the first time, and will create a full set of leaf CA certificates signed by common Root and Intermediate CA certificates.\nIf you have an existing Root or Intermediate CA, this script can be used (or used as a starting point) to create the correct CA certificates to provision a K3s cluster with PKI rooted in an existing authority."),(0,a.kt)("p",null,"Custom Certificate Authority files must be placed in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),". The following files are required:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: etcd files are required even if embedded etcd is not in use.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.crt"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: This is the private key used to sign service-account tokens. It does not have a corresponding certificate.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"service.key"))),(0,a.kt)("h4",{id:"custom-ca-topology"},"Custom CA Topology"),(0,a.kt)("p",null,"Custom CA Certificates should observe the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  root("Root CA")\n  intermediate("Intermediate CA")\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  root -.-|SHA256| root-hash\n  root ---\x3e intermediate\n  intermediate --\x3e server-ca ==> kube-server-certs\n  intermediate --\x3e client-ca ==> kube-client-certs\n  intermediate --\x3e request-header-ca ==> request-header-certs\n  intermediate --\x3e etcd-peer-ca ==> etcd-peer-certs\n  intermediate --\x3e etcd-server-ca ==> etcd-server-certs'}),(0,a.kt)("h4",{id:"using-the-example-script"},"Using the Example Script"),(0,a.kt)("admonition",{type:"important"},(0,a.kt)("p",{parentName:"admonition"},"If you want to sign the cluster CA certificates with an existing root CA using the example script, you must place the root and intermediate files in the target directory prior to running the script.\nIf the files do not exist, the script will create new root and intermediate CA certificates.")),(0,a.kt)("p",null,"If you want to use only an existing root CA certificate, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.key"))),(0,a.kt)("p",null,"If you want to use existing root and intermediate CA certificates, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.key"))),(0,a.kt)("p",null,"To use the example script to generate custom certs and keys before starting K3s, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create the target directory for cert generation.\nmkdir -p /var/lib/rancher/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# For the purposes of this example, we assume you have existing root and intermediate CA files in /etc/ssl.\n# If you do not have an existing root and/or intermediate CA, the script will generate them for you.\ncp /etc/ssl/certs/root-ca.pem /etc/ssl/certs/intermediate-ca.pem /etc/ssl/private/intermediate-ca.key /var/lib/rancher/k3s/server/tls\n\n# Generate custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash -\n")),(0,a.kt)("p",null,"If the command completes successfully, you may install and/or start K3s for the first time.\nIf the script generated root and/or intermediate CA files, you should back up these files so that they can be reused if it is necessary to rotate the CA certificates at a later date."),(0,a.kt)("h3",{id:"rotating-custom-ca-certificates"},"Rotating Custom CA Certificates"),(0,a.kt)("p",null,"To rotate custom CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"A cluster that has been started with custom CA certificates can renew or rotate the CA certificates and keys non-disruptively, as long as the same root CA is used."),(0,a.kt)("p",null,"If a new root CA is required, the rotation will be disruptive. The ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca --force")," option must be used, all nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token")," (including servers) will need to be reconfigured to use the new token value, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"using-the-example-script-1"},"Using the Example Script"),(0,a.kt)("p",null,"The example ",(0,a.kt)("inlineCode",{parentName:"p"},"generate-custom-ca-certs.sh")," script linked above can also be used to generate updated certs in a new temporary directory, by copying files into the correct location and setting the ",(0,a.kt)("inlineCode",{parentName:"p"},"DATA_DIR")," environment variable.\nTo use the example script to generate updated certs and keys, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation.\nmkdir -p /opt/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# Non-disruptive rotation requires the same root CA that was used to generate the original certificates.\n# If the original files are still in the data directory, you can just run:\ncp /var/lib/rancher/k3s/server/tls/root-ca.* /var/lib/rancher/k3s/server/tls/intermediate-ca.* /opt/k3s/server/tls\n\n# Copy the current service-account signing key, so that existing service-account tokens are not invalidated.\ncp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls\n\n# Generate updated custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash -\n\n# Load the updated CA certs and keys into the datastore.\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"If you used the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option or changed the root CA, ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token")," are reconfigured to use the new token value, prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h3",{id:"rotating-self-signed-ca-certificates"},"Rotating Self-Signed CA Certificates"),(0,a.kt)("p",null,"To rotate the K3s-generated self-signed CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"If the cluster has been started with default self-signed CA certificates, rotation will be disruptive. All nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token")," will need to be reconfigured to trust the new CA hash.\nIf the new CA certificates are not cross-signed by the old CA certificates, you will need to use the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option to bypass integrity checks, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"default-ca-topology"},"Default CA Topology"),(0,a.kt)("p",null,"The default self-signed CA certificates have the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca -.-|SHA256| root-hash\n  server-ca ===> kube-server-certs\n  client-ca ===> kube-client-certs\n  request-header-ca ===> request-header-certs\n  etcd-peer-ca ===> etcd-peer-certs\n  etcd-server-ca ===> etcd-server-certs'}),(0,a.kt)("p",null,"When rotating the default self-signed CAs, a modified certificate topology with intermediate CAs and a new root CA cross-signed by the old CA can be used so that there is a continuous chain of trust between the old and new CAs:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca-old("Server CA<br/>(old)")\n  client-ca-old("Client CA<br/>(old)")\n  request-header-ca-old("API Aggregation CA<br/>(old)")\n  etcd-peer-ca-old("etcd Peer CA<br/>(old)")\n  etcd-server-ca-old("etcd Server CA<br/>(old)")\n\n  root-hash>"Join token CA hash"]\n\n  server-ca-xsigned("Server CA<br/>(cross-signed)")\n  client-ca-xsigned("Client CA<br/>(cross-signed)")\n  request-header-ca-xsigned("API Aggregation CA<br/>(cross-signed)")\n  etcd-peer-ca-xsigned("etcd Peer CA<br/>(cross-signed)")\n  etcd-server-ca-xsigned("etcd Server CA<br/>(cross-signed)")\n\n  server-ca-ssigned("Server CA<br/>(self-signed)")\n  client-ca-ssigned("Client CA<br/>(self-signed)")\n  request-header-ca-ssigned("API Aggregation CA<br/>(self-signed)")\n  etcd-peer-ca-ssigned("etcd Peer CA<br/>(self-signed)")\n  etcd-server-ca-ssigned("etcd Server CA<br/>(self-signed)")\n\n  server-ca("Intermediate<br/>Server CA")\n  client-ca("Intermediate<br/>Client CA")\n  request-header-ca("Intermediate<br/>API Aggregation CA")\n  etcd-peer-ca("Intermediate<br/>etcd Peer CA")\n  etcd-server-ca("Intermediate<br>etcd Server CA")\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca-ssigned -.-|SHA256| root-hash\n  server-ca-ssigned --\x3e server-ca ==> kube-server-certs\n  server-ca-old --\x3e server-ca-xsigned --\x3e server-ca\n  client-ca-ssigned --\x3e client-ca ==> kube-client-certs\n  client-ca-old --\x3e client-ca-xsigned --\x3e client-ca\n  request-header-ca-ssigned --\x3e request-header-ca ==> request-header-certs\n  request-header-ca-old --\x3e request-header-ca-xsigned --\x3e request-header-ca\n  etcd-peer-ca-ssigned --\x3e etcd-peer-ca ==> etcd-peer-certs\n  etcd-peer-ca-old --\x3e etcd-peer-ca-xsigned --\x3e etcd-peer-ca\n  etcd-server-ca-ssigned --\x3e etcd-server-ca ==> etcd-server-certs\n  etcd-server-ca-old --\x3e etcd-server-ca-xsigned --\x3e etcd-server-ca'}),(0,a.kt)("h4",{id:"using-the-example-script-2"},"Using The Example Script"),(0,a.kt)("p",null,"An example script to create updated CA certificates and keys cross-signed by the existing CAs is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/rotate-default-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/rotate-default-ca-certs.sh")),"."),(0,a.kt)("p",null,"To use the example script to generate updated self-signed certificates that are cross-signed by the existing CAs, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create updated CA certs and keys, cross-signed by the current CAs.\n# This script will create a new temporary directory containing the updated certs, and output the new token values.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash -\n\n# Load the updated certs into the datastore; see the script output for the updated token values.\nk3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"Ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/cli/token#secure"},"secure token"),", including other server nodes, are reconfigured to use the new token value prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h2",{id:"service-account-issuer-key-rotation"},"Service-Account Issuer Key Rotation"),(0,a.kt)("p",null,"The service-account issuer key is an RSA private key used to sign service-account tokens.\nWhen rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated.\nIt can be rotated independent of the cluster CAs by using the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," to install only an updated ",(0,a.kt)("inlineCode",{parentName:"p"},"service.key")," file that includes both the new and old keys."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated key into a separate directory.")),(0,a.kt)("p",null,"For example, to rotate only the service-account issuer key, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation\nmkdir -p /opt/k3s/server/tls\n\n# Check OpenSSL version\nopenssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional\n\n# Generate a new key\nopenssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048\n\n# Append the existing key to avoid invalidating current tokens\ncat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key\n\n# Load the updated key into the datastore\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"It is normal to see warnings for files that are not being updated. If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/7b8e2475.f309ce72.js b/assets/js/7b8e2475.98fb2e0f.js
similarity index 98%
rename from assets/js/7b8e2475.f309ce72.js
rename to assets/js/7b8e2475.98fb2e0f.js
index 9d378e560..096d8765e 100644
--- a/assets/js/7b8e2475.f309ce72.js
+++ b/assets/js/7b8e2475.98fb2e0f.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[79],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>y});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},s=Object.keys(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var a=n.createContext({}),u=function(e){var t=n.useContext(a),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},l=function(e){var t=u(e.components);return n.createElement(a.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,s=e.originalType,a=e.parentName,l=c(e,["components","mdxType","originalType","parentName"]),d=u(r),y=i,m=d["".concat(a,".").concat(y)]||d[y]||p[y]||s;return r?n.createElement(m,o(o({ref:t},l),{},{components:r})):n.createElement(m,o({ref:t},l))}));function y(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var s=r.length,o=new Array(s);o[0]=d;var c={};for(var a in t)hasOwnProperty.call(t,a)&&(c[a]=t[a]);c.originalType=e,c.mdxType="string"==typeof e?e:i,o[1]=c;for(var u=2;u<s;u++)o[u]=r[u];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},2678:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>a,contentTitle:()=>o,default:()=>p,frontMatter:()=>s,metadata:()=>c,toc:()=>u});var n=r(3117),i=(r(7294),r(3905));const s={title:"Security",weight:90},o=void 0,c={unversionedId:"security/security",id:"security/security",title:"Security",description:"This section describes the methodology and means of securing a K3s cluster. It's broken into 2 sections. These guides assume k3s is running with embedded etcd.",source:"@site/docs/security/security.md",sourceDirName:"security",slug:"/security/",permalink:"/security/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/security.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Security",weight:90},sidebar:"mySidebar",previous:{title:"Known Issues",permalink:"/known-issues/"},next:{title:"Secrets Encryption",permalink:"/security/secrets-encryption"}},a={},u=[],l={toc:u};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This section describes the methodology and means of securing a K3s cluster. It's broken into 2 sections. These guides assume k3s is running with embedded etcd."),(0,i.kt)("p",null,"The documents below apply to CIS Kubernetes Benchmark v1.23."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/security/hardening-guide"},"Hardening Guide")),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/security/self-assessment"},"CIS Benchmark Self-Assessment Guide"))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[79],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>y});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},s=Object.keys(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var a=n.createContext({}),u=function(e){var t=n.useContext(a),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},l=function(e){var t=u(e.components);return n.createElement(a.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,s=e.originalType,a=e.parentName,l=c(e,["components","mdxType","originalType","parentName"]),d=u(r),y=i,m=d["".concat(a,".").concat(y)]||d[y]||p[y]||s;return r?n.createElement(m,o(o({ref:t},l),{},{components:r})):n.createElement(m,o({ref:t},l))}));function y(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var s=r.length,o=new Array(s);o[0]=d;var c={};for(var a in t)hasOwnProperty.call(t,a)&&(c[a]=t[a]);c.originalType=e,c.mdxType="string"==typeof e?e:i,o[1]=c;for(var u=2;u<s;u++)o[u]=r[u];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},2678:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>a,contentTitle:()=>o,default:()=>p,frontMatter:()=>s,metadata:()=>c,toc:()=>u});var n=r(3117),i=(r(7294),r(3905));const s={title:"Security",weight:90},o=void 0,c={unversionedId:"security/security",id:"security/security",title:"Security",description:"This section describes the methodology and means of securing a K3s cluster. It's broken into 2 sections. These guides assume k3s is running with embedded etcd.",source:"@site/docs/security/security.md",sourceDirName:"security",slug:"/security/",permalink:"/security/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/security.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Security",weight:90},sidebar:"mySidebar",previous:{title:"Known Issues",permalink:"/known-issues/"},next:{title:"Secrets Encryption",permalink:"/security/secrets-encryption"}},a={},u=[],l={toc:u};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This section describes the methodology and means of securing a K3s cluster. It's broken into 2 sections. These guides assume k3s is running with embedded etcd."),(0,i.kt)("p",null,"The documents below apply to CIS Kubernetes Benchmark v1.23."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/security/hardening-guide"},"Hardening Guide")),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/security/self-assessment"},"CIS Benchmark Self-Assessment Guide"))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/82406859.12adea2c.js b/assets/js/82406859.cedbc22f.js
similarity index 99%
rename from assets/js/82406859.12adea2c.js
rename to assets/js/82406859.cedbc22f.js
index b46213c82..853d478a8 100644
--- a/assets/js/82406859.12adea2c.js
+++ b/assets/js/82406859.cedbc22f.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3319],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),p=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,i=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=p(n),m=r,h=d["".concat(i,".").concat(m)]||d[m]||c[m]||o;return n?a.createElement(h,l(l({ref:t},u),{},{components:n})):a.createElement(h,l({ref:t},u))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,l=new Array(o);l[0]=d;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,l[1]=s;for(var p=2;p<o;p++)l[p]=n[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},800:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>c,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const o={title:"Automated Upgrades",weight:20},l=void 0,s={unversionedId:"upgrades/automated",id:"upgrades/automated",title:"Automated Upgrades",description:"Overview",source:"@site/docs/upgrades/automated.md",sourceDirName:"upgrades",slug:"/upgrades/automated",permalink:"/upgrades/automated",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Automated Upgrades",weight:20},sidebar:"mySidebar",previous:{title:"Manual Upgrades",permalink:"/upgrades/manual"},next:{title:"Volumes and Storage",permalink:"/storage/"}},i={},p=[{value:"Overview",id:"overview",level:3},{value:"Install the system-upgrade-controller",id:"install-the-system-upgrade-controller",level:3},{value:"Configure plans",id:"configure-plans",level:3}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h3",{id:"overview"},"Overview"),(0,r.kt)("p",null,"You can manage K3s cluster upgrades using Rancher's system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources"},"custom resource definition (CRD)"),", a ",(0,r.kt)("inlineCode",{parentName:"p"},"plan"),", and a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/architecture/controller/"},"controller"),"."),(0,r.kt)("p",null,"The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/"},"label selector"),". See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go"},"CRD"),"."),(0,r.kt)("p",null,"The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/"},"jobs")," on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The upgrade job that is launched must be highly privileged. It is configured with the following:"),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"Host ",(0,r.kt)("inlineCode",{parentName:"li"},"IPC"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"NET"),", and ",(0,r.kt)("inlineCode",{parentName:"li"},"PID")," namespaces"),(0,r.kt)("li",{parentName:"ul"},"The ",(0,r.kt)("inlineCode",{parentName:"li"},"CAP_SYS_BOOT")," capability"),(0,r.kt)("li",{parentName:"ul"},"Host root mounted at ",(0,r.kt)("inlineCode",{parentName:"li"},"/host")," with read and write permissions"))),(0,r.kt)("p",null,"To automate upgrades in this manner, you must do the following:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Install the system-upgrade-controller into your cluster"),(0,r.kt)("li",{parentName:"ol"},"Configure plans")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades."),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster is ",(0,r.kt)("em",{parentName:"li"},"not")," managed Rancher, you may follow the steps below."))),(0,r.kt)("p",null,"For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s-upgrade"},"k3s-upgrade"))),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"install-the-system-upgrade-controller"},"Install the system-upgrade-controller"),(0,r.kt)("p",null," The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml\n")),(0,r.kt)("p",null,"The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied."),(0,r.kt)("h3",{id:"configure-plans"},"Configure plans"),(0,r.kt)("p",null,"It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  "),(0,r.kt)("p",null,"The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'# Server plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: server-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: In\n      values:\n      - "true"\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n---\n# Agent plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: agent-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: DoesNotExist\n  prepare:\n    args:\n    - prepare\n    - server-plan\n    image: rancher/k3s-upgrade\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n')),(0,r.kt)("p",null,"There are a few important things to call out regarding these plans:"),(0,r.kt)("p",null,"1) The plans must be created in the same namespace where the controller was deployed."),(0,r.kt)("p",null,"2) The ",(0,r.kt)("inlineCode",{parentName:"p"},"concurrency")," field indicates how many nodes can be upgraded at the same time. "),(0,r.kt)("p",null,"3) The server-plan targets server nodes by specifying a label selector that selects nodes with the ",(0,r.kt)("inlineCode",{parentName:"p"},"node-role.kubernetes.io/control-plane")," label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label."),(0,r.kt)("p",null,"4) The ",(0,r.kt)("inlineCode",{parentName:"p"},"prepare")," step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute."),(0,r.kt)("p",null,"5) Both plans have the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field set to v1.24.6+k3s1. Alternatively, you can omit the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field and set the ",(0,r.kt)("inlineCode",{parentName:"p"},"channel")," field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the ",(0,r.kt)("a",{parentName:"p",href:"/upgrades/manual#release-channels"},"release channels"),". Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: upgrade.cattle.io/v1\nkind: Plan\n...\nspec:\n  ...\n  channel: https://update.k3s.io/v1-release/channels/stable\n\n")),(0,r.kt)("p",null,"As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed."),(0,r.kt)("p",null,"You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl -n system-upgrade get plans -o yaml\nkubectl -n system-upgrade get jobs -o yaml\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3319],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),p=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,i=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=p(n),m=r,h=d["".concat(i,".").concat(m)]||d[m]||c[m]||o;return n?a.createElement(h,l(l({ref:t},u),{},{components:n})):a.createElement(h,l({ref:t},u))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,l=new Array(o);l[0]=d;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,l[1]=s;for(var p=2;p<o;p++)l[p]=n[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},800:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>c,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const o={title:"Automated Upgrades",weight:20},l=void 0,s={unversionedId:"upgrades/automated",id:"upgrades/automated",title:"Automated Upgrades",description:"Overview",source:"@site/docs/upgrades/automated.md",sourceDirName:"upgrades",slug:"/upgrades/automated",permalink:"/upgrades/automated",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Automated Upgrades",weight:20},sidebar:"mySidebar",previous:{title:"Manual Upgrades",permalink:"/upgrades/manual"},next:{title:"Volumes and Storage",permalink:"/storage/"}},i={},p=[{value:"Overview",id:"overview",level:3},{value:"Install the system-upgrade-controller",id:"install-the-system-upgrade-controller",level:3},{value:"Configure plans",id:"configure-plans",level:3}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h3",{id:"overview"},"Overview"),(0,r.kt)("p",null,"You can manage K3s cluster upgrades using Rancher's system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources"},"custom resource definition (CRD)"),", a ",(0,r.kt)("inlineCode",{parentName:"p"},"plan"),", and a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/architecture/controller/"},"controller"),"."),(0,r.kt)("p",null,"The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/"},"label selector"),". See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go"},"CRD"),"."),(0,r.kt)("p",null,"The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/"},"jobs")," on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The upgrade job that is launched must be highly privileged. It is configured with the following:"),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"Host ",(0,r.kt)("inlineCode",{parentName:"li"},"IPC"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"NET"),", and ",(0,r.kt)("inlineCode",{parentName:"li"},"PID")," namespaces"),(0,r.kt)("li",{parentName:"ul"},"The ",(0,r.kt)("inlineCode",{parentName:"li"},"CAP_SYS_BOOT")," capability"),(0,r.kt)("li",{parentName:"ul"},"Host root mounted at ",(0,r.kt)("inlineCode",{parentName:"li"},"/host")," with read and write permissions"))),(0,r.kt)("p",null,"To automate upgrades in this manner, you must do the following:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Install the system-upgrade-controller into your cluster"),(0,r.kt)("li",{parentName:"ol"},"Configure plans")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades."),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster is ",(0,r.kt)("em",{parentName:"li"},"not")," managed Rancher, you may follow the steps below."))),(0,r.kt)("p",null,"For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s-upgrade"},"k3s-upgrade"))),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"install-the-system-upgrade-controller"},"Install the system-upgrade-controller"),(0,r.kt)("p",null," The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml\n")),(0,r.kt)("p",null,"The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied."),(0,r.kt)("h3",{id:"configure-plans"},"Configure plans"),(0,r.kt)("p",null,"It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  "),(0,r.kt)("p",null,"The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'# Server plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: server-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: In\n      values:\n      - "true"\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n---\n# Agent plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: agent-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: DoesNotExist\n  prepare:\n    args:\n    - prepare\n    - server-plan\n    image: rancher/k3s-upgrade\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n')),(0,r.kt)("p",null,"There are a few important things to call out regarding these plans:"),(0,r.kt)("p",null,"1) The plans must be created in the same namespace where the controller was deployed."),(0,r.kt)("p",null,"2) The ",(0,r.kt)("inlineCode",{parentName:"p"},"concurrency")," field indicates how many nodes can be upgraded at the same time. "),(0,r.kt)("p",null,"3) The server-plan targets server nodes by specifying a label selector that selects nodes with the ",(0,r.kt)("inlineCode",{parentName:"p"},"node-role.kubernetes.io/control-plane")," label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label."),(0,r.kt)("p",null,"4) The ",(0,r.kt)("inlineCode",{parentName:"p"},"prepare")," step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute."),(0,r.kt)("p",null,"5) Both plans have the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field set to v1.24.6+k3s1. Alternatively, you can omit the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field and set the ",(0,r.kt)("inlineCode",{parentName:"p"},"channel")," field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the ",(0,r.kt)("a",{parentName:"p",href:"/upgrades/manual#release-channels"},"release channels"),". Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: upgrade.cattle.io/v1\nkind: Plan\n...\nspec:\n  ...\n  channel: https://update.k3s.io/v1-release/channels/stable\n\n")),(0,r.kt)("p",null,"As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed."),(0,r.kt)("p",null,"You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl -n system-upgrade get plans -o yaml\nkubectl -n system-upgrade get jobs -o yaml\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/82f1aa93.9b3a2dbc.js b/assets/js/82f1aa93.4aaed9fe.js
similarity index 99%
rename from assets/js/82f1aa93.9b3a2dbc.js
rename to assets/js/82f1aa93.4aaed9fe.js
index 546920d14..96a7404d8 100644
--- a/assets/js/82f1aa93.9b3a2dbc.js
+++ b/assets/js/82f1aa93.4aaed9fe.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7709],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},d=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(t),m=r,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||i;return t?a.createElement(k,s(s({ref:n},u),{},{components:t})):a.createElement(k,s({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,s=new Array(i);s[0]=d;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var c=2;c<i;c++)s[c]=t[c];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}d.displayName="MDXCreateElement"},1199:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const i={title:"CIS Hardening Guide",weight:80},s=void 0,o={unversionedId:"security/hardening-guide",id:"security/hardening-guide",title:"CIS Hardening Guide",description:"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).",source:"@site/docs/security/hardening-guide.md",sourceDirName:"security",slug:"/security/hardening-guide",permalink:"/security/hardening-guide",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"CIS Hardening Guide",weight:80},sidebar:"mySidebar",previous:{title:"Secrets Encryption",permalink:"/security/secrets-encryption"},next:{title:"CIS Self Assessment Guide",permalink:"/security/self-assessment"}},l={},c=[{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set",id:"ensure-protect-kernel-defaults-is-set",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:4},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security",id:"pod-security",level:3},{value:"NetworkPolicies",id:"networkpolicies",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Configuration for Kubernetes Components",id:"configuration-for-kubernetes-components",level:2},{value:"Control Plane Execution and Arguments",id:"control-plane-execution-and-arguments",level:2},{value:"Known Issues",id:"known-issues",level:2},{value:"Control 1.2.15",id:"control-1215",level:3},{value:"Control 1.2.16",id:"control-1216",level:3},{value:"Control 1.2.22",id:"control-1222",level:3},{value:"Control 1.2.23",id:"control-1223",level:3},{value:"Control 1.2.24",id:"control-1224",level:3},{value:"Control 1.2.25",id:"control-1225",level:3},{value:"Control 1.2.26",id:"control-1226",level:3},{value:"Control 1.2.27",id:"control-1227",level:3},{value:"Control 1.2.33",id:"control-1233",level:3},{value:"Control 1.2.34",id:"control-1234",level:3},{value:"Control 1.3.1",id:"control-131",level:3},{value:"Control 3.2.1",id:"control-321",level:3},{value:"Control 4.2.7",id:"control-427",level:3},{value:"Control 5.1.5",id:"control-515",level:3},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=u("Tabs"),d=u("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."),(0,r.kt)("p",null,"K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"K3s will not modify the host operating system. Any host-level modifications will need to be done manually."),(0,r.kt)("li",{parentName:"ol"},"Certain CIS policy controls for ",(0,r.kt)("inlineCode",{parentName:"li"},"NetworkPolicies")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityStandards")," (",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicies")," on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.")),(0,r.kt)("p",null,"The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary."),(0,r.kt)("h2",{id:"host-level-requirements"},"Host-level Requirements"),(0,r.kt)("p",null,"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section."),(0,r.kt)("h3",{id:"ensure-protect-kernel-defaults-is-set"},"Ensure ",(0,r.kt)("inlineCode",{parentName:"h3"},"protect-kernel-defaults")," is set"),(0,r.kt)("p",null,"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults."),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," ",(0,r.kt)("inlineCode",{parentName:"p"},"protect-kernel-defaults")," is exposed as a top-level flag for K3s.")),(0,r.kt)("h4",{id:"set-kernel-parameters"},"Set kernel parameters"),(0,r.kt)("p",null,"Create a file called ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/sysctl.d/90-kubelet.conf")," and add the snippet below. Then run ",(0,r.kt)("inlineCode",{parentName:"p"},"sysctl -p /etc/sysctl.d/90-kubelet.conf"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"vm.panic_on_oom=0\nvm.overcommit_memory=1\nkernel.panic=10\nkernel.panic_on_oops=1\nkernel.keys.root_maxbytes=25000000\n")),(0,r.kt)("h2",{id:"kubernetes-runtime-requirements"},"Kubernetes Runtime Requirements"),(0,r.kt)("p",null,"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section."),(0,r.kt)("p",null,"By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurity")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," admission controllers enabled, among others."),(0,r.kt)("h3",{id:"pod-security"},"Pod Security"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.25 and newer support ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/"},"Pod Security Admissions (PSAs)")," for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n')),(0,r.kt)("p",null,"The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"psa.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. "),(0,r.kt)("p",null,"Here is an example of a compliant PSA:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system]\n'))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.24 and older support ",(0,r.kt)("a",{parentName:"p",href:"https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/"},"Pod Security Policies (PSPs)")," for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="enable-admission-plugins=NodeRestriction,PodSecurityPolicy"\n')),(0,r.kt)("p",null,"This will have the effect of maintaining the ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," plugin as well as enabling the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy"),". "),(0,r.kt)("p",null,"When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark."),(0,r.kt)("p",null,"Here is an example of a compliant PSP:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false                # CIS - 5.2.1\n  allowPrivilegeEscalation: false  # CIS - 5.2.5\n  requiredDropCapabilities:        # CIS - 5.2.7/8/9\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false               # CIS - 5.2.4\n  hostIPC: false                   # CIS - 5.2.3\n  hostPID: false                   # CIS - 5.2.2\n  runAsUser:\n    rule: 'MustRunAsNonRoot'       # CIS - 5.2.6\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n")),(0,r.kt)("p",null,'For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a "system unrestricted policy" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.'),(0,r.kt)("p",null,"Combining the configuration above with the ",(0,r.kt)("a",{parentName:"p",href:"#networkpolicies"},"Network Policy")," described in the next section, a single file can be placed in the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory. Here is an example of a ",(0,r.kt)("inlineCode",{parentName:"p"},"policy.yaml")," file: "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false\n  allowPrivilegeEscalation: false\n  requiredDropCapabilities:\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false\n  hostIPC: false\n  hostPID: false\n  runAsUser:\n    rule: 'MustRunAsNonRoot'\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: system-unrestricted-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: true\n  allowedCapabilities:\n  - '*'\n  fsGroup:\n    rule: RunAsAny\n  hostIPC: true\n  hostNetwork: true\n  hostPID: true\n  hostPorts:\n  - max: 65535\n    min: 0\n  privileged: true\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n  volumes:\n  - '*'\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: svclb-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: false\n  allowedCapabilities:\n  - NET_ADMIN\n  allowedUnsafeSysctls:\n  - net.ipv4.ip_forward\n  - net.ipv6.conf.all.forwarding\n  fsGroup:\n    rule: RunAsAny\n  hostPorts:\n  - max: 65535\n    min: 0\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:restricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  verbs:\n  - use\n  resourceNames:\n  - restricted-psp\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:system-unrestricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - system-unrestricted-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:svclb-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - svclb-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: default:restricted-psp\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:restricted-psp\nsubjects:\n- kind: Group\n  name: system:authenticated\n  apiGroup: rbac.authorization.k8s.io\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: system-unrestricted-node-psp-rolebinding\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: system-unrestricted-svc-acct-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:serviceaccounts\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: svclb-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:svclb-psp\nsubjects:\n- kind: ServiceAccount\n  name: svclb\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: default\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: default\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-public\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-public\n")))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.")),(0,r.kt)("h3",{id:"networkpolicies"},"NetworkPolicies"),(0,r.kt)("p",null,"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods."),(0,r.kt)("p",null,"Network policies should be placed the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory, where they will automatically be deployed on startup."),(0,r.kt)("p",null,"Here is an example of a compliant network policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"kind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n")),(0,r.kt)("p",null,"With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: default-network-dns-policy\n  namespace: <NAMESPACE>\nspec:\n  ingress:\n  - ports:\n    - port: 53\n      protocol: TCP\n    - port: 53\n      protocol: UDP\n  podSelector:\n    matchLabels:\n      k8s-app: kube-dns\n  policyTypes:\n  - Ingress\n")),(0,r.kt)("p",null,"The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.21 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v121-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app.kubernetes.io/name: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n"))),(0,r.kt)(d,{value:"v1.20 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v120-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n")))),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Operators must manage network policies as normal for additional namespaces that are created.")),(0,r.kt)("h3",{id:"api-server-audit-configuration"},"API Server audit configuration"),(0,r.kt)("p",null,"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment."),(0,r.kt)("p",null,"The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs\n")),(0,r.kt)("p",null,"A starter audit policy to log request metadata is provided below. The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"audit.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. Detailed information about policy configuration for the API server can be found in the Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/debug-application-cluster/audit/"},"documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: audit.k8s.io/v1\nkind: Policy\nrules:\n- level: Metadata\n")),(0,r.kt)("p",null,"Both configurations must be passed as arguments to the API Server as:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"--kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n--kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n")),(0,r.kt)("p",null,"If the configurations are created after K3s is installed, they must be added to K3s' systemd service in ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ExecStart=/usr/local/bin/k3s \\\n    server \\\n    '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\\n    '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\\n")),(0,r.kt)("p",null,"K3s must be restarted to load the new configuration."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo systemctl daemon-reload\nsudo systemctl restart k3s.service\n")),(0,r.kt)("h2",{id:"configuration-for-kubernetes-components"},"Configuration for Kubernetes Components"),(0,r.kt)("p",null,"The configuration below should be placed in the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"configuration file"),", and contains all the necessary remediations to harden the Kubernetes components."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n"))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")))),(0,r.kt)("h2",{id:"control-plane-execution-and-arguments"},"Control Plane Execution and Arguments"),(0,r.kt)("p",null,"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-apiserver \n    --advertise-port=6443 \n    --allow-privileged=true \n    --anonymous-auth=false                                                            # 1.2.1\n    --api-audiences=unknown \n    --authorization-mode=Node,RBAC \n    --bind-address=127.0.0.1 \n    --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs\n    --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt                    # 1.2.31\n    --enable-admission-plugins=NodeRestriction,PodSecurityPolicy                      # 1.2.17\n    --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  # 1.2.32\n    --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt                   # 1.2.29\n    --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key                    # 1.2.29\n    --etcd-servers=https://127.0.0.1:2379 \n    --insecure-port=0                                                                 # 1.2.19\n    --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt \n    --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt \n    --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key \n    --profiling=false                                                                 # 1.2.21\n    --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt \n    --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key \n    --requestheader-allowed-names=system:auth-proxy \n    --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt \n    --requestheader-extra-headers-prefix=X-Remote-Extra- \n    --requestheader-group-headers=X-Remote-Group \n    --requestheader-username-headers=X-Remote-User \n    --secure-port=6444                                                                # 1.2.20\n    --service-account-issuer=k3s \n    --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key            # 1.2.28\n    --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key \n    --service-cluster-ip-range=10.43.0.0/16 \n    --storage-backend=etcd3 \n    --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        # 1.2.30\n    --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30\n    --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-controller-manager \n    --address=127.0.0.1 \n    --allocate-node-cidrs=true \n    --bind-address=127.0.0.1                                                       # 1.3.7\n    --cluster-cidr=10.42.0.0/16 \n    --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt \n    --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key \n    --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig \n    --port=10252 \n    --profiling=false                                                              # 1.3.2\n    --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt                   # 1.3.5\n    --secure-port=0 \n    --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 \n    --use-service-account-credentials=true                                         # 1.3.3\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-scheduler \n    --address=127.0.0.1 \n    --bind-address=127.0.0.1                                              # 1.4.2\n    --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig \n    --port=10251 \n    --profiling=false                                                     # 1.4.1\n    --secure-port=0\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubelet \n    --address=0.0.0.0 \n    --anonymous-auth=false                                                # 4.2.1\n    --authentication-token-webhook=true \n    --authorization-mode=Webhook                                          # 4.2.2\n    --cgroup-driver=cgroupfs \n    --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt             # 4.2.3\n    --cloud-provider=external \n    --cluster-dns=10.43.0.10 \n    --cluster-domain=cluster.local \n    --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin \n    --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d \n    --container-runtime-endpoint=/run/k3s/containerd/containerd.sock \n    --container-runtime=remote \n    --containerd=/run/k3s/containerd/containerd.sock \n    --eviction-hard=imagefs.available<5%,nodefs.available<5% \n    --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% \n    --fail-swap-on=false \n    --healthz-bind-address=127.0.0.1 \n    --hostname-override=hostname01 \n    --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig \n    --kubelet-cgroups=/systemd/system.slice \n    --node-labels= \n    --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests \n    --protect-kernel-defaults=true                                        # 4.2.6\n    --read-only-port=0                                                    # 4.2.4\n    --resolv-conf=/run/systemd/resolve/resolv.conf \n    --runtime-cgroups=/systemd/system.slice \n    --serialize-image-pulls=false \n    --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt        # 4.2.10\n    --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10\n")),(0,r.kt)("p",null,"Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below."),(0,r.kt)("h2",{id:"known-issues"},"Known Issues"),(0,r.kt)("p",null,"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s."),(0,r.kt)("h3",{id:"control-1215"},"Control 1.2.15"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"NamespaceLifecycle")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1216"},"Control 1.2.16"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1222"},"Control 1.2.22"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-path")," argument is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1223"},"Control 1.2.23"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxage")," argument is set to 30 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1224"},"Control 1.2.24"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxbackup")," argument is set to 10 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1225"},"Control 1.2.25"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxsize")," argument is set to 100 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1226"},"Control 1.2.26"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--request-timeout")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1227"},"Control 1.2.27"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--service-account-lookup")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1233"},"Control 1.2.33"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--encryption-provider-config")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.",(0,r.kt)("p",null,"Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-1234"},"Control 1.2.34"),(0,r.kt)("p",null,"Ensure that encryption providers are appropriately configured."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.",(0,r.kt)("p",null,"This can be remediated by passing a valid configuration to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-131"},"Control 1.3.1"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--terminated-pod-gc-threshold")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-321"},"Control 3.2.1"),(0,r.kt)("p",null,"Ensure that a minimal audit policy is created."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Logging is an important detective control for all systems, to detect potential unauthorized access.",(0,r.kt)("p",null,"This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.")),(0,r.kt)("h3",{id:"control-427"},"Control 4.2.7"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--make-iptables-util-chains")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-515"},"Control 5.1.5"),(0,r.kt)("p",null,"Ensure that default service accounts are not actively used"),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.",(0,r.kt)("p",null,"Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account."),(0,r.kt)("p",null,"The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments."),(0,r.kt)("p",null,"This can be remediated by updating the ",(0,r.kt)("inlineCode",{parentName:"p"},"automountServiceAccountToken")," field to ",(0,r.kt)("inlineCode",{parentName:"p"},"false")," for the ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service account in each namespace."),(0,r.kt)("p",null,"For ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service accounts in the built-in namespaces (",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-public"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-node-lease"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"default"),"), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.")),(0,r.kt)("h2",{id:"conclusion"},"Conclusion"),(0,r.kt)("p",null,"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the ",(0,r.kt)("a",{parentName:"p",href:"/security/self-assessment"},"CIS Benchmark Self-Assessment Guide")," to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7709],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},d=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(t),m=r,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||i;return t?a.createElement(k,s(s({ref:n},u),{},{components:t})):a.createElement(k,s({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,s=new Array(i);s[0]=d;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var c=2;c<i;c++)s[c]=t[c];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}d.displayName="MDXCreateElement"},1199:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const i={title:"CIS Hardening Guide",weight:80},s=void 0,o={unversionedId:"security/hardening-guide",id:"security/hardening-guide",title:"CIS Hardening Guide",description:"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).",source:"@site/docs/security/hardening-guide.md",sourceDirName:"security",slug:"/security/hardening-guide",permalink:"/security/hardening-guide",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"CIS Hardening Guide",weight:80},sidebar:"mySidebar",previous:{title:"Secrets Encryption",permalink:"/security/secrets-encryption"},next:{title:"CIS Self Assessment Guide",permalink:"/security/self-assessment"}},l={},c=[{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set",id:"ensure-protect-kernel-defaults-is-set",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:4},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security",id:"pod-security",level:3},{value:"NetworkPolicies",id:"networkpolicies",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Configuration for Kubernetes Components",id:"configuration-for-kubernetes-components",level:2},{value:"Control Plane Execution and Arguments",id:"control-plane-execution-and-arguments",level:2},{value:"Known Issues",id:"known-issues",level:2},{value:"Control 1.2.15",id:"control-1215",level:3},{value:"Control 1.2.16",id:"control-1216",level:3},{value:"Control 1.2.22",id:"control-1222",level:3},{value:"Control 1.2.23",id:"control-1223",level:3},{value:"Control 1.2.24",id:"control-1224",level:3},{value:"Control 1.2.25",id:"control-1225",level:3},{value:"Control 1.2.26",id:"control-1226",level:3},{value:"Control 1.2.27",id:"control-1227",level:3},{value:"Control 1.2.33",id:"control-1233",level:3},{value:"Control 1.2.34",id:"control-1234",level:3},{value:"Control 1.3.1",id:"control-131",level:3},{value:"Control 3.2.1",id:"control-321",level:3},{value:"Control 4.2.7",id:"control-427",level:3},{value:"Control 5.1.5",id:"control-515",level:3},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=u("Tabs"),d=u("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."),(0,r.kt)("p",null,"K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"K3s will not modify the host operating system. Any host-level modifications will need to be done manually."),(0,r.kt)("li",{parentName:"ol"},"Certain CIS policy controls for ",(0,r.kt)("inlineCode",{parentName:"li"},"NetworkPolicies")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityStandards")," (",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicies")," on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.")),(0,r.kt)("p",null,"The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary."),(0,r.kt)("h2",{id:"host-level-requirements"},"Host-level Requirements"),(0,r.kt)("p",null,"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section."),(0,r.kt)("h3",{id:"ensure-protect-kernel-defaults-is-set"},"Ensure ",(0,r.kt)("inlineCode",{parentName:"h3"},"protect-kernel-defaults")," is set"),(0,r.kt)("p",null,"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults."),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," ",(0,r.kt)("inlineCode",{parentName:"p"},"protect-kernel-defaults")," is exposed as a top-level flag for K3s.")),(0,r.kt)("h4",{id:"set-kernel-parameters"},"Set kernel parameters"),(0,r.kt)("p",null,"Create a file called ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/sysctl.d/90-kubelet.conf")," and add the snippet below. Then run ",(0,r.kt)("inlineCode",{parentName:"p"},"sysctl -p /etc/sysctl.d/90-kubelet.conf"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"vm.panic_on_oom=0\nvm.overcommit_memory=1\nkernel.panic=10\nkernel.panic_on_oops=1\nkernel.keys.root_maxbytes=25000000\n")),(0,r.kt)("h2",{id:"kubernetes-runtime-requirements"},"Kubernetes Runtime Requirements"),(0,r.kt)("p",null,"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section."),(0,r.kt)("p",null,"By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurity")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," admission controllers enabled, among others."),(0,r.kt)("h3",{id:"pod-security"},"Pod Security"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.25 and newer support ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/"},"Pod Security Admissions (PSAs)")," for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n')),(0,r.kt)("p",null,"The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"psa.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. "),(0,r.kt)("p",null,"Here is an example of a compliant PSA:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system]\n'))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.24 and older support ",(0,r.kt)("a",{parentName:"p",href:"https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/"},"Pod Security Policies (PSPs)")," for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="enable-admission-plugins=NodeRestriction,PodSecurityPolicy"\n')),(0,r.kt)("p",null,"This will have the effect of maintaining the ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," plugin as well as enabling the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy"),". "),(0,r.kt)("p",null,"When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark."),(0,r.kt)("p",null,"Here is an example of a compliant PSP:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false                # CIS - 5.2.1\n  allowPrivilegeEscalation: false  # CIS - 5.2.5\n  requiredDropCapabilities:        # CIS - 5.2.7/8/9\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false               # CIS - 5.2.4\n  hostIPC: false                   # CIS - 5.2.3\n  hostPID: false                   # CIS - 5.2.2\n  runAsUser:\n    rule: 'MustRunAsNonRoot'       # CIS - 5.2.6\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n")),(0,r.kt)("p",null,'For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a "system unrestricted policy" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.'),(0,r.kt)("p",null,"Combining the configuration above with the ",(0,r.kt)("a",{parentName:"p",href:"#networkpolicies"},"Network Policy")," described in the next section, a single file can be placed in the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory. Here is an example of a ",(0,r.kt)("inlineCode",{parentName:"p"},"policy.yaml")," file: "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false\n  allowPrivilegeEscalation: false\n  requiredDropCapabilities:\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false\n  hostIPC: false\n  hostPID: false\n  runAsUser:\n    rule: 'MustRunAsNonRoot'\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: system-unrestricted-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: true\n  allowedCapabilities:\n  - '*'\n  fsGroup:\n    rule: RunAsAny\n  hostIPC: true\n  hostNetwork: true\n  hostPID: true\n  hostPorts:\n  - max: 65535\n    min: 0\n  privileged: true\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n  volumes:\n  - '*'\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: svclb-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: false\n  allowedCapabilities:\n  - NET_ADMIN\n  allowedUnsafeSysctls:\n  - net.ipv4.ip_forward\n  - net.ipv6.conf.all.forwarding\n  fsGroup:\n    rule: RunAsAny\n  hostPorts:\n  - max: 65535\n    min: 0\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:restricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  verbs:\n  - use\n  resourceNames:\n  - restricted-psp\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:system-unrestricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - system-unrestricted-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:svclb-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - svclb-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: default:restricted-psp\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:restricted-psp\nsubjects:\n- kind: Group\n  name: system:authenticated\n  apiGroup: rbac.authorization.k8s.io\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: system-unrestricted-node-psp-rolebinding\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: system-unrestricted-svc-acct-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:serviceaccounts\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: svclb-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:svclb-psp\nsubjects:\n- kind: ServiceAccount\n  name: svclb\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: default\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: default\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-public\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-public\n")))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.")),(0,r.kt)("h3",{id:"networkpolicies"},"NetworkPolicies"),(0,r.kt)("p",null,"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods."),(0,r.kt)("p",null,"Network policies should be placed the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory, where they will automatically be deployed on startup."),(0,r.kt)("p",null,"Here is an example of a compliant network policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"kind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n")),(0,r.kt)("p",null,"With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: default-network-dns-policy\n  namespace: <NAMESPACE>\nspec:\n  ingress:\n  - ports:\n    - port: 53\n      protocol: TCP\n    - port: 53\n      protocol: UDP\n  podSelector:\n    matchLabels:\n      k8s-app: kube-dns\n  policyTypes:\n  - Ingress\n")),(0,r.kt)("p",null,"The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.21 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v121-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app.kubernetes.io/name: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n"))),(0,r.kt)(d,{value:"v1.20 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v120-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n")))),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Operators must manage network policies as normal for additional namespaces that are created.")),(0,r.kt)("h3",{id:"api-server-audit-configuration"},"API Server audit configuration"),(0,r.kt)("p",null,"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment."),(0,r.kt)("p",null,"The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs\n")),(0,r.kt)("p",null,"A starter audit policy to log request metadata is provided below. The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"audit.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. Detailed information about policy configuration for the API server can be found in the Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/debug-application-cluster/audit/"},"documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: audit.k8s.io/v1\nkind: Policy\nrules:\n- level: Metadata\n")),(0,r.kt)("p",null,"Both configurations must be passed as arguments to the API Server as:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"--kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n--kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n")),(0,r.kt)("p",null,"If the configurations are created after K3s is installed, they must be added to K3s' systemd service in ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ExecStart=/usr/local/bin/k3s \\\n    server \\\n    '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\\n    '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\\n")),(0,r.kt)("p",null,"K3s must be restarted to load the new configuration."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo systemctl daemon-reload\nsudo systemctl restart k3s.service\n")),(0,r.kt)("h2",{id:"configuration-for-kubernetes-components"},"Configuration for Kubernetes Components"),(0,r.kt)("p",null,"The configuration below should be placed in the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"configuration file"),", and contains all the necessary remediations to harden the Kubernetes components."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n"))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")))),(0,r.kt)("h2",{id:"control-plane-execution-and-arguments"},"Control Plane Execution and Arguments"),(0,r.kt)("p",null,"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-apiserver \n    --advertise-port=6443 \n    --allow-privileged=true \n    --anonymous-auth=false                                                            # 1.2.1\n    --api-audiences=unknown \n    --authorization-mode=Node,RBAC \n    --bind-address=127.0.0.1 \n    --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs\n    --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt                    # 1.2.31\n    --enable-admission-plugins=NodeRestriction,PodSecurityPolicy                      # 1.2.17\n    --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  # 1.2.32\n    --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt                   # 1.2.29\n    --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key                    # 1.2.29\n    --etcd-servers=https://127.0.0.1:2379 \n    --insecure-port=0                                                                 # 1.2.19\n    --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt \n    --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt \n    --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key \n    --profiling=false                                                                 # 1.2.21\n    --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt \n    --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key \n    --requestheader-allowed-names=system:auth-proxy \n    --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt \n    --requestheader-extra-headers-prefix=X-Remote-Extra- \n    --requestheader-group-headers=X-Remote-Group \n    --requestheader-username-headers=X-Remote-User \n    --secure-port=6444                                                                # 1.2.20\n    --service-account-issuer=k3s \n    --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key            # 1.2.28\n    --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key \n    --service-cluster-ip-range=10.43.0.0/16 \n    --storage-backend=etcd3 \n    --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        # 1.2.30\n    --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30\n    --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-controller-manager \n    --address=127.0.0.1 \n    --allocate-node-cidrs=true \n    --bind-address=127.0.0.1                                                       # 1.3.7\n    --cluster-cidr=10.42.0.0/16 \n    --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt \n    --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key \n    --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig \n    --port=10252 \n    --profiling=false                                                              # 1.3.2\n    --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt                   # 1.3.5\n    --secure-port=0 \n    --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 \n    --use-service-account-credentials=true                                         # 1.3.3\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-scheduler \n    --address=127.0.0.1 \n    --bind-address=127.0.0.1                                              # 1.4.2\n    --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig \n    --port=10251 \n    --profiling=false                                                     # 1.4.1\n    --secure-port=0\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubelet \n    --address=0.0.0.0 \n    --anonymous-auth=false                                                # 4.2.1\n    --authentication-token-webhook=true \n    --authorization-mode=Webhook                                          # 4.2.2\n    --cgroup-driver=cgroupfs \n    --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt             # 4.2.3\n    --cloud-provider=external \n    --cluster-dns=10.43.0.10 \n    --cluster-domain=cluster.local \n    --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin \n    --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d \n    --container-runtime-endpoint=/run/k3s/containerd/containerd.sock \n    --container-runtime=remote \n    --containerd=/run/k3s/containerd/containerd.sock \n    --eviction-hard=imagefs.available<5%,nodefs.available<5% \n    --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% \n    --fail-swap-on=false \n    --healthz-bind-address=127.0.0.1 \n    --hostname-override=hostname01 \n    --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig \n    --kubelet-cgroups=/systemd/system.slice \n    --node-labels= \n    --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests \n    --protect-kernel-defaults=true                                        # 4.2.6\n    --read-only-port=0                                                    # 4.2.4\n    --resolv-conf=/run/systemd/resolve/resolv.conf \n    --runtime-cgroups=/systemd/system.slice \n    --serialize-image-pulls=false \n    --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt        # 4.2.10\n    --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10\n")),(0,r.kt)("p",null,"Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below."),(0,r.kt)("h2",{id:"known-issues"},"Known Issues"),(0,r.kt)("p",null,"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s."),(0,r.kt)("h3",{id:"control-1215"},"Control 1.2.15"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"NamespaceLifecycle")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1216"},"Control 1.2.16"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1222"},"Control 1.2.22"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-path")," argument is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1223"},"Control 1.2.23"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxage")," argument is set to 30 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1224"},"Control 1.2.24"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxbackup")," argument is set to 10 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1225"},"Control 1.2.25"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxsize")," argument is set to 100 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1226"},"Control 1.2.26"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--request-timeout")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1227"},"Control 1.2.27"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--service-account-lookup")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1233"},"Control 1.2.33"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--encryption-provider-config")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.",(0,r.kt)("p",null,"Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-1234"},"Control 1.2.34"),(0,r.kt)("p",null,"Ensure that encryption providers are appropriately configured."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.",(0,r.kt)("p",null,"This can be remediated by passing a valid configuration to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-131"},"Control 1.3.1"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--terminated-pod-gc-threshold")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-321"},"Control 3.2.1"),(0,r.kt)("p",null,"Ensure that a minimal audit policy is created."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Logging is an important detective control for all systems, to detect potential unauthorized access.",(0,r.kt)("p",null,"This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.")),(0,r.kt)("h3",{id:"control-427"},"Control 4.2.7"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--make-iptables-util-chains")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-515"},"Control 5.1.5"),(0,r.kt)("p",null,"Ensure that default service accounts are not actively used"),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.",(0,r.kt)("p",null,"Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account."),(0,r.kt)("p",null,"The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments."),(0,r.kt)("p",null,"This can be remediated by updating the ",(0,r.kt)("inlineCode",{parentName:"p"},"automountServiceAccountToken")," field to ",(0,r.kt)("inlineCode",{parentName:"p"},"false")," for the ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service account in each namespace."),(0,r.kt)("p",null,"For ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service accounts in the built-in namespaces (",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-public"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-node-lease"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"default"),"), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.")),(0,r.kt)("h2",{id:"conclusion"},"Conclusion"),(0,r.kt)("p",null,"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the ",(0,r.kt)("a",{parentName:"p",href:"/security/self-assessment"},"CIS Benchmark Self-Assessment Guide")," to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/83582f1b.860f5c14.js b/assets/js/83582f1b.2f8f86e0.js
similarity index 98%
rename from assets/js/83582f1b.860f5c14.js
rename to assets/js/83582f1b.2f8f86e0.js
index 0995032b0..b0b6cd4df 100644
--- a/assets/js/83582f1b.860f5c14.js
+++ b/assets/js/83582f1b.2f8f86e0.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[966],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>p});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),d=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},c=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,l=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),h=d(r),p=a,g=h["".concat(l,".").concat(p)]||h[p]||u[p]||i;return r?n.createElement(g,s(s({ref:t},c),{},{components:r})):n.createElement(g,s({ref:t},c))}));function p(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,s=new Array(i);s[0]=h;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:a,s[1]=o;for(var d=2;d<i;d++)s[d]=r[d];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}h.displayName="MDXCreateElement"},9001:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>c,contentTitle:()=>l,default:()=>v,frontMatter:()=>o,metadata:()=>d,toc:()=>u});var n=r(3117),a=(r(7294),r(3905)),i=r(941),s=r(4996);const o={title:"Architecture",weight:1},l=void 0,d={unversionedId:"architecture/architecture",id:"architecture/architecture",title:"Architecture",description:"This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster.",source:"@site/docs/architecture/architecture.md",sourceDirName:"architecture",slug:"/architecture/",permalink:"/architecture/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Architecture",weight:1},sidebar:"mySidebar",previous:{title:"K3s - Lightweight Kubernetes",permalink:"/"},next:{title:"Quick-Start Guide",permalink:"/quick-start/"}},c={},u=[{value:"Single-server Setup with an Embedded DB",id:"single-server-setup-with-an-embedded-db",level:3},{value:"High-Availability K3s",id:"high-availability-k3s",level:3},{value:"Fixed Registration Address for Agent Nodes",id:"fixed-registration-address-for-agent-nodes",level:3},{value:"How Agent Node Registration Works",id:"how-agent-node-registration-works",level:3}],h=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},p=h("Tabs"),g=h("TabItem"),m={toc:u};function v(e){let{components:t,...o}=e;return(0,a.kt)("wrapper",(0,n.Z)({},m,o,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster."),(0,a.kt)("p",null,"It also describes how agent nodes are registered with K3s servers."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"A server node is defined as a host running the ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s server")," command, with control-plane and datastore components managed by K3s."),(0,a.kt)("li",{parentName:"ul"},"An agent node is defined as a host running the ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s agent")," command, without any datastore or control-plane components."),(0,a.kt)("li",{parentName:"ul"},"Both servers and agents run the kubelet, container runtime, and CNI. See the ",(0,a.kt)("a",{parentName:"li",href:"/advanced/#running-agentless-servers-experimental"},"Advanced Options")," documentation for more information on running agentless servers.")),(0,a.kt)("p",null,(0,a.kt)("img",{src:r(4530).Z,width:"1562",height:"898"})),(0,a.kt)("h3",{id:"single-server-setup-with-an-embedded-db"},"Single-server Setup with an Embedded DB"),(0,a.kt)("p",null,"The following diagram shows an example of a cluster that has a single-node K3s server with an embedded SQLite database."),(0,a.kt)("p",null,"In this configuration, each agent node is registered to the same server node. A K3s user can manipulate Kubernetes resources by calling the K3s API on the server node."),(0,a.kt)(i.Z,{alt:"K3s Architecture with a Single Server",sources:{light:(0,s.Z)("/img/k3s-architecture-single-server.svg"),dark:(0,s.Z)("/img/k3s-architecture-single-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"high-availability-k3s"},"High-Availability K3s"),(0,a.kt)("p",null,"Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster comprises:"),(0,a.kt)(p,{mdxType:"Tabs"},(0,a.kt)(g,{value:"Embedded DB",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Three or more ",(0,a.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,a.kt)("li",{parentName:"ul"},"An ",(0,a.kt)("strong",{parentName:"li"},"embedded etcd datastore")," (as opposed to the embedded SQLite datastore used in single-server setups)")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers",sources:{light:(0,s.Z)("/img/k3s-architecture-ha-embedded.svg"),dark:(0,s.Z)("/img/k3s-architecture-ha-embedded-dark.svg")},mdxType:"ThemedImage"})),(0,a.kt)(g,{value:"External DB",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Two or more ",(0,a.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,a.kt)("li",{parentName:"ul"},"An ",(0,a.kt)("strong",{parentName:"li"},"external datastore")," (such as MySQL, PostgreSQL, or etcd)")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers and an External DB",sources:{light:(0,s.Z)("/img/k3s-architecture-ha-external.svg"),dark:(0,s.Z)("/img/k3s-architecture-ha-external-dark.svg")},mdxType:"ThemedImage"}))),(0,a.kt)("h3",{id:"fixed-registration-address-for-agent-nodes"},"Fixed Registration Address for Agent Nodes"),(0,a.kt)("p",null,"In the high-availability server configuration, each node can also register with the Kubernetes API by using a fixed registration address, as shown in the diagram below."),(0,a.kt)("p",null,"After registration, the agent nodes establish a connection directly to one of the server nodes."),(0,a.kt)(i.Z,{alt:"Agent Registration HA",sources:{light:(0,s.Z)("/img/k3s-production-setup.svg"),dark:(0,s.Z)("/img/k3s-production-setup-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"how-agent-node-registration-works"},"How Agent Node Registration Works"),(0,a.kt)("p",null,"Agent nodes are registered with a websocket connection initiated by the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s agent")," process, and the connection is maintained by a client-side load balancer running as part of the agent process. Initially, the agent connects to the supervisor (and kube-apiserver) via the local load-balancer on port 6443. The load-balancer maintains a list of available endpoints to connect to. The default (and initially only) endpoint is seeded by the hostname from the ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," address. Once it connects to the cluster, the agent retrieves a list of kube-apiserver addresses from the Kubernetes service endpoint list in the default namespace. Those endpoints are added to the load balancer, which then maintains stable connections to all servers in the cluster, providing a connection to the kube-apiserver that tolerates outages of individual servers."),(0,a.kt)("p",null,"Agents will register with the server using the node cluster secret along with a randomly generated password for the node, stored at ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/password"),". The server will store the passwords for individual nodes as Kubernetes secrets, and any subsequent attempts must use the same password. Node password secrets are stored in the ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace with names using the template ",(0,a.kt)("inlineCode",{parentName:"p"},"<host>.node-password.k3s"),". This is done to protect the integrity of node IDs."),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node")," directory of an agent is removed, or you wish to rejoin a node using an existing name, the node should be deleted from the cluster. This will clean up both the old node entry, and the node password secret, and allow the node to (re)join the cluster."),(0,a.kt)("p",null,"If you frequently reuse hostnames, but are unable to remove the node password secrets, a unique node ID can be automatically appended to the hostname by launching K3s servers or agents using the ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," flag. When enabled, the node ID is also stored in ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/"),"."))}v.isMDXComponent=!0},4530:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg"}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[966],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>p});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),d=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},c=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},h=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,l=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),h=d(r),p=a,g=h["".concat(l,".").concat(p)]||h[p]||u[p]||i;return r?n.createElement(g,s(s({ref:t},c),{},{components:r})):n.createElement(g,s({ref:t},c))}));function p(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,s=new Array(i);s[0]=h;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:a,s[1]=o;for(var d=2;d<i;d++)s[d]=r[d];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}h.displayName="MDXCreateElement"},9001:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>c,contentTitle:()=>l,default:()=>v,frontMatter:()=>o,metadata:()=>d,toc:()=>u});var n=r(3117),a=(r(7294),r(3905)),i=r(941),s=r(4996);const o={title:"Architecture",weight:1},l=void 0,d={unversionedId:"architecture/architecture",id:"architecture/architecture",title:"Architecture",description:"This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster.",source:"@site/docs/architecture/architecture.md",sourceDirName:"architecture",slug:"/architecture/",permalink:"/architecture/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Architecture",weight:1},sidebar:"mySidebar",previous:{title:"K3s - Lightweight Kubernetes",permalink:"/"},next:{title:"Quick-Start Guide",permalink:"/quick-start/"}},c={},u=[{value:"Single-server Setup with an Embedded DB",id:"single-server-setup-with-an-embedded-db",level:3},{value:"High-Availability K3s",id:"high-availability-k3s",level:3},{value:"Fixed Registration Address for Agent Nodes",id:"fixed-registration-address-for-agent-nodes",level:3},{value:"How Agent Node Registration Works",id:"how-agent-node-registration-works",level:3}],h=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},p=h("Tabs"),g=h("TabItem"),m={toc:u};function v(e){let{components:t,...o}=e;return(0,a.kt)("wrapper",(0,n.Z)({},m,o,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster."),(0,a.kt)("p",null,"It also describes how agent nodes are registered with K3s servers."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"A server node is defined as a host running the ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s server")," command, with control-plane and datastore components managed by K3s."),(0,a.kt)("li",{parentName:"ul"},"An agent node is defined as a host running the ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s agent")," command, without any datastore or control-plane components."),(0,a.kt)("li",{parentName:"ul"},"Both servers and agents run the kubelet, container runtime, and CNI. See the ",(0,a.kt)("a",{parentName:"li",href:"/advanced/#running-agentless-servers-experimental"},"Advanced Options")," documentation for more information on running agentless servers.")),(0,a.kt)("p",null,(0,a.kt)("img",{src:r(4530).Z,width:"1562",height:"898"})),(0,a.kt)("h3",{id:"single-server-setup-with-an-embedded-db"},"Single-server Setup with an Embedded DB"),(0,a.kt)("p",null,"The following diagram shows an example of a cluster that has a single-node K3s server with an embedded SQLite database."),(0,a.kt)("p",null,"In this configuration, each agent node is registered to the same server node. A K3s user can manipulate Kubernetes resources by calling the K3s API on the server node."),(0,a.kt)(i.Z,{alt:"K3s Architecture with a Single Server",sources:{light:(0,s.Z)("/img/k3s-architecture-single-server.svg"),dark:(0,s.Z)("/img/k3s-architecture-single-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"high-availability-k3s"},"High-Availability K3s"),(0,a.kt)("p",null,"Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster comprises:"),(0,a.kt)(p,{mdxType:"Tabs"},(0,a.kt)(g,{value:"Embedded DB",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Three or more ",(0,a.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,a.kt)("li",{parentName:"ul"},"An ",(0,a.kt)("strong",{parentName:"li"},"embedded etcd datastore")," (as opposed to the embedded SQLite datastore used in single-server setups)")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers",sources:{light:(0,s.Z)("/img/k3s-architecture-ha-embedded.svg"),dark:(0,s.Z)("/img/k3s-architecture-ha-embedded-dark.svg")},mdxType:"ThemedImage"})),(0,a.kt)(g,{value:"External DB",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Two or more ",(0,a.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,a.kt)("li",{parentName:"ul"},"An ",(0,a.kt)("strong",{parentName:"li"},"external datastore")," (such as MySQL, PostgreSQL, or etcd)")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers and an External DB",sources:{light:(0,s.Z)("/img/k3s-architecture-ha-external.svg"),dark:(0,s.Z)("/img/k3s-architecture-ha-external-dark.svg")},mdxType:"ThemedImage"}))),(0,a.kt)("h3",{id:"fixed-registration-address-for-agent-nodes"},"Fixed Registration Address for Agent Nodes"),(0,a.kt)("p",null,"In the high-availability server configuration, each node can also register with the Kubernetes API by using a fixed registration address, as shown in the diagram below."),(0,a.kt)("p",null,"After registration, the agent nodes establish a connection directly to one of the server nodes."),(0,a.kt)(i.Z,{alt:"Agent Registration HA",sources:{light:(0,s.Z)("/img/k3s-production-setup.svg"),dark:(0,s.Z)("/img/k3s-production-setup-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"how-agent-node-registration-works"},"How Agent Node Registration Works"),(0,a.kt)("p",null,"Agent nodes are registered with a websocket connection initiated by the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s agent")," process, and the connection is maintained by a client-side load balancer running as part of the agent process. Initially, the agent connects to the supervisor (and kube-apiserver) via the local load-balancer on port 6443. The load-balancer maintains a list of available endpoints to connect to. The default (and initially only) endpoint is seeded by the hostname from the ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," address. Once it connects to the cluster, the agent retrieves a list of kube-apiserver addresses from the Kubernetes service endpoint list in the default namespace. Those endpoints are added to the load balancer, which then maintains stable connections to all servers in the cluster, providing a connection to the kube-apiserver that tolerates outages of individual servers."),(0,a.kt)("p",null,"Agents will register with the server using the node cluster secret along with a randomly generated password for the node, stored at ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/password"),". The server will store the passwords for individual nodes as Kubernetes secrets, and any subsequent attempts must use the same password. Node password secrets are stored in the ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace with names using the template ",(0,a.kt)("inlineCode",{parentName:"p"},"<host>.node-password.k3s"),". This is done to protect the integrity of node IDs."),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node")," directory of an agent is removed, or you wish to rejoin a node using an existing name, the node should be deleted from the cluster. This will clean up both the old node entry, and the node password secret, and allow the node to (re)join the cluster."),(0,a.kt)("p",null,"If you frequently reuse hostnames, but are unable to remove the node password secrets, a unique node ID can be automatically appended to the hostname by launching K3s servers or agents using the ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," flag. When enabled, the node ID is also stored in ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/"),"."))}v.isMDXComponent=!0},4530:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg"}}]);
\ No newline at end of file
diff --git a/assets/js/83a7c7f9.6a136e28.js b/assets/js/83a7c7f9.b757f668.js
similarity index 99%
rename from assets/js/83a7c7f9.6a136e28.js
rename to assets/js/83a7c7f9.b757f668.js
index 7958e2b07..d313c2b41 100644
--- a/assets/js/83a7c7f9.6a136e28.js
+++ b/assets/js/83a7c7f9.b757f668.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7817],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>u});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),m=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=m(e.components);return n.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),d=m(a),u=r,h=d["".concat(s,".").concat(u)]||d[u]||c[u]||l;return a?n.createElement(h,i(i({ref:t},p),{},{components:a})):n.createElement(h,i({ref:t},p))}));function u(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var m=2;m<l;m++)i[m]=a[m];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},8048:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>m});var n=a(3117),r=(a(7294),a(3905));const l={title:"Helm",weight:42},i=void 0,o={unversionedId:"helm/helm",id:"helm/helm",title:"Helm",description:"Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at https://helm.sh/docs/intro/quickstart/.",source:"@site/docs/helm/helm.md",sourceDirName:"helm",slug:"/helm/",permalink:"/helm/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Helm",weight:42},sidebar:"mySidebar",previous:{title:"Networking",permalink:"/networking/"},next:{title:"Advanced Options / Configuration",permalink:"/advanced/"}},s={},m=[{value:"Using the Helm Controller",id:"using-the-helm-controller",level:3},{value:"HelmChart Field Definitions",id:"helmchart-field-definitions",level:4},{value:"Customizing Packaged Components with HelmChartConfig",id:"customizing-packaged-components-with-helmchartconfig",level:3},{value:"Migrating from Helm v2",id:"migrating-from-helm-v2",level:3}],p={toc:m};function c(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},p,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/intro/quickstart/"},"https://helm.sh/docs/intro/quickstart/"),"."),(0,r.kt)("p",null,"K3s does not require any special configuration to support Helm. Just be sure you have properly set the kubeconfig path as per the ",(0,r.kt)("a",{parentName:"p",href:"/cluster-access/"},"cluster access")," documentation. "),(0,r.kt)("p",null,"K3s includes a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller/"},"Helm Controller")," that manages installing, upgrading/reconfiguring, and uninstalling Helm charts using a HelmChart Custom Resource Definition (CRD). Paired with ",(0,r.kt)("a",{parentName:"p",href:"/installation/packaged-components"},"auto-deploying AddOn manifests"),", installing a Helm chart on your cluster can be automated by creating a single file on disk."),(0,r.kt)("h3",{id:"using-the-helm-controller"},"Using the Helm Controller"),(0,r.kt)("p",null,"The ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller#helm-controller"},"HelmChart Custom Resource")," captures most of the options you would normally pass to the ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," command-line tool. Here's an example of how you might deploy Apache from the Bitnami chart repository, overriding some of the default chart values. Note that the HelmChart resource itself is in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace, but the chart's resources will be deployed to the ",(0,r.kt)("inlineCode",{parentName:"p"},"web")," namespace, which is created in the same manifest. This can be useful if you want to keep your HelmChart resources separated from the the resources they deploy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: web\n---\napiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: apache\n  namespace: kube-system\nspec:\n  repo: https://charts.bitnami.com/bitnami\n  chart: apache\n  targetNamespace: web\n  valuesContent: |-\n    service:\n      type: ClusterIP\n    ingress:\n      enabled: true\n      hostname: www.example.com\n    metrics:\n      enabled: true\n")),(0,r.kt)("h4",{id:"helmchart-field-definitions"},"HelmChart Field Definitions"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Field"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"),(0,r.kt)("th",{parentName:"tr",align:null},"Helm Argument / Flag Equivalent"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"metadata.name"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart name"),(0,r.kt)("td",{parentName:"tr",align:null},"NAME")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart name in repository, or complete HTTPS URL to chart archive (.tgz)"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.targetNamespace"),(0,r.kt)("td",{parentName:"tr",align:null},"default"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart target namespace"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--namespace"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.version"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart version (when installing from repository)"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--version"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repo"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart repository URL"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--repo"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repoCA"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Specify the certificates of HTTPS-enabled servers"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ca-file"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.helmVersion"),(0,r.kt)("td",{parentName:"tr",align:null},"v3"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm version to use (",(0,r.kt)("inlineCode",{parentName:"td"},"v2")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"v3"),")"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},"False"),(0,r.kt)("td",{parentName:"tr",align:null},"Set to True if this chart is needed to bootstrap the cluster (Cloud Controller Manager, etc)"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.set"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Override simple default Chart values. These take precedence over options set via valuesContent."),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--set")," / ",(0,r.kt)("inlineCode",{parentName:"td"},"--set-string"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.jobImage"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Specify the image to use when installing the helm chart. E.g. rancher/klipper-helm:v0.3.0 ."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.timeout"),(0,r.kt)("td",{parentName:"tr",align:null},"300"),(0,r.kt)("td",{parentName:"tr",align:null},"Timeout in seconds for Helm operations"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--timeout"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.failurePolicy"),(0,r.kt)("td",{parentName:"tr",align:null},"reinstall"),(0,r.kt)("td",{parentName:"tr",align:null},"Set to ",(0,r.kt)("inlineCode",{parentName:"td"},"abort")," which case the Helm operation is aborted, pending manual intervention by the operator."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.valuesContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Override complex default Chart values via YAML file content"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--values"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chartContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Base64-encoded chart archive .tgz - overrides spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")))),(0,r.kt)("p",null,"Content placed in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/static/")," can be accessed anonymously via the Kubernetes APIServer from within the cluster. This URL can be templated using the special variable ",(0,r.kt)("inlineCode",{parentName:"p"},"%{KUBERNETES_API}%")," in the ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.chart")," field. For example, the packaged Traefik component loads its chart from ",(0,r.kt)("inlineCode",{parentName:"p"},"https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz"),"."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"name")," field should follow the Helm chart naming conventions. Refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/chart_best_practices/conventions/#chart-names"},"Helm Best Practicies documentation")," to learn more.")),(0,r.kt)("h3",{id:"customizing-packaged-components-with-helmchartconfig"},"Customizing Packaged Components with HelmChartConfig"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,r.kt)("p",null,"To allow overriding values for packaged components that are deployed as HelmCharts (such as Traefik), K3s supports customizing deployments via a HelmChartConfig resources. The HelmChartConfig resource must match the name and namespace of its corresponding HelmChart, and it supports providing additional ",(0,r.kt)("inlineCode",{parentName:"p"},"valuesContent"),", which is passed to the ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," command as an additional value file."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"HelmChart ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.set")," values override HelmChart and HelmChartConfig ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.valuesContent")," settings.")),(0,r.kt)("p",null,"For example, to customize the packaged Traefik ingress configuration, you can create a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik-config.yaml")," and populate it with the following content:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: helm.cattle.io/v1\nkind: HelmChartConfig\nmetadata:\n  name: traefik\n  namespace: kube-system\nspec:\n  valuesContent: |-\n    image:\n      name: traefik\n      tag: v2.8.5\n    forwardedHeaders:\n      enabled: true\n      trustedIPs:\n        - 10.0.0.0/8\n    ssl:\n      enabled: true\n      permanentRedirect: false\n")),(0,r.kt)("h3",{id:"migrating-from-helm-v2"},"Migrating from Helm v2"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"As of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1"},"v1.17.0+k3s.1")," Helm v3 is supported and used by default.")),(0,r.kt)("p",null,"K3s can handle either Helm v2 or Helm v3. If you wish to migrate to Helm v3, ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/"},"this")," blog post by Helm explains how to use a plugin to successfully migrate. Refer to the official Helm 3 documentation ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/"},"here")," for more information. Just be sure you have properly set your kubeconfig as per the section about ",(0,r.kt)("a",{parentName:"p",href:"/cluster-access/"},"cluster access.")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Helm 3 no longer requires Tiller and the ",(0,r.kt)("inlineCode",{parentName:"p"},"helm init")," command. Refer to the official documentation for details.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7817],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>u});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),m=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=m(e.components);return n.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),d=m(a),u=r,h=d["".concat(s,".").concat(u)]||d[u]||c[u]||l;return a?n.createElement(h,i(i({ref:t},p),{},{components:a})):n.createElement(h,i({ref:t},p))}));function u(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var m=2;m<l;m++)i[m]=a[m];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},8048:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>m});var n=a(3117),r=(a(7294),a(3905));const l={title:"Helm",weight:42},i=void 0,o={unversionedId:"helm/helm",id:"helm/helm",title:"Helm",description:"Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at https://helm.sh/docs/intro/quickstart/.",source:"@site/docs/helm/helm.md",sourceDirName:"helm",slug:"/helm/",permalink:"/helm/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Helm",weight:42},sidebar:"mySidebar",previous:{title:"Networking",permalink:"/networking/"},next:{title:"Advanced Options / Configuration",permalink:"/advanced/"}},s={},m=[{value:"Using the Helm Controller",id:"using-the-helm-controller",level:3},{value:"HelmChart Field Definitions",id:"helmchart-field-definitions",level:4},{value:"Customizing Packaged Components with HelmChartConfig",id:"customizing-packaged-components-with-helmchartconfig",level:3},{value:"Migrating from Helm v2",id:"migrating-from-helm-v2",level:3}],p={toc:m};function c(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},p,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/intro/quickstart/"},"https://helm.sh/docs/intro/quickstart/"),"."),(0,r.kt)("p",null,"K3s does not require any special configuration to support Helm. Just be sure you have properly set the kubeconfig path as per the ",(0,r.kt)("a",{parentName:"p",href:"/cluster-access/"},"cluster access")," documentation. "),(0,r.kt)("p",null,"K3s includes a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller/"},"Helm Controller")," that manages installing, upgrading/reconfiguring, and uninstalling Helm charts using a HelmChart Custom Resource Definition (CRD). Paired with ",(0,r.kt)("a",{parentName:"p",href:"/installation/packaged-components"},"auto-deploying AddOn manifests"),", installing a Helm chart on your cluster can be automated by creating a single file on disk."),(0,r.kt)("h3",{id:"using-the-helm-controller"},"Using the Helm Controller"),(0,r.kt)("p",null,"The ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller#helm-controller"},"HelmChart Custom Resource")," captures most of the options you would normally pass to the ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," command-line tool. Here's an example of how you might deploy Apache from the Bitnami chart repository, overriding some of the default chart values. Note that the HelmChart resource itself is in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace, but the chart's resources will be deployed to the ",(0,r.kt)("inlineCode",{parentName:"p"},"web")," namespace, which is created in the same manifest. This can be useful if you want to keep your HelmChart resources separated from the the resources they deploy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: web\n---\napiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: apache\n  namespace: kube-system\nspec:\n  repo: https://charts.bitnami.com/bitnami\n  chart: apache\n  targetNamespace: web\n  valuesContent: |-\n    service:\n      type: ClusterIP\n    ingress:\n      enabled: true\n      hostname: www.example.com\n    metrics:\n      enabled: true\n")),(0,r.kt)("h4",{id:"helmchart-field-definitions"},"HelmChart Field Definitions"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Field"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"),(0,r.kt)("th",{parentName:"tr",align:null},"Helm Argument / Flag Equivalent"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"metadata.name"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart name"),(0,r.kt)("td",{parentName:"tr",align:null},"NAME")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart name in repository, or complete HTTPS URL to chart archive (.tgz)"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.targetNamespace"),(0,r.kt)("td",{parentName:"tr",align:null},"default"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart target namespace"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--namespace"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.version"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart version (when installing from repository)"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--version"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repo"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart repository URL"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--repo"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repoCA"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Specify the certificates of HTTPS-enabled servers"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ca-file"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.helmVersion"),(0,r.kt)("td",{parentName:"tr",align:null},"v3"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm version to use (",(0,r.kt)("inlineCode",{parentName:"td"},"v2")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"v3"),")"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},"False"),(0,r.kt)("td",{parentName:"tr",align:null},"Set to True if this chart is needed to bootstrap the cluster (Cloud Controller Manager, etc)"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.set"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Override simple default Chart values. These take precedence over options set via valuesContent."),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--set")," / ",(0,r.kt)("inlineCode",{parentName:"td"},"--set-string"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.jobImage"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Specify the image to use when installing the helm chart. E.g. rancher/klipper-helm:v0.3.0 ."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.timeout"),(0,r.kt)("td",{parentName:"tr",align:null},"300"),(0,r.kt)("td",{parentName:"tr",align:null},"Timeout in seconds for Helm operations"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--timeout"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.failurePolicy"),(0,r.kt)("td",{parentName:"tr",align:null},"reinstall"),(0,r.kt)("td",{parentName:"tr",align:null},"Set to ",(0,r.kt)("inlineCode",{parentName:"td"},"abort")," which case the Helm operation is aborted, pending manual intervention by the operator."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.valuesContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Override complex default Chart values via YAML file content"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--values"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chartContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Base64-encoded chart archive .tgz - overrides spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")))),(0,r.kt)("p",null,"Content placed in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/static/")," can be accessed anonymously via the Kubernetes APIServer from within the cluster. This URL can be templated using the special variable ",(0,r.kt)("inlineCode",{parentName:"p"},"%{KUBERNETES_API}%")," in the ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.chart")," field. For example, the packaged Traefik component loads its chart from ",(0,r.kt)("inlineCode",{parentName:"p"},"https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz"),"."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"name")," field should follow the Helm chart naming conventions. Refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/chart_best_practices/conventions/#chart-names"},"Helm Best Practicies documentation")," to learn more.")),(0,r.kt)("h3",{id:"customizing-packaged-components-with-helmchartconfig"},"Customizing Packaged Components with HelmChartConfig"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,r.kt)("p",null,"To allow overriding values for packaged components that are deployed as HelmCharts (such as Traefik), K3s supports customizing deployments via a HelmChartConfig resources. The HelmChartConfig resource must match the name and namespace of its corresponding HelmChart, and it supports providing additional ",(0,r.kt)("inlineCode",{parentName:"p"},"valuesContent"),", which is passed to the ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," command as an additional value file."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"HelmChart ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.set")," values override HelmChart and HelmChartConfig ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.valuesContent")," settings.")),(0,r.kt)("p",null,"For example, to customize the packaged Traefik ingress configuration, you can create a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik-config.yaml")," and populate it with the following content:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: helm.cattle.io/v1\nkind: HelmChartConfig\nmetadata:\n  name: traefik\n  namespace: kube-system\nspec:\n  valuesContent: |-\n    image:\n      name: traefik\n      tag: v2.8.5\n    forwardedHeaders:\n      enabled: true\n      trustedIPs:\n        - 10.0.0.0/8\n    ssl:\n      enabled: true\n      permanentRedirect: false\n")),(0,r.kt)("h3",{id:"migrating-from-helm-v2"},"Migrating from Helm v2"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"As of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1"},"v1.17.0+k3s.1")," Helm v3 is supported and used by default.")),(0,r.kt)("p",null,"K3s can handle either Helm v2 or Helm v3. If you wish to migrate to Helm v3, ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/"},"this")," blog post by Helm explains how to use a plugin to successfully migrate. Refer to the official Helm 3 documentation ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/"},"here")," for more information. Just be sure you have properly set your kubeconfig as per the section about ",(0,r.kt)("a",{parentName:"p",href:"/cluster-access/"},"cluster access.")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Helm 3 no longer requires Tiller and the ",(0,r.kt)("inlineCode",{parentName:"p"},"helm init")," command. Refer to the official documentation for details.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/8443.6e4145c7.js b/assets/js/8443.6e4145c7.js
new file mode 100644
index 000000000..0fac7051d
--- /dev/null
+++ b/assets/js/8443.6e4145c7.js
@@ -0,0 +1,2 @@
+/*! For license information please see 8443.6e4145c7.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8443],{8443:(t,e,n)=>{"use strict";t.exports=n(295)},1228:(t,e,n)=>{"use strict";var i=n(2856),s={wrapper:{position:"relative",display:"inline-block"},hint:{position:"absolute",top:"0",left:"0",borderColor:"transparent",boxShadow:"none",opacity:"1"},input:{position:"relative",verticalAlign:"top",backgroundColor:"transparent"},inputWithNoHint:{position:"relative",verticalAlign:"top"},dropdown:{position:"absolute",top:"100%",left:"0",zIndex:"100",display:"none"},suggestions:{display:"block"},suggestion:{whiteSpace:"nowrap",cursor:"pointer"},suggestionChild:{whiteSpace:"normal"},ltr:{left:"0",right:"auto"},rtl:{left:"auto",right:"0"},defaultClasses:{root:"algolia-autocomplete",prefix:"aa",noPrefix:!1,dropdownMenu:"dropdown-menu",input:"input",hint:"hint",suggestions:"suggestions",suggestion:"suggestion",cursor:"cursor",dataset:"dataset",empty:"empty"},appendTo:{wrapper:{position:"absolute",zIndex:"100",display:"none"},input:{},inputWithNoHint:{},dropdown:{display:"block"}}};i.isMsie()&&i.mixin(s.input,{backgroundImage:"url(data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)"}),i.isMsie()&&i.isMsie()<=7&&i.mixin(s.input,{marginTop:"-1px"}),t.exports=s},9050:(t,e,n)=>{"use strict";var i="aaDataset",s="aaValue",r="aaDatum",o=n(2856),a=n(4910),u=n(3561),c=n(1228),l=n(3109);function h(t){var e;(t=t||{}).templates=t.templates||{},t.source||o.error("missing source"),t.name&&(e=t.name,!/^[_a-zA-Z0-9-]+$/.test(e))&&o.error("invalid dataset name: "+t.name),this.query=null,this._isEmpty=!0,this.highlight=!!t.highlight,this.name=void 0===t.name||null===t.name?o.getUniqueId():t.name,this.source=t.source,this.displayFn=function(t){return t=t||"value",o.isFunction(t)?t:e;function e(e){return e[t]}}(t.display||t.displayKey),this.debounce=t.debounce,this.cache=!1!==t.cache,this.templates=function(t,e){return{empty:t.empty&&o.templatify(t.empty),header:t.header&&o.templatify(t.header),footer:t.footer&&o.templatify(t.footer),suggestion:t.suggestion||n};function n(t){return"<p>"+e(t)+"</p>"}}(t.templates,this.displayFn),this.css=o.mixin({},c,t.appendTo?c.appendTo:{}),this.cssClasses=t.cssClasses=o.mixin({},c.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix||o.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix);var n=o.className(this.cssClasses.prefix,this.cssClasses.dataset);this.$el=t.$menu&&t.$menu.find(n+"-"+this.name).length>0?a.element(t.$menu.find(n+"-"+this.name)[0]):a.element(u.dataset.replace("%CLASS%",this.name).replace("%PREFIX%",this.cssClasses.prefix).replace("%DATASET%",this.cssClasses.dataset)),this.$menu=t.$menu,this.clearCachedSuggestions()}h.extractDatasetName=function(t){return a.element(t).data(i)},h.extractValue=function(t){return a.element(t).data(s)},h.extractDatum=function(t){var e=a.element(t).data(r);return"string"==typeof e&&(e=JSON.parse(e)),e},o.mixin(h.prototype,l,{_render:function(t,e){if(this.$el){var n,c=this,l=[].slice.call(arguments,2);if(this.$el.empty(),n=e&&e.length,this._isEmpty=!n,!n&&this.templates.empty)this.$el.html(h.apply(this,l)).prepend(c.templates.header?f.apply(this,l):null).append(c.templates.footer?d.apply(this,l):null);else if(n)this.$el.html(p.apply(this,l)).prepend(c.templates.header?f.apply(this,l):null).append(c.templates.footer?d.apply(this,l):null);else if(e&&!Array.isArray(e))throw new TypeError("suggestions must be an array");this.$menu&&this.$menu.addClass(this.cssClasses.prefix+(n?"with":"without")+"-"+this.name).removeClass(this.cssClasses.prefix+(n?"without":"with")+"-"+this.name),this.trigger("rendered",t)}function h(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!0}].concat(e),c.templates.empty.apply(this,e)}function p(){var t,n,l=[].slice.call(arguments,0),h=this,p=u.suggestions.replace("%PREFIX%",this.cssClasses.prefix).replace("%SUGGESTIONS%",this.cssClasses.suggestions);return t=a.element(p).css(this.css.suggestions),n=o.map(e,f),t.append.apply(t,n),t;function f(t){var e,n=u.suggestion.replace("%PREFIX%",h.cssClasses.prefix).replace("%SUGGESTION%",h.cssClasses.suggestion);return(e=a.element(n).attr({role:"option",id:["option",Math.floor(1e8*Math.random())].join("-")}).append(c.templates.suggestion.apply(this,[t].concat(l)))).data(i,c.name),e.data(s,c.displayFn(t)||void 0),e.data(r,JSON.stringify(t)),e.children().each((function(){a.element(this).css(h.css.suggestionChild)})),e}}function f(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!n}].concat(e),c.templates.header.apply(this,e)}function d(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!n}].concat(e),c.templates.footer.apply(this,e)}},getRoot:function(){return this.$el},update:function(t){function e(e){if(!this.canceled&&t===this.query){var n=[].slice.call(arguments,1);this.cacheSuggestions(t,e,n),this._render.apply(this,[t,e].concat(n))}}if(this.query=t,this.canceled=!1,this.shouldFetchFromCache(t))e.apply(this,[this.cachedSuggestions].concat(this.cachedRenderExtraArgs));else{var n=this,i=function(){n.canceled||n.source(t,e.bind(n))};if(this.debounce){clearTimeout(this.debounceTimeout),this.debounceTimeout=setTimeout((function(){n.debounceTimeout=null,i()}),this.debounce)}else i()}},cacheSuggestions:function(t,e,n){this.cachedQuery=t,this.cachedSuggestions=e,this.cachedRenderExtraArgs=n},shouldFetchFromCache:function(t){return this.cache&&this.cachedQuery===t&&this.cachedSuggestions&&this.cachedSuggestions.length},clearCachedSuggestions:function(){delete this.cachedQuery,delete this.cachedSuggestions,delete this.cachedRenderExtraArgs},cancel:function(){this.canceled=!0},clear:function(){this.$el&&(this.cancel(),this.$el.empty(),this.trigger("rendered",""))},isEmpty:function(){return this._isEmpty},destroy:function(){this.clearCachedSuggestions(),this.$el=null}}),t.exports=h},3354:(t,e,n)=>{"use strict";var i=n(2856),s=n(4910),r=n(3109),o=n(9050),a=n(1228);function u(t){var e,n,r,o=this;(t=t||{}).menu||i.error("menu is required"),i.isArray(t.datasets)||i.isObject(t.datasets)||i.error("1 or more datasets required"),t.datasets||i.error("datasets is required"),this.isOpen=!1,this.isEmpty=!0,this.minLength=t.minLength||0,this.templates={},this.appendTo=t.appendTo||!1,this.css=i.mixin({},a,t.appendTo?a.appendTo:{}),this.cssClasses=t.cssClasses=i.mixin({},a.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix||i.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix),e=i.bind(this._onSuggestionClick,this),n=i.bind(this._onSuggestionMouseEnter,this),r=i.bind(this._onSuggestionMouseLeave,this);var c=i.className(this.cssClasses.prefix,this.cssClasses.suggestion);this.$menu=s.element(t.menu).on("mouseenter.aa",c,n).on("mouseleave.aa",c,r).on("click.aa",c,e),this.$container=t.appendTo?t.wrapper:this.$menu,t.templates&&t.templates.header&&(this.templates.header=i.templatify(t.templates.header),this.$menu.prepend(this.templates.header())),t.templates&&t.templates.empty&&(this.templates.empty=i.templatify(t.templates.empty),this.$empty=s.element('<div class="'+i.className(this.cssClasses.prefix,this.cssClasses.empty,!0)+'"></div>'),this.$menu.append(this.$empty),this.$empty.hide()),this.datasets=i.map(t.datasets,(function(e){return function(t,e,n){return new u.Dataset(i.mixin({$menu:t,cssClasses:n},e))}(o.$menu,e,t.cssClasses)})),i.each(this.datasets,(function(t){var e=t.getRoot();e&&0===e.parent().length&&o.$menu.append(e),t.onSync("rendered",o._onRendered,o)})),t.templates&&t.templates.footer&&(this.templates.footer=i.templatify(t.templates.footer),this.$menu.append(this.templates.footer()));var l=this;s.element(window).resize((function(){l._redraw()}))}i.mixin(u.prototype,r,{_onSuggestionClick:function(t){this.trigger("suggestionClicked",s.element(t.currentTarget))},_onSuggestionMouseEnter:function(t){var e=s.element(t.currentTarget);if(!e.hasClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0))){this._removeCursor();var n=this;setTimeout((function(){n._setCursor(e,!1)}),0)}},_onSuggestionMouseLeave:function(t){if(t.relatedTarget&&s.element(t.relatedTarget).closest("."+i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).length>0)return;this._removeCursor(),this.trigger("cursorRemoved")},_onRendered:function(t,e){if(this.isEmpty=i.every(this.datasets,(function(t){return t.isEmpty()})),this.isEmpty)if(e.length>=this.minLength&&this.trigger("empty"),this.$empty)if(e.length<this.minLength)this._hide();else{var n=this.templates.empty({query:this.datasets[0]&&this.datasets[0].query});this.$empty.html(n),this.$empty.show(),this._show()}else i.any(this.datasets,(function(t){return t.templates&&t.templates.empty}))?e.length<this.minLength?this._hide():this._show():this._hide();else this.isOpen&&(this.$empty&&(this.$empty.empty(),this.$empty.hide()),e.length>=this.minLength?this._show():this._hide());this.trigger("datasetRendered")},_hide:function(){this.$container.hide()},_show:function(){this.$container.css("display","block"),this._redraw(),this.trigger("shown")},_redraw:function(){this.isOpen&&this.appendTo&&this.trigger("redrawn")},_getSuggestions:function(){return this.$menu.find(i.className(this.cssClasses.prefix,this.cssClasses.suggestion))},_getCursor:function(){return this.$menu.find(i.className(this.cssClasses.prefix,this.cssClasses.cursor)).first()},_setCursor:function(t,e){t.first().addClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).attr("aria-selected","true"),this.trigger("cursorMoved",e)},_removeCursor:function(){this._getCursor().removeClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).removeAttr("aria-selected")},_moveCursor:function(t){var e,n,i,s;this.isOpen&&(n=this._getCursor(),e=this._getSuggestions(),this._removeCursor(),-1!==(i=((i=e.index(n)+t)+1)%(e.length+1)-1)?(i<-1&&(i=e.length-1),this._setCursor(s=e.eq(i),!0),this._ensureVisible(s)):this.trigger("cursorRemoved"))},_ensureVisible:function(t){var e,n,i,s;n=(e=t.position().top)+t.height()+parseInt(t.css("margin-top"),10)+parseInt(t.css("margin-bottom"),10),i=this.$menu.scrollTop(),s=this.$menu.height()+parseInt(this.$menu.css("padding-top"),10)+parseInt(this.$menu.css("padding-bottom"),10),e<0?this.$menu.scrollTop(i+e):s<n&&this.$menu.scrollTop(i+(n-s))},close:function(){this.isOpen&&(this.isOpen=!1,this._removeCursor(),this._hide(),this.trigger("closed"))},open:function(){this.isOpen||(this.isOpen=!0,this.isEmpty||this._show(),this.trigger("opened"))},setLanguageDirection:function(t){this.$menu.css("ltr"===t?this.css.ltr:this.css.rtl)},moveCursorUp:function(){this._moveCursor(-1)},moveCursorDown:function(){this._moveCursor(1)},getDatumForSuggestion:function(t){var e=null;return t.length&&(e={raw:o.extractDatum(t),value:o.extractValue(t),datasetName:o.extractDatasetName(t)}),e},getCurrentCursor:function(){return this._getCursor().first()},getDatumForCursor:function(){return this.getDatumForSuggestion(this._getCursor().first())},getDatumForTopSuggestion:function(){return this.getDatumForSuggestion(this._getSuggestions().first())},cursorTopSuggestion:function(){this._setCursor(this._getSuggestions().first(),!1)},update:function(t){i.each(this.datasets,(function(e){e.update(t)}))},empty:function(){i.each(this.datasets,(function(t){t.clear()})),this.isEmpty=!0},isVisible:function(){return this.isOpen&&!this.isEmpty},destroy:function(){this.$menu.off(".aa"),this.$menu=null,i.each(this.datasets,(function(t){t.destroy()}))}}),u.Dataset=o,t.exports=u},50:(t,e,n)=>{"use strict";var i=n(2856),s=n(4910);function r(t){t&&t.el||i.error("EventBus initialized without el"),this.$el=s.element(t.el)}i.mixin(r.prototype,{trigger:function(t,e,n,s){var r=i.Event("autocomplete:"+t);return this.$el.trigger(r,[e,n,s]),r}}),t.exports=r},3109:(t,e,n)=>{"use strict";var i=n(624),s=/\s+/;function r(t,e,n,i){var r;if(!n)return this;for(e=e.split(s),n=i?function(t,e){return t.bind?t.bind(e):function(){t.apply(e,[].slice.call(arguments,0))}}(n,i):n,this._callbacks=this._callbacks||{};r=e.shift();)this._callbacks[r]=this._callbacks[r]||{sync:[],async:[]},this._callbacks[r][t].push(n);return this}function o(t,e,n){return function(){for(var i,s=0,r=t.length;!i&&s<r;s+=1)i=!1===t[s].apply(e,n);return!i}}t.exports={onSync:function(t,e,n){return r.call(this,"sync",t,e,n)},onAsync:function(t,e,n){return r.call(this,"async",t,e,n)},off:function(t){var e;if(!this._callbacks)return this;t=t.split(s);for(;e=t.shift();)delete this._callbacks[e];return this},trigger:function(t){var e,n,r,a,u;if(!this._callbacks)return this;t=t.split(s),r=[].slice.call(arguments,1);for(;(e=t.shift())&&(n=this._callbacks[e]);)a=o(n.sync,this,[e].concat(r)),u=o(n.async,this,[e].concat(r)),a()&&i(u);return this}}},3561:t=>{"use strict";t.exports={wrapper:'<span class="%ROOT%"></span>',dropdown:'<span class="%PREFIX%%DROPDOWN_MENU%"></span>',dataset:'<div class="%PREFIX%%DATASET%-%CLASS%"></div>',suggestions:'<span class="%PREFIX%%SUGGESTIONS%"></span>',suggestion:'<div class="%PREFIX%%SUGGESTION%"></div>'}},2534:(t,e,n)=>{"use strict";var i;i={9:"tab",27:"esc",37:"left",39:"right",13:"enter",38:"up",40:"down"};var s=n(2856),r=n(4910),o=n(3109);function a(t){var e,n,o,a,u,c=this;(t=t||{}).input||s.error("input is missing"),e=s.bind(this._onBlur,this),n=s.bind(this._onFocus,this),o=s.bind(this._onKeydown,this),a=s.bind(this._onInput,this),this.$hint=r.element(t.hint),this.$input=r.element(t.input).on("blur.aa",e).on("focus.aa",n).on("keydown.aa",o),0===this.$hint.length&&(this.setHint=this.getHint=this.clearHint=this.clearHintIfInvalid=s.noop),s.isMsie()?this.$input.on("keydown.aa keypress.aa cut.aa paste.aa",(function(t){i[t.which||t.keyCode]||s.defer(s.bind(c._onInput,c,t))})):this.$input.on("input.aa",a),this.query=this.$input.val(),this.$overflowHelper=(u=this.$input,r.element('<pre aria-hidden="true"></pre>').css({position:"absolute",visibility:"hidden",whiteSpace:"pre",fontFamily:u.css("font-family"),fontSize:u.css("font-size"),fontStyle:u.css("font-style"),fontVariant:u.css("font-variant"),fontWeight:u.css("font-weight"),wordSpacing:u.css("word-spacing"),letterSpacing:u.css("letter-spacing"),textIndent:u.css("text-indent"),textRendering:u.css("text-rendering"),textTransform:u.css("text-transform")}).insertAfter(u))}function u(t){return t.altKey||t.ctrlKey||t.metaKey||t.shiftKey}a.normalizeQuery=function(t){return(t||"").replace(/^\s*/g,"").replace(/\s{2,}/g," ")},s.mixin(a.prototype,o,{_onBlur:function(){this.resetInputValue(),this.$input.removeAttr("aria-activedescendant"),this.trigger("blurred")},_onFocus:function(){this.trigger("focused")},_onKeydown:function(t){var e=i[t.which||t.keyCode];this._managePreventDefault(e,t),e&&this._shouldTrigger(e,t)&&this.trigger(e+"Keyed",t)},_onInput:function(){this._checkInputValue()},_managePreventDefault:function(t,e){var n,i,s;switch(t){case"tab":i=this.getHint(),s=this.getInputValue(),n=i&&i!==s&&!u(e);break;case"up":case"down":n=!u(e);break;default:n=!1}n&&e.preventDefault()},_shouldTrigger:function(t,e){var n;if("tab"===t)n=!u(e);else n=!0;return n},_checkInputValue:function(){var t,e,n,i,s;t=this.getInputValue(),i=t,s=this.query,n=!(!(e=a.normalizeQuery(i)===a.normalizeQuery(s))||!this.query)&&this.query.length!==t.length,this.query=t,e?n&&this.trigger("whitespaceChanged",this.query):this.trigger("queryChanged",this.query)},focus:function(){this.$input.focus()},blur:function(){this.$input.blur()},getQuery:function(){return this.query},setQuery:function(t){this.query=t},getInputValue:function(){return this.$input.val()},setInputValue:function(t,e){void 0===t&&(t=this.query),this.$input.val(t),e?this.clearHint():this._checkInputValue()},expand:function(){this.$input.attr("aria-expanded","true")},collapse:function(){this.$input.attr("aria-expanded","false")},setActiveDescendant:function(t){this.$input.attr("aria-activedescendant",t)},removeActiveDescendant:function(){this.$input.removeAttr("aria-activedescendant")},resetInputValue:function(){this.setInputValue(this.query,!0)},getHint:function(){return this.$hint.val()},setHint:function(t){this.$hint.val(t)},clearHint:function(){this.setHint("")},clearHintIfInvalid:function(){var t,e,n;n=(t=this.getInputValue())!==(e=this.getHint())&&0===e.indexOf(t),""!==t&&n&&!this.hasOverflow()||this.clearHint()},getLanguageDirection:function(){return(this.$input.css("direction")||"ltr").toLowerCase()},hasOverflow:function(){var t=this.$input.width()-2;return this.$overflowHelper.text(this.getInputValue()),this.$overflowHelper.width()>=t},isCursorAtEnd:function(){var t,e,n;return t=this.$input.val().length,e=this.$input[0].selectionStart,s.isNumber(e)?e===t:!document.selection||((n=document.selection.createRange()).moveStart("character",-t),t===n.text.length)},destroy:function(){this.$hint.off(".aa"),this.$input.off(".aa"),this.$hint=this.$input=this.$overflowHelper=null}}),t.exports=a},6549:(t,e,n)=>{"use strict";var i="aaAttrs",s=n(2856),r=n(4910),o=n(50),a=n(2534),u=n(3354),c=n(3561),l=n(1228);function h(t){var e,n;if((t=t||{}).input||s.error("missing input"),this.isActivated=!1,this.debug=!!t.debug,this.autoselect=!!t.autoselect,this.autoselectOnBlur=!!t.autoselectOnBlur,this.openOnFocus=!!t.openOnFocus,this.minLength=s.isNumber(t.minLength)?t.minLength:1,this.autoWidth=void 0===t.autoWidth||!!t.autoWidth,this.clearOnSelected=!!t.clearOnSelected,this.tabAutocomplete=void 0===t.tabAutocomplete||!!t.tabAutocomplete,t.hint=!!t.hint,t.hint&&t.appendTo)throw new Error("[autocomplete.js] hint and appendTo options can't be used at the same time");this.css=t.css=s.mixin({},l,t.appendTo?l.appendTo:{}),this.cssClasses=t.cssClasses=s.mixin({},l.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix=s.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix),this.listboxId=t.listboxId=[this.cssClasses.root,"listbox",s.getUniqueId()].join("-");var a=function(t){var e,n,o,a;e=r.element(t.input),n=r.element(c.wrapper.replace("%ROOT%",t.cssClasses.root)).css(t.css.wrapper),t.appendTo||"block"!==e.css("display")||"table"!==e.parent().css("display")||n.css("display","table-cell");var u=c.dropdown.replace("%PREFIX%",t.cssClasses.prefix).replace("%DROPDOWN_MENU%",t.cssClasses.dropdownMenu);o=r.element(u).css(t.css.dropdown).attr({role:"listbox",id:t.listboxId}),t.templates&&t.templates.dropdownMenu&&o.html(s.templatify(t.templates.dropdownMenu)());(a=e.clone().css(t.css.hint).css(function(t){return{backgroundAttachment:t.css("background-attachment"),backgroundClip:t.css("background-clip"),backgroundColor:t.css("background-color"),backgroundImage:t.css("background-image"),backgroundOrigin:t.css("background-origin"),backgroundPosition:t.css("background-position"),backgroundRepeat:t.css("background-repeat"),backgroundSize:t.css("background-size")}}(e))).val("").addClass(s.className(t.cssClasses.prefix,t.cssClasses.hint,!0)).removeAttr("id name placeholder required").prop("readonly",!0).attr({"aria-hidden":"true",autocomplete:"off",spellcheck:"false",tabindex:-1}),a.removeData&&a.removeData();e.data(i,{"aria-autocomplete":e.attr("aria-autocomplete"),"aria-expanded":e.attr("aria-expanded"),"aria-owns":e.attr("aria-owns"),autocomplete:e.attr("autocomplete"),dir:e.attr("dir"),role:e.attr("role"),spellcheck:e.attr("spellcheck"),style:e.attr("style"),type:e.attr("type")}),e.addClass(s.className(t.cssClasses.prefix,t.cssClasses.input,!0)).attr({autocomplete:"off",spellcheck:!1,role:"combobox","aria-autocomplete":t.datasets&&t.datasets[0]&&t.datasets[0].displayKey?"both":"list","aria-expanded":"false","aria-label":t.ariaLabel,"aria-owns":t.listboxId}).css(t.hint?t.css.input:t.css.inputWithNoHint);try{e.attr("dir")||e.attr("dir","auto")}catch(l){}return(n=t.appendTo?n.appendTo(r.element(t.appendTo).eq(0)).eq(0):e.wrap(n).parent()).prepend(t.hint?a:null).append(o),{wrapper:n,input:e,hint:a,menu:o}}(t);this.$node=a.wrapper;var u=this.$input=a.input;e=a.menu,n=a.hint,t.dropdownMenuContainer&&r.element(t.dropdownMenuContainer).css("position","relative").append(e.css("top","0")),u.on("blur.aa",(function(t){var n=document.activeElement;s.isMsie()&&(e[0]===n||e[0].contains(n))&&(t.preventDefault(),t.stopImmediatePropagation(),s.defer((function(){u.focus()})))})),e.on("mousedown.aa",(function(t){t.preventDefault()})),this.eventBus=t.eventBus||new o({el:u}),this.dropdown=new h.Dropdown({appendTo:t.appendTo,wrapper:this.$node,menu:e,datasets:t.datasets,templates:t.templates,cssClasses:t.cssClasses,minLength:this.minLength}).onSync("suggestionClicked",this._onSuggestionClicked,this).onSync("cursorMoved",this._onCursorMoved,this).onSync("cursorRemoved",this._onCursorRemoved,this).onSync("opened",this._onOpened,this).onSync("closed",this._onClosed,this).onSync("shown",this._onShown,this).onSync("empty",this._onEmpty,this).onSync("redrawn",this._onRedrawn,this).onAsync("datasetRendered",this._onDatasetRendered,this),this.input=new h.Input({input:u,hint:n}).onSync("focused",this._onFocused,this).onSync("blurred",this._onBlurred,this).onSync("enterKeyed",this._onEnterKeyed,this).onSync("tabKeyed",this._onTabKeyed,this).onSync("escKeyed",this._onEscKeyed,this).onSync("upKeyed",this._onUpKeyed,this).onSync("downKeyed",this._onDownKeyed,this).onSync("leftKeyed",this._onLeftKeyed,this).onSync("rightKeyed",this._onRightKeyed,this).onSync("queryChanged",this._onQueryChanged,this).onSync("whitespaceChanged",this._onWhitespaceChanged,this),this._bindKeyboardShortcuts(t),this._setLanguageDirection()}s.mixin(h.prototype,{_bindKeyboardShortcuts:function(t){if(t.keyboardShortcuts){var e=this.$input,n=[];s.each(t.keyboardShortcuts,(function(t){"string"==typeof t&&(t=t.toUpperCase().charCodeAt(0)),n.push(t)})),r.element(document).keydown((function(t){var i=t.target||t.srcElement,s=i.tagName;if(!i.isContentEditable&&"INPUT"!==s&&"SELECT"!==s&&"TEXTAREA"!==s){var r=t.which||t.keyCode;-1!==n.indexOf(r)&&(e.focus(),t.stopPropagation(),t.preventDefault())}}))}},_onSuggestionClicked:function(t,e){var n;(n=this.dropdown.getDatumForSuggestion(e))&&this._select(n,{selectionMethod:"click"})},_onCursorMoved:function(t,e){var n=this.dropdown.getDatumForCursor(),i=this.dropdown.getCurrentCursor().attr("id");this.input.setActiveDescendant(i),n&&(e&&this.input.setInputValue(n.value,!0),this.eventBus.trigger("cursorchanged",n.raw,n.datasetName))},_onCursorRemoved:function(){this.input.resetInputValue(),this._updateHint(),this.eventBus.trigger("cursorremoved")},_onDatasetRendered:function(){this._updateHint(),this.eventBus.trigger("updated")},_onOpened:function(){this._updateHint(),this.input.expand(),this.eventBus.trigger("opened")},_onEmpty:function(){this.eventBus.trigger("empty")},_onRedrawn:function(){this.$node.css("top","0px"),this.$node.css("left","0px");var t=this.$input[0].getBoundingClientRect();this.autoWidth&&this.$node.css("width",t.width+"px");var e=this.$node[0].getBoundingClientRect(),n=t.bottom-e.top;this.$node.css("top",n+"px");var i=t.left-e.left;this.$node.css("left",i+"px"),this.eventBus.trigger("redrawn")},_onShown:function(){this.eventBus.trigger("shown"),this.autoselect&&this.dropdown.cursorTopSuggestion()},_onClosed:function(){this.input.clearHint(),this.input.removeActiveDescendant(),this.input.collapse(),this.eventBus.trigger("closed")},_onFocused:function(){if(this.isActivated=!0,this.openOnFocus){var t=this.input.getQuery();t.length>=this.minLength?this.dropdown.update(t):this.dropdown.empty(),this.dropdown.open()}},_onBlurred:function(){var t,e;t=this.dropdown.getDatumForCursor(),e=this.dropdown.getDatumForTopSuggestion();var n={selectionMethod:"blur"};this.debug||(this.autoselectOnBlur&&t?this._select(t,n):this.autoselectOnBlur&&e?this._select(e,n):(this.isActivated=!1,this.dropdown.empty(),this.dropdown.close()))},_onEnterKeyed:function(t,e){var n,i;n=this.dropdown.getDatumForCursor(),i=this.dropdown.getDatumForTopSuggestion();var s={selectionMethod:"enterKey"};n?(this._select(n,s),e.preventDefault()):this.autoselect&&i&&(this._select(i,s),e.preventDefault())},_onTabKeyed:function(t,e){if(this.tabAutocomplete){var n;(n=this.dropdown.getDatumForCursor())?(this._select(n,{selectionMethod:"tabKey"}),e.preventDefault()):this._autocomplete(!0)}else this.dropdown.close()},_onEscKeyed:function(){this.dropdown.close(),this.input.resetInputValue()},_onUpKeyed:function(){var t=this.input.getQuery();this.dropdown.isEmpty&&t.length>=this.minLength?this.dropdown.update(t):this.dropdown.moveCursorUp(),this.dropdown.open()},_onDownKeyed:function(){var t=this.input.getQuery();this.dropdown.isEmpty&&t.length>=this.minLength?this.dropdown.update(t):this.dropdown.moveCursorDown(),this.dropdown.open()},_onLeftKeyed:function(){"rtl"===this.dir&&this._autocomplete()},_onRightKeyed:function(){"ltr"===this.dir&&this._autocomplete()},_onQueryChanged:function(t,e){this.input.clearHintIfInvalid(),e.length>=this.minLength?this.dropdown.update(e):this.dropdown.empty(),this.dropdown.open(),this._setLanguageDirection()},_onWhitespaceChanged:function(){this._updateHint(),this.dropdown.open()},_setLanguageDirection:function(){var t=this.input.getLanguageDirection();this.dir!==t&&(this.dir=t,this.$node.css("direction",t),this.dropdown.setLanguageDirection(t))},_updateHint:function(){var t,e,n,i,r;(t=this.dropdown.getDatumForTopSuggestion())&&this.dropdown.isVisible()&&!this.input.hasOverflow()?(e=this.input.getInputValue(),n=a.normalizeQuery(e),i=s.escapeRegExChars(n),(r=new RegExp("^(?:"+i+")(.+$)","i").exec(t.value))?this.input.setHint(e+r[1]):this.input.clearHint()):this.input.clearHint()},_autocomplete:function(t){var e,n,i,s;e=this.input.getHint(),n=this.input.getQuery(),i=t||this.input.isCursorAtEnd(),e&&n!==e&&i&&((s=this.dropdown.getDatumForTopSuggestion())&&this.input.setInputValue(s.value),this.eventBus.trigger("autocompleted",s.raw,s.datasetName))},_select:function(t,e){void 0!==t.value&&this.input.setQuery(t.value),this.clearOnSelected?this.setVal(""):this.input.setInputValue(t.value,!0),this._setLanguageDirection(),!1===this.eventBus.trigger("selected",t.raw,t.datasetName,e).isDefaultPrevented()&&(this.dropdown.close(),s.defer(s.bind(this.dropdown.empty,this.dropdown)))},open:function(){if(!this.isActivated){var t=this.input.getInputValue();t.length>=this.minLength?this.dropdown.update(t):this.dropdown.empty()}this.dropdown.open()},close:function(){this.dropdown.close()},setVal:function(t){t=s.toStr(t),this.isActivated?this.input.setInputValue(t):(this.input.setQuery(t),this.input.setInputValue(t,!0)),this._setLanguageDirection()},getVal:function(){return this.input.getQuery()},destroy:function(){this.input.destroy(),this.dropdown.destroy(),function(t,e){var n=t.find(s.className(e.prefix,e.input));s.each(n.data(i),(function(t,e){void 0===t?n.removeAttr(e):n.attr(e,t)})),n.detach().removeClass(s.className(e.prefix,e.input,!0)).insertAfter(t),n.removeData&&n.removeData(i);t.remove()}(this.$node,this.cssClasses),this.$node=null},getWrapper:function(){return this.dropdown.$container[0]}}),h.Dropdown=u,h.Input=a,h.sources=n(8840),t.exports=h},4910:t=>{"use strict";t.exports={element:null}},6177:t=>{"use strict";t.exports=function(t){var e=t.match(/Algolia for JavaScript \((\d+\.)(\d+\.)(\d+)\)/)||t.match(/Algolia for vanilla JavaScript (\d+\.)(\d+\.)(\d+)/);if(e)return[e[1],e[2],e[3]]}},2856:(t,e,n)=>{"use strict";var i,s=n(8820),r=n(4910);function o(t){return t.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")}t.exports={isArray:null,isFunction:null,isObject:null,bind:null,each:null,map:null,mixin:null,isMsie:function(t){if(void 0===t&&(t=navigator.userAgent),/(msie|trident)/i.test(t)){var e=t.match(/(msie |rv:)(\d+(.\d+)?)/i);if(e)return e[2]}return!1},escapeRegExChars:function(t){return t.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")},isNumber:function(t){return"number"==typeof t},toStr:function(t){return null==t?"":t+""},cloneDeep:function(t){var e=this.mixin({},t),n=this;return this.each(e,(function(t,i){t&&(n.isArray(t)?e[i]=[].concat(t):n.isObject(t)&&(e[i]=n.cloneDeep(t)))})),e},error:function(t){throw new Error(t)},every:function(t,e){var n=!0;return t?(this.each(t,(function(i,s){n&&(n=e.call(null,i,s,t)&&n)})),!!n):n},any:function(t,e){var n=!1;return t?(this.each(t,(function(i,s){if(e.call(null,i,s,t))return n=!0,!1})),n):n},getUniqueId:(i=0,function(){return i++}),templatify:function(t){if(this.isFunction(t))return t;var e=r.element(t);return"SCRIPT"===e.prop("tagName")?function(){return e.text()}:function(){return String(t)}},defer:function(t){setTimeout(t,0)},noop:function(){},formatPrefix:function(t,e){return e?"":t+"-"},className:function(t,e,n){return n?t+e:"."+s(t+e,{isIdentifier:!0})},escapeHighlightedString:function(t,e,n){e=e||"<em>";var i=document.createElement("div");i.appendChild(document.createTextNode(e)),n=n||"</em>";var s=document.createElement("div");s.appendChild(document.createTextNode(n));var r=document.createElement("div");return r.appendChild(document.createTextNode(t)),r.innerHTML.replace(RegExp(o(i.innerHTML),"g"),e).replace(RegExp(o(s.innerHTML),"g"),n)}}},9983:(t,e,n)=>{"use strict";var i=n(2856),s=n(533),r=n(6177);var o,a,u=(o=[],a=window.Promise.resolve(),function(t,e){return function(n,s){(function(t,e){return window.Promise.resolve().then((function(){return o.length&&(a=t.search(o),o=[]),a})).then((function(t){if(t)return t.results[e]}))})(t.as,o.push({indexName:t.indexName,query:n,params:e})-1).then((function(t){t&&s(t.hits,t)})).catch((function(t){i.error(t.message)}))}});t.exports=function(t,e){var n=r(t.as._ua);if(n&&n[0]>=3&&n[1]>20){var i="autocomplete.js "+s;-1===t.as._ua.indexOf(i)&&(t.as._ua+="; "+i)}return u(t,e)}},8840:(t,e,n)=>{"use strict";t.exports={hits:n(9983),popularIn:n(4445)}},4445:(t,e,n)=>{"use strict";var i=n(2856),s=n(533),r=n(6177);t.exports=function(t,e,n,o){var a=r(t.as._ua);if(a&&a[0]>=3&&a[1]>20&&((e=e||{}).additionalUA="autocomplete.js "+s),!n.source)return i.error("Missing 'source' key");var u=i.isFunction(n.source)?n.source:function(t){return t[n.source]};if(!n.index)return i.error("Missing 'index' key");var c=n.index;return o=o||{},function(a,l){t.search(a,e,(function(t,a){if(t)i.error(t.message);else{if(a.hits.length>0){var h=a.hits[0],p=i.mixin({hitsPerPage:0},n);delete p.source,delete p.index;var f=r(c.as._ua);return f&&f[0]>=3&&f[1]>20&&(e.additionalUA="autocomplete.js "+s),void c.search(u(h),p,(function(t,e){if(t)i.error(t.message);else{var n=[];if(o.includeAll){var s=o.allTitle||"All departments";n.push(i.mixin({facet:{value:s,count:e.nbHits}},i.cloneDeep(h)))}i.each(e.facets,(function(t,e){i.each(t,(function(t,s){n.push(i.mixin({facet:{facet:e,value:s,count:t}},i.cloneDeep(h)))}))}));for(var r=1;r<a.hits.length;++r)n.push(a.hits[r]);l(n,a)}}))}l([])}}))}}},295:(t,e,n)=>{"use strict";var i=n(6990);n(4910).element=i;var s=n(2856);s.isArray=i.isArray,s.isFunction=i.isFunction,s.isObject=i.isPlainObject,s.bind=i.proxy,s.each=function(t,e){i.each(t,(function(t,n){return e(n,t)}))},s.map=i.map,s.mixin=i.extend,s.Event=i.Event;var r="aaAutocomplete",o=n(6549),a=n(50);function u(t,e,n,u){n=s.isArray(n)?n:[].slice.call(arguments,2);var c=i(t).each((function(t,s){var c=i(s),l=new a({el:c}),h=u||new o({input:c,eventBus:l,dropdownMenuContainer:e.dropdownMenuContainer,hint:void 0===e.hint||!!e.hint,minLength:e.minLength,autoselect:e.autoselect,autoselectOnBlur:e.autoselectOnBlur,tabAutocomplete:e.tabAutocomplete,openOnFocus:e.openOnFocus,templates:e.templates,debug:e.debug,clearOnSelected:e.clearOnSelected,cssClasses:e.cssClasses,datasets:n,keyboardShortcuts:e.keyboardShortcuts,appendTo:e.appendTo,autoWidth:e.autoWidth,ariaLabel:e.ariaLabel||s.getAttribute("aria-label")});c.data(r,h)}));return c.autocomplete={},s.each(["open","close","getVal","setVal","destroy","getWrapper"],(function(t){c.autocomplete[t]=function(){var e,n=arguments;return c.each((function(s,o){var a=i(o).data(r);e=a[t].apply(a,n)})),e}})),c}u.sources=o.sources,u.escapeHighlightedString=s.escapeHighlightedString;var c="autocomplete"in window,l=window.autocomplete;u.noConflict=function(){return c?window.autocomplete=l:delete window.autocomplete,u},t.exports=u},533:t=>{t.exports="0.38.1"},6990:t=>{var e;e=window,t.exports=function(t){var e,n,i=function(){var e,n,i,s,r,o,a=[],u=a.concat,c=a.filter,l=a.slice,h=t.document,p={},f={},d={"column-count":1,columns:1,"font-weight":1,"line-height":1,opacity:1,"z-index":1,zoom:1},g=/^\s*<(\w+|!)[^>]*>/,m=/^<(\w+)\s*\/?>(?:<\/\1>|)$/,v=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:]+)[^>]*)\/>/gi,y=/^(?:body|html)$/i,w=/([A-Z])/g,b=["val","css","html","text","data","width","height","offset"],C=["after","prepend","before","append"],x=h.createElement("table"),_=h.createElement("tr"),S={tr:h.createElement("tbody"),tbody:x,thead:x,tfoot:x,td:_,th:_,"*":h.createElement("div")},E=/complete|loaded|interactive/,A=/^[\w-]*$/,$={},T=$.toString,O={},D=h.createElement("div"),N={tabindex:"tabIndex",readonly:"readOnly",for:"htmlFor",class:"className",maxlength:"maxLength",cellspacing:"cellSpacing",cellpadding:"cellPadding",rowspan:"rowSpan",colspan:"colSpan",usemap:"useMap",frameborder:"frameBorder",contenteditable:"contentEditable"},k=Array.isArray||function(t){return t instanceof Array};function I(t){return null==t?String(t):$[T.call(t)]||"object"}function P(t){return"function"==I(t)}function L(t){return null!=t&&t==t.window}function M(t){return null!=t&&t.nodeType==t.DOCUMENT_NODE}function F(t){return"object"==I(t)}function R(t){return F(t)&&!L(t)&&Object.getPrototypeOf(t)==Object.prototype}function q(t){var e=!!t&&"length"in t&&t.length,n=i.type(t);return"function"!=n&&!L(t)&&("array"==n||0===e||"number"==typeof e&&e>0&&e-1 in t)}function V(t){return c.call(t,(function(t){return null!=t}))}function H(t){return t.length>0?i.fn.concat.apply([],t):t}function B(t){return t.replace(/::/g,"/").replace(/([A-Z]+)([A-Z][a-z])/g,"$1_$2").replace(/([a-z\d])([A-Z])/g,"$1_$2").replace(/_/g,"-").toLowerCase()}function K(t){return t in f?f[t]:f[t]=new RegExp("(^|\\s)"+t+"(\\s|$)")}function j(t,e){return"number"!=typeof e||d[B(t)]?e:e+"px"}function z(t){var e,n;return p[t]||(e=h.createElement(t),h.body.appendChild(e),n=getComputedStyle(e,"").getPropertyValue("display"),e.parentNode.removeChild(e),"none"==n&&(n="block"),p[t]=n),p[t]}function U(t){return"children"in t?l.call(t.children):i.map(t.childNodes,(function(t){if(1==t.nodeType)return t}))}function Q(t,e){var n,i=t?t.length:0;for(n=0;n<i;n++)this[n]=t[n];this.length=i,this.selector=e||""}function W(t,i,s){for(n in i)s&&(R(i[n])||k(i[n]))?(R(i[n])&&!R(t[n])&&(t[n]={}),k(i[n])&&!k(t[n])&&(t[n]=[]),W(t[n],i[n],s)):i[n]!==e&&(t[n]=i[n])}function Z(t,e){return null==e?i(t):i(t).filter(e)}function X(t,e,n,i){return P(e)?e.call(t,n,i):e}function G(t,e,n){null==n?t.removeAttribute(e):t.setAttribute(e,n)}function J(t,n){var i=t.className||"",s=i&&i.baseVal!==e;if(n===e)return s?i.baseVal:i;s?i.baseVal=n:t.className=n}function Y(t){try{return t?"true"==t||"false"!=t&&("null"==t?null:+t+""==t?+t:/^[\[\{]/.test(t)?i.parseJSON(t):t):t}catch(e){return t}}function tt(t,e){e(t);for(var n=0,i=t.childNodes.length;n<i;n++)tt(t.childNodes[n],e)}return O.matches=function(t,e){if(!e||!t||1!==t.nodeType)return!1;var n=t.matches||t.webkitMatchesSelector||t.mozMatchesSelector||t.oMatchesSelector||t.matchesSelector;if(n)return n.call(t,e);var i,s=t.parentNode,r=!s;return r&&(s=D).appendChild(t),i=~O.qsa(s,e).indexOf(t),r&&D.removeChild(t),i},r=function(t){return t.replace(/-+(.)?/g,(function(t,e){return e?e.toUpperCase():""}))},o=function(t){return c.call(t,(function(e,n){return t.indexOf(e)==n}))},O.fragment=function(t,n,s){var r,o,a;return m.test(t)&&(r=i(h.createElement(RegExp.$1))),r||(t.replace&&(t=t.replace(v,"<$1></$2>")),n===e&&(n=g.test(t)&&RegExp.$1),n in S||(n="*"),(a=S[n]).innerHTML=""+t,r=i.each(l.call(a.childNodes),(function(){a.removeChild(this)}))),R(s)&&(o=i(r),i.each(s,(function(t,e){b.indexOf(t)>-1?o[t](e):o.attr(t,e)}))),r},O.Z=function(t,e){return new Q(t,e)},O.isZ=function(t){return t instanceof O.Z},O.init=function(t,n){var s;if(!t)return O.Z();if("string"==typeof t)if("<"==(t=t.trim())[0]&&g.test(t))s=O.fragment(t,RegExp.$1,n),t=null;else{if(n!==e)return i(n).find(t);s=O.qsa(h,t)}else{if(P(t))return i(h).ready(t);if(O.isZ(t))return t;if(k(t))s=V(t);else if(F(t))s=[t],t=null;else if(g.test(t))s=O.fragment(t.trim(),RegExp.$1,n),t=null;else{if(n!==e)return i(n).find(t);s=O.qsa(h,t)}}return O.Z(s,t)},(i=function(t,e){return O.init(t,e)}).extend=function(t){var e,n=l.call(arguments,1);return"boolean"==typeof t&&(e=t,t=n.shift()),n.forEach((function(n){W(t,n,e)})),t},O.qsa=function(t,e){var n,i="#"==e[0],s=!i&&"."==e[0],r=i||s?e.slice(1):e,o=A.test(r);return t.getElementById&&o&&i?(n=t.getElementById(r))?[n]:[]:1!==t.nodeType&&9!==t.nodeType&&11!==t.nodeType?[]:l.call(o&&!i&&t.getElementsByClassName?s?t.getElementsByClassName(r):t.getElementsByTagName(e):t.querySelectorAll(e))},i.contains=h.documentElement.contains?function(t,e){return t!==e&&t.contains(e)}:function(t,e){for(;e&&(e=e.parentNode);)if(e===t)return!0;return!1},i.type=I,i.isFunction=P,i.isWindow=L,i.isArray=k,i.isPlainObject=R,i.isEmptyObject=function(t){var e;for(e in t)return!1;return!0},i.isNumeric=function(t){var e=Number(t),n=typeof t;return null!=t&&"boolean"!=n&&("string"!=n||t.length)&&!isNaN(e)&&isFinite(e)||!1},i.inArray=function(t,e,n){return a.indexOf.call(e,t,n)},i.camelCase=r,i.trim=function(t){return null==t?"":String.prototype.trim.call(t)},i.uuid=0,i.support={},i.expr={},i.noop=function(){},i.map=function(t,e){var n,i,s,r=[];if(q(t))for(i=0;i<t.length;i++)null!=(n=e(t[i],i))&&r.push(n);else for(s in t)null!=(n=e(t[s],s))&&r.push(n);return H(r)},i.each=function(t,e){var n,i;if(q(t)){for(n=0;n<t.length;n++)if(!1===e.call(t[n],n,t[n]))return t}else for(i in t)if(!1===e.call(t[i],i,t[i]))return t;return t},i.grep=function(t,e){return c.call(t,e)},t.JSON&&(i.parseJSON=JSON.parse),i.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),(function(t,e){$["[object "+e+"]"]=e.toLowerCase()})),i.fn={constructor:O.Z,length:0,forEach:a.forEach,reduce:a.reduce,push:a.push,sort:a.sort,splice:a.splice,indexOf:a.indexOf,concat:function(){var t,e,n=[];for(t=0;t<arguments.length;t++)e=arguments[t],n[t]=O.isZ(e)?e.toArray():e;return u.apply(O.isZ(this)?this.toArray():this,n)},map:function(t){return i(i.map(this,(function(e,n){return t.call(e,n,e)})))},slice:function(){return i(l.apply(this,arguments))},ready:function(t){return E.test(h.readyState)&&h.body?t(i):h.addEventListener("DOMContentLoaded",(function(){t(i)}),!1),this},get:function(t){return t===e?l.call(this):this[t>=0?t:t+this.length]},toArray:function(){return this.get()},size:function(){return this.length},remove:function(){return this.each((function(){null!=this.parentNode&&this.parentNode.removeChild(this)}))},each:function(t){return a.every.call(this,(function(e,n){return!1!==t.call(e,n,e)})),this},filter:function(t){return P(t)?this.not(this.not(t)):i(c.call(this,(function(e){return O.matches(e,t)})))},add:function(t,e){return i(o(this.concat(i(t,e))))},is:function(t){return this.length>0&&O.matches(this[0],t)},not:function(t){var n=[];if(P(t)&&t.call!==e)this.each((function(e){t.call(this,e)||n.push(this)}));else{var s="string"==typeof t?this.filter(t):q(t)&&P(t.item)?l.call(t):i(t);this.forEach((function(t){s.indexOf(t)<0&&n.push(t)}))}return i(n)},has:function(t){return this.filter((function(){return F(t)?i.contains(this,t):i(this).find(t).size()}))},eq:function(t){return-1===t?this.slice(t):this.slice(t,+t+1)},first:function(){var t=this[0];return t&&!F(t)?t:i(t)},last:function(){var t=this[this.length-1];return t&&!F(t)?t:i(t)},find:function(t){var e=this;return t?"object"==typeof t?i(t).filter((function(){var t=this;return a.some.call(e,(function(e){return i.contains(e,t)}))})):1==this.length?i(O.qsa(this[0],t)):this.map((function(){return O.qsa(this,t)})):i()},closest:function(t,e){var n=[],s="object"==typeof t&&i(t);return this.each((function(i,r){for(;r&&!(s?s.indexOf(r)>=0:O.matches(r,t));)r=r!==e&&!M(r)&&r.parentNode;r&&n.indexOf(r)<0&&n.push(r)})),i(n)},parents:function(t){for(var e=[],n=this;n.length>0;)n=i.map(n,(function(t){if((t=t.parentNode)&&!M(t)&&e.indexOf(t)<0)return e.push(t),t}));return Z(e,t)},parent:function(t){return Z(o(this.pluck("parentNode")),t)},children:function(t){return Z(this.map((function(){return U(this)})),t)},contents:function(){return this.map((function(){return this.contentDocument||l.call(this.childNodes)}))},siblings:function(t){return Z(this.map((function(t,e){return c.call(U(e.parentNode),(function(t){return t!==e}))})),t)},empty:function(){return this.each((function(){this.innerHTML=""}))},pluck:function(t){return i.map(this,(function(e){return e[t]}))},show:function(){return this.each((function(){"none"==this.style.display&&(this.style.display=""),"none"==getComputedStyle(this,"").getPropertyValue("display")&&(this.style.display=z(this.nodeName))}))},replaceWith:function(t){return this.before(t).remove()},wrap:function(t){var e=P(t);if(this[0]&&!e)var n=i(t).get(0),s=n.parentNode||this.length>1;return this.each((function(r){i(this).wrapAll(e?t.call(this,r):s?n.cloneNode(!0):n)}))},wrapAll:function(t){if(this[0]){var e;for(i(this[0]).before(t=i(t));(e=t.children()).length;)t=e.first();i(t).append(this)}return this},wrapInner:function(t){var e=P(t);return this.each((function(n){var s=i(this),r=s.contents(),o=e?t.call(this,n):t;r.length?r.wrapAll(o):s.append(o)}))},unwrap:function(){return this.parent().each((function(){i(this).replaceWith(i(this).children())})),this},clone:function(){return this.map((function(){return this.cloneNode(!0)}))},hide:function(){return this.css("display","none")},toggle:function(t){return this.each((function(){var n=i(this);(t===e?"none"==n.css("display"):t)?n.show():n.hide()}))},prev:function(t){return i(this.pluck("previousElementSibling")).filter(t||"*")},next:function(t){return i(this.pluck("nextElementSibling")).filter(t||"*")},html:function(t){return 0 in arguments?this.each((function(e){var n=this.innerHTML;i(this).empty().append(X(this,t,e,n))})):0 in this?this[0].innerHTML:null},text:function(t){return 0 in arguments?this.each((function(e){var n=X(this,t,e,this.textContent);this.textContent=null==n?"":""+n})):0 in this?this.pluck("textContent").join(""):null},attr:function(t,i){var s;return"string"!=typeof t||1 in arguments?this.each((function(e){if(1===this.nodeType)if(F(t))for(n in t)G(this,n,t[n]);else G(this,t,X(this,i,e,this.getAttribute(t)))})):0 in this&&1==this[0].nodeType&&null!=(s=this[0].getAttribute(t))?s:e},removeAttr:function(t){return this.each((function(){1===this.nodeType&&t.split(" ").forEach((function(t){G(this,t)}),this)}))},prop:function(t,e){return t=N[t]||t,1 in arguments?this.each((function(n){this[t]=X(this,e,n,this[t])})):this[0]&&this[0][t]},removeProp:function(t){return t=N[t]||t,this.each((function(){delete this[t]}))},data:function(t,n){var i="data-"+t.replace(w,"-$1").toLowerCase(),s=1 in arguments?this.attr(i,n):this.attr(i);return null!==s?Y(s):e},val:function(t){return 0 in arguments?(null==t&&(t=""),this.each((function(e){this.value=X(this,t,e,this.value)}))):this[0]&&(this[0].multiple?i(this[0]).find("option").filter((function(){return this.selected})).pluck("value"):this[0].value)},offset:function(e){if(e)return this.each((function(t){var n=i(this),s=X(this,e,t,n.offset()),r=n.offsetParent().offset(),o={top:s.top-r.top,left:s.left-r.left};"static"==n.css("position")&&(o.position="relative"),n.css(o)}));if(!this.length)return null;if(h.documentElement!==this[0]&&!i.contains(h.documentElement,this[0]))return{top:0,left:0};var n=this[0].getBoundingClientRect();return{left:n.left+t.pageXOffset,top:n.top+t.pageYOffset,width:Math.round(n.width),height:Math.round(n.height)}},css:function(t,e){if(arguments.length<2){var s=this[0];if("string"==typeof t){if(!s)return;return s.style[r(t)]||getComputedStyle(s,"").getPropertyValue(t)}if(k(t)){if(!s)return;var o={},a=getComputedStyle(s,"");return i.each(t,(function(t,e){o[e]=s.style[r(e)]||a.getPropertyValue(e)})),o}}var u="";if("string"==I(t))e||0===e?u=B(t)+":"+j(t,e):this.each((function(){this.style.removeProperty(B(t))}));else for(n in t)t[n]||0===t[n]?u+=B(n)+":"+j(n,t[n])+";":this.each((function(){this.style.removeProperty(B(n))}));return this.each((function(){this.style.cssText+=";"+u}))},index:function(t){return t?this.indexOf(i(t)[0]):this.parent().children().indexOf(this[0])},hasClass:function(t){return!!t&&a.some.call(this,(function(t){return this.test(J(t))}),K(t))},addClass:function(t){return t?this.each((function(e){if("className"in this){s=[];var n=J(this);X(this,t,e,n).split(/\s+/g).forEach((function(t){i(this).hasClass(t)||s.push(t)}),this),s.length&&J(this,n+(n?" ":"")+s.join(" "))}})):this},removeClass:function(t){return this.each((function(n){if("className"in this){if(t===e)return J(this,"");s=J(this),X(this,t,n,s).split(/\s+/g).forEach((function(t){s=s.replace(K(t)," ")})),J(this,s.trim())}}))},toggleClass:function(t,n){return t?this.each((function(s){var r=i(this);X(this,t,s,J(this)).split(/\s+/g).forEach((function(t){(n===e?!r.hasClass(t):n)?r.addClass(t):r.removeClass(t)}))})):this},scrollTop:function(t){if(this.length){var n="scrollTop"in this[0];return t===e?n?this[0].scrollTop:this[0].pageYOffset:this.each(n?function(){this.scrollTop=t}:function(){this.scrollTo(this.scrollX,t)})}},scrollLeft:function(t){if(this.length){var n="scrollLeft"in this[0];return t===e?n?this[0].scrollLeft:this[0].pageXOffset:this.each(n?function(){this.scrollLeft=t}:function(){this.scrollTo(t,this.scrollY)})}},position:function(){if(this.length){var t=this[0],e=this.offsetParent(),n=this.offset(),s=y.test(e[0].nodeName)?{top:0,left:0}:e.offset();return n.top-=parseFloat(i(t).css("margin-top"))||0,n.left-=parseFloat(i(t).css("margin-left"))||0,s.top+=parseFloat(i(e[0]).css("border-top-width"))||0,s.left+=parseFloat(i(e[0]).css("border-left-width"))||0,{top:n.top-s.top,left:n.left-s.left}}},offsetParent:function(){return this.map((function(){for(var t=this.offsetParent||h.body;t&&!y.test(t.nodeName)&&"static"==i(t).css("position");)t=t.offsetParent;return t}))}},i.fn.detach=i.fn.remove,["width","height"].forEach((function(t){var n=t.replace(/./,(function(t){return t[0].toUpperCase()}));i.fn[t]=function(s){var r,o=this[0];return s===e?L(o)?o["inner"+n]:M(o)?o.documentElement["scroll"+n]:(r=this.offset())&&r[t]:this.each((function(e){(o=i(this)).css(t,X(this,s,e,o[t]()))}))}})),C.forEach((function(n,s){var r=s%2;i.fn[n]=function(){var n,o,a=i.map(arguments,(function(t){var s=[];return"array"==(n=I(t))?(t.forEach((function(t){return t.nodeType!==e?s.push(t):i.zepto.isZ(t)?s=s.concat(t.get()):void(s=s.concat(O.fragment(t)))})),s):"object"==n||null==t?t:O.fragment(t)})),u=this.length>1;return a.length<1?this:this.each((function(e,n){o=r?n:n.parentNode,n=0==s?n.nextSibling:1==s?n.firstChild:2==s?n:null;var c=i.contains(h.documentElement,o);a.forEach((function(e){if(u)e=e.cloneNode(!0);else if(!o)return i(e).remove();o.insertBefore(e,n),c&&tt(e,(function(e){if(!(null==e.nodeName||"SCRIPT"!==e.nodeName.toUpperCase()||e.type&&"text/javascript"!==e.type||e.src)){var n=e.ownerDocument?e.ownerDocument.defaultView:t;n.eval.call(n,e.innerHTML)}}))}))}))},i.fn[r?n+"To":"insert"+(s?"Before":"After")]=function(t){return i(t)[n](this),this}})),O.Z.prototype=Q.prototype=i.fn,O.uniq=o,O.deserializeValue=Y,i.zepto=O,i}();return function(e){var n,i=1,s=Array.prototype.slice,r=e.isFunction,o=function(t){return"string"==typeof t},a={},u={},c="onfocusin"in t,l={focus:"focusin",blur:"focusout"},h={mouseenter:"mouseover",mouseleave:"mouseout"};function p(t){return t._zid||(t._zid=i++)}function f(t,e,n,i){if((e=d(e)).ns)var s=g(e.ns);return(a[p(t)]||[]).filter((function(t){return t&&(!e.e||t.e==e.e)&&(!e.ns||s.test(t.ns))&&(!n||p(t.fn)===p(n))&&(!i||t.sel==i)}))}function d(t){var e=(""+t).split(".");return{e:e[0],ns:e.slice(1).sort().join(" ")}}function g(t){return new RegExp("(?:^| )"+t.replace(" "," .* ?")+"(?: |$)")}function m(t,e){return t.del&&!c&&t.e in l||!!e}function v(t){return h[t]||c&&l[t]||t}function y(t,i,s,r,o,u,c){var l=p(t),f=a[l]||(a[l]=[]);i.split(/\s/).forEach((function(i){if("ready"==i)return e(document).ready(s);var a=d(i);a.fn=s,a.sel=o,a.e in h&&(s=function(t){var n=t.relatedTarget;if(!n||n!==this&&!e.contains(this,n))return a.fn.apply(this,arguments)}),a.del=u;var l=u||s;a.proxy=function(e){if(!(e=S(e)).isImmediatePropagationStopped()){try{var i=Object.getOwnPropertyDescriptor(e,"data");i&&!i.writable||(e.data=r)}catch(e){}var s=l.apply(t,e._args==n?[e]:[e].concat(e._args));return!1===s&&(e.preventDefault(),e.stopPropagation()),s}},a.i=f.length,f.push(a),"addEventListener"in t&&t.addEventListener(v(a.e),a.proxy,m(a,c))}))}function w(t,e,n,i,s){var r=p(t);(e||"").split(/\s/).forEach((function(e){f(t,e,n,i).forEach((function(e){delete a[r][e.i],"removeEventListener"in t&&t.removeEventListener(v(e.e),e.proxy,m(e,s))}))}))}u.click=u.mousedown=u.mouseup=u.mousemove="MouseEvents",e.event={add:y,remove:w},e.proxy=function(t,n){var i=2 in arguments&&s.call(arguments,2);if(r(t)){var a=function(){return t.apply(n,i?i.concat(s.call(arguments)):arguments)};return a._zid=p(t),a}if(o(n))return i?(i.unshift(t[n],t),e.proxy.apply(null,i)):e.proxy(t[n],t);throw new TypeError("expected function")},e.fn.bind=function(t,e,n){return this.on(t,e,n)},e.fn.unbind=function(t,e){return this.off(t,e)},e.fn.one=function(t,e,n,i){return this.on(t,e,n,i,1)};var b=function(){return!0},C=function(){return!1},x=/^([A-Z]|returnValue$|layer[XY]$|webkitMovement[XY]$)/,_={preventDefault:"isDefaultPrevented",stopImmediatePropagation:"isImmediatePropagationStopped",stopPropagation:"isPropagationStopped"};function S(t,i){if(i||!t.isDefaultPrevented){i||(i=t),e.each(_,(function(e,n){var s=i[e];t[e]=function(){return this[n]=b,s&&s.apply(i,arguments)},t[n]=C}));try{t.timeStamp||(t.timeStamp=Date.now())}catch(s){}(i.defaultPrevented!==n?i.defaultPrevented:"returnValue"in i?!1===i.returnValue:i.getPreventDefault&&i.getPreventDefault())&&(t.isDefaultPrevented=b)}return t}function E(t){var e,i={originalEvent:t};for(e in t)x.test(e)||t[e]===n||(i[e]=t[e]);return S(i,t)}e.fn.delegate=function(t,e,n){return this.on(e,t,n)},e.fn.undelegate=function(t,e,n){return this.off(e,t,n)},e.fn.live=function(t,n){return e(document.body).delegate(this.selector,t,n),this},e.fn.die=function(t,n){return e(document.body).undelegate(this.selector,t,n),this},e.fn.on=function(t,i,a,u,c){var l,h,p=this;return t&&!o(t)?(e.each(t,(function(t,e){p.on(t,i,a,e,c)})),p):(o(i)||r(u)||!1===u||(u=a,a=i,i=n),u!==n&&!1!==a||(u=a,a=n),!1===u&&(u=C),p.each((function(n,r){c&&(l=function(t){return w(r,t.type,u),u.apply(this,arguments)}),i&&(h=function(t){var n,o=e(t.target).closest(i,r).get(0);if(o&&o!==r)return n=e.extend(E(t),{currentTarget:o,liveFired:r}),(l||u).apply(o,[n].concat(s.call(arguments,1)))}),y(r,t,u,a,i,h||l)})))},e.fn.off=function(t,i,s){var a=this;return t&&!o(t)?(e.each(t,(function(t,e){a.off(t,i,e)})),a):(o(i)||r(s)||!1===s||(s=i,i=n),!1===s&&(s=C),a.each((function(){w(this,t,s,i)})))},e.fn.trigger=function(t,n){return(t=o(t)||e.isPlainObject(t)?e.Event(t):S(t))._args=n,this.each((function(){t.type in l&&"function"==typeof this[t.type]?this[t.type]():"dispatchEvent"in this?this.dispatchEvent(t):e(this).triggerHandler(t,n)}))},e.fn.triggerHandler=function(t,n){var i,s;return this.each((function(r,a){(i=E(o(t)?e.Event(t):t))._args=n,i.target=a,e.each(f(a,t.type||t),(function(t,e){if(s=e.proxy(i),i.isImmediatePropagationStopped())return!1}))})),s},"focusin focusout focus blur load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select keydown keypress keyup error".split(" ").forEach((function(t){e.fn[t]=function(e){return 0 in arguments?this.bind(t,e):this.trigger(t)}})),e.Event=function(t,e){o(t)||(t=(e=t).type);var n=document.createEvent(u[t]||"Events"),i=!0;if(e)for(var s in e)"bubbles"==s?i=!!e[s]:n[s]=e[s];return n.initEvent(t,i,!0),S(n)}}(i),n=[],i.fn.remove=function(){return this.each((function(){this.parentNode&&("IMG"===this.tagName&&(n.push(this),this.src="data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=",e&&clearTimeout(e),e=setTimeout((function(){n=[]}),6e4)),this.parentNode.removeChild(this))}))},function(t){var e={},n=t.fn.data,i=t.camelCase,s=t.expando="Zepto"+ +new Date,r=[];function o(r,o){var u=r[s],c=u&&e[u];if(void 0===o)return c||a(r);if(c){if(o in c)return c[o];var l=i(o);if(l in c)return c[l]}return n.call(t(r),o)}function a(n,r,o){var a=n[s]||(n[s]=++t.uuid),c=e[a]||(e[a]=u(n));return void 0!==r&&(c[i(r)]=o),c}function u(e){var n={};return t.each(e.attributes||r,(function(e,s){0==s.name.indexOf("data-")&&(n[i(s.name.replace("data-",""))]=t.zepto.deserializeValue(s.value))})),n}t.fn.data=function(e,n){return void 0===n?t.isPlainObject(e)?this.each((function(n,i){t.each(e,(function(t,e){a(i,t,e)}))})):0 in this?o(this[0],e):void 0:this.each((function(){a(this,e,n)}))},t.data=function(e,n,i){return t(e).data(n,i)},t.hasData=function(n){var i=n[s],r=i&&e[i];return!!r&&!t.isEmptyObject(r)},t.fn.removeData=function(n){return"string"==typeof n&&(n=n.split(/\s+/)),this.each((function(){var r=this[s],o=r&&e[r];o&&t.each(n||o,(function(t){delete o[n?i(this):t]}))}))},["remove","empty"].forEach((function(e){var n=t.fn[e];t.fn[e]=function(){var t=this.find("*");return"remove"===e&&(t=t.add(this)),t.removeData(),n.call(this)}}))}(i),i}(e)},8820:t=>{"use strict";var e={}.hasOwnProperty,n=/[ -,\.\/:-@\[-\^`\{-~]/,i=/[ -,\.\/:-@\[\]\^`\{-~]/,s=/(^|\\+)?(\\[A-F0-9]{1,6})\x20(?![a-fA-F0-9\x20])/g,r=function t(r,o){"single"!=(o=function(t,n){if(!t)return n;var i={};for(var s in n)i[s]=e.call(t,s)?t[s]:n[s];return i}(o,t.options)).quotes&&"double"!=o.quotes&&(o.quotes="single");for(var a="double"==o.quotes?'"':"'",u=o.isIdentifier,c=r.charAt(0),l="",h=0,p=r.length;h<p;){var f=r.charAt(h++),d=f.charCodeAt(),g=void 0;if(d<32||d>126){if(d>=55296&&d<=56319&&h<p){var m=r.charCodeAt(h++);56320==(64512&m)?d=((1023&d)<<10)+(1023&m)+65536:h--}g="\\"+d.toString(16).toUpperCase()+" "}else g=o.escapeEverything?n.test(f)?"\\"+f:"\\"+d.toString(16).toUpperCase()+" ":/[\t\n\f\r\x0B]/.test(f)?"\\"+d.toString(16).toUpperCase()+" ":"\\"==f||!u&&('"'==f&&a==f||"'"==f&&a==f)||u&&i.test(f)?"\\"+f:f;l+=g}return u&&(/^-[-\d]/.test(l)?l="\\-"+l.slice(1):/\d/.test(c)&&(l="\\3"+c+" "+l.slice(1))),l=l.replace(s,(function(t,e,n){return e&&e.length%2?t:(e||"")+n})),!u&&o.wrap?a+l+a:l};r.options={escapeEverything:!1,isIdentifier:!1,quotes:"single",wrap:!1},r.version="3.0.0",t.exports=r},624:(t,e,n)=>{"use strict";var i,s,r,o=[n(5525),n(4785),n(8291),n(2709),n(2506),n(9176)],a=-1,u=[],c=!1;function l(){i&&s&&(i=!1,s.length?u=s.concat(u):a=-1,u.length&&h())}function h(){if(!i){c=!1,i=!0;for(var t=u.length,e=setTimeout(l);t;){for(s=u,u=[];s&&++a<t;)s[a].run();a=-1,t=u.length}s=null,a=-1,i=!1,clearTimeout(e)}}for(var p=-1,f=o.length;++p<f;)if(o[p]&&o[p].test&&o[p].test()){r=o[p].install(h);break}function d(t,e){this.fun=t,this.array=e}d.prototype.run=function(){var t=this.fun,e=this.array;switch(e.length){case 0:return t();case 1:return t(e[0]);case 2:return t(e[0],e[1]);case 3:return t(e[0],e[1],e[2]);default:return t.apply(null,e)}},t.exports=function(t){var e=new Array(arguments.length-1);if(arguments.length>1)for(var n=1;n<arguments.length;n++)e[n-1]=arguments[n];u.push(new d(t,e)),c||i||(c=!0,r())}},2709:(t,e,n)=>{"use strict";e.test=function(){return!n.g.setImmediate&&void 0!==n.g.MessageChannel},e.install=function(t){var e=new n.g.MessageChannel;return e.port1.onmessage=t,function(){e.port2.postMessage(0)}}},8291:(t,e,n)=>{"use strict";var i=n.g.MutationObserver||n.g.WebKitMutationObserver;e.test=function(){return i},e.install=function(t){var e=0,s=new i(t),r=n.g.document.createTextNode("");return s.observe(r,{characterData:!0}),function(){r.data=e=++e%2}}},4785:(t,e,n)=>{"use strict";e.test=function(){return"function"==typeof n.g.queueMicrotask},e.install=function(t){return function(){n.g.queueMicrotask(t)}}},2506:(t,e,n)=>{"use strict";e.test=function(){return"document"in n.g&&"onreadystatechange"in n.g.document.createElement("script")},e.install=function(t){return function(){var e=n.g.document.createElement("script");return e.onreadystatechange=function(){t(),e.onreadystatechange=null,e.parentNode.removeChild(e),e=null},n.g.document.documentElement.appendChild(e),t}}},9176:(t,e)=>{"use strict";e.test=function(){return!0},e.install=function(t){return function(){setTimeout(t,0)}}}}]);
\ No newline at end of file
diff --git a/assets/js/8443.6e4145c7.js.LICENSE.txt b/assets/js/8443.6e4145c7.js.LICENSE.txt
new file mode 100644
index 000000000..4f7ccd8a7
--- /dev/null
+++ b/assets/js/8443.6e4145c7.js.LICENSE.txt
@@ -0,0 +1 @@
+/*! https://mths.be/cssesc v3.0.0 by @mathias */
diff --git a/assets/js/8894.b6a0e6e6.js b/assets/js/8894.b6a0e6e6.js
deleted file mode 100644
index ab9a307a0..000000000
--- a/assets/js/8894.b6a0e6e6.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8894],{8894:(s,k,_)=>{_.r(k)}}]);
\ No newline at end of file
diff --git a/assets/js/97c4f258.9de40414.js b/assets/js/97c4f258.e445d54b.js
similarity index 99%
rename from assets/js/97c4f258.9de40414.js
rename to assets/js/97c4f258.e445d54b.js
index deb26074b..ececffafb 100644
--- a/assets/js/97c4f258.9de40414.js
+++ b/assets/js/97c4f258.e445d54b.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[305],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>d});var a=t(7294);function i(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function o(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function r(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?o(Object(t),!0).forEach((function(n){i(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function l(e,n){if(null==e)return{};var t,a,i=function(e,n){if(null==e)return{};var t,a,i={},o=Object.keys(e);for(a=0;a<o.length;a++)t=o[a],n.indexOf(t)>=0||(i[t]=e[t]);return i}(e,n);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)t=o[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(i[t]=e[t])}return i}var s=a.createContext({}),p=function(e){var n=a.useContext(s),t=n;return e&&(t="function"==typeof e?e(n):r(r({},n),e)),t},u=function(e){var n=p(e.components);return a.createElement(s.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),m=p(t),d=i,f=m["".concat(s,".").concat(d)]||m[d]||c[d]||o;return t?a.createElement(f,r(r({ref:n},u),{},{components:t})):a.createElement(f,r({ref:n},u))}));function d(e,n){var t=arguments,i=n&&n.mdxType;if("string"==typeof e||i){var o=t.length,r=new Array(o);r[0]=m;var l={};for(var s in n)hasOwnProperty.call(n,s)&&(l[s]=n[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,r[1]=l;for(var p=2;p<o;p++)r[p]=t[p];return a.createElement.apply(null,r)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},8054:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>s,contentTitle:()=>r,default:()=>c,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var a=t(3117),i=(t(7294),t(3905));const o={title:"Configuration Options",weight:20},r=void 0,l={unversionedId:"installation/configuration",id:"installation/configuration",title:"Configuration Options",description:"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage.",source:"@site/docs/installation/configuration.md",sourceDirName:"installation",slug:"/installation/configuration",permalink:"/installation/configuration",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Configuration Options",weight:20},sidebar:"mySidebar",previous:{title:"Requirements",permalink:"/installation/requirements"},next:{title:"Network Options",permalink:"/installation/network-options"}},s={},p=[{value:"Configuration with install script",id:"configuration-with-install-script",level:2},{value:"Configuration with binary",id:"configuration-with-binary",level:2},{value:"Configuration File",id:"configuration-file",level:2},{value:"Multiple Config Files",id:"multiple-config-files",level:3},{value:"Putting it all together",id:"putting-it-all-together",level:2}],u={toc:p};function c(e){let{components:n,...t}=e;return(0,i.kt)("wrapper",(0,a.Z)({},u,t,{components:n,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on ",(0,i.kt)("a",{parentName:"p",href:"/advanced/"},"Advanced Options and Configuration")," and the ",(0,i.kt)("a",{parentName:"p",href:"/cli/server"},"server")," and ",(0,i.kt)("a",{parentName:"p",href:"/cli/agent"},"agent")," command documentation for more in-depth coverage."),(0,i.kt)("h2",{id:"configuration-with-install-script"},"Configuration with install script"),(0,i.kt)("p",null,"As mentioned in the ",(0,i.kt)("a",{parentName:"p",href:"/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,i.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,i.kt)("p",null,"You can use a combination of ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables, and command flags to pass configuration to the service configuration.\nThe prefixed environment variables, ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," value, and trailing shell arguments are all persisted into the service configuration.\nAfter installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options."),(0,i.kt)("p",null,"To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none --token 12345\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -s -\ncurl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none\n# server is assumed below because there is no K3S_URL\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--flannel-backend none --token 12345" sh -s - \ncurl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345\n')),(0,i.kt)("p",null,"When registering an agent, the following commands all result in the same behavior:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent --server https://k3s.example.com --token mypassword" sh -s -\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent" K3S_TOKEN="mypassword" sh -s - --server https://k3s.example.com\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL\n')),(0,i.kt)("p",null,"For details on all environment variables, see ",(0,i.kt)("a",{parentName:"p",href:"/reference/env-variables"},"Environment Variables.")),(0,i.kt)("admonition",{title:"Note",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"If you set configuration when running the install script, but do not set it again when re-running the install script, the original values will be lost."),(0,i.kt)("p",{parentName:"admonition"},"The contents of the ",(0,i.kt)("a",{parentName:"p",href:"#configuration-file"},"configuration file")," are not managed by the install script.\nIf you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.")),(0,i.kt)("h2",{id:"configuration-with-binary"},"Configuration with binary"),(0,i.kt)("p",null,"As stated, the installation script is primarily concerned with configuring K3s to run as a service.",(0,i.kt)("br",{parentName:"p"}),"\n","If you choose to not use the script, you can run K3s simply by downloading the binary from our ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/latest"},"release page"),", placing it on your path, and executing it. This is not particularly useful for permanent installations, but may be useful when performing quick tests that do not merit managing K3s as a system service."),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"curl -Lo /usr/local/bin/k3s https://github.com/k3s-io/k3s/releases/download/v1.26.5+k3s1/k3s; chmod a+x /usr/local/bin/k3s\n")),(0,i.kt)("p",null,"You can pass configuration by setting ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server\n')),(0,i.kt)("p",null,"Or command flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --write-kubeconfig-mode=644\n")),(0,i.kt)("p",null,"The k3s agent can also be configured this way:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s agent --server https://k3s.example.com --token mypassword\n")),(0,i.kt)("p",null,"For details on configuring the K3s server, see the ",(0,i.kt)("a",{parentName:"p",href:"/cli/server"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s server")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","For details on configuring the K3s agent, see the ",(0,i.kt)("a",{parentName:"p",href:"/cli/agent"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","You can also use the ",(0,i.kt)("inlineCode",{parentName:"p"},"--help")," flag to see a list of all available options, and their corresponding environment variables."),(0,i.kt)("admonition",{title:"Matching Flags",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"It is important to match critical flags on your server nodes. For example, if you use the flag\n",(0,i.kt)("inlineCode",{parentName:"p"},"--disable servicelb")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr=10.200.0.0/16")," on your master node, but don't set it on other server nodes, the nodes will fail to join. They will print errors such as:\n",(0,i.kt)("inlineCode",{parentName:"p"},"failed to validate server configuration: critical configuration value mismatch."),"\nSee the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.")),(0,i.kt)("h2",{id:"configuration-file"},"Configuration File"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,i.kt)("p",null,"In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file."),(0,i.kt)("p",null,"By default, values present in a YAML file located at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," will be used on install."),(0,i.kt)("p",null,"An example of a basic ",(0,i.kt)("inlineCode",{parentName:"p"},"server")," config file is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'write-kubeconfig-mode: "0644"\ntls-san:\n  - "foo.local"\nnode-label:\n  - "foo=bar"\n  - "something=amazing"\ncluster-init: true\n')),(0,i.kt)("p",null,"This is equivalent to the following CLI arguments:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'k3s server \\\n  --write-kubeconfig-mode "0644"    \\\n  --tls-san "foo.local"             \\\n  --node-label "foo=bar"            \\\n  --node-label "something=amazing"  \\\n  --cluster-init\n')),(0,i.kt)("p",null,"In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as ",(0,i.kt)("inlineCode",{parentName:"p"},"true")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"false")," in the YAML file."),(0,i.kt)("p",null,"It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-label"),", the CLI arguments will overwrite all values in the list."),(0,i.kt)("p",null,"Finally, the location of the config file can be changed either through the CLI argument ",(0,i.kt)("inlineCode",{parentName:"p"},"--config FILE, -c FILE"),", or the environment variable ",(0,i.kt)("inlineCode",{parentName:"p"},"$K3S_CONFIG_FILE"),"."),(0,i.kt)("h3",{id:"multiple-config-files"},"Multiple Config Files"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"))),(0,i.kt)("p",null,"Multiple configuration files are supported. By default, configuration files are read from ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml.d/*.yaml")," in alphabetical order. "),(0,i.kt)("p",null,"By default, the last value found for a given key will be used. A ",(0,i.kt)("inlineCode",{parentName:"p"},"+")," can be appended to the key to append the value to the existing string or slice, instead of replacing it. All occurrences of this key in subsequent files will also require a ",(0,i.kt)("inlineCode",{parentName:"p"},"+")," to prevent overwriting the accumulated value."),(0,i.kt)("p",null,"An example of multiple config files is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"# config.yaml\ntoken: boop\nnode-label:\n  - foo=bar\n  - bar=baz\n\n\n# config.yaml.d/test1.yaml\nwrite-kubeconfig-mode: 600\nnode-taint:\n  - alice=bob:NoExecute\n\n# config.yaml.d/test2.yaml\nwrite-kubeconfig-mode: 777\nnode-label:\n  - other=what\n  - foo=three\nnode-taint+:\n  - charlie=delta:NoSchedule\n\n")),(0,i.kt)("p",null,"This results in a final configuration of:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"write-kubeconfig-mode: 777\ntoken: boop\nnode-label:\n  - other=what\n  - foo=three\nnode-taint:\n  - alice=bob:NoExecute\n  - charlie=delta:NoSchedule\n")),(0,i.kt)("h2",{id:"putting-it-all-together"},"Putting it all together"),(0,i.kt)("p",null,"All of the above options can be combined into a single example."),(0,i.kt)("p",null,"A ",(0,i.kt)("inlineCode",{parentName:"p"},"config.yaml")," file is created at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'token: "secret"\ndebug: true\n')),(0,i.kt)("p",null,"Then the installation script is run with a combination of environment variables and flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none\n')),(0,i.kt)("p",null,"Or if you have already installed the K3s Binary:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server --flannel-backend none\n')),(0,i.kt)("p",null,"This results in a server with:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"A kubeconfig file with permissions ",(0,i.kt)("inlineCode",{parentName:"li"},"644")),(0,i.kt)("li",{parentName:"ul"},"Flannel backend set to ",(0,i.kt)("inlineCode",{parentName:"li"},"none")),(0,i.kt)("li",{parentName:"ul"},"The token set to ",(0,i.kt)("inlineCode",{parentName:"li"},"secret")),(0,i.kt)("li",{parentName:"ul"},"Debug logging enabled")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[305],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>d});var a=t(7294);function i(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function o(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function r(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?o(Object(t),!0).forEach((function(n){i(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function l(e,n){if(null==e)return{};var t,a,i=function(e,n){if(null==e)return{};var t,a,i={},o=Object.keys(e);for(a=0;a<o.length;a++)t=o[a],n.indexOf(t)>=0||(i[t]=e[t]);return i}(e,n);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)t=o[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(i[t]=e[t])}return i}var s=a.createContext({}),p=function(e){var n=a.useContext(s),t=n;return e&&(t="function"==typeof e?e(n):r(r({},n),e)),t},u=function(e){var n=p(e.components);return a.createElement(s.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),m=p(t),d=i,f=m["".concat(s,".").concat(d)]||m[d]||c[d]||o;return t?a.createElement(f,r(r({ref:n},u),{},{components:t})):a.createElement(f,r({ref:n},u))}));function d(e,n){var t=arguments,i=n&&n.mdxType;if("string"==typeof e||i){var o=t.length,r=new Array(o);r[0]=m;var l={};for(var s in n)hasOwnProperty.call(n,s)&&(l[s]=n[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,r[1]=l;for(var p=2;p<o;p++)r[p]=t[p];return a.createElement.apply(null,r)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},8054:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>s,contentTitle:()=>r,default:()=>c,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var a=t(3117),i=(t(7294),t(3905));const o={title:"Configuration Options",weight:20},r=void 0,l={unversionedId:"installation/configuration",id:"installation/configuration",title:"Configuration Options",description:"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage.",source:"@site/docs/installation/configuration.md",sourceDirName:"installation",slug:"/installation/configuration",permalink:"/installation/configuration",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Configuration Options",weight:20},sidebar:"mySidebar",previous:{title:"Requirements",permalink:"/installation/requirements"},next:{title:"Network Options",permalink:"/installation/network-options"}},s={},p=[{value:"Configuration with install script",id:"configuration-with-install-script",level:2},{value:"Configuration with binary",id:"configuration-with-binary",level:2},{value:"Configuration File",id:"configuration-file",level:2},{value:"Multiple Config Files",id:"multiple-config-files",level:3},{value:"Putting it all together",id:"putting-it-all-together",level:2}],u={toc:p};function c(e){let{components:n,...t}=e;return(0,i.kt)("wrapper",(0,a.Z)({},u,t,{components:n,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on ",(0,i.kt)("a",{parentName:"p",href:"/advanced/"},"Advanced Options and Configuration")," and the ",(0,i.kt)("a",{parentName:"p",href:"/cli/server"},"server")," and ",(0,i.kt)("a",{parentName:"p",href:"/cli/agent"},"agent")," command documentation for more in-depth coverage."),(0,i.kt)("h2",{id:"configuration-with-install-script"},"Configuration with install script"),(0,i.kt)("p",null,"As mentioned in the ",(0,i.kt)("a",{parentName:"p",href:"/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,i.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,i.kt)("p",null,"You can use a combination of ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables, and command flags to pass configuration to the service configuration.\nThe prefixed environment variables, ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," value, and trailing shell arguments are all persisted into the service configuration.\nAfter installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options."),(0,i.kt)("p",null,"To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none --token 12345\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -s -\ncurl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none\n# server is assumed below because there is no K3S_URL\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--flannel-backend none --token 12345" sh -s - \ncurl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345\n')),(0,i.kt)("p",null,"When registering an agent, the following commands all result in the same behavior:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent --server https://k3s.example.com --token mypassword" sh -s -\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent" K3S_TOKEN="mypassword" sh -s - --server https://k3s.example.com\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL\n')),(0,i.kt)("p",null,"For details on all environment variables, see ",(0,i.kt)("a",{parentName:"p",href:"/reference/env-variables"},"Environment Variables.")),(0,i.kt)("admonition",{title:"Note",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"If you set configuration when running the install script, but do not set it again when re-running the install script, the original values will be lost."),(0,i.kt)("p",{parentName:"admonition"},"The contents of the ",(0,i.kt)("a",{parentName:"p",href:"#configuration-file"},"configuration file")," are not managed by the install script.\nIf you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.")),(0,i.kt)("h2",{id:"configuration-with-binary"},"Configuration with binary"),(0,i.kt)("p",null,"As stated, the installation script is primarily concerned with configuring K3s to run as a service.",(0,i.kt)("br",{parentName:"p"}),"\n","If you choose to not use the script, you can run K3s simply by downloading the binary from our ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/latest"},"release page"),", placing it on your path, and executing it. This is not particularly useful for permanent installations, but may be useful when performing quick tests that do not merit managing K3s as a system service."),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"curl -Lo /usr/local/bin/k3s https://github.com/k3s-io/k3s/releases/download/v1.26.5+k3s1/k3s; chmod a+x /usr/local/bin/k3s\n")),(0,i.kt)("p",null,"You can pass configuration by setting ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server\n')),(0,i.kt)("p",null,"Or command flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --write-kubeconfig-mode=644\n")),(0,i.kt)("p",null,"The k3s agent can also be configured this way:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s agent --server https://k3s.example.com --token mypassword\n")),(0,i.kt)("p",null,"For details on configuring the K3s server, see the ",(0,i.kt)("a",{parentName:"p",href:"/cli/server"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s server")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","For details on configuring the K3s agent, see the ",(0,i.kt)("a",{parentName:"p",href:"/cli/agent"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","You can also use the ",(0,i.kt)("inlineCode",{parentName:"p"},"--help")," flag to see a list of all available options, and their corresponding environment variables."),(0,i.kt)("admonition",{title:"Matching Flags",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"It is important to match critical flags on your server nodes. For example, if you use the flag\n",(0,i.kt)("inlineCode",{parentName:"p"},"--disable servicelb")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr=10.200.0.0/16")," on your master node, but don't set it on other server nodes, the nodes will fail to join. They will print errors such as:\n",(0,i.kt)("inlineCode",{parentName:"p"},"failed to validate server configuration: critical configuration value mismatch."),"\nSee the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.")),(0,i.kt)("h2",{id:"configuration-file"},"Configuration File"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,i.kt)("p",null,"In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file."),(0,i.kt)("p",null,"By default, values present in a YAML file located at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," will be used on install."),(0,i.kt)("p",null,"An example of a basic ",(0,i.kt)("inlineCode",{parentName:"p"},"server")," config file is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'write-kubeconfig-mode: "0644"\ntls-san:\n  - "foo.local"\nnode-label:\n  - "foo=bar"\n  - "something=amazing"\ncluster-init: true\n')),(0,i.kt)("p",null,"This is equivalent to the following CLI arguments:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'k3s server \\\n  --write-kubeconfig-mode "0644"    \\\n  --tls-san "foo.local"             \\\n  --node-label "foo=bar"            \\\n  --node-label "something=amazing"  \\\n  --cluster-init\n')),(0,i.kt)("p",null,"In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as ",(0,i.kt)("inlineCode",{parentName:"p"},"true")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"false")," in the YAML file."),(0,i.kt)("p",null,"It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-label"),", the CLI arguments will overwrite all values in the list."),(0,i.kt)("p",null,"Finally, the location of the config file can be changed either through the CLI argument ",(0,i.kt)("inlineCode",{parentName:"p"},"--config FILE, -c FILE"),", or the environment variable ",(0,i.kt)("inlineCode",{parentName:"p"},"$K3S_CONFIG_FILE"),"."),(0,i.kt)("h3",{id:"multiple-config-files"},"Multiple Config Files"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"))),(0,i.kt)("p",null,"Multiple configuration files are supported. By default, configuration files are read from ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml.d/*.yaml")," in alphabetical order. "),(0,i.kt)("p",null,"By default, the last value found for a given key will be used. A ",(0,i.kt)("inlineCode",{parentName:"p"},"+")," can be appended to the key to append the value to the existing string or slice, instead of replacing it. All occurrences of this key in subsequent files will also require a ",(0,i.kt)("inlineCode",{parentName:"p"},"+")," to prevent overwriting the accumulated value."),(0,i.kt)("p",null,"An example of multiple config files is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"# config.yaml\ntoken: boop\nnode-label:\n  - foo=bar\n  - bar=baz\n\n\n# config.yaml.d/test1.yaml\nwrite-kubeconfig-mode: 600\nnode-taint:\n  - alice=bob:NoExecute\n\n# config.yaml.d/test2.yaml\nwrite-kubeconfig-mode: 777\nnode-label:\n  - other=what\n  - foo=three\nnode-taint+:\n  - charlie=delta:NoSchedule\n\n")),(0,i.kt)("p",null,"This results in a final configuration of:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"write-kubeconfig-mode: 777\ntoken: boop\nnode-label:\n  - other=what\n  - foo=three\nnode-taint:\n  - alice=bob:NoExecute\n  - charlie=delta:NoSchedule\n")),(0,i.kt)("h2",{id:"putting-it-all-together"},"Putting it all together"),(0,i.kt)("p",null,"All of the above options can be combined into a single example."),(0,i.kt)("p",null,"A ",(0,i.kt)("inlineCode",{parentName:"p"},"config.yaml")," file is created at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'token: "secret"\ndebug: true\n')),(0,i.kt)("p",null,"Then the installation script is run with a combination of environment variables and flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none\n')),(0,i.kt)("p",null,"Or if you have already installed the K3s Binary:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server --flannel-backend none\n')),(0,i.kt)("p",null,"This results in a server with:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"A kubeconfig file with permissions ",(0,i.kt)("inlineCode",{parentName:"li"},"644")),(0,i.kt)("li",{parentName:"ul"},"Flannel backend set to ",(0,i.kt)("inlineCode",{parentName:"li"},"none")),(0,i.kt)("li",{parentName:"ul"},"The token set to ",(0,i.kt)("inlineCode",{parentName:"li"},"secret")),(0,i.kt)("li",{parentName:"ul"},"Debug logging enabled")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/9ba4882f.f4a7597c.js b/assets/js/9ba4882f.704ab991.js
similarity index 98%
rename from assets/js/9ba4882f.f4a7597c.js
rename to assets/js/9ba4882f.704ab991.js
index d9730acbd..95a7b124c 100644
--- a/assets/js/9ba4882f.f4a7597c.js
+++ b/assets/js/9ba4882f.704ab991.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6720],{3905:(e,t,r)=>{r.d(t,{Zo:()=>f,kt:()=>d});var n=r(7294);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function a(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var s=n.createContext({}),l=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},f=function(e){var t=l(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,o=e.mdxType,i=e.originalType,s=e.parentName,f=a(e,["components","mdxType","originalType","parentName"]),u=l(r),d=o,m=u["".concat(s,".").concat(d)]||u[d]||p[d]||i;return r?n.createElement(m,c(c({ref:t},f),{},{components:r})):n.createElement(m,c({ref:t},f))}));function d(e,t){var r=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=r.length,c=new Array(i);c[0]=u;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:o,c[1]=a;for(var l=2;l<i;l++)c[l]=r[l];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},9322:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>p,frontMatter:()=>i,metadata:()=>a,toc:()=>l});var n=r(3117),o=(r(7294),r(3905));const i={title:"Reference"},c=void 0,a={unversionedId:"reference/reference",id:"reference/reference",title:"Reference",description:"This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools.",source:"@site/docs/reference/reference.md",sourceDirName:"reference",slug:"/reference/",permalink:"/reference/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Reference"},sidebar:"mySidebar",previous:{title:"token",permalink:"/cli/token"},next:{title:"Environment Variables",permalink:"/reference/env-variables"}},s={},l=[],f={toc:l};function p(e){let{components:t,...r}=e;return(0,o.kt)("wrapper",(0,n.Z)({},f,r,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6720],{3905:(e,t,r)=>{r.d(t,{Zo:()=>f,kt:()=>d});var n=r(7294);function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function a(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var s=n.createContext({}),l=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},f=function(e){var t=l(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,o=e.mdxType,i=e.originalType,s=e.parentName,f=a(e,["components","mdxType","originalType","parentName"]),u=l(r),d=o,m=u["".concat(s,".").concat(d)]||u[d]||p[d]||i;return r?n.createElement(m,c(c({ref:t},f),{},{components:r})):n.createElement(m,c({ref:t},f))}));function d(e,t){var r=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=r.length,c=new Array(i);c[0]=u;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:o,c[1]=a;for(var l=2;l<i;l++)c[l]=r[l];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},9322:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>p,frontMatter:()=>i,metadata:()=>a,toc:()=>l});var n=r(3117),o=(r(7294),r(3905));const i={title:"Reference"},c=void 0,a={unversionedId:"reference/reference",id:"reference/reference",title:"Reference",description:"This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools.",source:"@site/docs/reference/reference.md",sourceDirName:"reference",slug:"/reference/",permalink:"/reference/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Reference"},sidebar:"mySidebar",previous:{title:"token",permalink:"/cli/token"},next:{title:"Environment Variables",permalink:"/reference/env-variables"}},s={},l=[],f={toc:l};function p(e){let{components:t,...r}=e;return(0,o.kt)("wrapper",(0,n.Z)({},f,r,{components:t,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/9e39b1cd.d12d005a.js b/assets/js/9e39b1cd.95d59679.js
similarity index 99%
rename from assets/js/9e39b1cd.d12d005a.js
rename to assets/js/9e39b1cd.95d59679.js
index a8395123e..c0cbd2f80 100644
--- a/assets/js/9e39b1cd.d12d005a.js
+++ b/assets/js/9e39b1cd.95d59679.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7813],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>u});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var d=a.createContext({}),m=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=m(e.components);return a.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},s=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,d=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),s=m(n),u=r,k=s["".concat(d,".").concat(u)]||s[u]||p[u]||o;return n?a.createElement(k,i(i({ref:t},c),{},{components:n})):a.createElement(k,i({ref:t},c))}));function u(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=s;var l={};for(var d in t)hasOwnProperty.call(t,d)&&(l[d]=t[d]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var m=2;m<o;m++)i[m]=n[m];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}s.displayName="MDXCreateElement"},3279:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>m});var a=n(3117),r=(n(7294),n(3905));const o={title:"CLI Tools",weight:1},i=void 0,l={unversionedId:"cli/cli",id:"cli/cli",title:"CLI Tools",description:"The K3s binary contains a number of additional tools the help you manage your cluster.",source:"@site/docs/cli/cli.md",sourceDirName:"cli",slug:"/cli/",permalink:"/cli/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"CLI Tools",weight:1},sidebar:"mySidebar",previous:{title:"FAQ",permalink:"/faq/"},next:{title:"server",permalink:"/cli/server"}},d={},m=[],c={toc:m};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"The K3s binary contains a number of additional tools the help you manage your cluster."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Command"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s server")),(0,r.kt)("td",{parentName:"tr",align:null},"Run a K3s server node, which launches the Kubernetes ",(0,r.kt)("inlineCode",{parentName:"td"},"apiserver"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"scheduler"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"controller-manager"),", and ",(0,r.kt)("inlineCode",{parentName:"td"},"cloud-controller-manager")," components, in addition a datastore and the agent components. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/server"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s server")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s agent")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the K3s agent node, which launches ",(0,r.kt)("inlineCode",{parentName:"td"},"containerd"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"flannel"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"kube-router")," network policy controller, and the Kubernetes ",(0,r.kt)("inlineCode",{parentName:"td"},"kubelet")," and ",(0,r.kt)("inlineCode",{parentName:"td"},"kube-proxy")," components. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s agent")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s kubectl")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the embedded ",(0,r.kt)("a",{parentName:"td",href:"https://kubernetes.io/docs/reference/kubectl"},(0,r.kt)("inlineCode",{parentName:"a"},"kubectl")," command"),". This is a CLI for interacting with the Kubernetes apiserver.  If the ",(0,r.kt)("inlineCode",{parentName:"td"},"KUBECONFIG")," environment variable is not set, this will automatically attempt to use the kubeconfig at ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/rancher/k3s/k3s.yaml"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s crictl")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the embedded ",(0,r.kt)("a",{parentName:"td",href:"https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md"},(0,r.kt)("inlineCode",{parentName:"a"},"crictl")," command"),". This is a CLI for interacting with Kubernetes's container runtime interface (CRI). Useful for debugging.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s ctr")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the embedded ",(0,r.kt)("a",{parentName:"td",href:"https://github.com/projectatomic/containerd/blob/master/docs/cli.md"},(0,r.kt)("inlineCode",{parentName:"a"},"ctr")," command"),". This is a CLI for containerd, the container daemon used by K3s. Useful for debugging.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s token")),(0,r.kt)("td",{parentName:"tr",align:null},"Manage bootstrap tokens. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s etcd-snapshot")),(0,r.kt)("td",{parentName:"tr",align:null},"Perform on demand backups of the K3s cluster data and upload to S3. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/etcd-snapshot"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s secrets-encrypt")),(0,r.kt)("td",{parentName:"tr",align:null},"Configure K3s to encrypt secrets when storing them in the cluster. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/secrets-encrypt"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s certificate")),(0,r.kt)("td",{parentName:"tr",align:null},"Manage K3s certificates. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/certificate"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s completion")),(0,r.kt)("td",{parentName:"tr",align:null},"Generate shell completion scripts for k3s")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s help")),(0,r.kt)("td",{parentName:"tr",align:null},"Shows a list of commands or help for one command")))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7813],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>u});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var d=a.createContext({}),m=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=m(e.components);return a.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},s=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,d=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),s=m(n),u=r,k=s["".concat(d,".").concat(u)]||s[u]||p[u]||o;return n?a.createElement(k,i(i({ref:t},c),{},{components:n})):a.createElement(k,i({ref:t},c))}));function u(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=s;var l={};for(var d in t)hasOwnProperty.call(t,d)&&(l[d]=t[d]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var m=2;m<o;m++)i[m]=n[m];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}s.displayName="MDXCreateElement"},3279:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>m});var a=n(3117),r=(n(7294),n(3905));const o={title:"CLI Tools",weight:1},i=void 0,l={unversionedId:"cli/cli",id:"cli/cli",title:"CLI Tools",description:"The K3s binary contains a number of additional tools the help you manage your cluster.",source:"@site/docs/cli/cli.md",sourceDirName:"cli",slug:"/cli/",permalink:"/cli/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"CLI Tools",weight:1},sidebar:"mySidebar",previous:{title:"FAQ",permalink:"/faq/"},next:{title:"server",permalink:"/cli/server"}},d={},m=[],c={toc:m};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"The K3s binary contains a number of additional tools the help you manage your cluster."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Command"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s server")),(0,r.kt)("td",{parentName:"tr",align:null},"Run a K3s server node, which launches the Kubernetes ",(0,r.kt)("inlineCode",{parentName:"td"},"apiserver"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"scheduler"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"controller-manager"),", and ",(0,r.kt)("inlineCode",{parentName:"td"},"cloud-controller-manager")," components, in addition a datastore and the agent components. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/server"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s server")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s agent")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the K3s agent node, which launches ",(0,r.kt)("inlineCode",{parentName:"td"},"containerd"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"flannel"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"kube-router")," network policy controller, and the Kubernetes ",(0,r.kt)("inlineCode",{parentName:"td"},"kubelet")," and ",(0,r.kt)("inlineCode",{parentName:"td"},"kube-proxy")," components. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s agent")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s kubectl")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the embedded ",(0,r.kt)("a",{parentName:"td",href:"https://kubernetes.io/docs/reference/kubectl"},(0,r.kt)("inlineCode",{parentName:"a"},"kubectl")," command"),". This is a CLI for interacting with the Kubernetes apiserver.  If the ",(0,r.kt)("inlineCode",{parentName:"td"},"KUBECONFIG")," environment variable is not set, this will automatically attempt to use the kubeconfig at ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/rancher/k3s/k3s.yaml"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s crictl")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the embedded ",(0,r.kt)("a",{parentName:"td",href:"https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md"},(0,r.kt)("inlineCode",{parentName:"a"},"crictl")," command"),". This is a CLI for interacting with Kubernetes's container runtime interface (CRI). Useful for debugging.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s ctr")),(0,r.kt)("td",{parentName:"tr",align:null},"Run the embedded ",(0,r.kt)("a",{parentName:"td",href:"https://github.com/projectatomic/containerd/blob/master/docs/cli.md"},(0,r.kt)("inlineCode",{parentName:"a"},"ctr")," command"),". This is a CLI for containerd, the container daemon used by K3s. Useful for debugging.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s token")),(0,r.kt)("td",{parentName:"tr",align:null},"Manage bootstrap tokens. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s etcd-snapshot")),(0,r.kt)("td",{parentName:"tr",align:null},"Perform on demand backups of the K3s cluster data and upload to S3. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/etcd-snapshot"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s secrets-encrypt")),(0,r.kt)("td",{parentName:"tr",align:null},"Configure K3s to encrypt secrets when storing them in the cluster. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/secrets-encrypt"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s certificate")),(0,r.kt)("td",{parentName:"tr",align:null},"Manage K3s certificates. See the ",(0,r.kt)("a",{parentName:"td",href:"/cli/certificate"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," command documentation")," for more information.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s completion")),(0,r.kt)("td",{parentName:"tr",align:null},"Generate shell completion scripts for k3s")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"k3s help")),(0,r.kt)("td",{parentName:"tr",align:null},"Shows a list of commands or help for one command")))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/a09c2993.ca7f2ba3.js b/assets/js/a09c2993.971bae49.js
similarity index 98%
rename from assets/js/a09c2993.ca7f2ba3.js
rename to assets/js/a09c2993.971bae49.js
index aafcc721f..c1f84ce4a 100644
--- a/assets/js/a09c2993.ca7f2ba3.js
+++ b/assets/js/a09c2993.971bae49.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4128],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),m=u(n),d=a,f=m["".concat(s,".").concat(d)]||m[d]||p[d]||l;return n?r.createElement(f,i(i({ref:t},c),{},{components:n})):r.createElement(f,i({ref:t},c))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8495:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={slug:"/",title:"K3s - Lightweight Kubernetes"},i=void 0,o={unversionedId:"introduction",id:"introduction",title:"K3s - Lightweight Kubernetes",description:"Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB.",source:"@site/docs/introduction.md",sourceDirName:".",slug:"/",permalink:"/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/introduction.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{slug:"/",title:"K3s - Lightweight Kubernetes"},sidebar:"mySidebar",next:{title:"Architecture",permalink:"/architecture/"}},s={},u=[],c={toc:u};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB."),(0,a.kt)("p",null,"Great for:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Edge"),(0,a.kt)("li",{parentName:"ul"},"IoT"),(0,a.kt)("li",{parentName:"ul"},"CI"),(0,a.kt)("li",{parentName:"ul"},"Development"),(0,a.kt)("li",{parentName:"ul"},"ARM"),(0,a.kt)("li",{parentName:"ul"},"Embedding K8s"),(0,a.kt)("li",{parentName:"ul"},"Situations where a PhD in K8s clusterology is infeasible")),(0,a.kt)("h1",{id:"what-is-k3s"},"What is K3s?"),(0,a.kt)("p",null,"K3s is a fully compliant Kubernetes distribution with the following enhancements:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Packaged as a single binary."),(0,a.kt)("li",{parentName:"ul"},"Lightweight storage backend based on sqlite3 as the default storage mechanism. etcd3, MySQL, Postgres are also available."),(0,a.kt)("li",{parentName:"ul"},"Wrapped in simple launcher that handles a lot of the complexity of TLS and options."),(0,a.kt)("li",{parentName:"ul"},"Secure by default with reasonable defaults for lightweight environments."),(0,a.kt)("li",{parentName:"ul"},'Simple but powerful "batteries-included" features have been added, such as: ',(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},"local storage provider "),(0,a.kt)("li",{parentName:"ul"},"service load balancer"),(0,a.kt)("li",{parentName:"ul"},"Helm controller"),(0,a.kt)("li",{parentName:"ul"},"Traefik ingress controller."))),(0,a.kt)("li",{parentName:"ul"},"Operation of all Kubernetes control plane components is encapsulated in a single binary and process. This allows K3s to automate and manage complex cluster operations like distributing certificates."),(0,a.kt)("li",{parentName:"ul"},"External dependencies have been minimized (just a modern kernel and cgroup mounts needed). K3s packages the required dependencies, including:",(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},"containerd"),(0,a.kt)("li",{parentName:"ul"},"Flannel (CNI)"),(0,a.kt)("li",{parentName:"ul"},"CoreDNS"),(0,a.kt)("li",{parentName:"ul"},"Traefik (Ingress)"),(0,a.kt)("li",{parentName:"ul"},"Klipper-lb (Service LB)"),(0,a.kt)("li",{parentName:"ul"},"Embedded network policy controller"),(0,a.kt)("li",{parentName:"ul"},"Embedded local-path-provisioner"),(0,a.kt)("li",{parentName:"ul"},"Host utilities (iptables, socat, etc)")))),(0,a.kt)("h1",{id:"whats-with-the-name"},"What's with the name?"),(0,a.kt)("p",null,"We wanted an installation of Kubernetes that was half the size in terms of memory footprint. Kubernetes is a 10-letter word stylized as K8s. So something half as big as Kubernetes would be a 5-letter word stylized as K3s. There is no long form of K3s and no official pronunciation."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4128],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),m=u(n),d=a,f=m["".concat(s,".").concat(d)]||m[d]||p[d]||l;return n?r.createElement(f,i(i({ref:t},c),{},{components:n})):r.createElement(f,i({ref:t},c))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8495:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={slug:"/",title:"K3s - Lightweight Kubernetes"},i=void 0,o={unversionedId:"introduction",id:"introduction",title:"K3s - Lightweight Kubernetes",description:"Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB.",source:"@site/docs/introduction.md",sourceDirName:".",slug:"/",permalink:"/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/introduction.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{slug:"/",title:"K3s - Lightweight Kubernetes"},sidebar:"mySidebar",next:{title:"Architecture",permalink:"/architecture/"}},s={},u=[],c={toc:u};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB."),(0,a.kt)("p",null,"Great for:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Edge"),(0,a.kt)("li",{parentName:"ul"},"IoT"),(0,a.kt)("li",{parentName:"ul"},"CI"),(0,a.kt)("li",{parentName:"ul"},"Development"),(0,a.kt)("li",{parentName:"ul"},"ARM"),(0,a.kt)("li",{parentName:"ul"},"Embedding K8s"),(0,a.kt)("li",{parentName:"ul"},"Situations where a PhD in K8s clusterology is infeasible")),(0,a.kt)("h1",{id:"what-is-k3s"},"What is K3s?"),(0,a.kt)("p",null,"K3s is a fully compliant Kubernetes distribution with the following enhancements:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Packaged as a single binary."),(0,a.kt)("li",{parentName:"ul"},"Lightweight storage backend based on sqlite3 as the default storage mechanism. etcd3, MySQL, Postgres are also available."),(0,a.kt)("li",{parentName:"ul"},"Wrapped in simple launcher that handles a lot of the complexity of TLS and options."),(0,a.kt)("li",{parentName:"ul"},"Secure by default with reasonable defaults for lightweight environments."),(0,a.kt)("li",{parentName:"ul"},'Simple but powerful "batteries-included" features have been added, such as: ',(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},"local storage provider "),(0,a.kt)("li",{parentName:"ul"},"service load balancer"),(0,a.kt)("li",{parentName:"ul"},"Helm controller"),(0,a.kt)("li",{parentName:"ul"},"Traefik ingress controller."))),(0,a.kt)("li",{parentName:"ul"},"Operation of all Kubernetes control plane components is encapsulated in a single binary and process. This allows K3s to automate and manage complex cluster operations like distributing certificates."),(0,a.kt)("li",{parentName:"ul"},"External dependencies have been minimized (just a modern kernel and cgroup mounts needed). K3s packages the required dependencies, including:",(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},"containerd"),(0,a.kt)("li",{parentName:"ul"},"Flannel (CNI)"),(0,a.kt)("li",{parentName:"ul"},"CoreDNS"),(0,a.kt)("li",{parentName:"ul"},"Traefik (Ingress)"),(0,a.kt)("li",{parentName:"ul"},"Klipper-lb (Service LB)"),(0,a.kt)("li",{parentName:"ul"},"Embedded network policy controller"),(0,a.kt)("li",{parentName:"ul"},"Embedded local-path-provisioner"),(0,a.kt)("li",{parentName:"ul"},"Host utilities (iptables, socat, etc)")))),(0,a.kt)("h1",{id:"whats-with-the-name"},"What's with the name?"),(0,a.kt)("p",null,"We wanted an installation of Kubernetes that was half the size in terms of memory footprint. Kubernetes is a 10-letter word stylized as K8s. So something half as big as Kubernetes would be a 5-letter word stylized as K3s. There is no long form of K3s and no official pronunciation."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/a3308106.fb788afe.js b/assets/js/a3308106.0710ae6c.js
similarity index 98%
rename from assets/js/a3308106.fb788afe.js
rename to assets/js/a3308106.0710ae6c.js
index cd7227824..26090b735 100644
--- a/assets/js/a3308106.fb788afe.js
+++ b/assets/js/a3308106.0710ae6c.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8511],{3905:(e,a,t)=>{t.d(a,{Zo:()=>u,kt:()=>b});var n=t(7294);function r(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);a&&(n=n.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,n)}return t}function s(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){r(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,n,r=function(e,a){if(null==e)return{};var t,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||(r[t]=e[t]);return r}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var d=n.createContext({}),i=function(e){var a=n.useContext(d),t=a;return e&&(t="function"==typeof e?e(a):s(s({},a),e)),t},u=function(e){var a=i(e.components);return n.createElement(d.Provider,{value:a},e.children)},c={inlineCode:"code",wrapper:function(e){var a=e.children;return n.createElement(n.Fragment,{},a)}},p=n.forwardRef((function(e,a){var t=e.components,r=e.mdxType,o=e.originalType,d=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),p=i(t),b=r,h=p["".concat(d,".").concat(b)]||p[b]||c[b]||o;return t?n.createElement(h,s(s({ref:a},u),{},{components:t})):n.createElement(h,s({ref:a},u))}));function b(e,a){var t=arguments,r=a&&a.mdxType;if("string"==typeof e||r){var o=t.length,s=new Array(o);s[0]=p;var l={};for(var d in a)hasOwnProperty.call(a,d)&&(l[d]=a[d]);l.originalType=e,l.mdxType="string"==typeof e?e:r,s[1]=l;for(var i=2;i<o;i++)s[i]=t[i];return n.createElement.apply(null,s)}return n.createElement.apply(null,t)}p.displayName="MDXCreateElement"},5145:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>d,contentTitle:()=>s,default:()=>h,frontMatter:()=>o,metadata:()=>l,toc:()=>i});var n=t(3117),r=(t(7294),t(3905));const o={title:"Kubernetes Dashboard",weight:60},s=void 0,l={unversionedId:"installation/kube-dashboard",id:"installation/kube-dashboard",title:"Kubernetes Dashboard",description:"This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s.",source:"@site/docs/installation/kube-dashboard.md",sourceDirName:"installation",slug:"/installation/kube-dashboard",permalink:"/installation/kube-dashboard",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Kubernetes Dashboard",weight:60},sidebar:"mySidebar",previous:{title:"Managing Packaged Components",permalink:"/installation/packaged-components"},next:{title:"Uninstalling K3s",permalink:"/installation/uninstall"}},d={},i=[{value:"Deploying the Kubernetes Dashboard",id:"deploying-the-kubernetes-dashboard",level:3},{value:"Dashboard RBAC Configuration",id:"dashboard-rbac-configuration",level:3},{value:"Obtain the Bearer Token",id:"obtain-the-bearer-token",level:3},{value:"Local Access to the Dashboard",id:"local-access-to-the-dashboard",level:3},{value:"Advanced: Remote Access to the Dashboard",id:"advanced-remote-access-to-the-dashboard",level:4},{value:"Upgrading the Dashboard",id:"upgrading-the-dashboard",level:3},{value:"Deleting the Dashboard and admin-user configuration",id:"deleting-the-dashboard-and-admin-user-configuration",level:3}],u=e=>function(a){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",a)},c=u("Tabs"),p=u("TabItem"),b={toc:i};function h(e){let{components:a,...t}=e;return(0,r.kt)("wrapper",(0,n.Z)({},b,t,{components:a,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This installation guide will help you to deploy and configure the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/"},"Kubernetes Dashboard")," on K3s."),(0,r.kt)("h3",{id:"deploying-the-kubernetes-dashboard"},"Deploying the Kubernetes Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"GITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml\n")),(0,r.kt)("h3",{id:"dashboard-rbac-configuration"},"Dashboard RBAC Configuration"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Important:")," The ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," created in this guide will have administrative privileges in the Dashboard.")),(0,r.kt)("p",null,"Create the following resource manifest files:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: ServiceAccount\nmetadata:\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user-role.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: admin-user\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,"Deploy the ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," configuration:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"obtain-the-bearer-token"},"Obtain the Bearer Token"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(p,{value:"v1.24 and newer",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard create token admin-user\n"))),(0,r.kt)(p,{value:"v1.23 and older",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'\n")))),(0,r.kt)("h3",{id:"local-access-to-the-dashboard"},"Local Access to the Dashboard"),(0,r.kt)("p",null,"To access the Dashboard you must create a secure channel to your K3s cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl proxy\n")),(0,r.kt)("p",null,"The Dashboard is now accessible at:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"Sign In")," with the ",(0,r.kt)("inlineCode",{parentName:"li"},"admin-user")," Bearer Token")),(0,r.kt)("h4",{id:"advanced-remote-access-to-the-dashboard"},"Advanced: Remote Access to the Dashboard"),(0,r.kt)("p",null,"Please see the Dashboard documentation: Using ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/"},"Port Forwarding")," to Access Applications in a Cluster."),(0,r.kt)("h3",{id:"upgrading-the-dashboard"},"Upgrading the Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nGITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"deleting-the-dashboard-and-admin-user-configuration"},"Deleting the Dashboard and admin-user configuration"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nsudo k3s kubectl delete clusterrolebinding kubernetes-dashboard\nsudo k3s kubectl delete clusterrole kubernetes-dashboard\n")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8511],{3905:(e,a,t)=>{t.d(a,{Zo:()=>u,kt:()=>b});var n=t(7294);function r(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);a&&(n=n.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,n)}return t}function s(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){r(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,n,r=function(e,a){if(null==e)return{};var t,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||(r[t]=e[t]);return r}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var d=n.createContext({}),i=function(e){var a=n.useContext(d),t=a;return e&&(t="function"==typeof e?e(a):s(s({},a),e)),t},u=function(e){var a=i(e.components);return n.createElement(d.Provider,{value:a},e.children)},c={inlineCode:"code",wrapper:function(e){var a=e.children;return n.createElement(n.Fragment,{},a)}},p=n.forwardRef((function(e,a){var t=e.components,r=e.mdxType,o=e.originalType,d=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),p=i(t),b=r,h=p["".concat(d,".").concat(b)]||p[b]||c[b]||o;return t?n.createElement(h,s(s({ref:a},u),{},{components:t})):n.createElement(h,s({ref:a},u))}));function b(e,a){var t=arguments,r=a&&a.mdxType;if("string"==typeof e||r){var o=t.length,s=new Array(o);s[0]=p;var l={};for(var d in a)hasOwnProperty.call(a,d)&&(l[d]=a[d]);l.originalType=e,l.mdxType="string"==typeof e?e:r,s[1]=l;for(var i=2;i<o;i++)s[i]=t[i];return n.createElement.apply(null,s)}return n.createElement.apply(null,t)}p.displayName="MDXCreateElement"},5145:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>d,contentTitle:()=>s,default:()=>h,frontMatter:()=>o,metadata:()=>l,toc:()=>i});var n=t(3117),r=(t(7294),t(3905));const o={title:"Kubernetes Dashboard",weight:60},s=void 0,l={unversionedId:"installation/kube-dashboard",id:"installation/kube-dashboard",title:"Kubernetes Dashboard",description:"This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s.",source:"@site/docs/installation/kube-dashboard.md",sourceDirName:"installation",slug:"/installation/kube-dashboard",permalink:"/installation/kube-dashboard",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Kubernetes Dashboard",weight:60},sidebar:"mySidebar",previous:{title:"Managing Packaged Components",permalink:"/installation/packaged-components"},next:{title:"Uninstalling K3s",permalink:"/installation/uninstall"}},d={},i=[{value:"Deploying the Kubernetes Dashboard",id:"deploying-the-kubernetes-dashboard",level:3},{value:"Dashboard RBAC Configuration",id:"dashboard-rbac-configuration",level:3},{value:"Obtain the Bearer Token",id:"obtain-the-bearer-token",level:3},{value:"Local Access to the Dashboard",id:"local-access-to-the-dashboard",level:3},{value:"Advanced: Remote Access to the Dashboard",id:"advanced-remote-access-to-the-dashboard",level:4},{value:"Upgrading the Dashboard",id:"upgrading-the-dashboard",level:3},{value:"Deleting the Dashboard and admin-user configuration",id:"deleting-the-dashboard-and-admin-user-configuration",level:3}],u=e=>function(a){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",a)},c=u("Tabs"),p=u("TabItem"),b={toc:i};function h(e){let{components:a,...t}=e;return(0,r.kt)("wrapper",(0,n.Z)({},b,t,{components:a,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This installation guide will help you to deploy and configure the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/"},"Kubernetes Dashboard")," on K3s."),(0,r.kt)("h3",{id:"deploying-the-kubernetes-dashboard"},"Deploying the Kubernetes Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"GITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml\n")),(0,r.kt)("h3",{id:"dashboard-rbac-configuration"},"Dashboard RBAC Configuration"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Important:")," The ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," created in this guide will have administrative privileges in the Dashboard.")),(0,r.kt)("p",null,"Create the following resource manifest files:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: ServiceAccount\nmetadata:\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user-role.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: admin-user\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,"Deploy the ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," configuration:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"obtain-the-bearer-token"},"Obtain the Bearer Token"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(p,{value:"v1.24 and newer",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard create token admin-user\n"))),(0,r.kt)(p,{value:"v1.23 and older",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'\n")))),(0,r.kt)("h3",{id:"local-access-to-the-dashboard"},"Local Access to the Dashboard"),(0,r.kt)("p",null,"To access the Dashboard you must create a secure channel to your K3s cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl proxy\n")),(0,r.kt)("p",null,"The Dashboard is now accessible at:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"Sign In")," with the ",(0,r.kt)("inlineCode",{parentName:"li"},"admin-user")," Bearer Token")),(0,r.kt)("h4",{id:"advanced-remote-access-to-the-dashboard"},"Advanced: Remote Access to the Dashboard"),(0,r.kt)("p",null,"Please see the Dashboard documentation: Using ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/"},"Port Forwarding")," to Access Applications in a Cluster."),(0,r.kt)("h3",{id:"upgrading-the-dashboard"},"Upgrading the Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nGITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"deleting-the-dashboard-and-admin-user-configuration"},"Deleting the Dashboard and admin-user configuration"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nsudo k3s kubectl delete clusterrolebinding kubernetes-dashboard\nsudo k3s kubectl delete clusterrole kubernetes-dashboard\n")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/ab388925.60530bae.js b/assets/js/ab388925.ab051ac0.js
similarity index 99%
rename from assets/js/ab388925.60530bae.js
rename to assets/js/ab388925.ab051ac0.js
index e02ee6af8..7c35cb63e 100644
--- a/assets/js/ab388925.60530bae.js
+++ b/assets/js/ab388925.ab051ac0.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4548],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>c});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var l=r.createContext({}),d=function(e){var t=r.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=d(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),m=d(a),c=n,h=m["".concat(l,".").concat(c)]||m[c]||u[c]||o;return a?r.createElement(h,i(i({ref:t},p),{},{components:a})):r.createElement(h,i({ref:t},p))}));function c(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=a.length,i=new Array(o);i[0]=m;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var d=2;d<o;d++)i[d]=a[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},3510:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>h,frontMatter:()=>o,metadata:()=>s,toc:()=>d});var r=a(3117),n=(a(7294),a(3905));const o={title:"Cluster Datastore",weight:50},i=void 0,s={unversionedId:"datastore/datastore",id:"datastore/datastore",title:"Cluster Datastore",description:"The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:",source:"@site/docs/datastore/datastore.md",sourceDirName:"datastore",slug:"/datastore/",permalink:"/datastore/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Cluster Datastore",weight:50},sidebar:"mySidebar",previous:{title:"Uninstalling K3s",permalink:"/installation/uninstall"},next:{title:"Backup and Restore",permalink:"/datastore/backup-restore"}},l={},d=[{value:"External Datastore Configuration Parameters",id:"external-datastore-configuration-parameters",level:3},{value:"Datastore Endpoint Format and Functionality",id:"datastore-endpoint-format-and-functionality",level:3}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},u=p("Tabs"),m=p("TabItem"),c={toc:d};function h(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"If your team doesn't have expertise in operating etcd, you can choose an enterprise-grade SQL database like MySQL or PostgreSQL"),(0,n.kt)("li",{parentName:"ul"},"If you need to run a simple, short-lived cluster in your CI/CD environment, you can use the embedded SQLite database"),(0,n.kt)("li",{parentName:"ul"},"If you wish to deploy Kubernetes on the edge and require a highly available solution but can't afford the operational overhead of managing a database at the edge, you can use K3s's embedded HA datastore built on top of embedded etcd.")),(0,n.kt)("p",null,"K3s supports the following datastore options:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Embedded ",(0,n.kt)("a",{parentName:"strong",href:"https://www.sqlite.org/index.html"},"SQLite")),(0,n.kt)("br",{parentName:"li"}),"SQLite cannot be used on clusters with multiple servers.",(0,n.kt)("br",{parentName:"li"}),"SQLite is the default datastore, and will be used if no other datastore configuration is present, and no embedded etcd database files are present on disk."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Embedded etcd"),(0,n.kt)("br",{parentName:"li"}),"See the ",(0,n.kt)("a",{parentName:"li",href:"/datastore/ha-embedded"},"High Availability Embedded etcd")," documentation for more information on using embedded etcd with multiple servers.\nEmbedded etcd will be automatically selected if K3s is configured to initialize a new etcd cluster, join an existing etcd cluster, or if etcd database files are present on disk during startup."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"External Database"),(0,n.kt)("br",{parentName:"li"}),"See the ",(0,n.kt)("a",{parentName:"li",href:"/datastore/ha"},"High Availability External DB")," documentation for more information on using external datastores with multiple servers.",(0,n.kt)("br",{parentName:"li"}),"The following external datastores are supported:",(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://etcd.io/"},"etcd")," (certified against version 3.5.4)"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.mysql.com/"},"MySQL")," (certified against versions 5.7 and 8.0)"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://mariadb.org/"},"MariaDB")," (certified against version 10.6.8)"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.postgresql.org/"},"PostgreSQL")," (certified against versions 10.7, 11.5, and 14.2)")))),(0,n.kt)("admonition",{title:"Prepared Statement Support",type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"K3s requires prepared statements support from the DB. This means that connection poolers such as ",(0,n.kt)("a",{parentName:"p",href:"https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling"},"PgBouncer")," will not work with K3s.")),(0,n.kt)("h3",{id:"external-datastore-configuration-parameters"},"External Datastore Configuration Parameters"),(0,n.kt)("p",null,"If you wish to use an external datastore such as PostgreSQL, MySQL, or etcd you must set the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter so that K3s knows how to connect to it. You may also specify parameters to configure the authentication and encryption of the connection. The below table summarizes these parameters, which can be passed as either CLI flags or environment variables."),(0,n.kt)("table",null,(0,n.kt)("thead",{parentName:"table"},(0,n.kt)("tr",{parentName:"thead"},(0,n.kt)("th",{parentName:"tr",align:null},"CLI Flag"),(0,n.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,n.kt)("th",{parentName:"tr",align:null},"Description"))),(0,n.kt)("tbody",{parentName:"table"},(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,n.kt)("td",{parentName:"tr",align:null},"Specify a PostgreSQL, MySQL, or etcd connection string. This is a string used to describe the connection to the datastore. The structure of this string is specific to each backend and is detailed below.")),(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,n.kt)("td",{parentName:"tr",align:null},"TLS Certificate Authority (CA) file used to help secure communication with the datastore. If your datastore serves requests over TLS using a certificate signed by a custom certificate authority, you can specify that CA using this parameter so that the K3s client can properly verify the certificate.")),(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,n.kt)("td",{parentName:"tr",align:null},"TLS certificate file used for client certificate based authentication to your datastore. To use this feature, your datastore must be configured to support client certificate based authentication. If you specify this parameter, you must also specify the ",(0,n.kt)("inlineCode",{parentName:"td"},"datastore-keyfile")," parameter.")),(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,n.kt)("td",{parentName:"tr",align:null},"TLS key file used for client certificate based authentication to your datastore. See the previous ",(0,n.kt)("inlineCode",{parentName:"td"},"datastore-certfile")," parameter for more details.")))),(0,n.kt)("p",null,"As a best practice we recommend setting these parameters as environment variables rather than command line arguments so that your database credentials or other sensitive information aren't exposed as part of the process info."),(0,n.kt)("h3",{id:"datastore-endpoint-format-and-functionality"},"Datastore Endpoint Format and Functionality"),(0,n.kt)("p",null,"As mentioned, the format of the value passed to the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter is dependent upon the datastore backend. The following details this format and functionality for each supported external datastore."),(0,n.kt)(u,{mdxType:"Tabs"},(0,n.kt)(m,{value:"PostgreSQL",mdxType:"TabItem"},(0,n.kt)("p",null,"  In its most common form, the datastore-endpoint parameter for PostgreSQL has the following format:"),(0,n.kt)("p",null,"  ",(0,n.kt)("inlineCode",{parentName:"p"},"postgres://username:password@hostname:port/database-name")),(0,n.kt)("p",null,"  More advanced configuration parameters are available. For more information on these, please see ",(0,n.kt)("a",{parentName:"p",href:"https://godoc.org/github.com/lib/pq"},"https://godoc.org/github.com/lib/pq"),"."),(0,n.kt)("p",null,"  If you specify a database name and it does not exist, the server will attempt to create it."),(0,n.kt)("p",null,"  If you only supply ",(0,n.kt)("inlineCode",{parentName:"p"},"postgres://"),"  as the endpoint, K3s will attempt to do the following:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Connect to localhost using ",(0,n.kt)("inlineCode",{parentName:"li"},"postgres")," as the username and password"),(0,n.kt)("li",{parentName:"ul"},"Create a database named ",(0,n.kt)("inlineCode",{parentName:"li"},"kubernetes")))),(0,n.kt)(m,{value:"MySQL / MariaDB",mdxType:"TabItem"},(0,n.kt)("p",null,"  In its most common form, the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter for MySQL and MariaDB has the following format:"),(0,n.kt)("p",null,"  ",(0,n.kt)("inlineCode",{parentName:"p"},"mysql://username:password@tcp(hostname:3306)/database-name")),(0,n.kt)("p",null,"  More advanced configuration parameters are available. For more information on these, please see ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/go-sql-driver/mysql#dsn-data-source-name"},"https://github.com/go-sql-driver/mysql#dsn-data-source-name")),(0,n.kt)("p",null,"  Note that due to a ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/1093"},"known issue")," in K3s, you cannot set the ",(0,n.kt)("inlineCode",{parentName:"p"},"tls"),' parameter. TLS communication is supported, but you cannot, for example, set this parameter to "skip-verify" to cause K3s to skip certificate verification.'),(0,n.kt)("p",null,"  If you specify a database name and it does not exist, the server will attempt to create it."),(0,n.kt)("p",null,"  If you only supply ",(0,n.kt)("inlineCode",{parentName:"p"},"mysql://")," as the endpoint, K3s will attempt to do the following:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Connect to the MySQL socket at ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/run/mysqld/mysqld.sock")," using the ",(0,n.kt)("inlineCode",{parentName:"li"},"root")," user and no password"),(0,n.kt)("li",{parentName:"ul"},"Create a database with the name ",(0,n.kt)("inlineCode",{parentName:"li"},"kubernetes")))),(0,n.kt)(m,{value:"etcd",mdxType:"TabItem"},(0,n.kt)("p",null,"  In its most common form, the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter for etcd has the following format:"),(0,n.kt)("p",null,"  ",(0,n.kt)("inlineCode",{parentName:"p"},"https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379")),(0,n.kt)("p",null,"  The above assumes a typical three node etcd cluster. The parameter can accept one more comma separated etcd URLs."))))}h.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4548],{3905:(e,t,a)=>{a.d(t,{Zo:()=>p,kt:()=>c});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var l=r.createContext({}),d=function(e){var t=r.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},p=function(e){var t=d(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),m=d(a),c=n,h=m["".concat(l,".").concat(c)]||m[c]||u[c]||o;return a?r.createElement(h,i(i({ref:t},p),{},{components:a})):r.createElement(h,i({ref:t},p))}));function c(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=a.length,i=new Array(o);i[0]=m;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var d=2;d<o;d++)i[d]=a[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},3510:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>h,frontMatter:()=>o,metadata:()=>s,toc:()=>d});var r=a(3117),n=(a(7294),a(3905));const o={title:"Cluster Datastore",weight:50},i=void 0,s={unversionedId:"datastore/datastore",id:"datastore/datastore",title:"Cluster Datastore",description:"The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:",source:"@site/docs/datastore/datastore.md",sourceDirName:"datastore",slug:"/datastore/",permalink:"/datastore/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Cluster Datastore",weight:50},sidebar:"mySidebar",previous:{title:"Uninstalling K3s",permalink:"/installation/uninstall"},next:{title:"Backup and Restore",permalink:"/datastore/backup-restore"}},l={},d=[{value:"External Datastore Configuration Parameters",id:"external-datastore-configuration-parameters",level:3},{value:"Datastore Endpoint Format and Functionality",id:"datastore-endpoint-format-and-functionality",level:3}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},u=p("Tabs"),m=p("TabItem"),c={toc:d};function h(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},c,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"If your team doesn't have expertise in operating etcd, you can choose an enterprise-grade SQL database like MySQL or PostgreSQL"),(0,n.kt)("li",{parentName:"ul"},"If you need to run a simple, short-lived cluster in your CI/CD environment, you can use the embedded SQLite database"),(0,n.kt)("li",{parentName:"ul"},"If you wish to deploy Kubernetes on the edge and require a highly available solution but can't afford the operational overhead of managing a database at the edge, you can use K3s's embedded HA datastore built on top of embedded etcd.")),(0,n.kt)("p",null,"K3s supports the following datastore options:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Embedded ",(0,n.kt)("a",{parentName:"strong",href:"https://www.sqlite.org/index.html"},"SQLite")),(0,n.kt)("br",{parentName:"li"}),"SQLite cannot be used on clusters with multiple servers.",(0,n.kt)("br",{parentName:"li"}),"SQLite is the default datastore, and will be used if no other datastore configuration is present, and no embedded etcd database files are present on disk."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Embedded etcd"),(0,n.kt)("br",{parentName:"li"}),"See the ",(0,n.kt)("a",{parentName:"li",href:"/datastore/ha-embedded"},"High Availability Embedded etcd")," documentation for more information on using embedded etcd with multiple servers.\nEmbedded etcd will be automatically selected if K3s is configured to initialize a new etcd cluster, join an existing etcd cluster, or if etcd database files are present on disk during startup."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"External Database"),(0,n.kt)("br",{parentName:"li"}),"See the ",(0,n.kt)("a",{parentName:"li",href:"/datastore/ha"},"High Availability External DB")," documentation for more information on using external datastores with multiple servers.",(0,n.kt)("br",{parentName:"li"}),"The following external datastores are supported:",(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://etcd.io/"},"etcd")," (certified against version 3.5.4)"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.mysql.com/"},"MySQL")," (certified against versions 5.7 and 8.0)"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://mariadb.org/"},"MariaDB")," (certified against version 10.6.8)"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.postgresql.org/"},"PostgreSQL")," (certified against versions 10.7, 11.5, and 14.2)")))),(0,n.kt)("admonition",{title:"Prepared Statement Support",type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"K3s requires prepared statements support from the DB. This means that connection poolers such as ",(0,n.kt)("a",{parentName:"p",href:"https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling"},"PgBouncer")," will not work with K3s.")),(0,n.kt)("h3",{id:"external-datastore-configuration-parameters"},"External Datastore Configuration Parameters"),(0,n.kt)("p",null,"If you wish to use an external datastore such as PostgreSQL, MySQL, or etcd you must set the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter so that K3s knows how to connect to it. You may also specify parameters to configure the authentication and encryption of the connection. The below table summarizes these parameters, which can be passed as either CLI flags or environment variables."),(0,n.kt)("table",null,(0,n.kt)("thead",{parentName:"table"},(0,n.kt)("tr",{parentName:"thead"},(0,n.kt)("th",{parentName:"tr",align:null},"CLI Flag"),(0,n.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,n.kt)("th",{parentName:"tr",align:null},"Description"))),(0,n.kt)("tbody",{parentName:"table"},(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,n.kt)("td",{parentName:"tr",align:null},"Specify a PostgreSQL, MySQL, or etcd connection string. This is a string used to describe the connection to the datastore. The structure of this string is specific to each backend and is detailed below.")),(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,n.kt)("td",{parentName:"tr",align:null},"TLS Certificate Authority (CA) file used to help secure communication with the datastore. If your datastore serves requests over TLS using a certificate signed by a custom certificate authority, you can specify that CA using this parameter so that the K3s client can properly verify the certificate.")),(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,n.kt)("td",{parentName:"tr",align:null},"TLS certificate file used for client certificate based authentication to your datastore. To use this feature, your datastore must be configured to support client certificate based authentication. If you specify this parameter, you must also specify the ",(0,n.kt)("inlineCode",{parentName:"td"},"datastore-keyfile")," parameter.")),(0,n.kt)("tr",{parentName:"tbody"},(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")),(0,n.kt)("td",{parentName:"tr",align:null},(0,n.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,n.kt)("td",{parentName:"tr",align:null},"TLS key file used for client certificate based authentication to your datastore. See the previous ",(0,n.kt)("inlineCode",{parentName:"td"},"datastore-certfile")," parameter for more details.")))),(0,n.kt)("p",null,"As a best practice we recommend setting these parameters as environment variables rather than command line arguments so that your database credentials or other sensitive information aren't exposed as part of the process info."),(0,n.kt)("h3",{id:"datastore-endpoint-format-and-functionality"},"Datastore Endpoint Format and Functionality"),(0,n.kt)("p",null,"As mentioned, the format of the value passed to the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter is dependent upon the datastore backend. The following details this format and functionality for each supported external datastore."),(0,n.kt)(u,{mdxType:"Tabs"},(0,n.kt)(m,{value:"PostgreSQL",mdxType:"TabItem"},(0,n.kt)("p",null,"  In its most common form, the datastore-endpoint parameter for PostgreSQL has the following format:"),(0,n.kt)("p",null,"  ",(0,n.kt)("inlineCode",{parentName:"p"},"postgres://username:password@hostname:port/database-name")),(0,n.kt)("p",null,"  More advanced configuration parameters are available. For more information on these, please see ",(0,n.kt)("a",{parentName:"p",href:"https://godoc.org/github.com/lib/pq"},"https://godoc.org/github.com/lib/pq"),"."),(0,n.kt)("p",null,"  If you specify a database name and it does not exist, the server will attempt to create it."),(0,n.kt)("p",null,"  If you only supply ",(0,n.kt)("inlineCode",{parentName:"p"},"postgres://"),"  as the endpoint, K3s will attempt to do the following:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Connect to localhost using ",(0,n.kt)("inlineCode",{parentName:"li"},"postgres")," as the username and password"),(0,n.kt)("li",{parentName:"ul"},"Create a database named ",(0,n.kt)("inlineCode",{parentName:"li"},"kubernetes")))),(0,n.kt)(m,{value:"MySQL / MariaDB",mdxType:"TabItem"},(0,n.kt)("p",null,"  In its most common form, the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter for MySQL and MariaDB has the following format:"),(0,n.kt)("p",null,"  ",(0,n.kt)("inlineCode",{parentName:"p"},"mysql://username:password@tcp(hostname:3306)/database-name")),(0,n.kt)("p",null,"  More advanced configuration parameters are available. For more information on these, please see ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/go-sql-driver/mysql#dsn-data-source-name"},"https://github.com/go-sql-driver/mysql#dsn-data-source-name")),(0,n.kt)("p",null,"  Note that due to a ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/1093"},"known issue")," in K3s, you cannot set the ",(0,n.kt)("inlineCode",{parentName:"p"},"tls"),' parameter. TLS communication is supported, but you cannot, for example, set this parameter to "skip-verify" to cause K3s to skip certificate verification.'),(0,n.kt)("p",null,"  If you specify a database name and it does not exist, the server will attempt to create it."),(0,n.kt)("p",null,"  If you only supply ",(0,n.kt)("inlineCode",{parentName:"p"},"mysql://")," as the endpoint, K3s will attempt to do the following:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Connect to the MySQL socket at ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/run/mysqld/mysqld.sock")," using the ",(0,n.kt)("inlineCode",{parentName:"li"},"root")," user and no password"),(0,n.kt)("li",{parentName:"ul"},"Create a database with the name ",(0,n.kt)("inlineCode",{parentName:"li"},"kubernetes")))),(0,n.kt)(m,{value:"etcd",mdxType:"TabItem"},(0,n.kt)("p",null,"  In its most common form, the ",(0,n.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter for etcd has the following format:"),(0,n.kt)("p",null,"  ",(0,n.kt)("inlineCode",{parentName:"p"},"https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379")),(0,n.kt)("p",null,"  The above assumes a typical three node etcd cluster. The parameter can accept one more comma separated etcd URLs."))))}h.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/ac75af2e.32df538e.js b/assets/js/ac75af2e.a9642fd4.js
similarity index 99%
rename from assets/js/ac75af2e.32df538e.js
rename to assets/js/ac75af2e.a9642fd4.js
index 34df622ce..111d94f9b 100644
--- a/assets/js/ac75af2e.32df538e.js
+++ b/assets/js/ac75af2e.a9642fd4.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1199],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(n),c=r,k=m["".concat(s,".").concat(c)]||m[c]||u[c]||l;return n?a.createElement(k,i(i({ref:t},p),{},{components:n})):a.createElement(k,i({ref:t},p))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},7750:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"Requirements",weight:1},i=void 0,o={unversionedId:"installation/requirements",id:"installation/requirements",title:"Requirements",description:"K3s is very lightweight, but has some minimum requirements as outlined below.",source:"@site/docs/installation/requirements.md",sourceDirName:"installation",slug:"/installation/requirements",permalink:"/installation/requirements",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Requirements",weight:1},sidebar:"mySidebar",previous:{title:"Installation",permalink:"/installation/"},next:{title:"Configuration Options",permalink:"/installation/configuration"}},s={},d=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Architecture",id:"architecture",level:2},{value:"Operating Systems",id:"operating-systems",level:2},{value:"Hardware",id:"hardware",level:2},{value:"Disks",id:"disks",level:4},{value:"Networking",id:"networking",level:2},{value:"Inbound Rules for K3s Server Nodes",id:"inbound-rules-for-k3s-server-nodes",level:3},{value:"Large Clusters",id:"large-clusters",level:2},{value:"CPU and Memory",id:"cpu-and-memory",level:3},{value:"Disks",id:"disks-1",level:3},{value:"Network",id:"network",level:3},{value:"Database",id:"database",level:3}],p={toc:d};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"K3s is very lightweight, but has some minimum requirements as outlined below."),(0,r.kt)("p",null,"Whether you're configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself."),(0,r.kt)("h2",{id:"prerequisites"},"Prerequisites"),(0,r.kt)("p",null,"Two nodes cannot have the same hostname."),(0,r.kt)("p",null,"If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the ",(0,r.kt)("inlineCode",{parentName:"p"},"--with-node-id")," option to append a random suffix for each node, or devise a unique name to pass with ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-name")," or ",(0,r.kt)("inlineCode",{parentName:"p"},"$K3S_NODE_NAME")," for each node you add to the cluster."),(0,r.kt)("h2",{id:"architecture"},"Architecture"),(0,r.kt)("p",null,"K3s is available for the following architectures:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"x86_64"),(0,r.kt)("li",{parentName:"ul"},"armhf"),(0,r.kt)("li",{parentName:"ul"},"arm64/aarch64"),(0,r.kt)("li",{parentName:"ul"},"s390x")),(0,r.kt)("admonition",{title:"ARM64 Page Size",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Prior to May 2023 releases (v1.24.14+k3s1, v1.25.10+k3s1, v1.26.5+k3s1, v1.27.2+k3s1), on ",(0,r.kt)("inlineCode",{parentName:"p"},"aarch64/arm64")," systems, the OS must use a 4k page size. ",(0,r.kt)("strong",{parentName:"p"},"RHEL9"),", ",(0,r.kt)("strong",{parentName:"p"},"Ubuntu"),", ",(0,r.kt)("strong",{parentName:"p"},"Raspberry PI OS"),", and ",(0,r.kt)("strong",{parentName:"p"},"SLES")," all meet this requirement.")),(0,r.kt)("h2",{id:"operating-systems"},"Operating Systems"),(0,r.kt)("p",null,"K3s is expected to work on most modern Linux systems."),(0,r.kt)("p",null,"Some OSs have specific requirements:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"If you are using ",(0,r.kt)("strong",{parentName:"li"},"(Red Hat/CentOS) Enterprise Linux"),", follow ",(0,r.kt)("a",{parentName:"li",href:"/advanced/#red-hat-enterprise-linux--centos"},"these steps")," for additional setup."),(0,r.kt)("li",{parentName:"ul"},"If you are using ",(0,r.kt)("strong",{parentName:"li"},"Raspberry Pi OS"),", follow ",(0,r.kt)("a",{parentName:"li",href:"/advanced/#raspberry-pi"},"these steps")," to switch to legacy iptables.")),(0,r.kt)("p",null,"For more information on which OSs were tested with Rancher managed K3s clusters, refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/support-maintenance-terms/"},"Rancher support and maintenance terms.")),(0,r.kt)("h2",{id:"hardware"},"Hardware"),(0,r.kt)("p",null,"Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Spec"),(0,r.kt)("th",{parentName:"tr",align:null},"Minimum"),(0,r.kt)("th",{parentName:"tr",align:null},"Recommended"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"CPU"),(0,r.kt)("td",{parentName:"tr",align:null},"1 core"),(0,r.kt)("td",{parentName:"tr",align:null},"2 cores")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"RAM"),(0,r.kt)("td",{parentName:"tr",align:null},"512 MB"),(0,r.kt)("td",{parentName:"tr",align:null},"1 GB")))),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"/reference/resource-profiling"},"Resource Profiling")," captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,r.kt)("admonition",{title:"Raspberry Pi and embedded etcd",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"If deploying K3s with embedded etcd on a Raspberry Pi, it is recommended that you use an external SSD. etcd is write intensive, and SD cards cannot handle the IO load.")),(0,r.kt)("h4",{id:"disks"},"Disks"),(0,r.kt)("p",null,"K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC."),(0,r.kt)("h2",{id:"networking"},"Networking"),(0,r.kt)("p",null,"The K3s server needs port 6443 to be accessible by all nodes."),(0,r.kt)("p",null,"The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s."),(0,r.kt)("p",null,"If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250."),(0,r.kt)("p",null,"If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380."),(0,r.kt)("admonition",{title:"Important",type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"Flannel relies on the ",(0,r.kt)("a",{parentName:"p",href:"https://www.cni.dev/plugins/current/main/bridge/"},"Bridge CNI plugin")," to create a L2 network that switches traffic. Rogue pods with ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capabilities can abuse that L2 network to launch attacks such as ",(0,r.kt)("a",{parentName:"p",href:"https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf"},"ARP spoofing"),". Therefore, as documented in the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"Kubernetes docs"),", please set a restricted profile that disables ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW")," on non-trustable pods.")),(0,r.kt)("h3",{id:"inbound-rules-for-k3s-server-nodes"},"Inbound Rules for K3s Server Nodes"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Protocol"),(0,r.kt)("th",{parentName:"tr",align:null},"Port"),(0,r.kt)("th",{parentName:"tr",align:null},"Source"),(0,r.kt)("th",{parentName:"tr",align:null},"Destination"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"2379-2380"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for HA with embedded etcd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"Agents"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"K3s supervisor and Kubernetes API Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"8472"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for Flannel VXLAN")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"10250"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Kubelet metrics")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51820"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv4")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51821"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv6")))),(0,r.kt)("p",null,"Typically, all outbound traffic is allowed."),(0,r.kt)("p",null,"Additional changes to the firewall may be required depending on the OS used. See ",(0,r.kt)("a",{parentName:"p",href:"/advanced/#additional-os-preparations"},"Additional OS Preparations"),"."),(0,r.kt)("h2",{id:"large-clusters"},"Large Clusters"),(0,r.kt)("p",null,"Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"MySQL"),(0,r.kt)("li",{parentName:"ul"},"PostgreSQL"),(0,r.kt)("li",{parentName:"ul"},"etcd")),(0,r.kt)("h3",{id:"cpu-and-memory"},"CPU and Memory"),(0,r.kt)("p",null,"The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,r.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64 GB")))),(0,r.kt)("h3",{id:"disks-1"},"Disks"),(0,r.kt)("p",null,"The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS."),(0,r.kt)("h3",{id:"network"},"Network"),(0,r.kt)("p",null,"You should consider increasing the subnet size for the cluster CIDR so that you don't run out of IPs for the pods. You can do that by passing the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," option to K3s server upon starting."),(0,r.kt)("h3",{id:"database"},"Database"),(0,r.kt)("p",null,"K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd.  See ",(0,r.kt)("a",{parentName:"p",href:"/datastore/"},"Cluster Datastore")," for more info."),(0,r.kt)("p",null,"The following is a sizing guide for the database resources you need to run large clusters:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,r.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"1"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64 GB")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1199],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(n),c=r,k=m["".concat(s,".").concat(c)]||m[c]||u[c]||l;return n?a.createElement(k,i(i({ref:t},p),{},{components:n})):a.createElement(k,i({ref:t},p))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},7750:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"Requirements",weight:1},i=void 0,o={unversionedId:"installation/requirements",id:"installation/requirements",title:"Requirements",description:"K3s is very lightweight, but has some minimum requirements as outlined below.",source:"@site/docs/installation/requirements.md",sourceDirName:"installation",slug:"/installation/requirements",permalink:"/installation/requirements",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Requirements",weight:1},sidebar:"mySidebar",previous:{title:"Installation",permalink:"/installation/"},next:{title:"Configuration Options",permalink:"/installation/configuration"}},s={},d=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Architecture",id:"architecture",level:2},{value:"Operating Systems",id:"operating-systems",level:2},{value:"Hardware",id:"hardware",level:2},{value:"Disks",id:"disks",level:4},{value:"Networking",id:"networking",level:2},{value:"Inbound Rules for K3s Server Nodes",id:"inbound-rules-for-k3s-server-nodes",level:3},{value:"Large Clusters",id:"large-clusters",level:2},{value:"CPU and Memory",id:"cpu-and-memory",level:3},{value:"Disks",id:"disks-1",level:3},{value:"Network",id:"network",level:3},{value:"Database",id:"database",level:3}],p={toc:d};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"K3s is very lightweight, but has some minimum requirements as outlined below."),(0,r.kt)("p",null,"Whether you're configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself."),(0,r.kt)("h2",{id:"prerequisites"},"Prerequisites"),(0,r.kt)("p",null,"Two nodes cannot have the same hostname."),(0,r.kt)("p",null,"If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the ",(0,r.kt)("inlineCode",{parentName:"p"},"--with-node-id")," option to append a random suffix for each node, or devise a unique name to pass with ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-name")," or ",(0,r.kt)("inlineCode",{parentName:"p"},"$K3S_NODE_NAME")," for each node you add to the cluster."),(0,r.kt)("h2",{id:"architecture"},"Architecture"),(0,r.kt)("p",null,"K3s is available for the following architectures:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"x86_64"),(0,r.kt)("li",{parentName:"ul"},"armhf"),(0,r.kt)("li",{parentName:"ul"},"arm64/aarch64"),(0,r.kt)("li",{parentName:"ul"},"s390x")),(0,r.kt)("admonition",{title:"ARM64 Page Size",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Prior to May 2023 releases (v1.24.14+k3s1, v1.25.10+k3s1, v1.26.5+k3s1, v1.27.2+k3s1), on ",(0,r.kt)("inlineCode",{parentName:"p"},"aarch64/arm64")," systems, the OS must use a 4k page size. ",(0,r.kt)("strong",{parentName:"p"},"RHEL9"),", ",(0,r.kt)("strong",{parentName:"p"},"Ubuntu"),", ",(0,r.kt)("strong",{parentName:"p"},"Raspberry PI OS"),", and ",(0,r.kt)("strong",{parentName:"p"},"SLES")," all meet this requirement.")),(0,r.kt)("h2",{id:"operating-systems"},"Operating Systems"),(0,r.kt)("p",null,"K3s is expected to work on most modern Linux systems."),(0,r.kt)("p",null,"Some OSs have specific requirements:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"If you are using ",(0,r.kt)("strong",{parentName:"li"},"(Red Hat/CentOS) Enterprise Linux"),", follow ",(0,r.kt)("a",{parentName:"li",href:"/advanced/#red-hat-enterprise-linux--centos"},"these steps")," for additional setup."),(0,r.kt)("li",{parentName:"ul"},"If you are using ",(0,r.kt)("strong",{parentName:"li"},"Raspberry Pi OS"),", follow ",(0,r.kt)("a",{parentName:"li",href:"/advanced/#raspberry-pi"},"these steps")," to switch to legacy iptables.")),(0,r.kt)("p",null,"For more information on which OSs were tested with Rancher managed K3s clusters, refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/support-maintenance-terms/"},"Rancher support and maintenance terms.")),(0,r.kt)("h2",{id:"hardware"},"Hardware"),(0,r.kt)("p",null,"Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Spec"),(0,r.kt)("th",{parentName:"tr",align:null},"Minimum"),(0,r.kt)("th",{parentName:"tr",align:null},"Recommended"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"CPU"),(0,r.kt)("td",{parentName:"tr",align:null},"1 core"),(0,r.kt)("td",{parentName:"tr",align:null},"2 cores")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"RAM"),(0,r.kt)("td",{parentName:"tr",align:null},"512 MB"),(0,r.kt)("td",{parentName:"tr",align:null},"1 GB")))),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"/reference/resource-profiling"},"Resource Profiling")," captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,r.kt)("admonition",{title:"Raspberry Pi and embedded etcd",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"If deploying K3s with embedded etcd on a Raspberry Pi, it is recommended that you use an external SSD. etcd is write intensive, and SD cards cannot handle the IO load.")),(0,r.kt)("h4",{id:"disks"},"Disks"),(0,r.kt)("p",null,"K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC."),(0,r.kt)("h2",{id:"networking"},"Networking"),(0,r.kt)("p",null,"The K3s server needs port 6443 to be accessible by all nodes."),(0,r.kt)("p",null,"The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s."),(0,r.kt)("p",null,"If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250."),(0,r.kt)("p",null,"If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380."),(0,r.kt)("admonition",{title:"Important",type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"Flannel relies on the ",(0,r.kt)("a",{parentName:"p",href:"https://www.cni.dev/plugins/current/main/bridge/"},"Bridge CNI plugin")," to create a L2 network that switches traffic. Rogue pods with ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capabilities can abuse that L2 network to launch attacks such as ",(0,r.kt)("a",{parentName:"p",href:"https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf"},"ARP spoofing"),". Therefore, as documented in the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"Kubernetes docs"),", please set a restricted profile that disables ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW")," on non-trustable pods.")),(0,r.kt)("h3",{id:"inbound-rules-for-k3s-server-nodes"},"Inbound Rules for K3s Server Nodes"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Protocol"),(0,r.kt)("th",{parentName:"tr",align:null},"Port"),(0,r.kt)("th",{parentName:"tr",align:null},"Source"),(0,r.kt)("th",{parentName:"tr",align:null},"Destination"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"2379-2380"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for HA with embedded etcd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"Agents"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"K3s supervisor and Kubernetes API Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"8472"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for Flannel VXLAN")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"10250"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Kubelet metrics")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51820"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv4")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51821"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,r.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv6")))),(0,r.kt)("p",null,"Typically, all outbound traffic is allowed."),(0,r.kt)("p",null,"Additional changes to the firewall may be required depending on the OS used. See ",(0,r.kt)("a",{parentName:"p",href:"/advanced/#additional-os-preparations"},"Additional OS Preparations"),"."),(0,r.kt)("h2",{id:"large-clusters"},"Large Clusters"),(0,r.kt)("p",null,"Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"MySQL"),(0,r.kt)("li",{parentName:"ul"},"PostgreSQL"),(0,r.kt)("li",{parentName:"ul"},"etcd")),(0,r.kt)("h3",{id:"cpu-and-memory"},"CPU and Memory"),(0,r.kt)("p",null,"The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,r.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64 GB")))),(0,r.kt)("h3",{id:"disks-1"},"Disks"),(0,r.kt)("p",null,"The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS."),(0,r.kt)("h3",{id:"network"},"Network"),(0,r.kt)("p",null,"You should consider increasing the subnet size for the cluster CIDR so that you don't run out of IPs for the pods. You can do that by passing the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," option to K3s server upon starting."),(0,r.kt)("h3",{id:"database"},"Database"),(0,r.kt)("p",null,"K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd.  See ",(0,r.kt)("a",{parentName:"p",href:"/datastore/"},"Cluster Datastore")," for more info."),(0,r.kt)("p",null,"The following is a sizing guide for the database resources you need to run large clusters:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,r.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"1"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64 GB")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/b1e02bd6.af715708.js b/assets/js/b1e02bd6.d146fce0.js
similarity index 98%
rename from assets/js/b1e02bd6.af715708.js
rename to assets/js/b1e02bd6.d146fce0.js
index 15f035e80..be1555ded 100644
--- a/assets/js/b1e02bd6.af715708.js
+++ b/assets/js/b1e02bd6.d146fce0.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7834],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>h});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),c=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=c(e.components);return a.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(n),h=r,m=d["".concat(l,".").concat(h)]||d[h]||p[h]||i;return n?a.createElement(m,o(o({ref:t},u),{},{components:n})):a.createElement(m,o({ref:t},u))}));function h(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var i=n.length,o=new Array(i);o[0]=d;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<i;c++)o[c]=n[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},4741:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>p,frontMatter:()=>i,metadata:()=>s,toc:()=>c});var a=n(3117),r=(n(7294),n(3905));const i={title:"Quick-Start Guide",weight:10},o=void 0,s={unversionedId:"quick-start/quick-start",id:"quick-start/quick-start",title:"Quick-Start Guide",description:"This guide will help you quickly launch a cluster with default options. The installation section covers in greater detail how K3s can be set up.",source:"@site/docs/quick-start/quick-start.md",sourceDirName:"quick-start",slug:"/quick-start/",permalink:"/quick-start/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Quick-Start Guide",weight:10},sidebar:"mySidebar",previous:{title:"Architecture",permalink:"/architecture/"},next:{title:"Installation",permalink:"/installation/"}},l={},c=[{value:"Install Script",id:"install-script",level:2}],u={toc:c};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This guide will help you quickly launch a cluster with default options. The ",(0,r.kt)("a",{parentName:"p",href:"/installation/"},"installation section")," covers in greater detail how K3s can be set up."),(0,r.kt)("p",null,"For information on how K3s components work together, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/architecture/"},"architecture section.")),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"New to Kubernetes? The official Kubernetes docs already have some great tutorials outlining the basics ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tutorials/kubernetes-basics/"},"here"),".")),(0,r.kt)("h2",{id:"install-script"},"Install Script"),(0,r.kt)("p",null,"K3s provides an installation script that is a convenient way to install it as a service on systemd or openrc based systems. This script is available at ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io."},"https://get.k3s.io.")," To install K3s using this method, just run:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"After running this installation:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"The K3s service will be configured to automatically restart after node reboots or if the process crashes or is killed"),(0,r.kt)("li",{parentName:"ul"},"Additional utilities will be installed, including ",(0,r.kt)("inlineCode",{parentName:"li"},"kubectl"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"crictl"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"ctr"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"k3s-killall.sh"),", and ",(0,r.kt)("inlineCode",{parentName:"li"},"k3s-uninstall.sh")),(0,r.kt)("li",{parentName:"ul"},"A ",(0,r.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," file will be written to ",(0,r.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/k3s.yaml")," and the kubectl installed by K3s will automatically use it")),(0,r.kt)("p",null,"A single-node server installation is a fully-functional Kubernetes cluster, including all the datastore, control-plane, kubelet, and container runtime components necessary to host workload pods. It is not necessary to add additional server or agents nodes, but you may want to do so to add additional capacity or redundancy to your cluster."),(0,r.kt)("p",null,"To install additional agent nodes and add them to the cluster, run the installation script with the ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," environment variables. Here is an example showing how to join an agent:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n")),(0,r.kt)("p",null,"Setting the ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL")," parameter causes the installer to configure K3s as an agent, instead of a server. The K3s agent will register with the K3s server listening at the supplied URL. The value to use for ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," is stored at ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/node-token")," on your server node."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Each machine must have a unique hostname. If your machines do not have unique hostnames, pass the ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," environment variable and provide a value with a valid and unique hostname for each node.")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7834],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>h});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)n=i[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),c=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=c(e.components);return a.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(n),h=r,m=d["".concat(l,".").concat(h)]||d[h]||p[h]||i;return n?a.createElement(m,o(o({ref:t},u),{},{components:n})):a.createElement(m,o({ref:t},u))}));function h(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var i=n.length,o=new Array(i);o[0]=d;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,o[1]=s;for(var c=2;c<i;c++)o[c]=n[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},4741:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>p,frontMatter:()=>i,metadata:()=>s,toc:()=>c});var a=n(3117),r=(n(7294),n(3905));const i={title:"Quick-Start Guide",weight:10},o=void 0,s={unversionedId:"quick-start/quick-start",id:"quick-start/quick-start",title:"Quick-Start Guide",description:"This guide will help you quickly launch a cluster with default options. The installation section covers in greater detail how K3s can be set up.",source:"@site/docs/quick-start/quick-start.md",sourceDirName:"quick-start",slug:"/quick-start/",permalink:"/quick-start/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Quick-Start Guide",weight:10},sidebar:"mySidebar",previous:{title:"Architecture",permalink:"/architecture/"},next:{title:"Installation",permalink:"/installation/"}},l={},c=[{value:"Install Script",id:"install-script",level:2}],u={toc:c};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This guide will help you quickly launch a cluster with default options. The ",(0,r.kt)("a",{parentName:"p",href:"/installation/"},"installation section")," covers in greater detail how K3s can be set up."),(0,r.kt)("p",null,"For information on how K3s components work together, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/architecture/"},"architecture section.")),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"New to Kubernetes? The official Kubernetes docs already have some great tutorials outlining the basics ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tutorials/kubernetes-basics/"},"here"),".")),(0,r.kt)("h2",{id:"install-script"},"Install Script"),(0,r.kt)("p",null,"K3s provides an installation script that is a convenient way to install it as a service on systemd or openrc based systems. This script is available at ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io."},"https://get.k3s.io.")," To install K3s using this method, just run:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"After running this installation:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"The K3s service will be configured to automatically restart after node reboots or if the process crashes or is killed"),(0,r.kt)("li",{parentName:"ul"},"Additional utilities will be installed, including ",(0,r.kt)("inlineCode",{parentName:"li"},"kubectl"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"crictl"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"ctr"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"k3s-killall.sh"),", and ",(0,r.kt)("inlineCode",{parentName:"li"},"k3s-uninstall.sh")),(0,r.kt)("li",{parentName:"ul"},"A ",(0,r.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," file will be written to ",(0,r.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/k3s.yaml")," and the kubectl installed by K3s will automatically use it")),(0,r.kt)("p",null,"A single-node server installation is a fully-functional Kubernetes cluster, including all the datastore, control-plane, kubelet, and container runtime components necessary to host workload pods. It is not necessary to add additional server or agents nodes, but you may want to do so to add additional capacity or redundancy to your cluster."),(0,r.kt)("p",null,"To install additional agent nodes and add them to the cluster, run the installation script with the ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," environment variables. Here is an example showing how to join an agent:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n")),(0,r.kt)("p",null,"Setting the ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL")," parameter causes the installer to configure K3s as an agent, instead of a server. The K3s agent will register with the K3s server listening at the supplied URL. The value to use for ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," is stored at ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/node-token")," on your server node."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Each machine must have a unique hostname. If your machines do not have unique hostnames, pass the ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," environment variable and provide a value with a valid and unique hostname for each node.")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/b36bdd38.a80460c2.js b/assets/js/b36bdd38.aa83f99e.js
similarity index 98%
rename from assets/js/b36bdd38.a80460c2.js
rename to assets/js/b36bdd38.aa83f99e.js
index bb0ba4197..ba5697621 100644
--- a/assets/js/b36bdd38.a80460c2.js
+++ b/assets/js/b36bdd38.aa83f99e.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6895],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},s=Object.keys(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),d=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},p=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,s=e.originalType,l=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),p=d(r),m=a,h=p["".concat(l,".").concat(m)]||p[m]||u[m]||s;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=r.length,o=new Array(s);o[0]=p;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var d=2;d<s;d++)o[d]=r[d];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}p.displayName="MDXCreateElement"},748:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>s,metadata:()=>i,toc:()=>d});var n=r(3117),a=(r(7294),r(3905));const s={title:"High Availability Embedded etcd",weight:40},o=void 0,i={unversionedId:"datastore/ha-embedded",id:"datastore/ha-embedded",title:"High Availability Embedded etcd",description:"Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.",source:"@site/docs/datastore/ha-embedded.md",sourceDirName:"datastore",slug:"/datastore/ha-embedded",permalink:"/datastore/ha-embedded",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"High Availability Embedded etcd",weight:40},sidebar:"mySidebar",previous:{title:"Backup and Restore",permalink:"/datastore/backup-restore"},next:{title:"High Availability External DB",permalink:"/datastore/ha"}},l={},d=[{value:"Existing single-node clusters",id:"existing-single-node-clusters",level:2}],c={toc:d};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.")),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"HA embedded etcd cluster must be comprised of an odd number of server nodes for etcd to maintain quorum. For a cluster with n servers, quorum is (n/2)+1. For any odd-sized cluster, adding one node will always increase the number of nodes necessary for quorum. Although adding a node to an odd-sized cluster appears better since there are more machines, the fault tolerance is worse since exactly the same number of nodes may fail without losing quorum but there are more nodes that can fail.")),(0,a.kt)("p",null,"An HA K3s cluster with embedded etcd is composed of:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Three or more ",(0,a.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services, as well as host the embedded etcd datastore."),(0,a.kt)("li",{parentName:"ul"},"Optional: Zero or more ",(0,a.kt)("strong",{parentName:"li"},"agent nodes")," that are designated to run your apps and services"),(0,a.kt)("li",{parentName:"ul"},"Optional: A ",(0,a.kt)("strong",{parentName:"li"},"fixed registration address")," for agent nodes to register with the cluster")),(0,a.kt)("p",null,"To get started, first launch a server node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"cluster-init")," flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster."),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server \\\n    --cluster-init \\\n    --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address\n")),(0,a.kt)("p",null,"After launching the first server, join the second and third servers to the cluster using the shared secret:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server \\\n    --server https://<ip or hostname of server1>:6443 \\\n    --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address\n")),(0,a.kt)("p",null,"Check to see that the second and third servers are now part of the cluster:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME        STATUS   ROLES                       AGE   VERSION\nserver1     Ready    control-plane,etcd,master   28m   vX.Y.Z\nserver2     Ready    control-plane,etcd,master   13m   vX.Y.Z\nserver3     Ready    control-plane,etcd,master   10m   vX.Y.Z\n")),(0,a.kt)("p",null,"Now you have a highly available control plane. Any successfully clustered servers can be used in the ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," argument to join additional server and agent nodes. Joining additional agent nodes to the cluster follows the same procedure as servers:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - agent --server https://<ip or hostname of server>:6443\n")),(0,a.kt)("p",null,"There are a few config flags that must be the same in all server nodes:         "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Network related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,a.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")),(0,a.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("h2",{id:"existing-single-node-clusters"},"Existing single-node clusters"),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Available as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.2%2Bk3s1"},"v1.22.2+k3s1"))),(0,a.kt)("p",null,"If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," flag. Once you've done that, you'll be able to add additional instances as described above."),(0,a.kt)("p",null,"If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--datastore-endpoint"),", etc) are ignored."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6895],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},s=Object.keys(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)r=s[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),d=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},p=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,s=e.originalType,l=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),p=d(r),m=a,h=p["".concat(l,".").concat(m)]||p[m]||u[m]||s;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=r.length,o=new Array(s);o[0]=p;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var d=2;d<s;d++)o[d]=r[d];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}p.displayName="MDXCreateElement"},748:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>s,metadata:()=>i,toc:()=>d});var n=r(3117),a=(r(7294),r(3905));const s={title:"High Availability Embedded etcd",weight:40},o=void 0,i={unversionedId:"datastore/ha-embedded",id:"datastore/ha-embedded",title:"High Availability Embedded etcd",description:"Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.",source:"@site/docs/datastore/ha-embedded.md",sourceDirName:"datastore",slug:"/datastore/ha-embedded",permalink:"/datastore/ha-embedded",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"High Availability Embedded etcd",weight:40},sidebar:"mySidebar",previous:{title:"Backup and Restore",permalink:"/datastore/backup-restore"},next:{title:"High Availability External DB",permalink:"/datastore/ha"}},l={},d=[{value:"Existing single-node clusters",id:"existing-single-node-clusters",level:2}],c={toc:d};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.")),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"HA embedded etcd cluster must be comprised of an odd number of server nodes for etcd to maintain quorum. For a cluster with n servers, quorum is (n/2)+1. For any odd-sized cluster, adding one node will always increase the number of nodes necessary for quorum. Although adding a node to an odd-sized cluster appears better since there are more machines, the fault tolerance is worse since exactly the same number of nodes may fail without losing quorum but there are more nodes that can fail.")),(0,a.kt)("p",null,"An HA K3s cluster with embedded etcd is composed of:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Three or more ",(0,a.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services, as well as host the embedded etcd datastore."),(0,a.kt)("li",{parentName:"ul"},"Optional: Zero or more ",(0,a.kt)("strong",{parentName:"li"},"agent nodes")," that are designated to run your apps and services"),(0,a.kt)("li",{parentName:"ul"},"Optional: A ",(0,a.kt)("strong",{parentName:"li"},"fixed registration address")," for agent nodes to register with the cluster")),(0,a.kt)("p",null,"To get started, first launch a server node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"cluster-init")," flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster."),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server \\\n    --cluster-init \\\n    --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address\n")),(0,a.kt)("p",null,"After launching the first server, join the second and third servers to the cluster using the shared secret:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server \\\n    --server https://<ip or hostname of server1>:6443 \\\n    --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address\n")),(0,a.kt)("p",null,"Check to see that the second and third servers are now part of the cluster:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME        STATUS   ROLES                       AGE   VERSION\nserver1     Ready    control-plane,etcd,master   28m   vX.Y.Z\nserver2     Ready    control-plane,etcd,master   13m   vX.Y.Z\nserver3     Ready    control-plane,etcd,master   10m   vX.Y.Z\n")),(0,a.kt)("p",null,"Now you have a highly available control plane. Any successfully clustered servers can be used in the ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," argument to join additional server and agent nodes. Joining additional agent nodes to the cluster follows the same procedure as servers:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - agent --server https://<ip or hostname of server>:6443\n")),(0,a.kt)("p",null,"There are a few config flags that must be the same in all server nodes:         "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Network related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,a.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")),(0,a.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("h2",{id:"existing-single-node-clusters"},"Existing single-node clusters"),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Available as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.2%2Bk3s1"},"v1.22.2+k3s1"))),(0,a.kt)("p",null,"If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," flag. Once you've done that, you'll be able to add additional instances as described above."),(0,a.kt)("p",null,"If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--datastore-endpoint"),", etc) are ignored."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/ba3a957c.e93ecacc.js b/assets/js/ba3a957c.85248db6.js
similarity index 98%
rename from assets/js/ba3a957c.e93ecacc.js
rename to assets/js/ba3a957c.85248db6.js
index 00b5301ba..623f9fe1c 100644
--- a/assets/js/ba3a957c.e93ecacc.js
+++ b/assets/js/ba3a957c.85248db6.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8776],{3905:(e,t,a)=>{a.d(t,{Zo:()=>l,kt:()=>m});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function i(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var d=r.createContext({}),c=function(e){var t=r.useContext(d),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},l=function(e){var t=c(e.components);return r.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,o=e.originalType,d=e.parentName,l=i(e,["components","mdxType","originalType","parentName"]),u=c(a),m=n,k=u["".concat(d,".").concat(m)]||u[m]||p[m]||o;return a?r.createElement(k,s(s({ref:t},l),{},{components:a})):r.createElement(k,s({ref:t},l))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=a.length,s=new Array(o);s[0]=u;var i={};for(var d in t)hasOwnProperty.call(t,d)&&(i[d]=t[d]);i.originalType=e,i.mdxType="string"==typeof e?e:n,s[1]=i;for(var c=2;c<o;c++)s[c]=a[c];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}u.displayName="MDXCreateElement"},4664:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>d,contentTitle:()=>s,default:()=>p,frontMatter:()=>o,metadata:()=>i,toc:()=>c});var r=a(3117),n=(a(7294),a(3905));const o={title:"Backup and Restore",weight:26},s=void 0,i={unversionedId:"datastore/backup-restore",id:"datastore/backup-restore",title:"Backup and Restore",description:"The way K3s is backed up and restored depends on which type of datastore is used.",source:"@site/docs/datastore/backup-restore.md",sourceDirName:"datastore",slug:"/datastore/backup-restore",permalink:"/datastore/backup-restore",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Backup and Restore",weight:26},sidebar:"mySidebar",previous:{title:"Cluster Datastore",permalink:"/datastore/"},next:{title:"High Availability Embedded etcd",permalink:"/datastore/ha-embedded"}},d={},c=[{value:"Backup and Restore with SQLite",id:"backup-and-restore-with-sqlite",level:2},{value:"Backup and Restore with External Datastore",id:"backup-and-restore-with-external-datastore",level:2},{value:"Backup and Restore with Embedded etcd Datastore",id:"backup-and-restore-with-embedded-etcd-datastore",level:2}],l={toc:c};function p(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},l,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"The way K3s is backed up and restored depends on which type of datastore is used."),(0,n.kt)("admonition",{type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"In addition to backing up the datastore itself, you must also back up the server token file at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),".\nYou must restore this file, or pass its value into the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," option, when restoring from backup.\nIf you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.")),(0,n.kt)("h2",{id:"backup-and-restore-with-sqlite"},"Backup and Restore with SQLite"),(0,n.kt)("p",null,"No special commands are required to back up or restore the SQLite datastore. "),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"To back up the SQLite datastore, take a copy of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db/"),"."),(0,n.kt)("li",{parentName:"ul"},"To restore the SQLite datastore, restore the contents of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db")," (and the token, as discussed above).")),(0,n.kt)("h2",{id:"backup-and-restore-with-external-datastore"},"Backup and Restore with External Datastore"),(0,n.kt)("p",null,"When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump."),(0,n.kt)("p",null,"We recommend configuring the database to take recurring snapshots."),(0,n.kt)("p",null,"For details on taking database snapshots and restoring your database from them, refer to the official database documentation:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html"},"Official MySQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.postgresql.org/docs/8.3/backup-dump.html"},"Official PostgreSQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://etcd.io/docs/latest/op-guide/recovery/"},"Official etcd documentation"))),(0,n.kt)("h2",{id:"backup-and-restore-with-embedded-etcd-datastore"},"Backup and Restore with Embedded etcd Datastore"),(0,n.kt)("p",null,"See the ",(0,n.kt)("a",{parentName:"p",href:"/cli/etcd-snapshot"},(0,n.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," command documentation")," for information on performing backup and restore operations on the embedded etcd datastore."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8776],{3905:(e,t,a)=>{a.d(t,{Zo:()=>l,kt:()=>m});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function i(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},o=Object.keys(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)a=o[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var d=r.createContext({}),c=function(e){var t=r.useContext(d),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},l=function(e){var t=c(e.components);return r.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,o=e.originalType,d=e.parentName,l=i(e,["components","mdxType","originalType","parentName"]),u=c(a),m=n,k=u["".concat(d,".").concat(m)]||u[m]||p[m]||o;return a?r.createElement(k,s(s({ref:t},l),{},{components:a})):r.createElement(k,s({ref:t},l))}));function m(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=a.length,s=new Array(o);s[0]=u;var i={};for(var d in t)hasOwnProperty.call(t,d)&&(i[d]=t[d]);i.originalType=e,i.mdxType="string"==typeof e?e:n,s[1]=i;for(var c=2;c<o;c++)s[c]=a[c];return r.createElement.apply(null,s)}return r.createElement.apply(null,a)}u.displayName="MDXCreateElement"},4664:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>d,contentTitle:()=>s,default:()=>p,frontMatter:()=>o,metadata:()=>i,toc:()=>c});var r=a(3117),n=(a(7294),a(3905));const o={title:"Backup and Restore",weight:26},s=void 0,i={unversionedId:"datastore/backup-restore",id:"datastore/backup-restore",title:"Backup and Restore",description:"The way K3s is backed up and restored depends on which type of datastore is used.",source:"@site/docs/datastore/backup-restore.md",sourceDirName:"datastore",slug:"/datastore/backup-restore",permalink:"/datastore/backup-restore",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Backup and Restore",weight:26},sidebar:"mySidebar",previous:{title:"Cluster Datastore",permalink:"/datastore/"},next:{title:"High Availability Embedded etcd",permalink:"/datastore/ha-embedded"}},d={},c=[{value:"Backup and Restore with SQLite",id:"backup-and-restore-with-sqlite",level:2},{value:"Backup and Restore with External Datastore",id:"backup-and-restore-with-external-datastore",level:2},{value:"Backup and Restore with Embedded etcd Datastore",id:"backup-and-restore-with-embedded-etcd-datastore",level:2}],l={toc:c};function p(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},l,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"The way K3s is backed up and restored depends on which type of datastore is used."),(0,n.kt)("admonition",{type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"In addition to backing up the datastore itself, you must also back up the server token file at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),".\nYou must restore this file, or pass its value into the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," option, when restoring from backup.\nIf you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.")),(0,n.kt)("h2",{id:"backup-and-restore-with-sqlite"},"Backup and Restore with SQLite"),(0,n.kt)("p",null,"No special commands are required to back up or restore the SQLite datastore. "),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"To back up the SQLite datastore, take a copy of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db/"),"."),(0,n.kt)("li",{parentName:"ul"},"To restore the SQLite datastore, restore the contents of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db")," (and the token, as discussed above).")),(0,n.kt)("h2",{id:"backup-and-restore-with-external-datastore"},"Backup and Restore with External Datastore"),(0,n.kt)("p",null,"When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump."),(0,n.kt)("p",null,"We recommend configuring the database to take recurring snapshots."),(0,n.kt)("p",null,"For details on taking database snapshots and restoring your database from them, refer to the official database documentation:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html"},"Official MySQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.postgresql.org/docs/8.3/backup-dump.html"},"Official PostgreSQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://etcd.io/docs/latest/op-guide/recovery/"},"Official etcd documentation"))),(0,n.kt)("h2",{id:"backup-and-restore-with-embedded-etcd-datastore"},"Backup and Restore with Embedded etcd Datastore"),(0,n.kt)("p",null,"See the ",(0,n.kt)("a",{parentName:"p",href:"/cli/etcd-snapshot"},(0,n.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," command documentation")," for information on performing backup and restore operations on the embedded etcd datastore."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/c513f62d.37df4863.js b/assets/js/c513f62d.d5cad0d9.js
similarity index 97%
rename from assets/js/c513f62d.37df4863.js
rename to assets/js/c513f62d.d5cad0d9.js
index 5c4b93692..23055bd61 100644
--- a/assets/js/c513f62d.37df4863.js
+++ b/assets/js/c513f62d.d5cad0d9.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2563],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>d});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),i=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},u=function(e){var t=i(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,c=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),m=i(r),d=a,f=m["".concat(l,".").concat(d)]||m[d]||p[d]||c;return r?n.createElement(f,s(s({ref:t},u),{},{components:r})):n.createElement(f,s({ref:t},u))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var c=r.length,s=new Array(c);s[0]=m;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:a,s[1]=o;for(var i=2;i<c;i++)s[i]=r[i];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},28:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>s,default:()=>p,frontMatter:()=>c,metadata:()=>o,toc:()=>i});var n=r(3117),a=(r(7294),r(3905));const c={title:"Cluster Access",weight:21},s=void 0,o={unversionedId:"cluster-access/cluster-access",id:"cluster-access/cluster-access",title:"Cluster Access",description:"The kubeconfig file stored at /etc/rancher/k3s/k3s.yaml is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the KUBECONFIG environment variable or by invoking the --kubeconfig command line flag. Refer to the examples below for details.",source:"@site/docs/cluster-access/cluster-access.md",sourceDirName:"cluster-access",slug:"/cluster-access/",permalink:"/cluster-access/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Cluster Access",weight:21},sidebar:"mySidebar",previous:{title:"Cluster Load Balancer",permalink:"/datastore/cluster-loadbalancer"},next:{title:"Upgrades",permalink:"/upgrades/"}},l={},i=[{value:"Accessing the Cluster from Outside with kubectl",id:"accessing-the-cluster-from-outside-with-kubectl",level:3}],u={toc:i};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"The kubeconfig file stored at ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the ",(0,a.kt)("inlineCode",{parentName:"p"},"KUBECONFIG")," environment variable or by invoking the ",(0,a.kt)("inlineCode",{parentName:"p"},"--kubeconfig")," command line flag. Refer to the examples below for details."),(0,a.kt)("p",null,"Leverage the KUBECONFIG environment variable:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\nkubectl get pods --all-namespaces\nhelm ls --all-namespaces\n")),(0,a.kt)("p",null,"Or specify the location of the kubeconfig file in the command:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces\nhelm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces\n")),(0,a.kt)("h3",{id:"accessing-the-cluster-from-outside-with-kubectl"},"Accessing the Cluster from Outside with kubectl"),(0,a.kt)("p",null,"Copy ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," on your machine located outside the cluster as ",(0,a.kt)("inlineCode",{parentName:"p"},"~/.kube/config"),". Then replace the value of the ",(0,a.kt)("inlineCode",{parentName:"p"},"server")," field with the IP or name of your K3s server. ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl")," can now manage your K3s cluster."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2563],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>d});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),i=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},u=function(e){var t=i(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,c=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),m=i(r),d=a,f=m["".concat(l,".").concat(d)]||m[d]||p[d]||c;return r?n.createElement(f,s(s({ref:t},u),{},{components:r})):n.createElement(f,s({ref:t},u))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var c=r.length,s=new Array(c);s[0]=m;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:a,s[1]=o;for(var i=2;i<c;i++)s[i]=r[i];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},28:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>s,default:()=>p,frontMatter:()=>c,metadata:()=>o,toc:()=>i});var n=r(3117),a=(r(7294),r(3905));const c={title:"Cluster Access",weight:21},s=void 0,o={unversionedId:"cluster-access/cluster-access",id:"cluster-access/cluster-access",title:"Cluster Access",description:"The kubeconfig file stored at /etc/rancher/k3s/k3s.yaml is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the KUBECONFIG environment variable or by invoking the --kubeconfig command line flag. Refer to the examples below for details.",source:"@site/docs/cluster-access/cluster-access.md",sourceDirName:"cluster-access",slug:"/cluster-access/",permalink:"/cluster-access/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Cluster Access",weight:21},sidebar:"mySidebar",previous:{title:"Cluster Load Balancer",permalink:"/datastore/cluster-loadbalancer"},next:{title:"Upgrades",permalink:"/upgrades/"}},l={},i=[{value:"Accessing the Cluster from Outside with kubectl",id:"accessing-the-cluster-from-outside-with-kubectl",level:3}],u={toc:i};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"The kubeconfig file stored at ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the ",(0,a.kt)("inlineCode",{parentName:"p"},"KUBECONFIG")," environment variable or by invoking the ",(0,a.kt)("inlineCode",{parentName:"p"},"--kubeconfig")," command line flag. Refer to the examples below for details."),(0,a.kt)("p",null,"Leverage the KUBECONFIG environment variable:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\nkubectl get pods --all-namespaces\nhelm ls --all-namespaces\n")),(0,a.kt)("p",null,"Or specify the location of the kubeconfig file in the command:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces\nhelm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces\n")),(0,a.kt)("h3",{id:"accessing-the-cluster-from-outside-with-kubectl"},"Accessing the Cluster from Outside with kubectl"),(0,a.kt)("p",null,"Copy ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," on your machine located outside the cluster as ",(0,a.kt)("inlineCode",{parentName:"p"},"~/.kube/config"),". Then replace the value of the ",(0,a.kt)("inlineCode",{parentName:"p"},"server")," field with the IP or name of your K3s server. ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl")," can now manage your K3s cluster."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/d8ed1217.1936c38f.js b/assets/js/d8ed1217.8aca6f21.js
similarity index 98%
rename from assets/js/d8ed1217.1936c38f.js
rename to assets/js/d8ed1217.8aca6f21.js
index 51fa18aa3..1ecdce451 100644
--- a/assets/js/d8ed1217.1936c38f.js
+++ b/assets/js/d8ed1217.8aca6f21.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2745],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),p=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):s(s({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(o.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),d=p(n),m=r,g=d["".concat(o,".").concat(m)]||d[m]||c[m]||l;return n?a.createElement(g,s(s({ref:t},u),{},{components:n})):a.createElement(g,s({ref:t},u))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,s=new Array(l);s[0]=d;var i={};for(var o in t)hasOwnProperty.call(t,o)&&(i[o]=t[o]);i.originalType=e,i.mdxType="string"==typeof e?e:r,s[1]=i;for(var p=2;p<l;p++)s[p]=n[p];return a.createElement.apply(null,s)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},7036:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>l,metadata:()=>i,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const l={title:"Manual Upgrades",weight:10},s=void 0,i={unversionedId:"upgrades/manual",id:"upgrades/manual",title:"Manual Upgrades",description:"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.",source:"@site/docs/upgrades/manual.md",sourceDirName:"upgrades",slug:"/upgrades/manual",permalink:"/upgrades/manual",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Manual Upgrades",weight:10},sidebar:"mySidebar",previous:{title:"Stopping K3s",permalink:"/upgrades/killall"},next:{title:"Automated Upgrades",permalink:"/upgrades/automated"}},o={},p=[{value:"Release Channels",id:"release-channels",level:3},{value:"Upgrade K3s Using the Installation Script",id:"upgrade-k3s-using-the-installation-script",level:3},{value:"Manually Upgrade K3s Using the Binary",id:"manually-upgrade-k3s-using-the-binary",level:3},{value:"Restarting K3s",id:"restarting-k3s",level:3}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"When upgrading, upgrade server nodes first one at a time, then any agent nodes.")),(0,r.kt)("h3",{id:"release-channels"},"Release Channels"),(0,r.kt)("p",null,"Upgrades performed via the installation script or using our ",(0,r.kt)("a",{parentName:"p",href:"/upgrades/automated"},"automated upgrades")," feature can be tied to different release channels. The following channels are available:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Channel"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"stable"),(0,r.kt)("td",{parentName:"tr",align:null},"(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"latest"),(0,r.kt)("td",{parentName:"tr",align:null},"Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"v1.26 (example)"),(0,r.kt)("td",{parentName:"tr",align:null},"There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.")))),(0,r.kt)("p",null,"For an exhaustive and up-to-date list of channels, you can visit the ",(0,r.kt)("a",{parentName:"p",href:"https://update.k3s.io/v1-release/channels"},"k3s channel service API"),". For more technical details on how channels work, you see the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/channelserver"},"channelserver project"),"."),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"upgrade-k3s-using-the-installation-script"},"Upgrade K3s Using the Installation Script"),(0,r.kt)("p",null,"To upgrade K3s from an older version you can re-run the installation script using the same configuration options you originally used when running the install script."),(0,r.kt)("admonition",{title:"Note",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," variable, ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," variables, and trailing shell arguments are all used by the install script to generate the systemd unit and environment file.\nIf you set configuration when originally running the install script, but do not set it again when re-running the install script, the original values will be lost."),(0,r.kt)("p",{parentName:"admonition"},"The contents of the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"configuration file")," are not managed by the install script.\nIf you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.")),(0,r.kt)("p",null,"For example, to upgrade to the current stable release:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"If you want to upgrade to a specific version you can run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("h3",{id:"manually-upgrade-k3s-using-the-binary"},"Manually Upgrade K3s Using the Binary"),(0,r.kt)("p",null,"Or to manually upgrade K3s:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Download the desired version of the K3s binary from ",(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")),(0,r.kt)("li",{parentName:"ol"},"Copy the downloaded binary to ",(0,r.kt)("inlineCode",{parentName:"li"},"/usr/local/bin/k3s")," (or your desired location)"),(0,r.kt)("li",{parentName:"ol"},"Stop the old k3s binary"),(0,r.kt)("li",{parentName:"ol"},"Launch the new k3s binary")),(0,r.kt)("h3",{id:"restarting-k3s"},"Restarting K3s"),(0,r.kt)("p",null,"Restarting K3s is supported by the installation script for systemd and OpenRC."),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"systemd")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s-agent\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"OpenRC")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s restart\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s-agent restart\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2745],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),p=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):s(s({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(o.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),d=p(n),m=r,g=d["".concat(o,".").concat(m)]||d[m]||c[m]||l;return n?a.createElement(g,s(s({ref:t},u),{},{components:n})):a.createElement(g,s({ref:t},u))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,s=new Array(l);s[0]=d;var i={};for(var o in t)hasOwnProperty.call(t,o)&&(i[o]=t[o]);i.originalType=e,i.mdxType="string"==typeof e?e:r,s[1]=i;for(var p=2;p<l;p++)s[p]=n[p];return a.createElement.apply(null,s)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},7036:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>l,metadata:()=>i,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const l={title:"Manual Upgrades",weight:10},s=void 0,i={unversionedId:"upgrades/manual",id:"upgrades/manual",title:"Manual Upgrades",description:"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.",source:"@site/docs/upgrades/manual.md",sourceDirName:"upgrades",slug:"/upgrades/manual",permalink:"/upgrades/manual",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Manual Upgrades",weight:10},sidebar:"mySidebar",previous:{title:"Stopping K3s",permalink:"/upgrades/killall"},next:{title:"Automated Upgrades",permalink:"/upgrades/automated"}},o={},p=[{value:"Release Channels",id:"release-channels",level:3},{value:"Upgrade K3s Using the Installation Script",id:"upgrade-k3s-using-the-installation-script",level:3},{value:"Manually Upgrade K3s Using the Binary",id:"manually-upgrade-k3s-using-the-binary",level:3},{value:"Restarting K3s",id:"restarting-k3s",level:3}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"When upgrading, upgrade server nodes first one at a time, then any agent nodes.")),(0,r.kt)("h3",{id:"release-channels"},"Release Channels"),(0,r.kt)("p",null,"Upgrades performed via the installation script or using our ",(0,r.kt)("a",{parentName:"p",href:"/upgrades/automated"},"automated upgrades")," feature can be tied to different release channels. The following channels are available:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Channel"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"stable"),(0,r.kt)("td",{parentName:"tr",align:null},"(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"latest"),(0,r.kt)("td",{parentName:"tr",align:null},"Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"v1.26 (example)"),(0,r.kt)("td",{parentName:"tr",align:null},"There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.")))),(0,r.kt)("p",null,"For an exhaustive and up-to-date list of channels, you can visit the ",(0,r.kt)("a",{parentName:"p",href:"https://update.k3s.io/v1-release/channels"},"k3s channel service API"),". For more technical details on how channels work, you see the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/channelserver"},"channelserver project"),"."),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"upgrade-k3s-using-the-installation-script"},"Upgrade K3s Using the Installation Script"),(0,r.kt)("p",null,"To upgrade K3s from an older version you can re-run the installation script using the same configuration options you originally used when running the install script."),(0,r.kt)("admonition",{title:"Note",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," variable, ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," variables, and trailing shell arguments are all used by the install script to generate the systemd unit and environment file.\nIf you set configuration when originally running the install script, but do not set it again when re-running the install script, the original values will be lost."),(0,r.kt)("p",{parentName:"admonition"},"The contents of the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"configuration file")," are not managed by the install script.\nIf you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.")),(0,r.kt)("p",null,"For example, to upgrade to the current stable release:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"If you want to upgrade to a specific version you can run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("h3",{id:"manually-upgrade-k3s-using-the-binary"},"Manually Upgrade K3s Using the Binary"),(0,r.kt)("p",null,"Or to manually upgrade K3s:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Download the desired version of the K3s binary from ",(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")),(0,r.kt)("li",{parentName:"ol"},"Copy the downloaded binary to ",(0,r.kt)("inlineCode",{parentName:"li"},"/usr/local/bin/k3s")," (or your desired location)"),(0,r.kt)("li",{parentName:"ol"},"Stop the old k3s binary"),(0,r.kt)("li",{parentName:"ol"},"Launch the new k3s binary")),(0,r.kt)("h3",{id:"restarting-k3s"},"Restarting K3s"),(0,r.kt)("p",null,"Restarting K3s is supported by the installation script for systemd and OpenRC."),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"systemd")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s-agent\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"OpenRC")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s restart\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s-agent restart\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/dfcda264.2eb06be5.js b/assets/js/dfcda264.f8f0f919.js
similarity index 99%
rename from assets/js/dfcda264.2eb06be5.js
rename to assets/js/dfcda264.f8f0f919.js
index afef54b0b..39ebc45cd 100644
--- a/assets/js/dfcda264.2eb06be5.js
+++ b/assets/js/dfcda264.f8f0f919.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2098],{3905:(e,n,t)=>{t.d(n,{Zo:()=>d,kt:()=>h});var r=t(7294);function a(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function o(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?o(Object(t),!0).forEach((function(n){a(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function i(e,n){if(null==e)return{};var t,r,a=function(e,n){if(null==e)return{};var t,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],n.indexOf(t)>=0||(a[t]=e[t]);return a}(e,n);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(a[t]=e[t])}return a}var l=r.createContext({}),u=function(e){var n=r.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},d=function(e){var n=u(e.components);return r.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return r.createElement(r.Fragment,{},n)}},c=r.forwardRef((function(e,n){var t=e.components,a=e.mdxType,o=e.originalType,l=e.parentName,d=i(e,["components","mdxType","originalType","parentName"]),c=u(t),h=a,f=c["".concat(l,".").concat(h)]||c[h]||p[h]||o;return t?r.createElement(f,s(s({ref:n},d),{},{components:t})):r.createElement(f,s({ref:n},d))}));function h(e,n){var t=arguments,a=n&&n.mdxType;if("string"==typeof e||a){var o=t.length,s=new Array(o);s[0]=c;var i={};for(var l in n)hasOwnProperty.call(n,l)&&(i[l]=n[l]);i.originalType=e,i.mdxType="string"==typeof e?e:a,s[1]=i;for(var u=2;u<o;u++)s[u]=t[u];return r.createElement.apply(null,s)}return r.createElement.apply(null,t)}c.displayName="MDXCreateElement"},3969:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>p,frontMatter:()=>o,metadata:()=>i,toc:()=>u});var r=t(3117),a=(t(7294),t(3905));const o={title:"FAQ",weight:60},s=void 0,i={unversionedId:"faq/faq",id:"faq/faq",title:"FAQ",description:"The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s.",source:"@site/docs/faq/faq.md",sourceDirName:"faq",slug:"/faq/",permalink:"/faq/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"FAQ",weight:60},sidebar:"mySidebar",previous:{title:"Advanced Options / Configuration",permalink:"/advanced/"},next:{title:"CLI Tools",permalink:"/cli/"}},l={},u=[{value:"Is K3s a suitable replacement for Kubernetes?",id:"is-k3s-a-suitable-replacement-for-kubernetes",level:3},{value:"How can I use my own Ingress instead of Traefik?",id:"how-can-i-use-my-own-ingress-instead-of-traefik",level:3},{value:"Does K3s support Windows?",id:"does-k3s-support-windows",level:3},{value:"How can I build from source?",id:"how-can-i-build-from-source",level:3},{value:"Where are the K3s logs?",id:"where-are-the-k3s-logs",level:3},{value:"Can I run K3s in Docker?",id:"can-i-run-k3s-in-docker",level:3},{value:"What is the difference between K3s Server and Agent Tokens?",id:"what-is-the-difference-between-k3s-server-and-agent-tokens",level:3},{value:"How compatible are different versions of K3s?",id:"how-compatible-are-different-versions-of-k3s",level:3},{value:"I&#39;m having an issue, where can I get help?",id:"im-having-an-issue-where-can-i-get-help",level:3}],d={toc:u};function p(e){let{components:n,...t}=e;return(0,a.kt)("wrapper",(0,r.Z)({},d,t,{components:n,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s."),(0,a.kt)("h3",{id:"is-k3s-a-suitable-replacement-for-kubernetes"},"Is K3s a suitable replacement for Kubernetes?"),(0,a.kt)("p",null,"K3s is a CNCF-certified Kubernetes distribution, and can do everything required of a standard Kubernetes cluster. It is just a more lightweight version. See the ",(0,a.kt)("a",{parentName:"p",href:"/"},"main")," docs page for more details."),(0,a.kt)("h3",{id:"how-can-i-use-my-own-ingress-instead-of-traefik"},"How can I use my own Ingress instead of Traefik?"),(0,a.kt)("p",null,"Simply start K3s server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," and deploy your ingress."),(0,a.kt)("h3",{id:"does-k3s-support-windows"},"Does K3s support Windows?"),(0,a.kt)("p",null,"At this time K3s does not natively support Windows, however we are open to the idea in the future."),(0,a.kt)("h3",{id:"how-can-i-build-from-source"},"How can I build from source?"),(0,a.kt)("p",null,"Please reference the K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/BUILDING.md"},"BUILDING.md")," with instructions."),(0,a.kt)("h3",{id:"where-are-the-k3s-logs"},"Where are the K3s logs?"),(0,a.kt)("p",null,"The location of K3s logs will vary depending on how you run K3s and the node's OS."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"When run from the command line, logs are sent to stdout and stderr."),(0,a.kt)("li",{parentName:"ul"},"When running under openrc, logs will be created at ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),"."),(0,a.kt)("li",{parentName:"ul"},"When running under Systemd, logs will be sent to Journald and can be viewed using ",(0,a.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"."),(0,a.kt)("li",{parentName:"ul"},"Pod logs can be found at ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/pods"),"."),(0,a.kt)("li",{parentName:"ul"},"Containerd logs can be found at ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/containerd/containerd.log"),".")),(0,a.kt)("p",null,"You can generate more detailed logs by using the ",(0,a.kt)("inlineCode",{parentName:"p"},"--debug")," flag when starting K3s (or ",(0,a.kt)("inlineCode",{parentName:"p"},"debug: true")," in the configuration file)."),(0,a.kt)("p",null,"Kubernetes uses a logging framework known as ",(0,a.kt)("inlineCode",{parentName:"p"},"klog"),", which uses a single logging configuration for all components within a process.\nSince K3s runs all Kubernetes components within a single process, it is not possible to configure different log levels or destinations for individual Kubernetes components.\nUse of the ",(0,a.kt)("inlineCode",{parentName:"p"},"-v=<level>")," or ",(0,a.kt)("inlineCode",{parentName:"p"},"--vmodule=<module>=<level>")," component args will likely not have the desired effect. "),(0,a.kt)("p",null,"See ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#additional-logging-sources"},"Additional Logging Sources")," for even more log options."),(0,a.kt)("h3",{id:"can-i-run-k3s-in-docker"},"Can I run K3s in Docker?"),(0,a.kt)("p",null,"Yes, there are multiple ways to run K3s in Docker. See ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#running-k3s-in-docker"},"Advanced Options")," for more details."),(0,a.kt)("h3",{id:"what-is-the-difference-between-k3s-server-and-agent-tokens"},"What is the difference between K3s Server and Agent Tokens?"),(0,a.kt)("p",null,"For more information on managing K3s join tokens, see the ",(0,a.kt)("a",{parentName:"p",href:"/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," command documentation"),"."),(0,a.kt)("h3",{id:"how-compatible-are-different-versions-of-k3s"},"How compatible are different versions of K3s?"),(0,a.kt)("p",null,"In general, the ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies."),(0,a.kt)("p",null,"In short, servers can be newer than agents, but agents cannot be newer than servers."),(0,a.kt)("h3",{id:"im-having-an-issue-where-can-i-get-help"},"I'm having an issue, where can I get help?"),(0,a.kt)("p",null,"If you are having an issue with deploying K3s, you should:"),(0,a.kt)("p",null,"1) Check the ",(0,a.kt)("a",{parentName:"p",href:"/known-issues/"},"Known Issues")," page."),(0,a.kt)("p",null,"2) Check that you have resolved any ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#additional-os-preparations"},"Additional OS Preparation"),". Run ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s check-config")," and ensure that it passes."),(0,a.kt)("p",null,"3) Search the K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues"},"Issues")," and ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/discussions"},"Discussions")," for one that matches your problem."),(0,a.kt)("p",null,"4) Join the ",(0,a.kt)("a",{parentName:"p",href:"https://slack.rancher.io/"},"Rancher Slack")," K3s channel to get help."),(0,a.kt)("p",null,"5) Submit a ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/new/choose"},"New Issue")," on the K3s Github describing your setup and the issue you are experiencing."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2098],{3905:(e,n,t)=>{t.d(n,{Zo:()=>d,kt:()=>h});var r=t(7294);function a(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function o(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);n&&(r=r.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,r)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?o(Object(t),!0).forEach((function(n){a(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function i(e,n){if(null==e)return{};var t,r,a=function(e,n){if(null==e)return{};var t,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t=o[r],n.indexOf(t)>=0||(a[t]=e[t]);return a}(e,n);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)t=o[r],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(a[t]=e[t])}return a}var l=r.createContext({}),u=function(e){var n=r.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},d=function(e){var n=u(e.components);return r.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return r.createElement(r.Fragment,{},n)}},c=r.forwardRef((function(e,n){var t=e.components,a=e.mdxType,o=e.originalType,l=e.parentName,d=i(e,["components","mdxType","originalType","parentName"]),c=u(t),h=a,f=c["".concat(l,".").concat(h)]||c[h]||p[h]||o;return t?r.createElement(f,s(s({ref:n},d),{},{components:t})):r.createElement(f,s({ref:n},d))}));function h(e,n){var t=arguments,a=n&&n.mdxType;if("string"==typeof e||a){var o=t.length,s=new Array(o);s[0]=c;var i={};for(var l in n)hasOwnProperty.call(n,l)&&(i[l]=n[l]);i.originalType=e,i.mdxType="string"==typeof e?e:a,s[1]=i;for(var u=2;u<o;u++)s[u]=t[u];return r.createElement.apply(null,s)}return r.createElement.apply(null,t)}c.displayName="MDXCreateElement"},3969:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>p,frontMatter:()=>o,metadata:()=>i,toc:()=>u});var r=t(3117),a=(t(7294),t(3905));const o={title:"FAQ",weight:60},s=void 0,i={unversionedId:"faq/faq",id:"faq/faq",title:"FAQ",description:"The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s.",source:"@site/docs/faq/faq.md",sourceDirName:"faq",slug:"/faq/",permalink:"/faq/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"FAQ",weight:60},sidebar:"mySidebar",previous:{title:"Advanced Options / Configuration",permalink:"/advanced/"},next:{title:"CLI Tools",permalink:"/cli/"}},l={},u=[{value:"Is K3s a suitable replacement for Kubernetes?",id:"is-k3s-a-suitable-replacement-for-kubernetes",level:3},{value:"How can I use my own Ingress instead of Traefik?",id:"how-can-i-use-my-own-ingress-instead-of-traefik",level:3},{value:"Does K3s support Windows?",id:"does-k3s-support-windows",level:3},{value:"How can I build from source?",id:"how-can-i-build-from-source",level:3},{value:"Where are the K3s logs?",id:"where-are-the-k3s-logs",level:3},{value:"Can I run K3s in Docker?",id:"can-i-run-k3s-in-docker",level:3},{value:"What is the difference between K3s Server and Agent Tokens?",id:"what-is-the-difference-between-k3s-server-and-agent-tokens",level:3},{value:"How compatible are different versions of K3s?",id:"how-compatible-are-different-versions-of-k3s",level:3},{value:"I&#39;m having an issue, where can I get help?",id:"im-having-an-issue-where-can-i-get-help",level:3}],d={toc:u};function p(e){let{components:n,...t}=e;return(0,a.kt)("wrapper",(0,r.Z)({},d,t,{components:n,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s."),(0,a.kt)("h3",{id:"is-k3s-a-suitable-replacement-for-kubernetes"},"Is K3s a suitable replacement for Kubernetes?"),(0,a.kt)("p",null,"K3s is a CNCF-certified Kubernetes distribution, and can do everything required of a standard Kubernetes cluster. It is just a more lightweight version. See the ",(0,a.kt)("a",{parentName:"p",href:"/"},"main")," docs page for more details."),(0,a.kt)("h3",{id:"how-can-i-use-my-own-ingress-instead-of-traefik"},"How can I use my own Ingress instead of Traefik?"),(0,a.kt)("p",null,"Simply start K3s server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," and deploy your ingress."),(0,a.kt)("h3",{id:"does-k3s-support-windows"},"Does K3s support Windows?"),(0,a.kt)("p",null,"At this time K3s does not natively support Windows, however we are open to the idea in the future."),(0,a.kt)("h3",{id:"how-can-i-build-from-source"},"How can I build from source?"),(0,a.kt)("p",null,"Please reference the K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/BUILDING.md"},"BUILDING.md")," with instructions."),(0,a.kt)("h3",{id:"where-are-the-k3s-logs"},"Where are the K3s logs?"),(0,a.kt)("p",null,"The location of K3s logs will vary depending on how you run K3s and the node's OS."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"When run from the command line, logs are sent to stdout and stderr."),(0,a.kt)("li",{parentName:"ul"},"When running under openrc, logs will be created at ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),"."),(0,a.kt)("li",{parentName:"ul"},"When running under Systemd, logs will be sent to Journald and can be viewed using ",(0,a.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"."),(0,a.kt)("li",{parentName:"ul"},"Pod logs can be found at ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/pods"),"."),(0,a.kt)("li",{parentName:"ul"},"Containerd logs can be found at ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/containerd/containerd.log"),".")),(0,a.kt)("p",null,"You can generate more detailed logs by using the ",(0,a.kt)("inlineCode",{parentName:"p"},"--debug")," flag when starting K3s (or ",(0,a.kt)("inlineCode",{parentName:"p"},"debug: true")," in the configuration file)."),(0,a.kt)("p",null,"Kubernetes uses a logging framework known as ",(0,a.kt)("inlineCode",{parentName:"p"},"klog"),", which uses a single logging configuration for all components within a process.\nSince K3s runs all Kubernetes components within a single process, it is not possible to configure different log levels or destinations for individual Kubernetes components.\nUse of the ",(0,a.kt)("inlineCode",{parentName:"p"},"-v=<level>")," or ",(0,a.kt)("inlineCode",{parentName:"p"},"--vmodule=<module>=<level>")," component args will likely not have the desired effect. "),(0,a.kt)("p",null,"See ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#additional-logging-sources"},"Additional Logging Sources")," for even more log options."),(0,a.kt)("h3",{id:"can-i-run-k3s-in-docker"},"Can I run K3s in Docker?"),(0,a.kt)("p",null,"Yes, there are multiple ways to run K3s in Docker. See ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#running-k3s-in-docker"},"Advanced Options")," for more details."),(0,a.kt)("h3",{id:"what-is-the-difference-between-k3s-server-and-agent-tokens"},"What is the difference between K3s Server and Agent Tokens?"),(0,a.kt)("p",null,"For more information on managing K3s join tokens, see the ",(0,a.kt)("a",{parentName:"p",href:"/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," command documentation"),"."),(0,a.kt)("h3",{id:"how-compatible-are-different-versions-of-k3s"},"How compatible are different versions of K3s?"),(0,a.kt)("p",null,"In general, the ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies."),(0,a.kt)("p",null,"In short, servers can be newer than agents, but agents cannot be newer than servers."),(0,a.kt)("h3",{id:"im-having-an-issue-where-can-i-get-help"},"I'm having an issue, where can I get help?"),(0,a.kt)("p",null,"If you are having an issue with deploying K3s, you should:"),(0,a.kt)("p",null,"1) Check the ",(0,a.kt)("a",{parentName:"p",href:"/known-issues/"},"Known Issues")," page."),(0,a.kt)("p",null,"2) Check that you have resolved any ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#additional-os-preparations"},"Additional OS Preparation"),". Run ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s check-config")," and ensure that it passes."),(0,a.kt)("p",null,"3) Search the K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues"},"Issues")," and ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/discussions"},"Discussions")," for one that matches your problem."),(0,a.kt)("p",null,"4) Join the ",(0,a.kt)("a",{parentName:"p",href:"https://slack.rancher.io/"},"Rancher Slack")," K3s channel to get help."),(0,a.kt)("p",null,"5) Submit a ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/new/choose"},"New Issue")," on the K3s Github describing your setup and the issue you are experiencing."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/e2835484.a3d0785c.js b/assets/js/e2835484.c2f65b38.js
similarity index 98%
rename from assets/js/e2835484.a3d0785c.js
rename to assets/js/e2835484.c2f65b38.js
index ec0766dc7..281811d97 100644
--- a/assets/js/e2835484.a3d0785c.js
+++ b/assets/js/e2835484.c2f65b38.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9999],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},d=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},p=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,l=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),p=u(n),m=a,k=p["".concat(l,".").concat(m)]||p[m]||c[m]||s;return n?r.createElement(k,i(i({ref:t},d),{},{components:n})):r.createElement(k,i({ref:t},d))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,i=new Array(s);i[0]=p;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<s;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}p.displayName="MDXCreateElement"},8220:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>c,frontMatter:()=>s,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const s={title:"Known Issues",weight:70},i=void 0,o={unversionedId:"known-issues/known-issues",id:"known-issues/known-issues",title:"Known Issues",description:"The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release.",source:"@site/docs/known-issues/known-issues.md",sourceDirName:"known-issues",slug:"/known-issues/",permalink:"/known-issues/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Known Issues",weight:70},sidebar:"mySidebar",previous:{title:"Resource Profiling",permalink:"/reference/resource-profiling"},next:{title:"Security",permalink:"/security/"}},l={},u=[{value:"Snap Docker",id:"snap-docker",level:3},{value:"Iptables",id:"iptables",level:3},{value:"Rootless Mode",id:"rootless-mode",level:3},{value:"Upgrading Hardened Clusters from v1.24.x to v1.25.x",id:"hardened-125",level:3}],d={toc:u};function c(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release."),(0,a.kt)("h3",{id:"snap-docker"},"Snap Docker"),(0,a.kt)("p",null,"If you plan to use K3s with docker, Docker installed via a snap package is not recommended as it has been known to cause issues running K3s."),(0,a.kt)("h3",{id:"iptables"},"Iptables"),(0,a.kt)("p",null,"If you are running iptables in nftables mode instead of legacy you might encounter issues. We recommend utilizing newer iptables (such as 1.6.1+) to avoid issues. "),(0,a.kt)("p",null,"Additionally, versions 1.8.0-1.8.4 have known issues that can cause K3s to fail. See ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#old-iptables-versions"},"Additional OS Preparations")," for workarounds. "),(0,a.kt)("h3",{id:"rootless-mode"},"Rootless Mode"),(0,a.kt)("p",null,"Running K3s with Rootless mode is experimental and has several ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#known-issues-with-rootless-mode"},"known issues.")),(0,a.kt)("h3",{id:"hardened-125"},"Upgrading Hardened Clusters from v1.24.x to v1.25.x"),(0,a.kt)("p",null,"Kubernetes removed PodSecurityPolicy from v1.25 in favor of Pod Security Standards. You can read more about PSS in the ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"upstream documentation"),". For K3S, there are some manual steps that must be taken if any ",(0,a.kt)("inlineCode",{parentName:"p"},"PodSecurityPoliciy")," has been configured on the nodes."),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"On all nodes, update the ",(0,a.kt)("inlineCode",{parentName:"li"},"kube-apiserver-arg")," value to remove the ",(0,a.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicy")," admission-plugin. Add the following arg value instead: ",(0,a.kt)("inlineCode",{parentName:"li"},"'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'"),", but do NOT restart or upgrade K3S yet. Below is an example of what a configuration file might look like after this update for the node to be hardened:")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")),(0,a.kt)("ol",{start:2},(0,a.kt)("li",{parentName:"ol"},"Create the ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/psa.yaml")," file with the following contents. You may want to exempt more namespaces as well. The below example exempts ",(0,a.kt)("inlineCode",{parentName:"li"},"kube-system")," (required), ",(0,a.kt)("inlineCode",{parentName:"li"},"cis-operator-system")," (optional, but useful for when running security scans through Rancher), and ",(0,a.kt)("inlineCode",{parentName:"li"},"system-upgrade")," (required if doing ",(0,a.kt)("a",{parentName:"li",href:"/upgrades/automated"},"Automated Upgrades"),").")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system, system-upgrade]\n')),(0,a.kt)("ol",{start:3},(0,a.kt)("li",{parentName:"ol"},"Perform the upgrade as normal. If doing ",(0,a.kt)("a",{parentName:"li",href:"/upgrades/automated"},"Automated Upgrades"),", ensure that the namespace where the ",(0,a.kt)("inlineCode",{parentName:"li"},"system-upgrade-controller")," pod is running in is setup to be privileged in accordance with the ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels"},"Pod Security levels"),":")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: system-upgrade\n  labels:\n    # This value must be privileged for the controller to run successfully.\n    pod-security.kubernetes.io/enforce: privileged\n    pod-security.kubernetes.io/enforce-version: v1.25\n    # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.\n    pod-security.kubernetes.io/audit: privileged\n    pod-security.kubernetes.io/audit-version: v1.25\n    pod-security.kubernetes.io/warn: privileged\n    pod-security.kubernetes.io/warn-version: v1.25\n")),(0,a.kt)("ol",{start:4},(0,a.kt)("li",{parentName:"ol"},"After the upgrade is complete, remove any remaining PSP resources from the cluster. In many cases, there may be PodSecurityPolicies and associated RBAC resources in custom files used for hardening within ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/manifests/"),". Remove those resources and k3s will update automatically. Sometimes, due to timing, some of these may be left in the cluster, in which case you will need to delete them manually. If the ",(0,a.kt)("a",{parentName:"li",href:"/security/hardening-guide"},"Hardening Guide")," was previously followed, you should be able to delete them via the following:")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-sh"},"# Get the resources associated with PSPs\n$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp\n\n# Delete those resources:\n$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9999],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},d=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},p=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,l=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),p=u(n),m=a,k=p["".concat(l,".").concat(m)]||p[m]||c[m]||s;return n?r.createElement(k,i(i({ref:t},d),{},{components:n})):r.createElement(k,i({ref:t},d))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,i=new Array(s);i[0]=p;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<s;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}p.displayName="MDXCreateElement"},8220:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>c,frontMatter:()=>s,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const s={title:"Known Issues",weight:70},i=void 0,o={unversionedId:"known-issues/known-issues",id:"known-issues/known-issues",title:"Known Issues",description:"The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release.",source:"@site/docs/known-issues/known-issues.md",sourceDirName:"known-issues",slug:"/known-issues/",permalink:"/known-issues/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Known Issues",weight:70},sidebar:"mySidebar",previous:{title:"Resource Profiling",permalink:"/reference/resource-profiling"},next:{title:"Security",permalink:"/security/"}},l={},u=[{value:"Snap Docker",id:"snap-docker",level:3},{value:"Iptables",id:"iptables",level:3},{value:"Rootless Mode",id:"rootless-mode",level:3},{value:"Upgrading Hardened Clusters from v1.24.x to v1.25.x",id:"hardened-125",level:3}],d={toc:u};function c(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release."),(0,a.kt)("h3",{id:"snap-docker"},"Snap Docker"),(0,a.kt)("p",null,"If you plan to use K3s with docker, Docker installed via a snap package is not recommended as it has been known to cause issues running K3s."),(0,a.kt)("h3",{id:"iptables"},"Iptables"),(0,a.kt)("p",null,"If you are running iptables in nftables mode instead of legacy you might encounter issues. We recommend utilizing newer iptables (such as 1.6.1+) to avoid issues. "),(0,a.kt)("p",null,"Additionally, versions 1.8.0-1.8.4 have known issues that can cause K3s to fail. See ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#old-iptables-versions"},"Additional OS Preparations")," for workarounds. "),(0,a.kt)("h3",{id:"rootless-mode"},"Rootless Mode"),(0,a.kt)("p",null,"Running K3s with Rootless mode is experimental and has several ",(0,a.kt)("a",{parentName:"p",href:"/advanced/#known-issues-with-rootless-mode"},"known issues.")),(0,a.kt)("h3",{id:"hardened-125"},"Upgrading Hardened Clusters from v1.24.x to v1.25.x"),(0,a.kt)("p",null,"Kubernetes removed PodSecurityPolicy from v1.25 in favor of Pod Security Standards. You can read more about PSS in the ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"upstream documentation"),". For K3S, there are some manual steps that must be taken if any ",(0,a.kt)("inlineCode",{parentName:"p"},"PodSecurityPoliciy")," has been configured on the nodes."),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"On all nodes, update the ",(0,a.kt)("inlineCode",{parentName:"li"},"kube-apiserver-arg")," value to remove the ",(0,a.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicy")," admission-plugin. Add the following arg value instead: ",(0,a.kt)("inlineCode",{parentName:"li"},"'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'"),", but do NOT restart or upgrade K3S yet. Below is an example of what a configuration file might look like after this update for the node to be hardened:")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")),(0,a.kt)("ol",{start:2},(0,a.kt)("li",{parentName:"ol"},"Create the ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/psa.yaml")," file with the following contents. You may want to exempt more namespaces as well. The below example exempts ",(0,a.kt)("inlineCode",{parentName:"li"},"kube-system")," (required), ",(0,a.kt)("inlineCode",{parentName:"li"},"cis-operator-system")," (optional, but useful for when running security scans through Rancher), and ",(0,a.kt)("inlineCode",{parentName:"li"},"system-upgrade")," (required if doing ",(0,a.kt)("a",{parentName:"li",href:"/upgrades/automated"},"Automated Upgrades"),").")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system, system-upgrade]\n')),(0,a.kt)("ol",{start:3},(0,a.kt)("li",{parentName:"ol"},"Perform the upgrade as normal. If doing ",(0,a.kt)("a",{parentName:"li",href:"/upgrades/automated"},"Automated Upgrades"),", ensure that the namespace where the ",(0,a.kt)("inlineCode",{parentName:"li"},"system-upgrade-controller")," pod is running in is setup to be privileged in accordance with the ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels"},"Pod Security levels"),":")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: system-upgrade\n  labels:\n    # This value must be privileged for the controller to run successfully.\n    pod-security.kubernetes.io/enforce: privileged\n    pod-security.kubernetes.io/enforce-version: v1.25\n    # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.\n    pod-security.kubernetes.io/audit: privileged\n    pod-security.kubernetes.io/audit-version: v1.25\n    pod-security.kubernetes.io/warn: privileged\n    pod-security.kubernetes.io/warn-version: v1.25\n")),(0,a.kt)("ol",{start:4},(0,a.kt)("li",{parentName:"ol"},"After the upgrade is complete, remove any remaining PSP resources from the cluster. In many cases, there may be PodSecurityPolicies and associated RBAC resources in custom files used for hardening within ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/manifests/"),". Remove those resources and k3s will update automatically. Sometimes, due to timing, some of these may be left in the cluster, in which case you will need to delete them manually. If the ",(0,a.kt)("a",{parentName:"li",href:"/security/hardening-guide"},"Hardening Guide")," was previously followed, you should be able to delete them via the following:")),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-sh"},"# Get the resources associated with PSPs\n$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp\n\n# Delete those resources:\n$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/ea0a4c6d.abec3f2c.js b/assets/js/ea0a4c6d.e7ff26f5.js
similarity index 99%
rename from assets/js/ea0a4c6d.abec3f2c.js
rename to assets/js/ea0a4c6d.e7ff26f5.js
index dc180c750..504d4b545 100644
--- a/assets/js/ea0a4c6d.abec3f2c.js
+++ b/assets/js/ea0a4c6d.e7ff26f5.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[791],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>h});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var l=n.createContext({}),d=function(e){var t=n.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},c=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),c=d(a),h=r,m=c["".concat(l,".").concat(h)]||c[h]||p[h]||o;return a?n.createElement(m,i(i({ref:t},u),{},{components:a})):n.createElement(m,i({ref:t},u))}));function h(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=a.length,i=new Array(o);i[0]=c;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var d=2;d<o;d++)i[d]=a[d];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}c.displayName="MDXCreateElement"},972:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>s,toc:()=>d});var n=a(3117),r=(a(7294),a(3905));const o={title:"High Availability External DB",weight:30},i=void 0,s={unversionedId:"datastore/ha",id:"datastore/ha",title:"High Availability External DB",description:"This section describes how to install a high-availability K3s cluster with an external database.",source:"@site/docs/datastore/ha.md",sourceDirName:"datastore",slug:"/datastore/ha",permalink:"/datastore/ha",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"High Availability External DB",weight:30},sidebar:"mySidebar",previous:{title:"High Availability Embedded etcd",permalink:"/datastore/ha-embedded"},next:{title:"Cluster Load Balancer",permalink:"/datastore/cluster-loadbalancer"}},l={},d=[{value:"Installation Outline",id:"installation-outline",level:2},{value:"1. Create an External Datastore",id:"1-create-an-external-datastore",level:3},{value:"2. Launch Server Nodes",id:"2-launch-server-nodes",level:3},{value:"3. Optional: Join Additional Server Nodes",id:"3-optional-join-additional-server-nodes",level:3},{value:"4. Optional: Configure a Fixed Registration Address",id:"4-optional-configure-a-fixed-registration-address",level:3},{value:"5. Optional: Join Agent Nodes",id:"5-optional-join-agent-nodes",level:3}],u={toc:d};function p(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section describes how to install a high-availability K3s cluster with an external database."),(0,r.kt)("p",null,"Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is composed of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Two or more ",(0,r.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,r.kt)("li",{parentName:"ul"},"An ",(0,r.kt)("strong",{parentName:"li"},"external datastore")," (as opposed to the embedded SQLite datastore used in single-server setups)"),(0,r.kt)("li",{parentName:"ul"},"Optional: Zero or more ",(0,r.kt)("strong",{parentName:"li"},"agent nodes")," that are designated to run your apps and services"),(0,r.kt)("li",{parentName:"ul"},"Optional: A ",(0,r.kt)("strong",{parentName:"li"},"fixed registration address")," for agent nodes to register with the cluster")),(0,r.kt)("p",null,"For more details on how these components work together, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/architecture/#high-availability-k3s"},"architecture section.")),(0,r.kt)("h2",{id:"installation-outline"},"Installation Outline"),(0,r.kt)("p",null,"Setting up an HA cluster requires the following steps:"),(0,r.kt)("h3",{id:"1-create-an-external-datastore"},"1. Create an External Datastore"),(0,r.kt)("p",null,"You will first need to create an external datastore for the cluster. See the ",(0,r.kt)("a",{parentName:"p",href:"/datastore/"},"Cluster Datastore Options")," documentation for more details."),(0,r.kt)("h3",{id:"2-launch-server-nodes"},"2. Launch Server Nodes"),(0,r.kt)("p",null,"K3s requires two or more server nodes for this HA configuration. See the ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements"},"Requirements")," guide for minimum machine requirements."),(0,r.kt)("p",null,"When running the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," command on these nodes, you must set the ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter so that K3s knows how to connect to the external datastore. The ",(0,r.kt)("inlineCode",{parentName:"p"},"token")," parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use."),(0,r.kt)("p",null,"For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and ",(0,r.kt)("a",{parentName:"p",href:"/cli/server#cluster-options"},"set a token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n  --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address\n')),(0,r.kt)("p",null,"The datastore endpoint format differs based on the database type. For details, refer to the section on ",(0,r.kt)("a",{parentName:"p",href:"/datastore/#datastore-endpoint-format-and-functionality"},"datastore endpoint formats.")),(0,r.kt)("p",null,"To configure TLS certificates when launching server nodes, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/datastore/#external-datastore-configuration-parameters"},"datastore configuration guide.")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The same installation options available to single-server installs are also available for high-availability installs. For more details, see the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration"},"Configuration Options")," documentation.")),(0,r.kt)("p",null,"By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The ",(0,r.kt)("inlineCode",{parentName:"p"},"node-taint")," parameter will allow you to configure nodes with taints, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint CriticalAddonsOnly=true:NoExecute"),"."),(0,r.kt)("p",null,"Once you've launched the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," process on all server nodes, ensure that the cluster has come up properly with ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s kubectl get nodes"),". You should see your server nodes in the Ready state."),(0,r.kt)("h3",{id:"3-optional-join-additional-server-nodes"},"3. Optional: Join Additional Server Nodes"),(0,r.kt)("p",null,"The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used."),(0,r.kt)("p",null,"If the first server node was started without the ",(0,r.kt)("inlineCode",{parentName:"p"},"--token")," CLI flag or ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," variable, the token value can be retrieved from any server already joined to the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,r.kt)("p",null,"Additional server nodes can then be added ",(0,r.kt)("a",{parentName:"p",href:"/cli/server#cluster-options"},"using the token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,r.kt)("p",null,"There are a few config flags that must be the same in all server nodes:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Network related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,r.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable")),(0,r.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.")),(0,r.kt)("h3",{id:"4-optional-configure-a-fixed-registration-address"},"4. Optional: Configure a Fixed Registration Address"),(0,r.kt)("p",null,"Agent nodes need a URL to register against. This can be the IP or hostname of any server node, but in many cases those may change over time. For example, if running your cluster in a cloud that supports scaling groups, nodes may be created and destroyed over time, changing to different IPs from the initial set of server nodes. It would be best to have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"A layer-4 (TCP) load balancer"),(0,r.kt)("li",{parentName:"ul"},"Round-robin DNS"),(0,r.kt)("li",{parentName:"ul"},"Virtual or elastic IP addresses")),(0,r.kt)("p",null,"See ",(0,r.kt)("a",{parentName:"p",href:"/datastore/cluster-loadbalancer"},"Cluster Loadbalancer")," for example configurations."),(0,r.kt)("p",null,"This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," file to point to it instead of a specific node. "),(0,r.kt)("p",null,"To avoid certificate errors in such a configuration, you should configure the server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--tls-san YOUR_IP_OR_HOSTNAME_HERE")," option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname."),(0,r.kt)("h3",{id:"5-optional-join-agent-nodes"},"5. Optional: Join Agent Nodes"),(0,r.kt)("p",null,"Because K3s server nodes are schedulable by default, agent nodes are not required for a HA K3s cluster. However, you may wish to have dedicated agent nodes to run your apps and services."),(0,r.kt)("p",null,"Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to (either one of the server IPs or a fixed registration address) and the token it should use."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"K3S_TOKEN=SECRET k3s agent --server https://server-or-fixed-registration-address:6443\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[791],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>h});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function o(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?o(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):o(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)a=o[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var l=n.createContext({}),d=function(e){var t=n.useContext(l),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},c=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),c=d(a),h=r,m=c["".concat(l,".").concat(h)]||c[h]||p[h]||o;return a?n.createElement(m,i(i({ref:t},u),{},{components:a})):n.createElement(m,i({ref:t},u))}));function h(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=a.length,i=new Array(o);i[0]=c;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var d=2;d<o;d++)i[d]=a[d];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}c.displayName="MDXCreateElement"},972:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>s,toc:()=>d});var n=a(3117),r=(a(7294),a(3905));const o={title:"High Availability External DB",weight:30},i=void 0,s={unversionedId:"datastore/ha",id:"datastore/ha",title:"High Availability External DB",description:"This section describes how to install a high-availability K3s cluster with an external database.",source:"@site/docs/datastore/ha.md",sourceDirName:"datastore",slug:"/datastore/ha",permalink:"/datastore/ha",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"High Availability External DB",weight:30},sidebar:"mySidebar",previous:{title:"High Availability Embedded etcd",permalink:"/datastore/ha-embedded"},next:{title:"Cluster Load Balancer",permalink:"/datastore/cluster-loadbalancer"}},l={},d=[{value:"Installation Outline",id:"installation-outline",level:2},{value:"1. Create an External Datastore",id:"1-create-an-external-datastore",level:3},{value:"2. Launch Server Nodes",id:"2-launch-server-nodes",level:3},{value:"3. Optional: Join Additional Server Nodes",id:"3-optional-join-additional-server-nodes",level:3},{value:"4. Optional: Configure a Fixed Registration Address",id:"4-optional-configure-a-fixed-registration-address",level:3},{value:"5. Optional: Join Agent Nodes",id:"5-optional-join-agent-nodes",level:3}],u={toc:d};function p(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section describes how to install a high-availability K3s cluster with an external database."),(0,r.kt)("p",null,"Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is composed of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Two or more ",(0,r.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,r.kt)("li",{parentName:"ul"},"An ",(0,r.kt)("strong",{parentName:"li"},"external datastore")," (as opposed to the embedded SQLite datastore used in single-server setups)"),(0,r.kt)("li",{parentName:"ul"},"Optional: Zero or more ",(0,r.kt)("strong",{parentName:"li"},"agent nodes")," that are designated to run your apps and services"),(0,r.kt)("li",{parentName:"ul"},"Optional: A ",(0,r.kt)("strong",{parentName:"li"},"fixed registration address")," for agent nodes to register with the cluster")),(0,r.kt)("p",null,"For more details on how these components work together, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/architecture/#high-availability-k3s"},"architecture section.")),(0,r.kt)("h2",{id:"installation-outline"},"Installation Outline"),(0,r.kt)("p",null,"Setting up an HA cluster requires the following steps:"),(0,r.kt)("h3",{id:"1-create-an-external-datastore"},"1. Create an External Datastore"),(0,r.kt)("p",null,"You will first need to create an external datastore for the cluster. See the ",(0,r.kt)("a",{parentName:"p",href:"/datastore/"},"Cluster Datastore Options")," documentation for more details."),(0,r.kt)("h3",{id:"2-launch-server-nodes"},"2. Launch Server Nodes"),(0,r.kt)("p",null,"K3s requires two or more server nodes for this HA configuration. See the ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements"},"Requirements")," guide for minimum machine requirements."),(0,r.kt)("p",null,"When running the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," command on these nodes, you must set the ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter so that K3s knows how to connect to the external datastore. The ",(0,r.kt)("inlineCode",{parentName:"p"},"token")," parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use."),(0,r.kt)("p",null,"For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and ",(0,r.kt)("a",{parentName:"p",href:"/cli/server#cluster-options"},"set a token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n  --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address\n')),(0,r.kt)("p",null,"The datastore endpoint format differs based on the database type. For details, refer to the section on ",(0,r.kt)("a",{parentName:"p",href:"/datastore/#datastore-endpoint-format-and-functionality"},"datastore endpoint formats.")),(0,r.kt)("p",null,"To configure TLS certificates when launching server nodes, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/datastore/#external-datastore-configuration-parameters"},"datastore configuration guide.")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The same installation options available to single-server installs are also available for high-availability installs. For more details, see the ",(0,r.kt)("a",{parentName:"p",href:"/installation/configuration"},"Configuration Options")," documentation.")),(0,r.kt)("p",null,"By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The ",(0,r.kt)("inlineCode",{parentName:"p"},"node-taint")," parameter will allow you to configure nodes with taints, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint CriticalAddonsOnly=true:NoExecute"),"."),(0,r.kt)("p",null,"Once you've launched the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," process on all server nodes, ensure that the cluster has come up properly with ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s kubectl get nodes"),". You should see your server nodes in the Ready state."),(0,r.kt)("h3",{id:"3-optional-join-additional-server-nodes"},"3. Optional: Join Additional Server Nodes"),(0,r.kt)("p",null,"The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used."),(0,r.kt)("p",null,"If the first server node was started without the ",(0,r.kt)("inlineCode",{parentName:"p"},"--token")," CLI flag or ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," variable, the token value can be retrieved from any server already joined to the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,r.kt)("p",null,"Additional server nodes can then be added ",(0,r.kt)("a",{parentName:"p",href:"/cli/server#cluster-options"},"using the token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,r.kt)("p",null,"There are a few config flags that must be the same in all server nodes:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Network related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,r.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable")),(0,r.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.")),(0,r.kt)("h3",{id:"4-optional-configure-a-fixed-registration-address"},"4. Optional: Configure a Fixed Registration Address"),(0,r.kt)("p",null,"Agent nodes need a URL to register against. This can be the IP or hostname of any server node, but in many cases those may change over time. For example, if running your cluster in a cloud that supports scaling groups, nodes may be created and destroyed over time, changing to different IPs from the initial set of server nodes. It would be best to have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"A layer-4 (TCP) load balancer"),(0,r.kt)("li",{parentName:"ul"},"Round-robin DNS"),(0,r.kt)("li",{parentName:"ul"},"Virtual or elastic IP addresses")),(0,r.kt)("p",null,"See ",(0,r.kt)("a",{parentName:"p",href:"/datastore/cluster-loadbalancer"},"Cluster Loadbalancer")," for example configurations."),(0,r.kt)("p",null,"This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," file to point to it instead of a specific node. "),(0,r.kt)("p",null,"To avoid certificate errors in such a configuration, you should configure the server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--tls-san YOUR_IP_OR_HOSTNAME_HERE")," option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname."),(0,r.kt)("h3",{id:"5-optional-join-agent-nodes"},"5. Optional: Join Agent Nodes"),(0,r.kt)("p",null,"Because K3s server nodes are schedulable by default, agent nodes are not required for a HA K3s cluster. However, you may wish to have dedicated agent nodes to run your apps and services."),(0,r.kt)("p",null,"Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to (either one of the server IPs or a fixed registration address) and the token it should use."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"K3S_TOKEN=SECRET k3s agent --server https://server-or-fixed-registration-address:6443\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/ec6f9153.1e3ca38c.js b/assets/js/ec6f9153.b58d4526.js
similarity index 99%
rename from assets/js/ec6f9153.1e3ca38c.js
rename to assets/js/ec6f9153.b58d4526.js
index cdb7d6189..3a00cbabc 100644
--- a/assets/js/ec6f9153.1e3ca38c.js
+++ b/assets/js/ec6f9153.b58d4526.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[750],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>h});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},d=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,s=e.parentName,d=l(e,["components","mdxType","originalType","parentName"]),m=p(a),h=n,c=m["".concat(s,".").concat(h)]||m[h]||u[h]||i;return a?r.createElement(c,o(o({ref:t},d),{},{components:a})):r.createElement(c,o({ref:t},d))}));function h(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,o=new Array(i);o[0]=m;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,o[1]=l;for(var p=2;p<i;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},6875:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(3117),n=(a(7294),a(3905));const i={title:"Air-Gap Install",weight:60},o=void 0,l={unversionedId:"installation/airgap",id:"installation/airgap",title:"Air-Gap Install",description:"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.",source:"@site/docs/installation/airgap.md",sourceDirName:"installation",slug:"/installation/airgap",permalink:"/installation/airgap",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Air-Gap Install",weight:60},sidebar:"mySidebar",previous:{title:"Private Registry Configuration",permalink:"/installation/private-registry"},next:{title:"Managing Server Roles",permalink:"/installation/server-roles"}},s={},p=[{value:"Private Registry Method",id:"private-registry-method",level:2},{value:"Create the Registry YAML",id:"create-the-registry-yaml",level:3},{value:"Manually Deploy Images Method",id:"manually-deploy-images-method",level:2},{value:"Prepare the Images Directory and K3s Binary",id:"prepare-the-images-directory-and-k3s-binary",level:3},{value:"Install K3s",id:"install-k3s",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Installing K3s in an Air-Gapped Environment",id:"installing-k3s-in-an-air-gapped-environment",level:3},{value:"Upgrading",id:"upgrading",level:2},{value:"Install Script Method",id:"install-script-method",level:3},{value:"Automated Upgrades Method",id:"automated-upgrades-method",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},u=d("Tabs"),m=d("TabItem"),h={toc:p};function c(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},h,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."),(0,n.kt)("h2",{id:"private-registry-method"},"Private Registry Method"),(0,n.kt)("p",null,"This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host."),(0,n.kt)("p",null,"If you have not yet set up a private Docker registry, refer to the official documentation ",(0,n.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry"},"here"),"."),(0,n.kt)("h3",{id:"create-the-registry-yaml"},"Create the Registry YAML"),(0,n.kt)("p",null,"Follow the ",(0,n.kt)("a",{parentName:"p",href:"/installation/private-registry"},"Private Registry Configuration")," guide to create and configure the registry.yaml file."),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"manually-deploy-images-method"},"Manually Deploy Images Method"),(0,n.kt)("p",null,"We are assuming you have created your nodes in your air-gap environment and use containerd as container runtime.\nThis method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical."),(0,n.kt)("h3",{id:"prepare-the-images-directory-and-k3s-binary"},"Prepare the Images Directory and K3s Binary"),(0,n.kt)("p",null,"Obtain the images tar file for your architecture from the ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be running."),(0,n.kt)("p",null,"Place the tar file in the ",(0,n.kt)("inlineCode",{parentName:"p"},"images")," directory, for example:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p /var/lib/rancher/k3s/agent/images/\nsudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/\n")),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"install-k3s"},"Install K3s"),(0,n.kt)("h3",{id:"prerequisites"},"Prerequisites"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Before installing K3s, complete the ",(0,n.kt)("a",{parentName:"li",href:"#private-registry-method"},"Private Registry Method")," or the ",(0,n.kt)("a",{parentName:"li",href:"#manually-deploy-images-method"},"Manually Deploy Images Method")," above to prepopulate the images that K3s needs to install."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s binary from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page, matching the same version used to get the airgap images. Place the binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each air-gapped node and ensure it is executable."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"get.k3s.io"),". Place the install script anywhere on each air-gapped node, and name it ",(0,n.kt)("inlineCode",{parentName:"li"},"install.sh"),"."),(0,n.kt)("li",{parentName:"ul"},"If your nodes do not have an interface with a default route, a default route must be configured; even a black-hole route via a dummy interface will suffice. K3s requires a default route in order to auto-detect the node's primary IP, and for kube-proxy ClusterIP routing to function properly. To add a dummy route, do the following:",(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre"},"ip link add dummy0 type dummy\nip link set dummy0 up\nip addr add 169.254.255.254/31 dev dummy0\nip route add default via 169.254.255.255 dev dummy0 metric 1000\n")))),(0,n.kt)("p",null,"When running the K3s script with the ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD")," environment variable, K3s will use the local version of the script and binary."),(0,n.kt)("h3",{id:"installing-k3s-in-an-air-gapped-environment"},"Installing K3s in an Air-Gapped Environment"),(0,n.kt)("p",null,"You can install K3s on one or more servers as described below."),(0,n.kt)(u,{mdxType:"Tabs"},(0,n.kt)(m,{value:"Single Server Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"To install K3s on a single server, simply do the following on the server node:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh\n")),(0,n.kt)("p",null,"To add additional agents, do the following on each agent node: "),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh\n")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"The token from the server is typically found at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"."))),(0,n.kt)(m,{value:"High Availability Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"Reference the ",(0,n.kt)("a",{parentName:"p",href:"/datastore/ha"},"High Availability with an External DB")," or ",(0,n.kt)("a",{parentName:"p",href:"/datastore/ha-embedded"},"High Availability with Embedded DB")," guides. You will be tweaking install commands so you specify ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD=true")," and run your install script locally instead of via curl. You will also utilize ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC='args'")," to supply any arguments to k3s."),(0,n.kt)("p",null,"For example, step two of the High Availability with an External DB guide mentions the following:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,n.kt)("p",null,"Instead, you would modify such examples like below:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\\nK3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\\n./install.sh\n")))),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"K3s additionally provides a ",(0,n.kt)("inlineCode",{parentName:"p"},"--resolv-conf")," flag for kubelets, which may help with configuring DNS in air-gap networks.")),(0,n.kt)("h2",{id:"upgrading"},"Upgrading"),(0,n.kt)("h3",{id:"install-script-method"},"Install Script Method"),(0,n.kt)("p",null,"Upgrading an air-gap environment can be accomplished in the following manner:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},"Download the new air-gap images (tar file) from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be upgrading to. Place the tar in the ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/images/")," directory on each\nnode. Delete the old tar file."),(0,n.kt)("li",{parentName:"ol"},"Copy and replace the old K3s binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each node. Copy over the install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"https://get.k3s.io")," (as it is possible it has changed since the last release). Run the script again just as you had done in the past\nwith the same environment variables."),(0,n.kt)("li",{parentName:"ol"},"Restart the K3s service (if not restarted automatically by installer).")),(0,n.kt)("h3",{id:"automated-upgrades-method"},"Automated Upgrades Method"),(0,n.kt)("p",null,"K3s supports ",(0,n.kt)("a",{parentName:"p",href:"/upgrades/automated"},"automated upgrades"),". To enable this in air-gapped environments, you must ensure the required images are available in your private registry."),(0,n.kt)("p",null,"You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the ",(0,n.kt)("inlineCode",{parentName:"p"},"+")," in the K3s release with a ",(0,n.kt)("inlineCode",{parentName:"p"},"-")," because Docker images do not support ",(0,n.kt)("inlineCode",{parentName:"p"},"+"),"."),(0,n.kt)("p",null,"You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/releases/latest"},"here")," and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre"},"rancher/system-upgrade-controller:v0.4.0\nrancher/kubectl:v0.17.0\n")),(0,n.kt)("p",null,"Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the ",(0,n.kt)("a",{parentName:"p",href:"/upgrades/automated"},"automated upgrades")," guide."))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[750],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>h});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},d=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,s=e.parentName,d=l(e,["components","mdxType","originalType","parentName"]),m=p(a),h=n,c=m["".concat(s,".").concat(h)]||m[h]||u[h]||i;return a?r.createElement(c,o(o({ref:t},d),{},{components:a})):r.createElement(c,o({ref:t},d))}));function h(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,o=new Array(i);o[0]=m;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,o[1]=l;for(var p=2;p<i;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},6875:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(3117),n=(a(7294),a(3905));const i={title:"Air-Gap Install",weight:60},o=void 0,l={unversionedId:"installation/airgap",id:"installation/airgap",title:"Air-Gap Install",description:"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.",source:"@site/docs/installation/airgap.md",sourceDirName:"installation",slug:"/installation/airgap",permalink:"/installation/airgap",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Air-Gap Install",weight:60},sidebar:"mySidebar",previous:{title:"Private Registry Configuration",permalink:"/installation/private-registry"},next:{title:"Managing Server Roles",permalink:"/installation/server-roles"}},s={},p=[{value:"Private Registry Method",id:"private-registry-method",level:2},{value:"Create the Registry YAML",id:"create-the-registry-yaml",level:3},{value:"Manually Deploy Images Method",id:"manually-deploy-images-method",level:2},{value:"Prepare the Images Directory and K3s Binary",id:"prepare-the-images-directory-and-k3s-binary",level:3},{value:"Install K3s",id:"install-k3s",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Installing K3s in an Air-Gapped Environment",id:"installing-k3s-in-an-air-gapped-environment",level:3},{value:"Upgrading",id:"upgrading",level:2},{value:"Install Script Method",id:"install-script-method",level:3},{value:"Automated Upgrades Method",id:"automated-upgrades-method",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},u=d("Tabs"),m=d("TabItem"),h={toc:p};function c(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},h,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."),(0,n.kt)("h2",{id:"private-registry-method"},"Private Registry Method"),(0,n.kt)("p",null,"This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host."),(0,n.kt)("p",null,"If you have not yet set up a private Docker registry, refer to the official documentation ",(0,n.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry"},"here"),"."),(0,n.kt)("h3",{id:"create-the-registry-yaml"},"Create the Registry YAML"),(0,n.kt)("p",null,"Follow the ",(0,n.kt)("a",{parentName:"p",href:"/installation/private-registry"},"Private Registry Configuration")," guide to create and configure the registry.yaml file."),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"manually-deploy-images-method"},"Manually Deploy Images Method"),(0,n.kt)("p",null,"We are assuming you have created your nodes in your air-gap environment and use containerd as container runtime.\nThis method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical."),(0,n.kt)("h3",{id:"prepare-the-images-directory-and-k3s-binary"},"Prepare the Images Directory and K3s Binary"),(0,n.kt)("p",null,"Obtain the images tar file for your architecture from the ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be running."),(0,n.kt)("p",null,"Place the tar file in the ",(0,n.kt)("inlineCode",{parentName:"p"},"images")," directory, for example:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p /var/lib/rancher/k3s/agent/images/\nsudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/\n")),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"install-k3s"},"Install K3s"),(0,n.kt)("h3",{id:"prerequisites"},"Prerequisites"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Before installing K3s, complete the ",(0,n.kt)("a",{parentName:"li",href:"#private-registry-method"},"Private Registry Method")," or the ",(0,n.kt)("a",{parentName:"li",href:"#manually-deploy-images-method"},"Manually Deploy Images Method")," above to prepopulate the images that K3s needs to install."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s binary from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page, matching the same version used to get the airgap images. Place the binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each air-gapped node and ensure it is executable."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"get.k3s.io"),". Place the install script anywhere on each air-gapped node, and name it ",(0,n.kt)("inlineCode",{parentName:"li"},"install.sh"),"."),(0,n.kt)("li",{parentName:"ul"},"If your nodes do not have an interface with a default route, a default route must be configured; even a black-hole route via a dummy interface will suffice. K3s requires a default route in order to auto-detect the node's primary IP, and for kube-proxy ClusterIP routing to function properly. To add a dummy route, do the following:",(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre"},"ip link add dummy0 type dummy\nip link set dummy0 up\nip addr add 169.254.255.254/31 dev dummy0\nip route add default via 169.254.255.255 dev dummy0 metric 1000\n")))),(0,n.kt)("p",null,"When running the K3s script with the ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD")," environment variable, K3s will use the local version of the script and binary."),(0,n.kt)("h3",{id:"installing-k3s-in-an-air-gapped-environment"},"Installing K3s in an Air-Gapped Environment"),(0,n.kt)("p",null,"You can install K3s on one or more servers as described below."),(0,n.kt)(u,{mdxType:"Tabs"},(0,n.kt)(m,{value:"Single Server Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"To install K3s on a single server, simply do the following on the server node:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh\n")),(0,n.kt)("p",null,"To add additional agents, do the following on each agent node: "),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh\n")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"The token from the server is typically found at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"."))),(0,n.kt)(m,{value:"High Availability Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"Reference the ",(0,n.kt)("a",{parentName:"p",href:"/datastore/ha"},"High Availability with an External DB")," or ",(0,n.kt)("a",{parentName:"p",href:"/datastore/ha-embedded"},"High Availability with Embedded DB")," guides. You will be tweaking install commands so you specify ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD=true")," and run your install script locally instead of via curl. You will also utilize ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC='args'")," to supply any arguments to k3s."),(0,n.kt)("p",null,"For example, step two of the High Availability with an External DB guide mentions the following:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,n.kt)("p",null,"Instead, you would modify such examples like below:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\\nK3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\\n./install.sh\n")))),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"K3s additionally provides a ",(0,n.kt)("inlineCode",{parentName:"p"},"--resolv-conf")," flag for kubelets, which may help with configuring DNS in air-gap networks.")),(0,n.kt)("h2",{id:"upgrading"},"Upgrading"),(0,n.kt)("h3",{id:"install-script-method"},"Install Script Method"),(0,n.kt)("p",null,"Upgrading an air-gap environment can be accomplished in the following manner:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},"Download the new air-gap images (tar file) from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be upgrading to. Place the tar in the ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/images/")," directory on each\nnode. Delete the old tar file."),(0,n.kt)("li",{parentName:"ol"},"Copy and replace the old K3s binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each node. Copy over the install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"https://get.k3s.io")," (as it is possible it has changed since the last release). Run the script again just as you had done in the past\nwith the same environment variables."),(0,n.kt)("li",{parentName:"ol"},"Restart the K3s service (if not restarted automatically by installer).")),(0,n.kt)("h3",{id:"automated-upgrades-method"},"Automated Upgrades Method"),(0,n.kt)("p",null,"K3s supports ",(0,n.kt)("a",{parentName:"p",href:"/upgrades/automated"},"automated upgrades"),". To enable this in air-gapped environments, you must ensure the required images are available in your private registry."),(0,n.kt)("p",null,"You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the ",(0,n.kt)("inlineCode",{parentName:"p"},"+")," in the K3s release with a ",(0,n.kt)("inlineCode",{parentName:"p"},"-")," because Docker images do not support ",(0,n.kt)("inlineCode",{parentName:"p"},"+"),"."),(0,n.kt)("p",null,"You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/releases/latest"},"here")," and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre"},"rancher/system-upgrade-controller:v0.4.0\nrancher/kubectl:v0.17.0\n")),(0,n.kt)("p",null,"Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the ",(0,n.kt)("a",{parentName:"p",href:"/upgrades/automated"},"automated upgrades")," guide."))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/ee75e821.0d7cfd75.js b/assets/js/ee75e821.011ff8fa.js
similarity index 99%
rename from assets/js/ee75e821.0d7cfd75.js
rename to assets/js/ee75e821.011ff8fa.js
index 51f082013..65bb1f224 100644
--- a/assets/js/ee75e821.0d7cfd75.js
+++ b/assets/js/ee75e821.011ff8fa.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7893],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var o=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function a(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?a(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,o,r=function(e,t){if(null==e)return{};var n,o,r={},a=Object.keys(e);for(o=0;o<a.length;o++)n=a[o],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(o=0;o<a.length;o++)n=a[o],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=o.createContext({}),d=function(e){var t=o.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return o.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return o.createElement(o.Fragment,{},t)}},u=o.forwardRef((function(e,t){var n=e.components,r=e.mdxType,a=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=r,h=u["".concat(s,".").concat(m)]||u[m]||c[m]||a;return n?o.createElement(h,i(i({ref:t},p),{},{components:n})):o.createElement(h,i({ref:t},p))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var a=n.length,i=new Array(a);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var d=2;d<a;d++)i[d]=n[d];return o.createElement.apply(null,i)}return o.createElement.apply(null,n)}u.displayName="MDXCreateElement"},6193:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>c,frontMatter:()=>a,metadata:()=>l,toc:()=>d});var o=n(3117),r=(n(7294),n(3905));const a={title:"Networking",weight:35},i=void 0,l={unversionedId:"networking/networking",id:"networking/networking",title:"Networking",description:"This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s.",source:"@site/docs/networking/networking.md",sourceDirName:"networking",slug:"/networking/",permalink:"/networking/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Networking",weight:35},sidebar:"mySidebar",previous:{title:"Volumes and Storage",permalink:"/storage/"},next:{title:"Helm",permalink:"/helm/"}},s={},d=[{value:"CoreDNS",id:"coredns",level:2},{value:"Traefik Ingress Controller",id:"traefik-ingress-controller",level:2},{value:"Network Policy Controller",id:"network-policy-controller",level:2},{value:"Service Load Balancer",id:"service-load-balancer",level:2},{value:"How ServiceLB Works",id:"how-servicelb-works",level:3},{value:"Usage",id:"usage",level:3},{value:"Controlling ServiceLB Node Selection",id:"controlling-servicelb-node-selection",level:3},{value:"Creating ServiceLB Node Pools",id:"creating-servicelb-node-pools",level:3},{value:"Disabling ServiceLB",id:"disabling-servicelb",level:3},{value:"Deploying an External Cloud Controller Manager",id:"deploying-an-external-cloud-controller-manager",level:2},{value:"Nodes Without a Hostname",id:"nodes-without-a-hostname",level:2},{value:"Multicluster CIDR (Experimental)",id:"multicluster-cidr-experimental",level:2}],p={toc:d};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,o.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s."),(0,r.kt)("p",null,"Refer to the ",(0,r.kt)("a",{parentName:"p",href:"/installation/network-options"},"Installation Network Options")," page for details on Flannel configuration options and backend selection, or how to set up your own CNI."),(0,r.kt)("p",null,"For information on which ports need to be opened for K3s, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements#networking"},"Networking Requirements"),"."),(0,r.kt)("h2",{id:"coredns"},"CoreDNS"),(0,r.kt)("p",null,"CoreDNS is deployed automatically on server startup. To disable it, configure all servers in the cluster with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=coredns")," option."),(0,r.kt)("p",null,"If you don't install CoreDNS, you will need to install a cluster DNS provider yourself."),(0,r.kt)("h2",{id:"traefik-ingress-controller"},"Traefik Ingress Controller"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://traefik.io/"},"Traefik")," is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It simplifies networking complexity while designing, deploying, and running applications."),(0,r.kt)("p",null,"The Traefik ingress controller deploys a LoadBalancer Service that uses ports 80 and 443. By default, ServiceLB will expose these ports on all cluster members, meaning these ports will not be usable for other HostPort or NodePort pods."),(0,r.kt)("p",null,"Traefik is deployed by default when starting the server. For more information see ",(0,r.kt)("a",{parentName:"p",href:"/installation/packaged-components"},"Managing Packaged Components"),". The default config file is found in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik.yaml"),"."),(0,r.kt)("p",null,"The ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," file should not be edited manually, as K3s will replace the file with defaults at startup. Instead, you should customize Traefik by creating an additional ",(0,r.kt)("inlineCode",{parentName:"p"},"HelmChartConfig")," manifest in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),". For more details and an example see ",(0,r.kt)("a",{parentName:"p",href:"/helm/#customizing-packaged-components-with-helmchartconfig"},"Customizing Packaged Components with HelmChartConfig"),". For more information on the possible configuration values, refer to the official ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-helm-chart/tree/master/traefik"},"Traefik Helm Configuration Parameters."),"."),(0,r.kt)("p",null,"To remove Traefik from your cluster, start all servers with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," flag."),(0,r.kt)("p",null,"K3s versions 1.20 and earlier include Traefik v1. K3s versions 1.21 and later install Traefik v2, unless an existing installation of Traefik v1 is found, in which case Traefik is not upgraded to v2. For more information on the specific version of Traefik included with K3s, consult the Release Notes for your version."),(0,r.kt)("p",null,"To migrate from an older Traefik v1 instance please refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik documentation")," and ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"migration tool"),"."),(0,r.kt)("h2",{id:"network-policy-controller"},"Network Policy Controller"),(0,r.kt)("p",null,"K3s includes an embedded network policy controller. The underlying implementation is ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/cloudnativelabs/kube-router"},"kube-router's")," netpol controller library (no other kube-router functionality is present) and can be found ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol"},"here"),". "),(0,r.kt)("p",null,"To disable it, start each server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," flag."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Network policy iptables rules are not removed if the K3s configuration is changed to disable the network policy controller. To clean up the configured kube-router network policy rules after disabling the network policy controller, use the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," script, or clean them using ",(0,r.kt)("inlineCode",{parentName:"p"},"iptables-save")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"iptables-restore"),". These steps must be ryn manually on all nodes in the cluster."),(0,r.kt)("pre",{parentName:"admonition"},(0,r.kt)("code",{parentName:"pre"},"iptables-save | grep -v KUBE-ROUTER | iptables-restore\nip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore\n"))),(0,r.kt)("h2",{id:"service-load-balancer"},"Service Load Balancer"),(0,r.kt)("p",null,"Any LoadBalancer controller can be deployed to your K3s cluster. By default, K3s provides a load balancer known as ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/klipper-lb"},"ServiceLB")," (formerly Klipper LoadBalancer) that uses available host ports."),(0,r.kt)("p",null,"Upstream Kubernetes allows Services of type LoadBalancer to be created, but doesn't include a default load balancer implementation, so these services will remain ",(0,r.kt)("inlineCode",{parentName:"p"},"pending")," until one is installed. Many hosted services require a cloud provider such as Amazon EC2 or Microsoft Azure to offer an external load balancer implementation. By contrast, the K3s ServiceLB makes it possible to use LoadBalancer Services without a cloud provider or any additional configuration."),(0,r.kt)("h3",{id:"how-servicelb-works"},"How ServiceLB Works"),(0,r.kt)("p",null,"The ServiceLB controller watches Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/"},"Services")," with the ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.type")," field set to ",(0,r.kt)("inlineCode",{parentName:"p"},"LoadBalancer"),"."),(0,r.kt)("p",null,"For each LoadBalancer Service, a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/"},"DaemonSet")," is created in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. This DaemonSet in turn creates Pods with a ",(0,r.kt)("inlineCode",{parentName:"p"},"svc-")," prefix, on each node. These Pods use iptables to forward traffic from the Pod's NodePort, to the Service's ClusterIP address and port."),(0,r.kt)("p",null,"If the ServiceLB Pod runs on a node that has an external IP configured, the node's external IP is populated into the Service's ",(0,r.kt)("inlineCode",{parentName:"p"},"status.loadBalancer.ingress")," address list. Otherwise, the node's internal IP is used."),(0,r.kt)("p",null,"If multiple LoadBalancer Services are created, a separate DaemonSet is created for each Service."),(0,r.kt)("p",null,"It is possible to expose multiple Services on the same node, as long as they use different ports."),(0,r.kt)("p",null,"If you try to create a LoadBalancer Service that listens on port 80, the ServiceLB will try to find a free host in the cluster for port 80. If no host with that port is available, the LB will remain Pending."),(0,r.kt)("h3",{id:"usage"},"Usage"),(0,r.kt)("p",null,"Create a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer"},"Service of type LoadBalancer")," in K3s."),(0,r.kt)("h3",{id:"controlling-servicelb-node-selection"},"Controlling ServiceLB Node Selection"),(0,r.kt)("p",null,"Adding the ",(0,r.kt)("inlineCode",{parentName:"p"},"svccontroller.k3s.cattle.io/enablelb=true")," label to one or more nodes switches the ServiceLB controller into allow-list mode, where only nodes with the label are eligible to host LoadBalancer pods. Nodes that remain unlabeled will be excluded from use by ServiceLB."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"By default, nodes are not labeled. As long as all nodes remain unlabeled, all nodes with ports available will be used by ServiceLB.")),(0,r.kt)("h3",{id:"creating-servicelb-node-pools"},"Creating ServiceLB Node Pools"),(0,r.kt)("p",null,"To select a particular subset of nodes to host pods for a LoadBalancer, add the ",(0,r.kt)("inlineCode",{parentName:"p"},"enablelb")," label to the desired nodes, and set matching ",(0,r.kt)("inlineCode",{parentName:"p"},"lbpool")," label values on the Nodes and Services. For example:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Label Node A and Node B with ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")),(0,r.kt)("li",{parentName:"ol"},"Label Node C and Node D with ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")),(0,r.kt)("li",{parentName:"ol"},"Create one LoadBalancer Service on port 443 with label ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1"),". The DaemonSet for this service only deploy Pods to Node A and Node B."),(0,r.kt)("li",{parentName:"ol"},"Create another LoadBalancer Service on port 443 with label ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2"),". The DaemonSet will only deploy Pods to Node C and Node D.")),(0,r.kt)("h3",{id:"disabling-servicelb"},"Disabling ServiceLB"),(0,r.kt)("p",null,"To disable ServiceLB, configure all servers in the cluster with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=servicelb")," flag."),(0,r.kt)("p",null,"This is necessary if you wish to run a different LB, such as MetalLB."),(0,r.kt)("h2",{id:"deploying-an-external-cloud-controller-manager"},"Deploying an External Cloud Controller Manager"),(0,r.kt)("p",null,'In order to reduce binary size, K3s removes all "in-tree" (built-in) cloud providers. Instead, K3s provides an embedded Cloud Controller Manager (CCM) stub that does the following:'),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Sets node InternalIP and ExternalIP address fields based on the ",(0,r.kt)("inlineCode",{parentName:"li"},"--node-ip")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"--node-external-ip")," flags."),(0,r.kt)("li",{parentName:"ul"},"Hosts the ServiceLB LoadBalancer controller."),(0,r.kt)("li",{parentName:"ul"},"Clears the ",(0,r.kt)("inlineCode",{parentName:"li"},"node.cloudprovider.kubernetes.io/uninitialized")," taint that is present when the cloud-provider is set to ",(0,r.kt)("inlineCode",{parentName:"li"},"external")," ")),(0,r.kt)("p",null,"Before deploying an external CCM, you must start all K3s servers with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-cloud-controller")," flag to disable to embedded CCM. "),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"If you disable the built-in CCM and do not deploy and properly configure an external substitute, nodes will remain tainted and unschedulable.")),(0,r.kt)("h2",{id:"nodes-without-a-hostname"},"Nodes Without a Hostname"),(0,r.kt)("p",null,'Some cloud providers, such as Linode, will create machines with "localhost" as the hostname and others may not have a hostname set at all. This can cause problems with domain name resolution. You can run K3s with the ',(0,r.kt)("inlineCode",{parentName:"p"},"--node-name")," flag or ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," environment variable and this will pass the node name to resolve this issue."),(0,r.kt)("h2",{id:"multicluster-cidr-experimental"},"Multicluster CIDR (Experimental)"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Experimental as of v1.26.3+k3s1")),(0,r.kt)("admonition",{title:"Warning",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"The network policy controller could not work properly when this flag is enabled.")),(0,r.kt)("p",null,"From ",(0,r.kt)("inlineCode",{parentName:"p"},"v1.26")," Kubernetes introduced Multicluster CIDR as an alpha feature. (",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"},"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"),")"),(0,r.kt)("p",null,"This feature can be enabled on K3s server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--multi-cluster-cidr")," flag and it gives the possibility to define multiple cluster CIDR used to allocate the podCIDR for each node with also the possibility to extend it on an already running cluster.\nThe ",(0,r.kt)("inlineCode",{parentName:"p"},"clustercidr")," resources will be visible through the API and ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl")," (the CIDR configured with ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," is defined as the default one)."),(0,r.kt)("p",null,"A new ",(0,r.kt)("inlineCode",{parentName:"p"},"clustercidr")," can be defined as follow:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'apiVersion: networking.k8s.io/v1alpha1\nkind: ClusterCIDR\nmetadata:\n  name: new-cidr\nspec:\n  nodeSelector:\n    nodeSelectorTerms:\n      - matchExpressions:\n        - key: kubernetes.io/hostname\n          operator: In\n          values:\n          -  "worker2"\n  perNodeHostBits: 8\n  ipv4: 10.247.0.0/16\n')),(0,r.kt)("p",null,"The nodes that match the ",(0,r.kt)("inlineCode",{parentName:"p"},"nodeSelector")," will use a podCIDR from the new defined resource."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"A node that already has a CIDR cannot get a new one. It has to be removed and restarted.")),(0,r.kt)("admonition",{title:"Warning",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"A dualstack CIDR could be defined with both ",(0,r.kt)("inlineCode",{parentName:"p"},"ipv4")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"ipv6")," configuration but the ",(0,r.kt)("inlineCode",{parentName:"p"},"perNodeHostBits")," will be the same. When a dualstack configuration is defined with ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," the ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-cidr-mask-size-ipv6")," flag on the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-controller")," should be defined to have the same size of IPv4.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7893],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var o=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function a(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?a(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,o,r=function(e,t){if(null==e)return{};var n,o,r={},a=Object.keys(e);for(o=0;o<a.length;o++)n=a[o],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(o=0;o<a.length;o++)n=a[o],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=o.createContext({}),d=function(e){var t=o.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return o.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return o.createElement(o.Fragment,{},t)}},u=o.forwardRef((function(e,t){var n=e.components,r=e.mdxType,a=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=r,h=u["".concat(s,".").concat(m)]||u[m]||c[m]||a;return n?o.createElement(h,i(i({ref:t},p),{},{components:n})):o.createElement(h,i({ref:t},p))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var a=n.length,i=new Array(a);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var d=2;d<a;d++)i[d]=n[d];return o.createElement.apply(null,i)}return o.createElement.apply(null,n)}u.displayName="MDXCreateElement"},6193:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>c,frontMatter:()=>a,metadata:()=>l,toc:()=>d});var o=n(3117),r=(n(7294),n(3905));const a={title:"Networking",weight:35},i=void 0,l={unversionedId:"networking/networking",id:"networking/networking",title:"Networking",description:"This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s.",source:"@site/docs/networking/networking.md",sourceDirName:"networking",slug:"/networking/",permalink:"/networking/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Networking",weight:35},sidebar:"mySidebar",previous:{title:"Volumes and Storage",permalink:"/storage/"},next:{title:"Helm",permalink:"/helm/"}},s={},d=[{value:"CoreDNS",id:"coredns",level:2},{value:"Traefik Ingress Controller",id:"traefik-ingress-controller",level:2},{value:"Network Policy Controller",id:"network-policy-controller",level:2},{value:"Service Load Balancer",id:"service-load-balancer",level:2},{value:"How ServiceLB Works",id:"how-servicelb-works",level:3},{value:"Usage",id:"usage",level:3},{value:"Controlling ServiceLB Node Selection",id:"controlling-servicelb-node-selection",level:3},{value:"Creating ServiceLB Node Pools",id:"creating-servicelb-node-pools",level:3},{value:"Disabling ServiceLB",id:"disabling-servicelb",level:3},{value:"Deploying an External Cloud Controller Manager",id:"deploying-an-external-cloud-controller-manager",level:2},{value:"Nodes Without a Hostname",id:"nodes-without-a-hostname",level:2},{value:"Multicluster CIDR (Experimental)",id:"multicluster-cidr-experimental",level:2}],p={toc:d};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,o.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s."),(0,r.kt)("p",null,"Refer to the ",(0,r.kt)("a",{parentName:"p",href:"/installation/network-options"},"Installation Network Options")," page for details on Flannel configuration options and backend selection, or how to set up your own CNI."),(0,r.kt)("p",null,"For information on which ports need to be opened for K3s, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/installation/requirements#networking"},"Networking Requirements"),"."),(0,r.kt)("h2",{id:"coredns"},"CoreDNS"),(0,r.kt)("p",null,"CoreDNS is deployed automatically on server startup. To disable it, configure all servers in the cluster with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=coredns")," option."),(0,r.kt)("p",null,"If you don't install CoreDNS, you will need to install a cluster DNS provider yourself."),(0,r.kt)("h2",{id:"traefik-ingress-controller"},"Traefik Ingress Controller"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://traefik.io/"},"Traefik")," is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It simplifies networking complexity while designing, deploying, and running applications."),(0,r.kt)("p",null,"The Traefik ingress controller deploys a LoadBalancer Service that uses ports 80 and 443. By default, ServiceLB will expose these ports on all cluster members, meaning these ports will not be usable for other HostPort or NodePort pods."),(0,r.kt)("p",null,"Traefik is deployed by default when starting the server. For more information see ",(0,r.kt)("a",{parentName:"p",href:"/installation/packaged-components"},"Managing Packaged Components"),". The default config file is found in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik.yaml"),"."),(0,r.kt)("p",null,"The ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," file should not be edited manually, as K3s will replace the file with defaults at startup. Instead, you should customize Traefik by creating an additional ",(0,r.kt)("inlineCode",{parentName:"p"},"HelmChartConfig")," manifest in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),". For more details and an example see ",(0,r.kt)("a",{parentName:"p",href:"/helm/#customizing-packaged-components-with-helmchartconfig"},"Customizing Packaged Components with HelmChartConfig"),". For more information on the possible configuration values, refer to the official ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-helm-chart/tree/master/traefik"},"Traefik Helm Configuration Parameters."),"."),(0,r.kt)("p",null,"To remove Traefik from your cluster, start all servers with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," flag."),(0,r.kt)("p",null,"K3s versions 1.20 and earlier include Traefik v1. K3s versions 1.21 and later install Traefik v2, unless an existing installation of Traefik v1 is found, in which case Traefik is not upgraded to v2. For more information on the specific version of Traefik included with K3s, consult the Release Notes for your version."),(0,r.kt)("p",null,"To migrate from an older Traefik v1 instance please refer to the ",(0,r.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik documentation")," and ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"migration tool"),"."),(0,r.kt)("h2",{id:"network-policy-controller"},"Network Policy Controller"),(0,r.kt)("p",null,"K3s includes an embedded network policy controller. The underlying implementation is ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/cloudnativelabs/kube-router"},"kube-router's")," netpol controller library (no other kube-router functionality is present) and can be found ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol"},"here"),". "),(0,r.kt)("p",null,"To disable it, start each server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," flag."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Network policy iptables rules are not removed if the K3s configuration is changed to disable the network policy controller. To clean up the configured kube-router network policy rules after disabling the network policy controller, use the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," script, or clean them using ",(0,r.kt)("inlineCode",{parentName:"p"},"iptables-save")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"iptables-restore"),". These steps must be ryn manually on all nodes in the cluster."),(0,r.kt)("pre",{parentName:"admonition"},(0,r.kt)("code",{parentName:"pre"},"iptables-save | grep -v KUBE-ROUTER | iptables-restore\nip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore\n"))),(0,r.kt)("h2",{id:"service-load-balancer"},"Service Load Balancer"),(0,r.kt)("p",null,"Any LoadBalancer controller can be deployed to your K3s cluster. By default, K3s provides a load balancer known as ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/klipper-lb"},"ServiceLB")," (formerly Klipper LoadBalancer) that uses available host ports."),(0,r.kt)("p",null,"Upstream Kubernetes allows Services of type LoadBalancer to be created, but doesn't include a default load balancer implementation, so these services will remain ",(0,r.kt)("inlineCode",{parentName:"p"},"pending")," until one is installed. Many hosted services require a cloud provider such as Amazon EC2 or Microsoft Azure to offer an external load balancer implementation. By contrast, the K3s ServiceLB makes it possible to use LoadBalancer Services without a cloud provider or any additional configuration."),(0,r.kt)("h3",{id:"how-servicelb-works"},"How ServiceLB Works"),(0,r.kt)("p",null,"The ServiceLB controller watches Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/"},"Services")," with the ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.type")," field set to ",(0,r.kt)("inlineCode",{parentName:"p"},"LoadBalancer"),"."),(0,r.kt)("p",null,"For each LoadBalancer Service, a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/"},"DaemonSet")," is created in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. This DaemonSet in turn creates Pods with a ",(0,r.kt)("inlineCode",{parentName:"p"},"svc-")," prefix, on each node. These Pods use iptables to forward traffic from the Pod's NodePort, to the Service's ClusterIP address and port."),(0,r.kt)("p",null,"If the ServiceLB Pod runs on a node that has an external IP configured, the node's external IP is populated into the Service's ",(0,r.kt)("inlineCode",{parentName:"p"},"status.loadBalancer.ingress")," address list. Otherwise, the node's internal IP is used."),(0,r.kt)("p",null,"If multiple LoadBalancer Services are created, a separate DaemonSet is created for each Service."),(0,r.kt)("p",null,"It is possible to expose multiple Services on the same node, as long as they use different ports."),(0,r.kt)("p",null,"If you try to create a LoadBalancer Service that listens on port 80, the ServiceLB will try to find a free host in the cluster for port 80. If no host with that port is available, the LB will remain Pending."),(0,r.kt)("h3",{id:"usage"},"Usage"),(0,r.kt)("p",null,"Create a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer"},"Service of type LoadBalancer")," in K3s."),(0,r.kt)("h3",{id:"controlling-servicelb-node-selection"},"Controlling ServiceLB Node Selection"),(0,r.kt)("p",null,"Adding the ",(0,r.kt)("inlineCode",{parentName:"p"},"svccontroller.k3s.cattle.io/enablelb=true")," label to one or more nodes switches the ServiceLB controller into allow-list mode, where only nodes with the label are eligible to host LoadBalancer pods. Nodes that remain unlabeled will be excluded from use by ServiceLB."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"By default, nodes are not labeled. As long as all nodes remain unlabeled, all nodes with ports available will be used by ServiceLB.")),(0,r.kt)("h3",{id:"creating-servicelb-node-pools"},"Creating ServiceLB Node Pools"),(0,r.kt)("p",null,"To select a particular subset of nodes to host pods for a LoadBalancer, add the ",(0,r.kt)("inlineCode",{parentName:"p"},"enablelb")," label to the desired nodes, and set matching ",(0,r.kt)("inlineCode",{parentName:"p"},"lbpool")," label values on the Nodes and Services. For example:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Label Node A and Node B with ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")),(0,r.kt)("li",{parentName:"ol"},"Label Node C and Node D with ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")),(0,r.kt)("li",{parentName:"ol"},"Create one LoadBalancer Service on port 443 with label ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1"),". The DaemonSet for this service only deploy Pods to Node A and Node B."),(0,r.kt)("li",{parentName:"ol"},"Create another LoadBalancer Service on port 443 with label ",(0,r.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2"),". The DaemonSet will only deploy Pods to Node C and Node D.")),(0,r.kt)("h3",{id:"disabling-servicelb"},"Disabling ServiceLB"),(0,r.kt)("p",null,"To disable ServiceLB, configure all servers in the cluster with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=servicelb")," flag."),(0,r.kt)("p",null,"This is necessary if you wish to run a different LB, such as MetalLB."),(0,r.kt)("h2",{id:"deploying-an-external-cloud-controller-manager"},"Deploying an External Cloud Controller Manager"),(0,r.kt)("p",null,'In order to reduce binary size, K3s removes all "in-tree" (built-in) cloud providers. Instead, K3s provides an embedded Cloud Controller Manager (CCM) stub that does the following:'),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Sets node InternalIP and ExternalIP address fields based on the ",(0,r.kt)("inlineCode",{parentName:"li"},"--node-ip")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"--node-external-ip")," flags."),(0,r.kt)("li",{parentName:"ul"},"Hosts the ServiceLB LoadBalancer controller."),(0,r.kt)("li",{parentName:"ul"},"Clears the ",(0,r.kt)("inlineCode",{parentName:"li"},"node.cloudprovider.kubernetes.io/uninitialized")," taint that is present when the cloud-provider is set to ",(0,r.kt)("inlineCode",{parentName:"li"},"external")," ")),(0,r.kt)("p",null,"Before deploying an external CCM, you must start all K3s servers with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-cloud-controller")," flag to disable to embedded CCM. "),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"If you disable the built-in CCM and do not deploy and properly configure an external substitute, nodes will remain tainted and unschedulable.")),(0,r.kt)("h2",{id:"nodes-without-a-hostname"},"Nodes Without a Hostname"),(0,r.kt)("p",null,'Some cloud providers, such as Linode, will create machines with "localhost" as the hostname and others may not have a hostname set at all. This can cause problems with domain name resolution. You can run K3s with the ',(0,r.kt)("inlineCode",{parentName:"p"},"--node-name")," flag or ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," environment variable and this will pass the node name to resolve this issue."),(0,r.kt)("h2",{id:"multicluster-cidr-experimental"},"Multicluster CIDR (Experimental)"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Experimental as of v1.26.3+k3s1")),(0,r.kt)("admonition",{title:"Warning",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"The network policy controller could not work properly when this flag is enabled.")),(0,r.kt)("p",null,"From ",(0,r.kt)("inlineCode",{parentName:"p"},"v1.26")," Kubernetes introduced Multicluster CIDR as an alpha feature. (",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"},"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"),")"),(0,r.kt)("p",null,"This feature can be enabled on K3s server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--multi-cluster-cidr")," flag and it gives the possibility to define multiple cluster CIDR used to allocate the podCIDR for each node with also the possibility to extend it on an already running cluster.\nThe ",(0,r.kt)("inlineCode",{parentName:"p"},"clustercidr")," resources will be visible through the API and ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl")," (the CIDR configured with ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," is defined as the default one)."),(0,r.kt)("p",null,"A new ",(0,r.kt)("inlineCode",{parentName:"p"},"clustercidr")," can be defined as follow:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'apiVersion: networking.k8s.io/v1alpha1\nkind: ClusterCIDR\nmetadata:\n  name: new-cidr\nspec:\n  nodeSelector:\n    nodeSelectorTerms:\n      - matchExpressions:\n        - key: kubernetes.io/hostname\n          operator: In\n          values:\n          -  "worker2"\n  perNodeHostBits: 8\n  ipv4: 10.247.0.0/16\n')),(0,r.kt)("p",null,"The nodes that match the ",(0,r.kt)("inlineCode",{parentName:"p"},"nodeSelector")," will use a podCIDR from the new defined resource."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"A node that already has a CIDR cannot get a new one. It has to be removed and restarted.")),(0,r.kt)("admonition",{title:"Warning",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"A dualstack CIDR could be defined with both ",(0,r.kt)("inlineCode",{parentName:"p"},"ipv4")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"ipv6")," configuration but the ",(0,r.kt)("inlineCode",{parentName:"p"},"perNodeHostBits")," will be the same. When a dualstack configuration is defined with ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," the ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-cidr-mask-size-ipv6")," flag on the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-controller")," should be defined to have the same size of IPv4.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/f8eefdc6.e2159cf3.js b/assets/js/f8eefdc6.f7244d92.js
similarity index 99%
rename from assets/js/f8eefdc6.e2159cf3.js
rename to assets/js/f8eefdc6.f7244d92.js
index c97bae187..8de9b47e0 100644
--- a/assets/js/f8eefdc6.e2159cf3.js
+++ b/assets/js/f8eefdc6.f7244d92.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5234],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),d=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=a,g=u["".concat(s,".").concat(m)]||u[m]||p[m]||o;return n?r.createElement(g,i(i({ref:t},c),{},{components:n})):r.createElement(g,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},7011:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const o={title:"Managing Server Roles",weight:60},i=void 0,l={unversionedId:"installation/server-roles",id:"installation/server-roles",title:"Managing Server Roles",description:"Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.",source:"@site/docs/installation/server-roles.md",sourceDirName:"installation",slug:"/installation/server-roles",permalink:"/installation/server-roles",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Managing Server Roles",weight:60},sidebar:"mySidebar",previous:{title:"Air-Gap Install",permalink:"/installation/airgap"},next:{title:"Managing Packaged Components",permalink:"/installation/packaged-components"}},s={},d=[{value:"Dedicated <code>etcd</code> Nodes",id:"dedicated-etcd-nodes",level:2},{value:"Dedicated <code>control-plane</code> Nodes",id:"dedicated-control-plane-nodes",level:2},{value:"Adding Roles To Existing Servers",id:"adding-roles-to-existing-servers",level:2},{value:"Configuration File Syntax",id:"configuration-file-syntax",level:2}],c={toc:d};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Starting the K3s server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.")),(0,a.kt)("h2",{id:"dedicated-etcd-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"etcd")," Nodes"),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role, start K3s with all the control-plane components disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},"curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler\n")),(0,a.kt)("p",null,"This first node will start etcd, and wait for additional ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," and/or ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes to join. The cluster will not be usable until you join an additional server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," components enabled."),(0,a.kt)("h2",{id:"dedicated-control-plane-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"control-plane")," Nodes"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"A dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," node cannot be the first server in the cluster; there must be an existing node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role before joining dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes.")),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role, start k3s with etcd disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443 \n")),(0,a.kt)("p",null,"After creating dedicated server nodes, the selected roles will be visible in ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl get node"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME           STATUS   ROLES                       AGE     VERSION\nk3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1\nk3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1\n")),(0,a.kt)("h2",{id:"adding-roles-to-existing-servers"},"Adding Roles To Existing Servers"),(0,a.kt)("p",null,"Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role to a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can remove the ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-apiserver --disable-controller-manager --disable-scheduler")," flags from the systemd unit or config file, and restart the service."),(0,a.kt)("h2",{id:"configuration-file-syntax"},"Configuration File Syntax"),(0,a.kt)("p",null,"As with all other CLI flags, you can use the  ",(0,a.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"Configuration File")," to disable components, instead of passing the options as CLI flags. For example, to create a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can place the following values in ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"cluster-init: true\ndisable-apiserver: true\ndisable-controller-manager: true\ndisable-scheduler: true\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5234],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),d=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=a,g=u["".concat(s,".").concat(m)]||u[m]||p[m]||o;return n?r.createElement(g,i(i({ref:t},c),{},{components:n})):r.createElement(g,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},7011:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const o={title:"Managing Server Roles",weight:60},i=void 0,l={unversionedId:"installation/server-roles",id:"installation/server-roles",title:"Managing Server Roles",description:"Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.",source:"@site/docs/installation/server-roles.md",sourceDirName:"installation",slug:"/installation/server-roles",permalink:"/installation/server-roles",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Managing Server Roles",weight:60},sidebar:"mySidebar",previous:{title:"Air-Gap Install",permalink:"/installation/airgap"},next:{title:"Managing Packaged Components",permalink:"/installation/packaged-components"}},s={},d=[{value:"Dedicated <code>etcd</code> Nodes",id:"dedicated-etcd-nodes",level:2},{value:"Dedicated <code>control-plane</code> Nodes",id:"dedicated-control-plane-nodes",level:2},{value:"Adding Roles To Existing Servers",id:"adding-roles-to-existing-servers",level:2},{value:"Configuration File Syntax",id:"configuration-file-syntax",level:2}],c={toc:d};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Starting the K3s server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.")),(0,a.kt)("h2",{id:"dedicated-etcd-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"etcd")," Nodes"),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role, start K3s with all the control-plane components disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},"curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler\n")),(0,a.kt)("p",null,"This first node will start etcd, and wait for additional ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," and/or ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes to join. The cluster will not be usable until you join an additional server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," components enabled."),(0,a.kt)("h2",{id:"dedicated-control-plane-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"control-plane")," Nodes"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"A dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," node cannot be the first server in the cluster; there must be an existing node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role before joining dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes.")),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role, start k3s with etcd disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443 \n")),(0,a.kt)("p",null,"After creating dedicated server nodes, the selected roles will be visible in ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl get node"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME           STATUS   ROLES                       AGE     VERSION\nk3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1\nk3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1\n")),(0,a.kt)("h2",{id:"adding-roles-to-existing-servers"},"Adding Roles To Existing Servers"),(0,a.kt)("p",null,"Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role to a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can remove the ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-apiserver --disable-controller-manager --disable-scheduler")," flags from the systemd unit or config file, and restart the service."),(0,a.kt)("h2",{id:"configuration-file-syntax"},"Configuration File Syntax"),(0,a.kt)("p",null,"As with all other CLI flags, you can use the  ",(0,a.kt)("a",{parentName:"p",href:"/installation/configuration#configuration-file"},"Configuration File")," to disable components, instead of passing the options as CLI flags. For example, to create a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can place the following values in ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"cluster-init: true\ndisable-apiserver: true\ndisable-controller-manager: true\ndisable-scheduler: true\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/fc39421f.791a1427.js b/assets/js/fc39421f.c11681ed.js
similarity index 99%
rename from assets/js/fc39421f.791a1427.js
rename to assets/js/fc39421f.c11681ed.js
index a776e6b70..e9cd7a3fa 100644
--- a/assets/js/fc39421f.791a1427.js
+++ b/assets/js/fc39421f.c11681ed.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9778],{3905:(e,t,a)=>{a.d(t,{Zo:()=>m,kt:()=>k});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),u=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},m=function(e){var t=u(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,m=o(e,["components","mdxType","originalType","parentName"]),d=u(a),k=r,g=d["".concat(s,".").concat(k)]||d[k]||p[k]||l;return a?n.createElement(g,i(i({ref:t},m),{},{components:a})):n.createElement(g,i({ref:t},m))}));function k(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var u=2;u<l;u++)i[u]=a[u];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},1321:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var n=a(3117),r=(a(7294),a(3905));const l={title:"Resource Profiling",weight:1},i=void 0,o={unversionedId:"reference/resource-profiling",id:"reference/resource-profiling",title:"Resource Profiling",description:"This section captures the results of tests to determine minimum resource requirements for K3s.",source:"@site/docs/reference/resource-profiling.md",sourceDirName:"reference",slug:"/reference/resource-profiling",permalink:"/reference/resource-profiling",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Resource Profiling",weight:1},sidebar:"mySidebar",previous:{title:"Environment Variables",permalink:"/reference/env-variables"},next:{title:"Known Issues",permalink:"/known-issues/"}},s={},u=[{value:"Scope of Resource Testing",id:"scope-of-resource-testing",level:2},{value:"Components Included for Baseline Measurements",id:"components-included-for-baseline-measurements",level:2},{value:"Methodology",id:"methodology",level:2},{value:"Environment",id:"environment",level:2},{value:"Baseline Resource Requirements",id:"baseline-resource-requirements",level:2},{value:"K3s Server with a Workload",id:"k3s-server-with-a-workload",level:3},{value:"K3s Cluster with a Single Agent",id:"k3s-cluster-with-a-single-agent",level:3},{value:"K3s Server",id:"k3s-server",level:4},{value:"K3s Agent",id:"k3s-agent",level:3},{value:"Analysis",id:"analysis",level:2},{value:"Primary Resource Utilization Drivers",id:"primary-resource-utilization-drivers",level:3},{value:"Preventing Agents and Workloads from Interfering with the Cluster Datastore",id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore",level:3}],m={toc:u};function p(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},m,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for K3s."),(0,r.kt)("p",null,"The results are summarized as follows:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Components"),(0,r.kt)("th",{parentName:"tr",align:null},"Processor"),(0,r.kt)("th",{parentName:"tr",align:null},"Min CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"Min RAM with Kine/SQLite"),(0,r.kt)("th",{parentName:"tr",align:null},"Min RAM with Embedded etcd"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"6% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1596 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1606 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1428 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1450 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"3% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"275 M"),(0,r.kt)("td",{parentName:"tr",align:null},"275 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"30% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1588 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1613 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"25% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1215 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1413 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"268 M"),(0,r.kt)("td",{parentName:"tr",align:null},"268 M")))),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#scope-of-resource-testing"},"Scope of Resource Testing")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#components-included-for-baseline-measurements"},"Components Included for Baseline Measurements")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#methodology"},"Methodology")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#environment"},"Environment")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#baseline-resource-requirements"},"Baseline Resource Requirements"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-server-with-a-workload"},"K3s Server with a Workload")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-agent"},"K3s Agent")))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#analysis"},"Analysis"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"))))),(0,r.kt)("h2",{id:"scope-of-resource-testing"},"Scope of Resource Testing"),(0,r.kt)("p",null,"The resource tests were intended to address the following problem statements:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster."),(0,r.kt)("li",{parentName:"ul"},"On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).")),(0,r.kt)("h2",{id:"components-included-for-baseline-measurements"},"Components Included for Baseline Measurements"),(0,r.kt)("p",null,"The tested components are:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"K3s v1.26.5 with all packaged components enabled"),(0,r.kt)("li",{parentName:"ul"},"Prometheus + Grafana monitoring stack"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"Kubernetes Example Nginx Deployment"))),(0,r.kt)("p",null,"These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app."),(0,r.kt)("p",null,"Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. "),(0,r.kt)("h2",{id:"methodology"},"Methodology"),(0,r.kt)("p",null,"A standalone instance of Prometheus v2.43.0 was used to collect host CPU, memory, and disk IO statistics using ",(0,r.kt)("inlineCode",{parentName:"p"},"prometheus-node-exporter")," installed via apt."),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"systemd-cgtop")," was used to spot-check systemd cgroup-level CPU and memory utilization. ",(0,r.kt)("inlineCode",{parentName:"p"},"system.slice/k3s.service")," tracks resource utilization for both K3s and containerd, while individual pods are under the ",(0,r.kt)("inlineCode",{parentName:"p"},"kubepods")," hierarchy."),(0,r.kt)("p",null,"Additional detailed K3s memory utilization data was collected from ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl top node")," using the integrated metrics-server for the server and agent processes."),(0,r.kt)("p",null,"Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads."),(0,r.kt)("h2",{id:"environment"},"Environment"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Arch"),(0,r.kt)("th",{parentName:"tr",align:null},"OS"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"),(0,r.kt)("th",{parentName:"tr",align:null},"Disk"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"x86_64"),(0,r.kt)("td",{parentName:"tr",align:null},"Ubuntu 22.04"),(0,r.kt)("td",{parentName:"tr",align:null},"AWS c6id.xlarge"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"NVME SSD")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"aarch64"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi OS 11"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi 4 Model B"),(0,r.kt)("td",{parentName:"tr",align:null},"BCM2711, 4 Core 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"UHS-III SDXC")))),(0,r.kt)("h2",{id:"baseline-resource-requirements"},"Baseline Resource Requirements"),(0,r.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for basic K3s operation."),(0,r.kt)("h3",{id:"k3s-server-with-a-workload"},"K3s Server with a Workload"),(0,r.kt)("p",null,"These are the requirements for a single-node cluster in which the K3s server shares resources with a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"simple workload"),"."),(0,r.kt)("p",null,"The CPU requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU Core Usage"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"6% of a core")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"30% of a core")))),(0,r.kt)("p",null,"The Memory Requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"Memory"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1596 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1588 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1606 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1613 M")))),(0,r.kt)("p",null,"The Disk requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,r.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,r.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,r.kt)("th",{parentName:"tr",align:null},"Latency"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"10"),(0,r.kt)("td",{parentName:"tr",align:null},"500"),(0,r.kt)("td",{parentName:"tr",align:null},"< 10 ms")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"50"),(0,r.kt)("td",{parentName:"tr",align:null},"250"),(0,r.kt)("td",{parentName:"tr",align:null},"< 5 ms")))),(0,r.kt)("h3",{id:"k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent"),(0,r.kt)("p",null,"These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload."),(0,r.kt)("h4",{id:"k3s-server"},"K3s Server"),(0,r.kt)("p",null,"The CPU requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU Core Usage"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"5% of a core")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"25% of a core")))),(0,r.kt)("p",null,"The Memory Requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"Memory"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1428 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1215 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1450 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1413 M")))),(0,r.kt)("h3",{id:"k3s-agent"},"K3s Agent"),(0,r.kt)("p",null,"The requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU Core Usage"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"3% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"275 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"268 M")))),(0,r.kt)("h2",{id:"analysis"},"Analysis"),(0,r.kt)("p",null,"This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,r.kt)("h3",{id:"primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers"),(0,r.kt)("p",null,"K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server's resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server's resource requirements."),(0,r.kt)("p",null,"K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts."),(0,r.kt)("h3",{id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"),(0,r.kt)("p",null,"When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore."),(0,r.kt)("p",null,"This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store."),(0,r.kt)("p",null,"Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore."),(0,r.kt)("p",null,"Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9778],{3905:(e,t,a)=>{a.d(t,{Zo:()=>m,kt:()=>k});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var s=n.createContext({}),u=function(e){var t=n.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},m=function(e){var t=u(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,m=o(e,["components","mdxType","originalType","parentName"]),d=u(a),k=r,g=d["".concat(s,".").concat(k)]||d[k]||p[k]||l;return a?n.createElement(g,i(i({ref:t},m),{},{components:a})):n.createElement(g,i({ref:t},m))}));function k(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var u=2;u<l;u++)i[u]=a[u];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},1321:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var n=a(3117),r=(a(7294),a(3905));const l={title:"Resource Profiling",weight:1},i=void 0,o={unversionedId:"reference/resource-profiling",id:"reference/resource-profiling",title:"Resource Profiling",description:"This section captures the results of tests to determine minimum resource requirements for K3s.",source:"@site/docs/reference/resource-profiling.md",sourceDirName:"reference",slug:"/reference/resource-profiling",permalink:"/reference/resource-profiling",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Resource Profiling",weight:1},sidebar:"mySidebar",previous:{title:"Environment Variables",permalink:"/reference/env-variables"},next:{title:"Known Issues",permalink:"/known-issues/"}},s={},u=[{value:"Scope of Resource Testing",id:"scope-of-resource-testing",level:2},{value:"Components Included for Baseline Measurements",id:"components-included-for-baseline-measurements",level:2},{value:"Methodology",id:"methodology",level:2},{value:"Environment",id:"environment",level:2},{value:"Baseline Resource Requirements",id:"baseline-resource-requirements",level:2},{value:"K3s Server with a Workload",id:"k3s-server-with-a-workload",level:3},{value:"K3s Cluster with a Single Agent",id:"k3s-cluster-with-a-single-agent",level:3},{value:"K3s Server",id:"k3s-server",level:4},{value:"K3s Agent",id:"k3s-agent",level:3},{value:"Analysis",id:"analysis",level:2},{value:"Primary Resource Utilization Drivers",id:"primary-resource-utilization-drivers",level:3},{value:"Preventing Agents and Workloads from Interfering with the Cluster Datastore",id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore",level:3}],m={toc:u};function p(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},m,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for K3s."),(0,r.kt)("p",null,"The results are summarized as follows:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Components"),(0,r.kt)("th",{parentName:"tr",align:null},"Processor"),(0,r.kt)("th",{parentName:"tr",align:null},"Min CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"Min RAM with Kine/SQLite"),(0,r.kt)("th",{parentName:"tr",align:null},"Min RAM with Embedded etcd"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"6% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1596 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1606 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1428 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1450 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"3% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"275 M"),(0,r.kt)("td",{parentName:"tr",align:null},"275 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"30% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1588 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1613 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"25% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"1215 M"),(0,r.kt)("td",{parentName:"tr",align:null},"1413 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"268 M"),(0,r.kt)("td",{parentName:"tr",align:null},"268 M")))),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#scope-of-resource-testing"},"Scope of Resource Testing")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#components-included-for-baseline-measurements"},"Components Included for Baseline Measurements")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#methodology"},"Methodology")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#environment"},"Environment")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#baseline-resource-requirements"},"Baseline Resource Requirements"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-server-with-a-workload"},"K3s Server with a Workload")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-agent"},"K3s Agent")))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#analysis"},"Analysis"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"))))),(0,r.kt)("h2",{id:"scope-of-resource-testing"},"Scope of Resource Testing"),(0,r.kt)("p",null,"The resource tests were intended to address the following problem statements:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster."),(0,r.kt)("li",{parentName:"ul"},"On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).")),(0,r.kt)("h2",{id:"components-included-for-baseline-measurements"},"Components Included for Baseline Measurements"),(0,r.kt)("p",null,"The tested components are:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"K3s v1.26.5 with all packaged components enabled"),(0,r.kt)("li",{parentName:"ul"},"Prometheus + Grafana monitoring stack"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"Kubernetes Example Nginx Deployment"))),(0,r.kt)("p",null,"These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app."),(0,r.kt)("p",null,"Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. "),(0,r.kt)("h2",{id:"methodology"},"Methodology"),(0,r.kt)("p",null,"A standalone instance of Prometheus v2.43.0 was used to collect host CPU, memory, and disk IO statistics using ",(0,r.kt)("inlineCode",{parentName:"p"},"prometheus-node-exporter")," installed via apt."),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"systemd-cgtop")," was used to spot-check systemd cgroup-level CPU and memory utilization. ",(0,r.kt)("inlineCode",{parentName:"p"},"system.slice/k3s.service")," tracks resource utilization for both K3s and containerd, while individual pods are under the ",(0,r.kt)("inlineCode",{parentName:"p"},"kubepods")," hierarchy."),(0,r.kt)("p",null,"Additional detailed K3s memory utilization data was collected from ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl top node")," using the integrated metrics-server for the server and agent processes."),(0,r.kt)("p",null,"Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads."),(0,r.kt)("h2",{id:"environment"},"Environment"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Arch"),(0,r.kt)("th",{parentName:"tr",align:null},"OS"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"),(0,r.kt)("th",{parentName:"tr",align:null},"Disk"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"x86_64"),(0,r.kt)("td",{parentName:"tr",align:null},"Ubuntu 22.04"),(0,r.kt)("td",{parentName:"tr",align:null},"AWS c6id.xlarge"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"NVME SSD")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"aarch64"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi OS 11"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi 4 Model B"),(0,r.kt)("td",{parentName:"tr",align:null},"BCM2711, 4 Core 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"UHS-III SDXC")))),(0,r.kt)("h2",{id:"baseline-resource-requirements"},"Baseline Resource Requirements"),(0,r.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for basic K3s operation."),(0,r.kt)("h3",{id:"k3s-server-with-a-workload"},"K3s Server with a Workload"),(0,r.kt)("p",null,"These are the requirements for a single-node cluster in which the K3s server shares resources with a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"simple workload"),"."),(0,r.kt)("p",null,"The CPU requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU Core Usage"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"6% of a core")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"30% of a core")))),(0,r.kt)("p",null,"The Memory Requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"Memory"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1596 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1588 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1606 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1613 M")))),(0,r.kt)("p",null,"The Disk requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,r.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,r.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,r.kt)("th",{parentName:"tr",align:null},"Latency"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"10"),(0,r.kt)("td",{parentName:"tr",align:null},"500"),(0,r.kt)("td",{parentName:"tr",align:null},"< 10 ms")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"50"),(0,r.kt)("td",{parentName:"tr",align:null},"250"),(0,r.kt)("td",{parentName:"tr",align:null},"< 5 ms")))),(0,r.kt)("h3",{id:"k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent"),(0,r.kt)("p",null,"These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload."),(0,r.kt)("h4",{id:"k3s-server"},"K3s Server"),(0,r.kt)("p",null,"The CPU requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU Core Usage"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"5% of a core")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"25% of a core")))),(0,r.kt)("p",null,"The Memory Requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"Memory"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1428 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1215 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1450 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1413 M")))),(0,r.kt)("h3",{id:"k3s-agent"},"K3s Agent"),(0,r.kt)("p",null,"The requirements are:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU Core Usage"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"3% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"275 M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,r.kt)("td",{parentName:"tr",align:null},"268 M")))),(0,r.kt)("h2",{id:"analysis"},"Analysis"),(0,r.kt)("p",null,"This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,r.kt)("h3",{id:"primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers"),(0,r.kt)("p",null,"K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server's resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server's resource requirements."),(0,r.kt)("p",null,"K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts."),(0,r.kt)("h3",{id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"),(0,r.kt)("p",null,"When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore."),(0,r.kt)("p",null,"This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store."),(0,r.kt)("p",null,"Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore."),(0,r.kt)("p",null,"Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/assets/js/main.09cd452e.js b/assets/js/main.09cd452e.js
new file mode 100644
index 000000000..0e02b91bf
--- /dev/null
+++ b/assets/js/main.09cd452e.js
@@ -0,0 +1,2 @@
+/*! For license information please see main.09cd452e.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[179],{723:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(7294),a=n(3117),o=n(8356),i=n.n(o),l=n(6887);const s={"05239c1f":[()=>n.e(3452).then(n.bind(n,898)),"@site/docs/security/self-assessment.md",898],"10b61a3f":[()=>n.e(4902).then(n.bind(n,3159)),"@site/docs/installation/private-registry.md",3159],"121f934f":[()=>n.e(8964).then(n.bind(n,6591)),"@site/docs/installation/network-options.md",6591],17896441:[()=>Promise.all([n.e(532),n.e(4835),n.e(7918)]).then(n.bind(n,2839)),"@theme/DocItem",2839],"179ec51e":[()=>n.e(7176).then(n.bind(n,3410)),"@site/docs/cli/secrets-encrypt.md",3410],"1a4e3797":[()=>Promise.all([n.e(532),n.e(7920)]).then(n.bind(n,2027)),"@theme/SearchPage",2027],"1be78505":[()=>Promise.all([n.e(532),n.e(9514)]).then(n.bind(n,9963)),"@theme/DocPage",9963],"1be8dcfa":[()=>n.e(7628).then(n.bind(n,1152)),"@site/docs/cli/agent.md",1152],"1e924268":[()=>n.e(8614).then(n.bind(n,4686)),"@site/docs/installation/installation.md",4686],"247783bb":[()=>n.e(9334).then(n.t.bind(n,3769,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-plugin-content-docs/default/plugin-route-context-module-100.json",3769],"2a65762c":[()=>n.e(1430).then(n.bind(n,7075)),"@site/docs/cli/token.md",7075],"36f34ab4":[()=>n.e(6155).then(n.bind(n,9252)),"@site/docs/cli/etcd-snapshot.md",9252],"4129286c":[()=>n.e(5156).then(n.t.bind(n,2776,19)),"/home/runner/work/docs/docs/.docusaurus/@easyops-cn/docusaurus-search-local/default/plugin-route-context-module-100.json",2776],"4455f95b":[()=>n.e(1340).then(n.bind(n,6127)),"@site/docs/cli/server.md",6127],"4a667cf9":[()=>n.e(9477).then(n.bind(n,2747)),"@site/docs/datastore/cluster-loadbalancer.md",2747],"4aae9e46":[()=>n.e(4443).then(n.bind(n,5080)),"@site/docs/upgrades/killall.md",5080],"4e366d5e":[()=>n.e(3595).then(n.bind(n,1332)),"@site/docs/upgrades/upgrades.md",1332],"4fea1ac4":[()=>n.e(1073).then(n.bind(n,9087)),"@site/docs/installation/uninstall.md",9087],"57d35c99":[()=>n.e(8005).then(n.bind(n,5001)),"@site/docs/security/secrets-encryption.md",5001],"65c5030c":[()=>n.e(7733).then(n.bind(n,6784)),"@site/docs/installation/packaged-components.md",6784],"6647a7ce":[()=>n.e(3353).then(n.bind(n,3115)),"@site/docs/advanced/advanced.md",3115],"6937a857":[()=>n.e(8997).then(n.bind(n,9543)),"@site/docs/storage/storage.md",9543],"6ab2c2e0":[()=>n.e(981).then(n.bind(n,7473)),"@site/docs/reference/env-variables.md",7473],"6e9804bc":[()=>n.e(393).then(n.bind(n,7161)),"@site/docs/cli/certificate.md",7161],"7b8e2475":[()=>n.e(79).then(n.bind(n,2678)),"@site/docs/security/security.md",2678],82406859:[()=>n.e(3319).then(n.bind(n,800)),"@site/docs/upgrades/automated.md",800],"82f1aa93":[()=>n.e(7709).then(n.bind(n,1199)),"@site/docs/security/hardening-guide.md",1199],"83582f1b":[()=>n.e(966).then(n.bind(n,9001)),"@site/docs/architecture/architecture.md",9001],"83a7c7f9":[()=>n.e(7817).then(n.bind(n,8048)),"@site/docs/helm/helm.md",8048],"935f2afb":[()=>n.e(53).then(n.t.bind(n,1109,19)),"~docs/default/version-current-metadata-prop-751.json",1109],"97c4f258":[()=>n.e(305).then(n.bind(n,8054)),"@site/docs/installation/configuration.md",8054],"9ba4882f":[()=>n.e(6720).then(n.bind(n,9322)),"@site/docs/reference/reference.md",9322],"9e39b1cd":[()=>n.e(7813).then(n.bind(n,3279)),"@site/docs/cli/cli.md",3279],a09c2993:[()=>n.e(4128).then(n.bind(n,8495)),"@site/docs/introduction.md",8495],a3308106:[()=>n.e(8511).then(n.bind(n,5145)),"@site/docs/installation/kube-dashboard.md",5145],ab388925:[()=>n.e(4548).then(n.bind(n,3510)),"@site/docs/datastore/datastore.md",3510],ac75af2e:[()=>n.e(1199).then(n.bind(n,7750)),"@site/docs/installation/requirements.md",7750],b1e02bd6:[()=>n.e(7834).then(n.bind(n,4741)),"@site/docs/quick-start/quick-start.md",4741],b36bdd38:[()=>n.e(6895).then(n.bind(n,748)),"@site/docs/datastore/ha-embedded.md",748],ba3a957c:[()=>n.e(8776).then(n.bind(n,4664)),"@site/docs/datastore/backup-restore.md",4664],c513f62d:[()=>n.e(2563).then(n.bind(n,28)),"@site/docs/cluster-access/cluster-access.md",28],d8ed1217:[()=>n.e(2745).then(n.bind(n,7036)),"@site/docs/upgrades/manual.md",7036],dfcda264:[()=>n.e(2098).then(n.bind(n,3969)),"@site/docs/faq/faq.md",3969],e2835484:[()=>n.e(9999).then(n.bind(n,8220)),"@site/docs/known-issues/known-issues.md",8220],ea0a4c6d:[()=>n.e(791).then(n.bind(n,972)),"@site/docs/datastore/ha.md",972],ec6f9153:[()=>n.e(750).then(n.bind(n,6875)),"@site/docs/installation/airgap.md",6875],ee75e821:[()=>n.e(7893).then(n.bind(n,6193)),"@site/docs/networking/networking.md",6193],f8eefdc6:[()=>n.e(5234).then(n.bind(n,7011)),"@site/docs/installation/server-roles.md",7011],fc39421f:[()=>n.e(9778).then(n.bind(n,1321)),"@site/docs/reference/resource-profiling.md",1321]};function u(e){let{error:t,retry:n,pastDelay:a}=e;return t?r.createElement("div",{style:{textAlign:"center",color:"#fff",backgroundColor:"#fa383e",borderColor:"#fa383e",borderStyle:"solid",borderRadius:"0.25rem",borderWidth:"1px",boxSizing:"border-box",display:"block",padding:"1rem",flex:"0 0 50%",marginLeft:"25%",marginRight:"25%",marginTop:"5rem",maxWidth:"50%",width:"100%"}},r.createElement("p",null,String(t)),r.createElement("div",null,r.createElement("button",{type:"button",onClick:n},"Retry"))):a?r.createElement("div",{style:{display:"flex",justifyContent:"center",alignItems:"center",height:"100vh"}},r.createElement("svg",{id:"loader",style:{width:128,height:110,position:"absolute",top:"calc(100vh - 64%)"},viewBox:"0 0 45 45",xmlns:"http://www.w3.org/2000/svg",stroke:"#61dafb"},r.createElement("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",strokeWidth:"2"},r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"1.5s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"1.5s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"1.5s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"3s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"3s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"3s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"8"},r.createElement("animate",{attributeName:"r",begin:"0s",dur:"1.5s",values:"6;1;2;3;4;5;6",calcMode:"linear",repeatCount:"indefinite"}))))):null}var c=n(9670),d=n(226);function f(e,t){if("*"===e)return i()({loading:u,loader:()=>n.e(4972).then(n.bind(n,4972)),modules:["@theme/NotFound"],webpack:()=>[4972],render(e,t){const n=e.default;return r.createElement(d.z,{value:{plugin:{name:"native",id:"default"}}},r.createElement(n,t))}});const o=l[`${e}-${t}`],f={},p=[],m=[],h=(0,c.Z)(o);return Object.entries(h).forEach((e=>{let[t,n]=e;const r=s[n];r&&(f[t]=r[0],p.push(r[1]),m.push(r[2]))})),i().Map({loading:u,loader:f,modules:p,webpack:()=>m,render(t,n){const i=JSON.parse(JSON.stringify(o));Object.entries(t).forEach((t=>{let[n,r]=t;const a=r.default;if(!a)throw new Error(`The page component at ${e} doesn't have a default export. This makes it impossible to render anything. Consider default-exporting a React component.`);"object"!=typeof a&&"function"!=typeof a||Object.keys(r).filter((e=>"default"!==e)).forEach((e=>{a[e]=r[e]}));let o=i;const l=n.split(".");l.slice(0,-1).forEach((e=>{o=o[e]})),o[l[l.length-1]]=a}));const l=i.__comp;delete i.__comp;const s=i.__context;return delete i.__context,r.createElement(d.z,{value:s},r.createElement(l,(0,a.Z)({},i,n)))}})}const p=[{path:"/search",component:f("/search","ae7"),exact:!0},{path:"/",component:f("/","3ad"),routes:[{path:"/",component:f("/","68a"),exact:!0,sidebar:"mySidebar"},{path:"/advanced",component:f("/advanced","a2b"),exact:!0,sidebar:"mySidebar"},{path:"/architecture",component:f("/architecture","46e"),exact:!0,sidebar:"mySidebar"},{path:"/cli",component:f("/cli","995"),exact:!0,sidebar:"mySidebar"},{path:"/cli/agent",component:f("/cli/agent","7c5"),exact:!0,sidebar:"mySidebar"},{path:"/cli/certificate",component:f("/cli/certificate","233"),exact:!0,sidebar:"mySidebar"},{path:"/cli/etcd-snapshot",component:f("/cli/etcd-snapshot","f75"),exact:!0,sidebar:"mySidebar"},{path:"/cli/secrets-encrypt",component:f("/cli/secrets-encrypt","75d"),exact:!0,sidebar:"mySidebar"},{path:"/cli/server",component:f("/cli/server","7b3"),exact:!0,sidebar:"mySidebar"},{path:"/cli/token",component:f("/cli/token","3ce"),exact:!0,sidebar:"mySidebar"},{path:"/cluster-access",component:f("/cluster-access","dee"),exact:!0,sidebar:"mySidebar"},{path:"/datastore",component:f("/datastore","7c4"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/backup-restore",component:f("/datastore/backup-restore","167"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/cluster-loadbalancer",component:f("/datastore/cluster-loadbalancer","c30"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/ha",component:f("/datastore/ha","cdb"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/ha-embedded",component:f("/datastore/ha-embedded","aaf"),exact:!0,sidebar:"mySidebar"},{path:"/faq",component:f("/faq","0e3"),exact:!0,sidebar:"mySidebar"},{path:"/helm",component:f("/helm","af2"),exact:!0,sidebar:"mySidebar"},{path:"/installation",component:f("/installation","569"),exact:!0,sidebar:"mySidebar"},{path:"/installation/airgap",component:f("/installation/airgap","aba"),exact:!0,sidebar:"mySidebar"},{path:"/installation/configuration",component:f("/installation/configuration","a25"),exact:!0,sidebar:"mySidebar"},{path:"/installation/kube-dashboard",component:f("/installation/kube-dashboard","e50"),exact:!0,sidebar:"mySidebar"},{path:"/installation/network-options",component:f("/installation/network-options","847"),exact:!0,sidebar:"mySidebar"},{path:"/installation/packaged-components",component:f("/installation/packaged-components","d71"),exact:!0,sidebar:"mySidebar"},{path:"/installation/private-registry",component:f("/installation/private-registry","23f"),exact:!0,sidebar:"mySidebar"},{path:"/installation/requirements",component:f("/installation/requirements","dc7"),exact:!0,sidebar:"mySidebar"},{path:"/installation/server-roles",component:f("/installation/server-roles","ce8"),exact:!0,sidebar:"mySidebar"},{path:"/installation/uninstall",component:f("/installation/uninstall","97c"),exact:!0,sidebar:"mySidebar"},{path:"/known-issues",component:f("/known-issues","e6b"),exact:!0,sidebar:"mySidebar"},{path:"/networking",component:f("/networking","a71"),exact:!0,sidebar:"mySidebar"},{path:"/quick-start",component:f("/quick-start","456"),exact:!0,sidebar:"mySidebar"},{path:"/reference",component:f("/reference","90f"),exact:!0,sidebar:"mySidebar"},{path:"/reference/env-variables",component:f("/reference/env-variables","afb"),exact:!0,sidebar:"mySidebar"},{path:"/reference/resource-profiling",component:f("/reference/resource-profiling","502"),exact:!0,sidebar:"mySidebar"},{path:"/security",component:f("/security","a31"),exact:!0,sidebar:"mySidebar"},{path:"/security/hardening-guide",component:f("/security/hardening-guide","f1d"),exact:!0,sidebar:"mySidebar"},{path:"/security/secrets-encryption",component:f("/security/secrets-encryption","125"),exact:!0,sidebar:"mySidebar"},{path:"/security/self-assessment",component:f("/security/self-assessment","c72"),exact:!0,sidebar:"mySidebar"},{path:"/storage",component:f("/storage","f27"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades",component:f("/upgrades","a8e"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades/automated",component:f("/upgrades/automated","1e2"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades/killall",component:f("/upgrades/killall","de1"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades/manual",component:f("/upgrades/manual","22b"),exact:!0,sidebar:"mySidebar"}]},{path:"*",component:f("*")}]},8934:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,t:()=>o});var r=n(7294);const a=r.createContext(!1);function o(e){let{children:t}=e;const[n,o]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{o(!0)}),[]),r.createElement(a.Provider,{value:n},t)}},9383:(e,t,n)=>{"use strict";var r=n(7294),a=n(3935),o=n(3727),i=n(405),l=n(412);const s=[n(2497),n(3310),n(8320),n(2295)];var u=n(723),c=n(6775),d=n(8790);function f(e){let{children:t}=e;return r.createElement(r.Fragment,null,t)}var p=n(3117),m=n(5742),h=n(2263),g=n(4996),v=n(6668),y=n(1944),b=n(4711),w=n(9727),k=n(3320),E=n(197);function S(){const{i18n:{defaultLocale:e,localeConfigs:t}}=(0,h.Z)(),n=(0,b.l)();return r.createElement(m.Z,null,Object.entries(t).map((e=>{let[t,{htmlLang:a}]=e;return r.createElement("link",{key:t,rel:"alternate",href:n.createUrl({locale:t,fullyQualified:!0}),hrefLang:a})})),r.createElement("link",{rel:"alternate",href:n.createUrl({locale:e,fullyQualified:!0}),hrefLang:"x-default"}))}function x(e){let{permalink:t}=e;const{siteConfig:{url:n}}=(0,h.Z)(),a=function(){const{siteConfig:{url:e}}=(0,h.Z)(),{pathname:t}=(0,c.TH)();return e+(0,g.Z)(t)}(),o=t?`${n}${t}`:a;return r.createElement(m.Z,null,r.createElement("meta",{property:"og:url",content:o}),r.createElement("link",{rel:"canonical",href:o}))}function _(){const{i18n:{currentLocale:e}}=(0,h.Z)(),{metadata:t,image:n}=(0,v.L)();return r.createElement(r.Fragment,null,r.createElement(m.Z,null,r.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),r.createElement("body",{className:w.h})),n&&r.createElement(y.d,{image:n}),r.createElement(x,null),r.createElement(S,null),r.createElement(E.Z,{tag:k.HX,locale:e}),r.createElement(m.Z,null,t.map(((e,t)=>r.createElement("meta",(0,p.Z)({key:t},e))))))}const C=new Map;function T(e){if(C.has(e.pathname))return{...e,pathname:C.get(e.pathname)};if((0,d.f)(u.Z,e.pathname).some((e=>{let{route:t}=e;return!0===t.exact})))return C.set(e.pathname,e.pathname),e;const t=e.pathname.trim().replace(/(?:\/index)?\.html$/,"")||"/";return C.set(e.pathname,t),{...e,pathname:t}}var L=n(8934),R=n(8940);function N(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];const a=s.map((t=>(t.default?.[e]??t[e])?.(...n)));return()=>a.forEach((e=>e?.()))}const A=function(e){let{children:t,location:n,previousLocation:a}=e;return(0,r.useLayoutEffect)((()=>{a!==n&&(!function(e){let{location:t,previousLocation:n}=e;if(!n)return;const r=t.pathname===n.pathname,a=t.hash===n.hash,o=t.search===n.search;if(r&&a&&!o)return;const{hash:i}=t;if(i){const e=decodeURIComponent(i.substring(1));document.getElementById(e)?.scrollIntoView()}else window.scrollTo(0,0)}({location:n,previousLocation:a}),N("onRouteDidUpdate",{previousLocation:a,location:n}))}),[a,n]),t};function O(e){const t=Array.from(new Set([e,decodeURI(e)])).map((e=>(0,d.f)(u.Z,e))).flat();return Promise.all(t.map((e=>e.route.component.preload?.())))}class P extends r.Component{constructor(e){super(e),this.previousLocation=void 0,this.routeUpdateCleanupCb=void 0,this.previousLocation=null,this.routeUpdateCleanupCb=l.Z.canUseDOM?N("onRouteUpdate",{previousLocation:null,location:this.props.location}):()=>{},this.state={nextRouteHasLoaded:!0}}shouldComponentUpdate(e,t){if(e.location===this.props.location)return t.nextRouteHasLoaded;const n=e.location;return this.previousLocation=this.props.location,this.setState({nextRouteHasLoaded:!1}),this.routeUpdateCleanupCb=N("onRouteUpdate",{previousLocation:this.previousLocation,location:n}),O(n.pathname).then((()=>{this.routeUpdateCleanupCb(),this.setState({nextRouteHasLoaded:!0})})).catch((e=>{console.warn(e),window.location.reload()})),!1}render(){const{children:e,location:t}=this.props;return r.createElement(A,{previousLocation:this.previousLocation,location:t},r.createElement(c.AW,{location:t,render:()=>e}))}}const I=P,D="__docusaurus-base-url-issue-banner-container",M="__docusaurus-base-url-issue-banner-suggestion-container",F="__DOCUSAURUS_INSERT_BASEURL_BANNER";function j(e){return`\nwindow['${F}'] = true;\n\ndocument.addEventListener('DOMContentLoaded', maybeInsertBanner);\n\nfunction maybeInsertBanner() {\n  var shouldInsert = window['${F}'];\n  shouldInsert && insertBanner();\n}\n\nfunction insertBanner() {\n  var bannerContainer = document.getElementById('${D}');\n  if (!bannerContainer) {\n    return;\n  }\n  var bannerHtml = ${JSON.stringify(function(e){return`\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">${e}</span> ${"/"===e?" (default value)":""}</p>\n   <p>We suggest trying baseUrl = <span id="${M}" style="font-weight: bold; color: green;"></span></p>\n</div>\n`}(e)).replace(/</g,"\\<")};\n  bannerContainer.innerHTML = bannerHtml;\n  var suggestionContainer = document.getElementById('${M}');\n  var actualHomePagePath = window.location.pathname;\n  var suggestedBaseUrl = actualHomePagePath.substr(-1) === '/'\n        ? actualHomePagePath\n        : actualHomePagePath + '/';\n  suggestionContainer.innerHTML = suggestedBaseUrl;\n}\n`}function B(){const{siteConfig:{baseUrl:e}}=(0,h.Z)();return(0,r.useLayoutEffect)((()=>{window[F]=!1}),[]),r.createElement(r.Fragment,null,!l.Z.canUseDOM&&r.createElement(m.Z,null,r.createElement("script",null,j(e))),r.createElement("div",{id:D}))}function z(){const{siteConfig:{baseUrl:e,baseUrlIssueBanner:t}}=(0,h.Z)(),{pathname:n}=(0,c.TH)();return t&&n===e?r.createElement(B,null):null}function $(){const{siteConfig:{favicon:e,title:t,noIndex:n},i18n:{currentLocale:a,localeConfigs:o}}=(0,h.Z)(),i=(0,g.Z)(e),{htmlLang:l,direction:s}=o[a];return r.createElement(m.Z,null,r.createElement("html",{lang:l,dir:s}),r.createElement("title",null,t),r.createElement("meta",{property:"og:title",content:t}),r.createElement("meta",{name:"viewport",content:"width=device-width, initial-scale=1.0"}),n&&r.createElement("meta",{name:"robots",content:"noindex, nofollow"}),e&&r.createElement("link",{rel:"icon",href:i}))}var U=n(4763);function q(){const e=(0,d.H)(u.Z),t=(0,c.TH)();return r.createElement(U.Z,null,r.createElement(R.M,null,r.createElement(L.t,null,r.createElement(f,null,r.createElement($,null),r.createElement(_,null),r.createElement(z,null),r.createElement(I,{location:T(t)},e)))))}var H=n(6887);const G=function(e){try{return document.createElement("link").relList.supports(e)}catch{return!1}}("prefetch")?function(e){return new Promise(((t,n)=>{if("undefined"==typeof document)return void n();const r=document.createElement("link");r.setAttribute("rel","prefetch"),r.setAttribute("href",e),r.onload=()=>t(),r.onerror=()=>n();(document.getElementsByTagName("head")[0]??document.getElementsByName("script")[0]?.parentNode)?.appendChild(r)}))}:function(e){return new Promise(((t,n)=>{const r=new XMLHttpRequest;r.open("GET",e,!0),r.withCredentials=!0,r.onload=()=>{200===r.status?t():n()},r.send(null)}))};var Z=n(9670);const Q=new Set,V=new Set,W=()=>navigator.connection?.effectiveType.includes("2g")||navigator.connection?.saveData,K={prefetch(e){if(!(e=>!W()&&!V.has(e)&&!Q.has(e))(e))return!1;Q.add(e);const t=(0,d.f)(u.Z,e).flatMap((e=>{return t=e.route.path,Object.entries(H).filter((e=>{let[n]=e;return n.replace(/-[^-]+$/,"")===t})).flatMap((e=>{let[,t]=e;return Object.values((0,Z.Z)(t))}));var t}));return Promise.all(t.map((e=>{const t=n.gca(e);return t&&!t.includes("undefined")?G(t).catch((()=>{})):Promise.resolve()})))},preload:e=>!!(e=>!W()&&!V.has(e))(e)&&(V.add(e),O(e))},Y=Object.freeze(K);if(l.Z.canUseDOM){window.docusaurus=Y;const e=a.hydrate;O(window.location.pathname).then((()=>{e(r.createElement(i.B6,null,r.createElement(o.VK,null,r.createElement(q,null))),document.getElementById("__docusaurus"))}))}},8940:(e,t,n)=>{"use strict";n.d(t,{_:()=>c,M:()=>d});var r=n(7294),a=n(6809);const o=JSON.parse('{"docusaurus-plugin-content-docs":{"default":{"path":"/","versions":[{"name":"current","label":"Next","isLast":true,"path":"/","mainDocId":"introduction","docs":[{"id":"advanced/advanced","path":"/advanced/","sidebar":"mySidebar"},{"id":"architecture/architecture","path":"/architecture/","sidebar":"mySidebar"},{"id":"cli/agent","path":"/cli/agent","sidebar":"mySidebar"},{"id":"cli/certificate","path":"/cli/certificate","sidebar":"mySidebar"},{"id":"cli/cli","path":"/cli/","sidebar":"mySidebar"},{"id":"cli/etcd-snapshot","path":"/cli/etcd-snapshot","sidebar":"mySidebar"},{"id":"cli/secrets-encrypt","path":"/cli/secrets-encrypt","sidebar":"mySidebar"},{"id":"cli/server","path":"/cli/server","sidebar":"mySidebar"},{"id":"cli/token","path":"/cli/token","sidebar":"mySidebar"},{"id":"cluster-access/cluster-access","path":"/cluster-access/","sidebar":"mySidebar"},{"id":"datastore/backup-restore","path":"/datastore/backup-restore","sidebar":"mySidebar"},{"id":"datastore/cluster-loadbalancer","path":"/datastore/cluster-loadbalancer","sidebar":"mySidebar"},{"id":"datastore/datastore","path":"/datastore/","sidebar":"mySidebar"},{"id":"datastore/ha","path":"/datastore/ha","sidebar":"mySidebar"},{"id":"datastore/ha-embedded","path":"/datastore/ha-embedded","sidebar":"mySidebar"},{"id":"faq/faq","path":"/faq/","sidebar":"mySidebar"},{"id":"helm/helm","path":"/helm/","sidebar":"mySidebar"},{"id":"installation/airgap","path":"/installation/airgap","sidebar":"mySidebar"},{"id":"installation/configuration","path":"/installation/configuration","sidebar":"mySidebar"},{"id":"installation/installation","path":"/installation/","sidebar":"mySidebar"},{"id":"installation/kube-dashboard","path":"/installation/kube-dashboard","sidebar":"mySidebar"},{"id":"installation/network-options","path":"/installation/network-options","sidebar":"mySidebar"},{"id":"installation/packaged-components","path":"/installation/packaged-components","sidebar":"mySidebar"},{"id":"installation/private-registry","path":"/installation/private-registry","sidebar":"mySidebar"},{"id":"installation/requirements","path":"/installation/requirements","sidebar":"mySidebar"},{"id":"installation/server-roles","path":"/installation/server-roles","sidebar":"mySidebar"},{"id":"installation/uninstall","path":"/installation/uninstall","sidebar":"mySidebar"},{"id":"introduction","path":"/","sidebar":"mySidebar"},{"id":"known-issues/known-issues","path":"/known-issues/","sidebar":"mySidebar"},{"id":"networking/networking","path":"/networking/","sidebar":"mySidebar"},{"id":"quick-start/quick-start","path":"/quick-start/","sidebar":"mySidebar"},{"id":"reference/env-variables","path":"/reference/env-variables","sidebar":"mySidebar"},{"id":"reference/reference","path":"/reference/","sidebar":"mySidebar"},{"id":"reference/resource-profiling","path":"/reference/resource-profiling","sidebar":"mySidebar"},{"id":"security/hardening-guide","path":"/security/hardening-guide","sidebar":"mySidebar"},{"id":"security/secrets-encryption","path":"/security/secrets-encryption","sidebar":"mySidebar"},{"id":"security/security","path":"/security/","sidebar":"mySidebar"},{"id":"security/self-assessment","path":"/security/self-assessment","sidebar":"mySidebar"},{"id":"storage/storage","path":"/storage/","sidebar":"mySidebar"},{"id":"upgrades/automated","path":"/upgrades/automated","sidebar":"mySidebar"},{"id":"upgrades/killall","path":"/upgrades/killall","sidebar":"mySidebar"},{"id":"upgrades/manual","path":"/upgrades/manual","sidebar":"mySidebar"},{"id":"upgrades/upgrades","path":"/upgrades/","sidebar":"mySidebar"}],"draftIds":[],"sidebars":{"mySidebar":{"link":{"path":"/","label":"introduction"}}}}],"breadcrumbs":true}}}'),i=JSON.parse('{"defaultLocale":"en","locales":["en","zh","kr"],"path":"i18n","currentLocale":"en","localeConfigs":{"en":{"label":"English","direction":"ltr","htmlLang":"en","calendar":"gregory","path":"en"},"zh":{"label":"\u7b80\u4f53\u4e2d\u6587","direction":"ltr","htmlLang":"zh","calendar":"gregory","path":"zh"},"kr":{"label":"\ud55c\uad6d\uc5b4","direction":"ltr","htmlLang":"kr","calendar":"gregory","path":"kr"}}}');var l=n(7529);const s=JSON.parse('{"docusaurusVersion":"2.4.1","siteVersion":"0.0.1","pluginVersions":{"docusaurus-plugin-content-docs":{"type":"package","name":"@docusaurus/plugin-content-docs","version":"2.4.1"},"docusaurus-plugin-content-pages":{"type":"package","name":"@docusaurus/plugin-content-pages","version":"2.4.1"},"docusaurus-plugin-sitemap":{"type":"package","name":"@docusaurus/plugin-sitemap","version":"2.4.1"},"docusaurus-theme-classic":{"type":"package","name":"@docusaurus/theme-classic","version":"2.4.1"},"docusaurus-plugin-client-redirects":{"type":"package","name":"@docusaurus/plugin-client-redirects","version":"2.4.1"},"docusaurus-theme-mermaid":{"type":"package","name":"@docusaurus/theme-mermaid","version":"2.4.1"},"@easyops-cn/docusaurus-search-local":{"type":"package","name":"@easyops-cn/docusaurus-search-local","version":"0.35.0"}}}'),u={siteConfig:a.Z,siteMetadata:s,globalData:o,i18n:i,codeTranslations:l},c=r.createContext(u);function d(e){let{children:t}=e;return r.createElement(c.Provider,{value:u},t)}},4763:(e,t,n)=>{"use strict";n.d(t,{Z:()=>f});var r=n(7294),a=n(412),o=n(5742),i=n(8780),l=n(1573);function s(e){let{error:t,tryAgain:n}=e;return r.createElement("div",{style:{display:"flex",flexDirection:"column",justifyContent:"center",alignItems:"flex-start",minHeight:"100vh",width:"100%",maxWidth:"80ch",fontSize:"20px",margin:"0 auto",padding:"1rem"}},r.createElement("h1",{style:{fontSize:"3rem"}},"This page crashed"),r.createElement("button",{type:"button",onClick:n,style:{margin:"1rem 0",fontSize:"2rem",cursor:"pointer",borderRadius:20,padding:"1rem"}},"Try again"),r.createElement(u,{error:t}))}function u(e){let{error:t}=e;const n=(0,i.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{style:{whiteSpace:"pre-wrap"}},n)}function c(e){let{error:t,tryAgain:n}=e;return r.createElement(f,{fallback:()=>r.createElement(s,{error:t,tryAgain:n})},r.createElement(o.Z,null,r.createElement("title",null,"Page Error")),r.createElement(l.Z,null,r.createElement(s,{error:t,tryAgain:n})))}const d=e=>r.createElement(c,e);class f extends r.Component{constructor(e){super(e),this.state={error:null}}componentDidCatch(e){a.Z.canUseDOM&&this.setState({error:e})}render(){const{children:e}=this.props,{error:t}=this.state;if(t){const e={error:t,tryAgain:()=>this.setState({error:null})};return(this.props.fallback??d)(e)}return e??null}}},412:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});const r="undefined"!=typeof window&&"document"in window&&"createElement"in window.document,a={canUseDOM:r,canUseEventListeners:r&&("addEventListener"in window||"attachEvent"in window),canUseIntersectionObserver:r&&"IntersectionObserver"in window,canUseViewport:r&&"screen"in window}},5742:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(405);function o(e){return r.createElement(a.ql,e)}},9960:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(3117),a=n(7294),o=n(3727),i=n(8780),l=n(2263),s=n(3919),u=n(412);const c=a.createContext({collectLink:()=>{}});var d=n(4996);function f(e,t){let{isNavLink:n,to:f,href:p,activeClassName:m,isActive:h,"data-noBrokenLinkCheck":g,autoAddBaseUrl:v=!0,...y}=e;const{siteConfig:{trailingSlash:b,baseUrl:w}}=(0,l.Z)(),{withBaseUrl:k}=(0,d.C)(),E=(0,a.useContext)(c),S=(0,a.useRef)(null);(0,a.useImperativeHandle)(t,(()=>S.current));const x=f||p;const _=(0,s.Z)(x),C=x?.replace("pathname://","");let T=void 0!==C?(L=C,v&&(e=>e.startsWith("/"))(L)?k(L):L):void 0;var L;T&&_&&(T=(0,i.applyTrailingSlash)(T,{trailingSlash:b,baseUrl:w}));const R=(0,a.useRef)(!1),N=n?o.OL:o.rU,A=u.Z.canUseIntersectionObserver,O=(0,a.useRef)(),P=()=>{R.current||null==T||(window.docusaurus.preload(T),R.current=!0)};(0,a.useEffect)((()=>(!A&&_&&null!=T&&window.docusaurus.prefetch(T),()=>{A&&O.current&&O.current.disconnect()})),[O,T,A,_]);const I=T?.startsWith("#")??!1,D=!T||!_||I;return D||g||E.collectLink(T),D?a.createElement("a",(0,r.Z)({ref:S,href:T},x&&!_&&{target:"_blank",rel:"noopener noreferrer"},y)):a.createElement(N,(0,r.Z)({},y,{onMouseEnter:P,onTouchStart:P,innerRef:e=>{S.current=e,A&&e&&_&&(O.current=new window.IntersectionObserver((t=>{t.forEach((t=>{e===t.target&&(t.isIntersecting||t.intersectionRatio>0)&&(O.current.unobserve(e),O.current.disconnect(),null!=T&&window.docusaurus.prefetch(T))}))})),O.current.observe(e))},to:T},n&&{isActive:h,activeClassName:m}))}const p=a.forwardRef(f)},5999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s,I:()=>l});var r=n(7294);function a(e,t){const n=e.split(/(\{\w+\})/).map(((e,n)=>{if(n%2==1){const n=t?.[e.slice(1,-1)];if(void 0!==n)return n}return e}));return n.some((e=>(0,r.isValidElement)(e)))?n.map(((e,t)=>(0,r.isValidElement)(e)?r.cloneElement(e,{key:t}):e)).filter((e=>""!==e)):n.join("")}var o=n(7529);function i(e){let{id:t,message:n}=e;if(void 0===t&&void 0===n)throw new Error("Docusaurus translation declarations must have at least a translation id or a default translation message");return o[t??n]??n??t}function l(e,t){let{message:n,id:r}=e;return a(i({message:n,id:r}),t)}function s(e){let{children:t,id:n,values:o}=e;if(t&&"string"!=typeof t)throw console.warn("Illegal <Translate> children",t),new Error("The Docusaurus <Translate> component only accept simple string values");const l=i({message:t,id:n});return r.createElement(r.Fragment,null,a(l,o))}},9935:(e,t,n)=>{"use strict";n.d(t,{m:()=>r});const r="default"},3919:(e,t,n)=>{"use strict";function r(e){return/^(?:\w*:|\/\/)/.test(e)}function a(e){return void 0!==e&&!r(e)}n.d(t,{Z:()=>a,b:()=>r})},4996:(e,t,n)=>{"use strict";n.d(t,{C:()=>i,Z:()=>l});var r=n(7294),a=n(2263),o=n(3919);function i(){const{siteConfig:{baseUrl:e,url:t}}=(0,a.Z)(),n=(0,r.useCallback)(((n,r)=>function(e,t,n,r){let{forcePrependBaseUrl:a=!1,absolute:i=!1}=void 0===r?{}:r;if(!n||n.startsWith("#")||(0,o.b)(n))return n;if(a)return t+n.replace(/^\//,"");if(n===t.replace(/\/$/,""))return t;const l=n.startsWith(t)?n:t+n.replace(/^\//,"");return i?e+l:l}(t,e,n,r)),[t,e]);return{withBaseUrl:n}}function l(e,t){void 0===t&&(t={});const{withBaseUrl:n}=i();return n(e,t)}},2263:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8940);function o(){return(0,r.useContext)(a._)}},2389:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8934);function o(){return(0,r.useContext)(a._)}},9670:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});function r(e){const t={};return function e(n,r){Object.entries(n).forEach((n=>{let[a,o]=n;const i=r?`${r}.${a}`:a;var l;"object"==typeof(l=o)&&l&&Object.keys(l).length>0?e(o,i):t[i]=o}))}(e),t}},226:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,z:()=>o});var r=n(7294);const a=r.createContext(null);function o(e){let{children:t,value:n}=e;const o=r.useContext(a),i=(0,r.useMemo)((()=>function(e){let{parent:t,value:n}=e;if(!t){if(!n)throw new Error("Unexpected: no Docusaurus route context found");if(!("plugin"in n))throw new Error("Unexpected: Docusaurus topmost route context has no `plugin` attribute");return n}const r={...t.data,...n?.data};return{plugin:t.plugin,data:r}}({parent:o,value:n})),[o,n]);return r.createElement(a.Provider,{value:i},t)}},143:(e,t,n)=>{"use strict";n.d(t,{Iw:()=>h,gA:()=>f,_r:()=>c,Jo:()=>g,zh:()=>d,yW:()=>m,gB:()=>p});var r=n(6775),a=n(2263),o=n(9935);function i(e,t){void 0===t&&(t={});const n=function(){const{globalData:e}=(0,a.Z)();return e}()[e];if(!n&&t.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin.`);return n}const l=e=>e.versions.find((e=>e.isLast));function s(e,t){const n=function(e,t){const n=l(e);return[...e.versions.filter((e=>e!==n)),n].find((e=>!!(0,r.LX)(t,{path:e.path,exact:!1,strict:!1})))}(e,t),a=n?.docs.find((e=>!!(0,r.LX)(t,{path:e.path,exact:!0,strict:!1})));return{activeVersion:n,activeDoc:a,alternateDocVersions:a?function(t){const n={};return e.versions.forEach((e=>{e.docs.forEach((r=>{r.id===t&&(n[e.name]=r)}))})),n}(a.id):{}}}const u={},c=()=>i("docusaurus-plugin-content-docs")??u,d=e=>function(e,t,n){void 0===t&&(t=o.m),void 0===n&&(n={});const r=i(e)?.[t];if(!r&&n.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin with id "${t}".`);return r}("docusaurus-plugin-content-docs",e,{failfast:!0});function f(e){void 0===e&&(e={});const t=c(),{pathname:n}=(0,r.TH)();return function(e,t,n){void 0===n&&(n={});const a=Object.entries(e).sort(((e,t)=>t[1].path.localeCompare(e[1].path))).find((e=>{let[,n]=e;return!!(0,r.LX)(t,{path:n.path,exact:!1,strict:!1})})),o=a?{pluginId:a[0],pluginData:a[1]}:void 0;if(!o&&n.failfast)throw new Error(`Can't find active docs plugin for "${t}" pathname, while it was expected to be found. Maybe you tried to use a docs feature that can only be used on a docs-related page? Existing docs plugin paths are: ${Object.values(e).map((e=>e.path)).join(", ")}`);return o}(t,n,e)}function p(e){return d(e).versions}function m(e){const t=d(e);return l(t)}function h(e){const t=d(e),{pathname:n}=(0,r.TH)();return s(t,n)}function g(e){const t=d(e),{pathname:n}=(0,r.TH)();return function(e,t){const n=l(e);return{latestDocSuggestion:s(e,t).alternateDocVersions[n.name],latestVersionSuggestion:n}}(t,n)}},8320:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>o});var r=n(4865),a=n.n(r);a().configure({showSpinner:!1});const o={onRouteUpdate(e){let{location:t,previousLocation:n}=e;if(n&&t.pathname!==n.pathname){const e=window.setTimeout((()=>{a().start()}),200);return()=>window.clearTimeout(e)}},onRouteDidUpdate(){a().done()}}},3310:(e,t,n)=>{"use strict";n.r(t);var r=n(7410),a=n(6809);!function(e){const{themeConfig:{prism:t}}=a.Z,{additionalLanguages:r}=t;globalThis.Prism=e,r.forEach((e=>{n(6726)(`./prism-${e}`)})),delete globalThis.Prism}(r.Z)},9471:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294);const a="iconExternalLink_nPIU";function o(e){let{width:t=13.5,height:n=13.5}=e;return r.createElement("svg",{width:t,height:n,"aria-hidden":"true",viewBox:"0 0 24 24",className:a},r.createElement("path",{fill:"currentColor",d:"M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"}))}},1573:(e,t,n)=>{"use strict";n.d(t,{Z:()=>Jt});var r=n(7294),a=n(6010),o=n(4763),i=n(1944),l=n(3117),s=n(6775),u=n(5999),c=n(5936);const d="__docusaurus_skipToContent_fallback";function f(e){e.setAttribute("tabindex","-1"),e.focus(),e.removeAttribute("tabindex")}function p(){const e=(0,r.useRef)(null),{action:t}=(0,s.k6)(),n=(0,r.useCallback)((e=>{e.preventDefault();const t=document.querySelector("main:first-of-type")??document.getElementById(d);t&&f(t)}),[]);return(0,c.S)((n=>{let{location:r}=n;e.current&&!r.hash&&"PUSH"===t&&f(e.current)})),{containerRef:e,onClick:n}}const m=(0,u.I)({id:"theme.common.skipToMainContent",description:"The skip to content label used for accessibility, allowing to rapidly navigate to main content with keyboard tab/enter navigation",message:"Skip to main content"});function h(e){const t=e.children??m,{containerRef:n,onClick:a}=p();return r.createElement("div",{ref:n,role:"region","aria-label":m},r.createElement("a",(0,l.Z)({},e,{href:`#${d}`,onClick:a}),t))}var g=n(5281),v=n(9727);const y="skipToContent_fXgn";function b(){return r.createElement(h,{className:y})}var w=n(6668),k=n(9689);function E(e){let{width:t=21,height:n=21,color:a="currentColor",strokeWidth:o=1.2,className:i,...s}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 15 15",width:t,height:n},s),r.createElement("g",{stroke:a,strokeWidth:o},r.createElement("path",{d:"M.75.75l13.5 13.5M14.25.75L.75 14.25"})))}const S="closeButton_CVFx";function x(e){return r.createElement("button",(0,l.Z)({type:"button","aria-label":(0,u.I)({id:"theme.AnnouncementBar.closeButtonAriaLabel",message:"Close",description:"The ARIA label for close button of announcement bar"})},e,{className:(0,a.Z)("clean-btn close",S,e.className)}),r.createElement(E,{width:14,height:14,strokeWidth:3.1}))}const _="content_knG7";function C(e){const{announcementBar:t}=(0,w.L)(),{content:n}=t;return r.createElement("div",(0,l.Z)({},e,{className:(0,a.Z)(_,e.className),dangerouslySetInnerHTML:{__html:n}}))}const T="announcementBar_mb4j",L="announcementBarPlaceholder_vyr4",R="announcementBarClose_gvF7",N="announcementBarContent_xLdY";function A(){const{announcementBar:e}=(0,w.L)(),{isActive:t,close:n}=(0,k.nT)();if(!t)return null;const{backgroundColor:a,textColor:o,isCloseable:i}=e;return r.createElement("div",{className:T,style:{backgroundColor:a,color:o},role:"banner"},i&&r.createElement("div",{className:L}),r.createElement(C,{className:N}),i&&r.createElement(x,{onClick:n,className:R}))}var O=n(3163),P=n(2466);var I=n(902),D=n(3102);const M=r.createContext(null);function F(e){let{children:t}=e;const n=function(){const e=(0,O.e)(),t=(0,D.HY)(),[n,a]=(0,r.useState)(!1),o=null!==t.component,i=(0,I.D9)(o);return(0,r.useEffect)((()=>{o&&!i&&a(!0)}),[o,i]),(0,r.useEffect)((()=>{o?e.shown||a(!0):a(!1)}),[e.shown,o]),(0,r.useMemo)((()=>[n,a]),[n])}();return r.createElement(M.Provider,{value:n},t)}function j(e){if(e.component){const t=e.component;return r.createElement(t,e.props)}}function B(){const e=(0,r.useContext)(M);if(!e)throw new I.i6("NavbarSecondaryMenuDisplayProvider");const[t,n]=e,a=(0,r.useCallback)((()=>n(!1)),[n]),o=(0,D.HY)();return(0,r.useMemo)((()=>({shown:t,hide:a,content:j(o)})),[a,o,t])}function z(e){let{header:t,primaryMenu:n,secondaryMenu:o}=e;const{shown:i}=B();return r.createElement("div",{className:"navbar-sidebar"},t,r.createElement("div",{className:(0,a.Z)("navbar-sidebar__items",{"navbar-sidebar__items--show-secondary":i})},r.createElement("div",{className:"navbar-sidebar__item menu"},n),r.createElement("div",{className:"navbar-sidebar__item menu"},o)))}var $=n(2949),U=n(2389);function q(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"}))}function H(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"}))}const G={toggle:"toggle_vylO",toggleButton:"toggleButton_gllP",darkToggleIcon:"darkToggleIcon_wfgR",lightToggleIcon:"lightToggleIcon_pyhR",toggleButtonDisabled:"toggleButtonDisabled_aARS"};function Z(e){let{className:t,buttonClassName:n,value:o,onChange:i}=e;const l=(0,U.Z)(),s=(0,u.I)({message:"Switch between dark and light mode (currently {mode})",id:"theme.colorToggle.ariaLabel",description:"The ARIA label for the navbar color mode toggle"},{mode:"dark"===o?(0,u.I)({message:"dark mode",id:"theme.colorToggle.ariaLabel.mode.dark",description:"The name for the dark color mode"}):(0,u.I)({message:"light mode",id:"theme.colorToggle.ariaLabel.mode.light",description:"The name for the light color mode"})});return r.createElement("div",{className:(0,a.Z)(G.toggle,t)},r.createElement("button",{className:(0,a.Z)("clean-btn",G.toggleButton,!l&&G.toggleButtonDisabled,n),type:"button",onClick:()=>i("dark"===o?"light":"dark"),disabled:!l,title:s,"aria-label":s,"aria-live":"polite"},r.createElement(q,{className:(0,a.Z)(G.toggleIcon,G.lightToggleIcon)}),r.createElement(H,{className:(0,a.Z)(G.toggleIcon,G.darkToggleIcon)})))}const Q=r.memo(Z),V="darkNavbarColorModeToggle_X3D1";function W(e){let{className:t}=e;const n=(0,w.L)().navbar.style,a=(0,w.L)().colorMode.disableSwitch,{colorMode:o,setColorMode:i}=(0,$.I)();return a?null:r.createElement(Q,{className:t,buttonClassName:"dark"===n?V:void 0,value:o,onChange:i})}var K=n(1327);function Y(){return r.createElement(K.Z,{className:"navbar__brand",imageClassName:"navbar__logo",titleClassName:"navbar__title text--truncate"})}function X(){const e=(0,O.e)();return r.createElement("button",{type:"button","aria-label":(0,u.I)({id:"theme.docs.sidebar.closeSidebarButtonAriaLabel",message:"Close navigation bar",description:"The ARIA label for close button of mobile sidebar"}),className:"clean-btn navbar-sidebar__close",onClick:()=>e.toggle()},r.createElement(E,{color:"var(--ifm-color-emphasis-600)"}))}function J(){return r.createElement("div",{className:"navbar-sidebar__brand"},r.createElement(Y,null),r.createElement("a",{href:"https://github.com/k3s-io/k3s",target:"_blank",rel:"noopener noreferrer",className:"margin-right--md header-github-link"}),r.createElement(W,{className:"margin-right--md"}),r.createElement(X,null))}var ee=n(9960),te=n(4996),ne=n(3919);function re(e,t){return void 0!==e&&void 0!==t&&new RegExp(e,"gi").test(t)}var ae=n(9471);function oe(e){let{activeBasePath:t,activeBaseRegex:n,to:a,href:o,label:i,html:s,isDropdownLink:u,prependBaseUrlToHref:c,...d}=e;const f=(0,te.Z)(a),p=(0,te.Z)(t),m=(0,te.Z)(o,{forcePrependBaseUrl:!0}),h=i&&o&&!(0,ne.Z)(o),g=s?{dangerouslySetInnerHTML:{__html:s}}:{children:r.createElement(r.Fragment,null,i,h&&r.createElement(ae.Z,u&&{width:12,height:12}))};return o?r.createElement(ee.Z,(0,l.Z)({href:c?m:o},d,g)):r.createElement(ee.Z,(0,l.Z)({to:f,isNavLink:!0},(t||n)&&{isActive:(e,t)=>n?re(n,t.pathname):t.pathname.startsWith(p)},d,g))}function ie(e){let{className:t,isDropdownItem:n=!1,...o}=e;const i=r.createElement(oe,(0,l.Z)({className:(0,a.Z)(n?"dropdown__link":"navbar__item navbar__link",t),isDropdownLink:n},o));return n?r.createElement("li",null,i):i}function le(e){let{className:t,isDropdownItem:n,...o}=e;return r.createElement("li",{className:"menu__list-item"},r.createElement(oe,(0,l.Z)({className:(0,a.Z)("menu__link",t)},o)))}function se(e){let{mobile:t=!1,position:n,...a}=e;const o=t?le:ie;return r.createElement(o,(0,l.Z)({},a,{activeClassName:a.activeClassName??(t?"menu__link--active":"navbar__link--active")}))}var ue=n(6043),ce=n(8596),de=n(2263);function fe(e,t){return e.some((e=>function(e,t){return!!(0,ce.Mg)(e.to,t)||!!re(e.activeBaseRegex,t)||!(!e.activeBasePath||!t.startsWith(e.activeBasePath))}(e,t)))}function pe(e){let{items:t,position:n,className:o,onClick:i,...s}=e;const u=(0,r.useRef)(null),[c,d]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{const e=e=>{u.current&&!u.current.contains(e.target)&&d(!1)};return document.addEventListener("mousedown",e),document.addEventListener("touchstart",e),document.addEventListener("focusin",e),()=>{document.removeEventListener("mousedown",e),document.removeEventListener("touchstart",e),document.removeEventListener("focusin",e)}}),[u]),r.createElement("div",{ref:u,className:(0,a.Z)("navbar__item","dropdown","dropdown--hoverable",{"dropdown--right":"right"===n,"dropdown--show":c})},r.createElement(oe,(0,l.Z)({"aria-haspopup":"true","aria-expanded":c,role:"button",href:s.to?void 0:"#",className:(0,a.Z)("navbar__link",o)},s,{onClick:s.to?void 0:e=>e.preventDefault(),onKeyDown:e=>{"Enter"===e.key&&(e.preventDefault(),d(!c))}}),s.children??s.label),r.createElement("ul",{className:"dropdown__menu"},t.map(((e,t)=>r.createElement(ft,(0,l.Z)({isDropdownItem:!0,activeClassName:"dropdown__link--active"},e,{key:t}))))))}function me(e){let{items:t,className:n,position:o,onClick:i,...u}=e;const c=function(){const{siteConfig:{baseUrl:e}}=(0,de.Z)(),{pathname:t}=(0,s.TH)();return t.replace(e,"/")}(),d=fe(t,c),{collapsed:f,toggleCollapsed:p,setCollapsed:m}=(0,ue.u)({initialState:()=>!d});return(0,r.useEffect)((()=>{d&&m(!d)}),[c,d,m]),r.createElement("li",{className:(0,a.Z)("menu__list-item",{"menu__list-item--collapsed":f})},r.createElement(oe,(0,l.Z)({role:"button",className:(0,a.Z)("menu__link menu__link--sublist menu__link--sublist-caret",n)},u,{onClick:e=>{e.preventDefault(),p()}}),u.children??u.label),r.createElement(ue.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:f},t.map(((e,t)=>r.createElement(ft,(0,l.Z)({mobile:!0,isDropdownItem:!0,onClick:i,activeClassName:"menu__link--active"},e,{key:t}))))))}function he(e){let{mobile:t=!1,...n}=e;const a=t?me:pe;return r.createElement(a,n)}var ge=n(4711);function ve(e){let{width:t=20,height:n=20,...a}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:t,height:n,"aria-hidden":!0},a),r.createElement("path",{fill:"currentColor",d:"M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"}))}const ye="iconLanguage_nlXk";var be=n(1029),we=n(412),ke=n(373),Ee=n(143),Se=n(22),xe=n(8202),_e=n(3926),Ce=n(1073),Te=n(2539),Le=n(726);const Re="searchBar_RVTs",Ne="dropdownMenu_qbY6",Ae="searchBarLeft_MXDe",Oe="suggestion_fB_2",Pe="cursor_eG29",Ie="hitTree_kk6K",De="hitIcon_a7Zy",Me="hitPath_ieM4",Fe="noResultsIcon_EBY5",je="hitFooter_E9YW",Be="hitWrapper_sAK8",ze="hitTitle_vyVt",$e="hitAction_NqkB",Ue="noResults_l6Q3",qe="searchBarContainer_NW3z",He="searchBarLoadingRing_YnHq",Ge="searchClearButton_qk4g",Ze="searchIndexLoading_EJ1f",Qe="searchHintContainer_Pkmr",Ve="searchHint_iIMx",We="focused_OWtg",Ke="input_FOTf",Ye="hint_URu1",Xe="suggestions_X8XU",Je="dataset_QiCy",et="empty_eITn";function tt(e){let{document:t,type:n,page:r,metadata:a,tokens:o,isInterOfTree:i,isLastOfTree:l}=e;const s=0===n,u=1===n,c=[];i?c.push('<svg viewBox="0 0 24 54"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M8 6v42M20 27H8.3"></path></g></svg>'):l&&c.push('<svg viewBox="0 0 24 54"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M8 6v21M20 27H8.3"></path></g></svg>');const d=c.map((e=>`<span class="${Ie}">${e}</span>`)),f=`<span class="${De}">${s?'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M17 6v12c0 .52-.2 1-1 1H4c-.7 0-1-.33-1-1V2c0-.55.42-1 1-1h8l5 5zM14 8h-3.13c-.51 0-.87-.34-.87-.87V4" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linejoin="round"></path></svg>':u?'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M13 13h4-4V8H7v5h6v4-4H7V8H3h4V3v5h6V3v5h4-4v5zm-6 0v4-4H3h4z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg>':'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M17 5H3h14zm0 5H3h14zm0 5H3h14z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linejoin="round"></path></svg>'}</span>`,p=[`<span class="${ze}">${(0,Le.o)(t.t,(0,Ce.m)(a,"t"),o)}</span>`];if(!i&&!l&&be.H6){const e=r?(r.b??[]).concat(r.t).concat(t.s&&t.s!==r.t?t.s:[]):t.b;p.push(`<span class="${Me}">${(0,_e.e)(e??[])}</span>`)}else s||p.push(`<span class="${Me}">${(0,Te.C)(r.t||(t.u.startsWith("/docs/api-reference/")?"API Reference":""),o)}</span>`);const m=`<span class="${$e}"><svg width="20" height="20" viewBox="0 0 20 20"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M18 3v4c0 2-2 4-4 4H2"></path><path d="M8 17l-6-6 6-6"></path></g></svg></span>`;return[...d,f,`<span class="${Be}">`,...p,"</span>",m].join("")}function nt(){return`<span class="${Ue}"><span class="${Fe}"><svg width="40" height="40" viewBox="0 0 20 20" fill="none" fill-rule="evenodd" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"><path d="M15.5 4.8c2 3 1.7 7-1 9.7h0l4.3 4.3-4.3-4.3a7.8 7.8 0 01-9.8 1m-2.2-2.2A7.8 7.8 0 0113.2 2.4M2 18L18 2"></path></svg></span><span>${(0,u.I)({id:"theme.SearchBar.noResultsText",message:"No results"})}</span></span>`}var rt=n(311);async function at(){const e=await Promise.all([n.e(8443),n.e(5525)]).then(n.t.bind(n,8443,23)),t=e.default;return t.noConflict?t.noConflict():e.noConflict&&e.noConflict(),t}const ot="_highlight";const it=function(e){let{handleSearchBarToggle:t}=e;const{siteConfig:{baseUrl:n}}=(0,de.Z)(),o=(0,Ee.gA)();let i=n;try{const{preferredVersion:e}=(0,ke.J)(o?.pluginId??be.gQ);e&&!e.isLast&&(i=e.path+"/")}catch(D){if(be.l9&&!(D instanceof I.i6))throw D}const l=(0,s.k6)(),c=(0,s.TH)(),d=(0,r.useRef)(null),f=(0,r.useRef)(new Map),p=(0,r.useRef)(!1),[m,h]=(0,r.useState)(!1),[g,v]=(0,r.useState)(!1),[y,b]=(0,r.useState)(""),w=(0,r.useRef)(null),k=(0,r.useRef)(""),[E,S]=(0,r.useState)("");(0,r.useEffect)((()=>{if(!Array.isArray(be.Kc))return;let e="";if(c.pathname.startsWith(i)){const t=c.pathname.substring(i.length),n=be.Kc.find((e=>t===e||t.startsWith(`${e}/`)));n&&(e=n)}k.current!==e&&(f.current.delete(e),k.current=e),S(e)}),[c.pathname,i]);const x=!!be.hG&&Array.isArray(be.Kc)&&""===E,_=(0,r.useCallback)((async()=>{if(x||f.current.get(E))return;f.current.set(E,"loading"),w.current?.autocomplete.destroy(),h(!0);const[{wrappedIndexes:e,zhDictionary:t},r]=await Promise.all([(0,Se.w)(i,E),at()]);if(w.current=r(d.current,{hint:!1,autoselect:!0,openOnFocus:!0,cssClasses:{root:(0,a.Z)(Re,{[Ae]:"left"===be.pu}),noPrefix:!0,dropdownMenu:Ne,input:Ke,hint:Ye,suggestions:Xe,suggestion:Oe,cursor:Pe,dataset:Je,empty:et}},[{source:(0,xe.v)(e,t,be.qo),templates:{suggestion:tt,empty:nt,footer:e=>{let{query:t,isEmpty:r}=e;if(r&&!E)return;const a=(e=>{let{query:t,isEmpty:r}=e;const a=document.createElement("a"),o=new URLSearchParams,s=(0,u.I)({id:"theme.SearchBar.seeAll",message:"See all results"}),c=(0,u.I)({id:"theme.SearchBar.seeAllOutsideContext",message:"See results outside {context}"},{context:E}),d=(0,u.I)({id:"theme.SearchBar.searchInContext",message:"See all results in {context}"},{context:E});let f;if(o.set("q",t),f=E&&r?c:E?d:s,Array.isArray(be.Kc)&&!r&&o.set("ctx",E),i!==n){if(!i.startsWith(n))throw new Error(`Version url '${i}' does not start with base url '${n}', this is a bug of \`@easyops-cn/docusaurus-search-local\`, please report it.`);o.set("version",i.substring(n.length))}const p=`${n}search?${o.toString()}`;return a.href=p,a.textContent=f,a.addEventListener("click",(e=>{e.ctrlKey||e.metaKey||(e.preventDefault(),w.current?.autocomplete.close(),l.push(p))})),a})({query:t,isEmpty:r}),o=document.createElement("div");return o.className=je,o.appendChild(a),o}}}]).on("autocomplete:selected",(function(e,t){let{document:{u:n,h:r},tokens:a}=t;d.current?.blur();let o=n;if(be.vc&&a.length>0){const e=new URLSearchParams;for(const t of a)e.append(ot,t);o+=`?${e.toString()}`}r&&(o+=r),l.push(o)})).on("autocomplete:closed",(()=>{d.current?.blur()})),f.current.set(E,"done"),h(!1),p.current){const e=d.current;e.value&&w.current?.autocomplete.open(),e.focus()}}),[x,E,i,n,l]);(0,r.useEffect)((()=>{if(!be.vc)return;const e=we.Z.canUseDOM?new URLSearchParams(c.search).getAll(ot):[];setTimeout((()=>{const t=document.querySelector("article");if(!t)return;const n=new be.vc(t);n.unmark(),0!==e.length&&n.mark(e),b(e.join(" ")),w.current?.autocomplete.setVal(e.join(" "))}))}),[c.search,c.pathname]);const[C,T]=(0,r.useState)(!1),L=(0,r.useCallback)((()=>{p.current=!0,_(),T(!0),t?.(!0)}),[t,_]),R=(0,r.useCallback)((()=>{T(!1),t?.(!1)}),[t]),N=(0,r.useCallback)((()=>{_()}),[_]),A=(0,r.useCallback)((e=>{b(e.target.value),e.target.value&&v(!0)}),[]),O=!!we.Z.canUseDOM&&/mac/i.test(navigator.userAgentData?.platform??navigator.platform);(0,r.useEffect)((()=>{if(!be.AY)return;const e=e=>{!(O?e.metaKey:e.ctrlKey)||"k"!==e.key&&"K"!==e.key||(e.preventDefault(),d.current?.focus(),L())};return document.addEventListener("keydown",e),()=>{document.removeEventListener("keydown",e)}}),[O,L]);const P=(0,r.useCallback)((()=>{const e=new URLSearchParams(c.search);e.delete(ot);const t=e.toString(),n=c.pathname+(""!=t?`?${t}`:"")+c.hash;n!=c.pathname+c.search+c.hash&&l.push(n),b(""),w.current?.autocomplete.setVal("")}),[c.pathname,c.search,c.hash,l]);return r.createElement("div",{className:(0,a.Z)("navbar__search",qe,{[Ze]:m&&g,[We]:C}),hidden:x},r.createElement("input",{placeholder:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"}),"aria-label":"Search",className:"navbar__search-input",onMouseEnter:N,onFocus:L,onBlur:R,onChange:A,ref:d,value:y}),r.createElement(rt.Z,{className:He}),be.AY&&be.t_&&(""!==y?r.createElement("button",{className:Ge,onClick:P},"\u2715"):we.Z.canUseDOM&&r.createElement("div",{className:Qe},r.createElement("kbd",{className:Ve},O?"\u2318":"ctrl"),r.createElement("kbd",{className:Ve},"K"))))},lt="searchBox_ZlJk";function st(e){let{children:t,className:n}=e;return r.createElement("div",{className:(0,a.Z)(n,lt)},t)}var ut=n(3438);const ct=e=>e.docs.find((t=>t.id===e.mainDocId));const dt={default:se,localeDropdown:function(e){let{mobile:t,dropdownItemsBefore:n,dropdownItemsAfter:a,...o}=e;const{i18n:{currentLocale:i,locales:c,localeConfigs:d}}=(0,de.Z)(),f=(0,ge.l)(),{search:p,hash:m}=(0,s.TH)(),h=[...n,...c.map((e=>{const n=`${`pathname://${f.createUrl({locale:e,fullyQualified:!1})}`}${p}${m}`;return{label:d[e].label,lang:d[e].htmlLang,to:n,target:"_self",autoAddBaseUrl:!1,className:e===i?t?"menu__link--active":"dropdown__link--active":""}})),...a],g=t?(0,u.I)({message:"Languages",id:"theme.navbar.mobileLanguageDropdown.label",description:"The label for the mobile language switcher dropdown"}):d[i].label;return r.createElement(he,(0,l.Z)({},o,{mobile:t,label:r.createElement(r.Fragment,null,r.createElement(ve,{className:ye}),g),items:h}))},search:function(e){let{mobile:t,className:n}=e;return t?null:r.createElement(st,{className:n},r.createElement(it,null))},dropdown:he,html:function(e){let{value:t,className:n,mobile:o=!1,isDropdownItem:i=!1}=e;const l=i?"li":"div";return r.createElement(l,{className:(0,a.Z)({navbar__item:!o&&!i,"menu__list-item":o},n),dangerouslySetInnerHTML:{__html:t}})},doc:function(e){let{docId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ee.Iw)(a),s=(0,ut.vY)(t,a);return null===s?null:r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.path===s.path||!!i?.sidebar&&i.sidebar===s.sidebar,label:n??s.id,to:s.path}))},docSidebar:function(e){let{sidebarId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ee.Iw)(a),s=(0,ut.oz)(t,a).link;if(!s)throw new Error(`DocSidebarNavbarItem: Sidebar with ID "${t}" doesn't have anything to be linked to.`);return r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.sidebar===t,label:n??s.label,to:s.path}))},docsVersion:function(e){let{label:t,to:n,docsPluginId:a,...o}=e;const i=(0,ut.lO)(a)[0],s=t??i.label,u=n??(e=>e.docs.find((t=>t.id===e.mainDocId)))(i).path;return r.createElement(se,(0,l.Z)({},o,{label:s,to:u}))},docsVersionDropdown:function(e){let{mobile:t,docsPluginId:n,dropdownActiveClassDisabled:a,dropdownItemsBefore:o,dropdownItemsAfter:i,...c}=e;const{search:d,hash:f}=(0,s.TH)(),p=(0,Ee.Iw)(n),m=(0,Ee.gB)(n),{savePreferredVersionName:h}=(0,ke.J)(n),g=[...o,...m.map((e=>{const t=p.alternateDocVersions[e.name]??ct(e);return{label:e.label,to:`${t.path}${d}${f}`,isActive:()=>e===p.activeVersion,onClick:()=>h(e.name)}})),...i],v=(0,ut.lO)(n)[0],y=t&&g.length>1?(0,u.I)({id:"theme.navbar.mobileVersionsDropdown.label",message:"Versions",description:"The label for the navbar versions dropdown on mobile view"}):v.label,b=t&&g.length>1?void 0:ct(v).path;return g.length<=1?r.createElement(se,(0,l.Z)({},c,{mobile:t,label:y,to:b,isActive:a?()=>!1:void 0})):r.createElement(he,(0,l.Z)({},c,{mobile:t,label:y,to:b,items:g,isActive:a?()=>!1:void 0}))}};function ft(e){let{type:t,...n}=e;const a=function(e,t){return e&&"default"!==e?e:"items"in t?"dropdown":"default"}(t,n),o=dt[a];if(!o)throw new Error(`No NavbarItem component found for type "${t}".`);return r.createElement(o,n)}function pt(){const e=(0,O.e)(),t=(0,w.L)().navbar.items;return r.createElement("ul",{className:"menu__list"},t.map(((t,n)=>r.createElement(ft,(0,l.Z)({mobile:!0},t,{onClick:()=>e.toggle(),key:n})))))}function mt(e){return r.createElement("button",(0,l.Z)({},e,{type:"button",className:"clean-btn navbar-sidebar__back"}),r.createElement(u.Z,{id:"theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel",description:"The label of the back button to return to main menu, inside the mobile navbar sidebar secondary menu (notably used to display the docs sidebar)"},"\u2190 Back to main menu"))}function ht(){const e=0===(0,w.L)().navbar.items.length,t=B();return r.createElement(r.Fragment,null,!e&&r.createElement(mt,{onClick:()=>t.hide()}),t.content)}function gt(){const e=(0,O.e)();var t;return void 0===(t=e.shown)&&(t=!0),(0,r.useEffect)((()=>(document.body.style.overflow=t?"hidden":"visible",()=>{document.body.style.overflow="visible"})),[t]),e.shouldRender?r.createElement(z,{header:r.createElement(J,null),primaryMenu:r.createElement(pt,null),secondaryMenu:r.createElement(ht,null)}):null}const vt="navbarHideable_m1mJ",yt="navbarHidden_jGov";function bt(e){return r.createElement("div",(0,l.Z)({role:"presentation"},e,{className:(0,a.Z)("navbar-sidebar__backdrop",e.className)}))}function wt(e){let{children:t}=e;const{navbar:{hideOnScroll:n,style:o}}=(0,w.L)(),i=(0,O.e)(),{navbarRef:l,isNavbarVisible:s}=function(e){const[t,n]=(0,r.useState)(e),a=(0,r.useRef)(!1),o=(0,r.useRef)(0),i=(0,r.useCallback)((e=>{null!==e&&(o.current=e.getBoundingClientRect().height)}),[]);return(0,P.RF)(((t,r)=>{let{scrollY:i}=t;if(!e)return;if(i<o.current)return void n(!0);if(a.current)return void(a.current=!1);const l=r?.scrollY,s=document.documentElement.scrollHeight-o.current,u=window.innerHeight;l&&i>=l?n(!1):i+u<s&&n(!0)})),(0,c.S)((t=>{if(!e)return;const r=t.location.hash;if(r?document.getElementById(r.substring(1)):void 0)return a.current=!0,void n(!1);n(!0)})),{navbarRef:i,isNavbarVisible:t}}(n);return r.createElement("nav",{ref:l,"aria-label":(0,u.I)({id:"theme.NavBar.navAriaLabel",message:"Main",description:"The ARIA label for the main navigation"}),className:(0,a.Z)("navbar","navbar--fixed-top",n&&[vt,!s&&yt],{"navbar--dark":"dark"===o,"navbar--primary":"primary"===o,"navbar-sidebar--show":i.shown})},t,r.createElement(bt,{onClick:i.toggle}),r.createElement(gt,null))}var kt=n(8780);const Et="errorBoundaryError_a6uf";function St(e){return r.createElement("button",(0,l.Z)({type:"button"},e),r.createElement(u.Z,{id:"theme.ErrorPageContent.tryAgain",description:"The label of the button to try again rendering when the React error boundary captures an error"},"Try again"))}function xt(e){let{error:t}=e;const n=(0,kt.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{className:Et},n)}class _t extends r.Component{componentDidCatch(e,t){throw this.props.onError(e,t)}render(){return this.props.children}}function Ct(e){let{width:t=30,height:n=30,className:a,...o}=e;return r.createElement("svg",(0,l.Z)({className:a,width:t,height:n,viewBox:"0 0 30 30","aria-hidden":"true"},o),r.createElement("path",{stroke:"currentColor",strokeLinecap:"round",strokeMiterlimit:"10",strokeWidth:"2",d:"M4 7h22M4 15h22M4 23h22"}))}function Tt(){const{toggle:e,shown:t}=(0,O.e)();return r.createElement("button",{onClick:e,"aria-label":(0,u.I)({id:"theme.docs.sidebar.toggleSidebarButtonAriaLabel",message:"Toggle navigation bar",description:"The ARIA label for hamburger menu button of mobile navigation"}),"aria-expanded":t,className:"navbar__toggle clean-btn",type:"button"},r.createElement(Ct,null))}const Lt="colorModeToggle_DEke";function Rt(e){let{items:t}=e;return r.createElement(r.Fragment,null,t.map(((e,t)=>r.createElement(_t,{key:t,onError:t=>new Error(`A theme navbar item failed to render.\nPlease double-check the following navbar item (themeConfig.navbar.items) of your Docusaurus config:\n${JSON.stringify(e,null,2)}`,{cause:t})},r.createElement(ft,e)))))}function Nt(e){let{left:t,right:n}=e;return r.createElement("div",{className:"navbar__inner"},r.createElement("div",{className:"navbar__items"},t),r.createElement("div",{className:"navbar__items navbar__items--right"},n))}function At(){const e=(0,O.e)(),t=(0,w.L)().navbar.items,[n,a]=function(e){function t(e){return"left"===(e.position??"right")}return[e.filter(t),e.filter((e=>!t(e)))]}(t),o=t.find((e=>"search"===e.type));return r.createElement(Nt,{left:r.createElement(r.Fragment,null,!e.disabled&&r.createElement(Tt,null),r.createElement(Y,null),r.createElement(Rt,{items:n})),right:r.createElement(r.Fragment,null,r.createElement(Rt,{items:a}),r.createElement(W,{className:Lt}),!o&&r.createElement(st,null,r.createElement(it,null)))})}function Ot(){return r.createElement(wt,null,r.createElement(At,null))}function Pt(e){let{item:t}=e;const{to:n,href:a,label:o,prependBaseUrlToHref:i,...s}=t,u=(0,te.Z)(n),c=(0,te.Z)(a,{forcePrependBaseUrl:!0});return r.createElement(ee.Z,(0,l.Z)({className:"footer__link-item"},a?{href:i?c:a}:{to:u},s),o,a&&!(0,ne.Z)(a)&&r.createElement(ae.Z,null))}function It(e){let{item:t}=e;return t.html?r.createElement("li",{className:"footer__item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement("li",{key:t.href??t.to,className:"footer__item"},r.createElement(Pt,{item:t}))}function Dt(e){let{column:t}=e;return r.createElement("div",{className:"col footer__col"},r.createElement("div",{className:"footer__title"},t.title),r.createElement("ul",{className:"footer__items clean-list"},t.items.map(((e,t)=>r.createElement(It,{key:t,item:e})))))}function Mt(e){let{columns:t}=e;return r.createElement("div",{className:"row footer__links"},t.map(((e,t)=>r.createElement(Dt,{key:t,column:e}))))}function Ft(){return r.createElement("span",{className:"footer__link-separator"},"\xb7")}function jt(e){let{item:t}=e;return t.html?r.createElement("span",{className:"footer__link-item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement(Pt,{item:t})}function Bt(e){let{links:t}=e;return r.createElement("div",{className:"footer__links text--center"},r.createElement("div",{className:"footer__links"},t.map(((e,n)=>r.createElement(r.Fragment,{key:n},r.createElement(jt,{item:e}),t.length!==n+1&&r.createElement(Ft,null))))))}function zt(e){let{links:t}=e;return function(e){return"title"in e[0]}(t)?r.createElement(Mt,{columns:t}):r.createElement(Bt,{links:t})}var $t=n(941);const Ut="footerLogoLink_BH7S";function qt(e){let{logo:t}=e;const{withBaseUrl:n}=(0,te.C)(),o={light:n(t.src),dark:n(t.srcDark??t.src)};return r.createElement($t.Z,{className:(0,a.Z)("footer__logo",t.className),alt:t.alt,sources:o,width:t.width,height:t.height,style:t.style})}function Ht(e){let{logo:t}=e;return t.href?r.createElement(ee.Z,{href:t.href,className:Ut,target:t.target},r.createElement(qt,{logo:t})):r.createElement(qt,{logo:t})}function Gt(e){let{copyright:t}=e;return r.createElement("div",{className:"footer__copyright",dangerouslySetInnerHTML:{__html:t}})}function Zt(e){let{style:t,links:n,logo:o,copyright:i}=e;return r.createElement("footer",{className:(0,a.Z)("footer",{"footer--dark":"dark"===t})},r.createElement("div",{className:"container container-fluid"},n,(o||i)&&r.createElement("div",{className:"footer__bottom text--center"},o&&r.createElement("div",{className:"margin-bottom--sm"},o),i)))}function Qt(){const{footer:e}=(0,w.L)();if(!e)return null;const{copyright:t,links:n,logo:a,style:o}=e;return r.createElement(Zt,{style:o,links:n&&n.length>0&&r.createElement(zt,{links:n}),logo:a&&r.createElement(Ht,{logo:a}),copyright:t&&r.createElement(Gt,{copyright:t})})}const Vt=r.memo(Qt),Wt=(0,I.Qc)([$.S,k.pl,P.OC,ke.L5,i.VC,function(e){let{children:t}=e;return r.createElement(D.n2,null,r.createElement(O.M,null,r.createElement(F,null,t)))}]);function Kt(e){let{children:t}=e;return r.createElement(Wt,null,t)}function Yt(e){let{error:t,tryAgain:n}=e;return r.createElement("main",{className:"container margin-vert--xl"},r.createElement("div",{className:"row"},r.createElement("div",{className:"col col--6 col--offset-3"},r.createElement("h1",{className:"hero__title"},r.createElement(u.Z,{id:"theme.ErrorPageContent.title",description:"The title of the fallback page when the page crashed"},"This page crashed.")),r.createElement("div",{className:"margin-vert--lg"},r.createElement(St,{onClick:n,className:"button button--primary shadow--lw"})),r.createElement("hr",null),r.createElement("div",{className:"margin-vert--md"},r.createElement(xt,{error:t})))))}const Xt="mainWrapper_z2l0";function Jt(e){const{children:t,noFooter:n,wrapperClassName:l,title:s,description:u}=e;return(0,v.t)(),r.createElement(Kt,null,r.createElement(i.d,{title:s,description:u}),r.createElement(b,null),r.createElement(A,null),r.createElement(Ot,null),r.createElement("div",{id:d,className:(0,a.Z)(g.k.wrapper.main,Xt,l)},r.createElement(o.Z,{fallback:e=>r.createElement(Yt,e)},t)),!n&&r.createElement(Vt,null))}},1327:(e,t,n)=>{"use strict";n.d(t,{Z:()=>d});var r=n(3117),a=n(7294),o=n(9960),i=n(4996),l=n(2263),s=n(6668),u=n(941);function c(e){let{logo:t,alt:n,imageClassName:r}=e;const o={light:(0,i.Z)(t.src),dark:(0,i.Z)(t.srcDark||t.src)},l=a.createElement(u.Z,{className:t.className,sources:o,height:t.height,width:t.width,alt:n,style:t.style});return r?a.createElement("div",{className:r},l):l}function d(e){const{siteConfig:{title:t}}=(0,l.Z)(),{navbar:{title:n,logo:u}}=(0,s.L)(),{imageClassName:d,titleClassName:f,...p}=e,m=(0,i.Z)(u?.href||"/"),h=n?"":t,g=u?.alt??h;return a.createElement(o.Z,(0,r.Z)({to:m},p,u?.target&&{target:u.target}),u&&a.createElement(c,{logo:u,alt:g,imageClassName:d}),null!=n&&a.createElement("b",{className:f},n))}},197:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(5742);function o(e){let{locale:t,version:n,tag:o}=e;const i=t;return r.createElement(a.Z,null,t&&r.createElement("meta",{name:"docusaurus_locale",content:t}),n&&r.createElement("meta",{name:"docusaurus_version",content:n}),o&&r.createElement("meta",{name:"docusaurus_tag",content:o}),i&&r.createElement("meta",{name:"docsearch:language",content:i}),n&&r.createElement("meta",{name:"docsearch:version",content:n}),o&&r.createElement("meta",{name:"docsearch:docusaurus_tag",content:o}))}},941:(e,t,n)=>{"use strict";n.d(t,{Z:()=>u});var r=n(3117),a=n(7294),o=n(6010),i=n(2389),l=n(2949);const s={themedImage:"themedImage_ToTc","themedImage--light":"themedImage--light_HNdA","themedImage--dark":"themedImage--dark_i4oU"};function u(e){const t=(0,i.Z)(),{colorMode:n}=(0,l.I)(),{sources:u,className:c,alt:d,...f}=e,p=t?"dark"===n?["dark"]:["light"]:["light","dark"];return a.createElement(a.Fragment,null,p.map((e=>a.createElement("img",(0,r.Z)({key:e,src:u[e],alt:d,className:(0,o.Z)(s.themedImage,s[`themedImage--${e}`],c)},f)))))}},6043:(e,t,n)=>{"use strict";n.d(t,{u:()=>l,z:()=>h});var r=n(3117),a=n(7294),o=n(412),i=n(1442);function l(e){let{initialState:t}=e;const[n,r]=(0,a.useState)(t??!1),o=(0,a.useCallback)((()=>{r((e=>!e))}),[]);return{collapsed:n,setCollapsed:r,toggleCollapsed:o}}const s={display:"none",overflow:"hidden",height:"0px"},u={display:"block",overflow:"visible",height:"auto"};function c(e,t){const n=t?s:u;e.style.display=n.display,e.style.overflow=n.overflow,e.style.height=n.height}function d(e){let{collapsibleRef:t,collapsed:n,animation:r}=e;const o=(0,a.useRef)(!1);(0,a.useEffect)((()=>{const e=t.current;function a(){const t=e.scrollHeight,n=r?.duration??function(e){if((0,i.n)())return 1;const t=e/36;return Math.round(10*(4+15*t**.25+t/5))}(t);return{transition:`height ${n}ms ${r?.easing??"ease-in-out"}`,height:`${t}px`}}function l(){const t=a();e.style.transition=t.transition,e.style.height=t.height}if(!o.current)return c(e,n),void(o.current=!0);return e.style.willChange="height",function(){const t=requestAnimationFrame((()=>{n?(l(),requestAnimationFrame((()=>{e.style.height=s.height,e.style.overflow=s.overflow}))):(e.style.display="block",requestAnimationFrame((()=>{l()})))}));return()=>cancelAnimationFrame(t)}()}),[t,n,r])}function f(e){if(!o.Z.canUseDOM)return e?s:u}function p(e){let{as:t="div",collapsed:n,children:r,animation:o,onCollapseTransitionEnd:i,className:l,disableSSRStyle:s}=e;const u=(0,a.useRef)(null);return d({collapsibleRef:u,collapsed:n,animation:o}),a.createElement(t,{ref:u,style:s?void 0:f(n),onTransitionEnd:e=>{"height"===e.propertyName&&(c(u.current,n),i?.(n))},className:l},r)}function m(e){let{collapsed:t,...n}=e;const[o,i]=(0,a.useState)(!t),[l,s]=(0,a.useState)(t);return(0,a.useLayoutEffect)((()=>{t||i(!0)}),[t]),(0,a.useLayoutEffect)((()=>{o&&s(t)}),[o,t]),o?a.createElement(p,(0,r.Z)({},n,{collapsed:l})):null}function h(e){let{lazy:t,...n}=e;const r=t?m:p;return a.createElement(r,n)}},9689:(e,t,n)=>{"use strict";n.d(t,{nT:()=>m,pl:()=>p});var r=n(7294),a=n(2389),o=n(12),i=n(902),l=n(6668);const s=(0,o.WA)("docusaurus.announcement.dismiss"),u=(0,o.WA)("docusaurus.announcement.id"),c=()=>"true"===s.get(),d=e=>s.set(String(e)),f=r.createContext(null);function p(e){let{children:t}=e;const n=function(){const{announcementBar:e}=(0,l.L)(),t=(0,a.Z)(),[n,o]=(0,r.useState)((()=>!!t&&c()));(0,r.useEffect)((()=>{o(c())}),[]);const i=(0,r.useCallback)((()=>{d(!0),o(!0)}),[]);return(0,r.useEffect)((()=>{if(!e)return;const{id:t}=e;let n=u.get();"annoucement-bar"===n&&(n="announcement-bar");const r=t!==n;u.set(t),r&&d(!1),!r&&c()||o(!1)}),[e]),(0,r.useMemo)((()=>({isActive:!!e&&!n,close:i})),[e,n,i])}();return r.createElement(f.Provider,{value:n},t)}function m(){const e=(0,r.useContext)(f);if(!e)throw new i.i6("AnnouncementBarProvider");return e}},2949:(e,t,n)=>{"use strict";n.d(t,{I:()=>g,S:()=>h});var r=n(7294),a=n(412),o=n(902),i=n(12),l=n(6668);const s=r.createContext(void 0),u="theme",c=(0,i.WA)(u),d="light",f="dark",p=e=>e===f?f:d;function m(){const{colorMode:{defaultMode:e,disableSwitch:t,respectPrefersColorScheme:n}}=(0,l.L)(),[o,i]=(0,r.useState)((e=>a.Z.canUseDOM?p(document.documentElement.getAttribute("data-theme")):p(e))(e));(0,r.useEffect)((()=>{t&&c.del()}),[t]);const s=(0,r.useCallback)((function(t,r){void 0===r&&(r={});const{persist:a=!0}=r;t?(i(t),a&&(e=>{c.set(p(e))})(t)):(i(n?window.matchMedia("(prefers-color-scheme: dark)").matches?f:d:e),c.del())}),[n,e]);(0,r.useEffect)((()=>{document.documentElement.setAttribute("data-theme",p(o))}),[o]),(0,r.useEffect)((()=>{if(t)return;const e=e=>{if(e.key!==u)return;const t=c.get();null!==t&&s(p(t))};return window.addEventListener("storage",e),()=>window.removeEventListener("storage",e)}),[t,s]);const m=(0,r.useRef)(!1);return(0,r.useEffect)((()=>{if(t&&!n)return;const e=window.matchMedia("(prefers-color-scheme: dark)"),r=()=>{window.matchMedia("print").matches||m.current?m.current=window.matchMedia("print").matches:s(null)};return e.addListener(r),()=>e.removeListener(r)}),[s,t,n]),(0,r.useMemo)((()=>({colorMode:o,setColorMode:s,get isDarkTheme(){return o===f},setLightTheme(){s(d)},setDarkTheme(){s(f)}})),[o,s])}function h(e){let{children:t}=e;const n=m();return r.createElement(s.Provider,{value:n},t)}function g(){const e=(0,r.useContext)(s);if(null==e)throw new o.i6("ColorModeProvider","Please see https://docusaurus.io/docs/api/themes/configuration#use-color-mode.");return e}},373:(e,t,n)=>{"use strict";n.d(t,{J:()=>b,L5:()=>v});var r=n(7294),a=n(143),o=n(9935),i=n(6668),l=n(3438),s=n(902),u=n(12);const c=e=>`docs-preferred-version-${e}`,d=(e,t,n)=>{(0,u.WA)(c(e),{persistence:t}).set(n)},f=(e,t)=>(0,u.WA)(c(e),{persistence:t}).get(),p=(e,t)=>{(0,u.WA)(c(e),{persistence:t}).del()};const m=r.createContext(null);function h(){const e=(0,a._r)(),t=(0,i.L)().docs.versionPersistence,n=(0,r.useMemo)((()=>Object.keys(e)),[e]),[o,l]=(0,r.useState)((()=>(e=>Object.fromEntries(e.map((e=>[e,{preferredVersionName:null}]))))(n)));(0,r.useEffect)((()=>{l(function(e){let{pluginIds:t,versionPersistence:n,allDocsData:r}=e;function a(e){const t=f(e,n);return r[e].versions.some((e=>e.name===t))?{preferredVersionName:t}:(p(e,n),{preferredVersionName:null})}return Object.fromEntries(t.map((e=>[e,a(e)])))}({allDocsData:e,versionPersistence:t,pluginIds:n}))}),[e,t,n]);return[o,(0,r.useMemo)((()=>({savePreferredVersion:function(e,n){d(e,t,n),l((t=>({...t,[e]:{preferredVersionName:n}})))}})),[t])]}function g(e){let{children:t}=e;const n=h();return r.createElement(m.Provider,{value:n},t)}function v(e){let{children:t}=e;return l.cE?r.createElement(g,null,t):r.createElement(r.Fragment,null,t)}function y(){const e=(0,r.useContext)(m);if(!e)throw new s.i6("DocsPreferredVersionContextProvider");return e}function b(e){void 0===e&&(e=o.m);const t=(0,a.zh)(e),[n,i]=y(),{preferredVersionName:l}=n[e];return{preferredVersion:t.versions.find((e=>e.name===l))??null,savePreferredVersionName:(0,r.useCallback)((t=>{i.savePreferredVersion(e,t)}),[i,e])}}},1116:(e,t,n)=>{"use strict";n.d(t,{V:()=>s,b:()=>l});var r=n(7294),a=n(902);const o=Symbol("EmptyContext"),i=r.createContext(o);function l(e){let{children:t,name:n,items:a}=e;const o=(0,r.useMemo)((()=>n&&a?{name:n,items:a}:null),[n,a]);return r.createElement(i.Provider,{value:o},t)}function s(){const e=(0,r.useContext)(i);if(e===o)throw new a.i6("DocsSidebarProvider");return e}},3163:(e,t,n)=>{"use strict";n.d(t,{M:()=>d,e:()=>f});var r=n(7294),a=n(3102),o=n(7524),i=n(1980),l=n(6668),s=n(902);const u=r.createContext(void 0);function c(){const e=function(){const e=(0,a.HY)(),{items:t}=(0,l.L)().navbar;return 0===t.length&&!e.component}(),t=(0,o.i)(),n=!e&&"mobile"===t,[s,u]=(0,r.useState)(!1);(0,i.Rb)((()=>{if(s)return u(!1),!1}));const c=(0,r.useCallback)((()=>{u((e=>!e))}),[]);return(0,r.useEffect)((()=>{"desktop"===t&&u(!1)}),[t]),(0,r.useMemo)((()=>({disabled:e,shouldRender:n,toggle:c,shown:s})),[e,n,c,s])}function d(e){let{children:t}=e;const n=c();return r.createElement(u.Provider,{value:n},t)}function f(){const e=r.useContext(u);if(void 0===e)throw new s.i6("NavbarMobileSidebarProvider");return e}},3102:(e,t,n)=>{"use strict";n.d(t,{HY:()=>l,Zo:()=>s,n2:()=>i});var r=n(7294),a=n(902);const o=r.createContext(null);function i(e){let{children:t}=e;const n=(0,r.useState)({component:null,props:null});return r.createElement(o.Provider,{value:n},t)}function l(){const e=(0,r.useContext)(o);if(!e)throw new a.i6("NavbarSecondaryMenuContentProvider");return e[0]}function s(e){let{component:t,props:n}=e;const i=(0,r.useContext)(o);if(!i)throw new a.i6("NavbarSecondaryMenuContentProvider");const[,l]=i,s=(0,a.Ql)(n);return(0,r.useEffect)((()=>{l({component:t,props:s})}),[l,t,s]),(0,r.useEffect)((()=>()=>l({component:null,props:null})),[l]),null}},9727:(e,t,n)=>{"use strict";n.d(t,{h:()=>a,t:()=>o});var r=n(7294);const a="navigation-with-keyboard";function o(){(0,r.useEffect)((()=>{function e(e){"keydown"===e.type&&"Tab"===e.key&&document.body.classList.add(a),"mousedown"===e.type&&document.body.classList.remove(a)}return document.addEventListener("keydown",e),document.addEventListener("mousedown",e),()=>{document.body.classList.remove(a),document.removeEventListener("keydown",e),document.removeEventListener("mousedown",e)}}),[])}},7524:(e,t,n)=>{"use strict";n.d(t,{i:()=>u});var r=n(7294),a=n(412);const o="desktop",i="mobile",l="ssr";function s(){return a.Z.canUseDOM?window.innerWidth>996?o:i:l}function u(){const[e,t]=(0,r.useState)((()=>s()));return(0,r.useEffect)((()=>{function e(){t(s())}return window.addEventListener("resize",e),()=>{window.removeEventListener("resize",e),clearTimeout(undefined)}}),[]),e}},5281:(e,t,n)=>{"use strict";n.d(t,{k:()=>r});const r={page:{blogListPage:"blog-list-page",blogPostPage:"blog-post-page",blogTagsListPage:"blog-tags-list-page",blogTagPostListPage:"blog-tags-post-list-page",docsDocPage:"docs-doc-page",docsTagsListPage:"docs-tags-list-page",docsTagDocListPage:"docs-tags-doc-list-page",mdxPage:"mdx-page"},wrapper:{main:"main-wrapper",blogPages:"blog-wrapper",docsPages:"docs-wrapper",mdxPages:"mdx-wrapper"},common:{editThisPage:"theme-edit-this-page",lastUpdated:"theme-last-updated",backToTopButton:"theme-back-to-top-button",codeBlock:"theme-code-block",admonition:"theme-admonition",admonitionType:e=>`theme-admonition-${e}`},layout:{},docs:{docVersionBanner:"theme-doc-version-banner",docVersionBadge:"theme-doc-version-badge",docBreadcrumbs:"theme-doc-breadcrumbs",docMarkdown:"theme-doc-markdown",docTocMobile:"theme-doc-toc-mobile",docTocDesktop:"theme-doc-toc-desktop",docFooter:"theme-doc-footer",docFooterTagsRow:"theme-doc-footer-tags-row",docFooterEditMetaRow:"theme-doc-footer-edit-meta-row",docSidebarContainer:"theme-doc-sidebar-container",docSidebarMenu:"theme-doc-sidebar-menu",docSidebarItemCategory:"theme-doc-sidebar-item-category",docSidebarItemLink:"theme-doc-sidebar-item-link",docSidebarItemCategoryLevel:e=>`theme-doc-sidebar-item-category-level-${e}`,docSidebarItemLinkLevel:e=>`theme-doc-sidebar-item-link-level-${e}`},blog:{}}},1442:(e,t,n)=>{"use strict";function r(){return window.matchMedia("(prefers-reduced-motion: reduce)").matches}n.d(t,{n:()=>r})},3438:(e,t,n)=>{"use strict";n.d(t,{Wl:()=>f,_F:()=>m,cE:()=>d,hI:()=>w,lO:()=>v,oz:()=>y,s1:()=>g,vY:()=>b});var r=n(7294),a=n(6775),o=n(8790),i=n(143),l=n(373),s=n(1116),u=n(7392),c=n(8596);const d=!!i._r;function f(e){if(e.href)return e.href;for(const t of e.items){if("link"===t.type)return t.href;if("category"===t.type){const e=f(t);if(e)return e}}}const p=(e,t)=>void 0!==e&&(0,c.Mg)(e,t);function m(e,t){return"link"===e.type?p(e.href,t):"category"===e.type&&(p(e.href,t)||((e,t)=>e.some((e=>m(e,t))))(e.items,t))}function h(e){let{sidebarItems:t,pathname:n,onlyCategories:r=!1}=e;const a=[];return function e(t){for(const o of t)if("category"===o.type&&((0,c.Mg)(o.href,n)||e(o.items))||"link"===o.type&&(0,c.Mg)(o.href,n)){return r&&"category"!==o.type||a.unshift(o),!0}return!1}(t),a}function g(){const e=(0,s.V)(),{pathname:t}=(0,a.TH)(),n=(0,i.gA)()?.pluginData.breadcrumbs;return!1!==n&&e?h({sidebarItems:e.items,pathname:t}):null}function v(e){const{activeVersion:t}=(0,i.Iw)(e),{preferredVersion:n}=(0,l.J)(e),a=(0,i.yW)(e);return(0,r.useMemo)((()=>(0,u.j)([t,n,a].filter(Boolean))),[t,n,a])}function y(e,t){const n=v(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.sidebars?Object.entries(e.sidebars):[])),r=t.find((t=>t[0]===e));if(!r)throw new Error(`Can't find any sidebar with id "${e}" in version${n.length>1?"s":""} ${n.map((e=>e.name)).join(", ")}".\nAvailable sidebar ids are:\n- ${t.map((e=>e[0])).join("\n- ")}`);return r[1]}),[e,n])}function b(e,t){const n=v(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.docs)),r=t.find((t=>t.id===e));if(!r){if(n.flatMap((e=>e.draftIds)).includes(e))return null;throw new Error(`Couldn't find any doc with id "${e}" in version${n.length>1?"s":""} "${n.map((e=>e.name)).join(", ")}".\nAvailable doc ids are:\n- ${(0,u.j)(t.map((e=>e.id))).join("\n- ")}`)}return r}),[e,n])}function w(e){let{route:t,versionMetadata:n}=e;const r=(0,a.TH)(),i=t.routes,l=i.find((e=>(0,a.LX)(r.pathname,e)));if(!l)return null;const s=l.sidebar,u=s?n.docsSidebars[s]:void 0;return{docElement:(0,o.H)(i),sidebarName:s,sidebarItems:u}}},1980:(e,t,n)=>{"use strict";n.d(t,{Rb:()=>l,_X:()=>s});var r=n(7294),a=n(6775),o=n(1688),i=n(902);function l(e){!function(e){const t=(0,a.k6)(),n=(0,i.zX)(e);(0,r.useEffect)((()=>t.block(((e,t)=>n(e,t)))),[t,n])}(((t,n)=>{if("POP"===n)return e(t,n)}))}function s(e){return function(e){const t=(0,a.k6)();return(0,o.useSyncExternalStore)(t.listen,(()=>e(t)),(()=>e(t)))}((t=>null===e?null:new URLSearchParams(t.location.search).get(e)))}},7392:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=(e,t)=>e===t),e.filter(((n,r)=>e.findIndex((e=>t(e,n)))!==r))}function a(e){return Array.from(new Set(e))}n.d(t,{j:()=>a,l:()=>r})},1944:(e,t,n)=>{"use strict";n.d(t,{FG:()=>f,d:()=>c,VC:()=>p});var r=n(7294),a=n(6010),o=n(5742),i=n(226);function l(){const e=r.useContext(i._);if(!e)throw new Error("Unexpected: no Docusaurus route context found");return e}var s=n(4996),u=n(2263);function c(e){let{title:t,description:n,keywords:a,image:i,children:l}=e;const c=function(e){const{siteConfig:t}=(0,u.Z)(),{title:n,titleDelimiter:r}=t;return e?.trim().length?`${e.trim()} ${r} ${n}`:n}(t),{withBaseUrl:d}=(0,s.C)(),f=i?d(i,{absolute:!0}):void 0;return r.createElement(o.Z,null,t&&r.createElement("title",null,c),t&&r.createElement("meta",{property:"og:title",content:c}),n&&r.createElement("meta",{name:"description",content:n}),n&&r.createElement("meta",{property:"og:description",content:n}),a&&r.createElement("meta",{name:"keywords",content:Array.isArray(a)?a.join(","):a}),f&&r.createElement("meta",{property:"og:image",content:f}),f&&r.createElement("meta",{name:"twitter:image",content:f}),l)}const d=r.createContext(void 0);function f(e){let{className:t,children:n}=e;const i=r.useContext(d),l=(0,a.Z)(i,t);return r.createElement(d.Provider,{value:l},r.createElement(o.Z,null,r.createElement("html",{className:l})),n)}function p(e){let{children:t}=e;const n=l(),o=`plugin-${n.plugin.name.replace(/docusaurus-(?:plugin|theme)-(?:content-)?/gi,"")}`;const i=`plugin-id-${n.plugin.id}`;return r.createElement(f,{className:(0,a.Z)(o,i)},t)}},902:(e,t,n)=>{"use strict";n.d(t,{D9:()=>i,Qc:()=>u,Ql:()=>s,i6:()=>l,zX:()=>o});var r=n(7294);const a=n(412).Z.canUseDOM?r.useLayoutEffect:r.useEffect;function o(e){const t=(0,r.useRef)(e);return a((()=>{t.current=e}),[e]),(0,r.useCallback)((function(){return t.current(...arguments)}),[])}function i(e){const t=(0,r.useRef)();return a((()=>{t.current=e})),t.current}class l extends Error{constructor(e,t){super(),this.name="ReactContextError",this.message=`Hook ${this.stack?.split("\n")[1]?.match(/at (?:\w+\.)?(?<name>\w+)/)?.groups.name??""} is called outside the <${e}>. ${t??""}`}}function s(e){const t=Object.entries(e);return t.sort(((e,t)=>e[0].localeCompare(t[0]))),(0,r.useMemo)((()=>e),t.flat())}function u(e){return t=>{let{children:n}=t;return r.createElement(r.Fragment,null,e.reduceRight(((e,t)=>r.createElement(t,null,e)),n))}}},8596:(e,t,n)=>{"use strict";n.d(t,{Mg:()=>i,Ns:()=>l});var r=n(7294),a=n(723),o=n(2263);function i(e,t){const n=e=>(!e||e.endsWith("/")?e:`${e}/`)?.toLowerCase();return n(e)===n(t)}function l(){const{baseUrl:e}=(0,o.Z)().siteConfig;return(0,r.useMemo)((()=>function(e){let{baseUrl:t,routes:n}=e;function r(e){return e.path===t&&!0===e.exact}function a(e){return e.path===t&&!e.exact}return function e(t){if(0===t.length)return;return t.find(r)||e(t.filter(a).flatMap((e=>e.routes??[])))}(n)}({routes:a.Z,baseUrl:e})),[e])}},2466:(e,t,n)=>{"use strict";n.d(t,{Ct:()=>p,OC:()=>s,RF:()=>d,o5:()=>f});var r=n(7294),a=n(412),o=n(2389),i=n(902);const l=r.createContext(void 0);function s(e){let{children:t}=e;const n=function(){const e=(0,r.useRef)(!0);return(0,r.useMemo)((()=>({scrollEventsEnabledRef:e,enableScrollEvents:()=>{e.current=!0},disableScrollEvents:()=>{e.current=!1}})),[])}();return r.createElement(l.Provider,{value:n},t)}function u(){const e=(0,r.useContext)(l);if(null==e)throw new i.i6("ScrollControllerProvider");return e}const c=()=>a.Z.canUseDOM?{scrollX:window.pageXOffset,scrollY:window.pageYOffset}:null;function d(e,t){void 0===t&&(t=[]);const{scrollEventsEnabledRef:n}=u(),a=(0,r.useRef)(c()),o=(0,i.zX)(e);(0,r.useEffect)((()=>{const e=()=>{if(!n.current)return;const e=c();o(e,a.current),a.current=e},t={passive:!0};return e(),window.addEventListener("scroll",e,t),()=>window.removeEventListener("scroll",e,t)}),[o,n,...t])}function f(){const e=u(),t=function(){const e=(0,r.useRef)({elem:null,top:0}),t=(0,r.useCallback)((t=>{e.current={elem:t,top:t.getBoundingClientRect().top}}),[]),n=(0,r.useCallback)((()=>{const{current:{elem:t,top:n}}=e;if(!t)return{restored:!1};const r=t.getBoundingClientRect().top-n;return r&&window.scrollBy({left:0,top:r}),e.current={elem:null,top:0},{restored:0!==r}}),[]);return(0,r.useMemo)((()=>({save:t,restore:n})),[n,t])}(),n=(0,r.useRef)(void 0),a=(0,r.useCallback)((r=>{t.save(r),e.disableScrollEvents(),n.current=()=>{const{restored:r}=t.restore();if(n.current=void 0,r){const t=()=>{e.enableScrollEvents(),window.removeEventListener("scroll",t)};window.addEventListener("scroll",t)}else e.enableScrollEvents()}}),[e,t]);return(0,r.useLayoutEffect)((()=>{queueMicrotask((()=>n.current?.()))})),{blockElementScrollPositionUntilNextRender:a}}function p(){const e=(0,r.useRef)(null),t=(0,o.Z)()&&"smooth"===getComputedStyle(document.documentElement).scrollBehavior;return{startScroll:n=>{e.current=t?function(e){return window.scrollTo({top:e,behavior:"smooth"}),()=>{}}(n):function(e){let t=null;const n=document.documentElement.scrollTop>e;return function r(){const a=document.documentElement.scrollTop;(n&&a>e||!n&&a<e)&&(t=requestAnimationFrame(r),window.scrollTo(0,Math.floor(.85*(a-e))+e))}(),()=>t&&cancelAnimationFrame(t)}(n)},cancelScroll:()=>e.current?.()}}},3320:(e,t,n)=>{"use strict";n.d(t,{HX:()=>r,os:()=>a});n(2263);const r="default";function a(e,t){return`docs-${e}-${t}`}},12:(e,t,n)=>{"use strict";n.d(t,{Nk:()=>d,WA:()=>c});var r=n(7294),a=n(1688);const o="localStorage";function i(e){let{key:t,oldValue:n,newValue:r,storage:a}=e;if(n===r)return;const o=document.createEvent("StorageEvent");o.initStorageEvent("storage",!1,!1,t,n,r,window.location.href,a),window.dispatchEvent(o)}function l(e){if(void 0===e&&(e=o),"undefined"==typeof window)throw new Error("Browser storage is not available on Node.js/Docusaurus SSR process.");if("none"===e)return null;try{return window[e]}catch(n){return t=n,s||(console.warn("Docusaurus browser storage is not available.\nPossible reasons: running Docusaurus in an iframe, in an incognito browser session, or using too strict browser privacy settings.",t),s=!0),null}var t}let s=!1;const u={get:()=>null,set:()=>{},del:()=>{},listen:()=>()=>{}};function c(e,t){if("undefined"==typeof window)return function(e){function t(){throw new Error(`Illegal storage API usage for storage key "${e}".\nDocusaurus storage APIs are not supposed to be called on the server-rendering process.\nPlease only call storage APIs in effects and event handlers.`)}return{get:t,set:t,del:t,listen:t}}(e);const n=l(t?.persistence);return null===n?u:{get:()=>{try{return n.getItem(e)}catch(t){return console.error(`Docusaurus storage error, can't get key=${e}`,t),null}},set:t=>{try{const r=n.getItem(e);n.setItem(e,t),i({key:e,oldValue:r,newValue:t,storage:n})}catch(r){console.error(`Docusaurus storage error, can't set ${e}=${t}`,r)}},del:()=>{try{const t=n.getItem(e);n.removeItem(e),i({key:e,oldValue:t,newValue:null,storage:n})}catch(t){console.error(`Docusaurus storage error, can't delete key=${e}`,t)}},listen:t=>{try{const r=r=>{r.storageArea===n&&r.key===e&&t(r)};return window.addEventListener("storage",r),()=>window.removeEventListener("storage",r)}catch(r){return console.error(`Docusaurus storage error, can't listen for changes of key=${e}`,r),()=>{}}}}}function d(e,t){const n=(0,r.useRef)((()=>null===e?u:c(e,t))).current(),o=(0,r.useCallback)((e=>"undefined"==typeof window?()=>{}:n.listen(e)),[n]);return[(0,a.useSyncExternalStore)(o,(()=>"undefined"==typeof window?null:n.get()),(()=>null)),n]}},4711:(e,t,n)=>{"use strict";n.d(t,{l:()=>o});var r=n(2263),a=n(6775);function o(){const{siteConfig:{baseUrl:e,url:t},i18n:{defaultLocale:n,currentLocale:o}}=(0,r.Z)(),{pathname:i}=(0,a.TH)(),l=o===n?e:e.replace(`/${o}/`,"/"),s=i.replace(e,"");return{createUrl:function(e){let{locale:r,fullyQualified:a}=e;return`${a?t:""}${function(e){return e===n?`${l}`:`${l}${e}/`}(r)}${s}`}}}},5936:(e,t,n)=>{"use strict";n.d(t,{S:()=>i});var r=n(7294),a=n(6775),o=n(902);function i(e){const t=(0,a.TH)(),n=(0,o.D9)(t),i=(0,o.zX)(e);(0,r.useEffect)((()=>{n&&t!==n&&i({location:t,previousLocation:n})}),[i,t,n])}},6668:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){return(0,r.Z)().siteConfig.themeConfig}},8802:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){const{trailingSlash:n,baseUrl:r}=t;if(e.startsWith("#"))return e;if(void 0===n)return e;const[a]=e.split(/[#?]/),o="/"===a||a===r?a:(i=a,n?function(e){return e.endsWith("/")?e:`${e}/`}(i):function(e){return e.endsWith("/")?e.slice(0,-1):e}(i));var i;return e.replace(a,o)}},4143:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=void 0,t.getErrorCausalChain=function e(t){return t.cause?[t,...e(t.cause)]:[t]}},8780:function(e,t,n){"use strict";var r=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=t.applyTrailingSlash=t.blogPostContainerID=void 0,t.blogPostContainerID="__blog-post-container";var a=n(8802);Object.defineProperty(t,"applyTrailingSlash",{enumerable:!0,get:function(){return r(a).default}});var o=n(4143);Object.defineProperty(t,"getErrorCausalChain",{enumerable:!0,get:function(){return o.getErrorCausalChain}})},311:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(7294),a=n(6010);const o="loadingRing_RJI3";function i(e){let{className:t}=e;return r.createElement("div",{className:(0,a.Z)(o,t)},r.createElement("div",null),r.createElement("div",null),r.createElement("div",null),r.createElement("div",null))}},22:(e,t,n)=>{"use strict";n.d(t,{w:()=>l});var r=n(1336),a=n.n(r),o=n(1029);const i=new Map;function l(e,t){const n=`${e}${t}`;let r=i.get(n);return r||(r=async function(e,t){{const n=`${e}${o.J.replace("{dir}",t?`-${t.replace(/\//g,"-")}`:"")}`;if(new URL(n,location.origin).origin!==location.origin)throw new Error("Unexpected version url");const r=await(await fetch(n)).json(),i=r.map(((e,t)=>{let{documents:n,index:r}=e;return{type:t,documents:n,index:a().Index.load(r)}})),l=r.reduce(((e,t)=>{for(const n of t.index.invertedIndex)/\p{Unified_Ideograph}/u.test(n[0][0])&&e.add(n[0]);return e}),new Set);return{wrappedIndexes:i,zhDictionary:Array.from(l)}}return{wrappedIndexes:[],zhDictionary:[]}}(e,t),i.set(n,r)),r}},8202:(e,t,n)=>{"use strict";n.d(t,{v:()=>s});var r=n(1336),a=n.n(r);var o=n(1029);function i(e){return l(e).concat(l(e.filter((e=>{const t=e[e.length-1];return!t.trailing&&t.maybeTyping})),!0))}function l(e,t){return e.map((e=>({tokens:e.map((e=>e.value)),term:e.map((e=>({value:e.value,presence:a().Query.presence.REQUIRED,wildcard:(t?e.trailing||e.maybeTyping:e.trailing)?a().Query.wildcard.TRAILING:a().Query.wildcard.NONE})))})))}function s(e,t,n){return function(r,l){const s=function(e,t){if(1===t.length&&["ja","jp","th"].includes(t[0]))return a()[t[0]].tokenizer(e).map((e=>e.toString()));let n=/[^-\s]+/g;return t.includes("zh")&&(n=/\w+|\p{Unified_Ideograph}+/gu),e.toLowerCase().match(n)||[]}(r,o.dK);if(0===s.length)return void l([]);const u=function(e,t){const n=function(e,t){const n=[];return function e(r,a){if(0===r.length)return void n.push(a);const o=r[0];if(/\p{Unified_Ideograph}/u.test(o)){const n=function(e,t){const n=[];return function e(r,a){let o=0,i=!1;for(const l of t)if(r.substr(0,l.length)===l){const t={missed:a.missed,term:a.term.concat({value:l})};r.length>l.length?e(r.substr(l.length),t):n.push(t),i=!0}else for(let t=l.length-1;t>o;t-=1){const s=l.substr(0,t);if(r.substr(0,t)===s){o=t;const l={missed:a.missed,term:a.term.concat({value:s,trailing:!0})};r.length>t?e(r.substr(t),l):n.push(l),i=!0;break}}i||(r.length>0?e(r.substr(1),{missed:a.missed+1,term:a.term}):a.term.length>0&&n.push(a))}(e,{missed:0,term:[]}),n.sort(((e,t)=>{const n=e.missed>0?1:0,r=t.missed>0?1:0;return n!==r?n-r:e.term.length-t.term.length})).map((e=>e.term))}(o,t);for(const t of n){const n=a.concat(...t);e(r.slice(1),n)}}else{const t=a.concat({value:o});e(r.slice(1),t)}}(e,[]),n}(e,t);if(0===n.length)return[{tokens:e,term:e.map((e=>({value:e,presence:a().Query.presence.REQUIRED,wildcard:a().Query.wildcard.LEADING|a().Query.wildcard.TRAILING})))}];for(const a of n)a[a.length-1].maybeTyping=!0;const r=[];for(const i of o.dK)if("en"===i)o._k||r.unshift(a().stopWordFilter);else{const e=a()[i];e.stopWordFilter&&r.unshift(e.stopWordFilter)}let l;if(r.length>0){const e=e=>r.reduce(((e,t)=>e.filter((e=>t(e.value)))),e);l=[];const t=[];for(const r of n){const n=e(r);l.push(n),n.length<r.length&&n.length>0&&t.push(n)}n.push(...t)}else l=n.slice();const s=[];for(const a of l)if(a.length>2)for(let e=a.length-1;e>=0;e-=1)s.push(a.slice(0,e).concat(a.slice(e+1)));return i(n).concat(i(s))}(s,t),c=[];e:for(const{term:t,tokens:a}of u)for(const{documents:r,index:o,type:i}of e)if(c.push(...o.query((e=>{for(const n of t)e.term(n.value,{wildcard:n.wildcard,presence:n.presence})})).slice(0,n).filter((e=>!c.some((t=>t.document.i.toString()===e.ref)))).slice(0,n-c.length).map((t=>{const n=r.find((e=>e.i.toString()===t.ref));return{document:n,type:i,page:0!==i&&e[0].documents.find((e=>e.i===n.p)),metadata:t.matchData.metadata,tokens:a,score:t.score}}))),c.length>=n)break e;!function(e){e.forEach(((e,t)=>{e.index=t})),e.sort(((t,n)=>{let r=t.type>0&&t.page?e.findIndex((e=>e.document===t.page)):t.index,a=n.type>0&&n.page?e.findIndex((e=>e.document===n.page)):n.index;return-1===r&&(r=t.index),-1===a&&(a=n.index),r===a?0===t.type?-1:0===n.type?1:t.index-n.index:r-a}))}(c),function(e){e.forEach(((t,n)=>{n>0&&t.page&&e.some((e=>e.document===t.page))&&(n<e.length-1&&e[n+1].page===t.page?t.isInterOfTree=!0:t.isLastOfTree=!0)}))}(c),l(c)}}},3926:(e,t,n)=>{"use strict";function r(e){return e.join(" \u203a ")}n.d(t,{e:()=>r})},1690:(e,t,n)=>{"use strict";function r(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#039;")}n.d(t,{X:()=>r})},1073:(e,t,n)=>{"use strict";function r(e,t){const n=[];for(const r of Object.values(e))r[t]&&n.push(...r[t].position);return n.sort(((e,t)=>e[0]-t[0]||t[1]-e[1]))}n.d(t,{m:()=>r})},2539:(e,t,n)=>{"use strict";n.d(t,{C:()=>a});var r=n(1690);function a(e,t,n){const o=[];for(const i of t){const n=e.toLowerCase().indexOf(i);if(n>=0){n>0&&o.push(a(e.substr(0,n),t)),o.push(`<mark>${(0,r.X)(e.substr(n,i.length))}</mark>`);const l=n+i.length;l<e.length&&o.push(a(e.substr(l),t));break}}return 0===o.length?n?`<mark>${(0,r.X)(e)}</mark>`:(0,r.X)(e):o.join("")}},726:(e,t,n)=>{"use strict";n.d(t,{o:()=>s});var r=n(1690),a=n(2539);const o=/\w+|\p{Unified_Ideograph}/u;function i(e){const t=[];let n=0,r=e;for(;r.length>0;){const a=r.match(o);if(!a){t.push(r);break}a.index>0&&t.push(r.substring(0,a.index)),t.push(a[0]),n+=a.index+a[0].length,r=e.substring(n)}return t}var l=n(1029);function s(e,t,n,o){void 0===o&&(o=l.Hk);const{chunkIndex:s,chunks:u}=function(e,t,n){const o=[];let l=0,s=0,u=-1;for(;l<t.length;){const[c,d]=t[l];if(l+=1,!(c<s)){if(c>s){const t=i(e.substring(s,c)).map((e=>({html:(0,r.X)(e),textLength:e.length})));for(const e of t)o.push(e)}-1===u&&(u=o.length),s=c+d,o.push({html:(0,a.C)(e.substring(c,s),n,!0),textLength:d})}}if(s<e.length){const t=i(e.substring(s)).map((e=>({html:(0,r.X)(e),textLength:e.length})));for(const e of t)o.push(e)}return{chunkIndex:u,chunks:o}}(e,t,n),c=u.slice(0,s),d=u[s],f=[d.html],p=u.slice(s+1);let m=d.textLength,h=0,g=0,v=!1,y=!1;for(;m<o;)if((h<=g||0===p.length)&&c.length>0){const e=c.pop();m+e.textLength<=o?(f.unshift(e.html),h+=e.textLength,m+=e.textLength):(v=!0,c.length=0)}else{if(!(p.length>0))break;{const e=p.shift();m+e.textLength<=o?(f.push(e.html),g+=e.textLength,m+=e.textLength):(y=!0,p.length=0)}}return(v||c.length>0)&&f.unshift("\u2026"),(y||p.length>0)&&f.push("\u2026"),f.join("")}},1029:(e,t,n)=>{"use strict";n.d(t,{vc:()=>a(),gQ:()=>m,H6:()=>c,hG:()=>v,l9:()=>h,dK:()=>o,_k:()=>i,pu:()=>p,AY:()=>d,t_:()=>f,Kc:()=>g,J:()=>l,Hk:()=>u,qo:()=>s,pQ:()=>y});n(1336);var r=n(813),a=n.n(r);const o=["en"],i=!1,l="search-index{dir}.json?_=829cea69",s=8,u=50,c=!1,d=!0,f=!0,p="right",m=void 0,h=!0,g=null,v=!1,y=!1},6010:(e,t,n)=>{"use strict";function r(e){var t,n,a="";if("string"==typeof e||"number"==typeof e)a+=e;else if("object"==typeof e)if(Array.isArray(e))for(t=0;t<e.length;t++)e[t]&&(n=r(e[t]))&&(a&&(a+=" "),a+=n);else for(t in e)e[t]&&(a&&(a+=" "),a+=t);return a}n.d(t,{Z:()=>a});const a=function(){for(var e,t,n=0,a="";n<arguments.length;)(e=arguments[n++])&&(t=r(e))&&(a&&(a+=" "),a+=t);return a}},9318:(e,t,n)=>{"use strict";n.d(t,{lX:()=>w,q_:()=>C,ob:()=>p,PP:()=>L,Ep:()=>f});var r=n(3117);function a(e){return"/"===e.charAt(0)}function o(e,t){for(var n=t,r=n+1,a=e.length;r<a;n+=1,r+=1)e[n]=e[r];e.pop()}const i=function(e,t){void 0===t&&(t="");var n,r=e&&e.split("/")||[],i=t&&t.split("/")||[],l=e&&a(e),s=t&&a(t),u=l||s;if(e&&a(e)?i=r:r.length&&(i.pop(),i=i.concat(r)),!i.length)return"/";if(i.length){var c=i[i.length-1];n="."===c||".."===c||""===c}else n=!1;for(var d=0,f=i.length;f>=0;f--){var p=i[f];"."===p?o(i,f):".."===p?(o(i,f),d++):d&&(o(i,f),d--)}if(!u)for(;d--;d)i.unshift("..");!u||""===i[0]||i[0]&&a(i[0])||i.unshift("");var m=i.join("/");return n&&"/"!==m.substr(-1)&&(m+="/"),m};var l=n(2177);function s(e){return"/"===e.charAt(0)?e:"/"+e}function u(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return 0===e.toLowerCase().indexOf(t.toLowerCase())&&-1!=="/?#".indexOf(e.charAt(t.length))}(e,t)?e.substr(t.length):e}function d(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,a=t||"/";return n&&"?"!==n&&(a+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(a+="#"===r.charAt(0)?r:"#"+r),a}function p(e,t,n,a){var o;"string"==typeof e?(o=function(e){var t=e||"/",n="",r="",a=t.indexOf("#");-1!==a&&(r=t.substr(a),t=t.substr(0,a));var o=t.indexOf("?");return-1!==o&&(n=t.substr(o),t=t.substr(0,o)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),o.state=t):(void 0===(o=(0,r.Z)({},e)).pathname&&(o.pathname=""),o.search?"?"!==o.search.charAt(0)&&(o.search="?"+o.search):o.search="",o.hash?"#"!==o.hash.charAt(0)&&(o.hash="#"+o.hash):o.hash="",void 0!==t&&void 0===o.state&&(o.state=t));try{o.pathname=decodeURI(o.pathname)}catch(l){throw l instanceof URIError?new URIError('Pathname "'+o.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):l}return n&&(o.key=n),a?o.pathname?"/"!==o.pathname.charAt(0)&&(o.pathname=i(o.pathname,a.pathname)):o.pathname=a.pathname:o.pathname||(o.pathname="/"),o}function m(){var e=null;var t=[];return{setPrompt:function(t){return e=t,function(){e===t&&(e=null)}},confirmTransitionTo:function(t,n,r,a){if(null!=e){var o="function"==typeof e?e(t,n):e;"string"==typeof o?"function"==typeof r?r(o,a):a(!0):a(!1!==o)}else a(!0)},appendListener:function(e){var n=!0;function r(){n&&e.apply(void 0,arguments)}return t.push(r),function(){n=!1,t=t.filter((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];t.forEach((function(e){return e.apply(void 0,n)}))}}}var h=!("undefined"==typeof window||!window.document||!window.document.createElement);function g(e,t){t(window.confirm(e))}var v="popstate",y="hashchange";function b(){try{return window.history.state||{}}catch(e){return{}}}function w(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t,n=window.history,a=(-1===(t=window.navigator.userAgent).indexOf("Android 2.")&&-1===t.indexOf("Android 4.0")||-1===t.indexOf("Mobile Safari")||-1!==t.indexOf("Chrome")||-1!==t.indexOf("Windows Phone"))&&window.history&&"pushState"in window.history,o=!(-1===window.navigator.userAgent.indexOf("Trident")),i=e,u=i.forceRefresh,w=void 0!==u&&u,k=i.getUserConfirmation,E=void 0===k?g:k,S=i.keyLength,x=void 0===S?6:S,_=e.basename?d(s(e.basename)):"";function C(e){var t=e||{},n=t.key,r=t.state,a=window.location,o=a.pathname+a.search+a.hash;return _&&(o=c(o,_)),p(o,r,n)}function T(){return Math.random().toString(36).substr(2,x)}var L=m();function R(e){(0,r.Z)($,e),$.length=n.length,L.notifyListeners($.location,$.action)}function N(e){(function(e){return void 0===e.state&&-1===navigator.userAgent.indexOf("CriOS")})(e)||P(C(e.state))}function A(){P(C(b()))}var O=!1;function P(e){if(O)O=!1,R();else{L.confirmTransitionTo(e,"POP",E,(function(t){t?R({action:"POP",location:e}):function(e){var t=$.location,n=D.indexOf(t.key);-1===n&&(n=0);var r=D.indexOf(e.key);-1===r&&(r=0);var a=n-r;a&&(O=!0,F(a))}(e)}))}}var I=C(b()),D=[I.key];function M(e){return _+f(e)}function F(e){n.go(e)}var j=0;function B(e){1===(j+=e)&&1===e?(window.addEventListener(v,N),o&&window.addEventListener(y,A)):0===j&&(window.removeEventListener(v,N),o&&window.removeEventListener(y,A))}var z=!1;var $={length:n.length,action:"POP",location:I,createHref:M,push:function(e,t){var r="PUSH",o=p(e,t,T(),$.location);L.confirmTransitionTo(o,r,E,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.pushState({key:i,state:l},null,t),w)window.location.href=t;else{var s=D.indexOf($.location.key),u=D.slice(0,s+1);u.push(o.key),D=u,R({action:r,location:o})}else window.location.href=t}}))},replace:function(e,t){var r="REPLACE",o=p(e,t,T(),$.location);L.confirmTransitionTo(o,r,E,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.replaceState({key:i,state:l},null,t),w)window.location.replace(t);else{var s=D.indexOf($.location.key);-1!==s&&(D[s]=o.key),R({action:r,location:o})}else window.location.replace(t)}}))},go:F,goBack:function(){F(-1)},goForward:function(){F(1)},block:function(e){void 0===e&&(e=!1);var t=L.setPrompt(e);return z||(B(1),z=!0),function(){return z&&(z=!1,B(-1)),t()}},listen:function(e){var t=L.appendListener(e);return B(1),function(){B(-1),t()}}};return $}var k="hashchange",E={hashbang:{encodePath:function(e){return"!"===e.charAt(0)?e:"!/"+u(e)},decodePath:function(e){return"!"===e.charAt(0)?e.substr(1):e}},noslash:{encodePath:u,decodePath:s},slash:{encodePath:s,decodePath:s}};function S(e){var t=e.indexOf("#");return-1===t?e:e.slice(0,t)}function x(){var e=window.location.href,t=e.indexOf("#");return-1===t?"":e.substring(t+1)}function _(e){window.location.replace(S(window.location.href)+"#"+e)}function C(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t=window.history,n=(window.navigator.userAgent.indexOf("Firefox"),e),a=n.getUserConfirmation,o=void 0===a?g:a,i=n.hashType,u=void 0===i?"slash":i,v=e.basename?d(s(e.basename)):"",y=E[u],b=y.encodePath,w=y.decodePath;function C(){var e=w(x());return v&&(e=c(e,v)),p(e)}var T=m();function L(e){(0,r.Z)(z,e),z.length=t.length,T.notifyListeners(z.location,z.action)}var R=!1,N=null;function A(){var e,t,n=x(),r=b(n);if(n!==r)_(r);else{var a=C(),i=z.location;if(!R&&(t=a,(e=i).pathname===t.pathname&&e.search===t.search&&e.hash===t.hash))return;if(N===f(a))return;N=null,function(e){if(R)R=!1,L();else{var t="POP";T.confirmTransitionTo(e,t,o,(function(n){n?L({action:t,location:e}):function(e){var t=z.location,n=D.lastIndexOf(f(t));-1===n&&(n=0);var r=D.lastIndexOf(f(e));-1===r&&(r=0);var a=n-r;a&&(R=!0,M(a))}(e)}))}}(a)}}var O=x(),P=b(O);O!==P&&_(P);var I=C(),D=[f(I)];function M(e){t.go(e)}var F=0;function j(e){1===(F+=e)&&1===e?window.addEventListener(k,A):0===F&&window.removeEventListener(k,A)}var B=!1;var z={length:t.length,action:"POP",location:I,createHref:function(e){var t=document.querySelector("base"),n="";return t&&t.getAttribute("href")&&(n=S(window.location.href)),n+"#"+b(v+f(e))},push:function(e,t){var n="PUSH",r=p(e,void 0,void 0,z.location);T.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=b(v+t);if(x()!==a){N=t,function(e){window.location.hash=e}(a);var o=D.lastIndexOf(f(z.location)),i=D.slice(0,o+1);i.push(t),D=i,L({action:n,location:r})}else L()}}))},replace:function(e,t){var n="REPLACE",r=p(e,void 0,void 0,z.location);T.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=b(v+t);x()!==a&&(N=t,_(a));var o=D.indexOf(f(z.location));-1!==o&&(D[o]=t),L({action:n,location:r})}}))},go:M,goBack:function(){M(-1)},goForward:function(){M(1)},block:function(e){void 0===e&&(e=!1);var t=T.setPrompt(e);return B||(j(1),B=!0),function(){return B&&(B=!1,j(-1)),t()}},listen:function(e){var t=T.appendListener(e);return j(1),function(){j(-1),t()}}};return z}function T(e,t,n){return Math.min(Math.max(e,t),n)}function L(e){void 0===e&&(e={});var t=e,n=t.getUserConfirmation,a=t.initialEntries,o=void 0===a?["/"]:a,i=t.initialIndex,l=void 0===i?0:i,s=t.keyLength,u=void 0===s?6:s,c=m();function d(e){(0,r.Z)(w,e),w.length=w.entries.length,c.notifyListeners(w.location,w.action)}function h(){return Math.random().toString(36).substr(2,u)}var g=T(l,0,o.length-1),v=o.map((function(e){return p(e,void 0,"string"==typeof e?h():e.key||h())})),y=f;function b(e){var t=T(w.index+e,0,w.entries.length-1),r=w.entries[t];c.confirmTransitionTo(r,"POP",n,(function(e){e?d({action:"POP",location:r,index:t}):d()}))}var w={length:v.length,action:"POP",location:v[g],index:g,entries:v,createHref:y,push:function(e,t){var r="PUSH",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){if(e){var t=w.index+1,n=w.entries.slice(0);n.length>t?n.splice(t,n.length-t,a):n.push(a),d({action:r,location:a,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){e&&(w.entries[w.index]=a,d({action:r,location:a}))}))},go:b,goBack:function(){b(-1)},goForward:function(){b(1)},canGo:function(e){var t=w.index+e;return t>=0&&t<w.entries.length},block:function(e){return void 0===e&&(e=!1),c.setPrompt(e)},listen:function(e){return c.appendListener(e)}};return w}},8679:(e,t,n)=>{"use strict";var r=n(9864),a={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?i:l[e.$$typeof]||a}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var u=Object.defineProperty,c=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,m=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(m){var a=p(n);a&&a!==m&&e(t,a,r)}var i=c(n);d&&(i=i.concat(d(n)));for(var l=s(t),h=s(n),g=0;g<i.length;++g){var v=i[g];if(!(o[v]||r&&r[v]||h&&h[v]||l&&l[v])){var y=f(n,v);try{u(t,v,y)}catch(b){}}}}return t}},1143:e=>{"use strict";e.exports=function(e,t,n,r,a,o,i,l){if(!e){var s;if(void 0===t)s=new Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,a,o,i,l],c=0;(s=new Error(t.replace(/%s/g,(function(){return u[c++]})))).name="Invariant Violation"}throw s.framesToPop=1,s}}},5826:e=>{e.exports=Array.isArray||function(e){return"[object Array]"==Object.prototype.toString.call(e)}},1336:(e,t,n)=>{var r,a;!function(){var o,i,l,s,u,c,d,f,p,m,h,g,v,y,b,w,k,E,S,x,_,C,T,L,R,N,A=function(e){var t=new A.Builder;return t.pipeline.add(A.trimmer,A.stopWordFilter,A.stemmer),t.searchPipeline.add(A.stemmer),e.call(t,t),t.build()};A.version="2.3.9",A.utils={},A.utils.warn=(o=this,function(e){o.console&&console.warn&&console.warn(e)}),A.utils.asString=function(e){return null==e?"":e.toString()},A.utils.clone=function(e){if(null==e)return e;for(var t=Object.create(null),n=Object.keys(e),r=0;r<n.length;r++){var a=n[r],o=e[a];if(Array.isArray(o))t[a]=o.slice();else{if("string"!=typeof o&&"number"!=typeof o&&"boolean"!=typeof o)throw new TypeError("clone is not deep and does not support nested objects");t[a]=o}}return t},A.FieldRef=function(e,t,n){this.docRef=e,this.fieldName=t,this._stringValue=n},A.FieldRef.joiner="/",A.FieldRef.fromString=function(e){var t=e.indexOf(A.FieldRef.joiner);if(-1===t)throw"malformed field ref string";var n=e.slice(0,t),r=e.slice(t+1);return new A.FieldRef(r,n,e)},A.FieldRef.prototype.toString=function(){return null==this._stringValue&&(this._stringValue=this.fieldName+A.FieldRef.joiner+this.docRef),this._stringValue},A.Set=function(e){if(this.elements=Object.create(null),e){this.length=e.length;for(var t=0;t<this.length;t++)this.elements[e[t]]=!0}else this.length=0},A.Set.complete={intersect:function(e){return e},union:function(){return this},contains:function(){return!0}},A.Set.empty={intersect:function(){return this},union:function(e){return e},contains:function(){return!1}},A.Set.prototype.contains=function(e){return!!this.elements[e]},A.Set.prototype.intersect=function(e){var t,n,r,a=[];if(e===A.Set.complete)return this;if(e===A.Set.empty)return e;this.length<e.length?(t=this,n=e):(t=e,n=this),r=Object.keys(t.elements);for(var o=0;o<r.length;o++){var i=r[o];i in n.elements&&a.push(i)}return new A.Set(a)},A.Set.prototype.union=function(e){return e===A.Set.complete?A.Set.complete:e===A.Set.empty?this:new A.Set(Object.keys(this.elements).concat(Object.keys(e.elements)))},A.idf=function(e,t){var n=0;for(var r in e)"_index"!=r&&(n+=Object.keys(e[r]).length);var a=(t-n+.5)/(n+.5);return Math.log(1+Math.abs(a))},A.Token=function(e,t){this.str=e||"",this.metadata=t||{}},A.Token.prototype.toString=function(){return this.str},A.Token.prototype.update=function(e){return this.str=e(this.str,this.metadata),this},A.Token.prototype.clone=function(e){return e=e||function(e){return e},new A.Token(e(this.str,this.metadata),this.metadata)},A.tokenizer=function(e,t){if(null==e||null==e)return[];if(Array.isArray(e))return e.map((function(e){return new A.Token(A.utils.asString(e).toLowerCase(),A.utils.clone(t))}));for(var n=e.toString().toLowerCase(),r=n.length,a=[],o=0,i=0;o<=r;o++){var l=o-i;if(n.charAt(o).match(A.tokenizer.separator)||o==r){if(l>0){var s=A.utils.clone(t)||{};s.position=[i,l],s.index=a.length,a.push(new A.Token(n.slice(i,o),s))}i=o+1}}return a},A.tokenizer.separator=/[\s\-]+/,A.Pipeline=function(){this._stack=[]},A.Pipeline.registeredFunctions=Object.create(null),A.Pipeline.registerFunction=function(e,t){t in this.registeredFunctions&&A.utils.warn("Overwriting existing registered function: "+t),e.label=t,A.Pipeline.registeredFunctions[e.label]=e},A.Pipeline.warnIfFunctionNotRegistered=function(e){e.label&&e.label in this.registeredFunctions||A.utils.warn("Function is not registered with pipeline. This may cause problems when serialising the index.\n",e)},A.Pipeline.load=function(e){var t=new A.Pipeline;return e.forEach((function(e){var n=A.Pipeline.registeredFunctions[e];if(!n)throw new Error("Cannot load unregistered function: "+e);t.add(n)})),t},A.Pipeline.prototype.add=function(){var e=Array.prototype.slice.call(arguments);e.forEach((function(e){A.Pipeline.warnIfFunctionNotRegistered(e),this._stack.push(e)}),this)},A.Pipeline.prototype.after=function(e,t){A.Pipeline.warnIfFunctionNotRegistered(t);var n=this._stack.indexOf(e);if(-1==n)throw new Error("Cannot find existingFn");n+=1,this._stack.splice(n,0,t)},A.Pipeline.prototype.before=function(e,t){A.Pipeline.warnIfFunctionNotRegistered(t);var n=this._stack.indexOf(e);if(-1==n)throw new Error("Cannot find existingFn");this._stack.splice(n,0,t)},A.Pipeline.prototype.remove=function(e){var t=this._stack.indexOf(e);-1!=t&&this._stack.splice(t,1)},A.Pipeline.prototype.run=function(e){for(var t=this._stack.length,n=0;n<t;n++){for(var r=this._stack[n],a=[],o=0;o<e.length;o++){var i=r(e[o],o,e);if(null!=i&&""!==i)if(Array.isArray(i))for(var l=0;l<i.length;l++)a.push(i[l]);else a.push(i)}e=a}return e},A.Pipeline.prototype.runString=function(e,t){var n=new A.Token(e,t);return this.run([n]).map((function(e){return e.toString()}))},A.Pipeline.prototype.reset=function(){this._stack=[]},A.Pipeline.prototype.toJSON=function(){return this._stack.map((function(e){return A.Pipeline.warnIfFunctionNotRegistered(e),e.label}))},A.Vector=function(e){this._magnitude=0,this.elements=e||[]},A.Vector.prototype.positionForIndex=function(e){if(0==this.elements.length)return 0;for(var t=0,n=this.elements.length/2,r=n-t,a=Math.floor(r/2),o=this.elements[2*a];r>1&&(o<e&&(t=a),o>e&&(n=a),o!=e);)r=n-t,a=t+Math.floor(r/2),o=this.elements[2*a];return o==e||o>e?2*a:o<e?2*(a+1):void 0},A.Vector.prototype.insert=function(e,t){this.upsert(e,t,(function(){throw"duplicate index"}))},A.Vector.prototype.upsert=function(e,t,n){this._magnitude=0;var r=this.positionForIndex(e);this.elements[r]==e?this.elements[r+1]=n(this.elements[r+1],t):this.elements.splice(r,0,e,t)},A.Vector.prototype.magnitude=function(){if(this._magnitude)return this._magnitude;for(var e=0,t=this.elements.length,n=1;n<t;n+=2){var r=this.elements[n];e+=r*r}return this._magnitude=Math.sqrt(e)},A.Vector.prototype.dot=function(e){for(var t=0,n=this.elements,r=e.elements,a=n.length,o=r.length,i=0,l=0,s=0,u=0;s<a&&u<o;)(i=n[s])<(l=r[u])?s+=2:i>l?u+=2:i==l&&(t+=n[s+1]*r[u+1],s+=2,u+=2);return t},A.Vector.prototype.similarity=function(e){return this.dot(e)/this.magnitude()||0},A.Vector.prototype.toArray=function(){for(var e=new Array(this.elements.length/2),t=1,n=0;t<this.elements.length;t+=2,n++)e[n]=this.elements[t];return e},A.Vector.prototype.toJSON=function(){return this.elements},A.stemmer=(i={ational:"ate",tional:"tion",enci:"ence",anci:"ance",izer:"ize",bli:"ble",alli:"al",entli:"ent",eli:"e",ousli:"ous",ization:"ize",ation:"ate",ator:"ate",alism:"al",iveness:"ive",fulness:"ful",ousness:"ous",aliti:"al",iviti:"ive",biliti:"ble",logi:"log"},l={icate:"ic",ative:"",alize:"al",iciti:"ic",ical:"ic",ful:"",ness:""},s="[aeiouy]",u="[^aeiou][^aeiouy]*",c=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*"),d=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*[aeiouy][aeiou]*[^aeiou][^aeiouy]*"),f=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*([aeiouy][aeiou]*)?$"),p=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy]"),m=/^(.+?)(ss|i)es$/,h=/^(.+?)([^s])s$/,g=/^(.+?)eed$/,v=/^(.+?)(ed|ing)$/,y=/.$/,b=/(at|bl|iz)$/,w=new RegExp("([^aeiouylsz])\\1$"),k=new RegExp("^"+u+s+"[^aeiouwxy]$"),E=/^(.+?[^aeiou])y$/,S=/^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/,x=/^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/,_=/^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/,C=/^(.+?)(s|t)(ion)$/,T=/^(.+?)e$/,L=/ll$/,R=new RegExp("^"+u+s+"[^aeiouwxy]$"),N=function(e){var t,n,r,a,o,s,u;if(e.length<3)return e;if("y"==(r=e.substr(0,1))&&(e=r.toUpperCase()+e.substr(1)),o=h,(a=m).test(e)?e=e.replace(a,"$1$2"):o.test(e)&&(e=e.replace(o,"$1$2")),o=v,(a=g).test(e)){var N=a.exec(e);(a=c).test(N[1])&&(a=y,e=e.replace(a,""))}else o.test(e)&&(t=(N=o.exec(e))[1],(o=p).test(t)&&(s=w,u=k,(o=b).test(e=t)?e+="e":s.test(e)?(a=y,e=e.replace(a,"")):u.test(e)&&(e+="e")));return(a=E).test(e)&&(e=(t=(N=a.exec(e))[1])+"i"),(a=S).test(e)&&(t=(N=a.exec(e))[1],n=N[2],(a=c).test(t)&&(e=t+i[n])),(a=x).test(e)&&(t=(N=a.exec(e))[1],n=N[2],(a=c).test(t)&&(e=t+l[n])),o=C,(a=_).test(e)?(t=(N=a.exec(e))[1],(a=d).test(t)&&(e=t)):o.test(e)&&(t=(N=o.exec(e))[1]+N[2],(o=d).test(t)&&(e=t)),(a=T).test(e)&&(t=(N=a.exec(e))[1],o=f,s=R,((a=d).test(t)||o.test(t)&&!s.test(t))&&(e=t)),o=d,(a=L).test(e)&&o.test(e)&&(a=y,e=e.replace(a,"")),"y"==r&&(e=r.toLowerCase()+e.substr(1)),e},function(e){return e.update(N)}),A.Pipeline.registerFunction(A.stemmer,"stemmer"),A.generateStopWordFilter=function(e){var t=e.reduce((function(e,t){return e[t]=t,e}),{});return function(e){if(e&&t[e.toString()]!==e.toString())return e}},A.stopWordFilter=A.generateStopWordFilter(["a","able","about","across","after","all","almost","also","am","among","an","and","any","are","as","at","be","because","been","but","by","can","cannot","could","dear","did","do","does","either","else","ever","every","for","from","get","got","had","has","have","he","her","hers","him","his","how","however","i","if","in","into","is","it","its","just","least","let","like","likely","may","me","might","most","must","my","neither","no","nor","not","of","off","often","on","only","or","other","our","own","rather","said","say","says","she","should","since","so","some","than","that","the","their","them","then","there","these","they","this","tis","to","too","twas","us","wants","was","we","were","what","when","where","which","while","who","whom","why","will","with","would","yet","you","your"]),A.Pipeline.registerFunction(A.stopWordFilter,"stopWordFilter"),A.trimmer=function(e){return e.update((function(e){return e.replace(/^\W+/,"").replace(/\W+$/,"")}))},A.Pipeline.registerFunction(A.trimmer,"trimmer"),A.TokenSet=function(){this.final=!1,this.edges={},this.id=A.TokenSet._nextId,A.TokenSet._nextId+=1},A.TokenSet._nextId=1,A.TokenSet.fromArray=function(e){for(var t=new A.TokenSet.Builder,n=0,r=e.length;n<r;n++)t.insert(e[n]);return t.finish(),t.root},A.TokenSet.fromClause=function(e){return"editDistance"in e?A.TokenSet.fromFuzzyString(e.term,e.editDistance):A.TokenSet.fromString(e.term)},A.TokenSet.fromFuzzyString=function(e,t){for(var n=new A.TokenSet,r=[{node:n,editsRemaining:t,str:e}];r.length;){var a=r.pop();if(a.str.length>0){var o,i=a.str.charAt(0);i in a.node.edges?o=a.node.edges[i]:(o=new A.TokenSet,a.node.edges[i]=o),1==a.str.length&&(o.final=!0),r.push({node:o,editsRemaining:a.editsRemaining,str:a.str.slice(1)})}if(0!=a.editsRemaining){if("*"in a.node.edges)var l=a.node.edges["*"];else{l=new A.TokenSet;a.node.edges["*"]=l}if(0==a.str.length&&(l.final=!0),r.push({node:l,editsRemaining:a.editsRemaining-1,str:a.str}),a.str.length>1&&r.push({node:a.node,editsRemaining:a.editsRemaining-1,str:a.str.slice(1)}),1==a.str.length&&(a.node.final=!0),a.str.length>=1){if("*"in a.node.edges)var s=a.node.edges["*"];else{s=new A.TokenSet;a.node.edges["*"]=s}1==a.str.length&&(s.final=!0),r.push({node:s,editsRemaining:a.editsRemaining-1,str:a.str.slice(1)})}if(a.str.length>1){var u,c=a.str.charAt(0),d=a.str.charAt(1);d in a.node.edges?u=a.node.edges[d]:(u=new A.TokenSet,a.node.edges[d]=u),1==a.str.length&&(u.final=!0),r.push({node:u,editsRemaining:a.editsRemaining-1,str:c+a.str.slice(2)})}}}return n},A.TokenSet.fromString=function(e){for(var t=new A.TokenSet,n=t,r=0,a=e.length;r<a;r++){var o=e[r],i=r==a-1;if("*"==o)t.edges[o]=t,t.final=i;else{var l=new A.TokenSet;l.final=i,t.edges[o]=l,t=l}}return n},A.TokenSet.prototype.toArray=function(){for(var e=[],t=[{prefix:"",node:this}];t.length;){var n=t.pop(),r=Object.keys(n.node.edges),a=r.length;n.node.final&&(n.prefix.charAt(0),e.push(n.prefix));for(var o=0;o<a;o++){var i=r[o];t.push({prefix:n.prefix.concat(i),node:n.node.edges[i]})}}return e},A.TokenSet.prototype.toString=function(){if(this._str)return this._str;for(var e=this.final?"1":"0",t=Object.keys(this.edges).sort(),n=t.length,r=0;r<n;r++){var a=t[r];e=e+a+this.edges[a].id}return e},A.TokenSet.prototype.intersect=function(e){for(var t=new A.TokenSet,n=void 0,r=[{qNode:e,output:t,node:this}];r.length;){n=r.pop();for(var a=Object.keys(n.qNode.edges),o=a.length,i=Object.keys(n.node.edges),l=i.length,s=0;s<o;s++)for(var u=a[s],c=0;c<l;c++){var d=i[c];if(d==u||"*"==u){var f=n.node.edges[d],p=n.qNode.edges[u],m=f.final&&p.final,h=void 0;d in n.output.edges?(h=n.output.edges[d]).final=h.final||m:((h=new A.TokenSet).final=m,n.output.edges[d]=h),r.push({qNode:p,output:h,node:f})}}}return t},A.TokenSet.Builder=function(){this.previousWord="",this.root=new A.TokenSet,this.uncheckedNodes=[],this.minimizedNodes={}},A.TokenSet.Builder.prototype.insert=function(e){var t,n=0;if(e<this.previousWord)throw new Error("Out of order word insertion");for(var r=0;r<e.length&&r<this.previousWord.length&&e[r]==this.previousWord[r];r++)n++;this.minimize(n),t=0==this.uncheckedNodes.length?this.root:this.uncheckedNodes[this.uncheckedNodes.length-1].child;for(r=n;r<e.length;r++){var a=new A.TokenSet,o=e[r];t.edges[o]=a,this.uncheckedNodes.push({parent:t,char:o,child:a}),t=a}t.final=!0,this.previousWord=e},A.TokenSet.Builder.prototype.finish=function(){this.minimize(0)},A.TokenSet.Builder.prototype.minimize=function(e){for(var t=this.uncheckedNodes.length-1;t>=e;t--){var n=this.uncheckedNodes[t],r=n.child.toString();r in this.minimizedNodes?n.parent.edges[n.char]=this.minimizedNodes[r]:(n.child._str=r,this.minimizedNodes[r]=n.child),this.uncheckedNodes.pop()}},A.Index=function(e){this.invertedIndex=e.invertedIndex,this.fieldVectors=e.fieldVectors,this.tokenSet=e.tokenSet,this.fields=e.fields,this.pipeline=e.pipeline},A.Index.prototype.search=function(e){return this.query((function(t){new A.QueryParser(e,t).parse()}))},A.Index.prototype.query=function(e){for(var t=new A.Query(this.fields),n=Object.create(null),r=Object.create(null),a=Object.create(null),o=Object.create(null),i=Object.create(null),l=0;l<this.fields.length;l++)r[this.fields[l]]=new A.Vector;e.call(t,t);for(l=0;l<t.clauses.length;l++){var s=t.clauses[l],u=null,c=A.Set.empty;u=s.usePipeline?this.pipeline.runString(s.term,{fields:s.fields}):[s.term];for(var d=0;d<u.length;d++){var f=u[d];s.term=f;var p=A.TokenSet.fromClause(s),m=this.tokenSet.intersect(p).toArray();if(0===m.length&&s.presence===A.Query.presence.REQUIRED){for(var h=0;h<s.fields.length;h++){o[O=s.fields[h]]=A.Set.empty}break}for(var g=0;g<m.length;g++){var v=m[g],y=this.invertedIndex[v],b=y._index;for(h=0;h<s.fields.length;h++){var w=y[O=s.fields[h]],k=Object.keys(w),E=v+"/"+O,S=new A.Set(k);if(s.presence==A.Query.presence.REQUIRED&&(c=c.union(S),void 0===o[O]&&(o[O]=A.Set.complete)),s.presence!=A.Query.presence.PROHIBITED){if(r[O].upsert(b,s.boost,(function(e,t){return e+t})),!a[E]){for(var x=0;x<k.length;x++){var _,C=k[x],T=new A.FieldRef(C,O),L=w[C];void 0===(_=n[T])?n[T]=new A.MatchData(v,O,L):_.add(v,O,L)}a[E]=!0}}else void 0===i[O]&&(i[O]=A.Set.empty),i[O]=i[O].union(S)}}}if(s.presence===A.Query.presence.REQUIRED)for(h=0;h<s.fields.length;h++){o[O=s.fields[h]]=o[O].intersect(c)}}var R=A.Set.complete,N=A.Set.empty;for(l=0;l<this.fields.length;l++){var O;o[O=this.fields[l]]&&(R=R.intersect(o[O])),i[O]&&(N=N.union(i[O]))}var P=Object.keys(n),I=[],D=Object.create(null);if(t.isNegated()){P=Object.keys(this.fieldVectors);for(l=0;l<P.length;l++){T=P[l];var M=A.FieldRef.fromString(T);n[T]=new A.MatchData}}for(l=0;l<P.length;l++){var F=(M=A.FieldRef.fromString(P[l])).docRef;if(R.contains(F)&&!N.contains(F)){var j,B=this.fieldVectors[M],z=r[M.fieldName].similarity(B);if(void 0!==(j=D[F]))j.score+=z,j.matchData.combine(n[M]);else{var $={ref:F,score:z,matchData:n[M]};D[F]=$,I.push($)}}}return I.sort((function(e,t){return t.score-e.score}))},A.Index.prototype.toJSON=function(){var e=Object.keys(this.invertedIndex).sort().map((function(e){return[e,this.invertedIndex[e]]}),this),t=Object.keys(this.fieldVectors).map((function(e){return[e,this.fieldVectors[e].toJSON()]}),this);return{version:A.version,fields:this.fields,fieldVectors:t,invertedIndex:e,pipeline:this.pipeline.toJSON()}},A.Index.load=function(e){var t={},n={},r=e.fieldVectors,a=Object.create(null),o=e.invertedIndex,i=new A.TokenSet.Builder,l=A.Pipeline.load(e.pipeline);e.version!=A.version&&A.utils.warn("Version mismatch when loading serialised index. Current version of lunr '"+A.version+"' does not match serialized index '"+e.version+"'");for(var s=0;s<r.length;s++){var u=(d=r[s])[0],c=d[1];n[u]=new A.Vector(c)}for(s=0;s<o.length;s++){var d,f=(d=o[s])[0],p=d[1];i.insert(f),a[f]=p}return i.finish(),t.fields=e.fields,t.fieldVectors=n,t.invertedIndex=a,t.tokenSet=i.root,t.pipeline=l,new A.Index(t)},A.Builder=function(){this._ref="id",this._fields=Object.create(null),this._documents=Object.create(null),this.invertedIndex=Object.create(null),this.fieldTermFrequencies={},this.fieldLengths={},this.tokenizer=A.tokenizer,this.pipeline=new A.Pipeline,this.searchPipeline=new A.Pipeline,this.documentCount=0,this._b=.75,this._k1=1.2,this.termIndex=0,this.metadataWhitelist=[]},A.Builder.prototype.ref=function(e){this._ref=e},A.Builder.prototype.field=function(e,t){if(/\//.test(e))throw new RangeError("Field '"+e+"' contains illegal character '/'");this._fields[e]=t||{}},A.Builder.prototype.b=function(e){this._b=e<0?0:e>1?1:e},A.Builder.prototype.k1=function(e){this._k1=e},A.Builder.prototype.add=function(e,t){var n=e[this._ref],r=Object.keys(this._fields);this._documents[n]=t||{},this.documentCount+=1;for(var a=0;a<r.length;a++){var o=r[a],i=this._fields[o].extractor,l=i?i(e):e[o],s=this.tokenizer(l,{fields:[o]}),u=this.pipeline.run(s),c=new A.FieldRef(n,o),d=Object.create(null);this.fieldTermFrequencies[c]=d,this.fieldLengths[c]=0,this.fieldLengths[c]+=u.length;for(var f=0;f<u.length;f++){var p=u[f];if(null==d[p]&&(d[p]=0),d[p]+=1,null==this.invertedIndex[p]){var m=Object.create(null);m._index=this.termIndex,this.termIndex+=1;for(var h=0;h<r.length;h++)m[r[h]]=Object.create(null);this.invertedIndex[p]=m}null==this.invertedIndex[p][o][n]&&(this.invertedIndex[p][o][n]=Object.create(null));for(var g=0;g<this.metadataWhitelist.length;g++){var v=this.metadataWhitelist[g],y=p.metadata[v];null==this.invertedIndex[p][o][n][v]&&(this.invertedIndex[p][o][n][v]=[]),this.invertedIndex[p][o][n][v].push(y)}}}},A.Builder.prototype.calculateAverageFieldLengths=function(){for(var e=Object.keys(this.fieldLengths),t=e.length,n={},r={},a=0;a<t;a++){var o=A.FieldRef.fromString(e[a]),i=o.fieldName;r[i]||(r[i]=0),r[i]+=1,n[i]||(n[i]=0),n[i]+=this.fieldLengths[o]}var l=Object.keys(this._fields);for(a=0;a<l.length;a++){var s=l[a];n[s]=n[s]/r[s]}this.averageFieldLength=n},A.Builder.prototype.createFieldVectors=function(){for(var e={},t=Object.keys(this.fieldTermFrequencies),n=t.length,r=Object.create(null),a=0;a<n;a++){for(var o=A.FieldRef.fromString(t[a]),i=o.fieldName,l=this.fieldLengths[o],s=new A.Vector,u=this.fieldTermFrequencies[o],c=Object.keys(u),d=c.length,f=this._fields[i].boost||1,p=this._documents[o.docRef].boost||1,m=0;m<d;m++){var h,g,v,y=c[m],b=u[y],w=this.invertedIndex[y]._index;void 0===r[y]?(h=A.idf(this.invertedIndex[y],this.documentCount),r[y]=h):h=r[y],g=h*((this._k1+1)*b)/(this._k1*(1-this._b+this._b*(l/this.averageFieldLength[i]))+b),g*=f,g*=p,v=Math.round(1e3*g)/1e3,s.insert(w,v)}e[o]=s}this.fieldVectors=e},A.Builder.prototype.createTokenSet=function(){this.tokenSet=A.TokenSet.fromArray(Object.keys(this.invertedIndex).sort())},A.Builder.prototype.build=function(){return this.calculateAverageFieldLengths(),this.createFieldVectors(),this.createTokenSet(),new A.Index({invertedIndex:this.invertedIndex,fieldVectors:this.fieldVectors,tokenSet:this.tokenSet,fields:Object.keys(this._fields),pipeline:this.searchPipeline})},A.Builder.prototype.use=function(e){var t=Array.prototype.slice.call(arguments,1);t.unshift(this),e.apply(this,t)},A.MatchData=function(e,t,n){for(var r=Object.create(null),a=Object.keys(n||{}),o=0;o<a.length;o++){var i=a[o];r[i]=n[i].slice()}this.metadata=Object.create(null),void 0!==e&&(this.metadata[e]=Object.create(null),this.metadata[e][t]=r)},A.MatchData.prototype.combine=function(e){for(var t=Object.keys(e.metadata),n=0;n<t.length;n++){var r=t[n],a=Object.keys(e.metadata[r]);null==this.metadata[r]&&(this.metadata[r]=Object.create(null));for(var o=0;o<a.length;o++){var i=a[o],l=Object.keys(e.metadata[r][i]);null==this.metadata[r][i]&&(this.metadata[r][i]=Object.create(null));for(var s=0;s<l.length;s++){var u=l[s];null==this.metadata[r][i][u]?this.metadata[r][i][u]=e.metadata[r][i][u]:this.metadata[r][i][u]=this.metadata[r][i][u].concat(e.metadata[r][i][u])}}}},A.MatchData.prototype.add=function(e,t,n){if(!(e in this.metadata))return this.metadata[e]=Object.create(null),void(this.metadata[e][t]=n);if(t in this.metadata[e])for(var r=Object.keys(n),a=0;a<r.length;a++){var o=r[a];o in this.metadata[e][t]?this.metadata[e][t][o]=this.metadata[e][t][o].concat(n[o]):this.metadata[e][t][o]=n[o]}else this.metadata[e][t]=n},A.Query=function(e){this.clauses=[],this.allFields=e},A.Query.wildcard=new String("*"),A.Query.wildcard.NONE=0,A.Query.wildcard.LEADING=1,A.Query.wildcard.TRAILING=2,A.Query.presence={OPTIONAL:1,REQUIRED:2,PROHIBITED:3},A.Query.prototype.clause=function(e){return"fields"in e||(e.fields=this.allFields),"boost"in e||(e.boost=1),"usePipeline"in e||(e.usePipeline=!0),"wildcard"in e||(e.wildcard=A.Query.wildcard.NONE),e.wildcard&A.Query.wildcard.LEADING&&e.term.charAt(0)!=A.Query.wildcard&&(e.term="*"+e.term),e.wildcard&A.Query.wildcard.TRAILING&&e.term.slice(-1)!=A.Query.wildcard&&(e.term=e.term+"*"),"presence"in e||(e.presence=A.Query.presence.OPTIONAL),this.clauses.push(e),this},A.Query.prototype.isNegated=function(){for(var e=0;e<this.clauses.length;e++)if(this.clauses[e].presence!=A.Query.presence.PROHIBITED)return!1;return!0},A.Query.prototype.term=function(e,t){if(Array.isArray(e))return e.forEach((function(e){this.term(e,A.utils.clone(t))}),this),this;var n=t||{};return n.term=e.toString(),this.clause(n),this},A.QueryParseError=function(e,t,n){this.name="QueryParseError",this.message=e,this.start=t,this.end=n},A.QueryParseError.prototype=new Error,A.QueryLexer=function(e){this.lexemes=[],this.str=e,this.length=e.length,this.pos=0,this.start=0,this.escapeCharPositions=[]},A.QueryLexer.prototype.run=function(){for(var e=A.QueryLexer.lexText;e;)e=e(this)},A.QueryLexer.prototype.sliceString=function(){for(var e=[],t=this.start,n=this.pos,r=0;r<this.escapeCharPositions.length;r++)n=this.escapeCharPositions[r],e.push(this.str.slice(t,n)),t=n+1;return e.push(this.str.slice(t,this.pos)),this.escapeCharPositions.length=0,e.join("")},A.QueryLexer.prototype.emit=function(e){this.lexemes.push({type:e,str:this.sliceString(),start:this.start,end:this.pos}),this.start=this.pos},A.QueryLexer.prototype.escapeCharacter=function(){this.escapeCharPositions.push(this.pos-1),this.pos+=1},A.QueryLexer.prototype.next=function(){if(this.pos>=this.length)return A.QueryLexer.EOS;var e=this.str.charAt(this.pos);return this.pos+=1,e},A.QueryLexer.prototype.width=function(){return this.pos-this.start},A.QueryLexer.prototype.ignore=function(){this.start==this.pos&&(this.pos+=1),this.start=this.pos},A.QueryLexer.prototype.backup=function(){this.pos-=1},A.QueryLexer.prototype.acceptDigitRun=function(){var e,t;do{t=(e=this.next()).charCodeAt(0)}while(t>47&&t<58);e!=A.QueryLexer.EOS&&this.backup()},A.QueryLexer.prototype.more=function(){return this.pos<this.length},A.QueryLexer.EOS="EOS",A.QueryLexer.FIELD="FIELD",A.QueryLexer.TERM="TERM",A.QueryLexer.EDIT_DISTANCE="EDIT_DISTANCE",A.QueryLexer.BOOST="BOOST",A.QueryLexer.PRESENCE="PRESENCE",A.QueryLexer.lexField=function(e){return e.backup(),e.emit(A.QueryLexer.FIELD),e.ignore(),A.QueryLexer.lexText},A.QueryLexer.lexTerm=function(e){if(e.width()>1&&(e.backup(),e.emit(A.QueryLexer.TERM)),e.ignore(),e.more())return A.QueryLexer.lexText},A.QueryLexer.lexEditDistance=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(A.QueryLexer.EDIT_DISTANCE),A.QueryLexer.lexText},A.QueryLexer.lexBoost=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(A.QueryLexer.BOOST),A.QueryLexer.lexText},A.QueryLexer.lexEOS=function(e){e.width()>0&&e.emit(A.QueryLexer.TERM)},A.QueryLexer.termSeparator=A.tokenizer.separator,A.QueryLexer.lexText=function(e){for(;;){var t=e.next();if(t==A.QueryLexer.EOS)return A.QueryLexer.lexEOS;if(92!=t.charCodeAt(0)){if(":"==t)return A.QueryLexer.lexField;if("~"==t)return e.backup(),e.width()>0&&e.emit(A.QueryLexer.TERM),A.QueryLexer.lexEditDistance;if("^"==t)return e.backup(),e.width()>0&&e.emit(A.QueryLexer.TERM),A.QueryLexer.lexBoost;if("+"==t&&1===e.width())return e.emit(A.QueryLexer.PRESENCE),A.QueryLexer.lexText;if("-"==t&&1===e.width())return e.emit(A.QueryLexer.PRESENCE),A.QueryLexer.lexText;if(t.match(A.QueryLexer.termSeparator))return A.QueryLexer.lexTerm}else e.escapeCharacter()}},A.QueryParser=function(e,t){this.lexer=new A.QueryLexer(e),this.query=t,this.currentClause={},this.lexemeIdx=0},A.QueryParser.prototype.parse=function(){this.lexer.run(),this.lexemes=this.lexer.lexemes;for(var e=A.QueryParser.parseClause;e;)e=e(this);return this.query},A.QueryParser.prototype.peekLexeme=function(){return this.lexemes[this.lexemeIdx]},A.QueryParser.prototype.consumeLexeme=function(){var e=this.peekLexeme();return this.lexemeIdx+=1,e},A.QueryParser.prototype.nextClause=function(){var e=this.currentClause;this.query.clause(e),this.currentClause={}},A.QueryParser.parseClause=function(e){var t=e.peekLexeme();if(null!=t)switch(t.type){case A.QueryLexer.PRESENCE:return A.QueryParser.parsePresence;case A.QueryLexer.FIELD:return A.QueryParser.parseField;case A.QueryLexer.TERM:return A.QueryParser.parseTerm;default:var n="expected either a field or a term, found "+t.type;throw t.str.length>=1&&(n+=" with value '"+t.str+"'"),new A.QueryParseError(n,t.start,t.end)}},A.QueryParser.parsePresence=function(e){var t=e.consumeLexeme();if(null!=t){switch(t.str){case"-":e.currentClause.presence=A.Query.presence.PROHIBITED;break;case"+":e.currentClause.presence=A.Query.presence.REQUIRED;break;default:var n="unrecognised presence operator'"+t.str+"'";throw new A.QueryParseError(n,t.start,t.end)}var r=e.peekLexeme();if(null==r){n="expecting term or field, found nothing";throw new A.QueryParseError(n,t.start,t.end)}switch(r.type){case A.QueryLexer.FIELD:return A.QueryParser.parseField;case A.QueryLexer.TERM:return A.QueryParser.parseTerm;default:n="expecting term or field, found '"+r.type+"'";throw new A.QueryParseError(n,r.start,r.end)}}},A.QueryParser.parseField=function(e){var t=e.consumeLexeme();if(null!=t){if(-1==e.query.allFields.indexOf(t.str)){var n=e.query.allFields.map((function(e){return"'"+e+"'"})).join(", "),r="unrecognised field '"+t.str+"', possible fields: "+n;throw new A.QueryParseError(r,t.start,t.end)}e.currentClause.fields=[t.str];var a=e.peekLexeme();if(null==a){r="expecting term, found nothing";throw new A.QueryParseError(r,t.start,t.end)}if(a.type===A.QueryLexer.TERM)return A.QueryParser.parseTerm;r="expecting term, found '"+a.type+"'";throw new A.QueryParseError(r,a.start,a.end)}},A.QueryParser.parseTerm=function(e){var t=e.consumeLexeme();if(null!=t){e.currentClause.term=t.str.toLowerCase(),-1!=t.str.indexOf("*")&&(e.currentClause.usePipeline=!1);var n=e.peekLexeme();if(null!=n)switch(n.type){case A.QueryLexer.TERM:return e.nextClause(),A.QueryParser.parseTerm;case A.QueryLexer.FIELD:return e.nextClause(),A.QueryParser.parseField;case A.QueryLexer.EDIT_DISTANCE:return A.QueryParser.parseEditDistance;case A.QueryLexer.BOOST:return A.QueryParser.parseBoost;case A.QueryLexer.PRESENCE:return e.nextClause(),A.QueryParser.parsePresence;default:var r="Unexpected lexeme type '"+n.type+"'";throw new A.QueryParseError(r,n.start,n.end)}else e.nextClause()}},A.QueryParser.parseEditDistance=function(e){var t=e.consumeLexeme();if(null!=t){var n=parseInt(t.str,10);if(isNaN(n)){var r="edit distance must be numeric";throw new A.QueryParseError(r,t.start,t.end)}e.currentClause.editDistance=n;var a=e.peekLexeme();if(null!=a)switch(a.type){case A.QueryLexer.TERM:return e.nextClause(),A.QueryParser.parseTerm;case A.QueryLexer.FIELD:return e.nextClause(),A.QueryParser.parseField;case A.QueryLexer.EDIT_DISTANCE:return A.QueryParser.parseEditDistance;case A.QueryLexer.BOOST:return A.QueryParser.parseBoost;case A.QueryLexer.PRESENCE:return e.nextClause(),A.QueryParser.parsePresence;default:r="Unexpected lexeme type '"+a.type+"'";throw new A.QueryParseError(r,a.start,a.end)}else e.nextClause()}},A.QueryParser.parseBoost=function(e){var t=e.consumeLexeme();if(null!=t){var n=parseInt(t.str,10);if(isNaN(n)){var r="boost must be numeric";throw new A.QueryParseError(r,t.start,t.end)}e.currentClause.boost=n;var a=e.peekLexeme();if(null!=a)switch(a.type){case A.QueryLexer.TERM:return e.nextClause(),A.QueryParser.parseTerm;case A.QueryLexer.FIELD:return e.nextClause(),A.QueryParser.parseField;case A.QueryLexer.EDIT_DISTANCE:return A.QueryParser.parseEditDistance;case A.QueryLexer.BOOST:return A.QueryParser.parseBoost;case A.QueryLexer.PRESENCE:return e.nextClause(),A.QueryParser.parsePresence;default:r="Unexpected lexeme type '"+a.type+"'";throw new A.QueryParseError(r,a.start,a.end)}else e.nextClause()}},void 0===(a="function"==typeof(r=function(){return A})?r.call(t,n,t,e):r)||(e.exports=a)}()},813:function(e){e.exports=function(){"use strict";var e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},t=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")},n=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable||!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}return function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),r=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a=function(){function e(n){var r=!(arguments.length>1&&void 0!==arguments[1])||arguments[1],a=arguments.length>2&&void 0!==arguments[2]?arguments[2]:[],o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:5e3;t(this,e),this.ctx=n,this.iframes=r,this.exclude=a,this.iframesTimeout=o}return n(e,[{key:"getContexts",value:function(){var e=[];return(void 0!==this.ctx&&this.ctx?NodeList.prototype.isPrototypeOf(this.ctx)?Array.prototype.slice.call(this.ctx):Array.isArray(this.ctx)?this.ctx:"string"==typeof this.ctx?Array.prototype.slice.call(document.querySelectorAll(this.ctx)):[this.ctx]:[]).forEach((function(t){var n=e.filter((function(e){return e.contains(t)})).length>0;-1!==e.indexOf(t)||n||e.push(t)})),e}},{key:"getIframeContents",value:function(e,t){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:function(){},r=void 0;try{var a=e.contentWindow;if(r=a.document,!a||!r)throw new Error("iframe inaccessible")}catch(o){n()}r&&t(r)}},{key:"isIframeBlank",value:function(e){var t="about:blank",n=e.getAttribute("src").trim();return e.contentWindow.location.href===t&&n!==t&&n}},{key:"observeIframeLoad",value:function(e,t,n){var r=this,a=!1,o=null,i=function i(){if(!a){a=!0,clearTimeout(o);try{r.isIframeBlank(e)||(e.removeEventListener("load",i),r.getIframeContents(e,t,n))}catch(l){n()}}};e.addEventListener("load",i),o=setTimeout(i,this.iframesTimeout)}},{key:"onIframeReady",value:function(e,t,n){try{"complete"===e.contentWindow.document.readyState?this.isIframeBlank(e)?this.observeIframeLoad(e,t,n):this.getIframeContents(e,t,n):this.observeIframeLoad(e,t,n)}catch(r){n()}}},{key:"waitForIframes",value:function(e,t){var n=this,r=0;this.forEachIframe(e,(function(){return!0}),(function(e){r++,n.waitForIframes(e.querySelector("html"),(function(){--r||t()}))}),(function(e){e||t()}))}},{key:"forEachIframe",value:function(t,n,r){var a=this,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},i=t.querySelectorAll("iframe"),l=i.length,s=0;i=Array.prototype.slice.call(i);var u=function(){--l<=0&&o(s)};l||u(),i.forEach((function(t){e.matches(t,a.exclude)?u():a.onIframeReady(t,(function(e){n(t)&&(s++,r(e)),u()}),u)}))}},{key:"createIterator",value:function(e,t,n){return document.createNodeIterator(e,t,n,!1)}},{key:"createInstanceOnIframe",value:function(t){return new e(t.querySelector("html"),this.iframes)}},{key:"compareNodeIframe",value:function(e,t,n){if(e.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_PRECEDING){if(null===t)return!0;if(t.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_FOLLOWING)return!0}return!1}},{key:"getIteratorNode",value:function(e){var t=e.previousNode();return{prevNode:t,node:(null===t||e.nextNode())&&e.nextNode()}}},{key:"checkIframeFilter",value:function(e,t,n,r){var a=!1,o=!1;return r.forEach((function(e,t){e.val===n&&(a=t,o=e.handled)})),this.compareNodeIframe(e,t,n)?(!1!==a||o?!1===a||o||(r[a].handled=!0):r.push({val:n,handled:!0}),!0):(!1===a&&r.push({val:n,handled:!1}),!1)}},{key:"handleOpenIframes",value:function(e,t,n,r){var a=this;e.forEach((function(e){e.handled||a.getIframeContents(e.val,(function(e){a.createInstanceOnIframe(e).forEachNode(t,n,r)}))}))}},{key:"iterateThroughNodes",value:function(e,t,n,r,a){for(var o=this,i=this.createIterator(t,e,r),l=[],s=[],u=void 0,c=void 0,d=function(){var e=o.getIteratorNode(i);return c=e.prevNode,u=e.node};d();)this.iframes&&this.forEachIframe(t,(function(e){return o.checkIframeFilter(u,c,e,l)}),(function(t){o.createInstanceOnIframe(t).forEachNode(e,(function(e){return s.push(e)}),r)})),s.push(u);s.forEach((function(e){n(e)})),this.iframes&&this.handleOpenIframes(l,e,n,r),a()}},{key:"forEachNode",value:function(e,t,n){var r=this,a=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},o=this.getContexts(),i=o.length;i||a(),o.forEach((function(o){var l=function(){r.iterateThroughNodes(e,o,t,n,(function(){--i<=0&&a()}))};r.iframes?r.waitForIframes(o,l):l()}))}}],[{key:"matches",value:function(e,t){var n="string"==typeof t?[t]:t,r=e.matches||e.matchesSelector||e.msMatchesSelector||e.mozMatchesSelector||e.oMatchesSelector||e.webkitMatchesSelector;if(r){var a=!1;return n.every((function(t){return!r.call(e,t)||(a=!0,!1)})),a}return!1}}]),e}(),o=function(){function o(e){t(this,o),this.ctx=e,this.ie=!1;var n=window.navigator.userAgent;(n.indexOf("MSIE")>-1||n.indexOf("Trident")>-1)&&(this.ie=!0)}return n(o,[{key:"log",value:function(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"debug",r=this.opt.log;this.opt.debug&&"object"===(void 0===r?"undefined":e(r))&&"function"==typeof r[n]&&r[n]("mark.js: "+t)}},{key:"escapeStr",value:function(e){return e.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")}},{key:"createRegExp",value:function(e){return"disabled"!==this.opt.wildcards&&(e=this.setupWildcardsRegExp(e)),e=this.escapeStr(e),Object.keys(this.opt.synonyms).length&&(e=this.createSynonymsRegExp(e)),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),this.opt.diacritics&&(e=this.createDiacriticsRegExp(e)),e=this.createMergedBlanksRegExp(e),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.createJoinersRegExp(e)),"disabled"!==this.opt.wildcards&&(e=this.createWildcardsRegExp(e)),e=this.createAccuracyRegExp(e)}},{key:"createSynonymsRegExp",value:function(e){var t=this.opt.synonyms,n=this.opt.caseSensitive?"":"i",r=this.opt.ignoreJoiners||this.opt.ignorePunctuation.length?"\0":"";for(var a in t)if(t.hasOwnProperty(a)){var o=t[a],i="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(a):this.escapeStr(a),l="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(o):this.escapeStr(o);""!==i&&""!==l&&(e=e.replace(new RegExp("("+this.escapeStr(i)+"|"+this.escapeStr(l)+")","gm"+n),r+"("+this.processSynomyms(i)+"|"+this.processSynomyms(l)+")"+r))}return e}},{key:"processSynomyms",value:function(e){return(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),e}},{key:"setupWildcardsRegExp",value:function(e){return(e=e.replace(/(?:\\)*\?/g,(function(e){return"\\"===e.charAt(0)?"?":"\x01"}))).replace(/(?:\\)*\*/g,(function(e){return"\\"===e.charAt(0)?"*":"\x02"}))}},{key:"createWildcardsRegExp",value:function(e){var t="withSpaces"===this.opt.wildcards;return e.replace(/\u0001/g,t?"[\\S\\s]?":"\\S?").replace(/\u0002/g,t?"[\\S\\s]*?":"\\S*")}},{key:"setupIgnoreJoinersRegExp",value:function(e){return e.replace(/[^(|)\\]/g,(function(e,t,n){var r=n.charAt(t+1);return/[(|)\\]/.test(r)||""===r?e:e+"\0"}))}},{key:"createJoinersRegExp",value:function(e){var t=[],n=this.opt.ignorePunctuation;return Array.isArray(n)&&n.length&&t.push(this.escapeStr(n.join(""))),this.opt.ignoreJoiners&&t.push("\\u00ad\\u200b\\u200c\\u200d"),t.length?e.split(/\u0000+/).join("["+t.join("")+"]*"):e}},{key:"createDiacriticsRegExp",value:function(e){var t=this.opt.caseSensitive?"":"i",n=this.opt.caseSensitive?["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105","A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010d","C\xc7\u0106\u010c","d\u0111\u010f","D\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119","E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012b","I\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142","L\u0141","n\xf1\u0148\u0144","N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014d","O\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159","R\u0158","s\u0161\u015b\u0219\u015f","S\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163","T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016b","U\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xff","Y\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017a","Z\u017d\u017b\u0179"]:["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010dC\xc7\u0106\u010c","d\u0111\u010fD\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012bI\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142L\u0141","n\xf1\u0148\u0144N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014dO\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159R\u0158","s\u0161\u015b\u0219\u015fS\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016bU\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xffY\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017aZ\u017d\u017b\u0179"],r=[];return e.split("").forEach((function(a){n.every((function(n){if(-1!==n.indexOf(a)){if(r.indexOf(n)>-1)return!1;e=e.replace(new RegExp("["+n+"]","gm"+t),"["+n+"]"),r.push(n)}return!0}))})),e}},{key:"createMergedBlanksRegExp",value:function(e){return e.replace(/[\s]+/gim,"[\\s]+")}},{key:"createAccuracyRegExp",value:function(e){var t=this,n="!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~\xa1\xbf",r=this.opt.accuracy,a="string"==typeof r?r:r.value,o="string"==typeof r?[]:r.limiters,i="";switch(o.forEach((function(e){i+="|"+t.escapeStr(e)})),a){case"partially":default:return"()("+e+")";case"complementary":return"()([^"+(i="\\s"+(i||this.escapeStr(n)))+"]*"+e+"[^"+i+"]*)";case"exactly":return"(^|\\s"+i+")("+e+")(?=$|\\s"+i+")"}}},{key:"getSeparatedKeywords",value:function(e){var t=this,n=[];return e.forEach((function(e){t.opt.separateWordSearch?e.split(" ").forEach((function(e){e.trim()&&-1===n.indexOf(e)&&n.push(e)})):e.trim()&&-1===n.indexOf(e)&&n.push(e)})),{keywords:n.sort((function(e,t){return t.length-e.length})),length:n.length}}},{key:"isNumeric",value:function(e){return Number(parseFloat(e))==e}},{key:"checkRanges",value:function(e){var t=this;if(!Array.isArray(e)||"[object Object]"!==Object.prototype.toString.call(e[0]))return this.log("markRanges() will only accept an array of objects"),this.opt.noMatch(e),[];var n=[],r=0;return e.sort((function(e,t){return e.start-t.start})).forEach((function(e){var a=t.callNoMatchOnInvalidRanges(e,r),o=a.start,i=a.end;a.valid&&(e.start=o,e.length=i-o,n.push(e),r=i)})),n}},{key:"callNoMatchOnInvalidRanges",value:function(e,t){var n=void 0,r=void 0,a=!1;return e&&void 0!==e.start?(r=(n=parseInt(e.start,10))+parseInt(e.length,10),this.isNumeric(e.start)&&this.isNumeric(e.length)&&r-t>0&&r-n>0?a=!0:(this.log("Ignoring invalid or overlapping range: "+JSON.stringify(e)),this.opt.noMatch(e))):(this.log("Ignoring invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:n,end:r,valid:a}}},{key:"checkWhitespaceRanges",value:function(e,t,n){var r=void 0,a=!0,o=n.length,i=t-o,l=parseInt(e.start,10)-i;return(r=(l=l>o?o:l)+parseInt(e.length,10))>o&&(r=o,this.log("End range automatically set to the max value of "+o)),l<0||r-l<0||l>o||r>o?(a=!1,this.log("Invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)):""===n.substring(l,r).replace(/\s+/g,"")&&(a=!1,this.log("Skipping whitespace only range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:l,end:r,valid:a}}},{key:"getTextNodes",value:function(e){var t=this,n="",r=[];this.iterator.forEachNode(NodeFilter.SHOW_TEXT,(function(e){r.push({start:n.length,end:(n+=e.textContent).length,node:e})}),(function(e){return t.matchesExclude(e.parentNode)?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}),(function(){e({value:n,nodes:r})}))}},{key:"matchesExclude",value:function(e){return a.matches(e,this.opt.exclude.concat(["script","style","title","head","html"]))}},{key:"wrapRangeInTextNode",value:function(e,t,n){var r=this.opt.element?this.opt.element:"mark",a=e.splitText(t),o=a.splitText(n-t),i=document.createElement(r);return i.setAttribute("data-markjs","true"),this.opt.className&&i.setAttribute("class",this.opt.className),i.textContent=a.textContent,a.parentNode.replaceChild(i,a),o}},{key:"wrapRangeInMappedTextNode",value:function(e,t,n,r,a){var o=this;e.nodes.every((function(i,l){var s=e.nodes[l+1];if(void 0===s||s.start>t){if(!r(i.node))return!1;var u=t-i.start,c=(n>i.end?i.end:n)-i.start,d=e.value.substr(0,i.start),f=e.value.substr(c+i.start);if(i.node=o.wrapRangeInTextNode(i.node,u,c),e.value=d+f,e.nodes.forEach((function(t,n){n>=l&&(e.nodes[n].start>0&&n!==l&&(e.nodes[n].start-=c),e.nodes[n].end-=c)})),n-=c,a(i.node.previousSibling,i.start),!(n>i.end))return!1;t=i.end}return!0}))}},{key:"wrapMatches",value:function(e,t,n,r,a){var o=this,i=0===t?0:t+1;this.getTextNodes((function(t){t.nodes.forEach((function(t){t=t.node;for(var a=void 0;null!==(a=e.exec(t.textContent))&&""!==a[i];)if(n(a[i],t)){var l=a.index;if(0!==i)for(var s=1;s<i;s++)l+=a[s].length;t=o.wrapRangeInTextNode(t,l,l+a[i].length),r(t.previousSibling),e.lastIndex=0}})),a()}))}},{key:"wrapMatchesAcrossElements",value:function(e,t,n,r,a){var o=this,i=0===t?0:t+1;this.getTextNodes((function(t){for(var l=void 0;null!==(l=e.exec(t.value))&&""!==l[i];){var s=l.index;if(0!==i)for(var u=1;u<i;u++)s+=l[u].length;var c=s+l[i].length;o.wrapRangeInMappedTextNode(t,s,c,(function(e){return n(l[i],e)}),(function(t,n){e.lastIndex=n,r(t)}))}a()}))}},{key:"wrapRangeFromIndex",value:function(e,t,n,r){var a=this;this.getTextNodes((function(o){var i=o.value.length;e.forEach((function(e,r){var l=a.checkWhitespaceRanges(e,i,o.value),s=l.start,u=l.end;l.valid&&a.wrapRangeInMappedTextNode(o,s,u,(function(n){return t(n,e,o.value.substring(s,u),r)}),(function(t){n(t,e)}))})),r()}))}},{key:"unwrapMatches",value:function(e){for(var t=e.parentNode,n=document.createDocumentFragment();e.firstChild;)n.appendChild(e.removeChild(e.firstChild));t.replaceChild(n,e),this.ie?this.normalizeTextNode(t):t.normalize()}},{key:"normalizeTextNode",value:function(e){if(e){if(3===e.nodeType)for(;e.nextSibling&&3===e.nextSibling.nodeType;)e.nodeValue+=e.nextSibling.nodeValue,e.parentNode.removeChild(e.nextSibling);else this.normalizeTextNode(e.firstChild);this.normalizeTextNode(e.nextSibling)}}},{key:"markRegExp",value:function(e,t){var n=this;this.opt=t,this.log('Searching with expression "'+e+'"');var r=0,a="wrapMatches",o=function(e){r++,n.opt.each(e)};this.opt.acrossElements&&(a="wrapMatchesAcrossElements"),this[a](e,this.opt.ignoreGroups,(function(e,t){return n.opt.filter(t,e,r)}),o,(function(){0===r&&n.opt.noMatch(e),n.opt.done(r)}))}},{key:"mark",value:function(e,t){var n=this;this.opt=t;var r=0,a="wrapMatches",o=this.getSeparatedKeywords("string"==typeof e?[e]:e),i=o.keywords,l=o.length,s=this.opt.caseSensitive?"":"i",u=function e(t){var o=new RegExp(n.createRegExp(t),"gm"+s),u=0;n.log('Searching with expression "'+o+'"'),n[a](o,1,(function(e,a){return n.opt.filter(a,t,r,u)}),(function(e){u++,r++,n.opt.each(e)}),(function(){0===u&&n.opt.noMatch(t),i[l-1]===t?n.opt.done(r):e(i[i.indexOf(t)+1])}))};this.opt.acrossElements&&(a="wrapMatchesAcrossElements"),0===l?this.opt.done(r):u(i[0])}},{key:"markRanges",value:function(e,t){var n=this;this.opt=t;var r=0,a=this.checkRanges(e);a&&a.length?(this.log("Starting to mark with the following ranges: "+JSON.stringify(a)),this.wrapRangeFromIndex(a,(function(e,t,r,a){return n.opt.filter(e,t,r,a)}),(function(e,t){r++,n.opt.each(e,t)}),(function(){n.opt.done(r)}))):this.opt.done(r)}},{key:"unmark",value:function(e){var t=this;this.opt=e;var n=this.opt.element?this.opt.element:"*";n+="[data-markjs]",this.opt.className&&(n+="."+this.opt.className),this.log('Removal selector "'+n+'"'),this.iterator.forEachNode(NodeFilter.SHOW_ELEMENT,(function(e){t.unwrapMatches(e)}),(function(e){var r=a.matches(e,n),o=t.matchesExclude(e);return!r||o?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}),this.opt.done)}},{key:"opt",set:function(e){this._opt=r({},{element:"",className:"",exclude:[],iframes:!1,iframesTimeout:5e3,separateWordSearch:!0,diacritics:!0,synonyms:{},accuracy:"partially",acrossElements:!1,caseSensitive:!1,ignoreJoiners:!1,ignoreGroups:0,ignorePunctuation:[],wildcards:"disabled",each:function(){},noMatch:function(){},filter:function(){return!0},done:function(){},debug:!1,log:window.console},e)},get:function(){return this._opt}},{key:"iterator",get:function(){return new a(this.ctx,this.opt.iframes,this.opt.exclude,this.opt.iframesTimeout)}}]),o}();function i(e){var t=this,n=new o(e);return this.mark=function(e,r){return n.mark(e,r),t},this.markRegExp=function(e,r){return n.markRegExp(e,r),t},this.markRanges=function(e,r){return n.markRanges(e,r),t},this.unmark=function(e){return n.unmark(e),t},this}return i}()},2497:(e,t,n)=>{"use strict";n.r(t)},2295:(e,t,n)=>{"use strict";n.r(t)},4865:function(e,t,n){var r,a;r=function(){var e,t,n={version:"0.2.0"},r=n.settings={minimum:.08,easing:"ease",positionUsing:"",speed:200,trickle:!0,trickleRate:.02,trickleSpeed:800,showSpinner:!0,barSelector:'[role="bar"]',spinnerSelector:'[role="spinner"]',parent:"body",template:'<div class="bar" role="bar"><div class="peg"></div></div><div class="spinner" role="spinner"><div class="spinner-icon"></div></div>'};function a(e,t,n){return e<t?t:e>n?n:e}function o(e){return 100*(-1+e)}function i(e,t,n){var a;return(a="translate3d"===r.positionUsing?{transform:"translate3d("+o(e)+"%,0,0)"}:"translate"===r.positionUsing?{transform:"translate("+o(e)+"%,0)"}:{"margin-left":o(e)+"%"}).transition="all "+t+"ms "+n,a}n.configure=function(e){var t,n;for(t in e)void 0!==(n=e[t])&&e.hasOwnProperty(t)&&(r[t]=n);return this},n.status=null,n.set=function(e){var t=n.isStarted();e=a(e,r.minimum,1),n.status=1===e?null:e;var o=n.render(!t),u=o.querySelector(r.barSelector),c=r.speed,d=r.easing;return o.offsetWidth,l((function(t){""===r.positionUsing&&(r.positionUsing=n.getPositioningCSS()),s(u,i(e,c,d)),1===e?(s(o,{transition:"none",opacity:1}),o.offsetWidth,setTimeout((function(){s(o,{transition:"all "+c+"ms linear",opacity:0}),setTimeout((function(){n.remove(),t()}),c)}),c)):setTimeout(t,c)})),this},n.isStarted=function(){return"number"==typeof n.status},n.start=function(){n.status||n.set(0);var e=function(){setTimeout((function(){n.status&&(n.trickle(),e())}),r.trickleSpeed)};return r.trickle&&e(),this},n.done=function(e){return e||n.status?n.inc(.3+.5*Math.random()).set(1):this},n.inc=function(e){var t=n.status;return t?("number"!=typeof e&&(e=(1-t)*a(Math.random()*t,.1,.95)),t=a(t+e,0,.994),n.set(t)):n.start()},n.trickle=function(){return n.inc(Math.random()*r.trickleRate)},e=0,t=0,n.promise=function(r){return r&&"resolved"!==r.state()?(0===t&&n.start(),e++,t++,r.always((function(){0==--t?(e=0,n.done()):n.set((e-t)/e)})),this):this},n.render=function(e){if(n.isRendered())return document.getElementById("nprogress");c(document.documentElement,"nprogress-busy");var t=document.createElement("div");t.id="nprogress",t.innerHTML=r.template;var a,i=t.querySelector(r.barSelector),l=e?"-100":o(n.status||0),u=document.querySelector(r.parent);return s(i,{transition:"all 0 linear",transform:"translate3d("+l+"%,0,0)"}),r.showSpinner||(a=t.querySelector(r.spinnerSelector))&&p(a),u!=document.body&&c(u,"nprogress-custom-parent"),u.appendChild(t),t},n.remove=function(){d(document.documentElement,"nprogress-busy"),d(document.querySelector(r.parent),"nprogress-custom-parent");var e=document.getElementById("nprogress");e&&p(e)},n.isRendered=function(){return!!document.getElementById("nprogress")},n.getPositioningCSS=function(){var e=document.body.style,t="WebkitTransform"in e?"Webkit":"MozTransform"in e?"Moz":"msTransform"in e?"ms":"OTransform"in e?"O":"";return t+"Perspective"in e?"translate3d":t+"Transform"in e?"translate":"margin"};var l=function(){var e=[];function t(){var n=e.shift();n&&n(t)}return function(n){e.push(n),1==e.length&&t()}}(),s=function(){var e=["Webkit","O","Moz","ms"],t={};function n(e){return e.replace(/^-ms-/,"ms-").replace(/-([\da-z])/gi,(function(e,t){return t.toUpperCase()}))}function r(t){var n=document.body.style;if(t in n)return t;for(var r,a=e.length,o=t.charAt(0).toUpperCase()+t.slice(1);a--;)if((r=e[a]+o)in n)return r;return t}function a(e){return e=n(e),t[e]||(t[e]=r(e))}function o(e,t,n){t=a(t),e.style[t]=n}return function(e,t){var n,r,a=arguments;if(2==a.length)for(n in t)void 0!==(r=t[n])&&t.hasOwnProperty(n)&&o(e,n,r);else o(e,a[1],a[2])}}();function u(e,t){return("string"==typeof e?e:f(e)).indexOf(" "+t+" ")>=0}function c(e,t){var n=f(e),r=n+t;u(n,t)||(e.className=r.substring(1))}function d(e,t){var n,r=f(e);u(e,t)&&(n=r.replace(" "+t+" "," "),e.className=n.substring(1,n.length-1))}function f(e){return(" "+(e.className||"")+" ").replace(/\s+/gi," ")}function p(e){e&&e.parentNode&&e.parentNode.removeChild(e)}return n},void 0===(a="function"==typeof r?r.call(t,n,t,e):r)||(e.exports=a)},7418:e=>{"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;function a(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(a){return!1}}()?Object.assign:function(e,o){for(var i,l,s=a(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(s[c]=i[c]);if(t){l=t(i);for(var d=0;d<l.length;d++)r.call(i,l[d])&&(s[l[d]]=i[l[d]])}}return s}},7410:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=function(){var e=/(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i,t=0,n={},r={util:{encode:function e(t){return t instanceof a?new a(t.type,e(t.content),t.alias):Array.isArray(t)?t.map(e):t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/\u00a0/g," ")},type:function(e){return Object.prototype.toString.call(e).slice(8,-1)},objId:function(e){return e.__id||Object.defineProperty(e,"__id",{value:++t}),e.__id},clone:function e(t,n){var a,o;switch(n=n||{},r.util.type(t)){case"Object":if(o=r.util.objId(t),n[o])return n[o];for(var i in a={},n[o]=a,t)t.hasOwnProperty(i)&&(a[i]=e(t[i],n));return a;case"Array":return o=r.util.objId(t),n[o]?n[o]:(a=[],n[o]=a,t.forEach((function(t,r){a[r]=e(t,n)})),a);default:return t}},getLanguage:function(t){for(;t;){var n=e.exec(t.className);if(n)return n[1].toLowerCase();t=t.parentElement}return"none"},setLanguage:function(t,n){t.className=t.className.replace(RegExp(e,"gi"),""),t.classList.add("language-"+n)},isActive:function(e,t,n){for(var r="no-"+t;e;){var a=e.classList;if(a.contains(t))return!0;if(a.contains(r))return!1;e=e.parentElement}return!!n}},languages:{plain:n,plaintext:n,text:n,txt:n,extend:function(e,t){var n=r.util.clone(r.languages[e]);for(var a in t)n[a]=t[a];return n},insertBefore:function(e,t,n,a){var o=(a=a||r.languages)[e],i={};for(var l in o)if(o.hasOwnProperty(l)){if(l==t)for(var s in n)n.hasOwnProperty(s)&&(i[s]=n[s]);n.hasOwnProperty(l)||(i[l]=o[l])}var u=a[e];return a[e]=i,r.languages.DFS(r.languages,(function(t,n){n===u&&t!=e&&(this[t]=i)})),i},DFS:function e(t,n,a,o){o=o||{};var i=r.util.objId;for(var l in t)if(t.hasOwnProperty(l)){n.call(t,l,t[l],a||l);var s=t[l],u=r.util.type(s);"Object"!==u||o[i(s)]?"Array"!==u||o[i(s)]||(o[i(s)]=!0,e(s,n,l,o)):(o[i(s)]=!0,e(s,n,null,o))}}},plugins:{},highlight:function(e,t,n){var o={code:e,grammar:t,language:n};return r.hooks.run("before-tokenize",o),o.tokens=r.tokenize(o.code,o.grammar),r.hooks.run("after-tokenize",o),a.stringify(r.util.encode(o.tokens),o.language)},tokenize:function(e,t){var n=t.rest;if(n){for(var r in n)t[r]=n[r];delete t.rest}var a=new l;return s(a,a.head,e),i(e,a,t,a.head,0),function(e){var t=[],n=e.head.next;for(;n!==e.tail;)t.push(n.value),n=n.next;return t}(a)},hooks:{all:{},add:function(e,t){var n=r.hooks.all;n[e]=n[e]||[],n[e].push(t)},run:function(e,t){var n=r.hooks.all[e];if(n&&n.length)for(var a,o=0;a=n[o++];)a(t)}},Token:a};function a(e,t,n,r){this.type=e,this.content=t,this.alias=n,this.length=0|(r||"").length}function o(e,t,n,r){e.lastIndex=t;var a=e.exec(n);if(a&&r&&a[1]){var o=a[1].length;a.index+=o,a[0]=a[0].slice(o)}return a}function i(e,t,n,l,c,d){for(var f in n)if(n.hasOwnProperty(f)&&n[f]){var p=n[f];p=Array.isArray(p)?p:[p];for(var m=0;m<p.length;++m){if(d&&d.cause==f+","+m)return;var h=p[m],g=h.inside,v=!!h.lookbehind,y=!!h.greedy,b=h.alias;if(y&&!h.pattern.global){var w=h.pattern.toString().match(/[imsuy]*$/)[0];h.pattern=RegExp(h.pattern.source,w+"g")}for(var k=h.pattern||h,E=l.next,S=c;E!==t.tail&&!(d&&S>=d.reach);S+=E.value.length,E=E.next){var x=E.value;if(t.length>e.length)return;if(!(x instanceof a)){var _,C=1;if(y){if(!(_=o(k,S,e,v))||_.index>=e.length)break;var T=_.index,L=_.index+_[0].length,R=S;for(R+=E.value.length;T>=R;)R+=(E=E.next).value.length;if(S=R-=E.value.length,E.value instanceof a)continue;for(var N=E;N!==t.tail&&(R<L||"string"==typeof N.value);N=N.next)C++,R+=N.value.length;C--,x=e.slice(S,R),_.index-=S}else if(!(_=o(k,0,x,v)))continue;T=_.index;var A=_[0],O=x.slice(0,T),P=x.slice(T+A.length),I=S+x.length;d&&I>d.reach&&(d.reach=I);var D=E.prev;if(O&&(D=s(t,D,O),S+=O.length),u(t,D,C),E=s(t,D,new a(f,g?r.tokenize(A,g):A,b,A)),P&&s(t,E,P),C>1){var M={cause:f+","+m,reach:I};i(e,t,n,E.prev,S,M),d&&M.reach>d.reach&&(d.reach=M.reach)}}}}}}function l(){var e={value:null,prev:null,next:null},t={value:null,prev:e,next:null};e.next=t,this.head=e,this.tail=t,this.length=0}function s(e,t,n){var r=t.next,a={value:n,prev:t,next:r};return t.next=a,r.prev=a,e.length++,a}function u(e,t,n){for(var r=t.next,a=0;a<n&&r!==e.tail;a++)r=r.next;t.next=r,r.prev=t,e.length-=a}return a.stringify=function e(t,n){if("string"==typeof t)return t;if(Array.isArray(t)){var a="";return t.forEach((function(t){a+=e(t,n)})),a}var o={type:t.type,content:e(t.content,n),tag:"span",classes:["token",t.type],attributes:{},language:n},i=t.alias;i&&(Array.isArray(i)?Array.prototype.push.apply(o.classes,i):o.classes.push(i)),r.hooks.run("wrap",o);var l="";for(var s in o.attributes)l+=" "+s+'="'+(o.attributes[s]||"").replace(/"/g,"&quot;")+'"';return"<"+o.tag+' class="'+o.classes.join(" ")+'"'+l+">"+o.content+"</"+o.tag+">"},r}(),a=r;r.default=r,a.languages.markup={comment:{pattern:/<!--(?:(?!<!--)[\s\S])*?-->/,greedy:!0},prolog:{pattern:/<\?[\s\S]+?\?>/,greedy:!0},doctype:{pattern:/<!DOCTYPE(?:[^>"'[\]]|"[^"]*"|'[^']*')+(?:\[(?:[^<"'\]]|"[^"]*"|'[^']*'|<(?!!--)|<!--(?:[^-]|-(?!->))*-->)*\]\s*)?>/i,greedy:!0,inside:{"internal-subset":{pattern:/(^[^\[]*\[)[\s\S]+(?=\]>$)/,lookbehind:!0,greedy:!0,inside:null},string:{pattern:/"[^"]*"|'[^']*'/,greedy:!0},punctuation:/^<!|>$|[[\]]/,"doctype-tag":/^DOCTYPE/i,name:/[^\s<>'"]+/}},cdata:{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,greedy:!0},tag:{pattern:/<\/?(?!\d)[^\s>\/=$<%]+(?:\s(?:\s*[^\s>\/=]+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))|(?=[\s/>])))+)?\s*\/?>/,greedy:!0,inside:{tag:{pattern:/^<\/?[^\s>\/]+/,inside:{punctuation:/^<\/?/,namespace:/^[^\s>\/:]+:/}},"special-attr":[],"attr-value":{pattern:/=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+)/,inside:{punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}},punctuation:/\/?>/,"attr-name":{pattern:/[^\s>\/]+/,inside:{namespace:/^[^\s>\/:]+:/}}}},entity:[{pattern:/&[\da-z]{1,8};/i,alias:"named-entity"},/&#x?[\da-f]{1,8};/i]},a.languages.markup.tag.inside["attr-value"].inside.entity=a.languages.markup.entity,a.languages.markup.doctype.inside["internal-subset"].inside=a.languages.markup,a.hooks.add("wrap",(function(e){"entity"===e.type&&(e.attributes.title=e.content.replace(/&amp;/,"&"))})),Object.defineProperty(a.languages.markup.tag,"addInlined",{value:function(e,t){var n={};n["language-"+t]={pattern:/(^<!\[CDATA\[)[\s\S]+?(?=\]\]>$)/i,lookbehind:!0,inside:a.languages[t]},n.cdata=/^<!\[CDATA\[|\]\]>$/i;var r={"included-cdata":{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,inside:n}};r["language-"+t]={pattern:/[\s\S]+/,inside:a.languages[t]};var o={};o[e]={pattern:RegExp(/(<__[^>]*>)(?:<!\[CDATA\[(?:[^\]]|\](?!\]>))*\]\]>|(?!<!\[CDATA\[)[\s\S])*?(?=<\/__>)/.source.replace(/__/g,(function(){return e})),"i"),lookbehind:!0,greedy:!0,inside:r},a.languages.insertBefore("markup","cdata",o)}}),Object.defineProperty(a.languages.markup.tag,"addAttribute",{value:function(e,t){a.languages.markup.tag.inside["special-attr"].push({pattern:RegExp(/(^|["'\s])/.source+"(?:"+e+")"+/\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))/.source,"i"),lookbehind:!0,inside:{"attr-name":/^[^\s=]+/,"attr-value":{pattern:/=[\s\S]+/,inside:{value:{pattern:/(^=\s*(["']|(?!["'])))\S[\s\S]*(?=\2$)/,lookbehind:!0,alias:[t,"language-"+t],inside:a.languages[t]},punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}}}})}}),a.languages.html=a.languages.markup,a.languages.mathml=a.languages.markup,a.languages.svg=a.languages.markup,a.languages.xml=a.languages.extend("markup",{}),a.languages.ssml=a.languages.xml,a.languages.atom=a.languages.xml,a.languages.rss=a.languages.xml,function(e){var t="\\b(?:BASH|BASHOPTS|BASH_ALIASES|BASH_ARGC|BASH_ARGV|BASH_CMDS|BASH_COMPLETION_COMPAT_DIR|BASH_LINENO|BASH_REMATCH|BASH_SOURCE|BASH_VERSINFO|BASH_VERSION|COLORTERM|COLUMNS|COMP_WORDBREAKS|DBUS_SESSION_BUS_ADDRESS|DEFAULTS_PATH|DESKTOP_SESSION|DIRSTACK|DISPLAY|EUID|GDMSESSION|GDM_LANG|GNOME_KEYRING_CONTROL|GNOME_KEYRING_PID|GPG_AGENT_INFO|GROUPS|HISTCONTROL|HISTFILE|HISTFILESIZE|HISTSIZE|HOME|HOSTNAME|HOSTTYPE|IFS|INSTANCE|JOB|LANG|LANGUAGE|LC_ADDRESS|LC_ALL|LC_IDENTIFICATION|LC_MEASUREMENT|LC_MONETARY|LC_NAME|LC_NUMERIC|LC_PAPER|LC_TELEPHONE|LC_TIME|LESSCLOSE|LESSOPEN|LINES|LOGNAME|LS_COLORS|MACHTYPE|MAILCHECK|MANDATORY_PATH|NO_AT_BRIDGE|OLDPWD|OPTERR|OPTIND|ORBIT_SOCKETDIR|OSTYPE|PAPERSIZE|PATH|PIPESTATUS|PPID|PS1|PS2|PS3|PS4|PWD|RANDOM|REPLY|SECONDS|SELINUX_INIT|SESSION|SESSIONTYPE|SESSION_MANAGER|SHELL|SHELLOPTS|SHLVL|SSH_AUTH_SOCK|TERM|UID|UPSTART_EVENTS|UPSTART_INSTANCE|UPSTART_JOB|UPSTART_SESSION|USER|WINDOWID|XAUTHORITY|XDG_CONFIG_DIRS|XDG_CURRENT_DESKTOP|XDG_DATA_DIRS|XDG_GREETER_DATA_DIR|XDG_MENU_PREFIX|XDG_RUNTIME_DIR|XDG_SEAT|XDG_SEAT_PATH|XDG_SESSION_DESKTOP|XDG_SESSION_ID|XDG_SESSION_PATH|XDG_SESSION_TYPE|XDG_VTNR|XMODIFIERS)\\b",n={pattern:/(^(["']?)\w+\2)[ \t]+\S.*/,lookbehind:!0,alias:"punctuation",inside:null},r={bash:n,environment:{pattern:RegExp("\\$"+t),alias:"constant"},variable:[{pattern:/\$?\(\([\s\S]+?\)\)/,greedy:!0,inside:{variable:[{pattern:/(^\$\(\([\s\S]+)\)\)/,lookbehind:!0},/^\$\(\(/],number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee]-?\d+)?/,operator:/--|\+\+|\*\*=?|<<=?|>>=?|&&|\|\||[=!+\-*/%<>^&|]=?|[?~:]/,punctuation:/\(\(?|\)\)?|,|;/}},{pattern:/\$\((?:\([^)]+\)|[^()])+\)|`[^`]+`/,greedy:!0,inside:{variable:/^\$\(|^`|\)$|`$/}},{pattern:/\$\{[^}]+\}/,greedy:!0,inside:{operator:/:[-=?+]?|[!\/]|##?|%%?|\^\^?|,,?/,punctuation:/[\[\]]/,environment:{pattern:RegExp("(\\{)"+t),lookbehind:!0,alias:"constant"}}},/\$(?:\w+|[#?*!@$])/],entity:/\\(?:[abceEfnrtv\\"]|O?[0-7]{1,3}|U[0-9a-fA-F]{8}|u[0-9a-fA-F]{4}|x[0-9a-fA-F]{1,2})/};e.languages.bash={shebang:{pattern:/^#!\s*\/.*/,alias:"important"},comment:{pattern:/(^|[^"{\\$])#.*/,lookbehind:!0},"function-name":[{pattern:/(\bfunction\s+)[\w-]+(?=(?:\s*\(?:\s*\))?\s*\{)/,lookbehind:!0,alias:"function"},{pattern:/\b[\w-]+(?=\s*\(\s*\)\s*\{)/,alias:"function"}],"for-or-select":{pattern:/(\b(?:for|select)\s+)\w+(?=\s+in\s)/,alias:"variable",lookbehind:!0},"assign-left":{pattern:/(^|[\s;|&]|[<>]\()\w+(?=\+?=)/,inside:{environment:{pattern:RegExp("(^|[\\s;|&]|[<>]\\()"+t),lookbehind:!0,alias:"constant"}},alias:"variable",lookbehind:!0},string:[{pattern:/((?:^|[^<])<<-?\s*)(\w+)\s[\s\S]*?(?:\r?\n|\r)\2/,lookbehind:!0,greedy:!0,inside:r},{pattern:/((?:^|[^<])<<-?\s*)(["'])(\w+)\2\s[\s\S]*?(?:\r?\n|\r)\3/,lookbehind:!0,greedy:!0,inside:{bash:n}},{pattern:/(^|[^\\](?:\\\\)*)"(?:\\[\s\S]|\$\([^)]+\)|\$(?!\()|`[^`]+`|[^"\\`$])*"/,lookbehind:!0,greedy:!0,inside:r},{pattern:/(^|[^$\\])'[^']*'/,lookbehind:!0,greedy:!0},{pattern:/\$'(?:[^'\\]|\\[\s\S])*'/,greedy:!0,inside:{entity:r.entity}}],environment:{pattern:RegExp("\\$?"+t),alias:"constant"},variable:r.variable,function:{pattern:/(^|[\s;|&]|[<>]\()(?:add|apropos|apt|apt-cache|apt-get|aptitude|aspell|automysqlbackup|awk|basename|bash|bc|bconsole|bg|bzip2|cal|cat|cfdisk|chgrp|chkconfig|chmod|chown|chroot|cksum|clear|cmp|column|comm|composer|cp|cron|crontab|csplit|curl|cut|date|dc|dd|ddrescue|debootstrap|df|diff|diff3|dig|dir|dircolors|dirname|dirs|dmesg|docker|docker-compose|du|egrep|eject|env|ethtool|expand|expect|expr|fdformat|fdisk|fg|fgrep|file|find|fmt|fold|format|free|fsck|ftp|fuser|gawk|git|gparted|grep|groupadd|groupdel|groupmod|groups|grub-mkconfig|gzip|halt|head|hg|history|host|hostname|htop|iconv|id|ifconfig|ifdown|ifup|import|install|ip|jobs|join|kill|killall|less|link|ln|locate|logname|logrotate|look|lpc|lpr|lprint|lprintd|lprintq|lprm|ls|lsof|lynx|make|man|mc|mdadm|mkconfig|mkdir|mke2fs|mkfifo|mkfs|mkisofs|mknod|mkswap|mmv|more|most|mount|mtools|mtr|mutt|mv|nano|nc|netstat|nice|nl|node|nohup|notify-send|npm|nslookup|op|open|parted|passwd|paste|pathchk|ping|pkill|pnpm|podman|podman-compose|popd|pr|printcap|printenv|ps|pushd|pv|quota|quotacheck|quotactl|ram|rar|rcp|reboot|remsync|rename|renice|rev|rm|rmdir|rpm|rsync|scp|screen|sdiff|sed|sendmail|seq|service|sftp|sh|shellcheck|shuf|shutdown|sleep|slocate|sort|split|ssh|stat|strace|su|sudo|sum|suspend|swapon|sync|tac|tail|tar|tee|time|timeout|top|touch|tr|traceroute|tsort|tty|umount|uname|unexpand|uniq|units|unrar|unshar|unzip|update-grub|uptime|useradd|userdel|usermod|users|uudecode|uuencode|v|vcpkg|vdir|vi|vim|virsh|vmstat|wait|watch|wc|wget|whereis|which|who|whoami|write|xargs|xdg-open|yarn|yes|zenity|zip|zsh|zypper)(?=$|[)\s;|&])/,lookbehind:!0},keyword:{pattern:/(^|[\s;|&]|[<>]\()(?:case|do|done|elif|else|esac|fi|for|function|if|in|select|then|until|while)(?=$|[)\s;|&])/,lookbehind:!0},builtin:{pattern:/(^|[\s;|&]|[<>]\()(?:\.|:|alias|bind|break|builtin|caller|cd|command|continue|declare|echo|enable|eval|exec|exit|export|getopts|hash|help|let|local|logout|mapfile|printf|pwd|read|readarray|readonly|return|set|shift|shopt|source|test|times|trap|type|typeset|ulimit|umask|unalias|unset)(?=$|[)\s;|&])/,lookbehind:!0,alias:"class-name"},boolean:{pattern:/(^|[\s;|&]|[<>]\()(?:false|true)(?=$|[)\s;|&])/,lookbehind:!0},"file-descriptor":{pattern:/\B&\d\b/,alias:"important"},operator:{pattern:/\d?<>|>\||\+=|=[=~]?|!=?|<<[<-]?|[&\d]?>>|\d[<>]&?|[<>][&=]?|&[>&]?|\|[&|]?/,inside:{"file-descriptor":{pattern:/^\d/,alias:"important"}}},punctuation:/\$?\(\(?|\)\)?|\.\.|[{}[\];\\]/,number:{pattern:/(^|\s)(?:[1-9]\d*|0)(?:[.,]\d+)?\b/,lookbehind:!0}},n.inside=e.languages.bash;for(var a=["comment","function-name","for-or-select","assign-left","string","environment","function","keyword","builtin","boolean","file-descriptor","operator","punctuation","number"],o=r.variable[1].inside,i=0;i<a.length;i++)o[a[i]]=e.languages.bash[a[i]];e.languages.shell=e.languages.bash}(a),a.languages.clike={comment:[{pattern:/(^|[^\\])\/\*[\s\S]*?(?:\*\/|$)/,lookbehind:!0,greedy:!0},{pattern:/(^|[^\\:])\/\/.*/,lookbehind:!0,greedy:!0}],string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|trait)\s+|\bcatch\s+\()[\w.\\]+/i,lookbehind:!0,inside:{punctuation:/[.\\]/}},keyword:/\b(?:break|catch|continue|do|else|finally|for|function|if|in|instanceof|new|null|return|throw|try|while)\b/,boolean:/\b(?:false|true)\b/,function:/\b\w+(?=\()/,number:/\b0x[\da-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?/i,operator:/[<>]=?|[!=]=?=?|--?|\+\+?|&&?|\|\|?|[?*/~^%]/,punctuation:/[{}[\];(),.:]/},a.languages.c=a.languages.extend("clike",{comment:{pattern:/\/\/(?:[^\r\n\\]|\\(?:\r\n?|\n|(?![\r\n])))*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},"class-name":{pattern:/(\b(?:enum|struct)\s+(?:__attribute__\s*\(\([\s\S]*?\)\)\s*)?)\w+|\b[a-z]\w*_t\b/,lookbehind:!0},keyword:/\b(?:_Alignas|_Alignof|_Atomic|_Bool|_Complex|_Generic|_Imaginary|_Noreturn|_Static_assert|_Thread_local|__attribute__|asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|inline|int|long|register|return|short|signed|sizeof|static|struct|switch|typedef|typeof|union|unsigned|void|volatile|while)\b/,function:/\b[a-z_]\w*(?=\s*\()/i,number:/(?:\b0x(?:[\da-f]+(?:\.[\da-f]*)?|\.[\da-f]+)(?:p[+-]?\d+)?|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?)[ful]{0,4}/i,operator:/>>=?|<<=?|->|([-+&|:])\1|[?:~]|[-+*/%&|^!=<>]=?/}),a.languages.insertBefore("c","string",{char:{pattern:/'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n]){0,32}'/,greedy:!0}}),a.languages.insertBefore("c","string",{macro:{pattern:/(^[\t ]*)#\s*[a-z](?:[^\r\n\\/]|\/(?!\*)|\/\*(?:[^*]|\*(?!\/))*\*\/|\\(?:\r\n|[\s\S]))*/im,lookbehind:!0,greedy:!0,alias:"property",inside:{string:[{pattern:/^(#\s*include\s*)<[^>]+>/,lookbehind:!0},a.languages.c.string],char:a.languages.c.char,comment:a.languages.c.comment,"macro-name":[{pattern:/(^#\s*define\s+)\w+\b(?!\()/i,lookbehind:!0},{pattern:/(^#\s*define\s+)\w+\b(?=\()/i,lookbehind:!0,alias:"function"}],directive:{pattern:/^(#\s*)[a-z]+/,lookbehind:!0,alias:"keyword"},"directive-hash":/^#/,punctuation:/##|\\(?=[\r\n])/,expression:{pattern:/\S[\s\S]*/,inside:a.languages.c}}}}),a.languages.insertBefore("c","function",{constant:/\b(?:EOF|NULL|SEEK_CUR|SEEK_END|SEEK_SET|__DATE__|__FILE__|__LINE__|__TIMESTAMP__|__TIME__|__func__|stderr|stdin|stdout)\b/}),delete a.languages.c.boolean,function(e){var t=/\b(?:alignas|alignof|asm|auto|bool|break|case|catch|char|char16_t|char32_t|char8_t|class|co_await|co_return|co_yield|compl|concept|const|const_cast|consteval|constexpr|constinit|continue|decltype|default|delete|do|double|dynamic_cast|else|enum|explicit|export|extern|final|float|for|friend|goto|if|import|inline|int|int16_t|int32_t|int64_t|int8_t|long|module|mutable|namespace|new|noexcept|nullptr|operator|override|private|protected|public|register|reinterpret_cast|requires|return|short|signed|sizeof|static|static_assert|static_cast|struct|switch|template|this|thread_local|throw|try|typedef|typeid|typename|uint16_t|uint32_t|uint64_t|uint8_t|union|unsigned|using|virtual|void|volatile|wchar_t|while)\b/,n=/\b(?!<keyword>)\w+(?:\s*\.\s*\w+)*\b/.source.replace(/<keyword>/g,(function(){return t.source}));e.languages.cpp=e.languages.extend("c",{"class-name":[{pattern:RegExp(/(\b(?:class|concept|enum|struct|typename)\s+)(?!<keyword>)\w+/.source.replace(/<keyword>/g,(function(){return t.source}))),lookbehind:!0},/\b[A-Z]\w*(?=\s*::\s*\w+\s*\()/,/\b[A-Z_]\w*(?=\s*::\s*~\w+\s*\()/i,/\b\w+(?=\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>\s*::\s*\w+\s*\()/],keyword:t,number:{pattern:/(?:\b0b[01']+|\b0x(?:[\da-f']+(?:\.[\da-f']*)?|\.[\da-f']+)(?:p[+-]?[\d']+)?|(?:\b[\d']+(?:\.[\d']*)?|\B\.[\d']+)(?:e[+-]?[\d']+)?)[ful]{0,4}/i,greedy:!0},operator:/>>=?|<<=?|->|--|\+\+|&&|\|\||[?:~]|<=>|[-+*/%&|^!=<>]=?|\b(?:and|and_eq|bitand|bitor|not|not_eq|or|or_eq|xor|xor_eq)\b/,boolean:/\b(?:false|true)\b/}),e.languages.insertBefore("cpp","string",{module:{pattern:RegExp(/(\b(?:import|module)\s+)/.source+"(?:"+/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|<[^<>\r\n]*>/.source+"|"+/<mod-name>(?:\s*:\s*<mod-name>)?|:\s*<mod-name>/.source.replace(/<mod-name>/g,(function(){return n}))+")"),lookbehind:!0,greedy:!0,inside:{string:/^[<"][\s\S]+/,operator:/:/,punctuation:/\./}},"raw-string":{pattern:/R"([^()\\ ]{0,16})\([\s\S]*?\)\1"/,alias:"string",greedy:!0}}),e.languages.insertBefore("cpp","keyword",{"generic-function":{pattern:/\b(?!operator\b)[a-z_]\w*\s*<(?:[^<>]|<[^<>]*>)*>(?=\s*\()/i,inside:{function:/^\w+/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:e.languages.cpp}}}}),e.languages.insertBefore("cpp","operator",{"double-colon":{pattern:/::/,alias:"punctuation"}}),e.languages.insertBefore("cpp","class-name",{"base-clause":{pattern:/(\b(?:class|struct)\s+\w+\s*:\s*)[^;{}"'\s]+(?:\s+[^;{}"'\s]+)*(?=\s*[;{])/,lookbehind:!0,greedy:!0,inside:e.languages.extend("cpp",{})}}),e.languages.insertBefore("inside","double-colon",{"class-name":/\b[a-z_]\w*\b(?!\s*::)/i},e.languages.cpp["base-clause"])}(a),function(e){var t=/(?:"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n])*')/;e.languages.css={comment:/\/\*[\s\S]*?\*\//,atrule:{pattern:/@[\w-](?:[^;{\s]|\s+(?![\s{]))*(?:;|(?=\s*\{))/,inside:{rule:/^@[\w-]+/,"selector-function-argument":{pattern:/(\bselector\s*\(\s*(?![\s)]))(?:[^()\s]|\s+(?![\s)])|\((?:[^()]|\([^()]*\))*\))+(?=\s*\))/,lookbehind:!0,alias:"selector"},keyword:{pattern:/(^|[^\w-])(?:and|not|only|or)(?![\w-])/,lookbehind:!0}}},url:{pattern:RegExp("\\burl\\((?:"+t.source+"|"+/(?:[^\\\r\n()"']|\\[\s\S])*/.source+")\\)","i"),greedy:!0,inside:{function:/^url/i,punctuation:/^\(|\)$/,string:{pattern:RegExp("^"+t.source+"$"),alias:"url"}}},selector:{pattern:RegExp("(^|[{}\\s])[^{}\\s](?:[^{};\"'\\s]|\\s+(?![\\s{])|"+t.source+")*(?=\\s*\\{)"),lookbehind:!0},string:{pattern:t,greedy:!0},property:{pattern:/(^|[^-\w\xA0-\uFFFF])(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*(?=\s*:)/i,lookbehind:!0},important:/!important\b/i,function:{pattern:/(^|[^-a-z0-9])[-a-z0-9]+(?=\()/i,lookbehind:!0},punctuation:/[(){};:,]/},e.languages.css.atrule.inside.rest=e.languages.css;var n=e.languages.markup;n&&(n.tag.addInlined("style","css"),n.tag.addAttribute("style","css"))}(a),function(e){var t,n=/("|')(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/;e.languages.css.selector={pattern:e.languages.css.selector.pattern,lookbehind:!0,inside:t={"pseudo-element":/:(?:after|before|first-letter|first-line|selection)|::[-\w]+/,"pseudo-class":/:[-\w]+/,class:/\.[-\w]+/,id:/#[-\w]+/,attribute:{pattern:RegExp("\\[(?:[^[\\]\"']|"+n.source+")*\\]"),greedy:!0,inside:{punctuation:/^\[|\]$/,"case-sensitivity":{pattern:/(\s)[si]$/i,lookbehind:!0,alias:"keyword"},namespace:{pattern:/^(\s*)(?:(?!\s)[-*\w\xA0-\uFFFF])*\|(?!=)/,lookbehind:!0,inside:{punctuation:/\|$/}},"attr-name":{pattern:/^(\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+/,lookbehind:!0},"attr-value":[n,{pattern:/(=\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+(?=\s*$)/,lookbehind:!0}],operator:/[|~*^$]?=/}},"n-th":[{pattern:/(\(\s*)[+-]?\d*[\dn](?:\s*[+-]\s*\d+)?(?=\s*\))/,lookbehind:!0,inside:{number:/[\dn]+/,operator:/[+-]/}},{pattern:/(\(\s*)(?:even|odd)(?=\s*\))/i,lookbehind:!0}],combinator:/>|\+|~|\|\|/,punctuation:/[(),]/}},e.languages.css.atrule.inside["selector-function-argument"].inside=t,e.languages.insertBefore("css","property",{variable:{pattern:/(^|[^-\w\xA0-\uFFFF])--(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*/i,lookbehind:!0}});var r={pattern:/(\b\d+)(?:%|[a-z]+(?![\w-]))/,lookbehind:!0},a={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0};e.languages.insertBefore("css","function",{operator:{pattern:/(\s)[+\-*\/](?=\s)/,lookbehind:!0},hexcode:{pattern:/\B#[\da-f]{3,8}\b/i,alias:"color"},color:[{pattern:/(^|[^\w-])(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)(?![\w-])/i,lookbehind:!0},{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:r,number:a,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:r,number:a})}(a),a.languages.javascript=a.languages.extend("clike",{"class-name":[a.languages.clike["class-name"],{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$A-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\.(?:constructor|prototype))/,lookbehind:!0}],keyword:[{pattern:/((?:^|\})\s*)catch\b/,lookbehind:!0},{pattern:/(^|[^.]|\.\.\.\s*)\b(?:as|assert(?=\s*\{)|async(?=\s*(?:function\b|\(|[$\w\xA0-\uFFFF]|$))|await|break|case|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally(?=\s*(?:\{|$))|for|from(?=\s*(?:['"]|$))|function|(?:get|set)(?=\s*(?:[#\[$\w\xA0-\uFFFF]|$))|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)\b/,lookbehind:!0}],function:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*(?:\.\s*(?:apply|bind|call)\s*)?\()/,number:{pattern:RegExp(/(^|[^\w$])/.source+"(?:"+/NaN|Infinity/.source+"|"+/0[bB][01]+(?:_[01]+)*n?/.source+"|"+/0[oO][0-7]+(?:_[0-7]+)*n?/.source+"|"+/0[xX][\dA-Fa-f]+(?:_[\dA-Fa-f]+)*n?/.source+"|"+/\d+(?:_\d+)*n/.source+"|"+/(?:\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\.\d+(?:_\d+)*)(?:[Ee][+-]?\d+(?:_\d+)*)?/.source+")"+/(?![\w$])/.source),lookbehind:!0},operator:/--|\+\+|\*\*=?|=>|&&=?|\|\|=?|[!=]==|<<=?|>>>?=?|[-+*/%&|^!=<>]=?|\.{3}|\?\?=?|\?\.?|[~:]/}),a.languages.javascript["class-name"][0].pattern=/(\b(?:class|extends|implements|instanceof|interface|new)\s+)[\w.\\]+/,a.languages.insertBefore("javascript","keyword",{regex:{pattern:/((?:^|[^$\w\xA0-\uFFFF."'\])\s]|\b(?:return|yield))\s*)\/(?:\[(?:[^\]\\\r\n]|\\.)*\]|\\.|[^/\\\[\r\n])+\/[dgimyus]{0,7}(?=(?:\s|\/\*(?:[^*]|\*(?!\/))*\*\/)*(?:$|[\r\n,.;:})\]]|\/\/))/,lookbehind:!0,greedy:!0,inside:{"regex-source":{pattern:/^(\/)[\s\S]+(?=\/[a-z]*$)/,lookbehind:!0,alias:"language-regex",inside:a.languages.regex},"regex-delimiter":/^\/|\/$/,"regex-flags":/^[a-z]+$/}},"function-variable":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*[=:]\s*(?:async\s*)?(?:\bfunction\b|(?:\((?:[^()]|\([^()]*\))*\)|(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)\s*=>))/,alias:"function"},parameter:[{pattern:/(function(?:\s+(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)?\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\))/,lookbehind:!0,inside:a.languages.javascript},{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$a-z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*=>)/i,lookbehind:!0,inside:a.languages.javascript},{pattern:/(\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*=>)/,lookbehind:!0,inside:a.languages.javascript},{pattern:/((?:\b|\s|^)(?!(?:as|async|await|break|case|catch|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally|for|from|function|get|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|set|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)(?![$\w\xA0-\uFFFF]))(?:(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*)\(\s*|\]\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*\{)/,lookbehind:!0,inside:a.languages.javascript}],constant:/\b[A-Z](?:[A-Z_]|\dx?)*\b/}),a.languages.insertBefore("javascript","string",{hashbang:{pattern:/^#!.*/,greedy:!0,alias:"comment"},"template-string":{pattern:/`(?:\\[\s\S]|\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}|(?!\$\{)[^\\`])*`/,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},interpolation:{pattern:/((?:^|[^\\])(?:\\{2})*)\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}/,lookbehind:!0,inside:{"interpolation-punctuation":{pattern:/^\$\{|\}$/,alias:"punctuation"},rest:a.languages.javascript}},string:/[\s\S]+/}},"string-property":{pattern:/((?:^|[,{])[ \t]*)(["'])(?:\\(?:\r\n|[\s\S])|(?!\2)[^\\\r\n])*\2(?=\s*:)/m,lookbehind:!0,greedy:!0,alias:"property"}}),a.languages.insertBefore("javascript","operator",{"literal-property":{pattern:/((?:^|[,{])[ \t]*)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*:)/m,lookbehind:!0,alias:"property"}}),a.languages.markup&&(a.languages.markup.tag.addInlined("script","javascript"),a.languages.markup.tag.addAttribute(/on(?:abort|blur|change|click|composition(?:end|start|update)|dblclick|error|focus(?:in|out)?|key(?:down|up)|load|mouse(?:down|enter|leave|move|out|over|up)|reset|resize|scroll|select|slotchange|submit|unload|wheel)/.source,"javascript")),a.languages.js=a.languages.javascript,function(e){var t=/#(?!\{).+/,n={pattern:/#\{[^}]+\}/,alias:"variable"};e.languages.coffeescript=e.languages.extend("javascript",{comment:t,string:[{pattern:/'(?:\\[\s\S]|[^\\'])*'/,greedy:!0},{pattern:/"(?:\\[\s\S]|[^\\"])*"/,greedy:!0,inside:{interpolation:n}}],keyword:/\b(?:and|break|by|catch|class|continue|debugger|delete|do|each|else|extend|extends|false|finally|for|if|in|instanceof|is|isnt|let|loop|namespace|new|no|not|null|of|off|on|or|own|return|super|switch|then|this|throw|true|try|typeof|undefined|unless|until|when|while|window|with|yes|yield)\b/,"class-member":{pattern:/@(?!\d)\w+/,alias:"variable"}}),e.languages.insertBefore("coffeescript","comment",{"multiline-comment":{pattern:/###[\s\S]+?###/,alias:"comment"},"block-regex":{pattern:/\/{3}[\s\S]*?\/{3}/,alias:"regex",inside:{comment:t,interpolation:n}}}),e.languages.insertBefore("coffeescript","string",{"inline-javascript":{pattern:/`(?:\\[\s\S]|[^\\`])*`/,inside:{delimiter:{pattern:/^`|`$/,alias:"punctuation"},script:{pattern:/[\s\S]+/,alias:"language-javascript",inside:e.languages.javascript}}},"multiline-string":[{pattern:/'''[\s\S]*?'''/,greedy:!0,alias:"string"},{pattern:/"""[\s\S]*?"""/,greedy:!0,alias:"string",inside:{interpolation:n}}]}),e.languages.insertBefore("coffeescript","keyword",{property:/(?!\d)\w+(?=\s*:(?!:))/}),delete e.languages.coffeescript["template-string"],e.languages.coffee=e.languages.coffeescript}(a),function(e){var t=/[*&][^\s[\]{},]+/,n=/!(?:<[\w\-%#;/?:@&=+$,.!~*'()[\]]+>|(?:[a-zA-Z\d-]*!)?[\w\-%#;/?:@&=+$.~*'()]+)?/,r="(?:"+n.source+"(?:[ \t]+"+t.source+")?|"+t.source+"(?:[ \t]+"+n.source+")?)",a=/(?:[^\s\x00-\x08\x0e-\x1f!"#%&'*,\-:>?@[\]`{|}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]|[?:-]<PLAIN>)(?:[ \t]*(?:(?![#:])<PLAIN>|:<PLAIN>))*/.source.replace(/<PLAIN>/g,(function(){return/[^\s\x00-\x08\x0e-\x1f,[\]{}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]/.source})),o=/"(?:[^"\\\r\n]|\\.)*"|'(?:[^'\\\r\n]|\\.)*'/.source;function i(e,t){t=(t||"").replace(/m/g,"")+"m";var n=/([:\-,[{]\s*(?:\s<<prop>>[ \t]+)?)(?:<<value>>)(?=[ \t]*(?:$|,|\]|\}|(?:[\r\n]\s*)?#))/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<value>>/g,(function(){return e}));return RegExp(n,t)}e.languages.yaml={scalar:{pattern:RegExp(/([\-:]\s*(?:\s<<prop>>[ \t]+)?[|>])[ \t]*(?:((?:\r?\n|\r)[ \t]+)\S[^\r\n]*(?:\2[^\r\n]+)*)/.source.replace(/<<prop>>/g,(function(){return r}))),lookbehind:!0,alias:"string"},comment:/#.*/,key:{pattern:RegExp(/((?:^|[:\-,[{\r\n?])[ \t]*(?:<<prop>>[ \t]+)?)<<key>>(?=\s*:\s)/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<key>>/g,(function(){return"(?:"+a+"|"+o+")"}))),lookbehind:!0,greedy:!0,alias:"atrule"},directive:{pattern:/(^[ \t]*)%.+/m,lookbehind:!0,alias:"important"},datetime:{pattern:i(/\d{4}-\d\d?-\d\d?(?:[tT]|[ \t]+)\d\d?:\d{2}:\d{2}(?:\.\d*)?(?:[ \t]*(?:Z|[-+]\d\d?(?::\d{2})?))?|\d{4}-\d{2}-\d{2}|\d\d?:\d{2}(?::\d{2}(?:\.\d*)?)?/.source),lookbehind:!0,alias:"number"},boolean:{pattern:i(/false|true/.source,"i"),lookbehind:!0,alias:"important"},null:{pattern:i(/null|~/.source,"i"),lookbehind:!0,alias:"important"},string:{pattern:i(o),lookbehind:!0,greedy:!0},number:{pattern:i(/[+-]?(?:0x[\da-f]+|0o[0-7]+|(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?|\.inf|\.nan)/.source,"i"),lookbehind:!0},tag:n,important:t,punctuation:/---|[:[\]{}\-,|>?]|\.\.\./},e.languages.yml=e.languages.yaml}(a),function(e){var t=/(?:\\.|[^\\\n\r]|(?:\n|\r\n?)(?![\r\n]))/.source;function n(e){return e=e.replace(/<inner>/g,(function(){return t})),RegExp(/((?:^|[^\\])(?:\\{2})*)/.source+"(?:"+e+")")}var r=/(?:\\.|``(?:[^`\r\n]|`(?!`))+``|`[^`\r\n]+`|[^\\|\r\n`])+/.source,a=/\|?__(?:\|__)+\|?(?:(?:\n|\r\n?)|(?![\s\S]))/.source.replace(/__/g,(function(){return r})),o=/\|?[ \t]*:?-{3,}:?[ \t]*(?:\|[ \t]*:?-{3,}:?[ \t]*)+\|?(?:\n|\r\n?)/.source;e.languages.markdown=e.languages.extend("markup",{}),e.languages.insertBefore("markdown","prolog",{"front-matter-block":{pattern:/(^(?:\s*[\r\n])?)---(?!.)[\s\S]*?[\r\n]---(?!.)/,lookbehind:!0,greedy:!0,inside:{punctuation:/^---|---$/,"front-matter":{pattern:/\S+(?:\s+\S+)*/,alias:["yaml","language-yaml"],inside:e.languages.yaml}}},blockquote:{pattern:/^>(?:[\t ]*>)*/m,alias:"punctuation"},table:{pattern:RegExp("^"+a+o+"(?:"+a+")*","m"),inside:{"table-data-rows":{pattern:RegExp("^("+a+o+")(?:"+a+")*$"),lookbehind:!0,inside:{"table-data":{pattern:RegExp(r),inside:e.languages.markdown},punctuation:/\|/}},"table-line":{pattern:RegExp("^("+a+")"+o+"$"),lookbehind:!0,inside:{punctuation:/\||:?-{3,}:?/}},"table-header-row":{pattern:RegExp("^"+a+"$"),inside:{"table-header":{pattern:RegExp(r),alias:"important",inside:e.languages.markdown},punctuation:/\|/}}}},code:[{pattern:/((?:^|\n)[ \t]*\n|(?:^|\r\n?)[ \t]*\r\n?)(?: {4}|\t).+(?:(?:\n|\r\n?)(?: {4}|\t).+)*/,lookbehind:!0,alias:"keyword"},{pattern:/^```[\s\S]*?^```$/m,greedy:!0,inside:{"code-block":{pattern:/^(```.*(?:\n|\r\n?))[\s\S]+?(?=(?:\n|\r\n?)^```$)/m,lookbehind:!0},"code-language":{pattern:/^(```).+/,lookbehind:!0},punctuation:/```/}}],title:[{pattern:/\S.*(?:\n|\r\n?)(?:==+|--+)(?=[ \t]*$)/m,alias:"important",inside:{punctuation:/==+$|--+$/}},{pattern:/(^\s*)#.+/m,lookbehind:!0,alias:"important",inside:{punctuation:/^#+|#+$/}}],hr:{pattern:/(^\s*)([*-])(?:[\t ]*\2){2,}(?=\s*$)/m,lookbehind:!0,alias:"punctuation"},list:{pattern:/(^\s*)(?:[*+-]|\d+\.)(?=[\t ].)/m,lookbehind:!0,alias:"punctuation"},"url-reference":{pattern:/!?\[[^\]]+\]:[\t ]+(?:\S+|<(?:\\.|[^>\\])+>)(?:[\t ]+(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\)))?/,inside:{variable:{pattern:/^(!?\[)[^\]]+/,lookbehind:!0},string:/(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\))$/,punctuation:/^[\[\]!:]|[<>]/},alias:"url"},bold:{pattern:n(/\b__(?:(?!_)<inner>|_(?:(?!_)<inner>)+_)+__\b|\*\*(?:(?!\*)<inner>|\*(?:(?!\*)<inner>)+\*)+\*\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^..)[\s\S]+(?=..$)/,lookbehind:!0,inside:{}},punctuation:/\*\*|__/}},italic:{pattern:n(/\b_(?:(?!_)<inner>|__(?:(?!_)<inner>)+__)+_\b|\*(?:(?!\*)<inner>|\*\*(?:(?!\*)<inner>)+\*\*)+\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^.)[\s\S]+(?=.$)/,lookbehind:!0,inside:{}},punctuation:/[*_]/}},strike:{pattern:n(/(~~?)(?:(?!~)<inner>)+\2/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^~~?)[\s\S]+(?=\1$)/,lookbehind:!0,inside:{}},punctuation:/~~?/}},"code-snippet":{pattern:/(^|[^\\`])(?:``[^`\r\n]+(?:`[^`\r\n]+)*``(?!`)|`[^`\r\n]+`(?!`))/,lookbehind:!0,greedy:!0,alias:["code","keyword"]},url:{pattern:n(/!?\[(?:(?!\])<inner>)+\](?:\([^\s)]+(?:[\t ]+"(?:\\.|[^"\\])*")?\)|[ \t]?\[(?:(?!\])<inner>)+\])/.source),lookbehind:!0,greedy:!0,inside:{operator:/^!/,content:{pattern:/(^\[)[^\]]+(?=\])/,lookbehind:!0,inside:{}},variable:{pattern:/(^\][ \t]?\[)[^\]]+(?=\]$)/,lookbehind:!0},url:{pattern:/(^\]\()[^\s)]+/,lookbehind:!0},string:{pattern:/(^[ \t]+)"(?:\\.|[^"\\])*"(?=\)$)/,lookbehind:!0}}}}),["url","bold","italic","strike"].forEach((function(t){["url","bold","italic","strike","code-snippet"].forEach((function(n){t!==n&&(e.languages.markdown[t].inside.content.inside[n]=e.languages.markdown[n])}))})),e.hooks.add("after-tokenize",(function(e){"markdown"!==e.language&&"md"!==e.language||function e(t){if(t&&"string"!=typeof t)for(var n=0,r=t.length;n<r;n++){var a=t[n];if("code"===a.type){var o=a.content[1],i=a.content[3];if(o&&i&&"code-language"===o.type&&"code-block"===i.type&&"string"==typeof o.content){var l=o.content.replace(/\b#/g,"sharp").replace(/\b\+\+/g,"pp"),s="language-"+(l=(/[a-z][\w-]*/i.exec(l)||[""])[0].toLowerCase());i.alias?"string"==typeof i.alias?i.alias=[i.alias,s]:i.alias.push(s):i.alias=[s]}}else e(a.content)}}(e.tokens)})),e.hooks.add("wrap",(function(t){if("code-block"===t.type){for(var n="",r=0,a=t.classes.length;r<a;r++){var o=t.classes[r],u=/language-(.+)/.exec(o);if(u){n=u[1];break}}var c,d=e.languages[n];if(d)t.content=e.highlight((c=t.content,c.replace(i,"").replace(/&(\w{1,8}|#x?[\da-f]{1,8});/gi,(function(e,t){var n;if("#"===(t=t.toLowerCase())[0])return n="x"===t[1]?parseInt(t.slice(2),16):Number(t.slice(1)),s(n);var r=l[t];return r||e}))),d,n);else if(n&&"none"!==n&&e.plugins.autoloader){var f="md-"+(new Date).valueOf()+"-"+Math.floor(1e16*Math.random());t.attributes.id=f,e.plugins.autoloader.loadLanguages(n,(function(){var t=document.getElementById(f);t&&(t.innerHTML=e.highlight(t.textContent,e.languages[n],n))}))}}}));var i=RegExp(e.languages.markup.tag.pattern.source,"gi"),l={amp:"&",lt:"<",gt:">",quot:'"'},s=String.fromCodePoint||String.fromCharCode;e.languages.md=e.languages.markdown}(a),a.languages.graphql={comment:/#.*/,description:{pattern:/(?:"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*")(?=\s*[a-z_])/i,greedy:!0,alias:"string",inside:{"language-markdown":{pattern:/(^"(?:"")?)(?!\1)[\s\S]+(?=\1$)/,lookbehind:!0,inside:a.languages.markdown}}},string:{pattern:/"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*"/,greedy:!0},number:/(?:\B-|\b)\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,boolean:/\b(?:false|true)\b/,variable:/\$[a-z_]\w*/i,directive:{pattern:/@[a-z_]\w*/i,alias:"function"},"attr-name":{pattern:/\b[a-z_]\w*(?=\s*(?:\((?:[^()"]|"(?:\\.|[^\\"\r\n])*")*\))?:)/i,greedy:!0},"atom-input":{pattern:/\b[A-Z]\w*Input\b/,alias:"class-name"},scalar:/\b(?:Boolean|Float|ID|Int|String)\b/,constant:/\b[A-Z][A-Z_\d]*\b/,"class-name":{pattern:/(\b(?:enum|implements|interface|on|scalar|type|union)\s+|&\s*|:\s*|\[)[A-Z_]\w*/,lookbehind:!0},fragment:{pattern:/(\bfragment\s+|\.{3}\s*(?!on\b))[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-mutation":{pattern:/(\bmutation\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-query":{pattern:/(\bquery\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},keyword:/\b(?:directive|enum|extend|fragment|implements|input|interface|mutation|on|query|repeatable|scalar|schema|subscription|type|union)\b/,operator:/[!=|&]|\.{3}/,"property-query":/\w+(?=\s*\()/,object:/\w+(?=\s*\{)/,punctuation:/[!(){}\[\]:=,]/,property:/\w+/},a.hooks.add("after-tokenize",(function(e){if("graphql"===e.language)for(var t=e.tokens.filter((function(e){return"string"!=typeof e&&"comment"!==e.type&&"scalar"!==e.type})),n=0;n<t.length;){var r=t[n++];if("keyword"===r.type&&"mutation"===r.content){var a=[];if(d(["definition-mutation","punctuation"])&&"("===c(1).content){n+=2;var o=f(/^\($/,/^\)$/);if(-1===o)continue;for(;n<o;n++){var i=c(0);"variable"===i.type&&(p(i,"variable-input"),a.push(i.content))}n=o+1}if(d(["punctuation","property-query"])&&"{"===c(0).content&&(n++,p(c(0),"property-mutation"),a.length>0)){var l=f(/^\{$/,/^\}$/);if(-1===l)continue;for(var s=n;s<l;s++){var u=t[s];"variable"===u.type&&a.indexOf(u.content)>=0&&p(u,"variable-input")}}}}function c(e){return t[n+e]}function d(e,t){t=t||0;for(var n=0;n<e.length;n++){var r=c(n+t);if(!r||r.type!==e[n])return!1}return!0}function f(e,r){for(var a=1,o=n;o<t.length;o++){var i=t[o],l=i.content;if("punctuation"===i.type&&"string"==typeof l)if(e.test(l))a++;else if(r.test(l)&&0===--a)return o}return-1}function p(e,t){var n=e.alias;n?Array.isArray(n)||(e.alias=n=[n]):e.alias=n=[],n.push(t)}})),a.languages.sql={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|(?:--|\/\/|#).*)/,lookbehind:!0},variable:[{pattern:/@(["'`])(?:\\[\s\S]|(?!\1)[^\\])+\1/,greedy:!0},/@[\w.$]+/],string:{pattern:/(^|[^@\\])("|')(?:\\[\s\S]|(?!\2)[^\\]|\2\2)*\2/,greedy:!0,lookbehind:!0},identifier:{pattern:/(^|[^@\\])`(?:\\[\s\S]|[^`\\]|``)*`/,greedy:!0,lookbehind:!0,inside:{punctuation:/^`|`$/}},function:/\b(?:AVG|COUNT|FIRST|FORMAT|LAST|LCASE|LEN|MAX|MID|MIN|MOD|NOW|ROUND|SUM|UCASE)(?=\s*\()/i,keyword:/\b(?:ACTION|ADD|AFTER|ALGORITHM|ALL|ALTER|ANALYZE|ANY|APPLY|AS|ASC|AUTHORIZATION|AUTO_INCREMENT|BACKUP|BDB|BEGIN|BERKELEYDB|BIGINT|BINARY|BIT|BLOB|BOOL|BOOLEAN|BREAK|BROWSE|BTREE|BULK|BY|CALL|CASCADED?|CASE|CHAIN|CHAR(?:ACTER|SET)?|CHECK(?:POINT)?|CLOSE|CLUSTERED|COALESCE|COLLATE|COLUMNS?|COMMENT|COMMIT(?:TED)?|COMPUTE|CONNECT|CONSISTENT|CONSTRAINT|CONTAINS(?:TABLE)?|CONTINUE|CONVERT|CREATE|CROSS|CURRENT(?:_DATE|_TIME|_TIMESTAMP|_USER)?|CURSOR|CYCLE|DATA(?:BASES?)?|DATE(?:TIME)?|DAY|DBCC|DEALLOCATE|DEC|DECIMAL|DECLARE|DEFAULT|DEFINER|DELAYED|DELETE|DELIMITERS?|DENY|DESC|DESCRIBE|DETERMINISTIC|DISABLE|DISCARD|DISK|DISTINCT|DISTINCTROW|DISTRIBUTED|DO|DOUBLE|DROP|DUMMY|DUMP(?:FILE)?|DUPLICATE|ELSE(?:IF)?|ENABLE|ENCLOSED|END|ENGINE|ENUM|ERRLVL|ERRORS|ESCAPED?|EXCEPT|EXEC(?:UTE)?|EXISTS|EXIT|EXPLAIN|EXTENDED|FETCH|FIELDS|FILE|FILLFACTOR|FIRST|FIXED|FLOAT|FOLLOWING|FOR(?: EACH ROW)?|FORCE|FOREIGN|FREETEXT(?:TABLE)?|FROM|FULL|FUNCTION|GEOMETRY(?:COLLECTION)?|GLOBAL|GOTO|GRANT|GROUP|HANDLER|HASH|HAVING|HOLDLOCK|HOUR|IDENTITY(?:COL|_INSERT)?|IF|IGNORE|IMPORT|INDEX|INFILE|INNER|INNODB|INOUT|INSERT|INT|INTEGER|INTERSECT|INTERVAL|INTO|INVOKER|ISOLATION|ITERATE|JOIN|KEYS?|KILL|LANGUAGE|LAST|LEAVE|LEFT|LEVEL|LIMIT|LINENO|LINES|LINESTRING|LOAD|LOCAL|LOCK|LONG(?:BLOB|TEXT)|LOOP|MATCH(?:ED)?|MEDIUM(?:BLOB|INT|TEXT)|MERGE|MIDDLEINT|MINUTE|MODE|MODIFIES|MODIFY|MONTH|MULTI(?:LINESTRING|POINT|POLYGON)|NATIONAL|NATURAL|NCHAR|NEXT|NO|NONCLUSTERED|NULLIF|NUMERIC|OFF?|OFFSETS?|ON|OPEN(?:DATASOURCE|QUERY|ROWSET)?|OPTIMIZE|OPTION(?:ALLY)?|ORDER|OUT(?:ER|FILE)?|OVER|PARTIAL|PARTITION|PERCENT|PIVOT|PLAN|POINT|POLYGON|PRECEDING|PRECISION|PREPARE|PREV|PRIMARY|PRINT|PRIVILEGES|PROC(?:EDURE)?|PUBLIC|PURGE|QUICK|RAISERROR|READS?|REAL|RECONFIGURE|REFERENCES|RELEASE|RENAME|REPEAT(?:ABLE)?|REPLACE|REPLICATION|REQUIRE|RESIGNAL|RESTORE|RESTRICT|RETURN(?:ING|S)?|REVOKE|RIGHT|ROLLBACK|ROUTINE|ROW(?:COUNT|GUIDCOL|S)?|RTREE|RULE|SAVE(?:POINT)?|SCHEMA|SECOND|SELECT|SERIAL(?:IZABLE)?|SESSION(?:_USER)?|SET(?:USER)?|SHARE|SHOW|SHUTDOWN|SIMPLE|SMALLINT|SNAPSHOT|SOME|SONAME|SQL|START(?:ING)?|STATISTICS|STATUS|STRIPED|SYSTEM_USER|TABLES?|TABLESPACE|TEMP(?:ORARY|TABLE)?|TERMINATED|TEXT(?:SIZE)?|THEN|TIME(?:STAMP)?|TINY(?:BLOB|INT|TEXT)|TOP?|TRAN(?:SACTIONS?)?|TRIGGER|TRUNCATE|TSEQUAL|TYPES?|UNBOUNDED|UNCOMMITTED|UNDEFINED|UNION|UNIQUE|UNLOCK|UNPIVOT|UNSIGNED|UPDATE(?:TEXT)?|USAGE|USE|USER|USING|VALUES?|VAR(?:BINARY|CHAR|CHARACTER|YING)|VIEW|WAITFOR|WARNINGS|WHEN|WHERE|WHILE|WITH(?: ROLLUP|IN)?|WORK|WRITE(?:TEXT)?|YEAR)\b/i,boolean:/\b(?:FALSE|NULL|TRUE)\b/i,number:/\b0x[\da-f]+\b|\b\d+(?:\.\d*)?|\B\.\d+\b/i,operator:/[-+*\/=%^~]|&&?|\|\|?|!=?|<(?:=>?|<|>)?|>[>=]?|\b(?:AND|BETWEEN|DIV|ILIKE|IN|IS|LIKE|NOT|OR|REGEXP|RLIKE|SOUNDS LIKE|XOR)\b/i,punctuation:/[;[\]()`,.]/},function(e){var t=e.languages.javascript["template-string"],n=t.pattern.source,r=t.inside.interpolation,a=r.inside["interpolation-punctuation"],o=r.pattern.source;function i(t,r){if(e.languages[t])return{pattern:RegExp("((?:"+r+")\\s*)"+n),lookbehind:!0,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},"embedded-code":{pattern:/[\s\S]+/,alias:t}}}}function l(e,t){return"___"+t.toUpperCase()+"_"+e+"___"}function s(t,n,r){var a={code:t,grammar:n,language:r};return e.hooks.run("before-tokenize",a),a.tokens=e.tokenize(a.code,a.grammar),e.hooks.run("after-tokenize",a),a.tokens}function u(t){var n={};n["interpolation-punctuation"]=a;var o=e.tokenize(t,n);if(3===o.length){var i=[1,1];i.push.apply(i,s(o[1],e.languages.javascript,"javascript")),o.splice.apply(o,i)}return new e.Token("interpolation",o,r.alias,t)}function c(t,n,r){var a=e.tokenize(t,{interpolation:{pattern:RegExp(o),lookbehind:!0}}),i=0,c={},d=s(a.map((function(e){if("string"==typeof e)return e;for(var n,a=e.content;-1!==t.indexOf(n=l(i++,r)););return c[n]=a,n})).join(""),n,r),f=Object.keys(c);return i=0,function e(t){for(var n=0;n<t.length;n++){if(i>=f.length)return;var r=t[n];if("string"==typeof r||"string"==typeof r.content){var a=f[i],o="string"==typeof r?r:r.content,l=o.indexOf(a);if(-1!==l){++i;var s=o.substring(0,l),d=u(c[a]),p=o.substring(l+a.length),m=[];if(s&&m.push(s),m.push(d),p){var h=[p];e(h),m.push.apply(m,h)}"string"==typeof r?(t.splice.apply(t,[n,1].concat(m)),n+=m.length-1):r.content=m}}else{var g=r.content;Array.isArray(g)?e(g):e([g])}}}(d),new e.Token(r,d,"language-"+r,t)}e.languages.javascript["template-string"]=[i("css",/\b(?:styled(?:\([^)]*\))?(?:\s*\.\s*\w+(?:\([^)]*\))*)*|css(?:\s*\.\s*(?:global|resolve))?|createGlobalStyle|keyframes)/.source),i("html",/\bhtml|\.\s*(?:inner|outer)HTML\s*\+?=/.source),i("svg",/\bsvg/.source),i("markdown",/\b(?:markdown|md)/.source),i("graphql",/\b(?:gql|graphql(?:\s*\.\s*experimental)?)/.source),i("sql",/\bsql/.source),t].filter(Boolean);var d={javascript:!0,js:!0,typescript:!0,ts:!0,jsx:!0,tsx:!0};function f(e){return"string"==typeof e?e:Array.isArray(e)?e.map(f).join(""):f(e.content)}e.hooks.add("after-tokenize",(function(t){t.language in d&&function t(n){for(var r=0,a=n.length;r<a;r++){var o=n[r];if("string"!=typeof o){var i=o.content;if(Array.isArray(i))if("template-string"===o.type){var l=i[1];if(3===i.length&&"string"!=typeof l&&"embedded-code"===l.type){var s=f(l),u=l.alias,d=Array.isArray(u)?u[0]:u,p=e.languages[d];if(!p)continue;i[1]=c(s,p,d)}}else t(i);else"string"!=typeof i&&t([i])}}}(t.tokens)}))}(a),function(e){e.languages.typescript=e.languages.extend("javascript",{"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|type)\s+)(?!keyof\b)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?:\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?/,lookbehind:!0,greedy:!0,inside:null},builtin:/\b(?:Array|Function|Promise|any|boolean|console|never|number|string|symbol|unknown)\b/}),e.languages.typescript.keyword.push(/\b(?:abstract|declare|is|keyof|readonly|require)\b/,/\b(?:asserts|infer|interface|module|namespace|type)\b(?=\s*(?:[{_$a-zA-Z\xA0-\uFFFF]|$))/,/\btype\b(?=\s*(?:[\{*]|$))/),delete e.languages.typescript.parameter,delete e.languages.typescript["literal-property"];var t=e.languages.extend("typescript",{});delete t["class-name"],e.languages.typescript["class-name"].inside=t,e.languages.insertBefore("typescript","function",{decorator:{pattern:/@[$\w\xA0-\uFFFF]+/,inside:{at:{pattern:/^@/,alias:"operator"},function:/^[\s\S]+/}},"generic-function":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>(?=\s*\()/,greedy:!0,inside:{function:/^#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:t}}}}),e.languages.ts=e.languages.typescript}(a),function(e){function t(e,t){return RegExp(e.replace(/<ID>/g,(function(){return/(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/.source})),t)}e.languages.insertBefore("javascript","function-variable",{"method-variable":{pattern:RegExp("(\\.\\s*)"+e.languages.javascript["function-variable"].pattern.source),lookbehind:!0,alias:["function-variable","method","function","property-access"]}}),e.languages.insertBefore("javascript","function",{method:{pattern:RegExp("(\\.\\s*)"+e.languages.javascript.function.source),lookbehind:!0,alias:["function","property-access"]}}),e.languages.insertBefore("javascript","constant",{"known-class-name":[{pattern:/\b(?:(?:Float(?:32|64)|(?:Int|Uint)(?:8|16|32)|Uint8Clamped)?Array|ArrayBuffer|BigInt|Boolean|DataView|Date|Error|Function|Intl|JSON|(?:Weak)?(?:Map|Set)|Math|Number|Object|Promise|Proxy|Reflect|RegExp|String|Symbol|WebAssembly)\b/,alias:"class-name"},{pattern:/\b(?:[A-Z]\w*)Error\b/,alias:"class-name"}]}),e.languages.insertBefore("javascript","keyword",{imports:{pattern:t(/(\bimport\b\s*)(?:<ID>(?:\s*,\s*(?:\*\s*as\s+<ID>|\{[^{}]*\}))?|\*\s*as\s+<ID>|\{[^{}]*\})(?=\s*\bfrom\b)/.source),lookbehind:!0,inside:e.languages.javascript},exports:{pattern:t(/(\bexport\b\s*)(?:\*(?:\s*as\s+<ID>)?(?=\s*\bfrom\b)|\{[^{}]*\})/.source),lookbehind:!0,inside:e.languages.javascript}}),e.languages.javascript.keyword.unshift({pattern:/\b(?:as|default|export|from|import)\b/,alias:"module"},{pattern:/\b(?:await|break|catch|continue|do|else|finally|for|if|return|switch|throw|try|while|yield)\b/,alias:"control-flow"},{pattern:/\bnull\b/,alias:["null","nil"]},{pattern:/\bundefined\b/,alias:"nil"}),e.languages.insertBefore("javascript","operator",{spread:{pattern:/\.{3}/,alias:"operator"},arrow:{pattern:/=>/,alias:"operator"}}),e.languages.insertBefore("javascript","punctuation",{"property-access":{pattern:t(/(\.\s*)#?<ID>/.source),lookbehind:!0},"maybe-class-name":{pattern:/(^|[^$\w\xA0-\uFFFF])[A-Z][$\w\xA0-\uFFFF]+/,lookbehind:!0},dom:{pattern:/\b(?:document|(?:local|session)Storage|location|navigator|performance|window)\b/,alias:"variable"},console:{pattern:/\bconsole(?=\s*\.)/,alias:"class-name"}});for(var n=["function","function-variable","method","method-variable","property-access"],r=0;r<n.length;r++){var a=n[r],o=e.languages.javascript[a];"RegExp"===e.util.type(o)&&(o=e.languages.javascript[a]={pattern:o});var i=o.inside||{};o.inside=i,i["maybe-class-name"]=/^[A-Z][\s\S]*/}}(a),function(e){var t=e.util.clone(e.languages.javascript),n=/(?:\s|\/\/.*(?!.)|\/\*(?:[^*]|\*(?!\/))\*\/)/.source,r=/(?:\{(?:\{(?:\{[^{}]*\}|[^{}])*\}|[^{}])*\})/.source,a=/(?:\{<S>*\.{3}(?:[^{}]|<BRACES>)*\})/.source;function o(e,t){return e=e.replace(/<S>/g,(function(){return n})).replace(/<BRACES>/g,(function(){return r})).replace(/<SPREAD>/g,(function(){return a})),RegExp(e,t)}a=o(a).source,e.languages.jsx=e.languages.extend("markup",t),e.languages.jsx.tag.pattern=o(/<\/?(?:[\w.:-]+(?:<S>+(?:[\w.:$-]+(?:=(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s{'"/>=]+|<BRACES>))?|<SPREAD>))*<S>*\/?)?>/.source),e.languages.jsx.tag.inside.tag.pattern=/^<\/?[^\s>\/]*/,e.languages.jsx.tag.inside["attr-value"].pattern=/=(?!\{)(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s'">]+)/,e.languages.jsx.tag.inside.tag.inside["class-name"]=/^[A-Z]\w*(?:\.[A-Z]\w*)*$/,e.languages.jsx.tag.inside.comment=t.comment,e.languages.insertBefore("inside","attr-name",{spread:{pattern:o(/<SPREAD>/.source),inside:e.languages.jsx}},e.languages.jsx.tag),e.languages.insertBefore("inside","special-attr",{script:{pattern:o(/=<BRACES>/.source),alias:"language-javascript",inside:{"script-punctuation":{pattern:/^=(?=\{)/,alias:"punctuation"},rest:e.languages.jsx}}},e.languages.jsx.tag);var i=function(e){return e?"string"==typeof e?e:"string"==typeof e.content?e.content:e.content.map(i).join(""):""},l=function(t){for(var n=[],r=0;r<t.length;r++){var a=t[r],o=!1;if("string"!=typeof a&&("tag"===a.type&&a.content[0]&&"tag"===a.content[0].type?"</"===a.content[0].content[0].content?n.length>0&&n[n.length-1].tagName===i(a.content[0].content[1])&&n.pop():"/>"===a.content[a.content.length-1].content||n.push({tagName:i(a.content[0].content[1]),openedBraces:0}):n.length>0&&"punctuation"===a.type&&"{"===a.content?n[n.length-1].openedBraces++:n.length>0&&n[n.length-1].openedBraces>0&&"punctuation"===a.type&&"}"===a.content?n[n.length-1].openedBraces--:o=!0),(o||"string"==typeof a)&&n.length>0&&0===n[n.length-1].openedBraces){var s=i(a);r<t.length-1&&("string"==typeof t[r+1]||"plain-text"===t[r+1].type)&&(s+=i(t[r+1]),t.splice(r+1,1)),r>0&&("string"==typeof t[r-1]||"plain-text"===t[r-1].type)&&(s=i(t[r-1])+s,t.splice(r-1,1),r--),t[r]=new e.Token("plain-text",s,null,s)}a.content&&"string"!=typeof a.content&&l(a.content)}};e.hooks.add("after-tokenize",(function(e){"jsx"!==e.language&&"tsx"!==e.language||l(e.tokens)}))}(a),function(e){e.languages.diff={coord:[/^(?:\*{3}|-{3}|\+{3}).*$/m,/^@@.*@@$/m,/^\d.*$/m]};var t={"deleted-sign":"-","deleted-arrow":"<","inserted-sign":"+","inserted-arrow":">",unchanged:" ",diff:"!"};Object.keys(t).forEach((function(n){var r=t[n],a=[];/^\w+$/.test(n)||a.push(/\w+/.exec(n)[0]),"diff"===n&&a.push("bold"),e.languages.diff[n]={pattern:RegExp("^(?:["+r+"].*(?:\r\n?|\n|(?![\\s\\S])))+","m"),alias:a,inside:{line:{pattern:/(.)(?=[\s\S]).*(?:\r\n?|\n)?/,lookbehind:!0},prefix:{pattern:/[\s\S]/,alias:/\w+/.exec(n)[0]}}}})),Object.defineProperty(e.languages.diff,"PREFIXES",{value:t})}(a),a.languages.git={comment:/^#.*/m,deleted:/^[-\u2013].*/m,inserted:/^\+.*/m,string:/("|')(?:\\.|(?!\1)[^\\\r\n])*\1/,command:{pattern:/^.*\$ git .*$/m,inside:{parameter:/\s--?\w+/}},coord:/^@@.*@@$/m,"commit-sha1":/^commit \w{40}$/m},a.languages.go=a.languages.extend("clike",{string:{pattern:/(^|[^\\])"(?:\\.|[^"\\\r\n])*"|`[^`]*`/,lookbehind:!0,greedy:!0},keyword:/\b(?:break|case|chan|const|continue|default|defer|else|fallthrough|for|func|go(?:to)?|if|import|interface|map|package|range|return|select|struct|switch|type|var)\b/,boolean:/\b(?:_|false|iota|nil|true)\b/,number:[/\b0(?:b[01_]+|o[0-7_]+)i?\b/i,/\b0x(?:[a-f\d_]+(?:\.[a-f\d_]*)?|\.[a-f\d_]+)(?:p[+-]?\d+(?:_\d+)*)?i?(?!\w)/i,/(?:\b\d[\d_]*(?:\.[\d_]*)?|\B\.\d[\d_]*)(?:e[+-]?[\d_]+)?i?(?!\w)/i],operator:/[*\/%^!=]=?|\+[=+]?|-[=-]?|\|[=|]?|&(?:=|&|\^=?)?|>(?:>=?|=)?|<(?:<=?|=|-)?|:=|\.\.\./,builtin:/\b(?:append|bool|byte|cap|close|complex|complex(?:64|128)|copy|delete|error|float(?:32|64)|u?int(?:8|16|32|64)?|imag|len|make|new|panic|print(?:ln)?|real|recover|rune|string|uintptr)\b/}),a.languages.insertBefore("go","string",{char:{pattern:/'(?:\\.|[^'\\\r\n]){0,10}'/,greedy:!0}}),delete a.languages.go["class-name"],function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,a,o){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(a,(function(e){if("function"==typeof o&&!o(e))return e;for(var a,l=i.length;-1!==n.code.indexOf(a=t(r,l));)++l;return i[l]=e,a})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var a=0,o=Object.keys(n.tokenStack);!function i(l){for(var s=0;s<l.length&&!(a>=o.length);s++){var u=l[s];if("string"==typeof u||u.content&&"string"==typeof u.content){var c=o[a],d=n.tokenStack[c],f="string"==typeof u?u:u.content,p=t(r,c),m=f.indexOf(p);if(m>-1){++a;var h=f.substring(0,m),g=new e.Token(r,e.tokenize(d,n.grammar),"language-"+r,d),v=f.substring(m+p.length),y=[];h&&y.push.apply(y,i([h])),y.push(g),v&&y.push.apply(y,i([v])),"string"==typeof u?l.splice.apply(l,[s,1].concat(y)):u.content=y}}else u.content&&i(u.content)}return l}(n.tokens)}}}})}(a),function(e){e.languages.handlebars={comment:/\{\{![\s\S]*?\}\}/,delimiter:{pattern:/^\{\{\{?|\}\}\}?$/,alias:"punctuation"},string:/(["'])(?:\\.|(?!\1)[^\\\r\n])*\1/,number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee][+-]?\d+)?/,boolean:/\b(?:false|true)\b/,block:{pattern:/^(\s*(?:~\s*)?)[#\/]\S+?(?=\s*(?:~\s*)?$|\s)/,lookbehind:!0,alias:"keyword"},brackets:{pattern:/\[[^\]]+\]/,inside:{punctuation:/\[|\]/,variable:/[\s\S]+/}},punctuation:/[!"#%&':()*+,.\/;<=>@\[\\\]^`{|}~]/,variable:/[^!"#%&'()*+,\/;<=>@\[\\\]^`{|}~\s]+/},e.hooks.add("before-tokenize",(function(t){e.languages["markup-templating"].buildPlaceholders(t,"handlebars",/\{\{\{[\s\S]+?\}\}\}|\{\{[\s\S]+?\}\}/g)})),e.hooks.add("after-tokenize",(function(t){e.languages["markup-templating"].tokenizePlaceholders(t,"handlebars")})),e.languages.hbs=e.languages.handlebars}(a),a.languages.json={property:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?=\s*:)/,lookbehind:!0,greedy:!0},string:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?!\s*:)/,lookbehind:!0,greedy:!0},comment:{pattern:/\/\/.*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},number:/-?\b\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,punctuation:/[{}[\],]/,operator:/:/,boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"}},a.languages.webmanifest=a.languages.json,a.languages.less=a.languages.extend("css",{comment:[/\/\*[\s\S]*?\*\//,{pattern:/(^|[^\\])\/\/.*/,lookbehind:!0}],atrule:{pattern:/@[\w-](?:\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{punctuation:/[:()]/}},selector:{pattern:/(?:@\{[\w-]+\}|[^{};\s@])(?:@\{[\w-]+\}|\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};@\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{variable:/@+[\w-]+/}},property:/(?:@\{[\w-]+\}|[\w-])+(?:\+_?)?(?=\s*:)/,operator:/[+\-*\/]/}),a.languages.insertBefore("less","property",{variable:[{pattern:/@[\w-]+\s*:/,inside:{punctuation:/:/}},/@@?[\w-]+/],"mixin-usage":{pattern:/([{;]\s*)[.#](?!\d)[\w-].*?(?=[(;])/,lookbehind:!0,alias:"function"}}),a.languages.makefile={comment:{pattern:/(^|[^\\])#(?:\\(?:\r\n|[\s\S])|[^\\\r\n])*/,lookbehind:!0},string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"builtin-target":{pattern:/\.[A-Z][^:#=\s]+(?=\s*:(?!=))/,alias:"builtin"},target:{pattern:/^(?:[^:=\s]|[ \t]+(?![\s:]))+(?=\s*:(?!=))/m,alias:"symbol",inside:{variable:/\$+(?:(?!\$)[^(){}:#=\s]+|(?=[({]))/}},variable:/\$+(?:(?!\$)[^(){}:#=\s]+|\([@*%<^+?][DF]\)|(?=[({]))/,keyword:/-include\b|\b(?:define|else|endef|endif|export|ifn?def|ifn?eq|include|override|private|sinclude|undefine|unexport|vpath)\b/,function:{pattern:/(\()(?:abspath|addsuffix|and|basename|call|dir|error|eval|file|filter(?:-out)?|findstring|firstword|flavor|foreach|guile|if|info|join|lastword|load|notdir|or|origin|patsubst|realpath|shell|sort|strip|subst|suffix|value|warning|wildcard|word(?:list|s)?)(?=[ \t])/,lookbehind:!0},operator:/(?:::|[?:+!])?=|[|@]/,punctuation:/[:;(){}]/},a.languages.objectivec=a.languages.extend("c",{string:{pattern:/@?"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},keyword:/\b(?:asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|in|inline|int|long|register|return|self|short|signed|sizeof|static|struct|super|switch|typedef|typeof|union|unsigned|void|volatile|while)\b|(?:@interface|@end|@implementation|@protocol|@class|@public|@protected|@private|@property|@try|@catch|@finally|@throw|@synthesize|@dynamic|@selector)\b/,operator:/-[->]?|\+\+?|!=?|<<?=?|>>?=?|==?|&&?|\|\|?|[~^%?*\/@]/}),delete a.languages.objectivec["class-name"],a.languages.objc=a.languages.objectivec,a.languages.ocaml={comment:{pattern:/\(\*[\s\S]*?\*\)/,greedy:!0},char:{pattern:/'(?:[^\\\r\n']|\\(?:.|[ox]?[0-9a-f]{1,3}))'/i,greedy:!0},string:[{pattern:/"(?:\\(?:[\s\S]|\r\n)|[^\\\r\n"])*"/,greedy:!0},{pattern:/\{([a-z_]*)\|[\s\S]*?\|\1\}/,greedy:!0}],number:[/\b(?:0b[01][01_]*|0o[0-7][0-7_]*)\b/i,/\b0x[a-f0-9][a-f0-9_]*(?:\.[a-f0-9_]*)?(?:p[+-]?\d[\d_]*)?(?!\w)/i,/\b\d[\d_]*(?:\.[\d_]*)?(?:e[+-]?\d[\d_]*)?(?!\w)/i],directive:{pattern:/\B#\w+/,alias:"property"},label:{pattern:/\B~\w+/,alias:"property"},"type-variable":{pattern:/\B'\w+/,alias:"function"},variant:{pattern:/`\w+/,alias:"symbol"},keyword:/\b(?:as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|match|method|module|mutable|new|nonrec|object|of|open|private|rec|sig|struct|then|to|try|type|val|value|virtual|when|where|while|with)\b/,boolean:/\b(?:false|true)\b/,"operator-like-punctuation":{pattern:/\[[<>|]|[>|]\]|\{<|>\}/,alias:"punctuation"},operator:/\.[.~]|:[=>]|[=<>@^|&+\-*\/$%!?~][!$%&*+\-.\/:<=>?@^|~]*|\b(?:and|asr|land|lor|lsl|lsr|lxor|mod|or)\b/,punctuation:/;;|::|[(){}\[\].,:;#]|\b_\b/},a.languages.python={comment:{pattern:/(^|[^\\])#.*/,lookbehind:!0,greedy:!0},"string-interpolation":{pattern:/(?:f|fr|rf)(?:("""|''')[\s\S]*?\1|("|')(?:\\.|(?!\2)[^\\\r\n])*\2)/i,greedy:!0,inside:{interpolation:{pattern:/((?:^|[^{])(?:\{\{)*)\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}])+\})+\})+\}/,lookbehind:!0,inside:{"format-spec":{pattern:/(:)[^:(){}]+(?=\}$)/,lookbehind:!0},"conversion-option":{pattern:/![sra](?=[:}]$)/,alias:"punctuation"},rest:null}},string:/[\s\S]+/}},"triple-quoted-string":{pattern:/(?:[rub]|br|rb)?("""|''')[\s\S]*?\1/i,greedy:!0,alias:"string"},string:{pattern:/(?:[rub]|br|rb)?("|')(?:\\.|(?!\1)[^\\\r\n])*\1/i,greedy:!0},function:{pattern:/((?:^|\s)def[ \t]+)[a-zA-Z_]\w*(?=\s*\()/g,lookbehind:!0},"class-name":{pattern:/(\bclass\s+)\w+/i,lookbehind:!0},decorator:{pattern:/(^[\t ]*)@\w+(?:\.\w+)*/m,lookbehind:!0,alias:["annotation","punctuation"],inside:{punctuation:/\./}},keyword:/\b(?:_(?=\s*:)|and|as|assert|async|await|break|case|class|continue|def|del|elif|else|except|exec|finally|for|from|global|if|import|in|is|lambda|match|nonlocal|not|or|pass|print|raise|return|try|while|with|yield)\b/,builtin:/\b(?:__import__|abs|all|any|apply|ascii|basestring|bin|bool|buffer|bytearray|bytes|callable|chr|classmethod|cmp|coerce|compile|complex|delattr|dict|dir|divmod|enumerate|eval|execfile|file|filter|float|format|frozenset|getattr|globals|hasattr|hash|help|hex|id|input|int|intern|isinstance|issubclass|iter|len|list|locals|long|map|max|memoryview|min|next|object|oct|open|ord|pow|property|range|raw_input|reduce|reload|repr|reversed|round|set|setattr|slice|sorted|staticmethod|str|sum|super|tuple|type|unichr|unicode|vars|xrange|zip)\b/,boolean:/\b(?:False|None|True)\b/,number:/\b0(?:b(?:_?[01])+|o(?:_?[0-7])+|x(?:_?[a-f0-9])+)\b|(?:\b\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\B\.\d+(?:_\d+)*)(?:e[+-]?\d+(?:_\d+)*)?j?(?!\w)/i,operator:/[-+%=]=?|!=|:=|\*\*?=?|\/\/?=?|<[<=>]?|>[=>]?|[&|^~]/,punctuation:/[{}[\];(),.:]/},a.languages.python["string-interpolation"].inside.interpolation.inside.rest=a.languages.python,a.languages.py=a.languages.python,a.languages.reason=a.languages.extend("clike",{string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^\\\r\n"])*"/,greedy:!0},"class-name":/\b[A-Z]\w*/,keyword:/\b(?:and|as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|method|module|mutable|new|nonrec|object|of|open|or|private|rec|sig|struct|switch|then|to|try|type|val|virtual|when|while|with)\b/,operator:/\.{3}|:[:=]|\|>|->|=(?:==?|>)?|<=?|>=?|[|^?'#!~`]|[+\-*\/]\.?|\b(?:asr|land|lor|lsl|lsr|lxor|mod)\b/}),a.languages.insertBefore("reason","class-name",{char:{pattern:/'(?:\\x[\da-f]{2}|\\o[0-3][0-7][0-7]|\\\d{3}|\\.|[^'\\\r\n])'/,greedy:!0},constructor:/\b[A-Z]\w*\b(?!\s*\.)/,label:{pattern:/\b[a-z]\w*(?=::)/,alias:"symbol"}}),delete a.languages.reason.function,function(e){e.languages.sass=e.languages.extend("css",{comment:{pattern:/^([ \t]*)\/[\/*].*(?:(?:\r?\n|\r)\1[ \t].+)*/m,lookbehind:!0,greedy:!0}}),e.languages.insertBefore("sass","atrule",{"atrule-line":{pattern:/^(?:[ \t]*)[@+=].+/m,greedy:!0,inside:{atrule:/(?:@[\w-]+|[+=])/}}}),delete e.languages.sass.atrule;var t=/\$[-\w]+|#\{\$[-\w]+\}/,n=[/[+*\/%]|[=!]=|<=?|>=?|\b(?:and|not|or)\b/,{pattern:/(\s)-(?=\s)/,lookbehind:!0}];e.languages.insertBefore("sass","property",{"variable-line":{pattern:/^[ \t]*\$.+/m,greedy:!0,inside:{punctuation:/:/,variable:t,operator:n}},"property-line":{pattern:/^[ \t]*(?:[^:\s]+ *:.*|:[^:\s].*)/m,greedy:!0,inside:{property:[/[^:\s]+(?=\s*:)/,{pattern:/(:)[^:\s]+/,lookbehind:!0}],punctuation:/:/,variable:t,operator:n,important:e.languages.sass.important}}}),delete e.languages.sass.property,delete e.languages.sass.important,e.languages.insertBefore("sass","punctuation",{selector:{pattern:/^([ \t]*)\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*(?:,(?:\r?\n|\r)\1[ \t]+\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*)*/m,lookbehind:!0,greedy:!0}})}(a),a.languages.scss=a.languages.extend("css",{comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},atrule:{pattern:/@[\w-](?:\([^()]+\)|[^()\s]|\s+(?!\s))*?(?=\s+[{;])/,inside:{rule:/@[\w-]+/}},url:/(?:[-a-z]+-)?url(?=\()/i,selector:{pattern:/(?=\S)[^@;{}()]?(?:[^@;{}()\s]|\s+(?!\s)|#\{\$[-\w]+\})+(?=\s*\{(?:\}|\s|[^}][^:{}]*[:{][^}]))/,inside:{parent:{pattern:/&/,alias:"important"},placeholder:/%[-\w]+/,variable:/\$[-\w]+|#\{\$[-\w]+\}/}},property:{pattern:/(?:[-\w]|\$[-\w]|#\{\$[-\w]+\})+(?=\s*:)/,inside:{variable:/\$[-\w]+|#\{\$[-\w]+\}/}}}),a.languages.insertBefore("scss","atrule",{keyword:[/@(?:content|debug|each|else(?: if)?|extend|for|forward|function|if|import|include|mixin|return|use|warn|while)\b/i,{pattern:/( )(?:from|through)(?= )/,lookbehind:!0}]}),a.languages.insertBefore("scss","important",{variable:/\$[-\w]+|#\{\$[-\w]+\}/}),a.languages.insertBefore("scss","function",{"module-modifier":{pattern:/\b(?:as|hide|show|with)\b/i,alias:"keyword"},placeholder:{pattern:/%[-\w]+/,alias:"selector"},statement:{pattern:/\B!(?:default|optional)\b/i,alias:"keyword"},boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"},operator:{pattern:/(\s)(?:[-+*\/%]|[=!]=|<=?|>=?|and|not|or)(?=\s)/,lookbehind:!0}}),a.languages.scss.atrule.inside.rest=a.languages.scss,function(e){var t={pattern:/(\b\d+)(?:%|[a-z]+)/,lookbehind:!0},n={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0},r={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},url:{pattern:/\burl\((["']?).*?\1\)/i,greedy:!0},string:{pattern:/("|')(?:(?!\1)[^\\\r\n]|\\(?:\r\n|[\s\S]))*\1/,greedy:!0},interpolation:null,func:null,important:/\B!(?:important|optional)\b/i,keyword:{pattern:/(^|\s+)(?:(?:else|for|if|return|unless)(?=\s|$)|@[\w-]+)/,lookbehind:!0},hexcode:/#[\da-f]{3,6}/i,color:[/\b(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)\b/i,{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:t,number:n,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:t,boolean:/\b(?:false|true)\b/,operator:[/~|[+!\/%<>?=]=?|[-:]=|\*[*=]?|\.{2,3}|&&|\|\||\B-\B|\b(?:and|in|is(?: a| defined| not|nt)?|not|or)\b/],number:n,punctuation:/[{}()\[\];:,]/};r.interpolation={pattern:/\{[^\r\n}:]+\}/,alias:"variable",inside:{delimiter:{pattern:/^\{|\}$/,alias:"punctuation"},rest:r}},r.func={pattern:/[\w-]+\([^)]*\).*/,inside:{function:/^[^(]+/,rest:r}},e.languages.stylus={"atrule-declaration":{pattern:/(^[ \t]*)@.+/m,lookbehind:!0,inside:{atrule:/^@[\w-]+/,rest:r}},"variable-declaration":{pattern:/(^[ \t]*)[\w$-]+\s*.?=[ \t]*(?:\{[^{}]*\}|\S.*|$)/m,lookbehind:!0,inside:{variable:/^\S+/,rest:r}},statement:{pattern:/(^[ \t]*)(?:else|for|if|return|unless)[ \t].+/m,lookbehind:!0,inside:{keyword:/^\S+/,rest:r}},"property-declaration":{pattern:/((?:^|\{)([ \t]*))(?:[\w-]|\{[^}\r\n]+\})+(?:\s*:\s*|[ \t]+)(?!\s)[^{\r\n]*(?:;|[^{\r\n,]$(?!(?:\r?\n|\r)(?:\{|\2[ \t])))/m,lookbehind:!0,inside:{property:{pattern:/^[^\s:]+/,inside:{interpolation:r.interpolation}},rest:r}},selector:{pattern:/(^[ \t]*)(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)(?:(?:\r?\n|\r)(?:\1(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)))*(?:,$|\{|(?=(?:\r?\n|\r)(?:\{|\1[ \t])))/m,lookbehind:!0,inside:{interpolation:r.interpolation,comment:r.comment,punctuation:/[{},]/}},func:r.func,string:r.string,comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0,greedy:!0},interpolation:r.interpolation,punctuation:/[{}()\[\];:.]/}}(a),function(e){var t=e.util.clone(e.languages.typescript);e.languages.tsx=e.languages.extend("jsx",t),delete e.languages.tsx.parameter,delete e.languages.tsx["literal-property"];var n=e.languages.tsx.tag;n.pattern=RegExp(/(^|[^\w$]|(?=<\/))/.source+"(?:"+n.pattern.source+")",n.pattern.flags),n.lookbehind=!0}(a),a.languages.wasm={comment:[/\(;[\s\S]*?;\)/,{pattern:/;;.*/,greedy:!0}],string:{pattern:/"(?:\\[\s\S]|[^"\\])*"/,greedy:!0},keyword:[{pattern:/\b(?:align|offset)=/,inside:{operator:/=/}},{pattern:/\b(?:(?:f32|f64|i32|i64)(?:\.(?:abs|add|and|ceil|clz|const|convert_[su]\/i(?:32|64)|copysign|ctz|demote\/f64|div(?:_[su])?|eqz?|extend_[su]\/i32|floor|ge(?:_[su])?|gt(?:_[su])?|le(?:_[su])?|load(?:(?:8|16|32)_[su])?|lt(?:_[su])?|max|min|mul|neg?|nearest|or|popcnt|promote\/f32|reinterpret\/[fi](?:32|64)|rem_[su]|rot[lr]|shl|shr_[su]|sqrt|store(?:8|16|32)?|sub|trunc(?:_[su]\/f(?:32|64))?|wrap\/i64|xor))?|memory\.(?:grow|size))\b/,inside:{punctuation:/\./}},/\b(?:anyfunc|block|br(?:_if|_table)?|call(?:_indirect)?|data|drop|elem|else|end|export|func|get_(?:global|local)|global|if|import|local|loop|memory|module|mut|nop|offset|param|result|return|select|set_(?:global|local)|start|table|tee_local|then|type|unreachable)\b/],variable:/\$[\w!#$%&'*+\-./:<=>?@\\^`|~]+/,number:/[+-]?\b(?:\d(?:_?\d)*(?:\.\d(?:_?\d)*)?(?:[eE][+-]?\d(?:_?\d)*)?|0x[\da-fA-F](?:_?[\da-fA-F])*(?:\.[\da-fA-F](?:_?[\da-fA-D])*)?(?:[pP][+-]?\d(?:_?\d)*)?)\b|\binf\b|\bnan(?::0x[\da-fA-F](?:_?[\da-fA-D])*)?\b/,punctuation:/[()]/};const o=a},9901:e=>{e.exports&&(e.exports={core:{meta:{path:"components/prism-core.js",option:"mandatory"},core:"Core"},themes:{meta:{path:"themes/{id}.css",link:"index.html?theme={id}",exclusive:!0},prism:{title:"Default",option:"default"},"prism-dark":"Dark","prism-funky":"Funky","prism-okaidia":{title:"Okaidia",owner:"ocodia"},"prism-twilight":{title:"Twilight",owner:"remybach"},"prism-coy":{title:"Coy",owner:"tshedor"},"prism-solarizedlight":{title:"Solarized Light",owner:"hectormatos2011 "},"prism-tomorrow":{title:"Tomorrow Night",owner:"Rosey"}},languages:{meta:{path:"components/prism-{id}",noCSS:!0,examplesPath:"examples/prism-{id}",addCheckAll:!0},markup:{title:"Markup",alias:["html","xml","svg","mathml","ssml","atom","rss"],aliasTitles:{html:"HTML",xml:"XML",svg:"SVG",mathml:"MathML",ssml:"SSML",atom:"Atom",rss:"RSS"},option:"default"},css:{title:"CSS",option:"default",modify:"markup"},clike:{title:"C-like",option:"default"},javascript:{title:"JavaScript",require:"clike",modify:"markup",optional:"regex",alias:"js",option:"default"},abap:{title:"ABAP",owner:"dellagustin"},abnf:{title:"ABNF",owner:"RunDevelopment"},actionscript:{title:"ActionScript",require:"javascript",modify:"markup",owner:"Golmote"},ada:{title:"Ada",owner:"Lucretia"},agda:{title:"Agda",owner:"xy-ren"},al:{title:"AL",owner:"RunDevelopment"},antlr4:{title:"ANTLR4",alias:"g4",owner:"RunDevelopment"},apacheconf:{title:"Apache Configuration",owner:"GuiTeK"},apex:{title:"Apex",require:["clike","sql"],owner:"RunDevelopment"},apl:{title:"APL",owner:"ngn"},applescript:{title:"AppleScript",owner:"Golmote"},aql:{title:"AQL",owner:"RunDevelopment"},arduino:{title:"Arduino",require:"cpp",alias:"ino",owner:"dkern"},arff:{title:"ARFF",owner:"Golmote"},armasm:{title:"ARM Assembly",alias:"arm-asm",owner:"RunDevelopment"},arturo:{title:"Arturo",alias:"art",optional:["bash","css","javascript","markup","markdown","sql"],owner:"drkameleon"},asciidoc:{alias:"adoc",title:"AsciiDoc",owner:"Golmote"},aspnet:{title:"ASP.NET (C#)",require:["markup","csharp"],owner:"nauzilus"},asm6502:{title:"6502 Assembly",owner:"kzurawel"},asmatmel:{title:"Atmel AVR Assembly",owner:"cerkit"},autohotkey:{title:"AutoHotkey",owner:"aviaryan"},autoit:{title:"AutoIt",owner:"Golmote"},avisynth:{title:"AviSynth",alias:"avs",owner:"Zinfidel"},"avro-idl":{title:"Avro IDL",alias:"avdl",owner:"RunDevelopment"},awk:{title:"AWK",alias:"gawk",aliasTitles:{gawk:"GAWK"},owner:"RunDevelopment"},bash:{title:"Bash",alias:["sh","shell"],aliasTitles:{sh:"Shell",shell:"Shell"},owner:"zeitgeist87"},basic:{title:"BASIC",owner:"Golmote"},batch:{title:"Batch",owner:"Golmote"},bbcode:{title:"BBcode",alias:"shortcode",aliasTitles:{shortcode:"Shortcode"},owner:"RunDevelopment"},bbj:{title:"BBj",owner:"hyyan"},bicep:{title:"Bicep",owner:"johnnyreilly"},birb:{title:"Birb",require:"clike",owner:"Calamity210"},bison:{title:"Bison",require:"c",owner:"Golmote"},bnf:{title:"BNF",alias:"rbnf",aliasTitles:{rbnf:"RBNF"},owner:"RunDevelopment"},bqn:{title:"BQN",owner:"yewscion"},brainfuck:{title:"Brainfuck",owner:"Golmote"},brightscript:{title:"BrightScript",owner:"RunDevelopment"},bro:{title:"Bro",owner:"wayward710"},bsl:{title:"BSL (1C:Enterprise)",alias:"oscript",aliasTitles:{oscript:"OneScript"},owner:"Diversus23"},c:{title:"C",require:"clike",owner:"zeitgeist87"},csharp:{title:"C#",require:"clike",alias:["cs","dotnet"],owner:"mvalipour"},cpp:{title:"C++",require:"c",owner:"zeitgeist87"},cfscript:{title:"CFScript",require:"clike",alias:"cfc",owner:"mjclemente"},chaiscript:{title:"ChaiScript",require:["clike","cpp"],owner:"RunDevelopment"},cil:{title:"CIL",owner:"sbrl"},cilkc:{title:"Cilk/C",require:"c",alias:"cilk-c",owner:"OpenCilk"},cilkcpp:{title:"Cilk/C++",require:"cpp",alias:["cilk-cpp","cilk"],owner:"OpenCilk"},clojure:{title:"Clojure",owner:"troglotit"},cmake:{title:"CMake",owner:"mjrogozinski"},cobol:{title:"COBOL",owner:"RunDevelopment"},coffeescript:{title:"CoffeeScript",require:"javascript",alias:"coffee",owner:"R-osey"},concurnas:{title:"Concurnas",alias:"conc",owner:"jasontatton"},csp:{title:"Content-Security-Policy",owner:"ScottHelme"},cooklang:{title:"Cooklang",owner:"ahue"},coq:{title:"Coq",owner:"RunDevelopment"},crystal:{title:"Crystal",require:"ruby",owner:"MakeNowJust"},"css-extras":{title:"CSS Extras",require:"css",modify:"css",owner:"milesj"},csv:{title:"CSV",owner:"RunDevelopment"},cue:{title:"CUE",owner:"RunDevelopment"},cypher:{title:"Cypher",owner:"RunDevelopment"},d:{title:"D",require:"clike",owner:"Golmote"},dart:{title:"Dart",require:"clike",owner:"Golmote"},dataweave:{title:"DataWeave",owner:"machaval"},dax:{title:"DAX",owner:"peterbud"},dhall:{title:"Dhall",owner:"RunDevelopment"},diff:{title:"Diff",owner:"uranusjr"},django:{title:"Django/Jinja2",require:"markup-templating",alias:"jinja2",owner:"romanvm"},"dns-zone-file":{title:"DNS zone file",owner:"RunDevelopment",alias:"dns-zone"},docker:{title:"Docker",alias:"dockerfile",owner:"JustinBeckwith"},dot:{title:"DOT (Graphviz)",alias:"gv",optional:"markup",owner:"RunDevelopment"},ebnf:{title:"EBNF",owner:"RunDevelopment"},editorconfig:{title:"EditorConfig",owner:"osipxd"},eiffel:{title:"Eiffel",owner:"Conaclos"},ejs:{title:"EJS",require:["javascript","markup-templating"],owner:"RunDevelopment",alias:"eta",aliasTitles:{eta:"Eta"}},elixir:{title:"Elixir",owner:"Golmote"},elm:{title:"Elm",owner:"zwilias"},etlua:{title:"Embedded Lua templating",require:["lua","markup-templating"],owner:"RunDevelopment"},erb:{title:"ERB",require:["ruby","markup-templating"],owner:"Golmote"},erlang:{title:"Erlang",owner:"Golmote"},"excel-formula":{title:"Excel Formula",alias:["xlsx","xls"],owner:"RunDevelopment"},fsharp:{title:"F#",require:"clike",owner:"simonreynolds7"},factor:{title:"Factor",owner:"catb0t"},false:{title:"False",owner:"edukisto"},"firestore-security-rules":{title:"Firestore security rules",require:"clike",owner:"RunDevelopment"},flow:{title:"Flow",require:"javascript",owner:"Golmote"},fortran:{title:"Fortran",owner:"Golmote"},ftl:{title:"FreeMarker Template Language",require:"markup-templating",owner:"RunDevelopment"},gml:{title:"GameMaker Language",alias:"gamemakerlanguage",require:"clike",owner:"LiarOnce"},gap:{title:"GAP (CAS)",owner:"RunDevelopment"},gcode:{title:"G-code",owner:"RunDevelopment"},gdscript:{title:"GDScript",owner:"RunDevelopment"},gedcom:{title:"GEDCOM",owner:"Golmote"},gettext:{title:"gettext",alias:"po",owner:"RunDevelopment"},gherkin:{title:"Gherkin",owner:"hason"},git:{title:"Git",owner:"lgiraudel"},glsl:{title:"GLSL",require:"c",owner:"Golmote"},gn:{title:"GN",alias:"gni",owner:"RunDevelopment"},"linker-script":{title:"GNU Linker Script",alias:"ld",owner:"RunDevelopment"},go:{title:"Go",require:"clike",owner:"arnehormann"},"go-module":{title:"Go module",alias:"go-mod",owner:"RunDevelopment"},gradle:{title:"Gradle",require:"clike",owner:"zeabdelkhalek-badido18"},graphql:{title:"GraphQL",optional:"markdown",owner:"Golmote"},groovy:{title:"Groovy",require:"clike",owner:"robfletcher"},haml:{title:"Haml",require:"ruby",optional:["css","css-extras","coffeescript","erb","javascript","less","markdown","scss","textile"],owner:"Golmote"},handlebars:{title:"Handlebars",require:"markup-templating",alias:["hbs","mustache"],aliasTitles:{mustache:"Mustache"},owner:"Golmote"},haskell:{title:"Haskell",alias:"hs",owner:"bholst"},haxe:{title:"Haxe",require:"clike",optional:"regex",owner:"Golmote"},hcl:{title:"HCL",owner:"outsideris"},hlsl:{title:"HLSL",require:"c",owner:"RunDevelopment"},hoon:{title:"Hoon",owner:"matildepark"},http:{title:"HTTP",optional:["csp","css","hpkp","hsts","javascript","json","markup","uri"],owner:"danielgtaylor"},hpkp:{title:"HTTP Public-Key-Pins",owner:"ScottHelme"},hsts:{title:"HTTP Strict-Transport-Security",owner:"ScottHelme"},ichigojam:{title:"IchigoJam",owner:"BlueCocoa"},icon:{title:"Icon",owner:"Golmote"},"icu-message-format":{title:"ICU Message Format",owner:"RunDevelopment"},idris:{title:"Idris",alias:"idr",owner:"KeenS",require:"haskell"},ignore:{title:".ignore",owner:"osipxd",alias:["gitignore","hgignore","npmignore"],aliasTitles:{gitignore:".gitignore",hgignore:".hgignore",npmignore:".npmignore"}},inform7:{title:"Inform 7",owner:"Golmote"},ini:{title:"Ini",owner:"aviaryan"},io:{title:"Io",owner:"AlesTsurko"},j:{title:"J",owner:"Golmote"},java:{title:"Java",require:"clike",owner:"sherblot"},javadoc:{title:"JavaDoc",require:["markup","java","javadoclike"],modify:"java",optional:"scala",owner:"RunDevelopment"},javadoclike:{title:"JavaDoc-like",modify:["java","javascript","php"],owner:"RunDevelopment"},javastacktrace:{title:"Java stack trace",owner:"RunDevelopment"},jexl:{title:"Jexl",owner:"czosel"},jolie:{title:"Jolie",require:"clike",owner:"thesave"},jq:{title:"JQ",owner:"RunDevelopment"},jsdoc:{title:"JSDoc",require:["javascript","javadoclike","typescript"],modify:"javascript",optional:["actionscript","coffeescript"],owner:"RunDevelopment"},"js-extras":{title:"JS Extras",require:"javascript",modify:"javascript",optional:["actionscript","coffeescript","flow","n4js","typescript"],owner:"RunDevelopment"},json:{title:"JSON",alias:"webmanifest",aliasTitles:{webmanifest:"Web App Manifest"},owner:"CupOfTea696"},json5:{title:"JSON5",require:"json",owner:"RunDevelopment"},jsonp:{title:"JSONP",require:"json",owner:"RunDevelopment"},jsstacktrace:{title:"JS stack trace",owner:"sbrl"},"js-templates":{title:"JS Templates",require:"javascript",modify:"javascript",optional:["css","css-extras","graphql","markdown","markup","sql"],owner:"RunDevelopment"},julia:{title:"Julia",owner:"cdagnino"},keepalived:{title:"Keepalived Configure",owner:"dev-itsheng"},keyman:{title:"Keyman",owner:"mcdurdin"},kotlin:{title:"Kotlin",alias:["kt","kts"],aliasTitles:{kts:"Kotlin Script"},require:"clike",owner:"Golmote"},kumir:{title:"KuMir (\u041a\u0443\u041c\u0438\u0440)",alias:"kum",owner:"edukisto"},kusto:{title:"Kusto",owner:"RunDevelopment"},latex:{title:"LaTeX",alias:["tex","context"],aliasTitles:{tex:"TeX",context:"ConTeXt"},owner:"japborst"},latte:{title:"Latte",require:["clike","markup-templating","php"],owner:"nette"},less:{title:"Less",require:"css",optional:"css-extras",owner:"Golmote"},lilypond:{title:"LilyPond",require:"scheme",alias:"ly",owner:"RunDevelopment"},liquid:{title:"Liquid",require:"markup-templating",owner:"cinhtau"},lisp:{title:"Lisp",alias:["emacs","elisp","emacs-lisp"],owner:"JuanCaicedo"},livescript:{title:"LiveScript",owner:"Golmote"},llvm:{title:"LLVM IR",owner:"porglezomp"},log:{title:"Log file",optional:"javastacktrace",owner:"RunDevelopment"},lolcode:{title:"LOLCODE",owner:"Golmote"},lua:{title:"Lua",owner:"Golmote"},magma:{title:"Magma (CAS)",owner:"RunDevelopment"},makefile:{title:"Makefile",owner:"Golmote"},markdown:{title:"Markdown",require:"markup",optional:"yaml",alias:"md",owner:"Golmote"},"markup-templating":{title:"Markup templating",require:"markup",owner:"Golmote"},mata:{title:"Mata",owner:"RunDevelopment"},matlab:{title:"MATLAB",owner:"Golmote"},maxscript:{title:"MAXScript",owner:"RunDevelopment"},mel:{title:"MEL",owner:"Golmote"},mermaid:{title:"Mermaid",owner:"RunDevelopment"},metafont:{title:"METAFONT",owner:"LaeriExNihilo"},mizar:{title:"Mizar",owner:"Golmote"},mongodb:{title:"MongoDB",owner:"airs0urce",require:"javascript"},monkey:{title:"Monkey",owner:"Golmote"},moonscript:{title:"MoonScript",alias:"moon",owner:"RunDevelopment"},n1ql:{title:"N1QL",owner:"TMWilds"},n4js:{title:"N4JS",require:"javascript",optional:"jsdoc",alias:"n4jsd",owner:"bsmith-n4"},"nand2tetris-hdl":{title:"Nand To Tetris HDL",owner:"stephanmax"},naniscript:{title:"Naninovel Script",owner:"Elringus",alias:"nani"},nasm:{title:"NASM",owner:"rbmj"},neon:{title:"NEON",owner:"nette"},nevod:{title:"Nevod",owner:"nezaboodka"},nginx:{title:"nginx",owner:"volado"},nim:{title:"Nim",owner:"Golmote"},nix:{title:"Nix",owner:"Golmote"},nsis:{title:"NSIS",owner:"idleberg"},objectivec:{title:"Objective-C",require:"c",alias:"objc",owner:"uranusjr"},ocaml:{title:"OCaml",owner:"Golmote"},odin:{title:"Odin",owner:"edukisto"},opencl:{title:"OpenCL",require:"c",modify:["c","cpp"],owner:"Milania1"},openqasm:{title:"OpenQasm",alias:"qasm",owner:"RunDevelopment"},oz:{title:"Oz",owner:"Golmote"},parigp:{title:"PARI/GP",owner:"Golmote"},parser:{title:"Parser",require:"markup",owner:"Golmote"},pascal:{title:"Pascal",alias:"objectpascal",aliasTitles:{objectpascal:"Object Pascal"},owner:"Golmote"},pascaligo:{title:"Pascaligo",owner:"DefinitelyNotAGoat"},psl:{title:"PATROL Scripting Language",owner:"bertysentry"},pcaxis:{title:"PC-Axis",alias:"px",owner:"RunDevelopment"},peoplecode:{title:"PeopleCode",alias:"pcode",owner:"RunDevelopment"},perl:{title:"Perl",owner:"Golmote"},php:{title:"PHP",require:"markup-templating",owner:"milesj"},phpdoc:{title:"PHPDoc",require:["php","javadoclike"],modify:"php",owner:"RunDevelopment"},"php-extras":{title:"PHP Extras",require:"php",modify:"php",owner:"milesj"},"plant-uml":{title:"PlantUML",alias:"plantuml",owner:"RunDevelopment"},plsql:{title:"PL/SQL",require:"sql",owner:"Golmote"},powerquery:{title:"PowerQuery",alias:["pq","mscript"],owner:"peterbud"},powershell:{title:"PowerShell",owner:"nauzilus"},processing:{title:"Processing",require:"clike",owner:"Golmote"},prolog:{title:"Prolog",owner:"Golmote"},promql:{title:"PromQL",owner:"arendjr"},properties:{title:".properties",owner:"Golmote"},protobuf:{title:"Protocol Buffers",require:"clike",owner:"just-boris"},pug:{title:"Pug",require:["markup","javascript"],optional:["coffeescript","ejs","handlebars","less","livescript","markdown","scss","stylus","twig"],owner:"Golmote"},puppet:{title:"Puppet",owner:"Golmote"},pure:{title:"Pure",optional:["c","cpp","fortran"],owner:"Golmote"},purebasic:{title:"PureBasic",require:"clike",alias:"pbfasm",owner:"HeX0R101"},purescript:{title:"PureScript",require:"haskell",alias:"purs",owner:"sriharshachilakapati"},python:{title:"Python",alias:"py",owner:"multipetros"},qsharp:{title:"Q#",require:"clike",alias:"qs",owner:"fedonman"},q:{title:"Q (kdb+ database)",owner:"Golmote"},qml:{title:"QML",require:"javascript",owner:"RunDevelopment"},qore:{title:"Qore",require:"clike",owner:"temnroegg"},r:{title:"R",owner:"Golmote"},racket:{title:"Racket",require:"scheme",alias:"rkt",owner:"RunDevelopment"},cshtml:{title:"Razor C#",alias:"razor",require:["markup","csharp"],optional:["css","css-extras","javascript","js-extras"],owner:"RunDevelopment"},jsx:{title:"React JSX",require:["markup","javascript"],optional:["jsdoc","js-extras","js-templates"],owner:"vkbansal"},tsx:{title:"React TSX",require:["jsx","typescript"]},reason:{title:"Reason",require:"clike",owner:"Golmote"},regex:{title:"Regex",owner:"RunDevelopment"},rego:{title:"Rego",owner:"JordanSh"},renpy:{title:"Ren'py",alias:"rpy",owner:"HyuchiaDiego"},rescript:{title:"ReScript",alias:"res",owner:"vmarcosp"},rest:{title:"reST (reStructuredText)",owner:"Golmote"},rip:{title:"Rip",owner:"ravinggenius"},roboconf:{title:"Roboconf",owner:"Golmote"},robotframework:{title:"Robot Framework",alias:"robot",owner:"RunDevelopment"},ruby:{title:"Ruby",require:"clike",alias:"rb",owner:"samflores"},rust:{title:"Rust",owner:"Golmote"},sas:{title:"SAS",optional:["groovy","lua","sql"],owner:"Golmote"},sass:{title:"Sass (Sass)",require:"css",optional:"css-extras",owner:"Golmote"},scss:{title:"Sass (SCSS)",require:"css",optional:"css-extras",owner:"MoOx"},scala:{title:"Scala",require:"java",owner:"jozic"},scheme:{title:"Scheme",owner:"bacchus123"},"shell-session":{title:"Shell session",require:"bash",alias:["sh-session","shellsession"],owner:"RunDevelopment"},smali:{title:"Smali",owner:"RunDevelopment"},smalltalk:{title:"Smalltalk",owner:"Golmote"},smarty:{title:"Smarty",require:"markup-templating",optional:"php",owner:"Golmote"},sml:{title:"SML",alias:"smlnj",aliasTitles:{smlnj:"SML/NJ"},owner:"RunDevelopment"},solidity:{title:"Solidity (Ethereum)",alias:"sol",require:"clike",owner:"glachaud"},"solution-file":{title:"Solution file",alias:"sln",owner:"RunDevelopment"},soy:{title:"Soy (Closure Template)",require:"markup-templating",owner:"Golmote"},sparql:{title:"SPARQL",require:"turtle",owner:"Triply-Dev",alias:"rq"},"splunk-spl":{title:"Splunk SPL",owner:"RunDevelopment"},sqf:{title:"SQF: Status Quo Function (Arma 3)",require:"clike",owner:"RunDevelopment"},sql:{title:"SQL",owner:"multipetros"},squirrel:{title:"Squirrel",require:"clike",owner:"RunDevelopment"},stan:{title:"Stan",owner:"RunDevelopment"},stata:{title:"Stata Ado",require:["mata","java","python"],owner:"RunDevelopment"},iecst:{title:"Structured Text (IEC 61131-3)",owner:"serhioromano"},stylus:{title:"Stylus",owner:"vkbansal"},supercollider:{title:"SuperCollider",alias:"sclang",owner:"RunDevelopment"},swift:{title:"Swift",owner:"chrischares"},systemd:{title:"Systemd configuration file",owner:"RunDevelopment"},"t4-templating":{title:"T4 templating",owner:"RunDevelopment"},"t4-cs":{title:"T4 Text Templates (C#)",require:["t4-templating","csharp"],alias:"t4",owner:"RunDevelopment"},"t4-vb":{title:"T4 Text Templates (VB)",require:["t4-templating","vbnet"],owner:"RunDevelopment"},tap:{title:"TAP",owner:"isaacs",require:"yaml"},tcl:{title:"Tcl",owner:"PeterChaplin"},tt2:{title:"Template Toolkit 2",require:["clike","markup-templating"],owner:"gflohr"},textile:{title:"Textile",require:"markup",optional:"css",owner:"Golmote"},toml:{title:"TOML",owner:"RunDevelopment"},tremor:{title:"Tremor",alias:["trickle","troy"],owner:"darach",aliasTitles:{trickle:"trickle",troy:"troy"}},turtle:{title:"Turtle",alias:"trig",aliasTitles:{trig:"TriG"},owner:"jakubklimek"},twig:{title:"Twig",require:"markup-templating",owner:"brandonkelly"},typescript:{title:"TypeScript",require:"javascript",optional:"js-templates",alias:"ts",owner:"vkbansal"},typoscript:{title:"TypoScript",alias:"tsconfig",aliasTitles:{tsconfig:"TSConfig"},owner:"dkern"},unrealscript:{title:"UnrealScript",alias:["uscript","uc"],owner:"RunDevelopment"},uorazor:{title:"UO Razor Script",owner:"jaseowns"},uri:{title:"URI",alias:"url",aliasTitles:{url:"URL"},owner:"RunDevelopment"},v:{title:"V",require:"clike",owner:"taggon"},vala:{title:"Vala",require:"clike",optional:"regex",owner:"TemplarVolk"},vbnet:{title:"VB.Net",require:"basic",owner:"Bigsby"},velocity:{title:"Velocity",require:"markup",owner:"Golmote"},verilog:{title:"Verilog",owner:"a-rey"},vhdl:{title:"VHDL",owner:"a-rey"},vim:{title:"vim",owner:"westonganger"},"visual-basic":{title:"Visual Basic",alias:["vb","vba"],aliasTitles:{vba:"VBA"},owner:"Golmote"},warpscript:{title:"WarpScript",owner:"RunDevelopment"},wasm:{title:"WebAssembly",owner:"Golmote"},"web-idl":{title:"Web IDL",alias:"webidl",owner:"RunDevelopment"},wgsl:{title:"WGSL",owner:"Dr4gonthree"},wiki:{title:"Wiki markup",require:"markup",owner:"Golmote"},wolfram:{title:"Wolfram language",alias:["mathematica","nb","wl"],aliasTitles:{mathematica:"Mathematica",nb:"Mathematica Notebook"},owner:"msollami"},wren:{title:"Wren",owner:"clsource"},xeora:{title:"Xeora",require:"markup",alias:"xeoracube",aliasTitles:{xeoracube:"XeoraCube"},owner:"freakmaxi"},"xml-doc":{title:"XML doc (.net)",require:"markup",modify:["csharp","fsharp","vbnet"],owner:"RunDevelopment"},xojo:{title:"Xojo (REALbasic)",owner:"Golmote"},xquery:{title:"XQuery",require:"markup",owner:"Golmote"},yaml:{title:"YAML",alias:"yml",owner:"hason"},yang:{title:"YANG",owner:"RunDevelopment"},zig:{title:"Zig",owner:"RunDevelopment"}},plugins:{meta:{path:"plugins/{id}/prism-{id}",link:"plugins/{id}/"},"line-highlight":{title:"Line Highlight",description:"Highlights specific lines and/or line ranges."},"line-numbers":{title:"Line Numbers",description:"Line number at the beginning of code lines.",owner:"kuba-kubula"},"show-invisibles":{title:"Show Invisibles",description:"Show hidden characters such as tabs and line breaks.",optional:["autolinker","data-uri-highlight"]},autolinker:{title:"Autolinker",description:"Converts URLs and emails in code to clickable links. Parses Markdown links in comments."},wpd:{title:"WebPlatform Docs",description:'Makes tokens link to <a href="https://webplatform.github.io/docs/">WebPlatform.org documentation</a>. The links open in a new tab.'},"custom-class":{title:"Custom Class",description:"This plugin allows you to prefix Prism's default classes (<code>.comment</code> can become <code>.namespace--comment</code>) or replace them with your defined ones (like <code>.editor__comment</code>). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the <code>highlightAll</code> and <code>highlightAllUnder</code> methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},2885:(e,t,n)=>{const r=n(9901),a=n(9642),o=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...o,...Object.keys(Prism.languages)];a(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(6500).resolve(t)],delete Prism.languages[e],n(6500)(t),o.add(e)}))}i.silent=!1,e.exports=i},6726:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6726},6500:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6500},9642:e=>{"use strict";var t=function(){var e=function(){};function t(e,t){Array.isArray(e)?e.forEach(t):null!=e&&t(e,0)}function n(e){for(var t={},n=0,r=e.length;n<r;n++)t[e[n]]=!0;return t}function r(e){var n={},r=[];function a(r,o){if(!(r in n)){o.push(r);var i=o.indexOf(r);if(i<o.length-1)throw new Error("Circular dependency: "+o.slice(i).join(" -> "));var l={},s=e[r];if(s){function u(t){if(!(t in e))throw new Error(r+" depends on an unknown component "+t);if(!(t in l))for(var i in a(t,o),l[t]=!0,n[t])l[i]=!0}t(s.require,u),t(s.optional,u),t(s.modify,u)}n[r]=l,o.pop()}}return function(e){var t=n[e];return t||(a(e,r),t=n[e]),t}}function a(e){for(var t in e)return!0;return!1}return function(o,i,l){var s=function(e){var t={};for(var n in e){var r=e[n];for(var a in r)if("meta"!=a){var o=r[a];t[a]="string"==typeof o?{title:o}:o}}return t}(o),u=function(e){var n;return function(r){if(r in e)return r;if(!n)for(var a in n={},e){var o=e[a];t(o&&o.alias,(function(t){if(t in n)throw new Error(t+" cannot be alias for both "+a+" and "+n[t]);if(t in e)throw new Error(t+" cannot be alias of "+a+" because it is a component.");n[t]=a}))}return n[r]||r}}(s);i=i.map(u),l=(l||[]).map(u);var c=n(i),d=n(l);i.forEach((function e(n){var r=s[n];t(r&&r.require,(function(t){t in d||(c[t]=!0,e(t))}))}));for(var f,p=r(s),m=c;a(m);){for(var h in f={},m){var g=s[h];t(g&&g.modify,(function(e){e in d&&(f[e]=!0)}))}for(var v in d)if(!(v in c))for(var y in p(v))if(y in c){f[v]=!0;break}for(var b in m=f)c[b]=!0}var w={getIds:function(){var e=[];return w.load((function(t){e.push(t)})),e},load:function(t,n){return function(t,n,r,a){var o=a?a.series:void 0,i=a?a.parallel:e,l={},s={};function u(e){if(e in l)return l[e];s[e]=!0;var a,c=[];for(var d in t(e))d in n&&c.push(d);if(0===c.length)a=r(e);else{var f=i(c.map((function(e){var t=u(e);return delete s[e],t})));o?a=o(f,(function(){return r(e)})):r(e)}return l[e]=a}for(var c in n)u(c);var d=[];for(var f in s)d.push(l[f]);return i(d)}(p,c,t,n)}};return w}}();e.exports=t},2703:(e,t,n)=>{"use strict";var r=n(414);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,i){if(i!==r){var l=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw l.name="Invariant Violation",l}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},5697:(e,t,n)=>{e.exports=n(2703)()},414:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},4448:(e,t,n)=>{"use strict";var r=n(7294),a=n(7418),o=n(3840);function i(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(i(227));var l=new Set,s={};function u(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(s[e]=t,e=0;e<t.length;e++)l.add(t[e])}var d=!("undefined"==typeof window||void 0===window.document||void 0===window.document.createElement),f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p=Object.prototype.hasOwnProperty,m={},h={};function g(e,t,n,r,a,o,i){this.acceptsBooleans=2===t||3===t||4===t,this.attributeName=r,this.attributeNamespace=a,this.mustUseProperty=n,this.propertyName=e,this.type=t,this.sanitizeURL=o,this.removeEmptyString=i}var v={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach((function(e){v[e]=new g(e,0,!1,e,null,!1,!1)})),[["acceptCharset","accept-charset"],["className","class"],["htmlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];v[t]=new g(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){v[e]=new g(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach((function(e){v[e]=new g(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach((function(e){v[e]=new g(e,3,!1,e.toLowerCase(),null,!1,!1)})),["checked","multiple","muted","selected"].forEach((function(e){v[e]=new g(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){v[e]=new g(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){v[e]=new g(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((function(e){v[e]=new g(e,5,!1,e.toLowerCase(),null,!1,!1)}));var y=/[\-:]([a-z])/g;function b(e){return e[1].toUpperCase()}function w(e,t,n,r){var a=v.hasOwnProperty(t)?v[t]:null;(null!==a?0===a.type:!r&&(2<t.length&&("o"===t[0]||"O"===t[0])&&("n"===t[1]||"N"===t[1])))||(function(e,t,n,r){if(null==t||function(e,t,n,r){if(null!==n&&0===n.type)return!1;switch(typeof t){case"function":case"symbol":return!0;case"boolean":return!r&&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)||1>t}return!1}(t,n,a,r)&&(n=null),r||null===a?function(e){return!!p.call(h,e)||!p.call(m,e)&&(f.test(e)?h[e]=!0:(m[e]=!0,!1))}(t)&&(null===n?e.removeAttribute(t):e.setAttribute(t,""+n)):a.mustUseProperty?e[a.propertyName]=null===n?3!==a.type&&"":n:(t=a.attributeName,r=a.attributeNamespace,null===n?e.removeAttribute(t):(n=3===(a=a.type)||4===a&&!0===n?"":""+n,r?e.setAttributeNS(r,t,n):e.setAttribute(t,n))))}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-position overline-thickness paint-order panose-1 pointer-events rendering-intent shape-rendering stop-color stop-opacity strikethrough-position strikethrough-thickness stroke-dasharray stroke-dashoffset stroke-linecap stroke-linejoin stroke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var t=e.replace(y,b);v[t]=new g(t,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole xlink:role xlink:show xlink:title xlink:type".split(" ").forEach((function(e){var t=e.replace(y,b);v[t]=new g(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(y,b);v[t]=new g(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){v[e]=new g(e,1,!1,e.toLowerCase(),null,!1,!1)})),v.xlinkHref=new g("xlinkHref",1,!1,"xlink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){v[e]=new g(e,1,!1,e.toLowerCase(),null,!0,!0)}));var k=r.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,E=60103,S=60106,x=60107,_=60108,C=60114,T=60109,L=60110,R=60112,N=60113,A=60120,O=60115,P=60116,I=60121,D=60128,M=60129,F=60130,j=60131;if("function"==typeof Symbol&&Symbol.for){var B=Symbol.for;E=B("react.element"),S=B("react.portal"),x=B("react.fragment"),_=B("react.strict_mode"),C=B("react.profiler"),T=B("react.provider"),L=B("react.context"),R=B("react.forward_ref"),N=B("react.suspense"),A=B("react.suspense_list"),O=B("react.memo"),P=B("react.lazy"),I=B("react.block"),B("react.scope"),D=B("react.opaque.id"),M=B("react.debug_trace_mode"),F=B("react.offscreen"),j=B("react.legacy_hidden")}var z,$="function"==typeof Symbol&&Symbol.iterator;function U(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=$&&e[$]||e["@@iterator"])?e:null}function q(e){if(void 0===z)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);z=t&&t[1]||""}return"\n"+z+e}var H=!1;function G(e,t){if(!e||H)return"";H=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.construct(t,[])}catch(s){var r=s}Reflect.construct(e,[],t)}else{try{t.call()}catch(s){r=s}e.call(t.prototype)}else{try{throw Error()}catch(s){r=s}e()}}catch(s){if(s&&r&&"string"==typeof s.stack){for(var a=s.stack.split("\n"),o=r.stack.split("\n"),i=a.length-1,l=o.length-1;1<=i&&0<=l&&a[i]!==o[l];)l--;for(;1<=i&&0<=l;i--,l--)if(a[i]!==o[l]){if(1!==i||1!==l)do{if(i--,0>--l||a[i]!==o[l])return"\n"+a[i].replace(" at new "," at ")}while(1<=i&&0<=l);break}}}finally{H=!1,Error.prepareStackTrace=n}return(e=e?e.displayName||e.name:"")?q(e):""}function Z(e){switch(e.tag){case 5:return q(e.type);case 16:return q("Lazy");case 13:return q("Suspense");case 19:return q("SuspenseList");case 0:case 2:case 15:return e=G(e.type,!1);case 11:return e=G(e.type.render,!1);case 22:return e=G(e.type._render,!1);case 1:return e=G(e.type,!0);default:return""}}function Q(e){if(null==e)return null;if("function"==typeof e)return e.displayName||e.name||null;if("string"==typeof e)return e;switch(e){case x:return"Fragment";case S:return"Portal";case C:return"Profiler";case _:return"StrictMode";case N:return"Suspense";case A:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case L:return(e.displayName||"Context")+".Consumer";case T:return(e._context.displayName||"Context")+".Provider";case R:var t=e.render;return t=t.displayName||t.name||"",e.displayName||(""!==t?"ForwardRef("+t+")":"ForwardRef");case O:return Q(e.type);case I:return Q(e._render);case P:t=e._payload,e=e._init;try{return Q(e(t))}catch(n){}}return null}function V(e){switch(typeof e){case"boolean":case"number":case"object":case"string":case"undefined":return e;default:return""}}function W(e){var t=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===t||"radio"===t)}function K(e){e._valueTracker||(e._valueTracker=function(e){var t=W(e)?"checked":"value",n=Object.getOwnPropertyDescriptor(e.constructor.prototype,t),r=""+e[t];if(!e.hasOwnProperty(t)&&void 0!==n&&"function"==typeof n.get&&"function"==typeof n.set){var a=n.get,o=n.set;return Object.defineProperty(e,t,{configurable:!0,get:function(){return a.call(this)},set:function(e){r=""+e,o.call(this,e)}}),Object.defineProperty(e,t,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[t]}}}}(e))}function Y(e){if(!e)return!1;var t=e._valueTracker;if(!t)return!0;var n=t.getValue(),r="";return e&&(r=W(e)?e.checked?"true":"false":e.value),(e=r)!==n&&(t.setValue(e),!0)}function X(e){if(void 0===(e=e||("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement||e.body}catch(t){return e.body}}function J(e,t){var n=t.checked;return a({},t,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=n?n:e._wrapperState.initialChecked})}function ee(e,t){var n=null==t.defaultValue?"":t.defaultValue,r=null!=t.checked?t.checked:t.defaultChecked;n=V(null!=t.value?t.value:n),e._wrapperState={initialChecked:r,initialValue:n,controlled:"checkbox"===t.type||"radio"===t.type?null!=t.checked:null!=t.value}}function te(e,t){null!=(t=t.checked)&&w(e,"checked",t,!1)}function ne(e,t){te(e,t);var n=V(t.value),r=t.type;if(null!=n)"number"===r?(0===n&&""===e.value||e.value!=n)&&(e.value=""+n):e.value!==""+n&&(e.value=""+n);else if("submit"===r||"reset"===r)return void e.removeAttribute("value");t.hasOwnProperty("value")?ae(e,t.type,n):t.hasOwnProperty("defaultValue")&&ae(e,t.type,V(t.defaultValue)),null==t.checked&&null!=t.defaultChecked&&(e.defaultChecked=!!t.defaultChecked)}function re(e,t,n){if(t.hasOwnProperty("value")||t.hasOwnProperty("defaultValue")){var r=t.type;if(!("submit"!==r&&"reset"!==r||void 0!==t.value&&null!==t.value))return;t=""+e._wrapperState.initialValue,n||t===e.value||(e.value=t),e.defaultValue=t}""!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function ae(e,t,n){"number"===t&&X(e.ownerDocument)===e||(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultValue=""+n))}function oe(e,t){return e=a({children:void 0},t),(t=function(e){var t="";return r.Children.forEach(e,(function(e){null!=e&&(t+=e)})),t}(t.children))&&(e.children=t),e}function ie(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a<n.length;a++)t["$"+n[a]]=!0;for(n=0;n<e.length;n++)a=t.hasOwnProperty("$"+e[n].value),e[n].selected!==a&&(e[n].selected=a),a&&r&&(e[n].defaultSelected=!0)}else{for(n=""+V(n),t=null,a=0;a<e.length;a++){if(e[a].value===n)return e[a].selected=!0,void(r&&(e[a].defaultSelected=!0));null!==t||e[a].disabled||(t=e[a])}null!==t&&(t.selected=!0)}}function le(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(i(91));return a({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initialValue})}function se(e,t){var n=t.value;if(null==n){if(n=t.children,t=t.defaultValue,null!=n){if(null!=t)throw Error(i(92));if(Array.isArray(n)){if(!(1>=n.length))throw Error(i(93));n=n[0]}t=n}null==t&&(t=""),n=t}e._wrapperState={initialValue:V(n)}}function ue(e,t){var n=V(t.value),r=V(t.defaultValue);null!=n&&((n=""+n)!==e.value&&(e.value=n),null==t.defaultValue&&e.defaultValue!==n&&(e.defaultValue=n)),null!=r&&(e.defaultValue=""+r)}function ce(e){var t=e.textContent;t===e._wrapperState.initialValue&&""!==t&&null!==t&&(e.value=t)}var de="http://www.w3.org/1999/xhtml",fe="http://www.w3.org/2000/svg";function pe(e){switch(e){case"svg":return"http://www.w3.org/2000/svg";case"math":return"http://www.w3.org/1998/Math/MathML";default:return"http://www.w3.org/1999/xhtml"}}function me(e,t){return null==e||"http://www.w3.org/1999/xhtml"===e?pe(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var he,ge,ve=(ge=function(e,t){if(e.namespaceURI!==fe||"innerHTML"in e)e.innerHTML=t;else{for((he=he||document.createElement("div")).innerHTML="<svg>"+t.valueOf().toString()+"</svg>",t=he.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function ye(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var be={animationIterationCount:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,columnCount:!0,columns:!0,flex:!0,flexGrow:!0,flexPositive:!0,flexShrink:!0,flexNegative:!0,flexOrder:!0,gridArea:!0,gridRow:!0,gridRowEnd:!0,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},we=["Webkit","ms","Moz","O"];function ke(e,t,n){return null==t||"boolean"==typeof t||""===t?"":n||"number"!=typeof t||0===t||be.hasOwnProperty(e)&&be[e]?(""+t).trim():t+"px"}function Ee(e,t){for(var n in e=e.style,t)if(t.hasOwnProperty(n)){var r=0===n.indexOf("--"),a=ke(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,a):e[n]=a}}Object.keys(be).forEach((function(e){we.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),be[t]=be[e]}))}));var Se=a({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function xe(e,t){if(t){if(Se[e]&&(null!=t.children||null!=t.dangerouslySetInnerHTML))throw Error(i(137,e));if(null!=t.dangerouslySetInnerHTML){if(null!=t.children)throw Error(i(60));if("object"!=typeof t.dangerouslySetInnerHTML||!("__html"in t.dangerouslySetInnerHTML))throw Error(i(61))}if(null!=t.style&&"object"!=typeof t.style)throw Error(i(62))}}function _e(e,t){if(-1===e.indexOf("-"))return"string"==typeof t.is;switch(e){case"annotation-xml":case"color-profile":case"font-face":case"font-face-src":case"font-face-uri":case"font-face-format":case"font-face-name":case"missing-glyph":return!1;default:return!0}}function Ce(e){return(e=e.target||e.srcElement||window).correspondingUseElement&&(e=e.correspondingUseElement),3===e.nodeType?e.parentNode:e}var Te=null,Le=null,Re=null;function Ne(e){if(e=ra(e)){if("function"!=typeof Te)throw Error(i(280));var t=e.stateNode;t&&(t=oa(t),Te(e.stateNode,e.type,t))}}function Ae(e){Le?Re?Re.push(e):Re=[e]:Le=e}function Oe(){if(Le){var e=Le,t=Re;if(Re=Le=null,Ne(e),t)for(e=0;e<t.length;e++)Ne(t[e])}}function Pe(e,t){return e(t)}function Ie(e,t,n,r,a){return e(t,n,r,a)}function De(){}var Me=Pe,Fe=!1,je=!1;function Be(){null===Le&&null===Re||(De(),Oe())}function ze(e,t){var n=e.stateNode;if(null===n)return null;var r=oa(n);if(null===r)return null;n=r[t];e:switch(t){case"onClick":case"onClickCapture":case"onDoubleClick":case"onDoubleClickCapture":case"onMouseDown":case"onMouseDownCapture":case"onMouseMove":case"onMouseMoveCapture":case"onMouseUp":case"onMouseUpCapture":case"onMouseEnter":(r=!r.disabled)||(r=!("button"===(e=e.type)||"input"===e||"select"===e||"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!=typeof n)throw Error(i(231,t,typeof n));return n}var $e=!1;if(d)try{var Ue={};Object.defineProperty(Ue,"passive",{get:function(){$e=!0}}),window.addEventListener("test",Ue,Ue),window.removeEventListener("test",Ue,Ue)}catch(ge){$e=!1}function qe(e,t,n,r,a,o,i,l,s){var u=Array.prototype.slice.call(arguments,3);try{t.apply(n,u)}catch(c){this.onError(c)}}var He=!1,Ge=null,Ze=!1,Qe=null,Ve={onError:function(e){He=!0,Ge=e}};function We(e,t,n,r,a,o,i,l,s){He=!1,Ge=null,qe.apply(Ve,arguments)}function Ke(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!=(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ye(e){if(13===e.tag){var t=e.memoizedState;if(null===t&&(null!==(e=e.alternate)&&(t=e.memoizedState)),null!==t)return t.dehydrated}return null}function Xe(e){if(Ke(e)!==e)throw Error(i(188))}function Je(e){if(e=function(e){var t=e.alternate;if(!t){if(null===(t=Ke(e)))throw Error(i(188));return t!==e?null:e}for(var n=e,r=t;;){var a=n.return;if(null===a)break;var o=a.alternate;if(null===o){if(null!==(r=a.return)){n=r;continue}break}if(a.child===o.child){for(o=a.child;o;){if(o===n)return Xe(a),e;if(o===r)return Xe(a),t;o=o.sibling}throw Error(i(188))}if(n.return!==r.return)n=a,r=o;else{for(var l=!1,s=a.child;s;){if(s===n){l=!0,n=a,r=o;break}if(s===r){l=!0,r=a,n=o;break}s=s.sibling}if(!l){for(s=o.child;s;){if(s===n){l=!0,n=o,r=a;break}if(s===r){l=!0,r=o,n=a;break}s=s.sibling}if(!l)throw Error(i(189))}}if(n.alternate!==r)throw Error(i(190))}if(3!==n.tag)throw Error(i(188));return n.stateNode.current===n?e:t}(e),!e)return null;for(var t=e;;){if(5===t.tag||6===t.tag)return t;if(t.child)t.child.return=t,t=t.child;else{if(t===e)break;for(;!t.sibling;){if(!t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}}return null}function et(e,t){for(var n=e.alternate;null!==t;){if(t===e||t===n)return!0;t=t.return}return!1}var tt,nt,rt,at,ot=!1,it=[],lt=null,st=null,ut=null,ct=new Map,dt=new Map,ft=[],pt="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend dragstart drop compositionend compositionstart keydown keypress keyup input textInput copy cut paste click change contextmenu reset submit".split(" ");function mt(e,t,n,r,a){return{blockedOn:e,domEventName:t,eventSystemFlags:16|n,nativeEvent:a,targetContainers:[r]}}function ht(e,t){switch(e){case"focusin":case"focusout":lt=null;break;case"dragenter":case"dragleave":st=null;break;case"mouseover":case"mouseout":ut=null;break;case"pointerover":case"pointerout":ct.delete(t.pointerId);break;case"gotpointercapture":case"lostpointercapture":dt.delete(t.pointerId)}}function gt(e,t,n,r,a,o){return null===e||e.nativeEvent!==o?(e=mt(t,n,r,a,o),null!==t&&(null!==(t=ra(t))&&nt(t)),e):(e.eventSystemFlags|=r,t=e.targetContainers,null!==a&&-1===t.indexOf(a)&&t.push(a),e)}function vt(e){var t=na(e.target);if(null!==t){var n=Ke(t);if(null!==n)if(13===(t=n.tag)){if(null!==(t=Ye(n)))return e.blockedOn=t,void at(e.lanePriority,(function(){o.unstable_runWithPriority(e.priority,(function(){rt(n)}))}))}else if(3===t&&n.stateNode.hydrate)return void(e.blockedOn=3===n.tag?n.stateNode.containerInfo:null)}e.blockedOn=null}function yt(e){if(null!==e.blockedOn)return!1;for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n)return null!==(t=ra(n))&&nt(t),e.blockedOn=n,!1;t.shift()}return!0}function bt(e,t,n){yt(e)&&n.delete(t)}function wt(){for(ot=!1;0<it.length;){var e=it[0];if(null!==e.blockedOn){null!==(e=ra(e.blockedOn))&&tt(e);break}for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n){e.blockedOn=n;break}t.shift()}null===e.blockedOn&&it.shift()}null!==lt&&yt(lt)&&(lt=null),null!==st&&yt(st)&&(st=null),null!==ut&&yt(ut)&&(ut=null),ct.forEach(bt),dt.forEach(bt)}function kt(e,t){e.blockedOn===t&&(e.blockedOn=null,ot||(ot=!0,o.unstable_scheduleCallback(o.unstable_NormalPriority,wt)))}function Et(e){function t(t){return kt(t,e)}if(0<it.length){kt(it[0],e);for(var n=1;n<it.length;n++){var r=it[n];r.blockedOn===e&&(r.blockedOn=null)}}for(null!==lt&&kt(lt,e),null!==st&&kt(st,e),null!==ut&&kt(ut,e),ct.forEach(t),dt.forEach(t),n=0;n<ft.length;n++)(r=ft[n]).blockedOn===e&&(r.blockedOn=null);for(;0<ft.length&&null===(n=ft[0]).blockedOn;)vt(n),null===n.blockedOn&&ft.shift()}function St(e,t){var n={};return n[e.toLowerCase()]=t.toLowerCase(),n["Webkit"+e]="webkit"+t,n["Moz"+e]="moz"+t,n}var xt={animationend:St("Animation","AnimationEnd"),animationiteration:St("Animation","AnimationIteration"),animationstart:St("Animation","AnimationStart"),transitionend:St("Transition","TransitionEnd")},_t={},Ct={};function Tt(e){if(_t[e])return _t[e];if(!xt[e])return e;var t,n=xt[e];for(t in n)if(n.hasOwnProperty(t)&&t in Ct)return _t[e]=n[t];return e}d&&(Ct=document.createElement("div").style,"AnimationEvent"in window||(delete xt.animationend.animation,delete xt.animationiteration.animation,delete xt.animationstart.animation),"TransitionEvent"in window||delete xt.transitionend.transition);var Lt=Tt("animationend"),Rt=Tt("animationiteration"),Nt=Tt("animationstart"),At=Tt("transitionend"),Ot=new Map,Pt=new Map,It=["abort","abort",Lt,"animationEnd",Rt,"animationIteration",Nt,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange","durationChange","emptied","emptied","encrypted","encrypted","ended","ended","error","error","gotpointercapture","gotPointerCapture","load","load","loadeddata","loadedData","loadedmetadata","loadedMetadata","loadstart","loadStart","lostpointercapture","lostPointerCapture","playing","playing","progress","progress","seeking","seeking","stalled","stalled","suspend","suspend","timeupdate","timeUpdate",At,"transitionEnd","waiting","waiting"];function Dt(e,t){for(var n=0;n<e.length;n+=2){var r=e[n],a=e[n+1];a="on"+(a[0].toUpperCase()+a.slice(1)),Pt.set(r,t),Ot.set(r,a),u(a,[r])}}(0,o.unstable_now)();var Mt=8;function Ft(e){if(0!=(1&e))return Mt=15,1;if(0!=(2&e))return Mt=14,2;if(0!=(4&e))return Mt=13,4;var t=24&e;return 0!==t?(Mt=12,t):0!=(32&e)?(Mt=11,32):0!==(t=192&e)?(Mt=10,t):0!=(256&e)?(Mt=9,256):0!==(t=3584&e)?(Mt=8,t):0!=(4096&e)?(Mt=7,4096):0!==(t=4186112&e)?(Mt=6,t):0!==(t=62914560&e)?(Mt=5,t):67108864&e?(Mt=4,67108864):0!=(134217728&e)?(Mt=3,134217728):0!==(t=805306368&e)?(Mt=2,t):0!=(1073741824&e)?(Mt=1,1073741824):(Mt=8,e)}function jt(e,t){var n=e.pendingLanes;if(0===n)return Mt=0;var r=0,a=0,o=e.expiredLanes,i=e.suspendedLanes,l=e.pingedLanes;if(0!==o)r=o,a=Mt=15;else if(0!==(o=134217727&n)){var s=o&~i;0!==s?(r=Ft(s),a=Mt):0!==(l&=o)&&(r=Ft(l),a=Mt)}else 0!==(o=n&~i)?(r=Ft(o),a=Mt):0!==l&&(r=Ft(l),a=Mt);if(0===r)return 0;if(r=n&((0>(r=31-Ht(r))?0:1<<r)<<1)-1,0!==t&&t!==r&&0==(t&i)){if(Ft(t),a<=Mt)return t;Mt=a}if(0!==(t=e.entangledLanes))for(e=e.entanglements,t&=r;0<t;)a=1<<(n=31-Ht(t)),r|=e[n],t&=~a;return r}function Bt(e){return 0!==(e=-1073741825&e.pendingLanes)?e:1073741824&e?1073741824:0}function zt(e,t){switch(e){case 15:return 1;case 14:return 2;case 12:return 0===(e=$t(24&~t))?zt(10,t):e;case 10:return 0===(e=$t(192&~t))?zt(8,t):e;case 8:return 0===(e=$t(3584&~t))&&(0===(e=$t(4186112&~t))&&(e=512)),e;case 2:return 0===(t=$t(805306368&~t))&&(t=268435456),t}throw Error(i(358,e))}function $t(e){return e&-e}function Ut(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function qt(e,t,n){e.pendingLanes|=t;var r=t-1;e.suspendedLanes&=r,e.pingedLanes&=r,(e=e.eventTimes)[t=31-Ht(t)]=n}var Ht=Math.clz32?Math.clz32:function(e){return 0===e?32:31-(Gt(e)/Zt|0)|0},Gt=Math.log,Zt=Math.LN2;var Qt=o.unstable_UserBlockingPriority,Vt=o.unstable_runWithPriority,Wt=!0;function Kt(e,t,n,r){Fe||De();var a=Xt,o=Fe;Fe=!0;try{Ie(a,e,t,n,r)}finally{(Fe=o)||Be()}}function Yt(e,t,n,r){Vt(Qt,Xt.bind(null,e,t,n,r))}function Xt(e,t,n,r){var a;if(Wt)if((a=0==(4&t))&&0<it.length&&-1<pt.indexOf(e))e=mt(null,e,t,n,r),it.push(e);else{var o=Jt(e,t,n,r);if(null===o)a&&ht(e,r);else{if(a){if(-1<pt.indexOf(e))return e=mt(o,e,t,n,r),void it.push(e);if(function(e,t,n,r,a){switch(t){case"focusin":return lt=gt(lt,e,t,n,r,a),!0;case"dragenter":return st=gt(st,e,t,n,r,a),!0;case"mouseover":return ut=gt(ut,e,t,n,r,a),!0;case"pointerover":var o=a.pointerId;return ct.set(o,gt(ct.get(o)||null,e,t,n,r,a)),!0;case"gotpointercapture":return o=a.pointerId,dt.set(o,gt(dt.get(o)||null,e,t,n,r,a)),!0}return!1}(o,e,t,n,r))return;ht(e,r)}Dr(e,t,r,null,n)}}}function Jt(e,t,n,r){var a=Ce(r);if(null!==(a=na(a))){var o=Ke(a);if(null===o)a=null;else{var i=o.tag;if(13===i){if(null!==(a=Ye(o)))return a;a=null}else if(3===i){if(o.stateNode.hydrate)return 3===o.tag?o.stateNode.containerInfo:null;a=null}else o!==a&&(a=null)}}return Dr(e,t,r,a,n),null}var en=null,tn=null,nn=null;function rn(){if(nn)return nn;var e,t,n=tn,r=n.length,a="value"in en?en.value:en.textContent,o=a.length;for(e=0;e<r&&n[e]===a[e];e++);var i=r-e;for(t=1;t<=i&&n[r-t]===a[o-t];t++);return nn=a.slice(e,1<t?1-t:void 0)}function an(e){var t=e.keyCode;return"charCode"in e?0===(e=e.charCode)&&13===t&&(e=13):e=t,10===e&&(e=13),32<=e||13===e?e:0}function on(){return!0}function ln(){return!1}function sn(e){function t(t,n,r,a,o){for(var i in this._reactName=t,this._targetInst=r,this.type=n,this.nativeEvent=a,this.target=o,this.currentTarget=null,e)e.hasOwnProperty(i)&&(t=e[i],this[i]=t?t(a):a[i]);return this.isDefaultPrevented=(null!=a.defaultPrevented?a.defaultPrevented:!1===a.returnValue)?on:ln,this.isPropagationStopped=ln,this}return a(t.prototype,{preventDefault:function(){this.defaultPrevented=!0;var e=this.nativeEvent;e&&(e.preventDefault?e.preventDefault():"unknown"!=typeof e.returnValue&&(e.returnValue=!1),this.isDefaultPrevented=on)},stopPropagation:function(){var e=this.nativeEvent;e&&(e.stopPropagation?e.stopPropagation():"unknown"!=typeof e.cancelBubble&&(e.cancelBubble=!0),this.isPropagationStopped=on)},persist:function(){},isPersistent:on}),t}var un,cn,dn,fn={eventPhase:0,bubbles:0,cancelable:0,timeStamp:function(e){return e.timeStamp||Date.now()},defaultPrevented:0,isTrusted:0},pn=sn(fn),mn=a({},fn,{view:0,detail:0}),hn=sn(mn),gn=a({},mn,{screenX:0,screenY:0,clientX:0,clientY:0,pageX:0,pageY:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,getModifierState:Ln,button:0,buttons:0,relatedTarget:function(e){return void 0===e.relatedTarget?e.fromElement===e.srcElement?e.toElement:e.fromElement:e.relatedTarget},movementX:function(e){return"movementX"in e?e.movementX:(e!==dn&&(dn&&"mousemove"===e.type?(un=e.screenX-dn.screenX,cn=e.screenY-dn.screenY):cn=un=0,dn=e),un)},movementY:function(e){return"movementY"in e?e.movementY:cn}}),vn=sn(gn),yn=sn(a({},gn,{dataTransfer:0})),bn=sn(a({},mn,{relatedTarget:0})),wn=sn(a({},fn,{animationName:0,elapsedTime:0,pseudoElement:0})),kn=a({},fn,{clipboardData:function(e){return"clipboardData"in e?e.clipboardData:window.clipboardData}}),En=sn(kn),Sn=sn(a({},fn,{data:0})),xn={Esc:"Escape",Spacebar:" ",Left:"ArrowLeft",Up:"ArrowUp",Right:"ArrowRight",Down:"ArrowDown",Del:"Delete",Win:"OS",Menu:"ContextMenu",Apps:"ContextMenu",Scroll:"ScrollLock",MozPrintableKey:"Unidentified"},_n={8:"Backspace",9:"Tab",12:"Clear",13:"Enter",16:"Shift",17:"Control",18:"Alt",19:"Pause",20:"CapsLock",27:"Escape",32:" ",33:"PageUp",34:"PageDown",35:"End",36:"Home",37:"ArrowLeft",38:"ArrowUp",39:"ArrowRight",40:"ArrowDown",45:"Insert",46:"Delete",112:"F1",113:"F2",114:"F3",115:"F4",116:"F5",117:"F6",118:"F7",119:"F8",120:"F9",121:"F10",122:"F11",123:"F12",144:"NumLock",145:"ScrollLock",224:"Meta"},Cn={Alt:"altKey",Control:"ctrlKey",Meta:"metaKey",Shift:"shiftKey"};function Tn(e){var t=this.nativeEvent;return t.getModifierState?t.getModifierState(e):!!(e=Cn[e])&&!!t[e]}function Ln(){return Tn}var Rn=a({},mn,{key:function(e){if(e.key){var t=xn[e.key]||e.key;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=an(e))?"Enter":String.fromCharCode(e):"keydown"===e.type||"keyup"===e.type?_n[e.keyCode]||"Unidentified":""},code:0,location:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,repeat:0,locale:0,getModifierState:Ln,charCode:function(e){return"keypress"===e.type?an(e):0},keyCode:function(e){return"keydown"===e.type||"keyup"===e.type?e.keyCode:0},which:function(e){return"keypress"===e.type?an(e):"keydown"===e.type||"keyup"===e.type?e.keyCode:0}}),Nn=sn(Rn),An=sn(a({},gn,{pointerId:0,width:0,height:0,pressure:0,tangentialPressure:0,tiltX:0,tiltY:0,twist:0,pointerType:0,isPrimary:0})),On=sn(a({},mn,{touches:0,targetTouches:0,changedTouches:0,altKey:0,metaKey:0,ctrlKey:0,shiftKey:0,getModifierState:Ln})),Pn=sn(a({},fn,{propertyName:0,elapsedTime:0,pseudoElement:0})),In=a({},gn,{deltaX:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Dn=sn(In),Mn=[9,13,27,32],Fn=d&&"CompositionEvent"in window,jn=null;d&&"documentMode"in document&&(jn=document.documentMode);var Bn=d&&"TextEvent"in window&&!jn,zn=d&&(!Fn||jn&&8<jn&&11>=jn),$n=String.fromCharCode(32),Un=!1;function qn(e,t){switch(e){case"keyup":return-1!==Mn.indexOf(t.keyCode);case"keydown":return 229!==t.keyCode;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function Hn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var Gn=!1;var Zn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function Qn(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return"input"===t?!!Zn[e.type]:"textarea"===t}function Vn(e,t,n,r){Ae(r),0<(t=Fr(t,"onChange")).length&&(n=new pn("onChange","change",null,n,r),e.push({event:n,listeners:t}))}var Wn=null,Kn=null;function Yn(e){Rr(e,0)}function Xn(e){if(Y(aa(e)))return e}function Jn(e,t){if("change"===e)return t}var er=!1;if(d){var tr;if(d){var nr="oninput"in document;if(!nr){var rr=document.createElement("div");rr.setAttribute("oninput","return;"),nr="function"==typeof rr.oninput}tr=nr}else tr=!1;er=tr&&(!document.documentMode||9<document.documentMode)}function ar(){Wn&&(Wn.detachEvent("onpropertychange",or),Kn=Wn=null)}function or(e){if("value"===e.propertyName&&Xn(Kn)){var t=[];if(Vn(t,Kn,e,Ce(e)),e=Yn,Fe)e(t);else{Fe=!0;try{Pe(e,t)}finally{Fe=!1,Be()}}}}function ir(e,t,n){"focusin"===e?(ar(),Kn=n,(Wn=t).attachEvent("onpropertychange",or)):"focusout"===e&&ar()}function lr(e){if("selectionchange"===e||"keyup"===e||"keydown"===e)return Xn(Kn)}function sr(e,t){if("click"===e)return Xn(t)}function ur(e,t){if("input"===e||"change"===e)return Xn(t)}var cr="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},dr=Object.prototype.hasOwnProperty;function fr(e,t){if(cr(e,t))return!0;if("object"!=typeof e||null===e||"object"!=typeof t||null===t)return!1;var n=Object.keys(e),r=Object.keys(t);if(n.length!==r.length)return!1;for(r=0;r<n.length;r++)if(!dr.call(t,n[r])||!cr(e[n[r]],t[n[r]]))return!1;return!0}function pr(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function mr(e,t){var n,r=pr(e);for(e=0;r;){if(3===r.nodeType){if(n=e+r.textContent.length,e<=t&&n>=t)return{node:r,offset:t-e};e=n}e:{for(;r;){if(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=pr(r)}}function hr(e,t){return!(!e||!t)&&(e===t||(!e||3!==e.nodeType)&&(t&&3===t.nodeType?hr(e,t.parentNode):"contains"in e?e.contains(t):!!e.compareDocumentPosition&&!!(16&e.compareDocumentPosition(t))))}function gr(){for(var e=window,t=X();t instanceof e.HTMLIFrameElement;){try{var n="string"==typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=X((e=t.contentWindow).document)}return t}function vr(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&("input"===t&&("text"===e.type||"search"===e.type||"tel"===e.type||"url"===e.type||"password"===e.type)||"textarea"===t||"true"===e.contentEditable)}var yr=d&&"documentMode"in document&&11>=document.documentMode,br=null,wr=null,kr=null,Er=!1;function Sr(e,t,n){var r=n.window===n?n.document:9===n.nodeType?n:n.ownerDocument;Er||null==br||br!==X(r)||("selectionStart"in(r=br)&&vr(r)?r={start:r.selectionStart,end:r.selectionEnd}:r={anchorNode:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&fr(kr,r)||(kr=r,0<(r=Fr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({event:t,listeners:r}),t.target=br)))}Dt("cancel cancel click click close close contextmenu contextMenu copy copy cut cut auxclick auxClick dblclick doubleClick dragend dragEnd dragstart dragStart drop drop focusin focus focusout blur input input invalid invalid keydown keyDown keypress keyPress keyup keyUp mousedown mouseDown mouseup mouseUp paste paste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(" "),0),Dt("drag drag dragenter dragEnter dragexit dragExit dragleave dragLeave dragover dragOver mousemove mouseMove mouseout mouseOut mouseover mouseOver pointermove pointerMove pointerout pointerOut pointerover pointerOver scroll scroll toggle toggle touchmove touchMove wheel wheel".split(" "),1),Dt(It,2);for(var xr="change selectionchange textInput compositionstart compositionend compositionupdate".split(" "),_r=0;_r<xr.length;_r++)Pt.set(xr[_r],0);c("onMouseEnter",["mouseout","mouseover"]),c("onMouseLeave",["mouseout","mouseover"]),c("onPointerEnter",["pointerout","pointerover"]),c("onPointerLeave",["pointerout","pointerover"]),u("onChange","change click focusin focusout input keydown keyup selectionchange".split(" ")),u("onSelect","focusout contextmenu dragend focusin keydown keyup mousedown mouseup selectionchange".split(" ")),u("onBeforeInput",["compositionend","keypress","textInput","paste"]),u("onCompositionEnd","compositionend focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionStart","compositionstart focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionUpdate","compositionupdate focusout keydown keypress keyup mousedown".split(" "));var Cr="abort canplay canplaythrough durationchange emptied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend timeupdate volumechange waiting".split(" "),Tr=new Set("cancel close invalid load scroll toggle".split(" ").concat(Cr));function Lr(e,t,n){var r=e.type||"unknown-event";e.currentTarget=n,function(e,t,n,r,a,o,l,s,u){if(We.apply(this,arguments),He){if(!He)throw Error(i(198));var c=Ge;He=!1,Ge=null,Ze||(Ze=!0,Qe=c)}}(r,t,void 0,e),e.currentTarget=null}function Rr(e,t){t=0!=(4&t);for(var n=0;n<e.length;n++){var r=e[n],a=r.event;r=r.listeners;e:{var o=void 0;if(t)for(var i=r.length-1;0<=i;i--){var l=r[i],s=l.instance,u=l.currentTarget;if(l=l.listener,s!==o&&a.isPropagationStopped())break e;Lr(a,l,u),o=s}else for(i=0;i<r.length;i++){if(s=(l=r[i]).instance,u=l.currentTarget,l=l.listener,s!==o&&a.isPropagationStopped())break e;Lr(a,l,u),o=s}}}if(Ze)throw e=Qe,Ze=!1,Qe=null,e}function Nr(e,t){var n=ia(t),r=e+"__bubble";n.has(r)||(Ir(t,e,2,!1),n.add(r))}var Ar="_reactListening"+Math.random().toString(36).slice(2);function Or(e){e[Ar]||(e[Ar]=!0,l.forEach((function(t){Tr.has(t)||Pr(t,!1,e,null),Pr(t,!0,e,null)})))}function Pr(e,t,n,r){var a=4<arguments.length&&void 0!==arguments[4]?arguments[4]:0,o=n;if("selectionchange"===e&&9!==n.nodeType&&(o=n.ownerDocument),null!==r&&!t&&Tr.has(e)){if("scroll"!==e)return;a|=2,o=r}var i=ia(o),l=e+"__"+(t?"capture":"bubble");i.has(l)||(t&&(a|=4),Ir(o,e,a,t),i.add(l))}function Ir(e,t,n,r){var a=Pt.get(t);switch(void 0===a?2:a){case 0:a=Kt;break;case 1:a=Yt;break;default:a=Xt}n=a.bind(null,t,n,e),a=void 0,!$e||"touchstart"!==t&&"touchmove"!==t&&"wheel"!==t||(a=!0),r?void 0!==a?e.addEventListener(t,n,{capture:!0,passive:a}):e.addEventListener(t,n,!0):void 0!==a?e.addEventListener(t,n,{passive:a}):e.addEventListener(t,n,!1)}function Dr(e,t,n,r,a){var o=r;if(0==(1&t)&&0==(2&t)&&null!==r)e:for(;;){if(null===r)return;var i=r.tag;if(3===i||4===i){var l=r.stateNode.containerInfo;if(l===a||8===l.nodeType&&l.parentNode===a)break;if(4===i)for(i=r.return;null!==i;){var s=i.tag;if((3===s||4===s)&&((s=i.stateNode.containerInfo)===a||8===s.nodeType&&s.parentNode===a))return;i=i.return}for(;null!==l;){if(null===(i=na(l)))return;if(5===(s=i.tag)||6===s){r=o=i;continue e}l=l.parentNode}}r=r.return}!function(e,t,n){if(je)return e(t,n);je=!0;try{Me(e,t,n)}finally{je=!1,Be()}}((function(){var r=o,a=Ce(n),i=[];e:{var l=Ot.get(e);if(void 0!==l){var s=pn,u=e;switch(e){case"keypress":if(0===an(n))break e;case"keydown":case"keyup":s=Nn;break;case"focusin":u="focus",s=bn;break;case"focusout":u="blur",s=bn;break;case"beforeblur":case"afterblur":s=bn;break;case"click":if(2===n.button)break e;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":s=vn;break;case"drag":case"dragend":case"dragenter":case"dragexit":case"dragleave":case"dragover":case"dragstart":case"drop":s=yn;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":s=On;break;case Lt:case Rt:case Nt:s=wn;break;case At:s=Pn;break;case"scroll":s=hn;break;case"wheel":s=Dn;break;case"copy":case"cut":case"paste":s=En;break;case"gotpointercapture":case"lostpointercapture":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":s=An}var c=0!=(4&t),d=!c&&"scroll"===e,f=c?null!==l?l+"Capture":null:l;c=[];for(var p,m=r;null!==m;){var h=(p=m).stateNode;if(5===p.tag&&null!==h&&(p=h,null!==f&&(null!=(h=ze(m,f))&&c.push(Mr(m,h,p)))),d)break;m=m.return}0<c.length&&(l=new s(l,u,null,n,a),i.push({event:l,listeners:c}))}}if(0==(7&t)){if(s="mouseout"===e||"pointerout"===e,(!(l="mouseover"===e||"pointerover"===e)||0!=(16&t)||!(u=n.relatedTarget||n.fromElement)||!na(u)&&!u[ea])&&(s||l)&&(l=a.window===a?a:(l=a.ownerDocument)?l.defaultView||l.parentWindow:window,s?(s=r,null!==(u=(u=n.relatedTarget||n.toElement)?na(u):null)&&(u!==(d=Ke(u))||5!==u.tag&&6!==u.tag)&&(u=null)):(s=null,u=r),s!==u)){if(c=vn,h="onMouseLeave",f="onMouseEnter",m="mouse","pointerout"!==e&&"pointerover"!==e||(c=An,h="onPointerLeave",f="onPointerEnter",m="pointer"),d=null==s?l:aa(s),p=null==u?l:aa(u),(l=new c(h,m+"leave",s,n,a)).target=d,l.relatedTarget=p,h=null,na(a)===r&&((c=new c(f,m+"enter",u,n,a)).target=p,c.relatedTarget=d,h=c),d=h,s&&u)e:{for(f=u,m=0,p=c=s;p;p=jr(p))m++;for(p=0,h=f;h;h=jr(h))p++;for(;0<m-p;)c=jr(c),m--;for(;0<p-m;)f=jr(f),p--;for(;m--;){if(c===f||null!==f&&c===f.alternate)break e;c=jr(c),f=jr(f)}c=null}else c=null;null!==s&&Br(i,l,s,c,!1),null!==u&&null!==d&&Br(i,d,u,c,!0)}if("select"===(s=(l=r?aa(r):window).nodeName&&l.nodeName.toLowerCase())||"input"===s&&"file"===l.type)var g=Jn;else if(Qn(l))if(er)g=ur;else{g=lr;var v=ir}else(s=l.nodeName)&&"input"===s.toLowerCase()&&("checkbox"===l.type||"radio"===l.type)&&(g=sr);switch(g&&(g=g(e,r))?Vn(i,g,n,a):(v&&v(e,l,r),"focusout"===e&&(v=l._wrapperState)&&v.controlled&&"number"===l.type&&ae(l,"number",l.value)),v=r?aa(r):window,e){case"focusin":(Qn(v)||"true"===v.contentEditable)&&(br=v,wr=r,kr=null);break;case"focusout":kr=wr=br=null;break;case"mousedown":Er=!0;break;case"contextmenu":case"mouseup":case"dragend":Er=!1,Sr(i,n,a);break;case"selectionchange":if(yr)break;case"keydown":case"keyup":Sr(i,n,a)}var y;if(Fn)e:{switch(e){case"compositionstart":var b="onCompositionStart";break e;case"compositionend":b="onCompositionEnd";break e;case"compositionupdate":b="onCompositionUpdate";break e}b=void 0}else Gn?qn(e,n)&&(b="onCompositionEnd"):"keydown"===e&&229===n.keyCode&&(b="onCompositionStart");b&&(zn&&"ko"!==n.locale&&(Gn||"onCompositionStart"!==b?"onCompositionEnd"===b&&Gn&&(y=rn()):(tn="value"in(en=a)?en.value:en.textContent,Gn=!0)),0<(v=Fr(r,b)).length&&(b=new Sn(b,e,null,n,a),i.push({event:b,listeners:v}),y?b.data=y:null!==(y=Hn(n))&&(b.data=y))),(y=Bn?function(e,t){switch(e){case"compositionend":return Hn(t);case"keypress":return 32!==t.which?null:(Un=!0,$n);case"textInput":return(e=t.data)===$n&&Un?null:e;default:return null}}(e,n):function(e,t){if(Gn)return"compositionend"===e||!Fn&&qn(e,t)?(e=rn(),nn=tn=en=null,Gn=!1,e):null;switch(e){case"paste":default:return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1<t.char.length)return t.char;if(t.which)return String.fromCharCode(t.which)}return null;case"compositionend":return zn&&"ko"!==t.locale?null:t.data}}(e,n))&&(0<(r=Fr(r,"onBeforeInput")).length&&(a=new Sn("onBeforeInput","beforeinput",null,n,a),i.push({event:a,listeners:r}),a.data=y))}Rr(i,t)}))}function Mr(e,t,n){return{instance:e,listener:t,currentTarget:n}}function Fr(e,t){for(var n=t+"Capture",r=[];null!==e;){var a=e,o=a.stateNode;5===a.tag&&null!==o&&(a=o,null!=(o=ze(e,n))&&r.unshift(Mr(e,o,a)),null!=(o=ze(e,t))&&r.push(Mr(e,o,a))),e=e.return}return r}function jr(e){if(null===e)return null;do{e=e.return}while(e&&5!==e.tag);return e||null}function Br(e,t,n,r,a){for(var o=t._reactName,i=[];null!==n&&n!==r;){var l=n,s=l.alternate,u=l.stateNode;if(null!==s&&s===r)break;5===l.tag&&null!==u&&(l=u,a?null!=(s=ze(n,o))&&i.unshift(Mr(n,s,l)):a||null!=(s=ze(n,o))&&i.push(Mr(n,s,l))),n=n.return}0!==i.length&&e.push({event:t,listeners:i})}function zr(){}var $r=null,Ur=null;function qr(e,t){switch(e){case"button":case"input":case"select":case"textarea":return!!t.autoFocus}return!1}function Hr(e,t){return"textarea"===e||"option"===e||"noscript"===e||"string"==typeof t.children||"number"==typeof t.children||"object"==typeof t.dangerouslySetInnerHTML&&null!==t.dangerouslySetInnerHTML&&null!=t.dangerouslySetInnerHTML.__html}var Gr="function"==typeof setTimeout?setTimeout:void 0,Zr="function"==typeof clearTimeout?clearTimeout:void 0;function Qr(e){1===e.nodeType?e.textContent="":9===e.nodeType&&(null!=(e=e.body)&&(e.textContent=""))}function Vr(e){for(;null!=e;e=e.nextSibling){var t=e.nodeType;if(1===t||3===t)break}return e}function Wr(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n||"$!"===n||"$?"===n){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var Kr=0;var Yr=Math.random().toString(36).slice(2),Xr="__reactFiber$"+Yr,Jr="__reactProps$"+Yr,ea="__reactContainer$"+Yr,ta="__reactEvents$"+Yr;function na(e){var t=e[Xr];if(t)return t;for(var n=e.parentNode;n;){if(t=n[ea]||n[Xr]){if(n=t.alternate,null!==t.child||null!==n&&null!==n.child)for(e=Wr(e);null!==e;){if(n=e[Xr])return n;e=Wr(e)}return t}n=(e=n).parentNode}return null}function ra(e){return!(e=e[Xr]||e[ea])||5!==e.tag&&6!==e.tag&&13!==e.tag&&3!==e.tag?null:e}function aa(e){if(5===e.tag||6===e.tag)return e.stateNode;throw Error(i(33))}function oa(e){return e[Jr]||null}function ia(e){var t=e[ta];return void 0===t&&(t=e[ta]=new Set),t}var la=[],sa=-1;function ua(e){return{current:e}}function ca(e){0>sa||(e.current=la[sa],la[sa]=null,sa--)}function da(e,t){sa++,la[sa]=e.current,e.current=t}var fa={},pa=ua(fa),ma=ua(!1),ha=fa;function ga(e,t){var n=e.type.contextTypes;if(!n)return fa;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmaskedChildContext===t)return r.__reactInternalMemoizedMaskedChildContext;var a,o={};for(a in n)o[a]=t[a];return r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=t,e.__reactInternalMemoizedMaskedChildContext=o),o}function va(e){return null!=(e=e.childContextTypes)}function ya(){ca(ma),ca(pa)}function ba(e,t,n){if(pa.current!==fa)throw Error(i(168));da(pa,t),da(ma,n)}function wa(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.getChildContext)return n;for(var o in r=r.getChildContext())if(!(o in e))throw Error(i(108,Q(t)||"Unknown",o));return a({},n,r)}function ka(e){return e=(e=e.stateNode)&&e.__reactInternalMemoizedMergedChildContext||fa,ha=pa.current,da(pa,e),da(ma,ma.current),!0}function Ea(e,t,n){var r=e.stateNode;if(!r)throw Error(i(169));n?(e=wa(e,t,ha),r.__reactInternalMemoizedMergedChildContext=e,ca(ma),ca(pa),da(pa,e)):ca(ma),da(ma,n)}var Sa=null,xa=null,_a=o.unstable_runWithPriority,Ca=o.unstable_scheduleCallback,Ta=o.unstable_cancelCallback,La=o.unstable_shouldYield,Ra=o.unstable_requestPaint,Na=o.unstable_now,Aa=o.unstable_getCurrentPriorityLevel,Oa=o.unstable_ImmediatePriority,Pa=o.unstable_UserBlockingPriority,Ia=o.unstable_NormalPriority,Da=o.unstable_LowPriority,Ma=o.unstable_IdlePriority,Fa={},ja=void 0!==Ra?Ra:function(){},Ba=null,za=null,$a=!1,Ua=Na(),qa=1e4>Ua?Na:function(){return Na()-Ua};function Ha(){switch(Aa()){case Oa:return 99;case Pa:return 98;case Ia:return 97;case Da:return 96;case Ma:return 95;default:throw Error(i(332))}}function Ga(e){switch(e){case 99:return Oa;case 98:return Pa;case 97:return Ia;case 96:return Da;case 95:return Ma;default:throw Error(i(332))}}function Za(e,t){return e=Ga(e),_a(e,t)}function Qa(e,t,n){return e=Ga(e),Ca(e,t,n)}function Va(){if(null!==za){var e=za;za=null,Ta(e)}Wa()}function Wa(){if(!$a&&null!==Ba){$a=!0;var e=0;try{var t=Ba;Za(99,(function(){for(;e<t.length;e++){var n=t[e];do{n=n(!0)}while(null!==n)}})),Ba=null}catch(n){throw null!==Ba&&(Ba=Ba.slice(e+1)),Ca(Oa,Va),n}finally{$a=!1}}}var Ka=k.ReactCurrentBatchConfig;function Ya(e,t){if(e&&e.defaultProps){for(var n in t=a({},t),e=e.defaultProps)void 0===t[n]&&(t[n]=e[n]);return t}return t}var Xa=ua(null),Ja=null,eo=null,to=null;function no(){to=eo=Ja=null}function ro(e){var t=Xa.current;ca(Xa),e.type._context._currentValue=t}function ao(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n||(n.childLanes&t)===t)break;n.childLanes|=t}else e.childLanes|=t,null!==n&&(n.childLanes|=t);e=e.return}}function oo(e,t){Ja=e,to=eo=null,null!==(e=e.dependencies)&&null!==e.firstContext&&(0!=(e.lanes&t)&&(Fi=!0),e.firstContext=null)}function io(e,t){if(to!==e&&!1!==t&&0!==t)if("number"==typeof t&&1073741823!==t||(to=e,t=1073741823),t={context:e,observedBits:t,next:null},null===eo){if(null===Ja)throw Error(i(308));eo=t,Ja.dependencies={lanes:0,firstContext:t,responders:null}}else eo=eo.next=t;return e._currentValue}var lo=!1;function so(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null},effects:null}}function uo(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,effects:e.effects})}function co(e,t){return{eventTime:e,lane:t,tag:0,payload:null,callback:null,next:null}}function fo(e,t){if(null!==(e=e.updateQueue)){var n=(e=e.shared).pending;null===n?t.next=t:(t.next=n.next,n.next=t),e.pending=t}}function po(e,t){var n=e.updateQueue,r=e.alternate;if(null!==r&&n===(r=r.updateQueue)){var a=null,o=null;if(null!==(n=n.firstBaseUpdate)){do{var i={eventTime:n.eventTime,lane:n.lane,tag:n.tag,payload:n.payload,callback:n.callback,next:null};null===o?a=o=i:o=o.next=i,n=n.next}while(null!==n);null===o?a=o=t:o=o.next=t}else a=o=t;return n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:o,shared:r.shared,effects:r.effects},void(e.updateQueue=n)}null===(e=n.lastBaseUpdate)?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}function mo(e,t,n,r){var o=e.updateQueue;lo=!1;var i=o.firstBaseUpdate,l=o.lastBaseUpdate,s=o.shared.pending;if(null!==s){o.shared.pending=null;var u=s,c=u.next;u.next=null,null===l?i=c:l.next=c,l=u;var d=e.alternate;if(null!==d){var f=(d=d.updateQueue).lastBaseUpdate;f!==l&&(null===f?d.firstBaseUpdate=c:f.next=c,d.lastBaseUpdate=u)}}if(null!==i){for(f=o.baseState,l=0,d=c=u=null;;){s=i.lane;var p=i.eventTime;if((r&s)===s){null!==d&&(d=d.next={eventTime:p,lane:0,tag:i.tag,payload:i.payload,callback:i.callback,next:null});e:{var m=e,h=i;switch(s=t,p=n,h.tag){case 1:if("function"==typeof(m=h.payload)){f=m.call(p,f,s);break e}f=m;break e;case 3:m.flags=-4097&m.flags|64;case 0:if(null==(s="function"==typeof(m=h.payload)?m.call(p,f,s):m))break e;f=a({},f,s);break e;case 2:lo=!0}}null!==i.callback&&(e.flags|=32,null===(s=o.effects)?o.effects=[i]:s.push(i))}else p={eventTime:p,lane:s,tag:i.tag,payload:i.payload,callback:i.callback,next:null},null===d?(c=d=p,u=f):d=d.next=p,l|=s;if(null===(i=i.next)){if(null===(s=o.shared.pending))break;i=s.next,s.next=null,o.lastBaseUpdate=s,o.shared.pending=null}}null===d&&(u=f),o.baseState=u,o.firstBaseUpdate=c,o.lastBaseUpdate=d,$l|=l,e.lanes=l,e.memoizedState=f}}function ho(e,t,n){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],a=r.callback;if(null!==a){if(r.callback=null,r=n,"function"!=typeof a)throw Error(i(191,a));a.call(r)}}}var go=(new r.Component).refs;function vo(e,t,n,r){n=null==(n=n(r,t=e.memoizedState))?t:a({},t,n),e.memoizedState=n,0===e.lanes&&(e.updateQueue.baseState=n)}var yo={isMounted:function(e){return!!(e=e._reactInternals)&&Ke(e)===e},enqueueSetState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueReplaceState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.tag=1,o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=fs(),r=ps(e),a=co(n,r);a.tag=2,null!=t&&(a.callback=t),fo(e,a),ms(e,r,n)}};function bo(e,t,n,r,a,o,i){return"function"==typeof(e=e.stateNode).shouldComponentUpdate?e.shouldComponentUpdate(r,o,i):!t.prototype||!t.prototype.isPureReactComponent||(!fr(n,r)||!fr(a,o))}function wo(e,t,n){var r=!1,a=fa,o=t.contextType;return"object"==typeof o&&null!==o?o=io(o):(a=va(t)?ha:pa.current,o=(r=null!=(r=t.contextTypes))?ga(e,a):fa),t=new t(n,o),e.memoizedState=null!==t.state&&void 0!==t.state?t.state:null,t.updater=yo,e.stateNode=t,t._reactInternals=e,r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=a,e.__reactInternalMemoizedMaskedChildContext=o),t}function ko(e,t,n,r){e=t.state,"function"==typeof t.componentWillReceiveProps&&t.componentWillReceiveProps(n,r),"function"==typeof t.UNSAFE_componentWillReceiveProps&&t.UNSAFE_componentWillReceiveProps(n,r),t.state!==e&&yo.enqueueReplaceState(t,t.state,null)}function Eo(e,t,n,r){var a=e.stateNode;a.props=n,a.state=e.memoizedState,a.refs=go,so(e);var o=t.contextType;"object"==typeof o&&null!==o?a.context=io(o):(o=va(t)?ha:pa.current,a.context=ga(e,o)),mo(e,n,a,r),a.state=e.memoizedState,"function"==typeof(o=t.getDerivedStateFromProps)&&(vo(e,t,o,n),a.state=e.memoizedState),"function"==typeof t.getDerivedStateFromProps||"function"==typeof a.getSnapshotBeforeUpdate||"function"!=typeof a.UNSAFE_componentWillMount&&"function"!=typeof a.componentWillMount||(t=a.state,"function"==typeof a.componentWillMount&&a.componentWillMount(),"function"==typeof a.UNSAFE_componentWillMount&&a.UNSAFE_componentWillMount(),t!==a.state&&yo.enqueueReplaceState(a,a.state,null),mo(e,n,a,r),a.state=e.memoizedState),"function"==typeof a.componentDidMount&&(e.flags|=4)}var So=Array.isArray;function xo(e,t,n){if(null!==(e=n.ref)&&"function"!=typeof e&&"object"!=typeof e){if(n._owner){if(n=n._owner){if(1!==n.tag)throw Error(i(309));var r=n.stateNode}if(!r)throw Error(i(147,e));var a=""+e;return null!==t&&null!==t.ref&&"function"==typeof t.ref&&t.ref._stringRef===a?t.ref:(t=function(e){var t=r.refs;t===go&&(t=r.refs={}),null===e?delete t[a]:t[a]=e},t._stringRef=a,t)}if("string"!=typeof e)throw Error(i(284));if(!n._owner)throw Error(i(290,e))}return e}function _o(e,t){if("textarea"!==e.type)throw Error(i(31,"[object Object]"===Object.prototype.toString.call(t)?"object with keys {"+Object.keys(t).join(", ")+"}":t))}function Co(e){function t(t,n){if(e){var r=t.lastEffect;null!==r?(r.nextEffect=n,t.lastEffect=n):t.firstEffect=t.lastEffect=n,n.nextEffect=null,n.flags=8}}function n(n,r){if(!e)return null;for(;null!==r;)t(n,r),r=r.sibling;return null}function r(e,t){for(e=new Map;null!==t;)null!==t.key?e.set(t.key,t):e.set(t.index,t),t=t.sibling;return e}function a(e,t){return(e=Zs(e,t)).index=0,e.sibling=null,e}function o(t,n,r){return t.index=r,e?null!==(r=t.alternate)?(r=r.index)<n?(t.flags=2,n):r:(t.flags=2,n):n}function l(t){return e&&null===t.alternate&&(t.flags=2),t}function s(e,t,n,r){return null===t||6!==t.tag?((t=Ks(n,e.mode,r)).return=e,t):((t=a(t,n)).return=e,t)}function u(e,t,n,r){return null!==t&&t.elementType===n.type?((r=a(t,n.props)).ref=xo(e,t,n),r.return=e,r):((r=Qs(n.type,n.key,n.props,null,e.mode,r)).ref=xo(e,t,n),r.return=e,r)}function c(e,t,n,r){return null===t||4!==t.tag||t.stateNode.containerInfo!==n.containerInfo||t.stateNode.implementation!==n.implementation?((t=Ys(n,e.mode,r)).return=e,t):((t=a(t,n.children||[])).return=e,t)}function d(e,t,n,r,o){return null===t||7!==t.tag?((t=Vs(n,e.mode,r,o)).return=e,t):((t=a(t,n)).return=e,t)}function f(e,t,n){if("string"==typeof t||"number"==typeof t)return(t=Ks(""+t,e.mode,n)).return=e,t;if("object"==typeof t&&null!==t){switch(t.$$typeof){case E:return(n=Qs(t.type,t.key,t.props,null,e.mode,n)).ref=xo(e,null,t),n.return=e,n;case S:return(t=Ys(t,e.mode,n)).return=e,t}if(So(t)||U(t))return(t=Vs(t,e.mode,n,null)).return=e,t;_o(e,t)}return null}function p(e,t,n,r){var a=null!==t?t.key:null;if("string"==typeof n||"number"==typeof n)return null!==a?null:s(e,t,""+n,r);if("object"==typeof n&&null!==n){switch(n.$$typeof){case E:return n.key===a?n.type===x?d(e,t,n.props.children,r,a):u(e,t,n,r):null;case S:return n.key===a?c(e,t,n,r):null}if(So(n)||U(n))return null!==a?null:d(e,t,n,r,null);_o(e,n)}return null}function m(e,t,n,r,a){if("string"==typeof r||"number"==typeof r)return s(t,e=e.get(n)||null,""+r,a);if("object"==typeof r&&null!==r){switch(r.$$typeof){case E:return e=e.get(null===r.key?n:r.key)||null,r.type===x?d(t,e,r.props.children,a,r.key):u(t,e,r,a);case S:return c(t,e=e.get(null===r.key?n:r.key)||null,r,a)}if(So(r)||U(r))return d(t,e=e.get(n)||null,r,a,null);_o(t,r)}return null}function h(a,i,l,s){for(var u=null,c=null,d=i,h=i=0,g=null;null!==d&&h<l.length;h++){d.index>h?(g=d,d=null):g=d.sibling;var v=p(a,d,l[h],s);if(null===v){null===d&&(d=g);break}e&&d&&null===v.alternate&&t(a,d),i=o(v,i,h),null===c?u=v:c.sibling=v,c=v,d=g}if(h===l.length)return n(a,d),u;if(null===d){for(;h<l.length;h++)null!==(d=f(a,l[h],s))&&(i=o(d,i,h),null===c?u=d:c.sibling=d,c=d);return u}for(d=r(a,d);h<l.length;h++)null!==(g=m(d,a,h,l[h],s))&&(e&&null!==g.alternate&&d.delete(null===g.key?h:g.key),i=o(g,i,h),null===c?u=g:c.sibling=g,c=g);return e&&d.forEach((function(e){return t(a,e)})),u}function g(a,l,s,u){var c=U(s);if("function"!=typeof c)throw Error(i(150));if(null==(s=c.call(s)))throw Error(i(151));for(var d=c=null,h=l,g=l=0,v=null,y=s.next();null!==h&&!y.done;g++,y=s.next()){h.index>g?(v=h,h=null):v=h.sibling;var b=p(a,h,y.value,u);if(null===b){null===h&&(h=v);break}e&&h&&null===b.alternate&&t(a,h),l=o(b,l,g),null===d?c=b:d.sibling=b,d=b,h=v}if(y.done)return n(a,h),c;if(null===h){for(;!y.done;g++,y=s.next())null!==(y=f(a,y.value,u))&&(l=o(y,l,g),null===d?c=y:d.sibling=y,d=y);return c}for(h=r(a,h);!y.done;g++,y=s.next())null!==(y=m(h,a,g,y.value,u))&&(e&&null!==y.alternate&&h.delete(null===y.key?g:y.key),l=o(y,l,g),null===d?c=y:d.sibling=y,d=y);return e&&h.forEach((function(e){return t(a,e)})),c}return function(e,r,o,s){var u="object"==typeof o&&null!==o&&o.type===x&&null===o.key;u&&(o=o.props.children);var c="object"==typeof o&&null!==o;if(c)switch(o.$$typeof){case E:e:{for(c=o.key,u=r;null!==u;){if(u.key===c){if(7===u.tag){if(o.type===x){n(e,u.sibling),(r=a(u,o.props.children)).return=e,e=r;break e}}else if(u.elementType===o.type){n(e,u.sibling),(r=a(u,o.props)).ref=xo(e,u,o),r.return=e,e=r;break e}n(e,u);break}t(e,u),u=u.sibling}o.type===x?((r=Vs(o.props.children,e.mode,s,o.key)).return=e,e=r):((s=Qs(o.type,o.key,o.props,null,e.mode,s)).ref=xo(e,r,o),s.return=e,e=s)}return l(e);case S:e:{for(u=o.key;null!==r;){if(r.key===u){if(4===r.tag&&r.stateNode.containerInfo===o.containerInfo&&r.stateNode.implementation===o.implementation){n(e,r.sibling),(r=a(r,o.children||[])).return=e,e=r;break e}n(e,r);break}t(e,r),r=r.sibling}(r=Ys(o,e.mode,s)).return=e,e=r}return l(e)}if("string"==typeof o||"number"==typeof o)return o=""+o,null!==r&&6===r.tag?(n(e,r.sibling),(r=a(r,o)).return=e,e=r):(n(e,r),(r=Ks(o,e.mode,s)).return=e,e=r),l(e);if(So(o))return h(e,r,o,s);if(U(o))return g(e,r,o,s);if(c&&_o(e,o),void 0===o&&!u)switch(e.tag){case 1:case 22:case 0:case 11:case 15:throw Error(i(152,Q(e.type)||"Component"))}return n(e,r)}}var To=Co(!0),Lo=Co(!1),Ro={},No=ua(Ro),Ao=ua(Ro),Oo=ua(Ro);function Po(e){if(e===Ro)throw Error(i(174));return e}function Io(e,t){switch(da(Oo,t),da(Ao,e),da(No,Ro),e=t.nodeType){case 9:case 11:t=(t=t.documentElement)?t.namespaceURI:me(null,"");break;default:t=me(t=(e=8===e?t.parentNode:t).namespaceURI||null,e=e.tagName)}ca(No),da(No,t)}function Do(){ca(No),ca(Ao),ca(Oo)}function Mo(e){Po(Oo.current);var t=Po(No.current),n=me(t,e.type);t!==n&&(da(Ao,e),da(No,n))}function Fo(e){Ao.current===e&&(ca(No),ca(Ao))}var jo=ua(0);function Bo(e){for(var t=e;null!==t;){if(13===t.tag){var n=t.memoizedState;if(null!==n&&(null===(n=n.dehydrated)||"$?"===n.data||"$!"===n.data))return t}else if(19===t.tag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.flags))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}return null}var zo=null,$o=null,Uo=!1;function qo(e,t){var n=Hs(5,null,null,0);n.elementType="DELETED",n.type="DELETED",n.stateNode=t,n.return=e,n.flags=8,null!==e.lastEffect?(e.lastEffect.nextEffect=n,e.lastEffect=n):e.firstEffect=e.lastEffect=n}function Ho(e,t){switch(e.tag){case 5:var n=e.type;return null!==(t=1!==t.nodeType||n.toLowerCase()!==t.nodeName.toLowerCase()?null:t)&&(e.stateNode=t,!0);case 6:return null!==(t=""===e.pendingProps||3!==t.nodeType?null:t)&&(e.stateNode=t,!0);default:return!1}}function Go(e){if(Uo){var t=$o;if(t){var n=t;if(!Ho(e,t)){if(!(t=Vr(n.nextSibling))||!Ho(e,t))return e.flags=-1025&e.flags|2,Uo=!1,void(zo=e);qo(zo,n)}zo=e,$o=Vr(t.firstChild)}else e.flags=-1025&e.flags|2,Uo=!1,zo=e}}function Zo(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;zo=e}function Qo(e){if(e!==zo)return!1;if(!Uo)return Zo(e),Uo=!0,!1;var t=e.type;if(5!==e.tag||"head"!==t&&"body"!==t&&!Hr(t,e.memoizedProps))for(t=$o;t;)qo(e,t),t=Vr(t.nextSibling);if(Zo(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(i(317));e:{for(e=e.nextSibling,t=0;e;){if(8===e.nodeType){var n=e.data;if("/$"===n){if(0===t){$o=Vr(e.nextSibling);break e}t--}else"$"!==n&&"$!"!==n&&"$?"!==n||t++}e=e.nextSibling}$o=null}}else $o=zo?Vr(e.stateNode.nextSibling):null;return!0}function Vo(){$o=zo=null,Uo=!1}var Wo=[];function Ko(){for(var e=0;e<Wo.length;e++)Wo[e]._workInProgressVersionPrimary=null;Wo.length=0}var Yo=k.ReactCurrentDispatcher,Xo=k.ReactCurrentBatchConfig,Jo=0,ei=null,ti=null,ni=null,ri=!1,ai=!1;function oi(){throw Error(i(321))}function ii(e,t){if(null===t)return!1;for(var n=0;n<t.length&&n<e.length;n++)if(!cr(e[n],t[n]))return!1;return!0}function li(e,t,n,r,a,o){if(Jo=o,ei=t,t.memoizedState=null,t.updateQueue=null,t.lanes=0,Yo.current=null===e||null===e.memoizedState?Pi:Ii,e=n(r,a),ai){o=0;do{if(ai=!1,!(25>o))throw Error(i(301));o+=1,ni=ti=null,t.updateQueue=null,Yo.current=Di,e=n(r,a)}while(ai)}if(Yo.current=Oi,t=null!==ti&&null!==ti.next,Jo=0,ni=ti=ei=null,ri=!1,t)throw Error(i(300));return e}function si(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===ni?ei.memoizedState=ni=e:ni=ni.next=e,ni}function ui(){if(null===ti){var e=ei.alternate;e=null!==e?e.memoizedState:null}else e=ti.next;var t=null===ni?ei.memoizedState:ni.next;if(null!==t)ni=t,ti=e;else{if(null===e)throw Error(i(310));e={memoizedState:(ti=e).memoizedState,baseState:ti.baseState,baseQueue:ti.baseQueue,queue:ti.queue,next:null},null===ni?ei.memoizedState=ni=e:ni=ni.next=e}return ni}function ci(e,t){return"function"==typeof t?t(e):t}function di(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=ti,a=r.baseQueue,o=n.pending;if(null!==o){if(null!==a){var l=a.next;a.next=o.next,o.next=l}r.baseQueue=a=o,n.pending=null}if(null!==a){a=a.next,r=r.baseState;var s=l=o=null,u=a;do{var c=u.lane;if((Jo&c)===c)null!==s&&(s=s.next={lane:0,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null}),r=u.eagerReducer===e?u.eagerState:e(r,u.action);else{var d={lane:c,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null};null===s?(l=s=d,o=r):s=s.next=d,ei.lanes|=c,$l|=c}u=u.next}while(null!==u&&u!==a);null===s?o=r:s.next=l,cr(r,t.memoizedState)||(Fi=!0),t.memoizedState=r,t.baseState=o,t.baseQueue=s,n.lastRenderedState=r}return[t.memoizedState,n.dispatch]}function fi(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=n.dispatch,a=n.pending,o=t.memoizedState;if(null!==a){n.pending=null;var l=a=a.next;do{o=e(o,l.action),l=l.next}while(l!==a);cr(o,t.memoizedState)||(Fi=!0),t.memoizedState=o,null===t.baseQueue&&(t.baseState=o),n.lastRenderedState=o}return[o,r]}function pi(e,t,n){var r=t._getVersion;r=r(t._source);var a=t._workInProgressVersionPrimary;if(null!==a?e=a===r:(e=e.mutableReadLanes,(e=(Jo&e)===e)&&(t._workInProgressVersionPrimary=r,Wo.push(t))),e)return n(t._source);throw Wo.push(t),Error(i(350))}function mi(e,t,n,r){var a=Pl;if(null===a)throw Error(i(349));var o=t._getVersion,l=o(t._source),s=Yo.current,u=s.useState((function(){return pi(a,t,n)})),c=u[1],d=u[0];u=ni;var f=e.memoizedState,p=f.refs,m=p.getSnapshot,h=f.source;f=f.subscribe;var g=ei;return e.memoizedState={refs:p,source:t,subscribe:r},s.useEffect((function(){p.getSnapshot=n,p.setSnapshot=c;var e=o(t._source);if(!cr(l,e)){e=n(t._source),cr(d,e)||(c(e),e=ps(g),a.mutableReadLanes|=e&a.pendingLanes),e=a.mutableReadLanes,a.entangledLanes|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-Ht(i),u=1<<s;r[s]|=e,i&=~u}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(g);a.mutableReadLanes|=r&a.pendingLanes}catch(o){n((function(){throw o}))}}))}),[t,r]),cr(m,n)&&cr(h,t)&&cr(f,r)||((e={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:d}).dispatch=c=Ai.bind(null,ei,e),u.queue=e,u.baseQueue=null,d=pi(a,t,n),u.memoizedState=u.baseState=d),d}function hi(e,t,n){return mi(ui(),e,t,n)}function gi(e){var t=si();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:e}).dispatch=Ai.bind(null,ei,e),[t.memoizedState,e]}function vi(e,t,n,r){return e={tag:e,create:t,destroy:n,deps:r,next:null},null===(t=ei.updateQueue)?(t={lastEffect:null},ei.updateQueue=t,t.lastEffect=e.next=e):null===(n=t.lastEffect)?t.lastEffect=e.next=e:(r=n.next,n.next=e,e.next=r,t.lastEffect=e),e}function yi(e){return e={current:e},si().memoizedState=e}function bi(){return ui().memoizedState}function wi(e,t,n,r){var a=si();ei.flags|=e,a.memoizedState=vi(1|t,n,void 0,void 0===r?null:r)}function ki(e,t,n,r){var a=ui();r=void 0===r?null:r;var o=void 0;if(null!==ti){var i=ti.memoizedState;if(o=i.destroy,null!==r&&ii(r,i.deps))return void vi(t,n,o,r)}ei.flags|=e,a.memoizedState=vi(1|t,n,o,r)}function Ei(e,t){return wi(516,4,e,t)}function Si(e,t){return ki(516,4,e,t)}function xi(e,t){return ki(4,2,e,t)}function _i(e,t){return"function"==typeof t?(e=e(),t(e),function(){t(null)}):null!=t?(e=e(),t.current=e,function(){t.current=null}):void 0}function Ci(e,t,n){return n=null!=n?n.concat([e]):null,ki(4,2,_i.bind(null,t,e),n)}function Ti(){}function Li(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Ri(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(e=e(),n.memoizedState=[e,t],e)}function Ni(e,t){var n=Ha();Za(98>n?98:n,(function(){e(!0)})),Za(97<n?97:n,(function(){var n=Xo.transition;Xo.transition=1;try{e(!1),t()}finally{Xo.transition=n}}))}function Ai(e,t,n){var r=fs(),a=ps(e),o={lane:a,action:n,eagerReducer:null,eagerState:null,next:null},i=t.pending;if(null===i?o.next=o:(o.next=i.next,i.next=o),t.pending=o,i=e.alternate,e===ei||null!==i&&i===ei)ai=ri=!0;else{if(0===e.lanes&&(null===i||0===i.lanes)&&null!==(i=t.lastRenderedReducer))try{var l=t.lastRenderedState,s=i(l,n);if(o.eagerReducer=i,o.eagerState=s,cr(s,l))return}catch(u){}ms(e,a,r)}}var Oi={readContext:io,useCallback:oi,useContext:oi,useEffect:oi,useImperativeHandle:oi,useLayoutEffect:oi,useMemo:oi,useReducer:oi,useRef:oi,useState:oi,useDebugValue:oi,useDeferredValue:oi,useTransition:oi,useMutableSource:oi,useOpaqueIdentifier:oi,unstable_isNewReconciler:!1},Pi={readContext:io,useCallback:function(e,t){return si().memoizedState=[e,void 0===t?null:t],e},useContext:io,useEffect:Ei,useImperativeHandle:function(e,t,n){return n=null!=n?n.concat([e]):null,wi(4,2,_i.bind(null,t,e),n)},useLayoutEffect:function(e,t){return wi(4,2,e,t)},useMemo:function(e,t){var n=si();return t=void 0===t?null:t,e=e(),n.memoizedState=[e,t],e},useReducer:function(e,t,n){var r=si();return t=void 0!==n?n(t):t,r.memoizedState=r.baseState=t,e=(e=r.queue={pending:null,dispatch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=Ai.bind(null,ei,e),[r.memoizedState,e]},useRef:yi,useState:gi,useDebugValue:Ti,useDeferredValue:function(e){var t=gi(e),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=gi(!1),t=e[0];return yi(e=Ni.bind(null,e[1])),[e,t]},useMutableSource:function(e,t,n){var r=si();return r.memoizedState={refs:{getSnapshot:t,setSnapshot:null},source:e,subscribe:n},mi(r,e,t,n)},useOpaqueIdentifier:function(){if(Uo){var e=!1,t=function(e){return{$$typeof:D,toString:e,valueOf:e}}((function(){throw e||(e=!0,n("r:"+(Kr++).toString(36))),Error(i(355))})),n=gi(t)[1];return 0==(2&ei.mode)&&(ei.flags|=516,vi(5,(function(){n("r:"+(Kr++).toString(36))}),void 0,null)),t}return gi(t="r:"+(Kr++).toString(36)),t},unstable_isNewReconciler:!1},Ii={readContext:io,useCallback:Li,useContext:io,useEffect:Si,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Ri,useReducer:di,useRef:bi,useState:function(){return di(ci)},useDebugValue:Ti,useDeferredValue:function(e){var t=di(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=di(ci)[0];return[bi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return di(ci)[0]},unstable_isNewReconciler:!1},Di={readContext:io,useCallback:Li,useContext:io,useEffect:Si,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Ri,useReducer:fi,useRef:bi,useState:function(){return fi(ci)},useDebugValue:Ti,useDeferredValue:function(e){var t=fi(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=fi(ci)[0];return[bi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return fi(ci)[0]},unstable_isNewReconciler:!1},Mi=k.ReactCurrentOwner,Fi=!1;function ji(e,t,n,r){t.child=null===e?Lo(t,null,n,r):To(t,e.child,n,r)}function Bi(e,t,n,r,a){n=n.render;var o=t.ref;return oo(t,a),r=li(e,t,n,r,o,a),null===e||Fi?(t.flags|=1,ji(e,t,r,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function zi(e,t,n,r,a,o){if(null===e){var i=n.type;return"function"!=typeof i||Gs(i)||void 0!==i.defaultProps||null!==n.compare||void 0!==n.defaultProps?((e=Qs(n.type,null,r,t,t.mode,o)).ref=t.ref,e.return=t,t.child=e):(t.tag=15,t.type=i,$i(e,t,i,r,a,o))}return i=e.child,0==(a&o)&&(a=i.memoizedProps,(n=null!==(n=n.compare)?n:fr)(a,r)&&e.ref===t.ref)?ol(e,t,o):(t.flags|=1,(e=Zs(i,r)).ref=t.ref,e.return=t,t.child=e)}function $i(e,t,n,r,a,o){if(null!==e&&fr(e.memoizedProps,r)&&e.ref===t.ref){if(Fi=!1,0==(o&a))return t.lanes=e.lanes,ol(e,t,o);0!=(16384&e.flags)&&(Fi=!0)}return Hi(e,t,n,r,o)}function Ui(e,t,n){var r=t.pendingProps,a=r.children,o=null!==e?e.memoizedState:null;if("hidden"===r.mode||"unstable-defer-without-hiding"===r.mode)if(0==(4&t.mode))t.memoizedState={baseLanes:0},Es(t,n);else{if(0==(1073741824&n))return e=null!==o?o.baseLanes|n:n,t.lanes=t.childLanes=1073741824,t.memoizedState={baseLanes:e},Es(t,e),null;t.memoizedState={baseLanes:0},Es(t,null!==o?o.baseLanes:n)}else null!==o?(r=o.baseLanes|n,t.memoizedState=null):r=n,Es(t,r);return ji(e,t,a,n),t.child}function qi(e,t){var n=t.ref;(null===e&&null!==n||null!==e&&e.ref!==n)&&(t.flags|=128)}function Hi(e,t,n,r,a){var o=va(n)?ha:pa.current;return o=ga(t,o),oo(t,a),n=li(e,t,n,r,o,a),null===e||Fi?(t.flags|=1,ji(e,t,n,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function Gi(e,t,n,r,a){if(va(n)){var o=!0;ka(t)}else o=!1;if(oo(t,a),null===t.stateNode)null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),wo(t,n,r),Eo(t,n,r,a),r=!0;else if(null===e){var i=t.stateNode,l=t.memoizedProps;i.props=l;var s=i.context,u=n.contextType;"object"==typeof u&&null!==u?u=io(u):u=ga(t,u=va(n)?ha:pa.current);var c=n.getDerivedStateFromProps,d="function"==typeof c||"function"==typeof i.getSnapshotBeforeUpdate;d||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==r||s!==u)&&ko(t,i,r,u),lo=!1;var f=t.memoizedState;i.state=f,mo(t,r,i,a),s=t.memoizedState,l!==r||f!==s||ma.current||lo?("function"==typeof c&&(vo(t,n,c,r),s=t.memoizedState),(l=lo||bo(t,n,l,r,f,s,u))?(d||"function"!=typeof i.UNSAFE_componentWillMount&&"function"!=typeof i.componentWillMount||("function"==typeof i.componentWillMount&&i.componentWillMount(),"function"==typeof i.UNSAFE_componentWillMount&&i.UNSAFE_componentWillMount()),"function"==typeof i.componentDidMount&&(t.flags|=4)):("function"==typeof i.componentDidMount&&(t.flags|=4),t.memoizedProps=r,t.memoizedState=s),i.props=r,i.state=s,i.context=u,r=l):("function"==typeof i.componentDidMount&&(t.flags|=4),r=!1)}else{i=t.stateNode,uo(e,t),l=t.memoizedProps,u=t.type===t.elementType?l:Ya(t.type,l),i.props=u,d=t.pendingProps,f=i.context,"object"==typeof(s=n.contextType)&&null!==s?s=io(s):s=ga(t,s=va(n)?ha:pa.current);var p=n.getDerivedStateFromProps;(c="function"==typeof p||"function"==typeof i.getSnapshotBeforeUpdate)||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==d||f!==s)&&ko(t,i,r,s),lo=!1,f=t.memoizedState,i.state=f,mo(t,r,i,a);var m=t.memoizedState;l!==d||f!==m||ma.current||lo?("function"==typeof p&&(vo(t,n,p,r),m=t.memoizedState),(u=lo||bo(t,n,u,r,f,m,s))?(c||"function"!=typeof i.UNSAFE_componentWillUpdate&&"function"!=typeof i.componentWillUpdate||("function"==typeof i.componentWillUpdate&&i.componentWillUpdate(r,m,s),"function"==typeof i.UNSAFE_componentWillUpdate&&i.UNSAFE_componentWillUpdate(r,m,s)),"function"==typeof i.componentDidUpdate&&(t.flags|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(t.flags|=256)):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),t.memoizedProps=r,t.memoizedState=m),i.props=r,i.state=m,i.context=s,r=u):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),r=!1)}return Zi(e,t,n,r,o,a)}function Zi(e,t,n,r,a,o){qi(e,t);var i=0!=(64&t.flags);if(!r&&!i)return a&&Ea(t,n,!1),ol(e,t,o);r=t.stateNode,Mi.current=t;var l=i&&"function"!=typeof n.getDerivedStateFromError?null:r.render();return t.flags|=1,null!==e&&i?(t.child=To(t,e.child,null,o),t.child=To(t,null,l,o)):ji(e,t,l,o),t.memoizedState=r.state,a&&Ea(t,n,!0),t.child}function Qi(e){var t=e.stateNode;t.pendingContext?ba(0,t.pendingContext,t.pendingContext!==t.context):t.context&&ba(0,t.context,!1),Io(e,t.containerInfo)}var Vi,Wi,Ki,Yi={dehydrated:null,retryLane:0};function Xi(e,t,n){var r,a=t.pendingProps,o=jo.current,i=!1;return(r=0!=(64&t.flags))||(r=(null===e||null!==e.memoizedState)&&0!=(2&o)),r?(i=!0,t.flags&=-65):null!==e&&null===e.memoizedState||void 0===a.fallback||!0===a.unstable_avoidThisFallback||(o|=1),da(jo,1&o),null===e?(void 0!==a.fallback&&Go(t),e=a.children,o=a.fallback,i?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Yi,e):"number"==typeof a.unstable_expectedLoadTime?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Yi,t.lanes=33554432,e):((n=Ws({mode:"visible",children:e},t.mode,n,null)).return=t,t.child=n)):(e.memoizedState,i?(a=tl(e,t,a.children,a.fallback,n),i=t.child,o=e.child.memoizedState,i.memoizedState=null===o?{baseLanes:n}:{baseLanes:o.baseLanes|n},i.childLanes=e.childLanes&~n,t.memoizedState=Yi,a):(n=el(e,t,a.children,n),t.memoizedState=null,n))}function Ji(e,t,n,r){var a=e.mode,o=e.child;return t={mode:"hidden",children:t},0==(2&a)&&null!==o?(o.childLanes=0,o.pendingProps=t):o=Ws(t,a,0,null),n=Vs(n,a,r,null),o.return=e,n.return=e,o.sibling=n,e.child=o,n}function el(e,t,n,r){var a=e.child;return e=a.sibling,n=Zs(a,{mode:"visible",children:n}),0==(2&t.mode)&&(n.lanes=r),n.return=t,n.sibling=null,null!==e&&(e.nextEffect=null,e.flags=8,t.firstEffect=t.lastEffect=e),t.child=n}function tl(e,t,n,r,a){var o=t.mode,i=e.child;e=i.sibling;var l={mode:"hidden",children:n};return 0==(2&o)&&t.child!==i?((n=t.child).childLanes=0,n.pendingProps=l,null!==(i=n.lastEffect)?(t.firstEffect=n.firstEffect,t.lastEffect=i,i.nextEffect=null):t.firstEffect=t.lastEffect=null):n=Zs(i,l),null!==e?r=Zs(e,r):(r=Vs(r,o,a,null)).flags|=2,r.return=t,n.return=t,n.sibling=r,t.child=n,r}function nl(e,t){e.lanes|=t;var n=e.alternate;null!==n&&(n.lanes|=t),ao(e.return,t)}function rl(e,t,n,r,a,o){var i=e.memoizedState;null===i?e.memoizedState={isBackwards:t,rendering:null,renderingStartTime:0,last:r,tail:n,tailMode:a,lastEffect:o}:(i.isBackwards=t,i.rendering=null,i.renderingStartTime=0,i.last=r,i.tail=n,i.tailMode=a,i.lastEffect=o)}function al(e,t,n){var r=t.pendingProps,a=r.revealOrder,o=r.tail;if(ji(e,t,r.children,n),0!=(2&(r=jo.current)))r=1&r|2,t.flags|=64;else{if(null!==e&&0!=(64&e.flags))e:for(e=t.child;null!==e;){if(13===e.tag)null!==e.memoizedState&&nl(e,n);else if(19===e.tag)nl(e,n);else if(null!==e.child){e.child.return=e,e=e.child;continue}if(e===t)break e;for(;null===e.sibling;){if(null===e.return||e.return===t)break e;e=e.return}e.sibling.return=e.return,e=e.sibling}r&=1}if(da(jo,r),0==(2&t.mode))t.memoizedState=null;else switch(a){case"forwards":for(n=t.child,a=null;null!==n;)null!==(e=n.alternate)&&null===Bo(e)&&(a=n),n=n.sibling;null===(n=a)?(a=t.child,t.child=null):(a=n.sibling,n.sibling=null),rl(t,!1,a,n,o,t.lastEffect);break;case"backwards":for(n=null,a=t.child,t.child=null;null!==a;){if(null!==(e=a.alternate)&&null===Bo(e)){t.child=a;break}e=a.sibling,a.sibling=n,n=a,a=e}rl(t,!0,n,null,o,t.lastEffect);break;case"together":rl(t,!1,null,null,void 0,t.lastEffect);break;default:t.memoizedState=null}return t.child}function ol(e,t,n){if(null!==e&&(t.dependencies=e.dependencies),$l|=t.lanes,0!=(n&t.childLanes)){if(null!==e&&t.child!==e.child)throw Error(i(153));if(null!==t.child){for(n=Zs(e=t.child,e.pendingProps),t.child=n,n.return=t;null!==e.sibling;)e=e.sibling,(n=n.sibling=Zs(e,e.pendingProps)).return=t;n.sibling=null}return t.child}return null}function il(e,t){if(!Uo)switch(e.tailMode){case"hidden":t=e.tail;for(var n=null;null!==t;)null!==t.alternate&&(n=t),t=t.sibling;null===n?e.tail=null:n.sibling=null;break;case"collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t||null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function ll(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12:case 9:case 14:return null;case 1:case 17:return va(t.type)&&ya(),null;case 3:return Do(),ca(ma),ca(pa),Ko(),(r=t.stateNode).pendingContext&&(r.context=r.pendingContext,r.pendingContext=null),null!==e&&null!==e.child||(Qo(t)?t.flags|=4:r.hydrate||(t.flags|=256)),null;case 5:Fo(t);var o=Po(Oo.current);if(n=t.type,null!==e&&null!=t.stateNode)Wi(e,t,n,r),e.ref!==t.ref&&(t.flags|=128);else{if(!r){if(null===t.stateNode)throw Error(i(166));return null}if(e=Po(No.current),Qo(t)){r=t.stateNode,n=t.type;var l=t.memoizedProps;switch(r[Xr]=t,r[Jr]=l,n){case"dialog":Nr("cancel",r),Nr("close",r);break;case"iframe":case"object":case"embed":Nr("load",r);break;case"video":case"audio":for(e=0;e<Cr.length;e++)Nr(Cr[e],r);break;case"source":Nr("error",r);break;case"img":case"image":case"link":Nr("error",r),Nr("load",r);break;case"details":Nr("toggle",r);break;case"input":ee(r,l),Nr("invalid",r);break;case"select":r._wrapperState={wasMultiple:!!l.multiple},Nr("invalid",r);break;case"textarea":se(r,l),Nr("invalid",r)}for(var u in xe(n,l),e=null,l)l.hasOwnProperty(u)&&(o=l[u],"children"===u?"string"==typeof o?r.textContent!==o&&(e=["children",o]):"number"==typeof o&&r.textContent!==""+o&&(e=["children",""+o]):s.hasOwnProperty(u)&&null!=o&&"onScroll"===u&&Nr("scroll",r));switch(n){case"input":K(r),re(r,l,!0);break;case"textarea":K(r),ce(r);break;case"select":case"option":break;default:"function"==typeof l.onClick&&(r.onclick=zr)}r=e,t.updateQueue=r,null!==r&&(t.flags|=4)}else{switch(u=9===o.nodeType?o:o.ownerDocument,e===de&&(e=pe(n)),e===de?"script"===n?((e=u.createElement("div")).innerHTML="<script><\/script>",e=e.removeChild(e.firstChild)):"string"==typeof r.is?e=u.createElement(n,{is:r.is}):(e=u.createElement(n),"select"===n&&(u=e,r.multiple?u.multiple=!0:r.size&&(u.size=r.size))):e=u.createElementNS(e,n),e[Xr]=t,e[Jr]=r,Vi(e,t),t.stateNode=e,u=_e(n,r),n){case"dialog":Nr("cancel",e),Nr("close",e),o=r;break;case"iframe":case"object":case"embed":Nr("load",e),o=r;break;case"video":case"audio":for(o=0;o<Cr.length;o++)Nr(Cr[o],e);o=r;break;case"source":Nr("error",e),o=r;break;case"img":case"image":case"link":Nr("error",e),Nr("load",e),o=r;break;case"details":Nr("toggle",e),o=r;break;case"input":ee(e,r),o=J(e,r),Nr("invalid",e);break;case"option":o=oe(e,r);break;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Nr("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Nr("invalid",e);break;default:o=r}xe(n,o);var c=o;for(l in c)if(c.hasOwnProperty(l)){var d=c[l];"style"===l?Ee(e,d):"dangerouslySetInnerHTML"===l?null!=(d=d?d.__html:void 0)&&ve(e,d):"children"===l?"string"==typeof d?("textarea"!==n||""!==d)&&ye(e,d):"number"==typeof d&&ye(e,""+d):"suppressContentEditableWarning"!==l&&"suppressHydrationWarning"!==l&&"autoFocus"!==l&&(s.hasOwnProperty(l)?null!=d&&"onScroll"===l&&Nr("scroll",e):null!=d&&w(e,l,d,u))}switch(n){case"input":K(e),re(e,r,!1);break;case"textarea":K(e),ce(e);break;case"option":null!=r.value&&e.setAttribute("value",""+V(r.value));break;case"select":e.multiple=!!r.multiple,null!=(l=r.value)?ie(e,!!r.multiple,l,!1):null!=r.defaultValue&&ie(e,!!r.multiple,r.defaultValue,!0);break;default:"function"==typeof o.onClick&&(e.onclick=zr)}qr(n,r)&&(t.flags|=4)}null!==t.ref&&(t.flags|=128)}return null;case 6:if(e&&null!=t.stateNode)Ki(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(i(166));n=Po(Oo.current),Po(No.current),Qo(t)?(r=t.stateNode,n=t.memoizedProps,r[Xr]=t,r.nodeValue!==n&&(t.flags|=4)):((r=(9===n.nodeType?n:n.ownerDocument).createTextNode(r))[Xr]=t,t.stateNode=r)}return null;case 13:return ca(jo),r=t.memoizedState,0!=(64&t.flags)?(t.lanes=n,t):(r=null!==r,n=!1,null===e?void 0!==t.memoizedProps.fallback&&Qo(t):n=null!==e.memoizedState,r&&!n&&0!=(2&t.mode)&&(null===e&&!0!==t.memoizedProps.unstable_avoidThisFallback||0!=(1&jo.current)?0===jl&&(jl=3):(0!==jl&&3!==jl||(jl=4),null===Pl||0==(134217727&$l)&&0==(134217727&Ul)||ys(Pl,Dl))),(r||n)&&(t.flags|=4),null);case 4:return Do(),null===e&&Or(t.stateNode.containerInfo),null;case 10:return ro(t),null;case 19:if(ca(jo),null===(r=t.memoizedState))return null;if(l=0!=(64&t.flags),null===(u=r.rendering))if(l)il(r,!1);else{if(0!==jl||null!==e&&0!=(64&e.flags))for(e=t.child;null!==e;){if(null!==(u=Bo(e))){for(t.flags|=64,il(r,!1),null!==(l=u.updateQueue)&&(t.updateQueue=l,t.flags|=4),null===r.lastEffect&&(t.firstEffect=null),t.lastEffect=r.lastEffect,r=n,n=t.child;null!==n;)e=r,(l=n).flags&=2,l.nextEffect=null,l.firstEffect=null,l.lastEffect=null,null===(u=l.alternate)?(l.childLanes=0,l.lanes=e,l.child=null,l.memoizedProps=null,l.memoizedState=null,l.updateQueue=null,l.dependencies=null,l.stateNode=null):(l.childLanes=u.childLanes,l.lanes=u.lanes,l.child=u.child,l.memoizedProps=u.memoizedProps,l.memoizedState=u.memoizedState,l.updateQueue=u.updateQueue,l.type=u.type,e=u.dependencies,l.dependencies=null===e?null:{lanes:e.lanes,firstContext:e.firstContext}),n=n.sibling;return da(jo,1&jo.current|2),t.child}e=e.sibling}null!==r.tail&&qa()>Zl&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432)}else{if(!l)if(null!==(e=Bo(u))){if(t.flags|=64,l=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags|=4),il(r,!0),null===r.tail&&"hidden"===r.tailMode&&!u.alternate&&!Uo)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null),null}else 2*qa()-r.renderingStartTime>Zl&&1073741824!==n&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432);r.isBackwards?(u.sibling=t.child,t.child=u):(null!==(n=r.last)?n.sibling=u:t.child=u,r.last=u)}return null!==r.tail?(n=r.tail,r.rendering=n,r.tail=n.sibling,r.lastEffect=t.lastEffect,r.renderingStartTime=qa(),n.sibling=null,t=jo.current,da(jo,l?1&t|2:1&t),n):null;case 23:case 24:return Ss(),null!==e&&null!==e.memoizedState!=(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags|=4),null}throw Error(i(156,t.tag))}function sl(e){switch(e.tag){case 1:va(e.type)&&ya();var t=e.flags;return 4096&t?(e.flags=-4097&t|64,e):null;case 3:if(Do(),ca(ma),ca(pa),Ko(),0!=(64&(t=e.flags)))throw Error(i(285));return e.flags=-4097&t|64,e;case 5:return Fo(e),null;case 13:return ca(jo),4096&(t=e.flags)?(e.flags=-4097&t|64,e):null;case 19:return ca(jo),null;case 4:return Do(),null;case 10:return ro(e),null;case 23:case 24:return Ss(),null;default:return null}}function ul(e,t){try{var n="",r=t;do{n+=Z(r),r=r.return}while(r);var a=n}catch(o){a="\nError generating stack: "+o.message+"\n"+o.stack}return{value:e,source:t,stack:a}}function cl(e,t){try{console.error(t.value)}catch(n){setTimeout((function(){throw n}))}}Vi=function(e,t){for(var n=t.child;null!==n;){if(5===n.tag||6===n.tag)e.appendChild(n.stateNode);else if(4!==n.tag&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===t)break;for(;null===n.sibling;){if(null===n.return||n.return===t)return;n=n.return}n.sibling.return=n.return,n=n.sibling}},Wi=function(e,t,n,r){var o=e.memoizedProps;if(o!==r){e=t.stateNode,Po(No.current);var i,l=null;switch(n){case"input":o=J(e,o),r=J(e,r),l=[];break;case"option":o=oe(e,o),r=oe(e,r),l=[];break;case"select":o=a({},o,{value:void 0}),r=a({},r,{value:void 0}),l=[];break;case"textarea":o=le(e,o),r=le(e,r),l=[];break;default:"function"!=typeof o.onClick&&"function"==typeof r.onClick&&(e.onclick=zr)}for(d in xe(n,r),n=null,o)if(!r.hasOwnProperty(d)&&o.hasOwnProperty(d)&&null!=o[d])if("style"===d){var u=o[d];for(i in u)u.hasOwnProperty(i)&&(n||(n={}),n[i]="")}else"dangerouslySetInnerHTML"!==d&&"children"!==d&&"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&"autoFocus"!==d&&(s.hasOwnProperty(d)?l||(l=[]):(l=l||[]).push(d,null));for(d in r){var c=r[d];if(u=null!=o?o[d]:void 0,r.hasOwnProperty(d)&&c!==u&&(null!=c||null!=u))if("style"===d)if(u){for(i in u)!u.hasOwnProperty(i)||c&&c.hasOwnProperty(i)||(n||(n={}),n[i]="");for(i in c)c.hasOwnProperty(i)&&u[i]!==c[i]&&(n||(n={}),n[i]=c[i])}else n||(l||(l=[]),l.push(d,n)),n=c;else"dangerouslySetInnerHTML"===d?(c=c?c.__html:void 0,u=u?u.__html:void 0,null!=c&&u!==c&&(l=l||[]).push(d,c)):"children"===d?"string"!=typeof c&&"number"!=typeof c||(l=l||[]).push(d,""+c):"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&(s.hasOwnProperty(d)?(null!=c&&"onScroll"===d&&Nr("scroll",e),l||u===c||(l=[])):"object"==typeof c&&null!==c&&c.$$typeof===D?c.toString():(l=l||[]).push(d,c))}n&&(l=l||[]).push("style",n);var d=l;(t.updateQueue=d)&&(t.flags|=4)}},Ki=function(e,t,n,r){n!==r&&(t.flags|=4)};var dl="function"==typeof WeakMap?WeakMap:Map;function fl(e,t,n){(n=co(-1,n)).tag=3,n.payload={element:null};var r=t.value;return n.callback=function(){Kl||(Kl=!0,Yl=r),cl(0,t)},n}function pl(e,t,n){(n=co(-1,n)).tag=3;var r=e.type.getDerivedStateFromError;if("function"==typeof r){var a=t.value;n.payload=function(){return cl(0,t),r(a)}}var o=e.stateNode;return null!==o&&"function"==typeof o.componentDidCatch&&(n.callback=function(){"function"!=typeof r&&(null===Xl?Xl=new Set([this]):Xl.add(this),cl(0,t));var e=t.stack;this.componentDidCatch(t.value,{componentStack:null!==e?e:""})}),n}var ml="function"==typeof WeakSet?WeakSet:Set;function hl(e){var t=e.ref;if(null!==t)if("function"==typeof t)try{t(null)}catch(n){zs(e,n)}else t.current=null}function gl(e,t){switch(t.tag){case 0:case 11:case 15:case 22:case 5:case 6:case 4:case 17:return;case 1:if(256&t.flags&&null!==e){var n=e.memoizedProps,r=e.memoizedState;t=(e=t.stateNode).getSnapshotBeforeUpdate(t.elementType===t.type?n:Ya(t.type,n),r),e.__reactInternalSnapshotBeforeUpdate=t}return;case 3:return void(256&t.flags&&Qr(t.stateNode.containerInfo))}throw Error(i(163))}function vl(e,t,n){switch(n.tag){case 0:case 11:case 15:case 22:if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{if(3==(3&e.tag)){var r=e.create;e.destroy=r()}e=e.next}while(e!==t)}if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{var a=e;r=a.next,0!=(4&(a=a.tag))&&0!=(1&a)&&(Fs(n,e),Ms(n,e)),e=r}while(e!==t)}return;case 1:return e=n.stateNode,4&n.flags&&(null===t?e.componentDidMount():(r=n.elementType===n.type?t.memoizedProps:Ya(n.type,t.memoizedProps),e.componentDidUpdate(r,t.memoizedState,e.__reactInternalSnapshotBeforeUpdate))),void(null!==(t=n.updateQueue)&&ho(n,t,e));case 3:if(null!==(t=n.updateQueue)){if(e=null,null!==n.child)switch(n.child.tag){case 5:case 1:e=n.child.stateNode}ho(n,t,e)}return;case 5:return e=n.stateNode,void(null===t&&4&n.flags&&qr(n.type,n.memoizedProps)&&e.focus());case 6:case 4:case 12:case 19:case 17:case 20:case 21:case 23:case 24:return;case 13:return void(null===n.memoizedState&&(n=n.alternate,null!==n&&(n=n.memoizedState,null!==n&&(n=n.dehydrated,null!==n&&Et(n)))))}throw Error(i(163))}function yl(e,t){for(var n=e;;){if(5===n.tag){var r=n.stateNode;if(t)"function"==typeof(r=r.style).setProperty?r.setProperty("display","none","important"):r.display="none";else{r=n.stateNode;var a=n.memoizedProps.style;a=null!=a&&a.hasOwnProperty("display")?a.display:null,r.style.display=ke("display",a)}}else if(6===n.tag)n.stateNode.nodeValue=t?"":n.memoizedProps;else if((23!==n.tag&&24!==n.tag||null===n.memoizedState||n===e)&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===e)break;for(;null===n.sibling;){if(null===n.return||n.return===e)return;n=n.return}n.sibling.return=n.return,n=n.sibling}}function bl(e,t){if(xa&&"function"==typeof xa.onCommitFiberUnmount)try{xa.onCommitFiberUnmount(Sa,t)}catch(o){}switch(t.tag){case 0:case 11:case 14:case 15:case 22:if(null!==(e=t.updateQueue)&&null!==(e=e.lastEffect)){var n=e=e.next;do{var r=n,a=r.destroy;if(r=r.tag,void 0!==a)if(0!=(4&r))Fs(t,n);else{r=t;try{a()}catch(o){zs(r,o)}}n=n.next}while(n!==e)}break;case 1:if(hl(t),"function"==typeof(e=t.stateNode).componentWillUnmount)try{e.props=t.memoizedProps,e.state=t.memoizedState,e.componentWillUnmount()}catch(o){zs(t,o)}break;case 5:hl(t);break;case 4:_l(e,t)}}function wl(e){e.alternate=null,e.child=null,e.dependencies=null,e.firstEffect=null,e.lastEffect=null,e.memoizedProps=null,e.memoizedState=null,e.pendingProps=null,e.return=null,e.updateQueue=null}function kl(e){return 5===e.tag||3===e.tag||4===e.tag}function El(e){e:{for(var t=e.return;null!==t;){if(kl(t))break e;t=t.return}throw Error(i(160))}var n=t;switch(t=n.stateNode,n.tag){case 5:var r=!1;break;case 3:case 4:t=t.containerInfo,r=!0;break;default:throw Error(i(161))}16&n.flags&&(ye(t,""),n.flags&=-17);e:t:for(n=e;;){for(;null===n.sibling;){if(null===n.return||kl(n.return)){n=null;break e}n=n.return}for(n.sibling.return=n.return,n=n.sibling;5!==n.tag&&6!==n.tag&&18!==n.tag;){if(2&n.flags)continue t;if(null===n.child||4===n.tag)continue t;n.child.return=n,n=n.child}if(!(2&n.flags)){n=n.stateNode;break e}}r?Sl(e,n,t):xl(e,n,t)}function Sl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?8===n.nodeType?n.parentNode.insertBefore(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!=(n=n._reactRootContainer)||null!==t.onclick||(t.onclick=zr));else if(4!==r&&null!==(e=e.child))for(Sl(e,t,n),e=e.sibling;null!==e;)Sl(e,t,n),e=e.sibling}function xl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?n.insertBefore(e,t):n.appendChild(e);else if(4!==r&&null!==(e=e.child))for(xl(e,t,n),e=e.sibling;null!==e;)xl(e,t,n),e=e.sibling}function _l(e,t){for(var n,r,a=t,o=!1;;){if(!o){o=a.return;e:for(;;){if(null===o)throw Error(i(160));switch(n=o.stateNode,o.tag){case 5:r=!1;break e;case 3:case 4:n=n.containerInfo,r=!0;break e}o=o.return}o=!0}if(5===a.tag||6===a.tag){e:for(var l=e,s=a,u=s;;)if(bl(l,u),null!==u.child&&4!==u.tag)u.child.return=u,u=u.child;else{if(u===s)break e;for(;null===u.sibling;){if(null===u.return||u.return===s)break e;u=u.return}u.sibling.return=u.return,u=u.sibling}r?(l=n,s=a.stateNode,8===l.nodeType?l.parentNode.removeChild(s):l.removeChild(s)):n.removeChild(a.stateNode)}else if(4===a.tag){if(null!==a.child){n=a.stateNode.containerInfo,r=!0,a.child.return=a,a=a.child;continue}}else if(bl(e,a),null!==a.child){a.child.return=a,a=a.child;continue}if(a===t)break;for(;null===a.sibling;){if(null===a.return||a.return===t)return;4===(a=a.return).tag&&(o=!1)}a.sibling.return=a.return,a=a.sibling}}function Cl(e,t){switch(t.tag){case 0:case 11:case 14:case 15:case 22:var n=t.updateQueue;if(null!==(n=null!==n?n.lastEffect:null)){var r=n=n.next;do{3==(3&r.tag)&&(e=r.destroy,r.destroy=void 0,void 0!==e&&e()),r=r.next}while(r!==n)}return;case 1:case 12:case 17:return;case 5:if(null!=(n=t.stateNode)){r=t.memoizedProps;var a=null!==e?e.memoizedProps:r;e=t.type;var o=t.updateQueue;if(t.updateQueue=null,null!==o){for(n[Jr]=r,"input"===e&&"radio"===r.type&&null!=r.name&&te(n,r),_e(e,a),t=_e(e,r),a=0;a<o.length;a+=2){var l=o[a],s=o[a+1];"style"===l?Ee(n,s):"dangerouslySetInnerHTML"===l?ve(n,s):"children"===l?ye(n,s):w(n,l,s,t)}switch(e){case"input":ne(n,r);break;case"textarea":ue(n,r);break;case"select":e=n._wrapperState.wasMultiple,n._wrapperState.wasMultiple=!!r.multiple,null!=(o=r.value)?ie(n,!!r.multiple,o,!1):e!==!!r.multiple&&(null!=r.defaultValue?ie(n,!!r.multiple,r.defaultValue,!0):ie(n,!!r.multiple,r.multiple?[]:"",!1))}}}return;case 6:if(null===t.stateNode)throw Error(i(162));return void(t.stateNode.nodeValue=t.memoizedProps);case 3:return void((n=t.stateNode).hydrate&&(n.hydrate=!1,Et(n.containerInfo)));case 13:return null!==t.memoizedState&&(Gl=qa(),yl(t.child,!0)),void Tl(t);case 19:return void Tl(t);case 23:case 24:return void yl(t,null!==t.memoizedState)}throw Error(i(163))}function Tl(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new ml),t.forEach((function(t){var r=Us.bind(null,e,t);n.has(t)||(n.add(t),t.then(r,r))}))}}function Ll(e,t){return null!==e&&(null===(e=e.memoizedState)||null!==e.dehydrated)&&(null!==(t=t.memoizedState)&&null===t.dehydrated)}var Rl=Math.ceil,Nl=k.ReactCurrentDispatcher,Al=k.ReactCurrentOwner,Ol=0,Pl=null,Il=null,Dl=0,Ml=0,Fl=ua(0),jl=0,Bl=null,zl=0,$l=0,Ul=0,ql=0,Hl=null,Gl=0,Zl=1/0;function Ql(){Zl=qa()+500}var Vl,Wl=null,Kl=!1,Yl=null,Xl=null,Jl=!1,es=null,ts=90,ns=[],rs=[],as=null,os=0,is=null,ls=-1,ss=0,us=0,cs=null,ds=!1;function fs(){return 0!=(48&Ol)?qa():-1!==ls?ls:ls=qa()}function ps(e){if(0==(2&(e=e.mode)))return 1;if(0==(4&e))return 99===Ha()?1:2;if(0===ss&&(ss=zl),0!==Ka.transition){0!==us&&(us=null!==Hl?Hl.pendingLanes:0),e=ss;var t=4186112&~us;return 0===(t&=-t)&&(0===(t=(e=4186112&~e)&-e)&&(t=8192)),t}return e=Ha(),0!=(4&Ol)&&98===e?e=zt(12,ss):e=zt(e=function(e){switch(e){case 99:return 15;case 98:return 10;case 97:case 96:return 8;case 95:return 2;default:return 0}}(e),ss),e}function ms(e,t,n){if(50<os)throw os=0,is=null,Error(i(185));if(null===(e=hs(e,t)))return null;qt(e,t,n),e===Pl&&(Ul|=t,4===jl&&ys(e,Dl));var r=Ha();1===t?0!=(8&Ol)&&0==(48&Ol)?bs(e):(gs(e,n),0===Ol&&(Ql(),Va())):(0==(4&Ol)||98!==r&&99!==r||(null===as?as=new Set([e]):as.add(e)),gs(e,n)),Hl=e}function hs(e,t){e.lanes|=t;var n=e.alternate;for(null!==n&&(n.lanes|=t),n=e,e=e.return;null!==e;)e.childLanes|=t,null!==(n=e.alternate)&&(n.childLanes|=t),n=e,e=e.return;return 3===n.tag?n.stateNode:null}function gs(e,t){for(var n=e.callbackNode,r=e.suspendedLanes,a=e.pingedLanes,o=e.expirationTimes,l=e.pendingLanes;0<l;){var s=31-Ht(l),u=1<<s,c=o[s];if(-1===c){if(0==(u&r)||0!=(u&a)){c=t,Ft(u);var d=Mt;o[s]=10<=d?c+250:6<=d?c+5e3:-1}}else c<=t&&(e.expiredLanes|=u);l&=~u}if(r=jt(e,e===Pl?Dl:0),t=Mt,0===r)null!==n&&(n!==Fa&&Ta(n),e.callbackNode=null,e.callbackPriority=0);else{if(null!==n){if(e.callbackPriority===t)return;n!==Fa&&Ta(n)}15===t?(n=bs.bind(null,e),null===Ba?(Ba=[n],za=Ca(Oa,Wa)):Ba.push(n),n=Fa):14===t?n=Qa(99,bs.bind(null,e)):(n=function(e){switch(e){case 15:case 14:return 99;case 13:case 12:case 11:case 10:return 98;case 9:case 8:case 7:case 6:case 4:case 5:return 97;case 3:case 2:case 1:return 95;case 0:return 90;default:throw Error(i(358,e))}}(t),n=Qa(n,vs.bind(null,e))),e.callbackPriority=t,e.callbackNode=n}}function vs(e){if(ls=-1,us=ss=0,0!=(48&Ol))throw Error(i(327));var t=e.callbackNode;if(Ds()&&e.callbackNode!==t)return null;var n=jt(e,e===Pl?Dl:0);if(0===n)return null;var r=n,a=Ol;Ol|=16;var o=Cs();for(Pl===e&&Dl===r||(Ql(),xs(e,r));;)try{Rs();break}catch(s){_s(e,s)}if(no(),Nl.current=o,Ol=a,null!==Il?r=0:(Pl=null,Dl=0,r=jl),0!=(zl&Ul))xs(e,0);else if(0!==r){if(2===r&&(Ol|=64,e.hydrate&&(e.hydrate=!1,Qr(e.containerInfo)),0!==(n=Bt(e))&&(r=Ts(e,n))),1===r)throw t=Bl,xs(e,0),ys(e,n),gs(e,qa()),t;switch(e.finishedWork=e.current.alternate,e.finishedLanes=n,r){case 0:case 1:throw Error(i(345));case 2:case 5:Os(e);break;case 3:if(ys(e,n),(62914560&n)===n&&10<(r=Gl+500-qa())){if(0!==jt(e,0))break;if(((a=e.suspendedLanes)&n)!==n){fs(),e.pingedLanes|=e.suspendedLanes&a;break}e.timeoutHandle=Gr(Os.bind(null,e),r);break}Os(e);break;case 4:if(ys(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-Ht(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=qa()-n)?120:480>n?480:1080>n?1080:1920>n?1920:3e3>n?3e3:4320>n?4320:1960*Rl(n/1960))-n)){e.timeoutHandle=Gr(Os.bind(null,e),n);break}Os(e);break;default:throw Error(i(329))}}return gs(e,qa()),e.callbackNode===t?vs.bind(null,e):null}function ys(e,t){for(t&=~ql,t&=~Ul,e.suspendedLanes|=t,e.pingedLanes&=~t,e=e.expirationTimes;0<t;){var n=31-Ht(t),r=1<<n;e[n]=-1,t&=~r}}function bs(e){if(0!=(48&Ol))throw Error(i(327));if(Ds(),e===Pl&&0!=(e.expiredLanes&Dl)){var t=Dl,n=Ts(e,t);0!=(zl&Ul)&&(n=Ts(e,t=jt(e,t)))}else n=Ts(e,t=jt(e,0));if(0!==e.tag&&2===n&&(Ol|=64,e.hydrate&&(e.hydrate=!1,Qr(e.containerInfo)),0!==(t=Bt(e))&&(n=Ts(e,t))),1===n)throw n=Bl,xs(e,0),ys(e,t),gs(e,qa()),n;return e.finishedWork=e.current.alternate,e.finishedLanes=t,Os(e),gs(e,qa()),null}function ws(e,t){var n=Ol;Ol|=1;try{return e(t)}finally{0===(Ol=n)&&(Ql(),Va())}}function ks(e,t){var n=Ol;Ol&=-2,Ol|=8;try{return e(t)}finally{0===(Ol=n)&&(Ql(),Va())}}function Es(e,t){da(Fl,Ml),Ml|=t,zl|=t}function Ss(){Ml=Fl.current,ca(Fl)}function xs(e,t){e.finishedWork=null,e.finishedLanes=0;var n=e.timeoutHandle;if(-1!==n&&(e.timeoutHandle=-1,Zr(n)),null!==Il)for(n=Il.return;null!==n;){var r=n;switch(r.tag){case 1:null!=(r=r.type.childContextTypes)&&ya();break;case 3:Do(),ca(ma),ca(pa),Ko();break;case 5:Fo(r);break;case 4:Do();break;case 13:case 19:ca(jo);break;case 10:ro(r);break;case 23:case 24:Ss()}n=n.return}Pl=e,Il=Zs(e.current,null),Dl=Ml=zl=t,jl=0,Bl=null,ql=Ul=$l=0}function _s(e,t){for(;;){var n=Il;try{if(no(),Yo.current=Oi,ri){for(var r=ei.memoizedState;null!==r;){var a=r.queue;null!==a&&(a.pending=null),r=r.next}ri=!1}if(Jo=0,ni=ti=ei=null,ai=!1,Al.current=null,null===n||null===n.return){jl=1,Bl=t,Il=null;break}e:{var o=e,i=n.return,l=n,s=t;if(t=Dl,l.flags|=2048,l.firstEffect=l.lastEffect=null,null!==s&&"object"==typeof s&&"function"==typeof s.then){var u=s;if(0==(2&l.mode)){var c=l.alternate;c?(l.updateQueue=c.updateQueue,l.memoizedState=c.memoizedState,l.lanes=c.lanes):(l.updateQueue=null,l.memoizedState=null)}var d=0!=(1&jo.current),f=i;do{var p;if(p=13===f.tag){var m=f.memoizedState;if(null!==m)p=null!==m.dehydrated;else{var h=f.memoizedProps;p=void 0!==h.fallback&&(!0!==h.unstable_avoidThisFallback||!d)}}if(p){var g=f.updateQueue;if(null===g){var v=new Set;v.add(u),f.updateQueue=v}else g.add(u);if(0==(2&f.mode)){if(f.flags|=64,l.flags|=16384,l.flags&=-2981,1===l.tag)if(null===l.alternate)l.tag=17;else{var y=co(-1,1);y.tag=2,fo(l,y)}l.lanes|=1;break e}s=void 0,l=t;var b=o.pingCache;if(null===b?(b=o.pingCache=new dl,s=new Set,b.set(u,s)):void 0===(s=b.get(u))&&(s=new Set,b.set(u,s)),!s.has(l)){s.add(l);var w=$s.bind(null,o,u,l);u.then(w,w)}f.flags|=4096,f.lanes=t;break e}f=f.return}while(null!==f);s=Error((Q(l.type)||"A React component")+" suspended while rendering, but no fallback UI was specified.\n\nAdd a <Suspense fallback=...> component higher in the tree to provide a loading indicator or placeholder to display.")}5!==jl&&(jl=2),s=ul(s,l),f=i;do{switch(f.tag){case 3:o=s,f.flags|=4096,t&=-t,f.lanes|=t,po(f,fl(0,o,t));break e;case 1:o=s;var k=f.type,E=f.stateNode;if(0==(64&f.flags)&&("function"==typeof k.getDerivedStateFromError||null!==E&&"function"==typeof E.componentDidCatch&&(null===Xl||!Xl.has(E)))){f.flags|=4096,t&=-t,f.lanes|=t,po(f,pl(f,o,t));break e}}f=f.return}while(null!==f)}As(n)}catch(S){t=S,Il===n&&null!==n&&(Il=n=n.return);continue}break}}function Cs(){var e=Nl.current;return Nl.current=Oi,null===e?Oi:e}function Ts(e,t){var n=Ol;Ol|=16;var r=Cs();for(Pl===e&&Dl===t||xs(e,t);;)try{Ls();break}catch(a){_s(e,a)}if(no(),Ol=n,Nl.current=r,null!==Il)throw Error(i(261));return Pl=null,Dl=0,jl}function Ls(){for(;null!==Il;)Ns(Il)}function Rs(){for(;null!==Il&&!La();)Ns(Il)}function Ns(e){var t=Vl(e.alternate,e,Ml);e.memoizedProps=e.pendingProps,null===t?As(e):Il=t,Al.current=null}function As(e){var t=e;do{var n=t.alternate;if(e=t.return,0==(2048&t.flags)){if(null!==(n=ll(n,t,Ml)))return void(Il=n);if(24!==(n=t).tag&&23!==n.tag||null===n.memoizedState||0!=(1073741824&Ml)||0==(4&n.mode)){for(var r=0,a=n.child;null!==a;)r|=a.lanes|a.childLanes,a=a.sibling;n.childLanes=r}null!==e&&0==(2048&e.flags)&&(null===e.firstEffect&&(e.firstEffect=t.firstEffect),null!==t.lastEffect&&(null!==e.lastEffect&&(e.lastEffect.nextEffect=t.firstEffect),e.lastEffect=t.lastEffect),1<t.flags&&(null!==e.lastEffect?e.lastEffect.nextEffect=t:e.firstEffect=t,e.lastEffect=t))}else{if(null!==(n=sl(t)))return n.flags&=2047,void(Il=n);null!==e&&(e.firstEffect=e.lastEffect=null,e.flags|=2048)}if(null!==(t=t.sibling))return void(Il=t);Il=t=e}while(null!==t);0===jl&&(jl=5)}function Os(e){var t=Ha();return Za(99,Ps.bind(null,e,t)),null}function Ps(e,t){do{Ds()}while(null!==es);if(0!=(48&Ol))throw Error(i(327));var n=e.finishedWork;if(null===n)return null;if(e.finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(i(177));e.callbackNode=null;var r=n.lanes|n.childLanes,a=r,o=e.pendingLanes&~a;e.pendingLanes=a,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=a,e.mutableReadLanes&=a,e.entangledLanes&=a,a=e.entanglements;for(var l=e.eventTimes,s=e.expirationTimes;0<o;){var u=31-Ht(o),c=1<<u;a[u]=0,l[u]=-1,s[u]=-1,o&=~c}if(null!==as&&0==(24&r)&&as.has(e)&&as.delete(e),e===Pl&&(Il=Pl=null,Dl=0),1<n.flags?null!==n.lastEffect?(n.lastEffect.nextEffect=n,r=n.firstEffect):r=n:r=n.firstEffect,null!==r){if(a=Ol,Ol|=32,Al.current=null,$r=Wt,vr(l=gr())){if("selectionStart"in l)s={start:l.selectionStart,end:l.selectionEnd};else e:if(s=(s=l.ownerDocument)&&s.defaultView||window,(c=s.getSelection&&s.getSelection())&&0!==c.rangeCount){s=c.anchorNode,o=c.anchorOffset,u=c.focusNode,c=c.focusOffset;try{s.nodeType,u.nodeType}catch(C){s=null;break e}var d=0,f=-1,p=-1,m=0,h=0,g=l,v=null;t:for(;;){for(var y;g!==s||0!==o&&3!==g.nodeType||(f=d+o),g!==u||0!==c&&3!==g.nodeType||(p=d+c),3===g.nodeType&&(d+=g.nodeValue.length),null!==(y=g.firstChild);)v=g,g=y;for(;;){if(g===l)break t;if(v===s&&++m===o&&(f=d),v===u&&++h===c&&(p=d),null!==(y=g.nextSibling))break;v=(g=v).parentNode}g=y}s=-1===f||-1===p?null:{start:f,end:p}}else s=null;s=s||{start:0,end:0}}else s=null;Ur={focusedElem:l,selectionRange:s},Wt=!1,cs=null,ds=!1,Wl=r;do{try{Is()}catch(C){if(null===Wl)throw Error(i(330));zs(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);cs=null,Wl=r;do{try{for(l=e;null!==Wl;){var b=Wl.flags;if(16&b&&ye(Wl.stateNode,""),128&b){var w=Wl.alternate;if(null!==w){var k=w.ref;null!==k&&("function"==typeof k?k(null):k.current=null)}}switch(1038&b){case 2:El(Wl),Wl.flags&=-3;break;case 6:El(Wl),Wl.flags&=-3,Cl(Wl.alternate,Wl);break;case 1024:Wl.flags&=-1025;break;case 1028:Wl.flags&=-1025,Cl(Wl.alternate,Wl);break;case 4:Cl(Wl.alternate,Wl);break;case 8:_l(l,s=Wl);var E=s.alternate;wl(s),null!==E&&wl(E)}Wl=Wl.nextEffect}}catch(C){if(null===Wl)throw Error(i(330));zs(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);if(k=Ur,w=gr(),b=k.focusedElem,l=k.selectionRange,w!==b&&b&&b.ownerDocument&&hr(b.ownerDocument.documentElement,b)){null!==l&&vr(b)&&(w=l.start,void 0===(k=l.end)&&(k=w),"selectionStart"in b?(b.selectionStart=w,b.selectionEnd=Math.min(k,b.value.length)):(k=(w=b.ownerDocument||document)&&w.defaultView||window).getSelection&&(k=k.getSelection(),s=b.textContent.length,E=Math.min(l.start,s),l=void 0===l.end?E:Math.min(l.end,s),!k.extend&&E>l&&(s=l,l=E,E=s),s=mr(b,E),o=mr(b,l),s&&o&&(1!==k.rangeCount||k.anchorNode!==s.node||k.anchorOffset!==s.offset||k.focusNode!==o.node||k.focusOffset!==o.offset)&&((w=w.createRange()).setStart(s.node,s.offset),k.removeAllRanges(),E>l?(k.addRange(w),k.extend(o.node,o.offset)):(w.setEnd(o.node,o.offset),k.addRange(w))))),w=[];for(k=b;k=k.parentNode;)1===k.nodeType&&w.push({element:k,left:k.scrollLeft,top:k.scrollTop});for("function"==typeof b.focus&&b.focus(),b=0;b<w.length;b++)(k=w[b]).element.scrollLeft=k.left,k.element.scrollTop=k.top}Wt=!!$r,Ur=$r=null,e.current=n,Wl=r;do{try{for(b=e;null!==Wl;){var S=Wl.flags;if(36&S&&vl(b,Wl.alternate,Wl),128&S){w=void 0;var x=Wl.ref;if(null!==x){var _=Wl.stateNode;Wl.tag,w=_,"function"==typeof x?x(w):x.current=w}}Wl=Wl.nextEffect}}catch(C){if(null===Wl)throw Error(i(330));zs(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);Wl=null,ja(),Ol=a}else e.current=n;if(Jl)Jl=!1,es=e,ts=t;else for(Wl=r;null!==Wl;)t=Wl.nextEffect,Wl.nextEffect=null,8&Wl.flags&&((S=Wl).sibling=null,S.stateNode=null),Wl=t;if(0===(r=e.pendingLanes)&&(Xl=null),1===r?e===is?os++:(os=0,is=e):os=0,n=n.stateNode,xa&&"function"==typeof xa.onCommitFiberRoot)try{xa.onCommitFiberRoot(Sa,n,void 0,64==(64&n.current.flags))}catch(C){}if(gs(e,qa()),Kl)throw Kl=!1,e=Yl,Yl=null,e;return 0!=(8&Ol)||Va(),null}function Is(){for(;null!==Wl;){var e=Wl.alternate;ds||null===cs||(0!=(8&Wl.flags)?et(Wl,cs)&&(ds=!0):13===Wl.tag&&Ll(e,Wl)&&et(Wl,cs)&&(ds=!0));var t=Wl.flags;0!=(256&t)&&gl(e,Wl),0==(512&t)||Jl||(Jl=!0,Qa(97,(function(){return Ds(),null}))),Wl=Wl.nextEffect}}function Ds(){if(90!==ts){var e=97<ts?97:ts;return ts=90,Za(e,js)}return!1}function Ms(e,t){ns.push(t,e),Jl||(Jl=!0,Qa(97,(function(){return Ds(),null})))}function Fs(e,t){rs.push(t,e),Jl||(Jl=!0,Qa(97,(function(){return Ds(),null})))}function js(){if(null===es)return!1;var e=es;if(es=null,0!=(48&Ol))throw Error(i(331));var t=Ol;Ol|=32;var n=rs;rs=[];for(var r=0;r<n.length;r+=2){var a=n[r],o=n[r+1],l=a.destroy;if(a.destroy=void 0,"function"==typeof l)try{l()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(n=ns,ns=[],r=0;r<n.length;r+=2){a=n[r],o=n[r+1];try{var s=a.create;a.destroy=s()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(s=e.current.firstEffect;null!==s;)e=s.nextEffect,s.nextEffect=null,8&s.flags&&(s.sibling=null,s.stateNode=null),s=e;return Ol=t,Va(),!0}function Bs(e,t,n){fo(e,t=fl(0,t=ul(n,t),1)),t=fs(),null!==(e=hs(e,1))&&(qt(e,1,t),gs(e,t))}function zs(e,t){if(3===e.tag)Bs(e,e,t);else for(var n=e.return;null!==n;){if(3===n.tag){Bs(n,e,t);break}if(1===n.tag){var r=n.stateNode;if("function"==typeof n.type.getDerivedStateFromError||"function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r))){var a=pl(n,e=ul(t,e),1);if(fo(n,a),a=fs(),null!==(n=hs(n,1)))qt(n,1,a),gs(n,a);else if("function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r)))try{r.componentDidCatch(t,e)}catch(o){}break}}n=n.return}}function $s(e,t,n){var r=e.pingCache;null!==r&&r.delete(t),t=fs(),e.pingedLanes|=e.suspendedLanes&n,Pl===e&&(Dl&n)===n&&(4===jl||3===jl&&(62914560&Dl)===Dl&&500>qa()-Gl?xs(e,0):ql|=n),gs(e,t)}function Us(e,t){var n=e.stateNode;null!==n&&n.delete(t),0===(t=0)&&(0==(2&(t=e.mode))?t=1:0==(4&t)?t=99===Ha()?1:2:(0===ss&&(ss=zl),0===(t=$t(62914560&~ss))&&(t=4194304))),n=fs(),null!==(e=hs(e,t))&&(qt(e,t,n),gs(e,n))}function qs(e,t,n,r){this.tag=e,this.key=n,this.sibling=this.child=this.return=this.stateNode=this.type=this.elementType=null,this.index=0,this.ref=null,this.pendingProps=t,this.dependencies=this.memoizedState=this.updateQueue=this.memoizedProps=null,this.mode=r,this.flags=0,this.lastEffect=this.firstEffect=this.nextEffect=null,this.childLanes=this.lanes=0,this.alternate=null}function Hs(e,t,n,r){return new qs(e,t,n,r)}function Gs(e){return!(!(e=e.prototype)||!e.isReactComponent)}function Zs(e,t){var n=e.alternate;return null===n?((n=Hs(e.tag,t,e.key,e.mode)).elementType=e.elementType,n.type=e.type,n.stateNode=e.stateNode,n.alternate=e,e.alternate=n):(n.pendingProps=t,n.type=e.type,n.flags=0,n.nextEffect=null,n.firstEffect=null,n.lastEffect=null),n.childLanes=e.childLanes,n.lanes=e.lanes,n.child=e.child,n.memoizedProps=e.memoizedProps,n.memoizedState=e.memoizedState,n.updateQueue=e.updateQueue,t=e.dependencies,n.dependencies=null===t?null:{lanes:t.lanes,firstContext:t.firstContext},n.sibling=e.sibling,n.index=e.index,n.ref=e.ref,n}function Qs(e,t,n,r,a,o){var l=2;if(r=e,"function"==typeof e)Gs(e)&&(l=1);else if("string"==typeof e)l=5;else e:switch(e){case x:return Vs(n.children,a,o,t);case M:l=8,a|=16;break;case _:l=8,a|=1;break;case C:return(e=Hs(12,n,t,8|a)).elementType=C,e.type=C,e.lanes=o,e;case N:return(e=Hs(13,n,t,a)).type=N,e.elementType=N,e.lanes=o,e;case A:return(e=Hs(19,n,t,a)).elementType=A,e.lanes=o,e;case F:return Ws(n,a,o,t);case j:return(e=Hs(24,n,t,a)).elementType=j,e.lanes=o,e;default:if("object"==typeof e&&null!==e)switch(e.$$typeof){case T:l=10;break e;case L:l=9;break e;case R:l=11;break e;case O:l=14;break e;case P:l=16,r=null;break e;case I:l=22;break e}throw Error(i(130,null==e?e:typeof e,""))}return(t=Hs(l,n,t,a)).elementType=e,t.type=r,t.lanes=o,t}function Vs(e,t,n,r){return(e=Hs(7,e,r,t)).lanes=n,e}function Ws(e,t,n,r){return(e=Hs(23,e,r,t)).elementType=F,e.lanes=n,e}function Ks(e,t,n){return(e=Hs(6,e,null,t)).lanes=n,e}function Ys(e,t,n){return(t=Hs(4,null!==e.children?e.children:[],e.key,t)).lanes=n,t.stateNode={containerInfo:e.containerInfo,pendingChildren:null,implementation:e.implementation},t}function Xs(e,t,n){this.tag=t,this.containerInfo=e,this.finishedWork=this.pingCache=this.current=this.pendingChildren=null,this.timeoutHandle=-1,this.pendingContext=this.context=null,this.hydrate=n,this.callbackNode=null,this.callbackPriority=0,this.eventTimes=Ut(0),this.expirationTimes=Ut(-1),this.entangledLanes=this.finishedLanes=this.mutableReadLanes=this.expiredLanes=this.pingedLanes=this.suspendedLanes=this.pendingLanes=0,this.entanglements=Ut(0),this.mutableSourceEagerHydrationData=null}function Js(e,t,n){var r=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null;return{$$typeof:S,key:null==r?null:""+r,children:e,containerInfo:t,implementation:n}}function eu(e,t,n,r){var a=t.current,o=fs(),l=ps(a);e:if(n){t:{if(Ke(n=n._reactInternals)!==n||1!==n.tag)throw Error(i(170));var s=n;do{switch(s.tag){case 3:s=s.stateNode.context;break t;case 1:if(va(s.type)){s=s.stateNode.__reactInternalMemoizedMergedChildContext;break t}}s=s.return}while(null!==s);throw Error(i(171))}if(1===n.tag){var u=n.type;if(va(u)){n=wa(n,u,s);break e}}n=s}else n=fa;return null===t.context?t.context=n:t.pendingContext=n,(t=co(o,l)).payload={element:e},null!==(r=void 0===r?null:r)&&(t.callback=r),fo(a,t),ms(a,l,o),l}function tu(e){return(e=e.current).child?(e.child.tag,e.child.stateNode):null}function nu(e,t){if(null!==(e=e.memoizedState)&&null!==e.dehydrated){var n=e.retryLane;e.retryLane=0!==n&&n<t?n:t}}function ru(e,t){nu(e,t),(e=e.alternate)&&nu(e,t)}function au(e,t,n){var r=null!=n&&null!=n.hydrationOptions&&n.hydrationOptions.mutableSources||null;if(n=new Xs(e,t,null!=n&&!0===n.hydrate),t=Hs(3,null,null,2===t?7:1===t?3:0),n.current=t,t.stateNode=n,so(t),e[ea]=n.current,Or(8===e.nodeType?e.parentNode:e),r)for(e=0;e<r.length;e++){var a=(t=r[e])._getVersion;a=a(t._source),null==n.mutableSourceEagerHydrationData?n.mutableSourceEagerHydrationData=[t,a]:n.mutableSourceEagerHydrationData.push(t,a)}this._internalRoot=n}function ou(e){return!(!e||1!==e.nodeType&&9!==e.nodeType&&11!==e.nodeType&&(8!==e.nodeType||" react-mount-point-unstable "!==e.nodeValue))}function iu(e,t,n,r,a){var o=n._reactRootContainer;if(o){var i=o._internalRoot;if("function"==typeof a){var l=a;a=function(){var e=tu(i);l.call(e)}}eu(t,i,e,a)}else{if(o=n._reactRootContainer=function(e,t){if(t||(t=!(!(t=e?9===e.nodeType?e.documentElement:e.firstChild:null)||1!==t.nodeType||!t.hasAttribute("data-reactroot"))),!t)for(var n;n=e.lastChild;)e.removeChild(n);return new au(e,0,t?{hydrate:!0}:void 0)}(n,r),i=o._internalRoot,"function"==typeof a){var s=a;a=function(){var e=tu(i);s.call(e)}}ks((function(){eu(t,i,e,a)}))}return tu(i)}function lu(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!ou(t))throw Error(i(200));return Js(e,t,null,n)}Vl=function(e,t,n){var r=t.lanes;if(null!==e)if(e.memoizedProps!==t.pendingProps||ma.current)Fi=!0;else{if(0==(n&r)){switch(Fi=!1,t.tag){case 3:Qi(t),Vo();break;case 5:Mo(t);break;case 1:va(t.type)&&ka(t);break;case 4:Io(t,t.stateNode.containerInfo);break;case 10:r=t.memoizedProps.value;var a=t.type._context;da(Xa,a._currentValue),a._currentValue=r;break;case 13:if(null!==t.memoizedState)return 0!=(n&t.child.childLanes)?Xi(e,t,n):(da(jo,1&jo.current),null!==(t=ol(e,t,n))?t.sibling:null);da(jo,1&jo.current);break;case 19:if(r=0!=(n&t.childLanes),0!=(64&e.flags)){if(r)return al(e,t,n);t.flags|=64}if(null!==(a=t.memoizedState)&&(a.rendering=null,a.tail=null,a.lastEffect=null),da(jo,jo.current),r)break;return null;case 23:case 24:return t.lanes=0,Ui(e,t,n)}return ol(e,t,n)}Fi=0!=(16384&e.flags)}else Fi=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=ga(t,pa.current),oo(t,n),a=li(null,t,r,e,a,n),t.flags|=1,"object"==typeof a&&null!==a&&"function"==typeof a.render&&void 0===a.$$typeof){if(t.tag=1,t.memoizedState=null,t.updateQueue=null,va(r)){var o=!0;ka(t)}else o=!1;t.memoizedState=null!==a.state&&void 0!==a.state?a.state:null,so(t);var l=r.getDerivedStateFromProps;"function"==typeof l&&vo(t,r,l,e),a.updater=yo,t.stateNode=a,a._reactInternals=t,Eo(t,r,e,n),t=Zi(null,t,r,!0,o,n)}else t.tag=0,ji(null,t,a,n),t=t.child;return t;case 16:a=t.elementType;e:{switch(null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=(o=a._init)(a._payload),t.type=a,o=t.tag=function(e){if("function"==typeof e)return Gs(e)?1:0;if(null!=e){if((e=e.$$typeof)===R)return 11;if(e===O)return 14}return 2}(a),e=Ya(a,e),o){case 0:t=Hi(null,t,a,e,n);break e;case 1:t=Gi(null,t,a,e,n);break e;case 11:t=Bi(null,t,a,e,n);break e;case 14:t=zi(null,t,a,Ya(a.type,e),r,n);break e}throw Error(i(306,a,""))}return t;case 0:return r=t.type,a=t.pendingProps,Hi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 1:return r=t.type,a=t.pendingProps,Gi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 3:if(Qi(t),r=t.updateQueue,null===e||null===r)throw Error(i(282));if(r=t.pendingProps,a=null!==(a=t.memoizedState)?a.element:null,uo(e,t),mo(t,r,null,n),(r=t.memoizedState.element)===a)Vo(),t=ol(e,t,n);else{if((o=(a=t.stateNode).hydrate)&&($o=Vr(t.stateNode.containerInfo.firstChild),zo=t,o=Uo=!0),o){if(null!=(e=a.mutableSourceEagerHydrationData))for(a=0;a<e.length;a+=2)(o=e[a])._workInProgressVersionPrimary=e[a+1],Wo.push(o);for(n=Lo(t,null,r,n),t.child=n;n;)n.flags=-3&n.flags|1024,n=n.sibling}else ji(e,t,r,n),Vo();t=t.child}return t;case 5:return Mo(t),null===e&&Go(t),r=t.type,a=t.pendingProps,o=null!==e?e.memoizedProps:null,l=a.children,Hr(r,a)?l=null:null!==o&&Hr(r,o)&&(t.flags|=16),qi(e,t),ji(e,t,l,n),t.child;case 6:return null===e&&Go(t),null;case 13:return Xi(e,t,n);case 4:return Io(t,t.stateNode.containerInfo),r=t.pendingProps,null===e?t.child=To(t,null,r,n):ji(e,t,r,n),t.child;case 11:return r=t.type,a=t.pendingProps,Bi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 7:return ji(e,t,t.pendingProps,n),t.child;case 8:case 12:return ji(e,t,t.pendingProps.children,n),t.child;case 10:e:{r=t.type._context,a=t.pendingProps,l=t.memoizedProps,o=a.value;var s=t.type._context;if(da(Xa,s._currentValue),s._currentValue=o,null!==l)if(s=l.value,0===(o=cr(s,o)?0:0|("function"==typeof r._calculateChangedBits?r._calculateChangedBits(s,o):1073741823))){if(l.children===a.children&&!ma.current){t=ol(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var u=s.dependencies;if(null!==u){l=s.child;for(var c=u.firstContext;null!==c;){if(c.context===r&&0!=(c.observedBits&o)){1===s.tag&&((c=co(-1,n&-n)).tag=2,fo(s,c)),s.lanes|=n,null!==(c=s.alternate)&&(c.lanes|=n),ao(s.return,n),u.lanes|=n;break}c=c.next}}else l=10===s.tag&&s.type===t.type?null:s.child;if(null!==l)l.return=s;else for(l=s;null!==l;){if(l===t){l=null;break}if(null!==(s=l.sibling)){s.return=l.return,l=s;break}l=l.return}s=l}ji(e,t,a.children,n),t=t.child}return t;case 9:return a=t.type,r=(o=t.pendingProps).children,oo(t,n),r=r(a=io(a,o.unstable_observedBits)),t.flags|=1,ji(e,t,r,n),t.child;case 14:return o=Ya(a=t.type,t.pendingProps),zi(e,t,a,o=Ya(a.type,o),r,n);case 15:return $i(e,t,t.type,t.pendingProps,r,n);case 17:return r=t.type,a=t.pendingProps,a=t.elementType===r?a:Ya(r,a),null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),t.tag=1,va(r)?(e=!0,ka(t)):e=!1,oo(t,n),wo(t,r,a),Eo(t,r,a,n),Zi(null,t,r,!0,e,n);case 19:return al(e,t,n);case 23:case 24:return Ui(e,t,n)}throw Error(i(156,t.tag))},au.prototype.render=function(e){eu(e,this._internalRoot,null,null)},au.prototype.unmount=function(){var e=this._internalRoot,t=e.containerInfo;eu(null,e,null,(function(){t[ea]=null}))},tt=function(e){13===e.tag&&(ms(e,4,fs()),ru(e,4))},nt=function(e){13===e.tag&&(ms(e,67108864,fs()),ru(e,67108864))},rt=function(e){if(13===e.tag){var t=fs(),n=ps(e);ms(e,n,t),ru(e,n)}},at=function(e,t){return t()},Te=function(e,t,n){switch(t){case"input":if(ne(e,n),t=n.name,"radio"===n.type&&null!=t){for(n=e;n.parentNode;)n=n.parentNode;for(n=n.querySelectorAll("input[name="+JSON.stringify(""+t)+'][type="radio"]'),t=0;t<n.length;t++){var r=n[t];if(r!==e&&r.form===e.form){var a=oa(r);if(!a)throw Error(i(90));Y(r),ne(r,a)}}}break;case"textarea":ue(e,n);break;case"select":null!=(t=n.value)&&ie(e,!!n.multiple,t,!1)}},Pe=ws,Ie=function(e,t,n,r,a){var o=Ol;Ol|=4;try{return Za(98,e.bind(null,t,n,r,a))}finally{0===(Ol=o)&&(Ql(),Va())}},De=function(){0==(49&Ol)&&(function(){if(null!==as){var e=as;as=null,e.forEach((function(e){e.expiredLanes|=24&e.pendingLanes,gs(e,qa())}))}Va()}(),Ds())},Me=function(e,t){var n=Ol;Ol|=2;try{return e(t)}finally{0===(Ol=n)&&(Ql(),Va())}};var su={Events:[ra,aa,oa,Ae,Oe,Ds,{current:!1}]},uu={findFiberByHostInstance:na,bundleType:0,version:"17.0.2",rendererPackageName:"react-dom"},cu={bundleType:uu.bundleType,version:uu.version,rendererPackageName:uu.rendererPackageName,rendererConfig:uu.rendererConfig,overrideHookState:null,overrideHookStateDeletePath:null,overrideHookStateRenamePath:null,overrideProps:null,overridePropsDeletePath:null,overridePropsRenamePath:null,setSuspenseHandler:null,scheduleUpdate:null,currentDispatcherRef:k.ReactCurrentDispatcher,findHostInstanceByFiber:function(e){return null===(e=Je(e))?null:e.stateNode},findFiberByHostInstance:uu.findFiberByHostInstance||function(){return null},findHostInstancesForRefresh:null,scheduleRefresh:null,scheduleRoot:null,setRefreshHandler:null,getCurrentFiber:null};if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__){var du=__REACT_DEVTOOLS_GLOBAL_HOOK__;if(!du.isDisabled&&du.supportsFiber)try{Sa=du.inject(cu),xa=du}catch(ge){}}t.hydrate=function(e,t,n){if(!ou(t))throw Error(i(200));return iu(null,e,t,!0,n)}},3935:(e,t,n)=>{"use strict";!function e(){if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(e)}catch(t){console.error(t)}}(),e.exports=n(4448)},9590:e=>{var t="undefined"!=typeof Element,n="function"==typeof Map,r="function"==typeof Set,a="function"==typeof ArrayBuffer&&!!ArrayBuffer.isView;function o(e,i){if(e===i)return!0;if(e&&i&&"object"==typeof e&&"object"==typeof i){if(e.constructor!==i.constructor)return!1;var l,s,u,c;if(Array.isArray(e)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(!o(e[s],i[s]))return!1;return!0}if(n&&e instanceof Map&&i instanceof Map){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;for(c=e.entries();!(s=c.next()).done;)if(!o(s.value[1],i.get(s.value[0])))return!1;return!0}if(r&&e instanceof Set&&i instanceof Set){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;return!0}if(a&&ArrayBuffer.isView(e)&&ArrayBuffer.isView(i)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(e[s]!==i[s])return!1;return!0}if(e.constructor===RegExp)return e.source===i.source&&e.flags===i.flags;if(e.valueOf!==Object.prototype.valueOf)return e.valueOf()===i.valueOf();if(e.toString!==Object.prototype.toString)return e.toString()===i.toString();if((l=(u=Object.keys(e)).length)!==Object.keys(i).length)return!1;for(s=l;0!=s--;)if(!Object.prototype.hasOwnProperty.call(i,u[s]))return!1;if(t&&e instanceof Element)return!1;for(s=l;0!=s--;)if(("_owner"!==u[s]&&"__v"!==u[s]&&"__o"!==u[s]||!e.$$typeof)&&!o(e[u[s]],i[u[s]]))return!1;return!0}return e!=e&&i!=i}e.exports=function(e,t){try{return o(e,t)}catch(n){if((n.message||"").match(/stack|recursion/i))return console.warn("react-fast-compare cannot handle circular refs"),!1;throw n}}},405:(e,t,n)=>{"use strict";n.d(t,{B6:()=>G,ql:()=>J});var r=n(7294),a=n(5697),o=n.n(a),i=n(9590),l=n.n(i),s=n(1143),u=n.n(s),c=n(6774),d=n.n(c);function f(){return f=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},f.apply(this,arguments)}function p(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,m(e,t)}function m(e,t){return m=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e},m(e,t)}function h(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t.indexOf(n=o[r])>=0||(a[n]=e[n]);return a}var g={BASE:"base",BODY:"body",HEAD:"head",HTML:"html",LINK:"link",META:"meta",NOSCRIPT:"noscript",SCRIPT:"script",STYLE:"style",TITLE:"title",FRAGMENT:"Symbol(react.fragment)"},v={rel:["amphtml","canonical","alternate"]},y={type:["application/ld+json"]},b={charset:"",name:["robots","description"],property:["og:type","og:title","og:url","og:image","og:image:alt","og:description","twitter:url","twitter:title","twitter:description","twitter:image","twitter:image:alt","twitter:card","twitter:site"]},w=Object.keys(g).map((function(e){return g[e]})),k={accesskey:"accessKey",charset:"charSet",class:"className",contenteditable:"contentEditable",contextmenu:"contextMenu","http-equiv":"httpEquiv",itemprop:"itemProp",tabindex:"tabIndex"},E=Object.keys(k).reduce((function(e,t){return e[k[t]]=t,e}),{}),S=function(e,t){for(var n=e.length-1;n>=0;n-=1){var r=e[n];if(Object.prototype.hasOwnProperty.call(r,t))return r[t]}return null},x=function(e){var t=S(e,g.TITLE),n=S(e,"titleTemplate");if(Array.isArray(t)&&(t=t.join("")),n&&t)return n.replace(/%s/g,(function(){return t}));var r=S(e,"defaultTitle");return t||r||void 0},_=function(e){return S(e,"onChangeClientState")||function(){}},C=function(e,t){return t.filter((function(t){return void 0!==t[e]})).map((function(t){return t[e]})).reduce((function(e,t){return f({},e,t)}),{})},T=function(e,t){return t.filter((function(e){return void 0!==e[g.BASE]})).map((function(e){return e[g.BASE]})).reverse().reduce((function(t,n){if(!t.length)for(var r=Object.keys(n),a=0;a<r.length;a+=1){var o=r[a].toLowerCase();if(-1!==e.indexOf(o)&&n[o])return t.concat(n)}return t}),[])},L=function(e,t,n){var r={};return n.filter((function(t){return!!Array.isArray(t[e])||(void 0!==t[e]&&console&&"function"==typeof console.warn&&console.warn("Helmet: "+e+' should be of type "Array". Instead found type "'+typeof t[e]+'"'),!1)})).map((function(t){return t[e]})).reverse().reduce((function(e,n){var a={};n.filter((function(e){for(var n,o=Object.keys(e),i=0;i<o.length;i+=1){var l=o[i],s=l.toLowerCase();-1===t.indexOf(s)||"rel"===n&&"canonical"===e[n].toLowerCase()||"rel"===s&&"stylesheet"===e[s].toLowerCase()||(n=s),-1===t.indexOf(l)||"innerHTML"!==l&&"cssText"!==l&&"itemprop"!==l||(n=l)}if(!n||!e[n])return!1;var u=e[n].toLowerCase();return r[n]||(r[n]={}),a[n]||(a[n]={}),!r[n][u]&&(a[n][u]=!0,!0)})).reverse().forEach((function(t){return e.push(t)}));for(var o=Object.keys(a),i=0;i<o.length;i+=1){var l=o[i],s=f({},r[l],a[l]);r[l]=s}return e}),[]).reverse()},R=function(e,t){if(Array.isArray(e)&&e.length)for(var n=0;n<e.length;n+=1)if(e[n][t])return!0;return!1},N=function(e){return Array.isArray(e)?e.join(""):e},A=function(e,t){return Array.isArray(e)?e.reduce((function(e,n){return function(e,t){for(var n=Object.keys(e),r=0;r<n.length;r+=1)if(t[n[r]]&&t[n[r]].includes(e[n[r]]))return!0;return!1}(n,t)?e.priority.push(n):e.default.push(n),e}),{priority:[],default:[]}):{default:e}},O=function(e,t){var n;return f({},e,((n={})[t]=void 0,n))},P=[g.NOSCRIPT,g.SCRIPT,g.STYLE],I=function(e,t){return void 0===t&&(t=!0),!1===t?String(e):String(e).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")},D=function(e){return Object.keys(e).reduce((function(t,n){var r=void 0!==e[n]?n+'="'+e[n]+'"':""+n;return t?t+" "+r:r}),"")},M=function(e,t){return void 0===t&&(t={}),Object.keys(e).reduce((function(t,n){return t[k[n]||n]=e[n],t}),t)},F=function(e,t){return t.map((function(t,n){var a,o=((a={key:n})["data-rh"]=!0,a);return Object.keys(t).forEach((function(e){var n=k[e]||e;"innerHTML"===n||"cssText"===n?o.dangerouslySetInnerHTML={__html:t.innerHTML||t.cssText}:o[n]=t[e]})),r.createElement(e,o)}))},j=function(e,t,n){switch(e){case g.TITLE:return{toComponent:function(){return n=t.titleAttributes,(a={key:e=t.title})["data-rh"]=!0,o=M(n,a),[r.createElement(g.TITLE,o,e)];var e,n,a,o},toString:function(){return function(e,t,n,r){var a=D(n),o=N(t);return a?"<"+e+' data-rh="true" '+a+">"+I(o,r)+"</"+e+">":"<"+e+' data-rh="true">'+I(o,r)+"</"+e+">"}(e,t.title,t.titleAttributes,n)}};case"bodyAttributes":case"htmlAttributes":return{toComponent:function(){return M(t)},toString:function(){return D(t)}};default:return{toComponent:function(){return F(e,t)},toString:function(){return function(e,t,n){return t.reduce((function(t,r){var a=Object.keys(r).filter((function(e){return!("innerHTML"===e||"cssText"===e)})).reduce((function(e,t){var a=void 0===r[t]?t:t+'="'+I(r[t],n)+'"';return e?e+" "+a:a}),""),o=r.innerHTML||r.cssText||"",i=-1===P.indexOf(e);return t+"<"+e+' data-rh="true" '+a+(i?"/>":">"+o+"</"+e+">")}),"")}(e,t,n)}}}},B=function(e){var t=e.baseTag,n=e.bodyAttributes,r=e.encode,a=e.htmlAttributes,o=e.noscriptTags,i=e.styleTags,l=e.title,s=void 0===l?"":l,u=e.titleAttributes,c=e.linkTags,d=e.metaTags,f=e.scriptTags,p={toComponent:function(){},toString:function(){return""}};if(e.prioritizeSeoTags){var m=function(e){var t=e.linkTags,n=e.scriptTags,r=e.encode,a=A(e.metaTags,b),o=A(t,v),i=A(n,y);return{priorityMethods:{toComponent:function(){return[].concat(F(g.META,a.priority),F(g.LINK,o.priority),F(g.SCRIPT,i.priority))},toString:function(){return j(g.META,a.priority,r)+" "+j(g.LINK,o.priority,r)+" "+j(g.SCRIPT,i.priority,r)}},metaTags:a.default,linkTags:o.default,scriptTags:i.default}}(e);p=m.priorityMethods,c=m.linkTags,d=m.metaTags,f=m.scriptTags}return{priority:p,base:j(g.BASE,t,r),bodyAttributes:j("bodyAttributes",n,r),htmlAttributes:j("htmlAttributes",a,r),link:j(g.LINK,c,r),meta:j(g.META,d,r),noscript:j(g.NOSCRIPT,o,r),script:j(g.SCRIPT,f,r),style:j(g.STYLE,i,r),title:j(g.TITLE,{title:s,titleAttributes:u},r)}},z=[],$=function(e,t){var n=this;void 0===t&&(t="undefined"!=typeof document),this.instances=[],this.value={setHelmet:function(e){n.context.helmet=e},helmetInstances:{get:function(){return n.canUseDOM?z:n.instances},add:function(e){(n.canUseDOM?z:n.instances).push(e)},remove:function(e){var t=(n.canUseDOM?z:n.instances).indexOf(e);(n.canUseDOM?z:n.instances).splice(t,1)}}},this.context=e,this.canUseDOM=t,t||(e.helmet=B({baseTag:[],bodyAttributes:{},encodeSpecialCharacters:!0,htmlAttributes:{},linkTags:[],metaTags:[],noscriptTags:[],scriptTags:[],styleTags:[],title:"",titleAttributes:{}}))},U=r.createContext({}),q=o().shape({setHelmet:o().func,helmetInstances:o().shape({get:o().func,add:o().func,remove:o().func})}),H="undefined"!=typeof document,G=function(e){function t(n){var r;return(r=e.call(this,n)||this).helmetData=new $(r.props.context,t.canUseDOM),r}return p(t,e),t.prototype.render=function(){return r.createElement(U.Provider,{value:this.helmetData.value},this.props.children)},t}(r.Component);G.canUseDOM=H,G.propTypes={context:o().shape({helmet:o().shape()}),children:o().node.isRequired},G.defaultProps={context:{}},G.displayName="HelmetProvider";var Z=function(e,t){var n,r=document.head||document.querySelector(g.HEAD),a=r.querySelectorAll(e+"[data-rh]"),o=[].slice.call(a),i=[];return t&&t.length&&t.forEach((function(t){var r=document.createElement(e);for(var a in t)Object.prototype.hasOwnProperty.call(t,a)&&("innerHTML"===a?r.innerHTML=t.innerHTML:"cssText"===a?r.styleSheet?r.styleSheet.cssText=t.cssText:r.appendChild(document.createTextNode(t.cssText)):r.setAttribute(a,void 0===t[a]?"":t[a]));r.setAttribute("data-rh","true"),o.some((function(e,t){return n=t,r.isEqualNode(e)}))?o.splice(n,1):i.push(r)})),o.forEach((function(e){return e.parentNode.removeChild(e)})),i.forEach((function(e){return r.appendChild(e)})),{oldTags:o,newTags:i}},Q=function(e,t){var n=document.getElementsByTagName(e)[0];if(n){for(var r=n.getAttribute("data-rh"),a=r?r.split(","):[],o=[].concat(a),i=Object.keys(t),l=0;l<i.length;l+=1){var s=i[l],u=t[s]||"";n.getAttribute(s)!==u&&n.setAttribute(s,u),-1===a.indexOf(s)&&a.push(s);var c=o.indexOf(s);-1!==c&&o.splice(c,1)}for(var d=o.length-1;d>=0;d-=1)n.removeAttribute(o[d]);a.length===o.length?n.removeAttribute("data-rh"):n.getAttribute("data-rh")!==i.join(",")&&n.setAttribute("data-rh",i.join(","))}},V=function(e,t){var n=e.baseTag,r=e.htmlAttributes,a=e.linkTags,o=e.metaTags,i=e.noscriptTags,l=e.onChangeClientState,s=e.scriptTags,u=e.styleTags,c=e.title,d=e.titleAttributes;Q(g.BODY,e.bodyAttributes),Q(g.HTML,r),function(e,t){void 0!==e&&document.title!==e&&(document.title=N(e)),Q(g.TITLE,t)}(c,d);var f={baseTag:Z(g.BASE,n),linkTags:Z(g.LINK,a),metaTags:Z(g.META,o),noscriptTags:Z(g.NOSCRIPT,i),scriptTags:Z(g.SCRIPT,s),styleTags:Z(g.STYLE,u)},p={},m={};Object.keys(f).forEach((function(e){var t=f[e],n=t.newTags,r=t.oldTags;n.length&&(p[e]=n),r.length&&(m[e]=f[e].oldTags)})),t&&t(),l(e,p,m)},W=null,K=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).rendered=!1,t}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!d()(e,this.props)},n.componentDidUpdate=function(){this.emitChange()},n.componentWillUnmount=function(){this.props.context.helmetInstances.remove(this),this.emitChange()},n.emitChange=function(){var e,t,n=this.props.context,r=n.setHelmet,a=null,o=(e=n.helmetInstances.get().map((function(e){var t=f({},e.props);return delete t.context,t})),{baseTag:T(["href"],e),bodyAttributes:C("bodyAttributes",e),defer:S(e,"defer"),encode:S(e,"encodeSpecialCharacters"),htmlAttributes:C("htmlAttributes",e),linkTags:L(g.LINK,["rel","href"],e),metaTags:L(g.META,["name","charset","http-equiv","property","itemprop"],e),noscriptTags:L(g.NOSCRIPT,["innerHTML"],e),onChangeClientState:_(e),scriptTags:L(g.SCRIPT,["src","innerHTML"],e),styleTags:L(g.STYLE,["cssText"],e),title:x(e),titleAttributes:C("titleAttributes",e),prioritizeSeoTags:R(e,"prioritizeSeoTags")});G.canUseDOM?(t=o,W&&cancelAnimationFrame(W),t.defer?W=requestAnimationFrame((function(){V(t,(function(){W=null}))})):(V(t),W=null)):B&&(a=B(o)),r(a)},n.init=function(){this.rendered||(this.rendered=!0,this.props.context.helmetInstances.add(this),this.emitChange())},n.render=function(){return this.init(),null},t}(r.Component);K.propTypes={context:q.isRequired},K.displayName="HelmetDispatcher";var Y=["children"],X=["children"],J=function(e){function t(){return e.apply(this,arguments)||this}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!l()(O(this.props,"helmetData"),O(e,"helmetData"))},n.mapNestedChildrenToProps=function(e,t){if(!t)return null;switch(e.type){case g.SCRIPT:case g.NOSCRIPT:return{innerHTML:t};case g.STYLE:return{cssText:t};default:throw new Error("<"+e.type+" /> elements are self-closing and can not contain children. Refer to our API for more information.")}},n.flattenArrayTypeChildren=function(e){var t,n=e.child,r=e.arrayTypeChildren;return f({},r,((t={})[n.type]=[].concat(r[n.type]||[],[f({},e.newChildProps,this.mapNestedChildrenToProps(n,e.nestedChildren))]),t))},n.mapObjectTypeChildren=function(e){var t,n,r=e.child,a=e.newProps,o=e.newChildProps,i=e.nestedChildren;switch(r.type){case g.TITLE:return f({},a,((t={})[r.type]=i,t.titleAttributes=f({},o),t));case g.BODY:return f({},a,{bodyAttributes:f({},o)});case g.HTML:return f({},a,{htmlAttributes:f({},o)});default:return f({},a,((n={})[r.type]=f({},o),n))}},n.mapArrayTypeChildrenToProps=function(e,t){var n=f({},t);return Object.keys(e).forEach((function(t){var r;n=f({},n,((r={})[t]=e[t],r))})),n},n.warnOnInvalidChildren=function(e,t){return u()(w.some((function(t){return e.type===t})),"function"==typeof e.type?"You may be attempting to nest <Helmet> components within each other, which is not allowed. Refer to our API for more information.":"Only elements types "+w.join(", ")+" are allowed. Helmet does not support rendering <"+e.type+"> elements. Refer to our API for more information."),u()(!t||"string"==typeof t||Array.isArray(t)&&!t.some((function(e){return"string"!=typeof e})),"Helmet expects a string as a child of <"+e.type+">. Did you forget to wrap your children in braces? ( <"+e.type+">{``}</"+e.type+"> ) Refer to our API for more information."),!0},n.mapChildrenToProps=function(e,t){var n=this,a={};return r.Children.forEach(e,(function(e){if(e&&e.props){var r=e.props,o=r.children,i=h(r,Y),l=Object.keys(i).reduce((function(e,t){return e[E[t]||t]=i[t],e}),{}),s=e.type;switch("symbol"==typeof s?s=s.toString():n.warnOnInvalidChildren(e,o),s){case g.FRAGMENT:t=n.mapChildrenToProps(o,t);break;case g.LINK:case g.META:case g.NOSCRIPT:case g.SCRIPT:case g.STYLE:a=n.flattenArrayTypeChildren({child:e,arrayTypeChildren:a,newChildProps:l,nestedChildren:o});break;default:t=n.mapObjectTypeChildren({child:e,newProps:t,newChildProps:l,nestedChildren:o})}}})),this.mapArrayTypeChildrenToProps(a,t)},n.render=function(){var e=this.props,t=e.children,n=h(e,X),a=f({},n),o=n.helmetData;return t&&(a=this.mapChildrenToProps(t,a)),!o||o instanceof $||(o=new $(o.context,o.instances)),o?r.createElement(K,f({},a,{context:o.value,helmetData:void 0})):r.createElement(U.Consumer,null,(function(e){return r.createElement(K,f({},a,{context:e}))}))},t}(r.Component);J.propTypes={base:o().object,bodyAttributes:o().object,children:o().oneOfType([o().arrayOf(o().node),o().node]),defaultTitle:o().string,defer:o().bool,encodeSpecialCharacters:o().bool,htmlAttributes:o().object,link:o().arrayOf(o().object),meta:o().arrayOf(o().object),noscript:o().arrayOf(o().object),onChangeClientState:o().func,script:o().arrayOf(o().object),style:o().arrayOf(o().object),title:o().string,titleAttributes:o().object,titleTemplate:o().string,prioritizeSeoTags:o().bool,helmetData:o().object},J.defaultProps={defer:!0,encodeSpecialCharacters:!0,prioritizeSeoTags:!1},J.displayName="Helmet"},9921:(e,t)=>{"use strict";var n="function"==typeof Symbol&&Symbol.for,r=n?Symbol.for("react.element"):60103,a=n?Symbol.for("react.portal"):60106,o=n?Symbol.for("react.fragment"):60107,i=n?Symbol.for("react.strict_mode"):60108,l=n?Symbol.for("react.profiler"):60114,s=n?Symbol.for("react.provider"):60109,u=n?Symbol.for("react.context"):60110,c=n?Symbol.for("react.async_mode"):60111,d=n?Symbol.for("react.concurrent_mode"):60111,f=n?Symbol.for("react.forward_ref"):60112,p=n?Symbol.for("react.suspense"):60113,m=n?Symbol.for("react.suspense_list"):60120,h=n?Symbol.for("react.memo"):60115,g=n?Symbol.for("react.lazy"):60116,v=n?Symbol.for("react.block"):60121,y=n?Symbol.for("react.fundamental"):60117,b=n?Symbol.for("react.responder"):60118,w=n?Symbol.for("react.scope"):60119;function k(e){if("object"==typeof e&&null!==e){var t=e.$$typeof;switch(t){case r:switch(e=e.type){case c:case d:case o:case l:case i:case p:return e;default:switch(e=e&&e.$$typeof){case u:case f:case g:case h:case s:return e;default:return t}}case a:return t}}}function E(e){return k(e)===d}t.AsyncMode=c,t.ConcurrentMode=d,t.ContextConsumer=u,t.ContextProvider=s,t.Element=r,t.ForwardRef=f,t.Fragment=o,t.Lazy=g,t.Memo=h,t.Portal=a,t.Profiler=l,t.StrictMode=i,t.Suspense=p,t.isAsyncMode=function(e){return E(e)||k(e)===c},t.isConcurrentMode=E,t.isContextConsumer=function(e){return k(e)===u},t.isContextProvider=function(e){return k(e)===s},t.isElement=function(e){return"object"==typeof e&&null!==e&&e.$$typeof===r},t.isForwardRef=function(e){return k(e)===f},t.isFragment=function(e){return k(e)===o},t.isLazy=function(e){return k(e)===g},t.isMemo=function(e){return k(e)===h},t.isPortal=function(e){return k(e)===a},t.isProfiler=function(e){return k(e)===l},t.isStrictMode=function(e){return k(e)===i},t.isSuspense=function(e){return k(e)===p},t.isValidElementType=function(e){return"string"==typeof e||"function"==typeof e||e===o||e===d||e===l||e===i||e===p||e===m||"object"==typeof e&&null!==e&&(e.$$typeof===g||e.$$typeof===h||e.$$typeof===s||e.$$typeof===u||e.$$typeof===f||e.$$typeof===y||e.$$typeof===b||e.$$typeof===w||e.$$typeof===v)},t.typeOf=k},9864:(e,t,n)=>{"use strict";e.exports=n(9921)},8356:(e,t,n)=>{"use strict";function r(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function a(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(){return i=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},i.apply(this,arguments)}var l=n(7294),s=n(5697),u=[],c=[];function d(e){var t=e(),n={loading:!0,loaded:null,error:null};return n.promise=t.then((function(e){return n.loading=!1,n.loaded=e,e})).catch((function(e){throw n.loading=!1,n.error=e,e})),n}function f(e){var t={loading:!1,loaded:{},error:null},n=[];try{Object.keys(e).forEach((function(r){var a=d(e[r]);a.loading?t.loading=!0:(t.loaded[r]=a.loaded,t.error=a.error),n.push(a.promise),a.promise.then((function(e){t.loaded[r]=e})).catch((function(e){t.error=e}))}))}catch(r){t.error=r}return t.promise=Promise.all(n).then((function(e){return t.loading=!1,e})).catch((function(e){throw t.loading=!1,e})),t}function p(e,t){return l.createElement((n=e)&&n.__esModule?n.default:n,t);var n}function m(e,t){var d,f;if(!t.loading)throw new Error("react-loadable requires a `loading` component");var m=i({loader:null,loading:null,delay:200,timeout:null,render:p,webpack:null,modules:null},t),h=null;function g(){return h||(h=e(m.loader)),h.promise}return u.push(g),"function"==typeof m.webpack&&c.push((function(){if((0,m.webpack)().every((function(e){return void 0!==e&&void 0!==n.m[e]})))return g()})),f=d=function(t){function n(n){var r;return o(a(a(r=t.call(this,n)||this)),"retry",(function(){r.setState({error:null,loading:!0,timedOut:!1}),h=e(m.loader),r._loadModule()})),g(),r.state={error:h.error,pastDelay:!1,timedOut:!1,loading:h.loading,loaded:h.loaded},r}r(n,t),n.preload=function(){return g()};var i=n.prototype;return i.UNSAFE_componentWillMount=function(){this._loadModule()},i.componentDidMount=function(){this._mounted=!0},i._loadModule=function(){var e=this;if(this.context.loadable&&Array.isArray(m.modules)&&m.modules.forEach((function(t){e.context.loadable.report(t)})),h.loading){var t=function(t){e._mounted&&e.setState(t)};"number"==typeof m.delay&&(0===m.delay?this.setState({pastDelay:!0}):this._delay=setTimeout((function(){t({pastDelay:!0})}),m.delay)),"number"==typeof m.timeout&&(this._timeout=setTimeout((function(){t({timedOut:!0})}),m.timeout));var n=function(){t({error:h.error,loaded:h.loaded,loading:h.loading}),e._clearTimeouts()};h.promise.then((function(){return n(),null})).catch((function(e){return n(),null}))}},i.componentWillUnmount=function(){this._mounted=!1,this._clearTimeouts()},i._clearTimeouts=function(){clearTimeout(this._delay),clearTimeout(this._timeout)},i.render=function(){return this.state.loading||this.state.error?l.createElement(m.loading,{isLoading:this.state.loading,pastDelay:this.state.pastDelay,timedOut:this.state.timedOut,error:this.state.error,retry:this.retry}):this.state.loaded?m.render(this.state.loaded,this.props):null},n}(l.Component),o(d,"contextTypes",{loadable:s.shape({report:s.func.isRequired})}),f}function h(e){return m(d,e)}h.Map=function(e){if("function"!=typeof e.render)throw new Error("LoadableMap requires a `render(loaded, props)` function");return m(f,e)};var g=function(e){function t(){return e.apply(this,arguments)||this}r(t,e);var n=t.prototype;return n.getChildContext=function(){return{loadable:{report:this.props.report}}},n.render=function(){return l.Children.only(this.props.children)},t}(l.Component);function v(e){for(var t=[];e.length;){var n=e.pop();t.push(n())}return Promise.all(t).then((function(){if(e.length)return v(e)}))}o(g,"propTypes",{report:s.func.isRequired}),o(g,"childContextTypes",{loadable:s.shape({report:s.func.isRequired}).isRequired}),h.Capture=g,h.preloadAll=function(){return new Promise((function(e,t){v(u).then(e,t)}))},h.preloadReady=function(){return new Promise((function(e,t){v(c).then(e,e)}))},e.exports=h},8790:(e,t,n)=>{"use strict";n.d(t,{H:()=>l,f:()=>i});var r=n(6775),a=n(3117),o=n(7294);function i(e,t,n){return void 0===n&&(n=[]),e.some((function(e){var a=e.path?(0,r.LX)(t,e):n.length?n[n.length-1].match:r.F0.computeRootMatch(t);return a&&(n.push({route:e,match:a}),e.routes&&i(e.routes,t,n)),a})),n}function l(e,t,n){return void 0===t&&(t={}),void 0===n&&(n={}),e?o.createElement(r.rs,n,e.map((function(e,n){return o.createElement(r.AW,{key:e.key||n,path:e.path,exact:e.exact,strict:e.strict,render:function(n){return e.render?e.render((0,a.Z)({},n,{},t,{route:e})):o.createElement(e.component,(0,a.Z)({},n,t,{route:e}))}})}))):null}},3727:(e,t,n)=>{"use strict";n.d(t,{OL:()=>b,VK:()=>c,rU:()=>g});var r=n(6775),a=n(144),o=n(7294),i=n(9318),l=n(3117),s=n(102),u=n(2177),c=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).history=(0,i.lX)(t.props),t}return(0,a.Z)(t,e),t.prototype.render=function(){return o.createElement(r.F0,{history:this.history,children:this.props.children})},t}(o.Component);o.Component;var d=function(e,t){return"function"==typeof e?e(t):e},f=function(e,t){return"string"==typeof e?(0,i.ob)(e,null,null,t):e},p=function(e){return e},m=o.forwardRef;void 0===m&&(m=p);var h=m((function(e,t){var n=e.innerRef,r=e.navigate,a=e.onClick,i=(0,s.Z)(e,["innerRef","navigate","onClick"]),u=i.target,c=(0,l.Z)({},i,{onClick:function(e){try{a&&a(e)}catch(t){throw e.preventDefault(),t}e.defaultPrevented||0!==e.button||u&&"_self"!==u||function(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}(e)||(e.preventDefault(),r())}});return c.ref=p!==m&&t||n,o.createElement("a",c)}));var g=m((function(e,t){var n=e.component,a=void 0===n?h:n,c=e.replace,g=e.to,v=e.innerRef,y=(0,s.Z)(e,["component","replace","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=e.history,r=f(d(g,e.location),e.location),s=r?n.createHref(r):"",h=(0,l.Z)({},y,{href:s,navigate:function(){var t=d(g,e.location),r=(0,i.Ep)(e.location)===(0,i.Ep)(f(t));(c||r?n.replace:n.push)(t)}});return p!==m?h.ref=t||v:h.innerRef=v,o.createElement(a,h)}))})),v=function(e){return e},y=o.forwardRef;void 0===y&&(y=v);var b=y((function(e,t){var n=e["aria-current"],a=void 0===n?"page":n,i=e.activeClassName,c=void 0===i?"active":i,p=e.activeStyle,m=e.className,h=e.exact,b=e.isActive,w=e.location,k=e.sensitive,E=e.strict,S=e.style,x=e.to,_=e.innerRef,C=(0,s.Z)(e,["aria-current","activeClassName","activeStyle","className","exact","isActive","location","sensitive","strict","style","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=w||e.location,i=f(d(x,n),n),s=i.pathname,T=s&&s.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1"),L=T?(0,r.LX)(n.pathname,{path:T,exact:h,sensitive:k,strict:E}):null,R=!!(b?b(L,n):L),N="function"==typeof m?m(R):m,A="function"==typeof S?S(R):S;R&&(N=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return t.filter((function(e){return e})).join(" ")}(N,c),A=(0,l.Z)({},A,p));var O=(0,l.Z)({"aria-current":R&&a||null,className:N,style:A,to:i},C);return v!==y?O.ref=t||_:O.innerRef=_,o.createElement(g,O)}))}))},6775:(e,t,n)=>{"use strict";n.d(t,{AW:()=>_,F0:()=>k,rs:()=>A,s6:()=>w,LX:()=>x,k6:()=>P,TH:()=>I});var r=n(144),a=n(7294),o=n(9318),i=n(5697),l=n.n(i),s=1073741823,u="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:{};function c(e){var t=[];return{on:function(e){t.push(e)},off:function(e){t=t.filter((function(t){return t!==e}))},get:function(){return e},set:function(n,r){e=n,t.forEach((function(t){return t(e,r)}))}}}var d=a.createContext||function(e,t){var n,o,i="__create-react-context-"+function(){var e="__global_unique_id__";return u[e]=(u[e]||0)+1}()+"__",d=function(e){function n(){var t;return(t=e.apply(this,arguments)||this).emitter=c(t.props.value),t}(0,r.Z)(n,e);var a=n.prototype;return a.getChildContext=function(){var e;return(e={})[i]=this.emitter,e},a.componentWillReceiveProps=function(e){if(this.props.value!==e.value){var n,r=this.props.value,a=e.value;((o=r)===(i=a)?0!==o||1/o==1/i:o!=o&&i!=i)?n=0:(n="function"==typeof t?t(r,a):s,0!==(n|=0)&&this.emitter.set(e.value,n))}var o,i},a.render=function(){return this.props.children},n}(a.Component);d.childContextTypes=((n={})[i]=l().object.isRequired,n);var f=function(t){function n(){var e;return(e=t.apply(this,arguments)||this).state={value:e.getValue()},e.onUpdate=function(t,n){0!=((0|e.observedBits)&n)&&e.setState({value:e.getValue()})},e}(0,r.Z)(n,t);var a=n.prototype;return a.componentWillReceiveProps=function(e){var t=e.observedBits;this.observedBits=null==t?s:t},a.componentDidMount=function(){this.context[i]&&this.context[i].on(this.onUpdate);var e=this.props.observedBits;this.observedBits=null==e?s:e},a.componentWillUnmount=function(){this.context[i]&&this.context[i].off(this.onUpdate)},a.getValue=function(){return this.context[i]?this.context[i].get():e},a.render=function(){return(e=this.props.children,Array.isArray(e)?e[0]:e)(this.state.value);var e},n}(a.Component);return f.contextTypes=((o={})[i]=l().object,o),{Provider:d,Consumer:f}};const f=d;var p=n(2177),m=n(3117),h=n(9658),g=n.n(h),v=(n(9864),n(102)),y=(n(8679),function(e){var t=f();return t.displayName=e,t}),b=y("Router-History"),w=y("Router"),k=function(e){function t(t){var n;return(n=e.call(this,t)||this).state={location:t.history.location},n._isMounted=!1,n._pendingLocation=null,t.staticContext||(n.unlisten=t.history.listen((function(e){n._pendingLocation=e}))),n}(0,r.Z)(t,e),t.computeRootMatch=function(e){return{path:"/",url:"/",params:{},isExact:"/"===e}};var n=t.prototype;return n.componentDidMount=function(){var e=this;this._isMounted=!0,this.unlisten&&this.unlisten(),this.props.staticContext||(this.unlisten=this.props.history.listen((function(t){e._isMounted&&e.setState({location:t})}))),this._pendingLocation&&this.setState({location:this._pendingLocation})},n.componentWillUnmount=function(){this.unlisten&&(this.unlisten(),this._isMounted=!1,this._pendingLocation=null)},n.render=function(){return a.createElement(w.Provider,{value:{history:this.props.history,location:this.state.location,match:t.computeRootMatch(this.state.location.pathname),staticContext:this.props.staticContext}},a.createElement(b.Provider,{children:this.props.children||null,value:this.props.history}))},t}(a.Component);a.Component;a.Component;var E={},S=0;function x(e,t){void 0===t&&(t={}),("string"==typeof t||Array.isArray(t))&&(t={path:t});var n=t,r=n.path,a=n.exact,o=void 0!==a&&a,i=n.strict,l=void 0!==i&&i,s=n.sensitive,u=void 0!==s&&s;return[].concat(r).reduce((function(t,n){if(!n&&""!==n)return null;if(t)return t;var r=function(e,t){var n=""+t.end+t.strict+t.sensitive,r=E[n]||(E[n]={});if(r[e])return r[e];var a=[],o={regexp:g()(e,a,t),keys:a};return S<1e4&&(r[e]=o,S++),o}(n,{end:o,strict:l,sensitive:u}),a=r.regexp,i=r.keys,s=a.exec(e);if(!s)return null;var c=s[0],d=s.slice(1),f=e===c;return o&&!f?null:{path:n,url:"/"===n&&""===c?"/":c,isExact:f,params:i.reduce((function(e,t,n){return e[t.name]=d[n],e}),{})}}),null)}var _=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n=e.props.location||t.location,r=e.props.computedMatch?e.props.computedMatch:e.props.path?x(n.pathname,e.props):t.match,o=(0,m.Z)({},t,{location:n,match:r}),i=e.props,l=i.children,s=i.component,u=i.render;return Array.isArray(l)&&function(e){return 0===a.Children.count(e)}(l)&&(l=null),a.createElement(w.Provider,{value:o},o.match?l?"function"==typeof l?l(o):l:s?a.createElement(s,o):u?u(o):null:"function"==typeof l?l(o):null)}))},t}(a.Component);function C(e){return"/"===e.charAt(0)?e:"/"+e}function T(e,t){if(!e)return t;var n=C(e);return 0!==t.pathname.indexOf(n)?t:(0,m.Z)({},t,{pathname:t.pathname.substr(n.length)})}function L(e){return"string"==typeof e?e:(0,o.Ep)(e)}function R(e){return function(){(0,p.Z)(!1)}}function N(){}a.Component;var A=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n,r,o=e.props.location||t.location;return a.Children.forEach(e.props.children,(function(e){if(null==r&&a.isValidElement(e)){n=e;var i=e.props.path||e.props.from;r=i?x(o.pathname,(0,m.Z)({},e.props,{path:i})):t.match}})),r?a.cloneElement(n,{location:o,computedMatch:r}):null}))},t}(a.Component);var O=a.useContext;function P(){return O(b)}function I(){return O(w).location}},9658:(e,t,n)=>{var r=n(5826);e.exports=p,e.exports.parse=o,e.exports.compile=function(e,t){return l(o(e,t),t)},e.exports.tokensToFunction=l,e.exports.tokensToRegExp=f;var a=new RegExp(["(\\\\.)","([\\/.])?(?:(?:\\:(\\w+)(?:\\(((?:\\\\.|[^\\\\()])+)\\))?|\\(((?:\\\\.|[^\\\\()])+)\\))([+*?])?|(\\*))"].join("|"),"g");function o(e,t){for(var n,r=[],o=0,i=0,l="",c=t&&t.delimiter||"/";null!=(n=a.exec(e));){var d=n[0],f=n[1],p=n.index;if(l+=e.slice(i,p),i=p+d.length,f)l+=f[1];else{var m=e[i],h=n[2],g=n[3],v=n[4],y=n[5],b=n[6],w=n[7];l&&(r.push(l),l="");var k=null!=h&&null!=m&&m!==h,E="+"===b||"*"===b,S="?"===b||"*"===b,x=n[2]||c,_=v||y;r.push({name:g||o++,prefix:h||"",delimiter:x,optional:S,repeat:E,partial:k,asterisk:!!w,pattern:_?u(_):w?".*":"[^"+s(x)+"]+?"})}}return i<e.length&&(l+=e.substr(i)),l&&r.push(l),r}function i(e){return encodeURI(e).replace(/[\/?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()}))}function l(e,t){for(var n=new Array(e.length),a=0;a<e.length;a++)"object"==typeof e[a]&&(n[a]=new RegExp("^(?:"+e[a].pattern+")$",d(t)));return function(t,a){for(var o="",l=t||{},s=(a||{}).pretty?i:encodeURIComponent,u=0;u<e.length;u++){var c=e[u];if("string"!=typeof c){var d,f=l[c.name];if(null==f){if(c.optional){c.partial&&(o+=c.prefix);continue}throw new TypeError('Expected "'+c.name+'" to be defined')}if(r(f)){if(!c.repeat)throw new TypeError('Expected "'+c.name+'" to not repeat, but received `'+JSON.stringify(f)+"`");if(0===f.length){if(c.optional)continue;throw new TypeError('Expected "'+c.name+'" to not be empty')}for(var p=0;p<f.length;p++){if(d=s(f[p]),!n[u].test(d))throw new TypeError('Expected all "'+c.name+'" to match "'+c.pattern+'", but received `'+JSON.stringify(d)+"`");o+=(0===p?c.prefix:c.delimiter)+d}}else{if(d=c.asterisk?encodeURI(f).replace(/[?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})):s(f),!n[u].test(d))throw new TypeError('Expected "'+c.name+'" to match "'+c.pattern+'", but received "'+d+'"');o+=c.prefix+d}}else o+=c}return o}}function s(e){return e.replace(/([.+*?=^!:${}()[\]|\/\\])/g,"\\$1")}function u(e){return e.replace(/([=!:$\/()])/g,"\\$1")}function c(e,t){return e.keys=t,e}function d(e){return e&&e.sensitive?"":"i"}function f(e,t,n){r(t)||(n=t||n,t=[]);for(var a=(n=n||{}).strict,o=!1!==n.end,i="",l=0;l<e.length;l++){var u=e[l];if("string"==typeof u)i+=s(u);else{var f=s(u.prefix),p="(?:"+u.pattern+")";t.push(u),u.repeat&&(p+="(?:"+f+p+")*"),i+=p=u.optional?u.partial?f+"("+p+")?":"(?:"+f+"("+p+"))?":f+"("+p+")"}}var m=s(n.delimiter||"/"),h=i.slice(-m.length)===m;return a||(i=(h?i.slice(0,-m.length):i)+"(?:"+m+"(?=$))?"),i+=o?"$":a&&h?"":"(?="+m+"|$)",c(new RegExp("^"+i,d(n)),t)}function p(e,t,n){return r(t)||(n=t||n,t=[]),n=n||{},e instanceof RegExp?function(e,t){var n=e.source.match(/\((?!\?)/g);if(n)for(var r=0;r<n.length;r++)t.push({name:r,prefix:null,delimiter:null,optional:!1,repeat:!1,partial:!1,asterisk:!1,pattern:null});return c(e,t)}(e,t):r(e)?function(e,t,n){for(var r=[],a=0;a<e.length;a++)r.push(p(e[a],t,n).source);return c(new RegExp("(?:"+r.join("|")+")",d(n)),t)}(e,t,n):function(e,t,n){return f(o(e,n),t,n)}(e,t,n)}},2408:(e,t,n)=>{"use strict";var r=n(7418),a=60103,o=60106;t.Fragment=60107,t.StrictMode=60108,t.Profiler=60114;var i=60109,l=60110,s=60112;t.Suspense=60113;var u=60115,c=60116;if("function"==typeof Symbol&&Symbol.for){var d=Symbol.for;a=d("react.element"),o=d("react.portal"),t.Fragment=d("react.fragment"),t.StrictMode=d("react.strict_mode"),t.Profiler=d("react.profiler"),i=d("react.provider"),l=d("react.context"),s=d("react.forward_ref"),t.Suspense=d("react.suspense"),u=d("react.memo"),c=d("react.lazy")}var f="function"==typeof Symbol&&Symbol.iterator;function p(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var m={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},h={};function g(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}function v(){}function y(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}g.prototype.isReactComponent={},g.prototype.setState=function(e,t){if("object"!=typeof e&&"function"!=typeof e&&null!=e)throw Error(p(85));this.updater.enqueueSetState(this,e,t,"setState")},g.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")},v.prototype=g.prototype;var b=y.prototype=new v;b.constructor=y,r(b,g.prototype),b.isPureReactComponent=!0;var w={current:null},k=Object.prototype.hasOwnProperty,E={key:!0,ref:!0,__self:!0,__source:!0};function S(e,t,n){var r,o={},i=null,l=null;if(null!=t)for(r in void 0!==t.ref&&(l=t.ref),void 0!==t.key&&(i=""+t.key),t)k.call(t,r)&&!E.hasOwnProperty(r)&&(o[r]=t[r]);var s=arguments.length-2;if(1===s)o.children=n;else if(1<s){for(var u=Array(s),c=0;c<s;c++)u[c]=arguments[c+2];o.children=u}if(e&&e.defaultProps)for(r in s=e.defaultProps)void 0===o[r]&&(o[r]=s[r]);return{$$typeof:a,type:e,key:i,ref:l,props:o,_owner:w.current}}function x(e){return"object"==typeof e&&null!==e&&e.$$typeof===a}var _=/\/+/g;function C(e,t){return"object"==typeof e&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}(""+e.key):t.toString(36)}function T(e,t,n,r,i){var l=typeof e;"undefined"!==l&&"boolean"!==l||(e=null);var s=!1;if(null===e)s=!0;else switch(l){case"string":case"number":s=!0;break;case"object":switch(e.$$typeof){case a:case o:s=!0}}if(s)return i=i(s=e),e=""===r?"."+C(s,0):r,Array.isArray(i)?(n="",null!=e&&(n=e.replace(_,"$&/")+"/"),T(i,t,n,"",(function(e){return e}))):null!=i&&(x(i)&&(i=function(e,t){return{$$typeof:a,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}(i,n+(!i.key||s&&s.key===i.key?"":(""+i.key).replace(_,"$&/")+"/")+e)),t.push(i)),1;if(s=0,r=""===r?".":r+":",Array.isArray(e))for(var u=0;u<e.length;u++){var c=r+C(l=e[u],u);s+=T(l,t,n,c,i)}else if(c=function(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=f&&e[f]||e["@@iterator"])?e:null}(e),"function"==typeof c)for(e=c.call(e),u=0;!(l=e.next()).done;)s+=T(l=l.value,t,n,c=r+C(l,u++),i);else if("object"===l)throw t=""+e,Error(p(31,"[object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function L(e,t,n){if(null==e)return e;var r=[],a=0;return T(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function R(e){if(-1===e._status){var t=e._result;t=t(),e._status=0,e._result=t,t.then((function(t){0===e._status&&(t=t.default,e._status=1,e._result=t)}),(function(t){0===e._status&&(e._status=2,e._result=t)}))}if(1===e._status)return e._result;throw e._result}var N={current:null};function A(){var e=N.current;if(null===e)throw Error(p(321));return e}var O={ReactCurrentDispatcher:N,ReactCurrentBatchConfig:{transition:0},ReactCurrentOwner:w,IsSomeRendererActing:{current:!1},assign:r};t.Children={map:L,forEach:function(e,t,n){L(e,(function(){t.apply(this,arguments)}),n)},count:function(e){var t=0;return L(e,(function(){t++})),t},toArray:function(e){return L(e,(function(e){return e}))||[]},only:function(e){if(!x(e))throw Error(p(143));return e}},t.Component=g,t.PureComponent=y,t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=O,t.cloneElement=function(e,t,n){if(null==e)throw Error(p(267,e));var o=r({},e.props),i=e.key,l=e.ref,s=e._owner;if(null!=t){if(void 0!==t.ref&&(l=t.ref,s=w.current),void 0!==t.key&&(i=""+t.key),e.type&&e.type.defaultProps)var u=e.type.defaultProps;for(c in t)k.call(t,c)&&!E.hasOwnProperty(c)&&(o[c]=void 0===t[c]&&void 0!==u?u[c]:t[c])}var c=arguments.length-2;if(1===c)o.children=n;else if(1<c){u=Array(c);for(var d=0;d<c;d++)u[d]=arguments[d+2];o.children=u}return{$$typeof:a,type:e.type,key:i,ref:l,props:o,_owner:s}},t.createContext=function(e,t){return void 0===t&&(t=null),(e={$$typeof:l,_calculateChangedBits:t,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null}).Provider={$$typeof:i,_context:e},e.Consumer=e},t.createElement=S,t.createFactory=function(e){var t=S.bind(null,e);return t.type=e,t},t.createRef=function(){return{current:null}},t.forwardRef=function(e){return{$$typeof:s,render:e}},t.isValidElement=x,t.lazy=function(e){return{$$typeof:c,_payload:{_status:-1,_result:e},_init:R}},t.memo=function(e,t){return{$$typeof:u,type:e,compare:void 0===t?null:t}},t.useCallback=function(e,t){return A().useCallback(e,t)},t.useContext=function(e,t){return A().useContext(e,t)},t.useDebugValue=function(){},t.useEffect=function(e,t){return A().useEffect(e,t)},t.useImperativeHandle=function(e,t,n){return A().useImperativeHandle(e,t,n)},t.useLayoutEffect=function(e,t){return A().useLayoutEffect(e,t)},t.useMemo=function(e,t){return A().useMemo(e,t)},t.useReducer=function(e,t,n){return A().useReducer(e,t,n)},t.useRef=function(e){return A().useRef(e)},t.useState=function(e){return A().useState(e)},t.version="17.0.2"},7294:(e,t,n)=>{"use strict";e.exports=n(2408)},53:(e,t)=>{"use strict";var n,r,a,o;if("object"==typeof performance&&"function"==typeof performance.now){var i=performance;t.unstable_now=function(){return i.now()}}else{var l=Date,s=l.now();t.unstable_now=function(){return l.now()-s}}if("undefined"==typeof window||"function"!=typeof MessageChannel){var u=null,c=null,d=function(){if(null!==u)try{var e=t.unstable_now();u(!0,e),u=null}catch(n){throw setTimeout(d,0),n}};n=function(e){null!==u?setTimeout(n,0,e):(u=e,setTimeout(d,0))},r=function(e,t){c=setTimeout(e,t)},a=function(){clearTimeout(c)},t.unstable_shouldYield=function(){return!1},o=t.unstable_forceFrameRate=function(){}}else{var f=window.setTimeout,p=window.clearTimeout;if("undefined"!=typeof console){var m=window.cancelAnimationFrame;"function"!=typeof window.requestAnimationFrame&&console.error("This browser doesn't support requestAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills"),"function"!=typeof m&&console.error("This browser doesn't support cancelAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills")}var h=!1,g=null,v=-1,y=5,b=0;t.unstable_shouldYield=function(){return t.unstable_now()>=b},o=function(){},t.unstable_forceFrameRate=function(e){0>e||125<e?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):y=0<e?Math.floor(1e3/e):5};var w=new MessageChannel,k=w.port2;w.port1.onmessage=function(){if(null!==g){var e=t.unstable_now();b=e+y;try{g(!0,e)?k.postMessage(null):(h=!1,g=null)}catch(n){throw k.postMessage(null),n}}else h=!1},n=function(e){g=e,h||(h=!0,k.postMessage(null))},r=function(e,n){v=f((function(){e(t.unstable_now())}),n)},a=function(){p(v),v=-1}}function E(e,t){var n=e.length;e.push(t);e:for(;;){var r=n-1>>>1,a=e[r];if(!(void 0!==a&&0<_(a,t)))break e;e[r]=t,e[n]=a,n=r}}function S(e){return void 0===(e=e[0])?null:e}function x(e){var t=e[0];if(void 0!==t){var n=e.pop();if(n!==t){e[0]=n;e:for(var r=0,a=e.length;r<a;){var o=2*(r+1)-1,i=e[o],l=o+1,s=e[l];if(void 0!==i&&0>_(i,n))void 0!==s&&0>_(s,i)?(e[r]=s,e[l]=n,r=l):(e[r]=i,e[o]=n,r=o);else{if(!(void 0!==s&&0>_(s,n)))break e;e[r]=s,e[l]=n,r=l}}}return t}return null}function _(e,t){var n=e.sortIndex-t.sortIndex;return 0!==n?n:e.id-t.id}var C=[],T=[],L=1,R=null,N=3,A=!1,O=!1,P=!1;function I(e){for(var t=S(T);null!==t;){if(null===t.callback)x(T);else{if(!(t.startTime<=e))break;x(T),t.sortIndex=t.expirationTime,E(C,t)}t=S(T)}}function D(e){if(P=!1,I(e),!O)if(null!==S(C))O=!0,n(M);else{var t=S(T);null!==t&&r(D,t.startTime-e)}}function M(e,n){O=!1,P&&(P=!1,a()),A=!0;var o=N;try{for(I(n),R=S(C);null!==R&&(!(R.expirationTime>n)||e&&!t.unstable_shouldYield());){var i=R.callback;if("function"==typeof i){R.callback=null,N=R.priorityLevel;var l=i(R.expirationTime<=n);n=t.unstable_now(),"function"==typeof l?R.callback=l:R===S(C)&&x(C),I(n)}else x(C);R=S(C)}if(null!==R)var s=!0;else{var u=S(T);null!==u&&r(D,u.startTime-n),s=!1}return s}finally{R=null,N=o,A=!1}}var F=o;t.unstable_IdlePriority=5,t.unstable_ImmediatePriority=1,t.unstable_LowPriority=4,t.unstable_NormalPriority=3,t.unstable_Profiling=null,t.unstable_UserBlockingPriority=2,t.unstable_cancelCallback=function(e){e.callback=null},t.unstable_continueExecution=function(){O||A||(O=!0,n(M))},t.unstable_getCurrentPriorityLevel=function(){return N},t.unstable_getFirstCallbackNode=function(){return S(C)},t.unstable_next=function(e){switch(N){case 1:case 2:case 3:var t=3;break;default:t=N}var n=N;N=t;try{return e()}finally{N=n}},t.unstable_pauseExecution=function(){},t.unstable_requestPaint=F,t.unstable_runWithPriority=function(e,t){switch(e){case 1:case 2:case 3:case 4:case 5:break;default:e=3}var n=N;N=e;try{return t()}finally{N=n}},t.unstable_scheduleCallback=function(e,o,i){var l=t.unstable_now();switch("object"==typeof i&&null!==i?i="number"==typeof(i=i.delay)&&0<i?l+i:l:i=l,e){case 1:var s=-1;break;case 2:s=250;break;case 5:s=1073741823;break;case 4:s=1e4;break;default:s=5e3}return e={id:L++,callback:o,priorityLevel:e,startTime:i,expirationTime:s=i+s,sortIndex:-1},i>l?(e.sortIndex=i,E(T,e),null===S(C)&&e===S(T)&&(P?a():P=!0,r(D,i-l))):(e.sortIndex=s,E(C,e),O||A||(O=!0,n(M))),e},t.unstable_wrapCallback=function(e){var t=N;return function(){var n=N;N=t;try{return e.apply(this,arguments)}finally{N=n}}}},3840:(e,t,n)=>{"use strict";e.exports=n(53)},6774:e=>{e.exports=function(e,t,n,r){var a=n?n.call(r,e,t):void 0;if(void 0!==a)return!!a;if(e===t)return!0;if("object"!=typeof e||!e||"object"!=typeof t||!t)return!1;var o=Object.keys(e),i=Object.keys(t);if(o.length!==i.length)return!1;for(var l=Object.prototype.hasOwnProperty.bind(t),s=0;s<o.length;s++){var u=o[s];if(!l(u))return!1;var c=e[u],d=t[u];if(!1===(a=n?n.call(r,c,d,u):void 0)||void 0===a&&c!==d)return!1}return!0}},2177:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});var r="Invariant failed";function a(e,t){if(!e)throw new Error(r)}},3250:(e,t,n)=>{"use strict";var r=n(7294);var a="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},o=r.useState,i=r.useEffect,l=r.useLayoutEffect,s=r.useDebugValue;function u(e){var t=e.getSnapshot;e=e.value;try{var n=t();return!a(e,n)}catch(r){return!0}}var c="undefined"==typeof window||void 0===window.document||void 0===window.document.createElement?function(e,t){return t()}:function(e,t){var n=t(),r=o({inst:{value:n,getSnapshot:t}}),a=r[0].inst,c=r[1];return l((function(){a.value=n,a.getSnapshot=t,u(a)&&c({inst:a})}),[e,n,t]),i((function(){return u(a)&&c({inst:a}),e((function(){u(a)&&c({inst:a})}))}),[e]),s(n),n};t.useSyncExternalStore=void 0!==r.useSyncExternalStore?r.useSyncExternalStore:c},1688:(e,t,n)=>{"use strict";e.exports=n(3250)},6809:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});const r={title:"K3s",tagline:"",url:"https://docs.k3s.io",baseUrl:"/",onBrokenLinks:"throw",onBrokenMarkdownLinks:"warn",favicon:"img/favicon.ico",organizationName:"k3s-io",projectName:"docs",trailingSlash:!1,markdown:{mermaid:!0},themes:["@docusaurus/theme-mermaid",["@easyops-cn/docusaurus-search-local",{docsRouteBasePath:"/",hashed:!0,highlightSearchTermsOnTargetPage:!0,indexBlog:!1}]],i18n:{defaultLocale:"en",locales:["en","zh","kr"],localeConfigs:{en:{label:"English",direction:"ltr"},zh:{label:"\u7b80\u4f53\u4e2d\u6587",direction:"ltr"},kr:{label:"\ud55c\uad6d\uc5b4",direction:"ltr"}},path:"i18n"},themeConfig:{colorMode:{defaultMode:"light",respectPrefersColorScheme:!0,disableSwitch:!1},navbar:{title:"",logo:{alt:"logo",src:"img/k3s-logo-light.svg",srcDark:"img/k3s-logo-dark.svg"},items:[{type:"search",position:"right"},{type:"localeDropdown",position:"right",dropdownItemsBefore:[],dropdownItemsAfter:[]},{to:"https://github.com/k3s-io/k3s/",label:"GitHub",position:"right",className:"navbar__github btn"}],hideOnScroll:!1},footer:{style:"dark",links:[],copyright:'Copyright \xa9 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks\n      and uses trademarks. For a list of trademarks of The Linux Foundation, \n      please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.'},docs:{versionPersistence:"localStorage",sidebar:{hideable:!1,autoCollapseCategories:!1}},metadata:[],prism:{additionalLanguages:[],theme:{plain:{color:"#bfc7d5",backgroundColor:"#292d3e"},styles:[{types:["comment"],style:{color:"rgb(105, 112, 152)",fontStyle:"italic"}},{types:["string","inserted"],style:{color:"rgb(195, 232, 141)"}},{types:["number"],style:{color:"rgb(247, 140, 108)"}},{types:["builtin","char","constant","function"],style:{color:"rgb(130, 170, 255)"}},{types:["punctuation","selector"],style:{color:"rgb(199, 146, 234)"}},{types:["variable"],style:{color:"rgb(191, 199, 213)"}},{types:["class-name","attr-name"],style:{color:"rgb(255, 203, 107)"}},{types:["tag","deleted"],style:{color:"rgb(255, 85, 114)"}},{types:["operator"],style:{color:"rgb(137, 221, 255)"}},{types:["boolean"],style:{color:"rgb(255, 88, 116)"}},{types:["keyword"],style:{fontStyle:"italic"}},{types:["doctype"],style:{color:"rgb(199, 146, 234)",fontStyle:"italic"}},{types:["namespace"],style:{color:"rgb(178, 204, 214)"}},{types:["url"],style:{color:"rgb(221, 221, 221)"}}]},magicComments:[{className:"theme-code-block-highlighted-line",line:"highlight-next-line",block:{start:"highlight-start",end:"highlight-end"}}]},tableOfContents:{minHeadingLevel:2,maxHeadingLevel:3},mermaid:{theme:{dark:"dark",light:"default"},options:{}}},presets:[["@docusaurus/preset-classic",{docs:{routeBasePath:"/",sidebarPath:"/home/runner/work/docs/docs/sidebars.js",showLastUpdateTime:!0,editUrl:"https://github.com/k3s-io/docs/edit/main/"},blog:!1,theme:{customCss:["/home/runner/work/docs/docs/src/css/custom.css"]}}]],plugins:[["@docusaurus/plugin-client-redirects",{redirects:[{from:"/installation/ha",to:"/datastore/ha"},{from:"/installation/ha-embedded",to:"/datastore/ha-embedded"},{from:"/installation/datastore",to:"/datastore"},{from:"/installation/disable-flags",to:"/installation/server-roles"},{from:"/backup-restore/backup-restore",to:"/datastore/backup-restore"},{from:"/reference/agent-config",to:"/cli/agent"},{from:"/reference/server-config",to:"/cli/server"}]}]],baseUrlIssueBanner:!0,onDuplicateRoutes:"warn",staticDirectories:["static"],customFields:{},scripts:[],headTags:[],stylesheets:[],clientModules:[],titleDelimiter:"|",noIndex:!1}},3117:(e,t,n)=>{"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}n.d(t,{Z:()=>r})},144:(e,t,n)=>{"use strict";function r(e,t){return r=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(e,t){return e.__proto__=t,e},r(e,t)}function a(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,r(e,t)}n.d(t,{Z:()=>a})},102:(e,t,n)=>{"use strict";function r(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}n.d(t,{Z:()=>r})},7529:e=>{"use strict";e.exports={}},6887:e=>{"use strict";e.exports=JSON.parse('{"/search-ae7":{"__comp":"1a4e3797","__context":{"plugin":"4129286c"}},"/-3ad":{"__comp":"1be78505","__context":{"plugin":"247783bb"},"versionMetadata":"935f2afb"},"/-68a":{"__comp":"17896441","content":"a09c2993"},"/advanced-a2b":{"__comp":"17896441","content":"6647a7ce"},"/architecture-46e":{"__comp":"17896441","content":"83582f1b"},"/cli-995":{"__comp":"17896441","content":"9e39b1cd"},"/cli/agent-7c5":{"__comp":"17896441","content":"1be8dcfa"},"/cli/certificate-233":{"__comp":"17896441","content":"6e9804bc"},"/cli/etcd-snapshot-f75":{"__comp":"17896441","content":"36f34ab4"},"/cli/secrets-encrypt-75d":{"__comp":"17896441","content":"179ec51e"},"/cli/server-7b3":{"__comp":"17896441","content":"4455f95b"},"/cli/token-3ce":{"__comp":"17896441","content":"2a65762c"},"/cluster-access-dee":{"__comp":"17896441","content":"c513f62d"},"/datastore-7c4":{"__comp":"17896441","content":"ab388925"},"/datastore/backup-restore-167":{"__comp":"17896441","content":"ba3a957c"},"/datastore/cluster-loadbalancer-c30":{"__comp":"17896441","content":"4a667cf9"},"/datastore/ha-cdb":{"__comp":"17896441","content":"ea0a4c6d"},"/datastore/ha-embedded-aaf":{"__comp":"17896441","content":"b36bdd38"},"/faq-0e3":{"__comp":"17896441","content":"dfcda264"},"/helm-af2":{"__comp":"17896441","content":"83a7c7f9"},"/installation-569":{"__comp":"17896441","content":"1e924268"},"/installation/airgap-aba":{"__comp":"17896441","content":"ec6f9153"},"/installation/configuration-a25":{"__comp":"17896441","content":"97c4f258"},"/installation/kube-dashboard-e50":{"__comp":"17896441","content":"a3308106"},"/installation/network-options-847":{"__comp":"17896441","content":"121f934f"},"/installation/packaged-components-d71":{"__comp":"17896441","content":"65c5030c"},"/installation/private-registry-23f":{"__comp":"17896441","content":"10b61a3f"},"/installation/requirements-dc7":{"__comp":"17896441","content":"ac75af2e"},"/installation/server-roles-ce8":{"__comp":"17896441","content":"f8eefdc6"},"/installation/uninstall-97c":{"__comp":"17896441","content":"4fea1ac4"},"/known-issues-e6b":{"__comp":"17896441","content":"e2835484"},"/networking-a71":{"__comp":"17896441","content":"ee75e821"},"/quick-start-456":{"__comp":"17896441","content":"b1e02bd6"},"/reference-90f":{"__comp":"17896441","content":"9ba4882f"},"/reference/env-variables-afb":{"__comp":"17896441","content":"6ab2c2e0"},"/reference/resource-profiling-502":{"__comp":"17896441","content":"fc39421f"},"/security-a31":{"__comp":"17896441","content":"7b8e2475"},"/security/hardening-guide-f1d":{"__comp":"17896441","content":"82f1aa93"},"/security/secrets-encryption-125":{"__comp":"17896441","content":"57d35c99"},"/security/self-assessment-c72":{"__comp":"17896441","content":"05239c1f"},"/storage-f27":{"__comp":"17896441","content":"6937a857"},"/upgrades-a8e":{"__comp":"17896441","content":"4e366d5e"},"/upgrades/automated-1e2":{"__comp":"17896441","content":"82406859"},"/upgrades/killall-de1":{"__comp":"17896441","content":"4aae9e46"},"/upgrades/manual-22b":{"__comp":"17896441","content":"d8ed1217"}}')}},e=>{e.O(0,[532],(()=>{return t=9383,e(e.s=t);var t}));e.O()}]);
\ No newline at end of file
diff --git a/assets/js/main.f7fa7f61.js.LICENSE.txt b/assets/js/main.09cd452e.js.LICENSE.txt
similarity index 56%
rename from assets/js/main.f7fa7f61.js.LICENSE.txt
rename to assets/js/main.09cd452e.js.LICENSE.txt
index eb75d6910..fbc063517 100644
--- a/assets/js/main.f7fa7f61.js.LICENSE.txt
+++ b/assets/js/main.09cd452e.js.LICENSE.txt
@@ -7,6 +7,69 @@ object-assign
 /* NProgress, (c) 2013, 2014 Rico Sta. Cruz - http://ricostacruz.com/nprogress
  * @license MIT */
 
+/*!
+ * lunr.Builder
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Index
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Pipeline
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Set
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.TokenSet
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Vector
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.stemmer
+ * Copyright (C) 2020 Oliver Nightingale
+ * Includes code from - http://tartarus.org/~martin/PorterStemmer/js.txt
+ */
+
+/*!
+ * lunr.stopWordFilter
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.tokenizer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.trimmer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.utils
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!***************************************************
+* mark.js v8.11.1
+* https://markjs.io/
+* Copyright (c) 2014–2018, Julian Kühnel
+* Released under the MIT license https://git.io/vwTVl
+*****************************************************/
+
 /**
  * @license React
  * use-sync-external-store-shim.production.min.js
@@ -26,6 +89,12 @@ object-assign
  * @public
  */
 
+/**
+ * lunr - http://lunrjs.com - A bit like Solr, but much smaller and not as bright - 2.3.9
+ * Copyright (C) 2020 Oliver Nightingale
+ * @license MIT
+ */
+
 /** @license React v0.20.2
  * scheduler.production.min.js
  *
diff --git a/assets/js/main.f7fa7f61.js b/assets/js/main.f7fa7f61.js
deleted file mode 100644
index fe63bad52..000000000
--- a/assets/js/main.f7fa7f61.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see main.f7fa7f61.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[179],{830:(e,t,n)=>{"use strict";n.d(t,{W:()=>a});var r=n(7294);function a(){return r.createElement("svg",{width:"20",height:"20",className:"DocSearch-Search-Icon",viewBox:"0 0 20 20"},r.createElement("path",{d:"M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}},723:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(7294),a=n(3117),o=n(8356),i=n.n(o),l=n(6887);const s={"05239c1f":[()=>n.e(3452).then(n.bind(n,898)),"@site/docs/security/self-assessment.md",898],"10b61a3f":[()=>n.e(4902).then(n.bind(n,3159)),"@site/docs/installation/private-registry.md",3159],"121f934f":[()=>n.e(8964).then(n.bind(n,6591)),"@site/docs/installation/network-options.md",6591],17896441:[()=>Promise.all([n.e(532),n.e(4835),n.e(7918)]).then(n.bind(n,2839)),"@theme/DocItem",2839],"179ec51e":[()=>n.e(7176).then(n.bind(n,3410)),"@site/docs/cli/secrets-encrypt.md",3410],"1a4e3797":[()=>Promise.all([n.e(532),n.e(7920)]).then(n.bind(n,6675)),"@theme/SearchPage",6675],"1be78505":[()=>Promise.all([n.e(532),n.e(9514)]).then(n.bind(n,9963)),"@theme/DocPage",9963],"1be8dcfa":[()=>n.e(7628).then(n.bind(n,1152)),"@site/docs/cli/agent.md",1152],"1e924268":[()=>n.e(8614).then(n.bind(n,4686)),"@site/docs/installation/installation.md",4686],"247783bb":[()=>n.e(9334).then(n.t.bind(n,3769,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-plugin-content-docs/default/plugin-route-context-module-100.json",3769],"2a65762c":[()=>n.e(1430).then(n.bind(n,7075)),"@site/docs/cli/token.md",7075],"36f34ab4":[()=>n.e(6155).then(n.bind(n,9252)),"@site/docs/cli/etcd-snapshot.md",9252],"4455f95b":[()=>n.e(1340).then(n.bind(n,6127)),"@site/docs/cli/server.md",6127],"4a667cf9":[()=>n.e(9477).then(n.bind(n,2747)),"@site/docs/datastore/cluster-loadbalancer.md",2747],"4aae9e46":[()=>n.e(4443).then(n.bind(n,5080)),"@site/docs/upgrades/killall.md",5080],"4e366d5e":[()=>n.e(3595).then(n.bind(n,1332)),"@site/docs/upgrades/upgrades.md",1332],"4fea1ac4":[()=>n.e(1073).then(n.bind(n,9087)),"@site/docs/installation/uninstall.md",9087],"57d35c99":[()=>n.e(8005).then(n.bind(n,5001)),"@site/docs/security/secrets-encryption.md",5001],"59b068d1":[()=>n.e(6385).then(n.t.bind(n,7085,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-theme-search-algolia/default/plugin-route-context-module-100.json",7085],"65c5030c":[()=>n.e(7733).then(n.bind(n,6784)),"@site/docs/installation/packaged-components.md",6784],"6647a7ce":[()=>n.e(3353).then(n.bind(n,3115)),"@site/docs/advanced/advanced.md",3115],"6937a857":[()=>n.e(8997).then(n.bind(n,9543)),"@site/docs/storage/storage.md",9543],"6ab2c2e0":[()=>n.e(981).then(n.bind(n,7473)),"@site/docs/reference/env-variables.md",7473],"6e9804bc":[()=>n.e(393).then(n.bind(n,7161)),"@site/docs/cli/certificate.md",7161],"7b8e2475":[()=>n.e(79).then(n.bind(n,2678)),"@site/docs/security/security.md",2678],82406859:[()=>n.e(3319).then(n.bind(n,800)),"@site/docs/upgrades/automated.md",800],"82f1aa93":[()=>n.e(7709).then(n.bind(n,1199)),"@site/docs/security/hardening-guide.md",1199],"83582f1b":[()=>n.e(966).then(n.bind(n,9001)),"@site/docs/architecture/architecture.md",9001],"83a7c7f9":[()=>n.e(7817).then(n.bind(n,8048)),"@site/docs/helm/helm.md",8048],"935f2afb":[()=>n.e(53).then(n.t.bind(n,1109,19)),"~docs/default/version-current-metadata-prop-751.json",1109],"97c4f258":[()=>n.e(305).then(n.bind(n,8054)),"@site/docs/installation/configuration.md",8054],"9ba4882f":[()=>n.e(6720).then(n.bind(n,9322)),"@site/docs/reference/reference.md",9322],"9e39b1cd":[()=>n.e(7813).then(n.bind(n,3279)),"@site/docs/cli/cli.md",3279],a09c2993:[()=>n.e(4128).then(n.bind(n,8495)),"@site/docs/introduction.md",8495],a3308106:[()=>n.e(8511).then(n.bind(n,5145)),"@site/docs/installation/kube-dashboard.md",5145],ab388925:[()=>n.e(4548).then(n.bind(n,3510)),"@site/docs/datastore/datastore.md",3510],ac75af2e:[()=>n.e(1199).then(n.bind(n,7750)),"@site/docs/installation/requirements.md",7750],b1e02bd6:[()=>n.e(7834).then(n.bind(n,4741)),"@site/docs/quick-start/quick-start.md",4741],b36bdd38:[()=>n.e(6895).then(n.bind(n,748)),"@site/docs/datastore/ha-embedded.md",748],ba3a957c:[()=>n.e(8776).then(n.bind(n,4664)),"@site/docs/datastore/backup-restore.md",4664],c513f62d:[()=>n.e(2563).then(n.bind(n,28)),"@site/docs/cluster-access/cluster-access.md",28],d8ed1217:[()=>n.e(2745).then(n.bind(n,7036)),"@site/docs/upgrades/manual.md",7036],dfcda264:[()=>n.e(2098).then(n.bind(n,3969)),"@site/docs/faq/faq.md",3969],e2835484:[()=>n.e(9999).then(n.bind(n,8220)),"@site/docs/known-issues/known-issues.md",8220],ea0a4c6d:[()=>n.e(791).then(n.bind(n,972)),"@site/docs/datastore/ha.md",972],ec6f9153:[()=>n.e(750).then(n.bind(n,6875)),"@site/docs/installation/airgap.md",6875],ee75e821:[()=>n.e(7893).then(n.bind(n,6193)),"@site/docs/networking/networking.md",6193],f8eefdc6:[()=>n.e(5234).then(n.bind(n,7011)),"@site/docs/installation/server-roles.md",7011],fc39421f:[()=>n.e(9778).then(n.bind(n,1321)),"@site/docs/reference/resource-profiling.md",1321]};function u(e){let{error:t,retry:n,pastDelay:a}=e;return t?r.createElement("div",{style:{textAlign:"center",color:"#fff",backgroundColor:"#fa383e",borderColor:"#fa383e",borderStyle:"solid",borderRadius:"0.25rem",borderWidth:"1px",boxSizing:"border-box",display:"block",padding:"1rem",flex:"0 0 50%",marginLeft:"25%",marginRight:"25%",marginTop:"5rem",maxWidth:"50%",width:"100%"}},r.createElement("p",null,String(t)),r.createElement("div",null,r.createElement("button",{type:"button",onClick:n},"Retry"))):a?r.createElement("div",{style:{display:"flex",justifyContent:"center",alignItems:"center",height:"100vh"}},r.createElement("svg",{id:"loader",style:{width:128,height:110,position:"absolute",top:"calc(100vh - 64%)"},viewBox:"0 0 45 45",xmlns:"http://www.w3.org/2000/svg",stroke:"#61dafb"},r.createElement("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",strokeWidth:"2"},r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"1.5s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"1.5s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"1.5s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"3s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"3s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"3s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"8"},r.createElement("animate",{attributeName:"r",begin:"0s",dur:"1.5s",values:"6;1;2;3;4;5;6",calcMode:"linear",repeatCount:"indefinite"}))))):null}var c=n(9670),d=n(226);function f(e,t){if("*"===e)return i()({loading:u,loader:()=>n.e(4972).then(n.bind(n,4972)),modules:["@theme/NotFound"],webpack:()=>[4972],render(e,t){const n=e.default;return r.createElement(d.z,{value:{plugin:{name:"native",id:"default"}}},r.createElement(n,t))}});const o=l[`${e}-${t}`],f={},p=[],m=[],h=(0,c.Z)(o);return Object.entries(h).forEach((e=>{let[t,n]=e;const r=s[n];r&&(f[t]=r[0],p.push(r[1]),m.push(r[2]))})),i().Map({loading:u,loader:f,modules:p,webpack:()=>m,render(t,n){const i=JSON.parse(JSON.stringify(o));Object.entries(t).forEach((t=>{let[n,r]=t;const a=r.default;if(!a)throw new Error(`The page component at ${e} doesn't have a default export. This makes it impossible to render anything. Consider default-exporting a React component.`);"object"!=typeof a&&"function"!=typeof a||Object.keys(r).filter((e=>"default"!==e)).forEach((e=>{a[e]=r[e]}));let o=i;const l=n.split(".");l.slice(0,-1).forEach((e=>{o=o[e]})),o[l[l.length-1]]=a}));const l=i.__comp;delete i.__comp;const s=i.__context;return delete i.__context,r.createElement(d.z,{value:s},r.createElement(l,(0,a.Z)({},i,n)))}})}const p=[{path:"/search",component:f("/search","48c"),exact:!0},{path:"/",component:f("/","3ad"),routes:[{path:"/",component:f("/","68a"),exact:!0,sidebar:"mySidebar"},{path:"/advanced",component:f("/advanced","a2b"),exact:!0,sidebar:"mySidebar"},{path:"/architecture",component:f("/architecture","46e"),exact:!0,sidebar:"mySidebar"},{path:"/cli",component:f("/cli","995"),exact:!0,sidebar:"mySidebar"},{path:"/cli/agent",component:f("/cli/agent","7c5"),exact:!0,sidebar:"mySidebar"},{path:"/cli/certificate",component:f("/cli/certificate","233"),exact:!0,sidebar:"mySidebar"},{path:"/cli/etcd-snapshot",component:f("/cli/etcd-snapshot","f75"),exact:!0,sidebar:"mySidebar"},{path:"/cli/secrets-encrypt",component:f("/cli/secrets-encrypt","75d"),exact:!0,sidebar:"mySidebar"},{path:"/cli/server",component:f("/cli/server","7b3"),exact:!0,sidebar:"mySidebar"},{path:"/cli/token",component:f("/cli/token","3ce"),exact:!0,sidebar:"mySidebar"},{path:"/cluster-access",component:f("/cluster-access","dee"),exact:!0,sidebar:"mySidebar"},{path:"/datastore",component:f("/datastore","7c4"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/backup-restore",component:f("/datastore/backup-restore","167"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/cluster-loadbalancer",component:f("/datastore/cluster-loadbalancer","c30"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/ha",component:f("/datastore/ha","cdb"),exact:!0,sidebar:"mySidebar"},{path:"/datastore/ha-embedded",component:f("/datastore/ha-embedded","aaf"),exact:!0,sidebar:"mySidebar"},{path:"/faq",component:f("/faq","0e3"),exact:!0,sidebar:"mySidebar"},{path:"/helm",component:f("/helm","af2"),exact:!0,sidebar:"mySidebar"},{path:"/installation",component:f("/installation","569"),exact:!0,sidebar:"mySidebar"},{path:"/installation/airgap",component:f("/installation/airgap","aba"),exact:!0,sidebar:"mySidebar"},{path:"/installation/configuration",component:f("/installation/configuration","a25"),exact:!0,sidebar:"mySidebar"},{path:"/installation/kube-dashboard",component:f("/installation/kube-dashboard","e50"),exact:!0,sidebar:"mySidebar"},{path:"/installation/network-options",component:f("/installation/network-options","847"),exact:!0,sidebar:"mySidebar"},{path:"/installation/packaged-components",component:f("/installation/packaged-components","d71"),exact:!0,sidebar:"mySidebar"},{path:"/installation/private-registry",component:f("/installation/private-registry","23f"),exact:!0,sidebar:"mySidebar"},{path:"/installation/requirements",component:f("/installation/requirements","dc7"),exact:!0,sidebar:"mySidebar"},{path:"/installation/server-roles",component:f("/installation/server-roles","ce8"),exact:!0,sidebar:"mySidebar"},{path:"/installation/uninstall",component:f("/installation/uninstall","97c"),exact:!0,sidebar:"mySidebar"},{path:"/known-issues",component:f("/known-issues","e6b"),exact:!0,sidebar:"mySidebar"},{path:"/networking",component:f("/networking","a71"),exact:!0,sidebar:"mySidebar"},{path:"/quick-start",component:f("/quick-start","456"),exact:!0,sidebar:"mySidebar"},{path:"/reference",component:f("/reference","90f"),exact:!0,sidebar:"mySidebar"},{path:"/reference/env-variables",component:f("/reference/env-variables","afb"),exact:!0,sidebar:"mySidebar"},{path:"/reference/resource-profiling",component:f("/reference/resource-profiling","502"),exact:!0,sidebar:"mySidebar"},{path:"/security",component:f("/security","a31"),exact:!0,sidebar:"mySidebar"},{path:"/security/hardening-guide",component:f("/security/hardening-guide","f1d"),exact:!0,sidebar:"mySidebar"},{path:"/security/secrets-encryption",component:f("/security/secrets-encryption","125"),exact:!0,sidebar:"mySidebar"},{path:"/security/self-assessment",component:f("/security/self-assessment","c72"),exact:!0,sidebar:"mySidebar"},{path:"/storage",component:f("/storage","f27"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades",component:f("/upgrades","a8e"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades/automated",component:f("/upgrades/automated","1e2"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades/killall",component:f("/upgrades/killall","de1"),exact:!0,sidebar:"mySidebar"},{path:"/upgrades/manual",component:f("/upgrades/manual","22b"),exact:!0,sidebar:"mySidebar"}]},{path:"*",component:f("*")}]},8934:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,t:()=>o});var r=n(7294);const a=r.createContext(!1);function o(e){let{children:t}=e;const[n,o]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{o(!0)}),[]),r.createElement(a.Provider,{value:n},t)}},9383:(e,t,n)=>{"use strict";var r=n(7294),a=n(3935),o=n(3727),i=n(405),l=n(412);const s=[n(2497),n(3310),n(8320),n(2295)];var u=n(723),c=n(6775),d=n(8790);function f(e){let{children:t}=e;return r.createElement(r.Fragment,null,t)}var p=n(3117),m=n(5742),h=n(2263),g=n(4996),b=n(6668),v=n(833),y=n(4711),w=n(9727),k=n(3320),E=n(197);function S(){const{i18n:{defaultLocale:e,localeConfigs:t}}=(0,h.Z)(),n=(0,y.l)();return r.createElement(m.Z,null,Object.entries(t).map((e=>{let[t,{htmlLang:a}]=e;return r.createElement("link",{key:t,rel:"alternate",href:n.createUrl({locale:t,fullyQualified:!0}),hrefLang:a})})),r.createElement("link",{rel:"alternate",href:n.createUrl({locale:e,fullyQualified:!0}),hrefLang:"x-default"}))}function x(e){let{permalink:t}=e;const{siteConfig:{url:n}}=(0,h.Z)(),a=function(){const{siteConfig:{url:e}}=(0,h.Z)(),{pathname:t}=(0,c.TH)();return e+(0,g.Z)(t)}(),o=t?`${n}${t}`:a;return r.createElement(m.Z,null,r.createElement("meta",{property:"og:url",content:o}),r.createElement("link",{rel:"canonical",href:o}))}function C(){const{i18n:{currentLocale:e}}=(0,h.Z)(),{metadata:t,image:n}=(0,b.L)();return r.createElement(r.Fragment,null,r.createElement(m.Z,null,r.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),r.createElement("body",{className:w.h})),n&&r.createElement(v.d,{image:n}),r.createElement(x,null),r.createElement(S,null),r.createElement(E.Z,{tag:k.HX,locale:e}),r.createElement(m.Z,null,t.map(((e,t)=>r.createElement("meta",(0,p.Z)({key:t},e))))))}const _=new Map;function T(e){if(_.has(e.pathname))return{...e,pathname:_.get(e.pathname)};if((0,d.f)(u.Z,e.pathname).some((e=>{let{route:t}=e;return!0===t.exact})))return _.set(e.pathname,e.pathname),e;const t=e.pathname.trim().replace(/(?:\/index)?\.html$/,"")||"/";return _.set(e.pathname,t),{...e,pathname:t}}var A=n(8934),L=n(8940);function R(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];const a=s.map((t=>(t.default?.[e]??t[e])?.(...n)));return()=>a.forEach((e=>e?.()))}const N=function(e){let{children:t,location:n,previousLocation:a}=e;return(0,r.useLayoutEffect)((()=>{a!==n&&(!function(e){let{location:t,previousLocation:n}=e;if(!n)return;const r=t.pathname===n.pathname,a=t.hash===n.hash,o=t.search===n.search;if(r&&a&&!o)return;const{hash:i}=t;if(i){const e=decodeURIComponent(i.substring(1));document.getElementById(e)?.scrollIntoView()}else window.scrollTo(0,0)}({location:n,previousLocation:a}),R("onRouteDidUpdate",{previousLocation:a,location:n}))}),[a,n]),t};function P(e){const t=Array.from(new Set([e,decodeURI(e)])).map((e=>(0,d.f)(u.Z,e))).flat();return Promise.all(t.map((e=>e.route.component.preload?.())))}class O extends r.Component{constructor(e){super(e),this.previousLocation=void 0,this.routeUpdateCleanupCb=void 0,this.previousLocation=null,this.routeUpdateCleanupCb=l.Z.canUseDOM?R("onRouteUpdate",{previousLocation:null,location:this.props.location}):()=>{},this.state={nextRouteHasLoaded:!0}}shouldComponentUpdate(e,t){if(e.location===this.props.location)return t.nextRouteHasLoaded;const n=e.location;return this.previousLocation=this.props.location,this.setState({nextRouteHasLoaded:!1}),this.routeUpdateCleanupCb=R("onRouteUpdate",{previousLocation:this.previousLocation,location:n}),P(n.pathname).then((()=>{this.routeUpdateCleanupCb(),this.setState({nextRouteHasLoaded:!0})})).catch((e=>{console.warn(e),window.location.reload()})),!1}render(){const{children:e,location:t}=this.props;return r.createElement(N,{previousLocation:this.previousLocation,location:t},r.createElement(c.AW,{location:t,render:()=>e}))}}const I=O,D="__docusaurus-base-url-issue-banner-container",M="__docusaurus-base-url-issue-banner-suggestion-container",F="__DOCUSAURUS_INSERT_BASEURL_BANNER";function B(e){return`\nwindow['${F}'] = true;\n\ndocument.addEventListener('DOMContentLoaded', maybeInsertBanner);\n\nfunction maybeInsertBanner() {\n  var shouldInsert = window['${F}'];\n  shouldInsert && insertBanner();\n}\n\nfunction insertBanner() {\n  var bannerContainer = document.getElementById('${D}');\n  if (!bannerContainer) {\n    return;\n  }\n  var bannerHtml = ${JSON.stringify(function(e){return`\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">${e}</span> ${"/"===e?" (default value)":""}</p>\n   <p>We suggest trying baseUrl = <span id="${M}" style="font-weight: bold; color: green;"></span></p>\n</div>\n`}(e)).replace(/</g,"\\<")};\n  bannerContainer.innerHTML = bannerHtml;\n  var suggestionContainer = document.getElementById('${M}');\n  var actualHomePagePath = window.location.pathname;\n  var suggestedBaseUrl = actualHomePagePath.substr(-1) === '/'\n        ? actualHomePagePath\n        : actualHomePagePath + '/';\n  suggestionContainer.innerHTML = suggestedBaseUrl;\n}\n`}function j(){const{siteConfig:{baseUrl:e}}=(0,h.Z)();return(0,r.useLayoutEffect)((()=>{window[F]=!1}),[]),r.createElement(r.Fragment,null,!l.Z.canUseDOM&&r.createElement(m.Z,null,r.createElement("script",null,B(e))),r.createElement("div",{id:D}))}function z(){const{siteConfig:{baseUrl:e,baseUrlIssueBanner:t}}=(0,h.Z)(),{pathname:n}=(0,c.TH)();return t&&n===e?r.createElement(j,null):null}function U(){const{siteConfig:{favicon:e,title:t,noIndex:n},i18n:{currentLocale:a,localeConfigs:o}}=(0,h.Z)(),i=(0,g.Z)(e),{htmlLang:l,direction:s}=o[a];return r.createElement(m.Z,null,r.createElement("html",{lang:l,dir:s}),r.createElement("title",null,t),r.createElement("meta",{property:"og:title",content:t}),r.createElement("meta",{name:"viewport",content:"width=device-width, initial-scale=1.0"}),n&&r.createElement("meta",{name:"robots",content:"noindex, nofollow"}),e&&r.createElement("link",{rel:"icon",href:i}))}var $=n(4763);function q(){const e=(0,d.H)(u.Z),t=(0,c.TH)();return r.createElement($.Z,null,r.createElement(L.M,null,r.createElement(A.t,null,r.createElement(f,null,r.createElement(U,null),r.createElement(C,null),r.createElement(z,null),r.createElement(I,{location:T(t)},e)))))}var H=n(6887);const G=function(e){try{return document.createElement("link").relList.supports(e)}catch{return!1}}("prefetch")?function(e){return new Promise(((t,n)=>{if("undefined"==typeof document)return void n();const r=document.createElement("link");r.setAttribute("rel","prefetch"),r.setAttribute("href",e),r.onload=()=>t(),r.onerror=()=>n();(document.getElementsByTagName("head")[0]??document.getElementsByName("script")[0]?.parentNode)?.appendChild(r)}))}:function(e){return new Promise(((t,n)=>{const r=new XMLHttpRequest;r.open("GET",e,!0),r.withCredentials=!0,r.onload=()=>{200===r.status?t():n()},r.send(null)}))};var Z=n(9670);const V=new Set,W=new Set,K=()=>navigator.connection?.effectiveType.includes("2g")||navigator.connection?.saveData,Y={prefetch(e){if(!(e=>!K()&&!W.has(e)&&!V.has(e))(e))return!1;V.add(e);const t=(0,d.f)(u.Z,e).flatMap((e=>{return t=e.route.path,Object.entries(H).filter((e=>{let[n]=e;return n.replace(/-[^-]+$/,"")===t})).flatMap((e=>{let[,t]=e;return Object.values((0,Z.Z)(t))}));var t}));return Promise.all(t.map((e=>{const t=n.gca(e);return t&&!t.includes("undefined")?G(t).catch((()=>{})):Promise.resolve()})))},preload:e=>!!(e=>!K()&&!W.has(e))(e)&&(W.add(e),P(e))},Q=Object.freeze(Y);if(l.Z.canUseDOM){window.docusaurus=Q;const e=a.hydrate;P(window.location.pathname).then((()=>{e(r.createElement(i.B6,null,r.createElement(o.VK,null,r.createElement(q,null))),document.getElementById("__docusaurus"))}))}},8940:(e,t,n)=>{"use strict";n.d(t,{_:()=>c,M:()=>d});var r=n(7294),a=n(6809);const o=JSON.parse('{"docusaurus-plugin-content-docs":{"default":{"path":"/","versions":[{"name":"current","label":"Next","isLast":true,"path":"/","mainDocId":"introduction","docs":[{"id":"advanced/advanced","path":"/advanced/","sidebar":"mySidebar"},{"id":"architecture/architecture","path":"/architecture/","sidebar":"mySidebar"},{"id":"cli/agent","path":"/cli/agent","sidebar":"mySidebar"},{"id":"cli/certificate","path":"/cli/certificate","sidebar":"mySidebar"},{"id":"cli/cli","path":"/cli/","sidebar":"mySidebar"},{"id":"cli/etcd-snapshot","path":"/cli/etcd-snapshot","sidebar":"mySidebar"},{"id":"cli/secrets-encrypt","path":"/cli/secrets-encrypt","sidebar":"mySidebar"},{"id":"cli/server","path":"/cli/server","sidebar":"mySidebar"},{"id":"cli/token","path":"/cli/token","sidebar":"mySidebar"},{"id":"cluster-access/cluster-access","path":"/cluster-access/","sidebar":"mySidebar"},{"id":"datastore/backup-restore","path":"/datastore/backup-restore","sidebar":"mySidebar"},{"id":"datastore/cluster-loadbalancer","path":"/datastore/cluster-loadbalancer","sidebar":"mySidebar"},{"id":"datastore/datastore","path":"/datastore/","sidebar":"mySidebar"},{"id":"datastore/ha","path":"/datastore/ha","sidebar":"mySidebar"},{"id":"datastore/ha-embedded","path":"/datastore/ha-embedded","sidebar":"mySidebar"},{"id":"faq/faq","path":"/faq/","sidebar":"mySidebar"},{"id":"helm/helm","path":"/helm/","sidebar":"mySidebar"},{"id":"installation/airgap","path":"/installation/airgap","sidebar":"mySidebar"},{"id":"installation/configuration","path":"/installation/configuration","sidebar":"mySidebar"},{"id":"installation/installation","path":"/installation/","sidebar":"mySidebar"},{"id":"installation/kube-dashboard","path":"/installation/kube-dashboard","sidebar":"mySidebar"},{"id":"installation/network-options","path":"/installation/network-options","sidebar":"mySidebar"},{"id":"installation/packaged-components","path":"/installation/packaged-components","sidebar":"mySidebar"},{"id":"installation/private-registry","path":"/installation/private-registry","sidebar":"mySidebar"},{"id":"installation/requirements","path":"/installation/requirements","sidebar":"mySidebar"},{"id":"installation/server-roles","path":"/installation/server-roles","sidebar":"mySidebar"},{"id":"installation/uninstall","path":"/installation/uninstall","sidebar":"mySidebar"},{"id":"introduction","path":"/","sidebar":"mySidebar"},{"id":"known-issues/known-issues","path":"/known-issues/","sidebar":"mySidebar"},{"id":"networking/networking","path":"/networking/","sidebar":"mySidebar"},{"id":"quick-start/quick-start","path":"/quick-start/","sidebar":"mySidebar"},{"id":"reference/env-variables","path":"/reference/env-variables","sidebar":"mySidebar"},{"id":"reference/reference","path":"/reference/","sidebar":"mySidebar"},{"id":"reference/resource-profiling","path":"/reference/resource-profiling","sidebar":"mySidebar"},{"id":"security/hardening-guide","path":"/security/hardening-guide","sidebar":"mySidebar"},{"id":"security/secrets-encryption","path":"/security/secrets-encryption","sidebar":"mySidebar"},{"id":"security/security","path":"/security/","sidebar":"mySidebar"},{"id":"security/self-assessment","path":"/security/self-assessment","sidebar":"mySidebar"},{"id":"storage/storage","path":"/storage/","sidebar":"mySidebar"},{"id":"upgrades/automated","path":"/upgrades/automated","sidebar":"mySidebar"},{"id":"upgrades/killall","path":"/upgrades/killall","sidebar":"mySidebar"},{"id":"upgrades/manual","path":"/upgrades/manual","sidebar":"mySidebar"},{"id":"upgrades/upgrades","path":"/upgrades/","sidebar":"mySidebar"}],"draftIds":[],"sidebars":{"mySidebar":{"link":{"path":"/","label":"introduction"}}}}],"breadcrumbs":true}}}'),i=JSON.parse('{"defaultLocale":"en","locales":["en","zh","kr"],"path":"i18n","currentLocale":"en","localeConfigs":{"en":{"label":"English","direction":"ltr","htmlLang":"en","calendar":"gregory","path":"en"},"zh":{"label":"\u7b80\u4f53\u4e2d\u6587","direction":"ltr","htmlLang":"zh","calendar":"gregory","path":"zh"},"kr":{"label":"\ud55c\uad6d\uc5b4","direction":"ltr","htmlLang":"kr","calendar":"gregory","path":"kr"}}}');var l=n(7529);const s=JSON.parse('{"docusaurusVersion":"2.4.1","siteVersion":"0.0.1","pluginVersions":{"docusaurus-plugin-content-docs":{"type":"package","name":"@docusaurus/plugin-content-docs","version":"2.4.1"},"docusaurus-plugin-content-pages":{"type":"package","name":"@docusaurus/plugin-content-pages","version":"2.4.1"},"docusaurus-plugin-sitemap":{"type":"package","name":"@docusaurus/plugin-sitemap","version":"2.4.1"},"docusaurus-theme-classic":{"type":"package","name":"@docusaurus/theme-classic","version":"2.4.1"},"docusaurus-theme-search-algolia":{"type":"package","name":"@docusaurus/theme-search-algolia","version":"2.4.1"},"docusaurus-plugin-client-redirects":{"type":"package","name":"@docusaurus/plugin-client-redirects","version":"2.4.1"},"docusaurus-theme-mermaid":{"type":"package","name":"@docusaurus/theme-mermaid","version":"2.4.1"}}}'),u={siteConfig:a.Z,siteMetadata:s,globalData:o,i18n:i,codeTranslations:l},c=r.createContext(u);function d(e){let{children:t}=e;return r.createElement(c.Provider,{value:u},t)}},4763:(e,t,n)=>{"use strict";n.d(t,{Z:()=>f});var r=n(7294),a=n(412),o=n(5742),i=n(8780),l=n(6999);function s(e){let{error:t,tryAgain:n}=e;return r.createElement("div",{style:{display:"flex",flexDirection:"column",justifyContent:"center",alignItems:"flex-start",minHeight:"100vh",width:"100%",maxWidth:"80ch",fontSize:"20px",margin:"0 auto",padding:"1rem"}},r.createElement("h1",{style:{fontSize:"3rem"}},"This page crashed"),r.createElement("button",{type:"button",onClick:n,style:{margin:"1rem 0",fontSize:"2rem",cursor:"pointer",borderRadius:20,padding:"1rem"}},"Try again"),r.createElement(u,{error:t}))}function u(e){let{error:t}=e;const n=(0,i.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{style:{whiteSpace:"pre-wrap"}},n)}function c(e){let{error:t,tryAgain:n}=e;return r.createElement(f,{fallback:()=>r.createElement(s,{error:t,tryAgain:n})},r.createElement(o.Z,null,r.createElement("title",null,"Page Error")),r.createElement(l.Z,null,r.createElement(s,{error:t,tryAgain:n})))}const d=e=>r.createElement(c,e);class f extends r.Component{constructor(e){super(e),this.state={error:null}}componentDidCatch(e){a.Z.canUseDOM&&this.setState({error:e})}render(){const{children:e}=this.props,{error:t}=this.state;if(t){const e={error:t,tryAgain:()=>this.setState({error:null})};return(this.props.fallback??d)(e)}return e??null}}},412:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});const r="undefined"!=typeof window&&"document"in window&&"createElement"in window.document,a={canUseDOM:r,canUseEventListeners:r&&("addEventListener"in window||"attachEvent"in window),canUseIntersectionObserver:r&&"IntersectionObserver"in window,canUseViewport:r&&"screen"in window}},5742:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(405);function o(e){return r.createElement(a.ql,e)}},9960:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(3117),a=n(7294),o=n(3727),i=n(8780),l=n(2263),s=n(3919),u=n(412);const c=a.createContext({collectLink:()=>{}});var d=n(4996);function f(e,t){let{isNavLink:n,to:f,href:p,activeClassName:m,isActive:h,"data-noBrokenLinkCheck":g,autoAddBaseUrl:b=!0,...v}=e;const{siteConfig:{trailingSlash:y,baseUrl:w}}=(0,l.Z)(),{withBaseUrl:k}=(0,d.C)(),E=(0,a.useContext)(c),S=(0,a.useRef)(null);(0,a.useImperativeHandle)(t,(()=>S.current));const x=f||p;const C=(0,s.Z)(x),_=x?.replace("pathname://","");let T=void 0!==_?(A=_,b&&(e=>e.startsWith("/"))(A)?k(A):A):void 0;var A;T&&C&&(T=(0,i.applyTrailingSlash)(T,{trailingSlash:y,baseUrl:w}));const L=(0,a.useRef)(!1),R=n?o.OL:o.rU,N=u.Z.canUseIntersectionObserver,P=(0,a.useRef)(),O=()=>{L.current||null==T||(window.docusaurus.preload(T),L.current=!0)};(0,a.useEffect)((()=>(!N&&C&&null!=T&&window.docusaurus.prefetch(T),()=>{N&&P.current&&P.current.disconnect()})),[P,T,N,C]);const I=T?.startsWith("#")??!1,D=!T||!C||I;return D||g||E.collectLink(T),D?a.createElement("a",(0,r.Z)({ref:S,href:T},x&&!C&&{target:"_blank",rel:"noopener noreferrer"},v)):a.createElement(R,(0,r.Z)({},v,{onMouseEnter:O,onTouchStart:O,innerRef:e=>{S.current=e,N&&e&&C&&(P.current=new window.IntersectionObserver((t=>{t.forEach((t=>{e===t.target&&(t.isIntersecting||t.intersectionRatio>0)&&(P.current.unobserve(e),P.current.disconnect(),null!=T&&window.docusaurus.prefetch(T))}))})),P.current.observe(e))},to:T},n&&{isActive:h,activeClassName:m}))}const p=a.forwardRef(f)},5999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s,I:()=>l});var r=n(7294);function a(e,t){const n=e.split(/(\{\w+\})/).map(((e,n)=>{if(n%2==1){const n=t?.[e.slice(1,-1)];if(void 0!==n)return n}return e}));return n.some((e=>(0,r.isValidElement)(e)))?n.map(((e,t)=>(0,r.isValidElement)(e)?r.cloneElement(e,{key:t}):e)).filter((e=>""!==e)):n.join("")}var o=n(7529);function i(e){let{id:t,message:n}=e;if(void 0===t&&void 0===n)throw new Error("Docusaurus translation declarations must have at least a translation id or a default translation message");return o[t??n]??n??t}function l(e,t){let{message:n,id:r}=e;return a(i({message:n,id:r}),t)}function s(e){let{children:t,id:n,values:o}=e;if(t&&"string"!=typeof t)throw console.warn("Illegal <Translate> children",t),new Error("The Docusaurus <Translate> component only accept simple string values");const l=i({message:t,id:n});return r.createElement(r.Fragment,null,a(l,o))}},9935:(e,t,n)=>{"use strict";n.d(t,{m:()=>r});const r="default"},3919:(e,t,n)=>{"use strict";function r(e){return/^(?:\w*:|\/\/)/.test(e)}function a(e){return void 0!==e&&!r(e)}n.d(t,{Z:()=>a,b:()=>r})},4996:(e,t,n)=>{"use strict";n.d(t,{C:()=>i,Z:()=>l});var r=n(7294),a=n(2263),o=n(3919);function i(){const{siteConfig:{baseUrl:e,url:t}}=(0,a.Z)(),n=(0,r.useCallback)(((n,r)=>function(e,t,n,r){let{forcePrependBaseUrl:a=!1,absolute:i=!1}=void 0===r?{}:r;if(!n||n.startsWith("#")||(0,o.b)(n))return n;if(a)return t+n.replace(/^\//,"");if(n===t.replace(/\/$/,""))return t;const l=n.startsWith(t)?n:t+n.replace(/^\//,"");return i?e+l:l}(t,e,n,r)),[t,e]);return{withBaseUrl:n}}function l(e,t){void 0===t&&(t={});const{withBaseUrl:n}=i();return n(e,t)}},2263:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8940);function o(){return(0,r.useContext)(a._)}},2389:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8934);function o(){return(0,r.useContext)(a._)}},9670:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});function r(e){const t={};return function e(n,r){Object.entries(n).forEach((n=>{let[a,o]=n;const i=r?`${r}.${a}`:a;var l;"object"==typeof(l=o)&&l&&Object.keys(l).length>0?e(o,i):t[i]=o}))}(e),t}},226:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,z:()=>o});var r=n(7294);const a=r.createContext(null);function o(e){let{children:t,value:n}=e;const o=r.useContext(a),i=(0,r.useMemo)((()=>function(e){let{parent:t,value:n}=e;if(!t){if(!n)throw new Error("Unexpected: no Docusaurus route context found");if(!("plugin"in n))throw new Error("Unexpected: Docusaurus topmost route context has no `plugin` attribute");return n}const r={...t.data,...n?.data};return{plugin:t.plugin,data:r}}({parent:o,value:n})),[o,n]);return r.createElement(a.Provider,{value:i},t)}},143:(e,t,n)=>{"use strict";n.d(t,{Iw:()=>b,gA:()=>p,WS:()=>m,_r:()=>d,Jo:()=>v,zh:()=>f,yW:()=>g,gB:()=>h});var r=n(6775),a=n(2263),o=n(9935);function i(e,t){void 0===t&&(t={});const n=function(){const{globalData:e}=(0,a.Z)();return e}()[e];if(!n&&t.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin.`);return n}const l=e=>e.versions.find((e=>e.isLast));function s(e,t){const n=l(e);return[...e.versions.filter((e=>e!==n)),n].find((e=>!!(0,r.LX)(t,{path:e.path,exact:!1,strict:!1})))}function u(e,t){const n=s(e,t),a=n?.docs.find((e=>!!(0,r.LX)(t,{path:e.path,exact:!0,strict:!1})));return{activeVersion:n,activeDoc:a,alternateDocVersions:a?function(t){const n={};return e.versions.forEach((e=>{e.docs.forEach((r=>{r.id===t&&(n[e.name]=r)}))})),n}(a.id):{}}}const c={},d=()=>i("docusaurus-plugin-content-docs")??c,f=e=>function(e,t,n){void 0===t&&(t=o.m),void 0===n&&(n={});const r=i(e)?.[t];if(!r&&n.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin with id "${t}".`);return r}("docusaurus-plugin-content-docs",e,{failfast:!0});function p(e){void 0===e&&(e={});const t=d(),{pathname:n}=(0,r.TH)();return function(e,t,n){void 0===n&&(n={});const a=Object.entries(e).sort(((e,t)=>t[1].path.localeCompare(e[1].path))).find((e=>{let[,n]=e;return!!(0,r.LX)(t,{path:n.path,exact:!1,strict:!1})})),o=a?{pluginId:a[0],pluginData:a[1]}:void 0;if(!o&&n.failfast)throw new Error(`Can't find active docs plugin for "${t}" pathname, while it was expected to be found. Maybe you tried to use a docs feature that can only be used on a docs-related page? Existing docs plugin paths are: ${Object.values(e).map((e=>e.path)).join(", ")}`);return o}(t,n,e)}function m(e){void 0===e&&(e={});const t=p(e),{pathname:n}=(0,r.TH)();if(!t)return;return{activePlugin:t,activeVersion:s(t.pluginData,n)}}function h(e){return f(e).versions}function g(e){const t=f(e);return l(t)}function b(e){const t=f(e),{pathname:n}=(0,r.TH)();return u(t,n)}function v(e){const t=f(e),{pathname:n}=(0,r.TH)();return function(e,t){const n=l(e);return{latestDocSuggestion:u(e,t).alternateDocVersions[n.name],latestVersionSuggestion:n}}(t,n)}},8320:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>o});var r=n(4865),a=n.n(r);a().configure({showSpinner:!1});const o={onRouteUpdate(e){let{location:t,previousLocation:n}=e;if(n&&t.pathname!==n.pathname){const e=window.setTimeout((()=>{a().start()}),200);return()=>window.clearTimeout(e)}},onRouteDidUpdate(){a().done()}}},3310:(e,t,n)=>{"use strict";n.r(t);var r=n(7410),a=n(6809);!function(e){const{themeConfig:{prism:t}}=a.Z,{additionalLanguages:r}=t;globalThis.Prism=e,r.forEach((e=>{n(6726)(`./prism-${e}`)})),delete globalThis.Prism}(r.Z)},9471:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294);const a="iconExternalLink_nPIU";function o(e){let{width:t=13.5,height:n=13.5}=e;return r.createElement("svg",{width:t,height:n,"aria-hidden":"true",viewBox:"0 0 24 24",className:a},r.createElement("path",{fill:"currentColor",d:"M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"}))}},6999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>Ot});var r=n(7294),a=n(6010),o=n(4763),i=n(833),l=n(3117),s=n(6775),u=n(5999),c=n(5936);const d="__docusaurus_skipToContent_fallback";function f(e){e.setAttribute("tabindex","-1"),e.focus(),e.removeAttribute("tabindex")}function p(){const e=(0,r.useRef)(null),{action:t}=(0,s.k6)(),n=(0,r.useCallback)((e=>{e.preventDefault();const t=document.querySelector("main:first-of-type")??document.getElementById(d);t&&f(t)}),[]);return(0,c.S)((n=>{let{location:r}=n;e.current&&!r.hash&&"PUSH"===t&&f(e.current)})),{containerRef:e,onClick:n}}const m=(0,u.I)({id:"theme.common.skipToMainContent",description:"The skip to content label used for accessibility, allowing to rapidly navigate to main content with keyboard tab/enter navigation",message:"Skip to main content"});function h(e){const t=e.children??m,{containerRef:n,onClick:a}=p();return r.createElement("div",{ref:n,role:"region","aria-label":m},r.createElement("a",(0,l.Z)({},e,{href:`#${d}`,onClick:a}),t))}var g=n(5281),b=n(9727);const v="skipToContent_fXgn";function y(){return r.createElement(h,{className:v})}var w=n(6668),k=n(9689);function E(e){let{width:t=21,height:n=21,color:a="currentColor",strokeWidth:o=1.2,className:i,...s}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 15 15",width:t,height:n},s),r.createElement("g",{stroke:a,strokeWidth:o},r.createElement("path",{d:"M.75.75l13.5 13.5M14.25.75L.75 14.25"})))}const S="closeButton_CVFx";function x(e){return r.createElement("button",(0,l.Z)({type:"button","aria-label":(0,u.I)({id:"theme.AnnouncementBar.closeButtonAriaLabel",message:"Close",description:"The ARIA label for close button of announcement bar"})},e,{className:(0,a.Z)("clean-btn close",S,e.className)}),r.createElement(E,{width:14,height:14,strokeWidth:3.1}))}const C="content_knG7";function _(e){const{announcementBar:t}=(0,w.L)(),{content:n}=t;return r.createElement("div",(0,l.Z)({},e,{className:(0,a.Z)(C,e.className),dangerouslySetInnerHTML:{__html:n}}))}const T="announcementBar_mb4j",A="announcementBarPlaceholder_vyr4",L="announcementBarClose_gvF7",R="announcementBarContent_xLdY";function N(){const{announcementBar:e}=(0,w.L)(),{isActive:t,close:n}=(0,k.nT)();if(!t)return null;const{backgroundColor:a,textColor:o,isCloseable:i}=e;return r.createElement("div",{className:T,style:{backgroundColor:a,color:o},role:"banner"},i&&r.createElement("div",{className:A}),r.createElement(_,{className:R}),i&&r.createElement(x,{onClick:n,className:L}))}var P=n(3163),O=n(2466);var I=n(902),D=n(3102);const M=r.createContext(null);function F(e){let{children:t}=e;const n=function(){const e=(0,P.e)(),t=(0,D.HY)(),[n,a]=(0,r.useState)(!1),o=null!==t.component,i=(0,I.D9)(o);return(0,r.useEffect)((()=>{o&&!i&&a(!0)}),[o,i]),(0,r.useEffect)((()=>{o?e.shown||a(!0):a(!1)}),[e.shown,o]),(0,r.useMemo)((()=>[n,a]),[n])}();return r.createElement(M.Provider,{value:n},t)}function B(e){if(e.component){const t=e.component;return r.createElement(t,e.props)}}function j(){const e=(0,r.useContext)(M);if(!e)throw new I.i6("NavbarSecondaryMenuDisplayProvider");const[t,n]=e,a=(0,r.useCallback)((()=>n(!1)),[n]),o=(0,D.HY)();return(0,r.useMemo)((()=>({shown:t,hide:a,content:B(o)})),[a,o,t])}function z(e){let{header:t,primaryMenu:n,secondaryMenu:o}=e;const{shown:i}=j();return r.createElement("div",{className:"navbar-sidebar"},t,r.createElement("div",{className:(0,a.Z)("navbar-sidebar__items",{"navbar-sidebar__items--show-secondary":i})},r.createElement("div",{className:"navbar-sidebar__item menu"},n),r.createElement("div",{className:"navbar-sidebar__item menu"},o)))}var U=n(2949),$=n(2389);function q(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"}))}function H(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"}))}const G={toggle:"toggle_vylO",toggleButton:"toggleButton_gllP",darkToggleIcon:"darkToggleIcon_wfgR",lightToggleIcon:"lightToggleIcon_pyhR",toggleButtonDisabled:"toggleButtonDisabled_aARS"};function Z(e){let{className:t,buttonClassName:n,value:o,onChange:i}=e;const l=(0,$.Z)(),s=(0,u.I)({message:"Switch between dark and light mode (currently {mode})",id:"theme.colorToggle.ariaLabel",description:"The ARIA label for the navbar color mode toggle"},{mode:"dark"===o?(0,u.I)({message:"dark mode",id:"theme.colorToggle.ariaLabel.mode.dark",description:"The name for the dark color mode"}):(0,u.I)({message:"light mode",id:"theme.colorToggle.ariaLabel.mode.light",description:"The name for the light color mode"})});return r.createElement("div",{className:(0,a.Z)(G.toggle,t)},r.createElement("button",{className:(0,a.Z)("clean-btn",G.toggleButton,!l&&G.toggleButtonDisabled,n),type:"button",onClick:()=>i("dark"===o?"light":"dark"),disabled:!l,title:s,"aria-label":s,"aria-live":"polite"},r.createElement(q,{className:(0,a.Z)(G.toggleIcon,G.lightToggleIcon)}),r.createElement(H,{className:(0,a.Z)(G.toggleIcon,G.darkToggleIcon)})))}const V=r.memo(Z),W="darkNavbarColorModeToggle_X3D1";function K(e){let{className:t}=e;const n=(0,w.L)().navbar.style,a=(0,w.L)().colorMode.disableSwitch,{colorMode:o,setColorMode:i}=(0,U.I)();return a?null:r.createElement(V,{className:t,buttonClassName:"dark"===n?W:void 0,value:o,onChange:i})}var Y=n(1327);function Q(){return r.createElement(Y.Z,{className:"navbar__brand",imageClassName:"navbar__logo",titleClassName:"navbar__title text--truncate"})}function X(){const e=(0,P.e)();return r.createElement("button",{type:"button","aria-label":(0,u.I)({id:"theme.docs.sidebar.closeSidebarButtonAriaLabel",message:"Close navigation bar",description:"The ARIA label for close button of mobile sidebar"}),className:"clean-btn navbar-sidebar__close",onClick:()=>e.toggle()},r.createElement(E,{color:"var(--ifm-color-emphasis-600)"}))}function J(){return r.createElement("div",{className:"navbar-sidebar__brand"},r.createElement(Q,null),r.createElement("a",{href:"https://github.com/k3s-io/k3s",target:"_blank",rel:"noopener noreferrer",className:"margin-right--md header-github-link"}),r.createElement(K,{className:"margin-right--md"}),r.createElement(X,null))}var ee=n(9960),te=n(4996),ne=n(3919),re=n(8022),ae=n(9471);function oe(e){let{activeBasePath:t,activeBaseRegex:n,to:a,href:o,label:i,html:s,isDropdownLink:u,prependBaseUrlToHref:c,...d}=e;const f=(0,te.Z)(a),p=(0,te.Z)(t),m=(0,te.Z)(o,{forcePrependBaseUrl:!0}),h=i&&o&&!(0,ne.Z)(o),g=s?{dangerouslySetInnerHTML:{__html:s}}:{children:r.createElement(r.Fragment,null,i,h&&r.createElement(ae.Z,u&&{width:12,height:12}))};return o?r.createElement(ee.Z,(0,l.Z)({href:c?m:o},d,g)):r.createElement(ee.Z,(0,l.Z)({to:f,isNavLink:!0},(t||n)&&{isActive:(e,t)=>n?(0,re.F)(n,t.pathname):t.pathname.startsWith(p)},d,g))}function ie(e){let{className:t,isDropdownItem:n=!1,...o}=e;const i=r.createElement(oe,(0,l.Z)({className:(0,a.Z)(n?"dropdown__link":"navbar__item navbar__link",t),isDropdownLink:n},o));return n?r.createElement("li",null,i):i}function le(e){let{className:t,isDropdownItem:n,...o}=e;return r.createElement("li",{className:"menu__list-item"},r.createElement(oe,(0,l.Z)({className:(0,a.Z)("menu__link",t)},o)))}function se(e){let{mobile:t=!1,position:n,...a}=e;const o=t?le:ie;return r.createElement(o,(0,l.Z)({},a,{activeClassName:a.activeClassName??(t?"menu__link--active":"navbar__link--active")}))}var ue=n(6043),ce=n(8596),de=n(2263);function fe(e,t){return e.some((e=>function(e,t){return!!(0,ce.Mg)(e.to,t)||!!(0,re.F)(e.activeBaseRegex,t)||!(!e.activeBasePath||!t.startsWith(e.activeBasePath))}(e,t)))}function pe(e){let{items:t,position:n,className:o,onClick:i,...s}=e;const u=(0,r.useRef)(null),[c,d]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{const e=e=>{u.current&&!u.current.contains(e.target)&&d(!1)};return document.addEventListener("mousedown",e),document.addEventListener("touchstart",e),document.addEventListener("focusin",e),()=>{document.removeEventListener("mousedown",e),document.removeEventListener("touchstart",e),document.removeEventListener("focusin",e)}}),[u]),r.createElement("div",{ref:u,className:(0,a.Z)("navbar__item","dropdown","dropdown--hoverable",{"dropdown--right":"right"===n,"dropdown--show":c})},r.createElement(oe,(0,l.Z)({"aria-haspopup":"true","aria-expanded":c,role:"button",href:s.to?void 0:"#",className:(0,a.Z)("navbar__link",o)},s,{onClick:s.to?void 0:e=>e.preventDefault(),onKeyDown:e=>{"Enter"===e.key&&(e.preventDefault(),d(!c))}}),s.children??s.label),r.createElement("ul",{className:"dropdown__menu"},t.map(((e,t)=>r.createElement(Ze,(0,l.Z)({isDropdownItem:!0,activeClassName:"dropdown__link--active"},e,{key:t}))))))}function me(e){let{items:t,className:n,position:o,onClick:i,...u}=e;const c=function(){const{siteConfig:{baseUrl:e}}=(0,de.Z)(),{pathname:t}=(0,s.TH)();return t.replace(e,"/")}(),d=fe(t,c),{collapsed:f,toggleCollapsed:p,setCollapsed:m}=(0,ue.u)({initialState:()=>!d});return(0,r.useEffect)((()=>{d&&m(!d)}),[c,d,m]),r.createElement("li",{className:(0,a.Z)("menu__list-item",{"menu__list-item--collapsed":f})},r.createElement(oe,(0,l.Z)({role:"button",className:(0,a.Z)("menu__link menu__link--sublist menu__link--sublist-caret",n)},u,{onClick:e=>{e.preventDefault(),p()}}),u.children??u.label),r.createElement(ue.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:f},t.map(((e,t)=>r.createElement(Ze,(0,l.Z)({mobile:!0,isDropdownItem:!0,onClick:i,activeClassName:"menu__link--active"},e,{key:t}))))))}function he(e){let{mobile:t=!1,...n}=e;const a=t?me:pe;return r.createElement(a,n)}var ge=n(4711);function be(e){let{width:t=20,height:n=20,...a}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:t,height:n,"aria-hidden":!0},a),r.createElement("path",{fill:"currentColor",d:"M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"}))}const ve="iconLanguage_nlXk";function ye(){return r.createElement("svg",{width:"15",height:"15",className:"DocSearch-Control-Key-Icon"},r.createElement("path",{d:"M4.505 4.496h2M5.505 5.496v5M8.216 4.496l.055 5.993M10 7.5c.333.333.5.667.5 1v2M12.326 4.5v5.996M8.384 4.496c1.674 0 2.116 0 2.116 1.5s-.442 1.5-2.116 1.5M3.205 9.303c-.09.448-.277 1.21-1.241 1.203C1 10.5.5 9.513.5 8V7c0-1.57.5-2.5 1.464-2.494.964.006 1.134.598 1.24 1.342M12.553 10.5h1.953",strokeWidth:"1.2",stroke:"currentColor",fill:"none",strokeLinecap:"square"}))}var we=n(830),ke=["translations"];function Ee(){return Ee=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},Ee.apply(this,arguments)}function Se(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==n)return;var r,a,o=[],i=!0,l=!1;try{for(n=n.call(e);!(i=(r=n.next()).done)&&(o.push(r.value),!t||o.length!==t);i=!0);}catch(s){l=!0,a=s}finally{try{i||null==n.return||n.return()}finally{if(l)throw a}}return o}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return xe(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n||"Set"===n)return Array.from(e);if("Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n))return xe(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function xe(e,t){(null==t||t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function Ce(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var _e="Ctrl";var Te=r.forwardRef((function(e,t){var n=e.translations,a=void 0===n?{}:n,o=Ce(e,ke),i=a.buttonText,l=void 0===i?"Search":i,s=a.buttonAriaLabel,u=void 0===s?"Search":s,c=Se((0,r.useState)(null),2),d=c[0],f=c[1];return(0,r.useEffect)((function(){"undefined"!=typeof navigator&&(/(Mac|iPhone|iPod|iPad)/i.test(navigator.platform)?f("\u2318"):f(_e))}),[]),r.createElement("button",Ee({type:"button",className:"DocSearch DocSearch-Button","aria-label":u},o,{ref:t}),r.createElement("span",{className:"DocSearch-Button-Container"},r.createElement(we.W,null),r.createElement("span",{className:"DocSearch-Button-Placeholder"},l)),r.createElement("span",{className:"DocSearch-Button-Keys"},null!==d&&r.createElement(r.Fragment,null,r.createElement("kbd",{className:"DocSearch-Button-Key"},d===_e?r.createElement(ye,null):d),r.createElement("kbd",{className:"DocSearch-Button-Key"},"K"))))})),Ae=n(5742),Le=n(6177),Re=n(239),Ne=n(3320);var Pe=n(3935);const Oe={button:{buttonText:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"}),buttonAriaLabel:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"})},modal:{searchBox:{resetButtonTitle:(0,u.I)({id:"theme.SearchModal.searchBox.resetButtonTitle",message:"Clear the query",description:"The label and ARIA label for search box reset button"}),resetButtonAriaLabel:(0,u.I)({id:"theme.SearchModal.searchBox.resetButtonTitle",message:"Clear the query",description:"The label and ARIA label for search box reset button"}),cancelButtonText:(0,u.I)({id:"theme.SearchModal.searchBox.cancelButtonText",message:"Cancel",description:"The label and ARIA label for search box cancel button"}),cancelButtonAriaLabel:(0,u.I)({id:"theme.SearchModal.searchBox.cancelButtonText",message:"Cancel",description:"The label and ARIA label for search box cancel button"})},startScreen:{recentSearchesTitle:(0,u.I)({id:"theme.SearchModal.startScreen.recentSearchesTitle",message:"Recent",description:"The title for recent searches"}),noRecentSearchesText:(0,u.I)({id:"theme.SearchModal.startScreen.noRecentSearchesText",message:"No recent searches",description:"The text when no recent searches"}),saveRecentSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.saveRecentSearchButtonTitle",message:"Save this search",description:"The label for save recent search button"}),removeRecentSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.removeRecentSearchButtonTitle",message:"Remove this search from history",description:"The label for remove recent search button"}),favoriteSearchesTitle:(0,u.I)({id:"theme.SearchModal.startScreen.favoriteSearchesTitle",message:"Favorite",description:"The title for favorite searches"}),removeFavoriteSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.removeFavoriteSearchButtonTitle",message:"Remove this search from favorites",description:"The label for remove favorite search button"})},errorScreen:{titleText:(0,u.I)({id:"theme.SearchModal.errorScreen.titleText",message:"Unable to fetch results",description:"The title for error screen of search modal"}),helpText:(0,u.I)({id:"theme.SearchModal.errorScreen.helpText",message:"You might want to check your network connection.",description:"The help text for error screen of search modal"})},footer:{selectText:(0,u.I)({id:"theme.SearchModal.footer.selectText",message:"to select",description:"The explanatory text of the action for the enter key"}),selectKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.selectKeyAriaLabel",message:"Enter key",description:"The ARIA label for the Enter key button that makes the selection"}),navigateText:(0,u.I)({id:"theme.SearchModal.footer.navigateText",message:"to navigate",description:"The explanatory text of the action for the Arrow up and Arrow down key"}),navigateUpKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.navigateUpKeyAriaLabel",message:"Arrow up",description:"The ARIA label for the Arrow up key button that makes the navigation"}),navigateDownKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.navigateDownKeyAriaLabel",message:"Arrow down",description:"The ARIA label for the Arrow down key button that makes the navigation"}),closeText:(0,u.I)({id:"theme.SearchModal.footer.closeText",message:"to close",description:"The explanatory text of the action for Escape key"}),closeKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.closeKeyAriaLabel",message:"Escape key",description:"The ARIA label for the Escape key button that close the modal"}),searchByText:(0,u.I)({id:"theme.SearchModal.footer.searchByText",message:"Search by",description:"The text explain that the search is making by Algolia"})},noResultsScreen:{noResultsText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.noResultsText",message:"No results for",description:"The text explains that there are no results for the following search"}),suggestedQueryText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.suggestedQueryText",message:"Try searching for",description:"The text for the suggested query when no results are found for the following search"}),reportMissingResultsText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.reportMissingResultsText",message:"Believe this query should return results?",description:"The text for the question where the user thinks there are missing results"}),reportMissingResultsLinkText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.reportMissingResultsLinkText",message:"Let us know.",description:"The text for the link to report missing results"})}},placeholder:(0,u.I)({id:"theme.SearchModal.placeholder",message:"Search docs",description:"The placeholder of the input of the DocSearch pop-up modal"})};let Ie=null;function De(e){let{hit:t,children:n}=e;return r.createElement(ee.Z,{to:t.url},n)}function Me(e){let{state:t,onClose:n}=e;const a=(0,Le.M)();return r.createElement(ee.Z,{to:a(t.query),onClick:n},r.createElement(u.Z,{id:"theme.SearchBar.seeAll",values:{count:t.context.nbHits}},"See all {count} results"))}function Fe(e){let{contextualSearch:t,externalUrlRegex:a,...o}=e;const{siteMetadata:i}=(0,de.Z)(),u=(0,Re.l)(),c=function(){const{locale:e,tags:t}=(0,Ne._q)();return[`language:${e}`,t.map((e=>`docusaurus_tag:${e}`))]}(),d=o.searchParameters?.facetFilters??[],f=t?function(e,t){const n=e=>"string"==typeof e?[e]:e;return[...n(e),...n(t)]}(c,d):d,p={...o.searchParameters,facetFilters:f},m=(0,s.k6)(),h=(0,r.useRef)(null),g=(0,r.useRef)(null),[b,v]=(0,r.useState)(!1),[y,w]=(0,r.useState)(void 0),k=(0,r.useCallback)((()=>Ie?Promise.resolve():Promise.all([n.e(6780).then(n.bind(n,6780)),Promise.all([n.e(532),n.e(6945)]).then(n.bind(n,6945)),Promise.all([n.e(532),n.e(8894)]).then(n.bind(n,8894))]).then((e=>{let[{DocSearchModal:t}]=e;Ie=t}))),[]),E=(0,r.useCallback)((()=>{k().then((()=>{h.current=document.createElement("div"),document.body.insertBefore(h.current,document.body.firstChild),v(!0)}))}),[k,v]),S=(0,r.useCallback)((()=>{v(!1),h.current?.remove()}),[v]),x=(0,r.useCallback)((e=>{k().then((()=>{v(!0),w(e.key)}))}),[k,v,w]),C=(0,r.useRef)({navigate(e){let{itemUrl:t}=e;(0,re.F)(a,t)?window.location.href=t:m.push(t)}}).current,_=(0,r.useRef)((e=>o.transformItems?o.transformItems(e):e.map((e=>({...e,url:u(e.url)}))))).current,T=(0,r.useMemo)((()=>e=>r.createElement(Me,(0,l.Z)({},e,{onClose:S}))),[S]),A=(0,r.useCallback)((e=>(e.addAlgoliaAgent("docusaurus",i.docusaurusVersion),e)),[i.docusaurusVersion]);return function(e){var t=e.isOpen,n=e.onOpen,a=e.onClose,o=e.onInput,i=e.searchButtonRef;r.useEffect((function(){function e(e){(27===e.keyCode&&t||"k"===e.key.toLowerCase()&&(e.metaKey||e.ctrlKey)||!function(e){var t=e.target,n=t.tagName;return t.isContentEditable||"INPUT"===n||"SELECT"===n||"TEXTAREA"===n}(e)&&"/"===e.key&&!t)&&(e.preventDefault(),t?a():document.body.classList.contains("DocSearch--active")||document.body.classList.contains("DocSearch--active")||n()),i&&i.current===document.activeElement&&o&&/[a-zA-Z0-9]/.test(String.fromCharCode(e.keyCode))&&o(e)}return window.addEventListener("keydown",e),function(){window.removeEventListener("keydown",e)}}),[t,n,a,o,i])}({isOpen:b,onOpen:E,onClose:S,onInput:x,searchButtonRef:g}),r.createElement(r.Fragment,null,r.createElement(Ae.Z,null,r.createElement("link",{rel:"preconnect",href:`https://${o.appId}-dsn.algolia.net`,crossOrigin:"anonymous"})),r.createElement(Te,{onTouchStart:k,onFocus:k,onMouseOver:k,onClick:E,ref:g,translations:Oe.button}),b&&Ie&&h.current&&(0,Pe.createPortal)(r.createElement(Ie,(0,l.Z)({onClose:S,initialScrollY:window.scrollY,initialQuery:y,navigator:C,transformItems:_,hitComponent:De,transformSearchClient:A},o.searchPagePath&&{resultsFooterComponent:T},o,{searchParameters:p,placeholder:Oe.placeholder,translations:Oe.modal})),h.current))}function Be(){const{siteConfig:e}=(0,de.Z)();return r.createElement(Fe,e.themeConfig.algolia)}const je="searchBox_ZlJk";function ze(e){let{children:t,className:n}=e;return r.createElement("div",{className:(0,a.Z)(n,je)},t)}var Ue=n(143),$e=n(3438);var qe=n(373);const He=e=>e.docs.find((t=>t.id===e.mainDocId));const Ge={default:se,localeDropdown:function(e){let{mobile:t,dropdownItemsBefore:n,dropdownItemsAfter:a,...o}=e;const{i18n:{currentLocale:i,locales:c,localeConfigs:d}}=(0,de.Z)(),f=(0,ge.l)(),{search:p,hash:m}=(0,s.TH)(),h=[...n,...c.map((e=>{const n=`${`pathname://${f.createUrl({locale:e,fullyQualified:!1})}`}${p}${m}`;return{label:d[e].label,lang:d[e].htmlLang,to:n,target:"_self",autoAddBaseUrl:!1,className:e===i?t?"menu__link--active":"dropdown__link--active":""}})),...a],g=t?(0,u.I)({message:"Languages",id:"theme.navbar.mobileLanguageDropdown.label",description:"The label for the mobile language switcher dropdown"}):d[i].label;return r.createElement(he,(0,l.Z)({},o,{mobile:t,label:r.createElement(r.Fragment,null,r.createElement(be,{className:ve}),g),items:h}))},search:function(e){let{mobile:t,className:n}=e;return t?null:r.createElement(ze,{className:n},r.createElement(Be,null))},dropdown:he,html:function(e){let{value:t,className:n,mobile:o=!1,isDropdownItem:i=!1}=e;const l=i?"li":"div";return r.createElement(l,{className:(0,a.Z)({navbar__item:!o&&!i,"menu__list-item":o},n),dangerouslySetInnerHTML:{__html:t}})},doc:function(e){let{docId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ue.Iw)(a),s=(0,$e.vY)(t,a);return null===s?null:r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.path===s.path||!!i?.sidebar&&i.sidebar===s.sidebar,label:n??s.id,to:s.path}))},docSidebar:function(e){let{sidebarId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ue.Iw)(a),s=(0,$e.oz)(t,a).link;if(!s)throw new Error(`DocSidebarNavbarItem: Sidebar with ID "${t}" doesn't have anything to be linked to.`);return r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.sidebar===t,label:n??s.label,to:s.path}))},docsVersion:function(e){let{label:t,to:n,docsPluginId:a,...o}=e;const i=(0,$e.lO)(a)[0],s=t??i.label,u=n??(e=>e.docs.find((t=>t.id===e.mainDocId)))(i).path;return r.createElement(se,(0,l.Z)({},o,{label:s,to:u}))},docsVersionDropdown:function(e){let{mobile:t,docsPluginId:n,dropdownActiveClassDisabled:a,dropdownItemsBefore:o,dropdownItemsAfter:i,...c}=e;const{search:d,hash:f}=(0,s.TH)(),p=(0,Ue.Iw)(n),m=(0,Ue.gB)(n),{savePreferredVersionName:h}=(0,qe.J)(n),g=[...o,...m.map((e=>{const t=p.alternateDocVersions[e.name]??He(e);return{label:e.label,to:`${t.path}${d}${f}`,isActive:()=>e===p.activeVersion,onClick:()=>h(e.name)}})),...i],b=(0,$e.lO)(n)[0],v=t&&g.length>1?(0,u.I)({id:"theme.navbar.mobileVersionsDropdown.label",message:"Versions",description:"The label for the navbar versions dropdown on mobile view"}):b.label,y=t&&g.length>1?void 0:He(b).path;return g.length<=1?r.createElement(se,(0,l.Z)({},c,{mobile:t,label:v,to:y,isActive:a?()=>!1:void 0})):r.createElement(he,(0,l.Z)({},c,{mobile:t,label:v,to:y,items:g,isActive:a?()=>!1:void 0}))}};function Ze(e){let{type:t,...n}=e;const a=function(e,t){return e&&"default"!==e?e:"items"in t?"dropdown":"default"}(t,n),o=Ge[a];if(!o)throw new Error(`No NavbarItem component found for type "${t}".`);return r.createElement(o,n)}function Ve(){const e=(0,P.e)(),t=(0,w.L)().navbar.items;return r.createElement("ul",{className:"menu__list"},t.map(((t,n)=>r.createElement(Ze,(0,l.Z)({mobile:!0},t,{onClick:()=>e.toggle(),key:n})))))}function We(e){return r.createElement("button",(0,l.Z)({},e,{type:"button",className:"clean-btn navbar-sidebar__back"}),r.createElement(u.Z,{id:"theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel",description:"The label of the back button to return to main menu, inside the mobile navbar sidebar secondary menu (notably used to display the docs sidebar)"},"\u2190 Back to main menu"))}function Ke(){const e=0===(0,w.L)().navbar.items.length,t=j();return r.createElement(r.Fragment,null,!e&&r.createElement(We,{onClick:()=>t.hide()}),t.content)}function Ye(){const e=(0,P.e)();var t;return void 0===(t=e.shown)&&(t=!0),(0,r.useEffect)((()=>(document.body.style.overflow=t?"hidden":"visible",()=>{document.body.style.overflow="visible"})),[t]),e.shouldRender?r.createElement(z,{header:r.createElement(J,null),primaryMenu:r.createElement(Ve,null),secondaryMenu:r.createElement(Ke,null)}):null}const Qe="navbarHideable_m1mJ",Xe="navbarHidden_jGov";function Je(e){return r.createElement("div",(0,l.Z)({role:"presentation"},e,{className:(0,a.Z)("navbar-sidebar__backdrop",e.className)}))}function et(e){let{children:t}=e;const{navbar:{hideOnScroll:n,style:o}}=(0,w.L)(),i=(0,P.e)(),{navbarRef:l,isNavbarVisible:s}=function(e){const[t,n]=(0,r.useState)(e),a=(0,r.useRef)(!1),o=(0,r.useRef)(0),i=(0,r.useCallback)((e=>{null!==e&&(o.current=e.getBoundingClientRect().height)}),[]);return(0,O.RF)(((t,r)=>{let{scrollY:i}=t;if(!e)return;if(i<o.current)return void n(!0);if(a.current)return void(a.current=!1);const l=r?.scrollY,s=document.documentElement.scrollHeight-o.current,u=window.innerHeight;l&&i>=l?n(!1):i+u<s&&n(!0)})),(0,c.S)((t=>{if(!e)return;const r=t.location.hash;if(r?document.getElementById(r.substring(1)):void 0)return a.current=!0,void n(!1);n(!0)})),{navbarRef:i,isNavbarVisible:t}}(n);return r.createElement("nav",{ref:l,"aria-label":(0,u.I)({id:"theme.NavBar.navAriaLabel",message:"Main",description:"The ARIA label for the main navigation"}),className:(0,a.Z)("navbar","navbar--fixed-top",n&&[Qe,!s&&Xe],{"navbar--dark":"dark"===o,"navbar--primary":"primary"===o,"navbar-sidebar--show":i.shown})},t,r.createElement(Je,{onClick:i.toggle}),r.createElement(Ye,null))}var tt=n(8780);const nt="errorBoundaryError_a6uf";function rt(e){return r.createElement("button",(0,l.Z)({type:"button"},e),r.createElement(u.Z,{id:"theme.ErrorPageContent.tryAgain",description:"The label of the button to try again rendering when the React error boundary captures an error"},"Try again"))}function at(e){let{error:t}=e;const n=(0,tt.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{className:nt},n)}class ot extends r.Component{componentDidCatch(e,t){throw this.props.onError(e,t)}render(){return this.props.children}}function it(e){let{width:t=30,height:n=30,className:a,...o}=e;return r.createElement("svg",(0,l.Z)({className:a,width:t,height:n,viewBox:"0 0 30 30","aria-hidden":"true"},o),r.createElement("path",{stroke:"currentColor",strokeLinecap:"round",strokeMiterlimit:"10",strokeWidth:"2",d:"M4 7h22M4 15h22M4 23h22"}))}function lt(){const{toggle:e,shown:t}=(0,P.e)();return r.createElement("button",{onClick:e,"aria-label":(0,u.I)({id:"theme.docs.sidebar.toggleSidebarButtonAriaLabel",message:"Toggle navigation bar",description:"The ARIA label for hamburger menu button of mobile navigation"}),"aria-expanded":t,className:"navbar__toggle clean-btn",type:"button"},r.createElement(it,null))}const st="colorModeToggle_DEke";function ut(e){let{items:t}=e;return r.createElement(r.Fragment,null,t.map(((e,t)=>r.createElement(ot,{key:t,onError:t=>new Error(`A theme navbar item failed to render.\nPlease double-check the following navbar item (themeConfig.navbar.items) of your Docusaurus config:\n${JSON.stringify(e,null,2)}`,{cause:t})},r.createElement(Ze,e)))))}function ct(e){let{left:t,right:n}=e;return r.createElement("div",{className:"navbar__inner"},r.createElement("div",{className:"navbar__items"},t),r.createElement("div",{className:"navbar__items navbar__items--right"},n))}function dt(){const e=(0,P.e)(),t=(0,w.L)().navbar.items,[n,a]=function(e){function t(e){return"left"===(e.position??"right")}return[e.filter(t),e.filter((e=>!t(e)))]}(t),o=t.find((e=>"search"===e.type));return r.createElement(ct,{left:r.createElement(r.Fragment,null,!e.disabled&&r.createElement(lt,null),r.createElement(Q,null),r.createElement(ut,{items:n})),right:r.createElement(r.Fragment,null,r.createElement(ut,{items:a}),r.createElement(K,{className:st}),!o&&r.createElement(ze,null,r.createElement(Be,null)))})}function ft(){return r.createElement(et,null,r.createElement(dt,null))}function pt(e){let{item:t}=e;const{to:n,href:a,label:o,prependBaseUrlToHref:i,...s}=t,u=(0,te.Z)(n),c=(0,te.Z)(a,{forcePrependBaseUrl:!0});return r.createElement(ee.Z,(0,l.Z)({className:"footer__link-item"},a?{href:i?c:a}:{to:u},s),o,a&&!(0,ne.Z)(a)&&r.createElement(ae.Z,null))}function mt(e){let{item:t}=e;return t.html?r.createElement("li",{className:"footer__item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement("li",{key:t.href??t.to,className:"footer__item"},r.createElement(pt,{item:t}))}function ht(e){let{column:t}=e;return r.createElement("div",{className:"col footer__col"},r.createElement("div",{className:"footer__title"},t.title),r.createElement("ul",{className:"footer__items clean-list"},t.items.map(((e,t)=>r.createElement(mt,{key:t,item:e})))))}function gt(e){let{columns:t}=e;return r.createElement("div",{className:"row footer__links"},t.map(((e,t)=>r.createElement(ht,{key:t,column:e}))))}function bt(){return r.createElement("span",{className:"footer__link-separator"},"\xb7")}function vt(e){let{item:t}=e;return t.html?r.createElement("span",{className:"footer__link-item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement(pt,{item:t})}function yt(e){let{links:t}=e;return r.createElement("div",{className:"footer__links text--center"},r.createElement("div",{className:"footer__links"},t.map(((e,n)=>r.createElement(r.Fragment,{key:n},r.createElement(vt,{item:e}),t.length!==n+1&&r.createElement(bt,null))))))}function wt(e){let{links:t}=e;return function(e){return"title"in e[0]}(t)?r.createElement(gt,{columns:t}):r.createElement(yt,{links:t})}var kt=n(941);const Et="footerLogoLink_BH7S";function St(e){let{logo:t}=e;const{withBaseUrl:n}=(0,te.C)(),o={light:n(t.src),dark:n(t.srcDark??t.src)};return r.createElement(kt.Z,{className:(0,a.Z)("footer__logo",t.className),alt:t.alt,sources:o,width:t.width,height:t.height,style:t.style})}function xt(e){let{logo:t}=e;return t.href?r.createElement(ee.Z,{href:t.href,className:Et,target:t.target},r.createElement(St,{logo:t})):r.createElement(St,{logo:t})}function Ct(e){let{copyright:t}=e;return r.createElement("div",{className:"footer__copyright",dangerouslySetInnerHTML:{__html:t}})}function _t(e){let{style:t,links:n,logo:o,copyright:i}=e;return r.createElement("footer",{className:(0,a.Z)("footer",{"footer--dark":"dark"===t})},r.createElement("div",{className:"container container-fluid"},n,(o||i)&&r.createElement("div",{className:"footer__bottom text--center"},o&&r.createElement("div",{className:"margin-bottom--sm"},o),i)))}function Tt(){const{footer:e}=(0,w.L)();if(!e)return null;const{copyright:t,links:n,logo:a,style:o}=e;return r.createElement(_t,{style:o,links:n&&n.length>0&&r.createElement(wt,{links:n}),logo:a&&r.createElement(xt,{logo:a}),copyright:t&&r.createElement(Ct,{copyright:t})})}const At=r.memo(Tt),Lt=(0,I.Qc)([U.S,k.pl,O.OC,qe.L5,i.VC,function(e){let{children:t}=e;return r.createElement(D.n2,null,r.createElement(P.M,null,r.createElement(F,null,t)))}]);function Rt(e){let{children:t}=e;return r.createElement(Lt,null,t)}function Nt(e){let{error:t,tryAgain:n}=e;return r.createElement("main",{className:"container margin-vert--xl"},r.createElement("div",{className:"row"},r.createElement("div",{className:"col col--6 col--offset-3"},r.createElement("h1",{className:"hero__title"},r.createElement(u.Z,{id:"theme.ErrorPageContent.title",description:"The title of the fallback page when the page crashed"},"This page crashed.")),r.createElement("div",{className:"margin-vert--lg"},r.createElement(rt,{onClick:n,className:"button button--primary shadow--lw"})),r.createElement("hr",null),r.createElement("div",{className:"margin-vert--md"},r.createElement(at,{error:t})))))}const Pt="mainWrapper_z2l0";function Ot(e){const{children:t,noFooter:n,wrapperClassName:l,title:s,description:u}=e;return(0,b.t)(),r.createElement(Rt,null,r.createElement(i.d,{title:s,description:u}),r.createElement(y,null),r.createElement(N,null),r.createElement(ft,null),r.createElement("div",{id:d,className:(0,a.Z)(g.k.wrapper.main,Pt,l)},r.createElement(o.Z,{fallback:e=>r.createElement(Nt,e)},t)),!n&&r.createElement(At,null))}},1327:(e,t,n)=>{"use strict";n.d(t,{Z:()=>d});var r=n(3117),a=n(7294),o=n(9960),i=n(4996),l=n(2263),s=n(6668),u=n(941);function c(e){let{logo:t,alt:n,imageClassName:r}=e;const o={light:(0,i.Z)(t.src),dark:(0,i.Z)(t.srcDark||t.src)},l=a.createElement(u.Z,{className:t.className,sources:o,height:t.height,width:t.width,alt:n,style:t.style});return r?a.createElement("div",{className:r},l):l}function d(e){const{siteConfig:{title:t}}=(0,l.Z)(),{navbar:{title:n,logo:u}}=(0,s.L)(),{imageClassName:d,titleClassName:f,...p}=e,m=(0,i.Z)(u?.href||"/"),h=n?"":t,g=u?.alt??h;return a.createElement(o.Z,(0,r.Z)({to:m},p,u?.target&&{target:u.target}),u&&a.createElement(c,{logo:u,alt:g,imageClassName:d}),null!=n&&a.createElement("b",{className:f},n))}},197:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(5742);function o(e){let{locale:t,version:n,tag:o}=e;const i=t;return r.createElement(a.Z,null,t&&r.createElement("meta",{name:"docusaurus_locale",content:t}),n&&r.createElement("meta",{name:"docusaurus_version",content:n}),o&&r.createElement("meta",{name:"docusaurus_tag",content:o}),i&&r.createElement("meta",{name:"docsearch:language",content:i}),n&&r.createElement("meta",{name:"docsearch:version",content:n}),o&&r.createElement("meta",{name:"docsearch:docusaurus_tag",content:o}))}},941:(e,t,n)=>{"use strict";n.d(t,{Z:()=>u});var r=n(3117),a=n(7294),o=n(6010),i=n(2389),l=n(2949);const s={themedImage:"themedImage_ToTc","themedImage--light":"themedImage--light_HNdA","themedImage--dark":"themedImage--dark_i4oU"};function u(e){const t=(0,i.Z)(),{colorMode:n}=(0,l.I)(),{sources:u,className:c,alt:d,...f}=e,p=t?"dark"===n?["dark"]:["light"]:["light","dark"];return a.createElement(a.Fragment,null,p.map((e=>a.createElement("img",(0,r.Z)({key:e,src:u[e],alt:d,className:(0,o.Z)(s.themedImage,s[`themedImage--${e}`],c)},f)))))}},6043:(e,t,n)=>{"use strict";n.d(t,{u:()=>l,z:()=>h});var r=n(3117),a=n(7294),o=n(412),i=n(1442);function l(e){let{initialState:t}=e;const[n,r]=(0,a.useState)(t??!1),o=(0,a.useCallback)((()=>{r((e=>!e))}),[]);return{collapsed:n,setCollapsed:r,toggleCollapsed:o}}const s={display:"none",overflow:"hidden",height:"0px"},u={display:"block",overflow:"visible",height:"auto"};function c(e,t){const n=t?s:u;e.style.display=n.display,e.style.overflow=n.overflow,e.style.height=n.height}function d(e){let{collapsibleRef:t,collapsed:n,animation:r}=e;const o=(0,a.useRef)(!1);(0,a.useEffect)((()=>{const e=t.current;function a(){const t=e.scrollHeight,n=r?.duration??function(e){if((0,i.n)())return 1;const t=e/36;return Math.round(10*(4+15*t**.25+t/5))}(t);return{transition:`height ${n}ms ${r?.easing??"ease-in-out"}`,height:`${t}px`}}function l(){const t=a();e.style.transition=t.transition,e.style.height=t.height}if(!o.current)return c(e,n),void(o.current=!0);return e.style.willChange="height",function(){const t=requestAnimationFrame((()=>{n?(l(),requestAnimationFrame((()=>{e.style.height=s.height,e.style.overflow=s.overflow}))):(e.style.display="block",requestAnimationFrame((()=>{l()})))}));return()=>cancelAnimationFrame(t)}()}),[t,n,r])}function f(e){if(!o.Z.canUseDOM)return e?s:u}function p(e){let{as:t="div",collapsed:n,children:r,animation:o,onCollapseTransitionEnd:i,className:l,disableSSRStyle:s}=e;const u=(0,a.useRef)(null);return d({collapsibleRef:u,collapsed:n,animation:o}),a.createElement(t,{ref:u,style:s?void 0:f(n),onTransitionEnd:e=>{"height"===e.propertyName&&(c(u.current,n),i?.(n))},className:l},r)}function m(e){let{collapsed:t,...n}=e;const[o,i]=(0,a.useState)(!t),[l,s]=(0,a.useState)(t);return(0,a.useLayoutEffect)((()=>{t||i(!0)}),[t]),(0,a.useLayoutEffect)((()=>{o&&s(t)}),[o,t]),o?a.createElement(p,(0,r.Z)({},n,{collapsed:l})):null}function h(e){let{lazy:t,...n}=e;const r=t?m:p;return a.createElement(r,n)}},9689:(e,t,n)=>{"use strict";n.d(t,{nT:()=>m,pl:()=>p});var r=n(7294),a=n(2389),o=n(12),i=n(902),l=n(6668);const s=(0,o.WA)("docusaurus.announcement.dismiss"),u=(0,o.WA)("docusaurus.announcement.id"),c=()=>"true"===s.get(),d=e=>s.set(String(e)),f=r.createContext(null);function p(e){let{children:t}=e;const n=function(){const{announcementBar:e}=(0,l.L)(),t=(0,a.Z)(),[n,o]=(0,r.useState)((()=>!!t&&c()));(0,r.useEffect)((()=>{o(c())}),[]);const i=(0,r.useCallback)((()=>{d(!0),o(!0)}),[]);return(0,r.useEffect)((()=>{if(!e)return;const{id:t}=e;let n=u.get();"annoucement-bar"===n&&(n="announcement-bar");const r=t!==n;u.set(t),r&&d(!1),!r&&c()||o(!1)}),[e]),(0,r.useMemo)((()=>({isActive:!!e&&!n,close:i})),[e,n,i])}();return r.createElement(f.Provider,{value:n},t)}function m(){const e=(0,r.useContext)(f);if(!e)throw new i.i6("AnnouncementBarProvider");return e}},2949:(e,t,n)=>{"use strict";n.d(t,{I:()=>g,S:()=>h});var r=n(7294),a=n(412),o=n(902),i=n(12),l=n(6668);const s=r.createContext(void 0),u="theme",c=(0,i.WA)(u),d="light",f="dark",p=e=>e===f?f:d;function m(){const{colorMode:{defaultMode:e,disableSwitch:t,respectPrefersColorScheme:n}}=(0,l.L)(),[o,i]=(0,r.useState)((e=>a.Z.canUseDOM?p(document.documentElement.getAttribute("data-theme")):p(e))(e));(0,r.useEffect)((()=>{t&&c.del()}),[t]);const s=(0,r.useCallback)((function(t,r){void 0===r&&(r={});const{persist:a=!0}=r;t?(i(t),a&&(e=>{c.set(p(e))})(t)):(i(n?window.matchMedia("(prefers-color-scheme: dark)").matches?f:d:e),c.del())}),[n,e]);(0,r.useEffect)((()=>{document.documentElement.setAttribute("data-theme",p(o))}),[o]),(0,r.useEffect)((()=>{if(t)return;const e=e=>{if(e.key!==u)return;const t=c.get();null!==t&&s(p(t))};return window.addEventListener("storage",e),()=>window.removeEventListener("storage",e)}),[t,s]);const m=(0,r.useRef)(!1);return(0,r.useEffect)((()=>{if(t&&!n)return;const e=window.matchMedia("(prefers-color-scheme: dark)"),r=()=>{window.matchMedia("print").matches||m.current?m.current=window.matchMedia("print").matches:s(null)};return e.addListener(r),()=>e.removeListener(r)}),[s,t,n]),(0,r.useMemo)((()=>({colorMode:o,setColorMode:s,get isDarkTheme(){return o===f},setLightTheme(){s(d)},setDarkTheme(){s(f)}})),[o,s])}function h(e){let{children:t}=e;const n=m();return r.createElement(s.Provider,{value:n},t)}function g(){const e=(0,r.useContext)(s);if(null==e)throw new o.i6("ColorModeProvider","Please see https://docusaurus.io/docs/api/themes/configuration#use-color-mode.");return e}},373:(e,t,n)=>{"use strict";n.d(t,{J:()=>y,L5:()=>b,Oh:()=>w});var r=n(7294),a=n(143),o=n(9935),i=n(6668),l=n(3438),s=n(902),u=n(12);const c=e=>`docs-preferred-version-${e}`,d=(e,t,n)=>{(0,u.WA)(c(e),{persistence:t}).set(n)},f=(e,t)=>(0,u.WA)(c(e),{persistence:t}).get(),p=(e,t)=>{(0,u.WA)(c(e),{persistence:t}).del()};const m=r.createContext(null);function h(){const e=(0,a._r)(),t=(0,i.L)().docs.versionPersistence,n=(0,r.useMemo)((()=>Object.keys(e)),[e]),[o,l]=(0,r.useState)((()=>(e=>Object.fromEntries(e.map((e=>[e,{preferredVersionName:null}]))))(n)));(0,r.useEffect)((()=>{l(function(e){let{pluginIds:t,versionPersistence:n,allDocsData:r}=e;function a(e){const t=f(e,n);return r[e].versions.some((e=>e.name===t))?{preferredVersionName:t}:(p(e,n),{preferredVersionName:null})}return Object.fromEntries(t.map((e=>[e,a(e)])))}({allDocsData:e,versionPersistence:t,pluginIds:n}))}),[e,t,n]);return[o,(0,r.useMemo)((()=>({savePreferredVersion:function(e,n){d(e,t,n),l((t=>({...t,[e]:{preferredVersionName:n}})))}})),[t])]}function g(e){let{children:t}=e;const n=h();return r.createElement(m.Provider,{value:n},t)}function b(e){let{children:t}=e;return l.cE?r.createElement(g,null,t):r.createElement(r.Fragment,null,t)}function v(){const e=(0,r.useContext)(m);if(!e)throw new s.i6("DocsPreferredVersionContextProvider");return e}function y(e){void 0===e&&(e=o.m);const t=(0,a.zh)(e),[n,i]=v(),{preferredVersionName:l}=n[e];return{preferredVersion:t.versions.find((e=>e.name===l))??null,savePreferredVersionName:(0,r.useCallback)((t=>{i.savePreferredVersion(e,t)}),[i,e])}}function w(){const e=(0,a._r)(),[t]=v();function n(n){const r=e[n],{preferredVersionName:a}=t[n];return r.versions.find((e=>e.name===a))??null}const r=Object.keys(e);return Object.fromEntries(r.map((e=>[e,n(e)])))}},1116:(e,t,n)=>{"use strict";n.d(t,{V:()=>s,b:()=>l});var r=n(7294),a=n(902);const o=Symbol("EmptyContext"),i=r.createContext(o);function l(e){let{children:t,name:n,items:a}=e;const o=(0,r.useMemo)((()=>n&&a?{name:n,items:a}:null),[n,a]);return r.createElement(i.Provider,{value:o},t)}function s(){const e=(0,r.useContext)(i);if(e===o)throw new a.i6("DocsSidebarProvider");return e}},3163:(e,t,n)=>{"use strict";n.d(t,{M:()=>d,e:()=>f});var r=n(7294),a=n(3102),o=n(7524),i=n(1980),l=n(6668),s=n(902);const u=r.createContext(void 0);function c(){const e=function(){const e=(0,a.HY)(),{items:t}=(0,l.L)().navbar;return 0===t.length&&!e.component}(),t=(0,o.i)(),n=!e&&"mobile"===t,[s,u]=(0,r.useState)(!1);(0,i.Rb)((()=>{if(s)return u(!1),!1}));const c=(0,r.useCallback)((()=>{u((e=>!e))}),[]);return(0,r.useEffect)((()=>{"desktop"===t&&u(!1)}),[t]),(0,r.useMemo)((()=>({disabled:e,shouldRender:n,toggle:c,shown:s})),[e,n,c,s])}function d(e){let{children:t}=e;const n=c();return r.createElement(u.Provider,{value:n},t)}function f(){const e=r.useContext(u);if(void 0===e)throw new s.i6("NavbarMobileSidebarProvider");return e}},3102:(e,t,n)=>{"use strict";n.d(t,{HY:()=>l,Zo:()=>s,n2:()=>i});var r=n(7294),a=n(902);const o=r.createContext(null);function i(e){let{children:t}=e;const n=(0,r.useState)({component:null,props:null});return r.createElement(o.Provider,{value:n},t)}function l(){const e=(0,r.useContext)(o);if(!e)throw new a.i6("NavbarSecondaryMenuContentProvider");return e[0]}function s(e){let{component:t,props:n}=e;const i=(0,r.useContext)(o);if(!i)throw new a.i6("NavbarSecondaryMenuContentProvider");const[,l]=i,s=(0,a.Ql)(n);return(0,r.useEffect)((()=>{l({component:t,props:s})}),[l,t,s]),(0,r.useEffect)((()=>()=>l({component:null,props:null})),[l]),null}},9727:(e,t,n)=>{"use strict";n.d(t,{h:()=>a,t:()=>o});var r=n(7294);const a="navigation-with-keyboard";function o(){(0,r.useEffect)((()=>{function e(e){"keydown"===e.type&&"Tab"===e.key&&document.body.classList.add(a),"mousedown"===e.type&&document.body.classList.remove(a)}return document.addEventListener("keydown",e),document.addEventListener("mousedown",e),()=>{document.body.classList.remove(a),document.removeEventListener("keydown",e),document.removeEventListener("mousedown",e)}}),[])}},6177:(e,t,n)=>{"use strict";n.d(t,{K:()=>i,M:()=>l});var r=n(7294),a=n(2263),o=n(1980);function i(){return(0,o.Nc)("q")}function l(){const{siteConfig:{baseUrl:e,themeConfig:t}}=(0,a.Z)(),{algolia:{searchPagePath:n}}=t;return(0,r.useCallback)((t=>`${e}${n}?q=${encodeURIComponent(t)}`),[e,n])}},7524:(e,t,n)=>{"use strict";n.d(t,{i:()=>u});var r=n(7294),a=n(412);const o="desktop",i="mobile",l="ssr";function s(){return a.Z.canUseDOM?window.innerWidth>996?o:i:l}function u(){const[e,t]=(0,r.useState)((()=>s()));return(0,r.useEffect)((()=>{function e(){t(s())}return window.addEventListener("resize",e),()=>{window.removeEventListener("resize",e),clearTimeout(undefined)}}),[]),e}},5281:(e,t,n)=>{"use strict";n.d(t,{k:()=>r});const r={page:{blogListPage:"blog-list-page",blogPostPage:"blog-post-page",blogTagsListPage:"blog-tags-list-page",blogTagPostListPage:"blog-tags-post-list-page",docsDocPage:"docs-doc-page",docsTagsListPage:"docs-tags-list-page",docsTagDocListPage:"docs-tags-doc-list-page",mdxPage:"mdx-page"},wrapper:{main:"main-wrapper",blogPages:"blog-wrapper",docsPages:"docs-wrapper",mdxPages:"mdx-wrapper"},common:{editThisPage:"theme-edit-this-page",lastUpdated:"theme-last-updated",backToTopButton:"theme-back-to-top-button",codeBlock:"theme-code-block",admonition:"theme-admonition",admonitionType:e=>`theme-admonition-${e}`},layout:{},docs:{docVersionBanner:"theme-doc-version-banner",docVersionBadge:"theme-doc-version-badge",docBreadcrumbs:"theme-doc-breadcrumbs",docMarkdown:"theme-doc-markdown",docTocMobile:"theme-doc-toc-mobile",docTocDesktop:"theme-doc-toc-desktop",docFooter:"theme-doc-footer",docFooterTagsRow:"theme-doc-footer-tags-row",docFooterEditMetaRow:"theme-doc-footer-edit-meta-row",docSidebarContainer:"theme-doc-sidebar-container",docSidebarMenu:"theme-doc-sidebar-menu",docSidebarItemCategory:"theme-doc-sidebar-item-category",docSidebarItemLink:"theme-doc-sidebar-item-link",docSidebarItemCategoryLevel:e=>`theme-doc-sidebar-item-category-level-${e}`,docSidebarItemLinkLevel:e=>`theme-doc-sidebar-item-link-level-${e}`},blog:{}}},1442:(e,t,n)=>{"use strict";function r(){return window.matchMedia("(prefers-reduced-motion: reduce)").matches}n.d(t,{n:()=>r})},3438:(e,t,n)=>{"use strict";n.d(t,{Wl:()=>f,_F:()=>m,cE:()=>d,hI:()=>w,lO:()=>b,oz:()=>v,s1:()=>g,vY:()=>y});var r=n(7294),a=n(6775),o=n(8790),i=n(143),l=n(373),s=n(1116),u=n(7392),c=n(8596);const d=!!i._r;function f(e){if(e.href)return e.href;for(const t of e.items){if("link"===t.type)return t.href;if("category"===t.type){const e=f(t);if(e)return e}}}const p=(e,t)=>void 0!==e&&(0,c.Mg)(e,t);function m(e,t){return"link"===e.type?p(e.href,t):"category"===e.type&&(p(e.href,t)||((e,t)=>e.some((e=>m(e,t))))(e.items,t))}function h(e){let{sidebarItems:t,pathname:n,onlyCategories:r=!1}=e;const a=[];return function e(t){for(const o of t)if("category"===o.type&&((0,c.Mg)(o.href,n)||e(o.items))||"link"===o.type&&(0,c.Mg)(o.href,n)){return r&&"category"!==o.type||a.unshift(o),!0}return!1}(t),a}function g(){const e=(0,s.V)(),{pathname:t}=(0,a.TH)(),n=(0,i.gA)()?.pluginData.breadcrumbs;return!1!==n&&e?h({sidebarItems:e.items,pathname:t}):null}function b(e){const{activeVersion:t}=(0,i.Iw)(e),{preferredVersion:n}=(0,l.J)(e),a=(0,i.yW)(e);return(0,r.useMemo)((()=>(0,u.j)([t,n,a].filter(Boolean))),[t,n,a])}function v(e,t){const n=b(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.sidebars?Object.entries(e.sidebars):[])),r=t.find((t=>t[0]===e));if(!r)throw new Error(`Can't find any sidebar with id "${e}" in version${n.length>1?"s":""} ${n.map((e=>e.name)).join(", ")}".\nAvailable sidebar ids are:\n- ${t.map((e=>e[0])).join("\n- ")}`);return r[1]}),[e,n])}function y(e,t){const n=b(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.docs)),r=t.find((t=>t.id===e));if(!r){if(n.flatMap((e=>e.draftIds)).includes(e))return null;throw new Error(`Couldn't find any doc with id "${e}" in version${n.length>1?"s":""} "${n.map((e=>e.name)).join(", ")}".\nAvailable doc ids are:\n- ${(0,u.j)(t.map((e=>e.id))).join("\n- ")}`)}return r}),[e,n])}function w(e){let{route:t,versionMetadata:n}=e;const r=(0,a.TH)(),i=t.routes,l=i.find((e=>(0,a.LX)(r.pathname,e)));if(!l)return null;const s=l.sidebar,u=s?n.docsSidebars[s]:void 0;return{docElement:(0,o.H)(i),sidebarName:s,sidebarItems:u}}},2128:(e,t,n)=>{"use strict";n.d(t,{p:()=>a});var r=n(2263);function a(e){const{siteConfig:t}=(0,r.Z)(),{title:n,titleDelimiter:a}=t;return e?.trim().length?`${e.trim()} ${a} ${n}`:n}},1980:(e,t,n)=>{"use strict";n.d(t,{Nc:()=>u,Rb:()=>l,_X:()=>s});var r=n(7294),a=n(6775),o=n(1688),i=n(902);function l(e){!function(e){const t=(0,a.k6)(),n=(0,i.zX)(e);(0,r.useEffect)((()=>t.block(((e,t)=>n(e,t)))),[t,n])}(((t,n)=>{if("POP"===n)return e(t,n)}))}function s(e){return function(e){const t=(0,a.k6)();return(0,o.useSyncExternalStore)(t.listen,(()=>e(t)),(()=>e(t)))}((t=>null===e?null:new URLSearchParams(t.location.search).get(e)))}function u(e){const t=s(e)??"",n=function(){const e=(0,a.k6)();return(0,r.useCallback)(((t,n,r)=>{const a=new URLSearchParams(e.location.search);n?a.set(t,n):a.delete(t),(r?.push?e.push:e.replace)({search:a.toString()})}),[e])}();return[t,(0,r.useCallback)(((t,r)=>{n(e,t,r)}),[n,e])]}},7392:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=(e,t)=>e===t),e.filter(((n,r)=>e.findIndex((e=>t(e,n)))!==r))}function a(e){return Array.from(new Set(e))}n.d(t,{j:()=>a,l:()=>r})},833:(e,t,n)=>{"use strict";n.d(t,{FG:()=>f,d:()=>c,VC:()=>p});var r=n(7294),a=n(6010),o=n(5742),i=n(226);function l(){const e=r.useContext(i._);if(!e)throw new Error("Unexpected: no Docusaurus route context found");return e}var s=n(4996),u=n(2128);function c(e){let{title:t,description:n,keywords:a,image:i,children:l}=e;const c=(0,u.p)(t),{withBaseUrl:d}=(0,s.C)(),f=i?d(i,{absolute:!0}):void 0;return r.createElement(o.Z,null,t&&r.createElement("title",null,c),t&&r.createElement("meta",{property:"og:title",content:c}),n&&r.createElement("meta",{name:"description",content:n}),n&&r.createElement("meta",{property:"og:description",content:n}),a&&r.createElement("meta",{name:"keywords",content:Array.isArray(a)?a.join(","):a}),f&&r.createElement("meta",{property:"og:image",content:f}),f&&r.createElement("meta",{name:"twitter:image",content:f}),l)}const d=r.createContext(void 0);function f(e){let{className:t,children:n}=e;const i=r.useContext(d),l=(0,a.Z)(i,t);return r.createElement(d.Provider,{value:l},r.createElement(o.Z,null,r.createElement("html",{className:l})),n)}function p(e){let{children:t}=e;const n=l(),o=`plugin-${n.plugin.name.replace(/docusaurus-(?:plugin|theme)-(?:content-)?/gi,"")}`;const i=`plugin-id-${n.plugin.id}`;return r.createElement(f,{className:(0,a.Z)(o,i)},t)}},902:(e,t,n)=>{"use strict";n.d(t,{D9:()=>i,Qc:()=>u,Ql:()=>s,i6:()=>l,zX:()=>o});var r=n(7294);const a=n(412).Z.canUseDOM?r.useLayoutEffect:r.useEffect;function o(e){const t=(0,r.useRef)(e);return a((()=>{t.current=e}),[e]),(0,r.useCallback)((function(){return t.current(...arguments)}),[])}function i(e){const t=(0,r.useRef)();return a((()=>{t.current=e})),t.current}class l extends Error{constructor(e,t){super(),this.name="ReactContextError",this.message=`Hook ${this.stack?.split("\n")[1]?.match(/at (?:\w+\.)?(?<name>\w+)/)?.groups.name??""} is called outside the <${e}>. ${t??""}`}}function s(e){const t=Object.entries(e);return t.sort(((e,t)=>e[0].localeCompare(t[0]))),(0,r.useMemo)((()=>e),t.flat())}function u(e){return t=>{let{children:n}=t;return r.createElement(r.Fragment,null,e.reduceRight(((e,t)=>r.createElement(t,null,e)),n))}}},8022:(e,t,n)=>{"use strict";function r(e,t){return void 0!==e&&void 0!==t&&new RegExp(e,"gi").test(t)}n.d(t,{F:()=>r})},8596:(e,t,n)=>{"use strict";n.d(t,{Mg:()=>i,Ns:()=>l});var r=n(7294),a=n(723),o=n(2263);function i(e,t){const n=e=>(!e||e.endsWith("/")?e:`${e}/`)?.toLowerCase();return n(e)===n(t)}function l(){const{baseUrl:e}=(0,o.Z)().siteConfig;return(0,r.useMemo)((()=>function(e){let{baseUrl:t,routes:n}=e;function r(e){return e.path===t&&!0===e.exact}function a(e){return e.path===t&&!e.exact}return function e(t){if(0===t.length)return;return t.find(r)||e(t.filter(a).flatMap((e=>e.routes??[])))}(n)}({routes:a.Z,baseUrl:e})),[e])}},2466:(e,t,n)=>{"use strict";n.d(t,{Ct:()=>p,OC:()=>s,RF:()=>d,o5:()=>f});var r=n(7294),a=n(412),o=n(2389),i=n(902);const l=r.createContext(void 0);function s(e){let{children:t}=e;const n=function(){const e=(0,r.useRef)(!0);return(0,r.useMemo)((()=>({scrollEventsEnabledRef:e,enableScrollEvents:()=>{e.current=!0},disableScrollEvents:()=>{e.current=!1}})),[])}();return r.createElement(l.Provider,{value:n},t)}function u(){const e=(0,r.useContext)(l);if(null==e)throw new i.i6("ScrollControllerProvider");return e}const c=()=>a.Z.canUseDOM?{scrollX:window.pageXOffset,scrollY:window.pageYOffset}:null;function d(e,t){void 0===t&&(t=[]);const{scrollEventsEnabledRef:n}=u(),a=(0,r.useRef)(c()),o=(0,i.zX)(e);(0,r.useEffect)((()=>{const e=()=>{if(!n.current)return;const e=c();o(e,a.current),a.current=e},t={passive:!0};return e(),window.addEventListener("scroll",e,t),()=>window.removeEventListener("scroll",e,t)}),[o,n,...t])}function f(){const e=u(),t=function(){const e=(0,r.useRef)({elem:null,top:0}),t=(0,r.useCallback)((t=>{e.current={elem:t,top:t.getBoundingClientRect().top}}),[]),n=(0,r.useCallback)((()=>{const{current:{elem:t,top:n}}=e;if(!t)return{restored:!1};const r=t.getBoundingClientRect().top-n;return r&&window.scrollBy({left:0,top:r}),e.current={elem:null,top:0},{restored:0!==r}}),[]);return(0,r.useMemo)((()=>({save:t,restore:n})),[n,t])}(),n=(0,r.useRef)(void 0),a=(0,r.useCallback)((r=>{t.save(r),e.disableScrollEvents(),n.current=()=>{const{restored:r}=t.restore();if(n.current=void 0,r){const t=()=>{e.enableScrollEvents(),window.removeEventListener("scroll",t)};window.addEventListener("scroll",t)}else e.enableScrollEvents()}}),[e,t]);return(0,r.useLayoutEffect)((()=>{queueMicrotask((()=>n.current?.()))})),{blockElementScrollPositionUntilNextRender:a}}function p(){const e=(0,r.useRef)(null),t=(0,o.Z)()&&"smooth"===getComputedStyle(document.documentElement).scrollBehavior;return{startScroll:n=>{e.current=t?function(e){return window.scrollTo({top:e,behavior:"smooth"}),()=>{}}(n):function(e){let t=null;const n=document.documentElement.scrollTop>e;return function r(){const a=document.documentElement.scrollTop;(n&&a>e||!n&&a<e)&&(t=requestAnimationFrame(r),window.scrollTo(0,Math.floor(.85*(a-e))+e))}(),()=>t&&cancelAnimationFrame(t)}(n)},cancelScroll:()=>e.current?.()}}},3320:(e,t,n)=>{"use strict";n.d(t,{HX:()=>i,_q:()=>s,os:()=>l});var r=n(143),a=n(2263),o=n(373);const i="default";function l(e,t){return`docs-${e}-${t}`}function s(){const{i18n:e}=(0,a.Z)(),t=(0,r._r)(),n=(0,r.WS)(),s=(0,o.Oh)();const u=[i,...Object.keys(t).map((function(e){const r=n?.activePlugin.pluginId===e?n.activeVersion:void 0,a=s[e],o=t[e].versions.find((e=>e.isLast));return l(e,(r??a??o).name)}))];return{locale:e.currentLocale,tags:u}}},12:(e,t,n)=>{"use strict";n.d(t,{Nk:()=>d,WA:()=>c});var r=n(7294),a=n(1688);const o="localStorage";function i(e){let{key:t,oldValue:n,newValue:r,storage:a}=e;if(n===r)return;const o=document.createEvent("StorageEvent");o.initStorageEvent("storage",!1,!1,t,n,r,window.location.href,a),window.dispatchEvent(o)}function l(e){if(void 0===e&&(e=o),"undefined"==typeof window)throw new Error("Browser storage is not available on Node.js/Docusaurus SSR process.");if("none"===e)return null;try{return window[e]}catch(n){return t=n,s||(console.warn("Docusaurus browser storage is not available.\nPossible reasons: running Docusaurus in an iframe, in an incognito browser session, or using too strict browser privacy settings.",t),s=!0),null}var t}let s=!1;const u={get:()=>null,set:()=>{},del:()=>{},listen:()=>()=>{}};function c(e,t){if("undefined"==typeof window)return function(e){function t(){throw new Error(`Illegal storage API usage for storage key "${e}".\nDocusaurus storage APIs are not supposed to be called on the server-rendering process.\nPlease only call storage APIs in effects and event handlers.`)}return{get:t,set:t,del:t,listen:t}}(e);const n=l(t?.persistence);return null===n?u:{get:()=>{try{return n.getItem(e)}catch(t){return console.error(`Docusaurus storage error, can't get key=${e}`,t),null}},set:t=>{try{const r=n.getItem(e);n.setItem(e,t),i({key:e,oldValue:r,newValue:t,storage:n})}catch(r){console.error(`Docusaurus storage error, can't set ${e}=${t}`,r)}},del:()=>{try{const t=n.getItem(e);n.removeItem(e),i({key:e,oldValue:t,newValue:null,storage:n})}catch(t){console.error(`Docusaurus storage error, can't delete key=${e}`,t)}},listen:t=>{try{const r=r=>{r.storageArea===n&&r.key===e&&t(r)};return window.addEventListener("storage",r),()=>window.removeEventListener("storage",r)}catch(r){return console.error(`Docusaurus storage error, can't listen for changes of key=${e}`,r),()=>{}}}}}function d(e,t){const n=(0,r.useRef)((()=>null===e?u:c(e,t))).current(),o=(0,r.useCallback)((e=>"undefined"==typeof window?()=>{}:n.listen(e)),[n]);return[(0,a.useSyncExternalStore)(o,(()=>"undefined"==typeof window?null:n.get()),(()=>null)),n]}},4711:(e,t,n)=>{"use strict";n.d(t,{l:()=>o});var r=n(2263),a=n(6775);function o(){const{siteConfig:{baseUrl:e,url:t},i18n:{defaultLocale:n,currentLocale:o}}=(0,r.Z)(),{pathname:i}=(0,a.TH)(),l=o===n?e:e.replace(`/${o}/`,"/"),s=i.replace(e,"");return{createUrl:function(e){let{locale:r,fullyQualified:a}=e;return`${a?t:""}${function(e){return e===n?`${l}`:`${l}${e}/`}(r)}${s}`}}}},5936:(e,t,n)=>{"use strict";n.d(t,{S:()=>i});var r=n(7294),a=n(6775),o=n(902);function i(e){const t=(0,a.TH)(),n=(0,o.D9)(t),i=(0,o.zX)(e);(0,r.useEffect)((()=>{n&&t!==n&&i({location:t,previousLocation:n})}),[i,t,n])}},6668:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){return(0,r.Z)().siteConfig.themeConfig}},6278:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){const{siteConfig:{themeConfig:e}}=(0,r.Z)();return e}},239:(e,t,n)=>{"use strict";n.d(t,{l:()=>l});var r=n(7294),a=n(8022),o=n(4996),i=n(6278);function l(){const{withBaseUrl:e}=(0,o.C)(),{algolia:{externalUrlRegex:t,replaceSearchResultPathname:n}}=(0,i.L)();return(0,r.useCallback)((r=>{const o=new URL(r);if((0,a.F)(t,o.href))return r;const i=`${o.pathname+o.hash}`;return e(function(e,t){return t?e.replaceAll(new RegExp(t.from,"g"),t.to):e}(i,n))}),[e,t,n])}},8802:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){const{trailingSlash:n,baseUrl:r}=t;if(e.startsWith("#"))return e;if(void 0===n)return e;const[a]=e.split(/[#?]/),o="/"===a||a===r?a:(i=a,n?function(e){return e.endsWith("/")?e:`${e}/`}(i):function(e){return e.endsWith("/")?e.slice(0,-1):e}(i));var i;return e.replace(a,o)}},4143:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=void 0,t.getErrorCausalChain=function e(t){return t.cause?[t,...e(t.cause)]:[t]}},8780:function(e,t,n){"use strict";var r=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=t.applyTrailingSlash=t.blogPostContainerID=void 0,t.blogPostContainerID="__blog-post-container";var a=n(8802);Object.defineProperty(t,"applyTrailingSlash",{enumerable:!0,get:function(){return r(a).default}});var o=n(4143);Object.defineProperty(t,"getErrorCausalChain",{enumerable:!0,get:function(){return o.getErrorCausalChain}})},6010:(e,t,n)=>{"use strict";function r(e){var t,n,a="";if("string"==typeof e||"number"==typeof e)a+=e;else if("object"==typeof e)if(Array.isArray(e))for(t=0;t<e.length;t++)e[t]&&(n=r(e[t]))&&(a&&(a+=" "),a+=n);else for(t in e)e[t]&&(a&&(a+=" "),a+=t);return a}n.d(t,{Z:()=>a});const a=function(){for(var e,t,n=0,a="";n<arguments.length;)(e=arguments[n++])&&(t=r(e))&&(a&&(a+=" "),a+=t);return a}},9318:(e,t,n)=>{"use strict";n.d(t,{lX:()=>w,q_:()=>_,ob:()=>p,PP:()=>A,Ep:()=>f});var r=n(3117);function a(e){return"/"===e.charAt(0)}function o(e,t){for(var n=t,r=n+1,a=e.length;r<a;n+=1,r+=1)e[n]=e[r];e.pop()}const i=function(e,t){void 0===t&&(t="");var n,r=e&&e.split("/")||[],i=t&&t.split("/")||[],l=e&&a(e),s=t&&a(t),u=l||s;if(e&&a(e)?i=r:r.length&&(i.pop(),i=i.concat(r)),!i.length)return"/";if(i.length){var c=i[i.length-1];n="."===c||".."===c||""===c}else n=!1;for(var d=0,f=i.length;f>=0;f--){var p=i[f];"."===p?o(i,f):".."===p?(o(i,f),d++):d&&(o(i,f),d--)}if(!u)for(;d--;d)i.unshift("..");!u||""===i[0]||i[0]&&a(i[0])||i.unshift("");var m=i.join("/");return n&&"/"!==m.substr(-1)&&(m+="/"),m};var l=n(2177);function s(e){return"/"===e.charAt(0)?e:"/"+e}function u(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return 0===e.toLowerCase().indexOf(t.toLowerCase())&&-1!=="/?#".indexOf(e.charAt(t.length))}(e,t)?e.substr(t.length):e}function d(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,a=t||"/";return n&&"?"!==n&&(a+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(a+="#"===r.charAt(0)?r:"#"+r),a}function p(e,t,n,a){var o;"string"==typeof e?(o=function(e){var t=e||"/",n="",r="",a=t.indexOf("#");-1!==a&&(r=t.substr(a),t=t.substr(0,a));var o=t.indexOf("?");return-1!==o&&(n=t.substr(o),t=t.substr(0,o)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),o.state=t):(void 0===(o=(0,r.Z)({},e)).pathname&&(o.pathname=""),o.search?"?"!==o.search.charAt(0)&&(o.search="?"+o.search):o.search="",o.hash?"#"!==o.hash.charAt(0)&&(o.hash="#"+o.hash):o.hash="",void 0!==t&&void 0===o.state&&(o.state=t));try{o.pathname=decodeURI(o.pathname)}catch(l){throw l instanceof URIError?new URIError('Pathname "'+o.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):l}return n&&(o.key=n),a?o.pathname?"/"!==o.pathname.charAt(0)&&(o.pathname=i(o.pathname,a.pathname)):o.pathname=a.pathname:o.pathname||(o.pathname="/"),o}function m(){var e=null;var t=[];return{setPrompt:function(t){return e=t,function(){e===t&&(e=null)}},confirmTransitionTo:function(t,n,r,a){if(null!=e){var o="function"==typeof e?e(t,n):e;"string"==typeof o?"function"==typeof r?r(o,a):a(!0):a(!1!==o)}else a(!0)},appendListener:function(e){var n=!0;function r(){n&&e.apply(void 0,arguments)}return t.push(r),function(){n=!1,t=t.filter((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];t.forEach((function(e){return e.apply(void 0,n)}))}}}var h=!("undefined"==typeof window||!window.document||!window.document.createElement);function g(e,t){t(window.confirm(e))}var b="popstate",v="hashchange";function y(){try{return window.history.state||{}}catch(e){return{}}}function w(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t,n=window.history,a=(-1===(t=window.navigator.userAgent).indexOf("Android 2.")&&-1===t.indexOf("Android 4.0")||-1===t.indexOf("Mobile Safari")||-1!==t.indexOf("Chrome")||-1!==t.indexOf("Windows Phone"))&&window.history&&"pushState"in window.history,o=!(-1===window.navigator.userAgent.indexOf("Trident")),i=e,u=i.forceRefresh,w=void 0!==u&&u,k=i.getUserConfirmation,E=void 0===k?g:k,S=i.keyLength,x=void 0===S?6:S,C=e.basename?d(s(e.basename)):"";function _(e){var t=e||{},n=t.key,r=t.state,a=window.location,o=a.pathname+a.search+a.hash;return C&&(o=c(o,C)),p(o,r,n)}function T(){return Math.random().toString(36).substr(2,x)}var A=m();function L(e){(0,r.Z)(U,e),U.length=n.length,A.notifyListeners(U.location,U.action)}function R(e){(function(e){return void 0===e.state&&-1===navigator.userAgent.indexOf("CriOS")})(e)||O(_(e.state))}function N(){O(_(y()))}var P=!1;function O(e){if(P)P=!1,L();else{A.confirmTransitionTo(e,"POP",E,(function(t){t?L({action:"POP",location:e}):function(e){var t=U.location,n=D.indexOf(t.key);-1===n&&(n=0);var r=D.indexOf(e.key);-1===r&&(r=0);var a=n-r;a&&(P=!0,F(a))}(e)}))}}var I=_(y()),D=[I.key];function M(e){return C+f(e)}function F(e){n.go(e)}var B=0;function j(e){1===(B+=e)&&1===e?(window.addEventListener(b,R),o&&window.addEventListener(v,N)):0===B&&(window.removeEventListener(b,R),o&&window.removeEventListener(v,N))}var z=!1;var U={length:n.length,action:"POP",location:I,createHref:M,push:function(e,t){var r="PUSH",o=p(e,t,T(),U.location);A.confirmTransitionTo(o,r,E,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.pushState({key:i,state:l},null,t),w)window.location.href=t;else{var s=D.indexOf(U.location.key),u=D.slice(0,s+1);u.push(o.key),D=u,L({action:r,location:o})}else window.location.href=t}}))},replace:function(e,t){var r="REPLACE",o=p(e,t,T(),U.location);A.confirmTransitionTo(o,r,E,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.replaceState({key:i,state:l},null,t),w)window.location.replace(t);else{var s=D.indexOf(U.location.key);-1!==s&&(D[s]=o.key),L({action:r,location:o})}else window.location.replace(t)}}))},go:F,goBack:function(){F(-1)},goForward:function(){F(1)},block:function(e){void 0===e&&(e=!1);var t=A.setPrompt(e);return z||(j(1),z=!0),function(){return z&&(z=!1,j(-1)),t()}},listen:function(e){var t=A.appendListener(e);return j(1),function(){j(-1),t()}}};return U}var k="hashchange",E={hashbang:{encodePath:function(e){return"!"===e.charAt(0)?e:"!/"+u(e)},decodePath:function(e){return"!"===e.charAt(0)?e.substr(1):e}},noslash:{encodePath:u,decodePath:s},slash:{encodePath:s,decodePath:s}};function S(e){var t=e.indexOf("#");return-1===t?e:e.slice(0,t)}function x(){var e=window.location.href,t=e.indexOf("#");return-1===t?"":e.substring(t+1)}function C(e){window.location.replace(S(window.location.href)+"#"+e)}function _(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t=window.history,n=(window.navigator.userAgent.indexOf("Firefox"),e),a=n.getUserConfirmation,o=void 0===a?g:a,i=n.hashType,u=void 0===i?"slash":i,b=e.basename?d(s(e.basename)):"",v=E[u],y=v.encodePath,w=v.decodePath;function _(){var e=w(x());return b&&(e=c(e,b)),p(e)}var T=m();function A(e){(0,r.Z)(z,e),z.length=t.length,T.notifyListeners(z.location,z.action)}var L=!1,R=null;function N(){var e,t,n=x(),r=y(n);if(n!==r)C(r);else{var a=_(),i=z.location;if(!L&&(t=a,(e=i).pathname===t.pathname&&e.search===t.search&&e.hash===t.hash))return;if(R===f(a))return;R=null,function(e){if(L)L=!1,A();else{var t="POP";T.confirmTransitionTo(e,t,o,(function(n){n?A({action:t,location:e}):function(e){var t=z.location,n=D.lastIndexOf(f(t));-1===n&&(n=0);var r=D.lastIndexOf(f(e));-1===r&&(r=0);var a=n-r;a&&(L=!0,M(a))}(e)}))}}(a)}}var P=x(),O=y(P);P!==O&&C(O);var I=_(),D=[f(I)];function M(e){t.go(e)}var F=0;function B(e){1===(F+=e)&&1===e?window.addEventListener(k,N):0===F&&window.removeEventListener(k,N)}var j=!1;var z={length:t.length,action:"POP",location:I,createHref:function(e){var t=document.querySelector("base"),n="";return t&&t.getAttribute("href")&&(n=S(window.location.href)),n+"#"+y(b+f(e))},push:function(e,t){var n="PUSH",r=p(e,void 0,void 0,z.location);T.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(b+t);if(x()!==a){R=t,function(e){window.location.hash=e}(a);var o=D.lastIndexOf(f(z.location)),i=D.slice(0,o+1);i.push(t),D=i,A({action:n,location:r})}else A()}}))},replace:function(e,t){var n="REPLACE",r=p(e,void 0,void 0,z.location);T.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(b+t);x()!==a&&(R=t,C(a));var o=D.indexOf(f(z.location));-1!==o&&(D[o]=t),A({action:n,location:r})}}))},go:M,goBack:function(){M(-1)},goForward:function(){M(1)},block:function(e){void 0===e&&(e=!1);var t=T.setPrompt(e);return j||(B(1),j=!0),function(){return j&&(j=!1,B(-1)),t()}},listen:function(e){var t=T.appendListener(e);return B(1),function(){B(-1),t()}}};return z}function T(e,t,n){return Math.min(Math.max(e,t),n)}function A(e){void 0===e&&(e={});var t=e,n=t.getUserConfirmation,a=t.initialEntries,o=void 0===a?["/"]:a,i=t.initialIndex,l=void 0===i?0:i,s=t.keyLength,u=void 0===s?6:s,c=m();function d(e){(0,r.Z)(w,e),w.length=w.entries.length,c.notifyListeners(w.location,w.action)}function h(){return Math.random().toString(36).substr(2,u)}var g=T(l,0,o.length-1),b=o.map((function(e){return p(e,void 0,"string"==typeof e?h():e.key||h())})),v=f;function y(e){var t=T(w.index+e,0,w.entries.length-1),r=w.entries[t];c.confirmTransitionTo(r,"POP",n,(function(e){e?d({action:"POP",location:r,index:t}):d()}))}var w={length:b.length,action:"POP",location:b[g],index:g,entries:b,createHref:v,push:function(e,t){var r="PUSH",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){if(e){var t=w.index+1,n=w.entries.slice(0);n.length>t?n.splice(t,n.length-t,a):n.push(a),d({action:r,location:a,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){e&&(w.entries[w.index]=a,d({action:r,location:a}))}))},go:y,goBack:function(){y(-1)},goForward:function(){y(1)},canGo:function(e){var t=w.index+e;return t>=0&&t<w.entries.length},block:function(e){return void 0===e&&(e=!1),c.setPrompt(e)},listen:function(e){return c.appendListener(e)}};return w}},8679:(e,t,n)=>{"use strict";var r=n(9864),a={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?i:l[e.$$typeof]||a}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var u=Object.defineProperty,c=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,m=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(m){var a=p(n);a&&a!==m&&e(t,a,r)}var i=c(n);d&&(i=i.concat(d(n)));for(var l=s(t),h=s(n),g=0;g<i.length;++g){var b=i[g];if(!(o[b]||r&&r[b]||h&&h[b]||l&&l[b])){var v=f(n,b);try{u(t,b,v)}catch(y){}}}}return t}},1143:e=>{"use strict";e.exports=function(e,t,n,r,a,o,i,l){if(!e){var s;if(void 0===t)s=new Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,a,o,i,l],c=0;(s=new Error(t.replace(/%s/g,(function(){return u[c++]})))).name="Invariant Violation"}throw s.framesToPop=1,s}}},5826:e=>{e.exports=Array.isArray||function(e){return"[object Array]"==Object.prototype.toString.call(e)}},2497:(e,t,n)=>{"use strict";n.r(t)},2295:(e,t,n)=>{"use strict";n.r(t)},4865:function(e,t,n){var r,a;r=function(){var e,t,n={version:"0.2.0"},r=n.settings={minimum:.08,easing:"ease",positionUsing:"",speed:200,trickle:!0,trickleRate:.02,trickleSpeed:800,showSpinner:!0,barSelector:'[role="bar"]',spinnerSelector:'[role="spinner"]',parent:"body",template:'<div class="bar" role="bar"><div class="peg"></div></div><div class="spinner" role="spinner"><div class="spinner-icon"></div></div>'};function a(e,t,n){return e<t?t:e>n?n:e}function o(e){return 100*(-1+e)}function i(e,t,n){var a;return(a="translate3d"===r.positionUsing?{transform:"translate3d("+o(e)+"%,0,0)"}:"translate"===r.positionUsing?{transform:"translate("+o(e)+"%,0)"}:{"margin-left":o(e)+"%"}).transition="all "+t+"ms "+n,a}n.configure=function(e){var t,n;for(t in e)void 0!==(n=e[t])&&e.hasOwnProperty(t)&&(r[t]=n);return this},n.status=null,n.set=function(e){var t=n.isStarted();e=a(e,r.minimum,1),n.status=1===e?null:e;var o=n.render(!t),u=o.querySelector(r.barSelector),c=r.speed,d=r.easing;return o.offsetWidth,l((function(t){""===r.positionUsing&&(r.positionUsing=n.getPositioningCSS()),s(u,i(e,c,d)),1===e?(s(o,{transition:"none",opacity:1}),o.offsetWidth,setTimeout((function(){s(o,{transition:"all "+c+"ms linear",opacity:0}),setTimeout((function(){n.remove(),t()}),c)}),c)):setTimeout(t,c)})),this},n.isStarted=function(){return"number"==typeof n.status},n.start=function(){n.status||n.set(0);var e=function(){setTimeout((function(){n.status&&(n.trickle(),e())}),r.trickleSpeed)};return r.trickle&&e(),this},n.done=function(e){return e||n.status?n.inc(.3+.5*Math.random()).set(1):this},n.inc=function(e){var t=n.status;return t?("number"!=typeof e&&(e=(1-t)*a(Math.random()*t,.1,.95)),t=a(t+e,0,.994),n.set(t)):n.start()},n.trickle=function(){return n.inc(Math.random()*r.trickleRate)},e=0,t=0,n.promise=function(r){return r&&"resolved"!==r.state()?(0===t&&n.start(),e++,t++,r.always((function(){0==--t?(e=0,n.done()):n.set((e-t)/e)})),this):this},n.render=function(e){if(n.isRendered())return document.getElementById("nprogress");c(document.documentElement,"nprogress-busy");var t=document.createElement("div");t.id="nprogress",t.innerHTML=r.template;var a,i=t.querySelector(r.barSelector),l=e?"-100":o(n.status||0),u=document.querySelector(r.parent);return s(i,{transition:"all 0 linear",transform:"translate3d("+l+"%,0,0)"}),r.showSpinner||(a=t.querySelector(r.spinnerSelector))&&p(a),u!=document.body&&c(u,"nprogress-custom-parent"),u.appendChild(t),t},n.remove=function(){d(document.documentElement,"nprogress-busy"),d(document.querySelector(r.parent),"nprogress-custom-parent");var e=document.getElementById("nprogress");e&&p(e)},n.isRendered=function(){return!!document.getElementById("nprogress")},n.getPositioningCSS=function(){var e=document.body.style,t="WebkitTransform"in e?"Webkit":"MozTransform"in e?"Moz":"msTransform"in e?"ms":"OTransform"in e?"O":"";return t+"Perspective"in e?"translate3d":t+"Transform"in e?"translate":"margin"};var l=function(){var e=[];function t(){var n=e.shift();n&&n(t)}return function(n){e.push(n),1==e.length&&t()}}(),s=function(){var e=["Webkit","O","Moz","ms"],t={};function n(e){return e.replace(/^-ms-/,"ms-").replace(/-([\da-z])/gi,(function(e,t){return t.toUpperCase()}))}function r(t){var n=document.body.style;if(t in n)return t;for(var r,a=e.length,o=t.charAt(0).toUpperCase()+t.slice(1);a--;)if((r=e[a]+o)in n)return r;return t}function a(e){return e=n(e),t[e]||(t[e]=r(e))}function o(e,t,n){t=a(t),e.style[t]=n}return function(e,t){var n,r,a=arguments;if(2==a.length)for(n in t)void 0!==(r=t[n])&&t.hasOwnProperty(n)&&o(e,n,r);else o(e,a[1],a[2])}}();function u(e,t){return("string"==typeof e?e:f(e)).indexOf(" "+t+" ")>=0}function c(e,t){var n=f(e),r=n+t;u(n,t)||(e.className=r.substring(1))}function d(e,t){var n,r=f(e);u(e,t)&&(n=r.replace(" "+t+" "," "),e.className=n.substring(1,n.length-1))}function f(e){return(" "+(e.className||"")+" ").replace(/\s+/gi," ")}function p(e){e&&e.parentNode&&e.parentNode.removeChild(e)}return n},void 0===(a="function"==typeof r?r.call(t,n,t,e):r)||(e.exports=a)},7418:e=>{"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;function a(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(a){return!1}}()?Object.assign:function(e,o){for(var i,l,s=a(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(s[c]=i[c]);if(t){l=t(i);for(var d=0;d<l.length;d++)r.call(i,l[d])&&(s[l[d]]=i[l[d]])}}return s}},7410:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=function(){var e=/(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i,t=0,n={},r={util:{encode:function e(t){return t instanceof a?new a(t.type,e(t.content),t.alias):Array.isArray(t)?t.map(e):t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/\u00a0/g," ")},type:function(e){return Object.prototype.toString.call(e).slice(8,-1)},objId:function(e){return e.__id||Object.defineProperty(e,"__id",{value:++t}),e.__id},clone:function e(t,n){var a,o;switch(n=n||{},r.util.type(t)){case"Object":if(o=r.util.objId(t),n[o])return n[o];for(var i in a={},n[o]=a,t)t.hasOwnProperty(i)&&(a[i]=e(t[i],n));return a;case"Array":return o=r.util.objId(t),n[o]?n[o]:(a=[],n[o]=a,t.forEach((function(t,r){a[r]=e(t,n)})),a);default:return t}},getLanguage:function(t){for(;t;){var n=e.exec(t.className);if(n)return n[1].toLowerCase();t=t.parentElement}return"none"},setLanguage:function(t,n){t.className=t.className.replace(RegExp(e,"gi"),""),t.classList.add("language-"+n)},isActive:function(e,t,n){for(var r="no-"+t;e;){var a=e.classList;if(a.contains(t))return!0;if(a.contains(r))return!1;e=e.parentElement}return!!n}},languages:{plain:n,plaintext:n,text:n,txt:n,extend:function(e,t){var n=r.util.clone(r.languages[e]);for(var a in t)n[a]=t[a];return n},insertBefore:function(e,t,n,a){var o=(a=a||r.languages)[e],i={};for(var l in o)if(o.hasOwnProperty(l)){if(l==t)for(var s in n)n.hasOwnProperty(s)&&(i[s]=n[s]);n.hasOwnProperty(l)||(i[l]=o[l])}var u=a[e];return a[e]=i,r.languages.DFS(r.languages,(function(t,n){n===u&&t!=e&&(this[t]=i)})),i},DFS:function e(t,n,a,o){o=o||{};var i=r.util.objId;for(var l in t)if(t.hasOwnProperty(l)){n.call(t,l,t[l],a||l);var s=t[l],u=r.util.type(s);"Object"!==u||o[i(s)]?"Array"!==u||o[i(s)]||(o[i(s)]=!0,e(s,n,l,o)):(o[i(s)]=!0,e(s,n,null,o))}}},plugins:{},highlight:function(e,t,n){var o={code:e,grammar:t,language:n};return r.hooks.run("before-tokenize",o),o.tokens=r.tokenize(o.code,o.grammar),r.hooks.run("after-tokenize",o),a.stringify(r.util.encode(o.tokens),o.language)},tokenize:function(e,t){var n=t.rest;if(n){for(var r in n)t[r]=n[r];delete t.rest}var a=new l;return s(a,a.head,e),i(e,a,t,a.head,0),function(e){var t=[],n=e.head.next;for(;n!==e.tail;)t.push(n.value),n=n.next;return t}(a)},hooks:{all:{},add:function(e,t){var n=r.hooks.all;n[e]=n[e]||[],n[e].push(t)},run:function(e,t){var n=r.hooks.all[e];if(n&&n.length)for(var a,o=0;a=n[o++];)a(t)}},Token:a};function a(e,t,n,r){this.type=e,this.content=t,this.alias=n,this.length=0|(r||"").length}function o(e,t,n,r){e.lastIndex=t;var a=e.exec(n);if(a&&r&&a[1]){var o=a[1].length;a.index+=o,a[0]=a[0].slice(o)}return a}function i(e,t,n,l,c,d){for(var f in n)if(n.hasOwnProperty(f)&&n[f]){var p=n[f];p=Array.isArray(p)?p:[p];for(var m=0;m<p.length;++m){if(d&&d.cause==f+","+m)return;var h=p[m],g=h.inside,b=!!h.lookbehind,v=!!h.greedy,y=h.alias;if(v&&!h.pattern.global){var w=h.pattern.toString().match(/[imsuy]*$/)[0];h.pattern=RegExp(h.pattern.source,w+"g")}for(var k=h.pattern||h,E=l.next,S=c;E!==t.tail&&!(d&&S>=d.reach);S+=E.value.length,E=E.next){var x=E.value;if(t.length>e.length)return;if(!(x instanceof a)){var C,_=1;if(v){if(!(C=o(k,S,e,b))||C.index>=e.length)break;var T=C.index,A=C.index+C[0].length,L=S;for(L+=E.value.length;T>=L;)L+=(E=E.next).value.length;if(S=L-=E.value.length,E.value instanceof a)continue;for(var R=E;R!==t.tail&&(L<A||"string"==typeof R.value);R=R.next)_++,L+=R.value.length;_--,x=e.slice(S,L),C.index-=S}else if(!(C=o(k,0,x,b)))continue;T=C.index;var N=C[0],P=x.slice(0,T),O=x.slice(T+N.length),I=S+x.length;d&&I>d.reach&&(d.reach=I);var D=E.prev;if(P&&(D=s(t,D,P),S+=P.length),u(t,D,_),E=s(t,D,new a(f,g?r.tokenize(N,g):N,y,N)),O&&s(t,E,O),_>1){var M={cause:f+","+m,reach:I};i(e,t,n,E.prev,S,M),d&&M.reach>d.reach&&(d.reach=M.reach)}}}}}}function l(){var e={value:null,prev:null,next:null},t={value:null,prev:e,next:null};e.next=t,this.head=e,this.tail=t,this.length=0}function s(e,t,n){var r=t.next,a={value:n,prev:t,next:r};return t.next=a,r.prev=a,e.length++,a}function u(e,t,n){for(var r=t.next,a=0;a<n&&r!==e.tail;a++)r=r.next;t.next=r,r.prev=t,e.length-=a}return a.stringify=function e(t,n){if("string"==typeof t)return t;if(Array.isArray(t)){var a="";return t.forEach((function(t){a+=e(t,n)})),a}var o={type:t.type,content:e(t.content,n),tag:"span",classes:["token",t.type],attributes:{},language:n},i=t.alias;i&&(Array.isArray(i)?Array.prototype.push.apply(o.classes,i):o.classes.push(i)),r.hooks.run("wrap",o);var l="";for(var s in o.attributes)l+=" "+s+'="'+(o.attributes[s]||"").replace(/"/g,"&quot;")+'"';return"<"+o.tag+' class="'+o.classes.join(" ")+'"'+l+">"+o.content+"</"+o.tag+">"},r}(),a=r;r.default=r,a.languages.markup={comment:{pattern:/<!--(?:(?!<!--)[\s\S])*?-->/,greedy:!0},prolog:{pattern:/<\?[\s\S]+?\?>/,greedy:!0},doctype:{pattern:/<!DOCTYPE(?:[^>"'[\]]|"[^"]*"|'[^']*')+(?:\[(?:[^<"'\]]|"[^"]*"|'[^']*'|<(?!!--)|<!--(?:[^-]|-(?!->))*-->)*\]\s*)?>/i,greedy:!0,inside:{"internal-subset":{pattern:/(^[^\[]*\[)[\s\S]+(?=\]>$)/,lookbehind:!0,greedy:!0,inside:null},string:{pattern:/"[^"]*"|'[^']*'/,greedy:!0},punctuation:/^<!|>$|[[\]]/,"doctype-tag":/^DOCTYPE/i,name:/[^\s<>'"]+/}},cdata:{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,greedy:!0},tag:{pattern:/<\/?(?!\d)[^\s>\/=$<%]+(?:\s(?:\s*[^\s>\/=]+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))|(?=[\s/>])))+)?\s*\/?>/,greedy:!0,inside:{tag:{pattern:/^<\/?[^\s>\/]+/,inside:{punctuation:/^<\/?/,namespace:/^[^\s>\/:]+:/}},"special-attr":[],"attr-value":{pattern:/=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+)/,inside:{punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}},punctuation:/\/?>/,"attr-name":{pattern:/[^\s>\/]+/,inside:{namespace:/^[^\s>\/:]+:/}}}},entity:[{pattern:/&[\da-z]{1,8};/i,alias:"named-entity"},/&#x?[\da-f]{1,8};/i]},a.languages.markup.tag.inside["attr-value"].inside.entity=a.languages.markup.entity,a.languages.markup.doctype.inside["internal-subset"].inside=a.languages.markup,a.hooks.add("wrap",(function(e){"entity"===e.type&&(e.attributes.title=e.content.replace(/&amp;/,"&"))})),Object.defineProperty(a.languages.markup.tag,"addInlined",{value:function(e,t){var n={};n["language-"+t]={pattern:/(^<!\[CDATA\[)[\s\S]+?(?=\]\]>$)/i,lookbehind:!0,inside:a.languages[t]},n.cdata=/^<!\[CDATA\[|\]\]>$/i;var r={"included-cdata":{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,inside:n}};r["language-"+t]={pattern:/[\s\S]+/,inside:a.languages[t]};var o={};o[e]={pattern:RegExp(/(<__[^>]*>)(?:<!\[CDATA\[(?:[^\]]|\](?!\]>))*\]\]>|(?!<!\[CDATA\[)[\s\S])*?(?=<\/__>)/.source.replace(/__/g,(function(){return e})),"i"),lookbehind:!0,greedy:!0,inside:r},a.languages.insertBefore("markup","cdata",o)}}),Object.defineProperty(a.languages.markup.tag,"addAttribute",{value:function(e,t){a.languages.markup.tag.inside["special-attr"].push({pattern:RegExp(/(^|["'\s])/.source+"(?:"+e+")"+/\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))/.source,"i"),lookbehind:!0,inside:{"attr-name":/^[^\s=]+/,"attr-value":{pattern:/=[\s\S]+/,inside:{value:{pattern:/(^=\s*(["']|(?!["'])))\S[\s\S]*(?=\2$)/,lookbehind:!0,alias:[t,"language-"+t],inside:a.languages[t]},punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}}}})}}),a.languages.html=a.languages.markup,a.languages.mathml=a.languages.markup,a.languages.svg=a.languages.markup,a.languages.xml=a.languages.extend("markup",{}),a.languages.ssml=a.languages.xml,a.languages.atom=a.languages.xml,a.languages.rss=a.languages.xml,function(e){var t="\\b(?:BASH|BASHOPTS|BASH_ALIASES|BASH_ARGC|BASH_ARGV|BASH_CMDS|BASH_COMPLETION_COMPAT_DIR|BASH_LINENO|BASH_REMATCH|BASH_SOURCE|BASH_VERSINFO|BASH_VERSION|COLORTERM|COLUMNS|COMP_WORDBREAKS|DBUS_SESSION_BUS_ADDRESS|DEFAULTS_PATH|DESKTOP_SESSION|DIRSTACK|DISPLAY|EUID|GDMSESSION|GDM_LANG|GNOME_KEYRING_CONTROL|GNOME_KEYRING_PID|GPG_AGENT_INFO|GROUPS|HISTCONTROL|HISTFILE|HISTFILESIZE|HISTSIZE|HOME|HOSTNAME|HOSTTYPE|IFS|INSTANCE|JOB|LANG|LANGUAGE|LC_ADDRESS|LC_ALL|LC_IDENTIFICATION|LC_MEASUREMENT|LC_MONETARY|LC_NAME|LC_NUMERIC|LC_PAPER|LC_TELEPHONE|LC_TIME|LESSCLOSE|LESSOPEN|LINES|LOGNAME|LS_COLORS|MACHTYPE|MAILCHECK|MANDATORY_PATH|NO_AT_BRIDGE|OLDPWD|OPTERR|OPTIND|ORBIT_SOCKETDIR|OSTYPE|PAPERSIZE|PATH|PIPESTATUS|PPID|PS1|PS2|PS3|PS4|PWD|RANDOM|REPLY|SECONDS|SELINUX_INIT|SESSION|SESSIONTYPE|SESSION_MANAGER|SHELL|SHELLOPTS|SHLVL|SSH_AUTH_SOCK|TERM|UID|UPSTART_EVENTS|UPSTART_INSTANCE|UPSTART_JOB|UPSTART_SESSION|USER|WINDOWID|XAUTHORITY|XDG_CONFIG_DIRS|XDG_CURRENT_DESKTOP|XDG_DATA_DIRS|XDG_GREETER_DATA_DIR|XDG_MENU_PREFIX|XDG_RUNTIME_DIR|XDG_SEAT|XDG_SEAT_PATH|XDG_SESSION_DESKTOP|XDG_SESSION_ID|XDG_SESSION_PATH|XDG_SESSION_TYPE|XDG_VTNR|XMODIFIERS)\\b",n={pattern:/(^(["']?)\w+\2)[ \t]+\S.*/,lookbehind:!0,alias:"punctuation",inside:null},r={bash:n,environment:{pattern:RegExp("\\$"+t),alias:"constant"},variable:[{pattern:/\$?\(\([\s\S]+?\)\)/,greedy:!0,inside:{variable:[{pattern:/(^\$\(\([\s\S]+)\)\)/,lookbehind:!0},/^\$\(\(/],number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee]-?\d+)?/,operator:/--|\+\+|\*\*=?|<<=?|>>=?|&&|\|\||[=!+\-*/%<>^&|]=?|[?~:]/,punctuation:/\(\(?|\)\)?|,|;/}},{pattern:/\$\((?:\([^)]+\)|[^()])+\)|`[^`]+`/,greedy:!0,inside:{variable:/^\$\(|^`|\)$|`$/}},{pattern:/\$\{[^}]+\}/,greedy:!0,inside:{operator:/:[-=?+]?|[!\/]|##?|%%?|\^\^?|,,?/,punctuation:/[\[\]]/,environment:{pattern:RegExp("(\\{)"+t),lookbehind:!0,alias:"constant"}}},/\$(?:\w+|[#?*!@$])/],entity:/\\(?:[abceEfnrtv\\"]|O?[0-7]{1,3}|U[0-9a-fA-F]{8}|u[0-9a-fA-F]{4}|x[0-9a-fA-F]{1,2})/};e.languages.bash={shebang:{pattern:/^#!\s*\/.*/,alias:"important"},comment:{pattern:/(^|[^"{\\$])#.*/,lookbehind:!0},"function-name":[{pattern:/(\bfunction\s+)[\w-]+(?=(?:\s*\(?:\s*\))?\s*\{)/,lookbehind:!0,alias:"function"},{pattern:/\b[\w-]+(?=\s*\(\s*\)\s*\{)/,alias:"function"}],"for-or-select":{pattern:/(\b(?:for|select)\s+)\w+(?=\s+in\s)/,alias:"variable",lookbehind:!0},"assign-left":{pattern:/(^|[\s;|&]|[<>]\()\w+(?=\+?=)/,inside:{environment:{pattern:RegExp("(^|[\\s;|&]|[<>]\\()"+t),lookbehind:!0,alias:"constant"}},alias:"variable",lookbehind:!0},string:[{pattern:/((?:^|[^<])<<-?\s*)(\w+)\s[\s\S]*?(?:\r?\n|\r)\2/,lookbehind:!0,greedy:!0,inside:r},{pattern:/((?:^|[^<])<<-?\s*)(["'])(\w+)\2\s[\s\S]*?(?:\r?\n|\r)\3/,lookbehind:!0,greedy:!0,inside:{bash:n}},{pattern:/(^|[^\\](?:\\\\)*)"(?:\\[\s\S]|\$\([^)]+\)|\$(?!\()|`[^`]+`|[^"\\`$])*"/,lookbehind:!0,greedy:!0,inside:r},{pattern:/(^|[^$\\])'[^']*'/,lookbehind:!0,greedy:!0},{pattern:/\$'(?:[^'\\]|\\[\s\S])*'/,greedy:!0,inside:{entity:r.entity}}],environment:{pattern:RegExp("\\$?"+t),alias:"constant"},variable:r.variable,function:{pattern:/(^|[\s;|&]|[<>]\()(?:add|apropos|apt|apt-cache|apt-get|aptitude|aspell|automysqlbackup|awk|basename|bash|bc|bconsole|bg|bzip2|cal|cat|cfdisk|chgrp|chkconfig|chmod|chown|chroot|cksum|clear|cmp|column|comm|composer|cp|cron|crontab|csplit|curl|cut|date|dc|dd|ddrescue|debootstrap|df|diff|diff3|dig|dir|dircolors|dirname|dirs|dmesg|docker|docker-compose|du|egrep|eject|env|ethtool|expand|expect|expr|fdformat|fdisk|fg|fgrep|file|find|fmt|fold|format|free|fsck|ftp|fuser|gawk|git|gparted|grep|groupadd|groupdel|groupmod|groups|grub-mkconfig|gzip|halt|head|hg|history|host|hostname|htop|iconv|id|ifconfig|ifdown|ifup|import|install|ip|jobs|join|kill|killall|less|link|ln|locate|logname|logrotate|look|lpc|lpr|lprint|lprintd|lprintq|lprm|ls|lsof|lynx|make|man|mc|mdadm|mkconfig|mkdir|mke2fs|mkfifo|mkfs|mkisofs|mknod|mkswap|mmv|more|most|mount|mtools|mtr|mutt|mv|nano|nc|netstat|nice|nl|node|nohup|notify-send|npm|nslookup|op|open|parted|passwd|paste|pathchk|ping|pkill|pnpm|podman|podman-compose|popd|pr|printcap|printenv|ps|pushd|pv|quota|quotacheck|quotactl|ram|rar|rcp|reboot|remsync|rename|renice|rev|rm|rmdir|rpm|rsync|scp|screen|sdiff|sed|sendmail|seq|service|sftp|sh|shellcheck|shuf|shutdown|sleep|slocate|sort|split|ssh|stat|strace|su|sudo|sum|suspend|swapon|sync|tac|tail|tar|tee|time|timeout|top|touch|tr|traceroute|tsort|tty|umount|uname|unexpand|uniq|units|unrar|unshar|unzip|update-grub|uptime|useradd|userdel|usermod|users|uudecode|uuencode|v|vcpkg|vdir|vi|vim|virsh|vmstat|wait|watch|wc|wget|whereis|which|who|whoami|write|xargs|xdg-open|yarn|yes|zenity|zip|zsh|zypper)(?=$|[)\s;|&])/,lookbehind:!0},keyword:{pattern:/(^|[\s;|&]|[<>]\()(?:case|do|done|elif|else|esac|fi|for|function|if|in|select|then|until|while)(?=$|[)\s;|&])/,lookbehind:!0},builtin:{pattern:/(^|[\s;|&]|[<>]\()(?:\.|:|alias|bind|break|builtin|caller|cd|command|continue|declare|echo|enable|eval|exec|exit|export|getopts|hash|help|let|local|logout|mapfile|printf|pwd|read|readarray|readonly|return|set|shift|shopt|source|test|times|trap|type|typeset|ulimit|umask|unalias|unset)(?=$|[)\s;|&])/,lookbehind:!0,alias:"class-name"},boolean:{pattern:/(^|[\s;|&]|[<>]\()(?:false|true)(?=$|[)\s;|&])/,lookbehind:!0},"file-descriptor":{pattern:/\B&\d\b/,alias:"important"},operator:{pattern:/\d?<>|>\||\+=|=[=~]?|!=?|<<[<-]?|[&\d]?>>|\d[<>]&?|[<>][&=]?|&[>&]?|\|[&|]?/,inside:{"file-descriptor":{pattern:/^\d/,alias:"important"}}},punctuation:/\$?\(\(?|\)\)?|\.\.|[{}[\];\\]/,number:{pattern:/(^|\s)(?:[1-9]\d*|0)(?:[.,]\d+)?\b/,lookbehind:!0}},n.inside=e.languages.bash;for(var a=["comment","function-name","for-or-select","assign-left","string","environment","function","keyword","builtin","boolean","file-descriptor","operator","punctuation","number"],o=r.variable[1].inside,i=0;i<a.length;i++)o[a[i]]=e.languages.bash[a[i]];e.languages.shell=e.languages.bash}(a),a.languages.clike={comment:[{pattern:/(^|[^\\])\/\*[\s\S]*?(?:\*\/|$)/,lookbehind:!0,greedy:!0},{pattern:/(^|[^\\:])\/\/.*/,lookbehind:!0,greedy:!0}],string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|trait)\s+|\bcatch\s+\()[\w.\\]+/i,lookbehind:!0,inside:{punctuation:/[.\\]/}},keyword:/\b(?:break|catch|continue|do|else|finally|for|function|if|in|instanceof|new|null|return|throw|try|while)\b/,boolean:/\b(?:false|true)\b/,function:/\b\w+(?=\()/,number:/\b0x[\da-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?/i,operator:/[<>]=?|[!=]=?=?|--?|\+\+?|&&?|\|\|?|[?*/~^%]/,punctuation:/[{}[\];(),.:]/},a.languages.c=a.languages.extend("clike",{comment:{pattern:/\/\/(?:[^\r\n\\]|\\(?:\r\n?|\n|(?![\r\n])))*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},"class-name":{pattern:/(\b(?:enum|struct)\s+(?:__attribute__\s*\(\([\s\S]*?\)\)\s*)?)\w+|\b[a-z]\w*_t\b/,lookbehind:!0},keyword:/\b(?:_Alignas|_Alignof|_Atomic|_Bool|_Complex|_Generic|_Imaginary|_Noreturn|_Static_assert|_Thread_local|__attribute__|asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|inline|int|long|register|return|short|signed|sizeof|static|struct|switch|typedef|typeof|union|unsigned|void|volatile|while)\b/,function:/\b[a-z_]\w*(?=\s*\()/i,number:/(?:\b0x(?:[\da-f]+(?:\.[\da-f]*)?|\.[\da-f]+)(?:p[+-]?\d+)?|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?)[ful]{0,4}/i,operator:/>>=?|<<=?|->|([-+&|:])\1|[?:~]|[-+*/%&|^!=<>]=?/}),a.languages.insertBefore("c","string",{char:{pattern:/'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n]){0,32}'/,greedy:!0}}),a.languages.insertBefore("c","string",{macro:{pattern:/(^[\t ]*)#\s*[a-z](?:[^\r\n\\/]|\/(?!\*)|\/\*(?:[^*]|\*(?!\/))*\*\/|\\(?:\r\n|[\s\S]))*/im,lookbehind:!0,greedy:!0,alias:"property",inside:{string:[{pattern:/^(#\s*include\s*)<[^>]+>/,lookbehind:!0},a.languages.c.string],char:a.languages.c.char,comment:a.languages.c.comment,"macro-name":[{pattern:/(^#\s*define\s+)\w+\b(?!\()/i,lookbehind:!0},{pattern:/(^#\s*define\s+)\w+\b(?=\()/i,lookbehind:!0,alias:"function"}],directive:{pattern:/^(#\s*)[a-z]+/,lookbehind:!0,alias:"keyword"},"directive-hash":/^#/,punctuation:/##|\\(?=[\r\n])/,expression:{pattern:/\S[\s\S]*/,inside:a.languages.c}}}}),a.languages.insertBefore("c","function",{constant:/\b(?:EOF|NULL|SEEK_CUR|SEEK_END|SEEK_SET|__DATE__|__FILE__|__LINE__|__TIMESTAMP__|__TIME__|__func__|stderr|stdin|stdout)\b/}),delete a.languages.c.boolean,function(e){var t=/\b(?:alignas|alignof|asm|auto|bool|break|case|catch|char|char16_t|char32_t|char8_t|class|co_await|co_return|co_yield|compl|concept|const|const_cast|consteval|constexpr|constinit|continue|decltype|default|delete|do|double|dynamic_cast|else|enum|explicit|export|extern|final|float|for|friend|goto|if|import|inline|int|int16_t|int32_t|int64_t|int8_t|long|module|mutable|namespace|new|noexcept|nullptr|operator|override|private|protected|public|register|reinterpret_cast|requires|return|short|signed|sizeof|static|static_assert|static_cast|struct|switch|template|this|thread_local|throw|try|typedef|typeid|typename|uint16_t|uint32_t|uint64_t|uint8_t|union|unsigned|using|virtual|void|volatile|wchar_t|while)\b/,n=/\b(?!<keyword>)\w+(?:\s*\.\s*\w+)*\b/.source.replace(/<keyword>/g,(function(){return t.source}));e.languages.cpp=e.languages.extend("c",{"class-name":[{pattern:RegExp(/(\b(?:class|concept|enum|struct|typename)\s+)(?!<keyword>)\w+/.source.replace(/<keyword>/g,(function(){return t.source}))),lookbehind:!0},/\b[A-Z]\w*(?=\s*::\s*\w+\s*\()/,/\b[A-Z_]\w*(?=\s*::\s*~\w+\s*\()/i,/\b\w+(?=\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>\s*::\s*\w+\s*\()/],keyword:t,number:{pattern:/(?:\b0b[01']+|\b0x(?:[\da-f']+(?:\.[\da-f']*)?|\.[\da-f']+)(?:p[+-]?[\d']+)?|(?:\b[\d']+(?:\.[\d']*)?|\B\.[\d']+)(?:e[+-]?[\d']+)?)[ful]{0,4}/i,greedy:!0},operator:/>>=?|<<=?|->|--|\+\+|&&|\|\||[?:~]|<=>|[-+*/%&|^!=<>]=?|\b(?:and|and_eq|bitand|bitor|not|not_eq|or|or_eq|xor|xor_eq)\b/,boolean:/\b(?:false|true)\b/}),e.languages.insertBefore("cpp","string",{module:{pattern:RegExp(/(\b(?:import|module)\s+)/.source+"(?:"+/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|<[^<>\r\n]*>/.source+"|"+/<mod-name>(?:\s*:\s*<mod-name>)?|:\s*<mod-name>/.source.replace(/<mod-name>/g,(function(){return n}))+")"),lookbehind:!0,greedy:!0,inside:{string:/^[<"][\s\S]+/,operator:/:/,punctuation:/\./}},"raw-string":{pattern:/R"([^()\\ ]{0,16})\([\s\S]*?\)\1"/,alias:"string",greedy:!0}}),e.languages.insertBefore("cpp","keyword",{"generic-function":{pattern:/\b(?!operator\b)[a-z_]\w*\s*<(?:[^<>]|<[^<>]*>)*>(?=\s*\()/i,inside:{function:/^\w+/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:e.languages.cpp}}}}),e.languages.insertBefore("cpp","operator",{"double-colon":{pattern:/::/,alias:"punctuation"}}),e.languages.insertBefore("cpp","class-name",{"base-clause":{pattern:/(\b(?:class|struct)\s+\w+\s*:\s*)[^;{}"'\s]+(?:\s+[^;{}"'\s]+)*(?=\s*[;{])/,lookbehind:!0,greedy:!0,inside:e.languages.extend("cpp",{})}}),e.languages.insertBefore("inside","double-colon",{"class-name":/\b[a-z_]\w*\b(?!\s*::)/i},e.languages.cpp["base-clause"])}(a),function(e){var t=/(?:"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n])*')/;e.languages.css={comment:/\/\*[\s\S]*?\*\//,atrule:{pattern:/@[\w-](?:[^;{\s]|\s+(?![\s{]))*(?:;|(?=\s*\{))/,inside:{rule:/^@[\w-]+/,"selector-function-argument":{pattern:/(\bselector\s*\(\s*(?![\s)]))(?:[^()\s]|\s+(?![\s)])|\((?:[^()]|\([^()]*\))*\))+(?=\s*\))/,lookbehind:!0,alias:"selector"},keyword:{pattern:/(^|[^\w-])(?:and|not|only|or)(?![\w-])/,lookbehind:!0}}},url:{pattern:RegExp("\\burl\\((?:"+t.source+"|"+/(?:[^\\\r\n()"']|\\[\s\S])*/.source+")\\)","i"),greedy:!0,inside:{function:/^url/i,punctuation:/^\(|\)$/,string:{pattern:RegExp("^"+t.source+"$"),alias:"url"}}},selector:{pattern:RegExp("(^|[{}\\s])[^{}\\s](?:[^{};\"'\\s]|\\s+(?![\\s{])|"+t.source+")*(?=\\s*\\{)"),lookbehind:!0},string:{pattern:t,greedy:!0},property:{pattern:/(^|[^-\w\xA0-\uFFFF])(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*(?=\s*:)/i,lookbehind:!0},important:/!important\b/i,function:{pattern:/(^|[^-a-z0-9])[-a-z0-9]+(?=\()/i,lookbehind:!0},punctuation:/[(){};:,]/},e.languages.css.atrule.inside.rest=e.languages.css;var n=e.languages.markup;n&&(n.tag.addInlined("style","css"),n.tag.addAttribute("style","css"))}(a),function(e){var t,n=/("|')(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/;e.languages.css.selector={pattern:e.languages.css.selector.pattern,lookbehind:!0,inside:t={"pseudo-element":/:(?:after|before|first-letter|first-line|selection)|::[-\w]+/,"pseudo-class":/:[-\w]+/,class:/\.[-\w]+/,id:/#[-\w]+/,attribute:{pattern:RegExp("\\[(?:[^[\\]\"']|"+n.source+")*\\]"),greedy:!0,inside:{punctuation:/^\[|\]$/,"case-sensitivity":{pattern:/(\s)[si]$/i,lookbehind:!0,alias:"keyword"},namespace:{pattern:/^(\s*)(?:(?!\s)[-*\w\xA0-\uFFFF])*\|(?!=)/,lookbehind:!0,inside:{punctuation:/\|$/}},"attr-name":{pattern:/^(\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+/,lookbehind:!0},"attr-value":[n,{pattern:/(=\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+(?=\s*$)/,lookbehind:!0}],operator:/[|~*^$]?=/}},"n-th":[{pattern:/(\(\s*)[+-]?\d*[\dn](?:\s*[+-]\s*\d+)?(?=\s*\))/,lookbehind:!0,inside:{number:/[\dn]+/,operator:/[+-]/}},{pattern:/(\(\s*)(?:even|odd)(?=\s*\))/i,lookbehind:!0}],combinator:/>|\+|~|\|\|/,punctuation:/[(),]/}},e.languages.css.atrule.inside["selector-function-argument"].inside=t,e.languages.insertBefore("css","property",{variable:{pattern:/(^|[^-\w\xA0-\uFFFF])--(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*/i,lookbehind:!0}});var r={pattern:/(\b\d+)(?:%|[a-z]+(?![\w-]))/,lookbehind:!0},a={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0};e.languages.insertBefore("css","function",{operator:{pattern:/(\s)[+\-*\/](?=\s)/,lookbehind:!0},hexcode:{pattern:/\B#[\da-f]{3,8}\b/i,alias:"color"},color:[{pattern:/(^|[^\w-])(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)(?![\w-])/i,lookbehind:!0},{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:r,number:a,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:r,number:a})}(a),a.languages.javascript=a.languages.extend("clike",{"class-name":[a.languages.clike["class-name"],{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$A-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\.(?:constructor|prototype))/,lookbehind:!0}],keyword:[{pattern:/((?:^|\})\s*)catch\b/,lookbehind:!0},{pattern:/(^|[^.]|\.\.\.\s*)\b(?:as|assert(?=\s*\{)|async(?=\s*(?:function\b|\(|[$\w\xA0-\uFFFF]|$))|await|break|case|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally(?=\s*(?:\{|$))|for|from(?=\s*(?:['"]|$))|function|(?:get|set)(?=\s*(?:[#\[$\w\xA0-\uFFFF]|$))|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)\b/,lookbehind:!0}],function:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*(?:\.\s*(?:apply|bind|call)\s*)?\()/,number:{pattern:RegExp(/(^|[^\w$])/.source+"(?:"+/NaN|Infinity/.source+"|"+/0[bB][01]+(?:_[01]+)*n?/.source+"|"+/0[oO][0-7]+(?:_[0-7]+)*n?/.source+"|"+/0[xX][\dA-Fa-f]+(?:_[\dA-Fa-f]+)*n?/.source+"|"+/\d+(?:_\d+)*n/.source+"|"+/(?:\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\.\d+(?:_\d+)*)(?:[Ee][+-]?\d+(?:_\d+)*)?/.source+")"+/(?![\w$])/.source),lookbehind:!0},operator:/--|\+\+|\*\*=?|=>|&&=?|\|\|=?|[!=]==|<<=?|>>>?=?|[-+*/%&|^!=<>]=?|\.{3}|\?\?=?|\?\.?|[~:]/}),a.languages.javascript["class-name"][0].pattern=/(\b(?:class|extends|implements|instanceof|interface|new)\s+)[\w.\\]+/,a.languages.insertBefore("javascript","keyword",{regex:{pattern:/((?:^|[^$\w\xA0-\uFFFF."'\])\s]|\b(?:return|yield))\s*)\/(?:\[(?:[^\]\\\r\n]|\\.)*\]|\\.|[^/\\\[\r\n])+\/[dgimyus]{0,7}(?=(?:\s|\/\*(?:[^*]|\*(?!\/))*\*\/)*(?:$|[\r\n,.;:})\]]|\/\/))/,lookbehind:!0,greedy:!0,inside:{"regex-source":{pattern:/^(\/)[\s\S]+(?=\/[a-z]*$)/,lookbehind:!0,alias:"language-regex",inside:a.languages.regex},"regex-delimiter":/^\/|\/$/,"regex-flags":/^[a-z]+$/}},"function-variable":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*[=:]\s*(?:async\s*)?(?:\bfunction\b|(?:\((?:[^()]|\([^()]*\))*\)|(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)\s*=>))/,alias:"function"},parameter:[{pattern:/(function(?:\s+(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)?\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\))/,lookbehind:!0,inside:a.languages.javascript},{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$a-z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*=>)/i,lookbehind:!0,inside:a.languages.javascript},{pattern:/(\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*=>)/,lookbehind:!0,inside:a.languages.javascript},{pattern:/((?:\b|\s|^)(?!(?:as|async|await|break|case|catch|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally|for|from|function|get|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|set|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)(?![$\w\xA0-\uFFFF]))(?:(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*)\(\s*|\]\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*\{)/,lookbehind:!0,inside:a.languages.javascript}],constant:/\b[A-Z](?:[A-Z_]|\dx?)*\b/}),a.languages.insertBefore("javascript","string",{hashbang:{pattern:/^#!.*/,greedy:!0,alias:"comment"},"template-string":{pattern:/`(?:\\[\s\S]|\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}|(?!\$\{)[^\\`])*`/,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},interpolation:{pattern:/((?:^|[^\\])(?:\\{2})*)\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}/,lookbehind:!0,inside:{"interpolation-punctuation":{pattern:/^\$\{|\}$/,alias:"punctuation"},rest:a.languages.javascript}},string:/[\s\S]+/}},"string-property":{pattern:/((?:^|[,{])[ \t]*)(["'])(?:\\(?:\r\n|[\s\S])|(?!\2)[^\\\r\n])*\2(?=\s*:)/m,lookbehind:!0,greedy:!0,alias:"property"}}),a.languages.insertBefore("javascript","operator",{"literal-property":{pattern:/((?:^|[,{])[ \t]*)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*:)/m,lookbehind:!0,alias:"property"}}),a.languages.markup&&(a.languages.markup.tag.addInlined("script","javascript"),a.languages.markup.tag.addAttribute(/on(?:abort|blur|change|click|composition(?:end|start|update)|dblclick|error|focus(?:in|out)?|key(?:down|up)|load|mouse(?:down|enter|leave|move|out|over|up)|reset|resize|scroll|select|slotchange|submit|unload|wheel)/.source,"javascript")),a.languages.js=a.languages.javascript,function(e){var t=/#(?!\{).+/,n={pattern:/#\{[^}]+\}/,alias:"variable"};e.languages.coffeescript=e.languages.extend("javascript",{comment:t,string:[{pattern:/'(?:\\[\s\S]|[^\\'])*'/,greedy:!0},{pattern:/"(?:\\[\s\S]|[^\\"])*"/,greedy:!0,inside:{interpolation:n}}],keyword:/\b(?:and|break|by|catch|class|continue|debugger|delete|do|each|else|extend|extends|false|finally|for|if|in|instanceof|is|isnt|let|loop|namespace|new|no|not|null|of|off|on|or|own|return|super|switch|then|this|throw|true|try|typeof|undefined|unless|until|when|while|window|with|yes|yield)\b/,"class-member":{pattern:/@(?!\d)\w+/,alias:"variable"}}),e.languages.insertBefore("coffeescript","comment",{"multiline-comment":{pattern:/###[\s\S]+?###/,alias:"comment"},"block-regex":{pattern:/\/{3}[\s\S]*?\/{3}/,alias:"regex",inside:{comment:t,interpolation:n}}}),e.languages.insertBefore("coffeescript","string",{"inline-javascript":{pattern:/`(?:\\[\s\S]|[^\\`])*`/,inside:{delimiter:{pattern:/^`|`$/,alias:"punctuation"},script:{pattern:/[\s\S]+/,alias:"language-javascript",inside:e.languages.javascript}}},"multiline-string":[{pattern:/'''[\s\S]*?'''/,greedy:!0,alias:"string"},{pattern:/"""[\s\S]*?"""/,greedy:!0,alias:"string",inside:{interpolation:n}}]}),e.languages.insertBefore("coffeescript","keyword",{property:/(?!\d)\w+(?=\s*:(?!:))/}),delete e.languages.coffeescript["template-string"],e.languages.coffee=e.languages.coffeescript}(a),function(e){var t=/[*&][^\s[\]{},]+/,n=/!(?:<[\w\-%#;/?:@&=+$,.!~*'()[\]]+>|(?:[a-zA-Z\d-]*!)?[\w\-%#;/?:@&=+$.~*'()]+)?/,r="(?:"+n.source+"(?:[ \t]+"+t.source+")?|"+t.source+"(?:[ \t]+"+n.source+")?)",a=/(?:[^\s\x00-\x08\x0e-\x1f!"#%&'*,\-:>?@[\]`{|}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]|[?:-]<PLAIN>)(?:[ \t]*(?:(?![#:])<PLAIN>|:<PLAIN>))*/.source.replace(/<PLAIN>/g,(function(){return/[^\s\x00-\x08\x0e-\x1f,[\]{}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]/.source})),o=/"(?:[^"\\\r\n]|\\.)*"|'(?:[^'\\\r\n]|\\.)*'/.source;function i(e,t){t=(t||"").replace(/m/g,"")+"m";var n=/([:\-,[{]\s*(?:\s<<prop>>[ \t]+)?)(?:<<value>>)(?=[ \t]*(?:$|,|\]|\}|(?:[\r\n]\s*)?#))/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<value>>/g,(function(){return e}));return RegExp(n,t)}e.languages.yaml={scalar:{pattern:RegExp(/([\-:]\s*(?:\s<<prop>>[ \t]+)?[|>])[ \t]*(?:((?:\r?\n|\r)[ \t]+)\S[^\r\n]*(?:\2[^\r\n]+)*)/.source.replace(/<<prop>>/g,(function(){return r}))),lookbehind:!0,alias:"string"},comment:/#.*/,key:{pattern:RegExp(/((?:^|[:\-,[{\r\n?])[ \t]*(?:<<prop>>[ \t]+)?)<<key>>(?=\s*:\s)/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<key>>/g,(function(){return"(?:"+a+"|"+o+")"}))),lookbehind:!0,greedy:!0,alias:"atrule"},directive:{pattern:/(^[ \t]*)%.+/m,lookbehind:!0,alias:"important"},datetime:{pattern:i(/\d{4}-\d\d?-\d\d?(?:[tT]|[ \t]+)\d\d?:\d{2}:\d{2}(?:\.\d*)?(?:[ \t]*(?:Z|[-+]\d\d?(?::\d{2})?))?|\d{4}-\d{2}-\d{2}|\d\d?:\d{2}(?::\d{2}(?:\.\d*)?)?/.source),lookbehind:!0,alias:"number"},boolean:{pattern:i(/false|true/.source,"i"),lookbehind:!0,alias:"important"},null:{pattern:i(/null|~/.source,"i"),lookbehind:!0,alias:"important"},string:{pattern:i(o),lookbehind:!0,greedy:!0},number:{pattern:i(/[+-]?(?:0x[\da-f]+|0o[0-7]+|(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?|\.inf|\.nan)/.source,"i"),lookbehind:!0},tag:n,important:t,punctuation:/---|[:[\]{}\-,|>?]|\.\.\./},e.languages.yml=e.languages.yaml}(a),function(e){var t=/(?:\\.|[^\\\n\r]|(?:\n|\r\n?)(?![\r\n]))/.source;function n(e){return e=e.replace(/<inner>/g,(function(){return t})),RegExp(/((?:^|[^\\])(?:\\{2})*)/.source+"(?:"+e+")")}var r=/(?:\\.|``(?:[^`\r\n]|`(?!`))+``|`[^`\r\n]+`|[^\\|\r\n`])+/.source,a=/\|?__(?:\|__)+\|?(?:(?:\n|\r\n?)|(?![\s\S]))/.source.replace(/__/g,(function(){return r})),o=/\|?[ \t]*:?-{3,}:?[ \t]*(?:\|[ \t]*:?-{3,}:?[ \t]*)+\|?(?:\n|\r\n?)/.source;e.languages.markdown=e.languages.extend("markup",{}),e.languages.insertBefore("markdown","prolog",{"front-matter-block":{pattern:/(^(?:\s*[\r\n])?)---(?!.)[\s\S]*?[\r\n]---(?!.)/,lookbehind:!0,greedy:!0,inside:{punctuation:/^---|---$/,"front-matter":{pattern:/\S+(?:\s+\S+)*/,alias:["yaml","language-yaml"],inside:e.languages.yaml}}},blockquote:{pattern:/^>(?:[\t ]*>)*/m,alias:"punctuation"},table:{pattern:RegExp("^"+a+o+"(?:"+a+")*","m"),inside:{"table-data-rows":{pattern:RegExp("^("+a+o+")(?:"+a+")*$"),lookbehind:!0,inside:{"table-data":{pattern:RegExp(r),inside:e.languages.markdown},punctuation:/\|/}},"table-line":{pattern:RegExp("^("+a+")"+o+"$"),lookbehind:!0,inside:{punctuation:/\||:?-{3,}:?/}},"table-header-row":{pattern:RegExp("^"+a+"$"),inside:{"table-header":{pattern:RegExp(r),alias:"important",inside:e.languages.markdown},punctuation:/\|/}}}},code:[{pattern:/((?:^|\n)[ \t]*\n|(?:^|\r\n?)[ \t]*\r\n?)(?: {4}|\t).+(?:(?:\n|\r\n?)(?: {4}|\t).+)*/,lookbehind:!0,alias:"keyword"},{pattern:/^```[\s\S]*?^```$/m,greedy:!0,inside:{"code-block":{pattern:/^(```.*(?:\n|\r\n?))[\s\S]+?(?=(?:\n|\r\n?)^```$)/m,lookbehind:!0},"code-language":{pattern:/^(```).+/,lookbehind:!0},punctuation:/```/}}],title:[{pattern:/\S.*(?:\n|\r\n?)(?:==+|--+)(?=[ \t]*$)/m,alias:"important",inside:{punctuation:/==+$|--+$/}},{pattern:/(^\s*)#.+/m,lookbehind:!0,alias:"important",inside:{punctuation:/^#+|#+$/}}],hr:{pattern:/(^\s*)([*-])(?:[\t ]*\2){2,}(?=\s*$)/m,lookbehind:!0,alias:"punctuation"},list:{pattern:/(^\s*)(?:[*+-]|\d+\.)(?=[\t ].)/m,lookbehind:!0,alias:"punctuation"},"url-reference":{pattern:/!?\[[^\]]+\]:[\t ]+(?:\S+|<(?:\\.|[^>\\])+>)(?:[\t ]+(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\)))?/,inside:{variable:{pattern:/^(!?\[)[^\]]+/,lookbehind:!0},string:/(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\))$/,punctuation:/^[\[\]!:]|[<>]/},alias:"url"},bold:{pattern:n(/\b__(?:(?!_)<inner>|_(?:(?!_)<inner>)+_)+__\b|\*\*(?:(?!\*)<inner>|\*(?:(?!\*)<inner>)+\*)+\*\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^..)[\s\S]+(?=..$)/,lookbehind:!0,inside:{}},punctuation:/\*\*|__/}},italic:{pattern:n(/\b_(?:(?!_)<inner>|__(?:(?!_)<inner>)+__)+_\b|\*(?:(?!\*)<inner>|\*\*(?:(?!\*)<inner>)+\*\*)+\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^.)[\s\S]+(?=.$)/,lookbehind:!0,inside:{}},punctuation:/[*_]/}},strike:{pattern:n(/(~~?)(?:(?!~)<inner>)+\2/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^~~?)[\s\S]+(?=\1$)/,lookbehind:!0,inside:{}},punctuation:/~~?/}},"code-snippet":{pattern:/(^|[^\\`])(?:``[^`\r\n]+(?:`[^`\r\n]+)*``(?!`)|`[^`\r\n]+`(?!`))/,lookbehind:!0,greedy:!0,alias:["code","keyword"]},url:{pattern:n(/!?\[(?:(?!\])<inner>)+\](?:\([^\s)]+(?:[\t ]+"(?:\\.|[^"\\])*")?\)|[ \t]?\[(?:(?!\])<inner>)+\])/.source),lookbehind:!0,greedy:!0,inside:{operator:/^!/,content:{pattern:/(^\[)[^\]]+(?=\])/,lookbehind:!0,inside:{}},variable:{pattern:/(^\][ \t]?\[)[^\]]+(?=\]$)/,lookbehind:!0},url:{pattern:/(^\]\()[^\s)]+/,lookbehind:!0},string:{pattern:/(^[ \t]+)"(?:\\.|[^"\\])*"(?=\)$)/,lookbehind:!0}}}}),["url","bold","italic","strike"].forEach((function(t){["url","bold","italic","strike","code-snippet"].forEach((function(n){t!==n&&(e.languages.markdown[t].inside.content.inside[n]=e.languages.markdown[n])}))})),e.hooks.add("after-tokenize",(function(e){"markdown"!==e.language&&"md"!==e.language||function e(t){if(t&&"string"!=typeof t)for(var n=0,r=t.length;n<r;n++){var a=t[n];if("code"===a.type){var o=a.content[1],i=a.content[3];if(o&&i&&"code-language"===o.type&&"code-block"===i.type&&"string"==typeof o.content){var l=o.content.replace(/\b#/g,"sharp").replace(/\b\+\+/g,"pp"),s="language-"+(l=(/[a-z][\w-]*/i.exec(l)||[""])[0].toLowerCase());i.alias?"string"==typeof i.alias?i.alias=[i.alias,s]:i.alias.push(s):i.alias=[s]}}else e(a.content)}}(e.tokens)})),e.hooks.add("wrap",(function(t){if("code-block"===t.type){for(var n="",r=0,a=t.classes.length;r<a;r++){var o=t.classes[r],u=/language-(.+)/.exec(o);if(u){n=u[1];break}}var c,d=e.languages[n];if(d)t.content=e.highlight((c=t.content,c.replace(i,"").replace(/&(\w{1,8}|#x?[\da-f]{1,8});/gi,(function(e,t){var n;if("#"===(t=t.toLowerCase())[0])return n="x"===t[1]?parseInt(t.slice(2),16):Number(t.slice(1)),s(n);var r=l[t];return r||e}))),d,n);else if(n&&"none"!==n&&e.plugins.autoloader){var f="md-"+(new Date).valueOf()+"-"+Math.floor(1e16*Math.random());t.attributes.id=f,e.plugins.autoloader.loadLanguages(n,(function(){var t=document.getElementById(f);t&&(t.innerHTML=e.highlight(t.textContent,e.languages[n],n))}))}}}));var i=RegExp(e.languages.markup.tag.pattern.source,"gi"),l={amp:"&",lt:"<",gt:">",quot:'"'},s=String.fromCodePoint||String.fromCharCode;e.languages.md=e.languages.markdown}(a),a.languages.graphql={comment:/#.*/,description:{pattern:/(?:"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*")(?=\s*[a-z_])/i,greedy:!0,alias:"string",inside:{"language-markdown":{pattern:/(^"(?:"")?)(?!\1)[\s\S]+(?=\1$)/,lookbehind:!0,inside:a.languages.markdown}}},string:{pattern:/"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*"/,greedy:!0},number:/(?:\B-|\b)\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,boolean:/\b(?:false|true)\b/,variable:/\$[a-z_]\w*/i,directive:{pattern:/@[a-z_]\w*/i,alias:"function"},"attr-name":{pattern:/\b[a-z_]\w*(?=\s*(?:\((?:[^()"]|"(?:\\.|[^\\"\r\n])*")*\))?:)/i,greedy:!0},"atom-input":{pattern:/\b[A-Z]\w*Input\b/,alias:"class-name"},scalar:/\b(?:Boolean|Float|ID|Int|String)\b/,constant:/\b[A-Z][A-Z_\d]*\b/,"class-name":{pattern:/(\b(?:enum|implements|interface|on|scalar|type|union)\s+|&\s*|:\s*|\[)[A-Z_]\w*/,lookbehind:!0},fragment:{pattern:/(\bfragment\s+|\.{3}\s*(?!on\b))[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-mutation":{pattern:/(\bmutation\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-query":{pattern:/(\bquery\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},keyword:/\b(?:directive|enum|extend|fragment|implements|input|interface|mutation|on|query|repeatable|scalar|schema|subscription|type|union)\b/,operator:/[!=|&]|\.{3}/,"property-query":/\w+(?=\s*\()/,object:/\w+(?=\s*\{)/,punctuation:/[!(){}\[\]:=,]/,property:/\w+/},a.hooks.add("after-tokenize",(function(e){if("graphql"===e.language)for(var t=e.tokens.filter((function(e){return"string"!=typeof e&&"comment"!==e.type&&"scalar"!==e.type})),n=0;n<t.length;){var r=t[n++];if("keyword"===r.type&&"mutation"===r.content){var a=[];if(d(["definition-mutation","punctuation"])&&"("===c(1).content){n+=2;var o=f(/^\($/,/^\)$/);if(-1===o)continue;for(;n<o;n++){var i=c(0);"variable"===i.type&&(p(i,"variable-input"),a.push(i.content))}n=o+1}if(d(["punctuation","property-query"])&&"{"===c(0).content&&(n++,p(c(0),"property-mutation"),a.length>0)){var l=f(/^\{$/,/^\}$/);if(-1===l)continue;for(var s=n;s<l;s++){var u=t[s];"variable"===u.type&&a.indexOf(u.content)>=0&&p(u,"variable-input")}}}}function c(e){return t[n+e]}function d(e,t){t=t||0;for(var n=0;n<e.length;n++){var r=c(n+t);if(!r||r.type!==e[n])return!1}return!0}function f(e,r){for(var a=1,o=n;o<t.length;o++){var i=t[o],l=i.content;if("punctuation"===i.type&&"string"==typeof l)if(e.test(l))a++;else if(r.test(l)&&0===--a)return o}return-1}function p(e,t){var n=e.alias;n?Array.isArray(n)||(e.alias=n=[n]):e.alias=n=[],n.push(t)}})),a.languages.sql={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|(?:--|\/\/|#).*)/,lookbehind:!0},variable:[{pattern:/@(["'`])(?:\\[\s\S]|(?!\1)[^\\])+\1/,greedy:!0},/@[\w.$]+/],string:{pattern:/(^|[^@\\])("|')(?:\\[\s\S]|(?!\2)[^\\]|\2\2)*\2/,greedy:!0,lookbehind:!0},identifier:{pattern:/(^|[^@\\])`(?:\\[\s\S]|[^`\\]|``)*`/,greedy:!0,lookbehind:!0,inside:{punctuation:/^`|`$/}},function:/\b(?:AVG|COUNT|FIRST|FORMAT|LAST|LCASE|LEN|MAX|MID|MIN|MOD|NOW|ROUND|SUM|UCASE)(?=\s*\()/i,keyword:/\b(?:ACTION|ADD|AFTER|ALGORITHM|ALL|ALTER|ANALYZE|ANY|APPLY|AS|ASC|AUTHORIZATION|AUTO_INCREMENT|BACKUP|BDB|BEGIN|BERKELEYDB|BIGINT|BINARY|BIT|BLOB|BOOL|BOOLEAN|BREAK|BROWSE|BTREE|BULK|BY|CALL|CASCADED?|CASE|CHAIN|CHAR(?:ACTER|SET)?|CHECK(?:POINT)?|CLOSE|CLUSTERED|COALESCE|COLLATE|COLUMNS?|COMMENT|COMMIT(?:TED)?|COMPUTE|CONNECT|CONSISTENT|CONSTRAINT|CONTAINS(?:TABLE)?|CONTINUE|CONVERT|CREATE|CROSS|CURRENT(?:_DATE|_TIME|_TIMESTAMP|_USER)?|CURSOR|CYCLE|DATA(?:BASES?)?|DATE(?:TIME)?|DAY|DBCC|DEALLOCATE|DEC|DECIMAL|DECLARE|DEFAULT|DEFINER|DELAYED|DELETE|DELIMITERS?|DENY|DESC|DESCRIBE|DETERMINISTIC|DISABLE|DISCARD|DISK|DISTINCT|DISTINCTROW|DISTRIBUTED|DO|DOUBLE|DROP|DUMMY|DUMP(?:FILE)?|DUPLICATE|ELSE(?:IF)?|ENABLE|ENCLOSED|END|ENGINE|ENUM|ERRLVL|ERRORS|ESCAPED?|EXCEPT|EXEC(?:UTE)?|EXISTS|EXIT|EXPLAIN|EXTENDED|FETCH|FIELDS|FILE|FILLFACTOR|FIRST|FIXED|FLOAT|FOLLOWING|FOR(?: EACH ROW)?|FORCE|FOREIGN|FREETEXT(?:TABLE)?|FROM|FULL|FUNCTION|GEOMETRY(?:COLLECTION)?|GLOBAL|GOTO|GRANT|GROUP|HANDLER|HASH|HAVING|HOLDLOCK|HOUR|IDENTITY(?:COL|_INSERT)?|IF|IGNORE|IMPORT|INDEX|INFILE|INNER|INNODB|INOUT|INSERT|INT|INTEGER|INTERSECT|INTERVAL|INTO|INVOKER|ISOLATION|ITERATE|JOIN|KEYS?|KILL|LANGUAGE|LAST|LEAVE|LEFT|LEVEL|LIMIT|LINENO|LINES|LINESTRING|LOAD|LOCAL|LOCK|LONG(?:BLOB|TEXT)|LOOP|MATCH(?:ED)?|MEDIUM(?:BLOB|INT|TEXT)|MERGE|MIDDLEINT|MINUTE|MODE|MODIFIES|MODIFY|MONTH|MULTI(?:LINESTRING|POINT|POLYGON)|NATIONAL|NATURAL|NCHAR|NEXT|NO|NONCLUSTERED|NULLIF|NUMERIC|OFF?|OFFSETS?|ON|OPEN(?:DATASOURCE|QUERY|ROWSET)?|OPTIMIZE|OPTION(?:ALLY)?|ORDER|OUT(?:ER|FILE)?|OVER|PARTIAL|PARTITION|PERCENT|PIVOT|PLAN|POINT|POLYGON|PRECEDING|PRECISION|PREPARE|PREV|PRIMARY|PRINT|PRIVILEGES|PROC(?:EDURE)?|PUBLIC|PURGE|QUICK|RAISERROR|READS?|REAL|RECONFIGURE|REFERENCES|RELEASE|RENAME|REPEAT(?:ABLE)?|REPLACE|REPLICATION|REQUIRE|RESIGNAL|RESTORE|RESTRICT|RETURN(?:ING|S)?|REVOKE|RIGHT|ROLLBACK|ROUTINE|ROW(?:COUNT|GUIDCOL|S)?|RTREE|RULE|SAVE(?:POINT)?|SCHEMA|SECOND|SELECT|SERIAL(?:IZABLE)?|SESSION(?:_USER)?|SET(?:USER)?|SHARE|SHOW|SHUTDOWN|SIMPLE|SMALLINT|SNAPSHOT|SOME|SONAME|SQL|START(?:ING)?|STATISTICS|STATUS|STRIPED|SYSTEM_USER|TABLES?|TABLESPACE|TEMP(?:ORARY|TABLE)?|TERMINATED|TEXT(?:SIZE)?|THEN|TIME(?:STAMP)?|TINY(?:BLOB|INT|TEXT)|TOP?|TRAN(?:SACTIONS?)?|TRIGGER|TRUNCATE|TSEQUAL|TYPES?|UNBOUNDED|UNCOMMITTED|UNDEFINED|UNION|UNIQUE|UNLOCK|UNPIVOT|UNSIGNED|UPDATE(?:TEXT)?|USAGE|USE|USER|USING|VALUES?|VAR(?:BINARY|CHAR|CHARACTER|YING)|VIEW|WAITFOR|WARNINGS|WHEN|WHERE|WHILE|WITH(?: ROLLUP|IN)?|WORK|WRITE(?:TEXT)?|YEAR)\b/i,boolean:/\b(?:FALSE|NULL|TRUE)\b/i,number:/\b0x[\da-f]+\b|\b\d+(?:\.\d*)?|\B\.\d+\b/i,operator:/[-+*\/=%^~]|&&?|\|\|?|!=?|<(?:=>?|<|>)?|>[>=]?|\b(?:AND|BETWEEN|DIV|ILIKE|IN|IS|LIKE|NOT|OR|REGEXP|RLIKE|SOUNDS LIKE|XOR)\b/i,punctuation:/[;[\]()`,.]/},function(e){var t=e.languages.javascript["template-string"],n=t.pattern.source,r=t.inside.interpolation,a=r.inside["interpolation-punctuation"],o=r.pattern.source;function i(t,r){if(e.languages[t])return{pattern:RegExp("((?:"+r+")\\s*)"+n),lookbehind:!0,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},"embedded-code":{pattern:/[\s\S]+/,alias:t}}}}function l(e,t){return"___"+t.toUpperCase()+"_"+e+"___"}function s(t,n,r){var a={code:t,grammar:n,language:r};return e.hooks.run("before-tokenize",a),a.tokens=e.tokenize(a.code,a.grammar),e.hooks.run("after-tokenize",a),a.tokens}function u(t){var n={};n["interpolation-punctuation"]=a;var o=e.tokenize(t,n);if(3===o.length){var i=[1,1];i.push.apply(i,s(o[1],e.languages.javascript,"javascript")),o.splice.apply(o,i)}return new e.Token("interpolation",o,r.alias,t)}function c(t,n,r){var a=e.tokenize(t,{interpolation:{pattern:RegExp(o),lookbehind:!0}}),i=0,c={},d=s(a.map((function(e){if("string"==typeof e)return e;for(var n,a=e.content;-1!==t.indexOf(n=l(i++,r)););return c[n]=a,n})).join(""),n,r),f=Object.keys(c);return i=0,function e(t){for(var n=0;n<t.length;n++){if(i>=f.length)return;var r=t[n];if("string"==typeof r||"string"==typeof r.content){var a=f[i],o="string"==typeof r?r:r.content,l=o.indexOf(a);if(-1!==l){++i;var s=o.substring(0,l),d=u(c[a]),p=o.substring(l+a.length),m=[];if(s&&m.push(s),m.push(d),p){var h=[p];e(h),m.push.apply(m,h)}"string"==typeof r?(t.splice.apply(t,[n,1].concat(m)),n+=m.length-1):r.content=m}}else{var g=r.content;Array.isArray(g)?e(g):e([g])}}}(d),new e.Token(r,d,"language-"+r,t)}e.languages.javascript["template-string"]=[i("css",/\b(?:styled(?:\([^)]*\))?(?:\s*\.\s*\w+(?:\([^)]*\))*)*|css(?:\s*\.\s*(?:global|resolve))?|createGlobalStyle|keyframes)/.source),i("html",/\bhtml|\.\s*(?:inner|outer)HTML\s*\+?=/.source),i("svg",/\bsvg/.source),i("markdown",/\b(?:markdown|md)/.source),i("graphql",/\b(?:gql|graphql(?:\s*\.\s*experimental)?)/.source),i("sql",/\bsql/.source),t].filter(Boolean);var d={javascript:!0,js:!0,typescript:!0,ts:!0,jsx:!0,tsx:!0};function f(e){return"string"==typeof e?e:Array.isArray(e)?e.map(f).join(""):f(e.content)}e.hooks.add("after-tokenize",(function(t){t.language in d&&function t(n){for(var r=0,a=n.length;r<a;r++){var o=n[r];if("string"!=typeof o){var i=o.content;if(Array.isArray(i))if("template-string"===o.type){var l=i[1];if(3===i.length&&"string"!=typeof l&&"embedded-code"===l.type){var s=f(l),u=l.alias,d=Array.isArray(u)?u[0]:u,p=e.languages[d];if(!p)continue;i[1]=c(s,p,d)}}else t(i);else"string"!=typeof i&&t([i])}}}(t.tokens)}))}(a),function(e){e.languages.typescript=e.languages.extend("javascript",{"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|type)\s+)(?!keyof\b)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?:\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?/,lookbehind:!0,greedy:!0,inside:null},builtin:/\b(?:Array|Function|Promise|any|boolean|console|never|number|string|symbol|unknown)\b/}),e.languages.typescript.keyword.push(/\b(?:abstract|declare|is|keyof|readonly|require)\b/,/\b(?:asserts|infer|interface|module|namespace|type)\b(?=\s*(?:[{_$a-zA-Z\xA0-\uFFFF]|$))/,/\btype\b(?=\s*(?:[\{*]|$))/),delete e.languages.typescript.parameter,delete e.languages.typescript["literal-property"];var t=e.languages.extend("typescript",{});delete t["class-name"],e.languages.typescript["class-name"].inside=t,e.languages.insertBefore("typescript","function",{decorator:{pattern:/@[$\w\xA0-\uFFFF]+/,inside:{at:{pattern:/^@/,alias:"operator"},function:/^[\s\S]+/}},"generic-function":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>(?=\s*\()/,greedy:!0,inside:{function:/^#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:t}}}}),e.languages.ts=e.languages.typescript}(a),function(e){function t(e,t){return RegExp(e.replace(/<ID>/g,(function(){return/(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/.source})),t)}e.languages.insertBefore("javascript","function-variable",{"method-variable":{pattern:RegExp("(\\.\\s*)"+e.languages.javascript["function-variable"].pattern.source),lookbehind:!0,alias:["function-variable","method","function","property-access"]}}),e.languages.insertBefore("javascript","function",{method:{pattern:RegExp("(\\.\\s*)"+e.languages.javascript.function.source),lookbehind:!0,alias:["function","property-access"]}}),e.languages.insertBefore("javascript","constant",{"known-class-name":[{pattern:/\b(?:(?:Float(?:32|64)|(?:Int|Uint)(?:8|16|32)|Uint8Clamped)?Array|ArrayBuffer|BigInt|Boolean|DataView|Date|Error|Function|Intl|JSON|(?:Weak)?(?:Map|Set)|Math|Number|Object|Promise|Proxy|Reflect|RegExp|String|Symbol|WebAssembly)\b/,alias:"class-name"},{pattern:/\b(?:[A-Z]\w*)Error\b/,alias:"class-name"}]}),e.languages.insertBefore("javascript","keyword",{imports:{pattern:t(/(\bimport\b\s*)(?:<ID>(?:\s*,\s*(?:\*\s*as\s+<ID>|\{[^{}]*\}))?|\*\s*as\s+<ID>|\{[^{}]*\})(?=\s*\bfrom\b)/.source),lookbehind:!0,inside:e.languages.javascript},exports:{pattern:t(/(\bexport\b\s*)(?:\*(?:\s*as\s+<ID>)?(?=\s*\bfrom\b)|\{[^{}]*\})/.source),lookbehind:!0,inside:e.languages.javascript}}),e.languages.javascript.keyword.unshift({pattern:/\b(?:as|default|export|from|import)\b/,alias:"module"},{pattern:/\b(?:await|break|catch|continue|do|else|finally|for|if|return|switch|throw|try|while|yield)\b/,alias:"control-flow"},{pattern:/\bnull\b/,alias:["null","nil"]},{pattern:/\bundefined\b/,alias:"nil"}),e.languages.insertBefore("javascript","operator",{spread:{pattern:/\.{3}/,alias:"operator"},arrow:{pattern:/=>/,alias:"operator"}}),e.languages.insertBefore("javascript","punctuation",{"property-access":{pattern:t(/(\.\s*)#?<ID>/.source),lookbehind:!0},"maybe-class-name":{pattern:/(^|[^$\w\xA0-\uFFFF])[A-Z][$\w\xA0-\uFFFF]+/,lookbehind:!0},dom:{pattern:/\b(?:document|(?:local|session)Storage|location|navigator|performance|window)\b/,alias:"variable"},console:{pattern:/\bconsole(?=\s*\.)/,alias:"class-name"}});for(var n=["function","function-variable","method","method-variable","property-access"],r=0;r<n.length;r++){var a=n[r],o=e.languages.javascript[a];"RegExp"===e.util.type(o)&&(o=e.languages.javascript[a]={pattern:o});var i=o.inside||{};o.inside=i,i["maybe-class-name"]=/^[A-Z][\s\S]*/}}(a),function(e){var t=e.util.clone(e.languages.javascript),n=/(?:\s|\/\/.*(?!.)|\/\*(?:[^*]|\*(?!\/))\*\/)/.source,r=/(?:\{(?:\{(?:\{[^{}]*\}|[^{}])*\}|[^{}])*\})/.source,a=/(?:\{<S>*\.{3}(?:[^{}]|<BRACES>)*\})/.source;function o(e,t){return e=e.replace(/<S>/g,(function(){return n})).replace(/<BRACES>/g,(function(){return r})).replace(/<SPREAD>/g,(function(){return a})),RegExp(e,t)}a=o(a).source,e.languages.jsx=e.languages.extend("markup",t),e.languages.jsx.tag.pattern=o(/<\/?(?:[\w.:-]+(?:<S>+(?:[\w.:$-]+(?:=(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s{'"/>=]+|<BRACES>))?|<SPREAD>))*<S>*\/?)?>/.source),e.languages.jsx.tag.inside.tag.pattern=/^<\/?[^\s>\/]*/,e.languages.jsx.tag.inside["attr-value"].pattern=/=(?!\{)(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s'">]+)/,e.languages.jsx.tag.inside.tag.inside["class-name"]=/^[A-Z]\w*(?:\.[A-Z]\w*)*$/,e.languages.jsx.tag.inside.comment=t.comment,e.languages.insertBefore("inside","attr-name",{spread:{pattern:o(/<SPREAD>/.source),inside:e.languages.jsx}},e.languages.jsx.tag),e.languages.insertBefore("inside","special-attr",{script:{pattern:o(/=<BRACES>/.source),alias:"language-javascript",inside:{"script-punctuation":{pattern:/^=(?=\{)/,alias:"punctuation"},rest:e.languages.jsx}}},e.languages.jsx.tag);var i=function(e){return e?"string"==typeof e?e:"string"==typeof e.content?e.content:e.content.map(i).join(""):""},l=function(t){for(var n=[],r=0;r<t.length;r++){var a=t[r],o=!1;if("string"!=typeof a&&("tag"===a.type&&a.content[0]&&"tag"===a.content[0].type?"</"===a.content[0].content[0].content?n.length>0&&n[n.length-1].tagName===i(a.content[0].content[1])&&n.pop():"/>"===a.content[a.content.length-1].content||n.push({tagName:i(a.content[0].content[1]),openedBraces:0}):n.length>0&&"punctuation"===a.type&&"{"===a.content?n[n.length-1].openedBraces++:n.length>0&&n[n.length-1].openedBraces>0&&"punctuation"===a.type&&"}"===a.content?n[n.length-1].openedBraces--:o=!0),(o||"string"==typeof a)&&n.length>0&&0===n[n.length-1].openedBraces){var s=i(a);r<t.length-1&&("string"==typeof t[r+1]||"plain-text"===t[r+1].type)&&(s+=i(t[r+1]),t.splice(r+1,1)),r>0&&("string"==typeof t[r-1]||"plain-text"===t[r-1].type)&&(s=i(t[r-1])+s,t.splice(r-1,1),r--),t[r]=new e.Token("plain-text",s,null,s)}a.content&&"string"!=typeof a.content&&l(a.content)}};e.hooks.add("after-tokenize",(function(e){"jsx"!==e.language&&"tsx"!==e.language||l(e.tokens)}))}(a),function(e){e.languages.diff={coord:[/^(?:\*{3}|-{3}|\+{3}).*$/m,/^@@.*@@$/m,/^\d.*$/m]};var t={"deleted-sign":"-","deleted-arrow":"<","inserted-sign":"+","inserted-arrow":">",unchanged:" ",diff:"!"};Object.keys(t).forEach((function(n){var r=t[n],a=[];/^\w+$/.test(n)||a.push(/\w+/.exec(n)[0]),"diff"===n&&a.push("bold"),e.languages.diff[n]={pattern:RegExp("^(?:["+r+"].*(?:\r\n?|\n|(?![\\s\\S])))+","m"),alias:a,inside:{line:{pattern:/(.)(?=[\s\S]).*(?:\r\n?|\n)?/,lookbehind:!0},prefix:{pattern:/[\s\S]/,alias:/\w+/.exec(n)[0]}}}})),Object.defineProperty(e.languages.diff,"PREFIXES",{value:t})}(a),a.languages.git={comment:/^#.*/m,deleted:/^[-\u2013].*/m,inserted:/^\+.*/m,string:/("|')(?:\\.|(?!\1)[^\\\r\n])*\1/,command:{pattern:/^.*\$ git .*$/m,inside:{parameter:/\s--?\w+/}},coord:/^@@.*@@$/m,"commit-sha1":/^commit \w{40}$/m},a.languages.go=a.languages.extend("clike",{string:{pattern:/(^|[^\\])"(?:\\.|[^"\\\r\n])*"|`[^`]*`/,lookbehind:!0,greedy:!0},keyword:/\b(?:break|case|chan|const|continue|default|defer|else|fallthrough|for|func|go(?:to)?|if|import|interface|map|package|range|return|select|struct|switch|type|var)\b/,boolean:/\b(?:_|false|iota|nil|true)\b/,number:[/\b0(?:b[01_]+|o[0-7_]+)i?\b/i,/\b0x(?:[a-f\d_]+(?:\.[a-f\d_]*)?|\.[a-f\d_]+)(?:p[+-]?\d+(?:_\d+)*)?i?(?!\w)/i,/(?:\b\d[\d_]*(?:\.[\d_]*)?|\B\.\d[\d_]*)(?:e[+-]?[\d_]+)?i?(?!\w)/i],operator:/[*\/%^!=]=?|\+[=+]?|-[=-]?|\|[=|]?|&(?:=|&|\^=?)?|>(?:>=?|=)?|<(?:<=?|=|-)?|:=|\.\.\./,builtin:/\b(?:append|bool|byte|cap|close|complex|complex(?:64|128)|copy|delete|error|float(?:32|64)|u?int(?:8|16|32|64)?|imag|len|make|new|panic|print(?:ln)?|real|recover|rune|string|uintptr)\b/}),a.languages.insertBefore("go","string",{char:{pattern:/'(?:\\.|[^'\\\r\n]){0,10}'/,greedy:!0}}),delete a.languages.go["class-name"],function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,a,o){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(a,(function(e){if("function"==typeof o&&!o(e))return e;for(var a,l=i.length;-1!==n.code.indexOf(a=t(r,l));)++l;return i[l]=e,a})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var a=0,o=Object.keys(n.tokenStack);!function i(l){for(var s=0;s<l.length&&!(a>=o.length);s++){var u=l[s];if("string"==typeof u||u.content&&"string"==typeof u.content){var c=o[a],d=n.tokenStack[c],f="string"==typeof u?u:u.content,p=t(r,c),m=f.indexOf(p);if(m>-1){++a;var h=f.substring(0,m),g=new e.Token(r,e.tokenize(d,n.grammar),"language-"+r,d),b=f.substring(m+p.length),v=[];h&&v.push.apply(v,i([h])),v.push(g),b&&v.push.apply(v,i([b])),"string"==typeof u?l.splice.apply(l,[s,1].concat(v)):u.content=v}}else u.content&&i(u.content)}return l}(n.tokens)}}}})}(a),function(e){e.languages.handlebars={comment:/\{\{![\s\S]*?\}\}/,delimiter:{pattern:/^\{\{\{?|\}\}\}?$/,alias:"punctuation"},string:/(["'])(?:\\.|(?!\1)[^\\\r\n])*\1/,number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee][+-]?\d+)?/,boolean:/\b(?:false|true)\b/,block:{pattern:/^(\s*(?:~\s*)?)[#\/]\S+?(?=\s*(?:~\s*)?$|\s)/,lookbehind:!0,alias:"keyword"},brackets:{pattern:/\[[^\]]+\]/,inside:{punctuation:/\[|\]/,variable:/[\s\S]+/}},punctuation:/[!"#%&':()*+,.\/;<=>@\[\\\]^`{|}~]/,variable:/[^!"#%&'()*+,\/;<=>@\[\\\]^`{|}~\s]+/},e.hooks.add("before-tokenize",(function(t){e.languages["markup-templating"].buildPlaceholders(t,"handlebars",/\{\{\{[\s\S]+?\}\}\}|\{\{[\s\S]+?\}\}/g)})),e.hooks.add("after-tokenize",(function(t){e.languages["markup-templating"].tokenizePlaceholders(t,"handlebars")})),e.languages.hbs=e.languages.handlebars}(a),a.languages.json={property:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?=\s*:)/,lookbehind:!0,greedy:!0},string:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?!\s*:)/,lookbehind:!0,greedy:!0},comment:{pattern:/\/\/.*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},number:/-?\b\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,punctuation:/[{}[\],]/,operator:/:/,boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"}},a.languages.webmanifest=a.languages.json,a.languages.less=a.languages.extend("css",{comment:[/\/\*[\s\S]*?\*\//,{pattern:/(^|[^\\])\/\/.*/,lookbehind:!0}],atrule:{pattern:/@[\w-](?:\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{punctuation:/[:()]/}},selector:{pattern:/(?:@\{[\w-]+\}|[^{};\s@])(?:@\{[\w-]+\}|\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};@\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{variable:/@+[\w-]+/}},property:/(?:@\{[\w-]+\}|[\w-])+(?:\+_?)?(?=\s*:)/,operator:/[+\-*\/]/}),a.languages.insertBefore("less","property",{variable:[{pattern:/@[\w-]+\s*:/,inside:{punctuation:/:/}},/@@?[\w-]+/],"mixin-usage":{pattern:/([{;]\s*)[.#](?!\d)[\w-].*?(?=[(;])/,lookbehind:!0,alias:"function"}}),a.languages.makefile={comment:{pattern:/(^|[^\\])#(?:\\(?:\r\n|[\s\S])|[^\\\r\n])*/,lookbehind:!0},string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"builtin-target":{pattern:/\.[A-Z][^:#=\s]+(?=\s*:(?!=))/,alias:"builtin"},target:{pattern:/^(?:[^:=\s]|[ \t]+(?![\s:]))+(?=\s*:(?!=))/m,alias:"symbol",inside:{variable:/\$+(?:(?!\$)[^(){}:#=\s]+|(?=[({]))/}},variable:/\$+(?:(?!\$)[^(){}:#=\s]+|\([@*%<^+?][DF]\)|(?=[({]))/,keyword:/-include\b|\b(?:define|else|endef|endif|export|ifn?def|ifn?eq|include|override|private|sinclude|undefine|unexport|vpath)\b/,function:{pattern:/(\()(?:abspath|addsuffix|and|basename|call|dir|error|eval|file|filter(?:-out)?|findstring|firstword|flavor|foreach|guile|if|info|join|lastword|load|notdir|or|origin|patsubst|realpath|shell|sort|strip|subst|suffix|value|warning|wildcard|word(?:list|s)?)(?=[ \t])/,lookbehind:!0},operator:/(?:::|[?:+!])?=|[|@]/,punctuation:/[:;(){}]/},a.languages.objectivec=a.languages.extend("c",{string:{pattern:/@?"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},keyword:/\b(?:asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|in|inline|int|long|register|return|self|short|signed|sizeof|static|struct|super|switch|typedef|typeof|union|unsigned|void|volatile|while)\b|(?:@interface|@end|@implementation|@protocol|@class|@public|@protected|@private|@property|@try|@catch|@finally|@throw|@synthesize|@dynamic|@selector)\b/,operator:/-[->]?|\+\+?|!=?|<<?=?|>>?=?|==?|&&?|\|\|?|[~^%?*\/@]/}),delete a.languages.objectivec["class-name"],a.languages.objc=a.languages.objectivec,a.languages.ocaml={comment:{pattern:/\(\*[\s\S]*?\*\)/,greedy:!0},char:{pattern:/'(?:[^\\\r\n']|\\(?:.|[ox]?[0-9a-f]{1,3}))'/i,greedy:!0},string:[{pattern:/"(?:\\(?:[\s\S]|\r\n)|[^\\\r\n"])*"/,greedy:!0},{pattern:/\{([a-z_]*)\|[\s\S]*?\|\1\}/,greedy:!0}],number:[/\b(?:0b[01][01_]*|0o[0-7][0-7_]*)\b/i,/\b0x[a-f0-9][a-f0-9_]*(?:\.[a-f0-9_]*)?(?:p[+-]?\d[\d_]*)?(?!\w)/i,/\b\d[\d_]*(?:\.[\d_]*)?(?:e[+-]?\d[\d_]*)?(?!\w)/i],directive:{pattern:/\B#\w+/,alias:"property"},label:{pattern:/\B~\w+/,alias:"property"},"type-variable":{pattern:/\B'\w+/,alias:"function"},variant:{pattern:/`\w+/,alias:"symbol"},keyword:/\b(?:as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|match|method|module|mutable|new|nonrec|object|of|open|private|rec|sig|struct|then|to|try|type|val|value|virtual|when|where|while|with)\b/,boolean:/\b(?:false|true)\b/,"operator-like-punctuation":{pattern:/\[[<>|]|[>|]\]|\{<|>\}/,alias:"punctuation"},operator:/\.[.~]|:[=>]|[=<>@^|&+\-*\/$%!?~][!$%&*+\-.\/:<=>?@^|~]*|\b(?:and|asr|land|lor|lsl|lsr|lxor|mod|or)\b/,punctuation:/;;|::|[(){}\[\].,:;#]|\b_\b/},a.languages.python={comment:{pattern:/(^|[^\\])#.*/,lookbehind:!0,greedy:!0},"string-interpolation":{pattern:/(?:f|fr|rf)(?:("""|''')[\s\S]*?\1|("|')(?:\\.|(?!\2)[^\\\r\n])*\2)/i,greedy:!0,inside:{interpolation:{pattern:/((?:^|[^{])(?:\{\{)*)\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}])+\})+\})+\}/,lookbehind:!0,inside:{"format-spec":{pattern:/(:)[^:(){}]+(?=\}$)/,lookbehind:!0},"conversion-option":{pattern:/![sra](?=[:}]$)/,alias:"punctuation"},rest:null}},string:/[\s\S]+/}},"triple-quoted-string":{pattern:/(?:[rub]|br|rb)?("""|''')[\s\S]*?\1/i,greedy:!0,alias:"string"},string:{pattern:/(?:[rub]|br|rb)?("|')(?:\\.|(?!\1)[^\\\r\n])*\1/i,greedy:!0},function:{pattern:/((?:^|\s)def[ \t]+)[a-zA-Z_]\w*(?=\s*\()/g,lookbehind:!0},"class-name":{pattern:/(\bclass\s+)\w+/i,lookbehind:!0},decorator:{pattern:/(^[\t ]*)@\w+(?:\.\w+)*/m,lookbehind:!0,alias:["annotation","punctuation"],inside:{punctuation:/\./}},keyword:/\b(?:_(?=\s*:)|and|as|assert|async|await|break|case|class|continue|def|del|elif|else|except|exec|finally|for|from|global|if|import|in|is|lambda|match|nonlocal|not|or|pass|print|raise|return|try|while|with|yield)\b/,builtin:/\b(?:__import__|abs|all|any|apply|ascii|basestring|bin|bool|buffer|bytearray|bytes|callable|chr|classmethod|cmp|coerce|compile|complex|delattr|dict|dir|divmod|enumerate|eval|execfile|file|filter|float|format|frozenset|getattr|globals|hasattr|hash|help|hex|id|input|int|intern|isinstance|issubclass|iter|len|list|locals|long|map|max|memoryview|min|next|object|oct|open|ord|pow|property|range|raw_input|reduce|reload|repr|reversed|round|set|setattr|slice|sorted|staticmethod|str|sum|super|tuple|type|unichr|unicode|vars|xrange|zip)\b/,boolean:/\b(?:False|None|True)\b/,number:/\b0(?:b(?:_?[01])+|o(?:_?[0-7])+|x(?:_?[a-f0-9])+)\b|(?:\b\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\B\.\d+(?:_\d+)*)(?:e[+-]?\d+(?:_\d+)*)?j?(?!\w)/i,operator:/[-+%=]=?|!=|:=|\*\*?=?|\/\/?=?|<[<=>]?|>[=>]?|[&|^~]/,punctuation:/[{}[\];(),.:]/},a.languages.python["string-interpolation"].inside.interpolation.inside.rest=a.languages.python,a.languages.py=a.languages.python,a.languages.reason=a.languages.extend("clike",{string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^\\\r\n"])*"/,greedy:!0},"class-name":/\b[A-Z]\w*/,keyword:/\b(?:and|as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|method|module|mutable|new|nonrec|object|of|open|or|private|rec|sig|struct|switch|then|to|try|type|val|virtual|when|while|with)\b/,operator:/\.{3}|:[:=]|\|>|->|=(?:==?|>)?|<=?|>=?|[|^?'#!~`]|[+\-*\/]\.?|\b(?:asr|land|lor|lsl|lsr|lxor|mod)\b/}),a.languages.insertBefore("reason","class-name",{char:{pattern:/'(?:\\x[\da-f]{2}|\\o[0-3][0-7][0-7]|\\\d{3}|\\.|[^'\\\r\n])'/,greedy:!0},constructor:/\b[A-Z]\w*\b(?!\s*\.)/,label:{pattern:/\b[a-z]\w*(?=::)/,alias:"symbol"}}),delete a.languages.reason.function,function(e){e.languages.sass=e.languages.extend("css",{comment:{pattern:/^([ \t]*)\/[\/*].*(?:(?:\r?\n|\r)\1[ \t].+)*/m,lookbehind:!0,greedy:!0}}),e.languages.insertBefore("sass","atrule",{"atrule-line":{pattern:/^(?:[ \t]*)[@+=].+/m,greedy:!0,inside:{atrule:/(?:@[\w-]+|[+=])/}}}),delete e.languages.sass.atrule;var t=/\$[-\w]+|#\{\$[-\w]+\}/,n=[/[+*\/%]|[=!]=|<=?|>=?|\b(?:and|not|or)\b/,{pattern:/(\s)-(?=\s)/,lookbehind:!0}];e.languages.insertBefore("sass","property",{"variable-line":{pattern:/^[ \t]*\$.+/m,greedy:!0,inside:{punctuation:/:/,variable:t,operator:n}},"property-line":{pattern:/^[ \t]*(?:[^:\s]+ *:.*|:[^:\s].*)/m,greedy:!0,inside:{property:[/[^:\s]+(?=\s*:)/,{pattern:/(:)[^:\s]+/,lookbehind:!0}],punctuation:/:/,variable:t,operator:n,important:e.languages.sass.important}}}),delete e.languages.sass.property,delete e.languages.sass.important,e.languages.insertBefore("sass","punctuation",{selector:{pattern:/^([ \t]*)\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*(?:,(?:\r?\n|\r)\1[ \t]+\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*)*/m,lookbehind:!0,greedy:!0}})}(a),a.languages.scss=a.languages.extend("css",{comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},atrule:{pattern:/@[\w-](?:\([^()]+\)|[^()\s]|\s+(?!\s))*?(?=\s+[{;])/,inside:{rule:/@[\w-]+/}},url:/(?:[-a-z]+-)?url(?=\()/i,selector:{pattern:/(?=\S)[^@;{}()]?(?:[^@;{}()\s]|\s+(?!\s)|#\{\$[-\w]+\})+(?=\s*\{(?:\}|\s|[^}][^:{}]*[:{][^}]))/,inside:{parent:{pattern:/&/,alias:"important"},placeholder:/%[-\w]+/,variable:/\$[-\w]+|#\{\$[-\w]+\}/}},property:{pattern:/(?:[-\w]|\$[-\w]|#\{\$[-\w]+\})+(?=\s*:)/,inside:{variable:/\$[-\w]+|#\{\$[-\w]+\}/}}}),a.languages.insertBefore("scss","atrule",{keyword:[/@(?:content|debug|each|else(?: if)?|extend|for|forward|function|if|import|include|mixin|return|use|warn|while)\b/i,{pattern:/( )(?:from|through)(?= )/,lookbehind:!0}]}),a.languages.insertBefore("scss","important",{variable:/\$[-\w]+|#\{\$[-\w]+\}/}),a.languages.insertBefore("scss","function",{"module-modifier":{pattern:/\b(?:as|hide|show|with)\b/i,alias:"keyword"},placeholder:{pattern:/%[-\w]+/,alias:"selector"},statement:{pattern:/\B!(?:default|optional)\b/i,alias:"keyword"},boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"},operator:{pattern:/(\s)(?:[-+*\/%]|[=!]=|<=?|>=?|and|not|or)(?=\s)/,lookbehind:!0}}),a.languages.scss.atrule.inside.rest=a.languages.scss,function(e){var t={pattern:/(\b\d+)(?:%|[a-z]+)/,lookbehind:!0},n={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0},r={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},url:{pattern:/\burl\((["']?).*?\1\)/i,greedy:!0},string:{pattern:/("|')(?:(?!\1)[^\\\r\n]|\\(?:\r\n|[\s\S]))*\1/,greedy:!0},interpolation:null,func:null,important:/\B!(?:important|optional)\b/i,keyword:{pattern:/(^|\s+)(?:(?:else|for|if|return|unless)(?=\s|$)|@[\w-]+)/,lookbehind:!0},hexcode:/#[\da-f]{3,6}/i,color:[/\b(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)\b/i,{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:t,number:n,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:t,boolean:/\b(?:false|true)\b/,operator:[/~|[+!\/%<>?=]=?|[-:]=|\*[*=]?|\.{2,3}|&&|\|\||\B-\B|\b(?:and|in|is(?: a| defined| not|nt)?|not|or)\b/],number:n,punctuation:/[{}()\[\];:,]/};r.interpolation={pattern:/\{[^\r\n}:]+\}/,alias:"variable",inside:{delimiter:{pattern:/^\{|\}$/,alias:"punctuation"},rest:r}},r.func={pattern:/[\w-]+\([^)]*\).*/,inside:{function:/^[^(]+/,rest:r}},e.languages.stylus={"atrule-declaration":{pattern:/(^[ \t]*)@.+/m,lookbehind:!0,inside:{atrule:/^@[\w-]+/,rest:r}},"variable-declaration":{pattern:/(^[ \t]*)[\w$-]+\s*.?=[ \t]*(?:\{[^{}]*\}|\S.*|$)/m,lookbehind:!0,inside:{variable:/^\S+/,rest:r}},statement:{pattern:/(^[ \t]*)(?:else|for|if|return|unless)[ \t].+/m,lookbehind:!0,inside:{keyword:/^\S+/,rest:r}},"property-declaration":{pattern:/((?:^|\{)([ \t]*))(?:[\w-]|\{[^}\r\n]+\})+(?:\s*:\s*|[ \t]+)(?!\s)[^{\r\n]*(?:;|[^{\r\n,]$(?!(?:\r?\n|\r)(?:\{|\2[ \t])))/m,lookbehind:!0,inside:{property:{pattern:/^[^\s:]+/,inside:{interpolation:r.interpolation}},rest:r}},selector:{pattern:/(^[ \t]*)(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)(?:(?:\r?\n|\r)(?:\1(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)))*(?:,$|\{|(?=(?:\r?\n|\r)(?:\{|\1[ \t])))/m,lookbehind:!0,inside:{interpolation:r.interpolation,comment:r.comment,punctuation:/[{},]/}},func:r.func,string:r.string,comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0,greedy:!0},interpolation:r.interpolation,punctuation:/[{}()\[\];:.]/}}(a),function(e){var t=e.util.clone(e.languages.typescript);e.languages.tsx=e.languages.extend("jsx",t),delete e.languages.tsx.parameter,delete e.languages.tsx["literal-property"];var n=e.languages.tsx.tag;n.pattern=RegExp(/(^|[^\w$]|(?=<\/))/.source+"(?:"+n.pattern.source+")",n.pattern.flags),n.lookbehind=!0}(a),a.languages.wasm={comment:[/\(;[\s\S]*?;\)/,{pattern:/;;.*/,greedy:!0}],string:{pattern:/"(?:\\[\s\S]|[^"\\])*"/,greedy:!0},keyword:[{pattern:/\b(?:align|offset)=/,inside:{operator:/=/}},{pattern:/\b(?:(?:f32|f64|i32|i64)(?:\.(?:abs|add|and|ceil|clz|const|convert_[su]\/i(?:32|64)|copysign|ctz|demote\/f64|div(?:_[su])?|eqz?|extend_[su]\/i32|floor|ge(?:_[su])?|gt(?:_[su])?|le(?:_[su])?|load(?:(?:8|16|32)_[su])?|lt(?:_[su])?|max|min|mul|neg?|nearest|or|popcnt|promote\/f32|reinterpret\/[fi](?:32|64)|rem_[su]|rot[lr]|shl|shr_[su]|sqrt|store(?:8|16|32)?|sub|trunc(?:_[su]\/f(?:32|64))?|wrap\/i64|xor))?|memory\.(?:grow|size))\b/,inside:{punctuation:/\./}},/\b(?:anyfunc|block|br(?:_if|_table)?|call(?:_indirect)?|data|drop|elem|else|end|export|func|get_(?:global|local)|global|if|import|local|loop|memory|module|mut|nop|offset|param|result|return|select|set_(?:global|local)|start|table|tee_local|then|type|unreachable)\b/],variable:/\$[\w!#$%&'*+\-./:<=>?@\\^`|~]+/,number:/[+-]?\b(?:\d(?:_?\d)*(?:\.\d(?:_?\d)*)?(?:[eE][+-]?\d(?:_?\d)*)?|0x[\da-fA-F](?:_?[\da-fA-F])*(?:\.[\da-fA-F](?:_?[\da-fA-D])*)?(?:[pP][+-]?\d(?:_?\d)*)?)\b|\binf\b|\bnan(?::0x[\da-fA-F](?:_?[\da-fA-D])*)?\b/,punctuation:/[()]/};const o=a},9901:e=>{e.exports&&(e.exports={core:{meta:{path:"components/prism-core.js",option:"mandatory"},core:"Core"},themes:{meta:{path:"themes/{id}.css",link:"index.html?theme={id}",exclusive:!0},prism:{title:"Default",option:"default"},"prism-dark":"Dark","prism-funky":"Funky","prism-okaidia":{title:"Okaidia",owner:"ocodia"},"prism-twilight":{title:"Twilight",owner:"remybach"},"prism-coy":{title:"Coy",owner:"tshedor"},"prism-solarizedlight":{title:"Solarized Light",owner:"hectormatos2011 "},"prism-tomorrow":{title:"Tomorrow Night",owner:"Rosey"}},languages:{meta:{path:"components/prism-{id}",noCSS:!0,examplesPath:"examples/prism-{id}",addCheckAll:!0},markup:{title:"Markup",alias:["html","xml","svg","mathml","ssml","atom","rss"],aliasTitles:{html:"HTML",xml:"XML",svg:"SVG",mathml:"MathML",ssml:"SSML",atom:"Atom",rss:"RSS"},option:"default"},css:{title:"CSS",option:"default",modify:"markup"},clike:{title:"C-like",option:"default"},javascript:{title:"JavaScript",require:"clike",modify:"markup",optional:"regex",alias:"js",option:"default"},abap:{title:"ABAP",owner:"dellagustin"},abnf:{title:"ABNF",owner:"RunDevelopment"},actionscript:{title:"ActionScript",require:"javascript",modify:"markup",owner:"Golmote"},ada:{title:"Ada",owner:"Lucretia"},agda:{title:"Agda",owner:"xy-ren"},al:{title:"AL",owner:"RunDevelopment"},antlr4:{title:"ANTLR4",alias:"g4",owner:"RunDevelopment"},apacheconf:{title:"Apache Configuration",owner:"GuiTeK"},apex:{title:"Apex",require:["clike","sql"],owner:"RunDevelopment"},apl:{title:"APL",owner:"ngn"},applescript:{title:"AppleScript",owner:"Golmote"},aql:{title:"AQL",owner:"RunDevelopment"},arduino:{title:"Arduino",require:"cpp",alias:"ino",owner:"dkern"},arff:{title:"ARFF",owner:"Golmote"},armasm:{title:"ARM Assembly",alias:"arm-asm",owner:"RunDevelopment"},arturo:{title:"Arturo",alias:"art",optional:["bash","css","javascript","markup","markdown","sql"],owner:"drkameleon"},asciidoc:{alias:"adoc",title:"AsciiDoc",owner:"Golmote"},aspnet:{title:"ASP.NET (C#)",require:["markup","csharp"],owner:"nauzilus"},asm6502:{title:"6502 Assembly",owner:"kzurawel"},asmatmel:{title:"Atmel AVR Assembly",owner:"cerkit"},autohotkey:{title:"AutoHotkey",owner:"aviaryan"},autoit:{title:"AutoIt",owner:"Golmote"},avisynth:{title:"AviSynth",alias:"avs",owner:"Zinfidel"},"avro-idl":{title:"Avro IDL",alias:"avdl",owner:"RunDevelopment"},awk:{title:"AWK",alias:"gawk",aliasTitles:{gawk:"GAWK"},owner:"RunDevelopment"},bash:{title:"Bash",alias:["sh","shell"],aliasTitles:{sh:"Shell",shell:"Shell"},owner:"zeitgeist87"},basic:{title:"BASIC",owner:"Golmote"},batch:{title:"Batch",owner:"Golmote"},bbcode:{title:"BBcode",alias:"shortcode",aliasTitles:{shortcode:"Shortcode"},owner:"RunDevelopment"},bbj:{title:"BBj",owner:"hyyan"},bicep:{title:"Bicep",owner:"johnnyreilly"},birb:{title:"Birb",require:"clike",owner:"Calamity210"},bison:{title:"Bison",require:"c",owner:"Golmote"},bnf:{title:"BNF",alias:"rbnf",aliasTitles:{rbnf:"RBNF"},owner:"RunDevelopment"},bqn:{title:"BQN",owner:"yewscion"},brainfuck:{title:"Brainfuck",owner:"Golmote"},brightscript:{title:"BrightScript",owner:"RunDevelopment"},bro:{title:"Bro",owner:"wayward710"},bsl:{title:"BSL (1C:Enterprise)",alias:"oscript",aliasTitles:{oscript:"OneScript"},owner:"Diversus23"},c:{title:"C",require:"clike",owner:"zeitgeist87"},csharp:{title:"C#",require:"clike",alias:["cs","dotnet"],owner:"mvalipour"},cpp:{title:"C++",require:"c",owner:"zeitgeist87"},cfscript:{title:"CFScript",require:"clike",alias:"cfc",owner:"mjclemente"},chaiscript:{title:"ChaiScript",require:["clike","cpp"],owner:"RunDevelopment"},cil:{title:"CIL",owner:"sbrl"},cilkc:{title:"Cilk/C",require:"c",alias:"cilk-c",owner:"OpenCilk"},cilkcpp:{title:"Cilk/C++",require:"cpp",alias:["cilk-cpp","cilk"],owner:"OpenCilk"},clojure:{title:"Clojure",owner:"troglotit"},cmake:{title:"CMake",owner:"mjrogozinski"},cobol:{title:"COBOL",owner:"RunDevelopment"},coffeescript:{title:"CoffeeScript",require:"javascript",alias:"coffee",owner:"R-osey"},concurnas:{title:"Concurnas",alias:"conc",owner:"jasontatton"},csp:{title:"Content-Security-Policy",owner:"ScottHelme"},cooklang:{title:"Cooklang",owner:"ahue"},coq:{title:"Coq",owner:"RunDevelopment"},crystal:{title:"Crystal",require:"ruby",owner:"MakeNowJust"},"css-extras":{title:"CSS Extras",require:"css",modify:"css",owner:"milesj"},csv:{title:"CSV",owner:"RunDevelopment"},cue:{title:"CUE",owner:"RunDevelopment"},cypher:{title:"Cypher",owner:"RunDevelopment"},d:{title:"D",require:"clike",owner:"Golmote"},dart:{title:"Dart",require:"clike",owner:"Golmote"},dataweave:{title:"DataWeave",owner:"machaval"},dax:{title:"DAX",owner:"peterbud"},dhall:{title:"Dhall",owner:"RunDevelopment"},diff:{title:"Diff",owner:"uranusjr"},django:{title:"Django/Jinja2",require:"markup-templating",alias:"jinja2",owner:"romanvm"},"dns-zone-file":{title:"DNS zone file",owner:"RunDevelopment",alias:"dns-zone"},docker:{title:"Docker",alias:"dockerfile",owner:"JustinBeckwith"},dot:{title:"DOT (Graphviz)",alias:"gv",optional:"markup",owner:"RunDevelopment"},ebnf:{title:"EBNF",owner:"RunDevelopment"},editorconfig:{title:"EditorConfig",owner:"osipxd"},eiffel:{title:"Eiffel",owner:"Conaclos"},ejs:{title:"EJS",require:["javascript","markup-templating"],owner:"RunDevelopment",alias:"eta",aliasTitles:{eta:"Eta"}},elixir:{title:"Elixir",owner:"Golmote"},elm:{title:"Elm",owner:"zwilias"},etlua:{title:"Embedded Lua templating",require:["lua","markup-templating"],owner:"RunDevelopment"},erb:{title:"ERB",require:["ruby","markup-templating"],owner:"Golmote"},erlang:{title:"Erlang",owner:"Golmote"},"excel-formula":{title:"Excel Formula",alias:["xlsx","xls"],owner:"RunDevelopment"},fsharp:{title:"F#",require:"clike",owner:"simonreynolds7"},factor:{title:"Factor",owner:"catb0t"},false:{title:"False",owner:"edukisto"},"firestore-security-rules":{title:"Firestore security rules",require:"clike",owner:"RunDevelopment"},flow:{title:"Flow",require:"javascript",owner:"Golmote"},fortran:{title:"Fortran",owner:"Golmote"},ftl:{title:"FreeMarker Template Language",require:"markup-templating",owner:"RunDevelopment"},gml:{title:"GameMaker Language",alias:"gamemakerlanguage",require:"clike",owner:"LiarOnce"},gap:{title:"GAP (CAS)",owner:"RunDevelopment"},gcode:{title:"G-code",owner:"RunDevelopment"},gdscript:{title:"GDScript",owner:"RunDevelopment"},gedcom:{title:"GEDCOM",owner:"Golmote"},gettext:{title:"gettext",alias:"po",owner:"RunDevelopment"},gherkin:{title:"Gherkin",owner:"hason"},git:{title:"Git",owner:"lgiraudel"},glsl:{title:"GLSL",require:"c",owner:"Golmote"},gn:{title:"GN",alias:"gni",owner:"RunDevelopment"},"linker-script":{title:"GNU Linker Script",alias:"ld",owner:"RunDevelopment"},go:{title:"Go",require:"clike",owner:"arnehormann"},"go-module":{title:"Go module",alias:"go-mod",owner:"RunDevelopment"},gradle:{title:"Gradle",require:"clike",owner:"zeabdelkhalek-badido18"},graphql:{title:"GraphQL",optional:"markdown",owner:"Golmote"},groovy:{title:"Groovy",require:"clike",owner:"robfletcher"},haml:{title:"Haml",require:"ruby",optional:["css","css-extras","coffeescript","erb","javascript","less","markdown","scss","textile"],owner:"Golmote"},handlebars:{title:"Handlebars",require:"markup-templating",alias:["hbs","mustache"],aliasTitles:{mustache:"Mustache"},owner:"Golmote"},haskell:{title:"Haskell",alias:"hs",owner:"bholst"},haxe:{title:"Haxe",require:"clike",optional:"regex",owner:"Golmote"},hcl:{title:"HCL",owner:"outsideris"},hlsl:{title:"HLSL",require:"c",owner:"RunDevelopment"},hoon:{title:"Hoon",owner:"matildepark"},http:{title:"HTTP",optional:["csp","css","hpkp","hsts","javascript","json","markup","uri"],owner:"danielgtaylor"},hpkp:{title:"HTTP Public-Key-Pins",owner:"ScottHelme"},hsts:{title:"HTTP Strict-Transport-Security",owner:"ScottHelme"},ichigojam:{title:"IchigoJam",owner:"BlueCocoa"},icon:{title:"Icon",owner:"Golmote"},"icu-message-format":{title:"ICU Message Format",owner:"RunDevelopment"},idris:{title:"Idris",alias:"idr",owner:"KeenS",require:"haskell"},ignore:{title:".ignore",owner:"osipxd",alias:["gitignore","hgignore","npmignore"],aliasTitles:{gitignore:".gitignore",hgignore:".hgignore",npmignore:".npmignore"}},inform7:{title:"Inform 7",owner:"Golmote"},ini:{title:"Ini",owner:"aviaryan"},io:{title:"Io",owner:"AlesTsurko"},j:{title:"J",owner:"Golmote"},java:{title:"Java",require:"clike",owner:"sherblot"},javadoc:{title:"JavaDoc",require:["markup","java","javadoclike"],modify:"java",optional:"scala",owner:"RunDevelopment"},javadoclike:{title:"JavaDoc-like",modify:["java","javascript","php"],owner:"RunDevelopment"},javastacktrace:{title:"Java stack trace",owner:"RunDevelopment"},jexl:{title:"Jexl",owner:"czosel"},jolie:{title:"Jolie",require:"clike",owner:"thesave"},jq:{title:"JQ",owner:"RunDevelopment"},jsdoc:{title:"JSDoc",require:["javascript","javadoclike","typescript"],modify:"javascript",optional:["actionscript","coffeescript"],owner:"RunDevelopment"},"js-extras":{title:"JS Extras",require:"javascript",modify:"javascript",optional:["actionscript","coffeescript","flow","n4js","typescript"],owner:"RunDevelopment"},json:{title:"JSON",alias:"webmanifest",aliasTitles:{webmanifest:"Web App Manifest"},owner:"CupOfTea696"},json5:{title:"JSON5",require:"json",owner:"RunDevelopment"},jsonp:{title:"JSONP",require:"json",owner:"RunDevelopment"},jsstacktrace:{title:"JS stack trace",owner:"sbrl"},"js-templates":{title:"JS Templates",require:"javascript",modify:"javascript",optional:["css","css-extras","graphql","markdown","markup","sql"],owner:"RunDevelopment"},julia:{title:"Julia",owner:"cdagnino"},keepalived:{title:"Keepalived Configure",owner:"dev-itsheng"},keyman:{title:"Keyman",owner:"mcdurdin"},kotlin:{title:"Kotlin",alias:["kt","kts"],aliasTitles:{kts:"Kotlin Script"},require:"clike",owner:"Golmote"},kumir:{title:"KuMir (\u041a\u0443\u041c\u0438\u0440)",alias:"kum",owner:"edukisto"},kusto:{title:"Kusto",owner:"RunDevelopment"},latex:{title:"LaTeX",alias:["tex","context"],aliasTitles:{tex:"TeX",context:"ConTeXt"},owner:"japborst"},latte:{title:"Latte",require:["clike","markup-templating","php"],owner:"nette"},less:{title:"Less",require:"css",optional:"css-extras",owner:"Golmote"},lilypond:{title:"LilyPond",require:"scheme",alias:"ly",owner:"RunDevelopment"},liquid:{title:"Liquid",require:"markup-templating",owner:"cinhtau"},lisp:{title:"Lisp",alias:["emacs","elisp","emacs-lisp"],owner:"JuanCaicedo"},livescript:{title:"LiveScript",owner:"Golmote"},llvm:{title:"LLVM IR",owner:"porglezomp"},log:{title:"Log file",optional:"javastacktrace",owner:"RunDevelopment"},lolcode:{title:"LOLCODE",owner:"Golmote"},lua:{title:"Lua",owner:"Golmote"},magma:{title:"Magma (CAS)",owner:"RunDevelopment"},makefile:{title:"Makefile",owner:"Golmote"},markdown:{title:"Markdown",require:"markup",optional:"yaml",alias:"md",owner:"Golmote"},"markup-templating":{title:"Markup templating",require:"markup",owner:"Golmote"},mata:{title:"Mata",owner:"RunDevelopment"},matlab:{title:"MATLAB",owner:"Golmote"},maxscript:{title:"MAXScript",owner:"RunDevelopment"},mel:{title:"MEL",owner:"Golmote"},mermaid:{title:"Mermaid",owner:"RunDevelopment"},metafont:{title:"METAFONT",owner:"LaeriExNihilo"},mizar:{title:"Mizar",owner:"Golmote"},mongodb:{title:"MongoDB",owner:"airs0urce",require:"javascript"},monkey:{title:"Monkey",owner:"Golmote"},moonscript:{title:"MoonScript",alias:"moon",owner:"RunDevelopment"},n1ql:{title:"N1QL",owner:"TMWilds"},n4js:{title:"N4JS",require:"javascript",optional:"jsdoc",alias:"n4jsd",owner:"bsmith-n4"},"nand2tetris-hdl":{title:"Nand To Tetris HDL",owner:"stephanmax"},naniscript:{title:"Naninovel Script",owner:"Elringus",alias:"nani"},nasm:{title:"NASM",owner:"rbmj"},neon:{title:"NEON",owner:"nette"},nevod:{title:"Nevod",owner:"nezaboodka"},nginx:{title:"nginx",owner:"volado"},nim:{title:"Nim",owner:"Golmote"},nix:{title:"Nix",owner:"Golmote"},nsis:{title:"NSIS",owner:"idleberg"},objectivec:{title:"Objective-C",require:"c",alias:"objc",owner:"uranusjr"},ocaml:{title:"OCaml",owner:"Golmote"},odin:{title:"Odin",owner:"edukisto"},opencl:{title:"OpenCL",require:"c",modify:["c","cpp"],owner:"Milania1"},openqasm:{title:"OpenQasm",alias:"qasm",owner:"RunDevelopment"},oz:{title:"Oz",owner:"Golmote"},parigp:{title:"PARI/GP",owner:"Golmote"},parser:{title:"Parser",require:"markup",owner:"Golmote"},pascal:{title:"Pascal",alias:"objectpascal",aliasTitles:{objectpascal:"Object Pascal"},owner:"Golmote"},pascaligo:{title:"Pascaligo",owner:"DefinitelyNotAGoat"},psl:{title:"PATROL Scripting Language",owner:"bertysentry"},pcaxis:{title:"PC-Axis",alias:"px",owner:"RunDevelopment"},peoplecode:{title:"PeopleCode",alias:"pcode",owner:"RunDevelopment"},perl:{title:"Perl",owner:"Golmote"},php:{title:"PHP",require:"markup-templating",owner:"milesj"},phpdoc:{title:"PHPDoc",require:["php","javadoclike"],modify:"php",owner:"RunDevelopment"},"php-extras":{title:"PHP Extras",require:"php",modify:"php",owner:"milesj"},"plant-uml":{title:"PlantUML",alias:"plantuml",owner:"RunDevelopment"},plsql:{title:"PL/SQL",require:"sql",owner:"Golmote"},powerquery:{title:"PowerQuery",alias:["pq","mscript"],owner:"peterbud"},powershell:{title:"PowerShell",owner:"nauzilus"},processing:{title:"Processing",require:"clike",owner:"Golmote"},prolog:{title:"Prolog",owner:"Golmote"},promql:{title:"PromQL",owner:"arendjr"},properties:{title:".properties",owner:"Golmote"},protobuf:{title:"Protocol Buffers",require:"clike",owner:"just-boris"},pug:{title:"Pug",require:["markup","javascript"],optional:["coffeescript","ejs","handlebars","less","livescript","markdown","scss","stylus","twig"],owner:"Golmote"},puppet:{title:"Puppet",owner:"Golmote"},pure:{title:"Pure",optional:["c","cpp","fortran"],owner:"Golmote"},purebasic:{title:"PureBasic",require:"clike",alias:"pbfasm",owner:"HeX0R101"},purescript:{title:"PureScript",require:"haskell",alias:"purs",owner:"sriharshachilakapati"},python:{title:"Python",alias:"py",owner:"multipetros"},qsharp:{title:"Q#",require:"clike",alias:"qs",owner:"fedonman"},q:{title:"Q (kdb+ database)",owner:"Golmote"},qml:{title:"QML",require:"javascript",owner:"RunDevelopment"},qore:{title:"Qore",require:"clike",owner:"temnroegg"},r:{title:"R",owner:"Golmote"},racket:{title:"Racket",require:"scheme",alias:"rkt",owner:"RunDevelopment"},cshtml:{title:"Razor C#",alias:"razor",require:["markup","csharp"],optional:["css","css-extras","javascript","js-extras"],owner:"RunDevelopment"},jsx:{title:"React JSX",require:["markup","javascript"],optional:["jsdoc","js-extras","js-templates"],owner:"vkbansal"},tsx:{title:"React TSX",require:["jsx","typescript"]},reason:{title:"Reason",require:"clike",owner:"Golmote"},regex:{title:"Regex",owner:"RunDevelopment"},rego:{title:"Rego",owner:"JordanSh"},renpy:{title:"Ren'py",alias:"rpy",owner:"HyuchiaDiego"},rescript:{title:"ReScript",alias:"res",owner:"vmarcosp"},rest:{title:"reST (reStructuredText)",owner:"Golmote"},rip:{title:"Rip",owner:"ravinggenius"},roboconf:{title:"Roboconf",owner:"Golmote"},robotframework:{title:"Robot Framework",alias:"robot",owner:"RunDevelopment"},ruby:{title:"Ruby",require:"clike",alias:"rb",owner:"samflores"},rust:{title:"Rust",owner:"Golmote"},sas:{title:"SAS",optional:["groovy","lua","sql"],owner:"Golmote"},sass:{title:"Sass (Sass)",require:"css",optional:"css-extras",owner:"Golmote"},scss:{title:"Sass (SCSS)",require:"css",optional:"css-extras",owner:"MoOx"},scala:{title:"Scala",require:"java",owner:"jozic"},scheme:{title:"Scheme",owner:"bacchus123"},"shell-session":{title:"Shell session",require:"bash",alias:["sh-session","shellsession"],owner:"RunDevelopment"},smali:{title:"Smali",owner:"RunDevelopment"},smalltalk:{title:"Smalltalk",owner:"Golmote"},smarty:{title:"Smarty",require:"markup-templating",optional:"php",owner:"Golmote"},sml:{title:"SML",alias:"smlnj",aliasTitles:{smlnj:"SML/NJ"},owner:"RunDevelopment"},solidity:{title:"Solidity (Ethereum)",alias:"sol",require:"clike",owner:"glachaud"},"solution-file":{title:"Solution file",alias:"sln",owner:"RunDevelopment"},soy:{title:"Soy (Closure Template)",require:"markup-templating",owner:"Golmote"},sparql:{title:"SPARQL",require:"turtle",owner:"Triply-Dev",alias:"rq"},"splunk-spl":{title:"Splunk SPL",owner:"RunDevelopment"},sqf:{title:"SQF: Status Quo Function (Arma 3)",require:"clike",owner:"RunDevelopment"},sql:{title:"SQL",owner:"multipetros"},squirrel:{title:"Squirrel",require:"clike",owner:"RunDevelopment"},stan:{title:"Stan",owner:"RunDevelopment"},stata:{title:"Stata Ado",require:["mata","java","python"],owner:"RunDevelopment"},iecst:{title:"Structured Text (IEC 61131-3)",owner:"serhioromano"},stylus:{title:"Stylus",owner:"vkbansal"},supercollider:{title:"SuperCollider",alias:"sclang",owner:"RunDevelopment"},swift:{title:"Swift",owner:"chrischares"},systemd:{title:"Systemd configuration file",owner:"RunDevelopment"},"t4-templating":{title:"T4 templating",owner:"RunDevelopment"},"t4-cs":{title:"T4 Text Templates (C#)",require:["t4-templating","csharp"],alias:"t4",owner:"RunDevelopment"},"t4-vb":{title:"T4 Text Templates (VB)",require:["t4-templating","vbnet"],owner:"RunDevelopment"},tap:{title:"TAP",owner:"isaacs",require:"yaml"},tcl:{title:"Tcl",owner:"PeterChaplin"},tt2:{title:"Template Toolkit 2",require:["clike","markup-templating"],owner:"gflohr"},textile:{title:"Textile",require:"markup",optional:"css",owner:"Golmote"},toml:{title:"TOML",owner:"RunDevelopment"},tremor:{title:"Tremor",alias:["trickle","troy"],owner:"darach",aliasTitles:{trickle:"trickle",troy:"troy"}},turtle:{title:"Turtle",alias:"trig",aliasTitles:{trig:"TriG"},owner:"jakubklimek"},twig:{title:"Twig",require:"markup-templating",owner:"brandonkelly"},typescript:{title:"TypeScript",require:"javascript",optional:"js-templates",alias:"ts",owner:"vkbansal"},typoscript:{title:"TypoScript",alias:"tsconfig",aliasTitles:{tsconfig:"TSConfig"},owner:"dkern"},unrealscript:{title:"UnrealScript",alias:["uscript","uc"],owner:"RunDevelopment"},uorazor:{title:"UO Razor Script",owner:"jaseowns"},uri:{title:"URI",alias:"url",aliasTitles:{url:"URL"},owner:"RunDevelopment"},v:{title:"V",require:"clike",owner:"taggon"},vala:{title:"Vala",require:"clike",optional:"regex",owner:"TemplarVolk"},vbnet:{title:"VB.Net",require:"basic",owner:"Bigsby"},velocity:{title:"Velocity",require:"markup",owner:"Golmote"},verilog:{title:"Verilog",owner:"a-rey"},vhdl:{title:"VHDL",owner:"a-rey"},vim:{title:"vim",owner:"westonganger"},"visual-basic":{title:"Visual Basic",alias:["vb","vba"],aliasTitles:{vba:"VBA"},owner:"Golmote"},warpscript:{title:"WarpScript",owner:"RunDevelopment"},wasm:{title:"WebAssembly",owner:"Golmote"},"web-idl":{title:"Web IDL",alias:"webidl",owner:"RunDevelopment"},wgsl:{title:"WGSL",owner:"Dr4gonthree"},wiki:{title:"Wiki markup",require:"markup",owner:"Golmote"},wolfram:{title:"Wolfram language",alias:["mathematica","nb","wl"],aliasTitles:{mathematica:"Mathematica",nb:"Mathematica Notebook"},owner:"msollami"},wren:{title:"Wren",owner:"clsource"},xeora:{title:"Xeora",require:"markup",alias:"xeoracube",aliasTitles:{xeoracube:"XeoraCube"},owner:"freakmaxi"},"xml-doc":{title:"XML doc (.net)",require:"markup",modify:["csharp","fsharp","vbnet"],owner:"RunDevelopment"},xojo:{title:"Xojo (REALbasic)",owner:"Golmote"},xquery:{title:"XQuery",require:"markup",owner:"Golmote"},yaml:{title:"YAML",alias:"yml",owner:"hason"},yang:{title:"YANG",owner:"RunDevelopment"},zig:{title:"Zig",owner:"RunDevelopment"}},plugins:{meta:{path:"plugins/{id}/prism-{id}",link:"plugins/{id}/"},"line-highlight":{title:"Line Highlight",description:"Highlights specific lines and/or line ranges."},"line-numbers":{title:"Line Numbers",description:"Line number at the beginning of code lines.",owner:"kuba-kubula"},"show-invisibles":{title:"Show Invisibles",description:"Show hidden characters such as tabs and line breaks.",optional:["autolinker","data-uri-highlight"]},autolinker:{title:"Autolinker",description:"Converts URLs and emails in code to clickable links. Parses Markdown links in comments."},wpd:{title:"WebPlatform Docs",description:'Makes tokens link to <a href="https://webplatform.github.io/docs/">WebPlatform.org documentation</a>. The links open in a new tab.'},"custom-class":{title:"Custom Class",description:"This plugin allows you to prefix Prism's default classes (<code>.comment</code> can become <code>.namespace--comment</code>) or replace them with your defined ones (like <code>.editor__comment</code>). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the <code>highlightAll</code> and <code>highlightAllUnder</code> methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},2885:(e,t,n)=>{const r=n(9901),a=n(9642),o=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...o,...Object.keys(Prism.languages)];a(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(6500).resolve(t)],delete Prism.languages[e],n(6500)(t),o.add(e)}))}i.silent=!1,e.exports=i},6726:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6726},6500:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6500},9642:e=>{"use strict";var t=function(){var e=function(){};function t(e,t){Array.isArray(e)?e.forEach(t):null!=e&&t(e,0)}function n(e){for(var t={},n=0,r=e.length;n<r;n++)t[e[n]]=!0;return t}function r(e){var n={},r=[];function a(r,o){if(!(r in n)){o.push(r);var i=o.indexOf(r);if(i<o.length-1)throw new Error("Circular dependency: "+o.slice(i).join(" -> "));var l={},s=e[r];if(s){function u(t){if(!(t in e))throw new Error(r+" depends on an unknown component "+t);if(!(t in l))for(var i in a(t,o),l[t]=!0,n[t])l[i]=!0}t(s.require,u),t(s.optional,u),t(s.modify,u)}n[r]=l,o.pop()}}return function(e){var t=n[e];return t||(a(e,r),t=n[e]),t}}function a(e){for(var t in e)return!0;return!1}return function(o,i,l){var s=function(e){var t={};for(var n in e){var r=e[n];for(var a in r)if("meta"!=a){var o=r[a];t[a]="string"==typeof o?{title:o}:o}}return t}(o),u=function(e){var n;return function(r){if(r in e)return r;if(!n)for(var a in n={},e){var o=e[a];t(o&&o.alias,(function(t){if(t in n)throw new Error(t+" cannot be alias for both "+a+" and "+n[t]);if(t in e)throw new Error(t+" cannot be alias of "+a+" because it is a component.");n[t]=a}))}return n[r]||r}}(s);i=i.map(u),l=(l||[]).map(u);var c=n(i),d=n(l);i.forEach((function e(n){var r=s[n];t(r&&r.require,(function(t){t in d||(c[t]=!0,e(t))}))}));for(var f,p=r(s),m=c;a(m);){for(var h in f={},m){var g=s[h];t(g&&g.modify,(function(e){e in d&&(f[e]=!0)}))}for(var b in d)if(!(b in c))for(var v in p(b))if(v in c){f[b]=!0;break}for(var y in m=f)c[y]=!0}var w={getIds:function(){var e=[];return w.load((function(t){e.push(t)})),e},load:function(t,n){return function(t,n,r,a){var o=a?a.series:void 0,i=a?a.parallel:e,l={},s={};function u(e){if(e in l)return l[e];s[e]=!0;var a,c=[];for(var d in t(e))d in n&&c.push(d);if(0===c.length)a=r(e);else{var f=i(c.map((function(e){var t=u(e);return delete s[e],t})));o?a=o(f,(function(){return r(e)})):r(e)}return l[e]=a}for(var c in n)u(c);var d=[];for(var f in s)d.push(l[f]);return i(d)}(p,c,t,n)}};return w}}();e.exports=t},2703:(e,t,n)=>{"use strict";var r=n(414);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,i){if(i!==r){var l=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw l.name="Invariant Violation",l}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},5697:(e,t,n)=>{e.exports=n(2703)()},414:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},4448:(e,t,n)=>{"use strict";var r=n(7294),a=n(7418),o=n(3840);function i(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(i(227));var l=new Set,s={};function u(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(s[e]=t,e=0;e<t.length;e++)l.add(t[e])}var d=!("undefined"==typeof window||void 0===window.document||void 0===window.document.createElement),f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p=Object.prototype.hasOwnProperty,m={},h={};function g(e,t,n,r,a,o,i){this.acceptsBooleans=2===t||3===t||4===t,this.attributeName=r,this.attributeNamespace=a,this.mustUseProperty=n,this.propertyName=e,this.type=t,this.sanitizeURL=o,this.removeEmptyString=i}var b={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach((function(e){b[e]=new g(e,0,!1,e,null,!1,!1)})),[["acceptCharset","accept-charset"],["className","class"],["htmlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];b[t]=new g(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){b[e]=new g(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach((function(e){b[e]=new g(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach((function(e){b[e]=new g(e,3,!1,e.toLowerCase(),null,!1,!1)})),["checked","multiple","muted","selected"].forEach((function(e){b[e]=new g(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){b[e]=new g(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){b[e]=new g(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((function(e){b[e]=new g(e,5,!1,e.toLowerCase(),null,!1,!1)}));var v=/[\-:]([a-z])/g;function y(e){return e[1].toUpperCase()}function w(e,t,n,r){var a=b.hasOwnProperty(t)?b[t]:null;(null!==a?0===a.type:!r&&(2<t.length&&("o"===t[0]||"O"===t[0])&&("n"===t[1]||"N"===t[1])))||(function(e,t,n,r){if(null==t||function(e,t,n,r){if(null!==n&&0===n.type)return!1;switch(typeof t){case"function":case"symbol":return!0;case"boolean":return!r&&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)||1>t}return!1}(t,n,a,r)&&(n=null),r||null===a?function(e){return!!p.call(h,e)||!p.call(m,e)&&(f.test(e)?h[e]=!0:(m[e]=!0,!1))}(t)&&(null===n?e.removeAttribute(t):e.setAttribute(t,""+n)):a.mustUseProperty?e[a.propertyName]=null===n?3!==a.type&&"":n:(t=a.attributeName,r=a.attributeNamespace,null===n?e.removeAttribute(t):(n=3===(a=a.type)||4===a&&!0===n?"":""+n,r?e.setAttributeNS(r,t,n):e.setAttribute(t,n))))}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-position overline-thickness paint-order panose-1 pointer-events rendering-intent shape-rendering stop-color stop-opacity strikethrough-position strikethrough-thickness stroke-dasharray stroke-dashoffset stroke-linecap stroke-linejoin stroke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole xlink:role xlink:show xlink:title xlink:type".split(" ").forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){b[e]=new g(e,1,!1,e.toLowerCase(),null,!1,!1)})),b.xlinkHref=new g("xlinkHref",1,!1,"xlink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){b[e]=new g(e,1,!1,e.toLowerCase(),null,!0,!0)}));var k=r.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,E=60103,S=60106,x=60107,C=60108,_=60114,T=60109,A=60110,L=60112,R=60113,N=60120,P=60115,O=60116,I=60121,D=60128,M=60129,F=60130,B=60131;if("function"==typeof Symbol&&Symbol.for){var j=Symbol.for;E=j("react.element"),S=j("react.portal"),x=j("react.fragment"),C=j("react.strict_mode"),_=j("react.profiler"),T=j("react.provider"),A=j("react.context"),L=j("react.forward_ref"),R=j("react.suspense"),N=j("react.suspense_list"),P=j("react.memo"),O=j("react.lazy"),I=j("react.block"),j("react.scope"),D=j("react.opaque.id"),M=j("react.debug_trace_mode"),F=j("react.offscreen"),B=j("react.legacy_hidden")}var z,U="function"==typeof Symbol&&Symbol.iterator;function $(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=U&&e[U]||e["@@iterator"])?e:null}function q(e){if(void 0===z)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);z=t&&t[1]||""}return"\n"+z+e}var H=!1;function G(e,t){if(!e||H)return"";H=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.construct(t,[])}catch(s){var r=s}Reflect.construct(e,[],t)}else{try{t.call()}catch(s){r=s}e.call(t.prototype)}else{try{throw Error()}catch(s){r=s}e()}}catch(s){if(s&&r&&"string"==typeof s.stack){for(var a=s.stack.split("\n"),o=r.stack.split("\n"),i=a.length-1,l=o.length-1;1<=i&&0<=l&&a[i]!==o[l];)l--;for(;1<=i&&0<=l;i--,l--)if(a[i]!==o[l]){if(1!==i||1!==l)do{if(i--,0>--l||a[i]!==o[l])return"\n"+a[i].replace(" at new "," at ")}while(1<=i&&0<=l);break}}}finally{H=!1,Error.prepareStackTrace=n}return(e=e?e.displayName||e.name:"")?q(e):""}function Z(e){switch(e.tag){case 5:return q(e.type);case 16:return q("Lazy");case 13:return q("Suspense");case 19:return q("SuspenseList");case 0:case 2:case 15:return e=G(e.type,!1);case 11:return e=G(e.type.render,!1);case 22:return e=G(e.type._render,!1);case 1:return e=G(e.type,!0);default:return""}}function V(e){if(null==e)return null;if("function"==typeof e)return e.displayName||e.name||null;if("string"==typeof e)return e;switch(e){case x:return"Fragment";case S:return"Portal";case _:return"Profiler";case C:return"StrictMode";case R:return"Suspense";case N:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case A:return(e.displayName||"Context")+".Consumer";case T:return(e._context.displayName||"Context")+".Provider";case L:var t=e.render;return t=t.displayName||t.name||"",e.displayName||(""!==t?"ForwardRef("+t+")":"ForwardRef");case P:return V(e.type);case I:return V(e._render);case O:t=e._payload,e=e._init;try{return V(e(t))}catch(n){}}return null}function W(e){switch(typeof e){case"boolean":case"number":case"object":case"string":case"undefined":return e;default:return""}}function K(e){var t=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===t||"radio"===t)}function Y(e){e._valueTracker||(e._valueTracker=function(e){var t=K(e)?"checked":"value",n=Object.getOwnPropertyDescriptor(e.constructor.prototype,t),r=""+e[t];if(!e.hasOwnProperty(t)&&void 0!==n&&"function"==typeof n.get&&"function"==typeof n.set){var a=n.get,o=n.set;return Object.defineProperty(e,t,{configurable:!0,get:function(){return a.call(this)},set:function(e){r=""+e,o.call(this,e)}}),Object.defineProperty(e,t,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[t]}}}}(e))}function Q(e){if(!e)return!1;var t=e._valueTracker;if(!t)return!0;var n=t.getValue(),r="";return e&&(r=K(e)?e.checked?"true":"false":e.value),(e=r)!==n&&(t.setValue(e),!0)}function X(e){if(void 0===(e=e||("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement||e.body}catch(t){return e.body}}function J(e,t){var n=t.checked;return a({},t,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=n?n:e._wrapperState.initialChecked})}function ee(e,t){var n=null==t.defaultValue?"":t.defaultValue,r=null!=t.checked?t.checked:t.defaultChecked;n=W(null!=t.value?t.value:n),e._wrapperState={initialChecked:r,initialValue:n,controlled:"checkbox"===t.type||"radio"===t.type?null!=t.checked:null!=t.value}}function te(e,t){null!=(t=t.checked)&&w(e,"checked",t,!1)}function ne(e,t){te(e,t);var n=W(t.value),r=t.type;if(null!=n)"number"===r?(0===n&&""===e.value||e.value!=n)&&(e.value=""+n):e.value!==""+n&&(e.value=""+n);else if("submit"===r||"reset"===r)return void e.removeAttribute("value");t.hasOwnProperty("value")?ae(e,t.type,n):t.hasOwnProperty("defaultValue")&&ae(e,t.type,W(t.defaultValue)),null==t.checked&&null!=t.defaultChecked&&(e.defaultChecked=!!t.defaultChecked)}function re(e,t,n){if(t.hasOwnProperty("value")||t.hasOwnProperty("defaultValue")){var r=t.type;if(!("submit"!==r&&"reset"!==r||void 0!==t.value&&null!==t.value))return;t=""+e._wrapperState.initialValue,n||t===e.value||(e.value=t),e.defaultValue=t}""!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function ae(e,t,n){"number"===t&&X(e.ownerDocument)===e||(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultValue=""+n))}function oe(e,t){return e=a({children:void 0},t),(t=function(e){var t="";return r.Children.forEach(e,(function(e){null!=e&&(t+=e)})),t}(t.children))&&(e.children=t),e}function ie(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a<n.length;a++)t["$"+n[a]]=!0;for(n=0;n<e.length;n++)a=t.hasOwnProperty("$"+e[n].value),e[n].selected!==a&&(e[n].selected=a),a&&r&&(e[n].defaultSelected=!0)}else{for(n=""+W(n),t=null,a=0;a<e.length;a++){if(e[a].value===n)return e[a].selected=!0,void(r&&(e[a].defaultSelected=!0));null!==t||e[a].disabled||(t=e[a])}null!==t&&(t.selected=!0)}}function le(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(i(91));return a({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initialValue})}function se(e,t){var n=t.value;if(null==n){if(n=t.children,t=t.defaultValue,null!=n){if(null!=t)throw Error(i(92));if(Array.isArray(n)){if(!(1>=n.length))throw Error(i(93));n=n[0]}t=n}null==t&&(t=""),n=t}e._wrapperState={initialValue:W(n)}}function ue(e,t){var n=W(t.value),r=W(t.defaultValue);null!=n&&((n=""+n)!==e.value&&(e.value=n),null==t.defaultValue&&e.defaultValue!==n&&(e.defaultValue=n)),null!=r&&(e.defaultValue=""+r)}function ce(e){var t=e.textContent;t===e._wrapperState.initialValue&&""!==t&&null!==t&&(e.value=t)}var de="http://www.w3.org/1999/xhtml",fe="http://www.w3.org/2000/svg";function pe(e){switch(e){case"svg":return"http://www.w3.org/2000/svg";case"math":return"http://www.w3.org/1998/Math/MathML";default:return"http://www.w3.org/1999/xhtml"}}function me(e,t){return null==e||"http://www.w3.org/1999/xhtml"===e?pe(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var he,ge,be=(ge=function(e,t){if(e.namespaceURI!==fe||"innerHTML"in e)e.innerHTML=t;else{for((he=he||document.createElement("div")).innerHTML="<svg>"+t.valueOf().toString()+"</svg>",t=he.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function ve(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var ye={animationIterationCount:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,columnCount:!0,columns:!0,flex:!0,flexGrow:!0,flexPositive:!0,flexShrink:!0,flexNegative:!0,flexOrder:!0,gridArea:!0,gridRow:!0,gridRowEnd:!0,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},we=["Webkit","ms","Moz","O"];function ke(e,t,n){return null==t||"boolean"==typeof t||""===t?"":n||"number"!=typeof t||0===t||ye.hasOwnProperty(e)&&ye[e]?(""+t).trim():t+"px"}function Ee(e,t){for(var n in e=e.style,t)if(t.hasOwnProperty(n)){var r=0===n.indexOf("--"),a=ke(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,a):e[n]=a}}Object.keys(ye).forEach((function(e){we.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),ye[t]=ye[e]}))}));var Se=a({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function xe(e,t){if(t){if(Se[e]&&(null!=t.children||null!=t.dangerouslySetInnerHTML))throw Error(i(137,e));if(null!=t.dangerouslySetInnerHTML){if(null!=t.children)throw Error(i(60));if("object"!=typeof t.dangerouslySetInnerHTML||!("__html"in t.dangerouslySetInnerHTML))throw Error(i(61))}if(null!=t.style&&"object"!=typeof t.style)throw Error(i(62))}}function Ce(e,t){if(-1===e.indexOf("-"))return"string"==typeof t.is;switch(e){case"annotation-xml":case"color-profile":case"font-face":case"font-face-src":case"font-face-uri":case"font-face-format":case"font-face-name":case"missing-glyph":return!1;default:return!0}}function _e(e){return(e=e.target||e.srcElement||window).correspondingUseElement&&(e=e.correspondingUseElement),3===e.nodeType?e.parentNode:e}var Te=null,Ae=null,Le=null;function Re(e){if(e=ra(e)){if("function"!=typeof Te)throw Error(i(280));var t=e.stateNode;t&&(t=oa(t),Te(e.stateNode,e.type,t))}}function Ne(e){Ae?Le?Le.push(e):Le=[e]:Ae=e}function Pe(){if(Ae){var e=Ae,t=Le;if(Le=Ae=null,Re(e),t)for(e=0;e<t.length;e++)Re(t[e])}}function Oe(e,t){return e(t)}function Ie(e,t,n,r,a){return e(t,n,r,a)}function De(){}var Me=Oe,Fe=!1,Be=!1;function je(){null===Ae&&null===Le||(De(),Pe())}function ze(e,t){var n=e.stateNode;if(null===n)return null;var r=oa(n);if(null===r)return null;n=r[t];e:switch(t){case"onClick":case"onClickCapture":case"onDoubleClick":case"onDoubleClickCapture":case"onMouseDown":case"onMouseDownCapture":case"onMouseMove":case"onMouseMoveCapture":case"onMouseUp":case"onMouseUpCapture":case"onMouseEnter":(r=!r.disabled)||(r=!("button"===(e=e.type)||"input"===e||"select"===e||"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!=typeof n)throw Error(i(231,t,typeof n));return n}var Ue=!1;if(d)try{var $e={};Object.defineProperty($e,"passive",{get:function(){Ue=!0}}),window.addEventListener("test",$e,$e),window.removeEventListener("test",$e,$e)}catch(ge){Ue=!1}function qe(e,t,n,r,a,o,i,l,s){var u=Array.prototype.slice.call(arguments,3);try{t.apply(n,u)}catch(c){this.onError(c)}}var He=!1,Ge=null,Ze=!1,Ve=null,We={onError:function(e){He=!0,Ge=e}};function Ke(e,t,n,r,a,o,i,l,s){He=!1,Ge=null,qe.apply(We,arguments)}function Ye(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!=(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Qe(e){if(13===e.tag){var t=e.memoizedState;if(null===t&&(null!==(e=e.alternate)&&(t=e.memoizedState)),null!==t)return t.dehydrated}return null}function Xe(e){if(Ye(e)!==e)throw Error(i(188))}function Je(e){if(e=function(e){var t=e.alternate;if(!t){if(null===(t=Ye(e)))throw Error(i(188));return t!==e?null:e}for(var n=e,r=t;;){var a=n.return;if(null===a)break;var o=a.alternate;if(null===o){if(null!==(r=a.return)){n=r;continue}break}if(a.child===o.child){for(o=a.child;o;){if(o===n)return Xe(a),e;if(o===r)return Xe(a),t;o=o.sibling}throw Error(i(188))}if(n.return!==r.return)n=a,r=o;else{for(var l=!1,s=a.child;s;){if(s===n){l=!0,n=a,r=o;break}if(s===r){l=!0,r=a,n=o;break}s=s.sibling}if(!l){for(s=o.child;s;){if(s===n){l=!0,n=o,r=a;break}if(s===r){l=!0,r=o,n=a;break}s=s.sibling}if(!l)throw Error(i(189))}}if(n.alternate!==r)throw Error(i(190))}if(3!==n.tag)throw Error(i(188));return n.stateNode.current===n?e:t}(e),!e)return null;for(var t=e;;){if(5===t.tag||6===t.tag)return t;if(t.child)t.child.return=t,t=t.child;else{if(t===e)break;for(;!t.sibling;){if(!t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}}return null}function et(e,t){for(var n=e.alternate;null!==t;){if(t===e||t===n)return!0;t=t.return}return!1}var tt,nt,rt,at,ot=!1,it=[],lt=null,st=null,ut=null,ct=new Map,dt=new Map,ft=[],pt="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend dragstart drop compositionend compositionstart keydown keypress keyup input textInput copy cut paste click change contextmenu reset submit".split(" ");function mt(e,t,n,r,a){return{blockedOn:e,domEventName:t,eventSystemFlags:16|n,nativeEvent:a,targetContainers:[r]}}function ht(e,t){switch(e){case"focusin":case"focusout":lt=null;break;case"dragenter":case"dragleave":st=null;break;case"mouseover":case"mouseout":ut=null;break;case"pointerover":case"pointerout":ct.delete(t.pointerId);break;case"gotpointercapture":case"lostpointercapture":dt.delete(t.pointerId)}}function gt(e,t,n,r,a,o){return null===e||e.nativeEvent!==o?(e=mt(t,n,r,a,o),null!==t&&(null!==(t=ra(t))&&nt(t)),e):(e.eventSystemFlags|=r,t=e.targetContainers,null!==a&&-1===t.indexOf(a)&&t.push(a),e)}function bt(e){var t=na(e.target);if(null!==t){var n=Ye(t);if(null!==n)if(13===(t=n.tag)){if(null!==(t=Qe(n)))return e.blockedOn=t,void at(e.lanePriority,(function(){o.unstable_runWithPriority(e.priority,(function(){rt(n)}))}))}else if(3===t&&n.stateNode.hydrate)return void(e.blockedOn=3===n.tag?n.stateNode.containerInfo:null)}e.blockedOn=null}function vt(e){if(null!==e.blockedOn)return!1;for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n)return null!==(t=ra(n))&&nt(t),e.blockedOn=n,!1;t.shift()}return!0}function yt(e,t,n){vt(e)&&n.delete(t)}function wt(){for(ot=!1;0<it.length;){var e=it[0];if(null!==e.blockedOn){null!==(e=ra(e.blockedOn))&&tt(e);break}for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n){e.blockedOn=n;break}t.shift()}null===e.blockedOn&&it.shift()}null!==lt&&vt(lt)&&(lt=null),null!==st&&vt(st)&&(st=null),null!==ut&&vt(ut)&&(ut=null),ct.forEach(yt),dt.forEach(yt)}function kt(e,t){e.blockedOn===t&&(e.blockedOn=null,ot||(ot=!0,o.unstable_scheduleCallback(o.unstable_NormalPriority,wt)))}function Et(e){function t(t){return kt(t,e)}if(0<it.length){kt(it[0],e);for(var n=1;n<it.length;n++){var r=it[n];r.blockedOn===e&&(r.blockedOn=null)}}for(null!==lt&&kt(lt,e),null!==st&&kt(st,e),null!==ut&&kt(ut,e),ct.forEach(t),dt.forEach(t),n=0;n<ft.length;n++)(r=ft[n]).blockedOn===e&&(r.blockedOn=null);for(;0<ft.length&&null===(n=ft[0]).blockedOn;)bt(n),null===n.blockedOn&&ft.shift()}function St(e,t){var n={};return n[e.toLowerCase()]=t.toLowerCase(),n["Webkit"+e]="webkit"+t,n["Moz"+e]="moz"+t,n}var xt={animationend:St("Animation","AnimationEnd"),animationiteration:St("Animation","AnimationIteration"),animationstart:St("Animation","AnimationStart"),transitionend:St("Transition","TransitionEnd")},Ct={},_t={};function Tt(e){if(Ct[e])return Ct[e];if(!xt[e])return e;var t,n=xt[e];for(t in n)if(n.hasOwnProperty(t)&&t in _t)return Ct[e]=n[t];return e}d&&(_t=document.createElement("div").style,"AnimationEvent"in window||(delete xt.animationend.animation,delete xt.animationiteration.animation,delete xt.animationstart.animation),"TransitionEvent"in window||delete xt.transitionend.transition);var At=Tt("animationend"),Lt=Tt("animationiteration"),Rt=Tt("animationstart"),Nt=Tt("transitionend"),Pt=new Map,Ot=new Map,It=["abort","abort",At,"animationEnd",Lt,"animationIteration",Rt,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange","durationChange","emptied","emptied","encrypted","encrypted","ended","ended","error","error","gotpointercapture","gotPointerCapture","load","load","loadeddata","loadedData","loadedmetadata","loadedMetadata","loadstart","loadStart","lostpointercapture","lostPointerCapture","playing","playing","progress","progress","seeking","seeking","stalled","stalled","suspend","suspend","timeupdate","timeUpdate",Nt,"transitionEnd","waiting","waiting"];function Dt(e,t){for(var n=0;n<e.length;n+=2){var r=e[n],a=e[n+1];a="on"+(a[0].toUpperCase()+a.slice(1)),Ot.set(r,t),Pt.set(r,a),u(a,[r])}}(0,o.unstable_now)();var Mt=8;function Ft(e){if(0!=(1&e))return Mt=15,1;if(0!=(2&e))return Mt=14,2;if(0!=(4&e))return Mt=13,4;var t=24&e;return 0!==t?(Mt=12,t):0!=(32&e)?(Mt=11,32):0!==(t=192&e)?(Mt=10,t):0!=(256&e)?(Mt=9,256):0!==(t=3584&e)?(Mt=8,t):0!=(4096&e)?(Mt=7,4096):0!==(t=4186112&e)?(Mt=6,t):0!==(t=62914560&e)?(Mt=5,t):67108864&e?(Mt=4,67108864):0!=(134217728&e)?(Mt=3,134217728):0!==(t=805306368&e)?(Mt=2,t):0!=(1073741824&e)?(Mt=1,1073741824):(Mt=8,e)}function Bt(e,t){var n=e.pendingLanes;if(0===n)return Mt=0;var r=0,a=0,o=e.expiredLanes,i=e.suspendedLanes,l=e.pingedLanes;if(0!==o)r=o,a=Mt=15;else if(0!==(o=134217727&n)){var s=o&~i;0!==s?(r=Ft(s),a=Mt):0!==(l&=o)&&(r=Ft(l),a=Mt)}else 0!==(o=n&~i)?(r=Ft(o),a=Mt):0!==l&&(r=Ft(l),a=Mt);if(0===r)return 0;if(r=n&((0>(r=31-Ht(r))?0:1<<r)<<1)-1,0!==t&&t!==r&&0==(t&i)){if(Ft(t),a<=Mt)return t;Mt=a}if(0!==(t=e.entangledLanes))for(e=e.entanglements,t&=r;0<t;)a=1<<(n=31-Ht(t)),r|=e[n],t&=~a;return r}function jt(e){return 0!==(e=-1073741825&e.pendingLanes)?e:1073741824&e?1073741824:0}function zt(e,t){switch(e){case 15:return 1;case 14:return 2;case 12:return 0===(e=Ut(24&~t))?zt(10,t):e;case 10:return 0===(e=Ut(192&~t))?zt(8,t):e;case 8:return 0===(e=Ut(3584&~t))&&(0===(e=Ut(4186112&~t))&&(e=512)),e;case 2:return 0===(t=Ut(805306368&~t))&&(t=268435456),t}throw Error(i(358,e))}function Ut(e){return e&-e}function $t(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function qt(e,t,n){e.pendingLanes|=t;var r=t-1;e.suspendedLanes&=r,e.pingedLanes&=r,(e=e.eventTimes)[t=31-Ht(t)]=n}var Ht=Math.clz32?Math.clz32:function(e){return 0===e?32:31-(Gt(e)/Zt|0)|0},Gt=Math.log,Zt=Math.LN2;var Vt=o.unstable_UserBlockingPriority,Wt=o.unstable_runWithPriority,Kt=!0;function Yt(e,t,n,r){Fe||De();var a=Xt,o=Fe;Fe=!0;try{Ie(a,e,t,n,r)}finally{(Fe=o)||je()}}function Qt(e,t,n,r){Wt(Vt,Xt.bind(null,e,t,n,r))}function Xt(e,t,n,r){var a;if(Kt)if((a=0==(4&t))&&0<it.length&&-1<pt.indexOf(e))e=mt(null,e,t,n,r),it.push(e);else{var o=Jt(e,t,n,r);if(null===o)a&&ht(e,r);else{if(a){if(-1<pt.indexOf(e))return e=mt(o,e,t,n,r),void it.push(e);if(function(e,t,n,r,a){switch(t){case"focusin":return lt=gt(lt,e,t,n,r,a),!0;case"dragenter":return st=gt(st,e,t,n,r,a),!0;case"mouseover":return ut=gt(ut,e,t,n,r,a),!0;case"pointerover":var o=a.pointerId;return ct.set(o,gt(ct.get(o)||null,e,t,n,r,a)),!0;case"gotpointercapture":return o=a.pointerId,dt.set(o,gt(dt.get(o)||null,e,t,n,r,a)),!0}return!1}(o,e,t,n,r))return;ht(e,r)}Dr(e,t,r,null,n)}}}function Jt(e,t,n,r){var a=_e(r);if(null!==(a=na(a))){var o=Ye(a);if(null===o)a=null;else{var i=o.tag;if(13===i){if(null!==(a=Qe(o)))return a;a=null}else if(3===i){if(o.stateNode.hydrate)return 3===o.tag?o.stateNode.containerInfo:null;a=null}else o!==a&&(a=null)}}return Dr(e,t,r,a,n),null}var en=null,tn=null,nn=null;function rn(){if(nn)return nn;var e,t,n=tn,r=n.length,a="value"in en?en.value:en.textContent,o=a.length;for(e=0;e<r&&n[e]===a[e];e++);var i=r-e;for(t=1;t<=i&&n[r-t]===a[o-t];t++);return nn=a.slice(e,1<t?1-t:void 0)}function an(e){var t=e.keyCode;return"charCode"in e?0===(e=e.charCode)&&13===t&&(e=13):e=t,10===e&&(e=13),32<=e||13===e?e:0}function on(){return!0}function ln(){return!1}function sn(e){function t(t,n,r,a,o){for(var i in this._reactName=t,this._targetInst=r,this.type=n,this.nativeEvent=a,this.target=o,this.currentTarget=null,e)e.hasOwnProperty(i)&&(t=e[i],this[i]=t?t(a):a[i]);return this.isDefaultPrevented=(null!=a.defaultPrevented?a.defaultPrevented:!1===a.returnValue)?on:ln,this.isPropagationStopped=ln,this}return a(t.prototype,{preventDefault:function(){this.defaultPrevented=!0;var e=this.nativeEvent;e&&(e.preventDefault?e.preventDefault():"unknown"!=typeof e.returnValue&&(e.returnValue=!1),this.isDefaultPrevented=on)},stopPropagation:function(){var e=this.nativeEvent;e&&(e.stopPropagation?e.stopPropagation():"unknown"!=typeof e.cancelBubble&&(e.cancelBubble=!0),this.isPropagationStopped=on)},persist:function(){},isPersistent:on}),t}var un,cn,dn,fn={eventPhase:0,bubbles:0,cancelable:0,timeStamp:function(e){return e.timeStamp||Date.now()},defaultPrevented:0,isTrusted:0},pn=sn(fn),mn=a({},fn,{view:0,detail:0}),hn=sn(mn),gn=a({},mn,{screenX:0,screenY:0,clientX:0,clientY:0,pageX:0,pageY:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,getModifierState:An,button:0,buttons:0,relatedTarget:function(e){return void 0===e.relatedTarget?e.fromElement===e.srcElement?e.toElement:e.fromElement:e.relatedTarget},movementX:function(e){return"movementX"in e?e.movementX:(e!==dn&&(dn&&"mousemove"===e.type?(un=e.screenX-dn.screenX,cn=e.screenY-dn.screenY):cn=un=0,dn=e),un)},movementY:function(e){return"movementY"in e?e.movementY:cn}}),bn=sn(gn),vn=sn(a({},gn,{dataTransfer:0})),yn=sn(a({},mn,{relatedTarget:0})),wn=sn(a({},fn,{animationName:0,elapsedTime:0,pseudoElement:0})),kn=a({},fn,{clipboardData:function(e){return"clipboardData"in e?e.clipboardData:window.clipboardData}}),En=sn(kn),Sn=sn(a({},fn,{data:0})),xn={Esc:"Escape",Spacebar:" ",Left:"ArrowLeft",Up:"ArrowUp",Right:"ArrowRight",Down:"ArrowDown",Del:"Delete",Win:"OS",Menu:"ContextMenu",Apps:"ContextMenu",Scroll:"ScrollLock",MozPrintableKey:"Unidentified"},Cn={8:"Backspace",9:"Tab",12:"Clear",13:"Enter",16:"Shift",17:"Control",18:"Alt",19:"Pause",20:"CapsLock",27:"Escape",32:" ",33:"PageUp",34:"PageDown",35:"End",36:"Home",37:"ArrowLeft",38:"ArrowUp",39:"ArrowRight",40:"ArrowDown",45:"Insert",46:"Delete",112:"F1",113:"F2",114:"F3",115:"F4",116:"F5",117:"F6",118:"F7",119:"F8",120:"F9",121:"F10",122:"F11",123:"F12",144:"NumLock",145:"ScrollLock",224:"Meta"},_n={Alt:"altKey",Control:"ctrlKey",Meta:"metaKey",Shift:"shiftKey"};function Tn(e){var t=this.nativeEvent;return t.getModifierState?t.getModifierState(e):!!(e=_n[e])&&!!t[e]}function An(){return Tn}var Ln=a({},mn,{key:function(e){if(e.key){var t=xn[e.key]||e.key;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=an(e))?"Enter":String.fromCharCode(e):"keydown"===e.type||"keyup"===e.type?Cn[e.keyCode]||"Unidentified":""},code:0,location:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,repeat:0,locale:0,getModifierState:An,charCode:function(e){return"keypress"===e.type?an(e):0},keyCode:function(e){return"keydown"===e.type||"keyup"===e.type?e.keyCode:0},which:function(e){return"keypress"===e.type?an(e):"keydown"===e.type||"keyup"===e.type?e.keyCode:0}}),Rn=sn(Ln),Nn=sn(a({},gn,{pointerId:0,width:0,height:0,pressure:0,tangentialPressure:0,tiltX:0,tiltY:0,twist:0,pointerType:0,isPrimary:0})),Pn=sn(a({},mn,{touches:0,targetTouches:0,changedTouches:0,altKey:0,metaKey:0,ctrlKey:0,shiftKey:0,getModifierState:An})),On=sn(a({},fn,{propertyName:0,elapsedTime:0,pseudoElement:0})),In=a({},gn,{deltaX:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Dn=sn(In),Mn=[9,13,27,32],Fn=d&&"CompositionEvent"in window,Bn=null;d&&"documentMode"in document&&(Bn=document.documentMode);var jn=d&&"TextEvent"in window&&!Bn,zn=d&&(!Fn||Bn&&8<Bn&&11>=Bn),Un=String.fromCharCode(32),$n=!1;function qn(e,t){switch(e){case"keyup":return-1!==Mn.indexOf(t.keyCode);case"keydown":return 229!==t.keyCode;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function Hn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var Gn=!1;var Zn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function Vn(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return"input"===t?!!Zn[e.type]:"textarea"===t}function Wn(e,t,n,r){Ne(r),0<(t=Fr(t,"onChange")).length&&(n=new pn("onChange","change",null,n,r),e.push({event:n,listeners:t}))}var Kn=null,Yn=null;function Qn(e){Lr(e,0)}function Xn(e){if(Q(aa(e)))return e}function Jn(e,t){if("change"===e)return t}var er=!1;if(d){var tr;if(d){var nr="oninput"in document;if(!nr){var rr=document.createElement("div");rr.setAttribute("oninput","return;"),nr="function"==typeof rr.oninput}tr=nr}else tr=!1;er=tr&&(!document.documentMode||9<document.documentMode)}function ar(){Kn&&(Kn.detachEvent("onpropertychange",or),Yn=Kn=null)}function or(e){if("value"===e.propertyName&&Xn(Yn)){var t=[];if(Wn(t,Yn,e,_e(e)),e=Qn,Fe)e(t);else{Fe=!0;try{Oe(e,t)}finally{Fe=!1,je()}}}}function ir(e,t,n){"focusin"===e?(ar(),Yn=n,(Kn=t).attachEvent("onpropertychange",or)):"focusout"===e&&ar()}function lr(e){if("selectionchange"===e||"keyup"===e||"keydown"===e)return Xn(Yn)}function sr(e,t){if("click"===e)return Xn(t)}function ur(e,t){if("input"===e||"change"===e)return Xn(t)}var cr="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},dr=Object.prototype.hasOwnProperty;function fr(e,t){if(cr(e,t))return!0;if("object"!=typeof e||null===e||"object"!=typeof t||null===t)return!1;var n=Object.keys(e),r=Object.keys(t);if(n.length!==r.length)return!1;for(r=0;r<n.length;r++)if(!dr.call(t,n[r])||!cr(e[n[r]],t[n[r]]))return!1;return!0}function pr(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function mr(e,t){var n,r=pr(e);for(e=0;r;){if(3===r.nodeType){if(n=e+r.textContent.length,e<=t&&n>=t)return{node:r,offset:t-e};e=n}e:{for(;r;){if(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=pr(r)}}function hr(e,t){return!(!e||!t)&&(e===t||(!e||3!==e.nodeType)&&(t&&3===t.nodeType?hr(e,t.parentNode):"contains"in e?e.contains(t):!!e.compareDocumentPosition&&!!(16&e.compareDocumentPosition(t))))}function gr(){for(var e=window,t=X();t instanceof e.HTMLIFrameElement;){try{var n="string"==typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=X((e=t.contentWindow).document)}return t}function br(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&("input"===t&&("text"===e.type||"search"===e.type||"tel"===e.type||"url"===e.type||"password"===e.type)||"textarea"===t||"true"===e.contentEditable)}var vr=d&&"documentMode"in document&&11>=document.documentMode,yr=null,wr=null,kr=null,Er=!1;function Sr(e,t,n){var r=n.window===n?n.document:9===n.nodeType?n:n.ownerDocument;Er||null==yr||yr!==X(r)||("selectionStart"in(r=yr)&&br(r)?r={start:r.selectionStart,end:r.selectionEnd}:r={anchorNode:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&fr(kr,r)||(kr=r,0<(r=Fr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({event:t,listeners:r}),t.target=yr)))}Dt("cancel cancel click click close close contextmenu contextMenu copy copy cut cut auxclick auxClick dblclick doubleClick dragend dragEnd dragstart dragStart drop drop focusin focus focusout blur input input invalid invalid keydown keyDown keypress keyPress keyup keyUp mousedown mouseDown mouseup mouseUp paste paste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(" "),0),Dt("drag drag dragenter dragEnter dragexit dragExit dragleave dragLeave dragover dragOver mousemove mouseMove mouseout mouseOut mouseover mouseOver pointermove pointerMove pointerout pointerOut pointerover pointerOver scroll scroll toggle toggle touchmove touchMove wheel wheel".split(" "),1),Dt(It,2);for(var xr="change selectionchange textInput compositionstart compositionend compositionupdate".split(" "),Cr=0;Cr<xr.length;Cr++)Ot.set(xr[Cr],0);c("onMouseEnter",["mouseout","mouseover"]),c("onMouseLeave",["mouseout","mouseover"]),c("onPointerEnter",["pointerout","pointerover"]),c("onPointerLeave",["pointerout","pointerover"]),u("onChange","change click focusin focusout input keydown keyup selectionchange".split(" ")),u("onSelect","focusout contextmenu dragend focusin keydown keyup mousedown mouseup selectionchange".split(" ")),u("onBeforeInput",["compositionend","keypress","textInput","paste"]),u("onCompositionEnd","compositionend focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionStart","compositionstart focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionUpdate","compositionupdate focusout keydown keypress keyup mousedown".split(" "));var _r="abort canplay canplaythrough durationchange emptied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend timeupdate volumechange waiting".split(" "),Tr=new Set("cancel close invalid load scroll toggle".split(" ").concat(_r));function Ar(e,t,n){var r=e.type||"unknown-event";e.currentTarget=n,function(e,t,n,r,a,o,l,s,u){if(Ke.apply(this,arguments),He){if(!He)throw Error(i(198));var c=Ge;He=!1,Ge=null,Ze||(Ze=!0,Ve=c)}}(r,t,void 0,e),e.currentTarget=null}function Lr(e,t){t=0!=(4&t);for(var n=0;n<e.length;n++){var r=e[n],a=r.event;r=r.listeners;e:{var o=void 0;if(t)for(var i=r.length-1;0<=i;i--){var l=r[i],s=l.instance,u=l.currentTarget;if(l=l.listener,s!==o&&a.isPropagationStopped())break e;Ar(a,l,u),o=s}else for(i=0;i<r.length;i++){if(s=(l=r[i]).instance,u=l.currentTarget,l=l.listener,s!==o&&a.isPropagationStopped())break e;Ar(a,l,u),o=s}}}if(Ze)throw e=Ve,Ze=!1,Ve=null,e}function Rr(e,t){var n=ia(t),r=e+"__bubble";n.has(r)||(Ir(t,e,2,!1),n.add(r))}var Nr="_reactListening"+Math.random().toString(36).slice(2);function Pr(e){e[Nr]||(e[Nr]=!0,l.forEach((function(t){Tr.has(t)||Or(t,!1,e,null),Or(t,!0,e,null)})))}function Or(e,t,n,r){var a=4<arguments.length&&void 0!==arguments[4]?arguments[4]:0,o=n;if("selectionchange"===e&&9!==n.nodeType&&(o=n.ownerDocument),null!==r&&!t&&Tr.has(e)){if("scroll"!==e)return;a|=2,o=r}var i=ia(o),l=e+"__"+(t?"capture":"bubble");i.has(l)||(t&&(a|=4),Ir(o,e,a,t),i.add(l))}function Ir(e,t,n,r){var a=Ot.get(t);switch(void 0===a?2:a){case 0:a=Yt;break;case 1:a=Qt;break;default:a=Xt}n=a.bind(null,t,n,e),a=void 0,!Ue||"touchstart"!==t&&"touchmove"!==t&&"wheel"!==t||(a=!0),r?void 0!==a?e.addEventListener(t,n,{capture:!0,passive:a}):e.addEventListener(t,n,!0):void 0!==a?e.addEventListener(t,n,{passive:a}):e.addEventListener(t,n,!1)}function Dr(e,t,n,r,a){var o=r;if(0==(1&t)&&0==(2&t)&&null!==r)e:for(;;){if(null===r)return;var i=r.tag;if(3===i||4===i){var l=r.stateNode.containerInfo;if(l===a||8===l.nodeType&&l.parentNode===a)break;if(4===i)for(i=r.return;null!==i;){var s=i.tag;if((3===s||4===s)&&((s=i.stateNode.containerInfo)===a||8===s.nodeType&&s.parentNode===a))return;i=i.return}for(;null!==l;){if(null===(i=na(l)))return;if(5===(s=i.tag)||6===s){r=o=i;continue e}l=l.parentNode}}r=r.return}!function(e,t,n){if(Be)return e(t,n);Be=!0;try{Me(e,t,n)}finally{Be=!1,je()}}((function(){var r=o,a=_e(n),i=[];e:{var l=Pt.get(e);if(void 0!==l){var s=pn,u=e;switch(e){case"keypress":if(0===an(n))break e;case"keydown":case"keyup":s=Rn;break;case"focusin":u="focus",s=yn;break;case"focusout":u="blur",s=yn;break;case"beforeblur":case"afterblur":s=yn;break;case"click":if(2===n.button)break e;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":s=bn;break;case"drag":case"dragend":case"dragenter":case"dragexit":case"dragleave":case"dragover":case"dragstart":case"drop":s=vn;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":s=Pn;break;case At:case Lt:case Rt:s=wn;break;case Nt:s=On;break;case"scroll":s=hn;break;case"wheel":s=Dn;break;case"copy":case"cut":case"paste":s=En;break;case"gotpointercapture":case"lostpointercapture":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":s=Nn}var c=0!=(4&t),d=!c&&"scroll"===e,f=c?null!==l?l+"Capture":null:l;c=[];for(var p,m=r;null!==m;){var h=(p=m).stateNode;if(5===p.tag&&null!==h&&(p=h,null!==f&&(null!=(h=ze(m,f))&&c.push(Mr(m,h,p)))),d)break;m=m.return}0<c.length&&(l=new s(l,u,null,n,a),i.push({event:l,listeners:c}))}}if(0==(7&t)){if(s="mouseout"===e||"pointerout"===e,(!(l="mouseover"===e||"pointerover"===e)||0!=(16&t)||!(u=n.relatedTarget||n.fromElement)||!na(u)&&!u[ea])&&(s||l)&&(l=a.window===a?a:(l=a.ownerDocument)?l.defaultView||l.parentWindow:window,s?(s=r,null!==(u=(u=n.relatedTarget||n.toElement)?na(u):null)&&(u!==(d=Ye(u))||5!==u.tag&&6!==u.tag)&&(u=null)):(s=null,u=r),s!==u)){if(c=bn,h="onMouseLeave",f="onMouseEnter",m="mouse","pointerout"!==e&&"pointerover"!==e||(c=Nn,h="onPointerLeave",f="onPointerEnter",m="pointer"),d=null==s?l:aa(s),p=null==u?l:aa(u),(l=new c(h,m+"leave",s,n,a)).target=d,l.relatedTarget=p,h=null,na(a)===r&&((c=new c(f,m+"enter",u,n,a)).target=p,c.relatedTarget=d,h=c),d=h,s&&u)e:{for(f=u,m=0,p=c=s;p;p=Br(p))m++;for(p=0,h=f;h;h=Br(h))p++;for(;0<m-p;)c=Br(c),m--;for(;0<p-m;)f=Br(f),p--;for(;m--;){if(c===f||null!==f&&c===f.alternate)break e;c=Br(c),f=Br(f)}c=null}else c=null;null!==s&&jr(i,l,s,c,!1),null!==u&&null!==d&&jr(i,d,u,c,!0)}if("select"===(s=(l=r?aa(r):window).nodeName&&l.nodeName.toLowerCase())||"input"===s&&"file"===l.type)var g=Jn;else if(Vn(l))if(er)g=ur;else{g=lr;var b=ir}else(s=l.nodeName)&&"input"===s.toLowerCase()&&("checkbox"===l.type||"radio"===l.type)&&(g=sr);switch(g&&(g=g(e,r))?Wn(i,g,n,a):(b&&b(e,l,r),"focusout"===e&&(b=l._wrapperState)&&b.controlled&&"number"===l.type&&ae(l,"number",l.value)),b=r?aa(r):window,e){case"focusin":(Vn(b)||"true"===b.contentEditable)&&(yr=b,wr=r,kr=null);break;case"focusout":kr=wr=yr=null;break;case"mousedown":Er=!0;break;case"contextmenu":case"mouseup":case"dragend":Er=!1,Sr(i,n,a);break;case"selectionchange":if(vr)break;case"keydown":case"keyup":Sr(i,n,a)}var v;if(Fn)e:{switch(e){case"compositionstart":var y="onCompositionStart";break e;case"compositionend":y="onCompositionEnd";break e;case"compositionupdate":y="onCompositionUpdate";break e}y=void 0}else Gn?qn(e,n)&&(y="onCompositionEnd"):"keydown"===e&&229===n.keyCode&&(y="onCompositionStart");y&&(zn&&"ko"!==n.locale&&(Gn||"onCompositionStart"!==y?"onCompositionEnd"===y&&Gn&&(v=rn()):(tn="value"in(en=a)?en.value:en.textContent,Gn=!0)),0<(b=Fr(r,y)).length&&(y=new Sn(y,e,null,n,a),i.push({event:y,listeners:b}),v?y.data=v:null!==(v=Hn(n))&&(y.data=v))),(v=jn?function(e,t){switch(e){case"compositionend":return Hn(t);case"keypress":return 32!==t.which?null:($n=!0,Un);case"textInput":return(e=t.data)===Un&&$n?null:e;default:return null}}(e,n):function(e,t){if(Gn)return"compositionend"===e||!Fn&&qn(e,t)?(e=rn(),nn=tn=en=null,Gn=!1,e):null;switch(e){case"paste":default:return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1<t.char.length)return t.char;if(t.which)return String.fromCharCode(t.which)}return null;case"compositionend":return zn&&"ko"!==t.locale?null:t.data}}(e,n))&&(0<(r=Fr(r,"onBeforeInput")).length&&(a=new Sn("onBeforeInput","beforeinput",null,n,a),i.push({event:a,listeners:r}),a.data=v))}Lr(i,t)}))}function Mr(e,t,n){return{instance:e,listener:t,currentTarget:n}}function Fr(e,t){for(var n=t+"Capture",r=[];null!==e;){var a=e,o=a.stateNode;5===a.tag&&null!==o&&(a=o,null!=(o=ze(e,n))&&r.unshift(Mr(e,o,a)),null!=(o=ze(e,t))&&r.push(Mr(e,o,a))),e=e.return}return r}function Br(e){if(null===e)return null;do{e=e.return}while(e&&5!==e.tag);return e||null}function jr(e,t,n,r,a){for(var o=t._reactName,i=[];null!==n&&n!==r;){var l=n,s=l.alternate,u=l.stateNode;if(null!==s&&s===r)break;5===l.tag&&null!==u&&(l=u,a?null!=(s=ze(n,o))&&i.unshift(Mr(n,s,l)):a||null!=(s=ze(n,o))&&i.push(Mr(n,s,l))),n=n.return}0!==i.length&&e.push({event:t,listeners:i})}function zr(){}var Ur=null,$r=null;function qr(e,t){switch(e){case"button":case"input":case"select":case"textarea":return!!t.autoFocus}return!1}function Hr(e,t){return"textarea"===e||"option"===e||"noscript"===e||"string"==typeof t.children||"number"==typeof t.children||"object"==typeof t.dangerouslySetInnerHTML&&null!==t.dangerouslySetInnerHTML&&null!=t.dangerouslySetInnerHTML.__html}var Gr="function"==typeof setTimeout?setTimeout:void 0,Zr="function"==typeof clearTimeout?clearTimeout:void 0;function Vr(e){1===e.nodeType?e.textContent="":9===e.nodeType&&(null!=(e=e.body)&&(e.textContent=""))}function Wr(e){for(;null!=e;e=e.nextSibling){var t=e.nodeType;if(1===t||3===t)break}return e}function Kr(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n||"$!"===n||"$?"===n){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var Yr=0;var Qr=Math.random().toString(36).slice(2),Xr="__reactFiber$"+Qr,Jr="__reactProps$"+Qr,ea="__reactContainer$"+Qr,ta="__reactEvents$"+Qr;function na(e){var t=e[Xr];if(t)return t;for(var n=e.parentNode;n;){if(t=n[ea]||n[Xr]){if(n=t.alternate,null!==t.child||null!==n&&null!==n.child)for(e=Kr(e);null!==e;){if(n=e[Xr])return n;e=Kr(e)}return t}n=(e=n).parentNode}return null}function ra(e){return!(e=e[Xr]||e[ea])||5!==e.tag&&6!==e.tag&&13!==e.tag&&3!==e.tag?null:e}function aa(e){if(5===e.tag||6===e.tag)return e.stateNode;throw Error(i(33))}function oa(e){return e[Jr]||null}function ia(e){var t=e[ta];return void 0===t&&(t=e[ta]=new Set),t}var la=[],sa=-1;function ua(e){return{current:e}}function ca(e){0>sa||(e.current=la[sa],la[sa]=null,sa--)}function da(e,t){sa++,la[sa]=e.current,e.current=t}var fa={},pa=ua(fa),ma=ua(!1),ha=fa;function ga(e,t){var n=e.type.contextTypes;if(!n)return fa;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmaskedChildContext===t)return r.__reactInternalMemoizedMaskedChildContext;var a,o={};for(a in n)o[a]=t[a];return r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=t,e.__reactInternalMemoizedMaskedChildContext=o),o}function ba(e){return null!=(e=e.childContextTypes)}function va(){ca(ma),ca(pa)}function ya(e,t,n){if(pa.current!==fa)throw Error(i(168));da(pa,t),da(ma,n)}function wa(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.getChildContext)return n;for(var o in r=r.getChildContext())if(!(o in e))throw Error(i(108,V(t)||"Unknown",o));return a({},n,r)}function ka(e){return e=(e=e.stateNode)&&e.__reactInternalMemoizedMergedChildContext||fa,ha=pa.current,da(pa,e),da(ma,ma.current),!0}function Ea(e,t,n){var r=e.stateNode;if(!r)throw Error(i(169));n?(e=wa(e,t,ha),r.__reactInternalMemoizedMergedChildContext=e,ca(ma),ca(pa),da(pa,e)):ca(ma),da(ma,n)}var Sa=null,xa=null,Ca=o.unstable_runWithPriority,_a=o.unstable_scheduleCallback,Ta=o.unstable_cancelCallback,Aa=o.unstable_shouldYield,La=o.unstable_requestPaint,Ra=o.unstable_now,Na=o.unstable_getCurrentPriorityLevel,Pa=o.unstable_ImmediatePriority,Oa=o.unstable_UserBlockingPriority,Ia=o.unstable_NormalPriority,Da=o.unstable_LowPriority,Ma=o.unstable_IdlePriority,Fa={},Ba=void 0!==La?La:function(){},ja=null,za=null,Ua=!1,$a=Ra(),qa=1e4>$a?Ra:function(){return Ra()-$a};function Ha(){switch(Na()){case Pa:return 99;case Oa:return 98;case Ia:return 97;case Da:return 96;case Ma:return 95;default:throw Error(i(332))}}function Ga(e){switch(e){case 99:return Pa;case 98:return Oa;case 97:return Ia;case 96:return Da;case 95:return Ma;default:throw Error(i(332))}}function Za(e,t){return e=Ga(e),Ca(e,t)}function Va(e,t,n){return e=Ga(e),_a(e,t,n)}function Wa(){if(null!==za){var e=za;za=null,Ta(e)}Ka()}function Ka(){if(!Ua&&null!==ja){Ua=!0;var e=0;try{var t=ja;Za(99,(function(){for(;e<t.length;e++){var n=t[e];do{n=n(!0)}while(null!==n)}})),ja=null}catch(n){throw null!==ja&&(ja=ja.slice(e+1)),_a(Pa,Wa),n}finally{Ua=!1}}}var Ya=k.ReactCurrentBatchConfig;function Qa(e,t){if(e&&e.defaultProps){for(var n in t=a({},t),e=e.defaultProps)void 0===t[n]&&(t[n]=e[n]);return t}return t}var Xa=ua(null),Ja=null,eo=null,to=null;function no(){to=eo=Ja=null}function ro(e){var t=Xa.current;ca(Xa),e.type._context._currentValue=t}function ao(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n||(n.childLanes&t)===t)break;n.childLanes|=t}else e.childLanes|=t,null!==n&&(n.childLanes|=t);e=e.return}}function oo(e,t){Ja=e,to=eo=null,null!==(e=e.dependencies)&&null!==e.firstContext&&(0!=(e.lanes&t)&&(Fi=!0),e.firstContext=null)}function io(e,t){if(to!==e&&!1!==t&&0!==t)if("number"==typeof t&&1073741823!==t||(to=e,t=1073741823),t={context:e,observedBits:t,next:null},null===eo){if(null===Ja)throw Error(i(308));eo=t,Ja.dependencies={lanes:0,firstContext:t,responders:null}}else eo=eo.next=t;return e._currentValue}var lo=!1;function so(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null},effects:null}}function uo(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,effects:e.effects})}function co(e,t){return{eventTime:e,lane:t,tag:0,payload:null,callback:null,next:null}}function fo(e,t){if(null!==(e=e.updateQueue)){var n=(e=e.shared).pending;null===n?t.next=t:(t.next=n.next,n.next=t),e.pending=t}}function po(e,t){var n=e.updateQueue,r=e.alternate;if(null!==r&&n===(r=r.updateQueue)){var a=null,o=null;if(null!==(n=n.firstBaseUpdate)){do{var i={eventTime:n.eventTime,lane:n.lane,tag:n.tag,payload:n.payload,callback:n.callback,next:null};null===o?a=o=i:o=o.next=i,n=n.next}while(null!==n);null===o?a=o=t:o=o.next=t}else a=o=t;return n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:o,shared:r.shared,effects:r.effects},void(e.updateQueue=n)}null===(e=n.lastBaseUpdate)?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}function mo(e,t,n,r){var o=e.updateQueue;lo=!1;var i=o.firstBaseUpdate,l=o.lastBaseUpdate,s=o.shared.pending;if(null!==s){o.shared.pending=null;var u=s,c=u.next;u.next=null,null===l?i=c:l.next=c,l=u;var d=e.alternate;if(null!==d){var f=(d=d.updateQueue).lastBaseUpdate;f!==l&&(null===f?d.firstBaseUpdate=c:f.next=c,d.lastBaseUpdate=u)}}if(null!==i){for(f=o.baseState,l=0,d=c=u=null;;){s=i.lane;var p=i.eventTime;if((r&s)===s){null!==d&&(d=d.next={eventTime:p,lane:0,tag:i.tag,payload:i.payload,callback:i.callback,next:null});e:{var m=e,h=i;switch(s=t,p=n,h.tag){case 1:if("function"==typeof(m=h.payload)){f=m.call(p,f,s);break e}f=m;break e;case 3:m.flags=-4097&m.flags|64;case 0:if(null==(s="function"==typeof(m=h.payload)?m.call(p,f,s):m))break e;f=a({},f,s);break e;case 2:lo=!0}}null!==i.callback&&(e.flags|=32,null===(s=o.effects)?o.effects=[i]:s.push(i))}else p={eventTime:p,lane:s,tag:i.tag,payload:i.payload,callback:i.callback,next:null},null===d?(c=d=p,u=f):d=d.next=p,l|=s;if(null===(i=i.next)){if(null===(s=o.shared.pending))break;i=s.next,s.next=null,o.lastBaseUpdate=s,o.shared.pending=null}}null===d&&(u=f),o.baseState=u,o.firstBaseUpdate=c,o.lastBaseUpdate=d,Ul|=l,e.lanes=l,e.memoizedState=f}}function ho(e,t,n){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],a=r.callback;if(null!==a){if(r.callback=null,r=n,"function"!=typeof a)throw Error(i(191,a));a.call(r)}}}var go=(new r.Component).refs;function bo(e,t,n,r){n=null==(n=n(r,t=e.memoizedState))?t:a({},t,n),e.memoizedState=n,0===e.lanes&&(e.updateQueue.baseState=n)}var vo={isMounted:function(e){return!!(e=e._reactInternals)&&Ye(e)===e},enqueueSetState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueReplaceState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.tag=1,o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=fs(),r=ps(e),a=co(n,r);a.tag=2,null!=t&&(a.callback=t),fo(e,a),ms(e,r,n)}};function yo(e,t,n,r,a,o,i){return"function"==typeof(e=e.stateNode).shouldComponentUpdate?e.shouldComponentUpdate(r,o,i):!t.prototype||!t.prototype.isPureReactComponent||(!fr(n,r)||!fr(a,o))}function wo(e,t,n){var r=!1,a=fa,o=t.contextType;return"object"==typeof o&&null!==o?o=io(o):(a=ba(t)?ha:pa.current,o=(r=null!=(r=t.contextTypes))?ga(e,a):fa),t=new t(n,o),e.memoizedState=null!==t.state&&void 0!==t.state?t.state:null,t.updater=vo,e.stateNode=t,t._reactInternals=e,r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=a,e.__reactInternalMemoizedMaskedChildContext=o),t}function ko(e,t,n,r){e=t.state,"function"==typeof t.componentWillReceiveProps&&t.componentWillReceiveProps(n,r),"function"==typeof t.UNSAFE_componentWillReceiveProps&&t.UNSAFE_componentWillReceiveProps(n,r),t.state!==e&&vo.enqueueReplaceState(t,t.state,null)}function Eo(e,t,n,r){var a=e.stateNode;a.props=n,a.state=e.memoizedState,a.refs=go,so(e);var o=t.contextType;"object"==typeof o&&null!==o?a.context=io(o):(o=ba(t)?ha:pa.current,a.context=ga(e,o)),mo(e,n,a,r),a.state=e.memoizedState,"function"==typeof(o=t.getDerivedStateFromProps)&&(bo(e,t,o,n),a.state=e.memoizedState),"function"==typeof t.getDerivedStateFromProps||"function"==typeof a.getSnapshotBeforeUpdate||"function"!=typeof a.UNSAFE_componentWillMount&&"function"!=typeof a.componentWillMount||(t=a.state,"function"==typeof a.componentWillMount&&a.componentWillMount(),"function"==typeof a.UNSAFE_componentWillMount&&a.UNSAFE_componentWillMount(),t!==a.state&&vo.enqueueReplaceState(a,a.state,null),mo(e,n,a,r),a.state=e.memoizedState),"function"==typeof a.componentDidMount&&(e.flags|=4)}var So=Array.isArray;function xo(e,t,n){if(null!==(e=n.ref)&&"function"!=typeof e&&"object"!=typeof e){if(n._owner){if(n=n._owner){if(1!==n.tag)throw Error(i(309));var r=n.stateNode}if(!r)throw Error(i(147,e));var a=""+e;return null!==t&&null!==t.ref&&"function"==typeof t.ref&&t.ref._stringRef===a?t.ref:(t=function(e){var t=r.refs;t===go&&(t=r.refs={}),null===e?delete t[a]:t[a]=e},t._stringRef=a,t)}if("string"!=typeof e)throw Error(i(284));if(!n._owner)throw Error(i(290,e))}return e}function Co(e,t){if("textarea"!==e.type)throw Error(i(31,"[object Object]"===Object.prototype.toString.call(t)?"object with keys {"+Object.keys(t).join(", ")+"}":t))}function _o(e){function t(t,n){if(e){var r=t.lastEffect;null!==r?(r.nextEffect=n,t.lastEffect=n):t.firstEffect=t.lastEffect=n,n.nextEffect=null,n.flags=8}}function n(n,r){if(!e)return null;for(;null!==r;)t(n,r),r=r.sibling;return null}function r(e,t){for(e=new Map;null!==t;)null!==t.key?e.set(t.key,t):e.set(t.index,t),t=t.sibling;return e}function a(e,t){return(e=Zs(e,t)).index=0,e.sibling=null,e}function o(t,n,r){return t.index=r,e?null!==(r=t.alternate)?(r=r.index)<n?(t.flags=2,n):r:(t.flags=2,n):n}function l(t){return e&&null===t.alternate&&(t.flags=2),t}function s(e,t,n,r){return null===t||6!==t.tag?((t=Ys(n,e.mode,r)).return=e,t):((t=a(t,n)).return=e,t)}function u(e,t,n,r){return null!==t&&t.elementType===n.type?((r=a(t,n.props)).ref=xo(e,t,n),r.return=e,r):((r=Vs(n.type,n.key,n.props,null,e.mode,r)).ref=xo(e,t,n),r.return=e,r)}function c(e,t,n,r){return null===t||4!==t.tag||t.stateNode.containerInfo!==n.containerInfo||t.stateNode.implementation!==n.implementation?((t=Qs(n,e.mode,r)).return=e,t):((t=a(t,n.children||[])).return=e,t)}function d(e,t,n,r,o){return null===t||7!==t.tag?((t=Ws(n,e.mode,r,o)).return=e,t):((t=a(t,n)).return=e,t)}function f(e,t,n){if("string"==typeof t||"number"==typeof t)return(t=Ys(""+t,e.mode,n)).return=e,t;if("object"==typeof t&&null!==t){switch(t.$$typeof){case E:return(n=Vs(t.type,t.key,t.props,null,e.mode,n)).ref=xo(e,null,t),n.return=e,n;case S:return(t=Qs(t,e.mode,n)).return=e,t}if(So(t)||$(t))return(t=Ws(t,e.mode,n,null)).return=e,t;Co(e,t)}return null}function p(e,t,n,r){var a=null!==t?t.key:null;if("string"==typeof n||"number"==typeof n)return null!==a?null:s(e,t,""+n,r);if("object"==typeof n&&null!==n){switch(n.$$typeof){case E:return n.key===a?n.type===x?d(e,t,n.props.children,r,a):u(e,t,n,r):null;case S:return n.key===a?c(e,t,n,r):null}if(So(n)||$(n))return null!==a?null:d(e,t,n,r,null);Co(e,n)}return null}function m(e,t,n,r,a){if("string"==typeof r||"number"==typeof r)return s(t,e=e.get(n)||null,""+r,a);if("object"==typeof r&&null!==r){switch(r.$$typeof){case E:return e=e.get(null===r.key?n:r.key)||null,r.type===x?d(t,e,r.props.children,a,r.key):u(t,e,r,a);case S:return c(t,e=e.get(null===r.key?n:r.key)||null,r,a)}if(So(r)||$(r))return d(t,e=e.get(n)||null,r,a,null);Co(t,r)}return null}function h(a,i,l,s){for(var u=null,c=null,d=i,h=i=0,g=null;null!==d&&h<l.length;h++){d.index>h?(g=d,d=null):g=d.sibling;var b=p(a,d,l[h],s);if(null===b){null===d&&(d=g);break}e&&d&&null===b.alternate&&t(a,d),i=o(b,i,h),null===c?u=b:c.sibling=b,c=b,d=g}if(h===l.length)return n(a,d),u;if(null===d){for(;h<l.length;h++)null!==(d=f(a,l[h],s))&&(i=o(d,i,h),null===c?u=d:c.sibling=d,c=d);return u}for(d=r(a,d);h<l.length;h++)null!==(g=m(d,a,h,l[h],s))&&(e&&null!==g.alternate&&d.delete(null===g.key?h:g.key),i=o(g,i,h),null===c?u=g:c.sibling=g,c=g);return e&&d.forEach((function(e){return t(a,e)})),u}function g(a,l,s,u){var c=$(s);if("function"!=typeof c)throw Error(i(150));if(null==(s=c.call(s)))throw Error(i(151));for(var d=c=null,h=l,g=l=0,b=null,v=s.next();null!==h&&!v.done;g++,v=s.next()){h.index>g?(b=h,h=null):b=h.sibling;var y=p(a,h,v.value,u);if(null===y){null===h&&(h=b);break}e&&h&&null===y.alternate&&t(a,h),l=o(y,l,g),null===d?c=y:d.sibling=y,d=y,h=b}if(v.done)return n(a,h),c;if(null===h){for(;!v.done;g++,v=s.next())null!==(v=f(a,v.value,u))&&(l=o(v,l,g),null===d?c=v:d.sibling=v,d=v);return c}for(h=r(a,h);!v.done;g++,v=s.next())null!==(v=m(h,a,g,v.value,u))&&(e&&null!==v.alternate&&h.delete(null===v.key?g:v.key),l=o(v,l,g),null===d?c=v:d.sibling=v,d=v);return e&&h.forEach((function(e){return t(a,e)})),c}return function(e,r,o,s){var u="object"==typeof o&&null!==o&&o.type===x&&null===o.key;u&&(o=o.props.children);var c="object"==typeof o&&null!==o;if(c)switch(o.$$typeof){case E:e:{for(c=o.key,u=r;null!==u;){if(u.key===c){if(7===u.tag){if(o.type===x){n(e,u.sibling),(r=a(u,o.props.children)).return=e,e=r;break e}}else if(u.elementType===o.type){n(e,u.sibling),(r=a(u,o.props)).ref=xo(e,u,o),r.return=e,e=r;break e}n(e,u);break}t(e,u),u=u.sibling}o.type===x?((r=Ws(o.props.children,e.mode,s,o.key)).return=e,e=r):((s=Vs(o.type,o.key,o.props,null,e.mode,s)).ref=xo(e,r,o),s.return=e,e=s)}return l(e);case S:e:{for(u=o.key;null!==r;){if(r.key===u){if(4===r.tag&&r.stateNode.containerInfo===o.containerInfo&&r.stateNode.implementation===o.implementation){n(e,r.sibling),(r=a(r,o.children||[])).return=e,e=r;break e}n(e,r);break}t(e,r),r=r.sibling}(r=Qs(o,e.mode,s)).return=e,e=r}return l(e)}if("string"==typeof o||"number"==typeof o)return o=""+o,null!==r&&6===r.tag?(n(e,r.sibling),(r=a(r,o)).return=e,e=r):(n(e,r),(r=Ys(o,e.mode,s)).return=e,e=r),l(e);if(So(o))return h(e,r,o,s);if($(o))return g(e,r,o,s);if(c&&Co(e,o),void 0===o&&!u)switch(e.tag){case 1:case 22:case 0:case 11:case 15:throw Error(i(152,V(e.type)||"Component"))}return n(e,r)}}var To=_o(!0),Ao=_o(!1),Lo={},Ro=ua(Lo),No=ua(Lo),Po=ua(Lo);function Oo(e){if(e===Lo)throw Error(i(174));return e}function Io(e,t){switch(da(Po,t),da(No,e),da(Ro,Lo),e=t.nodeType){case 9:case 11:t=(t=t.documentElement)?t.namespaceURI:me(null,"");break;default:t=me(t=(e=8===e?t.parentNode:t).namespaceURI||null,e=e.tagName)}ca(Ro),da(Ro,t)}function Do(){ca(Ro),ca(No),ca(Po)}function Mo(e){Oo(Po.current);var t=Oo(Ro.current),n=me(t,e.type);t!==n&&(da(No,e),da(Ro,n))}function Fo(e){No.current===e&&(ca(Ro),ca(No))}var Bo=ua(0);function jo(e){for(var t=e;null!==t;){if(13===t.tag){var n=t.memoizedState;if(null!==n&&(null===(n=n.dehydrated)||"$?"===n.data||"$!"===n.data))return t}else if(19===t.tag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.flags))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}return null}var zo=null,Uo=null,$o=!1;function qo(e,t){var n=Hs(5,null,null,0);n.elementType="DELETED",n.type="DELETED",n.stateNode=t,n.return=e,n.flags=8,null!==e.lastEffect?(e.lastEffect.nextEffect=n,e.lastEffect=n):e.firstEffect=e.lastEffect=n}function Ho(e,t){switch(e.tag){case 5:var n=e.type;return null!==(t=1!==t.nodeType||n.toLowerCase()!==t.nodeName.toLowerCase()?null:t)&&(e.stateNode=t,!0);case 6:return null!==(t=""===e.pendingProps||3!==t.nodeType?null:t)&&(e.stateNode=t,!0);default:return!1}}function Go(e){if($o){var t=Uo;if(t){var n=t;if(!Ho(e,t)){if(!(t=Wr(n.nextSibling))||!Ho(e,t))return e.flags=-1025&e.flags|2,$o=!1,void(zo=e);qo(zo,n)}zo=e,Uo=Wr(t.firstChild)}else e.flags=-1025&e.flags|2,$o=!1,zo=e}}function Zo(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;zo=e}function Vo(e){if(e!==zo)return!1;if(!$o)return Zo(e),$o=!0,!1;var t=e.type;if(5!==e.tag||"head"!==t&&"body"!==t&&!Hr(t,e.memoizedProps))for(t=Uo;t;)qo(e,t),t=Wr(t.nextSibling);if(Zo(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(i(317));e:{for(e=e.nextSibling,t=0;e;){if(8===e.nodeType){var n=e.data;if("/$"===n){if(0===t){Uo=Wr(e.nextSibling);break e}t--}else"$"!==n&&"$!"!==n&&"$?"!==n||t++}e=e.nextSibling}Uo=null}}else Uo=zo?Wr(e.stateNode.nextSibling):null;return!0}function Wo(){Uo=zo=null,$o=!1}var Ko=[];function Yo(){for(var e=0;e<Ko.length;e++)Ko[e]._workInProgressVersionPrimary=null;Ko.length=0}var Qo=k.ReactCurrentDispatcher,Xo=k.ReactCurrentBatchConfig,Jo=0,ei=null,ti=null,ni=null,ri=!1,ai=!1;function oi(){throw Error(i(321))}function ii(e,t){if(null===t)return!1;for(var n=0;n<t.length&&n<e.length;n++)if(!cr(e[n],t[n]))return!1;return!0}function li(e,t,n,r,a,o){if(Jo=o,ei=t,t.memoizedState=null,t.updateQueue=null,t.lanes=0,Qo.current=null===e||null===e.memoizedState?Oi:Ii,e=n(r,a),ai){o=0;do{if(ai=!1,!(25>o))throw Error(i(301));o+=1,ni=ti=null,t.updateQueue=null,Qo.current=Di,e=n(r,a)}while(ai)}if(Qo.current=Pi,t=null!==ti&&null!==ti.next,Jo=0,ni=ti=ei=null,ri=!1,t)throw Error(i(300));return e}function si(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===ni?ei.memoizedState=ni=e:ni=ni.next=e,ni}function ui(){if(null===ti){var e=ei.alternate;e=null!==e?e.memoizedState:null}else e=ti.next;var t=null===ni?ei.memoizedState:ni.next;if(null!==t)ni=t,ti=e;else{if(null===e)throw Error(i(310));e={memoizedState:(ti=e).memoizedState,baseState:ti.baseState,baseQueue:ti.baseQueue,queue:ti.queue,next:null},null===ni?ei.memoizedState=ni=e:ni=ni.next=e}return ni}function ci(e,t){return"function"==typeof t?t(e):t}function di(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=ti,a=r.baseQueue,o=n.pending;if(null!==o){if(null!==a){var l=a.next;a.next=o.next,o.next=l}r.baseQueue=a=o,n.pending=null}if(null!==a){a=a.next,r=r.baseState;var s=l=o=null,u=a;do{var c=u.lane;if((Jo&c)===c)null!==s&&(s=s.next={lane:0,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null}),r=u.eagerReducer===e?u.eagerState:e(r,u.action);else{var d={lane:c,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null};null===s?(l=s=d,o=r):s=s.next=d,ei.lanes|=c,Ul|=c}u=u.next}while(null!==u&&u!==a);null===s?o=r:s.next=l,cr(r,t.memoizedState)||(Fi=!0),t.memoizedState=r,t.baseState=o,t.baseQueue=s,n.lastRenderedState=r}return[t.memoizedState,n.dispatch]}function fi(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=n.dispatch,a=n.pending,o=t.memoizedState;if(null!==a){n.pending=null;var l=a=a.next;do{o=e(o,l.action),l=l.next}while(l!==a);cr(o,t.memoizedState)||(Fi=!0),t.memoizedState=o,null===t.baseQueue&&(t.baseState=o),n.lastRenderedState=o}return[o,r]}function pi(e,t,n){var r=t._getVersion;r=r(t._source);var a=t._workInProgressVersionPrimary;if(null!==a?e=a===r:(e=e.mutableReadLanes,(e=(Jo&e)===e)&&(t._workInProgressVersionPrimary=r,Ko.push(t))),e)return n(t._source);throw Ko.push(t),Error(i(350))}function mi(e,t,n,r){var a=Ol;if(null===a)throw Error(i(349));var o=t._getVersion,l=o(t._source),s=Qo.current,u=s.useState((function(){return pi(a,t,n)})),c=u[1],d=u[0];u=ni;var f=e.memoizedState,p=f.refs,m=p.getSnapshot,h=f.source;f=f.subscribe;var g=ei;return e.memoizedState={refs:p,source:t,subscribe:r},s.useEffect((function(){p.getSnapshot=n,p.setSnapshot=c;var e=o(t._source);if(!cr(l,e)){e=n(t._source),cr(d,e)||(c(e),e=ps(g),a.mutableReadLanes|=e&a.pendingLanes),e=a.mutableReadLanes,a.entangledLanes|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-Ht(i),u=1<<s;r[s]|=e,i&=~u}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(g);a.mutableReadLanes|=r&a.pendingLanes}catch(o){n((function(){throw o}))}}))}),[t,r]),cr(m,n)&&cr(h,t)&&cr(f,r)||((e={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:d}).dispatch=c=Ni.bind(null,ei,e),u.queue=e,u.baseQueue=null,d=pi(a,t,n),u.memoizedState=u.baseState=d),d}function hi(e,t,n){return mi(ui(),e,t,n)}function gi(e){var t=si();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:e}).dispatch=Ni.bind(null,ei,e),[t.memoizedState,e]}function bi(e,t,n,r){return e={tag:e,create:t,destroy:n,deps:r,next:null},null===(t=ei.updateQueue)?(t={lastEffect:null},ei.updateQueue=t,t.lastEffect=e.next=e):null===(n=t.lastEffect)?t.lastEffect=e.next=e:(r=n.next,n.next=e,e.next=r,t.lastEffect=e),e}function vi(e){return e={current:e},si().memoizedState=e}function yi(){return ui().memoizedState}function wi(e,t,n,r){var a=si();ei.flags|=e,a.memoizedState=bi(1|t,n,void 0,void 0===r?null:r)}function ki(e,t,n,r){var a=ui();r=void 0===r?null:r;var o=void 0;if(null!==ti){var i=ti.memoizedState;if(o=i.destroy,null!==r&&ii(r,i.deps))return void bi(t,n,o,r)}ei.flags|=e,a.memoizedState=bi(1|t,n,o,r)}function Ei(e,t){return wi(516,4,e,t)}function Si(e,t){return ki(516,4,e,t)}function xi(e,t){return ki(4,2,e,t)}function Ci(e,t){return"function"==typeof t?(e=e(),t(e),function(){t(null)}):null!=t?(e=e(),t.current=e,function(){t.current=null}):void 0}function _i(e,t,n){return n=null!=n?n.concat([e]):null,ki(4,2,Ci.bind(null,t,e),n)}function Ti(){}function Ai(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Li(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(e=e(),n.memoizedState=[e,t],e)}function Ri(e,t){var n=Ha();Za(98>n?98:n,(function(){e(!0)})),Za(97<n?97:n,(function(){var n=Xo.transition;Xo.transition=1;try{e(!1),t()}finally{Xo.transition=n}}))}function Ni(e,t,n){var r=fs(),a=ps(e),o={lane:a,action:n,eagerReducer:null,eagerState:null,next:null},i=t.pending;if(null===i?o.next=o:(o.next=i.next,i.next=o),t.pending=o,i=e.alternate,e===ei||null!==i&&i===ei)ai=ri=!0;else{if(0===e.lanes&&(null===i||0===i.lanes)&&null!==(i=t.lastRenderedReducer))try{var l=t.lastRenderedState,s=i(l,n);if(o.eagerReducer=i,o.eagerState=s,cr(s,l))return}catch(u){}ms(e,a,r)}}var Pi={readContext:io,useCallback:oi,useContext:oi,useEffect:oi,useImperativeHandle:oi,useLayoutEffect:oi,useMemo:oi,useReducer:oi,useRef:oi,useState:oi,useDebugValue:oi,useDeferredValue:oi,useTransition:oi,useMutableSource:oi,useOpaqueIdentifier:oi,unstable_isNewReconciler:!1},Oi={readContext:io,useCallback:function(e,t){return si().memoizedState=[e,void 0===t?null:t],e},useContext:io,useEffect:Ei,useImperativeHandle:function(e,t,n){return n=null!=n?n.concat([e]):null,wi(4,2,Ci.bind(null,t,e),n)},useLayoutEffect:function(e,t){return wi(4,2,e,t)},useMemo:function(e,t){var n=si();return t=void 0===t?null:t,e=e(),n.memoizedState=[e,t],e},useReducer:function(e,t,n){var r=si();return t=void 0!==n?n(t):t,r.memoizedState=r.baseState=t,e=(e=r.queue={pending:null,dispatch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=Ni.bind(null,ei,e),[r.memoizedState,e]},useRef:vi,useState:gi,useDebugValue:Ti,useDeferredValue:function(e){var t=gi(e),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=gi(!1),t=e[0];return vi(e=Ri.bind(null,e[1])),[e,t]},useMutableSource:function(e,t,n){var r=si();return r.memoizedState={refs:{getSnapshot:t,setSnapshot:null},source:e,subscribe:n},mi(r,e,t,n)},useOpaqueIdentifier:function(){if($o){var e=!1,t=function(e){return{$$typeof:D,toString:e,valueOf:e}}((function(){throw e||(e=!0,n("r:"+(Yr++).toString(36))),Error(i(355))})),n=gi(t)[1];return 0==(2&ei.mode)&&(ei.flags|=516,bi(5,(function(){n("r:"+(Yr++).toString(36))}),void 0,null)),t}return gi(t="r:"+(Yr++).toString(36)),t},unstable_isNewReconciler:!1},Ii={readContext:io,useCallback:Ai,useContext:io,useEffect:Si,useImperativeHandle:_i,useLayoutEffect:xi,useMemo:Li,useReducer:di,useRef:yi,useState:function(){return di(ci)},useDebugValue:Ti,useDeferredValue:function(e){var t=di(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=di(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return di(ci)[0]},unstable_isNewReconciler:!1},Di={readContext:io,useCallback:Ai,useContext:io,useEffect:Si,useImperativeHandle:_i,useLayoutEffect:xi,useMemo:Li,useReducer:fi,useRef:yi,useState:function(){return fi(ci)},useDebugValue:Ti,useDeferredValue:function(e){var t=fi(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=fi(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return fi(ci)[0]},unstable_isNewReconciler:!1},Mi=k.ReactCurrentOwner,Fi=!1;function Bi(e,t,n,r){t.child=null===e?Ao(t,null,n,r):To(t,e.child,n,r)}function ji(e,t,n,r,a){n=n.render;var o=t.ref;return oo(t,a),r=li(e,t,n,r,o,a),null===e||Fi?(t.flags|=1,Bi(e,t,r,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function zi(e,t,n,r,a,o){if(null===e){var i=n.type;return"function"!=typeof i||Gs(i)||void 0!==i.defaultProps||null!==n.compare||void 0!==n.defaultProps?((e=Vs(n.type,null,r,t,t.mode,o)).ref=t.ref,e.return=t,t.child=e):(t.tag=15,t.type=i,Ui(e,t,i,r,a,o))}return i=e.child,0==(a&o)&&(a=i.memoizedProps,(n=null!==(n=n.compare)?n:fr)(a,r)&&e.ref===t.ref)?ol(e,t,o):(t.flags|=1,(e=Zs(i,r)).ref=t.ref,e.return=t,t.child=e)}function Ui(e,t,n,r,a,o){if(null!==e&&fr(e.memoizedProps,r)&&e.ref===t.ref){if(Fi=!1,0==(o&a))return t.lanes=e.lanes,ol(e,t,o);0!=(16384&e.flags)&&(Fi=!0)}return Hi(e,t,n,r,o)}function $i(e,t,n){var r=t.pendingProps,a=r.children,o=null!==e?e.memoizedState:null;if("hidden"===r.mode||"unstable-defer-without-hiding"===r.mode)if(0==(4&t.mode))t.memoizedState={baseLanes:0},Es(t,n);else{if(0==(1073741824&n))return e=null!==o?o.baseLanes|n:n,t.lanes=t.childLanes=1073741824,t.memoizedState={baseLanes:e},Es(t,e),null;t.memoizedState={baseLanes:0},Es(t,null!==o?o.baseLanes:n)}else null!==o?(r=o.baseLanes|n,t.memoizedState=null):r=n,Es(t,r);return Bi(e,t,a,n),t.child}function qi(e,t){var n=t.ref;(null===e&&null!==n||null!==e&&e.ref!==n)&&(t.flags|=128)}function Hi(e,t,n,r,a){var o=ba(n)?ha:pa.current;return o=ga(t,o),oo(t,a),n=li(e,t,n,r,o,a),null===e||Fi?(t.flags|=1,Bi(e,t,n,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function Gi(e,t,n,r,a){if(ba(n)){var o=!0;ka(t)}else o=!1;if(oo(t,a),null===t.stateNode)null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),wo(t,n,r),Eo(t,n,r,a),r=!0;else if(null===e){var i=t.stateNode,l=t.memoizedProps;i.props=l;var s=i.context,u=n.contextType;"object"==typeof u&&null!==u?u=io(u):u=ga(t,u=ba(n)?ha:pa.current);var c=n.getDerivedStateFromProps,d="function"==typeof c||"function"==typeof i.getSnapshotBeforeUpdate;d||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==r||s!==u)&&ko(t,i,r,u),lo=!1;var f=t.memoizedState;i.state=f,mo(t,r,i,a),s=t.memoizedState,l!==r||f!==s||ma.current||lo?("function"==typeof c&&(bo(t,n,c,r),s=t.memoizedState),(l=lo||yo(t,n,l,r,f,s,u))?(d||"function"!=typeof i.UNSAFE_componentWillMount&&"function"!=typeof i.componentWillMount||("function"==typeof i.componentWillMount&&i.componentWillMount(),"function"==typeof i.UNSAFE_componentWillMount&&i.UNSAFE_componentWillMount()),"function"==typeof i.componentDidMount&&(t.flags|=4)):("function"==typeof i.componentDidMount&&(t.flags|=4),t.memoizedProps=r,t.memoizedState=s),i.props=r,i.state=s,i.context=u,r=l):("function"==typeof i.componentDidMount&&(t.flags|=4),r=!1)}else{i=t.stateNode,uo(e,t),l=t.memoizedProps,u=t.type===t.elementType?l:Qa(t.type,l),i.props=u,d=t.pendingProps,f=i.context,"object"==typeof(s=n.contextType)&&null!==s?s=io(s):s=ga(t,s=ba(n)?ha:pa.current);var p=n.getDerivedStateFromProps;(c="function"==typeof p||"function"==typeof i.getSnapshotBeforeUpdate)||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==d||f!==s)&&ko(t,i,r,s),lo=!1,f=t.memoizedState,i.state=f,mo(t,r,i,a);var m=t.memoizedState;l!==d||f!==m||ma.current||lo?("function"==typeof p&&(bo(t,n,p,r),m=t.memoizedState),(u=lo||yo(t,n,u,r,f,m,s))?(c||"function"!=typeof i.UNSAFE_componentWillUpdate&&"function"!=typeof i.componentWillUpdate||("function"==typeof i.componentWillUpdate&&i.componentWillUpdate(r,m,s),"function"==typeof i.UNSAFE_componentWillUpdate&&i.UNSAFE_componentWillUpdate(r,m,s)),"function"==typeof i.componentDidUpdate&&(t.flags|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(t.flags|=256)):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),t.memoizedProps=r,t.memoizedState=m),i.props=r,i.state=m,i.context=s,r=u):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),r=!1)}return Zi(e,t,n,r,o,a)}function Zi(e,t,n,r,a,o){qi(e,t);var i=0!=(64&t.flags);if(!r&&!i)return a&&Ea(t,n,!1),ol(e,t,o);r=t.stateNode,Mi.current=t;var l=i&&"function"!=typeof n.getDerivedStateFromError?null:r.render();return t.flags|=1,null!==e&&i?(t.child=To(t,e.child,null,o),t.child=To(t,null,l,o)):Bi(e,t,l,o),t.memoizedState=r.state,a&&Ea(t,n,!0),t.child}function Vi(e){var t=e.stateNode;t.pendingContext?ya(0,t.pendingContext,t.pendingContext!==t.context):t.context&&ya(0,t.context,!1),Io(e,t.containerInfo)}var Wi,Ki,Yi,Qi={dehydrated:null,retryLane:0};function Xi(e,t,n){var r,a=t.pendingProps,o=Bo.current,i=!1;return(r=0!=(64&t.flags))||(r=(null===e||null!==e.memoizedState)&&0!=(2&o)),r?(i=!0,t.flags&=-65):null!==e&&null===e.memoizedState||void 0===a.fallback||!0===a.unstable_avoidThisFallback||(o|=1),da(Bo,1&o),null===e?(void 0!==a.fallback&&Go(t),e=a.children,o=a.fallback,i?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Qi,e):"number"==typeof a.unstable_expectedLoadTime?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Qi,t.lanes=33554432,e):((n=Ks({mode:"visible",children:e},t.mode,n,null)).return=t,t.child=n)):(e.memoizedState,i?(a=tl(e,t,a.children,a.fallback,n),i=t.child,o=e.child.memoizedState,i.memoizedState=null===o?{baseLanes:n}:{baseLanes:o.baseLanes|n},i.childLanes=e.childLanes&~n,t.memoizedState=Qi,a):(n=el(e,t,a.children,n),t.memoizedState=null,n))}function Ji(e,t,n,r){var a=e.mode,o=e.child;return t={mode:"hidden",children:t},0==(2&a)&&null!==o?(o.childLanes=0,o.pendingProps=t):o=Ks(t,a,0,null),n=Ws(n,a,r,null),o.return=e,n.return=e,o.sibling=n,e.child=o,n}function el(e,t,n,r){var a=e.child;return e=a.sibling,n=Zs(a,{mode:"visible",children:n}),0==(2&t.mode)&&(n.lanes=r),n.return=t,n.sibling=null,null!==e&&(e.nextEffect=null,e.flags=8,t.firstEffect=t.lastEffect=e),t.child=n}function tl(e,t,n,r,a){var o=t.mode,i=e.child;e=i.sibling;var l={mode:"hidden",children:n};return 0==(2&o)&&t.child!==i?((n=t.child).childLanes=0,n.pendingProps=l,null!==(i=n.lastEffect)?(t.firstEffect=n.firstEffect,t.lastEffect=i,i.nextEffect=null):t.firstEffect=t.lastEffect=null):n=Zs(i,l),null!==e?r=Zs(e,r):(r=Ws(r,o,a,null)).flags|=2,r.return=t,n.return=t,n.sibling=r,t.child=n,r}function nl(e,t){e.lanes|=t;var n=e.alternate;null!==n&&(n.lanes|=t),ao(e.return,t)}function rl(e,t,n,r,a,o){var i=e.memoizedState;null===i?e.memoizedState={isBackwards:t,rendering:null,renderingStartTime:0,last:r,tail:n,tailMode:a,lastEffect:o}:(i.isBackwards=t,i.rendering=null,i.renderingStartTime=0,i.last=r,i.tail=n,i.tailMode=a,i.lastEffect=o)}function al(e,t,n){var r=t.pendingProps,a=r.revealOrder,o=r.tail;if(Bi(e,t,r.children,n),0!=(2&(r=Bo.current)))r=1&r|2,t.flags|=64;else{if(null!==e&&0!=(64&e.flags))e:for(e=t.child;null!==e;){if(13===e.tag)null!==e.memoizedState&&nl(e,n);else if(19===e.tag)nl(e,n);else if(null!==e.child){e.child.return=e,e=e.child;continue}if(e===t)break e;for(;null===e.sibling;){if(null===e.return||e.return===t)break e;e=e.return}e.sibling.return=e.return,e=e.sibling}r&=1}if(da(Bo,r),0==(2&t.mode))t.memoizedState=null;else switch(a){case"forwards":for(n=t.child,a=null;null!==n;)null!==(e=n.alternate)&&null===jo(e)&&(a=n),n=n.sibling;null===(n=a)?(a=t.child,t.child=null):(a=n.sibling,n.sibling=null),rl(t,!1,a,n,o,t.lastEffect);break;case"backwards":for(n=null,a=t.child,t.child=null;null!==a;){if(null!==(e=a.alternate)&&null===jo(e)){t.child=a;break}e=a.sibling,a.sibling=n,n=a,a=e}rl(t,!0,n,null,o,t.lastEffect);break;case"together":rl(t,!1,null,null,void 0,t.lastEffect);break;default:t.memoizedState=null}return t.child}function ol(e,t,n){if(null!==e&&(t.dependencies=e.dependencies),Ul|=t.lanes,0!=(n&t.childLanes)){if(null!==e&&t.child!==e.child)throw Error(i(153));if(null!==t.child){for(n=Zs(e=t.child,e.pendingProps),t.child=n,n.return=t;null!==e.sibling;)e=e.sibling,(n=n.sibling=Zs(e,e.pendingProps)).return=t;n.sibling=null}return t.child}return null}function il(e,t){if(!$o)switch(e.tailMode){case"hidden":t=e.tail;for(var n=null;null!==t;)null!==t.alternate&&(n=t),t=t.sibling;null===n?e.tail=null:n.sibling=null;break;case"collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t||null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function ll(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12:case 9:case 14:return null;case 1:case 17:return ba(t.type)&&va(),null;case 3:return Do(),ca(ma),ca(pa),Yo(),(r=t.stateNode).pendingContext&&(r.context=r.pendingContext,r.pendingContext=null),null!==e&&null!==e.child||(Vo(t)?t.flags|=4:r.hydrate||(t.flags|=256)),null;case 5:Fo(t);var o=Oo(Po.current);if(n=t.type,null!==e&&null!=t.stateNode)Ki(e,t,n,r),e.ref!==t.ref&&(t.flags|=128);else{if(!r){if(null===t.stateNode)throw Error(i(166));return null}if(e=Oo(Ro.current),Vo(t)){r=t.stateNode,n=t.type;var l=t.memoizedProps;switch(r[Xr]=t,r[Jr]=l,n){case"dialog":Rr("cancel",r),Rr("close",r);break;case"iframe":case"object":case"embed":Rr("load",r);break;case"video":case"audio":for(e=0;e<_r.length;e++)Rr(_r[e],r);break;case"source":Rr("error",r);break;case"img":case"image":case"link":Rr("error",r),Rr("load",r);break;case"details":Rr("toggle",r);break;case"input":ee(r,l),Rr("invalid",r);break;case"select":r._wrapperState={wasMultiple:!!l.multiple},Rr("invalid",r);break;case"textarea":se(r,l),Rr("invalid",r)}for(var u in xe(n,l),e=null,l)l.hasOwnProperty(u)&&(o=l[u],"children"===u?"string"==typeof o?r.textContent!==o&&(e=["children",o]):"number"==typeof o&&r.textContent!==""+o&&(e=["children",""+o]):s.hasOwnProperty(u)&&null!=o&&"onScroll"===u&&Rr("scroll",r));switch(n){case"input":Y(r),re(r,l,!0);break;case"textarea":Y(r),ce(r);break;case"select":case"option":break;default:"function"==typeof l.onClick&&(r.onclick=zr)}r=e,t.updateQueue=r,null!==r&&(t.flags|=4)}else{switch(u=9===o.nodeType?o:o.ownerDocument,e===de&&(e=pe(n)),e===de?"script"===n?((e=u.createElement("div")).innerHTML="<script><\/script>",e=e.removeChild(e.firstChild)):"string"==typeof r.is?e=u.createElement(n,{is:r.is}):(e=u.createElement(n),"select"===n&&(u=e,r.multiple?u.multiple=!0:r.size&&(u.size=r.size))):e=u.createElementNS(e,n),e[Xr]=t,e[Jr]=r,Wi(e,t),t.stateNode=e,u=Ce(n,r),n){case"dialog":Rr("cancel",e),Rr("close",e),o=r;break;case"iframe":case"object":case"embed":Rr("load",e),o=r;break;case"video":case"audio":for(o=0;o<_r.length;o++)Rr(_r[o],e);o=r;break;case"source":Rr("error",e),o=r;break;case"img":case"image":case"link":Rr("error",e),Rr("load",e),o=r;break;case"details":Rr("toggle",e),o=r;break;case"input":ee(e,r),o=J(e,r),Rr("invalid",e);break;case"option":o=oe(e,r);break;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Rr("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Rr("invalid",e);break;default:o=r}xe(n,o);var c=o;for(l in c)if(c.hasOwnProperty(l)){var d=c[l];"style"===l?Ee(e,d):"dangerouslySetInnerHTML"===l?null!=(d=d?d.__html:void 0)&&be(e,d):"children"===l?"string"==typeof d?("textarea"!==n||""!==d)&&ve(e,d):"number"==typeof d&&ve(e,""+d):"suppressContentEditableWarning"!==l&&"suppressHydrationWarning"!==l&&"autoFocus"!==l&&(s.hasOwnProperty(l)?null!=d&&"onScroll"===l&&Rr("scroll",e):null!=d&&w(e,l,d,u))}switch(n){case"input":Y(e),re(e,r,!1);break;case"textarea":Y(e),ce(e);break;case"option":null!=r.value&&e.setAttribute("value",""+W(r.value));break;case"select":e.multiple=!!r.multiple,null!=(l=r.value)?ie(e,!!r.multiple,l,!1):null!=r.defaultValue&&ie(e,!!r.multiple,r.defaultValue,!0);break;default:"function"==typeof o.onClick&&(e.onclick=zr)}qr(n,r)&&(t.flags|=4)}null!==t.ref&&(t.flags|=128)}return null;case 6:if(e&&null!=t.stateNode)Yi(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(i(166));n=Oo(Po.current),Oo(Ro.current),Vo(t)?(r=t.stateNode,n=t.memoizedProps,r[Xr]=t,r.nodeValue!==n&&(t.flags|=4)):((r=(9===n.nodeType?n:n.ownerDocument).createTextNode(r))[Xr]=t,t.stateNode=r)}return null;case 13:return ca(Bo),r=t.memoizedState,0!=(64&t.flags)?(t.lanes=n,t):(r=null!==r,n=!1,null===e?void 0!==t.memoizedProps.fallback&&Vo(t):n=null!==e.memoizedState,r&&!n&&0!=(2&t.mode)&&(null===e&&!0!==t.memoizedProps.unstable_avoidThisFallback||0!=(1&Bo.current)?0===Bl&&(Bl=3):(0!==Bl&&3!==Bl||(Bl=4),null===Ol||0==(134217727&Ul)&&0==(134217727&$l)||vs(Ol,Dl))),(r||n)&&(t.flags|=4),null);case 4:return Do(),null===e&&Pr(t.stateNode.containerInfo),null;case 10:return ro(t),null;case 19:if(ca(Bo),null===(r=t.memoizedState))return null;if(l=0!=(64&t.flags),null===(u=r.rendering))if(l)il(r,!1);else{if(0!==Bl||null!==e&&0!=(64&e.flags))for(e=t.child;null!==e;){if(null!==(u=jo(e))){for(t.flags|=64,il(r,!1),null!==(l=u.updateQueue)&&(t.updateQueue=l,t.flags|=4),null===r.lastEffect&&(t.firstEffect=null),t.lastEffect=r.lastEffect,r=n,n=t.child;null!==n;)e=r,(l=n).flags&=2,l.nextEffect=null,l.firstEffect=null,l.lastEffect=null,null===(u=l.alternate)?(l.childLanes=0,l.lanes=e,l.child=null,l.memoizedProps=null,l.memoizedState=null,l.updateQueue=null,l.dependencies=null,l.stateNode=null):(l.childLanes=u.childLanes,l.lanes=u.lanes,l.child=u.child,l.memoizedProps=u.memoizedProps,l.memoizedState=u.memoizedState,l.updateQueue=u.updateQueue,l.type=u.type,e=u.dependencies,l.dependencies=null===e?null:{lanes:e.lanes,firstContext:e.firstContext}),n=n.sibling;return da(Bo,1&Bo.current|2),t.child}e=e.sibling}null!==r.tail&&qa()>Zl&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432)}else{if(!l)if(null!==(e=jo(u))){if(t.flags|=64,l=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags|=4),il(r,!0),null===r.tail&&"hidden"===r.tailMode&&!u.alternate&&!$o)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null),null}else 2*qa()-r.renderingStartTime>Zl&&1073741824!==n&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432);r.isBackwards?(u.sibling=t.child,t.child=u):(null!==(n=r.last)?n.sibling=u:t.child=u,r.last=u)}return null!==r.tail?(n=r.tail,r.rendering=n,r.tail=n.sibling,r.lastEffect=t.lastEffect,r.renderingStartTime=qa(),n.sibling=null,t=Bo.current,da(Bo,l?1&t|2:1&t),n):null;case 23:case 24:return Ss(),null!==e&&null!==e.memoizedState!=(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags|=4),null}throw Error(i(156,t.tag))}function sl(e){switch(e.tag){case 1:ba(e.type)&&va();var t=e.flags;return 4096&t?(e.flags=-4097&t|64,e):null;case 3:if(Do(),ca(ma),ca(pa),Yo(),0!=(64&(t=e.flags)))throw Error(i(285));return e.flags=-4097&t|64,e;case 5:return Fo(e),null;case 13:return ca(Bo),4096&(t=e.flags)?(e.flags=-4097&t|64,e):null;case 19:return ca(Bo),null;case 4:return Do(),null;case 10:return ro(e),null;case 23:case 24:return Ss(),null;default:return null}}function ul(e,t){try{var n="",r=t;do{n+=Z(r),r=r.return}while(r);var a=n}catch(o){a="\nError generating stack: "+o.message+"\n"+o.stack}return{value:e,source:t,stack:a}}function cl(e,t){try{console.error(t.value)}catch(n){setTimeout((function(){throw n}))}}Wi=function(e,t){for(var n=t.child;null!==n;){if(5===n.tag||6===n.tag)e.appendChild(n.stateNode);else if(4!==n.tag&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===t)break;for(;null===n.sibling;){if(null===n.return||n.return===t)return;n=n.return}n.sibling.return=n.return,n=n.sibling}},Ki=function(e,t,n,r){var o=e.memoizedProps;if(o!==r){e=t.stateNode,Oo(Ro.current);var i,l=null;switch(n){case"input":o=J(e,o),r=J(e,r),l=[];break;case"option":o=oe(e,o),r=oe(e,r),l=[];break;case"select":o=a({},o,{value:void 0}),r=a({},r,{value:void 0}),l=[];break;case"textarea":o=le(e,o),r=le(e,r),l=[];break;default:"function"!=typeof o.onClick&&"function"==typeof r.onClick&&(e.onclick=zr)}for(d in xe(n,r),n=null,o)if(!r.hasOwnProperty(d)&&o.hasOwnProperty(d)&&null!=o[d])if("style"===d){var u=o[d];for(i in u)u.hasOwnProperty(i)&&(n||(n={}),n[i]="")}else"dangerouslySetInnerHTML"!==d&&"children"!==d&&"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&"autoFocus"!==d&&(s.hasOwnProperty(d)?l||(l=[]):(l=l||[]).push(d,null));for(d in r){var c=r[d];if(u=null!=o?o[d]:void 0,r.hasOwnProperty(d)&&c!==u&&(null!=c||null!=u))if("style"===d)if(u){for(i in u)!u.hasOwnProperty(i)||c&&c.hasOwnProperty(i)||(n||(n={}),n[i]="");for(i in c)c.hasOwnProperty(i)&&u[i]!==c[i]&&(n||(n={}),n[i]=c[i])}else n||(l||(l=[]),l.push(d,n)),n=c;else"dangerouslySetInnerHTML"===d?(c=c?c.__html:void 0,u=u?u.__html:void 0,null!=c&&u!==c&&(l=l||[]).push(d,c)):"children"===d?"string"!=typeof c&&"number"!=typeof c||(l=l||[]).push(d,""+c):"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&(s.hasOwnProperty(d)?(null!=c&&"onScroll"===d&&Rr("scroll",e),l||u===c||(l=[])):"object"==typeof c&&null!==c&&c.$$typeof===D?c.toString():(l=l||[]).push(d,c))}n&&(l=l||[]).push("style",n);var d=l;(t.updateQueue=d)&&(t.flags|=4)}},Yi=function(e,t,n,r){n!==r&&(t.flags|=4)};var dl="function"==typeof WeakMap?WeakMap:Map;function fl(e,t,n){(n=co(-1,n)).tag=3,n.payload={element:null};var r=t.value;return n.callback=function(){Yl||(Yl=!0,Ql=r),cl(0,t)},n}function pl(e,t,n){(n=co(-1,n)).tag=3;var r=e.type.getDerivedStateFromError;if("function"==typeof r){var a=t.value;n.payload=function(){return cl(0,t),r(a)}}var o=e.stateNode;return null!==o&&"function"==typeof o.componentDidCatch&&(n.callback=function(){"function"!=typeof r&&(null===Xl?Xl=new Set([this]):Xl.add(this),cl(0,t));var e=t.stack;this.componentDidCatch(t.value,{componentStack:null!==e?e:""})}),n}var ml="function"==typeof WeakSet?WeakSet:Set;function hl(e){var t=e.ref;if(null!==t)if("function"==typeof t)try{t(null)}catch(n){zs(e,n)}else t.current=null}function gl(e,t){switch(t.tag){case 0:case 11:case 15:case 22:case 5:case 6:case 4:case 17:return;case 1:if(256&t.flags&&null!==e){var n=e.memoizedProps,r=e.memoizedState;t=(e=t.stateNode).getSnapshotBeforeUpdate(t.elementType===t.type?n:Qa(t.type,n),r),e.__reactInternalSnapshotBeforeUpdate=t}return;case 3:return void(256&t.flags&&Vr(t.stateNode.containerInfo))}throw Error(i(163))}function bl(e,t,n){switch(n.tag){case 0:case 11:case 15:case 22:if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{if(3==(3&e.tag)){var r=e.create;e.destroy=r()}e=e.next}while(e!==t)}if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{var a=e;r=a.next,0!=(4&(a=a.tag))&&0!=(1&a)&&(Fs(n,e),Ms(n,e)),e=r}while(e!==t)}return;case 1:return e=n.stateNode,4&n.flags&&(null===t?e.componentDidMount():(r=n.elementType===n.type?t.memoizedProps:Qa(n.type,t.memoizedProps),e.componentDidUpdate(r,t.memoizedState,e.__reactInternalSnapshotBeforeUpdate))),void(null!==(t=n.updateQueue)&&ho(n,t,e));case 3:if(null!==(t=n.updateQueue)){if(e=null,null!==n.child)switch(n.child.tag){case 5:case 1:e=n.child.stateNode}ho(n,t,e)}return;case 5:return e=n.stateNode,void(null===t&&4&n.flags&&qr(n.type,n.memoizedProps)&&e.focus());case 6:case 4:case 12:case 19:case 17:case 20:case 21:case 23:case 24:return;case 13:return void(null===n.memoizedState&&(n=n.alternate,null!==n&&(n=n.memoizedState,null!==n&&(n=n.dehydrated,null!==n&&Et(n)))))}throw Error(i(163))}function vl(e,t){for(var n=e;;){if(5===n.tag){var r=n.stateNode;if(t)"function"==typeof(r=r.style).setProperty?r.setProperty("display","none","important"):r.display="none";else{r=n.stateNode;var a=n.memoizedProps.style;a=null!=a&&a.hasOwnProperty("display")?a.display:null,r.style.display=ke("display",a)}}else if(6===n.tag)n.stateNode.nodeValue=t?"":n.memoizedProps;else if((23!==n.tag&&24!==n.tag||null===n.memoizedState||n===e)&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===e)break;for(;null===n.sibling;){if(null===n.return||n.return===e)return;n=n.return}n.sibling.return=n.return,n=n.sibling}}function yl(e,t){if(xa&&"function"==typeof xa.onCommitFiberUnmount)try{xa.onCommitFiberUnmount(Sa,t)}catch(o){}switch(t.tag){case 0:case 11:case 14:case 15:case 22:if(null!==(e=t.updateQueue)&&null!==(e=e.lastEffect)){var n=e=e.next;do{var r=n,a=r.destroy;if(r=r.tag,void 0!==a)if(0!=(4&r))Fs(t,n);else{r=t;try{a()}catch(o){zs(r,o)}}n=n.next}while(n!==e)}break;case 1:if(hl(t),"function"==typeof(e=t.stateNode).componentWillUnmount)try{e.props=t.memoizedProps,e.state=t.memoizedState,e.componentWillUnmount()}catch(o){zs(t,o)}break;case 5:hl(t);break;case 4:Cl(e,t)}}function wl(e){e.alternate=null,e.child=null,e.dependencies=null,e.firstEffect=null,e.lastEffect=null,e.memoizedProps=null,e.memoizedState=null,e.pendingProps=null,e.return=null,e.updateQueue=null}function kl(e){return 5===e.tag||3===e.tag||4===e.tag}function El(e){e:{for(var t=e.return;null!==t;){if(kl(t))break e;t=t.return}throw Error(i(160))}var n=t;switch(t=n.stateNode,n.tag){case 5:var r=!1;break;case 3:case 4:t=t.containerInfo,r=!0;break;default:throw Error(i(161))}16&n.flags&&(ve(t,""),n.flags&=-17);e:t:for(n=e;;){for(;null===n.sibling;){if(null===n.return||kl(n.return)){n=null;break e}n=n.return}for(n.sibling.return=n.return,n=n.sibling;5!==n.tag&&6!==n.tag&&18!==n.tag;){if(2&n.flags)continue t;if(null===n.child||4===n.tag)continue t;n.child.return=n,n=n.child}if(!(2&n.flags)){n=n.stateNode;break e}}r?Sl(e,n,t):xl(e,n,t)}function Sl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?8===n.nodeType?n.parentNode.insertBefore(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!=(n=n._reactRootContainer)||null!==t.onclick||(t.onclick=zr));else if(4!==r&&null!==(e=e.child))for(Sl(e,t,n),e=e.sibling;null!==e;)Sl(e,t,n),e=e.sibling}function xl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?n.insertBefore(e,t):n.appendChild(e);else if(4!==r&&null!==(e=e.child))for(xl(e,t,n),e=e.sibling;null!==e;)xl(e,t,n),e=e.sibling}function Cl(e,t){for(var n,r,a=t,o=!1;;){if(!o){o=a.return;e:for(;;){if(null===o)throw Error(i(160));switch(n=o.stateNode,o.tag){case 5:r=!1;break e;case 3:case 4:n=n.containerInfo,r=!0;break e}o=o.return}o=!0}if(5===a.tag||6===a.tag){e:for(var l=e,s=a,u=s;;)if(yl(l,u),null!==u.child&&4!==u.tag)u.child.return=u,u=u.child;else{if(u===s)break e;for(;null===u.sibling;){if(null===u.return||u.return===s)break e;u=u.return}u.sibling.return=u.return,u=u.sibling}r?(l=n,s=a.stateNode,8===l.nodeType?l.parentNode.removeChild(s):l.removeChild(s)):n.removeChild(a.stateNode)}else if(4===a.tag){if(null!==a.child){n=a.stateNode.containerInfo,r=!0,a.child.return=a,a=a.child;continue}}else if(yl(e,a),null!==a.child){a.child.return=a,a=a.child;continue}if(a===t)break;for(;null===a.sibling;){if(null===a.return||a.return===t)return;4===(a=a.return).tag&&(o=!1)}a.sibling.return=a.return,a=a.sibling}}function _l(e,t){switch(t.tag){case 0:case 11:case 14:case 15:case 22:var n=t.updateQueue;if(null!==(n=null!==n?n.lastEffect:null)){var r=n=n.next;do{3==(3&r.tag)&&(e=r.destroy,r.destroy=void 0,void 0!==e&&e()),r=r.next}while(r!==n)}return;case 1:case 12:case 17:return;case 5:if(null!=(n=t.stateNode)){r=t.memoizedProps;var a=null!==e?e.memoizedProps:r;e=t.type;var o=t.updateQueue;if(t.updateQueue=null,null!==o){for(n[Jr]=r,"input"===e&&"radio"===r.type&&null!=r.name&&te(n,r),Ce(e,a),t=Ce(e,r),a=0;a<o.length;a+=2){var l=o[a],s=o[a+1];"style"===l?Ee(n,s):"dangerouslySetInnerHTML"===l?be(n,s):"children"===l?ve(n,s):w(n,l,s,t)}switch(e){case"input":ne(n,r);break;case"textarea":ue(n,r);break;case"select":e=n._wrapperState.wasMultiple,n._wrapperState.wasMultiple=!!r.multiple,null!=(o=r.value)?ie(n,!!r.multiple,o,!1):e!==!!r.multiple&&(null!=r.defaultValue?ie(n,!!r.multiple,r.defaultValue,!0):ie(n,!!r.multiple,r.multiple?[]:"",!1))}}}return;case 6:if(null===t.stateNode)throw Error(i(162));return void(t.stateNode.nodeValue=t.memoizedProps);case 3:return void((n=t.stateNode).hydrate&&(n.hydrate=!1,Et(n.containerInfo)));case 13:return null!==t.memoizedState&&(Gl=qa(),vl(t.child,!0)),void Tl(t);case 19:return void Tl(t);case 23:case 24:return void vl(t,null!==t.memoizedState)}throw Error(i(163))}function Tl(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new ml),t.forEach((function(t){var r=$s.bind(null,e,t);n.has(t)||(n.add(t),t.then(r,r))}))}}function Al(e,t){return null!==e&&(null===(e=e.memoizedState)||null!==e.dehydrated)&&(null!==(t=t.memoizedState)&&null===t.dehydrated)}var Ll=Math.ceil,Rl=k.ReactCurrentDispatcher,Nl=k.ReactCurrentOwner,Pl=0,Ol=null,Il=null,Dl=0,Ml=0,Fl=ua(0),Bl=0,jl=null,zl=0,Ul=0,$l=0,ql=0,Hl=null,Gl=0,Zl=1/0;function Vl(){Zl=qa()+500}var Wl,Kl=null,Yl=!1,Ql=null,Xl=null,Jl=!1,es=null,ts=90,ns=[],rs=[],as=null,os=0,is=null,ls=-1,ss=0,us=0,cs=null,ds=!1;function fs(){return 0!=(48&Pl)?qa():-1!==ls?ls:ls=qa()}function ps(e){if(0==(2&(e=e.mode)))return 1;if(0==(4&e))return 99===Ha()?1:2;if(0===ss&&(ss=zl),0!==Ya.transition){0!==us&&(us=null!==Hl?Hl.pendingLanes:0),e=ss;var t=4186112&~us;return 0===(t&=-t)&&(0===(t=(e=4186112&~e)&-e)&&(t=8192)),t}return e=Ha(),0!=(4&Pl)&&98===e?e=zt(12,ss):e=zt(e=function(e){switch(e){case 99:return 15;case 98:return 10;case 97:case 96:return 8;case 95:return 2;default:return 0}}(e),ss),e}function ms(e,t,n){if(50<os)throw os=0,is=null,Error(i(185));if(null===(e=hs(e,t)))return null;qt(e,t,n),e===Ol&&($l|=t,4===Bl&&vs(e,Dl));var r=Ha();1===t?0!=(8&Pl)&&0==(48&Pl)?ys(e):(gs(e,n),0===Pl&&(Vl(),Wa())):(0==(4&Pl)||98!==r&&99!==r||(null===as?as=new Set([e]):as.add(e)),gs(e,n)),Hl=e}function hs(e,t){e.lanes|=t;var n=e.alternate;for(null!==n&&(n.lanes|=t),n=e,e=e.return;null!==e;)e.childLanes|=t,null!==(n=e.alternate)&&(n.childLanes|=t),n=e,e=e.return;return 3===n.tag?n.stateNode:null}function gs(e,t){for(var n=e.callbackNode,r=e.suspendedLanes,a=e.pingedLanes,o=e.expirationTimes,l=e.pendingLanes;0<l;){var s=31-Ht(l),u=1<<s,c=o[s];if(-1===c){if(0==(u&r)||0!=(u&a)){c=t,Ft(u);var d=Mt;o[s]=10<=d?c+250:6<=d?c+5e3:-1}}else c<=t&&(e.expiredLanes|=u);l&=~u}if(r=Bt(e,e===Ol?Dl:0),t=Mt,0===r)null!==n&&(n!==Fa&&Ta(n),e.callbackNode=null,e.callbackPriority=0);else{if(null!==n){if(e.callbackPriority===t)return;n!==Fa&&Ta(n)}15===t?(n=ys.bind(null,e),null===ja?(ja=[n],za=_a(Pa,Ka)):ja.push(n),n=Fa):14===t?n=Va(99,ys.bind(null,e)):(n=function(e){switch(e){case 15:case 14:return 99;case 13:case 12:case 11:case 10:return 98;case 9:case 8:case 7:case 6:case 4:case 5:return 97;case 3:case 2:case 1:return 95;case 0:return 90;default:throw Error(i(358,e))}}(t),n=Va(n,bs.bind(null,e))),e.callbackPriority=t,e.callbackNode=n}}function bs(e){if(ls=-1,us=ss=0,0!=(48&Pl))throw Error(i(327));var t=e.callbackNode;if(Ds()&&e.callbackNode!==t)return null;var n=Bt(e,e===Ol?Dl:0);if(0===n)return null;var r=n,a=Pl;Pl|=16;var o=_s();for(Ol===e&&Dl===r||(Vl(),xs(e,r));;)try{Ls();break}catch(s){Cs(e,s)}if(no(),Rl.current=o,Pl=a,null!==Il?r=0:(Ol=null,Dl=0,r=Bl),0!=(zl&$l))xs(e,0);else if(0!==r){if(2===r&&(Pl|=64,e.hydrate&&(e.hydrate=!1,Vr(e.containerInfo)),0!==(n=jt(e))&&(r=Ts(e,n))),1===r)throw t=jl,xs(e,0),vs(e,n),gs(e,qa()),t;switch(e.finishedWork=e.current.alternate,e.finishedLanes=n,r){case 0:case 1:throw Error(i(345));case 2:case 5:Ps(e);break;case 3:if(vs(e,n),(62914560&n)===n&&10<(r=Gl+500-qa())){if(0!==Bt(e,0))break;if(((a=e.suspendedLanes)&n)!==n){fs(),e.pingedLanes|=e.suspendedLanes&a;break}e.timeoutHandle=Gr(Ps.bind(null,e),r);break}Ps(e);break;case 4:if(vs(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-Ht(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=qa()-n)?120:480>n?480:1080>n?1080:1920>n?1920:3e3>n?3e3:4320>n?4320:1960*Ll(n/1960))-n)){e.timeoutHandle=Gr(Ps.bind(null,e),n);break}Ps(e);break;default:throw Error(i(329))}}return gs(e,qa()),e.callbackNode===t?bs.bind(null,e):null}function vs(e,t){for(t&=~ql,t&=~$l,e.suspendedLanes|=t,e.pingedLanes&=~t,e=e.expirationTimes;0<t;){var n=31-Ht(t),r=1<<n;e[n]=-1,t&=~r}}function ys(e){if(0!=(48&Pl))throw Error(i(327));if(Ds(),e===Ol&&0!=(e.expiredLanes&Dl)){var t=Dl,n=Ts(e,t);0!=(zl&$l)&&(n=Ts(e,t=Bt(e,t)))}else n=Ts(e,t=Bt(e,0));if(0!==e.tag&&2===n&&(Pl|=64,e.hydrate&&(e.hydrate=!1,Vr(e.containerInfo)),0!==(t=jt(e))&&(n=Ts(e,t))),1===n)throw n=jl,xs(e,0),vs(e,t),gs(e,qa()),n;return e.finishedWork=e.current.alternate,e.finishedLanes=t,Ps(e),gs(e,qa()),null}function ws(e,t){var n=Pl;Pl|=1;try{return e(t)}finally{0===(Pl=n)&&(Vl(),Wa())}}function ks(e,t){var n=Pl;Pl&=-2,Pl|=8;try{return e(t)}finally{0===(Pl=n)&&(Vl(),Wa())}}function Es(e,t){da(Fl,Ml),Ml|=t,zl|=t}function Ss(){Ml=Fl.current,ca(Fl)}function xs(e,t){e.finishedWork=null,e.finishedLanes=0;var n=e.timeoutHandle;if(-1!==n&&(e.timeoutHandle=-1,Zr(n)),null!==Il)for(n=Il.return;null!==n;){var r=n;switch(r.tag){case 1:null!=(r=r.type.childContextTypes)&&va();break;case 3:Do(),ca(ma),ca(pa),Yo();break;case 5:Fo(r);break;case 4:Do();break;case 13:case 19:ca(Bo);break;case 10:ro(r);break;case 23:case 24:Ss()}n=n.return}Ol=e,Il=Zs(e.current,null),Dl=Ml=zl=t,Bl=0,jl=null,ql=$l=Ul=0}function Cs(e,t){for(;;){var n=Il;try{if(no(),Qo.current=Pi,ri){for(var r=ei.memoizedState;null!==r;){var a=r.queue;null!==a&&(a.pending=null),r=r.next}ri=!1}if(Jo=0,ni=ti=ei=null,ai=!1,Nl.current=null,null===n||null===n.return){Bl=1,jl=t,Il=null;break}e:{var o=e,i=n.return,l=n,s=t;if(t=Dl,l.flags|=2048,l.firstEffect=l.lastEffect=null,null!==s&&"object"==typeof s&&"function"==typeof s.then){var u=s;if(0==(2&l.mode)){var c=l.alternate;c?(l.updateQueue=c.updateQueue,l.memoizedState=c.memoizedState,l.lanes=c.lanes):(l.updateQueue=null,l.memoizedState=null)}var d=0!=(1&Bo.current),f=i;do{var p;if(p=13===f.tag){var m=f.memoizedState;if(null!==m)p=null!==m.dehydrated;else{var h=f.memoizedProps;p=void 0!==h.fallback&&(!0!==h.unstable_avoidThisFallback||!d)}}if(p){var g=f.updateQueue;if(null===g){var b=new Set;b.add(u),f.updateQueue=b}else g.add(u);if(0==(2&f.mode)){if(f.flags|=64,l.flags|=16384,l.flags&=-2981,1===l.tag)if(null===l.alternate)l.tag=17;else{var v=co(-1,1);v.tag=2,fo(l,v)}l.lanes|=1;break e}s=void 0,l=t;var y=o.pingCache;if(null===y?(y=o.pingCache=new dl,s=new Set,y.set(u,s)):void 0===(s=y.get(u))&&(s=new Set,y.set(u,s)),!s.has(l)){s.add(l);var w=Us.bind(null,o,u,l);u.then(w,w)}f.flags|=4096,f.lanes=t;break e}f=f.return}while(null!==f);s=Error((V(l.type)||"A React component")+" suspended while rendering, but no fallback UI was specified.\n\nAdd a <Suspense fallback=...> component higher in the tree to provide a loading indicator or placeholder to display.")}5!==Bl&&(Bl=2),s=ul(s,l),f=i;do{switch(f.tag){case 3:o=s,f.flags|=4096,t&=-t,f.lanes|=t,po(f,fl(0,o,t));break e;case 1:o=s;var k=f.type,E=f.stateNode;if(0==(64&f.flags)&&("function"==typeof k.getDerivedStateFromError||null!==E&&"function"==typeof E.componentDidCatch&&(null===Xl||!Xl.has(E)))){f.flags|=4096,t&=-t,f.lanes|=t,po(f,pl(f,o,t));break e}}f=f.return}while(null!==f)}Ns(n)}catch(S){t=S,Il===n&&null!==n&&(Il=n=n.return);continue}break}}function _s(){var e=Rl.current;return Rl.current=Pi,null===e?Pi:e}function Ts(e,t){var n=Pl;Pl|=16;var r=_s();for(Ol===e&&Dl===t||xs(e,t);;)try{As();break}catch(a){Cs(e,a)}if(no(),Pl=n,Rl.current=r,null!==Il)throw Error(i(261));return Ol=null,Dl=0,Bl}function As(){for(;null!==Il;)Rs(Il)}function Ls(){for(;null!==Il&&!Aa();)Rs(Il)}function Rs(e){var t=Wl(e.alternate,e,Ml);e.memoizedProps=e.pendingProps,null===t?Ns(e):Il=t,Nl.current=null}function Ns(e){var t=e;do{var n=t.alternate;if(e=t.return,0==(2048&t.flags)){if(null!==(n=ll(n,t,Ml)))return void(Il=n);if(24!==(n=t).tag&&23!==n.tag||null===n.memoizedState||0!=(1073741824&Ml)||0==(4&n.mode)){for(var r=0,a=n.child;null!==a;)r|=a.lanes|a.childLanes,a=a.sibling;n.childLanes=r}null!==e&&0==(2048&e.flags)&&(null===e.firstEffect&&(e.firstEffect=t.firstEffect),null!==t.lastEffect&&(null!==e.lastEffect&&(e.lastEffect.nextEffect=t.firstEffect),e.lastEffect=t.lastEffect),1<t.flags&&(null!==e.lastEffect?e.lastEffect.nextEffect=t:e.firstEffect=t,e.lastEffect=t))}else{if(null!==(n=sl(t)))return n.flags&=2047,void(Il=n);null!==e&&(e.firstEffect=e.lastEffect=null,e.flags|=2048)}if(null!==(t=t.sibling))return void(Il=t);Il=t=e}while(null!==t);0===Bl&&(Bl=5)}function Ps(e){var t=Ha();return Za(99,Os.bind(null,e,t)),null}function Os(e,t){do{Ds()}while(null!==es);if(0!=(48&Pl))throw Error(i(327));var n=e.finishedWork;if(null===n)return null;if(e.finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(i(177));e.callbackNode=null;var r=n.lanes|n.childLanes,a=r,o=e.pendingLanes&~a;e.pendingLanes=a,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=a,e.mutableReadLanes&=a,e.entangledLanes&=a,a=e.entanglements;for(var l=e.eventTimes,s=e.expirationTimes;0<o;){var u=31-Ht(o),c=1<<u;a[u]=0,l[u]=-1,s[u]=-1,o&=~c}if(null!==as&&0==(24&r)&&as.has(e)&&as.delete(e),e===Ol&&(Il=Ol=null,Dl=0),1<n.flags?null!==n.lastEffect?(n.lastEffect.nextEffect=n,r=n.firstEffect):r=n:r=n.firstEffect,null!==r){if(a=Pl,Pl|=32,Nl.current=null,Ur=Kt,br(l=gr())){if("selectionStart"in l)s={start:l.selectionStart,end:l.selectionEnd};else e:if(s=(s=l.ownerDocument)&&s.defaultView||window,(c=s.getSelection&&s.getSelection())&&0!==c.rangeCount){s=c.anchorNode,o=c.anchorOffset,u=c.focusNode,c=c.focusOffset;try{s.nodeType,u.nodeType}catch(_){s=null;break e}var d=0,f=-1,p=-1,m=0,h=0,g=l,b=null;t:for(;;){for(var v;g!==s||0!==o&&3!==g.nodeType||(f=d+o),g!==u||0!==c&&3!==g.nodeType||(p=d+c),3===g.nodeType&&(d+=g.nodeValue.length),null!==(v=g.firstChild);)b=g,g=v;for(;;){if(g===l)break t;if(b===s&&++m===o&&(f=d),b===u&&++h===c&&(p=d),null!==(v=g.nextSibling))break;b=(g=b).parentNode}g=v}s=-1===f||-1===p?null:{start:f,end:p}}else s=null;s=s||{start:0,end:0}}else s=null;$r={focusedElem:l,selectionRange:s},Kt=!1,cs=null,ds=!1,Kl=r;do{try{Is()}catch(_){if(null===Kl)throw Error(i(330));zs(Kl,_),Kl=Kl.nextEffect}}while(null!==Kl);cs=null,Kl=r;do{try{for(l=e;null!==Kl;){var y=Kl.flags;if(16&y&&ve(Kl.stateNode,""),128&y){var w=Kl.alternate;if(null!==w){var k=w.ref;null!==k&&("function"==typeof k?k(null):k.current=null)}}switch(1038&y){case 2:El(Kl),Kl.flags&=-3;break;case 6:El(Kl),Kl.flags&=-3,_l(Kl.alternate,Kl);break;case 1024:Kl.flags&=-1025;break;case 1028:Kl.flags&=-1025,_l(Kl.alternate,Kl);break;case 4:_l(Kl.alternate,Kl);break;case 8:Cl(l,s=Kl);var E=s.alternate;wl(s),null!==E&&wl(E)}Kl=Kl.nextEffect}}catch(_){if(null===Kl)throw Error(i(330));zs(Kl,_),Kl=Kl.nextEffect}}while(null!==Kl);if(k=$r,w=gr(),y=k.focusedElem,l=k.selectionRange,w!==y&&y&&y.ownerDocument&&hr(y.ownerDocument.documentElement,y)){null!==l&&br(y)&&(w=l.start,void 0===(k=l.end)&&(k=w),"selectionStart"in y?(y.selectionStart=w,y.selectionEnd=Math.min(k,y.value.length)):(k=(w=y.ownerDocument||document)&&w.defaultView||window).getSelection&&(k=k.getSelection(),s=y.textContent.length,E=Math.min(l.start,s),l=void 0===l.end?E:Math.min(l.end,s),!k.extend&&E>l&&(s=l,l=E,E=s),s=mr(y,E),o=mr(y,l),s&&o&&(1!==k.rangeCount||k.anchorNode!==s.node||k.anchorOffset!==s.offset||k.focusNode!==o.node||k.focusOffset!==o.offset)&&((w=w.createRange()).setStart(s.node,s.offset),k.removeAllRanges(),E>l?(k.addRange(w),k.extend(o.node,o.offset)):(w.setEnd(o.node,o.offset),k.addRange(w))))),w=[];for(k=y;k=k.parentNode;)1===k.nodeType&&w.push({element:k,left:k.scrollLeft,top:k.scrollTop});for("function"==typeof y.focus&&y.focus(),y=0;y<w.length;y++)(k=w[y]).element.scrollLeft=k.left,k.element.scrollTop=k.top}Kt=!!Ur,$r=Ur=null,e.current=n,Kl=r;do{try{for(y=e;null!==Kl;){var S=Kl.flags;if(36&S&&bl(y,Kl.alternate,Kl),128&S){w=void 0;var x=Kl.ref;if(null!==x){var C=Kl.stateNode;Kl.tag,w=C,"function"==typeof x?x(w):x.current=w}}Kl=Kl.nextEffect}}catch(_){if(null===Kl)throw Error(i(330));zs(Kl,_),Kl=Kl.nextEffect}}while(null!==Kl);Kl=null,Ba(),Pl=a}else e.current=n;if(Jl)Jl=!1,es=e,ts=t;else for(Kl=r;null!==Kl;)t=Kl.nextEffect,Kl.nextEffect=null,8&Kl.flags&&((S=Kl).sibling=null,S.stateNode=null),Kl=t;if(0===(r=e.pendingLanes)&&(Xl=null),1===r?e===is?os++:(os=0,is=e):os=0,n=n.stateNode,xa&&"function"==typeof xa.onCommitFiberRoot)try{xa.onCommitFiberRoot(Sa,n,void 0,64==(64&n.current.flags))}catch(_){}if(gs(e,qa()),Yl)throw Yl=!1,e=Ql,Ql=null,e;return 0!=(8&Pl)||Wa(),null}function Is(){for(;null!==Kl;){var e=Kl.alternate;ds||null===cs||(0!=(8&Kl.flags)?et(Kl,cs)&&(ds=!0):13===Kl.tag&&Al(e,Kl)&&et(Kl,cs)&&(ds=!0));var t=Kl.flags;0!=(256&t)&&gl(e,Kl),0==(512&t)||Jl||(Jl=!0,Va(97,(function(){return Ds(),null}))),Kl=Kl.nextEffect}}function Ds(){if(90!==ts){var e=97<ts?97:ts;return ts=90,Za(e,Bs)}return!1}function Ms(e,t){ns.push(t,e),Jl||(Jl=!0,Va(97,(function(){return Ds(),null})))}function Fs(e,t){rs.push(t,e),Jl||(Jl=!0,Va(97,(function(){return Ds(),null})))}function Bs(){if(null===es)return!1;var e=es;if(es=null,0!=(48&Pl))throw Error(i(331));var t=Pl;Pl|=32;var n=rs;rs=[];for(var r=0;r<n.length;r+=2){var a=n[r],o=n[r+1],l=a.destroy;if(a.destroy=void 0,"function"==typeof l)try{l()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(n=ns,ns=[],r=0;r<n.length;r+=2){a=n[r],o=n[r+1];try{var s=a.create;a.destroy=s()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(s=e.current.firstEffect;null!==s;)e=s.nextEffect,s.nextEffect=null,8&s.flags&&(s.sibling=null,s.stateNode=null),s=e;return Pl=t,Wa(),!0}function js(e,t,n){fo(e,t=fl(0,t=ul(n,t),1)),t=fs(),null!==(e=hs(e,1))&&(qt(e,1,t),gs(e,t))}function zs(e,t){if(3===e.tag)js(e,e,t);else for(var n=e.return;null!==n;){if(3===n.tag){js(n,e,t);break}if(1===n.tag){var r=n.stateNode;if("function"==typeof n.type.getDerivedStateFromError||"function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r))){var a=pl(n,e=ul(t,e),1);if(fo(n,a),a=fs(),null!==(n=hs(n,1)))qt(n,1,a),gs(n,a);else if("function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r)))try{r.componentDidCatch(t,e)}catch(o){}break}}n=n.return}}function Us(e,t,n){var r=e.pingCache;null!==r&&r.delete(t),t=fs(),e.pingedLanes|=e.suspendedLanes&n,Ol===e&&(Dl&n)===n&&(4===Bl||3===Bl&&(62914560&Dl)===Dl&&500>qa()-Gl?xs(e,0):ql|=n),gs(e,t)}function $s(e,t){var n=e.stateNode;null!==n&&n.delete(t),0===(t=0)&&(0==(2&(t=e.mode))?t=1:0==(4&t)?t=99===Ha()?1:2:(0===ss&&(ss=zl),0===(t=Ut(62914560&~ss))&&(t=4194304))),n=fs(),null!==(e=hs(e,t))&&(qt(e,t,n),gs(e,n))}function qs(e,t,n,r){this.tag=e,this.key=n,this.sibling=this.child=this.return=this.stateNode=this.type=this.elementType=null,this.index=0,this.ref=null,this.pendingProps=t,this.dependencies=this.memoizedState=this.updateQueue=this.memoizedProps=null,this.mode=r,this.flags=0,this.lastEffect=this.firstEffect=this.nextEffect=null,this.childLanes=this.lanes=0,this.alternate=null}function Hs(e,t,n,r){return new qs(e,t,n,r)}function Gs(e){return!(!(e=e.prototype)||!e.isReactComponent)}function Zs(e,t){var n=e.alternate;return null===n?((n=Hs(e.tag,t,e.key,e.mode)).elementType=e.elementType,n.type=e.type,n.stateNode=e.stateNode,n.alternate=e,e.alternate=n):(n.pendingProps=t,n.type=e.type,n.flags=0,n.nextEffect=null,n.firstEffect=null,n.lastEffect=null),n.childLanes=e.childLanes,n.lanes=e.lanes,n.child=e.child,n.memoizedProps=e.memoizedProps,n.memoizedState=e.memoizedState,n.updateQueue=e.updateQueue,t=e.dependencies,n.dependencies=null===t?null:{lanes:t.lanes,firstContext:t.firstContext},n.sibling=e.sibling,n.index=e.index,n.ref=e.ref,n}function Vs(e,t,n,r,a,o){var l=2;if(r=e,"function"==typeof e)Gs(e)&&(l=1);else if("string"==typeof e)l=5;else e:switch(e){case x:return Ws(n.children,a,o,t);case M:l=8,a|=16;break;case C:l=8,a|=1;break;case _:return(e=Hs(12,n,t,8|a)).elementType=_,e.type=_,e.lanes=o,e;case R:return(e=Hs(13,n,t,a)).type=R,e.elementType=R,e.lanes=o,e;case N:return(e=Hs(19,n,t,a)).elementType=N,e.lanes=o,e;case F:return Ks(n,a,o,t);case B:return(e=Hs(24,n,t,a)).elementType=B,e.lanes=o,e;default:if("object"==typeof e&&null!==e)switch(e.$$typeof){case T:l=10;break e;case A:l=9;break e;case L:l=11;break e;case P:l=14;break e;case O:l=16,r=null;break e;case I:l=22;break e}throw Error(i(130,null==e?e:typeof e,""))}return(t=Hs(l,n,t,a)).elementType=e,t.type=r,t.lanes=o,t}function Ws(e,t,n,r){return(e=Hs(7,e,r,t)).lanes=n,e}function Ks(e,t,n,r){return(e=Hs(23,e,r,t)).elementType=F,e.lanes=n,e}function Ys(e,t,n){return(e=Hs(6,e,null,t)).lanes=n,e}function Qs(e,t,n){return(t=Hs(4,null!==e.children?e.children:[],e.key,t)).lanes=n,t.stateNode={containerInfo:e.containerInfo,pendingChildren:null,implementation:e.implementation},t}function Xs(e,t,n){this.tag=t,this.containerInfo=e,this.finishedWork=this.pingCache=this.current=this.pendingChildren=null,this.timeoutHandle=-1,this.pendingContext=this.context=null,this.hydrate=n,this.callbackNode=null,this.callbackPriority=0,this.eventTimes=$t(0),this.expirationTimes=$t(-1),this.entangledLanes=this.finishedLanes=this.mutableReadLanes=this.expiredLanes=this.pingedLanes=this.suspendedLanes=this.pendingLanes=0,this.entanglements=$t(0),this.mutableSourceEagerHydrationData=null}function Js(e,t,n){var r=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null;return{$$typeof:S,key:null==r?null:""+r,children:e,containerInfo:t,implementation:n}}function eu(e,t,n,r){var a=t.current,o=fs(),l=ps(a);e:if(n){t:{if(Ye(n=n._reactInternals)!==n||1!==n.tag)throw Error(i(170));var s=n;do{switch(s.tag){case 3:s=s.stateNode.context;break t;case 1:if(ba(s.type)){s=s.stateNode.__reactInternalMemoizedMergedChildContext;break t}}s=s.return}while(null!==s);throw Error(i(171))}if(1===n.tag){var u=n.type;if(ba(u)){n=wa(n,u,s);break e}}n=s}else n=fa;return null===t.context?t.context=n:t.pendingContext=n,(t=co(o,l)).payload={element:e},null!==(r=void 0===r?null:r)&&(t.callback=r),fo(a,t),ms(a,l,o),l}function tu(e){return(e=e.current).child?(e.child.tag,e.child.stateNode):null}function nu(e,t){if(null!==(e=e.memoizedState)&&null!==e.dehydrated){var n=e.retryLane;e.retryLane=0!==n&&n<t?n:t}}function ru(e,t){nu(e,t),(e=e.alternate)&&nu(e,t)}function au(e,t,n){var r=null!=n&&null!=n.hydrationOptions&&n.hydrationOptions.mutableSources||null;if(n=new Xs(e,t,null!=n&&!0===n.hydrate),t=Hs(3,null,null,2===t?7:1===t?3:0),n.current=t,t.stateNode=n,so(t),e[ea]=n.current,Pr(8===e.nodeType?e.parentNode:e),r)for(e=0;e<r.length;e++){var a=(t=r[e])._getVersion;a=a(t._source),null==n.mutableSourceEagerHydrationData?n.mutableSourceEagerHydrationData=[t,a]:n.mutableSourceEagerHydrationData.push(t,a)}this._internalRoot=n}function ou(e){return!(!e||1!==e.nodeType&&9!==e.nodeType&&11!==e.nodeType&&(8!==e.nodeType||" react-mount-point-unstable "!==e.nodeValue))}function iu(e,t,n,r,a){var o=n._reactRootContainer;if(o){var i=o._internalRoot;if("function"==typeof a){var l=a;a=function(){var e=tu(i);l.call(e)}}eu(t,i,e,a)}else{if(o=n._reactRootContainer=function(e,t){if(t||(t=!(!(t=e?9===e.nodeType?e.documentElement:e.firstChild:null)||1!==t.nodeType||!t.hasAttribute("data-reactroot"))),!t)for(var n;n=e.lastChild;)e.removeChild(n);return new au(e,0,t?{hydrate:!0}:void 0)}(n,r),i=o._internalRoot,"function"==typeof a){var s=a;a=function(){var e=tu(i);s.call(e)}}ks((function(){eu(t,i,e,a)}))}return tu(i)}function lu(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!ou(t))throw Error(i(200));return Js(e,t,null,n)}Wl=function(e,t,n){var r=t.lanes;if(null!==e)if(e.memoizedProps!==t.pendingProps||ma.current)Fi=!0;else{if(0==(n&r)){switch(Fi=!1,t.tag){case 3:Vi(t),Wo();break;case 5:Mo(t);break;case 1:ba(t.type)&&ka(t);break;case 4:Io(t,t.stateNode.containerInfo);break;case 10:r=t.memoizedProps.value;var a=t.type._context;da(Xa,a._currentValue),a._currentValue=r;break;case 13:if(null!==t.memoizedState)return 0!=(n&t.child.childLanes)?Xi(e,t,n):(da(Bo,1&Bo.current),null!==(t=ol(e,t,n))?t.sibling:null);da(Bo,1&Bo.current);break;case 19:if(r=0!=(n&t.childLanes),0!=(64&e.flags)){if(r)return al(e,t,n);t.flags|=64}if(null!==(a=t.memoizedState)&&(a.rendering=null,a.tail=null,a.lastEffect=null),da(Bo,Bo.current),r)break;return null;case 23:case 24:return t.lanes=0,$i(e,t,n)}return ol(e,t,n)}Fi=0!=(16384&e.flags)}else Fi=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=ga(t,pa.current),oo(t,n),a=li(null,t,r,e,a,n),t.flags|=1,"object"==typeof a&&null!==a&&"function"==typeof a.render&&void 0===a.$$typeof){if(t.tag=1,t.memoizedState=null,t.updateQueue=null,ba(r)){var o=!0;ka(t)}else o=!1;t.memoizedState=null!==a.state&&void 0!==a.state?a.state:null,so(t);var l=r.getDerivedStateFromProps;"function"==typeof l&&bo(t,r,l,e),a.updater=vo,t.stateNode=a,a._reactInternals=t,Eo(t,r,e,n),t=Zi(null,t,r,!0,o,n)}else t.tag=0,Bi(null,t,a,n),t=t.child;return t;case 16:a=t.elementType;e:{switch(null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=(o=a._init)(a._payload),t.type=a,o=t.tag=function(e){if("function"==typeof e)return Gs(e)?1:0;if(null!=e){if((e=e.$$typeof)===L)return 11;if(e===P)return 14}return 2}(a),e=Qa(a,e),o){case 0:t=Hi(null,t,a,e,n);break e;case 1:t=Gi(null,t,a,e,n);break e;case 11:t=ji(null,t,a,e,n);break e;case 14:t=zi(null,t,a,Qa(a.type,e),r,n);break e}throw Error(i(306,a,""))}return t;case 0:return r=t.type,a=t.pendingProps,Hi(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 1:return r=t.type,a=t.pendingProps,Gi(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 3:if(Vi(t),r=t.updateQueue,null===e||null===r)throw Error(i(282));if(r=t.pendingProps,a=null!==(a=t.memoizedState)?a.element:null,uo(e,t),mo(t,r,null,n),(r=t.memoizedState.element)===a)Wo(),t=ol(e,t,n);else{if((o=(a=t.stateNode).hydrate)&&(Uo=Wr(t.stateNode.containerInfo.firstChild),zo=t,o=$o=!0),o){if(null!=(e=a.mutableSourceEagerHydrationData))for(a=0;a<e.length;a+=2)(o=e[a])._workInProgressVersionPrimary=e[a+1],Ko.push(o);for(n=Ao(t,null,r,n),t.child=n;n;)n.flags=-3&n.flags|1024,n=n.sibling}else Bi(e,t,r,n),Wo();t=t.child}return t;case 5:return Mo(t),null===e&&Go(t),r=t.type,a=t.pendingProps,o=null!==e?e.memoizedProps:null,l=a.children,Hr(r,a)?l=null:null!==o&&Hr(r,o)&&(t.flags|=16),qi(e,t),Bi(e,t,l,n),t.child;case 6:return null===e&&Go(t),null;case 13:return Xi(e,t,n);case 4:return Io(t,t.stateNode.containerInfo),r=t.pendingProps,null===e?t.child=To(t,null,r,n):Bi(e,t,r,n),t.child;case 11:return r=t.type,a=t.pendingProps,ji(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 7:return Bi(e,t,t.pendingProps,n),t.child;case 8:case 12:return Bi(e,t,t.pendingProps.children,n),t.child;case 10:e:{r=t.type._context,a=t.pendingProps,l=t.memoizedProps,o=a.value;var s=t.type._context;if(da(Xa,s._currentValue),s._currentValue=o,null!==l)if(s=l.value,0===(o=cr(s,o)?0:0|("function"==typeof r._calculateChangedBits?r._calculateChangedBits(s,o):1073741823))){if(l.children===a.children&&!ma.current){t=ol(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var u=s.dependencies;if(null!==u){l=s.child;for(var c=u.firstContext;null!==c;){if(c.context===r&&0!=(c.observedBits&o)){1===s.tag&&((c=co(-1,n&-n)).tag=2,fo(s,c)),s.lanes|=n,null!==(c=s.alternate)&&(c.lanes|=n),ao(s.return,n),u.lanes|=n;break}c=c.next}}else l=10===s.tag&&s.type===t.type?null:s.child;if(null!==l)l.return=s;else for(l=s;null!==l;){if(l===t){l=null;break}if(null!==(s=l.sibling)){s.return=l.return,l=s;break}l=l.return}s=l}Bi(e,t,a.children,n),t=t.child}return t;case 9:return a=t.type,r=(o=t.pendingProps).children,oo(t,n),r=r(a=io(a,o.unstable_observedBits)),t.flags|=1,Bi(e,t,r,n),t.child;case 14:return o=Qa(a=t.type,t.pendingProps),zi(e,t,a,o=Qa(a.type,o),r,n);case 15:return Ui(e,t,t.type,t.pendingProps,r,n);case 17:return r=t.type,a=t.pendingProps,a=t.elementType===r?a:Qa(r,a),null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),t.tag=1,ba(r)?(e=!0,ka(t)):e=!1,oo(t,n),wo(t,r,a),Eo(t,r,a,n),Zi(null,t,r,!0,e,n);case 19:return al(e,t,n);case 23:case 24:return $i(e,t,n)}throw Error(i(156,t.tag))},au.prototype.render=function(e){eu(e,this._internalRoot,null,null)},au.prototype.unmount=function(){var e=this._internalRoot,t=e.containerInfo;eu(null,e,null,(function(){t[ea]=null}))},tt=function(e){13===e.tag&&(ms(e,4,fs()),ru(e,4))},nt=function(e){13===e.tag&&(ms(e,67108864,fs()),ru(e,67108864))},rt=function(e){if(13===e.tag){var t=fs(),n=ps(e);ms(e,n,t),ru(e,n)}},at=function(e,t){return t()},Te=function(e,t,n){switch(t){case"input":if(ne(e,n),t=n.name,"radio"===n.type&&null!=t){for(n=e;n.parentNode;)n=n.parentNode;for(n=n.querySelectorAll("input[name="+JSON.stringify(""+t)+'][type="radio"]'),t=0;t<n.length;t++){var r=n[t];if(r!==e&&r.form===e.form){var a=oa(r);if(!a)throw Error(i(90));Q(r),ne(r,a)}}}break;case"textarea":ue(e,n);break;case"select":null!=(t=n.value)&&ie(e,!!n.multiple,t,!1)}},Oe=ws,Ie=function(e,t,n,r,a){var o=Pl;Pl|=4;try{return Za(98,e.bind(null,t,n,r,a))}finally{0===(Pl=o)&&(Vl(),Wa())}},De=function(){0==(49&Pl)&&(function(){if(null!==as){var e=as;as=null,e.forEach((function(e){e.expiredLanes|=24&e.pendingLanes,gs(e,qa())}))}Wa()}(),Ds())},Me=function(e,t){var n=Pl;Pl|=2;try{return e(t)}finally{0===(Pl=n)&&(Vl(),Wa())}};var su={Events:[ra,aa,oa,Ne,Pe,Ds,{current:!1}]},uu={findFiberByHostInstance:na,bundleType:0,version:"17.0.2",rendererPackageName:"react-dom"},cu={bundleType:uu.bundleType,version:uu.version,rendererPackageName:uu.rendererPackageName,rendererConfig:uu.rendererConfig,overrideHookState:null,overrideHookStateDeletePath:null,overrideHookStateRenamePath:null,overrideProps:null,overridePropsDeletePath:null,overridePropsRenamePath:null,setSuspenseHandler:null,scheduleUpdate:null,currentDispatcherRef:k.ReactCurrentDispatcher,findHostInstanceByFiber:function(e){return null===(e=Je(e))?null:e.stateNode},findFiberByHostInstance:uu.findFiberByHostInstance||function(){return null},findHostInstancesForRefresh:null,scheduleRefresh:null,scheduleRoot:null,setRefreshHandler:null,getCurrentFiber:null};if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__){var du=__REACT_DEVTOOLS_GLOBAL_HOOK__;if(!du.isDisabled&&du.supportsFiber)try{Sa=du.inject(cu),xa=du}catch(ge){}}t.createPortal=lu,t.hydrate=function(e,t,n){if(!ou(t))throw Error(i(200));return iu(null,e,t,!0,n)}},3935:(e,t,n)=>{"use strict";!function e(){if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(e)}catch(t){console.error(t)}}(),e.exports=n(4448)},9590:e=>{var t="undefined"!=typeof Element,n="function"==typeof Map,r="function"==typeof Set,a="function"==typeof ArrayBuffer&&!!ArrayBuffer.isView;function o(e,i){if(e===i)return!0;if(e&&i&&"object"==typeof e&&"object"==typeof i){if(e.constructor!==i.constructor)return!1;var l,s,u,c;if(Array.isArray(e)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(!o(e[s],i[s]))return!1;return!0}if(n&&e instanceof Map&&i instanceof Map){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;for(c=e.entries();!(s=c.next()).done;)if(!o(s.value[1],i.get(s.value[0])))return!1;return!0}if(r&&e instanceof Set&&i instanceof Set){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;return!0}if(a&&ArrayBuffer.isView(e)&&ArrayBuffer.isView(i)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(e[s]!==i[s])return!1;return!0}if(e.constructor===RegExp)return e.source===i.source&&e.flags===i.flags;if(e.valueOf!==Object.prototype.valueOf)return e.valueOf()===i.valueOf();if(e.toString!==Object.prototype.toString)return e.toString()===i.toString();if((l=(u=Object.keys(e)).length)!==Object.keys(i).length)return!1;for(s=l;0!=s--;)if(!Object.prototype.hasOwnProperty.call(i,u[s]))return!1;if(t&&e instanceof Element)return!1;for(s=l;0!=s--;)if(("_owner"!==u[s]&&"__v"!==u[s]&&"__o"!==u[s]||!e.$$typeof)&&!o(e[u[s]],i[u[s]]))return!1;return!0}return e!=e&&i!=i}e.exports=function(e,t){try{return o(e,t)}catch(n){if((n.message||"").match(/stack|recursion/i))return console.warn("react-fast-compare cannot handle circular refs"),!1;throw n}}},405:(e,t,n)=>{"use strict";n.d(t,{B6:()=>G,ql:()=>J});var r=n(7294),a=n(5697),o=n.n(a),i=n(9590),l=n.n(i),s=n(1143),u=n.n(s),c=n(6774),d=n.n(c);function f(){return f=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},f.apply(this,arguments)}function p(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,m(e,t)}function m(e,t){return m=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e},m(e,t)}function h(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t.indexOf(n=o[r])>=0||(a[n]=e[n]);return a}var g={BASE:"base",BODY:"body",HEAD:"head",HTML:"html",LINK:"link",META:"meta",NOSCRIPT:"noscript",SCRIPT:"script",STYLE:"style",TITLE:"title",FRAGMENT:"Symbol(react.fragment)"},b={rel:["amphtml","canonical","alternate"]},v={type:["application/ld+json"]},y={charset:"",name:["robots","description"],property:["og:type","og:title","og:url","og:image","og:image:alt","og:description","twitter:url","twitter:title","twitter:description","twitter:image","twitter:image:alt","twitter:card","twitter:site"]},w=Object.keys(g).map((function(e){return g[e]})),k={accesskey:"accessKey",charset:"charSet",class:"className",contenteditable:"contentEditable",contextmenu:"contextMenu","http-equiv":"httpEquiv",itemprop:"itemProp",tabindex:"tabIndex"},E=Object.keys(k).reduce((function(e,t){return e[k[t]]=t,e}),{}),S=function(e,t){for(var n=e.length-1;n>=0;n-=1){var r=e[n];if(Object.prototype.hasOwnProperty.call(r,t))return r[t]}return null},x=function(e){var t=S(e,g.TITLE),n=S(e,"titleTemplate");if(Array.isArray(t)&&(t=t.join("")),n&&t)return n.replace(/%s/g,(function(){return t}));var r=S(e,"defaultTitle");return t||r||void 0},C=function(e){return S(e,"onChangeClientState")||function(){}},_=function(e,t){return t.filter((function(t){return void 0!==t[e]})).map((function(t){return t[e]})).reduce((function(e,t){return f({},e,t)}),{})},T=function(e,t){return t.filter((function(e){return void 0!==e[g.BASE]})).map((function(e){return e[g.BASE]})).reverse().reduce((function(t,n){if(!t.length)for(var r=Object.keys(n),a=0;a<r.length;a+=1){var o=r[a].toLowerCase();if(-1!==e.indexOf(o)&&n[o])return t.concat(n)}return t}),[])},A=function(e,t,n){var r={};return n.filter((function(t){return!!Array.isArray(t[e])||(void 0!==t[e]&&console&&"function"==typeof console.warn&&console.warn("Helmet: "+e+' should be of type "Array". Instead found type "'+typeof t[e]+'"'),!1)})).map((function(t){return t[e]})).reverse().reduce((function(e,n){var a={};n.filter((function(e){for(var n,o=Object.keys(e),i=0;i<o.length;i+=1){var l=o[i],s=l.toLowerCase();-1===t.indexOf(s)||"rel"===n&&"canonical"===e[n].toLowerCase()||"rel"===s&&"stylesheet"===e[s].toLowerCase()||(n=s),-1===t.indexOf(l)||"innerHTML"!==l&&"cssText"!==l&&"itemprop"!==l||(n=l)}if(!n||!e[n])return!1;var u=e[n].toLowerCase();return r[n]||(r[n]={}),a[n]||(a[n]={}),!r[n][u]&&(a[n][u]=!0,!0)})).reverse().forEach((function(t){return e.push(t)}));for(var o=Object.keys(a),i=0;i<o.length;i+=1){var l=o[i],s=f({},r[l],a[l]);r[l]=s}return e}),[]).reverse()},L=function(e,t){if(Array.isArray(e)&&e.length)for(var n=0;n<e.length;n+=1)if(e[n][t])return!0;return!1},R=function(e){return Array.isArray(e)?e.join(""):e},N=function(e,t){return Array.isArray(e)?e.reduce((function(e,n){return function(e,t){for(var n=Object.keys(e),r=0;r<n.length;r+=1)if(t[n[r]]&&t[n[r]].includes(e[n[r]]))return!0;return!1}(n,t)?e.priority.push(n):e.default.push(n),e}),{priority:[],default:[]}):{default:e}},P=function(e,t){var n;return f({},e,((n={})[t]=void 0,n))},O=[g.NOSCRIPT,g.SCRIPT,g.STYLE],I=function(e,t){return void 0===t&&(t=!0),!1===t?String(e):String(e).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")},D=function(e){return Object.keys(e).reduce((function(t,n){var r=void 0!==e[n]?n+'="'+e[n]+'"':""+n;return t?t+" "+r:r}),"")},M=function(e,t){return void 0===t&&(t={}),Object.keys(e).reduce((function(t,n){return t[k[n]||n]=e[n],t}),t)},F=function(e,t){return t.map((function(t,n){var a,o=((a={key:n})["data-rh"]=!0,a);return Object.keys(t).forEach((function(e){var n=k[e]||e;"innerHTML"===n||"cssText"===n?o.dangerouslySetInnerHTML={__html:t.innerHTML||t.cssText}:o[n]=t[e]})),r.createElement(e,o)}))},B=function(e,t,n){switch(e){case g.TITLE:return{toComponent:function(){return n=t.titleAttributes,(a={key:e=t.title})["data-rh"]=!0,o=M(n,a),[r.createElement(g.TITLE,o,e)];var e,n,a,o},toString:function(){return function(e,t,n,r){var a=D(n),o=R(t);return a?"<"+e+' data-rh="true" '+a+">"+I(o,r)+"</"+e+">":"<"+e+' data-rh="true">'+I(o,r)+"</"+e+">"}(e,t.title,t.titleAttributes,n)}};case"bodyAttributes":case"htmlAttributes":return{toComponent:function(){return M(t)},toString:function(){return D(t)}};default:return{toComponent:function(){return F(e,t)},toString:function(){return function(e,t,n){return t.reduce((function(t,r){var a=Object.keys(r).filter((function(e){return!("innerHTML"===e||"cssText"===e)})).reduce((function(e,t){var a=void 0===r[t]?t:t+'="'+I(r[t],n)+'"';return e?e+" "+a:a}),""),o=r.innerHTML||r.cssText||"",i=-1===O.indexOf(e);return t+"<"+e+' data-rh="true" '+a+(i?"/>":">"+o+"</"+e+">")}),"")}(e,t,n)}}}},j=function(e){var t=e.baseTag,n=e.bodyAttributes,r=e.encode,a=e.htmlAttributes,o=e.noscriptTags,i=e.styleTags,l=e.title,s=void 0===l?"":l,u=e.titleAttributes,c=e.linkTags,d=e.metaTags,f=e.scriptTags,p={toComponent:function(){},toString:function(){return""}};if(e.prioritizeSeoTags){var m=function(e){var t=e.linkTags,n=e.scriptTags,r=e.encode,a=N(e.metaTags,y),o=N(t,b),i=N(n,v);return{priorityMethods:{toComponent:function(){return[].concat(F(g.META,a.priority),F(g.LINK,o.priority),F(g.SCRIPT,i.priority))},toString:function(){return B(g.META,a.priority,r)+" "+B(g.LINK,o.priority,r)+" "+B(g.SCRIPT,i.priority,r)}},metaTags:a.default,linkTags:o.default,scriptTags:i.default}}(e);p=m.priorityMethods,c=m.linkTags,d=m.metaTags,f=m.scriptTags}return{priority:p,base:B(g.BASE,t,r),bodyAttributes:B("bodyAttributes",n,r),htmlAttributes:B("htmlAttributes",a,r),link:B(g.LINK,c,r),meta:B(g.META,d,r),noscript:B(g.NOSCRIPT,o,r),script:B(g.SCRIPT,f,r),style:B(g.STYLE,i,r),title:B(g.TITLE,{title:s,titleAttributes:u},r)}},z=[],U=function(e,t){var n=this;void 0===t&&(t="undefined"!=typeof document),this.instances=[],this.value={setHelmet:function(e){n.context.helmet=e},helmetInstances:{get:function(){return n.canUseDOM?z:n.instances},add:function(e){(n.canUseDOM?z:n.instances).push(e)},remove:function(e){var t=(n.canUseDOM?z:n.instances).indexOf(e);(n.canUseDOM?z:n.instances).splice(t,1)}}},this.context=e,this.canUseDOM=t,t||(e.helmet=j({baseTag:[],bodyAttributes:{},encodeSpecialCharacters:!0,htmlAttributes:{},linkTags:[],metaTags:[],noscriptTags:[],scriptTags:[],styleTags:[],title:"",titleAttributes:{}}))},$=r.createContext({}),q=o().shape({setHelmet:o().func,helmetInstances:o().shape({get:o().func,add:o().func,remove:o().func})}),H="undefined"!=typeof document,G=function(e){function t(n){var r;return(r=e.call(this,n)||this).helmetData=new U(r.props.context,t.canUseDOM),r}return p(t,e),t.prototype.render=function(){return r.createElement($.Provider,{value:this.helmetData.value},this.props.children)},t}(r.Component);G.canUseDOM=H,G.propTypes={context:o().shape({helmet:o().shape()}),children:o().node.isRequired},G.defaultProps={context:{}},G.displayName="HelmetProvider";var Z=function(e,t){var n,r=document.head||document.querySelector(g.HEAD),a=r.querySelectorAll(e+"[data-rh]"),o=[].slice.call(a),i=[];return t&&t.length&&t.forEach((function(t){var r=document.createElement(e);for(var a in t)Object.prototype.hasOwnProperty.call(t,a)&&("innerHTML"===a?r.innerHTML=t.innerHTML:"cssText"===a?r.styleSheet?r.styleSheet.cssText=t.cssText:r.appendChild(document.createTextNode(t.cssText)):r.setAttribute(a,void 0===t[a]?"":t[a]));r.setAttribute("data-rh","true"),o.some((function(e,t){return n=t,r.isEqualNode(e)}))?o.splice(n,1):i.push(r)})),o.forEach((function(e){return e.parentNode.removeChild(e)})),i.forEach((function(e){return r.appendChild(e)})),{oldTags:o,newTags:i}},V=function(e,t){var n=document.getElementsByTagName(e)[0];if(n){for(var r=n.getAttribute("data-rh"),a=r?r.split(","):[],o=[].concat(a),i=Object.keys(t),l=0;l<i.length;l+=1){var s=i[l],u=t[s]||"";n.getAttribute(s)!==u&&n.setAttribute(s,u),-1===a.indexOf(s)&&a.push(s);var c=o.indexOf(s);-1!==c&&o.splice(c,1)}for(var d=o.length-1;d>=0;d-=1)n.removeAttribute(o[d]);a.length===o.length?n.removeAttribute("data-rh"):n.getAttribute("data-rh")!==i.join(",")&&n.setAttribute("data-rh",i.join(","))}},W=function(e,t){var n=e.baseTag,r=e.htmlAttributes,a=e.linkTags,o=e.metaTags,i=e.noscriptTags,l=e.onChangeClientState,s=e.scriptTags,u=e.styleTags,c=e.title,d=e.titleAttributes;V(g.BODY,e.bodyAttributes),V(g.HTML,r),function(e,t){void 0!==e&&document.title!==e&&(document.title=R(e)),V(g.TITLE,t)}(c,d);var f={baseTag:Z(g.BASE,n),linkTags:Z(g.LINK,a),metaTags:Z(g.META,o),noscriptTags:Z(g.NOSCRIPT,i),scriptTags:Z(g.SCRIPT,s),styleTags:Z(g.STYLE,u)},p={},m={};Object.keys(f).forEach((function(e){var t=f[e],n=t.newTags,r=t.oldTags;n.length&&(p[e]=n),r.length&&(m[e]=f[e].oldTags)})),t&&t(),l(e,p,m)},K=null,Y=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).rendered=!1,t}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!d()(e,this.props)},n.componentDidUpdate=function(){this.emitChange()},n.componentWillUnmount=function(){this.props.context.helmetInstances.remove(this),this.emitChange()},n.emitChange=function(){var e,t,n=this.props.context,r=n.setHelmet,a=null,o=(e=n.helmetInstances.get().map((function(e){var t=f({},e.props);return delete t.context,t})),{baseTag:T(["href"],e),bodyAttributes:_("bodyAttributes",e),defer:S(e,"defer"),encode:S(e,"encodeSpecialCharacters"),htmlAttributes:_("htmlAttributes",e),linkTags:A(g.LINK,["rel","href"],e),metaTags:A(g.META,["name","charset","http-equiv","property","itemprop"],e),noscriptTags:A(g.NOSCRIPT,["innerHTML"],e),onChangeClientState:C(e),scriptTags:A(g.SCRIPT,["src","innerHTML"],e),styleTags:A(g.STYLE,["cssText"],e),title:x(e),titleAttributes:_("titleAttributes",e),prioritizeSeoTags:L(e,"prioritizeSeoTags")});G.canUseDOM?(t=o,K&&cancelAnimationFrame(K),t.defer?K=requestAnimationFrame((function(){W(t,(function(){K=null}))})):(W(t),K=null)):j&&(a=j(o)),r(a)},n.init=function(){this.rendered||(this.rendered=!0,this.props.context.helmetInstances.add(this),this.emitChange())},n.render=function(){return this.init(),null},t}(r.Component);Y.propTypes={context:q.isRequired},Y.displayName="HelmetDispatcher";var Q=["children"],X=["children"],J=function(e){function t(){return e.apply(this,arguments)||this}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!l()(P(this.props,"helmetData"),P(e,"helmetData"))},n.mapNestedChildrenToProps=function(e,t){if(!t)return null;switch(e.type){case g.SCRIPT:case g.NOSCRIPT:return{innerHTML:t};case g.STYLE:return{cssText:t};default:throw new Error("<"+e.type+" /> elements are self-closing and can not contain children. Refer to our API for more information.")}},n.flattenArrayTypeChildren=function(e){var t,n=e.child,r=e.arrayTypeChildren;return f({},r,((t={})[n.type]=[].concat(r[n.type]||[],[f({},e.newChildProps,this.mapNestedChildrenToProps(n,e.nestedChildren))]),t))},n.mapObjectTypeChildren=function(e){var t,n,r=e.child,a=e.newProps,o=e.newChildProps,i=e.nestedChildren;switch(r.type){case g.TITLE:return f({},a,((t={})[r.type]=i,t.titleAttributes=f({},o),t));case g.BODY:return f({},a,{bodyAttributes:f({},o)});case g.HTML:return f({},a,{htmlAttributes:f({},o)});default:return f({},a,((n={})[r.type]=f({},o),n))}},n.mapArrayTypeChildrenToProps=function(e,t){var n=f({},t);return Object.keys(e).forEach((function(t){var r;n=f({},n,((r={})[t]=e[t],r))})),n},n.warnOnInvalidChildren=function(e,t){return u()(w.some((function(t){return e.type===t})),"function"==typeof e.type?"You may be attempting to nest <Helmet> components within each other, which is not allowed. Refer to our API for more information.":"Only elements types "+w.join(", ")+" are allowed. Helmet does not support rendering <"+e.type+"> elements. Refer to our API for more information."),u()(!t||"string"==typeof t||Array.isArray(t)&&!t.some((function(e){return"string"!=typeof e})),"Helmet expects a string as a child of <"+e.type+">. Did you forget to wrap your children in braces? ( <"+e.type+">{``}</"+e.type+"> ) Refer to our API for more information."),!0},n.mapChildrenToProps=function(e,t){var n=this,a={};return r.Children.forEach(e,(function(e){if(e&&e.props){var r=e.props,o=r.children,i=h(r,Q),l=Object.keys(i).reduce((function(e,t){return e[E[t]||t]=i[t],e}),{}),s=e.type;switch("symbol"==typeof s?s=s.toString():n.warnOnInvalidChildren(e,o),s){case g.FRAGMENT:t=n.mapChildrenToProps(o,t);break;case g.LINK:case g.META:case g.NOSCRIPT:case g.SCRIPT:case g.STYLE:a=n.flattenArrayTypeChildren({child:e,arrayTypeChildren:a,newChildProps:l,nestedChildren:o});break;default:t=n.mapObjectTypeChildren({child:e,newProps:t,newChildProps:l,nestedChildren:o})}}})),this.mapArrayTypeChildrenToProps(a,t)},n.render=function(){var e=this.props,t=e.children,n=h(e,X),a=f({},n),o=n.helmetData;return t&&(a=this.mapChildrenToProps(t,a)),!o||o instanceof U||(o=new U(o.context,o.instances)),o?r.createElement(Y,f({},a,{context:o.value,helmetData:void 0})):r.createElement($.Consumer,null,(function(e){return r.createElement(Y,f({},a,{context:e}))}))},t}(r.Component);J.propTypes={base:o().object,bodyAttributes:o().object,children:o().oneOfType([o().arrayOf(o().node),o().node]),defaultTitle:o().string,defer:o().bool,encodeSpecialCharacters:o().bool,htmlAttributes:o().object,link:o().arrayOf(o().object),meta:o().arrayOf(o().object),noscript:o().arrayOf(o().object),onChangeClientState:o().func,script:o().arrayOf(o().object),style:o().arrayOf(o().object),title:o().string,titleAttributes:o().object,titleTemplate:o().string,prioritizeSeoTags:o().bool,helmetData:o().object},J.defaultProps={defer:!0,encodeSpecialCharacters:!0,prioritizeSeoTags:!1},J.displayName="Helmet"},9921:(e,t)=>{"use strict";var n="function"==typeof Symbol&&Symbol.for,r=n?Symbol.for("react.element"):60103,a=n?Symbol.for("react.portal"):60106,o=n?Symbol.for("react.fragment"):60107,i=n?Symbol.for("react.strict_mode"):60108,l=n?Symbol.for("react.profiler"):60114,s=n?Symbol.for("react.provider"):60109,u=n?Symbol.for("react.context"):60110,c=n?Symbol.for("react.async_mode"):60111,d=n?Symbol.for("react.concurrent_mode"):60111,f=n?Symbol.for("react.forward_ref"):60112,p=n?Symbol.for("react.suspense"):60113,m=n?Symbol.for("react.suspense_list"):60120,h=n?Symbol.for("react.memo"):60115,g=n?Symbol.for("react.lazy"):60116,b=n?Symbol.for("react.block"):60121,v=n?Symbol.for("react.fundamental"):60117,y=n?Symbol.for("react.responder"):60118,w=n?Symbol.for("react.scope"):60119;function k(e){if("object"==typeof e&&null!==e){var t=e.$$typeof;switch(t){case r:switch(e=e.type){case c:case d:case o:case l:case i:case p:return e;default:switch(e=e&&e.$$typeof){case u:case f:case g:case h:case s:return e;default:return t}}case a:return t}}}function E(e){return k(e)===d}t.AsyncMode=c,t.ConcurrentMode=d,t.ContextConsumer=u,t.ContextProvider=s,t.Element=r,t.ForwardRef=f,t.Fragment=o,t.Lazy=g,t.Memo=h,t.Portal=a,t.Profiler=l,t.StrictMode=i,t.Suspense=p,t.isAsyncMode=function(e){return E(e)||k(e)===c},t.isConcurrentMode=E,t.isContextConsumer=function(e){return k(e)===u},t.isContextProvider=function(e){return k(e)===s},t.isElement=function(e){return"object"==typeof e&&null!==e&&e.$$typeof===r},t.isForwardRef=function(e){return k(e)===f},t.isFragment=function(e){return k(e)===o},t.isLazy=function(e){return k(e)===g},t.isMemo=function(e){return k(e)===h},t.isPortal=function(e){return k(e)===a},t.isProfiler=function(e){return k(e)===l},t.isStrictMode=function(e){return k(e)===i},t.isSuspense=function(e){return k(e)===p},t.isValidElementType=function(e){return"string"==typeof e||"function"==typeof e||e===o||e===d||e===l||e===i||e===p||e===m||"object"==typeof e&&null!==e&&(e.$$typeof===g||e.$$typeof===h||e.$$typeof===s||e.$$typeof===u||e.$$typeof===f||e.$$typeof===v||e.$$typeof===y||e.$$typeof===w||e.$$typeof===b)},t.typeOf=k},9864:(e,t,n)=>{"use strict";e.exports=n(9921)},8356:(e,t,n)=>{"use strict";function r(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function a(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(){return i=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},i.apply(this,arguments)}var l=n(7294),s=n(5697),u=[],c=[];function d(e){var t=e(),n={loading:!0,loaded:null,error:null};return n.promise=t.then((function(e){return n.loading=!1,n.loaded=e,e})).catch((function(e){throw n.loading=!1,n.error=e,e})),n}function f(e){var t={loading:!1,loaded:{},error:null},n=[];try{Object.keys(e).forEach((function(r){var a=d(e[r]);a.loading?t.loading=!0:(t.loaded[r]=a.loaded,t.error=a.error),n.push(a.promise),a.promise.then((function(e){t.loaded[r]=e})).catch((function(e){t.error=e}))}))}catch(r){t.error=r}return t.promise=Promise.all(n).then((function(e){return t.loading=!1,e})).catch((function(e){throw t.loading=!1,e})),t}function p(e,t){return l.createElement((n=e)&&n.__esModule?n.default:n,t);var n}function m(e,t){var d,f;if(!t.loading)throw new Error("react-loadable requires a `loading` component");var m=i({loader:null,loading:null,delay:200,timeout:null,render:p,webpack:null,modules:null},t),h=null;function g(){return h||(h=e(m.loader)),h.promise}return u.push(g),"function"==typeof m.webpack&&c.push((function(){if((0,m.webpack)().every((function(e){return void 0!==e&&void 0!==n.m[e]})))return g()})),f=d=function(t){function n(n){var r;return o(a(a(r=t.call(this,n)||this)),"retry",(function(){r.setState({error:null,loading:!0,timedOut:!1}),h=e(m.loader),r._loadModule()})),g(),r.state={error:h.error,pastDelay:!1,timedOut:!1,loading:h.loading,loaded:h.loaded},r}r(n,t),n.preload=function(){return g()};var i=n.prototype;return i.UNSAFE_componentWillMount=function(){this._loadModule()},i.componentDidMount=function(){this._mounted=!0},i._loadModule=function(){var e=this;if(this.context.loadable&&Array.isArray(m.modules)&&m.modules.forEach((function(t){e.context.loadable.report(t)})),h.loading){var t=function(t){e._mounted&&e.setState(t)};"number"==typeof m.delay&&(0===m.delay?this.setState({pastDelay:!0}):this._delay=setTimeout((function(){t({pastDelay:!0})}),m.delay)),"number"==typeof m.timeout&&(this._timeout=setTimeout((function(){t({timedOut:!0})}),m.timeout));var n=function(){t({error:h.error,loaded:h.loaded,loading:h.loading}),e._clearTimeouts()};h.promise.then((function(){return n(),null})).catch((function(e){return n(),null}))}},i.componentWillUnmount=function(){this._mounted=!1,this._clearTimeouts()},i._clearTimeouts=function(){clearTimeout(this._delay),clearTimeout(this._timeout)},i.render=function(){return this.state.loading||this.state.error?l.createElement(m.loading,{isLoading:this.state.loading,pastDelay:this.state.pastDelay,timedOut:this.state.timedOut,error:this.state.error,retry:this.retry}):this.state.loaded?m.render(this.state.loaded,this.props):null},n}(l.Component),o(d,"contextTypes",{loadable:s.shape({report:s.func.isRequired})}),f}function h(e){return m(d,e)}h.Map=function(e){if("function"!=typeof e.render)throw new Error("LoadableMap requires a `render(loaded, props)` function");return m(f,e)};var g=function(e){function t(){return e.apply(this,arguments)||this}r(t,e);var n=t.prototype;return n.getChildContext=function(){return{loadable:{report:this.props.report}}},n.render=function(){return l.Children.only(this.props.children)},t}(l.Component);function b(e){for(var t=[];e.length;){var n=e.pop();t.push(n())}return Promise.all(t).then((function(){if(e.length)return b(e)}))}o(g,"propTypes",{report:s.func.isRequired}),o(g,"childContextTypes",{loadable:s.shape({report:s.func.isRequired}).isRequired}),h.Capture=g,h.preloadAll=function(){return new Promise((function(e,t){b(u).then(e,t)}))},h.preloadReady=function(){return new Promise((function(e,t){b(c).then(e,e)}))},e.exports=h},8790:(e,t,n)=>{"use strict";n.d(t,{H:()=>l,f:()=>i});var r=n(6775),a=n(3117),o=n(7294);function i(e,t,n){return void 0===n&&(n=[]),e.some((function(e){var a=e.path?(0,r.LX)(t,e):n.length?n[n.length-1].match:r.F0.computeRootMatch(t);return a&&(n.push({route:e,match:a}),e.routes&&i(e.routes,t,n)),a})),n}function l(e,t,n){return void 0===t&&(t={}),void 0===n&&(n={}),e?o.createElement(r.rs,n,e.map((function(e,n){return o.createElement(r.AW,{key:e.key||n,path:e.path,exact:e.exact,strict:e.strict,render:function(n){return e.render?e.render((0,a.Z)({},n,{},t,{route:e})):o.createElement(e.component,(0,a.Z)({},n,t,{route:e}))}})}))):null}},3727:(e,t,n)=>{"use strict";n.d(t,{OL:()=>y,VK:()=>c,rU:()=>g});var r=n(6775),a=n(144),o=n(7294),i=n(9318),l=n(3117),s=n(102),u=n(2177),c=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).history=(0,i.lX)(t.props),t}return(0,a.Z)(t,e),t.prototype.render=function(){return o.createElement(r.F0,{history:this.history,children:this.props.children})},t}(o.Component);o.Component;var d=function(e,t){return"function"==typeof e?e(t):e},f=function(e,t){return"string"==typeof e?(0,i.ob)(e,null,null,t):e},p=function(e){return e},m=o.forwardRef;void 0===m&&(m=p);var h=m((function(e,t){var n=e.innerRef,r=e.navigate,a=e.onClick,i=(0,s.Z)(e,["innerRef","navigate","onClick"]),u=i.target,c=(0,l.Z)({},i,{onClick:function(e){try{a&&a(e)}catch(t){throw e.preventDefault(),t}e.defaultPrevented||0!==e.button||u&&"_self"!==u||function(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}(e)||(e.preventDefault(),r())}});return c.ref=p!==m&&t||n,o.createElement("a",c)}));var g=m((function(e,t){var n=e.component,a=void 0===n?h:n,c=e.replace,g=e.to,b=e.innerRef,v=(0,s.Z)(e,["component","replace","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=e.history,r=f(d(g,e.location),e.location),s=r?n.createHref(r):"",h=(0,l.Z)({},v,{href:s,navigate:function(){var t=d(g,e.location),r=(0,i.Ep)(e.location)===(0,i.Ep)(f(t));(c||r?n.replace:n.push)(t)}});return p!==m?h.ref=t||b:h.innerRef=b,o.createElement(a,h)}))})),b=function(e){return e},v=o.forwardRef;void 0===v&&(v=b);var y=v((function(e,t){var n=e["aria-current"],a=void 0===n?"page":n,i=e.activeClassName,c=void 0===i?"active":i,p=e.activeStyle,m=e.className,h=e.exact,y=e.isActive,w=e.location,k=e.sensitive,E=e.strict,S=e.style,x=e.to,C=e.innerRef,_=(0,s.Z)(e,["aria-current","activeClassName","activeStyle","className","exact","isActive","location","sensitive","strict","style","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=w||e.location,i=f(d(x,n),n),s=i.pathname,T=s&&s.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1"),A=T?(0,r.LX)(n.pathname,{path:T,exact:h,sensitive:k,strict:E}):null,L=!!(y?y(A,n):A),R="function"==typeof m?m(L):m,N="function"==typeof S?S(L):S;L&&(R=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return t.filter((function(e){return e})).join(" ")}(R,c),N=(0,l.Z)({},N,p));var P=(0,l.Z)({"aria-current":L&&a||null,className:R,style:N,to:i},_);return b!==v?P.ref=t||C:P.innerRef=C,o.createElement(g,P)}))}))},6775:(e,t,n)=>{"use strict";n.d(t,{AW:()=>C,F0:()=>k,rs:()=>N,s6:()=>w,LX:()=>x,k6:()=>O,TH:()=>I});var r=n(144),a=n(7294),o=n(9318),i=n(5697),l=n.n(i),s=1073741823,u="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:{};function c(e){var t=[];return{on:function(e){t.push(e)},off:function(e){t=t.filter((function(t){return t!==e}))},get:function(){return e},set:function(n,r){e=n,t.forEach((function(t){return t(e,r)}))}}}var d=a.createContext||function(e,t){var n,o,i="__create-react-context-"+function(){var e="__global_unique_id__";return u[e]=(u[e]||0)+1}()+"__",d=function(e){function n(){var t;return(t=e.apply(this,arguments)||this).emitter=c(t.props.value),t}(0,r.Z)(n,e);var a=n.prototype;return a.getChildContext=function(){var e;return(e={})[i]=this.emitter,e},a.componentWillReceiveProps=function(e){if(this.props.value!==e.value){var n,r=this.props.value,a=e.value;((o=r)===(i=a)?0!==o||1/o==1/i:o!=o&&i!=i)?n=0:(n="function"==typeof t?t(r,a):s,0!==(n|=0)&&this.emitter.set(e.value,n))}var o,i},a.render=function(){return this.props.children},n}(a.Component);d.childContextTypes=((n={})[i]=l().object.isRequired,n);var f=function(t){function n(){var e;return(e=t.apply(this,arguments)||this).state={value:e.getValue()},e.onUpdate=function(t,n){0!=((0|e.observedBits)&n)&&e.setState({value:e.getValue()})},e}(0,r.Z)(n,t);var a=n.prototype;return a.componentWillReceiveProps=function(e){var t=e.observedBits;this.observedBits=null==t?s:t},a.componentDidMount=function(){this.context[i]&&this.context[i].on(this.onUpdate);var e=this.props.observedBits;this.observedBits=null==e?s:e},a.componentWillUnmount=function(){this.context[i]&&this.context[i].off(this.onUpdate)},a.getValue=function(){return this.context[i]?this.context[i].get():e},a.render=function(){return(e=this.props.children,Array.isArray(e)?e[0]:e)(this.state.value);var e},n}(a.Component);return f.contextTypes=((o={})[i]=l().object,o),{Provider:d,Consumer:f}};const f=d;var p=n(2177),m=n(3117),h=n(9658),g=n.n(h),b=(n(9864),n(102)),v=(n(8679),function(e){var t=f();return t.displayName=e,t}),y=v("Router-History"),w=v("Router"),k=function(e){function t(t){var n;return(n=e.call(this,t)||this).state={location:t.history.location},n._isMounted=!1,n._pendingLocation=null,t.staticContext||(n.unlisten=t.history.listen((function(e){n._pendingLocation=e}))),n}(0,r.Z)(t,e),t.computeRootMatch=function(e){return{path:"/",url:"/",params:{},isExact:"/"===e}};var n=t.prototype;return n.componentDidMount=function(){var e=this;this._isMounted=!0,this.unlisten&&this.unlisten(),this.props.staticContext||(this.unlisten=this.props.history.listen((function(t){e._isMounted&&e.setState({location:t})}))),this._pendingLocation&&this.setState({location:this._pendingLocation})},n.componentWillUnmount=function(){this.unlisten&&(this.unlisten(),this._isMounted=!1,this._pendingLocation=null)},n.render=function(){return a.createElement(w.Provider,{value:{history:this.props.history,location:this.state.location,match:t.computeRootMatch(this.state.location.pathname),staticContext:this.props.staticContext}},a.createElement(y.Provider,{children:this.props.children||null,value:this.props.history}))},t}(a.Component);a.Component;a.Component;var E={},S=0;function x(e,t){void 0===t&&(t={}),("string"==typeof t||Array.isArray(t))&&(t={path:t});var n=t,r=n.path,a=n.exact,o=void 0!==a&&a,i=n.strict,l=void 0!==i&&i,s=n.sensitive,u=void 0!==s&&s;return[].concat(r).reduce((function(t,n){if(!n&&""!==n)return null;if(t)return t;var r=function(e,t){var n=""+t.end+t.strict+t.sensitive,r=E[n]||(E[n]={});if(r[e])return r[e];var a=[],o={regexp:g()(e,a,t),keys:a};return S<1e4&&(r[e]=o,S++),o}(n,{end:o,strict:l,sensitive:u}),a=r.regexp,i=r.keys,s=a.exec(e);if(!s)return null;var c=s[0],d=s.slice(1),f=e===c;return o&&!f?null:{path:n,url:"/"===n&&""===c?"/":c,isExact:f,params:i.reduce((function(e,t,n){return e[t.name]=d[n],e}),{})}}),null)}var C=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n=e.props.location||t.location,r=e.props.computedMatch?e.props.computedMatch:e.props.path?x(n.pathname,e.props):t.match,o=(0,m.Z)({},t,{location:n,match:r}),i=e.props,l=i.children,s=i.component,u=i.render;return Array.isArray(l)&&function(e){return 0===a.Children.count(e)}(l)&&(l=null),a.createElement(w.Provider,{value:o},o.match?l?"function"==typeof l?l(o):l:s?a.createElement(s,o):u?u(o):null:"function"==typeof l?l(o):null)}))},t}(a.Component);function _(e){return"/"===e.charAt(0)?e:"/"+e}function T(e,t){if(!e)return t;var n=_(e);return 0!==t.pathname.indexOf(n)?t:(0,m.Z)({},t,{pathname:t.pathname.substr(n.length)})}function A(e){return"string"==typeof e?e:(0,o.Ep)(e)}function L(e){return function(){(0,p.Z)(!1)}}function R(){}a.Component;var N=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n,r,o=e.props.location||t.location;return a.Children.forEach(e.props.children,(function(e){if(null==r&&a.isValidElement(e)){n=e;var i=e.props.path||e.props.from;r=i?x(o.pathname,(0,m.Z)({},e.props,{path:i})):t.match}})),r?a.cloneElement(n,{location:o,computedMatch:r}):null}))},t}(a.Component);var P=a.useContext;function O(){return P(y)}function I(){return P(w).location}},9658:(e,t,n)=>{var r=n(5826);e.exports=p,e.exports.parse=o,e.exports.compile=function(e,t){return l(o(e,t),t)},e.exports.tokensToFunction=l,e.exports.tokensToRegExp=f;var a=new RegExp(["(\\\\.)","([\\/.])?(?:(?:\\:(\\w+)(?:\\(((?:\\\\.|[^\\\\()])+)\\))?|\\(((?:\\\\.|[^\\\\()])+)\\))([+*?])?|(\\*))"].join("|"),"g");function o(e,t){for(var n,r=[],o=0,i=0,l="",c=t&&t.delimiter||"/";null!=(n=a.exec(e));){var d=n[0],f=n[1],p=n.index;if(l+=e.slice(i,p),i=p+d.length,f)l+=f[1];else{var m=e[i],h=n[2],g=n[3],b=n[4],v=n[5],y=n[6],w=n[7];l&&(r.push(l),l="");var k=null!=h&&null!=m&&m!==h,E="+"===y||"*"===y,S="?"===y||"*"===y,x=n[2]||c,C=b||v;r.push({name:g||o++,prefix:h||"",delimiter:x,optional:S,repeat:E,partial:k,asterisk:!!w,pattern:C?u(C):w?".*":"[^"+s(x)+"]+?"})}}return i<e.length&&(l+=e.substr(i)),l&&r.push(l),r}function i(e){return encodeURI(e).replace(/[\/?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()}))}function l(e,t){for(var n=new Array(e.length),a=0;a<e.length;a++)"object"==typeof e[a]&&(n[a]=new RegExp("^(?:"+e[a].pattern+")$",d(t)));return function(t,a){for(var o="",l=t||{},s=(a||{}).pretty?i:encodeURIComponent,u=0;u<e.length;u++){var c=e[u];if("string"!=typeof c){var d,f=l[c.name];if(null==f){if(c.optional){c.partial&&(o+=c.prefix);continue}throw new TypeError('Expected "'+c.name+'" to be defined')}if(r(f)){if(!c.repeat)throw new TypeError('Expected "'+c.name+'" to not repeat, but received `'+JSON.stringify(f)+"`");if(0===f.length){if(c.optional)continue;throw new TypeError('Expected "'+c.name+'" to not be empty')}for(var p=0;p<f.length;p++){if(d=s(f[p]),!n[u].test(d))throw new TypeError('Expected all "'+c.name+'" to match "'+c.pattern+'", but received `'+JSON.stringify(d)+"`");o+=(0===p?c.prefix:c.delimiter)+d}}else{if(d=c.asterisk?encodeURI(f).replace(/[?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})):s(f),!n[u].test(d))throw new TypeError('Expected "'+c.name+'" to match "'+c.pattern+'", but received "'+d+'"');o+=c.prefix+d}}else o+=c}return o}}function s(e){return e.replace(/([.+*?=^!:${}()[\]|\/\\])/g,"\\$1")}function u(e){return e.replace(/([=!:$\/()])/g,"\\$1")}function c(e,t){return e.keys=t,e}function d(e){return e&&e.sensitive?"":"i"}function f(e,t,n){r(t)||(n=t||n,t=[]);for(var a=(n=n||{}).strict,o=!1!==n.end,i="",l=0;l<e.length;l++){var u=e[l];if("string"==typeof u)i+=s(u);else{var f=s(u.prefix),p="(?:"+u.pattern+")";t.push(u),u.repeat&&(p+="(?:"+f+p+")*"),i+=p=u.optional?u.partial?f+"("+p+")?":"(?:"+f+"("+p+"))?":f+"("+p+")"}}var m=s(n.delimiter||"/"),h=i.slice(-m.length)===m;return a||(i=(h?i.slice(0,-m.length):i)+"(?:"+m+"(?=$))?"),i+=o?"$":a&&h?"":"(?="+m+"|$)",c(new RegExp("^"+i,d(n)),t)}function p(e,t,n){return r(t)||(n=t||n,t=[]),n=n||{},e instanceof RegExp?function(e,t){var n=e.source.match(/\((?!\?)/g);if(n)for(var r=0;r<n.length;r++)t.push({name:r,prefix:null,delimiter:null,optional:!1,repeat:!1,partial:!1,asterisk:!1,pattern:null});return c(e,t)}(e,t):r(e)?function(e,t,n){for(var r=[],a=0;a<e.length;a++)r.push(p(e[a],t,n).source);return c(new RegExp("(?:"+r.join("|")+")",d(n)),t)}(e,t,n):function(e,t,n){return f(o(e,n),t,n)}(e,t,n)}},2408:(e,t,n)=>{"use strict";var r=n(7418),a=60103,o=60106;t.Fragment=60107,t.StrictMode=60108,t.Profiler=60114;var i=60109,l=60110,s=60112;t.Suspense=60113;var u=60115,c=60116;if("function"==typeof Symbol&&Symbol.for){var d=Symbol.for;a=d("react.element"),o=d("react.portal"),t.Fragment=d("react.fragment"),t.StrictMode=d("react.strict_mode"),t.Profiler=d("react.profiler"),i=d("react.provider"),l=d("react.context"),s=d("react.forward_ref"),t.Suspense=d("react.suspense"),u=d("react.memo"),c=d("react.lazy")}var f="function"==typeof Symbol&&Symbol.iterator;function p(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var m={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},h={};function g(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}function b(){}function v(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}g.prototype.isReactComponent={},g.prototype.setState=function(e,t){if("object"!=typeof e&&"function"!=typeof e&&null!=e)throw Error(p(85));this.updater.enqueueSetState(this,e,t,"setState")},g.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")},b.prototype=g.prototype;var y=v.prototype=new b;y.constructor=v,r(y,g.prototype),y.isPureReactComponent=!0;var w={current:null},k=Object.prototype.hasOwnProperty,E={key:!0,ref:!0,__self:!0,__source:!0};function S(e,t,n){var r,o={},i=null,l=null;if(null!=t)for(r in void 0!==t.ref&&(l=t.ref),void 0!==t.key&&(i=""+t.key),t)k.call(t,r)&&!E.hasOwnProperty(r)&&(o[r]=t[r]);var s=arguments.length-2;if(1===s)o.children=n;else if(1<s){for(var u=Array(s),c=0;c<s;c++)u[c]=arguments[c+2];o.children=u}if(e&&e.defaultProps)for(r in s=e.defaultProps)void 0===o[r]&&(o[r]=s[r]);return{$$typeof:a,type:e,key:i,ref:l,props:o,_owner:w.current}}function x(e){return"object"==typeof e&&null!==e&&e.$$typeof===a}var C=/\/+/g;function _(e,t){return"object"==typeof e&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}(""+e.key):t.toString(36)}function T(e,t,n,r,i){var l=typeof e;"undefined"!==l&&"boolean"!==l||(e=null);var s=!1;if(null===e)s=!0;else switch(l){case"string":case"number":s=!0;break;case"object":switch(e.$$typeof){case a:case o:s=!0}}if(s)return i=i(s=e),e=""===r?"."+_(s,0):r,Array.isArray(i)?(n="",null!=e&&(n=e.replace(C,"$&/")+"/"),T(i,t,n,"",(function(e){return e}))):null!=i&&(x(i)&&(i=function(e,t){return{$$typeof:a,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}(i,n+(!i.key||s&&s.key===i.key?"":(""+i.key).replace(C,"$&/")+"/")+e)),t.push(i)),1;if(s=0,r=""===r?".":r+":",Array.isArray(e))for(var u=0;u<e.length;u++){var c=r+_(l=e[u],u);s+=T(l,t,n,c,i)}else if(c=function(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=f&&e[f]||e["@@iterator"])?e:null}(e),"function"==typeof c)for(e=c.call(e),u=0;!(l=e.next()).done;)s+=T(l=l.value,t,n,c=r+_(l,u++),i);else if("object"===l)throw t=""+e,Error(p(31,"[object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function A(e,t,n){if(null==e)return e;var r=[],a=0;return T(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function L(e){if(-1===e._status){var t=e._result;t=t(),e._status=0,e._result=t,t.then((function(t){0===e._status&&(t=t.default,e._status=1,e._result=t)}),(function(t){0===e._status&&(e._status=2,e._result=t)}))}if(1===e._status)return e._result;throw e._result}var R={current:null};function N(){var e=R.current;if(null===e)throw Error(p(321));return e}var P={ReactCurrentDispatcher:R,ReactCurrentBatchConfig:{transition:0},ReactCurrentOwner:w,IsSomeRendererActing:{current:!1},assign:r};t.Children={map:A,forEach:function(e,t,n){A(e,(function(){t.apply(this,arguments)}),n)},count:function(e){var t=0;return A(e,(function(){t++})),t},toArray:function(e){return A(e,(function(e){return e}))||[]},only:function(e){if(!x(e))throw Error(p(143));return e}},t.Component=g,t.PureComponent=v,t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=P,t.cloneElement=function(e,t,n){if(null==e)throw Error(p(267,e));var o=r({},e.props),i=e.key,l=e.ref,s=e._owner;if(null!=t){if(void 0!==t.ref&&(l=t.ref,s=w.current),void 0!==t.key&&(i=""+t.key),e.type&&e.type.defaultProps)var u=e.type.defaultProps;for(c in t)k.call(t,c)&&!E.hasOwnProperty(c)&&(o[c]=void 0===t[c]&&void 0!==u?u[c]:t[c])}var c=arguments.length-2;if(1===c)o.children=n;else if(1<c){u=Array(c);for(var d=0;d<c;d++)u[d]=arguments[d+2];o.children=u}return{$$typeof:a,type:e.type,key:i,ref:l,props:o,_owner:s}},t.createContext=function(e,t){return void 0===t&&(t=null),(e={$$typeof:l,_calculateChangedBits:t,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null}).Provider={$$typeof:i,_context:e},e.Consumer=e},t.createElement=S,t.createFactory=function(e){var t=S.bind(null,e);return t.type=e,t},t.createRef=function(){return{current:null}},t.forwardRef=function(e){return{$$typeof:s,render:e}},t.isValidElement=x,t.lazy=function(e){return{$$typeof:c,_payload:{_status:-1,_result:e},_init:L}},t.memo=function(e,t){return{$$typeof:u,type:e,compare:void 0===t?null:t}},t.useCallback=function(e,t){return N().useCallback(e,t)},t.useContext=function(e,t){return N().useContext(e,t)},t.useDebugValue=function(){},t.useEffect=function(e,t){return N().useEffect(e,t)},t.useImperativeHandle=function(e,t,n){return N().useImperativeHandle(e,t,n)},t.useLayoutEffect=function(e,t){return N().useLayoutEffect(e,t)},t.useMemo=function(e,t){return N().useMemo(e,t)},t.useReducer=function(e,t,n){return N().useReducer(e,t,n)},t.useRef=function(e){return N().useRef(e)},t.useState=function(e){return N().useState(e)},t.version="17.0.2"},7294:(e,t,n)=>{"use strict";e.exports=n(2408)},53:(e,t)=>{"use strict";var n,r,a,o;if("object"==typeof performance&&"function"==typeof performance.now){var i=performance;t.unstable_now=function(){return i.now()}}else{var l=Date,s=l.now();t.unstable_now=function(){return l.now()-s}}if("undefined"==typeof window||"function"!=typeof MessageChannel){var u=null,c=null,d=function(){if(null!==u)try{var e=t.unstable_now();u(!0,e),u=null}catch(n){throw setTimeout(d,0),n}};n=function(e){null!==u?setTimeout(n,0,e):(u=e,setTimeout(d,0))},r=function(e,t){c=setTimeout(e,t)},a=function(){clearTimeout(c)},t.unstable_shouldYield=function(){return!1},o=t.unstable_forceFrameRate=function(){}}else{var f=window.setTimeout,p=window.clearTimeout;if("undefined"!=typeof console){var m=window.cancelAnimationFrame;"function"!=typeof window.requestAnimationFrame&&console.error("This browser doesn't support requestAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills"),"function"!=typeof m&&console.error("This browser doesn't support cancelAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills")}var h=!1,g=null,b=-1,v=5,y=0;t.unstable_shouldYield=function(){return t.unstable_now()>=y},o=function(){},t.unstable_forceFrameRate=function(e){0>e||125<e?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):v=0<e?Math.floor(1e3/e):5};var w=new MessageChannel,k=w.port2;w.port1.onmessage=function(){if(null!==g){var e=t.unstable_now();y=e+v;try{g(!0,e)?k.postMessage(null):(h=!1,g=null)}catch(n){throw k.postMessage(null),n}}else h=!1},n=function(e){g=e,h||(h=!0,k.postMessage(null))},r=function(e,n){b=f((function(){e(t.unstable_now())}),n)},a=function(){p(b),b=-1}}function E(e,t){var n=e.length;e.push(t);e:for(;;){var r=n-1>>>1,a=e[r];if(!(void 0!==a&&0<C(a,t)))break e;e[r]=t,e[n]=a,n=r}}function S(e){return void 0===(e=e[0])?null:e}function x(e){var t=e[0];if(void 0!==t){var n=e.pop();if(n!==t){e[0]=n;e:for(var r=0,a=e.length;r<a;){var o=2*(r+1)-1,i=e[o],l=o+1,s=e[l];if(void 0!==i&&0>C(i,n))void 0!==s&&0>C(s,i)?(e[r]=s,e[l]=n,r=l):(e[r]=i,e[o]=n,r=o);else{if(!(void 0!==s&&0>C(s,n)))break e;e[r]=s,e[l]=n,r=l}}}return t}return null}function C(e,t){var n=e.sortIndex-t.sortIndex;return 0!==n?n:e.id-t.id}var _=[],T=[],A=1,L=null,R=3,N=!1,P=!1,O=!1;function I(e){for(var t=S(T);null!==t;){if(null===t.callback)x(T);else{if(!(t.startTime<=e))break;x(T),t.sortIndex=t.expirationTime,E(_,t)}t=S(T)}}function D(e){if(O=!1,I(e),!P)if(null!==S(_))P=!0,n(M);else{var t=S(T);null!==t&&r(D,t.startTime-e)}}function M(e,n){P=!1,O&&(O=!1,a()),N=!0;var o=R;try{for(I(n),L=S(_);null!==L&&(!(L.expirationTime>n)||e&&!t.unstable_shouldYield());){var i=L.callback;if("function"==typeof i){L.callback=null,R=L.priorityLevel;var l=i(L.expirationTime<=n);n=t.unstable_now(),"function"==typeof l?L.callback=l:L===S(_)&&x(_),I(n)}else x(_);L=S(_)}if(null!==L)var s=!0;else{var u=S(T);null!==u&&r(D,u.startTime-n),s=!1}return s}finally{L=null,R=o,N=!1}}var F=o;t.unstable_IdlePriority=5,t.unstable_ImmediatePriority=1,t.unstable_LowPriority=4,t.unstable_NormalPriority=3,t.unstable_Profiling=null,t.unstable_UserBlockingPriority=2,t.unstable_cancelCallback=function(e){e.callback=null},t.unstable_continueExecution=function(){P||N||(P=!0,n(M))},t.unstable_getCurrentPriorityLevel=function(){return R},t.unstable_getFirstCallbackNode=function(){return S(_)},t.unstable_next=function(e){switch(R){case 1:case 2:case 3:var t=3;break;default:t=R}var n=R;R=t;try{return e()}finally{R=n}},t.unstable_pauseExecution=function(){},t.unstable_requestPaint=F,t.unstable_runWithPriority=function(e,t){switch(e){case 1:case 2:case 3:case 4:case 5:break;default:e=3}var n=R;R=e;try{return t()}finally{R=n}},t.unstable_scheduleCallback=function(e,o,i){var l=t.unstable_now();switch("object"==typeof i&&null!==i?i="number"==typeof(i=i.delay)&&0<i?l+i:l:i=l,e){case 1:var s=-1;break;case 2:s=250;break;case 5:s=1073741823;break;case 4:s=1e4;break;default:s=5e3}return e={id:A++,callback:o,priorityLevel:e,startTime:i,expirationTime:s=i+s,sortIndex:-1},i>l?(e.sortIndex=i,E(T,e),null===S(_)&&e===S(T)&&(O?a():O=!0,r(D,i-l))):(e.sortIndex=s,E(_,e),P||N||(P=!0,n(M))),e},t.unstable_wrapCallback=function(e){var t=R;return function(){var n=R;R=t;try{return e.apply(this,arguments)}finally{R=n}}}},3840:(e,t,n)=>{"use strict";e.exports=n(53)},6774:e=>{e.exports=function(e,t,n,r){var a=n?n.call(r,e,t):void 0;if(void 0!==a)return!!a;if(e===t)return!0;if("object"!=typeof e||!e||"object"!=typeof t||!t)return!1;var o=Object.keys(e),i=Object.keys(t);if(o.length!==i.length)return!1;for(var l=Object.prototype.hasOwnProperty.bind(t),s=0;s<o.length;s++){var u=o[s];if(!l(u))return!1;var c=e[u],d=t[u];if(!1===(a=n?n.call(r,c,d,u):void 0)||void 0===a&&c!==d)return!1}return!0}},2177:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});var r="Invariant failed";function a(e,t){if(!e)throw new Error(r)}},3250:(e,t,n)=>{"use strict";var r=n(7294);var a="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},o=r.useState,i=r.useEffect,l=r.useLayoutEffect,s=r.useDebugValue;function u(e){var t=e.getSnapshot;e=e.value;try{var n=t();return!a(e,n)}catch(r){return!0}}var c="undefined"==typeof window||void 0===window.document||void 0===window.document.createElement?function(e,t){return t()}:function(e,t){var n=t(),r=o({inst:{value:n,getSnapshot:t}}),a=r[0].inst,c=r[1];return l((function(){a.value=n,a.getSnapshot=t,u(a)&&c({inst:a})}),[e,n,t]),i((function(){return u(a)&&c({inst:a}),e((function(){u(a)&&c({inst:a})}))}),[e]),s(n),n};t.useSyncExternalStore=void 0!==r.useSyncExternalStore?r.useSyncExternalStore:c},1688:(e,t,n)=>{"use strict";e.exports=n(3250)},6809:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});const r={title:"K3s",tagline:"",url:"https://docs.k3s.io",baseUrl:"/",onBrokenLinks:"throw",onBrokenMarkdownLinks:"warn",favicon:"img/favicon.ico",organizationName:"k3s-io",projectName:"docs",trailingSlash:!1,markdown:{mermaid:!0},themes:["@docusaurus/theme-mermaid"],i18n:{defaultLocale:"en",locales:["en","zh","kr"],localeConfigs:{en:{label:"English",direction:"ltr"},zh:{label:"\u7b80\u4f53\u4e2d\u6587",direction:"ltr"},kr:{label:"\ud55c\uad6d\uc5b4",direction:"ltr"}},path:"i18n"},themeConfig:{colorMode:{defaultMode:"light",respectPrefersColorScheme:!0,disableSwitch:!1},navbar:{title:"",logo:{alt:"logo",src:"img/k3s-logo-light.svg",srcDark:"img/k3s-logo-dark.svg"},items:[{type:"search",position:"right"},{type:"localeDropdown",position:"right",dropdownItemsBefore:[],dropdownItemsAfter:[]},{to:"https://github.com/k3s-io/k3s/",label:"GitHub",position:"right",className:"navbar__github btn"}],hideOnScroll:!1},algolia:{appId:"LLOD7N3LJA",apiKey:"4637c26b2ca6b8aeaf99a3ee421fb35c",indexName:"k3s",contextualSearch:!0,searchParameters:{},searchPagePath:"search"},footer:{style:"dark",links:[],copyright:'Copyright \xa9 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks\n      and uses trademarks. For a list of trademarks of The Linux Foundation, \n      please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.'},docs:{versionPersistence:"localStorage",sidebar:{hideable:!1,autoCollapseCategories:!1}},metadata:[],prism:{additionalLanguages:[],theme:{plain:{color:"#bfc7d5",backgroundColor:"#292d3e"},styles:[{types:["comment"],style:{color:"rgb(105, 112, 152)",fontStyle:"italic"}},{types:["string","inserted"],style:{color:"rgb(195, 232, 141)"}},{types:["number"],style:{color:"rgb(247, 140, 108)"}},{types:["builtin","char","constant","function"],style:{color:"rgb(130, 170, 255)"}},{types:["punctuation","selector"],style:{color:"rgb(199, 146, 234)"}},{types:["variable"],style:{color:"rgb(191, 199, 213)"}},{types:["class-name","attr-name"],style:{color:"rgb(255, 203, 107)"}},{types:["tag","deleted"],style:{color:"rgb(255, 85, 114)"}},{types:["operator"],style:{color:"rgb(137, 221, 255)"}},{types:["boolean"],style:{color:"rgb(255, 88, 116)"}},{types:["keyword"],style:{fontStyle:"italic"}},{types:["doctype"],style:{color:"rgb(199, 146, 234)",fontStyle:"italic"}},{types:["namespace"],style:{color:"rgb(178, 204, 214)"}},{types:["url"],style:{color:"rgb(221, 221, 221)"}}]},magicComments:[{className:"theme-code-block-highlighted-line",line:"highlight-next-line",block:{start:"highlight-start",end:"highlight-end"}}]},tableOfContents:{minHeadingLevel:2,maxHeadingLevel:3},mermaid:{theme:{dark:"dark",light:"default"},options:{}}},presets:[["@docusaurus/preset-classic",{docs:{routeBasePath:"/",sidebarPath:"/home/runner/work/docs/docs/sidebars.js",showLastUpdateTime:!0,editUrl:"https://github.com/k3s-io/docs/edit/main/"},blog:!1,theme:{customCss:["/home/runner/work/docs/docs/src/css/custom.css"]}}]],plugins:[["@docusaurus/plugin-client-redirects",{redirects:[{from:"/installation/ha",to:"/datastore/ha"},{from:"/installation/ha-embedded",to:"/datastore/ha-embedded"},{from:"/installation/datastore",to:"/datastore"},{from:"/installation/disable-flags",to:"/installation/server-roles"},{from:"/backup-restore/backup-restore",to:"/datastore/backup-restore"},{from:"/reference/agent-config",to:"/cli/agent"},{from:"/reference/server-config",to:"/cli/server"}]}]],baseUrlIssueBanner:!0,onDuplicateRoutes:"warn",staticDirectories:["static"],customFields:{},scripts:[],headTags:[],stylesheets:[],clientModules:[],titleDelimiter:"|",noIndex:!1}},3117:(e,t,n)=>{"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}n.d(t,{Z:()=>r})},144:(e,t,n)=>{"use strict";function r(e,t){return r=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(e,t){return e.__proto__=t,e},r(e,t)}function a(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,r(e,t)}n.d(t,{Z:()=>a})},102:(e,t,n)=>{"use strict";function r(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}n.d(t,{Z:()=>r})},7529:e=>{"use strict";e.exports={}},6887:e=>{"use strict";e.exports=JSON.parse('{"/search-48c":{"__comp":"1a4e3797","__context":{"plugin":"59b068d1"}},"/-3ad":{"__comp":"1be78505","__context":{"plugin":"247783bb"},"versionMetadata":"935f2afb"},"/-68a":{"__comp":"17896441","content":"a09c2993"},"/advanced-a2b":{"__comp":"17896441","content":"6647a7ce"},"/architecture-46e":{"__comp":"17896441","content":"83582f1b"},"/cli-995":{"__comp":"17896441","content":"9e39b1cd"},"/cli/agent-7c5":{"__comp":"17896441","content":"1be8dcfa"},"/cli/certificate-233":{"__comp":"17896441","content":"6e9804bc"},"/cli/etcd-snapshot-f75":{"__comp":"17896441","content":"36f34ab4"},"/cli/secrets-encrypt-75d":{"__comp":"17896441","content":"179ec51e"},"/cli/server-7b3":{"__comp":"17896441","content":"4455f95b"},"/cli/token-3ce":{"__comp":"17896441","content":"2a65762c"},"/cluster-access-dee":{"__comp":"17896441","content":"c513f62d"},"/datastore-7c4":{"__comp":"17896441","content":"ab388925"},"/datastore/backup-restore-167":{"__comp":"17896441","content":"ba3a957c"},"/datastore/cluster-loadbalancer-c30":{"__comp":"17896441","content":"4a667cf9"},"/datastore/ha-cdb":{"__comp":"17896441","content":"ea0a4c6d"},"/datastore/ha-embedded-aaf":{"__comp":"17896441","content":"b36bdd38"},"/faq-0e3":{"__comp":"17896441","content":"dfcda264"},"/helm-af2":{"__comp":"17896441","content":"83a7c7f9"},"/installation-569":{"__comp":"17896441","content":"1e924268"},"/installation/airgap-aba":{"__comp":"17896441","content":"ec6f9153"},"/installation/configuration-a25":{"__comp":"17896441","content":"97c4f258"},"/installation/kube-dashboard-e50":{"__comp":"17896441","content":"a3308106"},"/installation/network-options-847":{"__comp":"17896441","content":"121f934f"},"/installation/packaged-components-d71":{"__comp":"17896441","content":"65c5030c"},"/installation/private-registry-23f":{"__comp":"17896441","content":"10b61a3f"},"/installation/requirements-dc7":{"__comp":"17896441","content":"ac75af2e"},"/installation/server-roles-ce8":{"__comp":"17896441","content":"f8eefdc6"},"/installation/uninstall-97c":{"__comp":"17896441","content":"4fea1ac4"},"/known-issues-e6b":{"__comp":"17896441","content":"e2835484"},"/networking-a71":{"__comp":"17896441","content":"ee75e821"},"/quick-start-456":{"__comp":"17896441","content":"b1e02bd6"},"/reference-90f":{"__comp":"17896441","content":"9ba4882f"},"/reference/env-variables-afb":{"__comp":"17896441","content":"6ab2c2e0"},"/reference/resource-profiling-502":{"__comp":"17896441","content":"fc39421f"},"/security-a31":{"__comp":"17896441","content":"7b8e2475"},"/security/hardening-guide-f1d":{"__comp":"17896441","content":"82f1aa93"},"/security/secrets-encryption-125":{"__comp":"17896441","content":"57d35c99"},"/security/self-assessment-c72":{"__comp":"17896441","content":"05239c1f"},"/storage-f27":{"__comp":"17896441","content":"6937a857"},"/upgrades-a8e":{"__comp":"17896441","content":"4e366d5e"},"/upgrades/automated-1e2":{"__comp":"17896441","content":"82406859"},"/upgrades/killall-de1":{"__comp":"17896441","content":"4aae9e46"},"/upgrades/manual-22b":{"__comp":"17896441","content":"d8ed1217"}}')}},e=>{e.O(0,[532],(()=>{return t=9383,e(e.s=t);var t}));e.O()}]);
\ No newline at end of file
diff --git a/assets/js/runtime~main.46c6e34e.js b/assets/js/runtime~main.46c6e34e.js
deleted file mode 100644
index e75992e84..000000000
--- a/assets/js/runtime~main.46c6e34e.js
+++ /dev/null
@@ -1 +0,0 @@
-(()=>{"use strict";var e,a,f,c,t,r={},d={};function o(e){var a=d[e];if(void 0!==a)return a.exports;var f=d[e]={id:e,loaded:!1,exports:{}};return r[e].call(f.exports,f,f.exports,o),f.loaded=!0,f.exports}o.m=r,o.c=d,e=[],o.O=(a,f,c,t)=>{if(!f){var r=1/0;for(i=0;i<e.length;i++){f=e[i][0],c=e[i][1],t=e[i][2];for(var d=!0,b=0;b<f.length;b++)(!1&t||r>=t)&&Object.keys(o.O).every((e=>o.O[e](f[b])))?f.splice(b--,1):(d=!1,t<r&&(r=t));if(d){e.splice(i--,1);var n=c();void 0!==n&&(a=n)}}return a}t=t||0;for(var i=e.length;i>0&&e[i-1][2]>t;i--)e[i]=e[i-1];e[i]=[f,c,t]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a:a}),a},f=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,c){if(1&c&&(e=this(e)),8&c)return e;if("object"==typeof e&&e){if(4&c&&e.__esModule)return e;if(16&c&&"function"==typeof e.then)return e}var t=Object.create(null);o.r(t);var r={};a=a||[null,f({}),f([]),f(f)];for(var d=2&c&&e;"object"==typeof d&&!~a.indexOf(d);d=f(d))Object.getOwnPropertyNames(d).forEach((a=>r[a]=()=>e[a]));return r.default=()=>e,o.d(t,r),t},o.d=(e,a)=>{for(var f in a)o.o(a,f)&&!o.o(e,f)&&Object.defineProperty(e,f,{enumerable:!0,get:a[f]})},o.f={},o.e=e=>Promise.all(Object.keys(o.f).reduce(((a,f)=>(o.f[f](e,a),a)),[])),o.u=e=>"assets/js/"+({53:"935f2afb",79:"7b8e2475",305:"97c4f258",393:"6e9804bc",750:"ec6f9153",791:"ea0a4c6d",966:"83582f1b",981:"6ab2c2e0",1073:"4fea1ac4",1199:"ac75af2e",1340:"4455f95b",1430:"2a65762c",2098:"dfcda264",2563:"c513f62d",2745:"d8ed1217",3319:"82406859",3353:"6647a7ce",3452:"05239c1f",3595:"4e366d5e",4128:"a09c2993",4443:"4aae9e46",4548:"ab388925",4902:"10b61a3f",5234:"f8eefdc6",6155:"36f34ab4",6385:"59b068d1",6720:"9ba4882f",6895:"b36bdd38",7176:"179ec51e",7628:"1be8dcfa",7709:"82f1aa93",7733:"65c5030c",7813:"9e39b1cd",7817:"83a7c7f9",7834:"b1e02bd6",7893:"ee75e821",7918:"17896441",7920:"1a4e3797",8005:"57d35c99",8511:"a3308106",8614:"1e924268",8776:"ba3a957c",8964:"121f934f",8997:"6937a857",9334:"247783bb",9477:"4a667cf9",9514:"1be78505",9778:"fc39421f",9999:"e2835484"}[e]||e)+"."+{53:"93837138",79:"f309ce72",305:"9de40414",393:"8c09418c",750:"1e3ca38c",791:"abec3f2c",966:"860f5c14",981:"b6dfbfcb",1073:"117e086d",1199:"32df538e",1340:"ae25dff8",1430:"c428effd",2098:"2eb06be5",2563:"37df4863",2745:"1936c38f",3319:"12adea2c",3353:"e7fceb23",3452:"7480a8d7",3595:"22fbc156",4128:"ca7f2ba3",4443:"e0883a3b",4548:"60530bae",4835:"0e2e1b5f",4902:"83558b2f",4972:"f742b7fa",5234:"e2159cf3",6155:"74e122a4",6316:"9d17e9b9",6385:"c8b83cea",6720:"f4a7597c",6780:"6d95d5ed",6895:"a80460c2",6945:"a46579e2",7176:"a397da08",7628:"58f2734d",7709:"9b3a2dbc",7724:"3223bc35",7733:"3b4edb92",7813:"d12d005a",7817:"6a136e28",7834:"af715708",7893:"0d7cfd75",7918:"ec08c698",7920:"ac674e56",8005:"f75bd393",8511:"fb788afe",8614:"e30a7637",8776:"e93ecacc",8894:"b6a0e6e6",8964:"e5170040",8997:"3fe495f8",9334:"300ff908",9477:"c1544208",9487:"3c7da419",9514:"1ff28fb4",9778:"791a1427",9999:"a3d0785c"}[e]+".js",o.miniCssF=e=>{},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),c={},t="k-3-s-docs:",o.l=(e,a,f,r)=>{if(c[e])c[e].push(a);else{var d,b;if(void 0!==f)for(var n=document.getElementsByTagName("script"),i=0;i<n.length;i++){var u=n[i];if(u.getAttribute("src")==e||u.getAttribute("data-webpack")==t+f){d=u;break}}d||(b=!0,(d=document.createElement("script")).charset="utf-8",d.timeout=120,o.nc&&d.setAttribute("nonce",o.nc),d.setAttribute("data-webpack",t+f),d.src=e),c[e]=[a];var l=(a,f)=>{d.onerror=d.onload=null,clearTimeout(s);var t=c[e];if(delete c[e],d.parentNode&&d.parentNode.removeChild(d),t&&t.forEach((e=>e(f))),a)return a(f)},s=setTimeout(l.bind(null,void 0,{type:"timeout",target:d}),12e4);d.onerror=l.bind(null,d.onerror),d.onload=l.bind(null,d.onload),b&&document.head.appendChild(d)}},o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.p="/",o.gca=function(e){return e={17896441:"7918",82406859:"3319","935f2afb":"53","7b8e2475":"79","97c4f258":"305","6e9804bc":"393",ec6f9153:"750",ea0a4c6d:"791","83582f1b":"966","6ab2c2e0":"981","4fea1ac4":"1073",ac75af2e:"1199","4455f95b":"1340","2a65762c":"1430",dfcda264:"2098",c513f62d:"2563",d8ed1217:"2745","6647a7ce":"3353","05239c1f":"3452","4e366d5e":"3595",a09c2993:"4128","4aae9e46":"4443",ab388925:"4548","10b61a3f":"4902",f8eefdc6:"5234","36f34ab4":"6155","59b068d1":"6385","9ba4882f":"6720",b36bdd38:"6895","179ec51e":"7176","1be8dcfa":"7628","82f1aa93":"7709","65c5030c":"7733","9e39b1cd":"7813","83a7c7f9":"7817",b1e02bd6:"7834",ee75e821:"7893","1a4e3797":"7920","57d35c99":"8005",a3308106:"8511","1e924268":"8614",ba3a957c:"8776","121f934f":"8964","6937a857":"8997","247783bb":"9334","4a667cf9":"9477","1be78505":"9514",fc39421f:"9778",e2835484:"9999"}[e]||e,o.p+o.u(e)},(()=>{var e={1303:0,532:0};o.f.j=(a,f)=>{var c=o.o(e,a)?e[a]:void 0;if(0!==c)if(c)f.push(c[2]);else if(/^(1303|532)$/.test(a))e[a]=0;else{var t=new Promise(((f,t)=>c=e[a]=[f,t]));f.push(c[2]=t);var r=o.p+o.u(a),d=new Error;o.l(r,(f=>{if(o.o(e,a)&&(0!==(c=e[a])&&(e[a]=void 0),c)){var t=f&&("load"===f.type?"missing":f.type),r=f&&f.target&&f.target.src;d.message="Loading chunk "+a+" failed.\n("+t+": "+r+")",d.name="ChunkLoadError",d.type=t,d.request=r,c[1](d)}}),"chunk-"+a,a)}},o.O.j=a=>0===e[a];var a=(a,f)=>{var c,t,r=f[0],d=f[1],b=f[2],n=0;if(r.some((a=>0!==e[a]))){for(c in d)o.o(d,c)&&(o.m[c]=d[c]);if(b)var i=b(o)}for(a&&a(f);n<r.length;n++)t=r[n],o.o(e,t)&&e[t]&&e[t][0](),e[t]=0;return o.O(i)},f=self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[];f.forEach(a.bind(null,0)),f.push=a.bind(null,f.push.bind(f))})()})();
\ No newline at end of file
diff --git a/assets/js/runtime~main.7d956e78.js b/assets/js/runtime~main.7d956e78.js
new file mode 100644
index 000000000..93eb89ace
--- /dev/null
+++ b/assets/js/runtime~main.7d956e78.js
@@ -0,0 +1 @@
+(()=>{"use strict";var e,a,f,t,c,r={},d={};function b(e){var a=d[e];if(void 0!==a)return a.exports;var f=d[e]={id:e,loaded:!1,exports:{}};return r[e].call(f.exports,f,f.exports,b),f.loaded=!0,f.exports}b.m=r,b.c=d,e=[],b.O=(a,f,t,c)=>{if(!f){var r=1/0;for(i=0;i<e.length;i++){f=e[i][0],t=e[i][1],c=e[i][2];for(var d=!0,o=0;o<f.length;o++)(!1&c||r>=c)&&Object.keys(b.O).every((e=>b.O[e](f[o])))?f.splice(o--,1):(d=!1,c<r&&(r=c));if(d){e.splice(i--,1);var n=t();void 0!==n&&(a=n)}}return a}c=c||0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[f,t,c]},b.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return b.d(a,{a:a}),a},f=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,b.t=function(e,t){if(1&t&&(e=this(e)),8&t)return e;if("object"==typeof e&&e){if(4&t&&e.__esModule)return e;if(16&t&&"function"==typeof e.then)return e}var c=Object.create(null);b.r(c);var r={};a=a||[null,f({}),f([]),f(f)];for(var d=2&t&&e;"object"==typeof d&&!~a.indexOf(d);d=f(d))Object.getOwnPropertyNames(d).forEach((a=>r[a]=()=>e[a]));return r.default=()=>e,b.d(c,r),c},b.d=(e,a)=>{for(var f in a)b.o(a,f)&&!b.o(e,f)&&Object.defineProperty(e,f,{enumerable:!0,get:a[f]})},b.f={},b.e=e=>Promise.all(Object.keys(b.f).reduce(((a,f)=>(b.f[f](e,a),a)),[])),b.u=e=>"assets/js/"+({53:"935f2afb",79:"7b8e2475",305:"97c4f258",393:"6e9804bc",750:"ec6f9153",791:"ea0a4c6d",966:"83582f1b",981:"6ab2c2e0",1073:"4fea1ac4",1199:"ac75af2e",1340:"4455f95b",1430:"2a65762c",2098:"dfcda264",2563:"c513f62d",2745:"d8ed1217",3319:"82406859",3353:"6647a7ce",3452:"05239c1f",3595:"4e366d5e",4128:"a09c2993",4443:"4aae9e46",4548:"ab388925",4902:"10b61a3f",5156:"4129286c",5234:"f8eefdc6",6155:"36f34ab4",6720:"9ba4882f",6895:"b36bdd38",7176:"179ec51e",7628:"1be8dcfa",7709:"82f1aa93",7733:"65c5030c",7813:"9e39b1cd",7817:"83a7c7f9",7834:"b1e02bd6",7893:"ee75e821",7918:"17896441",7920:"1a4e3797",8005:"57d35c99",8511:"a3308106",8614:"1e924268",8776:"ba3a957c",8964:"121f934f",8997:"6937a857",9334:"247783bb",9477:"4a667cf9",9514:"1be78505",9778:"fc39421f",9999:"e2835484"}[e]||e)+"."+{53:"93837138",79:"98fb2e0f",305:"e445d54b",393:"7a495e75",750:"b58d4526",791:"e7ff26f5",966:"2f8f86e0",981:"8f404c7d",1073:"d47656f7",1199:"a9642fd4",1340:"ee2fe2ee",1430:"ed54d27f",2098:"f8f0f919",2563:"d5cad0d9",2745:"8aca6f21",3319:"cedbc22f",3353:"e3387f7e",3452:"a3e17475",3595:"056de5cd",4128:"971bae49",4443:"0c746bfd",4548:"ab051ac0",4835:"071674c5",4902:"7e4c0bc1",4972:"8e6a9569",5156:"c7656db7",5234:"f7244d92",5525:"ab860f59",6155:"ec0a83d4",6316:"9d17e9b9",6720:"704ab991",6895:"aa83f99e",7176:"b2467c68",7628:"11fa3a69",7709:"4aaed9fe",7724:"3223bc35",7733:"3f898541",7813:"95d59679",7817:"b757f668",7834:"d146fce0",7893:"011ff8fa",7918:"ec08c698",7920:"8b5db6d2",8005:"c0214124",8443:"6e4145c7",8511:"0710ae6c",8614:"a09c9809",8776:"85248db6",8964:"91e84147",8997:"5af8e029",9334:"300ff908",9477:"04930927",9487:"3c7da419",9514:"3b555d49",9778:"c11681ed",9999:"c2f65b38"}[e]+".js",b.miniCssF=e=>{},b.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),b.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),t={},c="k-3-s-docs:",b.l=(e,a,f,r)=>{if(t[e])t[e].push(a);else{var d,o;if(void 0!==f)for(var n=document.getElementsByTagName("script"),i=0;i<n.length;i++){var u=n[i];if(u.getAttribute("src")==e||u.getAttribute("data-webpack")==c+f){d=u;break}}d||(o=!0,(d=document.createElement("script")).charset="utf-8",d.timeout=120,b.nc&&d.setAttribute("nonce",b.nc),d.setAttribute("data-webpack",c+f),d.src=e),t[e]=[a];var l=(a,f)=>{d.onerror=d.onload=null,clearTimeout(s);var c=t[e];if(delete t[e],d.parentNode&&d.parentNode.removeChild(d),c&&c.forEach((e=>e(f))),a)return a(f)},s=setTimeout(l.bind(null,void 0,{type:"timeout",target:d}),12e4);d.onerror=l.bind(null,d.onerror),d.onload=l.bind(null,d.onload),o&&document.head.appendChild(d)}},b.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},b.p="/",b.gca=function(e){return e={17896441:"7918",82406859:"3319","935f2afb":"53","7b8e2475":"79","97c4f258":"305","6e9804bc":"393",ec6f9153:"750",ea0a4c6d:"791","83582f1b":"966","6ab2c2e0":"981","4fea1ac4":"1073",ac75af2e:"1199","4455f95b":"1340","2a65762c":"1430",dfcda264:"2098",c513f62d:"2563",d8ed1217:"2745","6647a7ce":"3353","05239c1f":"3452","4e366d5e":"3595",a09c2993:"4128","4aae9e46":"4443",ab388925:"4548","10b61a3f":"4902","4129286c":"5156",f8eefdc6:"5234","36f34ab4":"6155","9ba4882f":"6720",b36bdd38:"6895","179ec51e":"7176","1be8dcfa":"7628","82f1aa93":"7709","65c5030c":"7733","9e39b1cd":"7813","83a7c7f9":"7817",b1e02bd6:"7834",ee75e821:"7893","1a4e3797":"7920","57d35c99":"8005",a3308106:"8511","1e924268":"8614",ba3a957c:"8776","121f934f":"8964","6937a857":"8997","247783bb":"9334","4a667cf9":"9477","1be78505":"9514",fc39421f:"9778",e2835484:"9999"}[e]||e,b.p+b.u(e)},(()=>{var e={1303:0,532:0};b.f.j=(a,f)=>{var t=b.o(e,a)?e[a]:void 0;if(0!==t)if(t)f.push(t[2]);else if(/^(1303|532)$/.test(a))e[a]=0;else{var c=new Promise(((f,c)=>t=e[a]=[f,c]));f.push(t[2]=c);var r=b.p+b.u(a),d=new Error;b.l(r,(f=>{if(b.o(e,a)&&(0!==(t=e[a])&&(e[a]=void 0),t)){var c=f&&("load"===f.type?"missing":f.type),r=f&&f.target&&f.target.src;d.message="Loading chunk "+a+" failed.\n("+c+": "+r+")",d.name="ChunkLoadError",d.type=c,d.request=r,t[1](d)}}),"chunk-"+a,a)}},b.O.j=a=>0===e[a];var a=(a,f)=>{var t,c,r=f[0],d=f[1],o=f[2],n=0;if(r.some((a=>0!==e[a]))){for(t in d)b.o(d,t)&&(b.m[t]=d[t]);if(o)var i=o(b)}for(a&&a(f);n<r.length;n++)c=r[n],b.o(e,c)&&e[c]&&e[c][0](),e[c]=0;return b.O(i)},f=self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[];f.forEach(a.bind(null,0)),f.push=a.bind(null,f.push.bind(f))})()})();
\ No newline at end of file
diff --git a/cli.html b/cli.html
index c85b258ea..6d177edfd 100644
--- a/cli.html
+++ b/cli.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CLI Tools | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CLI Tools | K3s"><meta data-rh="true" name="description" content="The K3s binary contains a number of additional tools the help you manage your cluster."><meta data-rh="true" property="og:description" content="The K3s binary contains a number of additional tools the help you manage your cluster."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">CLI Tools | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CLI Tools | K3s"><meta data-rh="true" name="description" content="The K3s binary contains a number of additional tools the help you manage your cluster."><meta data-rh="true" property="og:description" content="The K3s binary contains a number of additional tools the help you manage your cluster."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CLI Tools</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>CLI Tools</h1></header><p>The K3s binary contains a number of additional tools the help you manage your cluster.</p><table><thead><tr><th>Command</th><th>Description</th></tr></thead><tbody><tr><td><code>k3s server</code></td><td>Run a K3s server node, which launches the Kubernetes <code>apiserver</code>, <code>scheduler</code>, <code>controller-manager</code>, and <code>cloud-controller-manager</code> components, in addition a datastore and the agent components. See the <a href="/cli/server"><code>k3s server</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s agent</code></td><td>Run the K3s agent node, which launches <code>containerd</code>, <code>flannel</code>, <code>kube-router</code> network policy controller, and the Kubernetes <code>kubelet</code> and <code>kube-proxy</code> components. See the <a href="/cli/agent"><code>k3s agent</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s kubectl</code></td><td>Run the embedded <a href="https://kubernetes.io/docs/reference/kubectl" target="_blank" rel="noopener noreferrer"><code>kubectl</code> command</a>. This is a CLI for interacting with the Kubernetes apiserver.  If the <code>KUBECONFIG</code> environment variable is not set, this will automatically attempt to use the kubeconfig at <code>/etc/rancher/k3s/k3s.yaml</code>.</td></tr><tr><td><code>k3s crictl</code></td><td>Run the embedded <a href="https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md" target="_blank" rel="noopener noreferrer"><code>crictl</code> command</a>. This is a CLI for interacting with Kubernetes&#x27;s container runtime interface (CRI). Useful for debugging.</td></tr><tr><td><code>k3s ctr</code></td><td>Run the embedded <a href="https://github.com/projectatomic/containerd/blob/master/docs/cli.md" target="_blank" rel="noopener noreferrer"><code>ctr</code> command</a>. This is a CLI for containerd, the container daemon used by K3s. Useful for debugging.</td></tr><tr><td><code>k3s token</code></td><td>Manage bootstrap tokens. See the <a href="/cli/token"><code>k3s token</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s etcd-snapshot</code></td><td>Perform on demand backups of the K3s cluster data and upload to S3. See the <a href="/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s secrets-encrypt</code></td><td>Configure K3s to encrypt secrets when storing them in the cluster. See the <a href="/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s certificate</code></td><td>Manage K3s certificates. See the <a href="/cli/certificate"><code>k3s certificate</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s completion</code></td><td>Generate shell completion scripts for k3s</td></tr><tr><td><code>k3s help</code></td><td>Shows a list of commands or help for one command</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/faq"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">FAQ</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/server"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">server</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CLI Tools</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>CLI Tools</h1></header><p>The K3s binary contains a number of additional tools the help you manage your cluster.</p><table><thead><tr><th>Command</th><th>Description</th></tr></thead><tbody><tr><td><code>k3s server</code></td><td>Run a K3s server node, which launches the Kubernetes <code>apiserver</code>, <code>scheduler</code>, <code>controller-manager</code>, and <code>cloud-controller-manager</code> components, in addition a datastore and the agent components. See the <a href="/cli/server"><code>k3s server</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s agent</code></td><td>Run the K3s agent node, which launches <code>containerd</code>, <code>flannel</code>, <code>kube-router</code> network policy controller, and the Kubernetes <code>kubelet</code> and <code>kube-proxy</code> components. See the <a href="/cli/agent"><code>k3s agent</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s kubectl</code></td><td>Run the embedded <a href="https://kubernetes.io/docs/reference/kubectl" target="_blank" rel="noopener noreferrer"><code>kubectl</code> command</a>. This is a CLI for interacting with the Kubernetes apiserver.  If the <code>KUBECONFIG</code> environment variable is not set, this will automatically attempt to use the kubeconfig at <code>/etc/rancher/k3s/k3s.yaml</code>.</td></tr><tr><td><code>k3s crictl</code></td><td>Run the embedded <a href="https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md" target="_blank" rel="noopener noreferrer"><code>crictl</code> command</a>. This is a CLI for interacting with Kubernetes&#x27;s container runtime interface (CRI). Useful for debugging.</td></tr><tr><td><code>k3s ctr</code></td><td>Run the embedded <a href="https://github.com/projectatomic/containerd/blob/master/docs/cli.md" target="_blank" rel="noopener noreferrer"><code>ctr</code> command</a>. This is a CLI for containerd, the container daemon used by K3s. Useful for debugging.</td></tr><tr><td><code>k3s token</code></td><td>Manage bootstrap tokens. See the <a href="/cli/token"><code>k3s token</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s etcd-snapshot</code></td><td>Perform on demand backups of the K3s cluster data and upload to S3. See the <a href="/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s secrets-encrypt</code></td><td>Configure K3s to encrypt secrets when storing them in the cluster. See the <a href="/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s certificate</code></td><td>Manage K3s certificates. See the <a href="/cli/certificate"><code>k3s certificate</code> command documentation</a> for more information.</td></tr><tr><td><code>k3s completion</code></td><td>Generate shell completion scripts for k3s</td></tr><tr><td><code>k3s help</code></td><td>Shows a list of commands or help for one command</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/faq"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">FAQ</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/server"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">server</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/cli/agent.html b/cli/agent.html
index ad2ee1f80..2352ddeeb 100644
--- a/cli/agent.html
+++ b/cli/agent.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">agent | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/agent"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="agent | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/agent"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/agent" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/agent" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">agent | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/agent"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="agent | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/agent"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/agent" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/agent" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">agent</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s agent</h1><p>In this section, you&#x27;ll learn how to configure the K3s agent.</p><p>Note that servers also run an agent, so all flags listed on this page are also valid for use on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="Direct link to Logging" title="Direct link to Logging">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="Direct link to Cluster Options" title="Direct link to Cluster Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token value, -t</code> value</td><td><code>K3S_TOKEN</code></td><td>Token to use for authentication</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>Token file to use for authentication</td></tr><tr><td><code>--server value, -s</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="Direct link to Data" title="Direct link to Data">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td>&quot;/var/lib/rancher/k3s&quot;</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node">Node<a href="#node" class="hash-link" aria-label="Direct link to Node" title="Direct link to Node">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-name</code> value</td><td><code>K3S_NODE_NAME</code></td><td>Node name</td></tr><tr><td><code>--with-node-id</code></td><td>N/A</td><td>Append id to node name</td></tr><tr><td><code>--node-label</code> value</td><td>N/A</td><td>Registering and starting kubelet with set of labels</td></tr><tr><td><code>--node-taint</code> value</td><td>N/A</td><td>Registering kubelet with set of taints</td></tr><tr><td><code>--protect-kernel-defaults</code></td><td>N/A</td><td>Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.</td></tr><tr><td><code>--selinux</code></td><td><code>K3S_SELINUX</code></td><td>Enable SELinux in containerd</td></tr><tr><td><code>--lb-server-port</code> value</td><td><code>K3S_LB_SERVER_PORT</code></td><td>Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="runtime">Runtime<a href="#runtime" class="hash-link" aria-label="Direct link to Runtime" title="Direct link to Runtime">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--container-runtime-endpoint</code> value</td><td>N/A</td><td>Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path</td></tr><tr><td><code>--pause-image</code> value</td><td>&quot;docker.io/rancher/pause:3.1&quot;</td><td>Customized pause image for containerd or docker sandbox</td></tr><tr><td><code>--private-registry</code> value</td><td>&quot;/etc/rancher/k3s/registries.yaml&quot;</td><td>Private registry configuration file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="Direct link to Networking" title="Direct link to Networking">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-ip value, -i</code> value</td><td>N/A</td><td>IP address to advertise for node</td></tr><tr><td><code>--node-external-ip</code> value</td><td>N/A</td><td>External IP address to advertise for node</td></tr><tr><td><code>--resolv-conf</code> value</td><td><code>K3S_RESOLV_CONF</code></td><td>Kubelet resolv.conf file</td></tr><tr><td><code>--flannel-iface</code> value</td><td>N/A</td><td>Override default flannel interface</td></tr><tr><td><code>--flannel-conf</code> value</td><td>N/A</td><td>Override default flannel config file</td></tr><tr><td><code>--flannel-cni-conf</code> value</td><td>N/A</td><td>Override default flannel cni config file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags">Customized Flags<a href="#customized-flags" class="hash-link" aria-label="Direct link to Customized Flags" title="Direct link to Customized Flags">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental">Experimental<a href="#experimental" class="hash-link" aria-label="Direct link to Experimental" title="Direct link to Experimental">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated">Deprecated<a href="#deprecated" class="hash-link" aria-label="Direct link to Deprecated" title="Direct link to Deprecated">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node-labels-and-taints-for-agents">Node Labels and Taints for Agents<a href="#node-labels-and-taints-for-agents" class="hash-link" aria-label="Direct link to Node Labels and Taints for Agents" title="Direct link to Node Labels and Taints for Agents">​</a></h3><p>K3s agents can be configured with the options <code>--node-label</code> and <code>--node-taint</code> which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands.</p><p>Below is an example showing how to add labels and a taint:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">foo</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">bar </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">hello</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">world </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-taint </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">key1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">value1:NoExecute</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to change node labels and taints after node registration you should use <code>kubectl</code>. Refer to the official Kubernetes documentation for details on how to add <a href="https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/" target="_blank" rel="noopener noreferrer">taints</a> and <a href="https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node" target="_blank" rel="noopener noreferrer">node labels.</a></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent-cli-help">K3s Agent CLI Help<a href="#k3s-agent-cli-help" class="hash-link" aria-label="Direct link to K3s Agent CLI Help" title="Direct link to K3s Agent CLI Help">​</a></h3><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_URL]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent - Run </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> agent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/k3s&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/server"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">server</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/certificate"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">certificate</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#node" class="table-of-contents__link toc-highlight">Node</a></li><li><a href="#runtime" class="table-of-contents__link toc-highlight">Runtime</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#customized-flags" class="table-of-contents__link toc-highlight">Customized Flags</a></li><li><a href="#experimental" class="table-of-contents__link toc-highlight">Experimental</a></li><li><a href="#deprecated" class="table-of-contents__link toc-highlight">Deprecated</a></li><li><a href="#node-labels-and-taints-for-agents" class="table-of-contents__link toc-highlight">Node Labels and Taints for Agents</a></li><li><a href="#k3s-agent-cli-help" class="table-of-contents__link toc-highlight">K3s Agent CLI Help</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">agent</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s agent</h1><p>In this section, you&#x27;ll learn how to configure the K3s agent.</p><p>Note that servers also run an agent, so all flags listed on this page are also valid for use on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="Direct link to Logging" title="Direct link to Logging">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="Direct link to Cluster Options" title="Direct link to Cluster Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token value, -t</code> value</td><td><code>K3S_TOKEN</code></td><td>Token to use for authentication</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>Token file to use for authentication</td></tr><tr><td><code>--server value, -s</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="Direct link to Data" title="Direct link to Data">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td>&quot;/var/lib/rancher/k3s&quot;</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node">Node<a href="#node" class="hash-link" aria-label="Direct link to Node" title="Direct link to Node">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-name</code> value</td><td><code>K3S_NODE_NAME</code></td><td>Node name</td></tr><tr><td><code>--with-node-id</code></td><td>N/A</td><td>Append id to node name</td></tr><tr><td><code>--node-label</code> value</td><td>N/A</td><td>Registering and starting kubelet with set of labels</td></tr><tr><td><code>--node-taint</code> value</td><td>N/A</td><td>Registering kubelet with set of taints</td></tr><tr><td><code>--protect-kernel-defaults</code></td><td>N/A</td><td>Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.</td></tr><tr><td><code>--selinux</code></td><td><code>K3S_SELINUX</code></td><td>Enable SELinux in containerd</td></tr><tr><td><code>--lb-server-port</code> value</td><td><code>K3S_LB_SERVER_PORT</code></td><td>Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="runtime">Runtime<a href="#runtime" class="hash-link" aria-label="Direct link to Runtime" title="Direct link to Runtime">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--container-runtime-endpoint</code> value</td><td>N/A</td><td>Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path</td></tr><tr><td><code>--pause-image</code> value</td><td>&quot;docker.io/rancher/pause:3.1&quot;</td><td>Customized pause image for containerd or docker sandbox</td></tr><tr><td><code>--private-registry</code> value</td><td>&quot;/etc/rancher/k3s/registries.yaml&quot;</td><td>Private registry configuration file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="Direct link to Networking" title="Direct link to Networking">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-ip value, -i</code> value</td><td>N/A</td><td>IP address to advertise for node</td></tr><tr><td><code>--node-external-ip</code> value</td><td>N/A</td><td>External IP address to advertise for node</td></tr><tr><td><code>--resolv-conf</code> value</td><td><code>K3S_RESOLV_CONF</code></td><td>Kubelet resolv.conf file</td></tr><tr><td><code>--flannel-iface</code> value</td><td>N/A</td><td>Override default flannel interface</td></tr><tr><td><code>--flannel-conf</code> value</td><td>N/A</td><td>Override default flannel config file</td></tr><tr><td><code>--flannel-cni-conf</code> value</td><td>N/A</td><td>Override default flannel cni config file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags">Customized Flags<a href="#customized-flags" class="hash-link" aria-label="Direct link to Customized Flags" title="Direct link to Customized Flags">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental">Experimental<a href="#experimental" class="hash-link" aria-label="Direct link to Experimental" title="Direct link to Experimental">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated">Deprecated<a href="#deprecated" class="hash-link" aria-label="Direct link to Deprecated" title="Direct link to Deprecated">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node-labels-and-taints-for-agents">Node Labels and Taints for Agents<a href="#node-labels-and-taints-for-agents" class="hash-link" aria-label="Direct link to Node Labels and Taints for Agents" title="Direct link to Node Labels and Taints for Agents">​</a></h3><p>K3s agents can be configured with the options <code>--node-label</code> and <code>--node-taint</code> which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands.</p><p>Below is an example showing how to add labels and a taint:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">foo</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">bar </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">hello</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">world </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-taint </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">key1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">value1:NoExecute</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to change node labels and taints after node registration you should use <code>kubectl</code>. Refer to the official Kubernetes documentation for details on how to add <a href="https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/" target="_blank" rel="noopener noreferrer">taints</a> and <a href="https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node" target="_blank" rel="noopener noreferrer">node labels.</a></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent-cli-help">K3s Agent CLI Help<a href="#k3s-agent-cli-help" class="hash-link" aria-label="Direct link to K3s Agent CLI Help" title="Direct link to K3s Agent CLI Help">​</a></h3><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_URL]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent - Run </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> agent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/k3s&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/server"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">server</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/certificate"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">certificate</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#node" class="table-of-contents__link toc-highlight">Node</a></li><li><a href="#runtime" class="table-of-contents__link toc-highlight">Runtime</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#customized-flags" class="table-of-contents__link toc-highlight">Customized Flags</a></li><li><a href="#experimental" class="table-of-contents__link toc-highlight">Experimental</a></li><li><a href="#deprecated" class="table-of-contents__link toc-highlight">Deprecated</a></li><li><a href="#node-labels-and-taints-for-agents" class="table-of-contents__link toc-highlight">Node Labels and Taints for Agents</a></li><li><a href="#k3s-agent-cli-help" class="table-of-contents__link toc-highlight">K3s Agent CLI Help</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/cli/certificate.html b/cli/certificate.html
index 2fee74d64..078cad129 100644
--- a/cli/certificate.html
+++ b/cli/certificate.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">certificate | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/certificate"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="certificate | K3s"><meta data-rh="true" name="description" content="Client and Server Certificates"><meta data-rh="true" property="og:description" content="Client and Server Certificates"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/certificate"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/certificate" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/certificate" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">certificate | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/certificate"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="certificate | K3s"><meta data-rh="true" name="description" content="Client and Server Certificates"><meta data-rh="true" property="og:description" content="Client and Server Certificates"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/certificate"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/certificate" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/certificate" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">certificate</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s certificate</h1><h2 class="anchor anchorWithStickyNavbar_LWe7" id="client-and-server-certificates">Client and Server Certificates<a href="#client-and-server-certificates" class="hash-link" aria-label="Direct link to Client and Server Certificates" title="Direct link to Client and Server Certificates">​</a></h2><p>K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rotating-client-and-server-certificates">Rotating Client and Server Certificates<a href="#rotating-client-and-server-certificates" class="hash-link" aria-label="Direct link to Rotating Client and Server Certificates" title="Direct link to Rotating Client and Server Certificates">​</a></h3><p>To rotate client and server certificates manually, use the <code>k3s certificate rotate</code> subcommand:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Stop K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Rotate certificates</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Start K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Individual or lists of certificates can be rotated by specifying the certificate name:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate --service </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">,</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The following certificates can be rotated: <code>admin</code>, <code>api-server</code>, <code>controller-manager</code>, <code>scheduler</code>, <code>k3s-controller</code>, <code>k3s-server</code>, <code>cloud-controller</code>, <code>etcd</code>, <code>auth-proxy</code>, <code>kubelet</code>, <code>kube-proxy</code>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-authority-ca-certificates">Certificate Authority (CA) Certificates<a href="#certificate-authority-ca-certificates" class="hash-link" aria-label="Direct link to Certificate Authority (CA) Certificates" title="Direct link to Certificate Authority (CA) Certificates">​</a></h2><p>Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes <a href="https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates" target="_blank" rel="noopener noreferrer">PKI Certificates and Requirements</a> documentation.</p><p>By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed.</p><p>The authoritative CA certificates and keys are stored within the datastore&#x27;s bootstrap key, encrypted using the <a href="/cli/token#server">server token</a> as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">certificate</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s certificate</h1><h2 class="anchor anchorWithStickyNavbar_LWe7" id="client-and-server-certificates">Client and Server Certificates<a href="#client-and-server-certificates" class="hash-link" aria-label="Direct link to Client and Server Certificates" title="Direct link to Client and Server Certificates">​</a></h2><p>K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rotating-client-and-server-certificates">Rotating Client and Server Certificates<a href="#rotating-client-and-server-certificates" class="hash-link" aria-label="Direct link to Rotating Client and Server Certificates" title="Direct link to Rotating Client and Server Certificates">​</a></h3><p>To rotate client and server certificates manually, use the <code>k3s certificate rotate</code> subcommand:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Stop K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Rotate certificates</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Start K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Individual or lists of certificates can be rotated by specifying the certificate name:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate --service </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">,</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The following certificates can be rotated: <code>admin</code>, <code>api-server</code>, <code>controller-manager</code>, <code>scheduler</code>, <code>k3s-controller</code>, <code>k3s-server</code>, <code>cloud-controller</code>, <code>etcd</code>, <code>auth-proxy</code>, <code>kubelet</code>, <code>kube-proxy</code>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-authority-ca-certificates">Certificate Authority (CA) Certificates<a href="#certificate-authority-ca-certificates" class="hash-link" aria-label="Direct link to Certificate Authority (CA) Certificates" title="Direct link to Certificate Authority (CA) Certificates">​</a></h2><p>Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes <a href="https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates" target="_blank" rel="noopener noreferrer">PKI Certificates and Requirements</a> documentation.</p><p>By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed.</p><p>The authoritative CA certificates and keys are stored within the datastore&#x27;s bootstrap key, encrypted using the <a href="/cli/token#server">server token</a> as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.
 Copies of the CA certificates and keys are extracted to disk during K3s server startup.
 Any server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes <a href="https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/" target="_blank" rel="noopener noreferrer">Certificates API</a> controllers may issue additional certificates at runtime.</p><p>To rotate CA certificates and keys, use the <code>k3s certificate rotate-ca</code> command.
 The command performs integrity checks to confirm that the updated certificates and keys are usable.
@@ -32,10 +32,10 @@
 When rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated.
 It can be rotated independent of the cluster CAs by using the <code>k3s certificate rotate-ca</code> to install only an updated <code>service.key</code> file that includes both the new and old keys.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>You must not overwrite the currently in-use data in <code>/var/lib/rancher/k3s/server/tls</code>.<br>
 <!-- -->Stage the updated key into a separate directory.</p></div></div><p>For example, to rotate only the service-account issuer key, run the following commands:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Create a temporary directory for cert generation</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p /opt/k3s/server/tls</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Check OpenSSL version</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">openssl version </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> -qF </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;OpenSSL 3&#x27;</span><span class="token plain"> </span><span class="token operator" style="color:rgb(137, 221, 255)">&amp;&amp;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">OPENSSL_GENRSA_FLAGS</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">-traditional</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Generate a new key</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">openssl genrsa </span><span class="token variable" style="color:rgb(191, 199, 213)">${OPENSSL_GENRSA_FLAGS</span><span class="token variable operator" style="color:rgb(137, 221, 255)">:-</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain"> -out /opt/k3s/server/tls/service.key </span><span class="token number" style="color:rgb(247, 140, 108)">2048</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Append the existing key to avoid invalidating current tokens</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/tls/service.key </span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;&gt;</span><span class="token plain"> /opt/k3s/server/tls/service.key</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Load the updated key into the datastore</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate-ca --path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/opt/k3s/server</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>It is normal to see warnings for files that are not being updated. If the <code>rotate-ca</code> command returns an error, check the service log for errors.
-If the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/agent"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">agent</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/etcd-snapshot"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">etcd-snapshot</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#client-and-server-certificates" class="table-of-contents__link toc-highlight">Client and Server Certificates</a><ul><li><a href="#rotating-client-and-server-certificates" class="table-of-contents__link toc-highlight">Rotating Client and Server Certificates</a></li></ul></li><li><a href="#certificate-authority-ca-certificates" class="table-of-contents__link toc-highlight">Certificate Authority (CA) Certificates</a><ul><li><a href="#using-custom-ca-certificates" class="table-of-contents__link toc-highlight">Using Custom CA Certificates</a></li><li><a href="#rotating-custom-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Custom CA Certificates</a></li><li><a href="#rotating-self-signed-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Self-Signed CA Certificates</a></li></ul></li><li><a href="#service-account-issuer-key-rotation" class="table-of-contents__link toc-highlight">Service-Account Issuer Key Rotation</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+If the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/agent"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">agent</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/etcd-snapshot"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">etcd-snapshot</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#client-and-server-certificates" class="table-of-contents__link toc-highlight">Client and Server Certificates</a><ul><li><a href="#rotating-client-and-server-certificates" class="table-of-contents__link toc-highlight">Rotating Client and Server Certificates</a></li></ul></li><li><a href="#certificate-authority-ca-certificates" class="table-of-contents__link toc-highlight">Certificate Authority (CA) Certificates</a><ul><li><a href="#using-custom-ca-certificates" class="table-of-contents__link toc-highlight">Using Custom CA Certificates</a></li><li><a href="#rotating-custom-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Custom CA Certificates</a></li><li><a href="#rotating-self-signed-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Self-Signed CA Certificates</a></li></ul></li><li><a href="#service-account-issuer-key-rotation" class="table-of-contents__link toc-highlight">Service-Account Issuer Key Rotation</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/cli/etcd-snapshot.html b/cli/etcd-snapshot.html
index b5d22654a..5d053b4b3 100644
--- a/cli/etcd-snapshot.html
+++ b/cli/etcd-snapshot.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">etcd-snapshot | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/etcd-snapshot"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="etcd-snapshot | K3s"><meta data-rh="true" name="description" content="Available as of v1.19.1+k3s1"><meta data-rh="true" property="og:description" content="Available as of v1.19.1+k3s1"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/etcd-snapshot"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/etcd-snapshot" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/etcd-snapshot" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">etcd-snapshot | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/etcd-snapshot"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="etcd-snapshot | K3s"><meta data-rh="true" name="description" content="Available as of v1.19.1+k3s1"><meta data-rh="true" property="og:description" content="Available as of v1.19.1+k3s1"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/etcd-snapshot"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/etcd-snapshot" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/etcd-snapshot" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">etcd-snapshot</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s etcd-snapshot</h1><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In this section, you&#x27;ll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="creating-snapshots">Creating Snapshots<a href="#creating-snapshots" class="hash-link" aria-label="Direct link to Creating Snapshots" title="Direct link to Creating Snapshots">​</a></h4><p>Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the <a href="#options">options</a>.</p><p>The snapshot directory defaults to <code>${data-dir}/server/db/snapshots</code>. The data-dir value defaults to <code>/var/lib/rancher/k3s</code> and can be changed by setting the <code>--data-dir</code> flag.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="restoring-a-cluster-from-a-snapshot">Restoring a Cluster from a Snapshot<a href="#restoring-a-cluster-from-a-snapshot" class="hash-link" aria-label="Direct link to Restoring a Cluster from a Snapshot" title="Direct link to Restoring a Cluster from a Snapshot">​</a></h4><p>When K3s is restored from backup, the old data directory will be moved to <code>${data-dir}/server/db/etcd-old/</code>. Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member.</p><p>To restore the cluster from backup:</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>Run K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>In this example there are 3 servers, <code>S1</code>, <code>S2</code>, and <code>S3</code>. The snapshot is located on <code>S1</code>.</p><ol><li><p>On S1, start K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags.</p></li><li><p>On S2 and S3, stop K3s. Then delete the data directory, <code>/var/lib/rancher/k3s/server/db/</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">rm</span><span class="token plain"> -rf /var/lib/rancher/k3s/server/db/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S1, start K3s again:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S2 and S3, start K3s again to join the restored cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="options">Options<a href="#options" class="hash-link" aria-label="Direct link to Options" title="Direct link to Options">​</a></h4><p>These options can be passed in with the command line, or in the <a href="/installation/configuration#configuration-file">configuration file,</a> which may be easier to use.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-disable-snapshots</code></td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>Snapshot interval time in cron spec. eg. every 5 hours <code>0 */5 * * *</code>(default: <code>0 */12 * * *</code>)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>Directory to save db snapshots. (Default location: <code>${data-dir}/db/snapshots</code>)</td></tr><tr><td><code>--cluster-reset</code></td><td>Forget all peers and become sole member of a new cluster. This can also be set with the environment variable <code>[$K3S_CLUSTER_RESET]</code>.</td></tr><tr><td><code>--cluster-reset-restore-path</code> value</td><td>Path to snapshot file to be restored</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="s3-compatible-api-support">S3 Compatible API Support<a href="#s3-compatible-api-support" class="hash-link" aria-label="Direct link to S3 Compatible API Support" title="Direct link to S3 Compatible API Support">​</a></h4><p>K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots.</p><p>The arguments below have been added to the <code>server</code> subcommand. These flags exist for the <code>etcd-snapshot</code> subcommand as well however the <code>--etcd-s3</code> portion is removed to avoid redundancy.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-s3</code></td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code></td><td>S3 endpoint url</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code></td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code></td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code></td><td>S3 region / bucket location (optional). defaults to us-east-1</td></tr><tr><td><code>--etcd-s3-folder</code></td><td>S3 folder</td></tr></tbody></table><p>To perform an on-demand etcd snapshot and save it to S3:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn&#x27;t running. Then run the following commands:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="etcd-snapshot-and-restore-subcommands">Etcd Snapshot and Restore Subcommands<a href="#etcd-snapshot-and-restore-subcommands" class="hash-link" aria-label="Direct link to Etcd Snapshot and Restore Subcommands" title="Direct link to Etcd Snapshot and Restore Subcommands">​</a></h4><p>k3s supports a set of subcommands for working with your etcd snapshots.</p><table><thead><tr><th>Subcommand</th><th>Description</th></tr></thead><tbody><tr><td>delete</td><td>Delete given snapshot(s)</td></tr><tr><td>ls, list, l</td><td>List snapshots</td></tr><tr><td>prune</td><td>Remove snapshots that exceed the configured retention count</td></tr><tr><td>save</td><td>Trigger an immediate etcd snapshot</td></tr></tbody></table><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The <code>save</code> subcommand is the same as <code>k3s etcd-snapshot</code>. The latter will eventually be deprecated in favor of the former.</p></div></div><p>These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store.</p><p>For additional information on the etcd snapshot subcommands, run <code>k3s etcd-snapshot</code>.</p><p>Delete a snapshot from S3.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot delete          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Prune local snapshots with the default retention policy (5). The <code>prune</code> subcommand takes an additional flag <code>--snapshot-retention</code> that allows for overriding the default retention policy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune --snapshot-retention </span><span class="token number" style="color:rgb(247, 140, 108)">10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/certificate"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">certificate</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/secrets-encrypt"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">secrets-encrypt</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">etcd-snapshot</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s etcd-snapshot</h1><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In this section, you&#x27;ll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="creating-snapshots">Creating Snapshots<a href="#creating-snapshots" class="hash-link" aria-label="Direct link to Creating Snapshots" title="Direct link to Creating Snapshots">​</a></h4><p>Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the <a href="#options">options</a>.</p><p>The snapshot directory defaults to <code>${data-dir}/server/db/snapshots</code>. The data-dir value defaults to <code>/var/lib/rancher/k3s</code> and can be changed by setting the <code>--data-dir</code> flag.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="restoring-a-cluster-from-a-snapshot">Restoring a Cluster from a Snapshot<a href="#restoring-a-cluster-from-a-snapshot" class="hash-link" aria-label="Direct link to Restoring a Cluster from a Snapshot" title="Direct link to Restoring a Cluster from a Snapshot">​</a></h4><p>When K3s is restored from backup, the old data directory will be moved to <code>${data-dir}/server/db/etcd-old/</code>. Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member.</p><p>To restore the cluster from backup:</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>Run K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>In this example there are 3 servers, <code>S1</code>, <code>S2</code>, and <code>S3</code>. The snapshot is located on <code>S1</code>.</p><ol><li><p>On S1, start K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags.</p></li><li><p>On S2 and S3, stop K3s. Then delete the data directory, <code>/var/lib/rancher/k3s/server/db/</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">rm</span><span class="token plain"> -rf /var/lib/rancher/k3s/server/db/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S1, start K3s again:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S2 and S3, start K3s again to join the restored cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="options">Options<a href="#options" class="hash-link" aria-label="Direct link to Options" title="Direct link to Options">​</a></h4><p>These options can be passed in with the command line, or in the <a href="/installation/configuration#configuration-file">configuration file,</a> which may be easier to use.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-disable-snapshots</code></td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>Snapshot interval time in cron spec. eg. every 5 hours <code>0 */5 * * *</code>(default: <code>0 */12 * * *</code>)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>Directory to save db snapshots. (Default location: <code>${data-dir}/db/snapshots</code>)</td></tr><tr><td><code>--cluster-reset</code></td><td>Forget all peers and become sole member of a new cluster. This can also be set with the environment variable <code>[$K3S_CLUSTER_RESET]</code>.</td></tr><tr><td><code>--cluster-reset-restore-path</code> value</td><td>Path to snapshot file to be restored</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="s3-compatible-api-support">S3 Compatible API Support<a href="#s3-compatible-api-support" class="hash-link" aria-label="Direct link to S3 Compatible API Support" title="Direct link to S3 Compatible API Support">​</a></h4><p>K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots.</p><p>The arguments below have been added to the <code>server</code> subcommand. These flags exist for the <code>etcd-snapshot</code> subcommand as well however the <code>--etcd-s3</code> portion is removed to avoid redundancy.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-s3</code></td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code></td><td>S3 endpoint url</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code></td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code></td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code></td><td>S3 region / bucket location (optional). defaults to us-east-1</td></tr><tr><td><code>--etcd-s3-folder</code></td><td>S3 folder</td></tr></tbody></table><p>To perform an on-demand etcd snapshot and save it to S3:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn&#x27;t running. Then run the following commands:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="etcd-snapshot-and-restore-subcommands">Etcd Snapshot and Restore Subcommands<a href="#etcd-snapshot-and-restore-subcommands" class="hash-link" aria-label="Direct link to Etcd Snapshot and Restore Subcommands" title="Direct link to Etcd Snapshot and Restore Subcommands">​</a></h4><p>k3s supports a set of subcommands for working with your etcd snapshots.</p><table><thead><tr><th>Subcommand</th><th>Description</th></tr></thead><tbody><tr><td>delete</td><td>Delete given snapshot(s)</td></tr><tr><td>ls, list, l</td><td>List snapshots</td></tr><tr><td>prune</td><td>Remove snapshots that exceed the configured retention count</td></tr><tr><td>save</td><td>Trigger an immediate etcd snapshot</td></tr></tbody></table><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The <code>save</code> subcommand is the same as <code>k3s etcd-snapshot</code>. The latter will eventually be deprecated in favor of the former.</p></div></div><p>These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store.</p><p>For additional information on the etcd snapshot subcommands, run <code>k3s etcd-snapshot</code>.</p><p>Delete a snapshot from S3.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot delete          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Prune local snapshots with the default retention policy (5). The <code>prune</code> subcommand takes an additional flag <code>--snapshot-retention</code> that allows for overriding the default retention policy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune --snapshot-retention </span><span class="token number" style="color:rgb(247, 140, 108)">10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/certificate"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">certificate</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/secrets-encrypt"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">secrets-encrypt</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/cli/secrets-encrypt.html b/cli/secrets-encrypt.html
index 2b494256d..17b4d4d1d 100644
--- a/cli/secrets-encrypt.html
+++ b/cli/secrets-encrypt.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">secrets-encrypt | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/secrets-encrypt"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="secrets-encrypt | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/secrets-encrypt"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/secrets-encrypt" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/secrets-encrypt" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">secrets-encrypt | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/secrets-encrypt"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="secrets-encrypt | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/secrets-encrypt"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/secrets-encrypt" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/secrets-encrypt" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">secrets-encrypt</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s secrets-encrypt</h1><p>K3s supports enabling secrets encryption at rest. For more information, see <a href="/security/secrets-encryption">Secrets Encryption</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="Direct link to Secrets Encryption Tool" title="Direct link to Secrets Encryption Tool">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.8+k3s1</a></p></div></div><p>K3s contains a CLI tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="encryption-key-rotation">Encryption Key Rotation<a href="#encryption-key-rotation" class="hash-link" aria-label="Direct link to Encryption Key Rotation" title="Direct link to Encryption Key Rotation">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>To rotate secrets encryption keys on a single-server cluster:</p><ul><li>Start the K3s server with the flag <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Starting K3s without encryption and enabling it at a later time is currently <em>not</em> supported.</p></div></div><ol><li><p>Prepare</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Rotate</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>K3s will reencrypt ~5 secrets per second.<br>
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">secrets-encrypt</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s secrets-encrypt</h1><p>K3s supports enabling secrets encryption at rest. For more information, see <a href="/security/secrets-encryption">Secrets Encryption</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="Direct link to Secrets Encryption Tool" title="Direct link to Secrets Encryption Tool">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.8+k3s1</a></p></div></div><p>K3s contains a CLI tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="encryption-key-rotation">Encryption Key Rotation<a href="#encryption-key-rotation" class="hash-link" aria-label="Direct link to Encryption Key Rotation" title="Direct link to Encryption Key Rotation">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>To rotate secrets encryption keys on a single-server cluster:</p><ul><li>Start the K3s server with the flag <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Starting K3s without encryption and enabling it at a later time is currently <em>not</em> supported.</p></div></div><ol><li><p>Prepare</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Rotate</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>K3s will reencrypt ~5 secrets per second.<br>
 <!-- -->Clusters with large # of secrets can take several minutes to reencrypt.</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>The steps are the same for both embedded DB and external DB clusters.</p><p>To rotate secrets encryption keys on HA setups:</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>Notes</div><div class="admonitionContent_S0QG"><ul><li>Starting K3s without encryption and enabling it at a later time is currently <em>not</em> supported.</li><li>While not required, it is recommended that you pick one server node from which to run the <code>secrets-encrypt</code> commands.</li></ul></div></div><ol><li><p>Start up all three K3s servers with the <code>--secrets-encryption</code> flag. For brevity, the servers will be referred to as S1, S2, S3.</p></li><li><p>Prepare on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Rotate on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Reencrypt on S1</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>K3s will reencrypt ~5 secrets per second.<br>
-<!-- -->Clusters with large # of secrets can take several minutes to reencrypt.</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-disableenable">Secrets Encryption Disable/Enable<a href="#secrets-encryption-disableenable" class="hash-link" aria-label="Direct link to Secrets Encryption Disable/Enable" title="Direct link to Secrets Encryption Disable/Enable">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>After launching a server with <code>--secrets-encryption</code> flag, secrets encryption can be disabled.</p><p>To disable secrets encryption on a single-node cluster:</p><ol><li><p>Disable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a single node cluster:</p><ol><li><p>Enable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>After launching a HA cluster with <code>--secrets-encryption</code> flags, secrets encryption can be disabled.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>While not required, it is recommended that you pick one server node from which to run the <code>secrets-encrypt</code> commands.</p></div></div><p>For brevity, the three servers used in this guide will be referred to as S1, S2, S3.</p><p>To disable secrets encryption on a HA cluster:</p><ol><li><p>Disable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol><ol start="4"><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a HA cluster:</p><ol><li><p>Enable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-status">Secrets Encryption Status<a href="#secrets-encryption-status" class="hash-link" aria-label="Direct link to Secrets Encryption Status" title="Direct link to Secrets Encryption Status">​</a></h3><p>The secrets-encrypt tool includes a <code>status</code> command that displays information about the current status of secrets encryption on the node.</p><p>An example of the command on a single-server node:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: start</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: All hashes match</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Another example on HA cluster, after rotating the keys, but before restarting the servers:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">hash</span><span class="token plain"> does not match between node-1 and node-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey-2021-12-10T22:54:38Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Details on each section are as follows:  </p><ul><li><strong>Encryption Status</strong>: Displayed whether secrets encryption is disabled or enabled on the node  </li><li><strong>Current Rotation Stage</strong>: Indicates the current rotation stage on the node.<br>Stages are: <code>start</code>, <code>prepare</code>, <code>rotate</code>, <code>reencrypt_request</code>, <code>reencrypt_active</code>, <code>reencrypt_finished</code>  </li><li><strong>Server Encryption Hashes</strong>: Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration.</li><li><strong>Key Table</strong>: Summarizes information about the secrets encryption keys found on the node.  <ul><li><strong>Active</strong>: The &quot;*&quot; indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.</li><li><strong>Key Type</strong>: All keys using this tool are <code>AES-CBC</code> type. See more info <a href="https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers" target="_blank" rel="noopener noreferrer">here.</a></li><li><strong>Name</strong>: Name of the encryption key.</li></ul></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/etcd-snapshot"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">etcd-snapshot</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/token"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">token</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a><ul><li><a href="#encryption-key-rotation" class="table-of-contents__link toc-highlight">Encryption Key Rotation</a></li><li><a href="#secrets-encryption-disableenable" class="table-of-contents__link toc-highlight">Secrets Encryption Disable/Enable</a></li><li><a href="#secrets-encryption-status" class="table-of-contents__link toc-highlight">Secrets Encryption Status</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<!-- -->Clusters with large # of secrets can take several minutes to reencrypt.</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-disableenable">Secrets Encryption Disable/Enable<a href="#secrets-encryption-disableenable" class="hash-link" aria-label="Direct link to Secrets Encryption Disable/Enable" title="Direct link to Secrets Encryption Disable/Enable">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>After launching a server with <code>--secrets-encryption</code> flag, secrets encryption can be disabled.</p><p>To disable secrets encryption on a single-node cluster:</p><ol><li><p>Disable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a single node cluster:</p><ol><li><p>Enable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>After launching a HA cluster with <code>--secrets-encryption</code> flags, secrets encryption can be disabled.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>While not required, it is recommended that you pick one server node from which to run the <code>secrets-encrypt</code> commands.</p></div></div><p>For brevity, the three servers used in this guide will be referred to as S1, S2, S3.</p><p>To disable secrets encryption on a HA cluster:</p><ol><li><p>Disable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol><ol start="4"><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a HA cluster:</p><ol><li><p>Enable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-status">Secrets Encryption Status<a href="#secrets-encryption-status" class="hash-link" aria-label="Direct link to Secrets Encryption Status" title="Direct link to Secrets Encryption Status">​</a></h3><p>The secrets-encrypt tool includes a <code>status</code> command that displays information about the current status of secrets encryption on the node.</p><p>An example of the command on a single-server node:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: start</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: All hashes match</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Another example on HA cluster, after rotating the keys, but before restarting the servers:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">hash</span><span class="token plain"> does not match between node-1 and node-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey-2021-12-10T22:54:38Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Details on each section are as follows:  </p><ul><li><strong>Encryption Status</strong>: Displayed whether secrets encryption is disabled or enabled on the node  </li><li><strong>Current Rotation Stage</strong>: Indicates the current rotation stage on the node.<br>Stages are: <code>start</code>, <code>prepare</code>, <code>rotate</code>, <code>reencrypt_request</code>, <code>reencrypt_active</code>, <code>reencrypt_finished</code>  </li><li><strong>Server Encryption Hashes</strong>: Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration.</li><li><strong>Key Table</strong>: Summarizes information about the secrets encryption keys found on the node.  <ul><li><strong>Active</strong>: The &quot;*&quot; indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.</li><li><strong>Key Type</strong>: All keys using this tool are <code>AES-CBC</code> type. See more info <a href="https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers" target="_blank" rel="noopener noreferrer">here.</a></li><li><strong>Name</strong>: Name of the encryption key.</li></ul></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/etcd-snapshot"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">etcd-snapshot</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/token"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">token</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a><ul><li><a href="#encryption-key-rotation" class="table-of-contents__link toc-highlight">Encryption Key Rotation</a></li><li><a href="#secrets-encryption-disableenable" class="table-of-contents__link toc-highlight">Secrets Encryption Disable/Enable</a></li><li><a href="#secrets-encryption-status" class="table-of-contents__link toc-highlight">Secrets Encryption Status</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/cli/server.html b/cli/server.html
index 46b721a1c..e0451d08d 100644
--- a/cli/server.html
+++ b/cli/server.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">server | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/server"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="server | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s server."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s server."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/server"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/server" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/server" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">server | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/server"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="server | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s server."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s server."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/server"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/server" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/server" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">server</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s server</h1><p>In this section, you&#x27;ll learn how to configure the K3s server.</p><p>Note that servers also run an agent, so all of the configuration options listed in the <a href="/cli/agent"><code>k3s agent</code> documentation</a> are also supported on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="critical-configuration-values">Critical Configuration Values<a href="#critical-configuration-values" class="hash-link" aria-label="Direct link to Critical Configuration Values" title="Direct link to Critical Configuration Values">​</a></h2><p>The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore.</p><ul><li><code>--agent-token</code></li><li><code>--cluster-cidr</code></li><li><code>--cluster-dns</code></li><li><code>--cluster-domain</code></li><li><code>--disable-cloud-controller</code></li><li><code>--disable-helm-controller</code></li><li><code>--disable-network-policy</code></li><li><code>--disable-servicelb</code></li><li><code>--egress-selector-mode</code></li><li><code>--flannel-backend</code></li><li><code>--flannel-external-ip</code></li><li><code>--flannel-ipv6-masq</code></li><li><code>--secrets-encryption</code></li><li><code>--service-cidr</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="commonly-used-options">Commonly Used Options<a href="#commonly-used-options" class="hash-link" aria-label="Direct link to Commonly Used Options" title="Direct link to Commonly Used Options">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="Direct link to Database" title="Direct link to Database">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code> value</td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>Specify etcd, Mysql, Postgres, or Sqlite (default) data source name</td></tr><tr><td><code>--datastore-cafile</code> value</td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS Certificate Authority file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-certfile</code> value</td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS certification file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-keyfile</code> value</td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS key file used to secure datastore backend communication</td></tr><tr><td><code>--etcd-expose-metrics</code></td><td>N/A</td><td>Expose etcd metrics to client interface (default: false)</td></tr><tr><td><code>--etcd-disable-snapshots</code></td><td>N/A</td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-name</code> value</td><td>N/A</td><td>Set the base name of etcd snapshots. Default: etcd-snapshot-<code>&lt;unix-timestamp&gt;</code> (default:&quot;etcd-snapshot&quot;)</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>N/A</td><td>Snapshot interval time in cron spec. eg. every 5 hours &#x27;0 <em>/5 <em> <!-- -->*<!-- --> </em>&#x27; (default: &quot;0 </em>/12 <!-- -->*<!-- --> <!-- -->*<!-- --> <!-- -->*<!-- -->&quot;)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>N/A</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>N/A</td><td>Directory to save db snapshots (default: ${data-dir}/db/snapshots)</td></tr><tr><td><code>--etcd-s3</code></td><td>N/A</td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code> value</td><td>N/A</td><td>S3 endpoint url (default: &quot;s3.amazonaws.com&quot;)</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code> value</td><td>N/A</td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>N/A</td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code> value</td><td><code>AWS_ACCESS_KEY_ID</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code> value</td><td><code>AWS_SECRET_ACCESS_KEY</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code> value</td><td>N/A</td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code> value</td><td>N/A</td><td>S3 region / bucket location (optional) (default: &quot;us-east-1&quot;)</td></tr><tr><td><code>--etcd-s3-folder</code> value</td><td>N/A</td><td>S3 folder</td></tr><tr><td><code>--etcd-s3-insecure</code></td><td>Disables S3 over HTTPS</td><td></td></tr><tr><td><code>--etcd-s3-timeout</code> value</td><td>S3 timeout (default: 5m0s)</td><td></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="Direct link to Cluster Options" title="Direct link to Cluster Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token</code> value, <code>-t</code> value</td><td><code>K3S_TOKEN</code></td><td>Shared secret used to join a server or agent to a cluster</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>File containing the cluster-secret/token</td></tr><tr><td><code>--agent-token</code> value</td><td><code>K3S_AGENT_TOKEN</code></td><td>Shared secret used to join agents to the cluster, but not servers</td></tr><tr><td><code>--agent-token-file</code> value</td><td><code>K3S_AGENT_TOKEN_FILE</code></td><td>File containing the agent secret</td></tr><tr><td><code>--server</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to, used to join a cluster</td></tr><tr><td><code>--cluster-init</code></td><td><code>K3S_CLUSTER_INIT</code></td><td>Initialize a new cluster using embedded Etcd</td></tr><tr><td><code>--cluster-reset</code></td><td><code>K3S_CLUSTER_RESET</code></td><td>Forget all peers and become sole member of a new cluster</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="admin-kubeconfig-options">Admin Kubeconfig Options<a href="#admin-kubeconfig-options" class="hash-link" aria-label="Direct link to Admin Kubeconfig Options" title="Direct link to Admin Kubeconfig Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--write-kubeconfig value, -o</code> value</td><td><code>K3S_KUBECONFIG_OUTPUT</code></td><td>Write kubeconfig for admin client to this file</td></tr><tr><td><code>--write-kubeconfig-mode</code> value</td><td><code>K3S_KUBECONFIG_MODE</code></td><td>Write kubeconfig with this <a href="https://en.wikipedia.org/wiki/Chmod" target="_blank" rel="noopener noreferrer">mode.</a> The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-options">Advanced Options<a href="#advanced-options" class="hash-link" aria-label="Direct link to Advanced Options" title="Direct link to Advanced Options">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="Direct link to Logging" title="Direct link to Logging">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--debug</code></td><td>N/A</td><td>Turn on debug logs</td></tr><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="listeners">Listeners<a href="#listeners" class="hash-link" aria-label="Direct link to Listeners" title="Direct link to Listeners">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--bind-address</code> value</td><td>0.0.0.0</td><td>k3s bind address</td></tr><tr><td><code>--https-listen-port</code> value</td><td>6443</td><td>HTTPS listen port</td></tr><tr><td><code>--advertise-address</code> value</td><td>node-external-ip/node-ip</td><td>IPv4 address that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--advertise-port</code> value</td><td>listen-port/0</td><td>Port that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--tls-san</code> value</td><td>N/A</td><td>Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="Direct link to Data" title="Direct link to Data">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td><code>/var/lib/rancher/k3s</code> or <code>${HOME}/.rancher/k3s</code> if not root</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption">Secrets Encryption<a href="#secrets-encryption" class="hash-link" aria-label="Direct link to Secrets Encryption" title="Direct link to Secrets Encryption">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--secrets-encryption</code></td><td>false</td><td>Enable Secret encryption at rest</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="Direct link to Networking" title="Direct link to Networking">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--cluster-cidr</code> value</td><td>&quot;10.42.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for pod IPs</td></tr><tr><td><code>--service-cidr</code> value</td><td>&quot;10.43.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for service IPs</td></tr><tr><td><code>--service-node-port-range</code> value</td><td>&quot;30000-32767&quot;</td><td>Port range to reserve for services with NodePort visibility</td></tr><tr><td><code>--cluster-dns</code> value</td><td>&quot;10.43.0.10&quot;</td><td>IPv4 Cluster IP for coredns service. Should be in your service-cidr range</td></tr><tr><td><code>--cluster-domain</code> value</td><td>&quot;cluster.local&quot;</td><td>Cluster Domain</td></tr><tr><td><code>--flannel-backend</code> value</td><td>&quot;vxlan&quot;</td><td>One of &#x27;none&#x27;, &#x27;vxlan&#x27;, &#x27;ipsec&#x27;(deprecated), &#x27;host-gw&#x27;, &#x27;wireguard-native&#x27;, or &#x27;wireguard&#x27;(deprecated)</td></tr><tr><td><code>--flannel-ipv6-masq</code></td><td>&quot;N/A&quot;</td><td>Enable IPv6 masquerading for pod</td></tr><tr><td><code>--flannel-external-ip</code></td><td>&quot;N/A&quot;</td><td>Use node external IP addresses for Flannel traffic</td></tr><tr><td><code>--servicelb-namespace</code> value</td><td>&quot;kube-system&quot;</td><td>Namespace of the pods for the servicelb component</td></tr><tr><td><code>--egress-selector-mode</code> value</td><td>&quot;agent&quot;</td><td>Must be one of the following: <ul><li>disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs.</li><li>agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s.</li><li> pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node.</li><li>  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.</li></ul></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="storage-class">Storage Class<a href="#storage-class" class="hash-link" aria-label="Direct link to Storage Class" title="Direct link to Storage Class">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--default-local-storage-path</code> value</td><td>Default local storage path for local provisioner storage class</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-components">Kubernetes Components<a href="#kubernetes-components" class="hash-link" aria-label="Direct link to Kubernetes Components" title="Direct link to Kubernetes Components">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--disable</code> value</td><td>See &quot;<a href="/installation/packaged-components#using-the---disable-flag">Using the <code>--disable</code> flag</a>&quot;</td></tr><tr><td><code>--disable-scheduler</code></td><td>Disable Kubernetes default scheduler</td></tr><tr><td><code>--disable-cloud-controller</code></td><td>Disable k3s default cloud controller manager</td></tr><tr><td><code>--disable-kube-proxy</code></td><td>Disable running kube-proxy</td></tr><tr><td><code>--disable-network-policy</code></td><td>Disable k3s default network policy controller</td></tr><tr><td><code>--disable-helm-controller</code></td><td>Disable Helm controller</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags-for-kubernetes-processes">Customized Flags for Kubernetes Processes<a href="#customized-flags-for-kubernetes-processes" class="hash-link" aria-label="Direct link to Customized Flags for Kubernetes Processes" title="Direct link to Customized Flags for Kubernetes Processes">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-arg</code> value</td><td>Customized flag for etcd process</td></tr><tr><td><code>--kube-apiserver-arg</code> value</td><td>Customized flag for kube-apiserver process</td></tr><tr><td><code>--kube-scheduler-arg</code> value</td><td>Customized flag for kube-scheduler process</td></tr><tr><td><code>--kube-controller-manager-arg</code> value</td><td>Customized flag for kube-controller-manager process</td></tr><tr><td><code>--kube-cloud-controller-manager-arg</code> value</td><td>Customized flag for kube-cloud-controller-manager process</td></tr><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental-options">Experimental Options<a href="#experimental-options" class="hash-link" aria-label="Direct link to Experimental Options" title="Direct link to Experimental Options">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--enable-pprof</code></td><td>Enable pprof endpoint on supervisor port</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr><tr><td><code>--disable-agent</code></td><td>See &quot;<a href="/advanced#running-agentless-servers-experimental">Running Agentless Servers (Experimental)</a>&quot;</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated-options">Deprecated Options<a href="#deprecated-options" class="hash-link" aria-label="Direct link to Deprecated Options" title="Direct link to Deprecated Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--no-deploy</code> value</td><td>N/A</td><td>Use <code>--disable</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr><tr><td><code>--flannel-backend</code> wireguard</td><td>N/A</td><td>Use <code>--flannel-backend=wireguard-native</code></td></tr><tr><td><code>--flannel-backend</code> value=option1=value</td><td>N/A</td><td>Use <code>--flannel-conf</code> to specify the flannel config file with the backend config</td></tr></tbody></table><h1>K3s Server CLI Help</h1><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_TOKEN]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server - Run management server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --bind-address value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> k3s </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">bind</span><span class="token plain"> address </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --https-listen-port value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> HTTPS listen port </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-address value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 address that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: node-external-ip/node-ip</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: listen-port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --tls-san value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: /var/lib/rancher/k3s or </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">HOME</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/.rancher/k3s </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> not root</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">service</span><span class="token plain"> IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-node-port-range value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port range to reserve </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> services with NodePort visibility </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;30000-32767&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-dns value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 Cluster IP </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> coredns service. Should be </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> your service-cidr range </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-domain value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Cluster Domain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;cluster.local&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-backend value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> backend</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;=</span><span class="token plain">option1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val1,option2</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">2</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> where backend is one of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;none&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;vxlan&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ipsec&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;host-gw&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard-native&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;vxlan&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-ipv6-masq                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable IPv6 masquerading </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-external-ip                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> external IP addresses </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> Flannel traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --egress-selector-mode value               </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> One of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;agent&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;cluster&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;pod&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;disabled&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --servicelb-namespace value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Namespace of the pods </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the servicelb component </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;kube-system&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig value, -o value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> admin client to this </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_OUTPUT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig-mode value              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig with this mode </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_MODE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a server or agent to a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the token </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> agents to the cluster, but not servers </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token-file value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the agent secret </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to, used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-init                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Initialize a new cluster using embedded Etcd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_INIT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Forget all peers and become sole member of a new cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_RESET</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset-restore-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Path to snapshot </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to be restored</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-apiserver-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-apiserver process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-arg value                           </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> etcd process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-controller-manager-arg value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-scheduler-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-scheduler process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-cloud-controller-manager-arg value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-cloud-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-endpoint value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Specify etcd, Mysql, Postgres, or Sqlite </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> data </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">source</span><span class="token plain"> name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_ENDPOINT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-cafile value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS Certificate Authority </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CAFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-certfile value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS certification </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CERTFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-keyfile value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS key </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_KEYFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-expose-metrics                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Expose etcd metrics to client interface. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token boolean" style="color:rgb(255, 88, 116)">false</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-disable-snapshots                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable automatic etcd snapshots</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-name value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Set the base name of etcd snapshots </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: etcd-snapshot-</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">unix-timestamp</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;etcd-snapshot&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-schedule-cron value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Snapshot interval </span><span class="token function" style="color:rgb(130, 170, 255)">time</span><span class="token plain"> </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cron</span><span class="token plain"> spec. eg. every </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain"> hours </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;* */5 * * *&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0 */12 * * *&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-retention value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number of snapshots to retain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-dir value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Directory to save db snapshots. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token variable" style="color:rgb(191, 199, 213)">${data-dir}</span><span class="token plain">/db/snapshots</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-compress                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Compress etcd snapshot</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable backup to S3</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 endpoint url </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;s3.amazonaws.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint-ca value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 custom CA cert to connect to S3 endpoint</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-skip-ssl-verify                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 SSL certificate validation</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-access-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 access key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_ACCESS_KEY_ID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-secret-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 secret key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_SECRET_ACCESS_KEY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-bucket value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 bucket name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-region value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 region / bucket location </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">optional</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;us-east-1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-folder value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 folder</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-insecure                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 over HTTPS</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-timeout value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 </span><span class="token function" style="color:rgb(130, 170, 255)">timeout</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: 5m0s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --default-local-storage-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Default </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> storage path </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> provisioner storage class</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Do not deploy packaged components and delete any deployed components </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">valid items: coredns, servicelb, traefik, local-storage, metrics-server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-scheduler                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Kubernetes default scheduler</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-cloud-controller                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default cloud controller manager</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-kube-proxy                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable running kube-proxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-network-policy                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default network policy controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-helm-controller                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Helm controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --system-default-registry value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry to be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> all system images </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SYSTEM_DEFAULT_REGISTRY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --secrets-encryption                       Enable secret encryption at rest</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --enable-pprof                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable pprof endpoint on supervisor port</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/server.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">CLI Tools</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/agent"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">agent</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#critical-configuration-values" class="table-of-contents__link toc-highlight">Critical Configuration Values</a></li><li><a href="#commonly-used-options" class="table-of-contents__link toc-highlight">Commonly Used Options</a><ul><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#admin-kubeconfig-options" class="table-of-contents__link toc-highlight">Admin Kubeconfig Options</a></li></ul></li><li><a href="#advanced-options" class="table-of-contents__link toc-highlight">Advanced Options</a><ul><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#listeners" class="table-of-contents__link toc-highlight">Listeners</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#secrets-encryption" class="table-of-contents__link toc-highlight">Secrets Encryption</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#storage-class" class="table-of-contents__link toc-highlight">Storage Class</a></li><li><a href="#kubernetes-components" class="table-of-contents__link toc-highlight">Kubernetes Components</a></li><li><a href="#customized-flags-for-kubernetes-processes" class="table-of-contents__link toc-highlight">Customized Flags for Kubernetes Processes</a></li><li><a href="#experimental-options" class="table-of-contents__link toc-highlight">Experimental Options</a></li><li><a href="#deprecated-options" class="table-of-contents__link toc-highlight">Deprecated Options</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">server</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s server</h1><p>In this section, you&#x27;ll learn how to configure the K3s server.</p><p>Note that servers also run an agent, so all of the configuration options listed in the <a href="/cli/agent"><code>k3s agent</code> documentation</a> are also supported on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="critical-configuration-values">Critical Configuration Values<a href="#critical-configuration-values" class="hash-link" aria-label="Direct link to Critical Configuration Values" title="Direct link to Critical Configuration Values">​</a></h2><p>The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore.</p><ul><li><code>--agent-token</code></li><li><code>--cluster-cidr</code></li><li><code>--cluster-dns</code></li><li><code>--cluster-domain</code></li><li><code>--disable-cloud-controller</code></li><li><code>--disable-helm-controller</code></li><li><code>--disable-network-policy</code></li><li><code>--disable-servicelb</code></li><li><code>--egress-selector-mode</code></li><li><code>--flannel-backend</code></li><li><code>--flannel-external-ip</code></li><li><code>--flannel-ipv6-masq</code></li><li><code>--secrets-encryption</code></li><li><code>--service-cidr</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="commonly-used-options">Commonly Used Options<a href="#commonly-used-options" class="hash-link" aria-label="Direct link to Commonly Used Options" title="Direct link to Commonly Used Options">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="Direct link to Database" title="Direct link to Database">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code> value</td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>Specify etcd, Mysql, Postgres, or Sqlite (default) data source name</td></tr><tr><td><code>--datastore-cafile</code> value</td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS Certificate Authority file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-certfile</code> value</td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS certification file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-keyfile</code> value</td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS key file used to secure datastore backend communication</td></tr><tr><td><code>--etcd-expose-metrics</code></td><td>N/A</td><td>Expose etcd metrics to client interface (default: false)</td></tr><tr><td><code>--etcd-disable-snapshots</code></td><td>N/A</td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-name</code> value</td><td>N/A</td><td>Set the base name of etcd snapshots. Default: etcd-snapshot-<code>&lt;unix-timestamp&gt;</code> (default:&quot;etcd-snapshot&quot;)</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>N/A</td><td>Snapshot interval time in cron spec. eg. every 5 hours &#x27;0 <em>/5 <em> <!-- -->*<!-- --> </em>&#x27; (default: &quot;0 </em>/12 <!-- -->*<!-- --> <!-- -->*<!-- --> <!-- -->*<!-- -->&quot;)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>N/A</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>N/A</td><td>Directory to save db snapshots (default: ${data-dir}/db/snapshots)</td></tr><tr><td><code>--etcd-s3</code></td><td>N/A</td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code> value</td><td>N/A</td><td>S3 endpoint url (default: &quot;s3.amazonaws.com&quot;)</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code> value</td><td>N/A</td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>N/A</td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code> value</td><td><code>AWS_ACCESS_KEY_ID</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code> value</td><td><code>AWS_SECRET_ACCESS_KEY</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code> value</td><td>N/A</td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code> value</td><td>N/A</td><td>S3 region / bucket location (optional) (default: &quot;us-east-1&quot;)</td></tr><tr><td><code>--etcd-s3-folder</code> value</td><td>N/A</td><td>S3 folder</td></tr><tr><td><code>--etcd-s3-insecure</code></td><td>Disables S3 over HTTPS</td><td></td></tr><tr><td><code>--etcd-s3-timeout</code> value</td><td>S3 timeout (default: 5m0s)</td><td></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="Direct link to Cluster Options" title="Direct link to Cluster Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token</code> value, <code>-t</code> value</td><td><code>K3S_TOKEN</code></td><td>Shared secret used to join a server or agent to a cluster</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>File containing the cluster-secret/token</td></tr><tr><td><code>--agent-token</code> value</td><td><code>K3S_AGENT_TOKEN</code></td><td>Shared secret used to join agents to the cluster, but not servers</td></tr><tr><td><code>--agent-token-file</code> value</td><td><code>K3S_AGENT_TOKEN_FILE</code></td><td>File containing the agent secret</td></tr><tr><td><code>--server</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to, used to join a cluster</td></tr><tr><td><code>--cluster-init</code></td><td><code>K3S_CLUSTER_INIT</code></td><td>Initialize a new cluster using embedded Etcd</td></tr><tr><td><code>--cluster-reset</code></td><td><code>K3S_CLUSTER_RESET</code></td><td>Forget all peers and become sole member of a new cluster</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="admin-kubeconfig-options">Admin Kubeconfig Options<a href="#admin-kubeconfig-options" class="hash-link" aria-label="Direct link to Admin Kubeconfig Options" title="Direct link to Admin Kubeconfig Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--write-kubeconfig value, -o</code> value</td><td><code>K3S_KUBECONFIG_OUTPUT</code></td><td>Write kubeconfig for admin client to this file</td></tr><tr><td><code>--write-kubeconfig-mode</code> value</td><td><code>K3S_KUBECONFIG_MODE</code></td><td>Write kubeconfig with this <a href="https://en.wikipedia.org/wiki/Chmod" target="_blank" rel="noopener noreferrer">mode.</a> The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-options">Advanced Options<a href="#advanced-options" class="hash-link" aria-label="Direct link to Advanced Options" title="Direct link to Advanced Options">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="Direct link to Logging" title="Direct link to Logging">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--debug</code></td><td>N/A</td><td>Turn on debug logs</td></tr><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="listeners">Listeners<a href="#listeners" class="hash-link" aria-label="Direct link to Listeners" title="Direct link to Listeners">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--bind-address</code> value</td><td>0.0.0.0</td><td>k3s bind address</td></tr><tr><td><code>--https-listen-port</code> value</td><td>6443</td><td>HTTPS listen port</td></tr><tr><td><code>--advertise-address</code> value</td><td>node-external-ip/node-ip</td><td>IPv4 address that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--advertise-port</code> value</td><td>listen-port/0</td><td>Port that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--tls-san</code> value</td><td>N/A</td><td>Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="Direct link to Data" title="Direct link to Data">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td><code>/var/lib/rancher/k3s</code> or <code>${HOME}/.rancher/k3s</code> if not root</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption">Secrets Encryption<a href="#secrets-encryption" class="hash-link" aria-label="Direct link to Secrets Encryption" title="Direct link to Secrets Encryption">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--secrets-encryption</code></td><td>false</td><td>Enable Secret encryption at rest</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="Direct link to Networking" title="Direct link to Networking">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--cluster-cidr</code> value</td><td>&quot;10.42.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for pod IPs</td></tr><tr><td><code>--service-cidr</code> value</td><td>&quot;10.43.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for service IPs</td></tr><tr><td><code>--service-node-port-range</code> value</td><td>&quot;30000-32767&quot;</td><td>Port range to reserve for services with NodePort visibility</td></tr><tr><td><code>--cluster-dns</code> value</td><td>&quot;10.43.0.10&quot;</td><td>IPv4 Cluster IP for coredns service. Should be in your service-cidr range</td></tr><tr><td><code>--cluster-domain</code> value</td><td>&quot;cluster.local&quot;</td><td>Cluster Domain</td></tr><tr><td><code>--flannel-backend</code> value</td><td>&quot;vxlan&quot;</td><td>One of &#x27;none&#x27;, &#x27;vxlan&#x27;, &#x27;ipsec&#x27;(deprecated), &#x27;host-gw&#x27;, &#x27;wireguard-native&#x27;, or &#x27;wireguard&#x27;(deprecated)</td></tr><tr><td><code>--flannel-ipv6-masq</code></td><td>&quot;N/A&quot;</td><td>Enable IPv6 masquerading for pod</td></tr><tr><td><code>--flannel-external-ip</code></td><td>&quot;N/A&quot;</td><td>Use node external IP addresses for Flannel traffic</td></tr><tr><td><code>--servicelb-namespace</code> value</td><td>&quot;kube-system&quot;</td><td>Namespace of the pods for the servicelb component</td></tr><tr><td><code>--egress-selector-mode</code> value</td><td>&quot;agent&quot;</td><td>Must be one of the following: <ul><li>disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs.</li><li>agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s.</li><li> pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node.</li><li>  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.</li></ul></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="storage-class">Storage Class<a href="#storage-class" class="hash-link" aria-label="Direct link to Storage Class" title="Direct link to Storage Class">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--default-local-storage-path</code> value</td><td>Default local storage path for local provisioner storage class</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-components">Kubernetes Components<a href="#kubernetes-components" class="hash-link" aria-label="Direct link to Kubernetes Components" title="Direct link to Kubernetes Components">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--disable</code> value</td><td>See &quot;<a href="/installation/packaged-components#using-the---disable-flag">Using the <code>--disable</code> flag</a>&quot;</td></tr><tr><td><code>--disable-scheduler</code></td><td>Disable Kubernetes default scheduler</td></tr><tr><td><code>--disable-cloud-controller</code></td><td>Disable k3s default cloud controller manager</td></tr><tr><td><code>--disable-kube-proxy</code></td><td>Disable running kube-proxy</td></tr><tr><td><code>--disable-network-policy</code></td><td>Disable k3s default network policy controller</td></tr><tr><td><code>--disable-helm-controller</code></td><td>Disable Helm controller</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags-for-kubernetes-processes">Customized Flags for Kubernetes Processes<a href="#customized-flags-for-kubernetes-processes" class="hash-link" aria-label="Direct link to Customized Flags for Kubernetes Processes" title="Direct link to Customized Flags for Kubernetes Processes">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-arg</code> value</td><td>Customized flag for etcd process</td></tr><tr><td><code>--kube-apiserver-arg</code> value</td><td>Customized flag for kube-apiserver process</td></tr><tr><td><code>--kube-scheduler-arg</code> value</td><td>Customized flag for kube-scheduler process</td></tr><tr><td><code>--kube-controller-manager-arg</code> value</td><td>Customized flag for kube-controller-manager process</td></tr><tr><td><code>--kube-cloud-controller-manager-arg</code> value</td><td>Customized flag for kube-cloud-controller-manager process</td></tr><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental-options">Experimental Options<a href="#experimental-options" class="hash-link" aria-label="Direct link to Experimental Options" title="Direct link to Experimental Options">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--enable-pprof</code></td><td>Enable pprof endpoint on supervisor port</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr><tr><td><code>--disable-agent</code></td><td>See &quot;<a href="/advanced#running-agentless-servers-experimental">Running Agentless Servers (Experimental)</a>&quot;</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated-options">Deprecated Options<a href="#deprecated-options" class="hash-link" aria-label="Direct link to Deprecated Options" title="Direct link to Deprecated Options">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--no-deploy</code> value</td><td>N/A</td><td>Use <code>--disable</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr><tr><td><code>--flannel-backend</code> wireguard</td><td>N/A</td><td>Use <code>--flannel-backend=wireguard-native</code></td></tr><tr><td><code>--flannel-backend</code> value=option1=value</td><td>N/A</td><td>Use <code>--flannel-conf</code> to specify the flannel config file with the backend config</td></tr></tbody></table><h1>K3s Server CLI Help</h1><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_TOKEN]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server - Run management server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --bind-address value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> k3s </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">bind</span><span class="token plain"> address </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --https-listen-port value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> HTTPS listen port </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-address value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 address that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: node-external-ip/node-ip</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: listen-port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --tls-san value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: /var/lib/rancher/k3s or </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">HOME</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/.rancher/k3s </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> not root</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">service</span><span class="token plain"> IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-node-port-range value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port range to reserve </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> services with NodePort visibility </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;30000-32767&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-dns value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 Cluster IP </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> coredns service. Should be </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> your service-cidr range </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-domain value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Cluster Domain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;cluster.local&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-backend value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> backend</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;=</span><span class="token plain">option1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val1,option2</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">2</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> where backend is one of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;none&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;vxlan&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ipsec&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;host-gw&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard-native&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;vxlan&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-ipv6-masq                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable IPv6 masquerading </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-external-ip                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> external IP addresses </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> Flannel traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --egress-selector-mode value               </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> One of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;agent&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;cluster&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;pod&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;disabled&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --servicelb-namespace value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Namespace of the pods </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the servicelb component </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;kube-system&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig value, -o value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> admin client to this </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_OUTPUT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig-mode value              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig with this mode </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_MODE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a server or agent to a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the token </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> agents to the cluster, but not servers </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token-file value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the agent secret </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to, used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-init                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Initialize a new cluster using embedded Etcd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_INIT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Forget all peers and become sole member of a new cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_RESET</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset-restore-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Path to snapshot </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to be restored</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-apiserver-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-apiserver process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-arg value                           </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> etcd process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-controller-manager-arg value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-scheduler-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-scheduler process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-cloud-controller-manager-arg value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-cloud-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-endpoint value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Specify etcd, Mysql, Postgres, or Sqlite </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> data </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">source</span><span class="token plain"> name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_ENDPOINT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-cafile value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS Certificate Authority </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CAFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-certfile value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS certification </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CERTFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-keyfile value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS key </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_KEYFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-expose-metrics                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Expose etcd metrics to client interface. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token boolean" style="color:rgb(255, 88, 116)">false</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-disable-snapshots                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable automatic etcd snapshots</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-name value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Set the base name of etcd snapshots </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: etcd-snapshot-</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">unix-timestamp</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;etcd-snapshot&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-schedule-cron value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Snapshot interval </span><span class="token function" style="color:rgb(130, 170, 255)">time</span><span class="token plain"> </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cron</span><span class="token plain"> spec. eg. every </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain"> hours </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;* */5 * * *&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0 */12 * * *&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-retention value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number of snapshots to retain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-dir value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Directory to save db snapshots. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token variable" style="color:rgb(191, 199, 213)">${data-dir}</span><span class="token plain">/db/snapshots</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-compress                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Compress etcd snapshot</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable backup to S3</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 endpoint url </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;s3.amazonaws.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint-ca value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 custom CA cert to connect to S3 endpoint</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-skip-ssl-verify                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 SSL certificate validation</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-access-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 access key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_ACCESS_KEY_ID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-secret-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 secret key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_SECRET_ACCESS_KEY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-bucket value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 bucket name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-region value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 region / bucket location </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">optional</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;us-east-1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-folder value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 folder</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-insecure                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 over HTTPS</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-timeout value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 </span><span class="token function" style="color:rgb(130, 170, 255)">timeout</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: 5m0s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --default-local-storage-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Default </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> storage path </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> provisioner storage class</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Do not deploy packaged components and delete any deployed components </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">valid items: coredns, servicelb, traefik, local-storage, metrics-server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-scheduler                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Kubernetes default scheduler</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-cloud-controller                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default cloud controller manager</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-kube-proxy                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable running kube-proxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-network-policy                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default network policy controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-helm-controller                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Helm controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --system-default-registry value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry to be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> all system images </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SYSTEM_DEFAULT_REGISTRY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --secrets-encryption                       Enable secret encryption at rest</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --enable-pprof                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable pprof endpoint on supervisor port</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/server.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">CLI Tools</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli/agent"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">agent</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#critical-configuration-values" class="table-of-contents__link toc-highlight">Critical Configuration Values</a></li><li><a href="#commonly-used-options" class="table-of-contents__link toc-highlight">Commonly Used Options</a><ul><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#admin-kubeconfig-options" class="table-of-contents__link toc-highlight">Admin Kubeconfig Options</a></li></ul></li><li><a href="#advanced-options" class="table-of-contents__link toc-highlight">Advanced Options</a><ul><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#listeners" class="table-of-contents__link toc-highlight">Listeners</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#secrets-encryption" class="table-of-contents__link toc-highlight">Secrets Encryption</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#storage-class" class="table-of-contents__link toc-highlight">Storage Class</a></li><li><a href="#kubernetes-components" class="table-of-contents__link toc-highlight">Kubernetes Components</a></li><li><a href="#customized-flags-for-kubernetes-processes" class="table-of-contents__link toc-highlight">Customized Flags for Kubernetes Processes</a></li><li><a href="#experimental-options" class="table-of-contents__link toc-highlight">Experimental Options</a></li><li><a href="#deprecated-options" class="table-of-contents__link toc-highlight">Deprecated Options</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/cli/token.html b/cli/token.html
index 8ae53acf8..3fe125e45 100644
--- a/cli/token.html
+++ b/cli/token.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">token | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/token"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="token | K3s"><meta data-rh="true" name="description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><meta data-rh="true" property="og:description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/token"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/token" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/token" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">token | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cli/token"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="token | K3s"><meta data-rh="true" name="description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><meta data-rh="true" property="og:description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cli/token"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/token" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/token" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">token</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s token</h1><p>K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-format">Token Format<a href="#token-format" class="hash-link" aria-label="Direct link to Token Format" title="Direct link to Token Format">​</a></h2><p>K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secure">Secure<a href="#secure" class="hash-link" aria-label="Direct link to Secure" title="Direct link to Secure">​</a></h3><p>The secure token format (occasionally referred to as a &quot;full&quot; token) contains the following parts:</p><p><code>&lt;prefix&gt;&lt;cluster CA hash&gt;::&lt;credentials&gt;</code></p><ul><li><code>prefix</code>: a fixed <code>K10</code> prefix that identifies the token format</li><li><code>cluster CA hash</code>: The hash of the cluster&#x27;s server CA certificate, used to authenticate the server to the joining node.  <ul><li>For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  </li><li>For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint.</li></ul></li><li><code>credentials</code>: The username and password, or bearer token, used to authenticate the joining node to the cluster.</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="tls-bootstrapping">TLS Bootstrapping<a href="#tls-bootstrapping" class="hash-link" aria-label="Direct link to TLS Bootstrapping" title="Direct link to TLS Bootstrapping">​</a></h4><p>When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:</p><ol><li>With TLS verification disabled, download the CA bundle from <code>/cacerts</code> on the server it is joining.</li><li>Calculate the SHA256 hash of the CA certificate, as described above.</li><li>Compare the calculated SHA256 hash to the hash from the token.</li><li>If the hash matches, validate that the certificate presented by the server can be validated by the server&#x27;s CA bundle.</li><li>If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="short">Short<a href="#short" class="hash-link" aria-label="Direct link to Short" title="Direct link to Short">​</a></h3><p>The short token format includes only the password or bearer token used to authenticate the joining node to the cluster.</p><p>If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack" target="_blank" rel="noopener noreferrer">man-in-the-middle</a> attack.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-types">Token Types<a href="#token-types" class="hash-link" aria-label="Direct link to Token Types" title="Direct link to Token Types">​</a></h2><p>K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator.</p><table><thead><tr><th>Type</th><th>CLI Option</th><th>Environment Variable</th></tr></thead><tbody><tr><td>Server</td><td><code>--token</code></td><td><code>K3S_TOKEN</code></td></tr><tr><td>Agent</td><td><code>--agent-token</code></td><td><code>K3S_AGENT_TOKEN</code></td></tr><tr><td>Bootstrap</td><td><code>n/a</code></td><td><code>n/a</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="server">Server<a href="#server" class="hash-link" aria-label="Direct link to Server" title="Direct link to Server">​</a></h3><p>If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to <code>/var/lib/rancher/k3s/server/token</code>, in secure format.</p><p>The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully.</p><p>The server token is also used as the <a href="https://en.wikipedia.org/wiki/PBKDF2" target="_blank" rel="noopener noreferrer">PBKDF2</a> passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.</p></div></div><p>For more information on using custom CA certificates, see the <a href="/cli/certificate"><code>k3s certificate</code> documentation</a>.<br>
-<!-- -->For more information on backing up your cluster, see the <a href="/datastore/backup-restore">Backup and Restore</a> documentation.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent">Agent<a href="#agent" class="hash-link" aria-label="Direct link to Agent" title="Direct link to Agent">​</a></h3><p>By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire.</p><p>The agent token is written to <code>/var/lib/rancher/k3s/server/agent-token</code>, in secure format. If no agent token is specified, this file is a link to the server token.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="bootstrap">Bootstrap<a href="#bootstrap" class="hash-link" aria-label="Direct link to Bootstrap" title="Direct link to Bootstrap">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Support for the <code>k3s token</code> command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).</p></div></div><p>K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-1">k3s token<a href="#k3s-token-1" class="hash-link" aria-label="Direct link to k3s token" title="Direct link to k3s token">​</a></h2><p>K3s bootstrap tokens use the same generation and validation code as <code>kubeadm token</code> bootstrap tokens, and the <code>k3s token</code> CLI is similar.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token - Manage bootstrap tokens</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token command [command options] [arguments...]</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">COMMANDS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   create    Create bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   delete    Delete bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   generate  Generate and print a bootstrap token, but do not create it on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   list      List bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --help, -h  show help</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-create-token"><code>k3s token create [token]</code><a href="#k3s-token-create-token" class="hash-link" aria-label="Direct link to k3s-token-create-token" title="Direct link to k3s-token-create-token">​</a></h4><p>Create a new token. The <code>[token]</code> is the actual token to write, as generated by <code>k3s token generate</code>. If no token is given, a random one will be generated.</p><p>A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--description</code> value</td><td>A human friendly description of how this token is used</td></tr><tr><td><code>--groups</code> value</td><td>Extra groups that this token will authenticate as when used for authentication. (default: Default: &quot;system:bootstrappers:k3s:default-node-token&quot;)</td></tr><tr><td><code>--ttl</code> value</td><td>The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to &#x27;0&#x27;, the token will never expire (default: 24h0m0s)</td></tr><tr><td><code>--usages</code> value</td><td>Describes the ways in which this token can be used. (default: &quot;signing,authentication&quot;)</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-delete"><code>k3s token delete</code><a href="#k3s-token-delete" class="hash-link" aria-label="Direct link to k3s-token-delete" title="Direct link to k3s-token-delete">​</a></h4><p>Delete one or more tokens. The full token can be provided, or just the token ID.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-generate"><code>k3s token generate</code><a href="#k3s-token-generate" class="hash-link" aria-label="Direct link to k3s-token-generate" title="Direct link to k3s-token-generate">​</a></h4><p>Generate a randomly-generated bootstrap token.</p><p>You don&#x27;t have to use this command in order to generate a token. You can do so yourself as long as it is in the format &quot;<!-- -->[a-z0-9]<!-- -->{6}.<!-- -->[a-z0-9]<!-- -->{16}&quot;, where the first portion is the token ID, and the second portion is the secret.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-list"><code>k3s token list</code><a href="#k3s-token-list" class="hash-link" aria-label="Direct link to k3s-token-list" title="Direct link to k3s-token-list">​</a></h4><p>List bootstrap tokens, showing their ID, description, and remaining time-to-live.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--output</code> value</td><td>Output format. Valid options: text, json (default: &quot;text&quot;)</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/token.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/secrets-encrypt"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">secrets-encrypt</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/reference"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Reference</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#token-format" class="table-of-contents__link toc-highlight">Token Format</a><ul><li><a href="#secure" class="table-of-contents__link toc-highlight">Secure</a></li><li><a href="#short" class="table-of-contents__link toc-highlight">Short</a></li></ul></li><li><a href="#token-types" class="table-of-contents__link toc-highlight">Token Types</a><ul><li><a href="#server" class="table-of-contents__link toc-highlight">Server</a></li><li><a href="#agent" class="table-of-contents__link toc-highlight">Agent</a></li><li><a href="#bootstrap" class="table-of-contents__link toc-highlight">Bootstrap</a></li></ul></li><li><a href="#k3s-token-1" class="table-of-contents__link toc-highlight">k3s token</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/cli"><span itemprop="name">CLI Tools</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">token</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>k3s token</h1><p>K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-format">Token Format<a href="#token-format" class="hash-link" aria-label="Direct link to Token Format" title="Direct link to Token Format">​</a></h2><p>K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secure">Secure<a href="#secure" class="hash-link" aria-label="Direct link to Secure" title="Direct link to Secure">​</a></h3><p>The secure token format (occasionally referred to as a &quot;full&quot; token) contains the following parts:</p><p><code>&lt;prefix&gt;&lt;cluster CA hash&gt;::&lt;credentials&gt;</code></p><ul><li><code>prefix</code>: a fixed <code>K10</code> prefix that identifies the token format</li><li><code>cluster CA hash</code>: The hash of the cluster&#x27;s server CA certificate, used to authenticate the server to the joining node.  <ul><li>For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  </li><li>For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint.</li></ul></li><li><code>credentials</code>: The username and password, or bearer token, used to authenticate the joining node to the cluster.</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="tls-bootstrapping">TLS Bootstrapping<a href="#tls-bootstrapping" class="hash-link" aria-label="Direct link to TLS Bootstrapping" title="Direct link to TLS Bootstrapping">​</a></h4><p>When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:</p><ol><li>With TLS verification disabled, download the CA bundle from <code>/cacerts</code> on the server it is joining.</li><li>Calculate the SHA256 hash of the CA certificate, as described above.</li><li>Compare the calculated SHA256 hash to the hash from the token.</li><li>If the hash matches, validate that the certificate presented by the server can be validated by the server&#x27;s CA bundle.</li><li>If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="short">Short<a href="#short" class="hash-link" aria-label="Direct link to Short" title="Direct link to Short">​</a></h3><p>The short token format includes only the password or bearer token used to authenticate the joining node to the cluster.</p><p>If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack" target="_blank" rel="noopener noreferrer">man-in-the-middle</a> attack.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-types">Token Types<a href="#token-types" class="hash-link" aria-label="Direct link to Token Types" title="Direct link to Token Types">​</a></h2><p>K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator.</p><table><thead><tr><th>Type</th><th>CLI Option</th><th>Environment Variable</th></tr></thead><tbody><tr><td>Server</td><td><code>--token</code></td><td><code>K3S_TOKEN</code></td></tr><tr><td>Agent</td><td><code>--agent-token</code></td><td><code>K3S_AGENT_TOKEN</code></td></tr><tr><td>Bootstrap</td><td><code>n/a</code></td><td><code>n/a</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="server">Server<a href="#server" class="hash-link" aria-label="Direct link to Server" title="Direct link to Server">​</a></h3><p>If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to <code>/var/lib/rancher/k3s/server/token</code>, in secure format.</p><p>The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully.</p><p>The server token is also used as the <a href="https://en.wikipedia.org/wiki/PBKDF2" target="_blank" rel="noopener noreferrer">PBKDF2</a> passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.</p></div></div><p>For more information on using custom CA certificates, see the <a href="/cli/certificate"><code>k3s certificate</code> documentation</a>.<br>
+<!-- -->For more information on backing up your cluster, see the <a href="/datastore/backup-restore">Backup and Restore</a> documentation.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent">Agent<a href="#agent" class="hash-link" aria-label="Direct link to Agent" title="Direct link to Agent">​</a></h3><p>By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire.</p><p>The agent token is written to <code>/var/lib/rancher/k3s/server/agent-token</code>, in secure format. If no agent token is specified, this file is a link to the server token.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="bootstrap">Bootstrap<a href="#bootstrap" class="hash-link" aria-label="Direct link to Bootstrap" title="Direct link to Bootstrap">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Support for the <code>k3s token</code> command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).</p></div></div><p>K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-1">k3s token<a href="#k3s-token-1" class="hash-link" aria-label="Direct link to k3s token" title="Direct link to k3s token">​</a></h2><p>K3s bootstrap tokens use the same generation and validation code as <code>kubeadm token</code> bootstrap tokens, and the <code>k3s token</code> CLI is similar.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token - Manage bootstrap tokens</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token command [command options] [arguments...]</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">COMMANDS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   create    Create bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   delete    Delete bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   generate  Generate and print a bootstrap token, but do not create it on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   list      List bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --help, -h  show help</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-create-token"><code>k3s token create [token]</code><a href="#k3s-token-create-token" class="hash-link" aria-label="Direct link to k3s-token-create-token" title="Direct link to k3s-token-create-token">​</a></h4><p>Create a new token. The <code>[token]</code> is the actual token to write, as generated by <code>k3s token generate</code>. If no token is given, a random one will be generated.</p><p>A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--description</code> value</td><td>A human friendly description of how this token is used</td></tr><tr><td><code>--groups</code> value</td><td>Extra groups that this token will authenticate as when used for authentication. (default: Default: &quot;system:bootstrappers:k3s:default-node-token&quot;)</td></tr><tr><td><code>--ttl</code> value</td><td>The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to &#x27;0&#x27;, the token will never expire (default: 24h0m0s)</td></tr><tr><td><code>--usages</code> value</td><td>Describes the ways in which this token can be used. (default: &quot;signing,authentication&quot;)</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-delete"><code>k3s token delete</code><a href="#k3s-token-delete" class="hash-link" aria-label="Direct link to k3s-token-delete" title="Direct link to k3s-token-delete">​</a></h4><p>Delete one or more tokens. The full token can be provided, or just the token ID.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-generate"><code>k3s token generate</code><a href="#k3s-token-generate" class="hash-link" aria-label="Direct link to k3s-token-generate" title="Direct link to k3s-token-generate">​</a></h4><p>Generate a randomly-generated bootstrap token.</p><p>You don&#x27;t have to use this command in order to generate a token. You can do so yourself as long as it is in the format &quot;<!-- -->[a-z0-9]<!-- -->{6}.<!-- -->[a-z0-9]<!-- -->{16}&quot;, where the first portion is the token ID, and the second portion is the secret.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-list"><code>k3s token list</code><a href="#k3s-token-list" class="hash-link" aria-label="Direct link to k3s-token-list" title="Direct link to k3s-token-list">​</a></h4><p>List bootstrap tokens, showing their ID, description, and remaining time-to-live.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--output</code> value</td><td>Output format. Valid options: text, json (default: &quot;text&quot;)</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/token.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/secrets-encrypt"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">secrets-encrypt</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/reference"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Reference</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#token-format" class="table-of-contents__link toc-highlight">Token Format</a><ul><li><a href="#secure" class="table-of-contents__link toc-highlight">Secure</a></li><li><a href="#short" class="table-of-contents__link toc-highlight">Short</a></li></ul></li><li><a href="#token-types" class="table-of-contents__link toc-highlight">Token Types</a><ul><li><a href="#server" class="table-of-contents__link toc-highlight">Server</a></li><li><a href="#agent" class="table-of-contents__link toc-highlight">Agent</a></li><li><a href="#bootstrap" class="table-of-contents__link toc-highlight">Bootstrap</a></li></ul></li><li><a href="#k3s-token-1" class="table-of-contents__link toc-highlight">k3s token</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/cluster-access.html b/cluster-access.html
index fcff482d2..8e8af994b 100644
--- a/cluster-access.html
+++ b/cluster-access.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Cluster Access | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cluster-access"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Cluster Access | K3s"><meta data-rh="true" name="description" content="The kubeconfig file stored at /etc/rancher/k3s/k3s.yaml is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the KUBECONFIG environment variable or by invoking the --kubeconfig command line flag. Refer to the examples below for details."><meta data-rh="true" property="og:description" content="The kubeconfig file stored at /etc/rancher/k3s/k3s.yaml is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the KUBECONFIG environment variable or by invoking the --kubeconfig command line flag. Refer to the examples below for details."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cluster-access"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cluster-access" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cluster-access" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Cluster Access | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/cluster-access"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Cluster Access | K3s"><meta data-rh="true" name="description" content="The kubeconfig file stored at /etc/rancher/k3s/k3s.yaml is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the KUBECONFIG environment variable or by invoking the --kubeconfig command line flag. Refer to the examples below for details."><meta data-rh="true" property="og:description" content="The kubeconfig file stored at /etc/rancher/k3s/k3s.yaml is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the KUBECONFIG environment variable or by invoking the --kubeconfig command line flag. Refer to the examples below for details."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/cluster-access"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cluster-access" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cluster-access" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Cluster Access</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Cluster Access</h1></header><p>The kubeconfig file stored at <code>/etc/rancher/k3s/k3s.yaml</code> is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the <code>KUBECONFIG</code> environment variable or by invoking the <code>--kubeconfig</code> command line flag. Refer to the examples below for details.</p><p>Leverage the KUBECONFIG environment variable:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token builtin class-name" style="color:rgb(255, 203, 107)">export</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">KUBECONFIG</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/etc/rancher/k3s/k3s.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or specify the location of the kubeconfig file in the command:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm --kubeconfig /etc/rancher/k3s/k3s.yaml </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="accessing-the-cluster-from-outside-with-kubectl">Accessing the Cluster from Outside with kubectl<a href="#accessing-the-cluster-from-outside-with-kubectl" class="hash-link" aria-label="Direct link to Accessing the Cluster from Outside with kubectl" title="Direct link to Accessing the Cluster from Outside with kubectl">​</a></h3><p>Copy <code>/etc/rancher/k3s/k3s.yaml</code> on your machine located outside the cluster as <code>~/.kube/config</code>. Then replace the value of the <code>server</code> field with the IP or name of your K3s server. <code>kubectl</code> can now manage your K3s cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Cluster Load Balancer</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Upgrades</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#accessing-the-cluster-from-outside-with-kubectl" class="table-of-contents__link toc-highlight">Accessing the Cluster from Outside with kubectl</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Cluster Access</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Cluster Access</h1></header><p>The kubeconfig file stored at <code>/etc/rancher/k3s/k3s.yaml</code> is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the <code>KUBECONFIG</code> environment variable or by invoking the <code>--kubeconfig</code> command line flag. Refer to the examples below for details.</p><p>Leverage the KUBECONFIG environment variable:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token builtin class-name" style="color:rgb(255, 203, 107)">export</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">KUBECONFIG</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/etc/rancher/k3s/k3s.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or specify the location of the kubeconfig file in the command:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm --kubeconfig /etc/rancher/k3s/k3s.yaml </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="accessing-the-cluster-from-outside-with-kubectl">Accessing the Cluster from Outside with kubectl<a href="#accessing-the-cluster-from-outside-with-kubectl" class="hash-link" aria-label="Direct link to Accessing the Cluster from Outside with kubectl" title="Direct link to Accessing the Cluster from Outside with kubectl">​</a></h3><p>Copy <code>/etc/rancher/k3s/k3s.yaml</code> on your machine located outside the cluster as <code>~/.kube/config</code>. Then replace the value of the <code>server</code> field with the IP or name of your K3s server. <code>kubectl</code> can now manage your K3s cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Cluster Load Balancer</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Upgrades</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#accessing-the-cluster-from-outside-with-kubectl" class="table-of-contents__link toc-highlight">Accessing the Cluster from Outside with kubectl</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/datastore.html b/datastore.html
index c8f9e04d8..20808647d 100644
--- a/datastore.html
+++ b/datastore.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Cluster Datastore | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Cluster Datastore | K3s"><meta data-rh="true" name="description" content="The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:"><meta data-rh="true" property="og:description" content="The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Cluster Datastore | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Cluster Datastore | K3s"><meta data-rh="true" name="description" content="The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:"><meta data-rh="true" property="og:description" content="The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Cluster Datastore</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Cluster Datastore</h1></header><p>The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:</p><ul><li>If your team doesn&#x27;t have expertise in operating etcd, you can choose an enterprise-grade SQL database like MySQL or PostgreSQL</li><li>If you need to run a simple, short-lived cluster in your CI/CD environment, you can use the embedded SQLite database</li><li>If you wish to deploy Kubernetes on the edge and require a highly available solution but can&#x27;t afford the operational overhead of managing a database at the edge, you can use K3s&#x27;s embedded HA datastore built on top of embedded etcd.</li></ul><p>K3s supports the following datastore options:</p><ul><li><strong>Embedded <a href="https://www.sqlite.org/index.html" target="_blank" rel="noopener noreferrer">SQLite</a></strong><br>SQLite cannot be used on clusters with multiple servers.<br>SQLite is the default datastore, and will be used if no other datastore configuration is present, and no embedded etcd database files are present on disk.</li><li><strong>Embedded etcd</strong><br>See the <a href="/datastore/ha-embedded">High Availability Embedded etcd</a> documentation for more information on using embedded etcd with multiple servers.
-Embedded etcd will be automatically selected if K3s is configured to initialize a new etcd cluster, join an existing etcd cluster, or if etcd database files are present on disk during startup.</li><li><strong>External Database</strong><br>See the <a href="/datastore/ha">High Availability External DB</a> documentation for more information on using external datastores with multiple servers.<br>The following external datastores are supported:<ul><li><a href="https://etcd.io/" target="_blank" rel="noopener noreferrer">etcd</a> (certified against version 3.5.4)</li><li><a href="https://www.mysql.com/" target="_blank" rel="noopener noreferrer">MySQL</a> (certified against versions 5.7 and 8.0)</li><li><a href="https://mariadb.org/" target="_blank" rel="noopener noreferrer">MariaDB</a> (certified against version 10.6.8)</li><li><a href="https://www.postgresql.org/" target="_blank" rel="noopener noreferrer">PostgreSQL</a> (certified against versions 10.7, 11.5, and 14.2)</li></ul></li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Prepared Statement Support</div><div class="admonitionContent_S0QG"><p>K3s requires prepared statements support from the DB. This means that connection poolers such as <a href="https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling" target="_blank" rel="noopener noreferrer">PgBouncer</a> will not work with K3s.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="external-datastore-configuration-parameters">External Datastore Configuration Parameters<a href="#external-datastore-configuration-parameters" class="hash-link" aria-label="Direct link to External Datastore Configuration Parameters" title="Direct link to External Datastore Configuration Parameters">​</a></h3><p>If you wish to use an external datastore such as PostgreSQL, MySQL, or etcd you must set the <code>datastore-endpoint</code> parameter so that K3s knows how to connect to it. You may also specify parameters to configure the authentication and encryption of the connection. The below table summarizes these parameters, which can be passed as either CLI flags or environment variables.</p><table><thead><tr><th>CLI Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code></td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>Specify a PostgreSQL, MySQL, or etcd connection string. This is a string used to describe the connection to the datastore. The structure of this string is specific to each backend and is detailed below.</td></tr><tr><td><code>--datastore-cafile</code></td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS Certificate Authority (CA) file used to help secure communication with the datastore. If your datastore serves requests over TLS using a certificate signed by a custom certificate authority, you can specify that CA using this parameter so that the K3s client can properly verify the certificate.</td></tr><tr><td><code>--datastore-certfile</code></td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS certificate file used for client certificate based authentication to your datastore. To use this feature, your datastore must be configured to support client certificate based authentication. If you specify this parameter, you must also specify the <code>datastore-keyfile</code> parameter.</td></tr><tr><td><code>--datastore-keyfile</code></td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS key file used for client certificate based authentication to your datastore. See the previous <code>datastore-certfile</code> parameter for more details.</td></tr></tbody></table><p>As a best practice we recommend setting these parameters as environment variables rather than command line arguments so that your database credentials or other sensitive information aren&#x27;t exposed as part of the process info.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="datastore-endpoint-format-and-functionality">Datastore Endpoint Format and Functionality<a href="#datastore-endpoint-format-and-functionality" class="hash-link" aria-label="Direct link to Datastore Endpoint Format and Functionality" title="Direct link to Datastore Endpoint Format and Functionality">​</a></h3><p>As mentioned, the format of the value passed to the <code>datastore-endpoint</code> parameter is dependent upon the datastore backend. The following details this format and functionality for each supported external datastore.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">PostgreSQL</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">MySQL / MariaDB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">etcd</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>  In its most common form, the datastore-endpoint parameter for PostgreSQL has the following format:</p><p>  <code>postgres://username:password@hostname:port/database-name</code></p><p>  More advanced configuration parameters are available. For more information on these, please see <a href="https://godoc.org/github.com/lib/pq" target="_blank" rel="noopener noreferrer">https://godoc.org/github.com/lib/pq</a>.</p><p>  If you specify a database name and it does not exist, the server will attempt to create it.</p><p>  If you only supply <code>postgres://</code>  as the endpoint, K3s will attempt to do the following:</p><ul><li>Connect to localhost using <code>postgres</code> as the username and password</li><li>Create a database named <code>kubernetes</code></li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>  In its most common form, the <code>datastore-endpoint</code> parameter for MySQL and MariaDB has the following format:</p><p>  <code>mysql://username:password@tcp(hostname:3306)/database-name</code></p><p>  More advanced configuration parameters are available. For more information on these, please see <a href="https://github.com/go-sql-driver/mysql#dsn-data-source-name" target="_blank" rel="noopener noreferrer">https://github.com/go-sql-driver/mysql#dsn-data-source-name</a></p><p>  Note that due to a <a href="https://github.com/k3s-io/k3s/issues/1093" target="_blank" rel="noopener noreferrer">known issue</a> in K3s, you cannot set the <code>tls</code> parameter. TLS communication is supported, but you cannot, for example, set this parameter to &quot;skip-verify&quot; to cause K3s to skip certificate verification.</p><p>  If you specify a database name and it does not exist, the server will attempt to create it.</p><p>  If you only supply <code>mysql://</code> as the endpoint, K3s will attempt to do the following:</p><ul><li>Connect to the MySQL socket at <code>/var/run/mysqld/mysqld.sock</code> using the <code>root</code> user and no password</li><li>Create a database with the name <code>kubernetes</code></li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>  In its most common form, the <code>datastore-endpoint</code> parameter for etcd has the following format:</p><p>  <code>https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379</code></p><p>  The above assumes a typical three node etcd cluster. The parameter can accept one more comma separated etcd URLs.</p></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/uninstall"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Uninstalling K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/backup-restore"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Backup and Restore</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#external-datastore-configuration-parameters" class="table-of-contents__link toc-highlight">External Datastore Configuration Parameters</a></li><li><a href="#datastore-endpoint-format-and-functionality" class="table-of-contents__link toc-highlight">Datastore Endpoint Format and Functionality</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Cluster Datastore</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Cluster Datastore</h1></header><p>The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example:</p><ul><li>If your team doesn&#x27;t have expertise in operating etcd, you can choose an enterprise-grade SQL database like MySQL or PostgreSQL</li><li>If you need to run a simple, short-lived cluster in your CI/CD environment, you can use the embedded SQLite database</li><li>If you wish to deploy Kubernetes on the edge and require a highly available solution but can&#x27;t afford the operational overhead of managing a database at the edge, you can use K3s&#x27;s embedded HA datastore built on top of embedded etcd.</li></ul><p>K3s supports the following datastore options:</p><ul><li><strong>Embedded <a href="https://www.sqlite.org/index.html" target="_blank" rel="noopener noreferrer">SQLite</a></strong><br>SQLite cannot be used on clusters with multiple servers.<br>SQLite is the default datastore, and will be used if no other datastore configuration is present, and no embedded etcd database files are present on disk.</li><li><strong>Embedded etcd</strong><br>See the <a href="/datastore/ha-embedded">High Availability Embedded etcd</a> documentation for more information on using embedded etcd with multiple servers.
+Embedded etcd will be automatically selected if K3s is configured to initialize a new etcd cluster, join an existing etcd cluster, or if etcd database files are present on disk during startup.</li><li><strong>External Database</strong><br>See the <a href="/datastore/ha">High Availability External DB</a> documentation for more information on using external datastores with multiple servers.<br>The following external datastores are supported:<ul><li><a href="https://etcd.io/" target="_blank" rel="noopener noreferrer">etcd</a> (certified against version 3.5.4)</li><li><a href="https://www.mysql.com/" target="_blank" rel="noopener noreferrer">MySQL</a> (certified against versions 5.7 and 8.0)</li><li><a href="https://mariadb.org/" target="_blank" rel="noopener noreferrer">MariaDB</a> (certified against version 10.6.8)</li><li><a href="https://www.postgresql.org/" target="_blank" rel="noopener noreferrer">PostgreSQL</a> (certified against versions 10.7, 11.5, and 14.2)</li></ul></li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Prepared Statement Support</div><div class="admonitionContent_S0QG"><p>K3s requires prepared statements support from the DB. This means that connection poolers such as <a href="https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling" target="_blank" rel="noopener noreferrer">PgBouncer</a> will not work with K3s.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="external-datastore-configuration-parameters">External Datastore Configuration Parameters<a href="#external-datastore-configuration-parameters" class="hash-link" aria-label="Direct link to External Datastore Configuration Parameters" title="Direct link to External Datastore Configuration Parameters">​</a></h3><p>If you wish to use an external datastore such as PostgreSQL, MySQL, or etcd you must set the <code>datastore-endpoint</code> parameter so that K3s knows how to connect to it. You may also specify parameters to configure the authentication and encryption of the connection. The below table summarizes these parameters, which can be passed as either CLI flags or environment variables.</p><table><thead><tr><th>CLI Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code></td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>Specify a PostgreSQL, MySQL, or etcd connection string. This is a string used to describe the connection to the datastore. The structure of this string is specific to each backend and is detailed below.</td></tr><tr><td><code>--datastore-cafile</code></td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS Certificate Authority (CA) file used to help secure communication with the datastore. If your datastore serves requests over TLS using a certificate signed by a custom certificate authority, you can specify that CA using this parameter so that the K3s client can properly verify the certificate.</td></tr><tr><td><code>--datastore-certfile</code></td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS certificate file used for client certificate based authentication to your datastore. To use this feature, your datastore must be configured to support client certificate based authentication. If you specify this parameter, you must also specify the <code>datastore-keyfile</code> parameter.</td></tr><tr><td><code>--datastore-keyfile</code></td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS key file used for client certificate based authentication to your datastore. See the previous <code>datastore-certfile</code> parameter for more details.</td></tr></tbody></table><p>As a best practice we recommend setting these parameters as environment variables rather than command line arguments so that your database credentials or other sensitive information aren&#x27;t exposed as part of the process info.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="datastore-endpoint-format-and-functionality">Datastore Endpoint Format and Functionality<a href="#datastore-endpoint-format-and-functionality" class="hash-link" aria-label="Direct link to Datastore Endpoint Format and Functionality" title="Direct link to Datastore Endpoint Format and Functionality">​</a></h3><p>As mentioned, the format of the value passed to the <code>datastore-endpoint</code> parameter is dependent upon the datastore backend. The following details this format and functionality for each supported external datastore.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">PostgreSQL</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">MySQL / MariaDB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">etcd</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>  In its most common form, the datastore-endpoint parameter for PostgreSQL has the following format:</p><p>  <code>postgres://username:password@hostname:port/database-name</code></p><p>  More advanced configuration parameters are available. For more information on these, please see <a href="https://godoc.org/github.com/lib/pq" target="_blank" rel="noopener noreferrer">https://godoc.org/github.com/lib/pq</a>.</p><p>  If you specify a database name and it does not exist, the server will attempt to create it.</p><p>  If you only supply <code>postgres://</code>  as the endpoint, K3s will attempt to do the following:</p><ul><li>Connect to localhost using <code>postgres</code> as the username and password</li><li>Create a database named <code>kubernetes</code></li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>  In its most common form, the <code>datastore-endpoint</code> parameter for MySQL and MariaDB has the following format:</p><p>  <code>mysql://username:password@tcp(hostname:3306)/database-name</code></p><p>  More advanced configuration parameters are available. For more information on these, please see <a href="https://github.com/go-sql-driver/mysql#dsn-data-source-name" target="_blank" rel="noopener noreferrer">https://github.com/go-sql-driver/mysql#dsn-data-source-name</a></p><p>  Note that due to a <a href="https://github.com/k3s-io/k3s/issues/1093" target="_blank" rel="noopener noreferrer">known issue</a> in K3s, you cannot set the <code>tls</code> parameter. TLS communication is supported, but you cannot, for example, set this parameter to &quot;skip-verify&quot; to cause K3s to skip certificate verification.</p><p>  If you specify a database name and it does not exist, the server will attempt to create it.</p><p>  If you only supply <code>mysql://</code> as the endpoint, K3s will attempt to do the following:</p><ul><li>Connect to the MySQL socket at <code>/var/run/mysqld/mysqld.sock</code> using the <code>root</code> user and no password</li><li>Create a database with the name <code>kubernetes</code></li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>  In its most common form, the <code>datastore-endpoint</code> parameter for etcd has the following format:</p><p>  <code>https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379</code></p><p>  The above assumes a typical three node etcd cluster. The parameter can accept one more comma separated etcd URLs.</p></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/uninstall"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Uninstalling K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/backup-restore"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Backup and Restore</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#external-datastore-configuration-parameters" class="table-of-contents__link toc-highlight">External Datastore Configuration Parameters</a></li><li><a href="#datastore-endpoint-format-and-functionality" class="table-of-contents__link toc-highlight">Datastore Endpoint Format and Functionality</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/datastore/backup-restore.html b/datastore/backup-restore.html
index 25cc70a60..5ac7000fe 100644
--- a/datastore/backup-restore.html
+++ b/datastore/backup-restore.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Backup and Restore | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/backup-restore"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Backup and Restore | K3s"><meta data-rh="true" name="description" content="The way K3s is backed up and restored depends on which type of datastore is used."><meta data-rh="true" property="og:description" content="The way K3s is backed up and restored depends on which type of datastore is used."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/backup-restore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/backup-restore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/backup-restore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Backup and Restore | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/backup-restore"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Backup and Restore | K3s"><meta data-rh="true" name="description" content="The way K3s is backed up and restored depends on which type of datastore is used."><meta data-rh="true" property="og:description" content="The way K3s is backed up and restored depends on which type of datastore is used."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/backup-restore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/backup-restore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/backup-restore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Backup and Restore</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Backup and Restore</h1></header><p>The way K3s is backed up and restored depends on which type of datastore is used.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>In addition to backing up the datastore itself, you must also back up the server token file at <code>/var/lib/rancher/k3s/server/token</code>.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Backup and Restore</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Backup and Restore</h1></header><p>The way K3s is backed up and restored depends on which type of datastore is used.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>In addition to backing up the datastore itself, you must also back up the server token file at <code>/var/lib/rancher/k3s/server/token</code>.
 You must restore this file, or pass its value into the <code>--token</code> option, when restoring from backup.
-If you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-sqlite">Backup and Restore with SQLite<a href="#backup-and-restore-with-sqlite" class="hash-link" aria-label="Direct link to Backup and Restore with SQLite" title="Direct link to Backup and Restore with SQLite">​</a></h2><p>No special commands are required to back up or restore the SQLite datastore. </p><ul><li>To back up the SQLite datastore, take a copy of <code>/var/lib/rancher/k3s/server/db/</code>.</li><li>To restore the SQLite datastore, restore the contents of <code>/var/lib/rancher/k3s/server/db</code> (and the token, as discussed above).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-external-datastore">Backup and Restore with External Datastore<a href="#backup-and-restore-with-external-datastore" class="hash-link" aria-label="Direct link to Backup and Restore with External Datastore" title="Direct link to Backup and Restore with External Datastore">​</a></h2><p>When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump.</p><p>We recommend configuring the database to take recurring snapshots.</p><p>For details on taking database snapshots and restoring your database from them, refer to the official database documentation:</p><ul><li><a href="https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html" target="_blank" rel="noopener noreferrer">Official MySQL documentation</a></li><li><a href="https://www.postgresql.org/docs/8.3/backup-dump.html" target="_blank" rel="noopener noreferrer">Official PostgreSQL documentation</a></li><li><a href="https://etcd.io/docs/latest/op-guide/recovery/" target="_blank" rel="noopener noreferrer">Official etcd documentation</a></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-embedded-etcd-datastore">Backup and Restore with Embedded etcd Datastore<a href="#backup-and-restore-with-embedded-etcd-datastore" class="hash-link" aria-label="Direct link to Backup and Restore with Embedded etcd Datastore" title="Direct link to Backup and Restore with Embedded etcd Datastore">​</a></h2><p>See the <a href="/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> command documentation</a> for information on performing backup and restore operations on the embedded etcd datastore.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Cluster Datastore</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/ha-embedded"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#backup-and-restore-with-sqlite" class="table-of-contents__link toc-highlight">Backup and Restore with SQLite</a></li><li><a href="#backup-and-restore-with-external-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with External Datastore</a></li><li><a href="#backup-and-restore-with-embedded-etcd-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with Embedded etcd Datastore</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+If you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-sqlite">Backup and Restore with SQLite<a href="#backup-and-restore-with-sqlite" class="hash-link" aria-label="Direct link to Backup and Restore with SQLite" title="Direct link to Backup and Restore with SQLite">​</a></h2><p>No special commands are required to back up or restore the SQLite datastore. </p><ul><li>To back up the SQLite datastore, take a copy of <code>/var/lib/rancher/k3s/server/db/</code>.</li><li>To restore the SQLite datastore, restore the contents of <code>/var/lib/rancher/k3s/server/db</code> (and the token, as discussed above).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-external-datastore">Backup and Restore with External Datastore<a href="#backup-and-restore-with-external-datastore" class="hash-link" aria-label="Direct link to Backup and Restore with External Datastore" title="Direct link to Backup and Restore with External Datastore">​</a></h2><p>When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump.</p><p>We recommend configuring the database to take recurring snapshots.</p><p>For details on taking database snapshots and restoring your database from them, refer to the official database documentation:</p><ul><li><a href="https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html" target="_blank" rel="noopener noreferrer">Official MySQL documentation</a></li><li><a href="https://www.postgresql.org/docs/8.3/backup-dump.html" target="_blank" rel="noopener noreferrer">Official PostgreSQL documentation</a></li><li><a href="https://etcd.io/docs/latest/op-guide/recovery/" target="_blank" rel="noopener noreferrer">Official etcd documentation</a></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-embedded-etcd-datastore">Backup and Restore with Embedded etcd Datastore<a href="#backup-and-restore-with-embedded-etcd-datastore" class="hash-link" aria-label="Direct link to Backup and Restore with Embedded etcd Datastore" title="Direct link to Backup and Restore with Embedded etcd Datastore">​</a></h2><p>See the <a href="/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> command documentation</a> for information on performing backup and restore operations on the embedded etcd datastore.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Cluster Datastore</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/ha-embedded"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#backup-and-restore-with-sqlite" class="table-of-contents__link toc-highlight">Backup and Restore with SQLite</a></li><li><a href="#backup-and-restore-with-external-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with External Datastore</a></li><li><a href="#backup-and-restore-with-embedded-etcd-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with Embedded etcd Datastore</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/datastore/cluster-loadbalancer.html b/datastore/cluster-loadbalancer.html
index 7fc7571eb..49242fef4 100644
--- a/datastore/cluster-loadbalancer.html
+++ b/datastore/cluster-loadbalancer.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Cluster Load Balancer | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/cluster-loadbalancer"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Cluster Load Balancer | K3s"><meta data-rh="true" name="description" content="This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster&#x27;s server nodes. Two examples are provided: Nginx and HAProxy."><meta data-rh="true" property="og:description" content="This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster&#x27;s server nodes. Two examples are provided: Nginx and HAProxy."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/cluster-loadbalancer"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Cluster Load Balancer | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/cluster-loadbalancer"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Cluster Load Balancer | K3s"><meta data-rh="true" name="description" content="This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster&#x27;s server nodes. Two examples are provided: Nginx and HAProxy."><meta data-rh="true" property="og:description" content="This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster&#x27;s server nodes. Two examples are provided: Nginx and HAProxy."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/cluster-loadbalancer"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Cluster Load Balancer</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Cluster Load Balancer</h1></header><p>This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster&#x27;s server nodes. Two examples are provided: Nginx and HAProxy.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>External load-balancers should not be confused with the embedded ServiceLB, which is an embedded controller that allows for use of Kubernetes LoadBalancer Services without deploying a third-party load-balancer controller. For more details, see <a href="/networking#service-load-balancer">Service Load Balancer</a>. </p><p>External load-balancers can be used to provide a fixed registration address for registering nodes, or for external access to the Kubernetes API Server. For exposing LoadBalancer Services, external load-balancers can be used alongside or instead of ServiceLB, but in most cases, replacement load-balancer controllers such as MetalLB or Kube-VIP are a better choice.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="Direct link to Prerequisites" title="Direct link to Prerequisites">​</a></h2><p>All nodes in this example are running Ubuntu 20.04.</p><p>For both examples, assume that a <a href="/datastore/ha-embedded">HA K3s cluster with embedded etcd</a> has been installed on 3 nodes.</p><p>Each k3s server is configured with:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># /etc/rancher/k3s/config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> lb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">gd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 10.10.10.100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The nodes have hostnames and IPs of: </p><ul><li>server-1: <code>10.10.10.50</code></li><li>server-2: <code>10.10.10.51</code></li><li>server-3: <code>10.10.10.52</code></li></ul><p>Two additional nodes for load balancing are configured with hostnames and IPs of:</p><ul><li>lb-1: <code>10.10.10.98</code></li><li>lb-2: <code>10.10.10.99</code></li></ul><p>Three additional nodes exist with hostnames and IPs of:</p><ul><li>agent-1: <code>10.10.10.101</code></li><li>agent-2: <code>10.10.10.102</code></li><li>agent-3: <code>10.10.10.103</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="setup-load-balancer">Setup Load Balancer<a href="#setup-load-balancer" class="hash-link" aria-label="Direct link to Setup Load Balancer" title="Direct link to Setup Load Balancer">​</a></h2><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">HAProxy</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Nginx</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p><a href="http://www.haproxy.org/" target="_blank" rel="noopener noreferrer">HAProxy</a> is an open source option that provides a TCP load balancer. It also supports HA for the load balancer itself, ensuring redundancy at all levels. See <a href="http://docs.haproxy.org/2.8/intro.html" target="_blank" rel="noopener noreferrer">HAProxy Documentation</a> for more info.</p><p>Additionally, we will use KeepAlived to generate a virtual IP (VIP) that will be used to access the cluster. See <a href="https://www.keepalived.org/manpage.html" target="_blank" rel="noopener noreferrer">KeepAlived Documentation</a> for more info.</p><p>1) Install HAProxy and KeepAlived:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">apt-get</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> haproxy keepalived</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>2) Add the following to <code>/etc/haproxy/haproxy.cfg</code> on lb-1 and lb-2:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">frontend k3s-frontend</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    bind *:6443</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    mode tcp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    option tcplog</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    default_backend k3s-backend</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">backend k3s-backend</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    mode tcp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    option tcp-check</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    balance roundrobin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    default-server inter 10s downinter 5s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server server-1 10.10.10.50:6443 check</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server server-2 10.10.10.51:6443 check</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server server-3 10.10.10.52:6443 check</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>3) Add the following to <code>/etc/keepalived/keepalived.conf</code> on lb-1 and lb-2:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vrrp_script chk_haproxy {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    script &#x27;killall -0 haproxy&#x27; # faster than pidof</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    interval 2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vrrp_instance haproxy-vip {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   interface eth1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    state &lt;STATE&gt; # MASTER on lb-1, BACKUP on lb-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    priority &lt;PRIORITY&gt; # 200 on lb-1, 100 on lb-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    virtual_router_id 51</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    virtual_ipaddress {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        10.10.10.100/24</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    track_script {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        chk_haproxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>6) Restart HAProxy and KeepAlived on lb-1 and lb-2:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart haproxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart keepalived</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>5) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">lb-cluster-gd </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://10.10.10.100:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You can now use <code>kubectl</code> from server node to interact with the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">root@server-1 $ k3s kubectl get nodes -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME       STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-1    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      32s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-2    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      20s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-3    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      9s      v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-1   Ready    control-plane,etcd,master   4m22s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-3   Ready    control-plane,etcd,master   3m12s   v1.27.3+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><h2 class="anchor anchorWithStickyNavbar_LWe7" id="nginx-load-balancer">Nginx Load Balancer<a href="#nginx-load-balancer" class="hash-link" aria-label="Direct link to Nginx Load Balancer" title="Direct link to Nginx Load Balancer">​</a></h2><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>Nginx does not natively support a High Availability (HA) configuration. If setting up an HA cluster, having a single load balancer in front of K3s will reintroduce a single point of failure.</p></div></div><p><a href="http://nginx.org/" target="_blank" rel="noopener noreferrer">Nginx Open Source</a> provides a TCP load balancer. See <a href="https://nginx.org/en/docs/http/load_balancing.html" target="_blank" rel="noopener noreferrer">Using nginx as HTTP load balancer</a> for more info.</p><p>1) Create a <code>nginx.conf</code> file on lb-1 with the following contents:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">events {}</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">stream {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  upstream k3s_servers {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server 10.10.10.50:6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server 10.10.10.51:6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server 10.10.10.52:6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  server {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    listen 6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    proxy_pass k3s_servers;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>2) Run the Nginx load balancer on lb-1:</p><p>Using docker:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> run -d --restart unless-stopped </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    -v </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">PWD</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/nginx.conf:/etc/nginx/nginx.conf </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    -p </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain">:6443 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    nginx:stable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or <a href="https://docs.nginx.com/nginx/admin-guide/installing-nginx/installing-nginx-open-source/" target="_blank" rel="noopener noreferrer">install nginx</a> and then run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cp</span><span class="token plain"> nginx.conf /etc/nginx/nginx.conf</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start nginx</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>3) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">lb-cluster-gd </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://10.10.10.99:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You can now use <code>kubectl</code> from server node to interact with the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">root@server1 $ k3s kubectl get nodes -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME       STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-1    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      30s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-2    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      22s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-3    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      13s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-1   Ready    control-plane,etcd,master   4m49s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-3   Ready    control-plane,etcd,master   3m16s   v1.27.3+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/ha"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">High Availability External DB</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cluster-access"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Cluster Access</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#setup-load-balancer" class="table-of-contents__link toc-highlight">Setup Load Balancer</a></li><li><a href="#nginx-load-balancer" class="table-of-contents__link toc-highlight">Nginx Load Balancer</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Cluster Load Balancer</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Cluster Load Balancer</h1></header><p>This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster&#x27;s server nodes. Two examples are provided: Nginx and HAProxy.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>External load-balancers should not be confused with the embedded ServiceLB, which is an embedded controller that allows for use of Kubernetes LoadBalancer Services without deploying a third-party load-balancer controller. For more details, see <a href="/networking#service-load-balancer">Service Load Balancer</a>. </p><p>External load-balancers can be used to provide a fixed registration address for registering nodes, or for external access to the Kubernetes API Server. For exposing LoadBalancer Services, external load-balancers can be used alongside or instead of ServiceLB, but in most cases, replacement load-balancer controllers such as MetalLB or Kube-VIP are a better choice.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="Direct link to Prerequisites" title="Direct link to Prerequisites">​</a></h2><p>All nodes in this example are running Ubuntu 20.04.</p><p>For both examples, assume that a <a href="/datastore/ha-embedded">HA K3s cluster with embedded etcd</a> has been installed on 3 nodes.</p><p>Each k3s server is configured with:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># /etc/rancher/k3s/config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> lb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">gd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 10.10.10.100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The nodes have hostnames and IPs of: </p><ul><li>server-1: <code>10.10.10.50</code></li><li>server-2: <code>10.10.10.51</code></li><li>server-3: <code>10.10.10.52</code></li></ul><p>Two additional nodes for load balancing are configured with hostnames and IPs of:</p><ul><li>lb-1: <code>10.10.10.98</code></li><li>lb-2: <code>10.10.10.99</code></li></ul><p>Three additional nodes exist with hostnames and IPs of:</p><ul><li>agent-1: <code>10.10.10.101</code></li><li>agent-2: <code>10.10.10.102</code></li><li>agent-3: <code>10.10.10.103</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="setup-load-balancer">Setup Load Balancer<a href="#setup-load-balancer" class="hash-link" aria-label="Direct link to Setup Load Balancer" title="Direct link to Setup Load Balancer">​</a></h2><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">HAProxy</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Nginx</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p><a href="http://www.haproxy.org/" target="_blank" rel="noopener noreferrer">HAProxy</a> is an open source option that provides a TCP load balancer. It also supports HA for the load balancer itself, ensuring redundancy at all levels. See <a href="http://docs.haproxy.org/2.8/intro.html" target="_blank" rel="noopener noreferrer">HAProxy Documentation</a> for more info.</p><p>Additionally, we will use KeepAlived to generate a virtual IP (VIP) that will be used to access the cluster. See <a href="https://www.keepalived.org/manpage.html" target="_blank" rel="noopener noreferrer">KeepAlived Documentation</a> for more info.</p><p>1) Install HAProxy and KeepAlived:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">apt-get</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> haproxy keepalived</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>2) Add the following to <code>/etc/haproxy/haproxy.cfg</code> on lb-1 and lb-2:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">frontend k3s-frontend</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    bind *:6443</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    mode tcp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    option tcplog</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    default_backend k3s-backend</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">backend k3s-backend</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    mode tcp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    option tcp-check</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    balance roundrobin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    default-server inter 10s downinter 5s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server server-1 10.10.10.50:6443 check</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server server-2 10.10.10.51:6443 check</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server server-3 10.10.10.52:6443 check</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>3) Add the following to <code>/etc/keepalived/keepalived.conf</code> on lb-1 and lb-2:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vrrp_script chk_haproxy {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    script &#x27;killall -0 haproxy&#x27; # faster than pidof</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    interval 2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vrrp_instance haproxy-vip {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   interface eth1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    state &lt;STATE&gt; # MASTER on lb-1, BACKUP on lb-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    priority &lt;PRIORITY&gt; # 200 on lb-1, 100 on lb-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    virtual_router_id 51</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    virtual_ipaddress {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        10.10.10.100/24</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    track_script {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        chk_haproxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>6) Restart HAProxy and KeepAlived on lb-1 and lb-2:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart haproxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart keepalived</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>5) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">lb-cluster-gd </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://10.10.10.100:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You can now use <code>kubectl</code> from server node to interact with the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">root@server-1 $ k3s kubectl get nodes -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME       STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-1    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      32s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-2    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      20s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-3    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      9s      v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-1   Ready    control-plane,etcd,master   4m22s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-3   Ready    control-plane,etcd,master   3m12s   v1.27.3+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><h2 class="anchor anchorWithStickyNavbar_LWe7" id="nginx-load-balancer">Nginx Load Balancer<a href="#nginx-load-balancer" class="hash-link" aria-label="Direct link to Nginx Load Balancer" title="Direct link to Nginx Load Balancer">​</a></h2><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>Nginx does not natively support a High Availability (HA) configuration. If setting up an HA cluster, having a single load balancer in front of K3s will reintroduce a single point of failure.</p></div></div><p><a href="http://nginx.org/" target="_blank" rel="noopener noreferrer">Nginx Open Source</a> provides a TCP load balancer. See <a href="https://nginx.org/en/docs/http/load_balancing.html" target="_blank" rel="noopener noreferrer">Using nginx as HTTP load balancer</a> for more info.</p><p>1) Create a <code>nginx.conf</code> file on lb-1 with the following contents:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">events {}</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">stream {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  upstream k3s_servers {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server 10.10.10.50:6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server 10.10.10.51:6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server 10.10.10.52:6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  server {</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    listen 6443;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    proxy_pass k3s_servers;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  }</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>2) Run the Nginx load balancer on lb-1:</p><p>Using docker:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> run -d --restart unless-stopped </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    -v </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">PWD</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/nginx.conf:/etc/nginx/nginx.conf </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    -p </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain">:6443 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    nginx:stable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or <a href="https://docs.nginx.com/nginx/admin-guide/installing-nginx/installing-nginx-open-source/" target="_blank" rel="noopener noreferrer">install nginx</a> and then run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cp</span><span class="token plain"> nginx.conf /etc/nginx/nginx.conf</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start nginx</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>3) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">lb-cluster-gd </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://10.10.10.99:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You can now use <code>kubectl</code> from server node to interact with the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">root@server1 $ k3s kubectl get nodes -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME       STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-1    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      30s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-2    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      22s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">agent-3    Ready    </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">none</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">                      13s     v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-1   Ready    control-plane,etcd,master   4m49s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-2   Ready    control-plane,etcd,master   3m58s   v1.27.3+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server-3   Ready    control-plane,etcd,master   3m16s   v1.27.3+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/ha"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">High Availability External DB</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cluster-access"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Cluster Access</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#setup-load-balancer" class="table-of-contents__link toc-highlight">Setup Load Balancer</a></li><li><a href="#nginx-load-balancer" class="table-of-contents__link toc-highlight">Nginx Load Balancer</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/datastore/ha-embedded.html b/datastore/ha-embedded.html
index 97272653f..bdb11ce9f 100644
--- a/datastore/ha-embedded.html
+++ b/datastore/ha-embedded.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">High Availability Embedded etcd | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/ha-embedded"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability Embedded etcd | K3s"><meta data-rh="true" name="description" content="Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards."><meta data-rh="true" property="og:description" content="Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/ha-embedded"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha-embedded" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha-embedded" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">High Availability Embedded etcd | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/ha-embedded"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability Embedded etcd | K3s"><meta data-rh="true" name="description" content="Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards."><meta data-rh="true" property="og:description" content="Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/ha-embedded"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha-embedded" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha-embedded" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability Embedded etcd</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability Embedded etcd</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.</p></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>HA embedded etcd cluster must be comprised of an odd number of server nodes for etcd to maintain quorum. For a cluster with n servers, quorum is (n/2)+1. For any odd-sized cluster, adding one node will always increase the number of nodes necessary for quorum. Although adding a node to an odd-sized cluster appears better since there are more machines, the fault tolerance is worse since exactly the same number of nodes may fail without losing quorum but there are more nodes that can fail.</p></div></div><p>An HA K3s cluster with embedded etcd is composed of:</p><ul><li>Three or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services, as well as host the embedded etcd datastore.</li><li>Optional: Zero or more <strong>agent nodes</strong> that are designated to run your apps and services</li><li>Optional: A <strong>fixed registration address</strong> for agent nodes to register with the cluster</li></ul><p>To get started, first launch a server node with the <code>cluster-init</code> flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-san</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">FIXED_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Optional, needed if using a fixed registration address</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After launching the first server, join the second and third servers to the cluster using the shared secret:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">1</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-san</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">FIXED_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Optional, needed if using a fixed registration address</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Check to see that the second and third servers are now part of the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME        STATUS   ROLES                       AGE   VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server1     Ready    control-plane,etcd,master   28m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server2     Ready    control-plane,etcd,master   13m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server3     Ready    control-plane,etcd,master   10m   vX.Y.Z</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Now you have a highly available control plane. Any successfully clustered servers can be used in the <code>--server</code> argument to join additional server and agent nodes. Joining additional agent nodes to the cluster follows the same procedure as servers:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few config flags that must be the same in all server nodes:         </p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="existing-single-node-clusters">Existing single-node clusters<a href="#existing-single-node-clusters" class="hash-link" aria-label="Direct link to Existing single-node clusters" title="Direct link to Existing single-node clusters">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.2%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.2+k3s1</a></p></div></div><p>If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the <code>--cluster-init</code> flag. Once you&#x27;ve done that, you&#x27;ll be able to add additional instances as described above.</p><p>If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (<code>--cluster-init</code>, <code>--server</code>, <code>--datastore-endpoint</code>, etc) are ignored.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/backup-restore"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Backup and Restore</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/ha"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">High Availability External DB</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#existing-single-node-clusters" class="table-of-contents__link toc-highlight">Existing single-node clusters</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability Embedded etcd</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability Embedded etcd</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.</p></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>HA embedded etcd cluster must be comprised of an odd number of server nodes for etcd to maintain quorum. For a cluster with n servers, quorum is (n/2)+1. For any odd-sized cluster, adding one node will always increase the number of nodes necessary for quorum. Although adding a node to an odd-sized cluster appears better since there are more machines, the fault tolerance is worse since exactly the same number of nodes may fail without losing quorum but there are more nodes that can fail.</p></div></div><p>An HA K3s cluster with embedded etcd is composed of:</p><ul><li>Three or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services, as well as host the embedded etcd datastore.</li><li>Optional: Zero or more <strong>agent nodes</strong> that are designated to run your apps and services</li><li>Optional: A <strong>fixed registration address</strong> for agent nodes to register with the cluster</li></ul><p>To get started, first launch a server node with the <code>cluster-init</code> flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-san</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">FIXED_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Optional, needed if using a fixed registration address</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After launching the first server, join the second and third servers to the cluster using the shared secret:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">1</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-san</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">FIXED_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Optional, needed if using a fixed registration address</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Check to see that the second and third servers are now part of the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME        STATUS   ROLES                       AGE   VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server1     Ready    control-plane,etcd,master   28m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server2     Ready    control-plane,etcd,master   13m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server3     Ready    control-plane,etcd,master   10m   vX.Y.Z</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Now you have a highly available control plane. Any successfully clustered servers can be used in the <code>--server</code> argument to join additional server and agent nodes. Joining additional agent nodes to the cluster follows the same procedure as servers:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few config flags that must be the same in all server nodes:         </p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="existing-single-node-clusters">Existing single-node clusters<a href="#existing-single-node-clusters" class="hash-link" aria-label="Direct link to Existing single-node clusters" title="Direct link to Existing single-node clusters">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.2%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.2+k3s1</a></p></div></div><p>If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the <code>--cluster-init</code> flag. Once you&#x27;ve done that, you&#x27;ll be able to add additional instances as described above.</p><p>If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (<code>--cluster-init</code>, <code>--server</code>, <code>--datastore-endpoint</code>, etc) are ignored.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/backup-restore"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Backup and Restore</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/ha"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">High Availability External DB</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#existing-single-node-clusters" class="table-of-contents__link toc-highlight">Existing single-node clusters</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/datastore/ha.html b/datastore/ha.html
index c71ec8fba..dd2257801 100644
--- a/datastore/ha.html
+++ b/datastore/ha.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">High Availability External DB | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/ha"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability External DB | K3s"><meta data-rh="true" name="description" content="This section describes how to install a high-availability K3s cluster with an external database."><meta data-rh="true" property="og:description" content="This section describes how to install a high-availability K3s cluster with an external database."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/ha"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">High Availability External DB | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/datastore/ha"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability External DB | K3s"><meta data-rh="true" name="description" content="This section describes how to install a high-availability K3s cluster with an external database."><meta data-rh="true" property="og:description" content="This section describes how to install a high-availability K3s cluster with an external database."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/datastore/ha"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability External DB</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability External DB</h1></header><p>This section describes how to install a high-availability K3s cluster with an external database.</p><p>Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is composed of:</p><ul><li>Two or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>An <strong>external datastore</strong> (as opposed to the embedded SQLite datastore used in single-server setups)</li><li>Optional: Zero or more <strong>agent nodes</strong> that are designated to run your apps and services</li><li>Optional: A <strong>fixed registration address</strong> for agent nodes to register with the cluster</li></ul><p>For more details on how these components work together, refer to the <a href="/architecture#high-availability-k3s">architecture section.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="installation-outline">Installation Outline<a href="#installation-outline" class="hash-link" aria-label="Direct link to Installation Outline" title="Direct link to Installation Outline">​</a></h2><p>Setting up an HA cluster requires the following steps:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="1-create-an-external-datastore">1. Create an External Datastore<a href="#1-create-an-external-datastore" class="hash-link" aria-label="Direct link to 1. Create an External Datastore" title="Direct link to 1. Create an External Datastore">​</a></h3><p>You will first need to create an external datastore for the cluster. See the <a href="/datastore">Cluster Datastore Options</a> documentation for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="2-launch-server-nodes">2. Launch Server Nodes<a href="#2-launch-server-nodes" class="hash-link" aria-label="Direct link to 2. Launch Server Nodes" title="Direct link to 2. Launch Server Nodes">​</a></h3><p>K3s requires two or more server nodes for this HA configuration. See the <a href="/installation/requirements">Requirements</a> guide for minimum machine requirements.</p><p>When running the <code>k3s server</code> command on these nodes, you must set the <code>datastore-endpoint</code> parameter so that K3s knows how to connect to the external datastore. The <code>token</code> parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use.</p><p>For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and <a href="/cli/server#cluster-options">set a token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">FIXED_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Optional, needed if using a fixed registration address</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The datastore endpoint format differs based on the database type. For details, refer to the section on <a href="/datastore#datastore-endpoint-format-and-functionality">datastore endpoint formats.</a></p><p>To configure TLS certificates when launching server nodes, refer to the <a href="/datastore#external-datastore-configuration-parameters">datastore configuration guide.</a></p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The same installation options available to single-server installs are also available for high-availability installs. For more details, see the <a href="/installation/configuration">Configuration Options</a> documentation.</p></div></div><p>By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The <code>node-taint</code> parameter will allow you to configure nodes with taints, for example <code>--node-taint CriticalAddonsOnly=true:NoExecute</code>.</p><p>Once you&#x27;ve launched the <code>k3s server</code> process on all server nodes, ensure that the cluster has come up properly with <code>k3s kubectl get nodes</code>. You should see your server nodes in the Ready state.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="3-optional-join-additional-server-nodes">3. Optional: Join Additional Server Nodes<a href="#3-optional-join-additional-server-nodes" class="hash-link" aria-label="Direct link to 3. Optional: Join Additional Server Nodes" title="Direct link to 3. Optional: Join Additional Server Nodes">​</a></h3><p>The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used.</p><p>If the first server node was started without the <code>--token</code> CLI flag or <code>K3S_TOKEN</code> variable, the token value can be retrieved from any server already joined to the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional server nodes can then be added <a href="/cli/server#cluster-options">using the token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few config flags that must be the same in all server nodes:</p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="4-optional-configure-a-fixed-registration-address">4. Optional: Configure a Fixed Registration Address<a href="#4-optional-configure-a-fixed-registration-address" class="hash-link" aria-label="Direct link to 4. Optional: Configure a Fixed Registration Address" title="Direct link to 4. Optional: Configure a Fixed Registration Address">​</a></h3><p>Agent nodes need a URL to register against. This can be the IP or hostname of any server node, but in many cases those may change over time. For example, if running your cluster in a cloud that supports scaling groups, nodes may be created and destroyed over time, changing to different IPs from the initial set of server nodes. It would be best to have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:</p><ul><li>A layer-4 (TCP) load balancer</li><li>Round-robin DNS</li><li>Virtual or elastic IP addresses</li></ul><p>See <a href="/datastore/cluster-loadbalancer">Cluster Loadbalancer</a> for example configurations.</p><p>This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> file to point to it instead of a specific node. </p><p>To avoid certificate errors in such a configuration, you should configure the server with the <code>--tls-san YOUR_IP_OR_HOSTNAME_HERE</code> option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="5-optional-join-agent-nodes">5. Optional: Join Agent Nodes<a href="#5-optional-join-agent-nodes" class="hash-link" aria-label="Direct link to 5. Optional: Join Agent Nodes" title="Direct link to 5. Optional: Join Agent Nodes">​</a></h3><p>Because K3s server nodes are schedulable by default, agent nodes are not required for a HA K3s cluster. However, you may wish to have dedicated agent nodes to run your apps and services.</p><p>Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to (either one of the server IPs or a fixed registration address) and the token it should use.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET k3s agent --server https://server-or-fixed-registration-address:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/ha-embedded"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Cluster Load Balancer</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#installation-outline" class="table-of-contents__link toc-highlight">Installation Outline</a><ul><li><a href="#1-create-an-external-datastore" class="table-of-contents__link toc-highlight">1. Create an External Datastore</a></li><li><a href="#2-launch-server-nodes" class="table-of-contents__link toc-highlight">2. Launch Server Nodes</a></li><li><a href="#3-optional-join-additional-server-nodes" class="table-of-contents__link toc-highlight">3. Optional: Join Additional Server Nodes</a></li><li><a href="#4-optional-configure-a-fixed-registration-address" class="table-of-contents__link toc-highlight">4. Optional: Configure a Fixed Registration Address</a></li><li><a href="#5-optional-join-agent-nodes" class="table-of-contents__link toc-highlight">5. Optional: Join Agent Nodes</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/datastore/cluster-loadbalancer">Cluster Load Balancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/datastore"><span itemprop="name">Cluster Datastore</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability External DB</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability External DB</h1></header><p>This section describes how to install a high-availability K3s cluster with an external database.</p><p>Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is composed of:</p><ul><li>Two or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>An <strong>external datastore</strong> (as opposed to the embedded SQLite datastore used in single-server setups)</li><li>Optional: Zero or more <strong>agent nodes</strong> that are designated to run your apps and services</li><li>Optional: A <strong>fixed registration address</strong> for agent nodes to register with the cluster</li></ul><p>For more details on how these components work together, refer to the <a href="/architecture#high-availability-k3s">architecture section.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="installation-outline">Installation Outline<a href="#installation-outline" class="hash-link" aria-label="Direct link to Installation Outline" title="Direct link to Installation Outline">​</a></h2><p>Setting up an HA cluster requires the following steps:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="1-create-an-external-datastore">1. Create an External Datastore<a href="#1-create-an-external-datastore" class="hash-link" aria-label="Direct link to 1. Create an External Datastore" title="Direct link to 1. Create an External Datastore">​</a></h3><p>You will first need to create an external datastore for the cluster. See the <a href="/datastore">Cluster Datastore Options</a> documentation for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="2-launch-server-nodes">2. Launch Server Nodes<a href="#2-launch-server-nodes" class="hash-link" aria-label="Direct link to 2. Launch Server Nodes" title="Direct link to 2. Launch Server Nodes">​</a></h3><p>K3s requires two or more server nodes for this HA configuration. See the <a href="/installation/requirements">Requirements</a> guide for minimum machine requirements.</p><p>When running the <code>k3s server</code> command on these nodes, you must set the <code>datastore-endpoint</code> parameter so that K3s knows how to connect to the external datastore. The <code>token</code> parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use.</p><p>For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and <a href="/cli/server#cluster-options">set a token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">FIXED_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Optional, needed if using a fixed registration address</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The datastore endpoint format differs based on the database type. For details, refer to the section on <a href="/datastore#datastore-endpoint-format-and-functionality">datastore endpoint formats.</a></p><p>To configure TLS certificates when launching server nodes, refer to the <a href="/datastore#external-datastore-configuration-parameters">datastore configuration guide.</a></p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The same installation options available to single-server installs are also available for high-availability installs. For more details, see the <a href="/installation/configuration">Configuration Options</a> documentation.</p></div></div><p>By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The <code>node-taint</code> parameter will allow you to configure nodes with taints, for example <code>--node-taint CriticalAddonsOnly=true:NoExecute</code>.</p><p>Once you&#x27;ve launched the <code>k3s server</code> process on all server nodes, ensure that the cluster has come up properly with <code>k3s kubectl get nodes</code>. You should see your server nodes in the Ready state.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="3-optional-join-additional-server-nodes">3. Optional: Join Additional Server Nodes<a href="#3-optional-join-additional-server-nodes" class="hash-link" aria-label="Direct link to 3. Optional: Join Additional Server Nodes" title="Direct link to 3. Optional: Join Additional Server Nodes">​</a></h3><p>The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used.</p><p>If the first server node was started without the <code>--token</code> CLI flag or <code>K3S_TOKEN</code> variable, the token value can be retrieved from any server already joined to the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional server nodes can then be added <a href="/cli/server#cluster-options">using the token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few config flags that must be the same in all server nodes:</p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="4-optional-configure-a-fixed-registration-address">4. Optional: Configure a Fixed Registration Address<a href="#4-optional-configure-a-fixed-registration-address" class="hash-link" aria-label="Direct link to 4. Optional: Configure a Fixed Registration Address" title="Direct link to 4. Optional: Configure a Fixed Registration Address">​</a></h3><p>Agent nodes need a URL to register against. This can be the IP or hostname of any server node, but in many cases those may change over time. For example, if running your cluster in a cloud that supports scaling groups, nodes may be created and destroyed over time, changing to different IPs from the initial set of server nodes. It would be best to have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:</p><ul><li>A layer-4 (TCP) load balancer</li><li>Round-robin DNS</li><li>Virtual or elastic IP addresses</li></ul><p>See <a href="/datastore/cluster-loadbalancer">Cluster Loadbalancer</a> for example configurations.</p><p>This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> file to point to it instead of a specific node. </p><p>To avoid certificate errors in such a configuration, you should configure the server with the <code>--tls-san YOUR_IP_OR_HOSTNAME_HERE</code> option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="5-optional-join-agent-nodes">5. Optional: Join Agent Nodes<a href="#5-optional-join-agent-nodes" class="hash-link" aria-label="Direct link to 5. Optional: Join Agent Nodes" title="Direct link to 5. Optional: Join Agent Nodes">​</a></h3><p>Because K3s server nodes are schedulable by default, agent nodes are not required for a HA K3s cluster. However, you may wish to have dedicated agent nodes to run your apps and services.</p><p>Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to (either one of the server IPs or a fixed registration address) and the token it should use.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET k3s agent --server https://server-or-fixed-registration-address:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/datastore/ha-embedded"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Cluster Load Balancer</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#installation-outline" class="table-of-contents__link toc-highlight">Installation Outline</a><ul><li><a href="#1-create-an-external-datastore" class="table-of-contents__link toc-highlight">1. Create an External Datastore</a></li><li><a href="#2-launch-server-nodes" class="table-of-contents__link toc-highlight">2. Launch Server Nodes</a></li><li><a href="#3-optional-join-additional-server-nodes" class="table-of-contents__link toc-highlight">3. Optional: Join Additional Server Nodes</a></li><li><a href="#4-optional-configure-a-fixed-registration-address" class="table-of-contents__link toc-highlight">4. Optional: Configure a Fixed Registration Address</a></li><li><a href="#5-optional-join-agent-nodes" class="table-of-contents__link toc-highlight">5. Optional: Join Agent Nodes</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/faq.html b/faq.html
index 9cd0e8474..fd58f643d 100644
--- a/faq.html
+++ b/faq.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">FAQ | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/faq"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="FAQ | K3s"><meta data-rh="true" name="description" content="The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s."><meta data-rh="true" property="og:description" content="The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/faq"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/faq" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/faq" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">FAQ | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/faq"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="FAQ | K3s"><meta data-rh="true" name="description" content="The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s."><meta data-rh="true" property="og:description" content="The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/faq"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/faq" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/faq" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/faq" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">FAQ</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>FAQ</h1></header><p>The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="is-k3s-a-suitable-replacement-for-kubernetes">Is K3s a suitable replacement for Kubernetes?<a href="#is-k3s-a-suitable-replacement-for-kubernetes" class="hash-link" aria-label="Direct link to Is K3s a suitable replacement for Kubernetes?" title="Direct link to Is K3s a suitable replacement for Kubernetes?">​</a></h3><p>K3s is a CNCF-certified Kubernetes distribution, and can do everything required of a standard Kubernetes cluster. It is just a more lightweight version. See the <a href="/">main</a> docs page for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-can-i-use-my-own-ingress-instead-of-traefik">How can I use my own Ingress instead of Traefik?<a href="#how-can-i-use-my-own-ingress-instead-of-traefik" class="hash-link" aria-label="Direct link to How can I use my own Ingress instead of Traefik?" title="Direct link to How can I use my own Ingress instead of Traefik?">​</a></h3><p>Simply start K3s server with <code>--disable=traefik</code> and deploy your ingress.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="does-k3s-support-windows">Does K3s support Windows?<a href="#does-k3s-support-windows" class="hash-link" aria-label="Direct link to Does K3s support Windows?" title="Direct link to Does K3s support Windows?">​</a></h3><p>At this time K3s does not natively support Windows, however we are open to the idea in the future.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-can-i-build-from-source">How can I build from source?<a href="#how-can-i-build-from-source" class="hash-link" aria-label="Direct link to How can I build from source?" title="Direct link to How can I build from source?">​</a></h3><p>Please reference the K3s <a href="https://github.com/k3s-io/k3s/blob/master/BUILDING.md" target="_blank" rel="noopener noreferrer">BUILDING.md</a> with instructions.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="where-are-the-k3s-logs">Where are the K3s logs?<a href="#where-are-the-k3s-logs" class="hash-link" aria-label="Direct link to Where are the K3s logs?" title="Direct link to Where are the K3s logs?">​</a></h3><p>The location of K3s logs will vary depending on how you run K3s and the node&#x27;s OS.</p><ul><li>When run from the command line, logs are sent to stdout and stderr.</li><li>When running under openrc, logs will be created at <code>/var/log/k3s.log</code>.</li><li>When running under Systemd, logs will be sent to Journald and can be viewed using <code>journalctl -u k3s</code>.</li><li>Pod logs can be found at <code>/var/log/pods</code>.</li><li>Containerd logs can be found at <code>/var/lib/rancher/k3s/agent/containerd/containerd.log</code>.</li></ul><p>You can generate more detailed logs by using the <code>--debug</code> flag when starting K3s (or <code>debug: true</code> in the configuration file).</p><p>Kubernetes uses a logging framework known as <code>klog</code>, which uses a single logging configuration for all components within a process.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/faq" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">FAQ</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>FAQ</h1></header><p>The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="is-k3s-a-suitable-replacement-for-kubernetes">Is K3s a suitable replacement for Kubernetes?<a href="#is-k3s-a-suitable-replacement-for-kubernetes" class="hash-link" aria-label="Direct link to Is K3s a suitable replacement for Kubernetes?" title="Direct link to Is K3s a suitable replacement for Kubernetes?">​</a></h3><p>K3s is a CNCF-certified Kubernetes distribution, and can do everything required of a standard Kubernetes cluster. It is just a more lightweight version. See the <a href="/">main</a> docs page for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-can-i-use-my-own-ingress-instead-of-traefik">How can I use my own Ingress instead of Traefik?<a href="#how-can-i-use-my-own-ingress-instead-of-traefik" class="hash-link" aria-label="Direct link to How can I use my own Ingress instead of Traefik?" title="Direct link to How can I use my own Ingress instead of Traefik?">​</a></h3><p>Simply start K3s server with <code>--disable=traefik</code> and deploy your ingress.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="does-k3s-support-windows">Does K3s support Windows?<a href="#does-k3s-support-windows" class="hash-link" aria-label="Direct link to Does K3s support Windows?" title="Direct link to Does K3s support Windows?">​</a></h3><p>At this time K3s does not natively support Windows, however we are open to the idea in the future.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-can-i-build-from-source">How can I build from source?<a href="#how-can-i-build-from-source" class="hash-link" aria-label="Direct link to How can I build from source?" title="Direct link to How can I build from source?">​</a></h3><p>Please reference the K3s <a href="https://github.com/k3s-io/k3s/blob/master/BUILDING.md" target="_blank" rel="noopener noreferrer">BUILDING.md</a> with instructions.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="where-are-the-k3s-logs">Where are the K3s logs?<a href="#where-are-the-k3s-logs" class="hash-link" aria-label="Direct link to Where are the K3s logs?" title="Direct link to Where are the K3s logs?">​</a></h3><p>The location of K3s logs will vary depending on how you run K3s and the node&#x27;s OS.</p><ul><li>When run from the command line, logs are sent to stdout and stderr.</li><li>When running under openrc, logs will be created at <code>/var/log/k3s.log</code>.</li><li>When running under Systemd, logs will be sent to Journald and can be viewed using <code>journalctl -u k3s</code>.</li><li>Pod logs can be found at <code>/var/log/pods</code>.</li><li>Containerd logs can be found at <code>/var/lib/rancher/k3s/agent/containerd/containerd.log</code>.</li></ul><p>You can generate more detailed logs by using the <code>--debug</code> flag when starting K3s (or <code>debug: true</code> in the configuration file).</p><p>Kubernetes uses a logging framework known as <code>klog</code>, which uses a single logging configuration for all components within a process.
 Since K3s runs all Kubernetes components within a single process, it is not possible to configure different log levels or destinations for individual Kubernetes components.
-Use of the <code>-v=&lt;level&gt;</code> or <code>--vmodule=&lt;module&gt;=&lt;level&gt;</code> component args will likely not have the desired effect. </p><p>See <a href="/advanced#additional-logging-sources">Additional Logging Sources</a> for even more log options.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="can-i-run-k3s-in-docker">Can I run K3s in Docker?<a href="#can-i-run-k3s-in-docker" class="hash-link" aria-label="Direct link to Can I run K3s in Docker?" title="Direct link to Can I run K3s in Docker?">​</a></h3><p>Yes, there are multiple ways to run K3s in Docker. See <a href="/advanced#running-k3s-in-docker">Advanced Options</a> for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="what-is-the-difference-between-k3s-server-and-agent-tokens">What is the difference between K3s Server and Agent Tokens?<a href="#what-is-the-difference-between-k3s-server-and-agent-tokens" class="hash-link" aria-label="Direct link to What is the difference between K3s Server and Agent Tokens?" title="Direct link to What is the difference between K3s Server and Agent Tokens?">​</a></h3><p>For more information on managing K3s join tokens, see the <a href="/cli/token"><code>k3s token</code> command documentation</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-compatible-are-different-versions-of-k3s">How compatible are different versions of K3s?<a href="#how-compatible-are-different-versions-of-k3s" class="hash-link" aria-label="Direct link to How compatible are different versions of K3s?" title="Direct link to How compatible are different versions of K3s?">​</a></h3><p>In general, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies.</p><p>In short, servers can be newer than agents, but agents cannot be newer than servers.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="im-having-an-issue-where-can-i-get-help">I&#x27;m having an issue, where can I get help?<a href="#im-having-an-issue-where-can-i-get-help" class="hash-link" aria-label="Direct link to I&#x27;m having an issue, where can I get help?" title="Direct link to I&#x27;m having an issue, where can I get help?">​</a></h3><p>If you are having an issue with deploying K3s, you should:</p><p>1) Check the <a href="/known-issues">Known Issues</a> page.</p><p>2) Check that you have resolved any <a href="/advanced#additional-os-preparations">Additional OS Preparation</a>. Run <code>k3s check-config</code> and ensure that it passes.</p><p>3) Search the K3s <a href="https://github.com/k3s-io/k3s/issues" target="_blank" rel="noopener noreferrer">Issues</a> and <a href="https://github.com/k3s-io/k3s/discussions" target="_blank" rel="noopener noreferrer">Discussions</a> for one that matches your problem.</p><p>4) Join the <a href="https://slack.rancher.io/" target="_blank" rel="noopener noreferrer">Rancher Slack</a> K3s channel to get help.</p><p>5) Submit a <a href="https://github.com/k3s-io/k3s/issues/new/choose" target="_blank" rel="noopener noreferrer">New Issue</a> on the K3s Github describing your setup and the issue you are experiencing.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/advanced"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Advanced Options / Configuration</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">CLI Tools</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#is-k3s-a-suitable-replacement-for-kubernetes" class="table-of-contents__link toc-highlight">Is K3s a suitable replacement for Kubernetes?</a></li><li><a href="#how-can-i-use-my-own-ingress-instead-of-traefik" class="table-of-contents__link toc-highlight">How can I use my own Ingress instead of Traefik?</a></li><li><a href="#does-k3s-support-windows" class="table-of-contents__link toc-highlight">Does K3s support Windows?</a></li><li><a href="#how-can-i-build-from-source" class="table-of-contents__link toc-highlight">How can I build from source?</a></li><li><a href="#where-are-the-k3s-logs" class="table-of-contents__link toc-highlight">Where are the K3s logs?</a></li><li><a href="#can-i-run-k3s-in-docker" class="table-of-contents__link toc-highlight">Can I run K3s in Docker?</a></li><li><a href="#what-is-the-difference-between-k3s-server-and-agent-tokens" class="table-of-contents__link toc-highlight">What is the difference between K3s Server and Agent Tokens?</a></li><li><a href="#how-compatible-are-different-versions-of-k3s" class="table-of-contents__link toc-highlight">How compatible are different versions of K3s?</a></li><li><a href="#im-having-an-issue-where-can-i-get-help" class="table-of-contents__link toc-highlight">I&#39;m having an issue, where can I get help?</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+Use of the <code>-v=&lt;level&gt;</code> or <code>--vmodule=&lt;module&gt;=&lt;level&gt;</code> component args will likely not have the desired effect. </p><p>See <a href="/advanced#additional-logging-sources">Additional Logging Sources</a> for even more log options.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="can-i-run-k3s-in-docker">Can I run K3s in Docker?<a href="#can-i-run-k3s-in-docker" class="hash-link" aria-label="Direct link to Can I run K3s in Docker?" title="Direct link to Can I run K3s in Docker?">​</a></h3><p>Yes, there are multiple ways to run K3s in Docker. See <a href="/advanced#running-k3s-in-docker">Advanced Options</a> for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="what-is-the-difference-between-k3s-server-and-agent-tokens">What is the difference between K3s Server and Agent Tokens?<a href="#what-is-the-difference-between-k3s-server-and-agent-tokens" class="hash-link" aria-label="Direct link to What is the difference between K3s Server and Agent Tokens?" title="Direct link to What is the difference between K3s Server and Agent Tokens?">​</a></h3><p>For more information on managing K3s join tokens, see the <a href="/cli/token"><code>k3s token</code> command documentation</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-compatible-are-different-versions-of-k3s">How compatible are different versions of K3s?<a href="#how-compatible-are-different-versions-of-k3s" class="hash-link" aria-label="Direct link to How compatible are different versions of K3s?" title="Direct link to How compatible are different versions of K3s?">​</a></h3><p>In general, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies.</p><p>In short, servers can be newer than agents, but agents cannot be newer than servers.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="im-having-an-issue-where-can-i-get-help">I&#x27;m having an issue, where can I get help?<a href="#im-having-an-issue-where-can-i-get-help" class="hash-link" aria-label="Direct link to I&#x27;m having an issue, where can I get help?" title="Direct link to I&#x27;m having an issue, where can I get help?">​</a></h3><p>If you are having an issue with deploying K3s, you should:</p><p>1) Check the <a href="/known-issues">Known Issues</a> page.</p><p>2) Check that you have resolved any <a href="/advanced#additional-os-preparations">Additional OS Preparation</a>. Run <code>k3s check-config</code> and ensure that it passes.</p><p>3) Search the K3s <a href="https://github.com/k3s-io/k3s/issues" target="_blank" rel="noopener noreferrer">Issues</a> and <a href="https://github.com/k3s-io/k3s/discussions" target="_blank" rel="noopener noreferrer">Discussions</a> for one that matches your problem.</p><p>4) Join the <a href="https://slack.rancher.io/" target="_blank" rel="noopener noreferrer">Rancher Slack</a> K3s channel to get help.</p><p>5) Submit a <a href="https://github.com/k3s-io/k3s/issues/new/choose" target="_blank" rel="noopener noreferrer">New Issue</a> on the K3s Github describing your setup and the issue you are experiencing.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/advanced"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Advanced Options / Configuration</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/cli"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">CLI Tools</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#is-k3s-a-suitable-replacement-for-kubernetes" class="table-of-contents__link toc-highlight">Is K3s a suitable replacement for Kubernetes?</a></li><li><a href="#how-can-i-use-my-own-ingress-instead-of-traefik" class="table-of-contents__link toc-highlight">How can I use my own Ingress instead of Traefik?</a></li><li><a href="#does-k3s-support-windows" class="table-of-contents__link toc-highlight">Does K3s support Windows?</a></li><li><a href="#how-can-i-build-from-source" class="table-of-contents__link toc-highlight">How can I build from source?</a></li><li><a href="#where-are-the-k3s-logs" class="table-of-contents__link toc-highlight">Where are the K3s logs?</a></li><li><a href="#can-i-run-k3s-in-docker" class="table-of-contents__link toc-highlight">Can I run K3s in Docker?</a></li><li><a href="#what-is-the-difference-between-k3s-server-and-agent-tokens" class="table-of-contents__link toc-highlight">What is the difference between K3s Server and Agent Tokens?</a></li><li><a href="#how-compatible-are-different-versions-of-k3s" class="table-of-contents__link toc-highlight">How compatible are different versions of K3s?</a></li><li><a href="#im-having-an-issue-where-can-i-get-help" class="table-of-contents__link toc-highlight">I&#39;m having an issue, where can I get help?</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/helm.html b/helm.html
index ae9b5c7e7..0ac85dfcd 100644
--- a/helm.html
+++ b/helm.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Helm | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/helm"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Helm | K3s"><meta data-rh="true" name="description" content="Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at https://helm.sh/docs/intro/quickstart/."><meta data-rh="true" property="og:description" content="Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at https://helm.sh/docs/intro/quickstart/."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/helm"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/helm" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/helm" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Helm | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/helm"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Helm | K3s"><meta data-rh="true" name="description" content="Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at https://helm.sh/docs/intro/quickstart/."><meta data-rh="true" property="og:description" content="Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at https://helm.sh/docs/intro/quickstart/."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/helm"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/helm" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/helm" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/helm" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Helm</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Helm</h1></header><p>Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at <a href="https://helm.sh/docs/intro/quickstart/" target="_blank" rel="noopener noreferrer">https://helm.sh/docs/intro/quickstart/</a>.</p><p>K3s does not require any special configuration to support Helm. Just be sure you have properly set the kubeconfig path as per the <a href="/cluster-access">cluster access</a> documentation. </p><p>K3s includes a <a href="https://github.com/k3s-io/helm-controller/" target="_blank" rel="noopener noreferrer">Helm Controller</a> that manages installing, upgrading/reconfiguring, and uninstalling Helm charts using a HelmChart Custom Resource Definition (CRD). Paired with <a href="/installation/packaged-components">auto-deploying AddOn manifests</a>, installing a Helm chart on your cluster can be automated by creating a single file on disk.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-the-helm-controller">Using the Helm Controller<a href="#using-the-helm-controller" class="hash-link" aria-label="Direct link to Using the Helm Controller" title="Direct link to Using the Helm Controller">​</a></h3><p>The <a href="https://github.com/k3s-io/helm-controller#helm-controller" target="_blank" rel="noopener noreferrer">HelmChart Custom Resource</a> captures most of the options you would normally pass to the <code>helm</code> command-line tool. Here&#x27;s an example of how you might deploy Apache from the Bitnami chart repository, overriding some of the default chart values. Note that the HelmChart resource itself is in the <code>kube-system</code> namespace, but the chart&#x27;s resources will be deployed to the <code>web</code> namespace, which is created in the same manifest. This can be useful if you want to keep your HelmChart resources separated from the the resources they deploy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChart</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">repo</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//charts.bitnami.com/bitnami</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">chart</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">targetNamespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">service</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">type</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterIP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">hostname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> www.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="helmchart-field-definitions">HelmChart Field Definitions<a href="#helmchart-field-definitions" class="hash-link" aria-label="Direct link to HelmChart Field Definitions" title="Direct link to HelmChart Field Definitions">​</a></h4><table><thead><tr><th>Field</th><th>Default</th><th>Description</th><th>Helm Argument / Flag Equivalent</th></tr></thead><tbody><tr><td>metadata.name</td><td></td><td>Helm Chart name</td><td>NAME</td></tr><tr><td>spec.chart</td><td></td><td>Helm Chart name in repository, or complete HTTPS URL to chart archive (.tgz)</td><td>CHART</td></tr><tr><td>spec.targetNamespace</td><td>default</td><td>Helm Chart target namespace</td><td><code>--namespace</code></td></tr><tr><td>spec.version</td><td></td><td>Helm Chart version (when installing from repository)</td><td><code>--version</code></td></tr><tr><td>spec.repo</td><td></td><td>Helm Chart repository URL</td><td><code>--repo</code></td></tr><tr><td>spec.repoCA</td><td></td><td>Specify the certificates of HTTPS-enabled servers</td><td><code>--ca-file</code></td></tr><tr><td>spec.helmVersion</td><td>v3</td><td>Helm version to use (<code>v2</code> or <code>v3</code>)</td><td></td></tr><tr><td>spec.bootstrap</td><td>False</td><td>Set to True if this chart is needed to bootstrap the cluster (Cloud Controller Manager, etc)</td><td></td></tr><tr><td>spec.set</td><td></td><td>Override simple default Chart values. These take precedence over options set via valuesContent.</td><td><code>--set</code> / <code>--set-string</code></td></tr><tr><td>spec.jobImage</td><td></td><td>Specify the image to use when installing the helm chart. E.g. rancher/klipper-helm:v0.3.0 .</td><td></td></tr><tr><td>spec.timeout</td><td>300</td><td>Timeout in seconds for Helm operations</td><td><code>--timeout</code></td></tr><tr><td>spec.failurePolicy</td><td>reinstall</td><td>Set to <code>abort</code> which case the Helm operation is aborted, pending manual intervention by the operator.</td><td></td></tr><tr><td>spec.valuesContent</td><td></td><td>Override complex default Chart values via YAML file content</td><td><code>--values</code></td></tr><tr><td>spec.chartContent</td><td></td><td>Base64-encoded chart archive .tgz - overrides spec.chart</td><td>CHART</td></tr></tbody></table><p>Content placed in <code>/var/lib/rancher/k3s/server/static/</code> can be accessed anonymously via the Kubernetes APIServer from within the cluster. This URL can be templated using the special variable <code>%{KUBERNETES_API}%</code> in the <code>spec.chart</code> field. For example, the packaged Traefik component loads its chart from <code>https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz</code>.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The <code>name</code> field should follow the Helm chart naming conventions. Refer to the <a href="https://helm.sh/docs/chart_best_practices/conventions/#chart-names" target="_blank" rel="noopener noreferrer">Helm Best Practicies documentation</a> to learn more.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customizing-packaged-components-with-helmchartconfig">Customizing Packaged Components with HelmChartConfig<a href="#customizing-packaged-components-with-helmchartconfig" class="hash-link" aria-label="Direct link to Customizing Packaged Components with HelmChartConfig" title="Direct link to Customizing Packaged Components with HelmChartConfig">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>To allow overriding values for packaged components that are deployed as HelmCharts (such as Traefik), K3s supports customizing deployments via a HelmChartConfig resources. The HelmChartConfig resource must match the name and namespace of its corresponding HelmChart, and it supports providing additional <code>valuesContent</code>, which is passed to the <code>helm</code> command as an additional value file.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>HelmChart <code>spec.set</code> values override HelmChart and HelmChartConfig <code>spec.valuesContent</code> settings.</p></div></div><p>For example, to customize the packaged Traefik ingress configuration, you can create a file named <code>/var/lib/rancher/k3s/server/manifests/traefik-config.yaml</code> and populate it with the following content:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChartConfig</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">tag</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v2.8.5</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">forwardedHeaders</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">trustedIPs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> 10.0.0.0/8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ssl</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">permanentRedirect</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="migrating-from-helm-v2">Migrating from Helm v2<a href="#migrating-from-helm-v2" class="hash-link" aria-label="Direct link to Migrating from Helm v2" title="Direct link to Migrating from Helm v2">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>As of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1" target="_blank" rel="noopener noreferrer">v1.17.0+k3s.1</a> Helm v3 is supported and used by default.</p></div></div><p>K3s can handle either Helm v2 or Helm v3. If you wish to migrate to Helm v3, <a href="https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/" target="_blank" rel="noopener noreferrer">this</a> blog post by Helm explains how to use a plugin to successfully migrate. Refer to the official Helm 3 documentation <a href="https://helm.sh/docs/" target="_blank" rel="noopener noreferrer">here</a> for more information. Just be sure you have properly set your kubeconfig as per the section about <a href="/cluster-access">cluster access.</a></p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Helm 3 no longer requires Tiller and the <code>helm init</code> command. Refer to the official documentation for details.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/networking"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Networking</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/advanced"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Advanced Options / Configuration</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#using-the-helm-controller" class="table-of-contents__link toc-highlight">Using the Helm Controller</a></li><li><a href="#customizing-packaged-components-with-helmchartconfig" class="table-of-contents__link toc-highlight">Customizing Packaged Components with HelmChartConfig</a></li><li><a href="#migrating-from-helm-v2" class="table-of-contents__link toc-highlight">Migrating from Helm v2</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/helm" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Helm</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Helm</h1></header><p>Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at <a href="https://helm.sh/docs/intro/quickstart/" target="_blank" rel="noopener noreferrer">https://helm.sh/docs/intro/quickstart/</a>.</p><p>K3s does not require any special configuration to support Helm. Just be sure you have properly set the kubeconfig path as per the <a href="/cluster-access">cluster access</a> documentation. </p><p>K3s includes a <a href="https://github.com/k3s-io/helm-controller/" target="_blank" rel="noopener noreferrer">Helm Controller</a> that manages installing, upgrading/reconfiguring, and uninstalling Helm charts using a HelmChart Custom Resource Definition (CRD). Paired with <a href="/installation/packaged-components">auto-deploying AddOn manifests</a>, installing a Helm chart on your cluster can be automated by creating a single file on disk.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-the-helm-controller">Using the Helm Controller<a href="#using-the-helm-controller" class="hash-link" aria-label="Direct link to Using the Helm Controller" title="Direct link to Using the Helm Controller">​</a></h3><p>The <a href="https://github.com/k3s-io/helm-controller#helm-controller" target="_blank" rel="noopener noreferrer">HelmChart Custom Resource</a> captures most of the options you would normally pass to the <code>helm</code> command-line tool. Here&#x27;s an example of how you might deploy Apache from the Bitnami chart repository, overriding some of the default chart values. Note that the HelmChart resource itself is in the <code>kube-system</code> namespace, but the chart&#x27;s resources will be deployed to the <code>web</code> namespace, which is created in the same manifest. This can be useful if you want to keep your HelmChart resources separated from the the resources they deploy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChart</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">repo</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//charts.bitnami.com/bitnami</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">chart</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">targetNamespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">service</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">type</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterIP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">hostname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> www.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="helmchart-field-definitions">HelmChart Field Definitions<a href="#helmchart-field-definitions" class="hash-link" aria-label="Direct link to HelmChart Field Definitions" title="Direct link to HelmChart Field Definitions">​</a></h4><table><thead><tr><th>Field</th><th>Default</th><th>Description</th><th>Helm Argument / Flag Equivalent</th></tr></thead><tbody><tr><td>metadata.name</td><td></td><td>Helm Chart name</td><td>NAME</td></tr><tr><td>spec.chart</td><td></td><td>Helm Chart name in repository, or complete HTTPS URL to chart archive (.tgz)</td><td>CHART</td></tr><tr><td>spec.targetNamespace</td><td>default</td><td>Helm Chart target namespace</td><td><code>--namespace</code></td></tr><tr><td>spec.version</td><td></td><td>Helm Chart version (when installing from repository)</td><td><code>--version</code></td></tr><tr><td>spec.repo</td><td></td><td>Helm Chart repository URL</td><td><code>--repo</code></td></tr><tr><td>spec.repoCA</td><td></td><td>Specify the certificates of HTTPS-enabled servers</td><td><code>--ca-file</code></td></tr><tr><td>spec.helmVersion</td><td>v3</td><td>Helm version to use (<code>v2</code> or <code>v3</code>)</td><td></td></tr><tr><td>spec.bootstrap</td><td>False</td><td>Set to True if this chart is needed to bootstrap the cluster (Cloud Controller Manager, etc)</td><td></td></tr><tr><td>spec.set</td><td></td><td>Override simple default Chart values. These take precedence over options set via valuesContent.</td><td><code>--set</code> / <code>--set-string</code></td></tr><tr><td>spec.jobImage</td><td></td><td>Specify the image to use when installing the helm chart. E.g. rancher/klipper-helm:v0.3.0 .</td><td></td></tr><tr><td>spec.timeout</td><td>300</td><td>Timeout in seconds for Helm operations</td><td><code>--timeout</code></td></tr><tr><td>spec.failurePolicy</td><td>reinstall</td><td>Set to <code>abort</code> which case the Helm operation is aborted, pending manual intervention by the operator.</td><td></td></tr><tr><td>spec.valuesContent</td><td></td><td>Override complex default Chart values via YAML file content</td><td><code>--values</code></td></tr><tr><td>spec.chartContent</td><td></td><td>Base64-encoded chart archive .tgz - overrides spec.chart</td><td>CHART</td></tr></tbody></table><p>Content placed in <code>/var/lib/rancher/k3s/server/static/</code> can be accessed anonymously via the Kubernetes APIServer from within the cluster. This URL can be templated using the special variable <code>%{KUBERNETES_API}%</code> in the <code>spec.chart</code> field. For example, the packaged Traefik component loads its chart from <code>https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz</code>.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The <code>name</code> field should follow the Helm chart naming conventions. Refer to the <a href="https://helm.sh/docs/chart_best_practices/conventions/#chart-names" target="_blank" rel="noopener noreferrer">Helm Best Practicies documentation</a> to learn more.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customizing-packaged-components-with-helmchartconfig">Customizing Packaged Components with HelmChartConfig<a href="#customizing-packaged-components-with-helmchartconfig" class="hash-link" aria-label="Direct link to Customizing Packaged Components with HelmChartConfig" title="Direct link to Customizing Packaged Components with HelmChartConfig">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>To allow overriding values for packaged components that are deployed as HelmCharts (such as Traefik), K3s supports customizing deployments via a HelmChartConfig resources. The HelmChartConfig resource must match the name and namespace of its corresponding HelmChart, and it supports providing additional <code>valuesContent</code>, which is passed to the <code>helm</code> command as an additional value file.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>HelmChart <code>spec.set</code> values override HelmChart and HelmChartConfig <code>spec.valuesContent</code> settings.</p></div></div><p>For example, to customize the packaged Traefik ingress configuration, you can create a file named <code>/var/lib/rancher/k3s/server/manifests/traefik-config.yaml</code> and populate it with the following content:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChartConfig</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">tag</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v2.8.5</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">forwardedHeaders</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">trustedIPs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> 10.0.0.0/8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ssl</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">permanentRedirect</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="migrating-from-helm-v2">Migrating from Helm v2<a href="#migrating-from-helm-v2" class="hash-link" aria-label="Direct link to Migrating from Helm v2" title="Direct link to Migrating from Helm v2">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>As of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1" target="_blank" rel="noopener noreferrer">v1.17.0+k3s.1</a> Helm v3 is supported and used by default.</p></div></div><p>K3s can handle either Helm v2 or Helm v3. If you wish to migrate to Helm v3, <a href="https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/" target="_blank" rel="noopener noreferrer">this</a> blog post by Helm explains how to use a plugin to successfully migrate. Refer to the official Helm 3 documentation <a href="https://helm.sh/docs/" target="_blank" rel="noopener noreferrer">here</a> for more information. Just be sure you have properly set your kubeconfig as per the section about <a href="/cluster-access">cluster access.</a></p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Helm 3 no longer requires Tiller and the <code>helm init</code> command. Refer to the official documentation for details.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/networking"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Networking</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/advanced"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Advanced Options / Configuration</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#using-the-helm-controller" class="table-of-contents__link toc-highlight">Using the Helm Controller</a></li><li><a href="#customizing-packaged-components-with-helmchartconfig" class="table-of-contents__link toc-highlight">Customizing Packaged Components with HelmChartConfig</a></li><li><a href="#migrating-from-helm-v2" class="table-of-contents__link toc-highlight">Migrating from Helm v2</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/index.html b/index.html
index 26c97c389..d3f64f53f 100644
--- a/index.html
+++ b/index.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">K3s - Lightweight Kubernetes | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="K3s - Lightweight Kubernetes | K3s"><meta data-rh="true" name="description" content="Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB."><meta data-rh="true" property="og:description" content="Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><script data-rh="true">function maybeInsertBanner(){window.__DOCUSAURUS_INSERT_BASEURL_BANNER&&insertBanner()}function insertBanner(){var n=document.getElementById("__docusaurus-base-url-issue-banner-container");if(n){n.innerHTML='\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">/</span>  (default value)</p>\n   <p>We suggest trying baseUrl = <span id="__docusaurus-base-url-issue-banner-suggestion-container" style="font-weight: bold; color: green;"></span></p>\n</div>\n';var e=document.getElementById("__docusaurus-base-url-issue-banner-suggestion-container"),s=window.location.pathname,r="/"===s.substr(-1)?s:s+"/";e.innerHTML=r}}window.__DOCUSAURUS_INSERT_BASEURL_BANNER=!0,document.addEventListener("DOMContentLoaded",maybeInsertBanner)</script><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">K3s - Lightweight Kubernetes | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="K3s - Lightweight Kubernetes | K3s"><meta data-rh="true" name="description" content="Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB."><meta data-rh="true" property="og:description" content="Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="x-default"><script data-rh="true">function maybeInsertBanner(){window.__DOCUSAURUS_INSERT_BASEURL_BANNER&&insertBanner()}function insertBanner(){var n=document.getElementById("__docusaurus-base-url-issue-banner-container");if(n){n.innerHTML='\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">/</span>  (default value)</p>\n   <p>We suggest trying baseUrl = <span id="__docusaurus-base-url-issue-banner-suggestion-container" style="font-weight: bold; color: green;"></span></p>\n</div>\n';var e=document.getElementById("__docusaurus-base-url-issue-banner-suggestion-container"),s=window.location.pathname,r="/"===s.substr(-1)?s:s+"/";e.innerHTML=r}}window.__DOCUSAURUS_INSERT_BASEURL_BANNER=!0,document.addEventListener("DOMContentLoaded",maybeInsertBanner)</script><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div id="__docusaurus-base-url-issue-banner-container"></div><div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">K3s - Lightweight Kubernetes</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>K3s - Lightweight Kubernetes</h1></header><p>Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB.</p><p>Great for:</p><ul><li>Edge</li><li>IoT</li><li>CI</li><li>Development</li><li>ARM</li><li>Embedding K8s</li><li>Situations where a PhD in K8s clusterology is infeasible</li></ul><h1>What is K3s?</h1><p>K3s is a fully compliant Kubernetes distribution with the following enhancements:</p><ul><li>Packaged as a single binary.</li><li>Lightweight storage backend based on sqlite3 as the default storage mechanism. etcd3, MySQL, Postgres are also available.</li><li>Wrapped in simple launcher that handles a lot of the complexity of TLS and options.</li><li>Secure by default with reasonable defaults for lightweight environments.</li><li>Simple but powerful &quot;batteries-included&quot; features have been added, such as: <ul><li>local storage provider </li><li>service load balancer</li><li>Helm controller</li><li>Traefik ingress controller.</li></ul></li><li>Operation of all Kubernetes control plane components is encapsulated in a single binary and process. This allows K3s to automate and manage complex cluster operations like distributing certificates.</li><li>External dependencies have been minimized (just a modern kernel and cgroup mounts needed). K3s packages the required dependencies, including:<ul><li>containerd</li><li>Flannel (CNI)</li><li>CoreDNS</li><li>Traefik (Ingress)</li><li>Klipper-lb (Service LB)</li><li>Embedded network policy controller</li><li>Embedded local-path-provisioner</li><li>Host utilities (iptables, socat, etc)</li></ul></li></ul><h1>What&#x27;s with the name?</h1><p>We wanted an installation of Kubernetes that was half the size in terms of memory footprint. Kubernetes is a 10-letter word stylized as K8s. So something half as big as Kubernetes would be a 5-letter word stylized as K3s. There is no long form of K3s and no official pronunciation.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/introduction.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--next" href="/architecture"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Architecture</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div id="__docusaurus-base-url-issue-banner-container"></div><div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">K3s - Lightweight Kubernetes</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>K3s - Lightweight Kubernetes</h1></header><p>Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB.</p><p>Great for:</p><ul><li>Edge</li><li>IoT</li><li>CI</li><li>Development</li><li>ARM</li><li>Embedding K8s</li><li>Situations where a PhD in K8s clusterology is infeasible</li></ul><h1>What is K3s?</h1><p>K3s is a fully compliant Kubernetes distribution with the following enhancements:</p><ul><li>Packaged as a single binary.</li><li>Lightweight storage backend based on sqlite3 as the default storage mechanism. etcd3, MySQL, Postgres are also available.</li><li>Wrapped in simple launcher that handles a lot of the complexity of TLS and options.</li><li>Secure by default with reasonable defaults for lightweight environments.</li><li>Simple but powerful &quot;batteries-included&quot; features have been added, such as: <ul><li>local storage provider </li><li>service load balancer</li><li>Helm controller</li><li>Traefik ingress controller.</li></ul></li><li>Operation of all Kubernetes control plane components is encapsulated in a single binary and process. This allows K3s to automate and manage complex cluster operations like distributing certificates.</li><li>External dependencies have been minimized (just a modern kernel and cgroup mounts needed). K3s packages the required dependencies, including:<ul><li>containerd</li><li>Flannel (CNI)</li><li>CoreDNS</li><li>Traefik (Ingress)</li><li>Klipper-lb (Service LB)</li><li>Embedded network policy controller</li><li>Embedded local-path-provisioner</li><li>Host utilities (iptables, socat, etc)</li></ul></li></ul><h1>What&#x27;s with the name?</h1><p>We wanted an installation of Kubernetes that was half the size in terms of memory footprint. Kubernetes is a 10-letter word stylized as K8s. So something half as big as Kubernetes would be a 5-letter word stylized as K3s. There is no long form of K3s and no official pronunciation.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/introduction.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--next" href="/architecture"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Architecture</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation.html b/installation.html
index d4b2c4371..dd8c49342 100644
--- a/installation.html
+++ b/installation.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Installation | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Installation | K3s"><meta data-rh="true" name="description" content="This section contains instructions for installing K3s in various environments. Please ensure you have met the Requirements before you begin installing K3s."><meta data-rh="true" property="og:description" content="This section contains instructions for installing K3s in various environments. Please ensure you have met the Requirements before you begin installing K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Installation | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Installation | K3s"><meta data-rh="true" name="description" content="This section contains instructions for installing K3s in various environments. Please ensure you have met the Requirements before you begin installing K3s."><meta data-rh="true" property="og:description" content="This section contains instructions for installing K3s in various environments. Please ensure you have met the Requirements before you begin installing K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Installation</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Installation</h1></header><p>This section contains instructions for installing K3s in various environments. Please ensure you have met the <a href="/installation/requirements">Requirements</a> before you begin installing K3s.</p><p><a href="/installation/configuration">Configuration Options</a> provides guidance on the options available to you when installing K3s.</p><p><a href="/installation/network-options">Network Options</a> provides guidance on the networking options available in k3s.</p><p><a href="/installation/airgap">Air-Gap Installation</a> details how to set up K3s in environments that do not have direct access to the Internet.</p><p><a href="/installation/server-roles">Managing Server Roles</a> details how to set up K3s with dedicated <code>control-plane</code> or <code>etcd</code> servers.</p><p><a href="/installation/packaged-components">Managing Packaged Components</a> details how to disable packaged components, or install your own using auto-deploying manifests.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/quick-start"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Quick-Start Guide</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/requirements"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Requirements</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Installation</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Installation</h1></header><p>This section contains instructions for installing K3s in various environments. Please ensure you have met the <a href="/installation/requirements">Requirements</a> before you begin installing K3s.</p><p><a href="/installation/configuration">Configuration Options</a> provides guidance on the options available to you when installing K3s.</p><p><a href="/installation/network-options">Network Options</a> provides guidance on the networking options available in k3s.</p><p><a href="/installation/airgap">Air-Gap Installation</a> details how to set up K3s in environments that do not have direct access to the Internet.</p><p><a href="/installation/server-roles">Managing Server Roles</a> details how to set up K3s with dedicated <code>control-plane</code> or <code>etcd</code> servers.</p><p><a href="/installation/packaged-components">Managing Packaged Components</a> details how to disable packaged components, or install your own using auto-deploying manifests.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/quick-start"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Quick-Start Guide</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/requirements"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Requirements</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/airgap.html b/installation/airgap.html
index 5f0596925..d5ba1a295 100644
--- a/installation/airgap.html
+++ b/installation/airgap.html
@@ -3,19 +3,19 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Air-Gap Install | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/airgap"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Air-Gap Install | K3s"><meta data-rh="true" name="description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><meta data-rh="true" property="og:description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/airgap"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/airgap" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/airgap" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Air-Gap Install | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/airgap"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Air-Gap Install | K3s"><meta data-rh="true" name="description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><meta data-rh="true" property="og:description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/airgap"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/airgap" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/airgap" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Air-Gap Install</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Air-Gap Install</h1></header><p>You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="private-registry-method">Private Registry Method<a href="#private-registry-method" class="hash-link" aria-label="Direct link to Private Registry Method" title="Direct link to Private Registry Method">​</a></h2><p>This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host.</p><p>If you have not yet set up a private Docker registry, refer to the official documentation <a href="https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry" target="_blank" rel="noopener noreferrer">here</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="create-the-registry-yaml">Create the Registry YAML<a href="#create-the-registry-yaml" class="hash-link" aria-label="Direct link to Create the Registry YAML" title="Direct link to Create the Registry YAML">​</a></h3><p>Follow the <a href="/installation/private-registry">Private Registry Configuration</a> guide to create and configure the registry.yaml file.</p><p>Once you have completed this, you may now go to the <a href="#install-k3s">Install K3s</a> section below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="manually-deploy-images-method">Manually Deploy Images Method<a href="#manually-deploy-images-method" class="hash-link" aria-label="Direct link to Manually Deploy Images Method" title="Direct link to Manually Deploy Images Method">​</a></h2><p>We are assuming you have created your nodes in your air-gap environment and use containerd as container runtime.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Air-Gap Install</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Air-Gap Install</h1></header><p>You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="private-registry-method">Private Registry Method<a href="#private-registry-method" class="hash-link" aria-label="Direct link to Private Registry Method" title="Direct link to Private Registry Method">​</a></h2><p>This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host.</p><p>If you have not yet set up a private Docker registry, refer to the official documentation <a href="https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry" target="_blank" rel="noopener noreferrer">here</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="create-the-registry-yaml">Create the Registry YAML<a href="#create-the-registry-yaml" class="hash-link" aria-label="Direct link to Create the Registry YAML" title="Direct link to Create the Registry YAML">​</a></h3><p>Follow the <a href="/installation/private-registry">Private Registry Configuration</a> guide to create and configure the registry.yaml file.</p><p>Once you have completed this, you may now go to the <a href="#install-k3s">Install K3s</a> section below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="manually-deploy-images-method">Manually Deploy Images Method<a href="#manually-deploy-images-method" class="hash-link" aria-label="Direct link to Manually Deploy Images Method" title="Direct link to Manually Deploy Images Method">​</a></h2><p>We are assuming you have created your nodes in your air-gap environment and use containerd as container runtime.
 This method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="prepare-the-images-directory-and-k3s-binary">Prepare the Images Directory and K3s Binary<a href="#prepare-the-images-directory-and-k3s-binary" class="hash-link" aria-label="Direct link to Prepare the Images Directory and K3s Binary" title="Direct link to Prepare the Images Directory and K3s Binary">​</a></h3><p>Obtain the images tar file for your architecture from the <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> page for the version of K3s you will be running.</p><p>Place the tar file in the <code>images</code> directory, for example:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p /var/lib/rancher/k3s/agent/images/</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cp</span><span class="token plain"> ./k3s-airgap-images-</span><span class="token variable" style="color:rgb(191, 199, 213)">$ARCH</span><span class="token plain">.tar /var/lib/rancher/k3s/agent/images/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Once you have completed this, you may now go to the <a href="#install-k3s">Install K3s</a> section below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="install-k3s">Install K3s<a href="#install-k3s" class="hash-link" aria-label="Direct link to Install K3s" title="Direct link to Install K3s">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="Direct link to Prerequisites" title="Direct link to Prerequisites">​</a></h3><ul><li>Before installing K3s, complete the <a href="#private-registry-method">Private Registry Method</a> or the <a href="#manually-deploy-images-method">Manually Deploy Images Method</a> above to prepopulate the images that K3s needs to install.</li><li>Download the K3s binary from the <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> page, matching the same version used to get the airgap images. Place the binary in <code>/usr/local/bin</code> on each air-gapped node and ensure it is executable.</li><li>Download the K3s install script at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">get.k3s.io</a>. Place the install script anywhere on each air-gapped node, and name it <code>install.sh</code>.</li><li>If your nodes do not have an interface with a default route, a default route must be configured; even a black-hole route via a dummy interface will suffice. K3s requires a default route in order to auto-detect the node&#x27;s primary IP, and for kube-proxy ClusterIP routing to function properly. To add a dummy route, do the following:<div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip link add dummy0 type dummy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip link set dummy0 up</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip addr add 169.254.255.254/31 dev dummy0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip route add default via 169.254.255.255 dev dummy0 metric 1000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ul><p>When running the K3s script with the <code>INSTALL_K3S_SKIP_DOWNLOAD</code> environment variable, K3s will use the local version of the script and binary.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="installing-k3s-in-an-air-gapped-environment">Installing K3s in an Air-Gapped Environment<a href="#installing-k3s-in-an-air-gapped-environment" class="hash-link" aria-label="Direct link to Installing K3s in an Air-Gapped Environment" title="Direct link to Installing K3s in an Air-Gapped Environment">​</a></h3><p>You can install K3s on one or more servers as described below.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single Server Configuration</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High Availability Configuration</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>To install K3s on a single server, simply do the following on the server node:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To add additional agents, do the following on each agent node: </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">YOUR_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The token from the server is typically found at <code>/var/lib/rancher/k3s/server/token</code>.</p></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>Reference the <a href="/datastore/ha">High Availability with an External DB</a> or <a href="/datastore/ha-embedded">High Availability with Embedded DB</a> guides. You will be tweaking install commands so you specify <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code> and run your install script locally instead of via curl. You will also utilize <code>INSTALL_K3S_EXEC=&#x27;args&#x27;</code> to supply any arguments to k3s.</p><p>For example, step two of the High Availability with an External DB guide mentions the following:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Instead, you would modify such examples like below:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;server --token=SECRET&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_DATASTORE_ENDPOINT</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;mysql://username:password@tcp(hostname:3306)/database-name&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>K3s additionally provides a <code>--resolv-conf</code> flag for kubelets, which may help with configuring DNS in air-gap networks.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading">Upgrading<a href="#upgrading" class="hash-link" aria-label="Direct link to Upgrading" title="Direct link to Upgrading">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="install-script-method">Install Script Method<a href="#install-script-method" class="hash-link" aria-label="Direct link to Install Script Method" title="Direct link to Install Script Method">​</a></h3><p>Upgrading an air-gap environment can be accomplished in the following manner:</p><ol><li>Download the new air-gap images (tar file) from the <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> page for the version of K3s you will be upgrading to. Place the tar in the <code>/var/lib/rancher/k3s/agent/images/</code> directory on each
 node. Delete the old tar file.</li><li>Copy and replace the old K3s binary in <code>/usr/local/bin</code> on each node. Copy over the install script at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> (as it is possible it has changed since the last release). Run the script again just as you had done in the past
-with the same environment variables.</li><li>Restart the K3s service (if not restarted automatically by installer).</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="automated-upgrades-method">Automated Upgrades Method<a href="#automated-upgrades-method" class="hash-link" aria-label="Direct link to Automated Upgrades Method" title="Direct link to Automated Upgrades Method">​</a></h3><p>K3s supports <a href="/upgrades/automated">automated upgrades</a>. To enable this in air-gapped environments, you must ensure the required images are available in your private registry.</p><p>You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the <code>+</code> in the K3s release with a <code>-</code> because Docker images do not support <code>+</code>.</p><p>You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller <a href="https://github.com/rancher/system-upgrade-controller/releases/latest" target="_blank" rel="noopener noreferrer">here</a> and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/system-upgrade-controller:v0.4.0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/kubectl:v0.17.0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the <a href="/upgrades/automated">automated upgrades</a> guide.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/private-registry"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Private Registry Configuration</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/server-roles"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Managing Server Roles</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#private-registry-method" class="table-of-contents__link toc-highlight">Private Registry Method</a><ul><li><a href="#create-the-registry-yaml" class="table-of-contents__link toc-highlight">Create the Registry YAML</a></li></ul></li><li><a href="#manually-deploy-images-method" class="table-of-contents__link toc-highlight">Manually Deploy Images Method</a><ul><li><a href="#prepare-the-images-directory-and-k3s-binary" class="table-of-contents__link toc-highlight">Prepare the Images Directory and K3s Binary</a></li></ul></li><li><a href="#install-k3s" class="table-of-contents__link toc-highlight">Install K3s</a><ul><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#installing-k3s-in-an-air-gapped-environment" class="table-of-contents__link toc-highlight">Installing K3s in an Air-Gapped Environment</a></li></ul></li><li><a href="#upgrading" class="table-of-contents__link toc-highlight">Upgrading</a><ul><li><a href="#install-script-method" class="table-of-contents__link toc-highlight">Install Script Method</a></li><li><a href="#automated-upgrades-method" class="table-of-contents__link toc-highlight">Automated Upgrades Method</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+with the same environment variables.</li><li>Restart the K3s service (if not restarted automatically by installer).</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="automated-upgrades-method">Automated Upgrades Method<a href="#automated-upgrades-method" class="hash-link" aria-label="Direct link to Automated Upgrades Method" title="Direct link to Automated Upgrades Method">​</a></h3><p>K3s supports <a href="/upgrades/automated">automated upgrades</a>. To enable this in air-gapped environments, you must ensure the required images are available in your private registry.</p><p>You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the <code>+</code> in the K3s release with a <code>-</code> because Docker images do not support <code>+</code>.</p><p>You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller <a href="https://github.com/rancher/system-upgrade-controller/releases/latest" target="_blank" rel="noopener noreferrer">here</a> and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/system-upgrade-controller:v0.4.0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/kubectl:v0.17.0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the <a href="/upgrades/automated">automated upgrades</a> guide.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/private-registry"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Private Registry Configuration</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/server-roles"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Managing Server Roles</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#private-registry-method" class="table-of-contents__link toc-highlight">Private Registry Method</a><ul><li><a href="#create-the-registry-yaml" class="table-of-contents__link toc-highlight">Create the Registry YAML</a></li></ul></li><li><a href="#manually-deploy-images-method" class="table-of-contents__link toc-highlight">Manually Deploy Images Method</a><ul><li><a href="#prepare-the-images-directory-and-k3s-binary" class="table-of-contents__link toc-highlight">Prepare the Images Directory and K3s Binary</a></li></ul></li><li><a href="#install-k3s" class="table-of-contents__link toc-highlight">Install K3s</a><ul><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#installing-k3s-in-an-air-gapped-environment" class="table-of-contents__link toc-highlight">Installing K3s in an Air-Gapped Environment</a></li></ul></li><li><a href="#upgrading" class="table-of-contents__link toc-highlight">Upgrading</a><ul><li><a href="#install-script-method" class="table-of-contents__link toc-highlight">Install Script Method</a></li><li><a href="#automated-upgrades-method" class="table-of-contents__link toc-highlight">Automated Upgrades Method</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/configuration.html b/installation/configuration.html
index a5cf787fd..71d1f6c73 100644
--- a/installation/configuration.html
+++ b/installation/configuration.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Configuration Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/configuration"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Configuration Options | K3s"><meta data-rh="true" name="description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><meta data-rh="true" property="og:description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/configuration"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/configuration" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/configuration" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Configuration Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/configuration"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Configuration Options | K3s"><meta data-rh="true" name="description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><meta data-rh="true" property="og:description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/configuration"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/configuration" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/configuration" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Configuration Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Configuration Options</h1></header><p>This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on <a href="/advanced">Advanced Options and Configuration</a> and the <a href="/cli/server">server</a> and <a href="/cli/agent">agent</a> command documentation for more in-depth coverage.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-with-install-script">Configuration with install script<a href="#configuration-with-install-script" class="hash-link" aria-label="Direct link to Configuration with install script" title="Direct link to Configuration with install script">​</a></h2><p>As mentioned in the <a href="/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>You can use a combination of <code>INSTALL_K3S_EXEC</code>, <code>K3S_</code> environment variables, and command flags to pass configuration to the service configuration.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Configuration Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Configuration Options</h1></header><p>This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on <a href="/advanced">Advanced Options and Configuration</a> and the <a href="/cli/server">server</a> and <a href="/cli/agent">agent</a> command documentation for more in-depth coverage.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-with-install-script">Configuration with install script<a href="#configuration-with-install-script" class="hash-link" aria-label="Direct link to Configuration with install script" title="Direct link to Configuration with install script">​</a></h2><p>As mentioned in the <a href="/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>You can use a combination of <code>INSTALL_K3S_EXEC</code>, <code>K3S_</code> environment variables, and command flags to pass configuration to the service configuration.
 The prefixed environment variables, <code>INSTALL_K3S_EXEC</code> value, and trailing shell arguments are all persisted into the service configuration.
 After installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options.</p><p>To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server --flannel-backend none&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --flannel-backend none</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># server is assumed below because there is no K3S_URL</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;--flannel-backend none --token 12345&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When registering an agent, the following commands all result in the same behavior:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent --server https://k3s.example.com --token mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --server https://k3s.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --token mypassword</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mypassword </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># agent is assumed because of K3S_URL</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For details on all environment variables, see <a href="/reference/env-variables">Environment Variables.</a></p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Note</div><div class="admonitionContent_S0QG"><p>If you set configuration when running the install script, but do not set it again when re-running the install script, the original values will be lost.</p><p>The contents of the <a href="#configuration-file">configuration file</a> are not managed by the install script.
 If you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-with-binary">Configuration with binary<a href="#configuration-with-binary" class="hash-link" aria-label="Direct link to Configuration with binary" title="Direct link to Configuration with binary">​</a></h2><p>As stated, the installation script is primarily concerned with configuring K3s to run as a service.<br>
@@ -18,10 +18,10 @@
 <!-- -->You can also use the <code>--help</code> flag to see a list of all available options, and their corresponding environment variables.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Matching Flags</div><div class="admonitionContent_S0QG"><p>It is important to match critical flags on your server nodes. For example, if you use the flag
 <code>--disable servicelb</code> or <code>--cluster-cidr=10.200.0.0/16</code> on your master node, but don&#x27;t set it on other server nodes, the nodes will fail to join. They will print errors such as:
 <code>failed to validate server configuration: critical configuration value mismatch.</code>
-See the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file">Configuration File<a href="#configuration-file" class="hash-link" aria-label="Direct link to Configuration File" title="Direct link to Configuration File">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file.</p><p>By default, values present in a YAML file located at <code>/etc/rancher/k3s/config.yaml</code> will be used on install.</p><p>An example of a basic <code>server</code> config file is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This is equivalent to the following CLI arguments:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --write-kubeconfig-mode </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain">             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as <code>true</code> or <code>false</code> in the YAML file.</p><p>It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as <code>--node-label</code>, the CLI arguments will overwrite all values in the list.</p><p>Finally, the location of the config file can be changed either through the CLI argument <code>--config FILE, -c FILE</code>, or the environment variable <code>$K3S_CONFIG_FILE</code>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="multiple-config-files">Multiple Config Files<a href="#multiple-config-files" class="hash-link" aria-label="Direct link to Multiple Config Files" title="Direct link to Multiple Config Files">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a></p></div></div><p>Multiple configuration files are supported. By default, configuration files are read from <code>/etc/rancher/k3s/config.yaml</code> and <code>/etc/rancher/k3s/config.yaml.d/*.yaml</code> in alphabetical order. </p><p>By default, the last value found for a given key will be used. A <code>+</code> can be appended to the key to append the value to the existing string or slice, instead of replacing it. All occurrences of this key in subsequent files will also require a <code>+</code> to prevent overwriting the accumulated value.</p><p>An example of multiple config files is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=bar</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> bar=baz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test1.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">600</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test2.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint+</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a final configuration of:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="putting-it-all-together">Putting it all together<a href="#putting-it-all-together" class="hash-link" aria-label="Direct link to Putting it all together" title="Direct link to Putting it all together">​</a></h2><p>All of the above options can be combined into a single example.</p><p>A <code>config.yaml</code> file is created at <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secret&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">debug</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then the installation script is run with a combination of environment variables and flags:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or if you have already installed the K3s Binary:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a server with:</p><ul><li>A kubeconfig file with permissions <code>644</code></li><li>Flannel backend set to <code>none</code></li><li>The token set to <code>secret</code></li><li>Debug logging enabled</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/requirements"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Requirements</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/network-options"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Network Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#configuration-with-install-script" class="table-of-contents__link toc-highlight">Configuration with install script</a></li><li><a href="#configuration-with-binary" class="table-of-contents__link toc-highlight">Configuration with binary</a></li><li><a href="#configuration-file" class="table-of-contents__link toc-highlight">Configuration File</a><ul><li><a href="#multiple-config-files" class="table-of-contents__link toc-highlight">Multiple Config Files</a></li></ul></li><li><a href="#putting-it-all-together" class="table-of-contents__link toc-highlight">Putting it all together</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+See the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file">Configuration File<a href="#configuration-file" class="hash-link" aria-label="Direct link to Configuration File" title="Direct link to Configuration File">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file.</p><p>By default, values present in a YAML file located at <code>/etc/rancher/k3s/config.yaml</code> will be used on install.</p><p>An example of a basic <code>server</code> config file is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This is equivalent to the following CLI arguments:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --write-kubeconfig-mode </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain">             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as <code>true</code> or <code>false</code> in the YAML file.</p><p>It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as <code>--node-label</code>, the CLI arguments will overwrite all values in the list.</p><p>Finally, the location of the config file can be changed either through the CLI argument <code>--config FILE, -c FILE</code>, or the environment variable <code>$K3S_CONFIG_FILE</code>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="multiple-config-files">Multiple Config Files<a href="#multiple-config-files" class="hash-link" aria-label="Direct link to Multiple Config Files" title="Direct link to Multiple Config Files">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a></p></div></div><p>Multiple configuration files are supported. By default, configuration files are read from <code>/etc/rancher/k3s/config.yaml</code> and <code>/etc/rancher/k3s/config.yaml.d/*.yaml</code> in alphabetical order. </p><p>By default, the last value found for a given key will be used. A <code>+</code> can be appended to the key to append the value to the existing string or slice, instead of replacing it. All occurrences of this key in subsequent files will also require a <code>+</code> to prevent overwriting the accumulated value.</p><p>An example of multiple config files is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=bar</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> bar=baz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test1.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">600</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test2.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint+</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a final configuration of:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="putting-it-all-together">Putting it all together<a href="#putting-it-all-together" class="hash-link" aria-label="Direct link to Putting it all together" title="Direct link to Putting it all together">​</a></h2><p>All of the above options can be combined into a single example.</p><p>A <code>config.yaml</code> file is created at <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secret&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">debug</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then the installation script is run with a combination of environment variables and flags:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or if you have already installed the K3s Binary:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a server with:</p><ul><li>A kubeconfig file with permissions <code>644</code></li><li>Flannel backend set to <code>none</code></li><li>The token set to <code>secret</code></li><li>Debug logging enabled</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/requirements"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Requirements</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/network-options"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Network Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#configuration-with-install-script" class="table-of-contents__link toc-highlight">Configuration with install script</a></li><li><a href="#configuration-with-binary" class="table-of-contents__link toc-highlight">Configuration with binary</a></li><li><a href="#configuration-file" class="table-of-contents__link toc-highlight">Configuration File</a><ul><li><a href="#multiple-config-files" class="table-of-contents__link toc-highlight">Multiple Config Files</a></li></ul></li><li><a href="#putting-it-all-together" class="table-of-contents__link toc-highlight">Putting it all together</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/kube-dashboard.html b/installation/kube-dashboard.html
index 609f9a8f7..a092d1a78 100644
--- a/installation/kube-dashboard.html
+++ b/installation/kube-dashboard.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Kubernetes Dashboard | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/kube-dashboard"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Kubernetes Dashboard | K3s"><meta data-rh="true" name="description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><meta data-rh="true" property="og:description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/kube-dashboard"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/kube-dashboard" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/kube-dashboard" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Kubernetes Dashboard | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/kube-dashboard"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Kubernetes Dashboard | K3s"><meta data-rh="true" name="description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><meta data-rh="true" property="og:description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/kube-dashboard"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/kube-dashboard" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/kube-dashboard" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Kubernetes Dashboard</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Kubernetes Dashboard</h1></header><p>This installation guide will help you to deploy and configure the <a href="https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/" target="_blank" rel="noopener noreferrer">Kubernetes Dashboard</a> on K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deploying-the-kubernetes-dashboard">Deploying the Kubernetes Dashboard<a href="#deploying-the-kubernetes-dashboard" class="hash-link" aria-label="Direct link to Deploying the Kubernetes Dashboard" title="Direct link to Deploying the Kubernetes Dashboard">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="dashboard-rbac-configuration">Dashboard RBAC Configuration<a href="#dashboard-rbac-configuration" class="hash-link" aria-label="Direct link to Dashboard RBAC Configuration" title="Direct link to Dashboard RBAC Configuration">​</a></h3><blockquote><p><strong>Important:</strong> The <code>admin-user</code> created in this guide will have administrative privileges in the Dashboard.</p></blockquote><p>Create the following resource manifest files:</p><p><code>dashboard.admin-user.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>dashboard.admin-user-role.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">admin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Deploy the <code>admin-user</code> configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="obtain-the-bearer-token">Obtain the Bearer Token<a href="#obtain-the-bearer-token" class="hash-link" aria-label="Direct link to Obtain the Bearer Token" title="Direct link to Obtain the Bearer Token">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.24 and newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.23 and older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard create token admin-user</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard describe secret admin-user-token </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;^token&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="local-access-to-the-dashboard">Local Access to the Dashboard<a href="#local-access-to-the-dashboard" class="hash-link" aria-label="Direct link to Local Access to the Dashboard" title="Direct link to Local Access to the Dashboard">​</a></h3><p>To access the Dashboard you must create a secure channel to your K3s cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl proxy</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The Dashboard is now accessible at:</p><ul><li>http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/</li><li><code>Sign In</code> with the <code>admin-user</code> Bearer Token</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-remote-access-to-the-dashboard">Advanced: Remote Access to the Dashboard<a href="#advanced-remote-access-to-the-dashboard" class="hash-link" aria-label="Direct link to Advanced: Remote Access to the Dashboard" title="Direct link to Advanced: Remote Access to the Dashboard">​</a></h4><p>Please see the Dashboard documentation: Using <a href="https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" target="_blank" rel="noopener noreferrer">Port Forwarding</a> to Access Applications in a Cluster.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading-the-dashboard">Upgrading the Dashboard<a href="#upgrading-the-dashboard" class="hash-link" aria-label="Direct link to Upgrading the Dashboard" title="Direct link to Upgrading the Dashboard">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deleting-the-dashboard-and-admin-user-configuration">Deleting the Dashboard and admin-user configuration<a href="#deleting-the-dashboard-and-admin-user-configuration" class="hash-link" aria-label="Direct link to Deleting the Dashboard and admin-user configuration" title="Direct link to Deleting the Dashboard and admin-user configuration">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrolebinding kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrole kubernetes-dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/packaged-components"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Managing Packaged Components</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/uninstall"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Uninstalling K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#deploying-the-kubernetes-dashboard" class="table-of-contents__link toc-highlight">Deploying the Kubernetes Dashboard</a></li><li><a href="#dashboard-rbac-configuration" class="table-of-contents__link toc-highlight">Dashboard RBAC Configuration</a></li><li><a href="#obtain-the-bearer-token" class="table-of-contents__link toc-highlight">Obtain the Bearer Token</a></li><li><a href="#local-access-to-the-dashboard" class="table-of-contents__link toc-highlight">Local Access to the Dashboard</a></li><li><a href="#upgrading-the-dashboard" class="table-of-contents__link toc-highlight">Upgrading the Dashboard</a></li><li><a href="#deleting-the-dashboard-and-admin-user-configuration" class="table-of-contents__link toc-highlight">Deleting the Dashboard and admin-user configuration</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Kubernetes Dashboard</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Kubernetes Dashboard</h1></header><p>This installation guide will help you to deploy and configure the <a href="https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/" target="_blank" rel="noopener noreferrer">Kubernetes Dashboard</a> on K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deploying-the-kubernetes-dashboard">Deploying the Kubernetes Dashboard<a href="#deploying-the-kubernetes-dashboard" class="hash-link" aria-label="Direct link to Deploying the Kubernetes Dashboard" title="Direct link to Deploying the Kubernetes Dashboard">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="dashboard-rbac-configuration">Dashboard RBAC Configuration<a href="#dashboard-rbac-configuration" class="hash-link" aria-label="Direct link to Dashboard RBAC Configuration" title="Direct link to Dashboard RBAC Configuration">​</a></h3><blockquote><p><strong>Important:</strong> The <code>admin-user</code> created in this guide will have administrative privileges in the Dashboard.</p></blockquote><p>Create the following resource manifest files:</p><p><code>dashboard.admin-user.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>dashboard.admin-user-role.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">admin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Deploy the <code>admin-user</code> configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="obtain-the-bearer-token">Obtain the Bearer Token<a href="#obtain-the-bearer-token" class="hash-link" aria-label="Direct link to Obtain the Bearer Token" title="Direct link to Obtain the Bearer Token">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.24 and newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.23 and older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard create token admin-user</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard describe secret admin-user-token </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;^token&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="local-access-to-the-dashboard">Local Access to the Dashboard<a href="#local-access-to-the-dashboard" class="hash-link" aria-label="Direct link to Local Access to the Dashboard" title="Direct link to Local Access to the Dashboard">​</a></h3><p>To access the Dashboard you must create a secure channel to your K3s cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl proxy</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The Dashboard is now accessible at:</p><ul><li>http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/</li><li><code>Sign In</code> with the <code>admin-user</code> Bearer Token</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-remote-access-to-the-dashboard">Advanced: Remote Access to the Dashboard<a href="#advanced-remote-access-to-the-dashboard" class="hash-link" aria-label="Direct link to Advanced: Remote Access to the Dashboard" title="Direct link to Advanced: Remote Access to the Dashboard">​</a></h4><p>Please see the Dashboard documentation: Using <a href="https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" target="_blank" rel="noopener noreferrer">Port Forwarding</a> to Access Applications in a Cluster.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading-the-dashboard">Upgrading the Dashboard<a href="#upgrading-the-dashboard" class="hash-link" aria-label="Direct link to Upgrading the Dashboard" title="Direct link to Upgrading the Dashboard">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deleting-the-dashboard-and-admin-user-configuration">Deleting the Dashboard and admin-user configuration<a href="#deleting-the-dashboard-and-admin-user-configuration" class="hash-link" aria-label="Direct link to Deleting the Dashboard and admin-user configuration" title="Direct link to Deleting the Dashboard and admin-user configuration">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrolebinding kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrole kubernetes-dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/packaged-components"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Managing Packaged Components</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/uninstall"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Uninstalling K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#deploying-the-kubernetes-dashboard" class="table-of-contents__link toc-highlight">Deploying the Kubernetes Dashboard</a></li><li><a href="#dashboard-rbac-configuration" class="table-of-contents__link toc-highlight">Dashboard RBAC Configuration</a></li><li><a href="#obtain-the-bearer-token" class="table-of-contents__link toc-highlight">Obtain the Bearer Token</a></li><li><a href="#local-access-to-the-dashboard" class="table-of-contents__link toc-highlight">Local Access to the Dashboard</a></li><li><a href="#upgrading-the-dashboard" class="table-of-contents__link toc-highlight">Upgrading the Dashboard</a></li><li><a href="#deleting-the-dashboard-and-admin-user-configuration" class="table-of-contents__link toc-highlight">Deleting the Dashboard and admin-user configuration</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/network-options.html b/installation/network-options.html
index f4237b8f1..56a152d6f 100644
--- a/installation/network-options.html
+++ b/installation/network-options.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Network Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/network-options"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Network Options | K3s"><meta data-rh="true" name="description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><meta data-rh="true" property="og:description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/network-options"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/network-options" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/network-options" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Network Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/network-options"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Network Options | K3s"><meta data-rh="true" name="description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><meta data-rh="true" property="og:description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/network-options"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/network-options" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/network-options" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Network Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Network Options</h1></header><p>This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.</p><blockquote><p><strong>Note:</strong> Please reference the <a href="/networking">Networking</a> page for information about CoreDNS, Traefik, and the Service LB.</p></blockquote><h2 class="anchor anchorWithStickyNavbar_LWe7" id="flannel-options">Flannel Options<a href="#flannel-options" class="hash-link" aria-label="Direct link to Flannel Options" title="Direct link to Flannel Options">​</a></h2><p><a href="https://github.com/flannel-io/flannel/blob/master/README.md" target="_blank" rel="noopener noreferrer">Flannel</a> is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin.</p><ul><li>Flannel options can only be set on server nodes, and must be identical on all servers in the cluster.</li><li>The default backend for Flannel is <code>vxlan</code>. To enable encryption, use the <code>wireguard-native</code> backend.</li><li>Using <code>vxlan</code> on Rasperry Pi with recent versions of Ubuntu requires <a href="/advanced#raspberry-pi">additional preparation</a>.</li><li>Using <code>wireguard-native</code> as the Flannel backend may require additional modules on some Linux distributions. Please see the <a href="https://www.wireguard.com/install/" target="_blank" rel="noopener noreferrer">WireGuard Install Guide</a> for details.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Network Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Network Options</h1></header><p>This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.</p><blockquote><p><strong>Note:</strong> Please reference the <a href="/networking">Networking</a> page for information about CoreDNS, Traefik, and the Service LB.</p></blockquote><h2 class="anchor anchorWithStickyNavbar_LWe7" id="flannel-options">Flannel Options<a href="#flannel-options" class="hash-link" aria-label="Direct link to Flannel Options" title="Direct link to Flannel Options">​</a></h2><p><a href="https://github.com/flannel-io/flannel/blob/master/README.md" target="_blank" rel="noopener noreferrer">Flannel</a> is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin.</p><ul><li>Flannel options can only be set on server nodes, and must be identical on all servers in the cluster.</li><li>The default backend for Flannel is <code>vxlan</code>. To enable encryption, use the <code>wireguard-native</code> backend.</li><li>Using <code>vxlan</code> on Rasperry Pi with recent versions of Ubuntu requires <a href="/advanced#raspberry-pi">additional preparation</a>.</li><li>Using <code>wireguard-native</code> as the Flannel backend may require additional modules on some Linux distributions. Please see the <a href="https://www.wireguard.com/install/" target="_blank" rel="noopener noreferrer">WireGuard Install Guide</a> for details.
 The WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system.
 You must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend.</li></ul><table><thead><tr><th>CLI Flag and Value</th><th>Description</th></tr></thead><tbody><tr><td><code>--flannel-ipv6-masq</code></td><td>Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than <code>none</code>.</td></tr><tr><td><code>--flannel-external-ip</code></td><td>Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node.</td></tr><tr><td><code>--flannel-backend=vxlan</code></td><td>Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi.</td></tr><tr><td><code>--flannel-backend=host-gw</code></td><td>Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster.</td></tr><tr><td><code>--flannel-backend=wireguard-native</code></td><td>Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules.</td></tr><tr><td><code>--flannel-backend=ipsec</code></td><td>Use strongSwan IPSec via the <code>swanctl</code> binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0)</td></tr><tr><td><code>--flannel-backend=wireguard</code></td><td>Use WireGuard via the <code>wg</code> binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0)</td></tr><tr><td><code>--flannel-backend=none</code></td><td>Disable Flannel entirely.</td></tr></tbody></table><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>K3s no longer includes strongSwan <code>swanctl</code> and <code>charon</code> binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the <code>ipsec</code> backend.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="migrating-from-wireguard-or-ipsec-to-wireguard-native">Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code><a href="#migrating-from-wireguard-or-ipsec-to-wireguard-native" class="hash-link" aria-label="Direct link to migrating-from-wireguard-or-ipsec-to-wireguard-native" title="Direct link to migrating-from-wireguard-or-ipsec-to-wireguard-native">​</a></h3><p>The legacy <code>wireguard</code> backend requires installation of the <code>wg</code> tool on the host. This backend will be removed in K3s v1.26, in favor of <code>wireguard-native</code> backend, which directly interfaces with the kernel.</p><p>The legacy <code>ipsec</code> backend requires installation of the <code>swanctl</code> and <code>charon</code> binaries on the host. This backend will be removed in K3s v1.27, in favor of the <code>wireguard-native</code> backend.</p><p>We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps:</p><ol><li>Update the K3s config on all server nodes. If using config files, the <code>/etc/rancher/k3s/config.yaml</code> should include <code>flannel-backend: wireguard-native</code> instead of <code>flannel-backend: wireguard</code> or <code>flannel-backend: ipsec</code>. If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed.</li><li>Reboot all nodes, starting with the servers.</li></ol><h2 class="anchor anchorWithStickyNavbar_LWe7" id="custom-cni">Custom CNI<a href="#custom-cni" class="hash-link" aria-label="Direct link to Custom CNI" title="Direct link to Custom CNI">​</a></h2><p>Start K3s with <code>--flannel-backend=none</code> and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set <code>--disable-network-policy</code> as well to avoid conflicts. Some important information to take into consideration:</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Canal</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Calico</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Cilium</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>Visit the <a href="https://docs.tigera.io/calico/latest/getting-started/kubernetes/flannel/install-for-flannel#installing-calico-for-policy-and-flannel-aka-canal-for-networking" target="_blank" rel="noopener noreferrer">Canal Docs</a> website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the <code>container_settings</code> section, for example:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;container_settings&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;allow_ip_forwarding&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Apply the Canal YAML.</p><p>Ensure the settings were applied by running the following command on the host:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /etc/cni/net.d/10-canal.conflist</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You should see that IP forwarding is set to true.</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>Follow the <a href="https://docs.tigera.io/calico/latest/reference/configure-cni-plugins" target="_blank" rel="noopener noreferrer">Calico CNI Plugins Guide</a>. Modify the Calico YAML so that IP forwarding is allowed in the <code>container_settings</code> section, for example:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;container_settings&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;allow_ip_forwarding&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Apply the Calico YAML.</p><p>Ensure the settings were applied by running the following command on the host:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /etc/cni/net.d/10-calico.conflist</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You should see that IP forwarding is set to true.</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>Before running <code>k3s-killall.sh</code> or <code>k3s-uninstall.sh</code>, you must manually remove <code>cilium_host</code>, <code>cilium_net</code> and <code>cilium_vxlan</code> interfaces. If you fail to do this, you may lose network connectivity to the host when K3s is stopped</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">ip</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">link</span><span class="token plain"> delete cilium_host</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">ip</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">link</span><span class="token plain"> delete cilium_net</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">ip</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">link</span><span class="token plain"> delete cilium_vxlan</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additionally, iptables rules for cilium should be removed:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">iptables-save </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> -iv cilium </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> iptables-restore</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip6tables-save </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> -iv cilium </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> ip6tables-restore</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-egress-selector-configuration">Control-Plane Egress Selector configuration<a href="#control-plane-egress-selector-configuration" class="hash-link" aria-label="Direct link to Control-Plane Egress Selector configuration" title="Direct link to Control-Plane Egress Selector configuration">​</a></h2><p>K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components.
 This allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled.
@@ -17,10 +17,10 @@
 This mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform <code>kubectl exec</code> and <code>kubectl logs</code>.</li><li><code>agent</code> (default): The apiserver uses agent tunnels to communicate with kubelets.
 This mode requires that the servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints.</li><li><code>pod</code>: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes.
 <strong>NOTE</strong>: This will not work when using a CNI that uses its own IPAM and does not respect the node&#x27;s PodCIDR allocation. <code>cluster</code> or <code>agent</code> should be used with these CNIs instead.</li><li><code>cluster</code>: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dual-stack-ipv4--ipv6-networking">Dual-stack (IPv4 + IPv6) Networking<a href="#dual-stack-ipv4--ipv6-networking" class="hash-link" aria-label="Direct link to Dual-stack (IPv4 + IPv6) Networking" title="Direct link to Dual-stack (IPv4 + IPv6) Networking">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Experimental support is available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a>.<br>
-<!-- -->Stable support is available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.23.7+k3s1</a>. </p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue </div><div class="admonitionContent_S0QG"><p>Kubernetes <a href="https://github.com/kubernetes/kubernetes/issues/111695" target="_blank" rel="noopener noreferrer">Issue #111695</a> causes the Kubelet to ignore the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=0.0.0.0&quot; # To proritize IPv4 traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">#OR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=::&quot; # To proritize IPv6 traffic</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only.</p><p>To enable dual-stack in K3s, you must provide valid dual-stack <code>cluster-cidr</code> and <code>service-cidr</code> on all server nodes. This is an example of a valid configuration:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Note that you may configure any valid <code>cluster-cidr</code> and <code>service-cidr</code> values, but the above masks are recommended. If you change the <code>cluster-cidr</code> mask, you should also change the <code>node-cidr-mask-size-ipv4</code> and <code>node-cidr-mask-size-ipv6</code> values to match the planned pods per node and total node count. The largest supported <code>service-cidr</code> mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud.</p><p>If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin&#x27;s dual-stack documentation and verify if network policies can be enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="single-stack-ipv6-networking">Single-stack IPv6 Networking<a href="#single-stack-ipv6-networking" class="hash-link" aria-label="Direct link to Single-stack IPv6 Networking" title="Direct link to Single-stack IPv6 Networking">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.9+k3s1</a></p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue</div><div class="admonitionContent_S0QG"><p>If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl <code>net.ipv6.conf.all.accept_ra=2</code>; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of <a href="https://github.com/kubernetes/kubernetes/issues/91507" target="_blank" rel="noopener noreferrer">man-in-the-middle attacks</a>.</p></div></div><p>Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the <code>--cluster-cidr</code> and <code>--service-cidr</code> flags. This is an example of a valid configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:0::/56 --service-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="distributed-hybrid-or-multicloud-cluster">Distributed hybrid or multicloud cluster<a href="#distributed-hybrid-or-multicloud-cluster" class="hash-link" aria-label="Direct link to Distributed hybrid or multicloud cluster" title="Direct link to Distributed hybrid or multicloud cluster">​</a></h2><p>A K3s cluster can still be deployed on nodes which do not share a common private network and are not directly connected (e.g. nodes in different public clouds). There are two options to achieve this: the embedded k3s multicloud solution and the integration with the <code>tailscale</code> VPN provider.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>Embedded etcd is not supported in this type of deployment. If using embedded etcd, all server nodes must be reachable to each other via their private IPs. Agents may be distributed over multiple networks, but all servers should be in the same location.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="embedded-k3s-multicloud-solution">Embedded k3s multicloud solution<a href="#embedded-k3s-multicloud-solution" class="hash-link" aria-label="Direct link to Embedded k3s multicloud solution" title="Direct link to Embedded k3s multicloud solution">​</a></h3><p>K3s uses wireguard to establish a VPN mesh for cluster traffic. Nodes must each have a unique IP through which they can be reached (usually a public IP). K3s supervisor traffic will use a websocket tunnel, and cluster (CNI) traffic will use a wireguard tunnel.</p><p>To enable this type of deployment, you must add the following parameters on servers:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --flannel-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">wireguard-native --flannel-external-ip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>and on agents:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">AGENT_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>where <code>SERVER_EXTERNAL_IP</code> is the IP through which we can reach the server node and <code>AGENT_EXTERNAL_IP</code> is the IP through which we can reach the agent node. Note that the <code>K3S_URL</code> config parameter in the agent should use the <code>SERVER_EXTERNAL_IP</code> to be able to connect to it. Remember to check the <a href="/installation/requirements#networking">Networking Requirements</a> and allow access to the listed ports on both internal and external addresses.</p><p>Both <code>SERVER_EXTERNAL_IP</code> and <code>AGENT_EXTERNAL_IP</code> must have connectivity between them and are normally public IPs.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Dynamic IPs</div><div class="admonitionContent_S0QG"><p>If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the <code>--node-external-ip</code> parameter to reflect the new IP. If running K3s as a service, you must modify <code>/etc/systemd/system/k3s.service</code> then run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="integration-with-the-tailscale-vpn-provider-experimental">Integration with the Tailscale VPN provider (experimental)<a href="#integration-with-the-tailscale-vpn-provider-experimental" class="hash-link" aria-label="Direct link to Integration with the Tailscale VPN provider (experimental)" title="Direct link to Integration with the Tailscale VPN provider (experimental)">​</a></h3><p>Available in v1.27.3, v1.26.6, v1.25.11 and newer.</p><p>K3s can integrate with <a href="https://tailscale.com/" target="_blank" rel="noopener noreferrer">Tailscale</a> so that nodes use the Tailscale VPN service to build a mesh between nodes.</p><p>There are four steps to be done with Tailscale before deploying K3s:</p><ol><li><p>Log in to your Tailscale account</p></li><li><p>In <code>Settings &gt; Keys</code>, generate an auth key ($AUTH-KEY), which may be reusable for all nodes in your cluster</p></li><li><p>Decide on the podCIDR the cluster will use (by default <code>10.42.0.0/16</code>). Append the CIDR (or CIDRs for dual-stack) in Access controls with the stanza:</p></li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;autoApprovers&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">&quot;routes&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;10.42.0.0/16&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;2001:cafe:42:0::/56&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>Install Tailscale in your nodes:</li></ol><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fsSL https://tailscale.com/install.sh </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To deploy K3s with Tailscale integration enabled, you must add the following parameter on each of your nodes:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">&quot;name</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">tailscale,joinKey</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$AUTH</span><span class="token plain">-KEY</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>or provide that information in a file and use the parameter:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$PATH_TO_FILE</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>If you plan on running several K3s clusters using the same tailscale network, please create appropriate <a href="https://tailscale.com/kb/1018/acls/" target="_blank" rel="noopener noreferrer">ACLs</a> to avoid IP conflicts or use different podCIDR subnets for each cluster.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/configuration"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Configuration Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/private-registry"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Private Registry Configuration</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#flannel-options" class="table-of-contents__link toc-highlight">Flannel Options</a><ul><li><a href="#migrating-from-wireguard-or-ipsec-to-wireguard-native" class="table-of-contents__link toc-highlight">Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code></a></li></ul></li><li><a href="#custom-cni" class="table-of-contents__link toc-highlight">Custom CNI</a></li><li><a href="#control-plane-egress-selector-configuration" class="table-of-contents__link toc-highlight">Control-Plane Egress Selector configuration</a></li><li><a href="#dual-stack-ipv4--ipv6-networking" class="table-of-contents__link toc-highlight">Dual-stack (IPv4 + IPv6) Networking</a></li><li><a href="#single-stack-ipv6-networking" class="table-of-contents__link toc-highlight">Single-stack IPv6 Networking</a></li><li><a href="#distributed-hybrid-or-multicloud-cluster" class="table-of-contents__link toc-highlight">Distributed hybrid or multicloud cluster</a><ul><li><a href="#embedded-k3s-multicloud-solution" class="table-of-contents__link toc-highlight">Embedded k3s multicloud solution</a></li><li><a href="#integration-with-the-tailscale-vpn-provider-experimental" class="table-of-contents__link toc-highlight">Integration with the Tailscale VPN provider (experimental)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<!-- -->Stable support is available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.23.7+k3s1</a>. </p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue </div><div class="admonitionContent_S0QG"><p>Kubernetes <a href="https://github.com/kubernetes/kubernetes/issues/111695" target="_blank" rel="noopener noreferrer">Issue #111695</a> causes the Kubelet to ignore the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=0.0.0.0&quot; # To proritize IPv4 traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">#OR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=::&quot; # To proritize IPv6 traffic</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only.</p><p>To enable dual-stack in K3s, you must provide valid dual-stack <code>cluster-cidr</code> and <code>service-cidr</code> on all server nodes. This is an example of a valid configuration:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Note that you may configure any valid <code>cluster-cidr</code> and <code>service-cidr</code> values, but the above masks are recommended. If you change the <code>cluster-cidr</code> mask, you should also change the <code>node-cidr-mask-size-ipv4</code> and <code>node-cidr-mask-size-ipv6</code> values to match the planned pods per node and total node count. The largest supported <code>service-cidr</code> mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud.</p><p>If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin&#x27;s dual-stack documentation and verify if network policies can be enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="single-stack-ipv6-networking">Single-stack IPv6 Networking<a href="#single-stack-ipv6-networking" class="hash-link" aria-label="Direct link to Single-stack IPv6 Networking" title="Direct link to Single-stack IPv6 Networking">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.9+k3s1</a></p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue</div><div class="admonitionContent_S0QG"><p>If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl <code>net.ipv6.conf.all.accept_ra=2</code>; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of <a href="https://github.com/kubernetes/kubernetes/issues/91507" target="_blank" rel="noopener noreferrer">man-in-the-middle attacks</a>.</p></div></div><p>Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the <code>--cluster-cidr</code> and <code>--service-cidr</code> flags. This is an example of a valid configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:0::/56 --service-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="distributed-hybrid-or-multicloud-cluster">Distributed hybrid or multicloud cluster<a href="#distributed-hybrid-or-multicloud-cluster" class="hash-link" aria-label="Direct link to Distributed hybrid or multicloud cluster" title="Direct link to Distributed hybrid or multicloud cluster">​</a></h2><p>A K3s cluster can still be deployed on nodes which do not share a common private network and are not directly connected (e.g. nodes in different public clouds). There are two options to achieve this: the embedded k3s multicloud solution and the integration with the <code>tailscale</code> VPN provider.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>Embedded etcd is not supported in this type of deployment. If using embedded etcd, all server nodes must be reachable to each other via their private IPs. Agents may be distributed over multiple networks, but all servers should be in the same location.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="embedded-k3s-multicloud-solution">Embedded k3s multicloud solution<a href="#embedded-k3s-multicloud-solution" class="hash-link" aria-label="Direct link to Embedded k3s multicloud solution" title="Direct link to Embedded k3s multicloud solution">​</a></h3><p>K3s uses wireguard to establish a VPN mesh for cluster traffic. Nodes must each have a unique IP through which they can be reached (usually a public IP). K3s supervisor traffic will use a websocket tunnel, and cluster (CNI) traffic will use a wireguard tunnel.</p><p>To enable this type of deployment, you must add the following parameters on servers:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --flannel-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">wireguard-native --flannel-external-ip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>and on agents:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">AGENT_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>where <code>SERVER_EXTERNAL_IP</code> is the IP through which we can reach the server node and <code>AGENT_EXTERNAL_IP</code> is the IP through which we can reach the agent node. Note that the <code>K3S_URL</code> config parameter in the agent should use the <code>SERVER_EXTERNAL_IP</code> to be able to connect to it. Remember to check the <a href="/installation/requirements#networking">Networking Requirements</a> and allow access to the listed ports on both internal and external addresses.</p><p>Both <code>SERVER_EXTERNAL_IP</code> and <code>AGENT_EXTERNAL_IP</code> must have connectivity between them and are normally public IPs.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Dynamic IPs</div><div class="admonitionContent_S0QG"><p>If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the <code>--node-external-ip</code> parameter to reflect the new IP. If running K3s as a service, you must modify <code>/etc/systemd/system/k3s.service</code> then run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="integration-with-the-tailscale-vpn-provider-experimental">Integration with the Tailscale VPN provider (experimental)<a href="#integration-with-the-tailscale-vpn-provider-experimental" class="hash-link" aria-label="Direct link to Integration with the Tailscale VPN provider (experimental)" title="Direct link to Integration with the Tailscale VPN provider (experimental)">​</a></h3><p>Available in v1.27.3, v1.26.6, v1.25.11 and newer.</p><p>K3s can integrate with <a href="https://tailscale.com/" target="_blank" rel="noopener noreferrer">Tailscale</a> so that nodes use the Tailscale VPN service to build a mesh between nodes.</p><p>There are four steps to be done with Tailscale before deploying K3s:</p><ol><li><p>Log in to your Tailscale account</p></li><li><p>In <code>Settings &gt; Keys</code>, generate an auth key ($AUTH-KEY), which may be reusable for all nodes in your cluster</p></li><li><p>Decide on the podCIDR the cluster will use (by default <code>10.42.0.0/16</code>). Append the CIDR (or CIDRs for dual-stack) in Access controls with the stanza:</p></li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;autoApprovers&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">&quot;routes&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;10.42.0.0/16&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;2001:cafe:42:0::/56&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>Install Tailscale in your nodes:</li></ol><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fsSL https://tailscale.com/install.sh </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To deploy K3s with Tailscale integration enabled, you must add the following parameter on each of your nodes:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">&quot;name</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">tailscale,joinKey</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$AUTH</span><span class="token plain">-KEY</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>or provide that information in a file and use the parameter:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$PATH_TO_FILE</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>If you plan on running several K3s clusters using the same tailscale network, please create appropriate <a href="https://tailscale.com/kb/1018/acls/" target="_blank" rel="noopener noreferrer">ACLs</a> to avoid IP conflicts or use different podCIDR subnets for each cluster.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/configuration"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Configuration Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/private-registry"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Private Registry Configuration</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#flannel-options" class="table-of-contents__link toc-highlight">Flannel Options</a><ul><li><a href="#migrating-from-wireguard-or-ipsec-to-wireguard-native" class="table-of-contents__link toc-highlight">Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code></a></li></ul></li><li><a href="#custom-cni" class="table-of-contents__link toc-highlight">Custom CNI</a></li><li><a href="#control-plane-egress-selector-configuration" class="table-of-contents__link toc-highlight">Control-Plane Egress Selector configuration</a></li><li><a href="#dual-stack-ipv4--ipv6-networking" class="table-of-contents__link toc-highlight">Dual-stack (IPv4 + IPv6) Networking</a></li><li><a href="#single-stack-ipv6-networking" class="table-of-contents__link toc-highlight">Single-stack IPv6 Networking</a></li><li><a href="#distributed-hybrid-or-multicloud-cluster" class="table-of-contents__link toc-highlight">Distributed hybrid or multicloud cluster</a><ul><li><a href="#embedded-k3s-multicloud-solution" class="table-of-contents__link toc-highlight">Embedded k3s multicloud solution</a></li><li><a href="#integration-with-the-tailscale-vpn-provider-experimental" class="table-of-contents__link toc-highlight">Integration with the Tailscale VPN provider (experimental)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/packaged-components.html b/installation/packaged-components.html
index f5627d224..fbf8ef719 100644
--- a/installation/packaged-components.html
+++ b/installation/packaged-components.html
@@ -3,21 +3,21 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Managing Packaged Components | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/packaged-components"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Packaged Components | K3s"><meta data-rh="true" name="description" content="Auto-Deploying Manifests (AddOns)"><meta data-rh="true" property="og:description" content="Auto-Deploying Manifests (AddOns)"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/packaged-components"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/packaged-components" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/packaged-components" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Managing Packaged Components | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/packaged-components"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Packaged Components | K3s"><meta data-rh="true" name="description" content="Auto-Deploying Manifests (AddOns)"><meta data-rh="true" property="og:description" content="Auto-Deploying Manifests (AddOns)"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/packaged-components"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/packaged-components" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/packaged-components" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Packaged Components</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Packaged Components</h1></header><h2 class="anchor anchorWithStickyNavbar_LWe7" id="auto-deploying-manifests-addons">Auto-Deploying Manifests (AddOns)<a href="#auto-deploying-manifests-addons" class="hash-link" aria-label="Direct link to Auto-Deploying Manifests (AddOns)" title="Direct link to Auto-Deploying Manifests (AddOns)">​</a></h2><p>On server nodes, any file found in <code>/var/lib/rancher/k3s/server/manifests</code> will automatically be deployed to Kubernetes in a manner similar to <code>kubectl apply</code>, both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster.</p><p>Manifests are tracked as <code>AddOn</code> custom resources in the <code>kube-system</code> namespace. Any errors or warnings encountered when applying the manifest file may seen by using <code>kubectl describe</code> on the corresponding <code>AddOn</code>, or by using <code>kubectl get event -n kube-system</code> to view all events for that namespace, including those from the deploy controller.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="packaged-components">Packaged Components<a href="#packaged-components" class="hash-link" aria-label="Direct link to Packaged Components" title="Direct link to Packaged Components">​</a></h3><p>K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: <code>coredns</code>, <code>traefik</code>, <code>local-storage</code>, and <code>metrics-server</code>. The embedded <code>servicelb</code> LoadBalancer controller does not have a manifest file, but can be disabled as if it were an <code>AddOn</code> for historical reasons.</p><p>Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="user-addons">User AddOns<a href="#user-addons" class="hash-link" aria-label="Direct link to User AddOns" title="Direct link to User AddOns">​</a></h3><p>You may place additional files in the manifests directory for deployment as an <code>AddOn</code>. Each file may contain multiple Kubernetes resources, delmited by the <code>---</code> YAML document separator. For more information on organizing resources in manifests, see the <a href="https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/" target="_blank" rel="noopener noreferrer">Managing Resources</a> section of the Kubernetes documentation.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="file-naming-requirements">File Naming Requirements<a href="#file-naming-requirements" class="hash-link" aria-label="Direct link to File Naming Requirements" title="Direct link to File Naming Requirements">​</a></h4><p>The <code>AddOn</code> name for each file in the manifest directory is derived from the file basename.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Packaged Components</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Packaged Components</h1></header><h2 class="anchor anchorWithStickyNavbar_LWe7" id="auto-deploying-manifests-addons">Auto-Deploying Manifests (AddOns)<a href="#auto-deploying-manifests-addons" class="hash-link" aria-label="Direct link to Auto-Deploying Manifests (AddOns)" title="Direct link to Auto-Deploying Manifests (AddOns)">​</a></h2><p>On server nodes, any file found in <code>/var/lib/rancher/k3s/server/manifests</code> will automatically be deployed to Kubernetes in a manner similar to <code>kubectl apply</code>, both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster.</p><p>Manifests are tracked as <code>AddOn</code> custom resources in the <code>kube-system</code> namespace. Any errors or warnings encountered when applying the manifest file may seen by using <code>kubectl describe</code> on the corresponding <code>AddOn</code>, or by using <code>kubectl get event -n kube-system</code> to view all events for that namespace, including those from the deploy controller.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="packaged-components">Packaged Components<a href="#packaged-components" class="hash-link" aria-label="Direct link to Packaged Components" title="Direct link to Packaged Components">​</a></h3><p>K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: <code>coredns</code>, <code>traefik</code>, <code>local-storage</code>, and <code>metrics-server</code>. The embedded <code>servicelb</code> LoadBalancer controller does not have a manifest file, but can be disabled as if it were an <code>AddOn</code> for historical reasons.</p><p>Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="user-addons">User AddOns<a href="#user-addons" class="hash-link" aria-label="Direct link to User AddOns" title="Direct link to User AddOns">​</a></h3><p>You may place additional files in the manifests directory for deployment as an <code>AddOn</code>. Each file may contain multiple Kubernetes resources, delmited by the <code>---</code> YAML document separator. For more information on organizing resources in manifests, see the <a href="https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/" target="_blank" rel="noopener noreferrer">Managing Resources</a> section of the Kubernetes documentation.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="file-naming-requirements">File Naming Requirements<a href="#file-naming-requirements" class="hash-link" aria-label="Direct link to File Naming Requirements" title="Direct link to File Naming Requirements">​</a></h4><p>The <code>AddOn</code> name for each file in the manifest directory is derived from the file basename.
 Ensure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/names/" target="_blank" rel="noopener noreferrer">object naming restrictions</a>.
 Care should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled.</p><p>Here is en example of an error that would be reported if the file name contains underscores:</p><blockquote><p><code>Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:
    Addon.k3s.cattle.io &quot;example_manifest&quot; is invalid: metadata.name: Invalid value: &quot;example_manifest&quot;: 
    a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, &#x27;-&#x27; or &#x27;.&#x27;, and must start and end with an alphanumeric character
-   (e.g. &#x27;example.com&#x27;, regex used for validation is &#x27;[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*&#x27;)</code></p></blockquote><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="disabling-manifests">Disabling Manifests<a href="#disabling-manifests" class="hash-link" aria-label="Direct link to Disabling Manifests" title="Direct link to Disabling Manifests">​</a></h2><p>There are two ways to disable deployment of specific content from the manifests directory.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-the---disable-flag">Using the <code>--disable</code> flag<a href="#using-the---disable-flag" class="hash-link" aria-label="Direct link to using-the---disable-flag" title="Direct link to using-the---disable-flag">​</a></h3><p>The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the <code>manifests</code> directory, can be disabled with the <code>--disable</code> flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the <code>manifests</code> directory.</p><p>For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with <code>--disable=traefik</code>. Multiple items can be disabled by separating their names with commas, or by repeating the flag.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-skip-files">Using .skip files<a href="#using-skip-files" class="hash-link" aria-label="Direct link to Using .skip files" title="Direct link to Using .skip files">​</a></h3><p>For any file under <code>/var/lib/rancher/k3s/server/manifests</code>, you can create a <code>.skip</code> file which will cause K3s to ignore the corresponding manifest. The contents of the <code>.skip</code> file do not matter, only its existence is checked. Note that creating a <code>.skip</code> file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist.</p><p>For example, creating an empty <code>traefik.yaml.skip</code> file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying <code>traefik.yaml</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> /var/lib/rancher/k3s/server/manifests</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">coredns.yaml  traefik.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get pods -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   local-path-provisioner-64ffb68fd-xx98j   </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   metrics-server-5489f84d5d-7zwkt          </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   coredns-85cb69466-vcq7j                  </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If Traefik had already been deployed prior to creating the <code>traefik.skip</code> file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="helm-addons">Helm AddOns<a href="#helm-addons" class="hash-link" aria-label="Direct link to Helm AddOns" title="Direct link to Helm AddOns">​</a></h2><p>For information about managing Helm charts via auto-deploying manifests, refer to the section about <a href="/helm">Helm.</a></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/server-roles"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Managing Server Roles</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/kube-dashboard"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#auto-deploying-manifests-addons" class="table-of-contents__link toc-highlight">Auto-Deploying Manifests (AddOns)</a><ul><li><a href="#packaged-components" class="table-of-contents__link toc-highlight">Packaged Components</a></li><li><a href="#user-addons" class="table-of-contents__link toc-highlight">User AddOns</a></li></ul></li><li><a href="#disabling-manifests" class="table-of-contents__link toc-highlight">Disabling Manifests</a><ul><li><a href="#using-the---disable-flag" class="table-of-contents__link toc-highlight">Using the <code>--disable</code> flag</a></li><li><a href="#using-skip-files" class="table-of-contents__link toc-highlight">Using .skip files</a></li></ul></li><li><a href="#helm-addons" class="table-of-contents__link toc-highlight">Helm AddOns</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+   (e.g. &#x27;example.com&#x27;, regex used for validation is &#x27;[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*&#x27;)</code></p></blockquote><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="disabling-manifests">Disabling Manifests<a href="#disabling-manifests" class="hash-link" aria-label="Direct link to Disabling Manifests" title="Direct link to Disabling Manifests">​</a></h2><p>There are two ways to disable deployment of specific content from the manifests directory.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-the---disable-flag">Using the <code>--disable</code> flag<a href="#using-the---disable-flag" class="hash-link" aria-label="Direct link to using-the---disable-flag" title="Direct link to using-the---disable-flag">​</a></h3><p>The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the <code>manifests</code> directory, can be disabled with the <code>--disable</code> flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the <code>manifests</code> directory.</p><p>For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with <code>--disable=traefik</code>. Multiple items can be disabled by separating their names with commas, or by repeating the flag.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-skip-files">Using .skip files<a href="#using-skip-files" class="hash-link" aria-label="Direct link to Using .skip files" title="Direct link to Using .skip files">​</a></h3><p>For any file under <code>/var/lib/rancher/k3s/server/manifests</code>, you can create a <code>.skip</code> file which will cause K3s to ignore the corresponding manifest. The contents of the <code>.skip</code> file do not matter, only its existence is checked. Note that creating a <code>.skip</code> file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist.</p><p>For example, creating an empty <code>traefik.yaml.skip</code> file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying <code>traefik.yaml</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> /var/lib/rancher/k3s/server/manifests</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">coredns.yaml  traefik.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get pods -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   local-path-provisioner-64ffb68fd-xx98j   </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   metrics-server-5489f84d5d-7zwkt          </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   coredns-85cb69466-vcq7j                  </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If Traefik had already been deployed prior to creating the <code>traefik.skip</code> file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="helm-addons">Helm AddOns<a href="#helm-addons" class="hash-link" aria-label="Direct link to Helm AddOns" title="Direct link to Helm AddOns">​</a></h2><p>For information about managing Helm charts via auto-deploying manifests, refer to the section about <a href="/helm">Helm.</a></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/server-roles"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Managing Server Roles</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/kube-dashboard"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#auto-deploying-manifests-addons" class="table-of-contents__link toc-highlight">Auto-Deploying Manifests (AddOns)</a><ul><li><a href="#packaged-components" class="table-of-contents__link toc-highlight">Packaged Components</a></li><li><a href="#user-addons" class="table-of-contents__link toc-highlight">User AddOns</a></li></ul></li><li><a href="#disabling-manifests" class="table-of-contents__link toc-highlight">Disabling Manifests</a><ul><li><a href="#using-the---disable-flag" class="table-of-contents__link toc-highlight">Using the <code>--disable</code> flag</a></li><li><a href="#using-skip-files" class="table-of-contents__link toc-highlight">Using .skip files</a></li></ul></li><li><a href="#helm-addons" class="table-of-contents__link toc-highlight">Helm AddOns</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/private-registry.html b/installation/private-registry.html
index a36a2eeff..9ec615e3a 100644
--- a/installation/private-registry.html
+++ b/installation/private-registry.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Private Registry Configuration | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/private-registry"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Private Registry Configuration | K3s"><meta data-rh="true" name="description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><meta data-rh="true" property="og:description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/private-registry"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/private-registry" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/private-registry" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Private Registry Configuration | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/private-registry"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Private Registry Configuration | K3s"><meta data-rh="true" name="description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><meta data-rh="true" property="og:description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/private-registry"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/private-registry" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/private-registry" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Private Registry Configuration</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Private Registry Configuration</h1></header><p>Containerd can be configured to connect to private registries and use them to pull private images on the node.</p><p>Upon startup, K3s will check to see if a <code>registries.yaml</code> file exists at <code>/etc/rancher/k3s/</code> and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry.</p><p>Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the <code>registries.yaml</code> file on each server as well.</p><p>Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the <code>registries.yaml</code> file and give different examples of using private registry configuration in K3s.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="registries-configuration-file">Registries Configuration File<a href="#registries-configuration-file" class="hash-link" aria-label="Direct link to Registries Configuration File" title="Direct link to Registries Configuration File">​</a></h2><p>The file consists of two main sections:</p><ul><li>mirrors</li><li>configs</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="mirrors">Mirrors<a href="#mirrors" class="hash-link" aria-label="Direct link to Mirrors" title="Direct link to Mirrors">​</a></h3><p>Mirrors is a directive that defines the names and endpoints of the private registries, for example:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  mycustomreg.com:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="redirects">Redirects<a href="#redirects" class="hash-link" aria-label="Direct link to Redirects" title="Direct link to Redirects">​</a></h4><p>If a public registry is used as a mirror, such as when configuring a <a href="https://docs.docker.com/registry/recipes/mirror/" target="_blank" rel="noopener noreferrer">pull through cache</a>, images pulls are transparently redirected.</p><p>For example, if you have a mirror configured for <code>docker.io</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then pulling <code>docker.io/rancher/coredns-coredns:1.6.3</code> will transparently pull the image from <code>https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3</code>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="rewrites">Rewrites<a href="#rewrites" class="hash-link" aria-label="Direct link to Rewrites" title="Direct link to Rewrites">​</a></h4><p>Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one.</p><p>For example, the following configuration would transparently pull the image <code>docker.io/rancher/coredns-coredns:1.6.3</code> from <code>registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3</code>:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  docker.io:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://registry.example.com:5000&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    rewrite:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      &quot;^rancher/(.*)&quot;: &quot;mirrorproject/rancher-images/$1&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The image will still be stored under the original name so that a <code>crictl image ls</code> will show <code>docker.io/rancher/coredns-coredns:1.6.3</code> as available on the node, even though the image was pulled from the mirrored registry with a different name.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configs">Configs<a href="#configs" class="hash-link" aria-label="Direct link to Configs" title="Direct link to Configs">​</a></h3><p>The <code>configs</code> section defines the TLS and credential configuration for each mirror. For each mirror you can define <code>auth</code> and/or <code>tls</code>. </p><p>The <code>tls</code> part consists of:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>cert_file</code></td><td>The client certificate path that will be used to authenticate with the registry</td></tr><tr><td><code>key_file</code></td><td>The client key path that will be used to authenticate with the registry</td></tr><tr><td><code>ca_file</code></td><td>Defines the CA certificate path to be used to verify the registry&#x27;s server cert file</td></tr><tr><td><code>insecure_skip_verify</code></td><td>Boolean that defines if TLS verification should be skipped for the registry</td></tr></tbody></table><p>The <code>auth</code> part consists of either username/password or authentication token:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>username</code></td><td>user name of the private registry basic auth</td></tr><tr><td><code>password</code></td><td>user password of the private registry basic auth</td></tr><tr><td><code>auth</code></td><td>authentication token of the private registry basic auth</td></tr></tbody></table><p>Below are basic examples of using private registries in different modes:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="with-tls">With TLS<a href="#with-tls" class="hash-link" aria-label="Direct link to With TLS" title="Direct link to With TLS">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="without-tls">Without TLS<a href="#without-tls" class="hash-link" aria-label="Direct link to Without TLS" title="Direct link to Without TLS">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when <em>not</em> using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p>In case of no TLS communication, you need to specify <code>http://</code> for the endpoints, otherwise it will default to https.</p></blockquote><p>In order for the registry changes to take effect, you need to restart K3s on each node.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-images-to-the-private-registry">Adding Images to the Private Registry<a href="#adding-images-to-the-private-registry" class="hash-link" aria-label="Direct link to Adding Images to the Private Registry" title="Direct link to Adding Images to the Private Registry">​</a></h2><p>First, obtain the <code>k3s-images.txt</code> file from GitHub for the release you are working with.
-Pull the K3s images listed on the k3s-images.txt file from docker.io</p><p>Example: <code>docker pull docker.io/rancher/coredns-coredns:1.6.3</code></p><p>Then, retag the images to the private registry.</p><p>Example: <code>docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns</code></p><p>Last, push the images to the private registry.</p><p>Example: <code>docker push mycustomreg.com:5000/coredns-coredns</code></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/network-options"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Network Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/airgap"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Air-Gap Install</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#registries-configuration-file" class="table-of-contents__link toc-highlight">Registries Configuration File</a><ul><li><a href="#mirrors" class="table-of-contents__link toc-highlight">Mirrors</a></li><li><a href="#configs" class="table-of-contents__link toc-highlight">Configs</a></li><li><a href="#with-tls" class="table-of-contents__link toc-highlight">With TLS</a></li><li><a href="#without-tls" class="table-of-contents__link toc-highlight">Without TLS</a></li></ul></li><li><a href="#adding-images-to-the-private-registry" class="table-of-contents__link toc-highlight">Adding Images to the Private Registry</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Private Registry Configuration</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Private Registry Configuration</h1></header><p>Containerd can be configured to connect to private registries and use them to pull private images on the node.</p><p>Upon startup, K3s will check to see if a <code>registries.yaml</code> file exists at <code>/etc/rancher/k3s/</code> and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry.</p><p>Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the <code>registries.yaml</code> file on each server as well.</p><p>Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the <code>registries.yaml</code> file and give different examples of using private registry configuration in K3s.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="registries-configuration-file">Registries Configuration File<a href="#registries-configuration-file" class="hash-link" aria-label="Direct link to Registries Configuration File" title="Direct link to Registries Configuration File">​</a></h2><p>The file consists of two main sections:</p><ul><li>mirrors</li><li>configs</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="mirrors">Mirrors<a href="#mirrors" class="hash-link" aria-label="Direct link to Mirrors" title="Direct link to Mirrors">​</a></h3><p>Mirrors is a directive that defines the names and endpoints of the private registries, for example:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  mycustomreg.com:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="redirects">Redirects<a href="#redirects" class="hash-link" aria-label="Direct link to Redirects" title="Direct link to Redirects">​</a></h4><p>If a public registry is used as a mirror, such as when configuring a <a href="https://docs.docker.com/registry/recipes/mirror/" target="_blank" rel="noopener noreferrer">pull through cache</a>, images pulls are transparently redirected.</p><p>For example, if you have a mirror configured for <code>docker.io</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then pulling <code>docker.io/rancher/coredns-coredns:1.6.3</code> will transparently pull the image from <code>https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3</code>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="rewrites">Rewrites<a href="#rewrites" class="hash-link" aria-label="Direct link to Rewrites" title="Direct link to Rewrites">​</a></h4><p>Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one.</p><p>For example, the following configuration would transparently pull the image <code>docker.io/rancher/coredns-coredns:1.6.3</code> from <code>registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3</code>:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  docker.io:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://registry.example.com:5000&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    rewrite:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      &quot;^rancher/(.*)&quot;: &quot;mirrorproject/rancher-images/$1&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The image will still be stored under the original name so that a <code>crictl image ls</code> will show <code>docker.io/rancher/coredns-coredns:1.6.3</code> as available on the node, even though the image was pulled from the mirrored registry with a different name.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configs">Configs<a href="#configs" class="hash-link" aria-label="Direct link to Configs" title="Direct link to Configs">​</a></h3><p>The <code>configs</code> section defines the TLS and credential configuration for each mirror. For each mirror you can define <code>auth</code> and/or <code>tls</code>. </p><p>The <code>tls</code> part consists of:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>cert_file</code></td><td>The client certificate path that will be used to authenticate with the registry</td></tr><tr><td><code>key_file</code></td><td>The client key path that will be used to authenticate with the registry</td></tr><tr><td><code>ca_file</code></td><td>Defines the CA certificate path to be used to verify the registry&#x27;s server cert file</td></tr><tr><td><code>insecure_skip_verify</code></td><td>Boolean that defines if TLS verification should be skipped for the registry</td></tr></tbody></table><p>The <code>auth</code> part consists of either username/password or authentication token:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>username</code></td><td>user name of the private registry basic auth</td></tr><tr><td><code>password</code></td><td>user password of the private registry basic auth</td></tr><tr><td><code>auth</code></td><td>authentication token of the private registry basic auth</td></tr></tbody></table><p>Below are basic examples of using private registries in different modes:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="with-tls">With TLS<a href="#with-tls" class="hash-link" aria-label="Direct link to With TLS" title="Direct link to With TLS">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="without-tls">Without TLS<a href="#without-tls" class="hash-link" aria-label="Direct link to Without TLS" title="Direct link to Without TLS">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when <em>not</em> using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p>In case of no TLS communication, you need to specify <code>http://</code> for the endpoints, otherwise it will default to https.</p></blockquote><p>In order for the registry changes to take effect, you need to restart K3s on each node.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-images-to-the-private-registry">Adding Images to the Private Registry<a href="#adding-images-to-the-private-registry" class="hash-link" aria-label="Direct link to Adding Images to the Private Registry" title="Direct link to Adding Images to the Private Registry">​</a></h2><p>First, obtain the <code>k3s-images.txt</code> file from GitHub for the release you are working with.
+Pull the K3s images listed on the k3s-images.txt file from docker.io</p><p>Example: <code>docker pull docker.io/rancher/coredns-coredns:1.6.3</code></p><p>Then, retag the images to the private registry.</p><p>Example: <code>docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns</code></p><p>Last, push the images to the private registry.</p><p>Example: <code>docker push mycustomreg.com:5000/coredns-coredns</code></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/network-options"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Network Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/airgap"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Air-Gap Install</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#registries-configuration-file" class="table-of-contents__link toc-highlight">Registries Configuration File</a><ul><li><a href="#mirrors" class="table-of-contents__link toc-highlight">Mirrors</a></li><li><a href="#configs" class="table-of-contents__link toc-highlight">Configs</a></li><li><a href="#with-tls" class="table-of-contents__link toc-highlight">With TLS</a></li><li><a href="#without-tls" class="table-of-contents__link toc-highlight">Without TLS</a></li></ul></li><li><a href="#adding-images-to-the-private-registry" class="table-of-contents__link toc-highlight">Adding Images to the Private Registry</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/requirements.html b/installation/requirements.html
index cbdd5df48..decdb8250 100644
--- a/installation/requirements.html
+++ b/installation/requirements.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Requirements | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/requirements"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Requirements | K3s"><meta data-rh="true" name="description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><meta data-rh="true" property="og:description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/requirements"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/requirements" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/requirements" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Requirements | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/requirements"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Requirements | K3s"><meta data-rh="true" name="description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><meta data-rh="true" property="og:description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/requirements"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/requirements" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/requirements" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Requirements</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Requirements</h1></header><p>K3s is very lightweight, but has some minimum requirements as outlined below.</p><p>Whether you&#x27;re configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="Direct link to Prerequisites" title="Direct link to Prerequisites">​</a></h2><p>Two nodes cannot have the same hostname.</p><p>If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the <code>--with-node-id</code> option to append a random suffix for each node, or devise a unique name to pass with <code>--node-name</code> or <code>$K3S_NODE_NAME</code> for each node you add to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="architecture">Architecture<a href="#architecture" class="hash-link" aria-label="Direct link to Architecture" title="Direct link to Architecture">​</a></h2><p>K3s is available for the following architectures:</p><ul><li>x86_64</li><li>armhf</li><li>arm64/aarch64</li><li>s390x</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>ARM64 Page Size</div><div class="admonitionContent_S0QG"><p>Prior to May 2023 releases (v1.24.14+k3s1, v1.25.10+k3s1, v1.26.5+k3s1, v1.27.2+k3s1), on <code>aarch64/arm64</code> systems, the OS must use a 4k page size. <strong>RHEL9</strong>, <strong>Ubuntu</strong>, <strong>Raspberry PI OS</strong>, and <strong>SLES</strong> all meet this requirement.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="operating-systems">Operating Systems<a href="#operating-systems" class="hash-link" aria-label="Direct link to Operating Systems" title="Direct link to Operating Systems">​</a></h2><p>K3s is expected to work on most modern Linux systems.</p><p>Some OSs have specific requirements:</p><ul><li>If you are using <strong>(Red Hat/CentOS) Enterprise Linux</strong>, follow <a href="/advanced#red-hat-enterprise-linux--centos">these steps</a> for additional setup.</li><li>If you are using <strong>Raspberry Pi OS</strong>, follow <a href="/advanced#raspberry-pi">these steps</a> to switch to legacy iptables.</li></ul><p>For more information on which OSs were tested with Rancher managed K3s clusters, refer to the <a href="https://rancher.com/support-maintenance-terms/" target="_blank" rel="noopener noreferrer">Rancher support and maintenance terms.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="hardware">Hardware<a href="#hardware" class="hash-link" aria-label="Direct link to Hardware" title="Direct link to Hardware">​</a></h2><p>Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here.</p><table><thead><tr><th>Spec</th><th>Minimum</th><th>Recommended</th></tr></thead><tbody><tr><td>CPU</td><td>1 core</td><td>2 cores</td></tr><tr><td>RAM</td><td>512 MB</td><td>1 GB</td></tr></tbody></table><p><a href="/reference/resource-profiling">Resource Profiling</a> captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Raspberry Pi and embedded etcd</div><div class="admonitionContent_S0QG"><p>If deploying K3s with embedded etcd on a Raspberry Pi, it is recommended that you use an external SSD. etcd is write intensive, and SD cards cannot handle the IO load.</p></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="disks">Disks<a href="#disks" class="hash-link" aria-label="Direct link to Disks" title="Direct link to Disks">​</a></h4><p>K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="Direct link to Networking" title="Direct link to Networking">​</a></h2><p>The K3s server needs port 6443 to be accessible by all nodes.</p><p>The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s.</p><p>If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250.</p><p>If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>Important</div><div class="admonitionContent_S0QG"><p>The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.</p></div></div><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>Flannel relies on the <a href="https://www.cni.dev/plugins/current/main/bridge/" target="_blank" rel="noopener noreferrer">Bridge CNI plugin</a> to create a L2 network that switches traffic. Rogue pods with <code>NET_RAW</code> capabilities can abuse that L2 network to launch attacks such as <a href="https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf" target="_blank" rel="noopener noreferrer">ARP spoofing</a>. Therefore, as documented in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">Kubernetes docs</a>, please set a restricted profile that disables <code>NET_RAW</code> on non-trustable pods.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="inbound-rules-for-k3s-server-nodes">Inbound Rules for K3s Server Nodes<a href="#inbound-rules-for-k3s-server-nodes" class="hash-link" aria-label="Direct link to Inbound Rules for K3s Server Nodes" title="Direct link to Inbound Rules for K3s Server Nodes">​</a></h3><table><thead><tr><th>Protocol</th><th>Port</th><th>Source</th><th>Destination</th><th>Description</th></tr></thead><tbody><tr><td>TCP</td><td>2379-2380</td><td>Servers</td><td>Servers</td><td>Required only for HA with embedded etcd</td></tr><tr><td>TCP</td><td>6443</td><td>Agents</td><td>Servers</td><td>K3s supervisor and Kubernetes API Server</td></tr><tr><td>UDP</td><td>8472</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel VXLAN</td></tr><tr><td>TCP</td><td>10250</td><td>All nodes</td><td>All nodes</td><td>Kubelet metrics</td></tr><tr><td>UDP</td><td>51820</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv4</td></tr><tr><td>UDP</td><td>51821</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv6</td></tr></tbody></table><p>Typically, all outbound traffic is allowed.</p><p>Additional changes to the firewall may be required depending on the OS used. See <a href="/advanced#additional-os-preparations">Additional OS Preparations</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="large-clusters">Large Clusters<a href="#large-clusters" class="hash-link" aria-label="Direct link to Large Clusters" title="Direct link to Large Clusters">​</a></h2><p>Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:</p><ul><li>MySQL</li><li>PostgreSQL</li><li>etcd</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cpu-and-memory">CPU and Memory<a href="#cpu-and-memory" class="hash-link" aria-label="Direct link to CPU and Memory" title="Direct link to CPU and Memory">​</a></h3><p>The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">2</td><td align="center">4 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">4</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">8</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">16</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">32</td><td align="center">64 GB</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="disks-1">Disks<a href="#disks-1" class="hash-link" aria-label="Direct link to Disks" title="Direct link to Disks">​</a></h3><p>The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="network">Network<a href="#network" class="hash-link" aria-label="Direct link to Network" title="Direct link to Network">​</a></h3><p>You should consider increasing the subnet size for the cluster CIDR so that you don&#x27;t run out of IPs for the pods. You can do that by passing the <code>--cluster-cidr</code> option to K3s server upon starting.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="Direct link to Database" title="Direct link to Database">​</a></h3><p>K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd.  See <a href="/datastore">Cluster Datastore</a> for more info.</p><p>The following is a sizing guide for the database resources you need to run large clusters:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">1</td><td align="center">2 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">2</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">4</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">8</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">16</td><td align="center">64 GB</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Installation</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/configuration"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Configuration Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#architecture" class="table-of-contents__link toc-highlight">Architecture</a></li><li><a href="#operating-systems" class="table-of-contents__link toc-highlight">Operating Systems</a></li><li><a href="#hardware" class="table-of-contents__link toc-highlight">Hardware</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a><ul><li><a href="#inbound-rules-for-k3s-server-nodes" class="table-of-contents__link toc-highlight">Inbound Rules for K3s Server Nodes</a></li></ul></li><li><a href="#large-clusters" class="table-of-contents__link toc-highlight">Large Clusters</a><ul><li><a href="#cpu-and-memory" class="table-of-contents__link toc-highlight">CPU and Memory</a></li><li><a href="#disks-1" class="table-of-contents__link toc-highlight">Disks</a></li><li><a href="#network" class="table-of-contents__link toc-highlight">Network</a></li><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Requirements</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Requirements</h1></header><p>K3s is very lightweight, but has some minimum requirements as outlined below.</p><p>Whether you&#x27;re configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="Direct link to Prerequisites" title="Direct link to Prerequisites">​</a></h2><p>Two nodes cannot have the same hostname.</p><p>If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the <code>--with-node-id</code> option to append a random suffix for each node, or devise a unique name to pass with <code>--node-name</code> or <code>$K3S_NODE_NAME</code> for each node you add to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="architecture">Architecture<a href="#architecture" class="hash-link" aria-label="Direct link to Architecture" title="Direct link to Architecture">​</a></h2><p>K3s is available for the following architectures:</p><ul><li>x86_64</li><li>armhf</li><li>arm64/aarch64</li><li>s390x</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>ARM64 Page Size</div><div class="admonitionContent_S0QG"><p>Prior to May 2023 releases (v1.24.14+k3s1, v1.25.10+k3s1, v1.26.5+k3s1, v1.27.2+k3s1), on <code>aarch64/arm64</code> systems, the OS must use a 4k page size. <strong>RHEL9</strong>, <strong>Ubuntu</strong>, <strong>Raspberry PI OS</strong>, and <strong>SLES</strong> all meet this requirement.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="operating-systems">Operating Systems<a href="#operating-systems" class="hash-link" aria-label="Direct link to Operating Systems" title="Direct link to Operating Systems">​</a></h2><p>K3s is expected to work on most modern Linux systems.</p><p>Some OSs have specific requirements:</p><ul><li>If you are using <strong>(Red Hat/CentOS) Enterprise Linux</strong>, follow <a href="/advanced#red-hat-enterprise-linux--centos">these steps</a> for additional setup.</li><li>If you are using <strong>Raspberry Pi OS</strong>, follow <a href="/advanced#raspberry-pi">these steps</a> to switch to legacy iptables.</li></ul><p>For more information on which OSs were tested with Rancher managed K3s clusters, refer to the <a href="https://rancher.com/support-maintenance-terms/" target="_blank" rel="noopener noreferrer">Rancher support and maintenance terms.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="hardware">Hardware<a href="#hardware" class="hash-link" aria-label="Direct link to Hardware" title="Direct link to Hardware">​</a></h2><p>Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here.</p><table><thead><tr><th>Spec</th><th>Minimum</th><th>Recommended</th></tr></thead><tbody><tr><td>CPU</td><td>1 core</td><td>2 cores</td></tr><tr><td>RAM</td><td>512 MB</td><td>1 GB</td></tr></tbody></table><p><a href="/reference/resource-profiling">Resource Profiling</a> captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Raspberry Pi and embedded etcd</div><div class="admonitionContent_S0QG"><p>If deploying K3s with embedded etcd on a Raspberry Pi, it is recommended that you use an external SSD. etcd is write intensive, and SD cards cannot handle the IO load.</p></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="disks">Disks<a href="#disks" class="hash-link" aria-label="Direct link to Disks" title="Direct link to Disks">​</a></h4><p>K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="Direct link to Networking" title="Direct link to Networking">​</a></h2><p>The K3s server needs port 6443 to be accessible by all nodes.</p><p>The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s.</p><p>If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250.</p><p>If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>Important</div><div class="admonitionContent_S0QG"><p>The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.</p></div></div><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>Flannel relies on the <a href="https://www.cni.dev/plugins/current/main/bridge/" target="_blank" rel="noopener noreferrer">Bridge CNI plugin</a> to create a L2 network that switches traffic. Rogue pods with <code>NET_RAW</code> capabilities can abuse that L2 network to launch attacks such as <a href="https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf" target="_blank" rel="noopener noreferrer">ARP spoofing</a>. Therefore, as documented in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">Kubernetes docs</a>, please set a restricted profile that disables <code>NET_RAW</code> on non-trustable pods.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="inbound-rules-for-k3s-server-nodes">Inbound Rules for K3s Server Nodes<a href="#inbound-rules-for-k3s-server-nodes" class="hash-link" aria-label="Direct link to Inbound Rules for K3s Server Nodes" title="Direct link to Inbound Rules for K3s Server Nodes">​</a></h3><table><thead><tr><th>Protocol</th><th>Port</th><th>Source</th><th>Destination</th><th>Description</th></tr></thead><tbody><tr><td>TCP</td><td>2379-2380</td><td>Servers</td><td>Servers</td><td>Required only for HA with embedded etcd</td></tr><tr><td>TCP</td><td>6443</td><td>Agents</td><td>Servers</td><td>K3s supervisor and Kubernetes API Server</td></tr><tr><td>UDP</td><td>8472</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel VXLAN</td></tr><tr><td>TCP</td><td>10250</td><td>All nodes</td><td>All nodes</td><td>Kubelet metrics</td></tr><tr><td>UDP</td><td>51820</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv4</td></tr><tr><td>UDP</td><td>51821</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv6</td></tr></tbody></table><p>Typically, all outbound traffic is allowed.</p><p>Additional changes to the firewall may be required depending on the OS used. See <a href="/advanced#additional-os-preparations">Additional OS Preparations</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="large-clusters">Large Clusters<a href="#large-clusters" class="hash-link" aria-label="Direct link to Large Clusters" title="Direct link to Large Clusters">​</a></h2><p>Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:</p><ul><li>MySQL</li><li>PostgreSQL</li><li>etcd</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cpu-and-memory">CPU and Memory<a href="#cpu-and-memory" class="hash-link" aria-label="Direct link to CPU and Memory" title="Direct link to CPU and Memory">​</a></h3><p>The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">2</td><td align="center">4 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">4</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">8</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">16</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">32</td><td align="center">64 GB</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="disks-1">Disks<a href="#disks-1" class="hash-link" aria-label="Direct link to Disks" title="Direct link to Disks">​</a></h3><p>The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="network">Network<a href="#network" class="hash-link" aria-label="Direct link to Network" title="Direct link to Network">​</a></h3><p>You should consider increasing the subnet size for the cluster CIDR so that you don&#x27;t run out of IPs for the pods. You can do that by passing the <code>--cluster-cidr</code> option to K3s server upon starting.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="Direct link to Database" title="Direct link to Database">​</a></h3><p>K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd.  See <a href="/datastore">Cluster Datastore</a> for more info.</p><p>The following is a sizing guide for the database resources you need to run large clusters:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">1</td><td align="center">2 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">2</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">4</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">8</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">16</td><td align="center">64 GB</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Installation</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/configuration"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Configuration Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#architecture" class="table-of-contents__link toc-highlight">Architecture</a></li><li><a href="#operating-systems" class="table-of-contents__link toc-highlight">Operating Systems</a></li><li><a href="#hardware" class="table-of-contents__link toc-highlight">Hardware</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a><ul><li><a href="#inbound-rules-for-k3s-server-nodes" class="table-of-contents__link toc-highlight">Inbound Rules for K3s Server Nodes</a></li></ul></li><li><a href="#large-clusters" class="table-of-contents__link toc-highlight">Large Clusters</a><ul><li><a href="#cpu-and-memory" class="table-of-contents__link toc-highlight">CPU and Memory</a></li><li><a href="#disks-1" class="table-of-contents__link toc-highlight">Disks</a></li><li><a href="#network" class="table-of-contents__link toc-highlight">Network</a></li><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/server-roles.html b/installation/server-roles.html
index 42bee1006..557c39209 100644
--- a/installation/server-roles.html
+++ b/installation/server-roles.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Managing Server Roles | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/server-roles"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Server Roles | K3s"><meta data-rh="true" name="description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><meta data-rh="true" property="og:description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/server-roles"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/server-roles" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/server-roles" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Managing Server Roles | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/server-roles"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Server Roles | K3s"><meta data-rh="true" name="description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><meta data-rh="true" property="og:description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/server-roles"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/server-roles" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/server-roles" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Server Roles</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Server Roles</h1></header><p>Starting the K3s server with <code>--cluster-init</code> will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-etcd-nodes">Dedicated <code>etcd</code> Nodes<a href="#dedicated-etcd-nodes" class="hash-link" aria-label="Direct link to dedicated-etcd-nodes" title="Direct link to dedicated-etcd-nodes">​</a></h2><p>To create a server with only the <code>etcd</code> role, start K3s with all the control-plane components disabled:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This first node will start etcd, and wait for additional <code>etcd</code> and/or <code>control-plane</code> nodes to join. The cluster will not be usable until you join an additional server with the <code>control-plane</code> components enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-control-plane-nodes">Dedicated <code>control-plane</code> Nodes<a href="#dedicated-control-plane-nodes" class="hash-link" aria-label="Direct link to dedicated-control-plane-nodes" title="Direct link to dedicated-control-plane-nodes">​</a></h2><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>A dedicated <code>control-plane</code> node cannot be the first server in the cluster; there must be an existing node with the <code>etcd</code> role before joining dedicated <code>control-plane</code> nodes.</p></div></div><p>To create a server with only the <code>control-plane</code> role, start k3s with etcd disabled:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --token </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">token</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --disable-etcd --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">etcd-only-node</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After creating dedicated server nodes, the selected roles will be visible in <code>kubectl get node</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME           STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-roles-to-existing-servers">Adding Roles To Existing Servers<a href="#adding-roles-to-existing-servers" class="hash-link" aria-label="Direct link to Adding Roles To Existing Servers" title="Direct link to Adding Roles To Existing Servers">​</a></h2><p>Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the <code>control-plane</code> role to a dedicated <code>etcd</code> node, you can remove the <code>--disable-apiserver --disable-controller-manager --disable-scheduler</code> flags from the systemd unit or config file, and restart the service.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file-syntax">Configuration File Syntax<a href="#configuration-file-syntax" class="hash-link" aria-label="Direct link to Configuration File Syntax" title="Direct link to Configuration File Syntax">​</a></h2><p>As with all other CLI flags, you can use the  <a href="/installation/configuration#configuration-file">Configuration File</a> to disable components, instead of passing the options as CLI flags. For example, to create a dedicated <code>etcd</code> node, you can place the following values in <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-apiserver</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-controller-manager</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-scheduler</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/airgap"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Air-Gap Install</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/packaged-components"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Managing Packaged Components</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#dedicated-etcd-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>etcd</code> Nodes</a></li><li><a href="#dedicated-control-plane-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>control-plane</code> Nodes</a></li><li><a href="#adding-roles-to-existing-servers" class="table-of-contents__link toc-highlight">Adding Roles To Existing Servers</a></li><li><a href="#configuration-file-syntax" class="table-of-contents__link toc-highlight">Configuration File Syntax</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Server Roles</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Server Roles</h1></header><p>Starting the K3s server with <code>--cluster-init</code> will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-etcd-nodes">Dedicated <code>etcd</code> Nodes<a href="#dedicated-etcd-nodes" class="hash-link" aria-label="Direct link to dedicated-etcd-nodes" title="Direct link to dedicated-etcd-nodes">​</a></h2><p>To create a server with only the <code>etcd</code> role, start K3s with all the control-plane components disabled:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This first node will start etcd, and wait for additional <code>etcd</code> and/or <code>control-plane</code> nodes to join. The cluster will not be usable until you join an additional server with the <code>control-plane</code> components enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-control-plane-nodes">Dedicated <code>control-plane</code> Nodes<a href="#dedicated-control-plane-nodes" class="hash-link" aria-label="Direct link to dedicated-control-plane-nodes" title="Direct link to dedicated-control-plane-nodes">​</a></h2><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>A dedicated <code>control-plane</code> node cannot be the first server in the cluster; there must be an existing node with the <code>etcd</code> role before joining dedicated <code>control-plane</code> nodes.</p></div></div><p>To create a server with only the <code>control-plane</code> role, start k3s with etcd disabled:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --token </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">token</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --disable-etcd --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">etcd-only-node</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After creating dedicated server nodes, the selected roles will be visible in <code>kubectl get node</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME           STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-roles-to-existing-servers">Adding Roles To Existing Servers<a href="#adding-roles-to-existing-servers" class="hash-link" aria-label="Direct link to Adding Roles To Existing Servers" title="Direct link to Adding Roles To Existing Servers">​</a></h2><p>Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the <code>control-plane</code> role to a dedicated <code>etcd</code> node, you can remove the <code>--disable-apiserver --disable-controller-manager --disable-scheduler</code> flags from the systemd unit or config file, and restart the service.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file-syntax">Configuration File Syntax<a href="#configuration-file-syntax" class="hash-link" aria-label="Direct link to Configuration File Syntax" title="Direct link to Configuration File Syntax">​</a></h2><p>As with all other CLI flags, you can use the  <a href="/installation/configuration#configuration-file">Configuration File</a> to disable components, instead of passing the options as CLI flags. For example, to create a dedicated <code>etcd</code> node, you can place the following values in <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-apiserver</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-controller-manager</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-scheduler</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/airgap"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Air-Gap Install</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation/packaged-components"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Managing Packaged Components</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#dedicated-etcd-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>etcd</code> Nodes</a></li><li><a href="#dedicated-control-plane-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>control-plane</code> Nodes</a></li><li><a href="#adding-roles-to-existing-servers" class="table-of-contents__link toc-highlight">Adding Roles To Existing Servers</a></li><li><a href="#configuration-file-syntax" class="table-of-contents__link toc-highlight">Configuration File Syntax</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/installation/uninstall.html b/installation/uninstall.html
index 49eea45f9..0597f9df8 100644
--- a/installation/uninstall.html
+++ b/installation/uninstall.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Uninstalling K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/uninstall"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Uninstalling K3s | K3s"><meta data-rh="true" name="description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><meta data-rh="true" property="og:description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/uninstall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/uninstall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/uninstall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Uninstalling K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/installation/uninstall"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Uninstalling K3s | K3s"><meta data-rh="true" name="description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><meta data-rh="true" property="og:description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/installation/uninstall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/uninstall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/uninstall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Uninstalling K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Uninstalling K3s</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.<br>
-<!-- -->It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.</p></div></div><p>If you installed K3s using the installation script, a script to uninstall K3s was generated during installation.</p><p>If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the <a href="/architecture#how-agent-node-registration-works">Node Registration</a> documentation for more information.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-servers">Uninstalling Servers<a href="#uninstalling-servers" class="hash-link" aria-label="Direct link to Uninstalling Servers" title="Direct link to Uninstalling Servers">​</a></h3><p>To uninstall K3s from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-agents">Uninstalling Agents<a href="#uninstalling-agents" class="hash-link" aria-label="Direct link to Uninstalling Agents" title="Direct link to Uninstalling Agents">​</a></h3><p>To uninstall K3s from an agent node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-agent-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/kube-dashboard"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Cluster Datastore</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#uninstalling-servers" class="table-of-contents__link toc-highlight">Uninstalling Servers</a></li><li><a href="#uninstalling-agents" class="table-of-contents__link toc-highlight">Uninstalling Agents</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/installation"><span itemprop="name">Installation</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Uninstalling K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Uninstalling K3s</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.<br>
+<!-- -->It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.</p></div></div><p>If you installed K3s using the installation script, a script to uninstall K3s was generated during installation.</p><p>If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the <a href="/architecture#how-agent-node-registration-works">Node Registration</a> documentation for more information.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-servers">Uninstalling Servers<a href="#uninstalling-servers" class="hash-link" aria-label="Direct link to Uninstalling Servers" title="Direct link to Uninstalling Servers">​</a></h3><p>To uninstall K3s from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-agents">Uninstalling Agents<a href="#uninstalling-agents" class="hash-link" aria-label="Direct link to Uninstalling Agents" title="Direct link to Uninstalling Agents">​</a></h3><p>To uninstall K3s from an agent node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-agent-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/installation/kube-dashboard"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/datastore"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Cluster Datastore</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#uninstalling-servers" class="table-of-contents__link toc-highlight">Uninstalling Servers</a></li><li><a href="#uninstalling-agents" class="table-of-contents__link toc-highlight">Uninstalling Agents</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/known-issues.html b/known-issues.html
index ab406e4e9..93db6f8a5 100644
--- a/known-issues.html
+++ b/known-issues.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Known Issues | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/known-issues"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Known Issues | K3s"><meta data-rh="true" name="description" content="The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release."><meta data-rh="true" property="og:description" content="The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/known-issues"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/known-issues" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/known-issues" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Known Issues | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/known-issues"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Known Issues | K3s"><meta data-rh="true" name="description" content="The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release."><meta data-rh="true" property="og:description" content="The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/known-issues"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/known-issues" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/known-issues" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Known Issues</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Known Issues</h1></header><p>The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="snap-docker">Snap Docker<a href="#snap-docker" class="hash-link" aria-label="Direct link to Snap Docker" title="Direct link to Snap Docker">​</a></h3><p>If you plan to use K3s with docker, Docker installed via a snap package is not recommended as it has been known to cause issues running K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="iptables">Iptables<a href="#iptables" class="hash-link" aria-label="Direct link to Iptables" title="Direct link to Iptables">​</a></h3><p>If you are running iptables in nftables mode instead of legacy you might encounter issues. We recommend utilizing newer iptables (such as 1.6.1+) to avoid issues. </p><p>Additionally, versions 1.8.0-1.8.4 have known issues that can cause K3s to fail. See <a href="/advanced#old-iptables-versions">Additional OS Preparations</a> for workarounds. </p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rootless-mode">Rootless Mode<a href="#rootless-mode" class="hash-link" aria-label="Direct link to Rootless Mode" title="Direct link to Rootless Mode">​</a></h3><p>Running K3s with Rootless mode is experimental and has several <a href="/advanced#known-issues-with-rootless-mode">known issues.</a></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="hardened-125">Upgrading Hardened Clusters from v1.24.x to v1.25.x<a href="#hardened-125" class="hash-link" aria-label="Direct link to Upgrading Hardened Clusters from v1.24.x to v1.25.x" title="Direct link to Upgrading Hardened Clusters from v1.24.x to v1.25.x">​</a></h3><p>Kubernetes removed PodSecurityPolicy from v1.25 in favor of Pod Security Standards. You can read more about PSS in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">upstream documentation</a>. For K3S, there are some manual steps that must be taken if any <code>PodSecurityPoliciy</code> has been configured on the nodes.</p><ol><li>On all nodes, update the <code>kube-apiserver-arg</code> value to remove the <code>PodSecurityPolicy</code> admission-plugin. Add the following arg value instead: <code>&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</code>, but do NOT restart or upgrade K3S yet. Below is an example of what a configuration file might look like after this update for the node to be hardened:</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="2"><li>Create the <code>/var/lib/rancher/k3s/server/psa.yaml</code> file with the following contents. You may want to exempt more namespaces as well. The below example exempts <code>kube-system</code> (required), <code>cis-operator-system</code> (optional, but useful for when running security scans through Rancher), and <code>system-upgrade</code> (required if doing <a href="/upgrades/automated">Automated Upgrades</a>).</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="3"><li>Perform the upgrade as normal. If doing <a href="/upgrades/automated">Automated Upgrades</a>, ensure that the namespace where the <code>system-upgrade-controller</code> pod is running in is setup to be privileged in accordance with the <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels" target="_blank" rel="noopener noreferrer">Pod Security levels</a>:</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">labels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># This value must be privileged for the controller to run successfully.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>After the upgrade is complete, remove any remaining PSP resources from the cluster. In many cases, there may be PodSecurityPolicies and associated RBAC resources in custom files used for hardening within <code>/var/lib/rancher/k3s/server/manifests/</code>. Remove those resources and k3s will update automatically. Sometimes, due to timing, some of these may be left in the cluster, in which case you will need to delete them manually. If the <a href="/security/hardening-guide">Hardening Guide</a> was previously followed, you should be able to delete them via the following:</li></ol><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Get the resources associated with PSPs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Delete those resources:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding &amp;&amp; kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/reference/resource-profiling"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Resource Profiling</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Security</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#snap-docker" class="table-of-contents__link toc-highlight">Snap Docker</a></li><li><a href="#iptables" class="table-of-contents__link toc-highlight">Iptables</a></li><li><a href="#rootless-mode" class="table-of-contents__link toc-highlight">Rootless Mode</a></li><li><a href="#hardened-125" class="table-of-contents__link toc-highlight">Upgrading Hardened Clusters from v1.24.x to v1.25.x</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Known Issues</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Known Issues</h1></header><p>The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="snap-docker">Snap Docker<a href="#snap-docker" class="hash-link" aria-label="Direct link to Snap Docker" title="Direct link to Snap Docker">​</a></h3><p>If you plan to use K3s with docker, Docker installed via a snap package is not recommended as it has been known to cause issues running K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="iptables">Iptables<a href="#iptables" class="hash-link" aria-label="Direct link to Iptables" title="Direct link to Iptables">​</a></h3><p>If you are running iptables in nftables mode instead of legacy you might encounter issues. We recommend utilizing newer iptables (such as 1.6.1+) to avoid issues. </p><p>Additionally, versions 1.8.0-1.8.4 have known issues that can cause K3s to fail. See <a href="/advanced#old-iptables-versions">Additional OS Preparations</a> for workarounds. </p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rootless-mode">Rootless Mode<a href="#rootless-mode" class="hash-link" aria-label="Direct link to Rootless Mode" title="Direct link to Rootless Mode">​</a></h3><p>Running K3s with Rootless mode is experimental and has several <a href="/advanced#known-issues-with-rootless-mode">known issues.</a></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="hardened-125">Upgrading Hardened Clusters from v1.24.x to v1.25.x<a href="#hardened-125" class="hash-link" aria-label="Direct link to Upgrading Hardened Clusters from v1.24.x to v1.25.x" title="Direct link to Upgrading Hardened Clusters from v1.24.x to v1.25.x">​</a></h3><p>Kubernetes removed PodSecurityPolicy from v1.25 in favor of Pod Security Standards. You can read more about PSS in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">upstream documentation</a>. For K3S, there are some manual steps that must be taken if any <code>PodSecurityPoliciy</code> has been configured on the nodes.</p><ol><li>On all nodes, update the <code>kube-apiserver-arg</code> value to remove the <code>PodSecurityPolicy</code> admission-plugin. Add the following arg value instead: <code>&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</code>, but do NOT restart or upgrade K3S yet. Below is an example of what a configuration file might look like after this update for the node to be hardened:</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="2"><li>Create the <code>/var/lib/rancher/k3s/server/psa.yaml</code> file with the following contents. You may want to exempt more namespaces as well. The below example exempts <code>kube-system</code> (required), <code>cis-operator-system</code> (optional, but useful for when running security scans through Rancher), and <code>system-upgrade</code> (required if doing <a href="/upgrades/automated">Automated Upgrades</a>).</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="3"><li>Perform the upgrade as normal. If doing <a href="/upgrades/automated">Automated Upgrades</a>, ensure that the namespace where the <code>system-upgrade-controller</code> pod is running in is setup to be privileged in accordance with the <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels" target="_blank" rel="noopener noreferrer">Pod Security levels</a>:</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">labels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># This value must be privileged for the controller to run successfully.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>After the upgrade is complete, remove any remaining PSP resources from the cluster. In many cases, there may be PodSecurityPolicies and associated RBAC resources in custom files used for hardening within <code>/var/lib/rancher/k3s/server/manifests/</code>. Remove those resources and k3s will update automatically. Sometimes, due to timing, some of these may be left in the cluster, in which case you will need to delete them manually. If the <a href="/security/hardening-guide">Hardening Guide</a> was previously followed, you should be able to delete them via the following:</li></ol><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Get the resources associated with PSPs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Delete those resources:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding &amp;&amp; kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/reference/resource-profiling"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Resource Profiling</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Security</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#snap-docker" class="table-of-contents__link toc-highlight">Snap Docker</a></li><li><a href="#iptables" class="table-of-contents__link toc-highlight">Iptables</a></li><li><a href="#rootless-mode" class="table-of-contents__link toc-highlight">Rootless Mode</a></li><li><a href="#hardened-125" class="table-of-contents__link toc-highlight">Upgrading Hardened Clusters from v1.24.x to v1.25.x</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/404.html b/kr/404.html
index c22958fba..b031de0ea 100644
--- a/kr/404.html
+++ b/kr/404.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">페이지를 찾을 수 없습니다 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/404.html"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="og:title" content="페이지를 찾을 수 없습니다 | K3s"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/404.html"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/404.html" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/404.html" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">페이지를 찾을 수 없습니다 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/404.html"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="og:title" content="페이지를 찾을 수 없습니다 | K3s"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/404.html"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/404.html" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/404.html" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/404" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><main class="container margin-vert--xl"><div class="row"><div class="col col--6 col--offset-3"><h1 class="hero__title">페이지를 찾을 수 없습니다</h1><p>찾으시려는 페이지를 찾을 수 없습니다.</p><p>원래 링크의 출처인 사이트의 소유자에게 연락하여 링크가 끊어졌음을 알려주세요.</p></div></div></main></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/404" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><main class="container margin-vert--xl"><div class="row"><div class="col col--6 col--offset-3"><h1 class="hero__title">페이지를 찾을 수 없습니다</h1><p>찾으시려는 페이지를 찾을 수 없습니다.</p><p>원래 링크의 출처인 사이트의 소유자에게 연락하여 링크가 끊어졌음을 알려주세요.</p></div></div></main></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/advanced.html b/kr/advanced.html
index 200ace7f4..52717d863 100644
--- a/kr/advanced.html
+++ b/kr/advanced.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">고급 옵션 / 설정 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/advanced"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="고급 옵션 / 설정 | K3s"><meta data-rh="true" name="description" content="이 섹션에는 K3s를 실행하고 관리할 수 있는 다양한 방법과 K3s 사용을 위해 호스트 OS를 준비하는 데 필요한 단계를 설명하는 고급 정보가 포함되어 있습니다."><meta data-rh="true" property="og:description" content="이 섹션에는 K3s를 실행하고 관리할 수 있는 다양한 방법과 K3s 사용을 위해 호스트 OS를 준비하는 데 필요한 단계를 설명하는 고급 정보가 포함되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/advanced"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/advanced" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/advanced" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">고급 옵션 / 설정 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/advanced"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="고급 옵션 / 설정 | K3s"><meta data-rh="true" name="description" content="이 섹션에는 K3s를 실행하고 관리할 수 있는 다양한 방법과 K3s 사용을 위해 호스트 OS를 준비하는 데 필요한 단계를 설명하는 고급 정보가 포함되어 있습니다."><meta data-rh="true" property="og:description" content="이 섹션에는 K3s를 실행하고 관리할 수 있는 다양한 방법과 K3s 사용을 위해 호스트 OS를 준비하는 데 필요한 단계를 설명하는 고급 정보가 포함되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/advanced"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/advanced" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/advanced" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">고급 옵션 / 설정</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>고급 옵션 / 설정</h1></header><p>이 섹션에는 K3s를 실행하고 관리할 수 있는 다양한 방법과 K3s 사용을 위해 호스트 OS를 준비하는 데 필요한 단계를 설명하는 고급 정보가 포함되어 있습니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="인증서-관리">인증서 관리<a href="#인증서-관리" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="인증-기관-인증서">인증 기관 인증서<a href="#인증-기관-인증서" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s는 첫 번째 서버 노드를 시작하는 동안 자체 서명된 CA(인증 기관) 인증서를 생성합니다. 이 CA 인증서는 10년 동안 유효하며 자동으로 갱신되지 않습니다.</p><p>사용자 지정 CA 인증서 사용 또는 자체 서명 CA 인증서 갱신에 대한 자세한 내용은 <a href="/kr/cli/certificate#certificate-authority-ca-certificates"><code>k3s 인증서 rotate-ca</code> 명령 설명서</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="클라이언트-및-서버-인증서">클라이언트 및 서버 인증서<a href="#클라이언트-및-서버-인증서" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s 클라이언트 및 서버 인증서는 발급한 날로부터 365일 동안 유효합니다. 만료되었거나 만료 후 90일 이내에 만료된 인증서는 K3s를 시작할 때마다 자동으로 갱신됩니다.</p><p>클라이언트 및 서버 인증서를 수동으로 로테이션하는 것에 대한 정보는 <a href="/kr/cli/certificate#client-and-server-certificates"><code>k3s 인증서 로테이션</code> 명령 설명서</a>를 참조하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="토큰-관리">토큰 관리<a href="#토큰-관리" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>기본적으로 K3s는 서버와 에이전트 모두에 단일 정적 토큰을 사용합니다. 이 토큰은 클러스터가 생성된 후에는 변경할 수 없습니다.
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">고급 옵션 / 설정</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>고급 옵션 / 설정</h1></header><p>이 섹션에는 K3s를 실행하고 관리할 수 있는 다양한 방법과 K3s 사용을 위해 호스트 OS를 준비하는 데 필요한 단계를 설명하는 고급 정보가 포함되어 있습니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="인증서-관리">인증서 관리<a href="#인증서-관리" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="인증-기관-인증서">인증 기관 인증서<a href="#인증-기관-인증서" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s는 첫 번째 서버 노드를 시작하는 동안 자체 서명된 CA(인증 기관) 인증서를 생성합니다. 이 CA 인증서는 10년 동안 유효하며 자동으로 갱신되지 않습니다.</p><p>사용자 지정 CA 인증서 사용 또는 자체 서명 CA 인증서 갱신에 대한 자세한 내용은 <a href="/kr/cli/certificate#certificate-authority-ca-certificates"><code>k3s 인증서 rotate-ca</code> 명령 설명서</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="클라이언트-및-서버-인증서">클라이언트 및 서버 인증서<a href="#클라이언트-및-서버-인증서" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s 클라이언트 및 서버 인증서는 발급한 날로부터 365일 동안 유효합니다. 만료되었거나 만료 후 90일 이내에 만료된 인증서는 K3s를 시작할 때마다 자동으로 갱신됩니다.</p><p>클라이언트 및 서버 인증서를 수동으로 로테이션하는 것에 대한 정보는 <a href="/kr/cli/certificate#client-and-server-certificates"><code>k3s 인증서 로테이션</code> 명령 설명서</a>를 참조하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="토큰-관리">토큰 관리<a href="#토큰-관리" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>기본적으로 K3s는 서버와 에이전트 모두에 단일 정적 토큰을 사용합니다. 이 토큰은 클러스터가 생성된 후에는 변경할 수 없습니다.
 에이전트 조인에만 사용할 수 있는 두 번째 정적 토큰을 활성화하거나 자동으로 만료되는 임시 <code>kubeadm</code> 스타일 조인 토큰을 생성할 수 있습니다.
 자세한 내용은 <a href="/kr/cli/token"><code>k3s token</code> 명령어 설명서</a>를 참고하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="http-프록시-구성하기">HTTP 프록시 구성하기<a href="#http-프록시-구성하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>HTTP 프록시를 통해서만 외부와 연결할 수 있는 환경에서 K3s를 실행하는 경우, K3s 시스템드 서비스에서 프록시 설정을 구성할 수 있습니다. 그러면 이 프록시 설정이 K3s에서 사용되어 내장 컨테이너와 kubelet에 전달됩니다.</p><p>K3s 설치 스크립트는 자동으로 현재 셸에서 <code>HTTP_PROXY</code>, <code>HTTPS_PROXY</code> 및 <code>NO_PROXY</code> 변수와 <code>CONTAINERD_HTTP_PROXY</code>, <code>CONTAINERD_HTTPS_PROXY</code> 및 <code>CONTAINERD_NO_PROXY</code> 변수가 있는 경우 이를 systemd 서비스의 환경 파일에 작성합니다:</p><ul><li><code>/etc/systemd/system/k3s.service.env</code></li><li><code>/etc/systemd/system/k3s-agent.service.env</code></li></ul><p>물론 이 파일을 편집하여 프록시를 구성할 수도 있습니다.</p><p>K3s는 클러스터 내부 파드 및 서비스 IP 범위와 클러스터 DNS 도메인을 자동으로 <code>NO_PROXY</code> 항목 목록에 추가합니다. 쿠버네티스 노드 자체에서 사용하는 IP 주소 범위(즉, 노드의 퍼블릭 및 프라이빗 IP)가 <code>NO_PROXY</code> 목록에 포함되어 있는지 또는 프록시를 통해 노드에 도달할 수 있는지 확인해야 합니다.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">HTTP_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">HTTPS_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s와 Kubelet에 영향을 주지 않고 컨테이너에 대한 프록시 설정을 구성하려면, 변수 앞에 <code>CONTAINERD_</code>를 붙이면 됩니다:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="컨테이너-런타임으로-docker-사용">컨테이너 런타임으로 Docker 사용<a href="#컨테이너-런타임으로-docker-사용" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s는 업계 표준 컨테이너 런타임인 <a href="https://containerd.io/" target="_blank" rel="noopener noreferrer">containerd</a>를 포함하며 기본값으로 사용합니다.
 쿠버네티스 1.24부터, kubelet은 더 이상 kubelet이 dockerd와 통신할 수 있도록 하는 컴포넌트인 dockershim을 포함하지 않습니다.
@@ -41,10 +41,10 @@
 지연 풀링과 eStargz에 대한 자세한 내용은 <a href="https://github.com/containerd/stargz-snapshotter" target="_blank" rel="noopener noreferrer">Stargz Snapshotter 프로젝트 리포지토리</a>를 참고하시기 바랍니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="지연-풀링이-가능하도록-k3s-구성하기">지연 풀링이 가능하도록 k3s 구성하기<a href="#지연-풀링이-가능하도록-k3s-구성하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>아래와 같이 k3s 서버와 에이전트에는 <code>--snapshotter=stargz</code> 옵션이 필요합니다.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server --snapshotter</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">stargz</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>이 구성을 사용하면, eStargz 형식의 이미지에 대해 지연 풀링을 수행할 수 있습니다.
 다음 예제 파드 매니페스트는 eStargz 형식의 <code>node:13.13.0</code> 이미지(<code>ghcr.io/stargz-containers/node:13.13.0-esgz</code>)를 사용합니다.
 스타즈 스냅샷터가 활성화되면 K3s는 이 이미지에 대해 지연 풀링을 수행합니다.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nodejs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nodejs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">estargz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ghcr.io/stargz</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">containers/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">13.13.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">esgz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">command</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;node&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">e</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> var http = require(&#x27;http&#x27;);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          http.createServer(function(req</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> res) </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          res.writeHead(200);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          res.end(&#x27;Hello World</span><span class="token tag" style="color:rgb(255, 85, 114)">!</span><span class="token plain">\n&#x27;);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain">).listen(80);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="추가-로깅-소스">추가 로깅 소스<a href="#추가-로깅-소스" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s용 <a href="https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/" target="_blank" rel="noopener noreferrer">랜처 로깅</a>은 랜처를 사용하지 않고 설치할 수 있습니다. 이를 위해서는 다음 지침을 실행해야 합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm repo </span><span class="token function" style="color:rgb(130, 170, 255)">add</span><span class="token plain"> rancher-charts https://charts.rancher.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm repo update</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true rancher-charts/rancher-logging</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="추가-네트워크-정책-로깅">추가 네트워크 정책 로깅<a href="#추가-네트워크-정책-로깅" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>네트워크 정책에 의해 차단된 패킷을 로깅할 수 있습니다. 패킷은 차단 네트워크 정책을 포함한 패킷 세부 정보를 표시하는 iptables NFLOG 작업으로 전송됩니다.</p><p>트래픽이 많으면 로그 메시지 수가 매우 많아질 수 있습니다. 정책별로 로그 속도를 제어하려면, 해당 네트워크 정책에 다음 어노테이션을 추가하여 <code>limit</code> 및 <code>limit-burst</code> iptables 매개변수를 설정합니다:</p><ul><li><code>kube-router.io/netpol-nflog-limit=&lt;LIMIT-VALUE&gt;</code></li><li><code>kube-router.io/netpol-nflog-limit-burst=&lt;LIMIT-BURST-VALUE&gt;</code></li></ul><p>기본값은 <code>limit=10/minute</code>와 <code>limit-burst=10</code>입니다. 이러한 필드의 형식과 사용 가능한 값에 대한 자세한 내용은 <a href="https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches" target="_blank" rel="noopener noreferrer">iptables manual</a>을 참조하세요.</p><p>NFLOG 패킷을 로그 항목으로 변환하려면 ulogd2를 설치하고 <code>[log1]</code>을 <code>group=100</code>에서 읽도록 구성합니다. 그런 다음 ulogd2 서비스를 다시 시작하여 새 구성이 커밋되도록 합니다.
-네트워크 정책 규칙에 의해 패킷이 차단되면 <code>/var/log/ulog/syslogemu.log</code>에 로그 메시지가 나타납니다.</p><p>NFLOG 넷링크 소켓으로 전송된 패킷은 tcpdump 또는 tshark와 같은 명령줄 도구를 사용하여 읽을 수도 있습니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">tcpdump -ni nflog:100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>더 쉽게 사용할 수 있지만, tcpdump는 패킷을 차단한 네트워크 정책의 이름을 표시하지 않습니다. 대신 와이어샤크의 tshark 명령을 사용하여 정책 이름이 포함된 <code>nflog.prefix</code> 필드를 포함한 전체 NFLOG 패킷 헤더를 표시하세요.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/helm"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">헬름(Helm)</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/faq"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">자주 묻는 질문</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#인증서-관리" class="table-of-contents__link toc-highlight">인증서 관리</a><ul><li><a href="#인증-기관-인증서" class="table-of-contents__link toc-highlight">인증 기관 인증서</a></li><li><a href="#클라이언트-및-서버-인증서" class="table-of-contents__link toc-highlight">클라이언트 및 서버 인증서</a></li></ul></li><li><a href="#토큰-관리" class="table-of-contents__link toc-highlight">토큰 관리</a></li><li><a href="#http-프록시-구성하기" class="table-of-contents__link toc-highlight">HTTP 프록시 구성하기</a></li><li><a href="#컨테이너-런타임으로-docker-사용" class="table-of-contents__link toc-highlight">컨테이너 런타임으로 Docker 사용</a></li><li><a href="#etcdctl-사용하기" class="table-of-contents__link toc-highlight">etcdctl 사용하기</a></li><li><a href="#컨테이너-설정하기" class="table-of-contents__link toc-highlight">컨테이너 설정하기</a></li><li><a href="#nvidia-컨테이너-런타임-지원" class="table-of-contents__link toc-highlight">NVIDIA 컨테이너 런타임 지원</a></li><li><a href="#에이전트-없는-서버-실행하기실험적" class="table-of-contents__link toc-highlight">에이전트 없는 서버 실행하기(실험적)</a></li><li><a href="#루트리스-서버-실행실험적" class="table-of-contents__link toc-highlight">루트리스 서버 실행(실험적)</a><ul><li><a href="#루트리스-모드의-알려진-이슈" class="table-of-contents__link toc-highlight">루트리스 모드의 알려진 이슈</a></li><li><a href="#루트리스-서버-시작하기" class="table-of-contents__link toc-highlight">루트리스 서버 시작하기</a></li><li><a href="#고급-루트리스-구성" class="table-of-contents__link toc-highlight">고급 루트리스 구성</a></li><li><a href="#루트리스-문제-해결하기" class="table-of-contents__link toc-highlight">루트리스 문제 해결하기</a></li></ul></li><li><a href="#노드-레이블-및-테인트" class="table-of-contents__link toc-highlight">노드 레이블 및 테인트</a></li><li><a href="#설치-스크립트로-서비스-시작하기" class="table-of-contents__link toc-highlight">설치 스크립트로 서비스 시작하기</a></li><li><a href="#추가-os-준비-사항" class="table-of-contents__link toc-highlight">추가 OS 준비 사항</a><ul><li><a href="#이전-iptables-버전" class="table-of-contents__link toc-highlight">이전 iptables 버전</a></li><li><a href="#red-hat-enterprise-linux--centos" class="table-of-contents__link toc-highlight">Red Hat Enterprise Linux / CentOS</a></li><li><a href="#ubuntu" class="table-of-contents__link toc-highlight">Ubuntu</a></li><li><a href="#raspberry-pi" class="table-of-contents__link toc-highlight">Raspberry Pi</a></li></ul></li><li><a href="#docker에서-k3s-실행하기" class="table-of-contents__link toc-highlight">Docker에서 k3s 실행하기</a></li><li><a href="#selinux-지원" class="table-of-contents__link toc-highlight">SELinux 지원</a><ul><li><a href="#selinux-적용-활성화하기" class="table-of-contents__link toc-highlight">SELinux 적용 활성화하기</a></li></ul></li><li><a href="#지연-풀링의-지연-풀링-활성화-실험적" class="table-of-contents__link toc-highlight">지연 풀링의 지연 풀링 활성화 (실험적)</a><ul><li><a href="#지연-풀링과-estargz란-무엇인가요" class="table-of-contents__link toc-highlight">지연 풀링과 eStargz란 무엇인가요?</a></li><li><a href="#지연-풀링이-가능하도록-k3s-구성하기" class="table-of-contents__link toc-highlight">지연 풀링이 가능하도록 k3s 구성하기</a></li></ul></li><li><a href="#추가-로깅-소스" class="table-of-contents__link toc-highlight">추가 로깅 소스</a></li><li><a href="#추가-네트워크-정책-로깅" class="table-of-contents__link toc-highlight">추가 네트워크 정책 로깅</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+네트워크 정책 규칙에 의해 패킷이 차단되면 <code>/var/log/ulog/syslogemu.log</code>에 로그 메시지가 나타납니다.</p><p>NFLOG 넷링크 소켓으로 전송된 패킷은 tcpdump 또는 tshark와 같은 명령줄 도구를 사용하여 읽을 수도 있습니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">tcpdump -ni nflog:100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>더 쉽게 사용할 수 있지만, tcpdump는 패킷을 차단한 네트워크 정책의 이름을 표시하지 않습니다. 대신 와이어샤크의 tshark 명령을 사용하여 정책 이름이 포함된 <code>nflog.prefix</code> 필드를 포함한 전체 NFLOG 패킷 헤더를 표시하세요.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/helm"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">헬름(Helm)</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/faq"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">자주 묻는 질문</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#인증서-관리" class="table-of-contents__link toc-highlight">인증서 관리</a><ul><li><a href="#인증-기관-인증서" class="table-of-contents__link toc-highlight">인증 기관 인증서</a></li><li><a href="#클라이언트-및-서버-인증서" class="table-of-contents__link toc-highlight">클라이언트 및 서버 인증서</a></li></ul></li><li><a href="#토큰-관리" class="table-of-contents__link toc-highlight">토큰 관리</a></li><li><a href="#http-프록시-구성하기" class="table-of-contents__link toc-highlight">HTTP 프록시 구성하기</a></li><li><a href="#컨테이너-런타임으로-docker-사용" class="table-of-contents__link toc-highlight">컨테이너 런타임으로 Docker 사용</a></li><li><a href="#etcdctl-사용하기" class="table-of-contents__link toc-highlight">etcdctl 사용하기</a></li><li><a href="#컨테이너-설정하기" class="table-of-contents__link toc-highlight">컨테이너 설정하기</a></li><li><a href="#nvidia-컨테이너-런타임-지원" class="table-of-contents__link toc-highlight">NVIDIA 컨테이너 런타임 지원</a></li><li><a href="#에이전트-없는-서버-실행하기실험적" class="table-of-contents__link toc-highlight">에이전트 없는 서버 실행하기(실험적)</a></li><li><a href="#루트리스-서버-실행실험적" class="table-of-contents__link toc-highlight">루트리스 서버 실행(실험적)</a><ul><li><a href="#루트리스-모드의-알려진-이슈" class="table-of-contents__link toc-highlight">루트리스 모드의 알려진 이슈</a></li><li><a href="#루트리스-서버-시작하기" class="table-of-contents__link toc-highlight">루트리스 서버 시작하기</a></li><li><a href="#고급-루트리스-구성" class="table-of-contents__link toc-highlight">고급 루트리스 구성</a></li><li><a href="#루트리스-문제-해결하기" class="table-of-contents__link toc-highlight">루트리스 문제 해결하기</a></li></ul></li><li><a href="#노드-레이블-및-테인트" class="table-of-contents__link toc-highlight">노드 레이블 및 테인트</a></li><li><a href="#설치-스크립트로-서비스-시작하기" class="table-of-contents__link toc-highlight">설치 스크립트로 서비스 시작하기</a></li><li><a href="#추가-os-준비-사항" class="table-of-contents__link toc-highlight">추가 OS 준비 사항</a><ul><li><a href="#이전-iptables-버전" class="table-of-contents__link toc-highlight">이전 iptables 버전</a></li><li><a href="#red-hat-enterprise-linux--centos" class="table-of-contents__link toc-highlight">Red Hat Enterprise Linux / CentOS</a></li><li><a href="#ubuntu" class="table-of-contents__link toc-highlight">Ubuntu</a></li><li><a href="#raspberry-pi" class="table-of-contents__link toc-highlight">Raspberry Pi</a></li></ul></li><li><a href="#docker에서-k3s-실행하기" class="table-of-contents__link toc-highlight">Docker에서 k3s 실행하기</a></li><li><a href="#selinux-지원" class="table-of-contents__link toc-highlight">SELinux 지원</a><ul><li><a href="#selinux-적용-활성화하기" class="table-of-contents__link toc-highlight">SELinux 적용 활성화하기</a></li></ul></li><li><a href="#지연-풀링의-지연-풀링-활성화-실험적" class="table-of-contents__link toc-highlight">지연 풀링의 지연 풀링 활성화 (실험적)</a><ul><li><a href="#지연-풀링과-estargz란-무엇인가요" class="table-of-contents__link toc-highlight">지연 풀링과 eStargz란 무엇인가요?</a></li><li><a href="#지연-풀링이-가능하도록-k3s-구성하기" class="table-of-contents__link toc-highlight">지연 풀링이 가능하도록 k3s 구성하기</a></li></ul></li><li><a href="#추가-로깅-소스" class="table-of-contents__link toc-highlight">추가 로깅 소스</a></li><li><a href="#추가-네트워크-정책-로깅" class="table-of-contents__link toc-highlight">추가 네트워크 정책 로깅</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/architecture.html b/kr/architecture.html
index 2d284e7f6..1ffcecf99 100644
--- a/kr/architecture.html
+++ b/kr/architecture.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">아키텍처 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/architecture"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="아키텍처 | K3s"><meta data-rh="true" name="description" content="이 페이지에서는 고가용성 K3s 서버 클러스터의 아키텍처와 단일 노드 서버 클러스터와의 차이점에 대해 설명합니다."><meta data-rh="true" property="og:description" content="이 페이지에서는 고가용성 K3s 서버 클러스터의 아키텍처와 단일 노드 서버 클러스터와의 차이점에 대해 설명합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/architecture"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/architecture" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/architecture" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">아키텍처 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/architecture"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="아키텍처 | K3s"><meta data-rh="true" name="description" content="이 페이지에서는 고가용성 K3s 서버 클러스터의 아키텍처와 단일 노드 서버 클러스터와의 차이점에 대해 설명합니다."><meta data-rh="true" property="og:description" content="이 페이지에서는 고가용성 K3s 서버 클러스터의 아키텍처와 단일 노드 서버 클러스터와의 차이점에 대해 설명합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/architecture"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/architecture" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/architecture" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">아키텍처</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>아키텍처</h1></header><p>이 페이지에서는 고가용성 K3s 서버 클러스터의 아키텍처와 단일 노드 서버 클러스터와의 차이점에 대해 설명합니다.</p><p>또한 에이전트 노드가 K3s 서버에 등록되는 방법도 설명합니다.</p><ul><li>서버 노드는 <code>k3s server</code> 명령을 실행하는 호스트로 정의되며, 컨트롤 플레인 및 데이터스토어 구성 요소는 K3s에서 관리합니다.</li><li>에이전트 노드는 데이터스토어 또는 컨트롤 플레인 구성 요소 없이 <code>k3s agent</code> 명령을 실행하는 호스트로 정의됩니다.</li><li>서버와 에이전트 모두 kubelet, 컨테이너 런타임 및 CNI를 실행합니다. 에이전트 없는 서버 실행에 대한 자세한 내용은 <a href="/kr/advanced#running-agentless-servers-experimental">고급 옵션</a> 설명서를 참조하세요.</li></ul><p><img loading="lazy" src="/kr/assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg" width="1562" height="898" class="img_ev3q"></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="임베디드-db가-있는-단일-서버-설정">임베디드 DB가 있는 단일 서버 설정<a href="#임베디드-db가-있는-단일-서버-설정" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>다음 다이어그램은 임베디드 SQLite 데이터베이스가 있는 단일 노드 K3s 서버가 있는 클러스터의 예를 보여줍니다.</p><p>이 구성에서 각 에이전트 노드는 동일한 서버 노드에 등록됩니다. K3s 사용자는 서버 노드에서 K3s API를 호출하여 쿠버네티스 리소스를 조작할 수 있습니다.</p><img src="/kr/img/k3s-architecture-single-server.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-architecture-single-server-dark.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="외부-db가-있는-고가용성-k3s-서버">외부 DB가 있는 고가용성 K3s 서버<a href="#외부-db가-있는-고가용성-k3s-서버" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>단일 서버 클러스터는 다양한 사용 사례를 충족할 수 있지만, Kubernetes 컨트롤 플레인의 가동 시간이 중요한 환경의 경우, HA 구성으로 K3s를 실행할 수 있습니다. HA K3s 클러스터는 다음과 같이 구성됩니다:</p><ul><li>두 개 이상의 <strong>서버 노드</strong>가 Kubernetes API를 제공하고 다른 컨트롤 플레인 서비스를 실행합니다.</li><li><strong>외부 데이터스토어</strong>(단일 서버 설정에 사용되는 임베디드 SQLite 데이터스토어와 반대)</li></ul><img src="/kr/img/k3s-architecture-ha-server.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-architecture-ha-server-dark.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="에이전트-노드를-위한-고정-등록-주소">에이전트 노드를 위한 고정 등록 주소<a href="#에이전트-노드를-위한-고정-등록-주소" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>고가용성 서버 구성에서 각 노드는 아래 다이어그램과 같이 고정 등록 주소를 사용하여 Kubernetes API에 등록해야 합니다.</p><p>등록 후 에이전트 노드는 서버 노드 중 하나에 직접 연결을 설정합니다.</p><img src="/kr/img/k3s-production-setup.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-production-setup-dark.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="에이전트-노드-등록-작동-방식">에이전트 노드 등록 작동 방식<a href="#에이전트-노드-등록-작동-방식" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>에이전트 노드는 <code>k3s agent</code> 프로세스에 의해 시작된 웹소켓 연결로 등록되며, 에이전트 프로세스의 일부로 실행되는 클라이언트 측 로드밸런서에 의해 연결이 유지됩니다. 이 로드 밸런서는 클러스터의 모든 서버에 대한 안정적인 연결을 유지하여 개별 서버의 중단을 허용하는 에이전시 서버에 대한 연결을 제공합니다.</p><p>에이전트는 노드 클러스터 시크릿과 노드에 대해 무작위로 생성된 비밀번호를 사용하여 서버에 등록하며, 이 비밀번호는 <code>/etc/rancher/node/password</code>에 저장됩니다. 서버는 개별 노드의 비밀번호를 쿠버네티스 시크릿으로 저장하며, 이후 모든 시도는 동일한 비밀번호를 사용해야 합니다. 노드 패스워드 시크릿은 <code>&lt;host&gt;.node-password.k3s</code> 템플릿을 사용하는 이름으로 <code>kube-system</code> 네임스페이스에 저장됩니다. 이는 노드 ID의 무결성을 보호하기 위해 수행됩니다.</p><p>에이전트의 <code>/etc/rancher/node</code> 디렉터리가 제거되거나 기존 이름을 사용하여 노드에 다시 가입하려는 경우, 클러스터에서 노드를 삭제해야 합니다. 이렇게 하면 이전 노드 항목과 노드 비밀번호 시크릿이 모두 정리되고 노드가 클러스터에 (재)조인할 수 있습니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>K3s v1.20.2 이전 서버는 <code>/var/lib/rancher/k3s/server/cred/node-passwd</code>에 디스크에 비밀번호를 저장합니다.</p></div></div><p>호스트 이름을 자주 재사용하지만 노드 암호 시크릿을 제거할 수 없는 경우, <code>--with-node-id</code> 플래그를 사용하여 K3s 서버 또는 에이전트를 시작하면 호스트 이름에 고유 노드 ID를 자동으로 추가할 수 있습니다. 활성화하면 노드 ID는 <code>/etc/rancher/node/</code>에도 저장됩니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">K3s - Lightweight Kubernetes</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/quick-start"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">빠른 시작 가이드</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#임베디드-db가-있는-단일-서버-설정" class="table-of-contents__link toc-highlight">임베디드 DB가 있는 단일 서버 설정</a></li><li><a href="#외부-db가-있는-고가용성-k3s-서버" class="table-of-contents__link toc-highlight">외부 DB가 있는 고가용성 K3s 서버</a></li><li><a href="#에이전트-노드를-위한-고정-등록-주소" class="table-of-contents__link toc-highlight">에이전트 노드를 위한 고정 등록 주소</a></li><li><a href="#에이전트-노드-등록-작동-방식" class="table-of-contents__link toc-highlight">에이전트 노드 등록 작동 방식</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">아키텍처</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>아키텍처</h1></header><p>이 페이지에서는 고가용성 K3s 서버 클러스터의 아키텍처와 단일 노드 서버 클러스터와의 차이점에 대해 설명합니다.</p><p>또한 에이전트 노드가 K3s 서버에 등록되는 방법도 설명합니다.</p><ul><li>서버 노드는 <code>k3s server</code> 명령을 실행하는 호스트로 정의되며, 컨트롤 플레인 및 데이터스토어 구성 요소는 K3s에서 관리합니다.</li><li>에이전트 노드는 데이터스토어 또는 컨트롤 플레인 구성 요소 없이 <code>k3s agent</code> 명령을 실행하는 호스트로 정의됩니다.</li><li>서버와 에이전트 모두 kubelet, 컨테이너 런타임 및 CNI를 실행합니다. 에이전트 없는 서버 실행에 대한 자세한 내용은 <a href="/kr/advanced#running-agentless-servers-experimental">고급 옵션</a> 설명서를 참조하세요.</li></ul><p><img loading="lazy" src="/kr/assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg" width="1562" height="898" class="img_ev3q"></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="임베디드-db가-있는-단일-서버-설정">임베디드 DB가 있는 단일 서버 설정<a href="#임베디드-db가-있는-단일-서버-설정" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>다음 다이어그램은 임베디드 SQLite 데이터베이스가 있는 단일 노드 K3s 서버가 있는 클러스터의 예를 보여줍니다.</p><p>이 구성에서 각 에이전트 노드는 동일한 서버 노드에 등록됩니다. K3s 사용자는 서버 노드에서 K3s API를 호출하여 쿠버네티스 리소스를 조작할 수 있습니다.</p><img src="/kr/img/k3s-architecture-single-server.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-architecture-single-server-dark.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="외부-db가-있는-고가용성-k3s-서버">외부 DB가 있는 고가용성 K3s 서버<a href="#외부-db가-있는-고가용성-k3s-서버" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>단일 서버 클러스터는 다양한 사용 사례를 충족할 수 있지만, Kubernetes 컨트롤 플레인의 가동 시간이 중요한 환경의 경우, HA 구성으로 K3s를 실행할 수 있습니다. HA K3s 클러스터는 다음과 같이 구성됩니다:</p><ul><li>두 개 이상의 <strong>서버 노드</strong>가 Kubernetes API를 제공하고 다른 컨트롤 플레인 서비스를 실행합니다.</li><li><strong>외부 데이터스토어</strong>(단일 서버 설정에 사용되는 임베디드 SQLite 데이터스토어와 반대)</li></ul><img src="/kr/img/k3s-architecture-ha-server.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-architecture-ha-server-dark.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="에이전트-노드를-위한-고정-등록-주소">에이전트 노드를 위한 고정 등록 주소<a href="#에이전트-노드를-위한-고정-등록-주소" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>고가용성 서버 구성에서 각 노드는 아래 다이어그램과 같이 고정 등록 주소를 사용하여 Kubernetes API에 등록해야 합니다.</p><p>등록 후 에이전트 노드는 서버 노드 중 하나에 직접 연결을 설정합니다.</p><img src="/kr/img/k3s-production-setup.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-production-setup-dark.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="에이전트-노드-등록-작동-방식">에이전트 노드 등록 작동 방식<a href="#에이전트-노드-등록-작동-방식" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>에이전트 노드는 <code>k3s agent</code> 프로세스에 의해 시작된 웹소켓 연결로 등록되며, 에이전트 프로세스의 일부로 실행되는 클라이언트 측 로드밸런서에 의해 연결이 유지됩니다. 이 로드 밸런서는 클러스터의 모든 서버에 대한 안정적인 연결을 유지하여 개별 서버의 중단을 허용하는 에이전시 서버에 대한 연결을 제공합니다.</p><p>에이전트는 노드 클러스터 시크릿과 노드에 대해 무작위로 생성된 비밀번호를 사용하여 서버에 등록하며, 이 비밀번호는 <code>/etc/rancher/node/password</code>에 저장됩니다. 서버는 개별 노드의 비밀번호를 쿠버네티스 시크릿으로 저장하며, 이후 모든 시도는 동일한 비밀번호를 사용해야 합니다. 노드 패스워드 시크릿은 <code>&lt;host&gt;.node-password.k3s</code> 템플릿을 사용하는 이름으로 <code>kube-system</code> 네임스페이스에 저장됩니다. 이는 노드 ID의 무결성을 보호하기 위해 수행됩니다.</p><p>에이전트의 <code>/etc/rancher/node</code> 디렉터리가 제거되거나 기존 이름을 사용하여 노드에 다시 가입하려는 경우, 클러스터에서 노드를 삭제해야 합니다. 이렇게 하면 이전 노드 항목과 노드 비밀번호 시크릿이 모두 정리되고 노드가 클러스터에 (재)조인할 수 있습니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>K3s v1.20.2 이전 서버는 <code>/var/lib/rancher/k3s/server/cred/node-passwd</code>에 디스크에 비밀번호를 저장합니다.</p></div></div><p>호스트 이름을 자주 재사용하지만 노드 암호 시크릿을 제거할 수 없는 경우, <code>--with-node-id</code> 플래그를 사용하여 K3s 서버 또는 에이전트를 시작하면 호스트 이름에 고유 노드 ID를 자동으로 추가할 수 있습니다. 활성화하면 노드 ID는 <code>/etc/rancher/node/</code>에도 저장됩니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">K3s - Lightweight Kubernetes</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/quick-start"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">빠른 시작 가이드</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#임베디드-db가-있는-단일-서버-설정" class="table-of-contents__link toc-highlight">임베디드 DB가 있는 단일 서버 설정</a></li><li><a href="#외부-db가-있는-고가용성-k3s-서버" class="table-of-contents__link toc-highlight">외부 DB가 있는 고가용성 K3s 서버</a></li><li><a href="#에이전트-노드를-위한-고정-등록-주소" class="table-of-contents__link toc-highlight">에이전트 노드를 위한 고정 등록 주소</a></li><li><a href="#에이전트-노드-등록-작동-방식" class="table-of-contents__link toc-highlight">에이전트 노드 등록 작동 방식</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/assets/css/styles.175028e6.css b/kr/assets/css/styles.175028e6.css
new file mode 100644
index 000000000..4c21154aa
--- /dev/null
+++ b/kr/assets/css/styles.175028e6.css
@@ -0,0 +1 @@
+.col,.container{padding:0 var(--ifm-spacing-horizontal);width:100%}.markdown>h2,.markdown>h3,.markdown>h4,.markdown>h5,.markdown>h6{margin-bottom:calc(var(--ifm-heading-vertical-rhythm-bottom)*var(--ifm-leading))}pre,table{overflow:auto}blockquote,pre{margin:0 0 var(--ifm-spacing-vertical)}.breadcrumbs__link,.button{transition-timing-function:var(--ifm-transition-timing-default)}.button,code{vertical-align:middle}.button--outline.button--active,.button--outline:active,.button--outline:hover,:root{--ifm-button-color:var(--ifm-font-color-base-inverse)}.menu__link:hover,a{transition:color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.navbar--dark,:root{--ifm-navbar-link-hover-color:var(--ifm-color-primary)}.menu,.navbar-sidebar{overflow-x:hidden}:root,html[data-theme=dark]{--ifm-color-emphasis-500:var(--ifm-color-gray-500)}.markdown li,body{word-wrap:break-word}.toggleButton_gllP,html{-webkit-tap-highlight-color:transparent}*,.loadingRing_RJI3 div{box-sizing:border-box}.clean-list,.containsTaskList_mC6p,.details_lb9f>summary,.dropdown__menu,.menu__list{list-style:none}:root{--ifm-color-scheme:light;--ifm-dark-value:10%;--ifm-darker-value:15%;--ifm-darkest-value:30%;--ifm-light-value:15%;--ifm-lighter-value:30%;--ifm-lightest-value:50%;--ifm-contrast-background-value:90%;--ifm-contrast-foreground-value:70%;--ifm-contrast-background-dark-value:70%;--ifm-contrast-foreground-dark-value:90%;--ifm-color-primary:#3578e5;--ifm-color-secondary:#ebedf0;--ifm-color-success:#00a400;--ifm-color-info:#54c7ec;--ifm-color-warning:#ffba00;--ifm-color-danger:#fa383e;--ifm-color-primary-dark:#306cce;--ifm-color-primary-darker:#2d66c3;--ifm-color-primary-darkest:#2554a0;--ifm-color-primary-light:#538ce9;--ifm-color-primary-lighter:#72a1ed;--ifm-color-primary-lightest:#9abcf2;--ifm-color-primary-contrast-background:#ebf2fc;--ifm-color-primary-contrast-foreground:#102445;--ifm-color-secondary-dark:#d4d5d8;--ifm-color-secondary-darker:#c8c9cc;--ifm-color-secondary-darkest:#a4a6a8;--ifm-color-secondary-light:#eef0f2;--ifm-color-secondary-lighter:#f1f2f5;--ifm-color-secondary-lightest:#f5f6f8;--ifm-color-secondary-contrast-background:#fdfdfe;--ifm-color-secondary-contrast-foreground:#474748;--ifm-color-success-dark:#009400;--ifm-color-success-darker:#008b00;--ifm-color-success-darkest:#007300;--ifm-color-success-light:#26b226;--ifm-color-success-lighter:#4dbf4d;--ifm-color-success-lightest:#80d280;--ifm-color-success-contrast-background:#e6f6e6;--ifm-color-success-contrast-foreground:#003100;--ifm-color-info-dark:#4cb3d4;--ifm-color-info-darker:#47a9c9;--ifm-color-info-darkest:#3b8ba5;--ifm-color-info-light:#6ecfef;--ifm-color-info-lighter:#87d8f2;--ifm-color-info-lightest:#aae3f6;--ifm-color-info-contrast-background:#eef9fd;--ifm-color-info-contrast-foreground:#193c47;--ifm-color-warning-dark:#e6a700;--ifm-color-warning-darker:#d99e00;--ifm-color-warning-darkest:#b38200;--ifm-color-warning-light:#ffc426;--ifm-color-warning-lighter:#ffcf4d;--ifm-color-warning-lightest:#ffdd80;--ifm-color-warning-contrast-background:#fff8e6;--ifm-color-warning-contrast-foreground:#4d3800;--ifm-color-danger-dark:#e13238;--ifm-color-danger-darker:#d53035;--ifm-color-danger-darkest:#af272b;--ifm-color-danger-light:#fb565b;--ifm-color-danger-lighter:#fb7478;--ifm-color-danger-lightest:#fd9c9f;--ifm-color-danger-contrast-background:#ffebec;--ifm-color-danger-contrast-foreground:#4b1113;--ifm-color-white:#fff;--ifm-color-black:#000;--ifm-color-gray-0:var(--ifm-color-white);--ifm-color-gray-100:#f5f6f7;--ifm-color-gray-200:#ebedf0;--ifm-color-gray-300:#dadde1;--ifm-color-gray-400:#ccd0d5;--ifm-color-gray-500:#bec3c9;--ifm-color-gray-600:#8d949e;--ifm-color-gray-700:#606770;--ifm-color-gray-800:#444950;--ifm-color-gray-900:#1c1e21;--ifm-color-gray-1000:var(--ifm-color-black);--ifm-color-emphasis-0:var(--ifm-color-gray-0);--ifm-color-emphasis-100:var(--ifm-color-gray-100);--ifm-color-emphasis-200:var(--ifm-color-gray-200);--ifm-color-emphasis-300:var(--ifm-color-gray-300);--ifm-color-emphasis-400:var(--ifm-color-gray-400);--ifm-color-emphasis-600:var(--ifm-color-gray-600);--ifm-color-emphasis-700:var(--ifm-color-gray-700);--ifm-color-emphasis-800:var(--ifm-color-gray-800);--ifm-color-emphasis-900:var(--ifm-color-gray-900);--ifm-color-emphasis-1000:var(--ifm-color-gray-1000);--ifm-color-content:var(--ifm-color-emphasis-900);--ifm-color-content-inverse:var(--ifm-color-emphasis-0);--ifm-color-content-secondary:#525860;--ifm-background-color:#0000;--ifm-background-surface-color:var(--ifm-color-content-inverse);--ifm-global-border-width:1px;--ifm-global-radius:0.4rem;--ifm-hover-overlay:#0000000d;--ifm-font-color-base:var(--ifm-color-content);--ifm-font-color-base-inverse:var(--ifm-color-content-inverse);--ifm-font-color-secondary:var(--ifm-color-content-secondary);--ifm-font-family-base:system-ui,-apple-system,Segoe UI,Roboto,Ubuntu,Cantarell,Noto Sans,sans-serif,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--ifm-font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--ifm-font-size-base:100%;--ifm-font-weight-light:300;--ifm-font-weight-normal:400;--ifm-font-weight-semibold:500;--ifm-font-weight-bold:700;--ifm-font-weight-base:var(--ifm-font-weight-normal);--ifm-line-height-base:1.65;--ifm-global-spacing:1rem;--ifm-spacing-vertical:var(--ifm-global-spacing);--ifm-spacing-horizontal:var(--ifm-global-spacing);--ifm-transition-fast:200ms;--ifm-transition-slow:400ms;--ifm-transition-timing-default:cubic-bezier(0.08,0.52,0.52,1);--ifm-global-shadow-lw:0 1px 2px 0 #0000001a;--ifm-global-shadow-md:0 5px 40px #0003;--ifm-global-shadow-tl:0 12px 28px 0 #0003,0 2px 4px 0 #0000001a;--ifm-z-index-dropdown:100;--ifm-z-index-fixed:200;--ifm-z-index-overlay:400;--ifm-container-width:1140px;--ifm-container-width-xl:1320px;--ifm-code-background:#f6f7f8;--ifm-code-border-radius:var(--ifm-global-radius);--ifm-code-font-size:90%;--ifm-code-padding-horizontal:0.1rem;--ifm-code-padding-vertical:0.1rem;--ifm-pre-background:var(--ifm-code-background);--ifm-pre-border-radius:var(--ifm-code-border-radius);--ifm-pre-color:inherit;--ifm-pre-line-height:1.45;--ifm-pre-padding:1rem;--ifm-heading-color:inherit;--ifm-heading-margin-top:0;--ifm-heading-margin-bottom:var(--ifm-spacing-vertical);--ifm-heading-font-family:var(--ifm-font-family-base);--ifm-heading-font-weight:var(--ifm-font-weight-bold);--ifm-heading-line-height:1.25;--ifm-h1-font-size:2rem;--ifm-h2-font-size:1.5rem;--ifm-h3-font-size:1.25rem;--ifm-h4-font-size:1rem;--ifm-h5-font-size:0.875rem;--ifm-h6-font-size:0.85rem;--ifm-image-alignment-padding:1.25rem;--ifm-leading-desktop:1.25;--ifm-leading:calc(var(--ifm-leading-desktop)*1rem);--ifm-list-left-padding:2rem;--ifm-list-margin:1rem;--ifm-list-item-margin:0.25rem;--ifm-list-paragraph-margin:1rem;--ifm-table-cell-padding:0.75rem;--ifm-table-background:#0000;--ifm-table-stripe-background:#00000008;--ifm-table-border-width:1px;--ifm-table-border-color:var(--ifm-color-emphasis-300);--ifm-table-head-background:inherit;--ifm-table-head-color:inherit;--ifm-table-head-font-weight:var(--ifm-font-weight-bold);--ifm-table-cell-color:inherit;--ifm-link-color:var(--ifm-color-primary);--ifm-link-decoration:none;--ifm-link-hover-color:var(--ifm-link-color);--ifm-link-hover-decoration:underline;--ifm-paragraph-margin-bottom:var(--ifm-leading);--ifm-blockquote-font-size:var(--ifm-font-size-base);--ifm-blockquote-border-left-width:2px;--ifm-blockquote-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-blockquote-padding-vertical:0;--ifm-blockquote-shadow:none;--ifm-blockquote-color:var(--ifm-color-emphasis-800);--ifm-blockquote-border-color:var(--ifm-color-emphasis-300);--ifm-hr-background-color:var(--ifm-color-emphasis-500);--ifm-hr-height:1px;--ifm-hr-margin-vertical:1.5rem;--ifm-scrollbar-size:7px;--ifm-scrollbar-track-background-color:#f1f1f1;--ifm-scrollbar-thumb-background-color:silver;--ifm-scrollbar-thumb-hover-background-color:#a7a7a7;--ifm-alert-background-color:inherit;--ifm-alert-border-color:inherit;--ifm-alert-border-radius:var(--ifm-global-radius);--ifm-alert-border-width:0px;--ifm-alert-border-left-width:5px;--ifm-alert-color:var(--ifm-font-color-base);--ifm-alert-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-alert-padding-vertical:var(--ifm-spacing-vertical);--ifm-alert-shadow:var(--ifm-global-shadow-lw);--ifm-avatar-intro-margin:1rem;--ifm-avatar-intro-alignment:inherit;--ifm-avatar-photo-size:3rem;--ifm-badge-background-color:inherit;--ifm-badge-border-color:inherit;--ifm-badge-border-radius:var(--ifm-global-radius);--ifm-badge-border-width:var(--ifm-global-border-width);--ifm-badge-color:var(--ifm-color-white);--ifm-badge-padding-horizontal:calc(var(--ifm-spacing-horizontal)*0.5);--ifm-badge-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-breadcrumb-border-radius:1.5rem;--ifm-breadcrumb-spacing:0.5rem;--ifm-breadcrumb-color-active:var(--ifm-color-primary);--ifm-breadcrumb-item-background-active:var(--ifm-hover-overlay);--ifm-breadcrumb-padding-horizontal:0.8rem;--ifm-breadcrumb-padding-vertical:0.4rem;--ifm-breadcrumb-size-multiplier:1;--ifm-breadcrumb-separator:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="0 0 256 256"><g><g><polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128"/></g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g></svg>');--ifm-breadcrumb-separator-filter:none;--ifm-breadcrumb-separator-size:0.5rem;--ifm-breadcrumb-separator-size-multiplier:1.25;--ifm-button-background-color:inherit;--ifm-button-border-color:var(--ifm-button-background-color);--ifm-button-border-width:var(--ifm-global-border-width);--ifm-button-font-weight:var(--ifm-font-weight-bold);--ifm-button-padding-horizontal:1.5rem;--ifm-button-padding-vertical:0.375rem;--ifm-button-size-multiplier:1;--ifm-button-transition-duration:var(--ifm-transition-fast);--ifm-button-border-radius:calc(var(--ifm-global-radius)*var(--ifm-button-size-multiplier));--ifm-button-group-spacing:2px;--ifm-card-background-color:var(--ifm-background-surface-color);--ifm-card-border-radius:calc(var(--ifm-global-radius)*2);--ifm-card-horizontal-spacing:var(--ifm-global-spacing);--ifm-card-vertical-spacing:var(--ifm-global-spacing);--ifm-toc-border-color:var(--ifm-color-emphasis-300);--ifm-toc-link-color:var(--ifm-color-content-secondary);--ifm-toc-padding-vertical:0.5rem;--ifm-toc-padding-horizontal:0.5rem;--ifm-dropdown-background-color:var(--ifm-background-surface-color);--ifm-dropdown-font-weight:var(--ifm-font-weight-semibold);--ifm-dropdown-link-color:var(--ifm-font-color-base);--ifm-dropdown-hover-background-color:var(--ifm-hover-overlay);--ifm-footer-background-color:var(--ifm-color-emphasis-100);--ifm-footer-color:inherit;--ifm-footer-link-color:var(--ifm-color-emphasis-700);--ifm-footer-link-hover-color:var(--ifm-color-primary);--ifm-footer-link-horizontal-spacing:0.5rem;--ifm-footer-padding-horizontal:calc(var(--ifm-spacing-horizontal)*2);--ifm-footer-padding-vertical:calc(var(--ifm-spacing-vertical)*2);--ifm-footer-title-color:inherit;--ifm-footer-logo-max-width:min(30rem,90vw);--ifm-hero-background-color:var(--ifm-background-surface-color);--ifm-hero-text-color:var(--ifm-color-emphasis-800);--ifm-menu-color:var(--ifm-color-emphasis-700);--ifm-menu-color-active:var(--ifm-color-primary);--ifm-menu-color-background-active:var(--ifm-hover-overlay);--ifm-menu-color-background-hover:var(--ifm-hover-overlay);--ifm-menu-link-padding-horizontal:0.75rem;--ifm-menu-link-padding-vertical:0.375rem;--ifm-menu-link-sublist-icon:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" width="16px" height="16px" viewBox="0 0 24 24"><path fill="rgba(0,0,0,0.5)" d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>');--ifm-menu-link-sublist-icon-filter:none;--ifm-navbar-background-color:var(--ifm-background-surface-color);--ifm-navbar-height:3.75rem;--ifm-navbar-item-padding-horizontal:0.75rem;--ifm-navbar-item-padding-vertical:0.25rem;--ifm-navbar-link-color:var(--ifm-font-color-base);--ifm-navbar-link-active-color:var(--ifm-link-color);--ifm-navbar-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-navbar-padding-vertical:calc(var(--ifm-spacing-vertical)*0.5);--ifm-navbar-shadow:var(--ifm-global-shadow-lw);--ifm-navbar-search-input-background-color:var(--ifm-color-emphasis-200);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-800);--ifm-navbar-search-input-placeholder-color:var(--ifm-color-emphasis-500);--ifm-navbar-search-input-icon:url('data:image/svg+xml;utf8,<svg fill="currentColor" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" height="16px" width="16px"><path d="M6.02945,10.20327a4.17382,4.17382,0,1,1,4.17382-4.17382A4.15609,4.15609,0,0,1,6.02945,10.20327Zm9.69195,4.2199L10.8989,9.59979A5.88021,5.88021,0,0,0,12.058,6.02856,6.00467,6.00467,0,1,0,9.59979,10.8989l4.82338,4.82338a.89729.89729,0,0,0,1.29912,0,.89749.89749,0,0,0-.00087-1.29909Z" /></svg>');--ifm-navbar-sidebar-width:83vw;--ifm-pagination-border-radius:var(--ifm-global-radius);--ifm-pagination-color-active:var(--ifm-color-primary);--ifm-pagination-font-size:1rem;--ifm-pagination-item-active-background:var(--ifm-hover-overlay);--ifm-pagination-page-spacing:0.2em;--ifm-pagination-padding-horizontal:calc(var(--ifm-spacing-horizontal)*1);--ifm-pagination-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-pagination-nav-border-radius:var(--ifm-global-radius);--ifm-pagination-nav-color-hover:var(--ifm-color-primary);--ifm-pills-color-active:var(--ifm-color-primary);--ifm-pills-color-background-active:var(--ifm-hover-overlay);--ifm-pills-spacing:0.125rem;--ifm-tabs-color:var(--ifm-font-color-secondary);--ifm-tabs-color-active:var(--ifm-color-primary);--ifm-tabs-color-active-border:var(--ifm-tabs-color-active);--ifm-tabs-padding-horizontal:1rem;--ifm-tabs-padding-vertical:1rem;--docusaurus-progress-bar-color:var(--ifm-color-primary);--ifm-color-primary:#06527a;--ifm-color-primary-dark:#054a6e;--ifm-color-primary-darker:#054668;--ifm-color-primary-darkest:#043955;--ifm-color-primary-light:#075a86;--ifm-color-primary-lighter:#075e8c;--ifm-color-primary-lightest:#086b9f;--ifm-color-secondary:#ffc61c;--ifm-color-secondary-light:#ffcd38;--dark:#33313b;--light:#f3f3f3;--docusaurus-announcement-bar-height:auto;--docusaurus-tag-list-border:var(--ifm-color-emphasis-300);--docusaurus-collapse-button-bg:#0000;--docusaurus-collapse-button-bg-hover:#0000001a;--doc-sidebar-width:300px;--doc-sidebar-hidden-width:30px}.badge--danger,.badge--info,.badge--primary,.badge--secondary,.badge--success,.badge--warning{--ifm-badge-border-color:var(--ifm-badge-background-color)}.button--link,.button--outline{--ifm-button-background-color:#0000}html{-webkit-font-smoothing:antialiased;-webkit-text-size-adjust:100%;text-size-adjust:100%;background-color:var(--ifm-background-color);color:var(--ifm-font-color-base);color-scheme:var(--ifm-color-scheme);font:var(--ifm-font-size-base)/var(--ifm-line-height-base) var(--ifm-font-family-base);text-rendering:optimizelegibility}iframe{border:0;color-scheme:auto}.container{margin:0 auto;max-width:var(--ifm-container-width)}.container--fluid{max-width:inherit}.row{display:flex;flex-wrap:wrap;margin:0 calc(var(--ifm-spacing-horizontal)*-1)}.margin-bottom--none,.margin-vert--none,.markdown>:last-child{margin-bottom:0!important}.margin-top--none,.margin-vert--none,.tabItem_LNqP{margin-top:0!important}.row--no-gutters{margin-left:0;margin-right:0}.margin-horiz--none,.margin-right--none{margin-right:0!important}.row--no-gutters>.col{padding-left:0;padding-right:0}.row--align-top{align-items:flex-start}.row--align-bottom{align-items:flex-end}.menuExternalLink_NmtK,.row--align-center{align-items:center}.row--align-stretch{align-items:stretch}.row--align-baseline{align-items:baseline}.col{--ifm-col-width:100%;flex:1 0;margin-left:0;max-width:var(--ifm-col-width)}.padding-bottom--none,.padding-vert--none{padding-bottom:0!important}.padding-top--none,.padding-vert--none{padding-top:0!important}.padding-horiz--none,.padding-left--none{padding-left:0!important}.padding-horiz--none,.padding-right--none{padding-right:0!important}.col[class*=col--]{flex:0 0 var(--ifm-col-width)}.col--1{--ifm-col-width:8.33333%}.col--offset-1{margin-left:8.33333%}.col--2{--ifm-col-width:16.66667%}.col--offset-2{margin-left:16.66667%}.col--3{--ifm-col-width:25%}.col--offset-3{margin-left:25%}.col--4{--ifm-col-width:33.33333%}.col--offset-4{margin-left:33.33333%}.col--5{--ifm-col-width:41.66667%}.col--offset-5{margin-left:41.66667%}.col--6{--ifm-col-width:50%}.col--offset-6{margin-left:50%}.col--7{--ifm-col-width:58.33333%}.col--offset-7{margin-left:58.33333%}.col--8{--ifm-col-width:66.66667%}.col--offset-8{margin-left:66.66667%}.col--9{--ifm-col-width:75%}.col--offset-9{margin-left:75%}.col--10{--ifm-col-width:83.33333%}.col--offset-10{margin-left:83.33333%}.col--11{--ifm-col-width:91.66667%}.col--offset-11{margin-left:91.66667%}.col--12{--ifm-col-width:100%}.col--offset-12{margin-left:100%}.margin-horiz--none,.margin-left--none{margin-left:0!important}.margin--none{margin:0!important}.margin-bottom--xs,.margin-vert--xs{margin-bottom:.25rem!important}.margin-top--xs,.margin-vert--xs{margin-top:.25rem!important}.margin-horiz--xs,.margin-left--xs{margin-left:.25rem!important}.margin-horiz--xs,.margin-right--xs{margin-right:.25rem!important}.margin--xs{margin:.25rem!important}.margin-bottom--sm,.margin-vert--sm{margin-bottom:.5rem!important}.margin-top--sm,.margin-vert--sm{margin-top:.5rem!important}.margin-horiz--sm,.margin-left--sm{margin-left:.5rem!important}.margin-horiz--sm,.margin-right--sm{margin-right:.5rem!important}.margin--sm{margin:.5rem!important}.margin-bottom--md,.margin-vert--md{margin-bottom:1rem!important}.margin-top--md,.margin-vert--md{margin-top:1rem!important}.margin-horiz--md,.margin-left--md{margin-left:1rem!important}.margin-horiz--md,.margin-right--md{margin-right:1rem!important}.margin--md{margin:1rem!important}.margin-bottom--lg,.margin-vert--lg{margin-bottom:2rem!important}.margin-top--lg,.margin-vert--lg{margin-top:2rem!important}.margin-horiz--lg,.margin-left--lg{margin-left:2rem!important}.margin-horiz--lg,.margin-right--lg{margin-right:2rem!important}.margin--lg{margin:2rem!important}.margin-bottom--xl,.margin-vert--xl{margin-bottom:5rem!important}.margin-top--xl,.margin-vert--xl{margin-top:5rem!important}.margin-horiz--xl,.margin-left--xl{margin-left:5rem!important}.margin-horiz--xl,.margin-right--xl{margin-right:5rem!important}.margin--xl{margin:5rem!important}.padding--none{padding:0!important}.padding-bottom--xs,.padding-vert--xs{padding-bottom:.25rem!important}.padding-top--xs,.padding-vert--xs{padding-top:.25rem!important}.padding-horiz--xs,.padding-left--xs{padding-left:.25rem!important}.padding-horiz--xs,.padding-right--xs{padding-right:.25rem!important}.padding--xs{padding:.25rem!important}.padding-bottom--sm,.padding-vert--sm{padding-bottom:.5rem!important}.padding-top--sm,.padding-vert--sm{padding-top:.5rem!important}.padding-horiz--sm,.padding-left--sm{padding-left:.5rem!important}.padding-horiz--sm,.padding-right--sm{padding-right:.5rem!important}.padding--sm{padding:.5rem!important}.padding-bottom--md,.padding-vert--md{padding-bottom:1rem!important}.padding-top--md,.padding-vert--md{padding-top:1rem!important}.padding-horiz--md,.padding-left--md{padding-left:1rem!important}.padding-horiz--md,.padding-right--md{padding-right:1rem!important}.padding--md{padding:1rem!important}.padding-bottom--lg,.padding-vert--lg{padding-bottom:2rem!important}.padding-top--lg,.padding-vert--lg{padding-top:2rem!important}.padding-horiz--lg,.padding-left--lg{padding-left:2rem!important}.padding-horiz--lg,.padding-right--lg{padding-right:2rem!important}.padding--lg{padding:2rem!important}.padding-bottom--xl,.padding-vert--xl{padding-bottom:5rem!important}.padding-top--xl,.padding-vert--xl{padding-top:5rem!important}.padding-horiz--xl,.padding-left--xl{padding-left:5rem!important}.padding-horiz--xl,.padding-right--xl{padding-right:5rem!important}.padding--xl{padding:5rem!important}code{background-color:var(--ifm-code-background);border:.1rem solid #0000001a;border-radius:var(--ifm-code-border-radius);font-family:var(--ifm-font-family-monospace);font-size:var(--ifm-code-font-size);padding:var(--ifm-code-padding-vertical) var(--ifm-code-padding-horizontal)}a code{color:inherit}pre{background-color:var(--ifm-pre-background);border-radius:var(--ifm-pre-border-radius);color:var(--ifm-pre-color);font:var(--ifm-code-font-size)/var(--ifm-pre-line-height) var(--ifm-font-family-monospace);padding:var(--ifm-pre-padding)}pre code{background-color:initial;border:none;font-size:100%;line-height:inherit;padding:0}kbd{background-color:var(--ifm-color-emphasis-0);border:1px solid var(--ifm-color-emphasis-400);border-radius:.2rem;box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-400);color:var(--ifm-color-emphasis-800);font:80% var(--ifm-font-family-monospace);padding:.15rem .3rem}h1,h2,h3,h4,h5,h6{color:var(--ifm-heading-color);font-family:var(--ifm-heading-font-family);font-weight:var(--ifm-heading-font-weight);line-height:var(--ifm-heading-line-height);margin:var(--ifm-heading-margin-top) 0 var(--ifm-heading-margin-bottom) 0}h1{font-size:var(--ifm-h1-font-size)}h2{font-size:var(--ifm-h2-font-size)}h3{font-size:var(--ifm-h3-font-size)}h4{font-size:var(--ifm-h4-font-size)}h5{font-size:var(--ifm-h5-font-size)}h6{font-size:var(--ifm-h6-font-size)}.container_lyt7,.container_lyt7>svg,img{max-width:100%}img[align=right]{padding-left:var(--image-alignment-padding)}img[align=left]{padding-right:var(--image-alignment-padding)}.markdown{--ifm-h1-vertical-rhythm-top:3;--ifm-h2-vertical-rhythm-top:2;--ifm-h3-vertical-rhythm-top:1.5;--ifm-heading-vertical-rhythm-top:1.25;--ifm-h1-vertical-rhythm-bottom:1.25;--ifm-heading-vertical-rhythm-bottom:1}.markdown:after,.markdown:before{content:"";display:table}.markdown:after{clear:both}.markdown h1:first-child{--ifm-h1-font-size:3rem;margin-bottom:calc(var(--ifm-h1-vertical-rhythm-bottom)*var(--ifm-leading))}.markdown>h2{--ifm-h2-font-size:2rem;margin-top:calc(var(--ifm-h2-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h3{--ifm-h3-font-size:1.5rem;margin-top:calc(var(--ifm-h3-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h4,.markdown>h5,.markdown>h6{margin-top:calc(var(--ifm-heading-vertical-rhythm-top)*var(--ifm-leading))}.markdown>p,.markdown>pre,.markdown>ul,.tabList__CuJ{margin-bottom:var(--ifm-leading)}.markdown li>p{margin-top:var(--ifm-list-paragraph-margin)}.markdown li+li{margin-top:var(--ifm-list-item-margin)}ol,ul{margin:0 0 var(--ifm-list-margin);padding-left:var(--ifm-list-left-padding)}ol ol,ul ol{list-style-type:lower-roman}ol ol,ol ul,ul ol,ul ul{margin:0}ol ol ol,ol ul ol,ul ol ol,ul ul ol{list-style-type:lower-alpha}table{border-collapse:collapse;display:block;margin-bottom:var(--ifm-spacing-vertical)}table thead tr{border-bottom:2px solid var(--ifm-table-border-color)}table thead,table tr:nth-child(2n){background-color:var(--ifm-table-stripe-background)}table tr{background-color:var(--ifm-table-background);border-top:var(--ifm-table-border-width) solid var(--ifm-table-border-color)}table td,table th{border:var(--ifm-table-border-width) solid var(--ifm-table-border-color);padding:var(--ifm-table-cell-padding)}table th{background-color:var(--ifm-table-head-background);color:var(--ifm-table-head-color);font-weight:var(--ifm-table-head-font-weight)}table td{color:var(--ifm-table-cell-color)}strong{font-weight:var(--ifm-font-weight-bold)}a{color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}a:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button:hover,.text--no-decoration,.text--no-decoration:hover,a:not([href]){text-decoration:none}p{margin:0 0 var(--ifm-paragraph-margin-bottom)}blockquote{border-left:var(--ifm-blockquote-border-left-width) solid var(--ifm-blockquote-border-color);box-shadow:var(--ifm-blockquote-shadow);color:var(--ifm-blockquote-color);font-size:var(--ifm-blockquote-font-size);padding:var(--ifm-blockquote-padding-vertical) var(--ifm-blockquote-padding-horizontal)}blockquote>:first-child{margin-top:0}blockquote>:last-child{margin-bottom:0}hr{background-color:var(--ifm-hr-background-color);border:0;height:var(--ifm-hr-height);margin:var(--ifm-hr-margin-vertical) 0;background-image:-webkit-linear-gradient(left,#f3f3f3,#adadb1,#f3f3f3);margin:0 auto}.shadow--lw{box-shadow:var(--ifm-global-shadow-lw)!important}.shadow--md{box-shadow:var(--ifm-global-shadow-md)!important}.shadow--tl{box-shadow:var(--ifm-global-shadow-tl)!important}.text--primary,.wordWrapButtonEnabled_EoeP .wordWrapButtonIcon_Bwma{color:var(--ifm-color-primary)}.text--secondary{color:var(--ifm-color-secondary)}.text--success{color:var(--ifm-color-success)}.text--info{color:var(--ifm-color-info)}.text--warning{color:var(--ifm-color-warning)}.text--danger{color:var(--ifm-color-danger)}.text--center{text-align:center}.text--left{text-align:left}.text--justify{text-align:justify}.text--right{text-align:right}.text--capitalize{text-transform:capitalize}.text--lowercase{text-transform:lowercase}.admonitionHeading_tbUL,.alert__heading,.text--uppercase{text-transform:uppercase}.text--light{font-weight:var(--ifm-font-weight-light)}.text--normal{font-weight:var(--ifm-font-weight-normal)}.text--semibold{font-weight:var(--ifm-font-weight-semibold)}.text--bold{font-weight:var(--ifm-font-weight-bold)}.text--italic{font-style:italic}.text--truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.text--break{word-wrap:break-word!important;word-break:break-word!important}.clean-btn{background:none;border:none;color:inherit;cursor:pointer;font-family:inherit;padding:0}.alert,.alert .close{color:var(--ifm-alert-foreground-color)}.clean-list{padding-left:0}.alert--primary{--ifm-alert-background-color:var(--ifm-color-primary-contrast-background);--ifm-alert-background-color-highlight:#3578e526;--ifm-alert-foreground-color:var(--ifm-color-primary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-primary-dark)}.alert--secondary{--ifm-alert-background-color:var(--ifm-color-secondary-contrast-background);--ifm-alert-background-color-highlight:#ebedf026;--ifm-alert-foreground-color:var(--ifm-color-secondary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-secondary-dark)}.alert--success{--ifm-alert-background-color:var(--ifm-color-success-contrast-background);--ifm-alert-background-color-highlight:#00a40026;--ifm-alert-foreground-color:var(--ifm-color-success-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-success-dark)}.alert--info{--ifm-alert-background-color:var(--ifm-color-info-contrast-background);--ifm-alert-background-color-highlight:#54c7ec26;--ifm-alert-foreground-color:var(--ifm-color-info-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-info-dark)}.alert--warning{--ifm-alert-background-color:var(--ifm-color-warning-contrast-background);--ifm-alert-background-color-highlight:#ffba0026;--ifm-alert-foreground-color:var(--ifm-color-warning-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-warning-dark)}.alert--danger{--ifm-alert-background-color:var(--ifm-color-danger-contrast-background);--ifm-alert-background-color-highlight:#fa383e26;--ifm-alert-foreground-color:var(--ifm-color-danger-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-danger-dark)}.alert{--ifm-code-background:var(--ifm-alert-background-color-highlight);--ifm-link-color:var(--ifm-alert-foreground-color);--ifm-link-hover-color:var(--ifm-alert-foreground-color);--ifm-link-decoration:underline;--ifm-tabs-color:var(--ifm-alert-foreground-color);--ifm-tabs-color-active:var(--ifm-alert-foreground-color);--ifm-tabs-color-active-border:var(--ifm-alert-border-color);background-color:var(--ifm-alert-background-color);border:var(--ifm-alert-border-width) solid var(--ifm-alert-border-color);border-left-width:var(--ifm-alert-border-left-width);border-radius:var(--ifm-alert-border-radius);box-shadow:var(--ifm-alert-shadow);padding:var(--ifm-alert-padding-vertical) var(--ifm-alert-padding-horizontal)}.alert__heading{align-items:center;display:flex;font:700 var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.5rem}.alert__icon{display:inline-flex;margin-right:.4em}.alert__icon svg{fill:var(--ifm-alert-foreground-color);stroke:var(--ifm-alert-foreground-color);stroke-width:0}.alert .close{margin:calc(var(--ifm-alert-padding-vertical)*-1) calc(var(--ifm-alert-padding-horizontal)*-1) 0 0;opacity:.75}.alert .close:focus,.alert .close:hover{opacity:1}.alert a{text-decoration-color:var(--ifm-alert-border-color)}.alert a:hover{text-decoration-thickness:2px}.avatar{column-gap:var(--ifm-avatar-intro-margin);display:flex}.avatar__photo{border-radius:50%;display:block;height:var(--ifm-avatar-photo-size);overflow:hidden;width:var(--ifm-avatar-photo-size)}.card--full-height,.navbar__logo img,body,html{height:100%}.avatar__photo--sm{--ifm-avatar-photo-size:2rem}.avatar__photo--lg{--ifm-avatar-photo-size:4rem}.avatar__photo--xl{--ifm-avatar-photo-size:6rem}.avatar__intro{display:flex;flex:1 1;flex-direction:column;justify-content:center;text-align:var(--ifm-avatar-intro-alignment)}.badge,.breadcrumbs__item,.breadcrumbs__link,.button,.dropdown>.navbar__link:after,.searchBarContainer_NW3z.searchIndexLoading_EJ1f .searchBarLoadingRing_YnHq{display:inline-block}.avatar__name{font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base)}.avatar__subtitle{margin-top:.25rem}.avatar--vertical{--ifm-avatar-intro-alignment:center;--ifm-avatar-intro-margin:0.5rem;align-items:center;flex-direction:column}.badge{background-color:var(--ifm-badge-background-color);border:var(--ifm-badge-border-width) solid var(--ifm-badge-border-color);border-radius:var(--ifm-badge-border-radius);color:var(--ifm-badge-color);font-size:75%;font-weight:var(--ifm-font-weight-bold);line-height:1;padding:var(--ifm-badge-padding-vertical) var(--ifm-badge-padding-horizontal)}.badge--primary{--ifm-badge-background-color:var(--ifm-color-primary)}.badge--secondary{--ifm-badge-background-color:var(--ifm-color-secondary);color:var(--ifm-color-black)}.breadcrumbs__link,.button.button--secondary.button--outline:not(.button--active):not(:hover){color:var(--ifm-font-color-base)}.badge--success{--ifm-badge-background-color:var(--ifm-color-success)}.badge--info{--ifm-badge-background-color:var(--ifm-color-info)}.badge--warning{--ifm-badge-background-color:var(--ifm-color-warning)}.badge--danger{--ifm-badge-background-color:var(--ifm-color-danger)}.breadcrumbs{margin-bottom:0;padding-left:0}.breadcrumbs__item:not(:last-child):after{background:var(--ifm-breadcrumb-separator) center;content:" ";display:inline-block;filter:var(--ifm-breadcrumb-separator-filter);height:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier));margin:0 var(--ifm-breadcrumb-spacing);opacity:.5;width:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier))}.breadcrumbs__item--active .breadcrumbs__link{background:var(--ifm-breadcrumb-item-background-active);color:var(--ifm-breadcrumb-color-active)}.breadcrumbs__link{border-radius:var(--ifm-breadcrumb-border-radius);font-size:calc(1rem*var(--ifm-breadcrumb-size-multiplier));padding:calc(var(--ifm-breadcrumb-padding-vertical)*var(--ifm-breadcrumb-size-multiplier)) calc(var(--ifm-breadcrumb-padding-horizontal)*var(--ifm-breadcrumb-size-multiplier));transition-duration:var(--ifm-transition-fast);transition-property:background,color}.breadcrumbs__link:any-link:hover,.breadcrumbs__link:link:hover,.breadcrumbs__link:visited:hover,area[href].breadcrumbs__link:hover{background:var(--ifm-breadcrumb-item-background-active);text-decoration:none}.breadcrumbs--sm{--ifm-breadcrumb-size-multiplier:0.8}.breadcrumbs--lg{--ifm-breadcrumb-size-multiplier:1.2}.button{background-color:var(--ifm-button-background-color);border:var(--ifm-button-border-width) solid var(--ifm-button-border-color);border-radius:var(--ifm-button-border-radius);cursor:pointer;font-size:calc(.875rem*var(--ifm-button-size-multiplier));font-weight:var(--ifm-button-font-weight);line-height:1.5;padding:calc(var(--ifm-button-padding-vertical)*var(--ifm-button-size-multiplier)) calc(var(--ifm-button-padding-horizontal)*var(--ifm-button-size-multiplier));text-align:center;transition-duration:var(--ifm-button-transition-duration);transition-property:color,background,border-color;-webkit-user-select:none;user-select:none;white-space:nowrap}.button,.button:hover{color:var(--ifm-button-color)}.button--outline{--ifm-button-color:var(--ifm-button-border-color)}.button--outline:hover{--ifm-button-background-color:var(--ifm-button-border-color)}.button--link{--ifm-button-border-color:#0000;color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}.button--link.button--active,.button--link:active,.button--link:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button.disabled,.button:disabled,.button[disabled]{opacity:.65;pointer-events:none}.button--sm{--ifm-button-size-multiplier:0.8}.button--lg{--ifm-button-size-multiplier:1.35}.button--block{display:block;width:100%}.button.button--secondary{color:var(--ifm-color-gray-900)}:where(.button--primary){--ifm-button-background-color:var(--ifm-color-primary);--ifm-button-border-color:var(--ifm-color-primary)}:where(.button--primary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-primary-dark);--ifm-button-border-color:var(--ifm-color-primary-dark)}.button--primary.button--active,.button--primary:active{--ifm-button-background-color:var(--ifm-color-primary-darker);--ifm-button-border-color:var(--ifm-color-primary-darker)}:where(.button--secondary){--ifm-button-background-color:var(--ifm-color-secondary);--ifm-button-border-color:var(--ifm-color-secondary)}:where(.button--secondary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-secondary-dark);--ifm-button-border-color:var(--ifm-color-secondary-dark)}.button--secondary.button--active,.button--secondary:active{--ifm-button-background-color:var(--ifm-color-secondary-darker);--ifm-button-border-color:var(--ifm-color-secondary-darker)}:where(.button--success){--ifm-button-background-color:var(--ifm-color-success);--ifm-button-border-color:var(--ifm-color-success)}:where(.button--success):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-success-dark);--ifm-button-border-color:var(--ifm-color-success-dark)}.button--success.button--active,.button--success:active{--ifm-button-background-color:var(--ifm-color-success-darker);--ifm-button-border-color:var(--ifm-color-success-darker)}:where(.button--info){--ifm-button-background-color:var(--ifm-color-info);--ifm-button-border-color:var(--ifm-color-info)}:where(.button--info):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-info-dark);--ifm-button-border-color:var(--ifm-color-info-dark)}.button--info.button--active,.button--info:active{--ifm-button-background-color:var(--ifm-color-info-darker);--ifm-button-border-color:var(--ifm-color-info-darker)}:where(.button--warning){--ifm-button-background-color:var(--ifm-color-warning);--ifm-button-border-color:var(--ifm-color-warning)}:where(.button--warning):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-warning-dark);--ifm-button-border-color:var(--ifm-color-warning-dark)}.button--warning.button--active,.button--warning:active{--ifm-button-background-color:var(--ifm-color-warning-darker);--ifm-button-border-color:var(--ifm-color-warning-darker)}:where(.button--danger){--ifm-button-background-color:var(--ifm-color-danger);--ifm-button-border-color:var(--ifm-color-danger)}:where(.button--danger):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-danger-dark);--ifm-button-border-color:var(--ifm-color-danger-dark)}.button--danger.button--active,.button--danger:active{--ifm-button-background-color:var(--ifm-color-danger-darker);--ifm-button-border-color:var(--ifm-color-danger-darker)}.button-group{display:inline-flex;gap:var(--ifm-button-group-spacing)}.button-group>.button:not(:first-child){border-bottom-left-radius:0;border-top-left-radius:0}.button-group>.button:not(:last-child){border-bottom-right-radius:0;border-top-right-radius:0}.button-group--block{display:flex;justify-content:stretch}.button-group--block>.button{flex-grow:1}.card{background-color:var(--ifm-card-background-color);border-radius:var(--ifm-card-border-radius);box-shadow:var(--ifm-global-shadow-lw);display:flex;flex-direction:column;overflow:hidden}.card__image{padding-top:var(--ifm-card-vertical-spacing)}.card__image:first-child{padding-top:0}.card__body,.card__footer,.card__header{padding:var(--ifm-card-vertical-spacing) var(--ifm-card-horizontal-spacing)}.card__body:not(:last-child),.card__footer:not(:last-child),.card__header:not(:last-child){padding-bottom:0}.card__body>:last-child,.card__footer>:last-child,.card__header>:last-child{margin-bottom:0}.card__footer{margin-top:auto}.table-of-contents{font-size:.8rem;margin-bottom:0;padding:var(--ifm-toc-padding-vertical) 0}.table-of-contents,.table-of-contents ul{list-style:none;padding-left:var(--ifm-toc-padding-horizontal)}.table-of-contents li{margin:var(--ifm-toc-padding-vertical) var(--ifm-toc-padding-horizontal)}.table-of-contents__left-border{border-left:1px solid var(--ifm-toc-border-color)}.table-of-contents__link{color:var(--ifm-toc-link-color);display:block}.table-of-contents__link--active,.table-of-contents__link--active code,.table-of-contents__link:hover,.table-of-contents__link:hover code{color:var(--ifm-color-primary);text-decoration:none}.content_knG7 a,.hitFooter_E9YW a,.suggestion_fB_2.cursor_eG29 mark{text-decoration:underline}.close{color:var(--ifm-color-black);float:right;font-size:1.5rem;font-weight:var(--ifm-font-weight-bold);line-height:1;opacity:.5;padding:1rem;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.close:hover{opacity:.7}.close:focus,.theme-code-block-highlighted-line .codeLineNumber_Tfdd:before{opacity:.8}.dropdown{display:inline-flex;font-weight:var(--ifm-dropdown-font-weight);position:relative;vertical-align:top}.dropdown--hoverable:hover .dropdown__menu,.dropdown--show .dropdown__menu{opacity:1;pointer-events:all;transform:translateY(-1px);visibility:visible}.dropdown--right .dropdown__menu{left:inherit;right:0}.dropdown--nocaret .navbar__link:after{content:none!important}.dropdown__menu{background-color:var(--ifm-dropdown-background-color);border-radius:var(--ifm-global-radius);box-shadow:var(--ifm-global-shadow-md);left:0;max-height:80vh;min-width:10rem;opacity:0;overflow-y:auto;padding:.5rem;pointer-events:none;position:absolute;top:calc(100% - var(--ifm-navbar-item-padding-vertical) + .3rem);transform:translateY(-.625rem);transition-duration:var(--ifm-transition-fast);transition-property:opacity,transform,visibility;transition-timing-function:var(--ifm-transition-timing-default);visibility:hidden;z-index:var(--ifm-z-index-dropdown)}.menu__caret,.menu__link,.menu__list-item-collapsible{border-radius:.25rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.dropdown__link{border-radius:.25rem;color:var(--ifm-dropdown-link-color);display:block;font-size:.875rem;margin-top:.2rem;padding:.25rem .5rem;white-space:nowrap}.dropdown__link--active,.dropdown__link:hover{background-color:var(--ifm-dropdown-hover-background-color);color:var(--ifm-dropdown-link-color);text-decoration:none}.dropdown__link--active,.dropdown__link--active:hover{--ifm-dropdown-link-color:var(--ifm-link-color)}.dropdown>.navbar__link:after{border-color:currentcolor #0000;border-style:solid;border-width:.4em .4em 0;content:"";margin-left:.3em;position:relative;top:2px;transform:translateY(-50%)}.footer{background-color:var(--ifm-footer-background-color);color:var(--ifm-footer-color);padding:var(--ifm-footer-padding-vertical) var(--ifm-footer-padding-horizontal)}.footer--dark{--ifm-footer-background-color:#303846;--ifm-footer-color:var(--ifm-footer-link-color);--ifm-footer-link-color:var(--ifm-color-secondary);--ifm-footer-title-color:var(--ifm-color-white)}.footer__links{margin-bottom:1rem}.footer__link-item{color:var(--ifm-footer-link-color);line-height:2}.footer__link-item:hover{color:var(--ifm-footer-link-hover-color)}.footer__link-separator{margin:0 var(--ifm-footer-link-horizontal-spacing)}.footer__logo{margin-top:1rem;max-width:var(--ifm-footer-logo-max-width)}.footer__title{color:var(--ifm-footer-title-color);font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base);margin-bottom:var(--ifm-heading-margin-bottom)}.menu,.navbar__link{font-weight:var(--ifm-font-weight-semibold)}.docItemContainer_Djhp article>:first-child,.docItemContainer_Djhp header+*,.footer__item{margin-top:0}.admonitionContent_S0QG>:last-child,.collapsibleContent_i85q>:last-child,.footer__items,.searchResultItem_U687>h2,.tabItem_Ymn6>:last-child{margin-bottom:0}.codeBlockStandalone_MEMb,[type=checkbox]{padding:0}.hero{align-items:center;background-color:var(--ifm-hero-background-color);color:var(--ifm-hero-text-color);display:flex;padding:4rem 2rem}.hero--primary{--ifm-hero-background-color:var(--ifm-color-primary);--ifm-hero-text-color:var(--ifm-font-color-base-inverse)}.hero--dark{--ifm-hero-background-color:#303846;--ifm-hero-text-color:var(--ifm-color-white)}.hero__title{font-size:3rem}.hero__subtitle{font-size:1.5rem}.menu__list{margin:0;padding-left:0}.menu__caret,.menu__link{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu__list .menu__list{flex:0 0 100%;margin-top:.25rem;padding-left:var(--ifm-menu-link-padding-horizontal)}.menu__list-item:not(:first-child){margin-top:.25rem}.menu__list-item--collapsed .menu__list{height:0;overflow:hidden}.details_lb9f[data-collapsed=false].isBrowser_bmU9>summary:before,.details_lb9f[open]:not(.isBrowser_bmU9)>summary:before,.menu__list-item--collapsed .menu__caret:before,.menu__list-item--collapsed .menu__link--sublist:after{transform:rotate(90deg)}.menu__list-item-collapsible{display:flex;flex-wrap:wrap;position:relative}.menu__caret:hover,.menu__link:hover,.menu__list-item-collapsible--active,.menu__list-item-collapsible:hover{background:var(--ifm-menu-color-background-hover)}.menu__list-item-collapsible .menu__link--active,.menu__list-item-collapsible .menu__link:hover{background:none!important}.menu__caret,.menu__link{align-items:center;display:flex}.menu__link{color:var(--ifm-menu-color);flex:1;line-height:1.25}.menu__link:hover{color:var(--ifm-menu-color);text-decoration:none}.menu__caret:before,.menu__link--sublist-caret:after{height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast) linear;width:1.25rem;filter:var(--ifm-menu-link-sublist-icon-filter);content:""}.menu__link--sublist-caret:after{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem;margin-left:auto;min-width:1.25rem}.navbar__items--center .navbar__brand,body{margin:0}.menu__link--active,.menu__link--active:hover{color:var(--ifm-menu-color-active)}.navbar__brand,.navbar__link{color:var(--ifm-navbar-link-color)}.menu__link--active:not(.menu__link--sublist){background-color:var(--ifm-menu-color-background-active)}.menu__caret:before{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem}.navbar--dark,html[data-theme=dark]{--ifm-menu-link-sublist-icon-filter:invert(100%) sepia(94%) saturate(17%) hue-rotate(223deg) brightness(104%) contrast(98%)}.navbar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-navbar-shadow);height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar,.navbar>.container,.navbar>.container-fluid{display:flex}.navbar--fixed-top{position:sticky;top:0;z-index:var(--ifm-z-index-fixed)}.navbar-sidebar,.navbar-sidebar__backdrop{bottom:0;opacity:0;position:fixed;transition-duration:var(--ifm-transition-fast);transition-timing-function:ease-in-out;left:0;top:0;visibility:hidden}.navbar__inner{display:flex;flex-wrap:wrap;justify-content:space-between;width:100%}.navbar__brand{align-items:center;display:flex;margin-right:1rem;min-width:0}.navbar__brand:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.announcementBarContent_xLdY,.navbar__title{flex:1 1 auto}.navbar__toggle{display:none;margin-right:.5rem}.navbar__logo{flex:0 0 auto;height:2rem;margin-right:.5rem}.navbar__items{align-items:center;display:flex;flex:1;min-width:0}.navbar__items--center{flex:0 0 auto}.navbar__items--center+.navbar__items--right{flex:1}.navbar__items--right{flex:0 0 auto;justify-content:flex-end}.navbar__items--right>:last-child{padding-right:0}.navbar__item{display:inline-block;padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}#nprogress,.navbar__item.dropdown .navbar__link:not([href]){pointer-events:none}.navbar__link--active,.navbar__link:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.navbar--dark,.navbar--primary{--ifm-menu-color:var(--ifm-color-gray-300);--ifm-navbar-link-color:var(--ifm-color-gray-100);--ifm-navbar-search-input-background-color:#ffffff1a;--ifm-navbar-search-input-placeholder-color:#ffffff80;color:var(--ifm-color-white)}.navbar--dark{--ifm-navbar-background-color:#242526;--ifm-menu-color-background-active:#ffffff0d;--ifm-navbar-search-input-color:var(--ifm-color-white)}.navbar--primary{--ifm-navbar-background-color:var(--ifm-color-primary);--ifm-navbar-link-hover-color:var(--ifm-color-white);--ifm-menu-color-active:var(--ifm-color-white);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-500)}.navbar__search-input{-webkit-appearance:none;appearance:none;background:var(--ifm-navbar-search-input-background-color) var(--ifm-navbar-search-input-icon) no-repeat .75rem center/1rem 1rem;border:none;border-radius:2rem;color:var(--ifm-navbar-search-input-color);cursor:text;display:inline-block;font-size:.9rem;height:2rem;padding:0 .5rem 0 2.25rem;width:12.5rem}.navbar__search-input::placeholder{color:var(--ifm-navbar-search-input-placeholder-color)}.navbar-sidebar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-global-shadow-md);transform:translate3d(-100%,0,0);transition-property:opacity,visibility,transform;width:var(--ifm-navbar-sidebar-width)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar__items{transform:translateZ(0)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar--show .navbar-sidebar__backdrop{opacity:1;visibility:visible}.navbar-sidebar__backdrop{background-color:#0009;right:0;transition-property:opacity,visibility}.navbar-sidebar__brand{align-items:center;box-shadow:var(--ifm-navbar-shadow);display:flex;flex:1;height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar-sidebar__items{display:flex;height:calc(100% - var(--ifm-navbar-height));transition:transform var(--ifm-transition-fast) ease-in-out}.navbar-sidebar__items--show-secondary{transform:translate3d(calc((var(--ifm-navbar-sidebar-width))*-1),0,0)}.navbar-sidebar__item{flex-shrink:0;padding:.5rem;width:calc(var(--ifm-navbar-sidebar-width))}.navbar-sidebar__back{background:var(--ifm-menu-color-background-active);font-size:15px;font-weight:var(--ifm-button-font-weight);margin:0 0 .2rem -.5rem;padding:.6rem 1.5rem;position:relative;text-align:left;top:-.5rem;width:calc(100% + 1rem)}.navbar-sidebar__close{display:flex;margin-left:auto}.pagination{column-gap:var(--ifm-pagination-page-spacing);display:flex;font-size:var(--ifm-pagination-font-size);padding-left:0}.pagination--sm{--ifm-pagination-font-size:0.8rem;--ifm-pagination-padding-horizontal:0.8rem;--ifm-pagination-padding-vertical:0.2rem}.pagination--lg{--ifm-pagination-font-size:1.2rem;--ifm-pagination-padding-horizontal:1.2rem;--ifm-pagination-padding-vertical:0.3rem}.pagination__item{display:inline-flex}.pagination__item>span{padding:var(--ifm-pagination-padding-vertical)}.pagination__item--active .pagination__link{color:var(--ifm-pagination-color-active)}.pagination__item--active .pagination__link,.pagination__item:not(.pagination__item--active):hover .pagination__link{background:var(--ifm-pagination-item-active-background)}.pagination__item--disabled,.pagination__item[disabled]{opacity:.25;pointer-events:none}.pagination__link{border-radius:var(--ifm-pagination-border-radius);color:var(--ifm-font-color-base);display:inline-block;padding:var(--ifm-pagination-padding-vertical) var(--ifm-pagination-padding-horizontal);transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination__link:hover{text-decoration:none}.pagination-nav{grid-gap:var(--ifm-spacing-horizontal);display:grid;gap:var(--ifm-spacing-horizontal);grid-template-columns:repeat(2,1fr)}.pagination-nav__link{border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-pagination-nav-border-radius);display:block;height:100%;line-height:var(--ifm-heading-line-height);padding:var(--ifm-global-spacing);transition:border-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination-nav__link:hover{border-color:var(--ifm-pagination-nav-color-hover);text-decoration:none}.pagination-nav__link--next{grid-column:2/3;text-align:right}.pagination-nav__label{font-size:var(--ifm-h4-font-size);font-weight:var(--ifm-heading-font-weight);word-break:break-word}.pagination-nav__link--prev .pagination-nav__label:before{content:"« "}.pagination-nav__link--next .pagination-nav__label:after{content:" »"}.pagination-nav__sublabel{color:var(--ifm-color-content-secondary);font-size:var(--ifm-h5-font-size);font-weight:var(--ifm-font-weight-semibold);margin-bottom:.25rem}.pills__item,.tabs{font-weight:var(--ifm-font-weight-bold)}.pills{display:flex;gap:var(--ifm-pills-spacing);padding-left:0}.pills__item{border-radius:.5rem;cursor:pointer;display:inline-block;padding:.25rem 1rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs,:not(.containsTaskList_mC6p>li)>.containsTaskList_mC6p{padding-left:0}.pills__item--active{color:var(--ifm-pills-color-active)}.pills__item--active,.pills__item:not(.pills__item--active):hover{background:var(--ifm-pills-color-background-active)}.pills--block{justify-content:stretch}.pills--block .pills__item{flex-grow:1;text-align:center}.tabs{color:var(--ifm-tabs-color);display:flex;margin-bottom:0;overflow-x:auto}.tabs__item{border-bottom:3px solid #0000;border-radius:var(--ifm-global-radius);cursor:pointer;display:inline-flex;padding:var(--ifm-tabs-padding-vertical) var(--ifm-tabs-padding-horizontal);transition:background-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs__item--active{border-bottom-color:var(--ifm-tabs-color-active-border);border-bottom-left-radius:0;border-bottom-right-radius:0;color:var(--ifm-tabs-color-active)}.tabs__item:hover{background-color:var(--ifm-hover-overlay)}.tabs--block{justify-content:stretch}.tabs--block .tabs__item{flex-grow:1;justify-content:center}html[data-theme=dark]{--ifm-color-scheme:dark;--ifm-color-emphasis-0:var(--ifm-color-gray-1000);--ifm-color-emphasis-100:var(--ifm-color-gray-900);--ifm-color-emphasis-200:var(--ifm-color-gray-800);--ifm-color-emphasis-300:var(--ifm-color-gray-700);--ifm-color-emphasis-400:var(--ifm-color-gray-600);--ifm-color-emphasis-600:var(--ifm-color-gray-400);--ifm-color-emphasis-700:var(--ifm-color-gray-300);--ifm-color-emphasis-800:var(--ifm-color-gray-200);--ifm-color-emphasis-900:var(--ifm-color-gray-100);--ifm-color-emphasis-1000:var(--ifm-color-gray-0);--ifm-background-color:#1b1b1d;--ifm-background-surface-color:#242526;--ifm-hover-overlay:#ffffff0d;--ifm-color-content:#e3e3e3;--ifm-color-content-secondary:#fff;--ifm-breadcrumb-separator-filter:invert(64%) sepia(11%) saturate(0%) hue-rotate(149deg) brightness(99%) contrast(95%);--ifm-code-background:#ffffff1a;--ifm-scrollbar-track-background-color:#444;--ifm-scrollbar-thumb-background-color:#686868;--ifm-scrollbar-thumb-hover-background-color:#7a7a7a;--ifm-table-stripe-background:#ffffff12;--ifm-toc-border-color:var(--ifm-color-emphasis-200);--ifm-color-primary-contrast-background:#102445;--ifm-color-primary-contrast-foreground:#ebf2fc;--ifm-color-secondary-contrast-background:#474748;--ifm-color-secondary-contrast-foreground:#fdfdfe;--ifm-color-success-contrast-background:#003100;--ifm-color-success-contrast-foreground:#e6f6e6;--ifm-color-info-contrast-background:#193c47;--ifm-color-info-contrast-foreground:#eef9fd;--ifm-color-warning-contrast-background:#4d3800;--ifm-color-warning-contrast-foreground:#fff8e6;--ifm-color-danger-contrast-background:#4b1113;--ifm-color-danger-contrast-foreground:#ffebec}#nprogress .bar{background:var(--docusaurus-progress-bar-color);height:2px;left:0;position:fixed;top:0;width:100%;z-index:1031}#nprogress .peg{box-shadow:0 0 10px var(--docusaurus-progress-bar-color),0 0 5px var(--docusaurus-progress-bar-color);height:100%;opacity:1;position:absolute;right:0;transform:rotate(3deg) translateY(-4px);width:100px}@font-face{font-family:Poppins;font-style:normal;font-weight:400;src:local(""),url(/kr/assets/fonts/poppins-regular-f61407da33b59324fbefe468ce6917ab.woff) format("woff2"),url(data:font/woff2;base64,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) format("woff"),}@font-face{font-family:Roboto;font-style:normal;font-weight:400;src:local(""),url(/kr/assets/fonts/roboto-mono-regular-498042b7fe9cd07b4fd11a0965093e55.woff) format("woff2"),url(/kr/assets/fonts/roboto-mono-regular-535bc89d4af715503b01afd761501e58.woff2) format("woff"),}@font-face{font-family:Lato;font-style:normal;font-weight:400;src:local(""),url(/kr/assets/fonts/lato-regular-292725486219768e62259f7286dc73cc.woff) format("woff2"),url(/kr/assets/fonts/lato-regular-be36596da218e1eec01c5c600b1c13ef.woff2) format("woff"),}[data-theme=dark]{--ifm-color-primary:#ffc61c;--ifm-color-primary-dark:#ffbf00;--ifm-color-primary-darker:#f1b400;--ifm-color-primary-darkest:#c69400;--ifm-color-primary-light:#ffcd38;--ifm-color-primary-lighter:#ffd146;--ifm-color-primary-lightest:#ffdb71;--ifm-color-secondary-dark:#054a6e;--ifm-color-secondary:#06527a;--ifm-color-secondary-light:#075a86;--light:#33313b;--dark:#f3f3f3}[data-theme=dark] .footer--dark{background-color:var(--light);color:var(--ifm-color-primary)}body{font-family:Lato,sans-serif}h1,h2,h3,h4,h5,h6{font-family:Poppins,sans-serif}code{font-family:Roboto Mono,monospace}.navbar__brand{height:40px}.btn.navbar__github{background-color:#384745;border:2px solid #384745;border-radius:3px;box-shadow:inset 0 1px #ffffff26,0 1px 1px #00000014;color:#fff!important;font-family:poppins,sans-serif;font-size:1rem;font-weight:400;line-height:1.66;padding:8px 20px 7px 47px;position:relative;text-align:center;text-decoration:none;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-user-select:none;user-select:none}.clear-btn{padding:100px}a.btn.navbar__github:hover{background-color:#273230;border-color:#222a29;color:#fff}a.btn.navbar__github:before{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20.5 20'%3E%3Cpath fill='%23fff' d='M10.3 0C4.6 0 0 4.6 0 10.3c0 4.4 2.8 8.3 7 9.7.5.1.7-.2.7-.5v-1.9c-2.6.5-3.2-.6-3.4-1.2-.2-.6-.6-1.1-1-1.5-.4-.2-.9-.7 0-.7.7.1 1.3.5 1.6 1 .6 1.1 1.9 1.4 3 .8 0-.5.3-1 .7-1.4-2.3-.3-4.7-1.1-4.7-5.1 0-1 .4-2 1.1-2.8-.5-.6-.5-1.6-.1-2.5 0 0 .9-.3 2.8 1.1 1.7-.5 3.4-.5 5.1 0 2-1.3 2.8-1.1 2.8-1.1.4.9.5 1.9.2 2.8.7.7 1.1 1.7 1.1 2.8 0 3.9-2.4 4.8-4.7 5.1.5.5.7 1.2.7 1.9v2.8c0 .3.2.6.7.5 5.4-1.8 8.3-7.6 6.5-13C18.6 2.8 14.7 0 10.3 0z'/%3E%3C/svg%3E");content:"";height:20px;left:15px;position:absolute;top:10px;width:20px}.header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat;content:"";display:flex;height:24px;width:24px}[data-theme=dark] .header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath fill='%23fff' d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat}.docusaurus-highlight-code-line{background-color:#484d5b;display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}body:not(.navigation-with-keyboard) :not(input):focus{outline:0}#__docusaurus-base-url-issue-banner-container,.hideAction_vcyE>svg,.themedImage_ToTc,[data-theme=dark] .lightToggleIcon_pyhR,[data-theme=light] .darkToggleIcon_wfgR,html[data-announcement-bar-initially-dismissed=true] .announcementBar_mb4j{display:none}.skipToContent_fXgn{background-color:var(--ifm-background-surface-color);color:var(--ifm-color-emphasis-900);left:100%;padding:calc(var(--ifm-global-spacing)/2) var(--ifm-global-spacing);position:fixed;top:1rem;z-index:calc(var(--ifm-z-index-fixed) + 1)}.skipToContent_fXgn:focus{box-shadow:var(--ifm-global-shadow-md);left:1rem}.closeButton_CVFx{line-height:0;padding:0}.content_knG7{font-size:85%;padding:5px 0;text-align:center}.content_knG7 a{color:inherit}.announcementBar_mb4j{align-items:center;background-color:var(--ifm-color-white);border-bottom:1px solid var(--ifm-color-emphasis-100);color:var(--ifm-color-black);display:flex;height:var(--docusaurus-announcement-bar-height)}.announcementBarPlaceholder_vyr4{flex:0 0 10px}.announcementBarClose_gvF7{align-self:stretch;flex:0 0 30px}.toggle_vylO{height:2rem;width:2rem}.toggleButton_gllP{align-items:center;border-radius:50%;display:flex;height:100%;justify-content:center;transition:background var(--ifm-transition-fast);width:100%}.toggleButton_gllP:hover{background:var(--ifm-color-emphasis-200)}.toggleButtonDisabled_aARS{cursor:not-allowed}.darkNavbarColorModeToggle_X3D1:hover{background:var(--ifm-color-gray-800)}[data-theme=dark] .themedImage--dark_i4oU,[data-theme=light] .themedImage--light_HNdA{display:initial}.iconExternalLink_nPIU{margin-left:.3rem}.iconLanguage_nlXk{margin-right:5px;vertical-align:text-bottom}.searchBar_RVTs .dropdownMenu_qbY6{background:var(--search-local-modal-background,#f5f6f7);border-radius:6px;box-shadow:var(--search-local-modal-shadow,inset 1px 1px 0 0 #ffffff80,0 3px 8px 0 #555a64);left:auto!important;margin-top:8px;padding:var(--search-local-spacing,12px);position:relative;right:0!important;width:var(--search-local-modal-width,560px)}html[data-theme=dark] .searchBar_RVTs .dropdownMenu_qbY6{background:var(--search-local-modal-background,var(--ifm-background-color));box-shadow:var(--search-local-modal-shadow,inset 1px 1px 0 0 #2c2e40,0 3px 8px 0 #000309)}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2{align-items:center;background:var(--search-local-hit-background,#fff);border-radius:4px;box-shadow:var(--search-local-hit-shadow,0 1px 3px 0 #d4d9e1);color:var(--search-local-hit-color,#444950);cursor:pointer;display:flex;flex-direction:row;height:var(--search-local-hit-height,56px);padding:0 var(--search-local-spacing,12px);width:100%}.hitTree_kk6K,.noResults_l6Q3{align-items:center;display:flex}html[data-theme=dark] .dropdownMenu_qbY6 .suggestion_fB_2{background:var(--search-local-hit-background,var(--ifm-color-emphasis-100));box-shadow:var(--search-local-hit-shadow,none);color:var(--search-local-hit-color,var(--ifm-font-color-base))}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2:not(:last-child){margin-bottom:4px}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2.cursor_eG29{background-color:var(--search-local-highlight-color,var(--ifm-color-primary))}.hitFooter_E9YW a,.hitIcon_a7Zy,.hitPath_ieM4,.hitTree_kk6K,.noResultsIcon_EBY5{color:var(--search-local-muted-color,#969faf)}html[data-theme=dark] .hitIcon_a7Zy,html[data-theme=dark] .hitPath_ieM4,html[data-theme=dark] .hitTree_kk6K,html[data-theme=dark] .noResultsIcon_EBY5{color:var(--search-local-muted-color,var(--ifm-color-secondary-darkest))}.hitTree_kk6K>svg{height:var(--search-local-hit-height,56px);opacity:.5;width:24px}.hitIcon_a7Zy,.hitTree_kk6K>svg{stroke-width:var(--search-local-icon-stroke-width,1.4)}.hitAction_NqkB,.hitIcon_a7Zy{height:20px;width:20px}.hitWrapper_sAK8{display:flex;flex:1 1 auto;flex-direction:column;font-weight:500;justify-content:center;margin:0 8px;overflow-x:hidden;width:80%}.hitWrapper_sAK8 mark{background:none;color:var(--search-local-highlight-color,var(--ifm-color-primary))}.hitTitle_vyVt{font-size:.9em}.hitPath_ieM4{font-size:.75em}.hitPath_ieM4,.hitTitle_vyVt{overflow-x:hidden;text-overflow:ellipsis;white-space:nowrap}.noResults_l6Q3{flex-direction:column;justify-content:center;padding:var(--search-local-spacing,12px) 0}.noResultsIcon_EBY5{margin-bottom:var(--search-local-spacing,12px)}.hitFooter_E9YW{font-size:.85em;margin-top:var(--search-local-spacing,12px);text-align:center}.cursor_eG29 .hideAction_vcyE>svg,.tocCollapsibleContent_vkbj a{display:block}.suggestion_fB_2.cursor_eG29,.suggestion_fB_2.cursor_eG29 .hitIcon_a7Zy,.suggestion_fB_2.cursor_eG29 .hitPath_ieM4,.suggestion_fB_2.cursor_eG29 .hitTree_kk6K,.suggestion_fB_2.cursor_eG29 mark{color:var(--search-local-hit-active-color,var(--ifm-color-white))!important}.searchBarContainer_NW3z{margin-left:16px}.searchBarContainer_NW3z .searchBarLoadingRing_YnHq{display:none;left:10px;position:absolute;top:6px}.searchBarContainer_NW3z .searchClearButton_qk4g{background:none;border:none;line-height:1rem;padding:0;position:absolute;right:.8rem;top:50%;transform:translateY(-50%)}.navbar__search{position:relative}.searchIndexLoading_EJ1f .navbar__search-input{background-image:none}.searchHintContainer_Pkmr{align-items:center;display:flex;gap:4px;height:100%;justify-content:center;pointer-events:none;position:absolute;right:10px;top:0}.searchHint_iIMx{background-color:var(--ifm-navbar-search-input-background-color);border:1px solid var(--ifm-color-emphasis-500);box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-500);color:var(--ifm-navbar-search-input-placeholder-color)}.loadingRing_RJI3{display:inline-block;height:20px;opacity:var(--search-local-loading-icon-opacity,.5);position:relative;width:20px}.loadingRing_RJI3 div{animation:1.2s cubic-bezier(.5,0,.5,1) infinite a;border:2px solid var(--search-load-loading-icon-color,var(--ifm-navbar-search-input-color));border-color:var(--search-load-loading-icon-color,var(--ifm-navbar-search-input-color)) #0000 #0000 #0000;border-radius:50%;display:block;height:16px;margin:2px;position:absolute;width:16px}.loadingRing_RJI3 div:first-child{animation-delay:-.45s}.loadingRing_RJI3 div:nth-child(2){animation-delay:-.3s}.loadingRing_RJI3 div:nth-child(3){animation-delay:-.15s}@keyframes a{0%{transform:rotate(0)}to{transform:rotate(1turn)}}.navbarHideable_m1mJ{transition:transform var(--ifm-transition-fast) ease}.navbarHidden_jGov{transform:translate3d(0,calc(-100% - 2px),0)}.errorBoundaryError_a6uf{color:red;white-space:pre-wrap}.footerLogoLink_BH7S{opacity:.5;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.footerLogoLink_BH7S:hover,.hash-link:focus,:hover>.hash-link{opacity:1}.mainWrapper_z2l0{display:flex;flex:1 0 auto;flex-direction:column}.docusaurus-mt-lg{margin-top:3rem}#__docusaurus{display:flex;flex-direction:column;min-height:100%}.iconEdit_Z9Sw{margin-right:.3em;vertical-align:sub}.tag_zVej{border:1px solid var(--docusaurus-tag-list-border);transition:border var(--ifm-transition-fast)}.tag_zVej:hover{--docusaurus-tag-list-border:var(--ifm-link-color);text-decoration:none}.tagRegular_sFm0{border-radius:var(--ifm-global-radius);font-size:90%;padding:.2rem .5rem .3rem}.tagWithCount_h2kH{align-items:center;border-left:0;display:flex;padding:0 .5rem 0 1rem;position:relative}.tagWithCount_h2kH:after,.tagWithCount_h2kH:before{border:1px solid var(--docusaurus-tag-list-border);content:"";position:absolute;top:50%;transition:inherit}.tagWithCount_h2kH:before{border-bottom:0;border-right:0;height:1.18rem;right:100%;transform:translate(50%,-50%) rotate(-45deg);width:1.18rem}.tagWithCount_h2kH:after{border-radius:50%;height:.5rem;left:0;transform:translateY(-50%);width:.5rem}.tagWithCount_h2kH span{background:var(--ifm-color-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-color-black);font-size:.7rem;line-height:1.2;margin-left:.3rem;padding:.1rem .4rem}.tags_jXut{display:inline}.tag_QGVx{display:inline-block;margin:0 .4rem .5rem 0}.lastUpdated_vwxv{font-size:smaller;font-style:italic;margin-top:.2rem}.tocCollapsibleButton_TO0P{align-items:center;display:flex;font-size:inherit;justify-content:space-between;padding:.4rem .8rem;width:100%}.tocCollapsibleButton_TO0P:after{background:var(--ifm-menu-link-sublist-icon) 50% 50%/2rem 2rem no-repeat;content:"";filter:var(--ifm-menu-link-sublist-icon-filter);height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast);width:1.25rem}.tocCollapsibleButtonExpanded_MG3E:after,.tocCollapsibleExpanded_sAul{transform:none}.tocCollapsible_ETCw{background-color:var(--ifm-menu-color-background-active);border-radius:var(--ifm-global-radius);margin:1rem 0}.buttonGroup__atx button,.codeBlockContainer_Ckt0{background:var(--prism-background-color);color:var(--prism-color)}.tocCollapsibleContent_vkbj>ul{border-left:none;border-top:1px solid var(--ifm-color-emphasis-300);font-size:15px;padding:.2rem 0}.tocCollapsibleContent_vkbj ul li{margin:.4rem .8rem}.tableOfContents_bqdL{max-height:calc(100vh - var(--ifm-navbar-height) - 2rem);overflow-y:auto;position:sticky;top:calc(var(--ifm-navbar-height) + 1rem)}.anchorWithStickyNavbar_LWe7{scroll-margin-top:calc(var(--ifm-navbar-height) + .5rem)}.anchorWithHideOnScrollNavbar_WYt5{scroll-margin-top:.5rem}.hash-link{opacity:0;padding-left:.5rem;transition:opacity var(--ifm-transition-fast);-webkit-user-select:none;user-select:none}.hash-link:before{content:"#"}.codeBlockContainer_Ckt0{border-radius:var(--ifm-code-border-radius);box-shadow:var(--ifm-global-shadow-lw);margin-bottom:var(--ifm-leading)}.codeBlockContent_biex{border-radius:inherit;direction:ltr;position:relative}.codeBlockTitle_Ktv7{border-bottom:1px solid var(--ifm-color-emphasis-300);border-top-left-radius:inherit;border-top-right-radius:inherit;font-size:var(--ifm-code-font-size);font-weight:500;padding:.75rem var(--ifm-pre-padding)}.codeBlock_bY9V{--ifm-pre-background:var(--prism-background-color);margin:0;padding:0}.codeBlockTitle_Ktv7+.codeBlockContent_biex .codeBlock_bY9V{border-top-left-radius:0;border-top-right-radius:0}.codeBlockLines_e6Vv{float:left;font:inherit;min-width:100%;padding:var(--ifm-pre-padding)}.codeBlockLinesWithNumbering_o6Pm{display:table;padding:var(--ifm-pre-padding) 0}.buttonGroup__atx{column-gap:.2rem;display:flex;position:absolute;right:calc(var(--ifm-pre-padding)/2);top:calc(var(--ifm-pre-padding)/2)}.buttonGroup__atx button{align-items:center;border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-global-radius);display:flex;line-height:0;opacity:0;padding:.4rem;transition:opacity var(--ifm-transition-fast) ease-in-out}.buttonGroup__atx button:focus-visible,.buttonGroup__atx button:hover{opacity:1!important}.theme-code-block:hover .buttonGroup__atx button{opacity:.4}:where(:root){--docusaurus-highlighted-code-line-bg:#484d5b}:where([data-theme=dark]){--docusaurus-highlighted-code-line-bg:#646464}.theme-code-block-highlighted-line{background-color:var(--docusaurus-highlighted-code-line-bg);display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}.codeLine_lJS_{counter-increment:a;display:table-row}.codeLineNumber_Tfdd{background:var(--ifm-pre-background);display:table-cell;left:0;overflow-wrap:normal;padding:0 var(--ifm-pre-padding);position:sticky;text-align:right;width:1%}.codeLineNumber_Tfdd:before{content:counter(a);opacity:.4}.codeLineContent_feaV{padding-right:var(--ifm-pre-padding)}.theme-code-block:hover .copyButtonCopied_obH4{opacity:1!important}.copyButtonIcons_eSgA{height:1.125rem;position:relative;width:1.125rem}.copyButtonIcon_y97N,.copyButtonSuccessIcon_LjdS{fill:currentColor;height:inherit;left:0;opacity:inherit;position:absolute;top:0;transition:all var(--ifm-transition-fast) ease;width:inherit}.copyButtonSuccessIcon_LjdS{color:#00d600;left:50%;opacity:0;top:50%;transform:translate(-50%,-50%) scale(.33)}.copyButtonCopied_obH4 .copyButtonIcon_y97N{opacity:0;transform:scale(.33)}.copyButtonCopied_obH4 .copyButtonSuccessIcon_LjdS{opacity:1;transform:translate(-50%,-50%) scale(1);transition-delay:75ms}.wordWrapButtonIcon_Bwma{height:1.2rem;width:1.2rem}.details_lb9f{--docusaurus-details-summary-arrow-size:0.38rem;--docusaurus-details-transition:transform 200ms ease;--docusaurus-details-decoration-color:grey}.details_lb9f>summary{cursor:pointer;padding-left:1rem;position:relative}.details_lb9f>summary::-webkit-details-marker{display:none}.details_lb9f>summary:before{border-color:#0000 #0000 #0000 var(--docusaurus-details-decoration-color);border-style:solid;border-width:var(--docusaurus-details-summary-arrow-size);content:"";left:0;position:absolute;top:.45rem;transform:rotate(0);transform-origin:calc(var(--docusaurus-details-summary-arrow-size)/2) 50%;transition:var(--docusaurus-details-transition)}.collapsibleContent_i85q{border-top:1px solid var(--docusaurus-details-decoration-color);margin-top:1rem;padding-top:1rem}.details_b_Ee{--docusaurus-details-decoration-color:var(--ifm-alert-border-color);--docusaurus-details-transition:transform var(--ifm-transition-fast) ease;border:1px solid var(--ifm-alert-border-color);margin:0 0 var(--ifm-spacing-vertical)}.img_ev3q{height:auto}.admonition_LlT9{margin-bottom:1em}.admonitionHeading_tbUL{font:var(--ifm-heading-font-weight) var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.3rem}.admonitionHeading_tbUL code{text-transform:none}.admonitionIcon_kALy{display:inline-block;margin-right:.4em;vertical-align:middle}.admonitionIcon_kALy svg{fill:var(--ifm-alert-foreground-color);display:inline-block;height:1.6em;width:1.6em}.breadcrumbHomeIcon_YNFT{height:1.1rem;position:relative;top:1px;vertical-align:top;width:1.1rem}.breadcrumbsContainer_Z_bl{--ifm-breadcrumb-size-multiplier:0.8;margin-bottom:.8rem}.searchContextInput_mXoe,.searchQueryInput_CFBF{background:var(--ifm-background-color);border:var(--ifm-global-border-width) solid var(--ifm-color-content-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-font-color-base);font-size:var(--ifm-font-size-base);margin-bottom:1rem;padding:.5rem;width:100%}.searchResultItem_U687{border-bottom:1px solid #dfe3e8;padding:1rem 0}.searchResultItemPath_uIbk{color:var(--ifm-color-content-secondary);font-size:.8rem;margin:.5rem 0 0}.searchResultItemSummary_oZHr{font-style:italic;margin:.5rem 0 0}.backToTopButton_sjWU{background-color:var(--ifm-color-emphasis-200);border-radius:50%;bottom:1.3rem;box-shadow:var(--ifm-global-shadow-lw);height:3rem;opacity:0;position:fixed;right:1.3rem;transform:scale(0);transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default);visibility:hidden;width:3rem;z-index:calc(var(--ifm-z-index-fixed) - 1)}.backToTopButton_sjWU:after{background-color:var(--ifm-color-emphasis-1000);content:" ";display:inline-block;height:100%;-webkit-mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;width:100%}.backToTopButtonShow_xfvO{opacity:1;transform:scale(1);visibility:visible}[data-theme=dark]:root{--docusaurus-collapse-button-bg:#ffffff0d;--docusaurus-collapse-button-bg-hover:#ffffff1a}.collapseSidebarButton_PEFL{display:none;margin:0}.docSidebarContainer_b6E3,.sidebarLogo_isFc{display:none}.docMainContainer_gTbr,.docPage__5DB{display:flex;width:100%}.docPage__5DB{flex:1 0}.docsWrapper_BCFX{display:flex;flex:1 0 auto}@media (min-width:997px){.collapseSidebarButton_PEFL,.expandButton_m80_{background-color:var(--docusaurus-collapse-button-bg)}:root{--docusaurus-announcement-bar-height:30px}.announcementBarClose_gvF7,.announcementBarPlaceholder_vyr4{flex-basis:50px}.searchBox_ZlJk{padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.lastUpdated_vwxv{text-align:right}.tocMobile_ITEo{display:none}.docItemCol_VOVn{max-width:75%!important}.collapseSidebarButton_PEFL{border:1px solid var(--ifm-toc-border-color);border-radius:0;bottom:0;display:block!important;height:40px;position:sticky}.collapseSidebarButtonIcon_kv0_{margin-top:4px;transform:rotate(180deg)}.expandButtonIcon_BlDH,[dir=rtl] .collapseSidebarButtonIcon_kv0_{transform:rotate(0)}.collapseSidebarButton_PEFL:focus,.collapseSidebarButton_PEFL:hover,.expandButton_m80_:focus,.expandButton_m80_:hover{background-color:var(--docusaurus-collapse-button-bg-hover)}.menuHtmlItem_M9Kj{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu_SIkG{flex-grow:1;padding:.5rem}@supports (scrollbar-gutter:stable){.menu_SIkG{padding:.5rem 0 .5rem .5rem;scrollbar-gutter:stable}}.menuWithAnnouncementBar_GW3s{margin-bottom:var(--docusaurus-announcement-bar-height)}.sidebar_njMd{display:flex;flex-direction:column;height:100%;padding-top:var(--ifm-navbar-height);width:var(--doc-sidebar-width)}.sidebarWithHideableNavbar_wUlq{padding-top:0}.sidebarHidden_VK0M{opacity:0;visibility:hidden}.sidebarLogo_isFc{align-items:center;color:inherit!important;display:flex!important;margin:0 var(--ifm-navbar-padding-horizontal);max-height:var(--ifm-navbar-height);min-height:var(--ifm-navbar-height);text-decoration:none!important}.sidebarLogo_isFc img{height:2rem;margin-right:.5rem}.expandButton_m80_{align-items:center;display:flex;height:100%;justify-content:center;position:absolute;right:0;top:0;transition:background-color var(--ifm-transition-fast) ease;width:100%}[dir=rtl] .expandButtonIcon_BlDH{transform:rotate(180deg)}.docSidebarContainer_b6E3{border-right:1px solid var(--ifm-toc-border-color);-webkit-clip-path:inset(0);clip-path:inset(0);display:block;margin-top:calc(var(--ifm-navbar-height)*-1);transition:width var(--ifm-transition-fast) ease;width:var(--doc-sidebar-width);will-change:width}.docSidebarContainerHidden_b3ry{cursor:pointer;width:var(--doc-sidebar-hidden-width)}.sidebarViewport_Xe31{height:100%;max-height:100vh;position:sticky;top:0}.docMainContainer_gTbr{flex-grow:1;max-width:calc(100% - var(--doc-sidebar-width))}.docMainContainerEnhanced_Uz_u{max-width:calc(100% - var(--doc-sidebar-hidden-width))}.docItemWrapperEnhanced_czyv{max-width:calc(var(--ifm-container-width) + var(--doc-sidebar-width))!important}}@media (min-width:1440px){.container{max-width:var(--ifm-container-width-xl)}}@media (max-width:996px){.col{--ifm-col-width:100%;flex-basis:var(--ifm-col-width);margin-left:0}.footer{--ifm-footer-padding-horizontal:0}.colorModeToggle_DEke,.footer__link-separator,.navbar-sidebar__back,.navbar__item,.tableOfContents_bqdL{display:none}.footer__col{margin-bottom:calc(var(--ifm-spacing-vertical)*3)}.footer__link-item{display:block}.hero{padding-left:0;padding-right:0}.navbar>.container,.navbar>.container-fluid{padding:0}.navbar__toggle{display:inherit}.navbar__search-input{width:9rem}.pills--block,.tabs--block{flex-direction:column}.searchBox_ZlJk{position:absolute;right:var(--ifm-navbar-padding-horizontal)}.docItemContainer_F8PC{padding:0 .3rem}}@media not (max-width:996px){.searchBar_RVTs.searchBarLeft_MXDe .dropdownMenu_qbY6{left:0!important;right:auto!important}}@media only screen and (max-width:996px){.searchQueryColumn_q7nx{max-width:60%!important}.searchContextColumn_oWAF{max-width:40%!important}}@media (max-width:768px){#theme-main h1{font-size:50px!important;font-weight:700;line-height:3rem!important}#theme-main .header-docs{margin-bottom:20px}}@media (max-width:576px){.markdown h1:first-child{--ifm-h1-font-size:2rem}.markdown>h2{--ifm-h2-font-size:1.5rem}.markdown>h3{--ifm-h3-font-size:1.25rem}.navbar__search-input:not(:focus){width:2rem}.searchBar_RVTs .dropdownMenu_qbY6{max-width:calc(100vw - var(--ifm-navbar-padding-horizontal)*2);width:var(--search-local-modal-width-sm,340px)}.searchBarContainer_NW3z:not(.focused_OWtg) .searchClearButton_qk4g,.searchHintContainer_Pkmr{display:none}}@media screen and (max-width:576px){.searchQueryColumn_q7nx{max-width:100%!important}.searchContextColumn_oWAF{max-width:100%!important;padding-left:var(--ifm-spacing-horizontal)!important}}@media (hover:hover){.backToTopButton_sjWU:hover{background-color:var(--ifm-color-emphasis-300)}}@media (pointer:fine){.thin-scrollbar{scrollbar-width:thin}.thin-scrollbar::-webkit-scrollbar{height:var(--ifm-scrollbar-size);width:var(--ifm-scrollbar-size)}.thin-scrollbar::-webkit-scrollbar-track{background:var(--ifm-scrollbar-track-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb{background:var(--ifm-scrollbar-thumb-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb:hover{background:var(--ifm-scrollbar-thumb-hover-background-color)}}@media (prefers-reduced-motion:reduce){:root{--ifm-transition-fast:0ms;--ifm-transition-slow:0ms}}@media print{.announcementBar_mb4j,.footer,.menu,.navbar,.pagination-nav,.table-of-contents,.tocMobile_ITEo{display:none}.tabs{page-break-inside:avoid}.codeBlockLines_e6Vv{white-space:pre-wrap}}
\ No newline at end of file
diff --git a/kr/assets/css/styles.676217c8.css b/kr/assets/css/styles.676217c8.css
deleted file mode 100644
index 6433c0244..000000000
--- a/kr/assets/css/styles.676217c8.css
+++ /dev/null
@@ -1 +0,0 @@
-.col,.container{padding:0 var(--ifm-spacing-horizontal);width:100%}.markdown>h2,.markdown>h3,.markdown>h4,.markdown>h5,.markdown>h6{margin-bottom:calc(var(--ifm-heading-vertical-rhythm-bottom)*var(--ifm-leading))}pre,table{overflow:auto}blockquote,pre{margin:0 0 var(--ifm-spacing-vertical)}.breadcrumbs__link,.button{transition-timing-function:var(--ifm-transition-timing-default)}.button,code{vertical-align:middle}.button--outline.button--active,.button--outline:active,.button--outline:hover,:root{--ifm-button-color:var(--ifm-font-color-base-inverse)}.menu__link:hover,a{transition:color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.navbar--dark,:root{--ifm-navbar-link-hover-color:var(--ifm-color-primary)}.menu,.navbar-sidebar{overflow-x:hidden}:root,html[data-theme=dark]{--ifm-color-emphasis-500:var(--ifm-color-gray-500)}.markdown li,body{word-wrap:break-word}.toggleButton_gllP,html{-webkit-tap-highlight-color:transparent}*,.DocSearch-Container,.DocSearch-Container *{box-sizing:border-box}:root{--ifm-color-scheme:light;--ifm-dark-value:10%;--ifm-darker-value:15%;--ifm-darkest-value:30%;--ifm-light-value:15%;--ifm-lighter-value:30%;--ifm-lightest-value:50%;--ifm-contrast-background-value:90%;--ifm-contrast-foreground-value:70%;--ifm-contrast-background-dark-value:70%;--ifm-contrast-foreground-dark-value:90%;--ifm-color-primary:#3578e5;--ifm-color-secondary:#ebedf0;--ifm-color-success:#00a400;--ifm-color-info:#54c7ec;--ifm-color-warning:#ffba00;--ifm-color-danger:#fa383e;--ifm-color-primary-dark:#306cce;--ifm-color-primary-darker:#2d66c3;--ifm-color-primary-darkest:#2554a0;--ifm-color-primary-light:#538ce9;--ifm-color-primary-lighter:#72a1ed;--ifm-color-primary-lightest:#9abcf2;--ifm-color-primary-contrast-background:#ebf2fc;--ifm-color-primary-contrast-foreground:#102445;--ifm-color-secondary-dark:#d4d5d8;--ifm-color-secondary-darker:#c8c9cc;--ifm-color-secondary-darkest:#a4a6a8;--ifm-color-secondary-light:#eef0f2;--ifm-color-secondary-lighter:#f1f2f5;--ifm-color-secondary-lightest:#f5f6f8;--ifm-color-secondary-contrast-background:#fdfdfe;--ifm-color-secondary-contrast-foreground:#474748;--ifm-color-success-dark:#009400;--ifm-color-success-darker:#008b00;--ifm-color-success-darkest:#007300;--ifm-color-success-light:#26b226;--ifm-color-success-lighter:#4dbf4d;--ifm-color-success-lightest:#80d280;--ifm-color-success-contrast-background:#e6f6e6;--ifm-color-success-contrast-foreground:#003100;--ifm-color-info-dark:#4cb3d4;--ifm-color-info-darker:#47a9c9;--ifm-color-info-darkest:#3b8ba5;--ifm-color-info-light:#6ecfef;--ifm-color-info-lighter:#87d8f2;--ifm-color-info-lightest:#aae3f6;--ifm-color-info-contrast-background:#eef9fd;--ifm-color-info-contrast-foreground:#193c47;--ifm-color-warning-dark:#e6a700;--ifm-color-warning-darker:#d99e00;--ifm-color-warning-darkest:#b38200;--ifm-color-warning-light:#ffc426;--ifm-color-warning-lighter:#ffcf4d;--ifm-color-warning-lightest:#ffdd80;--ifm-color-warning-contrast-background:#fff8e6;--ifm-color-warning-contrast-foreground:#4d3800;--ifm-color-danger-dark:#e13238;--ifm-color-danger-darker:#d53035;--ifm-color-danger-darkest:#af272b;--ifm-color-danger-light:#fb565b;--ifm-color-danger-lighter:#fb7478;--ifm-color-danger-lightest:#fd9c9f;--ifm-color-danger-contrast-background:#ffebec;--ifm-color-danger-contrast-foreground:#4b1113;--ifm-color-white:#fff;--ifm-color-black:#000;--ifm-color-gray-0:var(--ifm-color-white);--ifm-color-gray-100:#f5f6f7;--ifm-color-gray-200:#ebedf0;--ifm-color-gray-300:#dadde1;--ifm-color-gray-400:#ccd0d5;--ifm-color-gray-500:#bec3c9;--ifm-color-gray-600:#8d949e;--ifm-color-gray-700:#606770;--ifm-color-gray-800:#444950;--ifm-color-gray-900:#1c1e21;--ifm-color-gray-1000:var(--ifm-color-black);--ifm-color-emphasis-0:var(--ifm-color-gray-0);--ifm-color-emphasis-100:var(--ifm-color-gray-100);--ifm-color-emphasis-200:var(--ifm-color-gray-200);--ifm-color-emphasis-300:var(--ifm-color-gray-300);--ifm-color-emphasis-400:var(--ifm-color-gray-400);--ifm-color-emphasis-600:var(--ifm-color-gray-600);--ifm-color-emphasis-700:var(--ifm-color-gray-700);--ifm-color-emphasis-800:var(--ifm-color-gray-800);--ifm-color-emphasis-900:var(--ifm-color-gray-900);--ifm-color-emphasis-1000:var(--ifm-color-gray-1000);--ifm-color-content:var(--ifm-color-emphasis-900);--ifm-color-content-inverse:var(--ifm-color-emphasis-0);--ifm-color-content-secondary:#525860;--ifm-background-color:#0000;--ifm-background-surface-color:var(--ifm-color-content-inverse);--ifm-global-border-width:1px;--ifm-global-radius:0.4rem;--ifm-hover-overlay:#0000000d;--ifm-font-color-base:var(--ifm-color-content);--ifm-font-color-base-inverse:var(--ifm-color-content-inverse);--ifm-font-color-secondary:var(--ifm-color-content-secondary);--ifm-font-family-base:system-ui,-apple-system,Segoe UI,Roboto,Ubuntu,Cantarell,Noto Sans,sans-serif,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--ifm-font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--ifm-font-size-base:100%;--ifm-font-weight-light:300;--ifm-font-weight-normal:400;--ifm-font-weight-semibold:500;--ifm-font-weight-bold:700;--ifm-font-weight-base:var(--ifm-font-weight-normal);--ifm-line-height-base:1.65;--ifm-global-spacing:1rem;--ifm-spacing-vertical:var(--ifm-global-spacing);--ifm-spacing-horizontal:var(--ifm-global-spacing);--ifm-transition-fast:200ms;--ifm-transition-slow:400ms;--ifm-transition-timing-default:cubic-bezier(0.08,0.52,0.52,1);--ifm-global-shadow-lw:0 1px 2px 0 #0000001a;--ifm-global-shadow-md:0 5px 40px #0003;--ifm-global-shadow-tl:0 12px 28px 0 #0003,0 2px 4px 0 #0000001a;--ifm-z-index-dropdown:100;--ifm-z-index-fixed:200;--ifm-z-index-overlay:400;--ifm-container-width:1140px;--ifm-container-width-xl:1320px;--ifm-code-background:#f6f7f8;--ifm-code-border-radius:var(--ifm-global-radius);--ifm-code-font-size:90%;--ifm-code-padding-horizontal:0.1rem;--ifm-code-padding-vertical:0.1rem;--ifm-pre-background:var(--ifm-code-background);--ifm-pre-border-radius:var(--ifm-code-border-radius);--ifm-pre-color:inherit;--ifm-pre-line-height:1.45;--ifm-pre-padding:1rem;--ifm-heading-color:inherit;--ifm-heading-margin-top:0;--ifm-heading-margin-bottom:var(--ifm-spacing-vertical);--ifm-heading-font-family:var(--ifm-font-family-base);--ifm-heading-font-weight:var(--ifm-font-weight-bold);--ifm-heading-line-height:1.25;--ifm-h1-font-size:2rem;--ifm-h2-font-size:1.5rem;--ifm-h3-font-size:1.25rem;--ifm-h4-font-size:1rem;--ifm-h5-font-size:0.875rem;--ifm-h6-font-size:0.85rem;--ifm-image-alignment-padding:1.25rem;--ifm-leading-desktop:1.25;--ifm-leading:calc(var(--ifm-leading-desktop)*1rem);--ifm-list-left-padding:2rem;--ifm-list-margin:1rem;--ifm-list-item-margin:0.25rem;--ifm-list-paragraph-margin:1rem;--ifm-table-cell-padding:0.75rem;--ifm-table-background:#0000;--ifm-table-stripe-background:#00000008;--ifm-table-border-width:1px;--ifm-table-border-color:var(--ifm-color-emphasis-300);--ifm-table-head-background:inherit;--ifm-table-head-color:inherit;--ifm-table-head-font-weight:var(--ifm-font-weight-bold);--ifm-table-cell-color:inherit;--ifm-link-color:var(--ifm-color-primary);--ifm-link-decoration:none;--ifm-link-hover-color:var(--ifm-link-color);--ifm-link-hover-decoration:underline;--ifm-paragraph-margin-bottom:var(--ifm-leading);--ifm-blockquote-font-size:var(--ifm-font-size-base);--ifm-blockquote-border-left-width:2px;--ifm-blockquote-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-blockquote-padding-vertical:0;--ifm-blockquote-shadow:none;--ifm-blockquote-color:var(--ifm-color-emphasis-800);--ifm-blockquote-border-color:var(--ifm-color-emphasis-300);--ifm-hr-background-color:var(--ifm-color-emphasis-500);--ifm-hr-height:1px;--ifm-hr-margin-vertical:1.5rem;--ifm-scrollbar-size:7px;--ifm-scrollbar-track-background-color:#f1f1f1;--ifm-scrollbar-thumb-background-color:silver;--ifm-scrollbar-thumb-hover-background-color:#a7a7a7;--ifm-alert-background-color:inherit;--ifm-alert-border-color:inherit;--ifm-alert-border-radius:var(--ifm-global-radius);--ifm-alert-border-width:0px;--ifm-alert-border-left-width:5px;--ifm-alert-color:var(--ifm-font-color-base);--ifm-alert-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-alert-padding-vertical:var(--ifm-spacing-vertical);--ifm-alert-shadow:var(--ifm-global-shadow-lw);--ifm-avatar-intro-margin:1rem;--ifm-avatar-intro-alignment:inherit;--ifm-avatar-photo-size:3rem;--ifm-badge-background-color:inherit;--ifm-badge-border-color:inherit;--ifm-badge-border-radius:var(--ifm-global-radius);--ifm-badge-border-width:var(--ifm-global-border-width);--ifm-badge-color:var(--ifm-color-white);--ifm-badge-padding-horizontal:calc(var(--ifm-spacing-horizontal)*0.5);--ifm-badge-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-breadcrumb-border-radius:1.5rem;--ifm-breadcrumb-spacing:0.5rem;--ifm-breadcrumb-color-active:var(--ifm-color-primary);--ifm-breadcrumb-item-background-active:var(--ifm-hover-overlay);--ifm-breadcrumb-padding-horizontal:0.8rem;--ifm-breadcrumb-padding-vertical:0.4rem;--ifm-breadcrumb-size-multiplier:1;--ifm-breadcrumb-separator:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="0 0 256 256"><g><g><polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128"/></g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g></svg>');--ifm-breadcrumb-separator-filter:none;--ifm-breadcrumb-separator-size:0.5rem;--ifm-breadcrumb-separator-size-multiplier:1.25;--ifm-button-background-color:inherit;--ifm-button-border-color:var(--ifm-button-background-color);--ifm-button-border-width:var(--ifm-global-border-width);--ifm-button-font-weight:var(--ifm-font-weight-bold);--ifm-button-padding-horizontal:1.5rem;--ifm-button-padding-vertical:0.375rem;--ifm-button-size-multiplier:1;--ifm-button-transition-duration:var(--ifm-transition-fast);--ifm-button-border-radius:calc(var(--ifm-global-radius)*var(--ifm-button-size-multiplier));--ifm-button-group-spacing:2px;--ifm-card-background-color:var(--ifm-background-surface-color);--ifm-card-border-radius:calc(var(--ifm-global-radius)*2);--ifm-card-horizontal-spacing:var(--ifm-global-spacing);--ifm-card-vertical-spacing:var(--ifm-global-spacing);--ifm-toc-border-color:var(--ifm-color-emphasis-300);--ifm-toc-link-color:var(--ifm-color-content-secondary);--ifm-toc-padding-vertical:0.5rem;--ifm-toc-padding-horizontal:0.5rem;--ifm-dropdown-background-color:var(--ifm-background-surface-color);--ifm-dropdown-font-weight:var(--ifm-font-weight-semibold);--ifm-dropdown-link-color:var(--ifm-font-color-base);--ifm-dropdown-hover-background-color:var(--ifm-hover-overlay);--ifm-footer-background-color:var(--ifm-color-emphasis-100);--ifm-footer-color:inherit;--ifm-footer-link-color:var(--ifm-color-emphasis-700);--ifm-footer-link-hover-color:var(--ifm-color-primary);--ifm-footer-link-horizontal-spacing:0.5rem;--ifm-footer-padding-horizontal:calc(var(--ifm-spacing-horizontal)*2);--ifm-footer-padding-vertical:calc(var(--ifm-spacing-vertical)*2);--ifm-footer-title-color:inherit;--ifm-footer-logo-max-width:min(30rem,90vw);--ifm-hero-background-color:var(--ifm-background-surface-color);--ifm-hero-text-color:var(--ifm-color-emphasis-800);--ifm-menu-color:var(--ifm-color-emphasis-700);--ifm-menu-color-active:var(--ifm-color-primary);--ifm-menu-color-background-active:var(--ifm-hover-overlay);--ifm-menu-color-background-hover:var(--ifm-hover-overlay);--ifm-menu-link-padding-horizontal:0.75rem;--ifm-menu-link-padding-vertical:0.375rem;--ifm-menu-link-sublist-icon:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" width="16px" height="16px" viewBox="0 0 24 24"><path fill="rgba(0,0,0,0.5)" d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>');--ifm-menu-link-sublist-icon-filter:none;--ifm-navbar-background-color:var(--ifm-background-surface-color);--ifm-navbar-height:3.75rem;--ifm-navbar-item-padding-horizontal:0.75rem;--ifm-navbar-item-padding-vertical:0.25rem;--ifm-navbar-link-color:var(--ifm-font-color-base);--ifm-navbar-link-active-color:var(--ifm-link-color);--ifm-navbar-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-navbar-padding-vertical:calc(var(--ifm-spacing-vertical)*0.5);--ifm-navbar-shadow:var(--ifm-global-shadow-lw);--ifm-navbar-search-input-background-color:var(--ifm-color-emphasis-200);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-800);--ifm-navbar-search-input-placeholder-color:var(--ifm-color-emphasis-500);--ifm-navbar-search-input-icon:url('data:image/svg+xml;utf8,<svg fill="currentColor" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" height="16px" width="16px"><path d="M6.02945,10.20327a4.17382,4.17382,0,1,1,4.17382-4.17382A4.15609,4.15609,0,0,1,6.02945,10.20327Zm9.69195,4.2199L10.8989,9.59979A5.88021,5.88021,0,0,0,12.058,6.02856,6.00467,6.00467,0,1,0,9.59979,10.8989l4.82338,4.82338a.89729.89729,0,0,0,1.29912,0,.89749.89749,0,0,0-.00087-1.29909Z" /></svg>');--ifm-navbar-sidebar-width:83vw;--ifm-pagination-border-radius:var(--ifm-global-radius);--ifm-pagination-color-active:var(--ifm-color-primary);--ifm-pagination-font-size:1rem;--ifm-pagination-item-active-background:var(--ifm-hover-overlay);--ifm-pagination-page-spacing:0.2em;--ifm-pagination-padding-horizontal:calc(var(--ifm-spacing-horizontal)*1);--ifm-pagination-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-pagination-nav-border-radius:var(--ifm-global-radius);--ifm-pagination-nav-color-hover:var(--ifm-color-primary);--ifm-pills-color-active:var(--ifm-color-primary);--ifm-pills-color-background-active:var(--ifm-hover-overlay);--ifm-pills-spacing:0.125rem;--ifm-tabs-color:var(--ifm-font-color-secondary);--ifm-tabs-color-active:var(--ifm-color-primary);--ifm-tabs-color-active-border:var(--ifm-tabs-color-active);--ifm-tabs-padding-horizontal:1rem;--ifm-tabs-padding-vertical:1rem;--docusaurus-progress-bar-color:var(--ifm-color-primary);--ifm-color-primary:#06527a;--ifm-color-primary-dark:#054a6e;--ifm-color-primary-darker:#054668;--ifm-color-primary-darkest:#043955;--ifm-color-primary-light:#075a86;--ifm-color-primary-lighter:#075e8c;--ifm-color-primary-lightest:#086b9f;--ifm-color-secondary:#ffc61c;--ifm-color-secondary-light:#ffcd38;--dark:#33313b;--light:#f3f3f3;--docusaurus-announcement-bar-height:auto;--docusaurus-tag-list-border:var(--ifm-color-emphasis-300);--docusaurus-collapse-button-bg:#0000;--docusaurus-collapse-button-bg-hover:#0000001a;--doc-sidebar-width:300px;--doc-sidebar-hidden-width:30px;--docsearch-primary-color:#5468ff;--docsearch-text-color:#1c1e21;--docsearch-spacing:12px;--docsearch-icon-stroke-width:1.4;--docsearch-highlight-color:var(--docsearch-primary-color);--docsearch-muted-color:#969faf;--docsearch-container-background:#656c85cc;--docsearch-logo-color:#5468ff;--docsearch-modal-width:560px;--docsearch-modal-height:600px;--docsearch-modal-background:#f5f6f7;--docsearch-modal-shadow:inset 1px 1px 0 0 #ffffff80,0 3px 8px 0 #555a64;--docsearch-searchbox-height:56px;--docsearch-searchbox-background:#ebedf0;--docsearch-searchbox-focus-background:#fff;--docsearch-searchbox-shadow:inset 0 0 0 2px var(--docsearch-primary-color);--docsearch-hit-height:56px;--docsearch-hit-color:#444950;--docsearch-hit-active-color:#fff;--docsearch-hit-background:#fff;--docsearch-hit-shadow:0 1px 3px 0 #d4d9e1;--docsearch-key-gradient:linear-gradient(-225deg,#d5dbe4,#f8f8f8);--docsearch-key-shadow:inset 0 -2px 0 0 #cdcde6,inset 0 0 1px 1px #fff,0 1px 2px 1px #1e235a66;--docsearch-footer-height:44px;--docsearch-footer-background:#fff;--docsearch-footer-shadow:0 -1px 0 0 #e0e3e8,0 -3px 6px 0 #45629b1f;--docsearch-primary-color:var(--ifm-color-primary);--docsearch-text-color:var(--ifm-font-color-base)}.badge--danger,.badge--info,.badge--primary,.badge--secondary,.badge--success,.badge--warning{--ifm-badge-border-color:var(--ifm-badge-background-color)}.button--link,.button--outline{--ifm-button-background-color:#0000}html{-webkit-font-smoothing:antialiased;-webkit-text-size-adjust:100%;text-size-adjust:100%;background-color:var(--ifm-background-color);color:var(--ifm-font-color-base);color-scheme:var(--ifm-color-scheme);font:var(--ifm-font-size-base)/var(--ifm-line-height-base) var(--ifm-font-family-base);text-rendering:optimizelegibility}iframe{border:0;color-scheme:auto}.container{margin:0 auto;max-width:var(--ifm-container-width)}.container--fluid{max-width:inherit}.row{display:flex;flex-wrap:wrap;margin:0 calc(var(--ifm-spacing-horizontal)*-1)}.margin-bottom--none,.margin-vert--none,.markdown>:last-child{margin-bottom:0!important}.margin-top--none,.margin-vert--none,.tabItem_LNqP{margin-top:0!important}.row--no-gutters{margin-left:0;margin-right:0}.margin-horiz--none,.margin-right--none{margin-right:0!important}.row--no-gutters>.col{padding-left:0;padding-right:0}.row--align-top{align-items:flex-start}.row--align-bottom{align-items:flex-end}.menuExternalLink_NmtK,.row--align-center{align-items:center}.row--align-stretch{align-items:stretch}.row--align-baseline{align-items:baseline}.col{--ifm-col-width:100%;flex:1 0;margin-left:0;max-width:var(--ifm-col-width)}.padding-bottom--none,.padding-vert--none{padding-bottom:0!important}.padding-top--none,.padding-vert--none{padding-top:0!important}.padding-horiz--none,.padding-left--none{padding-left:0!important}.padding-horiz--none,.padding-right--none{padding-right:0!important}.col[class*=col--]{flex:0 0 var(--ifm-col-width)}.col--1{--ifm-col-width:8.33333%}.col--offset-1{margin-left:8.33333%}.col--2{--ifm-col-width:16.66667%}.col--offset-2{margin-left:16.66667%}.col--3{--ifm-col-width:25%}.col--offset-3{margin-left:25%}.col--4{--ifm-col-width:33.33333%}.col--offset-4{margin-left:33.33333%}.col--5{--ifm-col-width:41.66667%}.col--offset-5{margin-left:41.66667%}.col--6{--ifm-col-width:50%}.col--offset-6{margin-left:50%}.col--7{--ifm-col-width:58.33333%}.col--offset-7{margin-left:58.33333%}.col--8{--ifm-col-width:66.66667%}.col--offset-8{margin-left:66.66667%}.col--9{--ifm-col-width:75%}.col--offset-9{margin-left:75%}.col--10{--ifm-col-width:83.33333%}.col--offset-10{margin-left:83.33333%}.col--11{--ifm-col-width:91.66667%}.col--offset-11{margin-left:91.66667%}.col--12{--ifm-col-width:100%}.col--offset-12{margin-left:100%}.margin-horiz--none,.margin-left--none{margin-left:0!important}.margin--none{margin:0!important}.margin-bottom--xs,.margin-vert--xs{margin-bottom:.25rem!important}.margin-top--xs,.margin-vert--xs{margin-top:.25rem!important}.margin-horiz--xs,.margin-left--xs{margin-left:.25rem!important}.margin-horiz--xs,.margin-right--xs{margin-right:.25rem!important}.margin--xs{margin:.25rem!important}.margin-bottom--sm,.margin-vert--sm{margin-bottom:.5rem!important}.margin-top--sm,.margin-vert--sm{margin-top:.5rem!important}.margin-horiz--sm,.margin-left--sm{margin-left:.5rem!important}.margin-horiz--sm,.margin-right--sm{margin-right:.5rem!important}.margin--sm{margin:.5rem!important}.margin-bottom--md,.margin-vert--md{margin-bottom:1rem!important}.margin-top--md,.margin-vert--md{margin-top:1rem!important}.margin-horiz--md,.margin-left--md{margin-left:1rem!important}.margin-horiz--md,.margin-right--md{margin-right:1rem!important}.margin--md{margin:1rem!important}.margin-bottom--lg,.margin-vert--lg{margin-bottom:2rem!important}.margin-top--lg,.margin-vert--lg{margin-top:2rem!important}.margin-horiz--lg,.margin-left--lg{margin-left:2rem!important}.margin-horiz--lg,.margin-right--lg{margin-right:2rem!important}.margin--lg{margin:2rem!important}.margin-bottom--xl,.margin-vert--xl{margin-bottom:5rem!important}.margin-top--xl,.margin-vert--xl{margin-top:5rem!important}.margin-horiz--xl,.margin-left--xl{margin-left:5rem!important}.margin-horiz--xl,.margin-right--xl{margin-right:5rem!important}.margin--xl{margin:5rem!important}.padding--none{padding:0!important}.padding-bottom--xs,.padding-vert--xs{padding-bottom:.25rem!important}.padding-top--xs,.padding-vert--xs{padding-top:.25rem!important}.padding-horiz--xs,.padding-left--xs{padding-left:.25rem!important}.padding-horiz--xs,.padding-right--xs{padding-right:.25rem!important}.padding--xs{padding:.25rem!important}.padding-bottom--sm,.padding-vert--sm{padding-bottom:.5rem!important}.padding-top--sm,.padding-vert--sm{padding-top:.5rem!important}.padding-horiz--sm,.padding-left--sm{padding-left:.5rem!important}.padding-horiz--sm,.padding-right--sm{padding-right:.5rem!important}.padding--sm{padding:.5rem!important}.padding-bottom--md,.padding-vert--md{padding-bottom:1rem!important}.padding-top--md,.padding-vert--md{padding-top:1rem!important}.padding-horiz--md,.padding-left--md{padding-left:1rem!important}.padding-horiz--md,.padding-right--md{padding-right:1rem!important}.padding--md{padding:1rem!important}.padding-bottom--lg,.padding-vert--lg{padding-bottom:2rem!important}.padding-top--lg,.padding-vert--lg{padding-top:2rem!important}.padding-horiz--lg,.padding-left--lg{padding-left:2rem!important}.padding-horiz--lg,.padding-right--lg{padding-right:2rem!important}.padding--lg{padding:2rem!important}.padding-bottom--xl,.padding-vert--xl{padding-bottom:5rem!important}.padding-top--xl,.padding-vert--xl{padding-top:5rem!important}.padding-horiz--xl,.padding-left--xl{padding-left:5rem!important}.padding-horiz--xl,.padding-right--xl{padding-right:5rem!important}.padding--xl{padding:5rem!important}code{background-color:var(--ifm-code-background);border:.1rem solid #0000001a;border-radius:var(--ifm-code-border-radius);font-family:var(--ifm-font-family-monospace);font-size:var(--ifm-code-font-size);padding:var(--ifm-code-padding-vertical) var(--ifm-code-padding-horizontal)}a code{color:inherit}pre{background-color:var(--ifm-pre-background);border-radius:var(--ifm-pre-border-radius);color:var(--ifm-pre-color);font:var(--ifm-code-font-size)/var(--ifm-pre-line-height) var(--ifm-font-family-monospace);padding:var(--ifm-pre-padding)}pre code{background-color:initial;border:none;font-size:100%;line-height:inherit;padding:0}kbd{background-color:var(--ifm-color-emphasis-0);border:1px solid var(--ifm-color-emphasis-400);border-radius:.2rem;box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-400);color:var(--ifm-color-emphasis-800);font:80% var(--ifm-font-family-monospace);padding:.15rem .3rem}h1,h2,h3,h4,h5,h6{color:var(--ifm-heading-color);font-family:var(--ifm-heading-font-family);font-weight:var(--ifm-heading-font-weight);line-height:var(--ifm-heading-line-height);margin:var(--ifm-heading-margin-top) 0 var(--ifm-heading-margin-bottom) 0}h1{font-size:var(--ifm-h1-font-size)}h2{font-size:var(--ifm-h2-font-size)}h3{font-size:var(--ifm-h3-font-size)}h4{font-size:var(--ifm-h4-font-size)}h5{font-size:var(--ifm-h5-font-size)}h6{font-size:var(--ifm-h6-font-size)}.container_lyt7,.container_lyt7>svg,img{max-width:100%}img[align=right]{padding-left:var(--image-alignment-padding)}img[align=left]{padding-right:var(--image-alignment-padding)}.markdown{--ifm-h1-vertical-rhythm-top:3;--ifm-h2-vertical-rhythm-top:2;--ifm-h3-vertical-rhythm-top:1.5;--ifm-heading-vertical-rhythm-top:1.25;--ifm-h1-vertical-rhythm-bottom:1.25;--ifm-heading-vertical-rhythm-bottom:1}.markdown:after,.markdown:before{content:"";display:table}.markdown:after{clear:both}.markdown h1:first-child{--ifm-h1-font-size:3rem;margin-bottom:calc(var(--ifm-h1-vertical-rhythm-bottom)*var(--ifm-leading))}.markdown>h2{--ifm-h2-font-size:2rem;margin-top:calc(var(--ifm-h2-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h3{--ifm-h3-font-size:1.5rem;margin-top:calc(var(--ifm-h3-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h4,.markdown>h5,.markdown>h6{margin-top:calc(var(--ifm-heading-vertical-rhythm-top)*var(--ifm-leading))}.markdown>p,.markdown>pre,.markdown>ul,.tabList__CuJ{margin-bottom:var(--ifm-leading)}.markdown li>p{margin-top:var(--ifm-list-paragraph-margin)}.markdown li+li{margin-top:var(--ifm-list-item-margin)}ol,ul{margin:0 0 var(--ifm-list-margin);padding-left:var(--ifm-list-left-padding)}ol ol,ul ol{list-style-type:lower-roman}ol ol,ol ul,ul ol,ul ul{margin:0}ol ol ol,ol ul ol,ul ol ol,ul ul ol{list-style-type:lower-alpha}table{border-collapse:collapse;display:block;margin-bottom:var(--ifm-spacing-vertical)}table thead tr{border-bottom:2px solid var(--ifm-table-border-color)}table thead,table tr:nth-child(2n){background-color:var(--ifm-table-stripe-background)}table tr{background-color:var(--ifm-table-background);border-top:var(--ifm-table-border-width) solid var(--ifm-table-border-color)}table td,table th{border:var(--ifm-table-border-width) solid var(--ifm-table-border-color);padding:var(--ifm-table-cell-padding)}table th{background-color:var(--ifm-table-head-background);color:var(--ifm-table-head-color);font-weight:var(--ifm-table-head-font-weight)}table td{color:var(--ifm-table-cell-color)}strong{font-weight:var(--ifm-font-weight-bold)}a{color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}a:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button:hover,.text--no-decoration,.text--no-decoration:hover,a:not([href]){text-decoration:none}p{margin:0 0 var(--ifm-paragraph-margin-bottom)}blockquote{border-left:var(--ifm-blockquote-border-left-width) solid var(--ifm-blockquote-border-color);box-shadow:var(--ifm-blockquote-shadow);color:var(--ifm-blockquote-color);font-size:var(--ifm-blockquote-font-size);padding:var(--ifm-blockquote-padding-vertical) var(--ifm-blockquote-padding-horizontal)}blockquote>:first-child{margin-top:0}blockquote>:last-child{margin-bottom:0}hr{background-color:var(--ifm-hr-background-color);border:0;height:var(--ifm-hr-height);margin:var(--ifm-hr-margin-vertical) 0;background-image:-webkit-linear-gradient(left,#f3f3f3,#adadb1,#f3f3f3);margin:0 auto}.shadow--lw{box-shadow:var(--ifm-global-shadow-lw)!important}.shadow--md{box-shadow:var(--ifm-global-shadow-md)!important}.shadow--tl{box-shadow:var(--ifm-global-shadow-tl)!important}.text--primary,.wordWrapButtonEnabled_EoeP .wordWrapButtonIcon_Bwma{color:var(--ifm-color-primary)}.text--secondary{color:var(--ifm-color-secondary)}.text--success{color:var(--ifm-color-success)}.text--info{color:var(--ifm-color-info)}.text--warning{color:var(--ifm-color-warning)}.text--danger{color:var(--ifm-color-danger)}.text--center{text-align:center}.text--left{text-align:left}.text--justify{text-align:justify}.text--right{text-align:right}.text--capitalize{text-transform:capitalize}.text--lowercase{text-transform:lowercase}.admonitionHeading_tbUL,.alert__heading,.text--uppercase{text-transform:uppercase}.text--light{font-weight:var(--ifm-font-weight-light)}.text--normal{font-weight:var(--ifm-font-weight-normal)}.text--semibold{font-weight:var(--ifm-font-weight-semibold)}.text--bold{font-weight:var(--ifm-font-weight-bold)}.text--italic{font-style:italic}.text--truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.text--break{word-wrap:break-word!important;word-break:break-word!important}.clean-btn{background:none;border:none;color:inherit;cursor:pointer;font-family:inherit;padding:0}.alert,.alert .close{color:var(--ifm-alert-foreground-color)}.clean-list{list-style:none;padding-left:0}.alert--primary{--ifm-alert-background-color:var(--ifm-color-primary-contrast-background);--ifm-alert-background-color-highlight:#3578e526;--ifm-alert-foreground-color:var(--ifm-color-primary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-primary-dark)}.alert--secondary{--ifm-alert-background-color:var(--ifm-color-secondary-contrast-background);--ifm-alert-background-color-highlight:#ebedf026;--ifm-alert-foreground-color:var(--ifm-color-secondary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-secondary-dark)}.alert--success{--ifm-alert-background-color:var(--ifm-color-success-contrast-background);--ifm-alert-background-color-highlight:#00a40026;--ifm-alert-foreground-color:var(--ifm-color-success-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-success-dark)}.alert--info{--ifm-alert-background-color:var(--ifm-color-info-contrast-background);--ifm-alert-background-color-highlight:#54c7ec26;--ifm-alert-foreground-color:var(--ifm-color-info-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-info-dark)}.alert--warning{--ifm-alert-background-color:var(--ifm-color-warning-contrast-background);--ifm-alert-background-color-highlight:#ffba0026;--ifm-alert-foreground-color:var(--ifm-color-warning-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-warning-dark)}.alert--danger{--ifm-alert-background-color:var(--ifm-color-danger-contrast-background);--ifm-alert-background-color-highlight:#fa383e26;--ifm-alert-foreground-color:var(--ifm-color-danger-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-danger-dark)}.alert{--ifm-code-background:var(--ifm-alert-background-color-highlight);--ifm-link-color:var(--ifm-alert-foreground-color);--ifm-link-hover-color:var(--ifm-alert-foreground-color);--ifm-link-decoration:underline;--ifm-tabs-color:var(--ifm-alert-foreground-color);--ifm-tabs-color-active:var(--ifm-alert-foreground-color);--ifm-tabs-color-active-border:var(--ifm-alert-border-color);background-color:var(--ifm-alert-background-color);border:var(--ifm-alert-border-width) solid var(--ifm-alert-border-color);border-left-width:var(--ifm-alert-border-left-width);border-radius:var(--ifm-alert-border-radius);box-shadow:var(--ifm-alert-shadow);padding:var(--ifm-alert-padding-vertical) var(--ifm-alert-padding-horizontal)}.alert__heading{align-items:center;display:flex;font:700 var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.5rem}.alert__icon{display:inline-flex;margin-right:.4em}.alert__icon svg{fill:var(--ifm-alert-foreground-color);stroke:var(--ifm-alert-foreground-color);stroke-width:0}.alert .close{margin:calc(var(--ifm-alert-padding-vertical)*-1) calc(var(--ifm-alert-padding-horizontal)*-1) 0 0;opacity:.75}.alert .close:focus,.alert .close:hover{opacity:1}.alert a{text-decoration-color:var(--ifm-alert-border-color)}.alert a:hover{text-decoration-thickness:2px}.avatar{column-gap:var(--ifm-avatar-intro-margin);display:flex}.avatar__photo{border-radius:50%;display:block;height:var(--ifm-avatar-photo-size);overflow:hidden;width:var(--ifm-avatar-photo-size)}.card--full-height,.navbar__logo img,body,html{height:100%}.avatar__photo--sm{--ifm-avatar-photo-size:2rem}.avatar__photo--lg{--ifm-avatar-photo-size:4rem}.avatar__photo--xl{--ifm-avatar-photo-size:6rem}.avatar__intro{display:flex;flex:1 1;flex-direction:column;justify-content:center;text-align:var(--ifm-avatar-intro-alignment)}.badge,.breadcrumbs__item,.breadcrumbs__link,.button,.dropdown>.navbar__link:after{display:inline-block}.avatar__name{font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base)}.avatar__subtitle{margin-top:.25rem}.avatar--vertical{--ifm-avatar-intro-alignment:center;--ifm-avatar-intro-margin:0.5rem;align-items:center;flex-direction:column}.badge{background-color:var(--ifm-badge-background-color);border:var(--ifm-badge-border-width) solid var(--ifm-badge-border-color);border-radius:var(--ifm-badge-border-radius);color:var(--ifm-badge-color);font-size:75%;font-weight:var(--ifm-font-weight-bold);line-height:1;padding:var(--ifm-badge-padding-vertical) var(--ifm-badge-padding-horizontal)}.badge--primary{--ifm-badge-background-color:var(--ifm-color-primary)}.badge--secondary{--ifm-badge-background-color:var(--ifm-color-secondary);color:var(--ifm-color-black)}.breadcrumbs__link,.button.button--secondary.button--outline:not(.button--active):not(:hover){color:var(--ifm-font-color-base)}.badge--success{--ifm-badge-background-color:var(--ifm-color-success)}.badge--info{--ifm-badge-background-color:var(--ifm-color-info)}.badge--warning{--ifm-badge-background-color:var(--ifm-color-warning)}.badge--danger{--ifm-badge-background-color:var(--ifm-color-danger)}.breadcrumbs{margin-bottom:0;padding-left:0}.breadcrumbs__item:not(:last-child):after{background:var(--ifm-breadcrumb-separator) center;content:" ";display:inline-block;filter:var(--ifm-breadcrumb-separator-filter);height:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier));margin:0 var(--ifm-breadcrumb-spacing);opacity:.5;width:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier))}.breadcrumbs__item--active .breadcrumbs__link{background:var(--ifm-breadcrumb-item-background-active);color:var(--ifm-breadcrumb-color-active)}.breadcrumbs__link{border-radius:var(--ifm-breadcrumb-border-radius);font-size:calc(1rem*var(--ifm-breadcrumb-size-multiplier));padding:calc(var(--ifm-breadcrumb-padding-vertical)*var(--ifm-breadcrumb-size-multiplier)) calc(var(--ifm-breadcrumb-padding-horizontal)*var(--ifm-breadcrumb-size-multiplier));transition-duration:var(--ifm-transition-fast);transition-property:background,color}.breadcrumbs__link:any-link:hover,.breadcrumbs__link:link:hover,.breadcrumbs__link:visited:hover,area[href].breadcrumbs__link:hover{background:var(--ifm-breadcrumb-item-background-active);text-decoration:none}.breadcrumbs--sm{--ifm-breadcrumb-size-multiplier:0.8}.breadcrumbs--lg{--ifm-breadcrumb-size-multiplier:1.2}.button{background-color:var(--ifm-button-background-color);border:var(--ifm-button-border-width) solid var(--ifm-button-border-color);border-radius:var(--ifm-button-border-radius);cursor:pointer;font-size:calc(.875rem*var(--ifm-button-size-multiplier));font-weight:var(--ifm-button-font-weight);line-height:1.5;padding:calc(var(--ifm-button-padding-vertical)*var(--ifm-button-size-multiplier)) calc(var(--ifm-button-padding-horizontal)*var(--ifm-button-size-multiplier));text-align:center;transition-duration:var(--ifm-button-transition-duration);transition-property:color,background,border-color;-webkit-user-select:none;user-select:none;white-space:nowrap}.button,.button:hover{color:var(--ifm-button-color)}.button--outline{--ifm-button-color:var(--ifm-button-border-color)}.button--outline:hover{--ifm-button-background-color:var(--ifm-button-border-color)}.button--link{--ifm-button-border-color:#0000;color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}.button--link.button--active,.button--link:active,.button--link:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button.disabled,.button:disabled,.button[disabled]{opacity:.65;pointer-events:none}.button--sm{--ifm-button-size-multiplier:0.8}.button--lg{--ifm-button-size-multiplier:1.35}.button--block{display:block;width:100%}.button.button--secondary{color:var(--ifm-color-gray-900)}:where(.button--primary){--ifm-button-background-color:var(--ifm-color-primary);--ifm-button-border-color:var(--ifm-color-primary)}:where(.button--primary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-primary-dark);--ifm-button-border-color:var(--ifm-color-primary-dark)}.button--primary.button--active,.button--primary:active{--ifm-button-background-color:var(--ifm-color-primary-darker);--ifm-button-border-color:var(--ifm-color-primary-darker)}:where(.button--secondary){--ifm-button-background-color:var(--ifm-color-secondary);--ifm-button-border-color:var(--ifm-color-secondary)}:where(.button--secondary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-secondary-dark);--ifm-button-border-color:var(--ifm-color-secondary-dark)}.button--secondary.button--active,.button--secondary:active{--ifm-button-background-color:var(--ifm-color-secondary-darker);--ifm-button-border-color:var(--ifm-color-secondary-darker)}:where(.button--success){--ifm-button-background-color:var(--ifm-color-success);--ifm-button-border-color:var(--ifm-color-success)}:where(.button--success):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-success-dark);--ifm-button-border-color:var(--ifm-color-success-dark)}.button--success.button--active,.button--success:active{--ifm-button-background-color:var(--ifm-color-success-darker);--ifm-button-border-color:var(--ifm-color-success-darker)}:where(.button--info){--ifm-button-background-color:var(--ifm-color-info);--ifm-button-border-color:var(--ifm-color-info)}:where(.button--info):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-info-dark);--ifm-button-border-color:var(--ifm-color-info-dark)}.button--info.button--active,.button--info:active{--ifm-button-background-color:var(--ifm-color-info-darker);--ifm-button-border-color:var(--ifm-color-info-darker)}:where(.button--warning){--ifm-button-background-color:var(--ifm-color-warning);--ifm-button-border-color:var(--ifm-color-warning)}:where(.button--warning):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-warning-dark);--ifm-button-border-color:var(--ifm-color-warning-dark)}.button--warning.button--active,.button--warning:active{--ifm-button-background-color:var(--ifm-color-warning-darker);--ifm-button-border-color:var(--ifm-color-warning-darker)}:where(.button--danger){--ifm-button-background-color:var(--ifm-color-danger);--ifm-button-border-color:var(--ifm-color-danger)}:where(.button--danger):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-danger-dark);--ifm-button-border-color:var(--ifm-color-danger-dark)}.button--danger.button--active,.button--danger:active{--ifm-button-background-color:var(--ifm-color-danger-darker);--ifm-button-border-color:var(--ifm-color-danger-darker)}.button-group{display:inline-flex;gap:var(--ifm-button-group-spacing)}.button-group>.button:not(:first-child){border-bottom-left-radius:0;border-top-left-radius:0}.button-group>.button:not(:last-child){border-bottom-right-radius:0;border-top-right-radius:0}.button-group--block{display:flex;justify-content:stretch}.button-group--block>.button{flex-grow:1}.card{background-color:var(--ifm-card-background-color);border-radius:var(--ifm-card-border-radius);box-shadow:var(--ifm-global-shadow-lw);display:flex;flex-direction:column;overflow:hidden}.card__image{padding-top:var(--ifm-card-vertical-spacing)}.card__image:first-child{padding-top:0}.card__body,.card__footer,.card__header{padding:var(--ifm-card-vertical-spacing) var(--ifm-card-horizontal-spacing)}.card__body:not(:last-child),.card__footer:not(:last-child),.card__header:not(:last-child){padding-bottom:0}.card__body>:last-child,.card__footer>:last-child,.card__header>:last-child{margin-bottom:0}.card__footer{margin-top:auto}.table-of-contents{font-size:.8rem;margin-bottom:0;padding:var(--ifm-toc-padding-vertical) 0}.table-of-contents,.table-of-contents ul{list-style:none;padding-left:var(--ifm-toc-padding-horizontal)}.table-of-contents li{margin:var(--ifm-toc-padding-vertical) var(--ifm-toc-padding-horizontal)}.table-of-contents__left-border{border-left:1px solid var(--ifm-toc-border-color)}.table-of-contents__link{color:var(--ifm-toc-link-color);display:block}.table-of-contents__link--active,.table-of-contents__link--active code,.table-of-contents__link:hover,.table-of-contents__link:hover code{color:var(--ifm-color-primary);text-decoration:none}.close{color:var(--ifm-color-black);float:right;font-size:1.5rem;font-weight:var(--ifm-font-weight-bold);line-height:1;opacity:.5;padding:1rem;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.close:hover{opacity:.7}.close:focus,.theme-code-block-highlighted-line .codeLineNumber_Tfdd:before{opacity:.8}.dropdown{display:inline-flex;font-weight:var(--ifm-dropdown-font-weight);position:relative;vertical-align:top}.dropdown--hoverable:hover .dropdown__menu,.dropdown--show .dropdown__menu{opacity:1;pointer-events:all;transform:translateY(-1px);visibility:visible}#nprogress,.dropdown__menu,.navbar__item.dropdown .navbar__link:not([href]){pointer-events:none}.dropdown--right .dropdown__menu{left:inherit;right:0}.dropdown--nocaret .navbar__link:after{content:none!important}.dropdown__menu{background-color:var(--ifm-dropdown-background-color);border-radius:var(--ifm-global-radius);box-shadow:var(--ifm-global-shadow-md);left:0;list-style:none;max-height:80vh;min-width:10rem;opacity:0;overflow-y:auto;padding:.5rem;position:absolute;top:calc(100% - var(--ifm-navbar-item-padding-vertical) + .3rem);transform:translateY(-.625rem);transition-duration:var(--ifm-transition-fast);transition-property:opacity,transform,visibility;transition-timing-function:var(--ifm-transition-timing-default);visibility:hidden;z-index:var(--ifm-z-index-dropdown)}.menu__caret,.menu__link,.menu__list-item-collapsible{border-radius:.25rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.dropdown__link{border-radius:.25rem;color:var(--ifm-dropdown-link-color);display:block;font-size:.875rem;margin-top:.2rem;padding:.25rem .5rem;white-space:nowrap}.dropdown__link--active,.dropdown__link:hover{background-color:var(--ifm-dropdown-hover-background-color);color:var(--ifm-dropdown-link-color);text-decoration:none}.dropdown__link--active,.dropdown__link--active:hover{--ifm-dropdown-link-color:var(--ifm-link-color)}.dropdown>.navbar__link:after{border-color:currentcolor #0000;border-style:solid;border-width:.4em .4em 0;content:"";margin-left:.3em;position:relative;top:2px;transform:translateY(-50%)}.footer{background-color:var(--ifm-footer-background-color);color:var(--ifm-footer-color);padding:var(--ifm-footer-padding-vertical) var(--ifm-footer-padding-horizontal)}.footer--dark{--ifm-footer-background-color:#303846;--ifm-footer-color:var(--ifm-footer-link-color);--ifm-footer-link-color:var(--ifm-color-secondary);--ifm-footer-title-color:var(--ifm-color-white)}.footer__links{margin-bottom:1rem}.footer__link-item{color:var(--ifm-footer-link-color);line-height:2}.footer__link-item:hover{color:var(--ifm-footer-link-hover-color)}.footer__link-separator{margin:0 var(--ifm-footer-link-horizontal-spacing)}.footer__logo{margin-top:1rem;max-width:var(--ifm-footer-logo-max-width)}.footer__title{color:var(--ifm-footer-title-color);font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base);margin-bottom:var(--ifm-heading-margin-bottom)}.menu,.navbar__link{font-weight:var(--ifm-font-weight-semibold)}.docItemContainer_Djhp article>:first-child,.docItemContainer_Djhp header+*,.footer__item{margin-top:0}.admonitionContent_S0QG>:last-child,.collapsibleContent_i85q>:last-child,.footer__items,.tabItem_Ymn6>:last-child{margin-bottom:0}.codeBlockStandalone_MEMb,[type=checkbox]{padding:0}.hero{align-items:center;background-color:var(--ifm-hero-background-color);color:var(--ifm-hero-text-color);display:flex;padding:4rem 2rem}.hero--primary{--ifm-hero-background-color:var(--ifm-color-primary);--ifm-hero-text-color:var(--ifm-font-color-base-inverse)}.hero--dark{--ifm-hero-background-color:#303846;--ifm-hero-text-color:var(--ifm-color-white)}.hero__title{font-size:3rem}.hero__subtitle{font-size:1.5rem}.menu__list{list-style:none;margin:0;padding-left:0}.menu__caret,.menu__link{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu__list .menu__list{flex:0 0 100%;margin-top:.25rem;padding-left:var(--ifm-menu-link-padding-horizontal)}.menu__list-item:not(:first-child){margin-top:.25rem}.menu__list-item--collapsed .menu__list{height:0;overflow:hidden}.details_lb9f[data-collapsed=false].isBrowser_bmU9>summary:before,.details_lb9f[open]:not(.isBrowser_bmU9)>summary:before,.menu__list-item--collapsed .menu__caret:before,.menu__list-item--collapsed .menu__link--sublist:after{transform:rotate(90deg)}.menu__list-item-collapsible{display:flex;flex-wrap:wrap;position:relative}.menu__caret:hover,.menu__link:hover,.menu__list-item-collapsible--active,.menu__list-item-collapsible:hover{background:var(--ifm-menu-color-background-hover)}.menu__list-item-collapsible .menu__link--active,.menu__list-item-collapsible .menu__link:hover{background:none!important}.menu__caret,.menu__link{align-items:center;display:flex}.menu__link{color:var(--ifm-menu-color);flex:1;line-height:1.25}.menu__link:hover{color:var(--ifm-menu-color);text-decoration:none}.menu__caret:before,.menu__link--sublist-caret:after{height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast) linear;width:1.25rem;filter:var(--ifm-menu-link-sublist-icon-filter);content:""}.menu__link--sublist-caret:after{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem;margin-left:auto;min-width:1.25rem}.navbar__items--center .navbar__brand,body{margin:0}.menu__link--active,.menu__link--active:hover{color:var(--ifm-menu-color-active)}.navbar__brand,.navbar__link{color:var(--ifm-navbar-link-color)}.menu__link--active:not(.menu__link--sublist){background-color:var(--ifm-menu-color-background-active)}.menu__caret:before{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem}.navbar--dark,html[data-theme=dark]{--ifm-menu-link-sublist-icon-filter:invert(100%) sepia(94%) saturate(17%) hue-rotate(223deg) brightness(104%) contrast(98%)}.navbar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-navbar-shadow);height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar,.navbar>.container,.navbar>.container-fluid{display:flex}.navbar--fixed-top{position:sticky;top:0;z-index:var(--ifm-z-index-fixed)}.navbar-sidebar,.navbar-sidebar__backdrop{bottom:0;opacity:0;position:fixed;transition-duration:var(--ifm-transition-fast);transition-timing-function:ease-in-out;left:0;top:0;visibility:hidden}.navbar__inner{display:flex;flex-wrap:wrap;justify-content:space-between;width:100%}.navbar__brand{align-items:center;display:flex;margin-right:1rem;min-width:0}.navbar__brand:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.announcementBarContent_xLdY,.navbar__title{flex:1 1 auto}.navbar__toggle{display:none;margin-right:.5rem}.navbar__logo{flex:0 0 auto;height:2rem;margin-right:.5rem}.navbar__items{align-items:center;display:flex;flex:1;min-width:0}.navbar__items--center{flex:0 0 auto}.navbar__items--center+.navbar__items--right{flex:1}.navbar__items--right{flex:0 0 auto;justify-content:flex-end}.navbar__items--right>:last-child{padding-right:0}.navbar__item{display:inline-block;padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.navbar__link--active,.navbar__link:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.navbar--dark,.navbar--primary{--ifm-menu-color:var(--ifm-color-gray-300);--ifm-navbar-link-color:var(--ifm-color-gray-100);--ifm-navbar-search-input-background-color:#ffffff1a;--ifm-navbar-search-input-placeholder-color:#ffffff80;color:var(--ifm-color-white)}.navbar--dark{--ifm-navbar-background-color:#242526;--ifm-menu-color-background-active:#ffffff0d;--ifm-navbar-search-input-color:var(--ifm-color-white)}.navbar--primary{--ifm-navbar-background-color:var(--ifm-color-primary);--ifm-navbar-link-hover-color:var(--ifm-color-white);--ifm-menu-color-active:var(--ifm-color-white);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-500)}.navbar__search-input{-webkit-appearance:none;appearance:none;background:var(--ifm-navbar-search-input-background-color) var(--ifm-navbar-search-input-icon) no-repeat .75rem center/1rem 1rem;border:none;border-radius:2rem;color:var(--ifm-navbar-search-input-color);cursor:text;display:inline-block;font-size:.9rem;height:2rem;padding:0 .5rem 0 2.25rem;width:12.5rem}.navbar__search-input::placeholder{color:var(--ifm-navbar-search-input-placeholder-color)}.navbar-sidebar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-global-shadow-md);transform:translate3d(-100%,0,0);transition-property:opacity,visibility,transform;width:var(--ifm-navbar-sidebar-width)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar__items{transform:translateZ(0)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar--show .navbar-sidebar__backdrop{opacity:1;visibility:visible}.navbar-sidebar__backdrop{background-color:#0009;right:0;transition-property:opacity,visibility}.navbar-sidebar__brand{align-items:center;box-shadow:var(--ifm-navbar-shadow);display:flex;flex:1;height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar-sidebar__items{display:flex;height:calc(100% - var(--ifm-navbar-height));transition:transform var(--ifm-transition-fast) ease-in-out}.navbar-sidebar__items--show-secondary{transform:translate3d(calc((var(--ifm-navbar-sidebar-width))*-1),0,0)}.navbar-sidebar__item{flex-shrink:0;padding:.5rem;width:calc(var(--ifm-navbar-sidebar-width))}.navbar-sidebar__back{background:var(--ifm-menu-color-background-active);font-size:15px;font-weight:var(--ifm-button-font-weight);margin:0 0 .2rem -.5rem;padding:.6rem 1.5rem;position:relative;text-align:left;top:-.5rem;width:calc(100% + 1rem)}.navbar-sidebar__close{display:flex;margin-left:auto}.pagination{column-gap:var(--ifm-pagination-page-spacing);display:flex;font-size:var(--ifm-pagination-font-size);padding-left:0}.pagination--sm{--ifm-pagination-font-size:0.8rem;--ifm-pagination-padding-horizontal:0.8rem;--ifm-pagination-padding-vertical:0.2rem}.pagination--lg{--ifm-pagination-font-size:1.2rem;--ifm-pagination-padding-horizontal:1.2rem;--ifm-pagination-padding-vertical:0.3rem}.pagination__item{display:inline-flex}.pagination__item>span{padding:var(--ifm-pagination-padding-vertical)}.pagination__item--active .pagination__link{color:var(--ifm-pagination-color-active)}.pagination__item--active .pagination__link,.pagination__item:not(.pagination__item--active):hover .pagination__link{background:var(--ifm-pagination-item-active-background)}.pagination__item--disabled,.pagination__item[disabled]{opacity:.25;pointer-events:none}.pagination__link{border-radius:var(--ifm-pagination-border-radius);color:var(--ifm-font-color-base);display:inline-block;padding:var(--ifm-pagination-padding-vertical) var(--ifm-pagination-padding-horizontal);transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination__link:hover{text-decoration:none}.pagination-nav{grid-gap:var(--ifm-spacing-horizontal);display:grid;gap:var(--ifm-spacing-horizontal);grid-template-columns:repeat(2,1fr)}.pagination-nav__link{border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-pagination-nav-border-radius);display:block;height:100%;line-height:var(--ifm-heading-line-height);padding:var(--ifm-global-spacing);transition:border-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination-nav__link:hover{border-color:var(--ifm-pagination-nav-color-hover);text-decoration:none}.pagination-nav__link--next{grid-column:2/3;text-align:right}.pagination-nav__label{font-size:var(--ifm-h4-font-size);font-weight:var(--ifm-heading-font-weight);word-break:break-word}.pagination-nav__link--prev .pagination-nav__label:before{content:"« "}.pagination-nav__link--next .pagination-nav__label:after{content:" »"}.pagination-nav__sublabel{color:var(--ifm-color-content-secondary);font-size:var(--ifm-h5-font-size);font-weight:var(--ifm-font-weight-semibold);margin-bottom:.25rem}.pills__item,.tabs{font-weight:var(--ifm-font-weight-bold)}.pills{display:flex;gap:var(--ifm-pills-spacing);padding-left:0}.pills__item{border-radius:.5rem;cursor:pointer;display:inline-block;padding:.25rem 1rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs,:not(.containsTaskList_mC6p>li)>.containsTaskList_mC6p{padding-left:0}.pills__item--active{color:var(--ifm-pills-color-active)}.pills__item--active,.pills__item:not(.pills__item--active):hover{background:var(--ifm-pills-color-background-active)}.pills--block{justify-content:stretch}.pills--block .pills__item{flex-grow:1;text-align:center}.tabs{color:var(--ifm-tabs-color);display:flex;margin-bottom:0;overflow-x:auto}.tabs__item{border-bottom:3px solid #0000;border-radius:var(--ifm-global-radius);cursor:pointer;display:inline-flex;padding:var(--ifm-tabs-padding-vertical) var(--ifm-tabs-padding-horizontal);transition:background-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs__item--active{border-bottom-color:var(--ifm-tabs-color-active-border);border-bottom-left-radius:0;border-bottom-right-radius:0;color:var(--ifm-tabs-color-active)}.tabs__item:hover{background-color:var(--ifm-hover-overlay)}.tabs--block{justify-content:stretch}.tabs--block .tabs__item{flex-grow:1;justify-content:center}html[data-theme=dark]{--ifm-color-scheme:dark;--ifm-color-emphasis-0:var(--ifm-color-gray-1000);--ifm-color-emphasis-100:var(--ifm-color-gray-900);--ifm-color-emphasis-200:var(--ifm-color-gray-800);--ifm-color-emphasis-300:var(--ifm-color-gray-700);--ifm-color-emphasis-400:var(--ifm-color-gray-600);--ifm-color-emphasis-600:var(--ifm-color-gray-400);--ifm-color-emphasis-700:var(--ifm-color-gray-300);--ifm-color-emphasis-800:var(--ifm-color-gray-200);--ifm-color-emphasis-900:var(--ifm-color-gray-100);--ifm-color-emphasis-1000:var(--ifm-color-gray-0);--ifm-background-color:#1b1b1d;--ifm-background-surface-color:#242526;--ifm-hover-overlay:#ffffff0d;--ifm-color-content:#e3e3e3;--ifm-color-content-secondary:#fff;--ifm-breadcrumb-separator-filter:invert(64%) sepia(11%) saturate(0%) hue-rotate(149deg) brightness(99%) contrast(95%);--ifm-code-background:#ffffff1a;--ifm-scrollbar-track-background-color:#444;--ifm-scrollbar-thumb-background-color:#686868;--ifm-scrollbar-thumb-hover-background-color:#7a7a7a;--ifm-table-stripe-background:#ffffff12;--ifm-toc-border-color:var(--ifm-color-emphasis-200);--ifm-color-primary-contrast-background:#102445;--ifm-color-primary-contrast-foreground:#ebf2fc;--ifm-color-secondary-contrast-background:#474748;--ifm-color-secondary-contrast-foreground:#fdfdfe;--ifm-color-success-contrast-background:#003100;--ifm-color-success-contrast-foreground:#e6f6e6;--ifm-color-info-contrast-background:#193c47;--ifm-color-info-contrast-foreground:#eef9fd;--ifm-color-warning-contrast-background:#4d3800;--ifm-color-warning-contrast-foreground:#fff8e6;--ifm-color-danger-contrast-background:#4b1113;--ifm-color-danger-contrast-foreground:#ffebec;--docsearch-text-color:#f5f6f7;--docsearch-container-background:#090a11cc;--docsearch-modal-background:#15172a;--docsearch-modal-shadow:inset 1px 1px 0 0 #2c2e40,0 3px 8px 0 #000309;--docsearch-searchbox-background:#090a11;--docsearch-searchbox-focus-background:#000;--docsearch-hit-color:#bec3c9;--docsearch-hit-shadow:none;--docsearch-hit-background:#090a11;--docsearch-key-gradient:linear-gradient(-26.5deg,#565872,#31355b);--docsearch-key-shadow:inset 0 -2px 0 0 #282d55,inset 0 0 1px 1px #51577d,0 2px 2px 0 #0304094d;--docsearch-footer-background:#1e2136;--docsearch-footer-shadow:inset 0 1px 0 0 #494c6a80,0 -4px 8px 0 #0003;--docsearch-logo-color:#fff;--docsearch-muted-color:#7f8497}#nprogress .bar{background:var(--docusaurus-progress-bar-color);height:2px;left:0;position:fixed;top:0;width:100%;z-index:1031}#nprogress .peg{box-shadow:0 0 10px var(--docusaurus-progress-bar-color),0 0 5px var(--docusaurus-progress-bar-color);height:100%;opacity:1;position:absolute;right:0;transform:rotate(3deg) translateY(-4px);width:100px}@font-face{font-family:Poppins;font-style:normal;font-weight:400;src:local(""),url(/kr/assets/fonts/poppins-regular-f61407da33b59324fbefe468ce6917ab.woff) format("woff2"),url(data:font/woff2;base64,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) format("woff"),}@font-face{font-family:Roboto;font-style:normal;font-weight:400;src:local(""),url(/kr/assets/fonts/roboto-mono-regular-498042b7fe9cd07b4fd11a0965093e55.woff) format("woff2"),url(/kr/assets/fonts/roboto-mono-regular-535bc89d4af715503b01afd761501e58.woff2) format("woff"),}@font-face{font-family:Lato;font-style:normal;font-weight:400;src:local(""),url(/kr/assets/fonts/lato-regular-292725486219768e62259f7286dc73cc.woff) format("woff2"),url(/kr/assets/fonts/lato-regular-be36596da218e1eec01c5c600b1c13ef.woff2) format("woff"),}[data-theme=dark]{--ifm-color-primary:#ffc61c;--ifm-color-primary-dark:#ffbf00;--ifm-color-primary-darker:#f1b400;--ifm-color-primary-darkest:#c69400;--ifm-color-primary-light:#ffcd38;--ifm-color-primary-lighter:#ffd146;--ifm-color-primary-lightest:#ffdb71;--ifm-color-secondary-dark:#054a6e;--ifm-color-secondary:#06527a;--ifm-color-secondary-light:#075a86;--light:#33313b;--dark:#f3f3f3}[data-theme=dark] .footer--dark{background-color:var(--light);color:var(--ifm-color-primary)}body{font-family:Lato,sans-serif}h1,h2,h3,h4,h5,h6{font-family:Poppins,sans-serif}code{font-family:Roboto Mono,monospace}.navbar__brand{height:40px}.btn.navbar__github{background-color:#384745;border:2px solid #384745;border-radius:3px;box-shadow:inset 0 1px #ffffff26,0 1px 1px #00000014;color:#fff!important;font-family:poppins,sans-serif;font-size:1rem;font-weight:400;line-height:1.66;padding:8px 20px 7px 47px;position:relative;text-align:center;text-decoration:none;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-user-select:none;user-select:none}.clear-btn{padding:100px}a.btn.navbar__github:hover{background-color:#273230;border-color:#222a29;color:#fff}a.btn.navbar__github:before{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20.5 20'%3E%3Cpath fill='%23fff' d='M10.3 0C4.6 0 0 4.6 0 10.3c0 4.4 2.8 8.3 7 9.7.5.1.7-.2.7-.5v-1.9c-2.6.5-3.2-.6-3.4-1.2-.2-.6-.6-1.1-1-1.5-.4-.2-.9-.7 0-.7.7.1 1.3.5 1.6 1 .6 1.1 1.9 1.4 3 .8 0-.5.3-1 .7-1.4-2.3-.3-4.7-1.1-4.7-5.1 0-1 .4-2 1.1-2.8-.5-.6-.5-1.6-.1-2.5 0 0 .9-.3 2.8 1.1 1.7-.5 3.4-.5 5.1 0 2-1.3 2.8-1.1 2.8-1.1.4.9.5 1.9.2 2.8.7.7 1.1 1.7 1.1 2.8 0 3.9-2.4 4.8-4.7 5.1.5.5.7 1.2.7 1.9v2.8c0 .3.2.6.7.5 5.4-1.8 8.3-7.6 6.5-13C18.6 2.8 14.7 0 10.3 0z'/%3E%3C/svg%3E");content:"";height:20px;left:15px;position:absolute;top:10px;width:20px}.header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat;content:"";display:flex;height:24px;width:24px}[data-theme=dark] .header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath fill='%23fff' d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat}.docusaurus-highlight-code-line{background-color:#484d5b;display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}body:not(.navigation-with-keyboard) :not(input):focus{outline:0}#__docusaurus-base-url-issue-banner-container,.themedImage_ToTc,[data-theme=dark] .lightToggleIcon_pyhR,[data-theme=light] .darkToggleIcon_wfgR,html[data-announcement-bar-initially-dismissed=true] .announcementBar_mb4j{display:none}.skipToContent_fXgn{background-color:var(--ifm-background-surface-color);color:var(--ifm-color-emphasis-900);left:100%;padding:calc(var(--ifm-global-spacing)/2) var(--ifm-global-spacing);position:fixed;top:1rem;z-index:calc(var(--ifm-z-index-fixed) + 1)}.skipToContent_fXgn:focus{box-shadow:var(--ifm-global-shadow-md);left:1rem}.closeButton_CVFx{line-height:0;padding:0}.content_knG7{font-size:85%;padding:5px 0;text-align:center}.content_knG7 a{color:inherit;text-decoration:underline}.DocSearch-Container a,.tag_zVej:hover{text-decoration:none}.announcementBar_mb4j{align-items:center;background-color:var(--ifm-color-white);border-bottom:1px solid var(--ifm-color-emphasis-100);color:var(--ifm-color-black);display:flex;height:var(--docusaurus-announcement-bar-height)}.announcementBarPlaceholder_vyr4{flex:0 0 10px}.announcementBarClose_gvF7{align-self:stretch;flex:0 0 30px}.toggle_vylO{height:2rem;width:2rem}.toggleButton_gllP{align-items:center;border-radius:50%;display:flex;height:100%;justify-content:center;transition:background var(--ifm-transition-fast);width:100%}.toggleButton_gllP:hover{background:var(--ifm-color-emphasis-200)}.toggleButtonDisabled_aARS{cursor:not-allowed}.darkNavbarColorModeToggle_X3D1:hover{background:var(--ifm-color-gray-800)}[data-theme=dark] .themedImage--dark_i4oU,[data-theme=light] .themedImage--light_HNdA{display:initial}.iconExternalLink_nPIU{margin-left:.3rem}.iconLanguage_nlXk{margin-right:5px;vertical-align:text-bottom}.navbarHideable_m1mJ{transition:transform var(--ifm-transition-fast) ease}.navbarHidden_jGov{transform:translate3d(0,calc(-100% - 2px),0)}.errorBoundaryError_a6uf{color:red;white-space:pre-wrap}.footerLogoLink_BH7S{opacity:.5;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.footerLogoLink_BH7S:hover,.hash-link:focus,:hover>.hash-link{opacity:1}.mainWrapper_z2l0{display:flex;flex:1 0 auto;flex-direction:column}.docusaurus-mt-lg{margin-top:3rem}#__docusaurus{display:flex;flex-direction:column;min-height:100%}.iconEdit_Z9Sw{margin-right:.3em;vertical-align:sub}.tag_zVej{border:1px solid var(--docusaurus-tag-list-border);transition:border var(--ifm-transition-fast)}.tag_zVej:hover{--docusaurus-tag-list-border:var(--ifm-link-color)}.tagRegular_sFm0{border-radius:var(--ifm-global-radius);font-size:90%;padding:.2rem .5rem .3rem}.tagWithCount_h2kH{align-items:center;border-left:0;display:flex;padding:0 .5rem 0 1rem;position:relative}.tagWithCount_h2kH:after,.tagWithCount_h2kH:before{border:1px solid var(--docusaurus-tag-list-border);content:"";position:absolute;top:50%;transition:inherit}.tagWithCount_h2kH:before{border-bottom:0;border-right:0;height:1.18rem;right:100%;transform:translate(50%,-50%) rotate(-45deg);width:1.18rem}.tagWithCount_h2kH:after{border-radius:50%;height:.5rem;left:0;transform:translateY(-50%);width:.5rem}.tagWithCount_h2kH span{background:var(--ifm-color-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-color-black);font-size:.7rem;line-height:1.2;margin-left:.3rem;padding:.1rem .4rem}.tags_jXut{display:inline}.tag_QGVx{display:inline-block;margin:0 .4rem .5rem 0}.lastUpdated_vwxv{font-size:smaller;font-style:italic;margin-top:.2rem}.tocCollapsibleButton_TO0P{align-items:center;display:flex;font-size:inherit;justify-content:space-between;padding:.4rem .8rem;width:100%}.tocCollapsibleButton_TO0P:after{background:var(--ifm-menu-link-sublist-icon) 50% 50%/2rem 2rem no-repeat;content:"";filter:var(--ifm-menu-link-sublist-icon-filter);height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast);width:1.25rem}.tocCollapsibleButtonExpanded_MG3E:after,.tocCollapsibleExpanded_sAul{transform:none}.tocCollapsible_ETCw{background-color:var(--ifm-menu-color-background-active);border-radius:var(--ifm-global-radius);margin:1rem 0}.buttonGroup__atx button,.codeBlockContainer_Ckt0{background:var(--prism-background-color);color:var(--prism-color)}.tocCollapsibleContent_vkbj>ul{border-left:none;border-top:1px solid var(--ifm-color-emphasis-300);font-size:15px;padding:.2rem 0}.tocCollapsibleContent_vkbj ul li{margin:.4rem .8rem}.tocCollapsibleContent_vkbj a{display:block}.tableOfContents_bqdL{max-height:calc(100vh - var(--ifm-navbar-height) - 2rem);overflow-y:auto;position:sticky;top:calc(var(--ifm-navbar-height) + 1rem)}.anchorWithStickyNavbar_LWe7{scroll-margin-top:calc(var(--ifm-navbar-height) + .5rem)}.anchorWithHideOnScrollNavbar_WYt5{scroll-margin-top:.5rem}.hash-link{opacity:0;padding-left:.5rem;transition:opacity var(--ifm-transition-fast);-webkit-user-select:none;user-select:none}.hash-link:before{content:"#"}.codeBlockContainer_Ckt0{border-radius:var(--ifm-code-border-radius);box-shadow:var(--ifm-global-shadow-lw);margin-bottom:var(--ifm-leading)}.codeBlockContent_biex{border-radius:inherit;direction:ltr;position:relative}.codeBlockTitle_Ktv7{border-bottom:1px solid var(--ifm-color-emphasis-300);border-top-left-radius:inherit;border-top-right-radius:inherit;font-size:var(--ifm-code-font-size);font-weight:500;padding:.75rem var(--ifm-pre-padding)}.codeBlock_bY9V{--ifm-pre-background:var(--prism-background-color);margin:0;padding:0}.codeBlockTitle_Ktv7+.codeBlockContent_biex .codeBlock_bY9V{border-top-left-radius:0;border-top-right-radius:0}.codeBlockLines_e6Vv{float:left;font:inherit;min-width:100%;padding:var(--ifm-pre-padding)}.codeBlockLinesWithNumbering_o6Pm{display:table;padding:var(--ifm-pre-padding) 0}.buttonGroup__atx{column-gap:.2rem;display:flex;position:absolute;right:calc(var(--ifm-pre-padding)/2);top:calc(var(--ifm-pre-padding)/2)}.buttonGroup__atx button{align-items:center;border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-global-radius);display:flex;line-height:0;opacity:0;padding:.4rem;transition:opacity var(--ifm-transition-fast) ease-in-out}.buttonGroup__atx button:focus-visible,.buttonGroup__atx button:hover{opacity:1!important}.theme-code-block:hover .buttonGroup__atx button{opacity:.4}:where(:root){--docusaurus-highlighted-code-line-bg:#484d5b}:where([data-theme=dark]){--docusaurus-highlighted-code-line-bg:#646464}.theme-code-block-highlighted-line{background-color:var(--docusaurus-highlighted-code-line-bg);display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}.codeLine_lJS_{counter-increment:a;display:table-row}.codeLineNumber_Tfdd{background:var(--ifm-pre-background);display:table-cell;left:0;overflow-wrap:normal;padding:0 var(--ifm-pre-padding);position:sticky;text-align:right;width:1%}.codeLineNumber_Tfdd:before{content:counter(a);opacity:.4}.codeLineContent_feaV{padding-right:var(--ifm-pre-padding)}.theme-code-block:hover .copyButtonCopied_obH4{opacity:1!important}.copyButtonIcons_eSgA{height:1.125rem;position:relative;width:1.125rem}.copyButtonIcon_y97N,.copyButtonSuccessIcon_LjdS{fill:currentColor;height:inherit;left:0;opacity:inherit;position:absolute;top:0;transition:all var(--ifm-transition-fast) ease;width:inherit}.copyButtonSuccessIcon_LjdS{color:#00d600;left:50%;opacity:0;top:50%;transform:translate(-50%,-50%) scale(.33)}.copyButtonCopied_obH4 .copyButtonIcon_y97N{opacity:0;transform:scale(.33)}.copyButtonCopied_obH4 .copyButtonSuccessIcon_LjdS{opacity:1;transform:translate(-50%,-50%) scale(1);transition-delay:75ms}.wordWrapButtonIcon_Bwma{height:1.2rem;width:1.2rem}.details_lb9f{--docusaurus-details-summary-arrow-size:0.38rem;--docusaurus-details-transition:transform 200ms ease;--docusaurus-details-decoration-color:grey}.details_lb9f>summary{cursor:pointer;list-style:none;padding-left:1rem;position:relative}.details_lb9f>summary::-webkit-details-marker{display:none}.details_lb9f>summary:before{border-color:#0000 #0000 #0000 var(--docusaurus-details-decoration-color);border-style:solid;border-width:var(--docusaurus-details-summary-arrow-size);content:"";left:0;position:absolute;top:.45rem;transform:rotate(0);transform-origin:calc(var(--docusaurus-details-summary-arrow-size)/2) 50%;transition:var(--docusaurus-details-transition)}.collapsibleContent_i85q{border-top:1px solid var(--docusaurus-details-decoration-color);margin-top:1rem;padding-top:1rem}.details_b_Ee{--docusaurus-details-decoration-color:var(--ifm-alert-border-color);--docusaurus-details-transition:transform var(--ifm-transition-fast) ease;border:1px solid var(--ifm-alert-border-color);margin:0 0 var(--ifm-spacing-vertical)}.containsTaskList_mC6p{list-style:none}.img_ev3q{height:auto}.admonition_LlT9{margin-bottom:1em}.admonitionHeading_tbUL{font:var(--ifm-heading-font-weight) var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.3rem}.admonitionHeading_tbUL code{text-transform:none}.admonitionIcon_kALy{display:inline-block;margin-right:.4em;vertical-align:middle}.admonitionIcon_kALy svg{fill:var(--ifm-alert-foreground-color);display:inline-block;height:1.6em;width:1.6em}.breadcrumbHomeIcon_YNFT{height:1.1rem;position:relative;top:1px;vertical-align:top;width:1.1rem}.breadcrumbsContainer_Z_bl{--ifm-breadcrumb-size-multiplier:0.8;margin-bottom:.8rem}.searchQueryInput_u2C7,.searchVersionInput_m0Ui{background:var(--docsearch-searchbox-focus-background);border:2px solid var(--ifm-toc-border-color);border-radius:var(--ifm-global-radius);color:var(--docsearch-text-color);font:var(--ifm-font-size-base) var(--ifm-font-family-base);margin-bottom:.5rem;padding:.8rem;transition:border var(--ifm-transition-fast) ease;width:100%}.searchQueryInput_u2C7:focus,.searchVersionInput_m0Ui:focus{border-color:var(--docsearch-primary-color);outline:0}.searchQueryInput_u2C7::placeholder{color:var(--docsearch-muted-color)}.searchResultsColumn_JPFH{font-size:.9rem;font-weight:700}.algoliaLogo_rT1R{max-width:150px}.algoliaLogoPathFill_WdUC{fill:var(--ifm-font-color-base)}.searchResultItem_Tv2o{border-bottom:1px solid var(--ifm-toc-border-color);padding:1rem 0}.searchResultItemHeading_KbCB{font-weight:400;margin-bottom:0}.searchResultItemPath_lhe1{--ifm-breadcrumb-separator-size-multiplier:1;color:var(--ifm-color-content-secondary);font-size:.8rem}.searchResultItemSummary_AEaO{font-style:italic;margin:.5rem 0 0}.loadingSpinner_XVxU{animation:1s linear infinite a;border:.4em solid #eee;border-radius:50%;border-top:.4em solid var(--ifm-color-primary);height:3rem;margin:0 auto;width:3rem}@keyframes a{to{transform:rotate(1turn)}}.loader_vvXV{margin-top:2rem}.search-result-match{background:#ffd78e40;color:var(--docsearch-hit-color);padding:.09em 0}.backToTopButton_sjWU{background-color:var(--ifm-color-emphasis-200);border-radius:50%;bottom:1.3rem;box-shadow:var(--ifm-global-shadow-lw);height:3rem;opacity:0;position:fixed;right:1.3rem;transform:scale(0);transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default);visibility:hidden;width:3rem;z-index:calc(var(--ifm-z-index-fixed) - 1)}.backToTopButton_sjWU:after{background-color:var(--ifm-color-emphasis-1000);content:" ";display:inline-block;height:100%;-webkit-mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;width:100%}.backToTopButtonShow_xfvO{opacity:1;transform:scale(1);visibility:visible}[data-theme=dark]:root{--docusaurus-collapse-button-bg:#ffffff0d;--docusaurus-collapse-button-bg-hover:#ffffff1a}.collapseSidebarButton_PEFL{display:none;margin:0}.docSidebarContainer_b6E3,.sidebarLogo_isFc{display:none}.docMainContainer_gTbr,.docPage__5DB{display:flex;width:100%}.docPage__5DB{flex:1 0}.docsWrapper_BCFX{display:flex;flex:1 0 auto}.DocSearch-Button,.DocSearch-Button-Container{align-items:center;display:flex}.DocSearch-Button{background:var(--docsearch-searchbox-background);border:0;border-radius:40px;color:var(--docsearch-muted-color);cursor:pointer;font-weight:500;height:36px;justify-content:space-between;padding:0 8px;-webkit-user-select:none;user-select:none}.DocSearch-Button:active,.DocSearch-Button:focus,.DocSearch-Button:hover{background:var(--docsearch-searchbox-focus-background);box-shadow:var(--docsearch-searchbox-shadow);color:var(--docsearch-text-color);outline:0}.DocSearch-Search-Icon{stroke-width:1.6}.DocSearch-Hit-Tree,.DocSearch-Hit-action,.DocSearch-Hit-icon,.DocSearch-Reset{stroke-width:var(--docsearch-icon-stroke-width)}.DocSearch-Button .DocSearch-Search-Icon{color:var(--docsearch-text-color)}.DocSearch-Button-Placeholder{font-size:1rem;padding:0 12px 0 6px}.DocSearch-Input,.DocSearch-Link{-webkit-appearance:none;font:inherit}.DocSearch-Button-Keys{display:flex;min-width:calc(40px + .8em)}.DocSearch-Button-Key{align-items:center;background:var(--docsearch-key-gradient);border:0;border-radius:3px;box-shadow:var(--docsearch-key-shadow);color:var(--docsearch-muted-color);display:flex;height:18px;justify-content:center;margin-right:.4em;padding:0 0 2px;position:relative;top:-1px;width:20px}.DocSearch--active{overflow:hidden!important}.DocSearch-Container{background-color:var(--docsearch-container-background);height:100vh;left:0;position:fixed;top:0;width:100vw;z-index:200}.DocSearch-Link{appearance:none;background:none;border:0;color:var(--docsearch-highlight-color);cursor:pointer;margin:0;padding:0}.DocSearch-Modal{background:var(--docsearch-modal-background);border-radius:6px;box-shadow:var(--docsearch-modal-shadow);flex-direction:column;margin:60px auto auto;max-width:var(--docsearch-modal-width);position:relative}.DocSearch-SearchBar{display:flex;padding:var(--docsearch-spacing) var(--docsearch-spacing) 0}.DocSearch-Form{align-items:center;background:var(--docsearch-searchbox-focus-background);border-radius:4px;box-shadow:var(--docsearch-searchbox-shadow);display:flex;height:var(--docsearch-searchbox-height);margin:0;padding:0 var(--docsearch-spacing);position:relative;width:100%}.DocSearch-Input{appearance:none;background:#0000;border:0;color:var(--docsearch-text-color);flex:1;font-size:1.2em;height:100%;outline:0;padding:0 0 0 8px;width:80%}.DocSearch-Hit-action-button,.DocSearch-Reset{-webkit-appearance:none;border:0;cursor:pointer}.DocSearch-Input::placeholder{color:var(--docsearch-muted-color);opacity:1}.DocSearch-Input::-webkit-search-cancel-button,.DocSearch-Input::-webkit-search-decoration,.DocSearch-Input::-webkit-search-results-button,.DocSearch-Input::-webkit-search-results-decoration{display:none}.DocSearch-LoadingIndicator,.DocSearch-MagnifierLabel,.DocSearch-Reset{margin:0;padding:0}.DocSearch-Container--Stalled .DocSearch-LoadingIndicator,.DocSearch-MagnifierLabel,.DocSearch-Reset{align-items:center;color:var(--docsearch-highlight-color);display:flex;justify-content:center}.DocSearch-Cancel,.DocSearch-Container--Stalled .DocSearch-MagnifierLabel,.DocSearch-LoadingIndicator,.DocSearch-Reset[hidden]{display:none}.DocSearch-Reset{animation:.1s ease-in forwards b;appearance:none;background:none;border-radius:50%;color:var(--docsearch-icon-color);padding:2px;right:0}.DocSearch-Help,.DocSearch-HitsFooter,.DocSearch-Label{color:var(--docsearch-muted-color)}.DocSearch-Reset:hover{color:var(--docsearch-highlight-color)}.DocSearch-LoadingIndicator svg,.DocSearch-MagnifierLabel svg{height:24px;width:24px}.DocSearch-Dropdown{max-height:calc(var(--docsearch-modal-height) - var(--docsearch-searchbox-height) - var(--docsearch-spacing) - var(--docsearch-footer-height));min-height:var(--docsearch-spacing);overflow-y:auto;overflow-y:overlay;padding:0 var(--docsearch-spacing);scrollbar-color:var(--docsearch-muted-color) var(--docsearch-modal-background);scrollbar-width:thin}.DocSearch-Dropdown::-webkit-scrollbar{width:12px}.DocSearch-Dropdown::-webkit-scrollbar-track{background:#0000}.DocSearch-Dropdown::-webkit-scrollbar-thumb{background-color:var(--docsearch-muted-color);border:3px solid var(--docsearch-modal-background);border-radius:20px}.DocSearch-Dropdown ul{list-style:none;margin:0;padding:0}.DocSearch-Label{font-size:.75em;line-height:1.6em}.DocSearch-Help{font-size:.9em;margin:0;-webkit-user-select:none;user-select:none}.DocSearch-Title{font-size:1.2em}.DocSearch-Logo a{display:flex}.DocSearch-Logo svg{color:var(--docsearch-logo-color);margin-left:8px}.DocSearch-Hits:last-of-type{margin-bottom:24px}.DocSearch-Hits mark{background:none;color:var(--docsearch-highlight-color)}.DocSearch-HitsFooter{display:flex;font-size:.85em;justify-content:center;margin-bottom:var(--docsearch-spacing);padding:var(--docsearch-spacing)}.DocSearch-HitsFooter a{border-bottom:1px solid;color:inherit}.DocSearch-Hit{border-radius:4px;display:flex;padding-bottom:4px;position:relative}.DocSearch-Hit--deleting{opacity:0;transition:.25s linear}.DocSearch-Hit--favoriting{transform:scale(0);transform-origin:top center;transition:.25s linear .25s}.DocSearch-Hit a{background:var(--docsearch-hit-background);border-radius:4px;box-shadow:var(--docsearch-hit-shadow);display:block;padding-left:var(--docsearch-spacing);width:100%}.DocSearch-Hit-source{background:var(--docsearch-modal-background);color:var(--docsearch-highlight-color);font-size:.85em;font-weight:600;line-height:32px;margin:0 -4px;padding:8px 4px 0;position:sticky;top:0;z-index:10}.DocSearch-Hit-Tree{color:var(--docsearch-muted-color);height:var(--docsearch-hit-height);opacity:.5;width:24px}.DocSearch-Hit[aria-selected=true] a{background-color:var(--docsearch-highlight-color)}.DocSearch-Hit[aria-selected=true] mark{text-decoration:underline}.DocSearch-Hit-Container{align-items:center;color:var(--docsearch-hit-color);display:flex;flex-direction:row;height:var(--docsearch-hit-height);padding:0 var(--docsearch-spacing) 0 0}.DocSearch-Hit-icon{height:20px;width:20px}.DocSearch-Hit-action,.DocSearch-Hit-icon{color:var(--docsearch-muted-color)}.DocSearch-Hit-action{align-items:center;display:flex;height:22px;width:22px}.DocSearch-Hit-action svg{display:block;height:18px;width:18px}.DocSearch-Hit-action+.DocSearch-Hit-action{margin-left:6px}.DocSearch-Hit-action-button{appearance:none;background:none;border-radius:50%;color:inherit;padding:2px}svg.DocSearch-Hit-Select-Icon{display:none}.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-Select-Icon{display:block}.DocSearch-Hit-action-button:focus,.DocSearch-Hit-action-button:hover{background:#0003;transition:background-color .1s ease-in}.DocSearch-Hit-action-button:focus path,.DocSearch-Hit-action-button:hover path{fill:#fff}.DocSearch-Hit-content-wrapper{display:flex;flex:1 1 auto;flex-direction:column;font-weight:500;justify-content:center;line-height:1.2em;margin:0 8px;overflow-x:hidden;position:relative;text-overflow:ellipsis;white-space:nowrap;width:80%}.DocSearch-Hit-title{font-size:.9em}.DocSearch-Hit-path{color:var(--docsearch-muted-color);font-size:.75em}.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-Tree,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-action,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-icon,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-path,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-text,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-title,.DocSearch-Hit[aria-selected=true] mark{color:var(--docsearch-hit-active-color)!important}.DocSearch-ErrorScreen,.DocSearch-NoResults,.DocSearch-StartScreen{font-size:.9em;margin:0 auto;padding:36px 0;text-align:center;width:80%}.DocSearch-Screen-Icon{color:var(--docsearch-muted-color);padding-bottom:12px}.DocSearch-NoResults-Prefill-List{display:inline-block;padding-bottom:24px;text-align:left}.DocSearch-NoResults-Prefill-List ul{display:inline-block;padding:8px 0 0}.DocSearch-NoResults-Prefill-List li{list-style-position:inside;list-style-type:"» "}.DocSearch-Prefill{-webkit-appearance:none;appearance:none;background:none;border:0;border-radius:1em;color:var(--docsearch-highlight-color);cursor:pointer;display:inline-block;font-size:1em;font-weight:700;padding:0}.DocSearch-Prefill:focus,.DocSearch-Prefill:hover{outline:0;text-decoration:underline}.DocSearch-Footer{align-items:center;background:var(--docsearch-footer-background);border-radius:0 0 8px 8px;box-shadow:var(--docsearch-footer-shadow);display:flex;flex-direction:row-reverse;flex-shrink:0;height:var(--docsearch-footer-height);justify-content:space-between;padding:0 var(--docsearch-spacing);position:relative;-webkit-user-select:none;user-select:none;width:100%;z-index:300}.DocSearch-Commands{color:var(--docsearch-muted-color);display:flex;list-style:none;margin:0;padding:0}.DocSearch-Commands li{align-items:center;display:flex}.DocSearch-Commands li:not(:last-of-type){margin-right:.8em}.DocSearch-Commands-Key{align-items:center;background:var(--docsearch-key-gradient);border:0;border-radius:2px;box-shadow:var(--docsearch-key-shadow);color:var(--docsearch-muted-color);display:flex;height:18px;justify-content:center;margin-right:.4em;padding:0 0 1px;width:20px}@keyframes b{0%{opacity:0}to{opacity:1}}.DocSearch-Button{margin:0;transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.DocSearch-Container{z-index:calc(var(--ifm-z-index-fixed) + 1)}@media (min-width:997px){.collapseSidebarButton_PEFL,.expandButton_m80_{background-color:var(--docusaurus-collapse-button-bg)}:root{--docusaurus-announcement-bar-height:30px}.announcementBarClose_gvF7,.announcementBarPlaceholder_vyr4{flex-basis:50px}.searchBox_ZlJk{padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.lastUpdated_vwxv{text-align:right}.tocMobile_ITEo{display:none}.docItemCol_VOVn{max-width:75%!important}.collapseSidebarButton_PEFL{border:1px solid var(--ifm-toc-border-color);border-radius:0;bottom:0;display:block!important;height:40px;position:sticky}.collapseSidebarButtonIcon_kv0_{margin-top:4px;transform:rotate(180deg)}.expandButtonIcon_BlDH,[dir=rtl] .collapseSidebarButtonIcon_kv0_{transform:rotate(0)}.collapseSidebarButton_PEFL:focus,.collapseSidebarButton_PEFL:hover,.expandButton_m80_:focus,.expandButton_m80_:hover{background-color:var(--docusaurus-collapse-button-bg-hover)}.menuHtmlItem_M9Kj{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu_SIkG{flex-grow:1;padding:.5rem}@supports (scrollbar-gutter:stable){.menu_SIkG{padding:.5rem 0 .5rem .5rem;scrollbar-gutter:stable}}.menuWithAnnouncementBar_GW3s{margin-bottom:var(--docusaurus-announcement-bar-height)}.sidebar_njMd{display:flex;flex-direction:column;height:100%;padding-top:var(--ifm-navbar-height);width:var(--doc-sidebar-width)}.sidebarWithHideableNavbar_wUlq{padding-top:0}.sidebarHidden_VK0M{opacity:0;visibility:hidden}.sidebarLogo_isFc{align-items:center;color:inherit!important;display:flex!important;margin:0 var(--ifm-navbar-padding-horizontal);max-height:var(--ifm-navbar-height);min-height:var(--ifm-navbar-height);text-decoration:none!important}.sidebarLogo_isFc img{height:2rem;margin-right:.5rem}.expandButton_m80_{align-items:center;display:flex;height:100%;justify-content:center;position:absolute;right:0;top:0;transition:background-color var(--ifm-transition-fast) ease;width:100%}[dir=rtl] .expandButtonIcon_BlDH{transform:rotate(180deg)}.docSidebarContainer_b6E3{border-right:1px solid var(--ifm-toc-border-color);-webkit-clip-path:inset(0);clip-path:inset(0);display:block;margin-top:calc(var(--ifm-navbar-height)*-1);transition:width var(--ifm-transition-fast) ease;width:var(--doc-sidebar-width);will-change:width}.docSidebarContainerHidden_b3ry{cursor:pointer;width:var(--doc-sidebar-hidden-width)}.sidebarViewport_Xe31{height:100%;max-height:100vh;position:sticky;top:0}.docMainContainer_gTbr{flex-grow:1;max-width:calc(100% - var(--doc-sidebar-width))}.docMainContainerEnhanced_Uz_u{max-width:calc(100% - var(--doc-sidebar-hidden-width))}.docItemWrapperEnhanced_czyv{max-width:calc(var(--ifm-container-width) + var(--doc-sidebar-width))!important}}@media (min-width:1440px){.container{max-width:var(--ifm-container-width-xl)}}@media (max-width:996px){.col{--ifm-col-width:100%;flex-basis:var(--ifm-col-width);margin-left:0}.footer{--ifm-footer-padding-horizontal:0}.colorModeToggle_DEke,.footer__link-separator,.navbar-sidebar__back,.navbar__item,.tableOfContents_bqdL{display:none}.footer__col{margin-bottom:calc(var(--ifm-spacing-vertical)*3)}.footer__link-item{display:block}.hero{padding-left:0;padding-right:0}.navbar>.container,.navbar>.container-fluid{padding:0}.navbar__toggle{display:inherit}.navbar__search-input{width:9rem}.pills--block,.tabs--block{flex-direction:column}.searchBox_ZlJk{position:absolute;right:var(--ifm-navbar-padding-horizontal)}.docItemContainer_F8PC{padding:0 .3rem}}@media only screen and (max-width:996px){.searchQueryColumn_RTkw,.searchResultsColumn_JPFH{max-width:60%!important}.searchLogoColumn_rJIA,.searchVersionColumn_ypXd{max-width:40%!important}.searchLogoColumn_rJIA{padding-left:0!important}}@media (max-width:768px){#theme-main h1{font-size:50px!important;font-weight:700;line-height:3rem!important}#theme-main .header-docs{margin-bottom:20px}.DocSearch-Button-Keys,.DocSearch-Button-Placeholder,.DocSearch-Commands,.DocSearch-Hit-Tree{display:none}:root{--docsearch-spacing:10px;--docsearch-footer-height:40px}.DocSearch-Dropdown{height:100%;max-height:calc(var(--docsearch-vh,1vh)*100 - var(--docsearch-searchbox-height) - var(--docsearch-spacing) - var(--docsearch-footer-height))}.DocSearch-Container{height:100vh;height:-webkit-fill-available;height:calc(var(--docsearch-vh,1vh)*100);position:absolute}.DocSearch-Footer{border-radius:0;bottom:0;position:absolute}.DocSearch-Hit-content-wrapper{display:flex;position:relative;width:80%}.DocSearch-Modal{border-radius:0;box-shadow:none;height:100vh;height:-webkit-fill-available;height:calc(var(--docsearch-vh,1vh)*100);margin:0;max-width:100%;width:100%}.DocSearch-Cancel{-webkit-appearance:none;appearance:none;background:none;border:0;color:var(--docsearch-highlight-color);cursor:pointer;display:inline-block;flex:none;font:inherit;font-size:1em;font-weight:500;margin-left:var(--docsearch-spacing);outline:0;overflow:hidden;padding:0;-webkit-user-select:none;user-select:none;white-space:nowrap}}@media (max-width:576px){.markdown h1:first-child{--ifm-h1-font-size:2rem}.markdown>h2{--ifm-h2-font-size:1.5rem}.markdown>h3{--ifm-h3-font-size:1.25rem}}@media screen and (max-width:576px){.searchQueryColumn_RTkw{max-width:100%!important}.searchVersionColumn_ypXd{max-width:100%!important;padding-left:var(--ifm-spacing-horizontal)!important}}@media (hover:hover){.backToTopButton_sjWU:hover{background-color:var(--ifm-color-emphasis-300)}}@media (pointer:fine){.thin-scrollbar{scrollbar-width:thin}.thin-scrollbar::-webkit-scrollbar{height:var(--ifm-scrollbar-size);width:var(--ifm-scrollbar-size)}.thin-scrollbar::-webkit-scrollbar-track{background:var(--ifm-scrollbar-track-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb{background:var(--ifm-scrollbar-thumb-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb:hover{background:var(--ifm-scrollbar-thumb-hover-background-color)}}@media (prefers-reduced-motion:reduce){:root{--ifm-transition-fast:0ms;--ifm-transition-slow:0ms}}@media screen and (prefers-reduced-motion:reduce){.DocSearch-Reset{stroke-width:var(--docsearch-icon-stroke-width);animation:none;-webkit-appearance:none;appearance:none;background:none;border:0;border-radius:50%;color:var(--docsearch-icon-color);cursor:pointer;right:0}.DocSearch-Hit--deleting,.DocSearch-Hit--favoriting{transition:none}.DocSearch-Hit-action-button:focus,.DocSearch-Hit-action-button:hover{background:#0003;transition:none}}@media print{.announcementBar_mb4j,.footer,.menu,.navbar,.pagination-nav,.table-of-contents,.tocMobile_ITEo{display:none}.tabs{page-break-inside:avoid}.codeBlockLines_e6Vv{white-space:pre-wrap}}
\ No newline at end of file
diff --git a/kr/assets/js/03ee9047.d4787d48.js b/kr/assets/js/03ee9047.aff952f3.js
similarity index 99%
rename from kr/assets/js/03ee9047.d4787d48.js
rename to kr/assets/js/03ee9047.aff952f3.js
index ba9cce844..7353b8785 100644
--- a/kr/assets/js/03ee9047.d4787d48.js
+++ b/kr/assets/js/03ee9047.aff952f3.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9482],{3905:(e,t,r)=>{r.d(t,{Zo:()=>d,kt:()=>h});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),l=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},d=function(e){var t=l(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,d=c(e,["components","mdxType","originalType","parentName"]),u=l(r),h=a,m=u["".concat(o,".").concat(h)]||u[h]||p[h]||i;return r?n.createElement(m,s(s({ref:t},d),{},{components:r})):n.createElement(m,s({ref:t},d))}));function h(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,s=new Array(i);s[0]=u;var c={};for(var o in t)hasOwnProperty.call(t,o)&&(c[o]=t[o]);c.originalType=e,c.mdxType="string"==typeof e?e:a,s[1]=c;for(var l=2;l<i;l++)s[l]=r[l];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},9181:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>p,frontMatter:()=>i,metadata:()=>c,toc:()=>l});var n=r(3117),a=(r(7294),r(3905));const i={title:"certificate"},s="k3s certificate",c={unversionedId:"cli/certificate",id:"cli/certificate",title:"certificate",description:"Client and Server Certificates",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/certificate.md",sourceDirName:"cli",slug:"/cli/certificate",permalink:"/kr/cli/certificate",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"certificate"},sidebar:"mySidebar",previous:{title:"agent",permalink:"/kr/cli/agent"},next:{title:"etcd-snapshot",permalink:"/kr/cli/etcd-snapshot"}},o={},l=[{value:"Client and Server Certificates",id:"client-and-server-certificates",level:2},{value:"Rotating Client and Server Certificates",id:"rotating-client-and-server-certificates",level:3},{value:"Certificate Authority (CA) Certificates",id:"certificate-authority-ca-certificates",level:2},{value:"Using Custom CA Certificates",id:"using-custom-ca-certificates",level:3},{value:"Custom CA Topology",id:"custom-ca-topology",level:4},{value:"Using the Example Script",id:"using-the-example-script",level:4},{value:"Rotating Custom CA Certificates",id:"rotating-custom-ca-certificates",level:3},{value:"Using the Example Script",id:"using-the-example-script-1",level:4},{value:"Rotating Self-Signed CA Certificates",id:"rotating-self-signed-ca-certificates",level:3},{value:"Default CA Topology",id:"default-ca-topology",level:4},{value:"Using The Example Script",id:"using-the-example-script-2",level:4},{value:"Service-Account Issuer Key Rotation",id:"service-account-issuer-key-rotation",level:2}],d={toc:l};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},d,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-certificate"},"k3s certificate"),(0,a.kt)("h2",{id:"client-and-server-certificates"},"Client and Server Certificates"),(0,a.kt)("p",null,"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts."),(0,a.kt)("h3",{id:"rotating-client-and-server-certificates"},"Rotating Client and Server Certificates"),(0,a.kt)("p",null,"To rotate client and server certificates manually, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate")," subcommand:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Stop K3s\nsystemctl stop k3s\n\n# Rotate certificates\nk3s certificate rotate\n\n# Start K3s\nsystemctl start k3s\n")),(0,a.kt)("p",null,"Individual or lists of certificates can be rotated by specifying the certificate name:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s certificate rotate --service <SERVICE>,<SERVICE>\n")),(0,a.kt)("p",null,"The following certificates can be rotated: ",(0,a.kt)("inlineCode",{parentName:"p"},"admin"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"api-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"controller-manager"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"scheduler"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"cloud-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"auth-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kubelet"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-proxy"),"."),(0,a.kt)("h2",{id:"certificate-authority-ca-certificates"},"Certificate Authority (CA) Certificates"),(0,a.kt)("p",null,"Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates"},"PKI Certificates and Requirements")," documentation."),(0,a.kt)("p",null,"By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed."),(0,a.kt)("p",null,"The authoritative CA certificates and keys are stored within the datastore's bootstrap key, encrypted using the ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#server"},"server token")," as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.\nCopies of the CA certificates and keys are extracted to disk during K3s server startup.\nAny server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"},"Certificates API")," controllers may issue additional certificates at runtime."),(0,a.kt)("p",null,"To rotate CA certificates and keys, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command.\nThe command performs integrity checks to confirm that the updated certificates and keys are usable.\nIf the updated data is acceptable, the datastore's encrypted bootstrap key is updated, and the new certificates and keys will be used the next time K3s starts.\nIf problems are encountered while validating the certificates and keys, an error is reported to the system log and the operation is cancelled without changes."),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Support for the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command and the ability to use CA certificates signed by an external CA is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,a.kt)("h3",{id:"using-custom-ca-certificates"},"Using Custom CA Certificates"),(0,a.kt)("p",null,"If CA certificates and keys are found the correct location during initial startup of the first server in the cluster, automatic generation of CA certificates will be bypassed."),(0,a.kt)("p",null,"An example script to pre-create the appropriate certificates and keys is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/generate-custom-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/generate-custom-ca-certs.sh")),".\nThis script should be run prior to starting K3s for the first time, and will create a full set of leaf CA certificates signed by common Root and Intermediate CA certificates.\nIf you have an existing Root or Intermediate CA, this script can be used (or used as a starting point) to create the correct CA certificates to provision a K3s cluster with PKI rooted in an existing authority."),(0,a.kt)("p",null,"Custom Certificate Authority files must be placed in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),". The following files are required:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: etcd files are required even if embedded etcd is not in use.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.crt"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: This is the private key used to sign service-account tokens. It does not have a corresponding certificate.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"service.key"))),(0,a.kt)("h4",{id:"custom-ca-topology"},"Custom CA Topology"),(0,a.kt)("p",null,"Custom CA Certificates should observe the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  root("Root CA")\n  intermediate("Intermediate CA")\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  root -.-|SHA256| root-hash\n  root ---\x3e intermediate\n  intermediate --\x3e server-ca ==> kube-server-certs\n  intermediate --\x3e client-ca ==> kube-client-certs\n  intermediate --\x3e request-header-ca ==> request-header-certs\n  intermediate --\x3e etcd-peer-ca ==> etcd-peer-certs\n  intermediate --\x3e etcd-server-ca ==> etcd-server-certs'}),(0,a.kt)("h4",{id:"using-the-example-script"},"Using the Example Script"),(0,a.kt)("admonition",{type:"important"},(0,a.kt)("p",{parentName:"admonition"},"If you want to sign the cluster CA certificates with an existing root CA using the example script, you must place the root and intermediate files in the target directory prior to running the script.\nIf the files do not exist, the script will create new root and intermediate CA certificates.")),(0,a.kt)("p",null,"If you want to use only an existing root CA certificate, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root.key"))),(0,a.kt)("p",null,"If you want to use existing root and intermediate CA certificates, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate.key"))),(0,a.kt)("p",null,"To use the example script to generate custom certs and keys before starting K3s, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create the target directory for cert generation.\nmkdir -p /var/lib/rancher/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# For the purposes of this example, we assume you have existing root and intermediate CA files in /etc/ssl.\n# If you do not have an existing root and/or intermediate CA, the script will generate them for you.\ncp /etc/ssl/certs/root.pem /etc/ssl/certs/intermediate.pem /etc/ssl/private/intermediate.key /var/lib/rancher/k3s/server/tls\n\n# Generate custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash -\n")),(0,a.kt)("p",null,"If the command completes successfully, you may install and/or start K3s for the first time.\nIf the script generated root and/or intermediate CA files, you should back up these files so that they can be reused if it is necessary to rotate the CA certificates at a later date."),(0,a.kt)("h3",{id:"rotating-custom-ca-certificates"},"Rotating Custom CA Certificates"),(0,a.kt)("p",null,"To rotate custom CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"A cluster that has been started with custom CA certificates can renew or rotate the CA certificates and keys non-disruptively, as long as the same root CA is used."),(0,a.kt)("p",null,"If a new root CA is required, the rotation will be disruptive. The ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca --force")," option must be used, all nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token")," (including servers) will need to be reconfigured to use the new token value, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"using-the-example-script-1"},"Using the Example Script"),(0,a.kt)("p",null,"The example ",(0,a.kt)("inlineCode",{parentName:"p"},"generate-custom-ca-certs.sh")," script linked above can also be used to generate updated certs in a new temporary directory, by copying files into the correct location and setting the ",(0,a.kt)("inlineCode",{parentName:"p"},"DATA_DIR")," environment variable.\nTo use the example script to generate updated certs and keys, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation.\nmkdir -p /opt/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# Non-disruptive rotation requires the same root CA that was used to generate the original certificates.\n# If the original files are still in the data directory, you can just run:\ncp /var/lib/rancher/k3s/server/root.* /var/lib/rancher/k3s/server/intermediate.* /opt/k3s/server/tls\n\n# Copy the current service-account signing key, so that existing service-account tokens are not invalidated.\ncp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls\n\n# Generate updated custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash -\n\n# Load the updated CA certs and keys into the datastore.\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"If you used the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option or changed the root CA, ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token")," are reconfigured to use the new token value, prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h3",{id:"rotating-self-signed-ca-certificates"},"Rotating Self-Signed CA Certificates"),(0,a.kt)("p",null,"To rotate the K3s-generated self-signed CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"If the cluster has been started with default self-signed CA certificates, rotation will be disruptive. All nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token")," will need to be reconfigured to trust the new CA hash.\nIf the new CA certificates are not cross-signed by the old CA certificates, you will need to use the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option to bypass integrity checks, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"default-ca-topology"},"Default CA Topology"),(0,a.kt)("p",null,"The default self-signed CA certificates have the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca -.-|SHA256| root-hash\n  server-ca ===> kube-server-certs\n  client-ca ===> kube-client-certs\n  request-header-ca ===> request-header-certs\n  etcd-peer-ca ===> etcd-peer-certs\n  etcd-server-ca ===> etcd-server-certs'}),(0,a.kt)("p",null,"When rotating the default self-signed CAs, a modified certificate topology with intermediate CAs and a new root CA cross-signed by the old CA can be used so that there is a continuous chain of trust between the old and new CAs:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca-old("Server CA<br/>(old)")\n  client-ca-old("Client CA<br/>(old)")\n  request-header-ca-old("API Aggregation CA<br/>(old)")\n  etcd-peer-ca-old("etcd Peer CA<br/>(old)")\n  etcd-server-ca-old("etcd Server CA<br/>(old)")\n\n  root-hash>"Join token CA hash"]\n\n  server-ca-xsigned("Server CA<br/>(cross-signed)")\n  client-ca-xsigned("Client CA<br/>(cross-signed)")\n  request-header-ca-xsigned("API Aggregation CA<br/>(cross-signed)")\n  etcd-peer-ca-xsigned("etcd Peer CA<br/>(cross-signed)")\n  etcd-server-ca-xsigned("etcd Server CA<br/>(cross-signed)")\n\n  server-ca-ssigned("Server CA<br/>(self-signed)")\n  client-ca-ssigned("Client CA<br/>(self-signed)")\n  request-header-ca-ssigned("API Aggregation CA<br/>(self-signed)")\n  etcd-peer-ca-ssigned("etcd Peer CA<br/>(self-signed)")\n  etcd-server-ca-ssigned("etcd Server CA<br/>(self-signed)")\n\n  server-ca("Intermediate<br/>Server CA")\n  client-ca("Intermediate<br/>Client CA")\n  request-header-ca("Intermediate<br/>API Aggregation CA")\n  etcd-peer-ca("Intermediate<br/>etcd Peer CA")\n  etcd-server-ca("Intermediate<br>etcd Server CA")\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca-ssigned -.-|SHA256| root-hash\n  server-ca-ssigned --\x3e server-ca ==> kube-server-certs\n  server-ca-old --\x3e server-ca-xsigned --\x3e server-ca\n  client-ca-ssigned --\x3e client-ca ==> kube-client-certs\n  client-ca-old --\x3e client-ca-xsigned --\x3e client-ca\n  request-header-ca-ssigned --\x3e request-header-ca ==> request-header-certs\n  request-header-ca-old --\x3e request-header-ca-xsigned --\x3e request-header-ca\n  etcd-peer-ca-ssigned --\x3e etcd-peer-ca ==> etcd-peer-certs\n  etcd-peer-ca-old --\x3e etcd-peer-ca-xsigned --\x3e etcd-peer-ca\n  etcd-server-ca-ssigned --\x3e etcd-server-ca ==> etcd-server-certs\n  etcd-server-ca-old --\x3e etcd-server-ca-xsigned --\x3e etcd-server-ca'}),(0,a.kt)("h4",{id:"using-the-example-script-2"},"Using The Example Script"),(0,a.kt)("p",null,"An example script to create updated CA certificates and keys cross-signed by the existing CAs is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/rotate-default-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/rotate-default-ca-certs.sh")),"."),(0,a.kt)("p",null,"To use the example script to generate updated self-signed certificates that are cross-signed by the existing CAs, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create updated CA certs and keys, cross-signed by the current CAs.\n# This script will create a new temporary directory containing the updated certs, and output the new token values.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash -\n\n# Load the updated certs into the datastore; see the script output for the updated token values.\nk3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"Ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token"),", including other server nodes, are reconfigured to use the new token value prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h2",{id:"service-account-issuer-key-rotation"},"Service-Account Issuer Key Rotation"),(0,a.kt)("p",null,"The service-account issuer key is an RSA private key used to sign service-account tokens.\nWhen rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated.\nIt can be rotated independent of the cluster CAs by using the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," to install only an updated ",(0,a.kt)("inlineCode",{parentName:"p"},"service.key")," file that includes both the new and old keys."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated key into a separate directory.")),(0,a.kt)("p",null,"For example, to rotate only the service-account issuer key, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation\nmkdir -p /opt/k3s/server/tls\n\n# Check OpenSSL version\nopenssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional\n\n# Generate a new key\nopenssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048\n\n# Append the existing key to avoid invalidating current tokens\ncat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key\n\n# Load the updated key into the datastore\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"It is normal to see warnings for files that are not being updated. If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9482],{3905:(e,t,r)=>{r.d(t,{Zo:()=>d,kt:()=>h});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function c(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),l=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},d=function(e){var t=l(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,d=c(e,["components","mdxType","originalType","parentName"]),u=l(r),h=a,m=u["".concat(o,".").concat(h)]||u[h]||p[h]||i;return r?n.createElement(m,s(s({ref:t},d),{},{components:r})):n.createElement(m,s({ref:t},d))}));function h(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,s=new Array(i);s[0]=u;var c={};for(var o in t)hasOwnProperty.call(t,o)&&(c[o]=t[o]);c.originalType=e,c.mdxType="string"==typeof e?e:a,s[1]=c;for(var l=2;l<i;l++)s[l]=r[l];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},9181:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>p,frontMatter:()=>i,metadata:()=>c,toc:()=>l});var n=r(3117),a=(r(7294),r(3905));const i={title:"certificate"},s="k3s certificate",c={unversionedId:"cli/certificate",id:"cli/certificate",title:"certificate",description:"Client and Server Certificates",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/certificate.md",sourceDirName:"cli",slug:"/cli/certificate",permalink:"/kr/cli/certificate",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"certificate"},sidebar:"mySidebar",previous:{title:"agent",permalink:"/kr/cli/agent"},next:{title:"etcd-snapshot",permalink:"/kr/cli/etcd-snapshot"}},o={},l=[{value:"Client and Server Certificates",id:"client-and-server-certificates",level:2},{value:"Rotating Client and Server Certificates",id:"rotating-client-and-server-certificates",level:3},{value:"Certificate Authority (CA) Certificates",id:"certificate-authority-ca-certificates",level:2},{value:"Using Custom CA Certificates",id:"using-custom-ca-certificates",level:3},{value:"Custom CA Topology",id:"custom-ca-topology",level:4},{value:"Using the Example Script",id:"using-the-example-script",level:4},{value:"Rotating Custom CA Certificates",id:"rotating-custom-ca-certificates",level:3},{value:"Using the Example Script",id:"using-the-example-script-1",level:4},{value:"Rotating Self-Signed CA Certificates",id:"rotating-self-signed-ca-certificates",level:3},{value:"Default CA Topology",id:"default-ca-topology",level:4},{value:"Using The Example Script",id:"using-the-example-script-2",level:4},{value:"Service-Account Issuer Key Rotation",id:"service-account-issuer-key-rotation",level:2}],d={toc:l};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},d,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-certificate"},"k3s certificate"),(0,a.kt)("h2",{id:"client-and-server-certificates"},"Client and Server Certificates"),(0,a.kt)("p",null,"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts."),(0,a.kt)("h3",{id:"rotating-client-and-server-certificates"},"Rotating Client and Server Certificates"),(0,a.kt)("p",null,"To rotate client and server certificates manually, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate")," subcommand:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Stop K3s\nsystemctl stop k3s\n\n# Rotate certificates\nk3s certificate rotate\n\n# Start K3s\nsystemctl start k3s\n")),(0,a.kt)("p",null,"Individual or lists of certificates can be rotated by specifying the certificate name:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s certificate rotate --service <SERVICE>,<SERVICE>\n")),(0,a.kt)("p",null,"The following certificates can be rotated: ",(0,a.kt)("inlineCode",{parentName:"p"},"admin"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"api-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"controller-manager"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"scheduler"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"cloud-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"auth-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kubelet"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-proxy"),"."),(0,a.kt)("h2",{id:"certificate-authority-ca-certificates"},"Certificate Authority (CA) Certificates"),(0,a.kt)("p",null,"Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates"},"PKI Certificates and Requirements")," documentation."),(0,a.kt)("p",null,"By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed."),(0,a.kt)("p",null,"The authoritative CA certificates and keys are stored within the datastore's bootstrap key, encrypted using the ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#server"},"server token")," as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.\nCopies of the CA certificates and keys are extracted to disk during K3s server startup.\nAny server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"},"Certificates API")," controllers may issue additional certificates at runtime."),(0,a.kt)("p",null,"To rotate CA certificates and keys, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command.\nThe command performs integrity checks to confirm that the updated certificates and keys are usable.\nIf the updated data is acceptable, the datastore's encrypted bootstrap key is updated, and the new certificates and keys will be used the next time K3s starts.\nIf problems are encountered while validating the certificates and keys, an error is reported to the system log and the operation is cancelled without changes."),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Support for the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," command and the ability to use CA certificates signed by an external CA is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,a.kt)("h3",{id:"using-custom-ca-certificates"},"Using Custom CA Certificates"),(0,a.kt)("p",null,"If CA certificates and keys are found the correct location during initial startup of the first server in the cluster, automatic generation of CA certificates will be bypassed."),(0,a.kt)("p",null,"An example script to pre-create the appropriate certificates and keys is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/generate-custom-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/generate-custom-ca-certs.sh")),".\nThis script should be run prior to starting K3s for the first time, and will create a full set of leaf CA certificates signed by common Root and Intermediate CA certificates.\nIf you have an existing Root or Intermediate CA, this script can be used (or used as a starting point) to create the correct CA certificates to provision a K3s cluster with PKI rooted in an existing authority."),(0,a.kt)("p",null,"Custom Certificate Authority files must be placed in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),". The following files are required:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: etcd files are required even if embedded etcd is not in use.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.crt"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.key"),(0,a.kt)("br",{parentName:"li"}),(0,a.kt)("em",{parentName:"li"},"// note: This is the private key used to sign service-account tokens. It does not have a corresponding certificate.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"service.key"))),(0,a.kt)("h4",{id:"custom-ca-topology"},"Custom CA Topology"),(0,a.kt)("p",null,"Custom CA Certificates should observe the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  root("Root CA")\n  intermediate("Intermediate CA")\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  root -.-|SHA256| root-hash\n  root ---\x3e intermediate\n  intermediate --\x3e server-ca ==> kube-server-certs\n  intermediate --\x3e client-ca ==> kube-client-certs\n  intermediate --\x3e request-header-ca ==> request-header-certs\n  intermediate --\x3e etcd-peer-ca ==> etcd-peer-certs\n  intermediate --\x3e etcd-server-ca ==> etcd-server-certs'}),(0,a.kt)("h4",{id:"using-the-example-script"},"Using the Example Script"),(0,a.kt)("admonition",{type:"important"},(0,a.kt)("p",{parentName:"admonition"},"If you want to sign the cluster CA certificates with an existing root CA using the example script, you must place the root and intermediate files in the target directory prior to running the script.\nIf the files do not exist, the script will create new root and intermediate CA certificates.")),(0,a.kt)("p",null,"If you want to use only an existing root CA certificate, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root.key"))),(0,a.kt)("p",null,"If you want to use existing root and intermediate CA certificates, provide the following files:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate.key"))),(0,a.kt)("p",null,"To use the example script to generate custom certs and keys before starting K3s, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create the target directory for cert generation.\nmkdir -p /var/lib/rancher/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# For the purposes of this example, we assume you have existing root and intermediate CA files in /etc/ssl.\n# If you do not have an existing root and/or intermediate CA, the script will generate them for you.\ncp /etc/ssl/certs/root.pem /etc/ssl/certs/intermediate.pem /etc/ssl/private/intermediate.key /var/lib/rancher/k3s/server/tls\n\n# Generate custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash -\n")),(0,a.kt)("p",null,"If the command completes successfully, you may install and/or start K3s for the first time.\nIf the script generated root and/or intermediate CA files, you should back up these files so that they can be reused if it is necessary to rotate the CA certificates at a later date."),(0,a.kt)("h3",{id:"rotating-custom-ca-certificates"},"Rotating Custom CA Certificates"),(0,a.kt)("p",null,"To rotate custom CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"A cluster that has been started with custom CA certificates can renew or rotate the CA certificates and keys non-disruptively, as long as the same root CA is used."),(0,a.kt)("p",null,"If a new root CA is required, the rotation will be disruptive. The ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca --force")," option must be used, all nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token")," (including servers) will need to be reconfigured to use the new token value, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"using-the-example-script-1"},"Using the Example Script"),(0,a.kt)("p",null,"The example ",(0,a.kt)("inlineCode",{parentName:"p"},"generate-custom-ca-certs.sh")," script linked above can also be used to generate updated certs in a new temporary directory, by copying files into the correct location and setting the ",(0,a.kt)("inlineCode",{parentName:"p"},"DATA_DIR")," environment variable.\nTo use the example script to generate updated certs and keys, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation.\nmkdir -p /opt/k3s/server/tls\n\n# Copy your root CA cert and intermediate CA cert+key into the correct location for the script.\n# Non-disruptive rotation requires the same root CA that was used to generate the original certificates.\n# If the original files are still in the data directory, you can just run:\ncp /var/lib/rancher/k3s/server/root.* /var/lib/rancher/k3s/server/intermediate.* /opt/k3s/server/tls\n\n# Copy the current service-account signing key, so that existing service-account tokens are not invalidated.\ncp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls\n\n# Generate updated custom CA certs and keys.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash -\n\n# Load the updated CA certs and keys into the datastore.\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"If you used the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option or changed the root CA, ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token")," are reconfigured to use the new token value, prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h3",{id:"rotating-self-signed-ca-certificates"},"Rotating Self-Signed CA Certificates"),(0,a.kt)("p",null,"To rotate the K3s-generated self-signed CA certificates, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," subcommand.\nUpdated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated certificates and keys into a separate directory.")),(0,a.kt)("p",null,"If the cluster has been started with default self-signed CA certificates, rotation will be disruptive. All nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token")," will need to be reconfigured to trust the new CA hash.\nIf the new CA certificates are not cross-signed by the old CA certificates, you will need to use the ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," option to bypass integrity checks, and pods will need to be restarted to trust the new root CA."),(0,a.kt)("h4",{id:"default-ca-topology"},"Default CA Topology"),(0,a.kt)("p",null,"The default self-signed CA certificates have the following topology:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca -.-|SHA256| root-hash\n  server-ca ===> kube-server-certs\n  client-ca ===> kube-client-certs\n  request-header-ca ===> request-header-certs\n  etcd-peer-ca ===> etcd-peer-certs\n  etcd-server-ca ===> etcd-server-certs'}),(0,a.kt)("p",null,"When rotating the default self-signed CAs, a modified certificate topology with intermediate CAs and a new root CA cross-signed by the old CA can be used so that there is a continuous chain of trust between the old and new CAs:"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca-old("Server CA<br/>(old)")\n  client-ca-old("Client CA<br/>(old)")\n  request-header-ca-old("API Aggregation CA<br/>(old)")\n  etcd-peer-ca-old("etcd Peer CA<br/>(old)")\n  etcd-server-ca-old("etcd Server CA<br/>(old)")\n\n  root-hash>"Join token CA hash"]\n\n  server-ca-xsigned("Server CA<br/>(cross-signed)")\n  client-ca-xsigned("Client CA<br/>(cross-signed)")\n  request-header-ca-xsigned("API Aggregation CA<br/>(cross-signed)")\n  etcd-peer-ca-xsigned("etcd Peer CA<br/>(cross-signed)")\n  etcd-server-ca-xsigned("etcd Server CA<br/>(cross-signed)")\n\n  server-ca-ssigned("Server CA<br/>(self-signed)")\n  client-ca-ssigned("Client CA<br/>(self-signed)")\n  request-header-ca-ssigned("API Aggregation CA<br/>(self-signed)")\n  etcd-peer-ca-ssigned("etcd Peer CA<br/>(self-signed)")\n  etcd-server-ca-ssigned("etcd Server CA<br/>(self-signed)")\n\n  server-ca("Intermediate<br/>Server CA")\n  client-ca("Intermediate<br/>Client CA")\n  request-header-ca("Intermediate<br/>API Aggregation CA")\n  etcd-peer-ca("Intermediate<br/>etcd Peer CA")\n  etcd-server-ca("Intermediate<br>etcd Server CA")\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca-ssigned -.-|SHA256| root-hash\n  server-ca-ssigned --\x3e server-ca ==> kube-server-certs\n  server-ca-old --\x3e server-ca-xsigned --\x3e server-ca\n  client-ca-ssigned --\x3e client-ca ==> kube-client-certs\n  client-ca-old --\x3e client-ca-xsigned --\x3e client-ca\n  request-header-ca-ssigned --\x3e request-header-ca ==> request-header-certs\n  request-header-ca-old --\x3e request-header-ca-xsigned --\x3e request-header-ca\n  etcd-peer-ca-ssigned --\x3e etcd-peer-ca ==> etcd-peer-certs\n  etcd-peer-ca-old --\x3e etcd-peer-ca-xsigned --\x3e etcd-peer-ca\n  etcd-server-ca-ssigned --\x3e etcd-server-ca ==> etcd-server-certs\n  etcd-server-ca-old --\x3e etcd-server-ca-xsigned --\x3e etcd-server-ca'}),(0,a.kt)("h4",{id:"using-the-example-script-2"},"Using The Example Script"),(0,a.kt)("p",null,"An example script to create updated CA certificates and keys cross-signed by the existing CAs is available ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/rotate-default-ca-certs.sh"},"in the K3s repo at ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/rotate-default-ca-certs.sh")),"."),(0,a.kt)("p",null,"To use the example script to generate updated self-signed certificates that are cross-signed by the existing CAs, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create updated CA certs and keys, cross-signed by the current CAs.\n# This script will create a new temporary directory containing the updated certs, and output the new token values.\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash -\n\n# Load the updated certs into the datastore; see the script output for the updated token values.\nk3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca\n")),(0,a.kt)("p",null,"If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents."),(0,a.kt)("p",null,"Ensure that any nodes that were joined with a ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token#secure"},"secure token"),", including other server nodes, are reconfigured to use the new token value prior to being restarted.\nThe token may be stored in a ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," file, systemd unit, or config.yaml, depending on how the node was configured during initial installation."),(0,a.kt)("h2",{id:"service-account-issuer-key-rotation"},"Service-Account Issuer Key Rotation"),(0,a.kt)("p",null,"The service-account issuer key is an RSA private key used to sign service-account tokens.\nWhen rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated.\nIt can be rotated independent of the cluster CAs by using the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," to install only an updated ",(0,a.kt)("inlineCode",{parentName:"p"},"service.key")," file that includes both the new and old keys."),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"You must not overwrite the currently in-use data in ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls"),".",(0,a.kt)("br",{parentName:"p"}),"\n","Stage the updated key into a separate directory.")),(0,a.kt)("p",null,"For example, to rotate only the service-account issuer key, run the following commands:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# Create a temporary directory for cert generation\nmkdir -p /opt/k3s/server/tls\n\n# Check OpenSSL version\nopenssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional\n\n# Generate a new key\nopenssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048\n\n# Append the existing key to avoid invalidating current tokens\ncat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key\n\n# Load the updated key into the datastore\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"It is normal to see warnings for files that are not being updated. If the ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," command returns an error, check the service log for errors.\nIf the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/0a63d2fd.22244517.js b/kr/assets/js/0a63d2fd.eb1735e9.js
similarity index 98%
rename from kr/assets/js/0a63d2fd.22244517.js
rename to kr/assets/js/0a63d2fd.eb1735e9.js
index 8c9fe69df..83fb24b54 100644
--- a/kr/assets/js/0a63d2fd.22244517.js
+++ b/kr/assets/js/0a63d2fd.eb1735e9.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9341],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>m});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var d=a.createContext({}),c=function(e){var t=a.useContext(d),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},l=function(e){var t=c(e.components);return a.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,d=e.parentName,l=s(e,["components","mdxType","originalType","parentName"]),u=c(r),m=n,k=u["".concat(d,".").concat(m)]||u[m]||p[m]||o;return r?a.createElement(k,i(i({ref:t},l),{},{components:r})):a.createElement(k,i({ref:t},l))}));function m(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,i=new Array(o);i[0]=u;var s={};for(var d in t)hasOwnProperty.call(t,d)&&(s[d]=t[d]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<o;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}u.displayName="MDXCreateElement"},7831:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const o={title:"Backup and Restore",weight:26},i=void 0,s={unversionedId:"datastore/backup-restore",id:"datastore/backup-restore",title:"Backup and Restore",description:"The way K3s is backed up and restored depends on which type of datastore is used.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",sourceDirName:"datastore",slug:"/datastore/backup-restore",permalink:"/kr/datastore/backup-restore",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Backup and Restore",weight:26},sidebar:"mySidebar",previous:{title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",permalink:"/kr/datastore/"},next:{title:"High Availability Embedded etcd",permalink:"/kr/datastore/ha-embedded"}},d={},c=[{value:"Backup and Restore with SQLite",id:"backup-and-restore-with-sqlite",level:2},{value:"Backup and Restore with External Datastore",id:"backup-and-restore-with-external-datastore",level:2},{value:"Backup and Restore with Embedded etcd Datastore",id:"backup-and-restore-with-embedded-etcd-datastore",level:2}],l={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"The way K3s is backed up and restored depends on which type of datastore is used."),(0,n.kt)("admonition",{type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"In addition to backing up the datastore itself, you must also back up the server token file at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),".\nYou must restore this file, or pass its value into the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," option, when restoring from backup.\nIf you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.")),(0,n.kt)("h2",{id:"backup-and-restore-with-sqlite"},"Backup and Restore with SQLite"),(0,n.kt)("p",null,"No special commands are required to back up or restore the SQLite datastore. "),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"To back up the SQLite datastore, take a copy of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db/"),"."),(0,n.kt)("li",{parentName:"ul"},"To restore the SQLite datastore, restore the contents of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db")," (and the token, as discussed above).")),(0,n.kt)("h2",{id:"backup-and-restore-with-external-datastore"},"Backup and Restore with External Datastore"),(0,n.kt)("p",null,"When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump."),(0,n.kt)("p",null,"We recommend configuring the database to take recurring snapshots."),(0,n.kt)("p",null,"For details on taking database snapshots and restoring your database from them, refer to the official database documentation:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html"},"Official MySQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.postgresql.org/docs/8.3/backup-dump.html"},"Official PostgreSQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://etcd.io/docs/latest/op-guide/recovery/"},"Official etcd documentation"))),(0,n.kt)("h2",{id:"backup-and-restore-with-embedded-etcd-datastore"},"Backup and Restore with Embedded etcd Datastore"),(0,n.kt)("p",null,"See the ",(0,n.kt)("a",{parentName:"p",href:"/kr/cli/etcd-snapshot"},(0,n.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," command documentation")," for information on performing backup and restore operations on the embedded etcd datastore."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9341],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>m});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var d=a.createContext({}),c=function(e){var t=a.useContext(d),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},l=function(e){var t=c(e.components);return a.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,d=e.parentName,l=s(e,["components","mdxType","originalType","parentName"]),u=c(r),m=n,k=u["".concat(d,".").concat(m)]||u[m]||p[m]||o;return r?a.createElement(k,i(i({ref:t},l),{},{components:r})):a.createElement(k,i({ref:t},l))}));function m(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,i=new Array(o);i[0]=u;var s={};for(var d in t)hasOwnProperty.call(t,d)&&(s[d]=t[d]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var c=2;c<o;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}u.displayName="MDXCreateElement"},7831:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>s,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const o={title:"Backup and Restore",weight:26},i=void 0,s={unversionedId:"datastore/backup-restore",id:"datastore/backup-restore",title:"Backup and Restore",description:"The way K3s is backed up and restored depends on which type of datastore is used.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",sourceDirName:"datastore",slug:"/datastore/backup-restore",permalink:"/kr/datastore/backup-restore",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Backup and Restore",weight:26},sidebar:"mySidebar",previous:{title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",permalink:"/kr/datastore/"},next:{title:"High Availability Embedded etcd",permalink:"/kr/datastore/ha-embedded"}},d={},c=[{value:"Backup and Restore with SQLite",id:"backup-and-restore-with-sqlite",level:2},{value:"Backup and Restore with External Datastore",id:"backup-and-restore-with-external-datastore",level:2},{value:"Backup and Restore with Embedded etcd Datastore",id:"backup-and-restore-with-embedded-etcd-datastore",level:2}],l={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"The way K3s is backed up and restored depends on which type of datastore is used."),(0,n.kt)("admonition",{type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"In addition to backing up the datastore itself, you must also back up the server token file at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),".\nYou must restore this file, or pass its value into the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," option, when restoring from backup.\nIf you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.")),(0,n.kt)("h2",{id:"backup-and-restore-with-sqlite"},"Backup and Restore with SQLite"),(0,n.kt)("p",null,"No special commands are required to back up or restore the SQLite datastore. "),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"To back up the SQLite datastore, take a copy of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db/"),"."),(0,n.kt)("li",{parentName:"ul"},"To restore the SQLite datastore, restore the contents of ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db")," (and the token, as discussed above).")),(0,n.kt)("h2",{id:"backup-and-restore-with-external-datastore"},"Backup and Restore with External Datastore"),(0,n.kt)("p",null,"When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump."),(0,n.kt)("p",null,"We recommend configuring the database to take recurring snapshots."),(0,n.kt)("p",null,"For details on taking database snapshots and restoring your database from them, refer to the official database documentation:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html"},"Official MySQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://www.postgresql.org/docs/8.3/backup-dump.html"},"Official PostgreSQL documentation")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("a",{parentName:"li",href:"https://etcd.io/docs/latest/op-guide/recovery/"},"Official etcd documentation"))),(0,n.kt)("h2",{id:"backup-and-restore-with-embedded-etcd-datastore"},"Backup and Restore with Embedded etcd Datastore"),(0,n.kt)("p",null,"See the ",(0,n.kt)("a",{parentName:"p",href:"/kr/cli/etcd-snapshot"},(0,n.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," command documentation")," for information on performing backup and restore operations on the embedded etcd datastore."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/105936f9.15005aa1.js b/kr/assets/js/105936f9.37f276c1.js
similarity index 99%
rename from kr/assets/js/105936f9.15005aa1.js
rename to kr/assets/js/105936f9.37f276c1.js
index e63fc7ac3..e12ddde47 100644
--- a/kr/assets/js/105936f9.15005aa1.js
+++ b/kr/assets/js/105936f9.37f276c1.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3217],{3905:(e,t,n)=>{n.d(t,{Zo:()=>m,kt:()=>c});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},m=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},p=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,m=o(e,["components","mdxType","originalType","parentName"]),p=u(n),c=a,k=p["".concat(s,".").concat(c)]||p[c]||d[c]||l;return n?r.createElement(k,i(i({ref:t},m),{},{components:n})):r.createElement(k,i({ref:t},m))}));function c(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=p;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}p.displayName="MDXCreateElement"},9348:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>d,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={title:"Resource Profiling",weight:1},i=void 0,o={unversionedId:"reference/resource-profiling",id:"reference/resource-profiling",title:"Resource Profiling",description:"This section captures the results of tests to determine minimum resource requirements for K3s.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",sourceDirName:"reference",slug:"/reference/resource-profiling",permalink:"/kr/reference/resource-profiling",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Resource Profiling",weight:1},sidebar:"mySidebar",previous:{title:"Environment Variables",permalink:"/kr/reference/env-variables"},next:{title:"\uc54c\ub824\uc9c4 \uc774\uc288",permalink:"/kr/known-issues/"}},s={},u=[{value:"Scope of Resource Testing",id:"scope-of-resource-testing",level:2},{value:"Components Included for Baseline Measurements",id:"components-included-for-baseline-measurements",level:2},{value:"Methodology",id:"methodology",level:2},{value:"Environment",id:"environment",level:2},{value:"Baseline Resource Requirements",id:"baseline-resource-requirements",level:2},{value:"K3s Server with a Workload",id:"k3s-server-with-a-workload",level:3},{value:"K3s Cluster with a Single Agent",id:"k3s-cluster-with-a-single-agent",level:3},{value:"K3s Agent",id:"k3s-agent",level:3},{value:"Analysis",id:"analysis",level:2},{value:"Primary Resource Utilization Drivers",id:"primary-resource-utilization-drivers",level:3},{value:"Preventing Agents and Workloads from Interfering with the Cluster Datastore",id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore",level:3}],m={toc:u};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for K3s."),(0,a.kt)("p",null,"The results are summarized as follows:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Components"),(0,a.kt)("th",{parentName:"tr",align:null},"Processor"),(0,a.kt)("th",{parentName:"tr",align:null},"Min CPU"),(0,a.kt)("th",{parentName:"tr",align:null},"Min RAM with Kine/SQLite"),(0,a.kt)("th",{parentName:"tr",align:null},"Min RAM with Embedded etcd"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M"),(0,a.kt)("td",{parentName:"tr",align:null},"896 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"512 M"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M"),(0,a.kt)("td",{parentName:"tr",align:null},"896 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"512 M"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M")))),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#scope-of-resource-testing"},"Scope of Resource Testing")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#components-included-for-baseline-measurements"},"Components Included for Baseline Measurements")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#methodology"},"Methodology")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#environment"},"Environment")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#baseline-resource-requirements"},"Baseline Resource Requirements"),(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#k3s-server-with-a-workload"},"K3s Server with a Workload")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#k3s-agent"},"K3s Agent")))),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#analysis"},"Analysis"),(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"))))),(0,a.kt)("h2",{id:"scope-of-resource-testing"},"Scope of Resource Testing"),(0,a.kt)("p",null,"The resource tests were intended to address the following problem statements:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster."),(0,a.kt)("li",{parentName:"ul"},"On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).")),(0,a.kt)("h2",{id:"components-included-for-baseline-measurements"},"Components Included for Baseline Measurements"),(0,a.kt)("p",null,"The tested components are:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"K3s 1.19.2 with all packaged components enabled"),(0,a.kt)("li",{parentName:"ul"},"Prometheus + Grafana monitoring stack"),(0,a.kt)("li",{parentName:"ul"},"Kubernetes Example PHP Guestbook app")),(0,a.kt)("p",null,"These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app."),(0,a.kt)("p",null,"Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. "),(0,a.kt)("h2",{id:"methodology"},"Methodology"),(0,a.kt)("p",null,"A standalone instance of Prometheus v2.21.0 was used to collect host CPU, memory, and disk IO statistics using ",(0,a.kt)("inlineCode",{parentName:"p"},"prometheus-node-exporter")," installed via apt."),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"systemd-cgtop")," was used to spot-check systemd cgroup-level CPU and memory utilization. ",(0,a.kt)("inlineCode",{parentName:"p"},"system.slice/k3s.service")," tracks resource utilization for both K3s and containerd, while individual pods are under the ",(0,a.kt)("inlineCode",{parentName:"p"},"kubepods")," hierarchy."),(0,a.kt)("p",null,"Additional detailed K3s memory utilization data was collected from the ",(0,a.kt)("inlineCode",{parentName:"p"},"process_resident_memory_bytes")," and ",(0,a.kt)("inlineCode",{parentName:"p"},"go_memstats_alloc_bytes")," metrics using the kubelet exporter integrated into the server and agent processes."),(0,a.kt)("p",null,"Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads."),(0,a.kt)("h2",{id:"environment"},"Environment"),(0,a.kt)("p",null,"OS: Ubuntu 20.04 x86_64, aarch64"),(0,a.kt)("p",null,"Hardware:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"AWS c5d.xlarge - 4 core, 8 GB RAM, NVME SSD"),(0,a.kt)("li",{parentName:"ul"},"Raspberry Pi 4 Model B - 4 core, 8 GB RAM, Class 10 SDHC")),(0,a.kt)("h2",{id:"baseline-resource-requirements"},"Baseline Resource Requirements"),(0,a.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent."),(0,a.kt)("h3",{id:"k3s-server-with-a-workload"},"K3s Server with a Workload"),(0,a.kt)("p",null,"These are the requirements for a single-node cluster in which the K3s server shares resources with a workload."),(0,a.kt)("p",null,"The CPU requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Resource Requirement"),(0,a.kt)("th",{parentName:"tr",align:null},"Tested Processor"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Low-power processor such as Pi4B BCM2711, 1.50 GHz")))),(0,a.kt)("p",null,"The IOPS and memory requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,a.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,a.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,a.kt)("th",{parentName:"tr",align:null},"Latency"),(0,a.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,a.kt)("td",{parentName:"tr",align:null},"10"),(0,a.kt)("td",{parentName:"tr",align:null},"500"),(0,a.kt)("td",{parentName:"tr",align:null},"< 10 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,a.kt)("td",{parentName:"tr",align:null},"50"),(0,a.kt)("td",{parentName:"tr",align:null},"250"),(0,a.kt)("td",{parentName:"tr",align:null},"< 5 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"896 M")))),(0,a.kt)("h3",{id:"k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent"),(0,a.kt)("p",null,"These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload."),(0,a.kt)("p",null,"The CPU requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Resource Requirement"),(0,a.kt)("th",{parentName:"tr",align:null},"Tested Processor"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz")))),(0,a.kt)("p",null,"The IOPS and memory requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Datastore"),(0,a.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,a.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,a.kt)("th",{parentName:"tr",align:null},"Latency"),(0,a.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,a.kt)("td",{parentName:"tr",align:null},"10"),(0,a.kt)("td",{parentName:"tr",align:null},"500"),(0,a.kt)("td",{parentName:"tr",align:null},"< 10 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"512 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,a.kt)("td",{parentName:"tr",align:null},"50"),(0,a.kt)("td",{parentName:"tr",align:null},"250"),(0,a.kt)("td",{parentName:"tr",align:null},"< 5 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")))),(0,a.kt)("h3",{id:"k3s-agent"},"K3s Agent"),(0,a.kt)("p",null,"The CPU requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Resource Requirement"),(0,a.kt)("th",{parentName:"tr",align:null},"Tested Processor"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz")))),(0,a.kt)("p",null,"256 M of RAM is required."),(0,a.kt)("h2",{id:"analysis"},"Analysis"),(0,a.kt)("p",null,"This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,a.kt)("h3",{id:"primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers"),(0,a.kt)("p",null,"K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server's resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server's resource requirements."),(0,a.kt)("p",null,"K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts."),(0,a.kt)("h3",{id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"),(0,a.kt)("p",null,"When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore."),(0,a.kt)("p",null,"This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store."),(0,a.kt)("p",null,"Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore."),(0,a.kt)("p",null,"Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state."))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3217],{3905:(e,t,n)=>{n.d(t,{Zo:()=>m,kt:()=>c});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},m=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},p=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,m=o(e,["components","mdxType","originalType","parentName"]),p=u(n),c=a,k=p["".concat(s,".").concat(c)]||p[c]||d[c]||l;return n?r.createElement(k,i(i({ref:t},m),{},{components:n})):r.createElement(k,i({ref:t},m))}));function c(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=p;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}p.displayName="MDXCreateElement"},9348:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>d,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={title:"Resource Profiling",weight:1},i=void 0,o={unversionedId:"reference/resource-profiling",id:"reference/resource-profiling",title:"Resource Profiling",description:"This section captures the results of tests to determine minimum resource requirements for K3s.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",sourceDirName:"reference",slug:"/reference/resource-profiling",permalink:"/kr/reference/resource-profiling",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Resource Profiling",weight:1},sidebar:"mySidebar",previous:{title:"Environment Variables",permalink:"/kr/reference/env-variables"},next:{title:"\uc54c\ub824\uc9c4 \uc774\uc288",permalink:"/kr/known-issues/"}},s={},u=[{value:"Scope of Resource Testing",id:"scope-of-resource-testing",level:2},{value:"Components Included for Baseline Measurements",id:"components-included-for-baseline-measurements",level:2},{value:"Methodology",id:"methodology",level:2},{value:"Environment",id:"environment",level:2},{value:"Baseline Resource Requirements",id:"baseline-resource-requirements",level:2},{value:"K3s Server with a Workload",id:"k3s-server-with-a-workload",level:3},{value:"K3s Cluster with a Single Agent",id:"k3s-cluster-with-a-single-agent",level:3},{value:"K3s Agent",id:"k3s-agent",level:3},{value:"Analysis",id:"analysis",level:2},{value:"Primary Resource Utilization Drivers",id:"primary-resource-utilization-drivers",level:3},{value:"Preventing Agents and Workloads from Interfering with the Cluster Datastore",id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore",level:3}],m={toc:u};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for K3s."),(0,a.kt)("p",null,"The results are summarized as follows:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Components"),(0,a.kt)("th",{parentName:"tr",align:null},"Processor"),(0,a.kt)("th",{parentName:"tr",align:null},"Min CPU"),(0,a.kt)("th",{parentName:"tr",align:null},"Min RAM with Kine/SQLite"),(0,a.kt)("th",{parentName:"tr",align:null},"Min RAM with Embedded etcd"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M"),(0,a.kt)("td",{parentName:"tr",align:null},"896 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"512 M"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s server with a workload"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M"),(0,a.kt)("td",{parentName:"tr",align:null},"896 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s cluster with a single agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"512 M"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M"),(0,a.kt)("td",{parentName:"tr",align:null},"256 M")))),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#scope-of-resource-testing"},"Scope of Resource Testing")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#components-included-for-baseline-measurements"},"Components Included for Baseline Measurements")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#methodology"},"Methodology")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#environment"},"Environment")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#baseline-resource-requirements"},"Baseline Resource Requirements"),(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#k3s-server-with-a-workload"},"K3s Server with a Workload")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#k3s-agent"},"K3s Agent")))),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#analysis"},"Analysis"),(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"))))),(0,a.kt)("h2",{id:"scope-of-resource-testing"},"Scope of Resource Testing"),(0,a.kt)("p",null,"The resource tests were intended to address the following problem statements:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster."),(0,a.kt)("li",{parentName:"ul"},"On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).")),(0,a.kt)("h2",{id:"components-included-for-baseline-measurements"},"Components Included for Baseline Measurements"),(0,a.kt)("p",null,"The tested components are:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"K3s 1.19.2 with all packaged components enabled"),(0,a.kt)("li",{parentName:"ul"},"Prometheus + Grafana monitoring stack"),(0,a.kt)("li",{parentName:"ul"},"Kubernetes Example PHP Guestbook app")),(0,a.kt)("p",null,"These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app."),(0,a.kt)("p",null,"Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. "),(0,a.kt)("h2",{id:"methodology"},"Methodology"),(0,a.kt)("p",null,"A standalone instance of Prometheus v2.21.0 was used to collect host CPU, memory, and disk IO statistics using ",(0,a.kt)("inlineCode",{parentName:"p"},"prometheus-node-exporter")," installed via apt."),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"systemd-cgtop")," was used to spot-check systemd cgroup-level CPU and memory utilization. ",(0,a.kt)("inlineCode",{parentName:"p"},"system.slice/k3s.service")," tracks resource utilization for both K3s and containerd, while individual pods are under the ",(0,a.kt)("inlineCode",{parentName:"p"},"kubepods")," hierarchy."),(0,a.kt)("p",null,"Additional detailed K3s memory utilization data was collected from the ",(0,a.kt)("inlineCode",{parentName:"p"},"process_resident_memory_bytes")," and ",(0,a.kt)("inlineCode",{parentName:"p"},"go_memstats_alloc_bytes")," metrics using the kubelet exporter integrated into the server and agent processes."),(0,a.kt)("p",null,"Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads."),(0,a.kt)("h2",{id:"environment"},"Environment"),(0,a.kt)("p",null,"OS: Ubuntu 20.04 x86_64, aarch64"),(0,a.kt)("p",null,"Hardware:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"AWS c5d.xlarge - 4 core, 8 GB RAM, NVME SSD"),(0,a.kt)("li",{parentName:"ul"},"Raspberry Pi 4 Model B - 4 core, 8 GB RAM, Class 10 SDHC")),(0,a.kt)("h2",{id:"baseline-resource-requirements"},"Baseline Resource Requirements"),(0,a.kt)("p",null,"This section captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent."),(0,a.kt)("h3",{id:"k3s-server-with-a-workload"},"K3s Server with a Workload"),(0,a.kt)("p",null,"These are the requirements for a single-node cluster in which the K3s server shares resources with a workload."),(0,a.kt)("p",null,"The CPU requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Resource Requirement"),(0,a.kt)("th",{parentName:"tr",align:null},"Tested Processor"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Low-power processor such as Pi4B BCM2711, 1.50 GHz")))),(0,a.kt)("p",null,"The IOPS and memory requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Tested Datastore"),(0,a.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,a.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,a.kt)("th",{parentName:"tr",align:null},"Latency"),(0,a.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,a.kt)("td",{parentName:"tr",align:null},"10"),(0,a.kt)("td",{parentName:"tr",align:null},"500"),(0,a.kt)("td",{parentName:"tr",align:null},"< 10 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,a.kt)("td",{parentName:"tr",align:null},"50"),(0,a.kt)("td",{parentName:"tr",align:null},"250"),(0,a.kt)("td",{parentName:"tr",align:null},"< 5 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"896 M")))),(0,a.kt)("h3",{id:"k3s-cluster-with-a-single-agent"},"K3s Cluster with a Single Agent"),(0,a.kt)("p",null,"These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload."),(0,a.kt)("p",null,"The CPU requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Resource Requirement"),(0,a.kt)("th",{parentName:"tr",align:null},"Tested Processor"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"20% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz")))),(0,a.kt)("p",null,"The IOPS and memory requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Datastore"),(0,a.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,a.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,a.kt)("th",{parentName:"tr",align:null},"Latency"),(0,a.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,a.kt)("td",{parentName:"tr",align:null},"10"),(0,a.kt)("td",{parentName:"tr",align:null},"500"),(0,a.kt)("td",{parentName:"tr",align:null},"< 10 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"512 M")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"Embedded etcd"),(0,a.kt)("td",{parentName:"tr",align:null},"50"),(0,a.kt)("td",{parentName:"tr",align:null},"250"),(0,a.kt)("td",{parentName:"tr",align:null},"< 5 ms"),(0,a.kt)("td",{parentName:"tr",align:null},"768 M")))),(0,a.kt)("h3",{id:"k3s-agent"},"K3s Agent"),(0,a.kt)("p",null,"The CPU requirements are:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Resource Requirement"),(0,a.kt)("th",{parentName:"tr",align:null},"Tested Processor"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"5% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"10% of a core"),(0,a.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz")))),(0,a.kt)("p",null,"256 M of RAM is required."),(0,a.kt)("h2",{id:"analysis"},"Analysis"),(0,a.kt)("p",null,"This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,a.kt)("h3",{id:"primary-resource-utilization-drivers"},"Primary Resource Utilization Drivers"),(0,a.kt)("p",null,"K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server's resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server's resource requirements."),(0,a.kt)("p",null,"K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts."),(0,a.kt)("h3",{id:"preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore"},"Preventing Agents and Workloads from Interfering with the Cluster Datastore"),(0,a.kt)("p",null,"When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore."),(0,a.kt)("p",null,"This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store."),(0,a.kt)("p",null,"Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore."),(0,a.kt)("p",null,"Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state."))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/12d62c38.d94bed84.js b/kr/assets/js/12d62c38.2fa4c368.js
similarity index 98%
rename from kr/assets/js/12d62c38.d94bed84.js
rename to kr/assets/js/12d62c38.2fa4c368.js
index 90d8f71df..795a17f3f 100644
--- a/kr/assets/js/12d62c38.d94bed84.js
+++ b/kr/assets/js/12d62c38.2fa4c368.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3573],{3905:(e,a,t)=>{t.d(a,{Zo:()=>u,kt:()=>b});var n=t(7294);function r(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);a&&(n=n.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,n)}return t}function s(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){r(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,n,r=function(e,a){if(null==e)return{};var t,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||(r[t]=e[t]);return r}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var d=n.createContext({}),i=function(e){var a=n.useContext(d),t=a;return e&&(t="function"==typeof e?e(a):s(s({},a),e)),t},u=function(e){var a=i(e.components);return n.createElement(d.Provider,{value:a},e.children)},c={inlineCode:"code",wrapper:function(e){var a=e.children;return n.createElement(n.Fragment,{},a)}},p=n.forwardRef((function(e,a){var t=e.components,r=e.mdxType,o=e.originalType,d=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),p=i(t),b=r,h=p["".concat(d,".").concat(b)]||p[b]||c[b]||o;return t?n.createElement(h,s(s({ref:a},u),{},{components:t})):n.createElement(h,s({ref:a},u))}));function b(e,a){var t=arguments,r=a&&a.mdxType;if("string"==typeof e||r){var o=t.length,s=new Array(o);s[0]=p;var l={};for(var d in a)hasOwnProperty.call(a,d)&&(l[d]=a[d]);l.originalType=e,l.mdxType="string"==typeof e?e:r,s[1]=l;for(var i=2;i<o;i++)s[i]=t[i];return n.createElement.apply(null,s)}return n.createElement.apply(null,t)}p.displayName="MDXCreateElement"},8567:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>d,contentTitle:()=>s,default:()=>h,frontMatter:()=>o,metadata:()=>l,toc:()=>i});var n=t(3117),r=(t(7294),t(3905));const o={title:"Kubernetes Dashboard",weight:60},s=void 0,l={unversionedId:"installation/kube-dashboard",id:"installation/kube-dashboard",title:"Kubernetes Dashboard",description:"This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",sourceDirName:"installation",slug:"/installation/kube-dashboard",permalink:"/kr/installation/kube-dashboard",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Kubernetes Dashboard",weight:60},sidebar:"mySidebar",previous:{title:"Managing Packaged Components",permalink:"/kr/installation/packaged-components"},next:{title:"Uninstalling K3s",permalink:"/kr/installation/uninstall"}},d={},i=[{value:"Deploying the Kubernetes Dashboard",id:"deploying-the-kubernetes-dashboard",level:3},{value:"Dashboard RBAC Configuration",id:"dashboard-rbac-configuration",level:3},{value:"Obtain the Bearer Token",id:"obtain-the-bearer-token",level:3},{value:"Local Access to the Dashboard",id:"local-access-to-the-dashboard",level:3},{value:"Advanced: Remote Access to the Dashboard",id:"advanced-remote-access-to-the-dashboard",level:4},{value:"Upgrading the Dashboard",id:"upgrading-the-dashboard",level:3},{value:"Deleting the Dashboard and admin-user configuration",id:"deleting-the-dashboard-and-admin-user-configuration",level:3}],u=e=>function(a){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",a)},c=u("Tabs"),p=u("TabItem"),b={toc:i};function h(e){let{components:a,...t}=e;return(0,r.kt)("wrapper",(0,n.Z)({},b,t,{components:a,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This installation guide will help you to deploy and configure the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/"},"Kubernetes Dashboard")," on K3s."),(0,r.kt)("h3",{id:"deploying-the-kubernetes-dashboard"},"Deploying the Kubernetes Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"GITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml\n")),(0,r.kt)("h3",{id:"dashboard-rbac-configuration"},"Dashboard RBAC Configuration"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Important:")," The ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," created in this guide will have administrative privileges in the Dashboard.")),(0,r.kt)("p",null,"Create the following resource manifest files:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: ServiceAccount\nmetadata:\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user-role.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: admin-user\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,"Deploy the ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," configuration:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"obtain-the-bearer-token"},"Obtain the Bearer Token"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(p,{value:"v1.24 and newer",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard create token admin-user\n"))),(0,r.kt)(p,{value:"v1.23 and older",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'\n")))),(0,r.kt)("h3",{id:"local-access-to-the-dashboard"},"Local Access to the Dashboard"),(0,r.kt)("p",null,"To access the Dashboard you must create a secure channel to your K3s cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl proxy\n")),(0,r.kt)("p",null,"The Dashboard is now accessible at:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"Sign In")," with the ",(0,r.kt)("inlineCode",{parentName:"li"},"admin-user")," Bearer Token")),(0,r.kt)("h4",{id:"advanced-remote-access-to-the-dashboard"},"Advanced: Remote Access to the Dashboard"),(0,r.kt)("p",null,"Please see the Dashboard documentation: Using ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/"},"Port Forwarding")," to Access Applications in a Cluster."),(0,r.kt)("h3",{id:"upgrading-the-dashboard"},"Upgrading the Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nGITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"deleting-the-dashboard-and-admin-user-configuration"},"Deleting the Dashboard and admin-user configuration"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nsudo k3s kubectl delete clusterrolebinding kubernetes-dashboard\nsudo k3s kubectl delete clusterrole kubernetes-dashboard\n")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3573],{3905:(e,a,t)=>{t.d(a,{Zo:()=>u,kt:()=>b});var n=t(7294);function r(e,a,t){return a in e?Object.defineProperty(e,a,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[a]=t,e}function o(e,a){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);a&&(n=n.filter((function(a){return Object.getOwnPropertyDescriptor(e,a).enumerable}))),t.push.apply(t,n)}return t}function s(e){for(var a=1;a<arguments.length;a++){var t=null!=arguments[a]?arguments[a]:{};a%2?o(Object(t),!0).forEach((function(a){r(e,a,t[a])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):o(Object(t)).forEach((function(a){Object.defineProperty(e,a,Object.getOwnPropertyDescriptor(t,a))}))}return e}function l(e,a){if(null==e)return{};var t,n,r=function(e,a){if(null==e)return{};var t,n,r={},o=Object.keys(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||(r[t]=e[t]);return r}(e,a);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)t=o[n],a.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var d=n.createContext({}),i=function(e){var a=n.useContext(d),t=a;return e&&(t="function"==typeof e?e(a):s(s({},a),e)),t},u=function(e){var a=i(e.components);return n.createElement(d.Provider,{value:a},e.children)},c={inlineCode:"code",wrapper:function(e){var a=e.children;return n.createElement(n.Fragment,{},a)}},p=n.forwardRef((function(e,a){var t=e.components,r=e.mdxType,o=e.originalType,d=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),p=i(t),b=r,h=p["".concat(d,".").concat(b)]||p[b]||c[b]||o;return t?n.createElement(h,s(s({ref:a},u),{},{components:t})):n.createElement(h,s({ref:a},u))}));function b(e,a){var t=arguments,r=a&&a.mdxType;if("string"==typeof e||r){var o=t.length,s=new Array(o);s[0]=p;var l={};for(var d in a)hasOwnProperty.call(a,d)&&(l[d]=a[d]);l.originalType=e,l.mdxType="string"==typeof e?e:r,s[1]=l;for(var i=2;i<o;i++)s[i]=t[i];return n.createElement.apply(null,s)}return n.createElement.apply(null,t)}p.displayName="MDXCreateElement"},8567:(e,a,t)=>{t.r(a),t.d(a,{assets:()=>d,contentTitle:()=>s,default:()=>h,frontMatter:()=>o,metadata:()=>l,toc:()=>i});var n=t(3117),r=(t(7294),t(3905));const o={title:"Kubernetes Dashboard",weight:60},s=void 0,l={unversionedId:"installation/kube-dashboard",id:"installation/kube-dashboard",title:"Kubernetes Dashboard",description:"This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",sourceDirName:"installation",slug:"/installation/kube-dashboard",permalink:"/kr/installation/kube-dashboard",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Kubernetes Dashboard",weight:60},sidebar:"mySidebar",previous:{title:"Managing Packaged Components",permalink:"/kr/installation/packaged-components"},next:{title:"Uninstalling K3s",permalink:"/kr/installation/uninstall"}},d={},i=[{value:"Deploying the Kubernetes Dashboard",id:"deploying-the-kubernetes-dashboard",level:3},{value:"Dashboard RBAC Configuration",id:"dashboard-rbac-configuration",level:3},{value:"Obtain the Bearer Token",id:"obtain-the-bearer-token",level:3},{value:"Local Access to the Dashboard",id:"local-access-to-the-dashboard",level:3},{value:"Advanced: Remote Access to the Dashboard",id:"advanced-remote-access-to-the-dashboard",level:4},{value:"Upgrading the Dashboard",id:"upgrading-the-dashboard",level:3},{value:"Deleting the Dashboard and admin-user configuration",id:"deleting-the-dashboard-and-admin-user-configuration",level:3}],u=e=>function(a){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",a)},c=u("Tabs"),p=u("TabItem"),b={toc:i};function h(e){let{components:a,...t}=e;return(0,r.kt)("wrapper",(0,n.Z)({},b,t,{components:a,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This installation guide will help you to deploy and configure the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/"},"Kubernetes Dashboard")," on K3s."),(0,r.kt)("h3",{id:"deploying-the-kubernetes-dashboard"},"Deploying the Kubernetes Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"GITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml\n")),(0,r.kt)("h3",{id:"dashboard-rbac-configuration"},"Dashboard RBAC Configuration"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Important:")," The ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," created in this guide will have administrative privileges in the Dashboard.")),(0,r.kt)("p",null,"Create the following resource manifest files:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: ServiceAccount\nmetadata:\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user-role.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: admin-user\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,"Deploy the ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," configuration:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"obtain-the-bearer-token"},"Obtain the Bearer Token"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(p,{value:"v1.24 and newer",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard create token admin-user\n"))),(0,r.kt)(p,{value:"v1.23 and older",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'\n")))),(0,r.kt)("h3",{id:"local-access-to-the-dashboard"},"Local Access to the Dashboard"),(0,r.kt)("p",null,"To access the Dashboard you must create a secure channel to your K3s cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl proxy\n")),(0,r.kt)("p",null,"The Dashboard is now accessible at:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"Sign In")," with the ",(0,r.kt)("inlineCode",{parentName:"li"},"admin-user")," Bearer Token")),(0,r.kt)("h4",{id:"advanced-remote-access-to-the-dashboard"},"Advanced: Remote Access to the Dashboard"),(0,r.kt)("p",null,"Please see the Dashboard documentation: Using ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/"},"Port Forwarding")," to Access Applications in a Cluster."),(0,r.kt)("h3",{id:"upgrading-the-dashboard"},"Upgrading the Dashboard"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nGITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"deleting-the-dashboard-and-admin-user-configuration"},"Deleting the Dashboard and admin-user configuration"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nsudo k3s kubectl delete clusterrolebinding kubernetes-dashboard\nsudo k3s kubectl delete clusterrole kubernetes-dashboard\n")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/18ace21a.4a7618ec.js b/kr/assets/js/18ace21a.b371d979.js
similarity index 99%
rename from kr/assets/js/18ace21a.4a7618ec.js
rename to kr/assets/js/18ace21a.b371d979.js
index 286b86a5a..53e4dc3bc 100644
--- a/kr/assets/js/18ace21a.4a7618ec.js
+++ b/kr/assets/js/18ace21a.b371d979.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9269],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},d=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(t),m=r,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||i;return t?a.createElement(k,s(s({ref:n},u),{},{components:t})):a.createElement(k,s({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,s=new Array(i);s[0]=d;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var c=2;c<i;c++)s[c]=t[c];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}d.displayName="MDXCreateElement"},9650:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const i={title:"CIS Hardening Guide",weight:80},s=void 0,o={unversionedId:"security/hardening-guide",id:"security/hardening-guide",title:"CIS Hardening Guide",description:"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/hardening-guide.md",sourceDirName:"security",slug:"/security/hardening-guide",permalink:"/kr/security/hardening-guide",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"CIS Hardening Guide",weight:80},sidebar:"mySidebar",previous:{title:"Secrets Encryption",permalink:"/kr/security/secrets-encryption"},next:{title:"CIS Self Assessment Guide",permalink:"/kr/security/self-assessment"}},l={},c=[{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set",id:"ensure-protect-kernel-defaults-is-set",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:4},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security",id:"pod-security",level:3},{value:"NetworkPolicies",id:"networkpolicies",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Configuration for Kubernetes Components",id:"configuration-for-kubernetes-components",level:2},{value:"Control Plane Execution and Arguments",id:"control-plane-execution-and-arguments",level:2},{value:"Known Issues",id:"known-issues",level:2},{value:"Control 1.2.15",id:"control-1215",level:3},{value:"Control 1.2.16",id:"control-1216",level:3},{value:"Control 1.2.22",id:"control-1222",level:3},{value:"Control 1.2.23",id:"control-1223",level:3},{value:"Control 1.2.24",id:"control-1224",level:3},{value:"Control 1.2.25",id:"control-1225",level:3},{value:"Control 1.2.26",id:"control-1226",level:3},{value:"Control 1.2.27",id:"control-1227",level:3},{value:"Control 1.2.33",id:"control-1233",level:3},{value:"Control 1.2.34",id:"control-1234",level:3},{value:"Control 1.3.1",id:"control-131",level:3},{value:"Control 3.2.1",id:"control-321",level:3},{value:"Control 4.2.7",id:"control-427",level:3},{value:"Control 5.1.5",id:"control-515",level:3},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=u("Tabs"),d=u("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."),(0,r.kt)("p",null,"K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"K3s will not modify the host operating system. Any host-level modifications will need to be done manually."),(0,r.kt)("li",{parentName:"ol"},"Certain CIS policy controls for ",(0,r.kt)("inlineCode",{parentName:"li"},"NetworkPolicies")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityStandards")," (",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicies")," on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.")),(0,r.kt)("p",null,"The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary."),(0,r.kt)("h2",{id:"host-level-requirements"},"Host-level Requirements"),(0,r.kt)("p",null,"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section."),(0,r.kt)("h3",{id:"ensure-protect-kernel-defaults-is-set"},"Ensure ",(0,r.kt)("inlineCode",{parentName:"h3"},"protect-kernel-defaults")," is set"),(0,r.kt)("p",null,"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults."),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," ",(0,r.kt)("inlineCode",{parentName:"p"},"protect-kernel-defaults")," is exposed as a top-level flag for K3s.")),(0,r.kt)("h4",{id:"set-kernel-parameters"},"Set kernel parameters"),(0,r.kt)("p",null,"Create a file called ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/sysctl.d/90-kubelet.conf")," and add the snippet below. Then run ",(0,r.kt)("inlineCode",{parentName:"p"},"sysctl -p /etc/sysctl.d/90-kubelet.conf"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"vm.panic_on_oom=0\nvm.overcommit_memory=1\nkernel.panic=10\nkernel.panic_on_oops=1\nkernel.keys.root_maxbytes=25000000\n")),(0,r.kt)("h2",{id:"kubernetes-runtime-requirements"},"Kubernetes Runtime Requirements"),(0,r.kt)("p",null,"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section."),(0,r.kt)("p",null,"By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurity")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," admission controllers enabled, among others."),(0,r.kt)("h3",{id:"pod-security"},"Pod Security"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.25 and newer support ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/"},"Pod Security Admissions (PSAs)")," for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n')),(0,r.kt)("p",null,"The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"psa.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. "),(0,r.kt)("p",null,"Here is an example of a compliant PSA:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system]\n'))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.24 and older support ",(0,r.kt)("a",{parentName:"p",href:"https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/"},"Pod Security Policies (PSPs)")," for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="enable-admission-plugins=NodeRestriction,PodSecurityPolicy"\n')),(0,r.kt)("p",null,"This will have the effect of maintaining the ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," plugin as well as enabling the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy"),". "),(0,r.kt)("p",null,"When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark."),(0,r.kt)("p",null,"Here is an example of a compliant PSP:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false                # CIS - 5.2.1\n  allowPrivilegeEscalation: false  # CIS - 5.2.5\n  requiredDropCapabilities:        # CIS - 5.2.7/8/9\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false               # CIS - 5.2.4\n  hostIPC: false                   # CIS - 5.2.3\n  hostPID: false                   # CIS - 5.2.2\n  runAsUser:\n    rule: 'MustRunAsNonRoot'       # CIS - 5.2.6\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n")),(0,r.kt)("p",null,'For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a "system unrestricted policy" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.'),(0,r.kt)("p",null,"Combining the configuration above with the ",(0,r.kt)("a",{parentName:"p",href:"#networkpolicies"},"Network Policy")," described in the next section, a single file can be placed in the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory. Here is an example of a ",(0,r.kt)("inlineCode",{parentName:"p"},"policy.yaml")," file: "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false\n  allowPrivilegeEscalation: false\n  requiredDropCapabilities:\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false\n  hostIPC: false\n  hostPID: false\n  runAsUser:\n    rule: 'MustRunAsNonRoot'\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: system-unrestricted-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: true\n  allowedCapabilities:\n  - '*'\n  fsGroup:\n    rule: RunAsAny\n  hostIPC: true\n  hostNetwork: true\n  hostPID: true\n  hostPorts:\n  - max: 65535\n    min: 0\n  privileged: true\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n  volumes:\n  - '*'\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: svclb-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: false\n  allowedCapabilities:\n  - NET_ADMIN\n  allowedUnsafeSysctls:\n  - net.ipv4.ip_forward\n  - net.ipv6.conf.all.forwarding\n  fsGroup:\n    rule: RunAsAny\n  hostPorts:\n  - max: 65535\n    min: 0\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:restricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  verbs:\n  - use\n  resourceNames:\n  - restricted-psp\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:system-unrestricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - system-unrestricted-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:svclb-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - svclb-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: default:restricted-psp\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:restricted-psp\nsubjects:\n- kind: Group\n  name: system:authenticated\n  apiGroup: rbac.authorization.k8s.io\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: system-unrestricted-node-psp-rolebinding\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: system-unrestricted-svc-acct-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:serviceaccounts\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: svclb-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:svclb-psp\nsubjects:\n- kind: ServiceAccount\n  name: svclb\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: default\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: default\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-public\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-public\n")))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.")),(0,r.kt)("h3",{id:"networkpolicies"},"NetworkPolicies"),(0,r.kt)("p",null,"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods."),(0,r.kt)("p",null,"Network policies should be placed the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory, where they will automatically be deployed on startup."),(0,r.kt)("p",null,"Here is an example of a compliant network policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"kind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n")),(0,r.kt)("p",null,"With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: default-network-dns-policy\n  namespace: <NAMESPACE>\nspec:\n  ingress:\n  - ports:\n    - port: 53\n      protocol: TCP\n    - port: 53\n      protocol: UDP\n  podSelector:\n    matchLabels:\n      k8s-app: kube-dns\n  policyTypes:\n  - Ingress\n")),(0,r.kt)("p",null,"The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.21 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v121-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app.kubernetes.io/name: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n"))),(0,r.kt)(d,{value:"v1.20 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v120-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n")))),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Operators must manage network policies as normal for additional namespaces that are created.")),(0,r.kt)("h3",{id:"api-server-audit-configuration"},"API Server audit configuration"),(0,r.kt)("p",null,"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment."),(0,r.kt)("p",null,"The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs\n")),(0,r.kt)("p",null,"A starter audit policy to log request metadata is provided below. The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"audit.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. Detailed information about policy configuration for the API server can be found in the Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/debug-application-cluster/audit/"},"documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: audit.k8s.io/v1\nkind: Policy\nrules:\n- level: Metadata\n")),(0,r.kt)("p",null,"Both configurations must be passed as arguments to the API Server as:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"--kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n--kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n")),(0,r.kt)("p",null,"If the configurations are created after K3s is installed, they must be added to K3s' systemd service in ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ExecStart=/usr/local/bin/k3s \\\n    server \\\n    '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\\n    '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\\n")),(0,r.kt)("p",null,"K3s must be restarted to load the new configuration."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo systemctl daemon-reload\nsudo systemctl restart k3s.service\n")),(0,r.kt)("h2",{id:"configuration-for-kubernetes-components"},"Configuration for Kubernetes Components"),(0,r.kt)("p",null,"The configuration below should be placed in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"configuration file"),", and contains all the necessary remediations to harden the Kubernetes components."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n"))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")))),(0,r.kt)("h2",{id:"control-plane-execution-and-arguments"},"Control Plane Execution and Arguments"),(0,r.kt)("p",null,"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-apiserver \n    --advertise-port=6443 \n    --allow-privileged=true \n    --anonymous-auth=false                                                            # 1.2.1\n    --api-audiences=unknown \n    --authorization-mode=Node,RBAC \n    --bind-address=127.0.0.1 \n    --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs\n    --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt                    # 1.2.31\n    --enable-admission-plugins=NodeRestriction,PodSecurityPolicy                      # 1.2.17\n    --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  # 1.2.32\n    --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt                   # 1.2.29\n    --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key                    # 1.2.29\n    --etcd-servers=https://127.0.0.1:2379 \n    --insecure-port=0                                                                 # 1.2.19\n    --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt \n    --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt \n    --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key \n    --profiling=false                                                                 # 1.2.21\n    --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt \n    --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key \n    --requestheader-allowed-names=system:auth-proxy \n    --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt \n    --requestheader-extra-headers-prefix=X-Remote-Extra- \n    --requestheader-group-headers=X-Remote-Group \n    --requestheader-username-headers=X-Remote-User \n    --secure-port=6444                                                                # 1.2.20\n    --service-account-issuer=k3s \n    --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key            # 1.2.28\n    --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key \n    --service-cluster-ip-range=10.43.0.0/16 \n    --storage-backend=etcd3 \n    --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        # 1.2.30\n    --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30\n    --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-controller-manager \n    --address=127.0.0.1 \n    --allocate-node-cidrs=true \n    --bind-address=127.0.0.1                                                       # 1.3.7\n    --cluster-cidr=10.42.0.0/16 \n    --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt \n    --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key \n    --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig \n    --port=10252 \n    --profiling=false                                                              # 1.3.2\n    --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt                   # 1.3.5\n    --secure-port=0 \n    --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 \n    --use-service-account-credentials=true                                         # 1.3.3\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-scheduler \n    --address=127.0.0.1 \n    --bind-address=127.0.0.1                                              # 1.4.2\n    --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig \n    --port=10251 \n    --profiling=false                                                     # 1.4.1\n    --secure-port=0\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubelet \n    --address=0.0.0.0 \n    --anonymous-auth=false                                                # 4.2.1\n    --authentication-token-webhook=true \n    --authorization-mode=Webhook                                          # 4.2.2\n    --cgroup-driver=cgroupfs \n    --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt             # 4.2.3\n    --cloud-provider=external \n    --cluster-dns=10.43.0.10 \n    --cluster-domain=cluster.local \n    --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin \n    --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d \n    --container-runtime-endpoint=/run/k3s/containerd/containerd.sock \n    --container-runtime=remote \n    --containerd=/run/k3s/containerd/containerd.sock \n    --eviction-hard=imagefs.available<5%,nodefs.available<5% \n    --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% \n    --fail-swap-on=false \n    --healthz-bind-address=127.0.0.1 \n    --hostname-override=hostname01 \n    --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig \n    --kubelet-cgroups=/systemd/system.slice \n    --node-labels= \n    --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests \n    --protect-kernel-defaults=true                                        # 4.2.6\n    --read-only-port=0                                                    # 4.2.4\n    --resolv-conf=/run/systemd/resolve/resolv.conf \n    --runtime-cgroups=/systemd/system.slice \n    --serialize-image-pulls=false \n    --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt        # 4.2.10\n    --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10\n")),(0,r.kt)("p",null,"Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below."),(0,r.kt)("h2",{id:"known-issues"},"Known Issues"),(0,r.kt)("p",null,"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s."),(0,r.kt)("h3",{id:"control-1215"},"Control 1.2.15"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"NamespaceLifecycle")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1216"},"Control 1.2.16"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1222"},"Control 1.2.22"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-path")," argument is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1223"},"Control 1.2.23"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxage")," argument is set to 30 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1224"},"Control 1.2.24"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxbackup")," argument is set to 10 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1225"},"Control 1.2.25"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxsize")," argument is set to 100 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1226"},"Control 1.2.26"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--request-timeout")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1227"},"Control 1.2.27"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--service-account-lookup")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1233"},"Control 1.2.33"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--encryption-provider-config")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.",(0,r.kt)("p",null,"Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/kr/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-1234"},"Control 1.2.34"),(0,r.kt)("p",null,"Ensure that encryption providers are appropriately configured."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.",(0,r.kt)("p",null,"This can be remediated by passing a valid configuration to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/kr/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-131"},"Control 1.3.1"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--terminated-pod-gc-threshold")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-321"},"Control 3.2.1"),(0,r.kt)("p",null,"Ensure that a minimal audit policy is created."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Logging is an important detective control for all systems, to detect potential unauthorized access.",(0,r.kt)("p",null,"This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.")),(0,r.kt)("h3",{id:"control-427"},"Control 4.2.7"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--make-iptables-util-chains")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-515"},"Control 5.1.5"),(0,r.kt)("p",null,"Ensure that default service accounts are not actively used"),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.",(0,r.kt)("p",null,"Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account."),(0,r.kt)("p",null,"The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments."),(0,r.kt)("p",null,"This can be remediated by updating the ",(0,r.kt)("inlineCode",{parentName:"p"},"automountServiceAccountToken")," field to ",(0,r.kt)("inlineCode",{parentName:"p"},"false")," for the ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service account in each namespace."),(0,r.kt)("p",null,"For ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service accounts in the built-in namespaces (",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-public"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-node-lease"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"default"),"), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.")),(0,r.kt)("h2",{id:"conclusion"},"Conclusion"),(0,r.kt)("p",null,"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the ",(0,r.kt)("a",{parentName:"p",href:"/kr/security/self-assessment"},"CIS Benchmark Self-Assessment Guide")," to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9269],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},d=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(t),m=r,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||i;return t?a.createElement(k,s(s({ref:n},u),{},{components:t})):a.createElement(k,s({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,s=new Array(i);s[0]=d;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var c=2;c<i;c++)s[c]=t[c];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}d.displayName="MDXCreateElement"},9650:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const i={title:"CIS Hardening Guide",weight:80},s=void 0,o={unversionedId:"security/hardening-guide",id:"security/hardening-guide",title:"CIS Hardening Guide",description:"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/hardening-guide.md",sourceDirName:"security",slug:"/security/hardening-guide",permalink:"/kr/security/hardening-guide",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"CIS Hardening Guide",weight:80},sidebar:"mySidebar",previous:{title:"Secrets Encryption",permalink:"/kr/security/secrets-encryption"},next:{title:"CIS Self Assessment Guide",permalink:"/kr/security/self-assessment"}},l={},c=[{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set",id:"ensure-protect-kernel-defaults-is-set",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:4},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security",id:"pod-security",level:3},{value:"NetworkPolicies",id:"networkpolicies",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Configuration for Kubernetes Components",id:"configuration-for-kubernetes-components",level:2},{value:"Control Plane Execution and Arguments",id:"control-plane-execution-and-arguments",level:2},{value:"Known Issues",id:"known-issues",level:2},{value:"Control 1.2.15",id:"control-1215",level:3},{value:"Control 1.2.16",id:"control-1216",level:3},{value:"Control 1.2.22",id:"control-1222",level:3},{value:"Control 1.2.23",id:"control-1223",level:3},{value:"Control 1.2.24",id:"control-1224",level:3},{value:"Control 1.2.25",id:"control-1225",level:3},{value:"Control 1.2.26",id:"control-1226",level:3},{value:"Control 1.2.27",id:"control-1227",level:3},{value:"Control 1.2.33",id:"control-1233",level:3},{value:"Control 1.2.34",id:"control-1234",level:3},{value:"Control 1.3.1",id:"control-131",level:3},{value:"Control 3.2.1",id:"control-321",level:3},{value:"Control 4.2.7",id:"control-427",level:3},{value:"Control 5.1.5",id:"control-515",level:3},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=u("Tabs"),d=u("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."),(0,r.kt)("p",null,"K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"K3s will not modify the host operating system. Any host-level modifications will need to be done manually."),(0,r.kt)("li",{parentName:"ol"},"Certain CIS policy controls for ",(0,r.kt)("inlineCode",{parentName:"li"},"NetworkPolicies")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityStandards")," (",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicies")," on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.")),(0,r.kt)("p",null,"The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary."),(0,r.kt)("h2",{id:"host-level-requirements"},"Host-level Requirements"),(0,r.kt)("p",null,"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section."),(0,r.kt)("h3",{id:"ensure-protect-kernel-defaults-is-set"},"Ensure ",(0,r.kt)("inlineCode",{parentName:"h3"},"protect-kernel-defaults")," is set"),(0,r.kt)("p",null,"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults."),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," ",(0,r.kt)("inlineCode",{parentName:"p"},"protect-kernel-defaults")," is exposed as a top-level flag for K3s.")),(0,r.kt)("h4",{id:"set-kernel-parameters"},"Set kernel parameters"),(0,r.kt)("p",null,"Create a file called ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/sysctl.d/90-kubelet.conf")," and add the snippet below. Then run ",(0,r.kt)("inlineCode",{parentName:"p"},"sysctl -p /etc/sysctl.d/90-kubelet.conf"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"vm.panic_on_oom=0\nvm.overcommit_memory=1\nkernel.panic=10\nkernel.panic_on_oops=1\nkernel.keys.root_maxbytes=25000000\n")),(0,r.kt)("h2",{id:"kubernetes-runtime-requirements"},"Kubernetes Runtime Requirements"),(0,r.kt)("p",null,"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section."),(0,r.kt)("p",null,"By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurity")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," admission controllers enabled, among others."),(0,r.kt)("h3",{id:"pod-security"},"Pod Security"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.25 and newer support ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/"},"Pod Security Admissions (PSAs)")," for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n')),(0,r.kt)("p",null,"The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"psa.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. "),(0,r.kt)("p",null,"Here is an example of a compliant PSA:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system]\n'))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.24 and older support ",(0,r.kt)("a",{parentName:"p",href:"https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/"},"Pod Security Policies (PSPs)")," for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="enable-admission-plugins=NodeRestriction,PodSecurityPolicy"\n')),(0,r.kt)("p",null,"This will have the effect of maintaining the ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," plugin as well as enabling the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy"),". "),(0,r.kt)("p",null,"When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark."),(0,r.kt)("p",null,"Here is an example of a compliant PSP:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false                # CIS - 5.2.1\n  allowPrivilegeEscalation: false  # CIS - 5.2.5\n  requiredDropCapabilities:        # CIS - 5.2.7/8/9\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false               # CIS - 5.2.4\n  hostIPC: false                   # CIS - 5.2.3\n  hostPID: false                   # CIS - 5.2.2\n  runAsUser:\n    rule: 'MustRunAsNonRoot'       # CIS - 5.2.6\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n")),(0,r.kt)("p",null,'For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a "system unrestricted policy" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.'),(0,r.kt)("p",null,"Combining the configuration above with the ",(0,r.kt)("a",{parentName:"p",href:"#networkpolicies"},"Network Policy")," described in the next section, a single file can be placed in the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory. Here is an example of a ",(0,r.kt)("inlineCode",{parentName:"p"},"policy.yaml")," file: "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false\n  allowPrivilegeEscalation: false\n  requiredDropCapabilities:\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false\n  hostIPC: false\n  hostPID: false\n  runAsUser:\n    rule: 'MustRunAsNonRoot'\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: system-unrestricted-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: true\n  allowedCapabilities:\n  - '*'\n  fsGroup:\n    rule: RunAsAny\n  hostIPC: true\n  hostNetwork: true\n  hostPID: true\n  hostPorts:\n  - max: 65535\n    min: 0\n  privileged: true\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n  volumes:\n  - '*'\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: svclb-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: false\n  allowedCapabilities:\n  - NET_ADMIN\n  allowedUnsafeSysctls:\n  - net.ipv4.ip_forward\n  - net.ipv6.conf.all.forwarding\n  fsGroup:\n    rule: RunAsAny\n  hostPorts:\n  - max: 65535\n    min: 0\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:restricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  verbs:\n  - use\n  resourceNames:\n  - restricted-psp\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:system-unrestricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - system-unrestricted-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:svclb-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - svclb-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: default:restricted-psp\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:restricted-psp\nsubjects:\n- kind: Group\n  name: system:authenticated\n  apiGroup: rbac.authorization.k8s.io\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: system-unrestricted-node-psp-rolebinding\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: system-unrestricted-svc-acct-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:serviceaccounts\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: svclb-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:svclb-psp\nsubjects:\n- kind: ServiceAccount\n  name: svclb\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: default\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: default\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-public\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-public\n")))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.")),(0,r.kt)("h3",{id:"networkpolicies"},"NetworkPolicies"),(0,r.kt)("p",null,"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods."),(0,r.kt)("p",null,"Network policies should be placed the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory, where they will automatically be deployed on startup."),(0,r.kt)("p",null,"Here is an example of a compliant network policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"kind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n")),(0,r.kt)("p",null,"With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: default-network-dns-policy\n  namespace: <NAMESPACE>\nspec:\n  ingress:\n  - ports:\n    - port: 53\n      protocol: TCP\n    - port: 53\n      protocol: UDP\n  podSelector:\n    matchLabels:\n      k8s-app: kube-dns\n  policyTypes:\n  - Ingress\n")),(0,r.kt)("p",null,"The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.21 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v121-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app.kubernetes.io/name: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n"))),(0,r.kt)(d,{value:"v1.20 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v120-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n")))),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Operators must manage network policies as normal for additional namespaces that are created.")),(0,r.kt)("h3",{id:"api-server-audit-configuration"},"API Server audit configuration"),(0,r.kt)("p",null,"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment."),(0,r.kt)("p",null,"The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs\n")),(0,r.kt)("p",null,"A starter audit policy to log request metadata is provided below. The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"audit.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. Detailed information about policy configuration for the API server can be found in the Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/debug-application-cluster/audit/"},"documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: audit.k8s.io/v1\nkind: Policy\nrules:\n- level: Metadata\n")),(0,r.kt)("p",null,"Both configurations must be passed as arguments to the API Server as:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"--kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n--kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n")),(0,r.kt)("p",null,"If the configurations are created after K3s is installed, they must be added to K3s' systemd service in ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ExecStart=/usr/local/bin/k3s \\\n    server \\\n    '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\\n    '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\\n")),(0,r.kt)("p",null,"K3s must be restarted to load the new configuration."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo systemctl daemon-reload\nsudo systemctl restart k3s.service\n")),(0,r.kt)("h2",{id:"configuration-for-kubernetes-components"},"Configuration for Kubernetes Components"),(0,r.kt)("p",null,"The configuration below should be placed in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"configuration file"),", and contains all the necessary remediations to harden the Kubernetes components."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n"))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")))),(0,r.kt)("h2",{id:"control-plane-execution-and-arguments"},"Control Plane Execution and Arguments"),(0,r.kt)("p",null,"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-apiserver \n    --advertise-port=6443 \n    --allow-privileged=true \n    --anonymous-auth=false                                                            # 1.2.1\n    --api-audiences=unknown \n    --authorization-mode=Node,RBAC \n    --bind-address=127.0.0.1 \n    --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs\n    --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt                    # 1.2.31\n    --enable-admission-plugins=NodeRestriction,PodSecurityPolicy                      # 1.2.17\n    --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  # 1.2.32\n    --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt                   # 1.2.29\n    --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key                    # 1.2.29\n    --etcd-servers=https://127.0.0.1:2379 \n    --insecure-port=0                                                                 # 1.2.19\n    --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt \n    --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt \n    --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key \n    --profiling=false                                                                 # 1.2.21\n    --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt \n    --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key \n    --requestheader-allowed-names=system:auth-proxy \n    --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt \n    --requestheader-extra-headers-prefix=X-Remote-Extra- \n    --requestheader-group-headers=X-Remote-Group \n    --requestheader-username-headers=X-Remote-User \n    --secure-port=6444                                                                # 1.2.20\n    --service-account-issuer=k3s \n    --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key            # 1.2.28\n    --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key \n    --service-cluster-ip-range=10.43.0.0/16 \n    --storage-backend=etcd3 \n    --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        # 1.2.30\n    --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30\n    --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-controller-manager \n    --address=127.0.0.1 \n    --allocate-node-cidrs=true \n    --bind-address=127.0.0.1                                                       # 1.3.7\n    --cluster-cidr=10.42.0.0/16 \n    --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt \n    --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key \n    --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig \n    --port=10252 \n    --profiling=false                                                              # 1.3.2\n    --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt                   # 1.3.5\n    --secure-port=0 \n    --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 \n    --use-service-account-credentials=true                                         # 1.3.3\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-scheduler \n    --address=127.0.0.1 \n    --bind-address=127.0.0.1                                              # 1.4.2\n    --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig \n    --port=10251 \n    --profiling=false                                                     # 1.4.1\n    --secure-port=0\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubelet \n    --address=0.0.0.0 \n    --anonymous-auth=false                                                # 4.2.1\n    --authentication-token-webhook=true \n    --authorization-mode=Webhook                                          # 4.2.2\n    --cgroup-driver=cgroupfs \n    --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt             # 4.2.3\n    --cloud-provider=external \n    --cluster-dns=10.43.0.10 \n    --cluster-domain=cluster.local \n    --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin \n    --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d \n    --container-runtime-endpoint=/run/k3s/containerd/containerd.sock \n    --container-runtime=remote \n    --containerd=/run/k3s/containerd/containerd.sock \n    --eviction-hard=imagefs.available<5%,nodefs.available<5% \n    --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% \n    --fail-swap-on=false \n    --healthz-bind-address=127.0.0.1 \n    --hostname-override=hostname01 \n    --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig \n    --kubelet-cgroups=/systemd/system.slice \n    --node-labels= \n    --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests \n    --protect-kernel-defaults=true                                        # 4.2.6\n    --read-only-port=0                                                    # 4.2.4\n    --resolv-conf=/run/systemd/resolve/resolv.conf \n    --runtime-cgroups=/systemd/system.slice \n    --serialize-image-pulls=false \n    --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt        # 4.2.10\n    --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10\n")),(0,r.kt)("p",null,"Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below."),(0,r.kt)("h2",{id:"known-issues"},"Known Issues"),(0,r.kt)("p",null,"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s."),(0,r.kt)("h3",{id:"control-1215"},"Control 1.2.15"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"NamespaceLifecycle")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1216"},"Control 1.2.16"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1222"},"Control 1.2.22"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-path")," argument is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1223"},"Control 1.2.23"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxage")," argument is set to 30 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1224"},"Control 1.2.24"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxbackup")," argument is set to 10 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1225"},"Control 1.2.25"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxsize")," argument is set to 100 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1226"},"Control 1.2.26"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--request-timeout")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1227"},"Control 1.2.27"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--service-account-lookup")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1233"},"Control 1.2.33"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--encryption-provider-config")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.",(0,r.kt)("p",null,"Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/kr/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-1234"},"Control 1.2.34"),(0,r.kt)("p",null,"Ensure that encryption providers are appropriately configured."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.",(0,r.kt)("p",null,"This can be remediated by passing a valid configuration to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/kr/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-131"},"Control 1.3.1"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--terminated-pod-gc-threshold")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-321"},"Control 3.2.1"),(0,r.kt)("p",null,"Ensure that a minimal audit policy is created."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Logging is an important detective control for all systems, to detect potential unauthorized access.",(0,r.kt)("p",null,"This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.")),(0,r.kt)("h3",{id:"control-427"},"Control 4.2.7"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--make-iptables-util-chains")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-515"},"Control 5.1.5"),(0,r.kt)("p",null,"Ensure that default service accounts are not actively used"),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.",(0,r.kt)("p",null,"Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account."),(0,r.kt)("p",null,"The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments."),(0,r.kt)("p",null,"This can be remediated by updating the ",(0,r.kt)("inlineCode",{parentName:"p"},"automountServiceAccountToken")," field to ",(0,r.kt)("inlineCode",{parentName:"p"},"false")," for the ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service account in each namespace."),(0,r.kt)("p",null,"For ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service accounts in the built-in namespaces (",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-public"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-node-lease"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"default"),"), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.")),(0,r.kt)("h2",{id:"conclusion"},"Conclusion"),(0,r.kt)("p",null,"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the ",(0,r.kt)("a",{parentName:"p",href:"/kr/security/self-assessment"},"CIS Benchmark Self-Assessment Guide")," to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/1a4e3797.8b5db6d2.js b/kr/assets/js/1a4e3797.8b5db6d2.js
new file mode 100644
index 000000000..a1c4e7927
--- /dev/null
+++ b/kr/assets/js/1a4e3797.8b5db6d2.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7920],{2027:(e,t,a)=>{a.r(t),a.d(t,{default:()=>A});var r=a(7294),n=a(2263),l=a(1573),s=a(5742),c=a(9960),o=a(5999);const u=["zero","one","two","few","many","other"];function m(e){return u.filter((t=>e.includes(t)))}const h={locale:"en",pluralForms:m(["one","other"]),select:e=>1===e?"one":"other"};function i(){const{i18n:{currentLocale:e}}=(0,n.Z)();return(0,r.useMemo)((()=>{try{return function(e){const t=new Intl.PluralRules(e);return{locale:e,pluralForms:m(t.resolvedOptions().pluralCategories),select:e=>t.select(e)}}(e)}catch(t){return console.error(`Failed to use Intl.PluralRules for locale "${e}".\nDocusaurus will fallback to the default (English) implementation.\nError: ${t.message}\n`),h}}),[e])}function p(){const e=i();return{selectMessage:(t,a)=>function(e,t,a){const r=e.split("|");if(1===r.length)return r[0];r.length>a.pluralForms.length&&console.error(`For locale=${a.locale}, a maximum of ${a.pluralForms.length} plural forms are expected (${a.pluralForms.join(",")}), but the message contains ${r.length}: ${e}`);const n=a.select(t),l=a.pluralForms.indexOf(n);return r[Math.min(l,r.length-1)]}(a,t,e)}}var g=a(6010),d=a(6775),f=a(412);const y=function(){const e=(0,d.k6)(),t=(0,d.TH)(),{siteConfig:{baseUrl:a}}=(0,n.Z)(),r=f.Z.canUseDOM?new URLSearchParams(t.search):null,l=r?.get("q")||"",s=r?.get("ctx")||"",c=r?.get("version")||"",o=e=>{const a=new URLSearchParams(t.search);return e?a.set("q",e):a.delete("q"),a};return{searchValue:l,searchContext:s,searchVersion:c,updateSearchPath:t=>{const a=o(t);e.replace({search:a.toString()})},updateSearchContext:a=>{const r=new URLSearchParams(t.search);r.set("ctx",a),e.replace({search:r.toString()})},generateSearchPageLink:e=>{const t=o(e);return`${a}search?${t.toString()}`}}};var E=a(22),S=a(8202),v=a(2539),w=a(726),x=a(1073),C=a(311),_=a(3926),I=a(1029);const P="searchContextInput_mXoe",b="searchQueryInput_CFBF",k="searchResultItem_U687",F="searchResultItemPath_uIbk",R="searchResultItemSummary_oZHr",$="searchQueryColumn_q7nx",Z="searchContextColumn_oWAF";function N(){const{siteConfig:{baseUrl:e}}=(0,n.Z)(),{selectMessage:t}=p(),{searchValue:a,searchContext:l,searchVersion:c,updateSearchPath:u,updateSearchContext:m}=y(),[h,i]=(0,r.useState)(a),[d,f]=(0,r.useState)(),[v,w]=(0,r.useState)(),x=`${e}${c}`,_=(0,r.useMemo)((()=>h?(0,o.I)({id:"theme.SearchPage.existingResultsTitle",message:'Search results for "{query}"',description:"The search page title for non-empty query"},{query:h}):(0,o.I)({id:"theme.SearchPage.emptyResultsTitle",message:"Search the documentation",description:"The search page title for empty query"})),[h]);(0,r.useEffect)((()=>{u(h),d&&(h?d(h,(e=>{w(e)})):w(void 0))}),[h,d]);const k=(0,r.useCallback)((e=>{i(e.target.value)}),[]);return(0,r.useEffect)((()=>{a&&a!==h&&i(a)}),[a]),(0,r.useEffect)((()=>{!async function(){const{wrappedIndexes:e,zhDictionary:t}=await(0,E.w)(x,l);f((()=>(0,S.v)(e,t,100)))}()}),[l,x]),r.createElement(r.Fragment,null,r.createElement(s.Z,null,r.createElement("meta",{property:"robots",content:"noindex, follow"}),r.createElement("title",null,_)),r.createElement("div",{className:"container margin-vert--lg"},r.createElement("h1",null,_),r.createElement("div",{className:"row"},r.createElement("div",{className:(0,g.Z)("col",{[$]:Array.isArray(I.Kc),"col--9":Array.isArray(I.Kc),"col--12":!Array.isArray(I.Kc)})},r.createElement("input",{type:"search",name:"q",className:b,"aria-label":"Search",onChange:k,value:h,autoComplete:"off",autoFocus:!0})),Array.isArray(I.Kc)?r.createElement("div",{className:(0,g.Z)("col","col--3","padding-left--none",Z)},r.createElement("select",{name:"search-context",className:P,id:"context-selector",value:l,onChange:e=>m(e.target.value)},r.createElement("option",{value:""},I.pQ?(0,o.I)({id:"theme.SearchPage.searchContext.everywhere",message:"everywhere"}):""),I.Kc.map((e=>r.createElement("option",{key:e,value:e},e))))):null),!d&&h&&r.createElement("div",null,r.createElement(C.Z,null)),v&&(v.length>0?r.createElement("p",null,t(v.length,(0,o.I)({id:"theme.SearchPage.documentsFound.plurals",message:"1 document found|{count} documents found",description:'Pluralized label for "{count} documents found". Use as much plural forms (separated by "|") as your language support (see https://www.unicode.org/cldr/cldr-aux/charts/34/supplemental/language_plural_rules.html)'},{count:v.length}))):r.createElement("p",null,(0,o.I)({id:"theme.SearchPage.noResultsText",message:"No documents were found",description:"The paragraph for empty search result"}))),r.createElement("section",null,v&&v.map((e=>r.createElement(q,{key:e.document.i,searchResult:e}))))))}function q(e){let{searchResult:{document:t,type:a,page:n,tokens:l,metadata:s}}=e;const o=0===a,u=2===a,m=(o?t.b:n.b).slice(),h=u?t.s:t.t;o||m.push(n.t);let i="";if(I.vc&&l.length>0){const e=new URLSearchParams;for(const t of l)e.append("_highlight",t);i=`?${e.toString()}`}return r.createElement("article",{className:k},r.createElement("h2",null,r.createElement(c.Z,{to:t.u+i+(t.h||""),dangerouslySetInnerHTML:{__html:u?(0,v.C)(h,l):(0,w.o)(h,(0,x.m)(s,"t"),l,100)}})),m.length>0&&r.createElement("p",{className:F},(0,_.e)(m)),u&&r.createElement("p",{className:R,dangerouslySetInnerHTML:{__html:(0,w.o)(t.t,(0,x.m)(s,"t"),l,100)}}))}const A=function(){return r.createElement(l.Z,null,r.createElement(N,null))}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/1a4e3797.ac674e56.js b/kr/assets/js/1a4e3797.ac674e56.js
deleted file mode 100644
index cafabe255..000000000
--- a/kr/assets/js/1a4e3797.ac674e56.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see 1a4e3797.ac674e56.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7920],{7331:e=>{function t(){this._events=this._events||{},this._maxListeners=this._maxListeners||void 0}function r(e){return"function"==typeof e}function n(e){return"object"==typeof e&&null!==e}function i(e){return void 0===e}e.exports=t,t.prototype._events=void 0,t.prototype._maxListeners=void 0,t.defaultMaxListeners=10,t.prototype.setMaxListeners=function(e){if("number"!=typeof e||e<0||isNaN(e))throw TypeError("n must be a positive number");return this._maxListeners=e,this},t.prototype.emit=function(e){var t,a,s,c,u,o;if(this._events||(this._events={}),"error"===e&&(!this._events.error||n(this._events.error)&&!this._events.error.length)){if((t=arguments[1])instanceof Error)throw t;var h=new Error('Uncaught, unspecified "error" event. ('+t+")");throw h.context=t,h}if(i(a=this._events[e]))return!1;if(r(a))switch(arguments.length){case 1:a.call(this);break;case 2:a.call(this,arguments[1]);break;case 3:a.call(this,arguments[1],arguments[2]);break;default:c=Array.prototype.slice.call(arguments,1),a.apply(this,c)}else if(n(a))for(c=Array.prototype.slice.call(arguments,1),s=(o=a.slice()).length,u=0;u<s;u++)o[u].apply(this,c);return!0},t.prototype.addListener=function(e,a){var s;if(!r(a))throw TypeError("listener must be a function");return this._events||(this._events={}),this._events.newListener&&this.emit("newListener",e,r(a.listener)?a.listener:a),this._events[e]?n(this._events[e])?this._events[e].push(a):this._events[e]=[this._events[e],a]:this._events[e]=a,n(this._events[e])&&!this._events[e].warned&&(s=i(this._maxListeners)?t.defaultMaxListeners:this._maxListeners)&&s>0&&this._events[e].length>s&&(this._events[e].warned=!0,console.error("(node) warning: possible EventEmitter memory leak detected. %d listeners added. Use emitter.setMaxListeners() to increase limit.",this._events[e].length),"function"==typeof console.trace&&console.trace()),this},t.prototype.on=t.prototype.addListener,t.prototype.once=function(e,t){if(!r(t))throw TypeError("listener must be a function");var n=!1;function i(){this.removeListener(e,i),n||(n=!0,t.apply(this,arguments))}return i.listener=t,this.on(e,i),this},t.prototype.removeListener=function(e,t){var i,a,s,c;if(!r(t))throw TypeError("listener must be a function");if(!this._events||!this._events[e])return this;if(s=(i=this._events[e]).length,a=-1,i===t||r(i.listener)&&i.listener===t)delete this._events[e],this._events.removeListener&&this.emit("removeListener",e,t);else if(n(i)){for(c=s;c-- >0;)if(i[c]===t||i[c].listener&&i[c].listener===t){a=c;break}if(a<0)return this;1===i.length?(i.length=0,delete this._events[e]):i.splice(a,1),this._events.removeListener&&this.emit("removeListener",e,t)}return this},t.prototype.removeAllListeners=function(e){var t,n;if(!this._events)return this;if(!this._events.removeListener)return 0===arguments.length?this._events={}:this._events[e]&&delete this._events[e],this;if(0===arguments.length){for(t in this._events)"removeListener"!==t&&this.removeAllListeners(t);return this.removeAllListeners("removeListener"),this._events={},this}if(r(n=this._events[e]))this.removeListener(e,n);else if(n)for(;n.length;)this.removeListener(e,n[n.length-1]);return delete this._events[e],this},t.prototype.listeners=function(e){return this._events&&this._events[e]?r(this._events[e])?[this._events[e]]:this._events[e].slice():[]},t.prototype.listenerCount=function(e){if(this._events){var t=this._events[e];if(r(t))return 1;if(t)return t.length}return 0},t.listenerCount=function(e,t){return e.listenerCount(t)}},8131:(e,t,r)=>{"use strict";var n=r(9374),i=r(7775),a=r(3076);function s(e,t,r){return new n(e,t,r)}s.version=r(4336),s.AlgoliaSearchHelper=n,s.SearchParameters=i,s.SearchResults=a,e.exports=s},8078:(e,t,r)=>{"use strict";var n=r(7331);function i(e,t){this.main=e,this.fn=t,this.lastResults=null}r(4853)(i,n),i.prototype.detach=function(){this.removeAllListeners(),this.main.detachDerivedHelper(this)},i.prototype.getModifiedState=function(e){return this.fn(e)},e.exports=i},2437:(e,t,r)=>{"use strict";var n=r(3336),i=r(9803),a=r(116),s={addRefinement:function(e,t,r){if(s.isRefined(e,t,r))return e;var i=""+r,a=e[t]?e[t].concat(i):[i],c={};return c[t]=a,n({},c,e)},removeRefinement:function(e,t,r){if(void 0===r)return s.clearRefinement(e,(function(e,r){return t===r}));var n=""+r;return s.clearRefinement(e,(function(e,r){return t===r&&n===e}))},toggleRefinement:function(e,t,r){if(void 0===r)throw new Error("toggleRefinement should be used with a value");return s.isRefined(e,t,r)?s.removeRefinement(e,t,r):s.addRefinement(e,t,r)},clearRefinement:function(e,t,r){if(void 0===t)return a(e)?{}:e;if("string"==typeof t)return i(e,[t]);if("function"==typeof t){var n=!1,s=Object.keys(e).reduce((function(i,a){var s=e[a]||[],c=s.filter((function(e){return!t(e,a,r)}));return c.length!==s.length&&(n=!0),i[a]=c,i}),{});return n?s:e}},isRefined:function(e,t,r){var n=!!e[t]&&e[t].length>0;if(void 0===r||!n)return n;var i=""+r;return-1!==e[t].indexOf(i)}};e.exports=s},7775:(e,t,r)=>{"use strict";var n=r(185),i=r(3336),a=r(2686),s=r(7888),c=r(8023),u=r(9803),o=r(116),h=r(6801),f=r(2437);function l(e,t){return Array.isArray(e)&&Array.isArray(t)?e.length===t.length&&e.every((function(e,r){return l(t[r],e)})):e===t}function m(e){var t=e?m._parseNumbers(e):{};void 0===t.userToken||h(t.userToken)||console.warn("[algoliasearch-helper] The `userToken` parameter is invalid. This can lead to wrong analytics.\n  - Format: [a-zA-Z0-9_-]{1,64}"),this.facets=t.facets||[],this.disjunctiveFacets=t.disjunctiveFacets||[],this.hierarchicalFacets=t.hierarchicalFacets||[],this.facetsRefinements=t.facetsRefinements||{},this.facetsExcludes=t.facetsExcludes||{},this.disjunctiveFacetsRefinements=t.disjunctiveFacetsRefinements||{},this.numericRefinements=t.numericRefinements||{},this.tagRefinements=t.tagRefinements||[],this.hierarchicalFacetsRefinements=t.hierarchicalFacetsRefinements||{};var r=this;Object.keys(t).forEach((function(e){var n=-1!==m.PARAMETERS.indexOf(e),i=void 0!==t[e];!n&&i&&(r[e]=t[e])}))}m.PARAMETERS=Object.keys(new m),m._parseNumbers=function(e){if(e instanceof m)return e;var t={};if(["aroundPrecision","aroundRadius","getRankingInfo","minWordSizefor2Typos","minWordSizefor1Typo","page","maxValuesPerFacet","distinct","minimumAroundRadius","hitsPerPage","minProximity"].forEach((function(r){var n=e[r];if("string"==typeof n){var i=parseFloat(n);t[r]=isNaN(i)?n:i}})),Array.isArray(e.insideBoundingBox)&&(t.insideBoundingBox=e.insideBoundingBox.map((function(e){return Array.isArray(e)?e.map((function(e){return parseFloat(e)})):e}))),e.numericRefinements){var r={};Object.keys(e.numericRefinements).forEach((function(t){var n=e.numericRefinements[t]||{};r[t]={},Object.keys(n).forEach((function(e){var i=n[e].map((function(e){return Array.isArray(e)?e.map((function(e){return"string"==typeof e?parseFloat(e):e})):"string"==typeof e?parseFloat(e):e}));r[t][e]=i}))})),t.numericRefinements=r}return n({},e,t)},m.make=function(e){var t=new m(e);return(e.hierarchicalFacets||[]).forEach((function(e){if(e.rootPath){var r=t.getHierarchicalRefinement(e.name);r.length>0&&0!==r[0].indexOf(e.rootPath)&&(t=t.clearRefinements(e.name)),0===(r=t.getHierarchicalRefinement(e.name)).length&&(t=t.toggleHierarchicalFacetRefinement(e.name,e.rootPath))}})),t},m.validate=function(e,t){var r=t||{};return e.tagFilters&&r.tagRefinements&&r.tagRefinements.length>0?new Error("[Tags] Cannot switch from the managed tag API to the advanced API. It is probably an error, if it is really what you want, you should first clear the tags with clearTags method."):e.tagRefinements.length>0&&r.tagFilters?new Error("[Tags] Cannot switch from the advanced tag API to the managed API. It is probably an error, if it is not, you should first clear the tags with clearTags method."):e.numericFilters&&r.numericRefinements&&o(r.numericRefinements)?new Error("[Numeric filters] Can't switch from the advanced to the managed API. It is probably an error, if this is really what you want, you have to first clear the numeric filters."):o(e.numericRefinements)&&r.numericFilters?new Error("[Numeric filters] Can't switch from the managed API to the advanced. It is probably an error, if this is really what you want, you have to first clear the numeric filters."):null},m.prototype={constructor:m,clearRefinements:function(e){var t={numericRefinements:this._clearNumericRefinements(e),facetsRefinements:f.clearRefinement(this.facetsRefinements,e,"conjunctiveFacet"),facetsExcludes:f.clearRefinement(this.facetsExcludes,e,"exclude"),disjunctiveFacetsRefinements:f.clearRefinement(this.disjunctiveFacetsRefinements,e,"disjunctiveFacet"),hierarchicalFacetsRefinements:f.clearRefinement(this.hierarchicalFacetsRefinements,e,"hierarchicalFacet")};return t.numericRefinements===this.numericRefinements&&t.facetsRefinements===this.facetsRefinements&&t.facetsExcludes===this.facetsExcludes&&t.disjunctiveFacetsRefinements===this.disjunctiveFacetsRefinements&&t.hierarchicalFacetsRefinements===this.hierarchicalFacetsRefinements?this:this.setQueryParameters(t)},clearTags:function(){return void 0===this.tagFilters&&0===this.tagRefinements.length?this:this.setQueryParameters({tagFilters:void 0,tagRefinements:[]})},setIndex:function(e){return e===this.index?this:this.setQueryParameters({index:e})},setQuery:function(e){return e===this.query?this:this.setQueryParameters({query:e})},setPage:function(e){return e===this.page?this:this.setQueryParameters({page:e})},setFacets:function(e){return this.setQueryParameters({facets:e})},setDisjunctiveFacets:function(e){return this.setQueryParameters({disjunctiveFacets:e})},setHitsPerPage:function(e){return this.hitsPerPage===e?this:this.setQueryParameters({hitsPerPage:e})},setTypoTolerance:function(e){return this.typoTolerance===e?this:this.setQueryParameters({typoTolerance:e})},addNumericRefinement:function(e,t,r){var i=c(r);if(this.isNumericRefined(e,t,i))return this;var a=n({},this.numericRefinements);return a[e]=n({},a[e]),a[e][t]?(a[e][t]=a[e][t].slice(),a[e][t].push(i)):a[e][t]=[i],this.setQueryParameters({numericRefinements:a})},getConjunctiveRefinements:function(e){return this.isConjunctiveFacet(e)&&this.facetsRefinements[e]||[]},getDisjunctiveRefinements:function(e){return this.isDisjunctiveFacet(e)&&this.disjunctiveFacetsRefinements[e]||[]},getHierarchicalRefinement:function(e){return this.hierarchicalFacetsRefinements[e]||[]},getExcludeRefinements:function(e){return this.isConjunctiveFacet(e)&&this.facetsExcludes[e]||[]},removeNumericRefinement:function(e,t,r){return void 0!==r?this.isNumericRefined(e,t,r)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(n,i){return i===e&&n.op===t&&l(n.val,c(r))}))}):this:void 0!==t?this.isNumericRefined(e,t)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(r,n){return n===e&&r.op===t}))}):this:this.isNumericRefined(e)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(t,r){return r===e}))}):this},getNumericRefinements:function(e){return this.numericRefinements[e]||{}},getNumericRefinement:function(e,t){return this.numericRefinements[e]&&this.numericRefinements[e][t]},_clearNumericRefinements:function(e){if(void 0===e)return o(this.numericRefinements)?{}:this.numericRefinements;if("string"==typeof e)return u(this.numericRefinements,[e]);if("function"==typeof e){var t=!1,r=this.numericRefinements,n=Object.keys(r).reduce((function(n,i){var a=r[i],s={};return a=a||{},Object.keys(a).forEach((function(r){var n=a[r]||[],c=[];n.forEach((function(t){e({val:t,op:r},i,"numeric")||c.push(t)})),c.length!==n.length&&(t=!0),s[r]=c})),n[i]=s,n}),{});return t?n:this.numericRefinements}},addFacet:function(e){return this.isConjunctiveFacet(e)?this:this.setQueryParameters({facets:this.facets.concat([e])})},addDisjunctiveFacet:function(e){return this.isDisjunctiveFacet(e)?this:this.setQueryParameters({disjunctiveFacets:this.disjunctiveFacets.concat([e])})},addHierarchicalFacet:function(e){if(this.isHierarchicalFacet(e.name))throw new Error("Cannot declare two hierarchical facets with the same name: `"+e.name+"`");return this.setQueryParameters({hierarchicalFacets:this.hierarchicalFacets.concat([e])})},addFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsRefinements,e,t)?this:this.setQueryParameters({facetsRefinements:f.addRefinement(this.facetsRefinements,e,t)})},addExcludeRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsExcludes,e,t)?this:this.setQueryParameters({facetsExcludes:f.addRefinement(this.facetsExcludes,e,t)})},addDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return f.isRefined(this.disjunctiveFacetsRefinements,e,t)?this:this.setQueryParameters({disjunctiveFacetsRefinements:f.addRefinement(this.disjunctiveFacetsRefinements,e,t)})},addTagRefinement:function(e){if(this.isTagRefined(e))return this;var t={tagRefinements:this.tagRefinements.concat(e)};return this.setQueryParameters(t)},removeFacet:function(e){return this.isConjunctiveFacet(e)?this.clearRefinements(e).setQueryParameters({facets:this.facets.filter((function(t){return t!==e}))}):this},removeDisjunctiveFacet:function(e){return this.isDisjunctiveFacet(e)?this.clearRefinements(e).setQueryParameters({disjunctiveFacets:this.disjunctiveFacets.filter((function(t){return t!==e}))}):this},removeHierarchicalFacet:function(e){return this.isHierarchicalFacet(e)?this.clearRefinements(e).setQueryParameters({hierarchicalFacets:this.hierarchicalFacets.filter((function(t){return t.name!==e}))}):this},removeFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsRefinements,e,t)?this.setQueryParameters({facetsRefinements:f.removeRefinement(this.facetsRefinements,e,t)}):this},removeExcludeRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsExcludes,e,t)?this.setQueryParameters({facetsExcludes:f.removeRefinement(this.facetsExcludes,e,t)}):this},removeDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return f.isRefined(this.disjunctiveFacetsRefinements,e,t)?this.setQueryParameters({disjunctiveFacetsRefinements:f.removeRefinement(this.disjunctiveFacetsRefinements,e,t)}):this},removeTagRefinement:function(e){if(!this.isTagRefined(e))return this;var t={tagRefinements:this.tagRefinements.filter((function(t){return t!==e}))};return this.setQueryParameters(t)},toggleRefinement:function(e,t){return this.toggleFacetRefinement(e,t)},toggleFacetRefinement:function(e,t){if(this.isHierarchicalFacet(e))return this.toggleHierarchicalFacetRefinement(e,t);if(this.isConjunctiveFacet(e))return this.toggleConjunctiveFacetRefinement(e,t);if(this.isDisjunctiveFacet(e))return this.toggleDisjunctiveFacetRefinement(e,t);throw new Error("Cannot refine the undeclared facet "+e+"; it should be added to the helper options facets, disjunctiveFacets or hierarchicalFacets")},toggleConjunctiveFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return this.setQueryParameters({facetsRefinements:f.toggleRefinement(this.facetsRefinements,e,t)})},toggleExcludeFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return this.setQueryParameters({facetsExcludes:f.toggleRefinement(this.facetsExcludes,e,t)})},toggleDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return this.setQueryParameters({disjunctiveFacetsRefinements:f.toggleRefinement(this.disjunctiveFacetsRefinements,e,t)})},toggleHierarchicalFacetRefinement:function(e,t){if(!this.isHierarchicalFacet(e))throw new Error(e+" is not defined in the hierarchicalFacets attribute of the helper configuration");var r=this._getHierarchicalFacetSeparator(this.getHierarchicalFacetByName(e)),n={};return void 0!==this.hierarchicalFacetsRefinements[e]&&this.hierarchicalFacetsRefinements[e].length>0&&(this.hierarchicalFacetsRefinements[e][0]===t||0===this.hierarchicalFacetsRefinements[e][0].indexOf(t+r))?-1===t.indexOf(r)?n[e]=[]:n[e]=[t.slice(0,t.lastIndexOf(r))]:n[e]=[t],this.setQueryParameters({hierarchicalFacetsRefinements:i({},n,this.hierarchicalFacetsRefinements)})},addHierarchicalFacetRefinement:function(e,t){if(this.isHierarchicalFacetRefined(e))throw new Error(e+" is already refined.");if(!this.isHierarchicalFacet(e))throw new Error(e+" is not defined in the hierarchicalFacets attribute of the helper configuration.");var r={};return r[e]=[t],this.setQueryParameters({hierarchicalFacetsRefinements:i({},r,this.hierarchicalFacetsRefinements)})},removeHierarchicalFacetRefinement:function(e){if(!this.isHierarchicalFacetRefined(e))return this;var t={};return t[e]=[],this.setQueryParameters({hierarchicalFacetsRefinements:i({},t,this.hierarchicalFacetsRefinements)})},toggleTagRefinement:function(e){return this.isTagRefined(e)?this.removeTagRefinement(e):this.addTagRefinement(e)},isDisjunctiveFacet:function(e){return this.disjunctiveFacets.indexOf(e)>-1},isHierarchicalFacet:function(e){return void 0!==this.getHierarchicalFacetByName(e)},isConjunctiveFacet:function(e){return this.facets.indexOf(e)>-1},isFacetRefined:function(e,t){return!!this.isConjunctiveFacet(e)&&f.isRefined(this.facetsRefinements,e,t)},isExcludeRefined:function(e,t){return!!this.isConjunctiveFacet(e)&&f.isRefined(this.facetsExcludes,e,t)},isDisjunctiveFacetRefined:function(e,t){return!!this.isDisjunctiveFacet(e)&&f.isRefined(this.disjunctiveFacetsRefinements,e,t)},isHierarchicalFacetRefined:function(e,t){if(!this.isHierarchicalFacet(e))return!1;var r=this.getHierarchicalRefinement(e);return t?-1!==r.indexOf(t):r.length>0},isNumericRefined:function(e,t,r){if(void 0===r&&void 0===t)return!!this.numericRefinements[e];var n=this.numericRefinements[e]&&void 0!==this.numericRefinements[e][t];if(void 0===r||!n)return n;var i,a,u=c(r),o=void 0!==(i=this.numericRefinements[e][t],a=u,s(i,(function(e){return l(e,a)})));return n&&o},isTagRefined:function(e){return-1!==this.tagRefinements.indexOf(e)},getRefinedDisjunctiveFacets:function(){var e=this,t=a(Object.keys(this.numericRefinements).filter((function(t){return Object.keys(e.numericRefinements[t]).length>0})),this.disjunctiveFacets);return Object.keys(this.disjunctiveFacetsRefinements).filter((function(t){return e.disjunctiveFacetsRefinements[t].length>0})).concat(t).concat(this.getRefinedHierarchicalFacets())},getRefinedHierarchicalFacets:function(){var e=this;return a(this.hierarchicalFacets.map((function(e){return e.name})),Object.keys(this.hierarchicalFacetsRefinements).filter((function(t){return e.hierarchicalFacetsRefinements[t].length>0})))},getUnrefinedDisjunctiveFacets:function(){var e=this.getRefinedDisjunctiveFacets();return this.disjunctiveFacets.filter((function(t){return-1===e.indexOf(t)}))},managedParameters:["index","facets","disjunctiveFacets","facetsRefinements","hierarchicalFacets","facetsExcludes","disjunctiveFacetsRefinements","numericRefinements","tagRefinements","hierarchicalFacetsRefinements"],getQueryParams:function(){var e=this.managedParameters,t={},r=this;return Object.keys(this).forEach((function(n){var i=r[n];-1===e.indexOf(n)&&void 0!==i&&(t[n]=i)})),t},setQueryParameter:function(e,t){if(this[e]===t)return this;var r={};return r[e]=t,this.setQueryParameters(r)},setQueryParameters:function(e){if(!e)return this;var t=m.validate(this,e);if(t)throw t;var r=this,n=m._parseNumbers(e),i=Object.keys(this).reduce((function(e,t){return e[t]=r[t],e}),{}),a=Object.keys(n).reduce((function(e,t){var r=void 0!==e[t],i=void 0!==n[t];return r&&!i?u(e,[t]):(i&&(e[t]=n[t]),e)}),i);return new this.constructor(a)},resetPage:function(){return void 0===this.page?this:this.setPage(0)},_getHierarchicalFacetSortBy:function(e){return e.sortBy||["isRefined:desc","name:asc"]},_getHierarchicalFacetSeparator:function(e){return e.separator||" > "},_getHierarchicalRootPath:function(e){return e.rootPath||null},_getHierarchicalShowParentLevel:function(e){return"boolean"!=typeof e.showParentLevel||e.showParentLevel},getHierarchicalFacetByName:function(e){return s(this.hierarchicalFacets,(function(t){return t.name===e}))},getHierarchicalFacetBreadcrumb:function(e){if(!this.isHierarchicalFacet(e))return[];var t=this.getHierarchicalRefinement(e)[0];if(!t)return[];var r=this._getHierarchicalFacetSeparator(this.getHierarchicalFacetByName(e));return t.split(r).map((function(e){return e.trim()}))},toString:function(){return JSON.stringify(this,null,2)}},e.exports=m},210:(e,t,r)=>{"use strict";e.exports=function(e){return function(t,r){var s=e.hierarchicalFacets[r],o=e.hierarchicalFacetsRefinements[s.name]&&e.hierarchicalFacetsRefinements[s.name][0]||"",h=e._getHierarchicalFacetSeparator(s),f=e._getHierarchicalRootPath(s),l=e._getHierarchicalShowParentLevel(s),m=a(e._getHierarchicalFacetSortBy(s)),d=t.every((function(e){return e.exhaustive})),p=function(e,t,r,a,s){return function(o,h,f){var l=o;if(f>0){var m=0;for(l=o;m<f;){var d=l&&Array.isArray(l.data)?l.data:[];l=i(d,(function(e){return e.isRefined})),m++}}if(l){var p=Object.keys(h.data).map((function(e){return[e,h.data[e]]})).filter((function(e){return function(e,t,r,n,i,a){if(i&&(0!==e.indexOf(i)||i===e))return!1;return!i&&-1===e.indexOf(n)||i&&e.split(n).length-i.split(n).length==1||-1===e.indexOf(n)&&-1===r.indexOf(n)||0===r.indexOf(e)||0===e.indexOf(t+n)&&(a||0===e.indexOf(r))}(e[0],l.path||r,s,t,r,a)}));l.data=n(p.map((function(e){var r=e[0];return function(e,t,r,n,i){var a=t.split(r);return{name:a[a.length-1].trim(),path:t,escapedValue:c(t),count:e,isRefined:n===t||0===n.indexOf(t+r),exhaustive:i,data:null}}(e[1],r,t,u(s),h.exhaustive)})),e[0],e[1])}return o}}(m,h,f,l,o),v=t;return f&&(v=t.slice(f.split(h).length)),v.reduce(p,{name:e.hierarchicalFacets[r].name,count:null,isRefined:!0,path:null,escapedValue:null,exhaustive:d,data:null})}};var n=r(2148),i=r(7888),a=r(2293),s=r(4039),c=s.escapeFacetValue,u=s.unescapeFacetValue},3076:(e,t,r)=>{"use strict";var n=r(185),i=r(3336),a=r(2148),s=r(4587),c=r(7888),u=r(9725),o=r(2293),h=r(4039),f=h.escapeFacetValue,l=h.unescapeFacetValue,m=r(210);function d(e){var t={};return e.forEach((function(e,r){t[e]=r})),t}function p(e,t,r){t&&t[r]&&(e.stats=t[r])}function v(e,t,r){var a=t[0];this._rawResults=t;var o=this;Object.keys(a).forEach((function(e){o[e]=a[e]})),Object.keys(r||{}).forEach((function(e){o[e]=r[e]})),this.processingTimeMS=t.reduce((function(e,t){return void 0===t.processingTimeMS?e:e+t.processingTimeMS}),0),this.disjunctiveFacets=[],this.hierarchicalFacets=e.hierarchicalFacets.map((function(){return[]})),this.facets=[];var h=e.getRefinedDisjunctiveFacets(),f=d(e.facets),v=d(e.disjunctiveFacets),g=1,y=a.facets||{};Object.keys(y).forEach((function(t){var r,n,i=y[t],s=(r=e.hierarchicalFacets,n=t,c(r,(function(e){return(e.attributes||[]).indexOf(n)>-1})));if(s){var h=s.attributes.indexOf(t),l=u(e.hierarchicalFacets,(function(e){return e.name===s.name}));o.hierarchicalFacets[l][h]={attribute:t,data:i,exhaustive:a.exhaustiveFacetsCount}}else{var m,d=-1!==e.disjunctiveFacets.indexOf(t),g=-1!==e.facets.indexOf(t);d&&(m=v[t],o.disjunctiveFacets[m]={name:t,data:i,exhaustive:a.exhaustiveFacetsCount},p(o.disjunctiveFacets[m],a.facets_stats,t)),g&&(m=f[t],o.facets[m]={name:t,data:i,exhaustive:a.exhaustiveFacetsCount},p(o.facets[m],a.facets_stats,t))}})),this.hierarchicalFacets=s(this.hierarchicalFacets),h.forEach((function(r){var s=t[g],c=s&&s.facets?s.facets:{},h=e.getHierarchicalFacetByName(r);Object.keys(c).forEach((function(t){var r,f=c[t];if(h){r=u(e.hierarchicalFacets,(function(e){return e.name===h.name}));var m=u(o.hierarchicalFacets[r],(function(e){return e.attribute===t}));if(-1===m)return;o.hierarchicalFacets[r][m].data=n({},o.hierarchicalFacets[r][m].data,f)}else{r=v[t];var d=a.facets&&a.facets[t]||{};o.disjunctiveFacets[r]={name:t,data:i({},f,d),exhaustive:s.exhaustiveFacetsCount},p(o.disjunctiveFacets[r],s.facets_stats,t),e.disjunctiveFacetsRefinements[t]&&e.disjunctiveFacetsRefinements[t].forEach((function(n){!o.disjunctiveFacets[r].data[n]&&e.disjunctiveFacetsRefinements[t].indexOf(l(n))>-1&&(o.disjunctiveFacets[r].data[n]=0)}))}})),g++})),e.getRefinedHierarchicalFacets().forEach((function(r){var n=e.getHierarchicalFacetByName(r),a=e._getHierarchicalFacetSeparator(n),s=e.getHierarchicalRefinement(r);0===s.length||s[0].split(a).length<2||t.slice(g).forEach((function(t){var r=t&&t.facets?t.facets:{};Object.keys(r).forEach((function(t){var c=r[t],h=u(e.hierarchicalFacets,(function(e){return e.name===n.name})),f=u(o.hierarchicalFacets[h],(function(e){return e.attribute===t}));if(-1!==f){var l={};if(s.length>0){var m=s[0].split(a)[0];l[m]=o.hierarchicalFacets[h][f].data[m]}o.hierarchicalFacets[h][f].data=i(l,c,o.hierarchicalFacets[h][f].data)}})),g++}))})),Object.keys(e.facetsExcludes).forEach((function(t){var r=e.facetsExcludes[t],n=f[t];o.facets[n]={name:t,data:a.facets[t],exhaustive:a.exhaustiveFacetsCount},r.forEach((function(e){o.facets[n]=o.facets[n]||{name:t},o.facets[n].data=o.facets[n].data||{},o.facets[n].data[e]=0}))})),this.hierarchicalFacets=this.hierarchicalFacets.map(m(e)),this.facets=s(this.facets),this.disjunctiveFacets=s(this.disjunctiveFacets),this._state=e}function g(e,t){function r(e){return e.name===t}if(e._state.isConjunctiveFacet(t)){var n=c(e.facets,r);return n?Object.keys(n.data).map((function(r){var i=f(r);return{name:r,escapedValue:i,count:n.data[r],isRefined:e._state.isFacetRefined(t,i),isExcluded:e._state.isExcludeRefined(t,r)}})):[]}if(e._state.isDisjunctiveFacet(t)){var i=c(e.disjunctiveFacets,r);return i?Object.keys(i.data).map((function(r){var n=f(r);return{name:r,escapedValue:n,count:i.data[r],isRefined:e._state.isDisjunctiveFacetRefined(t,n)}})):[]}if(e._state.isHierarchicalFacet(t)){var a=c(e.hierarchicalFacets,r);if(!a)return a;var s=e._state.getHierarchicalFacetByName(t),u=l(e._state.getHierarchicalRefinement(t)[0]||"").split(e._state._getHierarchicalFacetSeparator(s));return u.unshift(t),y(a,u,0),a}}function y(e,t,r){e.isRefined=e.name===t[r],e.data&&e.data.forEach((function(e){y(e,t,r+1)}))}function R(e,t,r,n){if(n=n||0,Array.isArray(t))return e(t,r[n]);if(!t.data||0===t.data.length)return t;var a=t.data.map((function(t){return R(e,t,r,n+1)})),s=e(a,r[n]);return i({data:s},t)}function F(e,t){var r=c(e,(function(e){return e.name===t}));return r&&r.stats}function b(e,t,r,n,i){var a=c(i,(function(e){return e.name===r})),s=a&&a.data&&a.data[n]?a.data[n]:0,u=a&&a.exhaustive||!1;return{type:t,attributeName:r,name:n,count:s,exhaustive:u}}v.prototype.getFacetByName=function(e){function t(t){return t.name===e}return c(this.facets,t)||c(this.disjunctiveFacets,t)||c(this.hierarchicalFacets,t)},v.DEFAULT_SORT=["isRefined:desc","count:desc","name:asc"],v.prototype.getFacetValues=function(e,t){var r=g(this,e);if(r){var n,s=i({},t,{sortBy:v.DEFAULT_SORT,facetOrdering:!(t&&t.sortBy)}),c=this;if(Array.isArray(r))n=[e];else n=c._state.getHierarchicalFacetByName(r.name).attributes;return R((function(e,t){if(s.facetOrdering){var r=function(e,t){return e.renderingContent&&e.renderingContent.facetOrdering&&e.renderingContent.facetOrdering.values&&e.renderingContent.facetOrdering.values[t]}(c,t);if(Boolean(r))return function(e,t){var r=[],n=[],i=(t.order||[]).reduce((function(e,t,r){return e[t]=r,e}),{});e.forEach((function(e){var t=e.path||e.name;void 0!==i[t]?r[i[t]]=e:n.push(e)})),r=r.filter((function(e){return e}));var s,c=t.sortRemainingBy;return"hidden"===c?r:(s="alpha"===c?[["path","name"],["asc","asc"]]:[["count"],["desc"]],r.concat(a(n,s[0],s[1])))}(e,r)}if(Array.isArray(s.sortBy)){var n=o(s.sortBy,v.DEFAULT_SORT);return a(e,n[0],n[1])}if("function"==typeof s.sortBy)return function(e,t){return t.sort(e)}(s.sortBy,e);throw new Error("options.sortBy is optional but if defined it must be either an array of string (predicates) or a sorting function")}),r,n)}},v.prototype.getFacetStats=function(e){return this._state.isConjunctiveFacet(e)?F(this.facets,e):this._state.isDisjunctiveFacet(e)?F(this.disjunctiveFacets,e):void 0},v.prototype.getRefinements=function(){var e=this._state,t=this,r=[];return Object.keys(e.facetsRefinements).forEach((function(n){e.facetsRefinements[n].forEach((function(i){r.push(b(e,"facet",n,i,t.facets))}))})),Object.keys(e.facetsExcludes).forEach((function(n){e.facetsExcludes[n].forEach((function(i){r.push(b(e,"exclude",n,i,t.facets))}))})),Object.keys(e.disjunctiveFacetsRefinements).forEach((function(n){e.disjunctiveFacetsRefinements[n].forEach((function(i){r.push(b(e,"disjunctive",n,i,t.disjunctiveFacets))}))})),Object.keys(e.hierarchicalFacetsRefinements).forEach((function(n){e.hierarchicalFacetsRefinements[n].forEach((function(i){r.push(function(e,t,r,n){var i=e.getHierarchicalFacetByName(t),a=e._getHierarchicalFacetSeparator(i),s=r.split(a),u=c(n,(function(e){return e.name===t})),o=s.reduce((function(e,t){var r=e&&c(e.data,(function(e){return e.name===t}));return void 0!==r?r:e}),u),h=o&&o.count||0,f=o&&o.exhaustive||!1,l=o&&o.path||"";return{type:"hierarchical",attributeName:t,name:l,count:h,exhaustive:f}}(e,n,i,t.hierarchicalFacets))}))})),Object.keys(e.numericRefinements).forEach((function(t){var n=e.numericRefinements[t];Object.keys(n).forEach((function(e){n[e].forEach((function(n){r.push({type:"numeric",attributeName:t,name:n,numericValue:n,operator:e})}))}))})),e.tagRefinements.forEach((function(e){r.push({type:"tag",attributeName:"_tags",name:e})})),r},e.exports=v},9374:(e,t,r)=>{"use strict";var n=r(7775),i=r(3076),a=r(8078),s=r(6394),c=r(7331),u=r(4853),o=r(116),h=r(9803),f=r(185),l=r(4336),m=r(4039).escapeFacetValue;function d(e,t,r){"function"==typeof e.addAlgoliaAgent&&e.addAlgoliaAgent("JS Helper ("+l+")"),this.setClient(e);var i=r||{};i.index=t,this.state=n.make(i),this.lastResults=null,this._queryId=0,this._lastQueryIdReceived=-1,this.derivedHelpers=[],this._currentNbQueries=0}function p(e){if(e<0)throw new Error("Page requested below 0.");return this._change({state:this.state.setPage(e),isPageReset:!1}),this}function v(){return this.state.page}u(d,c),d.prototype.search=function(){return this._search({onlyWithDerivedHelpers:!1}),this},d.prototype.searchOnlyWithDerivedHelpers=function(){return this._search({onlyWithDerivedHelpers:!0}),this},d.prototype.getQuery=function(){var e=this.state;return s._getHitsSearchParams(e)},d.prototype.searchOnce=function(e,t){var r=e?this.state.setQueryParameters(e):this.state,n=s._getQueries(r.index,r),a=this;if(this._currentNbQueries++,this.emit("searchOnce",{state:r}),!t)return this.client.search(n).then((function(e){return a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),{content:new i(r,e.results),state:r,_originalResponse:e}}),(function(e){throw a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),e}));this.client.search(n).then((function(e){a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),t(null,new i(r,e.results),r)})).catch((function(e){a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),t(e,null,r)}))},d.prototype.findAnswers=function(e){console.warn("[algoliasearch-helper] answers is no longer supported");var t=this.state,r=this.derivedHelpers[0];if(!r)return Promise.resolve([]);var n=r.getModifiedState(t),i=f({attributesForPrediction:e.attributesForPrediction,nbHits:e.nbHits},{params:h(s._getHitsSearchParams(n),["attributesToSnippet","hitsPerPage","restrictSearchableAttributes","snippetEllipsisText"])}),a="search for answers was called, but this client does not have a function client.initIndex(index).findAnswers";if("function"!=typeof this.client.initIndex)throw new Error(a);var c=this.client.initIndex(n.index);if("function"!=typeof c.findAnswers)throw new Error(a);return c.findAnswers(n.query,e.queryLanguages,i)},d.prototype.searchForFacetValues=function(e,t,r,n){var i="function"==typeof this.client.searchForFacetValues,a="function"==typeof this.client.initIndex;if(!i&&!a&&"function"!=typeof this.client.search)throw new Error("search for facet values (searchable) was called, but this client does not have a function client.searchForFacetValues or client.initIndex(index).searchForFacetValues");var c=this.state.setQueryParameters(n||{}),u=c.isDisjunctiveFacet(e),o=s.getSearchForFacetQuery(e,t,r,c);this._currentNbQueries++;var h,f=this;return i?h=this.client.searchForFacetValues([{indexName:c.index,params:o}]):a?h=this.client.initIndex(c.index).searchForFacetValues(o):(delete o.facetName,h=this.client.search([{type:"facet",facet:e,indexName:c.index,params:o}]).then((function(e){return e.results[0]}))),this.emit("searchForFacetValues",{state:c,facet:e,query:t}),h.then((function(t){return f._currentNbQueries--,0===f._currentNbQueries&&f.emit("searchQueueEmpty"),(t=Array.isArray(t)?t[0]:t).facetHits.forEach((function(t){t.escapedValue=m(t.value),t.isRefined=u?c.isDisjunctiveFacetRefined(e,t.escapedValue):c.isFacetRefined(e,t.escapedValue)})),t}),(function(e){throw f._currentNbQueries--,0===f._currentNbQueries&&f.emit("searchQueueEmpty"),e}))},d.prototype.setQuery=function(e){return this._change({state:this.state.resetPage().setQuery(e),isPageReset:!0}),this},d.prototype.clearRefinements=function(e){return this._change({state:this.state.resetPage().clearRefinements(e),isPageReset:!0}),this},d.prototype.clearTags=function(){return this._change({state:this.state.resetPage().clearTags(),isPageReset:!0}),this},d.prototype.addDisjunctiveFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addDisjunctiveFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addDisjunctiveRefine=function(){return this.addDisjunctiveFacetRefinement.apply(this,arguments)},d.prototype.addHierarchicalFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addHierarchicalFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addNumericRefinement=function(e,t,r){return this._change({state:this.state.resetPage().addNumericRefinement(e,t,r),isPageReset:!0}),this},d.prototype.addFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addRefine=function(){return this.addFacetRefinement.apply(this,arguments)},d.prototype.addFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().addExcludeRefinement(e,t),isPageReset:!0}),this},d.prototype.addExclude=function(){return this.addFacetExclusion.apply(this,arguments)},d.prototype.addTag=function(e){return this._change({state:this.state.resetPage().addTagRefinement(e),isPageReset:!0}),this},d.prototype.removeNumericRefinement=function(e,t,r){return this._change({state:this.state.resetPage().removeNumericRefinement(e,t,r),isPageReset:!0}),this},d.prototype.removeDisjunctiveFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().removeDisjunctiveFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.removeDisjunctiveRefine=function(){return this.removeDisjunctiveFacetRefinement.apply(this,arguments)},d.prototype.removeHierarchicalFacetRefinement=function(e){return this._change({state:this.state.resetPage().removeHierarchicalFacetRefinement(e),isPageReset:!0}),this},d.prototype.removeFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().removeFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.removeRefine=function(){return this.removeFacetRefinement.apply(this,arguments)},d.prototype.removeFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().removeExcludeRefinement(e,t),isPageReset:!0}),this},d.prototype.removeExclude=function(){return this.removeFacetExclusion.apply(this,arguments)},d.prototype.removeTag=function(e){return this._change({state:this.state.resetPage().removeTagRefinement(e),isPageReset:!0}),this},d.prototype.toggleFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().toggleExcludeFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.toggleExclude=function(){return this.toggleFacetExclusion.apply(this,arguments)},d.prototype.toggleRefinement=function(e,t){return this.toggleFacetRefinement(e,t)},d.prototype.toggleFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().toggleFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.toggleRefine=function(){return this.toggleFacetRefinement.apply(this,arguments)},d.prototype.toggleTag=function(e){return this._change({state:this.state.resetPage().toggleTagRefinement(e),isPageReset:!0}),this},d.prototype.nextPage=function(){var e=this.state.page||0;return this.setPage(e+1)},d.prototype.previousPage=function(){var e=this.state.page||0;return this.setPage(e-1)},d.prototype.setCurrentPage=p,d.prototype.setPage=p,d.prototype.setIndex=function(e){return this._change({state:this.state.resetPage().setIndex(e),isPageReset:!0}),this},d.prototype.setQueryParameter=function(e,t){return this._change({state:this.state.resetPage().setQueryParameter(e,t),isPageReset:!0}),this},d.prototype.setState=function(e){return this._change({state:n.make(e),isPageReset:!1}),this},d.prototype.overrideStateWithoutTriggeringChangeEvent=function(e){return this.state=new n(e),this},d.prototype.hasRefinements=function(e){return!!o(this.state.getNumericRefinements(e))||(this.state.isConjunctiveFacet(e)?this.state.isFacetRefined(e):this.state.isDisjunctiveFacet(e)?this.state.isDisjunctiveFacetRefined(e):!!this.state.isHierarchicalFacet(e)&&this.state.isHierarchicalFacetRefined(e))},d.prototype.isExcluded=function(e,t){return this.state.isExcludeRefined(e,t)},d.prototype.isDisjunctiveRefined=function(e,t){return this.state.isDisjunctiveFacetRefined(e,t)},d.prototype.hasTag=function(e){return this.state.isTagRefined(e)},d.prototype.isTagRefined=function(){return this.hasTagRefinements.apply(this,arguments)},d.prototype.getIndex=function(){return this.state.index},d.prototype.getCurrentPage=v,d.prototype.getPage=v,d.prototype.getTags=function(){return this.state.tagRefinements},d.prototype.getRefinements=function(e){var t=[];if(this.state.isConjunctiveFacet(e))this.state.getConjunctiveRefinements(e).forEach((function(e){t.push({value:e,type:"conjunctive"})})),this.state.getExcludeRefinements(e).forEach((function(e){t.push({value:e,type:"exclude"})}));else if(this.state.isDisjunctiveFacet(e)){this.state.getDisjunctiveRefinements(e).forEach((function(e){t.push({value:e,type:"disjunctive"})}))}var r=this.state.getNumericRefinements(e);return Object.keys(r).forEach((function(e){var n=r[e];t.push({value:n,operator:e,type:"numeric"})})),t},d.prototype.getNumericRefinement=function(e,t){return this.state.getNumericRefinement(e,t)},d.prototype.getHierarchicalFacetBreadcrumb=function(e){return this.state.getHierarchicalFacetBreadcrumb(e)},d.prototype._search=function(e){var t=this.state,r=[],n=[];e.onlyWithDerivedHelpers||(n=s._getQueries(t.index,t),r.push({state:t,queriesCount:n.length,helper:this}),this.emit("search",{state:t,results:this.lastResults}));var i=this.derivedHelpers.map((function(e){var n=e.getModifiedState(t),i=s._getQueries(n.index,n);return r.push({state:n,queriesCount:i.length,helper:e}),e.emit("search",{state:n,results:e.lastResults}),i})),a=Array.prototype.concat.apply(n,i),c=this._queryId++;this._currentNbQueries++;try{this.client.search(a).then(this._dispatchAlgoliaResponse.bind(this,r,c)).catch(this._dispatchAlgoliaError.bind(this,c))}catch(u){this.emit("error",{error:u})}},d.prototype._dispatchAlgoliaResponse=function(e,t,r){if(!(t<this._lastQueryIdReceived)){this._currentNbQueries-=t-this._lastQueryIdReceived,this._lastQueryIdReceived=t,0===this._currentNbQueries&&this.emit("searchQueueEmpty");var n=r.results.slice();e.forEach((function(e){var t=e.state,r=e.queriesCount,a=e.helper,s=n.splice(0,r),c=a.lastResults=new i(t,s);a.emit("result",{results:c,state:t})}))}},d.prototype._dispatchAlgoliaError=function(e,t){e<this._lastQueryIdReceived||(this._currentNbQueries-=e-this._lastQueryIdReceived,this._lastQueryIdReceived=e,this.emit("error",{error:t}),0===this._currentNbQueries&&this.emit("searchQueueEmpty"))},d.prototype.containsRefinement=function(e,t,r,n){return e||0!==t.length||0!==r.length||0!==n.length},d.prototype._hasDisjunctiveRefinements=function(e){return this.state.disjunctiveRefinements[e]&&this.state.disjunctiveRefinements[e].length>0},d.prototype._change=function(e){var t=e.state,r=e.isPageReset;t!==this.state&&(this.state=t,this.emit("change",{state:this.state,results:this.lastResults,isPageReset:r}))},d.prototype.clearCache=function(){return this.client.clearCache&&this.client.clearCache(),this},d.prototype.setClient=function(e){return this.client===e||("function"==typeof e.addAlgoliaAgent&&e.addAlgoliaAgent("JS Helper ("+l+")"),this.client=e),this},d.prototype.getClient=function(){return this.client},d.prototype.derive=function(e){var t=new a(this,e);return this.derivedHelpers.push(t),t},d.prototype.detachDerivedHelper=function(e){var t=this.derivedHelpers.indexOf(e);if(-1===t)throw new Error("Derived helper already detached");this.derivedHelpers.splice(t,1)},d.prototype.hasPendingRequests=function(){return this._currentNbQueries>0},e.exports=d},4587:e=>{"use strict";e.exports=function(e){return Array.isArray(e)?e.filter(Boolean):[]}},3336:e=>{"use strict";e.exports=function(){var e=Array.prototype.slice.call(arguments);return e.reduceRight((function(e,t){return Object.keys(Object(t)).forEach((function(r){void 0!==t[r]&&(void 0!==e[r]&&delete e[r],e[r]=t[r])})),e}),{})}},4039:e=>{"use strict";e.exports={escapeFacetValue:function(e){return"string"!=typeof e?e:String(e).replace(/^-/,"\\-")},unescapeFacetValue:function(e){return"string"!=typeof e?e:e.replace(/^\\-/,"-")}}},7888:e=>{"use strict";e.exports=function(e,t){if(Array.isArray(e))for(var r=0;r<e.length;r++)if(t(e[r]))return e[r]}},9725:e=>{"use strict";e.exports=function(e,t){if(!Array.isArray(e))return-1;for(var r=0;r<e.length;r++)if(t(e[r]))return r;return-1}},2293:(e,t,r)=>{"use strict";var n=r(7888);e.exports=function(e,t){var r=(t||[]).map((function(e){return e.split(":")}));return e.reduce((function(e,t){var i=t.split(":"),a=n(r,(function(e){return e[0]===i[0]}));return i.length>1||!a?(e[0].push(i[0]),e[1].push(i[1]),e):(e[0].push(a[0]),e[1].push(a[1]),e)}),[[],[]])}},4853:e=>{"use strict";e.exports=function(e,t){e.prototype=Object.create(t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}})}},2686:e=>{"use strict";e.exports=function(e,t){return e.filter((function(r,n){return t.indexOf(r)>-1&&e.indexOf(r)===n}))}},185:e=>{"use strict";function t(e){return"function"==typeof e||Array.isArray(e)||"[object Object]"===Object.prototype.toString.call(e)}function r(e,n){if(e===n)return e;for(var i in n)if(Object.prototype.hasOwnProperty.call(n,i)&&"__proto__"!==i&&"constructor"!==i){var a=n[i],s=e[i];void 0!==s&&void 0===a||(t(s)&&t(a)?e[i]=r(s,a):e[i]="object"==typeof(c=a)&&null!==c?r(Array.isArray(c)?[]:{},c):c)}var c;return e}e.exports=function(e){t(e)||(e={});for(var n=1,i=arguments.length;n<i;n++){var a=arguments[n];t(a)&&r(e,a)}return e}},116:e=>{"use strict";e.exports=function(e){return e&&Object.keys(e).length>0}},9803:e=>{"use strict";e.exports=function(e,t){if(null===e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}},2148:e=>{"use strict";function t(e,t){if(e!==t){var r=void 0!==e,n=null===e,i=void 0!==t,a=null===t;if(!a&&e>t||n&&i||!r)return 1;if(!n&&e<t||a&&r||!i)return-1}return 0}e.exports=function(e,r,n){if(!Array.isArray(e))return[];Array.isArray(n)||(n=[]);var i=e.map((function(e,t){return{criteria:r.map((function(t){return e[t]})),index:t,value:e}}));return i.sort((function(e,r){for(var i=-1;++i<e.criteria.length;){var a=t(e.criteria[i],r.criteria[i]);if(a)return i>=n.length?a:"desc"===n[i]?-a:a}return e.index-r.index})),i.map((function(e){return e.value}))}},8023:e=>{"use strict";e.exports=function e(t){if("number"==typeof t)return t;if("string"==typeof t)return parseFloat(t);if(Array.isArray(t))return t.map(e);throw new Error("The value should be a number, a parsable string or an array of those.")}},6394:(e,t,r)=>{"use strict";var n=r(185);function i(e){return Object.keys(e).sort((function(e,t){return e.localeCompare(t)})).reduce((function(t,r){return t[r]=e[r],t}),{})}var a={_getQueries:function(e,t){var r=[];return r.push({indexName:e,params:a._getHitsSearchParams(t)}),t.getRefinedDisjunctiveFacets().forEach((function(n){r.push({indexName:e,params:a._getDisjunctiveFacetSearchParams(t,n)})})),t.getRefinedHierarchicalFacets().forEach((function(n){var i=t.getHierarchicalFacetByName(n),s=t.getHierarchicalRefinement(n),c=t._getHierarchicalFacetSeparator(i);if(s.length>0&&s[0].split(c).length>1){var u=s[0].split(c).slice(0,-1).reduce((function(e,t,r){return e.concat({attribute:i.attributes[r],value:0===r?t:[e[e.length-1].value,t].join(c)})}),[]);u.forEach((function(n,s){var c=a._getDisjunctiveFacetSearchParams(t,n.attribute,0===s);function o(e){return i.attributes.some((function(t){return t===e.split(":")[0]}))}var h=(c.facetFilters||[]).reduce((function(e,t){if(Array.isArray(t)){var r=t.filter((function(e){return!o(e)}));r.length>0&&e.push(r)}return"string"!=typeof t||o(t)||e.push(t),e}),[]),f=u[s-1];c.facetFilters=s>0?h.concat(f.attribute+":"+f.value):h.length>0?h:void 0,r.push({indexName:e,params:c})}))}})),r},_getHitsSearchParams:function(e){var t=e.facets.concat(e.disjunctiveFacets).concat(a._getHitsHierarchicalFacetsAttributes(e)),r=a._getFacetFilters(e),s=a._getNumericFilters(e),c=a._getTagFilters(e),u={facets:t.indexOf("*")>-1?["*"]:t,tagFilters:c};return r.length>0&&(u.facetFilters=r),s.length>0&&(u.numericFilters=s),i(n({},e.getQueryParams(),u))},_getDisjunctiveFacetSearchParams:function(e,t,r){var s=a._getFacetFilters(e,t,r),c=a._getNumericFilters(e,t),u=a._getTagFilters(e),o={hitsPerPage:0,page:0,analytics:!1,clickAnalytics:!1};u.length>0&&(o.tagFilters=u);var h=e.getHierarchicalFacetByName(t);return o.facets=h?a._getDisjunctiveHierarchicalFacetAttribute(e,h,r):t,c.length>0&&(o.numericFilters=c),s.length>0&&(o.facetFilters=s),i(n({},e.getQueryParams(),o))},_getNumericFilters:function(e,t){if(e.numericFilters)return e.numericFilters;var r=[];return Object.keys(e.numericRefinements).forEach((function(n){var i=e.numericRefinements[n]||{};Object.keys(i).forEach((function(e){var a=i[e]||[];t!==n&&a.forEach((function(t){if(Array.isArray(t)){var i=t.map((function(t){return n+e+t}));r.push(i)}else r.push(n+e+t)}))}))})),r},_getTagFilters:function(e){return e.tagFilters?e.tagFilters:e.tagRefinements.join(",")},_getFacetFilters:function(e,t,r){var n=[],i=e.facetsRefinements||{};Object.keys(i).forEach((function(e){(i[e]||[]).forEach((function(t){n.push(e+":"+t)}))}));var a=e.facetsExcludes||{};Object.keys(a).forEach((function(e){(a[e]||[]).forEach((function(t){n.push(e+":-"+t)}))}));var s=e.disjunctiveFacetsRefinements||{};Object.keys(s).forEach((function(e){var r=s[e]||[];if(e!==t&&r&&0!==r.length){var i=[];r.forEach((function(t){i.push(e+":"+t)})),n.push(i)}}));var c=e.hierarchicalFacetsRefinements||{};return Object.keys(c).forEach((function(i){var a=(c[i]||[])[0];if(void 0!==a){var s,u,o=e.getHierarchicalFacetByName(i),h=e._getHierarchicalFacetSeparator(o),f=e._getHierarchicalRootPath(o);if(t===i){if(-1===a.indexOf(h)||!f&&!0===r||f&&f.split(h).length===a.split(h).length)return;f?(u=f.split(h).length-1,a=f):(u=a.split(h).length-2,a=a.slice(0,a.lastIndexOf(h))),s=o.attributes[u]}else u=a.split(h).length-1,s=o.attributes[u];s&&n.push([s+":"+a])}})),n},_getHitsHierarchicalFacetsAttributes:function(e){return e.hierarchicalFacets.reduce((function(t,r){var n=e.getHierarchicalRefinement(r.name)[0];if(!n)return t.push(r.attributes[0]),t;var i=e._getHierarchicalFacetSeparator(r),a=n.split(i).length,s=r.attributes.slice(0,a+1);return t.concat(s)}),[])},_getDisjunctiveHierarchicalFacetAttribute:function(e,t,r){var n=e._getHierarchicalFacetSeparator(t);if(!0===r){var i=e._getHierarchicalRootPath(t),a=0;return i&&(a=i.split(n).length),[t.attributes[a]]}var s=(e.getHierarchicalRefinement(t.name)[0]||"").split(n).length-1;return t.attributes.slice(0,s+1)},getSearchForFacetQuery:function(e,t,r,s){var c=s.isDisjunctiveFacet(e)?s.clearRefinements(e):s,u={facetQuery:t,facetName:e};return"number"==typeof r&&(u.maxFacetHits=r),i(n({},a._getHitsSearchParams(c),u))}};e.exports=a},6801:e=>{"use strict";e.exports=function(e){return null!==e&&/^[a-zA-Z0-9_-]{1,64}$/.test(e)}},4336:e=>{"use strict";e.exports="3.12.0"},290:function(e){e.exports=function(){"use strict";function e(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function t(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function r(r){for(var n=1;n<arguments.length;n++){var i=null!=arguments[n]?arguments[n]:{};n%2?t(Object(i),!0).forEach((function(t){e(r,t,i[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(r,Object.getOwnPropertyDescriptors(i)):t(Object(i)).forEach((function(e){Object.defineProperty(r,e,Object.getOwnPropertyDescriptor(i,e))}))}return r}function n(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}function i(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){if(Symbol.iterator in Object(e)||"[object Arguments]"===Object.prototype.toString.call(e)){var r=[],n=!0,i=!1,a=void 0;try{for(var s,c=e[Symbol.iterator]();!(n=(s=c.next()).done)&&(r.push(s.value),!t||r.length!==t);n=!0);}catch(e){i=!0,a=e}finally{try{n||null==c.return||c.return()}finally{if(i)throw a}}return r}}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance")}()}function a(e){return function(e){if(Array.isArray(e)){for(var t=0,r=new Array(e.length);t<e.length;t++)r[t]=e[t];return r}}(e)||function(e){if(Symbol.iterator in Object(e)||"[object Arguments]"===Object.prototype.toString.call(e))return Array.from(e)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance")}()}function s(e){var t,r="algoliasearch-client-js-".concat(e.key),n=function(){return void 0===t&&(t=e.localStorage||window.localStorage),t},a=function(){return JSON.parse(n().getItem(r)||"{}")};return{get:function(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return Promise.resolve().then((function(){var r=JSON.stringify(e),n=a()[r];return Promise.all([n||t(),void 0!==n])})).then((function(e){var t=i(e,2),n=t[0],a=t[1];return Promise.all([n,a||r.miss(n)])})).then((function(e){return i(e,1)[0]}))},set:function(e,t){return Promise.resolve().then((function(){var i=a();return i[JSON.stringify(e)]=t,n().setItem(r,JSON.stringify(i)),t}))},delete:function(e){return Promise.resolve().then((function(){var t=a();delete t[JSON.stringify(e)],n().setItem(r,JSON.stringify(t))}))},clear:function(){return Promise.resolve().then((function(){n().removeItem(r)}))}}}function c(e){var t=a(e.caches),r=t.shift();return void 0===r?{get:function(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return t().then((function(e){return Promise.all([e,r.miss(e)])})).then((function(e){return i(e,1)[0]}))},set:function(e,t){return Promise.resolve(t)},delete:function(e){return Promise.resolve()},clear:function(){return Promise.resolve()}}:{get:function(e,n){var i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return r.get(e,n,i).catch((function(){return c({caches:t}).get(e,n,i)}))},set:function(e,n){return r.set(e,n).catch((function(){return c({caches:t}).set(e,n)}))},delete:function(e){return r.delete(e).catch((function(){return c({caches:t}).delete(e)}))},clear:function(){return r.clear().catch((function(){return c({caches:t}).clear()}))}}}function u(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{serializable:!0},t={};return{get:function(r,n){var i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}},a=JSON.stringify(r);if(a in t)return Promise.resolve(e.serializable?JSON.parse(t[a]):t[a]);var s=n(),c=i&&i.miss||function(){return Promise.resolve()};return s.then((function(e){return c(e)})).then((function(){return s}))},set:function(r,n){return t[JSON.stringify(r)]=e.serializable?JSON.stringify(n):n,Promise.resolve(n)},delete:function(e){return delete t[JSON.stringify(e)],Promise.resolve()},clear:function(){return t={},Promise.resolve()}}}function o(e){for(var t=e.length-1;t>0;t--){var r=Math.floor(Math.random()*(t+1)),n=e[t];e[t]=e[r],e[r]=n}return e}function h(e,t){return t?(Object.keys(t).forEach((function(r){e[r]=t[r](e)})),e):e}function f(e){for(var t=arguments.length,r=new Array(t>1?t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];var i=0;return e.replace(/%s/g,(function(){return encodeURIComponent(r[i++])}))}var l={WithinQueryParameters:0,WithinHeaders:1};function m(e,t){var r=e||{},n=r.data||{};return Object.keys(r).forEach((function(e){-1===["timeout","headers","queryParameters","data","cacheable"].indexOf(e)&&(n[e]=r[e])})),{data:Object.entries(n).length>0?n:void 0,timeout:r.timeout||t,headers:r.headers||{},queryParameters:r.queryParameters||{},cacheable:r.cacheable}}var d={Read:1,Write:2,Any:3},p=1,v=2,g=3;function y(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:p;return r(r({},e),{},{status:t,lastUpdate:Date.now()})}function R(e){return"string"==typeof e?{protocol:"https",url:e,accept:d.Any}:{protocol:e.protocol||"https",url:e.url,accept:e.accept||d.Any}}var F="GET",b="POST";function P(e,t){return Promise.all(t.map((function(t){return e.get(t,(function(){return Promise.resolve(y(t))}))}))).then((function(e){var r=e.filter((function(e){return function(e){return e.status===p||Date.now()-e.lastUpdate>12e4}(e)})),n=e.filter((function(e){return function(e){return e.status===g&&Date.now()-e.lastUpdate<=12e4}(e)})),i=[].concat(a(r),a(n));return{getTimeout:function(e,t){return(0===n.length&&0===e?1:n.length+3+e)*t},statelessHosts:i.length>0?i.map((function(e){return R(e)})):t}}))}function _(e,t,n,i){var s=[],c=function(e,t){if(e.method!==F&&(void 0!==e.data||void 0!==t.data)){var n=Array.isArray(e.data)?e.data:r(r({},e.data),t.data);return JSON.stringify(n)}}(n,i),u=function(e,t){var n=r(r({},e.headers),t.headers),i={};return Object.keys(n).forEach((function(e){var t=n[e];i[e.toLowerCase()]=t})),i}(e,i),o=n.method,h=n.method!==F?{}:r(r({},n.data),i.data),f=r(r(r({"x-algolia-agent":e.userAgent.value},e.queryParameters),h),i.queryParameters),l=0,m=function t(r,a){var h=r.pop();if(void 0===h)throw{name:"RetryError",message:"Unreachable hosts - your application id may be incorrect. If the error persists, contact support@algolia.com.",transporterStackTrace:w(s)};var m={data:c,headers:u,method:o,url:E(h,n.path,f),connectTimeout:a(l,e.timeouts.connect),responseTimeout:a(l,i.timeout)},d=function(e){var t={request:m,response:e,host:h,triesLeft:r.length};return s.push(t),t},p={onSuccess:function(e){return function(e){try{return JSON.parse(e.content)}catch(t){throw function(e,t){return{name:"DeserializationError",message:e,response:t}}(t.message,e)}}(e)},onRetry:function(n){var i=d(n);return n.isTimedOut&&l++,Promise.all([e.logger.info("Retryable failure",O(i)),e.hostsCache.set(h,y(h,n.isTimedOut?g:v))]).then((function(){return t(r,a)}))},onFail:function(e){throw d(e),function(e,t){var r=e.content,n=e.status,i=r;try{i=JSON.parse(r).message}catch(e){}return function(e,t,r){return{name:"ApiError",message:e,status:t,transporterStackTrace:r}}(i,n,t)}(e,w(s))}};return e.requester.send(m).then((function(e){return function(e,t){return function(e){var t=e.status;return e.isTimedOut||function(e){var t=e.isTimedOut,r=e.status;return!t&&0==~~r}(e)||2!=~~(t/100)&&4!=~~(t/100)}(e)?t.onRetry(e):2==~~(e.status/100)?t.onSuccess(e):t.onFail(e)}(e,p)}))};return P(e.hostsCache,t).then((function(e){return m(a(e.statelessHosts).reverse(),e.getTimeout)}))}function j(e){var t={value:"Algolia for JavaScript (".concat(e,")"),add:function(e){var r="; ".concat(e.segment).concat(void 0!==e.version?" (".concat(e.version,")"):"");return-1===t.value.indexOf(r)&&(t.value="".concat(t.value).concat(r)),t}};return t}function E(e,t,r){var n=x(r),i="".concat(e.protocol,"://").concat(e.url,"/").concat("/"===t.charAt(0)?t.substr(1):t);return n.length&&(i+="?".concat(n)),i}function x(e){return Object.keys(e).map((function(t){return f("%s=%s",t,(r=e[t],"[object Object]"===Object.prototype.toString.call(r)||"[object Array]"===Object.prototype.toString.call(r)?JSON.stringify(e[t]):e[t]));var r})).join("&")}function w(e){return e.map((function(e){return O(e)}))}function O(e){var t=e.request.headers["x-algolia-api-key"]?{"x-algolia-api-key":"*****"}:{};return r(r({},e),{},{request:r(r({},e.request),{},{headers:r(r({},e.request.headers),t)})})}var N=function(e){var t=e.appId,n=function(e,t,r){var n={"x-algolia-api-key":r,"x-algolia-application-id":t};return{headers:function(){return e===l.WithinHeaders?n:{}},queryParameters:function(){return e===l.WithinQueryParameters?n:{}}}}(void 0!==e.authMode?e.authMode:l.WithinHeaders,t,e.apiKey),a=function(e){var t=e.hostsCache,r=e.logger,n=e.requester,a=e.requestsCache,s=e.responsesCache,c=e.timeouts,u=e.userAgent,o=e.hosts,h=e.queryParameters,f={hostsCache:t,logger:r,requester:n,requestsCache:a,responsesCache:s,timeouts:c,userAgent:u,headers:e.headers,queryParameters:h,hosts:o.map((function(e){return R(e)})),read:function(e,t){var r=m(t,f.timeouts.read),n=function(){return _(f,f.hosts.filter((function(e){return 0!=(e.accept&d.Read)})),e,r)};if(!0!==(void 0!==r.cacheable?r.cacheable:e.cacheable))return n();var a={request:e,mappedRequestOptions:r,transporter:{queryParameters:f.queryParameters,headers:f.headers}};return f.responsesCache.get(a,(function(){return f.requestsCache.get(a,(function(){return f.requestsCache.set(a,n()).then((function(e){return Promise.all([f.requestsCache.delete(a),e])}),(function(e){return Promise.all([f.requestsCache.delete(a),Promise.reject(e)])})).then((function(e){var t=i(e,2);return t[0],t[1]}))}))}),{miss:function(e){return f.responsesCache.set(a,e)}})},write:function(e,t){return _(f,f.hosts.filter((function(e){return 0!=(e.accept&d.Write)})),e,m(t,f.timeouts.write))}};return f}(r(r({hosts:[{url:"".concat(t,"-dsn.algolia.net"),accept:d.Read},{url:"".concat(t,".algolia.net"),accept:d.Write}].concat(o([{url:"".concat(t,"-1.algolianet.com")},{url:"".concat(t,"-2.algolianet.com")},{url:"".concat(t,"-3.algolianet.com")}]))},e),{},{headers:r(r(r({},n.headers()),{"content-type":"application/x-www-form-urlencoded"}),e.headers),queryParameters:r(r({},n.queryParameters()),e.queryParameters)}));return h({transporter:a,appId:t,addAlgoliaAgent:function(e,t){a.userAgent.add({segment:e,version:t})},clearCache:function(){return Promise.all([a.requestsCache.clear(),a.responsesCache.clear()]).then((function(){}))}},e.methods)},A=function(e){return function(t,r){return t.method===F?e.transporter.read(t,r):e.transporter.write(t,r)}},H=function(e){return function(t){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return h({transporter:e.transporter,appId:e.appId,indexName:t},r.methods)}},S=function(e){return function(t,n){var i=t.map((function(e){return r(r({},e),{},{params:x(e.params||{})})}));return e.transporter.read({method:b,path:"1/indexes/*/queries",data:{requests:i},cacheable:!0},n)}},T=function(e){return function(t,i){return Promise.all(t.map((function(t){var a=t.params,s=a.facetName,c=a.facetQuery,u=n(a,["facetName","facetQuery"]);return H(e)(t.indexName,{methods:{searchForFacetValues:k}}).searchForFacetValues(s,c,r(r({},i),u))})))}},Q=function(e){return function(t,r,n){return e.transporter.read({method:b,path:f("1/answers/%s/prediction",e.indexName),data:{query:t,queryLanguages:r},cacheable:!0},n)}},C=function(e){return function(t,r){return e.transporter.read({method:b,path:f("1/indexes/%s/query",e.indexName),data:{query:t},cacheable:!0},r)}},k=function(e){return function(t,r,n){return e.transporter.read({method:b,path:f("1/indexes/%s/facets/%s/query",e.indexName,t),data:{facetQuery:r},cacheable:!0},n)}},D=1,I=2,q=3;function V(e,t,n){var i,a={appId:e,apiKey:t,timeouts:{connect:1,read:2,write:30},requester:{send:function(e){return new Promise((function(t){var r=new XMLHttpRequest;r.open(e.method,e.url,!0),Object.keys(e.headers).forEach((function(t){return r.setRequestHeader(t,e.headers[t])}));var n,i=function(e,n){return setTimeout((function(){r.abort(),t({status:0,content:n,isTimedOut:!0})}),1e3*e)},a=i(e.connectTimeout,"Connection timeout");r.onreadystatechange=function(){r.readyState>r.OPENED&&void 0===n&&(clearTimeout(a),n=i(e.responseTimeout,"Socket timeout"))},r.onerror=function(){0===r.status&&(clearTimeout(a),clearTimeout(n),t({content:r.responseText||"Network request failed",status:r.status,isTimedOut:!1}))},r.onload=function(){clearTimeout(a),clearTimeout(n),t({content:r.responseText,status:r.status,isTimedOut:!1})},r.send(e.data)}))}},logger:(i=q,{debug:function(e,t){return D>=i&&console.debug(e,t),Promise.resolve()},info:function(e,t){return I>=i&&console.info(e,t),Promise.resolve()},error:function(e,t){return console.error(e,t),Promise.resolve()}}),responsesCache:u(),requestsCache:u({serializable:!1}),hostsCache:c({caches:[s({key:"".concat("4.15.0","-").concat(e)}),u()]}),userAgent:j("4.15.0").add({segment:"Browser",version:"lite"}),authMode:l.WithinQueryParameters};return N(r(r(r({},a),n),{},{methods:{search:S,searchForFacetValues:T,multipleQueries:S,multipleSearchForFacetValues:T,customRequest:A,initIndex:function(e){return function(t){return H(e)(t,{methods:{search:C,searchForFacetValues:k,findAnswers:Q}})}}}}))}return V.version="4.15.0",V}()},6675:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>z});var n=r(7294),i=r(6010),a=r(8131),s=r.n(a),c=r(290),u=r.n(c),o=r(412),h=r(5742),f=r(9960),l=r(143),m=r(2263);const d=["zero","one","two","few","many","other"];function p(e){return d.filter((t=>e.includes(t)))}const v={locale:"en",pluralForms:p(["one","other"]),select:e=>1===e?"one":"other"};function g(){const{i18n:{currentLocale:e}}=(0,m.Z)();return(0,n.useMemo)((()=>{try{return function(e){const t=new Intl.PluralRules(e);return{locale:e,pluralForms:p(t.resolvedOptions().pluralCategories),select:e=>t.select(e)}}(e)}catch(t){return console.error(`Failed to use Intl.PluralRules for locale "${e}".\nDocusaurus will fallback to the default (English) implementation.\nError: ${t.message}\n`),v}}),[e])}function y(){const e=g();return{selectMessage:(t,r)=>function(e,t,r){const n=e.split("|");if(1===n.length)return n[0];n.length>r.pluralForms.length&&console.error(`For locale=${r.locale}, a maximum of ${r.pluralForms.length} plural forms are expected (${r.pluralForms.join(",")}), but the message contains ${n.length}: ${e}`);const i=r.select(t),a=r.pluralForms.indexOf(i);return n[Math.min(a,n.length-1)]}(r,t,e)}}var R=r(6177),F=r(902),b=r(833),P=r(2128),_=r(5999),j=r(6278),E=r(239),x=r(6999);const w="searchQueryInput_u2C7",O="searchVersionInput_m0Ui",N="searchResultsColumn_JPFH",A="algoliaLogo_rT1R",H="algoliaLogoPathFill_WdUC",S="searchResultItem_Tv2o",T="searchResultItemHeading_KbCB",Q="searchResultItemPath_lhe1",C="searchResultItemSummary_AEaO",k="searchQueryColumn_RTkw",D="searchVersionColumn_ypXd",I="searchLogoColumn_rJIA",q="loadingSpinner_XVxU",V="loader_vvXV";function L(e){let{docsSearchVersionsHelpers:t}=e;const r=Object.entries(t.allDocsData).filter((e=>{let[,t]=e;return t.versions.length>1}));return n.createElement("div",{className:(0,i.Z)("col","col--3","padding-left--none",D)},r.map((e=>{let[i,a]=e;const s=r.length>1?`${i}: `:"";return n.createElement("select",{key:i,onChange:e=>t.setSearchVersion(i,e.target.value),defaultValue:t.searchVersions[i],className:O},a.versions.map(((e,t)=>n.createElement("option",{key:t,label:`${s}${e.label}`,value:e.name}))))})))}function B(){const{i18n:{currentLocale:e}}=(0,m.Z)(),{algolia:{appId:t,apiKey:r,indexName:a}}=(0,j.L)(),c=(0,E.l)(),d=function(){const{selectMessage:e}=y();return t=>e(t,(0,_.I)({id:"theme.SearchPage.documentsFound.plurals",description:'Pluralized label for "{count} documents found". Use as much plural forms (separated by "|") as your language support (see https://www.unicode.org/cldr/cldr-aux/charts/34/supplemental/language_plural_rules.html)',message:"One document found|{count} documents found"},{count:t}))}(),p=function(){const e=(0,l._r)(),[t,r]=(0,n.useState)((()=>Object.entries(e).reduce(((e,t)=>{let[r,n]=t;return{...e,[r]:n.versions[0].name}}),{}))),i=Object.values(e).some((e=>e.versions.length>1));return{allDocsData:e,versioningEnabled:i,searchVersions:t,setSearchVersion:(e,t)=>r((r=>({...r,[e]:t})))}}(),[v,g]=(0,R.K)(),b={items:[],query:null,totalResults:null,totalPages:null,lastPage:null,hasMore:null,loading:null},[O,D]=(0,n.useReducer)(((e,t)=>{switch(t.type){case"reset":return b;case"loading":return{...e,loading:!0};case"update":return v!==t.value.query?e:{...t.value,items:0===t.value.lastPage?t.value.items:e.items.concat(t.value.items)};case"advance":{const t=e.totalPages>e.lastPage+1;return{...e,lastPage:t?e.lastPage+1:e.lastPage,hasMore:t}}default:return e}}),b),B=u()(t,r),z=s()(B,a,{hitsPerPage:15,advancedSyntax:!0,disjunctiveFacets:["language","docusaurus_tag"]});z.on("result",(e=>{let{results:{query:t,hits:r,page:n,nbHits:i,nbPages:a}}=e;if(""===t||!Array.isArray(r))return void D({type:"reset"});const s=e=>e.replace(/algolia-docsearch-suggestion--highlight/g,"search-result-match"),u=r.map((e=>{let{url:t,_highlightResult:{hierarchy:r},_snippetResult:n={}}=e;const i=Object.keys(r).map((e=>s(r[e].value)));return{title:i.pop(),url:c(t),summary:n.content?`${s(n.content.value)}...`:"",breadcrumbs:i}}));D({type:"update",value:{items:u,query:t,totalResults:i,totalPages:a,lastPage:n,hasMore:a>n+1,loading:!1}})}));const[M,J]=(0,n.useState)(null),W=(0,n.useRef)(0),U=(0,n.useRef)(o.Z.canUseIntersectionObserver&&new IntersectionObserver((e=>{const{isIntersecting:t,boundingClientRect:{y:r}}=e[0];t&&W.current>r&&D({type:"advance"}),W.current=r}),{threshold:1})),Z=()=>v?(0,_.I)({id:"theme.SearchPage.existingResultsTitle",message:'Search results for "{query}"',description:"The search page title for non-empty query"},{query:v}):(0,_.I)({id:"theme.SearchPage.emptyResultsTitle",message:"Search the documentation",description:"The search page title for empty query"}),$=(0,F.zX)((function(t){void 0===t&&(t=0),z.addDisjunctiveFacetRefinement("docusaurus_tag","default"),z.addDisjunctiveFacetRefinement("language",e),Object.entries(p.searchVersions).forEach((e=>{let[t,r]=e;z.addDisjunctiveFacetRefinement("docusaurus_tag",`docs-${t}-${r}`)})),z.setQuery(v).setPage(t).search()}));return(0,n.useEffect)((()=>{if(!M)return;const e=U.current;return e?(e.observe(M),()=>e.unobserve(M)):()=>!0}),[M]),(0,n.useEffect)((()=>{D({type:"reset"}),v&&(D({type:"loading"}),setTimeout((()=>{$()}),300))}),[v,p.searchVersions,$]),(0,n.useEffect)((()=>{O.lastPage&&0!==O.lastPage&&$(O.lastPage)}),[$,O.lastPage]),n.createElement(x.Z,null,n.createElement(h.Z,null,n.createElement("title",null,(0,P.p)(Z())),n.createElement("meta",{property:"robots",content:"noindex, follow"})),n.createElement("div",{className:"container margin-vert--lg"},n.createElement("h1",null,Z()),n.createElement("form",{className:"row",onSubmit:e=>e.preventDefault()},n.createElement("div",{className:(0,i.Z)("col",k,{"col--9":p.versioningEnabled,"col--12":!p.versioningEnabled})},n.createElement("input",{type:"search",name:"q",className:w,placeholder:(0,_.I)({id:"theme.SearchPage.inputPlaceholder",message:"Type your search here",description:"The placeholder for search page input"}),"aria-label":(0,_.I)({id:"theme.SearchPage.inputLabel",message:"Search",description:"The ARIA label for search page input"}),onChange:e=>g(e.target.value),value:v,autoComplete:"off",autoFocus:!0})),p.versioningEnabled&&n.createElement(L,{docsSearchVersionsHelpers:p})),n.createElement("div",{className:"row"},n.createElement("div",{className:(0,i.Z)("col","col--8",N)},!!O.totalResults&&d(O.totalResults)),n.createElement("div",{className:(0,i.Z)("col","col--4","text--right",I)},n.createElement("a",{target:"_blank",rel:"noopener noreferrer",href:"https://www.algolia.com/","aria-label":(0,_.I)({id:"theme.SearchPage.algoliaLabel",message:"Search by Algolia",description:"The ARIA label for Algolia mention"})},n.createElement("svg",{viewBox:"0 0 168 24",className:A},n.createElement("g",{fill:"none"},n.createElement("path",{className:H,d:"M120.925 18.804c-4.386.02-4.386-3.54-4.386-4.106l-.007-13.336 2.675-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-10.846-2.18c.821 0 1.43-.047 1.855-.129v-2.719a6.334 6.334 0 0 0-1.574-.199 5.7 5.7 0 0 0-.897.069 2.699 2.699 0 0 0-.814.24c-.24.116-.439.28-.582.491-.15.212-.219.335-.219.656 0 .628.219.991.616 1.23s.938.362 1.615.362zm-.233-9.7c.883 0 1.629.109 2.231.328.602.218 1.088.525 1.444.915.363.396.609.922.76 1.483.157.56.232 1.175.232 1.85v6.874a32.5 32.5 0 0 1-1.868.314c-.834.123-1.772.185-2.813.185-.69 0-1.327-.069-1.895-.198a4.001 4.001 0 0 1-1.471-.636 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.803 0-.656.13-1.073.384-1.525a3.24 3.24 0 0 1 1.047-1.106c.445-.287.95-.492 1.532-.615a8.8 8.8 0 0 1 1.82-.185 8.404 8.404 0 0 1 1.972.24v-.438c0-.307-.035-.6-.11-.874a1.88 1.88 0 0 0-.384-.73 1.784 1.784 0 0 0-.724-.493 3.164 3.164 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.735 7.735 0 0 0-1.26.307l-.321-2.192c.335-.117.834-.233 1.478-.349a10.98 10.98 0 0 1 2.073-.178zm52.842 9.626c.822 0 1.43-.048 1.854-.13V13.7a6.347 6.347 0 0 0-1.574-.199c-.294 0-.595.021-.896.069a2.7 2.7 0 0 0-.814.24 1.46 1.46 0 0 0-.582.491c-.15.212-.218.335-.218.656 0 .628.218.991.615 1.23.404.245.938.362 1.615.362zm-.226-9.694c.883 0 1.629.108 2.231.327.602.219 1.088.526 1.444.915.355.39.609.923.759 1.483a6.8 6.8 0 0 1 .233 1.852v6.873c-.41.088-1.034.19-1.868.314-.834.123-1.772.184-2.813.184-.69 0-1.327-.068-1.895-.198a4.001 4.001 0 0 1-1.471-.635 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.804 0-.656.13-1.073.384-1.524.26-.45.608-.82 1.047-1.107.445-.286.95-.491 1.532-.614a8.803 8.803 0 0 1 2.751-.13c.329.034.671.096 1.04.185v-.437a3.3 3.3 0 0 0-.109-.875 1.873 1.873 0 0 0-.384-.731 1.784 1.784 0 0 0-.724-.492 3.165 3.165 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.75 7.75 0 0 0-1.26.307l-.321-2.193c.335-.116.834-.232 1.478-.348a11.633 11.633 0 0 1 2.073-.177zm-8.034-1.271a1.626 1.626 0 0 1-1.628-1.62c0-.895.725-1.62 1.628-1.62.904 0 1.63.725 1.63 1.62 0 .895-.733 1.62-1.63 1.62zm1.348 13.22h-2.689V7.27l2.69-.423v11.956zm-4.714 0c-4.386.02-4.386-3.54-4.386-4.107l-.008-13.336 2.676-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-8.698-5.903c0-1.156-.253-2.119-.746-2.788-.493-.677-1.183-1.01-2.067-1.01-.882 0-1.574.333-2.065 1.01-.493.676-.733 1.632-.733 2.788 0 1.168.246 1.953.74 2.63.492.683 1.183 1.018 2.066 1.018.882 0 1.574-.342 2.067-1.019.492-.683.738-1.46.738-2.63zm2.737-.007c0 .902-.13 1.584-.397 2.33a5.52 5.52 0 0 1-1.128 1.906 4.986 4.986 0 0 1-1.752 1.223c-.685.286-1.739.45-2.265.45-.528-.006-1.574-.157-2.252-.45a5.096 5.096 0 0 1-1.744-1.223c-.487-.527-.863-1.162-1.137-1.906a6.345 6.345 0 0 1-.41-2.33c0-.902.123-1.77.397-2.508a5.554 5.554 0 0 1 1.15-1.892 5.133 5.133 0 0 1 1.75-1.216c.679-.287 1.425-.423 2.232-.423.808 0 1.553.142 2.237.423a4.88 4.88 0 0 1 1.753 1.216 5.644 5.644 0 0 1 1.135 1.892c.287.738.431 1.606.431 2.508zm-20.138 0c0 1.12.246 2.363.738 2.882.493.52 1.13.78 1.91.78.424 0 .828-.062 1.204-.178.377-.116.677-.253.917-.417V9.33a10.476 10.476 0 0 0-1.766-.226c-.971-.028-1.71.37-2.23 1.004-.513.636-.773 1.75-.773 2.788zm7.438 5.274c0 1.824-.466 3.156-1.404 4.004-.936.846-2.367 1.27-4.296 1.27-.705 0-2.17-.137-3.34-.396l.431-2.118c.98.205 2.272.26 2.95.26 1.074 0 1.84-.219 2.299-.656.459-.437.684-1.086.684-1.948v-.437a8.07 8.07 0 0 1-1.047.397c-.43.13-.93.198-1.492.198-.739 0-1.41-.116-2.018-.349a4.206 4.206 0 0 1-1.567-1.025c-.431-.45-.774-1.017-1.013-1.694-.24-.677-.363-1.885-.363-2.773 0-.834.13-1.88.384-2.577.26-.696.629-1.298 1.129-1.796.493-.498 1.095-.881 1.8-1.162a6.605 6.605 0 0 1 2.428-.457c.87 0 1.67.109 2.45.24.78.129 1.444.265 1.985.415V18.17zM6.972 6.677v1.627c-.712-.446-1.52-.67-2.425-.67-.585 0-1.045.13-1.38.391a1.24 1.24 0 0 0-.502 1.03c0 .425.164.765.494 1.02.33.256.835.532 1.516.83.447.192.795.356 1.045.495.25.138.537.332.862.582.324.25.563.548.718.894.154.345.23.741.23 1.188 0 .947-.334 1.691-1.004 2.234-.67.542-1.537.814-2.601.814-1.18 0-2.16-.229-2.936-.686v-1.708c.84.628 1.814.942 2.92.942.585 0 1.048-.136 1.388-.407.34-.271.51-.646.51-1.125 0-.287-.1-.55-.302-.79-.203-.24-.42-.42-.655-.542-.234-.123-.585-.29-1.053-.503a61.27 61.27 0 0 1-.582-.271 13.67 13.67 0 0 1-.55-.287 4.275 4.275 0 0 1-.567-.351 6.92 6.92 0 0 1-.455-.4c-.18-.17-.31-.34-.39-.51-.08-.17-.155-.37-.224-.598a2.553 2.553 0 0 1-.104-.742c0-.915.333-1.638.998-2.17.664-.532 1.523-.798 2.576-.798.968 0 1.793.17 2.473.51zm7.468 5.696v-.287c-.022-.607-.187-1.088-.495-1.444-.309-.357-.75-.535-1.324-.535-.532 0-.99.194-1.373.583-.382.388-.622.949-.717 1.683h3.909zm1.005 2.792v1.404c-.596.34-1.383.51-2.362.51-1.255 0-2.255-.377-3-1.132-.744-.755-1.116-1.744-1.116-2.968 0-1.297.34-2.316 1.021-3.055.68-.74 1.548-1.11 2.6-1.11 1.033 0 1.852.323 2.458.966.606.644.91 1.572.91 2.784 0 .33-.033.676-.096 1.038h-5.314c.107.702.405 1.239.894 1.611.49.372 1.106.558 1.85.558.862 0 1.58-.202 2.155-.606zm6.605-1.77h-1.212c-.596 0-1.045.116-1.349.35-.303.234-.454.532-.454.894 0 .372.117.664.35.877.235.213.575.32 1.022.32.51 0 .912-.142 1.204-.424.293-.281.44-.651.44-1.108v-.91zm-4.068-2.554V9.325c.627-.361 1.457-.542 2.489-.542 2.116 0 3.175 1.026 3.175 3.08V17h-1.548v-.957c-.415.68-1.143 1.02-2.186 1.02-.766 0-1.38-.22-1.843-.661-.462-.442-.694-1.003-.694-1.684 0-.776.293-1.38.878-1.81.585-.431 1.404-.647 2.457-.647h1.34V11.8c0-.554-.133-.971-.399-1.253-.266-.282-.707-.423-1.324-.423a4.07 4.07 0 0 0-2.345.718zm9.333-1.93v1.42c.394-1 1.101-1.5 2.123-1.5.148 0 .313.016.494.048v1.531a1.885 1.885 0 0 0-.75-.143c-.542 0-.989.24-1.34.718-.351.479-.527 1.048-.527 1.707V17h-1.563V8.91h1.563zm5.01 4.084c.022.82.272 1.492.75 2.019.479.526 1.15.79 2.01.79.639 0 1.235-.176 1.788-.527v1.404c-.521.319-1.186.479-1.995.479-1.265 0-2.276-.4-3.031-1.197-.755-.798-1.133-1.792-1.133-2.984 0-1.16.38-2.151 1.14-2.975.761-.825 1.79-1.237 3.088-1.237.702 0 1.346.149 1.93.447v1.436a3.242 3.242 0 0 0-1.77-.495c-.84 0-1.513.266-2.019.798-.505.532-.758 1.213-.758 2.042zM40.24 5.72v4.579c.458-1 1.293-1.5 2.505-1.5.787 0 1.42.245 1.899.734.479.49.718 1.17.718 2.042V17h-1.564v-5.106c0-.553-.14-.98-.422-1.284-.282-.303-.652-.455-1.11-.455-.531 0-1.002.202-1.411.606-.41.405-.615 1.022-.615 1.851V17h-1.563V5.72h1.563zm14.966 10.02c.596 0 1.096-.253 1.5-.758.404-.506.606-1.157.606-1.955 0-.915-.202-1.62-.606-2.114-.404-.495-.92-.742-1.548-.742-.553 0-1.05.224-1.491.67-.442.447-.662 1.133-.662 2.058 0 .958.212 1.67.638 2.138.425.469.946.703 1.563.703zM53.004 5.72v4.42c.574-.894 1.388-1.341 2.44-1.341 1.022 0 1.857.383 2.506 1.149.649.766.973 1.781.973 3.047 0 1.138-.309 2.109-.925 2.912-.617.803-1.463 1.205-2.537 1.205-1.075 0-1.894-.447-2.457-1.34V17h-1.58V5.72h1.58zm9.908 11.104l-3.223-7.913h1.739l1.005 2.632 1.26 3.415c.096-.32.48-1.458 1.15-3.415l.909-2.632h1.66l-2.92 7.866c-.777 2.074-1.963 3.11-3.559 3.11a2.92 2.92 0 0 1-.734-.079v-1.34c.17.042.351.064.543.064 1.032 0 1.755-.57 2.17-1.708z"}),n.createElement("path",{fill:"#5468FF",d:"M78.988.938h16.594a2.968 2.968 0 0 1 2.966 2.966V20.5a2.967 2.967 0 0 1-2.966 2.964H78.988a2.967 2.967 0 0 1-2.966-2.964V3.897A2.961 2.961 0 0 1 78.988.938z"}),n.createElement("path",{fill:"white",d:"M89.632 5.967v-.772a.978.978 0 0 0-.978-.977h-2.28a.978.978 0 0 0-.978.977v.793c0 .088.082.15.171.13a7.127 7.127 0 0 1 1.984-.28c.65 0 1.295.088 1.917.259.082.02.164-.04.164-.13m-6.248 1.01l-.39-.389a.977.977 0 0 0-1.382 0l-.465.465a.973.973 0 0 0 0 1.38l.383.383c.062.061.15.047.205-.014.226-.307.472-.601.746-.874.281-.28.568-.526.883-.751.068-.042.075-.137.02-.2m4.16 2.453v3.341c0 .096.104.165.192.117l2.97-1.537c.068-.034.089-.117.055-.184a3.695 3.695 0 0 0-3.08-1.866c-.068 0-.136.054-.136.13m0 8.048a4.489 4.489 0 0 1-4.49-4.482 4.488 4.488 0 0 1 4.49-4.482 4.488 4.488 0 0 1 4.489 4.482 4.484 4.484 0 0 1-4.49 4.482m0-10.85a6.363 6.363 0 1 0 0 12.729 6.37 6.37 0 0 0 6.372-6.368 6.358 6.358 0 0 0-6.371-6.36"})))))),O.items.length>0?n.createElement("main",null,O.items.map(((e,t)=>{let{title:r,url:a,summary:s,breadcrumbs:c}=e;return n.createElement("article",{key:t,className:S},n.createElement("h2",{className:T},n.createElement(f.Z,{to:a,dangerouslySetInnerHTML:{__html:r}})),c.length>0&&n.createElement("nav",{"aria-label":"breadcrumbs"},n.createElement("ul",{className:(0,i.Z)("breadcrumbs",Q)},c.map(((e,t)=>n.createElement("li",{key:t,className:"breadcrumbs__item",dangerouslySetInnerHTML:{__html:e}}))))),s&&n.createElement("p",{className:C,dangerouslySetInnerHTML:{__html:s}}))}))):[v&&!O.loading&&n.createElement("p",{key:"no-results"},n.createElement(_.Z,{id:"theme.SearchPage.noResultsText",description:"The paragraph for empty search result"},"No results were found")),!!O.loading&&n.createElement("div",{key:"spinner",className:q})],O.hasMore&&n.createElement("div",{className:V,ref:J},n.createElement(_.Z,{id:"theme.SearchPage.fetchingNewResults",description:"The paragraph for fetching new search results"},"Fetching new results..."))))}function z(){return n.createElement(b.FG,{className:"search-page-wrapper"},n.createElement(B,null))}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/1a4e3797.ac674e56.js.LICENSE.txt b/kr/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
deleted file mode 100644
index 698902548..000000000
--- a/kr/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
+++ /dev/null
@@ -1 +0,0 @@
-/*! algoliasearch-lite.umd.js | 4.15.0 | © Algolia, inc. | https://github.com/algolia/algoliasearch-client-javascript */
diff --git a/kr/assets/js/1aef17e6.13bd00c9.js b/kr/assets/js/1aef17e6.2bc538c2.js
similarity index 98%
rename from kr/assets/js/1aef17e6.13bd00c9.js
rename to kr/assets/js/1aef17e6.2bc538c2.js
index 2b6ce606f..2ffed31ad 100644
--- a/kr/assets/js/1aef17e6.13bd00c9.js
+++ b/kr/assets/js/1aef17e6.2bc538c2.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9169],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>f});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function a(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),u=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},l=function(e){var t=u(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},y=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,l=a(e,["components","mdxType","originalType","parentName"]),y=u(r),f=i,d=y["".concat(s,".").concat(f)]||y[f]||p[f]||o;return r?n.createElement(d,c(c({ref:t},l),{},{components:r})):n.createElement(d,c({ref:t},l))}));function f(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var o=r.length,c=new Array(o);c[0]=y;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:i,c[1]=a;for(var u=2;u<o;u++)c[u]=r[u];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}y.displayName="MDXCreateElement"},3024:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>p,frontMatter:()=>o,metadata:()=>a,toc:()=>u});var n=r(3117),i=(r(7294),r(3905));const o={title:"\ubcf4\uc548",weight:90},c=void 0,a={unversionedId:"security/security",id:"security/security",title:"\ubcf4\uc548",description:"\uc774 \uc139\uc158\uc5d0\uc11c\ub294 K3s \ud074\ub7ec\uc2a4\ud130\ub97c \ubcf4\ud638\ud558\ub294 \ubc29\ubc95\ub860\uacfc \uc218\ub2e8\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4. \ub450 \uc139\uc158\uc73c\ub85c \ub098\ub258\uc5b4\uc838 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uac00\uc774\ub4dc\ub294 K3s\uac00 \uc784\ubca0\ub514\ub4dc etcd\ub85c \uc2e4\ud589\ub418\uace0 \uc788\ub2e4\uace0 \uac00\uc815\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/security.md",sourceDirName:"security",slug:"/security/",permalink:"/kr/security/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/security.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ubcf4\uc548",weight:90},sidebar:"mySidebar",previous:{title:"\uc54c\ub824\uc9c4 \uc774\uc288",permalink:"/kr/known-issues/"},next:{title:"Secrets Encryption",permalink:"/kr/security/secrets-encryption"}},s={},u=[],l={toc:u};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\uc11c\ub294 K3s \ud074\ub7ec\uc2a4\ud130\ub97c \ubcf4\ud638\ud558\ub294 \ubc29\ubc95\ub860\uacfc \uc218\ub2e8\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4. \ub450 \uc139\uc158\uc73c\ub85c \ub098\ub258\uc5b4\uc838 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uac00\uc774\ub4dc\ub294 K3s\uac00 \uc784\ubca0\ub514\ub4dc etcd\ub85c \uc2e4\ud589\ub418\uace0 \uc788\ub2e4\uace0 \uac00\uc815\ud569\ub2c8\ub2e4."),(0,i.kt)("p",null,"\uc544\ub798 \ubb38\uc11c\ub294 CIS \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubca4\uce58\ub9c8\ud06c v1.23\uc5d0 \uc801\uc6a9\ub429\ub2c8\ub2e4."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/kr/security/hardening-guide"},"\uac15\ud654 \uac00\uc774\ub4dc")),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/kr/security/self-assessment"},"CIS \ubca4\uce58\ub9c8\ud06c \uc790\uccb4 \ud3c9\uac00 \uac00\uc774\ub4dc"))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9169],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>f});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function a(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),u=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},l=function(e){var t=u(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},y=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,l=a(e,["components","mdxType","originalType","parentName"]),y=u(r),f=i,d=y["".concat(s,".").concat(f)]||y[f]||p[f]||o;return r?n.createElement(d,c(c({ref:t},l),{},{components:r})):n.createElement(d,c({ref:t},l))}));function f(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var o=r.length,c=new Array(o);c[0]=y;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:i,c[1]=a;for(var u=2;u<o;u++)c[u]=r[u];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}y.displayName="MDXCreateElement"},3024:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>p,frontMatter:()=>o,metadata:()=>a,toc:()=>u});var n=r(3117),i=(r(7294),r(3905));const o={title:"\ubcf4\uc548",weight:90},c=void 0,a={unversionedId:"security/security",id:"security/security",title:"\ubcf4\uc548",description:"\uc774 \uc139\uc158\uc5d0\uc11c\ub294 K3s \ud074\ub7ec\uc2a4\ud130\ub97c \ubcf4\ud638\ud558\ub294 \ubc29\ubc95\ub860\uacfc \uc218\ub2e8\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4. \ub450 \uc139\uc158\uc73c\ub85c \ub098\ub258\uc5b4\uc838 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uac00\uc774\ub4dc\ub294 K3s\uac00 \uc784\ubca0\ub514\ub4dc etcd\ub85c \uc2e4\ud589\ub418\uace0 \uc788\ub2e4\uace0 \uac00\uc815\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/security.md",sourceDirName:"security",slug:"/security/",permalink:"/kr/security/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/security.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ubcf4\uc548",weight:90},sidebar:"mySidebar",previous:{title:"\uc54c\ub824\uc9c4 \uc774\uc288",permalink:"/kr/known-issues/"},next:{title:"Secrets Encryption",permalink:"/kr/security/secrets-encryption"}},s={},u=[],l={toc:u};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\uc11c\ub294 K3s \ud074\ub7ec\uc2a4\ud130\ub97c \ubcf4\ud638\ud558\ub294 \ubc29\ubc95\ub860\uacfc \uc218\ub2e8\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4. \ub450 \uc139\uc158\uc73c\ub85c \ub098\ub258\uc5b4\uc838 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uac00\uc774\ub4dc\ub294 K3s\uac00 \uc784\ubca0\ub514\ub4dc etcd\ub85c \uc2e4\ud589\ub418\uace0 \uc788\ub2e4\uace0 \uac00\uc815\ud569\ub2c8\ub2e4."),(0,i.kt)("p",null,"\uc544\ub798 \ubb38\uc11c\ub294 CIS \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubca4\uce58\ub9c8\ud06c v1.23\uc5d0 \uc801\uc6a9\ub429\ub2c8\ub2e4."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/kr/security/hardening-guide"},"\uac15\ud654 \uac00\uc774\ub4dc")),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/kr/security/self-assessment"},"CIS \ubca4\uce58\ub9c8\ud06c \uc790\uccb4 \ud3c9\uac00 \uac00\uc774\ub4dc"))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/1be78505.1ff28fb4.js b/kr/assets/js/1be78505.1ff28fb4.js
deleted file mode 100644
index a7b31c93a..000000000
--- a/kr/assets/js/1be78505.1ff28fb4.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9514,4972],{9963:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Se});var a=n(7294),l=n(6010),o=n(833),r=n(5281),c=n(3320),i=n(3438),s=n(4477),d=n(1116),m=n(6999),u=n(5999),b=n(2466),p=n(5936);const h="backToTopButton_sjWU",E="backToTopButtonShow_xfvO";function f(){const{shown:e,scrollToTop:t}=function(e){let{threshold:t}=e;const[n,l]=(0,a.useState)(!1),o=(0,a.useRef)(!1),{startScroll:r,cancelScroll:c}=(0,b.Ct)();return(0,b.RF)(((e,n)=>{let{scrollY:a}=e;const r=n?.scrollY;r&&(o.current?o.current=!1:a>=r?(c(),l(!1)):a<t?l(!1):a+window.innerHeight<document.documentElement.scrollHeight&&l(!0))})),(0,p.S)((e=>{e.location.hash&&(o.current=!0,l(!1))})),{shown:n,scrollToTop:()=>r(0)}}({threshold:300});return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.BackToTopButton.buttonAriaLabel",message:"Scroll back to top",description:"The ARIA label for the back to top button"}),className:(0,l.Z)("clean-btn",r.k.common.backToTopButton,h,e&&E),type:"button",onClick:t})}var v=n(1442),_=n(6775),g=n(7524),k=n(6668),C=n(1327),S=n(3117);function I(e){return a.createElement("svg",(0,S.Z)({width:"20",height:"20","aria-hidden":"true"},e),a.createElement("g",{fill:"#7a7a7a"},a.createElement("path",{d:"M9.992 10.023c0 .2-.062.399-.172.547l-4.996 7.492a.982.982 0 01-.828.454H1c-.55 0-1-.453-1-1 0-.2.059-.403.168-.551l4.629-6.942L.168 3.078A.939.939 0 010 2.528c0-.548.45-.997 1-.997h2.996c.352 0 .649.18.828.45L9.82 9.472c.11.148.172.347.172.55zm0 0"}),a.createElement("path",{d:"M19.98 10.023c0 .2-.058.399-.168.547l-4.996 7.492a.987.987 0 01-.828.454h-3c-.547 0-.996-.453-.996-1 0-.2.059-.403.168-.551l4.625-6.942-4.625-6.945a.939.939 0 01-.168-.55 1 1 0 01.996-.997h3c.348 0 .649.18.828.45l4.996 7.492c.11.148.168.347.168.55zm0 0"})))}const N="collapseSidebarButton_PEFL",Z="collapseSidebarButtonIcon_kv0_";function x(e){let{onClick:t}=e;return a.createElement("button",{type:"button",title:(0,u.I)({id:"theme.docs.sidebar.collapseButtonTitle",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.collapseButtonAriaLabel",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),className:(0,l.Z)("button button--secondary button--outline",N),onClick:t},a.createElement(I,{className:Z}))}var T=n(9689),y=n(902);const w=Symbol("EmptyContext"),L=a.createContext(w);function A(e){let{children:t}=e;const[n,l]=(0,a.useState)(null),o=(0,a.useMemo)((()=>({expandedItem:n,setExpandedItem:l})),[n]);return a.createElement(L.Provider,{value:o},t)}var M=n(6043),B=n(8596),F=n(9960),H=n(2389);function P(e){let{categoryLabel:t,onClick:n}=e;return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel",message:"Toggle the collapsible sidebar category '{label}'",description:"The ARIA label to toggle the collapsible sidebar category"},{label:t}),type:"button",className:"clean-btn menu__caret",onClick:n})}function D(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{items:m,label:u,collapsible:b,className:p,href:h}=t,{docs:{sidebar:{autoCollapseCategories:E}}}=(0,k.L)(),f=function(e){const t=(0,H.Z)();return(0,a.useMemo)((()=>e.href?e.href:!t&&e.collapsible?(0,i.Wl)(e):void 0),[e,t])}(t),v=(0,i._F)(t,o),_=(0,B.Mg)(h,o),{collapsed:g,setCollapsed:C}=(0,M.u)({initialState:()=>!!b&&(!v&&t.collapsed)}),{expandedItem:I,setExpandedItem:N}=function(){const e=(0,a.useContext)(L);if(e===w)throw new y.i6("DocSidebarItemsExpandedStateProvider");return e}(),Z=function(e){void 0===e&&(e=!g),N(e?null:s),C(e)};return function(e){let{isActive:t,collapsed:n,updateCollapsed:l}=e;const o=(0,y.D9)(t);(0,a.useEffect)((()=>{t&&!o&&n&&l(!1)}),[t,o,n,l])}({isActive:v,collapsed:g,updateCollapsed:Z}),(0,a.useEffect)((()=>{b&&null!=I&&I!==s&&E&&C(!0)}),[b,I,s,C,E]),a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemCategory,r.k.docs.docSidebarItemCategoryLevel(c),"menu__list-item",{"menu__list-item--collapsed":g},p)},a.createElement("div",{className:(0,l.Z)("menu__list-item-collapsible",{"menu__list-item-collapsible--active":_})},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",{"menu__link--sublist":b,"menu__link--sublist-caret":!h&&b,"menu__link--active":v}),onClick:b?e=>{n?.(t),h?Z(!1):(e.preventDefault(),Z())}:()=>{n?.(t)},"aria-current":_?"page":void 0,"aria-expanded":b?!g:void 0,href:b?f??"#":f},d),u),h&&b&&a.createElement(P,{categoryLabel:u,onClick:e=>{e.preventDefault(),Z()}})),a.createElement(M.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:g},a.createElement(G,{items:m,tabIndex:g?-1:0,onItemClick:n,activePath:o,level:c+1})))}var W=n(3919),R=n(9471);const V="menuExternalLink_NmtK";function z(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{href:m,label:u,className:b,autoAddBaseUrl:p}=t,h=(0,i._F)(t,o),E=(0,W.Z)(m);return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(c),"menu__list-item",b),key:u},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",!E&&V,{"menu__link--active":h}),autoAddBaseUrl:p,"aria-current":h?"page":void 0,to:m},E&&{onClick:n?()=>n(t):void 0},d),u,!E&&a.createElement(R.Z,null)))}const U="menuHtmlItem_M9Kj";function K(e){let{item:t,level:n,index:o}=e;const{value:c,defaultStyle:i,className:s}=t;return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(n),i&&[U,"menu__list-item"],s),key:o,dangerouslySetInnerHTML:{__html:c}})}function j(e){let{item:t,...n}=e;switch(t.type){case"category":return a.createElement(D,(0,S.Z)({item:t},n));case"html":return a.createElement(K,(0,S.Z)({item:t},n));default:return a.createElement(z,(0,S.Z)({item:t},n))}}function q(e){let{items:t,...n}=e;return a.createElement(A,null,t.map(((e,t)=>a.createElement(j,(0,S.Z)({key:t,item:e,index:t},n)))))}const G=(0,a.memo)(q),Y="menu_SIkG",O="menuWithAnnouncementBar_GW3s";function X(e){let{path:t,sidebar:n,className:o}=e;const c=function(){const{isActive:e}=(0,T.nT)(),[t,n]=(0,a.useState)(e);return(0,b.RF)((t=>{let{scrollY:a}=t;e&&n(0===a)}),[e]),e&&t}();return a.createElement("nav",{"aria-label":(0,u.I)({id:"theme.docs.sidebar.navAriaLabel",message:"Docs sidebar",description:"The ARIA label for the sidebar navigation"}),className:(0,l.Z)("menu thin-scrollbar",Y,c&&O,o)},a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:n,activePath:t,level:1})))}const J="sidebar_njMd",Q="sidebarWithHideableNavbar_wUlq",$="sidebarHidden_VK0M",ee="sidebarLogo_isFc";function te(e){let{path:t,sidebar:n,onCollapse:o,isHidden:r}=e;const{navbar:{hideOnScroll:c},docs:{sidebar:{hideable:i}}}=(0,k.L)();return a.createElement("div",{className:(0,l.Z)(J,c&&Q,r&&$)},c&&a.createElement(C.Z,{tabIndex:-1,className:ee}),a.createElement(X,{path:t,sidebar:n}),i&&a.createElement(x,{onClick:o}))}const ne=a.memo(te);var ae=n(3102),le=n(3163);const oe=e=>{let{sidebar:t,path:n}=e;const o=(0,le.e)();return a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:t,activePath:n,onItemClick:e=>{"category"===e.type&&e.href&&o.toggle(),"link"===e.type&&o.toggle()},level:1}))};function re(e){return a.createElement(ae.Zo,{component:oe,props:e})}const ce=a.memo(re);function ie(e){const t=(0,g.i)(),n="desktop"===t||"ssr"===t,l="mobile"===t;return a.createElement(a.Fragment,null,n&&a.createElement(ne,e),l&&a.createElement(ce,e))}const se="expandButton_m80_",de="expandButtonIcon_BlDH";function me(e){let{toggleSidebar:t}=e;return a.createElement("div",{className:se,title:(0,u.I)({id:"theme.docs.sidebar.expandButtonTitle",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.expandButtonAriaLabel",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),tabIndex:0,role:"button",onKeyDown:t,onClick:t},a.createElement(I,{className:de}))}const ue={docSidebarContainer:"docSidebarContainer_b6E3",docSidebarContainerHidden:"docSidebarContainerHidden_b3ry",sidebarViewport:"sidebarViewport_Xe31"};function be(e){let{children:t}=e;const n=(0,d.V)();return a.createElement(a.Fragment,{key:n?.name??"noSidebar"},t)}function pe(e){let{sidebar:t,hiddenSidebarContainer:n,setHiddenSidebarContainer:o}=e;const{pathname:c}=(0,_.TH)(),[i,s]=(0,a.useState)(!1),d=(0,a.useCallback)((()=>{i&&s(!1),!i&&(0,v.n)()&&s(!0),o((e=>!e))}),[o,i]);return a.createElement("aside",{className:(0,l.Z)(r.k.docs.docSidebarContainer,ue.docSidebarContainer,n&&ue.docSidebarContainerHidden),onTransitionEnd:e=>{e.currentTarget.classList.contains(ue.docSidebarContainer)&&n&&s(!0)}},a.createElement(be,null,a.createElement("div",{className:(0,l.Z)(ue.sidebarViewport,i&&ue.sidebarViewportHidden)},a.createElement(ie,{sidebar:t,path:c,onCollapse:d,isHidden:i}),i&&a.createElement(me,{toggleSidebar:d}))))}const he={docMainContainer:"docMainContainer_gTbr",docMainContainerEnhanced:"docMainContainerEnhanced_Uz_u",docItemWrapperEnhanced:"docItemWrapperEnhanced_czyv"};function Ee(e){let{hiddenSidebarContainer:t,children:n}=e;const o=(0,d.V)();return a.createElement("main",{className:(0,l.Z)(he.docMainContainer,(t||!o)&&he.docMainContainerEnhanced)},a.createElement("div",{className:(0,l.Z)("container padding-top--md padding-bottom--lg",he.docItemWrapper,t&&he.docItemWrapperEnhanced)},n))}const fe="docPage__5DB",ve="docsWrapper_BCFX";function _e(e){let{children:t}=e;const n=(0,d.V)(),[l,o]=(0,a.useState)(!1);return a.createElement(m.Z,{wrapperClassName:ve},a.createElement(f,null),a.createElement("div",{className:fe},n&&a.createElement(pe,{sidebar:n.items,hiddenSidebarContainer:l,setHiddenSidebarContainer:o}),a.createElement(Ee,{hiddenSidebarContainer:l},t)))}var ge=n(4972),ke=n(197);function Ce(e){const{versionMetadata:t}=e;return a.createElement(a.Fragment,null,a.createElement(ke.Z,{version:t.version,tag:(0,c.os)(t.pluginId,t.version)}),a.createElement(o.d,null,t.noIndex&&a.createElement("meta",{name:"robots",content:"noindex, nofollow"})))}function Se(e){const{versionMetadata:t}=e,n=(0,i.hI)(e);if(!n)return a.createElement(ge.default,null);const{docElement:c,sidebarName:m,sidebarItems:u}=n;return a.createElement(a.Fragment,null,a.createElement(Ce,e),a.createElement(o.FG,{className:(0,l.Z)(r.k.wrapper.docsPages,r.k.page.docsDocPage,e.versionMetadata.className)},a.createElement(s.q,{version:t},a.createElement(d.b,{name:m,items:u},a.createElement(_e,null,c)))))}},4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(833),r=n(6999);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}},4477:(e,t,n)=>{n.d(t,{E:()=>c,q:()=>r});var a=n(7294),l=n(902);const o=a.createContext(null);function r(e){let{children:t,version:n}=e;return a.createElement(o.Provider,{value:n},t)}function c(){const e=(0,a.useContext)(o);if(null===e)throw new l.i6("DocsVersionProvider");return e}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/1be78505.3b555d49.js b/kr/assets/js/1be78505.3b555d49.js
new file mode 100644
index 000000000..d0dd4f40c
--- /dev/null
+++ b/kr/assets/js/1be78505.3b555d49.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9514,4972],{9963:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Se});var a=n(7294),l=n(6010),o=n(1944),r=n(5281),c=n(3320),i=n(3438),s=n(4477),d=n(1116),m=n(1573),u=n(5999),b=n(2466),p=n(5936);const h="backToTopButton_sjWU",E="backToTopButtonShow_xfvO";function f(){const{shown:e,scrollToTop:t}=function(e){let{threshold:t}=e;const[n,l]=(0,a.useState)(!1),o=(0,a.useRef)(!1),{startScroll:r,cancelScroll:c}=(0,b.Ct)();return(0,b.RF)(((e,n)=>{let{scrollY:a}=e;const r=n?.scrollY;r&&(o.current?o.current=!1:a>=r?(c(),l(!1)):a<t?l(!1):a+window.innerHeight<document.documentElement.scrollHeight&&l(!0))})),(0,p.S)((e=>{e.location.hash&&(o.current=!0,l(!1))})),{shown:n,scrollToTop:()=>r(0)}}({threshold:300});return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.BackToTopButton.buttonAriaLabel",message:"Scroll back to top",description:"The ARIA label for the back to top button"}),className:(0,l.Z)("clean-btn",r.k.common.backToTopButton,h,e&&E),type:"button",onClick:t})}var v=n(1442),_=n(6775),g=n(7524),k=n(6668),C=n(1327),S=n(3117);function I(e){return a.createElement("svg",(0,S.Z)({width:"20",height:"20","aria-hidden":"true"},e),a.createElement("g",{fill:"#7a7a7a"},a.createElement("path",{d:"M9.992 10.023c0 .2-.062.399-.172.547l-4.996 7.492a.982.982 0 01-.828.454H1c-.55 0-1-.453-1-1 0-.2.059-.403.168-.551l4.629-6.942L.168 3.078A.939.939 0 010 2.528c0-.548.45-.997 1-.997h2.996c.352 0 .649.18.828.45L9.82 9.472c.11.148.172.347.172.55zm0 0"}),a.createElement("path",{d:"M19.98 10.023c0 .2-.058.399-.168.547l-4.996 7.492a.987.987 0 01-.828.454h-3c-.547 0-.996-.453-.996-1 0-.2.059-.403.168-.551l4.625-6.942-4.625-6.945a.939.939 0 01-.168-.55 1 1 0 01.996-.997h3c.348 0 .649.18.828.45l4.996 7.492c.11.148.168.347.168.55zm0 0"})))}const N="collapseSidebarButton_PEFL",Z="collapseSidebarButtonIcon_kv0_";function x(e){let{onClick:t}=e;return a.createElement("button",{type:"button",title:(0,u.I)({id:"theme.docs.sidebar.collapseButtonTitle",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.collapseButtonAriaLabel",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),className:(0,l.Z)("button button--secondary button--outline",N),onClick:t},a.createElement(I,{className:Z}))}var T=n(9689),y=n(902);const w=Symbol("EmptyContext"),L=a.createContext(w);function A(e){let{children:t}=e;const[n,l]=(0,a.useState)(null),o=(0,a.useMemo)((()=>({expandedItem:n,setExpandedItem:l})),[n]);return a.createElement(L.Provider,{value:o},t)}var M=n(6043),B=n(8596),F=n(9960),H=n(2389);function P(e){let{categoryLabel:t,onClick:n}=e;return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel",message:"Toggle the collapsible sidebar category '{label}'",description:"The ARIA label to toggle the collapsible sidebar category"},{label:t}),type:"button",className:"clean-btn menu__caret",onClick:n})}function D(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{items:m,label:u,collapsible:b,className:p,href:h}=t,{docs:{sidebar:{autoCollapseCategories:E}}}=(0,k.L)(),f=function(e){const t=(0,H.Z)();return(0,a.useMemo)((()=>e.href?e.href:!t&&e.collapsible?(0,i.Wl)(e):void 0),[e,t])}(t),v=(0,i._F)(t,o),_=(0,B.Mg)(h,o),{collapsed:g,setCollapsed:C}=(0,M.u)({initialState:()=>!!b&&(!v&&t.collapsed)}),{expandedItem:I,setExpandedItem:N}=function(){const e=(0,a.useContext)(L);if(e===w)throw new y.i6("DocSidebarItemsExpandedStateProvider");return e}(),Z=function(e){void 0===e&&(e=!g),N(e?null:s),C(e)};return function(e){let{isActive:t,collapsed:n,updateCollapsed:l}=e;const o=(0,y.D9)(t);(0,a.useEffect)((()=>{t&&!o&&n&&l(!1)}),[t,o,n,l])}({isActive:v,collapsed:g,updateCollapsed:Z}),(0,a.useEffect)((()=>{b&&null!=I&&I!==s&&E&&C(!0)}),[b,I,s,C,E]),a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemCategory,r.k.docs.docSidebarItemCategoryLevel(c),"menu__list-item",{"menu__list-item--collapsed":g},p)},a.createElement("div",{className:(0,l.Z)("menu__list-item-collapsible",{"menu__list-item-collapsible--active":_})},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",{"menu__link--sublist":b,"menu__link--sublist-caret":!h&&b,"menu__link--active":v}),onClick:b?e=>{n?.(t),h?Z(!1):(e.preventDefault(),Z())}:()=>{n?.(t)},"aria-current":_?"page":void 0,"aria-expanded":b?!g:void 0,href:b?f??"#":f},d),u),h&&b&&a.createElement(P,{categoryLabel:u,onClick:e=>{e.preventDefault(),Z()}})),a.createElement(M.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:g},a.createElement(G,{items:m,tabIndex:g?-1:0,onItemClick:n,activePath:o,level:c+1})))}var W=n(3919),R=n(9471);const V="menuExternalLink_NmtK";function z(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{href:m,label:u,className:b,autoAddBaseUrl:p}=t,h=(0,i._F)(t,o),E=(0,W.Z)(m);return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(c),"menu__list-item",b),key:u},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",!E&&V,{"menu__link--active":h}),autoAddBaseUrl:p,"aria-current":h?"page":void 0,to:m},E&&{onClick:n?()=>n(t):void 0},d),u,!E&&a.createElement(R.Z,null)))}const U="menuHtmlItem_M9Kj";function K(e){let{item:t,level:n,index:o}=e;const{value:c,defaultStyle:i,className:s}=t;return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(n),i&&[U,"menu__list-item"],s),key:o,dangerouslySetInnerHTML:{__html:c}})}function j(e){let{item:t,...n}=e;switch(t.type){case"category":return a.createElement(D,(0,S.Z)({item:t},n));case"html":return a.createElement(K,(0,S.Z)({item:t},n));default:return a.createElement(z,(0,S.Z)({item:t},n))}}function q(e){let{items:t,...n}=e;return a.createElement(A,null,t.map(((e,t)=>a.createElement(j,(0,S.Z)({key:t,item:e,index:t},n)))))}const G=(0,a.memo)(q),Y="menu_SIkG",O="menuWithAnnouncementBar_GW3s";function X(e){let{path:t,sidebar:n,className:o}=e;const c=function(){const{isActive:e}=(0,T.nT)(),[t,n]=(0,a.useState)(e);return(0,b.RF)((t=>{let{scrollY:a}=t;e&&n(0===a)}),[e]),e&&t}();return a.createElement("nav",{"aria-label":(0,u.I)({id:"theme.docs.sidebar.navAriaLabel",message:"Docs sidebar",description:"The ARIA label for the sidebar navigation"}),className:(0,l.Z)("menu thin-scrollbar",Y,c&&O,o)},a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:n,activePath:t,level:1})))}const J="sidebar_njMd",Q="sidebarWithHideableNavbar_wUlq",$="sidebarHidden_VK0M",ee="sidebarLogo_isFc";function te(e){let{path:t,sidebar:n,onCollapse:o,isHidden:r}=e;const{navbar:{hideOnScroll:c},docs:{sidebar:{hideable:i}}}=(0,k.L)();return a.createElement("div",{className:(0,l.Z)(J,c&&Q,r&&$)},c&&a.createElement(C.Z,{tabIndex:-1,className:ee}),a.createElement(X,{path:t,sidebar:n}),i&&a.createElement(x,{onClick:o}))}const ne=a.memo(te);var ae=n(3102),le=n(3163);const oe=e=>{let{sidebar:t,path:n}=e;const o=(0,le.e)();return a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:t,activePath:n,onItemClick:e=>{"category"===e.type&&e.href&&o.toggle(),"link"===e.type&&o.toggle()},level:1}))};function re(e){return a.createElement(ae.Zo,{component:oe,props:e})}const ce=a.memo(re);function ie(e){const t=(0,g.i)(),n="desktop"===t||"ssr"===t,l="mobile"===t;return a.createElement(a.Fragment,null,n&&a.createElement(ne,e),l&&a.createElement(ce,e))}const se="expandButton_m80_",de="expandButtonIcon_BlDH";function me(e){let{toggleSidebar:t}=e;return a.createElement("div",{className:se,title:(0,u.I)({id:"theme.docs.sidebar.expandButtonTitle",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.expandButtonAriaLabel",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),tabIndex:0,role:"button",onKeyDown:t,onClick:t},a.createElement(I,{className:de}))}const ue={docSidebarContainer:"docSidebarContainer_b6E3",docSidebarContainerHidden:"docSidebarContainerHidden_b3ry",sidebarViewport:"sidebarViewport_Xe31"};function be(e){let{children:t}=e;const n=(0,d.V)();return a.createElement(a.Fragment,{key:n?.name??"noSidebar"},t)}function pe(e){let{sidebar:t,hiddenSidebarContainer:n,setHiddenSidebarContainer:o}=e;const{pathname:c}=(0,_.TH)(),[i,s]=(0,a.useState)(!1),d=(0,a.useCallback)((()=>{i&&s(!1),!i&&(0,v.n)()&&s(!0),o((e=>!e))}),[o,i]);return a.createElement("aside",{className:(0,l.Z)(r.k.docs.docSidebarContainer,ue.docSidebarContainer,n&&ue.docSidebarContainerHidden),onTransitionEnd:e=>{e.currentTarget.classList.contains(ue.docSidebarContainer)&&n&&s(!0)}},a.createElement(be,null,a.createElement("div",{className:(0,l.Z)(ue.sidebarViewport,i&&ue.sidebarViewportHidden)},a.createElement(ie,{sidebar:t,path:c,onCollapse:d,isHidden:i}),i&&a.createElement(me,{toggleSidebar:d}))))}const he={docMainContainer:"docMainContainer_gTbr",docMainContainerEnhanced:"docMainContainerEnhanced_Uz_u",docItemWrapperEnhanced:"docItemWrapperEnhanced_czyv"};function Ee(e){let{hiddenSidebarContainer:t,children:n}=e;const o=(0,d.V)();return a.createElement("main",{className:(0,l.Z)(he.docMainContainer,(t||!o)&&he.docMainContainerEnhanced)},a.createElement("div",{className:(0,l.Z)("container padding-top--md padding-bottom--lg",he.docItemWrapper,t&&he.docItemWrapperEnhanced)},n))}const fe="docPage__5DB",ve="docsWrapper_BCFX";function _e(e){let{children:t}=e;const n=(0,d.V)(),[l,o]=(0,a.useState)(!1);return a.createElement(m.Z,{wrapperClassName:ve},a.createElement(f,null),a.createElement("div",{className:fe},n&&a.createElement(pe,{sidebar:n.items,hiddenSidebarContainer:l,setHiddenSidebarContainer:o}),a.createElement(Ee,{hiddenSidebarContainer:l},t)))}var ge=n(4972),ke=n(197);function Ce(e){const{versionMetadata:t}=e;return a.createElement(a.Fragment,null,a.createElement(ke.Z,{version:t.version,tag:(0,c.os)(t.pluginId,t.version)}),a.createElement(o.d,null,t.noIndex&&a.createElement("meta",{name:"robots",content:"noindex, nofollow"})))}function Se(e){const{versionMetadata:t}=e,n=(0,i.hI)(e);if(!n)return a.createElement(ge.default,null);const{docElement:c,sidebarName:m,sidebarItems:u}=n;return a.createElement(a.Fragment,null,a.createElement(Ce,e),a.createElement(o.FG,{className:(0,l.Z)(r.k.wrapper.docsPages,r.k.page.docsDocPage,e.versionMetadata.className)},a.createElement(s.q,{version:t},a.createElement(d.b,{name:m,items:u},a.createElement(_e,null,c)))))}},4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(1944),r=n(1573);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}},4477:(e,t,n)=>{n.d(t,{E:()=>c,q:()=>r});var a=n(7294),l=n(902);const o=a.createContext(null);function r(e){let{children:t,version:n}=e;return a.createElement(o.Provider,{value:n},t)}function c(){const e=(0,a.useContext)(o);if(null===e)throw new l.i6("DocsVersionProvider");return e}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/1fbd281a.39198784.js b/kr/assets/js/1fbd281a.3f613947.js
similarity index 99%
rename from kr/assets/js/1fbd281a.39198784.js
rename to kr/assets/js/1fbd281a.3f613947.js
index 0c01ad8d0..ef91f54b2 100644
--- a/kr/assets/js/1fbd281a.39198784.js
+++ b/kr/assets/js/1fbd281a.3f613947.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3229],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>f});var a=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,i=function(e,t){if(null==e)return{};var n,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=a.createContext({}),p=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,i=e.mdxType,r=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),m=p(n),f=i,d=m["".concat(s,".").concat(f)]||m[f]||c[f]||r;return n?a.createElement(d,o(o({ref:t},u),{},{components:n})):a.createElement(d,o({ref:t},u))}));function f(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var r=n.length,o=new Array(r);o[0]=m;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var p=2;p<r;p++)o[p]=n[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8628:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>r,metadata:()=>l,toc:()=>p});var a=n(3117),i=(n(7294),n(3905));const r={title:"Configuration Options",weight:20},o=void 0,l={unversionedId:"installation/configuration",id:"installation/configuration",title:"Configuration Options",description:"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/configuration.md",sourceDirName:"installation",slug:"/installation/configuration",permalink:"/kr/installation/configuration",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Configuration Options",weight:20},sidebar:"mySidebar",previous:{title:"Requirements",permalink:"/kr/installation/requirements"},next:{title:"Network Options",permalink:"/kr/installation/network-options"}},s={},p=[{value:"Configuration with install script",id:"configuration-with-install-script",level:2},{value:"Configuration with binary",id:"configuration-with-binary",level:2},{value:"Configuration File",id:"configuration-file",level:2},{value:"Multiple Config Files",id:"multiple-config-files",level:3},{value:"Putting it all together",id:"putting-it-all-together",level:2}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on ",(0,i.kt)("a",{parentName:"p",href:"/kr/advanced/"},"Advanced Options and Configuration")," and the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/server"},"server")," and ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/agent"},"agent")," command documentation for more in-depth coverage."),(0,i.kt)("h2",{id:"configuration-with-install-script"},"Configuration with install script"),(0,i.kt)("p",null,"As mentioned in the ",(0,i.kt)("a",{parentName:"p",href:"/kr/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,i.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,i.kt)("p",null,"You can use a combination of ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables, and command flags to pass configuration to the service configuration. The prefixed environment variables, ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," value, and trailing shell arguments are all persisted into the service configuration. After installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options."),(0,i.kt)("p",null,"To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none --token 12345\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -s -\ncurl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none\n# server is assumed below because there is no K3S_URL\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--flannel-backend none --token 12345" sh -s - \ncurl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345\n')),(0,i.kt)("p",null,"When registering an agent, the following commands all result in the same behavior:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent --server https://k3s.example.com --token mypassword" sh -s -\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent" K3s_TOKEN="mypassword" sh -s - --server https://k3s.example.com\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL\n')),(0,i.kt)("p",null,"For details on all environment variables, see ",(0,i.kt)("a",{parentName:"p",href:"/kr/reference/env-variables"},"Environment Variables.")),(0,i.kt)("h2",{id:"configuration-with-binary"},"Configuration with binary"),(0,i.kt)("p",null,"As stated, the installation script is primarily concerned with configuring K3s to run as a service.",(0,i.kt)("br",{parentName:"p"}),"\n","If you choose to not use the script, you can run K3s simply by downloading the binary from our ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/latest"},"release page"),", placing it on your path, and executing it. This is not particularly useful for permanent installations, but may be useful when performing quick tests that do not merit managing K3s as a system service."),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,i.kt)("p",null,"You can configure K3s in this manner through ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server\n')),(0,i.kt)("p",null,"Or command flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --write-kubeconfig-mode 644\n")),(0,i.kt)("p",null,"The k3s agent can also be configured this way:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s agent --server https://k3s.example.com --token mypassword\n")),(0,i.kt)("p",null,"For details on configuring the K3s server, see the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/server"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s server")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","For details on configuring the K3s agent, see the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/agent"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","You can also use the ",(0,i.kt)("inlineCode",{parentName:"p"},"--help")," flag to see a list of all available options."),(0,i.kt)("admonition",{title:"Matching Flags",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"It is important to match critical flags on your server nodes. For example, if you use the flag\n",(0,i.kt)("inlineCode",{parentName:"p"},"--disable servicelb")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr=10.200.0.0/16")," on your master node, but don't set it on other server nodes, the nodes will fail to join. They will print errors such as:\n",(0,i.kt)("inlineCode",{parentName:"p"},"failed to validate server configuration: critical configuration value mismatch."),"\nSee the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.")),(0,i.kt)("h2",{id:"configuration-file"},"Configuration File"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,i.kt)("p",null,"In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file."),(0,i.kt)("p",null,"By default, values present in a YAML file located at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," will be used on install."),(0,i.kt)("p",null,"An example of a basic ",(0,i.kt)("inlineCode",{parentName:"p"},"server")," config file is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'write-kubeconfig-mode: "0644"\ntls-san:\n  - "foo.local"\nnode-label:\n  - "foo=bar"\n  - "something=amazing"\ncluster-init: true\n')),(0,i.kt)("p",null,"This is equivalent to the following CLI arguments:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'k3s server \\\n  --write-kubeconfig-mode "0644"    \\\n  --tls-san "foo.local"             \\\n  --node-label "foo=bar"            \\\n  --node-label "something=amazing"  \\\n  --cluster-init\n')),(0,i.kt)("p",null,"In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as ",(0,i.kt)("inlineCode",{parentName:"p"},"true")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"false")," in the YAML file."),(0,i.kt)("p",null,"It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-label"),", the CLI arguments will overwrite all values in the list."),(0,i.kt)("p",null,"Finally, the location of the config file can be changed either through the CLI argument ",(0,i.kt)("inlineCode",{parentName:"p"},"--config FILE, -c FILE"),", or the environment variable ",(0,i.kt)("inlineCode",{parentName:"p"},"$K3S_CONFIG_FILE"),"."),(0,i.kt)("h3",{id:"multiple-config-files"},"Multiple Config Files"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"))),(0,i.kt)("p",null,"Multiple configuration files are supported. By default, configuration files are read from ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml.d/*.yaml")," in alphabetical order. The last value for a given key will be used. A ",(0,i.kt)("inlineCode",{parentName:"p"},"+")," can be appended to the key to append the value to the existing string or slice, instead of replacing it."),(0,i.kt)("p",null,"An example of multiple config files is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"# config.yaml\ntoken: boop\nnode-label:\n  - foo=bar\n  - bar=baz\n\n\n# config.yaml.d/test1.yaml\nwrite-kubeconfig-mode: 600\n\n\n# config.yaml.d/test2.yaml\nwrite-kubeconfig-mode: 777\nnode-label:\n  - other=what\n  - foo=three\n\n")),(0,i.kt)("p",null,"This results in a final configuration of:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"write-kubeconfig-mode: 777\ntoken: boop\nnode-label:\n  - other=what\n  - foo=three\n")),(0,i.kt)("h2",{id:"putting-it-all-together"},"Putting it all together"),(0,i.kt)("p",null,"All of the above options can be combined into a single example."),(0,i.kt)("p",null,"A ",(0,i.kt)("inlineCode",{parentName:"p"},"config.yaml")," file is created at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'token: "secret"\ndebug: true\n')),(0,i.kt)("p",null,"Then the installation script is run with a combination of environment variables and flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none\n')),(0,i.kt)("p",null,"Or if you have already installed the K3s Binary:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server --flannel-backend none\n')),(0,i.kt)("p",null,"This results in a server with:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"A kubeconfig file with permissions ",(0,i.kt)("inlineCode",{parentName:"li"},"644")),(0,i.kt)("li",{parentName:"ul"},"Flannel backend set to ",(0,i.kt)("inlineCode",{parentName:"li"},"none")),(0,i.kt)("li",{parentName:"ul"},"The token set to ",(0,i.kt)("inlineCode",{parentName:"li"},"secret")),(0,i.kt)("li",{parentName:"ul"},"Debug logging enabled")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3229],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>f});var a=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,i=function(e,t){if(null==e)return{};var n,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=a.createContext({}),p=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,i=e.mdxType,r=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),m=p(n),f=i,d=m["".concat(s,".").concat(f)]||m[f]||c[f]||r;return n?a.createElement(d,o(o({ref:t},u),{},{components:n})):a.createElement(d,o({ref:t},u))}));function f(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var r=n.length,o=new Array(r);o[0]=m;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var p=2;p<r;p++)o[p]=n[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8628:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>r,metadata:()=>l,toc:()=>p});var a=n(3117),i=(n(7294),n(3905));const r={title:"Configuration Options",weight:20},o=void 0,l={unversionedId:"installation/configuration",id:"installation/configuration",title:"Configuration Options",description:"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/configuration.md",sourceDirName:"installation",slug:"/installation/configuration",permalink:"/kr/installation/configuration",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Configuration Options",weight:20},sidebar:"mySidebar",previous:{title:"Requirements",permalink:"/kr/installation/requirements"},next:{title:"Network Options",permalink:"/kr/installation/network-options"}},s={},p=[{value:"Configuration with install script",id:"configuration-with-install-script",level:2},{value:"Configuration with binary",id:"configuration-with-binary",level:2},{value:"Configuration File",id:"configuration-file",level:2},{value:"Multiple Config Files",id:"multiple-config-files",level:3},{value:"Putting it all together",id:"putting-it-all-together",level:2}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on ",(0,i.kt)("a",{parentName:"p",href:"/kr/advanced/"},"Advanced Options and Configuration")," and the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/server"},"server")," and ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/agent"},"agent")," command documentation for more in-depth coverage."),(0,i.kt)("h2",{id:"configuration-with-install-script"},"Configuration with install script"),(0,i.kt)("p",null,"As mentioned in the ",(0,i.kt)("a",{parentName:"p",href:"/kr/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,i.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,i.kt)("p",null,"You can use a combination of ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables, and command flags to pass configuration to the service configuration. The prefixed environment variables, ",(0,i.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," value, and trailing shell arguments are all persisted into the service configuration. After installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options."),(0,i.kt)("p",null,"To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none --token 12345\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -s -\ncurl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none\n# server is assumed below because there is no K3S_URL\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--flannel-backend none --token 12345" sh -s - \ncurl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345\n')),(0,i.kt)("p",null,"When registering an agent, the following commands all result in the same behavior:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent --server https://k3s.example.com --token mypassword" sh -s -\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent" K3s_TOKEN="mypassword" sh -s - --server https://k3s.example.com\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL\n')),(0,i.kt)("p",null,"For details on all environment variables, see ",(0,i.kt)("a",{parentName:"p",href:"/kr/reference/env-variables"},"Environment Variables.")),(0,i.kt)("h2",{id:"configuration-with-binary"},"Configuration with binary"),(0,i.kt)("p",null,"As stated, the installation script is primarily concerned with configuring K3s to run as a service.",(0,i.kt)("br",{parentName:"p"}),"\n","If you choose to not use the script, you can run K3s simply by downloading the binary from our ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/latest"},"release page"),", placing it on your path, and executing it. This is not particularly useful for permanent installations, but may be useful when performing quick tests that do not merit managing K3s as a system service."),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,i.kt)("p",null,"You can configure K3s in this manner through ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_")," environment variables:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server\n')),(0,i.kt)("p",null,"Or command flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --write-kubeconfig-mode 644\n")),(0,i.kt)("p",null,"The k3s agent can also be configured this way:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"k3s agent --server https://k3s.example.com --token mypassword\n")),(0,i.kt)("p",null,"For details on configuring the K3s server, see the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/server"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s server")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","For details on configuring the K3s agent, see the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/agent"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation"),".",(0,i.kt)("br",{parentName:"p"}),"\n","You can also use the ",(0,i.kt)("inlineCode",{parentName:"p"},"--help")," flag to see a list of all available options."),(0,i.kt)("admonition",{title:"Matching Flags",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"It is important to match critical flags on your server nodes. For example, if you use the flag\n",(0,i.kt)("inlineCode",{parentName:"p"},"--disable servicelb")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr=10.200.0.0/16")," on your master node, but don't set it on other server nodes, the nodes will fail to join. They will print errors such as:\n",(0,i.kt)("inlineCode",{parentName:"p"},"failed to validate server configuration: critical configuration value mismatch."),"\nSee the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.")),(0,i.kt)("h2",{id:"configuration-file"},"Configuration File"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,i.kt)("p",null,"In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file."),(0,i.kt)("p",null,"By default, values present in a YAML file located at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," will be used on install."),(0,i.kt)("p",null,"An example of a basic ",(0,i.kt)("inlineCode",{parentName:"p"},"server")," config file is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'write-kubeconfig-mode: "0644"\ntls-san:\n  - "foo.local"\nnode-label:\n  - "foo=bar"\n  - "something=amazing"\ncluster-init: true\n')),(0,i.kt)("p",null,"This is equivalent to the following CLI arguments:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'k3s server \\\n  --write-kubeconfig-mode "0644"    \\\n  --tls-san "foo.local"             \\\n  --node-label "foo=bar"            \\\n  --node-label "something=amazing"  \\\n  --cluster-init\n')),(0,i.kt)("p",null,"In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as ",(0,i.kt)("inlineCode",{parentName:"p"},"true")," or ",(0,i.kt)("inlineCode",{parentName:"p"},"false")," in the YAML file."),(0,i.kt)("p",null,"It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-label"),", the CLI arguments will overwrite all values in the list."),(0,i.kt)("p",null,"Finally, the location of the config file can be changed either through the CLI argument ",(0,i.kt)("inlineCode",{parentName:"p"},"--config FILE, -c FILE"),", or the environment variable ",(0,i.kt)("inlineCode",{parentName:"p"},"$K3S_CONFIG_FILE"),"."),(0,i.kt)("h3",{id:"multiple-config-files"},"Multiple Config Files"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"))),(0,i.kt)("p",null,"Multiple configuration files are supported. By default, configuration files are read from ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml.d/*.yaml")," in alphabetical order. The last value for a given key will be used. A ",(0,i.kt)("inlineCode",{parentName:"p"},"+")," can be appended to the key to append the value to the existing string or slice, instead of replacing it."),(0,i.kt)("p",null,"An example of multiple config files is below:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"# config.yaml\ntoken: boop\nnode-label:\n  - foo=bar\n  - bar=baz\n\n\n# config.yaml.d/test1.yaml\nwrite-kubeconfig-mode: 600\n\n\n# config.yaml.d/test2.yaml\nwrite-kubeconfig-mode: 777\nnode-label:\n  - other=what\n  - foo=three\n\n")),(0,i.kt)("p",null,"This results in a final configuration of:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"write-kubeconfig-mode: 777\ntoken: boop\nnode-label:\n  - other=what\n  - foo=three\n")),(0,i.kt)("h2",{id:"putting-it-all-together"},"Putting it all together"),(0,i.kt)("p",null,"All of the above options can be combined into a single example."),(0,i.kt)("p",null,"A ",(0,i.kt)("inlineCode",{parentName:"p"},"config.yaml")," file is created at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'token: "secret"\ndebug: true\n')),(0,i.kt)("p",null,"Then the installation script is run with a combination of environment variables and flags:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none\n')),(0,i.kt)("p",null,"Or if you have already installed the K3s Binary:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server --flannel-backend none\n')),(0,i.kt)("p",null,"This results in a server with:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"A kubeconfig file with permissions ",(0,i.kt)("inlineCode",{parentName:"li"},"644")),(0,i.kt)("li",{parentName:"ul"},"Flannel backend set to ",(0,i.kt)("inlineCode",{parentName:"li"},"none")),(0,i.kt)("li",{parentName:"ul"},"The token set to ",(0,i.kt)("inlineCode",{parentName:"li"},"secret")),(0,i.kt)("li",{parentName:"ul"},"Debug logging enabled")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/20aafa33.d01495be.js b/kr/assets/js/20aafa33.8d84a102.js
similarity index 99%
rename from kr/assets/js/20aafa33.d01495be.js
rename to kr/assets/js/20aafa33.8d84a102.js
index 98fb26ee6..3e75957bd 100644
--- a/kr/assets/js/20aafa33.d01495be.js
+++ b/kr/assets/js/20aafa33.8d84a102.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6515],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>k});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var d=a.createContext({}),s=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=s(e.components);return a.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,d=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),m=s(n),k=r,c=m["".concat(d,".").concat(k)]||m[k]||p[k]||l;return n?a.createElement(c,i(i({ref:t},u),{},{components:n})):a.createElement(c,i({ref:t},u))}));function k(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var s=2;s<l;s++)i[s]=n[s];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2063:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>s});var a=n(3117),r=(n(7294),n(3905));const l={title:"server",weight:1},i="k3s server",o={unversionedId:"cli/server",id:"cli/server",title:"server",description:"In this section, you'll learn how to configure the K3s server.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/server.md",sourceDirName:"cli",slug:"/cli/server",permalink:"/kr/cli/server",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/server.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"server",weight:1},sidebar:"mySidebar",previous:{title:"\uba85\ub839\uc904 \ub3c4\uad6c",permalink:"/kr/cli/"},next:{title:"agent",permalink:"/kr/cli/agent"}},d={},s=[{value:"Critical Configuration Values",id:"critical-configuration-values",level:2},{value:"Commonly Used Options",id:"commonly-used-options",level:2},{value:"Database",id:"database",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Admin Kubeconfig Options",id:"admin-kubeconfig-options",level:3},{value:"Advanced Options",id:"advanced-options",level:2},{value:"Logging",id:"logging",level:3},{value:"Listeners",id:"listeners",level:3},{value:"Data",id:"data",level:3},{value:"Secrets Encryption",id:"secrets-encryption",level:3},{value:"Networking",id:"networking",level:3},{value:"Storage Class",id:"storage-class",level:3},{value:"Kubernetes Components",id:"kubernetes-components",level:3},{value:"Customized Flags for Kubernetes Processes",id:"customized-flags-for-kubernetes-processes",level:3},{value:"Experimental Options",id:"experimental-options",level:3},{value:"Deprecated Options",id:"deprecated-options",level:3}],u={toc:s};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-server"},"k3s server"),(0,r.kt)("p",null,"In this section, you'll learn how to configure the K3s server."),(0,r.kt)("p",null,"Note that servers also run an agent, so all of the configuration options listed in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation")," are also supported on servers."),(0,r.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,r.kt)("h2",{id:"critical-configuration-values"},"Critical Configuration Values"),(0,r.kt)("p",null,"The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--agent-token")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-cloud-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-servicelb")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--egress-selector-mode")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-backend")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-external-ip")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-ipv6-masq")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr"))),(0,r.kt)("h2",{id:"commonly-used-options"},"Commonly Used Options"),(0,r.kt)("h3",{id:"database"},"Database"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"Specify etcd, Mysql, Postgres, or Sqlite (default) data source name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS Certificate Authority file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS certification file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS key file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-expose-metrics")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Expose etcd metrics to client interface (default: false)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-name")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Set the base name of etcd snapshots. Default: etcd-snapshot-",(0,r.kt)("inlineCode",{parentName:"td"},"<unix-timestamp>"),' (default:"etcd-snapshot")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours '0 ",(0,r.kt)("em",{parentName:"td"},"/5 ",(0,r.kt)("em",{parentName:"em"}," ","*"," "),"' (default: \"0 "),"/12 ","*"," ","*"," ","*",'")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots (default: ${data-dir}/db/snapshots)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 endpoint url (default: "s3.amazonaws.com")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_ACCESS_KEY_ID")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_SECRET_ACCESS_KEY")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 region / bucket location (optional) (default: "us-east-1")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-insecure")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 over HTTPS"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-timeout")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 timeout (default: 5m0s)"),(0,r.kt)("td",{parentName:"tr",align:null})))),(0,r.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")," value, ",(0,r.kt)("inlineCode",{parentName:"td"},"-t")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join a server or agent to a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the cluster-secret/token")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join agents to the cluster, but not servers")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the agent secret")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--server")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Server to connect to, used to join a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-init")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_INIT")),(0,r.kt)("td",{parentName:"tr",align:null},"Initialize a new cluster using embedded Etcd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_RESET")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster")))),(0,r.kt)("h3",{id:"admin-kubeconfig-options"},"Admin Kubeconfig Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig value, -o")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_OUTPUT")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig for admin client to this file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_MODE")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig with this ",(0,r.kt)("a",{parentName:"td",href:"https://en.wikipedia.org/wiki/Chmod"},"mode.")," The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.")))),(0,r.kt)("h2",{id:"advanced-options"},"Advanced Options"),(0,r.kt)("h3",{id:"logging"},"Logging"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--debug")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Turn on debug logs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0"),(0,r.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,r.kt)("h3",{id:"listeners"},"Listeners"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--bind-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0.0.0.0"),(0,r.kt)("td",{parentName:"tr",align:null},"k3s bind address")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--https-listen-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"HTTPS listen port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"node-external-ip/node-ip"),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 address that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"listen-port/0"),(0,r.kt)("td",{parentName:"tr",align:null},"Port that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--tls-san")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert")))),(0,r.kt)("h3",{id:"data"},"Data"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"${HOME}/.rancher/k3s")," if not root"),(0,r.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,r.kt)("h3",{id:"secrets-encryption"},"Secrets Encryption"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--secrets-encryption")),(0,r.kt)("td",{parentName:"tr",align:null},"false"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable Secret encryption at rest")))),(0,r.kt)("h3",{id:"networking"},"Networking"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.42.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for pod IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for service IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-node-port-range")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"30000-32767"'),(0,r.kt)("td",{parentName:"tr",align:null},"Port range to reserve for services with NodePort visibility")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-dns")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.10"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 Cluster IP for coredns service. Should be in your service-cidr range")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-domain")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"cluster.local"'),(0,r.kt)("td",{parentName:"tr",align:null},"Cluster Domain")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"vxlan"'),(0,r.kt)("td",{parentName:"tr",align:null},"One of 'none', 'vxlan', 'ipsec'(deprecated), 'host-gw', 'wireguard-native', or 'wireguard'(deprecated)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Enable IPv6 masquerading for pod")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses for Flannel traffic")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--servicelb-namespace")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"kube-system"'),(0,r.kt)("td",{parentName:"tr",align:null},"Namespace of the pods for the servicelb component")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--egress-selector-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"agent"'),(0,r.kt)("td",{parentName:"tr",align:null},"Must be one of the following: ",(0,r.kt)("ul",null,(0,r.kt)("li",null,"disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs."),(0,r.kt)("li",null,"agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s."),(0,r.kt)("li",null," pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node."),(0,r.kt)("li",null,"  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.")))))),(0,r.kt)("h3",{id:"storage-class"},"Storage Class"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--default-local-storage-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Default local storage path for local provisioner storage class")))),(0,r.kt)("h3",{id:"kubernetes-components"},"Kubernetes Components"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/kr/installation/packaged-components#using-the---disable-flag"},"Using the ",(0,r.kt)("inlineCode",{parentName:"a"},"--disable")," flag"),'"')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-scheduler")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Kubernetes default scheduler")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-cloud-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default cloud controller manager")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-kube-proxy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable running kube-proxy")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-network-policy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default network policy controller")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-helm-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Helm controller")))),(0,r.kt)("h3",{id:"customized-flags-for-kubernetes-processes"},"Customized Flags for Kubernetes Processes"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for etcd process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-apiserver-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-apiserver process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-scheduler-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-scheduler process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-cloud-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-cloud-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,r.kt)("h3",{id:"experimental-options"},"Experimental Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,r.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--enable-pprof")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable pprof endpoint on supervisor port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--docker")),(0,r.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,r.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-agent")),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/kr/advanced/#running-agentless-servers-experimental"},"Running Agentless Servers (Experimental)"),'"')))),(0,r.kt)("h3",{id:"deprecated-options"},"Deprecated Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-deploy")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--disable"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--token"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," wireguard"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value=option1=value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," to specify the flannel config file with the backend config")))),(0,r.kt)("h1",{id:"k3s-server-cli-help"},"K3s Server CLI Help"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"[$K3S_TOKEN]"),", it means that the option can be passed in as an environment variable of that name.")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s server - Run management server\n\nUSAGE:\n   k3s server [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --bind-address value                       (listener) k3s bind address (default: 0.0.0.0)\n   --https-listen-port value                  (listener) HTTPS listen port (default: 6443)\n   --advertise-address value                  (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip)\n   --advertise-port value                     (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0)\n   --tls-san value                            (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert\n   --data-dir value, -d value                 (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root)\n   --cluster-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16)\n   --service-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16)\n   --service-node-port-range value            (networking) Port range to reserve for services with NodePort visibility (default: "30000-32767")\n   --cluster-dns value                        (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10)\n   --cluster-domain value                     (networking) Cluster Domain (default: "cluster.local")\n   --flannel-backend value                    (networking) backend<=option1=val1,option2=val2> where backend is one of \'none\', \'vxlan\', \'ipsec\' (deprecated), \'host-gw\', \'wireguard-native\', \'wireguard\' (deprecated) (default: "vxlan")\n   --flannel-ipv6-masq                        (networking) Enable IPv6 masquerading for pod\n   --flannel-external-ip                      (networking) Use node external IP addresses for Flannel traffic\n   --egress-selector-mode value               (networking) One of \'agent\', \'cluster\', \'pod\', \'disabled\' (default: "agent")\n   --servicelb-namespace value                (networking) Namespace of the pods for the servicelb component (default: "kube-system")\n   --write-kubeconfig value, -o value         (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT]\n   --write-kubeconfig-mode value              (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE]\n   --token value, -t value                    (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN]\n   --token-file value                         (cluster) File containing the token [$K3S_TOKEN_FILE]\n   --agent-token value                        (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN]\n   --agent-token-file value                   (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to, used to join a cluster [$K3S_URL]\n   --cluster-init                             (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT]\n   --cluster-reset                            (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET]\n   --cluster-reset-restore-path value         (db) Path to snapshot file to be restored\n   --kube-apiserver-arg value                 (flags) Customized flag for kube-apiserver process\n   --etcd-arg value                           (flags) Customized flag for etcd process\n   --kube-controller-manager-arg value        (flags) Customized flag for kube-controller-manager process\n   --kube-scheduler-arg value                 (flags) Customized flag for kube-scheduler process\n   --kube-cloud-controller-manager-arg value  (flags) Customized flag for kube-cloud-controller-manager process\n   --datastore-endpoint value                 (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT]\n   --datastore-cafile value                   (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE]\n   --datastore-certfile value                 (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE]\n   --datastore-keyfile value                  (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE]\n   --etcd-expose-metrics                      (db) Expose etcd metrics to client interface. (default: false)\n   --etcd-disable-snapshots                   (db) Disable automatic etcd snapshots\n   --etcd-snapshot-name value                 (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: "etcd-snapshot")\n   --etcd-snapshot-schedule-cron value        (db) Snapshot interval time in cron spec. eg. every 5 hours \'* */5 * * *\' (default: "0 */12 * * *")\n   --etcd-snapshot-retention value            (db) Number of snapshots to retain (default: 5)\n   --etcd-snapshot-dir value                  (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots)\n   --etcd-snapshot-compress                   (db) Compress etcd snapshot\n   --etcd-s3                                  (db) Enable backup to S3\n   --etcd-s3-endpoint value                   (db) S3 endpoint url (default: "s3.amazonaws.com")\n   --etcd-s3-endpoint-ca value                (db) S3 custom CA cert to connect to S3 endpoint\n   --etcd-s3-skip-ssl-verify                  (db) Disables S3 SSL certificate validation\n   --etcd-s3-access-key value                 (db) S3 access key [$AWS_ACCESS_KEY_ID]\n   --etcd-s3-secret-key value                 (db) S3 secret key [$AWS_SECRET_ACCESS_KEY]\n   --etcd-s3-bucket value                     (db) S3 bucket name\n   --etcd-s3-region value                     (db) S3 region / bucket location (optional) (default: "us-east-1")\n   --etcd-s3-folder value                     (db) S3 folder\n   --etcd-s3-insecure                         (db) Disables S3 over HTTPS\n   --etcd-s3-timeout value                    (db) S3 timeout (default: 5m0s)\n   --default-local-storage-path value         (storage) Default local storage path for local provisioner storage class\n   --disable value                            (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server)\n   --disable-scheduler                        (components) Disable Kubernetes default scheduler\n   --disable-cloud-controller                 (components) Disable k3s default cloud controller manager\n   --disable-kube-proxy                       (components) Disable running kube-proxy\n   --disable-network-policy                   (components) Disable k3s default network policy controller\n   --disable-helm-controller                  (components) Disable Helm controller\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --system-default-registry value            (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY]\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --secrets-encryption                       Enable secret encryption at rest\n   --enable-pprof                             (experimental) Enable pprof endpoint on supervisor port\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n')))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6515],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>k});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var d=a.createContext({}),s=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=s(e.components);return a.createElement(d.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,d=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),m=s(n),k=r,c=m["".concat(d,".").concat(k)]||m[k]||p[k]||l;return n?a.createElement(c,i(i({ref:t},u),{},{components:n})):a.createElement(c,i({ref:t},u))}));function k(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var s=2;s<l;s++)i[s]=n[s];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2063:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>s});var a=n(3117),r=(n(7294),n(3905));const l={title:"server",weight:1},i="k3s server",o={unversionedId:"cli/server",id:"cli/server",title:"server",description:"In this section, you'll learn how to configure the K3s server.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/server.md",sourceDirName:"cli",slug:"/cli/server",permalink:"/kr/cli/server",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/server.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"server",weight:1},sidebar:"mySidebar",previous:{title:"\uba85\ub839\uc904 \ub3c4\uad6c",permalink:"/kr/cli/"},next:{title:"agent",permalink:"/kr/cli/agent"}},d={},s=[{value:"Critical Configuration Values",id:"critical-configuration-values",level:2},{value:"Commonly Used Options",id:"commonly-used-options",level:2},{value:"Database",id:"database",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Admin Kubeconfig Options",id:"admin-kubeconfig-options",level:3},{value:"Advanced Options",id:"advanced-options",level:2},{value:"Logging",id:"logging",level:3},{value:"Listeners",id:"listeners",level:3},{value:"Data",id:"data",level:3},{value:"Secrets Encryption",id:"secrets-encryption",level:3},{value:"Networking",id:"networking",level:3},{value:"Storage Class",id:"storage-class",level:3},{value:"Kubernetes Components",id:"kubernetes-components",level:3},{value:"Customized Flags for Kubernetes Processes",id:"customized-flags-for-kubernetes-processes",level:3},{value:"Experimental Options",id:"experimental-options",level:3},{value:"Deprecated Options",id:"deprecated-options",level:3}],u={toc:s};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-server"},"k3s server"),(0,r.kt)("p",null,"In this section, you'll learn how to configure the K3s server."),(0,r.kt)("p",null,"Note that servers also run an agent, so all of the configuration options listed in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s agent")," documentation")," are also supported on servers."),(0,r.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,r.kt)("h2",{id:"critical-configuration-values"},"Critical Configuration Values"),(0,r.kt)("p",null,"The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--agent-token")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-cloud-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--disable-servicelb")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--egress-selector-mode")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-backend")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-external-ip")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--flannel-ipv6-masq")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr"))),(0,r.kt)("h2",{id:"commonly-used-options"},"Commonly Used Options"),(0,r.kt)("h3",{id:"database"},"Database"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"Specify etcd, Mysql, Postgres, or Sqlite (default) data source name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS Certificate Authority file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS certification file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS key file used to secure datastore backend communication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-expose-metrics")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Expose etcd metrics to client interface (default: false)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-name")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Set the base name of etcd snapshots. Default: etcd-snapshot-",(0,r.kt)("inlineCode",{parentName:"td"},"<unix-timestamp>"),' (default:"etcd-snapshot")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours '0 ",(0,r.kt)("em",{parentName:"td"},"/5 ",(0,r.kt)("em",{parentName:"em"}," ","*"," "),"' (default: \"0 "),"/12 ","*"," ","*"," ","*",'")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots (default: ${data-dir}/db/snapshots)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 endpoint url (default: "s3.amazonaws.com")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_ACCESS_KEY_ID")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"AWS_SECRET_ACCESS_KEY")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},'S3 region / bucket location (optional) (default: "us-east-1")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-insecure")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 over HTTPS"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-timeout")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"S3 timeout (default: 5m0s)"),(0,r.kt)("td",{parentName:"tr",align:null})))),(0,r.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")," value, ",(0,r.kt)("inlineCode",{parentName:"td"},"-t")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join a server or agent to a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the cluster-secret/token")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Shared secret used to join agents to the cluster, but not servers")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"File containing the agent secret")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--server")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Server to connect to, used to join a cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-init")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_INIT")),(0,r.kt)("td",{parentName:"tr",align:null},"Initialize a new cluster using embedded Etcd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_RESET")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster")))),(0,r.kt)("h3",{id:"admin-kubeconfig-options"},"Admin Kubeconfig Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig value, -o")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_OUTPUT")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig for admin client to this file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_MODE")),(0,r.kt)("td",{parentName:"tr",align:null},"Write kubeconfig with this ",(0,r.kt)("a",{parentName:"td",href:"https://en.wikipedia.org/wiki/Chmod"},"mode.")," The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.")))),(0,r.kt)("h2",{id:"advanced-options"},"Advanced Options"),(0,r.kt)("h3",{id:"logging"},"Logging"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--debug")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Turn on debug logs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0"),(0,r.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,r.kt)("h3",{id:"listeners"},"Listeners"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--bind-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0.0.0.0"),(0,r.kt)("td",{parentName:"tr",align:null},"k3s bind address")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--https-listen-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"HTTPS listen port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-address")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"node-external-ip/node-ip"),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 address that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--advertise-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"listen-port/0"),(0,r.kt)("td",{parentName:"tr",align:null},"Port that apiserver uses to advertise to members of the cluster")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--tls-san")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert")))),(0,r.kt)("h3",{id:"data"},"Data"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s")," or ",(0,r.kt)("inlineCode",{parentName:"td"},"${HOME}/.rancher/k3s")," if not root"),(0,r.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,r.kt)("h3",{id:"secrets-encryption"},"Secrets Encryption"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--secrets-encryption")),(0,r.kt)("td",{parentName:"tr",align:null},"false"),(0,r.kt)("td",{parentName:"tr",align:null},"Enable Secret encryption at rest")))),(0,r.kt)("h3",{id:"networking"},"Networking"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.42.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for pod IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-cidr")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.0/16"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4/IPv6 network CIDRs to use for service IPs")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--service-node-port-range")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"30000-32767"'),(0,r.kt)("td",{parentName:"tr",align:null},"Port range to reserve for services with NodePort visibility")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-dns")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"10.43.0.10"'),(0,r.kt)("td",{parentName:"tr",align:null},"IPv4 Cluster IP for coredns service. Should be in your service-cidr range")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-domain")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"cluster.local"'),(0,r.kt)("td",{parentName:"tr",align:null},"Cluster Domain")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"vxlan"'),(0,r.kt)("td",{parentName:"tr",align:null},"One of 'none', 'vxlan', 'ipsec'(deprecated), 'host-gw', 'wireguard-native', or 'wireguard'(deprecated)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Enable IPv6 masquerading for pod")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,r.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,r.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses for Flannel traffic")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--servicelb-namespace")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"kube-system"'),(0,r.kt)("td",{parentName:"tr",align:null},"Namespace of the pods for the servicelb component")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--egress-selector-mode")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"agent"'),(0,r.kt)("td",{parentName:"tr",align:null},"Must be one of the following: ",(0,r.kt)("ul",null,(0,r.kt)("li",null,"disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs."),(0,r.kt)("li",null,"agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s."),(0,r.kt)("li",null," pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node."),(0,r.kt)("li",null,"  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.")))))),(0,r.kt)("h3",{id:"storage-class"},"Storage Class"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--default-local-storage-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Default local storage path for local provisioner storage class")))),(0,r.kt)("h3",{id:"kubernetes-components"},"Kubernetes Components"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/kr/installation/packaged-components#using-the---disable-flag"},"Using the ",(0,r.kt)("inlineCode",{parentName:"a"},"--disable")," flag"),'"')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-scheduler")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Kubernetes default scheduler")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-cloud-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default cloud controller manager")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-kube-proxy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable running kube-proxy")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-network-policy")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable k3s default network policy controller")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-helm-controller")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable Helm controller")))),(0,r.kt)("h3",{id:"customized-flags-for-kubernetes-processes"},"Customized Flags for Kubernetes Processes"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for etcd process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-apiserver-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-apiserver process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-scheduler-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-scheduler process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-cloud-controller-manager-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-cloud-controller-manager process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,r.kt)("h3",{id:"experimental-options"},"Experimental Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,r.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--enable-pprof")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable pprof endpoint on supervisor port")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--docker")),(0,r.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,r.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--disable-agent")),(0,r.kt)("td",{parentName:"tr",align:null},'See "',(0,r.kt)("a",{parentName:"td",href:"/kr/advanced/#running-agentless-servers-experimental"},"Running Agentless Servers (Experimental)"),'"')))),(0,r.kt)("h3",{id:"deprecated-options"},"Deprecated Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-deploy")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--disable"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--token"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," wireguard"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value=option1=value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," to specify the flannel config file with the backend config")))),(0,r.kt)("h1",{id:"k3s-server-cli-help"},"K3s Server CLI Help"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"[$K3S_TOKEN]"),", it means that the option can be passed in as an environment variable of that name.")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s server - Run management server\n\nUSAGE:\n   k3s server [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --bind-address value                       (listener) k3s bind address (default: 0.0.0.0)\n   --https-listen-port value                  (listener) HTTPS listen port (default: 6443)\n   --advertise-address value                  (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip)\n   --advertise-port value                     (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0)\n   --tls-san value                            (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert\n   --data-dir value, -d value                 (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root)\n   --cluster-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16)\n   --service-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16)\n   --service-node-port-range value            (networking) Port range to reserve for services with NodePort visibility (default: "30000-32767")\n   --cluster-dns value                        (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10)\n   --cluster-domain value                     (networking) Cluster Domain (default: "cluster.local")\n   --flannel-backend value                    (networking) backend<=option1=val1,option2=val2> where backend is one of \'none\', \'vxlan\', \'ipsec\' (deprecated), \'host-gw\', \'wireguard-native\', \'wireguard\' (deprecated) (default: "vxlan")\n   --flannel-ipv6-masq                        (networking) Enable IPv6 masquerading for pod\n   --flannel-external-ip                      (networking) Use node external IP addresses for Flannel traffic\n   --egress-selector-mode value               (networking) One of \'agent\', \'cluster\', \'pod\', \'disabled\' (default: "agent")\n   --servicelb-namespace value                (networking) Namespace of the pods for the servicelb component (default: "kube-system")\n   --write-kubeconfig value, -o value         (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT]\n   --write-kubeconfig-mode value              (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE]\n   --token value, -t value                    (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN]\n   --token-file value                         (cluster) File containing the token [$K3S_TOKEN_FILE]\n   --agent-token value                        (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN]\n   --agent-token-file value                   (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to, used to join a cluster [$K3S_URL]\n   --cluster-init                             (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT]\n   --cluster-reset                            (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET]\n   --cluster-reset-restore-path value         (db) Path to snapshot file to be restored\n   --kube-apiserver-arg value                 (flags) Customized flag for kube-apiserver process\n   --etcd-arg value                           (flags) Customized flag for etcd process\n   --kube-controller-manager-arg value        (flags) Customized flag for kube-controller-manager process\n   --kube-scheduler-arg value                 (flags) Customized flag for kube-scheduler process\n   --kube-cloud-controller-manager-arg value  (flags) Customized flag for kube-cloud-controller-manager process\n   --datastore-endpoint value                 (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT]\n   --datastore-cafile value                   (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE]\n   --datastore-certfile value                 (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE]\n   --datastore-keyfile value                  (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE]\n   --etcd-expose-metrics                      (db) Expose etcd metrics to client interface. (default: false)\n   --etcd-disable-snapshots                   (db) Disable automatic etcd snapshots\n   --etcd-snapshot-name value                 (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: "etcd-snapshot")\n   --etcd-snapshot-schedule-cron value        (db) Snapshot interval time in cron spec. eg. every 5 hours \'* */5 * * *\' (default: "0 */12 * * *")\n   --etcd-snapshot-retention value            (db) Number of snapshots to retain (default: 5)\n   --etcd-snapshot-dir value                  (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots)\n   --etcd-snapshot-compress                   (db) Compress etcd snapshot\n   --etcd-s3                                  (db) Enable backup to S3\n   --etcd-s3-endpoint value                   (db) S3 endpoint url (default: "s3.amazonaws.com")\n   --etcd-s3-endpoint-ca value                (db) S3 custom CA cert to connect to S3 endpoint\n   --etcd-s3-skip-ssl-verify                  (db) Disables S3 SSL certificate validation\n   --etcd-s3-access-key value                 (db) S3 access key [$AWS_ACCESS_KEY_ID]\n   --etcd-s3-secret-key value                 (db) S3 secret key [$AWS_SECRET_ACCESS_KEY]\n   --etcd-s3-bucket value                     (db) S3 bucket name\n   --etcd-s3-region value                     (db) S3 region / bucket location (optional) (default: "us-east-1")\n   --etcd-s3-folder value                     (db) S3 folder\n   --etcd-s3-insecure                         (db) Disables S3 over HTTPS\n   --etcd-s3-timeout value                    (db) S3 timeout (default: 5m0s)\n   --default-local-storage-path value         (storage) Default local storage path for local provisioner storage class\n   --disable value                            (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server)\n   --disable-scheduler                        (components) Disable Kubernetes default scheduler\n   --disable-cloud-controller                 (components) Disable k3s default cloud controller manager\n   --disable-kube-proxy                       (components) Disable running kube-proxy\n   --disable-network-policy                   (components) Disable k3s default network policy controller\n   --disable-helm-controller                  (components) Disable Helm controller\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --system-default-registry value            (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY]\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --secrets-encryption                       Enable secret encryption at rest\n   --enable-pprof                             (experimental) Enable pprof endpoint on supervisor port\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n')))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/2f39a65d.d76730dd.js b/kr/assets/js/2f39a65d.5d04eb93.js
similarity index 99%
rename from kr/assets/js/2f39a65d.d76730dd.js
rename to kr/assets/js/2f39a65d.5d04eb93.js
index d31bb4102..d1ad267f0 100644
--- a/kr/assets/js/2f39a65d.d76730dd.js
+++ b/kr/assets/js/2f39a65d.5d04eb93.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4885],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var p=a.createContext({}),o=function(e){var t=a.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=o(e.components);return a.createElement(p.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,p=e.parentName,k=s(e,["components","mdxType","originalType","parentName"]),d=o(n),c=r,m=d["".concat(p,".").concat(c)]||d[c]||u[c]||l;return n?a.createElement(m,i(i({ref:t},k),{},{components:n})):a.createElement(m,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=d;var s={};for(var p in t)hasOwnProperty.call(t,p)&&(s[p]=t[p]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var o=2;o<l;o++)i[o]=n[o];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},3697:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>s,toc:()=>o});var a=n(3117),r=(n(7294),n(3905));const l={title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",weight:45,aliases:["/k3s/latest/kr/running/","/k3s/latest/kr/configuration/"]},i=void 0,s={unversionedId:"advanced/advanced",id:"advanced/advanced",title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",description:"\uc774 \uc139\uc158\uc5d0\ub294 K3s\ub97c \uc2e4\ud589\ud558\uace0 \uad00\ub9ac\ud560 \uc218 \uc788\ub294 \ub2e4\uc591\ud55c \ubc29\ubc95\uacfc K3s \uc0ac\uc6a9\uc744 \uc704\ud574 \ud638\uc2a4\ud2b8 OS\ub97c \uc900\ube44\ud558\ub294 \ub370 \ud544\uc694\ud55c \ub2e8\uacc4\ub97c \uc124\uba85\ud558\ub294 \uace0\uae09 \uc815\ubcf4\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/advanced/advanced.md",sourceDirName:"advanced",slug:"/advanced/",permalink:"/kr/advanced/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",weight:45,aliases:["/k3s/latest/kr/running/","/k3s/latest/kr/configuration/"]},sidebar:"mySidebar",previous:{title:"\ud5ec\ub984(Helm)",permalink:"/kr/helm/"},next:{title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",permalink:"/kr/faq/"}},p={},o=[{value:"\uc778\uc99d\uc11c \uad00\ub9ac",id:"\uc778\uc99d\uc11c-\uad00\ub9ac",level:2},{value:"\uc778\uc99d \uae30\uad00 \uc778\uc99d\uc11c",id:"\uc778\uc99d-\uae30\uad00-\uc778\uc99d\uc11c",level:3},{value:"\ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c",id:"\ud074\ub77c\uc774\uc5b8\ud2b8-\ubc0f-\uc11c\ubc84-\uc778\uc99d\uc11c",level:3},{value:"\ud1a0\ud070 \uad00\ub9ac",id:"\ud1a0\ud070-\uad00\ub9ac",level:2},{value:"HTTP \ud504\ub85d\uc2dc \uad6c\uc131\ud558\uae30",id:"http-\ud504\ub85d\uc2dc-\uad6c\uc131\ud558\uae30",level:2},{value:"\ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc73c\ub85c Docker \uc0ac\uc6a9",id:"\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784\uc73c\ub85c-docker-\uc0ac\uc6a9",level:2},{value:"etcdctl \uc0ac\uc6a9\ud558\uae30",id:"etcdctl-\uc0ac\uc6a9\ud558\uae30",level:2},{value:"\ucee8\ud14c\uc774\ub108 \uc124\uc815\ud558\uae30",id:"\ucee8\ud14c\uc774\ub108-\uc124\uc815\ud558\uae30",level:2},{value:"NVIDIA \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uc9c0\uc6d0",id:"nvidia-\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784-\uc9c0\uc6d0",level:2},{value:"\uc5d0\uc774\uc804\ud2b8 \uc5c6\ub294 \uc11c\ubc84 \uc2e4\ud589\ud558\uae30(\uc2e4\ud5d8\uc801)",id:"\uc5d0\uc774\uc804\ud2b8-\uc5c6\ub294-\uc11c\ubc84-\uc2e4\ud589\ud558\uae30\uc2e4\ud5d8\uc801",level:2},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2e4\ud589(\uc2e4\ud5d8\uc801)",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2e4\ud589\uc2e4\ud5d8\uc801",level:2},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\uc758 \uc54c\ub824\uc9c4 \uc774\uc288",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubaa8\ub4dc\uc758-\uc54c\ub824\uc9c4-\uc774\uc288",level:3},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2dc\uc791\ud558\uae30",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2dc\uc791\ud558\uae30",level:3},{value:"\uace0\uae09 \ub8e8\ud2b8\ub9ac\uc2a4 \uad6c\uc131",id:"\uace0\uae09-\ub8e8\ud2b8\ub9ac\uc2a4-\uad6c\uc131",level:3},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \ubb38\uc81c \ud574\uacb0\ud558\uae30",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubb38\uc81c-\ud574\uacb0\ud558\uae30",level:3},{value:"\ub178\ub4dc \ub808\uc774\ube14 \ubc0f \ud14c\uc778\ud2b8",id:"\ub178\ub4dc-\ub808\uc774\ube14-\ubc0f-\ud14c\uc778\ud2b8",level:2},{value:"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub85c \uc11c\ube44\uc2a4 \uc2dc\uc791\ud558\uae30",id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8\ub85c-\uc11c\ube44\uc2a4-\uc2dc\uc791\ud558\uae30",level:2},{value:"\ucd94\uac00 OS \uc900\ube44 \uc0ac\ud56d",id:"\ucd94\uac00-os-\uc900\ube44-\uc0ac\ud56d",level:2},{value:"\uc774\uc804 iptables \ubc84\uc804",id:"\uc774\uc804-iptables-\ubc84\uc804",level:3},{value:"Red Hat Enterprise Linux / CentOS",id:"red-hat-enterprise-linux--centos",level:3},{value:"Ubuntu",id:"ubuntu",level:3},{value:"Raspberry Pi",id:"raspberry-pi",level:3},{value:"Docker\uc5d0\uc11c k3s \uc2e4\ud589\ud558\uae30",id:"docker\uc5d0\uc11c-k3s-\uc2e4\ud589\ud558\uae30",level:2},{value:"SELinux \uc9c0\uc6d0",id:"selinux-\uc9c0\uc6d0",level:2},{value:"SELinux \uc801\uc6a9 \ud65c\uc131\ud654\ud558\uae30",id:"selinux-\uc801\uc6a9-\ud65c\uc131\ud654\ud558\uae30",level:3},{value:"\uc9c0\uc5f0 \ud480\ub9c1\uc758 \uc9c0\uc5f0 \ud480\ub9c1 \ud65c\uc131\ud654 (\uc2e4\ud5d8\uc801)",id:"\uc9c0\uc5f0-\ud480\ub9c1\uc758-\uc9c0\uc5f0-\ud480\ub9c1-\ud65c\uc131\ud654-\uc2e4\ud5d8\uc801",level:2},{value:"\uc9c0\uc5f0 \ud480\ub9c1\uacfc eStargz\ub780 \ubb34\uc5c7\uc778\uac00\uc694?",id:"\uc9c0\uc5f0-\ud480\ub9c1\uacfc-estargz\ub780-\ubb34\uc5c7\uc778\uac00\uc694",level:3},{value:"\uc9c0\uc5f0 \ud480\ub9c1\uc774 \uac00\ub2a5\ud558\ub3c4\ub85d k3s \uad6c\uc131\ud558\uae30",id:"\uc9c0\uc5f0-\ud480\ub9c1\uc774-\uac00\ub2a5\ud558\ub3c4\ub85d-k3s-\uad6c\uc131\ud558\uae30",level:3},{value:"\ucd94\uac00 \ub85c\uae45 \uc18c\uc2a4",id:"\ucd94\uac00-\ub85c\uae45-\uc18c\uc2a4",level:2},{value:"\ucd94\uac00 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ub85c\uae45",id:"\ucd94\uac00-\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ub85c\uae45",level:2}],k=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=k("Tabs"),d=k("TabItem"),c={toc:o};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\ub294 K3s\ub97c \uc2e4\ud589\ud558\uace0 \uad00\ub9ac\ud560 \uc218 \uc788\ub294 \ub2e4\uc591\ud55c \ubc29\ubc95\uacfc K3s \uc0ac\uc6a9\uc744 \uc704\ud574 \ud638\uc2a4\ud2b8 OS\ub97c \uc900\ube44\ud558\ub294 \ub370 \ud544\uc694\ud55c \ub2e8\uacc4\ub97c \uc124\uba85\ud558\ub294 \uace0\uae09 \uc815\ubcf4\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"\uc778\uc99d\uc11c-\uad00\ub9ac"},"\uc778\uc99d\uc11c \uad00\ub9ac"),(0,r.kt)("h3",{id:"\uc778\uc99d-\uae30\uad00-\uc778\uc99d\uc11c"},"\uc778\uc99d \uae30\uad00 \uc778\uc99d\uc11c"),(0,r.kt)("p",null,"K3s\ub294 \uccab \ubc88\uc9f8 \uc11c\ubc84 \ub178\ub4dc\ub97c \uc2dc\uc791\ud558\ub294 \ub3d9\uc548 \uc790\uccb4 \uc11c\uba85\ub41c CA(\uc778\uc99d \uae30\uad00) \uc778\uc99d\uc11c\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774 CA \uc778\uc99d\uc11c\ub294 10\ub144 \ub3d9\uc548 \uc720\ud6a8\ud558\uba70 \uc790\ub3d9\uc73c\ub85c \uac31\uc2e0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc0ac\uc6a9\uc790 \uc9c0\uc815 CA \uc778\uc99d\uc11c \uc0ac\uc6a9 \ub610\ub294 \uc790\uccb4 \uc11c\uba85 CA \uc778\uc99d\uc11c \uac31\uc2e0\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/certificate#certificate-authority-ca-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s \uc778\uc99d\uc11c rotate-ca")," \uba85\ub839 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("h3",{id:"\ud074\ub77c\uc774\uc5b8\ud2b8-\ubc0f-\uc11c\ubc84-\uc778\uc99d\uc11c"},"\ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c"),(0,r.kt)("p",null,"K3s \ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c\ub294 \ubc1c\uae09\ud55c \ub0a0\ub85c\ubd80\ud130 365\uc77c \ub3d9\uc548 \uc720\ud6a8\ud569\ub2c8\ub2e4. \ub9cc\ub8cc\ub418\uc5c8\uac70\ub098 \ub9cc\ub8cc \ud6c4 90\uc77c \uc774\ub0b4\uc5d0 \ub9cc\ub8cc\ub41c \uc778\uc99d\uc11c\ub294 K3s\ub97c \uc2dc\uc791\ud560 \ub54c\ub9c8\ub2e4 \uc790\ub3d9\uc73c\ub85c \uac31\uc2e0\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c\ub97c \uc218\ub3d9\uc73c\ub85c \ub85c\ud14c\uc774\uc158\ud558\ub294 \uac83\uc5d0 \ub300\ud55c \uc815\ubcf4\ub294 ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/certificate#client-and-server-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s \uc778\uc99d\uc11c \ub85c\ud14c\uc774\uc158")," \uba85\ub839 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\ud1a0\ud070-\uad00\ub9ac"},"\ud1a0\ud070 \uad00\ub9ac"),(0,r.kt)("p",null,"\uae30\ubcf8\uc801\uc73c\ub85c K3s\ub294 \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ubaa8\ub450\uc5d0 \ub2e8\uc77c \uc815\uc801 \ud1a0\ud070\uc744 \uc0ac\uc6a9\ud569\ub2c8\ub2e4. \uc774 \ud1a0\ud070\uc740 \ud074\ub7ec\uc2a4\ud130\uac00 \uc0dd\uc131\ub41c \ud6c4\uc5d0\ub294 \ubcc0\uacbd\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.\n\uc5d0\uc774\uc804\ud2b8 \uc870\uc778\uc5d0\ub9cc \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ub450 \ubc88\uc9f8 \uc815\uc801 \ud1a0\ud070\uc744 \ud65c\uc131\ud654\ud558\uac70\ub098 \uc790\ub3d9\uc73c\ub85c \ub9cc\ub8cc\ub418\ub294 \uc784\uc2dc ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm")," \uc2a4\ud0c0\uc77c \uc870\uc778 \ud1a0\ud070\uc744 \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n\uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"http-\ud504\ub85d\uc2dc-\uad6c\uc131\ud558\uae30"},"HTTP \ud504\ub85d\uc2dc \uad6c\uc131\ud558\uae30"),(0,r.kt)("p",null,"HTTP \ud504\ub85d\uc2dc\ub97c \ud1b5\ud574\uc11c\ub9cc \uc678\ubd80\uc640 \uc5f0\uacb0\ud560 \uc218 \uc788\ub294 \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0, K3s \uc2dc\uc2a4\ud15c\ub4dc \uc11c\ube44\uc2a4\uc5d0\uc11c \ud504\ub85d\uc2dc \uc124\uc815\uc744 \uad6c\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\uba74 \uc774 \ud504\ub85d\uc2dc \uc124\uc815\uc774 K3s\uc5d0\uc11c \uc0ac\uc6a9\ub418\uc5b4 \ub0b4\uc7a5 \ucee8\ud14c\uc774\ub108\uc640 kubelet\uc5d0 \uc804\ub2ec\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"K3s \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \uc790\ub3d9\uc73c\ub85c \ud604\uc7ac \uc178\uc5d0\uc11c ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTPS_PROXY")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \ubcc0\uc218\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTPS_PROXY")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_NO_PROXY")," \ubcc0\uc218\uac00 \uc788\ub294 \uacbd\uc6b0 \uc774\ub97c systemd \uc11c\ube44\uc2a4\uc758 \ud658\uacbd \ud30c\uc77c\uc5d0 \uc791\uc131\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s.service.env")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s-agent.service.env"))),(0,r.kt)("p",null,"\ubb3c\ub860 \uc774 \ud30c\uc77c\uc744 \ud3b8\uc9d1\ud558\uc5ec \ud504\ub85d\uc2dc\ub97c \uad6c\uc131\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"K3s\ub294 \ud074\ub7ec\uc2a4\ud130 \ub0b4\ubd80 \ud30c\ub4dc \ubc0f \uc11c\ube44\uc2a4 IP \ubc94\uc704\uc640 \ud074\ub7ec\uc2a4\ud130 DNS \ub3c4\uba54\uc778\uc744 \uc790\ub3d9\uc73c\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \ud56d\ubaa9 \ubaa9\ub85d\uc5d0 \ucd94\uac00\ud569\ub2c8\ub2e4. \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ub178\ub4dc \uc790\uccb4\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 IP \uc8fc\uc18c \ubc94\uc704(\uc989, \ub178\ub4dc\uc758 \ud37c\ube14\ub9ad \ubc0f \ud504\ub77c\uc774\ube57 IP)\uac00 ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \ubaa9\ub85d\uc5d0 \ud3ec\ud568\ub418\uc5b4 \uc788\ub294\uc9c0 \ub610\ub294 \ud504\ub85d\uc2dc\ub97c \ud1b5\ud574 \ub178\ub4dc\uc5d0 \ub3c4\ub2ec\ud560 \uc218 \uc788\ub294\uc9c0 \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"HTTP_PROXY=http://your-proxy.example.com:8888\nHTTPS_PROXY=http://your-proxy.example.com:8888\nNO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("p",null,"K3s\uc640 Kubelet\uc5d0 \uc601\ud5a5\uc744 \uc8fc\uc9c0 \uc54a\uace0 \ucee8\ud14c\uc774\ub108\uc5d0 \ub300\ud55c \ud504\ub85d\uc2dc \uc124\uc815\uc744 \uad6c\uc131\ud558\ub824\uba74, \ubcc0\uc218 \uc55e\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_"),"\ub97c \ubd99\uc774\uba74 \ub429\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("h2",{id:"\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784\uc73c\ub85c-docker-\uc0ac\uc6a9"},"\ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc73c\ub85c Docker \uc0ac\uc6a9"),(0,r.kt)("p",null,"K3s\ub294 \uc5c5\uacc4 \ud45c\uc900 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc778 ",(0,r.kt)("a",{parentName:"p",href:"https://containerd.io/"},"containerd"),"\ub97c \ud3ec\ud568\ud558\uba70 \uae30\ubcf8\uac12\uc73c\ub85c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\n\ucfe0\ubc84\ub124\ud2f0\uc2a4 1.24\ubd80\ud130, kubelet\uc740 \ub354 \uc774\uc0c1 kubelet\uc774 dockerd\uc640 \ud1b5\uc2e0\ud560 \uc218 \uc788\ub3c4\ub85d \ud558\ub294 \ucef4\ud3ec\ub10c\ud2b8\uc778 dockershim\uc744 \ud3ec\ud568\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.\nK3s 1.24 \uc774\uc0c1\uc5d0\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/Mirantis/cri-dockerd"},"cri-dockerd"),"\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc5b4 \uc774\uc804 \ub9b4\ub9ac\uc988\uc758 K3s\uc5d0\uc11c \uc6d0\ud65c\ud558\uac8c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uba74\uc11c Docker \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc744 \uacc4\uc18d \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ucee8\ud14c\uc774\ub108 \ub300\uc2e0 Docker\ub97c \uc0ac\uc6a9\ud558\ub824\uba74:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"K3s \ub178\ub4dc\uc5d0 Docker\ub97c \uc124\uce58\ud569\ub2c8\ub2e4. \ub79c\ucc98\uc758 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/install-docker"},"Docker \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8")," \uc911 \ud558\ub098\ub97c \uc0ac\uc6a9\ud558\uc5ec Docker\ub97c \uc124\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl https://releases.rancher.com/install-docker/20.10.sh | sh\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"--docker")," \uc635\uc158\uc744 \uc0ac\uc6a9\ud558\uc5ec K3s\ub97c \uc124\uce58\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -s - --docker\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\ud074\ub7ec\uc2a4\ud130\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ sudo k3s kubectl get pods --all-namespaces\nNAMESPACE     NAME                                     READY   STATUS      RESTARTS   AGE\nkube-system   local-path-provisioner-6d59f47c7-lncxn   1/1     Running     0          51s\nkube-system   metrics-server-7566d596c8-9tnck          1/1     Running     0          51s\nkube-system   helm-install-traefik-mbkn9               0/1     Completed   1          51s\nkube-system   coredns-8655855d6-rtbnb                  1/1     Running     0          51s\nkube-system   svclb-traefik-jbmvl                      2/2     Running     0          43s\nkube-system   traefik-758cd5fc85-2wz97                 1/1     Running     0          43s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Docker \ucee8\ud14c\uc774\ub108\uac00 \uc2e4\ud589 \uc911\uc778\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'$ sudo docker ps\nCONTAINER ID        IMAGE                     COMMAND                  CREATED              STATUS              PORTS               NAMES\n3e4d34729602        897ce3c5fc8f              "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\nbffdc9d7a65f        rancher/klipper-lb        "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n436b85c5e38d        rancher/library-traefik   "/traefik --configfi\u2026"   About a minute ago   Up About a minute                       k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nde8fded06188        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n7c6a30aeeb2f        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nae6c58cab4a7        9d12f9848b99              "local-path-provisio\u2026"   About a minute ago   Up About a minute                       k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\nbe1450e1a11e        9dd718864ce6              "/metrics-server"        About a minute ago   Up About a minute                       k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0\n4454d14e4d3f        c4d3d16fe508              "/coredns -conf /etc\u2026"   About a minute ago   Up About a minute                       k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\nc3675b87f96c        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\n4b1fddbe6ca6        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\n64d3517d4a95        rancher/pause:3.1         "/pause"\n')))),(0,r.kt)("h2",{id:"etcdctl-\uc0ac\uc6a9\ud558\uae30"},"etcdctl \uc0ac\uc6a9\ud558\uae30"),(0,r.kt)("p",null,"etcdctl\uc740 etcd \uc11c\ubc84\uc640 \uc0c1\ud638 \uc791\uc6a9\ud558\uae30 \uc704\ud55c CLI\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4. K3s\ub294 etcdctl\uc744 \ubc88\ub4e4\ub85c \uc81c\uacf5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"etcdctl\uc744 \uc0ac\uc6a9\ud558\uc5ec K3s\uc758 \ub0b4\uc7a5\ub41c etcd\uc640 \uc0c1\ud638 \uc791\uc6a9\ud558\ub824\uba74 ",(0,r.kt)("a",{parentName:"p",href:"https://etcd.io/docs/latest/install/"},"\uacf5\uc2dd \ubb38\uc11c"),"\ub97c \ucc38\uc870\ud558\uc5ec etcdctl\uc744 \uc124\uce58\ud558\uc138\uc694."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'ETCD_VERSION="v3.5.5"\nETCD_URL="https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz"\ncurl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin\n')),(0,r.kt)("p",null,"\uadf8\ub7f0 \ub2e4\uc74c \uc778\uc99d\uc5d0 K3s\uc5d0\uc11c \uad00\ub9ac\ud558\ub294 \uc778\uc99d\uc11c \ubc0f \ud0a4\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d etcdctl\uc744 \uad6c\uc131\ud558\uc5ec \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo etcdctl version \\\n  --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\\n  --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\\n  --key=/var/lib/rancher/k3s/server/tls/etcd/client.key\n")),(0,r.kt)("h2",{id:"\ucee8\ud14c\uc774\ub108-\uc124\uc815\ud558\uae30"},"\ucee8\ud14c\uc774\ub108 \uc124\uc815\ud558\uae30"),(0,r.kt)("p",null,"K3s\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/agent/etc/containerd/config.toml"),"\uc5d0 \ucee8\ud14c\uc774\ub108\uc5d0 \ub300\ud55c config.toml\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc774 \ud30c\uc77c\uc5d0 \ub300\ud55c \uace0\uae09 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\uc744 \uc704\ud574 \uac19\uc740 \ub514\ub809\ud130\ub9ac\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl"),"\uc774\ub77c\ub294 \ub2e4\ub978 \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uba74 \uc774 \ud30c\uc77c\uc774 \ub300\uc2e0 \uc0ac\uc6a9\ub41c\ub2e4."),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl"),"\uc740 Go \ud15c\ud50c\ub9bf \ud30c\uc77c\ub85c \ucde8\uae09\ub418\uba70, ",(0,r.kt)("inlineCode",{parentName:"p"},"config.Node")," \uad6c\uc870\uac00 \ud15c\ud50c\ub9bf\uc73c\ub85c \uc804\ub2ec\ub429\ub2c8\ub2e4. \uc774 \uad6c\uc870\ub97c \uc0ac\uc6a9\ud558\uc5ec \uad6c\uc131 \ud30c\uc77c\uc744 \uc0ac\uc6a9\uc790 \uc815\uc758\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c Linux \ubc0f Windows \uc608\uc81c\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/agent/templates"},"\uc774 \ud3f4\ub354"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.\nconfig.Node Go \uc5b8\uc5b4 \uad6c\uc870\uccb4\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/daemons/config/types.go#L37"},"\uc5ec\uae30"),"\uc5d0 \uc815\uc758\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"nvidia-\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784-\uc9c0\uc6d0"},"NVIDIA \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uc9c0\uc6d0"),(0,r.kt)("p",null,"K3s\ub294 K3s \uc2dc\uc791 \uc2dc NVIDIA \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc774 \uc788\uc73c\uba74 \uc790\ub3d9\uc73c\ub85c \uac10\uc9c0\ud558\uc5ec \uc124\uc815\ud569\ub2c8\ub2e4."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\uc544\ub798\uc758 \uc548\ub0b4\uc5d0 \ub530\ub77c \ub178\ub4dc\uc5d0 \uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ud328\ud0a4\uc9c0 \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\ub97c \uc124\uce58\ud569\ub2c8\ub2e4:\n",(0,r.kt)("a",{parentName:"li",href:"https://nvidia.github.io/libnvidia-container/"},"https://nvidia.github.io/libnvidia-container/")),(0,r.kt)("li",{parentName:"ol"},"\uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \ud328\ud0a4\uc9c0\ub97c \uc124\uce58\ud569\ub2c8\ub2e4. \uc608\uc2dc:\n",(0,r.kt)("inlineCode",{parentName:"li"},"apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server")),(0,r.kt)("li",{parentName:"ol"},"K3s\ub97c \uc124\uce58\ud558\uac70\ub098 \uc774\ubbf8 \uc124\uce58\ub418\uc5b4 \uc788\ub294 \uacbd\uc6b0 \ub2e4\uc2dc \uc2dc\uc791\ud569\ub2c8\ub2e4:\n",(0,r.kt)("inlineCode",{parentName:"li"},"curl -ksL get.k3s.io | sh -")),(0,r.kt)("li",{parentName:"ol"},"k3s\uac00 \uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc744 \ucc3e\uc558\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:\n",(0,r.kt)("inlineCode",{parentName:"li"},"grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml"))),(0,r.kt)("p",null,"\uc774\ub807\uac8c \ud558\uba74 \ubc1c\uacac\ub41c \ub7f0\ud0c0\uc784 \uc2e4\ud589 \ud30c\uc77c\uc5d0 \ub530\ub77c \ucee8\ud14c\uc774\ub108 \uc124\uc815\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia")," \ubc0f/\ub610\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia-experimental")," \ub7f0\ud0c0\uc784\uc774 \uc790\ub3d9\uc73c\ub85c \ucd94\uac00\ub429\ub2c8\ub2e4.\n\uc5ec\uc804\ud788 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub7f0\ud0c0\uc784\ud074\ub798\uc2a4 \uc815\uc758\ub97c \ucd94\uac00\ud558\uace0, \ud30c\ub4dc \uc2a4\ud399\uc5d0\uc11c ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),"\ub97c \uc124\uc815\ud558\uc5ec \uc801\uc808\ud55c \ub7f0\ud0c0\uc784\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uc694\uccad\ud558\ub294 \ud30c\ub4dc\ub97c \ubc30\ud3ec\ud574\uc57c \ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: node.k8s.io/v1\nkind: RuntimeClass\nmetadata:\n  name: nvidia\nhandler: nvidia\n---\napiVersion: v1\nkind: Pod\nmetadata:\n  name: nbody-gpu-benchmark\n  namespace: default\nspec:\n  restartPolicy: OnFailure\n  runtimeClassName: nvidia\n  containers:\n    - name: cuda-container\n      image: nvcr.io/nvidia/k8s/cuda-sample:nbody\n      args: ["nbody", "-gpu", "-benchmark"]\n      resources:\n        limits:\n          nvidia.com/gpu: 1\n      env:\n        - name: NVIDIA_VISIBLE_DEVICES\n          value: all\n        - name: NVIDIA_DRIVER_CAPABILITIES\n          value: all\n')),(0,r.kt)("p",null,"\uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/k8s-device-plugin/"},"\uc5d4\ube44\ub514\uc544 \ub514\ubc14\uc774\uc2a4 \ud50c\ub7ec\uadf8\uc778")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/gpu-feature-discovery/"},"GPU \uae30\ub2a5 \uac80\uc0c9"),"\uacfc \ud568\uaed8 \uc790\uc8fc \uc0ac\uc6a9\ub418\uba70, \uc704\uc5d0\uc11c \uc5b8\uae09\ud55c \uac83\ucc98\ub7fc \ud30c\ub4dc \uc0ac\uc591\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),"\uac00 \ud3ec\ud568\ub418\ub3c4\ub85d \uc218\uc815\ud558\uc5ec \ubcc4\ub3c4\ub85c \uc124\uce58\ud574\uc57c \ud55c\ub2e4\ub294 \uc810\uc5d0 \uc720\uc758\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\uc5d0\uc774\uc804\ud2b8-\uc5c6\ub294-\uc11c\ubc84-\uc2e4\ud589\ud558\uae30\uc2e4\ud5d8\uc801"},"\uc5d0\uc774\uc804\ud2b8 \uc5c6\ub294 \uc11c\ubc84 \uc2e4\ud589\ud558\uae30(\uc2e4\ud5d8\uc801)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\uacbd\uace0:")," \uc774 \uae30\ub2a5\uc740 \uc2e4\ud5d8 \ub2e8\uacc4\uc785\ub2c8\ub2e4.")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"disable-agent")," \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ud558\uba74, \uc11c\ubc84\ub294 kubelet, \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \ub610\ub294 CNI\ub97c \uc2e4\ud589\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub178\ub4dc \ub9ac\uc18c\uc2a4\ub97c \ub4f1\ub85d\ud558\uc9c0 \uc54a\uc73c\uba70, ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get nodes")," \ucd9c\ub825\uc5d0 \ub098\ud0c0\ub098\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.\n\uc5d0\uc774\uc804\ud2b8\ub9ac\uc2a4 \uc11c\ubc84\ub294 kubelet\uc744 \ud638\uc2a4\ud2b8\ud558\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0, \ud30c\ub4dc\ub97c \uc2e4\ud589\ud558\uac70\ub098 \ub0b4\uc7a5\ub41c etcd \ucee8\ud2b8\ub864\ub7ec \ubc0f \uc2dc\uc2a4\ud15c \uc5c5\uadf8\ub808\uc774\ub4dc \ucee8\ud2b8\ub864\ub7ec\ub97c \ud3ec\ud568\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130 \ub178\ub4dc\ub97c \uc5f4\uac70\ud558\ub294 \ub370 \uc758\uc874\ud558\ub294 \uc6b4\uc601\uc790\uac00 \uad00\ub9ac\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8\ub9ac\uc2a4 \uc11c\ubc84\ub97c \uc2e4\ud589\ud558\ub294 \uac83\uc740 \ud074\ub7ec\uc2a4\ud130 \uc6b4\uc601\uc790 \uc9c0\uc6d0 \ubd80\uc871\uc73c\ub85c \uc778\ud55c \uad00\ub9ac \uc624\ubc84\ud5e4\ub4dc \uc99d\uac00\ub97c \uac10\uc218\ud558\uace0\uc11c\ub77c\ub3c4 \uc5d0\uc774\uc804\ud2b8\uc640 \uc6cc\ud06c\ub85c\ub4dc\uc5d0 \uc758\ud55c \uac80\uc0c9\uc73c\ub85c\ubd80\ud130 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \ub178\ub4dc\ub97c \uc228\uae30\uace0\uc790 \ud558\ub294 \uacbd\uc6b0\uc5d0 \uc720\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2e4\ud589\uc2e4\ud5d8\uc801"},"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2e4\ud589(\uc2e4\ud5d8\uc801)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\uacbd\uace0:")," \uc774 \uae30\ub2a5\uc740 \uc2e4\ud5d8 \ub2e8\uacc4\uc785\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\ub294 \uc7a0\uc7ac\uc801\uc778 \ucee8\ud14c\uc774\ub108 \ube0c\ub808\uc774\ud06c\uc544\uc6c3 \uacf5\uaca9\uc73c\ub85c\ubd80\ud130 \ud638\uc2a4\ud2b8\uc758 \uc2e4\uc81c \ub8e8\ud2b8\ub97c \ubcf4\ud638\ud558\uae30 \uc704\ud574 \uad8c\ud55c\uc774 \uc5c6\ub294 \uc0ac\uc6a9\uc790\ub85c K3s \uc11c\ubc84\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/")," \uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("h3",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubaa8\ub4dc\uc758-\uc54c\ub824\uc9c4-\uc774\uc288"},"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\uc758 \uc54c\ub824\uc9c4 \uc774\uc288"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\ud3ec\ud2b8")),(0,r.kt)("p",{parentName:"li"},"\ub8e8\ud2b8\ub9ac\uc2a4 \uc2e4\ud589 \uc2dc \uc0c8\ub85c\uc6b4 \ub124\ud2b8\uc6cc\ud06c \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uac00 \uc0dd\uc131\ub429\ub2c8\ub2e4. \uc774\ub294 K3s \uc778\uc2a4\ud134\uc2a4\uac00 \ud638\uc2a4\ud2b8\uc640 \ub124\ud2b8\uc6cc\ud0b9\uc774 \uc0c1\ub2f9\ud788 \ubd84\ub9ac\ub41c \uc0c1\ud0dc\ub85c \uc2e4\ud589\ub41c\ub2e4\ub294 \uac83\uc744 \uc758\ubbf8\ud569\ub2c8\ub2e4.\n\ud638\uc2a4\ud2b8\uc5d0\uc11c K3s\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 \uc11c\ube44\uc2a4\uc5d0 \uc561\uc138\uc2a4\ud558\ub294 \uc720\uc77c\ud55c \ubc29\ubc95\uc740 K3s \ub124\ud2b8\uc6cc\ud06c \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \ud3ec\ud2b8 \ud3ec\uc6cc\ub4dc\ub97c \uc124\uc815\ud558\ub294 \uac83\uc785\ub2c8\ub2e4.\n\ub8e8\ud2b8\ub9ac\uc2a4 K3s\uc5d0\ub294 6443 \ubc0f 1024 \ubbf8\ub9cc\uc758 \uc11c\ube44\uc2a4 \ud3ec\ud2b8\ub97c 10000 \uc624\ud504\uc14b\uc73c\ub85c \ud638\uc2a4\ud2b8\uc5d0 \uc790\ub3d9\uc73c\ub85c \ubc14\uc778\ub529\ud558\ub294 \ucee8\ud2b8\ub864\ub7ec\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",{parentName:"li"},"\uc608\ub97c \ub4e4\uc5b4, \ud3ec\ud2b8 80\uc758 \uc11c\ube44\uc2a4\ub294 \ud638\uc2a4\ud2b8\uc5d0\uc11c 10080\uc774 \ub418\uc9c0\ub9cc 8080\uc740 \uc624\ud504\uc14b \uc5c6\uc774 8080\uc774 \ub429\ub2c8\ub2e4. \ud604\uc7ac \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub9cc \uc790\ub3d9\uc73c\ub85c \ubc14\uc778\ub529\ub429\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Cgroup")),(0,r.kt)("p",{parentName:"li"},'Cgroup v1 \ubc0f \ud558\uc774\ube0c\ub9ac\ub4dc v1/v2\ub294 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc73c\uba70, \uc21c\uc218 Cgroup v2\ub9cc \uc9c0\uc6d0\ub429\ub2c8\ub2e4. \ub8e8\ud2b8\ub9ac\uc2a4 \uc2e4\ud589 \uc2dc \ub204\ub77d\ub41c Cgroup\uc73c\ub85c \uc778\ud574 K3s\uac00 \uc2dc\uc791\ub418\uc9c0 \uc54a\ub294 \uacbd\uc6b0, \ub178\ub4dc\uac00 \ud558\uc774\ube0c\ub9ac\ub4dc \ubaa8\ub4dc\uc5d0 \uc788\uace0 "\ub204\ub77d\ub41c" Cgroup\uc774 \uc5ec\uc804\ud788 v1 \ucee8\ud2b8\ub864\ub7ec\uc5d0 \ubc14\uc778\ub529\ub418\uc5b4 \uc788\uc744 \uac00\ub2a5\uc131\uc774 \ub192\uc2b5\ub2c8\ub2e4.')),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\uba40\ud2f0\ub178\ub4dc/\uba40\ud2f0\ud504\ub85c\uc138\uc2a4 \ud074\ub7ec\uc2a4\ud130")),(0,r.kt)("p",{parentName:"li"},"\ub2e4\uc911 \ub178\ub4dc \ub8e8\ud2b8\ub9ac\uc2a4 \ud074\ub7ec\uc2a4\ud130 \ub610\ub294 \ub3d9\uc77c\ud55c \ub178\ub4dc\uc5d0 \uc788\ub294 \uc5ec\ub7ec \uac1c\uc758 \ub8e8\ud2b8\ub9ac\uc2a4 k3s \ud504\ub85c\uc138\uc2a4\ub294 \ud604\uc7ac \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/6488#issuecomment-1314998091"},"#6488"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."))),(0,r.kt)("h3",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2dc\uc791\ud558\uae30"},"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2dc\uc791\ud558\uae30"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/getting-started/common/cgroup2/"},"https://rootlesscontaine.rs/getting-started/common/cgroup2/")," \uc744 \ucc38\uc870\ud558\uc5ec cgroup v2 \uc704\uc784\uc744 \ud65c\uc131\ud654\ud569\ub2c8\ub2e4.\n\uc774 \ub2e8\uacc4\ub294 \ud544\uc218\uc774\uba70, \uc801\uc808\ud55c cgroups\uac00 \uc704\uc784\ub418\uc9c0 \uc54a\uc73c\uba74 \ub8e8\ud2b8\ub9ac\uc2a4 kubelet\uc744 \uc2dc\uc791\ud558\uc9c0 \ubabb\ud569\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service"),"](",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service)%EC%97%90%EC%84%9C"},"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service)\uc5d0\uc11c")," ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\ub97c \ub2e4\uc6b4\ub85c\ub4dc\ud55c\ub2e4.\n",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s"),"\uc758 \ubc84\uc804\uc774 \uac19\uc740 \uac83\uc744 \uc0ac\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\ub97c ",(0,r.kt)("inlineCode",{parentName:"p"},"~/.config/systemd/user/k3s-rootless.service"),"\uc5d0 \uc124\uce58\ud569\ub2c8\ub2e4.\n\uc774 \ud30c\uc77c\uc744 \uc2dc\uc2a4\ud15c \uc804\uccb4 \uc11c\ube44\uc2a4(",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/..."),")\ub85c \uc124\uce58\ud558\ub294 \uac83\uc740 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.\n",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," \ubc14\uc774\ub108\ub9ac\uc758 \uacbd\ub85c\uc5d0 \ub530\ub77c \ud30c\uc77c\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"ExecStart=/usr/local/bin/k3s ...")," \ud589\uc744 \uc218\uc815\ud574\uc57c \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user daemon-reload"),"\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user enable --now k3s-rootless"),"\ub97c \uc2e4\ud589\ud55c\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A"),"\ub97c \uc2e4\ud589\ud558\uace0, \ud30c\ub4dc\uac00 \uc2e4\ud589 \uc911\uc778\uc9c0 \ud655\uc778\ud55c\ub2e4."))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\ucc38\uace0: \ud130\ubbf8\ub110 \uc138\uc158\uc740 cgroups v2 \uc704\uc784\uc744 \ud5c8\uc6a9\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c \ud130\ubbf8\ub110\uc5d0\uc11c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server --rootless"),"\ub97c \uc2e4\ud589\ud558\uc9c0 \uc54a\ub294\ub2e4.\n\ud130\ubbf8\ub110\uc5d0\uc11c \uaf2d \uc2e4\ud589\ud574\uc57c \ud558\ub294 \uacbd\uc6b0, ",(0,r.kt)("inlineCode",{parentName:"p"},"systemd-run --user -p Delegate=yes --tty k3s server --roolless"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec systemd \ubc94\uc704\ub85c \ub798\ud551\ud569\ub2c8\ub2e4.")),(0,r.kt)("h3",{id:"\uace0\uae09-\ub8e8\ud2b8\ub9ac\uc2a4-\uad6c\uc131"},"\uace0\uae09 \ub8e8\ud2b8\ub9ac\uc2a4 \uad6c\uc131"),(0,r.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 K3s\ub294 \ud638\uc2a4\ud2b8\uc640 \uc0ac\uc6a9\uc790 \ub124\ud2b8\uc6cc\ud06c \ub124\uc784\uc2a4\ud398\uc774\uc2a4 \uac04 \ud1b5\uc2e0\uc744 \uc704\ud574 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/rootlesskit"},"rootlesskit")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/slirp4netns"},"slirp4netns"),"\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\n\ub8e8\ud2b8\ub9ac\uc2a4\ud0b7\uacfc slirp4net\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \uad6c\uc131 \uc911 \uc77c\ubd80\ub294 \ud658\uacbd \ubcc0\uc218\ub85c \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub97c \uc124\uc815\ud558\ub294 \uac00\uc7a5 \uc88b\uc740 \ubc29\ubc95\uc740 k3s-rootless systemd \uc720\ub2db\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"Environment")," \ud544\ub4dc\uc5d0 \ucd94\uac00\ud558\ub294 \uac83\uc785\ub2c8\ub2e4."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_MTU")),(0,r.kt)("td",{parentName:"tr",align:null},"1500"),(0,r.kt)("td",{parentName:"tr",align:null},"slirp4netns \uac00\uc0c1 \uc778\ud130\ud398\uc774\uc2a4\uc758 MTU\ub97c \uc124\uc815\ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_CIDR")),(0,r.kt)("td",{parentName:"tr",align:null},"10.41.0.0/16"),(0,r.kt)("td",{parentName:"tr",align:null},"slirp4netns \uac00\uc0c1 \uc778\ud130\ud398\uc774\uc2a4\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 CIDR\uc744 \uc124\uc815\ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_ENABLE_IPV6")),(0,r.kt)("td",{parentName:"tr",align:null},"autotedected"),(0,r.kt)("td",{parentName:"tr",align:null},"Enables slirp4netns IPv6 \uc9c0\uc6d0. \uc9c0\uc815\ud558\uc9c0 \uc54a\uc73c\uba74 K3\uac00 \ub4c0\uc5bc \uc2a4\ud0dd \uc791\ub3d9\uc744 \uc704\ud574 \uad6c\uc131\ub418\uba74 \uc790\ub3d9\uc73c\ub85c \ud65c\uc131\ud654\ub429\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_PORT_DRIVER")),(0,r.kt)("td",{parentName:"tr",align:null},"builtin"),(0,r.kt)("td",{parentName:"tr",align:null},"\ub8e8\ud2b8\ub9ac\uc2a4 \ud3ec\ud2b8 \ub4dc\ub77c\uc774\ubc84\ub97c \uc120\ud0dd\ud569\ub2c8\ub2e4. ",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," \ub610\ub294 ",(0,r.kt)("inlineCode",{parentName:"td"},"slirp4netns")," \uc911 \ud558\ub098\ub97c \uc120\ud0dd\ud569\ub2c8\ub2e4. \ube4c\ud2b8\uc778\uc774 \ub354 \ube60\ub974\uc9c0\ub9cc \uc778\ubc14\uc6b4\ub4dc \ud328\ud0b7\uc758 \uc6d0\ub798 \uc18c\uc2a4 \uc8fc\uc18c\ub97c \uac00\uc7a5\ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_DISABLE_HOST_LOOPBACK")),(0,r.kt)("td",{parentName:"tr",align:null},"true"),(0,r.kt)("td",{parentName:"tr",align:null},"\uac8c\uc774\ud2b8\uc6e8\uc774 \uc778\ud130\ud398\uc774\uc2a4\ub97c \ud1b5\ud55c \ud638\uc2a4\ud2b8\uc758 \ub8e8\ud504\ubc31 \uc8fc\uc18c\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4\ub97c \uc0ac\uc6a9\ud560\uc9c0 \uc5ec\ubd80\ub97c \uc81c\uc5b4\ud569\ub2c8\ub2e4. \ubcf4\uc548\uc0c1\uc758 \uc774\uc720\ub85c \ubcc0\uacbd\ud558\uc9c0 \uc54a\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4.")))),(0,r.kt)("h3",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubb38\uc81c-\ud574\uacb0\ud558\uae30"},"\ub8e8\ud2b8\ub9ac\uc2a4 \ubb38\uc81c \ud574\uacb0\ud558\uae30"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"systemctl --user status k3s-rootless"),"\ub97c \uc2e4\ud589\ud558\uc5ec \ub370\ubaac \uc0c1\ud0dc\ub97c \ud655\uc778\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"journalctl --user -f -u k3s-rootless"),"\ub97c \uc2e4\ud589\ud558\uc5ec \ub370\ubaac \ub85c\uadf8\ub97c \ud655\uc778\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/")," \ucc38\uc870")),(0,r.kt)("h2",{id:"\ub178\ub4dc-\ub808\uc774\ube14-\ubc0f-\ud14c\uc778\ud2b8"},"\ub178\ub4dc \ub808\uc774\ube14 \ubc0f \ud14c\uc778\ud2b8"),(0,r.kt)("p",null,"K3s \uc5d0\uc774\uc804\ud2b8\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," \uc635\uc158\uc73c\ub85c \uad6c\uc131\ud560 \uc218 \uc788\uc73c\uba70, \uc774 \uc635\uc158\uc740 kubelet\uc5d0 \ub808\uc774\ube14\uacfc \ud14c\uc778\ud2b8\ub97c \ucd94\uac00\ud569\ub2c8\ub2e4. \uc774 \ub450 \uc635\uc158\uc740 ","[\ub4f1\ub85d \uc2dc\uc810\uc5d0]"," \ub808\uc774\ube14 \ubc0f/\ub610\ub294 \ud14c\uc778\ud2b8\ub9cc \ucd94\uac00\ud558\ubbc0\ub85c(../cli/agent.md#node-labels-and-taints-for-agents), \ub178\ub4dc\uac00 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ucc98\uc74c \uc870\uc778\ub420 \ub54c\ub9cc \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud604\uc7ac \ubaa8\ub4e0 \ubc84\uc804\uc758 \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ub178\ub4dc\uac00 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"k8s.io")," \uc811\ub450\uc0ac\uac00 \ud3ec\ud568\ub41c \ub300\ubd80\ubd84\uc758 \ub808\uc774\ube14, \ud2b9\ud788 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io/role")," \ub808\uc774\ube14\uc5d0 \ub4f1\ub85d\ud558\ub294 \uac83\uc744 \uc81c\ud55c\ud569\ub2c8\ub2e4. \ud5c8\uc6a9\ub418\uc9c0 \uc54a\ub294 \ub808\uc774\ube14\uc744 \uac00\uc9c4 \ub178\ub4dc\ub97c \uc2dc\uc791\ud558\ub824\uace0 \ud558\uba74 K3s\uac00 \uc2dc\uc791\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc791\uc131\uc790\uac00 \uc5b8\uae09\ud588\ub4ef\uc774:"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\ub178\ub4dc\ub294 \uc790\uccb4 \uc5ed\ud560 \ub808\uc774\ube14\uc744 \uc5b4\uc124\ud2b8\ud558\ub294 \uac83\uc774 \ud5c8\uc6a9\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub178\ub4dc \uc5ed\ud560\uc740 \uc77c\ubc18\uc801\uc73c\ub85c \uad8c\ud55c \ub610\ub294 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uc720\ud615\uc758 \ub178\ub4dc\ub97c \uc2dd\ubcc4\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\uba70, \ub178\ub4dc\uac00 \ud574\ub2f9 \ud480\uc5d0 \ub808\uc774\ube14\uc744 \uc9c0\uc815\ud558\ub3c4\ub85d \ud5c8\uc6a9\ud558\uba74 \uc190\uc0c1\ub41c \ub178\ub4dc\uac00 \ub354 \ub192\uc740 \uad8c\ud55c \uc790\uaca9 \uc99d\uba85\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4 \uad8c\ud55c\uc744 \ubd80\uc5ec\ud558\ub294 \uc6cc\ud06c\ub85c\ub4dc(\uc608: \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \ub370\ubaac\uc14b)\ub97c \uc0ac\uc18c\ud558\uac8c \ub04c\uc5b4\ub4e4\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/279-limit-node-access/README.md#proposal"},"SIG-Auth KEP 279"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ub178\ub4dc \ub4f1\ub85d \ud6c4 \ub178\ub4dc \ub808\uc774\ube14\uacfc \ud2f4\ud2b8\ub97c \ubcc0\uacbd\ud558\uac70\ub098 \uc608\uc57d \ub808\uc774\ube14\uc744 \ucd94\uac00\ud558\ub824\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),"\uc744 \uc0ac\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4. ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/scheduling-eviction/taint-and-toleration/"},"taint")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"\ub178\ub4dc \ub808\uc774\ube14"),"\uc744 \ucd94\uac00\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uacf5\uc2dd \ubb38\uc11c\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8\ub85c-\uc11c\ube44\uc2a4-\uc2dc\uc791\ud558\uae30"},"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub85c \uc11c\ube44\uc2a4 \uc2dc\uc791\ud558\uae30"),(0,r.kt)("p",null,"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \uc124\uce58 \ud504\ub85c\uc138\uc2a4\uc758 \uc77c\ubd80\ub85c OS\uac00 systemd \ub610\ub294 openrc\ub97c \uc0ac\uc6a9\ud558\ub294\uc9c0 \uc790\ub3d9\uc73c\ub85c \uac10\uc9c0\ud558\uace0 \uc11c\ube44\uc2a4\ub97c \ud65c\uc131\ud654 \ubc0f \uc2dc\uc791\ud569\ub2c8\ub2e4."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"openrc\ub85c \uc2e4\ud589\ud558\uba74 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),"\uc5d0 \ub85c\uadf8\uac00 \uc0dd\uc131\ub429\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},"systemd\ub85c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0, ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/syslog"),"\uc5d0 \ub85c\uadf8\uac00 \uc0dd\uc131\ub418\uba70 ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"(\ub610\ub294 \uc5d0\uc774\uc804\ud2b8\uc5d0\uc11c\ub294 ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s-agent"),")\ub97c \uc0ac\uc6a9\ud558\uc5ec \ub85c\uadf8\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub85c \uc790\ub3d9 \uc2dc\uc791 \ubc0f \uc11c\ube44\uc2a4 \ud65c\uc131\ud654\ub97c \ube44\ud65c\uc131\ud654\ud558\ub294 \uc608\uc81c\uc785\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,r.kt)("h2",{id:"\ucd94\uac00-os-\uc900\ube44-\uc0ac\ud56d"},"\ucd94\uac00 OS \uc900\ube44 \uc0ac\ud56d"),(0,r.kt)("h3",{id:"\uc774\uc804-iptables-\ubc84\uc804"},"\uc774\uc804 iptables \ubc84\uc804"),(0,r.kt)("p",null,"\uba87\uba87 \uc720\uba85 Linux \ubc30\ud3ec\ud310\uc5d0\ub294 \uc911\ubcf5 \uaddc\uce59\uc774 \ub204\uc801\ub418\uc5b4 \ub178\ub4dc\uc758 \uc131\ub2a5\uacfc \uc548\uc815\uc131\uc5d0 \ubd80\uc815\uc801\uc778 \uc601\ud5a5\uc744 \uc8fc\ub294 \ubc84\uadf8\uac00 \ud3ec\ud568\ub41c \ubc84\uc804\uc758 iptables\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ubb38\uc81c\uc758 \uc601\ud5a5\uc744 \ubc1b\ub294\uc9c0 \ud655\uc778\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/3117"},"Issue #3117"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"K3s\uc5d0\ub294 \uc815\uc0c1\uc801\uc73c\ub85c \uc791\ub3d9\ud558\ub294 iptables(v1.8.8) \ubc84\uc804\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," \uc635\uc158\uc73c\ub85c K3s\ub97c \uc2dc\uc791\ud558\uac70\ub098 \uc6b4\uc601 \uccb4\uc81c\uc5d0\uc11c iptables/nftables \ud328\ud0a4\uc9c0\ub97c \uc81c\uac70\ud558\uc5ec K3s\uac00 \ubc88\ub4e4 \ubc84\uc804\uc758 iptables\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"prefer-bundled-bin")," \ud50c\ub798\uadf8\ub294 2022-12 \ub9b4\ub9ac\uc2a4(v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1) \ubd80\ud130 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("h3",{id:"red-hat-enterprise-linux--centos"},"Red Hat Enterprise Linux / CentOS"),(0,r.kt)("p",null,"firewalld\ub97c \ub044\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable firewalld --now\n")),(0,r.kt)("p",null,"\ubc29\ud654\ubcbd\uc744 \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uc815\ud558\ub824\uba74 \uae30\ubcf8\uc801\uc73c\ub85c \ub2e4\uc74c \uaddc\uce59\uc774 \ud544\uc694\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"firewall-cmd --permanent --add-port=6443/tcp #apiserver\nfirewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods\nfirewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services\nfirewall-cmd --reload\n")),(0,r.kt)("p",null,"\uc124\uc815\uc5d0 \ub530\ub77c \ucd94\uac00 \ud3ec\ud2b8\ub97c \uc5f4\uc5b4\uc57c \ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/requirements#inbound-rules-for-k3s-server-nodes"},"\uc778\ubc14\uc6b4\ub4dc \uaddc\uce59"),"\uc744 \ucc38\uc870\ud558\uc138\uc694. \ud30c\ub4dc \ub610\ub294 \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \uae30\ubcf8 CIDR\uc744 \ubcc0\uacbd\ud558\ub294 \uacbd\uc6b0, \uadf8\uc5d0 \ub530\ub77c \ubc29\ud654\ubcbd \uaddc\uce59\uc744 \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud65c\uc131\ud654\ub41c \uacbd\uc6b0, nm-cloud-setup\uc744 \ube44\ud65c\uc131\ud654\ud558\uace0 \ub178\ub4dc\ub97c \uc7ac\ubd80\ud305\ud574\uc57c \ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable nm-cloud-setup.service nm-cloud-setup.timer\nreboot\n")),(0,r.kt)("h3",{id:"ubuntu"},"Ubuntu"),(0,r.kt)("p",null,"ufw(uncomplicated firewall)\ub97c \ub044\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw disable\n")),(0,r.kt)("p",null,"ufw\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uc815\ud558\ub824\uba74 \uae30\ubcf8\uc801\uc73c\ub85c \ub2e4\uc74c \uaddc\uce59\uc774 \ud544\uc694\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw allow 6443/tcp #apiserver\nufw allow from 10.42.0.0/16 to any #pods\nufw allow from 10.43.0.0/16 to any #services\n")),(0,r.kt)("p",null,"\uc124\uc815\uc5d0 \ub530\ub77c \ucd94\uac00 \ud3ec\ud2b8\ub97c \uc5f4\uc5b4\uc57c \ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/requirements#inbound-rules-for-k3s-server-nodes"},"\uc778\ubc14\uc6b4\ub4dc \uaddc\uce59"),"\uc744 \ucc38\uc870\ud55c\ub2e4. \ud30c\ub4dc \ub610\ub294 \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \uae30\ubcf8 CIDR\uc744 \ubcc0\uacbd\ud558\ub294 \uacbd\uc6b0, \uadf8\uc5d0 \ub530\ub77c \ubc29\ud654\ubcbd \uaddc\uce59\uc744 \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"raspberry-pi"},"Raspberry Pi"),(0,r.kt)("p",null,"\ub77c\uc988\ubca0\ub9ac\ud30c\uc774 OS\ub294 \ub370\ube44\uc548 \uae30\ubc18\uc774\uba70, \uc624\ub798\ub41c iptables \ubc84\uc804\uc73c\ub85c \uc778\ud574 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. ",(0,r.kt)("a",{parentName:"p",href:"#old-iptables-versions"},"\ud574\uacb0 \ubc29\ubc95"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ud45c\uc900 \ub77c\uc988\ubca0\ub9ac\ud30c\uc774 OS \uc124\uce58\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"\uac00 \ud65c\uc131\ud654\ub41c \uc0c1\ud0dc\uc5d0\uc11c \uc2dc\uc791\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. ",(0,r.kt)("strong",{parentName:"p"},"K3S"),"\ub294 systemd \uc11c\ube44\uc2a4\ub97c \uc2dc\uc791\ud558\uae30 \uc704\ud574 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"\uac00 \ud544\uc694\ud569\ub2c8\ub2e4. ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"/boot/cmdline.txt"),"\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroup_memory=1 cgroup_enable=memory"),"\ub97c \ucd94\uac00\ud558\uc5ec \ud65c\uc131\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"cmdline.txt \uc608\uc2dc:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory\n")),(0,r.kt)("p",null,"\uc6b0\ubd84\ud22c 21.10\ubd80\ud130 \ub77c\uc988\ubca0\ub9ac\ud30c\uc774\uc758 vxlan \uc9c0\uc6d0\uc740 \ubcc4\ub3c4\uc758 \ucee4\ub110 \ubaa8\ub4c8\ub85c \uc62e\uaca8\uc84c\uc2b5\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt install linux-modules-extra-raspi\n")),(0,r.kt)("h2",{id:"docker\uc5d0\uc11c-k3s-\uc2e4\ud589\ud558\uae30"},"Docker\uc5d0\uc11c k3s \uc2e4\ud589\ud558\uae30"),(0,r.kt)("p",null,"Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud558\ub294 \ubc29\ubc95\uc5d0\ub294 \uc5ec\ub7ec \uac00\uc9c0\uac00 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"K3d",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3d-io/k3d"},"k3d"),"\ub294 \ub3c4\ucee4\uc5d0\uc11c \uba40\ud2f0\ub178\ub4dc K3s \ud074\ub7ec\uc2a4\ud130\ub97c \uc27d\uac8c \uc2e4\ud589\ud560 \uc218 \uc788\ub3c4\ub85d \uc124\uacc4\ub41c \uc720\ud2f8\ub9ac\ud2f0\uc785\ub2c8\ub2e4."),(0,r.kt)("p",null,"k3d\ub97c \uc0ac\uc6a9\ud558\uba74 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc758 \ub85c\uceec \uac1c\ubc1c \ub4f1\uc744 \uc704\ud574 \ub3c4\ucee4\uc5d0\uc11c \ub2e8\uc77c \ub178\ub4dc \ubc0f \ub2e4\uc911 \ub178\ub4dc k3s \ud074\ub7ec\uc2a4\ud130\ub97c \ub9e4\uc6b0 \uc27d\uac8c \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"k3d \uc124\uce58 \ubc0f \uc0ac\uc6a9 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://k3d.io/#installation"},"\uc124\uce58")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,r.kt)(d,{value:"Docker",mdxType:"TabItem"},(0,r.kt)("p",null,"Docker\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"rancher/k3s")," \uc774\ubbf8\uc9c0\ub97c \uc0ac\uc6a9\ud558\uc5ec K3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8\ub97c \uc2e4\ud589\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.\n",(0,r.kt)("inlineCode",{parentName:"p"},"docker run")," \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker run \\\n  --privileged \\\n  --name k3s-server-1 \\\n  --hostname k3s-server-1 \\\n  -p 6443:6443 \\\n  -d rancher/k3s:v1.24.10-k3s1 \\\n  server\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\ud0dc\uadf8\uc5d0 \uc720\ud6a8\ud55c K3s \ubc84\uc804\uc744 \uc9c0\uc815\ud574\uc57c \ud558\uba70, ",(0,r.kt)("inlineCode",{parentName:"p"},"latest")," \ud0dc\uadf8\ub294 \uc720\uc9c0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.",(0,r.kt)("br",{parentName:"p"}),"\n","\ub3c4\ucee4 \uc774\ubbf8\uc9c0\ub294 \ud0dc\uadf8\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \uae30\ud638\ub97c \ud5c8\uc6a9\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c \ud0dc\uadf8\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"-"),"\ub97c \ub300\uc2e0 \uc0ac\uc6a9\ud558\uc138\uc694.")),(0,r.kt)("p",null,"K3s\uac00 \uc2e4\ud589\ub418\uace0 \ub098\uba74, \uad00\ub9ac\uc790 kubeconfig\ub97c Docker \ucee8\ud14c\uc774\ub108\uc5d0\uc11c \ubcf5\uc0ac\ud558\uc5ec \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config\n")))),(0,r.kt)("h2",{id:"selinux-\uc9c0\uc6d0"},"SELinux \uc9c0\uc6d0"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"v1.19.4+k3s1\ubd80\ud130 \uc0ac\uc6a9 \uac00\ub2a5")),(0,r.kt)("p",null,"\uae30\ubcf8\uc801\uc73c\ub85c SELinux\uac00 \ud65c\uc131\ud654\ub41c \uc2dc\uc2a4\ud15c(\uc608\ub85c CentOS)\uc5d0 K3s\ub97c \uc124\uce58\ud558\ub294 \uacbd\uc6b0 \uc801\uc808\ud55c SELinux \uc815\ucc45\uc774 \uc124\uce58\ub418\uc5b4 \uc788\ub294\uc9c0 \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"\uc790\ub3d9 \uc124\uce58",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\uc5d0\uc5b4 \uac2d(\ud3d0\uc1c4\ub9dd) \uc124\uce58\ub97c \uc218\ud589\ud558\uc9c0 \uc54a\ub294 \uacbd\uc6b0 \ud638\ud658\ub418\ub294 \uc2dc\uc2a4\ud15c\uc5d0\uc11c ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-with-install-script"},"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8"),"\ub294 \ub79c\ucc98 RPM \uc800\uc7a5\uc18c\uc5d0\uc11c SELinux RPM\uc744 \uc790\ub3d9\uc73c\ub85c \uc124\uce58\ud569\ub2c8\ub2e4. \uc790\ub3d9 \uc124\uce58\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_SELINUX_RPM=true"),"\ub85c \uc124\uc815\ud558\uc5ec \uac74\ub108\ub6f8 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)(d,{value:"\uc218\ub3d9 \uc124\uce58",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\ud544\uc694\ud55c policy\ub294 \ub2e4\uc74c \uba85\ub839\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc124\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"yum install -y container-selinux selinux-policy-base\nyum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm\n")),(0,r.kt)("p",null,"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\uac00 \uc2e4\ud328\ud558\uc9c0 \uc54a\uace0 \uacbd\uace0\ub97c \uae30\ub85d\ud558\ub3c4\ub85d \ud558\ub824\uba74 \ub2e4\uc74c \ud658\uacbd \ubcc0\uc218\ub97c \uc124\uc815\ud558\uba74 \ub429\ub2c8\ub2e4:\n",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SELINUX_WARN=true"),"."))),(0,r.kt)("h3",{id:"selinux-\uc801\uc6a9-\ud65c\uc131\ud654\ud558\uae30"},"SELinux \uc801\uc6a9 \ud65c\uc131\ud654\ud558\uae30"),(0,r.kt)("p",null,"SELinux\ub97c \ud65c\uc6a9\ud558\ub824\uba74 K3s \uc11c\ubc84 \ubc0f \uc5d0\uc774\uc804\ud2b8\ub97c \uc2dc\uc791\ud560 \ub54c ",(0,r.kt)("inlineCode",{parentName:"p"},"--selinux")," \ud50c\ub798\uadf8\ub97c \uc9c0\uc815\ud558\uc138\uc694."),(0,r.kt)("p",null,"\uc774 \uc635\uc158\uc740 K3s ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"\uad6c\uc131 \ud30c\uc77c"),"\uc5d0\uc11c\ub3c4 \uc9c0\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"selinux: true\n")),(0,r.kt)("p",null,"SELinux\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uc9c0\uc815 ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir"),"\uc744 \uc0ac\uc6a9\ud558\ub294 \uac83\uc740 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc0ac\uc6a9\uc790 \uc9c0\uc815\ud558\ub824\uba74 \uc0ac\uc6a9\uc790 \uc9c0\uc815 \uc815\ucc45\uc744 \uc9c1\uc811 \uc791\uc131\ud574\uc57c \ud560 \uac00\ub2a5\uc131\uc774 \ub192\uc2b5\ub2c8\ub2e4. \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc5d0 \ub300\ud55c SELinux \uc815\ucc45 \ud30c\uc77c\uc774 \ud3ec\ud568\ub41c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containers/container-selinux"},"containers/container-selinux")," \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\uc640 K3s\ub97c \uc704\ud55c SELinux \uc815\ucc45\uc774 \ud3ec\ud568\ub41c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s-selinux"},"k3s-io/k3s-selinux")," \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\ub97c \ucc38\uace0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"\uc9c0\uc5f0-\ud480\ub9c1\uc758-\uc9c0\uc5f0-\ud480\ub9c1-\ud65c\uc131\ud654-\uc2e4\ud5d8\uc801"},"\uc9c0\uc5f0 \ud480\ub9c1\uc758 \uc9c0\uc5f0 \ud480\ub9c1 \ud65c\uc131\ud654 (\uc2e4\ud5d8\uc801)"),(0,r.kt)("h3",{id:"\uc9c0\uc5f0-\ud480\ub9c1\uacfc-estargz\ub780-\ubb34\uc5c7\uc778\uac00\uc694"},"\uc9c0\uc5f0 \ud480\ub9c1\uacfc eStargz\ub780 \ubb34\uc5c7\uc778\uac00\uc694?"),(0,r.kt)("p",null,"\uc774\ubbf8\uc9c0 \ud480\ub9c1\uc740 \ucee8\ud14c\uc774\ub108 \ub77c\uc774\ud504\uc0ac\uc774\ud074\uc5d0\uc11c \uc2dc\uac04\uc774 \ub9ce\uc774 \uc18c\uc694\ub418\ub294 \ub2e8\uacc4 \uc911 \ud558\ub098\ub85c \uc54c\ub824\uc838 \uc788\uc2b5\ub2c8\ub2e4.\nHarter, et al.(",(0,r.kt)("a",{parentName:"p",href:"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"},"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"),"),"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\ud328\ud0a4\uc9c0 \ud480\ub9c1\uc740 \ucee8\ud14c\uc774\ub108 \uc2dc\uc791 \uc2dc\uac04\uc758 76%\ub97c \ucc28\uc9c0\ud558\uc9c0\ub9cc, \uadf8 \uc911 \uc77d\uae30 \ub370\uc774\ud130\ub294 6.4%\uc5d0 \ubd88\uacfc\ud569\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc774 \ubb38\uc81c\ub97c \ud574\uacb0\ud558\uae30 \uc704\ud574 k3s\ub294 \uc774\ubbf8\uc9c0 \ucf58\ud150\uce20\uc758 ",(0,r.kt)("em",{parentName:"p"},"lazy pulling"),"\uc744 \uc2e4\ud5d8\uc801\uc73c\ub85c \uc9c0\uc6d0\ud569\ub2c8\ub2e4.\n\uc774\ub97c \ud1b5\ud574 k3s\ub294 \uc804\uccb4 \uc774\ubbf8\uc9c0\uac00 \ud480\ub9c1\ub418\uae30 \uc804\uc5d0 \ucee8\ud14c\uc774\ub108\ub97c \uc2dc\uc791\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n\ub300\uc2e0 \ud544\uc694\ud55c \ucf58\ud150\uce20 \uccad\ud06c(\uc608: \uac1c\ubcc4 \ud30c\uc77c)\ub97c \uc628\ub514\ub9e8\ub4dc \ubc29\uc2dd\uc73c\ub85c \uac00\uc838\uc635\ub2c8\ub2e4.\n\ud2b9\ud788 \ub300\uc6a9\ub7c9 \uc774\ubbf8\uc9c0\uc758 \uacbd\uc6b0 \uc774 \uae30\uc220\uc744 \uc0ac\uc6a9\ud558\uba74 \ucee8\ud14c\uc774\ub108 \uc2dc\uc791 \uc9c0\uc5f0 \uc2dc\uac04\uc744 \ub2e8\ucd95\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc0ac\uc6a9\ud558\ub824\uba74 \ub300\uc0c1 \uc774\ubbf8\uc9c0\uc758 \ud3ec\ub9f7\uc744 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter/blob/main/docs/stargz-estargz.md"},(0,r.kt)("em",{parentName:"a"},"eStargz")),"\ub85c \uc9c0\uc815\ud574\uc57c \ud569\ub2c8\ub2e4.\n\uc774 \ud615\uc2dd\uc740 OCI \ub300\uccb4 \ud615\uc2dd\uc774\uc9c0\ub9cc \uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc704\ud55c 100% \ud638\ud658\ub418\ub294 \uc774\ubbf8\uc9c0 \ud615\uc2dd\uc785\ub2c8\ub2e4.\n\ud638\ud658\uc131 \ub54c\ubb38\uc5d0 eStargz\ub294 \ud45c\uc900 \ucee8\ud14c\uc774\ub108 \ub808\uc9c0\uc2a4\ud2b8\ub9ac(\uc608: ghcr.io)\ub85c \ud478\uc2dc\ud560 \uc218 \uc788\uc744 \ubfd0\ub9cc \uc544\ub2c8\ub77c eStargz\uc640 \ubb34\uad00\ud55c \ub7f0\ud0c0\uc784\uc5d0\uc11c\ub3c4 ",(0,r.kt)("em",{parentName:"p"},"\uc2e4\ud589 \uac00\ub2a5")," \ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"eStargz\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/google/crfs"},"Google CRFS \ud504\ub85c\uc81d\ud2b8\uc5d0\uc11c \uc81c\uc548\ud55c stargz \ud615\uc2dd"),"\uc744 \uae30\ubc18\uc73c\ub85c \uac1c\ubc1c\ub418\uc5c8\uc9c0\ub9cc \ucf58\ud150\uce20 \uac80\uc99d \ubc0f \uc131\ub2a5 \ucd5c\uc801\ud654\ub97c \ud3ec\ud568\ud55c \uc2e4\uc6a9\uc801\uc778 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.\n\uc9c0\uc5f0 \ud480\ub9c1\uacfc eStargz\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter"},"Stargz Snapshotter \ud504\ub85c\uc81d\ud2b8 \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac"),"\ub97c \ucc38\uace0\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"\uc9c0\uc5f0-\ud480\ub9c1\uc774-\uac00\ub2a5\ud558\ub3c4\ub85d-k3s-\uad6c\uc131\ud558\uae30"},"\uc9c0\uc5f0 \ud480\ub9c1\uc774 \uac00\ub2a5\ud558\ub3c4\ub85d k3s \uad6c\uc131\ud558\uae30"),(0,r.kt)("p",null,"\uc544\ub798\uc640 \uac19\uc774 k3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8\uc5d0\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshotter=stargz")," \uc635\uc158\uc774 \ud544\uc694\ud569\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --snapshotter=stargz\n")),(0,r.kt)("p",null,"\uc774 \uad6c\uc131\uc744 \uc0ac\uc6a9\ud558\uba74, eStargz \ud615\uc2dd\uc758 \uc774\ubbf8\uc9c0\uc5d0 \ub300\ud574 \uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n\ub2e4\uc74c \uc608\uc81c \ud30c\ub4dc \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub294 eStargz \ud615\uc2dd\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"node:13.13.0")," \uc774\ubbf8\uc9c0(",(0,r.kt)("inlineCode",{parentName:"p"},"ghcr.io/stargz-containers/node:13.13.0-esgz"),")\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\n\uc2a4\ud0c0\uc988 \uc2a4\ub0c5\uc0f7\ud130\uac00 \ud65c\uc131\ud654\ub418\uba74 K3s\ub294 \uc774 \uc774\ubbf8\uc9c0\uc5d0 \ub300\ud574 \uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc218\ud589\ud569\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: nodejs\nspec:\n  containers:\n    - name: nodejs-estargz\n      image: ghcr.io/stargz-containers/node:13.13.0-esgz\n      command: [\"node\"]\n      args:\n        - -e\n        - var http = require('http');\n          http.createServer(function(req, res) {\n          res.writeHead(200);\n          res.end('Hello World!\\n');\n          }).listen(80);\n      ports:\n        - containerPort: 80\n")),(0,r.kt)("h2",{id:"\ucd94\uac00-\ub85c\uae45-\uc18c\uc2a4"},"\ucd94\uac00 \ub85c\uae45 \uc18c\uc2a4"),(0,r.kt)("p",null,"K3s\uc6a9 ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/"},"\ub79c\ucc98 \ub85c\uae45"),"\uc740 \ub79c\ucc98\ub97c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 \uc124\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub97c \uc704\ud574\uc11c\ub294 \ub2e4\uc74c \uc9c0\uce68\uc744 \uc2e4\ud589\ud574\uc57c \ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"helm repo add rancher-charts https://charts.rancher.io\nhelm repo update\nhelm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd\nhelm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging\n")),(0,r.kt)("h2",{id:"\ucd94\uac00-\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ub85c\uae45"},"\ucd94\uac00 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ub85c\uae45"),(0,r.kt)("p",null,"\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc5d0 \uc758\ud574 \ucc28\ub2e8\ub41c \ud328\ud0b7\uc744 \ub85c\uae45\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud328\ud0b7\uc740 \ucc28\ub2e8 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc744 \ud3ec\ud568\ud55c \ud328\ud0b7 \uc138\ubd80 \uc815\ubcf4\ub97c \ud45c\uc2dc\ud558\ub294 iptables NFLOG \uc791\uc5c5\uc73c\ub85c \uc804\uc1a1\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud2b8\ub798\ud53d\uc774 \ub9ce\uc73c\uba74 \ub85c\uadf8 \uba54\uc2dc\uc9c0 \uc218\uac00 \ub9e4\uc6b0 \ub9ce\uc544\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc815\ucc45\ubcc4\ub85c \ub85c\uadf8 \uc18d\ub3c4\ub97c \uc81c\uc5b4\ud558\ub824\uba74, \ud574\ub2f9 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc5d0 \ub2e4\uc74c \uc5b4\ub178\ud14c\uc774\uc158\uc744 \ucd94\uac00\ud558\uc5ec ",(0,r.kt)("inlineCode",{parentName:"p"},"limit")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst")," iptables \ub9e4\uac1c\ubcc0\uc218\ub97c \uc124\uc815\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit=<LIMIT-VALUE>")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE>"))),(0,r.kt)("p",null,"\uae30\ubcf8\uac12\uc740 ",(0,r.kt)("inlineCode",{parentName:"p"},"limit=10/minute"),"\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst=10"),"\uc785\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud544\ub4dc\uc758 \ud615\uc2dd\uacfc \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uac12\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches"},"iptables manual"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"NFLOG \ud328\ud0b7\uc744 \ub85c\uadf8 \ud56d\ubaa9\uc73c\ub85c \ubcc0\ud658\ud558\ub824\uba74 ulogd2\ub97c \uc124\uce58\ud558\uace0 ",(0,r.kt)("inlineCode",{parentName:"p"},"[log1]"),"\uc744 ",(0,r.kt)("inlineCode",{parentName:"p"},"group=100"),"\uc5d0\uc11c \uc77d\ub3c4\ub85d \uad6c\uc131\ud569\ub2c8\ub2e4. \uadf8\ub7f0 \ub2e4\uc74c ulogd2 \uc11c\ube44\uc2a4\ub97c \ub2e4\uc2dc \uc2dc\uc791\ud558\uc5ec \uc0c8 \uad6c\uc131\uc774 \ucee4\ubc0b\ub418\ub3c4\ub85d \ud569\ub2c8\ub2e4.\n\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \uaddc\uce59\uc5d0 \uc758\ud574 \ud328\ud0b7\uc774 \ucc28\ub2e8\ub418\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/log/ulog/syslogemu.log"),"\uc5d0 \ub85c\uadf8 \uba54\uc2dc\uc9c0\uac00 \ub098\ud0c0\ub0a9\ub2c8\ub2e4."),(0,r.kt)("p",null,"NFLOG \ub137\ub9c1\ud06c \uc18c\ucf13\uc73c\ub85c \uc804\uc1a1\ub41c \ud328\ud0b7\uc740 tcpdump \ub610\ub294 tshark\uc640 \uac19\uc740 \uba85\ub839\uc904 \ub3c4\uad6c\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc77d\uc744 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"tcpdump -ni nflog:100\n")),(0,r.kt)("p",null,"\ub354 \uc27d\uac8c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc9c0\ub9cc, tcpdump\ub294 \ud328\ud0b7\uc744 \ucc28\ub2e8\ud55c \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc758 \uc774\ub984\uc744 \ud45c\uc2dc\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub300\uc2e0 \uc640\uc774\uc5b4\uc0e4\ud06c\uc758 tshark \uba85\ub839\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc815\ucc45 \uc774\ub984\uc774 \ud3ec\ud568\ub41c ",(0,r.kt)("inlineCode",{parentName:"p"},"nflog.prefix")," \ud544\ub4dc\ub97c \ud3ec\ud568\ud55c \uc804\uccb4 NFLOG \ud328\ud0b7 \ud5e4\ub354\ub97c \ud45c\uc2dc\ud558\uc138\uc694."))}m.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4885],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var p=a.createContext({}),o=function(e){var t=a.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=o(e.components);return a.createElement(p.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,p=e.parentName,k=s(e,["components","mdxType","originalType","parentName"]),d=o(n),c=r,m=d["".concat(p,".").concat(c)]||d[c]||u[c]||l;return n?a.createElement(m,i(i({ref:t},k),{},{components:n})):a.createElement(m,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=d;var s={};for(var p in t)hasOwnProperty.call(t,p)&&(s[p]=t[p]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var o=2;o<l;o++)i[o]=n[o];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},3697:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>s,toc:()=>o});var a=n(3117),r=(n(7294),n(3905));const l={title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",weight:45,aliases:["/k3s/latest/kr/running/","/k3s/latest/kr/configuration/"]},i=void 0,s={unversionedId:"advanced/advanced",id:"advanced/advanced",title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",description:"\uc774 \uc139\uc158\uc5d0\ub294 K3s\ub97c \uc2e4\ud589\ud558\uace0 \uad00\ub9ac\ud560 \uc218 \uc788\ub294 \ub2e4\uc591\ud55c \ubc29\ubc95\uacfc K3s \uc0ac\uc6a9\uc744 \uc704\ud574 \ud638\uc2a4\ud2b8 OS\ub97c \uc900\ube44\ud558\ub294 \ub370 \ud544\uc694\ud55c \ub2e8\uacc4\ub97c \uc124\uba85\ud558\ub294 \uace0\uae09 \uc815\ubcf4\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/advanced/advanced.md",sourceDirName:"advanced",slug:"/advanced/",permalink:"/kr/advanced/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",weight:45,aliases:["/k3s/latest/kr/running/","/k3s/latest/kr/configuration/"]},sidebar:"mySidebar",previous:{title:"\ud5ec\ub984(Helm)",permalink:"/kr/helm/"},next:{title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",permalink:"/kr/faq/"}},p={},o=[{value:"\uc778\uc99d\uc11c \uad00\ub9ac",id:"\uc778\uc99d\uc11c-\uad00\ub9ac",level:2},{value:"\uc778\uc99d \uae30\uad00 \uc778\uc99d\uc11c",id:"\uc778\uc99d-\uae30\uad00-\uc778\uc99d\uc11c",level:3},{value:"\ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c",id:"\ud074\ub77c\uc774\uc5b8\ud2b8-\ubc0f-\uc11c\ubc84-\uc778\uc99d\uc11c",level:3},{value:"\ud1a0\ud070 \uad00\ub9ac",id:"\ud1a0\ud070-\uad00\ub9ac",level:2},{value:"HTTP \ud504\ub85d\uc2dc \uad6c\uc131\ud558\uae30",id:"http-\ud504\ub85d\uc2dc-\uad6c\uc131\ud558\uae30",level:2},{value:"\ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc73c\ub85c Docker \uc0ac\uc6a9",id:"\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784\uc73c\ub85c-docker-\uc0ac\uc6a9",level:2},{value:"etcdctl \uc0ac\uc6a9\ud558\uae30",id:"etcdctl-\uc0ac\uc6a9\ud558\uae30",level:2},{value:"\ucee8\ud14c\uc774\ub108 \uc124\uc815\ud558\uae30",id:"\ucee8\ud14c\uc774\ub108-\uc124\uc815\ud558\uae30",level:2},{value:"NVIDIA \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uc9c0\uc6d0",id:"nvidia-\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784-\uc9c0\uc6d0",level:2},{value:"\uc5d0\uc774\uc804\ud2b8 \uc5c6\ub294 \uc11c\ubc84 \uc2e4\ud589\ud558\uae30(\uc2e4\ud5d8\uc801)",id:"\uc5d0\uc774\uc804\ud2b8-\uc5c6\ub294-\uc11c\ubc84-\uc2e4\ud589\ud558\uae30\uc2e4\ud5d8\uc801",level:2},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2e4\ud589(\uc2e4\ud5d8\uc801)",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2e4\ud589\uc2e4\ud5d8\uc801",level:2},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\uc758 \uc54c\ub824\uc9c4 \uc774\uc288",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubaa8\ub4dc\uc758-\uc54c\ub824\uc9c4-\uc774\uc288",level:3},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2dc\uc791\ud558\uae30",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2dc\uc791\ud558\uae30",level:3},{value:"\uace0\uae09 \ub8e8\ud2b8\ub9ac\uc2a4 \uad6c\uc131",id:"\uace0\uae09-\ub8e8\ud2b8\ub9ac\uc2a4-\uad6c\uc131",level:3},{value:"\ub8e8\ud2b8\ub9ac\uc2a4 \ubb38\uc81c \ud574\uacb0\ud558\uae30",id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubb38\uc81c-\ud574\uacb0\ud558\uae30",level:3},{value:"\ub178\ub4dc \ub808\uc774\ube14 \ubc0f \ud14c\uc778\ud2b8",id:"\ub178\ub4dc-\ub808\uc774\ube14-\ubc0f-\ud14c\uc778\ud2b8",level:2},{value:"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub85c \uc11c\ube44\uc2a4 \uc2dc\uc791\ud558\uae30",id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8\ub85c-\uc11c\ube44\uc2a4-\uc2dc\uc791\ud558\uae30",level:2},{value:"\ucd94\uac00 OS \uc900\ube44 \uc0ac\ud56d",id:"\ucd94\uac00-os-\uc900\ube44-\uc0ac\ud56d",level:2},{value:"\uc774\uc804 iptables \ubc84\uc804",id:"\uc774\uc804-iptables-\ubc84\uc804",level:3},{value:"Red Hat Enterprise Linux / CentOS",id:"red-hat-enterprise-linux--centos",level:3},{value:"Ubuntu",id:"ubuntu",level:3},{value:"Raspberry Pi",id:"raspberry-pi",level:3},{value:"Docker\uc5d0\uc11c k3s \uc2e4\ud589\ud558\uae30",id:"docker\uc5d0\uc11c-k3s-\uc2e4\ud589\ud558\uae30",level:2},{value:"SELinux \uc9c0\uc6d0",id:"selinux-\uc9c0\uc6d0",level:2},{value:"SELinux \uc801\uc6a9 \ud65c\uc131\ud654\ud558\uae30",id:"selinux-\uc801\uc6a9-\ud65c\uc131\ud654\ud558\uae30",level:3},{value:"\uc9c0\uc5f0 \ud480\ub9c1\uc758 \uc9c0\uc5f0 \ud480\ub9c1 \ud65c\uc131\ud654 (\uc2e4\ud5d8\uc801)",id:"\uc9c0\uc5f0-\ud480\ub9c1\uc758-\uc9c0\uc5f0-\ud480\ub9c1-\ud65c\uc131\ud654-\uc2e4\ud5d8\uc801",level:2},{value:"\uc9c0\uc5f0 \ud480\ub9c1\uacfc eStargz\ub780 \ubb34\uc5c7\uc778\uac00\uc694?",id:"\uc9c0\uc5f0-\ud480\ub9c1\uacfc-estargz\ub780-\ubb34\uc5c7\uc778\uac00\uc694",level:3},{value:"\uc9c0\uc5f0 \ud480\ub9c1\uc774 \uac00\ub2a5\ud558\ub3c4\ub85d k3s \uad6c\uc131\ud558\uae30",id:"\uc9c0\uc5f0-\ud480\ub9c1\uc774-\uac00\ub2a5\ud558\ub3c4\ub85d-k3s-\uad6c\uc131\ud558\uae30",level:3},{value:"\ucd94\uac00 \ub85c\uae45 \uc18c\uc2a4",id:"\ucd94\uac00-\ub85c\uae45-\uc18c\uc2a4",level:2},{value:"\ucd94\uac00 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ub85c\uae45",id:"\ucd94\uac00-\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ub85c\uae45",level:2}],k=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=k("Tabs"),d=k("TabItem"),c={toc:o};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\ub294 K3s\ub97c \uc2e4\ud589\ud558\uace0 \uad00\ub9ac\ud560 \uc218 \uc788\ub294 \ub2e4\uc591\ud55c \ubc29\ubc95\uacfc K3s \uc0ac\uc6a9\uc744 \uc704\ud574 \ud638\uc2a4\ud2b8 OS\ub97c \uc900\ube44\ud558\ub294 \ub370 \ud544\uc694\ud55c \ub2e8\uacc4\ub97c \uc124\uba85\ud558\ub294 \uace0\uae09 \uc815\ubcf4\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"\uc778\uc99d\uc11c-\uad00\ub9ac"},"\uc778\uc99d\uc11c \uad00\ub9ac"),(0,r.kt)("h3",{id:"\uc778\uc99d-\uae30\uad00-\uc778\uc99d\uc11c"},"\uc778\uc99d \uae30\uad00 \uc778\uc99d\uc11c"),(0,r.kt)("p",null,"K3s\ub294 \uccab \ubc88\uc9f8 \uc11c\ubc84 \ub178\ub4dc\ub97c \uc2dc\uc791\ud558\ub294 \ub3d9\uc548 \uc790\uccb4 \uc11c\uba85\ub41c CA(\uc778\uc99d \uae30\uad00) \uc778\uc99d\uc11c\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774 CA \uc778\uc99d\uc11c\ub294 10\ub144 \ub3d9\uc548 \uc720\ud6a8\ud558\uba70 \uc790\ub3d9\uc73c\ub85c \uac31\uc2e0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc0ac\uc6a9\uc790 \uc9c0\uc815 CA \uc778\uc99d\uc11c \uc0ac\uc6a9 \ub610\ub294 \uc790\uccb4 \uc11c\uba85 CA \uc778\uc99d\uc11c \uac31\uc2e0\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/certificate#certificate-authority-ca-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s \uc778\uc99d\uc11c rotate-ca")," \uba85\ub839 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("h3",{id:"\ud074\ub77c\uc774\uc5b8\ud2b8-\ubc0f-\uc11c\ubc84-\uc778\uc99d\uc11c"},"\ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c"),(0,r.kt)("p",null,"K3s \ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c\ub294 \ubc1c\uae09\ud55c \ub0a0\ub85c\ubd80\ud130 365\uc77c \ub3d9\uc548 \uc720\ud6a8\ud569\ub2c8\ub2e4. \ub9cc\ub8cc\ub418\uc5c8\uac70\ub098 \ub9cc\ub8cc \ud6c4 90\uc77c \uc774\ub0b4\uc5d0 \ub9cc\ub8cc\ub41c \uc778\uc99d\uc11c\ub294 K3s\ub97c \uc2dc\uc791\ud560 \ub54c\ub9c8\ub2e4 \uc790\ub3d9\uc73c\ub85c \uac31\uc2e0\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud074\ub77c\uc774\uc5b8\ud2b8 \ubc0f \uc11c\ubc84 \uc778\uc99d\uc11c\ub97c \uc218\ub3d9\uc73c\ub85c \ub85c\ud14c\uc774\uc158\ud558\ub294 \uac83\uc5d0 \ub300\ud55c \uc815\ubcf4\ub294 ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/certificate#client-and-server-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s \uc778\uc99d\uc11c \ub85c\ud14c\uc774\uc158")," \uba85\ub839 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\ud1a0\ud070-\uad00\ub9ac"},"\ud1a0\ud070 \uad00\ub9ac"),(0,r.kt)("p",null,"\uae30\ubcf8\uc801\uc73c\ub85c K3s\ub294 \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ubaa8\ub450\uc5d0 \ub2e8\uc77c \uc815\uc801 \ud1a0\ud070\uc744 \uc0ac\uc6a9\ud569\ub2c8\ub2e4. \uc774 \ud1a0\ud070\uc740 \ud074\ub7ec\uc2a4\ud130\uac00 \uc0dd\uc131\ub41c \ud6c4\uc5d0\ub294 \ubcc0\uacbd\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.\n\uc5d0\uc774\uc804\ud2b8 \uc870\uc778\uc5d0\ub9cc \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ub450 \ubc88\uc9f8 \uc815\uc801 \ud1a0\ud070\uc744 \ud65c\uc131\ud654\ud558\uac70\ub098 \uc790\ub3d9\uc73c\ub85c \ub9cc\ub8cc\ub418\ub294 \uc784\uc2dc ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm")," \uc2a4\ud0c0\uc77c \uc870\uc778 \ud1a0\ud070\uc744 \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n\uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"http-\ud504\ub85d\uc2dc-\uad6c\uc131\ud558\uae30"},"HTTP \ud504\ub85d\uc2dc \uad6c\uc131\ud558\uae30"),(0,r.kt)("p",null,"HTTP \ud504\ub85d\uc2dc\ub97c \ud1b5\ud574\uc11c\ub9cc \uc678\ubd80\uc640 \uc5f0\uacb0\ud560 \uc218 \uc788\ub294 \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0, K3s \uc2dc\uc2a4\ud15c\ub4dc \uc11c\ube44\uc2a4\uc5d0\uc11c \ud504\ub85d\uc2dc \uc124\uc815\uc744 \uad6c\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uadf8\ub7ec\uba74 \uc774 \ud504\ub85d\uc2dc \uc124\uc815\uc774 K3s\uc5d0\uc11c \uc0ac\uc6a9\ub418\uc5b4 \ub0b4\uc7a5 \ucee8\ud14c\uc774\ub108\uc640 kubelet\uc5d0 \uc804\ub2ec\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"K3s \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \uc790\ub3d9\uc73c\ub85c \ud604\uc7ac \uc178\uc5d0\uc11c ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTPS_PROXY")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \ubcc0\uc218\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTP_PROXY"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTPS_PROXY")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_NO_PROXY")," \ubcc0\uc218\uac00 \uc788\ub294 \uacbd\uc6b0 \uc774\ub97c systemd \uc11c\ube44\uc2a4\uc758 \ud658\uacbd \ud30c\uc77c\uc5d0 \uc791\uc131\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s.service.env")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s-agent.service.env"))),(0,r.kt)("p",null,"\ubb3c\ub860 \uc774 \ud30c\uc77c\uc744 \ud3b8\uc9d1\ud558\uc5ec \ud504\ub85d\uc2dc\ub97c \uad6c\uc131\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"K3s\ub294 \ud074\ub7ec\uc2a4\ud130 \ub0b4\ubd80 \ud30c\ub4dc \ubc0f \uc11c\ube44\uc2a4 IP \ubc94\uc704\uc640 \ud074\ub7ec\uc2a4\ud130 DNS \ub3c4\uba54\uc778\uc744 \uc790\ub3d9\uc73c\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \ud56d\ubaa9 \ubaa9\ub85d\uc5d0 \ucd94\uac00\ud569\ub2c8\ub2e4. \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ub178\ub4dc \uc790\uccb4\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 IP \uc8fc\uc18c \ubc94\uc704(\uc989, \ub178\ub4dc\uc758 \ud37c\ube14\ub9ad \ubc0f \ud504\ub77c\uc774\ube57 IP)\uac00 ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \ubaa9\ub85d\uc5d0 \ud3ec\ud568\ub418\uc5b4 \uc788\ub294\uc9c0 \ub610\ub294 \ud504\ub85d\uc2dc\ub97c \ud1b5\ud574 \ub178\ub4dc\uc5d0 \ub3c4\ub2ec\ud560 \uc218 \uc788\ub294\uc9c0 \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"HTTP_PROXY=http://your-proxy.example.com:8888\nHTTPS_PROXY=http://your-proxy.example.com:8888\nNO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("p",null,"K3s\uc640 Kubelet\uc5d0 \uc601\ud5a5\uc744 \uc8fc\uc9c0 \uc54a\uace0 \ucee8\ud14c\uc774\ub108\uc5d0 \ub300\ud55c \ud504\ub85d\uc2dc \uc124\uc815\uc744 \uad6c\uc131\ud558\ub824\uba74, \ubcc0\uc218 \uc55e\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_"),"\ub97c \ubd99\uc774\uba74 \ub429\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("h2",{id:"\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784\uc73c\ub85c-docker-\uc0ac\uc6a9"},"\ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc73c\ub85c Docker \uc0ac\uc6a9"),(0,r.kt)("p",null,"K3s\ub294 \uc5c5\uacc4 \ud45c\uc900 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc778 ",(0,r.kt)("a",{parentName:"p",href:"https://containerd.io/"},"containerd"),"\ub97c \ud3ec\ud568\ud558\uba70 \uae30\ubcf8\uac12\uc73c\ub85c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\n\ucfe0\ubc84\ub124\ud2f0\uc2a4 1.24\ubd80\ud130, kubelet\uc740 \ub354 \uc774\uc0c1 kubelet\uc774 dockerd\uc640 \ud1b5\uc2e0\ud560 \uc218 \uc788\ub3c4\ub85d \ud558\ub294 \ucef4\ud3ec\ub10c\ud2b8\uc778 dockershim\uc744 \ud3ec\ud568\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.\nK3s 1.24 \uc774\uc0c1\uc5d0\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/Mirantis/cri-dockerd"},"cri-dockerd"),"\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc5b4 \uc774\uc804 \ub9b4\ub9ac\uc988\uc758 K3s\uc5d0\uc11c \uc6d0\ud65c\ud558\uac8c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uba74\uc11c Docker \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc744 \uacc4\uc18d \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ucee8\ud14c\uc774\ub108 \ub300\uc2e0 Docker\ub97c \uc0ac\uc6a9\ud558\ub824\uba74:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"K3s \ub178\ub4dc\uc5d0 Docker\ub97c \uc124\uce58\ud569\ub2c8\ub2e4. \ub79c\ucc98\uc758 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/install-docker"},"Docker \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8")," \uc911 \ud558\ub098\ub97c \uc0ac\uc6a9\ud558\uc5ec Docker\ub97c \uc124\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl https://releases.rancher.com/install-docker/20.10.sh | sh\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"--docker")," \uc635\uc158\uc744 \uc0ac\uc6a9\ud558\uc5ec K3s\ub97c \uc124\uce58\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -s - --docker\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\ud074\ub7ec\uc2a4\ud130\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ sudo k3s kubectl get pods --all-namespaces\nNAMESPACE     NAME                                     READY   STATUS      RESTARTS   AGE\nkube-system   local-path-provisioner-6d59f47c7-lncxn   1/1     Running     0          51s\nkube-system   metrics-server-7566d596c8-9tnck          1/1     Running     0          51s\nkube-system   helm-install-traefik-mbkn9               0/1     Completed   1          51s\nkube-system   coredns-8655855d6-rtbnb                  1/1     Running     0          51s\nkube-system   svclb-traefik-jbmvl                      2/2     Running     0          43s\nkube-system   traefik-758cd5fc85-2wz97                 1/1     Running     0          43s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"Docker \ucee8\ud14c\uc774\ub108\uac00 \uc2e4\ud589 \uc911\uc778\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'$ sudo docker ps\nCONTAINER ID        IMAGE                     COMMAND                  CREATED              STATUS              PORTS               NAMES\n3e4d34729602        897ce3c5fc8f              "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\nbffdc9d7a65f        rancher/klipper-lb        "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n436b85c5e38d        rancher/library-traefik   "/traefik --configfi\u2026"   About a minute ago   Up About a minute                       k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nde8fded06188        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n7c6a30aeeb2f        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nae6c58cab4a7        9d12f9848b99              "local-path-provisio\u2026"   About a minute ago   Up About a minute                       k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\nbe1450e1a11e        9dd718864ce6              "/metrics-server"        About a minute ago   Up About a minute                       k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0\n4454d14e4d3f        c4d3d16fe508              "/coredns -conf /etc\u2026"   About a minute ago   Up About a minute                       k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\nc3675b87f96c        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\n4b1fddbe6ca6        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\n64d3517d4a95        rancher/pause:3.1         "/pause"\n')))),(0,r.kt)("h2",{id:"etcdctl-\uc0ac\uc6a9\ud558\uae30"},"etcdctl \uc0ac\uc6a9\ud558\uae30"),(0,r.kt)("p",null,"etcdctl\uc740 etcd \uc11c\ubc84\uc640 \uc0c1\ud638 \uc791\uc6a9\ud558\uae30 \uc704\ud55c CLI\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4. K3s\ub294 etcdctl\uc744 \ubc88\ub4e4\ub85c \uc81c\uacf5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"etcdctl\uc744 \uc0ac\uc6a9\ud558\uc5ec K3s\uc758 \ub0b4\uc7a5\ub41c etcd\uc640 \uc0c1\ud638 \uc791\uc6a9\ud558\ub824\uba74 ",(0,r.kt)("a",{parentName:"p",href:"https://etcd.io/docs/latest/install/"},"\uacf5\uc2dd \ubb38\uc11c"),"\ub97c \ucc38\uc870\ud558\uc5ec etcdctl\uc744 \uc124\uce58\ud558\uc138\uc694."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'ETCD_VERSION="v3.5.5"\nETCD_URL="https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz"\ncurl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin\n')),(0,r.kt)("p",null,"\uadf8\ub7f0 \ub2e4\uc74c \uc778\uc99d\uc5d0 K3s\uc5d0\uc11c \uad00\ub9ac\ud558\ub294 \uc778\uc99d\uc11c \ubc0f \ud0a4\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d etcdctl\uc744 \uad6c\uc131\ud558\uc5ec \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo etcdctl version \\\n  --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\\n  --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\\n  --key=/var/lib/rancher/k3s/server/tls/etcd/client.key\n")),(0,r.kt)("h2",{id:"\ucee8\ud14c\uc774\ub108-\uc124\uc815\ud558\uae30"},"\ucee8\ud14c\uc774\ub108 \uc124\uc815\ud558\uae30"),(0,r.kt)("p",null,"K3s\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/agent/etc/containerd/config.toml"),"\uc5d0 \ucee8\ud14c\uc774\ub108\uc5d0 \ub300\ud55c config.toml\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc774 \ud30c\uc77c\uc5d0 \ub300\ud55c \uace0\uae09 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\uc744 \uc704\ud574 \uac19\uc740 \ub514\ub809\ud130\ub9ac\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl"),"\uc774\ub77c\ub294 \ub2e4\ub978 \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uba74 \uc774 \ud30c\uc77c\uc774 \ub300\uc2e0 \uc0ac\uc6a9\ub41c\ub2e4."),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl"),"\uc740 Go \ud15c\ud50c\ub9bf \ud30c\uc77c\ub85c \ucde8\uae09\ub418\uba70, ",(0,r.kt)("inlineCode",{parentName:"p"},"config.Node")," \uad6c\uc870\uac00 \ud15c\ud50c\ub9bf\uc73c\ub85c \uc804\ub2ec\ub429\ub2c8\ub2e4. \uc774 \uad6c\uc870\ub97c \uc0ac\uc6a9\ud558\uc5ec \uad6c\uc131 \ud30c\uc77c\uc744 \uc0ac\uc6a9\uc790 \uc815\uc758\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c Linux \ubc0f Windows \uc608\uc81c\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/agent/templates"},"\uc774 \ud3f4\ub354"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.\nconfig.Node Go \uc5b8\uc5b4 \uad6c\uc870\uccb4\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/daemons/config/types.go#L37"},"\uc5ec\uae30"),"\uc5d0 \uc815\uc758\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"nvidia-\ucee8\ud14c\uc774\ub108-\ub7f0\ud0c0\uc784-\uc9c0\uc6d0"},"NVIDIA \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uc9c0\uc6d0"),(0,r.kt)("p",null,"K3s\ub294 K3s \uc2dc\uc791 \uc2dc NVIDIA \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc774 \uc788\uc73c\uba74 \uc790\ub3d9\uc73c\ub85c \uac10\uc9c0\ud558\uc5ec \uc124\uc815\ud569\ub2c8\ub2e4."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\uc544\ub798\uc758 \uc548\ub0b4\uc5d0 \ub530\ub77c \ub178\ub4dc\uc5d0 \uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ud328\ud0a4\uc9c0 \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\ub97c \uc124\uce58\ud569\ub2c8\ub2e4:\n",(0,r.kt)("a",{parentName:"li",href:"https://nvidia.github.io/libnvidia-container/"},"https://nvidia.github.io/libnvidia-container/")),(0,r.kt)("li",{parentName:"ol"},"\uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \ud328\ud0a4\uc9c0\ub97c \uc124\uce58\ud569\ub2c8\ub2e4. \uc608\uc2dc:\n",(0,r.kt)("inlineCode",{parentName:"li"},"apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server")),(0,r.kt)("li",{parentName:"ol"},"K3s\ub97c \uc124\uce58\ud558\uac70\ub098 \uc774\ubbf8 \uc124\uce58\ub418\uc5b4 \uc788\ub294 \uacbd\uc6b0 \ub2e4\uc2dc \uc2dc\uc791\ud569\ub2c8\ub2e4:\n",(0,r.kt)("inlineCode",{parentName:"li"},"curl -ksL get.k3s.io | sh -")),(0,r.kt)("li",{parentName:"ol"},"k3s\uac00 \uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc744 \ucc3e\uc558\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:\n",(0,r.kt)("inlineCode",{parentName:"li"},"grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml"))),(0,r.kt)("p",null,"\uc774\ub807\uac8c \ud558\uba74 \ubc1c\uacac\ub41c \ub7f0\ud0c0\uc784 \uc2e4\ud589 \ud30c\uc77c\uc5d0 \ub530\ub77c \ucee8\ud14c\uc774\ub108 \uc124\uc815\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia")," \ubc0f/\ub610\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia-experimental")," \ub7f0\ud0c0\uc784\uc774 \uc790\ub3d9\uc73c\ub85c \ucd94\uac00\ub429\ub2c8\ub2e4.\n\uc5ec\uc804\ud788 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub7f0\ud0c0\uc784\ud074\ub798\uc2a4 \uc815\uc758\ub97c \ucd94\uac00\ud558\uace0, \ud30c\ub4dc \uc2a4\ud399\uc5d0\uc11c ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),"\ub97c \uc124\uc815\ud558\uc5ec \uc801\uc808\ud55c \ub7f0\ud0c0\uc784\uc744 \uba85\uc2dc\uc801\uc73c\ub85c \uc694\uccad\ud558\ub294 \ud30c\ub4dc\ub97c \ubc30\ud3ec\ud574\uc57c \ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: node.k8s.io/v1\nkind: RuntimeClass\nmetadata:\n  name: nvidia\nhandler: nvidia\n---\napiVersion: v1\nkind: Pod\nmetadata:\n  name: nbody-gpu-benchmark\n  namespace: default\nspec:\n  restartPolicy: OnFailure\n  runtimeClassName: nvidia\n  containers:\n    - name: cuda-container\n      image: nvcr.io/nvidia/k8s/cuda-sample:nbody\n      args: ["nbody", "-gpu", "-benchmark"]\n      resources:\n        limits:\n          nvidia.com/gpu: 1\n      env:\n        - name: NVIDIA_VISIBLE_DEVICES\n          value: all\n        - name: NVIDIA_DRIVER_CAPABILITIES\n          value: all\n')),(0,r.kt)("p",null,"\uc5d4\ube44\ub514\uc544 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/k8s-device-plugin/"},"\uc5d4\ube44\ub514\uc544 \ub514\ubc14\uc774\uc2a4 \ud50c\ub7ec\uadf8\uc778")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/gpu-feature-discovery/"},"GPU \uae30\ub2a5 \uac80\uc0c9"),"\uacfc \ud568\uaed8 \uc790\uc8fc \uc0ac\uc6a9\ub418\uba70, \uc704\uc5d0\uc11c \uc5b8\uae09\ud55c \uac83\ucc98\ub7fc \ud30c\ub4dc \uc0ac\uc591\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),"\uac00 \ud3ec\ud568\ub418\ub3c4\ub85d \uc218\uc815\ud558\uc5ec \ubcc4\ub3c4\ub85c \uc124\uce58\ud574\uc57c \ud55c\ub2e4\ub294 \uc810\uc5d0 \uc720\uc758\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\uc5d0\uc774\uc804\ud2b8-\uc5c6\ub294-\uc11c\ubc84-\uc2e4\ud589\ud558\uae30\uc2e4\ud5d8\uc801"},"\uc5d0\uc774\uc804\ud2b8 \uc5c6\ub294 \uc11c\ubc84 \uc2e4\ud589\ud558\uae30(\uc2e4\ud5d8\uc801)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\uacbd\uace0:")," \uc774 \uae30\ub2a5\uc740 \uc2e4\ud5d8 \ub2e8\uacc4\uc785\ub2c8\ub2e4.")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"disable-agent")," \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ud558\uba74, \uc11c\ubc84\ub294 kubelet, \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \ub610\ub294 CNI\ub97c \uc2e4\ud589\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub178\ub4dc \ub9ac\uc18c\uc2a4\ub97c \ub4f1\ub85d\ud558\uc9c0 \uc54a\uc73c\uba70, ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get nodes")," \ucd9c\ub825\uc5d0 \ub098\ud0c0\ub098\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.\n\uc5d0\uc774\uc804\ud2b8\ub9ac\uc2a4 \uc11c\ubc84\ub294 kubelet\uc744 \ud638\uc2a4\ud2b8\ud558\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0, \ud30c\ub4dc\ub97c \uc2e4\ud589\ud558\uac70\ub098 \ub0b4\uc7a5\ub41c etcd \ucee8\ud2b8\ub864\ub7ec \ubc0f \uc2dc\uc2a4\ud15c \uc5c5\uadf8\ub808\uc774\ub4dc \ucee8\ud2b8\ub864\ub7ec\ub97c \ud3ec\ud568\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130 \ub178\ub4dc\ub97c \uc5f4\uac70\ud558\ub294 \ub370 \uc758\uc874\ud558\ub294 \uc6b4\uc601\uc790\uac00 \uad00\ub9ac\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8\ub9ac\uc2a4 \uc11c\ubc84\ub97c \uc2e4\ud589\ud558\ub294 \uac83\uc740 \ud074\ub7ec\uc2a4\ud130 \uc6b4\uc601\uc790 \uc9c0\uc6d0 \ubd80\uc871\uc73c\ub85c \uc778\ud55c \uad00\ub9ac \uc624\ubc84\ud5e4\ub4dc \uc99d\uac00\ub97c \uac10\uc218\ud558\uace0\uc11c\ub77c\ub3c4 \uc5d0\uc774\uc804\ud2b8\uc640 \uc6cc\ud06c\ub85c\ub4dc\uc5d0 \uc758\ud55c \uac80\uc0c9\uc73c\ub85c\ubd80\ud130 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \ub178\ub4dc\ub97c \uc228\uae30\uace0\uc790 \ud558\ub294 \uacbd\uc6b0\uc5d0 \uc720\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2e4\ud589\uc2e4\ud5d8\uc801"},"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2e4\ud589(\uc2e4\ud5d8\uc801)"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\uacbd\uace0:")," \uc774 \uae30\ub2a5\uc740 \uc2e4\ud5d8 \ub2e8\uacc4\uc785\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\ub294 \uc7a0\uc7ac\uc801\uc778 \ucee8\ud14c\uc774\ub108 \ube0c\ub808\uc774\ud06c\uc544\uc6c3 \uacf5\uaca9\uc73c\ub85c\ubd80\ud130 \ud638\uc2a4\ud2b8\uc758 \uc2e4\uc81c \ub8e8\ud2b8\ub97c \ubcf4\ud638\ud558\uae30 \uc704\ud574 \uad8c\ud55c\uc774 \uc5c6\ub294 \uc0ac\uc6a9\uc790\ub85c K3s \uc11c\ubc84\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/")," \uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("h3",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubaa8\ub4dc\uc758-\uc54c\ub824\uc9c4-\uc774\uc288"},"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\uc758 \uc54c\ub824\uc9c4 \uc774\uc288"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\ud3ec\ud2b8")),(0,r.kt)("p",{parentName:"li"},"\ub8e8\ud2b8\ub9ac\uc2a4 \uc2e4\ud589 \uc2dc \uc0c8\ub85c\uc6b4 \ub124\ud2b8\uc6cc\ud06c \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uac00 \uc0dd\uc131\ub429\ub2c8\ub2e4. \uc774\ub294 K3s \uc778\uc2a4\ud134\uc2a4\uac00 \ud638\uc2a4\ud2b8\uc640 \ub124\ud2b8\uc6cc\ud0b9\uc774 \uc0c1\ub2f9\ud788 \ubd84\ub9ac\ub41c \uc0c1\ud0dc\ub85c \uc2e4\ud589\ub41c\ub2e4\ub294 \uac83\uc744 \uc758\ubbf8\ud569\ub2c8\ub2e4.\n\ud638\uc2a4\ud2b8\uc5d0\uc11c K3s\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 \uc11c\ube44\uc2a4\uc5d0 \uc561\uc138\uc2a4\ud558\ub294 \uc720\uc77c\ud55c \ubc29\ubc95\uc740 K3s \ub124\ud2b8\uc6cc\ud06c \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \ud3ec\ud2b8 \ud3ec\uc6cc\ub4dc\ub97c \uc124\uc815\ud558\ub294 \uac83\uc785\ub2c8\ub2e4.\n\ub8e8\ud2b8\ub9ac\uc2a4 K3s\uc5d0\ub294 6443 \ubc0f 1024 \ubbf8\ub9cc\uc758 \uc11c\ube44\uc2a4 \ud3ec\ud2b8\ub97c 10000 \uc624\ud504\uc14b\uc73c\ub85c \ud638\uc2a4\ud2b8\uc5d0 \uc790\ub3d9\uc73c\ub85c \ubc14\uc778\ub529\ud558\ub294 \ucee8\ud2b8\ub864\ub7ec\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",{parentName:"li"},"\uc608\ub97c \ub4e4\uc5b4, \ud3ec\ud2b8 80\uc758 \uc11c\ube44\uc2a4\ub294 \ud638\uc2a4\ud2b8\uc5d0\uc11c 10080\uc774 \ub418\uc9c0\ub9cc 8080\uc740 \uc624\ud504\uc14b \uc5c6\uc774 8080\uc774 \ub429\ub2c8\ub2e4. \ud604\uc7ac \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub9cc \uc790\ub3d9\uc73c\ub85c \ubc14\uc778\ub529\ub429\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Cgroup")),(0,r.kt)("p",{parentName:"li"},'Cgroup v1 \ubc0f \ud558\uc774\ube0c\ub9ac\ub4dc v1/v2\ub294 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc73c\uba70, \uc21c\uc218 Cgroup v2\ub9cc \uc9c0\uc6d0\ub429\ub2c8\ub2e4. \ub8e8\ud2b8\ub9ac\uc2a4 \uc2e4\ud589 \uc2dc \ub204\ub77d\ub41c Cgroup\uc73c\ub85c \uc778\ud574 K3s\uac00 \uc2dc\uc791\ub418\uc9c0 \uc54a\ub294 \uacbd\uc6b0, \ub178\ub4dc\uac00 \ud558\uc774\ube0c\ub9ac\ub4dc \ubaa8\ub4dc\uc5d0 \uc788\uace0 "\ub204\ub77d\ub41c" Cgroup\uc774 \uc5ec\uc804\ud788 v1 \ucee8\ud2b8\ub864\ub7ec\uc5d0 \ubc14\uc778\ub529\ub418\uc5b4 \uc788\uc744 \uac00\ub2a5\uc131\uc774 \ub192\uc2b5\ub2c8\ub2e4.')),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\uba40\ud2f0\ub178\ub4dc/\uba40\ud2f0\ud504\ub85c\uc138\uc2a4 \ud074\ub7ec\uc2a4\ud130")),(0,r.kt)("p",{parentName:"li"},"\ub2e4\uc911 \ub178\ub4dc \ub8e8\ud2b8\ub9ac\uc2a4 \ud074\ub7ec\uc2a4\ud130 \ub610\ub294 \ub3d9\uc77c\ud55c \ub178\ub4dc\uc5d0 \uc788\ub294 \uc5ec\ub7ec \uac1c\uc758 \ub8e8\ud2b8\ub9ac\uc2a4 k3s \ud504\ub85c\uc138\uc2a4\ub294 \ud604\uc7ac \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/6488#issuecomment-1314998091"},"#6488"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."))),(0,r.kt)("h3",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\uc11c\ubc84-\uc2dc\uc791\ud558\uae30"},"\ub8e8\ud2b8\ub9ac\uc2a4 \uc11c\ubc84 \uc2dc\uc791\ud558\uae30"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/getting-started/common/cgroup2/"},"https://rootlesscontaine.rs/getting-started/common/cgroup2/")," \uc744 \ucc38\uc870\ud558\uc5ec cgroup v2 \uc704\uc784\uc744 \ud65c\uc131\ud654\ud569\ub2c8\ub2e4.\n\uc774 \ub2e8\uacc4\ub294 \ud544\uc218\uc774\uba70, \uc801\uc808\ud55c cgroups\uac00 \uc704\uc784\ub418\uc9c0 \uc54a\uc73c\uba74 \ub8e8\ud2b8\ub9ac\uc2a4 kubelet\uc744 \uc2dc\uc791\ud558\uc9c0 \ubabb\ud569\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service"),"](",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service)%EC%97%90%EC%84%9C"},"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service)\uc5d0\uc11c")," ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\ub97c \ub2e4\uc6b4\ub85c\ub4dc\ud55c\ub2e4.\n",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s"),"\uc758 \ubc84\uc804\uc774 \uac19\uc740 \uac83\uc744 \uc0ac\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\ub97c ",(0,r.kt)("inlineCode",{parentName:"p"},"~/.config/systemd/user/k3s-rootless.service"),"\uc5d0 \uc124\uce58\ud569\ub2c8\ub2e4.\n\uc774 \ud30c\uc77c\uc744 \uc2dc\uc2a4\ud15c \uc804\uccb4 \uc11c\ube44\uc2a4(",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/..."),")\ub85c \uc124\uce58\ud558\ub294 \uac83\uc740 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.\n",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," \ubc14\uc774\ub108\ub9ac\uc758 \uacbd\ub85c\uc5d0 \ub530\ub77c \ud30c\uc77c\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"ExecStart=/usr/local/bin/k3s ...")," \ud589\uc744 \uc218\uc815\ud574\uc57c \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user daemon-reload"),"\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user enable --now k3s-rootless"),"\ub97c \uc2e4\ud589\ud55c\ub2e4.")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("inlineCode",{parentName:"p"},"KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A"),"\ub97c \uc2e4\ud589\ud558\uace0, \ud30c\ub4dc\uac00 \uc2e4\ud589 \uc911\uc778\uc9c0 \ud655\uc778\ud55c\ub2e4."))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\ucc38\uace0: \ud130\ubbf8\ub110 \uc138\uc158\uc740 cgroups v2 \uc704\uc784\uc744 \ud5c8\uc6a9\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c \ud130\ubbf8\ub110\uc5d0\uc11c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server --rootless"),"\ub97c \uc2e4\ud589\ud558\uc9c0 \uc54a\ub294\ub2e4.\n\ud130\ubbf8\ub110\uc5d0\uc11c \uaf2d \uc2e4\ud589\ud574\uc57c \ud558\ub294 \uacbd\uc6b0, ",(0,r.kt)("inlineCode",{parentName:"p"},"systemd-run --user -p Delegate=yes --tty k3s server --roolless"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec systemd \ubc94\uc704\ub85c \ub798\ud551\ud569\ub2c8\ub2e4.")),(0,r.kt)("h3",{id:"\uace0\uae09-\ub8e8\ud2b8\ub9ac\uc2a4-\uad6c\uc131"},"\uace0\uae09 \ub8e8\ud2b8\ub9ac\uc2a4 \uad6c\uc131"),(0,r.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 K3s\ub294 \ud638\uc2a4\ud2b8\uc640 \uc0ac\uc6a9\uc790 \ub124\ud2b8\uc6cc\ud06c \ub124\uc784\uc2a4\ud398\uc774\uc2a4 \uac04 \ud1b5\uc2e0\uc744 \uc704\ud574 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/rootlesskit"},"rootlesskit")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/slirp4netns"},"slirp4netns"),"\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\n\ub8e8\ud2b8\ub9ac\uc2a4\ud0b7\uacfc slirp4net\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \uad6c\uc131 \uc911 \uc77c\ubd80\ub294 \ud658\uacbd \ubcc0\uc218\ub85c \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub97c \uc124\uc815\ud558\ub294 \uac00\uc7a5 \uc88b\uc740 \ubc29\ubc95\uc740 k3s-rootless systemd \uc720\ub2db\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"Environment")," \ud544\ub4dc\uc5d0 \ucd94\uac00\ud558\ub294 \uac83\uc785\ub2c8\ub2e4."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_MTU")),(0,r.kt)("td",{parentName:"tr",align:null},"1500"),(0,r.kt)("td",{parentName:"tr",align:null},"slirp4netns \uac00\uc0c1 \uc778\ud130\ud398\uc774\uc2a4\uc758 MTU\ub97c \uc124\uc815\ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_CIDR")),(0,r.kt)("td",{parentName:"tr",align:null},"10.41.0.0/16"),(0,r.kt)("td",{parentName:"tr",align:null},"slirp4netns \uac00\uc0c1 \uc778\ud130\ud398\uc774\uc2a4\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 CIDR\uc744 \uc124\uc815\ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_ENABLE_IPV6")),(0,r.kt)("td",{parentName:"tr",align:null},"autotedected"),(0,r.kt)("td",{parentName:"tr",align:null},"Enables slirp4netns IPv6 \uc9c0\uc6d0. \uc9c0\uc815\ud558\uc9c0 \uc54a\uc73c\uba74 K3\uac00 \ub4c0\uc5bc \uc2a4\ud0dd \uc791\ub3d9\uc744 \uc704\ud574 \uad6c\uc131\ub418\uba74 \uc790\ub3d9\uc73c\ub85c \ud65c\uc131\ud654\ub429\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_PORT_DRIVER")),(0,r.kt)("td",{parentName:"tr",align:null},"builtin"),(0,r.kt)("td",{parentName:"tr",align:null},"\ub8e8\ud2b8\ub9ac\uc2a4 \ud3ec\ud2b8 \ub4dc\ub77c\uc774\ubc84\ub97c \uc120\ud0dd\ud569\ub2c8\ub2e4. ",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," \ub610\ub294 ",(0,r.kt)("inlineCode",{parentName:"td"},"slirp4netns")," \uc911 \ud558\ub098\ub97c \uc120\ud0dd\ud569\ub2c8\ub2e4. \ube4c\ud2b8\uc778\uc774 \ub354 \ube60\ub974\uc9c0\ub9cc \uc778\ubc14\uc6b4\ub4dc \ud328\ud0b7\uc758 \uc6d0\ub798 \uc18c\uc2a4 \uc8fc\uc18c\ub97c \uac00\uc7a5\ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_DISABLE_HOST_LOOPBACK")),(0,r.kt)("td",{parentName:"tr",align:null},"true"),(0,r.kt)("td",{parentName:"tr",align:null},"\uac8c\uc774\ud2b8\uc6e8\uc774 \uc778\ud130\ud398\uc774\uc2a4\ub97c \ud1b5\ud55c \ud638\uc2a4\ud2b8\uc758 \ub8e8\ud504\ubc31 \uc8fc\uc18c\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4\ub97c \uc0ac\uc6a9\ud560\uc9c0 \uc5ec\ubd80\ub97c \uc81c\uc5b4\ud569\ub2c8\ub2e4. \ubcf4\uc548\uc0c1\uc758 \uc774\uc720\ub85c \ubcc0\uacbd\ud558\uc9c0 \uc54a\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4.")))),(0,r.kt)("h3",{id:"\ub8e8\ud2b8\ub9ac\uc2a4-\ubb38\uc81c-\ud574\uacb0\ud558\uae30"},"\ub8e8\ud2b8\ub9ac\uc2a4 \ubb38\uc81c \ud574\uacb0\ud558\uae30"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"systemctl --user status k3s-rootless"),"\ub97c \uc2e4\ud589\ud558\uc5ec \ub370\ubaac \uc0c1\ud0dc\ub97c \ud655\uc778\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"journalctl --user -f -u k3s-rootless"),"\ub97c \uc2e4\ud589\ud558\uc5ec \ub370\ubaac \ub85c\uadf8\ub97c \ud655\uc778\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/")," \ucc38\uc870")),(0,r.kt)("h2",{id:"\ub178\ub4dc-\ub808\uc774\ube14-\ubc0f-\ud14c\uc778\ud2b8"},"\ub178\ub4dc \ub808\uc774\ube14 \ubc0f \ud14c\uc778\ud2b8"),(0,r.kt)("p",null,"K3s \uc5d0\uc774\uc804\ud2b8\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," \uc635\uc158\uc73c\ub85c \uad6c\uc131\ud560 \uc218 \uc788\uc73c\uba70, \uc774 \uc635\uc158\uc740 kubelet\uc5d0 \ub808\uc774\ube14\uacfc \ud14c\uc778\ud2b8\ub97c \ucd94\uac00\ud569\ub2c8\ub2e4. \uc774 \ub450 \uc635\uc158\uc740 ","[\ub4f1\ub85d \uc2dc\uc810\uc5d0]"," \ub808\uc774\ube14 \ubc0f/\ub610\ub294 \ud14c\uc778\ud2b8\ub9cc \ucd94\uac00\ud558\ubbc0\ub85c(../cli/agent.md#node-labels-and-taints-for-agents), \ub178\ub4dc\uac00 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ucc98\uc74c \uc870\uc778\ub420 \ub54c\ub9cc \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud604\uc7ac \ubaa8\ub4e0 \ubc84\uc804\uc758 \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ub178\ub4dc\uac00 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"k8s.io")," \uc811\ub450\uc0ac\uac00 \ud3ec\ud568\ub41c \ub300\ubd80\ubd84\uc758 \ub808\uc774\ube14, \ud2b9\ud788 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io/role")," \ub808\uc774\ube14\uc5d0 \ub4f1\ub85d\ud558\ub294 \uac83\uc744 \uc81c\ud55c\ud569\ub2c8\ub2e4. \ud5c8\uc6a9\ub418\uc9c0 \uc54a\ub294 \ub808\uc774\ube14\uc744 \uac00\uc9c4 \ub178\ub4dc\ub97c \uc2dc\uc791\ud558\ub824\uace0 \ud558\uba74 K3s\uac00 \uc2dc\uc791\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc791\uc131\uc790\uac00 \uc5b8\uae09\ud588\ub4ef\uc774:"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\ub178\ub4dc\ub294 \uc790\uccb4 \uc5ed\ud560 \ub808\uc774\ube14\uc744 \uc5b4\uc124\ud2b8\ud558\ub294 \uac83\uc774 \ud5c8\uc6a9\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub178\ub4dc \uc5ed\ud560\uc740 \uc77c\ubc18\uc801\uc73c\ub85c \uad8c\ud55c \ub610\ub294 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uc720\ud615\uc758 \ub178\ub4dc\ub97c \uc2dd\ubcc4\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\uba70, \ub178\ub4dc\uac00 \ud574\ub2f9 \ud480\uc5d0 \ub808\uc774\ube14\uc744 \uc9c0\uc815\ud558\ub3c4\ub85d \ud5c8\uc6a9\ud558\uba74 \uc190\uc0c1\ub41c \ub178\ub4dc\uac00 \ub354 \ub192\uc740 \uad8c\ud55c \uc790\uaca9 \uc99d\uba85\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4 \uad8c\ud55c\uc744 \ubd80\uc5ec\ud558\ub294 \uc6cc\ud06c\ub85c\ub4dc(\uc608: \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \ub370\ubaac\uc14b)\ub97c \uc0ac\uc18c\ud558\uac8c \ub04c\uc5b4\ub4e4\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/279-limit-node-access/README.md#proposal"},"SIG-Auth KEP 279"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ub178\ub4dc \ub4f1\ub85d \ud6c4 \ub178\ub4dc \ub808\uc774\ube14\uacfc \ud2f4\ud2b8\ub97c \ubcc0\uacbd\ud558\uac70\ub098 \uc608\uc57d \ub808\uc774\ube14\uc744 \ucd94\uac00\ud558\ub824\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),"\uc744 \uc0ac\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4. ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/scheduling-eviction/taint-and-toleration/"},"taint")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"\ub178\ub4dc \ub808\uc774\ube14"),"\uc744 \ucd94\uac00\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uacf5\uc2dd \ubb38\uc11c\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8\ub85c-\uc11c\ube44\uc2a4-\uc2dc\uc791\ud558\uae30"},"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub85c \uc11c\ube44\uc2a4 \uc2dc\uc791\ud558\uae30"),(0,r.kt)("p",null,"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \uc124\uce58 \ud504\ub85c\uc138\uc2a4\uc758 \uc77c\ubd80\ub85c OS\uac00 systemd \ub610\ub294 openrc\ub97c \uc0ac\uc6a9\ud558\ub294\uc9c0 \uc790\ub3d9\uc73c\ub85c \uac10\uc9c0\ud558\uace0 \uc11c\ube44\uc2a4\ub97c \ud65c\uc131\ud654 \ubc0f \uc2dc\uc791\ud569\ub2c8\ub2e4."),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"openrc\ub85c \uc2e4\ud589\ud558\uba74 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),"\uc5d0 \ub85c\uadf8\uac00 \uc0dd\uc131\ub429\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},"systemd\ub85c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0, ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/syslog"),"\uc5d0 \ub85c\uadf8\uac00 \uc0dd\uc131\ub418\uba70 ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"(\ub610\ub294 \uc5d0\uc774\uc804\ud2b8\uc5d0\uc11c\ub294 ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s-agent"),")\ub97c \uc0ac\uc6a9\ud558\uc5ec \ub85c\uadf8\ub97c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub85c \uc790\ub3d9 \uc2dc\uc791 \ubc0f \uc11c\ube44\uc2a4 \ud65c\uc131\ud654\ub97c \ube44\ud65c\uc131\ud654\ud558\ub294 \uc608\uc81c\uc785\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,r.kt)("h2",{id:"\ucd94\uac00-os-\uc900\ube44-\uc0ac\ud56d"},"\ucd94\uac00 OS \uc900\ube44 \uc0ac\ud56d"),(0,r.kt)("h3",{id:"\uc774\uc804-iptables-\ubc84\uc804"},"\uc774\uc804 iptables \ubc84\uc804"),(0,r.kt)("p",null,"\uba87\uba87 \uc720\uba85 Linux \ubc30\ud3ec\ud310\uc5d0\ub294 \uc911\ubcf5 \uaddc\uce59\uc774 \ub204\uc801\ub418\uc5b4 \ub178\ub4dc\uc758 \uc131\ub2a5\uacfc \uc548\uc815\uc131\uc5d0 \ubd80\uc815\uc801\uc778 \uc601\ud5a5\uc744 \uc8fc\ub294 \ubc84\uadf8\uac00 \ud3ec\ud568\ub41c \ubc84\uc804\uc758 iptables\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ubb38\uc81c\uc758 \uc601\ud5a5\uc744 \ubc1b\ub294\uc9c0 \ud655\uc778\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/3117"},"Issue #3117"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"K3s\uc5d0\ub294 \uc815\uc0c1\uc801\uc73c\ub85c \uc791\ub3d9\ud558\ub294 iptables(v1.8.8) \ubc84\uc804\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," \uc635\uc158\uc73c\ub85c K3s\ub97c \uc2dc\uc791\ud558\uac70\ub098 \uc6b4\uc601 \uccb4\uc81c\uc5d0\uc11c iptables/nftables \ud328\ud0a4\uc9c0\ub97c \uc81c\uac70\ud558\uc5ec K3s\uac00 \ubc88\ub4e4 \ubc84\uc804\uc758 iptables\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"prefer-bundled-bin")," \ud50c\ub798\uadf8\ub294 2022-12 \ub9b4\ub9ac\uc2a4(v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1) \ubd80\ud130 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("h3",{id:"red-hat-enterprise-linux--centos"},"Red Hat Enterprise Linux / CentOS"),(0,r.kt)("p",null,"firewalld\ub97c \ub044\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable firewalld --now\n")),(0,r.kt)("p",null,"\ubc29\ud654\ubcbd\uc744 \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uc815\ud558\ub824\uba74 \uae30\ubcf8\uc801\uc73c\ub85c \ub2e4\uc74c \uaddc\uce59\uc774 \ud544\uc694\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"firewall-cmd --permanent --add-port=6443/tcp #apiserver\nfirewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods\nfirewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services\nfirewall-cmd --reload\n")),(0,r.kt)("p",null,"\uc124\uc815\uc5d0 \ub530\ub77c \ucd94\uac00 \ud3ec\ud2b8\ub97c \uc5f4\uc5b4\uc57c \ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/requirements#inbound-rules-for-k3s-server-nodes"},"\uc778\ubc14\uc6b4\ub4dc \uaddc\uce59"),"\uc744 \ucc38\uc870\ud558\uc138\uc694. \ud30c\ub4dc \ub610\ub294 \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \uae30\ubcf8 CIDR\uc744 \ubcc0\uacbd\ud558\ub294 \uacbd\uc6b0, \uadf8\uc5d0 \ub530\ub77c \ubc29\ud654\ubcbd \uaddc\uce59\uc744 \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud65c\uc131\ud654\ub41c \uacbd\uc6b0, nm-cloud-setup\uc744 \ube44\ud65c\uc131\ud654\ud558\uace0 \ub178\ub4dc\ub97c \uc7ac\ubd80\ud305\ud574\uc57c \ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable nm-cloud-setup.service nm-cloud-setup.timer\nreboot\n")),(0,r.kt)("h3",{id:"ubuntu"},"Ubuntu"),(0,r.kt)("p",null,"ufw(uncomplicated firewall)\ub97c \ub044\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw disable\n")),(0,r.kt)("p",null,"ufw\ub97c \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uc815\ud558\ub824\uba74 \uae30\ubcf8\uc801\uc73c\ub85c \ub2e4\uc74c \uaddc\uce59\uc774 \ud544\uc694\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw allow 6443/tcp #apiserver\nufw allow from 10.42.0.0/16 to any #pods\nufw allow from 10.43.0.0/16 to any #services\n")),(0,r.kt)("p",null,"\uc124\uc815\uc5d0 \ub530\ub77c \ucd94\uac00 \ud3ec\ud2b8\ub97c \uc5f4\uc5b4\uc57c \ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/requirements#inbound-rules-for-k3s-server-nodes"},"\uc778\ubc14\uc6b4\ub4dc \uaddc\uce59"),"\uc744 \ucc38\uc870\ud55c\ub2e4. \ud30c\ub4dc \ub610\ub294 \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \uae30\ubcf8 CIDR\uc744 \ubcc0\uacbd\ud558\ub294 \uacbd\uc6b0, \uadf8\uc5d0 \ub530\ub77c \ubc29\ud654\ubcbd \uaddc\uce59\uc744 \uc5c5\ub370\uc774\ud2b8\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"raspberry-pi"},"Raspberry Pi"),(0,r.kt)("p",null,"\ub77c\uc988\ubca0\ub9ac\ud30c\uc774 OS\ub294 \ub370\ube44\uc548 \uae30\ubc18\uc774\uba70, \uc624\ub798\ub41c iptables \ubc84\uc804\uc73c\ub85c \uc778\ud574 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. ",(0,r.kt)("a",{parentName:"p",href:"#old-iptables-versions"},"\ud574\uacb0 \ubc29\ubc95"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ud45c\uc900 \ub77c\uc988\ubca0\ub9ac\ud30c\uc774 OS \uc124\uce58\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"\uac00 \ud65c\uc131\ud654\ub41c \uc0c1\ud0dc\uc5d0\uc11c \uc2dc\uc791\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. ",(0,r.kt)("strong",{parentName:"p"},"K3S"),"\ub294 systemd \uc11c\ube44\uc2a4\ub97c \uc2dc\uc791\ud558\uae30 \uc704\ud574 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"\uac00 \ud544\uc694\ud569\ub2c8\ub2e4. ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups"),"\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"/boot/cmdline.txt"),"\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroup_memory=1 cgroup_enable=memory"),"\ub97c \ucd94\uac00\ud558\uc5ec \ud65c\uc131\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"cmdline.txt \uc608\uc2dc:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory\n")),(0,r.kt)("p",null,"\uc6b0\ubd84\ud22c 21.10\ubd80\ud130 \ub77c\uc988\ubca0\ub9ac\ud30c\uc774\uc758 vxlan \uc9c0\uc6d0\uc740 \ubcc4\ub3c4\uc758 \ucee4\ub110 \ubaa8\ub4c8\ub85c \uc62e\uaca8\uc84c\uc2b5\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt install linux-modules-extra-raspi\n")),(0,r.kt)("h2",{id:"docker\uc5d0\uc11c-k3s-\uc2e4\ud589\ud558\uae30"},"Docker\uc5d0\uc11c k3s \uc2e4\ud589\ud558\uae30"),(0,r.kt)("p",null,"Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud558\ub294 \ubc29\ubc95\uc5d0\ub294 \uc5ec\ub7ec \uac00\uc9c0\uac00 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"K3d",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3d-io/k3d"},"k3d"),"\ub294 \ub3c4\ucee4\uc5d0\uc11c \uba40\ud2f0\ub178\ub4dc K3s \ud074\ub7ec\uc2a4\ud130\ub97c \uc27d\uac8c \uc2e4\ud589\ud560 \uc218 \uc788\ub3c4\ub85d \uc124\uacc4\ub41c \uc720\ud2f8\ub9ac\ud2f0\uc785\ub2c8\ub2e4."),(0,r.kt)("p",null,"k3d\ub97c \uc0ac\uc6a9\ud558\uba74 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc758 \ub85c\uceec \uac1c\ubc1c \ub4f1\uc744 \uc704\ud574 \ub3c4\ucee4\uc5d0\uc11c \ub2e8\uc77c \ub178\ub4dc \ubc0f \ub2e4\uc911 \ub178\ub4dc k3s \ud074\ub7ec\uc2a4\ud130\ub97c \ub9e4\uc6b0 \uc27d\uac8c \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"k3d \uc124\uce58 \ubc0f \uc0ac\uc6a9 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://k3d.io/#installation"},"\uc124\uce58")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,r.kt)(d,{value:"Docker",mdxType:"TabItem"},(0,r.kt)("p",null,"Docker\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"rancher/k3s")," \uc774\ubbf8\uc9c0\ub97c \uc0ac\uc6a9\ud558\uc5ec K3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8\ub97c \uc2e4\ud589\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4.\n",(0,r.kt)("inlineCode",{parentName:"p"},"docker run")," \uba85\ub839\uc5b4\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker run \\\n  --privileged \\\n  --name k3s-server-1 \\\n  --hostname k3s-server-1 \\\n  -p 6443:6443 \\\n  -d rancher/k3s:v1.24.10-k3s1 \\\n  server\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\ud0dc\uadf8\uc5d0 \uc720\ud6a8\ud55c K3s \ubc84\uc804\uc744 \uc9c0\uc815\ud574\uc57c \ud558\uba70, ",(0,r.kt)("inlineCode",{parentName:"p"},"latest")," \ud0dc\uadf8\ub294 \uc720\uc9c0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.",(0,r.kt)("br",{parentName:"p"}),"\n","\ub3c4\ucee4 \uc774\ubbf8\uc9c0\ub294 \ud0dc\uadf8\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \uae30\ud638\ub97c \ud5c8\uc6a9\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c \ud0dc\uadf8\uc5d0 ",(0,r.kt)("inlineCode",{parentName:"p"},"-"),"\ub97c \ub300\uc2e0 \uc0ac\uc6a9\ud558\uc138\uc694.")),(0,r.kt)("p",null,"K3s\uac00 \uc2e4\ud589\ub418\uace0 \ub098\uba74, \uad00\ub9ac\uc790 kubeconfig\ub97c Docker \ucee8\ud14c\uc774\ub108\uc5d0\uc11c \ubcf5\uc0ac\ud558\uc5ec \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config\n")))),(0,r.kt)("h2",{id:"selinux-\uc9c0\uc6d0"},"SELinux \uc9c0\uc6d0"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"v1.19.4+k3s1\ubd80\ud130 \uc0ac\uc6a9 \uac00\ub2a5")),(0,r.kt)("p",null,"\uae30\ubcf8\uc801\uc73c\ub85c SELinux\uac00 \ud65c\uc131\ud654\ub41c \uc2dc\uc2a4\ud15c(\uc608\ub85c CentOS)\uc5d0 K3s\ub97c \uc124\uce58\ud558\ub294 \uacbd\uc6b0 \uc801\uc808\ud55c SELinux \uc815\ucc45\uc774 \uc124\uce58\ub418\uc5b4 \uc788\ub294\uc9c0 \ud655\uc778\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"\uc790\ub3d9 \uc124\uce58",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\uc5d0\uc5b4 \uac2d(\ud3d0\uc1c4\ub9dd) \uc124\uce58\ub97c \uc218\ud589\ud558\uc9c0 \uc54a\ub294 \uacbd\uc6b0 \ud638\ud658\ub418\ub294 \uc2dc\uc2a4\ud15c\uc5d0\uc11c ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-with-install-script"},"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8"),"\ub294 \ub79c\ucc98 RPM \uc800\uc7a5\uc18c\uc5d0\uc11c SELinux RPM\uc744 \uc790\ub3d9\uc73c\ub85c \uc124\uce58\ud569\ub2c8\ub2e4. \uc790\ub3d9 \uc124\uce58\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_SELINUX_RPM=true"),"\ub85c \uc124\uc815\ud558\uc5ec \uac74\ub108\ub6f8 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)(d,{value:"\uc218\ub3d9 \uc124\uce58",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\ud544\uc694\ud55c policy\ub294 \ub2e4\uc74c \uba85\ub839\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc124\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"yum install -y container-selinux selinux-policy-base\nyum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm\n")),(0,r.kt)("p",null,"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\uac00 \uc2e4\ud328\ud558\uc9c0 \uc54a\uace0 \uacbd\uace0\ub97c \uae30\ub85d\ud558\ub3c4\ub85d \ud558\ub824\uba74 \ub2e4\uc74c \ud658\uacbd \ubcc0\uc218\ub97c \uc124\uc815\ud558\uba74 \ub429\ub2c8\ub2e4:\n",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SELINUX_WARN=true"),"."))),(0,r.kt)("h3",{id:"selinux-\uc801\uc6a9-\ud65c\uc131\ud654\ud558\uae30"},"SELinux \uc801\uc6a9 \ud65c\uc131\ud654\ud558\uae30"),(0,r.kt)("p",null,"SELinux\ub97c \ud65c\uc6a9\ud558\ub824\uba74 K3s \uc11c\ubc84 \ubc0f \uc5d0\uc774\uc804\ud2b8\ub97c \uc2dc\uc791\ud560 \ub54c ",(0,r.kt)("inlineCode",{parentName:"p"},"--selinux")," \ud50c\ub798\uadf8\ub97c \uc9c0\uc815\ud558\uc138\uc694."),(0,r.kt)("p",null,"\uc774 \uc635\uc158\uc740 K3s ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"\uad6c\uc131 \ud30c\uc77c"),"\uc5d0\uc11c\ub3c4 \uc9c0\uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"selinux: true\n")),(0,r.kt)("p",null,"SELinux\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uc9c0\uc815 ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir"),"\uc744 \uc0ac\uc6a9\ud558\ub294 \uac83\uc740 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc0ac\uc6a9\uc790 \uc9c0\uc815\ud558\ub824\uba74 \uc0ac\uc6a9\uc790 \uc9c0\uc815 \uc815\ucc45\uc744 \uc9c1\uc811 \uc791\uc131\ud574\uc57c \ud560 \uac00\ub2a5\uc131\uc774 \ub192\uc2b5\ub2c8\ub2e4. \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784\uc5d0 \ub300\ud55c SELinux \uc815\ucc45 \ud30c\uc77c\uc774 \ud3ec\ud568\ub41c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containers/container-selinux"},"containers/container-selinux")," \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\uc640 K3s\ub97c \uc704\ud55c SELinux \uc815\ucc45\uc774 \ud3ec\ud568\ub41c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s-selinux"},"k3s-io/k3s-selinux")," \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\ub97c \ucc38\uace0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"\uc9c0\uc5f0-\ud480\ub9c1\uc758-\uc9c0\uc5f0-\ud480\ub9c1-\ud65c\uc131\ud654-\uc2e4\ud5d8\uc801"},"\uc9c0\uc5f0 \ud480\ub9c1\uc758 \uc9c0\uc5f0 \ud480\ub9c1 \ud65c\uc131\ud654 (\uc2e4\ud5d8\uc801)"),(0,r.kt)("h3",{id:"\uc9c0\uc5f0-\ud480\ub9c1\uacfc-estargz\ub780-\ubb34\uc5c7\uc778\uac00\uc694"},"\uc9c0\uc5f0 \ud480\ub9c1\uacfc eStargz\ub780 \ubb34\uc5c7\uc778\uac00\uc694?"),(0,r.kt)("p",null,"\uc774\ubbf8\uc9c0 \ud480\ub9c1\uc740 \ucee8\ud14c\uc774\ub108 \ub77c\uc774\ud504\uc0ac\uc774\ud074\uc5d0\uc11c \uc2dc\uac04\uc774 \ub9ce\uc774 \uc18c\uc694\ub418\ub294 \ub2e8\uacc4 \uc911 \ud558\ub098\ub85c \uc54c\ub824\uc838 \uc788\uc2b5\ub2c8\ub2e4.\nHarter, et al.(",(0,r.kt)("a",{parentName:"p",href:"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"},"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"),"),"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\ud328\ud0a4\uc9c0 \ud480\ub9c1\uc740 \ucee8\ud14c\uc774\ub108 \uc2dc\uc791 \uc2dc\uac04\uc758 76%\ub97c \ucc28\uc9c0\ud558\uc9c0\ub9cc, \uadf8 \uc911 \uc77d\uae30 \ub370\uc774\ud130\ub294 6.4%\uc5d0 \ubd88\uacfc\ud569\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc774 \ubb38\uc81c\ub97c \ud574\uacb0\ud558\uae30 \uc704\ud574 k3s\ub294 \uc774\ubbf8\uc9c0 \ucf58\ud150\uce20\uc758 ",(0,r.kt)("em",{parentName:"p"},"lazy pulling"),"\uc744 \uc2e4\ud5d8\uc801\uc73c\ub85c \uc9c0\uc6d0\ud569\ub2c8\ub2e4.\n\uc774\ub97c \ud1b5\ud574 k3s\ub294 \uc804\uccb4 \uc774\ubbf8\uc9c0\uac00 \ud480\ub9c1\ub418\uae30 \uc804\uc5d0 \ucee8\ud14c\uc774\ub108\ub97c \uc2dc\uc791\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n\ub300\uc2e0 \ud544\uc694\ud55c \ucf58\ud150\uce20 \uccad\ud06c(\uc608: \uac1c\ubcc4 \ud30c\uc77c)\ub97c \uc628\ub514\ub9e8\ub4dc \ubc29\uc2dd\uc73c\ub85c \uac00\uc838\uc635\ub2c8\ub2e4.\n\ud2b9\ud788 \ub300\uc6a9\ub7c9 \uc774\ubbf8\uc9c0\uc758 \uacbd\uc6b0 \uc774 \uae30\uc220\uc744 \uc0ac\uc6a9\ud558\uba74 \ucee8\ud14c\uc774\ub108 \uc2dc\uc791 \uc9c0\uc5f0 \uc2dc\uac04\uc744 \ub2e8\ucd95\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc0ac\uc6a9\ud558\ub824\uba74 \ub300\uc0c1 \uc774\ubbf8\uc9c0\uc758 \ud3ec\ub9f7\uc744 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter/blob/main/docs/stargz-estargz.md"},(0,r.kt)("em",{parentName:"a"},"eStargz")),"\ub85c \uc9c0\uc815\ud574\uc57c \ud569\ub2c8\ub2e4.\n\uc774 \ud615\uc2dd\uc740 OCI \ub300\uccb4 \ud615\uc2dd\uc774\uc9c0\ub9cc \uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc704\ud55c 100% \ud638\ud658\ub418\ub294 \uc774\ubbf8\uc9c0 \ud615\uc2dd\uc785\ub2c8\ub2e4.\n\ud638\ud658\uc131 \ub54c\ubb38\uc5d0 eStargz\ub294 \ud45c\uc900 \ucee8\ud14c\uc774\ub108 \ub808\uc9c0\uc2a4\ud2b8\ub9ac(\uc608: ghcr.io)\ub85c \ud478\uc2dc\ud560 \uc218 \uc788\uc744 \ubfd0\ub9cc \uc544\ub2c8\ub77c eStargz\uc640 \ubb34\uad00\ud55c \ub7f0\ud0c0\uc784\uc5d0\uc11c\ub3c4 ",(0,r.kt)("em",{parentName:"p"},"\uc2e4\ud589 \uac00\ub2a5")," \ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"eStargz\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/google/crfs"},"Google CRFS \ud504\ub85c\uc81d\ud2b8\uc5d0\uc11c \uc81c\uc548\ud55c stargz \ud615\uc2dd"),"\uc744 \uae30\ubc18\uc73c\ub85c \uac1c\ubc1c\ub418\uc5c8\uc9c0\ub9cc \ucf58\ud150\uce20 \uac80\uc99d \ubc0f \uc131\ub2a5 \ucd5c\uc801\ud654\ub97c \ud3ec\ud568\ud55c \uc2e4\uc6a9\uc801\uc778 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.\n\uc9c0\uc5f0 \ud480\ub9c1\uacfc eStargz\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter"},"Stargz Snapshotter \ud504\ub85c\uc81d\ud2b8 \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac"),"\ub97c \ucc38\uace0\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"\uc9c0\uc5f0-\ud480\ub9c1\uc774-\uac00\ub2a5\ud558\ub3c4\ub85d-k3s-\uad6c\uc131\ud558\uae30"},"\uc9c0\uc5f0 \ud480\ub9c1\uc774 \uac00\ub2a5\ud558\ub3c4\ub85d k3s \uad6c\uc131\ud558\uae30"),(0,r.kt)("p",null,"\uc544\ub798\uc640 \uac19\uc774 k3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8\uc5d0\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshotter=stargz")," \uc635\uc158\uc774 \ud544\uc694\ud569\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --snapshotter=stargz\n")),(0,r.kt)("p",null,"\uc774 \uad6c\uc131\uc744 \uc0ac\uc6a9\ud558\uba74, eStargz \ud615\uc2dd\uc758 \uc774\ubbf8\uc9c0\uc5d0 \ub300\ud574 \uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.\n\ub2e4\uc74c \uc608\uc81c \ud30c\ub4dc \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub294 eStargz \ud615\uc2dd\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"node:13.13.0")," \uc774\ubbf8\uc9c0(",(0,r.kt)("inlineCode",{parentName:"p"},"ghcr.io/stargz-containers/node:13.13.0-esgz"),")\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\n\uc2a4\ud0c0\uc988 \uc2a4\ub0c5\uc0f7\ud130\uac00 \ud65c\uc131\ud654\ub418\uba74 K3s\ub294 \uc774 \uc774\ubbf8\uc9c0\uc5d0 \ub300\ud574 \uc9c0\uc5f0 \ud480\ub9c1\uc744 \uc218\ud589\ud569\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: nodejs\nspec:\n  containers:\n    - name: nodejs-estargz\n      image: ghcr.io/stargz-containers/node:13.13.0-esgz\n      command: [\"node\"]\n      args:\n        - -e\n        - var http = require('http');\n          http.createServer(function(req, res) {\n          res.writeHead(200);\n          res.end('Hello World!\\n');\n          }).listen(80);\n      ports:\n        - containerPort: 80\n")),(0,r.kt)("h2",{id:"\ucd94\uac00-\ub85c\uae45-\uc18c\uc2a4"},"\ucd94\uac00 \ub85c\uae45 \uc18c\uc2a4"),(0,r.kt)("p",null,"K3s\uc6a9 ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/"},"\ub79c\ucc98 \ub85c\uae45"),"\uc740 \ub79c\ucc98\ub97c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 \uc124\uce58\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub97c \uc704\ud574\uc11c\ub294 \ub2e4\uc74c \uc9c0\uce68\uc744 \uc2e4\ud589\ud574\uc57c \ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"helm repo add rancher-charts https://charts.rancher.io\nhelm repo update\nhelm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd\nhelm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging\n")),(0,r.kt)("h2",{id:"\ucd94\uac00-\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ub85c\uae45"},"\ucd94\uac00 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ub85c\uae45"),(0,r.kt)("p",null,"\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc5d0 \uc758\ud574 \ucc28\ub2e8\ub41c \ud328\ud0b7\uc744 \ub85c\uae45\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud328\ud0b7\uc740 \ucc28\ub2e8 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc744 \ud3ec\ud568\ud55c \ud328\ud0b7 \uc138\ubd80 \uc815\ubcf4\ub97c \ud45c\uc2dc\ud558\ub294 iptables NFLOG \uc791\uc5c5\uc73c\ub85c \uc804\uc1a1\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud2b8\ub798\ud53d\uc774 \ub9ce\uc73c\uba74 \ub85c\uadf8 \uba54\uc2dc\uc9c0 \uc218\uac00 \ub9e4\uc6b0 \ub9ce\uc544\uc9c8 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc815\ucc45\ubcc4\ub85c \ub85c\uadf8 \uc18d\ub3c4\ub97c \uc81c\uc5b4\ud558\ub824\uba74, \ud574\ub2f9 \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc5d0 \ub2e4\uc74c \uc5b4\ub178\ud14c\uc774\uc158\uc744 \ucd94\uac00\ud558\uc5ec ",(0,r.kt)("inlineCode",{parentName:"p"},"limit")," \ubc0f ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst")," iptables \ub9e4\uac1c\ubcc0\uc218\ub97c \uc124\uc815\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit=<LIMIT-VALUE>")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE>"))),(0,r.kt)("p",null,"\uae30\ubcf8\uac12\uc740 ",(0,r.kt)("inlineCode",{parentName:"p"},"limit=10/minute"),"\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst=10"),"\uc785\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud544\ub4dc\uc758 \ud615\uc2dd\uacfc \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uac12\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches"},"iptables manual"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"NFLOG \ud328\ud0b7\uc744 \ub85c\uadf8 \ud56d\ubaa9\uc73c\ub85c \ubcc0\ud658\ud558\ub824\uba74 ulogd2\ub97c \uc124\uce58\ud558\uace0 ",(0,r.kt)("inlineCode",{parentName:"p"},"[log1]"),"\uc744 ",(0,r.kt)("inlineCode",{parentName:"p"},"group=100"),"\uc5d0\uc11c \uc77d\ub3c4\ub85d \uad6c\uc131\ud569\ub2c8\ub2e4. \uadf8\ub7f0 \ub2e4\uc74c ulogd2 \uc11c\ube44\uc2a4\ub97c \ub2e4\uc2dc \uc2dc\uc791\ud558\uc5ec \uc0c8 \uad6c\uc131\uc774 \ucee4\ubc0b\ub418\ub3c4\ub85d \ud569\ub2c8\ub2e4.\n\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \uaddc\uce59\uc5d0 \uc758\ud574 \ud328\ud0b7\uc774 \ucc28\ub2e8\ub418\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/log/ulog/syslogemu.log"),"\uc5d0 \ub85c\uadf8 \uba54\uc2dc\uc9c0\uac00 \ub098\ud0c0\ub0a9\ub2c8\ub2e4."),(0,r.kt)("p",null,"NFLOG \ub137\ub9c1\ud06c \uc18c\ucf13\uc73c\ub85c \uc804\uc1a1\ub41c \ud328\ud0b7\uc740 tcpdump \ub610\ub294 tshark\uc640 \uac19\uc740 \uba85\ub839\uc904 \ub3c4\uad6c\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc77d\uc744 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"tcpdump -ni nflog:100\n")),(0,r.kt)("p",null,"\ub354 \uc27d\uac8c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc9c0\ub9cc, tcpdump\ub294 \ud328\ud0b7\uc744 \ucc28\ub2e8\ud55c \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45\uc758 \uc774\ub984\uc744 \ud45c\uc2dc\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub300\uc2e0 \uc640\uc774\uc5b4\uc0e4\ud06c\uc758 tshark \uba85\ub839\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc815\ucc45 \uc774\ub984\uc774 \ud3ec\ud568\ub41c ",(0,r.kt)("inlineCode",{parentName:"p"},"nflog.prefix")," \ud544\ub4dc\ub97c \ud3ec\ud568\ud55c \uc804\uccb4 NFLOG \ud328\ud0b7 \ud5e4\ub354\ub97c \ud45c\uc2dc\ud558\uc138\uc694."))}m.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/310030e7.2c730129.js b/kr/assets/js/310030e7.3f076907.js
similarity index 99%
rename from kr/assets/js/310030e7.2c730129.js
rename to kr/assets/js/310030e7.3f076907.js
index 4000cf965..ef33929e1 100644
--- a/kr/assets/js/310030e7.2c730129.js
+++ b/kr/assets/js/310030e7.3f076907.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5749],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,s=e.parentName,k=l(e,["components","mdxType","originalType","parentName"]),u=d(n),c=r,h=u["".concat(s,".").concat(c)]||u[c]||p[c]||o;return n?a.createElement(h,i(i({ref:t},k),{},{components:n})):a.createElement(h,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},9044:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const o={title:"token"},i="k3s token",l={unversionedId:"cli/token",id:"cli/token",title:"token",description:"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/token.md",sourceDirName:"cli",slug:"/cli/token",permalink:"/kr/cli/token",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/token.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"token"},sidebar:"mySidebar",previous:{title:"secrets-encrypt",permalink:"/kr/cli/secrets-encrypt"},next:{title:"\ub808\ud37c\ub7f0\uc2a4",permalink:"/kr/reference/"}},s={},d=[{value:"Token Format",id:"token-format",level:2},{value:"Secure",id:"secure",level:3},{value:"TLS Bootstrapping",id:"tls-bootstrapping",level:4},{value:"Short",id:"short",level:3},{value:"Token Types",id:"token-types",level:2},{value:"Server",id:"server",level:3},{value:"Agent",id:"agent",level:3},{value:"Bootstrap",id:"bootstrap",level:3},{value:"k3s token",id:"k3s-token-1",level:2},{value:"<code>k3s token create [token]</code>",id:"k3s-token-create-token",level:4},{value:"<code>k3s token delete</code>",id:"k3s-token-delete",level:4},{value:"<code>k3s token generate</code>",id:"k3s-token-generate",level:4},{value:"<code>k3s token list</code>",id:"k3s-token-list",level:4}],k={toc:d};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},k,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-token"},"k3s token"),(0,r.kt)("p",null,"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."),(0,r.kt)("h2",{id:"token-format"},"Token Format"),(0,r.kt)("p",null,"K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials."),(0,r.kt)("h3",{id:"secure"},"Secure"),(0,r.kt)("p",null,'The secure token format (occasionally referred to as a "full" token) contains the following parts:'),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"<prefix><cluster CA hash>::<credentials>")),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"prefix"),": a fixed ",(0,r.kt)("inlineCode",{parentName:"li"},"K10")," prefix that identifies the token format"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"cluster CA hash"),": The hash of the cluster's server CA certificate, used to authenticate the server to the joining node.  ",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},"For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  "),(0,r.kt)("li",{parentName:"ul"},"For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint."))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"credentials"),": The username and password, or bearer token, used to authenticate the joining node to the cluster.")),(0,r.kt)("h4",{id:"tls-bootstrapping"},"TLS Bootstrapping"),(0,r.kt)("p",null,"When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"With TLS verification disabled, download the CA bundle from ",(0,r.kt)("inlineCode",{parentName:"li"},"/cacerts")," on the server it is joining."),(0,r.kt)("li",{parentName:"ol"},"Calculate the SHA256 hash of the CA certificate, as described above."),(0,r.kt)("li",{parentName:"ol"},"Compare the calculated SHA256 hash to the hash from the token."),(0,r.kt)("li",{parentName:"ol"},"If the hash matches, validate that the certificate presented by the server can be validated by the server's CA bundle."),(0,r.kt)("li",{parentName:"ol"},"If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.")),(0,r.kt)("h3",{id:"short"},"Short"),(0,r.kt)("p",null,"The short token format includes only the password or bearer token used to authenticate the joining node to the cluster."),(0,r.kt)("p",null,"If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/Man-in-the-middle_attack"},"man-in-the-middle")," attack."),(0,r.kt)("h2",{id:"token-types"},"Token Types"),(0,r.kt)("p",null,"K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Type"),(0,r.kt)("th",{parentName:"tr",align:null},"CLI Option"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Server"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Agent"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a"))))),(0,r.kt)("h3",{id:"server"},"Server"),(0,r.kt)("p",null,"If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),", in secure format."),(0,r.kt)("p",null,"The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully."),(0,r.kt)("p",null,"The server token is also used as the ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/PBKDF2"},"PBKDF2")," passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself."),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.")),(0,r.kt)("p",null,"For more information on using custom CA certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/certificate#"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," documentation"),".",(0,r.kt)("br",{parentName:"p"}),"\n","For more information on backing up your cluster, see the ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/backup-restore"},"Backup and Restore")," documentation."),(0,r.kt)("h3",{id:"agent"},"Agent"),(0,r.kt)("p",null,"By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire."),(0,r.kt)("p",null,"The agent token is written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/agent-token"),", in secure format. If no agent token is specified, this file is a link to the server token."),(0,r.kt)("h3",{id:"bootstrap"},"Bootstrap"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Support for the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,r.kt)("p",null,"K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents."),(0,r.kt)("h2",{id:"k3s-token-1"},"k3s token"),(0,r.kt)("p",null,"K3s bootstrap tokens use the same generation and validation code as ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm token")," bootstrap tokens, and the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," CLI is similar."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"NAME:\n   k3s token - Manage bootstrap tokens\n\nUSAGE:\n   k3s token command [command options] [arguments...]\n\nCOMMANDS:\n   create    Create bootstrap tokens on the server\n   delete    Delete bootstrap tokens on the server\n   generate  Generate and print a bootstrap token, but do not create it on the server\n   list      List bootstrap tokens on the server\n\nOPTIONS:\n   --help, -h  show help\n")),(0,r.kt)("h4",{id:"k3s-token-create-token"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token create [token]")),(0,r.kt)("p",null,"Create a new token. The ",(0,r.kt)("inlineCode",{parentName:"p"},"[token]")," is the actual token to write, as generated by ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token generate"),". If no token is given, a random one will be generated."),(0,r.kt)("p",null,"A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--description")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"A human friendly description of how this token is used")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--groups")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Extra groups that this token will authenticate as when used for authentication. (default: Default: "system:bootstrappers:k3s:default-node-token")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ttl")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default: 24h0m0s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--usages")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Describes the ways in which this token can be used. (default: "signing,authentication")')))),(0,r.kt)("h4",{id:"k3s-token-delete"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token delete")),(0,r.kt)("p",null,"Delete one or more tokens. The full token can be provided, or just the token ID."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-generate"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token generate")),(0,r.kt)("p",null,"Generate a randomly-generated bootstrap token."),(0,r.kt)("p",null,"You don't have to use this command in order to generate a token. You can do so yourself as long as it is in the format \"","[a-z0-9]","{6}.","[a-z0-9]",'{16}", where the first portion is the token ID, and the second portion is the secret.'),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-list"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token list")),(0,r.kt)("p",null,"List bootstrap tokens, showing their ID, description, and remaining time-to-live."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--output")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Output format. Valid options: text, json (default: "text")')))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5749],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,s=e.parentName,k=l(e,["components","mdxType","originalType","parentName"]),u=d(n),c=r,h=u["".concat(s,".").concat(c)]||u[c]||p[c]||o;return n?a.createElement(h,i(i({ref:t},k),{},{components:n})):a.createElement(h,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:r,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},9044:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const o={title:"token"},i="k3s token",l={unversionedId:"cli/token",id:"cli/token",title:"token",description:"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/token.md",sourceDirName:"cli",slug:"/cli/token",permalink:"/kr/cli/token",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/token.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"token"},sidebar:"mySidebar",previous:{title:"secrets-encrypt",permalink:"/kr/cli/secrets-encrypt"},next:{title:"\ub808\ud37c\ub7f0\uc2a4",permalink:"/kr/reference/"}},s={},d=[{value:"Token Format",id:"token-format",level:2},{value:"Secure",id:"secure",level:3},{value:"TLS Bootstrapping",id:"tls-bootstrapping",level:4},{value:"Short",id:"short",level:3},{value:"Token Types",id:"token-types",level:2},{value:"Server",id:"server",level:3},{value:"Agent",id:"agent",level:3},{value:"Bootstrap",id:"bootstrap",level:3},{value:"k3s token",id:"k3s-token-1",level:2},{value:"<code>k3s token create [token]</code>",id:"k3s-token-create-token",level:4},{value:"<code>k3s token delete</code>",id:"k3s-token-delete",level:4},{value:"<code>k3s token generate</code>",id:"k3s-token-generate",level:4},{value:"<code>k3s token list</code>",id:"k3s-token-list",level:4}],k={toc:d};function p(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},k,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-token"},"k3s token"),(0,r.kt)("p",null,"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."),(0,r.kt)("h2",{id:"token-format"},"Token Format"),(0,r.kt)("p",null,"K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials."),(0,r.kt)("h3",{id:"secure"},"Secure"),(0,r.kt)("p",null,'The secure token format (occasionally referred to as a "full" token) contains the following parts:'),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"<prefix><cluster CA hash>::<credentials>")),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"prefix"),": a fixed ",(0,r.kt)("inlineCode",{parentName:"li"},"K10")," prefix that identifies the token format"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"cluster CA hash"),": The hash of the cluster's server CA certificate, used to authenticate the server to the joining node.  ",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},"For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  "),(0,r.kt)("li",{parentName:"ul"},"For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint."))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"credentials"),": The username and password, or bearer token, used to authenticate the joining node to the cluster.")),(0,r.kt)("h4",{id:"tls-bootstrapping"},"TLS Bootstrapping"),(0,r.kt)("p",null,"When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"With TLS verification disabled, download the CA bundle from ",(0,r.kt)("inlineCode",{parentName:"li"},"/cacerts")," on the server it is joining."),(0,r.kt)("li",{parentName:"ol"},"Calculate the SHA256 hash of the CA certificate, as described above."),(0,r.kt)("li",{parentName:"ol"},"Compare the calculated SHA256 hash to the hash from the token."),(0,r.kt)("li",{parentName:"ol"},"If the hash matches, validate that the certificate presented by the server can be validated by the server's CA bundle."),(0,r.kt)("li",{parentName:"ol"},"If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.")),(0,r.kt)("h3",{id:"short"},"Short"),(0,r.kt)("p",null,"The short token format includes only the password or bearer token used to authenticate the joining node to the cluster."),(0,r.kt)("p",null,"If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/Man-in-the-middle_attack"},"man-in-the-middle")," attack."),(0,r.kt)("h2",{id:"token-types"},"Token Types"),(0,r.kt)("p",null,"K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Type"),(0,r.kt)("th",{parentName:"tr",align:null},"CLI Option"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Server"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Agent"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a"))))),(0,r.kt)("h3",{id:"server"},"Server"),(0,r.kt)("p",null,"If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),", in secure format."),(0,r.kt)("p",null,"The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully."),(0,r.kt)("p",null,"The server token is also used as the ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/PBKDF2"},"PBKDF2")," passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself."),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.")),(0,r.kt)("p",null,"For more information on using custom CA certificates, see the ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/certificate#"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," documentation"),".",(0,r.kt)("br",{parentName:"p"}),"\n","For more information on backing up your cluster, see the ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/backup-restore"},"Backup and Restore")," documentation."),(0,r.kt)("h3",{id:"agent"},"Agent"),(0,r.kt)("p",null,"By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire."),(0,r.kt)("p",null,"The agent token is written to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/agent-token"),", in secure format. If no agent token is specified, this file is a link to the server token."),(0,r.kt)("h3",{id:"bootstrap"},"Bootstrap"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Support for the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).")),(0,r.kt)("p",null,"K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents."),(0,r.kt)("h2",{id:"k3s-token-1"},"k3s token"),(0,r.kt)("p",null,"K3s bootstrap tokens use the same generation and validation code as ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm token")," bootstrap tokens, and the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," CLI is similar."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"NAME:\n   k3s token - Manage bootstrap tokens\n\nUSAGE:\n   k3s token command [command options] [arguments...]\n\nCOMMANDS:\n   create    Create bootstrap tokens on the server\n   delete    Delete bootstrap tokens on the server\n   generate  Generate and print a bootstrap token, but do not create it on the server\n   list      List bootstrap tokens on the server\n\nOPTIONS:\n   --help, -h  show help\n")),(0,r.kt)("h4",{id:"k3s-token-create-token"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token create [token]")),(0,r.kt)("p",null,"Create a new token. The ",(0,r.kt)("inlineCode",{parentName:"p"},"[token]")," is the actual token to write, as generated by ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token generate"),". If no token is given, a random one will be generated."),(0,r.kt)("p",null,"A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--description")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"A human friendly description of how this token is used")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--groups")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Extra groups that this token will authenticate as when used for authentication. (default: Default: "system:bootstrappers:k3s:default-node-token")')),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ttl")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default: 24h0m0s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--usages")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Describes the ways in which this token can be used. (default: "signing,authentication")')))),(0,r.kt)("h4",{id:"k3s-token-delete"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token delete")),(0,r.kt)("p",null,"Delete one or more tokens. The full token can be provided, or just the token ID."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-generate"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token generate")),(0,r.kt)("p",null,"Generate a randomly-generated bootstrap token."),(0,r.kt)("p",null,"You don't have to use this command in order to generate a token. You can do so yourself as long as it is in the format \"","[a-z0-9]","{6}.","[a-z0-9]",'{16}", where the first portion is the token ID, and the second portion is the secret.'),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")))),(0,r.kt)("h4",{id:"k3s-token-list"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token list")),(0,r.kt)("p",null,"List bootstrap tokens, showing their ID, description, and remaining time-to-live."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"(cluster) Server to connect to ","[$KUBECONFIG]")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--output")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'Output format. Valid options: text, json (default: "text")')))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/37e09f03.a1573095.js b/kr/assets/js/37e09f03.b03e665c.js
similarity index 98%
rename from kr/assets/js/37e09f03.a1573095.js
rename to kr/assets/js/37e09f03.b03e665c.js
index 9e0be8e3f..430106aae 100644
--- a/kr/assets/js/37e09f03.a1573095.js
+++ b/kr/assets/js/37e09f03.b03e665c.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6328],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>g});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function l(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?l(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):l(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},l=Object.keys(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),c=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),d=c(r),g=a,f=d["".concat(s,".").concat(g)]||d[g]||u[g]||l;return r?n.createElement(f,i(i({ref:t},p),{},{components:r})):n.createElement(f,i({ref:t},p))}));function g(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=r.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var c=2;c<l;c++)i[c]=r[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},4364:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>c});var n=r(3117),a=(r(7294),r(3905));const l={title:"Stopping K3s",weight:4},i=void 0,o={unversionedId:"upgrades/killall",id:"upgrades/killall",title:"Stopping K3s",description:"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/killall.md",sourceDirName:"upgrades",slug:"/upgrades/killall",permalink:"/kr/upgrades/killall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Stopping K3s",weight:4},sidebar:"mySidebar",previous:{title:"\uc5c5\uadf8\ub808\uc774\ub4dc",permalink:"/kr/upgrades/"},next:{title:"Manual Upgrades",permalink:"/kr/upgrades/manual"}},s={},c=[],p={toc:c};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."),(0,a.kt)("p",null,"To stop all of the K3s containers and reset the containerd state, the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," script can be used."),(0,a.kt)("p",null,"The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted."),(0,a.kt)("p",null,"To run the killall script from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-killall.sh\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6328],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>g});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function l(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?l(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):l(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},l=Object.keys(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)r=l[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),c=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),d=c(r),g=a,f=d["".concat(s,".").concat(g)]||d[g]||u[g]||l;return r?n.createElement(f,i(i({ref:t},p),{},{components:r})):n.createElement(f,i({ref:t},p))}));function g(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=r.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var c=2;c<l;c++)i[c]=r[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},4364:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>c});var n=r(3117),a=(r(7294),r(3905));const l={title:"Stopping K3s",weight:4},i=void 0,o={unversionedId:"upgrades/killall",id:"upgrades/killall",title:"Stopping K3s",description:"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/killall.md",sourceDirName:"upgrades",slug:"/upgrades/killall",permalink:"/kr/upgrades/killall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Stopping K3s",weight:4},sidebar:"mySidebar",previous:{title:"\uc5c5\uadf8\ub808\uc774\ub4dc",permalink:"/kr/upgrades/"},next:{title:"Manual Upgrades",permalink:"/kr/upgrades/manual"}},s={},c=[],p={toc:c};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."),(0,a.kt)("p",null,"To stop all of the K3s containers and reset the containerd state, the ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," script can be used."),(0,a.kt)("p",null,"The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted."),(0,a.kt)("p",null,"To run the killall script from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-killall.sh\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/3f659917.05f6741f.js b/kr/assets/js/3f659917.63241f9b.js
similarity index 99%
rename from kr/assets/js/3f659917.05f6741f.js
rename to kr/assets/js/3f659917.63241f9b.js
index 366cd2172..4a3fdb6e5 100644
--- a/kr/assets/js/3f659917.05f6741f.js
+++ b/kr/assets/js/3f659917.63241f9b.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6278],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),s=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):p(p({},t),e)),r},u=function(e){var t=s(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),m=s(r),k=n,d=m["".concat(l,".").concat(k)]||m[k]||c[k]||o;return r?a.createElement(d,p(p({ref:t},u),{},{components:r})):a.createElement(d,p({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,p=new Array(o);p[0]=m;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:n,p[1]=i;for(var s=2;s<o;s++)p[s]=r[s];return a.createElement.apply(null,p)}return a.createElement.apply(null,r)}m.displayName="MDXCreateElement"},930:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>p,default:()=>c,frontMatter:()=>o,metadata:()=>i,toc:()=>s});var a=r(3117),n=(r(7294),r(3905));const o={title:"\uc5c5\uadf8\ub808\uc774\ub4dc",weight:25},p=void 0,i={unversionedId:"upgrades/upgrades",id:"upgrades/upgrades",title:"\uc5c5\uadf8\ub808\uc774\ub4dc",description:"K3s \ud074\ub7ec\uc2a4\ud130 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",sourceDirName:"upgrades",slug:"/upgrades/",permalink:"/kr/upgrades/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\uc5c5\uadf8\ub808\uc774\ub4dc",weight:25},sidebar:"mySidebar",previous:{title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",permalink:"/kr/cluster-access/"},next:{title:"Stopping K3s",permalink:"/kr/upgrades/killall"}},l={},s=[{value:"K3s \ud074\ub7ec\uc2a4\ud130 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30",id:"k3s-\ud074\ub7ec\uc2a4\ud130-\uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30",level:3},{value:"\ubc84\uc804\ubcc4 \uc8fc\uc758\uc0ac\ud56d",id:"\ubc84\uc804\ubcc4-\uc8fc\uc758\uc0ac\ud56d",level:3}],u={toc:s};function c(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"k3s-\ud074\ub7ec\uc2a4\ud130-\uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"},"K3s \ud074\ub7ec\uc2a4\ud130 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/manual"},"\uc218\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc"),"\uc5d0\uc11c\ub294 \ud074\ub7ec\uc2a4\ud130\ub97c \uc218\ub3d9\uc73c\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\ub294 \uba87 \uac00\uc9c0 \uae30\uc220\uc744 \uc124\uba85\ud569\ub2c8\ub2e4. \ub610\ud55c ",(0,n.kt)("a",{parentName:"p",href:"https://www.terraform.io/"},"Terraform"),"\uacfc \uac19\uc740 \ud0c0\uc0ac \ucf54\ub4dc\ud615 \uc778\ud504\ub77c \ub3c4\uad6c(Infrastructure-as-Code)\ub97c \ud1b5\ud55c \uc5c5\uadf8\ub808\uc774\ub4dc\uc758 \uae30\ucd08\ub85c \uc0ac\uc6a9\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4."),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"\uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc"),"\ub294 Rancher\uc758 ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller"},"\uc2dc\uc2a4\ud15c-\uc5c5\uadf8\ub808\uc774\ub4dc-\ucee8\ud2b8\ub864\ub7ec(system-upgrade-controller)"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ub124\uc774\ud2f0\ube0c \uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc218\ud589\ud558\ub294 \ubc29\ubc95\uc744 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,n.kt)("h3",{id:"\ubc84\uc804\ubcc4-\uc8fc\uc758\uc0ac\ud56d"},"\ubc84\uc804\ubcc4 \uc8fc\uc758\uc0ac\ud56d"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"Traefik:")," Traefik\uc774 \ube44\ud65c\uc131\ud654\ub418\uc9c0 \uc54a\uc740 \uacbd\uc6b0, K3s \ubc84\uc804 1.20 \uc774\ud558\uc5d0\uc11c\ub294 Traefik v1\uc774 \uc124\uce58\ub418\uace0, K3s \ubc84\uc804 1.21 \uc774\uc0c1\uc5d0\uc11c\ub294 v1\uc774 \uc5c6\ub294 \uacbd\uc6b0 Traefik v2\uac00 \uc124\uce58\ub429\ub2c8\ub2e4. \uad6c\ud615 Traefik v1\uc5d0\uc11c Traefik v2\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\ub824\uba74 ",(0,n.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \ubb38\uc11c"),"\ub97c \ucc38\uc870\ud558\uc2dc\uace0 ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\ub9c8\uc774\uadf8\ub808\uc774\uc158 \ub3c4\uad6c"),"\ub97c \uc0ac\uc6a9\ud558\uc138\uc694.")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"K3s \ubd80\ud2b8\uc2a4\ud2b8\ub7a9 \ub370\uc774\ud130:")," \uc678\ubd80 SQL \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uac00 \uc788\ub294 HA \uad6c\uc131\uc5d0\uc11c K3s\ub97c \uc0ac\uc6a9 \uc911\uc774\uace0 \uc11c\ubc84(\ucee8\ud2b8\ub864 \ud50c\ub808\uc778) \ub178\ub4dc\uac00 ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," CLI \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ub418\uc9c0 \uc54a\uc740 \uacbd\uc6b0, \ud1a0\ud070\uc744 \uc9c0\uc815\ud558\uc9c0 \uc54a\uace0\ub294 \ub354 \uc774\uc0c1 \ud074\ub7ec\uc2a4\ud130\uc5d0 K3s \uc11c\ubc84\ub97c \ucd94\uac00\ud560 \uc218 \uc5c6\uac8c \ub429\ub2c8\ub2e4. \ubc31\uc5c5\uc5d0\uc11c \ubcf5\uc6d0\ud560 \ub54c \ud544\uc694\ud558\ubbc0\ub85c \uc774 \ud1a0\ud070\uc758 \uc0ac\ubcf8\uc744 \ubcf4\uad00\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\uc804\uc5d0\ub294 K3s\uc5d0\uc11c \uc678\ubd80 SQL \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud560 \ub54c \ud1a0\ud070\uc744 \uc0ac\uc6a9\ud558\ub3c4\ub85d \uac15\uc81c\ud558\uc9c0 \uc54a\uc558\uc2b5\ub2c8\ub2e4."),(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\uc601\ud5a5\uc744 \ubc1b\ub294 \ubc84\uc804\uc740 <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; \uc774\uba70, \ud328\uce58\ub41c \ubc84\uc804\uc740 v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1 \uc785\ub2c8\ub2e4.")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\ub2e4\uc74c\uacfc \uac19\uc774 \ud074\ub7ec\uc2a4\ud130\uc5d0 \uc774\ubbf8 \uac00\uc785\ub41c \uc11c\ubc84\uc5d0\uc11c \ud1a0\ud070 \uac12\uc744 \ucc3e\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"))))),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"\uc2e4\ud5d8\uc6a9 Dqlite:")," \uc2e4\ud5d8\uc6a9 \ub0b4\uc7a5 Dqlite \ub370\uc774\ud130 \uc800\uc7a5\uc18c\ub294 K3s v1.19.1\uc5d0\uc11c \ub354 \uc774\uc0c1 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc2e4\ud5d8\uc6a9 Dqlite\uc5d0\uc11c \uc2e4\ud5d8\uc6a9 \ub0b4\uc7a5 etcd \uc5c5\uadf8\ub808\uc774\ub4dc\ub294 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\ub294\ub2e4\ub294 \uc810\uc5d0 \uc720\uc758\ud558\uc138\uc694. \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc2dc\ub3c4\ud558\uba74 \uc131\uacf5\ud558\uc9c0 \ubabb\ud558\uace0 \ub370\uc774\ud130\uac00 \uc190\uc2e4\ub429\ub2c8\ub2e4.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6278],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),s=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):p(p({},t),e)),r},u=function(e){var t=s(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),m=s(r),k=n,d=m["".concat(l,".").concat(k)]||m[k]||c[k]||o;return r?a.createElement(d,p(p({ref:t},u),{},{components:r})):a.createElement(d,p({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,p=new Array(o);p[0]=m;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:n,p[1]=i;for(var s=2;s<o;s++)p[s]=r[s];return a.createElement.apply(null,p)}return a.createElement.apply(null,r)}m.displayName="MDXCreateElement"},930:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>p,default:()=>c,frontMatter:()=>o,metadata:()=>i,toc:()=>s});var a=r(3117),n=(r(7294),r(3905));const o={title:"\uc5c5\uadf8\ub808\uc774\ub4dc",weight:25},p=void 0,i={unversionedId:"upgrades/upgrades",id:"upgrades/upgrades",title:"\uc5c5\uadf8\ub808\uc774\ub4dc",description:"K3s \ud074\ub7ec\uc2a4\ud130 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",sourceDirName:"upgrades",slug:"/upgrades/",permalink:"/kr/upgrades/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\uc5c5\uadf8\ub808\uc774\ub4dc",weight:25},sidebar:"mySidebar",previous:{title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",permalink:"/kr/cluster-access/"},next:{title:"Stopping K3s",permalink:"/kr/upgrades/killall"}},l={},s=[{value:"K3s \ud074\ub7ec\uc2a4\ud130 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30",id:"k3s-\ud074\ub7ec\uc2a4\ud130-\uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30",level:3},{value:"\ubc84\uc804\ubcc4 \uc8fc\uc758\uc0ac\ud56d",id:"\ubc84\uc804\ubcc4-\uc8fc\uc758\uc0ac\ud56d",level:3}],u={toc:s};function c(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"k3s-\ud074\ub7ec\uc2a4\ud130-\uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"},"K3s \ud074\ub7ec\uc2a4\ud130 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/manual"},"\uc218\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc"),"\uc5d0\uc11c\ub294 \ud074\ub7ec\uc2a4\ud130\ub97c \uc218\ub3d9\uc73c\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\ub294 \uba87 \uac00\uc9c0 \uae30\uc220\uc744 \uc124\uba85\ud569\ub2c8\ub2e4. \ub610\ud55c ",(0,n.kt)("a",{parentName:"p",href:"https://www.terraform.io/"},"Terraform"),"\uacfc \uac19\uc740 \ud0c0\uc0ac \ucf54\ub4dc\ud615 \uc778\ud504\ub77c \ub3c4\uad6c(Infrastructure-as-Code)\ub97c \ud1b5\ud55c \uc5c5\uadf8\ub808\uc774\ub4dc\uc758 \uae30\ucd08\ub85c \uc0ac\uc6a9\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4."),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"\uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc"),"\ub294 Rancher\uc758 ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller"},"\uc2dc\uc2a4\ud15c-\uc5c5\uadf8\ub808\uc774\ub4dc-\ucee8\ud2b8\ub864\ub7ec(system-upgrade-controller)"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ub124\uc774\ud2f0\ube0c \uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc218\ud589\ud558\ub294 \ubc29\ubc95\uc744 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,n.kt)("h3",{id:"\ubc84\uc804\ubcc4-\uc8fc\uc758\uc0ac\ud56d"},"\ubc84\uc804\ubcc4 \uc8fc\uc758\uc0ac\ud56d"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"Traefik:")," Traefik\uc774 \ube44\ud65c\uc131\ud654\ub418\uc9c0 \uc54a\uc740 \uacbd\uc6b0, K3s \ubc84\uc804 1.20 \uc774\ud558\uc5d0\uc11c\ub294 Traefik v1\uc774 \uc124\uce58\ub418\uace0, K3s \ubc84\uc804 1.21 \uc774\uc0c1\uc5d0\uc11c\ub294 v1\uc774 \uc5c6\ub294 \uacbd\uc6b0 Traefik v2\uac00 \uc124\uce58\ub429\ub2c8\ub2e4. \uad6c\ud615 Traefik v1\uc5d0\uc11c Traefik v2\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\ub824\uba74 ",(0,n.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \ubb38\uc11c"),"\ub97c \ucc38\uc870\ud558\uc2dc\uace0 ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\ub9c8\uc774\uadf8\ub808\uc774\uc158 \ub3c4\uad6c"),"\ub97c \uc0ac\uc6a9\ud558\uc138\uc694.")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"K3s \ubd80\ud2b8\uc2a4\ud2b8\ub7a9 \ub370\uc774\ud130:")," \uc678\ubd80 SQL \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uac00 \uc788\ub294 HA \uad6c\uc131\uc5d0\uc11c K3s\ub97c \uc0ac\uc6a9 \uc911\uc774\uace0 \uc11c\ubc84(\ucee8\ud2b8\ub864 \ud50c\ub808\uc778) \ub178\ub4dc\uac00 ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," CLI \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ub418\uc9c0 \uc54a\uc740 \uacbd\uc6b0, \ud1a0\ud070\uc744 \uc9c0\uc815\ud558\uc9c0 \uc54a\uace0\ub294 \ub354 \uc774\uc0c1 \ud074\ub7ec\uc2a4\ud130\uc5d0 K3s \uc11c\ubc84\ub97c \ucd94\uac00\ud560 \uc218 \uc5c6\uac8c \ub429\ub2c8\ub2e4. \ubc31\uc5c5\uc5d0\uc11c \ubcf5\uc6d0\ud560 \ub54c \ud544\uc694\ud558\ubbc0\ub85c \uc774 \ud1a0\ud070\uc758 \uc0ac\ubcf8\uc744 \ubcf4\uad00\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\uc804\uc5d0\ub294 K3s\uc5d0\uc11c \uc678\ubd80 SQL \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud560 \ub54c \ud1a0\ud070\uc744 \uc0ac\uc6a9\ud558\ub3c4\ub85d \uac15\uc81c\ud558\uc9c0 \uc54a\uc558\uc2b5\ub2c8\ub2e4."),(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\uc601\ud5a5\uc744 \ubc1b\ub294 \ubc84\uc804\uc740 <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; \uc774\uba70, \ud328\uce58\ub41c \ubc84\uc804\uc740 v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1 \uc785\ub2c8\ub2e4.")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\ub2e4\uc74c\uacfc \uac19\uc774 \ud074\ub7ec\uc2a4\ud130\uc5d0 \uc774\ubbf8 \uac00\uc785\ub41c \uc11c\ubc84\uc5d0\uc11c \ud1a0\ud070 \uac12\uc744 \ucc3e\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4:"))))),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"\uc2e4\ud5d8\uc6a9 Dqlite:")," \uc2e4\ud5d8\uc6a9 \ub0b4\uc7a5 Dqlite \ub370\uc774\ud130 \uc800\uc7a5\uc18c\ub294 K3s v1.19.1\uc5d0\uc11c \ub354 \uc774\uc0c1 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc2e4\ud5d8\uc6a9 Dqlite\uc5d0\uc11c \uc2e4\ud5d8\uc6a9 \ub0b4\uc7a5 etcd \uc5c5\uadf8\ub808\uc774\ub4dc\ub294 \uc9c0\uc6d0\ub418\uc9c0 \uc54a\ub294\ub2e4\ub294 \uc810\uc5d0 \uc720\uc758\ud558\uc138\uc694. \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc2dc\ub3c4\ud558\uba74 \uc131\uacf5\ud558\uc9c0 \ubabb\ud558\uace0 \ub370\uc774\ud130\uac00 \uc190\uc2e4\ub429\ub2c8\ub2e4.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/4129286c.c7656db7.js b/kr/assets/js/4129286c.c7656db7.js
new file mode 100644
index 000000000..2a9750376
--- /dev/null
+++ b/kr/assets/js/4129286c.c7656db7.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5156],{2776:s=>{s.exports=JSON.parse('{"name":"@easyops-cn/docusaurus-search-local","id":"default"}')}}]);
\ No newline at end of file
diff --git a/kr/assets/js/42e456bb.3e64c383.js b/kr/assets/js/42e456bb.9e5ba74b.js
similarity index 99%
rename from kr/assets/js/42e456bb.3e64c383.js
rename to kr/assets/js/42e456bb.9e5ba74b.js
index f76c39e87..7b2376c07 100644
--- a/kr/assets/js/42e456bb.3e64c383.js
+++ b/kr/assets/js/42e456bb.9e5ba74b.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9654],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>h});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},d=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,s=e.parentName,d=l(e,["components","mdxType","originalType","parentName"]),m=p(a),h=n,c=m["".concat(s,".").concat(h)]||m[h]||u[h]||i;return a?r.createElement(c,o(o({ref:t},d),{},{components:a})):r.createElement(c,o({ref:t},d))}));function h(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,o=new Array(i);o[0]=m;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,o[1]=l;for(var p=2;p<i;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},2351:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(3117),n=(a(7294),a(3905));const i={title:"Air-Gap Install",weight:60},o=void 0,l={unversionedId:"installation/airgap",id:"installation/airgap",title:"Air-Gap Install",description:"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/airgap.md",sourceDirName:"installation",slug:"/installation/airgap",permalink:"/kr/installation/airgap",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Air-Gap Install",weight:60},sidebar:"mySidebar",previous:{title:"Private Registry Configuration",permalink:"/kr/installation/private-registry"},next:{title:"Managing Server Roles",permalink:"/kr/installation/server-roles"}},s={},p=[{value:"Private Registry Method",id:"private-registry-method",level:2},{value:"Create the Registry YAML",id:"create-the-registry-yaml",level:3},{value:"Manually Deploy Images Method",id:"manually-deploy-images-method",level:2},{value:"Prepare the Images Directory and K3s Binary",id:"prepare-the-images-directory-and-k3s-binary",level:3},{value:"Install K3s",id:"install-k3s",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Installing K3s in an Air-Gapped Environment",id:"installing-k3s-in-an-air-gapped-environment",level:3},{value:"Upgrading",id:"upgrading",level:2},{value:"Install Script Method",id:"install-script-method",level:3},{value:"Automated Upgrades Method",id:"automated-upgrades-method",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},u=d("Tabs"),m=d("TabItem"),h={toc:p};function c(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},h,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."),(0,n.kt)("h2",{id:"private-registry-method"},"Private Registry Method"),(0,n.kt)("p",null,"This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host."),(0,n.kt)("p",null,"If you have not yet set up a private Docker registry, refer to the official documentation ",(0,n.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry"},"here"),"."),(0,n.kt)("h3",{id:"create-the-registry-yaml"},"Create the Registry YAML"),(0,n.kt)("p",null,"Follow the ",(0,n.kt)("a",{parentName:"p",href:"/kr/installation/private-registry"},"Private Registry Configuration")," guide to create and configure the registry.yaml file."),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"manually-deploy-images-method"},"Manually Deploy Images Method"),(0,n.kt)("p",null,"We are assuming you have created your nodes in your air-gap environment.\nThis method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical."),(0,n.kt)("h3",{id:"prepare-the-images-directory-and-k3s-binary"},"Prepare the Images Directory and K3s Binary"),(0,n.kt)("p",null,"Obtain the images tar file for your architecture from the ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be running."),(0,n.kt)("p",null,"Place the tar file in the ",(0,n.kt)("inlineCode",{parentName:"p"},"images")," directory, for example:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p /var/lib/rancher/k3s/agent/images/\nsudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/\n")),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"install-k3s"},"Install K3s"),(0,n.kt)("h3",{id:"prerequisites"},"Prerequisites"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Before installing K3s, complete the ",(0,n.kt)("a",{parentName:"li",href:"#private-registry-method"},"Private Registry Method")," or the ",(0,n.kt)("a",{parentName:"li",href:"#manually-deploy-images-method"},"Manually Deploy Images Method")," above to prepopulate the images that K3s needs to install."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s binary from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page, matching the same version used to get the airgap images. Place the binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each air-gapped node and ensure it is executable."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"get.k3s.io"),". Place the install script anywhere on each air-gapped node, and name it ",(0,n.kt)("inlineCode",{parentName:"li"},"install.sh"),"."),(0,n.kt)("li",{parentName:"ul"},"K3s requires a default route in order to auto-detect the node's primary IP, and for kube-proxy ClusterIP routing to function properly. Therefore, a default route must be configured on each node, even if that route is a dummy route or a black hole.")),(0,n.kt)("p",null,"When running the K3s script with the ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD")," environment variable, K3s will use the local version of the script and binary."),(0,n.kt)("h3",{id:"installing-k3s-in-an-air-gapped-environment"},"Installing K3s in an Air-Gapped Environment"),(0,n.kt)("p",null,"You can install K3s on one or more servers as described below."),(0,n.kt)(u,{mdxType:"Tabs"},(0,n.kt)(m,{value:"Single Server Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"To install K3s on a single server, simply do the following on the server node:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh\n")),(0,n.kt)("p",null,"To add additional agents, do the following on each agent node: "),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh\n")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"The token from the server is typically found at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"."))),(0,n.kt)(m,{value:"High Availability Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"Reference the ",(0,n.kt)("a",{parentName:"p",href:"/kr/datastore/ha"},"High Availability with an External DB")," or ",(0,n.kt)("a",{parentName:"p",href:"/kr/datastore/ha-embedded"},"High Availability with Embedded DB")," guides. You will be tweaking install commands so you specify ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD=true")," and run your install script locally instead of via curl. You will also utilize ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC='args'")," to supply any arguments to k3s."),(0,n.kt)("p",null,"For example, step two of the High Availability with an External DB guide mentions the following:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,n.kt)("p",null,"Instead, you would modify such examples like below:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\\nK3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\\n./install.sh\n")))),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"K3s additionally provides a ",(0,n.kt)("inlineCode",{parentName:"p"},"--resolv-conf")," flag for kubelets, which may help with configuring DNS in air-gap networks.")),(0,n.kt)("h2",{id:"upgrading"},"Upgrading"),(0,n.kt)("h3",{id:"install-script-method"},"Install Script Method"),(0,n.kt)("p",null,"Upgrading an air-gap environment can be accomplished in the following manner:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},"Download the new air-gap images (tar file) from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be upgrading to. Place the tar in the ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/images/")," directory on each\nnode. Delete the old tar file."),(0,n.kt)("li",{parentName:"ol"},"Copy and replace the old K3s binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each node. Copy over the install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"https://get.k3s.io")," (as it is possible it has changed since the last release). Run the script again just as you had done in the past\nwith the same environment variables."),(0,n.kt)("li",{parentName:"ol"},"Restart the K3s service (if not restarted automatically by installer).")),(0,n.kt)("h3",{id:"automated-upgrades-method"},"Automated Upgrades Method"),(0,n.kt)("p",null,"K3s supports ",(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"automated upgrades"),". To enable this in air-gapped environments, you must ensure the required images are available in your private registry."),(0,n.kt)("p",null,"You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the ",(0,n.kt)("inlineCode",{parentName:"p"},"+")," in the K3s release with a ",(0,n.kt)("inlineCode",{parentName:"p"},"-")," because Docker images do not support ",(0,n.kt)("inlineCode",{parentName:"p"},"+"),"."),(0,n.kt)("p",null,"You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/releases/latest"},"here")," and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre"},"rancher/system-upgrade-controller:v0.4.0\nrancher/kubectl:v0.17.0\n")),(0,n.kt)("p",null,"Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the ",(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"automated upgrades")," guide."))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9654],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>h});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function i(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function o(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?i(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):i(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function l(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},i=Object.keys(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)a=i[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var s=r.createContext({}),p=function(e){var t=r.useContext(s),a=t;return e&&(a="function"==typeof e?e(t):o(o({},t),e)),a},d=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,i=e.originalType,s=e.parentName,d=l(e,["components","mdxType","originalType","parentName"]),m=p(a),h=n,c=m["".concat(s,".").concat(h)]||m[h]||u[h]||i;return a?r.createElement(c,o(o({ref:t},d),{},{components:a})):r.createElement(c,o({ref:t},d))}));function h(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var i=a.length,o=new Array(i);o[0]=m;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:n,o[1]=l;for(var p=2;p<i;p++)o[p]=a[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,a)}m.displayName="MDXCreateElement"},2351:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=a(3117),n=(a(7294),a(3905));const i={title:"Air-Gap Install",weight:60},o=void 0,l={unversionedId:"installation/airgap",id:"installation/airgap",title:"Air-Gap Install",description:"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/airgap.md",sourceDirName:"installation",slug:"/installation/airgap",permalink:"/kr/installation/airgap",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Air-Gap Install",weight:60},sidebar:"mySidebar",previous:{title:"Private Registry Configuration",permalink:"/kr/installation/private-registry"},next:{title:"Managing Server Roles",permalink:"/kr/installation/server-roles"}},s={},p=[{value:"Private Registry Method",id:"private-registry-method",level:2},{value:"Create the Registry YAML",id:"create-the-registry-yaml",level:3},{value:"Manually Deploy Images Method",id:"manually-deploy-images-method",level:2},{value:"Prepare the Images Directory and K3s Binary",id:"prepare-the-images-directory-and-k3s-binary",level:3},{value:"Install K3s",id:"install-k3s",level:2},{value:"Prerequisites",id:"prerequisites",level:3},{value:"Installing K3s in an Air-Gapped Environment",id:"installing-k3s-in-an-air-gapped-environment",level:3},{value:"Upgrading",id:"upgrading",level:2},{value:"Install Script Method",id:"install-script-method",level:3},{value:"Automated Upgrades Method",id:"automated-upgrades-method",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},u=d("Tabs"),m=d("TabItem"),h={toc:p};function c(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},h,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."),(0,n.kt)("h2",{id:"private-registry-method"},"Private Registry Method"),(0,n.kt)("p",null,"This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host."),(0,n.kt)("p",null,"If you have not yet set up a private Docker registry, refer to the official documentation ",(0,n.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry"},"here"),"."),(0,n.kt)("h3",{id:"create-the-registry-yaml"},"Create the Registry YAML"),(0,n.kt)("p",null,"Follow the ",(0,n.kt)("a",{parentName:"p",href:"/kr/installation/private-registry"},"Private Registry Configuration")," guide to create and configure the registry.yaml file."),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"manually-deploy-images-method"},"Manually Deploy Images Method"),(0,n.kt)("p",null,"We are assuming you have created your nodes in your air-gap environment.\nThis method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical."),(0,n.kt)("h3",{id:"prepare-the-images-directory-and-k3s-binary"},"Prepare the Images Directory and K3s Binary"),(0,n.kt)("p",null,"Obtain the images tar file for your architecture from the ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be running."),(0,n.kt)("p",null,"Place the tar file in the ",(0,n.kt)("inlineCode",{parentName:"p"},"images")," directory, for example:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p /var/lib/rancher/k3s/agent/images/\nsudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/\n")),(0,n.kt)("p",null,"Once you have completed this, you may now go to the ",(0,n.kt)("a",{parentName:"p",href:"#install-k3s"},"Install K3s")," section below."),(0,n.kt)("h2",{id:"install-k3s"},"Install K3s"),(0,n.kt)("h3",{id:"prerequisites"},"Prerequisites"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Before installing K3s, complete the ",(0,n.kt)("a",{parentName:"li",href:"#private-registry-method"},"Private Registry Method")," or the ",(0,n.kt)("a",{parentName:"li",href:"#manually-deploy-images-method"},"Manually Deploy Images Method")," above to prepopulate the images that K3s needs to install."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s binary from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page, matching the same version used to get the airgap images. Place the binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each air-gapped node and ensure it is executable."),(0,n.kt)("li",{parentName:"ul"},"Download the K3s install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"get.k3s.io"),". Place the install script anywhere on each air-gapped node, and name it ",(0,n.kt)("inlineCode",{parentName:"li"},"install.sh"),"."),(0,n.kt)("li",{parentName:"ul"},"K3s requires a default route in order to auto-detect the node's primary IP, and for kube-proxy ClusterIP routing to function properly. Therefore, a default route must be configured on each node, even if that route is a dummy route or a black hole.")),(0,n.kt)("p",null,"When running the K3s script with the ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD")," environment variable, K3s will use the local version of the script and binary."),(0,n.kt)("h3",{id:"installing-k3s-in-an-air-gapped-environment"},"Installing K3s in an Air-Gapped Environment"),(0,n.kt)("p",null,"You can install K3s on one or more servers as described below."),(0,n.kt)(u,{mdxType:"Tabs"},(0,n.kt)(m,{value:"Single Server Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"To install K3s on a single server, simply do the following on the server node:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh\n")),(0,n.kt)("p",null,"To add additional agents, do the following on each agent node: "),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh\n")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"The token from the server is typically found at ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"."))),(0,n.kt)(m,{value:"High Availability Configuration",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"Reference the ",(0,n.kt)("a",{parentName:"p",href:"/kr/datastore/ha"},"High Availability with an External DB")," or ",(0,n.kt)("a",{parentName:"p",href:"/kr/datastore/ha-embedded"},"High Availability with Embedded DB")," guides. You will be tweaking install commands so you specify ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD=true")," and run your install script locally instead of via curl. You will also utilize ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC='args'")," to supply any arguments to k3s."),(0,n.kt)("p",null,"For example, step two of the High Availability with an External DB guide mentions the following:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,n.kt)("p",null,"Instead, you would modify such examples like below:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\\nK3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\\n./install.sh\n")))),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"K3s additionally provides a ",(0,n.kt)("inlineCode",{parentName:"p"},"--resolv-conf")," flag for kubelets, which may help with configuring DNS in air-gap networks.")),(0,n.kt)("h2",{id:"upgrading"},"Upgrading"),(0,n.kt)("h3",{id:"install-script-method"},"Install Script Method"),(0,n.kt)("p",null,"Upgrading an air-gap environment can be accomplished in the following manner:"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},"Download the new air-gap images (tar file) from the ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," page for the version of K3s you will be upgrading to. Place the tar in the ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/images/")," directory on each\nnode. Delete the old tar file."),(0,n.kt)("li",{parentName:"ol"},"Copy and replace the old K3s binary in ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," on each node. Copy over the install script at ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"https://get.k3s.io")," (as it is possible it has changed since the last release). Run the script again just as you had done in the past\nwith the same environment variables."),(0,n.kt)("li",{parentName:"ol"},"Restart the K3s service (if not restarted automatically by installer).")),(0,n.kt)("h3",{id:"automated-upgrades-method"},"Automated Upgrades Method"),(0,n.kt)("p",null,"K3s supports ",(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"automated upgrades"),". To enable this in air-gapped environments, you must ensure the required images are available in your private registry."),(0,n.kt)("p",null,"You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the ",(0,n.kt)("inlineCode",{parentName:"p"},"+")," in the K3s release with a ",(0,n.kt)("inlineCode",{parentName:"p"},"-")," because Docker images do not support ",(0,n.kt)("inlineCode",{parentName:"p"},"+"),"."),(0,n.kt)("p",null,"You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/releases/latest"},"here")," and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre"},"rancher/system-upgrade-controller:v0.4.0\nrancher/kubectl:v0.17.0\n")),(0,n.kt)("p",null,"Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the ",(0,n.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"automated upgrades")," guide."))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/4835.071674c5.js b/kr/assets/js/4835.071674c5.js
new file mode 100644
index 000000000..4157a52ea
--- /dev/null
+++ b/kr/assets/js/4835.071674c5.js
@@ -0,0 +1,2 @@
+/*! For license information please see 4835.071674c5.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4835],{7967:(t,e)=>{"use strict";e.N=void 0;var n=/^([^\w]*)(javascript|data|vbscript)/im,r=/&#(\w+)(^\w|;)?/g,i=/&(newline|tab);/gi,a=/[\u0000-\u001F\u007F-\u009F\u2000-\u200D\uFEFF]/gim,s=/^.+(:|&colon;)/gim,o=[".","/"];e.N=function(t){var e,c=(e=t||"",e.replace(r,(function(t,e){return String.fromCharCode(e)}))).replace(i,"").replace(a,"").trim();if(!c)return"about:blank";if(function(t){return o.indexOf(t[0])>-1}(c))return c;var l=c.match(s);if(!l)return c;var h=l[0];return n.test(h)?"about:blank":c}},3905:(t,e,n)=>{"use strict";n.d(e,{Zo:()=>h,kt:()=>p});var r=n(7294);function i(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function a(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function s(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?a(Object(n),!0).forEach((function(e){i(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,e){if(null==t)return{};var n,r,i=function(t,e){if(null==t)return{};var n,r,i={},a=Object.keys(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||(i[n]=t[n]);return i}(t,e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(i[n]=t[n])}return i}var c=r.createContext({}),l=function(t){var e=r.useContext(c),n=e;return t&&(n="function"==typeof t?t(e):s(s({},e),t)),n},h=function(t){var e=l(t.components);return r.createElement(c.Provider,{value:e},t.children)},u={inlineCode:"code",wrapper:function(t){var e=t.children;return r.createElement(r.Fragment,{},e)}},d=r.forwardRef((function(t,e){var n=t.components,i=t.mdxType,a=t.originalType,c=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),d=l(n),p=i,f=d["".concat(c,".").concat(p)]||d[p]||u[p]||a;return n?r.createElement(f,s(s({ref:e},h),{},{components:n})):r.createElement(f,s({ref:e},h))}));function p(t,e){var n=arguments,i=e&&e.mdxType;if("string"==typeof t||i){var a=n.length,s=new Array(a);s[0]=d;var o={};for(var c in e)hasOwnProperty.call(e,c)&&(o[c]=e[c]);o.originalType=t,o.mdxType="string"==typeof t?t:i,s[1]=o;for(var l=2;l<a;l++)s[l]=n[l];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},2839:(t,e,n)=>{"use strict";n.r(e),n.d(e,{default:()=>Ot});var r=n(7294),i=n(1944),a=n(902);const s=r.createContext(null);function o(t){let{children:e,content:n}=t;const i=function(t){return(0,r.useMemo)((()=>({metadata:t.metadata,frontMatter:t.frontMatter,assets:t.assets,contentTitle:t.contentTitle,toc:t.toc})),[t])}(n);return r.createElement(s.Provider,{value:i},e)}function c(){const t=(0,r.useContext)(s);if(null===t)throw new a.i6("DocProvider");return t}function l(){const{metadata:t,frontMatter:e,assets:n}=c();return r.createElement(i.d,{title:t.title,description:t.description,keywords:e.keywords,image:n.image??e.image})}var h=n(6010),u=n(7524),d=n(3117),p=n(5999),f=n(9960);function g(t){const{permalink:e,title:n,subLabel:i,isNext:a}=t;return r.createElement(f.Z,{className:(0,h.Z)("pagination-nav__link",a?"pagination-nav__link--next":"pagination-nav__link--prev"),to:e},i&&r.createElement("div",{className:"pagination-nav__sublabel"},i),r.createElement("div",{className:"pagination-nav__label"},n))}function y(t){const{previous:e,next:n}=t;return r.createElement("nav",{className:"pagination-nav docusaurus-mt-lg","aria-label":(0,p.I)({id:"theme.docs.paginator.navAriaLabel",message:"Docs pages",description:"The ARIA label for the docs pagination"})},e&&r.createElement(g,(0,d.Z)({},e,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.previous",description:"The label used to navigate to the previous doc"},"Previous")})),n&&r.createElement(g,(0,d.Z)({},n,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.next",description:"The label used to navigate to the next doc"},"Next"),isNext:!0})))}function m(){const{metadata:t}=c();return r.createElement(y,{previous:t.previous,next:t.next})}var b=n(2263),_=n(143),x=n(5281),v=n(373),k=n(4477);const w={unreleased:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unreleasedVersionLabel",description:"The label used to tell the user that he's browsing an unreleased doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is unreleased documentation for {siteTitle} {versionLabel} version.")},unmaintained:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unmaintainedVersionLabel",description:"The label used to tell the user that he's browsing an unmaintained doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is documentation for {siteTitle} {versionLabel}, which is no longer actively maintained.")}};function E(t){const e=w[t.versionMetadata.banner];return r.createElement(e,t)}function C(t){let{versionLabel:e,to:n,onClick:i}=t;return r.createElement(p.Z,{id:"theme.docs.versions.latestVersionSuggestionLabel",description:"The label used to tell the user to check the latest version",values:{versionLabel:e,latestVersionLink:r.createElement("b",null,r.createElement(f.Z,{to:n,onClick:i},r.createElement(p.Z,{id:"theme.docs.versions.latestVersionLinkLabel",description:"The label used for the latest version suggestion link label"},"latest version")))}},"For up-to-date documentation, see the {latestVersionLink} ({versionLabel}).")}function T(t){let{className:e,versionMetadata:n}=t;const{siteConfig:{title:i}}=(0,b.Z)(),{pluginId:a}=(0,_.gA)({failfast:!0}),{savePreferredVersionName:s}=(0,v.J)(a),{latestDocSuggestion:o,latestVersionSuggestion:c}=(0,_.Jo)(a),l=o??(u=c).docs.find((t=>t.id===u.mainDocId));var u;return r.createElement("div",{className:(0,h.Z)(e,x.k.docs.docVersionBanner,"alert alert--warning margin-bottom--md"),role:"alert"},r.createElement("div",null,r.createElement(E,{siteTitle:i,versionMetadata:n})),r.createElement("div",{className:"margin-top--md"},r.createElement(C,{versionLabel:c.label,to:l.path,onClick:()=>s(c.name)})))}function S(t){let{className:e}=t;const n=(0,k.E)();return n.banner?r.createElement(T,{className:e,versionMetadata:n}):null}function A(t){let{className:e}=t;const n=(0,k.E)();return n.badge?r.createElement("span",{className:(0,h.Z)(e,x.k.docs.docVersionBadge,"badge badge--secondary")},r.createElement(p.Z,{id:"theme.docs.versionBadge.label",values:{versionLabel:n.label}},"Version: {versionLabel}")):null}function L(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.atDate",description:"The words used to describe on which date a page has been last updated",values:{date:r.createElement("b",null,r.createElement("time",{dateTime:new Date(1e3*e).toISOString()},n))}}," on {date}")}function B(t){let{lastUpdatedBy:e}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.byUser",description:"The words used to describe by who the page has been last updated",values:{user:r.createElement("b",null,e)}}," by {user}")}function N(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n,lastUpdatedBy:i}=t;return r.createElement("span",{className:x.k.common.lastUpdated},r.createElement(p.Z,{id:"theme.lastUpdated.lastUpdatedAtBy",description:"The sentence used to display when a page has been last updated, and by who",values:{atDate:e&&n?r.createElement(L,{lastUpdatedAt:e,formattedLastUpdatedAt:n}):"",byUser:i?r.createElement(B,{lastUpdatedBy:i}):""}},"Last updated{atDate}{byUser}"),!1)}const D="iconEdit_Z9Sw";function O(t){let{className:e,...n}=t;return r.createElement("svg",(0,d.Z)({fill:"currentColor",height:"20",width:"20",viewBox:"0 0 40 40",className:(0,h.Z)(D,e),"aria-hidden":"true"},n),r.createElement("g",null,r.createElement("path",{d:"m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"})))}function M(t){let{editUrl:e}=t;return r.createElement("a",{href:e,target:"_blank",rel:"noreferrer noopener",className:x.k.common.editThisPage},r.createElement(O,null),r.createElement(p.Z,{id:"theme.common.editThisPage",description:"The link label to edit the current page"},"Edit this page"))}const I="tag_zVej",F="tagRegular_sFm0",$="tagWithCount_h2kH";function R(t){let{permalink:e,label:n,count:i}=t;return r.createElement(f.Z,{href:e,className:(0,h.Z)(I,i?$:F)},n,i&&r.createElement("span",null,i))}const Z="tags_jXut",P="tag_QGVx";function j(t){let{tags:e}=t;return r.createElement(r.Fragment,null,r.createElement("b",null,r.createElement(p.Z,{id:"theme.tags.tagsListLabel",description:"The label alongside a tag list"},"Tags:")),r.createElement("ul",{className:(0,h.Z)(Z,"padding--none","margin-left--sm")},e.map((t=>{let{label:e,permalink:n}=t;return r.createElement("li",{key:n,className:P},r.createElement(R,{label:e,permalink:n}))}))))}const Y="lastUpdated_vwxv";function z(t){return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterTagsRow,"row margin-bottom--sm")},r.createElement("div",{className:"col"},r.createElement(j,t)))}function U(t){let{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:i,formattedLastUpdatedAt:a}=t;return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterEditMetaRow,"row")},r.createElement("div",{className:"col"},e&&r.createElement(M,{editUrl:e})),r.createElement("div",{className:(0,h.Z)("col",Y)},(n||i)&&r.createElement(N,{lastUpdatedAt:n,formattedLastUpdatedAt:a,lastUpdatedBy:i})))}function W(){const{metadata:t}=c(),{editUrl:e,lastUpdatedAt:n,formattedLastUpdatedAt:i,lastUpdatedBy:a,tags:s}=t,o=s.length>0,l=!!(e||n||a);return o||l?r.createElement("footer",{className:(0,h.Z)(x.k.docs.docFooter,"docusaurus-mt-lg")},o&&r.createElement(z,{tags:s}),l&&r.createElement(U,{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:a,formattedLastUpdatedAt:i})):null}var q=n(6043),H=n(6668);function V(t){const e=t.map((t=>({...t,parentIndex:-1,children:[]}))),n=Array(7).fill(-1);e.forEach(((t,e)=>{const r=n.slice(2,t.level);t.parentIndex=Math.max(...r),n[t.level]=e}));const r=[];return e.forEach((t=>{const{parentIndex:n,...i}=t;n>=0?e[n].children.push(i):r.push(i)})),r}function G(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:r}=t;return e.flatMap((t=>{const e=G({toc:t.children,minHeadingLevel:n,maxHeadingLevel:r});return function(t){return t.level>=n&&t.level<=r}(t)?[{...t,children:e}]:e}))}function X(t){const e=t.getBoundingClientRect();return e.top===e.bottom?X(t.parentNode):e}function K(t,e){let{anchorTopOffset:n}=e;const r=t.find((t=>X(t).top>=n));if(r){return function(t){return t.top>0&&t.bottom<window.innerHeight/2}(X(r))?r:t[t.indexOf(r)-1]??null}return t[t.length-1]??null}function Q(){const t=(0,r.useRef)(0),{navbar:{hideOnScroll:e}}=(0,H.L)();return(0,r.useEffect)((()=>{t.current=e?0:document.querySelector(".navbar").clientHeight}),[e]),t}function J(t){const e=(0,r.useRef)(void 0),n=Q();(0,r.useEffect)((()=>{if(!t)return()=>{};const{linkClassName:r,linkActiveClassName:i,minHeadingLevel:a,maxHeadingLevel:s}=t;function o(){const t=function(t){return Array.from(document.getElementsByClassName(t))}(r),o=function(t){let{minHeadingLevel:e,maxHeadingLevel:n}=t;const r=[];for(let i=e;i<=n;i+=1)r.push(`h${i}.anchor`);return Array.from(document.querySelectorAll(r.join()))}({minHeadingLevel:a,maxHeadingLevel:s}),c=K(o,{anchorTopOffset:n.current}),l=t.find((t=>c&&c.id===function(t){return decodeURIComponent(t.href.substring(t.href.indexOf("#")+1))}(t)));t.forEach((t=>{!function(t,n){n?(e.current&&e.current!==t&&e.current.classList.remove(i),t.classList.add(i),e.current=t):t.classList.remove(i)}(t,t===l)}))}return document.addEventListener("scroll",o),document.addEventListener("resize",o),o(),()=>{document.removeEventListener("scroll",o),document.removeEventListener("resize",o)}}),[t,n])}function tt(t){let{toc:e,className:n,linkClassName:i,isChild:a}=t;return e.length?r.createElement("ul",{className:a?void 0:n},e.map((t=>r.createElement("li",{key:t.id},r.createElement("a",{href:`#${t.id}`,className:i??void 0,dangerouslySetInnerHTML:{__html:t.value}}),r.createElement(tt,{isChild:!0,toc:t.children,className:n,linkClassName:i}))))):null}const et=r.memo(tt);function nt(t){let{toc:e,className:n="table-of-contents table-of-contents__left-border",linkClassName:i="table-of-contents__link",linkActiveClassName:a,minHeadingLevel:s,maxHeadingLevel:o,...c}=t;const l=(0,H.L)(),h=s??l.tableOfContents.minHeadingLevel,u=o??l.tableOfContents.maxHeadingLevel,p=function(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:i}=t;return(0,r.useMemo)((()=>G({toc:V(e),minHeadingLevel:n,maxHeadingLevel:i})),[e,n,i])}({toc:e,minHeadingLevel:h,maxHeadingLevel:u});return J((0,r.useMemo)((()=>{if(i&&a)return{linkClassName:i,linkActiveClassName:a,minHeadingLevel:h,maxHeadingLevel:u}}),[i,a,h,u])),r.createElement(et,(0,d.Z)({toc:p,className:n,linkClassName:i},c))}const rt="tocCollapsibleButton_TO0P",it="tocCollapsibleButtonExpanded_MG3E";function at(t){let{collapsed:e,...n}=t;return r.createElement("button",(0,d.Z)({type:"button"},n,{className:(0,h.Z)("clean-btn",rt,!e&&it,n.className)}),r.createElement(p.Z,{id:"theme.TOCCollapsible.toggleButtonLabel",description:"The label used by the button on the collapsible TOC component"},"On this page"))}const st="tocCollapsible_ETCw",ot="tocCollapsibleContent_vkbj",ct="tocCollapsibleExpanded_sAul";function lt(t){let{toc:e,className:n,minHeadingLevel:i,maxHeadingLevel:a}=t;const{collapsed:s,toggleCollapsed:o}=(0,q.u)({initialState:!0});return r.createElement("div",{className:(0,h.Z)(st,!s&&ct,n)},r.createElement(at,{collapsed:s,onClick:o}),r.createElement(q.z,{lazy:!0,className:ot,collapsed:s},r.createElement(nt,{toc:e,minHeadingLevel:i,maxHeadingLevel:a})))}const ht="tocMobile_ITEo";function ut(){const{toc:t,frontMatter:e}=c();return r.createElement(lt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:(0,h.Z)(x.k.docs.docTocMobile,ht)})}const dt="tableOfContents_bqdL";function pt(t){let{className:e,...n}=t;return r.createElement("div",{className:(0,h.Z)(dt,"thin-scrollbar",e)},r.createElement(nt,(0,d.Z)({},n,{linkClassName:"table-of-contents__link toc-highlight",linkActiveClassName:"table-of-contents__link--active"})))}function ft(){const{toc:t,frontMatter:e}=c();return r.createElement(pt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:x.k.docs.docTocDesktop})}var gt=n(2503),yt=n(3905),mt=n(1769);function bt(t){let{children:e}=t;return r.createElement(yt.Zo,{components:mt.Z},e)}function _t(t){let{children:e}=t;const n=function(){const{metadata:t,frontMatter:e,contentTitle:n}=c();return e.hide_title||void 0!==n?null:t.title}();return r.createElement("div",{className:(0,h.Z)(x.k.docs.docMarkdown,"markdown")},n&&r.createElement("header",null,r.createElement(gt.Z,{as:"h1"},n)),r.createElement(bt,null,e))}var xt=n(3438),vt=n(8596),kt=n(4996);function wt(t){return r.createElement("svg",(0,d.Z)({viewBox:"0 0 24 24"},t),r.createElement("path",{d:"M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z",fill:"currentColor"}))}const Et="breadcrumbHomeIcon_YNFT";function Ct(){const t=(0,kt.Z)("/");return r.createElement("li",{className:"breadcrumbs__item"},r.createElement(f.Z,{"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.home",message:"Home page",description:"The ARIA label for the home page in the breadcrumbs"}),className:"breadcrumbs__link",href:t},r.createElement(wt,{className:Et})))}const Tt="breadcrumbsContainer_Z_bl";function St(t){let{children:e,href:n,isLast:i}=t;const a="breadcrumbs__link";return i?r.createElement("span",{className:a,itemProp:"name"},e):n?r.createElement(f.Z,{className:a,href:n,itemProp:"item"},r.createElement("span",{itemProp:"name"},e)):r.createElement("span",{className:a},e)}function At(t){let{children:e,active:n,index:i,addMicrodata:a}=t;return r.createElement("li",(0,d.Z)({},a&&{itemScope:!0,itemProp:"itemListElement",itemType:"https://schema.org/ListItem"},{className:(0,h.Z)("breadcrumbs__item",{"breadcrumbs__item--active":n})}),e,r.createElement("meta",{itemProp:"position",content:String(i+1)}))}function Lt(){const t=(0,xt.s1)(),e=(0,vt.Ns)();return t?r.createElement("nav",{className:(0,h.Z)(x.k.docs.docBreadcrumbs,Tt),"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.navAriaLabel",message:"Breadcrumbs",description:"The ARIA label for the breadcrumbs"})},r.createElement("ul",{className:"breadcrumbs",itemScope:!0,itemType:"https://schema.org/BreadcrumbList"},e&&r.createElement(Ct,null),t.map(((e,n)=>{const i=n===t.length-1;return r.createElement(At,{key:n,active:i,index:n,addMicrodata:!!e.href},r.createElement(St,{href:e.href,isLast:i},e.label))})))):null}const Bt="docItemContainer_Djhp",Nt="docItemCol_VOVn";function Dt(t){let{children:e}=t;const n=function(){const{frontMatter:t,toc:e}=c(),n=(0,u.i)(),i=t.hide_table_of_contents,a=!i&&e.length>0;return{hidden:i,mobile:a?r.createElement(ut,null):void 0,desktop:!a||"desktop"!==n&&"ssr"!==n?void 0:r.createElement(ft,null)}}();return r.createElement("div",{className:"row"},r.createElement("div",{className:(0,h.Z)("col",!n.hidden&&Nt)},r.createElement(S,null),r.createElement("div",{className:Bt},r.createElement("article",null,r.createElement(Lt,null),r.createElement(A,null),n.mobile,r.createElement(_t,null,e),r.createElement(W,null)),r.createElement(m,null))),n.desktop&&r.createElement("div",{className:"col col--3"},n.desktop))}function Ot(t){const e=`docs-doc-id-${t.content.metadata.unversionedId}`,n=t.content;return r.createElement(o,{content:t.content},r.createElement(i.FG,{className:e},r.createElement(l,null),r.createElement(Dt,null,r.createElement(n,null))))}},2503:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3117),i=n(7294),a=n(6010),s=n(5999),o=n(6668),c=n(9960);const l="anchorWithStickyNavbar_LWe7",h="anchorWithHideOnScrollNavbar_WYt5";function u(t){let{as:e,id:n,...u}=t;const{navbar:{hideOnScroll:d}}=(0,o.L)();if("h1"===e||!n)return i.createElement(e,(0,r.Z)({},u,{id:void 0}));const p=(0,s.I)({id:"theme.common.headingLinkTitle",message:"Direct link to {heading}",description:"Title for link to heading"},{heading:"string"==typeof u.children?u.children:n});return i.createElement(e,(0,r.Z)({},u,{className:(0,a.Z)("anchor",d?h:l,u.className),id:n}),u.children,i.createElement(c.Z,{className:"hash-link",to:`#${n}`,"aria-label":p,title:p},"\u200b"))}},6566:(t,e,n)=>{"use strict";n.d(e,{Z:()=>wt});var r=n(3117),i=n(7294),a=n(5742);var s=n(2389),o=n(6010),c=n(2949),l=n(6668);function h(){const{prism:t}=(0,l.L)(),{colorMode:e}=(0,c.I)(),n=t.theme,r=t.darkTheme||n;return"dark"===e?r:n}var u=n(5281),d=n(7594),p=n.n(d);const f=/title=(?<quote>["'])(?<title>.*?)\1/,g=/\{(?<range>[\d,-]+)\}/,y={js:{start:"\\/\\/",end:""},jsBlock:{start:"\\/\\*",end:"\\*\\/"},jsx:{start:"\\{\\s*\\/\\*",end:"\\*\\/\\s*\\}"},bash:{start:"#",end:""},html:{start:"\x3c!--",end:"--\x3e"}};function m(t,e){const n=t.map((t=>{const{start:n,end:r}=y[t];return`(?:${n}\\s*(${e.flatMap((t=>[t.line,t.block?.start,t.block?.end].filter(Boolean))).join("|")})\\s*${r})`})).join("|");return new RegExp(`^\\s*(?:${n})\\s*$`)}function b(t,e){let n=t.replace(/\n$/,"");const{language:r,magicComments:i,metastring:a}=e;if(a&&g.test(a)){const t=a.match(g).groups.range;if(0===i.length)throw new Error(`A highlight range has been given in code block's metastring (\`\`\` ${a}), but no magic comment config is available. Docusaurus applies the first magic comment entry's className for metastring ranges.`);const e=i[0].className,r=p()(t).filter((t=>t>0)).map((t=>[t-1,[e]]));return{lineClassNames:Object.fromEntries(r),code:n}}if(void 0===r)return{lineClassNames:{},code:n};const s=function(t,e){switch(t){case"js":case"javascript":case"ts":case"typescript":return m(["js","jsBlock"],e);case"jsx":case"tsx":return m(["js","jsBlock","jsx"],e);case"html":return m(["js","jsBlock","html"],e);case"python":case"py":case"bash":return m(["bash"],e);case"markdown":case"md":return m(["html","jsx","bash"],e);default:return m(Object.keys(y),e)}}(r,i),o=n.split("\n"),c=Object.fromEntries(i.map((t=>[t.className,{start:0,range:""}]))),l=Object.fromEntries(i.filter((t=>t.line)).map((t=>{let{className:e,line:n}=t;return[n,e]}))),h=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.start,e]}))),u=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.end,e]})));for(let p=0;p<o.length;){const t=o[p].match(s);if(!t){p+=1;continue}const e=t.slice(1).find((t=>void 0!==t));l[e]?c[l[e]].range+=`${p},`:h[e]?c[h[e]].start=p:u[e]&&(c[u[e]].range+=`${c[u[e]].start}-${p-1},`),o.splice(p,1)}n=o.join("\n");const d={};return Object.entries(c).forEach((t=>{let[e,{range:n}]=t;p()(n).forEach((t=>{d[t]??=[],d[t].push(e)}))})),{lineClassNames:d,code:n}}const _="codeBlockContainer_Ckt0";function x(t){let{as:e,...n}=t;const a=function(t){const e={color:"--prism-color",backgroundColor:"--prism-background-color"},n={};return Object.entries(t.plain).forEach((t=>{let[r,i]=t;const a=e[r];a&&"string"==typeof i&&(n[a]=i)})),n}(h());return i.createElement(e,(0,r.Z)({},n,{style:a,className:(0,o.Z)(n.className,_,u.k.common.codeBlock)}))}const v={codeBlockContent:"codeBlockContent_biex",codeBlockTitle:"codeBlockTitle_Ktv7",codeBlock:"codeBlock_bY9V",codeBlockStandalone:"codeBlockStandalone_MEMb",codeBlockLines:"codeBlockLines_e6Vv",codeBlockLinesWithNumbering:"codeBlockLinesWithNumbering_o6Pm",buttonGroup:"buttonGroup__atx"};function k(t){let{children:e,className:n}=t;return i.createElement(x,{as:"pre",tabIndex:0,className:(0,o.Z)(v.codeBlockStandalone,"thin-scrollbar",n)},i.createElement("code",{className:v.codeBlockLines},e))}var w=n(902);const E={attributes:!0,characterData:!0,childList:!0,subtree:!0};function C(t,e){const[n,r]=(0,i.useState)(),a=(0,i.useCallback)((()=>{r(t.current?.closest("[role=tabpanel][hidden]"))}),[t,r]);(0,i.useEffect)((()=>{a()}),[a]),function(t,e,n){void 0===n&&(n=E);const r=(0,w.zX)(e),a=(0,w.Ql)(n);(0,i.useEffect)((()=>{const e=new MutationObserver(r);return t&&e.observe(t,a),()=>e.disconnect()}),[t,r,a])}(n,(t=>{t.forEach((t=>{"attributes"===t.type&&"hidden"===t.attributeName&&(e(),a())}))}),{attributes:!0,characterData:!1,childList:!1,subtree:!1})}const T={plain:{backgroundColor:"#2a2734",color:"#9a86fd"},styles:[{types:["comment","prolog","doctype","cdata","punctuation"],style:{color:"#6c6783"}},{types:["namespace"],style:{opacity:.7}},{types:["tag","operator","number"],style:{color:"#e09142"}},{types:["property","function"],style:{color:"#9a86fd"}},{types:["tag-id","selector","atrule-id"],style:{color:"#eeebff"}},{types:["attr-name"],style:{color:"#c4b9fe"}},{types:["boolean","string","entity","url","attr-value","keyword","control","directive","unit","statement","regex","atrule","placeholder","variable"],style:{color:"#ffcc99"}},{types:["deleted"],style:{textDecorationLine:"line-through"}},{types:["inserted"],style:{textDecorationLine:"underline"}},{types:["italic"],style:{fontStyle:"italic"}},{types:["important","bold"],style:{fontWeight:"bold"}},{types:["important"],style:{color:"#c4b9fe"}}]};var S={Prism:n(7410).Z,theme:T};function A(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function L(){return L=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t},L.apply(this,arguments)}var B=/\r\n|\r|\n/,N=function(t){0===t.length?t.push({types:["plain"],content:"\n",empty:!0}):1===t.length&&""===t[0].content&&(t[0].content="\n",t[0].empty=!0)},D=function(t,e){var n=t.length;return n>0&&t[n-1]===e?t:t.concat(e)},O=function(t,e){var n=t.plain,r=Object.create(null),i=t.styles.reduce((function(t,n){var r=n.languages,i=n.style;return r&&!r.includes(e)||n.types.forEach((function(e){var n=L({},t[e],i);t[e]=n})),t}),r);return i.root=n,i.plain=L({},n,{backgroundColor:null}),i};function M(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&-1===e.indexOf(r)&&(n[r]=t[r]);return n}const I=function(t){function e(){for(var e=this,n=[],r=arguments.length;r--;)n[r]=arguments[r];t.apply(this,n),A(this,"getThemeDict",(function(t){if(void 0!==e.themeDict&&t.theme===e.prevTheme&&t.language===e.prevLanguage)return e.themeDict;e.prevTheme=t.theme,e.prevLanguage=t.language;var n=t.theme?O(t.theme,t.language):void 0;return e.themeDict=n})),A(this,"getLineProps",(function(t){var n=t.key,r=t.className,i=t.style,a=L({},M(t,["key","className","style","line"]),{className:"token-line",style:void 0,key:void 0}),s=e.getThemeDict(e.props);return void 0!==s&&(a.style=s.plain),void 0!==i&&(a.style=void 0!==a.style?L({},a.style,i):i),void 0!==n&&(a.key=n),r&&(a.className+=" "+r),a})),A(this,"getStyleForToken",(function(t){var n=t.types,r=t.empty,i=n.length,a=e.getThemeDict(e.props);if(void 0!==a){if(1===i&&"plain"===n[0])return r?{display:"inline-block"}:void 0;if(1===i&&!r)return a[n[0]];var s=r?{display:"inline-block"}:{},o=n.map((function(t){return a[t]}));return Object.assign.apply(Object,[s].concat(o))}})),A(this,"getTokenProps",(function(t){var n=t.key,r=t.className,i=t.style,a=t.token,s=L({},M(t,["key","className","style","token"]),{className:"token "+a.types.join(" "),children:a.content,style:e.getStyleForToken(a),key:void 0});return void 0!==i&&(s.style=void 0!==s.style?L({},s.style,i):i),void 0!==n&&(s.key=n),r&&(s.className+=" "+r),s})),A(this,"tokenize",(function(t,e,n,r){var i={code:e,grammar:n,language:r,tokens:[]};t.hooks.run("before-tokenize",i);var a=i.tokens=t.tokenize(i.code,i.grammar,i.language);return t.hooks.run("after-tokenize",i),a}))}return t&&(e.__proto__=t),e.prototype=Object.create(t&&t.prototype),e.prototype.constructor=e,e.prototype.render=function(){var t=this.props,e=t.Prism,n=t.language,r=t.code,i=t.children,a=this.getThemeDict(this.props),s=e.languages[n];return i({tokens:function(t){for(var e=[[]],n=[t],r=[0],i=[t.length],a=0,s=0,o=[],c=[o];s>-1;){for(;(a=r[s]++)<i[s];){var l=void 0,h=e[s],u=n[s][a];if("string"==typeof u?(h=s>0?h:["plain"],l=u):(h=D(h,u.type),u.alias&&(h=D(h,u.alias)),l=u.content),"string"==typeof l){var d=l.split(B),p=d.length;o.push({types:h,content:d[0]});for(var f=1;f<p;f++)N(o),c.push(o=[]),o.push({types:h,content:d[f]})}else s++,e.push(h),n.push(l),r.push(0),i.push(l.length)}s--,e.pop(),n.pop(),r.pop(),i.pop()}return N(o),c}(void 0!==s?this.tokenize(e,r,s,n):[r]),className:"prism-code language-"+n,style:void 0!==a?a.root:{},getLineProps:this.getLineProps,getTokenProps:this.getTokenProps})},e}(i.Component),F="codeLine_lJS_",$="codeLineNumber_Tfdd",R="codeLineContent_feaV";function Z(t){let{line:e,classNames:n,showLineNumbers:a,getLineProps:s,getTokenProps:c}=t;1===e.length&&"\n"===e[0].content&&(e[0].content="");const l=s({line:e,className:(0,o.Z)(n,a&&F)}),h=e.map(((t,e)=>i.createElement("span",(0,r.Z)({key:e},c({token:t,key:e})))));return i.createElement("span",l,a?i.createElement(i.Fragment,null,i.createElement("span",{className:$}),i.createElement("span",{className:R},h)):h,i.createElement("br",null))}var P=n(5999);function j(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"}))}function Y(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"}))}const z={copyButtonCopied:"copyButtonCopied_obH4",copyButtonIcons:"copyButtonIcons_eSgA",copyButtonIcon:"copyButtonIcon_y97N",copyButtonSuccessIcon:"copyButtonSuccessIcon_LjdS"};function U(t){let{code:e,className:n}=t;const[r,a]=(0,i.useState)(!1),s=(0,i.useRef)(void 0),c=(0,i.useCallback)((()=>{!function(t,e){let{target:n=document.body}=void 0===e?{}:e;if("string"!=typeof t)throw new TypeError(`Expected parameter \`text\` to be a \`string\`, got \`${typeof t}\`.`);const r=document.createElement("textarea"),i=document.activeElement;r.value=t,r.setAttribute("readonly",""),r.style.contain="strict",r.style.position="absolute",r.style.left="-9999px",r.style.fontSize="12pt";const a=document.getSelection(),s=a.rangeCount>0&&a.getRangeAt(0);n.append(r),r.select(),r.selectionStart=0,r.selectionEnd=t.length;let o=!1;try{o=document.execCommand("copy")}catch{}r.remove(),s&&(a.removeAllRanges(),a.addRange(s)),i&&i.focus()}(e),a(!0),s.current=window.setTimeout((()=>{a(!1)}),1e3)}),[e]);return(0,i.useEffect)((()=>()=>window.clearTimeout(s.current)),[]),i.createElement("button",{type:"button","aria-label":r?(0,P.I)({id:"theme.CodeBlock.copied",message:"Copied",description:"The copied button label on code blocks"}):(0,P.I)({id:"theme.CodeBlock.copyButtonAriaLabel",message:"Copy code to clipboard",description:"The ARIA label for copy code blocks button"}),title:(0,P.I)({id:"theme.CodeBlock.copy",message:"Copy",description:"The copy button label on code blocks"}),className:(0,o.Z)("clean-btn",n,z.copyButton,r&&z.copyButtonCopied),onClick:c},i.createElement("span",{className:z.copyButtonIcons,"aria-hidden":"true"},i.createElement(j,{className:z.copyButtonIcon}),i.createElement(Y,{className:z.copyButtonSuccessIcon})))}function W(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M4 19h6v-2H4v2zM20 5H4v2h16V5zm-3 6H4v2h13.25c1.1 0 2 .9 2 2s-.9 2-2 2H15v-2l-3 3l3 3v-2h2c2.21 0 4-1.79 4-4s-1.79-4-4-4z"}))}const q="wordWrapButtonIcon_Bwma",H="wordWrapButtonEnabled_EoeP";function V(t){let{className:e,onClick:n,isEnabled:r}=t;const a=(0,P.I)({id:"theme.CodeBlock.wordWrapToggle",message:"Toggle word wrap",description:"The title attribute for toggle word wrapping button of code block lines"});return i.createElement("button",{type:"button",onClick:n,className:(0,o.Z)("clean-btn",e,r&&H),"aria-label":a,title:a},i.createElement(W,{className:q,"aria-hidden":"true"}))}function G(t){let{children:e,className:n="",metastring:a,title:s,showLineNumbers:c,language:u}=t;const{prism:{defaultLanguage:d,magicComments:p}}=(0,l.L)(),g=u??n.split(" ").find((t=>t.startsWith("language-")))?.replace(/language-/,"")??d;const y=h(),m=function(){const[t,e]=(0,i.useState)(!1),[n,r]=(0,i.useState)(!1),a=(0,i.useRef)(null),s=(0,i.useCallback)((()=>{const n=a.current.querySelector("code");t?n.removeAttribute("style"):(n.style.whiteSpace="pre-wrap",n.style.overflowWrap="anywhere"),e((t=>!t))}),[a,t]),o=(0,i.useCallback)((()=>{const{scrollWidth:t,clientWidth:e}=a.current,n=t>e||a.current.querySelector("code").hasAttribute("style");r(n)}),[a]);return C(a,o),(0,i.useEffect)((()=>{o()}),[t,o]),(0,i.useEffect)((()=>(window.addEventListener("resize",o,{passive:!0}),()=>{window.removeEventListener("resize",o)})),[o]),{codeBlockRef:a,isEnabled:t,isCodeScrollable:n,toggle:s}}(),_=function(t){return t?.match(f)?.groups.title??""}(a)||s,{lineClassNames:k,code:w}=b(e,{metastring:a,language:g,magicComments:p}),E=c??function(t){return Boolean(t?.includes("showLineNumbers"))}(a);return i.createElement(x,{as:"div",className:(0,o.Z)(n,g&&!n.includes(`language-${g}`)&&`language-${g}`)},_&&i.createElement("div",{className:v.codeBlockTitle},_),i.createElement("div",{className:v.codeBlockContent},i.createElement(I,(0,r.Z)({},S,{theme:y,code:w,language:g??"text"}),(t=>{let{className:e,tokens:n,getLineProps:r,getTokenProps:a}=t;return i.createElement("pre",{tabIndex:0,ref:m.codeBlockRef,className:(0,o.Z)(e,v.codeBlock,"thin-scrollbar")},i.createElement("code",{className:(0,o.Z)(v.codeBlockLines,E&&v.codeBlockLinesWithNumbering)},n.map(((t,e)=>i.createElement(Z,{key:e,line:t,getLineProps:r,getTokenProps:a,classNames:k[e],showLineNumbers:E})))))})),i.createElement("div",{className:v.buttonGroup},(m.isEnabled||m.isCodeScrollable)&&i.createElement(V,{className:v.codeButton,onClick:()=>m.toggle(),isEnabled:m.isEnabled}),i.createElement(U,{className:v.codeButton,code:w}))))}function X(t){let{children:e,...n}=t;const a=(0,s.Z)(),o=function(t){return i.Children.toArray(t).some((t=>(0,i.isValidElement)(t)))?t:Array.isArray(t)?t.join(""):t}(e),c="string"==typeof o?G:k;return i.createElement(c,(0,r.Z)({key:String(a)},n),o)}var K=n(9960);var Q=n(6043);const J="details_lb9f",tt="isBrowser_bmU9",et="collapsibleContent_i85q";function nt(t){return!!t&&("SUMMARY"===t.tagName||nt(t.parentElement))}function rt(t,e){return!!t&&(t===e||rt(t.parentElement,e))}function it(t){let{summary:e,children:n,...a}=t;const c=(0,s.Z)(),l=(0,i.useRef)(null),{collapsed:h,setCollapsed:u}=(0,Q.u)({initialState:!a.open}),[d,p]=(0,i.useState)(a.open),f=i.isValidElement(e)?e:i.createElement("summary",null,e??"Details");return i.createElement("details",(0,r.Z)({},a,{ref:l,open:d,"data-collapsed":h,className:(0,o.Z)(J,c&&tt,a.className),onMouseDown:t=>{nt(t.target)&&t.detail>1&&t.preventDefault()},onClick:t=>{t.stopPropagation();const e=t.target;nt(e)&&rt(e,l.current)&&(t.preventDefault(),h?(u(!1),p(!0)):u(!0))}}),f,i.createElement(Q.z,{lazy:!1,collapsed:h,disableSSRStyle:!0,onCollapseTransitionEnd:t=>{u(t),p(!t)}},i.createElement("div",{className:et},n)))}const at="details_b_Ee";function st(t){let{...e}=t;return i.createElement(it,(0,r.Z)({},e,{className:(0,o.Z)("alert alert--info",at,e.className)}))}var ot=n(2503);function ct(t){return i.createElement(ot.Z,t)}const lt="containsTaskList_mC6p";const ht="img_ev3q";const ut="admonition_LlT9",dt="admonitionHeading_tbUL",pt="admonitionIcon_kALy",ft="admonitionContent_S0QG";const gt={note:{infimaClassName:"secondary",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"}))},label:i.createElement(P.Z,{id:"theme.admonition.note",description:"The default label used for the Note admonition (:::note)"},"note")},tip:{infimaClassName:"success",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.tip",description:"The default label used for the Tip admonition (:::tip)"},"tip")},danger:{infimaClassName:"danger",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"}))},label:i.createElement(P.Z,{id:"theme.admonition.danger",description:"The default label used for the Danger admonition (:::danger)"},"danger")},info:{infimaClassName:"info",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.info",description:"The default label used for the Info admonition (:::info)"},"info")},caution:{infimaClassName:"warning",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 16 16"},i.createElement("path",{fillRule:"evenodd",d:"M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"}))},label:i.createElement(P.Z,{id:"theme.admonition.caution",description:"The default label used for the Caution admonition (:::caution)"},"caution")}},yt={secondary:"note",important:"info",success:"tip",warning:"danger"};function mt(t){const{mdxAdmonitionTitle:e,rest:n}=function(t){const e=i.Children.toArray(t),n=e.find((t=>i.isValidElement(t)&&"mdxAdmonitionTitle"===t.props?.mdxType)),r=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return{mdxAdmonitionTitle:n,rest:r}}(t.children);return{...t,title:t.title??e,children:n}}function bt(t){let{children:e,fallback:n}=t;return(0,s.Z)()?i.createElement(i.Fragment,null,e?.()):n??null}var _t=n(6432);function xt(){const{colorMode:t}=(0,c.I)(),e=(0,l.L)().mermaid,n=e.theme[t],{options:r}=e;return(0,i.useMemo)((()=>({startOnLoad:!1,...r,theme:n})),[n,r])}const vt="container_lyt7";function kt(t){let{value:e}=t;const n=function(t,e){const n=xt(),r=e??n;return(0,i.useMemo)((()=>{_t.o.mermaidAPI.initialize(r);const e=`mermaid-svg-${Math.round(1e7*Math.random())}`;return _t.o.render(e,t)}),[t,r])}(e);return i.createElement("div",{className:`docusaurus-mermaid-container ${vt}`,dangerouslySetInnerHTML:{__html:n}})}const wt={head:function(t){const e=i.Children.map(t.children,(t=>i.isValidElement(t)?function(t){if(t.props?.mdxType&&t.props.originalType){const{mdxType:e,originalType:n,...r}=t.props;return i.createElement(t.props.originalType,r)}return t}(t):t));return i.createElement(a.Z,t,e)},code:function(t){const e=["a","abbr","b","br","button","cite","code","del","dfn","em","i","img","input","ins","kbd","label","object","output","q","ruby","s","small","span","strong","sub","sup","time","u","var","wbr"];return i.Children.toArray(t.children).every((t=>"string"==typeof t&&!t.includes("\n")||(0,i.isValidElement)(t)&&e.includes(t.props?.mdxType)))?i.createElement("code",t):i.createElement(X,t)},a:function(t){return i.createElement(K.Z,t)},pre:function(t){return i.createElement(X,(0,i.isValidElement)(t.children)&&"code"===t.children.props?.originalType?t.children.props:{...t})},details:function(t){const e=i.Children.toArray(t.children),n=e.find((t=>i.isValidElement(t)&&"summary"===t.props?.mdxType)),a=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return i.createElement(st,(0,r.Z)({},t,{summary:n}),a)},ul:function(t){return i.createElement("ul",(0,r.Z)({},t,{className:(e=t.className,(0,o.Z)(e,e?.includes("contains-task-list")&&lt))}));var e},img:function(t){return i.createElement("img",(0,r.Z)({loading:"lazy"},t,{className:(e=t.className,(0,o.Z)(e,ht))}));var e},h1:t=>i.createElement(ct,(0,r.Z)({as:"h1"},t)),h2:t=>i.createElement(ct,(0,r.Z)({as:"h2"},t)),h3:t=>i.createElement(ct,(0,r.Z)({as:"h3"},t)),h4:t=>i.createElement(ct,(0,r.Z)({as:"h4"},t)),h5:t=>i.createElement(ct,(0,r.Z)({as:"h5"},t)),h6:t=>i.createElement(ct,(0,r.Z)({as:"h6"},t)),admonition:function(t){const{children:e,type:n,title:r,icon:a}=mt(t),s=function(t){const e=yt[t]??t;return gt[e]||(console.warn(`No admonition config found for admonition type "${e}". Using Info as fallback.`),gt.info)}(n),c=r??s.label,{iconComponent:l}=s,h=a??i.createElement(l,null);return i.createElement("div",{className:(0,o.Z)(u.k.common.admonition,u.k.common.admonitionType(t.type),"alert",`alert--${s.infimaClassName}`,ut)},i.createElement("div",{className:dt},i.createElement("span",{className:pt},h),c),i.createElement("div",{className:ft},e))},mermaid:function(t){return i.createElement(bt,null,(()=>i.createElement(kt,t)))}}},5162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7294),i=n(6010);const a="tabItem_Ymn6";function s(t){let{children:e,hidden:n,className:s}=t;return r.createElement("div",{role:"tabpanel",className:(0,i.Z)(a,s),hidden:n},e)}},4866:(t,e,n)=>{"use strict";n.d(e,{Z:()=>k});var r=n(3117),i=n(7294),a=n(6010),s=n(2466),o=n(6775),c=n(1980),l=n(7392),h=n(12);function u(t){return function(t){return i.Children.map(t,(t=>{if(!t||(0,i.isValidElement)(t)&&function(t){const{props:e}=t;return!!e&&"object"==typeof e&&"value"in e}(t))return t;throw new Error(`Docusaurus error: Bad <Tabs> child <${"string"==typeof t.type?t.type:t.type.name}>: all children of the <Tabs> component should be <TabItem>, and every <TabItem> should have a unique "value" prop.`)}))?.filter(Boolean)??[]}(t).map((t=>{let{props:{value:e,label:n,attributes:r,default:i}}=t;return{value:e,label:n,attributes:r,default:i}}))}function d(t){const{values:e,children:n}=t;return(0,i.useMemo)((()=>{const t=e??u(n);return function(t){const e=(0,l.l)(t,((t,e)=>t.value===e.value));if(e.length>0)throw new Error(`Docusaurus error: Duplicate values "${e.map((t=>t.value)).join(", ")}" found in <Tabs>. Every value needs to be unique.`)}(t),t}),[e,n])}function p(t){let{value:e,tabValues:n}=t;return n.some((t=>t.value===e))}function f(t){let{queryString:e=!1,groupId:n}=t;const r=(0,o.k6)(),a=function(t){let{queryString:e=!1,groupId:n}=t;if("string"==typeof e)return e;if(!1===e)return null;if(!0===e&&!n)throw new Error('Docusaurus error: The <Tabs> component groupId prop is required if queryString=true, because this value is used as the search param name. You can also provide an explicit value such as queryString="my-search-param".');return n??null}({queryString:e,groupId:n});return[(0,c._X)(a),(0,i.useCallback)((t=>{if(!a)return;const e=new URLSearchParams(r.location.search);e.set(a,t),r.replace({...r.location,search:e.toString()})}),[a,r])]}function g(t){const{defaultValue:e,queryString:n=!1,groupId:r}=t,a=d(t),[s,o]=(0,i.useState)((()=>function(t){let{defaultValue:e,tabValues:n}=t;if(0===n.length)throw new Error("Docusaurus error: the <Tabs> component requires at least one <TabItem> children component");if(e){if(!p({value:e,tabValues:n}))throw new Error(`Docusaurus error: The <Tabs> has a defaultValue "${e}" but none of its children has the corresponding value. Available values are: ${n.map((t=>t.value)).join(", ")}. If you intend to show no default tab, use defaultValue={null} instead.`);return e}const r=n.find((t=>t.default))??n[0];if(!r)throw new Error("Unexpected error: 0 tabValues");return r.value}({defaultValue:e,tabValues:a}))),[c,l]=f({queryString:n,groupId:r}),[u,g]=function(t){let{groupId:e}=t;const n=function(t){return t?`docusaurus.tab.${t}`:null}(e),[r,a]=(0,h.Nk)(n);return[r,(0,i.useCallback)((t=>{n&&a.set(t)}),[n,a])]}({groupId:r}),y=(()=>{const t=c??u;return p({value:t,tabValues:a})?t:null})();(0,i.useLayoutEffect)((()=>{y&&o(y)}),[y]);return{selectedValue:s,selectValue:(0,i.useCallback)((t=>{if(!p({value:t,tabValues:a}))throw new Error(`Can't select invalid tab value=${t}`);o(t),l(t),g(t)}),[l,g,a]),tabValues:a}}var y=n(2389);const m="tabList__CuJ",b="tabItem_LNqP";function _(t){let{className:e,block:n,selectedValue:o,selectValue:c,tabValues:l}=t;const h=[],{blockElementScrollPositionUntilNextRender:u}=(0,s.o5)(),d=t=>{const e=t.currentTarget,n=h.indexOf(e),r=l[n].value;r!==o&&(u(e),c(r))},p=t=>{let e=null;switch(t.key){case"Enter":d(t);break;case"ArrowRight":{const n=h.indexOf(t.currentTarget)+1;e=h[n]??h[0];break}case"ArrowLeft":{const n=h.indexOf(t.currentTarget)-1;e=h[n]??h[h.length-1];break}}e?.focus()};return i.createElement("ul",{role:"tablist","aria-orientation":"horizontal",className:(0,a.Z)("tabs",{"tabs--block":n},e)},l.map((t=>{let{value:e,label:n,attributes:s}=t;return i.createElement("li",(0,r.Z)({role:"tab",tabIndex:o===e?0:-1,"aria-selected":o===e,key:e,ref:t=>h.push(t),onKeyDown:p,onClick:d},s,{className:(0,a.Z)("tabs__item",b,s?.className,{"tabs__item--active":o===e})}),n??e)})))}function x(t){let{lazy:e,children:n,selectedValue:r}=t;const a=(Array.isArray(n)?n:[n]).filter(Boolean);if(e){const t=a.find((t=>t.props.value===r));return t?(0,i.cloneElement)(t,{className:"margin-top--md"}):null}return i.createElement("div",{className:"margin-top--md"},a.map(((t,e)=>(0,i.cloneElement)(t,{key:e,hidden:t.props.value!==r}))))}function v(t){const e=g(t);return i.createElement("div",{className:(0,a.Z)("tabs-container",m)},i.createElement(_,(0,r.Z)({},t,e)),i.createElement(x,(0,r.Z)({},t,e)))}function k(t){const e=(0,y.Z)();return i.createElement(v,(0,r.Z)({key:String(e)},t))}},4477:(t,e,n)=>{"use strict";n.d(e,{E:()=>o,q:()=>s});var r=n(7294),i=n(902);const a=r.createContext(null);function s(t){let{children:e,version:n}=t;return r.createElement(a.Provider,{value:n},e)}function o(){const t=(0,r.useContext)(a);if(null===t)throw new i.i6("DocsVersionProvider");return t}},7484:function(t){t.exports=function(){"use strict";var t=1e3,e=6e4,n=36e5,r="millisecond",i="second",a="minute",s="hour",o="day",c="week",l="month",h="quarter",u="year",d="date",p="Invalid Date",f=/^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{1,2})?[.:]?(\d+)?$/,g=/\[([^\]]+)]|Y{1,4}|M{1,4}|D{1,2}|d{1,4}|H{1,2}|h{1,2}|a|A|m{1,2}|s{1,2}|Z{1,2}|SSS/g,y={name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),ordinal:function(t){var e=["th","st","nd","rd"],n=t%100;return"["+t+(e[(n-20)%10]||e[n]||e[0])+"]"}},m=function(t,e,n){var r=String(t);return!r||r.length>=e?t:""+Array(e+1-r.length).join(n)+t},b={s:m,z:function(t){var e=-t.utcOffset(),n=Math.abs(e),r=Math.floor(n/60),i=n%60;return(e<=0?"+":"-")+m(r,2,"0")+":"+m(i,2,"0")},m:function t(e,n){if(e.date()<n.date())return-t(n,e);var r=12*(n.year()-e.year())+(n.month()-e.month()),i=e.clone().add(r,l),a=n-i<0,s=e.clone().add(r+(a?-1:1),l);return+(-(r+(n-i)/(a?i-s:s-i))||0)},a:function(t){return t<0?Math.ceil(t)||0:Math.floor(t)},p:function(t){return{M:l,y:u,w:c,d:o,D:d,h:s,m:a,s:i,ms:r,Q:h}[t]||String(t||"").toLowerCase().replace(/s$/,"")},u:function(t){return void 0===t}},_="en",x={};x[_]=y;var v=function(t){return t instanceof C},k=function t(e,n,r){var i;if(!e)return _;if("string"==typeof e){var a=e.toLowerCase();x[a]&&(i=a),n&&(x[a]=n,i=a);var s=e.split("-");if(!i&&s.length>1)return t(s[0])}else{var o=e.name;x[o]=e,i=o}return!r&&i&&(_=i),i||!r&&_},w=function(t,e){if(v(t))return t.clone();var n="object"==typeof e?e:{};return n.date=t,n.args=arguments,new C(n)},E=b;E.l=k,E.i=v,E.w=function(t,e){return w(t,{locale:e.$L,utc:e.$u,x:e.$x,$offset:e.$offset})};var C=function(){function y(t){this.$L=k(t.locale,null,!0),this.parse(t)}var m=y.prototype;return m.parse=function(t){this.$d=function(t){var e=t.date,n=t.utc;if(null===e)return new Date(NaN);if(E.u(e))return new Date;if(e instanceof Date)return new Date(e);if("string"==typeof e&&!/Z$/i.test(e)){var r=e.match(f);if(r){var i=r[2]-1||0,a=(r[7]||"0").substring(0,3);return n?new Date(Date.UTC(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)):new Date(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)}}return new Date(e)}(t),this.$x=t.x||{},this.init()},m.init=function(){var t=this.$d;this.$y=t.getFullYear(),this.$M=t.getMonth(),this.$D=t.getDate(),this.$W=t.getDay(),this.$H=t.getHours(),this.$m=t.getMinutes(),this.$s=t.getSeconds(),this.$ms=t.getMilliseconds()},m.$utils=function(){return E},m.isValid=function(){return!(this.$d.toString()===p)},m.isSame=function(t,e){var n=w(t);return this.startOf(e)<=n&&n<=this.endOf(e)},m.isAfter=function(t,e){return w(t)<this.startOf(e)},m.isBefore=function(t,e){return this.endOf(e)<w(t)},m.$g=function(t,e,n){return E.u(t)?this[e]:this.set(n,t)},m.unix=function(){return Math.floor(this.valueOf()/1e3)},m.valueOf=function(){return this.$d.getTime()},m.startOf=function(t,e){var n=this,r=!!E.u(e)||e,h=E.p(t),p=function(t,e){var i=E.w(n.$u?Date.UTC(n.$y,e,t):new Date(n.$y,e,t),n);return r?i:i.endOf(o)},f=function(t,e){return E.w(n.toDate()[t].apply(n.toDate("s"),(r?[0,0,0,0]:[23,59,59,999]).slice(e)),n)},g=this.$W,y=this.$M,m=this.$D,b="set"+(this.$u?"UTC":"");switch(h){case u:return r?p(1,0):p(31,11);case l:return r?p(1,y):p(0,y+1);case c:var _=this.$locale().weekStart||0,x=(g<_?g+7:g)-_;return p(r?m-x:m+(6-x),y);case o:case d:return f(b+"Hours",0);case s:return f(b+"Minutes",1);case a:return f(b+"Seconds",2);case i:return f(b+"Milliseconds",3);default:return this.clone()}},m.endOf=function(t){return this.startOf(t,!1)},m.$set=function(t,e){var n,c=E.p(t),h="set"+(this.$u?"UTC":""),p=(n={},n[o]=h+"Date",n[d]=h+"Date",n[l]=h+"Month",n[u]=h+"FullYear",n[s]=h+"Hours",n[a]=h+"Minutes",n[i]=h+"Seconds",n[r]=h+"Milliseconds",n)[c],f=c===o?this.$D+(e-this.$W):e;if(c===l||c===u){var g=this.clone().set(d,1);g.$d[p](f),g.init(),this.$d=g.set(d,Math.min(this.$D,g.daysInMonth())).$d}else p&&this.$d[p](f);return this.init(),this},m.set=function(t,e){return this.clone().$set(t,e)},m.get=function(t){return this[E.p(t)]()},m.add=function(r,h){var d,p=this;r=Number(r);var f=E.p(h),g=function(t){var e=w(p);return E.w(e.date(e.date()+Math.round(t*r)),p)};if(f===l)return this.set(l,this.$M+r);if(f===u)return this.set(u,this.$y+r);if(f===o)return g(1);if(f===c)return g(7);var y=(d={},d[a]=e,d[s]=n,d[i]=t,d)[f]||1,m=this.$d.getTime()+r*y;return E.w(m,this)},m.subtract=function(t,e){return this.add(-1*t,e)},m.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return n.invalidDate||p;var r=t||"YYYY-MM-DDTHH:mm:ssZ",i=E.z(this),a=this.$H,s=this.$m,o=this.$M,c=n.weekdays,l=n.months,h=function(t,n,i,a){return t&&(t[n]||t(e,r))||i[n].slice(0,a)},u=function(t){return E.s(a%12||12,t,"0")},d=n.meridiem||function(t,e,n){var r=t<12?"AM":"PM";return n?r.toLowerCase():r},f={YY:String(this.$y).slice(-2),YYYY:this.$y,M:o+1,MM:E.s(o+1,2,"0"),MMM:h(n.monthsShort,o,l,3),MMMM:h(l,o),D:this.$D,DD:E.s(this.$D,2,"0"),d:String(this.$W),dd:h(n.weekdaysMin,this.$W,c,2),ddd:h(n.weekdaysShort,this.$W,c,3),dddd:c[this.$W],H:String(a),HH:E.s(a,2,"0"),h:u(1),hh:u(2),a:d(a,s,!0),A:d(a,s,!1),m:String(s),mm:E.s(s,2,"0"),s:String(this.$s),ss:E.s(this.$s,2,"0"),SSS:E.s(this.$ms,3,"0"),Z:i};return r.replace(g,(function(t,e){return e||f[t]||i.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(r,d,p){var f,g=E.p(d),y=w(r),m=(y.utcOffset()-this.utcOffset())*e,b=this-y,_=E.m(this,y);return _=(f={},f[u]=_/12,f[l]=_,f[h]=_/3,f[c]=(b-m)/6048e5,f[o]=(b-m)/864e5,f[s]=b/n,f[a]=b/e,f[i]=b/t,f)[g]||b,p?_:E.a(_)},m.daysInMonth=function(){return this.endOf(l).$D},m.$locale=function(){return x[this.$L]},m.locale=function(t,e){if(!t)return this.$L;var n=this.clone(),r=k(t,e,!0);return r&&(n.$L=r),n},m.clone=function(){return E.w(this.$d,this)},m.toDate=function(){return new Date(this.valueOf())},m.toJSON=function(){return this.isValid()?this.toISOString():null},m.toISOString=function(){return this.$d.toISOString()},m.toString=function(){return this.$d.toUTCString()},y}(),T=C.prototype;return w.prototype=T,[["$ms",r],["$s",i],["$m",a],["$H",s],["$W",o],["$M",l],["$y",u],["$D",d]].forEach((function(t){T[t[1]]=function(e){return this.$g(e,t[0],t[1])}})),w.extend=function(t,e){return t.$i||(t(e,C,w),t.$i=!0),w},w.locale=k,w.isDayjs=v,w.unix=function(t){return w(1e3*t)},w.en=x[_],w.Ls=x,w.p={},w}()},8734:function(t){t.exports=function(){"use strict";return function(t,e){var n=e.prototype,r=n.format;n.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return r.bind(this)(t);var i=this.$utils(),a=(t||"YYYY-MM-DDTHH:mm:ssZ").replace(/\[([^\]]+)]|Q|wo|ww|w|WW|W|zzz|z|gggg|GGGG|Do|X|x|k{1,2}|S/g,(function(t){switch(t){case"Q":return Math.ceil((e.$M+1)/3);case"Do":return n.ordinal(e.$D);case"gggg":return e.weekYear();case"GGGG":return e.isoWeekYear();case"wo":return n.ordinal(e.week(),"W");case"w":case"ww":return i.s(e.week(),"w"===t?1:2,"0");case"W":case"WW":return i.s(e.isoWeek(),"W"===t?1:2,"0");case"k":case"kk":return i.s(String(0===e.$H?24:e.$H),"k"===t?1:2,"0");case"X":return Math.floor(e.$d.getTime()/1e3);case"x":return e.$d.getTime();case"z":return"["+e.offsetName()+"]";case"zzz":return"["+e.offsetName("long")+"]";default:return t}}));return r.bind(this)(a)}}}()},285:function(t){t.exports=function(){"use strict";var t={LTS:"h:mm:ss A",LT:"h:mm A",L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},e=/(\[[^[]*\])|([-_:/.,()\s]+)|(A|a|YYYY|YY?|MM?M?M?|Do|DD?|hh?|HH?|mm?|ss?|S{1,3}|z|ZZ?)/g,n=/\d\d/,r=/\d\d?/,i=/\d*[^-_:/,()\s\d]+/,a={},s=function(t){return(t=+t)+(t>68?1900:2e3)},o=function(t){return function(e){this[t]=+e}},c=[/[+-]\d\d:?(\d\d)?|Z/,function(t){(this.zone||(this.zone={})).offset=function(t){if(!t)return 0;if("Z"===t)return 0;var e=t.match(/([+-]|\d\d)/g),n=60*e[1]+(+e[2]||0);return 0===n?0:"+"===e[0]?-n:n}(t)}],l=function(t){var e=a[t];return e&&(e.indexOf?e:e.s.concat(e.f))},h=function(t,e){var n,r=a.meridiem;if(r){for(var i=1;i<=24;i+=1)if(t.indexOf(r(i,0,e))>-1){n=i>12;break}}else n=t===(e?"pm":"PM");return n},u={A:[i,function(t){this.afternoon=h(t,!1)}],a:[i,function(t){this.afternoon=h(t,!0)}],S:[/\d/,function(t){this.milliseconds=100*+t}],SS:[n,function(t){this.milliseconds=10*+t}],SSS:[/\d{3}/,function(t){this.milliseconds=+t}],s:[r,o("seconds")],ss:[r,o("seconds")],m:[r,o("minutes")],mm:[r,o("minutes")],H:[r,o("hours")],h:[r,o("hours")],HH:[r,o("hours")],hh:[r,o("hours")],D:[r,o("day")],DD:[n,o("day")],Do:[i,function(t){var e=a.ordinal,n=t.match(/\d+/);if(this.day=n[0],e)for(var r=1;r<=31;r+=1)e(r).replace(/\[|\]/g,"")===t&&(this.day=r)}],M:[r,o("month")],MM:[n,o("month")],MMM:[i,function(t){var e=l("months"),n=(l("monthsShort")||e.map((function(t){return t.slice(0,3)}))).indexOf(t)+1;if(n<1)throw new Error;this.month=n%12||n}],MMMM:[i,function(t){var e=l("months").indexOf(t)+1;if(e<1)throw new Error;this.month=e%12||e}],Y:[/[+-]?\d+/,o("year")],YY:[n,function(t){this.year=s(t)}],YYYY:[/\d{4}/,o("year")],Z:c,ZZ:c};function d(n){var r,i;r=n,i=a&&a.formats;for(var s=(n=r.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(function(e,n,r){var a=r&&r.toUpperCase();return n||i[r]||t[r]||i[a].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(function(t,e,n){return e||n.slice(1)}))}))).match(e),o=s.length,c=0;c<o;c+=1){var l=s[c],h=u[l],d=h&&h[0],p=h&&h[1];s[c]=p?{regex:d,parser:p}:l.replace(/^\[|\]$/g,"")}return function(t){for(var e={},n=0,r=0;n<o;n+=1){var i=s[n];if("string"==typeof i)r+=i.length;else{var a=i.regex,c=i.parser,l=t.slice(r),h=a.exec(l)[0];c.call(e,h),t=t.replace(h,"")}}return function(t){var e=t.afternoon;if(void 0!==e){var n=t.hours;e?n<12&&(t.hours+=12):12===n&&(t.hours=0),delete t.afternoon}}(e),e}}return function(t,e,n){n.p.customParseFormat=!0,t&&t.parseTwoDigitYear&&(s=t.parseTwoDigitYear);var r=e.prototype,i=r.parse;r.parse=function(t){var e=t.date,r=t.utc,s=t.args;this.$u=r;var o=s[1];if("string"==typeof o){var c=!0===s[2],l=!0===s[3],h=c||l,u=s[2];l&&(u=s[2]),a=this.$locale(),!c&&u&&(a=n.Ls[u]),this.$d=function(t,e,n){try{if(["x","X"].indexOf(e)>-1)return new Date(("X"===e?1e3:1)*t);var r=d(e)(t),i=r.year,a=r.month,s=r.day,o=r.hours,c=r.minutes,l=r.seconds,h=r.milliseconds,u=r.zone,p=new Date,f=s||(i||a?1:p.getDate()),g=i||p.getFullYear(),y=0;i&&!a||(y=a>0?a-1:p.getMonth());var m=o||0,b=c||0,_=l||0,x=h||0;return u?new Date(Date.UTC(g,y,f,m,b,_,x+60*u.offset*1e3)):n?new Date(Date.UTC(g,y,f,m,b,_,x)):new Date(g,y,f,m,b,_,x)}catch(t){return new Date("")}}(e,o,r),this.init(),u&&!0!==u&&(this.$L=this.locale(u).$L),h&&e!=this.format(o)&&(this.$d=new Date("")),a={}}else if(o instanceof Array)for(var p=o.length,f=1;f<=p;f+=1){s[1]=o[f-1];var g=n.apply(this,s);if(g.isValid()){this.$d=g.$d,this.$L=g.$L,this.init();break}f===p&&(this.$d=new Date(""))}else i.call(this,t)}}}()},9542:function(t){t.exports=function(){"use strict";var t="day";return function(e,n,r){var i=function(e){return e.add(4-e.isoWeekday(),t)},a=n.prototype;a.isoWeekYear=function(){return i(this).year()},a.isoWeek=function(e){if(!this.$utils().u(e))return this.add(7*(e-this.isoWeek()),t);var n,a,s,o=i(this),c=(n=this.isoWeekYear(),s=4-(a=(this.$u?r.utc:r)().year(n).startOf("year")).isoWeekday(),a.isoWeekday()>4&&(s+=7),a.add(s,t));return o.diff(c,"week")+1},a.isoWeekday=function(t){return this.$utils().u(t)?this.day()||7:this.day(this.day()%7?t:t-7)};var s=a.startOf;a.startOf=function(t,e){var n=this.$utils(),r=!!n.u(e)||e;return"isoweek"===n.p(t)?r?this.date(this.date()-(this.isoWeekday()-1)).startOf("day"):this.date(this.date()-1-(this.isoWeekday()-1)+7).endOf("day"):s.bind(this)(t,e)}}}()},7856:function(t){t.exports=function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,n){return e=Object.setPrototypeOf||function(t,e){return t.__proto__=e,t},e(t,n)}function n(){if("undefined"==typeof Reflect||!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}function r(t,i,a){return r=n()?Reflect.construct:function(t,n,r){var i=[null];i.push.apply(i,n);var a=new(Function.bind.apply(t,i));return r&&e(a,r.prototype),a},r.apply(null,arguments)}function i(t){return a(t)||s(t)||o(t)||l()}function a(t){if(Array.isArray(t))return c(t)}function s(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]||null!=t["@@iterator"])return Array.from(t)}function o(t,e){if(t){if("string"==typeof t)return c(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n||"Set"===n?Array.from(t):"Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?c(t,e):void 0}}function c(t,e){(null==e||e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function l(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var h=Object.hasOwnProperty,u=Object.setPrototypeOf,d=Object.isFrozen,p=Object.getPrototypeOf,f=Object.getOwnPropertyDescriptor,g=Object.freeze,y=Object.seal,m=Object.create,b="undefined"!=typeof Reflect&&Reflect,_=b.apply,x=b.construct;_||(_=function(t,e,n){return t.apply(e,n)}),g||(g=function(t){return t}),y||(y=function(t){return t}),x||(x=function(t,e){return r(t,i(e))});var v=D(Array.prototype.forEach),k=D(Array.prototype.pop),w=D(Array.prototype.push),E=D(String.prototype.toLowerCase),C=D(String.prototype.toString),T=D(String.prototype.match),S=D(String.prototype.replace),A=D(String.prototype.indexOf),L=D(String.prototype.trim),B=D(RegExp.prototype.test),N=O(TypeError);function D(t){return function(e){for(var n=arguments.length,r=new Array(n>1?n-1:0),i=1;i<n;i++)r[i-1]=arguments[i];return _(t,e,r)}}function O(t){return function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];return x(t,n)}}function M(t,e,n){n=n||E,u&&u(t,null);for(var r=e.length;r--;){var i=e[r];if("string"==typeof i){var a=n(i);a!==i&&(d(e)||(e[r]=a),i=a)}t[i]=!0}return t}function I(t){var e,n=m(null);for(e in t)!0===_(h,t,[e])&&(n[e]=t[e]);return n}function F(t,e){for(;null!==t;){var n=f(t,e);if(n){if(n.get)return D(n.get);if("function"==typeof n.value)return D(n.value)}t=p(t)}function r(t){return console.warn("fallback value for",t),null}return r}var $=g(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","section","select","shadow","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),R=g(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Z=g(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),P=g(["animate","color-profile","cursor","discard","fedropshadow","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),j=g(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover"]),Y=g(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),z=g(["#text"]),U=g(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","face","for","headers","height","hidden","high","href","hreflang","id","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","xmlns","slot"]),W=g(["accent-height","accumulate","additive","alignment-baseline","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),q=g(["accent","accentunder","align","bevelled","close","columnsalign","columnlines","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lspace","lquote","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),H=g(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),V=y(/\{\{[\w\W]*|[\w\W]*\}\}/gm),G=y(/<%[\w\W]*|[\w\W]*%>/gm),X=y(/\${[\w\W]*}/gm),K=y(/^data-[\-\w.\u00B7-\uFFFF]/),Q=y(/^aria-[\-\w]+$/),J=y(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),tt=y(/^(?:\w+script|data):/i),et=y(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),nt=y(/^html$/i),rt=function(){return"undefined"==typeof window?null:window},it=function(e,n){if("object"!==t(e)||"function"!=typeof e.createPolicy)return null;var r=null,i="data-tt-policy-suffix";n.currentScript&&n.currentScript.hasAttribute(i)&&(r=n.currentScript.getAttribute(i));var a="dompurify"+(r?"#"+r:"");try{return e.createPolicy(a,{createHTML:function(t){return t},createScriptURL:function(t){return t}})}catch(s){return console.warn("TrustedTypes policy "+a+" could not be created."),null}};function at(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:rt(),n=function(t){return at(t)};if(n.version="2.4.3",n.removed=[],!e||!e.document||9!==e.document.nodeType)return n.isSupported=!1,n;var r=e.document,a=e.document,s=e.DocumentFragment,o=e.HTMLTemplateElement,c=e.Node,l=e.Element,h=e.NodeFilter,u=e.NamedNodeMap,d=void 0===u?e.NamedNodeMap||e.MozNamedAttrMap:u,p=e.HTMLFormElement,f=e.DOMParser,y=e.trustedTypes,m=l.prototype,b=F(m,"cloneNode"),_=F(m,"nextSibling"),x=F(m,"childNodes"),D=F(m,"parentNode");if("function"==typeof o){var O=a.createElement("template");O.content&&O.content.ownerDocument&&(a=O.content.ownerDocument)}var st=it(y,r),ot=st?st.createHTML(""):"",ct=a,lt=ct.implementation,ht=ct.createNodeIterator,ut=ct.createDocumentFragment,dt=ct.getElementsByTagName,pt=r.importNode,ft={};try{ft=I(a).documentMode?a.documentMode:{}}catch(De){}var gt={};n.isSupported="function"==typeof D&&lt&&void 0!==lt.createHTMLDocument&&9!==ft;var yt,mt,bt=V,_t=G,xt=X,vt=K,kt=Q,wt=tt,Et=et,Ct=J,Tt=null,St=M({},[].concat(i($),i(R),i(Z),i(j),i(z))),At=null,Lt=M({},[].concat(i(U),i(W),i(q),i(H))),Bt=Object.seal(Object.create(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),Nt=null,Dt=null,Ot=!0,Mt=!0,It=!1,Ft=!1,$t=!1,Rt=!1,Zt=!1,Pt=!1,jt=!1,Yt=!1,zt=!0,Ut=!1,Wt="user-content-",qt=!0,Ht=!1,Vt={},Gt=null,Xt=M({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","style","svg","template","thead","title","video","xmp"]),Kt=null,Qt=M({},["audio","video","img","source","image","track"]),Jt=null,te=M({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),ee="http://www.w3.org/1998/Math/MathML",ne="http://www.w3.org/2000/svg",re="http://www.w3.org/1999/xhtml",ie=re,ae=!1,se=null,oe=M({},[ee,ne,re],C),ce=["application/xhtml+xml","text/html"],le="text/html",he=null,ue=a.createElement("form"),de=function(t){return t instanceof RegExp||t instanceof Function},pe=function(e){he&&he===e||(e&&"object"===t(e)||(e={}),e=I(e),yt=yt=-1===ce.indexOf(e.PARSER_MEDIA_TYPE)?le:e.PARSER_MEDIA_TYPE,mt="application/xhtml+xml"===yt?C:E,Tt="ALLOWED_TAGS"in e?M({},e.ALLOWED_TAGS,mt):St,At="ALLOWED_ATTR"in e?M({},e.ALLOWED_ATTR,mt):Lt,se="ALLOWED_NAMESPACES"in e?M({},e.ALLOWED_NAMESPACES,C):oe,Jt="ADD_URI_SAFE_ATTR"in e?M(I(te),e.ADD_URI_SAFE_ATTR,mt):te,Kt="ADD_DATA_URI_TAGS"in e?M(I(Qt),e.ADD_DATA_URI_TAGS,mt):Qt,Gt="FORBID_CONTENTS"in e?M({},e.FORBID_CONTENTS,mt):Xt,Nt="FORBID_TAGS"in e?M({},e.FORBID_TAGS,mt):{},Dt="FORBID_ATTR"in e?M({},e.FORBID_ATTR,mt):{},Vt="USE_PROFILES"in e&&e.USE_PROFILES,Ot=!1!==e.ALLOW_ARIA_ATTR,Mt=!1!==e.ALLOW_DATA_ATTR,It=e.ALLOW_UNKNOWN_PROTOCOLS||!1,Ft=e.SAFE_FOR_TEMPLATES||!1,$t=e.WHOLE_DOCUMENT||!1,Pt=e.RETURN_DOM||!1,jt=e.RETURN_DOM_FRAGMENT||!1,Yt=e.RETURN_TRUSTED_TYPE||!1,Zt=e.FORCE_BODY||!1,zt=!1!==e.SANITIZE_DOM,Ut=e.SANITIZE_NAMED_PROPS||!1,qt=!1!==e.KEEP_CONTENT,Ht=e.IN_PLACE||!1,Ct=e.ALLOWED_URI_REGEXP||Ct,ie=e.NAMESPACE||re,e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck)&&(Bt.tagNameCheck=e.CUSTOM_ELEMENT_HANDLING.tagNameCheck),e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)&&(Bt.attributeNameCheck=e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck),e.CUSTOM_ELEMENT_HANDLING&&"boolean"==typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements&&(Bt.allowCustomizedBuiltInElements=e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements),Ft&&(Mt=!1),jt&&(Pt=!0),Vt&&(Tt=M({},i(z)),At=[],!0===Vt.html&&(M(Tt,$),M(At,U)),!0===Vt.svg&&(M(Tt,R),M(At,W),M(At,H)),!0===Vt.svgFilters&&(M(Tt,Z),M(At,W),M(At,H)),!0===Vt.mathMl&&(M(Tt,j),M(At,q),M(At,H))),e.ADD_TAGS&&(Tt===St&&(Tt=I(Tt)),M(Tt,e.ADD_TAGS,mt)),e.ADD_ATTR&&(At===Lt&&(At=I(At)),M(At,e.ADD_ATTR,mt)),e.ADD_URI_SAFE_ATTR&&M(Jt,e.ADD_URI_SAFE_ATTR,mt),e.FORBID_CONTENTS&&(Gt===Xt&&(Gt=I(Gt)),M(Gt,e.FORBID_CONTENTS,mt)),qt&&(Tt["#text"]=!0),$t&&M(Tt,["html","head","body"]),Tt.table&&(M(Tt,["tbody"]),delete Nt.tbody),g&&g(e),he=e)},fe=M({},["mi","mo","mn","ms","mtext"]),ge=M({},["foreignobject","desc","title","annotation-xml"]),ye=M({},["title","style","font","a","script"]),me=M({},R);M(me,Z),M(me,P);var be=M({},j);M(be,Y);var _e=function(t){var e=D(t);e&&e.tagName||(e={namespaceURI:ie,tagName:"template"});var n=E(t.tagName),r=E(e.tagName);return!!se[t.namespaceURI]&&(t.namespaceURI===ne?e.namespaceURI===re?"svg"===n:e.namespaceURI===ee?"svg"===n&&("annotation-xml"===r||fe[r]):Boolean(me[n]):t.namespaceURI===ee?e.namespaceURI===re?"math"===n:e.namespaceURI===ne?"math"===n&&ge[r]:Boolean(be[n]):t.namespaceURI===re?!(e.namespaceURI===ne&&!ge[r])&&!(e.namespaceURI===ee&&!fe[r])&&!be[n]&&(ye[n]||!me[n]):!("application/xhtml+xml"!==yt||!se[t.namespaceURI]))},xe=function(t){w(n.removed,{element:t});try{t.parentNode.removeChild(t)}catch(De){try{t.outerHTML=ot}catch(De){t.remove()}}},ve=function(t,e){try{w(n.removed,{attribute:e.getAttributeNode(t),from:e})}catch(De){w(n.removed,{attribute:null,from:e})}if(e.removeAttribute(t),"is"===t&&!At[t])if(Pt||jt)try{xe(e)}catch(De){}else try{e.setAttribute(t,"")}catch(De){}},ke=function(t){var e,n;if(Zt)t="<remove></remove>"+t;else{var r=T(t,/^[\r\n\t ]+/);n=r&&r[0]}"application/xhtml+xml"===yt&&ie===re&&(t='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+t+"</body></html>");var i=st?st.createHTML(t):t;if(ie===re)try{e=(new f).parseFromString(i,yt)}catch(De){}if(!e||!e.documentElement){e=lt.createDocument(ie,"template",null);try{e.documentElement.innerHTML=ae?ot:i}catch(De){}}var s=e.body||e.documentElement;return t&&n&&s.insertBefore(a.createTextNode(n),s.childNodes[0]||null),ie===re?dt.call(e,$t?"html":"body")[0]:$t?e.documentElement:s},we=function(t){return ht.call(t.ownerDocument||t,t,h.SHOW_ELEMENT|h.SHOW_COMMENT|h.SHOW_TEXT,null,!1)},Ee=function(t){return t instanceof p&&("string"!=typeof t.nodeName||"string"!=typeof t.textContent||"function"!=typeof t.removeChild||!(t.attributes instanceof d)||"function"!=typeof t.removeAttribute||"function"!=typeof t.setAttribute||"string"!=typeof t.namespaceURI||"function"!=typeof t.insertBefore||"function"!=typeof t.hasChildNodes)},Ce=function(e){return"object"===t(c)?e instanceof c:e&&"object"===t(e)&&"number"==typeof e.nodeType&&"string"==typeof e.nodeName},Te=function(t,e,r){gt[t]&&v(gt[t],(function(t){t.call(n,e,r,he)}))},Se=function(t){var e;if(Te("beforeSanitizeElements",t,null),Ee(t))return xe(t),!0;if(B(/[\u0080-\uFFFF]/,t.nodeName))return xe(t),!0;var r=mt(t.nodeName);if(Te("uponSanitizeElement",t,{tagName:r,allowedTags:Tt}),t.hasChildNodes()&&!Ce(t.firstElementChild)&&(!Ce(t.content)||!Ce(t.content.firstElementChild))&&B(/<[/\w]/g,t.innerHTML)&&B(/<[/\w]/g,t.textContent))return xe(t),!0;if("select"===r&&B(/<template/i,t.innerHTML))return xe(t),!0;if(!Tt[r]||Nt[r]){if(!Nt[r]&&Le(r)){if(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,r))return!1;if(Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(r))return!1}if(qt&&!Gt[r]){var i=D(t)||t.parentNode,a=x(t)||t.childNodes;if(a&&i)for(var s=a.length-1;s>=0;--s)i.insertBefore(b(a[s],!0),_(t))}return xe(t),!0}return t instanceof l&&!_e(t)?(xe(t),!0):"noscript"!==r&&"noembed"!==r||!B(/<\/no(script|embed)/i,t.innerHTML)?(Ft&&3===t.nodeType&&(e=t.textContent,e=S(e,bt," "),e=S(e,_t," "),e=S(e,xt," "),t.textContent!==e&&(w(n.removed,{element:t.cloneNode()}),t.textContent=e)),Te("afterSanitizeElements",t,null),!1):(xe(t),!0)},Ae=function(t,e,n){if(zt&&("id"===e||"name"===e)&&(n in a||n in ue))return!1;if(Mt&&!Dt[e]&&B(vt,e));else if(Ot&&B(kt,e));else if(!At[e]||Dt[e]){if(!(Le(t)&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,t)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(t))&&(Bt.attributeNameCheck instanceof RegExp&&B(Bt.attributeNameCheck,e)||Bt.attributeNameCheck instanceof Function&&Bt.attributeNameCheck(e))||"is"===e&&Bt.allowCustomizedBuiltInElements&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,n)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(n))))return!1}else if(Jt[e]);else if(B(Ct,S(n,Et,"")));else if("src"!==e&&"xlink:href"!==e&&"href"!==e||"script"===t||0!==A(n,"data:")||!Kt[t])if(It&&!B(wt,S(n,Et,"")));else if(n)return!1;return!0},Le=function(t){return t.indexOf("-")>0},Be=function(e){var r,i,a,s;Te("beforeSanitizeAttributes",e,null);var o=e.attributes;if(o){var c={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:At};for(s=o.length;s--;){var l=r=o[s],h=l.name,u=l.namespaceURI;if(i="value"===h?r.value:L(r.value),a=mt(h),c.attrName=a,c.attrValue=i,c.keepAttr=!0,c.forceKeepAttr=void 0,Te("uponSanitizeAttribute",e,c),i=c.attrValue,!c.forceKeepAttr&&(ve(h,e),c.keepAttr))if(B(/\/>/i,i))ve(h,e);else{Ft&&(i=S(i,bt," "),i=S(i,_t," "),i=S(i,xt," "));var d=mt(e.nodeName);if(Ae(d,a,i)){if(!Ut||"id"!==a&&"name"!==a||(ve(h,e),i=Wt+i),st&&"object"===t(y)&&"function"==typeof y.getAttributeType)if(u);else switch(y.getAttributeType(d,a)){case"TrustedHTML":i=st.createHTML(i);break;case"TrustedScriptURL":i=st.createScriptURL(i)}try{u?e.setAttributeNS(u,h,i):e.setAttribute(h,i),k(n.removed)}catch(De){}}}}Te("afterSanitizeAttributes",e,null)}},Ne=function t(e){var n,r=we(e);for(Te("beforeSanitizeShadowDOM",e,null);n=r.nextNode();)Te("uponSanitizeShadowNode",n,null),Se(n)||(n.content instanceof s&&t(n.content),Be(n));Te("afterSanitizeShadowDOM",e,null)};return n.sanitize=function(i){var a,o,l,h,u,d=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};if((ae=!i)&&(i="\x3c!--\x3e"),"string"!=typeof i&&!Ce(i)){if("function"!=typeof i.toString)throw N("toString is not a function");if("string"!=typeof(i=i.toString()))throw N("dirty is not a string, aborting")}if(!n.isSupported){if("object"===t(e.toStaticHTML)||"function"==typeof e.toStaticHTML){if("string"==typeof i)return e.toStaticHTML(i);if(Ce(i))return e.toStaticHTML(i.outerHTML)}return i}if(Rt||pe(d),n.removed=[],"string"==typeof i&&(Ht=!1),Ht){if(i.nodeName){var p=mt(i.nodeName);if(!Tt[p]||Nt[p])throw N("root node is forbidden and cannot be sanitized in-place")}}else if(i instanceof c)1===(o=(a=ke("\x3c!----\x3e")).ownerDocument.importNode(i,!0)).nodeType&&"BODY"===o.nodeName||"HTML"===o.nodeName?a=o:a.appendChild(o);else{if(!Pt&&!Ft&&!$t&&-1===i.indexOf("<"))return st&&Yt?st.createHTML(i):i;if(!(a=ke(i)))return Pt?null:Yt?ot:""}a&&Zt&&xe(a.firstChild);for(var f=we(Ht?i:a);l=f.nextNode();)3===l.nodeType&&l===h||Se(l)||(l.content instanceof s&&Ne(l.content),Be(l),h=l);if(h=null,Ht)return i;if(Pt){if(jt)for(u=ut.call(a.ownerDocument);a.firstChild;)u.appendChild(a.firstChild);else u=a;return At.shadowroot&&(u=pt.call(r,u,!0)),u}var g=$t?a.outerHTML:a.innerHTML;return $t&&Tt["!doctype"]&&a.ownerDocument&&a.ownerDocument.doctype&&a.ownerDocument.doctype.name&&B(nt,a.ownerDocument.doctype.name)&&(g="<!DOCTYPE "+a.ownerDocument.doctype.name+">\n"+g),Ft&&(g=S(g,bt," "),g=S(g,_t," "),g=S(g,xt," ")),st&&Yt?st.createHTML(g):g},n.setConfig=function(t){pe(t),Rt=!0},n.clearConfig=function(){he=null,Rt=!1},n.isValidAttribute=function(t,e,n){he||pe({});var r=mt(t),i=mt(e);return Ae(r,i,n)},n.addHook=function(t,e){"function"==typeof e&&(gt[t]=gt[t]||[],w(gt[t],e))},n.removeHook=function(t){if(gt[t])return k(gt[t])},n.removeHooks=function(t){gt[t]&&(gt[t]=[])},n.removeAllHooks=function(){gt={}},n}return at()}()},6432:(t,e,n)=>{"use strict";n.d(e,{a:()=>Mn,b:()=>Fs,c:()=>Yt,d:()=>Dn,e:()=>Pt,f:()=>Ys,g:()=>ar,h:()=>mc,i:()=>hs,j:()=>Pr,k:()=>Yr,l:()=>Nt,m:()=>Dr,n:()=>Ft,o:()=>dp,p:()=>bo,s:()=>pr});const r=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];var r=Array.from("string"==typeof t?[t]:t);r[r.length-1]=r[r.length-1].replace(/\r?\n([\t ]*)$/,"");var i=r.reduce((function(t,e){var n=e.match(/\n([\t ]+|(?!\s).)/g);return n?t.concat(n.map((function(t){var e,n;return null!==(n=null===(e=t.match(/[\t ]/g))||void 0===e?void 0:e.length)&&void 0!==n?n:0}))):t}),[]);if(i.length){var a=new RegExp("\n[\t ]{"+Math.min.apply(Math,i)+"}","g");r=r.map((function(t){return t.replace(a,"\n")}))}r[0]=r[0].replace(/^\r?\n/,"");var s=r[0];return e.forEach((function(t,e){var n=s.match(/(?:^|\n)( *)$/),i=n?n[1]:"",a=t;"string"==typeof t&&t.includes("\n")&&(a=String(t).split("\n").map((function(t,e){return 0===e?t:""+i+t})).join("\n")),s+=a+r[e+1]})),s};var i=n(7484),a=n.n(i),s=n(7967),o=n(9373),l=n(7856),h=n.n(l),u=n(1610),d=n(1691);const p=(t,e)=>{const n=u.Z.parse(t);for(const r in e)n[r]=d.Z.channel.clamp[r](e[r]);return u.Z.stringify(n)},f=(t,e)=>{const n=u.Z.parse(t),r={};for(const i in e)e[i]&&(r[i]=n[i]+e[i]);return p(t,r)};var g=n(1883);const y=(t,e,n=0,r=1)=>{if("number"!=typeof t)return p(t,{a:e});const i=g.Z.set({r:d.Z.channel.clamp.r(t),g:d.Z.channel.clamp.g(e),b:d.Z.channel.clamp.b(n),a:d.Z.channel.clamp.a(r)});return u.Z.stringify(i)},m=(t,e,n=50)=>{const{r:r,g:i,b:a,a:s}=u.Z.parse(t),{r:o,g:c,b:l,a:h}=u.Z.parse(e),d=n/100,p=2*d-1,f=s-h,g=((p*f==-1?p:(p+f)/(1+p*f))+1)/2,m=1-g;return y(r*g+o*m,i*g+c*m,a*g+l*m,s*d+h*(1-d))},b=(t,e=100)=>{const n=u.Z.parse(t);return n.r=255-n.r,n.g=255-n.g,n.b=255-n.b,m(n,t,e)};var _=n(7201),x=n(5920),v=n(2454),k="comm",w="rule",E="decl",C=Math.abs,T=String.fromCharCode;Object.assign;function S(t){return t.trim()}function A(t,e,n){return t.replace(e,n)}function L(t,e){return t.indexOf(e)}function B(t,e){return 0|t.charCodeAt(e)}function N(t,e,n){return t.slice(e,n)}function D(t){return t.length}function O(t){return t.length}function M(t,e){return e.push(t),t}function I(t,e){for(var n="",r=O(t),i=0;i<r;i++)n+=e(t[i],i,t,e)||"";return n}function F(t,e,n,r){switch(t.type){case"@import":case E:return t.return=t.return||t.value;case k:return"";case"@keyframes":return t.return=t.value+"{"+I(t.children,r)+"}";case w:t.value=t.props.join(",")}return D(n=I(t.children,r))?t.return=t.value+"{"+n+"}":""}var $=1,R=1,Z=0,P=0,j=0,Y="";function z(t,e,n,r,i,a,s){return{value:t,root:e,parent:n,type:r,props:i,children:a,line:$,column:R,length:s,return:""}}function U(){return j=P>0?B(Y,--P):0,R--,10===j&&(R=1,$--),j}function W(){return j=P<Z?B(Y,P++):0,R++,10===j&&(R=1,$++),j}function q(){return B(Y,P)}function H(){return P}function V(t,e){return N(Y,t,e)}function G(t){switch(t){case 0:case 9:case 10:case 13:case 32:return 5;case 33:case 43:case 44:case 47:case 62:case 64:case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function X(t){return $=R=1,Z=D(Y=t),P=0,[]}function K(t){return Y="",t}function Q(t){return S(V(P-1,et(91===t?t+2:40===t?t+1:t)))}function J(t){for(;(j=q())&&j<33;)W();return G(t)>2||G(j)>3?"":" "}function tt(t,e){for(;--e&&W()&&!(j<48||j>102||j>57&&j<65||j>70&&j<97););return V(t,H()+(e<6&&32==q()&&32==W()))}function et(t){for(;W();)switch(j){case t:return P;case 34:case 39:34!==t&&39!==t&&et(j);break;case 40:41===t&&et(t);break;case 92:W()}return P}function nt(t,e){for(;W()&&t+j!==57&&(t+j!==84||47!==q()););return"/*"+V(e,P-1)+"*"+T(47===t?t:W())}function rt(t){for(;!G(q());)W();return V(t,P)}function it(t){return K(at("",null,null,null,[""],t=X(t),0,[0],t))}function at(t,e,n,r,i,a,s,o,c){for(var l=0,h=0,u=s,d=0,p=0,f=0,g=1,y=1,m=1,b=0,_="",x=i,v=a,k=r,w=_;y;)switch(f=b,b=W()){case 40:if(108!=f&&58==B(w,u-1)){-1!=L(w+=A(Q(b),"&","&\f"),"&\f")&&(m=-1);break}case 34:case 39:case 91:w+=Q(b);break;case 9:case 10:case 13:case 32:w+=J(f);break;case 92:w+=tt(H()-1,7);continue;case 47:switch(q()){case 42:case 47:M(ot(nt(W(),H()),e,n),c);break;default:w+="/"}break;case 123*g:o[l++]=D(w)*m;case 125*g:case 59:case 0:switch(b){case 0:case 125:y=0;case 59+h:p>0&&D(w)-u&&M(p>32?ct(w+";",r,n,u-1):ct(A(w," ","")+";",r,n,u-2),c);break;case 59:w+=";";default:if(M(k=st(w,e,n,l,h,i,o,_,x=[],v=[],u),a),123===b)if(0===h)at(w,e,k,k,x,a,u,o,v);else switch(99===d&&110===B(w,3)?100:d){case 100:case 109:case 115:at(t,k,k,r&&M(st(t,k,k,0,0,i,o,_,i,x=[],u),v),i,v,u,o,r?x:v);break;default:at(w,k,k,k,[""],v,0,o,v)}}l=h=p=0,g=m=1,_=w="",u=s;break;case 58:u=1+D(w),p=f;default:if(g<1)if(123==b)--g;else if(125==b&&0==g++&&125==U())continue;switch(w+=T(b),b*g){case 38:m=h>0?1:(w+="\f",-1);break;case 44:o[l++]=(D(w)-1)*m,m=1;break;case 64:45===q()&&(w+=Q(W())),d=q(),h=u=D(_=w+=rt(H())),b++;break;case 45:45===f&&2==D(w)&&(g=0)}}return a}function st(t,e,n,r,i,a,s,o,c,l,h){for(var u=i-1,d=0===i?a:[""],p=O(d),f=0,g=0,y=0;f<r;++f)for(var m=0,b=N(t,u+1,u=C(g=s[f])),_=t;m<p;++m)(_=S(g>0?d[m]+" "+b:A(b,/&\f/g,d[m])))&&(c[y++]=_);return z(t,e,n,0===i?w:o,c,l,h)}function ot(t,e,n){return z(t,e,n,k,T(j),N(t,2,-2),0)}function ct(t,e,n,r){return z(t,e,n,E,N(t,0,r),N(t,r+1,-1),r)}var lt=n(277),ht=n(5625),ut=n(9354);const dt=[];for(let c=0;c<256;++c)dt.push((c+256).toString(16).slice(1));function pt(t,e=0){return(dt[t[e+0]]+dt[t[e+1]]+dt[t[e+2]]+dt[t[e+3]]+"-"+dt[t[e+4]]+dt[t[e+5]]+"-"+dt[t[e+6]]+dt[t[e+7]]+"-"+dt[t[e+8]]+dt[t[e+9]]+"-"+dt[t[e+10]]+dt[t[e+11]]+dt[t[e+12]]+dt[t[e+13]]+dt[t[e+14]]+dt[t[e+15]]).toLowerCase()}const ft=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000)$/i;const gt=function(t){return"string"==typeof t&&ft.test(t)};const yt=function(t){if(!gt(t))throw TypeError("Invalid UUID");let e;const n=new Uint8Array(16);return n[0]=(e=parseInt(t.slice(0,8),16))>>>24,n[1]=e>>>16&255,n[2]=e>>>8&255,n[3]=255&e,n[4]=(e=parseInt(t.slice(9,13),16))>>>8,n[5]=255&e,n[6]=(e=parseInt(t.slice(14,18),16))>>>8,n[7]=255&e,n[8]=(e=parseInt(t.slice(19,23),16))>>>8,n[9]=255&e,n[10]=(e=parseInt(t.slice(24,36),16))/1099511627776&255,n[11]=e/4294967296&255,n[12]=e>>>24&255,n[13]=e>>>16&255,n[14]=e>>>8&255,n[15]=255&e,n};function mt(t,e,n,r){switch(t){case 0:return e&n^~e&r;case 1:case 3:return e^n^r;case 2:return e&n^e&r^n&r}}function bt(t,e){return t<<e|t>>>32-e}const _t=function(t){const e=[1518500249,1859775393,2400959708,3395469782],n=[1732584193,4023233417,2562383102,271733878,3285377520];if("string"==typeof t){const e=unescape(encodeURIComponent(t));t=[];for(let n=0;n<e.length;++n)t.push(e.charCodeAt(n))}else Array.isArray(t)||(t=Array.prototype.slice.call(t));t.push(128);const r=t.length/4+2,i=Math.ceil(r/16),a=new Array(i);for(let s=0;s<i;++s){const e=new Uint32Array(16);for(let n=0;n<16;++n)e[n]=t[64*s+4*n]<<24|t[64*s+4*n+1]<<16|t[64*s+4*n+2]<<8|t[64*s+4*n+3];a[s]=e}a[i-1][14]=8*(t.length-1)/Math.pow(2,32),a[i-1][14]=Math.floor(a[i-1][14]),a[i-1][15]=8*(t.length-1)&4294967295;for(let s=0;s<i;++s){const t=new Uint32Array(80);for(let e=0;e<16;++e)t[e]=a[s][e];for(let e=16;e<80;++e)t[e]=bt(t[e-3]^t[e-8]^t[e-14]^t[e-16],1);let r=n[0],i=n[1],o=n[2],c=n[3],l=n[4];for(let n=0;n<80;++n){const a=Math.floor(n/20),s=bt(r,5)+mt(a,i,o,c)+l+e[a]+t[n]>>>0;l=c,c=o,o=bt(i,30)>>>0,i=r,r=s}n[0]=n[0]+r>>>0,n[1]=n[1]+i>>>0,n[2]=n[2]+o>>>0,n[3]=n[3]+c>>>0,n[4]=n[4]+l>>>0}return[n[0]>>24&255,n[0]>>16&255,n[0]>>8&255,255&n[0],n[1]>>24&255,n[1]>>16&255,n[1]>>8&255,255&n[1],n[2]>>24&255,n[2]>>16&255,n[2]>>8&255,255&n[2],n[3]>>24&255,n[3]>>16&255,n[3]>>8&255,255&n[3],n[4]>>24&255,n[4]>>16&255,n[4]>>8&255,255&n[4]]},xt=function(t,e,n){function r(t,r,i,a){var s;if("string"==typeof t&&(t=function(t){t=unescape(encodeURIComponent(t));const e=[];for(let n=0;n<t.length;++n)e.push(t.charCodeAt(n));return e}(t)),"string"==typeof r&&(r=yt(r)),16!==(null===(s=r)||void 0===s?void 0:s.length))throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");let o=new Uint8Array(16+t.length);if(o.set(r),o.set(t,r.length),o=n(o),o[6]=15&o[6]|e,o[8]=63&o[8]|128,i){a=a||0;for(let t=0;t<16;++t)i[a+t]=o[t];return i}return pt(o)}try{r.name=t}catch(i){}return r.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",r.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8",r}("v5",80,_t),vt=xt;n(1518),n(6225);var kt=n(3349),wt=(n(3352),n(2930),n(9542)),Et=n.n(wt),Ct=n(285),Tt=n.n(Ct),St=n(8734),At=n.n(St),Lt=n(9697);const Bt={trace:0,debug:1,info:2,warn:3,error:4,fatal:5},Nt={trace:(...t)=>{},debug:(...t)=>{},info:(...t)=>{},warn:(...t)=>{},error:(...t)=>{},fatal:(...t)=>{}},Dt=function(t="fatal"){let e=Bt.fatal;"string"==typeof t?(t=t.toLowerCase())in Bt&&(e=Bt[t]):"number"==typeof t&&(e=t),Nt.trace=()=>{},Nt.debug=()=>{},Nt.info=()=>{},Nt.warn=()=>{},Nt.error=()=>{},Nt.fatal=()=>{},e<=Bt.fatal&&(Nt.fatal=console.error?console.error.bind(console,Ot("FATAL"),"color: orange"):console.log.bind(console,"\x1b[35m",Ot("FATAL"))),e<=Bt.error&&(Nt.error=console.error?console.error.bind(console,Ot("ERROR"),"color: orange"):console.log.bind(console,"\x1b[31m",Ot("ERROR"))),e<=Bt.warn&&(Nt.warn=console.warn?console.warn.bind(console,Ot("WARN"),"color: orange"):console.log.bind(console,"\x1b[33m",Ot("WARN"))),e<=Bt.info&&(Nt.info=console.info?console.info.bind(console,Ot("INFO"),"color: lightblue"):console.log.bind(console,"\x1b[34m",Ot("INFO"))),e<=Bt.debug&&(Nt.debug=console.debug?console.debug.bind(console,Ot("DEBUG"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("DEBUG"))),e<=Bt.trace&&(Nt.trace=console.debug?console.debug.bind(console,Ot("TRACE"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("TRACE")))},Ot=t=>`%c${a()().format("ss.SSS")} : ${t} : `,Mt=t=>h().sanitize(t),It=(t,e)=>{var n;if(!1!==(null==(n=e.flowchart)?void 0:n.htmlLabels)){const n=e.securityLevel;"antiscript"===n||"strict"===n?t=Mt(t):"loose"!==n&&(t=(t=(t=Zt(t)).replace(/</g,"&lt;").replace(/>/g,"&gt;")).replace(/=/g,"&equals;"),t=Rt(t))}return t},Ft=(t,e)=>t?t=e.dompurifyConfig?h().sanitize(It(t,e),e.dompurifyConfig).toString():h().sanitize(It(t,e),{FORBID_TAGS:["style"]}).toString():t,$t=/<br\s*\/?>/gi,Rt=t=>t.replace(/#br#/g,"<br/>"),Zt=t=>t.replace($t,"#br#"),Pt=t=>!1!==t&&!["false","null","0"].includes(String(t).trim().toLowerCase()),jt=function(t){let e=t;if(t.split("~").length-1>=2){let t=e;do{e=t,t=e.replace(/~([^\s,:;]+)~/,"<$1>")}while(t!=e);return jt(t)}return e},Yt={getRows:t=>{if(!t)return[""];return Zt(t).replace(/\\n/g,"#br#").split("#br#")},sanitizeText:Ft,sanitizeTextOrArray:(t,e)=>"string"==typeof t?Ft(t,e):t.flat().map((t=>Ft(t,e))),hasBreaks:t=>$t.test(t),splitBreaks:t=>t.split($t),lineBreakRegex:$t,removeScript:Mt,getUrl:t=>{let e="";return t&&(e=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,e=e.replaceAll(/\(/g,"\\("),e=e.replaceAll(/\)/g,"\\)")),e},evaluate:Pt},zt=(t,e)=>f(t,e?{s:-40,l:10}:{s:-40,l:-10}),Ut="#ffffff",Wt="#f2f2f2";class qt{constructor(){this.primaryColor="#eee",this.contrast="#707070",this.secondaryColor=(0,x.Z)(this.contrast,55),this.background="#ffffff",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#eee",this.secondBkg="calculated",this.lineColor="#666",this.border1="#999",this.border2="calculated",this.note="#ffa",this.text="#333",this.critical="#d42",this.done="#bbb",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="white",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="calculated",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="white",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBkgColor="calculated",this.critBorderColor="calculated",this.todayLineColor="calculated",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.secondBkg=(0,x.Z)(this.contrast,55),this.border2=this.contrast,this.cScale0=this.cScale0||"#555",this.cScale1=this.cScale1||"#F4F4F4",this.cScale2=this.cScale2||"#555",this.cScale3=this.cScale3||"#BBB",this.cScale4=this.cScale4||"#777",this.cScale5=this.cScale5||"#999",this.cScale6=this.cScale6||"#DDD",this.cScale7=this.cScale7||"#FFF",this.cScale8=this.cScale8||"#DDD",this.cScale9=this.cScale9||"#BBB",this.cScale10=this.cScale10||"#999",this.cScale11=this.cScale11||"#777";for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this.darkMode?this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10):this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],10);this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor),this.cScaleLabel0=this.cScaleLabel0||this.cScale1,this.cScaleLabel2=this.cScaleLabel2||this.cScale1;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.text,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.actorTextColor=this.text,this.actorLineColor=this.lineColor,this.signalColor=this.text,this.signalTextColor=this.text,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.text,this.loopTextColor=this.text,this.noteBorderColor="#999",this.noteBkgColor="#666",this.noteTextColor="#fff",this.sectionBkgColor=(0,x.Z)(this.contrast,30),this.sectionBkgColor2=(0,x.Z)(this.contrast,30),this.taskBorderColor=(0,_.Z)(this.contrast,10),this.taskBkgColor=this.contrast,this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor=this.text,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.gridColor=(0,x.Z)(this.border1,30),this.doneTaskBkgColor=this.done,this.doneTaskBorderColor=this.lineColor,this.critBkgColor=this.critical,this.critBorderColor=(0,_.Z)(this.critBkgColor,10),this.todayLineColor=this.critBkgColor,this.transitionColor=this.transitionColor||"#000",this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f4f4f4",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.stateBorder=this.stateBorder||"#000",this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#222",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pie12=this.pie0,this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,_.Z)(this.pie1,25)||this.primaryColor,this.git1=this.pie2||this.secondaryColor,this.git2=this.pie3||this.tertiaryColor,this.git3=this.pie4||f(this.primaryColor,{h:-30}),this.git4=this.pie5||f(this.primaryColor,{h:-60}),this.git5=this.pie6||f(this.primaryColor,{h:-90}),this.git6=this.pie7||f(this.primaryColor,{h:60}),this.git7=this.pie8||f(this.primaryColor,{h:120}),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||this.labelTextColor,this.gitBranchLabel0=this.branchLabelColor,this.gitBranchLabel1="white",this.gitBranchLabel2=this.branchLabelColor,this.gitBranchLabel3="white",this.gitBranchLabel4=this.branchLabelColor,this.gitBranchLabel5=this.branchLabelColor,this.gitBranchLabel6=this.branchLabelColor,this.gitBranchLabel7=this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}}const Ht={base:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#fff4dd",this.noteBkgColor="#fff5ad",this.noteTextColor="#333",this.THEME_COLOR_LIMIT=12,this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px"}updateColors(){if(this.primaryTextColor=this.primaryTextColor||(this.darkMode?"#eee":"#333"),this.secondaryColor=this.secondaryColor||f(this.primaryColor,{h:-120}),this.tertiaryColor=this.tertiaryColor||f(this.primaryColor,{h:180,l:5}),this.primaryBorderColor=this.primaryBorderColor||zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=this.secondaryBorderColor||zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=this.tertiaryBorderColor||zt(this.tertiaryColor,this.darkMode),this.noteBorderColor=this.noteBorderColor||zt(this.noteBkgColor,this.darkMode),this.noteBkgColor=this.noteBkgColor||"#fff5ad",this.noteTextColor=this.noteTextColor||"#333",this.secondaryTextColor=this.secondaryTextColor||b(this.secondaryColor),this.tertiaryTextColor=this.tertiaryTextColor||b(this.tertiaryColor),this.lineColor=this.lineColor||b(this.background),this.textColor=this.textColor||this.primaryTextColor,this.nodeBkg=this.nodeBkg||this.primaryColor,this.mainBkg=this.mainBkg||this.primaryColor,this.nodeBorder=this.nodeBorder||this.primaryBorderColor,this.clusterBkg=this.clusterBkg||this.tertiaryColor,this.clusterBorder=this.clusterBorder||this.tertiaryBorderColor,this.defaultLinkColor=this.defaultLinkColor||this.lineColor,this.titleColor=this.titleColor||this.tertiaryTextColor,this.edgeLabelBackground=this.edgeLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.nodeTextColor=this.nodeTextColor||this.primaryTextColor,this.actorBorder=this.actorBorder||this.primaryBorderColor,this.actorBkg=this.actorBkg||this.mainBkg,this.actorTextColor=this.actorTextColor||this.primaryTextColor,this.actorLineColor=this.actorLineColor||"grey",this.labelBoxBkgColor=this.labelBoxBkgColor||this.actorBkg,this.signalColor=this.signalColor||this.textColor,this.signalTextColor=this.signalTextColor||this.textColor,this.labelBoxBorderColor=this.labelBoxBorderColor||this.actorBorder,this.labelTextColor=this.labelTextColor||this.actorTextColor,this.loopTextColor=this.loopTextColor||this.actorTextColor,this.activationBorderColor=this.activationBorderColor||(0,_.Z)(this.secondaryColor,10),this.activationBkgColor=this.activationBkgColor||this.secondaryColor,this.sequenceNumberColor=this.sequenceNumberColor||b(this.lineColor),this.sectionBkgColor=this.sectionBkgColor||this.tertiaryColor,this.altSectionBkgColor=this.altSectionBkgColor||"white",this.sectionBkgColor=this.sectionBkgColor||this.secondaryColor,this.sectionBkgColor2=this.sectionBkgColor2||this.primaryColor,this.excludeBkgColor=this.excludeBkgColor||"#eeeeee",this.taskBorderColor=this.taskBorderColor||this.primaryBorderColor,this.taskBkgColor=this.taskBkgColor||this.primaryColor,this.activeTaskBorderColor=this.activeTaskBorderColor||this.primaryColor,this.activeTaskBkgColor=this.activeTaskBkgColor||(0,x.Z)(this.primaryColor,23),this.gridColor=this.gridColor||"lightgrey",this.doneTaskBkgColor=this.doneTaskBkgColor||"lightgrey",this.doneTaskBorderColor=this.doneTaskBorderColor||"grey",this.critBorderColor=this.critBorderColor||"#ff8888",this.critBkgColor=this.critBkgColor||"red",this.todayLineColor=this.todayLineColor||"red",this.taskTextColor=this.taskTextColor||this.textColor,this.taskTextOutsideColor=this.taskTextOutsideColor||this.textColor,this.taskTextLightColor=this.taskTextLightColor||this.textColor,this.taskTextColor=this.taskTextColor||this.primaryTextColor,this.taskTextDarkColor=this.taskTextDarkColor||this.textColor,this.taskTextClickableColor=this.taskTextClickableColor||"#003163",this.personBorder=this.personBorder||this.primaryBorderColor,this.personBkg=this.personBkg||this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||this.tertiaryColor,this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.specialStateColor=this.lineColor,this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210,l:150}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.darkMode)for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],75);else for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],25);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleInv"+e]=this["cScaleInv"+e]||b(this["cScale"+e]);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this.darkMode?this["cScalePeer"+e]=this["cScalePeer"+e]||(0,x.Z)(this["cScale"+e],10):this["cScalePeer"+e]=this["cScalePeer"+e]||(0,_.Z)(this["cScale"+e],10);this.scaleLabelColor=this.scaleLabelColor||this.labelTextColor;for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleLabel"+e]=this["cScaleLabel"+e]||this.scaleLabelColor;const t=this.darkMode?-4:-1;for(let e=0;e<5;e++)this["surface"+e]=this["surface"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(5+3*e)}),this["surfacePeer"+e]=this["surfacePeer"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(8+3*e)});this.classText=this.classText||this.textColor,this.fillType0=this.fillType0||this.primaryColor,this.fillType1=this.fillType1||this.secondaryColor,this.fillType2=this.fillType2||f(this.primaryColor,{h:64}),this.fillType3=this.fillType3||f(this.secondaryColor,{h:64}),this.fillType4=this.fillType4||f(this.primaryColor,{h:-64}),this.fillType5=this.fillType5||f(this.secondaryColor,{h:-64}),this.fillType6=this.fillType6||f(this.primaryColor,{h:128}),this.fillType7=this.fillType7||f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-10}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-10}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-20}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-20}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-10}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||(this.darkMode?"black":this.labelTextColor),this.gitBranchLabel0=this.gitBranchLabel0||this.branchLabelColor,this.gitBranchLabel1=this.gitBranchLabel1||this.branchLabelColor,this.gitBranchLabel2=this.gitBranchLabel2||this.branchLabelColor,this.gitBranchLabel3=this.gitBranchLabel3||this.branchLabelColor,this.gitBranchLabel4=this.gitBranchLabel4||this.branchLabelColor,this.gitBranchLabel5=this.gitBranchLabel5||this.branchLabelColor,this.gitBranchLabel6=this.gitBranchLabel6||this.branchLabelColor,this.gitBranchLabel7=this.gitBranchLabel7||this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},dark:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#333",this.primaryColor="#1f2020",this.secondaryColor=(0,x.Z)(this.primaryColor,16),this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=b(this.background),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#1f2020",this.secondBkg="calculated",this.mainContrastColor="lightgrey",this.darkTextColor=(0,x.Z)(b("#323D47"),10),this.lineColor="calculated",this.border1="#81B1DB",this.border2=y(255,255,255,.25),this.arrowheadColor="calculated",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#181818",this.textColor="#ccc",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#F9FFFE",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="calculated",this.activationBkgColor="calculated",this.sequenceNumberColor="black",this.sectionBkgColor=(0,_.Z)("#EAE8D9",30),this.altSectionBkgColor="calculated",this.sectionBkgColor2="#EAE8D9",this.taskBorderColor=y(255,255,255,70),this.taskBkgColor="calculated",this.taskTextColor="calculated",this.taskTextLightColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor=y(255,255,255,50),this.activeTaskBkgColor="#81B1DB",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="grey",this.critBorderColor="#E83737",this.critBkgColor="#E83737",this.taskTextDarkColor="calculated",this.todayLineColor="#DB5757",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="calculated",this.errorBkgColor="#a44141",this.errorTextColor="#ddd"}updateColors(){this.secondBkg=(0,x.Z)(this.mainBkg,16),this.lineColor=this.mainContrastColor,this.arrowheadColor=this.mainContrastColor,this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.edgeLabelBackground=(0,x.Z)(this.labelBackground,25),this.actorBorder=this.border1,this.actorBkg=this.mainBkg,this.actorTextColor=this.mainContrastColor,this.actorLineColor=this.mainContrastColor,this.signalColor=this.mainContrastColor,this.signalTextColor=this.mainContrastColor,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.mainContrastColor,this.loopTextColor=this.mainContrastColor,this.noteBorderColor=this.secondaryBorderColor,this.noteBkgColor=this.secondBkg,this.noteTextColor=this.secondaryTextColor,this.activationBorderColor=this.border1,this.activationBkgColor=this.secondBkg,this.altSectionBkgColor=this.background,this.taskBkgColor=(0,x.Z)(this.mainBkg,23),this.taskTextColor=this.darkTextColor,this.taskTextLightColor=this.mainContrastColor,this.taskTextOutsideColor=this.taskTextLightColor,this.gridColor=this.mainContrastColor,this.doneTaskBkgColor=this.mainContrastColor,this.taskTextDarkColor=this.darkTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#555",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#f4f4f4",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.cScale1=this.cScale1||"#0b0000",this.cScale2=this.cScale2||"#4d1037",this.cScale3=this.cScale3||"#3f5258",this.cScale4=this.cScale4||"#4f2f1b",this.cScale5=this.cScale5||"#6e0a0a",this.cScale6=this.cScale6||"#3b0048",this.cScale7=this.cScale7||"#995a01",this.cScale8=this.cScale8||"#154706",this.cScale9=this.cScale9||"#161722",this.cScale10=this.cScale10||"#00296f",this.cScale11=this.cScale11||"#01629c",this.cScale12=this.cScale12||"#010029",this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10);for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-10)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-7)});this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.classText=this.primaryTextColor,this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,x.Z)(this.secondaryColor,20),this.git1=(0,x.Z)(this.pie2||this.secondaryColor,20),this.git2=(0,x.Z)(this.pie3||this.tertiaryColor,20),this.git3=(0,x.Z)(this.pie4||f(this.primaryColor,{h:-30}),20),this.git4=(0,x.Z)(this.pie5||f(this.primaryColor,{h:-60}),20),this.git5=(0,x.Z)(this.pie6||f(this.primaryColor,{h:-90}),10),this.git6=(0,x.Z)(this.pie7||f(this.primaryColor,{h:60}),10),this.git7=(0,x.Z)(this.pie8||f(this.primaryColor,{h:120}),20),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||(0,x.Z)(this.background,12),this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||(0,x.Z)(this.background,2)}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},default:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#ECECFF",this.secondaryColor=f(this.primaryColor,{h:120}),this.secondaryColor="#ffffde",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.background="white",this.mainBkg="#ECECFF",this.secondBkg="#ffffde",this.lineColor="#333333",this.border1="#9370DB",this.border2="#aaaa33",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#e8e8e8",this.textColor="#333",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="calculated",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="calculated",this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor="calculated",this.taskTextOutsideColor=this.taskTextDarkColor,this.taskTextClickableColor="calculated",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBorderColor="calculated",this.critBkgColor="calculated",this.todayLineColor="calculated",this.sectionBkgColor=y(102,102,255,.49),this.altSectionBkgColor="white",this.sectionBkgColor2="#fff400",this.taskBorderColor="#534fbc",this.taskBkgColor="#8a90dd",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="#534fbc",this.activeTaskBkgColor="#bfc7ff",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222",this.updateColors()}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,l:-(7+5*t)});if(this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor,"calculated"!==this.labelTextColor){this.cScaleLabel0=this.cScaleLabel0||b(this.labelTextColor),this.cScaleLabel3=this.cScaleLabel3||b(this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.labelTextColor}this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.textColor,this.edgeLabelBackground=this.labelBackground,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.signalColor=this.textColor,this.signalTextColor=this.textColor,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||f(this.tertiaryColor,{l:-40}),this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-20}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-20}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-40}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:-40}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-40}),this.pie11=this.pie11||f(this.primaryColor,{h:-90,l:-40}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-30}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.labelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||(0,_.Z)(b(this.git0),25),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.gitBranchLabel0=this.gitBranchLabel0||b(this.labelTextColor),this.gitBranchLabel1=this.gitBranchLabel1||this.labelTextColor,this.gitBranchLabel2=this.gitBranchLabel2||this.labelTextColor,this.gitBranchLabel3=this.gitBranchLabel3||b(this.labelTextColor),this.gitBranchLabel4=this.gitBranchLabel4||this.labelTextColor,this.gitBranchLabel5=this.gitBranchLabel5||this.labelTextColor,this.gitBranchLabel6=this.gitBranchLabel6||this.labelTextColor,this.gitBranchLabel7=this.gitBranchLabel7||this.labelTextColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},forest:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#cde498",this.secondaryColor="#cdffb2",this.background="white",this.mainBkg="#cde498",this.secondBkg="#cdffb2",this.lineColor="green",this.border1="#13540c",this.border2="#6eaa49",this.arrowheadColor="green",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.tertiaryColor=(0,x.Z)("#cde498",10),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.primaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#333",this.edgeLabelBackground="#e8e8e8",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="#333",this.signalTextColor="#333",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="#326932",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="#6eaa49",this.altSectionBkgColor="white",this.sectionBkgColor2="#6eaa49",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="#487e3a",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.actorBorder=(0,_.Z)(this.mainBkg,20),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskBorderColor=this.border1,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-30}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{h:40,l:-40}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-50}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-50}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-50}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},neutral:{getThemeVariables:t=>{const e=new qt;return e.calculate(t),e}}},Vt={theme:"default",themeVariables:Ht.default.getThemeVariables(),themeCSS:void 0,maxTextSize:5e4,darkMode:!1,fontFamily:'"trebuchet ms", verdana, arial, sans-serif;',logLevel:5,securityLevel:"strict",startOnLoad:!0,arrowMarkerAbsolute:!1,secure:["secure","securityLevel","startOnLoad","maxTextSize"],deterministicIds:!1,deterministicIDSeed:void 0,flowchart:{titleTopMargin:25,diagramPadding:8,htmlLabels:!0,nodeSpacing:50,rankSpacing:50,curve:"basis",padding:15,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},sequence:{hideUnusedParticipants:!1,activationWidth:10,diagramMarginX:50,diagramMarginY:10,actorMargin:50,width:150,height:65,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",mirrorActors:!0,forceMenus:!1,bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,showSequenceNumbers:!1,actorFontSize:14,actorFontFamily:'"Open Sans", sans-serif',actorFontWeight:400,noteFontSize:14,noteFontFamily:'"trebuchet ms", verdana, arial, sans-serif',noteFontWeight:400,noteAlign:"center",messageFontSize:16,messageFontFamily:'"trebuchet ms", verdana, arial, sans-serif',messageFontWeight:400,wrap:!1,wrapPadding:10,labelBoxWidth:50,labelBoxHeight:20,messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},noteFont:function(){return{fontFamily:this.noteFontFamily,fontSize:this.noteFontSize,fontWeight:this.noteFontWeight}},actorFont:function(){return{fontFamily:this.actorFontFamily,fontSize:this.actorFontSize,fontWeight:this.actorFontWeight}}},gantt:{titleTopMargin:25,barHeight:20,barGap:4,topPadding:50,rightPadding:75,leftPadding:75,gridLineStartPadding:35,fontSize:11,sectionFontSize:11,numberSectionStyles:4,axisFormat:"%Y-%m-%d",tickInterval:void 0,useMaxWidth:!0,topAxis:!1,useWidth:void 0},journey:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"]},timeline:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"],disableMulticolor:!1},class:{titleTopMargin:25,arrowMarkerAbsolute:!1,dividerMargin:10,padding:5,textHeight:10,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},state:{titleTopMargin:25,dividerMargin:10,sizeUnit:5,padding:8,textHeight:10,titleShift:-15,noteMargin:10,forkWidth:70,forkHeight:7,miniPadding:2,fontSizeFactor:5.02,fontSize:24,labelHeight:16,edgeLengthFactor:"20",compositTitleSize:35,radius:5,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},er:{titleTopMargin:25,diagramPadding:20,layoutDirection:"TB",minEntityWidth:100,minEntityHeight:75,entityPadding:15,stroke:"gray",fill:"honeydew",fontSize:12,useMaxWidth:!0},pie:{useWidth:void 0,useMaxWidth:!0},requirement:{useWidth:void 0,useMaxWidth:!0,rect_fill:"#f9f9f9",text_color:"#333",rect_border_size:"0.5px",rect_border_color:"#bbb",rect_min_width:200,rect_min_height:200,fontSize:14,rect_padding:10,line_height:20},gitGraph:{titleTopMargin:25,diagramPadding:8,nodeLabel:{width:75,height:100,x:-25,y:0},mainBranchName:"main",mainBranchOrder:0,showCommitLabel:!0,showBranches:!0,rotateCommitLabel:!0},c4:{useWidth:void 0,diagramMarginX:50,diagramMarginY:10,c4ShapeMargin:50,c4ShapePadding:20,width:216,height:60,boxMargin:10,useMaxWidth:!0,c4ShapeInRow:4,nextLinePaddingX:0,c4BoundaryInRow:2,personFontSize:14,personFontFamily:'"Open Sans", sans-serif',personFontWeight:"normal",external_personFontSize:14,external_personFontFamily:'"Open Sans", sans-serif',external_personFontWeight:"normal",systemFontSize:14,systemFontFamily:'"Open Sans", sans-serif',systemFontWeight:"normal",external_systemFontSize:14,external_systemFontFamily:'"Open Sans", sans-serif',external_systemFontWeight:"normal",system_dbFontSize:14,system_dbFontFamily:'"Open Sans", sans-serif',system_dbFontWeight:"normal",external_system_dbFontSize:14,external_system_dbFontFamily:'"Open Sans", sans-serif',external_system_dbFontWeight:"normal",system_queueFontSize:14,system_queueFontFamily:'"Open Sans", sans-serif',system_queueFontWeight:"normal",external_system_queueFontSize:14,external_system_queueFontFamily:'"Open Sans", sans-serif',external_system_queueFontWeight:"normal",boundaryFontSize:14,boundaryFontFamily:'"Open Sans", sans-serif',boundaryFontWeight:"normal",messageFontSize:12,messageFontFamily:'"Open Sans", sans-serif',messageFontWeight:"normal",containerFontSize:14,containerFontFamily:'"Open Sans", sans-serif',containerFontWeight:"normal",external_containerFontSize:14,external_containerFontFamily:'"Open Sans", sans-serif',external_containerFontWeight:"normal",container_dbFontSize:14,container_dbFontFamily:'"Open Sans", sans-serif',container_dbFontWeight:"normal",external_container_dbFontSize:14,external_container_dbFontFamily:'"Open Sans", sans-serif',external_container_dbFontWeight:"normal",container_queueFontSize:14,container_queueFontFamily:'"Open Sans", sans-serif',container_queueFontWeight:"normal",external_container_queueFontSize:14,external_container_queueFontFamily:'"Open Sans", sans-serif',external_container_queueFontWeight:"normal",componentFontSize:14,componentFontFamily:'"Open Sans", sans-serif',componentFontWeight:"normal",external_componentFontSize:14,external_componentFontFamily:'"Open Sans", sans-serif',external_componentFontWeight:"normal",component_dbFontSize:14,component_dbFontFamily:'"Open Sans", sans-serif',component_dbFontWeight:"normal",external_component_dbFontSize:14,external_component_dbFontFamily:'"Open Sans", sans-serif',external_component_dbFontWeight:"normal",component_queueFontSize:14,component_queueFontFamily:'"Open Sans", sans-serif',component_queueFontWeight:"normal",external_component_queueFontSize:14,external_component_queueFontFamily:'"Open Sans", sans-serif',external_component_queueFontWeight:"normal",wrap:!0,wrapPadding:10,personFont:function(){return{fontFamily:this.personFontFamily,fontSize:this.personFontSize,fontWeight:this.personFontWeight}},external_personFont:function(){return{fontFamily:this.external_personFontFamily,fontSize:this.external_personFontSize,fontWeight:this.external_personFontWeight}},systemFont:function(){return{fontFamily:this.systemFontFamily,fontSize:this.systemFontSize,fontWeight:this.systemFontWeight}},external_systemFont:function(){return{fontFamily:this.external_systemFontFamily,fontSize:this.external_systemFontSize,fontWeight:this.external_systemFontWeight}},system_dbFont:function(){return{fontFamily:this.system_dbFontFamily,fontSize:this.system_dbFontSize,fontWeight:this.system_dbFontWeight}},external_system_dbFont:function(){return{fontFamily:this.external_system_dbFontFamily,fontSize:this.external_system_dbFontSize,fontWeight:this.external_system_dbFontWeight}},system_queueFont:function(){return{fontFamily:this.system_queueFontFamily,fontSize:this.system_queueFontSize,fontWeight:this.system_queueFontWeight}},external_system_queueFont:function(){return{fontFamily:this.external_system_queueFontFamily,fontSize:this.external_system_queueFontSize,fontWeight:this.external_system_queueFontWeight}},containerFont:function(){return{fontFamily:this.containerFontFamily,fontSize:this.containerFontSize,fontWeight:this.containerFontWeight}},external_containerFont:function(){return{fontFamily:this.external_containerFontFamily,fontSize:this.external_containerFontSize,fontWeight:this.external_containerFontWeight}},container_dbFont:function(){return{fontFamily:this.container_dbFontFamily,fontSize:this.container_dbFontSize,fontWeight:this.container_dbFontWeight}},external_container_dbFont:function(){return{fontFamily:this.external_container_dbFontFamily,fontSize:this.external_container_dbFontSize,fontWeight:this.external_container_dbFontWeight}},container_queueFont:function(){return{fontFamily:this.container_queueFontFamily,fontSize:this.container_queueFontSize,fontWeight:this.container_queueFontWeight}},external_container_queueFont:function(){return{fontFamily:this.external_container_queueFontFamily,fontSize:this.external_container_queueFontSize,fontWeight:this.external_container_queueFontWeight}},componentFont:function(){return{fontFamily:this.componentFontFamily,fontSize:this.componentFontSize,fontWeight:this.componentFontWeight}},external_componentFont:function(){return{fontFamily:this.external_componentFontFamily,fontSize:this.external_componentFontSize,fontWeight:this.external_componentFontWeight}},component_dbFont:function(){return{fontFamily:this.component_dbFontFamily,fontSize:this.component_dbFontSize,fontWeight:this.component_dbFontWeight}},external_component_dbFont:function(){return{fontFamily:this.external_component_dbFontFamily,fontSize:this.external_component_dbFontSize,fontWeight:this.external_component_dbFontWeight}},component_queueFont:function(){return{fontFamily:this.component_queueFontFamily,fontSize:this.component_queueFontSize,fontWeight:this.component_queueFontWeight}},external_component_queueFont:function(){return{fontFamily:this.external_component_queueFontFamily,fontSize:this.external_component_queueFontSize,fontWeight:this.external_component_queueFontWeight}},boundaryFont:function(){return{fontFamily:this.boundaryFontFamily,fontSize:this.boundaryFontSize,fontWeight:this.boundaryFontWeight}},messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},person_bg_color:"#08427B",person_border_color:"#073B6F",external_person_bg_color:"#686868",external_person_border_color:"#8A8A8A",system_bg_color:"#1168BD",system_border_color:"#3C7FC0",system_db_bg_color:"#1168BD",system_db_border_color:"#3C7FC0",system_queue_bg_color:"#1168BD",system_queue_border_color:"#3C7FC0",external_system_bg_color:"#999999",external_system_border_color:"#8A8A8A",external_system_db_bg_color:"#999999",external_system_db_border_color:"#8A8A8A",external_system_queue_bg_color:"#999999",external_system_queue_border_color:"#8A8A8A",container_bg_color:"#438DD5",container_border_color:"#3C7FC0",container_db_bg_color:"#438DD5",container_db_border_color:"#3C7FC0",container_queue_bg_color:"#438DD5",container_queue_border_color:"#3C7FC0",external_container_bg_color:"#B3B3B3",external_container_border_color:"#A6A6A6",external_container_db_bg_color:"#B3B3B3",external_container_db_border_color:"#A6A6A6",external_container_queue_bg_color:"#B3B3B3",external_container_queue_border_color:"#A6A6A6",component_bg_color:"#85BBF0",component_border_color:"#78A8D8",component_db_bg_color:"#85BBF0",component_db_border_color:"#78A8D8",component_queue_bg_color:"#85BBF0",component_queue_border_color:"#78A8D8",external_component_bg_color:"#CCCCCC",external_component_border_color:"#BFBFBF",external_component_db_bg_color:"#CCCCCC",external_component_db_border_color:"#BFBFBF",external_component_queue_bg_color:"#CCCCCC",external_component_queue_border_color:"#BFBFBF"},mindmap:{useMaxWidth:!0,padding:10,maxNodeWidth:200},fontSize:16};Vt.class&&(Vt.class.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute),Vt.gitGraph&&(Vt.gitGraph.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute);const Gt=(t,e="")=>Object.keys(t).reduce(((n,r)=>Array.isArray(t[r])?n:"object"==typeof t[r]&&null!==t[r]?[...n,e+r,...Gt(t[r],"")]:[...n,e+r]),[]),Xt=Gt(Vt,""),Kt=Vt;function Qt(t){return null==t}var Jt={isNothing:Qt,isObject:function(t){return"object"==typeof t&&null!==t},toArray:function(t){return Array.isArray(t)?t:Qt(t)?[]:[t]},repeat:function(t,e){var n,r="";for(n=0;n<e;n+=1)r+=t;return r},isNegativeZero:function(t){return 0===t&&Number.NEGATIVE_INFINITY===1/t},extend:function(t,e){var n,r,i,a;if(e)for(n=0,r=(a=Object.keys(e)).length;n<r;n+=1)t[i=a[n]]=e[i];return t}};function te(t,e){var n="",r=t.reason||"(unknown reason)";return t.mark?(t.mark.name&&(n+='in "'+t.mark.name+'" '),n+="("+(t.mark.line+1)+":"+(t.mark.column+1)+")",!e&&t.mark.snippet&&(n+="\n\n"+t.mark.snippet),r+" "+n):r}function ee(t,e){Error.call(this),this.name="YAMLException",this.reason=t,this.mark=e,this.message=te(this,!1),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=(new Error).stack||""}ee.prototype=Object.create(Error.prototype),ee.prototype.constructor=ee,ee.prototype.toString=function(t){return this.name+": "+te(this,t)};var ne=ee;function re(t,e,n,r,i){var a="",s="",o=Math.floor(i/2)-1;return r-e>o&&(e=r-o+(a=" ... ").length),n-r>o&&(n=r+o-(s=" ...").length),{str:a+t.slice(e,n).replace(/\t/g,"\u2192")+s,pos:r-e+a.length}}function ie(t,e){return Jt.repeat(" ",e-t.length)+t}var ae=function(t,e){if(e=Object.create(e||null),!t.buffer)return null;e.maxLength||(e.maxLength=79),"number"!=typeof e.indent&&(e.indent=1),"number"!=typeof e.linesBefore&&(e.linesBefore=3),"number"!=typeof e.linesAfter&&(e.linesAfter=2);for(var n,r=/\r?\n|\r|\0/g,i=[0],a=[],s=-1;n=r.exec(t.buffer);)a.push(n.index),i.push(n.index+n[0].length),t.position<=n.index&&s<0&&(s=i.length-2);s<0&&(s=i.length-1);var o,c,l="",h=Math.min(t.line+e.linesAfter,a.length).toString().length,u=e.maxLength-(e.indent+h+3);for(o=1;o<=e.linesBefore&&!(s-o<0);o++)c=re(t.buffer,i[s-o],a[s-o],t.position-(i[s]-i[s-o]),u),l=Jt.repeat(" ",e.indent)+ie((t.line-o+1).toString(),h)+" | "+c.str+"\n"+l;for(c=re(t.buffer,i[s],a[s],t.position,u),l+=Jt.repeat(" ",e.indent)+ie((t.line+1).toString(),h)+" | "+c.str+"\n",l+=Jt.repeat("-",e.indent+h+3+c.pos)+"^\n",o=1;o<=e.linesAfter&&!(s+o>=a.length);o++)c=re(t.buffer,i[s+o],a[s+o],t.position-(i[s]-i[s+o]),u),l+=Jt.repeat(" ",e.indent)+ie((t.line+o+1).toString(),h)+" | "+c.str+"\n";return l.replace(/\n$/,"")},se=["kind","multi","resolve","construct","instanceOf","predicate","represent","representName","defaultStyle","styleAliases"],oe=["scalar","sequence","mapping"];var ce=function(t,e){var n,r;if(e=e||{},Object.keys(e).forEach((function(e){if(-1===se.indexOf(e))throw new ne('Unknown option "'+e+'" is met in definition of "'+t+'" YAML type.')})),this.options=e,this.tag=t,this.kind=e.kind||null,this.resolve=e.resolve||function(){return!0},this.construct=e.construct||function(t){return t},this.instanceOf=e.instanceOf||null,this.predicate=e.predicate||null,this.represent=e.represent||null,this.representName=e.representName||null,this.defaultStyle=e.defaultStyle||null,this.multi=e.multi||!1,this.styleAliases=(n=e.styleAliases||null,r={},null!==n&&Object.keys(n).forEach((function(t){n[t].forEach((function(e){r[String(e)]=t}))})),r),-1===oe.indexOf(this.kind))throw new ne('Unknown kind "'+this.kind+'" is specified for "'+t+'" YAML type.')};function le(t,e){var n=[];return t[e].forEach((function(t){var e=n.length;n.forEach((function(n,r){n.tag===t.tag&&n.kind===t.kind&&n.multi===t.multi&&(e=r)})),n[e]=t})),n}function he(t){return this.extend(t)}he.prototype.extend=function(t){var e=[],n=[];if(t instanceof ce)n.push(t);else if(Array.isArray(t))n=n.concat(t);else{if(!t||!Array.isArray(t.implicit)&&!Array.isArray(t.explicit))throw new ne("Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })");t.implicit&&(e=e.concat(t.implicit)),t.explicit&&(n=n.concat(t.explicit))}e.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.");if(t.loadKind&&"scalar"!==t.loadKind)throw new ne("There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.");if(t.multi)throw new ne("There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.")})),n.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.")}));var r=Object.create(he.prototype);return r.implicit=(this.implicit||[]).concat(e),r.explicit=(this.explicit||[]).concat(n),r.compiledImplicit=le(r,"implicit"),r.compiledExplicit=le(r,"explicit"),r.compiledTypeMap=function(){var t,e,n={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}};function r(t){t.multi?(n.multi[t.kind].push(t),n.multi.fallback.push(t)):n[t.kind][t.tag]=n.fallback[t.tag]=t}for(t=0,e=arguments.length;t<e;t+=1)arguments[t].forEach(r);return n}(r.compiledImplicit,r.compiledExplicit),r};var ue=new he({explicit:[new ce("tag:yaml.org,2002:str",{kind:"scalar",construct:function(t){return null!==t?t:""}}),new ce("tag:yaml.org,2002:seq",{kind:"sequence",construct:function(t){return null!==t?t:[]}}),new ce("tag:yaml.org,2002:map",{kind:"mapping",construct:function(t){return null!==t?t:{}}})]});var de=new ce("tag:yaml.org,2002:null",{kind:"scalar",resolve:function(t){if(null===t)return!0;var e=t.length;return 1===e&&"~"===t||4===e&&("null"===t||"Null"===t||"NULL"===t)},construct:function(){return null},predicate:function(t){return null===t},represent:{canonical:function(){return"~"},lowercase:function(){return"null"},uppercase:function(){return"NULL"},camelcase:function(){return"Null"},empty:function(){return""}},defaultStyle:"lowercase"});var pe=new ce("tag:yaml.org,2002:bool",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e=t.length;return 4===e&&("true"===t||"True"===t||"TRUE"===t)||5===e&&("false"===t||"False"===t||"FALSE"===t)},construct:function(t){return"true"===t||"True"===t||"TRUE"===t},predicate:function(t){return"[object Boolean]"===Object.prototype.toString.call(t)},represent:{lowercase:function(t){return t?"true":"false"},uppercase:function(t){return t?"TRUE":"FALSE"},camelcase:function(t){return t?"True":"False"}},defaultStyle:"lowercase"});function fe(t){return 48<=t&&t<=55}function ge(t){return 48<=t&&t<=57}var ye=new ce("tag:yaml.org,2002:int",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=t.length,i=0,a=!1;if(!r)return!1;if("-"!==(e=t[i])&&"+"!==e||(e=t[++i]),"0"===e){if(i+1===r)return!0;if("b"===(e=t[++i])){for(i++;i<r;i++)if("_"!==(e=t[i])){if("0"!==e&&"1"!==e)return!1;a=!0}return a&&"_"!==e}if("x"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!(48<=(n=t.charCodeAt(i))&&n<=57||65<=n&&n<=70||97<=n&&n<=102))return!1;a=!0}return a&&"_"!==e}if("o"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!fe(t.charCodeAt(i)))return!1;a=!0}return a&&"_"!==e}}if("_"===e)return!1;for(;i<r;i++)if("_"!==(e=t[i])){if(!ge(t.charCodeAt(i)))return!1;a=!0}return!(!a||"_"===e)},construct:function(t){var e,n=t,r=1;if(-1!==n.indexOf("_")&&(n=n.replace(/_/g,"")),"-"!==(e=n[0])&&"+"!==e||("-"===e&&(r=-1),e=(n=n.slice(1))[0]),"0"===n)return 0;if("0"===e){if("b"===n[1])return r*parseInt(n.slice(2),2);if("x"===n[1])return r*parseInt(n.slice(2),16);if("o"===n[1])return r*parseInt(n.slice(2),8)}return r*parseInt(n,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&t%1==0&&!Jt.isNegativeZero(t)},represent:{binary:function(t){return t>=0?"0b"+t.toString(2):"-0b"+t.toString(2).slice(1)},octal:function(t){return t>=0?"0o"+t.toString(8):"-0o"+t.toString(8).slice(1)},decimal:function(t){return t.toString(10)},hexadecimal:function(t){return t>=0?"0x"+t.toString(16).toUpperCase():"-0x"+t.toString(16).toUpperCase().slice(1)}},defaultStyle:"decimal",styleAliases:{binary:[2,"bin"],octal:[8,"oct"],decimal:[10,"dec"],hexadecimal:[16,"hex"]}}),me=new RegExp("^(?:[-+]?(?:[0-9][0-9_]*)(?:\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\.(?:inf|Inf|INF)|\\.(?:nan|NaN|NAN))$");var be=/^[-+]?[0-9]+e/;var _e=new ce("tag:yaml.org,2002:float",{kind:"scalar",resolve:function(t){return null!==t&&!(!me.test(t)||"_"===t[t.length-1])},construct:function(t){var e,n;return n="-"===(e=t.replace(/_/g,"").toLowerCase())[0]?-1:1,"+-".indexOf(e[0])>=0&&(e=e.slice(1)),".inf"===e?1===n?Number.POSITIVE_INFINITY:Number.NEGATIVE_INFINITY:".nan"===e?NaN:n*parseFloat(e,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&(t%1!=0||Jt.isNegativeZero(t))},represent:function(t,e){var n;if(isNaN(t))switch(e){case"lowercase":return".nan";case"uppercase":return".NAN";case"camelcase":return".NaN"}else if(Number.POSITIVE_INFINITY===t)switch(e){case"lowercase":return".inf";case"uppercase":return".INF";case"camelcase":return".Inf"}else if(Number.NEGATIVE_INFINITY===t)switch(e){case"lowercase":return"-.inf";case"uppercase":return"-.INF";case"camelcase":return"-.Inf"}else if(Jt.isNegativeZero(t))return"-0.0";return n=t.toString(10),be.test(n)?n.replace("e",".e"):n},defaultStyle:"lowercase"}),xe=ue.extend({implicit:[de,pe,ye,_e]}),ve=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$"),ke=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\.([0-9]*))?(?:[ \\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$");var we=new ce("tag:yaml.org,2002:timestamp",{kind:"scalar",resolve:function(t){return null!==t&&(null!==ve.exec(t)||null!==ke.exec(t))},construct:function(t){var e,n,r,i,a,s,o,c,l=0,h=null;if(null===(e=ve.exec(t))&&(e=ke.exec(t)),null===e)throw new Error("Date resolve error");if(n=+e[1],r=+e[2]-1,i=+e[3],!e[4])return new Date(Date.UTC(n,r,i));if(a=+e[4],s=+e[5],o=+e[6],e[7]){for(l=e[7].slice(0,3);l.length<3;)l+="0";l=+l}return e[9]&&(h=6e4*(60*+e[10]+ +(e[11]||0)),"-"===e[9]&&(h=-h)),c=new Date(Date.UTC(n,r,i,a,s,o,l)),h&&c.setTime(c.getTime()-h),c},instanceOf:Date,represent:function(t){return t.toISOString()}});var Ee=new ce("tag:yaml.org,2002:merge",{kind:"scalar",resolve:function(t){return"<<"===t||null===t}}),Ce="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\n\r";var Te=new ce("tag:yaml.org,2002:binary",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=0,i=t.length,a=Ce;for(n=0;n<i;n++)if(!((e=a.indexOf(t.charAt(n)))>64)){if(e<0)return!1;r+=6}return r%8==0},construct:function(t){var e,n,r=t.replace(/[\r\n=]/g,""),i=r.length,a=Ce,s=0,o=[];for(e=0;e<i;e++)e%4==0&&e&&(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)),s=s<<6|a.indexOf(r.charAt(e));return 0===(n=i%4*6)?(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)):18===n?(o.push(s>>10&255),o.push(s>>2&255)):12===n&&o.push(s>>4&255),new Uint8Array(o)},predicate:function(t){return"[object Uint8Array]"===Object.prototype.toString.call(t)},represent:function(t){var e,n,r="",i=0,a=t.length,s=Ce;for(e=0;e<a;e++)e%3==0&&e&&(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]),i=(i<<8)+t[e];return 0===(n=a%3)?(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]):2===n?(r+=s[i>>10&63],r+=s[i>>4&63],r+=s[i<<2&63],r+=s[64]):1===n&&(r+=s[i>>2&63],r+=s[i<<4&63],r+=s[64],r+=s[64]),r}}),Se=Object.prototype.hasOwnProperty,Ae=Object.prototype.toString;var Le=new ce("tag:yaml.org,2002:omap",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=[],o=t;for(e=0,n=o.length;e<n;e+=1){if(r=o[e],a=!1,"[object Object]"!==Ae.call(r))return!1;for(i in r)if(Se.call(r,i)){if(a)return!1;a=!0}if(!a)return!1;if(-1!==s.indexOf(i))return!1;s.push(i)}return!0},construct:function(t){return null!==t?t:[]}}),Be=Object.prototype.toString;var Ne=new ce("tag:yaml.org,2002:pairs",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1){if(r=s[e],"[object Object]"!==Be.call(r))return!1;if(1!==(i=Object.keys(r)).length)return!1;a[e]=[i[0],r[i[0]]]}return!0},construct:function(t){if(null===t)return[];var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1)r=s[e],i=Object.keys(r),a[e]=[i[0],r[i[0]]];return a}}),De=Object.prototype.hasOwnProperty;var Oe=new ce("tag:yaml.org,2002:set",{kind:"mapping",resolve:function(t){if(null===t)return!0;var e,n=t;for(e in n)if(De.call(n,e)&&null!==n[e])return!1;return!0},construct:function(t){return null!==t?t:{}}}),Me=xe.extend({implicit:[we,Ee],explicit:[Te,Le,Ne,Oe]}),Ie=Object.prototype.hasOwnProperty,Fe=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x84\x86-\x9F\uFFFE\uFFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/,$e=/[\x85\u2028\u2029]/,Re=/[,\[\]\{\}]/,Ze=/^(?:!|!!|![a-z\-]+!)$/i,Pe=/^(?:!|[^,\[\]\{\}])(?:%[0-9a-f]{2}|[0-9a-z\-#;\/\?:@&=\+\$,_\.!~\*'\(\)\[\]])*$/i;function je(t){return Object.prototype.toString.call(t)}function Ye(t){return 10===t||13===t}function ze(t){return 9===t||32===t}function Ue(t){return 9===t||32===t||10===t||13===t}function We(t){return 44===t||91===t||93===t||123===t||125===t}function qe(t){var e;return 48<=t&&t<=57?t-48:97<=(e=32|t)&&e<=102?e-97+10:-1}function He(t){return 48===t?"\0":97===t?"\x07":98===t?"\b":116===t||9===t?"\t":110===t?"\n":118===t?"\v":102===t?"\f":114===t?"\r":101===t?"\x1b":32===t?" ":34===t?'"':47===t?"/":92===t?"\\":78===t?"\x85":95===t?"\xa0":76===t?"\u2028":80===t?"\u2029":""}function Ve(t){return t<=65535?String.fromCharCode(t):String.fromCharCode(55296+(t-65536>>10),56320+(t-65536&1023))}for(var Ge=new Array(256),Xe=new Array(256),Ke=0;Ke<256;Ke++)Ge[Ke]=He(Ke)?1:0,Xe[Ke]=He(Ke);function Qe(t,e){this.input=t,this.filename=e.filename||null,this.schema=e.schema||Me,this.onWarning=e.onWarning||null,this.legacy=e.legacy||!1,this.json=e.json||!1,this.listener=e.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=t.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Je(t,e){var n={name:t.filename,buffer:t.input.slice(0,-1),position:t.position,line:t.line,column:t.position-t.lineStart};return n.snippet=ae(n),new ne(e,n)}function tn(t,e){throw Je(t,e)}function en(t,e){t.onWarning&&t.onWarning.call(null,Je(t,e))}var nn={YAML:function(t,e,n){var r,i,a;null!==t.version&&tn(t,"duplication of %YAML directive"),1!==n.length&&tn(t,"YAML directive accepts exactly one argument"),null===(r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]))&&tn(t,"ill-formed argument of the YAML directive"),i=parseInt(r[1],10),a=parseInt(r[2],10),1!==i&&tn(t,"unacceptable YAML version of the document"),t.version=n[0],t.checkLineBreaks=a<2,1!==a&&2!==a&&en(t,"unsupported YAML version of the document")},TAG:function(t,e,n){var r,i;2!==n.length&&tn(t,"TAG directive accepts exactly two arguments"),r=n[0],i=n[1],Ze.test(r)||tn(t,"ill-formed tag handle (first argument) of the TAG directive"),Ie.call(t.tagMap,r)&&tn(t,'there is a previously declared suffix for "'+r+'" tag handle'),Pe.test(i)||tn(t,"ill-formed tag prefix (second argument) of the TAG directive");try{i=decodeURIComponent(i)}catch(a){tn(t,"tag prefix is malformed: "+i)}t.tagMap[r]=i}};function rn(t,e,n,r){var i,a,s,o;if(e<n){if(o=t.input.slice(e,n),r)for(i=0,a=o.length;i<a;i+=1)9===(s=o.charCodeAt(i))||32<=s&&s<=1114111||tn(t,"expected valid JSON character");else Fe.test(o)&&tn(t,"the stream contains non-printable characters");t.result+=o}}function an(t,e,n,r){var i,a,s,o;for(Jt.isObject(n)||tn(t,"cannot merge mappings; the provided source object is unacceptable"),s=0,o=(i=Object.keys(n)).length;s<o;s+=1)a=i[s],Ie.call(e,a)||(e[a]=n[a],r[a]=!0)}function sn(t,e,n,r,i,a,s,o,c){var l,h;if(Array.isArray(i))for(l=0,h=(i=Array.prototype.slice.call(i)).length;l<h;l+=1)Array.isArray(i[l])&&tn(t,"nested arrays are not supported inside keys"),"object"==typeof i&&"[object Object]"===je(i[l])&&(i[l]="[object Object]");if("object"==typeof i&&"[object Object]"===je(i)&&(i="[object Object]"),i=String(i),null===e&&(e={}),"tag:yaml.org,2002:merge"===r)if(Array.isArray(a))for(l=0,h=a.length;l<h;l+=1)an(t,e,a[l],n);else an(t,e,a,n);else t.json||Ie.call(n,i)||!Ie.call(e,i)||(t.line=s||t.line,t.lineStart=o||t.lineStart,t.position=c||t.position,tn(t,"duplicated mapping key")),"__proto__"===i?Object.defineProperty(e,i,{configurable:!0,enumerable:!0,writable:!0,value:a}):e[i]=a,delete n[i];return e}function on(t){var e;10===(e=t.input.charCodeAt(t.position))?t.position++:13===e?(t.position++,10===t.input.charCodeAt(t.position)&&t.position++):tn(t,"a line break is expected"),t.line+=1,t.lineStart=t.position,t.firstTabInLine=-1}function cn(t,e,n){for(var r=0,i=t.input.charCodeAt(t.position);0!==i;){for(;ze(i);)9===i&&-1===t.firstTabInLine&&(t.firstTabInLine=t.position),i=t.input.charCodeAt(++t.position);if(e&&35===i)do{i=t.input.charCodeAt(++t.position)}while(10!==i&&13!==i&&0!==i);if(!Ye(i))break;for(on(t),i=t.input.charCodeAt(t.position),r++,t.lineIndent=0;32===i;)t.lineIndent++,i=t.input.charCodeAt(++t.position)}return-1!==n&&0!==r&&t.lineIndent<n&&en(t,"deficient indentation"),r}function ln(t){var e,n=t.position;return!(45!==(e=t.input.charCodeAt(n))&&46!==e||e!==t.input.charCodeAt(n+1)||e!==t.input.charCodeAt(n+2)||(n+=3,0!==(e=t.input.charCodeAt(n))&&!Ue(e)))}function hn(t,e){1===e?t.result+=" ":e>1&&(t.result+=Jt.repeat("\n",e-1))}function un(t,e){var n,r,i=t.tag,a=t.anchor,s=[],o=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=s),r=t.input.charCodeAt(t.position);0!==r&&(-1!==t.firstTabInLine&&(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),45===r)&&Ue(t.input.charCodeAt(t.position+1));)if(o=!0,t.position++,cn(t,!0,-1)&&t.lineIndent<=e)s.push(null),r=t.input.charCodeAt(t.position);else if(n=t.line,fn(t,e,3,!1,!0),s.push(t.result),cn(t,!0,-1),r=t.input.charCodeAt(t.position),(t.line===n||t.lineIndent>e)&&0!==r)tn(t,"bad indentation of a sequence entry");else if(t.lineIndent<e)break;return!!o&&(t.tag=i,t.anchor=a,t.kind="sequence",t.result=s,!0)}function dn(t){var e,n,r,i,a=!1,s=!1;if(33!==(i=t.input.charCodeAt(t.position)))return!1;if(null!==t.tag&&tn(t,"duplication of a tag property"),60===(i=t.input.charCodeAt(++t.position))?(a=!0,i=t.input.charCodeAt(++t.position)):33===i?(s=!0,n="!!",i=t.input.charCodeAt(++t.position)):n="!",e=t.position,a){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&62!==i);t.position<t.length?(r=t.input.slice(e,t.position),i=t.input.charCodeAt(++t.position)):tn(t,"unexpected end of the stream within a verbatim tag")}else{for(;0!==i&&!Ue(i);)33===i&&(s?tn(t,"tag suffix cannot contain exclamation marks"):(n=t.input.slice(e-1,t.position+1),Ze.test(n)||tn(t,"named tag handle cannot contain such characters"),s=!0,e=t.position+1)),i=t.input.charCodeAt(++t.position);r=t.input.slice(e,t.position),Re.test(r)&&tn(t,"tag suffix cannot contain flow indicator characters")}r&&!Pe.test(r)&&tn(t,"tag name cannot contain such characters: "+r);try{r=decodeURIComponent(r)}catch(o){tn(t,"tag name is malformed: "+r)}return a?t.tag=r:Ie.call(t.tagMap,n)?t.tag=t.tagMap[n]+r:"!"===n?t.tag="!"+r:"!!"===n?t.tag="tag:yaml.org,2002:"+r:tn(t,'undeclared tag handle "'+n+'"'),!0}function pn(t){var e,n;if(38!==(n=t.input.charCodeAt(t.position)))return!1;for(null!==t.anchor&&tn(t,"duplication of an anchor property"),n=t.input.charCodeAt(++t.position),e=t.position;0!==n&&!Ue(n)&&!We(n);)n=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an anchor node must contain at least one character"),t.anchor=t.input.slice(e,t.position),!0}function fn(t,e,n,r,i){var a,s,o,c,l,h,u,d,p,f=1,g=!1,y=!1;if(null!==t.listener&&t.listener("open",t),t.tag=null,t.anchor=null,t.kind=null,t.result=null,a=s=o=4===n||3===n,r&&cn(t,!0,-1)&&(g=!0,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)),1===f)for(;dn(t)||pn(t);)cn(t,!0,-1)?(g=!0,o=a,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)):o=!1;if(o&&(o=g||i),1!==f&&4!==n||(d=1===n||2===n?e:e+1,p=t.position-t.lineStart,1===f?o&&(un(t,p)||function(t,e,n){var r,i,a,s,o,c,l,h=t.tag,u=t.anchor,d={},p=Object.create(null),f=null,g=null,y=null,m=!1,b=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=d),l=t.input.charCodeAt(t.position);0!==l;){if(m||-1===t.firstTabInLine||(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),r=t.input.charCodeAt(t.position+1),a=t.line,63!==l&&58!==l||!Ue(r)){if(s=t.line,o=t.lineStart,c=t.position,!fn(t,n,2,!1,!0))break;if(t.line===a){for(l=t.input.charCodeAt(t.position);ze(l);)l=t.input.charCodeAt(++t.position);if(58===l)Ue(l=t.input.charCodeAt(++t.position))||tn(t,"a whitespace character is expected after the key-value separator within a block mapping"),m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!1,i=!1,f=t.tag,g=t.result;else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read an implicit mapping pair; a colon is missed")}}else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read a block mapping entry; a multiline key may not be an implicit key")}}else 63===l?(m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!0,i=!0):m?(m=!1,i=!0):tn(t,"incomplete explicit mapping pair; a key node is missed; or followed by a non-tabulated empty line"),t.position+=1,l=r;if((t.line===a||t.lineIndent>e)&&(m&&(s=t.line,o=t.lineStart,c=t.position),fn(t,e,4,!0,i)&&(m?g=t.result:y=t.result),m||(sn(t,d,p,f,g,y,s,o,c),f=g=y=null),cn(t,!0,-1),l=t.input.charCodeAt(t.position)),(t.line===a||t.lineIndent>e)&&0!==l)tn(t,"bad indentation of a mapping entry");else if(t.lineIndent<e)break}return m&&sn(t,d,p,f,g,null,s,o,c),b&&(t.tag=h,t.anchor=u,t.kind="mapping",t.result=d),b}(t,p,d))||function(t,e){var n,r,i,a,s,o,c,l,h,u,d,p,f=!0,g=t.tag,y=t.anchor,m=Object.create(null);if(91===(p=t.input.charCodeAt(t.position)))s=93,l=!1,a=[];else{if(123!==p)return!1;s=125,l=!0,a={}}for(null!==t.anchor&&(t.anchorMap[t.anchor]=a),p=t.input.charCodeAt(++t.position);0!==p;){if(cn(t,!0,e),(p=t.input.charCodeAt(t.position))===s)return t.position++,t.tag=g,t.anchor=y,t.kind=l?"mapping":"sequence",t.result=a,!0;f?44===p&&tn(t,"expected the node content, but found ','"):tn(t,"missed comma between flow collection entries"),d=null,o=c=!1,63===p&&Ue(t.input.charCodeAt(t.position+1))&&(o=c=!0,t.position++,cn(t,!0,e)),n=t.line,r=t.lineStart,i=t.position,fn(t,e,1,!1,!0),u=t.tag,h=t.result,cn(t,!0,e),p=t.input.charCodeAt(t.position),!c&&t.line!==n||58!==p||(o=!0,p=t.input.charCodeAt(++t.position),cn(t,!0,e),fn(t,e,1,!1,!0),d=t.result),l?sn(t,a,m,u,h,d,n,r,i):o?a.push(sn(t,null,m,u,h,d,n,r,i)):a.push(h),cn(t,!0,e),44===(p=t.input.charCodeAt(t.position))?(f=!0,p=t.input.charCodeAt(++t.position)):f=!1}tn(t,"unexpected end of the stream within a flow collection")}(t,d)?y=!0:(s&&function(t,e){var n,r,i,a,s,o=1,c=!1,l=!1,h=e,u=0,d=!1;if(124===(a=t.input.charCodeAt(t.position)))r=!1;else{if(62!==a)return!1;r=!0}for(t.kind="scalar",t.result="";0!==a;)if(43===(a=t.input.charCodeAt(++t.position))||45===a)1===o?o=43===a?3:2:tn(t,"repeat of a chomping mode identifier");else{if(!((i=48<=(s=a)&&s<=57?s-48:-1)>=0))break;0===i?tn(t,"bad explicit indentation width of a block scalar; it cannot be less than one"):l?tn(t,"repeat of an indentation width identifier"):(h=e+i-1,l=!0)}if(ze(a)){do{a=t.input.charCodeAt(++t.position)}while(ze(a));if(35===a)do{a=t.input.charCodeAt(++t.position)}while(!Ye(a)&&0!==a)}for(;0!==a;){for(on(t),t.lineIndent=0,a=t.input.charCodeAt(t.position);(!l||t.lineIndent<h)&&32===a;)t.lineIndent++,a=t.input.charCodeAt(++t.position);if(!l&&t.lineIndent>h&&(h=t.lineIndent),Ye(a))u++;else{if(t.lineIndent<h){3===o?t.result+=Jt.repeat("\n",c?1+u:u):1===o&&c&&(t.result+="\n");break}for(r?ze(a)?(d=!0,t.result+=Jt.repeat("\n",c?1+u:u)):d?(d=!1,t.result+=Jt.repeat("\n",u+1)):0===u?c&&(t.result+=" "):t.result+=Jt.repeat("\n",u):t.result+=Jt.repeat("\n",c?1+u:u),c=!0,l=!0,u=0,n=t.position;!Ye(a)&&0!==a;)a=t.input.charCodeAt(++t.position);rn(t,n,t.position,!1)}}return!0}(t,d)||function(t,e){var n,r,i;if(39!==(n=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,r=i=t.position;0!==(n=t.input.charCodeAt(t.position));)if(39===n){if(rn(t,r,t.position,!0),39!==(n=t.input.charCodeAt(++t.position)))return!0;r=t.position,t.position++,i=t.position}else Ye(n)?(rn(t,r,i,!0),hn(t,cn(t,!1,e)),r=i=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a single quoted scalar"):(t.position++,i=t.position);tn(t,"unexpected end of the stream within a single quoted scalar")}(t,d)||function(t,e){var n,r,i,a,s,o,c;if(34!==(o=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,n=r=t.position;0!==(o=t.input.charCodeAt(t.position));){if(34===o)return rn(t,n,t.position,!0),t.position++,!0;if(92===o){if(rn(t,n,t.position,!0),Ye(o=t.input.charCodeAt(++t.position)))cn(t,!1,e);else if(o<256&&Ge[o])t.result+=Xe[o],t.position++;else if((s=120===(c=o)?2:117===c?4:85===c?8:0)>0){for(i=s,a=0;i>0;i--)(s=qe(o=t.input.charCodeAt(++t.position)))>=0?a=(a<<4)+s:tn(t,"expected hexadecimal character");t.result+=Ve(a),t.position++}else tn(t,"unknown escape sequence");n=r=t.position}else Ye(o)?(rn(t,n,r,!0),hn(t,cn(t,!1,e)),n=r=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a double quoted scalar"):(t.position++,r=t.position)}tn(t,"unexpected end of the stream within a double quoted scalar")}(t,d)?y=!0:!function(t){var e,n,r;if(42!==(r=t.input.charCodeAt(t.position)))return!1;for(r=t.input.charCodeAt(++t.position),e=t.position;0!==r&&!Ue(r)&&!We(r);)r=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an alias node must contain at least one character"),n=t.input.slice(e,t.position),Ie.call(t.anchorMap,n)||tn(t,'unidentified alias "'+n+'"'),t.result=t.anchorMap[n],cn(t,!0,-1),!0}(t)?function(t,e,n){var r,i,a,s,o,c,l,h,u=t.kind,d=t.result;if(Ue(h=t.input.charCodeAt(t.position))||We(h)||35===h||38===h||42===h||33===h||124===h||62===h||39===h||34===h||37===h||64===h||96===h)return!1;if((63===h||45===h)&&(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r)))return!1;for(t.kind="scalar",t.result="",i=a=t.position,s=!1;0!==h;){if(58===h){if(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r))break}else if(35===h){if(Ue(t.input.charCodeAt(t.position-1)))break}else{if(t.position===t.lineStart&&ln(t)||n&&We(h))break;if(Ye(h)){if(o=t.line,c=t.lineStart,l=t.lineIndent,cn(t,!1,-1),t.lineIndent>=e){s=!0,h=t.input.charCodeAt(t.position);continue}t.position=a,t.line=o,t.lineStart=c,t.lineIndent=l;break}}s&&(rn(t,i,a,!1),hn(t,t.line-o),i=a=t.position,s=!1),ze(h)||(a=t.position+1),h=t.input.charCodeAt(++t.position)}return rn(t,i,a,!1),!!t.result||(t.kind=u,t.result=d,!1)}(t,d,1===n)&&(y=!0,null===t.tag&&(t.tag="?")):(y=!0,null===t.tag&&null===t.anchor||tn(t,"alias node should not have any properties")),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):0===f&&(y=o&&un(t,p))),null===t.tag)null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);else if("?"===t.tag){for(null!==t.result&&"scalar"!==t.kind&&tn(t,'unacceptable node kind for !<?> tag; it should be "scalar", not "'+t.kind+'"'),c=0,l=t.implicitTypes.length;c<l;c+=1)if((u=t.implicitTypes[c]).resolve(t.result)){t.result=u.construct(t.result),t.tag=u.tag,null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);break}}else if("!"!==t.tag){if(Ie.call(t.typeMap[t.kind||"fallback"],t.tag))u=t.typeMap[t.kind||"fallback"][t.tag];else for(u=null,c=0,l=(h=t.typeMap.multi[t.kind||"fallback"]).length;c<l;c+=1)if(t.tag.slice(0,h[c].tag.length)===h[c].tag){u=h[c];break}u||tn(t,"unknown tag !<"+t.tag+">"),null!==t.result&&u.kind!==t.kind&&tn(t,"unacceptable node kind for !<"+t.tag+'> tag; it should be "'+u.kind+'", not "'+t.kind+'"'),u.resolve(t.result,t.tag)?(t.result=u.construct(t.result,t.tag),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):tn(t,"cannot resolve a node with !<"+t.tag+"> explicit tag")}return null!==t.listener&&t.listener("close",t),null!==t.tag||null!==t.anchor||y}function gn(t){var e,n,r,i,a=t.position,s=!1;for(t.version=null,t.checkLineBreaks=t.legacy,t.tagMap=Object.create(null),t.anchorMap=Object.create(null);0!==(i=t.input.charCodeAt(t.position))&&(cn(t,!0,-1),i=t.input.charCodeAt(t.position),!(t.lineIndent>0||37!==i));){for(s=!0,i=t.input.charCodeAt(++t.position),e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);for(r=[],(n=t.input.slice(e,t.position)).length<1&&tn(t,"directive name must not be less than one character in length");0!==i;){for(;ze(i);)i=t.input.charCodeAt(++t.position);if(35===i){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&!Ye(i));break}if(Ye(i))break;for(e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);r.push(t.input.slice(e,t.position))}0!==i&&on(t),Ie.call(nn,n)?nn[n](t,n,r):en(t,'unknown document directive "'+n+'"')}cn(t,!0,-1),0===t.lineIndent&&45===t.input.charCodeAt(t.position)&&45===t.input.charCodeAt(t.position+1)&&45===t.input.charCodeAt(t.position+2)?(t.position+=3,cn(t,!0,-1)):s&&tn(t,"directives end mark is expected"),fn(t,t.lineIndent-1,4,!1,!0),cn(t,!0,-1),t.checkLineBreaks&&$e.test(t.input.slice(a,t.position))&&en(t,"non-ASCII line breaks are interpreted as content"),t.documents.push(t.result),t.position===t.lineStart&&ln(t)?46===t.input.charCodeAt(t.position)&&(t.position+=3,cn(t,!0,-1)):t.position<t.length-1&&tn(t,"end of the stream or a document separator is expected")}function yn(t,e){e=e||{},0!==(t=String(t)).length&&(10!==t.charCodeAt(t.length-1)&&13!==t.charCodeAt(t.length-1)&&(t+="\n"),65279===t.charCodeAt(0)&&(t=t.slice(1)));var n=new Qe(t,e),r=t.indexOf("\0");for(-1!==r&&(n.position=r,tn(n,"null byte is not allowed in input")),n.input+="\0";32===n.input.charCodeAt(n.position);)n.lineIndent+=1,n.position+=1;for(;n.position<n.length-1;)gn(n);return n.documents}var mn=ue,bn={loadAll:function(t,e,n){null!==e&&"object"==typeof e&&void 0===n&&(n=e,e=null);var r=yn(t,n);if("function"!=typeof e)return r;for(var i=0,a=r.length;i<a;i+=1)e(r[i])},load:function(t,e){var n=yn(t,e);if(0!==n.length){if(1===n.length)return n[0];throw new ne("expected a single document in the stream, but found more")}}}.load;const _n=/^-{3}\s*[\n\r](.*?)[\n\r]-{3}\s*[\n\r]+/s;const xn=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,vn=/\s*%%.*\n/gm,kn={},wn=function(t,e){t=t.replace(_n,"").replace(xn,"").replace(vn,"\n");for(const[n,{detector:r}]of Object.entries(kn)){if(r(t,e))return n}throw new Error(`No diagram type detected for text: ${t}`)},En=(...t)=>{for(const{id:e,detector:n,loader:r}of t)Cn(e,n,r)},Cn=(t,e,n)=>{kn[t]?Nt.error(`Detector with key ${t} already exists`):kn[t]={detector:e,loader:n},Nt.debug(`Detector with key ${t} added${n?" with loader":""}`)},Tn=function(t,e,n){const{depth:r,clobber:i}=Object.assign({depth:2,clobber:!1},n);return Array.isArray(e)&&!Array.isArray(t)?(e.forEach((e=>Tn(t,e,n))),t):Array.isArray(e)&&Array.isArray(t)?(e.forEach((e=>{t.includes(e)||t.push(e)})),t):void 0===t||r<=0?null!=t&&"object"==typeof t&&"object"==typeof e?Object.assign(t,e):e:(void 0!==e&&"object"==typeof t&&"object"==typeof e&&Object.keys(e).forEach((n=>{"object"!=typeof e[n]||void 0!==t[n]&&"object"!=typeof t[n]?(i||"object"!=typeof t[n]&&"object"!=typeof e[n])&&(t[n]=e[n]):(void 0===t[n]&&(t[n]=Array.isArray(e[n])?[]:{}),t[n]=Tn(t[n],e[n],{depth:r-1,clobber:i}))})),t)},Sn=Tn,An={curveBasis:o.$0Z,curveBasisClosed:o.Dts,curveBasisOpen:o.WQY,curveBumpX:o.qpX,curveBumpY:o.u93,curveBundle:o.tFB,curveCardinalClosed:o.OvA,curveCardinalOpen:o.dCK,curveCardinal:o.YY7,curveCatmullRomClosed:o.fGX,curveCatmullRomOpen:o.$m7,curveCatmullRom:o.zgE,curveLinear:o.c_6,curveLinearClosed:o.fxm,curveMonotoneX:o.FdL,curveMonotoneY:o.ak_,curveNatural:o.SxZ,curveStep:o.eA_,curveStepAfter:o.jsv,curveStepBefore:o.iJ},Ln=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Bn=/\s*(?:(\w+)(?=:):|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Nn=function(t,e=null){try{const n=new RegExp(`[%]{2}(?![{]${Bn.source})(?=[}][%]{2}).*\n`,"ig");let r;t=t.trim().replace(n,"").replace(/'/gm,'"'),Nt.debug(`Detecting diagram directive${null!==e?" type:"+e:""} based on the text:${t}`);const i=[];for(;null!==(r=Ln.exec(t));)if(r.index===Ln.lastIndex&&Ln.lastIndex++,r&&!e||e&&r[1]&&r[1].match(e)||e&&r[2]&&r[2].match(e)){const t=r[1]?r[1]:r[2],e=r[3]?r[3].trim():r[4]?JSON.parse(r[4].trim()):null;i.push({type:t,args:e})}return 0===i.length&&i.push({type:t,args:null}),1===i.length?i[0]:i}catch(n){return Nt.error(`ERROR: ${n.message} - Unable to parse directive\n      ${null!==e?" type:"+e:""} based on the text:${t}`),{type:null,args:null}}};function Dn(t,e){if(!t)return e;const n=`curve${t.charAt(0).toUpperCase()+t.slice(1)}`;return An[n]||e}function On(t,e){return t&&e?Math.sqrt(Math.pow(e.x-t.x,2)+Math.pow(e.y-t.y,2)):0}function Mn(t){let e="",n="";for(const r of t)void 0!==r&&(r.startsWith("color:")||r.startsWith("text-align:")?n=n+r+";":e=e+r+";");return{style:e,labelStyle:n}}let In=0;const Fn=()=>(In++,"id-"+Math.random().toString(36).substr(2,12)+"-"+In);const $n=t=>function(t){let e="";const n="0123456789abcdef",r=n.length;for(let i=0;i<t;i++)e+=n.charAt(Math.floor(Math.random()*r));return e}(t.length),Rn=function(t,e){const n=e.text.replace(Yt.lineBreakRegex," "),[,r]=Vn(e.fontSize),i=t.append("text");i.attr("x",e.x),i.attr("y",e.y),i.style("text-anchor",e.anchor),i.style("font-family",e.fontFamily),i.style("font-size",r),i.style("font-weight",e.fontWeight),i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class);const a=i.append("tspan");return a.attr("x",e.x+2*e.textMargin),a.attr("fill",e.fill),a.text(n),i},Zn=(0,v.Z)(((t,e,n)=>{if(!t)return t;if(n=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",joinWith:"<br/>"},n),Yt.lineBreakRegex.test(t))return t;const r=t.split(" "),i=[];let a="";return r.forEach(((t,s)=>{const o=Yn(`${t} `,n),c=Yn(a,n);if(o>e){const{hyphenatedStrings:r,remainingWord:s}=Pn(t,e,"-",n);i.push(a,...r),a=s}else c+o>=e?(i.push(a),a=t):a=[a,t].filter(Boolean).join(" ");s+1===r.length&&i.push(a)})),i.filter((t=>""!==t)).join(n.joinWith)}),((t,e,n)=>`${t}${e}${n.fontSize}${n.fontWeight}${n.fontFamily}${n.joinWith}`)),Pn=(0,v.Z)(((t,e,n="-",r)=>{r=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:0},r);const i=[...t],a=[];let s="";return i.forEach(((t,o)=>{const c=`${s}${t}`;if(Yn(c,r)>=e){const t=o+1,e=i.length===t,r=`${c}${n}`;a.push(e?c:r),s=""}else s=c})),{hyphenatedStrings:a,remainingWord:s}}),((t,e,n="-",r)=>`${t}${e}${n}${r.fontSize}${r.fontWeight}${r.fontFamily}`));function jn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:15},e),zn(t,e).height}function Yn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e),zn(t,e).width}const zn=(0,v.Z)(((t,e)=>{e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e);const{fontSize:n,fontFamily:r,fontWeight:i}=e;if(!t)return{width:0,height:0};const[,a]=Vn(n),s=["sans-serif",r],c=t.split(Yt.lineBreakRegex),l=[],h=(0,o.Ys)("body");if(!h.remove)return{width:0,height:0,lineHeight:0};const u=h.append("svg");for(const o of s){let t=0;const e={width:0,height:0,lineHeight:0};for(const n of c){const r={x:0,y:0,fill:void 0,anchor:"start",style:"#666",width:100,height:100,textMargin:0,rx:0,ry:0,valign:void 0};r.text=n;const s=Rn(u,r).style("font-size",a).style("font-weight",i).style("font-family",o),c=(s._groups||s)[0][0].getBBox();e.width=Math.round(Math.max(e.width,c.width)),t=Math.round(c.height),e.height+=t,e.lineHeight=Math.round(Math.max(e.lineHeight,t))}l.push(e)}u.remove();return l[isNaN(l[1].height)||isNaN(l[1].width)||isNaN(l[1].lineHeight)||l[0].height>l[1].height&&l[0].width>l[1].width&&l[0].lineHeight>l[1].lineHeight?0:1]}),((t,e)=>`${t}${e.fontSize}${e.fontWeight}${e.fontFamily}`));let Un;const Wn=t=>{if(Nt.debug("directiveSanitizer called with",t),"object"==typeof t&&(t.length?t.forEach((t=>Wn(t))):Object.keys(t).forEach((e=>{Nt.debug("Checking key",e),e.startsWith("__")&&(Nt.debug("sanitize deleting __ option",e),delete t[e]),e.includes("proto")&&(Nt.debug("sanitize deleting proto option",e),delete t[e]),e.includes("constr")&&(Nt.debug("sanitize deleting constr option",e),delete t[e]),e.includes("themeCSS")&&(Nt.debug("sanitizing themeCss option"),t[e]=qn(t[e])),e.includes("fontFamily")&&(Nt.debug("sanitizing fontFamily option"),t[e]=qn(t[e])),e.includes("altFontFamily")&&(Nt.debug("sanitizing altFontFamily option"),t[e]=qn(t[e])),Xt.includes(e)?"object"==typeof t[e]&&(Nt.debug("sanitize deleting object",e),Wn(t[e])):(Nt.debug("sanitize deleting option",e),delete t[e])}))),t.themeVariables){const e=Object.keys(t.themeVariables);for(const n of e){const e=t.themeVariables[n];e&&e.match&&!e.match(/^[\d "#%(),.;A-Za-z]+$/)&&(t.themeVariables[n]="")}}Nt.debug("After sanitization",t)},qn=t=>{let e=0,n=0;for(const r of t){if(e<n)return"{ /* ERROR: Unbalanced CSS */ }";"{"===r?e++:"}"===r&&n++}return e!==n?"{ /* ERROR: Unbalanced CSS */ }":t};function Hn(t){return"str"in t}const Vn=t=>{if("number"==typeof t)return[t,t+"px"];const e=parseInt(t,10);return Number.isNaN(e)?[void 0,void 0]:t===String(e)?[e,t+"px"]:[e,t]},Gn={assignWithDepth:Sn,wrapLabel:Zn,calculateTextHeight:jn,calculateTextWidth:Yn,calculateTextDimensions:zn,detectInit:function(t,e){const n=Nn(t,/(?:init\b)|(?:initialize\b)/);let r={};if(Array.isArray(n)){const t=n.map((t=>t.args));Wn(t),r=Sn(r,[...t])}else r=n.args;if(r){let n=wn(t,e);["config"].forEach((t=>{void 0!==r[t]&&("flowchart-v2"===n&&(n="flowchart"),r[n]=r[t],delete r[t])}))}return r},detectDirective:Nn,isSubstringInArray:function(t,e){for(const[n,r]of e.entries())if(r.match(t))return n;return-1},interpolateToCurve:Dn,calcLabelPosition:function(t){return 1===t.length?t[0]:function(t){let e,n=0;t.forEach((t=>{n+=On(t,e),e=t}));let r,i=n/2;return e=void 0,t.forEach((t=>{if(e&&!r){const n=On(t,e);if(n<i)i-=n;else{const a=i/n;a<=0&&(r=e),a>=1&&(r={x:t.x,y:t.y}),a>0&&a<1&&(r={x:(1-a)*e.x+a*t.x,y:(1-a)*e.y+a*t.y})}}e=t})),r}(t)},calcCardinalityPosition:(t,e,n)=>{let r;Nt.info(`our points ${JSON.stringify(e)}`),e[0]!==n&&(e=e.reverse());let i,a=25;r=void 0,e.forEach((t=>{if(r&&!i){const e=On(t,r);if(e<a)a-=e;else{const n=a/e;n<=0&&(i=r),n>=1&&(i={x:t.x,y:t.y}),n>0&&n<1&&(i={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const s=t?10:5,o=Math.atan2(e[0].y-i.y,e[0].x-i.x),c={x:0,y:0};return c.x=Math.sin(o)*s+(e[0].x+i.x)/2,c.y=-Math.cos(o)*s+(e[0].y+i.y)/2,c},calcTerminalLabelPosition:function(t,e,n){let r,i=JSON.parse(JSON.stringify(n));Nt.info("our points",i),"start_left"!==e&&"start_right"!==e&&(i=i.reverse()),i.forEach((t=>{r=t}));let a,s=25+t;r=void 0,i.forEach((t=>{if(r&&!a){const e=On(t,r);if(e<s)s-=e;else{const n=s/e;n<=0&&(a=r),n>=1&&(a={x:t.x,y:t.y}),n>0&&n<1&&(a={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const o=10+.5*t,c=Math.atan2(i[0].y-a.y,i[0].x-a.x),l={x:0,y:0};return l.x=Math.sin(c)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2,"start_left"===e&&(l.x=Math.sin(c+Math.PI)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c+Math.PI)*o+(i[0].y+a.y)/2),"end_right"===e&&(l.x=Math.sin(c-Math.PI)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c-Math.PI)*o+(i[0].y+a.y)/2-5),"end_left"===e&&(l.x=Math.sin(c)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2-5),l},formatUrl:function(t,e){const n=t.trim();if(n)return"loose"!==e.securityLevel?(0,s.N)(n):n},getStylesFromArray:Mn,generateId:Fn,random:$n,runFunc:(t,...e)=>{const n=t.split("."),r=n.length-1,i=n[r];let a=window;for(let s=0;s<r;s++)if(a=a[n[s]],!a)return;a[i](...e)},entityDecode:function(t){return Un=Un||document.createElement("div"),t=escape(t).replace(/%26/g,"&").replace(/%23/g,"#").replace(/%3B/g,";"),Un.innerHTML=t,unescape(Un.textContent)},initIdGenerator:class{constructor(t,e){this.deterministic=t,this.seed=e,this.count=e?e.length:0}next(){return this.deterministic?this.count++:Date.now()}},directiveSanitizer:Wn,sanitizeCss:qn,insertTitle:(t,e,n,r)=>{if(!r)return;const i=t.node().getBBox();t.append("text").text(r).attr("x",i.x+i.width/2).attr("y",-n).attr("class",e)},parseFontSize:Vn},Xn="9.4.3",Kn=Object.freeze(Kt);let Qn,Jn=Sn({},Kn),tr=[],er=Sn({},Kn);const nr=(t,e)=>{let n=Sn({},t),r={};for(const i of e)sr(i),r=Sn(r,i);if(n=Sn(n,r),r.theme&&r.theme in Ht){const t=Sn({},Qn),e=Sn(t.themeVariables||{},r.themeVariables);n.theme&&n.theme in Ht&&(n.themeVariables=Ht[n.theme].getThemeVariables(e))}return er=n,ur(er),er},rr=()=>Sn({},Jn),ir=t=>(ur(t),Sn(er,t),ar()),ar=()=>Sn({},er),sr=t=>{["secure",...Jn.secure??[]].forEach((e=>{void 0!==t[e]&&(Nt.debug(`Denied attempt to modify a secure key ${e}`,t[e]),delete t[e])})),Object.keys(t).forEach((e=>{0===e.indexOf("__")&&delete t[e]})),Object.keys(t).forEach((e=>{"string"==typeof t[e]&&(t[e].includes("<")||t[e].includes(">")||t[e].includes("url(data:"))&&delete t[e],"object"==typeof t[e]&&sr(t[e])}))},or=t=>{t.fontFamily&&(t.themeVariables&&t.themeVariables.fontFamily||(t.themeVariables={fontFamily:t.fontFamily})),tr.push(t),nr(Jn,tr)},cr=(t=Jn)=>{tr=[],nr(t,tr)};var lr=(t=>(t.LAZY_LOAD_DEPRECATED="The configuration options lazyLoadedDiagrams and loadExternalDiagramsAtStartup are deprecated. Please use registerExternalDiagrams instead.",t))(lr||{});const hr={},ur=t=>{var e;t&&((t.lazyLoadedDiagrams||t.loadExternalDiagramsAtStartup)&&(hr[e="LAZY_LOAD_DEPRECATED"]||(Nt.warn(lr[e]),hr[e]=!0)))},dr=function(t,e,n,r){const i=function(t,e,n){let r=new Map;return n?(r.set("width","100%"),r.set("style",`max-width: ${e}px;`)):(r.set("height",t),r.set("width",e)),r}(e,n,r);!function(t,e){for(let n of e)t.attr(n[0],n[1])}(t,i)},pr=function(t,e,n,r){const i=e.node().getBBox(),a=i.width,s=i.height;Nt.info(`SVG bounds: ${a}x${s}`,i);let o=0,c=0;Nt.info(`Graph bounds: ${o}x${c}`,t),o=a+2*n,c=s+2*n,Nt.info(`Calculated bounds: ${o}x${c}`),dr(e,c,o,r);const l=`${i.x-n} ${i.y-n} ${i.width+2*n} ${i.height+2*n}`;e.attr("viewBox",l)},fr=t=>`g.classGroup text {\n  fill: ${t.nodeBorder};\n  fill: ${t.classText};\n  stroke: none;\n  font-family: ${t.fontFamily};\n  font-size: 10px;\n\n  .title {\n    font-weight: bolder;\n  }\n\n}\n\n.nodeLabel, .edgeLabel {\n  color: ${t.classText};\n}\n.edgeLabel .label rect {\n  fill: ${t.mainBkg};\n}\n.label text {\n  fill: ${t.classText};\n}\n.edgeLabel .label span {\n  background: ${t.mainBkg};\n}\n\n.classTitle {\n  font-weight: bolder;\n}\n.node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n\n.divider {\n  stroke: ${t.nodeBorder};\n  stroke: 1;\n}\n\ng.clickable {\n  cursor: pointer;\n}\n\ng.classGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.classGroup line {\n  stroke: ${t.nodeBorder};\n  stroke-width: 1;\n}\n\n.classLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.classLabel .label {\n  fill: ${t.nodeBorder};\n  font-size: 10px;\n}\n\n.relation {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.dashed-line{\n  stroke-dasharray: 3;\n}\n\n.dotted-line{\n  stroke-dasharray: 1 2;\n}\n\n#compositionStart, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#compositionEnd, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionStart, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionEnd, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationStart, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationEnd, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopStart, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopEnd, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n.edgeTerminals {\n  font-size: 11px;\n}\n\n.classTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,gr=t=>`\n  .entityBox {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxOdd {\n    fill: ${t.attributeBackgroundColorOdd};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxEven {\n    fill:  ${t.attributeBackgroundColorEven};\n    stroke: ${t.nodeBorder};\n  }\n\n  .relationshipLabelBox {\n    fill: ${t.tertiaryColor};\n    opacity: 0.7;\n    background-color: ${t.tertiaryColor};\n      rect {\n        opacity: 0.5;\n      }\n  }\n\n    .relationshipLine {\n      stroke: ${t.lineColor};\n    }\n\n  .entityTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }    \n`,yr=()=>"",mr=t=>`.label {\n    font-family: ${t.fontFamily};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n  .cluster-label text {\n    fill: ${t.titleColor};\n  }\n  .cluster-label span {\n    color: ${t.titleColor};\n  }\n\n  .label text,span {\n    fill: ${t.nodeTextColor||t.textColor};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 2.0px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n      background-color: ${t.edgeLabelBackground};\n      fill: ${t.edgeLabelBackground};\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n    fill: ${t.clusterBkg};\n    stroke: ${t.clusterBorder};\n    stroke-width: 1px;\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  .cluster span {\n    color: ${t.titleColor};\n  }\n  /* .cluster div {\n    color: ${t.titleColor};\n  } */\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: ${t.fontFamily};\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .flowchartTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n`,br=t=>`\n  .mermaid-main-font {\n    font-family: "trebuchet ms", verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  .exclude-range {\n    fill: ${t.excludeBkgColor};\n  }\n\n  .section {\n    stroke: none;\n    opacity: 0.2;\n  }\n\n  .section0 {\n    fill: ${t.sectionBkgColor};\n  }\n\n  .section2 {\n    fill: ${t.sectionBkgColor2};\n  }\n\n  .section1,\n  .section3 {\n    fill: ${t.altSectionBkgColor};\n    opacity: 0.2;\n  }\n\n  .sectionTitle0 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle1 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle2 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle3 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle {\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    // text-height: 14px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n\n  /* Grid and axis */\n\n  .grid .tick {\n    stroke: ${t.gridColor};\n    opacity: 0.8;\n    shape-rendering: crispEdges;\n    text {\n      font-family: ${t.fontFamily};\n      fill: ${t.textColor};\n    }\n  }\n\n  .grid path {\n    stroke-width: 0;\n  }\n\n\n  /* Today line */\n\n  .today {\n    fill: none;\n    stroke: ${t.todayLineColor};\n    stroke-width: 2px;\n  }\n\n\n  /* Task styling */\n\n  /* Default task */\n\n  .task {\n    stroke-width: 2;\n  }\n\n  .taskText {\n    text-anchor: middle;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n\n  // .taskText:not([font-size]) {\n  //   font-size: ${t.ganttFontSize};\n  // }\n\n  .taskTextOutsideRight {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n  .taskTextOutsideLeft {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: end;\n    // font-size: ${t.ganttFontSize};\n  }\n\n  /* Special case clickable */\n  .task.clickable {\n    cursor: pointer;\n  }\n  .taskText.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideLeft.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideRight.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  /* Specific task settings for the sections*/\n\n  .taskText0,\n  .taskText1,\n  .taskText2,\n  .taskText3 {\n    fill: ${t.taskTextColor};\n  }\n\n  .task0,\n  .task1,\n  .task2,\n  .task3 {\n    fill: ${t.taskBkgColor};\n    stroke: ${t.taskBorderColor};\n  }\n\n  .taskTextOutside0,\n  .taskTextOutside2\n  {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n  .taskTextOutside1,\n  .taskTextOutside3 {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n\n  /* Active task */\n\n  .active0,\n  .active1,\n  .active2,\n  .active3 {\n    fill: ${t.activeTaskBkgColor};\n    stroke: ${t.activeTaskBorderColor};\n  }\n\n  .activeText0,\n  .activeText1,\n  .activeText2,\n  .activeText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Completed task */\n\n  .done0,\n  .done1,\n  .done2,\n  .done3 {\n    stroke: ${t.doneTaskBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneText0,\n  .doneText1,\n  .doneText2,\n  .doneText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Tasks on the critical line */\n\n  .crit0,\n  .crit1,\n  .crit2,\n  .crit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.critBkgColor};\n    stroke-width: 2;\n  }\n\n  .activeCrit0,\n  .activeCrit1,\n  .activeCrit2,\n  .activeCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.activeTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneCrit0,\n  .doneCrit1,\n  .doneCrit2,\n  .doneCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n    cursor: pointer;\n    shape-rendering: crispEdges;\n  }\n\n  .milestone {\n    transform: rotate(45deg) scale(0.8,0.8);\n  }\n\n  .milestoneText {\n    font-style: italic;\n  }\n  .doneCritText0,\n  .doneCritText1,\n  .doneCritText2,\n  .doneCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .activeCritText0,\n  .activeCritText1,\n  .activeCritText2,\n  .activeCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .titleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor}    ;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n`,_r=()=>"",xr=t=>`\n  .pieCircle{\n    stroke: ${t.pieStrokeColor};\n    stroke-width : ${t.pieStrokeWidth};\n    opacity : ${t.pieOpacity};\n  }\n  .pieTitleText {\n    text-anchor: middle;\n    font-size: ${t.pieTitleTextSize};\n    fill: ${t.pieTitleTextColor};\n    font-family: ${t.fontFamily};\n  }\n  .slice {\n    font-family: ${t.fontFamily};\n    fill: ${t.pieSectionTextColor};\n    font-size:${t.pieSectionTextSize};\n    // fill: white;\n  }\n  .legend text {\n    fill: ${t.pieLegendTextColor};\n    font-family: ${t.fontFamily};\n    font-size: ${t.pieLegendTextSize};\n  }\n`,vr=t=>`\n\n  marker {\n    fill: ${t.relationColor};\n    stroke: ${t.relationColor};\n  }\n\n  marker.cross {\n    stroke: ${t.lineColor};\n  }\n\n  svg {\n    font-family: ${t.fontFamily};\n    font-size: ${t.fontSize};\n  }\n\n  .reqBox {\n    fill: ${t.requirementBackground};\n    fill-opacity: 100%;\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  \n  .reqTitle, .reqLabel{\n    fill:  ${t.requirementTextColor};\n  }\n  .reqLabelBox {\n    fill: ${t.relationLabelBackground};\n    fill-opacity: 100%;\n  }\n\n  .req-title-line {\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  .relationshipLine {\n    stroke: ${t.relationColor};\n    stroke-width: 1;\n  }\n  .relationshipLabel {\n    fill: ${t.relationLabelColor};\n  }\n\n`,kr=t=>`.actor {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n\n  text.actor > tspan {\n    fill: ${t.actorTextColor};\n    stroke: none;\n  }\n\n  .actor-line {\n    stroke: ${t.actorLineColor};\n  }\n\n  .messageLine0 {\n    stroke-width: 1.5;\n    stroke-dasharray: none;\n    stroke: ${t.signalColor};\n  }\n\n  .messageLine1 {\n    stroke-width: 1.5;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.signalColor};\n  }\n\n  #arrowhead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .sequenceNumber {\n    fill: ${t.sequenceNumberColor};\n  }\n\n  #sequencenumber {\n    fill: ${t.signalColor};\n  }\n\n  #crosshead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .messageText {\n    fill: ${t.signalTextColor};\n    stroke: none;\n  }\n\n  .labelBox {\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBkgColor};\n  }\n\n  .labelText, .labelText > tspan {\n    fill: ${t.labelTextColor};\n    stroke: none;\n  }\n\n  .loopText, .loopText > tspan {\n    fill: ${t.loopTextColor};\n    stroke: none;\n  }\n\n  .loopLine {\n    stroke-width: 2px;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBorderColor};\n  }\n\n  .note {\n    //stroke: #decc93;\n    stroke: ${t.noteBorderColor};\n    fill: ${t.noteBkgColor};\n  }\n\n  .noteText, .noteText > tspan {\n    fill: ${t.noteTextColor};\n    stroke: none;\n  }\n\n  .activation0 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation1 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation2 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .actorPopupMenu {\n    position: absolute;\n  }\n\n  .actorPopupMenuPanel {\n    position: absolute;\n    fill: ${t.actorBkg};\n    box-shadow: 0px 8px 16px 0px rgba(0,0,0,0.2);\n    filter: drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));\n}\n  .actor-man line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n  .actor-man circle, line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n    stroke-width: 2px;\n  }\n`,wr=t=>`\ndefs #statediagram-barbEnd {\n    fill: ${t.transitionColor};\n    stroke: ${t.transitionColor};\n  }\ng.stateGroup text {\n  fill: ${t.nodeBorder};\n  stroke: none;\n  font-size: 10px;\n}\ng.stateGroup text {\n  fill: ${t.textColor};\n  stroke: none;\n  font-size: 10px;\n\n}\ng.stateGroup .state-title {\n  font-weight: bolder;\n  fill: ${t.stateLabelColor};\n}\n\ng.stateGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.stateGroup line {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.transition {\n  stroke: ${t.transitionColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.stateGroup .composit {\n  fill: ${t.background};\n  border-bottom: 1px\n}\n\n.stateGroup .alt-composit {\n  fill: #e0e0e0;\n  border-bottom: 1px\n}\n\n.state-note {\n  stroke: ${t.noteBorderColor};\n  fill: ${t.noteBkgColor};\n\n  text {\n    fill: ${t.noteTextColor};\n    stroke: none;\n    font-size: 10px;\n  }\n}\n\n.stateLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.edgeLabel .label rect {\n  fill: ${t.labelBackgroundColor};\n  opacity: 0.5;\n}\n.edgeLabel .label text {\n  fill: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n.label div .edgeLabel {\n  color: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n\n.stateLabel text {\n  fill: ${t.stateLabelColor};\n  font-size: 10px;\n  font-weight: bold;\n}\n\n.node circle.state-start {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node .fork-join {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node circle.state-end {\n  fill: ${t.innerEndBackground};\n  stroke: ${t.background};\n  stroke-width: 1.5\n}\n.end-state-inner {\n  fill: ${t.compositeBackground||t.background};\n  // stroke: ${t.background};\n  stroke-width: 1.5\n}\n\n.node rect {\n  fill: ${t.stateBkg||t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n.node polygon {\n  fill: ${t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};;\n  stroke-width: 1px;\n}\n#statediagram-barbEnd {\n  fill: ${t.lineColor};\n}\n\n.statediagram-cluster rect {\n  fill: ${t.compositeTitleBackground};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n\n.cluster-label, .nodeLabel {\n  color: ${t.stateLabelColor};\n}\n\n.statediagram-cluster rect.outer {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state .divider {\n  stroke: ${t.stateBorder||t.nodeBorder};\n}\n\n.statediagram-state .title-state {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-cluster.statediagram-cluster .inner {\n  fill: ${t.compositeBackground||t.background};\n}\n.statediagram-cluster.statediagram-cluster-alt .inner {\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.statediagram-cluster .inner {\n  rx:0;\n  ry:0;\n}\n\n.statediagram-state rect.basic {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state rect.divider {\n  stroke-dasharray: 10,10;\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.note-edge {\n  stroke-dasharray: 5;\n}\n\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n\n.statediagram-note text {\n  fill: ${t.noteTextColor};\n}\n\n.statediagram-note .nodeLabel {\n  color: ${t.noteTextColor};\n}\n.statediagram .edgeLabel {\n  color: red; // ${t.noteTextColor};\n}\n\n#dependencyStart, #dependencyEnd {\n  fill: ${t.lineColor};\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.statediagramTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,Er=t=>`.label {\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    color: ${t.textColor};\n  }\n  .mouth {\n    stroke: #666;\n  }\n\n  line {\n    stroke: ${t.textColor}\n  }\n\n  .legend {\n    fill: ${t.textColor};\n  }\n\n  .label text {\n    fill: #333;\n  }\n  .label {\n    color: ${t.textColor}\n  }\n\n  .face {\n    ${t.faceColor?`fill: ${t.faceColor}`:"fill: #FFF8DC"};\n    stroke: #999;\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 1.5px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .task-type-0, .section-type-0  {\n    ${t.fillType0?`fill: ${t.fillType0}`:""};\n  }\n  .task-type-1, .section-type-1  {\n    ${t.fillType0?`fill: ${t.fillType1}`:""};\n  }\n  .task-type-2, .section-type-2  {\n    ${t.fillType0?`fill: ${t.fillType2}`:""};\n  }\n  .task-type-3, .section-type-3  {\n    ${t.fillType0?`fill: ${t.fillType3}`:""};\n  }\n  .task-type-4, .section-type-4  {\n    ${t.fillType0?`fill: ${t.fillType4}`:""};\n  }\n  .task-type-5, .section-type-5  {\n    ${t.fillType0?`fill: ${t.fillType5}`:""};\n  }\n  .task-type-6, .section-type-6  {\n    ${t.fillType0?`fill: ${t.fillType6}`:""};\n  }\n  .task-type-7, .section-type-7  {\n    ${t.fillType0?`fill: ${t.fillType7}`:""};\n  }\n\n  .actor-0 {\n    ${t.actor0?`fill: ${t.actor0}`:""};\n  }\n  .actor-1 {\n    ${t.actor1?`fill: ${t.actor1}`:""};\n  }\n  .actor-2 {\n    ${t.actor2?`fill: ${t.actor2}`:""};\n  }\n  .actor-3 {\n    ${t.actor3?`fill: ${t.actor3}`:""};\n  }\n  .actor-4 {\n    ${t.actor4?`fill: ${t.actor4}`:""};\n  }\n  .actor-5 {\n    ${t.actor5?`fill: ${t.actor5}`:""};\n  }\n`,Cr=t=>`.person {\n    stroke: ${t.personBorder};\n    fill: ${t.personBkg};\n  }\n`,Tr={flowchart:mr,"flowchart-v2":mr,sequence:kr,gantt:br,classDiagram:fr,"classDiagram-v2":fr,class:fr,stateDiagram:wr,state:wr,info:_r,pie:xr,er:gr,error:yr,journey:Er,requirement:vr,c4:Cr},Sr=(t,e,n)=>{let r="";return t in Tr&&Tr[t]?r=Tr[t](n):Nt.warn(`No theme found for ${t}`),` & {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n    fill: ${n.textColor}\n  }\n\n  /* Classes common for multiple diagrams */\n\n  & .error-icon {\n    fill: ${n.errorBkgColor};\n  }\n  & .error-text {\n    fill: ${n.errorTextColor};\n    stroke: ${n.errorTextColor};\n  }\n\n  & .edge-thickness-normal {\n    stroke-width: 2px;\n  }\n  & .edge-thickness-thick {\n    stroke-width: 3.5px\n  }\n  & .edge-pattern-solid {\n    stroke-dasharray: 0;\n  }\n\n  & .edge-pattern-dashed{\n    stroke-dasharray: 3;\n  }\n  .edge-pattern-dotted {\n    stroke-dasharray: 2;\n  }\n\n  & .marker {\n    fill: ${n.lineColor};\n    stroke: ${n.lineColor};\n  }\n  & .marker.cross {\n    stroke: ${n.lineColor};\n  }\n\n  & svg {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n  }\n\n  ${r}\n\n  ${e}\n`};let Ar="",Lr="",Br="";const Nr=t=>Ft(t,ar()),Dr=function(){Ar="",Br="",Lr=""},Or=function(t){Ar=Nr(t).replace(/^\s+/g,"")},Mr=function(){return Ar||Lr},Ir=function(t){Br=Nr(t).replace(/\n\s+/g,"\n")},Fr=function(){return Br},$r=function(t){Lr=Nr(t)},Rr=function(){return Lr},Zr={setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,getAccDescription:Fr,setAccDescription:Ir,clear:Dr},Pr=Object.freeze(Object.defineProperty({__proto__:null,clear:Dr,default:Zr,getAccDescription:Fr,getAccTitle:Mr,getDiagramTitle:Rr,setAccDescription:Ir,setAccTitle:Or,setDiagramTitle:$r},Symbol.toStringTag,{value:"Module"}));let jr={};const Yr=function(t,e,n,r){Nt.debug("parseDirective is being called",e,n,r);try{if(void 0!==e)switch(e=e.trim(),n){case"open_directive":jr={};break;case"type_directive":if(!jr)throw new Error("currentDirective is undefined");jr.type=e.toLowerCase();break;case"arg_directive":if(!jr)throw new Error("currentDirective is undefined");jr.args=JSON.parse(e);break;case"close_directive":zr(t,jr,r),jr=void 0}}catch(i){Nt.error(`Error while rendering sequenceDiagram directive: ${e} jison context: ${n}`),Nt.error(i.message)}},zr=function(t,e,n){switch(Nt.info(`Directive type=${e.type} with args:`,e.args),e.type){case"init":case"initialize":["config"].forEach((t=>{void 0!==e.args[t]&&("flowchart-v2"===n&&(n="flowchart"),e.args[n]=e.args[t],delete e.args[t])})),Nt.info("sanitize in handleDirective",e.args),Wn(e.args),Nt.info("sanitize in handleDirective (done)",e.args),or(e.args);break;case"wrap":case"nowrap":t&&t.setWrap&&t.setWrap("wrap"===e.type);break;case"themeCss":Nt.warn("themeCss encountered");break;default:Nt.warn(`Unhandled directive: source: '%%{${e.type}: ${JSON.stringify(e.args?e.args:{})}}%%`,e)}},Ur=Nt,Wr=Dt,qr=ar,Hr=t=>Ft(t,qr()),Vr=pr,Gr=(t,e,n,r)=>Yr(t,e,n,r),Xr={},Kr=(t,e,n)=>{if(Xr[t])throw new Error(`Diagram ${t} already registered.`);var r,i;Xr[t]=e,n&&Cn(t,n),r=t,i=e.styles,Tr[r]=i,e.injectUtils&&e.injectUtils(Ur,Wr,qr,Hr,Vr,Pr,Gr)},Qr=t=>{if(t in Xr)return Xr[t];throw new Error(`Diagram ${t} not found.`)};var Jr=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,7],i=[1,5],a=[1,9],s=[1,6],o=[2,6],c=[1,16],l=[6,8,14,20,22,24,25,27,29,32,37,40,50,55],h=[8,14,20,22,24,25,27,29,32,37,40],u=[8,13,14,20,22,24,25,27,29,32,37,40],d=[1,26],p=[6,8,14,50,55],f=[8,14,55],g=[1,53],y=[1,52],m=[8,14,30,33,35,38,55],b=[1,67],_=[1,68],x=[1,69],v=[8,14,33,35,42,55],k={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,GG:6,document:7,EOF:8,":":9,DIR:10,options:11,body:12,OPT:13,NL:14,line:15,statement:16,commitStatement:17,mergeStatement:18,cherryPickStatement:19,acc_title:20,acc_title_value:21,acc_descr:22,acc_descr_value:23,acc_descr_multiline_value:24,section:25,branchStatement:26,CHECKOUT:27,ref:28,BRANCH:29,ORDER:30,NUM:31,CHERRY_PICK:32,COMMIT_ID:33,STR:34,COMMIT_TAG:35,EMPTYSTR:36,MERGE:37,COMMIT_TYPE:38,commitType:39,COMMIT:40,commit_arg:41,COMMIT_MSG:42,NORMAL:43,REVERSE:44,HIGHLIGHT:45,openDirective:46,typeDirective:47,closeDirective:48,argDirective:49,open_directive:50,type_directive:51,arg_directive:52,close_directive:53,ID:54,";":55,$accept:0,$end:1},terminals_:{2:"error",6:"GG",8:"EOF",9:":",10:"DIR",13:"OPT",14:"NL",20:"acc_title",21:"acc_title_value",22:"acc_descr",23:"acc_descr_value",24:"acc_descr_multiline_value",25:"section",27:"CHECKOUT",29:"BRANCH",30:"ORDER",31:"NUM",32:"CHERRY_PICK",33:"COMMIT_ID",34:"STR",35:"COMMIT_TAG",36:"EMPTYSTR",37:"MERGE",38:"COMMIT_TYPE",40:"COMMIT",42:"COMMIT_MSG",43:"NORMAL",44:"REVERSE",45:"HIGHLIGHT",50:"open_directive",51:"type_directive",52:"arg_directive",53:"close_directive",54:"ID",55:";"},productions_:[0,[3,2],[3,2],[3,3],[3,4],[3,5],[7,0],[7,2],[11,2],[11,1],[12,0],[12,2],[15,2],[15,1],[16,1],[16,1],[16,1],[16,2],[16,2],[16,1],[16,1],[16,1],[16,2],[26,2],[26,4],[19,3],[19,5],[19,5],[19,5],[19,5],[18,2],[18,4],[18,4],[18,4],[18,6],[18,6],[18,6],[18,6],[18,6],[18,6],[18,8],[18,8],[18,8],[18,8],[18,8],[18,8],[17,2],[17,3],[17,3],[17,5],[17,5],[17,3],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,3],[17,5],[17,5],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[41,0],[41,1],[39,1],[39,1],[39,1],[5,3],[5,5],[46,1],[47,1],[49,1],[48,1],[28,1],[28,1],[4,1],[4,1],[4,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 3:return a[o];case 4:return a[o-1];case 5:return r.setDirection(a[o-3]),a[o-1];case 7:r.setOptions(a[o-1]),this.$=a[o];break;case 8:a[o-1]+=a[o],this.$=a[o-1];break;case 10:this.$=[];break;case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 12:this.$=a[o-1];break;case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 20:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 22:r.checkout(a[o]);break;case 23:r.branch(a[o]);break;case 24:r.branch(a[o-2],a[o]);break;case 25:r.cherryPick(a[o],"",void 0);break;case 26:r.cherryPick(a[o-2],"",a[o]);break;case 27:case 29:r.cherryPick(a[o-2],"","");break;case 28:r.cherryPick(a[o],"",a[o-2]);break;case 30:r.merge(a[o],"","","");break;case 31:r.merge(a[o-2],a[o],"","");break;case 32:r.merge(a[o-2],"",a[o],"");break;case 33:r.merge(a[o-2],"","",a[o]);break;case 34:r.merge(a[o-4],a[o],"",a[o-2]);break;case 35:r.merge(a[o-4],"",a[o],a[o-2]);break;case 36:r.merge(a[o-4],"",a[o-2],a[o]);break;case 37:r.merge(a[o-4],a[o-2],a[o],"");break;case 38:r.merge(a[o-4],a[o-2],"",a[o]);break;case 39:r.merge(a[o-4],a[o],a[o-2],"");break;case 40:r.merge(a[o-6],a[o-4],a[o-2],a[o]);break;case 41:r.merge(a[o-6],a[o],a[o-4],a[o-2]);break;case 42:r.merge(a[o-6],a[o-4],a[o],a[o-2]);break;case 43:r.merge(a[o-6],a[o-2],a[o-4],a[o]);break;case 44:r.merge(a[o-6],a[o],a[o-2],a[o-4]);break;case 45:r.merge(a[o-6],a[o-2],a[o],a[o-4]);break;case 46:r.commit(a[o]);break;case 47:r.commit("","",r.commitType.NORMAL,a[o]);break;case 48:r.commit("","",a[o],"");break;case 49:r.commit("","",a[o],a[o-2]);break;case 50:r.commit("","",a[o-2],a[o]);break;case 51:r.commit("",a[o],r.commitType.NORMAL,"");break;case 52:r.commit("",a[o-2],r.commitType.NORMAL,a[o]);break;case 53:r.commit("",a[o],r.commitType.NORMAL,a[o-2]);break;case 54:r.commit("",a[o-2],a[o],"");break;case 55:r.commit("",a[o],a[o-2],"");break;case 56:r.commit("",a[o-4],a[o-2],a[o]);break;case 57:r.commit("",a[o-4],a[o],a[o-2]);break;case 58:r.commit("",a[o-2],a[o-4],a[o]);break;case 59:r.commit("",a[o],a[o-4],a[o-2]);break;case 60:r.commit("",a[o],a[o-2],a[o-4]);break;case 61:r.commit("",a[o-2],a[o],a[o-4]);break;case 62:r.commit(a[o],"",r.commitType.NORMAL,"");break;case 63:r.commit(a[o],"",r.commitType.NORMAL,a[o-2]);break;case 64:r.commit(a[o-2],"",r.commitType.NORMAL,a[o]);break;case 65:r.commit(a[o-2],"",a[o],"");break;case 66:r.commit(a[o],"",a[o-2],"");break;case 67:r.commit(a[o],a[o-2],r.commitType.NORMAL,"");break;case 68:r.commit(a[o-2],a[o],r.commitType.NORMAL,"");break;case 69:r.commit(a[o-4],"",a[o-2],a[o]);break;case 70:r.commit(a[o-4],"",a[o],a[o-2]);break;case 71:r.commit(a[o-2],"",a[o-4],a[o]);break;case 72:r.commit(a[o],"",a[o-4],a[o-2]);break;case 73:r.commit(a[o],"",a[o-2],a[o-4]);break;case 74:r.commit(a[o-2],"",a[o],a[o-4]);break;case 75:r.commit(a[o-4],a[o],a[o-2],"");break;case 76:r.commit(a[o-4],a[o-2],a[o],"");break;case 77:r.commit(a[o-2],a[o],a[o-4],"");break;case 78:r.commit(a[o],a[o-2],a[o-4],"");break;case 79:r.commit(a[o],a[o-4],a[o-2],"");break;case 80:r.commit(a[o-2],a[o-4],a[o],"");break;case 81:r.commit(a[o-4],a[o],r.commitType.NORMAL,a[o-2]);break;case 82:r.commit(a[o-4],a[o-2],r.commitType.NORMAL,a[o]);break;case 83:r.commit(a[o-2],a[o],r.commitType.NORMAL,a[o-4]);break;case 84:r.commit(a[o],a[o-2],r.commitType.NORMAL,a[o-4]);break;case 85:r.commit(a[o],a[o-4],r.commitType.NORMAL,a[o-2]);break;case 86:r.commit(a[o-2],a[o-4],r.commitType.NORMAL,a[o]);break;case 87:r.commit(a[o-6],a[o-4],a[o-2],a[o]);break;case 88:r.commit(a[o-6],a[o-4],a[o],a[o-2]);break;case 89:r.commit(a[o-6],a[o-2],a[o-4],a[o]);break;case 90:r.commit(a[o-6],a[o],a[o-4],a[o-2]);break;case 91:r.commit(a[o-6],a[o-2],a[o],a[o-4]);break;case 92:r.commit(a[o-6],a[o],a[o-2],a[o-4]);break;case 93:r.commit(a[o-4],a[o-6],a[o-2],a[o]);break;case 94:r.commit(a[o-4],a[o-6],a[o],a[o-2]);break;case 95:r.commit(a[o-2],a[o-6],a[o-4],a[o]);break;case 96:r.commit(a[o],a[o-6],a[o-4],a[o-2]);break;case 97:r.commit(a[o-2],a[o-6],a[o],a[o-4]);break;case 98:r.commit(a[o],a[o-6],a[o-2],a[o-4]);break;case 99:r.commit(a[o],a[o-4],a[o-2],a[o-6]);break;case 100:r.commit(a[o-2],a[o-4],a[o],a[o-6]);break;case 101:r.commit(a[o],a[o-2],a[o-4],a[o-6]);break;case 102:r.commit(a[o-2],a[o],a[o-4],a[o-6]);break;case 103:r.commit(a[o-4],a[o-2],a[o],a[o-6]);break;case 104:r.commit(a[o-4],a[o],a[o-2],a[o-6]);break;case 105:r.commit(a[o-2],a[o-4],a[o-6],a[o]);break;case 106:r.commit(a[o],a[o-4],a[o-6],a[o-2]);break;case 107:r.commit(a[o-2],a[o],a[o-6],a[o-4]);break;case 108:r.commit(a[o],a[o-2],a[o-6],a[o-4]);break;case 109:r.commit(a[o-4],a[o-2],a[o-6],a[o]);break;case 110:r.commit(a[o-4],a[o],a[o-6],a[o-2]);break;case 111:this.$="";break;case 112:this.$=a[o];break;case 113:this.$=r.commitType.NORMAL;break;case 114:this.$=r.commitType.REVERSE;break;case 115:this.$=r.commitType.HIGHLIGHT;break;case 118:r.parseDirective("%%{","open_directive");break;case 119:r.parseDirective(a[o],"type_directive");break;case 120:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 121:r.parseDirective("}%%","close_directive","gitGraph")}},table:[{3:1,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{1:[3]},{3:10,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{3:11,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{7:12,8:o,9:[1,13],10:[1,14],11:15,14:c},e(l,[2,124]),e(l,[2,125]),e(l,[2,126]),{47:17,51:[1,18]},{51:[2,118]},{1:[2,1]},{1:[2,2]},{8:[1,19]},{7:20,8:o,11:15,14:c},{9:[1,21]},e(h,[2,10],{12:22,13:[1,23]}),e(u,[2,9]),{9:[1,25],48:24,53:d},e([9,53],[2,119]),{1:[2,3]},{8:[1,27]},{7:28,8:o,11:15,14:c},{8:[2,7],14:[1,31],15:29,16:30,17:32,18:33,19:34,20:[1,35],22:[1,36],24:[1,37],25:[1,38],26:39,27:[1,40],29:[1,44],32:[1,43],37:[1,42],40:[1,41]},e(u,[2,8]),e(p,[2,116]),{49:45,52:[1,46]},e(p,[2,121]),{1:[2,4]},{8:[1,47]},e(h,[2,11]),{4:48,8:r,14:i,55:s},e(h,[2,13]),e(f,[2,14]),e(f,[2,15]),e(f,[2,16]),{21:[1,49]},{23:[1,50]},e(f,[2,19]),e(f,[2,20]),e(f,[2,21]),{28:51,34:g,54:y},e(f,[2,111],{41:54,33:[1,57],34:[1,59],35:[1,55],38:[1,56],42:[1,58]}),{28:60,34:g,54:y},{33:[1,61],35:[1,62]},{28:63,34:g,54:y},{48:64,53:d},{53:[2,120]},{1:[2,5]},e(h,[2,12]),e(f,[2,17]),e(f,[2,18]),e(f,[2,22]),e(m,[2,122]),e(m,[2,123]),e(f,[2,46]),{34:[1,65]},{39:66,43:b,44:_,45:x},{34:[1,70]},{34:[1,71]},e(f,[2,112]),e(f,[2,30],{33:[1,72],35:[1,74],38:[1,73]}),{34:[1,75]},{34:[1,76],36:[1,77]},e(f,[2,23],{30:[1,78]}),e(p,[2,117]),e(f,[2,47],{33:[1,80],38:[1,79],42:[1,81]}),e(f,[2,48],{33:[1,83],35:[1,82],42:[1,84]}),e(v,[2,113]),e(v,[2,114]),e(v,[2,115]),e(f,[2,51],{35:[1,85],38:[1,86],42:[1,87]}),e(f,[2,62],{33:[1,90],35:[1,88],38:[1,89]}),{34:[1,91]},{39:92,43:b,44:_,45:x},{34:[1,93]},e(f,[2,25],{35:[1,94]}),{33:[1,95]},{33:[1,96]},{31:[1,97]},{39:98,43:b,44:_,45:x},{34:[1,99]},{34:[1,100]},{34:[1,101]},{34:[1,102]},{34:[1,103]},{34:[1,104]},{39:105,43:b,44:_,45:x},{34:[1,106]},{34:[1,107]},{39:108,43:b,44:_,45:x},{34:[1,109]},e(f,[2,31],{35:[1,111],38:[1,110]}),e(f,[2,32],{33:[1,113],35:[1,112]}),e(f,[2,33],{33:[1,114],38:[1,115]}),{34:[1,116],36:[1,117]},{34:[1,118]},{34:[1,119]},e(f,[2,24]),e(f,[2,49],{33:[1,120],42:[1,121]}),e(f,[2,53],{38:[1,122],42:[1,123]}),e(f,[2,63],{33:[1,125],38:[1,124]}),e(f,[2,50],{33:[1,126],42:[1,127]}),e(f,[2,55],{35:[1,128],42:[1,129]}),e(f,[2,66],{33:[1,131],35:[1,130]}),e(f,[2,52],{38:[1,132],42:[1,133]}),e(f,[2,54],{35:[1,134],42:[1,135]}),e(f,[2,67],{35:[1,137],38:[1,136]}),e(f,[2,64],{33:[1,139],38:[1,138]}),e(f,[2,65],{33:[1,141],35:[1,140]}),e(f,[2,68],{35:[1,143],38:[1,142]}),{39:144,43:b,44:_,45:x},{34:[1,145]},{34:[1,146]},{34:[1,147]},{34:[1,148]},{39:149,43:b,44:_,45:x},e(f,[2,26]),e(f,[2,27]),e(f,[2,28]),e(f,[2,29]),{34:[1,150]},{34:[1,151]},{39:152,43:b,44:_,45:x},{34:[1,153]},{39:154,43:b,44:_,45:x},{34:[1,155]},{34:[1,156]},{34:[1,157]},{34:[1,158]},{34:[1,159]},{34:[1,160]},{34:[1,161]},{39:162,43:b,44:_,45:x},{34:[1,163]},{34:[1,164]},{34:[1,165]},{39:166,43:b,44:_,45:x},{34:[1,167]},{39:168,43:b,44:_,45:x},{34:[1,169]},{34:[1,170]},{34:[1,171]},{39:172,43:b,44:_,45:x},{34:[1,173]},e(f,[2,37],{35:[1,174]}),e(f,[2,38],{38:[1,175]}),e(f,[2,36],{33:[1,176]}),e(f,[2,39],{35:[1,177]}),e(f,[2,34],{38:[1,178]}),e(f,[2,35],{33:[1,179]}),e(f,[2,60],{42:[1,180]}),e(f,[2,73],{33:[1,181]}),e(f,[2,61],{42:[1,182]}),e(f,[2,84],{38:[1,183]}),e(f,[2,74],{33:[1,184]}),e(f,[2,83],{38:[1,185]}),e(f,[2,59],{42:[1,186]}),e(f,[2,72],{33:[1,187]}),e(f,[2,58],{42:[1,188]}),e(f,[2,78],{35:[1,189]}),e(f,[2,71],{33:[1,190]}),e(f,[2,77],{35:[1,191]}),e(f,[2,57],{42:[1,192]}),e(f,[2,85],{38:[1,193]}),e(f,[2,56],{42:[1,194]}),e(f,[2,79],{35:[1,195]}),e(f,[2,80],{35:[1,196]}),e(f,[2,86],{38:[1,197]}),e(f,[2,70],{33:[1,198]}),e(f,[2,81],{38:[1,199]}),e(f,[2,69],{33:[1,200]}),e(f,[2,75],{35:[1,201]}),e(f,[2,76],{35:[1,202]}),e(f,[2,82],{38:[1,203]}),{34:[1,204]},{39:205,43:b,44:_,45:x},{34:[1,206]},{34:[1,207]},{39:208,43:b,44:_,45:x},{34:[1,209]},{34:[1,210]},{34:[1,211]},{34:[1,212]},{39:213,43:b,44:_,45:x},{34:[1,214]},{39:215,43:b,44:_,45:x},{34:[1,216]},{34:[1,217]},{34:[1,218]},{34:[1,219]},{34:[1,220]},{34:[1,221]},{34:[1,222]},{39:223,43:b,44:_,45:x},{34:[1,224]},{34:[1,225]},{34:[1,226]},{39:227,43:b,44:_,45:x},{34:[1,228]},{39:229,43:b,44:_,45:x},{34:[1,230]},{34:[1,231]},{34:[1,232]},{39:233,43:b,44:_,45:x},e(f,[2,40]),e(f,[2,42]),e(f,[2,41]),e(f,[2,43]),e(f,[2,45]),e(f,[2,44]),e(f,[2,101]),e(f,[2,102]),e(f,[2,99]),e(f,[2,100]),e(f,[2,104]),e(f,[2,103]),e(f,[2,108]),e(f,[2,107]),e(f,[2,106]),e(f,[2,105]),e(f,[2,110]),e(f,[2,109]),e(f,[2,98]),e(f,[2,97]),e(f,[2,96]),e(f,[2,95]),e(f,[2,93]),e(f,[2,94]),e(f,[2,92]),e(f,[2,91]),e(f,[2,90]),e(f,[2,89]),e(f,[2,87]),e(f,[2,88])],defaultActions:{9:[2,118],10:[2,1],11:[2,2],19:[2,3],27:[2,4],46:[2,120],47:[2,5]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),50;case 1:return this.begin("type_directive"),51;case 2:return this.popState(),this.begin("arg_directive"),9;case 3:return this.popState(),this.popState(),53;case 4:return 52;case 5:return this.begin("acc_title"),20;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),22;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 34:case 38:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:return 14;case 13:case 14:break;case 15:return 6;case 16:return 40;case 17:return 33;case 18:return 38;case 19:return 42;case 20:return 43;case 21:return 44;case 22:return 45;case 23:return 35;case 24:return 29;case 25:return 30;case 26:return 37;case 27:return 32;case 28:return 27;case 29:case 30:return 10;case 31:return 9;case 32:return"CARET";case 33:this.begin("options");break;case 35:return 13;case 36:return 36;case 37:this.begin("string");break;case 39:return 34;case 40:return 31;case 41:return 54;case 42:return 8}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:gitGraph\b)/i,/^(?:commit(?=\s|$))/i,/^(?:id:)/i,/^(?:type:)/i,/^(?:msg:)/i,/^(?:NORMAL\b)/i,/^(?:REVERSE\b)/i,/^(?:HIGHLIGHT\b)/i,/^(?:tag:)/i,/^(?:branch(?=\s|$))/i,/^(?:order:)/i,/^(?:merge(?=\s|$))/i,/^(?:cherry-pick(?=\s|$))/i,/^(?:checkout(?=\s|$))/i,/^(?:LR\b)/i,/^(?:BT\b)/i,/^(?::)/i,/^(?:\^)/i,/^(?:options\r?\n)/i,/^(?:[ \r\n\t]+end\b)/i,/^(?:[\s\S]+(?=[ \r\n\t]+end))/i,/^(?:["]["])/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[0-9]+(?=\s|$))/i,/^(?:\w([-\./\w]*[-\w])?)/i,/^(?:$)/i,/^(?:\s+)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},options:{rules:[34,35],inclusive:!1},string:{rules:[38,39],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,36,37,40,41,42,43],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Jr.parser=Jr;const ti=Jr,ei=t=>null!==t.match(/^\s*gitGraph/);let ni=ar().gitGraph.mainBranchName,ri=ar().gitGraph.mainBranchOrder,ii={},ai=null,si={};si[ni]={name:ni,order:ri};let oi={};oi[ni]=ai;let ci=ni,li="LR",hi=0;function ui(){return $n({length:7})}let di={};const pi=function(t){if(t=Yt.sanitizeText(t,ar()),void 0===oi[t]){let e=new Error('Trying to checkout branch which is not yet created. (Help try using "branch '+t+'")');throw e.hash={text:"checkout "+t,token:"checkout "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"branch '+t+'"']},e}{ci=t;const e=oi[ci];ai=ii[e]}};function fi(t,e,n){const r=t.indexOf(e);-1===r?t.push(n):t.splice(r,1,n)}function gi(t){const e=t.reduce(((t,e)=>t.seq>e.seq?t:e),t[0]);let n="";t.forEach((function(t){n+=t===e?"\t*":"\t|"}));const r=[n,e.id,e.seq];for(let i in oi)oi[i]===e.id&&r.push(i);if(Nt.debug(r.join(" ")),e.parents&&2==e.parents.length){const n=ii[e.parents[0]];fi(t,e,n),t.push(ii[e.parents[1]])}else{if(0==e.parents.length)return;{const n=ii[e.parents];fi(t,e,n)}}gi(t=function(t,e){const n=Object.create(null);return t.reduce(((t,r)=>{const i=e(r);return n[i]||(n[i]=!0,t.push(r)),t}),[])}(t,(t=>t.id)))}const yi=function(){const t=Object.keys(ii).map((function(t){return ii[t]}));return t.forEach((function(t){Nt.debug(t.id)})),t.sort(((t,e)=>t.seq-e.seq)),t},mi={NORMAL:0,REVERSE:1,HIGHLIGHT:2,MERGE:3,CHERRY_PICK:4},bi={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gitGraph,setDirection:function(t){li=t},setOptions:function(t){Nt.debug("options str",t),t=(t=t&&t.trim())||"{}";try{di=JSON.parse(t)}catch(e){Nt.error("error while parsing gitGraph options",e.message)}},getOptions:function(){return di},commit:function(t,e,n,r){Nt.debug("Entering commit:",t,e,n,r),e=Yt.sanitizeText(e,ar()),t=Yt.sanitizeText(t,ar()),r=Yt.sanitizeText(r,ar());const i={id:e||hi+"-"+ui(),message:t,seq:hi++,type:n||mi.NORMAL,tag:r||"",parents:null==ai?[]:[ai.id],branch:ci};ai=i,ii[i.id]=i,oi[ci]=i.id,Nt.debug("in pushCommit "+i.id)},branch:function(t,e){if(t=Yt.sanitizeText(t,ar()),void 0!==oi[t]){let e=new Error('Trying to create an existing branch. (Help: Either use a new name if you want create a new branch or try using "checkout '+t+'")');throw e.hash={text:"branch "+t,token:"branch "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"checkout '+t+'"']},e}oi[t]=null!=ai?ai.id:null,si[t]={name:t,order:e?parseInt(e,10):null},pi(t),Nt.debug("in createBranch")},merge:function(t,e,n,r){t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar());const i=ii[oi[ci]],a=ii[oi[t]];if(ci===t){let e=new Error('Incorrect usage of "merge". Cannot merge a branch to itself');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(void 0===i||!i){let e=new Error('Incorrect usage of "merge". Current branch ('+ci+")has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["commit"]},e}if(void 0===oi[t]){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") does not exist");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch "+t]},e}if(void 0===a||!a){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"commit"']},e}if(i===a){let e=new Error('Incorrect usage of "merge". Both branches have same head');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(e&&void 0!==ii[e]){let i=new Error('Incorrect usage of "merge". Commit with id:'+e+" already exists, use different custom Id");throw i.hash={text:"merge "+t+e+n+r,token:"merge "+t+e+n+r,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["merge "+t+" "+e+"_UNIQUE "+n+" "+r]},i}const s={id:e||hi+"-"+ui(),message:"merged branch "+t+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,oi[t]],branch:ci,type:mi.MERGE,customType:n,customId:!!e,tag:r||""};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in mergeBranch")},cherryPick:function(t,e,n){if(Nt.debug("Entering cherryPick:",t,e,n),t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar()),n=Yt.sanitizeText(n,ar()),!t||void 0===ii[t]){let n=new Error('Incorrect usage of "cherryPick". Source commit id should exist and provided');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}let r=ii[t],i=r.branch;if(r.type===mi.MERGE){let n=new Error('Incorrect usage of "cherryPick". Source commit should not be a merge commit');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}if(!e||void 0===ii[e]){if(i===ci){let n=new Error('Incorrect usage of "cherryPick". Source commit is already on current branch');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const a=ii[oi[ci]];if(void 0===a||!a){let n=new Error('Incorrect usage of "cherry-pick". Current branch ('+ci+")has no commits");throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const s={id:hi+"-"+ui(),message:"cherry-picked "+r+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,r.id],branch:ci,type:mi.CHERRY_PICK,tag:n??"cherry-pick:"+r.id};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in cherryPick")}},checkout:pi,prettyPrint:function(){Nt.debug(ii);gi([yi()[0]])},clear:function(){ii={},ai=null;let t=ar().gitGraph.mainBranchName,e=ar().gitGraph.mainBranchOrder;oi={},oi[t]=null,si={},si[t]={name:t,order:e},ci=t,hi=0,Dr()},getBranchesAsObjArray:function(){const t=Object.values(si).map(((t,e)=>null!==t.order?t:{...t,order:parseFloat(`0.${e}`,10)})).sort(((t,e)=>t.order-e.order)).map((({name:t})=>({name:t})));return t},getBranches:function(){return oi},getCommits:function(){return ii},getCommitsArray:yi,getCurrentBranch:function(){return ci},getDirection:function(){return li},getHead:function(){return ai},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,setDiagramTitle:$r,getDiagramTitle:Rr,commitType:mi};let _i={};const xi=0,vi=1,ki=2,wi=3,Ei=4;let Ci={},Ti={},Si=[],Ai=0;const Li=(t,e,n)=>{const r=qr().gitGraph,i=t.append("g").attr("class","commit-bullets"),a=t.append("g").attr("class","commit-labels");let s=0;Object.keys(e).sort(((t,n)=>e[t].seq-e[n].seq)).forEach((t=>{const o=e[t],c=Ci[o.branch].pos,l=s+10;if(n){let t,e=void 0!==o.customType&&""!==o.customType?o.customType:o.type;switch(e){case xi:t="commit-normal";break;case vi:t="commit-reverse";break;case ki:t="commit-highlight";break;case wi:t="commit-merge";break;case Ei:t="commit-cherry-pick";break;default:t="commit-normal"}if(e===ki){const e=i.append("rect");e.attr("x",l-10),e.attr("y",c-10),e.attr("height",20),e.attr("width",20),e.attr("class",`commit ${o.id} commit-highlight${Ci[o.branch].index%8} ${t}-outer`),i.append("rect").attr("x",l-6).attr("y",c-6).attr("height",12).attr("width",12).attr("class",`commit ${o.id} commit${Ci[o.branch].index%8} ${t}-inner`)}else if(e===Ei)i.append("circle").attr("cx",l).attr("cy",c).attr("r",10).attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l-3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l+3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l+3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l-3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`);else{const n=i.append("circle");if(n.attr("cx",l),n.attr("cy",c),n.attr("r",o.type===wi?9:10),n.attr("class",`commit ${o.id} commit${Ci[o.branch].index%8}`),e===wi){const e=i.append("circle");e.attr("cx",l),e.attr("cy",c),e.attr("r",6),e.attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}if(e===vi){i.append("path").attr("d",`M ${l-5},${c-5}L${l+5},${c+5}M${l-5},${c+5}L${l+5},${c-5}`).attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}}}if(Ti[o.id]={x:s+10,y:c},n){const t=4,e=2;if(o.type!==Ei&&(o.customId&&o.type===wi||o.type!==wi)&&r.showCommitLabel){const t=a.append("g"),n=t.insert("rect").attr("class","commit-label-bkg"),i=t.append("text").attr("x",s).attr("y",c+25).attr("class","commit-label").text(o.id);let l=i.node().getBBox();if(n.attr("x",s+10-l.width/2-e).attr("y",c+13.5).attr("width",l.width+2*e).attr("height",l.height+2*e),i.attr("x",s+10-l.width/2),r.rotateCommitLabel){let e=-7.5-(l.width+10)/25*9.5,n=10+l.width/25*8.5;t.attr("transform","translate("+e+", "+n+") rotate("+"-45, "+s+", "+c+")")}}if(o.tag){const n=a.insert("polygon"),r=a.append("circle"),i=a.append("text").attr("y",c-16).attr("class","tag-label").text(o.tag);let l=i.node().getBBox();i.attr("x",s+10-l.width/2);const h=l.height/2,u=c-19.2;n.attr("class","tag-label-bkg").attr("points",`\n          ${s-l.width/2-t/2},${u+e}\n          ${s-l.width/2-t/2},${u-e}\n          ${s+10-l.width/2-t},${u-h-e}\n          ${s+10+l.width/2+t},${u-h-e}\n          ${s+10+l.width/2+t},${u+h+e}\n          ${s+10-l.width/2-t},${u+h+e}`),r.attr("cx",s-l.width/2+t/2).attr("cy",u).attr("r",1.5).attr("class","tag-hole")}}s+=50,s>Ai&&(Ai=s)}))},Bi=(t,e,n=0)=>{const r=t+Math.abs(t-e)/2;if(n>5)return r;if(Si.every((t=>Math.abs(t-r)>=10)))return Si.push(r),r;const i=Math.abs(t-e);return Bi(t,e-i/5,n+1)},Ni=(t,e,n,r)=>{const i=Ti[e.id],a=Ti[n.id],s=((t,e,n)=>Object.keys(n).filter((r=>n[r].branch===e.branch&&n[r].seq>t.seq&&n[r].seq<e.seq)).length>0)(e,n,r);let o,c="",l="",h=0,u=0,d=Ci[n.branch].index;if(s){c="A 10 10, 0, 0, 0,",l="A 10 10, 0, 0, 1,",h=10,u=10,d=Ci[n.branch].index;const t=i.y<a.y?Bi(i.y,a.y):Bi(a.y,i.y);o=i.y<a.y?`M ${i.x} ${i.y} L ${i.x} ${t-h} ${c} ${i.x+u} ${t} L ${a.x-h} ${t} ${l} ${a.x} ${t+u} L ${a.x} ${a.y}`:`M ${i.x} ${i.y} L ${i.x} ${t+h} ${l} ${i.x+u} ${t} L ${a.x-h} ${t} ${c} ${a.x} ${t-u} L ${a.x} ${a.y}`}else i.y<a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[n.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`),i.y>a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${a.x-h} ${i.y} ${c} ${a.x} ${i.y-u} L ${a.x} ${a.y}`),i.y===a.y&&(d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`);t.append("path").attr("d",o).attr("class","arrow arrow"+d%8)},Di=(t,e)=>{const n=qr().gitGraph,r=t.append("g");e.forEach(((t,e)=>{const i=e%8,a=Ci[t.name].pos,s=r.append("line");s.attr("x1",0),s.attr("y1",a),s.attr("x2",Ai),s.attr("y2",a),s.attr("class","branch branch"+i),Si.push(a);const o=(t=>{const e=document.createElementNS("http://www.w3.org/2000/svg","text");let n=[];n="string"==typeof t?t.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(t)?t:[];for(const r of n){const t=document.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),t.setAttribute("dy","1em"),t.setAttribute("x","0"),t.setAttribute("class","row"),t.textContent=r.trim(),e.appendChild(t)}return e})(t.name),c=r.insert("rect"),l=r.insert("g").attr("class","branchLabel").insert("g").attr("class","label branch-label"+i);l.node().appendChild(o);let h=o.getBBox();c.attr("class","branchLabelBkg label"+i).attr("rx",4).attr("ry",4).attr("x",-h.width-4-(!0===n.rotateCommitLabel?30:0)).attr("y",-h.height/2+8).attr("width",h.width+18).attr("height",h.height+4),l.attr("transform","translate("+(-h.width-14-(!0===n.rotateCommitLabel?30:0))+", "+(a-h.height/2-1)+")"),c.attr("transform","translate(-19, "+(a-h.height/2)+")")}))},Oi={draw:function(t,e,n,r){Ci={},Ti={},_i={},Ai=0,Si=[];const i=qr(),a=i.gitGraph;Nt.debug("in gitgraph renderer",t+"\n","id:",e,n),_i=r.db.getCommits();const s=r.db.getBranchesAsObjArray();let c=0;s.forEach(((t,e)=>{Ci[t.name]={pos:c,index:e},c+=50+(a.rotateCommitLabel?40:0)}));const l=(0,o.Ys)(`[id="${e}"]`);Li(l,_i,!1),a.showBranches&&Di(l,s),((t,e)=>{const n=t.append("g").attr("class","commit-arrows");Object.keys(e).forEach((t=>{const r=e[t];r.parents&&r.parents.length>0&&r.parents.forEach((t=>{Ni(n,e[t],r,e)}))}))})(l,_i),Li(l,_i,!0),Gn.insertTitle(l,"gitTitleText",a.titleTopMargin,r.db.getDiagramTitle()),Vr(void 0,l,a.diagramPadding,a.useMaxWidth??i.useMaxWidth)}},Mi=t=>`\n  .commit-id,\n  .commit-msg,\n  .branch-label {\n    fill: lightgrey;\n    color: lightgrey;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  ${[0,1,2,3,4,5,6,7].map((e=>`\n        .branch-label${e} { fill: ${t["gitBranchLabel"+e]}; }\n        .commit${e} { stroke: ${t["git"+e]}; fill: ${t["git"+e]}; }\n        .commit-highlight${e} { stroke: ${t["gitInv"+e]}; fill: ${t["gitInv"+e]}; }\n        .label${e}  { fill: ${t["git"+e]}; }\n        .arrow${e} { stroke: ${t["git"+e]}; }\n        `)).join("\n")}\n\n  .branch {\n    stroke-width: 1;\n    stroke: ${t.lineColor};\n    stroke-dasharray: 2;\n  }\n  .commit-label { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelColor};}\n  .commit-label-bkg { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelBackground}; opacity: 0.5; }\n  .tag-label { font-size: ${t.tagLabelFontSize}; fill: ${t.tagLabelColor};}\n  .tag-label-bkg { fill: ${t.tagLabelBackground}; stroke: ${t.tagLabelBorder}; }\n  .tag-hole { fill: ${t.textColor}; }\n\n  .commit-merge {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n  .commit-reverse {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n    stroke-width: 3;\n  }\n  .commit-highlight-outer {\n  }\n  .commit-highlight-inner {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n\n  .arrow { stroke-width: 8; stroke-linecap: round; fill: none}\n  .gitTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n  }\n`;var Ii=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,6],r=[1,7],i=[1,8],a=[1,9],s=[1,16],o=[1,11],l=[1,12],h=[1,13],u=[1,14],d=[1,15],p=[1,27],f=[1,33],g=[1,34],y=[1,35],m=[1,36],b=[1,37],_=[1,72],x=[1,73],v=[1,74],k=[1,75],w=[1,76],E=[1,77],C=[1,78],T=[1,38],S=[1,39],A=[1,40],L=[1,41],B=[1,42],N=[1,43],D=[1,44],O=[1,45],M=[1,46],I=[1,47],F=[1,48],$=[1,49],R=[1,50],Z=[1,51],P=[1,52],j=[1,53],Y=[1,54],z=[1,55],U=[1,56],W=[1,57],q=[1,59],H=[1,60],V=[1,61],G=[1,62],X=[1,63],K=[1,64],Q=[1,65],J=[1,66],tt=[1,67],et=[1,68],nt=[1,69],rt=[24,52],it=[24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],at=[15,24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],st=[1,94],ot=[1,95],ct=[1,96],lt=[1,97],ht=[15,24,52],ut=[7,8,9,10,18,22,25,26,27,28],dt=[15,24,43,52],pt=[15,24,43,52,86,87,89,90],ft=[15,43],gt=[44,46,47,48,49,50,51,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],yt={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,direction:5,directive:6,direction_tb:7,direction_bt:8,direction_rl:9,direction_lr:10,graphConfig:11,openDirective:12,typeDirective:13,closeDirective:14,NEWLINE:15,":":16,argDirective:17,open_directive:18,type_directive:19,arg_directive:20,close_directive:21,C4_CONTEXT:22,statements:23,EOF:24,C4_CONTAINER:25,C4_COMPONENT:26,C4_DYNAMIC:27,C4_DEPLOYMENT:28,otherStatements:29,diagramStatements:30,otherStatement:31,title:32,accDescription:33,acc_title:34,acc_title_value:35,acc_descr:36,acc_descr_value:37,acc_descr_multiline_value:38,boundaryStatement:39,boundaryStartStatement:40,boundaryStopStatement:41,boundaryStart:42,LBRACE:43,ENTERPRISE_BOUNDARY:44,attributes:45,SYSTEM_BOUNDARY:46,BOUNDARY:47,CONTAINER_BOUNDARY:48,NODE:49,NODE_L:50,NODE_R:51,RBRACE:52,diagramStatement:53,PERSON:54,PERSON_EXT:55,SYSTEM:56,SYSTEM_DB:57,SYSTEM_QUEUE:58,SYSTEM_EXT:59,SYSTEM_EXT_DB:60,SYSTEM_EXT_QUEUE:61,CONTAINER:62,CONTAINER_DB:63,CONTAINER_QUEUE:64,CONTAINER_EXT:65,CONTAINER_EXT_DB:66,CONTAINER_EXT_QUEUE:67,COMPONENT:68,COMPONENT_DB:69,COMPONENT_QUEUE:70,COMPONENT_EXT:71,COMPONENT_EXT_DB:72,COMPONENT_EXT_QUEUE:73,REL:74,BIREL:75,REL_U:76,REL_D:77,REL_L:78,REL_R:79,REL_B:80,REL_INDEX:81,UPDATE_EL_STYLE:82,UPDATE_REL_STYLE:83,UPDATE_LAYOUT_CONFIG:84,attribute:85,STR:86,STR_KEY:87,STR_VALUE:88,ATTRIBUTE:89,ATTRIBUTE_EMPTY:90,$accept:0,$end:1},terminals_:{2:"error",7:"direction_tb",8:"direction_bt",9:"direction_rl",10:"direction_lr",15:"NEWLINE",16:":",18:"open_directive",19:"type_directive",20:"arg_directive",21:"close_directive",22:"C4_CONTEXT",24:"EOF",25:"C4_CONTAINER",26:"C4_COMPONENT",27:"C4_DYNAMIC",28:"C4_DEPLOYMENT",32:"title",33:"accDescription",34:"acc_title",35:"acc_title_value",36:"acc_descr",37:"acc_descr_value",38:"acc_descr_multiline_value",43:"LBRACE",44:"ENTERPRISE_BOUNDARY",46:"SYSTEM_BOUNDARY",47:"BOUNDARY",48:"CONTAINER_BOUNDARY",49:"NODE",50:"NODE_L",51:"NODE_R",52:"RBRACE",54:"PERSON",55:"PERSON_EXT",56:"SYSTEM",57:"SYSTEM_DB",58:"SYSTEM_QUEUE",59:"SYSTEM_EXT",60:"SYSTEM_EXT_DB",61:"SYSTEM_EXT_QUEUE",62:"CONTAINER",63:"CONTAINER_DB",64:"CONTAINER_QUEUE",65:"CONTAINER_EXT",66:"CONTAINER_EXT_DB",67:"CONTAINER_EXT_QUEUE",68:"COMPONENT",69:"COMPONENT_DB",70:"COMPONENT_QUEUE",71:"COMPONENT_EXT",72:"COMPONENT_EXT_DB",73:"COMPONENT_EXT_QUEUE",74:"REL",75:"BIREL",76:"REL_U",77:"REL_D",78:"REL_L",79:"REL_R",80:"REL_B",81:"REL_INDEX",82:"UPDATE_EL_STYLE",83:"UPDATE_REL_STYLE",84:"UPDATE_LAYOUT_CONFIG",86:"STR",87:"STR_KEY",88:"STR_VALUE",89:"ATTRIBUTE",90:"ATTRIBUTE_EMPTY"},productions_:[0,[3,1],[3,1],[3,2],[5,1],[5,1],[5,1],[5,1],[4,1],[6,4],[6,6],[12,1],[13,1],[17,1],[14,1],[11,4],[11,4],[11,4],[11,4],[11,4],[23,1],[23,1],[23,2],[29,1],[29,2],[29,3],[31,1],[31,1],[31,2],[31,2],[31,1],[39,3],[40,3],[40,3],[40,4],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[41,1],[30,1],[30,2],[30,3],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,1],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[45,1],[45,2],[85,1],[85,2],[85,1],[85,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setDirection("TB");break;case 5:r.setDirection("BT");break;case 6:r.setDirection("RL");break;case 7:r.setDirection("LR");break;case 11:r.parseDirective("%%{","open_directive");break;case 12:break;case 13:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 14:r.parseDirective("}%%","close_directive","c4Context");break;case 15:case 16:case 17:case 18:case 19:r.setC4Type(a[o-3]);break;case 26:r.setTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 27:r.setAccDescription(a[o].substring(15)),this.$=a[o].substring(15);break;case 28:this.$=a[o].trim(),r.setTitle(this.$);break;case 29:case 30:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 35:case 36:a[o].splice(2,0,"ENTERPRISE"),r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 37:r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 38:a[o].splice(2,0,"CONTAINER"),r.addContainerBoundary(...a[o]),this.$=a[o];break;case 39:r.addDeploymentNode("node",...a[o]),this.$=a[o];break;case 40:r.addDeploymentNode("nodeL",...a[o]),this.$=a[o];break;case 41:r.addDeploymentNode("nodeR",...a[o]),this.$=a[o];break;case 42:r.popBoundaryParseStack();break;case 46:r.addPersonOrSystem("person",...a[o]),this.$=a[o];break;case 47:r.addPersonOrSystem("external_person",...a[o]),this.$=a[o];break;case 48:r.addPersonOrSystem("system",...a[o]),this.$=a[o];break;case 49:r.addPersonOrSystem("system_db",...a[o]),this.$=a[o];break;case 50:r.addPersonOrSystem("system_queue",...a[o]),this.$=a[o];break;case 51:r.addPersonOrSystem("external_system",...a[o]),this.$=a[o];break;case 52:r.addPersonOrSystem("external_system_db",...a[o]),this.$=a[o];break;case 53:r.addPersonOrSystem("external_system_queue",...a[o]),this.$=a[o];break;case 54:r.addContainer("container",...a[o]),this.$=a[o];break;case 55:r.addContainer("container_db",...a[o]),this.$=a[o];break;case 56:r.addContainer("container_queue",...a[o]),this.$=a[o];break;case 57:r.addContainer("external_container",...a[o]),this.$=a[o];break;case 58:r.addContainer("external_container_db",...a[o]),this.$=a[o];break;case 59:r.addContainer("external_container_queue",...a[o]),this.$=a[o];break;case 60:r.addComponent("component",...a[o]),this.$=a[o];break;case 61:r.addComponent("component_db",...a[o]),this.$=a[o];break;case 62:r.addComponent("component_queue",...a[o]),this.$=a[o];break;case 63:r.addComponent("external_component",...a[o]),this.$=a[o];break;case 64:r.addComponent("external_component_db",...a[o]),this.$=a[o];break;case 65:r.addComponent("external_component_queue",...a[o]),this.$=a[o];break;case 67:r.addRel("rel",...a[o]),this.$=a[o];break;case 68:r.addRel("birel",...a[o]),this.$=a[o];break;case 69:r.addRel("rel_u",...a[o]),this.$=a[o];break;case 70:r.addRel("rel_d",...a[o]),this.$=a[o];break;case 71:r.addRel("rel_l",...a[o]),this.$=a[o];break;case 72:r.addRel("rel_r",...a[o]),this.$=a[o];break;case 73:r.addRel("rel_b",...a[o]),this.$=a[o];break;case 74:a[o].splice(0,1),r.addRel("rel",...a[o]),this.$=a[o];break;case 75:r.updateElStyle("update_el_style",...a[o]),this.$=a[o];break;case 76:r.updateRelStyle("update_rel_style",...a[o]),this.$=a[o];break;case 77:r.updateLayoutConfig("update_layout_config",...a[o]),this.$=a[o];break;case 78:this.$=[a[o]];break;case 79:a[o].unshift(a[o-1]),this.$=a[o];break;case 80:case 82:this.$=a[o].trim();break;case 81:let t={};t[a[o-1].trim()]=a[o].trim(),this.$=t;break;case 83:this.$=""}},table:[{3:1,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[3]},{1:[2,1]},{1:[2,2]},{3:17,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[2,8]},{1:[2,4]},{1:[2,5]},{1:[2,6]},{1:[2,7]},{13:18,19:[1,19]},{15:[1,20]},{15:[1,21]},{15:[1,22]},{15:[1,23]},{15:[1,24]},{19:[2,11]},{1:[2,3]},{14:25,16:[1,26],21:p},e([16,21],[2,12]),{23:28,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:79,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:80,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:81,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:82,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,83]},{17:84,20:[1,85]},{15:[2,14]},{24:[1,86]},e(rt,[2,20],{53:32,39:58,40:70,42:71,30:87,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(rt,[2,21]),e(it,[2,23],{15:[1,88]}),e(rt,[2,43],{15:[1,89]}),e(at,[2,26]),e(at,[2,27]),{35:[1,90]},{37:[1,91]},e(at,[2,30]),{45:92,85:93,86:st,87:ot,89:ct,90:lt},{45:98,85:93,86:st,87:ot,89:ct,90:lt},{45:99,85:93,86:st,87:ot,89:ct,90:lt},{45:100,85:93,86:st,87:ot,89:ct,90:lt},{45:101,85:93,86:st,87:ot,89:ct,90:lt},{45:102,85:93,86:st,87:ot,89:ct,90:lt},{45:103,85:93,86:st,87:ot,89:ct,90:lt},{45:104,85:93,86:st,87:ot,89:ct,90:lt},{45:105,85:93,86:st,87:ot,89:ct,90:lt},{45:106,85:93,86:st,87:ot,89:ct,90:lt},{45:107,85:93,86:st,87:ot,89:ct,90:lt},{45:108,85:93,86:st,87:ot,89:ct,90:lt},{45:109,85:93,86:st,87:ot,89:ct,90:lt},{45:110,85:93,86:st,87:ot,89:ct,90:lt},{45:111,85:93,86:st,87:ot,89:ct,90:lt},{45:112,85:93,86:st,87:ot,89:ct,90:lt},{45:113,85:93,86:st,87:ot,89:ct,90:lt},{45:114,85:93,86:st,87:ot,89:ct,90:lt},{45:115,85:93,86:st,87:ot,89:ct,90:lt},{45:116,85:93,86:st,87:ot,89:ct,90:lt},e(ht,[2,66]),{45:117,85:93,86:st,87:ot,89:ct,90:lt},{45:118,85:93,86:st,87:ot,89:ct,90:lt},{45:119,85:93,86:st,87:ot,89:ct,90:lt},{45:120,85:93,86:st,87:ot,89:ct,90:lt},{45:121,85:93,86:st,87:ot,89:ct,90:lt},{45:122,85:93,86:st,87:ot,89:ct,90:lt},{45:123,85:93,86:st,87:ot,89:ct,90:lt},{45:124,85:93,86:st,87:ot,89:ct,90:lt},{45:125,85:93,86:st,87:ot,89:ct,90:lt},{45:126,85:93,86:st,87:ot,89:ct,90:lt},{45:127,85:93,86:st,87:ot,89:ct,90:lt},{30:128,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,130],43:[1,129]},{45:131,85:93,86:st,87:ot,89:ct,90:lt},{45:132,85:93,86:st,87:ot,89:ct,90:lt},{45:133,85:93,86:st,87:ot,89:ct,90:lt},{45:134,85:93,86:st,87:ot,89:ct,90:lt},{45:135,85:93,86:st,87:ot,89:ct,90:lt},{45:136,85:93,86:st,87:ot,89:ct,90:lt},{45:137,85:93,86:st,87:ot,89:ct,90:lt},{24:[1,138]},{24:[1,139]},{24:[1,140]},{24:[1,141]},e(ut,[2,9]),{14:142,21:p},{21:[2,13]},{1:[2,15]},e(rt,[2,22]),e(it,[2,24],{31:31,29:143,32:f,33:g,34:y,36:m,38:b}),e(rt,[2,44],{29:29,30:30,31:31,53:32,39:58,40:70,42:71,23:144,32:f,33:g,34:y,36:m,38:b,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(at,[2,28]),e(at,[2,29]),e(ht,[2,46]),e(dt,[2,78],{85:93,45:145,86:st,87:ot,89:ct,90:lt}),e(pt,[2,80]),{88:[1,146]},e(pt,[2,82]),e(pt,[2,83]),e(ht,[2,47]),e(ht,[2,48]),e(ht,[2,49]),e(ht,[2,50]),e(ht,[2,51]),e(ht,[2,52]),e(ht,[2,53]),e(ht,[2,54]),e(ht,[2,55]),e(ht,[2,56]),e(ht,[2,57]),e(ht,[2,58]),e(ht,[2,59]),e(ht,[2,60]),e(ht,[2,61]),e(ht,[2,62]),e(ht,[2,63]),e(ht,[2,64]),e(ht,[2,65]),e(ht,[2,67]),e(ht,[2,68]),e(ht,[2,69]),e(ht,[2,70]),e(ht,[2,71]),e(ht,[2,72]),e(ht,[2,73]),e(ht,[2,74]),e(ht,[2,75]),e(ht,[2,76]),e(ht,[2,77]),{41:147,52:[1,148]},{15:[1,149]},{43:[1,150]},e(ft,[2,35]),e(ft,[2,36]),e(ft,[2,37]),e(ft,[2,38]),e(ft,[2,39]),e(ft,[2,40]),e(ft,[2,41]),{1:[2,16]},{1:[2,17]},{1:[2,18]},{1:[2,19]},{15:[1,151]},e(it,[2,25]),e(rt,[2,45]),e(dt,[2,79]),e(pt,[2,81]),e(ht,[2,31]),e(ht,[2,42]),e(gt,[2,32]),e(gt,[2,33],{15:[1,152]}),e(ut,[2,10]),e(gt,[2,34])],defaultActions:{2:[2,1],3:[2,2],5:[2,8],6:[2,4],7:[2,5],8:[2,6],9:[2,7],16:[2,11],17:[2,3],27:[2,14],85:[2,13],86:[2,15],138:[2,16],139:[2,17],140:[2,18],141:[2,19]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},mt=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),18;case 1:return 7;case 2:return 8;case 3:return 9;case 4:return 10;case 5:return this.begin("type_directive"),19;case 6:return this.popState(),this.begin("arg_directive"),16;case 7:return this.popState(),this.popState(),21;case 8:return 20;case 9:return 32;case 10:return 33;case 11:return this.begin("acc_title"),34;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),36;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 78:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:case 21:case 75:break;case 19:c;break;case 20:return 15;case 22:return 22;case 23:return 25;case 24:return 26;case 25:return 27;case 26:return 28;case 27:return this.begin("person_ext"),55;case 28:return this.begin("person"),54;case 29:return this.begin("system_ext_queue"),61;case 30:return this.begin("system_ext_db"),60;case 31:return this.begin("system_ext"),59;case 32:return this.begin("system_queue"),58;case 33:return this.begin("system_db"),57;case 34:return this.begin("system"),56;case 35:return this.begin("boundary"),47;case 36:return this.begin("enterprise_boundary"),44;case 37:return this.begin("system_boundary"),46;case 38:return this.begin("container_ext_queue"),67;case 39:return this.begin("container_ext_db"),66;case 40:return this.begin("container_ext"),65;case 41:return this.begin("container_queue"),64;case 42:return this.begin("container_db"),63;case 43:return this.begin("container"),62;case 44:return this.begin("container_boundary"),48;case 45:return this.begin("component_ext_queue"),73;case 46:return this.begin("component_ext_db"),72;case 47:return this.begin("component_ext"),71;case 48:return this.begin("component_queue"),70;case 49:return this.begin("component_db"),69;case 50:return this.begin("component"),68;case 51:case 52:return this.begin("node"),49;case 53:return this.begin("node_l"),50;case 54:return this.begin("node_r"),51;case 55:return this.begin("rel"),74;case 56:return this.begin("birel"),75;case 57:case 58:return this.begin("rel_u"),76;case 59:case 60:return this.begin("rel_d"),77;case 61:case 62:return this.begin("rel_l"),78;case 63:case 64:return this.begin("rel_r"),79;case 65:return this.begin("rel_b"),80;case 66:return this.begin("rel_index"),81;case 67:return this.begin("update_el_style"),82;case 68:return this.begin("update_rel_style"),83;case 69:return this.begin("update_layout_config"),84;case 70:return"EOF_IN_STRUCT";case 71:return this.begin("attribute"),"ATTRIBUTE_EMPTY";case 72:this.begin("attribute");break;case 73:case 84:this.popState(),this.popState();break;case 74:case 76:return 90;case 77:this.begin("string");break;case 79:case 85:return"STR";case 80:this.begin("string_kv");break;case 81:return this.begin("string_kv_key"),"STR_KEY";case 82:this.popState(),this.begin("string_kv_value");break;case 83:return"STR_VALUE";case 86:return"LBRACE";case 87:return"RBRACE";case 88:return"SPACE";case 89:return"EOL";case 90:return 24}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:title\s[^#\n;]+)/,/^(?:accDescription\s[^#\n;]+)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:C4Context\b)/,/^(?:C4Container\b)/,/^(?:C4Component\b)/,/^(?:C4Dynamic\b)/,/^(?:C4Deployment\b)/,/^(?:Person_Ext\b)/,/^(?:Person\b)/,/^(?:SystemQueue_Ext\b)/,/^(?:SystemDb_Ext\b)/,/^(?:System_Ext\b)/,/^(?:SystemQueue\b)/,/^(?:SystemDb\b)/,/^(?:System\b)/,/^(?:Boundary\b)/,/^(?:Enterprise_Boundary\b)/,/^(?:System_Boundary\b)/,/^(?:ContainerQueue_Ext\b)/,/^(?:ContainerDb_Ext\b)/,/^(?:Container_Ext\b)/,/^(?:ContainerQueue\b)/,/^(?:ContainerDb\b)/,/^(?:Container\b)/,/^(?:Container_Boundary\b)/,/^(?:ComponentQueue_Ext\b)/,/^(?:ComponentDb_Ext\b)/,/^(?:Component_Ext\b)/,/^(?:ComponentQueue\b)/,/^(?:ComponentDb\b)/,/^(?:Component\b)/,/^(?:Deployment_Node\b)/,/^(?:Node\b)/,/^(?:Node_L\b)/,/^(?:Node_R\b)/,/^(?:Rel\b)/,/^(?:BiRel\b)/,/^(?:Rel_Up\b)/,/^(?:Rel_U\b)/,/^(?:Rel_Down\b)/,/^(?:Rel_D\b)/,/^(?:Rel_Left\b)/,/^(?:Rel_L\b)/,/^(?:Rel_Right\b)/,/^(?:Rel_R\b)/,/^(?:Rel_Back\b)/,/^(?:RelIndex\b)/,/^(?:UpdateElementStyle\b)/,/^(?:UpdateRelStyle\b)/,/^(?:UpdateLayoutConfig\b)/,/^(?:$)/,/^(?:[(][ ]*[,])/,/^(?:[(])/,/^(?:[)])/,/^(?:,,)/,/^(?:,)/,/^(?:[ ]*["]["])/,/^(?:[ ]*["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[ ]*[\$])/,/^(?:[^=]*)/,/^(?:[=][ ]*["])/,/^(?:[^"]+)/,/^(?:["])/,/^(?:[^,]+)/,/^(?:\{)/,/^(?:\})/,/^(?:[\s]+)/,/^(?:[\n\r]+)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},string_kv_value:{rules:[83,84],inclusive:!1},string_kv_key:{rules:[82],inclusive:!1},string_kv:{rules:[81],inclusive:!1},string:{rules:[78,79],inclusive:!1},attribute:{rules:[73,74,75,76,77,80,85],inclusive:!1},update_layout_config:{rules:[70,71,72,73],inclusive:!1},update_rel_style:{rules:[70,71,72,73],inclusive:!1},update_el_style:{rules:[70,71,72,73],inclusive:!1},rel_b:{rules:[70,71,72,73],inclusive:!1},rel_r:{rules:[70,71,72,73],inclusive:!1},rel_l:{rules:[70,71,72,73],inclusive:!1},rel_d:{rules:[70,71,72,73],inclusive:!1},rel_u:{rules:[70,71,72,73],inclusive:!1},rel_bi:{rules:[],inclusive:!1},rel:{rules:[70,71,72,73],inclusive:!1},node_r:{rules:[70,71,72,73],inclusive:!1},node_l:{rules:[70,71,72,73],inclusive:!1},node:{rules:[70,71,72,73],inclusive:!1},index:{rules:[],inclusive:!1},rel_index:{rules:[70,71,72,73],inclusive:!1},component_ext_queue:{rules:[],inclusive:!1},component_ext_db:{rules:[70,71,72,73],inclusive:!1},component_ext:{rules:[70,71,72,73],inclusive:!1},component_queue:{rules:[70,71,72,73],inclusive:!1},component_db:{rules:[70,71,72,73],inclusive:!1},component:{rules:[70,71,72,73],inclusive:!1},container_boundary:{rules:[70,71,72,73],inclusive:!1},container_ext_queue:{rules:[],inclusive:!1},container_ext_db:{rules:[70,71,72,73],inclusive:!1},container_ext:{rules:[70,71,72,73],inclusive:!1},container_queue:{rules:[70,71,72,73],inclusive:!1},container_db:{rules:[70,71,72,73],inclusive:!1},container:{rules:[70,71,72,73],inclusive:!1},birel:{rules:[70,71,72,73],inclusive:!1},system_boundary:{rules:[70,71,72,73],inclusive:!1},enterprise_boundary:{rules:[70,71,72,73],inclusive:!1},boundary:{rules:[70,71,72,73],inclusive:!1},system_ext_queue:{rules:[70,71,72,73],inclusive:!1},system_ext_db:{rules:[70,71,72,73],inclusive:!1},system_ext:{rules:[70,71,72,73],inclusive:!1},system_queue:{rules:[70,71,72,73],inclusive:!1},system_db:{rules:[70,71,72,73],inclusive:!1},system:{rules:[70,71,72,73],inclusive:!1},person_ext:{rules:[70,71,72,73],inclusive:!1},person:{rules:[70,71,72,73],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,86,87,88,89,90],inclusive:!0}}},t);function bt(){this.yy={}}return yt.lexer=mt,bt.prototype=yt,yt.Parser=bt,new bt}();Ii.parser=Ii;const Fi=Ii,$i=t=>null!==t.match(/^\s*C4Context|C4Container|C4Component|C4Dynamic|C4Deployment/);let Ri=[],Zi=[""],Pi="global",ji="",Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],zi=[],Ui="",Wi=!1,qi=4,Hi=2;var Vi;const Gi=function(t){return null==t?Ri:Ri.filter((e=>e.parentBoundary===t))},Xi=function(){return Wi},Ki={addPersonOrSystem:function(t,e,n,r,i,a,s){if(null===e||null===n)return;let o={};const c=Ri.find((t=>t.alias===e));if(c&&e===c.alias?o=c:(o.alias=e,Ri.push(o)),o.label=null==n?{text:""}:{text:n},null==r)o.descr={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]={text:e}}else o.descr={text:r};if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.sprite=i;if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=e}else o.tags=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=e}else o.link=s;o.typeC4Shape={text:t},o.parentBoundary=Pi,o.wrap=Xi()},addPersonOrSystemBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"system"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addContainer:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addContainerBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"container"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addComponent:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addDeploymentNode:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Yi.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Yi.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.type={text:"node"};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.type={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.nodeType=t,c.parentBoundary=Pi,c.wrap=Xi(),ji=Pi,Pi=e,Zi.push(ji)},popBoundaryParseStack:function(){Pi=ji,Zi.pop(),ji=Zi.pop(),Zi.push(ji)},addRel:function(t,e,n,r,i,a,s,o,c){if(null==t||null==e||null==n||null==r)return;let l={};const h=zi.find((t=>t.from===e&&t.to===n));if(h?l=h:zi.push(l),l.type=t,l.from=e,l.to=n,l.label={text:r},null==i)l.techn={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];l[t]={text:e}}else l.techn={text:i};if(null==a)l.descr={text:""};else if("object"==typeof a){let[t,e]=Object.entries(a)[0];l[t]={text:e}}else l.descr={text:a};if("object"==typeof s){let[t,e]=Object.entries(s)[0];l[t]=e}else l.sprite=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];l[t]=e}else l.tags=o;if("object"==typeof c){let[t,e]=Object.entries(c)[0];l[t]=e}else l.link=c;l.wrap=Xi()},updateElStyle:function(t,e,n,r,i,a,s,o,c,l,h){let u=Ri.find((t=>t.alias===e));if(void 0!==u||(u=Yi.find((t=>t.alias===e)),void 0!==u)){if(null!=n)if("object"==typeof n){let[t,e]=Object.entries(n)[0];u[t]=e}else u.bgColor=n;if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];u[t]=e}else u.fontColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];u[t]=e}else u.borderColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];u[t]=e}else u.shadowing=a;if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];u[t]=e}else u.shape=s;if(null!=o)if("object"==typeof o){let[t,e]=Object.entries(o)[0];u[t]=e}else u.sprite=o;if(null!=c)if("object"==typeof c){let[t,e]=Object.entries(c)[0];u[t]=e}else u.techn=c;if(null!=l)if("object"==typeof l){let[t,e]=Object.entries(l)[0];u[t]=e}else u.legendText=l;if(null!=h)if("object"==typeof h){let[t,e]=Object.entries(h)[0];u[t]=e}else u.legendSprite=h}},updateRelStyle:function(t,e,n,r,i,a,s){const o=zi.find((t=>t.from===e&&t.to===n));if(void 0!==o){if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]=e}else o.textColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.lineColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=parseInt(e)}else o.offsetX=parseInt(a);if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=parseInt(e)}else o.offsetY=parseInt(s)}},updateLayoutConfig:function(t,e,n){let r=qi,i=Hi;if("object"==typeof e){const t=Object.values(e)[0];r=parseInt(t)}else r=parseInt(e);if("object"==typeof n){const t=Object.values(n)[0];i=parseInt(t)}else i=parseInt(n);r>=1&&(qi=r),i>=1&&(Hi=i)},autoWrap:Xi,setWrap:function(t){Wi=t},getC4ShapeArray:Gi,getC4Shape:function(t){return Ri.find((e=>e.alias===t))},getC4ShapeKeys:function(t){return Object.keys(Gi(t))},getBoundarys:function(t){return null==t?Yi:Yi.filter((e=>e.parentBoundary===t))},getCurrentBoundaryParse:function(){return Pi},getParentBoundaryParse:function(){return ji},getRels:function(){return zi},getTitle:function(){return Ui},getC4Type:function(){return Vi},getC4ShapeInRow:function(){return qi},getC4BoundaryInRow:function(){return Hi},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().c4,clear:function(){Ri=[],Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],ji="",Pi="global",Zi=[""],zi=[],Zi=[""],Ui="",Wi=!1,qi=4,Hi=2},LINETYPE:{SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25},ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},setTitle:function(t){let e=Ft(t,ar());Ui=e},setC4Type:function(t){let e=Ft(t,ar());Vi=e}},Qi=function(t,e){const n=t.append("rect");if(n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),"undefined"!==e.attrs&&null!==e.attrs)for(let r in e.attrs)n.attr(r,e.attrs[r]);return"undefined"!==e.class&&n.attr("class",e.class),n},Ji=function(t,e,n,r,i,a){const o=t.append("image");o.attr("width",e),o.attr("height",n),o.attr("x",r),o.attr("y",i);let c=a.startsWith("data:image/png;base64")?a:(0,s.N)(a);o.attr("xlink:href",c)},ta=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},ea=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),na=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{fontSize:l,fontFamily:h,fontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,s=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").attr("dominant-baseline","middle").style("font-size",l).style("font-weight",u).style("font-family",h);s.append("tspan").attr("dy",t).text(d[p]).attr("alignment-baseline","mathematical"),r(s,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,0,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),ra=function(t,e,n){const r=t.append("g");let i=e.bgColor?e.bgColor:"none",a=e.borderColor?e.borderColor:"#444444",s=e.fontColor?e.fontColor:"black",o={"stroke-width":1,"stroke-dasharray":"7.0,7.0"};e.nodeType&&(o={"stroke-width":1});let c={x:e.x,y:e.y,fill:i,stroke:a,width:e.width,height:e.height,rx:2.5,ry:2.5,attrs:o};Qi(r,c);let l=n.boundaryFont();l.fontWeight="bold",l.fontSize=l.fontSize+2,l.fontColor=s,na(n)(e.label.text,r,e.x,e.y+e.label.Y,e.width,e.height,{fill:"#444444"},l),e.type&&""!==e.type.text&&(l=n.boundaryFont(),l.fontColor=s,na(n)(e.type.text,r,e.x,e.y+e.type.Y,e.width,e.height,{fill:"#444444"},l)),e.descr&&""!==e.descr.text&&(l=n.boundaryFont(),l.fontSize=l.fontSize-2,l.fontColor=s,na(n)(e.descr.text,r,e.x,e.y+e.descr.Y,e.width,e.height,{fill:"#444444"},l))},ia=function(t,e,n){var r;let i=e.bgColor?e.bgColor:n[e.typeC4Shape.text+"_bg_color"],a=e.borderColor?e.borderColor:n[e.typeC4Shape.text+"_border_color"],s=e.fontColor?e.fontColor:"#FFFFFF",o="data:image/png;base64,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";switch(e.typeC4Shape.text){case"person":o="data:image/png;base64,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";break;case"external_person":o="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAIAAADYYG7QAAAB6ElEQVR4Xu2YLY+EMBCG9+dWr0aj0Wg0Go1Go0+j8Xdv2uTCvv1gpt0ebHKPuhDaeW4605Z9mJvx4AdXUyTUdd08z+u6flmWZRnHsWkafk9DptAwDPu+f0eAYtu2PEaGWuj5fCIZrBAC2eLBAnRCsEkkxmeaJp7iDJ2QMDdHsLg8SxKFEJaAo8lAXnmuOFIhTMpxxKATebo4UiFknuNo4OniSIXQyRxEA3YsnjGCVEjVXD7yLUAqxBGUyPv/Y4W2beMgGuS7kVQIBycH0fD+oi5pezQETxdHKmQKGk1eQEYldK+jw5GxPfZ9z7Mk0Qnhf1W1m3w//EUn5BDmSZsbR44QQLBEqrBHqOrmSKaQAxdnLArCrxZcM7A7ZKs4ioRq8LFC+NpC3WCBJsvpVw5edm9iEXFuyNfxXAgSwfrFQ1c0iNda8AdejvUgnktOtJQQxmcfFzGglc5WVCj7oDgFqU18boeFSs52CUh8LE8BIVQDT1ABrB0HtgSEYlX5doJnCwv9TXocKCaKbnwhdDKPq4lf3SwU3HLq4V/+WYhHVMa/3b4IlfyikAduCkcBc7mQ3/z/Qq/cTuikhkzB12Ae/mcJC9U+Vo8Ej1gWAtgbeGgFsAMHr50BIWOLCbezvhpBFUdY6EJuJ/QDW0XoMX60zZ0AAAAASUVORK5CYII="}const c=t.append("g");c.attr("class","person-man");const l=ta();switch(e.typeC4Shape.text){case"person":case"external_person":case"system":case"external_system":case"container":case"external_container":case"component":case"external_component":l.x=e.x,l.y=e.y,l.fill=i,l.width=e.width,l.height=e.height,l.stroke=a,l.rx=2.5,l.ry=2.5,l.attrs={"stroke-width":.5},Qi(c,l);break;case"system_db":case"external_system_db":case"container_db":case"external_container_db":case"component_db":case"external_component_db":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,-10 half,-10 half,-10c0,0 half,0 half,10l0,heightc0,10 -half,10 -half,10c0,0 -half,0 -half,-10l0,-height".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2).replaceAll("height",e.height)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,10 half,10 half,10c0,0 half,0 half,-10".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2));break;case"system_queue":case"external_system_queue":case"container_queue":case"external_container_queue":case"component_queue":case"external_component_queue":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startylwidth,0c5,0 5,half 5,halfc0,0 0,half -5,halfl-width,0c-5,0 -5,-half -5,-halfc0,0 0,-half 5,-half".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("width",e.width).replaceAll("half",e.height/2)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc-5,0 -5,half -5,halfc0,half 5,half 5,half".replaceAll("startx",e.x+e.width).replaceAll("starty",e.y).replaceAll("half",e.height/2))}let h=ea(n,e.typeC4Shape.text);switch(c.append("text").attr("fill",s).attr("font-family",h.fontFamily).attr("font-size",h.fontSize-2).attr("font-style","italic").attr("lengthAdjust","spacing").attr("textLength",e.typeC4Shape.width).attr("x",e.x+e.width/2-e.typeC4Shape.width/2).attr("y",e.y+e.typeC4Shape.Y).text("<<"+e.typeC4Shape.text+">>"),e.typeC4Shape.text){case"person":case"external_person":Ji(c,48,48,e.x+e.width/2-24,e.y+e.image.Y,o)}let u=n[e.typeC4Shape.text+"Font"]();return u.fontWeight="bold",u.fontSize=u.fontSize+2,u.fontColor=s,na(n)(e.label.text,c,e.x,e.y+e.label.Y,e.width,e.height,{fill:s},u),u=n[e.typeC4Shape.text+"Font"](),u.fontColor=s,e.techn&&""!==(null==(r=e.techn)?void 0:r.text)?na(n)(e.techn.text,c,e.x,e.y+e.techn.Y,e.width,e.height,{fill:s,"font-style":"italic"},u):e.type&&""!==e.type.text&&na(n)(e.type.text,c,e.x,e.y+e.type.Y,e.width,e.height,{fill:s,"font-style":"italic"},u),e.descr&&""!==e.descr.text&&(u=n.personFont(),u.fontColor=s,na(n)(e.descr.text,c,e.x,e.y+e.descr.Y,e.width,e.height,{fill:s},u)),e.height},aa=(t,e,n)=>{const r=t.append("g");let i=0;for(let a of e){let t=a.textColor?a.textColor:"#444444",e=a.lineColor?a.lineColor:"#444444",s=a.offsetX?parseInt(a.offsetX):0,o=a.offsetY?parseInt(a.offsetY):0,c="";if(0===i){let t=r.append("line");t.attr("x1",a.startPoint.x),t.attr("y1",a.startPoint.y),t.attr("x2",a.endPoint.x),t.attr("y2",a.endPoint.y),t.attr("stroke-width","1"),t.attr("stroke",e),t.style("fill","none"),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)"),i=-1}else{let t=r.append("path");t.attr("fill","none").attr("stroke-width","1").attr("stroke",e).attr("d","Mstartx,starty Qcontrolx,controly stopx,stopy ".replaceAll("startx",a.startPoint.x).replaceAll("starty",a.startPoint.y).replaceAll("controlx",a.startPoint.x+(a.endPoint.x-a.startPoint.x)/2-(a.endPoint.x-a.startPoint.x)/4).replaceAll("controly",a.startPoint.y+(a.endPoint.y-a.startPoint.y)/2).replaceAll("stopx",a.endPoint.x).replaceAll("stopy",a.endPoint.y)),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)")}let l=n.messageFont();na(n)(a.label.text,r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+o,a.label.width,a.label.height,{fill:t},l),a.techn&&""!==a.techn.text&&(l=n.messageFont(),na(n)("["+a.techn.text+"]",r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+n.messageFontSize+5+o,Math.max(a.label.width,a.techn.width),a.techn.height,{fill:t,"font-style":"italic"},l))}},sa=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},oa=function(t){t.append("defs").append("marker").attr("id","arrowend").attr("refX",1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 10 0 L 0 5 L 10 10 z")},ca=function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},la=function(t){const e=t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",16).attr("refY",4);e.append("path").attr("fill","black").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 9,2 V 6 L16,4 Z"),e.append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 0,1 L 6,7 M 6,1 L 0,7")},ha=function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},ua=function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},da=function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")};s.N;let pa=0,fa=0,ga=4,ya=2;Ii.yy=Ki;let ma={};class ba{constructor(t){this.name="",this.data={},this.data.startx=void 0,this.data.stopx=void 0,this.data.starty=void 0,this.data.stopy=void 0,this.data.widthLimit=void 0,this.nextData={},this.nextData.startx=void 0,this.nextData.stopx=void 0,this.nextData.starty=void 0,this.nextData.stopy=void 0,this.nextData.cnt=0,_a(t.db.getConfig())}setData(t,e,n,r){this.nextData.startx=this.data.startx=t,this.nextData.stopx=this.data.stopx=e,this.nextData.starty=this.data.starty=n,this.nextData.stopy=this.data.stopy=r}updateVal(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])}insert(t){this.nextData.cnt=this.nextData.cnt+1;let e=this.nextData.startx===this.nextData.stopx?this.nextData.stopx+t.margin:this.nextData.stopx+2*t.margin,n=e+t.width,r=this.nextData.starty+2*t.margin,i=r+t.height;(e>=this.data.widthLimit||n>=this.data.widthLimit||this.nextData.cnt>ga)&&(e=this.nextData.startx+t.margin+ma.nextLinePaddingX,r=this.nextData.stopy+2*t.margin,this.nextData.stopx=n=e+t.width,this.nextData.starty=this.nextData.stopy,this.nextData.stopy=i=r+t.height,this.nextData.cnt=1),t.x=e,t.y=r,this.updateVal(this.data,"startx",e,Math.min),this.updateVal(this.data,"starty",r,Math.min),this.updateVal(this.data,"stopx",n,Math.max),this.updateVal(this.data,"stopy",i,Math.max),this.updateVal(this.nextData,"startx",e,Math.min),this.updateVal(this.nextData,"starty",r,Math.min),this.updateVal(this.nextData,"stopx",n,Math.max),this.updateVal(this.nextData,"stopy",i,Math.max)}init(t){this.name="",this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,widthLimit:void 0},this.nextData={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,cnt:0},_a(t.db.getConfig())}bumpLastMargin(t){this.data.stopx+=t,this.data.stopy+=t}}const _a=function(t){Sn(ma,t),t.fontFamily&&(ma.personFontFamily=ma.systemFontFamily=ma.messageFontFamily=t.fontFamily),t.fontSize&&(ma.personFontSize=ma.systemFontSize=ma.messageFontSize=t.fontSize),t.fontWeight&&(ma.personFontWeight=ma.systemFontWeight=ma.messageFontWeight=t.fontWeight)},xa=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),va=t=>({fontFamily:t.boundaryFontFamily,fontSize:t.boundaryFontSize,fontWeight:t.boundaryFontWeight});function ka(t,e,n,r,i){if(!e[t].width)if(n)e[t].text=Zn(e[t].text,i,r),e[t].textLines=e[t].text.split(Yt.lineBreakRegex).length,e[t].width=i,e[t].height=jn(e[t].text,r);else{let n=e[t].text.split(Yt.lineBreakRegex);e[t].textLines=n.length;let i=0;e[t].height=0,e[t].width=0;for(const a of n)e[t].width=Math.max(Yn(a,r),e[t].width),i=jn(a,r),e[t].height=e[t].height+i}}const wa=function(t,e,n){e.x=n.data.startx,e.y=n.data.starty,e.width=n.data.stopx-n.data.startx,e.height=n.data.stopy-n.data.starty,e.label.y=ma.c4ShapeMargin-35;let r=e.wrap&&ma.wrap,i=va(ma);i.fontSize=i.fontSize+2,i.fontWeight="bold",ka("label",e,r,i,Yn(e.label.text,i)),ra(t,e,ma)},Ea=function(t,e,n,r){let i=0;for(const a of r){i=0;const r=n[a];let s=xa(ma,r.typeC4Shape.text);switch(s.fontSize=s.fontSize-2,r.typeC4Shape.width=Yn("<<"+r.typeC4Shape.text+">>",s),r.typeC4Shape.height=s.fontSize+2,r.typeC4Shape.Y=ma.c4ShapePadding,i=r.typeC4Shape.Y+r.typeC4Shape.height-4,r.image={width:0,height:0,Y:0},r.typeC4Shape.text){case"person":case"external_person":r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height}r.sprite&&(r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height);let o=r.wrap&&ma.wrap,c=ma.width-2*ma.c4ShapePadding,l=xa(ma,r.typeC4Shape.text);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",r,o,l,c),r.label.Y=i+8,i=r.label.Y+r.label.height,r.type&&""!==r.type.text){r.type.text="["+r.type.text+"]",ka("type",r,o,xa(ma,r.typeC4Shape.text),c),r.type.Y=i+5,i=r.type.Y+r.type.height}else if(r.techn&&""!==r.techn.text){r.techn.text="["+r.techn.text+"]",ka("techn",r,o,xa(ma,r.techn.text),c),r.techn.Y=i+5,i=r.techn.Y+r.techn.height}let h=i,u=r.label.width;if(r.descr&&""!==r.descr.text){ka("descr",r,o,xa(ma,r.typeC4Shape.text),c),r.descr.Y=i+20,i=r.descr.Y+r.descr.height,u=Math.max(r.label.width,r.descr.width),h=i-5*r.descr.textLines}u+=ma.c4ShapePadding,r.width=Math.max(r.width||ma.width,u,ma.width),r.height=Math.max(r.height||ma.height,h,ma.height),r.margin=r.margin||ma.c4ShapeMargin,t.insert(r),ia(e,r,ma)}t.bumpLastMargin(ma.c4ShapeMargin)};class Ca{constructor(t,e){this.x=t,this.y=e}}let Ta=function(t,e){let n=t.x,r=t.y,i=e.x,a=e.y,s=n+t.width/2,o=r+t.height/2,c=Math.abs(n-i),l=Math.abs(r-a),h=l/c,u=t.height/t.width,d=null;return r==a&&n<i?d=new Ca(n+t.width,o):r==a&&n>i?d=new Ca(n,o):n==i&&r<a?d=new Ca(s,r+t.height):n==i&&r>a&&(d=new Ca(s,r)),n>i&&r<a?d=u>=h?new Ca(n,o+h*t.width/2):new Ca(s-c/l*t.height/2,r+t.height):n<i&&r<a?d=u>=h?new Ca(n+t.width,o+h*t.width/2):new Ca(s+c/l*t.height/2,r+t.height):n<i&&r>a?d=u>=h?new Ca(n+t.width,o-h*t.width/2):new Ca(s+t.height/2*c/l,r):n>i&&r>a&&(d=u>=h?new Ca(n,o-t.width/2*h):new Ca(s-t.height/2*c/l,r)),d},Sa=function(t,e){let n={x:0,y:0};n.x=e.x+e.width/2,n.y=e.y+e.height/2;let r=Ta(t,n);return n.x=t.x+t.width/2,n.y=t.y+t.height/2,{startPoint:r,endPoint:Ta(e,n)}};function Aa(t,e,n,r,i){let a=new ba(i);a.data.widthLimit=n.data.widthLimit/Math.min(ya,r.length);for(let[s,o]of r.entries()){let r=0;o.image={width:0,height:0,Y:0},o.sprite&&(o.image.width=48,o.image.height=48,o.image.Y=r,r=o.image.Y+o.image.height);let c=o.wrap&&ma.wrap,l=va(ma);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",o,c,l,a.data.widthLimit),o.label.Y=r+8,r=o.label.Y+o.label.height,o.type&&""!==o.type.text){o.type.text="["+o.type.text+"]",ka("type",o,c,va(ma),a.data.widthLimit),o.type.Y=r+5,r=o.type.Y+o.type.height}if(o.descr&&""!==o.descr.text){let t=va(ma);t.fontSize=t.fontSize-2,ka("descr",o,c,t,a.data.widthLimit),o.descr.Y=r+20,r=o.descr.Y+o.descr.height}if(0==s||s%ya==0){let t=n.data.startx+ma.diagramMarginX,e=n.data.stopy+ma.diagramMarginY+r;a.setData(t,t,e,e)}else{let t=a.data.stopx!==a.data.startx?a.data.stopx+ma.diagramMarginX:a.data.startx,e=a.data.starty;a.setData(t,t,e,e)}a.name=o.alias;let h=i.db.getC4ShapeArray(o.alias),u=i.db.getC4ShapeKeys(o.alias);u.length>0&&Ea(a,t,h,u),e=o.alias;let d=i.db.getBoundarys(e);d.length>0&&Aa(t,e,a,d,i),"global"!==o.alias&&wa(t,o,a),n.data.stopy=Math.max(a.data.stopy+ma.c4ShapeMargin,n.data.stopy),n.data.stopx=Math.max(a.data.stopx+ma.c4ShapeMargin,n.data.stopx),pa=Math.max(pa,n.data.stopx),fa=Math.max(fa,n.data.stopy)}}const La={drawPersonOrSystemArray:Ea,drawBoundary:wa,setConf:_a,draw:function(t,e,n,r){ma=ar().c4;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body");let c=r.db;r.db.setWrap(ma.wrap),ga=c.getC4ShapeInRow(),ya=c.getC4BoundaryInRow(),Nt.debug(`C:${JSON.stringify(ma,null,2)}`);const l="sandbox"===i?s.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`);ua(l),ha(l),da(l);let h=new ba(r);h.setData(ma.diagramMarginX,ma.diagramMarginX,ma.diagramMarginY,ma.diagramMarginY),h.data.widthLimit=screen.availWidth,pa=ma.diagramMarginX,fa=ma.diagramMarginY;const u=r.db.getTitle();Aa(l,"",h,r.db.getBoundarys(""),r),sa(l),oa(l),la(l),ca(l),function(t,e,n,r){let i=0;for(let s of e){i+=1;let t=s.wrap&&ma.wrap,e={fontFamily:(a=ma).messageFontFamily,fontSize:a.messageFontSize,fontWeight:a.messageFontWeight};"C4Dynamic"===r.db.getC4Type()&&(s.label.text=i+": "+s.label.text);let o=Yn(s.label.text,e);ka("label",s,t,e,o),s.techn&&""!==s.techn.text&&(o=Yn(s.techn.text,e),ka("techn",s,t,e,o)),s.descr&&""!==s.descr.text&&(o=Yn(s.descr.text,e),ka("descr",s,t,e,o));let c=n(s.from),l=n(s.to),h=Sa(c,l);s.startPoint=h.startPoint,s.endPoint=h.endPoint}var a;aa(t,e,ma)}(l,r.db.getRels(),r.db.getC4Shape,r),h.data.stopx=pa,h.data.stopy=fa;const d=h.data;let p=d.stopy-d.starty+2*ma.diagramMarginY;const f=d.stopx-d.startx+2*ma.diagramMarginX;u&&l.append("text").text(u).attr("x",(d.stopx-d.startx)/2-4*ma.diagramMarginX).attr("y",d.starty+ma.diagramMarginY),dr(l,p,f,ma.useMaxWidth);const g=u?60:0;l.attr("viewBox",d.startx-ma.diagramMarginX+" -"+(ma.diagramMarginY+g)+" "+f+" "+(p+g)),Nt.debug("models:",d)}};var Ba=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,7],i=[1,8],a=[1,9],s=[1,10],o=[1,13],c=[1,12],l=[1,16,25],h=[1,20],u=[1,32],d=[1,33],p=[1,34],f=[1,36],g=[1,39],y=[1,37],m=[1,38],b=[1,44],_=[1,45],x=[1,40],v=[1,41],k=[1,42],w=[1,43],E=[1,48],C=[1,49],T=[1,50],S=[1,51],A=[16,25],L=[1,65],B=[1,66],N=[1,67],D=[1,68],O=[1,69],M=[1,70],I=[1,71],F=[1,80],$=[16,25,32,45,46,54,60,61,62,63,64,65,66,71,73],R=[16,25,30,32,45,46,50,54,60,61,62,63,64,65,66,71,73,88,89,90,91],Z=[5,8,9,10,11,16,19,23,25],P=[54,88,89,90,91],j=[54,65,66,88,89,90,91],Y=[54,60,61,62,63,64,88,89,90,91],z=[16,25,32],U=[1,107],W={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,statments:5,direction:6,directive:7,direction_tb:8,direction_bt:9,direction_rl:10,direction_lr:11,graphConfig:12,openDirective:13,typeDirective:14,closeDirective:15,NEWLINE:16,":":17,argDirective:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,CLASS_DIAGRAM:23,statements:24,EOF:25,statement:26,className:27,alphaNumToken:28,classLiteralName:29,GENERICTYPE:30,relationStatement:31,LABEL:32,classStatement:33,methodStatement:34,annotationStatement:35,clickStatement:36,cssClassStatement:37,noteStatement:38,acc_title:39,acc_title_value:40,acc_descr:41,acc_descr_value:42,acc_descr_multiline_value:43,CLASS:44,STYLE_SEPARATOR:45,STRUCT_START:46,members:47,STRUCT_STOP:48,ANNOTATION_START:49,ANNOTATION_END:50,MEMBER:51,SEPARATOR:52,relation:53,STR:54,NOTE_FOR:55,noteText:56,NOTE:57,relationType:58,lineType:59,AGGREGATION:60,EXTENSION:61,COMPOSITION:62,DEPENDENCY:63,LOLLIPOP:64,LINE:65,DOTTED_LINE:66,CALLBACK:67,LINK:68,LINK_TARGET:69,CLICK:70,CALLBACK_NAME:71,CALLBACK_ARGS:72,HREF:73,CSSCLASS:74,commentToken:75,textToken:76,graphCodeTokens:77,textNoTagsToken:78,TAGSTART:79,TAGEND:80,"==":81,"--":82,PCT:83,DEFAULT:84,SPACE:85,MINUS:86,keywords:87,UNICODE_TEXT:88,NUM:89,ALPHA:90,BQUOTE_STR:91,$accept:0,$end:1},terminals_:{2:"error",5:"statments",8:"direction_tb",9:"direction_bt",10:"direction_rl",11:"direction_lr",16:"NEWLINE",17:":",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",23:"CLASS_DIAGRAM",25:"EOF",30:"GENERICTYPE",32:"LABEL",39:"acc_title",40:"acc_title_value",41:"acc_descr",42:"acc_descr_value",43:"acc_descr_multiline_value",44:"CLASS",45:"STYLE_SEPARATOR",46:"STRUCT_START",48:"STRUCT_STOP",49:"ANNOTATION_START",50:"ANNOTATION_END",51:"MEMBER",52:"SEPARATOR",54:"STR",55:"NOTE_FOR",57:"NOTE",60:"AGGREGATION",61:"EXTENSION",62:"COMPOSITION",63:"DEPENDENCY",64:"LOLLIPOP",65:"LINE",66:"DOTTED_LINE",67:"CALLBACK",68:"LINK",69:"LINK_TARGET",70:"CLICK",71:"CALLBACK_NAME",72:"CALLBACK_ARGS",73:"HREF",74:"CSSCLASS",77:"graphCodeTokens",79:"TAGSTART",80:"TAGEND",81:"==",82:"--",83:"PCT",84:"DEFAULT",85:"SPACE",86:"MINUS",87:"keywords",88:"UNICODE_TEXT",89:"NUM",90:"ALPHA",91:"BQUOTE_STR"},productions_:[0,[3,1],[3,1],[3,1],[3,2],[6,1],[6,1],[6,1],[6,1],[4,1],[7,4],[7,6],[13,1],[14,1],[18,1],[15,1],[12,4],[24,1],[24,2],[24,3],[27,1],[27,1],[27,2],[27,2],[27,2],[26,1],[26,2],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,2],[26,2],[26,1],[33,2],[33,4],[33,5],[33,7],[35,4],[47,1],[47,2],[34,1],[34,2],[34,1],[34,1],[31,3],[31,4],[31,4],[31,5],[38,3],[38,2],[53,3],[53,2],[53,2],[53,1],[58,1],[58,1],[58,1],[58,1],[58,1],[59,1],[59,1],[36,3],[36,4],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[37,3],[75,1],[75,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[78,1],[78,1],[78,1],[78,1],[28,1],[28,1],[28,1],[29,1],[56,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.setDirection("TB");break;case 6:r.setDirection("BT");break;case 7:r.setDirection("RL");break;case 8:r.setDirection("LR");break;case 12:r.parseDirective("%%{","open_directive");break;case 13:r.parseDirective(a[o],"type_directive");break;case 14:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 15:r.parseDirective("}%%","close_directive","class");break;case 20:case 21:this.$=a[o];break;case 22:this.$=a[o-1]+a[o];break;case 23:case 24:this.$=a[o-1]+"~"+a[o];break;case 25:r.addRelation(a[o]);break;case 26:a[o-1].title=r.cleanupLabel(a[o]),r.addRelation(a[o-1]);break;case 35:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 36:case 37:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 38:r.addClass(a[o]);break;case 39:r.addClass(a[o-2]),r.setCssClass(a[o-2],a[o]);break;case 40:r.addClass(a[o-3]),r.addMembers(a[o-3],a[o-1]);break;case 41:r.addClass(a[o-5]),r.setCssClass(a[o-5],a[o-3]),r.addMembers(a[o-5],a[o-1]);break;case 42:r.addAnnotation(a[o],a[o-2]);break;case 43:this.$=[a[o]];break;case 44:a[o].push(a[o-1]),this.$=a[o];break;case 45:case 47:case 48:break;case 46:r.addMember(a[o-1],r.cleanupLabel(a[o]));break;case 49:this.$={id1:a[o-2],id2:a[o],relation:a[o-1],relationTitle1:"none",relationTitle2:"none"};break;case 50:this.$={id1:a[o-3],id2:a[o],relation:a[o-1],relationTitle1:a[o-2],relationTitle2:"none"};break;case 51:this.$={id1:a[o-3],id2:a[o],relation:a[o-2],relationTitle1:"none",relationTitle2:a[o-1]};break;case 52:this.$={id1:a[o-4],id2:a[o],relation:a[o-2],relationTitle1:a[o-3],relationTitle2:a[o-1]};break;case 53:r.addNote(a[o],a[o-1]);break;case 54:r.addNote(a[o]);break;case 55:this.$={type1:a[o-2],type2:a[o],lineType:a[o-1]};break;case 56:this.$={type1:"none",type2:a[o],lineType:a[o-1]};break;case 57:this.$={type1:a[o-1],type2:"none",lineType:a[o]};break;case 58:this.$={type1:"none",type2:"none",lineType:a[o]};break;case 59:this.$=r.relationType.AGGREGATION;break;case 60:this.$=r.relationType.EXTENSION;break;case 61:this.$=r.relationType.COMPOSITION;break;case 62:this.$=r.relationType.DEPENDENCY;break;case 63:this.$=r.relationType.LOLLIPOP;break;case 64:this.$=r.lineType.LINE;break;case 65:this.$=r.lineType.DOTTED_LINE;break;case 66:case 72:this.$=a[o-2],r.setClickEvent(a[o-1],a[o]);break;case 67:case 73:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 68:case 76:this.$=a[o-2],r.setLink(a[o-1],a[o]);break;case 69:case 77:this.$=a[o-3],r.setLink(a[o-2],a[o-1],a[o]);break;case 70:case 78:this.$=a[o-3],r.setLink(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 71:case 79:this.$=a[o-4],r.setLink(a[o-3],a[o-2],a[o]),r.setTooltip(a[o-3],a[o-1]);break;case 74:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 75:this.$=a[o-4],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setTooltip(a[o-3],a[o]);break;case 80:r.setCssClass(a[o-1],a[o])}},table:[{3:1,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[3]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{3:14,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[2,9]},e(l,[2,5]),e(l,[2,6]),e(l,[2,7]),e(l,[2,8]),{14:15,20:[1,16]},{16:[1,17]},{20:[2,12]},{1:[2,4]},{15:18,17:[1,19],22:h},e([17,22],[2,13]),{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:21,26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},{16:[1,52]},{18:53,21:[1,54]},{16:[2,15]},{25:[1,55]},{16:[1,56],25:[2,17]},e(A,[2,25],{32:[1,57]}),e(A,[2,27]),e(A,[2,28]),e(A,[2,29]),e(A,[2,30]),e(A,[2,31]),e(A,[2,32]),e(A,[2,33]),e(A,[2,34]),{40:[1,58]},{42:[1,59]},e(A,[2,37]),e(A,[2,45],{53:60,58:63,59:64,32:[1,62],54:[1,61],60:L,61:B,62:N,63:D,64:O,65:M,66:I}),{27:72,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,47]),e(A,[2,48]),{28:73,88:E,89:C,90:T},{27:74,28:46,29:47,88:E,89:C,90:T,91:S},{27:75,28:46,29:47,88:E,89:C,90:T,91:S},{27:76,28:46,29:47,88:E,89:C,90:T,91:S},{54:[1,77]},{27:78,28:46,29:47,88:E,89:C,90:T,91:S},{54:F,56:79},e($,[2,20],{28:46,29:47,27:81,30:[1,82],88:E,89:C,90:T,91:S}),e($,[2,21],{30:[1,83]}),e(R,[2,94]),e(R,[2,95]),e(R,[2,96]),e([16,25,30,32,45,46,54,60,61,62,63,64,65,66,71,73],[2,97]),e(Z,[2,10]),{15:84,22:h},{22:[2,14]},{1:[2,16]},{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:85,25:[2,18],26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},e(A,[2,26]),e(A,[2,35]),e(A,[2,36]),{27:86,28:46,29:47,54:[1,87],88:E,89:C,90:T,91:S},{53:88,58:63,59:64,60:L,61:B,62:N,63:D,64:O,65:M,66:I},e(A,[2,46]),{59:89,65:M,66:I},e(P,[2,58],{58:90,60:L,61:B,62:N,63:D,64:O}),e(j,[2,59]),e(j,[2,60]),e(j,[2,61]),e(j,[2,62]),e(j,[2,63]),e(Y,[2,64]),e(Y,[2,65]),e(A,[2,38],{45:[1,91],46:[1,92]}),{50:[1,93]},{54:[1,94]},{54:[1,95]},{71:[1,96],73:[1,97]},{28:98,88:E,89:C,90:T},{54:F,56:99},e(A,[2,54]),e(A,[2,98]),e($,[2,22]),e($,[2,23]),e($,[2,24]),{16:[1,100]},{25:[2,19]},e(z,[2,49]),{27:101,28:46,29:47,88:E,89:C,90:T,91:S},{27:102,28:46,29:47,54:[1,103],88:E,89:C,90:T,91:S},e(P,[2,57],{58:104,60:L,61:B,62:N,63:D,64:O}),e(P,[2,56]),{28:105,88:E,89:C,90:T},{47:106,51:U},{27:108,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,66],{54:[1,109]}),e(A,[2,68],{54:[1,111],69:[1,110]}),e(A,[2,72],{54:[1,112],72:[1,113]}),e(A,[2,76],{54:[1,115],69:[1,114]}),e(A,[2,80]),e(A,[2,53]),e(Z,[2,11]),e(z,[2,51]),e(z,[2,50]),{27:116,28:46,29:47,88:E,89:C,90:T,91:S},e(P,[2,55]),e(A,[2,39],{46:[1,117]}),{48:[1,118]},{47:119,48:[2,43],51:U},e(A,[2,42]),e(A,[2,67]),e(A,[2,69]),e(A,[2,70],{69:[1,120]}),e(A,[2,73]),e(A,[2,74],{54:[1,121]}),e(A,[2,77]),e(A,[2,78],{69:[1,122]}),e(z,[2,52]),{47:123,51:U},e(A,[2,40]),{48:[2,44]},e(A,[2,71]),e(A,[2,75]),e(A,[2,79]),{48:[1,124]},e(A,[2,41])],defaultActions:{2:[2,1],3:[2,2],4:[2,3],6:[2,9],13:[2,12],14:[2,4],20:[2,15],54:[2,14],55:[2,16],85:[2,19],119:[2,44]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},q=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return 8;case 2:return 9;case 3:return 10;case 4:return 11;case 5:return this.begin("type_directive"),20;case 6:return this.popState(),this.begin("arg_directive"),17;case 7:return this.popState(),this.popState(),22;case 8:return 21;case 9:case 10:case 19:case 27:break;case 11:return this.begin("acc_title"),39;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),41;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 39:case 42:case 45:case 48:case 51:case 54:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:return 16;case 20:case 21:return 23;case 22:return this.begin("struct"),46;case 23:return"EDGE_STATE";case 24:return"EOF_IN_STRUCT";case 25:return"OPEN_IN_STRUCT";case 26:return this.popState(),48;case 28:return"MEMBER";case 29:return 44;case 30:return 74;case 31:return 67;case 32:return 68;case 33:return 70;case 34:return 55;case 35:return 57;case 36:return 49;case 37:return 50;case 38:this.begin("generic");break;case 40:return"GENERICTYPE";case 41:this.begin("string");break;case 43:return"STR";case 44:this.begin("bqstring");break;case 46:return"BQUOTE_STR";case 47:this.begin("href");break;case 49:return 73;case 50:this.begin("callback_name");break;case 52:this.popState(),this.begin("callback_args");break;case 53:return 71;case 55:return 72;case 56:case 57:case 58:case 59:return 69;case 60:case 61:return 61;case 62:case 63:return 63;case 64:return 62;case 65:return 60;case 66:return 64;case 67:return 65;case 68:return 66;case 69:return 32;case 70:return 45;case 71:return 86;case 72:return"DOT";case 73:return"PLUS";case 74:return 83;case 75:case 76:return"EQUALS";case 77:return 90;case 78:return"PUNCTUATION";case 79:return 89;case 80:return 88;case 81:return 85;case 82:return 25}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:classDiagram-v2\b)/,/^(?:classDiagram\b)/,/^(?:[{])/,/^(?:\[\*\])/,/^(?:$)/,/^(?:[{])/,/^(?:[}])/,/^(?:[\n])/,/^(?:[^{}\n]*)/,/^(?:class\b)/,/^(?:cssClass\b)/,/^(?:callback\b)/,/^(?:link\b)/,/^(?:click\b)/,/^(?:note for\b)/,/^(?:note\b)/,/^(?:<<)/,/^(?:>>)/,/^(?:[~])/,/^(?:[~])/,/^(?:[^~]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[`])/,/^(?:[`])/,/^(?:[^`]+)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:\s*<\|)/,/^(?:\s*\|>)/,/^(?:\s*>)/,/^(?:\s*<)/,/^(?:\s*\*)/,/^(?:\s*o\b)/,/^(?:\s*\(\))/,/^(?:--)/,/^(?:\.\.)/,/^(?::{1}[^:\n;]+)/,/^(?::{3})/,/^(?:-)/,/^(?:\.)/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:\w+)/,/^(?:[!"#$%&'*+,-.`?\\/])/,/^(?:[0-9]+)/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\s)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},callback_args:{rules:[54,55],inclusive:!1},callback_name:{rules:[51,52,53],inclusive:!1},href:{rules:[48,49],inclusive:!1},struct:{rules:[23,24,25,26,27,28],inclusive:!1},generic:{rules:[39,40],inclusive:!1},bqstring:{rules:[45,46],inclusive:!1},string:{rules:[42,43],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,29,30,31,32,33,34,35,36,37,38,41,44,47,50,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],inclusive:!0}}},t);function H(){this.yy={}}return W.lexer=q,H.prototype=W,W.Parser=H,new H}();Ba.parser=Ba;const Na=Ba,Da=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*classDiagram/)},Oa=(t,e)=>{var n;return null!==t.match(/^\s*classDiagram/)&&"dagre-wrapper"===(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)||null!==t.match(/^\s*classDiagram-v2/)},Ma="classid-";let Ia=[],Fa={},$a=[],Ra=0,Za=[];const Pa=t=>Yt.sanitizeText(t,ar()),ja=function(t){let e="",n=t;if(t.indexOf("~")>0){let r=t.split("~");n=r[0],e=Yt.sanitizeText(r[1],ar())}return{className:n,type:e}},Ya=function(t){let e=ja(t);void 0===Fa[e.className]&&(Fa[e.className]={id:e.className,type:e.type,cssClasses:[],methods:[],members:[],annotations:[],domId:Ma+e.className+"-"+Ra},Ra++)},za=function(t){const e=Object.keys(Fa);for(const n of e)if(Fa[n].id===t)return Fa[n].domId},Ua=function(t,e){const n=ja(t).className,r=Fa[n];if("string"==typeof e){const t=e.trim();t.startsWith("<<")&&t.endsWith(">>")?r.annotations.push(Pa(t.substring(2,t.length-2))):t.indexOf(")")>0?r.methods.push(Pa(t)):t&&r.members.push(Pa(t))}},Wa=function(t,e){t.split(",").forEach((function(t){let n=t;t[0].match(/\d/)&&(n=Ma+n),void 0!==Fa[n]&&Fa[n].cssClasses.push(e)}))},qa=function(t,e,n){const r=ar();let i=t,a=za(i);if("loose"===r.securityLevel&&void 0!==e&&void 0!==Fa[i]){let t=[];if("string"==typeof n){t=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let e=0;e<t.length;e++){let n=t[e].trim();'"'===n.charAt(0)&&'"'===n.charAt(n.length-1)&&(n=n.substr(1,n.length-2)),t[e]=n}}0===t.length&&t.push(a),Za.push((function(){const n=document.querySelector(`[id="${a}"]`);null!==n&&n.addEventListener("click",(function(){Gn.runFunc(e,...t)}),!1)}))}},Ha=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Za.push(Ha);let Va="TB";const Ga={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,getConfig:()=>ar().class,addClass:Ya,bindFunctions:function(t){Za.forEach((function(e){e(t)}))},clear:function(){Ia=[],Fa={},$a=[],Za=[],Za.push(Ha),Dr()},getClass:function(t){return Fa[t]},getClasses:function(){return Fa},getNotes:function(){return $a},addAnnotation:function(t,e){const n=ja(t).className;Fa[n].annotations.push(e)},addNote:function(t,e){const n={id:`note${$a.length}`,class:e,text:t};$a.push(n)},getRelations:function(){return Ia},addRelation:function(t){Nt.debug("Adding relation: "+JSON.stringify(t)),Ya(t.id1),Ya(t.id2),t.id1=ja(t.id1).className,t.id2=ja(t.id2).className,t.relationTitle1=Yt.sanitizeText(t.relationTitle1.trim(),ar()),t.relationTitle2=Yt.sanitizeText(t.relationTitle2.trim(),ar()),Ia.push(t)},getDirection:()=>Va,setDirection:t=>{Va=t},addMember:Ua,addMembers:function(t,e){Array.isArray(e)&&(e.reverse(),e.forEach((e=>Ua(t,e))))},cleanupLabel:function(t){return":"===t.substring(0,1)?Yt.sanitizeText(t.substr(1).trim(),ar()):Pa(t.trim())},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3,LOLLIPOP:4},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){qa(t,e,n),Fa[t].haveCallback=!0})),Wa(t,"clickable")},setCssClass:Wa,setLink:function(t,e,n){const r=ar();t.split(",").forEach((function(t){let i=t;t[0].match(/\d/)&&(i=Ma+i),void 0!==Fa[i]&&(Fa[i].link=Gn.formatUrl(e,r),"sandbox"===r.securityLevel?Fa[i].linkTarget="_top":Fa[i].linkTarget="string"==typeof n?Pa(n):"_blank")})),Wa(t,"clickable")},getTooltip:function(t){return Fa[t].tooltip},setTooltip:function(t,e){const n=ar();t.split(",").forEach((function(t){void 0!==e&&(Fa[t].tooltip=Yt.sanitizeText(e,n))}))},lookUpDomId:za,setDiagramTitle:$r,getDiagramTitle:Rr};let Xa=0;const Ka=function(t){let e=t.match(/^([#+~-])?(\w+)(~\w+~|\[])?\s+(\w+) *([$*])?$/),n=t.match(/^([#+|~-])?(\w+) *\( *(.*)\) *([$*])? *(\w*[[\]|~]*\s*\w*~?)$/);return e&&!n?Qa(e):n?Ja(n):ts(t)},Qa=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"",o=t[5]?t[5].trim():"";n=r+i+a+" "+s,e=ns(o)}catch(r){n=t}return{displayText:n,cssStyle:e}},Ja=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"";n=r+i+"("+a+")"+(t[5]?" : "+jt(t[5]).trim():""),e=ns(s)}catch(r){n=t}return{displayText:n,cssStyle:e}},ts=function(t){let e="",n="",r="",i=t.indexOf("("),a=t.indexOf(")");if(i>1&&a>i&&a<=t.length){let s="",o="",c=t.substring(0,1);c.match(/\w/)?o=t.substring(0,i).trim():(c.match(/[#+~-]/)&&(s=c),o=t.substring(1,i).trim());const l=t.substring(i+1,a);t.substring(a+1,1),n=ns(t.substring(a+1,a+2)),e=s+o+"("+jt(l.trim())+")",a<t.length&&(r=t.substring(a+2).trim(),""!==r&&(r=" : "+jt(r),e+=r))}else e=jt(t);return{displayText:e,cssStyle:n}},es=function(t,e,n,r){let i=Ka(e);const a=t.append("tspan").attr("x",r.padding).text(i.displayText);""!==i.cssStyle&&a.attr("style",i.cssStyle),n||a.attr("dy",r.textHeight)},ns=function(t){switch(t){case"*":return"font-style:italic;";case"$":return"text-decoration:underline;";default:return""}},rs=function(t,e,n,r){Nt.debug("Rendering class ",e,n);const i=e.id,a={id:i,label:e.id,width:0,height:0},s=t.append("g").attr("id",r.db.lookUpDomId(i)).attr("class","classGroup");let o;o=e.link?s.append("svg:a").attr("xlink:href",e.link).attr("target",e.linkTarget).append("text").attr("y",n.textHeight+n.padding).attr("x",0):s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);let c=!0;e.annotations.forEach((function(t){const e=o.append("tspan").text("\xab"+t+"\xbb");c||e.attr("dy",n.textHeight),c=!1}));let l=e.id;void 0!==e.type&&""!==e.type&&(l+="<"+e.type+">");const h=o.append("tspan").text(l).attr("class","title");c||h.attr("dy",n.textHeight);const u=o.node().getBBox().height,d=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin/2).attr("y2",n.padding+u+n.dividerMargin/2),p=s.append("text").attr("x",n.padding).attr("y",u+n.dividerMargin+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.members.forEach((function(t){es(p,t,c,n),c=!1}));const f=p.node().getBBox(),g=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin+f.height).attr("y2",n.padding+u+n.dividerMargin+f.height),y=s.append("text").attr("x",n.padding).attr("y",u+2*n.dividerMargin+f.height+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.methods.forEach((function(t){es(y,t,c,n),c=!1}));const m=s.node().getBBox();var b=" ";e.cssClasses.length>0&&(b+=e.cssClasses.join(" "));const _=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",m.width+2*n.padding).attr("height",m.height+n.padding+.5*n.dividerMargin).attr("class",b).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(_-t.getBBox().width)/2)})),e.tooltip&&o.insert("title").text(e.tooltip),d.attr("x2",_),g.attr("x2",_),a.width=_,a.height=m.height+n.padding+.5*n.dividerMargin,a},is=function(t,e,n,r,i){const a=function(t){switch(t){case i.db.relationType.AGGREGATION:return"aggregation";case i.db.relationType.EXTENSION:return"extension";case i.db.relationType.COMPOSITION:return"composition";case i.db.relationType.DEPENDENCY:return"dependency";case i.db.relationType.LOLLIPOP:return"lollipop"}};e.points=e.points.filter((t=>!Number.isNaN(t.y)));const s=e.points,c=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),l=t.append("path").attr("d",c(s)).attr("id","edge"+Xa).attr("class","relation");let h,u,d="";r.arrowMarkerAbsolute&&(d=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,d=d.replace(/\(/g,"\\("),d=d.replace(/\)/g,"\\)")),1==n.relation.lineType&&l.attr("class","relation dashed-line"),10==n.relation.lineType&&l.attr("class","relation dotted-line"),"none"!==n.relation.type1&&l.attr("marker-start","url("+d+"#"+a(n.relation.type1)+"Start)"),"none"!==n.relation.type2&&l.attr("marker-end","url("+d+"#"+a(n.relation.type2)+"End)");const p=e.points.length;let f,g,y,m,b=Gn.calcLabelPosition(e.points);if(h=b.x,u=b.y,p%2!=0&&p>1){let t=Gn.calcCardinalityPosition("none"!==n.relation.type1,e.points,e.points[0]),r=Gn.calcCardinalityPosition("none"!==n.relation.type2,e.points,e.points[p-1]);Nt.debug("cardinality_1_point "+JSON.stringify(t)),Nt.debug("cardinality_2_point "+JSON.stringify(r)),f=t.x,g=t.y,y=r.x,m=r.y}if(void 0!==n.title){const e=t.append("g").attr("class","classLabel"),i=e.append("text").attr("class","label").attr("x",h).attr("y",u).attr("fill","red").attr("text-anchor","middle").text(n.title);window.label=i;const a=i.node().getBBox();e.insert("rect",":first-child").attr("class","box").attr("x",a.x-r.padding/2).attr("y",a.y-r.padding/2).attr("width",a.width+r.padding).attr("height",a.height+r.padding)}if(Nt.info("Rendering relation "+JSON.stringify(n)),void 0!==n.relationTitle1&&"none"!==n.relationTitle1){t.append("g").attr("class","cardinality").append("text").attr("class","type1").attr("x",f).attr("y",g).attr("fill","black").attr("font-size","6").text(n.relationTitle1)}if(void 0!==n.relationTitle2&&"none"!==n.relationTitle2){t.append("g").attr("class","cardinality").append("text").attr("class","type2").attr("x",y).attr("y",m).attr("fill","black").attr("font-size","6").text(n.relationTitle2)}Xa++},as=function(t,e,n,r){Nt.debug("Rendering note ",e,n);const i=e.id,a={id:i,text:e.text,width:0,height:0},s=t.append("g").attr("id",i).attr("class","classGroup");let o=s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);const c=JSON.parse(`"${e.text}"`).split("\n");c.forEach((function(t){Nt.debug(`Adding line: ${t}`),o.append("tspan").text(t).attr("class","title").attr("dy",n.textHeight)}));const l=s.node().getBBox(),h=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",l.width+2*n.padding).attr("height",l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(h-t.getBBox().width)/2)})),a.width=h,a.height=l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin,a};let ss={};const os=function(t){const e=Object.entries(ss).find((e=>e[1].label===t));if(e)return e[0]},cs={draw:function(t,e,n,r){const i=ar().class;ss={},Nt.info("Rendering diagram "+t);const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l=c.select(`[id='${e}']`);var h;(h=l).append("defs").append("marker").attr("id","extensionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),h.append("defs").append("marker").attr("id","extensionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z"),h.append("defs").append("marker").attr("id","compositionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","compositionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z");const u=new ht.k({multigraph:!0});u.setGraph({isMultiGraph:!0}),u.setDefaultEdgeLabel((function(){return{}}));const d=r.db.getClasses(),p=Object.keys(d);for(const o of p){const t=d[o],e=rs(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),Nt.info("Org height: "+e.height)}r.db.getRelations().forEach((function(t){Nt.info("tjoho"+os(t.id1)+os(t.id2)+JSON.stringify(t)),u.setEdge(os(t.id1),os(t.id2),{relation:t},t.title||"DEFAULT")}));r.db.getNotes().forEach((function(t){Nt.debug(`Adding note: ${JSON.stringify(t)}`);const e=as(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),t.class&&t.class in d&&u.setEdge(t.id,os(t.class),{relation:{id1:t.id,id2:t.class,relation:{type1:"none",type2:"none",lineType:10}}},"DEFAULT")})),(0,lt.bK)(u),u.nodes().forEach((function(t){void 0!==t&&void 0!==u.node(t)&&(Nt.debug("Node "+t+": "+JSON.stringify(u.node(t))),c.select("#"+(r.db.lookUpDomId(t)||t)).attr("transform","translate("+(u.node(t).x-u.node(t).width/2)+","+(u.node(t).y-u.node(t).height/2)+" )"))})),u.edges().forEach((function(t){void 0!==t&&void 0!==u.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(u.edge(t))),is(l,u.edge(t),u.edge(t).relation,i,r))}));const f=l.node().getBBox(),g=f.width+40,y=f.height+40;dr(l,y,g,i.useMaxWidth);const m=`${f.x-20} ${f.y-20} ${g} ${y}`;Nt.debug(`viewBox ${m}`),l.attr("viewBox",m)}},ls={extension:(t,e,n)=>{Nt.trace("Making markers for ",n),t.append("defs").append("marker").attr("id",e+"-extensionStart").attr("class","marker extension "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),t.append("defs").append("marker").attr("id",e+"-extensionEnd").attr("class","marker extension "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z")},composition:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-compositionStart").attr("class","marker composition "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-compositionEnd").attr("class","marker composition "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},aggregation:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-aggregationStart").attr("class","marker aggregation "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-aggregationEnd").attr("class","marker aggregation "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},dependency:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-dependencyStart").attr("class","marker dependency "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-dependencyEnd").attr("class","marker dependency "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},lollipop:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-lollipopStart").attr("class","marker lollipop "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("circle").attr("stroke","black").attr("fill","white").attr("cx",6).attr("cy",7).attr("r",6)},point:(t,e)=>{t.append("marker").attr("id",e+"-pointEnd").attr("class","marker "+e).attr("viewBox","0 0 12 20").attr("refX",10).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-pointStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",0).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 5 L 10 10 L 10 0 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},circle:(t,e)=>{t.append("marker").attr("id",e+"-circleEnd").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",11).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-circleStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",-1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},cross:(t,e)=>{t.append("marker").attr("id",e+"-crossEnd").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",12).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-crossStart").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",-1).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0")},barb:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-barbEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",14).attr("markerUnits","strokeWidth").attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z")}},hs=(t,e,n,r)=>{e.forEach((e=>{ls[e](t,n,r)}))};const us=(t,e,n,r)=>{let i=t||"";if("object"==typeof i&&(i=i[0]),Pt(ar().flowchart.htmlLabels)){i=i.replace(/\\n|\n/g,"<br />"),Nt.info("vertexText"+i);let t=function(t){const e=(0,o.Ys)(document.createElementNS("http://www.w3.org/2000/svg","foreignObject")),n=e.append("xhtml:div"),r=t.label,i=t.isNode?"nodeLabel":"edgeLabel";var a,s;return n.html('<span class="'+i+'" '+(t.labelStyle?'style="'+t.labelStyle+'"':"")+">"+r+"</span>"),a=n,(s=t.labelStyle)&&a.attr("style",s),n.style("display","inline-block"),n.style("white-space","nowrap"),n.attr("xmlns","http://www.w3.org/1999/xhtml"),e.node()}({isNode:r,label:Xd(i).replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`)),labelStyle:e.replace("fill:","color:")});return t}{const t=document.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",e.replace("color:","fill:"));let r=[];r="string"==typeof i?i.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(i)?i:[];for(const e of r){const r=document.createElementNS("http://www.w3.org/2000/svg","tspan");r.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),r.setAttribute("dy","1em"),r.setAttribute("x","0"),n?r.setAttribute("class","title-row"):r.setAttribute("class","row"),r.textContent=e.trim(),t.appendChild(r)}return t}},ds=(t,e,n,r)=>{let i;i=n||"node default";const a=t.insert("g").attr("class",i).attr("id",e.domId||e.id),s=a.insert("g").attr("class","label").attr("style",e.labelStyle);let c;c=void 0===e.labelText?"":"string"==typeof e.labelText?e.labelText:e.labelText[0];const l=s.node().appendChild(us(Ft(Xd(c),ar()),e.labelStyle,!1,r));let h=l.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=l.children[0],e=(0,o.Ys)(l);h=t.getBoundingClientRect(),e.attr("width",h.width),e.attr("height",h.height)}const u=e.padding/2;return s.attr("transform","translate("+-h.width/2+", "+-h.height/2+")"),{shapeSvg:a,bbox:h,halfPadding:u,label:s}},ps=(t,e)=>{const n=e.node().getBBox();t.width=n.width,t.height=n.height};function fs(t,e,n,r){return t.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","label-container").attr("transform","translate("+-e/2+","+n/2+")")}let gs={},ys={},ms={};const bs=(t,e)=>(Nt.trace("In isDecendant",e," ",t," = ",ys[e].includes(t)),!!ys[e].includes(t)),_s=(t,e,n,r)=>{Nt.warn("Copying children of ",t,"root",r,"data",e.node(t),r);const i=e.children(t)||[];t!==r&&i.push(t),Nt.warn("Copying (nodes) clusterId",t,"nodes",i),i.forEach((i=>{if(e.children(i).length>0)_s(i,e,n,r);else{const a=e.node(i);Nt.info("cp ",i," to ",r," with parent ",t),n.setNode(i,a),r!==e.parent(i)&&(Nt.warn("Setting parent",i,e.parent(i)),n.setParent(i,e.parent(i))),t!==r&&i!==t?(Nt.debug("Setting parent",i,t),n.setParent(i,t)):(Nt.info("In copy ",t,"root",r,"data",e.node(t),r),Nt.debug("Not Setting parent for node=",i,"cluster!==rootId",t!==r,"node!==clusterId",i!==t));const s=e.edges(i);Nt.debug("Copying Edges",s),s.forEach((i=>{Nt.info("Edge",i);const a=e.edge(i.v,i.w,i.name);Nt.info("Edge data",a,r);try{((t,e)=>(Nt.info("Decendants of ",e," is ",ys[e]),Nt.info("Edge is ",t),t.v!==e&&t.w!==e&&(ys[e]?ys[e].includes(t.v)||bs(t.v,e)||bs(t.w,e)||ys[e].includes(t.w):(Nt.debug("Tilt, ",e,",not in decendants"),!1))))(i,r)?(Nt.info("Copying as ",i.v,i.w,a,i.name),n.setEdge(i.v,i.w,a,i.name),Nt.info("newGraph edges ",n.edges(),n.edge(n.edges()[0]))):Nt.info("Skipping copy of edge ",i.v,"--\x3e",i.w," rootId: ",r," clusterId:",t)}catch(s){Nt.error(s)}}))}Nt.debug("Removing node",i),e.removeNode(i)}))},xs=(t,e)=>{const n=e.children(t);let r=[...n];for(const i of n)ms[i]=t,r=[...r,...xs(i,e)];return r},vs=(t,e)=>{Nt.trace("Searching",t);const n=e.children(t);if(Nt.trace("Searching children of id ",t,n),n.length<1)return Nt.trace("This is a valid node",t),t;for(const r of n){const n=vs(r,e);if(n)return Nt.trace("Found replacement for",t," => ",n),n}},ks=t=>gs[t]&&gs[t].externalConnections&&gs[t]?gs[t].id:t,ws=(t,e)=>{if(Nt.warn("extractor - ",e,ut.c(t),t.children("D")),e>10)return void Nt.error("Bailing out");let n=t.nodes(),r=!1;for(const i of n){const e=t.children(i);r=r||e.length>0}if(r){Nt.debug("Nodes = ",n,e);for(const r of n)if(Nt.debug("Extracting node",r,gs,gs[r]&&!gs[r].externalConnections,!t.parent(r),t.node(r),t.children("D")," Depth ",e),gs[r])if(!gs[r].externalConnections&&t.children(r)&&t.children(r).length>0){Nt.warn("Cluster without external connections, without a parent and with children",r,e);let n="TB"===t.graph().rankdir?"LR":"TB";gs[r]&&gs[r].clusterData&&gs[r].clusterData.dir&&(n=gs[r].clusterData.dir,Nt.warn("Fixing dir",gs[r].clusterData.dir,n));const i=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:n,nodesep:50,ranksep:50,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));Nt.warn("Old graph before copy",ut.c(t)),_s(r,t,i,r),t.setNode(r,{clusterNode:!0,id:r,clusterData:gs[r].clusterData,labelText:gs[r].labelText,graph:i}),Nt.warn("New graph after copy node: (",r,")",ut.c(i)),Nt.debug("Old graph after copy",ut.c(t))}else Nt.warn("Cluster ** ",r," **not meeting the criteria !externalConnections:",!gs[r].externalConnections," no parent: ",!t.parent(r)," children ",t.children(r)&&t.children(r).length>0,t.children("D"),e),Nt.debug(gs);else Nt.debug("Not a cluster",r,e);n=t.nodes(),Nt.warn("New list of nodes",n);for(const r of n){const n=t.node(r);Nt.warn(" Now next level",r,n),n.clusterNode&&ws(n.graph,e+1)}}else Nt.debug("Done, no node has children",t.nodes())},Es=(t,e)=>{if(0===e.length)return[];let n=Object.assign(e);return e.forEach((e=>{const r=t.children(e),i=Es(t,r);n=[...n,...i]})),n};function Cs(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}function Ts(t,e,n,r){var i,a,s,o,c,l,h,u,d,p,f,g,y;if(i=e.y-t.y,s=t.x-e.x,c=e.x*t.y-t.x*e.y,d=i*n.x+s*n.y+c,p=i*r.x+s*r.y+c,!(0!==d&&0!==p&&Ss(d,p)||(a=r.y-n.y,o=n.x-r.x,l=r.x*n.y-n.x*r.y,h=a*t.x+o*t.y+l,u=a*e.x+o*e.y+l,0!==h&&0!==u&&Ss(h,u)||0==(f=i*o-a*s))))return g=Math.abs(f/2),{x:(y=s*l-o*c)<0?(y-g)/f:(y+g)/f,y:(y=a*c-i*l)<0?(y-g)/f:(y+g)/f}}function Ss(t,e){return t*e>0}const As=(t,e)=>{var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}},Ls={node:function(t,e){return t.intersect(e)},circle:function(t,e,n){return Cs(t,e,e,n)},ellipse:Cs,polygon:function(t,e,n){var r=t.x,i=t.y,a=[],s=Number.POSITIVE_INFINITY,o=Number.POSITIVE_INFINITY;"function"==typeof e.forEach?e.forEach((function(t){s=Math.min(s,t.x),o=Math.min(o,t.y)})):(s=Math.min(s,e.x),o=Math.min(o,e.y));for(var c=r-t.width/2-s,l=i-t.height/2-o,h=0;h<e.length;h++){var u=e[h],d=e[h<e.length-1?h+1:0],p=Ts(t,n,{x:c+u.x,y:l+u.y},{x:c+d.x,y:l+d.y});p&&a.push(p)}return a.length?(a.length>1&&a.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),a[0]):t},rect:As},Bs=(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.info("Classes = ",e.classes);const a=n.insert("rect",":first-child");return a.attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},Ns=(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding+(r.height+e.padding),a=[{x:i/2,y:0},{x:i,y:-i/2},{x:i/2,y:-i},{x:0,y:-i/2}];Nt.info("Question main (Circle)");const s=fs(n,i,i,a);return s.attr("style",e.style),ps(e,s),e.intersect=function(t){return Nt.warn("Intersect called"),Ls.polygon(e,a,t)},n};function Ds(t,e,n,r){const i=[],a=t=>{i.push(t,0)},s=t=>{i.push(0,t)};e.includes("t")?(Nt.debug("add top border"),a(n)):s(n),e.includes("r")?(Nt.debug("add right border"),a(r)):s(r),e.includes("b")?(Nt.debug("add bottom border"),a(n)):s(n),e.includes("l")?(Nt.debug("add left border"),a(r)):s(r),t.attr("stroke-dasharray",i.join(" "))}const Os=(t,e,n)=>{const r=t.insert("g").attr("class","node default").attr("id",e.domId||e.id);let i=70,a=10;"LR"===n&&(i=10,a=70);const s=r.append("rect").attr("x",-1*i/2).attr("y",-1*a/2).attr("width",i).attr("height",a).attr("class","fork-join");return ps(e,s),e.height=e.height+e.padding/2,e.width=e.width+e.padding/2,e.intersect=function(t){return Ls.rect(e,t)},r},Ms={rhombus:Ns,question:Ns,rect:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.trace("Classes = ",e.classes);const a=n.insert("rect",":first-child"),s=r.width+e.padding,o=r.height+e.padding;if(a.attr("class","basic label-container").attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",s).attr("height",o),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(a,e.props.borders,s,o),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},labelRect:(t,e)=>{const{shapeSvg:n}=ds(t,e,"label",!0);Nt.trace("Classes = ",e.classes);const r=n.insert("rect",":first-child");if(r.attr("width",0).attr("height",0),n.attr("class","label edgeLabel"),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(r,e.props.borders,0,0),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,r),e.intersect=function(t){return Ls.rect(e,t)},n},rectWithTitle:(t,e)=>{let n;n=e.classes?"node "+e.classes:"node default";const r=t.insert("g").attr("class",n).attr("id",e.domId||e.id),i=r.insert("rect",":first-child"),a=r.insert("line"),s=r.insert("g").attr("class","label"),c=e.labelText.flat?e.labelText.flat():e.labelText;let l="";l="object"==typeof c?c[0]:c,Nt.info("Label text abc79",l,c,"object"==typeof c);const h=s.node().appendChild(us(l,e.labelStyle,!0,!0));let u={width:0,height:0};if(Pt(ar().flowchart.htmlLabels)){const t=h.children[0],e=(0,o.Ys)(h);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}Nt.info("Text 2",c);const d=c.slice(1,c.length);let p=h.getBBox();const f=s.node().appendChild(us(d.join?d.join("<br/>"):d,e.labelStyle,!0,!0));if(Pt(ar().flowchart.htmlLabels)){const t=f.children[0],e=(0,o.Ys)(f);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}const g=e.padding/2;return(0,o.Ys)(f).attr("transform","translate( "+(u.width>p.width?0:(p.width-u.width)/2)+", "+(p.height+g+5)+")"),(0,o.Ys)(h).attr("transform","translate( "+(u.width<p.width?0:-(p.width-u.width)/2)+", 0)"),u=s.node().getBBox(),s.attr("transform","translate("+-u.width/2+", "+(-u.height/2-g+3)+")"),i.attr("class","outer title-state").attr("x",-u.width/2-g).attr("y",-u.height/2-g).attr("width",u.width+e.padding).attr("height",u.height+e.padding),a.attr("class","divider").attr("x1",-u.width/2-g).attr("x2",u.width/2+g).attr("y1",-u.height/2-g+p.height+g).attr("y2",-u.height/2-g+p.height+g),ps(e,i),e.intersect=function(t){return Ls.rect(e,t)},r},choice:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=[{x:0,y:14},{x:14,y:0},{x:0,y:-14},{x:-14,y:0}];return n.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","state-start").attr("r",7).attr("width",28).attr("height",28),e.width=28,e.height=28,e.intersect=function(t){return Ls.circle(e,14,t)},n},circle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("circle",":first-child");return a.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("Circle main"),ps(e,a),e.intersect=function(t){return Nt.info("Circle intersect",e,r.width/2+i,t),Ls.circle(e,r.width/2+i,t)},n},doublecircle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("g",":first-child"),s=a.insert("circle"),o=a.insert("circle");return s.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i+5).attr("width",r.width+e.padding+10).attr("height",r.height+e.padding+10),o.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("DoubleCircle main"),ps(e,s),e.intersect=function(t){return Nt.info("DoubleCircle intersect",e,r.width/2+i+5,t),Ls.circle(e,r.width/2+i+5,t)},n},stadium:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=r.width+i/4+e.padding,s=n.insert("rect",":first-child").attr("style",e.style).attr("rx",i/2).attr("ry",i/2).attr("x",-a/2).attr("y",-i/2).attr("width",a).attr("height",i);return ps(e,s),e.intersect=function(t){return Ls.rect(e,t)},n},hexagon:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=i/4,s=r.width+2*a+e.padding,o=[{x:a,y:0},{x:s-a,y:0},{x:s,y:-i/2},{x:s-a,y:-i},{x:a,y:-i},{x:0,y:-i/2}],c=fs(n,s,i,o);return c.attr("style",e.style),ps(e,c),e.intersect=function(t){return Ls.polygon(e,o,t)},n},rect_left_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-a/2,y:0},{x:i,y:0},{x:i,y:-a},{x:-a/2,y:-a},{x:0,y:-a/2}];return fs(n,i,a,s).attr("style",e.style),e.width=i+a,e.height=a,e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_right:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_left:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:2*a/6,y:0},{x:i+a/6,y:0},{x:i-2*a/6,y:-a},{x:-a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i+2*a/6,y:0},{x:i-a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},inv_trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:-2*a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},rect_right_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i+a/2,y:0},{x:i,y:-a/2},{x:i+a/2,y:-a},{x:0,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},cylinder:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=i/2,s=a/(2.5+i/50),o=r.height+s+e.padding,c="M 0,"+s+" a "+a+","+s+" 0,0,0 "+i+" 0 a "+a+","+s+" 0,0,0 "+-i+" 0 l 0,"+o+" a "+a+","+s+" 0,0,0 "+i+" 0 l 0,"+-o,l=n.attr("label-offset-y",s).insert("path",":first-child").attr("style",e.style).attr("d",c).attr("transform","translate("+-i/2+","+-(o/2+s)+")");return ps(e,l),e.intersect=function(t){const n=Ls.rect(e,t),r=n.x-e.x;if(0!=a&&(Math.abs(r)<e.width/2||Math.abs(r)==e.width/2&&Math.abs(n.y-e.y)>e.height/2-s)){let i=s*s*(1-r*r/(a*a));0!=i&&(i=Math.sqrt(i)),i=s-i,t.y-e.y>0&&(i=-i),n.y+=i}return n},n},start:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child");return r.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),ps(e,r),e.intersect=function(t){return Ls.circle(e,7,t)},n},end:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child"),i=n.insert("circle",":first-child");return i.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),r.attr("class","state-end").attr("r",5).attr("width",10).attr("height",10),ps(e,i),e.intersect=function(t){return Ls.circle(e,7,t)},n},note:Bs,subroutine:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i,y:0},{x:i,y:-a},{x:0,y:-a},{x:0,y:0},{x:-8,y:0},{x:i+8,y:0},{x:i+8,y:-a},{x:-8,y:-a},{x:-8,y:0}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},fork:Os,join:Os,class_box:(t,e)=>{const n=e.padding/2;let r;r=e.classes?"node "+e.classes:"node default";const i=t.insert("g").attr("class",r).attr("id",e.domId||e.id),a=i.insert("rect",":first-child"),s=i.insert("line"),c=i.insert("line");let l=0,h=4;const u=i.insert("g").attr("class","label");let d=0;const p=e.classData.annotations&&e.classData.annotations[0],f=e.classData.annotations[0]?"\xab"+e.classData.annotations[0]+"\xbb":"",g=u.node().appendChild(us(f,e.labelStyle,!0,!0));let y=g.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=g.children[0],e=(0,o.Ys)(g);y=t.getBoundingClientRect(),e.attr("width",y.width),e.attr("height",y.height)}e.classData.annotations[0]&&(h+=y.height+4,l+=y.width);let m=e.classData.id;void 0!==e.classData.type&&""!==e.classData.type&&(ar().flowchart.htmlLabels?m+="&lt;"+e.classData.type+"&gt;":m+="<"+e.classData.type+">");const b=u.node().appendChild(us(m,e.labelStyle,!0,!0));(0,o.Ys)(b).attr("class","classTitle");let _=b.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=b.children[0],e=(0,o.Ys)(b);_=t.getBoundingClientRect(),e.attr("width",_.width),e.attr("height",_.height)}h+=_.height+4,_.width>l&&(l=_.width);const x=[];e.classData.members.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,x.push(i)})),h+=8;const v=[];if(e.classData.methods.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,v.push(i)})),h+=8,p){let t=(l-y.width)/2;(0,o.Ys)(g).attr("transform","translate( "+(-1*l/2+t)+", "+-1*h/2+")"),d=y.height+4}let k=(l-_.width)/2;return(0,o.Ys)(b).attr("transform","translate( "+(-1*l/2+k)+", "+(-1*h/2+d)+")"),d+=_.height+4,s.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,x.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d+4)+")"),d+=_.height+4})),d+=8,c.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,v.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d)+")"),d+=_.height+4})),a.attr("class","outer title-state").attr("x",-l/2-n).attr("y",-h/2-n).attr("width",l+e.padding).attr("height",h+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},i}};let Is={};const Fs=(t,e,n)=>{let r,i;if(e.link){let a;"sandbox"===ar().securityLevel?a="_top":e.linkTarget&&(a=e.linkTarget||"_blank"),r=t.insert("svg:a").attr("xlink:href",e.link).attr("target",a),i=Ms[e.shape](r,e,n)}else i=Ms[e.shape](t,e,n),r=i;return e.tooltip&&i.attr("title",e.tooltip),e.class&&i.attr("class","node default "+e.class),Is[e.id]=r,e.haveCallback&&Is[e.id].attr("class",Is[e.id].attr("class")+" clickable"),r},$s=t=>{const e=Is[t.id];Nt.trace("Transforming node",t.diff,t,"translate("+(t.x-t.width/2-5)+", "+t.width/2+")");const n=t.diff||0;return t.clusterNode?e.attr("transform","translate("+(t.x+n-t.width/2)+", "+(t.y-t.height/2-8)+")"):e.attr("transform","translate("+t.x+", "+t.y+")"),n},Rs={rect:(t,e)=>{Nt.trace("Creating subgraph rect for ",e.id,e);const n=t.insert("g").attr("class","cluster"+(e.class?" "+e.class:"")).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let s=a.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=a.children[0],e=(0,o.Ys)(a);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}const c=0*e.padding,l=c/2,h=e.width<=s.width+c?s.width+c:e.width;e.width<=s.width+c?e.diff=(s.width-e.width)/2-e.padding/2:e.diff=-e.padding/2,Nt.trace("Data ",e,JSON.stringify(e)),r.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-h/2).attr("y",e.y-e.height/2-l).attr("width",h).attr("height",e.height+c),i.attr("transform","translate("+(e.x-s.width/2)+", "+(e.y-e.height/2)+")");const u=r.node().getBBox();return e.width=u.width,e.height=u.height,e.intersect=function(t){return As(e,t)},n},roundedWithTitle:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=n.append("rect"),s=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let c=s.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=s.children[0],e=(0,o.Ys)(s);c=t.getBoundingClientRect(),e.attr("width",c.width),e.attr("height",c.height)}c=s.getBBox();const l=0*e.padding,h=l/2,u=e.width<=c.width+e.padding?c.width+e.padding:e.width;e.width<=c.width+e.padding?e.diff=(c.width+0*e.padding-e.width)/2:e.diff=-e.padding/2,r.attr("class","outer").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h).attr("width",u+l).attr("height",e.height+l),a.attr("class","inner").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h+c.height-1).attr("width",u+l).attr("height",e.height+l-c.height-3),i.attr("transform","translate("+(e.x-c.width/2)+", "+(e.y-e.height/2-e.padding/3+(Pt(ar().flowchart.htmlLabels)?5:3))+")");const d=r.node().getBBox();return e.height=d.height,e.intersect=function(t){return As(e,t)},n},noteGroup:(t,e)=>{const n=t.insert("g").attr("class","note-cluster").attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2-a).attr("width",e.width+i).attr("height",e.height+i).attr("fill","none");const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.intersect=function(t){return As(e,t)},n},divider:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("class","divider").attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2).attr("width",e.width+i).attr("height",e.height+i);const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.diff=-e.padding/2,e.intersect=function(t){return As(e,t)},n}};let Zs={};let Ps={},js={};const Ys=(t,e)=>{const n=us(e.label,e.labelStyle),r=t.insert("g").attr("class","edgeLabel"),i=r.insert("g").attr("class","label");i.node().appendChild(n);let a,s=n.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=n.children[0],e=(0,o.Ys)(n);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}if(i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),Ps[e.id]=r,e.width=s.width,e.height=s.height,e.startLabelLeft){const n=us(e.startLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startLeft=r,zs(a,e.startLabelLeft)}if(e.startLabelRight){const n=us(e.startLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=r.node().appendChild(n),i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startRight=r,zs(a,e.startLabelRight)}if(e.endLabelLeft){const n=us(e.endLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endLeft=r,zs(a,e.endLabelLeft)}if(e.endLabelRight){const n=us(e.endLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endRight=r,zs(a,e.endLabelRight)}return n};function zs(t,e){ar().flowchart.htmlLabels&&t&&(t.style.width=9*e.length+"px",t.style.height="12px")}const Us=(t,e)=>{Nt.warn("abc88 cutPathAtIntersect",t,e);let n=[],r=t[0],i=!1;return t.forEach((t=>{if(Nt.info("abc88 checking point",t,e),((t,e)=>{const n=t.x,r=t.y,i=Math.abs(e.x-n),a=Math.abs(e.y-r),s=t.width/2,o=t.height/2;return i>=s||a>=o})(e,t)||i)Nt.warn("abc88 outside",t,r),r=t,i||n.push(t);else{const a=((t,e,n)=>{Nt.warn(`intersection calc abc89:\n  outsidePoint: ${JSON.stringify(e)}\n  insidePoint : ${JSON.stringify(n)}\n  node        : x:${t.x} y:${t.y} w:${t.width} h:${t.height}`);const r=t.x,i=t.y,a=Math.abs(r-n.x),s=t.width/2;let o=n.x<e.x?s-a:s+a;const c=t.height/2,l=Math.abs(e.y-n.y),h=Math.abs(e.x-n.x);if(Math.abs(i-e.y)*s>Math.abs(r-e.x)*c){let t=n.y<e.y?e.y-c-i:i-c-e.y;o=h*t/l;const r={x:n.x<e.x?n.x+o:n.x-h+o,y:n.y<e.y?n.y+l-t:n.y-l+t};return 0===o&&(r.x=e.x,r.y=e.y),0===h&&(r.x=e.x),0===l&&(r.y=e.y),Nt.warn(`abc89 topp/bott calc, Q ${l}, q ${t}, R ${h}, r ${o}`,r),r}{o=n.x<e.x?e.x-s-r:r-s-e.x;let t=l*o/h,i=n.x<e.x?n.x+h-o:n.x-h+o,a=n.y<e.y?n.y+t:n.y-t;return Nt.warn(`sides calc abc89, Q ${l}, q ${t}, R ${h}, r ${o}`,{_x:i,_y:a}),0===o&&(i=e.x,a=e.y),0===h&&(i=e.x),0===l&&(a=e.y),{x:i,y:a}}})(e,r,t);Nt.warn("abc88 inside",t,r,a),Nt.warn("abc88 intersection",a);let s=!1;n.forEach((t=>{s=s||t.x===a.x&&t.y===a.y})),n.some((t=>t.x===a.x&&t.y===a.y))?Nt.warn("abc88 no intersect",a,n):n.push(a),i=!0}})),Nt.warn("abc88 returning points",n),n},Ws=(t,e,n,r)=>{Nt.info("Graph in recursive render: XXX",ut.c(e),r);const i=e.graph().rankdir;Nt.trace("Dir in recursive render - dir:",i);const a=t.insert("g").attr("class","root");e.nodes()?Nt.info("Recursive render XXX",e.nodes()):Nt.info("No nodes found for",e),e.edges().length>0&&Nt.trace("Recursive edges",e.edge(e.edges()[0]));const s=a.insert("g").attr("class","clusters"),c=a.insert("g").attr("class","edgePaths"),l=a.insert("g").attr("class","edgeLabels"),h=a.insert("g").attr("class","nodes");e.nodes().forEach((function(t){const a=e.node(t);if(void 0!==r){const n=JSON.parse(JSON.stringify(r.clusterData));Nt.info("Setting data for cluster XXX (",t,") ",n,r),e.setNode(r.id,n),e.parent(t)||(Nt.trace("Setting parent",t,r.id),e.setParent(t,r.id,n))}if(Nt.info("(Insert) Node XXX"+t+": "+JSON.stringify(e.node(t))),a&&a.clusterNode){Nt.info("Cluster identified",t,a.width,e.node(t));const r=Ws(h,a.graph,n,e.node(t)),i=r.elem;ps(a,i),a.diff=r.diff||0,Nt.info("Node bounds (abc123)",t,a,a.width,a.x,a.y),((t,e)=>{Is[e.id]=t})(i,a),Nt.warn("Recursive render complete ",i,a)}else e.children(t).length>0?(Nt.info("Cluster - the non recursive path XXX",t,a.id,a,e),Nt.info(vs(a.id,e)),gs[a.id]={id:vs(a.id,e),node:a}):(Nt.info("Node - the non recursive path",t,a.id,a),Fs(h,e.node(t),i))})),e.edges().forEach((function(t){const n=e.edge(t.v,t.w,t.name);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t)),Nt.info("Edge "+t.v+" -> "+t.w+": ",t," ",JSON.stringify(e.edge(t))),Nt.info("Fix",gs,"ids:",t.v,t.w,"Translateing: ",gs[t.v],gs[t.w]),Ys(l,n)})),e.edges().forEach((function(t){Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t))})),Nt.info("#############################################"),Nt.info("###                Layout                 ###"),Nt.info("#############################################"),Nt.info(e),(0,lt.bK)(e),Nt.info("Graph after layout:",ut.c(e));let u=0;return(t=>Es(t,t.children()))(e).forEach((function(t){const n=e.node(t);Nt.info("Position "+t+": "+JSON.stringify(e.node(t))),Nt.info("Position "+t+": ("+n.x,","+n.y,") width: ",n.width," height: ",n.height),n&&n.clusterNode?$s(n):e.children(t).length>0?(((t,e)=>{Nt.trace("Inserting cluster");const n=e.shape||"rect";Zs[e.id]=Rs[n](t,e)})(s,n),gs[n.id].node=n):$s(n)})),e.edges().forEach((function(t){const r=e.edge(t);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(r),r);const i=function(t,e,n,r,i,a){let s=n.points,c=!1;const l=a.node(e.v);var h=a.node(e.w);Nt.info("abc88 InsertEdge: ",n),h.intersect&&l.intersect&&(s=s.slice(1,n.points.length-1),s.unshift(l.intersect(s[0])),Nt.info("Last point",s[s.length-1],h,h.intersect(s[s.length-1])),s.push(h.intersect(s[s.length-1]))),n.toCluster&&(Nt.info("to cluster abc88",r[n.toCluster]),s=Us(n.points,r[n.toCluster].node),c=!0),n.fromCluster&&(Nt.info("from cluster abc88",r[n.fromCluster]),s=Us(s.reverse(),r[n.fromCluster].node).reverse(),c=!0);const u=s.filter((t=>!Number.isNaN(t.y)));let d;d=("graph"===i||"flowchart"===i)&&n.curve||o.$0Z;const p=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(d);let f;switch(n.thickness){case"normal":f="edge-thickness-normal";break;case"thick":f="edge-thickness-thick";break;default:f=""}switch(n.pattern){case"solid":f+=" edge-pattern-solid";break;case"dotted":f+=" edge-pattern-dotted";break;case"dashed":f+=" edge-pattern-dashed"}const g=t.append("path").attr("d",p(u)).attr("id",n.id).attr("class"," "+f+(n.classes?" "+n.classes:"")).attr("style",n.style);let y="";switch((ar().flowchart.arrowMarkerAbsolute||ar().state.arrowMarkerAbsolute)&&(y=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,y=y.replace(/\(/g,"\\("),y=y.replace(/\)/g,"\\)")),Nt.info("arrowTypeStart",n.arrowTypeStart),Nt.info("arrowTypeEnd",n.arrowTypeEnd),n.arrowTypeStart){case"arrow_cross":g.attr("marker-start","url("+y+"#"+i+"-crossStart)");break;case"arrow_point":g.attr("marker-start","url("+y+"#"+i+"-pointStart)");break;case"arrow_barb":g.attr("marker-start","url("+y+"#"+i+"-barbStart)");break;case"arrow_circle":g.attr("marker-start","url("+y+"#"+i+"-circleStart)");break;case"aggregation":g.attr("marker-start","url("+y+"#"+i+"-aggregationStart)");break;case"extension":g.attr("marker-start","url("+y+"#"+i+"-extensionStart)");break;case"composition":g.attr("marker-start","url("+y+"#"+i+"-compositionStart)");break;case"dependency":g.attr("marker-start","url("+y+"#"+i+"-dependencyStart)");break;case"lollipop":g.attr("marker-start","url("+y+"#"+i+"-lollipopStart)")}switch(n.arrowTypeEnd){case"arrow_cross":g.attr("marker-end","url("+y+"#"+i+"-crossEnd)");break;case"arrow_point":g.attr("marker-end","url("+y+"#"+i+"-pointEnd)");break;case"arrow_barb":g.attr("marker-end","url("+y+"#"+i+"-barbEnd)");break;case"arrow_circle":g.attr("marker-end","url("+y+"#"+i+"-circleEnd)");break;case"aggregation":g.attr("marker-end","url("+y+"#"+i+"-aggregationEnd)");break;case"extension":g.attr("marker-end","url("+y+"#"+i+"-extensionEnd)");break;case"composition":g.attr("marker-end","url("+y+"#"+i+"-compositionEnd)");break;case"dependency":g.attr("marker-end","url("+y+"#"+i+"-dependencyEnd)");break;case"lollipop":g.attr("marker-end","url("+y+"#"+i+"-lollipopEnd)")}let m={};return c&&(m.updatedPath=s),m.originalPath=n.points,m}(c,t,r,gs,n,e);((t,e)=>{Nt.info("Moving label abc78 ",t.id,t.label,Ps[t.id]);let n=e.updatedPath?e.updatedPath:e.originalPath;if(t.label){const r=Ps[t.id];let i=t.x,a=t.y;if(n){const r=Gn.calcLabelPosition(n);Nt.info("Moving label "+t.label+" from (",i,",",a,") to (",r.x,",",r.y,") abc78"),e.updatedPath&&(i=r.x,a=r.y)}r.attr("transform","translate("+i+", "+a+")")}if(t.startLabelLeft){const e=js[t.id].startLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.startLabelRight){const e=js[t.id].startRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelLeft){const e=js[t.id].endLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelRight){const e=js[t.id].endRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}})(r,i)})),e.nodes().forEach((function(t){const n=e.node(t);Nt.info(t,n.type,n.diff),"group"===n.type&&(u=n.diff)})),{elem:a,diff:u}},qs=(t,e,n,r,i)=>{hs(t,n,r,i),Is={},Ps={},js={},Zs={},ys={},ms={},gs={},Nt.warn("Graph at first:",ut.c(e)),((t,e)=>{!t||e>10?Nt.debug("Opting out, no graph "):(Nt.debug("Opting in, graph "),t.nodes().forEach((function(e){t.children(e).length>0&&(Nt.warn("Cluster identified",e," Replacement id in edges: ",vs(e,t)),ys[e]=xs(e,t),gs[e]={id:vs(e,t),clusterData:t.node(e)})})),t.nodes().forEach((function(e){const n=t.children(e),r=t.edges();n.length>0?(Nt.debug("Cluster identified",e,ys),r.forEach((t=>{t.v!==e&&t.w!==e&&bs(t.v,e)^bs(t.w,e)&&(Nt.warn("Edge: ",t," leaves cluster ",e),Nt.warn("Decendants of XXX ",e,": ",ys[e]),gs[e].externalConnections=!0)}))):Nt.debug("Not a cluster ",e,ys)})),t.edges().forEach((function(e){const n=t.edge(e);Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(e)),Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(t.edge(e)));let r=e.v,i=e.w;if(Nt.warn("Fix XXX",gs,"ids:",e.v,e.w,"Translating: ",gs[e.v]," --- ",gs[e.w]),gs[e.v]&&gs[e.w]&&gs[e.v]===gs[e.w]){Nt.warn("Fixing and trixing link to self - removing XXX",e.v,e.w,e.name),Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name);const a=e.w+"---"+e.v;t.setNode(a,{domId:a,id:a,labelStyle:"",labelText:n.label,padding:0,shape:"labelRect",style:""});const s=JSON.parse(JSON.stringify(n)),o=JSON.parse(JSON.stringify(n));s.label="",s.arrowTypeEnd="none",o.label="",s.fromCluster=e.v,o.toCluster=e.v,t.setEdge(r,a,s,e.name+"-cyclic-special"),t.setEdge(a,i,o,e.name+"-cyclic-special")}else(gs[e.v]||gs[e.w])&&(Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name),r!==e.v&&(n.fromCluster=e.v),i!==e.w&&(n.toCluster=e.w),Nt.warn("Fix Replacing with XXX",r,i,e.name),t.setEdge(r,i,n,e.name))})),Nt.warn("Adjusted Graph",ut.c(t)),ws(t,0),Nt.trace(gs))})(e),Nt.warn("Graph after:",ut.c(e)),Ws(t,e,r)},Hs=t=>Yt.sanitizeText(t,ar());let Vs={dividerMargin:10,padding:5,textHeight:10};function Gs(t){let e;switch(t){case 0:e="aggregation";break;case 1:e="extension";break;case 2:e="composition";break;case 3:e="dependency";break;case 4:e="lollipop";break;default:e="none"}return e}const Xs={setConf:function(t){Object.keys(t).forEach((function(e){Vs[e]=t[e]}))},draw:function(t,e,n,r){Nt.info("Drawing class - ",e);const i=ar().flowchart,a=ar().securityLevel;Nt.info("config:",i);const s=i.nodeSpacing||50,c=i.rankSpacing||50,l=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:r.db.getDirection(),nodesep:s,ranksep:c,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}})),h=r.db.getClasses(),u=r.db.getRelations(),d=r.db.getNotes();let p;Nt.info(u),function(t,e,n,r){const i=Object.keys(t);Nt.info("keys:",i),Nt.info(t),i.forEach((function(n){const i=t[n];let a="";i.cssClasses.length>0&&(a=a+" "+i.cssClasses.join(" "));const s={labelStyle:""};let o=void 0!==i.text?i.text:i.id,c="";i.type,c="class_box",e.setNode(i.id,{labelStyle:s.labelStyle,shape:c,labelText:Hs(o),classData:i,rx:0,ry:0,class:a,style:s.style,id:i.id,domId:i.domId,tooltip:r.db.getTooltip(i.id)||"",haveCallback:i.haveCallback,link:i.link,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s.labelStyle,shape:c,labelText:o,rx:0,ry:0,class:a,style:s.style,id:i.id,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding})}))}(h,l,0,r),function(t,e){const n=ar().flowchart;let r=0;t.forEach((function(i){r++;const a={classes:"relation"};a.pattern=1==i.relation.lineType?"dashed":"solid",a.id="id"+r,"arrow_open"===i.type?a.arrowhead="none":a.arrowhead="normal",Nt.info(a,i),a.startLabelRight="none"===i.relationTitle1?"":i.relationTitle1,a.endLabelLeft="none"===i.relationTitle2?"":i.relationTitle2,a.arrowTypeStart=Gs(i.relation.type1),a.arrowTypeEnd=Gs(i.relation.type2);let s="",c="";if(void 0!==i.style){const t=Mn(i.style);s=t.style,c=t.labelStyle}else s="fill:none";a.style=s,a.labelStyle=c,void 0!==i.interpolate?a.curve=Dn(i.interpolate,o.c_6):void 0!==t.defaultInterpolate?a.curve=Dn(t.defaultInterpolate,o.c_6):a.curve=Dn(n.curve,o.c_6),i.text=i.title,void 0===i.text?void 0!==i.style&&(a.arrowheadStyle="fill: #333"):(a.arrowheadStyle="fill: #333",a.labelpos="c",ar().flowchart.htmlLabels?(a.labelType="html",a.label='<span class="edgeLabel">'+i.text+"</span>"):(a.labelType="text",a.label=i.text.replace(Yt.lineBreakRegex,"\n"),void 0===i.style&&(a.style=a.style||"stroke: #333; stroke-width: 1.5px;fill:none"),a.labelStyle=a.labelStyle.replace("color:","fill:"))),e.setEdge(i.id1,i.id2,a,r)}))}(u,l),function(t,e,n,r){Nt.info(t),t.forEach((function(t,i){const a=t,s="",c="";let l=a.text,h="note";if(e.setNode(a.id,{labelStyle:s,shape:h,labelText:Hs(l),noteData:a,rx:0,ry:0,class:"",style:c,id:a.id,domId:a.id,tooltip:"",type:"note",padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s,shape:h,labelText:l,rx:0,ry:0,style:c,id:a.id,type:"note",padding:ar().flowchart.padding}),!a.class||!(a.class in r))return;const u=n+i,d={classes:"relation",pattern:"dotted"};d.id=`edgeNote${u}`,d.arrowhead="none",Nt.info(`Note edge: ${JSON.stringify(d)}, ${JSON.stringify(a)}`),d.startLabelRight="",d.endLabelLeft="",d.arrowTypeStart="none",d.arrowTypeEnd="none",d.style="fill:none",d.labelStyle="",d.curve=Dn(Vs.curve,o.c_6),e.setEdge(a.id,a.class,d,u)}))}(d,l,u.length+1,h),"sandbox"===a&&(p=(0,o.Ys)("#i"+e));const f="sandbox"===a?(0,o.Ys)(p.nodes()[0].contentDocument.body):(0,o.Ys)("body"),g=f.select(`[id="${e}"]`),y=f.select("#"+e+" g");if(qs(y,l,["aggregation","extension","composition","dependency","lollipop"],"classDiagram",e),Gn.insertTitle(g,"classTitleText",i.titleTopMargin,r.db.getDiagramTitle()),pr(l,g,i.diagramPadding,i.useMaxWidth),!i.htmlLabels){const t="sandbox"===a?p.nodes()[0].contentDocument:document,n=t.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of n){const n=e.getBBox(),r=t.createElementNS("http://www.w3.org/2000/svg","rect");r.setAttribute("rx",0),r.setAttribute("ry",0),r.setAttribute("width",n.width),r.setAttribute("height",n.height),e.insertBefore(r,e.firstChild)}}}};var Ks=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,23,25,27,29,30,31,51],a=[1,17],s=[1,18],o=[1,19],c=[1,20],l=[1,21],h=[1,22],u=[1,25],d=[1,30],p=[1,31],f=[1,32],g=[1,33],y=[6,9,11,15,20,23,25,27,29,30,31,44,45,46,47,51],m=[1,45],b=[30,31,48,49],_=[4,6,9,11,23,25,27,29,30,31,51],x=[44,45,46,47],v=[22,37],k=[1,65],w=[1,64],E=[22,37,39,41],C={trace:function(){},yy:{},symbols_:{error:2,start:3,ER_DIAGRAM:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,entityName:17,relSpec:18,role:19,BLOCK_START:20,attributes:21,BLOCK_STOP:22,title:23,title_value:24,acc_title:25,acc_title_value:26,acc_descr:27,acc_descr_value:28,acc_descr_multiline_value:29,ALPHANUM:30,ENTITY_NAME:31,attribute:32,attributeType:33,attributeName:34,attributeKeyTypeList:35,attributeComment:36,ATTRIBUTE_WORD:37,attributeKeyType:38,COMMA:39,ATTRIBUTE_KEY:40,COMMENT:41,cardinality:42,relType:43,ZERO_OR_ONE:44,ZERO_OR_MORE:45,ONE_OR_MORE:46,ONLY_ONE:47,NON_IDENTIFYING:48,IDENTIFYING:49,WORD:50,open_directive:51,type_directive:52,arg_directive:53,close_directive:54,$accept:0,$end:1},terminals_:{2:"error",4:"ER_DIAGRAM",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",20:"BLOCK_START",22:"BLOCK_STOP",23:"title",24:"title_value",25:"acc_title",26:"acc_title_value",27:"acc_descr",28:"acc_descr_value",29:"acc_descr_multiline_value",30:"ALPHANUM",31:"ENTITY_NAME",37:"ATTRIBUTE_WORD",39:"COMMA",40:"ATTRIBUTE_KEY",41:"COMMENT",44:"ZERO_OR_ONE",45:"ZERO_OR_MORE",46:"ONE_OR_MORE",47:"ONLY_ONE",48:"NON_IDENTIFYING",49:"IDENTIFYING",50:"WORD",51:"open_directive",52:"type_directive",53:"arg_directive",54:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,5],[10,4],[10,3],[10,1],[10,2],[10,2],[10,2],[10,1],[17,1],[17,1],[21,1],[21,2],[32,2],[32,3],[32,3],[32,4],[33,1],[34,1],[35,1],[35,3],[38,1],[36,1],[18,3],[42,1],[42,1],[42,1],[42,1],[43,1],[43,1],[19,1],[19,1],[19,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:break;case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:case 20:case 43:case 28:case 29:case 32:this.$=a[o];break;case 12:r.addEntity(a[o-4]),r.addEntity(a[o-2]),r.addRelationship(a[o-4],a[o],a[o-2],a[o-3]);break;case 13:r.addEntity(a[o-3]),r.addAttributes(a[o-3],a[o-1]);break;case 14:r.addEntity(a[o-2]);break;case 15:r.addEntity(a[o]);break;case 16:case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:case 41:case 42:case 33:this.$=a[o].replace(/"/g,"");break;case 22:case 30:this.$=[a[o]];break;case 23:a[o].push(a[o-1]),this.$=a[o];break;case 24:this.$={attributeType:a[o-1],attributeName:a[o]};break;case 25:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeKeyTypeList:a[o]};break;case 26:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeComment:a[o]};break;case 27:this.$={attributeType:a[o-3],attributeName:a[o-2],attributeKeyTypeList:a[o-1],attributeComment:a[o]};break;case 31:a[o-2].push(a[o]),this.$=a[o-2];break;case 34:this.$={cardA:a[o],relType:a[o-1],cardB:a[o-2]};break;case 35:this.$=r.Cardinality.ZERO_OR_ONE;break;case 36:this.$=r.Cardinality.ZERO_OR_MORE;break;case 37:this.$=r.Cardinality.ONE_OR_MORE;break;case 38:this.$=r.Cardinality.ONLY_ONE;break;case 39:this.$=r.Identification.NON_IDENTIFYING;break;case 40:this.$=r.Identification.IDENTIFYING;break;case 44:r.parseDirective("%%{","open_directive");break;case 45:r.parseDirective(a[o],"type_directive");break;case 46:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 47:r.parseDirective("}%%","close_directive","er")}},table:[{3:1,4:n,7:3,12:4,51:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,51:r},{13:8,52:[1,9]},{52:[2,44]},{6:[1,10],7:15,8:11,9:[1,12],10:13,11:[1,14],12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},{1:[2,2]},{14:23,15:[1,24],54:u},e([15,54],[2,45]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:15,10:26,12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),e(i,[2,15],{18:27,42:29,20:[1,28],44:d,45:p,46:f,47:g}),{24:[1,34]},{26:[1,35]},{28:[1,36]},e(i,[2,19]),e(y,[2,20]),e(y,[2,21]),{11:[1,37]},{16:38,53:[1,39]},{11:[2,47]},e(i,[2,5]),{17:40,30:l,31:h},{21:41,22:[1,42],32:43,33:44,37:m},{43:46,48:[1,47],49:[1,48]},e(b,[2,35]),e(b,[2,36]),e(b,[2,37]),e(b,[2,38]),e(i,[2,16]),e(i,[2,17]),e(i,[2,18]),e(_,[2,9]),{14:49,54:u},{54:[2,46]},{15:[1,50]},{22:[1,51]},e(i,[2,14]),{21:52,22:[2,22],32:43,33:44,37:m},{34:53,37:[1,54]},{37:[2,28]},{42:55,44:d,45:p,46:f,47:g},e(x,[2,39]),e(x,[2,40]),{11:[1,56]},{19:57,30:[1,60],31:[1,59],50:[1,58]},e(i,[2,13]),{22:[2,23]},e(v,[2,24],{35:61,36:62,38:63,40:k,41:w}),e([22,37,40,41],[2,29]),e([30,31],[2,34]),e(_,[2,10]),e(i,[2,12]),e(i,[2,41]),e(i,[2,42]),e(i,[2,43]),e(v,[2,25],{36:66,39:[1,67],41:w}),e(v,[2,26]),e(E,[2,30]),e(v,[2,33]),e(E,[2,32]),e(v,[2,27]),{38:68,40:k},e(E,[2,31])],defaultActions:{5:[2,44],7:[2,2],25:[2,47],39:[2,46],45:[2,28],52:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},T=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("acc_title"),25;case 1:return this.popState(),"acc_title_value";case 2:return this.begin("acc_descr"),27;case 3:return this.popState(),"acc_descr_value";case 4:this.begin("acc_descr_multiline");break;case 5:this.popState();break;case 6:return"acc_descr_multiline_value";case 7:return this.begin("open_directive"),51;case 8:return this.begin("type_directive"),52;case 9:return this.popState(),this.begin("arg_directive"),15;case 10:return this.popState(),this.popState(),54;case 11:return 53;case 12:case 13:case 15:case 22:case 27:break;case 14:return 11;case 16:return 9;case 17:return 31;case 18:return 50;case 19:return 4;case 20:return this.begin("block"),20;case 21:return 39;case 23:return 40;case 24:case 25:return 37;case 26:return 41;case 28:return this.popState(),22;case 29:case 58:return e.yytext[0];case 30:case 34:case 35:case 48:return 44;case 31:case 32:case 33:case 41:case 43:case 50:return 46;case 36:case 37:case 38:case 39:case 40:case 42:case 49:return 45;case 44:case 45:case 46:case 47:return 47;case 51:case 54:case 55:case 56:return 48;case 52:case 53:return 49;case 57:return 30;case 59:return 6}},rules:[/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:[\s]+)/i,/^(?:"[^"%\r\n\v\b\\]+")/i,/^(?:"[^"]*")/i,/^(?:erDiagram\b)/i,/^(?:\{)/i,/^(?:,)/i,/^(?:\s+)/i,/^(?:\b((?:PK)|(?:FK)|(?:UK))\b)/i,/^(?:(.*?)[~](.*?)*[~])/i,/^(?:[A-Za-z_][A-Za-z0-9\-_\[\]\(\)]*)/i,/^(?:"[^"]*")/i,/^(?:[\n]+)/i,/^(?:\})/i,/^(?:.)/i,/^(?:one or zero\b)/i,/^(?:one or more\b)/i,/^(?:one or many\b)/i,/^(?:1\+)/i,/^(?:\|o\b)/i,/^(?:zero or one\b)/i,/^(?:zero or more\b)/i,/^(?:zero or many\b)/i,/^(?:0\+)/i,/^(?:\}o\b)/i,/^(?:many\(0\))/i,/^(?:many\(1\))/i,/^(?:many\b)/i,/^(?:\}\|)/i,/^(?:one\b)/i,/^(?:only one\b)/i,/^(?:1\b)/i,/^(?:\|\|)/i,/^(?:o\|)/i,/^(?:o\{)/i,/^(?:\|\{)/i,/^(?:\.\.)/i,/^(?:--)/i,/^(?:to\b)/i,/^(?:optionally to\b)/i,/^(?:\.-)/i,/^(?:-\.)/i,/^(?:[A-Za-z][A-Za-z0-9\-_]*)/i,/^(?:.)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[5,6],inclusive:!1},acc_descr:{rules:[3],inclusive:!1},acc_title:{rules:[1],inclusive:!1},open_directive:{rules:[8],inclusive:!1},type_directive:{rules:[9,10],inclusive:!1},arg_directive:{rules:[10,11],inclusive:!1},block:{rules:[21,22,23,24,25,26,27,28,29],inclusive:!1},INITIAL:{rules:[0,2,4,7,12,13,14,15,16,17,18,19,20,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],inclusive:!0}}},t);function S(){this.yy={}}return C.lexer=T,S.prototype=C,C.Parser=S,new S}();Ks.parser=Ks;const Qs=Ks,Js=t=>null!==t.match(/^\s*erDiagram/);let to={},eo=[];const no=function(t){return void 0===to[t]&&(to[t]={attributes:[]},Nt.info("Added new entity :",t)),to[t]},ro={Cardinality:{ZERO_OR_ONE:"ZERO_OR_ONE",ZERO_OR_MORE:"ZERO_OR_MORE",ONE_OR_MORE:"ONE_OR_MORE",ONLY_ONE:"ONLY_ONE"},Identification:{NON_IDENTIFYING:"NON_IDENTIFYING",IDENTIFYING:"IDENTIFYING"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().er,addEntity:no,addAttributes:function(t,e){let n,r=no(t);for(n=e.length-1;n>=0;n--)r.attributes.push(e[n]),Nt.debug("Added attribute ",e[n].attributeName)},getEntities:()=>to,addRelationship:function(t,e,n,r){let i={entityA:t,roleA:e,entityB:n,relSpec:r};eo.push(i),Nt.debug("Added new relationship :",i)},getRelationships:()=>eo,clear:function(){to={},eo=[],Dr()},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,setDiagramTitle:$r,getDiagramTitle:Rr},io={ONLY_ONE_START:"ONLY_ONE_START",ONLY_ONE_END:"ONLY_ONE_END",ZERO_OR_ONE_START:"ZERO_OR_ONE_START",ZERO_OR_ONE_END:"ZERO_OR_ONE_END",ONE_OR_MORE_START:"ONE_OR_MORE_START",ONE_OR_MORE_END:"ONE_OR_MORE_END",ZERO_OR_MORE_START:"ZERO_OR_MORE_START",ZERO_OR_MORE_END:"ZERO_OR_MORE_END"},ao=io,so=function(t,e){let n;t.append("defs").append("marker").attr("id",io.ONLY_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18 M15,0 L15,18"),t.append("defs").append("marker").attr("id",io.ONLY_ONE_END).attr("refX",18).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,0 L3,18 M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",21).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_END).attr("refX",30).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,0 L21,18"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q 18,0 36,18 Q 18,36 0,18 M42,9 L42,27"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_END).attr("refX",27).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,9 L3,27 M9,18 Q27,0 45,18 Q27,36 9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",48).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q18,0 36,18 Q18,36 0,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_END).attr("refX",39).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,18 Q39,0 57,18 Q39,36 21,18")},oo=/[^\dA-Za-z](\W)*/g;let co={},lo=new Map;const ho=function(t,e,n){let r;return Object.keys(e).forEach((function(i){const a=function(t="",e=""){const n=t.replace(oo,"");return`${go(e)}${go(n)}${vt(t,fo)}`}(i,"entity");lo.set(i,a);const s=t.append("g").attr("id",a);r=void 0===r?a:r;const o="text-"+a,c=s.append("text").classed("er entityLabel",!0).attr("id",o).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(i),{width:l,height:h}=((t,e,n)=>{const r=co.entityPadding/3,i=co.entityPadding/3,a=.85*co.fontSize,s=e.node().getBBox(),o=[];let c=!1,l=!1,h=0,u=0,d=0,p=0,f=s.height+2*r,g=1;n.forEach((t=>{void 0!==t.attributeKeyTypeList&&t.attributeKeyTypeList.length>0&&(c=!0),void 0!==t.attributeComment&&(l=!0)})),n.forEach((n=>{const i=`${e.node().id}-attr-${g}`;let s=0;const y=jt(n.attributeType),m=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-type`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(y),b=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-name`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeName),_={};_.tn=m,_.nn=b;const x=m.node().getBBox(),v=b.node().getBBox();if(h=Math.max(h,x.width),u=Math.max(u,v.width),s=Math.max(x.height,v.height),c){const e=void 0!==n.attributeKeyTypeList?n.attributeKeyTypeList.join(","):"",r=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-key`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(e);_.kn=r;const o=r.node().getBBox();d=Math.max(d,o.width),s=Math.max(s,o.height)}if(l){const e=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-comment`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeComment||"");_.cn=e;const r=e.node().getBBox();p=Math.max(p,r.width),s=Math.max(s,r.height)}_.height=s,o.push(_),f+=s+2*r,g+=1}));let y=4;c&&(y+=2),l&&(y+=2);const m=h+u+d+p,b={width:Math.max(co.minEntityWidth,Math.max(s.width+2*co.entityPadding,m+i*y)),height:n.length>0?f:Math.max(co.minEntityHeight,s.height+2*co.entityPadding)};if(n.length>0){const n=Math.max(0,(b.width-m-i*y)/(y/2));e.attr("transform","translate("+b.width/2+","+(r+s.height/2)+")");let a=s.height+2*r,f="attributeBoxOdd";o.forEach((e=>{const s=a+r+e.height/2;e.tn.attr("transform","translate("+i+","+s+")");const o=t.insert("rect","#"+e.tn.node().id).classed(`er ${f}`,!0).attr("x",0).attr("y",a).attr("width",h+2*i+n).attr("height",e.height+2*r),g=parseFloat(o.attr("x"))+parseFloat(o.attr("width"));e.nn.attr("transform","translate("+(g+i)+","+s+")");const y=t.insert("rect","#"+e.nn.node().id).classed(`er ${f}`,!0).attr("x",g).attr("y",a).attr("width",u+2*i+n).attr("height",e.height+2*r);let m=parseFloat(y.attr("x"))+parseFloat(y.attr("width"));if(c){e.kn.attr("transform","translate("+(m+i)+","+s+")");const o=t.insert("rect","#"+e.kn.node().id).classed(`er ${f}`,!0).attr("x",m).attr("y",a).attr("width",d+2*i+n).attr("height",e.height+2*r);m=parseFloat(o.attr("x"))+parseFloat(o.attr("width"))}l&&(e.cn.attr("transform","translate("+(m+i)+","+s+")"),t.insert("rect","#"+e.cn.node().id).classed(`er ${f}`,"true").attr("x",m).attr("y",a).attr("width",p+2*i+n).attr("height",e.height+2*r)),a+=e.height+2*r,f="attributeBoxOdd"===f?"attributeBoxEven":"attributeBoxOdd"}))}else b.height=Math.max(co.minEntityHeight,f),e.attr("transform","translate("+b.width/2+","+b.height/2+")");return b})(s,c,e[i].attributes),u=s.insert("rect","#"+o).classed("er entityBox",!0).attr("x",0).attr("y",0).attr("width",l).attr("height",h).node().getBBox();n.setNode(a,{width:u.width,height:u.height,shape:"rect",id:a})})),r},uo=function(t){return(t.entityA+t.roleA+t.entityB).replace(/\s/g,"")};let po=0;const fo="28e9f9db-3c8d-5aa5-9faf-44286ae5937c";function go(t=""){return t.length>0?`${t}-`:""}const yo={setConf:function(t){const e=Object.keys(t);for(const n of e)co[n]=t[n]},draw:function(t,e,n,r){co=ar().er,Nt.info("Drawing ER diagram");const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);let c;so(s,co),c=new ht.k({multigraph:!0,directed:!0,compound:!1}).setGraph({rankdir:co.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));const l=ho(s,r.db.getEntities(),c),h=function(t,e){return t.forEach((function(t){e.setEdge(lo.get(t.entityA),lo.get(t.entityB),{relationship:t},uo(t))})),t}(r.db.getRelationships(),c);var u,d;(0,lt.bK)(c),u=s,(d=c).nodes().forEach((function(t){void 0!==t&&void 0!==d.node(t)&&u.select("#"+t).attr("transform","translate("+(d.node(t).x-d.node(t).width/2)+","+(d.node(t).y-d.node(t).height/2)+" )")})),h.forEach((function(t){!function(t,e,n,r,i){po++;const a=n.edge(lo.get(e.entityA),lo.get(e.entityB),uo(e)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),c=t.insert("path","#"+r).classed("er relationshipLine",!0).attr("d",s(a.points)).style("stroke",co.stroke).style("fill","none");e.relSpec.relType===i.db.Identification.NON_IDENTIFYING&&c.attr("stroke-dasharray","8,8");let l="";switch(co.arrowMarkerAbsolute&&(l=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,l=l.replace(/\(/g,"\\("),l=l.replace(/\)/g,"\\)")),e.relSpec.cardA){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_ONE_END+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_MORE_END+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ONE_OR_MORE_END+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-end","url("+l+"#"+ao.ONLY_ONE_END+")")}switch(e.relSpec.cardB){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_ONE_START+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_MORE_START+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ONE_OR_MORE_START+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-start","url("+l+"#"+ao.ONLY_ONE_START+")")}const h=c.node().getTotalLength(),u=c.node().getPointAtLength(.5*h),d="rel"+po,p=t.append("text").classed("er relationshipLabel",!0).attr("id",d).attr("x",u.x).attr("y",u.y).style("text-anchor","middle").style("dominant-baseline","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(e.roleA).node().getBBox();t.insert("rect","#"+d).classed("er relationshipLabelBox",!0).attr("x",u.x-p.width/2).attr("y",u.y-p.height/2).attr("width",p.width).attr("height",p.height)}(s,t,c,l,r)}));const p=co.diagramPadding;Gn.insertTitle(s,"entityTitleText",co.titleTopMargin,r.db.getDiagramTitle());const f=s.node().getBBox(),g=f.width+2*p,y=f.height+2*p;dr(s,y,g,co.useMaxWidth),s.attr("viewBox",`${f.x-p} ${f.y-p} ${g} ${y}`)}};var mo=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,9],r=[1,7],i=[1,6],a=[1,8],s=[1,20,21,22,23,38,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],o=[2,10],c=[1,20],l=[1,21],h=[1,22],u=[1,23],d=[1,30],p=[1,32],f=[1,33],g=[1,34],y=[1,62],m=[1,48],b=[1,52],_=[1,36],x=[1,37],v=[1,38],k=[1,39],w=[1,40],E=[1,56],C=[1,63],T=[1,51],S=[1,53],A=[1,55],L=[1,59],B=[1,60],N=[1,41],D=[1,42],O=[1,43],M=[1,44],I=[1,61],F=[1,50],$=[1,54],R=[1,57],Z=[1,58],P=[1,49],j=[1,66],Y=[1,71],z=[1,20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],U=[1,75],W=[1,74],q=[1,76],H=[20,21,23,81,82],V=[1,99],G=[1,104],X=[1,107],K=[1,108],Q=[1,101],J=[1,106],tt=[1,109],et=[1,102],nt=[1,114],rt=[1,113],it=[1,103],at=[1,105],st=[1,110],ot=[1,111],ct=[1,112],lt=[1,115],ht=[20,21,22,23,81,82],ut=[20,21,22,23,53,81,82],dt=[20,21,22,23,40,52,53,55,57,59,61,63,65,66,67,69,71,73,74,76,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],pt=[20,21,23],ft=[20,21,23,52,66,67,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],gt=[1,12,20,21,22,23,24,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],yt=[52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],mt=[1,149],bt=[1,157],_t=[1,158],xt=[1,159],vt=[1,160],kt=[1,144],wt=[1,145],Et=[1,141],Ct=[1,152],Tt=[1,153],St=[1,154],At=[1,155],Lt=[1,156],Bt=[1,161],Nt=[1,162],Dt=[1,147],Ot=[1,150],Mt=[1,146],It=[1,143],Ft=[20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],$t=[1,165],Rt=[20,21,22,23,26,52,66,67,91,105,106,109,111,112,122,123,124,125,126,127],Zt=[20,21,22,23,24,26,38,40,41,42,52,56,58,60,62,64,66,67,68,70,72,73,75,77,81,82,86,87,88,89,90,91,92,95,105,106,109,111,112,113,114,122,123,124,125,126,127],Pt=[12,21,22,24],jt=[22,106],Yt=[1,250],zt=[1,245],Ut=[1,246],Wt=[1,254],qt=[1,251],Ht=[1,248],Vt=[1,247],Gt=[1,249],Xt=[1,252],Kt=[1,253],Qt=[1,255],Jt=[1,273],te=[20,21,23,106],ee=[20,21,22,23,66,67,86,102,105,106,109,110,111,112,113],ne={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,directive:5,openDirective:6,typeDirective:7,closeDirective:8,separator:9,":":10,argDirective:11,open_directive:12,type_directive:13,arg_directive:14,close_directive:15,graphConfig:16,document:17,line:18,statement:19,SEMI:20,NEWLINE:21,SPACE:22,EOF:23,GRAPH:24,NODIR:25,DIR:26,FirstStmtSeperator:27,ending:28,endToken:29,spaceList:30,spaceListNewline:31,verticeStatement:32,styleStatement:33,linkStyleStatement:34,classDefStatement:35,classStatement:36,clickStatement:37,subgraph:38,text:39,SQS:40,SQE:41,end:42,direction:43,acc_title:44,acc_title_value:45,acc_descr:46,acc_descr_value:47,acc_descr_multiline_value:48,link:49,node:50,vertex:51,AMP:52,STYLE_SEPARATOR:53,idString:54,DOUBLECIRCLESTART:55,DOUBLECIRCLEEND:56,PS:57,PE:58,"(-":59,"-)":60,STADIUMSTART:61,STADIUMEND:62,SUBROUTINESTART:63,SUBROUTINEEND:64,VERTEX_WITH_PROPS_START:65,ALPHA:66,COLON:67,PIPE:68,CYLINDERSTART:69,CYLINDEREND:70,DIAMOND_START:71,DIAMOND_STOP:72,TAGEND:73,TRAPSTART:74,TRAPEND:75,INVTRAPSTART:76,INVTRAPEND:77,linkStatement:78,arrowText:79,TESTSTR:80,START_LINK:81,LINK:82,textToken:83,STR:84,keywords:85,STYLE:86,LINKSTYLE:87,CLASSDEF:88,CLASS:89,CLICK:90,DOWN:91,UP:92,textNoTags:93,textNoTagsToken:94,DEFAULT:95,stylesOpt:96,alphaNum:97,CALLBACKNAME:98,CALLBACKARGS:99,HREF:100,LINK_TARGET:101,HEX:102,numList:103,INTERPOLATE:104,NUM:105,COMMA:106,style:107,styleComponent:108,MINUS:109,UNIT:110,BRKT:111,DOT:112,PCT:113,TAGSTART:114,alphaNumToken:115,idStringToken:116,alphaNumStatement:117,direction_tb:118,direction_bt:119,direction_rl:120,direction_lr:121,PUNCTUATION:122,UNICODE_TEXT:123,PLUS:124,EQUALS:125,MULT:126,UNDERSCORE:127,graphCodeTokens:128,ARROW_CROSS:129,ARROW_POINT:130,ARROW_CIRCLE:131,ARROW_OPEN:132,QUOTE:133,$accept:0,$end:1},terminals_:{2:"error",10:":",12:"open_directive",13:"type_directive",14:"arg_directive",15:"close_directive",20:"SEMI",21:"NEWLINE",22:"SPACE",23:"EOF",24:"GRAPH",25:"NODIR",26:"DIR",38:"subgraph",40:"SQS",41:"SQE",42:"end",44:"acc_title",45:"acc_title_value",46:"acc_descr",47:"acc_descr_value",48:"acc_descr_multiline_value",52:"AMP",53:"STYLE_SEPARATOR",55:"DOUBLECIRCLESTART",56:"DOUBLECIRCLEEND",57:"PS",58:"PE",59:"(-",60:"-)",61:"STADIUMSTART",62:"STADIUMEND",63:"SUBROUTINESTART",64:"SUBROUTINEEND",65:"VERTEX_WITH_PROPS_START",66:"ALPHA",67:"COLON",68:"PIPE",69:"CYLINDERSTART",70:"CYLINDEREND",71:"DIAMOND_START",72:"DIAMOND_STOP",73:"TAGEND",74:"TRAPSTART",75:"TRAPEND",76:"INVTRAPSTART",77:"INVTRAPEND",80:"TESTSTR",81:"START_LINK",82:"LINK",84:"STR",86:"STYLE",87:"LINKSTYLE",88:"CLASSDEF",89:"CLASS",90:"CLICK",91:"DOWN",92:"UP",95:"DEFAULT",98:"CALLBACKNAME",99:"CALLBACKARGS",100:"HREF",101:"LINK_TARGET",102:"HEX",104:"INTERPOLATE",105:"NUM",106:"COMMA",109:"MINUS",110:"UNIT",111:"BRKT",112:"DOT",113:"PCT",114:"TAGSTART",118:"direction_tb",119:"direction_bt",120:"direction_rl",121:"direction_lr",122:"PUNCTUATION",123:"UNICODE_TEXT",124:"PLUS",125:"EQUALS",126:"MULT",127:"UNDERSCORE",129:"ARROW_CROSS",130:"ARROW_POINT",131:"ARROW_CIRCLE",132:"ARROW_OPEN",133:"QUOTE"},productions_:[0,[3,1],[3,2],[5,4],[5,6],[6,1],[7,1],[11,1],[8,1],[4,2],[17,0],[17,2],[18,1],[18,1],[18,1],[18,1],[18,1],[16,2],[16,2],[16,2],[16,3],[28,2],[28,1],[29,1],[29,1],[29,1],[27,1],[27,1],[27,2],[31,2],[31,2],[31,1],[31,1],[30,2],[30,1],[19,2],[19,2],[19,2],[19,2],[19,2],[19,2],[19,9],[19,6],[19,4],[19,1],[19,2],[19,2],[19,1],[9,1],[9,1],[9,1],[32,3],[32,4],[32,2],[32,1],[50,1],[50,5],[50,3],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,8],[51,4],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,4],[51,4],[51,1],[49,2],[49,3],[49,3],[49,1],[49,3],[78,1],[79,3],[39,1],[39,2],[39,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[93,1],[93,2],[35,5],[35,5],[36,5],[37,2],[37,4],[37,3],[37,5],[37,2],[37,4],[37,4],[37,6],[37,2],[37,4],[37,2],[37,4],[37,4],[37,6],[33,5],[33,5],[34,5],[34,5],[34,9],[34,9],[34,7],[34,7],[103,1],[103,3],[96,1],[96,3],[107,1],[107,2],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[83,1],[83,1],[83,1],[83,1],[83,1],[83,1],[94,1],[94,1],[94,1],[94,1],[54,1],[54,2],[97,1],[97,2],[117,1],[117,1],[117,1],[117,1],[43,1],[43,1],[43,1],[43,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.parseDirective("%%{","open_directive");break;case 6:r.parseDirective(a[o],"type_directive");break;case 7:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 8:r.parseDirective("}%%","close_directive","flowchart");break;case 10:case 36:case 37:case 38:case 39:case 40:this.$=[];break;case 11:(!Array.isArray(a[o])||a[o].length>0)&&a[o-1].push(a[o]),this.$=a[o-1];break;case 12:case 82:case 84:case 96:case 152:case 154:case 155:case 78:case 150:this.$=a[o];break;case 19:r.setDirection("TB"),this.$="TB";break;case 20:r.setDirection(a[o-1]),this.$=a[o-1];break;case 35:this.$=a[o-1].nodes;break;case 41:this.$=r.addSubGraph(a[o-6],a[o-1],a[o-4]);break;case 42:this.$=r.addSubGraph(a[o-3],a[o-1],a[o-3]);break;case 43:this.$=r.addSubGraph(void 0,a[o-1],void 0);break;case 45:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 46:case 47:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 51:r.addLink(a[o-2].stmt,a[o],a[o-1]),this.$={stmt:a[o],nodes:a[o].concat(a[o-2].nodes)};break;case 52:r.addLink(a[o-3].stmt,a[o-1],a[o-2]),this.$={stmt:a[o-1],nodes:a[o-1].concat(a[o-3].nodes)};break;case 53:this.$={stmt:a[o-1],nodes:a[o-1]};break;case 54:this.$={stmt:a[o],nodes:a[o]};break;case 55:case 123:case 125:this.$=[a[o]];break;case 56:this.$=a[o-4].concat(a[o]);break;case 57:this.$=[a[o-2]],r.setClass(a[o-2],a[o]);break;case 58:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"square");break;case 59:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"doublecircle");break;case 60:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"circle");break;case 61:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"ellipse");break;case 62:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"stadium");break;case 63:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"subroutine");break;case 64:this.$=a[o-7],r.addVertex(a[o-7],a[o-1],"rect",void 0,void 0,void 0,Object.fromEntries([[a[o-5],a[o-3]]]));break;case 65:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"cylinder");break;case 66:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"round");break;case 67:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"diamond");break;case 68:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"hexagon");break;case 69:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"odd");break;case 70:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"trapezoid");break;case 71:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"inv_trapezoid");break;case 72:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_right");break;case 73:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_left");break;case 74:this.$=a[o],r.addVertex(a[o]);break;case 75:a[o-1].text=a[o],this.$=a[o-1];break;case 76:case 77:a[o-2].text=a[o-1],this.$=a[o-2];break;case 79:var c=r.destructLink(a[o],a[o-2]);this.$={type:c.type,stroke:c.stroke,length:c.length,text:a[o-1]};break;case 80:c=r.destructLink(a[o]);this.$={type:c.type,stroke:c.stroke,length:c.length};break;case 81:this.$=a[o-1];break;case 83:case 97:case 153:case 151:this.$=a[o-1]+""+a[o];break;case 98:case 99:this.$=a[o-4],r.addClass(a[o-2],a[o]);break;case 100:this.$=a[o-4],r.setClass(a[o-2],a[o]);break;case 101:case 109:this.$=a[o-1],r.setClickEvent(a[o-1],a[o]);break;case 102:case 110:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 103:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 104:this.$=a[o-4],r.setClickEvent(a[o-4],a[o-3],a[o-2]),r.setTooltip(a[o-4],a[o]);break;case 105:case 111:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 106:case 112:this.$=a[o-3],r.setLink(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 107:case 113:this.$=a[o-3],r.setLink(a[o-3],a[o-2],a[o]);break;case 108:case 114:this.$=a[o-5],r.setLink(a[o-5],a[o-4],a[o]),r.setTooltip(a[o-5],a[o-2]);break;case 115:this.$=a[o-4],r.addVertex(a[o-2],void 0,void 0,a[o]);break;case 116:case 118:this.$=a[o-4],r.updateLink(a[o-2],a[o]);break;case 117:this.$=a[o-4],r.updateLink([a[o-2]],a[o]);break;case 119:this.$=a[o-8],r.updateLinkInterpolate([a[o-6]],a[o-2]),r.updateLink([a[o-6]],a[o]);break;case 120:this.$=a[o-8],r.updateLinkInterpolate(a[o-6],a[o-2]),r.updateLink(a[o-6],a[o]);break;case 121:this.$=a[o-6],r.updateLinkInterpolate([a[o-4]],a[o]);break;case 122:this.$=a[o-6],r.updateLinkInterpolate(a[o-4],a[o]);break;case 124:case 126:a[o-2].push(a[o]),this.$=a[o-2];break;case 128:this.$=a[o-1]+a[o];break;case 156:this.$="v";break;case 157:this.$="-";break;case 158:this.$={stmt:"dir",value:"TB"};break;case 159:this.$={stmt:"dir",value:"BT"};break;case 160:this.$={stmt:"dir",value:"RL"};break;case 161:this.$={stmt:"dir",value:"LR"}}},table:[{3:1,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},{1:[3]},{1:[2,1]},{3:10,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},e(s,o,{17:11}),{7:12,13:[1,13]},{16:14,21:r,22:i,24:a},{16:15,21:r,22:i,24:a},{25:[1,16],26:[1,17]},{13:[2,5]},{1:[2,2]},{1:[2,9],18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{8:64,10:[1,65],15:j},e([10,15],[2,6]),e(s,[2,17]),e(s,[2,18]),e(s,[2,19]),{20:[1,68],21:[1,69],22:Y,27:67,30:70},e(z,[2,11]),e(z,[2,12]),e(z,[2,13]),e(z,[2,14]),e(z,[2,15]),e(z,[2,16]),{9:72,20:U,21:W,23:q,49:73,78:77,81:[1,78],82:[1,79]},{9:80,20:U,21:W,23:q},{9:81,20:U,21:W,23:q},{9:82,20:U,21:W,23:q},{9:83,20:U,21:W,23:q},{9:84,20:U,21:W,23:q},{9:86,20:U,21:W,22:[1,85],23:q},e(z,[2,44]),{45:[1,87]},{47:[1,88]},e(z,[2,47]),e(H,[2,54],{30:89,22:Y}),{22:[1,90]},{22:[1,91]},{22:[1,92]},{22:[1,93]},{26:V,52:G,66:X,67:K,84:[1,97],91:Q,97:96,98:[1,94],100:[1,95],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(z,[2,158]),e(z,[2,159]),e(z,[2,160]),e(z,[2,161]),e(ht,[2,55],{53:[1,116]}),e(ut,[2,74],{116:129,40:[1,117],52:y,55:[1,118],57:[1,119],59:[1,120],61:[1,121],63:[1,122],65:[1,123],66:m,67:b,69:[1,124],71:[1,125],73:[1,126],74:[1,127],76:[1,128],91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),e(dt,[2,150]),e(dt,[2,175]),e(dt,[2,176]),e(dt,[2,177]),e(dt,[2,178]),e(dt,[2,179]),e(dt,[2,180]),e(dt,[2,181]),e(dt,[2,182]),e(dt,[2,183]),e(dt,[2,184]),e(dt,[2,185]),e(dt,[2,186]),e(dt,[2,187]),e(dt,[2,188]),e(dt,[2,189]),e(dt,[2,190]),{9:130,20:U,21:W,23:q},{11:131,14:[1,132]},e(pt,[2,8]),e(s,[2,20]),e(s,[2,26]),e(s,[2,27]),{21:[1,133]},e(ft,[2,34],{30:134,22:Y}),e(z,[2,35]),{50:135,51:45,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},e(gt,[2,48]),e(gt,[2,49]),e(gt,[2,50]),e(yt,[2,78],{79:136,68:[1,138],80:[1,137]}),{22:mt,24:bt,26:_t,38:xt,39:139,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e([52,66,67,68,80,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,80]),e(z,[2,36]),e(z,[2,37]),e(z,[2,38]),e(z,[2,39]),e(z,[2,40]),{22:mt,24:bt,26:_t,38:xt,39:163,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:164}),e(z,[2,45]),e(z,[2,46]),e(H,[2,53],{52:$t}),{26:V,52:G,66:X,67:K,91:Q,97:166,102:[1,167],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{95:[1,168],103:169,105:[1,170]},{26:V,52:G,66:X,67:K,91:Q,95:[1,171],97:172,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:173,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,101],{22:[1,174],99:[1,175]}),e(pt,[2,105],{22:[1,176]}),e(pt,[2,109],{115:100,117:178,22:[1,177],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,111],{22:[1,179]}),e(Rt,[2,152]),e(Rt,[2,154]),e(Rt,[2,155]),e(Rt,[2,156]),e(Rt,[2,157]),e(Zt,[2,162]),e(Zt,[2,163]),e(Zt,[2,164]),e(Zt,[2,165]),e(Zt,[2,166]),e(Zt,[2,167]),e(Zt,[2,168]),e(Zt,[2,169]),e(Zt,[2,170]),e(Zt,[2,171]),e(Zt,[2,172]),e(Zt,[2,173]),e(Zt,[2,174]),{52:y,54:180,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:mt,24:bt,26:_t,38:xt,39:181,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:182,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:184,42:vt,52:G,57:[1,183],66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:185,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:186,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:187,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{66:[1,188]},{22:mt,24:bt,26:_t,38:xt,39:189,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:190,42:vt,52:G,66:X,67:K,71:[1,191],73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:192,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:193,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:194,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(dt,[2,151]),e(Pt,[2,3]),{8:195,15:j},{15:[2,7]},e(s,[2,28]),e(ft,[2,33]),e(H,[2,51],{30:196,22:Y}),e(yt,[2,75],{22:[1,197]}),{22:[1,198]},{22:mt,24:bt,26:_t,38:xt,39:199,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,81:wt,82:[1,200],83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Zt,[2,82]),e(Zt,[2,84]),e(Zt,[2,140]),e(Zt,[2,141]),e(Zt,[2,142]),e(Zt,[2,143]),e(Zt,[2,144]),e(Zt,[2,145]),e(Zt,[2,146]),e(Zt,[2,147]),e(Zt,[2,148]),e(Zt,[2,149]),e(Zt,[2,85]),e(Zt,[2,86]),e(Zt,[2,87]),e(Zt,[2,88]),e(Zt,[2,89]),e(Zt,[2,90]),e(Zt,[2,91]),e(Zt,[2,92]),e(Zt,[2,93]),e(Zt,[2,94]),e(Zt,[2,95]),{9:203,20:U,21:W,22:mt,23:q,24:bt,26:_t,38:xt,40:[1,202],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,204],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Y,30:205},{22:[1,206],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,207]},{22:[1,208]},{22:[1,209],106:[1,210]},e(jt,[2,123]),{22:[1,211]},{22:[1,212],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,213],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{84:[1,214]},e(pt,[2,103],{22:[1,215]}),{84:[1,216],101:[1,217]},{84:[1,218]},e(Rt,[2,153]),{84:[1,219],101:[1,220]},e(ht,[2,57],{116:129,52:y,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),{22:mt,24:bt,26:_t,38:xt,41:[1,221],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,56:[1,222],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:223,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,224],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,60:[1,225],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,62:[1,226],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,64:[1,227],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{67:[1,228]},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,70:[1,229],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,230],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:231,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,41:[1,232],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,233],77:[1,234],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,236],77:[1,235],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{9:237,20:U,21:W,23:q},e(H,[2,52],{52:$t}),e(yt,[2,77]),e(yt,[2,76]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,68:[1,238],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(yt,[2,79]),e(Zt,[2,83]),{22:mt,24:bt,26:_t,38:xt,39:239,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:240}),e(z,[2,43]),{51:241,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:242,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:256,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:257,102:qt,104:[1,258],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:259,102:qt,104:[1,260],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{105:[1,261]},{22:Yt,66:zt,67:Ut,86:Wt,96:262,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:263,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{26:V,52:G,66:X,67:K,91:Q,97:264,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,102]),{84:[1,265]},e(pt,[2,106],{22:[1,266]}),e(pt,[2,107]),e(pt,[2,110]),e(pt,[2,112],{22:[1,267]}),e(pt,[2,113]),e(ut,[2,58]),e(ut,[2,59]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,268],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,66]),e(ut,[2,61]),e(ut,[2,62]),e(ut,[2,63]),{66:[1,269]},e(ut,[2,65]),e(ut,[2,67]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,270],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,69]),e(ut,[2,70]),e(ut,[2,72]),e(ut,[2,71]),e(ut,[2,73]),e(Pt,[2,4]),e([22,52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,81]),{22:mt,24:bt,26:_t,38:xt,41:[1,271],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,272],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},e(ht,[2,56]),e(pt,[2,115],{106:Jt}),e(te,[2,125],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(ee,[2,127]),e(ee,[2,129]),e(ee,[2,130]),e(ee,[2,131]),e(ee,[2,132]),e(ee,[2,133]),e(ee,[2,134]),e(ee,[2,135]),e(ee,[2,136]),e(ee,[2,137]),e(ee,[2,138]),e(ee,[2,139]),e(pt,[2,116],{106:Jt}),e(pt,[2,117],{106:Jt}),{22:[1,275]},e(pt,[2,118],{106:Jt}),{22:[1,276]},e(jt,[2,124]),e(pt,[2,98],{106:Jt}),e(pt,[2,99],{106:Jt}),e(pt,[2,100],{115:100,117:178,26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,104]),{101:[1,277]},{101:[1,278]},{58:[1,279]},{68:[1,280]},{72:[1,281]},{9:282,20:U,21:W,23:q},e(z,[2,42]),{22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,107:283,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ee,[2,128]),{26:V,52:G,66:X,67:K,91:Q,97:284,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:285,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,108]),e(pt,[2,114]),e(ut,[2,60]),{22:mt,24:bt,26:_t,38:xt,39:286,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,68]),e(Ft,o,{17:287}),e(te,[2,126],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(pt,[2,121],{115:100,117:178,22:[1,288],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,122],{115:100,117:178,22:[1,289],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),{22:mt,24:bt,26:_t,38:xt,41:[1,290],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,291],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:292,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:293,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ut,[2,64]),e(z,[2,41]),e(pt,[2,119],{106:Jt}),e(pt,[2,120],{106:Jt})],defaultActions:{2:[2,1],9:[2,5],10:[2,2],132:[2,7]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},re=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),12;case 1:return this.begin("type_directive"),13;case 2:return this.popState(),this.begin("arg_directive"),10;case 3:return this.popState(),this.popState(),15;case 4:return 14;case 5:case 6:break;case 7:return this.begin("acc_title"),44;case 8:return this.popState(),"acc_title_value";case 9:return this.begin("acc_descr"),46;case 10:return this.popState(),"acc_descr_value";case 11:this.begin("acc_descr_multiline");break;case 12:case 15:case 24:case 27:case 30:case 33:this.popState();break;case 13:return"acc_descr_multiline_value";case 14:this.begin("string");break;case 16:return"STR";case 17:return 86;case 18:return 95;case 19:return 87;case 20:return 104;case 21:return 88;case 22:return 89;case 23:this.begin("href");break;case 25:return 100;case 26:this.begin("callbackname");break;case 28:this.popState(),this.begin("callbackargs");break;case 29:return 98;case 31:return 99;case 32:this.begin("click");break;case 34:return 90;case 35:case 36:case 37:return t.lex.firstGraph()&&this.begin("dir"),24;case 38:return 38;case 39:return 42;case 40:case 41:case 42:case 43:return 101;case 44:return this.popState(),25;case 45:case 46:case 47:case 48:case 49:case 50:case 51:case 52:case 53:case 54:return this.popState(),26;case 55:return 118;case 56:return 119;case 57:return 120;case 58:return 121;case 59:return 105;case 60:return 111;case 61:return 53;case 62:return 67;case 63:return 52;case 64:return 20;case 65:return 106;case 66:return 126;case 67:case 68:case 69:return 82;case 70:case 71:case 72:return 81;case 73:return 59;case 74:return 60;case 75:return 61;case 76:return 62;case 77:return 63;case 78:return 64;case 79:return 65;case 80:return 69;case 81:return 70;case 82:return 55;case 83:return 56;case 84:return 109;case 85:return 112;case 86:return 127;case 87:return 124;case 88:return 113;case 89:case 90:return 125;case 91:return 114;case 92:return 73;case 93:return 92;case 94:return"SEP";case 95:return 91;case 96:return 66;case 97:return 75;case 98:return 74;case 99:return 77;case 100:return 76;case 101:return 122;case 102:return 123;case 103:return 68;case 104:return 57;case 105:return 58;case 106:return 40;case 107:return 41;case 108:return 71;case 109:return 72;case 110:return 133;case 111:return 21;case 112:return 22;case 113:return 23}},rules:[/^(?:%%\{)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)[^\n]*)/,/^(?:[^\}]%%[^\n]*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:style\b)/,/^(?:default\b)/,/^(?:linkStyle\b)/,/^(?:interpolate\b)/,/^(?:classDef\b)/,/^(?:class\b)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:click[\s]+)/,/^(?:[\s\n])/,/^(?:[^\s\n]*)/,/^(?:flowchart-elk\b)/,/^(?:graph\b)/,/^(?:flowchart\b)/,/^(?:subgraph\b)/,/^(?:end\b\s*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:(\r?\n)*\s*\n)/,/^(?:\s*LR\b)/,/^(?:\s*RL\b)/,/^(?:\s*TB\b)/,/^(?:\s*BT\b)/,/^(?:\s*TD\b)/,/^(?:\s*BR\b)/,/^(?:\s*<)/,/^(?:\s*>)/,/^(?:\s*\^)/,/^(?:\s*v\b)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:[0-9]+)/,/^(?:#)/,/^(?::::)/,/^(?::)/,/^(?:&)/,/^(?:;)/,/^(?:,)/,/^(?:\*)/,/^(?:\s*[xo<]?--+[-xo>]\s*)/,/^(?:\s*[xo<]?==+[=xo>]\s*)/,/^(?:\s*[xo<]?-?\.+-[xo>]?\s*)/,/^(?:\s*[xo<]?--\s*)/,/^(?:\s*[xo<]?==\s*)/,/^(?:\s*[xo<]?-\.\s*)/,/^(?:\(-)/,/^(?:-\))/,/^(?:\(\[)/,/^(?:\]\))/,/^(?:\[\[)/,/^(?:\]\])/,/^(?:\[\|)/,/^(?:\[\()/,/^(?:\)\])/,/^(?:\(\(\()/,/^(?:\)\)\))/,/^(?:-)/,/^(?:\.)/,/^(?:[\_])/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:<)/,/^(?:>)/,/^(?:\^)/,/^(?:\\\|)/,/^(?:v\b)/,/^(?:[A-Za-z]+)/,/^(?:\\\])/,/^(?:\[\/)/,/^(?:\/\])/,/^(?:\[\\)/,/^(?:[!"#$%&'*+,-.`?\\_/])/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\|)/,/^(?:\()/,/^(?:\))/,/^(?:\[)/,/^(?:\])/,/^(?:\{)/,/^(?:\})/,/^(?:")/,/^(?:(\r?\n)+)/,/^(?:\s)/,/^(?:$)/],conditions:{close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[30,31],inclusive:!1},callbackname:{rules:[27,28,29],inclusive:!1},href:{rules:[24,25],inclusive:!1},click:{rules:[33,34],inclusive:!1},vertex:{rules:[],inclusive:!1},dir:{rules:[44,45,46,47,48,49,50,51,52,53,54],inclusive:!1},acc_descr_multiline:{rules:[12,13],inclusive:!1},acc_descr:{rules:[10],inclusive:!1},acc_title:{rules:[8],inclusive:!1},string:{rules:[15,16],inclusive:!1},INITIAL:{rules:[0,5,6,7,9,11,14,17,18,19,20,21,22,23,26,32,35,36,37,38,39,40,41,42,43,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],inclusive:!0}}},t);function ie(){this.yy={}}return ne.lexer=re,ie.prototype=ne,ne.Parser=ie,new ie}();mo.parser=mo;const bo=mo,_o=(t,e)=>{var n,r;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&null!==t.match(/^\s*graph/))},xo=(t,e)=>{var n,r;return"dagre-d3"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&(null!==t.match(/^\s*graph/)||null!==t.match(/^\s*flowchart/)))};let vo,ko,wo=0,Eo=ar(),Co={},To=[],So={},Ao=[],Lo={},Bo={},No=0,Do=!0,Oo=[];const Mo=t=>Yt.sanitizeText(t,Eo),Io=function(t,e,n){ap.parseDirective(this,t,e,n)},Fo=function(t){const e=Object.keys(Co);for(const n of e)if(Co[n].id===t)return Co[n].domId;return t},$o=function(t,e,n,r,i,a,s={}){let o,c=t;void 0!==c&&0!==c.trim().length&&(void 0===Co[c]&&(Co[c]={id:c,domId:"flowchart-"+c+"-"+wo,styles:[],classes:[]}),wo++,void 0!==e?(Eo=ar(),o=Mo(e.trim()),'"'===o[0]&&'"'===o[o.length-1]&&(o=o.substring(1,o.length-1)),Co[c].text=o):void 0===Co[c].text&&(Co[c].text=t),void 0!==n&&(Co[c].type=n),null!=r&&r.forEach((function(t){Co[c].styles.push(t)})),null!=i&&i.forEach((function(t){Co[c].classes.push(t)})),void 0!==a&&(Co[c].dir=a),void 0===Co[c].props?Co[c].props=s:void 0!==s&&Object.assign(Co[c].props,s))},Ro=function(t,e,n,r){const i={start:t,end:e,type:void 0,text:""};void 0!==(r=n.text)&&(i.text=Mo(r.trim()),'"'===i.text[0]&&'"'===i.text[i.text.length-1]&&(i.text=i.text.substring(1,i.text.length-1))),void 0!==n&&(i.type=n.type,i.stroke=n.stroke,i.length=n.length),To.push(i)},Zo=function(t,e,n,r){let i,a;for(i=0;i<t.length;i++)for(a=0;a<e.length;a++)Ro(t[i],e[a],n,r)},Po=function(t,e){t.forEach((function(t){"default"===t?To.defaultInterpolate=e:To[t].interpolate=e}))},jo=function(t,e){t.forEach((function(t){"default"===t?To.defaultStyle=e:(-1===Gn.isSubstringInArray("fill",e)&&e.push("fill:none"),To[t].style=e)}))},Yo=function(t,e){void 0===So[t]&&(So[t]={id:t,styles:[],textStyles:[]}),null!=e&&e.forEach((function(e){if(e.match("color")){const n=e.replace("fill","bgFill").replace("color","fill");So[t].textStyles.push(n)}So[t].styles.push(e)}))},zo=function(t){vo=t,vo.match(/.*</)&&(vo="RL"),vo.match(/.*\^/)&&(vo="BT"),vo.match(/.*>/)&&(vo="LR"),vo.match(/.*v/)&&(vo="TB"),"TD"===vo&&(vo="TB")},Uo=function(t,e){t.split(",").forEach((function(t){let n=t;void 0!==Co[n]&&Co[n].classes.push(e),void 0!==Lo[n]&&Lo[n].classes.push(e)}))},Wo=function(t,e,n){t.split(",").forEach((function(t){void 0!==Co[t]&&(Co[t].link=Gn.formatUrl(e,Eo),Co[t].linkTarget=n)})),Uo(t,"clickable")},qo=function(t){return Bo[t]},Ho=function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){let r=Fo(t);if("loose"!==ar().securityLevel)return;if(void 0===e)return;let i=[];if("string"==typeof n){i=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<i.length;t++){let e=i[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),i[t]=e}}0===i.length&&i.push(t),void 0!==Co[t]&&(Co[t].haveCallback=!0,Oo.push((function(){const t=document.querySelector(`[id="${r}"]`);null!==t&&t.addEventListener("click",(function(){Gn.runFunc(e,...i)}),!1)})))}(t,e,n)})),Uo(t,"clickable")},Vo=function(t){Oo.forEach((function(e){e(t)}))},Go=function(){return vo.trim()},Xo=function(){return Co},Ko=function(){return To},Qo=function(){return So},Jo=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Oo.push(Jo);const tc=function(t="gen-1"){Co={},So={},To=[],Oo=[Jo],Ao=[],Lo={},No=0,Bo=[],Do=!0,ko=t,Dr()},ec=t=>{ko=t||"gen-2"},nc=function(){return"fill:#ffa;stroke: #f66; stroke-width: 3px; stroke-dasharray: 5, 5;fill:#ffa;stroke: #666;"},rc=function(t,e,n){let r=t.trim(),i=n;t===n&&n.match(/\s/)&&(r=void 0);let a=[];const{nodeList:s,dir:o}=function(t){const e={boolean:{},number:{},string:{}},n=[];let r;return{nodeList:t.filter((function(t){const i=typeof t;return t.stmt&&"dir"===t.stmt?(r=t.value,!1):""!==t.trim()&&(i in e?!e[i].hasOwnProperty(t)&&(e[i][t]=!0):!n.includes(t)&&n.push(t))})),dir:r}}(a.concat.apply(a,e));if(a=s,"gen-1"===ko)for(let l=0;l<a.length;l++)a[l]=Fo(a[l]);r=r||"subGraph"+No,i=i||"",i=Mo(i),No+=1;const c={id:r,nodes:a,title:i.trim(),classes:[],dir:o};return Nt.info("Adding",c.id,c.nodes,c.dir),c.nodes=fc(c,Ao).nodes,Ao.push(c),Lo[r]=c,r},ic=function(t){for(const[e,n]of Ao.entries())if(n.id===t)return e;return-1};let ac=-1;const sc=[],oc=function(t,e){const n=Ao[e].nodes;if(ac+=1,ac>2e3)return;if(sc[ac]=e,Ao[e].id===t)return{result:!0,count:0};let r=0,i=1;for(;r<n.length;){const e=ic(n[r]);if(e>=0){const n=oc(t,e);if(n.result)return{result:!0,count:i+n.count};i+=n.count}r+=1}return{result:!1,count:i}},cc=function(t){return sc[t]},lc=function(){ac=-1,Ao.length>0&&oc("none",Ao.length-1)},hc=function(){return Ao},uc=()=>!!Do&&(Do=!1,!0),dc=(t,e)=>{const n=(t=>{const e=t.trim();let n=e.slice(0,-1),r="arrow_open";switch(e.slice(-1)){case"x":r="arrow_cross","x"===e[0]&&(r="double_"+r,n=n.slice(1));break;case">":r="arrow_point","<"===e[0]&&(r="double_"+r,n=n.slice(1));break;case"o":r="arrow_circle","o"===e[0]&&(r="double_"+r,n=n.slice(1))}let i="normal",a=n.length-1;"="===n[0]&&(i="thick");let s=((t,e)=>{const n=e.length;let r=0;for(let i=0;i<n;++i)e[i]===t&&++r;return r})(".",n);return s&&(i="dotted",a=s),{type:r,stroke:i,length:a}})(t);let r;if(e){if(r=(t=>{let e=t.trim(),n="arrow_open";switch(e[0]){case"<":n="arrow_point",e=e.slice(1);break;case"x":n="arrow_cross",e=e.slice(1);break;case"o":n="arrow_circle",e=e.slice(1)}let r="normal";return e.includes("=")&&(r="thick"),e.includes(".")&&(r="dotted"),{type:n,stroke:r}})(e),r.stroke!==n.stroke)return{type:"INVALID",stroke:"INVALID"};if("arrow_open"===r.type)r.type=n.type;else{if(r.type!==n.type)return{type:"INVALID",stroke:"INVALID"};r.type="double_"+r.type}return"double_arrow"===r.type&&(r.type="double_arrow_point"),r.length=n.length,r}return n},pc=(t,e)=>{let n=!1;return t.forEach((t=>{t.nodes.indexOf(e)>=0&&(n=!0)})),n},fc=(t,e)=>{const n=[];return t.nodes.forEach(((r,i)=>{pc(e,r)||n.push(t.nodes[i])})),{nodes:n}},gc={firstGraph:uc},yc={parseDirective:Io,defaultConfig:()=>Kn.flowchart,setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,addVertex:$o,lookUpDomId:Fo,addLink:Zo,updateLinkInterpolate:Po,updateLink:jo,addClass:Yo,setDirection:zo,setClass:Uo,setTooltip:function(t,e){t.split(",").forEach((function(t){void 0!==e&&(Bo["gen-1"===ko?Fo(t):t]=Mo(e))}))},getTooltip:qo,setClickEvent:Ho,setLink:Wo,bindFunctions:Vo,getDirection:Go,getVertices:Xo,getEdges:Ko,getClasses:Qo,clear:tc,setGen:ec,defaultStyle:nc,addSubGraph:rc,getDepthFirstPos:cc,indexNodes:lc,getSubGraphs:hc,destructLink:dc,lex:gc,exists:pc,makeUniq:fc,setDiagramTitle:$r,getDiagramTitle:Rr},mc=Object.freeze(Object.defineProperty({__proto__:null,addClass:Yo,addLink:Zo,addSingleLink:Ro,addSubGraph:rc,addVertex:$o,bindFunctions:Vo,clear:tc,default:yc,defaultStyle:nc,destructLink:dc,firstGraph:uc,getClasses:Qo,getDepthFirstPos:cc,getDirection:Go,getEdges:Ko,getSubGraphs:hc,getTooltip:qo,getVertices:Xo,indexNodes:lc,lex:gc,lookUpDomId:Fo,parseDirective:Io,setClass:Uo,setClickEvent:Ho,setDirection:zo,setGen:ec,setLink:Wo,updateLink:jo,updateLinkInterpolate:Po},Symbol.toStringTag,{value:"Module"}));const bc={},_c=function(t){const e=Object.keys(t);for(const n of e)bc[n]=t[n]},xc={},vc=function(t,e,n,r,i,a){const s=r.select(`[id="${n}"]`);Object.keys(t).forEach((function(n){const r=t[n];let o="default";r.classes.length>0&&(o=r.classes.join(" "));const c=Mn(r.styles);let l,h=void 0!==r.text?r.text:r.id;if(Pt(ar().flowchart.htmlLabels)){const t={label:h.replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`))};l=(0,kt.a)(s,t).node(),l.parentNode.removeChild(l)}else{const t=i.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",c.labelStyle.replace("color:","fill:"));const e=h.split(Yt.lineBreakRegex);for(const n of e){const e=i.createElementNS("http://www.w3.org/2000/svg","tspan");e.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),e.setAttribute("dy","1em"),e.setAttribute("x","1"),e.textContent=n,t.appendChild(e)}l=t}let u=0,d="";switch(r.type){case"round":u=5,d="rect";break;case"square":case"group":default:d="rect";break;case"diamond":d="question";break;case"hexagon":d="hexagon";break;case"odd":case"odd_right":d="rect_left_inv_arrow";break;case"lean_right":d="lean_right";break;case"lean_left":d="lean_left";break;case"trapezoid":d="trapezoid";break;case"inv_trapezoid":d="inv_trapezoid";break;case"circle":d="circle";break;case"ellipse":d="ellipse";break;case"stadium":d="stadium";break;case"subroutine":d="subroutine";break;case"cylinder":d="cylinder";break;case"doublecircle":d="doublecircle"}e.setNode(r.id,{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,link:r.link,linkTarget:r.linkTarget,tooltip:a.db.getTooltip(r.id)||"",domId:a.db.lookUpDomId(r.id),haveCallback:r.haveCallback,width:"group"===r.type?500:void 0,dir:r.dir,type:r.type,props:r.props,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,domId:a.db.lookUpDomId(r.id),width:"group"===r.type?500:void 0,type:r.type,dir:r.dir,props:r.props,padding:ar().flowchart.padding})}))},kc=function(t,e,n){Nt.info("abc78 edges = ",t);let r,i,a=0,s={};if(void 0!==t.defaultStyle){const e=Mn(t.defaultStyle);r=e.style,i=e.labelStyle}t.forEach((function(n){a++;var c="L-"+n.start+"-"+n.end;void 0===s[c]?(s[c]=0,Nt.info("abc78 new entry",c,s[c])):(s[c]++,Nt.info("abc78 new entry",c,s[c]));let l=c+"-"+s[c];Nt.info("abc78 new link id to be used is",c,l,s[c]);var h="LS-"+n.start,u="LE-"+n.end;const d={style:"",labelStyle:""};switch(d.minlen=n.length||1,"arrow_open"===n.type?d.arrowhead="none":d.arrowhead="normal",d.arrowTypeStart="arrow_open",d.arrowTypeEnd="arrow_open",n.type){case"double_arrow_cross":d.arrowTypeStart="arrow_cross";case"arrow_cross":d.arrowTypeEnd="arrow_cross";break;case"double_arrow_point":d.arrowTypeStart="arrow_point";case"arrow_point":d.arrowTypeEnd="arrow_point";break;case"double_arrow_circle":d.arrowTypeStart="arrow_circle";case"arrow_circle":d.arrowTypeEnd="arrow_circle"}let p="",f="";switch(n.stroke){case"normal":p="fill:none;",void 0!==r&&(p=r),void 0!==i&&(f=i),d.thickness="normal",d.pattern="solid";break;case"dotted":d.thickness="normal",d.pattern="dotted",d.style="fill:none;stroke-width:2px;stroke-dasharray:3;";break;case"thick":d.thickness="thick",d.pattern="solid",d.style="stroke-width: 3.5px;fill:none;"}if(void 0!==n.style){const t=Mn(n.style);p=t.style,f=t.labelStyle}d.style=d.style+=p,d.labelStyle=d.labelStyle+=f,void 0!==n.interpolate?d.curve=Dn(n.interpolate,o.c_6):void 0!==t.defaultInterpolate?d.curve=Dn(t.defaultInterpolate,o.c_6):d.curve=Dn(xc.curve,o.c_6),void 0===n.text?void 0!==n.style&&(d.arrowheadStyle="fill: #333"):(d.arrowheadStyle="fill: #333",d.labelpos="c"),d.labelType="text",d.label=n.text.replace(Yt.lineBreakRegex,"\n"),void 0===n.style&&(d.style=d.style||"stroke: #333; stroke-width: 1.5px;fill:none;"),d.labelStyle=d.labelStyle.replace("color:","fill:"),d.id=l,d.classes="flowchart-link "+h+" "+u,e.setEdge(n.start,n.end,d,a)}))},wc={setConf:function(t){const e=Object.keys(t);for(const n of e)xc[n]=t[n]},addVertices:vc,addEdges:kc,getClasses:function(t,e){Nt.info("Extracting classes"),e.db.clear();try{return e.parse(t),e.db.getClasses()}catch(n){return}},draw:function(t,e,n,r){Nt.info("Drawing flowchart"),r.db.clear(),yc.setGen("gen-2"),r.parser.parse(t);let i=r.db.getDirection();void 0===i&&(i="TD");const{securityLevel:a,flowchart:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;let h;"sandbox"===a&&(h=(0,o.Ys)("#i"+e));const u="sandbox"===a?(0,o.Ys)(h.nodes()[0].contentDocument.body):(0,o.Ys)("body"),d="sandbox"===a?h.nodes()[0].contentDocument:document,p=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:i,nodesep:c,ranksep:l,marginx:0,marginy:0}).setDefaultEdgeLabel((function(){return{}}));let f;const g=r.db.getSubGraphs();Nt.info("Subgraphs - ",g);for(let o=g.length-1;o>=0;o--)f=g[o],Nt.info("Subgraph - ",f),r.db.addVertex(f.id,f.title,"group",void 0,f.classes,f.dir);const y=r.db.getVertices(),m=r.db.getEdges();Nt.info("Edges",m);let b=0;for(b=g.length-1;b>=0;b--){f=g[b],(0,o.td_)("cluster").append("text");for(let t=0;t<f.nodes.length;t++)Nt.info("Setting up subgraphs",f.nodes[t],f.id),p.setParent(f.nodes[t],f.id)}vc(y,p,e,u,d,r),kc(m,p);const _=u.select(`[id="${e}"]`),x=u.select("#"+e+" g");if(qs(x,p,["point","circle","cross"],"flowchart",e),Gn.insertTitle(_,"flowchartTitleText",s.titleTopMargin,r.db.getDiagramTitle()),pr(p,_,s.diagramPadding,s.useMaxWidth),r.db.indexNodes("subGraph"+b),!s.htmlLabels){const t=d.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of t){const t=e.getBBox(),n=d.createElementNS("http://www.w3.org/2000/svg","rect");n.setAttribute("rx",0),n.setAttribute("ry",0),n.setAttribute("width",t.width),n.setAttribute("height",t.height),e.insertBefore(n,e.firstChild)}}Object.keys(y).forEach((function(t){const n=y[t];if(n.link){const r=(0,o.Ys)("#"+e+' [id="'+t+'"]');if(r){const t=d.createElementNS("http://www.w3.org/2000/svg","a");t.setAttributeNS("http://www.w3.org/2000/svg","class",n.classes.join(" ")),t.setAttributeNS("http://www.w3.org/2000/svg","href",n.link),t.setAttributeNS("http://www.w3.org/2000/svg","rel","noopener"),"sandbox"===a?t.setAttributeNS("http://www.w3.org/2000/svg","target","_top"):n.linkTarget&&t.setAttributeNS("http://www.w3.org/2000/svg","target",n.linkTarget);const e=r.insert((function(){return t}),":first-child"),i=r.select(".label-container");i&&e.append((function(){return i.node()}));const s=r.select(".label");s&&e.append((function(){return s.node()}))}}}))}};var Ec=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,21],d=[1,22],p=[1,23],f=[1,24],g=[1,25],y=[1,26],m=[1,27],b=[1,29],_=[1,31],x=[1,34],v=[5,7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],k={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,gantt:5,document:6,EOF:7,line:8,SPACE:9,statement:10,NL:11,dateFormat:12,inclusiveEndDates:13,topAxis:14,axisFormat:15,tickInterval:16,excludes:17,includes:18,todayMarker:19,title:20,acc_title:21,acc_title_value:22,acc_descr:23,acc_descr_value:24,acc_descr_multiline_value:25,section:26,clickStatement:27,taskTxt:28,taskData:29,openDirective:30,typeDirective:31,closeDirective:32,":":33,argDirective:34,click:35,callbackname:36,callbackargs:37,href:38,clickStatementDebug:39,open_directive:40,type_directive:41,arg_directive:42,close_directive:43,$accept:0,$end:1},terminals_:{2:"error",5:"gantt",7:"EOF",9:"SPACE",11:"NL",12:"dateFormat",13:"inclusiveEndDates",14:"topAxis",15:"axisFormat",16:"tickInterval",17:"excludes",18:"includes",19:"todayMarker",20:"title",21:"acc_title",22:"acc_title_value",23:"acc_descr",24:"acc_descr_value",25:"acc_descr_multiline_value",26:"section",28:"taskTxt",29:"taskData",33:":",35:"click",36:"callbackname",37:"callbackargs",38:"href",40:"open_directive",41:"type_directive",42:"arg_directive",43:"close_directive"},productions_:[0,[3,2],[3,3],[6,0],[6,2],[8,2],[8,1],[8,1],[8,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,2],[10,2],[10,1],[10,1],[10,1],[10,2],[10,1],[4,4],[4,6],[27,2],[27,3],[27,3],[27,4],[27,3],[27,4],[27,2],[39,2],[39,3],[39,3],[39,4],[39,3],[39,4],[39,2],[30,1],[31,1],[34,1],[32,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 2:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 9:r.setDateFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 10:r.enableInclusiveEndDates(),this.$=a[o].substr(18);break;case 11:r.TopAxis(),this.$=a[o].substr(8);break;case 12:r.setAxisFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 13:r.setTickInterval(a[o].substr(13)),this.$=a[o].substr(13);break;case 14:r.setExcludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 15:r.setIncludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 16:r.setTodayMarker(a[o].substr(12)),this.$=a[o].substr(12);break;case 17:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 18:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 19:case 20:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 23:r.addTask(a[o-1],a[o]),this.$="task";break;case 27:this.$=a[o-1],r.setClickEvent(a[o-1],a[o],null);break;case 28:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 29:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],null),r.setLink(a[o-2],a[o]);break;case 30:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setLink(a[o-3],a[o]);break;case 31:this.$=a[o-2],r.setClickEvent(a[o-2],a[o],null),r.setLink(a[o-2],a[o-1]);break;case 32:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-1],a[o]),r.setLink(a[o-3],a[o-2]);break;case 33:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 34:case 40:this.$=a[o-1]+" "+a[o];break;case 35:case 36:case 38:this.$=a[o-2]+" "+a[o-1]+" "+a[o];break;case 37:case 39:this.$=a[o-3]+" "+a[o-2]+" "+a[o-1]+" "+a[o];break;case 41:r.parseDirective("%%{","open_directive");break;case 42:r.parseDirective(a[o],"type_directive");break;case 43:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 44:r.parseDirective("}%%","close_directive","gantt")}},table:[{3:1,4:2,5:n,30:4,40:r},{1:[3]},{3:6,4:2,5:n,30:4,40:r},e(i,[2,3],{6:7}),{31:8,41:[1,9]},{41:[2,41]},{1:[2,1]},{4:30,7:[1,10],8:11,9:[1,12],10:13,11:[1,14],12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},{32:32,33:[1,33],43:x},e([33,43],[2,42]),e(i,[2,8],{1:[2,2]}),e(i,[2,4]),{4:30,10:35,12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,9]),e(i,[2,10]),e(i,[2,11]),e(i,[2,12]),e(i,[2,13]),e(i,[2,14]),e(i,[2,15]),e(i,[2,16]),e(i,[2,17]),{22:[1,36]},{24:[1,37]},e(i,[2,20]),e(i,[2,21]),e(i,[2,22]),{29:[1,38]},e(i,[2,24]),{36:[1,39],38:[1,40]},{11:[1,41]},{34:42,42:[1,43]},{11:[2,44]},e(i,[2,5]),e(i,[2,18]),e(i,[2,19]),e(i,[2,23]),e(i,[2,27],{37:[1,44],38:[1,45]}),e(i,[2,33],{36:[1,46]}),e(v,[2,25]),{32:47,43:x},{43:[2,43]},e(i,[2,28],{38:[1,48]}),e(i,[2,29]),e(i,[2,31],{37:[1,49]}),{11:[1,50]},e(i,[2,30]),e(i,[2,32]),e(v,[2,26])],defaultActions:{5:[2,41],6:[2,1],34:[2,44],43:[2,43]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),40;case 1:return this.begin("type_directive"),41;case 2:return this.popState(),this.begin("arg_directive"),33;case 3:return this.popState(),this.popState(),43;case 4:return 42;case 5:return this.begin("acc_title"),21;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),23;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 20:case 23:case 26:case 29:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:case 13:case 14:case 16:case 17:case 18:break;case 15:return 11;case 19:this.begin("href");break;case 21:return 38;case 22:this.begin("callbackname");break;case 24:this.popState(),this.begin("callbackargs");break;case 25:return 36;case 27:return 37;case 28:this.begin("click");break;case 30:return 35;case 31:return 5;case 32:return 12;case 33:return 13;case 34:return 14;case 35:return 15;case 36:return 16;case 37:return 18;case 38:return 17;case 39:return 19;case 40:return"date";case 41:return 20;case 42:return"accDescription";case 43:return 26;case 44:return 28;case 45:return 29;case 46:return 33;case 47:return 7;case 48:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%(?!\{)*[^\n]*)/i,/^(?:[^\}]%%*[^\n]*)/i,/^(?:%%*[^\n]*[\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:href[\s]+["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:call[\s]+)/i,/^(?:\([\s]*\))/i,/^(?:\()/i,/^(?:[^(]*)/i,/^(?:\))/i,/^(?:[^)]*)/i,/^(?:click[\s]+)/i,/^(?:[\s\n])/i,/^(?:[^\s\n]*)/i,/^(?:gantt\b)/i,/^(?:dateFormat\s[^#\n;]+)/i,/^(?:inclusiveEndDates\b)/i,/^(?:topAxis\b)/i,/^(?:axisFormat\s[^#\n;]+)/i,/^(?:tickInterval\s[^#\n;]+)/i,/^(?:includes\s[^#\n;]+)/i,/^(?:excludes\s[^#\n;]+)/i,/^(?:todayMarker\s[^\n;]+)/i,/^(?:\d\d\d\d-\d\d-\d\d\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accDescription\s[^#\n;]+)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[26,27],inclusive:!1},callbackname:{rules:[23,24,25],inclusive:!1},href:{rules:[20,21],inclusive:!1},click:{rules:[29,30],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,22,28,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Ec.parser=Ec;const Cc=Ec,Tc=t=>null!==t.match(/^\s*gantt/);a().extend(Et()),a().extend(Tt()),a().extend(At());let Sc,Ac="",Lc="",Bc="",Nc=[],Dc=[],Oc={},Mc=[],Ic=[],Fc="";const $c=["active","done","crit","milestone"];let Rc=[],Zc=!1,Pc=!1,jc=0;const Yc=function(t,e,n,r){return!r.includes(t.format(e.trim()))&&(!!(t.isoWeekday()>=6&&n.includes("weekends"))||(!!n.includes(t.format("dddd").toLowerCase())||n.includes(t.format(e.trim()))))},zc=function(t,e,n,r){if(!n.length||t.manualEndTime)return;let i,s;i=t.startTime instanceof Date?a()(t.startTime):a()(t.startTime,e,!0),i=i.add(1,"d"),s=t.endTime instanceof Date?a()(t.endTime):a()(t.endTime,e,!0);const[o,c]=Uc(i,s,e,n,r);t.endTime=o.toDate(),t.renderEndTime=c},Uc=function(t,e,n,r,i){let a=!1,s=null;for(;t<=e;)a||(s=e.toDate()),a=Yc(t,n,r,i),a&&(e=e.add(1,"d")),t=t.add(1,"d");return[e,s]},Wc=function(t,e,n){n=n.trim();const r=/^after\s+([\d\w- ]+)/.exec(n.trim());if(null!==r){let t=null;if(r[1].split(" ").forEach((function(e){let n=tl(e);void 0!==n&&(t?n.endTime>t.endTime&&(t=n):t=n)})),t)return t.endTime;{const t=new Date;return t.setHours(0,0,0,0),t}}let i=a()(n,e.trim(),!0);if(i.isValid())return i.toDate();{Nt.debug("Invalid date:"+n),Nt.debug("With date format:"+e.trim());const t=new Date(n);if(void 0===t||isNaN(t.getTime()))throw new Error("Invalid date:"+n);return t}},qc=function(t){const e=/^(\d+(?:\.\d+)?)([Mdhmswy]|ms)$/.exec(t.trim());return null!==e?[Number.parseFloat(e[1]),e[2]]:[NaN,"ms"]},Hc=function(t,e,n,r=!1){n=n.trim();let i=a()(n,e.trim(),!0);if(i.isValid())return r&&(i=i.add(1,"d")),i.toDate();let s=a()(t);const[o,c]=qc(n);if(!Number.isNaN(o)){const t=s.add(o,c);t.isValid()&&(s=t)}return s.toDate()};let Vc=0;const Gc=function(t){return void 0===t?(Vc+=1,"task"+Vc):t};let Xc,Kc,Qc=[];const Jc={},tl=function(t){const e=Jc[t];return Qc[e]},el=function(){const t=function(t){const e=Qc[t];let n="";switch(Qc[t].raw.startTime.type){case"prevTaskEnd":{const t=tl(e.prevTaskId);e.startTime=t.endTime;break}case"getStartDate":n=Wc(0,Ac,Qc[t].raw.startTime.startData),n&&(Qc[t].startTime=n)}return Qc[t].startTime&&(Qc[t].endTime=Hc(Qc[t].startTime,Ac,Qc[t].raw.endTime.data,Zc),Qc[t].endTime&&(Qc[t].processed=!0,Qc[t].manualEndTime=a()(Qc[t].raw.endTime.data,"YYYY-MM-DD",!0).isValid(),zc(Qc[t],Ac,Dc,Nc))),Qc[t].processed};let e=!0;for(const[n,r]of Qc.entries())t(n),e=e&&r.processed;return e},nl=function(t,e){t.split(",").forEach((function(t){let n=tl(t);void 0!==n&&n.classes.push(e)}))},rl=function(t,e){Rc.push((function(){const n=document.querySelector(`[id="${t}"]`);null!==n&&n.addEventListener("click",(function(){e()}))}),(function(){const n=document.querySelector(`[id="${t}-text"]`);null!==n&&n.addEventListener("click",(function(){e()}))}))},il={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gantt,clear:function(){Mc=[],Ic=[],Fc="",Rc=[],Vc=0,Xc=void 0,Kc=void 0,Qc=[],Ac="",Lc="",Sc=void 0,Bc="",Nc=[],Dc=[],Zc=!1,Pc=!1,jc=0,Oc={},Dr()},setDateFormat:function(t){Ac=t},getDateFormat:function(){return Ac},enableInclusiveEndDates:function(){Zc=!0},endDatesAreInclusive:function(){return Zc},enableTopAxis:function(){Pc=!0},topAxisEnabled:function(){return Pc},setAxisFormat:function(t){Lc=t},getAxisFormat:function(){return Lc},setTickInterval:function(t){Sc=t},getTickInterval:function(){return Sc},setTodayMarker:function(t){Bc=t},getTodayMarker:function(){return Bc},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){Fc=t,Mc.push(t)},getSections:function(){return Mc},getTasks:function(){let t=el();let e=0;for(;!t&&e<10;)t=el(),e++;return Ic=Qc,Ic},addTask:function(t,e){const n={section:Fc,type:Fc,processed:!1,manualEndTime:!1,renderEndTime:null,raw:{data:e},task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();switch(r.length){case 1:i.id=Gc(),i.startTime={type:"prevTaskEnd",id:t},i.endTime={data:r[0]};break;case 2:i.id=Gc(),i.startTime={type:"getStartDate",startData:r[0]},i.endTime={data:r[1]};break;case 3:i.id=Gc(r[0]),i.startTime={type:"getStartDate",startData:r[1]},i.endTime={data:r[2]}}return i}(Kc,e);n.raw.startTime=r.startTime,n.raw.endTime=r.endTime,n.id=r.id,n.prevTaskId=Kc,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,n.order=jc,jc++;const i=Qc.push(n);Kc=n.id,Jc[n.id]=i-1},findTaskById:tl,addTaskOrg:function(t,e){const n={section:Fc,type:Fc,description:t,task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();let s="";switch(r.length){case 1:i.id=Gc(),i.startTime=t.endTime,s=r[0];break;case 2:i.id=Gc(),i.startTime=Wc(0,Ac,r[0]),s=r[1];break;case 3:i.id=Gc(r[0]),i.startTime=Wc(0,Ac,r[1]),s=r[2]}return s&&(i.endTime=Hc(i.startTime,Ac,s,Zc),i.manualEndTime=a()(s,"YYYY-MM-DD",!0).isValid(),zc(i,Ac,Dc,Nc)),i}(Xc,e);n.startTime=r.startTime,n.endTime=r.endTime,n.id=r.id,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,Xc=n,Ic.push(n)},setIncludes:function(t){Nc=t.toLowerCase().split(/[\s,]+/)},getIncludes:function(){return Nc},setExcludes:function(t){Dc=t.toLowerCase().split(/[\s,]+/)},getExcludes:function(){return Dc},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){if("loose"!==ar().securityLevel)return;if(void 0===e)return;let r=[];if("string"==typeof n){r=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<r.length;t++){let e=r[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),r[t]=e}}0===r.length&&r.push(t),void 0!==tl(t)&&rl(t,(()=>{Gn.runFunc(e,...r)}))}(t,e,n)})),nl(t,"clickable")},setLink:function(t,e){let n=e;"loose"!==ar().securityLevel&&(n=(0,s.N)(e)),t.split(",").forEach((function(t){void 0!==tl(t)&&(rl(t,(()=>{window.open(n,"_self")})),Oc[t]=n)})),nl(t,"clickable")},getLinks:function(){return Oc},bindFunctions:function(t){Rc.forEach((function(e){e(t)}))},parseDuration:qc,isInvalidDate:Yc};function al(t,e,n){let r=!0;for(;r;)r=!1,n.forEach((function(n){const i=new RegExp("^\\s*"+n+"\\s*$");t[0].match(i)&&(e[n]=!0,t.shift(1),r=!0)}))}let sl;const ol={setConf:function(){Nt.debug("Something is calling, setConf, remove the call")},draw:function(t,e,n,r){const i=ar().gantt,s=ar().securityLevel;let c;"sandbox"===s&&(c=(0,o.Ys)("#i"+e));const l="sandbox"===s?(0,o.Ys)(c.nodes()[0].contentDocument.body):(0,o.Ys)("body"),h="sandbox"===s?c.nodes()[0].contentDocument:document,u=h.getElementById(e);sl=u.parentElement.offsetWidth,void 0===sl&&(sl=1200),void 0!==i.useWidth&&(sl=i.useWidth);const d=r.db.getTasks(),p=d.length*(i.barHeight+i.barGap)+2*i.topPadding;u.setAttribute("viewBox","0 0 "+sl+" "+p);const f=l.select(`[id="${e}"]`),g=(0,o.Xf)().domain([(0,o.VV$)(d,(function(t){return t.startTime})),(0,o.Fp7)(d,(function(t){return t.endTime}))]).rangeRound([0,sl-i.leftPadding-i.rightPadding]);let y=[];for(const a of d)y.push(a.type);const m=y;function b(t,e){return function(t){let e=t.length;const n={};for(;e;)n[t[--e]]=(n[t[e]]||0)+1;return n}(e)[t]||0}y=function(t){const e={},n=[];for(let r=0,i=t.length;r<i;++r)Object.prototype.hasOwnProperty.call(e,t[r])||(e[t[r]]=!0,n.push(t[r]));return n}(y),d.sort((function(t,e){const n=t.startTime,r=e.startTime;let i=0;return n>r?i=1:n<r&&(i=-1),i})),function(t,n,s){const c=i.barHeight,l=c+i.barGap,u=i.topPadding,d=i.leftPadding;(0,o.BYU)().domain([0,y.length]).range(["#00B9FA","#F95002"]).interpolate(o.JHv);(function(t,e,n,s,o,c,l,h){const u=c.reduce(((t,{startTime:e})=>t?Math.min(t,e):e),0),d=c.reduce(((t,{endTime:e})=>t?Math.max(t,e):e),0),p=r.db.getDateFormat();if(!u||!d)return;const y=[];let m=null,b=a()(u);for(;b.valueOf()<=d;)r.db.isInvalidDate(b,p,l,h)?m?m.end=b:m={start:b,end:b}:m&&(y.push(m),m=null),b=b.add(1,"d");f.append("g").selectAll("rect").data(y).enter().append("rect").attr("id",(function(t){return"exclude-"+t.start.format("YYYY-MM-DD")})).attr("x",(function(t){return g(t.start)+n})).attr("y",i.gridLineStartPadding).attr("width",(function(t){const e=t.end.add(1,"day");return g(e)-g(t.start)})).attr("height",o-e-i.gridLineStartPadding).attr("transform-origin",(function(e,r){return(g(e.start)+n+.5*(g(e.end)-g(e.start))).toString()+"px "+(r*t+.5*o).toString()+"px"})).attr("class","exclude-range")})(l,u,d,0,s,t,r.db.getExcludes(),r.db.getIncludes()),function(t,e,n,a){let s=(0,o.LLu)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));const c=/^([1-9]\d*)(minute|hour|day|week|month)$/.exec(r.db.getTickInterval()||i.tickInterval);if(null!==c){const t=c[1];switch(c[2]){case"minute":s.ticks(o.Z_i.every(t));break;case"hour":s.ticks(o.WQD.every(t));break;case"day":s.ticks(o.rr1.every(t));break;case"week":s.ticks(o.NGh.every(t));break;case"month":s.ticks(o.F0B.every(t))}}if(f.append("g").attr("class","grid").attr("transform","translate("+t+", "+(a-50)+")").call(s).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10).attr("dy","1em"),r.db.topAxisEnabled()||i.topAxis){let n=(0,o.F5q)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));if(null!==c){const t=c[1];switch(c[2]){case"minute":n.ticks(o.Z_i.every(t));break;case"hour":n.ticks(o.WQD.every(t));break;case"day":n.ticks(o.rr1.every(t));break;case"week":n.ticks(o.NGh.every(t));break;case"month":n.ticks(o.F0B.every(t))}}f.append("g").attr("class","grid").attr("transform","translate("+t+", "+e+")").call(n).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10)}}(d,u,0,s),function(t,n,a,s,c,l,h){f.append("g").selectAll("rect").data(t).enter().append("rect").attr("x",0).attr("y",(function(t,e){return t.order*n+a-2})).attr("width",(function(){return h-i.rightPadding/2})).attr("height",n).attr("class",(function(t){for(const[e,n]of y.entries())if(t.type===n)return"section section"+e%i.numberSectionStyles;return"section section0"}));const u=f.append("g").selectAll("rect").data(t).enter(),d=r.db.getLinks();u.append("rect").attr("id",(function(t){return t.id})).attr("rx",3).attr("ry",3).attr("x",(function(t){return t.milestone?g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))-.5*c:g(t.startTime)+s})).attr("y",(function(t,e){return t.order*n+a})).attr("width",(function(t){return t.milestone?c:g(t.renderEndTime||t.endTime)-g(t.startTime)})).attr("height",c).attr("transform-origin",(function(t,e){return e=t.order,(g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))).toString()+"px "+(e*n+a+.5*c).toString()+"px"})).attr("class",(function(t){const e="task";let n="";t.classes.length>0&&(n=t.classes.join(" "));let r=0;for(const[s,o]of y.entries())t.type===o&&(r=s%i.numberSectionStyles);let a="";return t.active?t.crit?a+=" activeCrit":a=" active":t.done?a=t.crit?" doneCrit":" done":t.crit&&(a+=" crit"),0===a.length&&(a=" task"),t.milestone&&(a=" milestone "+a),a+=r,a+=" "+n,e+a})),u.append("text").attr("id",(function(t){return t.id+"-text"})).text((function(t){return t.task})).attr("font-size",i.fontSize).attr("x",(function(t){let e=g(t.startTime),n=g(t.renderEndTime||t.endTime);t.milestone&&(e+=.5*(g(t.endTime)-g(t.startTime))-.5*c),t.milestone&&(n=e+c);const r=this.getBBox().width;return r>n-e?n+r+1.5*i.leftPadding>h?e+s-5:n+s+5:(n-e)/2+e+s})).attr("y",(function(t,e){return t.order*n+i.barHeight/2+(i.fontSize/2-2)+a})).attr("text-height",c).attr("class",(function(t){const e=g(t.startTime);let n=g(t.endTime);t.milestone&&(n=e+c);const r=this.getBBox().width;let a="";t.classes.length>0&&(a=t.classes.join(" "));let s=0;for(const[c,l]of y.entries())t.type===l&&(s=c%i.numberSectionStyles);let o="";return t.active&&(o=t.crit?"activeCritText"+s:"activeText"+s),t.done?o=t.crit?o+" doneCritText"+s:o+" doneText"+s:t.crit&&(o=o+" critText"+s),t.milestone&&(o+=" milestoneText"),r>n-e?n+r+1.5*i.leftPadding>h?a+" taskTextOutsideLeft taskTextOutside"+s+" "+o:a+" taskTextOutsideRight taskTextOutside"+s+" "+o+" width-"+r:a+" taskText taskText"+s+" "+o+" width-"+r}));if("sandbox"===ar().securityLevel){let t;t=(0,o.Ys)("#i"+e);const n=t.nodes()[0].contentDocument;u.filter((function(t){return void 0!==d[t.id]})).each((function(t){var e=n.querySelector("#"+t.id),r=n.querySelector("#"+t.id+"-text");const i=e.parentNode;var a=n.createElement("a");a.setAttribute("xlink:href",d[t.id]),a.setAttribute("target","_top"),i.appendChild(a),a.appendChild(e),a.appendChild(r)}))}}(t,l,u,d,c,0,n),function(t,e){const n=[];let r=0;for(const[i,a]of y.entries())n[i]=[a,b(a,m)];f.append("g").selectAll("text").data(n).enter().append((function(t){const e=t[0].split(Yt.lineBreakRegex),n=-(e.length-1)/2,r=h.createElementNS("http://www.w3.org/2000/svg","text");r.setAttribute("dy",n+"em");for(const[i,a]of e.entries()){const t=h.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttribute("alignment-baseline","central"),t.setAttribute("x","10"),i>0&&t.setAttribute("dy","1em"),t.textContent=a,r.appendChild(t)}return r})).attr("x",10).attr("y",(function(i,a){if(!(a>0))return i[1]*t/2+e;for(let s=0;s<a;s++)return r+=n[a-1][1],i[1]*t/2+r*t+e})).attr("font-size",i.sectionFontSize).attr("font-size",i.sectionFontSize).attr("class",(function(t){for(const[e,n]of y.entries())if(t[0]===n)return"sectionTitle sectionTitle"+e%i.numberSectionStyles;return"sectionTitle"}))}(l,u),function(t,e,n,a){const s=r.db.getTodayMarker();if("off"===s)return;const o=f.append("g").attr("class","today"),c=new Date,l=o.append("line");l.attr("x1",g(c)+t).attr("x2",g(c)+t).attr("y1",i.titleTopMargin).attr("y2",a-i.titleTopMargin).attr("class","today"),""!==s&&l.attr("style",s.replace(/,/g,";"))}(d,0,0,s)}(d,sl,p),dr(f,p,sl,i.useMaxWidth),f.append("text").text(r.db.getDiagramTitle()).attr("x",sl/2).attr("y",i.titleTopMargin).attr("class","titleText")}};var cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[6,9,10],r={trace:function(){},yy:{},symbols_:{error:2,start:3,info:4,document:5,EOF:6,line:7,statement:8,NL:9,showInfo:10,$accept:0,$end:1},terminals_:{2:"error",4:"info",6:"EOF",9:"NL",10:"showInfo"},productions_:[0,[3,3],[5,0],[5,2],[7,1],[7,1],[8,1]],performAction:function(t,e,n,r,i,a,s){switch(a.length,i){case 1:return r;case 4:break;case 6:r.setInfo(!0)}},table:[{3:1,4:[1,2]},{1:[3]},e(n,[2,2],{5:3}),{6:[1,4],7:5,8:6,9:[1,7],10:[1,8]},{1:[2,1]},e(n,[2,3]),e(n,[2,4]),e(n,[2,5]),e(n,[2,6])],defaultActions:{4:[2,1]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},i=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 4;case 1:return 9;case 2:return"space";case 3:return 10;case 4:return 6;case 5:return"TXT"}},rules:[/^(?:info\b)/i,/^(?:[\s\n\r]+)/i,/^(?:[\s]+)/i,/^(?:showInfo\b)/i,/^(?:$)/i,/^(?:.)/i],conditions:{INITIAL:{rules:[0,1,2,3,4,5],inclusive:!0}}},t);function a(){this.yy={}}return r.lexer=i,a.prototype=r,r.Parser=a,new a}();cl.parser=cl;const ll=cl;var hl="",ul=!1;const dl={setMessage:t=>{Nt.debug("Setting message to: "+t),hl=t},getMessage:()=>hl,setInfo:t=>{ul=t},getInfo:()=>ul,clear:Dr},pl={draw:(t,e,n)=>{try{Nt.debug("Rendering info diagram\n"+t);const r=ar().securityLevel;let i;"sandbox"===r&&(i=(0,o.Ys)("#i"+e));const a=("sandbox"===r?(0,o.Ys)(i.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select("#"+e);a.append("g").append("text").attr("x",100).attr("y",40).attr("class","version").attr("font-size","32px").style("text-anchor","middle").text("v "+n),a.attr("height",100),a.attr("width",400)}catch(r){Nt.error("Error while rendering info diagram"),Nt.error(r.message)}}},fl=t=>null!==t.match(/^\s*info/);var gl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,5],i=[1,6],a=[1,7],s=[1,9],o=[1,11,13,15,17,19,20,26,27,28,29],c=[2,5],l=[1,6,11,13,15,17,19,20,26,27,28,29],h=[26,27,28],u=[2,8],d=[1,18],p=[1,19],f=[1,20],g=[1,21],y=[1,22],m=[1,23],b=[1,28],_=[6,26,27,28,29],x={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,PIE:6,document:7,showData:8,line:9,statement:10,txt:11,value:12,title:13,title_value:14,acc_title:15,acc_title_value:16,acc_descr:17,acc_descr_value:18,acc_descr_multiline_value:19,section:20,openDirective:21,typeDirective:22,closeDirective:23,":":24,argDirective:25,NEWLINE:26,";":27,EOF:28,open_directive:29,type_directive:30,arg_directive:31,close_directive:32,$accept:0,$end:1},terminals_:{2:"error",6:"PIE",8:"showData",11:"txt",12:"value",13:"title",14:"title_value",15:"acc_title",16:"acc_title_value",17:"acc_descr",18:"acc_descr_value",19:"acc_descr_multiline_value",20:"section",24:":",26:"NEWLINE",27:";",28:"EOF",29:"open_directive",30:"type_directive",31:"arg_directive",32:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,3],[7,0],[7,2],[9,2],[10,0],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,1],[5,3],[5,5],[4,1],[4,1],[4,1],[21,1],[22,1],[25,1],[23,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setShowData(!0);break;case 7:this.$=a[o-1];break;case 9:r.addSection(a[o-1],r.cleanupValue(a[o]));break;case 10:this.$=a[o].trim(),r.setDiagramTitle(this.$);break;case 11:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 12:case 13:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 14:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 21:r.parseDirective("%%{","open_directive");break;case 22:r.parseDirective(a[o],"type_directive");break;case 23:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 24:r.parseDirective("}%%","close_directive","pie")}},table:[{3:1,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{1:[3]},{3:10,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{3:11,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},e(o,c,{7:12,8:[1,13]}),e(l,[2,18]),e(l,[2,19]),e(l,[2,20]),{22:14,30:[1,15]},{30:[2,21]},{1:[2,1]},{1:[2,2]},e(h,u,{21:8,9:16,10:17,5:24,1:[2,3],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(o,c,{7:25}),{23:26,24:[1,27],32:b},e([24,32],[2,22]),e(o,[2,6]),{4:29,26:r,27:i,28:a},{12:[1,30]},{14:[1,31]},{16:[1,32]},{18:[1,33]},e(h,[2,13]),e(h,[2,14]),e(h,[2,15]),e(h,u,{21:8,9:16,10:17,5:24,1:[2,4],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(_,[2,16]),{25:34,31:[1,35]},e(_,[2,24]),e(o,[2,7]),e(h,[2,9]),e(h,[2,10]),e(h,[2,11]),e(h,[2,12]),{23:36,32:b},{32:[2,23]},e(_,[2,17])],defaultActions:{9:[2,21],10:[2,1],11:[2,2],35:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},v=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),29;case 1:return this.begin("type_directive"),30;case 2:return this.popState(),this.begin("arg_directive"),24;case 3:return this.popState(),this.popState(),32;case 4:return 31;case 5:case 6:case 8:case 9:break;case 7:return 26;case 10:return this.begin("title"),13;case 11:return this.popState(),"title_value";case 12:return this.begin("acc_title"),15;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),17;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:case 20:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:this.begin("string");break;case 21:return"txt";case 22:return 6;case 23:return 8;case 24:return"value";case 25:return 28}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n\r]+)/i,/^(?:%%[^\n]*)/i,/^(?:[\s]+)/i,/^(?:title\b)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:pie\b)/i,/^(?:showData\b)/i,/^(?::[\s]*[\d]+(?:\.[\d]+)?)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},title:{rules:[11],inclusive:!1},string:{rules:[20,21],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,12,14,16,19,22,23,24,25],inclusive:!0}}},t);function k(){this.yy={}}return x.lexer=v,k.prototype=x,x.Parser=k,new k}();gl.parser=gl;const yl=gl,ml=t=>null!==t.match(/^\s*pie/)||null!==t.match(/^\s*bar/);let bl={},_l=!1;const xl={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().pie,addSection:function(t,e){t=Yt.sanitizeText(t,ar()),void 0===bl[t]&&(bl[t]=e,Nt.debug("Added new section :",t))},getSections:()=>bl,cleanupValue:function(t){return":"===t.substring(0,1)?(t=t.substring(1).trim(),Number(t.trim())):Number(t.trim())},clear:function(){bl={},_l=!1,Dr()},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setShowData:function(t){_l=t},getShowData:function(){return _l},getAccDescription:Fr,setAccDescription:Ir};let vl,kl=ar();const wl=450,El={draw:(t,e,n,r)=>{try{kl=ar(),Nt.debug("Rendering info diagram\n"+t);const n=ar().securityLevel;let y;"sandbox"===n&&(y=(0,o.Ys)("#i"+e));const m="sandbox"===n?(0,o.Ys)(y.nodes()[0].contentDocument.body):(0,o.Ys)("body"),b="sandbox"===n?y.nodes()[0].contentDocument:document;r.db.clear(),r.parser.parse(t),Nt.debug("Parsed info diagram");const _=b.getElementById(e);vl=_.parentElement.offsetWidth,void 0===vl&&(vl=1200),void 0!==kl.useWidth&&(vl=kl.useWidth),void 0!==kl.pie.useWidth&&(vl=kl.pie.useWidth);const x=m.select("#"+e);dr(x,wl,vl,kl.pie.useMaxWidth),_.setAttribute("viewBox","0 0 "+vl+" "+wl);var i=18,a=Math.min(vl,wl)/2-40,s=x.append("g").attr("transform","translate("+vl/2+",225)"),c=r.db.getSections(),l=0;Object.keys(c).forEach((function(t){l+=c[t]}));const v=kl.themeVariables;var h=[v.pie1,v.pie2,v.pie3,v.pie4,v.pie5,v.pie6,v.pie7,v.pie8,v.pie9,v.pie10,v.pie11,v.pie12],u=(0,o.PKp)().range(h),d=Object.entries(c).map((function(t,e){return{order:e,name:t[0],value:t[1]}})),p=(0,o.ve8)().value((function(t){return t.value})).sort((function(t,e){return t.order-e.order}))(d),f=(0,o.Nb1)().innerRadius(0).outerRadius(a);s.selectAll("mySlices").data(p).enter().append("path").attr("d",f).attr("fill",(function(t){return u(t.data.name)})).attr("class","pieCircle"),s.selectAll("mySlices").data(p).enter().append("text").text((function(t){return(t.data.value/l*100).toFixed(0)+"%"})).attr("transform",(function(t){return"translate("+f.centroid(t)+")"})).style("text-anchor","middle").attr("class","slice"),s.append("text").text(r.db.getDiagramTitle()).attr("x",0).attr("y",-200).attr("class","pieTitleText");var g=s.selectAll(".legend").data(u.domain()).enter().append("g").attr("class","legend").attr("transform",(function(t,e){return"translate(216,"+(22*e-22*u.domain().length/2)+")"}));g.append("rect").attr("width",i).attr("height",i).style("fill",u).style("stroke",u),g.data(p).append("text").attr("x",22).attr("y",14).text((function(t){return r.db.getShowData()||kl.showData||kl.pie.showData?t.data.name+" ["+t.data.value+"]":t.data.name}))}catch(y){Nt.error("Error while rendering info diagram"),Nt.error(y)}}};var Cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[1,6],a=[1,7],s=[1,8],o=[5,6,8,14,16,18,19,40,41,42,43,44,45,53,71,72],c=[1,22],l=[2,13],h=[1,26],u=[1,27],d=[1,28],p=[1,29],f=[1,30],g=[1,31],y=[1,24],m=[1,32],b=[1,33],_=[1,36],x=[71,72],v=[5,8,14,16,18,19,40,41,42,43,44,45,53,60,62,71,72],k=[1,56],w=[1,57],E=[1,58],C=[1,59],T=[1,60],S=[1,61],A=[1,62],L=[62,63],B=[1,74],N=[1,70],D=[1,71],O=[1,72],M=[1,73],I=[1,75],F=[1,79],$=[1,80],R=[1,77],Z=[1,78],P=[5,8,14,16,18,19,40,41,42,43,44,45,53,71,72],j={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,NEWLINE:5,RD:6,diagram:7,EOF:8,openDirective:9,typeDirective:10,closeDirective:11,":":12,argDirective:13,acc_title:14,acc_title_value:15,acc_descr:16,acc_descr_value:17,acc_descr_multiline_value:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,requirementDef:23,elementDef:24,relationshipDef:25,requirementType:26,requirementName:27,STRUCT_START:28,requirementBody:29,ID:30,COLONSEP:31,id:32,TEXT:33,text:34,RISK:35,riskLevel:36,VERIFYMTHD:37,verifyType:38,STRUCT_STOP:39,REQUIREMENT:40,FUNCTIONAL_REQUIREMENT:41,INTERFACE_REQUIREMENT:42,PERFORMANCE_REQUIREMENT:43,PHYSICAL_REQUIREMENT:44,DESIGN_CONSTRAINT:45,LOW_RISK:46,MED_RISK:47,HIGH_RISK:48,VERIFY_ANALYSIS:49,VERIFY_DEMONSTRATION:50,VERIFY_INSPECTION:51,VERIFY_TEST:52,ELEMENT:53,elementName:54,elementBody:55,TYPE:56,type:57,DOCREF:58,ref:59,END_ARROW_L:60,relationship:61,LINE:62,END_ARROW_R:63,CONTAINS:64,COPIES:65,DERIVES:66,SATISFIES:67,VERIFIES:68,REFINES:69,TRACES:70,unqString:71,qString:72,$accept:0,$end:1},terminals_:{2:"error",5:"NEWLINE",6:"RD",8:"EOF",12:":",14:"acc_title",15:"acc_title_value",16:"acc_descr",17:"acc_descr_value",18:"acc_descr_multiline_value",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",28:"STRUCT_START",30:"ID",31:"COLONSEP",33:"TEXT",35:"RISK",37:"VERIFYMTHD",39:"STRUCT_STOP",40:"REQUIREMENT",41:"FUNCTIONAL_REQUIREMENT",42:"INTERFACE_REQUIREMENT",43:"PERFORMANCE_REQUIREMENT",44:"PHYSICAL_REQUIREMENT",45:"DESIGN_CONSTRAINT",46:"LOW_RISK",47:"MED_RISK",48:"HIGH_RISK",49:"VERIFY_ANALYSIS",50:"VERIFY_DEMONSTRATION",51:"VERIFY_INSPECTION",52:"VERIFY_TEST",53:"ELEMENT",56:"TYPE",58:"DOCREF",60:"END_ARROW_L",62:"LINE",63:"END_ARROW_R",64:"CONTAINS",65:"COPIES",66:"DERIVES",67:"SATISFIES",68:"VERIFIES",69:"REFINES",70:"TRACES",71:"unqString",72:"qString"},productions_:[0,[3,3],[3,2],[3,4],[4,3],[4,5],[4,2],[4,2],[4,1],[9,1],[10,1],[13,1],[11,1],[7,0],[7,2],[7,2],[7,2],[7,2],[7,2],[23,5],[29,5],[29,5],[29,5],[29,5],[29,2],[29,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[36,1],[36,1],[36,1],[38,1],[38,1],[38,1],[38,1],[24,5],[55,5],[55,5],[55,2],[55,1],[25,5],[25,5],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[27,1],[27,1],[32,1],[32,1],[34,1],[34,1],[54,1],[54,1],[57,1],[57,1],[59,1],[59,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 6:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 7:case 8:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 9:r.parseDirective("%%{","open_directive");break;case 10:r.parseDirective(a[o],"type_directive");break;case 11:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 12:r.parseDirective("}%%","close_directive","pie");break;case 13:this.$=[];break;case 19:r.addRequirement(a[o-3],a[o-4]);break;case 20:r.setNewReqId(a[o-2]);break;case 21:r.setNewReqText(a[o-2]);break;case 22:r.setNewReqRisk(a[o-2]);break;case 23:r.setNewReqVerifyMethod(a[o-2]);break;case 26:this.$=r.RequirementType.REQUIREMENT;break;case 27:this.$=r.RequirementType.FUNCTIONAL_REQUIREMENT;break;case 28:this.$=r.RequirementType.INTERFACE_REQUIREMENT;break;case 29:this.$=r.RequirementType.PERFORMANCE_REQUIREMENT;break;case 30:this.$=r.RequirementType.PHYSICAL_REQUIREMENT;break;case 31:this.$=r.RequirementType.DESIGN_CONSTRAINT;break;case 32:this.$=r.RiskLevel.LOW_RISK;break;case 33:this.$=r.RiskLevel.MED_RISK;break;case 34:this.$=r.RiskLevel.HIGH_RISK;break;case 35:this.$=r.VerifyType.VERIFY_ANALYSIS;break;case 36:this.$=r.VerifyType.VERIFY_DEMONSTRATION;break;case 37:this.$=r.VerifyType.VERIFY_INSPECTION;break;case 38:this.$=r.VerifyType.VERIFY_TEST;break;case 39:r.addElement(a[o-3]);break;case 40:r.setNewElementType(a[o-2]);break;case 41:r.setNewElementDocRef(a[o-2]);break;case 44:r.addRelationship(a[o-2],a[o],a[o-4]);break;case 45:r.addRelationship(a[o-2],a[o-4],a[o]);break;case 46:this.$=r.Relationships.CONTAINS;break;case 47:this.$=r.Relationships.COPIES;break;case 48:this.$=r.Relationships.DERIVES;break;case 49:this.$=r.Relationships.SATISFIES;break;case 50:this.$=r.Relationships.VERIFIES;break;case 51:this.$=r.Relationships.REFINES;break;case 52:this.$=r.Relationships.TRACES}},table:[{3:1,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[3]},{3:10,4:2,5:[1,9],6:n,9:4,14:r,16:i,18:a,19:s},{5:[1,11]},{10:12,20:[1,13]},{15:[1,14]},{17:[1,15]},e(o,[2,8]),{20:[2,9]},{3:16,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[2,2]},{4:21,5:c,7:17,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{11:34,12:[1,35],22:_},e([12,22],[2,10]),e(o,[2,6]),e(o,[2,7]),{1:[2,1]},{8:[1,37]},{4:21,5:c,7:38,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:39,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:40,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:41,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:42,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{27:43,71:[1,44],72:[1,45]},{54:46,71:[1,47],72:[1,48]},{60:[1,49],62:[1,50]},e(x,[2,26]),e(x,[2,27]),e(x,[2,28]),e(x,[2,29]),e(x,[2,30]),e(x,[2,31]),e(v,[2,55]),e(v,[2,56]),e(o,[2,4]),{13:51,21:[1,52]},e(o,[2,12]),{1:[2,3]},{8:[2,14]},{8:[2,15]},{8:[2,16]},{8:[2,17]},{8:[2,18]},{28:[1,53]},{28:[2,53]},{28:[2,54]},{28:[1,54]},{28:[2,59]},{28:[2,60]},{61:55,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{61:63,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{11:64,22:_},{22:[2,11]},{5:[1,65]},{5:[1,66]},{62:[1,67]},e(L,[2,46]),e(L,[2,47]),e(L,[2,48]),e(L,[2,49]),e(L,[2,50]),e(L,[2,51]),e(L,[2,52]),{63:[1,68]},e(o,[2,5]),{5:B,29:69,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:76,56:R,58:Z},{32:81,71:m,72:b},{32:82,71:m,72:b},e(P,[2,19]),{31:[1,83]},{31:[1,84]},{31:[1,85]},{31:[1,86]},{5:B,29:87,30:N,33:D,35:O,37:M,39:I},e(P,[2,25]),e(P,[2,39]),{31:[1,88]},{31:[1,89]},{5:F,39:$,55:90,56:R,58:Z},e(P,[2,43]),e(P,[2,44]),e(P,[2,45]),{32:91,71:m,72:b},{34:92,71:[1,93],72:[1,94]},{36:95,46:[1,96],47:[1,97],48:[1,98]},{38:99,49:[1,100],50:[1,101],51:[1,102],52:[1,103]},e(P,[2,24]),{57:104,71:[1,105],72:[1,106]},{59:107,71:[1,108],72:[1,109]},e(P,[2,42]),{5:[1,110]},{5:[1,111]},{5:[2,57]},{5:[2,58]},{5:[1,112]},{5:[2,32]},{5:[2,33]},{5:[2,34]},{5:[1,113]},{5:[2,35]},{5:[2,36]},{5:[2,37]},{5:[2,38]},{5:[1,114]},{5:[2,61]},{5:[2,62]},{5:[1,115]},{5:[2,63]},{5:[2,64]},{5:B,29:116,30:N,33:D,35:O,37:M,39:I},{5:B,29:117,30:N,33:D,35:O,37:M,39:I},{5:B,29:118,30:N,33:D,35:O,37:M,39:I},{5:B,29:119,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:120,56:R,58:Z},{5:F,39:$,55:121,56:R,58:Z},e(P,[2,20]),e(P,[2,21]),e(P,[2,22]),e(P,[2,23]),e(P,[2,40]),e(P,[2,41])],defaultActions:{8:[2,9],10:[2,2],16:[2,1],37:[2,3],38:[2,14],39:[2,15],40:[2,16],41:[2,17],42:[2,18],44:[2,53],45:[2,54],47:[2,59],48:[2,60],52:[2,11],93:[2,57],94:[2,58],96:[2,32],97:[2,33],98:[2,34],100:[2,35],101:[2,36],102:[2,37],103:[2,38],105:[2,61],106:[2,62],108:[2,63],109:[2,64]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},Y=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return this.begin("type_directive"),20;case 2:return this.popState(),this.begin("arg_directive"),12;case 3:return this.popState(),this.popState(),22;case 4:return 21;case 5:return"title";case 6:return this.begin("acc_title"),14;case 7:return this.popState(),"acc_title_value";case 8:return this.begin("acc_descr"),16;case 9:return this.popState(),"acc_descr_value";case 10:this.begin("acc_descr_multiline");break;case 11:case 53:this.popState();break;case 12:return"acc_descr_multiline_value";case 13:return 5;case 14:case 15:case 16:break;case 17:return 8;case 18:return 6;case 19:return 28;case 20:return 39;case 21:return 31;case 22:return 30;case 23:return 33;case 24:return 35;case 25:return 37;case 26:return 40;case 27:return 41;case 28:return 42;case 29:return 43;case 30:return 44;case 31:return 45;case 32:return 46;case 33:return 47;case 34:return 48;case 35:return 49;case 36:return 50;case 37:return 51;case 38:return 52;case 39:return 53;case 40:return 64;case 41:return 65;case 42:return 66;case 43:return 67;case 44:return 68;case 45:return 69;case 46:return 70;case 47:return 56;case 48:return 58;case 49:return 60;case 50:return 63;case 51:return 62;case 52:this.begin("string");break;case 54:return"qString";case 55:return e.yytext=e.yytext.trim(),71}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:$)/i,/^(?:requirementDiagram\b)/i,/^(?:\{)/i,/^(?:\})/i,/^(?::)/i,/^(?:id\b)/i,/^(?:text\b)/i,/^(?:risk\b)/i,/^(?:verifyMethod\b)/i,/^(?:requirement\b)/i,/^(?:functionalRequirement\b)/i,/^(?:interfaceRequirement\b)/i,/^(?:performanceRequirement\b)/i,/^(?:physicalRequirement\b)/i,/^(?:designConstraint\b)/i,/^(?:low\b)/i,/^(?:medium\b)/i,/^(?:high\b)/i,/^(?:analysis\b)/i,/^(?:demonstration\b)/i,/^(?:inspection\b)/i,/^(?:test\b)/i,/^(?:element\b)/i,/^(?:contains\b)/i,/^(?:copies\b)/i,/^(?:derives\b)/i,/^(?:satisfies\b)/i,/^(?:verifies\b)/i,/^(?:refines\b)/i,/^(?:traces\b)/i,/^(?:type\b)/i,/^(?:docref\b)/i,/^(?:<-)/i,/^(?:->)/i,/^(?:-)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[\w][^\r\n\{\<\>\-\=]*)/i],conditions:{acc_descr_multiline:{rules:[11,12],inclusive:!1},acc_descr:{rules:[9],inclusive:!1},acc_title:{rules:[7],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},unqString:{rules:[],inclusive:!1},token:{rules:[],inclusive:!1},string:{rules:[53,54],inclusive:!1},INITIAL:{rules:[0,5,6,8,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,55],inclusive:!0}}},t);function z(){this.yy={}}return j.lexer=Y,z.prototype=j,j.Parser=z,new z}();Cl.parser=Cl;const Tl=Cl,Sl=t=>null!==t.match(/^\s*requirement(Diagram)?/);let Al=[],Ll={},Bl={},Nl={},Dl={};const Ol={RequirementType:{REQUIREMENT:"Requirement",FUNCTIONAL_REQUIREMENT:"Functional Requirement",INTERFACE_REQUIREMENT:"Interface Requirement",PERFORMANCE_REQUIREMENT:"Performance Requirement",PHYSICAL_REQUIREMENT:"Physical Requirement",DESIGN_CONSTRAINT:"Design Constraint"},RiskLevel:{LOW_RISK:"Low",MED_RISK:"Medium",HIGH_RISK:"High"},VerifyType:{VERIFY_ANALYSIS:"Analysis",VERIFY_DEMONSTRATION:"Demonstration",VERIFY_INSPECTION:"Inspection",VERIFY_TEST:"Test"},Relationships:{CONTAINS:"contains",COPIES:"copies",DERIVES:"derives",SATISFIES:"satisfies",VERIFIES:"verifies",REFINES:"refines",TRACES:"traces"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().req,addRequirement:(t,e)=>(void 0===Bl[t]&&(Bl[t]={name:t,type:e,id:Ll.id,text:Ll.text,risk:Ll.risk,verifyMethod:Ll.verifyMethod}),Ll={},Bl[t]),getRequirements:()=>Bl,setNewReqId:t=>{void 0!==Ll&&(Ll.id=t)},setNewReqText:t=>{void 0!==Ll&&(Ll.text=t)},setNewReqRisk:t=>{void 0!==Ll&&(Ll.risk=t)},setNewReqVerifyMethod:t=>{void 0!==Ll&&(Ll.verifyMethod=t)},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addElement:t=>(void 0===Dl[t]&&(Dl[t]={name:t,type:Nl.type,docRef:Nl.docRef},Nt.info("Added new requirement: ",t)),Nl={},Dl[t]),getElements:()=>Dl,setNewElementType:t=>{void 0!==Nl&&(Nl.type=t)},setNewElementDocRef:t=>{void 0!==Nl&&(Nl.docRef=t)},addRelationship:(t,e,n)=>{Al.push({type:t,src:e,dst:n})},getRelationships:()=>Al,clear:()=>{Al=[],Ll={},Bl={},Nl={},Dl={},Dr()}},Ml={CONTAINS:"contains",ARROW:"arrow"},Il=Ml,Fl=(t,e)=>{let n=t.append("defs").append("marker").attr("id",Ml.CONTAINS+"_line_ending").attr("refX",0).attr("refY",e.line_height/2).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("g");n.append("circle").attr("cx",e.line_height/2).attr("cy",e.line_height/2).attr("r",e.line_height/2).attr("fill","none"),n.append("line").attr("x1",0).attr("x2",e.line_height).attr("y1",e.line_height/2).attr("y2",e.line_height/2).attr("stroke-width",1),n.append("line").attr("y1",0).attr("y2",e.line_height).attr("x1",e.line_height/2).attr("x2",e.line_height/2).attr("stroke-width",1),t.append("defs").append("marker").attr("id",Ml.ARROW+"_line_ending").attr("refX",e.line_height).attr("refY",.5*e.line_height).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("path").attr("d",`M0,0\n      L${e.line_height},${e.line_height/2}\n      M${e.line_height},${e.line_height/2}\n      L0,${e.line_height}`).attr("stroke-width",1)};let $l={},Rl=0;const Zl=(t,e)=>t.insert("rect","#"+e).attr("class","req reqBox").attr("x",0).attr("y",0).attr("width",$l.rect_min_width+"px").attr("height",$l.rect_min_height+"px"),Pl=(t,e,n)=>{let r=$l.rect_min_width/2,i=t.append("text").attr("class","req reqLabel reqTitle").attr("id",e).attr("x",r).attr("y",$l.rect_padding).attr("dominant-baseline","hanging"),a=0;n.forEach((t=>{0==a?i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",0).text(t):i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",.75*$l.line_height).text(t),a++}));let s=1.5*$l.rect_padding+a*$l.line_height*.75;return t.append("line").attr("class","req-title-line").attr("x1","0").attr("x2",$l.rect_min_width).attr("y1",s).attr("y2",s),{titleNode:i,y:s}},jl=(t,e,n,r)=>{let i=t.append("text").attr("class","req reqLabel").attr("id",e).attr("x",$l.rect_padding).attr("y",r).attr("dominant-baseline","hanging"),a=0;let s=[];return n.forEach((t=>{let e=t.length;for(;e>30&&a<3;){let n=t.substring(0,30);e=(t=t.substring(30,t.length)).length,s[s.length]=n,a++}if(3==a){let t=s[s.length-1];s[s.length-1]=t.substring(0,t.length-4)+"..."}else s[s.length]=t;a=0})),s.forEach((t=>{i.append("tspan").attr("x",$l.rect_padding).attr("dy",$l.line_height).text(t)})),i},Yl=function(t,e,n,r,i){const a=n.edge(zl(e.src),zl(e.dst)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})),c=t.insert("path","#"+r).attr("class","er relationshipLine").attr("d",s(a.points)).attr("fill","none");e.type==i.db.Relationships.CONTAINS?c.attr("marker-start","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+e.type+"_line_ending)"):(c.attr("stroke-dasharray","10,7"),c.attr("marker-end","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+Il.ARROW+"_line_ending)")),((t,e,n,r)=>{const i=e.node().getTotalLength(),a=e.node().getPointAtLength(.5*i),s="rel"+Rl;Rl++;const o=t.append("text").attr("class","req relationshipLabel").attr("id",s).attr("x",a.x).attr("y",a.y).attr("text-anchor","middle").attr("dominant-baseline","middle").text(r).node().getBBox();t.insert("rect","#"+s).attr("class","req reqLabelBox").attr("x",a.x-o.width/2).attr("y",a.y-o.height/2).attr("width",o.width).attr("height",o.height).attr("fill","white").attr("fill-opacity","85%")})(t,c,0,`<<${e.type}>>`)},zl=t=>t.replace(/\s/g,"").replace(/\./g,"_"),Ul={draw:(t,e,n,r)=>{$l=ar().requirement,r.db.clear(),r.parser.parse(t);const i=$l.securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);Fl(s,$l);const c=new ht.k({multigraph:!1,compound:!1,directed:!0}).setGraph({rankdir:$l.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));let l=r.db.getRequirements(),h=r.db.getElements(),u=r.db.getRelationships();var d,p,f;d=l,p=c,f=s,Object.keys(d).forEach((t=>{let e=d[t];t=zl(t),Nt.info("Added new requirement: ",t);const n=f.append("g").attr("id",t),r=Zl(n,"req-"+t);let i=Pl(n,t+"_title",[`<<${e.type}>>`,`${e.name}`]);jl(n,t+"_body",[`Id: ${e.id}`,`Text: ${e.text}`,`Risk: ${e.risk}`,`Verification: ${e.verifyMethod}`],i.y);const a=r.node().getBBox();p.setNode(t,{width:a.width,height:a.height,shape:"rect",id:t})})),((t,e,n)=>{Object.keys(t).forEach((r=>{let i=t[r];const a=zl(r),s=n.append("g").attr("id",a),o="element-"+a,c=Zl(s,o);let l=Pl(s,o+"_title",["<<Element>>",`${r}`]);jl(s,o+"_body",[`Type: ${i.type||"Not Specified"}`,`Doc Ref: ${i.docRef||"None"}`],l.y);const h=c.node().getBBox();e.setNode(a,{width:h.width,height:h.height,shape:"rect",id:a})}))})(h,c,s),((t,e)=>{t.forEach((function(t){let n=zl(t.src),r=zl(t.dst);e.setEdge(n,r,{relationship:t})}))})(u,c),(0,lt.bK)(c),function(t,e){e.nodes().forEach((function(n){void 0!==n&&void 0!==e.node(n)&&(t.select("#"+n),t.select("#"+n).attr("transform","translate("+(e.node(n).x-e.node(n).width/2)+","+(e.node(n).y-e.node(n).height/2)+" )"))}))}(s,c),u.forEach((function(t){Yl(s,t,c,e,r)}));const g=$l.rect_padding,y=s.node().getBBox(),m=y.width+2*g,b=y.height+2*g;dr(s,b,m,$l.useMaxWidth),s.attr("viewBox",`${y.x-g} ${y.y-g} ${m} ${b}`)}};var Wl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,19],h=[1,21],u=[1,22],d=[1,23],p=[1,29],f=[1,30],g=[1,31],y=[1,32],m=[1,33],b=[1,34],_=[1,35],x=[1,36],v=[1,37],k=[1,38],w=[1,39],E=[1,40],C=[1,42],T=[1,43],S=[1,45],A=[1,46],L=[1,47],B=[1,48],N=[1,49],D=[1,50],O=[1,53],M=[1,4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],I=[4,5,21,54,56],F=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],$=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,53,54,56,57,62,63,64,65,73,83],R=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,52,54,56,57,62,63,64,65,73,83],Z=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,54,56,57,62,63,64,65,73,83],P=[71,72,73],j=[1,125],Y=[1,4,5,7,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],z={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NEWLINE:5,directive:6,SD:7,document:8,line:9,statement:10,box_section:11,box_line:12,participant_statement:13,openDirective:14,typeDirective:15,closeDirective:16,":":17,argDirective:18,box:19,restOfLine:20,end:21,signal:22,autonumber:23,NUM:24,off:25,activate:26,actor:27,deactivate:28,note_statement:29,links_statement:30,link_statement:31,properties_statement:32,details_statement:33,title:34,legacy_title:35,acc_title:36,acc_title_value:37,acc_descr:38,acc_descr_value:39,acc_descr_multiline_value:40,loop:41,rect:42,opt:43,alt:44,else_sections:45,par:46,par_sections:47,critical:48,option_sections:49,break:50,option:51,and:52,else:53,participant:54,AS:55,participant_actor:56,note:57,placement:58,text2:59,over:60,actor_pair:61,links:62,link:63,properties:64,details:65,spaceList:66,",":67,left_of:68,right_of:69,signaltype:70,"+":71,"-":72,ACTOR:73,SOLID_OPEN_ARROW:74,DOTTED_OPEN_ARROW:75,SOLID_ARROW:76,DOTTED_ARROW:77,SOLID_CROSS:78,DOTTED_CROSS:79,SOLID_POINT:80,DOTTED_POINT:81,TXT:82,open_directive:83,type_directive:84,arg_directive:85,close_directive:86,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NEWLINE",7:"SD",17:":",19:"box",20:"restOfLine",21:"end",23:"autonumber",24:"NUM",25:"off",26:"activate",28:"deactivate",34:"title",35:"legacy_title",36:"acc_title",37:"acc_title_value",38:"acc_descr",39:"acc_descr_value",40:"acc_descr_multiline_value",41:"loop",42:"rect",43:"opt",44:"alt",46:"par",48:"critical",50:"break",51:"option",52:"and",53:"else",54:"participant",55:"AS",56:"participant_actor",57:"note",60:"over",62:"links",63:"link",64:"properties",65:"details",67:",",68:"left_of",69:"right_of",71:"+",72:"-",73:"ACTOR",74:"SOLID_OPEN_ARROW",75:"DOTTED_OPEN_ARROW",76:"SOLID_ARROW",77:"DOTTED_ARROW",78:"SOLID_CROSS",79:"DOTTED_CROSS",80:"SOLID_POINT",81:"DOTTED_POINT",82:"TXT",83:"open_directive",84:"type_directive",85:"arg_directive",86:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[11,0],[11,2],[12,2],[12,1],[12,1],[6,4],[6,6],[10,1],[10,4],[10,2],[10,4],[10,3],[10,3],[10,2],[10,3],[10,3],[10,2],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,2],[10,2],[10,1],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,1],[49,1],[49,4],[47,1],[47,4],[45,1],[45,4],[13,5],[13,3],[13,5],[13,3],[29,4],[29,4],[30,3],[31,3],[32,3],[33,3],[66,2],[66,1],[61,3],[61,1],[58,1],[58,1],[22,5],[22,5],[22,4],[27,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[59,1],[14,1],[15,1],[18,1],[16,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.apply(a[o]),a[o];case 5:case 10:case 9:case 14:this.$=[];break;case 6:case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 7:case 8:case 12:case 13:case 63:this.$=a[o];break;case 18:a[o-1].unshift({type:"boxStart",boxData:r.parseBoxData(a[o-2])}),a[o-1].push({type:"boxEnd",boxText:a[o-2]}),this.$=a[o-1];break;case 20:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-2]),sequenceIndexStep:Number(a[o-1]),sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 21:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-1]),sequenceIndexStep:1,sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 22:this.$={type:"sequenceIndex",sequenceVisible:!1,signalType:r.LINETYPE.AUTONUMBER};break;case 23:this.$={type:"sequenceIndex",sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 24:this.$={type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]};break;case 25:this.$={type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-1]};break;case 31:r.setDiagramTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 32:r.setDiagramTitle(a[o].substring(7)),this.$=a[o].substring(7);break;case 33:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 34:case 35:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 36:a[o-1].unshift({type:"loopStart",loopText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.LOOP_START}),a[o-1].push({type:"loopEnd",loopText:a[o-2],signalType:r.LINETYPE.LOOP_END}),this.$=a[o-1];break;case 37:a[o-1].unshift({type:"rectStart",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_START}),a[o-1].push({type:"rectEnd",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_END}),this.$=a[o-1];break;case 38:a[o-1].unshift({type:"optStart",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_START}),a[o-1].push({type:"optEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_END}),this.$=a[o-1];break;case 39:a[o-1].unshift({type:"altStart",altText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.ALT_START}),a[o-1].push({type:"altEnd",signalType:r.LINETYPE.ALT_END}),this.$=a[o-1];break;case 40:a[o-1].unshift({type:"parStart",parText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.PAR_START}),a[o-1].push({type:"parEnd",signalType:r.LINETYPE.PAR_END}),this.$=a[o-1];break;case 41:a[o-1].unshift({type:"criticalStart",criticalText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.CRITICAL_START}),a[o-1].push({type:"criticalEnd",signalType:r.LINETYPE.CRITICAL_END}),this.$=a[o-1];break;case 42:a[o-1].unshift({type:"breakStart",breakText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_START}),a[o-1].push({type:"breakEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_END}),this.$=a[o-1];break;case 45:this.$=a[o-3].concat([{type:"option",optionText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.CRITICAL_OPTION},a[o]]);break;case 47:this.$=a[o-3].concat([{type:"and",parText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.PAR_AND},a[o]]);break;case 49:this.$=a[o-3].concat([{type:"else",altText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.ALT_ELSE},a[o]]);break;case 50:a[o-3].type="addParticipant",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 51:a[o-1].type="addParticipant",this.$=a[o-1];break;case 52:a[o-3].type="addActor",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 53:a[o-1].type="addActor",this.$=a[o-1];break;case 54:this.$=[a[o-1],{type:"addNote",placement:a[o-2],actor:a[o-1].actor,text:a[o]}];break;case 55:a[o-2]=[].concat(a[o-1],a[o-1]).slice(0,2),a[o-2][0]=a[o-2][0].actor,a[o-2][1]=a[o-2][1].actor,this.$=[a[o-1],{type:"addNote",placement:r.PLACEMENT.OVER,actor:a[o-2].slice(0,2),text:a[o]}];break;case 56:this.$=[a[o-1],{type:"addLinks",actor:a[o-1].actor,text:a[o]}];break;case 57:this.$=[a[o-1],{type:"addALink",actor:a[o-1].actor,text:a[o]}];break;case 58:this.$=[a[o-1],{type:"addProperties",actor:a[o-1].actor,text:a[o]}];break;case 59:this.$=[a[o-1],{type:"addDetails",actor:a[o-1].actor,text:a[o]}];break;case 62:this.$=[a[o-2],a[o]];break;case 64:this.$=r.PLACEMENT.LEFTOF;break;case 65:this.$=r.PLACEMENT.RIGHTOF;break;case 66:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]}];break;case 67:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-4]}];break;case 68:this.$=[a[o-3],a[o-1],{type:"addMessage",from:a[o-3].actor,to:a[o-1].actor,signalType:a[o-2],msg:a[o]}];break;case 69:this.$={type:"addParticipant",actor:a[o]};break;case 70:this.$=r.LINETYPE.SOLID_OPEN;break;case 71:this.$=r.LINETYPE.DOTTED_OPEN;break;case 72:this.$=r.LINETYPE.SOLID;break;case 73:this.$=r.LINETYPE.DOTTED;break;case 74:this.$=r.LINETYPE.SOLID_CROSS;break;case 75:this.$=r.LINETYPE.DOTTED_CROSS;break;case 76:this.$=r.LINETYPE.SOLID_POINT;break;case 77:this.$=r.LINETYPE.DOTTED_POINT;break;case 78:this.$=r.parseMessage(a[o].trim().substring(1));break;case 79:r.parseDirective("%%{","open_directive");break;case 80:r.parseDirective(a[o],"type_directive");break;case 81:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 82:r.parseDirective("}%%","close_directive","sequence")}},table:[{3:1,4:n,5:r,6:4,7:i,14:6,83:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,14:6,83:a},{3:9,4:n,5:r,6:4,7:i,14:6,83:a},{3:10,4:n,5:r,6:4,7:i,14:6,83:a},e([1,4,5,19,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],s,{8:11}),{15:12,84:[1,13]},{84:[2,79]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{16:51,17:[1,52],86:O},e([17,86],[2,80]),e(M,[2,6]),{6:41,10:54,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},e(M,[2,8]),e(M,[2,9]),e(M,[2,17]),{20:[1,55]},{5:[1,56]},{5:[1,59],24:[1,57],25:[1,58]},{27:60,73:D},{27:61,73:D},{5:[1,62]},{5:[1,63]},{5:[1,64]},{5:[1,65]},{5:[1,66]},e(M,[2,31]),e(M,[2,32]),{37:[1,67]},{39:[1,68]},e(M,[2,35]),{20:[1,69]},{20:[1,70]},{20:[1,71]},{20:[1,72]},{20:[1,73]},{20:[1,74]},{20:[1,75]},e(M,[2,43]),{27:76,73:D},{27:77,73:D},{70:78,74:[1,79],75:[1,80],76:[1,81],77:[1,82],78:[1,83],79:[1,84],80:[1,85],81:[1,86]},{58:87,60:[1,88],68:[1,89],69:[1,90]},{27:91,73:D},{27:92,73:D},{27:93,73:D},{27:94,73:D},e([5,55,67,74,75,76,77,78,79,80,81,82],[2,69]),{5:[1,95]},{18:96,85:[1,97]},{5:[2,82]},e(M,[2,7]),e(I,[2,10],{11:98}),e(M,[2,19]),{5:[1,100],24:[1,99]},{5:[1,101]},e(M,[2,23]),{5:[1,102]},{5:[1,103]},e(M,[2,26]),e(M,[2,27]),e(M,[2,28]),e(M,[2,29]),e(M,[2,30]),e(M,[2,33]),e(M,[2,34]),e(F,s,{8:104}),e(F,s,{8:105}),e(F,s,{8:106}),e($,s,{45:107,8:108}),e(R,s,{47:109,8:110}),e(Z,s,{49:111,8:112}),e(F,s,{8:113}),{5:[1,115],55:[1,114]},{5:[1,117],55:[1,116]},{27:120,71:[1,118],72:[1,119],73:D},e(P,[2,70]),e(P,[2,71]),e(P,[2,72]),e(P,[2,73]),e(P,[2,74]),e(P,[2,75]),e(P,[2,76]),e(P,[2,77]),{27:121,73:D},{27:123,61:122,73:D},{73:[2,64]},{73:[2,65]},{59:124,82:j},{59:126,82:j},{59:127,82:j},{59:128,82:j},e(Y,[2,15]),{16:129,86:O},{86:[2,81]},{4:[1,132],5:[1,134],12:131,13:133,21:[1,130],54:C,56:T},{5:[1,135]},e(M,[2,21]),e(M,[2,22]),e(M,[2,24]),e(M,[2,25]),{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,136],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,137],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,138],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,139]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,48],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,53:[1,140],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,141]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,46],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,52:[1,142],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,143]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,44],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,51:[1,144],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,145],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{20:[1,146]},e(M,[2,51]),{20:[1,147]},e(M,[2,53]),{27:148,73:D},{27:149,73:D},{59:150,82:j},{59:151,82:j},{59:152,82:j},{67:[1,153],82:[2,63]},{5:[2,56]},{5:[2,78]},{5:[2,57]},{5:[2,58]},{5:[2,59]},{5:[1,154]},e(M,[2,18]),e(I,[2,11]),{13:155,54:C,56:T},e(I,[2,13]),e(I,[2,14]),e(M,[2,20]),e(M,[2,36]),e(M,[2,37]),e(M,[2,38]),e(M,[2,39]),{20:[1,156]},e(M,[2,40]),{20:[1,157]},e(M,[2,41]),{20:[1,158]},e(M,[2,42]),{5:[1,159]},{5:[1,160]},{59:161,82:j},{59:162,82:j},{5:[2,68]},{5:[2,54]},{5:[2,55]},{27:163,73:D},e(Y,[2,16]),e(I,[2,12]),e($,s,{8:108,45:164}),e(R,s,{8:110,47:165}),e(Z,s,{8:112,49:166}),e(M,[2,50]),e(M,[2,52]),{5:[2,66]},{5:[2,67]},{82:[2,62]},{21:[2,49]},{21:[2,47]},{21:[2,45]}],defaultActions:{7:[2,79],8:[2,1],9:[2,2],10:[2,3],53:[2,82],89:[2,64],90:[2,65],97:[2,81],124:[2,56],125:[2,78],126:[2,57],127:[2,58],128:[2,59],150:[2,68],151:[2,54],152:[2,55],161:[2,66],162:[2,67],163:[2,62],164:[2,49],165:[2,47],166:[2,45]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},U=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),83;case 1:return this.begin("type_directive"),84;case 2:return this.popState(),this.begin("arg_directive"),17;case 3:return this.popState(),this.popState(),86;case 4:return 85;case 5:case 53:case 66:return 5;case 6:case 7:case 8:case 9:case 10:break;case 11:return 24;case 12:return this.begin("LINE"),19;case 13:return this.begin("ID"),54;case 14:return this.begin("ID"),56;case 15:return e.yytext=e.yytext.trim(),this.begin("ALIAS"),73;case 16:return this.popState(),this.popState(),this.begin("LINE"),55;case 17:return this.popState(),this.popState(),5;case 18:return this.begin("LINE"),41;case 19:return this.begin("LINE"),42;case 20:return this.begin("LINE"),43;case 21:return this.begin("LINE"),44;case 22:return this.begin("LINE"),53;case 23:return this.begin("LINE"),46;case 24:return this.begin("LINE"),52;case 25:return this.begin("LINE"),48;case 26:return this.begin("LINE"),51;case 27:return this.begin("LINE"),50;case 28:return this.popState(),20;case 29:return 21;case 30:return 68;case 31:return 69;case 32:return 62;case 33:return 63;case 34:return 64;case 35:return 65;case 36:return 60;case 37:return 57;case 38:return this.begin("ID"),26;case 39:return this.begin("ID"),28;case 40:return 34;case 41:return 35;case 42:return this.begin("acc_title"),36;case 43:return this.popState(),"acc_title_value";case 44:return this.begin("acc_descr"),38;case 45:return this.popState(),"acc_descr_value";case 46:this.begin("acc_descr_multiline");break;case 47:this.popState();break;case 48:return"acc_descr_multiline_value";case 49:return 7;case 50:return 23;case 51:return 25;case 52:return 67;case 54:return e.yytext=e.yytext.trim(),73;case 55:return 76;case 56:return 77;case 57:return 74;case 58:return 75;case 59:return 78;case 60:return 79;case 61:return 80;case 62:return 81;case 63:return 82;case 64:return 71;case 65:return 72;case 67:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[0-9]+(?=[ \n]+))/i,/^(?:box\b)/i,/^(?:participant\b)/i,/^(?:actor\b)/i,/^(?:[^\->:\n,;]+?([\-]*[^\->:\n,;]+?)*?(?=((?!\n)\s)+as(?!\n)\s|[#\n;]|$))/i,/^(?:as\b)/i,/^(?:(?:))/i,/^(?:loop\b)/i,/^(?:rect\b)/i,/^(?:opt\b)/i,/^(?:alt\b)/i,/^(?:else\b)/i,/^(?:par\b)/i,/^(?:and\b)/i,/^(?:critical\b)/i,/^(?:option\b)/i,/^(?:break\b)/i,/^(?:(?:[:]?(?:no)?wrap)?[^#\n;]*)/i,/^(?:end\b)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:links\b)/i,/^(?:link\b)/i,/^(?:properties\b)/i,/^(?:details\b)/i,/^(?:over\b)/i,/^(?:note\b)/i,/^(?:activate\b)/i,/^(?:deactivate\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:title:\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:sequenceDiagram\b)/i,/^(?:autonumber\b)/i,/^(?:off\b)/i,/^(?:,)/i,/^(?:;)/i,/^(?:[^\+\->:\n,;]+((?!(-x|--x|-\)|--\)))[\-]*[^\+\->:\n,;]+)*)/i,/^(?:->>)/i,/^(?:-->>)/i,/^(?:->)/i,/^(?:-->)/i,/^(?:-[x])/i,/^(?:--[x])/i,/^(?:-[\)])/i,/^(?:--[\)])/i,/^(?::(?:(?:no)?wrap)?[^#\n;]+)/i,/^(?:\+)/i,/^(?:-)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[47,48],inclusive:!1},acc_descr:{rules:[45],inclusive:!1},acc_title:{rules:[43],inclusive:!1},open_directive:{rules:[1,8],inclusive:!1},type_directive:{rules:[2,3,8],inclusive:!1},arg_directive:{rules:[3,4,8],inclusive:!1},ID:{rules:[7,8,15],inclusive:!1},ALIAS:{rules:[7,8,16,17],inclusive:!1},LINE:{rules:[7,8,28],inclusive:!1},INITIAL:{rules:[0,5,6,8,9,10,11,12,13,14,18,19,20,21,22,23,24,25,26,27,29,30,31,32,33,34,35,36,37,38,39,40,41,42,44,46,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],inclusive:!0}}},t);function W(){this.yy={}}return z.lexer=U,W.prototype=z,z.Parser=W,new W}();Wl.parser=Wl;const ql=Wl,Hl=t=>null!==t.match(/^\s*sequenceDiagram/);let Vl,Gl,Xl,Kl={},Ql=[],Jl=[],th=!1;const eh=function(t,e,n,r){let i=Xl;const a=Kl[t];if(a){if(Xl&&a.box&&Xl!==a.box)throw new Error("A same participant should only be defined in one Box: "+a.name+" can't be in '"+a.box.name+"' and in '"+Xl.name+"' at the same time.");if(i=a.box?a.box:Xl,a.box=i,a&&e===a.name&&null==n)return}null!=n&&null!=n.text||(n={text:e,wrap:null,type:r}),null!=r&&null!=n.text||(n={text:e,wrap:null,type:r}),Kl[t]={box:i,name:e,description:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,prevActor:Vl,links:{},properties:{},actorCnt:null,rectData:null,type:r||"participant"},Vl&&Kl[Vl]&&(Kl[Vl].nextActor=t),Xl&&Xl.actorKeys.push(t),Vl=t},nh=function(t,e,n={text:void 0,wrap:void 0},r){if(r===ah.ACTIVE_END){const e=(t=>{let e,n=0;for(e=0;e<Jl.length;e++)Jl[e].type===ah.ACTIVE_START&&Jl[e].from.actor===t&&n++,Jl[e].type===ah.ACTIVE_END&&Jl[e].from.actor===t&&n--;return n})(t.actor);if(e<1){let e=new Error("Trying to inactivate an inactive participant ("+t.actor+")");throw e.hash={text:"->>-",token:"->>-",line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["'ACTIVE_PARTICIPANT'"]},e}}return Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:r}),!0},rh=function(t){return Kl[t]},ih=()=>void 0!==Gl?Gl:ar().sequence.wrap,ah={SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25,AUTONUMBER:26,CRITICAL_START:27,CRITICAL_OPTION:28,CRITICAL_END:29,BREAK_START:30,BREAK_END:31},sh=function(t,e,n){n.text,void 0===n.wrap&&ih()||n.wrap;const r=[].concat(t,t);Jl.push({from:r[0],to:r[1],message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:ah.NOTE,placement:e})},oh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());t=t.replace(/&amp;/g,"&"),t=t.replace(/&equals;/g,"=");ch(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor link text",r)}};function ch(t,e){if(null==t.links)t.links=e;else for(let n in e)t.links[n]=e[n]}const lh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());hh(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor properties text",r)}};function hh(t,e){if(null==t.properties)t.properties=e;else for(let n in e)t.properties[n]=e[n]}const uh=function(t,e){const n=rh(t),r=document.getElementById(e.text);try{const t=r.innerHTML,e=JSON.parse(t);e.properties&&hh(n,e.properties),e.links&&ch(n,e.links)}catch(i){Nt.error("error while parsing actor details text",i)}},dh=function(t){if(Array.isArray(t))t.forEach((function(t){dh(t)}));else switch(t.type){case"sequenceIndex":Jl.push({from:void 0,to:void 0,message:{start:t.sequenceIndex,step:t.sequenceIndexStep,visible:t.sequenceVisible},wrap:!1,type:t.signalType});break;case"addParticipant":eh(t.actor,t.actor,t.description,"participant");break;case"addActor":eh(t.actor,t.actor,t.description,"actor");break;case"activeStart":case"activeEnd":nh(t.actor,void 0,void 0,t.signalType);break;case"addNote":sh(t.actor,t.placement,t.text);break;case"addLinks":oh(t.actor,t.text);break;case"addALink":!function(t,e){const n=rh(t);try{const t={};let s=Ft(e.text,ar());var r=s.indexOf("@");s=s.replace(/&amp;/g,"&"),s=s.replace(/&equals;/g,"=");var i=s.slice(0,r-1).trim(),a=s.slice(r+1).trim();t[i]=a,ch(n,t)}catch(s){Nt.error("error while parsing actor link text",s)}}(t.actor,t.text);break;case"addProperties":lh(t.actor,t.text);break;case"addDetails":uh(t.actor,t.text);break;case"addMessage":nh(t.from,t.to,t.msg,t.signalType);break;case"boxStart":e=t.boxData,Ql.push({name:e.text,wrap:void 0===e.wrap&&ih()||!!e.wrap,fill:e.color,actorKeys:[]}),Xl=Ql.slice(-1)[0];break;case"boxEnd":Xl=void 0;break;case"loopStart":nh(void 0,void 0,t.loopText,t.signalType);break;case"loopEnd":case"rectEnd":case"optEnd":case"altEnd":case"parEnd":case"criticalEnd":case"breakEnd":nh(void 0,void 0,void 0,t.signalType);break;case"rectStart":nh(void 0,void 0,t.color,t.signalType);break;case"optStart":nh(void 0,void 0,t.optText,t.signalType);break;case"altStart":case"else":nh(void 0,void 0,t.altText,t.signalType);break;case"setAccTitle":Or(t.text);break;case"parStart":case"and":nh(void 0,void 0,t.parText,t.signalType);break;case"criticalStart":nh(void 0,void 0,t.criticalText,t.signalType);break;case"option":nh(void 0,void 0,t.optionText,t.signalType);break;case"breakStart":nh(void 0,void 0,t.breakText,t.signalType)}var e},ph={addActor:eh,addMessage:function(t,e,n,r){Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,answer:r})},addSignal:nh,addLinks:oh,addDetails:uh,addProperties:lh,autoWrap:ih,setWrap:function(t){Gl=t},enableSequenceNumbers:function(){th=!0},disableSequenceNumbers:function(){th=!1},showSequenceNumbers:()=>th,getMessages:function(){return Jl},getActors:function(){return Kl},getActor:rh,getActorKeys:function(){return Object.keys(Kl)},getActorProperty:function(t,e){if(void 0!==t&&void 0!==t.properties)return t.properties[e]},getAccTitle:Mr,getBoxes:function(){return Ql},getDiagramTitle:Rr,setDiagramTitle:$r,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().sequence,clear:function(){Kl={},Ql=[],Jl=[],th=!1,Dr()},parseMessage:function(t){const e=t.trim(),n={text:e.replace(/^:?(?:no)?wrap:/,"").trim(),wrap:null!==e.match(/^:?wrap:/)||null===e.match(/^:?nowrap:/)&&void 0};return Nt.debug("parseMessage:",n),n},parseBoxData:function(t){const e=t.match(/^((?:rgba?|hsla?)\s*\(.*\)|\w*)(.*)$/);let n=null!=e&&e[1]?e[1].trim():"transparent",r=null!=e&&e[2]?e[2].trim():void 0;if(window&&window.CSS)window.CSS.supports("color",n)||(n="transparent",r=t.trim());else{const e=(new Option).style;e.color=n,e.color!==n&&(n="transparent",r=t.trim())}return{color:n,text:void 0!==r?Ft(r.replace(/^:?(?:no)?wrap:/,""),ar()):void 0,wrap:void 0!==r?null!==r.match(/^:?wrap:/)||null===r.match(/^:?nowrap:/)&&void 0:void 0}},LINETYPE:ah,ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},addNote:sh,setAccTitle:Or,apply:dh,setAccDescription:Ir,getAccDescription:Fr,hasAtLeastOneBox:function(){return Ql.length>0},hasAtLeastOneBoxWithTitle:function(){return Ql.some((t=>t.name))}};let fh=[];const gh=()=>{fh.forEach((t=>{t()})),fh=[]},yh=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},mh=(t,e)=>{var n;n=()=>{const n=document.querySelectorAll(t);0!==n.length&&(n[0].addEventListener("mouseover",(function(){xh("actor"+e+"_popup")})),n[0].addEventListener("mouseout",(function(){vh("actor"+e+"_popup")})))},fh.push(n)},bh=function(t,e,n,r){const i=t.append("image");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href",a)},_h=function(t,e,n,r){const i=t.append("use");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href","#"+a)},xh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="block")},vh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="none")},kh=function(t,e){let n=0,r=0;const i=e.text.split(Yt.lineBreakRegex),[a,s]=Vn(e.fontSize);let o=[],c=0,l=()=>e.y;if(void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0)switch(e.valign){case"top":case"start":l=()=>Math.round(e.y+e.textMargin);break;case"middle":case"center":l=()=>Math.round(e.y+(n+r+e.textMargin)/2);break;case"bottom":case"end":l=()=>Math.round(e.y+(n+r+2*e.textMargin)-e.textMargin)}if(void 0!==e.anchor&&void 0!==e.textMargin&&void 0!==e.width)switch(e.anchor){case"left":case"start":e.x=Math.round(e.x+e.textMargin),e.anchor="start",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"middle":case"center":e.x=Math.round(e.x+e.width/2),e.anchor="middle",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"right":case"end":e.x=Math.round(e.x+e.width-e.textMargin),e.anchor="end",e.dominantBaseline="middle",e.alignmentBaseline="middle"}for(let[h,u]of i.entries()){void 0!==e.textMargin&&0===e.textMargin&&void 0!==a&&(c=h*a);const i=t.append("text");if(i.attr("x",e.x),i.attr("y",l()),void 0!==e.anchor&&i.attr("text-anchor",e.anchor).attr("dominant-baseline",e.dominantBaseline).attr("alignment-baseline",e.alignmentBaseline),void 0!==e.fontFamily&&i.style("font-family",e.fontFamily),void 0!==s&&i.style("font-size",s),void 0!==e.fontWeight&&i.style("font-weight",e.fontWeight),void 0!==e.fill&&i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class),void 0!==e.dy?i.attr("dy",e.dy):0!==c&&i.attr("dy",c),e.tspan){const t=i.append("tspan");t.attr("x",e.x),void 0!==e.fill&&t.attr("fill",e.fill),t.text(u)}else i.text(u);void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0&&(r+=(i._groups||i)[0][0].getBBox().height,n=r),o.push(i)}return o},wh=function(t,e){const n=t.append("polygon");var r,i,a,s,o;return n.attr("points",(r=e.x,i=e.y,a=e.width,s=e.height,r+","+i+" "+(r+a)+","+i+" "+(r+a)+","+(i+s-(o=7))+" "+(r+a-1.2*o)+","+(i+s)+" "+r+","+(i+s))),n.attr("class","labelBox"),e.y=e.y+e.height/2,kh(t,e),n};let Eh=-1;const Ch=(t,e)=>{t.selectAll&&t.selectAll(".actor-line").attr("class","200").attr("y2",e-55)},Th=function(t,e){yh(t,{x:e.startx,y:e.starty,width:e.stopx-e.startx,height:e.stopy-e.starty,fill:e.fill,stroke:e.stroke,class:"rect"}).lower()},Sh=function(){return{x:0,y:0,fill:void 0,anchor:void 0,style:"#666",width:void 0,height:void 0,textMargin:0,rx:0,ry:0,tspan:!0,valign:void 0}},Ah=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},Lh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,[d,p]=Vn(l),f=t.split(Yt.lineBreakRegex);for(let g=0;g<f.length;g++){const t=g*d-d*(f.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").style("font-size",p).style("font-weight",u).style("font-family",h);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(f[g]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Bh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,a=e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").style("font-size",l).style("font-weight",u).style("font-family",h);a.append("tspan").attr("x",n).attr("dy",t).text(d[p]),a.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(a,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,0,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Nh={drawRect:yh,drawText:kh,drawLabel:wh,drawActor:function(t,e,n,r){switch(e.type){case"actor":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+80;r||(Eh++,t.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"));const s=t.append("g");s.attr("class","actor-man");const o=Ah();o.x=e.x,o.y=e.y,o.fill="#eaeaea",o.width=e.width,o.height=e.height,o.class="actor",o.rx=3,o.ry=3,s.append("line").attr("id","actor-man-torso"+Eh).attr("x1",i).attr("y1",e.y+25).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("id","actor-man-arms"+Eh).attr("x1",i-18).attr("y1",e.y+33).attr("x2",i+18).attr("y2",e.y+33),s.append("line").attr("x1",i-18).attr("y1",e.y+60).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("x1",i).attr("y1",e.y+45).attr("x2",i+16).attr("y2",e.y+60);const c=s.append("circle");c.attr("cx",e.x+e.width/2),c.attr("cy",e.y+10),c.attr("r",15),c.attr("width",e.width),c.attr("height",e.height);const l=s.node().getBBox();return e.height=l.height,Lh(n)(e.description,s,o.x,o.y+35,o.width,o.height,{class:"actor"},n),e.height}(t,e,n,r);case"participant":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+5,s=t.append("g");var o=s;r||(Eh++,o.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"),o=s.append("g"),e.actorCnt=Eh,null!=e.links&&(o.attr("id","root-"+Eh),mh("#root-"+Eh,Eh)));const c=Ah();var l="actor";null!=e.properties&&e.properties.class?l=e.properties.class:c.fill="#eaeaea",c.x=e.x,c.y=e.y,c.width=e.width,c.height=e.height,c.class=l,c.rx=3,c.ry=3;const h=yh(o,c);if(e.rectData=c,null!=e.properties&&e.properties.icon){const t=e.properties.icon.trim();"@"===t.charAt(0)?_h(o,c.x+c.width-20,c.y+10,t.substr(1)):bh(o,c.x+c.width-20,c.y+10,t)}Lh(n)(e.description,o,c.x,c.y,c.width,c.height,{class:"actor"},n);let u=e.height;if(h.node){const t=h.node().getBBox();e.height=t.height,u=t.height}return u}(t,e,n,r)}},drawBox:function(t,e,n){const r=t.append("g");Th(r,e),e.name&&Lh(n)(e.name,r,e.x,e.y+(e.textMaxHeight||0)/2,e.width,0,{class:"text"},n),r.lower()},drawPopup:function(t,e,n,r,i){if(void 0===e.links||null===e.links||0===Object.keys(e.links).length)return{height:0,width:0};const a=e.links,o=e.actorCnt,c=e.rectData;var l="none";i&&(l="block !important");const h=t.append("g");h.attr("id","actor"+o+"_popup"),h.attr("class","actorPopupMenu"),h.attr("display",l),mh("#actor"+o+"_popup",o);var u="";void 0!==c.class&&(u=" "+c.class);let d=c.width>n?c.width:n;const p=h.append("rect");if(p.attr("class","actorPopupMenuPanel"+u),p.attr("x",c.x),p.attr("y",c.height),p.attr("fill",c.fill),p.attr("stroke",c.stroke),p.attr("width",d),p.attr("height",c.height),p.attr("rx",c.rx),p.attr("ry",c.ry),null!=a){var f=20;for(let t in a){var g=h.append("a"),y=(0,s.N)(a[t]);g.attr("xlink:href",y),g.attr("target","_blank"),Bh(r)(t,g,c.x+10,c.height+f,d,20,{class:"actor"},r),f+=30}}return p.attr("height",f),{height:c.height+f,width:d}},drawImage:bh,drawEmbeddedImage:_h,anchorElement:function(t){return t.append("g")},drawActivation:function(t,e,n,r,i){const a=Ah(),s=e.anchored;a.x=e.startx,a.y=e.starty,a.class="activation"+i%3,a.width=e.stopx-e.startx,a.height=n-e.starty,yh(s,a)},drawLoop:function(t,e,n,r){const{boxMargin:i,boxTextMargin:a,labelBoxHeight:s,labelBoxWidth:o,messageFontFamily:c,messageFontSize:l,messageFontWeight:h}=r,u=t.append("g"),d=function(t,e,n,r){return u.append("line").attr("x1",t).attr("y1",e).attr("x2",n).attr("y2",r).attr("class","loopLine")};d(e.startx,e.starty,e.stopx,e.starty),d(e.stopx,e.starty,e.stopx,e.stopy),d(e.startx,e.stopy,e.stopx,e.stopy),d(e.startx,e.starty,e.startx,e.stopy),void 0!==e.sections&&e.sections.forEach((function(t){d(e.startx,t.y,e.stopx,t.y).style("stroke-dasharray","3, 3")}));let p=Sh();p.text=n,p.x=e.startx,p.y=e.starty,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.anchor="middle",p.valign="middle",p.tspan=!1,p.width=o||50,p.height=s||20,p.textMargin=a,p.class="labelText",wh(u,p),p=Sh(),p.text=e.title,p.x=e.startx+o/2+(e.stopx-e.startx)/2,p.y=e.starty+i+a,p.anchor="middle",p.valign="middle",p.textMargin=a,p.class="loopText",p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=!0;let f=kh(u,p);return void 0!==e.sectionTitles&&e.sectionTitles.forEach((function(t,n){if(t.message){p.text=t.message,p.x=e.startx+(e.stopx-e.startx)/2,p.y=e.sections[n].y+i+a,p.class="loopText",p.anchor="middle",p.valign="middle",p.tspan=!1,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=e.wrap,f=kh(u,p);let r=Math.round(f.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));e.sections[n].height+=r-(i+a)}})),e.height=Math.round(e.stopy-e.starty),u},drawBackgroundRect:Th,insertArrowHead:function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},insertArrowFilledHead:function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},insertSequenceNumber:function(t){t.append("defs").append("marker").attr("id","sequencenumber").attr("refX",15).attr("refY",15).attr("markerWidth",60).attr("markerHeight",40).attr("orient","auto").append("circle").attr("cx",15).attr("cy",15).attr("r",6)},insertArrowCrossHead:function(t){t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",4).attr("refY",5).append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1pt").attr("d","M 1,2 L 6,7 M 6,2 L 1,7")},insertDatabaseIcon:function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},insertComputerIcon:function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},insertClockIcon:function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")},getTextObj:Sh,getNoteRect:Ah,popupMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'block'; }"},popdownMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'none'; }"},fixLifeLineHeights:Ch,sanitizeUrl:s.N};let Dh={};const Oh={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],activations:[],models:{getHeight:function(){return Math.max.apply(null,0===this.actors.length?[0]:this.actors.map((t=>t.height||0)))+(0===this.loops.length?0:this.loops.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.messages.length?0:this.messages.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.notes.length?0:this.notes.map((t=>t.height||0)).reduce(((t,e)=>t+e)))},clear:function(){this.actors=[],this.boxes=[],this.loops=[],this.messages=[],this.notes=[]},addBox:function(t){this.boxes.push(t)},addActor:function(t){this.actors.push(t)},addLoop:function(t){this.loops.push(t)},addMessage:function(t){this.messages.push(t)},addNote:function(t){this.notes.push(t)},lastActor:function(){return this.actors[this.actors.length-1]},lastLoop:function(){return this.loops[this.loops.length-1]},lastMessage:function(){return this.messages[this.messages.length-1]},lastNote:function(){return this.notes[this.notes.length-1]},actors:[],boxes:[],loops:[],messages:[],notes:[]},init:function(){this.sequenceItems=[],this.activations=[],this.models.clear(),this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0,Zh(ar())},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=this;let a=0;function s(s){return function(o){a++;const c=i.sequenceItems.length-a+1;i.updateVal(o,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopy",r+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopx",n+c*Dh.boxMargin,Math.max),"activation"!==s&&(i.updateVal(o,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopx",n+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopy",r+c*Dh.boxMargin,Math.max))}}this.sequenceItems.forEach(s()),this.activations.forEach(s("activation"))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(Oh.data,"startx",i,Math.min),this.updateVal(Oh.data,"starty",s,Math.min),this.updateVal(Oh.data,"stopx",a,Math.max),this.updateVal(Oh.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},newActivation:function(t,e,n){const r=n[t.from.actor],i=Ph(t.from.actor).length||0,a=r.x+r.width/2+(i-1)*Dh.activationWidth/2;this.activations.push({startx:a,starty:this.verticalPos+2,stopx:a+Dh.activationWidth,stopy:void 0,actor:t.from.actor,anchored:Nh.anchorElement(e)})},endActivation:function(t){const e=this.activations.map((function(t){return t.actor})).lastIndexOf(t.from.actor);return this.activations.splice(e,1)[0]},createLoop:function(t={message:void 0,wrap:!1,width:void 0},e){return{startx:void 0,starty:this.verticalPos,stopx:void 0,stopy:void 0,title:t.message,wrap:t.wrap,width:t.width,height:0,fill:e}},newLoop:function(t={message:void 0,wrap:!1,width:void 0},e){this.sequenceItems.push(this.createLoop(t,e))},endLoop:function(){return this.sequenceItems.pop()},addSectionToLoop:function(t){const e=this.sequenceItems.pop();e.sections=e.sections||[],e.sectionTitles=e.sectionTitles||[],e.sections.push({y:Oh.getVerticalPos(),height:0}),e.sectionTitles.push(t),this.sequenceItems.push(e)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return{bounds:this.data,models:this.models}}},Mh=t=>({fontFamily:t.messageFontFamily,fontSize:t.messageFontSize,fontWeight:t.messageFontWeight}),Ih=t=>({fontFamily:t.noteFontFamily,fontSize:t.noteFontSize,fontWeight:t.noteFontWeight}),Fh=t=>({fontFamily:t.actorFontFamily,fontSize:t.actorFontSize,fontWeight:t.actorFontWeight});const $h=function(t,e,n,r,i,a,s){if(!0===i.hideUnusedParticipants){const t=new Set;a.forEach((e=>{t.add(e.from),t.add(e.to)})),n=n.filter((e=>t.has(e)))}let o,c=0,l=0,h=0;for(const u of n){const n=e[u],i=n.box;o&&o!=i&&(s||Oh.models.addBox(o),l+=Dh.boxMargin+o.margin),i&&i!=o&&(s||(i.x=c+l,i.y=r),l+=i.margin),n.width=n.width||Dh.width,n.height=Math.max(n.height||Dh.height,Dh.height),n.margin=n.margin||Dh.actorMargin,n.x=c+l,n.y=Oh.getVerticalPos();const a=Nh.drawActor(t,n,Dh,s);h=Math.max(h,a),Oh.insert(n.x,r,n.x+n.width,n.height),c+=n.width+l,n.box&&(n.box.width=c+i.margin-n.box.x),l=n.margin,o=n.box,Oh.models.addActor(n)}o&&!s&&Oh.models.addBox(o),Oh.bumpVerticalPos(h)},Rh=function(t,e,n,r){let i=0,a=0;for(const s of n){const n=e[s],o=zh(n),c=Nh.drawPopup(t,n,o,Dh,Dh.forceMenus,r);c.height>i&&(i=c.height),c.width+n.x>a&&(a=c.width+n.x)}return{maxHeight:i,maxWidth:a}},Zh=function(t){Sn(Dh,t),t.fontFamily&&(Dh.actorFontFamily=Dh.noteFontFamily=Dh.messageFontFamily=t.fontFamily),t.fontSize&&(Dh.actorFontSize=Dh.noteFontSize=Dh.messageFontSize=t.fontSize),t.fontWeight&&(Dh.actorFontWeight=Dh.noteFontWeight=Dh.messageFontWeight=t.fontWeight)},Ph=function(t){return Oh.activations.filter((function(e){return e.actor===t}))},jh=function(t,e){const n=e[t],r=Ph(t);return[r.reduce((function(t,e){return Math.min(t,e.startx)}),n.x+n.width/2),r.reduce((function(t,e){return Math.max(t,e.stopx)}),n.x+n.width/2)]};function Yh(t,e,n,r,i){Oh.bumpVerticalPos(n);let a=r;if(e.id&&e.message&&t[e.id]){const n=t[e.id].width,i=Mh(Dh);e.message=Gn.wrapLabel(`[${e.message}]`,n-2*Dh.wrapPadding,i),e.width=n,e.wrap=!0;const s=Gn.calculateTextDimensions(e.message,i),o=Math.max(s.height,Dh.labelBoxHeight);a=r+o,Nt.debug(`${o} - ${e.message}`)}i(e),Oh.bumpVerticalPos(a)}const zh=function(t){let e=0;const n=Fh(Dh);for(const r in t.links){const t=Gn.calculateTextDimensions(r,n).width+2*Dh.wrapPadding+2*Dh.boxMargin;e<t&&(e=t)}return e};const Uh=function(t,e,n,r){const i={},a=[];let s,o,c;return t.forEach((function(t){switch(t.id=Gn.random({length:10}),t.type){case r.db.LINETYPE.LOOP_START:case r.db.LINETYPE.ALT_START:case r.db.LINETYPE.OPT_START:case r.db.LINETYPE.PAR_START:case r.db.LINETYPE.CRITICAL_START:case r.db.LINETYPE.BREAK_START:a.push({id:t.id,msg:t.message,from:Number.MAX_SAFE_INTEGER,to:Number.MIN_SAFE_INTEGER,width:0});break;case r.db.LINETYPE.ALT_ELSE:case r.db.LINETYPE.PAR_AND:case r.db.LINETYPE.CRITICAL_OPTION:t.message&&(s=a.pop(),i[s.id]=s,i[t.id]=s,a.push(s));break;case r.db.LINETYPE.LOOP_END:case r.db.LINETYPE.ALT_END:case r.db.LINETYPE.OPT_END:case r.db.LINETYPE.PAR_END:case r.db.LINETYPE.CRITICAL_END:case r.db.LINETYPE.BREAK_END:s=a.pop(),i[s.id]=s;break;case r.db.LINETYPE.ACTIVE_START:{const n=e[t.from?t.from.actor:t.to.actor],r=Ph(t.from?t.from.actor:t.to.actor).length,i=n.x+n.width/2+(r-1)*Dh.activationWidth/2,a={startx:i,stopx:i+Dh.activationWidth,actor:t.from.actor,enabled:!0};Oh.activations.push(a)}break;case r.db.LINETYPE.ACTIVE_END:{const e=Oh.activations.map((t=>t.actor)).lastIndexOf(t.from.actor);delete Oh.activations.splice(e,1)[0]}}void 0!==t.placement?(o=function(t,e,n){const r=e[t.from].x,i=e[t.to].x,a=t.wrap&&t.message;let s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Dh.width,Ih(Dh)):t.message,Ih(Dh));const o={width:a?Dh.width:Math.max(Dh.width,s.width+2*Dh.noteMargin),height:0,startx:e[t.from].x,stopx:0,starty:0,stopy:0,message:t.message};return t.placement===n.db.PLACEMENT.RIGHTOF?(o.width=a?Math.max(Dh.width,s.width):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width+Dh.actorMargin)/2):t.placement===n.db.PLACEMENT.LEFTOF?(o.width=a?Math.max(Dh.width,s.width+2*Dh.noteMargin):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r-o.width+(e[t.from].width-Dh.actorMargin)/2):t.to===t.from?(s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Math.max(Dh.width,e[t.from].width),Ih(Dh)):t.message,Ih(Dh)),o.width=a?Math.max(Dh.width,e[t.from].width):Math.max(e[t.from].width,Dh.width,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width-o.width)/2):(o.width=Math.abs(r+e[t.from].width/2-(i+e[t.to].width/2))+Dh.actorMargin,o.startx=r<i?r+e[t.from].width/2-Dh.actorMargin/2:i+e[t.to].width/2-Dh.actorMargin/2),a&&(o.message=Gn.wrapLabel(t.message,o.width-2*Dh.wrapPadding,Ih(Dh))),Nt.debug(`NM:[${o.startx},${o.stopx},${o.starty},${o.stopy}:${o.width},${o.height}=${t.message}]`),o}(t,e,r),t.noteModel=o,a.forEach((t=>{s=t,s.from=Math.min(s.from,o.startx),s.to=Math.max(s.to,o.startx+o.width),s.width=Math.max(s.width,Math.abs(s.from-s.to))-Dh.labelBoxWidth}))):(c=function(t,e,n){let r=!1;if([n.db.LINETYPE.SOLID_OPEN,n.db.LINETYPE.DOTTED_OPEN,n.db.LINETYPE.SOLID,n.db.LINETYPE.DOTTED,n.db.LINETYPE.SOLID_CROSS,n.db.LINETYPE.DOTTED_CROSS,n.db.LINETYPE.SOLID_POINT,n.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(r=!0),!r)return{};const i=jh(t.from,e),a=jh(t.to,e),s=i[0]<=a[0]?1:0,o=i[0]<a[0]?0:1,c=[...i,...a],l=Math.abs(a[o]-i[s]);t.wrap&&t.message&&(t.message=Gn.wrapLabel(t.message,Math.max(l+2*Dh.wrapPadding,Dh.width),Mh(Dh)));const h=Gn.calculateTextDimensions(t.message,Mh(Dh));return{width:Math.max(t.wrap?0:h.width+2*Dh.wrapPadding,l+2*Dh.wrapPadding,Dh.width),height:0,startx:i[s],stopx:a[o],starty:0,stopy:0,message:t.message,type:t.type,wrap:t.wrap,fromBounds:Math.min.apply(null,c),toBounds:Math.max.apply(null,c)}}(t,e,r),t.msgModel=c,c.startx&&c.stopx&&a.length>0&&a.forEach((n=>{if(s=n,c.startx===c.stopx){const n=e[t.from],r=e[t.to];s.from=Math.min(n.x-c.width/2,n.x-n.width/2,s.from),s.to=Math.max(r.x+c.width/2,r.x+n.width/2,s.to),s.width=Math.max(s.width,Math.abs(s.to-s.from))-Dh.labelBoxWidth}else s.from=Math.min(c.startx,s.from),s.to=Math.max(c.stopx,s.to),s.width=Math.max(s.width,c.width)-Dh.labelBoxWidth})))})),Oh.activations=[],Nt.debug("Loop type widths:",i),i},Wh={bounds:Oh,drawActors:$h,drawActorsPopup:Rh,setConf:Zh,draw:function(t,e,n,r){const{securityLevel:i,sequence:a}=ar();let s;Dh=a,r.db.clear(),r.parser.parse(t),"sandbox"===i&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===i?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l="sandbox"===i?s.nodes()[0].contentDocument:document;Oh.init(),Nt.debug(r.db);const h="sandbox"===i?c.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`),u=r.db.getActors(),d=r.db.getBoxes(),p=r.db.getActorKeys(),f=r.db.getMessages(),g=r.db.getDiagramTitle(),y=r.db.hasAtLeastOneBox(),m=r.db.hasAtLeastOneBoxWithTitle(),b=function(t,e,n){const r={};return e.forEach((function(e){if(t[e.to]&&t[e.from]){const i=t[e.to];if(e.placement===n.db.PLACEMENT.LEFTOF&&!i.prevActor)return;if(e.placement===n.db.PLACEMENT.RIGHTOF&&!i.nextActor)return;const a=void 0!==e.placement,s=!a,o=a?Ih(Dh):Mh(Dh),c=e.wrap?Gn.wrapLabel(e.message,Dh.width-2*Dh.wrapPadding,o):e.message,l=Gn.calculateTextDimensions(c,o).width+2*Dh.wrapPadding;s&&e.from===i.nextActor?r[e.to]=Math.max(r[e.to]||0,l):s&&e.from===i.prevActor?r[e.from]=Math.max(r[e.from]||0,l):s&&e.from===e.to?(r[e.from]=Math.max(r[e.from]||0,l/2),r[e.to]=Math.max(r[e.to]||0,l/2)):e.placement===n.db.PLACEMENT.RIGHTOF?r[e.from]=Math.max(r[e.from]||0,l):e.placement===n.db.PLACEMENT.LEFTOF?r[i.prevActor]=Math.max(r[i.prevActor]||0,l):e.placement===n.db.PLACEMENT.OVER&&(i.prevActor&&(r[i.prevActor]=Math.max(r[i.prevActor]||0,l/2)),i.nextActor&&(r[e.from]=Math.max(r[e.from]||0,l/2)))}})),Nt.debug("maxMessageWidthPerActor:",r),r}(u,f,r);Dh.height=function(t,e,n){let r=0;Object.keys(t).forEach((e=>{const n=t[e];n.wrap&&(n.description=Gn.wrapLabel(n.description,Dh.width-2*Dh.wrapPadding,Fh(Dh)));const i=Gn.calculateTextDimensions(n.description,Fh(Dh));n.width=n.wrap?Dh.width:Math.max(Dh.width,i.width+2*Dh.wrapPadding),n.height=n.wrap?Math.max(i.height,Dh.height):Dh.height,r=Math.max(r,n.height)}));for(const a in e){const n=t[a];if(!n)continue;const r=t[n.nextActor];if(!r){const t=e[a]+Dh.actorMargin-n.width/2;n.margin=Math.max(t,Dh.actorMargin);continue}const i=e[a]+Dh.actorMargin-n.width/2-r.width/2;n.margin=Math.max(i,Dh.actorMargin)}let i=0;return n.forEach((e=>{const n=Mh(Dh);let r=e.actorKeys.reduce(((e,n)=>e+(t[n].width+(t[n].margin||0))),0);r-=2*Dh.boxTextMargin,e.wrap&&(e.name=Gn.wrapLabel(e.name,r-2*Dh.wrapPadding,n));const a=Gn.calculateTextDimensions(e.name,n);i=Math.max(a.height,i);const s=Math.max(r,a.width+2*Dh.wrapPadding);if(e.margin=Dh.boxTextMargin,r<s){const t=(s-r)/2;e.margin+=t}})),n.forEach((t=>t.textMaxHeight=i)),Math.max(r,Dh.height)}(u,b,d),Nh.insertComputerIcon(h),Nh.insertDatabaseIcon(h),Nh.insertClockIcon(h),y&&(Oh.bumpVerticalPos(Dh.boxMargin),m&&Oh.bumpVerticalPos(d[0].textMaxHeight)),$h(h,u,p,0,Dh,f,!1);const _=Uh(f,u,b,r);Nh.insertArrowHead(h),Nh.insertArrowCrossHead(h),Nh.insertArrowFilledHead(h),Nh.insertSequenceNumber(h);let x=1,v=1;const k=[];f.forEach((function(t){let e,n,i;switch(t.type){case r.db.LINETYPE.NOTE:n=t.noteModel,function(t,e){Oh.bumpVerticalPos(Dh.boxMargin),e.height=Dh.boxMargin,e.starty=Oh.getVerticalPos();const n=Nh.getNoteRect();n.x=e.startx,n.y=e.starty,n.width=e.width||Dh.width,n.class="note";const r=t.append("g"),i=Nh.drawRect(r,n),a=Nh.getTextObj();a.x=e.startx,a.y=e.starty,a.width=n.width,a.dy="1em",a.text=e.message,a.class="noteText",a.fontFamily=Dh.noteFontFamily,a.fontSize=Dh.noteFontSize,a.fontWeight=Dh.noteFontWeight,a.anchor=Dh.noteAlign,a.textMargin=Dh.noteMargin,a.valign="center";const s=kh(r,a),o=Math.round(s.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));i.attr("height",o+2*Dh.noteMargin),e.height+=o+2*Dh.noteMargin,Oh.bumpVerticalPos(o+2*Dh.noteMargin),e.stopy=e.starty+o+2*Dh.noteMargin,e.stopx=e.startx+n.width,Oh.insert(e.startx,e.starty,e.stopx,e.stopy),Oh.models.addNote(e)}(h,n);break;case r.db.LINETYPE.ACTIVE_START:Oh.newActivation(t,h,u);break;case r.db.LINETYPE.ACTIVE_END:!function(t,e){const n=Oh.endActivation(t);n.starty+18>e&&(n.starty=e-6,e+=12),Nh.drawActivation(h,n,e,Dh,Ph(t.from.actor).length),Oh.insert(n.startx,e-10,n.stopx,e)}(t,Oh.getVerticalPos());break;case r.db.LINETYPE.LOOP_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.LOOP_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"loop",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.RECT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin,(t=>Oh.newLoop(void 0,t.message)));break;case r.db.LINETYPE.RECT_END:e=Oh.endLoop(),Nh.drawBackgroundRect(h,e),Oh.models.addLoop(e),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos());break;case r.db.LINETYPE.OPT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.OPT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"opt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.ALT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.ALT_ELSE:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.ALT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"alt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.PAR_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.PAR_AND:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.PAR_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"par",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.AUTONUMBER:x=t.message.start||x,v=t.message.step||v,t.message.visible?r.db.enableSequenceNumbers():r.db.disableSequenceNumbers();break;case r.db.LINETYPE.CRITICAL_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.CRITICAL_OPTION:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.CRITICAL_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"critical",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.BREAK_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.BREAK_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"break",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;default:try{i=t.msgModel,i.starty=Oh.getVerticalPos(),i.sequenceIndex=x,i.sequenceVisible=r.db.showSequenceNumbers();const e=function(t,e){Oh.bumpVerticalPos(10);const{startx:n,stopx:r,message:i}=e,a=Yt.splitBreaks(i).length,s=Gn.calculateTextDimensions(i,Mh(Dh)),o=s.height/a;let c;e.height+=o,Oh.bumpVerticalPos(o);let l=s.height-10;const h=s.width;if(n===r){c=Oh.getVerticalPos()+l,Dh.rightAngles||(l+=Dh.boxMargin,c=Oh.getVerticalPos()+l),l+=30;const t=Math.max(h/2,Dh.width/2);Oh.insert(n-t,Oh.getVerticalPos()-10+l,r+t,Oh.getVerticalPos()+30+l)}else l+=Dh.boxMargin,c=Oh.getVerticalPos()+l,Oh.insert(n,c-10,r,c);return Oh.bumpVerticalPos(l),e.height+=l,e.stopy=e.starty+e.height,Oh.insert(e.fromBounds,e.starty,e.toBounds,e.stopy),c}(0,i);k.push({messageModel:i,lineStartY:e}),Oh.models.addMessage(i)}catch(a){Nt.error("error while drawing message",a)}}[r.db.LINETYPE.SOLID_OPEN,r.db.LINETYPE.DOTTED_OPEN,r.db.LINETYPE.SOLID,r.db.LINETYPE.DOTTED,r.db.LINETYPE.SOLID_CROSS,r.db.LINETYPE.DOTTED_CROSS,r.db.LINETYPE.SOLID_POINT,r.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(x+=v)})),k.forEach((t=>function(t,e,n,r){const{startx:i,stopx:a,starty:s,message:o,type:c,sequenceIndex:l,sequenceVisible:h}=e,u=Gn.calculateTextDimensions(o,Mh(Dh)),d=Nh.getTextObj();d.x=i,d.y=s+10,d.width=a-i,d.class="messageText",d.dy="1em",d.text=o,d.fontFamily=Dh.messageFontFamily,d.fontSize=Dh.messageFontSize,d.fontWeight=Dh.messageFontWeight,d.anchor=Dh.messageAlign,d.valign="center",d.textMargin=Dh.wrapPadding,d.tspan=!1,kh(t,d);const p=u.width;let f;i===a?f=Dh.rightAngles?t.append("path").attr("d",`M  ${i},${n} H ${i+Math.max(Dh.width/2,p/2)} V ${n+25} H ${i}`):t.append("path").attr("d","M "+i+","+n+" C "+(i+60)+","+(n-10)+" "+(i+60)+","+(n+30)+" "+i+","+(n+20)):(f=t.append("line"),f.attr("x1",i),f.attr("y1",n),f.attr("x2",a),f.attr("y2",n)),c===r.db.LINETYPE.DOTTED||c===r.db.LINETYPE.DOTTED_CROSS||c===r.db.LINETYPE.DOTTED_POINT||c===r.db.LINETYPE.DOTTED_OPEN?(f.style("stroke-dasharray","3, 3"),f.attr("class","messageLine1")):f.attr("class","messageLine0");let g="";Dh.arrowMarkerAbsolute&&(g=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,g=g.replace(/\(/g,"\\("),g=g.replace(/\)/g,"\\)")),f.attr("stroke-width",2),f.attr("stroke","none"),f.style("fill","none"),c!==r.db.LINETYPE.SOLID&&c!==r.db.LINETYPE.DOTTED||f.attr("marker-end","url("+g+"#arrowhead)"),c!==r.db.LINETYPE.SOLID_POINT&&c!==r.db.LINETYPE.DOTTED_POINT||f.attr("marker-end","url("+g+"#filled-head)"),c!==r.db.LINETYPE.SOLID_CROSS&&c!==r.db.LINETYPE.DOTTED_CROSS||f.attr("marker-end","url("+g+"#crosshead)"),(h||Dh.showSequenceNumbers)&&(f.attr("marker-start","url("+g+"#sequencenumber)"),t.append("text").attr("x",i).attr("y",n+4).attr("font-family","sans-serif").attr("font-size","12px").attr("text-anchor","middle").attr("class","sequenceNumber").text(l))}(h,t.messageModel,t.lineStartY,r))),Dh.mirrorActors&&(Oh.bumpVerticalPos(2*Dh.boxMargin),$h(h,u,p,Oh.getVerticalPos(),Dh,f,!0),Oh.bumpVerticalPos(Dh.boxMargin),Ch(h,Oh.getVerticalPos())),Oh.models.boxes.forEach((function(t){t.height=Oh.getVerticalPos()-t.y,Oh.insert(t.x,t.y,t.x+t.width,t.height),t.startx=t.x,t.starty=t.y,t.stopx=t.startx+t.width,t.stopy=t.starty+t.height,t.stroke="rgb(0,0,0, 0.5)",Nh.drawBox(h,t,Dh)})),y&&Oh.bumpVerticalPos(Dh.boxMargin);const w=Rh(h,u,p,l),{bounds:E}=Oh.getBounds();Nt.debug("For line height fix Querying: #"+e+" .actor-line");(0,o.td_)("#"+e+" .actor-line").attr("y2",E.stopy);let C=E.stopy-E.starty;C<w.maxHeight&&(C=w.maxHeight);let T=C+2*Dh.diagramMarginY;Dh.mirrorActors&&(T=T-Dh.boxMargin+Dh.bottomMarginAdj);let S=E.stopx-E.startx;S<w.maxWidth&&(S=w.maxWidth);const A=S+2*Dh.diagramMarginX;g&&h.append("text").text(g).attr("x",(E.stopx-E.startx)/2-2*Dh.diagramMarginX).attr("y",-25),dr(h,T,A,Dh.useMaxWidth);const L=g?40:0;h.attr("viewBox",E.startx-Dh.diagramMarginX+" -"+(Dh.diagramMarginY+L)+" "+A+" "+(T+L)),Nt.debug("models:",Oh.models)}};var qh=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,21],h=[1,22],u=[1,23],d=[1,24],p=[1,37],f=[1,25],g=[1,26],y=[1,27],m=[1,28],b=[1,29],_=[1,32],x=[1,33],v=[1,34],k=[1,35],w=[1,36],E=[1,39],C=[1,40],T=[1,41],S=[1,42],A=[1,38],L=[1,45],B=[1,4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],N=[1,4,5,14,15,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],D=[1,4,5,7,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],O=[4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],M={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NL:5,directive:6,SD:7,document:8,line:9,statement:10,classDefStatement:11,cssClassStatement:12,idStatement:13,DESCR:14,"--\x3e":15,HIDE_EMPTY:16,scale:17,WIDTH:18,COMPOSIT_STATE:19,STRUCT_START:20,STRUCT_STOP:21,STATE_DESCR:22,AS:23,ID:24,FORK:25,JOIN:26,CHOICE:27,CONCURRENT:28,note:29,notePosition:30,NOTE_TEXT:31,direction:32,acc_title:33,acc_title_value:34,acc_descr:35,acc_descr_value:36,acc_descr_multiline_value:37,classDef:38,CLASSDEF_ID:39,CLASSDEF_STYLEOPTS:40,DEFAULT:41,class:42,CLASSENTITY_IDS:43,STYLECLASS:44,openDirective:45,typeDirective:46,closeDirective:47,":":48,argDirective:49,direction_tb:50,direction_bt:51,direction_rl:52,direction_lr:53,eol:54,";":55,EDGE_STATE:56,STYLE_SEPARATOR:57,left_of:58,right_of:59,open_directive:60,type_directive:61,arg_directive:62,close_directive:63,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NL",7:"SD",14:"DESCR",15:"--\x3e",16:"HIDE_EMPTY",17:"scale",18:"WIDTH",19:"COMPOSIT_STATE",20:"STRUCT_START",21:"STRUCT_STOP",22:"STATE_DESCR",23:"AS",24:"ID",25:"FORK",26:"JOIN",27:"CHOICE",28:"CONCURRENT",29:"note",31:"NOTE_TEXT",33:"acc_title",34:"acc_title_value",35:"acc_descr",36:"acc_descr_value",37:"acc_descr_multiline_value",38:"classDef",39:"CLASSDEF_ID",40:"CLASSDEF_STYLEOPTS",41:"DEFAULT",42:"class",43:"CLASSENTITY_IDS",44:"STYLECLASS",48:":",50:"direction_tb",51:"direction_bt",52:"direction_rl",53:"direction_lr",55:";",56:"EDGE_STATE",57:"STYLE_SEPARATOR",58:"left_of",59:"right_of",60:"open_directive",61:"type_directive",62:"arg_directive",63:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[10,1],[10,1],[10,1],[10,2],[10,3],[10,4],[10,1],[10,2],[10,1],[10,4],[10,3],[10,6],[10,1],[10,1],[10,1],[10,1],[10,4],[10,4],[10,1],[10,1],[10,2],[10,2],[10,1],[11,3],[11,3],[12,3],[6,3],[6,5],[32,1],[32,1],[32,1],[32,1],[54,1],[54,1],[13,1],[13,1],[13,3],[13,3],[30,1],[30,1],[45,1],[46,1],[49,1],[47,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.setRootDoc(a[o]),a[o];case 5:this.$=[];break;case 6:"nl"!=a[o]&&(a[o-1].push(a[o]),this.$=a[o-1]);break;case 7:case 8:case 12:this.$=a[o];break;case 9:this.$="nl";break;case 13:const t=a[o-1];t.description=r.trimColon(a[o]),this.$=t;break;case 14:this.$={stmt:"relation",state1:a[o-2],state2:a[o]};break;case 15:const e=r.trimColon(a[o]);this.$={stmt:"relation",state1:a[o-3],state2:a[o-1],description:e};break;case 19:this.$={stmt:"state",id:a[o-3],type:"default",description:"",doc:a[o-1]};break;case 20:var c=a[o],l=a[o-2].trim();if(a[o].match(":")){var h=a[o].split(":");c=h[0],l=[l,h[1]]}this.$={stmt:"state",id:c,type:"default",description:l};break;case 21:this.$={stmt:"state",id:a[o-3],type:"default",description:a[o-5],doc:a[o-1]};break;case 22:this.$={stmt:"state",id:a[o],type:"fork"};break;case 23:this.$={stmt:"state",id:a[o],type:"join"};break;case 24:this.$={stmt:"state",id:a[o],type:"choice"};break;case 25:this.$={stmt:"state",id:r.getDividerId(),type:"divider"};break;case 26:this.$={stmt:"state",id:a[o-1].trim(),note:{position:a[o-2].trim(),text:a[o].trim()}};break;case 30:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 31:case 32:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 33:case 34:this.$={stmt:"classDef",id:a[o-1].trim(),classes:a[o].trim()};break;case 35:this.$={stmt:"applyClass",id:a[o-1].trim(),styleClass:a[o].trim()};break;case 38:r.setDirection("TB"),this.$={stmt:"dir",value:"TB"};break;case 39:r.setDirection("BT"),this.$={stmt:"dir",value:"BT"};break;case 40:r.setDirection("RL"),this.$={stmt:"dir",value:"RL"};break;case 41:r.setDirection("LR"),this.$={stmt:"dir",value:"LR"};break;case 44:case 45:this.$={stmt:"state",id:a[o].trim(),type:"default",description:""};break;case 46:case 47:this.$={stmt:"state",id:a[o-2].trim(),classes:[a[o].trim()],type:"default",description:""};break;case 50:r.parseDirective("%%{","open_directive");break;case 51:r.parseDirective(a[o],"type_directive");break;case 52:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 53:r.parseDirective("}%%","close_directive","state")}},table:[{3:1,4:n,5:r,6:4,7:i,45:6,60:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,45:6,60:a},{3:9,4:n,5:r,6:4,7:i,45:6,60:a},{3:10,4:n,5:r,6:4,7:i,45:6,60:a},e([1,4,5,16,17,19,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],s,{8:11}),{46:12,61:[1,13]},{61:[2,50]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},{47:43,48:[1,44],63:L},e([48,63],[2,51]),e(B,[2,6]),{6:30,10:46,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,8]),e(B,[2,9]),e(B,[2,10]),e(B,[2,11]),e(B,[2,12],{14:[1,47],15:[1,48]}),e(B,[2,16]),{18:[1,49]},e(B,[2,18],{20:[1,50]}),{23:[1,51]},e(B,[2,22]),e(B,[2,23]),e(B,[2,24]),e(B,[2,25]),{30:52,31:[1,53],58:[1,54],59:[1,55]},e(B,[2,28]),e(B,[2,29]),{34:[1,56]},{36:[1,57]},e(B,[2,32]),{39:[1,58],41:[1,59]},{43:[1,60]},e(N,[2,44],{57:[1,61]}),e(N,[2,45],{57:[1,62]}),e(B,[2,38]),e(B,[2,39]),e(B,[2,40]),e(B,[2,41]),e(D,[2,36]),{49:63,62:[1,64]},e(D,[2,53]),e(B,[2,7]),e(B,[2,13]),{13:65,24:p,56:A},e(B,[2,17]),e(O,s,{8:66}),{24:[1,67]},{24:[1,68]},{23:[1,69]},{24:[2,48]},{24:[2,49]},e(B,[2,30]),e(B,[2,31]),{40:[1,70]},{40:[1,71]},{44:[1,72]},{24:[1,73]},{24:[1,74]},{47:75,63:L},{63:[2,52]},e(B,[2,14],{14:[1,76]}),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,77],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,20],{20:[1,78]}),{31:[1,79]},{24:[1,80]},e(B,[2,33]),e(B,[2,34]),e(B,[2,35]),e(N,[2,46]),e(N,[2,47]),e(D,[2,37]),e(B,[2,15]),e(B,[2,19]),e(O,s,{8:81}),e(B,[2,26]),e(B,[2,27]),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,82],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,21])],defaultActions:{7:[2,50],8:[2,1],9:[2,2],10:[2,3],54:[2,48],55:[2,49],64:[2,52]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},I=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 41;case 1:case 44:return 50;case 2:case 45:return 51;case 3:case 46:return 52;case 4:case 47:return 53;case 5:return this.begin("open_directive"),60;case 6:return this.begin("type_directive"),61;case 7:return this.popState(),this.begin("arg_directive"),48;case 8:return this.popState(),this.popState(),63;case 9:return 62;case 10:case 11:case 13:case 14:case 15:case 16:case 56:case 58:case 64:break;case 12:case 79:return 5;case 17:case 34:return this.pushState("SCALE"),17;case 18:case 35:return 18;case 19:case 25:case 36:case 51:case 54:this.popState();break;case 20:return this.begin("acc_title"),33;case 21:return this.popState(),"acc_title_value";case 22:return this.begin("acc_descr"),35;case 23:return this.popState(),"acc_descr_value";case 24:this.begin("acc_descr_multiline");break;case 26:return"acc_descr_multiline_value";case 27:return this.pushState("CLASSDEF"),38;case 28:return this.popState(),this.pushState("CLASSDEFID"),"DEFAULT_CLASSDEF_ID";case 29:return this.popState(),this.pushState("CLASSDEFID"),39;case 30:return this.popState(),40;case 31:return this.pushState("CLASS"),42;case 32:return this.popState(),this.pushState("CLASS_STYLE"),43;case 33:return this.popState(),44;case 37:this.pushState("STATE");break;case 38:case 41:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),25;case 39:case 42:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),26;case 40:case 43:return this.popState(),e.yytext=e.yytext.slice(0,-10).trim(),27;case 48:this.pushState("STATE_STRING");break;case 49:return this.pushState("STATE_ID"),"AS";case 50:case 66:return this.popState(),"ID";case 52:return"STATE_DESCR";case 53:return 19;case 55:return this.popState(),this.pushState("struct"),20;case 57:return this.popState(),21;case 59:return this.begin("NOTE"),29;case 60:return this.popState(),this.pushState("NOTE_ID"),58;case 61:return this.popState(),this.pushState("NOTE_ID"),59;case 62:this.popState(),this.pushState("FLOATING_NOTE");break;case 63:return this.popState(),this.pushState("FLOATING_NOTE_ID"),"AS";case 65:return"NOTE_TEXT";case 67:return this.popState(),this.pushState("NOTE_TEXT"),24;case 68:return this.popState(),e.yytext=e.yytext.substr(2).trim(),31;case 69:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),31;case 70:case 71:return 7;case 72:return 16;case 73:return 56;case 74:return 24;case 75:return e.yytext=e.yytext.trim(),14;case 76:return 15;case 77:return 28;case 78:return 57;case 80:return"INVALID"}},rules:[/^(?:default\b)/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:[\s]+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:classDef\s+)/i,/^(?:DEFAULT\s+)/i,/^(?:\w+\s+)/i,/^(?:[^\n]*)/i,/^(?:class\s+)/i,/^(?:(\w+)+((,\s*\w+)*))/i,/^(?:[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:state\s+)/i,/^(?:.*<<fork>>)/i,/^(?:.*<<join>>)/i,/^(?:.*<<choice>>)/i,/^(?:.*\[\[fork\]\])/i,/^(?:.*\[\[join\]\])/i,/^(?:.*\[\[choice\]\])/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:["])/i,/^(?:\s*as\s+)/i,/^(?:[^\n\{]*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n\s\{]+)/i,/^(?:\n)/i,/^(?:\{)/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:\})/i,/^(?:[\n])/i,/^(?:note\s+)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:")/i,/^(?:\s*as\s*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n]*)/i,/^(?:\s*[^:\n\s\-]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:[\s\S]*?end note\b)/i,/^(?:stateDiagram\s+)/i,/^(?:stateDiagram-v2\s+)/i,/^(?:hide empty description\b)/i,/^(?:\[\*\])/i,/^(?:[^:\n\s\-\{]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:-->)/i,/^(?:--)/i,/^(?::::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{LINE:{rules:[14,15],inclusive:!1},close_directive:{rules:[14,15],inclusive:!1},arg_directive:{rules:[8,9,14,15],inclusive:!1},type_directive:{rules:[7,8,14,15],inclusive:!1},open_directive:{rules:[6,14,15],inclusive:!1},struct:{rules:[14,15,27,31,37,44,45,46,47,56,57,58,59,73,74,75,76,77],inclusive:!1},FLOATING_NOTE_ID:{rules:[66],inclusive:!1},FLOATING_NOTE:{rules:[63,64,65],inclusive:!1},NOTE_TEXT:{rules:[68,69],inclusive:!1},NOTE_ID:{rules:[67],inclusive:!1},NOTE:{rules:[60,61,62],inclusive:!1},CLASS_STYLE:{rules:[33],inclusive:!1},CLASS:{rules:[32],inclusive:!1},CLASSDEFID:{rules:[30],inclusive:!1},CLASSDEF:{rules:[28,29],inclusive:!1},acc_descr_multiline:{rules:[25,26],inclusive:!1},acc_descr:{rules:[23],inclusive:!1},acc_title:{rules:[21],inclusive:!1},SCALE:{rules:[18,19,35,36],inclusive:!1},ALIAS:{rules:[],inclusive:!1},STATE_ID:{rules:[50],inclusive:!1},STATE_STRING:{rules:[51,52],inclusive:!1},FORK_STATE:{rules:[],inclusive:!1},STATE:{rules:[14,15,38,39,40,41,42,43,48,49,53,54,55],inclusive:!1},ID:{rules:[14,15],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,5,10,11,12,13,15,16,17,20,22,24,27,31,34,37,55,59,70,71,72,73,74,75,76,78,79,80],inclusive:!0}}},t);function F(){this.yy={}}return M.lexer=I,F.prototype=M,M.Parser=F,new F}();qh.parser=qh;const Hh=qh,Vh=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*stateDiagram/)},Gh=(t,e)=>{var n;return null!==t.match(/^\s*stateDiagram-v2/)||!(!t.match(/^\s*stateDiagram/)||"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer))},Xh="state",Kh="relation",Qh="default",Jh="divider",tu="[*]",eu="start",nu="color",ru="fill";let iu="LR",au=[],su={};let ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,hu=0;const uu=t=>JSON.parse(JSON.stringify(t)),du=(t,e,n)=>{if(e.stmt===Kh)du(t,e.state1,!0),du(t,e.state2,!1);else if(e.stmt===Xh&&("[*]"===e.id?(e.id=n?t.id+"_start":t.id+"_end",e.start=n):e.id=e.id.trim()),e.doc){const t=[];let n,r=[];for(n=0;n<e.doc.length;n++)if(e.doc[n].type===Jh){const i=uu(e.doc[n]);i.doc=uu(r),t.push(i),r=[]}else r.push(e.doc[n]);if(t.length>0&&r.length>0){const n={stmt:Xh,id:Fn(),type:"divider",doc:uu(r)};t.push(uu(n)),e.doc=t}e.doc.forEach((t=>du(e,t,!0)))}},pu=function(t,e="default",n=null,r=null,i=null,a=null,s=null,o=null){const c=null==t?void 0:t.trim();if(void 0===cu.states[c]?(Nt.info("Adding state ",c,r),cu.states[c]={id:c,descriptions:[],type:e,doc:n,note:i,classes:[],styles:[],textStyles:[]}):(cu.states[c].doc||(cu.states[c].doc=n),cu.states[c].type||(cu.states[c].type=e)),r&&(Nt.info("Setting state description",c,r),"string"==typeof r&&_u(c,r.trim()),"object"==typeof r&&r.forEach((t=>_u(c,t.trim())))),i&&(cu.states[c].note=i,cu.states[c].note.text=Yt.sanitizeText(cu.states[c].note.text,ar())),a){Nt.info("Setting state classes",c,a);("string"==typeof a?[a]:a).forEach((t=>vu(c,t.trim())))}if(s){Nt.info("Setting state styles",c,s);("string"==typeof s?[s]:s).forEach((t=>ku(c,t.trim())))}if(o){Nt.info("Setting state styles",c,s);("string"==typeof o?[o]:o).forEach((t=>wu(c,t.trim())))}},fu=function(t){ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,su={},t||Dr()},gu=function(t){return cu.states[t]};function yu(t=""){let e=t;return t===tu&&(lu++,e=`start${lu}`),e}function mu(t="",e="default"){return t===tu?eu:e}const bu=function(t,e,n){if("object"==typeof t)!function(t,e,n){let r=yu(t.id.trim()),i=mu(t.id.trim(),t.type),a=yu(e.id.trim()),s=mu(e.id.trim(),e.type);pu(r,i,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles),pu(a,s,e.doc,e.description,e.note,e.classes,e.styles,e.textStyles),cu.relations.push({id1:r,id2:a,relationTitle:Yt.sanitizeText(n,ar())})}(t,e,n);else{const r=yu(t.trim()),i=mu(t),a=function(t=""){let e=t;return"[*]"===t&&(lu++,e=`end${lu}`),e}(e.trim()),s=function(t="",e="default"){return"[*]"===t?"end":e}(e);pu(r,i),pu(a,s),cu.relations.push({id1:r,id2:a,title:Yt.sanitizeText(n,ar())})}},_u=function(t,e){const n=cu.states[t],r=e.startsWith(":")?e.replace(":","").trim():e;n.descriptions.push(Yt.sanitizeText(r,ar()))},xu=function(t,e=""){void 0===su[t]&&(su[t]={id:t,styles:[],textStyles:[]});const n=su[t];null!=e&&e.split(",").forEach((t=>{const e=t.replace(/([^;]*);/,"$1").trim();if(t.match(nu)){const t=e.replace(ru,"bgFill").replace(nu,ru);n.textStyles.push(t)}n.styles.push(e)}))},vu=function(t,e){t.split(",").forEach((function(t){let n=gu(t);if(void 0===n){const e=t.trim();pu(e),n=gu(e)}n.classes.push(e)}))},ku=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},wu=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},Eu={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().state,addState:pu,clear:fu,getState:gu,getStates:function(){return cu.states},getRelations:function(){return cu.relations},getClasses:function(){return su},getDirection:()=>iu,addRelation:bu,getDividerId:()=>(hu++,"divider-id-"+hu),setDirection:t=>{iu=t},cleanupLabel:function(t){return":"===t.substring(0,1)?t.substr(2).trim():t.trim()},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3},logDocuments:function(){Nt.info("Documents = ",ou)},getRootDoc:()=>au,setRootDoc:t=>{Nt.info("Setting root doc",t),au=t},getRootDocV2:()=>(du({id:"root"},{id:"root",doc:au},!0),{id:"root",doc:au}),extract:t=>{let e;e=t.doc?t.doc:t,Nt.info(e),fu(!0),Nt.info("Extract",e),e.forEach((t=>{switch(t.stmt){case Xh:pu(t.id.trim(),t.type,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles);break;case Kh:bu(t.state1,t.state2,t.description);break;case"classDef":xu(t.id.trim(),t.classes);break;case"applyClass":vu(t.id.trim(),t.styleClass)}}))},trimColon:t=>t&&":"===t[0]?t.substr(1).trim():t.trim(),getAccTitle:Mr,setAccTitle:Or,getAccDescription:Fr,setAccDescription:Ir,addStyleClass:xu,setCssClass:vu,addDescription:_u,setDiagramTitle:$r,getDiagramTitle:Rr},Cu={},Tu=(t,e)=>{Cu[t]=e},Su=(t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+1.3*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.descriptions[0]).node().getBBox(),r=n.height,i=t.append("text").attr("x",ar().state.padding).attr("y",r+.4*ar().state.padding+ar().state.dividerMargin+ar().state.textHeight).attr("class","state-description");let a=!0,s=!0;e.descriptions.forEach((function(t){a||(!function(t,e,n){const r=t.append("tspan").attr("x",2*ar().state.padding).text(e);n||r.attr("dy",ar().state.textHeight)}(i,t,s),s=!1),a=!1}));const o=t.append("line").attr("x1",ar().state.padding).attr("y1",ar().state.padding+r+ar().state.dividerMargin/2).attr("y2",ar().state.padding+r+ar().state.dividerMargin/2).attr("class","descr-divider"),c=i.node().getBBox(),l=Math.max(c.width,n.width);return o.attr("x2",l+3*ar().state.padding),t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",l+2*ar().state.padding).attr("height",c.height+r+2*ar().state.padding).attr("rx",ar().state.radius),t},Au=(t,e,n)=>{const r=ar().state.padding,i=2*ar().state.padding,a=t.node().getBBox(),s=a.width,o=a.x,c=t.append("text").attr("x",0).attr("y",ar().state.titleShift).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),l=c.node().getBBox().width+i;let h,u=Math.max(l,s);u===s&&(u+=i);const d=t.node().getBBox();e.doc,h=o-r,l>s&&(h=(s-u)/2+r),Math.abs(o-d.x)<r&&l>s&&(h=o-(l-s)/2);const p=1-ar().state.textHeight;return t.insert("rect",":first-child").attr("x",h).attr("y",p).attr("class",n?"alt-composit":"composit").attr("width",u).attr("height",d.height+ar().state.textHeight+ar().state.titleShift+1).attr("rx","0"),c.attr("x",h+r),l<=s&&c.attr("x",o+(u-i)/2-l/2+r),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",3*ar().state.textHeight).attr("rx",ar().state.radius),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",d.height+3+2*ar().state.textHeight).attr("rx",ar().state.radius),t},Lu=(t,e)=>{e.attr("class","state-note");const n=e.append("rect").attr("x",0).attr("y",ar().state.padding),r=e.append("g"),{textWidth:i,textHeight:a}=((t,e,n,r)=>{let i=0;const a=r.append("text");a.style("text-anchor","start"),a.attr("class","noteText");let s=t.replace(/\r\n/g,"<br/>");s=s.replace(/\n/g,"<br/>");const o=s.split(Yt.lineBreakRegex);let c=1.25*ar().state.noteMargin;for(const l of o){const t=l.trim();if(t.length>0){const r=a.append("tspan");r.text(t),0===c&&(c+=r.node().getBBox().height),i+=c,r.attr("x",e+ar().state.noteMargin),r.attr("y",n+i+1.25*ar().state.noteMargin)}}return{textWidth:a.node().getBBox().width,textHeight:i}})(t,0,0,r);return n.attr("height",a+2*ar().state.noteMargin),n.attr("width",i+2*ar().state.noteMargin),n},Bu=function(t,e){const n=e.id,r={id:n,label:e.id,width:0,height:0},i=t.append("g").attr("id",n).attr("class","stateGroup");"start"===e.type&&(t=>{t.append("circle").attr("class","start-state").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit).attr("cy",ar().state.padding+ar().state.sizeUnit)})(i),"end"===e.type&&(t=>{t.append("circle").attr("class","end-state-outer").attr("r",ar().state.sizeUnit+ar().state.miniPadding).attr("cx",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding).attr("cy",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding),t.append("circle").attr("class","end-state-inner").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit+2).attr("cy",ar().state.padding+ar().state.sizeUnit+2)})(i),"fork"!==e.type&&"join"!==e.type||((t,e)=>{let n=ar().state.forkWidth,r=ar().state.forkHeight;if(e.parentId){let t=n;n=r,r=t}t.append("rect").style("stroke","black").style("fill","black").attr("width",n).attr("height",r).attr("x",ar().state.padding).attr("y",ar().state.padding)})(i,e),"note"===e.type&&Lu(e.note.text,i),"divider"===e.type&&(t=>{t.append("line").style("stroke","grey").style("stroke-dasharray","3").attr("x1",ar().state.textHeight).attr("class","divider").attr("x2",2*ar().state.textHeight).attr("y1",0).attr("y2",0)})(i),"default"===e.type&&0===e.descriptions.length&&((t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+2*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),r=n.node().getBBox();t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",r.width+2*ar().state.padding).attr("height",r.height+2*ar().state.padding).attr("rx",ar().state.radius)})(i,e),"default"===e.type&&e.descriptions.length>0&&Su(i,e);const a=i.node().getBBox();return r.width=a.width+2*ar().state.padding,r.height=a.height+2*ar().state.padding,Tu(n,r),r};let Nu=0;let Du;const Ou={},Mu=(t,e,n,r,i,a,s)=>{const c=new ht.k({compound:!0,multigraph:!0});let l,h=!0;for(l=0;l<t.length;l++)if("relation"===t[l].stmt){h=!1;break}n?c.setGraph({rankdir:"LR",multigraph:!0,compound:!0,ranker:"tight-tree",ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,isMultiGraph:!0}):c.setGraph({rankdir:"TB",multigraph:!0,compound:!0,ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,ranker:"tight-tree",isMultiGraph:!0}),c.setDefaultEdgeLabel((function(){return{}})),s.db.extract(t);const u=s.db.getStates(),d=s.db.getRelations(),p=Object.keys(u);for(const o of p){const t=u[o];let l;if(n&&(t.parentId=n),t.doc){let n=e.append("g").attr("id",t.id).attr("class","stateGroup");l=Mu(t.doc,n,t.id,!r,i,a,s);{n=Au(n,t,r);let e=n.node().getBBox();l.width=e.width,l.height=e.height+Du.padding/2,Ou[t.id]={y:Du.compositTitleSize}}}else l=Bu(e,t);if(t.note){const n={descriptions:[],id:t.id+"-note",note:t.note,type:"note"},r=Bu(e,n);"left of"===t.note.position?(c.setNode(l.id+"-note",r),c.setNode(l.id,l)):(c.setNode(l.id,l),c.setNode(l.id+"-note",r)),c.setParent(l.id,l.id+"-group"),c.setParent(l.id+"-note",l.id+"-group")}else c.setNode(l.id,l)}Nt.debug("Count=",c.nodeCount(),c);let f=0;d.forEach((function(t){var e;f++,Nt.debug("Setting edge",t),c.setEdge(t.id1,t.id2,{relation:t,width:(e=t.title,e?e.length*Du.fontSizeFactor:1),height:Du.labelHeight*Yt.getRows(t.title).length,labelpos:"c"},"id"+f)})),(0,lt.bK)(c),Nt.debug("Graph after layout",c.nodes());const g=e.node();c.nodes().forEach((function(t){if(void 0!==t&&void 0!==c.node(t)){Nt.warn("Node "+t+": "+JSON.stringify(c.node(t))),i.select("#"+g.id+" #"+t).attr("transform","translate("+(c.node(t).x-c.node(t).width/2)+","+(c.node(t).y+(Ou[t]?Ou[t].y:0)-c.node(t).height/2)+" )"),i.select("#"+g.id+" #"+t).attr("data-x-shift",c.node(t).x-c.node(t).width/2);a.querySelectorAll("#"+g.id+" #"+t+" .divider").forEach((t=>{const e=t.parentElement;let n=0,r=0;e&&(e.parentElement&&(n=e.parentElement.getBBox().width),r=parseInt(e.getAttribute("data-x-shift"),10),Number.isNaN(r)&&(r=0)),t.setAttribute("x1",0-r+8),t.setAttribute("x2",n-r-8)}))}else Nt.debug("No Node "+t+": "+JSON.stringify(c.node(t)))}));let y=g.getBBox();c.edges().forEach((function(t){void 0!==t&&void 0!==c.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(c.edge(t))),function(t,e,n){e.points=e.points.filter((t=>!Number.isNaN(t.y)));const r=e.points,i=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),a=t.append("path").attr("d",i(r)).attr("id","edge"+Nu).attr("class","transition");let s="";if(ar().state.arrowMarkerAbsolute&&(s=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,s=s.replace(/\(/g,"\\("),s=s.replace(/\)/g,"\\)")),a.attr("marker-end","url("+s+"#"+function(t){switch(t){case Eu.relationType.AGGREGATION:return"aggregation";case Eu.relationType.EXTENSION:return"extension";case Eu.relationType.COMPOSITION:return"composition";case Eu.relationType.DEPENDENCY:return"dependency"}}(Eu.relationType.DEPENDENCY)+"End)"),void 0!==n.title){const r=t.append("g").attr("class","stateLabel"),{x:i,y:a}=Gn.calcLabelPosition(e.points),s=Yt.getRows(n.title);let o=0;const c=[];let l=0,h=0;for(let t=0;t<=s.length;t++){const e=r.append("text").attr("text-anchor","middle").text(s[t]).attr("x",i).attr("y",a+o),n=e.node().getBBox();if(l=Math.max(l,n.width),h=Math.min(h,n.x),Nt.info(n.x,i,a+o),0===o){const t=e.node().getBBox();o=t.height,Nt.info("Title height",o,a)}c.push(e)}let u=o*s.length;if(s.length>1){const t=(s.length-1)*o*.5;c.forEach(((e,n)=>e.attr("y",a+n*o-t))),u=o*s.length}const d=r.node().getBBox();r.insert("rect",":first-child").attr("class","box").attr("x",i-l/2-ar().state.padding/2).attr("y",a-u/2-ar().state.padding/2-3.5).attr("width",l+ar().state.padding).attr("height",u+ar().state.padding),Nt.info(d)}Nu++}(e,c.edge(t),c.edge(t).relation))})),y=g.getBBox();const m={id:n||"root",label:n||"root",width:0,height:0};return m.width=y.width+2*Du.padding,m.height=y.height+2*Du.padding,Nt.debug("Doc rendered",m,c),m},Iu={setConf:function(){},draw:function(t,e,n,r){Du=ar().state;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body"),c="sandbox"===i?a.nodes()[0].contentDocument:document;Nt.debug("Rendering diagram "+t);const l=s.select(`[id='${e}']`);l.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z");new ht.k({multigraph:!0,compound:!0,rankdir:"RL"}).setDefaultEdgeLabel((function(){return{}}));const h=r.db.getRootDoc();Mu(h,l,void 0,!1,s,c,r);const u=Du.padding,d=l.node().getBBox(),p=d.width+2*u,f=d.height+2*u;dr(l,f,1.75*p,Du.useMaxWidth),l.attr("viewBox",`${d.x-Du.padding}  ${d.y-Du.padding} `+p+" "+f)}},Fu="rect",$u="rectWithTitle",Ru="statediagram",Zu="transition",Pu="parent",ju="note",Yu="----parent",zu="fill:none",Uu="fill: #333",Wu="text",qu="normal";let Hu={},Vu=0;function Gu(t="",e=0,n="",r="----"){return`state-${t}${null!==n&&n.length>0?`${r}${n}`:""}-${e}`}const Xu=(t,e,n,r,i,a)=>{const s=n.id,o=null==(c=r[s])?"":c.classes?c.classes.join(" "):"";var c;if("root"!==s){let e=Fu;!0===n.start&&(e="start"),!1===n.start&&(e="end"),n.type!==Qh&&(e=n.type),Hu[s]||(Hu[s]={id:s,shape:e,description:Yt.sanitizeText(s,ar()),classes:`${o} statediagram-state`});const r=Hu[s];n.description&&(Array.isArray(r.description)?(r.shape=$u,r.description.push(n.description)):r.description.length>0?(r.shape=$u,r.description===s?r.description=[n.description]:r.description=[r.description,n.description]):(r.shape=Fu,r.description=n.description),r.description=Yt.sanitizeTextOrArray(r.description,ar())),1===r.description.length&&r.shape===$u&&(r.shape=Fu),!r.type&&n.doc&&(Nt.info("Setting cluster for ",s,Qu(n)),r.type="group",r.dir=Qu(n),r.shape=n.type===Jh?"divider":"roundedWithTitle",r.classes=r.classes+" statediagram-cluster "+(a?"statediagram-cluster-alt":""));const i={labelStyle:"",shape:r.shape,labelText:r.description,classes:r.classes,style:"",id:s,dir:r.dir,domId:Gu(s,Vu),type:r.type,padding:15};if(n.note){const e={labelStyle:"",shape:"note",labelText:n.note.text,classes:"statediagram-note",style:"",id:s+"----note-"+Vu,domId:Gu(s,Vu,ju),type:r.type,padding:15},a={labelStyle:"",shape:"noteGroup",labelText:n.note.text,classes:r.classes,style:"",id:s+Yu,domId:Gu(s,Vu,Pu),type:"group",padding:0};Vu++;const o=s+Yu;t.setNode(o,a),t.setNode(e.id,e),t.setNode(s,i),t.setParent(s,o),t.setParent(e.id,o);let c=s,l=e.id;"left of"===n.note.position&&(c=e.id,l=s),t.setEdge(c,l,{arrowhead:"none",arrowType:"",style:zu,labelStyle:"",classes:"transition note-edge",arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu})}else t.setNode(s,i)}e&&"root"!==e.id&&(Nt.trace("Setting node ",s," to be child of its parent ",e.id),t.setParent(s,e.id)),n.doc&&(Nt.trace("Adding nodes children "),Ku(t,n,n.doc,r,i,!a))},Ku=(t,e,n,r,i,a)=>{Nt.trace("items",n),n.forEach((n=>{switch(n.stmt){case Xh:case Qh:Xu(t,e,n,r,i,a);break;case Kh:{Xu(t,e,n.state1,r,i,a),Xu(t,e,n.state2,r,i,a);const s={id:"edge"+Vu,arrowhead:"normal",arrowTypeEnd:"arrow_barb",style:zu,labelStyle:"",label:Yt.sanitizeText(n.description,ar()),arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu,classes:Zu};t.setEdge(n.state1.id,n.state2.id,s,Vu),Vu++}}}))},Qu=(t,e="TB")=>{let n=e;if(t.doc)for(let r=0;r<t.doc.length;r++){const e=t.doc[r];"dir"===e.stmt&&(n=e.value)}return n},Ju={setConf:function(t){const e=Object.keys(t);for(const n of e)t[n]},getClasses:function(t,e){Nt.trace("Extracting classes"),e.db.clear();try{return e.parser.parse(t),e.db.extract(e.db.getRootDocV2()),e.db.getClasses()}catch(n){return n}},draw:function(t,e,n,r){Nt.info("Drawing state diagram (v2)",e),Hu={};let i=r.db.getDirection();void 0===i&&(i="LR");const{securityLevel:a,state:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;Nt.info(r.db.getRootDocV2()),r.db.extract(r.db.getRootDocV2()),Nt.info(r.db.getRootDocV2());const h=r.db.getStates(),u=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:Qu(r.db.getRootDocV2()),nodesep:c,ranksep:l,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));let d;Xu(u,void 0,r.db.getRootDocV2(),h,r.db,!0),"sandbox"===a&&(d=(0,o.Ys)("#i"+e));const p="sandbox"===a?(0,o.Ys)(d.nodes()[0].contentDocument.body):(0,o.Ys)("body"),f=p.select(`[id="${e}"]`),g=p.select("#"+e+" g");qs(g,u,["barb"],Ru,e);Gn.insertTitle(f,"statediagramTitleText",s.titleTopMargin,r.db.getDiagramTitle());const y=f.node().getBBox(),m=y.width+16,b=y.height+16;f.attr("class",Ru);const _=f.node().getBBox();dr(f,b,m,s.useMaxWidth);const x=`${_.x-8} ${_.y-8} ${m} ${b}`;Nt.debug(`viewBox ${x}`),f.attr("viewBox",x);const v=document.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const o of v){const t=o.getBBox(),e=document.createElementNS("http://www.w3.org/2000/svg",Fu);e.setAttribute("rx",0),e.setAttribute("ry",0),e.setAttribute("width",t.width),e.setAttribute("height",t.height),o.insertBefore(e,o.firstChild)}}};var td=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,17,18,20,22,23,24,26],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,24],d=[4,6,9,11,17,18,20,22,23,24,26],p={trace:function(){},yy:{},symbols_:{error:2,start:3,journey:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,title:17,acc_title:18,acc_title_value:19,acc_descr:20,acc_descr_value:21,acc_descr_multiline_value:22,section:23,taskName:24,taskData:25,open_directive:26,type_directive:27,arg_directive:28,close_directive:29,$accept:0,$end:1},terminals_:{2:"error",4:"journey",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",17:"title",18:"acc_title",19:"acc_title_value",20:"acc_descr",21:"acc_descr_value",22:"acc_descr_multiline_value",23:"section",24:"taskName",25:"taskData",26:"open_directive",27:"type_directive",28:"arg_directive",29:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,2],[10,2],[10,1],[10,1],[10,2],[10,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 11:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 12:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 13:case 14:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 15:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 16:r.addTask(a[o-1],a[o]),this.$="task";break;case 18:r.parseDirective("%%{","open_directive");break;case 19:r.parseDirective(a[o],"type_directive");break;case 20:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 21:r.parseDirective("}%%","close_directive","journey")}},table:[{3:1,4:n,7:3,12:4,26:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,26:r},{13:8,27:[1,9]},{27:[2,18]},{6:[1,10],7:21,8:11,9:[1,12],10:13,11:[1,14],12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},{1:[2,2]},{14:22,15:[1,23],29:u},e([15,29],[2,19]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:21,10:25,12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),{19:[1,26]},{21:[1,27]},e(i,[2,14]),e(i,[2,15]),{25:[1,28]},e(i,[2,17]),{11:[1,29]},{16:30,28:[1,31]},{11:[2,21]},e(i,[2,5]),e(i,[2,12]),e(i,[2,13]),e(i,[2,16]),e(d,[2,9]),{14:32,29:u},{29:[2,20]},{11:[1,33]},e(d,[2,10])],defaultActions:{5:[2,18],7:[2,2],24:[2,21],31:[2,20]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},f=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),26;case 1:return this.begin("type_directive"),27;case 2:return this.popState(),this.begin("arg_directive"),15;case 3:return this.popState(),this.popState(),29;case 4:return 28;case 5:case 6:case 8:case 9:break;case 7:return 11;case 10:return 4;case 11:return 17;case 12:return this.begin("acc_title"),18;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),20;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:return 23;case 20:return 24;case 21:return 25;case 22:return 15;case 23:return 6;case 24:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:journey\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{open_directive:{rules:[1],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,11,12,14,16,19,20,21,22,23,24],inclusive:!0}}},t);function g(){this.yy={}}return p.lexer=f,g.prototype=p,p.Parser=g,new g}();td.parser=td;const ed=td,nd=t=>null!==t.match(/^\s*journey/);let rd="";const id=[],ad=[],sd=[],od=function(){let t=!0;for(const[e,n]of sd.entries())sd[e].processed,t=t&&n.processed;return t},cd={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().journey,clear:function(){id.length=0,ad.length=0,rd="",sd.length=0,Dr()},setDiagramTitle:$r,getDiagramTitle:Rr,setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){rd=t,id.push(t)},getSections:function(){return id},getTasks:function(){let t=od();let e=0;for(;!t&&e<100;)t=od(),e++;return ad.push(...sd),ad},addTask:function(t,e){const n=e.substr(1).split(":");let r=0,i=[];1===n.length?(r=Number(n[0]),i=[]):(r=Number(n[0]),i=n[1].split(","));const a=i.map((t=>t.trim())),s={section:rd,type:rd,people:a,task:t,score:r};sd.push(s)},addTaskOrg:function(t){const e={section:rd,type:rd,description:t,task:t,classes:[]};ad.push(e)},getActors:function(){return function(){const t=[];return ad.forEach((e=>{e.people&&t.push(...e.people)})),[...new Set(t)].sort()}()}},ld=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},hd=function(t,e){const n=t.append("circle");return n.attr("cx",e.cx),n.attr("cy",e.cy),n.attr("class","actor-"+e.pos),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("r",e.r),void 0!==n.class&&n.attr("class",n.class),void 0!==e.title&&n.append("title").text(e.title),n},ud=function(t,e){const n=e.text.replace(/<br\s*\/?>/gi," "),r=t.append("text");r.attr("x",e.x),r.attr("y",e.y),r.attr("class","legend"),r.style("text-anchor",e.anchor),void 0!==e.class&&r.attr("class",e.class);const i=r.append("tspan");return i.attr("x",e.x+2*e.textMargin),i.text(n),r};let dd=-1;const pd=function(){return{x:0,y:0,width:100,anchor:"start",height:100,rx:0,ry:0}},fd=function(){function t(t,e,n,i,a,s,o,c){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("font-color",c).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c,l){const{taskFontSize:h,taskFontFamily:u}=c,d=t.split(/<br\s*\/?>/gi);for(let p=0;p<d.length;p++){const t=p*h-h*(d.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).attr("fill",l).style("text-anchor","middle").style("font-size",h).style("font-family",u);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(d[p]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).attr("position","fixed").append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").attr("class","label").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)n in e&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),gd=hd,yd=function(t,e,n){const r=t.append("g"),i=pd();i.x=e.x,i.y=e.y,i.fill=e.fill,i.width=n.width,i.height=n.height,i.class="journey-section section-type-"+e.num,i.rx=3,i.ry=3,ld(r,i),fd(n)(e.text,r,i.x,i.y,i.width,i.height,{class:"journey-section section-type-"+e.num},n,e.colour)},md=ud,bd=function(t,e,n){const r=e.x+n.width/2,i=t.append("g");dd++;i.append("line").attr("id","task"+dd).attr("x1",r).attr("y1",e.y).attr("x2",r).attr("y2",450).attr("class","task-line").attr("stroke-width","1px").attr("stroke-dasharray","4 2").attr("stroke","#666"),function(t,e){const n=15,r=t.append("circle").attr("cx",e.cx).attr("cy",e.cy).attr("class","face").attr("r",n).attr("stroke-width",2).attr("overflow","visible"),i=t.append("g");i.append("circle").attr("cx",e.cx-5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),i.append("circle").attr("cx",e.cx+5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),e.score>3?function(t){const r=(0,o.Nb1)().startAngle(Math.PI/2).endAngle(Math.PI/2*3).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+2)+")")}(i):e.score<3?function(t){const r=(0,o.Nb1)().startAngle(3*Math.PI/2).endAngle(Math.PI/2*5).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+7)+")")}(i):i.append("line").attr("class","mouth").attr("stroke",2).attr("x1",e.cx-5).attr("y1",e.cy+7).attr("x2",e.cx+5).attr("y2",e.cy+7).attr("class","mouth").attr("stroke-width","1px").attr("stroke","#666")}(i,{cx:r,cy:300+30*(5-e.score),score:e.score});const a=pd();a.x=e.x,a.y=e.y,a.fill=e.fill,a.width=n.width,a.height=n.height,a.class="task task-type-"+e.num,a.rx=3,a.ry=3,ld(i,a);let s=e.x+14;e.people.forEach((t=>{const n=e.actors[t].color,r={cx:s,cy:e.y,r:7,fill:n,stroke:"#000",title:t,pos:e.actors[t].position};hd(i,r),s+=10})),fd(n)(e.task,i,a.x,a.y,a.width,a.height,{class:"task"},n,e.colour)},_d=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",5).attr("refY",2).attr("markerWidth",6).attr("markerHeight",4).attr("orient","auto").append("path").attr("d","M 0,0 V 4 L6,2 Z")},xd={};const vd=ar().journey,kd=vd.leftMargin,wd={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],init:function(){this.sequenceItems=[],this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=ar().journey,a=this;let s=0;var o;this.sequenceItems.forEach((function(c){s++;const l=a.sequenceItems.length-s+1;a.updateVal(c,"starty",e-l*i.boxMargin,Math.min),a.updateVal(c,"stopy",r+l*i.boxMargin,Math.max),a.updateVal(wd.data,"startx",t-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopx",n+l*i.boxMargin,Math.max),"activation"!==o&&(a.updateVal(c,"startx",t-l*i.boxMargin,Math.min),a.updateVal(c,"stopx",n+l*i.boxMargin,Math.max),a.updateVal(wd.data,"starty",e-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopy",r+l*i.boxMargin,Math.max))}))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(wd.data,"startx",i,Math.min),this.updateVal(wd.data,"starty",s,Math.min),this.updateVal(wd.data,"stopx",a,Math.max),this.updateVal(wd.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return this.data}},Ed=vd.sectionFills,Cd=vd.sectionColours,Td=function(t,e,n){const r=ar().journey;let i="";const a=n+(2*r.height+r.diagramMarginY);let s=0,o="#CCC",c="black",l=0;for(const[h,u]of e.entries()){if(i!==u.section){o=Ed[s%Ed.length],l=s%Ed.length,c=Cd[s%Cd.length];const e={x:h*r.taskMargin+h*r.width+kd,y:50,text:u.section,fill:o,num:l,colour:c};yd(t,e,r),i=u.section,s++}const e=u.people.reduce(((t,e)=>(xd[e]&&(t[e]=xd[e]),t)),{});u.x=h*r.taskMargin+h*r.width+kd,u.y=a,u.width=r.diagramMarginX,u.height=r.diagramMarginY,u.colour=c,u.fill=o,u.num=l,u.actors=e,bd(t,u,r),wd.insert(u.x,u.y,u.x+u.width+r.taskMargin,450)}},Sd={setConf:function(t){Object.keys(t).forEach((function(e){vd[e]=t[e]}))},draw:function(t,e,n,r){const i=ar().journey;r.db.clear(),r.parser.parse(t+"\n");const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body");wd.init();const l=c.select("#"+e);_d(l);const h=r.db.getTasks(),u=r.db.getDiagramTitle(),d=r.db.getActors();for(const o in xd)delete xd[o];let p=0;d.forEach((t=>{xd[t]={color:i.actorColours[p%i.actorColours.length],position:p},p++})),function(t){const e=ar().journey;let n=60;Object.keys(xd).forEach((r=>{const i=xd[r].color,a={cx:20,cy:n,r:7,fill:i,stroke:"#000",pos:xd[r].position};gd(t,a);const s={x:40,y:n+7,fill:"#666",text:r,textMargin:5|e.boxTextMargin};md(t,s),n+=20}))}(l),wd.insert(0,0,kd,50*Object.keys(xd).length),Td(l,h,0);const f=wd.getBounds();u&&l.append("text").text(u).attr("x",kd).attr("font-size","4ex").attr("font-weight","bold").attr("y",25);const g=f.stopy-f.starty+2*i.diagramMarginY,y=kd+f.stopx+2*i.diagramMarginX;dr(l,g,y,i.useMaxWidth),l.append("line").attr("x1",kd).attr("y1",4*i.height).attr("x2",y-kd-4).attr("y2",4*i.height).attr("stroke-width",4).attr("stroke","black").attr("marker-end","url(#arrowhead)");const m=u?70:0;l.attr("viewBox",`${f.startx} -25 ${y} ${g+m}`),l.attr("preserveAspectRatio","xMinYMin meet"),l.attr("height",g+m+25)}};let Ad={};const Ld={setConf:function(t){Ad={...Ad,...t}},draw:(t,e,n)=>{try{Nt.debug("Renering svg for syntax error\n");const t=(0,o.Ys)("#"+e),r=t.append("g");r.append("path").attr("class","error-icon").attr("d","m411.313,123.313c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32-9.375,9.375-20.688-20.688c-12.484-12.5-32.766-12.5-45.25,0l-16,16c-1.261,1.261-2.304,2.648-3.31,4.051-21.739-8.561-45.324-13.426-70.065-13.426-105.867,0-192,86.133-192,192s86.133,192 192,192 192-86.133 192-192c0-24.741-4.864-48.327-13.426-70.065 1.402-1.007 2.79-2.049 4.051-3.31l16-16c12.5-12.492 12.5-32.758 0-45.25l-20.688-20.688 9.375-9.375 32.001-31.999zm-219.313,100.687c-52.938,0-96,43.063-96,96 0,8.836-7.164,16-16,16s-16-7.164-16-16c0-70.578 57.422-128 128-128 8.836,0 16,7.164 16,16s-7.164,16-16,16z"),r.append("path").attr("class","error-icon").attr("d","m459.02,148.98c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l16,16c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16.001-16z"),r.append("path").attr("class","error-icon").attr("d","m340.395,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16-16c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l15.999,16z"),r.append("path").attr("class","error-icon").attr("d","m400,64c8.844,0 16-7.164 16-16v-32c0-8.836-7.156-16-16-16-8.844,0-16,7.164-16,16v32c0,8.836 7.156,16 16,16z"),r.append("path").attr("class","error-icon").attr("d","m496,96.586h-32c-8.844,0-16,7.164-16,16 0,8.836 7.156,16 16,16h32c8.844,0 16-7.164 16-16 0-8.836-7.156-16-16-16z"),r.append("path").attr("class","error-icon").attr("d","m436.98,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688l32-32c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32c-6.251,6.25-6.251,16.375-0.001,22.625z"),r.append("text").attr("class","error-text").attr("x",1440).attr("y",250).attr("font-size","150px").style("text-anchor","middle").text("Syntax error in graph"),r.append("text").attr("class","error-text").attr("x",1250).attr("y",400).attr("font-size","100px").style("text-anchor","middle").text("mermaid version "+n),t.attr("height",100),t.attr("width",500),t.attr("viewBox","768 0 912 512")}catch(i){Nt.error("Error while rendering info diagram"),Nt.error((r=i)instanceof Error?r.message:String(r))}var r}},Bd="flowchart-elk",Nd={id:Bd,detector:(t,e)=>{var n;return!!(t.match(/^\s*flowchart-elk/)||t.match(/^\s*flowchart|graph/)&&"elk"===(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer))},loader:async()=>{const{diagram:t}=await n.e(9487).then(n.bind(n,9487));return{id:Bd,diagram:t}}},Dd="timeline",Od={id:Dd,detector:t=>null!==t.match(/^\s*timeline/),loader:async()=>{const{diagram:t}=await n.e(6316).then(n.bind(n,6316));return{id:Dd,diagram:t}}},Md="mindmap",Id={id:Md,detector:t=>null!==t.match(/^\s*mindmap/),loader:async()=>{const{diagram:t}=await n.e(7724).then(n.bind(n,7724));return{id:Md,diagram:t}}};let Fd=!1;const $d=()=>{Fd||(Fd=!0,En(Nd,Od,Id),Kr("error",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{}},init:()=>{}},(t=>"error"===t.toLowerCase().trim())),Kr("---",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{throw new Error("Diagrams beginning with --- are not valid. If you were trying to use a YAML front-matter, please ensure that you've correctly opened and closed the YAML front-matter with unindented `---` blocks")}},init:()=>null},(t=>t.toLowerCase().trimStart().startsWith("---"))),Kr("c4",{parser:Fi,db:Ki,renderer:La,styles:Cr,init:t=>{La.setConf(t.c4)}},$i),Kr("class",{parser:Na,db:Ga,renderer:cs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Da),Kr("classDiagram",{parser:Na,db:Ga,renderer:Xs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Oa),Kr("er",{parser:Qs,db:ro,renderer:yo,styles:gr},Js),Kr("gantt",{parser:Cc,db:il,renderer:ol,styles:br},Tc),Kr("info",{parser:ll,db:dl,renderer:pl,styles:_r},fl),Kr("pie",{parser:yl,db:xl,renderer:El,styles:xr},ml),Kr("requirement",{parser:Tl,db:Ol,renderer:Ul,styles:vr},Sl),Kr("sequence",{parser:ql,db:ph,renderer:Wh,styles:kr,init:t=>{if(t.sequence||(t.sequence={}),t.sequence.arrowMarkerAbsolute=t.arrowMarkerAbsolute,"sequenceDiagram"in t)throw new Error("`mermaid config.sequenceDiagram` has been renamed to `config.sequence`. Please update your mermaid config.");ph.setWrap(t.wrap),Wh.setConf(t.sequence)}},Hl),Kr("state",{parser:Hh,db:Eu,renderer:Iu,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Vh),Kr("stateDiagram",{parser:Hh,db:Eu,renderer:Ju,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Gh),Kr("journey",{parser:ed,db:cd,renderer:Sd,styles:Er,init:t=>{Sd.setConf(t.journey),cd.clear()}},nd),Kr("flowchart",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,_c(t.flowchart),yc.clear(),yc.setGen("gen-1")}},_o),Kr("flowchart-v2",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,ir({flowchart:{arrowMarkerAbsolute:t.arrowMarkerAbsolute}}),wc.setConf(t.flowchart),yc.clear(),yc.setGen("gen-2")}},xo),Kr("gitGraph",{parser:ti,db:bi,renderer:Oi,styles:Mi},ei))};class Rd{constructor(t,e){var n,r;this.txt=t,this.type="graph",this.detectTypeFailed=!1;const i=ar();this.txt=t;try{this.type=wn(t,i)}catch(o){this.handleError(o,e),this.type="error",this.detectTypeFailed=!0}const a=Qr(this.type);Nt.debug("Type "+this.type),this.db=a.db,null==(r=(n=this.db).clear)||r.call(n),this.renderer=a.renderer,this.parser=a.parser;const s=this.parser.parse.bind(this.parser);this.parser.parse=t=>s(function(t,e){var n;const r=t.match(_n);if(r){const i=bn(r[1],{schema:mn});return(null==i?void 0:i.title)&&(null==(n=e.setDiagramTitle)||n.call(e,i.title)),t.slice(r[0].length)}return t}(t,this.db)),this.parser.parser.yy=this.db,a.init&&(a.init(i),Nt.info("Initialized diagram "+this.type,i)),this.txt+="\n",this.parse(this.txt,e)}parse(t,e){var n,r;if(this.detectTypeFailed)return!1;try{return t+="\n",null==(r=(n=this.db).clear)||r.call(n),this.parser.parse(t),!0}catch(i){this.handleError(i,e)}return!1}handleError(t,e){if(void 0===e)throw t;Hn(t)?e(t.str,t.hash):e(t)}getParser(){return this.parser}getType(){return this.type}}const Zd=(t,e)=>{const n=wn(t,ar());try{Qr(n)}catch(r){const i=kn[n].loader;if(!i)throw new Error(`Diagram ${n} not found.`);return i().then((({diagram:r})=>(Kr(n,r,void 0),new Rd(t,e))))}return new Rd(t,e)},Pd=Rd;const jd=["graph","flowchart","flowchart-v2","stateDiagram","stateDiagram-v2"],Yd="graph TB;a[Maximum text size in diagram exceeded];style a fill:#faa",zd="sandbox",Ud="loose",Wd="http://www.w3.org/1999/xlink",qd="http://www.w3.org/1999/xhtml",Hd=["foreignobject"],Vd=["dominant-baseline"];const Gd=function(t){let e=t;return e=e.replace(/style.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/classDef.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/#\w+;/g,(function(t){const e=t.substring(1,t.length-1);return/^\+?\d+$/.test(e)?"\ufb02\xb0\xb0"+e+"\xb6\xdf":"\ufb02\xb0"+e+"\xb6\xdf"})),e},Xd=function(t){let e=t;return e=e.replace(/\ufb02\xb0\xb0/g,"&#"),e=e.replace(/\ufb02\xb0/g,"&"),e=e.replace(/\xb6\xdf/g,";"),e},Kd=(t,e,n=[])=>`\n.${t} ${e} { ${n.join(" !important; ")} !important; }`,Qd=(t,e,n,r)=>{const i=((t,e,n={})=>{var r;let i="";if(void 0!==t.themeCSS&&(i+=`\n${t.themeCSS}`),void 0!==t.fontFamily&&(i+=`\n:root { --mermaid-font-family: ${t.fontFamily}}`),void 0!==t.altFontFamily&&(i+=`\n:root { --mermaid-alt-font-family: ${t.altFontFamily}}`),!(0,Lt.Z)(n)&&jd.includes(e)){const e=["> *","span"],a=["rect","polygon","ellipse","circle","path"],s=t.htmlLabels||(null==(r=t.flowchart)?void 0:r.htmlLabels)?e:a;for(const t in n){const e=n[t];(0,Lt.Z)(e.styles)||s.forEach((t=>{i+=Kd(e.id,t,e.styles)})),(0,Lt.Z)(e.textStyles)||(i+=Kd(e.id,"tspan",e.textStyles))}}return i})(t,e,n);return I(it(`${r}{${Sr(e,i,t.themeVariables)}}`),F)},Jd=(t="",e,n)=>{let r=t;return n||e||(r=r.replace(/marker-end="url\(.*?#/g,'marker-end="url(#')),r=Xd(r),r=r.replace(/<br>/g,"<br/>"),r},tp=(t="",e)=>`<iframe style="width:100%;height:${e?e.viewBox.baseVal.height+"px":"100%"};border:0;margin:0;" src="data:text/html;base64,${btoa('<body style="margin:0">'+t+"</body>")}" sandbox="allow-top-navigation-by-user-activation allow-popups">\n  The "iframe" tag is not supported by your browser.\n</iframe>`,ep=(t,e,n,r,i)=>{const a=t.append("div");a.attr("id",n),r&&a.attr("style",r);const s=a.append("svg").attr("id",e).attr("width","100%").attr("xmlns","http://www.w3.org/2000/svg");return i&&s.attr("xmlns:xlink",i),s.append("g"),t};function np(t,e){return t.append("iframe").attr("id",e).attr("style","width: 100%; height: 100%;").attr("sandbox","")}const rp=(t,e,n,r)=>{var i,a,s;null==(i=t.getElementById(e))||i.remove(),null==(a=t.getElementById(n))||a.remove(),null==(s=t.getElementById(r))||s.remove()};function ip(t,e,n,r){var i,a;a=t,(i=e).attr("role","graphics-document document"),(0,Lt.Z)(a)||i.attr("aria-roledescription",a),function(t,e,n,r){if(void 0!==t.insert&&(e||n)){if(n){const e="chart-desc-"+r;t.attr("aria-describedby",e),t.insert("desc",":first-child").attr("id",e).text(n)}if(e){const n="chart-title-"+r;t.attr("aria-labelledby",n),t.insert("title",":first-child").attr("id",n).text(e)}}}(e,n,r,e.attr("id"))}const ap=Object.freeze({render:function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{if(v=Zd(e),"then"in v)throw new Error("Diagram is a promise. Use renderAsync.")}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},renderAsync:async function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{v=await Zd(e)}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{await v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},parse:function(t,e){return $d(),new Pd(t,e).parse(t,e)},parseAsync:async function(t,e){return $d(),(await Zd(t,e)).parse(t,e)},parseDirective:Yr,initialize:function(t={}){var e;(null==t?void 0:t.fontFamily)&&!(null==(e=t.themeVariables)?void 0:e.fontFamily)&&(t.themeVariables={fontFamily:t.fontFamily}),Qn=Sn({},t),(null==t?void 0:t.theme)&&t.theme in Ht?t.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables):t&&(t.themeVariables=Ht.default.getThemeVariables(t.themeVariables));const n="object"==typeof t?(t=>(Jn=Sn({},Kn),Jn=Sn(Jn,t),t.theme&&Ht[t.theme]&&(Jn.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables)),nr(Jn,tr),Jn))(t):rr();Dt(n.logLevel),$d()},getConfig:ar,setConfig:ir,getSiteConfig:rr,updateSiteConfig:t=>(Jn=Sn(Jn,t),nr(Jn,tr),Jn),reset:()=>{cr()},globalReset:()=>{cr(Kn)},defaultConfig:Kn});Dt(ar().logLevel),cr(ar());const sp=(t,e,n)=>{Nt.warn(t),Hn(t)?(n&&n(t.str,t.hash),e.push({...t,message:t.str,error:t})):(n&&n(t),t instanceof Error&&e.push({str:t.message,message:t.message,hash:t.name,error:t}))},op=async function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{await ap.renderAsync(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},cp=function(){if(dp.startOnLoad){const{startOnLoad:t}=ap.getConfig();t&&dp.init().catch((t=>Nt.error("Mermaid failed to initialize",t)))}};"undefined"!=typeof document&&window.addEventListener("load",cp,!1);const lp=[];let hp=!1;const up=async()=>{if(!hp){for(hp=!0;lp.length>0;){const e=lp.shift();if(e)try{await e()}catch(t){Nt.error("Error executing queue",t)}}hp=!1}},dp={startOnLoad:!0,diagrams:{},mermaidAPI:ap,parse:t=>ap.parse(t,dp.parseError),parseAsync:t=>new Promise(((e,n)=>{lp.push((()=>new Promise(((r,i)=>{ap.parseAsync(t,dp.parseError).then((t=>{r(t),e(t)}),(t=>{Nt.error("Error parsing",t),i(t),n(t)}))})))),up().catch(n)})),render:ap.render,renderAsync:(t,e,n,r)=>new Promise(((i,a)=>{lp.push((()=>new Promise(((s,o)=>{ap.renderAsync(t,e,n,r).then((t=>{s(t),i(t)}),(t=>{Nt.error("Error parsing",t),o(t),a(t)}))})))),up().catch(a)})),init:async function(t,e,n){try{await op(t,e,n)}catch(r){Nt.warn("Syntax Error rendering"),Hn(r)&&Nt.warn(r.str),dp.parseError&&dp.parseError(r)}},initThrowsErrors:function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{ap.render(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},initThrowsErrorsAsync:op,registerExternalDiagrams:async(t,{lazyLoad:e=!0}={})=>{e?En(...t):await(async(...t)=>{Nt.debug(`Loading ${t.length} external diagrams`);const e=(await Promise.allSettled(t.map((async({id:t,detector:e,loader:n})=>{const{diagram:r}=await n();Kr(t,r,e)})))).filter((t=>"rejected"===t.status));if(e.length>0){Nt.error(`Failed to load ${e.length} external diagrams`);for(const t of e)Nt.error(t);throw new Error(`Failed to load ${e.length} external diagrams`)}})(...t)},initialize:function(t){ap.initialize(t)},parseError:void 0,contentLoaded:cp,setParseErrorHandler:function(t){dp.parseError=t}}},7594:(t,e)=>{function n(t){let e,n=[];for(let r of t.split(",").map((t=>t.trim())))if(/^-?\d+$/.test(r))n.push(parseInt(r,10));else if(e=r.match(/^(-?\d+)(-|\.\.\.?|\u2025|\u2026|\u22EF)(-?\d+)$/)){let[t,r,i,a]=e;if(r&&a){r=parseInt(r),a=parseInt(a);const t=r<a?1:-1;"-"!==i&&".."!==i&&"\u2025"!==i||(a+=t);for(let e=r;e!==a;e+=t)n.push(e)}}return n}e.default=n,t.exports=n},9373:(t,e,n)=>{"use strict";function r(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n<r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n<i||void 0===n&&i>=i)&&(n=i)}return n}function i(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n>r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n>i||void 0===n&&i>=i)&&(n=i)}return n}function a(t){return t}n.d(e,{Nb1:()=>ao,LLu:()=>f,F5q:()=>p,$0Z:()=>_o,Dts:()=>vo,WQY:()=>wo,qpX:()=>Co,u93:()=>To,tFB:()=>Ao,YY7:()=>No,OvA:()=>Oo,dCK:()=>Io,zgE:()=>Ro,fGX:()=>Po,$m7:()=>Yo,c_6:()=>co,fxm:()=>Uo,FdL:()=>Qo,ak_:()=>Jo,SxZ:()=>nc,eA_:()=>ic,jsv:()=>sc,iJ:()=>ac,JHv:()=>dr,jvg:()=>uo,Fp7:()=>r,VV$:()=>i,ve8:()=>go,BYU:()=>ai,PKp:()=>di,Xf:()=>As,Ys:()=>Ls,td_:()=>Bs,YPS:()=>Hn,rr1:()=>Li,i$Z:()=>oa,WQD:()=>Si,Z_i:()=>Ci,F0B:()=>Vi,NGh:()=>Oi});var s=1e-6;function o(t){return"translate("+t+",0)"}function c(t){return"translate(0,"+t+")"}function l(t){return e=>+t(e)}function h(t,e){return e=Math.max(0,t.bandwidth()-2*e)/2,t.round()&&(e=Math.round(e)),n=>+t(n)+e}function u(){return!this.__axis}function d(t,e){var n=[],r=null,i=null,d=6,p=6,f=3,g="undefined"!=typeof window&&window.devicePixelRatio>1?0:.5,y=1===t||4===t?-1:1,m=4===t||2===t?"x":"y",b=1===t||3===t?o:c;function _(o){var c=null==r?e.ticks?e.ticks.apply(e,n):e.domain():r,_=null==i?e.tickFormat?e.tickFormat.apply(e,n):a:i,x=Math.max(d,0)+f,v=e.range(),k=+v[0]+g,w=+v[v.length-1]+g,E=(e.bandwidth?h:l)(e.copy(),g),C=o.selection?o.selection():o,T=C.selectAll(".domain").data([null]),S=C.selectAll(".tick").data(c,e).order(),A=S.exit(),L=S.enter().append("g").attr("class","tick"),B=S.select("line"),N=S.select("text");T=T.merge(T.enter().insert("path",".tick").attr("class","domain").attr("stroke","currentColor")),S=S.merge(L),B=B.merge(L.append("line").attr("stroke","currentColor").attr(m+"2",y*d)),N=N.merge(L.append("text").attr("fill","currentColor").attr(m,y*x).attr("dy",1===t?"0em":3===t?"0.71em":"0.32em")),o!==C&&(T=T.transition(o),S=S.transition(o),B=B.transition(o),N=N.transition(o),A=A.transition(o).attr("opacity",s).attr("transform",(function(t){return isFinite(t=E(t))?b(t+g):this.getAttribute("transform")})),L.attr("opacity",s).attr("transform",(function(t){var e=this.parentNode.__axis;return b((e&&isFinite(e=e(t))?e:E(t))+g)}))),A.remove(),T.attr("d",4===t||2===t?p?"M"+y*p+","+k+"H"+g+"V"+w+"H"+y*p:"M"+g+","+k+"V"+w:p?"M"+k+","+y*p+"V"+g+"H"+w+"V"+y*p:"M"+k+","+g+"H"+w),S.attr("opacity",1).attr("transform",(function(t){return b(E(t)+g)})),B.attr(m+"2",y*d),N.attr(m,y*x).text(_),C.filter(u).attr("fill","none").attr("font-size",10).attr("font-family","sans-serif").attr("text-anchor",2===t?"start":4===t?"end":"middle"),C.each((function(){this.__axis=E}))}return _.scale=function(t){return arguments.length?(e=t,_):e},_.ticks=function(){return n=Array.from(arguments),_},_.tickArguments=function(t){return arguments.length?(n=null==t?[]:Array.from(t),_):n.slice()},_.tickValues=function(t){return arguments.length?(r=null==t?null:Array.from(t),_):r&&r.slice()},_.tickFormat=function(t){return arguments.length?(i=t,_):i},_.tickSize=function(t){return arguments.length?(d=p=+t,_):d},_.tickSizeInner=function(t){return arguments.length?(d=+t,_):d},_.tickSizeOuter=function(t){return arguments.length?(p=+t,_):p},_.tickPadding=function(t){return arguments.length?(f=+t,_):f},_.offset=function(t){return arguments.length?(g=+t,_):g},_}function p(t){return d(1,t)}function f(t){return d(3,t)}function g(){}function y(t){return null==t?g:function(){return this.querySelector(t)}}function m(t){return null==t?[]:Array.isArray(t)?t:Array.from(t)}function b(){return[]}function _(t){return null==t?b:function(){return this.querySelectorAll(t)}}function x(t){return function(){return this.matches(t)}}function v(t){return function(e){return e.matches(t)}}var k=Array.prototype.find;function w(){return this.firstElementChild}var E=Array.prototype.filter;function C(){return Array.from(this.children)}function T(t){return new Array(t.length)}function S(t,e){this.ownerDocument=t.ownerDocument,this.namespaceURI=t.namespaceURI,this._next=null,this._parent=t,this.__data__=e}function A(t){return function(){return t}}function L(t,e,n,r,i,a){for(var s,o=0,c=e.length,l=a.length;o<l;++o)(s=e[o])?(s.__data__=a[o],r[o]=s):n[o]=new S(t,a[o]);for(;o<c;++o)(s=e[o])&&(i[o]=s)}function B(t,e,n,r,i,a,s){var o,c,l,h=new Map,u=e.length,d=a.length,p=new Array(u);for(o=0;o<u;++o)(c=e[o])&&(p[o]=l=s.call(c,c.__data__,o,e)+"",h.has(l)?i[o]=c:h.set(l,c));for(o=0;o<d;++o)l=s.call(t,a[o],o,a)+"",(c=h.get(l))?(r[o]=c,c.__data__=a[o],h.delete(l)):n[o]=new S(t,a[o]);for(o=0;o<u;++o)(c=e[o])&&h.get(p[o])===c&&(i[o]=c)}function N(t){return t.__data__}function D(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function O(t,e){return t<e?-1:t>e?1:t>=e?0:NaN}S.prototype={constructor:S,appendChild:function(t){return this._parent.insertBefore(t,this._next)},insertBefore:function(t,e){return this._parent.insertBefore(t,e)},querySelector:function(t){return this._parent.querySelector(t)},querySelectorAll:function(t){return this._parent.querySelectorAll(t)}};var M="http://www.w3.org/1999/xhtml";const I={svg:"http://www.w3.org/2000/svg",xhtml:M,xlink:"http://www.w3.org/1999/xlink",xml:"http://www.w3.org/XML/1998/namespace",xmlns:"http://www.w3.org/2000/xmlns/"};function F(t){var e=t+="",n=e.indexOf(":");return n>=0&&"xmlns"!==(e=t.slice(0,n))&&(t=t.slice(n+1)),I.hasOwnProperty(e)?{space:I[e],local:t}:t}function $(t){return function(){this.removeAttribute(t)}}function R(t){return function(){this.removeAttributeNS(t.space,t.local)}}function Z(t,e){return function(){this.setAttribute(t,e)}}function P(t,e){return function(){this.setAttributeNS(t.space,t.local,e)}}function j(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttribute(t):this.setAttribute(t,n)}}function Y(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttributeNS(t.space,t.local):this.setAttributeNS(t.space,t.local,n)}}function z(t){return t.ownerDocument&&t.ownerDocument.defaultView||t.document&&t||t.defaultView}function U(t){return function(){this.style.removeProperty(t)}}function W(t,e,n){return function(){this.style.setProperty(t,e,n)}}function q(t,e,n){return function(){var r=e.apply(this,arguments);null==r?this.style.removeProperty(t):this.style.setProperty(t,r,n)}}function H(t,e){return t.style.getPropertyValue(e)||z(t).getComputedStyle(t,null).getPropertyValue(e)}function V(t){return function(){delete this[t]}}function G(t,e){return function(){this[t]=e}}function X(t,e){return function(){var n=e.apply(this,arguments);null==n?delete this[t]:this[t]=n}}function K(t){return t.trim().split(/^|\s+/)}function Q(t){return t.classList||new J(t)}function J(t){this._node=t,this._names=K(t.getAttribute("class")||"")}function tt(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.add(e[r])}function et(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.remove(e[r])}function nt(t){return function(){tt(this,t)}}function rt(t){return function(){et(this,t)}}function it(t,e){return function(){(e.apply(this,arguments)?tt:et)(this,t)}}function at(){this.textContent=""}function st(t){return function(){this.textContent=t}}function ot(t){return function(){var e=t.apply(this,arguments);this.textContent=null==e?"":e}}function ct(){this.innerHTML=""}function lt(t){return function(){this.innerHTML=t}}function ht(t){return function(){var e=t.apply(this,arguments);this.innerHTML=null==e?"":e}}function ut(){this.nextSibling&&this.parentNode.appendChild(this)}function dt(){this.previousSibling&&this.parentNode.insertBefore(this,this.parentNode.firstChild)}function pt(t){return function(){var e=this.ownerDocument,n=this.namespaceURI;return n===M&&e.documentElement.namespaceURI===M?e.createElement(t):e.createElementNS(n,t)}}function ft(t){return function(){return this.ownerDocument.createElementNS(t.space,t.local)}}function gt(t){var e=F(t);return(e.local?ft:pt)(e)}function yt(){return null}function mt(){var t=this.parentNode;t&&t.removeChild(this)}function bt(){var t=this.cloneNode(!1),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function _t(){var t=this.cloneNode(!0),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function xt(t){return t.trim().split(/^|\s+/).map((function(t){var e="",n=t.indexOf(".");return n>=0&&(e=t.slice(n+1),t=t.slice(0,n)),{type:t,name:e}}))}function vt(t){return function(){var e=this.__on;if(e){for(var n,r=0,i=-1,a=e.length;r<a;++r)n=e[r],t.type&&n.type!==t.type||n.name!==t.name?e[++i]=n:this.removeEventListener(n.type,n.listener,n.options);++i?e.length=i:delete this.__on}}}function kt(t,e,n){return function(){var r,i=this.__on,a=function(t){return function(e){t.call(this,e,this.__data__)}}(e);if(i)for(var s=0,o=i.length;s<o;++s)if((r=i[s]).type===t.type&&r.name===t.name)return this.removeEventListener(r.type,r.listener,r.options),this.addEventListener(r.type,r.listener=a,r.options=n),void(r.value=e);this.addEventListener(t.type,a,n),r={type:t.type,name:t.name,value:e,listener:a,options:n},i?i.push(r):this.__on=[r]}}function wt(t,e,n){var r=z(t),i=r.CustomEvent;"function"==typeof i?i=new i(e,n):(i=r.document.createEvent("Event"),n?(i.initEvent(e,n.bubbles,n.cancelable),i.detail=n.detail):i.initEvent(e,!1,!1)),t.dispatchEvent(i)}function Et(t,e){return function(){return wt(this,t,e)}}function Ct(t,e){return function(){return wt(this,t,e.apply(this,arguments))}}J.prototype={add:function(t){this._names.indexOf(t)<0&&(this._names.push(t),this._node.setAttribute("class",this._names.join(" ")))},remove:function(t){var e=this._names.indexOf(t);e>=0&&(this._names.splice(e,1),this._node.setAttribute("class",this._names.join(" ")))},contains:function(t){return this._names.indexOf(t)>=0}};var Tt=[null];function St(t,e){this._groups=t,this._parents=e}function At(){return new St([[document.documentElement]],Tt)}St.prototype=At.prototype={constructor:St,select:function(t){"function"!=typeof t&&(t=y(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s,o=e[i],c=o.length,l=r[i]=new Array(c),h=0;h<c;++h)(a=o[h])&&(s=t.call(a,a.__data__,h,o))&&("__data__"in a&&(s.__data__=a.__data__),l[h]=s);return new St(r,this._parents)},selectAll:function(t){t="function"==typeof t?function(t){return function(){return m(t.apply(this,arguments))}}(t):_(t);for(var e=this._groups,n=e.length,r=[],i=[],a=0;a<n;++a)for(var s,o=e[a],c=o.length,l=0;l<c;++l)(s=o[l])&&(r.push(t.call(s,s.__data__,l,o)),i.push(s));return new St(r,i)},selectChild:function(t){return this.select(null==t?w:function(t){return function(){return k.call(this.children,t)}}("function"==typeof t?t:v(t)))},selectChildren:function(t){return this.selectAll(null==t?C:function(t){return function(){return E.call(this.children,t)}}("function"==typeof t?t:v(t)))},filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new St(r,this._parents)},data:function(t,e){if(!arguments.length)return Array.from(this,N);var n=e?B:L,r=this._parents,i=this._groups;"function"!=typeof t&&(t=A(t));for(var a=i.length,s=new Array(a),o=new Array(a),c=new Array(a),l=0;l<a;++l){var h=r[l],u=i[l],d=u.length,p=D(t.call(h,h&&h.__data__,l,r)),f=p.length,g=o[l]=new Array(f),y=s[l]=new Array(f),m=c[l]=new Array(d);n(h,u,g,y,m,p,e);for(var b,_,x=0,v=0;x<f;++x)if(b=g[x]){for(x>=v&&(v=x+1);!(_=y[v])&&++v<f;);b._next=_||null}}return(s=new St(s,r))._enter=o,s._exit=c,s},enter:function(){return new St(this._enter||this._groups.map(T),this._parents)},exit:function(){return new St(this._exit||this._groups.map(T),this._parents)},join:function(t,e,n){var r=this.enter(),i=this,a=this.exit();return"function"==typeof t?(r=t(r))&&(r=r.selection()):r=r.append(t+""),null!=e&&(i=e(i))&&(i=i.selection()),null==n?a.remove():n(a),r&&i?r.merge(i).order():i},merge:function(t){for(var e=t.selection?t.selection():t,n=this._groups,r=e._groups,i=n.length,a=r.length,s=Math.min(i,a),o=new Array(i),c=0;c<s;++c)for(var l,h=n[c],u=r[c],d=h.length,p=o[c]=new Array(d),f=0;f<d;++f)(l=h[f]||u[f])&&(p[f]=l);for(;c<i;++c)o[c]=n[c];return new St(o,this._parents)},selection:function(){return this},order:function(){for(var t=this._groups,e=-1,n=t.length;++e<n;)for(var r,i=t[e],a=i.length-1,s=i[a];--a>=0;)(r=i[a])&&(s&&4^r.compareDocumentPosition(s)&&s.parentNode.insertBefore(r,s),s=r);return this},sort:function(t){function e(e,n){return e&&n?t(e.__data__,n.__data__):!e-!n}t||(t=O);for(var n=this._groups,r=n.length,i=new Array(r),a=0;a<r;++a){for(var s,o=n[a],c=o.length,l=i[a]=new Array(c),h=0;h<c;++h)(s=o[h])&&(l[h]=s);l.sort(e)}return new St(i,this._parents).order()},call:function(){var t=arguments[0];return arguments[0]=this,t.apply(null,arguments),this},nodes:function(){return Array.from(this)},node:function(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r=t[e],i=0,a=r.length;i<a;++i){var s=r[i];if(s)return s}return null},size:function(){let t=0;for(const e of this)++t;return t},empty:function(){return!this.node()},each:function(t){for(var e=this._groups,n=0,r=e.length;n<r;++n)for(var i,a=e[n],s=0,o=a.length;s<o;++s)(i=a[s])&&t.call(i,i.__data__,s,a);return this},attr:function(t,e){var n=F(t);if(arguments.length<2){var r=this.node();return n.local?r.getAttributeNS(n.space,n.local):r.getAttribute(n)}return this.each((null==e?n.local?R:$:"function"==typeof e?n.local?Y:j:n.local?P:Z)(n,e))},style:function(t,e,n){return arguments.length>1?this.each((null==e?U:"function"==typeof e?q:W)(t,e,null==n?"":n)):H(this.node(),t)},property:function(t,e){return arguments.length>1?this.each((null==e?V:"function"==typeof e?X:G)(t,e)):this.node()[t]},classed:function(t,e){var n=K(t+"");if(arguments.length<2){for(var r=Q(this.node()),i=-1,a=n.length;++i<a;)if(!r.contains(n[i]))return!1;return!0}return this.each(("function"==typeof e?it:e?nt:rt)(n,e))},text:function(t){return arguments.length?this.each(null==t?at:("function"==typeof t?ot:st)(t)):this.node().textContent},html:function(t){return arguments.length?this.each(null==t?ct:("function"==typeof t?ht:lt)(t)):this.node().innerHTML},raise:function(){return this.each(ut)},lower:function(){return this.each(dt)},append:function(t){var e="function"==typeof t?t:gt(t);return this.select((function(){return this.appendChild(e.apply(this,arguments))}))},insert:function(t,e){var n="function"==typeof t?t:gt(t),r=null==e?yt:"function"==typeof e?e:y(e);return this.select((function(){return this.insertBefore(n.apply(this,arguments),r.apply(this,arguments)||null)}))},remove:function(){return this.each(mt)},clone:function(t){return this.select(t?_t:bt)},datum:function(t){return arguments.length?this.property("__data__",t):this.node().__data__},on:function(t,e,n){var r,i,a=xt(t+""),s=a.length;if(!(arguments.length<2)){for(o=e?kt:vt,r=0;r<s;++r)this.each(o(a[r],e,n));return this}var o=this.node().__on;if(o)for(var c,l=0,h=o.length;l<h;++l)for(r=0,c=o[l];r<s;++r)if((i=a[r]).type===c.type&&i.name===c.name)return c.value},dispatch:function(t,e){return this.each(("function"==typeof e?Ct:Et)(t,e))},[Symbol.iterator]:function*(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r,i=t[e],a=0,s=i.length;a<s;++a)(r=i[a])&&(yield r)}};const Lt=At;var Bt={value:()=>{}};function Nt(){for(var t,e=0,n=arguments.length,r={};e<n;++e){if(!(t=arguments[e]+"")||t in r||/[\s.]/.test(t))throw new Error("illegal type: "+t);r[t]=[]}return new Dt(r)}function Dt(t){this._=t}function Ot(t,e){return t.trim().split(/^|\s+/).map((function(t){var n="",r=t.indexOf(".");if(r>=0&&(n=t.slice(r+1),t=t.slice(0,r)),t&&!e.hasOwnProperty(t))throw new Error("unknown type: "+t);return{type:t,name:n}}))}function Mt(t,e){for(var n,r=0,i=t.length;r<i;++r)if((n=t[r]).name===e)return n.value}function It(t,e,n){for(var r=0,i=t.length;r<i;++r)if(t[r].name===e){t[r]=Bt,t=t.slice(0,r).concat(t.slice(r+1));break}return null!=n&&t.push({name:e,value:n}),t}Dt.prototype=Nt.prototype={constructor:Dt,on:function(t,e){var n,r=this._,i=Ot(t+"",r),a=-1,s=i.length;if(!(arguments.length<2)){if(null!=e&&"function"!=typeof e)throw new Error("invalid callback: "+e);for(;++a<s;)if(n=(t=i[a]).type)r[n]=It(r[n],t.name,e);else if(null==e)for(n in r)r[n]=It(r[n],t.name,null);return this}for(;++a<s;)if((n=(t=i[a]).type)&&(n=Mt(r[n],t.name)))return n},copy:function(){var t={},e=this._;for(var n in e)t[n]=e[n].slice();return new Dt(t)},call:function(t,e){if((n=arguments.length-2)>0)for(var n,r,i=new Array(n),a=0;a<n;++a)i[a]=arguments[a+2];if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(a=0,n=(r=this._[t]).length;a<n;++a)r[a].value.apply(e,i)},apply:function(t,e,n){if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(var r=this._[t],i=0,a=r.length;i<a;++i)r[i].value.apply(e,n)}};const Ft=Nt;var $t,Rt,Zt=0,Pt=0,jt=0,Yt=0,zt=0,Ut=0,Wt="object"==typeof performance&&performance.now?performance:Date,qt="object"==typeof window&&window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(t){setTimeout(t,17)};function Ht(){return zt||(qt(Vt),zt=Wt.now()+Ut)}function Vt(){zt=0}function Gt(){this._call=this._time=this._next=null}function Xt(t,e,n){var r=new Gt;return r.restart(t,e,n),r}function Kt(){zt=(Yt=Wt.now())+Ut,Zt=Pt=0;try{!function(){Ht(),++Zt;for(var t,e=$t;e;)(t=zt-e._time)>=0&&e._call.call(void 0,t),e=e._next;--Zt}()}finally{Zt=0,function(){var t,e,n=$t,r=1/0;for(;n;)n._call?(r>n._time&&(r=n._time),t=n,n=n._next):(e=n._next,n._next=null,n=t?t._next=e:$t=e);Rt=t,Jt(r)}(),zt=0}}function Qt(){var t=Wt.now(),e=t-Yt;e>1e3&&(Ut-=e,Yt=t)}function Jt(t){Zt||(Pt&&(Pt=clearTimeout(Pt)),t-zt>24?(t<1/0&&(Pt=setTimeout(Kt,t-Wt.now()-Ut)),jt&&(jt=clearInterval(jt))):(jt||(Yt=Wt.now(),jt=setInterval(Qt,1e3)),Zt=1,qt(Kt)))}function te(t,e,n){var r=new Gt;return e=null==e?0:+e,r.restart((n=>{r.stop(),t(n+e)}),e,n),r}Gt.prototype=Xt.prototype={constructor:Gt,restart:function(t,e,n){if("function"!=typeof t)throw new TypeError("callback is not a function");n=(null==n?Ht():+n)+(null==e?0:+e),this._next||Rt===this||(Rt?Rt._next=this:$t=this,Rt=this),this._call=t,this._time=n,Jt()},stop:function(){this._call&&(this._call=null,this._time=1/0,Jt())}};var ee=Ft("start","end","cancel","interrupt"),ne=[];function re(t,e,n,r,i,a){var s=t.__transition;if(s){if(n in s)return}else t.__transition={};!function(t,e,n){var r,i=t.__transition;function a(t){n.state=1,n.timer.restart(s,n.delay,n.time),n.delay<=t&&s(t-n.delay)}function s(a){var l,h,u,d;if(1!==n.state)return c();for(l in i)if((d=i[l]).name===n.name){if(3===d.state)return te(s);4===d.state?(d.state=6,d.timer.stop(),d.on.call("interrupt",t,t.__data__,d.index,d.group),delete i[l]):+l<e&&(d.state=6,d.timer.stop(),d.on.call("cancel",t,t.__data__,d.index,d.group),delete i[l])}if(te((function(){3===n.state&&(n.state=4,n.timer.restart(o,n.delay,n.time),o(a))})),n.state=2,n.on.call("start",t,t.__data__,n.index,n.group),2===n.state){for(n.state=3,r=new Array(u=n.tween.length),l=0,h=-1;l<u;++l)(d=n.tween[l].value.call(t,t.__data__,n.index,n.group))&&(r[++h]=d);r.length=h+1}}function o(e){for(var i=e<n.duration?n.ease.call(null,e/n.duration):(n.timer.restart(c),n.state=5,1),a=-1,s=r.length;++a<s;)r[a].call(t,i);5===n.state&&(n.on.call("end",t,t.__data__,n.index,n.group),c())}function c(){for(var r in n.state=6,n.timer.stop(),delete i[e],i)return;delete t.__transition}i[e]=n,n.timer=Xt(a,0,n.time)}(t,n,{name:e,index:r,group:i,on:ee,tween:ne,time:a.time,delay:a.delay,duration:a.duration,ease:a.ease,timer:null,state:0})}function ie(t,e){var n=se(t,e);if(n.state>0)throw new Error("too late; already scheduled");return n}function ae(t,e){var n=se(t,e);if(n.state>3)throw new Error("too late; already running");return n}function se(t,e){var n=t.__transition;if(!n||!(n=n[e]))throw new Error("transition not found");return n}function oe(t,e){return t=+t,e=+e,function(n){return t*(1-n)+e*n}}var ce,le=180/Math.PI,he={translateX:0,translateY:0,rotate:0,skewX:0,scaleX:1,scaleY:1};function ue(t,e,n,r,i,a){var s,o,c;return(s=Math.sqrt(t*t+e*e))&&(t/=s,e/=s),(c=t*n+e*r)&&(n-=t*c,r-=e*c),(o=Math.sqrt(n*n+r*r))&&(n/=o,r/=o,c/=o),t*r<e*n&&(t=-t,e=-e,c=-c,s=-s),{translateX:i,translateY:a,rotate:Math.atan2(e,t)*le,skewX:Math.atan(c)*le,scaleX:s,scaleY:o}}function de(t,e,n,r){function i(t){return t.length?t.pop()+" ":""}return function(a,s){var o=[],c=[];return a=t(a),s=t(s),function(t,r,i,a,s,o){if(t!==i||r!==a){var c=s.push("translate(",null,e,null,n);o.push({i:c-4,x:oe(t,i)},{i:c-2,x:oe(r,a)})}else(i||a)&&s.push("translate("+i+e+a+n)}(a.translateX,a.translateY,s.translateX,s.translateY,o,c),function(t,e,n,a){t!==e?(t-e>180?e+=360:e-t>180&&(t+=360),a.push({i:n.push(i(n)+"rotate(",null,r)-2,x:oe(t,e)})):e&&n.push(i(n)+"rotate("+e+r)}(a.rotate,s.rotate,o,c),function(t,e,n,a){t!==e?a.push({i:n.push(i(n)+"skewX(",null,r)-2,x:oe(t,e)}):e&&n.push(i(n)+"skewX("+e+r)}(a.skewX,s.skewX,o,c),function(t,e,n,r,a,s){if(t!==n||e!==r){var o=a.push(i(a)+"scale(",null,",",null,")");s.push({i:o-4,x:oe(t,n)},{i:o-2,x:oe(e,r)})}else 1===n&&1===r||a.push(i(a)+"scale("+n+","+r+")")}(a.scaleX,a.scaleY,s.scaleX,s.scaleY,o,c),a=s=null,function(t){for(var e,n=-1,r=c.length;++n<r;)o[(e=c[n]).i]=e.x(t);return o.join("")}}}var pe=de((function(t){const e=new("function"==typeof DOMMatrix?DOMMatrix:WebKitCSSMatrix)(t+"");return e.isIdentity?he:ue(e.a,e.b,e.c,e.d,e.e,e.f)}),"px, ","px)","deg)"),fe=de((function(t){return null==t?he:(ce||(ce=document.createElementNS("http://www.w3.org/2000/svg","g")),ce.setAttribute("transform",t),(t=ce.transform.baseVal.consolidate())?ue((t=t.matrix).a,t.b,t.c,t.d,t.e,t.f):he)}),", ",")",")");function ge(t,e){var n,r;return function(){var i=ae(this,t),a=i.tween;if(a!==n)for(var s=0,o=(r=n=a).length;s<o;++s)if(r[s].name===e){(r=r.slice()).splice(s,1);break}i.tween=r}}function ye(t,e,n){var r,i;if("function"!=typeof n)throw new Error;return function(){var a=ae(this,t),s=a.tween;if(s!==r){i=(r=s).slice();for(var o={name:e,value:n},c=0,l=i.length;c<l;++c)if(i[c].name===e){i[c]=o;break}c===l&&i.push(o)}a.tween=i}}function me(t,e,n){var r=t._id;return t.each((function(){var t=ae(this,r);(t.value||(t.value={}))[e]=n.apply(this,arguments)})),function(t){return se(t,r).value[e]}}function be(t,e,n){t.prototype=e.prototype=n,n.constructor=t}function _e(t,e){var n=Object.create(t.prototype);for(var r in e)n[r]=e[r];return n}function xe(){}var ve=.7,ke=1/ve,we="\\s*([+-]?\\d+)\\s*",Ee="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)\\s*",Ce="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)%\\s*",Te=/^#([0-9a-f]{3,8})$/,Se=new RegExp(`^rgb\\(${we},${we},${we}\\)$`),Ae=new RegExp(`^rgb\\(${Ce},${Ce},${Ce}\\)$`),Le=new RegExp(`^rgba\\(${we},${we},${we},${Ee}\\)$`),Be=new RegExp(`^rgba\\(${Ce},${Ce},${Ce},${Ee}\\)$`),Ne=new RegExp(`^hsl\\(${Ee},${Ce},${Ce}\\)$`),De=new RegExp(`^hsla\\(${Ee},${Ce},${Ce},${Ee}\\)$`),Oe={aliceblue:15792383,antiquewhite:16444375,aqua:65535,aquamarine:8388564,azure:15794175,beige:16119260,bisque:16770244,black:0,blanchedalmond:16772045,blue:255,blueviolet:9055202,brown:10824234,burlywood:14596231,cadetblue:6266528,chartreuse:8388352,chocolate:13789470,coral:16744272,cornflowerblue:6591981,cornsilk:16775388,crimson:14423100,cyan:65535,darkblue:139,darkcyan:35723,darkgoldenrod:12092939,darkgray:11119017,darkgreen:25600,darkgrey:11119017,darkkhaki:12433259,darkmagenta:9109643,darkolivegreen:5597999,darkorange:16747520,darkorchid:10040012,darkred:9109504,darksalmon:15308410,darkseagreen:9419919,darkslateblue:4734347,darkslategray:3100495,darkslategrey:3100495,darkturquoise:52945,darkviolet:9699539,deeppink:16716947,deepskyblue:49151,dimgray:6908265,dimgrey:6908265,dodgerblue:2003199,firebrick:11674146,floralwhite:16775920,forestgreen:2263842,fuchsia:16711935,gainsboro:14474460,ghostwhite:16316671,gold:16766720,goldenrod:14329120,gray:8421504,green:32768,greenyellow:11403055,grey:8421504,honeydew:15794160,hotpink:16738740,indianred:13458524,indigo:4915330,ivory:16777200,khaki:15787660,lavender:15132410,lavenderblush:16773365,lawngreen:8190976,lemonchiffon:16775885,lightblue:11393254,lightcoral:15761536,lightcyan:14745599,lightgoldenrodyellow:16448210,lightgray:13882323,lightgreen:9498256,lightgrey:13882323,lightpink:16758465,lightsalmon:16752762,lightseagreen:2142890,lightskyblue:8900346,lightslategray:7833753,lightslategrey:7833753,lightsteelblue:11584734,lightyellow:16777184,lime:65280,limegreen:3329330,linen:16445670,magenta:16711935,maroon:8388608,mediumaquamarine:6737322,mediumblue:205,mediumorchid:12211667,mediumpurple:9662683,mediumseagreen:3978097,mediumslateblue:8087790,mediumspringgreen:64154,mediumturquoise:4772300,mediumvioletred:13047173,midnightblue:1644912,mintcream:16121850,mistyrose:16770273,moccasin:16770229,navajowhite:16768685,navy:128,oldlace:16643558,olive:8421376,olivedrab:7048739,orange:16753920,orangered:16729344,orchid:14315734,palegoldenrod:15657130,palegreen:10025880,paleturquoise:11529966,palevioletred:14381203,papayawhip:16773077,peachpuff:16767673,peru:13468991,pink:16761035,plum:14524637,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateblue:6970061,slategray:7372944,slategrey:7372944,snow:16775930,springgreen:65407,steelblue:4620980,tan:13808780,teal:32896,thistle:14204888,tomato:16737095,turquoise:4251856,violet:15631086,wheat:16113331,white:16777215,whitesmoke:16119285,yellow:16776960,yellowgreen:10145074};function Me(){return this.rgb().formatHex()}function Ie(){return this.rgb().formatRgb()}function Fe(t){var e,n;return t=(t+"").trim().toLowerCase(),(e=Te.exec(t))?(n=e[1].length,e=parseInt(e[1],16),6===n?$e(e):3===n?new je(e>>8&15|e>>4&240,e>>4&15|240&e,(15&e)<<4|15&e,1):8===n?Re(e>>24&255,e>>16&255,e>>8&255,(255&e)/255):4===n?Re(e>>12&15|e>>8&240,e>>8&15|e>>4&240,e>>4&15|240&e,((15&e)<<4|15&e)/255):null):(e=Se.exec(t))?new je(e[1],e[2],e[3],1):(e=Ae.exec(t))?new je(255*e[1]/100,255*e[2]/100,255*e[3]/100,1):(e=Le.exec(t))?Re(e[1],e[2],e[3],e[4]):(e=Be.exec(t))?Re(255*e[1]/100,255*e[2]/100,255*e[3]/100,e[4]):(e=Ne.exec(t))?He(e[1],e[2]/100,e[3]/100,1):(e=De.exec(t))?He(e[1],e[2]/100,e[3]/100,e[4]):Oe.hasOwnProperty(t)?$e(Oe[t]):"transparent"===t?new je(NaN,NaN,NaN,0):null}function $e(t){return new je(t>>16&255,t>>8&255,255&t,1)}function Re(t,e,n,r){return r<=0&&(t=e=n=NaN),new je(t,e,n,r)}function Ze(t){return t instanceof xe||(t=Fe(t)),t?new je((t=t.rgb()).r,t.g,t.b,t.opacity):new je}function Pe(t,e,n,r){return 1===arguments.length?Ze(t):new je(t,e,n,null==r?1:r)}function je(t,e,n,r){this.r=+t,this.g=+e,this.b=+n,this.opacity=+r}function Ye(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}`}function ze(){const t=Ue(this.opacity);return`${1===t?"rgb(":"rgba("}${We(this.r)}, ${We(this.g)}, ${We(this.b)}${1===t?")":`, ${t})`}`}function Ue(t){return isNaN(t)?1:Math.max(0,Math.min(1,t))}function We(t){return Math.max(0,Math.min(255,Math.round(t)||0))}function qe(t){return((t=We(t))<16?"0":"")+t.toString(16)}function He(t,e,n,r){return r<=0?t=e=n=NaN:n<=0||n>=1?t=e=NaN:e<=0&&(t=NaN),new Ge(t,e,n,r)}function Ve(t){if(t instanceof Ge)return new Ge(t.h,t.s,t.l,t.opacity);if(t instanceof xe||(t=Fe(t)),!t)return new Ge;if(t instanceof Ge)return t;var e=(t=t.rgb()).r/255,n=t.g/255,r=t.b/255,i=Math.min(e,n,r),a=Math.max(e,n,r),s=NaN,o=a-i,c=(a+i)/2;return o?(s=e===a?(n-r)/o+6*(n<r):n===a?(r-e)/o+2:(e-n)/o+4,o/=c<.5?a+i:2-a-i,s*=60):o=c>0&&c<1?0:s,new Ge(s,o,c,t.opacity)}function Ge(t,e,n,r){this.h=+t,this.s=+e,this.l=+n,this.opacity=+r}function Xe(t){return(t=(t||0)%360)<0?t+360:t}function Ke(t){return Math.max(0,Math.min(1,t||0))}function Qe(t,e,n){return 255*(t<60?e+(n-e)*t/60:t<180?n:t<240?e+(n-e)*(240-t)/60:e)}function Je(t,e,n,r,i){var a=t*t,s=a*t;return((1-3*t+3*a-s)*e+(4-6*a+3*s)*n+(1+3*t+3*a-3*s)*r+s*i)/6}be(xe,Fe,{copy(t){return Object.assign(new this.constructor,this,t)},displayable(){return this.rgb().displayable()},hex:Me,formatHex:Me,formatHex8:function(){return this.rgb().formatHex8()},formatHsl:function(){return Ve(this).formatHsl()},formatRgb:Ie,toString:Ie}),be(je,Pe,_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},rgb(){return this},clamp(){return new je(We(this.r),We(this.g),We(this.b),Ue(this.opacity))},displayable(){return-.5<=this.r&&this.r<255.5&&-.5<=this.g&&this.g<255.5&&-.5<=this.b&&this.b<255.5&&0<=this.opacity&&this.opacity<=1},hex:Ye,formatHex:Ye,formatHex8:function(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}${qe(255*(isNaN(this.opacity)?1:this.opacity))}`},formatRgb:ze,toString:ze})),be(Ge,(function(t,e,n,r){return 1===arguments.length?Ve(t):new Ge(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new Ge(this.h,this.s,this.l*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new Ge(this.h,this.s,this.l*t,this.opacity)},rgb(){var t=this.h%360+360*(this.h<0),e=isNaN(t)||isNaN(this.s)?0:this.s,n=this.l,r=n+(n<.5?n:1-n)*e,i=2*n-r;return new je(Qe(t>=240?t-240:t+120,i,r),Qe(t,i,r),Qe(t<120?t+240:t-120,i,r),this.opacity)},clamp(){return new Ge(Xe(this.h),Ke(this.s),Ke(this.l),Ue(this.opacity))},displayable(){return(0<=this.s&&this.s<=1||isNaN(this.s))&&0<=this.l&&this.l<=1&&0<=this.opacity&&this.opacity<=1},formatHsl(){const t=Ue(this.opacity);return`${1===t?"hsl(":"hsla("}${Xe(this.h)}, ${100*Ke(this.s)}%, ${100*Ke(this.l)}%${1===t?")":`, ${t})`}`}}));const tn=t=>()=>t;function en(t,e){return function(n){return t+n*e}}function nn(t){return 1==(t=+t)?rn:function(e,n){return n-e?function(t,e,n){return t=Math.pow(t,n),e=Math.pow(e,n)-t,n=1/n,function(r){return Math.pow(t+r*e,n)}}(e,n,t):tn(isNaN(e)?n:e)}}function rn(t,e){var n=e-t;return n?en(t,n):tn(isNaN(t)?e:t)}const an=function t(e){var n=nn(e);function r(t,e){var r=n((t=Pe(t)).r,(e=Pe(e)).r),i=n(t.g,e.g),a=n(t.b,e.b),s=rn(t.opacity,e.opacity);return function(e){return t.r=r(e),t.g=i(e),t.b=a(e),t.opacity=s(e),t+""}}return r.gamma=t,r}(1);function sn(t){return function(e){var n,r,i=e.length,a=new Array(i),s=new Array(i),o=new Array(i);for(n=0;n<i;++n)r=Pe(e[n]),a[n]=r.r||0,s[n]=r.g||0,o[n]=r.b||0;return a=t(a),s=t(s),o=t(o),r.opacity=1,function(t){return r.r=a(t),r.g=s(t),r.b=o(t),r+""}}}sn((function(t){var e=t.length-1;return function(n){var r=n<=0?n=0:n>=1?(n=1,e-1):Math.floor(n*e),i=t[r],a=t[r+1],s=r>0?t[r-1]:2*i-a,o=r<e-1?t[r+2]:2*a-i;return Je((n-r/e)*e,s,i,a,o)}})),sn((function(t){var e=t.length;return function(n){var r=Math.floor(((n%=1)<0?++n:n)*e),i=t[(r+e-1)%e],a=t[r%e],s=t[(r+1)%e],o=t[(r+2)%e];return Je((n-r/e)*e,i,a,s,o)}}));var on=/[-+]?(?:\d+\.?\d*|\.?\d+)(?:[eE][-+]?\d+)?/g,cn=new RegExp(on.source,"g");function ln(t,e){var n,r,i,a=on.lastIndex=cn.lastIndex=0,s=-1,o=[],c=[];for(t+="",e+="";(n=on.exec(t))&&(r=cn.exec(e));)(i=r.index)>a&&(i=e.slice(a,i),o[s]?o[s]+=i:o[++s]=i),(n=n[0])===(r=r[0])?o[s]?o[s]+=r:o[++s]=r:(o[++s]=null,c.push({i:s,x:oe(n,r)})),a=cn.lastIndex;return a<e.length&&(i=e.slice(a),o[s]?o[s]+=i:o[++s]=i),o.length<2?c[0]?function(t){return function(e){return t(e)+""}}(c[0].x):function(t){return function(){return t}}(e):(e=c.length,function(t){for(var n,r=0;r<e;++r)o[(n=c[r]).i]=n.x(t);return o.join("")})}function hn(t,e){var n;return("number"==typeof e?oe:e instanceof Fe?an:(n=Fe(e))?(e=n,an):ln)(t,e)}function un(t){return function(){this.removeAttribute(t)}}function dn(t){return function(){this.removeAttributeNS(t.space,t.local)}}function pn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttribute(t);return s===a?null:s===r?i:i=e(r=s,n)}}function fn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttributeNS(t.space,t.local);return s===a?null:s===r?i:i=e(r=s,n)}}function gn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttribute(t))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttribute(t)}}function yn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttributeNS(t.space,t.local))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttributeNS(t.space,t.local)}}function mn(t,e){return function(n){this.setAttribute(t,e.call(this,n))}}function bn(t,e){return function(n){this.setAttributeNS(t.space,t.local,e.call(this,n))}}function _n(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&bn(t,i)),n}return i._value=e,i}function xn(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&mn(t,i)),n}return i._value=e,i}function vn(t,e){return function(){ie(this,t).delay=+e.apply(this,arguments)}}function kn(t,e){return e=+e,function(){ie(this,t).delay=e}}function wn(t,e){return function(){ae(this,t).duration=+e.apply(this,arguments)}}function En(t,e){return e=+e,function(){ae(this,t).duration=e}}function Cn(t,e){if("function"!=typeof e)throw new Error;return function(){ae(this,t).ease=e}}function Tn(t,e,n){var r,i,a=function(t){return(t+"").trim().split(/^|\s+/).every((function(t){var e=t.indexOf(".");return e>=0&&(t=t.slice(0,e)),!t||"start"===t}))}(e)?ie:ae;return function(){var s=a(this,t),o=s.on;o!==r&&(i=(r=o).copy()).on(e,n),s.on=i}}var Sn=Lt.prototype.constructor;function An(t){return function(){this.style.removeProperty(t)}}function Ln(t,e,n){return function(r){this.style.setProperty(t,e.call(this,r),n)}}function Bn(t,e,n){var r,i;function a(){var a=e.apply(this,arguments);return a!==i&&(r=(i=a)&&Ln(t,a,n)),r}return a._value=e,a}function Nn(t){return function(e){this.textContent=t.call(this,e)}}function Dn(t){var e,n;function r(){var r=t.apply(this,arguments);return r!==n&&(e=(n=r)&&Nn(r)),e}return r._value=t,r}var On=0;function Mn(t,e,n,r){this._groups=t,this._parents=e,this._name=n,this._id=r}function In(){return++On}var Fn=Lt.prototype;Mn.prototype=function(t){return Lt().transition(t)}.prototype={constructor:Mn,select:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=y(t));for(var r=this._groups,i=r.length,a=new Array(i),s=0;s<i;++s)for(var o,c,l=r[s],h=l.length,u=a[s]=new Array(h),d=0;d<h;++d)(o=l[d])&&(c=t.call(o,o.__data__,d,l))&&("__data__"in o&&(c.__data__=o.__data__),u[d]=c,re(u[d],e,n,d,u,se(o,n)));return new Mn(a,this._parents,e,n)},selectAll:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=_(t));for(var r=this._groups,i=r.length,a=[],s=[],o=0;o<i;++o)for(var c,l=r[o],h=l.length,u=0;u<h;++u)if(c=l[u]){for(var d,p=t.call(c,c.__data__,u,l),f=se(c,n),g=0,y=p.length;g<y;++g)(d=p[g])&&re(d,e,n,g,p,f);a.push(p),s.push(c)}return new Mn(a,s,e,n)},selectChild:Fn.selectChild,selectChildren:Fn.selectChildren,filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new Mn(r,this._parents,this._name,this._id)},merge:function(t){if(t._id!==this._id)throw new Error;for(var e=this._groups,n=t._groups,r=e.length,i=n.length,a=Math.min(r,i),s=new Array(r),o=0;o<a;++o)for(var c,l=e[o],h=n[o],u=l.length,d=s[o]=new Array(u),p=0;p<u;++p)(c=l[p]||h[p])&&(d[p]=c);for(;o<r;++o)s[o]=e[o];return new Mn(s,this._parents,this._name,this._id)},selection:function(){return new Sn(this._groups,this._parents)},transition:function(){for(var t=this._name,e=this._id,n=In(),r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)if(s=o[l]){var h=se(s,e);re(s,t,n,l,o,{time:h.time+h.delay+h.duration,delay:0,duration:h.duration,ease:h.ease})}return new Mn(r,this._parents,t,n)},call:Fn.call,nodes:Fn.nodes,node:Fn.node,size:Fn.size,empty:Fn.empty,each:Fn.each,on:function(t,e){var n=this._id;return arguments.length<2?se(this.node(),n).on.on(t):this.each(Tn(n,t,e))},attr:function(t,e){var n=F(t),r="transform"===n?fe:hn;return this.attrTween(t,"function"==typeof e?(n.local?yn:gn)(n,r,me(this,"attr."+t,e)):null==e?(n.local?dn:un)(n):(n.local?fn:pn)(n,r,e))},attrTween:function(t,e){var n="attr."+t;if(arguments.length<2)return(n=this.tween(n))&&n._value;if(null==e)return this.tween(n,null);if("function"!=typeof e)throw new Error;var r=F(t);return this.tween(n,(r.local?_n:xn)(r,e))},style:function(t,e,n){var r="transform"==(t+="")?pe:hn;return null==e?this.styleTween(t,function(t,e){var n,r,i;return function(){var a=H(this,t),s=(this.style.removeProperty(t),H(this,t));return a===s?null:a===n&&s===r?i:i=e(n=a,r=s)}}(t,r)).on("end.style."+t,An(t)):"function"==typeof e?this.styleTween(t,function(t,e,n){var r,i,a;return function(){var s=H(this,t),o=n(this),c=o+"";return null==o&&(this.style.removeProperty(t),c=o=H(this,t)),s===c?null:s===r&&c===i?a:(i=c,a=e(r=s,o))}}(t,r,me(this,"style."+t,e))).each(function(t,e){var n,r,i,a,s="style."+e,o="end."+s;return function(){var c=ae(this,t),l=c.on,h=null==c.value[s]?a||(a=An(e)):void 0;l===n&&i===h||(r=(n=l).copy()).on(o,i=h),c.on=r}}(this._id,t)):this.styleTween(t,function(t,e,n){var r,i,a=n+"";return function(){var s=H(this,t);return s===a?null:s===r?i:i=e(r=s,n)}}(t,r,e),n).on("end.style."+t,null)},styleTween:function(t,e,n){var r="style."+(t+="");if(arguments.length<2)return(r=this.tween(r))&&r._value;if(null==e)return this.tween(r,null);if("function"!=typeof e)throw new Error;return this.tween(r,Bn(t,e,null==n?"":n))},text:function(t){return this.tween("text","function"==typeof t?function(t){return function(){var e=t(this);this.textContent=null==e?"":e}}(me(this,"text",t)):function(t){return function(){this.textContent=t}}(null==t?"":t+""))},textTween:function(t){var e="text";if(arguments.length<1)return(e=this.tween(e))&&e._value;if(null==t)return this.tween(e,null);if("function"!=typeof t)throw new Error;return this.tween(e,Dn(t))},remove:function(){return this.on("end.remove",function(t){return function(){var e=this.parentNode;for(var n in this.__transition)if(+n!==t)return;e&&e.removeChild(this)}}(this._id))},tween:function(t,e){var n=this._id;if(t+="",arguments.length<2){for(var r,i=se(this.node(),n).tween,a=0,s=i.length;a<s;++a)if((r=i[a]).name===t)return r.value;return null}return this.each((null==e?ge:ye)(n,t,e))},delay:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?vn:kn)(e,t)):se(this.node(),e).delay},duration:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?wn:En)(e,t)):se(this.node(),e).duration},ease:function(t){var e=this._id;return arguments.length?this.each(Cn(e,t)):se(this.node(),e).ease},easeVarying:function(t){if("function"!=typeof t)throw new Error;return this.each(function(t,e){return function(){var n=e.apply(this,arguments);if("function"!=typeof n)throw new Error;ae(this,t).ease=n}}(this._id,t))},end:function(){var t,e,n=this,r=n._id,i=n.size();return new Promise((function(a,s){var o={value:s},c={value:function(){0==--i&&a()}};n.each((function(){var n=ae(this,r),i=n.on;i!==t&&((e=(t=i).copy())._.cancel.push(o),e._.interrupt.push(o),e._.end.push(c)),n.on=e})),0===i&&a()}))},[Symbol.iterator]:Fn[Symbol.iterator]};var $n={time:null,delay:0,duration:250,ease:function(t){return((t*=2)<=1?t*t*t:(t-=2)*t*t+2)/2}};function Rn(t,e){for(var n;!(n=t.__transition)||!(n=n[e]);)if(!(t=t.parentNode))throw new Error(`transition ${e} not found`);return n}Lt.prototype.interrupt=function(t){return this.each((function(){!function(t,e){var n,r,i,a=t.__transition,s=!0;if(a){for(i in e=null==e?null:e+"",a)(n=a[i]).name===e?(r=n.state>2&&n.state<5,n.state=6,n.timer.stop(),n.on.call(r?"interrupt":"cancel",t,t.__data__,n.index,n.group),delete a[i]):s=!1;s&&delete t.__transition}}(this,t)}))},Lt.prototype.transition=function(t){var e,n;t instanceof Mn?(e=t._id,t=t._name):(e=In(),(n=$n).time=Ht(),t=null==t?null:t+"");for(var r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)(s=o[l])&&re(s,t,e,l,o,n||Rn(s,e));return new Mn(r,this._parents,t,e)};const{abs:Zn,max:Pn,min:jn}=Math;function Yn(t){return[+t[0],+t[1]]}function zn(t){return[Yn(t[0]),Yn(t[1])]}["w","e"].map(Un),["n","s"].map(Un),["n","w","e","s","nw","ne","sw","se"].map(Un);function Un(t){return{type:t}}function Wn(t){if(!t.ok)throw new Error(t.status+" "+t.statusText);return t.text()}function qn(t){return(e,n)=>function(t,e){return fetch(t,e).then(Wn)}(e,n).then((e=>(new DOMParser).parseFromString(e,t)))}qn("application/xml");qn("text/html");var Hn=qn("image/svg+xml");const Vn=Math.PI/180,Gn=180/Math.PI,Xn=.96422,Kn=.82521,Qn=4/29,Jn=6/29,tr=3*Jn*Jn;function er(t){if(t instanceof nr)return new nr(t.l,t.a,t.b,t.opacity);if(t instanceof lr)return hr(t);t instanceof je||(t=Ze(t));var e,n,r=sr(t.r),i=sr(t.g),a=sr(t.b),s=rr((.2225045*r+.7168786*i+.0606169*a)/1);return r===i&&i===a?e=n=s:(e=rr((.4360747*r+.3850649*i+.1430804*a)/Xn),n=rr((.0139322*r+.0971045*i+.7141733*a)/Kn)),new nr(116*s-16,500*(e-s),200*(s-n),t.opacity)}function nr(t,e,n,r){this.l=+t,this.a=+e,this.b=+n,this.opacity=+r}function rr(t){return t>.008856451679035631?Math.pow(t,1/3):t/tr+Qn}function ir(t){return t>Jn?t*t*t:tr*(t-Qn)}function ar(t){return 255*(t<=.0031308?12.92*t:1.055*Math.pow(t,1/2.4)-.055)}function sr(t){return(t/=255)<=.04045?t/12.92:Math.pow((t+.055)/1.055,2.4)}function or(t){if(t instanceof lr)return new lr(t.h,t.c,t.l,t.opacity);if(t instanceof nr||(t=er(t)),0===t.a&&0===t.b)return new lr(NaN,0<t.l&&t.l<100?0:NaN,t.l,t.opacity);var e=Math.atan2(t.b,t.a)*Gn;return new lr(e<0?e+360:e,Math.sqrt(t.a*t.a+t.b*t.b),t.l,t.opacity)}function cr(t,e,n,r){return 1===arguments.length?or(t):new lr(t,e,n,null==r?1:r)}function lr(t,e,n,r){this.h=+t,this.c=+e,this.l=+n,this.opacity=+r}function hr(t){if(isNaN(t.h))return new nr(t.l,0,0,t.opacity);var e=t.h*Vn;return new nr(t.l,Math.cos(e)*t.c,Math.sin(e)*t.c,t.opacity)}function ur(t){return function(e,n){var r=t((e=cr(e)).h,(n=cr(n)).h),i=rn(e.c,n.c),a=rn(e.l,n.l),s=rn(e.opacity,n.opacity);return function(t){return e.h=r(t),e.c=i(t),e.l=a(t),e.opacity=s(t),e+""}}}be(nr,(function(t,e,n,r){return 1===arguments.length?er(t):new nr(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return new nr(this.l+18*(null==t?1:t),this.a,this.b,this.opacity)},darker(t){return new nr(this.l-18*(null==t?1:t),this.a,this.b,this.opacity)},rgb(){var t=(this.l+16)/116,e=isNaN(this.a)?t:t+this.a/500,n=isNaN(this.b)?t:t-this.b/200;return new je(ar(3.1338561*(e=Xn*ir(e))-1.6168667*(t=1*ir(t))-.4906146*(n=Kn*ir(n))),ar(-.9787684*e+1.9161415*t+.033454*n),ar(.0719453*e-.2289914*t+1.4052427*n),this.opacity)}})),be(lr,cr,_e(xe,{brighter(t){return new lr(this.h,this.c,this.l+18*(null==t?1:t),this.opacity)},darker(t){return new lr(this.h,this.c,this.l-18*(null==t?1:t),this.opacity)},rgb(){return hr(this).rgb()}}));const dr=ur((function(t,e){var n=e-t;return n?en(t,n>180||n<-180?n-360*Math.round(n/360):n):tn(isNaN(t)?e:t)}));ur(rn);const pr=Math.sqrt(50),fr=Math.sqrt(10),gr=Math.sqrt(2);function yr(t,e,n){const r=(e-t)/Math.max(0,n),i=Math.floor(Math.log10(r)),a=r/Math.pow(10,i),s=a>=pr?10:a>=fr?5:a>=gr?2:1;let o,c,l;return i<0?(l=Math.pow(10,-i)/s,o=Math.round(t*l),c=Math.round(e*l),o/l<t&&++o,c/l>e&&--c,l=-l):(l=Math.pow(10,i)*s,o=Math.round(t/l),c=Math.round(e/l),o*l<t&&++o,c*l>e&&--c),c<o&&.5<=n&&n<2?yr(t,e,2*n):[o,c,l]}function mr(t,e,n){return yr(t=+t,e=+e,n=+n)[2]}function br(t,e,n){n=+n;const r=(e=+e)<(t=+t),i=r?mr(e,t,n):mr(t,e,n);return(r?-1:1)*(i<0?1/-i:i)}function _r(t,e){return null==t||null==e?NaN:t<e?-1:t>e?1:t>=e?0:NaN}function xr(t,e){return null==t||null==e?NaN:e<t?-1:e>t?1:e>=t?0:NaN}function vr(t){let e,n,r;function i(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<0?i=e+1:a=e}while(i<a)}return i}return 2!==t.length?(e=_r,n=(e,n)=>_r(t(e),n),r=(e,n)=>t(e)-n):(e=t===_r||t===xr?t:kr,n=t,r=t),{left:i,center:function(t,e,n=0,a=t.length){const s=i(t,e,n,a-1);return s>n&&r(t[s-1],e)>-r(t[s],e)?s-1:s},right:function(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<=0?i=e+1:a=e}while(i<a)}return i}}}function kr(){return 0}const wr=vr(_r),Er=wr.right,Cr=(wr.left,vr((function(t){return null===t?NaN:+t})).center,Er);function Tr(t,e){var n,r=e?e.length:0,i=t?Math.min(r,t.length):0,a=new Array(i),s=new Array(r);for(n=0;n<i;++n)a[n]=Br(t[n],e[n]);for(;n<r;++n)s[n]=e[n];return function(t){for(n=0;n<i;++n)s[n]=a[n](t);return s}}function Sr(t,e){var n=new Date;return t=+t,e=+e,function(r){return n.setTime(t*(1-r)+e*r),n}}function Ar(t,e){var n,r={},i={};for(n in null!==t&&"object"==typeof t||(t={}),null!==e&&"object"==typeof e||(e={}),e)n in t?r[n]=Br(t[n],e[n]):i[n]=e[n];return function(t){for(n in r)i[n]=r[n](t);return i}}function Lr(t,e){e||(e=[]);var n,r=t?Math.min(e.length,t.length):0,i=e.slice();return function(a){for(n=0;n<r;++n)i[n]=t[n]*(1-a)+e[n]*a;return i}}function Br(t,e){var n,r,i=typeof e;return null==e||"boolean"===i?tn(e):("number"===i?oe:"string"===i?(n=Fe(e))?(e=n,an):ln:e instanceof Fe?an:e instanceof Date?Sr:(r=e,!ArrayBuffer.isView(r)||r instanceof DataView?Array.isArray(e)?Tr:"function"!=typeof e.valueOf&&"function"!=typeof e.toString||isNaN(e)?Ar:oe:Lr))(t,e)}function Nr(t,e){return t=+t,e=+e,function(n){return Math.round(t*(1-n)+e*n)}}function Dr(t){return+t}var Or=[0,1];function Mr(t){return t}function Ir(t,e){return(e-=t=+t)?function(n){return(n-t)/e}:(n=isNaN(e)?NaN:.5,function(){return n});var n}function Fr(t,e,n){var r=t[0],i=t[1],a=e[0],s=e[1];return i<r?(r=Ir(i,r),a=n(s,a)):(r=Ir(r,i),a=n(a,s)),function(t){return a(r(t))}}function $r(t,e,n){var r=Math.min(t.length,e.length)-1,i=new Array(r),a=new Array(r),s=-1;for(t[r]<t[0]&&(t=t.slice().reverse(),e=e.slice().reverse());++s<r;)i[s]=Ir(t[s],t[s+1]),a[s]=n(e[s],e[s+1]);return function(e){var n=Cr(t,e,1,r)-1;return a[n](i[n](e))}}function Rr(t,e){return e.domain(t.domain()).range(t.range()).interpolate(t.interpolate()).clamp(t.clamp()).unknown(t.unknown())}function Zr(){var t,e,n,r,i,a,s=Or,o=Or,c=Br,l=Mr;function h(){var t,e,n,c=Math.min(s.length,o.length);return l!==Mr&&(t=s[0],e=s[c-1],t>e&&(n=t,t=e,e=n),l=function(n){return Math.max(t,Math.min(e,n))}),r=c>2?$r:Fr,i=a=null,u}function u(e){return null==e||isNaN(e=+e)?n:(i||(i=r(s.map(t),o,c)))(t(l(e)))}return u.invert=function(n){return l(e((a||(a=r(o,s.map(t),oe)))(n)))},u.domain=function(t){return arguments.length?(s=Array.from(t,Dr),h()):s.slice()},u.range=function(t){return arguments.length?(o=Array.from(t),h()):o.slice()},u.rangeRound=function(t){return o=Array.from(t),c=Nr,h()},u.clamp=function(t){return arguments.length?(l=!!t||Mr,h()):l!==Mr},u.interpolate=function(t){return arguments.length?(c=t,h()):c},u.unknown=function(t){return arguments.length?(n=t,u):n},function(n,r){return t=n,e=r,h()}}function Pr(){return Zr()(Mr,Mr)}function jr(t,e){switch(arguments.length){case 0:break;case 1:this.range(t);break;default:this.range(e).domain(t)}return this}var Yr,zr=/^(?:(.)?([<>=^]))?([+\-( ])?([$#])?(0)?(\d+)?(,)?(\.\d+)?(~)?([a-z%])?$/i;function Ur(t){if(!(e=zr.exec(t)))throw new Error("invalid format: "+t);var e;return new Wr({fill:e[1],align:e[2],sign:e[3],symbol:e[4],zero:e[5],width:e[6],comma:e[7],precision:e[8]&&e[8].slice(1),trim:e[9],type:e[10]})}function Wr(t){this.fill=void 0===t.fill?" ":t.fill+"",this.align=void 0===t.align?">":t.align+"",this.sign=void 0===t.sign?"-":t.sign+"",this.symbol=void 0===t.symbol?"":t.symbol+"",this.zero=!!t.zero,this.width=void 0===t.width?void 0:+t.width,this.comma=!!t.comma,this.precision=void 0===t.precision?void 0:+t.precision,this.trim=!!t.trim,this.type=void 0===t.type?"":t.type+""}function qr(t,e){if((n=(t=e?t.toExponential(e-1):t.toExponential()).indexOf("e"))<0)return null;var n,r=t.slice(0,n);return[r.length>1?r[0]+r.slice(2):r,+t.slice(n+1)]}function Hr(t){return(t=qr(Math.abs(t)))?t[1]:NaN}function Vr(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1];return i<0?"0."+new Array(-i).join("0")+r:r.length>i+1?r.slice(0,i+1)+"."+r.slice(i+1):r+new Array(i-r.length+2).join("0")}Ur.prototype=Wr.prototype,Wr.prototype.toString=function(){return this.fill+this.align+this.sign+this.symbol+(this.zero?"0":"")+(void 0===this.width?"":Math.max(1,0|this.width))+(this.comma?",":"")+(void 0===this.precision?"":"."+Math.max(0,0|this.precision))+(this.trim?"~":"")+this.type};const Gr={"%":(t,e)=>(100*t).toFixed(e),b:t=>Math.round(t).toString(2),c:t=>t+"",d:function(t){return Math.abs(t=Math.round(t))>=1e21?t.toLocaleString("en").replace(/,/g,""):t.toString(10)},e:(t,e)=>t.toExponential(e),f:(t,e)=>t.toFixed(e),g:(t,e)=>t.toPrecision(e),o:t=>Math.round(t).toString(8),p:(t,e)=>Vr(100*t,e),r:Vr,s:function(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1],a=i-(Yr=3*Math.max(-8,Math.min(8,Math.floor(i/3))))+1,s=r.length;return a===s?r:a>s?r+new Array(a-s+1).join("0"):a>0?r.slice(0,a)+"."+r.slice(a):"0."+new Array(1-a).join("0")+qr(t,Math.max(0,e+a-1))[0]},X:t=>Math.round(t).toString(16).toUpperCase(),x:t=>Math.round(t).toString(16)};function Xr(t){return t}var Kr,Qr,Jr,ti=Array.prototype.map,ei=["y","z","a","f","p","n","\xb5","m","","k","M","G","T","P","E","Z","Y"];function ni(t){var e,n,r=void 0===t.grouping||void 0===t.thousands?Xr:(e=ti.call(t.grouping,Number),n=t.thousands+"",function(t,r){for(var i=t.length,a=[],s=0,o=e[0],c=0;i>0&&o>0&&(c+o+1>r&&(o=Math.max(1,r-c)),a.push(t.substring(i-=o,i+o)),!((c+=o+1)>r));)o=e[s=(s+1)%e.length];return a.reverse().join(n)}),i=void 0===t.currency?"":t.currency[0]+"",a=void 0===t.currency?"":t.currency[1]+"",s=void 0===t.decimal?".":t.decimal+"",o=void 0===t.numerals?Xr:function(t){return function(e){return e.replace(/[0-9]/g,(function(e){return t[+e]}))}}(ti.call(t.numerals,String)),c=void 0===t.percent?"%":t.percent+"",l=void 0===t.minus?"\u2212":t.minus+"",h=void 0===t.nan?"NaN":t.nan+"";function u(t){var e=(t=Ur(t)).fill,n=t.align,u=t.sign,d=t.symbol,p=t.zero,f=t.width,g=t.comma,y=t.precision,m=t.trim,b=t.type;"n"===b?(g=!0,b="g"):Gr[b]||(void 0===y&&(y=12),m=!0,b="g"),(p||"0"===e&&"="===n)&&(p=!0,e="0",n="=");var _="$"===d?i:"#"===d&&/[boxX]/.test(b)?"0"+b.toLowerCase():"",x="$"===d?a:/[%p]/.test(b)?c:"",v=Gr[b],k=/[defgprs%]/.test(b);function w(t){var i,a,c,d=_,w=x;if("c"===b)w=v(t)+w,t="";else{var E=(t=+t)<0||1/t<0;if(t=isNaN(t)?h:v(Math.abs(t),y),m&&(t=function(t){t:for(var e,n=t.length,r=1,i=-1;r<n;++r)switch(t[r]){case".":i=e=r;break;case"0":0===i&&(i=r),e=r;break;default:if(!+t[r])break t;i>0&&(i=0)}return i>0?t.slice(0,i)+t.slice(e+1):t}(t)),E&&0==+t&&"+"!==u&&(E=!1),d=(E?"("===u?u:l:"-"===u||"("===u?"":u)+d,w=("s"===b?ei[8+Yr/3]:"")+w+(E&&"("===u?")":""),k)for(i=-1,a=t.length;++i<a;)if(48>(c=t.charCodeAt(i))||c>57){w=(46===c?s+t.slice(i+1):t.slice(i))+w,t=t.slice(0,i);break}}g&&!p&&(t=r(t,1/0));var C=d.length+t.length+w.length,T=C<f?new Array(f-C+1).join(e):"";switch(g&&p&&(t=r(T+t,T.length?f-w.length:1/0),T=""),n){case"<":t=d+t+w+T;break;case"=":t=d+T+t+w;break;case"^":t=T.slice(0,C=T.length>>1)+d+t+w+T.slice(C);break;default:t=T+d+t+w}return o(t)}return y=void 0===y?6:/[gprs]/.test(b)?Math.max(1,Math.min(21,y)):Math.max(0,Math.min(20,y)),w.toString=function(){return t+""},w}return{format:u,formatPrefix:function(t,e){var n=u(((t=Ur(t)).type="f",t)),r=3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3))),i=Math.pow(10,-r),a=ei[8+r/3];return function(t){return n(i*t)+a}}}}function ri(t,e,n,r){var i,a=br(t,e,n);switch((r=Ur(null==r?",f":r)).type){case"s":var s=Math.max(Math.abs(t),Math.abs(e));return null!=r.precision||isNaN(i=function(t,e){return Math.max(0,3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3)))-Hr(Math.abs(t)))}(a,s))||(r.precision=i),Jr(r,s);case"":case"e":case"g":case"p":case"r":null!=r.precision||isNaN(i=function(t,e){return t=Math.abs(t),e=Math.abs(e)-t,Math.max(0,Hr(e)-Hr(t))+1}(a,Math.max(Math.abs(t),Math.abs(e))))||(r.precision=i-("e"===r.type));break;case"f":case"%":null!=r.precision||isNaN(i=function(t){return Math.max(0,-Hr(Math.abs(t)))}(a))||(r.precision=i-2*("%"===r.type))}return Qr(r)}function ii(t){var e=t.domain;return t.ticks=function(t){var n=e();return function(t,e,n){if(!((n=+n)>0))return[];if((t=+t)==(e=+e))return[t];const r=e<t,[i,a,s]=r?yr(e,t,n):yr(t,e,n);if(!(a>=i))return[];const o=a-i+1,c=new Array(o);if(r)if(s<0)for(let l=0;l<o;++l)c[l]=(a-l)/-s;else for(let l=0;l<o;++l)c[l]=(a-l)*s;else if(s<0)for(let l=0;l<o;++l)c[l]=(i+l)/-s;else for(let l=0;l<o;++l)c[l]=(i+l)*s;return c}(n[0],n[n.length-1],null==t?10:t)},t.tickFormat=function(t,n){var r=e();return ri(r[0],r[r.length-1],null==t?10:t,n)},t.nice=function(n){null==n&&(n=10);var r,i,a=e(),s=0,o=a.length-1,c=a[s],l=a[o],h=10;for(l<c&&(i=c,c=l,l=i,i=s,s=o,o=i);h-- >0;){if((i=mr(c,l,n))===r)return a[s]=c,a[o]=l,e(a);if(i>0)c=Math.floor(c/i)*i,l=Math.ceil(l/i)*i;else{if(!(i<0))break;c=Math.ceil(c*i)/i,l=Math.floor(l*i)/i}r=i}return t},t}function ai(){var t=Pr();return t.copy=function(){return Rr(t,ai())},jr.apply(t,arguments),ii(t)}Kr=ni({thousands:",",grouping:[3],currency:["$",""]}),Qr=Kr.format,Jr=Kr.formatPrefix;class si extends Map{constructor(t,e=hi){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:e}}),null!=t)for(const[n,r]of t)this.set(n,r)}get(t){return super.get(oi(this,t))}has(t){return super.has(oi(this,t))}set(t,e){return super.set(ci(this,t),e)}delete(t){return super.delete(li(this,t))}}Set;function oi({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):n}function ci({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):(t.set(r,n),n)}function li({_intern:t,_key:e},n){const r=e(n);return t.has(r)&&(n=t.get(r),t.delete(r)),n}function hi(t){return null!==t&&"object"==typeof t?t.valueOf():t}const ui=Symbol("implicit");function di(){var t=new si,e=[],n=[],r=ui;function i(i){let a=t.get(i);if(void 0===a){if(r!==ui)return r;t.set(i,a=e.push(i)-1)}return n[a%n.length]}return i.domain=function(n){if(!arguments.length)return e.slice();e=[],t=new si;for(const r of n)t.has(r)||t.set(r,e.push(r)-1);return i},i.range=function(t){return arguments.length?(n=Array.from(t),i):n.slice()},i.unknown=function(t){return arguments.length?(r=t,i):r},i.copy=function(){return di(e,n).unknown(r)},jr.apply(i,arguments),i}const pi=1e3,fi=6e4,gi=36e5,yi=864e5,mi=6048e5,bi=2592e6,_i=31536e6,xi=new Date,vi=new Date;function ki(t,e,n,r){function i(e){return t(e=0===arguments.length?new Date:new Date(+e)),e}return i.floor=e=>(t(e=new Date(+e)),e),i.ceil=n=>(t(n=new Date(n-1)),e(n,1),t(n),n),i.round=t=>{const e=i(t),n=i.ceil(t);return t-e<n-t?e:n},i.offset=(t,n)=>(e(t=new Date(+t),null==n?1:Math.floor(n)),t),i.range=(n,r,a)=>{const s=[];if(n=i.ceil(n),a=null==a?1:Math.floor(a),!(n<r&&a>0))return s;let o;do{s.push(o=new Date(+n)),e(n,a),t(n)}while(o<n&&n<r);return s},i.filter=n=>ki((e=>{if(e>=e)for(;t(e),!n(e);)e.setTime(e-1)}),((t,r)=>{if(t>=t)if(r<0)for(;++r<=0;)for(;e(t,-1),!n(t););else for(;--r>=0;)for(;e(t,1),!n(t););})),n&&(i.count=(e,r)=>(xi.setTime(+e),vi.setTime(+r),t(xi),t(vi),Math.floor(n(xi,vi))),i.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?i.filter(r?e=>r(e)%t==0:e=>i.count(0,e)%t==0):i:null)),i}const wi=ki((()=>{}),((t,e)=>{t.setTime(+t+e)}),((t,e)=>e-t));wi.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?ki((e=>{e.setTime(Math.floor(e/t)*t)}),((e,n)=>{e.setTime(+e+n*t)}),((e,n)=>(n-e)/t)):wi:null);wi.range;const Ei=ki((t=>{t.setTime(t-t.getMilliseconds())}),((t,e)=>{t.setTime(+t+e*pi)}),((t,e)=>(e-t)/pi),(t=>t.getUTCSeconds())),Ci=(Ei.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getMinutes()))),Ti=(Ci.range,ki((t=>{t.setUTCSeconds(0,0)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getUTCMinutes()))),Si=(Ti.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi-t.getMinutes()*fi)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getHours()))),Ai=(Si.range,ki((t=>{t.setUTCMinutes(0,0,0)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getUTCHours()))),Li=(Ai.range,ki((t=>t.setHours(0,0,0,0)),((t,e)=>t.setDate(t.getDate()+e)),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/yi),(t=>t.getDate()-1))),Bi=(Li.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>t.getUTCDate()-1))),Ni=(Bi.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>Math.floor(t/yi))));Ni.range;function Di(t){return ki((e=>{e.setDate(e.getDate()-(e.getDay()+7-t)%7),e.setHours(0,0,0,0)}),((t,e)=>{t.setDate(t.getDate()+7*e)}),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/mi))}const Oi=Di(0),Mi=Di(1),Ii=Di(2),Fi=Di(3),$i=Di(4),Ri=Di(5),Zi=Di(6);Oi.range,Mi.range,Ii.range,Fi.range,$i.range,Ri.range,Zi.range;function Pi(t){return ki((e=>{e.setUTCDate(e.getUTCDate()-(e.getUTCDay()+7-t)%7),e.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+7*e)}),((t,e)=>(e-t)/mi))}const ji=Pi(0),Yi=Pi(1),zi=Pi(2),Ui=Pi(3),Wi=Pi(4),qi=Pi(5),Hi=Pi(6),Vi=(ji.range,Yi.range,zi.range,Ui.range,Wi.range,qi.range,Hi.range,ki((t=>{t.setDate(1),t.setHours(0,0,0,0)}),((t,e)=>{t.setMonth(t.getMonth()+e)}),((t,e)=>e.getMonth()-t.getMonth()+12*(e.getFullYear()-t.getFullYear())),(t=>t.getMonth()))),Gi=(Vi.range,ki((t=>{t.setUTCDate(1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCMonth(t.getUTCMonth()+e)}),((t,e)=>e.getUTCMonth()-t.getUTCMonth()+12*(e.getUTCFullYear()-t.getUTCFullYear())),(t=>t.getUTCMonth()))),Xi=(Gi.range,ki((t=>{t.setMonth(0,1),t.setHours(0,0,0,0)}),((t,e)=>{t.setFullYear(t.getFullYear()+e)}),((t,e)=>e.getFullYear()-t.getFullYear()),(t=>t.getFullYear())));Xi.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setFullYear(Math.floor(e.getFullYear()/t)*t),e.setMonth(0,1),e.setHours(0,0,0,0)}),((e,n)=>{e.setFullYear(e.getFullYear()+n*t)})):null;Xi.range;const Ki=ki((t=>{t.setUTCMonth(0,1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCFullYear(t.getUTCFullYear()+e)}),((t,e)=>e.getUTCFullYear()-t.getUTCFullYear()),(t=>t.getUTCFullYear()));Ki.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setUTCFullYear(Math.floor(e.getUTCFullYear()/t)*t),e.setUTCMonth(0,1),e.setUTCHours(0,0,0,0)}),((e,n)=>{e.setUTCFullYear(e.getUTCFullYear()+n*t)})):null;Ki.range;function Qi(t,e,n,r,i,a){const s=[[Ei,1,pi],[Ei,5,5e3],[Ei,15,15e3],[Ei,30,3e4],[a,1,fi],[a,5,3e5],[a,15,9e5],[a,30,18e5],[i,1,gi],[i,3,108e5],[i,6,216e5],[i,12,432e5],[r,1,yi],[r,2,1728e5],[n,1,mi],[e,1,bi],[e,3,7776e6],[t,1,_i]];function o(e,n,r){const i=Math.abs(n-e)/r,a=vr((([,,t])=>t)).right(s,i);if(a===s.length)return t.every(br(e/_i,n/_i,r));if(0===a)return wi.every(Math.max(br(e,n,r),1));const[o,c]=s[i/s[a-1][2]<s[a][2]/i?a-1:a];return o.every(c)}return[function(t,e,n){const r=e<t;r&&([t,e]=[e,t]);const i=n&&"function"==typeof n.range?n:o(t,e,n),a=i?i.range(t,+e+1):[];return r?a.reverse():a},o]}const[Ji,ta]=Qi(Ki,Gi,ji,Ni,Ai,Ti),[ea,na]=Qi(Xi,Vi,Oi,Li,Si,Ci);function ra(t){if(0<=t.y&&t.y<100){var e=new Date(-1,t.m,t.d,t.H,t.M,t.S,t.L);return e.setFullYear(t.y),e}return new Date(t.y,t.m,t.d,t.H,t.M,t.S,t.L)}function ia(t){if(0<=t.y&&t.y<100){var e=new Date(Date.UTC(-1,t.m,t.d,t.H,t.M,t.S,t.L));return e.setUTCFullYear(t.y),e}return new Date(Date.UTC(t.y,t.m,t.d,t.H,t.M,t.S,t.L))}function aa(t,e,n){return{y:t,m:e,d:n,H:0,M:0,S:0,L:0}}var sa,oa,ca={"-":"",_:" ",0:"0"},la=/^\s*\d+/,ha=/^%/,ua=/[\\^$*+?|[\]().{}]/g;function da(t,e,n){var r=t<0?"-":"",i=(r?-t:t)+"",a=i.length;return r+(a<n?new Array(n-a+1).join(e)+i:i)}function pa(t){return t.replace(ua,"\\$&")}function fa(t){return new RegExp("^(?:"+t.map(pa).join("|")+")","i")}function ga(t){return new Map(t.map(((t,e)=>[t.toLowerCase(),e])))}function ya(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.w=+r[0],n+r[0].length):-1}function ma(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.u=+r[0],n+r[0].length):-1}function ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.U=+r[0],n+r[0].length):-1}function _a(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.V=+r[0],n+r[0].length):-1}function xa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.W=+r[0],n+r[0].length):-1}function va(t,e,n){var r=la.exec(e.slice(n,n+4));return r?(t.y=+r[0],n+r[0].length):-1}function ka(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.y=+r[0]+(+r[0]>68?1900:2e3),n+r[0].length):-1}function wa(t,e,n){var r=/^(Z)|([+-]\d\d)(?::?(\d\d))?/.exec(e.slice(n,n+6));return r?(t.Z=r[1]?0:-(r[2]+(r[3]||"00")),n+r[0].length):-1}function Ea(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.q=3*r[0]-3,n+r[0].length):-1}function Ca(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.m=r[0]-1,n+r[0].length):-1}function Ta(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.d=+r[0],n+r[0].length):-1}function Sa(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.m=0,t.d=+r[0],n+r[0].length):-1}function Aa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.H=+r[0],n+r[0].length):-1}function La(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.M=+r[0],n+r[0].length):-1}function Ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.S=+r[0],n+r[0].length):-1}function Na(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.L=+r[0],n+r[0].length):-1}function Da(t,e,n){var r=la.exec(e.slice(n,n+6));return r?(t.L=Math.floor(r[0]/1e3),n+r[0].length):-1}function Oa(t,e,n){var r=ha.exec(e.slice(n,n+1));return r?n+r[0].length:-1}function Ma(t,e,n){var r=la.exec(e.slice(n));return r?(t.Q=+r[0],n+r[0].length):-1}function Ia(t,e,n){var r=la.exec(e.slice(n));return r?(t.s=+r[0],n+r[0].length):-1}function Fa(t,e){return da(t.getDate(),e,2)}function $a(t,e){return da(t.getHours(),e,2)}function Ra(t,e){return da(t.getHours()%12||12,e,2)}function Za(t,e){return da(1+Li.count(Xi(t),t),e,3)}function Pa(t,e){return da(t.getMilliseconds(),e,3)}function ja(t,e){return Pa(t,e)+"000"}function Ya(t,e){return da(t.getMonth()+1,e,2)}function za(t,e){return da(t.getMinutes(),e,2)}function Ua(t,e){return da(t.getSeconds(),e,2)}function Wa(t){var e=t.getDay();return 0===e?7:e}function qa(t,e){return da(Oi.count(Xi(t)-1,t),e,2)}function Ha(t){var e=t.getDay();return e>=4||0===e?$i(t):$i.ceil(t)}function Va(t,e){return t=Ha(t),da($i.count(Xi(t),t)+(4===Xi(t).getDay()),e,2)}function Ga(t){return t.getDay()}function Xa(t,e){return da(Mi.count(Xi(t)-1,t),e,2)}function Ka(t,e){return da(t.getFullYear()%100,e,2)}function Qa(t,e){return da((t=Ha(t)).getFullYear()%100,e,2)}function Ja(t,e){return da(t.getFullYear()%1e4,e,4)}function ts(t,e){var n=t.getDay();return da((t=n>=4||0===n?$i(t):$i.ceil(t)).getFullYear()%1e4,e,4)}function es(t){var e=t.getTimezoneOffset();return(e>0?"-":(e*=-1,"+"))+da(e/60|0,"0",2)+da(e%60,"0",2)}function ns(t,e){return da(t.getUTCDate(),e,2)}function rs(t,e){return da(t.getUTCHours(),e,2)}function is(t,e){return da(t.getUTCHours()%12||12,e,2)}function as(t,e){return da(1+Bi.count(Ki(t),t),e,3)}function ss(t,e){return da(t.getUTCMilliseconds(),e,3)}function os(t,e){return ss(t,e)+"000"}function cs(t,e){return da(t.getUTCMonth()+1,e,2)}function ls(t,e){return da(t.getUTCMinutes(),e,2)}function hs(t,e){return da(t.getUTCSeconds(),e,2)}function us(t){var e=t.getUTCDay();return 0===e?7:e}function ds(t,e){return da(ji.count(Ki(t)-1,t),e,2)}function ps(t){var e=t.getUTCDay();return e>=4||0===e?Wi(t):Wi.ceil(t)}function fs(t,e){return t=ps(t),da(Wi.count(Ki(t),t)+(4===Ki(t).getUTCDay()),e,2)}function gs(t){return t.getUTCDay()}function ys(t,e){return da(Yi.count(Ki(t)-1,t),e,2)}function ms(t,e){return da(t.getUTCFullYear()%100,e,2)}function bs(t,e){return da((t=ps(t)).getUTCFullYear()%100,e,2)}function _s(t,e){return da(t.getUTCFullYear()%1e4,e,4)}function xs(t,e){var n=t.getUTCDay();return da((t=n>=4||0===n?Wi(t):Wi.ceil(t)).getUTCFullYear()%1e4,e,4)}function vs(){return"+0000"}function ks(){return"%"}function ws(t){return+t}function Es(t){return Math.floor(+t/1e3)}function Cs(t){return new Date(t)}function Ts(t){return t instanceof Date?+t:+new Date(+t)}function Ss(t,e,n,r,i,a,s,o,c,l){var h=Pr(),u=h.invert,d=h.domain,p=l(".%L"),f=l(":%S"),g=l("%I:%M"),y=l("%I %p"),m=l("%a %d"),b=l("%b %d"),_=l("%B"),x=l("%Y");function v(t){return(c(t)<t?p:o(t)<t?f:s(t)<t?g:a(t)<t?y:r(t)<t?i(t)<t?m:b:n(t)<t?_:x)(t)}return h.invert=function(t){return new Date(u(t))},h.domain=function(t){return arguments.length?d(Array.from(t,Ts)):d().map(Cs)},h.ticks=function(e){var n=d();return t(n[0],n[n.length-1],null==e?10:e)},h.tickFormat=function(t,e){return null==e?v:l(e)},h.nice=function(t){var n=d();return t&&"function"==typeof t.range||(t=e(n[0],n[n.length-1],null==t?10:t)),t?d(function(t,e){var n,r=0,i=(t=t.slice()).length-1,a=t[r],s=t[i];return s<a&&(n=r,r=i,i=n,n=a,a=s,s=n),t[r]=e.floor(a),t[i]=e.ceil(s),t}(n,t)):h},h.copy=function(){return Rr(h,Ss(t,e,n,r,i,a,s,o,c,l))},h}function As(){return jr.apply(Ss(ea,na,Xi,Vi,Oi,Li,Si,Ci,Ei,oa).domain([new Date(2e3,0,1),new Date(2e3,0,2)]),arguments)}function Ls(t){return"string"==typeof t?new St([[document.querySelector(t)]],[document.documentElement]):new St([[t]],Tt)}function Bs(t){return"string"==typeof t?new St([document.querySelectorAll(t)],[document.documentElement]):new St([m(t)],Tt)}function Ns(t){return function(){return t}}!function(t){sa=function(t){var e=t.dateTime,n=t.date,r=t.time,i=t.periods,a=t.days,s=t.shortDays,o=t.months,c=t.shortMonths,l=fa(i),h=ga(i),u=fa(a),d=ga(a),p=fa(s),f=ga(s),g=fa(o),y=ga(o),m=fa(c),b=ga(c),_={a:function(t){return s[t.getDay()]},A:function(t){return a[t.getDay()]},b:function(t){return c[t.getMonth()]},B:function(t){return o[t.getMonth()]},c:null,d:Fa,e:Fa,f:ja,g:Qa,G:ts,H:$a,I:Ra,j:Za,L:Pa,m:Ya,M:za,p:function(t){return i[+(t.getHours()>=12)]},q:function(t){return 1+~~(t.getMonth()/3)},Q:ws,s:Es,S:Ua,u:Wa,U:qa,V:Va,w:Ga,W:Xa,x:null,X:null,y:Ka,Y:Ja,Z:es,"%":ks},x={a:function(t){return s[t.getUTCDay()]},A:function(t){return a[t.getUTCDay()]},b:function(t){return c[t.getUTCMonth()]},B:function(t){return o[t.getUTCMonth()]},c:null,d:ns,e:ns,f:os,g:bs,G:xs,H:rs,I:is,j:as,L:ss,m:cs,M:ls,p:function(t){return i[+(t.getUTCHours()>=12)]},q:function(t){return 1+~~(t.getUTCMonth()/3)},Q:ws,s:Es,S:hs,u:us,U:ds,V:fs,w:gs,W:ys,x:null,X:null,y:ms,Y:_s,Z:vs,"%":ks},v={a:function(t,e,n){var r=p.exec(e.slice(n));return r?(t.w=f.get(r[0].toLowerCase()),n+r[0].length):-1},A:function(t,e,n){var r=u.exec(e.slice(n));return r?(t.w=d.get(r[0].toLowerCase()),n+r[0].length):-1},b:function(t,e,n){var r=m.exec(e.slice(n));return r?(t.m=b.get(r[0].toLowerCase()),n+r[0].length):-1},B:function(t,e,n){var r=g.exec(e.slice(n));return r?(t.m=y.get(r[0].toLowerCase()),n+r[0].length):-1},c:function(t,n,r){return E(t,e,n,r)},d:Ta,e:Ta,f:Da,g:ka,G:va,H:Aa,I:Aa,j:Sa,L:Na,m:Ca,M:La,p:function(t,e,n){var r=l.exec(e.slice(n));return r?(t.p=h.get(r[0].toLowerCase()),n+r[0].length):-1},q:Ea,Q:Ma,s:Ia,S:Ba,u:ma,U:ba,V:_a,w:ya,W:xa,x:function(t,e,r){return E(t,n,e,r)},X:function(t,e,n){return E(t,r,e,n)},y:ka,Y:va,Z:wa,"%":Oa};function k(t,e){return function(n){var r,i,a,s=[],o=-1,c=0,l=t.length;for(n instanceof Date||(n=new Date(+n));++o<l;)37===t.charCodeAt(o)&&(s.push(t.slice(c,o)),null!=(i=ca[r=t.charAt(++o)])?r=t.charAt(++o):i="e"===r?" ":"0",(a=e[r])&&(r=a(n,i)),s.push(r),c=o+1);return s.push(t.slice(c,o)),s.join("")}}function w(t,e){return function(n){var r,i,a=aa(1900,void 0,1);if(E(a,t,n+="",0)!=n.length)return null;if("Q"in a)return new Date(a.Q);if("s"in a)return new Date(1e3*a.s+("L"in a?a.L:0));if(e&&!("Z"in a)&&(a.Z=0),"p"in a&&(a.H=a.H%12+12*a.p),void 0===a.m&&(a.m="q"in a?a.q:0),"V"in a){if(a.V<1||a.V>53)return null;"w"in a||(a.w=1),"Z"in a?(i=(r=ia(aa(a.y,0,1))).getUTCDay(),r=i>4||0===i?Yi.ceil(r):Yi(r),r=Bi.offset(r,7*(a.V-1)),a.y=r.getUTCFullYear(),a.m=r.getUTCMonth(),a.d=r.getUTCDate()+(a.w+6)%7):(i=(r=ra(aa(a.y,0,1))).getDay(),r=i>4||0===i?Mi.ceil(r):Mi(r),r=Li.offset(r,7*(a.V-1)),a.y=r.getFullYear(),a.m=r.getMonth(),a.d=r.getDate()+(a.w+6)%7)}else("W"in a||"U"in a)&&("w"in a||(a.w="u"in a?a.u%7:"W"in a?1:0),i="Z"in a?ia(aa(a.y,0,1)).getUTCDay():ra(aa(a.y,0,1)).getDay(),a.m=0,a.d="W"in a?(a.w+6)%7+7*a.W-(i+5)%7:a.w+7*a.U-(i+6)%7);return"Z"in a?(a.H+=a.Z/100|0,a.M+=a.Z%100,ia(a)):ra(a)}}function E(t,e,n,r){for(var i,a,s=0,o=e.length,c=n.length;s<o;){if(r>=c)return-1;if(37===(i=e.charCodeAt(s++))){if(i=e.charAt(s++),!(a=v[i in ca?e.charAt(s++):i])||(r=a(t,n,r))<0)return-1}else if(i!=n.charCodeAt(r++))return-1}return r}return _.x=k(n,_),_.X=k(r,_),_.c=k(e,_),x.x=k(n,x),x.X=k(r,x),x.c=k(e,x),{format:function(t){var e=k(t+="",_);return e.toString=function(){return t},e},parse:function(t){var e=w(t+="",!1);return e.toString=function(){return t},e},utcFormat:function(t){var e=k(t+="",x);return e.toString=function(){return t},e},utcParse:function(t){var e=w(t+="",!0);return e.toString=function(){return t},e}}}(t),oa=sa.format,sa.parse,sa.utcFormat,sa.utcParse}({dateTime:"%x, %X",date:"%-m/%-d/%Y",time:"%-I:%M:%S %p",periods:["AM","PM"],days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],shortDays:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});const Ds=Math.abs,Os=Math.atan2,Ms=Math.cos,Is=Math.max,Fs=Math.min,$s=Math.sin,Rs=Math.sqrt,Zs=1e-12,Ps=Math.PI,js=Ps/2,Ys=2*Ps;function zs(t){return t>1?0:t<-1?Ps:Math.acos(t)}function Us(t){return t>=1?js:t<=-1?-js:Math.asin(t)}const Ws=Math.PI,qs=2*Ws,Hs=1e-6,Vs=qs-Hs;function Gs(t){this._+=t[0];for(let e=1,n=t.length;e<n;++e)this._+=arguments[e]+t[e]}class Xs{constructor(t){this._x0=this._y0=this._x1=this._y1=null,this._="",this._append=null==t?Gs:function(t){let e=Math.floor(t);if(!(e>=0))throw new Error(`invalid digits: ${t}`);if(e>15)return Gs;const n=10**e;return function(t){this._+=t[0];for(let e=1,r=t.length;e<r;++e)this._+=Math.round(arguments[e]*n)/n+t[e]}}(t)}moveTo(t,e){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}`}closePath(){null!==this._x1&&(this._x1=this._x0,this._y1=this._y0,this._append`Z`)}lineTo(t,e){this._append`L${this._x1=+t},${this._y1=+e}`}quadraticCurveTo(t,e,n,r){this._append`Q${+t},${+e},${this._x1=+n},${this._y1=+r}`}bezierCurveTo(t,e,n,r,i,a){this._append`C${+t},${+e},${+n},${+r},${this._x1=+i},${this._y1=+a}`}arcTo(t,e,n,r,i){if(t=+t,e=+e,n=+n,r=+r,(i=+i)<0)throw new Error(`negative radius: ${i}`);let a=this._x1,s=this._y1,o=n-t,c=r-e,l=a-t,h=s-e,u=l*l+h*h;if(null===this._x1)this._append`M${this._x1=t},${this._y1=e}`;else if(u>Hs)if(Math.abs(h*o-c*l)>Hs&&i){let d=n-a,p=r-s,f=o*o+c*c,g=d*d+p*p,y=Math.sqrt(f),m=Math.sqrt(u),b=i*Math.tan((Ws-Math.acos((f+u-g)/(2*y*m)))/2),_=b/m,x=b/y;Math.abs(_-1)>Hs&&this._append`L${t+_*l},${e+_*h}`,this._append`A${i},${i},0,0,${+(h*d>l*p)},${this._x1=t+x*o},${this._y1=e+x*c}`}else this._append`L${this._x1=t},${this._y1=e}`;else;}arc(t,e,n,r,i,a){if(t=+t,e=+e,a=!!a,(n=+n)<0)throw new Error(`negative radius: ${n}`);let s=n*Math.cos(r),o=n*Math.sin(r),c=t+s,l=e+o,h=1^a,u=a?r-i:i-r;null===this._x1?this._append`M${c},${l}`:(Math.abs(this._x1-c)>Hs||Math.abs(this._y1-l)>Hs)&&this._append`L${c},${l}`,n&&(u<0&&(u=u%qs+qs),u>Vs?this._append`A${n},${n},0,1,${h},${t-s},${e-o}A${n},${n},0,1,${h},${this._x1=c},${this._y1=l}`:u>Hs&&this._append`A${n},${n},0,${+(u>=Ws)},${h},${this._x1=t+n*Math.cos(i)},${this._y1=e+n*Math.sin(i)}`)}rect(t,e,n,r){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}h${n=+n}v${+r}h${-n}Z`}toString(){return this._}}function Ks(t){let e=3;return t.digits=function(n){if(!arguments.length)return e;if(null==n)e=null;else{const t=Math.floor(n);if(!(t>=0))throw new RangeError(`invalid digits: ${n}`);e=t}return t},()=>new Xs(e)}function Qs(t){return t.innerRadius}function Js(t){return t.outerRadius}function to(t){return t.startAngle}function eo(t){return t.endAngle}function no(t){return t&&t.padAngle}function ro(t,e,n,r,i,a,s,o){var c=n-t,l=r-e,h=s-i,u=o-a,d=u*c-h*l;if(!(d*d<Zs))return[t+(d=(h*(e-a)-u*(t-i))/d)*c,e+d*l]}function io(t,e,n,r,i,a,s){var o=t-n,c=e-r,l=(s?a:-a)/Rs(o*o+c*c),h=l*c,u=-l*o,d=t+h,p=e+u,f=n+h,g=r+u,y=(d+f)/2,m=(p+g)/2,b=f-d,_=g-p,x=b*b+_*_,v=i-a,k=d*g-f*p,w=(_<0?-1:1)*Rs(Is(0,v*v*x-k*k)),E=(k*_-b*w)/x,C=(-k*b-_*w)/x,T=(k*_+b*w)/x,S=(-k*b+_*w)/x,A=E-y,L=C-m,B=T-y,N=S-m;return A*A+L*L>B*B+N*N&&(E=T,C=S),{cx:E,cy:C,x01:-h,y01:-u,x11:E*(i/v-1),y11:C*(i/v-1)}}function ao(){var t=Qs,e=Js,n=Ns(0),r=null,i=to,a=eo,s=no,o=null,c=Ks(l);function l(){var l,h,u=+t.apply(this,arguments),d=+e.apply(this,arguments),p=i.apply(this,arguments)-js,f=a.apply(this,arguments)-js,g=Ds(f-p),y=f>p;if(o||(o=l=c()),d<u&&(h=d,d=u,u=h),d>Zs)if(g>Ys-Zs)o.moveTo(d*Ms(p),d*$s(p)),o.arc(0,0,d,p,f,!y),u>Zs&&(o.moveTo(u*Ms(f),u*$s(f)),o.arc(0,0,u,f,p,y));else{var m,b,_=p,x=f,v=p,k=f,w=g,E=g,C=s.apply(this,arguments)/2,T=C>Zs&&(r?+r.apply(this,arguments):Rs(u*u+d*d)),S=Fs(Ds(d-u)/2,+n.apply(this,arguments)),A=S,L=S;if(T>Zs){var B=Us(T/u*$s(C)),N=Us(T/d*$s(C));(w-=2*B)>Zs?(v+=B*=y?1:-1,k-=B):(w=0,v=k=(p+f)/2),(E-=2*N)>Zs?(_+=N*=y?1:-1,x-=N):(E=0,_=x=(p+f)/2)}var D=d*Ms(_),O=d*$s(_),M=u*Ms(k),I=u*$s(k);if(S>Zs){var F,$=d*Ms(x),R=d*$s(x),Z=u*Ms(v),P=u*$s(v);if(g<Ps)if(F=ro(D,O,Z,P,$,R,M,I)){var j=D-F[0],Y=O-F[1],z=$-F[0],U=R-F[1],W=1/$s(zs((j*z+Y*U)/(Rs(j*j+Y*Y)*Rs(z*z+U*U)))/2),q=Rs(F[0]*F[0]+F[1]*F[1]);A=Fs(S,(u-q)/(W-1)),L=Fs(S,(d-q)/(W+1))}else A=L=0}E>Zs?L>Zs?(m=io(Z,P,D,O,d,L,y),b=io($,R,M,I,d,L,y),o.moveTo(m.cx+m.x01,m.cy+m.y01),L<S?o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,d,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),!y),o.arc(b.cx,b.cy,L,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):(o.moveTo(D,O),o.arc(0,0,d,_,x,!y)):o.moveTo(D,O),u>Zs&&w>Zs?A>Zs?(m=io(M,I,$,R,u,-A,y),b=io(D,O,Z,P,u,-A,y),o.lineTo(m.cx+m.x01,m.cy+m.y01),A<S?o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,u,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),y),o.arc(b.cx,b.cy,A,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):o.arc(0,0,u,k,v,y):o.lineTo(M,I)}else o.moveTo(0,0);if(o.closePath(),l)return o=null,l+""||null}return l.centroid=function(){var n=(+t.apply(this,arguments)+ +e.apply(this,arguments))/2,r=(+i.apply(this,arguments)+ +a.apply(this,arguments))/2-Ps/2;return[Ms(r)*n,$s(r)*n]},l.innerRadius=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),l):t},l.outerRadius=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),l):e},l.cornerRadius=function(t){return arguments.length?(n="function"==typeof t?t:Ns(+t),l):n},l.padRadius=function(t){return arguments.length?(r=null==t?null:"function"==typeof t?t:Ns(+t),l):r},l.startAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),l):i},l.endAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),l):a},l.padAngle=function(t){return arguments.length?(s="function"==typeof t?t:Ns(+t),l):s},l.context=function(t){return arguments.length?(o=null==t?null:t,l):o},l}Array.prototype.slice;function so(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function oo(t){this._context=t}function co(t){return new oo(t)}function lo(t){return t[0]}function ho(t){return t[1]}function uo(t,e){var n=Ns(!0),r=null,i=co,a=null,s=Ks(o);function o(o){var c,l,h,u=(o=so(o)).length,d=!1;for(null==r&&(a=i(h=s())),c=0;c<=u;++c)!(c<u&&n(l=o[c],c,o))===d&&((d=!d)?a.lineStart():a.lineEnd()),d&&a.point(+t(l,c,o),+e(l,c,o));if(h)return a=null,h+""||null}return t="function"==typeof t?t:void 0===t?lo:Ns(t),e="function"==typeof e?e:void 0===e?ho:Ns(e),o.x=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),o):t},o.y=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),o):e},o.defined=function(t){return arguments.length?(n="function"==typeof t?t:Ns(!!t),o):n},o.curve=function(t){return arguments.length?(i=t,null!=r&&(a=i(r)),o):i},o.context=function(t){return arguments.length?(null==t?r=a=null:a=i(r=t),o):r},o}function po(t,e){return e<t?-1:e>t?1:e>=t?0:NaN}function fo(t){return t}function go(){var t=fo,e=po,n=null,r=Ns(0),i=Ns(Ys),a=Ns(0);function s(s){var o,c,l,h,u,d=(s=so(s)).length,p=0,f=new Array(d),g=new Array(d),y=+r.apply(this,arguments),m=Math.min(Ys,Math.max(-Ys,i.apply(this,arguments)-y)),b=Math.min(Math.abs(m)/d,a.apply(this,arguments)),_=b*(m<0?-1:1);for(o=0;o<d;++o)(u=g[f[o]=o]=+t(s[o],o,s))>0&&(p+=u);for(null!=e?f.sort((function(t,n){return e(g[t],g[n])})):null!=n&&f.sort((function(t,e){return n(s[t],s[e])})),o=0,l=p?(m-d*_)/p:0;o<d;++o,y=h)c=f[o],h=y+((u=g[c])>0?u*l:0)+_,g[c]={data:s[c],index:o,value:u,startAngle:y,endAngle:h,padAngle:b};return g}return s.value=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),s):t},s.sortValues=function(t){return arguments.length?(e=t,n=null,s):e},s.sort=function(t){return arguments.length?(n=t,e=null,s):n},s.startAngle=function(t){return arguments.length?(r="function"==typeof t?t:Ns(+t),s):r},s.endAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),s):i},s.padAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),s):a},s}function yo(){}function mo(t,e,n){t._context.bezierCurveTo((2*t._x0+t._x1)/3,(2*t._y0+t._y1)/3,(t._x0+2*t._x1)/3,(t._y0+2*t._y1)/3,(t._x0+4*t._x1+e)/6,(t._y0+4*t._y1+n)/6)}function bo(t){this._context=t}function _o(t){return new bo(t)}function xo(t){this._context=t}function vo(t){return new xo(t)}function ko(t){this._context=t}function wo(t){return new ko(t)}oo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._point=0},lineEnd:function(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._context.lineTo(t,e)}}},bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){switch(this._point){case 3:mo(this,this._x1,this._y1);case 2:this._context.lineTo(this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,this._context.lineTo((5*this._x0+this._x1)/6,(5*this._y0+this._y1)/6);default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},xo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._y0=this._y1=this._y2=this._y3=this._y4=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x2,this._y2),this._context.closePath();break;case 2:this._context.moveTo((this._x2+2*this._x3)/3,(this._y2+2*this._y3)/3),this._context.lineTo((this._x3+2*this._x2)/3,(this._y3+2*this._y2)/3),this._context.closePath();break;case 3:this.point(this._x2,this._y2),this.point(this._x3,this._y3),this.point(this._x4,this._y4)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x2=t,this._y2=e;break;case 1:this._point=2,this._x3=t,this._y3=e;break;case 2:this._point=3,this._x4=t,this._y4=e,this._context.moveTo((this._x0+4*this._x1+t)/6,(this._y0+4*this._y1+e)/6);break;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},ko.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3;var n=(this._x0+4*this._x1+t)/6,r=(this._y0+4*this._y1+e)/6;this._line?this._context.lineTo(n,r):this._context.moveTo(n,r);break;case 3:this._point=4;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}};class Eo{constructor(t,e){this._context=t,this._x=e}areaStart(){this._line=0}areaEnd(){this._line=NaN}lineStart(){this._point=0}lineEnd(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line}point(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._x?this._context.bezierCurveTo(this._x0=(this._x0+t)/2,this._y0,this._x0,e,t,e):this._context.bezierCurveTo(this._x0,this._y0=(this._y0+e)/2,t,this._y0,t,e)}this._x0=t,this._y0=e}}function Co(t){return new Eo(t,!0)}function To(t){return new Eo(t,!1)}function So(t,e){this._basis=new bo(t),this._beta=e}So.prototype={lineStart:function(){this._x=[],this._y=[],this._basis.lineStart()},lineEnd:function(){var t=this._x,e=this._y,n=t.length-1;if(n>0)for(var r,i=t[0],a=e[0],s=t[n]-i,o=e[n]-a,c=-1;++c<=n;)r=c/n,this._basis.point(this._beta*t[c]+(1-this._beta)*(i+r*s),this._beta*e[c]+(1-this._beta)*(a+r*o));this._x=this._y=null,this._basis.lineEnd()},point:function(t,e){this._x.push(+t),this._y.push(+e)}};const Ao=function t(e){function n(t){return 1===e?new bo(t):new So(t,e)}return n.beta=function(e){return t(+e)},n}(.85);function Lo(t,e,n){t._context.bezierCurveTo(t._x1+t._k*(t._x2-t._x0),t._y1+t._k*(t._y2-t._y0),t._x2+t._k*(t._x1-e),t._y2+t._k*(t._y1-n),t._x2,t._y2)}function Bo(t,e){this._context=t,this._k=(1-e)/6}Bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:Lo(this,this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2,this._x1=t,this._y1=e;break;case 2:this._point=3;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const No=function t(e){function n(t){return new Bo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Do(t,e){this._context=t,this._k=(1-e)/6}Do.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Oo=function t(e){function n(t){return new Do(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Mo(t,e){this._context=t,this._k=(1-e)/6}Mo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Io=function t(e){function n(t){return new Mo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Fo(t,e,n){var r=t._x1,i=t._y1,a=t._x2,s=t._y2;if(t._l01_a>Zs){var o=2*t._l01_2a+3*t._l01_a*t._l12_a+t._l12_2a,c=3*t._l01_a*(t._l01_a+t._l12_a);r=(r*o-t._x0*t._l12_2a+t._x2*t._l01_2a)/c,i=(i*o-t._y0*t._l12_2a+t._y2*t._l01_2a)/c}if(t._l23_a>Zs){var l=2*t._l23_2a+3*t._l23_a*t._l12_a+t._l12_2a,h=3*t._l23_a*(t._l23_a+t._l12_a);a=(a*l+t._x1*t._l23_2a-e*t._l12_2a)/h,s=(s*l+t._y1*t._l23_2a-n*t._l12_2a)/h}t._context.bezierCurveTo(r,i,a,s,t._x2,t._y2)}function $o(t,e){this._context=t,this._alpha=e}$o.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:this.point(this._x2,this._y2)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Ro=function t(e){function n(t){return e?new $o(t,e):new Bo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function Zo(t,e){this._context=t,this._alpha=e}Zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Po=function t(e){function n(t){return e?new Zo(t,e):new Do(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function jo(t,e){this._context=t,this._alpha=e}jo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Yo=function t(e){function n(t){return e?new jo(t,e):new Mo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function zo(t){this._context=t}function Uo(t){return new zo(t)}function Wo(t){return t<0?-1:1}function qo(t,e,n){var r=t._x1-t._x0,i=e-t._x1,a=(t._y1-t._y0)/(r||i<0&&-0),s=(n-t._y1)/(i||r<0&&-0),o=(a*i+s*r)/(r+i);return(Wo(a)+Wo(s))*Math.min(Math.abs(a),Math.abs(s),.5*Math.abs(o))||0}function Ho(t,e){var n=t._x1-t._x0;return n?(3*(t._y1-t._y0)/n-e)/2:e}function Vo(t,e,n){var r=t._x0,i=t._y0,a=t._x1,s=t._y1,o=(a-r)/3;t._context.bezierCurveTo(r+o,i+o*e,a-o,s-o*n,a,s)}function Go(t){this._context=t}function Xo(t){this._context=new Ko(t)}function Ko(t){this._context=t}function Qo(t){return new Go(t)}function Jo(t){return new Xo(t)}function tc(t){this._context=t}function ec(t){var e,n,r=t.length-1,i=new Array(r),a=new Array(r),s=new Array(r);for(i[0]=0,a[0]=2,s[0]=t[0]+2*t[1],e=1;e<r-1;++e)i[e]=1,a[e]=4,s[e]=4*t[e]+2*t[e+1];for(i[r-1]=2,a[r-1]=7,s[r-1]=8*t[r-1]+t[r],e=1;e<r;++e)n=i[e]/a[e-1],a[e]-=n,s[e]-=n*s[e-1];for(i[r-1]=s[r-1]/a[r-1],e=r-2;e>=0;--e)i[e]=(s[e]-i[e+1])/a[e];for(a[r-1]=(t[r]+i[r-1])/2,e=0;e<r-1;++e)a[e]=2*t[e+1]-i[e+1];return[i,a]}function nc(t){return new tc(t)}function rc(t,e){this._context=t,this._t=e}function ic(t){return new rc(t,.5)}function ac(t){return new rc(t,0)}function sc(t){return new rc(t,1)}function oc(t,e,n){this.k=t,this.x=e,this.y=n}zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._point=0},lineEnd:function(){this._point&&this._context.closePath()},point:function(t,e){t=+t,e=+e,this._point?this._context.lineTo(t,e):(this._point=1,this._context.moveTo(t,e))}},Go.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=this._t0=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x1,this._y1);break;case 3:Vo(this,this._t0,Ho(this,this._t0))}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){var n=NaN;if(e=+e,(t=+t)!==this._x1||e!==this._y1){switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,Vo(this,Ho(this,n=qo(this,t,e)),n);break;default:Vo(this,this._t0,n=qo(this,t,e))}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e,this._t0=n}}},(Xo.prototype=Object.create(Go.prototype)).point=function(t,e){Go.prototype.point.call(this,e,t)},Ko.prototype={moveTo:function(t,e){this._context.moveTo(e,t)},closePath:function(){this._context.closePath()},lineTo:function(t,e){this._context.lineTo(e,t)},bezierCurveTo:function(t,e,n,r,i,a){this._context.bezierCurveTo(e,t,r,n,a,i)}},tc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=[],this._y=[]},lineEnd:function(){var t=this._x,e=this._y,n=t.length;if(n)if(this._line?this._context.lineTo(t[0],e[0]):this._context.moveTo(t[0],e[0]),2===n)this._context.lineTo(t[1],e[1]);else for(var r=ec(t),i=ec(e),a=0,s=1;s<n;++a,++s)this._context.bezierCurveTo(r[0][a],i[0][a],r[1][a],i[1][a],t[s],e[s]);(this._line||0!==this._line&&1===n)&&this._context.closePath(),this._line=1-this._line,this._x=this._y=null},point:function(t,e){this._x.push(+t),this._y.push(+e)}},rc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=this._y=NaN,this._point=0},lineEnd:function(){0<this._t&&this._t<1&&2===this._point&&this._context.lineTo(this._x,this._y),(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line>=0&&(this._t=1-this._t,this._line=1-this._line)},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:if(this._t<=0)this._context.lineTo(this._x,e),this._context.lineTo(t,e);else{var n=this._x*(1-this._t)+t*this._t;this._context.lineTo(n,this._y),this._context.lineTo(n,e)}}this._x=t,this._y=e}},oc.prototype={constructor:oc,scale:function(t){return 1===t?this:new oc(this.k*t,this.x,this.y)},translate:function(t,e){return 0===t&0===e?this:new oc(this.k,this.x+this.k*t,this.y+this.k*e)},apply:function(t){return[t[0]*this.k+this.x,t[1]*this.k+this.y]},applyX:function(t){return t*this.k+this.x},applyY:function(t){return t*this.k+this.y},invert:function(t){return[(t[0]-this.x)/this.k,(t[1]-this.y)/this.k]},invertX:function(t){return(t-this.x)/this.k},invertY:function(t){return(t-this.y)/this.k},rescaleX:function(t){return t.copy().domain(t.range().map(this.invertX,this).map(t.invert,t))},rescaleY:function(t){return t.copy().domain(t.range().map(this.invertY,this).map(t.invert,t))},toString:function(){return"translate("+this.x+","+this.y+") scale("+this.k+")"}};new oc(1,0,0);oc.prototype},3352:(t,e,n)=>{"use strict";function r(t,e,n,r){var a,s,o,c,l,h,u,d,p,f,g,y,m;if(a=e.y-t.y,o=t.x-e.x,l=e.x*t.y-t.x*e.y,p=a*n.x+o*n.y+l,f=a*r.x+o*r.y+l,!(0!==p&&0!==f&&i(p,f)||(s=r.y-n.y,c=n.x-r.x,h=r.x*n.y-n.x*r.y,u=s*t.x+c*t.y+h,d=s*e.x+c*e.y+h,0!==u&&0!==d&&i(u,d)||0==(g=a*c-s*o))))return y=Math.abs(g/2),{x:(m=o*h-c*l)<0?(m-y)/g:(m+y)/g,y:(m=s*l-a*h)<0?(m-y)/g:(m+y)/g}}function i(t,e){return t*e>0}function a(t,e,n){var i=t.x,a=t.y,s=[],o=Number.POSITIVE_INFINITY,c=Number.POSITIVE_INFINITY;e.forEach((function(t){o=Math.min(o,t.x),c=Math.min(c,t.y)}));for(var l=i-t.width/2-o,h=a-t.height/2-c,u=0;u<e.length;u++){var d=e[u],p=e[u<e.length-1?u+1:0],f=r(t,n,{x:l+d.x,y:h+d.y},{x:l+p.x,y:h+p.y});f&&s.push(f)}return s.length?(s.length>1&&s.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),s[0]):(console.log("NO INTERSECTION FOUND, RETURN NODE CENTER",t),t)}n.d(e,{A:()=>a})},2930:(t,e,n)=>{"use strict";function r(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}}n.d(e,{q:()=>r})},3349:(t,e,n)=>{"use strict";n.d(e,{a:()=>i});var r=n(6225);function i(t,e){var n=t.append("foreignObject").attr("width","100000"),i=n.append("xhtml:div");i.attr("xmlns","http://www.w3.org/1999/xhtml");var a=e.label;switch(typeof a){case"function":i.insert(a);break;case"object":i.insert((function(){return a}));break;default:i.html(a)}r.bg(i,e.labelStyle),i.style("display","inline-block"),i.style("white-space","nowrap");var s=i.node().getBoundingClientRect();return n.attr("width",s.width).attr("height",s.height),n}},6225:(t,e,n)=>{"use strict";n.d(e,{$p:()=>h,O1:()=>s,WR:()=>u,bF:()=>a,bg:()=>l});var r=n(7514),i=n(3234);function a(t,e){return!!t.children(e).length}function s(t){return c(t.v)+":"+c(t.w)+":"+c(t.name)}var o=/:/g;function c(t){return t?String(t).replace(o,"\\:"):""}function l(t,e){e&&t.attr("style",e)}function h(t,e,n){e&&t.attr("class",e).attr("class",n+" "+t.attr("class"))}function u(t,e){var n=e.graph();if(r.Z(n)){var a=n.transition;if(i.Z(a))return a(t)}return t}},277:(t,e,n)=>{"use strict";n.d(e,{bK:()=>Ve});var r=n(870),i=n(6749),a=n(7452),s=n(2002),o=n(7961),c=n(3836),l=n(4379),h=n(5625);class u{constructor(){var t={};t._next=t._prev=t,this._sentinel=t}dequeue(){var t=this._sentinel,e=t._prev;if(e!==t)return d(e),e}enqueue(t){var e=this._sentinel;t._prev&&t._next&&d(t),t._next=e._next,e._next._prev=t,e._next=t,t._prev=e}toString(){for(var t=[],e=this._sentinel,n=e._prev;n!==e;)t.push(JSON.stringify(n,p)),n=n._prev;return"["+t.join(", ")+"]"}}function d(t){t._prev._next=t._next,t._next._prev=t._prev,delete t._next,delete t._prev}function p(t,e){if("_next"!==t&&"_prev"!==t)return e}var f=s.Z(1);function g(t,e){if(t.nodeCount()<=1)return[];var n=function(t,e){var n=new h.k,i=0,a=0;r.Z(t.nodes(),(function(t){n.setNode(t,{v:t,in:0,out:0})})),r.Z(t.edges(),(function(t){var r=n.edge(t.v,t.w)||0,s=e(t),o=r+s;n.setEdge(t.v,t.w,o),a=Math.max(a,n.node(t.v).out+=s),i=Math.max(i,n.node(t.w).in+=s)}));var s=l.Z(a+i+3).map((function(){return new u})),o=i+1;return r.Z(n.nodes(),(function(t){m(s,o,n.node(t))})),{graph:n,buckets:s,zeroIdx:o}}(t,e||f),i=function(t,e,n){var r,i=[],a=e[e.length-1],s=e[0];for(;t.nodeCount();){for(;r=s.dequeue();)y(t,e,n,r);for(;r=a.dequeue();)y(t,e,n,r);if(t.nodeCount())for(var o=e.length-2;o>0;--o)if(r=e[o].dequeue()){i=i.concat(y(t,e,n,r,!0));break}}return i}(n.graph,n.buckets,n.zeroIdx);return o.Z(c.Z(i,(function(e){return t.outEdges(e.v,e.w)})))}function y(t,e,n,i,a){var s=a?[]:void 0;return r.Z(t.inEdges(i.v),(function(r){var i=t.edge(r),o=t.node(r.v);a&&s.push({v:r.v,w:r.w}),o.out-=i,m(e,n,o)})),r.Z(t.outEdges(i.v),(function(r){var i=t.edge(r),a=r.w,s=t.node(a);s.in-=i,m(e,n,s)})),t.removeNode(i.v),s}function m(t,e,n){n.out?n.in?t[n.out-n.in+e].enqueue(n):t[t.length-1].enqueue(n):t[0].enqueue(n)}function b(t){var e="greedy"===t.graph().acyclicer?g(t,function(t){return function(e){return t.edge(e).weight}}(t)):function(t){var e=[],n={},i={};function s(o){a.Z(i,o)||(i[o]=!0,n[o]=!0,r.Z(t.outEdges(o),(function(t){a.Z(n,t.w)?e.push(t):s(t.w)})),delete n[o])}return r.Z(t.nodes(),s),e}(t);r.Z(e,(function(e){var n=t.edge(e);t.removeEdge(e),n.forwardName=e.name,n.reversed=!0,t.setEdge(e.w,e.v,n,i.Z("rev"))}))}var _=n(1667),x=n(4752),v=n(9651);const k=function(t,e,n){(void 0!==n&&!(0,v.Z)(t[e],n)||void 0===n&&!(e in t))&&(0,x.Z)(t,e,n)};var w=n(1395),E=n(1050),C=n(2701),T=n(7215),S=n(3658),A=n(9169),L=n(7771),B=n(836),N=n(7008),D=n(3234),O=n(7226),M=n(7514),I=n(8843);const F=function(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]};var $=n(1899),R=n(2957);const Z=function(t){return(0,$.Z)(t,(0,R.Z)(t))};const P=function(t,e,n,r,i,a,s){var o=F(t,n),c=F(e,n),l=s.get(c);if(l)k(t,n,l);else{var h=a?a(o,c,n+"",t,e,s):void 0,u=void 0===h;if(u){var d=(0,L.Z)(c),p=!d&&(0,N.Z)(c),f=!d&&!p&&(0,I.Z)(c);h=c,d||p||f?(0,L.Z)(o)?h=o:(0,B.Z)(o)?h=(0,T.Z)(o):p?(u=!1,h=(0,E.Z)(c,!0)):f?(u=!1,h=(0,C.Z)(c,!0)):h=[]:(0,M.Z)(c)||(0,A.Z)(c)?(h=o,(0,A.Z)(o)?h=Z(o):(0,O.Z)(o)&&!(0,D.Z)(o)||(h=(0,S.Z)(c))):u=!1}u&&(s.set(c,h),i(h,c,r,a,s),s.delete(c)),k(t,n,h)}};const j=function t(e,n,r,i,a){e!==n&&(0,w.Z)(n,(function(s,o){if(a||(a=new _.Z),(0,O.Z)(s))P(e,n,o,r,t,i,a);else{var c=i?i(F(e,o),s,o+"",e,n,a):void 0;void 0===c&&(c=s),k(e,o,c)}}),R.Z)};var Y=n(9581),z=n(439);const U=function(t){return(0,Y.Z)((function(e,n){var r=-1,i=n.length,a=i>1?n[i-1]:void 0,s=i>2?n[2]:void 0;for(a=t.length>3&&"function"==typeof a?(i--,a):void 0,s&&(0,z.Z)(n[0],n[1],s)&&(a=i<3?void 0:a,i=1),e=Object(e);++r<i;){var o=n[r];o&&t(e,o,r,a)}return e}))}((function(t,e,n){j(t,e,n)}));var W=n(1666),q=n(3688),H=n(2714);const V=function(t,e,n){for(var r=-1,i=t.length;++r<i;){var a=t[r],s=e(a);if(null!=s&&(void 0===o?s==s&&!(0,H.Z)(s):n(s,o)))var o=s,c=a}return c};const G=function(t,e){return t>e};var X=n(9203);const K=function(t){return t&&t.length?V(t,X.Z,G):void 0};const Q=function(t){var e=null==t?0:t.length;return e?t[e-1]:void 0};var J=n(2693),tt=n(4765);const et=function(t,e){var n={};return e=(0,tt.Z)(e,3),(0,J.Z)(t,(function(t,r,i){(0,x.Z)(n,r,e(t,r,i))})),n};var nt=n(9360);const rt=function(t,e){return t<e};const it=function(t){return t&&t.length?V(t,X.Z,rt):void 0};var at=n(6092);const st=function(){return at.Z.Date.now()};function ot(t,e,n,r){var a;do{a=i.Z(r)}while(t.hasNode(a));return n.dummy=e,t.setNode(a,n),a}function ct(t){var e=new h.k({multigraph:t.isMultigraph()}).setGraph(t.graph());return r.Z(t.nodes(),(function(n){t.children(n).length||e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){e.setEdge(n,t.edge(n))})),e}function lt(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;if(!s&&!o)throw new Error("Not possible to find intersection inside of the rectangle");return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=l*s/o,r=l):(s<0&&(c=-c),n=c,r=c*o/s),{x:i+n,y:a+r}}function ht(t){var e=c.Z(l.Z(dt(t)+1),(function(){return[]}));return r.Z(t.nodes(),(function(n){var r=t.node(n),i=r.rank;nt.Z(i)||(e[i][r.order]=n)})),e}function ut(t,e,n,r){var i={width:0,height:0};return arguments.length>=4&&(i.rank=n,i.order=r),ot(t,"border",i,e)}function dt(t){return K(c.Z(t.nodes(),(function(e){var n=t.node(e).rank;if(!nt.Z(n))return n})))}function pt(t,e){var n=st();try{return e()}finally{console.log(t+" time: "+(st()-n)+"ms")}}function ft(t,e){return e()}function gt(t,e,n,r,i,a){var s={width:0,height:0,rank:a,borderType:e},o=i[e][a-1],c=ot(t,"border",s,n);i[e][a]=c,t.setParent(c,r),o&&t.setEdge(o,c,{weight:1})}function yt(t){var e=t.graph().rankdir.toLowerCase();"bt"!==e&&"rl"!==e||function(t){r.Z(t.nodes(),(function(e){_t(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,_t),a.Z(n,"y")&&_t(n)}))}(t),"lr"!==e&&"rl"!==e||(!function(t){r.Z(t.nodes(),(function(e){xt(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,xt),a.Z(n,"x")&&xt(n)}))}(t),mt(t))}function mt(t){r.Z(t.nodes(),(function(e){bt(t.node(e))})),r.Z(t.edges(),(function(e){bt(t.edge(e))}))}function bt(t){var e=t.width;t.width=t.height,t.height=e}function _t(t){t.y=-t.y}function xt(t){var e=t.x;t.x=t.y,t.y=e}function vt(t){t.graph().dummyChains=[],r.Z(t.edges(),(function(e){!function(t,e){var n,r,i,a=e.v,s=t.node(a).rank,o=e.w,c=t.node(o).rank,l=e.name,h=t.edge(e),u=h.labelRank;if(c===s+1)return;for(t.removeEdge(e),i=0,++s;s<c;++i,++s)h.points=[],n=ot(t,"edge",r={width:0,height:0,edgeLabel:h,edgeObj:e,rank:s},"_d"),s===u&&(r.width=h.width,r.height=h.height,r.dummy="edge-label",r.labelpos=h.labelpos),t.setEdge(a,n,{weight:h.weight},l),0===i&&t.graph().dummyChains.push(n),a=n;t.setEdge(a,o,{weight:h.weight},l)}(t,e)}))}const kt=function(t,e){return t&&t.length?V(t,(0,tt.Z)(e,2),rt):void 0};function wt(t){var e={};r.Z(t.sources(),(function n(r){var i=t.node(r);if(a.Z(e,r))return i.rank;e[r]=!0;var s=it(c.Z(t.outEdges(r),(function(e){return n(e.w)-t.edge(e).minlen})));return s!==Number.POSITIVE_INFINITY&&null!=s||(s=0),i.rank=s}))}function Et(t,e){return t.node(e.w).rank-t.node(e.v).rank-t.edge(e).minlen}function Ct(t){var e,n,r=new h.k({directed:!1}),i=t.nodes()[0],a=t.nodeCount();for(r.setNode(i,{});Tt(r,t)<a;)e=St(r,t),n=r.hasNode(e.v)?Et(t,e):-Et(t,e),At(r,t,n);return r}function Tt(t,e){return r.Z(t.nodes(),(function n(i){r.Z(e.nodeEdges(i),(function(r){var a=r.v,s=i===a?r.w:a;t.hasNode(s)||Et(e,r)||(t.setNode(s,{}),t.setEdge(i,s,{}),n(s))}))})),t.nodeCount()}function St(t,e){return kt(e.edges(),(function(n){if(t.hasNode(n.v)!==t.hasNode(n.w))return Et(e,n)}))}function At(t,e,n){r.Z(t.nodes(),(function(t){e.node(t).rank+=n}))}var Lt=n(585),Bt=n(7179);const Nt=function(t){return function(e,n,r){var i=Object(e);if(!(0,Lt.Z)(e)){var a=(0,tt.Z)(n,3);e=(0,Bt.Z)(e),n=function(t){return a(i[t],t,i)}}var s=t(e,n,r);return s>-1?i[a?e[s]:s]:void 0}};var Dt=n(1692),Ot=n(4099);const Mt=function(t){var e=(0,Ot.Z)(t),n=e%1;return e==e?n?e-n:e:0};var It=Math.max;const Ft=Nt((function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var i=null==n?0:Mt(n);return i<0&&(i=It(r+i,0)),(0,Dt.Z)(t,(0,tt.Z)(e,3),i)}));var $t=n(3445);s.Z(1);s.Z(1);n(9473),n(3970),n(3589),n(8533);(0,n(4193).Z)("length");RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");var Rt="[\\ud800-\\udfff]",Zt="[\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff]",Pt="\\ud83c[\\udffb-\\udfff]",jt="[^\\ud800-\\udfff]",Yt="(?:\\ud83c[\\udde6-\\uddff]){2}",zt="[\\ud800-\\udbff][\\udc00-\\udfff]",Ut="(?:"+Zt+"|"+Pt+")"+"?",Wt="[\\ufe0e\\ufe0f]?",qt=Wt+Ut+("(?:\\u200d(?:"+[jt,Yt,zt].join("|")+")"+Wt+Ut+")*"),Ht="(?:"+[jt+Zt+"?",Zt,Yt,zt,Rt].join("|")+")";RegExp(Pt+"(?="+Pt+")|"+Ht+qt,"g");function Vt(){}function Gt(t,e,n){L.Z(e)||(e=[e]);var i=(t.isDirected()?t.successors:t.neighbors).bind(t),a=[],s={};return r.Z(e,(function(e){if(!t.hasNode(e))throw new Error("Graph does not have node: "+e);Xt(t,e,"post"===n,s,i,a)})),a}function Xt(t,e,n,i,s,o){a.Z(i,e)||(i[e]=!0,n||o.push(e),r.Z(s(e),(function(e){Xt(t,e,n,i,s,o)})),n&&o.push(e))}Vt.prototype=new Error;n(2544);function Kt(t){t=function(t){var e=(new h.k).setGraph(t.graph());return r.Z(t.nodes(),(function(n){e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){var r=e.edge(n.v,n.w)||{weight:0,minlen:1},i=t.edge(n);e.setEdge(n.v,n.w,{weight:r.weight+i.weight,minlen:Math.max(r.minlen,i.minlen)})})),e}(t),wt(t);var e,n=Ct(t);for(te(n),Qt(n,t);e=ne(n);)ie(n,t,e,re(n,t,e))}function Qt(t,e){var n=function(t,e){return Gt(t,e,"post")}(t,t.nodes());n=n.slice(0,n.length-1),r.Z(n,(function(n){!function(t,e,n){var r=t.node(n).parent;t.edge(n,r).cutvalue=Jt(t,e,n)}(t,e,n)}))}function Jt(t,e,n){var i=t.node(n).parent,a=!0,s=e.edge(n,i),o=0;return s||(a=!1,s=e.edge(i,n)),o=s.weight,r.Z(e.nodeEdges(n),(function(r){var s,c,l=r.v===n,h=l?r.w:r.v;if(h!==i){var u=l===a,d=e.edge(r).weight;if(o+=u?d:-d,s=n,c=h,t.hasEdge(s,c)){var p=t.edge(n,h).cutvalue;o+=u?-p:p}}})),o}function te(t,e){arguments.length<2&&(e=t.nodes()[0]),ee(t,{},1,e)}function ee(t,e,n,i,s){var o=n,c=t.node(i);return e[i]=!0,r.Z(t.neighbors(i),(function(r){a.Z(e,r)||(n=ee(t,e,n,r,i))})),c.low=o,c.lim=n++,s?c.parent=s:delete c.parent,n}function ne(t){return Ft(t.edges(),(function(e){return t.edge(e).cutvalue<0}))}function re(t,e,n){var r=n.v,i=n.w;e.hasEdge(r,i)||(r=n.w,i=n.v);var a=t.node(r),s=t.node(i),o=a,c=!1;a.lim>s.lim&&(o=s,c=!0);var l=$t.Z(e.edges(),(function(e){return c===ae(t,t.node(e.v),o)&&c!==ae(t,t.node(e.w),o)}));return kt(l,(function(t){return Et(e,t)}))}function ie(t,e,n,i){var a=n.v,s=n.w;t.removeEdge(a,s),t.setEdge(i.v,i.w,{}),te(t),Qt(t,e),function(t,e){var n=Ft(t.nodes(),(function(t){return!e.node(t).parent})),i=function(t,e){return Gt(t,e,"pre")}(t,n);i=i.slice(1),r.Z(i,(function(n){var r=t.node(n).parent,i=e.edge(n,r),a=!1;i||(i=e.edge(r,n),a=!0),e.node(n).rank=e.node(r).rank+(a?i.minlen:-i.minlen)}))}(t,e)}function ae(t,e,n){return n.low<=e.lim&&e.lim<=n.lim}function se(t){switch(t.graph().ranker){case"network-simplex":default:ce(t);break;case"tight-tree":!function(t){wt(t),Ct(t)}(t);break;case"longest-path":oe(t)}}Kt.initLowLimValues=te,Kt.initCutValues=Qt,Kt.calcCutValue=Jt,Kt.leaveEdge=ne,Kt.enterEdge=re,Kt.exchangeEdges=ie;var oe=wt;function ce(t){Kt(t)}var le=n(4148),he=n(2344);function ue(t){var e=ot(t,"root",{},"_root"),n=function(t){var e={};function n(i,a){var s=t.children(i);s&&s.length&&r.Z(s,(function(t){n(t,a+1)})),e[i]=a}return r.Z(t.children(),(function(t){n(t,1)})),e}(t),i=K(le.Z(n))-1,a=2*i+1;t.graph().nestingRoot=e,r.Z(t.edges(),(function(e){t.edge(e).minlen*=a}));var s=function(t){return he.Z(t.edges(),(function(e,n){return e+t.edge(n).weight}),0)}(t)+1;r.Z(t.children(),(function(r){de(t,e,a,s,i,n,r)})),t.graph().nodeRankFactor=a}function de(t,e,n,i,a,s,o){var c=t.children(o);if(c.length){var l=ut(t,"_bt"),h=ut(t,"_bb"),u=t.node(o);t.setParent(l,o),u.borderTop=l,t.setParent(h,o),u.borderBottom=h,r.Z(c,(function(r){de(t,e,n,i,a,s,r);var c=t.node(r),u=c.borderTop?c.borderTop:r,d=c.borderBottom?c.borderBottom:r,p=c.borderTop?i:2*i,f=u!==d?1:a-s[o]+1;t.setEdge(l,u,{weight:p,minlen:f,nestingEdge:!0}),t.setEdge(d,h,{weight:p,minlen:f,nestingEdge:!0})})),t.parent(o)||t.setEdge(e,l,{weight:0,minlen:a+s[o]})}else o!==e&&t.setEdge(e,o,{weight:0,minlen:n})}var pe=n(8451);const fe=function(t){return(0,pe.Z)(t,5)};function ge(t,e,n){var s=function(t){var e;for(;t.hasNode(e=i.Z("_root")););return e}(t),o=new h.k({compound:!0}).setGraph({root:s}).setDefaultNodeLabel((function(e){return t.node(e)}));return r.Z(t.nodes(),(function(i){var c=t.node(i),l=t.parent(i);(c.rank===e||c.minRank<=e&&e<=c.maxRank)&&(o.setNode(i),o.setParent(i,l||s),r.Z(t[n](i),(function(e){var n=e.v===i?e.w:e.v,r=o.edge(n,i),a=nt.Z(r)?0:r.weight;o.setEdge(n,i,{weight:t.edge(e).weight+a})})),a.Z(c,"minRank")&&o.setNode(i,{borderLeft:c.borderLeft[e],borderRight:c.borderRight[e]}))})),o}var ye=n(2954);const me=function(t,e,n){for(var r=-1,i=t.length,a=e.length,s={};++r<i;){var o=r<a?e[r]:void 0;n(s,t[r],o)}return s};const be=function(t,e){return me(t||[],e||[],ye.Z)};var _e=n(626),xe=n(4073),ve=n(3317),ke=n(1018);const we=function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t};var Ee=n(1162);const Ce=function(t,e){if(t!==e){var n=void 0!==t,r=null===t,i=t==t,a=(0,H.Z)(t),s=void 0!==e,o=null===e,c=e==e,l=(0,H.Z)(e);if(!o&&!l&&!a&&t>e||a&&s&&c&&!o&&!l||r&&s&&c||!n&&c||!i)return 1;if(!r&&!a&&!l&&t<e||l&&n&&i&&!r&&!a||o&&n&&i||!s&&i||!c)return-1}return 0};const Te=function(t,e,n){for(var r=-1,i=t.criteria,a=e.criteria,s=i.length,o=n.length;++r<s;){var c=Ce(i[r],a[r]);if(c)return r>=o?c:c*("desc"==n[r]?-1:1)}return t.index-e.index};const Se=function(t,e,n){e=e.length?(0,xe.Z)(e,(function(t){return(0,L.Z)(t)?function(e){return(0,ve.Z)(e,1===t.length?t[0]:t)}:t})):[X.Z];var r=-1;e=(0,xe.Z)(e,(0,Ee.Z)(tt.Z));var i=(0,ke.Z)(t,(function(t,n,i){return{criteria:(0,xe.Z)(e,(function(e){return e(t)})),index:++r,value:t}}));return we(i,(function(t,e){return Te(t,e,n)}))};const Ae=(0,Y.Z)((function(t,e){if(null==t)return[];var n=e.length;return n>1&&(0,z.Z)(t,e[0],e[1])?e=[]:n>2&&(0,z.Z)(e[0],e[1],e[2])&&(e=[e[0]]),Se(t,(0,_e.Z)(e,1),[])}));function Le(t,e){for(var n=0,r=1;r<e.length;++r)n+=Be(t,e[r-1],e[r]);return n}function Be(t,e,n){for(var i=be(n,c.Z(n,(function(t,e){return e}))),a=o.Z(c.Z(e,(function(e){return Ae(c.Z(t.outEdges(e),(function(e){return{pos:i[e.w],weight:t.edge(e).weight}})),"pos")}))),s=1;s<n.length;)s<<=1;var l=2*s-1;s-=1;var h=c.Z(new Array(l),(function(){return 0})),u=0;return r.Z(a.forEach((function(t){var e=t.pos+s;h[e]+=t.weight;for(var n=0;e>0;)e%2&&(n+=h[e+1]),h[e=e-1>>1]+=t.weight;u+=t.weight*n}))),u}function Ne(t,e){var n={};return r.Z(t,(function(t,e){var r=n[t.v]={indegree:0,in:[],out:[],vs:[t.v],i:e};nt.Z(t.barycenter)||(r.barycenter=t.barycenter,r.weight=t.weight)})),r.Z(e.edges(),(function(t){var e=n[t.v],r=n[t.w];nt.Z(e)||nt.Z(r)||(r.indegree++,e.out.push(n[t.w]))})),function(t){var e=[];function n(t){return function(e){e.merged||(nt.Z(e.barycenter)||nt.Z(t.barycenter)||e.barycenter>=t.barycenter)&&function(t,e){var n=0,r=0;t.weight&&(n+=t.barycenter*t.weight,r+=t.weight);e.weight&&(n+=e.barycenter*e.weight,r+=e.weight);t.vs=e.vs.concat(t.vs),t.barycenter=n/r,t.weight=r,t.i=Math.min(e.i,t.i),e.merged=!0}(t,e)}}function i(e){return function(n){n.in.push(e),0==--n.indegree&&t.push(n)}}for(;t.length;){var a=t.pop();e.push(a),r.Z(a.in.reverse(),n(a)),r.Z(a.out,i(a))}return c.Z($t.Z(e,(function(t){return!t.merged})),(function(t){return W.Z(t,["vs","i","barycenter","weight"])}))}($t.Z(n,(function(t){return!t.indegree})))}function De(t,e){var n,i=function(t,e){var n={lhs:[],rhs:[]};return r.Z(t,(function(t){e(t)?n.lhs.push(t):n.rhs.push(t)})),n}(t,(function(t){return a.Z(t,"barycenter")})),s=i.lhs,c=Ae(i.rhs,(function(t){return-t.i})),l=[],h=0,u=0,d=0;s.sort((n=!!e,function(t,e){return t.barycenter<e.barycenter?-1:t.barycenter>e.barycenter?1:n?e.i-t.i:t.i-e.i})),d=Oe(l,c,d),r.Z(s,(function(t){d+=t.vs.length,l.push(t.vs),h+=t.barycenter*t.weight,u+=t.weight,d=Oe(l,c,d)}));var p={vs:o.Z(l)};return u&&(p.barycenter=h/u,p.weight=u),p}function Oe(t,e,n){for(var r;e.length&&(r=Q(e)).i<=n;)e.pop(),t.push(r.vs),n++;return n}function Me(t,e,n,i){var s=t.children(e),l=t.node(e),h=l?l.borderLeft:void 0,u=l?l.borderRight:void 0,d={};h&&(s=$t.Z(s,(function(t){return t!==h&&t!==u})));var p=function(t,e){return c.Z(e,(function(e){var n=t.inEdges(e);if(n.length){var r=he.Z(n,(function(e,n){var r=t.edge(n),i=t.node(n.v);return{sum:e.sum+r.weight*i.order,weight:e.weight+r.weight}}),{sum:0,weight:0});return{v:e,barycenter:r.sum/r.weight,weight:r.weight}}return{v:e}}))}(t,s);r.Z(p,(function(e){if(t.children(e.v).length){var r=Me(t,e.v,n,i);d[e.v]=r,a.Z(r,"barycenter")&&(s=e,o=r,nt.Z(s.barycenter)?(s.barycenter=o.barycenter,s.weight=o.weight):(s.barycenter=(s.barycenter*s.weight+o.barycenter*o.weight)/(s.weight+o.weight),s.weight+=o.weight))}var s,o}));var f=Ne(p,n);!function(t,e){r.Z(t,(function(t){t.vs=o.Z(t.vs.map((function(t){return e[t]?e[t].vs:t})))}))}(f,d);var g=De(f,i);if(h&&(g.vs=o.Z([h,g.vs,u]),t.predecessors(h).length)){var y=t.node(t.predecessors(h)[0]),m=t.node(t.predecessors(u)[0]);a.Z(g,"barycenter")||(g.barycenter=0,g.weight=0),g.barycenter=(g.barycenter*g.weight+y.order+m.order)/(g.weight+2),g.weight+=2}return g}function Ie(t){var e=dt(t),n=Fe(t,l.Z(1,e+1),"inEdges"),i=Fe(t,l.Z(e-1,-1,-1),"outEdges"),s=function(t){var e={},n=$t.Z(t.nodes(),(function(e){return!t.children(e).length})),i=K(c.Z(n,(function(e){return t.node(e).rank}))),s=c.Z(l.Z(i+1),(function(){return[]})),o=Ae(n,(function(e){return t.node(e).rank}));return r.Z(o,(function n(i){if(!a.Z(e,i)){e[i]=!0;var o=t.node(i);s[o.rank].push(i),r.Z(t.successors(i),n)}})),s}(t);Re(t,s);for(var o,h=Number.POSITIVE_INFINITY,u=0,d=0;d<4;++u,++d){$e(u%2?n:i,u%4>=2);var p=Le(t,s=ht(t));p<h&&(d=0,o=fe(s),h=p)}Re(t,o)}function Fe(t,e,n){return c.Z(e,(function(e){return ge(t,e,n)}))}function $e(t,e){var n=new h.k;r.Z(t,(function(t){var i=t.graph().root,a=Me(t,i,n,e);r.Z(a.vs,(function(e,n){t.node(e).order=n})),function(t,e,n){var i,a={};r.Z(n,(function(n){for(var r,s,o=t.parent(n);o;){if((r=t.parent(o))?(s=a[r],a[r]=o):(s=i,i=o),s&&s!==o)return void e.setEdge(s,o);o=r}}))}(t,n,a.vs)}))}function Re(t,e){r.Z(e,(function(e){r.Z(e,(function(e,n){t.node(e).order=n}))}))}function Ze(t){var e=function(t){var e={},n=0;function i(a){var s=n;r.Z(t.children(a),i),e[a]={low:s,lim:n++}}return r.Z(t.children(),i),e}(t);r.Z(t.graph().dummyChains,(function(n){for(var r=t.node(n),i=r.edgeObj,a=function(t,e,n,r){var i,a,s=[],o=[],c=Math.min(e[n].low,e[r].low),l=Math.max(e[n].lim,e[r].lim);i=n;do{i=t.parent(i),s.push(i)}while(i&&(e[i].low>c||l>e[i].lim));a=i,i=r;for(;(i=t.parent(i))!==a;)o.push(i);return{path:s.concat(o.reverse()),lca:a}}(t,e,i.v,i.w),s=a.path,o=a.lca,c=0,l=s[c],h=!0;n!==i.w;){if(r=t.node(n),h){for(;(l=s[c])!==o&&t.node(l).maxRank<r.rank;)c++;l===o&&(h=!1)}if(!h){for(;c<s.length-1&&t.node(l=s[c+1]).minRank<=r.rank;)c++;l=s[c]}t.setParent(n,l),n=t.successors(n)[0]}}))}var Pe=n(8882);const je=function(t,e){return null==t?t:(0,w.Z)(t,(0,Pe.Z)(e),R.Z)};function Ye(t,e){var n={};return he.Z(e,(function(e,i){var a=0,s=0,o=e.length,c=Q(i);return r.Z(i,(function(e,l){var h=function(t,e){if(t.node(e).dummy)return Ft(t.predecessors(e),(function(e){return t.node(e).dummy}))}(t,e),u=h?t.node(h).order:o;(h||e===c)&&(r.Z(i.slice(s,l+1),(function(e){r.Z(t.predecessors(e),(function(r){var i=t.node(r),s=i.order;!(s<a||u<s)||i.dummy&&t.node(e).dummy||ze(n,r,e)}))})),s=l+1,a=u)})),i})),n}function ze(t,e,n){if(e>n){var r=e;e=n,n=r}var i=t[e];i||(t[e]=i={}),i[n]=!0}function Ue(t,e,n){if(e>n){var r=e;e=n,n=r}return a.Z(t[e],n)}function We(t,e,n,i,s){var o={},c=function(t,e,n,i){var s=new h.k,o=t.graph(),c=function(t,e,n){return function(r,i,s){var o,c=r.node(i),l=r.node(s),h=0;if(h+=c.width/2,a.Z(c,"labelpos"))switch(c.labelpos.toLowerCase()){case"l":o=-c.width/2;break;case"r":o=c.width/2}if(o&&(h+=n?o:-o),o=0,h+=(c.dummy?e:t)/2,h+=(l.dummy?e:t)/2,h+=l.width/2,a.Z(l,"labelpos"))switch(l.labelpos.toLowerCase()){case"l":o=l.width/2;break;case"r":o=-l.width/2}return o&&(h+=n?o:-o),o=0,h}}(o.nodesep,o.edgesep,i);return r.Z(e,(function(e){var i;r.Z(e,(function(e){var r=n[e];if(s.setNode(r),i){var a=n[i],o=s.edge(a,r);s.setEdge(a,r,Math.max(c(t,e,i),o||0))}i=e}))})),s}(t,e,n,s),l=s?"borderLeft":"borderRight";function u(t,e){for(var n=c.nodes(),r=n.pop(),i={};r;)i[r]?t(r):(i[r]=!0,n.push(r),n=n.concat(e(r))),r=n.pop()}return u((function(t){o[t]=c.inEdges(t).reduce((function(t,e){return Math.max(t,o[e.v]+c.edge(e))}),0)}),c.predecessors.bind(c)),u((function(e){var n=c.outEdges(e).reduce((function(t,e){return Math.min(t,o[e.w]-c.edge(e))}),Number.POSITIVE_INFINITY),r=t.node(e);n!==Number.POSITIVE_INFINITY&&r.borderType!==l&&(o[e]=Math.max(o[e],n))}),c.successors.bind(c)),r.Z(i,(function(t){o[t]=o[n[t]]})),o}function qe(t){var e,n=ht(t),i=U(Ye(t,n),function(t,e){var n={};function i(e,i,a,s,o){var c;r.Z(l.Z(i,a),(function(i){c=e[i],t.node(c).dummy&&r.Z(t.predecessors(c),(function(e){var r=t.node(e);r.dummy&&(r.order<s||r.order>o)&&ze(n,e,c)}))}))}return he.Z(e,(function(e,n){var a,s=-1,o=0;return r.Z(n,(function(r,c){if("border"===t.node(r).dummy){var l=t.predecessors(r);l.length&&(a=t.node(l[0]).order,i(n,o,c,s,a),o=c,s=a)}i(n,o,n.length,a,e.length)})),n})),n}(t,n)),a={};r.Z(["u","d"],(function(s){e="u"===s?n:le.Z(n).reverse(),r.Z(["l","r"],(function(n){"r"===n&&(e=c.Z(e,(function(t){return le.Z(t).reverse()})));var o=("u"===s?t.predecessors:t.successors).bind(t),l=function(t,e,n,i){var a={},s={},o={};return r.Z(e,(function(t){r.Z(t,(function(t,e){a[t]=t,s[t]=t,o[t]=e}))})),r.Z(e,(function(t){var e=-1;r.Z(t,(function(t){var r=i(t);if(r.length){r=Ae(r,(function(t){return o[t]}));for(var c=(r.length-1)/2,l=Math.floor(c),h=Math.ceil(c);l<=h;++l){var u=r[l];s[t]===t&&e<o[u]&&!Ue(n,t,u)&&(s[u]=t,s[t]=a[t]=a[u],e=o[u])}}}))})),{root:a,align:s}}(0,e,i,o),h=We(t,e,l.root,l.align,"r"===n);"r"===n&&(h=et(h,(function(t){return-t}))),a[s+n]=h}))}));var s=function(t,e){return kt(le.Z(e),(function(e){var n=Number.NEGATIVE_INFINITY,r=Number.POSITIVE_INFINITY;return je(e,(function(e,i){var a=function(t,e){return t.node(e).width}(t,i)/2;n=Math.max(e+a,n),r=Math.min(e-a,r)})),n-r}))}(t,a);return function(t,e){var n=le.Z(e),i=it(n),a=K(n);r.Z(["u","d"],(function(n){r.Z(["l","r"],(function(r){var s,o=n+r,c=t[o];if(c!==e){var l=le.Z(c);(s="l"===r?i-it(l):a-K(l))&&(t[o]=et(c,(function(t){return t+s})))}}))}))}(a,s),function(t,e){return et(t.ul,(function(n,r){if(e)return t[e.toLowerCase()][r];var i=Ae(c.Z(t,r));return(i[1]+i[2])/2}))}(a,t.graph().align)}function He(t){(function(t){var e=ht(t),n=t.graph().ranksep,i=0;r.Z(e,(function(e){var a=K(c.Z(e,(function(e){return t.node(e).height})));r.Z(e,(function(e){t.node(e).y=i+a/2})),i+=a+n}))})(t=ct(t)),r.Z(qe(t),(function(e,n){t.node(n).x=e}))}function Ve(t,e){var n=e&&e.debugTiming?pt:ft;n("layout",(function(){var e=n("  buildLayoutGraph",(function(){return function(t){var e=new h.k({multigraph:!0,compound:!0}),n=an(t.graph());return e.setGraph(U({},Xe,rn(n,Ge),W.Z(n,Ke))),r.Z(t.nodes(),(function(n){var r=an(t.node(n));e.setNode(n,q.Z(rn(r,Qe),Je)),e.setParent(n,t.parent(n))})),r.Z(t.edges(),(function(n){var r=an(t.edge(n));e.setEdge(n,U({},en,rn(r,tn),W.Z(r,nn)))})),e}(t)}));n("  runLayout",(function(){!function(t,e){e("    makeSpaceForEdgeLabels",(function(){!function(t){var e=t.graph();e.ranksep/=2,r.Z(t.edges(),(function(n){var r=t.edge(n);r.minlen*=2,"c"!==r.labelpos.toLowerCase()&&("TB"===e.rankdir||"BT"===e.rankdir?r.width+=r.labeloffset:r.height+=r.labeloffset)}))}(t)})),e("    removeSelfEdges",(function(){!function(t){r.Z(t.edges(),(function(e){if(e.v===e.w){var n=t.node(e.v);n.selfEdges||(n.selfEdges=[]),n.selfEdges.push({e:e,label:t.edge(e)}),t.removeEdge(e)}}))}(t)})),e("    acyclic",(function(){b(t)})),e("    nestingGraph.run",(function(){ue(t)})),e("    rank",(function(){se(ct(t))})),e("    injectEdgeLabelProxies",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.width&&n.height){var r=t.node(e.v),i={rank:(t.node(e.w).rank-r.rank)/2+r.rank,e:e};ot(t,"edge-proxy",i,"_ep")}}))}(t)})),e("    removeEmptyRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank}))),n=[];r.Z(t.nodes(),(function(r){var i=t.node(r).rank-e;n[i]||(n[i]=[]),n[i].push(r)}));var i=0,a=t.graph().nodeRankFactor;r.Z(n,(function(e,n){nt.Z(e)&&n%a!=0?--i:i&&r.Z(e,(function(e){t.node(e).rank+=i}))}))}(t)})),e("    nestingGraph.cleanup",(function(){!function(t){var e=t.graph();t.removeNode(e.nestingRoot),delete e.nestingRoot,r.Z(t.edges(),(function(e){t.edge(e).nestingEdge&&t.removeEdge(e)}))}(t)})),e("    normalizeRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank})));r.Z(t.nodes(),(function(n){var r=t.node(n);a.Z(r,"rank")&&(r.rank-=e)}))}(t)})),e("    assignRankMinMax",(function(){!function(t){var e=0;r.Z(t.nodes(),(function(n){var r=t.node(n);r.borderTop&&(r.minRank=t.node(r.borderTop).rank,r.maxRank=t.node(r.borderBottom).rank,e=K(e,r.maxRank))})),t.graph().maxRank=e}(t)})),e("    removeEdgeLabelProxies",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);"edge-proxy"===n.dummy&&(t.edge(n.e).labelRank=n.rank,t.removeNode(e))}))}(t)})),e("    normalize.run",(function(){vt(t)})),e("    parentDummyChains",(function(){Ze(t)})),e("    addBorderSegments",(function(){!function(t){r.Z(t.children(),(function e(n){var i=t.children(n),s=t.node(n);if(i.length&&r.Z(i,e),a.Z(s,"minRank")){s.borderLeft=[],s.borderRight=[];for(var o=s.minRank,c=s.maxRank+1;o<c;++o)gt(t,"borderLeft","_bl",n,s,o),gt(t,"borderRight","_br",n,s,o)}}))}(t)})),e("    order",(function(){Ie(t)})),e("    insertSelfEdges",(function(){!function(t){var e=ht(t);r.Z(e,(function(e){var n=0;r.Z(e,(function(e,i){var a=t.node(e);a.order=i+n,r.Z(a.selfEdges,(function(e){ot(t,"selfedge",{width:e.label.width,height:e.label.height,rank:a.rank,order:i+ ++n,e:e.e,label:e.label},"_se")})),delete a.selfEdges}))}))}(t)})),e("    adjustCoordinateSystem",(function(){!function(t){var e=t.graph().rankdir.toLowerCase();"lr"!==e&&"rl"!==e||mt(t)}(t)})),e("    position",(function(){He(t)})),e("    positionSelfEdges",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);if("selfedge"===n.dummy){var r=t.node(n.e.v),i=r.x+r.width/2,a=r.y,s=n.x-i,o=r.height/2;t.setEdge(n.e,n.label),t.removeNode(e),n.label.points=[{x:i+2*s/3,y:a-o},{x:i+5*s/6,y:a-o},{x:i+s,y:a},{x:i+5*s/6,y:a+o},{x:i+2*s/3,y:a+o}],n.label.x=n.x,n.label.y=n.y}}))}(t)})),e("    removeBorderNodes",(function(){!function(t){r.Z(t.nodes(),(function(e){if(t.children(e).length){var n=t.node(e),r=t.node(n.borderTop),i=t.node(n.borderBottom),a=t.node(Q(n.borderLeft)),s=t.node(Q(n.borderRight));n.width=Math.abs(s.x-a.x),n.height=Math.abs(i.y-r.y),n.x=a.x+n.width/2,n.y=r.y+n.height/2}})),r.Z(t.nodes(),(function(e){"border"===t.node(e).dummy&&t.removeNode(e)}))}(t)})),e("    normalize.undo",(function(){!function(t){r.Z(t.graph().dummyChains,(function(e){var n,r=t.node(e),i=r.edgeLabel;for(t.setEdge(r.edgeObj,i);r.dummy;)n=t.successors(e)[0],t.removeNode(e),i.points.push({x:r.x,y:r.y}),"edge-label"===r.dummy&&(i.x=r.x,i.y=r.y,i.width=r.width,i.height=r.height),e=n,r=t.node(e)}))}(t)})),e("    fixupEdgeLabelCoords",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(a.Z(n,"x"))switch("l"!==n.labelpos&&"r"!==n.labelpos||(n.width-=n.labeloffset),n.labelpos){case"l":n.x-=n.width/2+n.labeloffset;break;case"r":n.x+=n.width/2+n.labeloffset}}))}(t)})),e("    undoCoordinateSystem",(function(){yt(t)})),e("    translateGraph",(function(){!function(t){var e=Number.POSITIVE_INFINITY,n=0,i=Number.POSITIVE_INFINITY,s=0,o=t.graph(),c=o.marginx||0,l=o.marginy||0;function h(t){var r=t.x,a=t.y,o=t.width,c=t.height;e=Math.min(e,r-o/2),n=Math.max(n,r+o/2),i=Math.min(i,a-c/2),s=Math.max(s,a+c/2)}r.Z(t.nodes(),(function(e){h(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);a.Z(n,"x")&&h(n)})),e-=c,i-=l,r.Z(t.nodes(),(function(n){var r=t.node(n);r.x-=e,r.y-=i})),r.Z(t.edges(),(function(n){var s=t.edge(n);r.Z(s.points,(function(t){t.x-=e,t.y-=i})),a.Z(s,"x")&&(s.x-=e),a.Z(s,"y")&&(s.y-=i)})),o.width=n-e+c,o.height=s-i+l}(t)})),e("    assignNodeIntersects",(function(){!function(t){r.Z(t.edges(),(function(e){var n,r,i=t.edge(e),a=t.node(e.v),s=t.node(e.w);i.points?(n=i.points[0],r=i.points[i.points.length-1]):(i.points=[],n=s,r=a),i.points.unshift(lt(a,n)),i.points.push(lt(s,r))}))}(t)})),e("    reversePoints",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);n.reversed&&n.points.reverse()}))}(t)})),e("    acyclic.undo",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.reversed){t.removeEdge(e);var r=n.forwardName;delete n.reversed,delete n.forwardName,t.setEdge(e.w,e.v,n,r)}}))}(t)}))}(e,n)})),n("  updateInputGraph",(function(){!function(t,e){r.Z(t.nodes(),(function(n){var r=t.node(n),i=e.node(n);r&&(r.x=i.x,r.y=i.y,e.children(n).length&&(r.width=i.width,r.height=i.height))})),r.Z(t.edges(),(function(n){var r=t.edge(n),i=e.edge(n);r.points=i.points,a.Z(i,"x")&&(r.x=i.x,r.y=i.y)})),t.graph().width=e.graph().width,t.graph().height=e.graph().height}(t,e)}))}))}var Ge=["nodesep","edgesep","ranksep","marginx","marginy"],Xe={ranksep:50,edgesep:20,nodesep:50,rankdir:"tb"},Ke=["acyclicer","ranker","rankdir","align"],Qe=["width","height"],Je={width:0,height:0},tn=["minlen","weight","width","height","labeloffset"],en={minlen:1,weight:1,width:0,height:0,labeloffset:10,labelpos:"r"},nn=["labelpos"];function rn(t,e){return et(W.Z(t,e),Number)}function an(t){var e={};return r.Z(t,(function(t,n){e[n.toLowerCase()]=t})),e}},2544:(t,e,n)=>{"use strict";n.d(e,{k:()=>D});var r=n(7452),i=n(2002),a=n(3234),s=n(7179),o=n(3445),c=n(9697),l=n(870),h=n(9360),u=n(626),d=n(9581),p=n(3001),f=n(1692);const g=function(t){return t!=t};const y=function(t,e,n){for(var r=n-1,i=t.length;++r<i;)if(t[r]===e)return r;return-1};const m=function(t,e,n){return e==e?y(t,e,n):(0,f.Z)(t,g,n)};const b=function(t,e){return!!(null==t?0:t.length)&&m(t,e,0)>-1};const _=function(t,e,n){for(var r=-1,i=null==t?0:t.length;++r<i;)if(n(e,t[r]))return!0;return!1};var x=n(9548),v=n(3203);const k=function(){};var w=n(6545),E=v.Z&&1/(0,w.Z)(new v.Z([,-0]))[1]==1/0?function(t){return new v.Z(t)}:k;const C=E;const T=function(t,e,n){var r=-1,i=b,a=t.length,s=!0,o=[],c=o;if(n)s=!1,i=_;else if(a>=200){var l=e?null:C(t);if(l)return(0,w.Z)(l);s=!1,i=x.Z,c=new p.Z}else c=e?[]:o;t:for(;++r<a;){var h=t[r],u=e?e(h):h;if(h=n||0!==h?h:0,s&&u==u){for(var d=c.length;d--;)if(c[d]===u)continue t;e&&c.push(u),o.push(h)}else i(c,u,n)||(c!==o&&c.push(u),o.push(h))}return o};var S=n(836);const A=(0,d.Z)((function(t){return T((0,u.Z)(t,1,S.Z,!0))}));var L=n(4148),B=n(2344),N="\0";class D{constructor(t={}){this._isDirected=!r.Z(t,"directed")||t.directed,this._isMultigraph=!!r.Z(t,"multigraph")&&t.multigraph,this._isCompound=!!r.Z(t,"compound")&&t.compound,this._label=void 0,this._defaultNodeLabelFn=i.Z(void 0),this._defaultEdgeLabelFn=i.Z(void 0),this._nodes={},this._isCompound&&(this._parent={},this._children={},this._children["\0"]={}),this._in={},this._preds={},this._out={},this._sucs={},this._edgeObjs={},this._edgeLabels={}}isDirected(){return this._isDirected}isMultigraph(){return this._isMultigraph}isCompound(){return this._isCompound}setGraph(t){return this._label=t,this}graph(){return this._label}setDefaultNodeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultNodeLabelFn=t,this}nodeCount(){return this._nodeCount}nodes(){return s.Z(this._nodes)}sources(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._in[e])}))}sinks(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._out[e])}))}setNodes(t,e){var n=arguments,r=this;return l.Z(t,(function(t){n.length>1?r.setNode(t,e):r.setNode(t)})),this}setNode(t,e){return r.Z(this._nodes,t)?(arguments.length>1&&(this._nodes[t]=e),this):(this._nodes[t]=arguments.length>1?e:this._defaultNodeLabelFn(t),this._isCompound&&(this._parent[t]=N,this._children[t]={},this._children["\0"][t]=!0),this._in[t]={},this._preds[t]={},this._out[t]={},this._sucs[t]={},++this._nodeCount,this)}node(t){return this._nodes[t]}hasNode(t){return r.Z(this._nodes,t)}removeNode(t){var e=this;if(r.Z(this._nodes,t)){var n=function(t){e.removeEdge(e._edgeObjs[t])};delete this._nodes[t],this._isCompound&&(this._removeFromParentsChildList(t),delete this._parent[t],l.Z(this.children(t),(function(t){e.setParent(t)})),delete this._children[t]),l.Z(s.Z(this._in[t]),n),delete this._in[t],delete this._preds[t],l.Z(s.Z(this._out[t]),n),delete this._out[t],delete this._sucs[t],--this._nodeCount}return this}setParent(t,e){if(!this._isCompound)throw new Error("Cannot set parent in a non-compound graph");if(h.Z(e))e=N;else{for(var n=e+="";!h.Z(n);n=this.parent(n))if(n===t)throw new Error("Setting "+e+" as parent of "+t+" would create a cycle");this.setNode(e)}return this.setNode(t),this._removeFromParentsChildList(t),this._parent[t]=e,this._children[e][t]=!0,this}_removeFromParentsChildList(t){delete this._children[this._parent[t]][t]}parent(t){if(this._isCompound){var e=this._parent[t];if(e!==N)return e}}children(t){if(h.Z(t)&&(t=N),this._isCompound){var e=this._children[t];if(e)return s.Z(e)}else{if(t===N)return this.nodes();if(this.hasNode(t))return[]}}predecessors(t){var e=this._preds[t];if(e)return s.Z(e)}successors(t){var e=this._sucs[t];if(e)return s.Z(e)}neighbors(t){var e=this.predecessors(t);if(e)return A(e,this.successors(t))}isLeaf(t){return 0===(this.isDirected()?this.successors(t):this.neighbors(t)).length}filterNodes(t){var e=new this.constructor({directed:this._isDirected,multigraph:this._isMultigraph,compound:this._isCompound});e.setGraph(this.graph());var n=this;l.Z(this._nodes,(function(n,r){t(r)&&e.setNode(r,n)})),l.Z(this._edgeObjs,(function(t){e.hasNode(t.v)&&e.hasNode(t.w)&&e.setEdge(t,n.edge(t))}));var r={};function i(t){var a=n.parent(t);return void 0===a||e.hasNode(a)?(r[t]=a,a):a in r?r[a]:i(a)}return this._isCompound&&l.Z(e.nodes(),(function(t){e.setParent(t,i(t))})),e}setDefaultEdgeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultEdgeLabelFn=t,this}edgeCount(){return this._edgeCount}edges(){return L.Z(this._edgeObjs)}setPath(t,e){var n=this,r=arguments;return B.Z(t,(function(t,i){return r.length>1?n.setEdge(t,i,e):n.setEdge(t,i),i})),this}setEdge(){var t,e,n,i,a=!1,s=arguments[0];"object"==typeof s&&null!==s&&"v"in s?(t=s.v,e=s.w,n=s.name,2===arguments.length&&(i=arguments[1],a=!0)):(t=s,e=arguments[1],n=arguments[3],arguments.length>2&&(i=arguments[2],a=!0)),t=""+t,e=""+e,h.Z(n)||(n=""+n);var o=I(this._isDirected,t,e,n);if(r.Z(this._edgeLabels,o))return a&&(this._edgeLabels[o]=i),this;if(!h.Z(n)&&!this._isMultigraph)throw new Error("Cannot set a named edge when isMultigraph = false");this.setNode(t),this.setNode(e),this._edgeLabels[o]=a?i:this._defaultEdgeLabelFn(t,e,n);var c=function(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}var o={v:i,w:a};r&&(o.name=r);return o}(this._isDirected,t,e,n);return t=c.v,e=c.w,Object.freeze(c),this._edgeObjs[o]=c,O(this._preds[e],t),O(this._sucs[t],e),this._in[e][o]=c,this._out[t][o]=c,this._edgeCount++,this}edge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return this._edgeLabels[r]}hasEdge(t,e,n){var i=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return r.Z(this._edgeLabels,i)}removeEdge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n),i=this._edgeObjs[r];return i&&(t=i.v,e=i.w,delete this._edgeLabels[r],delete this._edgeObjs[r],M(this._preds[e],t),M(this._sucs[t],e),delete this._in[e][r],delete this._out[t][r],this._edgeCount--),this}inEdges(t,e){var n=this._in[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.v===e})):r}}outEdges(t,e){var n=this._out[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.w===e})):r}}nodeEdges(t,e){var n=this.inEdges(t,e);if(n)return n.concat(this.outEdges(t,e))}}function O(t,e){t[e]?t[e]++:t[e]=1}function M(t,e){--t[e]||delete t[e]}function I(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}return i+"\x01"+a+"\x01"+(h.Z(r)?"\0":r)}function F(t,e){return I(t,e.v,e.w,e.name)}D.prototype._nodeCount=0,D.prototype._edgeCount=0},5625:(t,e,n)=>{"use strict";n.d(e,{k:()=>r.k});var r=n(2544)},9354:(t,e,n)=>{"use strict";n.d(e,{c:()=>o});var r=n(9360),i=n(8451);const a=function(t){return(0,i.Z)(t,4)};var s=n(3836);n(2544);function o(t){var e={options:{directed:t.isDirected(),multigraph:t.isMultigraph(),compound:t.isCompound()},nodes:c(t),edges:l(t)};return r.Z(t.graph())||(e.value=a(t.graph())),e}function c(t){return s.Z(t.nodes(),(function(e){var n=t.node(e),i=t.parent(e),a={v:e};return r.Z(n)||(a.value=n),r.Z(i)||(a.parent=i),a}))}function l(t){return s.Z(t.edges(),(function(e){var n=t.edge(e),i={v:e.v,w:e.w};return r.Z(e.name)||(i.name=e.name),r.Z(n)||(i.value=n),i}))}},1518:(t,e,n)=>{"use strict";n.d(e,{sY:()=>N});var r=n(9373),i=n(7452),a=n(3688),s=n(870),o=n(277),c=n(6225),l={normal:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},vee:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 L 4 5 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},undirected:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 5 L 10 5").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])}};function h(t){l=t}var u=n(3349);function d(t,e,n){var r=e.label,i=t.append("g");"svg"===e.labelType?function(t,e){var n=t;n.node().appendChild(e.label),c.bg(n,e.labelStyle)}(i,e):"string"!=typeof r||"html"===e.labelType?(0,u.a)(i,e):function(t,e){for(var n=t.append("text"),r=function(t){for(var e,n="",r=!1,i=0;i<t.length;++i)e=t[i],r?(n+="n"===e?"\n":e,r=!1):"\\"===e?r=!0:n+=e;return n}(e.label).split("\n"),i=0;i<r.length;i++)n.append("tspan").attr("xml:space","preserve").attr("dy","1em").attr("x","1").text(r[i]);c.bg(n,e.labelStyle)}(i,e);var a,s=i.node().getBBox();switch(n){case"top":a=-e.height/2;break;case"bottom":a=e.height/2-s.height;break;default:a=-s.height/2}return i.attr("transform","translate("+-s.width/2+","+a+")"),i}var p=function(t,e){var n=e.nodes().filter((function(t){return c.bF(e,t)})),i=t.selectAll("g.cluster").data(n,(function(t){return t}));c.WR(i.exit(),e).style("opacity",0).remove();var a=i.enter().append("g").attr("class","cluster").attr("id",(function(t){return e.node(t).id})).style("opacity",0).each((function(t){var n=e.node(t),i=r.Ys(this);r.Ys(this).append("rect"),d(i.append("g").attr("class","label"),n,n.clusterLabelPos)}));return i=i.merge(a),(i=c.WR(i,e).style("opacity",1)).selectAll("rect").each((function(t){var n=e.node(t),i=r.Ys(this);c.bg(i,n.style)})),i};function f(t){p=t}let g=function(t,e){var n,a=t.selectAll("g.edgeLabel").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0);return a.exit().remove(),a.enter().append("g").classed("edgeLabel",!0).style("opacity",0),(a=t.selectAll("g.edgeLabel")).each((function(t){var n=r.Ys(this);n.select(".label").remove();var a=e.edge(t),s=d(n,e.edge(t),0).classed("label",!0),o=s.node().getBBox();a.labelId&&s.attr("id",a.labelId),i.Z(a,"width")||(a.width=o.width),i.Z(a,"height")||(a.height=o.height)})),n=a.exit?a.exit():a.selectAll(null),c.WR(n,e).style("opacity",0).remove(),a};function y(t){g=t}var m=n(6749),b=n(4379);function _(t,e){return t.intersect(e)}var x=function(t,e,n){var i=t.selectAll("g.edgePath").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0),a=function(t,e){var n=t.enter().append("g").attr("class","edgePath").style("opacity",0);return n.append("path").attr("class","path").attr("d",(function(t){var n=e.edge(t),r=e.node(t.v).elem;return k(n,b.Z(n.points.length).map((function(){return e=(t=r).getBBox(),{x:(n=t.ownerSVGElement.getScreenCTM().inverse().multiply(t.getScreenCTM()).translate(e.width/2,e.height/2)).e,y:n.f};var t,e,n})))})),n.append("defs"),n}(i,e);!function(t,e){var n=t.exit();c.WR(n,e).style("opacity",0).remove()}(i,e);var s=void 0!==i.merge?i.merge(a):i;return c.WR(s,e).style("opacity",1),s.each((function(t){var n=r.Ys(this),i=e.edge(t);i.elem=this,i.id&&n.attr("id",i.id),c.$p(n,i.class,(n.classed("update")?"update ":"")+"edgePath")})),s.selectAll("path.path").each((function(t){var n=e.edge(t);n.arrowheadId=m.Z("arrowhead");var i=r.Ys(this).attr("marker-end",(function(){return"url("+(t=location.href,e=n.arrowheadId,t.split("#")[0]+"#"+e+")");var t,e})).style("fill","none");c.WR(i,e).attr("d",(function(t){return function(t,e){var n=t.edge(e),r=t.node(e.v),i=t.node(e.w),a=n.points.slice(1,n.points.length-1);return a.unshift(_(r,a[0])),a.push(_(i,a[a.length-1])),k(n,a)}(e,t)})),c.bg(i,n.style)})),s.selectAll("defs *").remove(),s.selectAll("defs").each((function(t){var i=e.edge(t);(0,n[i.arrowhead])(r.Ys(this),i.arrowheadId,i,"arrowhead")})),s};function v(t){x=t}function k(t,e){var n=(r.jvg||r.YPS.line)().x((function(t){return t.x})).y((function(t){return t.y}));return(n.curve||n.interpolate)(t.curve),n(e)}var w=n(1666),E=function(t,e,n){var a,s=e.nodes().filter((function(t){return!c.bF(e,t)})),o=t.selectAll("g.node").data(s,(function(t){return t})).classed("update",!0);return o.exit().remove(),o.enter().append("g").attr("class","node").style("opacity",0),(o=t.selectAll("g.node")).each((function(t){var a=e.node(t),s=r.Ys(this);c.$p(s,a.class,(s.classed("update")?"update ":"")+"node"),s.select("g.label").remove();var o=s.append("g").attr("class","label"),l=d(o,a),h=n[a.shape],u=w.Z(l.node().getBBox(),"width","height");a.elem=this,a.id&&s.attr("id",a.id),a.labelId&&o.attr("id",a.labelId),i.Z(a,"width")&&(u.width=a.width),i.Z(a,"height")&&(u.height=a.height),u.width+=a.paddingLeft+a.paddingRight,u.height+=a.paddingTop+a.paddingBottom,o.attr("transform","translate("+(a.paddingLeft-a.paddingRight)/2+","+(a.paddingTop-a.paddingBottom)/2+")");var p=r.Ys(this);p.select(".label-container").remove();var f=h(p,u,a).classed("label-container",!0);c.bg(f,a.style);var g=f.node().getBBox();a.width=g.width,a.height=g.height})),a=o.exit?o.exit():o.selectAll(null),c.WR(a,e).style("opacity",0).remove(),o};function C(t){E=t}function T(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}var S=n(3352),A=n(2930),L={rect:function(t,e,n){var r=t.insert("rect",":first-child").attr("rx",n.rx).attr("ry",n.ry).attr("x",-e.width/2).attr("y",-e.height/2).attr("width",e.width).attr("height",e.height);return n.intersect=function(t){return(0,A.q)(n,t)},r},ellipse:function(t,e,n){var r=e.width/2,i=e.height/2,a=t.insert("ellipse",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("rx",r).attr("ry",i);return n.intersect=function(t){return T(n,r,i,t)},a},circle:function(t,e,n){var r=Math.max(e.width,e.height)/2,i=t.insert("circle",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("r",r);return n.intersect=function(t){return function(t,e,n){return T(t,e,e,n)}(n,r,t)},i},diamond:function(t,e,n){var r=e.width*Math.SQRT2/2,i=e.height*Math.SQRT2/2,a=[{x:0,y:-i},{x:-r,y:0},{x:0,y:i},{x:r,y:0}],s=t.insert("polygon",":first-child").attr("points",a.map((function(t){return t.x+","+t.y})).join(" "));return n.intersect=function(t){return(0,S.A)(n,a,t)},s}};function B(t){L=t}function N(){var t=function(t,e){!function(t){t.nodes().forEach((function(e){var n=t.node(e);i.Z(n,"label")||t.children(e).length||(n.label=e),i.Z(n,"paddingX")&&a.Z(n,{paddingLeft:n.paddingX,paddingRight:n.paddingX}),i.Z(n,"paddingY")&&a.Z(n,{paddingTop:n.paddingY,paddingBottom:n.paddingY}),i.Z(n,"padding")&&a.Z(n,{paddingLeft:n.padding,paddingRight:n.padding,paddingTop:n.padding,paddingBottom:n.padding}),a.Z(n,D),s.Z(["paddingLeft","paddingRight","paddingTop","paddingBottom"],(function(t){n[t]=Number(n[t])})),i.Z(n,"width")&&(n._prevWidth=n.width),i.Z(n,"height")&&(n._prevHeight=n.height)})),t.edges().forEach((function(e){var n=t.edge(e);i.Z(n,"label")||(n.label=""),a.Z(n,O)}))}(e);var n=M(t,"output"),h=M(n,"clusters"),u=M(n,"edgePaths"),d=g(M(n,"edgeLabels"),e),f=E(M(n,"nodes"),e,L);(0,o.bK)(e),function(t,e){function n(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(f,e),function(t,e){function n(t){var n=e.edge(t);return i.Z(n,"x")?"translate("+n.x+","+n.y+")":""}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(d,e),x(u,e,l),function(t,e){var n=t.filter((function(){return!r.Ys(this).classed("update")}));function i(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}n.attr("transform",i),c.WR(t,e).style("opacity",1).attr("transform",i),c.WR(n.selectAll("rect"),e).attr("width",(function(t){return e.node(t).width})).attr("height",(function(t){return e.node(t).height})).attr("x",(function(t){return-e.node(t).width/2})).attr("y",(function(t){return-e.node(t).height/2}))}(p(h,e),e),function(t){s.Z(t.nodes(),(function(e){var n=t.node(e);i.Z(n,"_prevWidth")?n.width=n._prevWidth:delete n.width,i.Z(n,"_prevHeight")?n.height=n._prevHeight:delete n.height,delete n._prevWidth,delete n._prevHeight}))}(e)};return t.createNodes=function(e){return arguments.length?(C(e),t):E},t.createClusters=function(e){return arguments.length?(f(e),t):p},t.createEdgeLabels=function(e){return arguments.length?(y(e),t):g},t.createEdgePaths=function(e){return arguments.length?(v(e),t):x},t.shapes=function(e){return arguments.length?(B(e),t):L},t.arrows=function(e){return arguments.length?(h(e),t):l},t}var D={paddingLeft:10,paddingRight:10,paddingTop:10,paddingBottom:10,rx:0,ry:0,shape:"rect"},O={arrowhead:"normal",curve:r.c_6};function M(t,e){var n=t.select("g."+e);return n.empty()&&(n=t.append("g").attr("class",e)),n}n(5625)},1883:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(1691),i=n(2142);const a=class{constructor(){this.type=i.w.ALL}get(){return this.type}set(t){if(this.type&&this.type!==t)throw new Error("Cannot change both RGB and HSL channels at the same time");this.type=t}reset(){this.type=i.w.ALL}is(t){return this.type===t}};const s=new class{constructor(t,e){this.color=e,this.changed=!1,this.data=t,this.type=new a}set(t,e){return this.color=e,this.changed=!1,this.data=t,this.type.type=i.w.ALL,this}_ensureHSL(){const t=this.data,{h:e,s:n,l:i}=t;void 0===e&&(t.h=r.Z.channel.rgb2hsl(t,"h")),void 0===n&&(t.s=r.Z.channel.rgb2hsl(t,"s")),void 0===i&&(t.l=r.Z.channel.rgb2hsl(t,"l"))}_ensureRGB(){const t=this.data,{r:e,g:n,b:i}=t;void 0===e&&(t.r=r.Z.channel.hsl2rgb(t,"r")),void 0===n&&(t.g=r.Z.channel.hsl2rgb(t,"g")),void 0===i&&(t.b=r.Z.channel.hsl2rgb(t,"b"))}get r(){const t=this.data,e=t.r;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"r")):e}get g(){const t=this.data,e=t.g;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"g")):e}get b(){const t=this.data,e=t.b;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"b")):e}get h(){const t=this.data,e=t.h;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"h")):e}get s(){const t=this.data,e=t.s;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"s")):e}get l(){const t=this.data,e=t.l;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"l")):e}get a(){return this.data.a}set r(t){this.type.set(i.w.RGB),this.changed=!0,this.data.r=t}set g(t){this.type.set(i.w.RGB),this.changed=!0,this.data.g=t}set b(t){this.type.set(i.w.RGB),this.changed=!0,this.data.b=t}set h(t){this.type.set(i.w.HSL),this.changed=!0,this.data.h=t}set s(t){this.type.set(i.w.HSL),this.changed=!0,this.data.s=t}set l(t){this.type.set(i.w.HSL),this.changed=!0,this.data.l=t}set a(t){this.changed=!0,this.data.a=t}}({r:0,g:0,b:0,a:0},"transparent")},1610:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=n(1883),i=n(2142);const a={re:/^#((?:[a-f0-9]{2}){2,4}|[a-f0-9]{3})$/i,parse:t=>{if(35!==t.charCodeAt(0))return;const e=t.match(a.re);if(!e)return;const n=e[1],i=parseInt(n,16),s=n.length,o=s%4==0,c=s>4,l=c?1:17,h=c?8:4,u=o?0:-1,d=c?255:15;return r.Z.set({r:(i>>h*(u+3)&d)*l,g:(i>>h*(u+2)&d)*l,b:(i>>h*(u+1)&d)*l,a:o?(i&d)*l/255:1},t)},stringify:t=>{const{r:e,g:n,b:r,a:a}=t;return a<1?`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}${i.Q[Math.round(255*a)]}`:`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}`}},s=a;var o=n(1691);const c={re:/^hsla?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(?:deg|grad|rad|turn)?)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(%)?))?\s*?\)$/i,hueRe:/^(.+?)(deg|grad|rad|turn)$/i,_hue2deg:t=>{const e=t.match(c.hueRe);if(e){const[,t,n]=e;switch(n){case"grad":return o.Z.channel.clamp.h(.9*parseFloat(t));case"rad":return o.Z.channel.clamp.h(180*parseFloat(t)/Math.PI);case"turn":return o.Z.channel.clamp.h(360*parseFloat(t))}}return o.Z.channel.clamp.h(parseFloat(t))},parse:t=>{const e=t.charCodeAt(0);if(104!==e&&72!==e)return;const n=t.match(c.re);if(!n)return;const[,i,a,s,l,h]=n;return r.Z.set({h:c._hue2deg(i),s:o.Z.channel.clamp.s(parseFloat(a)),l:o.Z.channel.clamp.l(parseFloat(s)),a:l?o.Z.channel.clamp.a(h?parseFloat(l)/100:parseFloat(l)):1},t)},stringify:t=>{const{h:e,s:n,l:r,a:i}=t;return i<1?`hsla(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%, ${i})`:`hsl(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%)`}},l=c,h={colors:{aliceblue:"#f0f8ff",antiquewhite:"#faebd7",aqua:"#00ffff",aquamarine:"#7fffd4",azure:"#f0ffff",beige:"#f5f5dc",bisque:"#ffe4c4",black:"#000000",blanchedalmond:"#ffebcd",blue:"#0000ff",blueviolet:"#8a2be2",brown:"#a52a2a",burlywood:"#deb887",cadetblue:"#5f9ea0",chartreuse:"#7fff00",chocolate:"#d2691e",coral:"#ff7f50",cornflowerblue:"#6495ed",cornsilk:"#fff8dc",crimson:"#dc143c",cyanaqua:"#00ffff",darkblue:"#00008b",darkcyan:"#008b8b",darkgoldenrod:"#b8860b",darkgray:"#a9a9a9",darkgreen:"#006400",darkgrey:"#a9a9a9",darkkhaki:"#bdb76b",darkmagenta:"#8b008b",darkolivegreen:"#556b2f",darkorange:"#ff8c00",darkorchid:"#9932cc",darkred:"#8b0000",darksalmon:"#e9967a",darkseagreen:"#8fbc8f",darkslateblue:"#483d8b",darkslategray:"#2f4f4f",darkslategrey:"#2f4f4f",darkturquoise:"#00ced1",darkviolet:"#9400d3",deeppink:"#ff1493",deepskyblue:"#00bfff",dimgray:"#696969",dimgrey:"#696969",dodgerblue:"#1e90ff",firebrick:"#b22222",floralwhite:"#fffaf0",forestgreen:"#228b22",fuchsia:"#ff00ff",gainsboro:"#dcdcdc",ghostwhite:"#f8f8ff",gold:"#ffd700",goldenrod:"#daa520",gray:"#808080",green:"#008000",greenyellow:"#adff2f",grey:"#808080",honeydew:"#f0fff0",hotpink:"#ff69b4",indianred:"#cd5c5c",indigo:"#4b0082",ivory:"#fffff0",khaki:"#f0e68c",lavender:"#e6e6fa",lavenderblush:"#fff0f5",lawngreen:"#7cfc00",lemonchiffon:"#fffacd",lightblue:"#add8e6",lightcoral:"#f08080",lightcyan:"#e0ffff",lightgoldenrodyellow:"#fafad2",lightgray:"#d3d3d3",lightgreen:"#90ee90",lightgrey:"#d3d3d3",lightpink:"#ffb6c1",lightsalmon:"#ffa07a",lightseagreen:"#20b2aa",lightskyblue:"#87cefa",lightslategray:"#778899",lightslategrey:"#778899",lightsteelblue:"#b0c4de",lightyellow:"#ffffe0",lime:"#00ff00",limegreen:"#32cd32",linen:"#faf0e6",magenta:"#ff00ff",maroon:"#800000",mediumaquamarine:"#66cdaa",mediumblue:"#0000cd",mediumorchid:"#ba55d3",mediumpurple:"#9370db",mediumseagreen:"#3cb371",mediumslateblue:"#7b68ee",mediumspringgreen:"#00fa9a",mediumturquoise:"#48d1cc",mediumvioletred:"#c71585",midnightblue:"#191970",mintcream:"#f5fffa",mistyrose:"#ffe4e1",moccasin:"#ffe4b5",navajowhite:"#ffdead",navy:"#000080",oldlace:"#fdf5e6",olive:"#808000",olivedrab:"#6b8e23",orange:"#ffa500",orangered:"#ff4500",orchid:"#da70d6",palegoldenrod:"#eee8aa",palegreen:"#98fb98",paleturquoise:"#afeeee",palevioletred:"#db7093",papayawhip:"#ffefd5",peachpuff:"#ffdab9",peru:"#cd853f",pink:"#ffc0cb",plum:"#dda0dd",powderblue:"#b0e0e6",purple:"#800080",rebeccapurple:"#663399",red:"#ff0000",rosybrown:"#bc8f8f",royalblue:"#4169e1",saddlebrown:"#8b4513",salmon:"#fa8072",sandybrown:"#f4a460",seagreen:"#2e8b57",seashell:"#fff5ee",sienna:"#a0522d",silver:"#c0c0c0",skyblue:"#87ceeb",slateblue:"#6a5acd",slategray:"#708090",slategrey:"#708090",snow:"#fffafa",springgreen:"#00ff7f",tan:"#d2b48c",teal:"#008080",thistle:"#d8bfd8",transparent:"#00000000",turquoise:"#40e0d0",violet:"#ee82ee",wheat:"#f5deb3",white:"#ffffff",whitesmoke:"#f5f5f5",yellow:"#ffff00",yellowgreen:"#9acd32"},parse:t=>{t=t.toLowerCase();const e=h.colors[t];if(e)return s.parse(e)},stringify:t=>{const e=s.stringify(t);for(const n in h.colors)if(h.colors[n]===e)return n}},u=h,d={re:/^rgba?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?)))?\s*?\)$/i,parse:t=>{const e=t.charCodeAt(0);if(114!==e&&82!==e)return;const n=t.match(d.re);if(!n)return;const[,i,a,s,c,l,h,u,p]=n;return r.Z.set({r:o.Z.channel.clamp.r(a?2.55*parseFloat(i):parseFloat(i)),g:o.Z.channel.clamp.g(c?2.55*parseFloat(s):parseFloat(s)),b:o.Z.channel.clamp.b(h?2.55*parseFloat(l):parseFloat(l)),a:u?o.Z.channel.clamp.a(p?parseFloat(u)/100:parseFloat(u)):1},t)},stringify:t=>{const{r:e,g:n,b:r,a:i}=t;return i<1?`rgba(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)}, ${o.Z.lang.round(i)})`:`rgb(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)})`}},p=d,f={format:{keyword:h,hex:s,rgb:d,rgba:d,hsl:c,hsla:c},parse:t=>{if("string"!=typeof t)return t;const e=s.parse(t)||p.parse(t)||l.parse(t)||u.parse(t);if(e)return e;throw new Error(`Unsupported color format: "${t}"`)},stringify:t=>!t.changed&&t.color?t.color:t.type.is(i.w.HSL)||void 0===t.data.r?l.stringify(t):t.a<1||!Number.isInteger(t.r)||!Number.isInteger(t.g)||!Number.isInteger(t.b)?p.stringify(t):s.stringify(t)},g=f},2142:(t,e,n)=>{"use strict";n.d(e,{Q:()=>i,w:()=>a});var r=n(1691);const i={};for(let s=0;s<=255;s++)i[s]=r.Z.unit.dec2hex(s);const a={ALL:0,RGB:1,HSL:2}},1506:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1691),i=n(1610);const a=(t,e,n)=>{const a=i.Z.parse(t),s=a[e],o=r.Z.channel.clamp[e](s+n);return s!==o&&(a[e]=o),i.Z.stringify(a)}},7201:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",-e)},5920:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",e)},1691:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});const r={min:{r:0,g:0,b:0,s:0,l:0,a:0},max:{r:255,g:255,b:255,h:360,s:100,l:100,a:1},clamp:{r:t=>t>=255?255:t<0?0:t,g:t=>t>=255?255:t<0?0:t,b:t=>t>=255?255:t<0?0:t,h:t=>t%360,s:t=>t>=100?100:t<0?0:t,l:t=>t>=100?100:t<0?0:t,a:t=>t>=1?1:t<0?0:t},toLinear:t=>{const e=t/255;return t>.03928?Math.pow((e+.055)/1.055,2.4):e/12.92},hue2rgb:(t,e,n)=>(n<0&&(n+=1),n>1&&(n-=1),n<1/6?t+6*(e-t)*n:n<.5?e:n<2/3?t+(e-t)*(2/3-n)*6:t),hsl2rgb:({h:t,s:e,l:n},i)=>{if(!e)return 2.55*n;t/=360,e/=100;const a=(n/=100)<.5?n*(1+e):n+e-n*e,s=2*n-a;switch(i){case"r":return 255*r.hue2rgb(s,a,t+1/3);case"g":return 255*r.hue2rgb(s,a,t);case"b":return 255*r.hue2rgb(s,a,t-1/3)}},rgb2hsl:({r:t,g:e,b:n},r)=>{t/=255,e/=255,n/=255;const i=Math.max(t,e,n),a=Math.min(t,e,n),s=(i+a)/2;if("l"===r)return 100*s;if(i===a)return 0;const o=i-a;if("s"===r)return 100*(s>.5?o/(2-i-a):o/(i+a));switch(i){case t:return 60*((e-n)/o+(e<n?6:0));case e:return 60*((n-t)/o+2);case n:return 60*((t-e)/o+4);default:return-1}}},i={channel:r,lang:{clamp:(t,e,n)=>e>n?Math.min(e,Math.max(n,t)):Math.min(n,Math.max(e,t)),round:t=>Math.round(1e10*t)/1e10},unit:{dec2hex:t=>{const e=Math.round(t).toString(16);return e.length>1?e:`0${e}`}}}},7308:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});const r=function(){this.__data__=[],this.size=0};var i=n(9651);const a=function(t,e){for(var n=t.length;n--;)if((0,i.Z)(t[n][0],e))return n;return-1};var s=Array.prototype.splice;const o=function(t){var e=this.__data__,n=a(e,t);return!(n<0)&&(n==e.length-1?e.pop():s.call(e,n,1),--this.size,!0)};const c=function(t){var e=this.__data__,n=a(e,t);return n<0?void 0:e[n][1]};const l=function(t){return a(this.__data__,t)>-1};const h=function(t,e){var n=this.__data__,r=a(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=r,u.prototype.delete=o,u.prototype.get=c,u.prototype.has=l,u.prototype.set=h;const d=u},6183:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Map")},7834:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});const r=(0,n(2508).Z)(Object,"create");const i=function(){this.__data__=r?r(null):{},this.size=0};const a=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e};var s=Object.prototype.hasOwnProperty;const o=function(t){var e=this.__data__;if(r){var n=e[t];return"__lodash_hash_undefined__"===n?void 0:n}return s.call(e,t)?e[t]:void 0};var c=Object.prototype.hasOwnProperty;const l=function(t){var e=this.__data__;return r?void 0!==e[t]:c.call(e,t)};const h=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=r&&void 0===e?"__lodash_hash_undefined__":e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=o,u.prototype.has=l,u.prototype.set=h;const d=u;var p=n(7308),f=n(6183);const g=function(){this.size=0,this.__data__={hash:new d,map:new(f.Z||p.Z),string:new d}};const y=function(t){var e=typeof t;return"string"==e||"number"==e||"symbol"==e||"boolean"==e?"__proto__"!==t:null===t};const m=function(t,e){var n=t.__data__;return y(e)?n["string"==typeof e?"string":"hash"]:n.map};const b=function(t){var e=m(this,t).delete(t);return this.size-=e?1:0,e};const _=function(t){return m(this,t).get(t)};const x=function(t){return m(this,t).has(t)};const v=function(t,e){var n=m(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this};function k(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}k.prototype.clear=g,k.prototype.delete=b,k.prototype.get=_,k.prototype.has=x,k.prototype.set=v;const w=k},3203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Set")},3001:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7834);const i=function(t){return this.__data__.set(t,"__lodash_hash_undefined__"),this};const a=function(t){return this.__data__.has(t)};function s(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r.Z;++e<n;)this.add(t[e])}s.prototype.add=s.prototype.push=i,s.prototype.has=a;const o=s},1667:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7308);const i=function(){this.__data__=new r.Z,this.size=0};const a=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n};const s=function(t){return this.__data__.get(t)};const o=function(t){return this.__data__.has(t)};var c=n(6183),l=n(7834);const h=function(t,e){var n=this.__data__;if(n instanceof r.Z){var i=n.__data__;if(!c.Z||i.length<199)return i.push([t,e]),this.size=++n.size,this;n=this.__data__=new l.Z(i)}return n.set(t,e),this.size=n.size,this};function u(t){var e=this.__data__=new r.Z(t);this.size=e.size}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=s,u.prototype.has=o,u.prototype.set=h;const d=u},7685:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Symbol},7623:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Uint8Array},6579:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}},8774:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=0,a=[];++n<r;){var s=t[n];e(s,n,t)&&(a[i++]=s)}return a}},7668:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});const r=function(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r};var i=n(9169),a=n(7771),s=n(7008),o=n(6009),c=n(8843),l=Object.prototype.hasOwnProperty;const h=function(t,e){var n=(0,a.Z)(t),h=!n&&(0,i.Z)(t),u=!n&&!h&&(0,s.Z)(t),d=!n&&!h&&!u&&(0,c.Z)(t),p=n||h||u||d,f=p?r(t.length,String):[],g=f.length;for(var y in t)!e&&!l.call(t,y)||p&&("length"==y||u&&("offset"==y||"parent"==y)||d&&("buffer"==y||"byteLength"==y||"byteOffset"==y)||(0,o.Z)(y,g))||f.push(y);return f}},4073:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=Array(r);++n<r;)i[n]=e(t[n],n,t);return i}},8694:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=e.length,i=t.length;++n<r;)t[i+n]=e[n];return t}},2954:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4752),i=n(9651),a=Object.prototype.hasOwnProperty;const s=function(t,e,n){var s=t[e];a.call(t,e)&&(0,i.Z)(s,n)&&(void 0!==n||e in t)||(0,r.Z)(t,e,n)}},4752:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7904);const i=function(t,e,n){"__proto__"==e&&r.Z?(0,r.Z)(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}},8451:(t,e,n)=>{"use strict";n.d(e,{Z:()=>J});var r=n(1667),i=n(6579),a=n(2954),s=n(1899),o=n(7179);const c=function(t,e){return t&&(0,s.Z)(e,(0,o.Z)(e),t)};var l=n(2957);const h=function(t,e){return t&&(0,s.Z)(e,(0,l.Z)(e),t)};var u=n(1050),d=n(7215),p=n(5695);const f=function(t,e){return(0,s.Z)(t,(0,p.Z)(t),e)};var g=n(8694),y=n(2513),m=n(532);const b=Object.getOwnPropertySymbols?function(t){for(var e=[];t;)(0,g.Z)(e,(0,p.Z)(t)),t=(0,y.Z)(t);return e}:m.Z;const _=function(t,e){return(0,s.Z)(t,b(t),e)};var x=n(1808),v=n(3327);const k=function(t){return(0,v.Z)(t,l.Z,b)};var w=n(3970),E=Object.prototype.hasOwnProperty;const C=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&E.call(t,"index")&&(n.index=t.index,n.input=t.input),n};var T=n(1884);const S=function(t,e){var n=e?(0,T.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)};var A=/\w*$/;const L=function(t){var e=new t.constructor(t.source,A.exec(t));return e.lastIndex=t.lastIndex,e};var B=n(7685),N=B.Z?B.Z.prototype:void 0,D=N?N.valueOf:void 0;const O=function(t){return D?Object(D.call(t)):{}};var M=n(2701);const I=function(t,e,n){var r=t.constructor;switch(e){case"[object ArrayBuffer]":return(0,T.Z)(t);case"[object Boolean]":case"[object Date]":return new r(+t);case"[object DataView]":return S(t,n);case"[object Float32Array]":case"[object Float64Array]":case"[object Int8Array]":case"[object Int16Array]":case"[object Int32Array]":case"[object Uint8Array]":case"[object Uint8ClampedArray]":case"[object Uint16Array]":case"[object Uint32Array]":return(0,M.Z)(t,n);case"[object Map]":case"[object Set]":return new r;case"[object Number]":case"[object String]":return new r(t);case"[object RegExp]":return L(t);case"[object Symbol]":return O(t)}};var F=n(3658),$=n(7771),R=n(7008),Z=n(8533);const P=function(t){return(0,Z.Z)(t)&&"[object Map]"==(0,w.Z)(t)};var j=n(1162),Y=n(8351),z=Y.Z&&Y.Z.isMap;const U=z?(0,j.Z)(z):P;var W=n(7226);const q=function(t){return(0,Z.Z)(t)&&"[object Set]"==(0,w.Z)(t)};var H=Y.Z&&Y.Z.isSet;const V=H?(0,j.Z)(H):q;var G="[object Arguments]",X="[object Function]",K="[object Object]",Q={};Q[G]=Q["[object Array]"]=Q["[object ArrayBuffer]"]=Q["[object DataView]"]=Q["[object Boolean]"]=Q["[object Date]"]=Q["[object Float32Array]"]=Q["[object Float64Array]"]=Q["[object Int8Array]"]=Q["[object Int16Array]"]=Q["[object Int32Array]"]=Q["[object Map]"]=Q["[object Number]"]=Q[K]=Q["[object RegExp]"]=Q["[object Set]"]=Q["[object String]"]=Q["[object Symbol]"]=Q["[object Uint8Array]"]=Q["[object Uint8ClampedArray]"]=Q["[object Uint16Array]"]=Q["[object Uint32Array]"]=!0,Q["[object Error]"]=Q[X]=Q["[object WeakMap]"]=!1;const J=function t(e,n,s,p,g,y){var m,b=1&n,v=2&n,E=4&n;if(s&&(m=g?s(e,p,g,y):s(e)),void 0!==m)return m;if(!(0,W.Z)(e))return e;var T=(0,$.Z)(e);if(T){if(m=C(e),!b)return(0,d.Z)(e,m)}else{var S=(0,w.Z)(e),A=S==X||"[object GeneratorFunction]"==S;if((0,R.Z)(e))return(0,u.Z)(e,b);if(S==K||S==G||A&&!g){if(m=v||A?{}:(0,F.Z)(e),!b)return v?_(e,h(m,e)):f(e,c(m,e))}else{if(!Q[S])return g?e:{};m=I(e,S,b)}}y||(y=new r.Z);var L=y.get(e);if(L)return L;y.set(e,m),V(e)?e.forEach((function(r){m.add(t(r,n,s,r,e,y))})):U(e)&&e.forEach((function(r,i){m.set(i,t(r,n,s,i,e,y))}));var B=E?v?k:x.Z:v?l.Z:o.Z,N=T?void 0:B(e);return(0,i.Z)(N||e,(function(r,i){N&&(r=e[i=r]),(0,a.Z)(m,i,t(r,n,s,i,e,y))})),m}},9811:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2693),i=n(585);const a=function(t,e){return function(n,r){if(null==n)return n;if(!(0,i.Z)(n))return t(n,r);for(var a=n.length,s=e?a:-1,o=Object(n);(e?s--:++s<a)&&!1!==r(o[s],s,o););return n}}(r.Z)},1692:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e,n,r){for(var i=t.length,a=n+(r?1:-1);r?a--:++a<i;)if(e(t[a],a,t))return a;return-1}},626:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(8694),i=n(7685),a=n(9169),s=n(7771),o=i.Z?i.Z.isConcatSpreadable:void 0;const c=function(t){return(0,s.Z)(t)||(0,a.Z)(t)||!!(o&&t&&t[o])};const l=function t(e,n,i,a,s){var o=-1,l=e.length;for(i||(i=c),s||(s=[]);++o<l;){var h=e[o];n>0&&i(h)?n>1?t(h,n-1,i,a,s):(0,r.Z)(s,h):a||(s[s.length]=h)}return s}},1395:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e,n,r){for(var i=-1,a=Object(e),s=r(e),o=s.length;o--;){var c=s[t?o:++i];if(!1===n(a[c],c,a))break}return e}}()},2693:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1395),i=n(7179);const a=function(t,e){return t&&(0,r.Z)(t,e,i.Z)}},3317:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2823),i=n(2281);const a=function(t,e){for(var n=0,a=(e=(0,r.Z)(e,t)).length;null!=t&&n<a;)t=t[(0,i.Z)(e[n++])];return n&&n==a?t:void 0}},3327:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(8694),i=n(7771);const a=function(t,e,n){var a=e(t);return(0,i.Z)(t)?a:(0,r.Z)(a,n(t))}},3589:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7685),i=Object.prototype,a=i.hasOwnProperty,s=i.toString,o=r.Z?r.Z.toStringTag:void 0;const c=function(t){var e=a.call(t,o),n=t[o];try{t[o]=void 0;var r=!0}catch(c){}var i=s.call(t);return r&&(e?t[o]=n:delete t[o]),i};var l=Object.prototype.toString;const h=function(t){return l.call(t)};var u=r.Z?r.Z.toStringTag:void 0;const d=function(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":u&&u in Object(t)?c(t):h(t)}},4765:(t,e,n)=>{"use strict";n.d(e,{Z:()=>H});var r=n(1667),i=n(3001);const a=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1};var s=n(9548);const o=function(t,e,n,r,o,c){var l=1&n,h=t.length,u=e.length;if(h!=u&&!(l&&u>h))return!1;var d=c.get(t),p=c.get(e);if(d&&p)return d==e&&p==t;var f=-1,g=!0,y=2&n?new i.Z:void 0;for(c.set(t,e),c.set(e,t);++f<h;){var m=t[f],b=e[f];if(r)var _=l?r(b,m,f,e,t,c):r(m,b,f,t,e,c);if(void 0!==_){if(_)continue;g=!1;break}if(y){if(!a(e,(function(t,e){if(!(0,s.Z)(y,e)&&(m===t||o(m,t,n,r,c)))return y.push(e)}))){g=!1;break}}else if(m!==b&&!o(m,b,n,r,c)){g=!1;break}}return c.delete(t),c.delete(e),g};var c=n(7685),l=n(7623),h=n(9651);const u=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t,r){n[++e]=[r,t]})),n};var d=n(6545),p=c.Z?c.Z.prototype:void 0,f=p?p.valueOf:void 0;const g=function(t,e,n,r,i,a,s){switch(n){case"[object DataView]":if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case"[object ArrayBuffer]":return!(t.byteLength!=e.byteLength||!a(new l.Z(t),new l.Z(e)));case"[object Boolean]":case"[object Date]":case"[object Number]":return(0,h.Z)(+t,+e);case"[object Error]":return t.name==e.name&&t.message==e.message;case"[object RegExp]":case"[object String]":return t==e+"";case"[object Map]":var c=u;case"[object Set]":var p=1&r;if(c||(c=d.Z),t.size!=e.size&&!p)return!1;var g=s.get(t);if(g)return g==e;r|=2,s.set(t,e);var y=o(c(t),c(e),r,i,a,s);return s.delete(t),y;case"[object Symbol]":if(f)return f.call(t)==f.call(e)}return!1};var y=n(1808),m=Object.prototype.hasOwnProperty;const b=function(t,e,n,r,i,a){var s=1&n,o=(0,y.Z)(t),c=o.length;if(c!=(0,y.Z)(e).length&&!s)return!1;for(var l=c;l--;){var h=o[l];if(!(s?h in e:m.call(e,h)))return!1}var u=a.get(t),d=a.get(e);if(u&&d)return u==e&&d==t;var p=!0;a.set(t,e),a.set(e,t);for(var f=s;++l<c;){var g=t[h=o[l]],b=e[h];if(r)var _=s?r(b,g,h,e,t,a):r(g,b,h,t,e,a);if(!(void 0===_?g===b||i(g,b,n,r,a):_)){p=!1;break}f||(f="constructor"==h)}if(p&&!f){var x=t.constructor,v=e.constructor;x==v||!("constructor"in t)||!("constructor"in e)||"function"==typeof x&&x instanceof x&&"function"==typeof v&&v instanceof v||(p=!1)}return a.delete(t),a.delete(e),p};var _=n(3970),x=n(7771),v=n(7008),k=n(8843),w="[object Arguments]",E="[object Array]",C="[object Object]",T=Object.prototype.hasOwnProperty;const S=function(t,e,n,i,a,s){var c=(0,x.Z)(t),l=(0,x.Z)(e),h=c?E:(0,_.Z)(t),u=l?E:(0,_.Z)(e),d=(h=h==w?C:h)==C,p=(u=u==w?C:u)==C,f=h==u;if(f&&(0,v.Z)(t)){if(!(0,v.Z)(e))return!1;c=!0,d=!1}if(f&&!d)return s||(s=new r.Z),c||(0,k.Z)(t)?o(t,e,n,i,a,s):g(t,e,h,n,i,a,s);if(!(1&n)){var y=d&&T.call(t,"__wrapped__"),m=p&&T.call(e,"__wrapped__");if(y||m){var S=y?t.value():t,A=m?e.value():e;return s||(s=new r.Z),a(S,A,n,i,s)}}return!!f&&(s||(s=new r.Z),b(t,e,n,i,a,s))};var A=n(8533);const L=function t(e,n,r,i,a){return e===n||(null==e||null==n||!(0,A.Z)(e)&&!(0,A.Z)(n)?e!=e&&n!=n:S(e,n,r,i,t,a))};const B=function(t,e,n,i){var a=n.length,s=a,o=!i;if(null==t)return!s;for(t=Object(t);a--;){var c=n[a];if(o&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++a<s;){var l=(c=n[a])[0],h=t[l],u=c[1];if(o&&c[2]){if(void 0===h&&!(l in t))return!1}else{var d=new r.Z;if(i)var p=i(h,u,l,t,e,d);if(!(void 0===p?L(u,h,3,i,d):p))return!1}}return!0};var N=n(7226);const D=function(t){return t==t&&!(0,N.Z)(t)};var O=n(7179);const M=function(t){for(var e=(0,O.Z)(t),n=e.length;n--;){var r=e[n],i=t[r];e[n]=[r,i,D(i)]}return e};const I=function(t,e){return function(n){return null!=n&&(n[t]===e&&(void 0!==e||t in Object(n)))}};const F=function(t){var e=M(t);return 1==e.length&&e[0][2]?I(e[0][0],e[0][1]):function(n){return n===t||B(n,t,e)}};var $=n(3317);const R=function(t,e,n){var r=null==t?void 0:(0,$.Z)(t,e);return void 0===r?n:r};var Z=n(5487),P=n(9365),j=n(2281);const Y=function(t,e){return(0,P.Z)(t)&&D(e)?I((0,j.Z)(t),e):function(n){var r=R(n,t);return void 0===r&&r===e?(0,Z.Z)(n,t):L(e,r,3)}};var z=n(9203),U=n(4193);const W=function(t){return function(e){return(0,$.Z)(e,t)}};const q=function(t){return(0,P.Z)(t)?(0,U.Z)((0,j.Z)(t)):W(t)};const H=function(t){return"function"==typeof t?t:null==t?z.Z:"object"==typeof t?(0,x.Z)(t)?Y(t[0],t[1]):F(t):q(t)}},9473:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(2764);const i=(0,n(1851).Z)(Object.keys,Object);var a=Object.prototype.hasOwnProperty;const s=function(t){if(!(0,r.Z)(t))return i(t);var e=[];for(var n in Object(t))a.call(t,n)&&"constructor"!=n&&e.push(n);return e}},1018:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(9811),i=n(585);const a=function(t,e){var n=-1,a=(0,i.Z)(t)?Array(t.length):[];return(0,r.Z)(t,(function(t,r,i){a[++n]=e(t,r,i)})),a}},4193:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return null==e?void 0:e[t]}}},9581:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(9203),i=n(1211),a=n(7227);const s=function(t,e){return(0,a.Z)((0,i.Z)(t,e,r.Z),t+"")}},1162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return t(e)}}},9548:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t.has(e)}},8882:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(9203);const i=function(t){return"function"==typeof t?t:r.Z}},2823:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7771),i=n(9365),a=n(2454);var s=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,o=/\\(\\)?/g;const c=function(t){var e=(0,a.Z)(t,(function(t){return 500===n.size&&n.clear(),t})),n=e.cache;return e}((function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(s,(function(t,n,r,i){e.push(r?i.replace(o,"$1"):n||t)})),e}));var l=n(751);const h=function(t,e){return(0,r.Z)(t)?t:(0,i.Z)(t,e)?[t]:c((0,l.Z)(t))}},1884:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7623);const i=function(t){var e=new t.constructor(t.byteLength);return new r.Z(e).set(new r.Z(t)),e}},1050:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i?r.Z.Buffer:void 0,o=s?s.allocUnsafe:void 0;const c=function(t,e){if(e)return t.slice();var n=t.length,r=o?o(n):new t.constructor(n);return t.copy(r),r}},2701:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1884);const i=function(t,e){var n=e?(0,r.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}},7215:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){var n=-1,r=t.length;for(e||(e=Array(r));++n<r;)e[n]=t[n];return e}},1899:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2954),i=n(4752);const a=function(t,e,n,a){var s=!n;n||(n={});for(var o=-1,c=e.length;++o<c;){var l=e[o],h=a?a(n[l],t[l],l,n,t):void 0;void 0===h&&(h=t[l]),s?(0,i.Z)(n,l,h):(0,r.Z)(n,l,h)}return n}},7904:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2508);const i=function(){try{var t=(0,r.Z)(Object,"defineProperty");return t({},"",{}),t}catch(e){}}()},3413:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r="object"==typeof global&&global&&global.Object===Object&&global},1808:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(3327),i=n(5695),a=n(7179);const s=function(t){return(0,r.Z)(t,a.Z,i.Z)}},2508:(t,e,n)=>{"use strict";n.d(e,{Z:()=>b});var r=n(3234);const i=n(6092).Z["__core-js_shared__"];var a,s=(a=/[^.]+$/.exec(i&&i.keys&&i.keys.IE_PROTO||""))?"Symbol(src)_1."+a:"";const o=function(t){return!!s&&s in t};var c=n(7226),l=n(19),h=/^\[object .+?Constructor\]$/,u=Function.prototype,d=Object.prototype,p=u.toString,f=d.hasOwnProperty,g=RegExp("^"+p.call(f).replace(/[\\^$.*+?()[\]{}|]/g,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$");const y=function(t){return!(!(0,c.Z)(t)||o(t))&&((0,r.Z)(t)?g:h).test((0,l.Z)(t))};const m=function(t,e){return null==t?void 0:t[e]};const b=function(t,e){var n=m(t,e);return y(n)?n:void 0}},2513:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=(0,n(1851).Z)(Object.getPrototypeOf,Object)},5695:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(8774),i=n(532),a=Object.prototype.propertyIsEnumerable,s=Object.getOwnPropertySymbols;const o=s?function(t){return null==t?[]:(t=Object(t),(0,r.Z)(s(t),(function(e){return a.call(t,e)})))}:i.Z},3970:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"DataView");var s=n(6183);const o=(0,r.Z)(i.Z,"Promise");var c=n(3203);const l=(0,r.Z)(i.Z,"WeakMap");var h=n(3589),u=n(19),d="[object Map]",p="[object Promise]",f="[object Set]",g="[object WeakMap]",y="[object DataView]",m=(0,u.Z)(a),b=(0,u.Z)(s.Z),_=(0,u.Z)(o),x=(0,u.Z)(c.Z),v=(0,u.Z)(l),k=h.Z;(a&&k(new a(new ArrayBuffer(1)))!=y||s.Z&&k(new s.Z)!=d||o&&k(o.resolve())!=p||c.Z&&k(new c.Z)!=f||l&&k(new l)!=g)&&(k=function(t){var e=(0,h.Z)(t),n="[object Object]"==e?t.constructor:void 0,r=n?(0,u.Z)(n):"";if(r)switch(r){case m:return y;case b:return d;case _:return p;case x:return f;case v:return g}return e});const w=k},6174:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(2823),i=n(9169),a=n(7771),s=n(6009),o=n(1656),c=n(2281);const l=function(t,e,n){for(var l=-1,h=(e=(0,r.Z)(e,t)).length,u=!1;++l<h;){var d=(0,c.Z)(e[l]);if(!(u=null!=t&&n(t,d)))break;t=t[d]}return u||++l!=h?u:!!(h=null==t?0:t.length)&&(0,o.Z)(h)&&(0,s.Z)(d,h)&&((0,a.Z)(t)||(0,i.Z)(t))}},3658:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(7226),i=Object.create;const a=function(){function t(){}return function(e){if(!(0,r.Z)(e))return{};if(i)return i(e);t.prototype=e;var n=new t;return t.prototype=void 0,n}}();var s=n(2513),o=n(2764);const c=function(t){return"function"!=typeof t.constructor||(0,o.Z)(t)?{}:a((0,s.Z)(t))}},6009:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=/^(?:0|[1-9]\d*)$/;const i=function(t,e){var n=typeof t;return!!(e=null==e?9007199254740991:e)&&("number"==n||"symbol"!=n&&r.test(t))&&t>-1&&t%1==0&&t<e}},439:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(9651),i=n(585),a=n(6009),s=n(7226);const o=function(t,e,n){if(!(0,s.Z)(n))return!1;var o=typeof e;return!!("number"==o?(0,i.Z)(n)&&(0,a.Z)(e,n.length):"string"==o&&e in n)&&(0,r.Z)(n[e],t)}},9365:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7771),i=n(2714),a=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,s=/^\w*$/;const o=function(t,e){if((0,r.Z)(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!(0,i.Z)(t))||(s.test(t)||!a.test(t)||null!=e&&t in Object(e))}},2764:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Object.prototype;const i=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||r)}},8351:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(3413),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i&&r.Z.process;const o=function(){try{var t=a&&a.require&&a.require("util").types;return t||s&&s.binding&&s.binding("util")}catch(e){}}()},1851:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return function(n){return t(e(n))}}},1211:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)};var i=Math.max;const a=function(t,e,n){return e=i(void 0===e?t.length-1:e,0),function(){for(var a=arguments,s=-1,o=i(a.length-e,0),c=Array(o);++s<o;)c[s]=a[e+s];s=-1;for(var l=Array(e+1);++s<e;)l[s]=a[s];return l[e]=n(c),r(t,this,l)}}},6092:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3413),i="object"==typeof self&&self&&self.Object===Object&&self;const a=r.Z||i||Function("return this")()},6545:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t){n[++e]=t})),n}},7227:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(2002),i=n(7904),a=n(9203);const s=i.Z?function(t,e){return(0,i.Z)(t,"toString",{configurable:!0,enumerable:!1,value:(0,r.Z)(e),writable:!0})}:a.Z;var o=Date.now;const c=function(t){var e=0,n=0;return function(){var r=o(),i=16-(r-n);if(n=r,i>0){if(++e>=800)return arguments[0]}else e=0;return t.apply(void 0,arguments)}}(s)},2281:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2714);const i=function(t){if("string"==typeof t||(0,r.Z)(t))return t;var e=t+"";return"0"==e&&1/t==-Infinity?"-0":e}},19:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Function.prototype.toString;const i=function(t){if(null!=t){try{return r.call(t)}catch(e){}try{return t+""}catch(e){}}return""}},2002:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(){return t}}},3688:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(9581),i=n(9651),a=n(439),s=n(2957),o=Object.prototype,c=o.hasOwnProperty;const l=(0,r.Z)((function(t,e){t=Object(t);var n=-1,r=e.length,l=r>2?e[2]:void 0;for(l&&(0,a.Z)(e[0],e[1],l)&&(r=1);++n<r;)for(var h=e[n],u=(0,s.Z)(h),d=-1,p=u.length;++d<p;){var f=u[d],g=t[f];(void 0===g||(0,i.Z)(g,o[f])&&!c.call(t,f))&&(t[f]=h[f])}return t}))},9651:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t===e||t!=t&&e!=e}},3445:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(8774),i=n(9811);const a=function(t,e){var n=[];return(0,i.Z)(t,(function(t,r,i){e(t,r,i)&&n.push(t)})),n};var s=n(4765),o=n(7771);const c=function(t,e){return((0,o.Z)(t)?r.Z:a)(t,(0,s.Z)(e,3))}},7961:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(626);const i=function(t){return(null==t?0:t.length)?(0,r.Z)(t,1):[]}},870:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(6579),i=n(9811),a=n(8882),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:i.Z)(t,(0,a.Z)(e))}},7452:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=Object.prototype.hasOwnProperty;const i=function(t,e){return null!=t&&r.call(t,e)};var a=n(6174);const s=function(t,e){return null!=t&&(0,a.Z)(t,e,i)}},5487:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e){return null!=t&&e in Object(t)};var i=n(6174);const a=function(t,e){return null!=t&&(0,i.Z)(t,e,r)}},9203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return t}},9169:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(3589),i=n(8533);const a=function(t){return(0,i.Z)(t)&&"[object Arguments]"==(0,r.Z)(t)};var s=Object.prototype,o=s.hasOwnProperty,c=s.propertyIsEnumerable;const l=a(function(){return arguments}())?a:function(t){return(0,i.Z)(t)&&o.call(t,"callee")&&!c.call(t,"callee")}},7771:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=Array.isArray},585:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3234),i=n(1656);const a=function(t){return null!=t&&(0,i.Z)(t.length)&&!(0,r.Z)(t)}},836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(585),i=n(8533);const a=function(t){return(0,i.Z)(t)&&(0,r.Z)(t)}},7008:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092);const i=function(){return!1};var a="object"==typeof exports&&exports&&!exports.nodeType&&exports,s=a&&"object"==typeof module&&module&&!module.nodeType&&module,o=s&&s.exports===a?r.Z.Buffer:void 0;const c=(o?o.isBuffer:void 0)||i},9697:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(9473),i=n(3970),a=n(9169),s=n(7771),o=n(585),c=n(7008),l=n(2764),h=n(8843),u=Object.prototype.hasOwnProperty;const d=function(t){if(null==t)return!0;if((0,o.Z)(t)&&((0,s.Z)(t)||"string"==typeof t||"function"==typeof t.splice||(0,c.Z)(t)||(0,h.Z)(t)||(0,a.Z)(t)))return!t.length;var e=(0,i.Z)(t);if("[object Map]"==e||"[object Set]"==e)return!t.size;if((0,l.Z)(t))return!(0,r.Z)(t).length;for(var n in t)if(u.call(t,n))return!1;return!0}},3234:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(7226);const a=function(t){if(!(0,i.Z)(t))return!1;var e=(0,r.Z)(t);return"[object Function]"==e||"[object GeneratorFunction]"==e||"[object AsyncFunction]"==e||"[object Proxy]"==e}},1656:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=9007199254740991}},7226:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},8533:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return null!=t&&"object"==typeof t}},7514:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(2513),a=n(8533),s=Function.prototype,o=Object.prototype,c=s.toString,l=o.hasOwnProperty,h=c.call(Object);const u=function(t){if(!(0,a.Z)(t)||"[object Object]"!=(0,r.Z)(t))return!1;var e=(0,i.Z)(t);if(null===e)return!0;var n=l.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&c.call(n)==h}},2714:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(8533);const a=function(t){return"symbol"==typeof t||(0,i.Z)(t)&&"[object Symbol]"==(0,r.Z)(t)}},8843:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(1656),a=n(8533),s={};s["[object Float32Array]"]=s["[object Float64Array]"]=s["[object Int8Array]"]=s["[object Int16Array]"]=s["[object Int32Array]"]=s["[object Uint8Array]"]=s["[object Uint8ClampedArray]"]=s["[object Uint16Array]"]=s["[object Uint32Array]"]=!0,s["[object Arguments]"]=s["[object Array]"]=s["[object ArrayBuffer]"]=s["[object Boolean]"]=s["[object DataView]"]=s["[object Date]"]=s["[object Error]"]=s["[object Function]"]=s["[object Map]"]=s["[object Number]"]=s["[object Object]"]=s["[object RegExp]"]=s["[object Set]"]=s["[object String]"]=s["[object WeakMap]"]=!1;const o=function(t){return(0,a.Z)(t)&&(0,i.Z)(t.length)&&!!s[(0,r.Z)(t)]};var c=n(1162),l=n(8351),h=l.Z&&l.Z.isTypedArray;const u=h?(0,c.Z)(h):o},9360:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return void 0===t}},7179:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7668),i=n(9473),a=n(585);const s=function(t){return(0,a.Z)(t)?(0,r.Z)(t):(0,i.Z)(t)}},2957:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7668),i=n(7226),a=n(2764);const s=function(t){var e=[];if(null!=t)for(var n in Object(t))e.push(n);return e};var o=Object.prototype.hasOwnProperty;const c=function(t){if(!(0,i.Z)(t))return s(t);var e=(0,a.Z)(t),n=[];for(var r in t)("constructor"!=r||!e&&o.call(t,r))&&n.push(r);return n};var l=n(585);const h=function(t){return(0,l.Z)(t)?(0,r.Z)(t,!0):c(t)}},3836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(4073),i=n(4765),a=n(1018),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:a.Z)(t,(0,i.Z)(e,3))}},2454:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(7834);function i(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new TypeError("Expected a function");var n=function(){var r=arguments,i=e?e.apply(this,r):r[0],a=n.cache;if(a.has(i))return a.get(i);var s=t.apply(this,r);return n.cache=a.set(i,s)||a,s};return n.cache=new(i.Cache||r.Z),n}i.Cache=r.Z;const a=i},1666:(t,e,n)=>{"use strict";n.d(e,{Z:()=>y});var r=n(3317),i=n(2954),a=n(2823),s=n(6009),o=n(7226),c=n(2281);const l=function(t,e,n,r){if(!(0,o.Z)(t))return t;for(var l=-1,h=(e=(0,a.Z)(e,t)).length,u=h-1,d=t;null!=d&&++l<h;){var p=(0,c.Z)(e[l]),f=n;if("__proto__"===p||"constructor"===p||"prototype"===p)return t;if(l!=u){var g=d[p];void 0===(f=r?r(g,p,d):void 0)&&(f=(0,o.Z)(g)?g:(0,s.Z)(e[l+1])?[]:{})}(0,i.Z)(d,p,f),d=d[p]}return t};const h=function(t,e,n){for(var i=-1,s=e.length,o={};++i<s;){var c=e[i],h=(0,r.Z)(t,c);n(h,c)&&l(o,(0,a.Z)(c,t),h)}return o};var u=n(5487);const d=function(t,e){return h(t,e,(function(e,n){return(0,u.Z)(t,n)}))};var p=n(7961),f=n(1211),g=n(7227);const y=function(t){return(0,g.Z)((0,f.Z)(t,void 0,p.Z),t+"")}((function(t,e){return null==t?{}:d(t,e)}))},4379:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=Math.ceil,i=Math.max;const a=function(t,e,n,a){for(var s=-1,o=i(r((e-t)/(n||1)),0),c=Array(o);o--;)c[a?o:++s]=t,t+=n;return c};var s=n(439),o=n(4099);const c=function(t){return function(e,n,r){return r&&"number"!=typeof r&&(0,s.Z)(e,n,r)&&(n=r=void 0),e=(0,o.Z)(e),void 0===n?(n=e,e=0):n=(0,o.Z)(n),r=void 0===r?e<n?1:-1:(0,o.Z)(r),a(e,n,r,t)}}()},2344:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});const r=function(t,e,n,r){var i=-1,a=null==t?0:t.length;for(r&&a&&(n=t[++i]);++i<a;)n=e(n,t[i],i,t);return n};var i=n(9811),a=n(4765);const s=function(t,e,n,r,i){return i(t,(function(t,i,a){n=r?(r=!1,t):e(n,t,i,a)})),n};var o=n(7771);const c=function(t,e,n){var c=(0,o.Z)(t)?r:s,l=arguments.length<3;return c(t,(0,a.Z)(e,4),n,l,i.Z)}},532:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(){return[]}},4099:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=/\s/;const i=function(t){for(var e=t.length;e--&&r.test(t.charAt(e)););return e};var a=/^\s+/;const s=function(t){return t?t.slice(0,i(t)+1).replace(a,""):t};var o=n(7226),c=n(2714),l=/^[-+]0x[0-9a-f]+$/i,h=/^0b[01]+$/i,u=/^0o[0-7]+$/i,d=parseInt;const p=function(t){if("number"==typeof t)return t;if((0,c.Z)(t))return NaN;if((0,o.Z)(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=(0,o.Z)(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=s(t);var n=h.test(t);return n||u.test(t)?d(t.slice(2),n?2:8):l.test(t)?NaN:+t};var f=1/0;const g=function(t){return t?(t=p(t))===f||t===-1/0?17976931348623157e292*(t<0?-1:1):t==t?t:0:0===t?t:0}},751:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7685),i=n(4073),a=n(7771),s=n(2714),o=r.Z?r.Z.prototype:void 0,c=o?o.toString:void 0;const l=function t(e){if("string"==typeof e)return e;if((0,a.Z)(e))return(0,i.Z)(e,t)+"";if((0,s.Z)(e))return c?c.call(e):"";var n=e+"";return"0"==n&&1/e==-Infinity?"-0":n};const h=function(t){return null==t?"":l(t)}},6749:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(751),i=0;const a=function(t){var e=++i;return(0,r.Z)(t)+e}},4148:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4073);const i=function(t,e){return(0,r.Z)(e,(function(e){return t[e]}))};var a=n(7179);const s=function(t){return null==t?[]:i(t,(0,a.Z)(t))}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/4835.0e2e1b5f.js.LICENSE.txt b/kr/assets/js/4835.071674c5.js.LICENSE.txt
similarity index 100%
rename from kr/assets/js/4835.0e2e1b5f.js.LICENSE.txt
rename to kr/assets/js/4835.071674c5.js.LICENSE.txt
diff --git a/kr/assets/js/4835.0e2e1b5f.js b/kr/assets/js/4835.0e2e1b5f.js
deleted file mode 100644
index 264a0b12b..000000000
--- a/kr/assets/js/4835.0e2e1b5f.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see 4835.0e2e1b5f.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4835],{7967:(t,e)=>{"use strict";e.N=void 0;var n=/^([^\w]*)(javascript|data|vbscript)/im,r=/&#(\w+)(^\w|;)?/g,i=/&(newline|tab);/gi,a=/[\u0000-\u001F\u007F-\u009F\u2000-\u200D\uFEFF]/gim,s=/^.+(:|&colon;)/gim,o=[".","/"];e.N=function(t){var e,c=(e=t||"",e.replace(r,(function(t,e){return String.fromCharCode(e)}))).replace(i,"").replace(a,"").trim();if(!c)return"about:blank";if(function(t){return o.indexOf(t[0])>-1}(c))return c;var l=c.match(s);if(!l)return c;var h=l[0];return n.test(h)?"about:blank":c}},3905:(t,e,n)=>{"use strict";n.d(e,{Zo:()=>h,kt:()=>p});var r=n(7294);function i(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function a(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function s(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?a(Object(n),!0).forEach((function(e){i(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,e){if(null==t)return{};var n,r,i=function(t,e){if(null==t)return{};var n,r,i={},a=Object.keys(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||(i[n]=t[n]);return i}(t,e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(i[n]=t[n])}return i}var c=r.createContext({}),l=function(t){var e=r.useContext(c),n=e;return t&&(n="function"==typeof t?t(e):s(s({},e),t)),n},h=function(t){var e=l(t.components);return r.createElement(c.Provider,{value:e},t.children)},u={inlineCode:"code",wrapper:function(t){var e=t.children;return r.createElement(r.Fragment,{},e)}},d=r.forwardRef((function(t,e){var n=t.components,i=t.mdxType,a=t.originalType,c=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),d=l(n),p=i,f=d["".concat(c,".").concat(p)]||d[p]||u[p]||a;return n?r.createElement(f,s(s({ref:e},h),{},{components:n})):r.createElement(f,s({ref:e},h))}));function p(t,e){var n=arguments,i=e&&e.mdxType;if("string"==typeof t||i){var a=n.length,s=new Array(a);s[0]=d;var o={};for(var c in e)hasOwnProperty.call(e,c)&&(o[c]=e[c]);o.originalType=t,o.mdxType="string"==typeof t?t:i,s[1]=o;for(var l=2;l<a;l++)s[l]=n[l];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},2839:(t,e,n)=>{"use strict";n.r(e),n.d(e,{default:()=>Ot});var r=n(7294),i=n(833),a=n(902);const s=r.createContext(null);function o(t){let{children:e,content:n}=t;const i=function(t){return(0,r.useMemo)((()=>({metadata:t.metadata,frontMatter:t.frontMatter,assets:t.assets,contentTitle:t.contentTitle,toc:t.toc})),[t])}(n);return r.createElement(s.Provider,{value:i},e)}function c(){const t=(0,r.useContext)(s);if(null===t)throw new a.i6("DocProvider");return t}function l(){const{metadata:t,frontMatter:e,assets:n}=c();return r.createElement(i.d,{title:t.title,description:t.description,keywords:e.keywords,image:n.image??e.image})}var h=n(6010),u=n(7524),d=n(3117),p=n(5999),f=n(9960);function g(t){const{permalink:e,title:n,subLabel:i,isNext:a}=t;return r.createElement(f.Z,{className:(0,h.Z)("pagination-nav__link",a?"pagination-nav__link--next":"pagination-nav__link--prev"),to:e},i&&r.createElement("div",{className:"pagination-nav__sublabel"},i),r.createElement("div",{className:"pagination-nav__label"},n))}function y(t){const{previous:e,next:n}=t;return r.createElement("nav",{className:"pagination-nav docusaurus-mt-lg","aria-label":(0,p.I)({id:"theme.docs.paginator.navAriaLabel",message:"Docs pages",description:"The ARIA label for the docs pagination"})},e&&r.createElement(g,(0,d.Z)({},e,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.previous",description:"The label used to navigate to the previous doc"},"Previous")})),n&&r.createElement(g,(0,d.Z)({},n,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.next",description:"The label used to navigate to the next doc"},"Next"),isNext:!0})))}function m(){const{metadata:t}=c();return r.createElement(y,{previous:t.previous,next:t.next})}var b=n(2263),_=n(143),x=n(5281),v=n(373),k=n(4477);const w={unreleased:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unreleasedVersionLabel",description:"The label used to tell the user that he's browsing an unreleased doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is unreleased documentation for {siteTitle} {versionLabel} version.")},unmaintained:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unmaintainedVersionLabel",description:"The label used to tell the user that he's browsing an unmaintained doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is documentation for {siteTitle} {versionLabel}, which is no longer actively maintained.")}};function E(t){const e=w[t.versionMetadata.banner];return r.createElement(e,t)}function C(t){let{versionLabel:e,to:n,onClick:i}=t;return r.createElement(p.Z,{id:"theme.docs.versions.latestVersionSuggestionLabel",description:"The label used to tell the user to check the latest version",values:{versionLabel:e,latestVersionLink:r.createElement("b",null,r.createElement(f.Z,{to:n,onClick:i},r.createElement(p.Z,{id:"theme.docs.versions.latestVersionLinkLabel",description:"The label used for the latest version suggestion link label"},"latest version")))}},"For up-to-date documentation, see the {latestVersionLink} ({versionLabel}).")}function T(t){let{className:e,versionMetadata:n}=t;const{siteConfig:{title:i}}=(0,b.Z)(),{pluginId:a}=(0,_.gA)({failfast:!0}),{savePreferredVersionName:s}=(0,v.J)(a),{latestDocSuggestion:o,latestVersionSuggestion:c}=(0,_.Jo)(a),l=o??(u=c).docs.find((t=>t.id===u.mainDocId));var u;return r.createElement("div",{className:(0,h.Z)(e,x.k.docs.docVersionBanner,"alert alert--warning margin-bottom--md"),role:"alert"},r.createElement("div",null,r.createElement(E,{siteTitle:i,versionMetadata:n})),r.createElement("div",{className:"margin-top--md"},r.createElement(C,{versionLabel:c.label,to:l.path,onClick:()=>s(c.name)})))}function S(t){let{className:e}=t;const n=(0,k.E)();return n.banner?r.createElement(T,{className:e,versionMetadata:n}):null}function A(t){let{className:e}=t;const n=(0,k.E)();return n.badge?r.createElement("span",{className:(0,h.Z)(e,x.k.docs.docVersionBadge,"badge badge--secondary")},r.createElement(p.Z,{id:"theme.docs.versionBadge.label",values:{versionLabel:n.label}},"Version: {versionLabel}")):null}function L(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.atDate",description:"The words used to describe on which date a page has been last updated",values:{date:r.createElement("b",null,r.createElement("time",{dateTime:new Date(1e3*e).toISOString()},n))}}," on {date}")}function B(t){let{lastUpdatedBy:e}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.byUser",description:"The words used to describe by who the page has been last updated",values:{user:r.createElement("b",null,e)}}," by {user}")}function N(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n,lastUpdatedBy:i}=t;return r.createElement("span",{className:x.k.common.lastUpdated},r.createElement(p.Z,{id:"theme.lastUpdated.lastUpdatedAtBy",description:"The sentence used to display when a page has been last updated, and by who",values:{atDate:e&&n?r.createElement(L,{lastUpdatedAt:e,formattedLastUpdatedAt:n}):"",byUser:i?r.createElement(B,{lastUpdatedBy:i}):""}},"Last updated{atDate}{byUser}"),!1)}const D="iconEdit_Z9Sw";function O(t){let{className:e,...n}=t;return r.createElement("svg",(0,d.Z)({fill:"currentColor",height:"20",width:"20",viewBox:"0 0 40 40",className:(0,h.Z)(D,e),"aria-hidden":"true"},n),r.createElement("g",null,r.createElement("path",{d:"m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"})))}function M(t){let{editUrl:e}=t;return r.createElement("a",{href:e,target:"_blank",rel:"noreferrer noopener",className:x.k.common.editThisPage},r.createElement(O,null),r.createElement(p.Z,{id:"theme.common.editThisPage",description:"The link label to edit the current page"},"Edit this page"))}const I="tag_zVej",F="tagRegular_sFm0",$="tagWithCount_h2kH";function R(t){let{permalink:e,label:n,count:i}=t;return r.createElement(f.Z,{href:e,className:(0,h.Z)(I,i?$:F)},n,i&&r.createElement("span",null,i))}const Z="tags_jXut",P="tag_QGVx";function j(t){let{tags:e}=t;return r.createElement(r.Fragment,null,r.createElement("b",null,r.createElement(p.Z,{id:"theme.tags.tagsListLabel",description:"The label alongside a tag list"},"Tags:")),r.createElement("ul",{className:(0,h.Z)(Z,"padding--none","margin-left--sm")},e.map((t=>{let{label:e,permalink:n}=t;return r.createElement("li",{key:n,className:P},r.createElement(R,{label:e,permalink:n}))}))))}const Y="lastUpdated_vwxv";function z(t){return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterTagsRow,"row margin-bottom--sm")},r.createElement("div",{className:"col"},r.createElement(j,t)))}function U(t){let{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:i,formattedLastUpdatedAt:a}=t;return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterEditMetaRow,"row")},r.createElement("div",{className:"col"},e&&r.createElement(M,{editUrl:e})),r.createElement("div",{className:(0,h.Z)("col",Y)},(n||i)&&r.createElement(N,{lastUpdatedAt:n,formattedLastUpdatedAt:a,lastUpdatedBy:i})))}function W(){const{metadata:t}=c(),{editUrl:e,lastUpdatedAt:n,formattedLastUpdatedAt:i,lastUpdatedBy:a,tags:s}=t,o=s.length>0,l=!!(e||n||a);return o||l?r.createElement("footer",{className:(0,h.Z)(x.k.docs.docFooter,"docusaurus-mt-lg")},o&&r.createElement(z,{tags:s}),l&&r.createElement(U,{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:a,formattedLastUpdatedAt:i})):null}var q=n(6043),H=n(6668);function V(t){const e=t.map((t=>({...t,parentIndex:-1,children:[]}))),n=Array(7).fill(-1);e.forEach(((t,e)=>{const r=n.slice(2,t.level);t.parentIndex=Math.max(...r),n[t.level]=e}));const r=[];return e.forEach((t=>{const{parentIndex:n,...i}=t;n>=0?e[n].children.push(i):r.push(i)})),r}function G(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:r}=t;return e.flatMap((t=>{const e=G({toc:t.children,minHeadingLevel:n,maxHeadingLevel:r});return function(t){return t.level>=n&&t.level<=r}(t)?[{...t,children:e}]:e}))}function X(t){const e=t.getBoundingClientRect();return e.top===e.bottom?X(t.parentNode):e}function K(t,e){let{anchorTopOffset:n}=e;const r=t.find((t=>X(t).top>=n));if(r){return function(t){return t.top>0&&t.bottom<window.innerHeight/2}(X(r))?r:t[t.indexOf(r)-1]??null}return t[t.length-1]??null}function Q(){const t=(0,r.useRef)(0),{navbar:{hideOnScroll:e}}=(0,H.L)();return(0,r.useEffect)((()=>{t.current=e?0:document.querySelector(".navbar").clientHeight}),[e]),t}function J(t){const e=(0,r.useRef)(void 0),n=Q();(0,r.useEffect)((()=>{if(!t)return()=>{};const{linkClassName:r,linkActiveClassName:i,minHeadingLevel:a,maxHeadingLevel:s}=t;function o(){const t=function(t){return Array.from(document.getElementsByClassName(t))}(r),o=function(t){let{minHeadingLevel:e,maxHeadingLevel:n}=t;const r=[];for(let i=e;i<=n;i+=1)r.push(`h${i}.anchor`);return Array.from(document.querySelectorAll(r.join()))}({minHeadingLevel:a,maxHeadingLevel:s}),c=K(o,{anchorTopOffset:n.current}),l=t.find((t=>c&&c.id===function(t){return decodeURIComponent(t.href.substring(t.href.indexOf("#")+1))}(t)));t.forEach((t=>{!function(t,n){n?(e.current&&e.current!==t&&e.current.classList.remove(i),t.classList.add(i),e.current=t):t.classList.remove(i)}(t,t===l)}))}return document.addEventListener("scroll",o),document.addEventListener("resize",o),o(),()=>{document.removeEventListener("scroll",o),document.removeEventListener("resize",o)}}),[t,n])}function tt(t){let{toc:e,className:n,linkClassName:i,isChild:a}=t;return e.length?r.createElement("ul",{className:a?void 0:n},e.map((t=>r.createElement("li",{key:t.id},r.createElement("a",{href:`#${t.id}`,className:i??void 0,dangerouslySetInnerHTML:{__html:t.value}}),r.createElement(tt,{isChild:!0,toc:t.children,className:n,linkClassName:i}))))):null}const et=r.memo(tt);function nt(t){let{toc:e,className:n="table-of-contents table-of-contents__left-border",linkClassName:i="table-of-contents__link",linkActiveClassName:a,minHeadingLevel:s,maxHeadingLevel:o,...c}=t;const l=(0,H.L)(),h=s??l.tableOfContents.minHeadingLevel,u=o??l.tableOfContents.maxHeadingLevel,p=function(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:i}=t;return(0,r.useMemo)((()=>G({toc:V(e),minHeadingLevel:n,maxHeadingLevel:i})),[e,n,i])}({toc:e,minHeadingLevel:h,maxHeadingLevel:u});return J((0,r.useMemo)((()=>{if(i&&a)return{linkClassName:i,linkActiveClassName:a,minHeadingLevel:h,maxHeadingLevel:u}}),[i,a,h,u])),r.createElement(et,(0,d.Z)({toc:p,className:n,linkClassName:i},c))}const rt="tocCollapsibleButton_TO0P",it="tocCollapsibleButtonExpanded_MG3E";function at(t){let{collapsed:e,...n}=t;return r.createElement("button",(0,d.Z)({type:"button"},n,{className:(0,h.Z)("clean-btn",rt,!e&&it,n.className)}),r.createElement(p.Z,{id:"theme.TOCCollapsible.toggleButtonLabel",description:"The label used by the button on the collapsible TOC component"},"On this page"))}const st="tocCollapsible_ETCw",ot="tocCollapsibleContent_vkbj",ct="tocCollapsibleExpanded_sAul";function lt(t){let{toc:e,className:n,minHeadingLevel:i,maxHeadingLevel:a}=t;const{collapsed:s,toggleCollapsed:o}=(0,q.u)({initialState:!0});return r.createElement("div",{className:(0,h.Z)(st,!s&&ct,n)},r.createElement(at,{collapsed:s,onClick:o}),r.createElement(q.z,{lazy:!0,className:ot,collapsed:s},r.createElement(nt,{toc:e,minHeadingLevel:i,maxHeadingLevel:a})))}const ht="tocMobile_ITEo";function ut(){const{toc:t,frontMatter:e}=c();return r.createElement(lt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:(0,h.Z)(x.k.docs.docTocMobile,ht)})}const dt="tableOfContents_bqdL";function pt(t){let{className:e,...n}=t;return r.createElement("div",{className:(0,h.Z)(dt,"thin-scrollbar",e)},r.createElement(nt,(0,d.Z)({},n,{linkClassName:"table-of-contents__link toc-highlight",linkActiveClassName:"table-of-contents__link--active"})))}function ft(){const{toc:t,frontMatter:e}=c();return r.createElement(pt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:x.k.docs.docTocDesktop})}var gt=n(2503),yt=n(3905),mt=n(1769);function bt(t){let{children:e}=t;return r.createElement(yt.Zo,{components:mt.Z},e)}function _t(t){let{children:e}=t;const n=function(){const{metadata:t,frontMatter:e,contentTitle:n}=c();return e.hide_title||void 0!==n?null:t.title}();return r.createElement("div",{className:(0,h.Z)(x.k.docs.docMarkdown,"markdown")},n&&r.createElement("header",null,r.createElement(gt.Z,{as:"h1"},n)),r.createElement(bt,null,e))}var xt=n(3438),vt=n(8596),kt=n(4996);function wt(t){return r.createElement("svg",(0,d.Z)({viewBox:"0 0 24 24"},t),r.createElement("path",{d:"M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z",fill:"currentColor"}))}const Et="breadcrumbHomeIcon_YNFT";function Ct(){const t=(0,kt.Z)("/");return r.createElement("li",{className:"breadcrumbs__item"},r.createElement(f.Z,{"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.home",message:"Home page",description:"The ARIA label for the home page in the breadcrumbs"}),className:"breadcrumbs__link",href:t},r.createElement(wt,{className:Et})))}const Tt="breadcrumbsContainer_Z_bl";function St(t){let{children:e,href:n,isLast:i}=t;const a="breadcrumbs__link";return i?r.createElement("span",{className:a,itemProp:"name"},e):n?r.createElement(f.Z,{className:a,href:n,itemProp:"item"},r.createElement("span",{itemProp:"name"},e)):r.createElement("span",{className:a},e)}function At(t){let{children:e,active:n,index:i,addMicrodata:a}=t;return r.createElement("li",(0,d.Z)({},a&&{itemScope:!0,itemProp:"itemListElement",itemType:"https://schema.org/ListItem"},{className:(0,h.Z)("breadcrumbs__item",{"breadcrumbs__item--active":n})}),e,r.createElement("meta",{itemProp:"position",content:String(i+1)}))}function Lt(){const t=(0,xt.s1)(),e=(0,vt.Ns)();return t?r.createElement("nav",{className:(0,h.Z)(x.k.docs.docBreadcrumbs,Tt),"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.navAriaLabel",message:"Breadcrumbs",description:"The ARIA label for the breadcrumbs"})},r.createElement("ul",{className:"breadcrumbs",itemScope:!0,itemType:"https://schema.org/BreadcrumbList"},e&&r.createElement(Ct,null),t.map(((e,n)=>{const i=n===t.length-1;return r.createElement(At,{key:n,active:i,index:n,addMicrodata:!!e.href},r.createElement(St,{href:e.href,isLast:i},e.label))})))):null}const Bt="docItemContainer_Djhp",Nt="docItemCol_VOVn";function Dt(t){let{children:e}=t;const n=function(){const{frontMatter:t,toc:e}=c(),n=(0,u.i)(),i=t.hide_table_of_contents,a=!i&&e.length>0;return{hidden:i,mobile:a?r.createElement(ut,null):void 0,desktop:!a||"desktop"!==n&&"ssr"!==n?void 0:r.createElement(ft,null)}}();return r.createElement("div",{className:"row"},r.createElement("div",{className:(0,h.Z)("col",!n.hidden&&Nt)},r.createElement(S,null),r.createElement("div",{className:Bt},r.createElement("article",null,r.createElement(Lt,null),r.createElement(A,null),n.mobile,r.createElement(_t,null,e),r.createElement(W,null)),r.createElement(m,null))),n.desktop&&r.createElement("div",{className:"col col--3"},n.desktop))}function Ot(t){const e=`docs-doc-id-${t.content.metadata.unversionedId}`,n=t.content;return r.createElement(o,{content:t.content},r.createElement(i.FG,{className:e},r.createElement(l,null),r.createElement(Dt,null,r.createElement(n,null))))}},2503:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3117),i=n(7294),a=n(6010),s=n(5999),o=n(6668),c=n(9960);const l="anchorWithStickyNavbar_LWe7",h="anchorWithHideOnScrollNavbar_WYt5";function u(t){let{as:e,id:n,...u}=t;const{navbar:{hideOnScroll:d}}=(0,o.L)();if("h1"===e||!n)return i.createElement(e,(0,r.Z)({},u,{id:void 0}));const p=(0,s.I)({id:"theme.common.headingLinkTitle",message:"Direct link to {heading}",description:"Title for link to heading"},{heading:"string"==typeof u.children?u.children:n});return i.createElement(e,(0,r.Z)({},u,{className:(0,a.Z)("anchor",d?h:l,u.className),id:n}),u.children,i.createElement(c.Z,{className:"hash-link",to:`#${n}`,"aria-label":p,title:p},"\u200b"))}},6566:(t,e,n)=>{"use strict";n.d(e,{Z:()=>wt});var r=n(3117),i=n(7294),a=n(5742);var s=n(2389),o=n(6010),c=n(2949),l=n(6668);function h(){const{prism:t}=(0,l.L)(),{colorMode:e}=(0,c.I)(),n=t.theme,r=t.darkTheme||n;return"dark"===e?r:n}var u=n(5281),d=n(7594),p=n.n(d);const f=/title=(?<quote>["'])(?<title>.*?)\1/,g=/\{(?<range>[\d,-]+)\}/,y={js:{start:"\\/\\/",end:""},jsBlock:{start:"\\/\\*",end:"\\*\\/"},jsx:{start:"\\{\\s*\\/\\*",end:"\\*\\/\\s*\\}"},bash:{start:"#",end:""},html:{start:"\x3c!--",end:"--\x3e"}};function m(t,e){const n=t.map((t=>{const{start:n,end:r}=y[t];return`(?:${n}\\s*(${e.flatMap((t=>[t.line,t.block?.start,t.block?.end].filter(Boolean))).join("|")})\\s*${r})`})).join("|");return new RegExp(`^\\s*(?:${n})\\s*$`)}function b(t,e){let n=t.replace(/\n$/,"");const{language:r,magicComments:i,metastring:a}=e;if(a&&g.test(a)){const t=a.match(g).groups.range;if(0===i.length)throw new Error(`A highlight range has been given in code block's metastring (\`\`\` ${a}), but no magic comment config is available. Docusaurus applies the first magic comment entry's className for metastring ranges.`);const e=i[0].className,r=p()(t).filter((t=>t>0)).map((t=>[t-1,[e]]));return{lineClassNames:Object.fromEntries(r),code:n}}if(void 0===r)return{lineClassNames:{},code:n};const s=function(t,e){switch(t){case"js":case"javascript":case"ts":case"typescript":return m(["js","jsBlock"],e);case"jsx":case"tsx":return m(["js","jsBlock","jsx"],e);case"html":return m(["js","jsBlock","html"],e);case"python":case"py":case"bash":return m(["bash"],e);case"markdown":case"md":return m(["html","jsx","bash"],e);default:return m(Object.keys(y),e)}}(r,i),o=n.split("\n"),c=Object.fromEntries(i.map((t=>[t.className,{start:0,range:""}]))),l=Object.fromEntries(i.filter((t=>t.line)).map((t=>{let{className:e,line:n}=t;return[n,e]}))),h=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.start,e]}))),u=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.end,e]})));for(let p=0;p<o.length;){const t=o[p].match(s);if(!t){p+=1;continue}const e=t.slice(1).find((t=>void 0!==t));l[e]?c[l[e]].range+=`${p},`:h[e]?c[h[e]].start=p:u[e]&&(c[u[e]].range+=`${c[u[e]].start}-${p-1},`),o.splice(p,1)}n=o.join("\n");const d={};return Object.entries(c).forEach((t=>{let[e,{range:n}]=t;p()(n).forEach((t=>{d[t]??=[],d[t].push(e)}))})),{lineClassNames:d,code:n}}const _="codeBlockContainer_Ckt0";function x(t){let{as:e,...n}=t;const a=function(t){const e={color:"--prism-color",backgroundColor:"--prism-background-color"},n={};return Object.entries(t.plain).forEach((t=>{let[r,i]=t;const a=e[r];a&&"string"==typeof i&&(n[a]=i)})),n}(h());return i.createElement(e,(0,r.Z)({},n,{style:a,className:(0,o.Z)(n.className,_,u.k.common.codeBlock)}))}const v={codeBlockContent:"codeBlockContent_biex",codeBlockTitle:"codeBlockTitle_Ktv7",codeBlock:"codeBlock_bY9V",codeBlockStandalone:"codeBlockStandalone_MEMb",codeBlockLines:"codeBlockLines_e6Vv",codeBlockLinesWithNumbering:"codeBlockLinesWithNumbering_o6Pm",buttonGroup:"buttonGroup__atx"};function k(t){let{children:e,className:n}=t;return i.createElement(x,{as:"pre",tabIndex:0,className:(0,o.Z)(v.codeBlockStandalone,"thin-scrollbar",n)},i.createElement("code",{className:v.codeBlockLines},e))}var w=n(902);const E={attributes:!0,characterData:!0,childList:!0,subtree:!0};function C(t,e){const[n,r]=(0,i.useState)(),a=(0,i.useCallback)((()=>{r(t.current?.closest("[role=tabpanel][hidden]"))}),[t,r]);(0,i.useEffect)((()=>{a()}),[a]),function(t,e,n){void 0===n&&(n=E);const r=(0,w.zX)(e),a=(0,w.Ql)(n);(0,i.useEffect)((()=>{const e=new MutationObserver(r);return t&&e.observe(t,a),()=>e.disconnect()}),[t,r,a])}(n,(t=>{t.forEach((t=>{"attributes"===t.type&&"hidden"===t.attributeName&&(e(),a())}))}),{attributes:!0,characterData:!1,childList:!1,subtree:!1})}const T={plain:{backgroundColor:"#2a2734",color:"#9a86fd"},styles:[{types:["comment","prolog","doctype","cdata","punctuation"],style:{color:"#6c6783"}},{types:["namespace"],style:{opacity:.7}},{types:["tag","operator","number"],style:{color:"#e09142"}},{types:["property","function"],style:{color:"#9a86fd"}},{types:["tag-id","selector","atrule-id"],style:{color:"#eeebff"}},{types:["attr-name"],style:{color:"#c4b9fe"}},{types:["boolean","string","entity","url","attr-value","keyword","control","directive","unit","statement","regex","atrule","placeholder","variable"],style:{color:"#ffcc99"}},{types:["deleted"],style:{textDecorationLine:"line-through"}},{types:["inserted"],style:{textDecorationLine:"underline"}},{types:["italic"],style:{fontStyle:"italic"}},{types:["important","bold"],style:{fontWeight:"bold"}},{types:["important"],style:{color:"#c4b9fe"}}]};var S={Prism:n(7410).Z,theme:T};function A(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function L(){return L=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t},L.apply(this,arguments)}var B=/\r\n|\r|\n/,N=function(t){0===t.length?t.push({types:["plain"],content:"\n",empty:!0}):1===t.length&&""===t[0].content&&(t[0].content="\n",t[0].empty=!0)},D=function(t,e){var n=t.length;return n>0&&t[n-1]===e?t:t.concat(e)},O=function(t,e){var n=t.plain,r=Object.create(null),i=t.styles.reduce((function(t,n){var r=n.languages,i=n.style;return r&&!r.includes(e)||n.types.forEach((function(e){var n=L({},t[e],i);t[e]=n})),t}),r);return i.root=n,i.plain=L({},n,{backgroundColor:null}),i};function M(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&-1===e.indexOf(r)&&(n[r]=t[r]);return n}const I=function(t){function e(){for(var e=this,n=[],r=arguments.length;r--;)n[r]=arguments[r];t.apply(this,n),A(this,"getThemeDict",(function(t){if(void 0!==e.themeDict&&t.theme===e.prevTheme&&t.language===e.prevLanguage)return e.themeDict;e.prevTheme=t.theme,e.prevLanguage=t.language;var n=t.theme?O(t.theme,t.language):void 0;return e.themeDict=n})),A(this,"getLineProps",(function(t){var n=t.key,r=t.className,i=t.style,a=L({},M(t,["key","className","style","line"]),{className:"token-line",style:void 0,key:void 0}),s=e.getThemeDict(e.props);return void 0!==s&&(a.style=s.plain),void 0!==i&&(a.style=void 0!==a.style?L({},a.style,i):i),void 0!==n&&(a.key=n),r&&(a.className+=" "+r),a})),A(this,"getStyleForToken",(function(t){var n=t.types,r=t.empty,i=n.length,a=e.getThemeDict(e.props);if(void 0!==a){if(1===i&&"plain"===n[0])return r?{display:"inline-block"}:void 0;if(1===i&&!r)return a[n[0]];var s=r?{display:"inline-block"}:{},o=n.map((function(t){return a[t]}));return Object.assign.apply(Object,[s].concat(o))}})),A(this,"getTokenProps",(function(t){var n=t.key,r=t.className,i=t.style,a=t.token,s=L({},M(t,["key","className","style","token"]),{className:"token "+a.types.join(" "),children:a.content,style:e.getStyleForToken(a),key:void 0});return void 0!==i&&(s.style=void 0!==s.style?L({},s.style,i):i),void 0!==n&&(s.key=n),r&&(s.className+=" "+r),s})),A(this,"tokenize",(function(t,e,n,r){var i={code:e,grammar:n,language:r,tokens:[]};t.hooks.run("before-tokenize",i);var a=i.tokens=t.tokenize(i.code,i.grammar,i.language);return t.hooks.run("after-tokenize",i),a}))}return t&&(e.__proto__=t),e.prototype=Object.create(t&&t.prototype),e.prototype.constructor=e,e.prototype.render=function(){var t=this.props,e=t.Prism,n=t.language,r=t.code,i=t.children,a=this.getThemeDict(this.props),s=e.languages[n];return i({tokens:function(t){for(var e=[[]],n=[t],r=[0],i=[t.length],a=0,s=0,o=[],c=[o];s>-1;){for(;(a=r[s]++)<i[s];){var l=void 0,h=e[s],u=n[s][a];if("string"==typeof u?(h=s>0?h:["plain"],l=u):(h=D(h,u.type),u.alias&&(h=D(h,u.alias)),l=u.content),"string"==typeof l){var d=l.split(B),p=d.length;o.push({types:h,content:d[0]});for(var f=1;f<p;f++)N(o),c.push(o=[]),o.push({types:h,content:d[f]})}else s++,e.push(h),n.push(l),r.push(0),i.push(l.length)}s--,e.pop(),n.pop(),r.pop(),i.pop()}return N(o),c}(void 0!==s?this.tokenize(e,r,s,n):[r]),className:"prism-code language-"+n,style:void 0!==a?a.root:{},getLineProps:this.getLineProps,getTokenProps:this.getTokenProps})},e}(i.Component),F="codeLine_lJS_",$="codeLineNumber_Tfdd",R="codeLineContent_feaV";function Z(t){let{line:e,classNames:n,showLineNumbers:a,getLineProps:s,getTokenProps:c}=t;1===e.length&&"\n"===e[0].content&&(e[0].content="");const l=s({line:e,className:(0,o.Z)(n,a&&F)}),h=e.map(((t,e)=>i.createElement("span",(0,r.Z)({key:e},c({token:t,key:e})))));return i.createElement("span",l,a?i.createElement(i.Fragment,null,i.createElement("span",{className:$}),i.createElement("span",{className:R},h)):h,i.createElement("br",null))}var P=n(5999);function j(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"}))}function Y(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"}))}const z={copyButtonCopied:"copyButtonCopied_obH4",copyButtonIcons:"copyButtonIcons_eSgA",copyButtonIcon:"copyButtonIcon_y97N",copyButtonSuccessIcon:"copyButtonSuccessIcon_LjdS"};function U(t){let{code:e,className:n}=t;const[r,a]=(0,i.useState)(!1),s=(0,i.useRef)(void 0),c=(0,i.useCallback)((()=>{!function(t,e){let{target:n=document.body}=void 0===e?{}:e;if("string"!=typeof t)throw new TypeError(`Expected parameter \`text\` to be a \`string\`, got \`${typeof t}\`.`);const r=document.createElement("textarea"),i=document.activeElement;r.value=t,r.setAttribute("readonly",""),r.style.contain="strict",r.style.position="absolute",r.style.left="-9999px",r.style.fontSize="12pt";const a=document.getSelection(),s=a.rangeCount>0&&a.getRangeAt(0);n.append(r),r.select(),r.selectionStart=0,r.selectionEnd=t.length;let o=!1;try{o=document.execCommand("copy")}catch{}r.remove(),s&&(a.removeAllRanges(),a.addRange(s)),i&&i.focus()}(e),a(!0),s.current=window.setTimeout((()=>{a(!1)}),1e3)}),[e]);return(0,i.useEffect)((()=>()=>window.clearTimeout(s.current)),[]),i.createElement("button",{type:"button","aria-label":r?(0,P.I)({id:"theme.CodeBlock.copied",message:"Copied",description:"The copied button label on code blocks"}):(0,P.I)({id:"theme.CodeBlock.copyButtonAriaLabel",message:"Copy code to clipboard",description:"The ARIA label for copy code blocks button"}),title:(0,P.I)({id:"theme.CodeBlock.copy",message:"Copy",description:"The copy button label on code blocks"}),className:(0,o.Z)("clean-btn",n,z.copyButton,r&&z.copyButtonCopied),onClick:c},i.createElement("span",{className:z.copyButtonIcons,"aria-hidden":"true"},i.createElement(j,{className:z.copyButtonIcon}),i.createElement(Y,{className:z.copyButtonSuccessIcon})))}function W(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M4 19h6v-2H4v2zM20 5H4v2h16V5zm-3 6H4v2h13.25c1.1 0 2 .9 2 2s-.9 2-2 2H15v-2l-3 3l3 3v-2h2c2.21 0 4-1.79 4-4s-1.79-4-4-4z"}))}const q="wordWrapButtonIcon_Bwma",H="wordWrapButtonEnabled_EoeP";function V(t){let{className:e,onClick:n,isEnabled:r}=t;const a=(0,P.I)({id:"theme.CodeBlock.wordWrapToggle",message:"Toggle word wrap",description:"The title attribute for toggle word wrapping button of code block lines"});return i.createElement("button",{type:"button",onClick:n,className:(0,o.Z)("clean-btn",e,r&&H),"aria-label":a,title:a},i.createElement(W,{className:q,"aria-hidden":"true"}))}function G(t){let{children:e,className:n="",metastring:a,title:s,showLineNumbers:c,language:u}=t;const{prism:{defaultLanguage:d,magicComments:p}}=(0,l.L)(),g=u??n.split(" ").find((t=>t.startsWith("language-")))?.replace(/language-/,"")??d;const y=h(),m=function(){const[t,e]=(0,i.useState)(!1),[n,r]=(0,i.useState)(!1),a=(0,i.useRef)(null),s=(0,i.useCallback)((()=>{const n=a.current.querySelector("code");t?n.removeAttribute("style"):(n.style.whiteSpace="pre-wrap",n.style.overflowWrap="anywhere"),e((t=>!t))}),[a,t]),o=(0,i.useCallback)((()=>{const{scrollWidth:t,clientWidth:e}=a.current,n=t>e||a.current.querySelector("code").hasAttribute("style");r(n)}),[a]);return C(a,o),(0,i.useEffect)((()=>{o()}),[t,o]),(0,i.useEffect)((()=>(window.addEventListener("resize",o,{passive:!0}),()=>{window.removeEventListener("resize",o)})),[o]),{codeBlockRef:a,isEnabled:t,isCodeScrollable:n,toggle:s}}(),_=function(t){return t?.match(f)?.groups.title??""}(a)||s,{lineClassNames:k,code:w}=b(e,{metastring:a,language:g,magicComments:p}),E=c??function(t){return Boolean(t?.includes("showLineNumbers"))}(a);return i.createElement(x,{as:"div",className:(0,o.Z)(n,g&&!n.includes(`language-${g}`)&&`language-${g}`)},_&&i.createElement("div",{className:v.codeBlockTitle},_),i.createElement("div",{className:v.codeBlockContent},i.createElement(I,(0,r.Z)({},S,{theme:y,code:w,language:g??"text"}),(t=>{let{className:e,tokens:n,getLineProps:r,getTokenProps:a}=t;return i.createElement("pre",{tabIndex:0,ref:m.codeBlockRef,className:(0,o.Z)(e,v.codeBlock,"thin-scrollbar")},i.createElement("code",{className:(0,o.Z)(v.codeBlockLines,E&&v.codeBlockLinesWithNumbering)},n.map(((t,e)=>i.createElement(Z,{key:e,line:t,getLineProps:r,getTokenProps:a,classNames:k[e],showLineNumbers:E})))))})),i.createElement("div",{className:v.buttonGroup},(m.isEnabled||m.isCodeScrollable)&&i.createElement(V,{className:v.codeButton,onClick:()=>m.toggle(),isEnabled:m.isEnabled}),i.createElement(U,{className:v.codeButton,code:w}))))}function X(t){let{children:e,...n}=t;const a=(0,s.Z)(),o=function(t){return i.Children.toArray(t).some((t=>(0,i.isValidElement)(t)))?t:Array.isArray(t)?t.join(""):t}(e),c="string"==typeof o?G:k;return i.createElement(c,(0,r.Z)({key:String(a)},n),o)}var K=n(9960);var Q=n(6043);const J="details_lb9f",tt="isBrowser_bmU9",et="collapsibleContent_i85q";function nt(t){return!!t&&("SUMMARY"===t.tagName||nt(t.parentElement))}function rt(t,e){return!!t&&(t===e||rt(t.parentElement,e))}function it(t){let{summary:e,children:n,...a}=t;const c=(0,s.Z)(),l=(0,i.useRef)(null),{collapsed:h,setCollapsed:u}=(0,Q.u)({initialState:!a.open}),[d,p]=(0,i.useState)(a.open),f=i.isValidElement(e)?e:i.createElement("summary",null,e??"Details");return i.createElement("details",(0,r.Z)({},a,{ref:l,open:d,"data-collapsed":h,className:(0,o.Z)(J,c&&tt,a.className),onMouseDown:t=>{nt(t.target)&&t.detail>1&&t.preventDefault()},onClick:t=>{t.stopPropagation();const e=t.target;nt(e)&&rt(e,l.current)&&(t.preventDefault(),h?(u(!1),p(!0)):u(!0))}}),f,i.createElement(Q.z,{lazy:!1,collapsed:h,disableSSRStyle:!0,onCollapseTransitionEnd:t=>{u(t),p(!t)}},i.createElement("div",{className:et},n)))}const at="details_b_Ee";function st(t){let{...e}=t;return i.createElement(it,(0,r.Z)({},e,{className:(0,o.Z)("alert alert--info",at,e.className)}))}var ot=n(2503);function ct(t){return i.createElement(ot.Z,t)}const lt="containsTaskList_mC6p";const ht="img_ev3q";const ut="admonition_LlT9",dt="admonitionHeading_tbUL",pt="admonitionIcon_kALy",ft="admonitionContent_S0QG";const gt={note:{infimaClassName:"secondary",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"}))},label:i.createElement(P.Z,{id:"theme.admonition.note",description:"The default label used for the Note admonition (:::note)"},"note")},tip:{infimaClassName:"success",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.tip",description:"The default label used for the Tip admonition (:::tip)"},"tip")},danger:{infimaClassName:"danger",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"}))},label:i.createElement(P.Z,{id:"theme.admonition.danger",description:"The default label used for the Danger admonition (:::danger)"},"danger")},info:{infimaClassName:"info",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.info",description:"The default label used for the Info admonition (:::info)"},"info")},caution:{infimaClassName:"warning",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 16 16"},i.createElement("path",{fillRule:"evenodd",d:"M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"}))},label:i.createElement(P.Z,{id:"theme.admonition.caution",description:"The default label used for the Caution admonition (:::caution)"},"caution")}},yt={secondary:"note",important:"info",success:"tip",warning:"danger"};function mt(t){const{mdxAdmonitionTitle:e,rest:n}=function(t){const e=i.Children.toArray(t),n=e.find((t=>i.isValidElement(t)&&"mdxAdmonitionTitle"===t.props?.mdxType)),r=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return{mdxAdmonitionTitle:n,rest:r}}(t.children);return{...t,title:t.title??e,children:n}}function bt(t){let{children:e,fallback:n}=t;return(0,s.Z)()?i.createElement(i.Fragment,null,e?.()):n??null}var _t=n(6432);function xt(){const{colorMode:t}=(0,c.I)(),e=(0,l.L)().mermaid,n=e.theme[t],{options:r}=e;return(0,i.useMemo)((()=>({startOnLoad:!1,...r,theme:n})),[n,r])}const vt="container_lyt7";function kt(t){let{value:e}=t;const n=function(t,e){const n=xt(),r=e??n;return(0,i.useMemo)((()=>{_t.o.mermaidAPI.initialize(r);const e=`mermaid-svg-${Math.round(1e7*Math.random())}`;return _t.o.render(e,t)}),[t,r])}(e);return i.createElement("div",{className:`docusaurus-mermaid-container ${vt}`,dangerouslySetInnerHTML:{__html:n}})}const wt={head:function(t){const e=i.Children.map(t.children,(t=>i.isValidElement(t)?function(t){if(t.props?.mdxType&&t.props.originalType){const{mdxType:e,originalType:n,...r}=t.props;return i.createElement(t.props.originalType,r)}return t}(t):t));return i.createElement(a.Z,t,e)},code:function(t){const e=["a","abbr","b","br","button","cite","code","del","dfn","em","i","img","input","ins","kbd","label","object","output","q","ruby","s","small","span","strong","sub","sup","time","u","var","wbr"];return i.Children.toArray(t.children).every((t=>"string"==typeof t&&!t.includes("\n")||(0,i.isValidElement)(t)&&e.includes(t.props?.mdxType)))?i.createElement("code",t):i.createElement(X,t)},a:function(t){return i.createElement(K.Z,t)},pre:function(t){return i.createElement(X,(0,i.isValidElement)(t.children)&&"code"===t.children.props?.originalType?t.children.props:{...t})},details:function(t){const e=i.Children.toArray(t.children),n=e.find((t=>i.isValidElement(t)&&"summary"===t.props?.mdxType)),a=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return i.createElement(st,(0,r.Z)({},t,{summary:n}),a)},ul:function(t){return i.createElement("ul",(0,r.Z)({},t,{className:(e=t.className,(0,o.Z)(e,e?.includes("contains-task-list")&&lt))}));var e},img:function(t){return i.createElement("img",(0,r.Z)({loading:"lazy"},t,{className:(e=t.className,(0,o.Z)(e,ht))}));var e},h1:t=>i.createElement(ct,(0,r.Z)({as:"h1"},t)),h2:t=>i.createElement(ct,(0,r.Z)({as:"h2"},t)),h3:t=>i.createElement(ct,(0,r.Z)({as:"h3"},t)),h4:t=>i.createElement(ct,(0,r.Z)({as:"h4"},t)),h5:t=>i.createElement(ct,(0,r.Z)({as:"h5"},t)),h6:t=>i.createElement(ct,(0,r.Z)({as:"h6"},t)),admonition:function(t){const{children:e,type:n,title:r,icon:a}=mt(t),s=function(t){const e=yt[t]??t;return gt[e]||(console.warn(`No admonition config found for admonition type "${e}". Using Info as fallback.`),gt.info)}(n),c=r??s.label,{iconComponent:l}=s,h=a??i.createElement(l,null);return i.createElement("div",{className:(0,o.Z)(u.k.common.admonition,u.k.common.admonitionType(t.type),"alert",`alert--${s.infimaClassName}`,ut)},i.createElement("div",{className:dt},i.createElement("span",{className:pt},h),c),i.createElement("div",{className:ft},e))},mermaid:function(t){return i.createElement(bt,null,(()=>i.createElement(kt,t)))}}},5162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7294),i=n(6010);const a="tabItem_Ymn6";function s(t){let{children:e,hidden:n,className:s}=t;return r.createElement("div",{role:"tabpanel",className:(0,i.Z)(a,s),hidden:n},e)}},4866:(t,e,n)=>{"use strict";n.d(e,{Z:()=>k});var r=n(3117),i=n(7294),a=n(6010),s=n(2466),o=n(6775),c=n(1980),l=n(7392),h=n(12);function u(t){return function(t){return i.Children.map(t,(t=>{if(!t||(0,i.isValidElement)(t)&&function(t){const{props:e}=t;return!!e&&"object"==typeof e&&"value"in e}(t))return t;throw new Error(`Docusaurus error: Bad <Tabs> child <${"string"==typeof t.type?t.type:t.type.name}>: all children of the <Tabs> component should be <TabItem>, and every <TabItem> should have a unique "value" prop.`)}))?.filter(Boolean)??[]}(t).map((t=>{let{props:{value:e,label:n,attributes:r,default:i}}=t;return{value:e,label:n,attributes:r,default:i}}))}function d(t){const{values:e,children:n}=t;return(0,i.useMemo)((()=>{const t=e??u(n);return function(t){const e=(0,l.l)(t,((t,e)=>t.value===e.value));if(e.length>0)throw new Error(`Docusaurus error: Duplicate values "${e.map((t=>t.value)).join(", ")}" found in <Tabs>. Every value needs to be unique.`)}(t),t}),[e,n])}function p(t){let{value:e,tabValues:n}=t;return n.some((t=>t.value===e))}function f(t){let{queryString:e=!1,groupId:n}=t;const r=(0,o.k6)(),a=function(t){let{queryString:e=!1,groupId:n}=t;if("string"==typeof e)return e;if(!1===e)return null;if(!0===e&&!n)throw new Error('Docusaurus error: The <Tabs> component groupId prop is required if queryString=true, because this value is used as the search param name. You can also provide an explicit value such as queryString="my-search-param".');return n??null}({queryString:e,groupId:n});return[(0,c._X)(a),(0,i.useCallback)((t=>{if(!a)return;const e=new URLSearchParams(r.location.search);e.set(a,t),r.replace({...r.location,search:e.toString()})}),[a,r])]}function g(t){const{defaultValue:e,queryString:n=!1,groupId:r}=t,a=d(t),[s,o]=(0,i.useState)((()=>function(t){let{defaultValue:e,tabValues:n}=t;if(0===n.length)throw new Error("Docusaurus error: the <Tabs> component requires at least one <TabItem> children component");if(e){if(!p({value:e,tabValues:n}))throw new Error(`Docusaurus error: The <Tabs> has a defaultValue "${e}" but none of its children has the corresponding value. Available values are: ${n.map((t=>t.value)).join(", ")}. If you intend to show no default tab, use defaultValue={null} instead.`);return e}const r=n.find((t=>t.default))??n[0];if(!r)throw new Error("Unexpected error: 0 tabValues");return r.value}({defaultValue:e,tabValues:a}))),[c,l]=f({queryString:n,groupId:r}),[u,g]=function(t){let{groupId:e}=t;const n=function(t){return t?`docusaurus.tab.${t}`:null}(e),[r,a]=(0,h.Nk)(n);return[r,(0,i.useCallback)((t=>{n&&a.set(t)}),[n,a])]}({groupId:r}),y=(()=>{const t=c??u;return p({value:t,tabValues:a})?t:null})();(0,i.useLayoutEffect)((()=>{y&&o(y)}),[y]);return{selectedValue:s,selectValue:(0,i.useCallback)((t=>{if(!p({value:t,tabValues:a}))throw new Error(`Can't select invalid tab value=${t}`);o(t),l(t),g(t)}),[l,g,a]),tabValues:a}}var y=n(2389);const m="tabList__CuJ",b="tabItem_LNqP";function _(t){let{className:e,block:n,selectedValue:o,selectValue:c,tabValues:l}=t;const h=[],{blockElementScrollPositionUntilNextRender:u}=(0,s.o5)(),d=t=>{const e=t.currentTarget,n=h.indexOf(e),r=l[n].value;r!==o&&(u(e),c(r))},p=t=>{let e=null;switch(t.key){case"Enter":d(t);break;case"ArrowRight":{const n=h.indexOf(t.currentTarget)+1;e=h[n]??h[0];break}case"ArrowLeft":{const n=h.indexOf(t.currentTarget)-1;e=h[n]??h[h.length-1];break}}e?.focus()};return i.createElement("ul",{role:"tablist","aria-orientation":"horizontal",className:(0,a.Z)("tabs",{"tabs--block":n},e)},l.map((t=>{let{value:e,label:n,attributes:s}=t;return i.createElement("li",(0,r.Z)({role:"tab",tabIndex:o===e?0:-1,"aria-selected":o===e,key:e,ref:t=>h.push(t),onKeyDown:p,onClick:d},s,{className:(0,a.Z)("tabs__item",b,s?.className,{"tabs__item--active":o===e})}),n??e)})))}function x(t){let{lazy:e,children:n,selectedValue:r}=t;const a=(Array.isArray(n)?n:[n]).filter(Boolean);if(e){const t=a.find((t=>t.props.value===r));return t?(0,i.cloneElement)(t,{className:"margin-top--md"}):null}return i.createElement("div",{className:"margin-top--md"},a.map(((t,e)=>(0,i.cloneElement)(t,{key:e,hidden:t.props.value!==r}))))}function v(t){const e=g(t);return i.createElement("div",{className:(0,a.Z)("tabs-container",m)},i.createElement(_,(0,r.Z)({},t,e)),i.createElement(x,(0,r.Z)({},t,e)))}function k(t){const e=(0,y.Z)();return i.createElement(v,(0,r.Z)({key:String(e)},t))}},4477:(t,e,n)=>{"use strict";n.d(e,{E:()=>o,q:()=>s});var r=n(7294),i=n(902);const a=r.createContext(null);function s(t){let{children:e,version:n}=t;return r.createElement(a.Provider,{value:n},e)}function o(){const t=(0,r.useContext)(a);if(null===t)throw new i.i6("DocsVersionProvider");return t}},7484:function(t){t.exports=function(){"use strict";var t=1e3,e=6e4,n=36e5,r="millisecond",i="second",a="minute",s="hour",o="day",c="week",l="month",h="quarter",u="year",d="date",p="Invalid Date",f=/^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{1,2})?[.:]?(\d+)?$/,g=/\[([^\]]+)]|Y{1,4}|M{1,4}|D{1,2}|d{1,4}|H{1,2}|h{1,2}|a|A|m{1,2}|s{1,2}|Z{1,2}|SSS/g,y={name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),ordinal:function(t){var e=["th","st","nd","rd"],n=t%100;return"["+t+(e[(n-20)%10]||e[n]||e[0])+"]"}},m=function(t,e,n){var r=String(t);return!r||r.length>=e?t:""+Array(e+1-r.length).join(n)+t},b={s:m,z:function(t){var e=-t.utcOffset(),n=Math.abs(e),r=Math.floor(n/60),i=n%60;return(e<=0?"+":"-")+m(r,2,"0")+":"+m(i,2,"0")},m:function t(e,n){if(e.date()<n.date())return-t(n,e);var r=12*(n.year()-e.year())+(n.month()-e.month()),i=e.clone().add(r,l),a=n-i<0,s=e.clone().add(r+(a?-1:1),l);return+(-(r+(n-i)/(a?i-s:s-i))||0)},a:function(t){return t<0?Math.ceil(t)||0:Math.floor(t)},p:function(t){return{M:l,y:u,w:c,d:o,D:d,h:s,m:a,s:i,ms:r,Q:h}[t]||String(t||"").toLowerCase().replace(/s$/,"")},u:function(t){return void 0===t}},_="en",x={};x[_]=y;var v=function(t){return t instanceof C},k=function t(e,n,r){var i;if(!e)return _;if("string"==typeof e){var a=e.toLowerCase();x[a]&&(i=a),n&&(x[a]=n,i=a);var s=e.split("-");if(!i&&s.length>1)return t(s[0])}else{var o=e.name;x[o]=e,i=o}return!r&&i&&(_=i),i||!r&&_},w=function(t,e){if(v(t))return t.clone();var n="object"==typeof e?e:{};return n.date=t,n.args=arguments,new C(n)},E=b;E.l=k,E.i=v,E.w=function(t,e){return w(t,{locale:e.$L,utc:e.$u,x:e.$x,$offset:e.$offset})};var C=function(){function y(t){this.$L=k(t.locale,null,!0),this.parse(t)}var m=y.prototype;return m.parse=function(t){this.$d=function(t){var e=t.date,n=t.utc;if(null===e)return new Date(NaN);if(E.u(e))return new Date;if(e instanceof Date)return new Date(e);if("string"==typeof e&&!/Z$/i.test(e)){var r=e.match(f);if(r){var i=r[2]-1||0,a=(r[7]||"0").substring(0,3);return n?new Date(Date.UTC(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)):new Date(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)}}return new Date(e)}(t),this.$x=t.x||{},this.init()},m.init=function(){var t=this.$d;this.$y=t.getFullYear(),this.$M=t.getMonth(),this.$D=t.getDate(),this.$W=t.getDay(),this.$H=t.getHours(),this.$m=t.getMinutes(),this.$s=t.getSeconds(),this.$ms=t.getMilliseconds()},m.$utils=function(){return E},m.isValid=function(){return!(this.$d.toString()===p)},m.isSame=function(t,e){var n=w(t);return this.startOf(e)<=n&&n<=this.endOf(e)},m.isAfter=function(t,e){return w(t)<this.startOf(e)},m.isBefore=function(t,e){return this.endOf(e)<w(t)},m.$g=function(t,e,n){return E.u(t)?this[e]:this.set(n,t)},m.unix=function(){return Math.floor(this.valueOf()/1e3)},m.valueOf=function(){return this.$d.getTime()},m.startOf=function(t,e){var n=this,r=!!E.u(e)||e,h=E.p(t),p=function(t,e){var i=E.w(n.$u?Date.UTC(n.$y,e,t):new Date(n.$y,e,t),n);return r?i:i.endOf(o)},f=function(t,e){return E.w(n.toDate()[t].apply(n.toDate("s"),(r?[0,0,0,0]:[23,59,59,999]).slice(e)),n)},g=this.$W,y=this.$M,m=this.$D,b="set"+(this.$u?"UTC":"");switch(h){case u:return r?p(1,0):p(31,11);case l:return r?p(1,y):p(0,y+1);case c:var _=this.$locale().weekStart||0,x=(g<_?g+7:g)-_;return p(r?m-x:m+(6-x),y);case o:case d:return f(b+"Hours",0);case s:return f(b+"Minutes",1);case a:return f(b+"Seconds",2);case i:return f(b+"Milliseconds",3);default:return this.clone()}},m.endOf=function(t){return this.startOf(t,!1)},m.$set=function(t,e){var n,c=E.p(t),h="set"+(this.$u?"UTC":""),p=(n={},n[o]=h+"Date",n[d]=h+"Date",n[l]=h+"Month",n[u]=h+"FullYear",n[s]=h+"Hours",n[a]=h+"Minutes",n[i]=h+"Seconds",n[r]=h+"Milliseconds",n)[c],f=c===o?this.$D+(e-this.$W):e;if(c===l||c===u){var g=this.clone().set(d,1);g.$d[p](f),g.init(),this.$d=g.set(d,Math.min(this.$D,g.daysInMonth())).$d}else p&&this.$d[p](f);return this.init(),this},m.set=function(t,e){return this.clone().$set(t,e)},m.get=function(t){return this[E.p(t)]()},m.add=function(r,h){var d,p=this;r=Number(r);var f=E.p(h),g=function(t){var e=w(p);return E.w(e.date(e.date()+Math.round(t*r)),p)};if(f===l)return this.set(l,this.$M+r);if(f===u)return this.set(u,this.$y+r);if(f===o)return g(1);if(f===c)return g(7);var y=(d={},d[a]=e,d[s]=n,d[i]=t,d)[f]||1,m=this.$d.getTime()+r*y;return E.w(m,this)},m.subtract=function(t,e){return this.add(-1*t,e)},m.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return n.invalidDate||p;var r=t||"YYYY-MM-DDTHH:mm:ssZ",i=E.z(this),a=this.$H,s=this.$m,o=this.$M,c=n.weekdays,l=n.months,h=function(t,n,i,a){return t&&(t[n]||t(e,r))||i[n].slice(0,a)},u=function(t){return E.s(a%12||12,t,"0")},d=n.meridiem||function(t,e,n){var r=t<12?"AM":"PM";return n?r.toLowerCase():r},f={YY:String(this.$y).slice(-2),YYYY:this.$y,M:o+1,MM:E.s(o+1,2,"0"),MMM:h(n.monthsShort,o,l,3),MMMM:h(l,o),D:this.$D,DD:E.s(this.$D,2,"0"),d:String(this.$W),dd:h(n.weekdaysMin,this.$W,c,2),ddd:h(n.weekdaysShort,this.$W,c,3),dddd:c[this.$W],H:String(a),HH:E.s(a,2,"0"),h:u(1),hh:u(2),a:d(a,s,!0),A:d(a,s,!1),m:String(s),mm:E.s(s,2,"0"),s:String(this.$s),ss:E.s(this.$s,2,"0"),SSS:E.s(this.$ms,3,"0"),Z:i};return r.replace(g,(function(t,e){return e||f[t]||i.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(r,d,p){var f,g=E.p(d),y=w(r),m=(y.utcOffset()-this.utcOffset())*e,b=this-y,_=E.m(this,y);return _=(f={},f[u]=_/12,f[l]=_,f[h]=_/3,f[c]=(b-m)/6048e5,f[o]=(b-m)/864e5,f[s]=b/n,f[a]=b/e,f[i]=b/t,f)[g]||b,p?_:E.a(_)},m.daysInMonth=function(){return this.endOf(l).$D},m.$locale=function(){return x[this.$L]},m.locale=function(t,e){if(!t)return this.$L;var n=this.clone(),r=k(t,e,!0);return r&&(n.$L=r),n},m.clone=function(){return E.w(this.$d,this)},m.toDate=function(){return new Date(this.valueOf())},m.toJSON=function(){return this.isValid()?this.toISOString():null},m.toISOString=function(){return this.$d.toISOString()},m.toString=function(){return this.$d.toUTCString()},y}(),T=C.prototype;return w.prototype=T,[["$ms",r],["$s",i],["$m",a],["$H",s],["$W",o],["$M",l],["$y",u],["$D",d]].forEach((function(t){T[t[1]]=function(e){return this.$g(e,t[0],t[1])}})),w.extend=function(t,e){return t.$i||(t(e,C,w),t.$i=!0),w},w.locale=k,w.isDayjs=v,w.unix=function(t){return w(1e3*t)},w.en=x[_],w.Ls=x,w.p={},w}()},8734:function(t){t.exports=function(){"use strict";return function(t,e){var n=e.prototype,r=n.format;n.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return r.bind(this)(t);var i=this.$utils(),a=(t||"YYYY-MM-DDTHH:mm:ssZ").replace(/\[([^\]]+)]|Q|wo|ww|w|WW|W|zzz|z|gggg|GGGG|Do|X|x|k{1,2}|S/g,(function(t){switch(t){case"Q":return Math.ceil((e.$M+1)/3);case"Do":return n.ordinal(e.$D);case"gggg":return e.weekYear();case"GGGG":return e.isoWeekYear();case"wo":return n.ordinal(e.week(),"W");case"w":case"ww":return i.s(e.week(),"w"===t?1:2,"0");case"W":case"WW":return i.s(e.isoWeek(),"W"===t?1:2,"0");case"k":case"kk":return i.s(String(0===e.$H?24:e.$H),"k"===t?1:2,"0");case"X":return Math.floor(e.$d.getTime()/1e3);case"x":return e.$d.getTime();case"z":return"["+e.offsetName()+"]";case"zzz":return"["+e.offsetName("long")+"]";default:return t}}));return r.bind(this)(a)}}}()},285:function(t){t.exports=function(){"use strict";var t={LTS:"h:mm:ss A",LT:"h:mm A",L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},e=/(\[[^[]*\])|([-_:/.,()\s]+)|(A|a|YYYY|YY?|MM?M?M?|Do|DD?|hh?|HH?|mm?|ss?|S{1,3}|z|ZZ?)/g,n=/\d\d/,r=/\d\d?/,i=/\d*[^-_:/,()\s\d]+/,a={},s=function(t){return(t=+t)+(t>68?1900:2e3)},o=function(t){return function(e){this[t]=+e}},c=[/[+-]\d\d:?(\d\d)?|Z/,function(t){(this.zone||(this.zone={})).offset=function(t){if(!t)return 0;if("Z"===t)return 0;var e=t.match(/([+-]|\d\d)/g),n=60*e[1]+(+e[2]||0);return 0===n?0:"+"===e[0]?-n:n}(t)}],l=function(t){var e=a[t];return e&&(e.indexOf?e:e.s.concat(e.f))},h=function(t,e){var n,r=a.meridiem;if(r){for(var i=1;i<=24;i+=1)if(t.indexOf(r(i,0,e))>-1){n=i>12;break}}else n=t===(e?"pm":"PM");return n},u={A:[i,function(t){this.afternoon=h(t,!1)}],a:[i,function(t){this.afternoon=h(t,!0)}],S:[/\d/,function(t){this.milliseconds=100*+t}],SS:[n,function(t){this.milliseconds=10*+t}],SSS:[/\d{3}/,function(t){this.milliseconds=+t}],s:[r,o("seconds")],ss:[r,o("seconds")],m:[r,o("minutes")],mm:[r,o("minutes")],H:[r,o("hours")],h:[r,o("hours")],HH:[r,o("hours")],hh:[r,o("hours")],D:[r,o("day")],DD:[n,o("day")],Do:[i,function(t){var e=a.ordinal,n=t.match(/\d+/);if(this.day=n[0],e)for(var r=1;r<=31;r+=1)e(r).replace(/\[|\]/g,"")===t&&(this.day=r)}],M:[r,o("month")],MM:[n,o("month")],MMM:[i,function(t){var e=l("months"),n=(l("monthsShort")||e.map((function(t){return t.slice(0,3)}))).indexOf(t)+1;if(n<1)throw new Error;this.month=n%12||n}],MMMM:[i,function(t){var e=l("months").indexOf(t)+1;if(e<1)throw new Error;this.month=e%12||e}],Y:[/[+-]?\d+/,o("year")],YY:[n,function(t){this.year=s(t)}],YYYY:[/\d{4}/,o("year")],Z:c,ZZ:c};function d(n){var r,i;r=n,i=a&&a.formats;for(var s=(n=r.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(function(e,n,r){var a=r&&r.toUpperCase();return n||i[r]||t[r]||i[a].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(function(t,e,n){return e||n.slice(1)}))}))).match(e),o=s.length,c=0;c<o;c+=1){var l=s[c],h=u[l],d=h&&h[0],p=h&&h[1];s[c]=p?{regex:d,parser:p}:l.replace(/^\[|\]$/g,"")}return function(t){for(var e={},n=0,r=0;n<o;n+=1){var i=s[n];if("string"==typeof i)r+=i.length;else{var a=i.regex,c=i.parser,l=t.slice(r),h=a.exec(l)[0];c.call(e,h),t=t.replace(h,"")}}return function(t){var e=t.afternoon;if(void 0!==e){var n=t.hours;e?n<12&&(t.hours+=12):12===n&&(t.hours=0),delete t.afternoon}}(e),e}}return function(t,e,n){n.p.customParseFormat=!0,t&&t.parseTwoDigitYear&&(s=t.parseTwoDigitYear);var r=e.prototype,i=r.parse;r.parse=function(t){var e=t.date,r=t.utc,s=t.args;this.$u=r;var o=s[1];if("string"==typeof o){var c=!0===s[2],l=!0===s[3],h=c||l,u=s[2];l&&(u=s[2]),a=this.$locale(),!c&&u&&(a=n.Ls[u]),this.$d=function(t,e,n){try{if(["x","X"].indexOf(e)>-1)return new Date(("X"===e?1e3:1)*t);var r=d(e)(t),i=r.year,a=r.month,s=r.day,o=r.hours,c=r.minutes,l=r.seconds,h=r.milliseconds,u=r.zone,p=new Date,f=s||(i||a?1:p.getDate()),g=i||p.getFullYear(),y=0;i&&!a||(y=a>0?a-1:p.getMonth());var m=o||0,b=c||0,_=l||0,x=h||0;return u?new Date(Date.UTC(g,y,f,m,b,_,x+60*u.offset*1e3)):n?new Date(Date.UTC(g,y,f,m,b,_,x)):new Date(g,y,f,m,b,_,x)}catch(t){return new Date("")}}(e,o,r),this.init(),u&&!0!==u&&(this.$L=this.locale(u).$L),h&&e!=this.format(o)&&(this.$d=new Date("")),a={}}else if(o instanceof Array)for(var p=o.length,f=1;f<=p;f+=1){s[1]=o[f-1];var g=n.apply(this,s);if(g.isValid()){this.$d=g.$d,this.$L=g.$L,this.init();break}f===p&&(this.$d=new Date(""))}else i.call(this,t)}}}()},9542:function(t){t.exports=function(){"use strict";var t="day";return function(e,n,r){var i=function(e){return e.add(4-e.isoWeekday(),t)},a=n.prototype;a.isoWeekYear=function(){return i(this).year()},a.isoWeek=function(e){if(!this.$utils().u(e))return this.add(7*(e-this.isoWeek()),t);var n,a,s,o=i(this),c=(n=this.isoWeekYear(),s=4-(a=(this.$u?r.utc:r)().year(n).startOf("year")).isoWeekday(),a.isoWeekday()>4&&(s+=7),a.add(s,t));return o.diff(c,"week")+1},a.isoWeekday=function(t){return this.$utils().u(t)?this.day()||7:this.day(this.day()%7?t:t-7)};var s=a.startOf;a.startOf=function(t,e){var n=this.$utils(),r=!!n.u(e)||e;return"isoweek"===n.p(t)?r?this.date(this.date()-(this.isoWeekday()-1)).startOf("day"):this.date(this.date()-1-(this.isoWeekday()-1)+7).endOf("day"):s.bind(this)(t,e)}}}()},7856:function(t){t.exports=function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,n){return e=Object.setPrototypeOf||function(t,e){return t.__proto__=e,t},e(t,n)}function n(){if("undefined"==typeof Reflect||!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}function r(t,i,a){return r=n()?Reflect.construct:function(t,n,r){var i=[null];i.push.apply(i,n);var a=new(Function.bind.apply(t,i));return r&&e(a,r.prototype),a},r.apply(null,arguments)}function i(t){return a(t)||s(t)||o(t)||l()}function a(t){if(Array.isArray(t))return c(t)}function s(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]||null!=t["@@iterator"])return Array.from(t)}function o(t,e){if(t){if("string"==typeof t)return c(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n||"Set"===n?Array.from(t):"Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?c(t,e):void 0}}function c(t,e){(null==e||e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function l(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var h=Object.hasOwnProperty,u=Object.setPrototypeOf,d=Object.isFrozen,p=Object.getPrototypeOf,f=Object.getOwnPropertyDescriptor,g=Object.freeze,y=Object.seal,m=Object.create,b="undefined"!=typeof Reflect&&Reflect,_=b.apply,x=b.construct;_||(_=function(t,e,n){return t.apply(e,n)}),g||(g=function(t){return t}),y||(y=function(t){return t}),x||(x=function(t,e){return r(t,i(e))});var v=D(Array.prototype.forEach),k=D(Array.prototype.pop),w=D(Array.prototype.push),E=D(String.prototype.toLowerCase),C=D(String.prototype.toString),T=D(String.prototype.match),S=D(String.prototype.replace),A=D(String.prototype.indexOf),L=D(String.prototype.trim),B=D(RegExp.prototype.test),N=O(TypeError);function D(t){return function(e){for(var n=arguments.length,r=new Array(n>1?n-1:0),i=1;i<n;i++)r[i-1]=arguments[i];return _(t,e,r)}}function O(t){return function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];return x(t,n)}}function M(t,e,n){n=n||E,u&&u(t,null);for(var r=e.length;r--;){var i=e[r];if("string"==typeof i){var a=n(i);a!==i&&(d(e)||(e[r]=a),i=a)}t[i]=!0}return t}function I(t){var e,n=m(null);for(e in t)!0===_(h,t,[e])&&(n[e]=t[e]);return n}function F(t,e){for(;null!==t;){var n=f(t,e);if(n){if(n.get)return D(n.get);if("function"==typeof n.value)return D(n.value)}t=p(t)}function r(t){return console.warn("fallback value for",t),null}return r}var $=g(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","section","select","shadow","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),R=g(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Z=g(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),P=g(["animate","color-profile","cursor","discard","fedropshadow","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),j=g(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover"]),Y=g(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),z=g(["#text"]),U=g(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","face","for","headers","height","hidden","high","href","hreflang","id","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","xmlns","slot"]),W=g(["accent-height","accumulate","additive","alignment-baseline","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),q=g(["accent","accentunder","align","bevelled","close","columnsalign","columnlines","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lspace","lquote","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),H=g(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),V=y(/\{\{[\w\W]*|[\w\W]*\}\}/gm),G=y(/<%[\w\W]*|[\w\W]*%>/gm),X=y(/\${[\w\W]*}/gm),K=y(/^data-[\-\w.\u00B7-\uFFFF]/),Q=y(/^aria-[\-\w]+$/),J=y(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),tt=y(/^(?:\w+script|data):/i),et=y(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),nt=y(/^html$/i),rt=function(){return"undefined"==typeof window?null:window},it=function(e,n){if("object"!==t(e)||"function"!=typeof e.createPolicy)return null;var r=null,i="data-tt-policy-suffix";n.currentScript&&n.currentScript.hasAttribute(i)&&(r=n.currentScript.getAttribute(i));var a="dompurify"+(r?"#"+r:"");try{return e.createPolicy(a,{createHTML:function(t){return t},createScriptURL:function(t){return t}})}catch(s){return console.warn("TrustedTypes policy "+a+" could not be created."),null}};function at(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:rt(),n=function(t){return at(t)};if(n.version="2.4.3",n.removed=[],!e||!e.document||9!==e.document.nodeType)return n.isSupported=!1,n;var r=e.document,a=e.document,s=e.DocumentFragment,o=e.HTMLTemplateElement,c=e.Node,l=e.Element,h=e.NodeFilter,u=e.NamedNodeMap,d=void 0===u?e.NamedNodeMap||e.MozNamedAttrMap:u,p=e.HTMLFormElement,f=e.DOMParser,y=e.trustedTypes,m=l.prototype,b=F(m,"cloneNode"),_=F(m,"nextSibling"),x=F(m,"childNodes"),D=F(m,"parentNode");if("function"==typeof o){var O=a.createElement("template");O.content&&O.content.ownerDocument&&(a=O.content.ownerDocument)}var st=it(y,r),ot=st?st.createHTML(""):"",ct=a,lt=ct.implementation,ht=ct.createNodeIterator,ut=ct.createDocumentFragment,dt=ct.getElementsByTagName,pt=r.importNode,ft={};try{ft=I(a).documentMode?a.documentMode:{}}catch(De){}var gt={};n.isSupported="function"==typeof D&&lt&&void 0!==lt.createHTMLDocument&&9!==ft;var yt,mt,bt=V,_t=G,xt=X,vt=K,kt=Q,wt=tt,Et=et,Ct=J,Tt=null,St=M({},[].concat(i($),i(R),i(Z),i(j),i(z))),At=null,Lt=M({},[].concat(i(U),i(W),i(q),i(H))),Bt=Object.seal(Object.create(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),Nt=null,Dt=null,Ot=!0,Mt=!0,It=!1,Ft=!1,$t=!1,Rt=!1,Zt=!1,Pt=!1,jt=!1,Yt=!1,zt=!0,Ut=!1,Wt="user-content-",qt=!0,Ht=!1,Vt={},Gt=null,Xt=M({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","style","svg","template","thead","title","video","xmp"]),Kt=null,Qt=M({},["audio","video","img","source","image","track"]),Jt=null,te=M({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),ee="http://www.w3.org/1998/Math/MathML",ne="http://www.w3.org/2000/svg",re="http://www.w3.org/1999/xhtml",ie=re,ae=!1,se=null,oe=M({},[ee,ne,re],C),ce=["application/xhtml+xml","text/html"],le="text/html",he=null,ue=a.createElement("form"),de=function(t){return t instanceof RegExp||t instanceof Function},pe=function(e){he&&he===e||(e&&"object"===t(e)||(e={}),e=I(e),yt=yt=-1===ce.indexOf(e.PARSER_MEDIA_TYPE)?le:e.PARSER_MEDIA_TYPE,mt="application/xhtml+xml"===yt?C:E,Tt="ALLOWED_TAGS"in e?M({},e.ALLOWED_TAGS,mt):St,At="ALLOWED_ATTR"in e?M({},e.ALLOWED_ATTR,mt):Lt,se="ALLOWED_NAMESPACES"in e?M({},e.ALLOWED_NAMESPACES,C):oe,Jt="ADD_URI_SAFE_ATTR"in e?M(I(te),e.ADD_URI_SAFE_ATTR,mt):te,Kt="ADD_DATA_URI_TAGS"in e?M(I(Qt),e.ADD_DATA_URI_TAGS,mt):Qt,Gt="FORBID_CONTENTS"in e?M({},e.FORBID_CONTENTS,mt):Xt,Nt="FORBID_TAGS"in e?M({},e.FORBID_TAGS,mt):{},Dt="FORBID_ATTR"in e?M({},e.FORBID_ATTR,mt):{},Vt="USE_PROFILES"in e&&e.USE_PROFILES,Ot=!1!==e.ALLOW_ARIA_ATTR,Mt=!1!==e.ALLOW_DATA_ATTR,It=e.ALLOW_UNKNOWN_PROTOCOLS||!1,Ft=e.SAFE_FOR_TEMPLATES||!1,$t=e.WHOLE_DOCUMENT||!1,Pt=e.RETURN_DOM||!1,jt=e.RETURN_DOM_FRAGMENT||!1,Yt=e.RETURN_TRUSTED_TYPE||!1,Zt=e.FORCE_BODY||!1,zt=!1!==e.SANITIZE_DOM,Ut=e.SANITIZE_NAMED_PROPS||!1,qt=!1!==e.KEEP_CONTENT,Ht=e.IN_PLACE||!1,Ct=e.ALLOWED_URI_REGEXP||Ct,ie=e.NAMESPACE||re,e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck)&&(Bt.tagNameCheck=e.CUSTOM_ELEMENT_HANDLING.tagNameCheck),e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)&&(Bt.attributeNameCheck=e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck),e.CUSTOM_ELEMENT_HANDLING&&"boolean"==typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements&&(Bt.allowCustomizedBuiltInElements=e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements),Ft&&(Mt=!1),jt&&(Pt=!0),Vt&&(Tt=M({},i(z)),At=[],!0===Vt.html&&(M(Tt,$),M(At,U)),!0===Vt.svg&&(M(Tt,R),M(At,W),M(At,H)),!0===Vt.svgFilters&&(M(Tt,Z),M(At,W),M(At,H)),!0===Vt.mathMl&&(M(Tt,j),M(At,q),M(At,H))),e.ADD_TAGS&&(Tt===St&&(Tt=I(Tt)),M(Tt,e.ADD_TAGS,mt)),e.ADD_ATTR&&(At===Lt&&(At=I(At)),M(At,e.ADD_ATTR,mt)),e.ADD_URI_SAFE_ATTR&&M(Jt,e.ADD_URI_SAFE_ATTR,mt),e.FORBID_CONTENTS&&(Gt===Xt&&(Gt=I(Gt)),M(Gt,e.FORBID_CONTENTS,mt)),qt&&(Tt["#text"]=!0),$t&&M(Tt,["html","head","body"]),Tt.table&&(M(Tt,["tbody"]),delete Nt.tbody),g&&g(e),he=e)},fe=M({},["mi","mo","mn","ms","mtext"]),ge=M({},["foreignobject","desc","title","annotation-xml"]),ye=M({},["title","style","font","a","script"]),me=M({},R);M(me,Z),M(me,P);var be=M({},j);M(be,Y);var _e=function(t){var e=D(t);e&&e.tagName||(e={namespaceURI:ie,tagName:"template"});var n=E(t.tagName),r=E(e.tagName);return!!se[t.namespaceURI]&&(t.namespaceURI===ne?e.namespaceURI===re?"svg"===n:e.namespaceURI===ee?"svg"===n&&("annotation-xml"===r||fe[r]):Boolean(me[n]):t.namespaceURI===ee?e.namespaceURI===re?"math"===n:e.namespaceURI===ne?"math"===n&&ge[r]:Boolean(be[n]):t.namespaceURI===re?!(e.namespaceURI===ne&&!ge[r])&&!(e.namespaceURI===ee&&!fe[r])&&!be[n]&&(ye[n]||!me[n]):!("application/xhtml+xml"!==yt||!se[t.namespaceURI]))},xe=function(t){w(n.removed,{element:t});try{t.parentNode.removeChild(t)}catch(De){try{t.outerHTML=ot}catch(De){t.remove()}}},ve=function(t,e){try{w(n.removed,{attribute:e.getAttributeNode(t),from:e})}catch(De){w(n.removed,{attribute:null,from:e})}if(e.removeAttribute(t),"is"===t&&!At[t])if(Pt||jt)try{xe(e)}catch(De){}else try{e.setAttribute(t,"")}catch(De){}},ke=function(t){var e,n;if(Zt)t="<remove></remove>"+t;else{var r=T(t,/^[\r\n\t ]+/);n=r&&r[0]}"application/xhtml+xml"===yt&&ie===re&&(t='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+t+"</body></html>");var i=st?st.createHTML(t):t;if(ie===re)try{e=(new f).parseFromString(i,yt)}catch(De){}if(!e||!e.documentElement){e=lt.createDocument(ie,"template",null);try{e.documentElement.innerHTML=ae?ot:i}catch(De){}}var s=e.body||e.documentElement;return t&&n&&s.insertBefore(a.createTextNode(n),s.childNodes[0]||null),ie===re?dt.call(e,$t?"html":"body")[0]:$t?e.documentElement:s},we=function(t){return ht.call(t.ownerDocument||t,t,h.SHOW_ELEMENT|h.SHOW_COMMENT|h.SHOW_TEXT,null,!1)},Ee=function(t){return t instanceof p&&("string"!=typeof t.nodeName||"string"!=typeof t.textContent||"function"!=typeof t.removeChild||!(t.attributes instanceof d)||"function"!=typeof t.removeAttribute||"function"!=typeof t.setAttribute||"string"!=typeof t.namespaceURI||"function"!=typeof t.insertBefore||"function"!=typeof t.hasChildNodes)},Ce=function(e){return"object"===t(c)?e instanceof c:e&&"object"===t(e)&&"number"==typeof e.nodeType&&"string"==typeof e.nodeName},Te=function(t,e,r){gt[t]&&v(gt[t],(function(t){t.call(n,e,r,he)}))},Se=function(t){var e;if(Te("beforeSanitizeElements",t,null),Ee(t))return xe(t),!0;if(B(/[\u0080-\uFFFF]/,t.nodeName))return xe(t),!0;var r=mt(t.nodeName);if(Te("uponSanitizeElement",t,{tagName:r,allowedTags:Tt}),t.hasChildNodes()&&!Ce(t.firstElementChild)&&(!Ce(t.content)||!Ce(t.content.firstElementChild))&&B(/<[/\w]/g,t.innerHTML)&&B(/<[/\w]/g,t.textContent))return xe(t),!0;if("select"===r&&B(/<template/i,t.innerHTML))return xe(t),!0;if(!Tt[r]||Nt[r]){if(!Nt[r]&&Le(r)){if(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,r))return!1;if(Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(r))return!1}if(qt&&!Gt[r]){var i=D(t)||t.parentNode,a=x(t)||t.childNodes;if(a&&i)for(var s=a.length-1;s>=0;--s)i.insertBefore(b(a[s],!0),_(t))}return xe(t),!0}return t instanceof l&&!_e(t)?(xe(t),!0):"noscript"!==r&&"noembed"!==r||!B(/<\/no(script|embed)/i,t.innerHTML)?(Ft&&3===t.nodeType&&(e=t.textContent,e=S(e,bt," "),e=S(e,_t," "),e=S(e,xt," "),t.textContent!==e&&(w(n.removed,{element:t.cloneNode()}),t.textContent=e)),Te("afterSanitizeElements",t,null),!1):(xe(t),!0)},Ae=function(t,e,n){if(zt&&("id"===e||"name"===e)&&(n in a||n in ue))return!1;if(Mt&&!Dt[e]&&B(vt,e));else if(Ot&&B(kt,e));else if(!At[e]||Dt[e]){if(!(Le(t)&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,t)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(t))&&(Bt.attributeNameCheck instanceof RegExp&&B(Bt.attributeNameCheck,e)||Bt.attributeNameCheck instanceof Function&&Bt.attributeNameCheck(e))||"is"===e&&Bt.allowCustomizedBuiltInElements&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,n)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(n))))return!1}else if(Jt[e]);else if(B(Ct,S(n,Et,"")));else if("src"!==e&&"xlink:href"!==e&&"href"!==e||"script"===t||0!==A(n,"data:")||!Kt[t])if(It&&!B(wt,S(n,Et,"")));else if(n)return!1;return!0},Le=function(t){return t.indexOf("-")>0},Be=function(e){var r,i,a,s;Te("beforeSanitizeAttributes",e,null);var o=e.attributes;if(o){var c={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:At};for(s=o.length;s--;){var l=r=o[s],h=l.name,u=l.namespaceURI;if(i="value"===h?r.value:L(r.value),a=mt(h),c.attrName=a,c.attrValue=i,c.keepAttr=!0,c.forceKeepAttr=void 0,Te("uponSanitizeAttribute",e,c),i=c.attrValue,!c.forceKeepAttr&&(ve(h,e),c.keepAttr))if(B(/\/>/i,i))ve(h,e);else{Ft&&(i=S(i,bt," "),i=S(i,_t," "),i=S(i,xt," "));var d=mt(e.nodeName);if(Ae(d,a,i)){if(!Ut||"id"!==a&&"name"!==a||(ve(h,e),i=Wt+i),st&&"object"===t(y)&&"function"==typeof y.getAttributeType)if(u);else switch(y.getAttributeType(d,a)){case"TrustedHTML":i=st.createHTML(i);break;case"TrustedScriptURL":i=st.createScriptURL(i)}try{u?e.setAttributeNS(u,h,i):e.setAttribute(h,i),k(n.removed)}catch(De){}}}}Te("afterSanitizeAttributes",e,null)}},Ne=function t(e){var n,r=we(e);for(Te("beforeSanitizeShadowDOM",e,null);n=r.nextNode();)Te("uponSanitizeShadowNode",n,null),Se(n)||(n.content instanceof s&&t(n.content),Be(n));Te("afterSanitizeShadowDOM",e,null)};return n.sanitize=function(i){var a,o,l,h,u,d=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};if((ae=!i)&&(i="\x3c!--\x3e"),"string"!=typeof i&&!Ce(i)){if("function"!=typeof i.toString)throw N("toString is not a function");if("string"!=typeof(i=i.toString()))throw N("dirty is not a string, aborting")}if(!n.isSupported){if("object"===t(e.toStaticHTML)||"function"==typeof e.toStaticHTML){if("string"==typeof i)return e.toStaticHTML(i);if(Ce(i))return e.toStaticHTML(i.outerHTML)}return i}if(Rt||pe(d),n.removed=[],"string"==typeof i&&(Ht=!1),Ht){if(i.nodeName){var p=mt(i.nodeName);if(!Tt[p]||Nt[p])throw N("root node is forbidden and cannot be sanitized in-place")}}else if(i instanceof c)1===(o=(a=ke("\x3c!----\x3e")).ownerDocument.importNode(i,!0)).nodeType&&"BODY"===o.nodeName||"HTML"===o.nodeName?a=o:a.appendChild(o);else{if(!Pt&&!Ft&&!$t&&-1===i.indexOf("<"))return st&&Yt?st.createHTML(i):i;if(!(a=ke(i)))return Pt?null:Yt?ot:""}a&&Zt&&xe(a.firstChild);for(var f=we(Ht?i:a);l=f.nextNode();)3===l.nodeType&&l===h||Se(l)||(l.content instanceof s&&Ne(l.content),Be(l),h=l);if(h=null,Ht)return i;if(Pt){if(jt)for(u=ut.call(a.ownerDocument);a.firstChild;)u.appendChild(a.firstChild);else u=a;return At.shadowroot&&(u=pt.call(r,u,!0)),u}var g=$t?a.outerHTML:a.innerHTML;return $t&&Tt["!doctype"]&&a.ownerDocument&&a.ownerDocument.doctype&&a.ownerDocument.doctype.name&&B(nt,a.ownerDocument.doctype.name)&&(g="<!DOCTYPE "+a.ownerDocument.doctype.name+">\n"+g),Ft&&(g=S(g,bt," "),g=S(g,_t," "),g=S(g,xt," ")),st&&Yt?st.createHTML(g):g},n.setConfig=function(t){pe(t),Rt=!0},n.clearConfig=function(){he=null,Rt=!1},n.isValidAttribute=function(t,e,n){he||pe({});var r=mt(t),i=mt(e);return Ae(r,i,n)},n.addHook=function(t,e){"function"==typeof e&&(gt[t]=gt[t]||[],w(gt[t],e))},n.removeHook=function(t){if(gt[t])return k(gt[t])},n.removeHooks=function(t){gt[t]&&(gt[t]=[])},n.removeAllHooks=function(){gt={}},n}return at()}()},6432:(t,e,n)=>{"use strict";n.d(e,{a:()=>Mn,b:()=>Fs,c:()=>Yt,d:()=>Dn,e:()=>Pt,f:()=>Ys,g:()=>ar,h:()=>mc,i:()=>hs,j:()=>Pr,k:()=>Yr,l:()=>Nt,m:()=>Dr,n:()=>Ft,o:()=>dp,p:()=>bo,s:()=>pr});const r=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];var r=Array.from("string"==typeof t?[t]:t);r[r.length-1]=r[r.length-1].replace(/\r?\n([\t ]*)$/,"");var i=r.reduce((function(t,e){var n=e.match(/\n([\t ]+|(?!\s).)/g);return n?t.concat(n.map((function(t){var e,n;return null!==(n=null===(e=t.match(/[\t ]/g))||void 0===e?void 0:e.length)&&void 0!==n?n:0}))):t}),[]);if(i.length){var a=new RegExp("\n[\t ]{"+Math.min.apply(Math,i)+"}","g");r=r.map((function(t){return t.replace(a,"\n")}))}r[0]=r[0].replace(/^\r?\n/,"");var s=r[0];return e.forEach((function(t,e){var n=s.match(/(?:^|\n)( *)$/),i=n?n[1]:"",a=t;"string"==typeof t&&t.includes("\n")&&(a=String(t).split("\n").map((function(t,e){return 0===e?t:""+i+t})).join("\n")),s+=a+r[e+1]})),s};var i=n(7484),a=n.n(i),s=n(7967),o=n(9373),l=n(7856),h=n.n(l),u=n(1610),d=n(1691);const p=(t,e)=>{const n=u.Z.parse(t);for(const r in e)n[r]=d.Z.channel.clamp[r](e[r]);return u.Z.stringify(n)},f=(t,e)=>{const n=u.Z.parse(t),r={};for(const i in e)e[i]&&(r[i]=n[i]+e[i]);return p(t,r)};var g=n(1883);const y=(t,e,n=0,r=1)=>{if("number"!=typeof t)return p(t,{a:e});const i=g.Z.set({r:d.Z.channel.clamp.r(t),g:d.Z.channel.clamp.g(e),b:d.Z.channel.clamp.b(n),a:d.Z.channel.clamp.a(r)});return u.Z.stringify(i)},m=(t,e,n=50)=>{const{r:r,g:i,b:a,a:s}=u.Z.parse(t),{r:o,g:c,b:l,a:h}=u.Z.parse(e),d=n/100,p=2*d-1,f=s-h,g=((p*f==-1?p:(p+f)/(1+p*f))+1)/2,m=1-g;return y(r*g+o*m,i*g+c*m,a*g+l*m,s*d+h*(1-d))},b=(t,e=100)=>{const n=u.Z.parse(t);return n.r=255-n.r,n.g=255-n.g,n.b=255-n.b,m(n,t,e)};var _=n(7201),x=n(5920),v=n(2454),k="comm",w="rule",E="decl",C=Math.abs,T=String.fromCharCode;Object.assign;function S(t){return t.trim()}function A(t,e,n){return t.replace(e,n)}function L(t,e){return t.indexOf(e)}function B(t,e){return 0|t.charCodeAt(e)}function N(t,e,n){return t.slice(e,n)}function D(t){return t.length}function O(t){return t.length}function M(t,e){return e.push(t),t}function I(t,e){for(var n="",r=O(t),i=0;i<r;i++)n+=e(t[i],i,t,e)||"";return n}function F(t,e,n,r){switch(t.type){case"@import":case E:return t.return=t.return||t.value;case k:return"";case"@keyframes":return t.return=t.value+"{"+I(t.children,r)+"}";case w:t.value=t.props.join(",")}return D(n=I(t.children,r))?t.return=t.value+"{"+n+"}":""}var $=1,R=1,Z=0,P=0,j=0,Y="";function z(t,e,n,r,i,a,s){return{value:t,root:e,parent:n,type:r,props:i,children:a,line:$,column:R,length:s,return:""}}function U(){return j=P>0?B(Y,--P):0,R--,10===j&&(R=1,$--),j}function W(){return j=P<Z?B(Y,P++):0,R++,10===j&&(R=1,$++),j}function q(){return B(Y,P)}function H(){return P}function V(t,e){return N(Y,t,e)}function G(t){switch(t){case 0:case 9:case 10:case 13:case 32:return 5;case 33:case 43:case 44:case 47:case 62:case 64:case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function X(t){return $=R=1,Z=D(Y=t),P=0,[]}function K(t){return Y="",t}function Q(t){return S(V(P-1,et(91===t?t+2:40===t?t+1:t)))}function J(t){for(;(j=q())&&j<33;)W();return G(t)>2||G(j)>3?"":" "}function tt(t,e){for(;--e&&W()&&!(j<48||j>102||j>57&&j<65||j>70&&j<97););return V(t,H()+(e<6&&32==q()&&32==W()))}function et(t){for(;W();)switch(j){case t:return P;case 34:case 39:34!==t&&39!==t&&et(j);break;case 40:41===t&&et(t);break;case 92:W()}return P}function nt(t,e){for(;W()&&t+j!==57&&(t+j!==84||47!==q()););return"/*"+V(e,P-1)+"*"+T(47===t?t:W())}function rt(t){for(;!G(q());)W();return V(t,P)}function it(t){return K(at("",null,null,null,[""],t=X(t),0,[0],t))}function at(t,e,n,r,i,a,s,o,c){for(var l=0,h=0,u=s,d=0,p=0,f=0,g=1,y=1,m=1,b=0,_="",x=i,v=a,k=r,w=_;y;)switch(f=b,b=W()){case 40:if(108!=f&&58==B(w,u-1)){-1!=L(w+=A(Q(b),"&","&\f"),"&\f")&&(m=-1);break}case 34:case 39:case 91:w+=Q(b);break;case 9:case 10:case 13:case 32:w+=J(f);break;case 92:w+=tt(H()-1,7);continue;case 47:switch(q()){case 42:case 47:M(ot(nt(W(),H()),e,n),c);break;default:w+="/"}break;case 123*g:o[l++]=D(w)*m;case 125*g:case 59:case 0:switch(b){case 0:case 125:y=0;case 59+h:p>0&&D(w)-u&&M(p>32?ct(w+";",r,n,u-1):ct(A(w," ","")+";",r,n,u-2),c);break;case 59:w+=";";default:if(M(k=st(w,e,n,l,h,i,o,_,x=[],v=[],u),a),123===b)if(0===h)at(w,e,k,k,x,a,u,o,v);else switch(99===d&&110===B(w,3)?100:d){case 100:case 109:case 115:at(t,k,k,r&&M(st(t,k,k,0,0,i,o,_,i,x=[],u),v),i,v,u,o,r?x:v);break;default:at(w,k,k,k,[""],v,0,o,v)}}l=h=p=0,g=m=1,_=w="",u=s;break;case 58:u=1+D(w),p=f;default:if(g<1)if(123==b)--g;else if(125==b&&0==g++&&125==U())continue;switch(w+=T(b),b*g){case 38:m=h>0?1:(w+="\f",-1);break;case 44:o[l++]=(D(w)-1)*m,m=1;break;case 64:45===q()&&(w+=Q(W())),d=q(),h=u=D(_=w+=rt(H())),b++;break;case 45:45===f&&2==D(w)&&(g=0)}}return a}function st(t,e,n,r,i,a,s,o,c,l,h){for(var u=i-1,d=0===i?a:[""],p=O(d),f=0,g=0,y=0;f<r;++f)for(var m=0,b=N(t,u+1,u=C(g=s[f])),_=t;m<p;++m)(_=S(g>0?d[m]+" "+b:A(b,/&\f/g,d[m])))&&(c[y++]=_);return z(t,e,n,0===i?w:o,c,l,h)}function ot(t,e,n){return z(t,e,n,k,T(j),N(t,2,-2),0)}function ct(t,e,n,r){return z(t,e,n,E,N(t,0,r),N(t,r+1,-1),r)}var lt=n(277),ht=n(5625),ut=n(9354);const dt=[];for(let c=0;c<256;++c)dt.push((c+256).toString(16).slice(1));function pt(t,e=0){return(dt[t[e+0]]+dt[t[e+1]]+dt[t[e+2]]+dt[t[e+3]]+"-"+dt[t[e+4]]+dt[t[e+5]]+"-"+dt[t[e+6]]+dt[t[e+7]]+"-"+dt[t[e+8]]+dt[t[e+9]]+"-"+dt[t[e+10]]+dt[t[e+11]]+dt[t[e+12]]+dt[t[e+13]]+dt[t[e+14]]+dt[t[e+15]]).toLowerCase()}const ft=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000)$/i;const gt=function(t){return"string"==typeof t&&ft.test(t)};const yt=function(t){if(!gt(t))throw TypeError("Invalid UUID");let e;const n=new Uint8Array(16);return n[0]=(e=parseInt(t.slice(0,8),16))>>>24,n[1]=e>>>16&255,n[2]=e>>>8&255,n[3]=255&e,n[4]=(e=parseInt(t.slice(9,13),16))>>>8,n[5]=255&e,n[6]=(e=parseInt(t.slice(14,18),16))>>>8,n[7]=255&e,n[8]=(e=parseInt(t.slice(19,23),16))>>>8,n[9]=255&e,n[10]=(e=parseInt(t.slice(24,36),16))/1099511627776&255,n[11]=e/4294967296&255,n[12]=e>>>24&255,n[13]=e>>>16&255,n[14]=e>>>8&255,n[15]=255&e,n};function mt(t,e,n,r){switch(t){case 0:return e&n^~e&r;case 1:case 3:return e^n^r;case 2:return e&n^e&r^n&r}}function bt(t,e){return t<<e|t>>>32-e}const _t=function(t){const e=[1518500249,1859775393,2400959708,3395469782],n=[1732584193,4023233417,2562383102,271733878,3285377520];if("string"==typeof t){const e=unescape(encodeURIComponent(t));t=[];for(let n=0;n<e.length;++n)t.push(e.charCodeAt(n))}else Array.isArray(t)||(t=Array.prototype.slice.call(t));t.push(128);const r=t.length/4+2,i=Math.ceil(r/16),a=new Array(i);for(let s=0;s<i;++s){const e=new Uint32Array(16);for(let n=0;n<16;++n)e[n]=t[64*s+4*n]<<24|t[64*s+4*n+1]<<16|t[64*s+4*n+2]<<8|t[64*s+4*n+3];a[s]=e}a[i-1][14]=8*(t.length-1)/Math.pow(2,32),a[i-1][14]=Math.floor(a[i-1][14]),a[i-1][15]=8*(t.length-1)&4294967295;for(let s=0;s<i;++s){const t=new Uint32Array(80);for(let e=0;e<16;++e)t[e]=a[s][e];for(let e=16;e<80;++e)t[e]=bt(t[e-3]^t[e-8]^t[e-14]^t[e-16],1);let r=n[0],i=n[1],o=n[2],c=n[3],l=n[4];for(let n=0;n<80;++n){const a=Math.floor(n/20),s=bt(r,5)+mt(a,i,o,c)+l+e[a]+t[n]>>>0;l=c,c=o,o=bt(i,30)>>>0,i=r,r=s}n[0]=n[0]+r>>>0,n[1]=n[1]+i>>>0,n[2]=n[2]+o>>>0,n[3]=n[3]+c>>>0,n[4]=n[4]+l>>>0}return[n[0]>>24&255,n[0]>>16&255,n[0]>>8&255,255&n[0],n[1]>>24&255,n[1]>>16&255,n[1]>>8&255,255&n[1],n[2]>>24&255,n[2]>>16&255,n[2]>>8&255,255&n[2],n[3]>>24&255,n[3]>>16&255,n[3]>>8&255,255&n[3],n[4]>>24&255,n[4]>>16&255,n[4]>>8&255,255&n[4]]},xt=function(t,e,n){function r(t,r,i,a){var s;if("string"==typeof t&&(t=function(t){t=unescape(encodeURIComponent(t));const e=[];for(let n=0;n<t.length;++n)e.push(t.charCodeAt(n));return e}(t)),"string"==typeof r&&(r=yt(r)),16!==(null===(s=r)||void 0===s?void 0:s.length))throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");let o=new Uint8Array(16+t.length);if(o.set(r),o.set(t,r.length),o=n(o),o[6]=15&o[6]|e,o[8]=63&o[8]|128,i){a=a||0;for(let t=0;t<16;++t)i[a+t]=o[t];return i}return pt(o)}try{r.name=t}catch(i){}return r.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",r.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8",r}("v5",80,_t),vt=xt;n(1518),n(6225);var kt=n(3349),wt=(n(3352),n(2930),n(9542)),Et=n.n(wt),Ct=n(285),Tt=n.n(Ct),St=n(8734),At=n.n(St),Lt=n(9697);const Bt={trace:0,debug:1,info:2,warn:3,error:4,fatal:5},Nt={trace:(...t)=>{},debug:(...t)=>{},info:(...t)=>{},warn:(...t)=>{},error:(...t)=>{},fatal:(...t)=>{}},Dt=function(t="fatal"){let e=Bt.fatal;"string"==typeof t?(t=t.toLowerCase())in Bt&&(e=Bt[t]):"number"==typeof t&&(e=t),Nt.trace=()=>{},Nt.debug=()=>{},Nt.info=()=>{},Nt.warn=()=>{},Nt.error=()=>{},Nt.fatal=()=>{},e<=Bt.fatal&&(Nt.fatal=console.error?console.error.bind(console,Ot("FATAL"),"color: orange"):console.log.bind(console,"\x1b[35m",Ot("FATAL"))),e<=Bt.error&&(Nt.error=console.error?console.error.bind(console,Ot("ERROR"),"color: orange"):console.log.bind(console,"\x1b[31m",Ot("ERROR"))),e<=Bt.warn&&(Nt.warn=console.warn?console.warn.bind(console,Ot("WARN"),"color: orange"):console.log.bind(console,"\x1b[33m",Ot("WARN"))),e<=Bt.info&&(Nt.info=console.info?console.info.bind(console,Ot("INFO"),"color: lightblue"):console.log.bind(console,"\x1b[34m",Ot("INFO"))),e<=Bt.debug&&(Nt.debug=console.debug?console.debug.bind(console,Ot("DEBUG"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("DEBUG"))),e<=Bt.trace&&(Nt.trace=console.debug?console.debug.bind(console,Ot("TRACE"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("TRACE")))},Ot=t=>`%c${a()().format("ss.SSS")} : ${t} : `,Mt=t=>h().sanitize(t),It=(t,e)=>{var n;if(!1!==(null==(n=e.flowchart)?void 0:n.htmlLabels)){const n=e.securityLevel;"antiscript"===n||"strict"===n?t=Mt(t):"loose"!==n&&(t=(t=(t=Zt(t)).replace(/</g,"&lt;").replace(/>/g,"&gt;")).replace(/=/g,"&equals;"),t=Rt(t))}return t},Ft=(t,e)=>t?t=e.dompurifyConfig?h().sanitize(It(t,e),e.dompurifyConfig).toString():h().sanitize(It(t,e),{FORBID_TAGS:["style"]}).toString():t,$t=/<br\s*\/?>/gi,Rt=t=>t.replace(/#br#/g,"<br/>"),Zt=t=>t.replace($t,"#br#"),Pt=t=>!1!==t&&!["false","null","0"].includes(String(t).trim().toLowerCase()),jt=function(t){let e=t;if(t.split("~").length-1>=2){let t=e;do{e=t,t=e.replace(/~([^\s,:;]+)~/,"<$1>")}while(t!=e);return jt(t)}return e},Yt={getRows:t=>{if(!t)return[""];return Zt(t).replace(/\\n/g,"#br#").split("#br#")},sanitizeText:Ft,sanitizeTextOrArray:(t,e)=>"string"==typeof t?Ft(t,e):t.flat().map((t=>Ft(t,e))),hasBreaks:t=>$t.test(t),splitBreaks:t=>t.split($t),lineBreakRegex:$t,removeScript:Mt,getUrl:t=>{let e="";return t&&(e=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,e=e.replaceAll(/\(/g,"\\("),e=e.replaceAll(/\)/g,"\\)")),e},evaluate:Pt},zt=(t,e)=>f(t,e?{s:-40,l:10}:{s:-40,l:-10}),Ut="#ffffff",Wt="#f2f2f2";class qt{constructor(){this.primaryColor="#eee",this.contrast="#707070",this.secondaryColor=(0,x.Z)(this.contrast,55),this.background="#ffffff",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#eee",this.secondBkg="calculated",this.lineColor="#666",this.border1="#999",this.border2="calculated",this.note="#ffa",this.text="#333",this.critical="#d42",this.done="#bbb",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="white",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="calculated",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="white",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBkgColor="calculated",this.critBorderColor="calculated",this.todayLineColor="calculated",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.secondBkg=(0,x.Z)(this.contrast,55),this.border2=this.contrast,this.cScale0=this.cScale0||"#555",this.cScale1=this.cScale1||"#F4F4F4",this.cScale2=this.cScale2||"#555",this.cScale3=this.cScale3||"#BBB",this.cScale4=this.cScale4||"#777",this.cScale5=this.cScale5||"#999",this.cScale6=this.cScale6||"#DDD",this.cScale7=this.cScale7||"#FFF",this.cScale8=this.cScale8||"#DDD",this.cScale9=this.cScale9||"#BBB",this.cScale10=this.cScale10||"#999",this.cScale11=this.cScale11||"#777";for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this.darkMode?this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10):this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],10);this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor),this.cScaleLabel0=this.cScaleLabel0||this.cScale1,this.cScaleLabel2=this.cScaleLabel2||this.cScale1;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.text,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.actorTextColor=this.text,this.actorLineColor=this.lineColor,this.signalColor=this.text,this.signalTextColor=this.text,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.text,this.loopTextColor=this.text,this.noteBorderColor="#999",this.noteBkgColor="#666",this.noteTextColor="#fff",this.sectionBkgColor=(0,x.Z)(this.contrast,30),this.sectionBkgColor2=(0,x.Z)(this.contrast,30),this.taskBorderColor=(0,_.Z)(this.contrast,10),this.taskBkgColor=this.contrast,this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor=this.text,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.gridColor=(0,x.Z)(this.border1,30),this.doneTaskBkgColor=this.done,this.doneTaskBorderColor=this.lineColor,this.critBkgColor=this.critical,this.critBorderColor=(0,_.Z)(this.critBkgColor,10),this.todayLineColor=this.critBkgColor,this.transitionColor=this.transitionColor||"#000",this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f4f4f4",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.stateBorder=this.stateBorder||"#000",this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#222",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pie12=this.pie0,this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,_.Z)(this.pie1,25)||this.primaryColor,this.git1=this.pie2||this.secondaryColor,this.git2=this.pie3||this.tertiaryColor,this.git3=this.pie4||f(this.primaryColor,{h:-30}),this.git4=this.pie5||f(this.primaryColor,{h:-60}),this.git5=this.pie6||f(this.primaryColor,{h:-90}),this.git6=this.pie7||f(this.primaryColor,{h:60}),this.git7=this.pie8||f(this.primaryColor,{h:120}),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||this.labelTextColor,this.gitBranchLabel0=this.branchLabelColor,this.gitBranchLabel1="white",this.gitBranchLabel2=this.branchLabelColor,this.gitBranchLabel3="white",this.gitBranchLabel4=this.branchLabelColor,this.gitBranchLabel5=this.branchLabelColor,this.gitBranchLabel6=this.branchLabelColor,this.gitBranchLabel7=this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}}const Ht={base:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#fff4dd",this.noteBkgColor="#fff5ad",this.noteTextColor="#333",this.THEME_COLOR_LIMIT=12,this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px"}updateColors(){if(this.primaryTextColor=this.primaryTextColor||(this.darkMode?"#eee":"#333"),this.secondaryColor=this.secondaryColor||f(this.primaryColor,{h:-120}),this.tertiaryColor=this.tertiaryColor||f(this.primaryColor,{h:180,l:5}),this.primaryBorderColor=this.primaryBorderColor||zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=this.secondaryBorderColor||zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=this.tertiaryBorderColor||zt(this.tertiaryColor,this.darkMode),this.noteBorderColor=this.noteBorderColor||zt(this.noteBkgColor,this.darkMode),this.noteBkgColor=this.noteBkgColor||"#fff5ad",this.noteTextColor=this.noteTextColor||"#333",this.secondaryTextColor=this.secondaryTextColor||b(this.secondaryColor),this.tertiaryTextColor=this.tertiaryTextColor||b(this.tertiaryColor),this.lineColor=this.lineColor||b(this.background),this.textColor=this.textColor||this.primaryTextColor,this.nodeBkg=this.nodeBkg||this.primaryColor,this.mainBkg=this.mainBkg||this.primaryColor,this.nodeBorder=this.nodeBorder||this.primaryBorderColor,this.clusterBkg=this.clusterBkg||this.tertiaryColor,this.clusterBorder=this.clusterBorder||this.tertiaryBorderColor,this.defaultLinkColor=this.defaultLinkColor||this.lineColor,this.titleColor=this.titleColor||this.tertiaryTextColor,this.edgeLabelBackground=this.edgeLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.nodeTextColor=this.nodeTextColor||this.primaryTextColor,this.actorBorder=this.actorBorder||this.primaryBorderColor,this.actorBkg=this.actorBkg||this.mainBkg,this.actorTextColor=this.actorTextColor||this.primaryTextColor,this.actorLineColor=this.actorLineColor||"grey",this.labelBoxBkgColor=this.labelBoxBkgColor||this.actorBkg,this.signalColor=this.signalColor||this.textColor,this.signalTextColor=this.signalTextColor||this.textColor,this.labelBoxBorderColor=this.labelBoxBorderColor||this.actorBorder,this.labelTextColor=this.labelTextColor||this.actorTextColor,this.loopTextColor=this.loopTextColor||this.actorTextColor,this.activationBorderColor=this.activationBorderColor||(0,_.Z)(this.secondaryColor,10),this.activationBkgColor=this.activationBkgColor||this.secondaryColor,this.sequenceNumberColor=this.sequenceNumberColor||b(this.lineColor),this.sectionBkgColor=this.sectionBkgColor||this.tertiaryColor,this.altSectionBkgColor=this.altSectionBkgColor||"white",this.sectionBkgColor=this.sectionBkgColor||this.secondaryColor,this.sectionBkgColor2=this.sectionBkgColor2||this.primaryColor,this.excludeBkgColor=this.excludeBkgColor||"#eeeeee",this.taskBorderColor=this.taskBorderColor||this.primaryBorderColor,this.taskBkgColor=this.taskBkgColor||this.primaryColor,this.activeTaskBorderColor=this.activeTaskBorderColor||this.primaryColor,this.activeTaskBkgColor=this.activeTaskBkgColor||(0,x.Z)(this.primaryColor,23),this.gridColor=this.gridColor||"lightgrey",this.doneTaskBkgColor=this.doneTaskBkgColor||"lightgrey",this.doneTaskBorderColor=this.doneTaskBorderColor||"grey",this.critBorderColor=this.critBorderColor||"#ff8888",this.critBkgColor=this.critBkgColor||"red",this.todayLineColor=this.todayLineColor||"red",this.taskTextColor=this.taskTextColor||this.textColor,this.taskTextOutsideColor=this.taskTextOutsideColor||this.textColor,this.taskTextLightColor=this.taskTextLightColor||this.textColor,this.taskTextColor=this.taskTextColor||this.primaryTextColor,this.taskTextDarkColor=this.taskTextDarkColor||this.textColor,this.taskTextClickableColor=this.taskTextClickableColor||"#003163",this.personBorder=this.personBorder||this.primaryBorderColor,this.personBkg=this.personBkg||this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||this.tertiaryColor,this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.specialStateColor=this.lineColor,this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210,l:150}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.darkMode)for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],75);else for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],25);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleInv"+e]=this["cScaleInv"+e]||b(this["cScale"+e]);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this.darkMode?this["cScalePeer"+e]=this["cScalePeer"+e]||(0,x.Z)(this["cScale"+e],10):this["cScalePeer"+e]=this["cScalePeer"+e]||(0,_.Z)(this["cScale"+e],10);this.scaleLabelColor=this.scaleLabelColor||this.labelTextColor;for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleLabel"+e]=this["cScaleLabel"+e]||this.scaleLabelColor;const t=this.darkMode?-4:-1;for(let e=0;e<5;e++)this["surface"+e]=this["surface"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(5+3*e)}),this["surfacePeer"+e]=this["surfacePeer"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(8+3*e)});this.classText=this.classText||this.textColor,this.fillType0=this.fillType0||this.primaryColor,this.fillType1=this.fillType1||this.secondaryColor,this.fillType2=this.fillType2||f(this.primaryColor,{h:64}),this.fillType3=this.fillType3||f(this.secondaryColor,{h:64}),this.fillType4=this.fillType4||f(this.primaryColor,{h:-64}),this.fillType5=this.fillType5||f(this.secondaryColor,{h:-64}),this.fillType6=this.fillType6||f(this.primaryColor,{h:128}),this.fillType7=this.fillType7||f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-10}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-10}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-20}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-20}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-10}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||(this.darkMode?"black":this.labelTextColor),this.gitBranchLabel0=this.gitBranchLabel0||this.branchLabelColor,this.gitBranchLabel1=this.gitBranchLabel1||this.branchLabelColor,this.gitBranchLabel2=this.gitBranchLabel2||this.branchLabelColor,this.gitBranchLabel3=this.gitBranchLabel3||this.branchLabelColor,this.gitBranchLabel4=this.gitBranchLabel4||this.branchLabelColor,this.gitBranchLabel5=this.gitBranchLabel5||this.branchLabelColor,this.gitBranchLabel6=this.gitBranchLabel6||this.branchLabelColor,this.gitBranchLabel7=this.gitBranchLabel7||this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},dark:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#333",this.primaryColor="#1f2020",this.secondaryColor=(0,x.Z)(this.primaryColor,16),this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=b(this.background),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#1f2020",this.secondBkg="calculated",this.mainContrastColor="lightgrey",this.darkTextColor=(0,x.Z)(b("#323D47"),10),this.lineColor="calculated",this.border1="#81B1DB",this.border2=y(255,255,255,.25),this.arrowheadColor="calculated",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#181818",this.textColor="#ccc",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#F9FFFE",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="calculated",this.activationBkgColor="calculated",this.sequenceNumberColor="black",this.sectionBkgColor=(0,_.Z)("#EAE8D9",30),this.altSectionBkgColor="calculated",this.sectionBkgColor2="#EAE8D9",this.taskBorderColor=y(255,255,255,70),this.taskBkgColor="calculated",this.taskTextColor="calculated",this.taskTextLightColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor=y(255,255,255,50),this.activeTaskBkgColor="#81B1DB",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="grey",this.critBorderColor="#E83737",this.critBkgColor="#E83737",this.taskTextDarkColor="calculated",this.todayLineColor="#DB5757",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="calculated",this.errorBkgColor="#a44141",this.errorTextColor="#ddd"}updateColors(){this.secondBkg=(0,x.Z)(this.mainBkg,16),this.lineColor=this.mainContrastColor,this.arrowheadColor=this.mainContrastColor,this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.edgeLabelBackground=(0,x.Z)(this.labelBackground,25),this.actorBorder=this.border1,this.actorBkg=this.mainBkg,this.actorTextColor=this.mainContrastColor,this.actorLineColor=this.mainContrastColor,this.signalColor=this.mainContrastColor,this.signalTextColor=this.mainContrastColor,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.mainContrastColor,this.loopTextColor=this.mainContrastColor,this.noteBorderColor=this.secondaryBorderColor,this.noteBkgColor=this.secondBkg,this.noteTextColor=this.secondaryTextColor,this.activationBorderColor=this.border1,this.activationBkgColor=this.secondBkg,this.altSectionBkgColor=this.background,this.taskBkgColor=(0,x.Z)(this.mainBkg,23),this.taskTextColor=this.darkTextColor,this.taskTextLightColor=this.mainContrastColor,this.taskTextOutsideColor=this.taskTextLightColor,this.gridColor=this.mainContrastColor,this.doneTaskBkgColor=this.mainContrastColor,this.taskTextDarkColor=this.darkTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#555",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#f4f4f4",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.cScale1=this.cScale1||"#0b0000",this.cScale2=this.cScale2||"#4d1037",this.cScale3=this.cScale3||"#3f5258",this.cScale4=this.cScale4||"#4f2f1b",this.cScale5=this.cScale5||"#6e0a0a",this.cScale6=this.cScale6||"#3b0048",this.cScale7=this.cScale7||"#995a01",this.cScale8=this.cScale8||"#154706",this.cScale9=this.cScale9||"#161722",this.cScale10=this.cScale10||"#00296f",this.cScale11=this.cScale11||"#01629c",this.cScale12=this.cScale12||"#010029",this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10);for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-10)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-7)});this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.classText=this.primaryTextColor,this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,x.Z)(this.secondaryColor,20),this.git1=(0,x.Z)(this.pie2||this.secondaryColor,20),this.git2=(0,x.Z)(this.pie3||this.tertiaryColor,20),this.git3=(0,x.Z)(this.pie4||f(this.primaryColor,{h:-30}),20),this.git4=(0,x.Z)(this.pie5||f(this.primaryColor,{h:-60}),20),this.git5=(0,x.Z)(this.pie6||f(this.primaryColor,{h:-90}),10),this.git6=(0,x.Z)(this.pie7||f(this.primaryColor,{h:60}),10),this.git7=(0,x.Z)(this.pie8||f(this.primaryColor,{h:120}),20),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||(0,x.Z)(this.background,12),this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||(0,x.Z)(this.background,2)}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},default:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#ECECFF",this.secondaryColor=f(this.primaryColor,{h:120}),this.secondaryColor="#ffffde",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.background="white",this.mainBkg="#ECECFF",this.secondBkg="#ffffde",this.lineColor="#333333",this.border1="#9370DB",this.border2="#aaaa33",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#e8e8e8",this.textColor="#333",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="calculated",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="calculated",this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor="calculated",this.taskTextOutsideColor=this.taskTextDarkColor,this.taskTextClickableColor="calculated",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBorderColor="calculated",this.critBkgColor="calculated",this.todayLineColor="calculated",this.sectionBkgColor=y(102,102,255,.49),this.altSectionBkgColor="white",this.sectionBkgColor2="#fff400",this.taskBorderColor="#534fbc",this.taskBkgColor="#8a90dd",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="#534fbc",this.activeTaskBkgColor="#bfc7ff",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222",this.updateColors()}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,l:-(7+5*t)});if(this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor,"calculated"!==this.labelTextColor){this.cScaleLabel0=this.cScaleLabel0||b(this.labelTextColor),this.cScaleLabel3=this.cScaleLabel3||b(this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.labelTextColor}this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.textColor,this.edgeLabelBackground=this.labelBackground,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.signalColor=this.textColor,this.signalTextColor=this.textColor,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||f(this.tertiaryColor,{l:-40}),this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-20}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-20}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-40}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:-40}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-40}),this.pie11=this.pie11||f(this.primaryColor,{h:-90,l:-40}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-30}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.labelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||(0,_.Z)(b(this.git0),25),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.gitBranchLabel0=this.gitBranchLabel0||b(this.labelTextColor),this.gitBranchLabel1=this.gitBranchLabel1||this.labelTextColor,this.gitBranchLabel2=this.gitBranchLabel2||this.labelTextColor,this.gitBranchLabel3=this.gitBranchLabel3||b(this.labelTextColor),this.gitBranchLabel4=this.gitBranchLabel4||this.labelTextColor,this.gitBranchLabel5=this.gitBranchLabel5||this.labelTextColor,this.gitBranchLabel6=this.gitBranchLabel6||this.labelTextColor,this.gitBranchLabel7=this.gitBranchLabel7||this.labelTextColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},forest:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#cde498",this.secondaryColor="#cdffb2",this.background="white",this.mainBkg="#cde498",this.secondBkg="#cdffb2",this.lineColor="green",this.border1="#13540c",this.border2="#6eaa49",this.arrowheadColor="green",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.tertiaryColor=(0,x.Z)("#cde498",10),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.primaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#333",this.edgeLabelBackground="#e8e8e8",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="#333",this.signalTextColor="#333",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="#326932",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="#6eaa49",this.altSectionBkgColor="white",this.sectionBkgColor2="#6eaa49",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="#487e3a",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.actorBorder=(0,_.Z)(this.mainBkg,20),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskBorderColor=this.border1,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-30}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{h:40,l:-40}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-50}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-50}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-50}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},neutral:{getThemeVariables:t=>{const e=new qt;return e.calculate(t),e}}},Vt={theme:"default",themeVariables:Ht.default.getThemeVariables(),themeCSS:void 0,maxTextSize:5e4,darkMode:!1,fontFamily:'"trebuchet ms", verdana, arial, sans-serif;',logLevel:5,securityLevel:"strict",startOnLoad:!0,arrowMarkerAbsolute:!1,secure:["secure","securityLevel","startOnLoad","maxTextSize"],deterministicIds:!1,deterministicIDSeed:void 0,flowchart:{titleTopMargin:25,diagramPadding:8,htmlLabels:!0,nodeSpacing:50,rankSpacing:50,curve:"basis",padding:15,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},sequence:{hideUnusedParticipants:!1,activationWidth:10,diagramMarginX:50,diagramMarginY:10,actorMargin:50,width:150,height:65,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",mirrorActors:!0,forceMenus:!1,bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,showSequenceNumbers:!1,actorFontSize:14,actorFontFamily:'"Open Sans", sans-serif',actorFontWeight:400,noteFontSize:14,noteFontFamily:'"trebuchet ms", verdana, arial, sans-serif',noteFontWeight:400,noteAlign:"center",messageFontSize:16,messageFontFamily:'"trebuchet ms", verdana, arial, sans-serif',messageFontWeight:400,wrap:!1,wrapPadding:10,labelBoxWidth:50,labelBoxHeight:20,messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},noteFont:function(){return{fontFamily:this.noteFontFamily,fontSize:this.noteFontSize,fontWeight:this.noteFontWeight}},actorFont:function(){return{fontFamily:this.actorFontFamily,fontSize:this.actorFontSize,fontWeight:this.actorFontWeight}}},gantt:{titleTopMargin:25,barHeight:20,barGap:4,topPadding:50,rightPadding:75,leftPadding:75,gridLineStartPadding:35,fontSize:11,sectionFontSize:11,numberSectionStyles:4,axisFormat:"%Y-%m-%d",tickInterval:void 0,useMaxWidth:!0,topAxis:!1,useWidth:void 0},journey:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"]},timeline:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"],disableMulticolor:!1},class:{titleTopMargin:25,arrowMarkerAbsolute:!1,dividerMargin:10,padding:5,textHeight:10,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},state:{titleTopMargin:25,dividerMargin:10,sizeUnit:5,padding:8,textHeight:10,titleShift:-15,noteMargin:10,forkWidth:70,forkHeight:7,miniPadding:2,fontSizeFactor:5.02,fontSize:24,labelHeight:16,edgeLengthFactor:"20",compositTitleSize:35,radius:5,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},er:{titleTopMargin:25,diagramPadding:20,layoutDirection:"TB",minEntityWidth:100,minEntityHeight:75,entityPadding:15,stroke:"gray",fill:"honeydew",fontSize:12,useMaxWidth:!0},pie:{useWidth:void 0,useMaxWidth:!0},requirement:{useWidth:void 0,useMaxWidth:!0,rect_fill:"#f9f9f9",text_color:"#333",rect_border_size:"0.5px",rect_border_color:"#bbb",rect_min_width:200,rect_min_height:200,fontSize:14,rect_padding:10,line_height:20},gitGraph:{titleTopMargin:25,diagramPadding:8,nodeLabel:{width:75,height:100,x:-25,y:0},mainBranchName:"main",mainBranchOrder:0,showCommitLabel:!0,showBranches:!0,rotateCommitLabel:!0},c4:{useWidth:void 0,diagramMarginX:50,diagramMarginY:10,c4ShapeMargin:50,c4ShapePadding:20,width:216,height:60,boxMargin:10,useMaxWidth:!0,c4ShapeInRow:4,nextLinePaddingX:0,c4BoundaryInRow:2,personFontSize:14,personFontFamily:'"Open Sans", sans-serif',personFontWeight:"normal",external_personFontSize:14,external_personFontFamily:'"Open Sans", sans-serif',external_personFontWeight:"normal",systemFontSize:14,systemFontFamily:'"Open Sans", sans-serif',systemFontWeight:"normal",external_systemFontSize:14,external_systemFontFamily:'"Open Sans", sans-serif',external_systemFontWeight:"normal",system_dbFontSize:14,system_dbFontFamily:'"Open Sans", sans-serif',system_dbFontWeight:"normal",external_system_dbFontSize:14,external_system_dbFontFamily:'"Open Sans", sans-serif',external_system_dbFontWeight:"normal",system_queueFontSize:14,system_queueFontFamily:'"Open Sans", sans-serif',system_queueFontWeight:"normal",external_system_queueFontSize:14,external_system_queueFontFamily:'"Open Sans", sans-serif',external_system_queueFontWeight:"normal",boundaryFontSize:14,boundaryFontFamily:'"Open Sans", sans-serif',boundaryFontWeight:"normal",messageFontSize:12,messageFontFamily:'"Open Sans", sans-serif',messageFontWeight:"normal",containerFontSize:14,containerFontFamily:'"Open Sans", sans-serif',containerFontWeight:"normal",external_containerFontSize:14,external_containerFontFamily:'"Open Sans", sans-serif',external_containerFontWeight:"normal",container_dbFontSize:14,container_dbFontFamily:'"Open Sans", sans-serif',container_dbFontWeight:"normal",external_container_dbFontSize:14,external_container_dbFontFamily:'"Open Sans", sans-serif',external_container_dbFontWeight:"normal",container_queueFontSize:14,container_queueFontFamily:'"Open Sans", sans-serif',container_queueFontWeight:"normal",external_container_queueFontSize:14,external_container_queueFontFamily:'"Open Sans", sans-serif',external_container_queueFontWeight:"normal",componentFontSize:14,componentFontFamily:'"Open Sans", sans-serif',componentFontWeight:"normal",external_componentFontSize:14,external_componentFontFamily:'"Open Sans", sans-serif',external_componentFontWeight:"normal",component_dbFontSize:14,component_dbFontFamily:'"Open Sans", sans-serif',component_dbFontWeight:"normal",external_component_dbFontSize:14,external_component_dbFontFamily:'"Open Sans", sans-serif',external_component_dbFontWeight:"normal",component_queueFontSize:14,component_queueFontFamily:'"Open Sans", sans-serif',component_queueFontWeight:"normal",external_component_queueFontSize:14,external_component_queueFontFamily:'"Open Sans", sans-serif',external_component_queueFontWeight:"normal",wrap:!0,wrapPadding:10,personFont:function(){return{fontFamily:this.personFontFamily,fontSize:this.personFontSize,fontWeight:this.personFontWeight}},external_personFont:function(){return{fontFamily:this.external_personFontFamily,fontSize:this.external_personFontSize,fontWeight:this.external_personFontWeight}},systemFont:function(){return{fontFamily:this.systemFontFamily,fontSize:this.systemFontSize,fontWeight:this.systemFontWeight}},external_systemFont:function(){return{fontFamily:this.external_systemFontFamily,fontSize:this.external_systemFontSize,fontWeight:this.external_systemFontWeight}},system_dbFont:function(){return{fontFamily:this.system_dbFontFamily,fontSize:this.system_dbFontSize,fontWeight:this.system_dbFontWeight}},external_system_dbFont:function(){return{fontFamily:this.external_system_dbFontFamily,fontSize:this.external_system_dbFontSize,fontWeight:this.external_system_dbFontWeight}},system_queueFont:function(){return{fontFamily:this.system_queueFontFamily,fontSize:this.system_queueFontSize,fontWeight:this.system_queueFontWeight}},external_system_queueFont:function(){return{fontFamily:this.external_system_queueFontFamily,fontSize:this.external_system_queueFontSize,fontWeight:this.external_system_queueFontWeight}},containerFont:function(){return{fontFamily:this.containerFontFamily,fontSize:this.containerFontSize,fontWeight:this.containerFontWeight}},external_containerFont:function(){return{fontFamily:this.external_containerFontFamily,fontSize:this.external_containerFontSize,fontWeight:this.external_containerFontWeight}},container_dbFont:function(){return{fontFamily:this.container_dbFontFamily,fontSize:this.container_dbFontSize,fontWeight:this.container_dbFontWeight}},external_container_dbFont:function(){return{fontFamily:this.external_container_dbFontFamily,fontSize:this.external_container_dbFontSize,fontWeight:this.external_container_dbFontWeight}},container_queueFont:function(){return{fontFamily:this.container_queueFontFamily,fontSize:this.container_queueFontSize,fontWeight:this.container_queueFontWeight}},external_container_queueFont:function(){return{fontFamily:this.external_container_queueFontFamily,fontSize:this.external_container_queueFontSize,fontWeight:this.external_container_queueFontWeight}},componentFont:function(){return{fontFamily:this.componentFontFamily,fontSize:this.componentFontSize,fontWeight:this.componentFontWeight}},external_componentFont:function(){return{fontFamily:this.external_componentFontFamily,fontSize:this.external_componentFontSize,fontWeight:this.external_componentFontWeight}},component_dbFont:function(){return{fontFamily:this.component_dbFontFamily,fontSize:this.component_dbFontSize,fontWeight:this.component_dbFontWeight}},external_component_dbFont:function(){return{fontFamily:this.external_component_dbFontFamily,fontSize:this.external_component_dbFontSize,fontWeight:this.external_component_dbFontWeight}},component_queueFont:function(){return{fontFamily:this.component_queueFontFamily,fontSize:this.component_queueFontSize,fontWeight:this.component_queueFontWeight}},external_component_queueFont:function(){return{fontFamily:this.external_component_queueFontFamily,fontSize:this.external_component_queueFontSize,fontWeight:this.external_component_queueFontWeight}},boundaryFont:function(){return{fontFamily:this.boundaryFontFamily,fontSize:this.boundaryFontSize,fontWeight:this.boundaryFontWeight}},messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},person_bg_color:"#08427B",person_border_color:"#073B6F",external_person_bg_color:"#686868",external_person_border_color:"#8A8A8A",system_bg_color:"#1168BD",system_border_color:"#3C7FC0",system_db_bg_color:"#1168BD",system_db_border_color:"#3C7FC0",system_queue_bg_color:"#1168BD",system_queue_border_color:"#3C7FC0",external_system_bg_color:"#999999",external_system_border_color:"#8A8A8A",external_system_db_bg_color:"#999999",external_system_db_border_color:"#8A8A8A",external_system_queue_bg_color:"#999999",external_system_queue_border_color:"#8A8A8A",container_bg_color:"#438DD5",container_border_color:"#3C7FC0",container_db_bg_color:"#438DD5",container_db_border_color:"#3C7FC0",container_queue_bg_color:"#438DD5",container_queue_border_color:"#3C7FC0",external_container_bg_color:"#B3B3B3",external_container_border_color:"#A6A6A6",external_container_db_bg_color:"#B3B3B3",external_container_db_border_color:"#A6A6A6",external_container_queue_bg_color:"#B3B3B3",external_container_queue_border_color:"#A6A6A6",component_bg_color:"#85BBF0",component_border_color:"#78A8D8",component_db_bg_color:"#85BBF0",component_db_border_color:"#78A8D8",component_queue_bg_color:"#85BBF0",component_queue_border_color:"#78A8D8",external_component_bg_color:"#CCCCCC",external_component_border_color:"#BFBFBF",external_component_db_bg_color:"#CCCCCC",external_component_db_border_color:"#BFBFBF",external_component_queue_bg_color:"#CCCCCC",external_component_queue_border_color:"#BFBFBF"},mindmap:{useMaxWidth:!0,padding:10,maxNodeWidth:200},fontSize:16};Vt.class&&(Vt.class.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute),Vt.gitGraph&&(Vt.gitGraph.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute);const Gt=(t,e="")=>Object.keys(t).reduce(((n,r)=>Array.isArray(t[r])?n:"object"==typeof t[r]&&null!==t[r]?[...n,e+r,...Gt(t[r],"")]:[...n,e+r]),[]),Xt=Gt(Vt,""),Kt=Vt;function Qt(t){return null==t}var Jt={isNothing:Qt,isObject:function(t){return"object"==typeof t&&null!==t},toArray:function(t){return Array.isArray(t)?t:Qt(t)?[]:[t]},repeat:function(t,e){var n,r="";for(n=0;n<e;n+=1)r+=t;return r},isNegativeZero:function(t){return 0===t&&Number.NEGATIVE_INFINITY===1/t},extend:function(t,e){var n,r,i,a;if(e)for(n=0,r=(a=Object.keys(e)).length;n<r;n+=1)t[i=a[n]]=e[i];return t}};function te(t,e){var n="",r=t.reason||"(unknown reason)";return t.mark?(t.mark.name&&(n+='in "'+t.mark.name+'" '),n+="("+(t.mark.line+1)+":"+(t.mark.column+1)+")",!e&&t.mark.snippet&&(n+="\n\n"+t.mark.snippet),r+" "+n):r}function ee(t,e){Error.call(this),this.name="YAMLException",this.reason=t,this.mark=e,this.message=te(this,!1),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=(new Error).stack||""}ee.prototype=Object.create(Error.prototype),ee.prototype.constructor=ee,ee.prototype.toString=function(t){return this.name+": "+te(this,t)};var ne=ee;function re(t,e,n,r,i){var a="",s="",o=Math.floor(i/2)-1;return r-e>o&&(e=r-o+(a=" ... ").length),n-r>o&&(n=r+o-(s=" ...").length),{str:a+t.slice(e,n).replace(/\t/g,"\u2192")+s,pos:r-e+a.length}}function ie(t,e){return Jt.repeat(" ",e-t.length)+t}var ae=function(t,e){if(e=Object.create(e||null),!t.buffer)return null;e.maxLength||(e.maxLength=79),"number"!=typeof e.indent&&(e.indent=1),"number"!=typeof e.linesBefore&&(e.linesBefore=3),"number"!=typeof e.linesAfter&&(e.linesAfter=2);for(var n,r=/\r?\n|\r|\0/g,i=[0],a=[],s=-1;n=r.exec(t.buffer);)a.push(n.index),i.push(n.index+n[0].length),t.position<=n.index&&s<0&&(s=i.length-2);s<0&&(s=i.length-1);var o,c,l="",h=Math.min(t.line+e.linesAfter,a.length).toString().length,u=e.maxLength-(e.indent+h+3);for(o=1;o<=e.linesBefore&&!(s-o<0);o++)c=re(t.buffer,i[s-o],a[s-o],t.position-(i[s]-i[s-o]),u),l=Jt.repeat(" ",e.indent)+ie((t.line-o+1).toString(),h)+" | "+c.str+"\n"+l;for(c=re(t.buffer,i[s],a[s],t.position,u),l+=Jt.repeat(" ",e.indent)+ie((t.line+1).toString(),h)+" | "+c.str+"\n",l+=Jt.repeat("-",e.indent+h+3+c.pos)+"^\n",o=1;o<=e.linesAfter&&!(s+o>=a.length);o++)c=re(t.buffer,i[s+o],a[s+o],t.position-(i[s]-i[s+o]),u),l+=Jt.repeat(" ",e.indent)+ie((t.line+o+1).toString(),h)+" | "+c.str+"\n";return l.replace(/\n$/,"")},se=["kind","multi","resolve","construct","instanceOf","predicate","represent","representName","defaultStyle","styleAliases"],oe=["scalar","sequence","mapping"];var ce=function(t,e){var n,r;if(e=e||{},Object.keys(e).forEach((function(e){if(-1===se.indexOf(e))throw new ne('Unknown option "'+e+'" is met in definition of "'+t+'" YAML type.')})),this.options=e,this.tag=t,this.kind=e.kind||null,this.resolve=e.resolve||function(){return!0},this.construct=e.construct||function(t){return t},this.instanceOf=e.instanceOf||null,this.predicate=e.predicate||null,this.represent=e.represent||null,this.representName=e.representName||null,this.defaultStyle=e.defaultStyle||null,this.multi=e.multi||!1,this.styleAliases=(n=e.styleAliases||null,r={},null!==n&&Object.keys(n).forEach((function(t){n[t].forEach((function(e){r[String(e)]=t}))})),r),-1===oe.indexOf(this.kind))throw new ne('Unknown kind "'+this.kind+'" is specified for "'+t+'" YAML type.')};function le(t,e){var n=[];return t[e].forEach((function(t){var e=n.length;n.forEach((function(n,r){n.tag===t.tag&&n.kind===t.kind&&n.multi===t.multi&&(e=r)})),n[e]=t})),n}function he(t){return this.extend(t)}he.prototype.extend=function(t){var e=[],n=[];if(t instanceof ce)n.push(t);else if(Array.isArray(t))n=n.concat(t);else{if(!t||!Array.isArray(t.implicit)&&!Array.isArray(t.explicit))throw new ne("Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })");t.implicit&&(e=e.concat(t.implicit)),t.explicit&&(n=n.concat(t.explicit))}e.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.");if(t.loadKind&&"scalar"!==t.loadKind)throw new ne("There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.");if(t.multi)throw new ne("There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.")})),n.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.")}));var r=Object.create(he.prototype);return r.implicit=(this.implicit||[]).concat(e),r.explicit=(this.explicit||[]).concat(n),r.compiledImplicit=le(r,"implicit"),r.compiledExplicit=le(r,"explicit"),r.compiledTypeMap=function(){var t,e,n={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}};function r(t){t.multi?(n.multi[t.kind].push(t),n.multi.fallback.push(t)):n[t.kind][t.tag]=n.fallback[t.tag]=t}for(t=0,e=arguments.length;t<e;t+=1)arguments[t].forEach(r);return n}(r.compiledImplicit,r.compiledExplicit),r};var ue=new he({explicit:[new ce("tag:yaml.org,2002:str",{kind:"scalar",construct:function(t){return null!==t?t:""}}),new ce("tag:yaml.org,2002:seq",{kind:"sequence",construct:function(t){return null!==t?t:[]}}),new ce("tag:yaml.org,2002:map",{kind:"mapping",construct:function(t){return null!==t?t:{}}})]});var de=new ce("tag:yaml.org,2002:null",{kind:"scalar",resolve:function(t){if(null===t)return!0;var e=t.length;return 1===e&&"~"===t||4===e&&("null"===t||"Null"===t||"NULL"===t)},construct:function(){return null},predicate:function(t){return null===t},represent:{canonical:function(){return"~"},lowercase:function(){return"null"},uppercase:function(){return"NULL"},camelcase:function(){return"Null"},empty:function(){return""}},defaultStyle:"lowercase"});var pe=new ce("tag:yaml.org,2002:bool",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e=t.length;return 4===e&&("true"===t||"True"===t||"TRUE"===t)||5===e&&("false"===t||"False"===t||"FALSE"===t)},construct:function(t){return"true"===t||"True"===t||"TRUE"===t},predicate:function(t){return"[object Boolean]"===Object.prototype.toString.call(t)},represent:{lowercase:function(t){return t?"true":"false"},uppercase:function(t){return t?"TRUE":"FALSE"},camelcase:function(t){return t?"True":"False"}},defaultStyle:"lowercase"});function fe(t){return 48<=t&&t<=55}function ge(t){return 48<=t&&t<=57}var ye=new ce("tag:yaml.org,2002:int",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=t.length,i=0,a=!1;if(!r)return!1;if("-"!==(e=t[i])&&"+"!==e||(e=t[++i]),"0"===e){if(i+1===r)return!0;if("b"===(e=t[++i])){for(i++;i<r;i++)if("_"!==(e=t[i])){if("0"!==e&&"1"!==e)return!1;a=!0}return a&&"_"!==e}if("x"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!(48<=(n=t.charCodeAt(i))&&n<=57||65<=n&&n<=70||97<=n&&n<=102))return!1;a=!0}return a&&"_"!==e}if("o"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!fe(t.charCodeAt(i)))return!1;a=!0}return a&&"_"!==e}}if("_"===e)return!1;for(;i<r;i++)if("_"!==(e=t[i])){if(!ge(t.charCodeAt(i)))return!1;a=!0}return!(!a||"_"===e)},construct:function(t){var e,n=t,r=1;if(-1!==n.indexOf("_")&&(n=n.replace(/_/g,"")),"-"!==(e=n[0])&&"+"!==e||("-"===e&&(r=-1),e=(n=n.slice(1))[0]),"0"===n)return 0;if("0"===e){if("b"===n[1])return r*parseInt(n.slice(2),2);if("x"===n[1])return r*parseInt(n.slice(2),16);if("o"===n[1])return r*parseInt(n.slice(2),8)}return r*parseInt(n,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&t%1==0&&!Jt.isNegativeZero(t)},represent:{binary:function(t){return t>=0?"0b"+t.toString(2):"-0b"+t.toString(2).slice(1)},octal:function(t){return t>=0?"0o"+t.toString(8):"-0o"+t.toString(8).slice(1)},decimal:function(t){return t.toString(10)},hexadecimal:function(t){return t>=0?"0x"+t.toString(16).toUpperCase():"-0x"+t.toString(16).toUpperCase().slice(1)}},defaultStyle:"decimal",styleAliases:{binary:[2,"bin"],octal:[8,"oct"],decimal:[10,"dec"],hexadecimal:[16,"hex"]}}),me=new RegExp("^(?:[-+]?(?:[0-9][0-9_]*)(?:\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\.(?:inf|Inf|INF)|\\.(?:nan|NaN|NAN))$");var be=/^[-+]?[0-9]+e/;var _e=new ce("tag:yaml.org,2002:float",{kind:"scalar",resolve:function(t){return null!==t&&!(!me.test(t)||"_"===t[t.length-1])},construct:function(t){var e,n;return n="-"===(e=t.replace(/_/g,"").toLowerCase())[0]?-1:1,"+-".indexOf(e[0])>=0&&(e=e.slice(1)),".inf"===e?1===n?Number.POSITIVE_INFINITY:Number.NEGATIVE_INFINITY:".nan"===e?NaN:n*parseFloat(e,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&(t%1!=0||Jt.isNegativeZero(t))},represent:function(t,e){var n;if(isNaN(t))switch(e){case"lowercase":return".nan";case"uppercase":return".NAN";case"camelcase":return".NaN"}else if(Number.POSITIVE_INFINITY===t)switch(e){case"lowercase":return".inf";case"uppercase":return".INF";case"camelcase":return".Inf"}else if(Number.NEGATIVE_INFINITY===t)switch(e){case"lowercase":return"-.inf";case"uppercase":return"-.INF";case"camelcase":return"-.Inf"}else if(Jt.isNegativeZero(t))return"-0.0";return n=t.toString(10),be.test(n)?n.replace("e",".e"):n},defaultStyle:"lowercase"}),xe=ue.extend({implicit:[de,pe,ye,_e]}),ve=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$"),ke=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\.([0-9]*))?(?:[ \\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$");var we=new ce("tag:yaml.org,2002:timestamp",{kind:"scalar",resolve:function(t){return null!==t&&(null!==ve.exec(t)||null!==ke.exec(t))},construct:function(t){var e,n,r,i,a,s,o,c,l=0,h=null;if(null===(e=ve.exec(t))&&(e=ke.exec(t)),null===e)throw new Error("Date resolve error");if(n=+e[1],r=+e[2]-1,i=+e[3],!e[4])return new Date(Date.UTC(n,r,i));if(a=+e[4],s=+e[5],o=+e[6],e[7]){for(l=e[7].slice(0,3);l.length<3;)l+="0";l=+l}return e[9]&&(h=6e4*(60*+e[10]+ +(e[11]||0)),"-"===e[9]&&(h=-h)),c=new Date(Date.UTC(n,r,i,a,s,o,l)),h&&c.setTime(c.getTime()-h),c},instanceOf:Date,represent:function(t){return t.toISOString()}});var Ee=new ce("tag:yaml.org,2002:merge",{kind:"scalar",resolve:function(t){return"<<"===t||null===t}}),Ce="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\n\r";var Te=new ce("tag:yaml.org,2002:binary",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=0,i=t.length,a=Ce;for(n=0;n<i;n++)if(!((e=a.indexOf(t.charAt(n)))>64)){if(e<0)return!1;r+=6}return r%8==0},construct:function(t){var e,n,r=t.replace(/[\r\n=]/g,""),i=r.length,a=Ce,s=0,o=[];for(e=0;e<i;e++)e%4==0&&e&&(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)),s=s<<6|a.indexOf(r.charAt(e));return 0===(n=i%4*6)?(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)):18===n?(o.push(s>>10&255),o.push(s>>2&255)):12===n&&o.push(s>>4&255),new Uint8Array(o)},predicate:function(t){return"[object Uint8Array]"===Object.prototype.toString.call(t)},represent:function(t){var e,n,r="",i=0,a=t.length,s=Ce;for(e=0;e<a;e++)e%3==0&&e&&(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]),i=(i<<8)+t[e];return 0===(n=a%3)?(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]):2===n?(r+=s[i>>10&63],r+=s[i>>4&63],r+=s[i<<2&63],r+=s[64]):1===n&&(r+=s[i>>2&63],r+=s[i<<4&63],r+=s[64],r+=s[64]),r}}),Se=Object.prototype.hasOwnProperty,Ae=Object.prototype.toString;var Le=new ce("tag:yaml.org,2002:omap",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=[],o=t;for(e=0,n=o.length;e<n;e+=1){if(r=o[e],a=!1,"[object Object]"!==Ae.call(r))return!1;for(i in r)if(Se.call(r,i)){if(a)return!1;a=!0}if(!a)return!1;if(-1!==s.indexOf(i))return!1;s.push(i)}return!0},construct:function(t){return null!==t?t:[]}}),Be=Object.prototype.toString;var Ne=new ce("tag:yaml.org,2002:pairs",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1){if(r=s[e],"[object Object]"!==Be.call(r))return!1;if(1!==(i=Object.keys(r)).length)return!1;a[e]=[i[0],r[i[0]]]}return!0},construct:function(t){if(null===t)return[];var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1)r=s[e],i=Object.keys(r),a[e]=[i[0],r[i[0]]];return a}}),De=Object.prototype.hasOwnProperty;var Oe=new ce("tag:yaml.org,2002:set",{kind:"mapping",resolve:function(t){if(null===t)return!0;var e,n=t;for(e in n)if(De.call(n,e)&&null!==n[e])return!1;return!0},construct:function(t){return null!==t?t:{}}}),Me=xe.extend({implicit:[we,Ee],explicit:[Te,Le,Ne,Oe]}),Ie=Object.prototype.hasOwnProperty,Fe=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x84\x86-\x9F\uFFFE\uFFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/,$e=/[\x85\u2028\u2029]/,Re=/[,\[\]\{\}]/,Ze=/^(?:!|!!|![a-z\-]+!)$/i,Pe=/^(?:!|[^,\[\]\{\}])(?:%[0-9a-f]{2}|[0-9a-z\-#;\/\?:@&=\+\$,_\.!~\*'\(\)\[\]])*$/i;function je(t){return Object.prototype.toString.call(t)}function Ye(t){return 10===t||13===t}function ze(t){return 9===t||32===t}function Ue(t){return 9===t||32===t||10===t||13===t}function We(t){return 44===t||91===t||93===t||123===t||125===t}function qe(t){var e;return 48<=t&&t<=57?t-48:97<=(e=32|t)&&e<=102?e-97+10:-1}function He(t){return 48===t?"\0":97===t?"\x07":98===t?"\b":116===t||9===t?"\t":110===t?"\n":118===t?"\v":102===t?"\f":114===t?"\r":101===t?"\x1b":32===t?" ":34===t?'"':47===t?"/":92===t?"\\":78===t?"\x85":95===t?"\xa0":76===t?"\u2028":80===t?"\u2029":""}function Ve(t){return t<=65535?String.fromCharCode(t):String.fromCharCode(55296+(t-65536>>10),56320+(t-65536&1023))}for(var Ge=new Array(256),Xe=new Array(256),Ke=0;Ke<256;Ke++)Ge[Ke]=He(Ke)?1:0,Xe[Ke]=He(Ke);function Qe(t,e){this.input=t,this.filename=e.filename||null,this.schema=e.schema||Me,this.onWarning=e.onWarning||null,this.legacy=e.legacy||!1,this.json=e.json||!1,this.listener=e.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=t.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Je(t,e){var n={name:t.filename,buffer:t.input.slice(0,-1),position:t.position,line:t.line,column:t.position-t.lineStart};return n.snippet=ae(n),new ne(e,n)}function tn(t,e){throw Je(t,e)}function en(t,e){t.onWarning&&t.onWarning.call(null,Je(t,e))}var nn={YAML:function(t,e,n){var r,i,a;null!==t.version&&tn(t,"duplication of %YAML directive"),1!==n.length&&tn(t,"YAML directive accepts exactly one argument"),null===(r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]))&&tn(t,"ill-formed argument of the YAML directive"),i=parseInt(r[1],10),a=parseInt(r[2],10),1!==i&&tn(t,"unacceptable YAML version of the document"),t.version=n[0],t.checkLineBreaks=a<2,1!==a&&2!==a&&en(t,"unsupported YAML version of the document")},TAG:function(t,e,n){var r,i;2!==n.length&&tn(t,"TAG directive accepts exactly two arguments"),r=n[0],i=n[1],Ze.test(r)||tn(t,"ill-formed tag handle (first argument) of the TAG directive"),Ie.call(t.tagMap,r)&&tn(t,'there is a previously declared suffix for "'+r+'" tag handle'),Pe.test(i)||tn(t,"ill-formed tag prefix (second argument) of the TAG directive");try{i=decodeURIComponent(i)}catch(a){tn(t,"tag prefix is malformed: "+i)}t.tagMap[r]=i}};function rn(t,e,n,r){var i,a,s,o;if(e<n){if(o=t.input.slice(e,n),r)for(i=0,a=o.length;i<a;i+=1)9===(s=o.charCodeAt(i))||32<=s&&s<=1114111||tn(t,"expected valid JSON character");else Fe.test(o)&&tn(t,"the stream contains non-printable characters");t.result+=o}}function an(t,e,n,r){var i,a,s,o;for(Jt.isObject(n)||tn(t,"cannot merge mappings; the provided source object is unacceptable"),s=0,o=(i=Object.keys(n)).length;s<o;s+=1)a=i[s],Ie.call(e,a)||(e[a]=n[a],r[a]=!0)}function sn(t,e,n,r,i,a,s,o,c){var l,h;if(Array.isArray(i))for(l=0,h=(i=Array.prototype.slice.call(i)).length;l<h;l+=1)Array.isArray(i[l])&&tn(t,"nested arrays are not supported inside keys"),"object"==typeof i&&"[object Object]"===je(i[l])&&(i[l]="[object Object]");if("object"==typeof i&&"[object Object]"===je(i)&&(i="[object Object]"),i=String(i),null===e&&(e={}),"tag:yaml.org,2002:merge"===r)if(Array.isArray(a))for(l=0,h=a.length;l<h;l+=1)an(t,e,a[l],n);else an(t,e,a,n);else t.json||Ie.call(n,i)||!Ie.call(e,i)||(t.line=s||t.line,t.lineStart=o||t.lineStart,t.position=c||t.position,tn(t,"duplicated mapping key")),"__proto__"===i?Object.defineProperty(e,i,{configurable:!0,enumerable:!0,writable:!0,value:a}):e[i]=a,delete n[i];return e}function on(t){var e;10===(e=t.input.charCodeAt(t.position))?t.position++:13===e?(t.position++,10===t.input.charCodeAt(t.position)&&t.position++):tn(t,"a line break is expected"),t.line+=1,t.lineStart=t.position,t.firstTabInLine=-1}function cn(t,e,n){for(var r=0,i=t.input.charCodeAt(t.position);0!==i;){for(;ze(i);)9===i&&-1===t.firstTabInLine&&(t.firstTabInLine=t.position),i=t.input.charCodeAt(++t.position);if(e&&35===i)do{i=t.input.charCodeAt(++t.position)}while(10!==i&&13!==i&&0!==i);if(!Ye(i))break;for(on(t),i=t.input.charCodeAt(t.position),r++,t.lineIndent=0;32===i;)t.lineIndent++,i=t.input.charCodeAt(++t.position)}return-1!==n&&0!==r&&t.lineIndent<n&&en(t,"deficient indentation"),r}function ln(t){var e,n=t.position;return!(45!==(e=t.input.charCodeAt(n))&&46!==e||e!==t.input.charCodeAt(n+1)||e!==t.input.charCodeAt(n+2)||(n+=3,0!==(e=t.input.charCodeAt(n))&&!Ue(e)))}function hn(t,e){1===e?t.result+=" ":e>1&&(t.result+=Jt.repeat("\n",e-1))}function un(t,e){var n,r,i=t.tag,a=t.anchor,s=[],o=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=s),r=t.input.charCodeAt(t.position);0!==r&&(-1!==t.firstTabInLine&&(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),45===r)&&Ue(t.input.charCodeAt(t.position+1));)if(o=!0,t.position++,cn(t,!0,-1)&&t.lineIndent<=e)s.push(null),r=t.input.charCodeAt(t.position);else if(n=t.line,fn(t,e,3,!1,!0),s.push(t.result),cn(t,!0,-1),r=t.input.charCodeAt(t.position),(t.line===n||t.lineIndent>e)&&0!==r)tn(t,"bad indentation of a sequence entry");else if(t.lineIndent<e)break;return!!o&&(t.tag=i,t.anchor=a,t.kind="sequence",t.result=s,!0)}function dn(t){var e,n,r,i,a=!1,s=!1;if(33!==(i=t.input.charCodeAt(t.position)))return!1;if(null!==t.tag&&tn(t,"duplication of a tag property"),60===(i=t.input.charCodeAt(++t.position))?(a=!0,i=t.input.charCodeAt(++t.position)):33===i?(s=!0,n="!!",i=t.input.charCodeAt(++t.position)):n="!",e=t.position,a){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&62!==i);t.position<t.length?(r=t.input.slice(e,t.position),i=t.input.charCodeAt(++t.position)):tn(t,"unexpected end of the stream within a verbatim tag")}else{for(;0!==i&&!Ue(i);)33===i&&(s?tn(t,"tag suffix cannot contain exclamation marks"):(n=t.input.slice(e-1,t.position+1),Ze.test(n)||tn(t,"named tag handle cannot contain such characters"),s=!0,e=t.position+1)),i=t.input.charCodeAt(++t.position);r=t.input.slice(e,t.position),Re.test(r)&&tn(t,"tag suffix cannot contain flow indicator characters")}r&&!Pe.test(r)&&tn(t,"tag name cannot contain such characters: "+r);try{r=decodeURIComponent(r)}catch(o){tn(t,"tag name is malformed: "+r)}return a?t.tag=r:Ie.call(t.tagMap,n)?t.tag=t.tagMap[n]+r:"!"===n?t.tag="!"+r:"!!"===n?t.tag="tag:yaml.org,2002:"+r:tn(t,'undeclared tag handle "'+n+'"'),!0}function pn(t){var e,n;if(38!==(n=t.input.charCodeAt(t.position)))return!1;for(null!==t.anchor&&tn(t,"duplication of an anchor property"),n=t.input.charCodeAt(++t.position),e=t.position;0!==n&&!Ue(n)&&!We(n);)n=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an anchor node must contain at least one character"),t.anchor=t.input.slice(e,t.position),!0}function fn(t,e,n,r,i){var a,s,o,c,l,h,u,d,p,f=1,g=!1,y=!1;if(null!==t.listener&&t.listener("open",t),t.tag=null,t.anchor=null,t.kind=null,t.result=null,a=s=o=4===n||3===n,r&&cn(t,!0,-1)&&(g=!0,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)),1===f)for(;dn(t)||pn(t);)cn(t,!0,-1)?(g=!0,o=a,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)):o=!1;if(o&&(o=g||i),1!==f&&4!==n||(d=1===n||2===n?e:e+1,p=t.position-t.lineStart,1===f?o&&(un(t,p)||function(t,e,n){var r,i,a,s,o,c,l,h=t.tag,u=t.anchor,d={},p=Object.create(null),f=null,g=null,y=null,m=!1,b=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=d),l=t.input.charCodeAt(t.position);0!==l;){if(m||-1===t.firstTabInLine||(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),r=t.input.charCodeAt(t.position+1),a=t.line,63!==l&&58!==l||!Ue(r)){if(s=t.line,o=t.lineStart,c=t.position,!fn(t,n,2,!1,!0))break;if(t.line===a){for(l=t.input.charCodeAt(t.position);ze(l);)l=t.input.charCodeAt(++t.position);if(58===l)Ue(l=t.input.charCodeAt(++t.position))||tn(t,"a whitespace character is expected after the key-value separator within a block mapping"),m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!1,i=!1,f=t.tag,g=t.result;else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read an implicit mapping pair; a colon is missed")}}else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read a block mapping entry; a multiline key may not be an implicit key")}}else 63===l?(m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!0,i=!0):m?(m=!1,i=!0):tn(t,"incomplete explicit mapping pair; a key node is missed; or followed by a non-tabulated empty line"),t.position+=1,l=r;if((t.line===a||t.lineIndent>e)&&(m&&(s=t.line,o=t.lineStart,c=t.position),fn(t,e,4,!0,i)&&(m?g=t.result:y=t.result),m||(sn(t,d,p,f,g,y,s,o,c),f=g=y=null),cn(t,!0,-1),l=t.input.charCodeAt(t.position)),(t.line===a||t.lineIndent>e)&&0!==l)tn(t,"bad indentation of a mapping entry");else if(t.lineIndent<e)break}return m&&sn(t,d,p,f,g,null,s,o,c),b&&(t.tag=h,t.anchor=u,t.kind="mapping",t.result=d),b}(t,p,d))||function(t,e){var n,r,i,a,s,o,c,l,h,u,d,p,f=!0,g=t.tag,y=t.anchor,m=Object.create(null);if(91===(p=t.input.charCodeAt(t.position)))s=93,l=!1,a=[];else{if(123!==p)return!1;s=125,l=!0,a={}}for(null!==t.anchor&&(t.anchorMap[t.anchor]=a),p=t.input.charCodeAt(++t.position);0!==p;){if(cn(t,!0,e),(p=t.input.charCodeAt(t.position))===s)return t.position++,t.tag=g,t.anchor=y,t.kind=l?"mapping":"sequence",t.result=a,!0;f?44===p&&tn(t,"expected the node content, but found ','"):tn(t,"missed comma between flow collection entries"),d=null,o=c=!1,63===p&&Ue(t.input.charCodeAt(t.position+1))&&(o=c=!0,t.position++,cn(t,!0,e)),n=t.line,r=t.lineStart,i=t.position,fn(t,e,1,!1,!0),u=t.tag,h=t.result,cn(t,!0,e),p=t.input.charCodeAt(t.position),!c&&t.line!==n||58!==p||(o=!0,p=t.input.charCodeAt(++t.position),cn(t,!0,e),fn(t,e,1,!1,!0),d=t.result),l?sn(t,a,m,u,h,d,n,r,i):o?a.push(sn(t,null,m,u,h,d,n,r,i)):a.push(h),cn(t,!0,e),44===(p=t.input.charCodeAt(t.position))?(f=!0,p=t.input.charCodeAt(++t.position)):f=!1}tn(t,"unexpected end of the stream within a flow collection")}(t,d)?y=!0:(s&&function(t,e){var n,r,i,a,s,o=1,c=!1,l=!1,h=e,u=0,d=!1;if(124===(a=t.input.charCodeAt(t.position)))r=!1;else{if(62!==a)return!1;r=!0}for(t.kind="scalar",t.result="";0!==a;)if(43===(a=t.input.charCodeAt(++t.position))||45===a)1===o?o=43===a?3:2:tn(t,"repeat of a chomping mode identifier");else{if(!((i=48<=(s=a)&&s<=57?s-48:-1)>=0))break;0===i?tn(t,"bad explicit indentation width of a block scalar; it cannot be less than one"):l?tn(t,"repeat of an indentation width identifier"):(h=e+i-1,l=!0)}if(ze(a)){do{a=t.input.charCodeAt(++t.position)}while(ze(a));if(35===a)do{a=t.input.charCodeAt(++t.position)}while(!Ye(a)&&0!==a)}for(;0!==a;){for(on(t),t.lineIndent=0,a=t.input.charCodeAt(t.position);(!l||t.lineIndent<h)&&32===a;)t.lineIndent++,a=t.input.charCodeAt(++t.position);if(!l&&t.lineIndent>h&&(h=t.lineIndent),Ye(a))u++;else{if(t.lineIndent<h){3===o?t.result+=Jt.repeat("\n",c?1+u:u):1===o&&c&&(t.result+="\n");break}for(r?ze(a)?(d=!0,t.result+=Jt.repeat("\n",c?1+u:u)):d?(d=!1,t.result+=Jt.repeat("\n",u+1)):0===u?c&&(t.result+=" "):t.result+=Jt.repeat("\n",u):t.result+=Jt.repeat("\n",c?1+u:u),c=!0,l=!0,u=0,n=t.position;!Ye(a)&&0!==a;)a=t.input.charCodeAt(++t.position);rn(t,n,t.position,!1)}}return!0}(t,d)||function(t,e){var n,r,i;if(39!==(n=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,r=i=t.position;0!==(n=t.input.charCodeAt(t.position));)if(39===n){if(rn(t,r,t.position,!0),39!==(n=t.input.charCodeAt(++t.position)))return!0;r=t.position,t.position++,i=t.position}else Ye(n)?(rn(t,r,i,!0),hn(t,cn(t,!1,e)),r=i=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a single quoted scalar"):(t.position++,i=t.position);tn(t,"unexpected end of the stream within a single quoted scalar")}(t,d)||function(t,e){var n,r,i,a,s,o,c;if(34!==(o=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,n=r=t.position;0!==(o=t.input.charCodeAt(t.position));){if(34===o)return rn(t,n,t.position,!0),t.position++,!0;if(92===o){if(rn(t,n,t.position,!0),Ye(o=t.input.charCodeAt(++t.position)))cn(t,!1,e);else if(o<256&&Ge[o])t.result+=Xe[o],t.position++;else if((s=120===(c=o)?2:117===c?4:85===c?8:0)>0){for(i=s,a=0;i>0;i--)(s=qe(o=t.input.charCodeAt(++t.position)))>=0?a=(a<<4)+s:tn(t,"expected hexadecimal character");t.result+=Ve(a),t.position++}else tn(t,"unknown escape sequence");n=r=t.position}else Ye(o)?(rn(t,n,r,!0),hn(t,cn(t,!1,e)),n=r=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a double quoted scalar"):(t.position++,r=t.position)}tn(t,"unexpected end of the stream within a double quoted scalar")}(t,d)?y=!0:!function(t){var e,n,r;if(42!==(r=t.input.charCodeAt(t.position)))return!1;for(r=t.input.charCodeAt(++t.position),e=t.position;0!==r&&!Ue(r)&&!We(r);)r=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an alias node must contain at least one character"),n=t.input.slice(e,t.position),Ie.call(t.anchorMap,n)||tn(t,'unidentified alias "'+n+'"'),t.result=t.anchorMap[n],cn(t,!0,-1),!0}(t)?function(t,e,n){var r,i,a,s,o,c,l,h,u=t.kind,d=t.result;if(Ue(h=t.input.charCodeAt(t.position))||We(h)||35===h||38===h||42===h||33===h||124===h||62===h||39===h||34===h||37===h||64===h||96===h)return!1;if((63===h||45===h)&&(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r)))return!1;for(t.kind="scalar",t.result="",i=a=t.position,s=!1;0!==h;){if(58===h){if(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r))break}else if(35===h){if(Ue(t.input.charCodeAt(t.position-1)))break}else{if(t.position===t.lineStart&&ln(t)||n&&We(h))break;if(Ye(h)){if(o=t.line,c=t.lineStart,l=t.lineIndent,cn(t,!1,-1),t.lineIndent>=e){s=!0,h=t.input.charCodeAt(t.position);continue}t.position=a,t.line=o,t.lineStart=c,t.lineIndent=l;break}}s&&(rn(t,i,a,!1),hn(t,t.line-o),i=a=t.position,s=!1),ze(h)||(a=t.position+1),h=t.input.charCodeAt(++t.position)}return rn(t,i,a,!1),!!t.result||(t.kind=u,t.result=d,!1)}(t,d,1===n)&&(y=!0,null===t.tag&&(t.tag="?")):(y=!0,null===t.tag&&null===t.anchor||tn(t,"alias node should not have any properties")),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):0===f&&(y=o&&un(t,p))),null===t.tag)null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);else if("?"===t.tag){for(null!==t.result&&"scalar"!==t.kind&&tn(t,'unacceptable node kind for !<?> tag; it should be "scalar", not "'+t.kind+'"'),c=0,l=t.implicitTypes.length;c<l;c+=1)if((u=t.implicitTypes[c]).resolve(t.result)){t.result=u.construct(t.result),t.tag=u.tag,null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);break}}else if("!"!==t.tag){if(Ie.call(t.typeMap[t.kind||"fallback"],t.tag))u=t.typeMap[t.kind||"fallback"][t.tag];else for(u=null,c=0,l=(h=t.typeMap.multi[t.kind||"fallback"]).length;c<l;c+=1)if(t.tag.slice(0,h[c].tag.length)===h[c].tag){u=h[c];break}u||tn(t,"unknown tag !<"+t.tag+">"),null!==t.result&&u.kind!==t.kind&&tn(t,"unacceptable node kind for !<"+t.tag+'> tag; it should be "'+u.kind+'", not "'+t.kind+'"'),u.resolve(t.result,t.tag)?(t.result=u.construct(t.result,t.tag),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):tn(t,"cannot resolve a node with !<"+t.tag+"> explicit tag")}return null!==t.listener&&t.listener("close",t),null!==t.tag||null!==t.anchor||y}function gn(t){var e,n,r,i,a=t.position,s=!1;for(t.version=null,t.checkLineBreaks=t.legacy,t.tagMap=Object.create(null),t.anchorMap=Object.create(null);0!==(i=t.input.charCodeAt(t.position))&&(cn(t,!0,-1),i=t.input.charCodeAt(t.position),!(t.lineIndent>0||37!==i));){for(s=!0,i=t.input.charCodeAt(++t.position),e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);for(r=[],(n=t.input.slice(e,t.position)).length<1&&tn(t,"directive name must not be less than one character in length");0!==i;){for(;ze(i);)i=t.input.charCodeAt(++t.position);if(35===i){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&!Ye(i));break}if(Ye(i))break;for(e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);r.push(t.input.slice(e,t.position))}0!==i&&on(t),Ie.call(nn,n)?nn[n](t,n,r):en(t,'unknown document directive "'+n+'"')}cn(t,!0,-1),0===t.lineIndent&&45===t.input.charCodeAt(t.position)&&45===t.input.charCodeAt(t.position+1)&&45===t.input.charCodeAt(t.position+2)?(t.position+=3,cn(t,!0,-1)):s&&tn(t,"directives end mark is expected"),fn(t,t.lineIndent-1,4,!1,!0),cn(t,!0,-1),t.checkLineBreaks&&$e.test(t.input.slice(a,t.position))&&en(t,"non-ASCII line breaks are interpreted as content"),t.documents.push(t.result),t.position===t.lineStart&&ln(t)?46===t.input.charCodeAt(t.position)&&(t.position+=3,cn(t,!0,-1)):t.position<t.length-1&&tn(t,"end of the stream or a document separator is expected")}function yn(t,e){e=e||{},0!==(t=String(t)).length&&(10!==t.charCodeAt(t.length-1)&&13!==t.charCodeAt(t.length-1)&&(t+="\n"),65279===t.charCodeAt(0)&&(t=t.slice(1)));var n=new Qe(t,e),r=t.indexOf("\0");for(-1!==r&&(n.position=r,tn(n,"null byte is not allowed in input")),n.input+="\0";32===n.input.charCodeAt(n.position);)n.lineIndent+=1,n.position+=1;for(;n.position<n.length-1;)gn(n);return n.documents}var mn=ue,bn={loadAll:function(t,e,n){null!==e&&"object"==typeof e&&void 0===n&&(n=e,e=null);var r=yn(t,n);if("function"!=typeof e)return r;for(var i=0,a=r.length;i<a;i+=1)e(r[i])},load:function(t,e){var n=yn(t,e);if(0!==n.length){if(1===n.length)return n[0];throw new ne("expected a single document in the stream, but found more")}}}.load;const _n=/^-{3}\s*[\n\r](.*?)[\n\r]-{3}\s*[\n\r]+/s;const xn=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,vn=/\s*%%.*\n/gm,kn={},wn=function(t,e){t=t.replace(_n,"").replace(xn,"").replace(vn,"\n");for(const[n,{detector:r}]of Object.entries(kn)){if(r(t,e))return n}throw new Error(`No diagram type detected for text: ${t}`)},En=(...t)=>{for(const{id:e,detector:n,loader:r}of t)Cn(e,n,r)},Cn=(t,e,n)=>{kn[t]?Nt.error(`Detector with key ${t} already exists`):kn[t]={detector:e,loader:n},Nt.debug(`Detector with key ${t} added${n?" with loader":""}`)},Tn=function(t,e,n){const{depth:r,clobber:i}=Object.assign({depth:2,clobber:!1},n);return Array.isArray(e)&&!Array.isArray(t)?(e.forEach((e=>Tn(t,e,n))),t):Array.isArray(e)&&Array.isArray(t)?(e.forEach((e=>{t.includes(e)||t.push(e)})),t):void 0===t||r<=0?null!=t&&"object"==typeof t&&"object"==typeof e?Object.assign(t,e):e:(void 0!==e&&"object"==typeof t&&"object"==typeof e&&Object.keys(e).forEach((n=>{"object"!=typeof e[n]||void 0!==t[n]&&"object"!=typeof t[n]?(i||"object"!=typeof t[n]&&"object"!=typeof e[n])&&(t[n]=e[n]):(void 0===t[n]&&(t[n]=Array.isArray(e[n])?[]:{}),t[n]=Tn(t[n],e[n],{depth:r-1,clobber:i}))})),t)},Sn=Tn,An={curveBasis:o.$0Z,curveBasisClosed:o.Dts,curveBasisOpen:o.WQY,curveBumpX:o.qpX,curveBumpY:o.u93,curveBundle:o.tFB,curveCardinalClosed:o.OvA,curveCardinalOpen:o.dCK,curveCardinal:o.YY7,curveCatmullRomClosed:o.fGX,curveCatmullRomOpen:o.$m7,curveCatmullRom:o.zgE,curveLinear:o.c_6,curveLinearClosed:o.fxm,curveMonotoneX:o.FdL,curveMonotoneY:o.ak_,curveNatural:o.SxZ,curveStep:o.eA_,curveStepAfter:o.jsv,curveStepBefore:o.iJ},Ln=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Bn=/\s*(?:(\w+)(?=:):|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Nn=function(t,e=null){try{const n=new RegExp(`[%]{2}(?![{]${Bn.source})(?=[}][%]{2}).*\n`,"ig");let r;t=t.trim().replace(n,"").replace(/'/gm,'"'),Nt.debug(`Detecting diagram directive${null!==e?" type:"+e:""} based on the text:${t}`);const i=[];for(;null!==(r=Ln.exec(t));)if(r.index===Ln.lastIndex&&Ln.lastIndex++,r&&!e||e&&r[1]&&r[1].match(e)||e&&r[2]&&r[2].match(e)){const t=r[1]?r[1]:r[2],e=r[3]?r[3].trim():r[4]?JSON.parse(r[4].trim()):null;i.push({type:t,args:e})}return 0===i.length&&i.push({type:t,args:null}),1===i.length?i[0]:i}catch(n){return Nt.error(`ERROR: ${n.message} - Unable to parse directive\n      ${null!==e?" type:"+e:""} based on the text:${t}`),{type:null,args:null}}};function Dn(t,e){if(!t)return e;const n=`curve${t.charAt(0).toUpperCase()+t.slice(1)}`;return An[n]||e}function On(t,e){return t&&e?Math.sqrt(Math.pow(e.x-t.x,2)+Math.pow(e.y-t.y,2)):0}function Mn(t){let e="",n="";for(const r of t)void 0!==r&&(r.startsWith("color:")||r.startsWith("text-align:")?n=n+r+";":e=e+r+";");return{style:e,labelStyle:n}}let In=0;const Fn=()=>(In++,"id-"+Math.random().toString(36).substr(2,12)+"-"+In);const $n=t=>function(t){let e="";const n="0123456789abcdef",r=n.length;for(let i=0;i<t;i++)e+=n.charAt(Math.floor(Math.random()*r));return e}(t.length),Rn=function(t,e){const n=e.text.replace(Yt.lineBreakRegex," "),[,r]=Vn(e.fontSize),i=t.append("text");i.attr("x",e.x),i.attr("y",e.y),i.style("text-anchor",e.anchor),i.style("font-family",e.fontFamily),i.style("font-size",r),i.style("font-weight",e.fontWeight),i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class);const a=i.append("tspan");return a.attr("x",e.x+2*e.textMargin),a.attr("fill",e.fill),a.text(n),i},Zn=(0,v.Z)(((t,e,n)=>{if(!t)return t;if(n=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",joinWith:"<br/>"},n),Yt.lineBreakRegex.test(t))return t;const r=t.split(" "),i=[];let a="";return r.forEach(((t,s)=>{const o=Yn(`${t} `,n),c=Yn(a,n);if(o>e){const{hyphenatedStrings:r,remainingWord:s}=Pn(t,e,"-",n);i.push(a,...r),a=s}else c+o>=e?(i.push(a),a=t):a=[a,t].filter(Boolean).join(" ");s+1===r.length&&i.push(a)})),i.filter((t=>""!==t)).join(n.joinWith)}),((t,e,n)=>`${t}${e}${n.fontSize}${n.fontWeight}${n.fontFamily}${n.joinWith}`)),Pn=(0,v.Z)(((t,e,n="-",r)=>{r=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:0},r);const i=[...t],a=[];let s="";return i.forEach(((t,o)=>{const c=`${s}${t}`;if(Yn(c,r)>=e){const t=o+1,e=i.length===t,r=`${c}${n}`;a.push(e?c:r),s=""}else s=c})),{hyphenatedStrings:a,remainingWord:s}}),((t,e,n="-",r)=>`${t}${e}${n}${r.fontSize}${r.fontWeight}${r.fontFamily}`));function jn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:15},e),zn(t,e).height}function Yn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e),zn(t,e).width}const zn=(0,v.Z)(((t,e)=>{e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e);const{fontSize:n,fontFamily:r,fontWeight:i}=e;if(!t)return{width:0,height:0};const[,a]=Vn(n),s=["sans-serif",r],c=t.split(Yt.lineBreakRegex),l=[],h=(0,o.Ys)("body");if(!h.remove)return{width:0,height:0,lineHeight:0};const u=h.append("svg");for(const o of s){let t=0;const e={width:0,height:0,lineHeight:0};for(const n of c){const r={x:0,y:0,fill:void 0,anchor:"start",style:"#666",width:100,height:100,textMargin:0,rx:0,ry:0,valign:void 0};r.text=n;const s=Rn(u,r).style("font-size",a).style("font-weight",i).style("font-family",o),c=(s._groups||s)[0][0].getBBox();e.width=Math.round(Math.max(e.width,c.width)),t=Math.round(c.height),e.height+=t,e.lineHeight=Math.round(Math.max(e.lineHeight,t))}l.push(e)}u.remove();return l[isNaN(l[1].height)||isNaN(l[1].width)||isNaN(l[1].lineHeight)||l[0].height>l[1].height&&l[0].width>l[1].width&&l[0].lineHeight>l[1].lineHeight?0:1]}),((t,e)=>`${t}${e.fontSize}${e.fontWeight}${e.fontFamily}`));let Un;const Wn=t=>{if(Nt.debug("directiveSanitizer called with",t),"object"==typeof t&&(t.length?t.forEach((t=>Wn(t))):Object.keys(t).forEach((e=>{Nt.debug("Checking key",e),e.startsWith("__")&&(Nt.debug("sanitize deleting __ option",e),delete t[e]),e.includes("proto")&&(Nt.debug("sanitize deleting proto option",e),delete t[e]),e.includes("constr")&&(Nt.debug("sanitize deleting constr option",e),delete t[e]),e.includes("themeCSS")&&(Nt.debug("sanitizing themeCss option"),t[e]=qn(t[e])),e.includes("fontFamily")&&(Nt.debug("sanitizing fontFamily option"),t[e]=qn(t[e])),e.includes("altFontFamily")&&(Nt.debug("sanitizing altFontFamily option"),t[e]=qn(t[e])),Xt.includes(e)?"object"==typeof t[e]&&(Nt.debug("sanitize deleting object",e),Wn(t[e])):(Nt.debug("sanitize deleting option",e),delete t[e])}))),t.themeVariables){const e=Object.keys(t.themeVariables);for(const n of e){const e=t.themeVariables[n];e&&e.match&&!e.match(/^[\d "#%(),.;A-Za-z]+$/)&&(t.themeVariables[n]="")}}Nt.debug("After sanitization",t)},qn=t=>{let e=0,n=0;for(const r of t){if(e<n)return"{ /* ERROR: Unbalanced CSS */ }";"{"===r?e++:"}"===r&&n++}return e!==n?"{ /* ERROR: Unbalanced CSS */ }":t};function Hn(t){return"str"in t}const Vn=t=>{if("number"==typeof t)return[t,t+"px"];const e=parseInt(t,10);return Number.isNaN(e)?[void 0,void 0]:t===String(e)?[e,t+"px"]:[e,t]},Gn={assignWithDepth:Sn,wrapLabel:Zn,calculateTextHeight:jn,calculateTextWidth:Yn,calculateTextDimensions:zn,detectInit:function(t,e){const n=Nn(t,/(?:init\b)|(?:initialize\b)/);let r={};if(Array.isArray(n)){const t=n.map((t=>t.args));Wn(t),r=Sn(r,[...t])}else r=n.args;if(r){let n=wn(t,e);["config"].forEach((t=>{void 0!==r[t]&&("flowchart-v2"===n&&(n="flowchart"),r[n]=r[t],delete r[t])}))}return r},detectDirective:Nn,isSubstringInArray:function(t,e){for(const[n,r]of e.entries())if(r.match(t))return n;return-1},interpolateToCurve:Dn,calcLabelPosition:function(t){return 1===t.length?t[0]:function(t){let e,n=0;t.forEach((t=>{n+=On(t,e),e=t}));let r,i=n/2;return e=void 0,t.forEach((t=>{if(e&&!r){const n=On(t,e);if(n<i)i-=n;else{const a=i/n;a<=0&&(r=e),a>=1&&(r={x:t.x,y:t.y}),a>0&&a<1&&(r={x:(1-a)*e.x+a*t.x,y:(1-a)*e.y+a*t.y})}}e=t})),r}(t)},calcCardinalityPosition:(t,e,n)=>{let r;Nt.info(`our points ${JSON.stringify(e)}`),e[0]!==n&&(e=e.reverse());let i,a=25;r=void 0,e.forEach((t=>{if(r&&!i){const e=On(t,r);if(e<a)a-=e;else{const n=a/e;n<=0&&(i=r),n>=1&&(i={x:t.x,y:t.y}),n>0&&n<1&&(i={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const s=t?10:5,o=Math.atan2(e[0].y-i.y,e[0].x-i.x),c={x:0,y:0};return c.x=Math.sin(o)*s+(e[0].x+i.x)/2,c.y=-Math.cos(o)*s+(e[0].y+i.y)/2,c},calcTerminalLabelPosition:function(t,e,n){let r,i=JSON.parse(JSON.stringify(n));Nt.info("our points",i),"start_left"!==e&&"start_right"!==e&&(i=i.reverse()),i.forEach((t=>{r=t}));let a,s=25+t;r=void 0,i.forEach((t=>{if(r&&!a){const e=On(t,r);if(e<s)s-=e;else{const n=s/e;n<=0&&(a=r),n>=1&&(a={x:t.x,y:t.y}),n>0&&n<1&&(a={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const o=10+.5*t,c=Math.atan2(i[0].y-a.y,i[0].x-a.x),l={x:0,y:0};return l.x=Math.sin(c)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2,"start_left"===e&&(l.x=Math.sin(c+Math.PI)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c+Math.PI)*o+(i[0].y+a.y)/2),"end_right"===e&&(l.x=Math.sin(c-Math.PI)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c-Math.PI)*o+(i[0].y+a.y)/2-5),"end_left"===e&&(l.x=Math.sin(c)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2-5),l},formatUrl:function(t,e){const n=t.trim();if(n)return"loose"!==e.securityLevel?(0,s.N)(n):n},getStylesFromArray:Mn,generateId:Fn,random:$n,runFunc:(t,...e)=>{const n=t.split("."),r=n.length-1,i=n[r];let a=window;for(let s=0;s<r;s++)if(a=a[n[s]],!a)return;a[i](...e)},entityDecode:function(t){return Un=Un||document.createElement("div"),t=escape(t).replace(/%26/g,"&").replace(/%23/g,"#").replace(/%3B/g,";"),Un.innerHTML=t,unescape(Un.textContent)},initIdGenerator:class{constructor(t,e){this.deterministic=t,this.seed=e,this.count=e?e.length:0}next(){return this.deterministic?this.count++:Date.now()}},directiveSanitizer:Wn,sanitizeCss:qn,insertTitle:(t,e,n,r)=>{if(!r)return;const i=t.node().getBBox();t.append("text").text(r).attr("x",i.x+i.width/2).attr("y",-n).attr("class",e)},parseFontSize:Vn},Xn="9.4.3",Kn=Object.freeze(Kt);let Qn,Jn=Sn({},Kn),tr=[],er=Sn({},Kn);const nr=(t,e)=>{let n=Sn({},t),r={};for(const i of e)sr(i),r=Sn(r,i);if(n=Sn(n,r),r.theme&&r.theme in Ht){const t=Sn({},Qn),e=Sn(t.themeVariables||{},r.themeVariables);n.theme&&n.theme in Ht&&(n.themeVariables=Ht[n.theme].getThemeVariables(e))}return er=n,ur(er),er},rr=()=>Sn({},Jn),ir=t=>(ur(t),Sn(er,t),ar()),ar=()=>Sn({},er),sr=t=>{["secure",...Jn.secure??[]].forEach((e=>{void 0!==t[e]&&(Nt.debug(`Denied attempt to modify a secure key ${e}`,t[e]),delete t[e])})),Object.keys(t).forEach((e=>{0===e.indexOf("__")&&delete t[e]})),Object.keys(t).forEach((e=>{"string"==typeof t[e]&&(t[e].includes("<")||t[e].includes(">")||t[e].includes("url(data:"))&&delete t[e],"object"==typeof t[e]&&sr(t[e])}))},or=t=>{t.fontFamily&&(t.themeVariables&&t.themeVariables.fontFamily||(t.themeVariables={fontFamily:t.fontFamily})),tr.push(t),nr(Jn,tr)},cr=(t=Jn)=>{tr=[],nr(t,tr)};var lr=(t=>(t.LAZY_LOAD_DEPRECATED="The configuration options lazyLoadedDiagrams and loadExternalDiagramsAtStartup are deprecated. Please use registerExternalDiagrams instead.",t))(lr||{});const hr={},ur=t=>{var e;t&&((t.lazyLoadedDiagrams||t.loadExternalDiagramsAtStartup)&&(hr[e="LAZY_LOAD_DEPRECATED"]||(Nt.warn(lr[e]),hr[e]=!0)))},dr=function(t,e,n,r){const i=function(t,e,n){let r=new Map;return n?(r.set("width","100%"),r.set("style",`max-width: ${e}px;`)):(r.set("height",t),r.set("width",e)),r}(e,n,r);!function(t,e){for(let n of e)t.attr(n[0],n[1])}(t,i)},pr=function(t,e,n,r){const i=e.node().getBBox(),a=i.width,s=i.height;Nt.info(`SVG bounds: ${a}x${s}`,i);let o=0,c=0;Nt.info(`Graph bounds: ${o}x${c}`,t),o=a+2*n,c=s+2*n,Nt.info(`Calculated bounds: ${o}x${c}`),dr(e,c,o,r);const l=`${i.x-n} ${i.y-n} ${i.width+2*n} ${i.height+2*n}`;e.attr("viewBox",l)},fr=t=>`g.classGroup text {\n  fill: ${t.nodeBorder};\n  fill: ${t.classText};\n  stroke: none;\n  font-family: ${t.fontFamily};\n  font-size: 10px;\n\n  .title {\n    font-weight: bolder;\n  }\n\n}\n\n.nodeLabel, .edgeLabel {\n  color: ${t.classText};\n}\n.edgeLabel .label rect {\n  fill: ${t.mainBkg};\n}\n.label text {\n  fill: ${t.classText};\n}\n.edgeLabel .label span {\n  background: ${t.mainBkg};\n}\n\n.classTitle {\n  font-weight: bolder;\n}\n.node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n\n.divider {\n  stroke: ${t.nodeBorder};\n  stroke: 1;\n}\n\ng.clickable {\n  cursor: pointer;\n}\n\ng.classGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.classGroup line {\n  stroke: ${t.nodeBorder};\n  stroke-width: 1;\n}\n\n.classLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.classLabel .label {\n  fill: ${t.nodeBorder};\n  font-size: 10px;\n}\n\n.relation {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.dashed-line{\n  stroke-dasharray: 3;\n}\n\n.dotted-line{\n  stroke-dasharray: 1 2;\n}\n\n#compositionStart, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#compositionEnd, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionStart, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionEnd, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationStart, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationEnd, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopStart, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopEnd, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n.edgeTerminals {\n  font-size: 11px;\n}\n\n.classTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,gr=t=>`\n  .entityBox {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxOdd {\n    fill: ${t.attributeBackgroundColorOdd};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxEven {\n    fill:  ${t.attributeBackgroundColorEven};\n    stroke: ${t.nodeBorder};\n  }\n\n  .relationshipLabelBox {\n    fill: ${t.tertiaryColor};\n    opacity: 0.7;\n    background-color: ${t.tertiaryColor};\n      rect {\n        opacity: 0.5;\n      }\n  }\n\n    .relationshipLine {\n      stroke: ${t.lineColor};\n    }\n\n  .entityTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }    \n`,yr=()=>"",mr=t=>`.label {\n    font-family: ${t.fontFamily};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n  .cluster-label text {\n    fill: ${t.titleColor};\n  }\n  .cluster-label span {\n    color: ${t.titleColor};\n  }\n\n  .label text,span {\n    fill: ${t.nodeTextColor||t.textColor};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 2.0px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n      background-color: ${t.edgeLabelBackground};\n      fill: ${t.edgeLabelBackground};\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n    fill: ${t.clusterBkg};\n    stroke: ${t.clusterBorder};\n    stroke-width: 1px;\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  .cluster span {\n    color: ${t.titleColor};\n  }\n  /* .cluster div {\n    color: ${t.titleColor};\n  } */\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: ${t.fontFamily};\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .flowchartTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n`,br=t=>`\n  .mermaid-main-font {\n    font-family: "trebuchet ms", verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  .exclude-range {\n    fill: ${t.excludeBkgColor};\n  }\n\n  .section {\n    stroke: none;\n    opacity: 0.2;\n  }\n\n  .section0 {\n    fill: ${t.sectionBkgColor};\n  }\n\n  .section2 {\n    fill: ${t.sectionBkgColor2};\n  }\n\n  .section1,\n  .section3 {\n    fill: ${t.altSectionBkgColor};\n    opacity: 0.2;\n  }\n\n  .sectionTitle0 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle1 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle2 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle3 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle {\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    // text-height: 14px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n\n  /* Grid and axis */\n\n  .grid .tick {\n    stroke: ${t.gridColor};\n    opacity: 0.8;\n    shape-rendering: crispEdges;\n    text {\n      font-family: ${t.fontFamily};\n      fill: ${t.textColor};\n    }\n  }\n\n  .grid path {\n    stroke-width: 0;\n  }\n\n\n  /* Today line */\n\n  .today {\n    fill: none;\n    stroke: ${t.todayLineColor};\n    stroke-width: 2px;\n  }\n\n\n  /* Task styling */\n\n  /* Default task */\n\n  .task {\n    stroke-width: 2;\n  }\n\n  .taskText {\n    text-anchor: middle;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n\n  // .taskText:not([font-size]) {\n  //   font-size: ${t.ganttFontSize};\n  // }\n\n  .taskTextOutsideRight {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n  .taskTextOutsideLeft {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: end;\n    // font-size: ${t.ganttFontSize};\n  }\n\n  /* Special case clickable */\n  .task.clickable {\n    cursor: pointer;\n  }\n  .taskText.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideLeft.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideRight.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  /* Specific task settings for the sections*/\n\n  .taskText0,\n  .taskText1,\n  .taskText2,\n  .taskText3 {\n    fill: ${t.taskTextColor};\n  }\n\n  .task0,\n  .task1,\n  .task2,\n  .task3 {\n    fill: ${t.taskBkgColor};\n    stroke: ${t.taskBorderColor};\n  }\n\n  .taskTextOutside0,\n  .taskTextOutside2\n  {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n  .taskTextOutside1,\n  .taskTextOutside3 {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n\n  /* Active task */\n\n  .active0,\n  .active1,\n  .active2,\n  .active3 {\n    fill: ${t.activeTaskBkgColor};\n    stroke: ${t.activeTaskBorderColor};\n  }\n\n  .activeText0,\n  .activeText1,\n  .activeText2,\n  .activeText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Completed task */\n\n  .done0,\n  .done1,\n  .done2,\n  .done3 {\n    stroke: ${t.doneTaskBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneText0,\n  .doneText1,\n  .doneText2,\n  .doneText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Tasks on the critical line */\n\n  .crit0,\n  .crit1,\n  .crit2,\n  .crit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.critBkgColor};\n    stroke-width: 2;\n  }\n\n  .activeCrit0,\n  .activeCrit1,\n  .activeCrit2,\n  .activeCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.activeTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneCrit0,\n  .doneCrit1,\n  .doneCrit2,\n  .doneCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n    cursor: pointer;\n    shape-rendering: crispEdges;\n  }\n\n  .milestone {\n    transform: rotate(45deg) scale(0.8,0.8);\n  }\n\n  .milestoneText {\n    font-style: italic;\n  }\n  .doneCritText0,\n  .doneCritText1,\n  .doneCritText2,\n  .doneCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .activeCritText0,\n  .activeCritText1,\n  .activeCritText2,\n  .activeCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .titleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor}    ;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n`,_r=()=>"",xr=t=>`\n  .pieCircle{\n    stroke: ${t.pieStrokeColor};\n    stroke-width : ${t.pieStrokeWidth};\n    opacity : ${t.pieOpacity};\n  }\n  .pieTitleText {\n    text-anchor: middle;\n    font-size: ${t.pieTitleTextSize};\n    fill: ${t.pieTitleTextColor};\n    font-family: ${t.fontFamily};\n  }\n  .slice {\n    font-family: ${t.fontFamily};\n    fill: ${t.pieSectionTextColor};\n    font-size:${t.pieSectionTextSize};\n    // fill: white;\n  }\n  .legend text {\n    fill: ${t.pieLegendTextColor};\n    font-family: ${t.fontFamily};\n    font-size: ${t.pieLegendTextSize};\n  }\n`,vr=t=>`\n\n  marker {\n    fill: ${t.relationColor};\n    stroke: ${t.relationColor};\n  }\n\n  marker.cross {\n    stroke: ${t.lineColor};\n  }\n\n  svg {\n    font-family: ${t.fontFamily};\n    font-size: ${t.fontSize};\n  }\n\n  .reqBox {\n    fill: ${t.requirementBackground};\n    fill-opacity: 100%;\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  \n  .reqTitle, .reqLabel{\n    fill:  ${t.requirementTextColor};\n  }\n  .reqLabelBox {\n    fill: ${t.relationLabelBackground};\n    fill-opacity: 100%;\n  }\n\n  .req-title-line {\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  .relationshipLine {\n    stroke: ${t.relationColor};\n    stroke-width: 1;\n  }\n  .relationshipLabel {\n    fill: ${t.relationLabelColor};\n  }\n\n`,kr=t=>`.actor {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n\n  text.actor > tspan {\n    fill: ${t.actorTextColor};\n    stroke: none;\n  }\n\n  .actor-line {\n    stroke: ${t.actorLineColor};\n  }\n\n  .messageLine0 {\n    stroke-width: 1.5;\n    stroke-dasharray: none;\n    stroke: ${t.signalColor};\n  }\n\n  .messageLine1 {\n    stroke-width: 1.5;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.signalColor};\n  }\n\n  #arrowhead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .sequenceNumber {\n    fill: ${t.sequenceNumberColor};\n  }\n\n  #sequencenumber {\n    fill: ${t.signalColor};\n  }\n\n  #crosshead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .messageText {\n    fill: ${t.signalTextColor};\n    stroke: none;\n  }\n\n  .labelBox {\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBkgColor};\n  }\n\n  .labelText, .labelText > tspan {\n    fill: ${t.labelTextColor};\n    stroke: none;\n  }\n\n  .loopText, .loopText > tspan {\n    fill: ${t.loopTextColor};\n    stroke: none;\n  }\n\n  .loopLine {\n    stroke-width: 2px;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBorderColor};\n  }\n\n  .note {\n    //stroke: #decc93;\n    stroke: ${t.noteBorderColor};\n    fill: ${t.noteBkgColor};\n  }\n\n  .noteText, .noteText > tspan {\n    fill: ${t.noteTextColor};\n    stroke: none;\n  }\n\n  .activation0 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation1 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation2 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .actorPopupMenu {\n    position: absolute;\n  }\n\n  .actorPopupMenuPanel {\n    position: absolute;\n    fill: ${t.actorBkg};\n    box-shadow: 0px 8px 16px 0px rgba(0,0,0,0.2);\n    filter: drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));\n}\n  .actor-man line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n  .actor-man circle, line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n    stroke-width: 2px;\n  }\n`,wr=t=>`\ndefs #statediagram-barbEnd {\n    fill: ${t.transitionColor};\n    stroke: ${t.transitionColor};\n  }\ng.stateGroup text {\n  fill: ${t.nodeBorder};\n  stroke: none;\n  font-size: 10px;\n}\ng.stateGroup text {\n  fill: ${t.textColor};\n  stroke: none;\n  font-size: 10px;\n\n}\ng.stateGroup .state-title {\n  font-weight: bolder;\n  fill: ${t.stateLabelColor};\n}\n\ng.stateGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.stateGroup line {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.transition {\n  stroke: ${t.transitionColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.stateGroup .composit {\n  fill: ${t.background};\n  border-bottom: 1px\n}\n\n.stateGroup .alt-composit {\n  fill: #e0e0e0;\n  border-bottom: 1px\n}\n\n.state-note {\n  stroke: ${t.noteBorderColor};\n  fill: ${t.noteBkgColor};\n\n  text {\n    fill: ${t.noteTextColor};\n    stroke: none;\n    font-size: 10px;\n  }\n}\n\n.stateLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.edgeLabel .label rect {\n  fill: ${t.labelBackgroundColor};\n  opacity: 0.5;\n}\n.edgeLabel .label text {\n  fill: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n.label div .edgeLabel {\n  color: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n\n.stateLabel text {\n  fill: ${t.stateLabelColor};\n  font-size: 10px;\n  font-weight: bold;\n}\n\n.node circle.state-start {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node .fork-join {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node circle.state-end {\n  fill: ${t.innerEndBackground};\n  stroke: ${t.background};\n  stroke-width: 1.5\n}\n.end-state-inner {\n  fill: ${t.compositeBackground||t.background};\n  // stroke: ${t.background};\n  stroke-width: 1.5\n}\n\n.node rect {\n  fill: ${t.stateBkg||t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n.node polygon {\n  fill: ${t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};;\n  stroke-width: 1px;\n}\n#statediagram-barbEnd {\n  fill: ${t.lineColor};\n}\n\n.statediagram-cluster rect {\n  fill: ${t.compositeTitleBackground};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n\n.cluster-label, .nodeLabel {\n  color: ${t.stateLabelColor};\n}\n\n.statediagram-cluster rect.outer {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state .divider {\n  stroke: ${t.stateBorder||t.nodeBorder};\n}\n\n.statediagram-state .title-state {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-cluster.statediagram-cluster .inner {\n  fill: ${t.compositeBackground||t.background};\n}\n.statediagram-cluster.statediagram-cluster-alt .inner {\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.statediagram-cluster .inner {\n  rx:0;\n  ry:0;\n}\n\n.statediagram-state rect.basic {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state rect.divider {\n  stroke-dasharray: 10,10;\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.note-edge {\n  stroke-dasharray: 5;\n}\n\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n\n.statediagram-note text {\n  fill: ${t.noteTextColor};\n}\n\n.statediagram-note .nodeLabel {\n  color: ${t.noteTextColor};\n}\n.statediagram .edgeLabel {\n  color: red; // ${t.noteTextColor};\n}\n\n#dependencyStart, #dependencyEnd {\n  fill: ${t.lineColor};\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.statediagramTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,Er=t=>`.label {\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    color: ${t.textColor};\n  }\n  .mouth {\n    stroke: #666;\n  }\n\n  line {\n    stroke: ${t.textColor}\n  }\n\n  .legend {\n    fill: ${t.textColor};\n  }\n\n  .label text {\n    fill: #333;\n  }\n  .label {\n    color: ${t.textColor}\n  }\n\n  .face {\n    ${t.faceColor?`fill: ${t.faceColor}`:"fill: #FFF8DC"};\n    stroke: #999;\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 1.5px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .task-type-0, .section-type-0  {\n    ${t.fillType0?`fill: ${t.fillType0}`:""};\n  }\n  .task-type-1, .section-type-1  {\n    ${t.fillType0?`fill: ${t.fillType1}`:""};\n  }\n  .task-type-2, .section-type-2  {\n    ${t.fillType0?`fill: ${t.fillType2}`:""};\n  }\n  .task-type-3, .section-type-3  {\n    ${t.fillType0?`fill: ${t.fillType3}`:""};\n  }\n  .task-type-4, .section-type-4  {\n    ${t.fillType0?`fill: ${t.fillType4}`:""};\n  }\n  .task-type-5, .section-type-5  {\n    ${t.fillType0?`fill: ${t.fillType5}`:""};\n  }\n  .task-type-6, .section-type-6  {\n    ${t.fillType0?`fill: ${t.fillType6}`:""};\n  }\n  .task-type-7, .section-type-7  {\n    ${t.fillType0?`fill: ${t.fillType7}`:""};\n  }\n\n  .actor-0 {\n    ${t.actor0?`fill: ${t.actor0}`:""};\n  }\n  .actor-1 {\n    ${t.actor1?`fill: ${t.actor1}`:""};\n  }\n  .actor-2 {\n    ${t.actor2?`fill: ${t.actor2}`:""};\n  }\n  .actor-3 {\n    ${t.actor3?`fill: ${t.actor3}`:""};\n  }\n  .actor-4 {\n    ${t.actor4?`fill: ${t.actor4}`:""};\n  }\n  .actor-5 {\n    ${t.actor5?`fill: ${t.actor5}`:""};\n  }\n`,Cr=t=>`.person {\n    stroke: ${t.personBorder};\n    fill: ${t.personBkg};\n  }\n`,Tr={flowchart:mr,"flowchart-v2":mr,sequence:kr,gantt:br,classDiagram:fr,"classDiagram-v2":fr,class:fr,stateDiagram:wr,state:wr,info:_r,pie:xr,er:gr,error:yr,journey:Er,requirement:vr,c4:Cr},Sr=(t,e,n)=>{let r="";return t in Tr&&Tr[t]?r=Tr[t](n):Nt.warn(`No theme found for ${t}`),` & {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n    fill: ${n.textColor}\n  }\n\n  /* Classes common for multiple diagrams */\n\n  & .error-icon {\n    fill: ${n.errorBkgColor};\n  }\n  & .error-text {\n    fill: ${n.errorTextColor};\n    stroke: ${n.errorTextColor};\n  }\n\n  & .edge-thickness-normal {\n    stroke-width: 2px;\n  }\n  & .edge-thickness-thick {\n    stroke-width: 3.5px\n  }\n  & .edge-pattern-solid {\n    stroke-dasharray: 0;\n  }\n\n  & .edge-pattern-dashed{\n    stroke-dasharray: 3;\n  }\n  .edge-pattern-dotted {\n    stroke-dasharray: 2;\n  }\n\n  & .marker {\n    fill: ${n.lineColor};\n    stroke: ${n.lineColor};\n  }\n  & .marker.cross {\n    stroke: ${n.lineColor};\n  }\n\n  & svg {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n  }\n\n  ${r}\n\n  ${e}\n`};let Ar="",Lr="",Br="";const Nr=t=>Ft(t,ar()),Dr=function(){Ar="",Br="",Lr=""},Or=function(t){Ar=Nr(t).replace(/^\s+/g,"")},Mr=function(){return Ar||Lr},Ir=function(t){Br=Nr(t).replace(/\n\s+/g,"\n")},Fr=function(){return Br},$r=function(t){Lr=Nr(t)},Rr=function(){return Lr},Zr={setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,getAccDescription:Fr,setAccDescription:Ir,clear:Dr},Pr=Object.freeze(Object.defineProperty({__proto__:null,clear:Dr,default:Zr,getAccDescription:Fr,getAccTitle:Mr,getDiagramTitle:Rr,setAccDescription:Ir,setAccTitle:Or,setDiagramTitle:$r},Symbol.toStringTag,{value:"Module"}));let jr={};const Yr=function(t,e,n,r){Nt.debug("parseDirective is being called",e,n,r);try{if(void 0!==e)switch(e=e.trim(),n){case"open_directive":jr={};break;case"type_directive":if(!jr)throw new Error("currentDirective is undefined");jr.type=e.toLowerCase();break;case"arg_directive":if(!jr)throw new Error("currentDirective is undefined");jr.args=JSON.parse(e);break;case"close_directive":zr(t,jr,r),jr=void 0}}catch(i){Nt.error(`Error while rendering sequenceDiagram directive: ${e} jison context: ${n}`),Nt.error(i.message)}},zr=function(t,e,n){switch(Nt.info(`Directive type=${e.type} with args:`,e.args),e.type){case"init":case"initialize":["config"].forEach((t=>{void 0!==e.args[t]&&("flowchart-v2"===n&&(n="flowchart"),e.args[n]=e.args[t],delete e.args[t])})),Nt.info("sanitize in handleDirective",e.args),Wn(e.args),Nt.info("sanitize in handleDirective (done)",e.args),or(e.args);break;case"wrap":case"nowrap":t&&t.setWrap&&t.setWrap("wrap"===e.type);break;case"themeCss":Nt.warn("themeCss encountered");break;default:Nt.warn(`Unhandled directive: source: '%%{${e.type}: ${JSON.stringify(e.args?e.args:{})}}%%`,e)}},Ur=Nt,Wr=Dt,qr=ar,Hr=t=>Ft(t,qr()),Vr=pr,Gr=(t,e,n,r)=>Yr(t,e,n,r),Xr={},Kr=(t,e,n)=>{if(Xr[t])throw new Error(`Diagram ${t} already registered.`);var r,i;Xr[t]=e,n&&Cn(t,n),r=t,i=e.styles,Tr[r]=i,e.injectUtils&&e.injectUtils(Ur,Wr,qr,Hr,Vr,Pr,Gr)},Qr=t=>{if(t in Xr)return Xr[t];throw new Error(`Diagram ${t} not found.`)};var Jr=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,7],i=[1,5],a=[1,9],s=[1,6],o=[2,6],c=[1,16],l=[6,8,14,20,22,24,25,27,29,32,37,40,50,55],h=[8,14,20,22,24,25,27,29,32,37,40],u=[8,13,14,20,22,24,25,27,29,32,37,40],d=[1,26],p=[6,8,14,50,55],f=[8,14,55],g=[1,53],y=[1,52],m=[8,14,30,33,35,38,55],b=[1,67],_=[1,68],x=[1,69],v=[8,14,33,35,42,55],k={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,GG:6,document:7,EOF:8,":":9,DIR:10,options:11,body:12,OPT:13,NL:14,line:15,statement:16,commitStatement:17,mergeStatement:18,cherryPickStatement:19,acc_title:20,acc_title_value:21,acc_descr:22,acc_descr_value:23,acc_descr_multiline_value:24,section:25,branchStatement:26,CHECKOUT:27,ref:28,BRANCH:29,ORDER:30,NUM:31,CHERRY_PICK:32,COMMIT_ID:33,STR:34,COMMIT_TAG:35,EMPTYSTR:36,MERGE:37,COMMIT_TYPE:38,commitType:39,COMMIT:40,commit_arg:41,COMMIT_MSG:42,NORMAL:43,REVERSE:44,HIGHLIGHT:45,openDirective:46,typeDirective:47,closeDirective:48,argDirective:49,open_directive:50,type_directive:51,arg_directive:52,close_directive:53,ID:54,";":55,$accept:0,$end:1},terminals_:{2:"error",6:"GG",8:"EOF",9:":",10:"DIR",13:"OPT",14:"NL",20:"acc_title",21:"acc_title_value",22:"acc_descr",23:"acc_descr_value",24:"acc_descr_multiline_value",25:"section",27:"CHECKOUT",29:"BRANCH",30:"ORDER",31:"NUM",32:"CHERRY_PICK",33:"COMMIT_ID",34:"STR",35:"COMMIT_TAG",36:"EMPTYSTR",37:"MERGE",38:"COMMIT_TYPE",40:"COMMIT",42:"COMMIT_MSG",43:"NORMAL",44:"REVERSE",45:"HIGHLIGHT",50:"open_directive",51:"type_directive",52:"arg_directive",53:"close_directive",54:"ID",55:";"},productions_:[0,[3,2],[3,2],[3,3],[3,4],[3,5],[7,0],[7,2],[11,2],[11,1],[12,0],[12,2],[15,2],[15,1],[16,1],[16,1],[16,1],[16,2],[16,2],[16,1],[16,1],[16,1],[16,2],[26,2],[26,4],[19,3],[19,5],[19,5],[19,5],[19,5],[18,2],[18,4],[18,4],[18,4],[18,6],[18,6],[18,6],[18,6],[18,6],[18,6],[18,8],[18,8],[18,8],[18,8],[18,8],[18,8],[17,2],[17,3],[17,3],[17,5],[17,5],[17,3],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,3],[17,5],[17,5],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[41,0],[41,1],[39,1],[39,1],[39,1],[5,3],[5,5],[46,1],[47,1],[49,1],[48,1],[28,1],[28,1],[4,1],[4,1],[4,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 3:return a[o];case 4:return a[o-1];case 5:return r.setDirection(a[o-3]),a[o-1];case 7:r.setOptions(a[o-1]),this.$=a[o];break;case 8:a[o-1]+=a[o],this.$=a[o-1];break;case 10:this.$=[];break;case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 12:this.$=a[o-1];break;case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 20:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 22:r.checkout(a[o]);break;case 23:r.branch(a[o]);break;case 24:r.branch(a[o-2],a[o]);break;case 25:r.cherryPick(a[o],"",void 0);break;case 26:r.cherryPick(a[o-2],"",a[o]);break;case 27:case 29:r.cherryPick(a[o-2],"","");break;case 28:r.cherryPick(a[o],"",a[o-2]);break;case 30:r.merge(a[o],"","","");break;case 31:r.merge(a[o-2],a[o],"","");break;case 32:r.merge(a[o-2],"",a[o],"");break;case 33:r.merge(a[o-2],"","",a[o]);break;case 34:r.merge(a[o-4],a[o],"",a[o-2]);break;case 35:r.merge(a[o-4],"",a[o],a[o-2]);break;case 36:r.merge(a[o-4],"",a[o-2],a[o]);break;case 37:r.merge(a[o-4],a[o-2],a[o],"");break;case 38:r.merge(a[o-4],a[o-2],"",a[o]);break;case 39:r.merge(a[o-4],a[o],a[o-2],"");break;case 40:r.merge(a[o-6],a[o-4],a[o-2],a[o]);break;case 41:r.merge(a[o-6],a[o],a[o-4],a[o-2]);break;case 42:r.merge(a[o-6],a[o-4],a[o],a[o-2]);break;case 43:r.merge(a[o-6],a[o-2],a[o-4],a[o]);break;case 44:r.merge(a[o-6],a[o],a[o-2],a[o-4]);break;case 45:r.merge(a[o-6],a[o-2],a[o],a[o-4]);break;case 46:r.commit(a[o]);break;case 47:r.commit("","",r.commitType.NORMAL,a[o]);break;case 48:r.commit("","",a[o],"");break;case 49:r.commit("","",a[o],a[o-2]);break;case 50:r.commit("","",a[o-2],a[o]);break;case 51:r.commit("",a[o],r.commitType.NORMAL,"");break;case 52:r.commit("",a[o-2],r.commitType.NORMAL,a[o]);break;case 53:r.commit("",a[o],r.commitType.NORMAL,a[o-2]);break;case 54:r.commit("",a[o-2],a[o],"");break;case 55:r.commit("",a[o],a[o-2],"");break;case 56:r.commit("",a[o-4],a[o-2],a[o]);break;case 57:r.commit("",a[o-4],a[o],a[o-2]);break;case 58:r.commit("",a[o-2],a[o-4],a[o]);break;case 59:r.commit("",a[o],a[o-4],a[o-2]);break;case 60:r.commit("",a[o],a[o-2],a[o-4]);break;case 61:r.commit("",a[o-2],a[o],a[o-4]);break;case 62:r.commit(a[o],"",r.commitType.NORMAL,"");break;case 63:r.commit(a[o],"",r.commitType.NORMAL,a[o-2]);break;case 64:r.commit(a[o-2],"",r.commitType.NORMAL,a[o]);break;case 65:r.commit(a[o-2],"",a[o],"");break;case 66:r.commit(a[o],"",a[o-2],"");break;case 67:r.commit(a[o],a[o-2],r.commitType.NORMAL,"");break;case 68:r.commit(a[o-2],a[o],r.commitType.NORMAL,"");break;case 69:r.commit(a[o-4],"",a[o-2],a[o]);break;case 70:r.commit(a[o-4],"",a[o],a[o-2]);break;case 71:r.commit(a[o-2],"",a[o-4],a[o]);break;case 72:r.commit(a[o],"",a[o-4],a[o-2]);break;case 73:r.commit(a[o],"",a[o-2],a[o-4]);break;case 74:r.commit(a[o-2],"",a[o],a[o-4]);break;case 75:r.commit(a[o-4],a[o],a[o-2],"");break;case 76:r.commit(a[o-4],a[o-2],a[o],"");break;case 77:r.commit(a[o-2],a[o],a[o-4],"");break;case 78:r.commit(a[o],a[o-2],a[o-4],"");break;case 79:r.commit(a[o],a[o-4],a[o-2],"");break;case 80:r.commit(a[o-2],a[o-4],a[o],"");break;case 81:r.commit(a[o-4],a[o],r.commitType.NORMAL,a[o-2]);break;case 82:r.commit(a[o-4],a[o-2],r.commitType.NORMAL,a[o]);break;case 83:r.commit(a[o-2],a[o],r.commitType.NORMAL,a[o-4]);break;case 84:r.commit(a[o],a[o-2],r.commitType.NORMAL,a[o-4]);break;case 85:r.commit(a[o],a[o-4],r.commitType.NORMAL,a[o-2]);break;case 86:r.commit(a[o-2],a[o-4],r.commitType.NORMAL,a[o]);break;case 87:r.commit(a[o-6],a[o-4],a[o-2],a[o]);break;case 88:r.commit(a[o-6],a[o-4],a[o],a[o-2]);break;case 89:r.commit(a[o-6],a[o-2],a[o-4],a[o]);break;case 90:r.commit(a[o-6],a[o],a[o-4],a[o-2]);break;case 91:r.commit(a[o-6],a[o-2],a[o],a[o-4]);break;case 92:r.commit(a[o-6],a[o],a[o-2],a[o-4]);break;case 93:r.commit(a[o-4],a[o-6],a[o-2],a[o]);break;case 94:r.commit(a[o-4],a[o-6],a[o],a[o-2]);break;case 95:r.commit(a[o-2],a[o-6],a[o-4],a[o]);break;case 96:r.commit(a[o],a[o-6],a[o-4],a[o-2]);break;case 97:r.commit(a[o-2],a[o-6],a[o],a[o-4]);break;case 98:r.commit(a[o],a[o-6],a[o-2],a[o-4]);break;case 99:r.commit(a[o],a[o-4],a[o-2],a[o-6]);break;case 100:r.commit(a[o-2],a[o-4],a[o],a[o-6]);break;case 101:r.commit(a[o],a[o-2],a[o-4],a[o-6]);break;case 102:r.commit(a[o-2],a[o],a[o-4],a[o-6]);break;case 103:r.commit(a[o-4],a[o-2],a[o],a[o-6]);break;case 104:r.commit(a[o-4],a[o],a[o-2],a[o-6]);break;case 105:r.commit(a[o-2],a[o-4],a[o-6],a[o]);break;case 106:r.commit(a[o],a[o-4],a[o-6],a[o-2]);break;case 107:r.commit(a[o-2],a[o],a[o-6],a[o-4]);break;case 108:r.commit(a[o],a[o-2],a[o-6],a[o-4]);break;case 109:r.commit(a[o-4],a[o-2],a[o-6],a[o]);break;case 110:r.commit(a[o-4],a[o],a[o-6],a[o-2]);break;case 111:this.$="";break;case 112:this.$=a[o];break;case 113:this.$=r.commitType.NORMAL;break;case 114:this.$=r.commitType.REVERSE;break;case 115:this.$=r.commitType.HIGHLIGHT;break;case 118:r.parseDirective("%%{","open_directive");break;case 119:r.parseDirective(a[o],"type_directive");break;case 120:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 121:r.parseDirective("}%%","close_directive","gitGraph")}},table:[{3:1,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{1:[3]},{3:10,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{3:11,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{7:12,8:o,9:[1,13],10:[1,14],11:15,14:c},e(l,[2,124]),e(l,[2,125]),e(l,[2,126]),{47:17,51:[1,18]},{51:[2,118]},{1:[2,1]},{1:[2,2]},{8:[1,19]},{7:20,8:o,11:15,14:c},{9:[1,21]},e(h,[2,10],{12:22,13:[1,23]}),e(u,[2,9]),{9:[1,25],48:24,53:d},e([9,53],[2,119]),{1:[2,3]},{8:[1,27]},{7:28,8:o,11:15,14:c},{8:[2,7],14:[1,31],15:29,16:30,17:32,18:33,19:34,20:[1,35],22:[1,36],24:[1,37],25:[1,38],26:39,27:[1,40],29:[1,44],32:[1,43],37:[1,42],40:[1,41]},e(u,[2,8]),e(p,[2,116]),{49:45,52:[1,46]},e(p,[2,121]),{1:[2,4]},{8:[1,47]},e(h,[2,11]),{4:48,8:r,14:i,55:s},e(h,[2,13]),e(f,[2,14]),e(f,[2,15]),e(f,[2,16]),{21:[1,49]},{23:[1,50]},e(f,[2,19]),e(f,[2,20]),e(f,[2,21]),{28:51,34:g,54:y},e(f,[2,111],{41:54,33:[1,57],34:[1,59],35:[1,55],38:[1,56],42:[1,58]}),{28:60,34:g,54:y},{33:[1,61],35:[1,62]},{28:63,34:g,54:y},{48:64,53:d},{53:[2,120]},{1:[2,5]},e(h,[2,12]),e(f,[2,17]),e(f,[2,18]),e(f,[2,22]),e(m,[2,122]),e(m,[2,123]),e(f,[2,46]),{34:[1,65]},{39:66,43:b,44:_,45:x},{34:[1,70]},{34:[1,71]},e(f,[2,112]),e(f,[2,30],{33:[1,72],35:[1,74],38:[1,73]}),{34:[1,75]},{34:[1,76],36:[1,77]},e(f,[2,23],{30:[1,78]}),e(p,[2,117]),e(f,[2,47],{33:[1,80],38:[1,79],42:[1,81]}),e(f,[2,48],{33:[1,83],35:[1,82],42:[1,84]}),e(v,[2,113]),e(v,[2,114]),e(v,[2,115]),e(f,[2,51],{35:[1,85],38:[1,86],42:[1,87]}),e(f,[2,62],{33:[1,90],35:[1,88],38:[1,89]}),{34:[1,91]},{39:92,43:b,44:_,45:x},{34:[1,93]},e(f,[2,25],{35:[1,94]}),{33:[1,95]},{33:[1,96]},{31:[1,97]},{39:98,43:b,44:_,45:x},{34:[1,99]},{34:[1,100]},{34:[1,101]},{34:[1,102]},{34:[1,103]},{34:[1,104]},{39:105,43:b,44:_,45:x},{34:[1,106]},{34:[1,107]},{39:108,43:b,44:_,45:x},{34:[1,109]},e(f,[2,31],{35:[1,111],38:[1,110]}),e(f,[2,32],{33:[1,113],35:[1,112]}),e(f,[2,33],{33:[1,114],38:[1,115]}),{34:[1,116],36:[1,117]},{34:[1,118]},{34:[1,119]},e(f,[2,24]),e(f,[2,49],{33:[1,120],42:[1,121]}),e(f,[2,53],{38:[1,122],42:[1,123]}),e(f,[2,63],{33:[1,125],38:[1,124]}),e(f,[2,50],{33:[1,126],42:[1,127]}),e(f,[2,55],{35:[1,128],42:[1,129]}),e(f,[2,66],{33:[1,131],35:[1,130]}),e(f,[2,52],{38:[1,132],42:[1,133]}),e(f,[2,54],{35:[1,134],42:[1,135]}),e(f,[2,67],{35:[1,137],38:[1,136]}),e(f,[2,64],{33:[1,139],38:[1,138]}),e(f,[2,65],{33:[1,141],35:[1,140]}),e(f,[2,68],{35:[1,143],38:[1,142]}),{39:144,43:b,44:_,45:x},{34:[1,145]},{34:[1,146]},{34:[1,147]},{34:[1,148]},{39:149,43:b,44:_,45:x},e(f,[2,26]),e(f,[2,27]),e(f,[2,28]),e(f,[2,29]),{34:[1,150]},{34:[1,151]},{39:152,43:b,44:_,45:x},{34:[1,153]},{39:154,43:b,44:_,45:x},{34:[1,155]},{34:[1,156]},{34:[1,157]},{34:[1,158]},{34:[1,159]},{34:[1,160]},{34:[1,161]},{39:162,43:b,44:_,45:x},{34:[1,163]},{34:[1,164]},{34:[1,165]},{39:166,43:b,44:_,45:x},{34:[1,167]},{39:168,43:b,44:_,45:x},{34:[1,169]},{34:[1,170]},{34:[1,171]},{39:172,43:b,44:_,45:x},{34:[1,173]},e(f,[2,37],{35:[1,174]}),e(f,[2,38],{38:[1,175]}),e(f,[2,36],{33:[1,176]}),e(f,[2,39],{35:[1,177]}),e(f,[2,34],{38:[1,178]}),e(f,[2,35],{33:[1,179]}),e(f,[2,60],{42:[1,180]}),e(f,[2,73],{33:[1,181]}),e(f,[2,61],{42:[1,182]}),e(f,[2,84],{38:[1,183]}),e(f,[2,74],{33:[1,184]}),e(f,[2,83],{38:[1,185]}),e(f,[2,59],{42:[1,186]}),e(f,[2,72],{33:[1,187]}),e(f,[2,58],{42:[1,188]}),e(f,[2,78],{35:[1,189]}),e(f,[2,71],{33:[1,190]}),e(f,[2,77],{35:[1,191]}),e(f,[2,57],{42:[1,192]}),e(f,[2,85],{38:[1,193]}),e(f,[2,56],{42:[1,194]}),e(f,[2,79],{35:[1,195]}),e(f,[2,80],{35:[1,196]}),e(f,[2,86],{38:[1,197]}),e(f,[2,70],{33:[1,198]}),e(f,[2,81],{38:[1,199]}),e(f,[2,69],{33:[1,200]}),e(f,[2,75],{35:[1,201]}),e(f,[2,76],{35:[1,202]}),e(f,[2,82],{38:[1,203]}),{34:[1,204]},{39:205,43:b,44:_,45:x},{34:[1,206]},{34:[1,207]},{39:208,43:b,44:_,45:x},{34:[1,209]},{34:[1,210]},{34:[1,211]},{34:[1,212]},{39:213,43:b,44:_,45:x},{34:[1,214]},{39:215,43:b,44:_,45:x},{34:[1,216]},{34:[1,217]},{34:[1,218]},{34:[1,219]},{34:[1,220]},{34:[1,221]},{34:[1,222]},{39:223,43:b,44:_,45:x},{34:[1,224]},{34:[1,225]},{34:[1,226]},{39:227,43:b,44:_,45:x},{34:[1,228]},{39:229,43:b,44:_,45:x},{34:[1,230]},{34:[1,231]},{34:[1,232]},{39:233,43:b,44:_,45:x},e(f,[2,40]),e(f,[2,42]),e(f,[2,41]),e(f,[2,43]),e(f,[2,45]),e(f,[2,44]),e(f,[2,101]),e(f,[2,102]),e(f,[2,99]),e(f,[2,100]),e(f,[2,104]),e(f,[2,103]),e(f,[2,108]),e(f,[2,107]),e(f,[2,106]),e(f,[2,105]),e(f,[2,110]),e(f,[2,109]),e(f,[2,98]),e(f,[2,97]),e(f,[2,96]),e(f,[2,95]),e(f,[2,93]),e(f,[2,94]),e(f,[2,92]),e(f,[2,91]),e(f,[2,90]),e(f,[2,89]),e(f,[2,87]),e(f,[2,88])],defaultActions:{9:[2,118],10:[2,1],11:[2,2],19:[2,3],27:[2,4],46:[2,120],47:[2,5]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),50;case 1:return this.begin("type_directive"),51;case 2:return this.popState(),this.begin("arg_directive"),9;case 3:return this.popState(),this.popState(),53;case 4:return 52;case 5:return this.begin("acc_title"),20;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),22;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 34:case 38:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:return 14;case 13:case 14:break;case 15:return 6;case 16:return 40;case 17:return 33;case 18:return 38;case 19:return 42;case 20:return 43;case 21:return 44;case 22:return 45;case 23:return 35;case 24:return 29;case 25:return 30;case 26:return 37;case 27:return 32;case 28:return 27;case 29:case 30:return 10;case 31:return 9;case 32:return"CARET";case 33:this.begin("options");break;case 35:return 13;case 36:return 36;case 37:this.begin("string");break;case 39:return 34;case 40:return 31;case 41:return 54;case 42:return 8}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:gitGraph\b)/i,/^(?:commit(?=\s|$))/i,/^(?:id:)/i,/^(?:type:)/i,/^(?:msg:)/i,/^(?:NORMAL\b)/i,/^(?:REVERSE\b)/i,/^(?:HIGHLIGHT\b)/i,/^(?:tag:)/i,/^(?:branch(?=\s|$))/i,/^(?:order:)/i,/^(?:merge(?=\s|$))/i,/^(?:cherry-pick(?=\s|$))/i,/^(?:checkout(?=\s|$))/i,/^(?:LR\b)/i,/^(?:BT\b)/i,/^(?::)/i,/^(?:\^)/i,/^(?:options\r?\n)/i,/^(?:[ \r\n\t]+end\b)/i,/^(?:[\s\S]+(?=[ \r\n\t]+end))/i,/^(?:["]["])/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[0-9]+(?=\s|$))/i,/^(?:\w([-\./\w]*[-\w])?)/i,/^(?:$)/i,/^(?:\s+)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},options:{rules:[34,35],inclusive:!1},string:{rules:[38,39],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,36,37,40,41,42,43],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Jr.parser=Jr;const ti=Jr,ei=t=>null!==t.match(/^\s*gitGraph/);let ni=ar().gitGraph.mainBranchName,ri=ar().gitGraph.mainBranchOrder,ii={},ai=null,si={};si[ni]={name:ni,order:ri};let oi={};oi[ni]=ai;let ci=ni,li="LR",hi=0;function ui(){return $n({length:7})}let di={};const pi=function(t){if(t=Yt.sanitizeText(t,ar()),void 0===oi[t]){let e=new Error('Trying to checkout branch which is not yet created. (Help try using "branch '+t+'")');throw e.hash={text:"checkout "+t,token:"checkout "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"branch '+t+'"']},e}{ci=t;const e=oi[ci];ai=ii[e]}};function fi(t,e,n){const r=t.indexOf(e);-1===r?t.push(n):t.splice(r,1,n)}function gi(t){const e=t.reduce(((t,e)=>t.seq>e.seq?t:e),t[0]);let n="";t.forEach((function(t){n+=t===e?"\t*":"\t|"}));const r=[n,e.id,e.seq];for(let i in oi)oi[i]===e.id&&r.push(i);if(Nt.debug(r.join(" ")),e.parents&&2==e.parents.length){const n=ii[e.parents[0]];fi(t,e,n),t.push(ii[e.parents[1]])}else{if(0==e.parents.length)return;{const n=ii[e.parents];fi(t,e,n)}}gi(t=function(t,e){const n=Object.create(null);return t.reduce(((t,r)=>{const i=e(r);return n[i]||(n[i]=!0,t.push(r)),t}),[])}(t,(t=>t.id)))}const yi=function(){const t=Object.keys(ii).map((function(t){return ii[t]}));return t.forEach((function(t){Nt.debug(t.id)})),t.sort(((t,e)=>t.seq-e.seq)),t},mi={NORMAL:0,REVERSE:1,HIGHLIGHT:2,MERGE:3,CHERRY_PICK:4},bi={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gitGraph,setDirection:function(t){li=t},setOptions:function(t){Nt.debug("options str",t),t=(t=t&&t.trim())||"{}";try{di=JSON.parse(t)}catch(e){Nt.error("error while parsing gitGraph options",e.message)}},getOptions:function(){return di},commit:function(t,e,n,r){Nt.debug("Entering commit:",t,e,n,r),e=Yt.sanitizeText(e,ar()),t=Yt.sanitizeText(t,ar()),r=Yt.sanitizeText(r,ar());const i={id:e||hi+"-"+ui(),message:t,seq:hi++,type:n||mi.NORMAL,tag:r||"",parents:null==ai?[]:[ai.id],branch:ci};ai=i,ii[i.id]=i,oi[ci]=i.id,Nt.debug("in pushCommit "+i.id)},branch:function(t,e){if(t=Yt.sanitizeText(t,ar()),void 0!==oi[t]){let e=new Error('Trying to create an existing branch. (Help: Either use a new name if you want create a new branch or try using "checkout '+t+'")');throw e.hash={text:"branch "+t,token:"branch "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"checkout '+t+'"']},e}oi[t]=null!=ai?ai.id:null,si[t]={name:t,order:e?parseInt(e,10):null},pi(t),Nt.debug("in createBranch")},merge:function(t,e,n,r){t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar());const i=ii[oi[ci]],a=ii[oi[t]];if(ci===t){let e=new Error('Incorrect usage of "merge". Cannot merge a branch to itself');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(void 0===i||!i){let e=new Error('Incorrect usage of "merge". Current branch ('+ci+")has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["commit"]},e}if(void 0===oi[t]){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") does not exist");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch "+t]},e}if(void 0===a||!a){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"commit"']},e}if(i===a){let e=new Error('Incorrect usage of "merge". Both branches have same head');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(e&&void 0!==ii[e]){let i=new Error('Incorrect usage of "merge". Commit with id:'+e+" already exists, use different custom Id");throw i.hash={text:"merge "+t+e+n+r,token:"merge "+t+e+n+r,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["merge "+t+" "+e+"_UNIQUE "+n+" "+r]},i}const s={id:e||hi+"-"+ui(),message:"merged branch "+t+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,oi[t]],branch:ci,type:mi.MERGE,customType:n,customId:!!e,tag:r||""};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in mergeBranch")},cherryPick:function(t,e,n){if(Nt.debug("Entering cherryPick:",t,e,n),t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar()),n=Yt.sanitizeText(n,ar()),!t||void 0===ii[t]){let n=new Error('Incorrect usage of "cherryPick". Source commit id should exist and provided');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}let r=ii[t],i=r.branch;if(r.type===mi.MERGE){let n=new Error('Incorrect usage of "cherryPick". Source commit should not be a merge commit');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}if(!e||void 0===ii[e]){if(i===ci){let n=new Error('Incorrect usage of "cherryPick". Source commit is already on current branch');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const a=ii[oi[ci]];if(void 0===a||!a){let n=new Error('Incorrect usage of "cherry-pick". Current branch ('+ci+")has no commits");throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const s={id:hi+"-"+ui(),message:"cherry-picked "+r+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,r.id],branch:ci,type:mi.CHERRY_PICK,tag:n??"cherry-pick:"+r.id};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in cherryPick")}},checkout:pi,prettyPrint:function(){Nt.debug(ii);gi([yi()[0]])},clear:function(){ii={},ai=null;let t=ar().gitGraph.mainBranchName,e=ar().gitGraph.mainBranchOrder;oi={},oi[t]=null,si={},si[t]={name:t,order:e},ci=t,hi=0,Dr()},getBranchesAsObjArray:function(){const t=Object.values(si).map(((t,e)=>null!==t.order?t:{...t,order:parseFloat(`0.${e}`,10)})).sort(((t,e)=>t.order-e.order)).map((({name:t})=>({name:t})));return t},getBranches:function(){return oi},getCommits:function(){return ii},getCommitsArray:yi,getCurrentBranch:function(){return ci},getDirection:function(){return li},getHead:function(){return ai},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,setDiagramTitle:$r,getDiagramTitle:Rr,commitType:mi};let _i={};const xi=0,vi=1,ki=2,wi=3,Ei=4;let Ci={},Ti={},Si=[],Ai=0;const Li=(t,e,n)=>{const r=qr().gitGraph,i=t.append("g").attr("class","commit-bullets"),a=t.append("g").attr("class","commit-labels");let s=0;Object.keys(e).sort(((t,n)=>e[t].seq-e[n].seq)).forEach((t=>{const o=e[t],c=Ci[o.branch].pos,l=s+10;if(n){let t,e=void 0!==o.customType&&""!==o.customType?o.customType:o.type;switch(e){case xi:t="commit-normal";break;case vi:t="commit-reverse";break;case ki:t="commit-highlight";break;case wi:t="commit-merge";break;case Ei:t="commit-cherry-pick";break;default:t="commit-normal"}if(e===ki){const e=i.append("rect");e.attr("x",l-10),e.attr("y",c-10),e.attr("height",20),e.attr("width",20),e.attr("class",`commit ${o.id} commit-highlight${Ci[o.branch].index%8} ${t}-outer`),i.append("rect").attr("x",l-6).attr("y",c-6).attr("height",12).attr("width",12).attr("class",`commit ${o.id} commit${Ci[o.branch].index%8} ${t}-inner`)}else if(e===Ei)i.append("circle").attr("cx",l).attr("cy",c).attr("r",10).attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l-3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l+3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l+3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l-3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`);else{const n=i.append("circle");if(n.attr("cx",l),n.attr("cy",c),n.attr("r",o.type===wi?9:10),n.attr("class",`commit ${o.id} commit${Ci[o.branch].index%8}`),e===wi){const e=i.append("circle");e.attr("cx",l),e.attr("cy",c),e.attr("r",6),e.attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}if(e===vi){i.append("path").attr("d",`M ${l-5},${c-5}L${l+5},${c+5}M${l-5},${c+5}L${l+5},${c-5}`).attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}}}if(Ti[o.id]={x:s+10,y:c},n){const t=4,e=2;if(o.type!==Ei&&(o.customId&&o.type===wi||o.type!==wi)&&r.showCommitLabel){const t=a.append("g"),n=t.insert("rect").attr("class","commit-label-bkg"),i=t.append("text").attr("x",s).attr("y",c+25).attr("class","commit-label").text(o.id);let l=i.node().getBBox();if(n.attr("x",s+10-l.width/2-e).attr("y",c+13.5).attr("width",l.width+2*e).attr("height",l.height+2*e),i.attr("x",s+10-l.width/2),r.rotateCommitLabel){let e=-7.5-(l.width+10)/25*9.5,n=10+l.width/25*8.5;t.attr("transform","translate("+e+", "+n+") rotate("+"-45, "+s+", "+c+")")}}if(o.tag){const n=a.insert("polygon"),r=a.append("circle"),i=a.append("text").attr("y",c-16).attr("class","tag-label").text(o.tag);let l=i.node().getBBox();i.attr("x",s+10-l.width/2);const h=l.height/2,u=c-19.2;n.attr("class","tag-label-bkg").attr("points",`\n          ${s-l.width/2-t/2},${u+e}\n          ${s-l.width/2-t/2},${u-e}\n          ${s+10-l.width/2-t},${u-h-e}\n          ${s+10+l.width/2+t},${u-h-e}\n          ${s+10+l.width/2+t},${u+h+e}\n          ${s+10-l.width/2-t},${u+h+e}`),r.attr("cx",s-l.width/2+t/2).attr("cy",u).attr("r",1.5).attr("class","tag-hole")}}s+=50,s>Ai&&(Ai=s)}))},Bi=(t,e,n=0)=>{const r=t+Math.abs(t-e)/2;if(n>5)return r;if(Si.every((t=>Math.abs(t-r)>=10)))return Si.push(r),r;const i=Math.abs(t-e);return Bi(t,e-i/5,n+1)},Ni=(t,e,n,r)=>{const i=Ti[e.id],a=Ti[n.id],s=((t,e,n)=>Object.keys(n).filter((r=>n[r].branch===e.branch&&n[r].seq>t.seq&&n[r].seq<e.seq)).length>0)(e,n,r);let o,c="",l="",h=0,u=0,d=Ci[n.branch].index;if(s){c="A 10 10, 0, 0, 0,",l="A 10 10, 0, 0, 1,",h=10,u=10,d=Ci[n.branch].index;const t=i.y<a.y?Bi(i.y,a.y):Bi(a.y,i.y);o=i.y<a.y?`M ${i.x} ${i.y} L ${i.x} ${t-h} ${c} ${i.x+u} ${t} L ${a.x-h} ${t} ${l} ${a.x} ${t+u} L ${a.x} ${a.y}`:`M ${i.x} ${i.y} L ${i.x} ${t+h} ${l} ${i.x+u} ${t} L ${a.x-h} ${t} ${c} ${a.x} ${t-u} L ${a.x} ${a.y}`}else i.y<a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[n.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`),i.y>a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${a.x-h} ${i.y} ${c} ${a.x} ${i.y-u} L ${a.x} ${a.y}`),i.y===a.y&&(d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`);t.append("path").attr("d",o).attr("class","arrow arrow"+d%8)},Di=(t,e)=>{const n=qr().gitGraph,r=t.append("g");e.forEach(((t,e)=>{const i=e%8,a=Ci[t.name].pos,s=r.append("line");s.attr("x1",0),s.attr("y1",a),s.attr("x2",Ai),s.attr("y2",a),s.attr("class","branch branch"+i),Si.push(a);const o=(t=>{const e=document.createElementNS("http://www.w3.org/2000/svg","text");let n=[];n="string"==typeof t?t.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(t)?t:[];for(const r of n){const t=document.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),t.setAttribute("dy","1em"),t.setAttribute("x","0"),t.setAttribute("class","row"),t.textContent=r.trim(),e.appendChild(t)}return e})(t.name),c=r.insert("rect"),l=r.insert("g").attr("class","branchLabel").insert("g").attr("class","label branch-label"+i);l.node().appendChild(o);let h=o.getBBox();c.attr("class","branchLabelBkg label"+i).attr("rx",4).attr("ry",4).attr("x",-h.width-4-(!0===n.rotateCommitLabel?30:0)).attr("y",-h.height/2+8).attr("width",h.width+18).attr("height",h.height+4),l.attr("transform","translate("+(-h.width-14-(!0===n.rotateCommitLabel?30:0))+", "+(a-h.height/2-1)+")"),c.attr("transform","translate(-19, "+(a-h.height/2)+")")}))},Oi={draw:function(t,e,n,r){Ci={},Ti={},_i={},Ai=0,Si=[];const i=qr(),a=i.gitGraph;Nt.debug("in gitgraph renderer",t+"\n","id:",e,n),_i=r.db.getCommits();const s=r.db.getBranchesAsObjArray();let c=0;s.forEach(((t,e)=>{Ci[t.name]={pos:c,index:e},c+=50+(a.rotateCommitLabel?40:0)}));const l=(0,o.Ys)(`[id="${e}"]`);Li(l,_i,!1),a.showBranches&&Di(l,s),((t,e)=>{const n=t.append("g").attr("class","commit-arrows");Object.keys(e).forEach((t=>{const r=e[t];r.parents&&r.parents.length>0&&r.parents.forEach((t=>{Ni(n,e[t],r,e)}))}))})(l,_i),Li(l,_i,!0),Gn.insertTitle(l,"gitTitleText",a.titleTopMargin,r.db.getDiagramTitle()),Vr(void 0,l,a.diagramPadding,a.useMaxWidth??i.useMaxWidth)}},Mi=t=>`\n  .commit-id,\n  .commit-msg,\n  .branch-label {\n    fill: lightgrey;\n    color: lightgrey;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  ${[0,1,2,3,4,5,6,7].map((e=>`\n        .branch-label${e} { fill: ${t["gitBranchLabel"+e]}; }\n        .commit${e} { stroke: ${t["git"+e]}; fill: ${t["git"+e]}; }\n        .commit-highlight${e} { stroke: ${t["gitInv"+e]}; fill: ${t["gitInv"+e]}; }\n        .label${e}  { fill: ${t["git"+e]}; }\n        .arrow${e} { stroke: ${t["git"+e]}; }\n        `)).join("\n")}\n\n  .branch {\n    stroke-width: 1;\n    stroke: ${t.lineColor};\n    stroke-dasharray: 2;\n  }\n  .commit-label { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelColor};}\n  .commit-label-bkg { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelBackground}; opacity: 0.5; }\n  .tag-label { font-size: ${t.tagLabelFontSize}; fill: ${t.tagLabelColor};}\n  .tag-label-bkg { fill: ${t.tagLabelBackground}; stroke: ${t.tagLabelBorder}; }\n  .tag-hole { fill: ${t.textColor}; }\n\n  .commit-merge {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n  .commit-reverse {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n    stroke-width: 3;\n  }\n  .commit-highlight-outer {\n  }\n  .commit-highlight-inner {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n\n  .arrow { stroke-width: 8; stroke-linecap: round; fill: none}\n  .gitTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n  }\n`;var Ii=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,6],r=[1,7],i=[1,8],a=[1,9],s=[1,16],o=[1,11],l=[1,12],h=[1,13],u=[1,14],d=[1,15],p=[1,27],f=[1,33],g=[1,34],y=[1,35],m=[1,36],b=[1,37],_=[1,72],x=[1,73],v=[1,74],k=[1,75],w=[1,76],E=[1,77],C=[1,78],T=[1,38],S=[1,39],A=[1,40],L=[1,41],B=[1,42],N=[1,43],D=[1,44],O=[1,45],M=[1,46],I=[1,47],F=[1,48],$=[1,49],R=[1,50],Z=[1,51],P=[1,52],j=[1,53],Y=[1,54],z=[1,55],U=[1,56],W=[1,57],q=[1,59],H=[1,60],V=[1,61],G=[1,62],X=[1,63],K=[1,64],Q=[1,65],J=[1,66],tt=[1,67],et=[1,68],nt=[1,69],rt=[24,52],it=[24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],at=[15,24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],st=[1,94],ot=[1,95],ct=[1,96],lt=[1,97],ht=[15,24,52],ut=[7,8,9,10,18,22,25,26,27,28],dt=[15,24,43,52],pt=[15,24,43,52,86,87,89,90],ft=[15,43],gt=[44,46,47,48,49,50,51,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],yt={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,direction:5,directive:6,direction_tb:7,direction_bt:8,direction_rl:9,direction_lr:10,graphConfig:11,openDirective:12,typeDirective:13,closeDirective:14,NEWLINE:15,":":16,argDirective:17,open_directive:18,type_directive:19,arg_directive:20,close_directive:21,C4_CONTEXT:22,statements:23,EOF:24,C4_CONTAINER:25,C4_COMPONENT:26,C4_DYNAMIC:27,C4_DEPLOYMENT:28,otherStatements:29,diagramStatements:30,otherStatement:31,title:32,accDescription:33,acc_title:34,acc_title_value:35,acc_descr:36,acc_descr_value:37,acc_descr_multiline_value:38,boundaryStatement:39,boundaryStartStatement:40,boundaryStopStatement:41,boundaryStart:42,LBRACE:43,ENTERPRISE_BOUNDARY:44,attributes:45,SYSTEM_BOUNDARY:46,BOUNDARY:47,CONTAINER_BOUNDARY:48,NODE:49,NODE_L:50,NODE_R:51,RBRACE:52,diagramStatement:53,PERSON:54,PERSON_EXT:55,SYSTEM:56,SYSTEM_DB:57,SYSTEM_QUEUE:58,SYSTEM_EXT:59,SYSTEM_EXT_DB:60,SYSTEM_EXT_QUEUE:61,CONTAINER:62,CONTAINER_DB:63,CONTAINER_QUEUE:64,CONTAINER_EXT:65,CONTAINER_EXT_DB:66,CONTAINER_EXT_QUEUE:67,COMPONENT:68,COMPONENT_DB:69,COMPONENT_QUEUE:70,COMPONENT_EXT:71,COMPONENT_EXT_DB:72,COMPONENT_EXT_QUEUE:73,REL:74,BIREL:75,REL_U:76,REL_D:77,REL_L:78,REL_R:79,REL_B:80,REL_INDEX:81,UPDATE_EL_STYLE:82,UPDATE_REL_STYLE:83,UPDATE_LAYOUT_CONFIG:84,attribute:85,STR:86,STR_KEY:87,STR_VALUE:88,ATTRIBUTE:89,ATTRIBUTE_EMPTY:90,$accept:0,$end:1},terminals_:{2:"error",7:"direction_tb",8:"direction_bt",9:"direction_rl",10:"direction_lr",15:"NEWLINE",16:":",18:"open_directive",19:"type_directive",20:"arg_directive",21:"close_directive",22:"C4_CONTEXT",24:"EOF",25:"C4_CONTAINER",26:"C4_COMPONENT",27:"C4_DYNAMIC",28:"C4_DEPLOYMENT",32:"title",33:"accDescription",34:"acc_title",35:"acc_title_value",36:"acc_descr",37:"acc_descr_value",38:"acc_descr_multiline_value",43:"LBRACE",44:"ENTERPRISE_BOUNDARY",46:"SYSTEM_BOUNDARY",47:"BOUNDARY",48:"CONTAINER_BOUNDARY",49:"NODE",50:"NODE_L",51:"NODE_R",52:"RBRACE",54:"PERSON",55:"PERSON_EXT",56:"SYSTEM",57:"SYSTEM_DB",58:"SYSTEM_QUEUE",59:"SYSTEM_EXT",60:"SYSTEM_EXT_DB",61:"SYSTEM_EXT_QUEUE",62:"CONTAINER",63:"CONTAINER_DB",64:"CONTAINER_QUEUE",65:"CONTAINER_EXT",66:"CONTAINER_EXT_DB",67:"CONTAINER_EXT_QUEUE",68:"COMPONENT",69:"COMPONENT_DB",70:"COMPONENT_QUEUE",71:"COMPONENT_EXT",72:"COMPONENT_EXT_DB",73:"COMPONENT_EXT_QUEUE",74:"REL",75:"BIREL",76:"REL_U",77:"REL_D",78:"REL_L",79:"REL_R",80:"REL_B",81:"REL_INDEX",82:"UPDATE_EL_STYLE",83:"UPDATE_REL_STYLE",84:"UPDATE_LAYOUT_CONFIG",86:"STR",87:"STR_KEY",88:"STR_VALUE",89:"ATTRIBUTE",90:"ATTRIBUTE_EMPTY"},productions_:[0,[3,1],[3,1],[3,2],[5,1],[5,1],[5,1],[5,1],[4,1],[6,4],[6,6],[12,1],[13,1],[17,1],[14,1],[11,4],[11,4],[11,4],[11,4],[11,4],[23,1],[23,1],[23,2],[29,1],[29,2],[29,3],[31,1],[31,1],[31,2],[31,2],[31,1],[39,3],[40,3],[40,3],[40,4],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[41,1],[30,1],[30,2],[30,3],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,1],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[45,1],[45,2],[85,1],[85,2],[85,1],[85,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setDirection("TB");break;case 5:r.setDirection("BT");break;case 6:r.setDirection("RL");break;case 7:r.setDirection("LR");break;case 11:r.parseDirective("%%{","open_directive");break;case 12:break;case 13:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 14:r.parseDirective("}%%","close_directive","c4Context");break;case 15:case 16:case 17:case 18:case 19:r.setC4Type(a[o-3]);break;case 26:r.setTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 27:r.setAccDescription(a[o].substring(15)),this.$=a[o].substring(15);break;case 28:this.$=a[o].trim(),r.setTitle(this.$);break;case 29:case 30:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 35:case 36:a[o].splice(2,0,"ENTERPRISE"),r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 37:r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 38:a[o].splice(2,0,"CONTAINER"),r.addContainerBoundary(...a[o]),this.$=a[o];break;case 39:r.addDeploymentNode("node",...a[o]),this.$=a[o];break;case 40:r.addDeploymentNode("nodeL",...a[o]),this.$=a[o];break;case 41:r.addDeploymentNode("nodeR",...a[o]),this.$=a[o];break;case 42:r.popBoundaryParseStack();break;case 46:r.addPersonOrSystem("person",...a[o]),this.$=a[o];break;case 47:r.addPersonOrSystem("external_person",...a[o]),this.$=a[o];break;case 48:r.addPersonOrSystem("system",...a[o]),this.$=a[o];break;case 49:r.addPersonOrSystem("system_db",...a[o]),this.$=a[o];break;case 50:r.addPersonOrSystem("system_queue",...a[o]),this.$=a[o];break;case 51:r.addPersonOrSystem("external_system",...a[o]),this.$=a[o];break;case 52:r.addPersonOrSystem("external_system_db",...a[o]),this.$=a[o];break;case 53:r.addPersonOrSystem("external_system_queue",...a[o]),this.$=a[o];break;case 54:r.addContainer("container",...a[o]),this.$=a[o];break;case 55:r.addContainer("container_db",...a[o]),this.$=a[o];break;case 56:r.addContainer("container_queue",...a[o]),this.$=a[o];break;case 57:r.addContainer("external_container",...a[o]),this.$=a[o];break;case 58:r.addContainer("external_container_db",...a[o]),this.$=a[o];break;case 59:r.addContainer("external_container_queue",...a[o]),this.$=a[o];break;case 60:r.addComponent("component",...a[o]),this.$=a[o];break;case 61:r.addComponent("component_db",...a[o]),this.$=a[o];break;case 62:r.addComponent("component_queue",...a[o]),this.$=a[o];break;case 63:r.addComponent("external_component",...a[o]),this.$=a[o];break;case 64:r.addComponent("external_component_db",...a[o]),this.$=a[o];break;case 65:r.addComponent("external_component_queue",...a[o]),this.$=a[o];break;case 67:r.addRel("rel",...a[o]),this.$=a[o];break;case 68:r.addRel("birel",...a[o]),this.$=a[o];break;case 69:r.addRel("rel_u",...a[o]),this.$=a[o];break;case 70:r.addRel("rel_d",...a[o]),this.$=a[o];break;case 71:r.addRel("rel_l",...a[o]),this.$=a[o];break;case 72:r.addRel("rel_r",...a[o]),this.$=a[o];break;case 73:r.addRel("rel_b",...a[o]),this.$=a[o];break;case 74:a[o].splice(0,1),r.addRel("rel",...a[o]),this.$=a[o];break;case 75:r.updateElStyle("update_el_style",...a[o]),this.$=a[o];break;case 76:r.updateRelStyle("update_rel_style",...a[o]),this.$=a[o];break;case 77:r.updateLayoutConfig("update_layout_config",...a[o]),this.$=a[o];break;case 78:this.$=[a[o]];break;case 79:a[o].unshift(a[o-1]),this.$=a[o];break;case 80:case 82:this.$=a[o].trim();break;case 81:let t={};t[a[o-1].trim()]=a[o].trim(),this.$=t;break;case 83:this.$=""}},table:[{3:1,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[3]},{1:[2,1]},{1:[2,2]},{3:17,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[2,8]},{1:[2,4]},{1:[2,5]},{1:[2,6]},{1:[2,7]},{13:18,19:[1,19]},{15:[1,20]},{15:[1,21]},{15:[1,22]},{15:[1,23]},{15:[1,24]},{19:[2,11]},{1:[2,3]},{14:25,16:[1,26],21:p},e([16,21],[2,12]),{23:28,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:79,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:80,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:81,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:82,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,83]},{17:84,20:[1,85]},{15:[2,14]},{24:[1,86]},e(rt,[2,20],{53:32,39:58,40:70,42:71,30:87,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(rt,[2,21]),e(it,[2,23],{15:[1,88]}),e(rt,[2,43],{15:[1,89]}),e(at,[2,26]),e(at,[2,27]),{35:[1,90]},{37:[1,91]},e(at,[2,30]),{45:92,85:93,86:st,87:ot,89:ct,90:lt},{45:98,85:93,86:st,87:ot,89:ct,90:lt},{45:99,85:93,86:st,87:ot,89:ct,90:lt},{45:100,85:93,86:st,87:ot,89:ct,90:lt},{45:101,85:93,86:st,87:ot,89:ct,90:lt},{45:102,85:93,86:st,87:ot,89:ct,90:lt},{45:103,85:93,86:st,87:ot,89:ct,90:lt},{45:104,85:93,86:st,87:ot,89:ct,90:lt},{45:105,85:93,86:st,87:ot,89:ct,90:lt},{45:106,85:93,86:st,87:ot,89:ct,90:lt},{45:107,85:93,86:st,87:ot,89:ct,90:lt},{45:108,85:93,86:st,87:ot,89:ct,90:lt},{45:109,85:93,86:st,87:ot,89:ct,90:lt},{45:110,85:93,86:st,87:ot,89:ct,90:lt},{45:111,85:93,86:st,87:ot,89:ct,90:lt},{45:112,85:93,86:st,87:ot,89:ct,90:lt},{45:113,85:93,86:st,87:ot,89:ct,90:lt},{45:114,85:93,86:st,87:ot,89:ct,90:lt},{45:115,85:93,86:st,87:ot,89:ct,90:lt},{45:116,85:93,86:st,87:ot,89:ct,90:lt},e(ht,[2,66]),{45:117,85:93,86:st,87:ot,89:ct,90:lt},{45:118,85:93,86:st,87:ot,89:ct,90:lt},{45:119,85:93,86:st,87:ot,89:ct,90:lt},{45:120,85:93,86:st,87:ot,89:ct,90:lt},{45:121,85:93,86:st,87:ot,89:ct,90:lt},{45:122,85:93,86:st,87:ot,89:ct,90:lt},{45:123,85:93,86:st,87:ot,89:ct,90:lt},{45:124,85:93,86:st,87:ot,89:ct,90:lt},{45:125,85:93,86:st,87:ot,89:ct,90:lt},{45:126,85:93,86:st,87:ot,89:ct,90:lt},{45:127,85:93,86:st,87:ot,89:ct,90:lt},{30:128,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,130],43:[1,129]},{45:131,85:93,86:st,87:ot,89:ct,90:lt},{45:132,85:93,86:st,87:ot,89:ct,90:lt},{45:133,85:93,86:st,87:ot,89:ct,90:lt},{45:134,85:93,86:st,87:ot,89:ct,90:lt},{45:135,85:93,86:st,87:ot,89:ct,90:lt},{45:136,85:93,86:st,87:ot,89:ct,90:lt},{45:137,85:93,86:st,87:ot,89:ct,90:lt},{24:[1,138]},{24:[1,139]},{24:[1,140]},{24:[1,141]},e(ut,[2,9]),{14:142,21:p},{21:[2,13]},{1:[2,15]},e(rt,[2,22]),e(it,[2,24],{31:31,29:143,32:f,33:g,34:y,36:m,38:b}),e(rt,[2,44],{29:29,30:30,31:31,53:32,39:58,40:70,42:71,23:144,32:f,33:g,34:y,36:m,38:b,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(at,[2,28]),e(at,[2,29]),e(ht,[2,46]),e(dt,[2,78],{85:93,45:145,86:st,87:ot,89:ct,90:lt}),e(pt,[2,80]),{88:[1,146]},e(pt,[2,82]),e(pt,[2,83]),e(ht,[2,47]),e(ht,[2,48]),e(ht,[2,49]),e(ht,[2,50]),e(ht,[2,51]),e(ht,[2,52]),e(ht,[2,53]),e(ht,[2,54]),e(ht,[2,55]),e(ht,[2,56]),e(ht,[2,57]),e(ht,[2,58]),e(ht,[2,59]),e(ht,[2,60]),e(ht,[2,61]),e(ht,[2,62]),e(ht,[2,63]),e(ht,[2,64]),e(ht,[2,65]),e(ht,[2,67]),e(ht,[2,68]),e(ht,[2,69]),e(ht,[2,70]),e(ht,[2,71]),e(ht,[2,72]),e(ht,[2,73]),e(ht,[2,74]),e(ht,[2,75]),e(ht,[2,76]),e(ht,[2,77]),{41:147,52:[1,148]},{15:[1,149]},{43:[1,150]},e(ft,[2,35]),e(ft,[2,36]),e(ft,[2,37]),e(ft,[2,38]),e(ft,[2,39]),e(ft,[2,40]),e(ft,[2,41]),{1:[2,16]},{1:[2,17]},{1:[2,18]},{1:[2,19]},{15:[1,151]},e(it,[2,25]),e(rt,[2,45]),e(dt,[2,79]),e(pt,[2,81]),e(ht,[2,31]),e(ht,[2,42]),e(gt,[2,32]),e(gt,[2,33],{15:[1,152]}),e(ut,[2,10]),e(gt,[2,34])],defaultActions:{2:[2,1],3:[2,2],5:[2,8],6:[2,4],7:[2,5],8:[2,6],9:[2,7],16:[2,11],17:[2,3],27:[2,14],85:[2,13],86:[2,15],138:[2,16],139:[2,17],140:[2,18],141:[2,19]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},mt=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),18;case 1:return 7;case 2:return 8;case 3:return 9;case 4:return 10;case 5:return this.begin("type_directive"),19;case 6:return this.popState(),this.begin("arg_directive"),16;case 7:return this.popState(),this.popState(),21;case 8:return 20;case 9:return 32;case 10:return 33;case 11:return this.begin("acc_title"),34;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),36;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 78:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:case 21:case 75:break;case 19:c;break;case 20:return 15;case 22:return 22;case 23:return 25;case 24:return 26;case 25:return 27;case 26:return 28;case 27:return this.begin("person_ext"),55;case 28:return this.begin("person"),54;case 29:return this.begin("system_ext_queue"),61;case 30:return this.begin("system_ext_db"),60;case 31:return this.begin("system_ext"),59;case 32:return this.begin("system_queue"),58;case 33:return this.begin("system_db"),57;case 34:return this.begin("system"),56;case 35:return this.begin("boundary"),47;case 36:return this.begin("enterprise_boundary"),44;case 37:return this.begin("system_boundary"),46;case 38:return this.begin("container_ext_queue"),67;case 39:return this.begin("container_ext_db"),66;case 40:return this.begin("container_ext"),65;case 41:return this.begin("container_queue"),64;case 42:return this.begin("container_db"),63;case 43:return this.begin("container"),62;case 44:return this.begin("container_boundary"),48;case 45:return this.begin("component_ext_queue"),73;case 46:return this.begin("component_ext_db"),72;case 47:return this.begin("component_ext"),71;case 48:return this.begin("component_queue"),70;case 49:return this.begin("component_db"),69;case 50:return this.begin("component"),68;case 51:case 52:return this.begin("node"),49;case 53:return this.begin("node_l"),50;case 54:return this.begin("node_r"),51;case 55:return this.begin("rel"),74;case 56:return this.begin("birel"),75;case 57:case 58:return this.begin("rel_u"),76;case 59:case 60:return this.begin("rel_d"),77;case 61:case 62:return this.begin("rel_l"),78;case 63:case 64:return this.begin("rel_r"),79;case 65:return this.begin("rel_b"),80;case 66:return this.begin("rel_index"),81;case 67:return this.begin("update_el_style"),82;case 68:return this.begin("update_rel_style"),83;case 69:return this.begin("update_layout_config"),84;case 70:return"EOF_IN_STRUCT";case 71:return this.begin("attribute"),"ATTRIBUTE_EMPTY";case 72:this.begin("attribute");break;case 73:case 84:this.popState(),this.popState();break;case 74:case 76:return 90;case 77:this.begin("string");break;case 79:case 85:return"STR";case 80:this.begin("string_kv");break;case 81:return this.begin("string_kv_key"),"STR_KEY";case 82:this.popState(),this.begin("string_kv_value");break;case 83:return"STR_VALUE";case 86:return"LBRACE";case 87:return"RBRACE";case 88:return"SPACE";case 89:return"EOL";case 90:return 24}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:title\s[^#\n;]+)/,/^(?:accDescription\s[^#\n;]+)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:C4Context\b)/,/^(?:C4Container\b)/,/^(?:C4Component\b)/,/^(?:C4Dynamic\b)/,/^(?:C4Deployment\b)/,/^(?:Person_Ext\b)/,/^(?:Person\b)/,/^(?:SystemQueue_Ext\b)/,/^(?:SystemDb_Ext\b)/,/^(?:System_Ext\b)/,/^(?:SystemQueue\b)/,/^(?:SystemDb\b)/,/^(?:System\b)/,/^(?:Boundary\b)/,/^(?:Enterprise_Boundary\b)/,/^(?:System_Boundary\b)/,/^(?:ContainerQueue_Ext\b)/,/^(?:ContainerDb_Ext\b)/,/^(?:Container_Ext\b)/,/^(?:ContainerQueue\b)/,/^(?:ContainerDb\b)/,/^(?:Container\b)/,/^(?:Container_Boundary\b)/,/^(?:ComponentQueue_Ext\b)/,/^(?:ComponentDb_Ext\b)/,/^(?:Component_Ext\b)/,/^(?:ComponentQueue\b)/,/^(?:ComponentDb\b)/,/^(?:Component\b)/,/^(?:Deployment_Node\b)/,/^(?:Node\b)/,/^(?:Node_L\b)/,/^(?:Node_R\b)/,/^(?:Rel\b)/,/^(?:BiRel\b)/,/^(?:Rel_Up\b)/,/^(?:Rel_U\b)/,/^(?:Rel_Down\b)/,/^(?:Rel_D\b)/,/^(?:Rel_Left\b)/,/^(?:Rel_L\b)/,/^(?:Rel_Right\b)/,/^(?:Rel_R\b)/,/^(?:Rel_Back\b)/,/^(?:RelIndex\b)/,/^(?:UpdateElementStyle\b)/,/^(?:UpdateRelStyle\b)/,/^(?:UpdateLayoutConfig\b)/,/^(?:$)/,/^(?:[(][ ]*[,])/,/^(?:[(])/,/^(?:[)])/,/^(?:,,)/,/^(?:,)/,/^(?:[ ]*["]["])/,/^(?:[ ]*["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[ ]*[\$])/,/^(?:[^=]*)/,/^(?:[=][ ]*["])/,/^(?:[^"]+)/,/^(?:["])/,/^(?:[^,]+)/,/^(?:\{)/,/^(?:\})/,/^(?:[\s]+)/,/^(?:[\n\r]+)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},string_kv_value:{rules:[83,84],inclusive:!1},string_kv_key:{rules:[82],inclusive:!1},string_kv:{rules:[81],inclusive:!1},string:{rules:[78,79],inclusive:!1},attribute:{rules:[73,74,75,76,77,80,85],inclusive:!1},update_layout_config:{rules:[70,71,72,73],inclusive:!1},update_rel_style:{rules:[70,71,72,73],inclusive:!1},update_el_style:{rules:[70,71,72,73],inclusive:!1},rel_b:{rules:[70,71,72,73],inclusive:!1},rel_r:{rules:[70,71,72,73],inclusive:!1},rel_l:{rules:[70,71,72,73],inclusive:!1},rel_d:{rules:[70,71,72,73],inclusive:!1},rel_u:{rules:[70,71,72,73],inclusive:!1},rel_bi:{rules:[],inclusive:!1},rel:{rules:[70,71,72,73],inclusive:!1},node_r:{rules:[70,71,72,73],inclusive:!1},node_l:{rules:[70,71,72,73],inclusive:!1},node:{rules:[70,71,72,73],inclusive:!1},index:{rules:[],inclusive:!1},rel_index:{rules:[70,71,72,73],inclusive:!1},component_ext_queue:{rules:[],inclusive:!1},component_ext_db:{rules:[70,71,72,73],inclusive:!1},component_ext:{rules:[70,71,72,73],inclusive:!1},component_queue:{rules:[70,71,72,73],inclusive:!1},component_db:{rules:[70,71,72,73],inclusive:!1},component:{rules:[70,71,72,73],inclusive:!1},container_boundary:{rules:[70,71,72,73],inclusive:!1},container_ext_queue:{rules:[],inclusive:!1},container_ext_db:{rules:[70,71,72,73],inclusive:!1},container_ext:{rules:[70,71,72,73],inclusive:!1},container_queue:{rules:[70,71,72,73],inclusive:!1},container_db:{rules:[70,71,72,73],inclusive:!1},container:{rules:[70,71,72,73],inclusive:!1},birel:{rules:[70,71,72,73],inclusive:!1},system_boundary:{rules:[70,71,72,73],inclusive:!1},enterprise_boundary:{rules:[70,71,72,73],inclusive:!1},boundary:{rules:[70,71,72,73],inclusive:!1},system_ext_queue:{rules:[70,71,72,73],inclusive:!1},system_ext_db:{rules:[70,71,72,73],inclusive:!1},system_ext:{rules:[70,71,72,73],inclusive:!1},system_queue:{rules:[70,71,72,73],inclusive:!1},system_db:{rules:[70,71,72,73],inclusive:!1},system:{rules:[70,71,72,73],inclusive:!1},person_ext:{rules:[70,71,72,73],inclusive:!1},person:{rules:[70,71,72,73],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,86,87,88,89,90],inclusive:!0}}},t);function bt(){this.yy={}}return yt.lexer=mt,bt.prototype=yt,yt.Parser=bt,new bt}();Ii.parser=Ii;const Fi=Ii,$i=t=>null!==t.match(/^\s*C4Context|C4Container|C4Component|C4Dynamic|C4Deployment/);let Ri=[],Zi=[""],Pi="global",ji="",Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],zi=[],Ui="",Wi=!1,qi=4,Hi=2;var Vi;const Gi=function(t){return null==t?Ri:Ri.filter((e=>e.parentBoundary===t))},Xi=function(){return Wi},Ki={addPersonOrSystem:function(t,e,n,r,i,a,s){if(null===e||null===n)return;let o={};const c=Ri.find((t=>t.alias===e));if(c&&e===c.alias?o=c:(o.alias=e,Ri.push(o)),o.label=null==n?{text:""}:{text:n},null==r)o.descr={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]={text:e}}else o.descr={text:r};if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.sprite=i;if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=e}else o.tags=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=e}else o.link=s;o.typeC4Shape={text:t},o.parentBoundary=Pi,o.wrap=Xi()},addPersonOrSystemBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"system"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addContainer:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addContainerBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"container"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addComponent:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addDeploymentNode:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Yi.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Yi.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.type={text:"node"};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.type={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.nodeType=t,c.parentBoundary=Pi,c.wrap=Xi(),ji=Pi,Pi=e,Zi.push(ji)},popBoundaryParseStack:function(){Pi=ji,Zi.pop(),ji=Zi.pop(),Zi.push(ji)},addRel:function(t,e,n,r,i,a,s,o,c){if(null==t||null==e||null==n||null==r)return;let l={};const h=zi.find((t=>t.from===e&&t.to===n));if(h?l=h:zi.push(l),l.type=t,l.from=e,l.to=n,l.label={text:r},null==i)l.techn={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];l[t]={text:e}}else l.techn={text:i};if(null==a)l.descr={text:""};else if("object"==typeof a){let[t,e]=Object.entries(a)[0];l[t]={text:e}}else l.descr={text:a};if("object"==typeof s){let[t,e]=Object.entries(s)[0];l[t]=e}else l.sprite=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];l[t]=e}else l.tags=o;if("object"==typeof c){let[t,e]=Object.entries(c)[0];l[t]=e}else l.link=c;l.wrap=Xi()},updateElStyle:function(t,e,n,r,i,a,s,o,c,l,h){let u=Ri.find((t=>t.alias===e));if(void 0!==u||(u=Yi.find((t=>t.alias===e)),void 0!==u)){if(null!=n)if("object"==typeof n){let[t,e]=Object.entries(n)[0];u[t]=e}else u.bgColor=n;if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];u[t]=e}else u.fontColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];u[t]=e}else u.borderColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];u[t]=e}else u.shadowing=a;if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];u[t]=e}else u.shape=s;if(null!=o)if("object"==typeof o){let[t,e]=Object.entries(o)[0];u[t]=e}else u.sprite=o;if(null!=c)if("object"==typeof c){let[t,e]=Object.entries(c)[0];u[t]=e}else u.techn=c;if(null!=l)if("object"==typeof l){let[t,e]=Object.entries(l)[0];u[t]=e}else u.legendText=l;if(null!=h)if("object"==typeof h){let[t,e]=Object.entries(h)[0];u[t]=e}else u.legendSprite=h}},updateRelStyle:function(t,e,n,r,i,a,s){const o=zi.find((t=>t.from===e&&t.to===n));if(void 0!==o){if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]=e}else o.textColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.lineColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=parseInt(e)}else o.offsetX=parseInt(a);if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=parseInt(e)}else o.offsetY=parseInt(s)}},updateLayoutConfig:function(t,e,n){let r=qi,i=Hi;if("object"==typeof e){const t=Object.values(e)[0];r=parseInt(t)}else r=parseInt(e);if("object"==typeof n){const t=Object.values(n)[0];i=parseInt(t)}else i=parseInt(n);r>=1&&(qi=r),i>=1&&(Hi=i)},autoWrap:Xi,setWrap:function(t){Wi=t},getC4ShapeArray:Gi,getC4Shape:function(t){return Ri.find((e=>e.alias===t))},getC4ShapeKeys:function(t){return Object.keys(Gi(t))},getBoundarys:function(t){return null==t?Yi:Yi.filter((e=>e.parentBoundary===t))},getCurrentBoundaryParse:function(){return Pi},getParentBoundaryParse:function(){return ji},getRels:function(){return zi},getTitle:function(){return Ui},getC4Type:function(){return Vi},getC4ShapeInRow:function(){return qi},getC4BoundaryInRow:function(){return Hi},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().c4,clear:function(){Ri=[],Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],ji="",Pi="global",Zi=[""],zi=[],Zi=[""],Ui="",Wi=!1,qi=4,Hi=2},LINETYPE:{SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25},ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},setTitle:function(t){let e=Ft(t,ar());Ui=e},setC4Type:function(t){let e=Ft(t,ar());Vi=e}},Qi=function(t,e){const n=t.append("rect");if(n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),"undefined"!==e.attrs&&null!==e.attrs)for(let r in e.attrs)n.attr(r,e.attrs[r]);return"undefined"!==e.class&&n.attr("class",e.class),n},Ji=function(t,e,n,r,i,a){const o=t.append("image");o.attr("width",e),o.attr("height",n),o.attr("x",r),o.attr("y",i);let c=a.startsWith("data:image/png;base64")?a:(0,s.N)(a);o.attr("xlink:href",c)},ta=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},ea=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),na=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{fontSize:l,fontFamily:h,fontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,s=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").attr("dominant-baseline","middle").style("font-size",l).style("font-weight",u).style("font-family",h);s.append("tspan").attr("dy",t).text(d[p]).attr("alignment-baseline","mathematical"),r(s,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,0,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),ra=function(t,e,n){const r=t.append("g");let i=e.bgColor?e.bgColor:"none",a=e.borderColor?e.borderColor:"#444444",s=e.fontColor?e.fontColor:"black",o={"stroke-width":1,"stroke-dasharray":"7.0,7.0"};e.nodeType&&(o={"stroke-width":1});let c={x:e.x,y:e.y,fill:i,stroke:a,width:e.width,height:e.height,rx:2.5,ry:2.5,attrs:o};Qi(r,c);let l=n.boundaryFont();l.fontWeight="bold",l.fontSize=l.fontSize+2,l.fontColor=s,na(n)(e.label.text,r,e.x,e.y+e.label.Y,e.width,e.height,{fill:"#444444"},l),e.type&&""!==e.type.text&&(l=n.boundaryFont(),l.fontColor=s,na(n)(e.type.text,r,e.x,e.y+e.type.Y,e.width,e.height,{fill:"#444444"},l)),e.descr&&""!==e.descr.text&&(l=n.boundaryFont(),l.fontSize=l.fontSize-2,l.fontColor=s,na(n)(e.descr.text,r,e.x,e.y+e.descr.Y,e.width,e.height,{fill:"#444444"},l))},ia=function(t,e,n){var r;let i=e.bgColor?e.bgColor:n[e.typeC4Shape.text+"_bg_color"],a=e.borderColor?e.borderColor:n[e.typeC4Shape.text+"_border_color"],s=e.fontColor?e.fontColor:"#FFFFFF",o="data:image/png;base64,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";switch(e.typeC4Shape.text){case"person":o="data:image/png;base64,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";break;case"external_person":o="data:image/png;base64,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"}const c=t.append("g");c.attr("class","person-man");const l=ta();switch(e.typeC4Shape.text){case"person":case"external_person":case"system":case"external_system":case"container":case"external_container":case"component":case"external_component":l.x=e.x,l.y=e.y,l.fill=i,l.width=e.width,l.height=e.height,l.stroke=a,l.rx=2.5,l.ry=2.5,l.attrs={"stroke-width":.5},Qi(c,l);break;case"system_db":case"external_system_db":case"container_db":case"external_container_db":case"component_db":case"external_component_db":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,-10 half,-10 half,-10c0,0 half,0 half,10l0,heightc0,10 -half,10 -half,10c0,0 -half,0 -half,-10l0,-height".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2).replaceAll("height",e.height)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,10 half,10 half,10c0,0 half,0 half,-10".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2));break;case"system_queue":case"external_system_queue":case"container_queue":case"external_container_queue":case"component_queue":case"external_component_queue":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startylwidth,0c5,0 5,half 5,halfc0,0 0,half -5,halfl-width,0c-5,0 -5,-half -5,-halfc0,0 0,-half 5,-half".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("width",e.width).replaceAll("half",e.height/2)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc-5,0 -5,half -5,halfc0,half 5,half 5,half".replaceAll("startx",e.x+e.width).replaceAll("starty",e.y).replaceAll("half",e.height/2))}let h=ea(n,e.typeC4Shape.text);switch(c.append("text").attr("fill",s).attr("font-family",h.fontFamily).attr("font-size",h.fontSize-2).attr("font-style","italic").attr("lengthAdjust","spacing").attr("textLength",e.typeC4Shape.width).attr("x",e.x+e.width/2-e.typeC4Shape.width/2).attr("y",e.y+e.typeC4Shape.Y).text("<<"+e.typeC4Shape.text+">>"),e.typeC4Shape.text){case"person":case"external_person":Ji(c,48,48,e.x+e.width/2-24,e.y+e.image.Y,o)}let u=n[e.typeC4Shape.text+"Font"]();return u.fontWeight="bold",u.fontSize=u.fontSize+2,u.fontColor=s,na(n)(e.label.text,c,e.x,e.y+e.label.Y,e.width,e.height,{fill:s},u),u=n[e.typeC4Shape.text+"Font"](),u.fontColor=s,e.techn&&""!==(null==(r=e.techn)?void 0:r.text)?na(n)(e.techn.text,c,e.x,e.y+e.techn.Y,e.width,e.height,{fill:s,"font-style":"italic"},u):e.type&&""!==e.type.text&&na(n)(e.type.text,c,e.x,e.y+e.type.Y,e.width,e.height,{fill:s,"font-style":"italic"},u),e.descr&&""!==e.descr.text&&(u=n.personFont(),u.fontColor=s,na(n)(e.descr.text,c,e.x,e.y+e.descr.Y,e.width,e.height,{fill:s},u)),e.height},aa=(t,e,n)=>{const r=t.append("g");let i=0;for(let a of e){let t=a.textColor?a.textColor:"#444444",e=a.lineColor?a.lineColor:"#444444",s=a.offsetX?parseInt(a.offsetX):0,o=a.offsetY?parseInt(a.offsetY):0,c="";if(0===i){let t=r.append("line");t.attr("x1",a.startPoint.x),t.attr("y1",a.startPoint.y),t.attr("x2",a.endPoint.x),t.attr("y2",a.endPoint.y),t.attr("stroke-width","1"),t.attr("stroke",e),t.style("fill","none"),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)"),i=-1}else{let t=r.append("path");t.attr("fill","none").attr("stroke-width","1").attr("stroke",e).attr("d","Mstartx,starty Qcontrolx,controly stopx,stopy ".replaceAll("startx",a.startPoint.x).replaceAll("starty",a.startPoint.y).replaceAll("controlx",a.startPoint.x+(a.endPoint.x-a.startPoint.x)/2-(a.endPoint.x-a.startPoint.x)/4).replaceAll("controly",a.startPoint.y+(a.endPoint.y-a.startPoint.y)/2).replaceAll("stopx",a.endPoint.x).replaceAll("stopy",a.endPoint.y)),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)")}let l=n.messageFont();na(n)(a.label.text,r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+o,a.label.width,a.label.height,{fill:t},l),a.techn&&""!==a.techn.text&&(l=n.messageFont(),na(n)("["+a.techn.text+"]",r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+n.messageFontSize+5+o,Math.max(a.label.width,a.techn.width),a.techn.height,{fill:t,"font-style":"italic"},l))}},sa=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},oa=function(t){t.append("defs").append("marker").attr("id","arrowend").attr("refX",1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 10 0 L 0 5 L 10 10 z")},ca=function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},la=function(t){const e=t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",16).attr("refY",4);e.append("path").attr("fill","black").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 9,2 V 6 L16,4 Z"),e.append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 0,1 L 6,7 M 6,1 L 0,7")},ha=function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},ua=function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},da=function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")};s.N;let pa=0,fa=0,ga=4,ya=2;Ii.yy=Ki;let ma={};class ba{constructor(t){this.name="",this.data={},this.data.startx=void 0,this.data.stopx=void 0,this.data.starty=void 0,this.data.stopy=void 0,this.data.widthLimit=void 0,this.nextData={},this.nextData.startx=void 0,this.nextData.stopx=void 0,this.nextData.starty=void 0,this.nextData.stopy=void 0,this.nextData.cnt=0,_a(t.db.getConfig())}setData(t,e,n,r){this.nextData.startx=this.data.startx=t,this.nextData.stopx=this.data.stopx=e,this.nextData.starty=this.data.starty=n,this.nextData.stopy=this.data.stopy=r}updateVal(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])}insert(t){this.nextData.cnt=this.nextData.cnt+1;let e=this.nextData.startx===this.nextData.stopx?this.nextData.stopx+t.margin:this.nextData.stopx+2*t.margin,n=e+t.width,r=this.nextData.starty+2*t.margin,i=r+t.height;(e>=this.data.widthLimit||n>=this.data.widthLimit||this.nextData.cnt>ga)&&(e=this.nextData.startx+t.margin+ma.nextLinePaddingX,r=this.nextData.stopy+2*t.margin,this.nextData.stopx=n=e+t.width,this.nextData.starty=this.nextData.stopy,this.nextData.stopy=i=r+t.height,this.nextData.cnt=1),t.x=e,t.y=r,this.updateVal(this.data,"startx",e,Math.min),this.updateVal(this.data,"starty",r,Math.min),this.updateVal(this.data,"stopx",n,Math.max),this.updateVal(this.data,"stopy",i,Math.max),this.updateVal(this.nextData,"startx",e,Math.min),this.updateVal(this.nextData,"starty",r,Math.min),this.updateVal(this.nextData,"stopx",n,Math.max),this.updateVal(this.nextData,"stopy",i,Math.max)}init(t){this.name="",this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,widthLimit:void 0},this.nextData={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,cnt:0},_a(t.db.getConfig())}bumpLastMargin(t){this.data.stopx+=t,this.data.stopy+=t}}const _a=function(t){Sn(ma,t),t.fontFamily&&(ma.personFontFamily=ma.systemFontFamily=ma.messageFontFamily=t.fontFamily),t.fontSize&&(ma.personFontSize=ma.systemFontSize=ma.messageFontSize=t.fontSize),t.fontWeight&&(ma.personFontWeight=ma.systemFontWeight=ma.messageFontWeight=t.fontWeight)},xa=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),va=t=>({fontFamily:t.boundaryFontFamily,fontSize:t.boundaryFontSize,fontWeight:t.boundaryFontWeight});function ka(t,e,n,r,i){if(!e[t].width)if(n)e[t].text=Zn(e[t].text,i,r),e[t].textLines=e[t].text.split(Yt.lineBreakRegex).length,e[t].width=i,e[t].height=jn(e[t].text,r);else{let n=e[t].text.split(Yt.lineBreakRegex);e[t].textLines=n.length;let i=0;e[t].height=0,e[t].width=0;for(const a of n)e[t].width=Math.max(Yn(a,r),e[t].width),i=jn(a,r),e[t].height=e[t].height+i}}const wa=function(t,e,n){e.x=n.data.startx,e.y=n.data.starty,e.width=n.data.stopx-n.data.startx,e.height=n.data.stopy-n.data.starty,e.label.y=ma.c4ShapeMargin-35;let r=e.wrap&&ma.wrap,i=va(ma);i.fontSize=i.fontSize+2,i.fontWeight="bold",ka("label",e,r,i,Yn(e.label.text,i)),ra(t,e,ma)},Ea=function(t,e,n,r){let i=0;for(const a of r){i=0;const r=n[a];let s=xa(ma,r.typeC4Shape.text);switch(s.fontSize=s.fontSize-2,r.typeC4Shape.width=Yn("<<"+r.typeC4Shape.text+">>",s),r.typeC4Shape.height=s.fontSize+2,r.typeC4Shape.Y=ma.c4ShapePadding,i=r.typeC4Shape.Y+r.typeC4Shape.height-4,r.image={width:0,height:0,Y:0},r.typeC4Shape.text){case"person":case"external_person":r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height}r.sprite&&(r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height);let o=r.wrap&&ma.wrap,c=ma.width-2*ma.c4ShapePadding,l=xa(ma,r.typeC4Shape.text);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",r,o,l,c),r.label.Y=i+8,i=r.label.Y+r.label.height,r.type&&""!==r.type.text){r.type.text="["+r.type.text+"]",ka("type",r,o,xa(ma,r.typeC4Shape.text),c),r.type.Y=i+5,i=r.type.Y+r.type.height}else if(r.techn&&""!==r.techn.text){r.techn.text="["+r.techn.text+"]",ka("techn",r,o,xa(ma,r.techn.text),c),r.techn.Y=i+5,i=r.techn.Y+r.techn.height}let h=i,u=r.label.width;if(r.descr&&""!==r.descr.text){ka("descr",r,o,xa(ma,r.typeC4Shape.text),c),r.descr.Y=i+20,i=r.descr.Y+r.descr.height,u=Math.max(r.label.width,r.descr.width),h=i-5*r.descr.textLines}u+=ma.c4ShapePadding,r.width=Math.max(r.width||ma.width,u,ma.width),r.height=Math.max(r.height||ma.height,h,ma.height),r.margin=r.margin||ma.c4ShapeMargin,t.insert(r),ia(e,r,ma)}t.bumpLastMargin(ma.c4ShapeMargin)};class Ca{constructor(t,e){this.x=t,this.y=e}}let Ta=function(t,e){let n=t.x,r=t.y,i=e.x,a=e.y,s=n+t.width/2,o=r+t.height/2,c=Math.abs(n-i),l=Math.abs(r-a),h=l/c,u=t.height/t.width,d=null;return r==a&&n<i?d=new Ca(n+t.width,o):r==a&&n>i?d=new Ca(n,o):n==i&&r<a?d=new Ca(s,r+t.height):n==i&&r>a&&(d=new Ca(s,r)),n>i&&r<a?d=u>=h?new Ca(n,o+h*t.width/2):new Ca(s-c/l*t.height/2,r+t.height):n<i&&r<a?d=u>=h?new Ca(n+t.width,o+h*t.width/2):new Ca(s+c/l*t.height/2,r+t.height):n<i&&r>a?d=u>=h?new Ca(n+t.width,o-h*t.width/2):new Ca(s+t.height/2*c/l,r):n>i&&r>a&&(d=u>=h?new Ca(n,o-t.width/2*h):new Ca(s-t.height/2*c/l,r)),d},Sa=function(t,e){let n={x:0,y:0};n.x=e.x+e.width/2,n.y=e.y+e.height/2;let r=Ta(t,n);return n.x=t.x+t.width/2,n.y=t.y+t.height/2,{startPoint:r,endPoint:Ta(e,n)}};function Aa(t,e,n,r,i){let a=new ba(i);a.data.widthLimit=n.data.widthLimit/Math.min(ya,r.length);for(let[s,o]of r.entries()){let r=0;o.image={width:0,height:0,Y:0},o.sprite&&(o.image.width=48,o.image.height=48,o.image.Y=r,r=o.image.Y+o.image.height);let c=o.wrap&&ma.wrap,l=va(ma);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",o,c,l,a.data.widthLimit),o.label.Y=r+8,r=o.label.Y+o.label.height,o.type&&""!==o.type.text){o.type.text="["+o.type.text+"]",ka("type",o,c,va(ma),a.data.widthLimit),o.type.Y=r+5,r=o.type.Y+o.type.height}if(o.descr&&""!==o.descr.text){let t=va(ma);t.fontSize=t.fontSize-2,ka("descr",o,c,t,a.data.widthLimit),o.descr.Y=r+20,r=o.descr.Y+o.descr.height}if(0==s||s%ya==0){let t=n.data.startx+ma.diagramMarginX,e=n.data.stopy+ma.diagramMarginY+r;a.setData(t,t,e,e)}else{let t=a.data.stopx!==a.data.startx?a.data.stopx+ma.diagramMarginX:a.data.startx,e=a.data.starty;a.setData(t,t,e,e)}a.name=o.alias;let h=i.db.getC4ShapeArray(o.alias),u=i.db.getC4ShapeKeys(o.alias);u.length>0&&Ea(a,t,h,u),e=o.alias;let d=i.db.getBoundarys(e);d.length>0&&Aa(t,e,a,d,i),"global"!==o.alias&&wa(t,o,a),n.data.stopy=Math.max(a.data.stopy+ma.c4ShapeMargin,n.data.stopy),n.data.stopx=Math.max(a.data.stopx+ma.c4ShapeMargin,n.data.stopx),pa=Math.max(pa,n.data.stopx),fa=Math.max(fa,n.data.stopy)}}const La={drawPersonOrSystemArray:Ea,drawBoundary:wa,setConf:_a,draw:function(t,e,n,r){ma=ar().c4;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body");let c=r.db;r.db.setWrap(ma.wrap),ga=c.getC4ShapeInRow(),ya=c.getC4BoundaryInRow(),Nt.debug(`C:${JSON.stringify(ma,null,2)}`);const l="sandbox"===i?s.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`);ua(l),ha(l),da(l);let h=new ba(r);h.setData(ma.diagramMarginX,ma.diagramMarginX,ma.diagramMarginY,ma.diagramMarginY),h.data.widthLimit=screen.availWidth,pa=ma.diagramMarginX,fa=ma.diagramMarginY;const u=r.db.getTitle();Aa(l,"",h,r.db.getBoundarys(""),r),sa(l),oa(l),la(l),ca(l),function(t,e,n,r){let i=0;for(let s of e){i+=1;let t=s.wrap&&ma.wrap,e={fontFamily:(a=ma).messageFontFamily,fontSize:a.messageFontSize,fontWeight:a.messageFontWeight};"C4Dynamic"===r.db.getC4Type()&&(s.label.text=i+": "+s.label.text);let o=Yn(s.label.text,e);ka("label",s,t,e,o),s.techn&&""!==s.techn.text&&(o=Yn(s.techn.text,e),ka("techn",s,t,e,o)),s.descr&&""!==s.descr.text&&(o=Yn(s.descr.text,e),ka("descr",s,t,e,o));let c=n(s.from),l=n(s.to),h=Sa(c,l);s.startPoint=h.startPoint,s.endPoint=h.endPoint}var a;aa(t,e,ma)}(l,r.db.getRels(),r.db.getC4Shape,r),h.data.stopx=pa,h.data.stopy=fa;const d=h.data;let p=d.stopy-d.starty+2*ma.diagramMarginY;const f=d.stopx-d.startx+2*ma.diagramMarginX;u&&l.append("text").text(u).attr("x",(d.stopx-d.startx)/2-4*ma.diagramMarginX).attr("y",d.starty+ma.diagramMarginY),dr(l,p,f,ma.useMaxWidth);const g=u?60:0;l.attr("viewBox",d.startx-ma.diagramMarginX+" -"+(ma.diagramMarginY+g)+" "+f+" "+(p+g)),Nt.debug("models:",d)}};var Ba=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,7],i=[1,8],a=[1,9],s=[1,10],o=[1,13],c=[1,12],l=[1,16,25],h=[1,20],u=[1,32],d=[1,33],p=[1,34],f=[1,36],g=[1,39],y=[1,37],m=[1,38],b=[1,44],_=[1,45],x=[1,40],v=[1,41],k=[1,42],w=[1,43],E=[1,48],C=[1,49],T=[1,50],S=[1,51],A=[16,25],L=[1,65],B=[1,66],N=[1,67],D=[1,68],O=[1,69],M=[1,70],I=[1,71],F=[1,80],$=[16,25,32,45,46,54,60,61,62,63,64,65,66,71,73],R=[16,25,30,32,45,46,50,54,60,61,62,63,64,65,66,71,73,88,89,90,91],Z=[5,8,9,10,11,16,19,23,25],P=[54,88,89,90,91],j=[54,65,66,88,89,90,91],Y=[54,60,61,62,63,64,88,89,90,91],z=[16,25,32],U=[1,107],W={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,statments:5,direction:6,directive:7,direction_tb:8,direction_bt:9,direction_rl:10,direction_lr:11,graphConfig:12,openDirective:13,typeDirective:14,closeDirective:15,NEWLINE:16,":":17,argDirective:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,CLASS_DIAGRAM:23,statements:24,EOF:25,statement:26,className:27,alphaNumToken:28,classLiteralName:29,GENERICTYPE:30,relationStatement:31,LABEL:32,classStatement:33,methodStatement:34,annotationStatement:35,clickStatement:36,cssClassStatement:37,noteStatement:38,acc_title:39,acc_title_value:40,acc_descr:41,acc_descr_value:42,acc_descr_multiline_value:43,CLASS:44,STYLE_SEPARATOR:45,STRUCT_START:46,members:47,STRUCT_STOP:48,ANNOTATION_START:49,ANNOTATION_END:50,MEMBER:51,SEPARATOR:52,relation:53,STR:54,NOTE_FOR:55,noteText:56,NOTE:57,relationType:58,lineType:59,AGGREGATION:60,EXTENSION:61,COMPOSITION:62,DEPENDENCY:63,LOLLIPOP:64,LINE:65,DOTTED_LINE:66,CALLBACK:67,LINK:68,LINK_TARGET:69,CLICK:70,CALLBACK_NAME:71,CALLBACK_ARGS:72,HREF:73,CSSCLASS:74,commentToken:75,textToken:76,graphCodeTokens:77,textNoTagsToken:78,TAGSTART:79,TAGEND:80,"==":81,"--":82,PCT:83,DEFAULT:84,SPACE:85,MINUS:86,keywords:87,UNICODE_TEXT:88,NUM:89,ALPHA:90,BQUOTE_STR:91,$accept:0,$end:1},terminals_:{2:"error",5:"statments",8:"direction_tb",9:"direction_bt",10:"direction_rl",11:"direction_lr",16:"NEWLINE",17:":",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",23:"CLASS_DIAGRAM",25:"EOF",30:"GENERICTYPE",32:"LABEL",39:"acc_title",40:"acc_title_value",41:"acc_descr",42:"acc_descr_value",43:"acc_descr_multiline_value",44:"CLASS",45:"STYLE_SEPARATOR",46:"STRUCT_START",48:"STRUCT_STOP",49:"ANNOTATION_START",50:"ANNOTATION_END",51:"MEMBER",52:"SEPARATOR",54:"STR",55:"NOTE_FOR",57:"NOTE",60:"AGGREGATION",61:"EXTENSION",62:"COMPOSITION",63:"DEPENDENCY",64:"LOLLIPOP",65:"LINE",66:"DOTTED_LINE",67:"CALLBACK",68:"LINK",69:"LINK_TARGET",70:"CLICK",71:"CALLBACK_NAME",72:"CALLBACK_ARGS",73:"HREF",74:"CSSCLASS",77:"graphCodeTokens",79:"TAGSTART",80:"TAGEND",81:"==",82:"--",83:"PCT",84:"DEFAULT",85:"SPACE",86:"MINUS",87:"keywords",88:"UNICODE_TEXT",89:"NUM",90:"ALPHA",91:"BQUOTE_STR"},productions_:[0,[3,1],[3,1],[3,1],[3,2],[6,1],[6,1],[6,1],[6,1],[4,1],[7,4],[7,6],[13,1],[14,1],[18,1],[15,1],[12,4],[24,1],[24,2],[24,3],[27,1],[27,1],[27,2],[27,2],[27,2],[26,1],[26,2],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,2],[26,2],[26,1],[33,2],[33,4],[33,5],[33,7],[35,4],[47,1],[47,2],[34,1],[34,2],[34,1],[34,1],[31,3],[31,4],[31,4],[31,5],[38,3],[38,2],[53,3],[53,2],[53,2],[53,1],[58,1],[58,1],[58,1],[58,1],[58,1],[59,1],[59,1],[36,3],[36,4],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[37,3],[75,1],[75,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[78,1],[78,1],[78,1],[78,1],[28,1],[28,1],[28,1],[29,1],[56,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.setDirection("TB");break;case 6:r.setDirection("BT");break;case 7:r.setDirection("RL");break;case 8:r.setDirection("LR");break;case 12:r.parseDirective("%%{","open_directive");break;case 13:r.parseDirective(a[o],"type_directive");break;case 14:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 15:r.parseDirective("}%%","close_directive","class");break;case 20:case 21:this.$=a[o];break;case 22:this.$=a[o-1]+a[o];break;case 23:case 24:this.$=a[o-1]+"~"+a[o];break;case 25:r.addRelation(a[o]);break;case 26:a[o-1].title=r.cleanupLabel(a[o]),r.addRelation(a[o-1]);break;case 35:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 36:case 37:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 38:r.addClass(a[o]);break;case 39:r.addClass(a[o-2]),r.setCssClass(a[o-2],a[o]);break;case 40:r.addClass(a[o-3]),r.addMembers(a[o-3],a[o-1]);break;case 41:r.addClass(a[o-5]),r.setCssClass(a[o-5],a[o-3]),r.addMembers(a[o-5],a[o-1]);break;case 42:r.addAnnotation(a[o],a[o-2]);break;case 43:this.$=[a[o]];break;case 44:a[o].push(a[o-1]),this.$=a[o];break;case 45:case 47:case 48:break;case 46:r.addMember(a[o-1],r.cleanupLabel(a[o]));break;case 49:this.$={id1:a[o-2],id2:a[o],relation:a[o-1],relationTitle1:"none",relationTitle2:"none"};break;case 50:this.$={id1:a[o-3],id2:a[o],relation:a[o-1],relationTitle1:a[o-2],relationTitle2:"none"};break;case 51:this.$={id1:a[o-3],id2:a[o],relation:a[o-2],relationTitle1:"none",relationTitle2:a[o-1]};break;case 52:this.$={id1:a[o-4],id2:a[o],relation:a[o-2],relationTitle1:a[o-3],relationTitle2:a[o-1]};break;case 53:r.addNote(a[o],a[o-1]);break;case 54:r.addNote(a[o]);break;case 55:this.$={type1:a[o-2],type2:a[o],lineType:a[o-1]};break;case 56:this.$={type1:"none",type2:a[o],lineType:a[o-1]};break;case 57:this.$={type1:a[o-1],type2:"none",lineType:a[o]};break;case 58:this.$={type1:"none",type2:"none",lineType:a[o]};break;case 59:this.$=r.relationType.AGGREGATION;break;case 60:this.$=r.relationType.EXTENSION;break;case 61:this.$=r.relationType.COMPOSITION;break;case 62:this.$=r.relationType.DEPENDENCY;break;case 63:this.$=r.relationType.LOLLIPOP;break;case 64:this.$=r.lineType.LINE;break;case 65:this.$=r.lineType.DOTTED_LINE;break;case 66:case 72:this.$=a[o-2],r.setClickEvent(a[o-1],a[o]);break;case 67:case 73:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 68:case 76:this.$=a[o-2],r.setLink(a[o-1],a[o]);break;case 69:case 77:this.$=a[o-3],r.setLink(a[o-2],a[o-1],a[o]);break;case 70:case 78:this.$=a[o-3],r.setLink(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 71:case 79:this.$=a[o-4],r.setLink(a[o-3],a[o-2],a[o]),r.setTooltip(a[o-3],a[o-1]);break;case 74:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 75:this.$=a[o-4],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setTooltip(a[o-3],a[o]);break;case 80:r.setCssClass(a[o-1],a[o])}},table:[{3:1,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[3]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{3:14,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[2,9]},e(l,[2,5]),e(l,[2,6]),e(l,[2,7]),e(l,[2,8]),{14:15,20:[1,16]},{16:[1,17]},{20:[2,12]},{1:[2,4]},{15:18,17:[1,19],22:h},e([17,22],[2,13]),{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:21,26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},{16:[1,52]},{18:53,21:[1,54]},{16:[2,15]},{25:[1,55]},{16:[1,56],25:[2,17]},e(A,[2,25],{32:[1,57]}),e(A,[2,27]),e(A,[2,28]),e(A,[2,29]),e(A,[2,30]),e(A,[2,31]),e(A,[2,32]),e(A,[2,33]),e(A,[2,34]),{40:[1,58]},{42:[1,59]},e(A,[2,37]),e(A,[2,45],{53:60,58:63,59:64,32:[1,62],54:[1,61],60:L,61:B,62:N,63:D,64:O,65:M,66:I}),{27:72,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,47]),e(A,[2,48]),{28:73,88:E,89:C,90:T},{27:74,28:46,29:47,88:E,89:C,90:T,91:S},{27:75,28:46,29:47,88:E,89:C,90:T,91:S},{27:76,28:46,29:47,88:E,89:C,90:T,91:S},{54:[1,77]},{27:78,28:46,29:47,88:E,89:C,90:T,91:S},{54:F,56:79},e($,[2,20],{28:46,29:47,27:81,30:[1,82],88:E,89:C,90:T,91:S}),e($,[2,21],{30:[1,83]}),e(R,[2,94]),e(R,[2,95]),e(R,[2,96]),e([16,25,30,32,45,46,54,60,61,62,63,64,65,66,71,73],[2,97]),e(Z,[2,10]),{15:84,22:h},{22:[2,14]},{1:[2,16]},{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:85,25:[2,18],26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},e(A,[2,26]),e(A,[2,35]),e(A,[2,36]),{27:86,28:46,29:47,54:[1,87],88:E,89:C,90:T,91:S},{53:88,58:63,59:64,60:L,61:B,62:N,63:D,64:O,65:M,66:I},e(A,[2,46]),{59:89,65:M,66:I},e(P,[2,58],{58:90,60:L,61:B,62:N,63:D,64:O}),e(j,[2,59]),e(j,[2,60]),e(j,[2,61]),e(j,[2,62]),e(j,[2,63]),e(Y,[2,64]),e(Y,[2,65]),e(A,[2,38],{45:[1,91],46:[1,92]}),{50:[1,93]},{54:[1,94]},{54:[1,95]},{71:[1,96],73:[1,97]},{28:98,88:E,89:C,90:T},{54:F,56:99},e(A,[2,54]),e(A,[2,98]),e($,[2,22]),e($,[2,23]),e($,[2,24]),{16:[1,100]},{25:[2,19]},e(z,[2,49]),{27:101,28:46,29:47,88:E,89:C,90:T,91:S},{27:102,28:46,29:47,54:[1,103],88:E,89:C,90:T,91:S},e(P,[2,57],{58:104,60:L,61:B,62:N,63:D,64:O}),e(P,[2,56]),{28:105,88:E,89:C,90:T},{47:106,51:U},{27:108,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,66],{54:[1,109]}),e(A,[2,68],{54:[1,111],69:[1,110]}),e(A,[2,72],{54:[1,112],72:[1,113]}),e(A,[2,76],{54:[1,115],69:[1,114]}),e(A,[2,80]),e(A,[2,53]),e(Z,[2,11]),e(z,[2,51]),e(z,[2,50]),{27:116,28:46,29:47,88:E,89:C,90:T,91:S},e(P,[2,55]),e(A,[2,39],{46:[1,117]}),{48:[1,118]},{47:119,48:[2,43],51:U},e(A,[2,42]),e(A,[2,67]),e(A,[2,69]),e(A,[2,70],{69:[1,120]}),e(A,[2,73]),e(A,[2,74],{54:[1,121]}),e(A,[2,77]),e(A,[2,78],{69:[1,122]}),e(z,[2,52]),{47:123,51:U},e(A,[2,40]),{48:[2,44]},e(A,[2,71]),e(A,[2,75]),e(A,[2,79]),{48:[1,124]},e(A,[2,41])],defaultActions:{2:[2,1],3:[2,2],4:[2,3],6:[2,9],13:[2,12],14:[2,4],20:[2,15],54:[2,14],55:[2,16],85:[2,19],119:[2,44]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},q=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return 8;case 2:return 9;case 3:return 10;case 4:return 11;case 5:return this.begin("type_directive"),20;case 6:return this.popState(),this.begin("arg_directive"),17;case 7:return this.popState(),this.popState(),22;case 8:return 21;case 9:case 10:case 19:case 27:break;case 11:return this.begin("acc_title"),39;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),41;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 39:case 42:case 45:case 48:case 51:case 54:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:return 16;case 20:case 21:return 23;case 22:return this.begin("struct"),46;case 23:return"EDGE_STATE";case 24:return"EOF_IN_STRUCT";case 25:return"OPEN_IN_STRUCT";case 26:return this.popState(),48;case 28:return"MEMBER";case 29:return 44;case 30:return 74;case 31:return 67;case 32:return 68;case 33:return 70;case 34:return 55;case 35:return 57;case 36:return 49;case 37:return 50;case 38:this.begin("generic");break;case 40:return"GENERICTYPE";case 41:this.begin("string");break;case 43:return"STR";case 44:this.begin("bqstring");break;case 46:return"BQUOTE_STR";case 47:this.begin("href");break;case 49:return 73;case 50:this.begin("callback_name");break;case 52:this.popState(),this.begin("callback_args");break;case 53:return 71;case 55:return 72;case 56:case 57:case 58:case 59:return 69;case 60:case 61:return 61;case 62:case 63:return 63;case 64:return 62;case 65:return 60;case 66:return 64;case 67:return 65;case 68:return 66;case 69:return 32;case 70:return 45;case 71:return 86;case 72:return"DOT";case 73:return"PLUS";case 74:return 83;case 75:case 76:return"EQUALS";case 77:return 90;case 78:return"PUNCTUATION";case 79:return 89;case 80:return 88;case 81:return 85;case 82:return 25}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:classDiagram-v2\b)/,/^(?:classDiagram\b)/,/^(?:[{])/,/^(?:\[\*\])/,/^(?:$)/,/^(?:[{])/,/^(?:[}])/,/^(?:[\n])/,/^(?:[^{}\n]*)/,/^(?:class\b)/,/^(?:cssClass\b)/,/^(?:callback\b)/,/^(?:link\b)/,/^(?:click\b)/,/^(?:note for\b)/,/^(?:note\b)/,/^(?:<<)/,/^(?:>>)/,/^(?:[~])/,/^(?:[~])/,/^(?:[^~]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[`])/,/^(?:[`])/,/^(?:[^`]+)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:\s*<\|)/,/^(?:\s*\|>)/,/^(?:\s*>)/,/^(?:\s*<)/,/^(?:\s*\*)/,/^(?:\s*o\b)/,/^(?:\s*\(\))/,/^(?:--)/,/^(?:\.\.)/,/^(?::{1}[^:\n;]+)/,/^(?::{3})/,/^(?:-)/,/^(?:\.)/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:\w+)/,/^(?:[!"#$%&'*+,-.`?\\/])/,/^(?:[0-9]+)/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\s)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},callback_args:{rules:[54,55],inclusive:!1},callback_name:{rules:[51,52,53],inclusive:!1},href:{rules:[48,49],inclusive:!1},struct:{rules:[23,24,25,26,27,28],inclusive:!1},generic:{rules:[39,40],inclusive:!1},bqstring:{rules:[45,46],inclusive:!1},string:{rules:[42,43],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,29,30,31,32,33,34,35,36,37,38,41,44,47,50,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],inclusive:!0}}},t);function H(){this.yy={}}return W.lexer=q,H.prototype=W,W.Parser=H,new H}();Ba.parser=Ba;const Na=Ba,Da=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*classDiagram/)},Oa=(t,e)=>{var n;return null!==t.match(/^\s*classDiagram/)&&"dagre-wrapper"===(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)||null!==t.match(/^\s*classDiagram-v2/)},Ma="classid-";let Ia=[],Fa={},$a=[],Ra=0,Za=[];const Pa=t=>Yt.sanitizeText(t,ar()),ja=function(t){let e="",n=t;if(t.indexOf("~")>0){let r=t.split("~");n=r[0],e=Yt.sanitizeText(r[1],ar())}return{className:n,type:e}},Ya=function(t){let e=ja(t);void 0===Fa[e.className]&&(Fa[e.className]={id:e.className,type:e.type,cssClasses:[],methods:[],members:[],annotations:[],domId:Ma+e.className+"-"+Ra},Ra++)},za=function(t){const e=Object.keys(Fa);for(const n of e)if(Fa[n].id===t)return Fa[n].domId},Ua=function(t,e){const n=ja(t).className,r=Fa[n];if("string"==typeof e){const t=e.trim();t.startsWith("<<")&&t.endsWith(">>")?r.annotations.push(Pa(t.substring(2,t.length-2))):t.indexOf(")")>0?r.methods.push(Pa(t)):t&&r.members.push(Pa(t))}},Wa=function(t,e){t.split(",").forEach((function(t){let n=t;t[0].match(/\d/)&&(n=Ma+n),void 0!==Fa[n]&&Fa[n].cssClasses.push(e)}))},qa=function(t,e,n){const r=ar();let i=t,a=za(i);if("loose"===r.securityLevel&&void 0!==e&&void 0!==Fa[i]){let t=[];if("string"==typeof n){t=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let e=0;e<t.length;e++){let n=t[e].trim();'"'===n.charAt(0)&&'"'===n.charAt(n.length-1)&&(n=n.substr(1,n.length-2)),t[e]=n}}0===t.length&&t.push(a),Za.push((function(){const n=document.querySelector(`[id="${a}"]`);null!==n&&n.addEventListener("click",(function(){Gn.runFunc(e,...t)}),!1)}))}},Ha=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Za.push(Ha);let Va="TB";const Ga={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,getConfig:()=>ar().class,addClass:Ya,bindFunctions:function(t){Za.forEach((function(e){e(t)}))},clear:function(){Ia=[],Fa={},$a=[],Za=[],Za.push(Ha),Dr()},getClass:function(t){return Fa[t]},getClasses:function(){return Fa},getNotes:function(){return $a},addAnnotation:function(t,e){const n=ja(t).className;Fa[n].annotations.push(e)},addNote:function(t,e){const n={id:`note${$a.length}`,class:e,text:t};$a.push(n)},getRelations:function(){return Ia},addRelation:function(t){Nt.debug("Adding relation: "+JSON.stringify(t)),Ya(t.id1),Ya(t.id2),t.id1=ja(t.id1).className,t.id2=ja(t.id2).className,t.relationTitle1=Yt.sanitizeText(t.relationTitle1.trim(),ar()),t.relationTitle2=Yt.sanitizeText(t.relationTitle2.trim(),ar()),Ia.push(t)},getDirection:()=>Va,setDirection:t=>{Va=t},addMember:Ua,addMembers:function(t,e){Array.isArray(e)&&(e.reverse(),e.forEach((e=>Ua(t,e))))},cleanupLabel:function(t){return":"===t.substring(0,1)?Yt.sanitizeText(t.substr(1).trim(),ar()):Pa(t.trim())},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3,LOLLIPOP:4},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){qa(t,e,n),Fa[t].haveCallback=!0})),Wa(t,"clickable")},setCssClass:Wa,setLink:function(t,e,n){const r=ar();t.split(",").forEach((function(t){let i=t;t[0].match(/\d/)&&(i=Ma+i),void 0!==Fa[i]&&(Fa[i].link=Gn.formatUrl(e,r),"sandbox"===r.securityLevel?Fa[i].linkTarget="_top":Fa[i].linkTarget="string"==typeof n?Pa(n):"_blank")})),Wa(t,"clickable")},getTooltip:function(t){return Fa[t].tooltip},setTooltip:function(t,e){const n=ar();t.split(",").forEach((function(t){void 0!==e&&(Fa[t].tooltip=Yt.sanitizeText(e,n))}))},lookUpDomId:za,setDiagramTitle:$r,getDiagramTitle:Rr};let Xa=0;const Ka=function(t){let e=t.match(/^([#+~-])?(\w+)(~\w+~|\[])?\s+(\w+) *([$*])?$/),n=t.match(/^([#+|~-])?(\w+) *\( *(.*)\) *([$*])? *(\w*[[\]|~]*\s*\w*~?)$/);return e&&!n?Qa(e):n?Ja(n):ts(t)},Qa=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"",o=t[5]?t[5].trim():"";n=r+i+a+" "+s,e=ns(o)}catch(r){n=t}return{displayText:n,cssStyle:e}},Ja=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"";n=r+i+"("+a+")"+(t[5]?" : "+jt(t[5]).trim():""),e=ns(s)}catch(r){n=t}return{displayText:n,cssStyle:e}},ts=function(t){let e="",n="",r="",i=t.indexOf("("),a=t.indexOf(")");if(i>1&&a>i&&a<=t.length){let s="",o="",c=t.substring(0,1);c.match(/\w/)?o=t.substring(0,i).trim():(c.match(/[#+~-]/)&&(s=c),o=t.substring(1,i).trim());const l=t.substring(i+1,a);t.substring(a+1,1),n=ns(t.substring(a+1,a+2)),e=s+o+"("+jt(l.trim())+")",a<t.length&&(r=t.substring(a+2).trim(),""!==r&&(r=" : "+jt(r),e+=r))}else e=jt(t);return{displayText:e,cssStyle:n}},es=function(t,e,n,r){let i=Ka(e);const a=t.append("tspan").attr("x",r.padding).text(i.displayText);""!==i.cssStyle&&a.attr("style",i.cssStyle),n||a.attr("dy",r.textHeight)},ns=function(t){switch(t){case"*":return"font-style:italic;";case"$":return"text-decoration:underline;";default:return""}},rs=function(t,e,n,r){Nt.debug("Rendering class ",e,n);const i=e.id,a={id:i,label:e.id,width:0,height:0},s=t.append("g").attr("id",r.db.lookUpDomId(i)).attr("class","classGroup");let o;o=e.link?s.append("svg:a").attr("xlink:href",e.link).attr("target",e.linkTarget).append("text").attr("y",n.textHeight+n.padding).attr("x",0):s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);let c=!0;e.annotations.forEach((function(t){const e=o.append("tspan").text("\xab"+t+"\xbb");c||e.attr("dy",n.textHeight),c=!1}));let l=e.id;void 0!==e.type&&""!==e.type&&(l+="<"+e.type+">");const h=o.append("tspan").text(l).attr("class","title");c||h.attr("dy",n.textHeight);const u=o.node().getBBox().height,d=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin/2).attr("y2",n.padding+u+n.dividerMargin/2),p=s.append("text").attr("x",n.padding).attr("y",u+n.dividerMargin+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.members.forEach((function(t){es(p,t,c,n),c=!1}));const f=p.node().getBBox(),g=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin+f.height).attr("y2",n.padding+u+n.dividerMargin+f.height),y=s.append("text").attr("x",n.padding).attr("y",u+2*n.dividerMargin+f.height+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.methods.forEach((function(t){es(y,t,c,n),c=!1}));const m=s.node().getBBox();var b=" ";e.cssClasses.length>0&&(b+=e.cssClasses.join(" "));const _=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",m.width+2*n.padding).attr("height",m.height+n.padding+.5*n.dividerMargin).attr("class",b).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(_-t.getBBox().width)/2)})),e.tooltip&&o.insert("title").text(e.tooltip),d.attr("x2",_),g.attr("x2",_),a.width=_,a.height=m.height+n.padding+.5*n.dividerMargin,a},is=function(t,e,n,r,i){const a=function(t){switch(t){case i.db.relationType.AGGREGATION:return"aggregation";case i.db.relationType.EXTENSION:return"extension";case i.db.relationType.COMPOSITION:return"composition";case i.db.relationType.DEPENDENCY:return"dependency";case i.db.relationType.LOLLIPOP:return"lollipop"}};e.points=e.points.filter((t=>!Number.isNaN(t.y)));const s=e.points,c=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),l=t.append("path").attr("d",c(s)).attr("id","edge"+Xa).attr("class","relation");let h,u,d="";r.arrowMarkerAbsolute&&(d=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,d=d.replace(/\(/g,"\\("),d=d.replace(/\)/g,"\\)")),1==n.relation.lineType&&l.attr("class","relation dashed-line"),10==n.relation.lineType&&l.attr("class","relation dotted-line"),"none"!==n.relation.type1&&l.attr("marker-start","url("+d+"#"+a(n.relation.type1)+"Start)"),"none"!==n.relation.type2&&l.attr("marker-end","url("+d+"#"+a(n.relation.type2)+"End)");const p=e.points.length;let f,g,y,m,b=Gn.calcLabelPosition(e.points);if(h=b.x,u=b.y,p%2!=0&&p>1){let t=Gn.calcCardinalityPosition("none"!==n.relation.type1,e.points,e.points[0]),r=Gn.calcCardinalityPosition("none"!==n.relation.type2,e.points,e.points[p-1]);Nt.debug("cardinality_1_point "+JSON.stringify(t)),Nt.debug("cardinality_2_point "+JSON.stringify(r)),f=t.x,g=t.y,y=r.x,m=r.y}if(void 0!==n.title){const e=t.append("g").attr("class","classLabel"),i=e.append("text").attr("class","label").attr("x",h).attr("y",u).attr("fill","red").attr("text-anchor","middle").text(n.title);window.label=i;const a=i.node().getBBox();e.insert("rect",":first-child").attr("class","box").attr("x",a.x-r.padding/2).attr("y",a.y-r.padding/2).attr("width",a.width+r.padding).attr("height",a.height+r.padding)}if(Nt.info("Rendering relation "+JSON.stringify(n)),void 0!==n.relationTitle1&&"none"!==n.relationTitle1){t.append("g").attr("class","cardinality").append("text").attr("class","type1").attr("x",f).attr("y",g).attr("fill","black").attr("font-size","6").text(n.relationTitle1)}if(void 0!==n.relationTitle2&&"none"!==n.relationTitle2){t.append("g").attr("class","cardinality").append("text").attr("class","type2").attr("x",y).attr("y",m).attr("fill","black").attr("font-size","6").text(n.relationTitle2)}Xa++},as=function(t,e,n,r){Nt.debug("Rendering note ",e,n);const i=e.id,a={id:i,text:e.text,width:0,height:0},s=t.append("g").attr("id",i).attr("class","classGroup");let o=s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);const c=JSON.parse(`"${e.text}"`).split("\n");c.forEach((function(t){Nt.debug(`Adding line: ${t}`),o.append("tspan").text(t).attr("class","title").attr("dy",n.textHeight)}));const l=s.node().getBBox(),h=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",l.width+2*n.padding).attr("height",l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(h-t.getBBox().width)/2)})),a.width=h,a.height=l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin,a};let ss={};const os=function(t){const e=Object.entries(ss).find((e=>e[1].label===t));if(e)return e[0]},cs={draw:function(t,e,n,r){const i=ar().class;ss={},Nt.info("Rendering diagram "+t);const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l=c.select(`[id='${e}']`);var h;(h=l).append("defs").append("marker").attr("id","extensionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),h.append("defs").append("marker").attr("id","extensionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z"),h.append("defs").append("marker").attr("id","compositionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","compositionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z");const u=new ht.k({multigraph:!0});u.setGraph({isMultiGraph:!0}),u.setDefaultEdgeLabel((function(){return{}}));const d=r.db.getClasses(),p=Object.keys(d);for(const o of p){const t=d[o],e=rs(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),Nt.info("Org height: "+e.height)}r.db.getRelations().forEach((function(t){Nt.info("tjoho"+os(t.id1)+os(t.id2)+JSON.stringify(t)),u.setEdge(os(t.id1),os(t.id2),{relation:t},t.title||"DEFAULT")}));r.db.getNotes().forEach((function(t){Nt.debug(`Adding note: ${JSON.stringify(t)}`);const e=as(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),t.class&&t.class in d&&u.setEdge(t.id,os(t.class),{relation:{id1:t.id,id2:t.class,relation:{type1:"none",type2:"none",lineType:10}}},"DEFAULT")})),(0,lt.bK)(u),u.nodes().forEach((function(t){void 0!==t&&void 0!==u.node(t)&&(Nt.debug("Node "+t+": "+JSON.stringify(u.node(t))),c.select("#"+(r.db.lookUpDomId(t)||t)).attr("transform","translate("+(u.node(t).x-u.node(t).width/2)+","+(u.node(t).y-u.node(t).height/2)+" )"))})),u.edges().forEach((function(t){void 0!==t&&void 0!==u.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(u.edge(t))),is(l,u.edge(t),u.edge(t).relation,i,r))}));const f=l.node().getBBox(),g=f.width+40,y=f.height+40;dr(l,y,g,i.useMaxWidth);const m=`${f.x-20} ${f.y-20} ${g} ${y}`;Nt.debug(`viewBox ${m}`),l.attr("viewBox",m)}},ls={extension:(t,e,n)=>{Nt.trace("Making markers for ",n),t.append("defs").append("marker").attr("id",e+"-extensionStart").attr("class","marker extension "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),t.append("defs").append("marker").attr("id",e+"-extensionEnd").attr("class","marker extension "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z")},composition:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-compositionStart").attr("class","marker composition "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-compositionEnd").attr("class","marker composition "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},aggregation:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-aggregationStart").attr("class","marker aggregation "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-aggregationEnd").attr("class","marker aggregation "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},dependency:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-dependencyStart").attr("class","marker dependency "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-dependencyEnd").attr("class","marker dependency "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},lollipop:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-lollipopStart").attr("class","marker lollipop "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("circle").attr("stroke","black").attr("fill","white").attr("cx",6).attr("cy",7).attr("r",6)},point:(t,e)=>{t.append("marker").attr("id",e+"-pointEnd").attr("class","marker "+e).attr("viewBox","0 0 12 20").attr("refX",10).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-pointStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",0).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 5 L 10 10 L 10 0 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},circle:(t,e)=>{t.append("marker").attr("id",e+"-circleEnd").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",11).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-circleStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",-1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},cross:(t,e)=>{t.append("marker").attr("id",e+"-crossEnd").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",12).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-crossStart").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",-1).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0")},barb:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-barbEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",14).attr("markerUnits","strokeWidth").attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z")}},hs=(t,e,n,r)=>{e.forEach((e=>{ls[e](t,n,r)}))};const us=(t,e,n,r)=>{let i=t||"";if("object"==typeof i&&(i=i[0]),Pt(ar().flowchart.htmlLabels)){i=i.replace(/\\n|\n/g,"<br />"),Nt.info("vertexText"+i);let t=function(t){const e=(0,o.Ys)(document.createElementNS("http://www.w3.org/2000/svg","foreignObject")),n=e.append("xhtml:div"),r=t.label,i=t.isNode?"nodeLabel":"edgeLabel";var a,s;return n.html('<span class="'+i+'" '+(t.labelStyle?'style="'+t.labelStyle+'"':"")+">"+r+"</span>"),a=n,(s=t.labelStyle)&&a.attr("style",s),n.style("display","inline-block"),n.style("white-space","nowrap"),n.attr("xmlns","http://www.w3.org/1999/xhtml"),e.node()}({isNode:r,label:Xd(i).replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`)),labelStyle:e.replace("fill:","color:")});return t}{const t=document.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",e.replace("color:","fill:"));let r=[];r="string"==typeof i?i.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(i)?i:[];for(const e of r){const r=document.createElementNS("http://www.w3.org/2000/svg","tspan");r.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),r.setAttribute("dy","1em"),r.setAttribute("x","0"),n?r.setAttribute("class","title-row"):r.setAttribute("class","row"),r.textContent=e.trim(),t.appendChild(r)}return t}},ds=(t,e,n,r)=>{let i;i=n||"node default";const a=t.insert("g").attr("class",i).attr("id",e.domId||e.id),s=a.insert("g").attr("class","label").attr("style",e.labelStyle);let c;c=void 0===e.labelText?"":"string"==typeof e.labelText?e.labelText:e.labelText[0];const l=s.node().appendChild(us(Ft(Xd(c),ar()),e.labelStyle,!1,r));let h=l.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=l.children[0],e=(0,o.Ys)(l);h=t.getBoundingClientRect(),e.attr("width",h.width),e.attr("height",h.height)}const u=e.padding/2;return s.attr("transform","translate("+-h.width/2+", "+-h.height/2+")"),{shapeSvg:a,bbox:h,halfPadding:u,label:s}},ps=(t,e)=>{const n=e.node().getBBox();t.width=n.width,t.height=n.height};function fs(t,e,n,r){return t.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","label-container").attr("transform","translate("+-e/2+","+n/2+")")}let gs={},ys={},ms={};const bs=(t,e)=>(Nt.trace("In isDecendant",e," ",t," = ",ys[e].includes(t)),!!ys[e].includes(t)),_s=(t,e,n,r)=>{Nt.warn("Copying children of ",t,"root",r,"data",e.node(t),r);const i=e.children(t)||[];t!==r&&i.push(t),Nt.warn("Copying (nodes) clusterId",t,"nodes",i),i.forEach((i=>{if(e.children(i).length>0)_s(i,e,n,r);else{const a=e.node(i);Nt.info("cp ",i," to ",r," with parent ",t),n.setNode(i,a),r!==e.parent(i)&&(Nt.warn("Setting parent",i,e.parent(i)),n.setParent(i,e.parent(i))),t!==r&&i!==t?(Nt.debug("Setting parent",i,t),n.setParent(i,t)):(Nt.info("In copy ",t,"root",r,"data",e.node(t),r),Nt.debug("Not Setting parent for node=",i,"cluster!==rootId",t!==r,"node!==clusterId",i!==t));const s=e.edges(i);Nt.debug("Copying Edges",s),s.forEach((i=>{Nt.info("Edge",i);const a=e.edge(i.v,i.w,i.name);Nt.info("Edge data",a,r);try{((t,e)=>(Nt.info("Decendants of ",e," is ",ys[e]),Nt.info("Edge is ",t),t.v!==e&&t.w!==e&&(ys[e]?ys[e].includes(t.v)||bs(t.v,e)||bs(t.w,e)||ys[e].includes(t.w):(Nt.debug("Tilt, ",e,",not in decendants"),!1))))(i,r)?(Nt.info("Copying as ",i.v,i.w,a,i.name),n.setEdge(i.v,i.w,a,i.name),Nt.info("newGraph edges ",n.edges(),n.edge(n.edges()[0]))):Nt.info("Skipping copy of edge ",i.v,"--\x3e",i.w," rootId: ",r," clusterId:",t)}catch(s){Nt.error(s)}}))}Nt.debug("Removing node",i),e.removeNode(i)}))},xs=(t,e)=>{const n=e.children(t);let r=[...n];for(const i of n)ms[i]=t,r=[...r,...xs(i,e)];return r},vs=(t,e)=>{Nt.trace("Searching",t);const n=e.children(t);if(Nt.trace("Searching children of id ",t,n),n.length<1)return Nt.trace("This is a valid node",t),t;for(const r of n){const n=vs(r,e);if(n)return Nt.trace("Found replacement for",t," => ",n),n}},ks=t=>gs[t]&&gs[t].externalConnections&&gs[t]?gs[t].id:t,ws=(t,e)=>{if(Nt.warn("extractor - ",e,ut.c(t),t.children("D")),e>10)return void Nt.error("Bailing out");let n=t.nodes(),r=!1;for(const i of n){const e=t.children(i);r=r||e.length>0}if(r){Nt.debug("Nodes = ",n,e);for(const r of n)if(Nt.debug("Extracting node",r,gs,gs[r]&&!gs[r].externalConnections,!t.parent(r),t.node(r),t.children("D")," Depth ",e),gs[r])if(!gs[r].externalConnections&&t.children(r)&&t.children(r).length>0){Nt.warn("Cluster without external connections, without a parent and with children",r,e);let n="TB"===t.graph().rankdir?"LR":"TB";gs[r]&&gs[r].clusterData&&gs[r].clusterData.dir&&(n=gs[r].clusterData.dir,Nt.warn("Fixing dir",gs[r].clusterData.dir,n));const i=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:n,nodesep:50,ranksep:50,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));Nt.warn("Old graph before copy",ut.c(t)),_s(r,t,i,r),t.setNode(r,{clusterNode:!0,id:r,clusterData:gs[r].clusterData,labelText:gs[r].labelText,graph:i}),Nt.warn("New graph after copy node: (",r,")",ut.c(i)),Nt.debug("Old graph after copy",ut.c(t))}else Nt.warn("Cluster ** ",r," **not meeting the criteria !externalConnections:",!gs[r].externalConnections," no parent: ",!t.parent(r)," children ",t.children(r)&&t.children(r).length>0,t.children("D"),e),Nt.debug(gs);else Nt.debug("Not a cluster",r,e);n=t.nodes(),Nt.warn("New list of nodes",n);for(const r of n){const n=t.node(r);Nt.warn(" Now next level",r,n),n.clusterNode&&ws(n.graph,e+1)}}else Nt.debug("Done, no node has children",t.nodes())},Es=(t,e)=>{if(0===e.length)return[];let n=Object.assign(e);return e.forEach((e=>{const r=t.children(e),i=Es(t,r);n=[...n,...i]})),n};function Cs(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}function Ts(t,e,n,r){var i,a,s,o,c,l,h,u,d,p,f,g,y;if(i=e.y-t.y,s=t.x-e.x,c=e.x*t.y-t.x*e.y,d=i*n.x+s*n.y+c,p=i*r.x+s*r.y+c,!(0!==d&&0!==p&&Ss(d,p)||(a=r.y-n.y,o=n.x-r.x,l=r.x*n.y-n.x*r.y,h=a*t.x+o*t.y+l,u=a*e.x+o*e.y+l,0!==h&&0!==u&&Ss(h,u)||0==(f=i*o-a*s))))return g=Math.abs(f/2),{x:(y=s*l-o*c)<0?(y-g)/f:(y+g)/f,y:(y=a*c-i*l)<0?(y-g)/f:(y+g)/f}}function Ss(t,e){return t*e>0}const As=(t,e)=>{var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}},Ls={node:function(t,e){return t.intersect(e)},circle:function(t,e,n){return Cs(t,e,e,n)},ellipse:Cs,polygon:function(t,e,n){var r=t.x,i=t.y,a=[],s=Number.POSITIVE_INFINITY,o=Number.POSITIVE_INFINITY;"function"==typeof e.forEach?e.forEach((function(t){s=Math.min(s,t.x),o=Math.min(o,t.y)})):(s=Math.min(s,e.x),o=Math.min(o,e.y));for(var c=r-t.width/2-s,l=i-t.height/2-o,h=0;h<e.length;h++){var u=e[h],d=e[h<e.length-1?h+1:0],p=Ts(t,n,{x:c+u.x,y:l+u.y},{x:c+d.x,y:l+d.y});p&&a.push(p)}return a.length?(a.length>1&&a.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),a[0]):t},rect:As},Bs=(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.info("Classes = ",e.classes);const a=n.insert("rect",":first-child");return a.attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},Ns=(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding+(r.height+e.padding),a=[{x:i/2,y:0},{x:i,y:-i/2},{x:i/2,y:-i},{x:0,y:-i/2}];Nt.info("Question main (Circle)");const s=fs(n,i,i,a);return s.attr("style",e.style),ps(e,s),e.intersect=function(t){return Nt.warn("Intersect called"),Ls.polygon(e,a,t)},n};function Ds(t,e,n,r){const i=[],a=t=>{i.push(t,0)},s=t=>{i.push(0,t)};e.includes("t")?(Nt.debug("add top border"),a(n)):s(n),e.includes("r")?(Nt.debug("add right border"),a(r)):s(r),e.includes("b")?(Nt.debug("add bottom border"),a(n)):s(n),e.includes("l")?(Nt.debug("add left border"),a(r)):s(r),t.attr("stroke-dasharray",i.join(" "))}const Os=(t,e,n)=>{const r=t.insert("g").attr("class","node default").attr("id",e.domId||e.id);let i=70,a=10;"LR"===n&&(i=10,a=70);const s=r.append("rect").attr("x",-1*i/2).attr("y",-1*a/2).attr("width",i).attr("height",a).attr("class","fork-join");return ps(e,s),e.height=e.height+e.padding/2,e.width=e.width+e.padding/2,e.intersect=function(t){return Ls.rect(e,t)},r},Ms={rhombus:Ns,question:Ns,rect:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.trace("Classes = ",e.classes);const a=n.insert("rect",":first-child"),s=r.width+e.padding,o=r.height+e.padding;if(a.attr("class","basic label-container").attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",s).attr("height",o),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(a,e.props.borders,s,o),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},labelRect:(t,e)=>{const{shapeSvg:n}=ds(t,e,"label",!0);Nt.trace("Classes = ",e.classes);const r=n.insert("rect",":first-child");if(r.attr("width",0).attr("height",0),n.attr("class","label edgeLabel"),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(r,e.props.borders,0,0),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,r),e.intersect=function(t){return Ls.rect(e,t)},n},rectWithTitle:(t,e)=>{let n;n=e.classes?"node "+e.classes:"node default";const r=t.insert("g").attr("class",n).attr("id",e.domId||e.id),i=r.insert("rect",":first-child"),a=r.insert("line"),s=r.insert("g").attr("class","label"),c=e.labelText.flat?e.labelText.flat():e.labelText;let l="";l="object"==typeof c?c[0]:c,Nt.info("Label text abc79",l,c,"object"==typeof c);const h=s.node().appendChild(us(l,e.labelStyle,!0,!0));let u={width:0,height:0};if(Pt(ar().flowchart.htmlLabels)){const t=h.children[0],e=(0,o.Ys)(h);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}Nt.info("Text 2",c);const d=c.slice(1,c.length);let p=h.getBBox();const f=s.node().appendChild(us(d.join?d.join("<br/>"):d,e.labelStyle,!0,!0));if(Pt(ar().flowchart.htmlLabels)){const t=f.children[0],e=(0,o.Ys)(f);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}const g=e.padding/2;return(0,o.Ys)(f).attr("transform","translate( "+(u.width>p.width?0:(p.width-u.width)/2)+", "+(p.height+g+5)+")"),(0,o.Ys)(h).attr("transform","translate( "+(u.width<p.width?0:-(p.width-u.width)/2)+", 0)"),u=s.node().getBBox(),s.attr("transform","translate("+-u.width/2+", "+(-u.height/2-g+3)+")"),i.attr("class","outer title-state").attr("x",-u.width/2-g).attr("y",-u.height/2-g).attr("width",u.width+e.padding).attr("height",u.height+e.padding),a.attr("class","divider").attr("x1",-u.width/2-g).attr("x2",u.width/2+g).attr("y1",-u.height/2-g+p.height+g).attr("y2",-u.height/2-g+p.height+g),ps(e,i),e.intersect=function(t){return Ls.rect(e,t)},r},choice:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=[{x:0,y:14},{x:14,y:0},{x:0,y:-14},{x:-14,y:0}];return n.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","state-start").attr("r",7).attr("width",28).attr("height",28),e.width=28,e.height=28,e.intersect=function(t){return Ls.circle(e,14,t)},n},circle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("circle",":first-child");return a.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("Circle main"),ps(e,a),e.intersect=function(t){return Nt.info("Circle intersect",e,r.width/2+i,t),Ls.circle(e,r.width/2+i,t)},n},doublecircle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("g",":first-child"),s=a.insert("circle"),o=a.insert("circle");return s.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i+5).attr("width",r.width+e.padding+10).attr("height",r.height+e.padding+10),o.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("DoubleCircle main"),ps(e,s),e.intersect=function(t){return Nt.info("DoubleCircle intersect",e,r.width/2+i+5,t),Ls.circle(e,r.width/2+i+5,t)},n},stadium:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=r.width+i/4+e.padding,s=n.insert("rect",":first-child").attr("style",e.style).attr("rx",i/2).attr("ry",i/2).attr("x",-a/2).attr("y",-i/2).attr("width",a).attr("height",i);return ps(e,s),e.intersect=function(t){return Ls.rect(e,t)},n},hexagon:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=i/4,s=r.width+2*a+e.padding,o=[{x:a,y:0},{x:s-a,y:0},{x:s,y:-i/2},{x:s-a,y:-i},{x:a,y:-i},{x:0,y:-i/2}],c=fs(n,s,i,o);return c.attr("style",e.style),ps(e,c),e.intersect=function(t){return Ls.polygon(e,o,t)},n},rect_left_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-a/2,y:0},{x:i,y:0},{x:i,y:-a},{x:-a/2,y:-a},{x:0,y:-a/2}];return fs(n,i,a,s).attr("style",e.style),e.width=i+a,e.height=a,e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_right:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_left:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:2*a/6,y:0},{x:i+a/6,y:0},{x:i-2*a/6,y:-a},{x:-a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i+2*a/6,y:0},{x:i-a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},inv_trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:-2*a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},rect_right_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i+a/2,y:0},{x:i,y:-a/2},{x:i+a/2,y:-a},{x:0,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},cylinder:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=i/2,s=a/(2.5+i/50),o=r.height+s+e.padding,c="M 0,"+s+" a "+a+","+s+" 0,0,0 "+i+" 0 a "+a+","+s+" 0,0,0 "+-i+" 0 l 0,"+o+" a "+a+","+s+" 0,0,0 "+i+" 0 l 0,"+-o,l=n.attr("label-offset-y",s).insert("path",":first-child").attr("style",e.style).attr("d",c).attr("transform","translate("+-i/2+","+-(o/2+s)+")");return ps(e,l),e.intersect=function(t){const n=Ls.rect(e,t),r=n.x-e.x;if(0!=a&&(Math.abs(r)<e.width/2||Math.abs(r)==e.width/2&&Math.abs(n.y-e.y)>e.height/2-s)){let i=s*s*(1-r*r/(a*a));0!=i&&(i=Math.sqrt(i)),i=s-i,t.y-e.y>0&&(i=-i),n.y+=i}return n},n},start:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child");return r.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),ps(e,r),e.intersect=function(t){return Ls.circle(e,7,t)},n},end:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child"),i=n.insert("circle",":first-child");return i.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),r.attr("class","state-end").attr("r",5).attr("width",10).attr("height",10),ps(e,i),e.intersect=function(t){return Ls.circle(e,7,t)},n},note:Bs,subroutine:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i,y:0},{x:i,y:-a},{x:0,y:-a},{x:0,y:0},{x:-8,y:0},{x:i+8,y:0},{x:i+8,y:-a},{x:-8,y:-a},{x:-8,y:0}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},fork:Os,join:Os,class_box:(t,e)=>{const n=e.padding/2;let r;r=e.classes?"node "+e.classes:"node default";const i=t.insert("g").attr("class",r).attr("id",e.domId||e.id),a=i.insert("rect",":first-child"),s=i.insert("line"),c=i.insert("line");let l=0,h=4;const u=i.insert("g").attr("class","label");let d=0;const p=e.classData.annotations&&e.classData.annotations[0],f=e.classData.annotations[0]?"\xab"+e.classData.annotations[0]+"\xbb":"",g=u.node().appendChild(us(f,e.labelStyle,!0,!0));let y=g.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=g.children[0],e=(0,o.Ys)(g);y=t.getBoundingClientRect(),e.attr("width",y.width),e.attr("height",y.height)}e.classData.annotations[0]&&(h+=y.height+4,l+=y.width);let m=e.classData.id;void 0!==e.classData.type&&""!==e.classData.type&&(ar().flowchart.htmlLabels?m+="&lt;"+e.classData.type+"&gt;":m+="<"+e.classData.type+">");const b=u.node().appendChild(us(m,e.labelStyle,!0,!0));(0,o.Ys)(b).attr("class","classTitle");let _=b.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=b.children[0],e=(0,o.Ys)(b);_=t.getBoundingClientRect(),e.attr("width",_.width),e.attr("height",_.height)}h+=_.height+4,_.width>l&&(l=_.width);const x=[];e.classData.members.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,x.push(i)})),h+=8;const v=[];if(e.classData.methods.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,v.push(i)})),h+=8,p){let t=(l-y.width)/2;(0,o.Ys)(g).attr("transform","translate( "+(-1*l/2+t)+", "+-1*h/2+")"),d=y.height+4}let k=(l-_.width)/2;return(0,o.Ys)(b).attr("transform","translate( "+(-1*l/2+k)+", "+(-1*h/2+d)+")"),d+=_.height+4,s.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,x.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d+4)+")"),d+=_.height+4})),d+=8,c.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,v.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d)+")"),d+=_.height+4})),a.attr("class","outer title-state").attr("x",-l/2-n).attr("y",-h/2-n).attr("width",l+e.padding).attr("height",h+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},i}};let Is={};const Fs=(t,e,n)=>{let r,i;if(e.link){let a;"sandbox"===ar().securityLevel?a="_top":e.linkTarget&&(a=e.linkTarget||"_blank"),r=t.insert("svg:a").attr("xlink:href",e.link).attr("target",a),i=Ms[e.shape](r,e,n)}else i=Ms[e.shape](t,e,n),r=i;return e.tooltip&&i.attr("title",e.tooltip),e.class&&i.attr("class","node default "+e.class),Is[e.id]=r,e.haveCallback&&Is[e.id].attr("class",Is[e.id].attr("class")+" clickable"),r},$s=t=>{const e=Is[t.id];Nt.trace("Transforming node",t.diff,t,"translate("+(t.x-t.width/2-5)+", "+t.width/2+")");const n=t.diff||0;return t.clusterNode?e.attr("transform","translate("+(t.x+n-t.width/2)+", "+(t.y-t.height/2-8)+")"):e.attr("transform","translate("+t.x+", "+t.y+")"),n},Rs={rect:(t,e)=>{Nt.trace("Creating subgraph rect for ",e.id,e);const n=t.insert("g").attr("class","cluster"+(e.class?" "+e.class:"")).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let s=a.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=a.children[0],e=(0,o.Ys)(a);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}const c=0*e.padding,l=c/2,h=e.width<=s.width+c?s.width+c:e.width;e.width<=s.width+c?e.diff=(s.width-e.width)/2-e.padding/2:e.diff=-e.padding/2,Nt.trace("Data ",e,JSON.stringify(e)),r.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-h/2).attr("y",e.y-e.height/2-l).attr("width",h).attr("height",e.height+c),i.attr("transform","translate("+(e.x-s.width/2)+", "+(e.y-e.height/2)+")");const u=r.node().getBBox();return e.width=u.width,e.height=u.height,e.intersect=function(t){return As(e,t)},n},roundedWithTitle:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=n.append("rect"),s=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let c=s.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=s.children[0],e=(0,o.Ys)(s);c=t.getBoundingClientRect(),e.attr("width",c.width),e.attr("height",c.height)}c=s.getBBox();const l=0*e.padding,h=l/2,u=e.width<=c.width+e.padding?c.width+e.padding:e.width;e.width<=c.width+e.padding?e.diff=(c.width+0*e.padding-e.width)/2:e.diff=-e.padding/2,r.attr("class","outer").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h).attr("width",u+l).attr("height",e.height+l),a.attr("class","inner").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h+c.height-1).attr("width",u+l).attr("height",e.height+l-c.height-3),i.attr("transform","translate("+(e.x-c.width/2)+", "+(e.y-e.height/2-e.padding/3+(Pt(ar().flowchart.htmlLabels)?5:3))+")");const d=r.node().getBBox();return e.height=d.height,e.intersect=function(t){return As(e,t)},n},noteGroup:(t,e)=>{const n=t.insert("g").attr("class","note-cluster").attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2-a).attr("width",e.width+i).attr("height",e.height+i).attr("fill","none");const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.intersect=function(t){return As(e,t)},n},divider:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("class","divider").attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2).attr("width",e.width+i).attr("height",e.height+i);const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.diff=-e.padding/2,e.intersect=function(t){return As(e,t)},n}};let Zs={};let Ps={},js={};const Ys=(t,e)=>{const n=us(e.label,e.labelStyle),r=t.insert("g").attr("class","edgeLabel"),i=r.insert("g").attr("class","label");i.node().appendChild(n);let a,s=n.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=n.children[0],e=(0,o.Ys)(n);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}if(i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),Ps[e.id]=r,e.width=s.width,e.height=s.height,e.startLabelLeft){const n=us(e.startLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startLeft=r,zs(a,e.startLabelLeft)}if(e.startLabelRight){const n=us(e.startLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=r.node().appendChild(n),i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startRight=r,zs(a,e.startLabelRight)}if(e.endLabelLeft){const n=us(e.endLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endLeft=r,zs(a,e.endLabelLeft)}if(e.endLabelRight){const n=us(e.endLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endRight=r,zs(a,e.endLabelRight)}return n};function zs(t,e){ar().flowchart.htmlLabels&&t&&(t.style.width=9*e.length+"px",t.style.height="12px")}const Us=(t,e)=>{Nt.warn("abc88 cutPathAtIntersect",t,e);let n=[],r=t[0],i=!1;return t.forEach((t=>{if(Nt.info("abc88 checking point",t,e),((t,e)=>{const n=t.x,r=t.y,i=Math.abs(e.x-n),a=Math.abs(e.y-r),s=t.width/2,o=t.height/2;return i>=s||a>=o})(e,t)||i)Nt.warn("abc88 outside",t,r),r=t,i||n.push(t);else{const a=((t,e,n)=>{Nt.warn(`intersection calc abc89:\n  outsidePoint: ${JSON.stringify(e)}\n  insidePoint : ${JSON.stringify(n)}\n  node        : x:${t.x} y:${t.y} w:${t.width} h:${t.height}`);const r=t.x,i=t.y,a=Math.abs(r-n.x),s=t.width/2;let o=n.x<e.x?s-a:s+a;const c=t.height/2,l=Math.abs(e.y-n.y),h=Math.abs(e.x-n.x);if(Math.abs(i-e.y)*s>Math.abs(r-e.x)*c){let t=n.y<e.y?e.y-c-i:i-c-e.y;o=h*t/l;const r={x:n.x<e.x?n.x+o:n.x-h+o,y:n.y<e.y?n.y+l-t:n.y-l+t};return 0===o&&(r.x=e.x,r.y=e.y),0===h&&(r.x=e.x),0===l&&(r.y=e.y),Nt.warn(`abc89 topp/bott calc, Q ${l}, q ${t}, R ${h}, r ${o}`,r),r}{o=n.x<e.x?e.x-s-r:r-s-e.x;let t=l*o/h,i=n.x<e.x?n.x+h-o:n.x-h+o,a=n.y<e.y?n.y+t:n.y-t;return Nt.warn(`sides calc abc89, Q ${l}, q ${t}, R ${h}, r ${o}`,{_x:i,_y:a}),0===o&&(i=e.x,a=e.y),0===h&&(i=e.x),0===l&&(a=e.y),{x:i,y:a}}})(e,r,t);Nt.warn("abc88 inside",t,r,a),Nt.warn("abc88 intersection",a);let s=!1;n.forEach((t=>{s=s||t.x===a.x&&t.y===a.y})),n.some((t=>t.x===a.x&&t.y===a.y))?Nt.warn("abc88 no intersect",a,n):n.push(a),i=!0}})),Nt.warn("abc88 returning points",n),n},Ws=(t,e,n,r)=>{Nt.info("Graph in recursive render: XXX",ut.c(e),r);const i=e.graph().rankdir;Nt.trace("Dir in recursive render - dir:",i);const a=t.insert("g").attr("class","root");e.nodes()?Nt.info("Recursive render XXX",e.nodes()):Nt.info("No nodes found for",e),e.edges().length>0&&Nt.trace("Recursive edges",e.edge(e.edges()[0]));const s=a.insert("g").attr("class","clusters"),c=a.insert("g").attr("class","edgePaths"),l=a.insert("g").attr("class","edgeLabels"),h=a.insert("g").attr("class","nodes");e.nodes().forEach((function(t){const a=e.node(t);if(void 0!==r){const n=JSON.parse(JSON.stringify(r.clusterData));Nt.info("Setting data for cluster XXX (",t,") ",n,r),e.setNode(r.id,n),e.parent(t)||(Nt.trace("Setting parent",t,r.id),e.setParent(t,r.id,n))}if(Nt.info("(Insert) Node XXX"+t+": "+JSON.stringify(e.node(t))),a&&a.clusterNode){Nt.info("Cluster identified",t,a.width,e.node(t));const r=Ws(h,a.graph,n,e.node(t)),i=r.elem;ps(a,i),a.diff=r.diff||0,Nt.info("Node bounds (abc123)",t,a,a.width,a.x,a.y),((t,e)=>{Is[e.id]=t})(i,a),Nt.warn("Recursive render complete ",i,a)}else e.children(t).length>0?(Nt.info("Cluster - the non recursive path XXX",t,a.id,a,e),Nt.info(vs(a.id,e)),gs[a.id]={id:vs(a.id,e),node:a}):(Nt.info("Node - the non recursive path",t,a.id,a),Fs(h,e.node(t),i))})),e.edges().forEach((function(t){const n=e.edge(t.v,t.w,t.name);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t)),Nt.info("Edge "+t.v+" -> "+t.w+": ",t," ",JSON.stringify(e.edge(t))),Nt.info("Fix",gs,"ids:",t.v,t.w,"Translateing: ",gs[t.v],gs[t.w]),Ys(l,n)})),e.edges().forEach((function(t){Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t))})),Nt.info("#############################################"),Nt.info("###                Layout                 ###"),Nt.info("#############################################"),Nt.info(e),(0,lt.bK)(e),Nt.info("Graph after layout:",ut.c(e));let u=0;return(t=>Es(t,t.children()))(e).forEach((function(t){const n=e.node(t);Nt.info("Position "+t+": "+JSON.stringify(e.node(t))),Nt.info("Position "+t+": ("+n.x,","+n.y,") width: ",n.width," height: ",n.height),n&&n.clusterNode?$s(n):e.children(t).length>0?(((t,e)=>{Nt.trace("Inserting cluster");const n=e.shape||"rect";Zs[e.id]=Rs[n](t,e)})(s,n),gs[n.id].node=n):$s(n)})),e.edges().forEach((function(t){const r=e.edge(t);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(r),r);const i=function(t,e,n,r,i,a){let s=n.points,c=!1;const l=a.node(e.v);var h=a.node(e.w);Nt.info("abc88 InsertEdge: ",n),h.intersect&&l.intersect&&(s=s.slice(1,n.points.length-1),s.unshift(l.intersect(s[0])),Nt.info("Last point",s[s.length-1],h,h.intersect(s[s.length-1])),s.push(h.intersect(s[s.length-1]))),n.toCluster&&(Nt.info("to cluster abc88",r[n.toCluster]),s=Us(n.points,r[n.toCluster].node),c=!0),n.fromCluster&&(Nt.info("from cluster abc88",r[n.fromCluster]),s=Us(s.reverse(),r[n.fromCluster].node).reverse(),c=!0);const u=s.filter((t=>!Number.isNaN(t.y)));let d;d=("graph"===i||"flowchart"===i)&&n.curve||o.$0Z;const p=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(d);let f;switch(n.thickness){case"normal":f="edge-thickness-normal";break;case"thick":f="edge-thickness-thick";break;default:f=""}switch(n.pattern){case"solid":f+=" edge-pattern-solid";break;case"dotted":f+=" edge-pattern-dotted";break;case"dashed":f+=" edge-pattern-dashed"}const g=t.append("path").attr("d",p(u)).attr("id",n.id).attr("class"," "+f+(n.classes?" "+n.classes:"")).attr("style",n.style);let y="";switch((ar().flowchart.arrowMarkerAbsolute||ar().state.arrowMarkerAbsolute)&&(y=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,y=y.replace(/\(/g,"\\("),y=y.replace(/\)/g,"\\)")),Nt.info("arrowTypeStart",n.arrowTypeStart),Nt.info("arrowTypeEnd",n.arrowTypeEnd),n.arrowTypeStart){case"arrow_cross":g.attr("marker-start","url("+y+"#"+i+"-crossStart)");break;case"arrow_point":g.attr("marker-start","url("+y+"#"+i+"-pointStart)");break;case"arrow_barb":g.attr("marker-start","url("+y+"#"+i+"-barbStart)");break;case"arrow_circle":g.attr("marker-start","url("+y+"#"+i+"-circleStart)");break;case"aggregation":g.attr("marker-start","url("+y+"#"+i+"-aggregationStart)");break;case"extension":g.attr("marker-start","url("+y+"#"+i+"-extensionStart)");break;case"composition":g.attr("marker-start","url("+y+"#"+i+"-compositionStart)");break;case"dependency":g.attr("marker-start","url("+y+"#"+i+"-dependencyStart)");break;case"lollipop":g.attr("marker-start","url("+y+"#"+i+"-lollipopStart)")}switch(n.arrowTypeEnd){case"arrow_cross":g.attr("marker-end","url("+y+"#"+i+"-crossEnd)");break;case"arrow_point":g.attr("marker-end","url("+y+"#"+i+"-pointEnd)");break;case"arrow_barb":g.attr("marker-end","url("+y+"#"+i+"-barbEnd)");break;case"arrow_circle":g.attr("marker-end","url("+y+"#"+i+"-circleEnd)");break;case"aggregation":g.attr("marker-end","url("+y+"#"+i+"-aggregationEnd)");break;case"extension":g.attr("marker-end","url("+y+"#"+i+"-extensionEnd)");break;case"composition":g.attr("marker-end","url("+y+"#"+i+"-compositionEnd)");break;case"dependency":g.attr("marker-end","url("+y+"#"+i+"-dependencyEnd)");break;case"lollipop":g.attr("marker-end","url("+y+"#"+i+"-lollipopEnd)")}let m={};return c&&(m.updatedPath=s),m.originalPath=n.points,m}(c,t,r,gs,n,e);((t,e)=>{Nt.info("Moving label abc78 ",t.id,t.label,Ps[t.id]);let n=e.updatedPath?e.updatedPath:e.originalPath;if(t.label){const r=Ps[t.id];let i=t.x,a=t.y;if(n){const r=Gn.calcLabelPosition(n);Nt.info("Moving label "+t.label+" from (",i,",",a,") to (",r.x,",",r.y,") abc78"),e.updatedPath&&(i=r.x,a=r.y)}r.attr("transform","translate("+i+", "+a+")")}if(t.startLabelLeft){const e=js[t.id].startLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.startLabelRight){const e=js[t.id].startRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelLeft){const e=js[t.id].endLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelRight){const e=js[t.id].endRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}})(r,i)})),e.nodes().forEach((function(t){const n=e.node(t);Nt.info(t,n.type,n.diff),"group"===n.type&&(u=n.diff)})),{elem:a,diff:u}},qs=(t,e,n,r,i)=>{hs(t,n,r,i),Is={},Ps={},js={},Zs={},ys={},ms={},gs={},Nt.warn("Graph at first:",ut.c(e)),((t,e)=>{!t||e>10?Nt.debug("Opting out, no graph "):(Nt.debug("Opting in, graph "),t.nodes().forEach((function(e){t.children(e).length>0&&(Nt.warn("Cluster identified",e," Replacement id in edges: ",vs(e,t)),ys[e]=xs(e,t),gs[e]={id:vs(e,t),clusterData:t.node(e)})})),t.nodes().forEach((function(e){const n=t.children(e),r=t.edges();n.length>0?(Nt.debug("Cluster identified",e,ys),r.forEach((t=>{t.v!==e&&t.w!==e&&bs(t.v,e)^bs(t.w,e)&&(Nt.warn("Edge: ",t," leaves cluster ",e),Nt.warn("Decendants of XXX ",e,": ",ys[e]),gs[e].externalConnections=!0)}))):Nt.debug("Not a cluster ",e,ys)})),t.edges().forEach((function(e){const n=t.edge(e);Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(e)),Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(t.edge(e)));let r=e.v,i=e.w;if(Nt.warn("Fix XXX",gs,"ids:",e.v,e.w,"Translating: ",gs[e.v]," --- ",gs[e.w]),gs[e.v]&&gs[e.w]&&gs[e.v]===gs[e.w]){Nt.warn("Fixing and trixing link to self - removing XXX",e.v,e.w,e.name),Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name);const a=e.w+"---"+e.v;t.setNode(a,{domId:a,id:a,labelStyle:"",labelText:n.label,padding:0,shape:"labelRect",style:""});const s=JSON.parse(JSON.stringify(n)),o=JSON.parse(JSON.stringify(n));s.label="",s.arrowTypeEnd="none",o.label="",s.fromCluster=e.v,o.toCluster=e.v,t.setEdge(r,a,s,e.name+"-cyclic-special"),t.setEdge(a,i,o,e.name+"-cyclic-special")}else(gs[e.v]||gs[e.w])&&(Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name),r!==e.v&&(n.fromCluster=e.v),i!==e.w&&(n.toCluster=e.w),Nt.warn("Fix Replacing with XXX",r,i,e.name),t.setEdge(r,i,n,e.name))})),Nt.warn("Adjusted Graph",ut.c(t)),ws(t,0),Nt.trace(gs))})(e),Nt.warn("Graph after:",ut.c(e)),Ws(t,e,r)},Hs=t=>Yt.sanitizeText(t,ar());let Vs={dividerMargin:10,padding:5,textHeight:10};function Gs(t){let e;switch(t){case 0:e="aggregation";break;case 1:e="extension";break;case 2:e="composition";break;case 3:e="dependency";break;case 4:e="lollipop";break;default:e="none"}return e}const Xs={setConf:function(t){Object.keys(t).forEach((function(e){Vs[e]=t[e]}))},draw:function(t,e,n,r){Nt.info("Drawing class - ",e);const i=ar().flowchart,a=ar().securityLevel;Nt.info("config:",i);const s=i.nodeSpacing||50,c=i.rankSpacing||50,l=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:r.db.getDirection(),nodesep:s,ranksep:c,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}})),h=r.db.getClasses(),u=r.db.getRelations(),d=r.db.getNotes();let p;Nt.info(u),function(t,e,n,r){const i=Object.keys(t);Nt.info("keys:",i),Nt.info(t),i.forEach((function(n){const i=t[n];let a="";i.cssClasses.length>0&&(a=a+" "+i.cssClasses.join(" "));const s={labelStyle:""};let o=void 0!==i.text?i.text:i.id,c="";i.type,c="class_box",e.setNode(i.id,{labelStyle:s.labelStyle,shape:c,labelText:Hs(o),classData:i,rx:0,ry:0,class:a,style:s.style,id:i.id,domId:i.domId,tooltip:r.db.getTooltip(i.id)||"",haveCallback:i.haveCallback,link:i.link,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s.labelStyle,shape:c,labelText:o,rx:0,ry:0,class:a,style:s.style,id:i.id,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding})}))}(h,l,0,r),function(t,e){const n=ar().flowchart;let r=0;t.forEach((function(i){r++;const a={classes:"relation"};a.pattern=1==i.relation.lineType?"dashed":"solid",a.id="id"+r,"arrow_open"===i.type?a.arrowhead="none":a.arrowhead="normal",Nt.info(a,i),a.startLabelRight="none"===i.relationTitle1?"":i.relationTitle1,a.endLabelLeft="none"===i.relationTitle2?"":i.relationTitle2,a.arrowTypeStart=Gs(i.relation.type1),a.arrowTypeEnd=Gs(i.relation.type2);let s="",c="";if(void 0!==i.style){const t=Mn(i.style);s=t.style,c=t.labelStyle}else s="fill:none";a.style=s,a.labelStyle=c,void 0!==i.interpolate?a.curve=Dn(i.interpolate,o.c_6):void 0!==t.defaultInterpolate?a.curve=Dn(t.defaultInterpolate,o.c_6):a.curve=Dn(n.curve,o.c_6),i.text=i.title,void 0===i.text?void 0!==i.style&&(a.arrowheadStyle="fill: #333"):(a.arrowheadStyle="fill: #333",a.labelpos="c",ar().flowchart.htmlLabels?(a.labelType="html",a.label='<span class="edgeLabel">'+i.text+"</span>"):(a.labelType="text",a.label=i.text.replace(Yt.lineBreakRegex,"\n"),void 0===i.style&&(a.style=a.style||"stroke: #333; stroke-width: 1.5px;fill:none"),a.labelStyle=a.labelStyle.replace("color:","fill:"))),e.setEdge(i.id1,i.id2,a,r)}))}(u,l),function(t,e,n,r){Nt.info(t),t.forEach((function(t,i){const a=t,s="",c="";let l=a.text,h="note";if(e.setNode(a.id,{labelStyle:s,shape:h,labelText:Hs(l),noteData:a,rx:0,ry:0,class:"",style:c,id:a.id,domId:a.id,tooltip:"",type:"note",padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s,shape:h,labelText:l,rx:0,ry:0,style:c,id:a.id,type:"note",padding:ar().flowchart.padding}),!a.class||!(a.class in r))return;const u=n+i,d={classes:"relation",pattern:"dotted"};d.id=`edgeNote${u}`,d.arrowhead="none",Nt.info(`Note edge: ${JSON.stringify(d)}, ${JSON.stringify(a)}`),d.startLabelRight="",d.endLabelLeft="",d.arrowTypeStart="none",d.arrowTypeEnd="none",d.style="fill:none",d.labelStyle="",d.curve=Dn(Vs.curve,o.c_6),e.setEdge(a.id,a.class,d,u)}))}(d,l,u.length+1,h),"sandbox"===a&&(p=(0,o.Ys)("#i"+e));const f="sandbox"===a?(0,o.Ys)(p.nodes()[0].contentDocument.body):(0,o.Ys)("body"),g=f.select(`[id="${e}"]`),y=f.select("#"+e+" g");if(qs(y,l,["aggregation","extension","composition","dependency","lollipop"],"classDiagram",e),Gn.insertTitle(g,"classTitleText",i.titleTopMargin,r.db.getDiagramTitle()),pr(l,g,i.diagramPadding,i.useMaxWidth),!i.htmlLabels){const t="sandbox"===a?p.nodes()[0].contentDocument:document,n=t.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of n){const n=e.getBBox(),r=t.createElementNS("http://www.w3.org/2000/svg","rect");r.setAttribute("rx",0),r.setAttribute("ry",0),r.setAttribute("width",n.width),r.setAttribute("height",n.height),e.insertBefore(r,e.firstChild)}}}};var Ks=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,23,25,27,29,30,31,51],a=[1,17],s=[1,18],o=[1,19],c=[1,20],l=[1,21],h=[1,22],u=[1,25],d=[1,30],p=[1,31],f=[1,32],g=[1,33],y=[6,9,11,15,20,23,25,27,29,30,31,44,45,46,47,51],m=[1,45],b=[30,31,48,49],_=[4,6,9,11,23,25,27,29,30,31,51],x=[44,45,46,47],v=[22,37],k=[1,65],w=[1,64],E=[22,37,39,41],C={trace:function(){},yy:{},symbols_:{error:2,start:3,ER_DIAGRAM:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,entityName:17,relSpec:18,role:19,BLOCK_START:20,attributes:21,BLOCK_STOP:22,title:23,title_value:24,acc_title:25,acc_title_value:26,acc_descr:27,acc_descr_value:28,acc_descr_multiline_value:29,ALPHANUM:30,ENTITY_NAME:31,attribute:32,attributeType:33,attributeName:34,attributeKeyTypeList:35,attributeComment:36,ATTRIBUTE_WORD:37,attributeKeyType:38,COMMA:39,ATTRIBUTE_KEY:40,COMMENT:41,cardinality:42,relType:43,ZERO_OR_ONE:44,ZERO_OR_MORE:45,ONE_OR_MORE:46,ONLY_ONE:47,NON_IDENTIFYING:48,IDENTIFYING:49,WORD:50,open_directive:51,type_directive:52,arg_directive:53,close_directive:54,$accept:0,$end:1},terminals_:{2:"error",4:"ER_DIAGRAM",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",20:"BLOCK_START",22:"BLOCK_STOP",23:"title",24:"title_value",25:"acc_title",26:"acc_title_value",27:"acc_descr",28:"acc_descr_value",29:"acc_descr_multiline_value",30:"ALPHANUM",31:"ENTITY_NAME",37:"ATTRIBUTE_WORD",39:"COMMA",40:"ATTRIBUTE_KEY",41:"COMMENT",44:"ZERO_OR_ONE",45:"ZERO_OR_MORE",46:"ONE_OR_MORE",47:"ONLY_ONE",48:"NON_IDENTIFYING",49:"IDENTIFYING",50:"WORD",51:"open_directive",52:"type_directive",53:"arg_directive",54:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,5],[10,4],[10,3],[10,1],[10,2],[10,2],[10,2],[10,1],[17,1],[17,1],[21,1],[21,2],[32,2],[32,3],[32,3],[32,4],[33,1],[34,1],[35,1],[35,3],[38,1],[36,1],[18,3],[42,1],[42,1],[42,1],[42,1],[43,1],[43,1],[19,1],[19,1],[19,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:break;case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:case 20:case 43:case 28:case 29:case 32:this.$=a[o];break;case 12:r.addEntity(a[o-4]),r.addEntity(a[o-2]),r.addRelationship(a[o-4],a[o],a[o-2],a[o-3]);break;case 13:r.addEntity(a[o-3]),r.addAttributes(a[o-3],a[o-1]);break;case 14:r.addEntity(a[o-2]);break;case 15:r.addEntity(a[o]);break;case 16:case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:case 41:case 42:case 33:this.$=a[o].replace(/"/g,"");break;case 22:case 30:this.$=[a[o]];break;case 23:a[o].push(a[o-1]),this.$=a[o];break;case 24:this.$={attributeType:a[o-1],attributeName:a[o]};break;case 25:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeKeyTypeList:a[o]};break;case 26:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeComment:a[o]};break;case 27:this.$={attributeType:a[o-3],attributeName:a[o-2],attributeKeyTypeList:a[o-1],attributeComment:a[o]};break;case 31:a[o-2].push(a[o]),this.$=a[o-2];break;case 34:this.$={cardA:a[o],relType:a[o-1],cardB:a[o-2]};break;case 35:this.$=r.Cardinality.ZERO_OR_ONE;break;case 36:this.$=r.Cardinality.ZERO_OR_MORE;break;case 37:this.$=r.Cardinality.ONE_OR_MORE;break;case 38:this.$=r.Cardinality.ONLY_ONE;break;case 39:this.$=r.Identification.NON_IDENTIFYING;break;case 40:this.$=r.Identification.IDENTIFYING;break;case 44:r.parseDirective("%%{","open_directive");break;case 45:r.parseDirective(a[o],"type_directive");break;case 46:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 47:r.parseDirective("}%%","close_directive","er")}},table:[{3:1,4:n,7:3,12:4,51:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,51:r},{13:8,52:[1,9]},{52:[2,44]},{6:[1,10],7:15,8:11,9:[1,12],10:13,11:[1,14],12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},{1:[2,2]},{14:23,15:[1,24],54:u},e([15,54],[2,45]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:15,10:26,12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),e(i,[2,15],{18:27,42:29,20:[1,28],44:d,45:p,46:f,47:g}),{24:[1,34]},{26:[1,35]},{28:[1,36]},e(i,[2,19]),e(y,[2,20]),e(y,[2,21]),{11:[1,37]},{16:38,53:[1,39]},{11:[2,47]},e(i,[2,5]),{17:40,30:l,31:h},{21:41,22:[1,42],32:43,33:44,37:m},{43:46,48:[1,47],49:[1,48]},e(b,[2,35]),e(b,[2,36]),e(b,[2,37]),e(b,[2,38]),e(i,[2,16]),e(i,[2,17]),e(i,[2,18]),e(_,[2,9]),{14:49,54:u},{54:[2,46]},{15:[1,50]},{22:[1,51]},e(i,[2,14]),{21:52,22:[2,22],32:43,33:44,37:m},{34:53,37:[1,54]},{37:[2,28]},{42:55,44:d,45:p,46:f,47:g},e(x,[2,39]),e(x,[2,40]),{11:[1,56]},{19:57,30:[1,60],31:[1,59],50:[1,58]},e(i,[2,13]),{22:[2,23]},e(v,[2,24],{35:61,36:62,38:63,40:k,41:w}),e([22,37,40,41],[2,29]),e([30,31],[2,34]),e(_,[2,10]),e(i,[2,12]),e(i,[2,41]),e(i,[2,42]),e(i,[2,43]),e(v,[2,25],{36:66,39:[1,67],41:w}),e(v,[2,26]),e(E,[2,30]),e(v,[2,33]),e(E,[2,32]),e(v,[2,27]),{38:68,40:k},e(E,[2,31])],defaultActions:{5:[2,44],7:[2,2],25:[2,47],39:[2,46],45:[2,28],52:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},T=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("acc_title"),25;case 1:return this.popState(),"acc_title_value";case 2:return this.begin("acc_descr"),27;case 3:return this.popState(),"acc_descr_value";case 4:this.begin("acc_descr_multiline");break;case 5:this.popState();break;case 6:return"acc_descr_multiline_value";case 7:return this.begin("open_directive"),51;case 8:return this.begin("type_directive"),52;case 9:return this.popState(),this.begin("arg_directive"),15;case 10:return this.popState(),this.popState(),54;case 11:return 53;case 12:case 13:case 15:case 22:case 27:break;case 14:return 11;case 16:return 9;case 17:return 31;case 18:return 50;case 19:return 4;case 20:return this.begin("block"),20;case 21:return 39;case 23:return 40;case 24:case 25:return 37;case 26:return 41;case 28:return this.popState(),22;case 29:case 58:return e.yytext[0];case 30:case 34:case 35:case 48:return 44;case 31:case 32:case 33:case 41:case 43:case 50:return 46;case 36:case 37:case 38:case 39:case 40:case 42:case 49:return 45;case 44:case 45:case 46:case 47:return 47;case 51:case 54:case 55:case 56:return 48;case 52:case 53:return 49;case 57:return 30;case 59:return 6}},rules:[/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:[\s]+)/i,/^(?:"[^"%\r\n\v\b\\]+")/i,/^(?:"[^"]*")/i,/^(?:erDiagram\b)/i,/^(?:\{)/i,/^(?:,)/i,/^(?:\s+)/i,/^(?:\b((?:PK)|(?:FK)|(?:UK))\b)/i,/^(?:(.*?)[~](.*?)*[~])/i,/^(?:[A-Za-z_][A-Za-z0-9\-_\[\]\(\)]*)/i,/^(?:"[^"]*")/i,/^(?:[\n]+)/i,/^(?:\})/i,/^(?:.)/i,/^(?:one or zero\b)/i,/^(?:one or more\b)/i,/^(?:one or many\b)/i,/^(?:1\+)/i,/^(?:\|o\b)/i,/^(?:zero or one\b)/i,/^(?:zero or more\b)/i,/^(?:zero or many\b)/i,/^(?:0\+)/i,/^(?:\}o\b)/i,/^(?:many\(0\))/i,/^(?:many\(1\))/i,/^(?:many\b)/i,/^(?:\}\|)/i,/^(?:one\b)/i,/^(?:only one\b)/i,/^(?:1\b)/i,/^(?:\|\|)/i,/^(?:o\|)/i,/^(?:o\{)/i,/^(?:\|\{)/i,/^(?:\.\.)/i,/^(?:--)/i,/^(?:to\b)/i,/^(?:optionally to\b)/i,/^(?:\.-)/i,/^(?:-\.)/i,/^(?:[A-Za-z][A-Za-z0-9\-_]*)/i,/^(?:.)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[5,6],inclusive:!1},acc_descr:{rules:[3],inclusive:!1},acc_title:{rules:[1],inclusive:!1},open_directive:{rules:[8],inclusive:!1},type_directive:{rules:[9,10],inclusive:!1},arg_directive:{rules:[10,11],inclusive:!1},block:{rules:[21,22,23,24,25,26,27,28,29],inclusive:!1},INITIAL:{rules:[0,2,4,7,12,13,14,15,16,17,18,19,20,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],inclusive:!0}}},t);function S(){this.yy={}}return C.lexer=T,S.prototype=C,C.Parser=S,new S}();Ks.parser=Ks;const Qs=Ks,Js=t=>null!==t.match(/^\s*erDiagram/);let to={},eo=[];const no=function(t){return void 0===to[t]&&(to[t]={attributes:[]},Nt.info("Added new entity :",t)),to[t]},ro={Cardinality:{ZERO_OR_ONE:"ZERO_OR_ONE",ZERO_OR_MORE:"ZERO_OR_MORE",ONE_OR_MORE:"ONE_OR_MORE",ONLY_ONE:"ONLY_ONE"},Identification:{NON_IDENTIFYING:"NON_IDENTIFYING",IDENTIFYING:"IDENTIFYING"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().er,addEntity:no,addAttributes:function(t,e){let n,r=no(t);for(n=e.length-1;n>=0;n--)r.attributes.push(e[n]),Nt.debug("Added attribute ",e[n].attributeName)},getEntities:()=>to,addRelationship:function(t,e,n,r){let i={entityA:t,roleA:e,entityB:n,relSpec:r};eo.push(i),Nt.debug("Added new relationship :",i)},getRelationships:()=>eo,clear:function(){to={},eo=[],Dr()},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,setDiagramTitle:$r,getDiagramTitle:Rr},io={ONLY_ONE_START:"ONLY_ONE_START",ONLY_ONE_END:"ONLY_ONE_END",ZERO_OR_ONE_START:"ZERO_OR_ONE_START",ZERO_OR_ONE_END:"ZERO_OR_ONE_END",ONE_OR_MORE_START:"ONE_OR_MORE_START",ONE_OR_MORE_END:"ONE_OR_MORE_END",ZERO_OR_MORE_START:"ZERO_OR_MORE_START",ZERO_OR_MORE_END:"ZERO_OR_MORE_END"},ao=io,so=function(t,e){let n;t.append("defs").append("marker").attr("id",io.ONLY_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18 M15,0 L15,18"),t.append("defs").append("marker").attr("id",io.ONLY_ONE_END).attr("refX",18).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,0 L3,18 M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",21).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_END).attr("refX",30).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,0 L21,18"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q 18,0 36,18 Q 18,36 0,18 M42,9 L42,27"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_END).attr("refX",27).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,9 L3,27 M9,18 Q27,0 45,18 Q27,36 9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",48).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q18,0 36,18 Q18,36 0,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_END).attr("refX",39).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,18 Q39,0 57,18 Q39,36 21,18")},oo=/[^\dA-Za-z](\W)*/g;let co={},lo=new Map;const ho=function(t,e,n){let r;return Object.keys(e).forEach((function(i){const a=function(t="",e=""){const n=t.replace(oo,"");return`${go(e)}${go(n)}${vt(t,fo)}`}(i,"entity");lo.set(i,a);const s=t.append("g").attr("id",a);r=void 0===r?a:r;const o="text-"+a,c=s.append("text").classed("er entityLabel",!0).attr("id",o).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(i),{width:l,height:h}=((t,e,n)=>{const r=co.entityPadding/3,i=co.entityPadding/3,a=.85*co.fontSize,s=e.node().getBBox(),o=[];let c=!1,l=!1,h=0,u=0,d=0,p=0,f=s.height+2*r,g=1;n.forEach((t=>{void 0!==t.attributeKeyTypeList&&t.attributeKeyTypeList.length>0&&(c=!0),void 0!==t.attributeComment&&(l=!0)})),n.forEach((n=>{const i=`${e.node().id}-attr-${g}`;let s=0;const y=jt(n.attributeType),m=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-type`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(y),b=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-name`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeName),_={};_.tn=m,_.nn=b;const x=m.node().getBBox(),v=b.node().getBBox();if(h=Math.max(h,x.width),u=Math.max(u,v.width),s=Math.max(x.height,v.height),c){const e=void 0!==n.attributeKeyTypeList?n.attributeKeyTypeList.join(","):"",r=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-key`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(e);_.kn=r;const o=r.node().getBBox();d=Math.max(d,o.width),s=Math.max(s,o.height)}if(l){const e=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-comment`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeComment||"");_.cn=e;const r=e.node().getBBox();p=Math.max(p,r.width),s=Math.max(s,r.height)}_.height=s,o.push(_),f+=s+2*r,g+=1}));let y=4;c&&(y+=2),l&&(y+=2);const m=h+u+d+p,b={width:Math.max(co.minEntityWidth,Math.max(s.width+2*co.entityPadding,m+i*y)),height:n.length>0?f:Math.max(co.minEntityHeight,s.height+2*co.entityPadding)};if(n.length>0){const n=Math.max(0,(b.width-m-i*y)/(y/2));e.attr("transform","translate("+b.width/2+","+(r+s.height/2)+")");let a=s.height+2*r,f="attributeBoxOdd";o.forEach((e=>{const s=a+r+e.height/2;e.tn.attr("transform","translate("+i+","+s+")");const o=t.insert("rect","#"+e.tn.node().id).classed(`er ${f}`,!0).attr("x",0).attr("y",a).attr("width",h+2*i+n).attr("height",e.height+2*r),g=parseFloat(o.attr("x"))+parseFloat(o.attr("width"));e.nn.attr("transform","translate("+(g+i)+","+s+")");const y=t.insert("rect","#"+e.nn.node().id).classed(`er ${f}`,!0).attr("x",g).attr("y",a).attr("width",u+2*i+n).attr("height",e.height+2*r);let m=parseFloat(y.attr("x"))+parseFloat(y.attr("width"));if(c){e.kn.attr("transform","translate("+(m+i)+","+s+")");const o=t.insert("rect","#"+e.kn.node().id).classed(`er ${f}`,!0).attr("x",m).attr("y",a).attr("width",d+2*i+n).attr("height",e.height+2*r);m=parseFloat(o.attr("x"))+parseFloat(o.attr("width"))}l&&(e.cn.attr("transform","translate("+(m+i)+","+s+")"),t.insert("rect","#"+e.cn.node().id).classed(`er ${f}`,"true").attr("x",m).attr("y",a).attr("width",p+2*i+n).attr("height",e.height+2*r)),a+=e.height+2*r,f="attributeBoxOdd"===f?"attributeBoxEven":"attributeBoxOdd"}))}else b.height=Math.max(co.minEntityHeight,f),e.attr("transform","translate("+b.width/2+","+b.height/2+")");return b})(s,c,e[i].attributes),u=s.insert("rect","#"+o).classed("er entityBox",!0).attr("x",0).attr("y",0).attr("width",l).attr("height",h).node().getBBox();n.setNode(a,{width:u.width,height:u.height,shape:"rect",id:a})})),r},uo=function(t){return(t.entityA+t.roleA+t.entityB).replace(/\s/g,"")};let po=0;const fo="28e9f9db-3c8d-5aa5-9faf-44286ae5937c";function go(t=""){return t.length>0?`${t}-`:""}const yo={setConf:function(t){const e=Object.keys(t);for(const n of e)co[n]=t[n]},draw:function(t,e,n,r){co=ar().er,Nt.info("Drawing ER diagram");const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);let c;so(s,co),c=new ht.k({multigraph:!0,directed:!0,compound:!1}).setGraph({rankdir:co.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));const l=ho(s,r.db.getEntities(),c),h=function(t,e){return t.forEach((function(t){e.setEdge(lo.get(t.entityA),lo.get(t.entityB),{relationship:t},uo(t))})),t}(r.db.getRelationships(),c);var u,d;(0,lt.bK)(c),u=s,(d=c).nodes().forEach((function(t){void 0!==t&&void 0!==d.node(t)&&u.select("#"+t).attr("transform","translate("+(d.node(t).x-d.node(t).width/2)+","+(d.node(t).y-d.node(t).height/2)+" )")})),h.forEach((function(t){!function(t,e,n,r,i){po++;const a=n.edge(lo.get(e.entityA),lo.get(e.entityB),uo(e)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),c=t.insert("path","#"+r).classed("er relationshipLine",!0).attr("d",s(a.points)).style("stroke",co.stroke).style("fill","none");e.relSpec.relType===i.db.Identification.NON_IDENTIFYING&&c.attr("stroke-dasharray","8,8");let l="";switch(co.arrowMarkerAbsolute&&(l=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,l=l.replace(/\(/g,"\\("),l=l.replace(/\)/g,"\\)")),e.relSpec.cardA){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_ONE_END+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_MORE_END+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ONE_OR_MORE_END+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-end","url("+l+"#"+ao.ONLY_ONE_END+")")}switch(e.relSpec.cardB){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_ONE_START+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_MORE_START+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ONE_OR_MORE_START+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-start","url("+l+"#"+ao.ONLY_ONE_START+")")}const h=c.node().getTotalLength(),u=c.node().getPointAtLength(.5*h),d="rel"+po,p=t.append("text").classed("er relationshipLabel",!0).attr("id",d).attr("x",u.x).attr("y",u.y).style("text-anchor","middle").style("dominant-baseline","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(e.roleA).node().getBBox();t.insert("rect","#"+d).classed("er relationshipLabelBox",!0).attr("x",u.x-p.width/2).attr("y",u.y-p.height/2).attr("width",p.width).attr("height",p.height)}(s,t,c,l,r)}));const p=co.diagramPadding;Gn.insertTitle(s,"entityTitleText",co.titleTopMargin,r.db.getDiagramTitle());const f=s.node().getBBox(),g=f.width+2*p,y=f.height+2*p;dr(s,y,g,co.useMaxWidth),s.attr("viewBox",`${f.x-p} ${f.y-p} ${g} ${y}`)}};var mo=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,9],r=[1,7],i=[1,6],a=[1,8],s=[1,20,21,22,23,38,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],o=[2,10],c=[1,20],l=[1,21],h=[1,22],u=[1,23],d=[1,30],p=[1,32],f=[1,33],g=[1,34],y=[1,62],m=[1,48],b=[1,52],_=[1,36],x=[1,37],v=[1,38],k=[1,39],w=[1,40],E=[1,56],C=[1,63],T=[1,51],S=[1,53],A=[1,55],L=[1,59],B=[1,60],N=[1,41],D=[1,42],O=[1,43],M=[1,44],I=[1,61],F=[1,50],$=[1,54],R=[1,57],Z=[1,58],P=[1,49],j=[1,66],Y=[1,71],z=[1,20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],U=[1,75],W=[1,74],q=[1,76],H=[20,21,23,81,82],V=[1,99],G=[1,104],X=[1,107],K=[1,108],Q=[1,101],J=[1,106],tt=[1,109],et=[1,102],nt=[1,114],rt=[1,113],it=[1,103],at=[1,105],st=[1,110],ot=[1,111],ct=[1,112],lt=[1,115],ht=[20,21,22,23,81,82],ut=[20,21,22,23,53,81,82],dt=[20,21,22,23,40,52,53,55,57,59,61,63,65,66,67,69,71,73,74,76,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],pt=[20,21,23],ft=[20,21,23,52,66,67,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],gt=[1,12,20,21,22,23,24,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],yt=[52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],mt=[1,149],bt=[1,157],_t=[1,158],xt=[1,159],vt=[1,160],kt=[1,144],wt=[1,145],Et=[1,141],Ct=[1,152],Tt=[1,153],St=[1,154],At=[1,155],Lt=[1,156],Bt=[1,161],Nt=[1,162],Dt=[1,147],Ot=[1,150],Mt=[1,146],It=[1,143],Ft=[20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],$t=[1,165],Rt=[20,21,22,23,26,52,66,67,91,105,106,109,111,112,122,123,124,125,126,127],Zt=[20,21,22,23,24,26,38,40,41,42,52,56,58,60,62,64,66,67,68,70,72,73,75,77,81,82,86,87,88,89,90,91,92,95,105,106,109,111,112,113,114,122,123,124,125,126,127],Pt=[12,21,22,24],jt=[22,106],Yt=[1,250],zt=[1,245],Ut=[1,246],Wt=[1,254],qt=[1,251],Ht=[1,248],Vt=[1,247],Gt=[1,249],Xt=[1,252],Kt=[1,253],Qt=[1,255],Jt=[1,273],te=[20,21,23,106],ee=[20,21,22,23,66,67,86,102,105,106,109,110,111,112,113],ne={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,directive:5,openDirective:6,typeDirective:7,closeDirective:8,separator:9,":":10,argDirective:11,open_directive:12,type_directive:13,arg_directive:14,close_directive:15,graphConfig:16,document:17,line:18,statement:19,SEMI:20,NEWLINE:21,SPACE:22,EOF:23,GRAPH:24,NODIR:25,DIR:26,FirstStmtSeperator:27,ending:28,endToken:29,spaceList:30,spaceListNewline:31,verticeStatement:32,styleStatement:33,linkStyleStatement:34,classDefStatement:35,classStatement:36,clickStatement:37,subgraph:38,text:39,SQS:40,SQE:41,end:42,direction:43,acc_title:44,acc_title_value:45,acc_descr:46,acc_descr_value:47,acc_descr_multiline_value:48,link:49,node:50,vertex:51,AMP:52,STYLE_SEPARATOR:53,idString:54,DOUBLECIRCLESTART:55,DOUBLECIRCLEEND:56,PS:57,PE:58,"(-":59,"-)":60,STADIUMSTART:61,STADIUMEND:62,SUBROUTINESTART:63,SUBROUTINEEND:64,VERTEX_WITH_PROPS_START:65,ALPHA:66,COLON:67,PIPE:68,CYLINDERSTART:69,CYLINDEREND:70,DIAMOND_START:71,DIAMOND_STOP:72,TAGEND:73,TRAPSTART:74,TRAPEND:75,INVTRAPSTART:76,INVTRAPEND:77,linkStatement:78,arrowText:79,TESTSTR:80,START_LINK:81,LINK:82,textToken:83,STR:84,keywords:85,STYLE:86,LINKSTYLE:87,CLASSDEF:88,CLASS:89,CLICK:90,DOWN:91,UP:92,textNoTags:93,textNoTagsToken:94,DEFAULT:95,stylesOpt:96,alphaNum:97,CALLBACKNAME:98,CALLBACKARGS:99,HREF:100,LINK_TARGET:101,HEX:102,numList:103,INTERPOLATE:104,NUM:105,COMMA:106,style:107,styleComponent:108,MINUS:109,UNIT:110,BRKT:111,DOT:112,PCT:113,TAGSTART:114,alphaNumToken:115,idStringToken:116,alphaNumStatement:117,direction_tb:118,direction_bt:119,direction_rl:120,direction_lr:121,PUNCTUATION:122,UNICODE_TEXT:123,PLUS:124,EQUALS:125,MULT:126,UNDERSCORE:127,graphCodeTokens:128,ARROW_CROSS:129,ARROW_POINT:130,ARROW_CIRCLE:131,ARROW_OPEN:132,QUOTE:133,$accept:0,$end:1},terminals_:{2:"error",10:":",12:"open_directive",13:"type_directive",14:"arg_directive",15:"close_directive",20:"SEMI",21:"NEWLINE",22:"SPACE",23:"EOF",24:"GRAPH",25:"NODIR",26:"DIR",38:"subgraph",40:"SQS",41:"SQE",42:"end",44:"acc_title",45:"acc_title_value",46:"acc_descr",47:"acc_descr_value",48:"acc_descr_multiline_value",52:"AMP",53:"STYLE_SEPARATOR",55:"DOUBLECIRCLESTART",56:"DOUBLECIRCLEEND",57:"PS",58:"PE",59:"(-",60:"-)",61:"STADIUMSTART",62:"STADIUMEND",63:"SUBROUTINESTART",64:"SUBROUTINEEND",65:"VERTEX_WITH_PROPS_START",66:"ALPHA",67:"COLON",68:"PIPE",69:"CYLINDERSTART",70:"CYLINDEREND",71:"DIAMOND_START",72:"DIAMOND_STOP",73:"TAGEND",74:"TRAPSTART",75:"TRAPEND",76:"INVTRAPSTART",77:"INVTRAPEND",80:"TESTSTR",81:"START_LINK",82:"LINK",84:"STR",86:"STYLE",87:"LINKSTYLE",88:"CLASSDEF",89:"CLASS",90:"CLICK",91:"DOWN",92:"UP",95:"DEFAULT",98:"CALLBACKNAME",99:"CALLBACKARGS",100:"HREF",101:"LINK_TARGET",102:"HEX",104:"INTERPOLATE",105:"NUM",106:"COMMA",109:"MINUS",110:"UNIT",111:"BRKT",112:"DOT",113:"PCT",114:"TAGSTART",118:"direction_tb",119:"direction_bt",120:"direction_rl",121:"direction_lr",122:"PUNCTUATION",123:"UNICODE_TEXT",124:"PLUS",125:"EQUALS",126:"MULT",127:"UNDERSCORE",129:"ARROW_CROSS",130:"ARROW_POINT",131:"ARROW_CIRCLE",132:"ARROW_OPEN",133:"QUOTE"},productions_:[0,[3,1],[3,2],[5,4],[5,6],[6,1],[7,1],[11,1],[8,1],[4,2],[17,0],[17,2],[18,1],[18,1],[18,1],[18,1],[18,1],[16,2],[16,2],[16,2],[16,3],[28,2],[28,1],[29,1],[29,1],[29,1],[27,1],[27,1],[27,2],[31,2],[31,2],[31,1],[31,1],[30,2],[30,1],[19,2],[19,2],[19,2],[19,2],[19,2],[19,2],[19,9],[19,6],[19,4],[19,1],[19,2],[19,2],[19,1],[9,1],[9,1],[9,1],[32,3],[32,4],[32,2],[32,1],[50,1],[50,5],[50,3],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,8],[51,4],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,4],[51,4],[51,1],[49,2],[49,3],[49,3],[49,1],[49,3],[78,1],[79,3],[39,1],[39,2],[39,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[93,1],[93,2],[35,5],[35,5],[36,5],[37,2],[37,4],[37,3],[37,5],[37,2],[37,4],[37,4],[37,6],[37,2],[37,4],[37,2],[37,4],[37,4],[37,6],[33,5],[33,5],[34,5],[34,5],[34,9],[34,9],[34,7],[34,7],[103,1],[103,3],[96,1],[96,3],[107,1],[107,2],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[83,1],[83,1],[83,1],[83,1],[83,1],[83,1],[94,1],[94,1],[94,1],[94,1],[54,1],[54,2],[97,1],[97,2],[117,1],[117,1],[117,1],[117,1],[43,1],[43,1],[43,1],[43,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.parseDirective("%%{","open_directive");break;case 6:r.parseDirective(a[o],"type_directive");break;case 7:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 8:r.parseDirective("}%%","close_directive","flowchart");break;case 10:case 36:case 37:case 38:case 39:case 40:this.$=[];break;case 11:(!Array.isArray(a[o])||a[o].length>0)&&a[o-1].push(a[o]),this.$=a[o-1];break;case 12:case 82:case 84:case 96:case 152:case 154:case 155:case 78:case 150:this.$=a[o];break;case 19:r.setDirection("TB"),this.$="TB";break;case 20:r.setDirection(a[o-1]),this.$=a[o-1];break;case 35:this.$=a[o-1].nodes;break;case 41:this.$=r.addSubGraph(a[o-6],a[o-1],a[o-4]);break;case 42:this.$=r.addSubGraph(a[o-3],a[o-1],a[o-3]);break;case 43:this.$=r.addSubGraph(void 0,a[o-1],void 0);break;case 45:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 46:case 47:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 51:r.addLink(a[o-2].stmt,a[o],a[o-1]),this.$={stmt:a[o],nodes:a[o].concat(a[o-2].nodes)};break;case 52:r.addLink(a[o-3].stmt,a[o-1],a[o-2]),this.$={stmt:a[o-1],nodes:a[o-1].concat(a[o-3].nodes)};break;case 53:this.$={stmt:a[o-1],nodes:a[o-1]};break;case 54:this.$={stmt:a[o],nodes:a[o]};break;case 55:case 123:case 125:this.$=[a[o]];break;case 56:this.$=a[o-4].concat(a[o]);break;case 57:this.$=[a[o-2]],r.setClass(a[o-2],a[o]);break;case 58:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"square");break;case 59:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"doublecircle");break;case 60:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"circle");break;case 61:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"ellipse");break;case 62:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"stadium");break;case 63:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"subroutine");break;case 64:this.$=a[o-7],r.addVertex(a[o-7],a[o-1],"rect",void 0,void 0,void 0,Object.fromEntries([[a[o-5],a[o-3]]]));break;case 65:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"cylinder");break;case 66:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"round");break;case 67:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"diamond");break;case 68:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"hexagon");break;case 69:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"odd");break;case 70:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"trapezoid");break;case 71:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"inv_trapezoid");break;case 72:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_right");break;case 73:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_left");break;case 74:this.$=a[o],r.addVertex(a[o]);break;case 75:a[o-1].text=a[o],this.$=a[o-1];break;case 76:case 77:a[o-2].text=a[o-1],this.$=a[o-2];break;case 79:var c=r.destructLink(a[o],a[o-2]);this.$={type:c.type,stroke:c.stroke,length:c.length,text:a[o-1]};break;case 80:c=r.destructLink(a[o]);this.$={type:c.type,stroke:c.stroke,length:c.length};break;case 81:this.$=a[o-1];break;case 83:case 97:case 153:case 151:this.$=a[o-1]+""+a[o];break;case 98:case 99:this.$=a[o-4],r.addClass(a[o-2],a[o]);break;case 100:this.$=a[o-4],r.setClass(a[o-2],a[o]);break;case 101:case 109:this.$=a[o-1],r.setClickEvent(a[o-1],a[o]);break;case 102:case 110:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 103:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 104:this.$=a[o-4],r.setClickEvent(a[o-4],a[o-3],a[o-2]),r.setTooltip(a[o-4],a[o]);break;case 105:case 111:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 106:case 112:this.$=a[o-3],r.setLink(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 107:case 113:this.$=a[o-3],r.setLink(a[o-3],a[o-2],a[o]);break;case 108:case 114:this.$=a[o-5],r.setLink(a[o-5],a[o-4],a[o]),r.setTooltip(a[o-5],a[o-2]);break;case 115:this.$=a[o-4],r.addVertex(a[o-2],void 0,void 0,a[o]);break;case 116:case 118:this.$=a[o-4],r.updateLink(a[o-2],a[o]);break;case 117:this.$=a[o-4],r.updateLink([a[o-2]],a[o]);break;case 119:this.$=a[o-8],r.updateLinkInterpolate([a[o-6]],a[o-2]),r.updateLink([a[o-6]],a[o]);break;case 120:this.$=a[o-8],r.updateLinkInterpolate(a[o-6],a[o-2]),r.updateLink(a[o-6],a[o]);break;case 121:this.$=a[o-6],r.updateLinkInterpolate([a[o-4]],a[o]);break;case 122:this.$=a[o-6],r.updateLinkInterpolate(a[o-4],a[o]);break;case 124:case 126:a[o-2].push(a[o]),this.$=a[o-2];break;case 128:this.$=a[o-1]+a[o];break;case 156:this.$="v";break;case 157:this.$="-";break;case 158:this.$={stmt:"dir",value:"TB"};break;case 159:this.$={stmt:"dir",value:"BT"};break;case 160:this.$={stmt:"dir",value:"RL"};break;case 161:this.$={stmt:"dir",value:"LR"}}},table:[{3:1,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},{1:[3]},{1:[2,1]},{3:10,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},e(s,o,{17:11}),{7:12,13:[1,13]},{16:14,21:r,22:i,24:a},{16:15,21:r,22:i,24:a},{25:[1,16],26:[1,17]},{13:[2,5]},{1:[2,2]},{1:[2,9],18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{8:64,10:[1,65],15:j},e([10,15],[2,6]),e(s,[2,17]),e(s,[2,18]),e(s,[2,19]),{20:[1,68],21:[1,69],22:Y,27:67,30:70},e(z,[2,11]),e(z,[2,12]),e(z,[2,13]),e(z,[2,14]),e(z,[2,15]),e(z,[2,16]),{9:72,20:U,21:W,23:q,49:73,78:77,81:[1,78],82:[1,79]},{9:80,20:U,21:W,23:q},{9:81,20:U,21:W,23:q},{9:82,20:U,21:W,23:q},{9:83,20:U,21:W,23:q},{9:84,20:U,21:W,23:q},{9:86,20:U,21:W,22:[1,85],23:q},e(z,[2,44]),{45:[1,87]},{47:[1,88]},e(z,[2,47]),e(H,[2,54],{30:89,22:Y}),{22:[1,90]},{22:[1,91]},{22:[1,92]},{22:[1,93]},{26:V,52:G,66:X,67:K,84:[1,97],91:Q,97:96,98:[1,94],100:[1,95],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(z,[2,158]),e(z,[2,159]),e(z,[2,160]),e(z,[2,161]),e(ht,[2,55],{53:[1,116]}),e(ut,[2,74],{116:129,40:[1,117],52:y,55:[1,118],57:[1,119],59:[1,120],61:[1,121],63:[1,122],65:[1,123],66:m,67:b,69:[1,124],71:[1,125],73:[1,126],74:[1,127],76:[1,128],91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),e(dt,[2,150]),e(dt,[2,175]),e(dt,[2,176]),e(dt,[2,177]),e(dt,[2,178]),e(dt,[2,179]),e(dt,[2,180]),e(dt,[2,181]),e(dt,[2,182]),e(dt,[2,183]),e(dt,[2,184]),e(dt,[2,185]),e(dt,[2,186]),e(dt,[2,187]),e(dt,[2,188]),e(dt,[2,189]),e(dt,[2,190]),{9:130,20:U,21:W,23:q},{11:131,14:[1,132]},e(pt,[2,8]),e(s,[2,20]),e(s,[2,26]),e(s,[2,27]),{21:[1,133]},e(ft,[2,34],{30:134,22:Y}),e(z,[2,35]),{50:135,51:45,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},e(gt,[2,48]),e(gt,[2,49]),e(gt,[2,50]),e(yt,[2,78],{79:136,68:[1,138],80:[1,137]}),{22:mt,24:bt,26:_t,38:xt,39:139,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e([52,66,67,68,80,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,80]),e(z,[2,36]),e(z,[2,37]),e(z,[2,38]),e(z,[2,39]),e(z,[2,40]),{22:mt,24:bt,26:_t,38:xt,39:163,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:164}),e(z,[2,45]),e(z,[2,46]),e(H,[2,53],{52:$t}),{26:V,52:G,66:X,67:K,91:Q,97:166,102:[1,167],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{95:[1,168],103:169,105:[1,170]},{26:V,52:G,66:X,67:K,91:Q,95:[1,171],97:172,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:173,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,101],{22:[1,174],99:[1,175]}),e(pt,[2,105],{22:[1,176]}),e(pt,[2,109],{115:100,117:178,22:[1,177],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,111],{22:[1,179]}),e(Rt,[2,152]),e(Rt,[2,154]),e(Rt,[2,155]),e(Rt,[2,156]),e(Rt,[2,157]),e(Zt,[2,162]),e(Zt,[2,163]),e(Zt,[2,164]),e(Zt,[2,165]),e(Zt,[2,166]),e(Zt,[2,167]),e(Zt,[2,168]),e(Zt,[2,169]),e(Zt,[2,170]),e(Zt,[2,171]),e(Zt,[2,172]),e(Zt,[2,173]),e(Zt,[2,174]),{52:y,54:180,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:mt,24:bt,26:_t,38:xt,39:181,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:182,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:184,42:vt,52:G,57:[1,183],66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:185,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:186,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:187,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{66:[1,188]},{22:mt,24:bt,26:_t,38:xt,39:189,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:190,42:vt,52:G,66:X,67:K,71:[1,191],73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:192,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:193,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:194,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(dt,[2,151]),e(Pt,[2,3]),{8:195,15:j},{15:[2,7]},e(s,[2,28]),e(ft,[2,33]),e(H,[2,51],{30:196,22:Y}),e(yt,[2,75],{22:[1,197]}),{22:[1,198]},{22:mt,24:bt,26:_t,38:xt,39:199,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,81:wt,82:[1,200],83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Zt,[2,82]),e(Zt,[2,84]),e(Zt,[2,140]),e(Zt,[2,141]),e(Zt,[2,142]),e(Zt,[2,143]),e(Zt,[2,144]),e(Zt,[2,145]),e(Zt,[2,146]),e(Zt,[2,147]),e(Zt,[2,148]),e(Zt,[2,149]),e(Zt,[2,85]),e(Zt,[2,86]),e(Zt,[2,87]),e(Zt,[2,88]),e(Zt,[2,89]),e(Zt,[2,90]),e(Zt,[2,91]),e(Zt,[2,92]),e(Zt,[2,93]),e(Zt,[2,94]),e(Zt,[2,95]),{9:203,20:U,21:W,22:mt,23:q,24:bt,26:_t,38:xt,40:[1,202],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,204],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Y,30:205},{22:[1,206],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,207]},{22:[1,208]},{22:[1,209],106:[1,210]},e(jt,[2,123]),{22:[1,211]},{22:[1,212],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,213],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{84:[1,214]},e(pt,[2,103],{22:[1,215]}),{84:[1,216],101:[1,217]},{84:[1,218]},e(Rt,[2,153]),{84:[1,219],101:[1,220]},e(ht,[2,57],{116:129,52:y,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),{22:mt,24:bt,26:_t,38:xt,41:[1,221],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,56:[1,222],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:223,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,224],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,60:[1,225],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,62:[1,226],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,64:[1,227],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{67:[1,228]},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,70:[1,229],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,230],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:231,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,41:[1,232],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,233],77:[1,234],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,236],77:[1,235],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{9:237,20:U,21:W,23:q},e(H,[2,52],{52:$t}),e(yt,[2,77]),e(yt,[2,76]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,68:[1,238],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(yt,[2,79]),e(Zt,[2,83]),{22:mt,24:bt,26:_t,38:xt,39:239,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:240}),e(z,[2,43]),{51:241,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:242,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:256,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:257,102:qt,104:[1,258],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:259,102:qt,104:[1,260],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{105:[1,261]},{22:Yt,66:zt,67:Ut,86:Wt,96:262,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:263,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{26:V,52:G,66:X,67:K,91:Q,97:264,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,102]),{84:[1,265]},e(pt,[2,106],{22:[1,266]}),e(pt,[2,107]),e(pt,[2,110]),e(pt,[2,112],{22:[1,267]}),e(pt,[2,113]),e(ut,[2,58]),e(ut,[2,59]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,268],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,66]),e(ut,[2,61]),e(ut,[2,62]),e(ut,[2,63]),{66:[1,269]},e(ut,[2,65]),e(ut,[2,67]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,270],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,69]),e(ut,[2,70]),e(ut,[2,72]),e(ut,[2,71]),e(ut,[2,73]),e(Pt,[2,4]),e([22,52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,81]),{22:mt,24:bt,26:_t,38:xt,41:[1,271],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,272],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},e(ht,[2,56]),e(pt,[2,115],{106:Jt}),e(te,[2,125],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(ee,[2,127]),e(ee,[2,129]),e(ee,[2,130]),e(ee,[2,131]),e(ee,[2,132]),e(ee,[2,133]),e(ee,[2,134]),e(ee,[2,135]),e(ee,[2,136]),e(ee,[2,137]),e(ee,[2,138]),e(ee,[2,139]),e(pt,[2,116],{106:Jt}),e(pt,[2,117],{106:Jt}),{22:[1,275]},e(pt,[2,118],{106:Jt}),{22:[1,276]},e(jt,[2,124]),e(pt,[2,98],{106:Jt}),e(pt,[2,99],{106:Jt}),e(pt,[2,100],{115:100,117:178,26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,104]),{101:[1,277]},{101:[1,278]},{58:[1,279]},{68:[1,280]},{72:[1,281]},{9:282,20:U,21:W,23:q},e(z,[2,42]),{22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,107:283,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ee,[2,128]),{26:V,52:G,66:X,67:K,91:Q,97:284,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:285,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,108]),e(pt,[2,114]),e(ut,[2,60]),{22:mt,24:bt,26:_t,38:xt,39:286,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,68]),e(Ft,o,{17:287}),e(te,[2,126],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(pt,[2,121],{115:100,117:178,22:[1,288],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,122],{115:100,117:178,22:[1,289],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),{22:mt,24:bt,26:_t,38:xt,41:[1,290],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,291],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:292,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:293,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ut,[2,64]),e(z,[2,41]),e(pt,[2,119],{106:Jt}),e(pt,[2,120],{106:Jt})],defaultActions:{2:[2,1],9:[2,5],10:[2,2],132:[2,7]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},re=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),12;case 1:return this.begin("type_directive"),13;case 2:return this.popState(),this.begin("arg_directive"),10;case 3:return this.popState(),this.popState(),15;case 4:return 14;case 5:case 6:break;case 7:return this.begin("acc_title"),44;case 8:return this.popState(),"acc_title_value";case 9:return this.begin("acc_descr"),46;case 10:return this.popState(),"acc_descr_value";case 11:this.begin("acc_descr_multiline");break;case 12:case 15:case 24:case 27:case 30:case 33:this.popState();break;case 13:return"acc_descr_multiline_value";case 14:this.begin("string");break;case 16:return"STR";case 17:return 86;case 18:return 95;case 19:return 87;case 20:return 104;case 21:return 88;case 22:return 89;case 23:this.begin("href");break;case 25:return 100;case 26:this.begin("callbackname");break;case 28:this.popState(),this.begin("callbackargs");break;case 29:return 98;case 31:return 99;case 32:this.begin("click");break;case 34:return 90;case 35:case 36:case 37:return t.lex.firstGraph()&&this.begin("dir"),24;case 38:return 38;case 39:return 42;case 40:case 41:case 42:case 43:return 101;case 44:return this.popState(),25;case 45:case 46:case 47:case 48:case 49:case 50:case 51:case 52:case 53:case 54:return this.popState(),26;case 55:return 118;case 56:return 119;case 57:return 120;case 58:return 121;case 59:return 105;case 60:return 111;case 61:return 53;case 62:return 67;case 63:return 52;case 64:return 20;case 65:return 106;case 66:return 126;case 67:case 68:case 69:return 82;case 70:case 71:case 72:return 81;case 73:return 59;case 74:return 60;case 75:return 61;case 76:return 62;case 77:return 63;case 78:return 64;case 79:return 65;case 80:return 69;case 81:return 70;case 82:return 55;case 83:return 56;case 84:return 109;case 85:return 112;case 86:return 127;case 87:return 124;case 88:return 113;case 89:case 90:return 125;case 91:return 114;case 92:return 73;case 93:return 92;case 94:return"SEP";case 95:return 91;case 96:return 66;case 97:return 75;case 98:return 74;case 99:return 77;case 100:return 76;case 101:return 122;case 102:return 123;case 103:return 68;case 104:return 57;case 105:return 58;case 106:return 40;case 107:return 41;case 108:return 71;case 109:return 72;case 110:return 133;case 111:return 21;case 112:return 22;case 113:return 23}},rules:[/^(?:%%\{)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)[^\n]*)/,/^(?:[^\}]%%[^\n]*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:style\b)/,/^(?:default\b)/,/^(?:linkStyle\b)/,/^(?:interpolate\b)/,/^(?:classDef\b)/,/^(?:class\b)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:click[\s]+)/,/^(?:[\s\n])/,/^(?:[^\s\n]*)/,/^(?:flowchart-elk\b)/,/^(?:graph\b)/,/^(?:flowchart\b)/,/^(?:subgraph\b)/,/^(?:end\b\s*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:(\r?\n)*\s*\n)/,/^(?:\s*LR\b)/,/^(?:\s*RL\b)/,/^(?:\s*TB\b)/,/^(?:\s*BT\b)/,/^(?:\s*TD\b)/,/^(?:\s*BR\b)/,/^(?:\s*<)/,/^(?:\s*>)/,/^(?:\s*\^)/,/^(?:\s*v\b)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:[0-9]+)/,/^(?:#)/,/^(?::::)/,/^(?::)/,/^(?:&)/,/^(?:;)/,/^(?:,)/,/^(?:\*)/,/^(?:\s*[xo<]?--+[-xo>]\s*)/,/^(?:\s*[xo<]?==+[=xo>]\s*)/,/^(?:\s*[xo<]?-?\.+-[xo>]?\s*)/,/^(?:\s*[xo<]?--\s*)/,/^(?:\s*[xo<]?==\s*)/,/^(?:\s*[xo<]?-\.\s*)/,/^(?:\(-)/,/^(?:-\))/,/^(?:\(\[)/,/^(?:\]\))/,/^(?:\[\[)/,/^(?:\]\])/,/^(?:\[\|)/,/^(?:\[\()/,/^(?:\)\])/,/^(?:\(\(\()/,/^(?:\)\)\))/,/^(?:-)/,/^(?:\.)/,/^(?:[\_])/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:<)/,/^(?:>)/,/^(?:\^)/,/^(?:\\\|)/,/^(?:v\b)/,/^(?:[A-Za-z]+)/,/^(?:\\\])/,/^(?:\[\/)/,/^(?:\/\])/,/^(?:\[\\)/,/^(?:[!"#$%&'*+,-.`?\\_/])/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\|)/,/^(?:\()/,/^(?:\))/,/^(?:\[)/,/^(?:\])/,/^(?:\{)/,/^(?:\})/,/^(?:")/,/^(?:(\r?\n)+)/,/^(?:\s)/,/^(?:$)/],conditions:{close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[30,31],inclusive:!1},callbackname:{rules:[27,28,29],inclusive:!1},href:{rules:[24,25],inclusive:!1},click:{rules:[33,34],inclusive:!1},vertex:{rules:[],inclusive:!1},dir:{rules:[44,45,46,47,48,49,50,51,52,53,54],inclusive:!1},acc_descr_multiline:{rules:[12,13],inclusive:!1},acc_descr:{rules:[10],inclusive:!1},acc_title:{rules:[8],inclusive:!1},string:{rules:[15,16],inclusive:!1},INITIAL:{rules:[0,5,6,7,9,11,14,17,18,19,20,21,22,23,26,32,35,36,37,38,39,40,41,42,43,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],inclusive:!0}}},t);function ie(){this.yy={}}return ne.lexer=re,ie.prototype=ne,ne.Parser=ie,new ie}();mo.parser=mo;const bo=mo,_o=(t,e)=>{var n,r;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&null!==t.match(/^\s*graph/))},xo=(t,e)=>{var n,r;return"dagre-d3"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&(null!==t.match(/^\s*graph/)||null!==t.match(/^\s*flowchart/)))};let vo,ko,wo=0,Eo=ar(),Co={},To=[],So={},Ao=[],Lo={},Bo={},No=0,Do=!0,Oo=[];const Mo=t=>Yt.sanitizeText(t,Eo),Io=function(t,e,n){ap.parseDirective(this,t,e,n)},Fo=function(t){const e=Object.keys(Co);for(const n of e)if(Co[n].id===t)return Co[n].domId;return t},$o=function(t,e,n,r,i,a,s={}){let o,c=t;void 0!==c&&0!==c.trim().length&&(void 0===Co[c]&&(Co[c]={id:c,domId:"flowchart-"+c+"-"+wo,styles:[],classes:[]}),wo++,void 0!==e?(Eo=ar(),o=Mo(e.trim()),'"'===o[0]&&'"'===o[o.length-1]&&(o=o.substring(1,o.length-1)),Co[c].text=o):void 0===Co[c].text&&(Co[c].text=t),void 0!==n&&(Co[c].type=n),null!=r&&r.forEach((function(t){Co[c].styles.push(t)})),null!=i&&i.forEach((function(t){Co[c].classes.push(t)})),void 0!==a&&(Co[c].dir=a),void 0===Co[c].props?Co[c].props=s:void 0!==s&&Object.assign(Co[c].props,s))},Ro=function(t,e,n,r){const i={start:t,end:e,type:void 0,text:""};void 0!==(r=n.text)&&(i.text=Mo(r.trim()),'"'===i.text[0]&&'"'===i.text[i.text.length-1]&&(i.text=i.text.substring(1,i.text.length-1))),void 0!==n&&(i.type=n.type,i.stroke=n.stroke,i.length=n.length),To.push(i)},Zo=function(t,e,n,r){let i,a;for(i=0;i<t.length;i++)for(a=0;a<e.length;a++)Ro(t[i],e[a],n,r)},Po=function(t,e){t.forEach((function(t){"default"===t?To.defaultInterpolate=e:To[t].interpolate=e}))},jo=function(t,e){t.forEach((function(t){"default"===t?To.defaultStyle=e:(-1===Gn.isSubstringInArray("fill",e)&&e.push("fill:none"),To[t].style=e)}))},Yo=function(t,e){void 0===So[t]&&(So[t]={id:t,styles:[],textStyles:[]}),null!=e&&e.forEach((function(e){if(e.match("color")){const n=e.replace("fill","bgFill").replace("color","fill");So[t].textStyles.push(n)}So[t].styles.push(e)}))},zo=function(t){vo=t,vo.match(/.*</)&&(vo="RL"),vo.match(/.*\^/)&&(vo="BT"),vo.match(/.*>/)&&(vo="LR"),vo.match(/.*v/)&&(vo="TB"),"TD"===vo&&(vo="TB")},Uo=function(t,e){t.split(",").forEach((function(t){let n=t;void 0!==Co[n]&&Co[n].classes.push(e),void 0!==Lo[n]&&Lo[n].classes.push(e)}))},Wo=function(t,e,n){t.split(",").forEach((function(t){void 0!==Co[t]&&(Co[t].link=Gn.formatUrl(e,Eo),Co[t].linkTarget=n)})),Uo(t,"clickable")},qo=function(t){return Bo[t]},Ho=function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){let r=Fo(t);if("loose"!==ar().securityLevel)return;if(void 0===e)return;let i=[];if("string"==typeof n){i=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<i.length;t++){let e=i[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),i[t]=e}}0===i.length&&i.push(t),void 0!==Co[t]&&(Co[t].haveCallback=!0,Oo.push((function(){const t=document.querySelector(`[id="${r}"]`);null!==t&&t.addEventListener("click",(function(){Gn.runFunc(e,...i)}),!1)})))}(t,e,n)})),Uo(t,"clickable")},Vo=function(t){Oo.forEach((function(e){e(t)}))},Go=function(){return vo.trim()},Xo=function(){return Co},Ko=function(){return To},Qo=function(){return So},Jo=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Oo.push(Jo);const tc=function(t="gen-1"){Co={},So={},To=[],Oo=[Jo],Ao=[],Lo={},No=0,Bo=[],Do=!0,ko=t,Dr()},ec=t=>{ko=t||"gen-2"},nc=function(){return"fill:#ffa;stroke: #f66; stroke-width: 3px; stroke-dasharray: 5, 5;fill:#ffa;stroke: #666;"},rc=function(t,e,n){let r=t.trim(),i=n;t===n&&n.match(/\s/)&&(r=void 0);let a=[];const{nodeList:s,dir:o}=function(t){const e={boolean:{},number:{},string:{}},n=[];let r;return{nodeList:t.filter((function(t){const i=typeof t;return t.stmt&&"dir"===t.stmt?(r=t.value,!1):""!==t.trim()&&(i in e?!e[i].hasOwnProperty(t)&&(e[i][t]=!0):!n.includes(t)&&n.push(t))})),dir:r}}(a.concat.apply(a,e));if(a=s,"gen-1"===ko)for(let l=0;l<a.length;l++)a[l]=Fo(a[l]);r=r||"subGraph"+No,i=i||"",i=Mo(i),No+=1;const c={id:r,nodes:a,title:i.trim(),classes:[],dir:o};return Nt.info("Adding",c.id,c.nodes,c.dir),c.nodes=fc(c,Ao).nodes,Ao.push(c),Lo[r]=c,r},ic=function(t){for(const[e,n]of Ao.entries())if(n.id===t)return e;return-1};let ac=-1;const sc=[],oc=function(t,e){const n=Ao[e].nodes;if(ac+=1,ac>2e3)return;if(sc[ac]=e,Ao[e].id===t)return{result:!0,count:0};let r=0,i=1;for(;r<n.length;){const e=ic(n[r]);if(e>=0){const n=oc(t,e);if(n.result)return{result:!0,count:i+n.count};i+=n.count}r+=1}return{result:!1,count:i}},cc=function(t){return sc[t]},lc=function(){ac=-1,Ao.length>0&&oc("none",Ao.length-1)},hc=function(){return Ao},uc=()=>!!Do&&(Do=!1,!0),dc=(t,e)=>{const n=(t=>{const e=t.trim();let n=e.slice(0,-1),r="arrow_open";switch(e.slice(-1)){case"x":r="arrow_cross","x"===e[0]&&(r="double_"+r,n=n.slice(1));break;case">":r="arrow_point","<"===e[0]&&(r="double_"+r,n=n.slice(1));break;case"o":r="arrow_circle","o"===e[0]&&(r="double_"+r,n=n.slice(1))}let i="normal",a=n.length-1;"="===n[0]&&(i="thick");let s=((t,e)=>{const n=e.length;let r=0;for(let i=0;i<n;++i)e[i]===t&&++r;return r})(".",n);return s&&(i="dotted",a=s),{type:r,stroke:i,length:a}})(t);let r;if(e){if(r=(t=>{let e=t.trim(),n="arrow_open";switch(e[0]){case"<":n="arrow_point",e=e.slice(1);break;case"x":n="arrow_cross",e=e.slice(1);break;case"o":n="arrow_circle",e=e.slice(1)}let r="normal";return e.includes("=")&&(r="thick"),e.includes(".")&&(r="dotted"),{type:n,stroke:r}})(e),r.stroke!==n.stroke)return{type:"INVALID",stroke:"INVALID"};if("arrow_open"===r.type)r.type=n.type;else{if(r.type!==n.type)return{type:"INVALID",stroke:"INVALID"};r.type="double_"+r.type}return"double_arrow"===r.type&&(r.type="double_arrow_point"),r.length=n.length,r}return n},pc=(t,e)=>{let n=!1;return t.forEach((t=>{t.nodes.indexOf(e)>=0&&(n=!0)})),n},fc=(t,e)=>{const n=[];return t.nodes.forEach(((r,i)=>{pc(e,r)||n.push(t.nodes[i])})),{nodes:n}},gc={firstGraph:uc},yc={parseDirective:Io,defaultConfig:()=>Kn.flowchart,setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,addVertex:$o,lookUpDomId:Fo,addLink:Zo,updateLinkInterpolate:Po,updateLink:jo,addClass:Yo,setDirection:zo,setClass:Uo,setTooltip:function(t,e){t.split(",").forEach((function(t){void 0!==e&&(Bo["gen-1"===ko?Fo(t):t]=Mo(e))}))},getTooltip:qo,setClickEvent:Ho,setLink:Wo,bindFunctions:Vo,getDirection:Go,getVertices:Xo,getEdges:Ko,getClasses:Qo,clear:tc,setGen:ec,defaultStyle:nc,addSubGraph:rc,getDepthFirstPos:cc,indexNodes:lc,getSubGraphs:hc,destructLink:dc,lex:gc,exists:pc,makeUniq:fc,setDiagramTitle:$r,getDiagramTitle:Rr},mc=Object.freeze(Object.defineProperty({__proto__:null,addClass:Yo,addLink:Zo,addSingleLink:Ro,addSubGraph:rc,addVertex:$o,bindFunctions:Vo,clear:tc,default:yc,defaultStyle:nc,destructLink:dc,firstGraph:uc,getClasses:Qo,getDepthFirstPos:cc,getDirection:Go,getEdges:Ko,getSubGraphs:hc,getTooltip:qo,getVertices:Xo,indexNodes:lc,lex:gc,lookUpDomId:Fo,parseDirective:Io,setClass:Uo,setClickEvent:Ho,setDirection:zo,setGen:ec,setLink:Wo,updateLink:jo,updateLinkInterpolate:Po},Symbol.toStringTag,{value:"Module"}));const bc={},_c=function(t){const e=Object.keys(t);for(const n of e)bc[n]=t[n]},xc={},vc=function(t,e,n,r,i,a){const s=r.select(`[id="${n}"]`);Object.keys(t).forEach((function(n){const r=t[n];let o="default";r.classes.length>0&&(o=r.classes.join(" "));const c=Mn(r.styles);let l,h=void 0!==r.text?r.text:r.id;if(Pt(ar().flowchart.htmlLabels)){const t={label:h.replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`))};l=(0,kt.a)(s,t).node(),l.parentNode.removeChild(l)}else{const t=i.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",c.labelStyle.replace("color:","fill:"));const e=h.split(Yt.lineBreakRegex);for(const n of e){const e=i.createElementNS("http://www.w3.org/2000/svg","tspan");e.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),e.setAttribute("dy","1em"),e.setAttribute("x","1"),e.textContent=n,t.appendChild(e)}l=t}let u=0,d="";switch(r.type){case"round":u=5,d="rect";break;case"square":case"group":default:d="rect";break;case"diamond":d="question";break;case"hexagon":d="hexagon";break;case"odd":case"odd_right":d="rect_left_inv_arrow";break;case"lean_right":d="lean_right";break;case"lean_left":d="lean_left";break;case"trapezoid":d="trapezoid";break;case"inv_trapezoid":d="inv_trapezoid";break;case"circle":d="circle";break;case"ellipse":d="ellipse";break;case"stadium":d="stadium";break;case"subroutine":d="subroutine";break;case"cylinder":d="cylinder";break;case"doublecircle":d="doublecircle"}e.setNode(r.id,{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,link:r.link,linkTarget:r.linkTarget,tooltip:a.db.getTooltip(r.id)||"",domId:a.db.lookUpDomId(r.id),haveCallback:r.haveCallback,width:"group"===r.type?500:void 0,dir:r.dir,type:r.type,props:r.props,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,domId:a.db.lookUpDomId(r.id),width:"group"===r.type?500:void 0,type:r.type,dir:r.dir,props:r.props,padding:ar().flowchart.padding})}))},kc=function(t,e,n){Nt.info("abc78 edges = ",t);let r,i,a=0,s={};if(void 0!==t.defaultStyle){const e=Mn(t.defaultStyle);r=e.style,i=e.labelStyle}t.forEach((function(n){a++;var c="L-"+n.start+"-"+n.end;void 0===s[c]?(s[c]=0,Nt.info("abc78 new entry",c,s[c])):(s[c]++,Nt.info("abc78 new entry",c,s[c]));let l=c+"-"+s[c];Nt.info("abc78 new link id to be used is",c,l,s[c]);var h="LS-"+n.start,u="LE-"+n.end;const d={style:"",labelStyle:""};switch(d.minlen=n.length||1,"arrow_open"===n.type?d.arrowhead="none":d.arrowhead="normal",d.arrowTypeStart="arrow_open",d.arrowTypeEnd="arrow_open",n.type){case"double_arrow_cross":d.arrowTypeStart="arrow_cross";case"arrow_cross":d.arrowTypeEnd="arrow_cross";break;case"double_arrow_point":d.arrowTypeStart="arrow_point";case"arrow_point":d.arrowTypeEnd="arrow_point";break;case"double_arrow_circle":d.arrowTypeStart="arrow_circle";case"arrow_circle":d.arrowTypeEnd="arrow_circle"}let p="",f="";switch(n.stroke){case"normal":p="fill:none;",void 0!==r&&(p=r),void 0!==i&&(f=i),d.thickness="normal",d.pattern="solid";break;case"dotted":d.thickness="normal",d.pattern="dotted",d.style="fill:none;stroke-width:2px;stroke-dasharray:3;";break;case"thick":d.thickness="thick",d.pattern="solid",d.style="stroke-width: 3.5px;fill:none;"}if(void 0!==n.style){const t=Mn(n.style);p=t.style,f=t.labelStyle}d.style=d.style+=p,d.labelStyle=d.labelStyle+=f,void 0!==n.interpolate?d.curve=Dn(n.interpolate,o.c_6):void 0!==t.defaultInterpolate?d.curve=Dn(t.defaultInterpolate,o.c_6):d.curve=Dn(xc.curve,o.c_6),void 0===n.text?void 0!==n.style&&(d.arrowheadStyle="fill: #333"):(d.arrowheadStyle="fill: #333",d.labelpos="c"),d.labelType="text",d.label=n.text.replace(Yt.lineBreakRegex,"\n"),void 0===n.style&&(d.style=d.style||"stroke: #333; stroke-width: 1.5px;fill:none;"),d.labelStyle=d.labelStyle.replace("color:","fill:"),d.id=l,d.classes="flowchart-link "+h+" "+u,e.setEdge(n.start,n.end,d,a)}))},wc={setConf:function(t){const e=Object.keys(t);for(const n of e)xc[n]=t[n]},addVertices:vc,addEdges:kc,getClasses:function(t,e){Nt.info("Extracting classes"),e.db.clear();try{return e.parse(t),e.db.getClasses()}catch(n){return}},draw:function(t,e,n,r){Nt.info("Drawing flowchart"),r.db.clear(),yc.setGen("gen-2"),r.parser.parse(t);let i=r.db.getDirection();void 0===i&&(i="TD");const{securityLevel:a,flowchart:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;let h;"sandbox"===a&&(h=(0,o.Ys)("#i"+e));const u="sandbox"===a?(0,o.Ys)(h.nodes()[0].contentDocument.body):(0,o.Ys)("body"),d="sandbox"===a?h.nodes()[0].contentDocument:document,p=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:i,nodesep:c,ranksep:l,marginx:0,marginy:0}).setDefaultEdgeLabel((function(){return{}}));let f;const g=r.db.getSubGraphs();Nt.info("Subgraphs - ",g);for(let o=g.length-1;o>=0;o--)f=g[o],Nt.info("Subgraph - ",f),r.db.addVertex(f.id,f.title,"group",void 0,f.classes,f.dir);const y=r.db.getVertices(),m=r.db.getEdges();Nt.info("Edges",m);let b=0;for(b=g.length-1;b>=0;b--){f=g[b],(0,o.td_)("cluster").append("text");for(let t=0;t<f.nodes.length;t++)Nt.info("Setting up subgraphs",f.nodes[t],f.id),p.setParent(f.nodes[t],f.id)}vc(y,p,e,u,d,r),kc(m,p);const _=u.select(`[id="${e}"]`),x=u.select("#"+e+" g");if(qs(x,p,["point","circle","cross"],"flowchart",e),Gn.insertTitle(_,"flowchartTitleText",s.titleTopMargin,r.db.getDiagramTitle()),pr(p,_,s.diagramPadding,s.useMaxWidth),r.db.indexNodes("subGraph"+b),!s.htmlLabels){const t=d.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of t){const t=e.getBBox(),n=d.createElementNS("http://www.w3.org/2000/svg","rect");n.setAttribute("rx",0),n.setAttribute("ry",0),n.setAttribute("width",t.width),n.setAttribute("height",t.height),e.insertBefore(n,e.firstChild)}}Object.keys(y).forEach((function(t){const n=y[t];if(n.link){const r=(0,o.Ys)("#"+e+' [id="'+t+'"]');if(r){const t=d.createElementNS("http://www.w3.org/2000/svg","a");t.setAttributeNS("http://www.w3.org/2000/svg","class",n.classes.join(" ")),t.setAttributeNS("http://www.w3.org/2000/svg","href",n.link),t.setAttributeNS("http://www.w3.org/2000/svg","rel","noopener"),"sandbox"===a?t.setAttributeNS("http://www.w3.org/2000/svg","target","_top"):n.linkTarget&&t.setAttributeNS("http://www.w3.org/2000/svg","target",n.linkTarget);const e=r.insert((function(){return t}),":first-child"),i=r.select(".label-container");i&&e.append((function(){return i.node()}));const s=r.select(".label");s&&e.append((function(){return s.node()}))}}}))}};var Ec=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,21],d=[1,22],p=[1,23],f=[1,24],g=[1,25],y=[1,26],m=[1,27],b=[1,29],_=[1,31],x=[1,34],v=[5,7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],k={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,gantt:5,document:6,EOF:7,line:8,SPACE:9,statement:10,NL:11,dateFormat:12,inclusiveEndDates:13,topAxis:14,axisFormat:15,tickInterval:16,excludes:17,includes:18,todayMarker:19,title:20,acc_title:21,acc_title_value:22,acc_descr:23,acc_descr_value:24,acc_descr_multiline_value:25,section:26,clickStatement:27,taskTxt:28,taskData:29,openDirective:30,typeDirective:31,closeDirective:32,":":33,argDirective:34,click:35,callbackname:36,callbackargs:37,href:38,clickStatementDebug:39,open_directive:40,type_directive:41,arg_directive:42,close_directive:43,$accept:0,$end:1},terminals_:{2:"error",5:"gantt",7:"EOF",9:"SPACE",11:"NL",12:"dateFormat",13:"inclusiveEndDates",14:"topAxis",15:"axisFormat",16:"tickInterval",17:"excludes",18:"includes",19:"todayMarker",20:"title",21:"acc_title",22:"acc_title_value",23:"acc_descr",24:"acc_descr_value",25:"acc_descr_multiline_value",26:"section",28:"taskTxt",29:"taskData",33:":",35:"click",36:"callbackname",37:"callbackargs",38:"href",40:"open_directive",41:"type_directive",42:"arg_directive",43:"close_directive"},productions_:[0,[3,2],[3,3],[6,0],[6,2],[8,2],[8,1],[8,1],[8,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,2],[10,2],[10,1],[10,1],[10,1],[10,2],[10,1],[4,4],[4,6],[27,2],[27,3],[27,3],[27,4],[27,3],[27,4],[27,2],[39,2],[39,3],[39,3],[39,4],[39,3],[39,4],[39,2],[30,1],[31,1],[34,1],[32,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 2:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 9:r.setDateFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 10:r.enableInclusiveEndDates(),this.$=a[o].substr(18);break;case 11:r.TopAxis(),this.$=a[o].substr(8);break;case 12:r.setAxisFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 13:r.setTickInterval(a[o].substr(13)),this.$=a[o].substr(13);break;case 14:r.setExcludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 15:r.setIncludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 16:r.setTodayMarker(a[o].substr(12)),this.$=a[o].substr(12);break;case 17:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 18:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 19:case 20:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 23:r.addTask(a[o-1],a[o]),this.$="task";break;case 27:this.$=a[o-1],r.setClickEvent(a[o-1],a[o],null);break;case 28:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 29:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],null),r.setLink(a[o-2],a[o]);break;case 30:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setLink(a[o-3],a[o]);break;case 31:this.$=a[o-2],r.setClickEvent(a[o-2],a[o],null),r.setLink(a[o-2],a[o-1]);break;case 32:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-1],a[o]),r.setLink(a[o-3],a[o-2]);break;case 33:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 34:case 40:this.$=a[o-1]+" "+a[o];break;case 35:case 36:case 38:this.$=a[o-2]+" "+a[o-1]+" "+a[o];break;case 37:case 39:this.$=a[o-3]+" "+a[o-2]+" "+a[o-1]+" "+a[o];break;case 41:r.parseDirective("%%{","open_directive");break;case 42:r.parseDirective(a[o],"type_directive");break;case 43:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 44:r.parseDirective("}%%","close_directive","gantt")}},table:[{3:1,4:2,5:n,30:4,40:r},{1:[3]},{3:6,4:2,5:n,30:4,40:r},e(i,[2,3],{6:7}),{31:8,41:[1,9]},{41:[2,41]},{1:[2,1]},{4:30,7:[1,10],8:11,9:[1,12],10:13,11:[1,14],12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},{32:32,33:[1,33],43:x},e([33,43],[2,42]),e(i,[2,8],{1:[2,2]}),e(i,[2,4]),{4:30,10:35,12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,9]),e(i,[2,10]),e(i,[2,11]),e(i,[2,12]),e(i,[2,13]),e(i,[2,14]),e(i,[2,15]),e(i,[2,16]),e(i,[2,17]),{22:[1,36]},{24:[1,37]},e(i,[2,20]),e(i,[2,21]),e(i,[2,22]),{29:[1,38]},e(i,[2,24]),{36:[1,39],38:[1,40]},{11:[1,41]},{34:42,42:[1,43]},{11:[2,44]},e(i,[2,5]),e(i,[2,18]),e(i,[2,19]),e(i,[2,23]),e(i,[2,27],{37:[1,44],38:[1,45]}),e(i,[2,33],{36:[1,46]}),e(v,[2,25]),{32:47,43:x},{43:[2,43]},e(i,[2,28],{38:[1,48]}),e(i,[2,29]),e(i,[2,31],{37:[1,49]}),{11:[1,50]},e(i,[2,30]),e(i,[2,32]),e(v,[2,26])],defaultActions:{5:[2,41],6:[2,1],34:[2,44],43:[2,43]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),40;case 1:return this.begin("type_directive"),41;case 2:return this.popState(),this.begin("arg_directive"),33;case 3:return this.popState(),this.popState(),43;case 4:return 42;case 5:return this.begin("acc_title"),21;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),23;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 20:case 23:case 26:case 29:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:case 13:case 14:case 16:case 17:case 18:break;case 15:return 11;case 19:this.begin("href");break;case 21:return 38;case 22:this.begin("callbackname");break;case 24:this.popState(),this.begin("callbackargs");break;case 25:return 36;case 27:return 37;case 28:this.begin("click");break;case 30:return 35;case 31:return 5;case 32:return 12;case 33:return 13;case 34:return 14;case 35:return 15;case 36:return 16;case 37:return 18;case 38:return 17;case 39:return 19;case 40:return"date";case 41:return 20;case 42:return"accDescription";case 43:return 26;case 44:return 28;case 45:return 29;case 46:return 33;case 47:return 7;case 48:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%(?!\{)*[^\n]*)/i,/^(?:[^\}]%%*[^\n]*)/i,/^(?:%%*[^\n]*[\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:href[\s]+["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:call[\s]+)/i,/^(?:\([\s]*\))/i,/^(?:\()/i,/^(?:[^(]*)/i,/^(?:\))/i,/^(?:[^)]*)/i,/^(?:click[\s]+)/i,/^(?:[\s\n])/i,/^(?:[^\s\n]*)/i,/^(?:gantt\b)/i,/^(?:dateFormat\s[^#\n;]+)/i,/^(?:inclusiveEndDates\b)/i,/^(?:topAxis\b)/i,/^(?:axisFormat\s[^#\n;]+)/i,/^(?:tickInterval\s[^#\n;]+)/i,/^(?:includes\s[^#\n;]+)/i,/^(?:excludes\s[^#\n;]+)/i,/^(?:todayMarker\s[^\n;]+)/i,/^(?:\d\d\d\d-\d\d-\d\d\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accDescription\s[^#\n;]+)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[26,27],inclusive:!1},callbackname:{rules:[23,24,25],inclusive:!1},href:{rules:[20,21],inclusive:!1},click:{rules:[29,30],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,22,28,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Ec.parser=Ec;const Cc=Ec,Tc=t=>null!==t.match(/^\s*gantt/);a().extend(Et()),a().extend(Tt()),a().extend(At());let Sc,Ac="",Lc="",Bc="",Nc=[],Dc=[],Oc={},Mc=[],Ic=[],Fc="";const $c=["active","done","crit","milestone"];let Rc=[],Zc=!1,Pc=!1,jc=0;const Yc=function(t,e,n,r){return!r.includes(t.format(e.trim()))&&(!!(t.isoWeekday()>=6&&n.includes("weekends"))||(!!n.includes(t.format("dddd").toLowerCase())||n.includes(t.format(e.trim()))))},zc=function(t,e,n,r){if(!n.length||t.manualEndTime)return;let i,s;i=t.startTime instanceof Date?a()(t.startTime):a()(t.startTime,e,!0),i=i.add(1,"d"),s=t.endTime instanceof Date?a()(t.endTime):a()(t.endTime,e,!0);const[o,c]=Uc(i,s,e,n,r);t.endTime=o.toDate(),t.renderEndTime=c},Uc=function(t,e,n,r,i){let a=!1,s=null;for(;t<=e;)a||(s=e.toDate()),a=Yc(t,n,r,i),a&&(e=e.add(1,"d")),t=t.add(1,"d");return[e,s]},Wc=function(t,e,n){n=n.trim();const r=/^after\s+([\d\w- ]+)/.exec(n.trim());if(null!==r){let t=null;if(r[1].split(" ").forEach((function(e){let n=tl(e);void 0!==n&&(t?n.endTime>t.endTime&&(t=n):t=n)})),t)return t.endTime;{const t=new Date;return t.setHours(0,0,0,0),t}}let i=a()(n,e.trim(),!0);if(i.isValid())return i.toDate();{Nt.debug("Invalid date:"+n),Nt.debug("With date format:"+e.trim());const t=new Date(n);if(void 0===t||isNaN(t.getTime()))throw new Error("Invalid date:"+n);return t}},qc=function(t){const e=/^(\d+(?:\.\d+)?)([Mdhmswy]|ms)$/.exec(t.trim());return null!==e?[Number.parseFloat(e[1]),e[2]]:[NaN,"ms"]},Hc=function(t,e,n,r=!1){n=n.trim();let i=a()(n,e.trim(),!0);if(i.isValid())return r&&(i=i.add(1,"d")),i.toDate();let s=a()(t);const[o,c]=qc(n);if(!Number.isNaN(o)){const t=s.add(o,c);t.isValid()&&(s=t)}return s.toDate()};let Vc=0;const Gc=function(t){return void 0===t?(Vc+=1,"task"+Vc):t};let Xc,Kc,Qc=[];const Jc={},tl=function(t){const e=Jc[t];return Qc[e]},el=function(){const t=function(t){const e=Qc[t];let n="";switch(Qc[t].raw.startTime.type){case"prevTaskEnd":{const t=tl(e.prevTaskId);e.startTime=t.endTime;break}case"getStartDate":n=Wc(0,Ac,Qc[t].raw.startTime.startData),n&&(Qc[t].startTime=n)}return Qc[t].startTime&&(Qc[t].endTime=Hc(Qc[t].startTime,Ac,Qc[t].raw.endTime.data,Zc),Qc[t].endTime&&(Qc[t].processed=!0,Qc[t].manualEndTime=a()(Qc[t].raw.endTime.data,"YYYY-MM-DD",!0).isValid(),zc(Qc[t],Ac,Dc,Nc))),Qc[t].processed};let e=!0;for(const[n,r]of Qc.entries())t(n),e=e&&r.processed;return e},nl=function(t,e){t.split(",").forEach((function(t){let n=tl(t);void 0!==n&&n.classes.push(e)}))},rl=function(t,e){Rc.push((function(){const n=document.querySelector(`[id="${t}"]`);null!==n&&n.addEventListener("click",(function(){e()}))}),(function(){const n=document.querySelector(`[id="${t}-text"]`);null!==n&&n.addEventListener("click",(function(){e()}))}))},il={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gantt,clear:function(){Mc=[],Ic=[],Fc="",Rc=[],Vc=0,Xc=void 0,Kc=void 0,Qc=[],Ac="",Lc="",Sc=void 0,Bc="",Nc=[],Dc=[],Zc=!1,Pc=!1,jc=0,Oc={},Dr()},setDateFormat:function(t){Ac=t},getDateFormat:function(){return Ac},enableInclusiveEndDates:function(){Zc=!0},endDatesAreInclusive:function(){return Zc},enableTopAxis:function(){Pc=!0},topAxisEnabled:function(){return Pc},setAxisFormat:function(t){Lc=t},getAxisFormat:function(){return Lc},setTickInterval:function(t){Sc=t},getTickInterval:function(){return Sc},setTodayMarker:function(t){Bc=t},getTodayMarker:function(){return Bc},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){Fc=t,Mc.push(t)},getSections:function(){return Mc},getTasks:function(){let t=el();let e=0;for(;!t&&e<10;)t=el(),e++;return Ic=Qc,Ic},addTask:function(t,e){const n={section:Fc,type:Fc,processed:!1,manualEndTime:!1,renderEndTime:null,raw:{data:e},task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();switch(r.length){case 1:i.id=Gc(),i.startTime={type:"prevTaskEnd",id:t},i.endTime={data:r[0]};break;case 2:i.id=Gc(),i.startTime={type:"getStartDate",startData:r[0]},i.endTime={data:r[1]};break;case 3:i.id=Gc(r[0]),i.startTime={type:"getStartDate",startData:r[1]},i.endTime={data:r[2]}}return i}(Kc,e);n.raw.startTime=r.startTime,n.raw.endTime=r.endTime,n.id=r.id,n.prevTaskId=Kc,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,n.order=jc,jc++;const i=Qc.push(n);Kc=n.id,Jc[n.id]=i-1},findTaskById:tl,addTaskOrg:function(t,e){const n={section:Fc,type:Fc,description:t,task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();let s="";switch(r.length){case 1:i.id=Gc(),i.startTime=t.endTime,s=r[0];break;case 2:i.id=Gc(),i.startTime=Wc(0,Ac,r[0]),s=r[1];break;case 3:i.id=Gc(r[0]),i.startTime=Wc(0,Ac,r[1]),s=r[2]}return s&&(i.endTime=Hc(i.startTime,Ac,s,Zc),i.manualEndTime=a()(s,"YYYY-MM-DD",!0).isValid(),zc(i,Ac,Dc,Nc)),i}(Xc,e);n.startTime=r.startTime,n.endTime=r.endTime,n.id=r.id,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,Xc=n,Ic.push(n)},setIncludes:function(t){Nc=t.toLowerCase().split(/[\s,]+/)},getIncludes:function(){return Nc},setExcludes:function(t){Dc=t.toLowerCase().split(/[\s,]+/)},getExcludes:function(){return Dc},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){if("loose"!==ar().securityLevel)return;if(void 0===e)return;let r=[];if("string"==typeof n){r=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<r.length;t++){let e=r[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),r[t]=e}}0===r.length&&r.push(t),void 0!==tl(t)&&rl(t,(()=>{Gn.runFunc(e,...r)}))}(t,e,n)})),nl(t,"clickable")},setLink:function(t,e){let n=e;"loose"!==ar().securityLevel&&(n=(0,s.N)(e)),t.split(",").forEach((function(t){void 0!==tl(t)&&(rl(t,(()=>{window.open(n,"_self")})),Oc[t]=n)})),nl(t,"clickable")},getLinks:function(){return Oc},bindFunctions:function(t){Rc.forEach((function(e){e(t)}))},parseDuration:qc,isInvalidDate:Yc};function al(t,e,n){let r=!0;for(;r;)r=!1,n.forEach((function(n){const i=new RegExp("^\\s*"+n+"\\s*$");t[0].match(i)&&(e[n]=!0,t.shift(1),r=!0)}))}let sl;const ol={setConf:function(){Nt.debug("Something is calling, setConf, remove the call")},draw:function(t,e,n,r){const i=ar().gantt,s=ar().securityLevel;let c;"sandbox"===s&&(c=(0,o.Ys)("#i"+e));const l="sandbox"===s?(0,o.Ys)(c.nodes()[0].contentDocument.body):(0,o.Ys)("body"),h="sandbox"===s?c.nodes()[0].contentDocument:document,u=h.getElementById(e);sl=u.parentElement.offsetWidth,void 0===sl&&(sl=1200),void 0!==i.useWidth&&(sl=i.useWidth);const d=r.db.getTasks(),p=d.length*(i.barHeight+i.barGap)+2*i.topPadding;u.setAttribute("viewBox","0 0 "+sl+" "+p);const f=l.select(`[id="${e}"]`),g=(0,o.Xf)().domain([(0,o.VV$)(d,(function(t){return t.startTime})),(0,o.Fp7)(d,(function(t){return t.endTime}))]).rangeRound([0,sl-i.leftPadding-i.rightPadding]);let y=[];for(const a of d)y.push(a.type);const m=y;function b(t,e){return function(t){let e=t.length;const n={};for(;e;)n[t[--e]]=(n[t[e]]||0)+1;return n}(e)[t]||0}y=function(t){const e={},n=[];for(let r=0,i=t.length;r<i;++r)Object.prototype.hasOwnProperty.call(e,t[r])||(e[t[r]]=!0,n.push(t[r]));return n}(y),d.sort((function(t,e){const n=t.startTime,r=e.startTime;let i=0;return n>r?i=1:n<r&&(i=-1),i})),function(t,n,s){const c=i.barHeight,l=c+i.barGap,u=i.topPadding,d=i.leftPadding;(0,o.BYU)().domain([0,y.length]).range(["#00B9FA","#F95002"]).interpolate(o.JHv);(function(t,e,n,s,o,c,l,h){const u=c.reduce(((t,{startTime:e})=>t?Math.min(t,e):e),0),d=c.reduce(((t,{endTime:e})=>t?Math.max(t,e):e),0),p=r.db.getDateFormat();if(!u||!d)return;const y=[];let m=null,b=a()(u);for(;b.valueOf()<=d;)r.db.isInvalidDate(b,p,l,h)?m?m.end=b:m={start:b,end:b}:m&&(y.push(m),m=null),b=b.add(1,"d");f.append("g").selectAll("rect").data(y).enter().append("rect").attr("id",(function(t){return"exclude-"+t.start.format("YYYY-MM-DD")})).attr("x",(function(t){return g(t.start)+n})).attr("y",i.gridLineStartPadding).attr("width",(function(t){const e=t.end.add(1,"day");return g(e)-g(t.start)})).attr("height",o-e-i.gridLineStartPadding).attr("transform-origin",(function(e,r){return(g(e.start)+n+.5*(g(e.end)-g(e.start))).toString()+"px "+(r*t+.5*o).toString()+"px"})).attr("class","exclude-range")})(l,u,d,0,s,t,r.db.getExcludes(),r.db.getIncludes()),function(t,e,n,a){let s=(0,o.LLu)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));const c=/^([1-9]\d*)(minute|hour|day|week|month)$/.exec(r.db.getTickInterval()||i.tickInterval);if(null!==c){const t=c[1];switch(c[2]){case"minute":s.ticks(o.Z_i.every(t));break;case"hour":s.ticks(o.WQD.every(t));break;case"day":s.ticks(o.rr1.every(t));break;case"week":s.ticks(o.NGh.every(t));break;case"month":s.ticks(o.F0B.every(t))}}if(f.append("g").attr("class","grid").attr("transform","translate("+t+", "+(a-50)+")").call(s).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10).attr("dy","1em"),r.db.topAxisEnabled()||i.topAxis){let n=(0,o.F5q)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));if(null!==c){const t=c[1];switch(c[2]){case"minute":n.ticks(o.Z_i.every(t));break;case"hour":n.ticks(o.WQD.every(t));break;case"day":n.ticks(o.rr1.every(t));break;case"week":n.ticks(o.NGh.every(t));break;case"month":n.ticks(o.F0B.every(t))}}f.append("g").attr("class","grid").attr("transform","translate("+t+", "+e+")").call(n).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10)}}(d,u,0,s),function(t,n,a,s,c,l,h){f.append("g").selectAll("rect").data(t).enter().append("rect").attr("x",0).attr("y",(function(t,e){return t.order*n+a-2})).attr("width",(function(){return h-i.rightPadding/2})).attr("height",n).attr("class",(function(t){for(const[e,n]of y.entries())if(t.type===n)return"section section"+e%i.numberSectionStyles;return"section section0"}));const u=f.append("g").selectAll("rect").data(t).enter(),d=r.db.getLinks();u.append("rect").attr("id",(function(t){return t.id})).attr("rx",3).attr("ry",3).attr("x",(function(t){return t.milestone?g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))-.5*c:g(t.startTime)+s})).attr("y",(function(t,e){return t.order*n+a})).attr("width",(function(t){return t.milestone?c:g(t.renderEndTime||t.endTime)-g(t.startTime)})).attr("height",c).attr("transform-origin",(function(t,e){return e=t.order,(g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))).toString()+"px "+(e*n+a+.5*c).toString()+"px"})).attr("class",(function(t){const e="task";let n="";t.classes.length>0&&(n=t.classes.join(" "));let r=0;for(const[s,o]of y.entries())t.type===o&&(r=s%i.numberSectionStyles);let a="";return t.active?t.crit?a+=" activeCrit":a=" active":t.done?a=t.crit?" doneCrit":" done":t.crit&&(a+=" crit"),0===a.length&&(a=" task"),t.milestone&&(a=" milestone "+a),a+=r,a+=" "+n,e+a})),u.append("text").attr("id",(function(t){return t.id+"-text"})).text((function(t){return t.task})).attr("font-size",i.fontSize).attr("x",(function(t){let e=g(t.startTime),n=g(t.renderEndTime||t.endTime);t.milestone&&(e+=.5*(g(t.endTime)-g(t.startTime))-.5*c),t.milestone&&(n=e+c);const r=this.getBBox().width;return r>n-e?n+r+1.5*i.leftPadding>h?e+s-5:n+s+5:(n-e)/2+e+s})).attr("y",(function(t,e){return t.order*n+i.barHeight/2+(i.fontSize/2-2)+a})).attr("text-height",c).attr("class",(function(t){const e=g(t.startTime);let n=g(t.endTime);t.milestone&&(n=e+c);const r=this.getBBox().width;let a="";t.classes.length>0&&(a=t.classes.join(" "));let s=0;for(const[c,l]of y.entries())t.type===l&&(s=c%i.numberSectionStyles);let o="";return t.active&&(o=t.crit?"activeCritText"+s:"activeText"+s),t.done?o=t.crit?o+" doneCritText"+s:o+" doneText"+s:t.crit&&(o=o+" critText"+s),t.milestone&&(o+=" milestoneText"),r>n-e?n+r+1.5*i.leftPadding>h?a+" taskTextOutsideLeft taskTextOutside"+s+" "+o:a+" taskTextOutsideRight taskTextOutside"+s+" "+o+" width-"+r:a+" taskText taskText"+s+" "+o+" width-"+r}));if("sandbox"===ar().securityLevel){let t;t=(0,o.Ys)("#i"+e);const n=t.nodes()[0].contentDocument;u.filter((function(t){return void 0!==d[t.id]})).each((function(t){var e=n.querySelector("#"+t.id),r=n.querySelector("#"+t.id+"-text");const i=e.parentNode;var a=n.createElement("a");a.setAttribute("xlink:href",d[t.id]),a.setAttribute("target","_top"),i.appendChild(a),a.appendChild(e),a.appendChild(r)}))}}(t,l,u,d,c,0,n),function(t,e){const n=[];let r=0;for(const[i,a]of y.entries())n[i]=[a,b(a,m)];f.append("g").selectAll("text").data(n).enter().append((function(t){const e=t[0].split(Yt.lineBreakRegex),n=-(e.length-1)/2,r=h.createElementNS("http://www.w3.org/2000/svg","text");r.setAttribute("dy",n+"em");for(const[i,a]of e.entries()){const t=h.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttribute("alignment-baseline","central"),t.setAttribute("x","10"),i>0&&t.setAttribute("dy","1em"),t.textContent=a,r.appendChild(t)}return r})).attr("x",10).attr("y",(function(i,a){if(!(a>0))return i[1]*t/2+e;for(let s=0;s<a;s++)return r+=n[a-1][1],i[1]*t/2+r*t+e})).attr("font-size",i.sectionFontSize).attr("font-size",i.sectionFontSize).attr("class",(function(t){for(const[e,n]of y.entries())if(t[0]===n)return"sectionTitle sectionTitle"+e%i.numberSectionStyles;return"sectionTitle"}))}(l,u),function(t,e,n,a){const s=r.db.getTodayMarker();if("off"===s)return;const o=f.append("g").attr("class","today"),c=new Date,l=o.append("line");l.attr("x1",g(c)+t).attr("x2",g(c)+t).attr("y1",i.titleTopMargin).attr("y2",a-i.titleTopMargin).attr("class","today"),""!==s&&l.attr("style",s.replace(/,/g,";"))}(d,0,0,s)}(d,sl,p),dr(f,p,sl,i.useMaxWidth),f.append("text").text(r.db.getDiagramTitle()).attr("x",sl/2).attr("y",i.titleTopMargin).attr("class","titleText")}};var cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[6,9,10],r={trace:function(){},yy:{},symbols_:{error:2,start:3,info:4,document:5,EOF:6,line:7,statement:8,NL:9,showInfo:10,$accept:0,$end:1},terminals_:{2:"error",4:"info",6:"EOF",9:"NL",10:"showInfo"},productions_:[0,[3,3],[5,0],[5,2],[7,1],[7,1],[8,1]],performAction:function(t,e,n,r,i,a,s){switch(a.length,i){case 1:return r;case 4:break;case 6:r.setInfo(!0)}},table:[{3:1,4:[1,2]},{1:[3]},e(n,[2,2],{5:3}),{6:[1,4],7:5,8:6,9:[1,7],10:[1,8]},{1:[2,1]},e(n,[2,3]),e(n,[2,4]),e(n,[2,5]),e(n,[2,6])],defaultActions:{4:[2,1]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},i=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 4;case 1:return 9;case 2:return"space";case 3:return 10;case 4:return 6;case 5:return"TXT"}},rules:[/^(?:info\b)/i,/^(?:[\s\n\r]+)/i,/^(?:[\s]+)/i,/^(?:showInfo\b)/i,/^(?:$)/i,/^(?:.)/i],conditions:{INITIAL:{rules:[0,1,2,3,4,5],inclusive:!0}}},t);function a(){this.yy={}}return r.lexer=i,a.prototype=r,r.Parser=a,new a}();cl.parser=cl;const ll=cl;var hl="",ul=!1;const dl={setMessage:t=>{Nt.debug("Setting message to: "+t),hl=t},getMessage:()=>hl,setInfo:t=>{ul=t},getInfo:()=>ul,clear:Dr},pl={draw:(t,e,n)=>{try{Nt.debug("Rendering info diagram\n"+t);const r=ar().securityLevel;let i;"sandbox"===r&&(i=(0,o.Ys)("#i"+e));const a=("sandbox"===r?(0,o.Ys)(i.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select("#"+e);a.append("g").append("text").attr("x",100).attr("y",40).attr("class","version").attr("font-size","32px").style("text-anchor","middle").text("v "+n),a.attr("height",100),a.attr("width",400)}catch(r){Nt.error("Error while rendering info diagram"),Nt.error(r.message)}}},fl=t=>null!==t.match(/^\s*info/);var gl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,5],i=[1,6],a=[1,7],s=[1,9],o=[1,11,13,15,17,19,20,26,27,28,29],c=[2,5],l=[1,6,11,13,15,17,19,20,26,27,28,29],h=[26,27,28],u=[2,8],d=[1,18],p=[1,19],f=[1,20],g=[1,21],y=[1,22],m=[1,23],b=[1,28],_=[6,26,27,28,29],x={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,PIE:6,document:7,showData:8,line:9,statement:10,txt:11,value:12,title:13,title_value:14,acc_title:15,acc_title_value:16,acc_descr:17,acc_descr_value:18,acc_descr_multiline_value:19,section:20,openDirective:21,typeDirective:22,closeDirective:23,":":24,argDirective:25,NEWLINE:26,";":27,EOF:28,open_directive:29,type_directive:30,arg_directive:31,close_directive:32,$accept:0,$end:1},terminals_:{2:"error",6:"PIE",8:"showData",11:"txt",12:"value",13:"title",14:"title_value",15:"acc_title",16:"acc_title_value",17:"acc_descr",18:"acc_descr_value",19:"acc_descr_multiline_value",20:"section",24:":",26:"NEWLINE",27:";",28:"EOF",29:"open_directive",30:"type_directive",31:"arg_directive",32:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,3],[7,0],[7,2],[9,2],[10,0],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,1],[5,3],[5,5],[4,1],[4,1],[4,1],[21,1],[22,1],[25,1],[23,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setShowData(!0);break;case 7:this.$=a[o-1];break;case 9:r.addSection(a[o-1],r.cleanupValue(a[o]));break;case 10:this.$=a[o].trim(),r.setDiagramTitle(this.$);break;case 11:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 12:case 13:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 14:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 21:r.parseDirective("%%{","open_directive");break;case 22:r.parseDirective(a[o],"type_directive");break;case 23:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 24:r.parseDirective("}%%","close_directive","pie")}},table:[{3:1,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{1:[3]},{3:10,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{3:11,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},e(o,c,{7:12,8:[1,13]}),e(l,[2,18]),e(l,[2,19]),e(l,[2,20]),{22:14,30:[1,15]},{30:[2,21]},{1:[2,1]},{1:[2,2]},e(h,u,{21:8,9:16,10:17,5:24,1:[2,3],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(o,c,{7:25}),{23:26,24:[1,27],32:b},e([24,32],[2,22]),e(o,[2,6]),{4:29,26:r,27:i,28:a},{12:[1,30]},{14:[1,31]},{16:[1,32]},{18:[1,33]},e(h,[2,13]),e(h,[2,14]),e(h,[2,15]),e(h,u,{21:8,9:16,10:17,5:24,1:[2,4],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(_,[2,16]),{25:34,31:[1,35]},e(_,[2,24]),e(o,[2,7]),e(h,[2,9]),e(h,[2,10]),e(h,[2,11]),e(h,[2,12]),{23:36,32:b},{32:[2,23]},e(_,[2,17])],defaultActions:{9:[2,21],10:[2,1],11:[2,2],35:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},v=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),29;case 1:return this.begin("type_directive"),30;case 2:return this.popState(),this.begin("arg_directive"),24;case 3:return this.popState(),this.popState(),32;case 4:return 31;case 5:case 6:case 8:case 9:break;case 7:return 26;case 10:return this.begin("title"),13;case 11:return this.popState(),"title_value";case 12:return this.begin("acc_title"),15;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),17;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:case 20:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:this.begin("string");break;case 21:return"txt";case 22:return 6;case 23:return 8;case 24:return"value";case 25:return 28}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n\r]+)/i,/^(?:%%[^\n]*)/i,/^(?:[\s]+)/i,/^(?:title\b)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:pie\b)/i,/^(?:showData\b)/i,/^(?::[\s]*[\d]+(?:\.[\d]+)?)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},title:{rules:[11],inclusive:!1},string:{rules:[20,21],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,12,14,16,19,22,23,24,25],inclusive:!0}}},t);function k(){this.yy={}}return x.lexer=v,k.prototype=x,x.Parser=k,new k}();gl.parser=gl;const yl=gl,ml=t=>null!==t.match(/^\s*pie/)||null!==t.match(/^\s*bar/);let bl={},_l=!1;const xl={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().pie,addSection:function(t,e){t=Yt.sanitizeText(t,ar()),void 0===bl[t]&&(bl[t]=e,Nt.debug("Added new section :",t))},getSections:()=>bl,cleanupValue:function(t){return":"===t.substring(0,1)?(t=t.substring(1).trim(),Number(t.trim())):Number(t.trim())},clear:function(){bl={},_l=!1,Dr()},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setShowData:function(t){_l=t},getShowData:function(){return _l},getAccDescription:Fr,setAccDescription:Ir};let vl,kl=ar();const wl=450,El={draw:(t,e,n,r)=>{try{kl=ar(),Nt.debug("Rendering info diagram\n"+t);const n=ar().securityLevel;let y;"sandbox"===n&&(y=(0,o.Ys)("#i"+e));const m="sandbox"===n?(0,o.Ys)(y.nodes()[0].contentDocument.body):(0,o.Ys)("body"),b="sandbox"===n?y.nodes()[0].contentDocument:document;r.db.clear(),r.parser.parse(t),Nt.debug("Parsed info diagram");const _=b.getElementById(e);vl=_.parentElement.offsetWidth,void 0===vl&&(vl=1200),void 0!==kl.useWidth&&(vl=kl.useWidth),void 0!==kl.pie.useWidth&&(vl=kl.pie.useWidth);const x=m.select("#"+e);dr(x,wl,vl,kl.pie.useMaxWidth),_.setAttribute("viewBox","0 0 "+vl+" "+wl);var i=18,a=Math.min(vl,wl)/2-40,s=x.append("g").attr("transform","translate("+vl/2+",225)"),c=r.db.getSections(),l=0;Object.keys(c).forEach((function(t){l+=c[t]}));const v=kl.themeVariables;var h=[v.pie1,v.pie2,v.pie3,v.pie4,v.pie5,v.pie6,v.pie7,v.pie8,v.pie9,v.pie10,v.pie11,v.pie12],u=(0,o.PKp)().range(h),d=Object.entries(c).map((function(t,e){return{order:e,name:t[0],value:t[1]}})),p=(0,o.ve8)().value((function(t){return t.value})).sort((function(t,e){return t.order-e.order}))(d),f=(0,o.Nb1)().innerRadius(0).outerRadius(a);s.selectAll("mySlices").data(p).enter().append("path").attr("d",f).attr("fill",(function(t){return u(t.data.name)})).attr("class","pieCircle"),s.selectAll("mySlices").data(p).enter().append("text").text((function(t){return(t.data.value/l*100).toFixed(0)+"%"})).attr("transform",(function(t){return"translate("+f.centroid(t)+")"})).style("text-anchor","middle").attr("class","slice"),s.append("text").text(r.db.getDiagramTitle()).attr("x",0).attr("y",-200).attr("class","pieTitleText");var g=s.selectAll(".legend").data(u.domain()).enter().append("g").attr("class","legend").attr("transform",(function(t,e){return"translate(216,"+(22*e-22*u.domain().length/2)+")"}));g.append("rect").attr("width",i).attr("height",i).style("fill",u).style("stroke",u),g.data(p).append("text").attr("x",22).attr("y",14).text((function(t){return r.db.getShowData()||kl.showData||kl.pie.showData?t.data.name+" ["+t.data.value+"]":t.data.name}))}catch(y){Nt.error("Error while rendering info diagram"),Nt.error(y)}}};var Cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[1,6],a=[1,7],s=[1,8],o=[5,6,8,14,16,18,19,40,41,42,43,44,45,53,71,72],c=[1,22],l=[2,13],h=[1,26],u=[1,27],d=[1,28],p=[1,29],f=[1,30],g=[1,31],y=[1,24],m=[1,32],b=[1,33],_=[1,36],x=[71,72],v=[5,8,14,16,18,19,40,41,42,43,44,45,53,60,62,71,72],k=[1,56],w=[1,57],E=[1,58],C=[1,59],T=[1,60],S=[1,61],A=[1,62],L=[62,63],B=[1,74],N=[1,70],D=[1,71],O=[1,72],M=[1,73],I=[1,75],F=[1,79],$=[1,80],R=[1,77],Z=[1,78],P=[5,8,14,16,18,19,40,41,42,43,44,45,53,71,72],j={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,NEWLINE:5,RD:6,diagram:7,EOF:8,openDirective:9,typeDirective:10,closeDirective:11,":":12,argDirective:13,acc_title:14,acc_title_value:15,acc_descr:16,acc_descr_value:17,acc_descr_multiline_value:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,requirementDef:23,elementDef:24,relationshipDef:25,requirementType:26,requirementName:27,STRUCT_START:28,requirementBody:29,ID:30,COLONSEP:31,id:32,TEXT:33,text:34,RISK:35,riskLevel:36,VERIFYMTHD:37,verifyType:38,STRUCT_STOP:39,REQUIREMENT:40,FUNCTIONAL_REQUIREMENT:41,INTERFACE_REQUIREMENT:42,PERFORMANCE_REQUIREMENT:43,PHYSICAL_REQUIREMENT:44,DESIGN_CONSTRAINT:45,LOW_RISK:46,MED_RISK:47,HIGH_RISK:48,VERIFY_ANALYSIS:49,VERIFY_DEMONSTRATION:50,VERIFY_INSPECTION:51,VERIFY_TEST:52,ELEMENT:53,elementName:54,elementBody:55,TYPE:56,type:57,DOCREF:58,ref:59,END_ARROW_L:60,relationship:61,LINE:62,END_ARROW_R:63,CONTAINS:64,COPIES:65,DERIVES:66,SATISFIES:67,VERIFIES:68,REFINES:69,TRACES:70,unqString:71,qString:72,$accept:0,$end:1},terminals_:{2:"error",5:"NEWLINE",6:"RD",8:"EOF",12:":",14:"acc_title",15:"acc_title_value",16:"acc_descr",17:"acc_descr_value",18:"acc_descr_multiline_value",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",28:"STRUCT_START",30:"ID",31:"COLONSEP",33:"TEXT",35:"RISK",37:"VERIFYMTHD",39:"STRUCT_STOP",40:"REQUIREMENT",41:"FUNCTIONAL_REQUIREMENT",42:"INTERFACE_REQUIREMENT",43:"PERFORMANCE_REQUIREMENT",44:"PHYSICAL_REQUIREMENT",45:"DESIGN_CONSTRAINT",46:"LOW_RISK",47:"MED_RISK",48:"HIGH_RISK",49:"VERIFY_ANALYSIS",50:"VERIFY_DEMONSTRATION",51:"VERIFY_INSPECTION",52:"VERIFY_TEST",53:"ELEMENT",56:"TYPE",58:"DOCREF",60:"END_ARROW_L",62:"LINE",63:"END_ARROW_R",64:"CONTAINS",65:"COPIES",66:"DERIVES",67:"SATISFIES",68:"VERIFIES",69:"REFINES",70:"TRACES",71:"unqString",72:"qString"},productions_:[0,[3,3],[3,2],[3,4],[4,3],[4,5],[4,2],[4,2],[4,1],[9,1],[10,1],[13,1],[11,1],[7,0],[7,2],[7,2],[7,2],[7,2],[7,2],[23,5],[29,5],[29,5],[29,5],[29,5],[29,2],[29,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[36,1],[36,1],[36,1],[38,1],[38,1],[38,1],[38,1],[24,5],[55,5],[55,5],[55,2],[55,1],[25,5],[25,5],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[27,1],[27,1],[32,1],[32,1],[34,1],[34,1],[54,1],[54,1],[57,1],[57,1],[59,1],[59,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 6:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 7:case 8:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 9:r.parseDirective("%%{","open_directive");break;case 10:r.parseDirective(a[o],"type_directive");break;case 11:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 12:r.parseDirective("}%%","close_directive","pie");break;case 13:this.$=[];break;case 19:r.addRequirement(a[o-3],a[o-4]);break;case 20:r.setNewReqId(a[o-2]);break;case 21:r.setNewReqText(a[o-2]);break;case 22:r.setNewReqRisk(a[o-2]);break;case 23:r.setNewReqVerifyMethod(a[o-2]);break;case 26:this.$=r.RequirementType.REQUIREMENT;break;case 27:this.$=r.RequirementType.FUNCTIONAL_REQUIREMENT;break;case 28:this.$=r.RequirementType.INTERFACE_REQUIREMENT;break;case 29:this.$=r.RequirementType.PERFORMANCE_REQUIREMENT;break;case 30:this.$=r.RequirementType.PHYSICAL_REQUIREMENT;break;case 31:this.$=r.RequirementType.DESIGN_CONSTRAINT;break;case 32:this.$=r.RiskLevel.LOW_RISK;break;case 33:this.$=r.RiskLevel.MED_RISK;break;case 34:this.$=r.RiskLevel.HIGH_RISK;break;case 35:this.$=r.VerifyType.VERIFY_ANALYSIS;break;case 36:this.$=r.VerifyType.VERIFY_DEMONSTRATION;break;case 37:this.$=r.VerifyType.VERIFY_INSPECTION;break;case 38:this.$=r.VerifyType.VERIFY_TEST;break;case 39:r.addElement(a[o-3]);break;case 40:r.setNewElementType(a[o-2]);break;case 41:r.setNewElementDocRef(a[o-2]);break;case 44:r.addRelationship(a[o-2],a[o],a[o-4]);break;case 45:r.addRelationship(a[o-2],a[o-4],a[o]);break;case 46:this.$=r.Relationships.CONTAINS;break;case 47:this.$=r.Relationships.COPIES;break;case 48:this.$=r.Relationships.DERIVES;break;case 49:this.$=r.Relationships.SATISFIES;break;case 50:this.$=r.Relationships.VERIFIES;break;case 51:this.$=r.Relationships.REFINES;break;case 52:this.$=r.Relationships.TRACES}},table:[{3:1,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[3]},{3:10,4:2,5:[1,9],6:n,9:4,14:r,16:i,18:a,19:s},{5:[1,11]},{10:12,20:[1,13]},{15:[1,14]},{17:[1,15]},e(o,[2,8]),{20:[2,9]},{3:16,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[2,2]},{4:21,5:c,7:17,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{11:34,12:[1,35],22:_},e([12,22],[2,10]),e(o,[2,6]),e(o,[2,7]),{1:[2,1]},{8:[1,37]},{4:21,5:c,7:38,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:39,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:40,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:41,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:42,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{27:43,71:[1,44],72:[1,45]},{54:46,71:[1,47],72:[1,48]},{60:[1,49],62:[1,50]},e(x,[2,26]),e(x,[2,27]),e(x,[2,28]),e(x,[2,29]),e(x,[2,30]),e(x,[2,31]),e(v,[2,55]),e(v,[2,56]),e(o,[2,4]),{13:51,21:[1,52]},e(o,[2,12]),{1:[2,3]},{8:[2,14]},{8:[2,15]},{8:[2,16]},{8:[2,17]},{8:[2,18]},{28:[1,53]},{28:[2,53]},{28:[2,54]},{28:[1,54]},{28:[2,59]},{28:[2,60]},{61:55,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{61:63,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{11:64,22:_},{22:[2,11]},{5:[1,65]},{5:[1,66]},{62:[1,67]},e(L,[2,46]),e(L,[2,47]),e(L,[2,48]),e(L,[2,49]),e(L,[2,50]),e(L,[2,51]),e(L,[2,52]),{63:[1,68]},e(o,[2,5]),{5:B,29:69,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:76,56:R,58:Z},{32:81,71:m,72:b},{32:82,71:m,72:b},e(P,[2,19]),{31:[1,83]},{31:[1,84]},{31:[1,85]},{31:[1,86]},{5:B,29:87,30:N,33:D,35:O,37:M,39:I},e(P,[2,25]),e(P,[2,39]),{31:[1,88]},{31:[1,89]},{5:F,39:$,55:90,56:R,58:Z},e(P,[2,43]),e(P,[2,44]),e(P,[2,45]),{32:91,71:m,72:b},{34:92,71:[1,93],72:[1,94]},{36:95,46:[1,96],47:[1,97],48:[1,98]},{38:99,49:[1,100],50:[1,101],51:[1,102],52:[1,103]},e(P,[2,24]),{57:104,71:[1,105],72:[1,106]},{59:107,71:[1,108],72:[1,109]},e(P,[2,42]),{5:[1,110]},{5:[1,111]},{5:[2,57]},{5:[2,58]},{5:[1,112]},{5:[2,32]},{5:[2,33]},{5:[2,34]},{5:[1,113]},{5:[2,35]},{5:[2,36]},{5:[2,37]},{5:[2,38]},{5:[1,114]},{5:[2,61]},{5:[2,62]},{5:[1,115]},{5:[2,63]},{5:[2,64]},{5:B,29:116,30:N,33:D,35:O,37:M,39:I},{5:B,29:117,30:N,33:D,35:O,37:M,39:I},{5:B,29:118,30:N,33:D,35:O,37:M,39:I},{5:B,29:119,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:120,56:R,58:Z},{5:F,39:$,55:121,56:R,58:Z},e(P,[2,20]),e(P,[2,21]),e(P,[2,22]),e(P,[2,23]),e(P,[2,40]),e(P,[2,41])],defaultActions:{8:[2,9],10:[2,2],16:[2,1],37:[2,3],38:[2,14],39:[2,15],40:[2,16],41:[2,17],42:[2,18],44:[2,53],45:[2,54],47:[2,59],48:[2,60],52:[2,11],93:[2,57],94:[2,58],96:[2,32],97:[2,33],98:[2,34],100:[2,35],101:[2,36],102:[2,37],103:[2,38],105:[2,61],106:[2,62],108:[2,63],109:[2,64]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},Y=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return this.begin("type_directive"),20;case 2:return this.popState(),this.begin("arg_directive"),12;case 3:return this.popState(),this.popState(),22;case 4:return 21;case 5:return"title";case 6:return this.begin("acc_title"),14;case 7:return this.popState(),"acc_title_value";case 8:return this.begin("acc_descr"),16;case 9:return this.popState(),"acc_descr_value";case 10:this.begin("acc_descr_multiline");break;case 11:case 53:this.popState();break;case 12:return"acc_descr_multiline_value";case 13:return 5;case 14:case 15:case 16:break;case 17:return 8;case 18:return 6;case 19:return 28;case 20:return 39;case 21:return 31;case 22:return 30;case 23:return 33;case 24:return 35;case 25:return 37;case 26:return 40;case 27:return 41;case 28:return 42;case 29:return 43;case 30:return 44;case 31:return 45;case 32:return 46;case 33:return 47;case 34:return 48;case 35:return 49;case 36:return 50;case 37:return 51;case 38:return 52;case 39:return 53;case 40:return 64;case 41:return 65;case 42:return 66;case 43:return 67;case 44:return 68;case 45:return 69;case 46:return 70;case 47:return 56;case 48:return 58;case 49:return 60;case 50:return 63;case 51:return 62;case 52:this.begin("string");break;case 54:return"qString";case 55:return e.yytext=e.yytext.trim(),71}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:$)/i,/^(?:requirementDiagram\b)/i,/^(?:\{)/i,/^(?:\})/i,/^(?::)/i,/^(?:id\b)/i,/^(?:text\b)/i,/^(?:risk\b)/i,/^(?:verifyMethod\b)/i,/^(?:requirement\b)/i,/^(?:functionalRequirement\b)/i,/^(?:interfaceRequirement\b)/i,/^(?:performanceRequirement\b)/i,/^(?:physicalRequirement\b)/i,/^(?:designConstraint\b)/i,/^(?:low\b)/i,/^(?:medium\b)/i,/^(?:high\b)/i,/^(?:analysis\b)/i,/^(?:demonstration\b)/i,/^(?:inspection\b)/i,/^(?:test\b)/i,/^(?:element\b)/i,/^(?:contains\b)/i,/^(?:copies\b)/i,/^(?:derives\b)/i,/^(?:satisfies\b)/i,/^(?:verifies\b)/i,/^(?:refines\b)/i,/^(?:traces\b)/i,/^(?:type\b)/i,/^(?:docref\b)/i,/^(?:<-)/i,/^(?:->)/i,/^(?:-)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[\w][^\r\n\{\<\>\-\=]*)/i],conditions:{acc_descr_multiline:{rules:[11,12],inclusive:!1},acc_descr:{rules:[9],inclusive:!1},acc_title:{rules:[7],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},unqString:{rules:[],inclusive:!1},token:{rules:[],inclusive:!1},string:{rules:[53,54],inclusive:!1},INITIAL:{rules:[0,5,6,8,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,55],inclusive:!0}}},t);function z(){this.yy={}}return j.lexer=Y,z.prototype=j,j.Parser=z,new z}();Cl.parser=Cl;const Tl=Cl,Sl=t=>null!==t.match(/^\s*requirement(Diagram)?/);let Al=[],Ll={},Bl={},Nl={},Dl={};const Ol={RequirementType:{REQUIREMENT:"Requirement",FUNCTIONAL_REQUIREMENT:"Functional Requirement",INTERFACE_REQUIREMENT:"Interface Requirement",PERFORMANCE_REQUIREMENT:"Performance Requirement",PHYSICAL_REQUIREMENT:"Physical Requirement",DESIGN_CONSTRAINT:"Design Constraint"},RiskLevel:{LOW_RISK:"Low",MED_RISK:"Medium",HIGH_RISK:"High"},VerifyType:{VERIFY_ANALYSIS:"Analysis",VERIFY_DEMONSTRATION:"Demonstration",VERIFY_INSPECTION:"Inspection",VERIFY_TEST:"Test"},Relationships:{CONTAINS:"contains",COPIES:"copies",DERIVES:"derives",SATISFIES:"satisfies",VERIFIES:"verifies",REFINES:"refines",TRACES:"traces"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().req,addRequirement:(t,e)=>(void 0===Bl[t]&&(Bl[t]={name:t,type:e,id:Ll.id,text:Ll.text,risk:Ll.risk,verifyMethod:Ll.verifyMethod}),Ll={},Bl[t]),getRequirements:()=>Bl,setNewReqId:t=>{void 0!==Ll&&(Ll.id=t)},setNewReqText:t=>{void 0!==Ll&&(Ll.text=t)},setNewReqRisk:t=>{void 0!==Ll&&(Ll.risk=t)},setNewReqVerifyMethod:t=>{void 0!==Ll&&(Ll.verifyMethod=t)},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addElement:t=>(void 0===Dl[t]&&(Dl[t]={name:t,type:Nl.type,docRef:Nl.docRef},Nt.info("Added new requirement: ",t)),Nl={},Dl[t]),getElements:()=>Dl,setNewElementType:t=>{void 0!==Nl&&(Nl.type=t)},setNewElementDocRef:t=>{void 0!==Nl&&(Nl.docRef=t)},addRelationship:(t,e,n)=>{Al.push({type:t,src:e,dst:n})},getRelationships:()=>Al,clear:()=>{Al=[],Ll={},Bl={},Nl={},Dl={},Dr()}},Ml={CONTAINS:"contains",ARROW:"arrow"},Il=Ml,Fl=(t,e)=>{let n=t.append("defs").append("marker").attr("id",Ml.CONTAINS+"_line_ending").attr("refX",0).attr("refY",e.line_height/2).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("g");n.append("circle").attr("cx",e.line_height/2).attr("cy",e.line_height/2).attr("r",e.line_height/2).attr("fill","none"),n.append("line").attr("x1",0).attr("x2",e.line_height).attr("y1",e.line_height/2).attr("y2",e.line_height/2).attr("stroke-width",1),n.append("line").attr("y1",0).attr("y2",e.line_height).attr("x1",e.line_height/2).attr("x2",e.line_height/2).attr("stroke-width",1),t.append("defs").append("marker").attr("id",Ml.ARROW+"_line_ending").attr("refX",e.line_height).attr("refY",.5*e.line_height).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("path").attr("d",`M0,0\n      L${e.line_height},${e.line_height/2}\n      M${e.line_height},${e.line_height/2}\n      L0,${e.line_height}`).attr("stroke-width",1)};let $l={},Rl=0;const Zl=(t,e)=>t.insert("rect","#"+e).attr("class","req reqBox").attr("x",0).attr("y",0).attr("width",$l.rect_min_width+"px").attr("height",$l.rect_min_height+"px"),Pl=(t,e,n)=>{let r=$l.rect_min_width/2,i=t.append("text").attr("class","req reqLabel reqTitle").attr("id",e).attr("x",r).attr("y",$l.rect_padding).attr("dominant-baseline","hanging"),a=0;n.forEach((t=>{0==a?i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",0).text(t):i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",.75*$l.line_height).text(t),a++}));let s=1.5*$l.rect_padding+a*$l.line_height*.75;return t.append("line").attr("class","req-title-line").attr("x1","0").attr("x2",$l.rect_min_width).attr("y1",s).attr("y2",s),{titleNode:i,y:s}},jl=(t,e,n,r)=>{let i=t.append("text").attr("class","req reqLabel").attr("id",e).attr("x",$l.rect_padding).attr("y",r).attr("dominant-baseline","hanging"),a=0;let s=[];return n.forEach((t=>{let e=t.length;for(;e>30&&a<3;){let n=t.substring(0,30);e=(t=t.substring(30,t.length)).length,s[s.length]=n,a++}if(3==a){let t=s[s.length-1];s[s.length-1]=t.substring(0,t.length-4)+"..."}else s[s.length]=t;a=0})),s.forEach((t=>{i.append("tspan").attr("x",$l.rect_padding).attr("dy",$l.line_height).text(t)})),i},Yl=function(t,e,n,r,i){const a=n.edge(zl(e.src),zl(e.dst)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})),c=t.insert("path","#"+r).attr("class","er relationshipLine").attr("d",s(a.points)).attr("fill","none");e.type==i.db.Relationships.CONTAINS?c.attr("marker-start","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+e.type+"_line_ending)"):(c.attr("stroke-dasharray","10,7"),c.attr("marker-end","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+Il.ARROW+"_line_ending)")),((t,e,n,r)=>{const i=e.node().getTotalLength(),a=e.node().getPointAtLength(.5*i),s="rel"+Rl;Rl++;const o=t.append("text").attr("class","req relationshipLabel").attr("id",s).attr("x",a.x).attr("y",a.y).attr("text-anchor","middle").attr("dominant-baseline","middle").text(r).node().getBBox();t.insert("rect","#"+s).attr("class","req reqLabelBox").attr("x",a.x-o.width/2).attr("y",a.y-o.height/2).attr("width",o.width).attr("height",o.height).attr("fill","white").attr("fill-opacity","85%")})(t,c,0,`<<${e.type}>>`)},zl=t=>t.replace(/\s/g,"").replace(/\./g,"_"),Ul={draw:(t,e,n,r)=>{$l=ar().requirement,r.db.clear(),r.parser.parse(t);const i=$l.securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);Fl(s,$l);const c=new ht.k({multigraph:!1,compound:!1,directed:!0}).setGraph({rankdir:$l.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));let l=r.db.getRequirements(),h=r.db.getElements(),u=r.db.getRelationships();var d,p,f;d=l,p=c,f=s,Object.keys(d).forEach((t=>{let e=d[t];t=zl(t),Nt.info("Added new requirement: ",t);const n=f.append("g").attr("id",t),r=Zl(n,"req-"+t);let i=Pl(n,t+"_title",[`<<${e.type}>>`,`${e.name}`]);jl(n,t+"_body",[`Id: ${e.id}`,`Text: ${e.text}`,`Risk: ${e.risk}`,`Verification: ${e.verifyMethod}`],i.y);const a=r.node().getBBox();p.setNode(t,{width:a.width,height:a.height,shape:"rect",id:t})})),((t,e,n)=>{Object.keys(t).forEach((r=>{let i=t[r];const a=zl(r),s=n.append("g").attr("id",a),o="element-"+a,c=Zl(s,o);let l=Pl(s,o+"_title",["<<Element>>",`${r}`]);jl(s,o+"_body",[`Type: ${i.type||"Not Specified"}`,`Doc Ref: ${i.docRef||"None"}`],l.y);const h=c.node().getBBox();e.setNode(a,{width:h.width,height:h.height,shape:"rect",id:a})}))})(h,c,s),((t,e)=>{t.forEach((function(t){let n=zl(t.src),r=zl(t.dst);e.setEdge(n,r,{relationship:t})}))})(u,c),(0,lt.bK)(c),function(t,e){e.nodes().forEach((function(n){void 0!==n&&void 0!==e.node(n)&&(t.select("#"+n),t.select("#"+n).attr("transform","translate("+(e.node(n).x-e.node(n).width/2)+","+(e.node(n).y-e.node(n).height/2)+" )"))}))}(s,c),u.forEach((function(t){Yl(s,t,c,e,r)}));const g=$l.rect_padding,y=s.node().getBBox(),m=y.width+2*g,b=y.height+2*g;dr(s,b,m,$l.useMaxWidth),s.attr("viewBox",`${y.x-g} ${y.y-g} ${m} ${b}`)}};var Wl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,19],h=[1,21],u=[1,22],d=[1,23],p=[1,29],f=[1,30],g=[1,31],y=[1,32],m=[1,33],b=[1,34],_=[1,35],x=[1,36],v=[1,37],k=[1,38],w=[1,39],E=[1,40],C=[1,42],T=[1,43],S=[1,45],A=[1,46],L=[1,47],B=[1,48],N=[1,49],D=[1,50],O=[1,53],M=[1,4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],I=[4,5,21,54,56],F=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],$=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,53,54,56,57,62,63,64,65,73,83],R=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,52,54,56,57,62,63,64,65,73,83],Z=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,54,56,57,62,63,64,65,73,83],P=[71,72,73],j=[1,125],Y=[1,4,5,7,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],z={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NEWLINE:5,directive:6,SD:7,document:8,line:9,statement:10,box_section:11,box_line:12,participant_statement:13,openDirective:14,typeDirective:15,closeDirective:16,":":17,argDirective:18,box:19,restOfLine:20,end:21,signal:22,autonumber:23,NUM:24,off:25,activate:26,actor:27,deactivate:28,note_statement:29,links_statement:30,link_statement:31,properties_statement:32,details_statement:33,title:34,legacy_title:35,acc_title:36,acc_title_value:37,acc_descr:38,acc_descr_value:39,acc_descr_multiline_value:40,loop:41,rect:42,opt:43,alt:44,else_sections:45,par:46,par_sections:47,critical:48,option_sections:49,break:50,option:51,and:52,else:53,participant:54,AS:55,participant_actor:56,note:57,placement:58,text2:59,over:60,actor_pair:61,links:62,link:63,properties:64,details:65,spaceList:66,",":67,left_of:68,right_of:69,signaltype:70,"+":71,"-":72,ACTOR:73,SOLID_OPEN_ARROW:74,DOTTED_OPEN_ARROW:75,SOLID_ARROW:76,DOTTED_ARROW:77,SOLID_CROSS:78,DOTTED_CROSS:79,SOLID_POINT:80,DOTTED_POINT:81,TXT:82,open_directive:83,type_directive:84,arg_directive:85,close_directive:86,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NEWLINE",7:"SD",17:":",19:"box",20:"restOfLine",21:"end",23:"autonumber",24:"NUM",25:"off",26:"activate",28:"deactivate",34:"title",35:"legacy_title",36:"acc_title",37:"acc_title_value",38:"acc_descr",39:"acc_descr_value",40:"acc_descr_multiline_value",41:"loop",42:"rect",43:"opt",44:"alt",46:"par",48:"critical",50:"break",51:"option",52:"and",53:"else",54:"participant",55:"AS",56:"participant_actor",57:"note",60:"over",62:"links",63:"link",64:"properties",65:"details",67:",",68:"left_of",69:"right_of",71:"+",72:"-",73:"ACTOR",74:"SOLID_OPEN_ARROW",75:"DOTTED_OPEN_ARROW",76:"SOLID_ARROW",77:"DOTTED_ARROW",78:"SOLID_CROSS",79:"DOTTED_CROSS",80:"SOLID_POINT",81:"DOTTED_POINT",82:"TXT",83:"open_directive",84:"type_directive",85:"arg_directive",86:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[11,0],[11,2],[12,2],[12,1],[12,1],[6,4],[6,6],[10,1],[10,4],[10,2],[10,4],[10,3],[10,3],[10,2],[10,3],[10,3],[10,2],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,2],[10,2],[10,1],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,1],[49,1],[49,4],[47,1],[47,4],[45,1],[45,4],[13,5],[13,3],[13,5],[13,3],[29,4],[29,4],[30,3],[31,3],[32,3],[33,3],[66,2],[66,1],[61,3],[61,1],[58,1],[58,1],[22,5],[22,5],[22,4],[27,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[59,1],[14,1],[15,1],[18,1],[16,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.apply(a[o]),a[o];case 5:case 10:case 9:case 14:this.$=[];break;case 6:case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 7:case 8:case 12:case 13:case 63:this.$=a[o];break;case 18:a[o-1].unshift({type:"boxStart",boxData:r.parseBoxData(a[o-2])}),a[o-1].push({type:"boxEnd",boxText:a[o-2]}),this.$=a[o-1];break;case 20:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-2]),sequenceIndexStep:Number(a[o-1]),sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 21:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-1]),sequenceIndexStep:1,sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 22:this.$={type:"sequenceIndex",sequenceVisible:!1,signalType:r.LINETYPE.AUTONUMBER};break;case 23:this.$={type:"sequenceIndex",sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 24:this.$={type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]};break;case 25:this.$={type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-1]};break;case 31:r.setDiagramTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 32:r.setDiagramTitle(a[o].substring(7)),this.$=a[o].substring(7);break;case 33:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 34:case 35:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 36:a[o-1].unshift({type:"loopStart",loopText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.LOOP_START}),a[o-1].push({type:"loopEnd",loopText:a[o-2],signalType:r.LINETYPE.LOOP_END}),this.$=a[o-1];break;case 37:a[o-1].unshift({type:"rectStart",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_START}),a[o-1].push({type:"rectEnd",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_END}),this.$=a[o-1];break;case 38:a[o-1].unshift({type:"optStart",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_START}),a[o-1].push({type:"optEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_END}),this.$=a[o-1];break;case 39:a[o-1].unshift({type:"altStart",altText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.ALT_START}),a[o-1].push({type:"altEnd",signalType:r.LINETYPE.ALT_END}),this.$=a[o-1];break;case 40:a[o-1].unshift({type:"parStart",parText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.PAR_START}),a[o-1].push({type:"parEnd",signalType:r.LINETYPE.PAR_END}),this.$=a[o-1];break;case 41:a[o-1].unshift({type:"criticalStart",criticalText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.CRITICAL_START}),a[o-1].push({type:"criticalEnd",signalType:r.LINETYPE.CRITICAL_END}),this.$=a[o-1];break;case 42:a[o-1].unshift({type:"breakStart",breakText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_START}),a[o-1].push({type:"breakEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_END}),this.$=a[o-1];break;case 45:this.$=a[o-3].concat([{type:"option",optionText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.CRITICAL_OPTION},a[o]]);break;case 47:this.$=a[o-3].concat([{type:"and",parText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.PAR_AND},a[o]]);break;case 49:this.$=a[o-3].concat([{type:"else",altText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.ALT_ELSE},a[o]]);break;case 50:a[o-3].type="addParticipant",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 51:a[o-1].type="addParticipant",this.$=a[o-1];break;case 52:a[o-3].type="addActor",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 53:a[o-1].type="addActor",this.$=a[o-1];break;case 54:this.$=[a[o-1],{type:"addNote",placement:a[o-2],actor:a[o-1].actor,text:a[o]}];break;case 55:a[o-2]=[].concat(a[o-1],a[o-1]).slice(0,2),a[o-2][0]=a[o-2][0].actor,a[o-2][1]=a[o-2][1].actor,this.$=[a[o-1],{type:"addNote",placement:r.PLACEMENT.OVER,actor:a[o-2].slice(0,2),text:a[o]}];break;case 56:this.$=[a[o-1],{type:"addLinks",actor:a[o-1].actor,text:a[o]}];break;case 57:this.$=[a[o-1],{type:"addALink",actor:a[o-1].actor,text:a[o]}];break;case 58:this.$=[a[o-1],{type:"addProperties",actor:a[o-1].actor,text:a[o]}];break;case 59:this.$=[a[o-1],{type:"addDetails",actor:a[o-1].actor,text:a[o]}];break;case 62:this.$=[a[o-2],a[o]];break;case 64:this.$=r.PLACEMENT.LEFTOF;break;case 65:this.$=r.PLACEMENT.RIGHTOF;break;case 66:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]}];break;case 67:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-4]}];break;case 68:this.$=[a[o-3],a[o-1],{type:"addMessage",from:a[o-3].actor,to:a[o-1].actor,signalType:a[o-2],msg:a[o]}];break;case 69:this.$={type:"addParticipant",actor:a[o]};break;case 70:this.$=r.LINETYPE.SOLID_OPEN;break;case 71:this.$=r.LINETYPE.DOTTED_OPEN;break;case 72:this.$=r.LINETYPE.SOLID;break;case 73:this.$=r.LINETYPE.DOTTED;break;case 74:this.$=r.LINETYPE.SOLID_CROSS;break;case 75:this.$=r.LINETYPE.DOTTED_CROSS;break;case 76:this.$=r.LINETYPE.SOLID_POINT;break;case 77:this.$=r.LINETYPE.DOTTED_POINT;break;case 78:this.$=r.parseMessage(a[o].trim().substring(1));break;case 79:r.parseDirective("%%{","open_directive");break;case 80:r.parseDirective(a[o],"type_directive");break;case 81:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 82:r.parseDirective("}%%","close_directive","sequence")}},table:[{3:1,4:n,5:r,6:4,7:i,14:6,83:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,14:6,83:a},{3:9,4:n,5:r,6:4,7:i,14:6,83:a},{3:10,4:n,5:r,6:4,7:i,14:6,83:a},e([1,4,5,19,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],s,{8:11}),{15:12,84:[1,13]},{84:[2,79]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{16:51,17:[1,52],86:O},e([17,86],[2,80]),e(M,[2,6]),{6:41,10:54,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},e(M,[2,8]),e(M,[2,9]),e(M,[2,17]),{20:[1,55]},{5:[1,56]},{5:[1,59],24:[1,57],25:[1,58]},{27:60,73:D},{27:61,73:D},{5:[1,62]},{5:[1,63]},{5:[1,64]},{5:[1,65]},{5:[1,66]},e(M,[2,31]),e(M,[2,32]),{37:[1,67]},{39:[1,68]},e(M,[2,35]),{20:[1,69]},{20:[1,70]},{20:[1,71]},{20:[1,72]},{20:[1,73]},{20:[1,74]},{20:[1,75]},e(M,[2,43]),{27:76,73:D},{27:77,73:D},{70:78,74:[1,79],75:[1,80],76:[1,81],77:[1,82],78:[1,83],79:[1,84],80:[1,85],81:[1,86]},{58:87,60:[1,88],68:[1,89],69:[1,90]},{27:91,73:D},{27:92,73:D},{27:93,73:D},{27:94,73:D},e([5,55,67,74,75,76,77,78,79,80,81,82],[2,69]),{5:[1,95]},{18:96,85:[1,97]},{5:[2,82]},e(M,[2,7]),e(I,[2,10],{11:98}),e(M,[2,19]),{5:[1,100],24:[1,99]},{5:[1,101]},e(M,[2,23]),{5:[1,102]},{5:[1,103]},e(M,[2,26]),e(M,[2,27]),e(M,[2,28]),e(M,[2,29]),e(M,[2,30]),e(M,[2,33]),e(M,[2,34]),e(F,s,{8:104}),e(F,s,{8:105}),e(F,s,{8:106}),e($,s,{45:107,8:108}),e(R,s,{47:109,8:110}),e(Z,s,{49:111,8:112}),e(F,s,{8:113}),{5:[1,115],55:[1,114]},{5:[1,117],55:[1,116]},{27:120,71:[1,118],72:[1,119],73:D},e(P,[2,70]),e(P,[2,71]),e(P,[2,72]),e(P,[2,73]),e(P,[2,74]),e(P,[2,75]),e(P,[2,76]),e(P,[2,77]),{27:121,73:D},{27:123,61:122,73:D},{73:[2,64]},{73:[2,65]},{59:124,82:j},{59:126,82:j},{59:127,82:j},{59:128,82:j},e(Y,[2,15]),{16:129,86:O},{86:[2,81]},{4:[1,132],5:[1,134],12:131,13:133,21:[1,130],54:C,56:T},{5:[1,135]},e(M,[2,21]),e(M,[2,22]),e(M,[2,24]),e(M,[2,25]),{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,136],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,137],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,138],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,139]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,48],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,53:[1,140],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,141]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,46],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,52:[1,142],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,143]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,44],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,51:[1,144],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,145],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{20:[1,146]},e(M,[2,51]),{20:[1,147]},e(M,[2,53]),{27:148,73:D},{27:149,73:D},{59:150,82:j},{59:151,82:j},{59:152,82:j},{67:[1,153],82:[2,63]},{5:[2,56]},{5:[2,78]},{5:[2,57]},{5:[2,58]},{5:[2,59]},{5:[1,154]},e(M,[2,18]),e(I,[2,11]),{13:155,54:C,56:T},e(I,[2,13]),e(I,[2,14]),e(M,[2,20]),e(M,[2,36]),e(M,[2,37]),e(M,[2,38]),e(M,[2,39]),{20:[1,156]},e(M,[2,40]),{20:[1,157]},e(M,[2,41]),{20:[1,158]},e(M,[2,42]),{5:[1,159]},{5:[1,160]},{59:161,82:j},{59:162,82:j},{5:[2,68]},{5:[2,54]},{5:[2,55]},{27:163,73:D},e(Y,[2,16]),e(I,[2,12]),e($,s,{8:108,45:164}),e(R,s,{8:110,47:165}),e(Z,s,{8:112,49:166}),e(M,[2,50]),e(M,[2,52]),{5:[2,66]},{5:[2,67]},{82:[2,62]},{21:[2,49]},{21:[2,47]},{21:[2,45]}],defaultActions:{7:[2,79],8:[2,1],9:[2,2],10:[2,3],53:[2,82],89:[2,64],90:[2,65],97:[2,81],124:[2,56],125:[2,78],126:[2,57],127:[2,58],128:[2,59],150:[2,68],151:[2,54],152:[2,55],161:[2,66],162:[2,67],163:[2,62],164:[2,49],165:[2,47],166:[2,45]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},U=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),83;case 1:return this.begin("type_directive"),84;case 2:return this.popState(),this.begin("arg_directive"),17;case 3:return this.popState(),this.popState(),86;case 4:return 85;case 5:case 53:case 66:return 5;case 6:case 7:case 8:case 9:case 10:break;case 11:return 24;case 12:return this.begin("LINE"),19;case 13:return this.begin("ID"),54;case 14:return this.begin("ID"),56;case 15:return e.yytext=e.yytext.trim(),this.begin("ALIAS"),73;case 16:return this.popState(),this.popState(),this.begin("LINE"),55;case 17:return this.popState(),this.popState(),5;case 18:return this.begin("LINE"),41;case 19:return this.begin("LINE"),42;case 20:return this.begin("LINE"),43;case 21:return this.begin("LINE"),44;case 22:return this.begin("LINE"),53;case 23:return this.begin("LINE"),46;case 24:return this.begin("LINE"),52;case 25:return this.begin("LINE"),48;case 26:return this.begin("LINE"),51;case 27:return this.begin("LINE"),50;case 28:return this.popState(),20;case 29:return 21;case 30:return 68;case 31:return 69;case 32:return 62;case 33:return 63;case 34:return 64;case 35:return 65;case 36:return 60;case 37:return 57;case 38:return this.begin("ID"),26;case 39:return this.begin("ID"),28;case 40:return 34;case 41:return 35;case 42:return this.begin("acc_title"),36;case 43:return this.popState(),"acc_title_value";case 44:return this.begin("acc_descr"),38;case 45:return this.popState(),"acc_descr_value";case 46:this.begin("acc_descr_multiline");break;case 47:this.popState();break;case 48:return"acc_descr_multiline_value";case 49:return 7;case 50:return 23;case 51:return 25;case 52:return 67;case 54:return e.yytext=e.yytext.trim(),73;case 55:return 76;case 56:return 77;case 57:return 74;case 58:return 75;case 59:return 78;case 60:return 79;case 61:return 80;case 62:return 81;case 63:return 82;case 64:return 71;case 65:return 72;case 67:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[0-9]+(?=[ \n]+))/i,/^(?:box\b)/i,/^(?:participant\b)/i,/^(?:actor\b)/i,/^(?:[^\->:\n,;]+?([\-]*[^\->:\n,;]+?)*?(?=((?!\n)\s)+as(?!\n)\s|[#\n;]|$))/i,/^(?:as\b)/i,/^(?:(?:))/i,/^(?:loop\b)/i,/^(?:rect\b)/i,/^(?:opt\b)/i,/^(?:alt\b)/i,/^(?:else\b)/i,/^(?:par\b)/i,/^(?:and\b)/i,/^(?:critical\b)/i,/^(?:option\b)/i,/^(?:break\b)/i,/^(?:(?:[:]?(?:no)?wrap)?[^#\n;]*)/i,/^(?:end\b)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:links\b)/i,/^(?:link\b)/i,/^(?:properties\b)/i,/^(?:details\b)/i,/^(?:over\b)/i,/^(?:note\b)/i,/^(?:activate\b)/i,/^(?:deactivate\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:title:\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:sequenceDiagram\b)/i,/^(?:autonumber\b)/i,/^(?:off\b)/i,/^(?:,)/i,/^(?:;)/i,/^(?:[^\+\->:\n,;]+((?!(-x|--x|-\)|--\)))[\-]*[^\+\->:\n,;]+)*)/i,/^(?:->>)/i,/^(?:-->>)/i,/^(?:->)/i,/^(?:-->)/i,/^(?:-[x])/i,/^(?:--[x])/i,/^(?:-[\)])/i,/^(?:--[\)])/i,/^(?::(?:(?:no)?wrap)?[^#\n;]+)/i,/^(?:\+)/i,/^(?:-)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[47,48],inclusive:!1},acc_descr:{rules:[45],inclusive:!1},acc_title:{rules:[43],inclusive:!1},open_directive:{rules:[1,8],inclusive:!1},type_directive:{rules:[2,3,8],inclusive:!1},arg_directive:{rules:[3,4,8],inclusive:!1},ID:{rules:[7,8,15],inclusive:!1},ALIAS:{rules:[7,8,16,17],inclusive:!1},LINE:{rules:[7,8,28],inclusive:!1},INITIAL:{rules:[0,5,6,8,9,10,11,12,13,14,18,19,20,21,22,23,24,25,26,27,29,30,31,32,33,34,35,36,37,38,39,40,41,42,44,46,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],inclusive:!0}}},t);function W(){this.yy={}}return z.lexer=U,W.prototype=z,z.Parser=W,new W}();Wl.parser=Wl;const ql=Wl,Hl=t=>null!==t.match(/^\s*sequenceDiagram/);let Vl,Gl,Xl,Kl={},Ql=[],Jl=[],th=!1;const eh=function(t,e,n,r){let i=Xl;const a=Kl[t];if(a){if(Xl&&a.box&&Xl!==a.box)throw new Error("A same participant should only be defined in one Box: "+a.name+" can't be in '"+a.box.name+"' and in '"+Xl.name+"' at the same time.");if(i=a.box?a.box:Xl,a.box=i,a&&e===a.name&&null==n)return}null!=n&&null!=n.text||(n={text:e,wrap:null,type:r}),null!=r&&null!=n.text||(n={text:e,wrap:null,type:r}),Kl[t]={box:i,name:e,description:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,prevActor:Vl,links:{},properties:{},actorCnt:null,rectData:null,type:r||"participant"},Vl&&Kl[Vl]&&(Kl[Vl].nextActor=t),Xl&&Xl.actorKeys.push(t),Vl=t},nh=function(t,e,n={text:void 0,wrap:void 0},r){if(r===ah.ACTIVE_END){const e=(t=>{let e,n=0;for(e=0;e<Jl.length;e++)Jl[e].type===ah.ACTIVE_START&&Jl[e].from.actor===t&&n++,Jl[e].type===ah.ACTIVE_END&&Jl[e].from.actor===t&&n--;return n})(t.actor);if(e<1){let e=new Error("Trying to inactivate an inactive participant ("+t.actor+")");throw e.hash={text:"->>-",token:"->>-",line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["'ACTIVE_PARTICIPANT'"]},e}}return Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:r}),!0},rh=function(t){return Kl[t]},ih=()=>void 0!==Gl?Gl:ar().sequence.wrap,ah={SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25,AUTONUMBER:26,CRITICAL_START:27,CRITICAL_OPTION:28,CRITICAL_END:29,BREAK_START:30,BREAK_END:31},sh=function(t,e,n){n.text,void 0===n.wrap&&ih()||n.wrap;const r=[].concat(t,t);Jl.push({from:r[0],to:r[1],message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:ah.NOTE,placement:e})},oh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());t=t.replace(/&amp;/g,"&"),t=t.replace(/&equals;/g,"=");ch(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor link text",r)}};function ch(t,e){if(null==t.links)t.links=e;else for(let n in e)t.links[n]=e[n]}const lh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());hh(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor properties text",r)}};function hh(t,e){if(null==t.properties)t.properties=e;else for(let n in e)t.properties[n]=e[n]}const uh=function(t,e){const n=rh(t),r=document.getElementById(e.text);try{const t=r.innerHTML,e=JSON.parse(t);e.properties&&hh(n,e.properties),e.links&&ch(n,e.links)}catch(i){Nt.error("error while parsing actor details text",i)}},dh=function(t){if(Array.isArray(t))t.forEach((function(t){dh(t)}));else switch(t.type){case"sequenceIndex":Jl.push({from:void 0,to:void 0,message:{start:t.sequenceIndex,step:t.sequenceIndexStep,visible:t.sequenceVisible},wrap:!1,type:t.signalType});break;case"addParticipant":eh(t.actor,t.actor,t.description,"participant");break;case"addActor":eh(t.actor,t.actor,t.description,"actor");break;case"activeStart":case"activeEnd":nh(t.actor,void 0,void 0,t.signalType);break;case"addNote":sh(t.actor,t.placement,t.text);break;case"addLinks":oh(t.actor,t.text);break;case"addALink":!function(t,e){const n=rh(t);try{const t={};let s=Ft(e.text,ar());var r=s.indexOf("@");s=s.replace(/&amp;/g,"&"),s=s.replace(/&equals;/g,"=");var i=s.slice(0,r-1).trim(),a=s.slice(r+1).trim();t[i]=a,ch(n,t)}catch(s){Nt.error("error while parsing actor link text",s)}}(t.actor,t.text);break;case"addProperties":lh(t.actor,t.text);break;case"addDetails":uh(t.actor,t.text);break;case"addMessage":nh(t.from,t.to,t.msg,t.signalType);break;case"boxStart":e=t.boxData,Ql.push({name:e.text,wrap:void 0===e.wrap&&ih()||!!e.wrap,fill:e.color,actorKeys:[]}),Xl=Ql.slice(-1)[0];break;case"boxEnd":Xl=void 0;break;case"loopStart":nh(void 0,void 0,t.loopText,t.signalType);break;case"loopEnd":case"rectEnd":case"optEnd":case"altEnd":case"parEnd":case"criticalEnd":case"breakEnd":nh(void 0,void 0,void 0,t.signalType);break;case"rectStart":nh(void 0,void 0,t.color,t.signalType);break;case"optStart":nh(void 0,void 0,t.optText,t.signalType);break;case"altStart":case"else":nh(void 0,void 0,t.altText,t.signalType);break;case"setAccTitle":Or(t.text);break;case"parStart":case"and":nh(void 0,void 0,t.parText,t.signalType);break;case"criticalStart":nh(void 0,void 0,t.criticalText,t.signalType);break;case"option":nh(void 0,void 0,t.optionText,t.signalType);break;case"breakStart":nh(void 0,void 0,t.breakText,t.signalType)}var e},ph={addActor:eh,addMessage:function(t,e,n,r){Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,answer:r})},addSignal:nh,addLinks:oh,addDetails:uh,addProperties:lh,autoWrap:ih,setWrap:function(t){Gl=t},enableSequenceNumbers:function(){th=!0},disableSequenceNumbers:function(){th=!1},showSequenceNumbers:()=>th,getMessages:function(){return Jl},getActors:function(){return Kl},getActor:rh,getActorKeys:function(){return Object.keys(Kl)},getActorProperty:function(t,e){if(void 0!==t&&void 0!==t.properties)return t.properties[e]},getAccTitle:Mr,getBoxes:function(){return Ql},getDiagramTitle:Rr,setDiagramTitle:$r,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().sequence,clear:function(){Kl={},Ql=[],Jl=[],th=!1,Dr()},parseMessage:function(t){const e=t.trim(),n={text:e.replace(/^:?(?:no)?wrap:/,"").trim(),wrap:null!==e.match(/^:?wrap:/)||null===e.match(/^:?nowrap:/)&&void 0};return Nt.debug("parseMessage:",n),n},parseBoxData:function(t){const e=t.match(/^((?:rgba?|hsla?)\s*\(.*\)|\w*)(.*)$/);let n=null!=e&&e[1]?e[1].trim():"transparent",r=null!=e&&e[2]?e[2].trim():void 0;if(window&&window.CSS)window.CSS.supports("color",n)||(n="transparent",r=t.trim());else{const e=(new Option).style;e.color=n,e.color!==n&&(n="transparent",r=t.trim())}return{color:n,text:void 0!==r?Ft(r.replace(/^:?(?:no)?wrap:/,""),ar()):void 0,wrap:void 0!==r?null!==r.match(/^:?wrap:/)||null===r.match(/^:?nowrap:/)&&void 0:void 0}},LINETYPE:ah,ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},addNote:sh,setAccTitle:Or,apply:dh,setAccDescription:Ir,getAccDescription:Fr,hasAtLeastOneBox:function(){return Ql.length>0},hasAtLeastOneBoxWithTitle:function(){return Ql.some((t=>t.name))}};let fh=[];const gh=()=>{fh.forEach((t=>{t()})),fh=[]},yh=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},mh=(t,e)=>{var n;n=()=>{const n=document.querySelectorAll(t);0!==n.length&&(n[0].addEventListener("mouseover",(function(){xh("actor"+e+"_popup")})),n[0].addEventListener("mouseout",(function(){vh("actor"+e+"_popup")})))},fh.push(n)},bh=function(t,e,n,r){const i=t.append("image");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href",a)},_h=function(t,e,n,r){const i=t.append("use");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href","#"+a)},xh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="block")},vh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="none")},kh=function(t,e){let n=0,r=0;const i=e.text.split(Yt.lineBreakRegex),[a,s]=Vn(e.fontSize);let o=[],c=0,l=()=>e.y;if(void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0)switch(e.valign){case"top":case"start":l=()=>Math.round(e.y+e.textMargin);break;case"middle":case"center":l=()=>Math.round(e.y+(n+r+e.textMargin)/2);break;case"bottom":case"end":l=()=>Math.round(e.y+(n+r+2*e.textMargin)-e.textMargin)}if(void 0!==e.anchor&&void 0!==e.textMargin&&void 0!==e.width)switch(e.anchor){case"left":case"start":e.x=Math.round(e.x+e.textMargin),e.anchor="start",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"middle":case"center":e.x=Math.round(e.x+e.width/2),e.anchor="middle",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"right":case"end":e.x=Math.round(e.x+e.width-e.textMargin),e.anchor="end",e.dominantBaseline="middle",e.alignmentBaseline="middle"}for(let[h,u]of i.entries()){void 0!==e.textMargin&&0===e.textMargin&&void 0!==a&&(c=h*a);const i=t.append("text");if(i.attr("x",e.x),i.attr("y",l()),void 0!==e.anchor&&i.attr("text-anchor",e.anchor).attr("dominant-baseline",e.dominantBaseline).attr("alignment-baseline",e.alignmentBaseline),void 0!==e.fontFamily&&i.style("font-family",e.fontFamily),void 0!==s&&i.style("font-size",s),void 0!==e.fontWeight&&i.style("font-weight",e.fontWeight),void 0!==e.fill&&i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class),void 0!==e.dy?i.attr("dy",e.dy):0!==c&&i.attr("dy",c),e.tspan){const t=i.append("tspan");t.attr("x",e.x),void 0!==e.fill&&t.attr("fill",e.fill),t.text(u)}else i.text(u);void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0&&(r+=(i._groups||i)[0][0].getBBox().height,n=r),o.push(i)}return o},wh=function(t,e){const n=t.append("polygon");var r,i,a,s,o;return n.attr("points",(r=e.x,i=e.y,a=e.width,s=e.height,r+","+i+" "+(r+a)+","+i+" "+(r+a)+","+(i+s-(o=7))+" "+(r+a-1.2*o)+","+(i+s)+" "+r+","+(i+s))),n.attr("class","labelBox"),e.y=e.y+e.height/2,kh(t,e),n};let Eh=-1;const Ch=(t,e)=>{t.selectAll&&t.selectAll(".actor-line").attr("class","200").attr("y2",e-55)},Th=function(t,e){yh(t,{x:e.startx,y:e.starty,width:e.stopx-e.startx,height:e.stopy-e.starty,fill:e.fill,stroke:e.stroke,class:"rect"}).lower()},Sh=function(){return{x:0,y:0,fill:void 0,anchor:void 0,style:"#666",width:void 0,height:void 0,textMargin:0,rx:0,ry:0,tspan:!0,valign:void 0}},Ah=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},Lh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,[d,p]=Vn(l),f=t.split(Yt.lineBreakRegex);for(let g=0;g<f.length;g++){const t=g*d-d*(f.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").style("font-size",p).style("font-weight",u).style("font-family",h);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(f[g]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Bh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,a=e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").style("font-size",l).style("font-weight",u).style("font-family",h);a.append("tspan").attr("x",n).attr("dy",t).text(d[p]),a.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(a,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,0,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Nh={drawRect:yh,drawText:kh,drawLabel:wh,drawActor:function(t,e,n,r){switch(e.type){case"actor":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+80;r||(Eh++,t.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"));const s=t.append("g");s.attr("class","actor-man");const o=Ah();o.x=e.x,o.y=e.y,o.fill="#eaeaea",o.width=e.width,o.height=e.height,o.class="actor",o.rx=3,o.ry=3,s.append("line").attr("id","actor-man-torso"+Eh).attr("x1",i).attr("y1",e.y+25).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("id","actor-man-arms"+Eh).attr("x1",i-18).attr("y1",e.y+33).attr("x2",i+18).attr("y2",e.y+33),s.append("line").attr("x1",i-18).attr("y1",e.y+60).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("x1",i).attr("y1",e.y+45).attr("x2",i+16).attr("y2",e.y+60);const c=s.append("circle");c.attr("cx",e.x+e.width/2),c.attr("cy",e.y+10),c.attr("r",15),c.attr("width",e.width),c.attr("height",e.height);const l=s.node().getBBox();return e.height=l.height,Lh(n)(e.description,s,o.x,o.y+35,o.width,o.height,{class:"actor"},n),e.height}(t,e,n,r);case"participant":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+5,s=t.append("g");var o=s;r||(Eh++,o.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"),o=s.append("g"),e.actorCnt=Eh,null!=e.links&&(o.attr("id","root-"+Eh),mh("#root-"+Eh,Eh)));const c=Ah();var l="actor";null!=e.properties&&e.properties.class?l=e.properties.class:c.fill="#eaeaea",c.x=e.x,c.y=e.y,c.width=e.width,c.height=e.height,c.class=l,c.rx=3,c.ry=3;const h=yh(o,c);if(e.rectData=c,null!=e.properties&&e.properties.icon){const t=e.properties.icon.trim();"@"===t.charAt(0)?_h(o,c.x+c.width-20,c.y+10,t.substr(1)):bh(o,c.x+c.width-20,c.y+10,t)}Lh(n)(e.description,o,c.x,c.y,c.width,c.height,{class:"actor"},n);let u=e.height;if(h.node){const t=h.node().getBBox();e.height=t.height,u=t.height}return u}(t,e,n,r)}},drawBox:function(t,e,n){const r=t.append("g");Th(r,e),e.name&&Lh(n)(e.name,r,e.x,e.y+(e.textMaxHeight||0)/2,e.width,0,{class:"text"},n),r.lower()},drawPopup:function(t,e,n,r,i){if(void 0===e.links||null===e.links||0===Object.keys(e.links).length)return{height:0,width:0};const a=e.links,o=e.actorCnt,c=e.rectData;var l="none";i&&(l="block !important");const h=t.append("g");h.attr("id","actor"+o+"_popup"),h.attr("class","actorPopupMenu"),h.attr("display",l),mh("#actor"+o+"_popup",o);var u="";void 0!==c.class&&(u=" "+c.class);let d=c.width>n?c.width:n;const p=h.append("rect");if(p.attr("class","actorPopupMenuPanel"+u),p.attr("x",c.x),p.attr("y",c.height),p.attr("fill",c.fill),p.attr("stroke",c.stroke),p.attr("width",d),p.attr("height",c.height),p.attr("rx",c.rx),p.attr("ry",c.ry),null!=a){var f=20;for(let t in a){var g=h.append("a"),y=(0,s.N)(a[t]);g.attr("xlink:href",y),g.attr("target","_blank"),Bh(r)(t,g,c.x+10,c.height+f,d,20,{class:"actor"},r),f+=30}}return p.attr("height",f),{height:c.height+f,width:d}},drawImage:bh,drawEmbeddedImage:_h,anchorElement:function(t){return t.append("g")},drawActivation:function(t,e,n,r,i){const a=Ah(),s=e.anchored;a.x=e.startx,a.y=e.starty,a.class="activation"+i%3,a.width=e.stopx-e.startx,a.height=n-e.starty,yh(s,a)},drawLoop:function(t,e,n,r){const{boxMargin:i,boxTextMargin:a,labelBoxHeight:s,labelBoxWidth:o,messageFontFamily:c,messageFontSize:l,messageFontWeight:h}=r,u=t.append("g"),d=function(t,e,n,r){return u.append("line").attr("x1",t).attr("y1",e).attr("x2",n).attr("y2",r).attr("class","loopLine")};d(e.startx,e.starty,e.stopx,e.starty),d(e.stopx,e.starty,e.stopx,e.stopy),d(e.startx,e.stopy,e.stopx,e.stopy),d(e.startx,e.starty,e.startx,e.stopy),void 0!==e.sections&&e.sections.forEach((function(t){d(e.startx,t.y,e.stopx,t.y).style("stroke-dasharray","3, 3")}));let p=Sh();p.text=n,p.x=e.startx,p.y=e.starty,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.anchor="middle",p.valign="middle",p.tspan=!1,p.width=o||50,p.height=s||20,p.textMargin=a,p.class="labelText",wh(u,p),p=Sh(),p.text=e.title,p.x=e.startx+o/2+(e.stopx-e.startx)/2,p.y=e.starty+i+a,p.anchor="middle",p.valign="middle",p.textMargin=a,p.class="loopText",p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=!0;let f=kh(u,p);return void 0!==e.sectionTitles&&e.sectionTitles.forEach((function(t,n){if(t.message){p.text=t.message,p.x=e.startx+(e.stopx-e.startx)/2,p.y=e.sections[n].y+i+a,p.class="loopText",p.anchor="middle",p.valign="middle",p.tspan=!1,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=e.wrap,f=kh(u,p);let r=Math.round(f.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));e.sections[n].height+=r-(i+a)}})),e.height=Math.round(e.stopy-e.starty),u},drawBackgroundRect:Th,insertArrowHead:function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},insertArrowFilledHead:function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},insertSequenceNumber:function(t){t.append("defs").append("marker").attr("id","sequencenumber").attr("refX",15).attr("refY",15).attr("markerWidth",60).attr("markerHeight",40).attr("orient","auto").append("circle").attr("cx",15).attr("cy",15).attr("r",6)},insertArrowCrossHead:function(t){t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",4).attr("refY",5).append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1pt").attr("d","M 1,2 L 6,7 M 6,2 L 1,7")},insertDatabaseIcon:function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},insertComputerIcon:function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},insertClockIcon:function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")},getTextObj:Sh,getNoteRect:Ah,popupMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'block'; }"},popdownMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'none'; }"},fixLifeLineHeights:Ch,sanitizeUrl:s.N};let Dh={};const Oh={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],activations:[],models:{getHeight:function(){return Math.max.apply(null,0===this.actors.length?[0]:this.actors.map((t=>t.height||0)))+(0===this.loops.length?0:this.loops.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.messages.length?0:this.messages.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.notes.length?0:this.notes.map((t=>t.height||0)).reduce(((t,e)=>t+e)))},clear:function(){this.actors=[],this.boxes=[],this.loops=[],this.messages=[],this.notes=[]},addBox:function(t){this.boxes.push(t)},addActor:function(t){this.actors.push(t)},addLoop:function(t){this.loops.push(t)},addMessage:function(t){this.messages.push(t)},addNote:function(t){this.notes.push(t)},lastActor:function(){return this.actors[this.actors.length-1]},lastLoop:function(){return this.loops[this.loops.length-1]},lastMessage:function(){return this.messages[this.messages.length-1]},lastNote:function(){return this.notes[this.notes.length-1]},actors:[],boxes:[],loops:[],messages:[],notes:[]},init:function(){this.sequenceItems=[],this.activations=[],this.models.clear(),this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0,Zh(ar())},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=this;let a=0;function s(s){return function(o){a++;const c=i.sequenceItems.length-a+1;i.updateVal(o,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopy",r+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopx",n+c*Dh.boxMargin,Math.max),"activation"!==s&&(i.updateVal(o,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopx",n+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopy",r+c*Dh.boxMargin,Math.max))}}this.sequenceItems.forEach(s()),this.activations.forEach(s("activation"))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(Oh.data,"startx",i,Math.min),this.updateVal(Oh.data,"starty",s,Math.min),this.updateVal(Oh.data,"stopx",a,Math.max),this.updateVal(Oh.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},newActivation:function(t,e,n){const r=n[t.from.actor],i=Ph(t.from.actor).length||0,a=r.x+r.width/2+(i-1)*Dh.activationWidth/2;this.activations.push({startx:a,starty:this.verticalPos+2,stopx:a+Dh.activationWidth,stopy:void 0,actor:t.from.actor,anchored:Nh.anchorElement(e)})},endActivation:function(t){const e=this.activations.map((function(t){return t.actor})).lastIndexOf(t.from.actor);return this.activations.splice(e,1)[0]},createLoop:function(t={message:void 0,wrap:!1,width:void 0},e){return{startx:void 0,starty:this.verticalPos,stopx:void 0,stopy:void 0,title:t.message,wrap:t.wrap,width:t.width,height:0,fill:e}},newLoop:function(t={message:void 0,wrap:!1,width:void 0},e){this.sequenceItems.push(this.createLoop(t,e))},endLoop:function(){return this.sequenceItems.pop()},addSectionToLoop:function(t){const e=this.sequenceItems.pop();e.sections=e.sections||[],e.sectionTitles=e.sectionTitles||[],e.sections.push({y:Oh.getVerticalPos(),height:0}),e.sectionTitles.push(t),this.sequenceItems.push(e)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return{bounds:this.data,models:this.models}}},Mh=t=>({fontFamily:t.messageFontFamily,fontSize:t.messageFontSize,fontWeight:t.messageFontWeight}),Ih=t=>({fontFamily:t.noteFontFamily,fontSize:t.noteFontSize,fontWeight:t.noteFontWeight}),Fh=t=>({fontFamily:t.actorFontFamily,fontSize:t.actorFontSize,fontWeight:t.actorFontWeight});const $h=function(t,e,n,r,i,a,s){if(!0===i.hideUnusedParticipants){const t=new Set;a.forEach((e=>{t.add(e.from),t.add(e.to)})),n=n.filter((e=>t.has(e)))}let o,c=0,l=0,h=0;for(const u of n){const n=e[u],i=n.box;o&&o!=i&&(s||Oh.models.addBox(o),l+=Dh.boxMargin+o.margin),i&&i!=o&&(s||(i.x=c+l,i.y=r),l+=i.margin),n.width=n.width||Dh.width,n.height=Math.max(n.height||Dh.height,Dh.height),n.margin=n.margin||Dh.actorMargin,n.x=c+l,n.y=Oh.getVerticalPos();const a=Nh.drawActor(t,n,Dh,s);h=Math.max(h,a),Oh.insert(n.x,r,n.x+n.width,n.height),c+=n.width+l,n.box&&(n.box.width=c+i.margin-n.box.x),l=n.margin,o=n.box,Oh.models.addActor(n)}o&&!s&&Oh.models.addBox(o),Oh.bumpVerticalPos(h)},Rh=function(t,e,n,r){let i=0,a=0;for(const s of n){const n=e[s],o=zh(n),c=Nh.drawPopup(t,n,o,Dh,Dh.forceMenus,r);c.height>i&&(i=c.height),c.width+n.x>a&&(a=c.width+n.x)}return{maxHeight:i,maxWidth:a}},Zh=function(t){Sn(Dh,t),t.fontFamily&&(Dh.actorFontFamily=Dh.noteFontFamily=Dh.messageFontFamily=t.fontFamily),t.fontSize&&(Dh.actorFontSize=Dh.noteFontSize=Dh.messageFontSize=t.fontSize),t.fontWeight&&(Dh.actorFontWeight=Dh.noteFontWeight=Dh.messageFontWeight=t.fontWeight)},Ph=function(t){return Oh.activations.filter((function(e){return e.actor===t}))},jh=function(t,e){const n=e[t],r=Ph(t);return[r.reduce((function(t,e){return Math.min(t,e.startx)}),n.x+n.width/2),r.reduce((function(t,e){return Math.max(t,e.stopx)}),n.x+n.width/2)]};function Yh(t,e,n,r,i){Oh.bumpVerticalPos(n);let a=r;if(e.id&&e.message&&t[e.id]){const n=t[e.id].width,i=Mh(Dh);e.message=Gn.wrapLabel(`[${e.message}]`,n-2*Dh.wrapPadding,i),e.width=n,e.wrap=!0;const s=Gn.calculateTextDimensions(e.message,i),o=Math.max(s.height,Dh.labelBoxHeight);a=r+o,Nt.debug(`${o} - ${e.message}`)}i(e),Oh.bumpVerticalPos(a)}const zh=function(t){let e=0;const n=Fh(Dh);for(const r in t.links){const t=Gn.calculateTextDimensions(r,n).width+2*Dh.wrapPadding+2*Dh.boxMargin;e<t&&(e=t)}return e};const Uh=function(t,e,n,r){const i={},a=[];let s,o,c;return t.forEach((function(t){switch(t.id=Gn.random({length:10}),t.type){case r.db.LINETYPE.LOOP_START:case r.db.LINETYPE.ALT_START:case r.db.LINETYPE.OPT_START:case r.db.LINETYPE.PAR_START:case r.db.LINETYPE.CRITICAL_START:case r.db.LINETYPE.BREAK_START:a.push({id:t.id,msg:t.message,from:Number.MAX_SAFE_INTEGER,to:Number.MIN_SAFE_INTEGER,width:0});break;case r.db.LINETYPE.ALT_ELSE:case r.db.LINETYPE.PAR_AND:case r.db.LINETYPE.CRITICAL_OPTION:t.message&&(s=a.pop(),i[s.id]=s,i[t.id]=s,a.push(s));break;case r.db.LINETYPE.LOOP_END:case r.db.LINETYPE.ALT_END:case r.db.LINETYPE.OPT_END:case r.db.LINETYPE.PAR_END:case r.db.LINETYPE.CRITICAL_END:case r.db.LINETYPE.BREAK_END:s=a.pop(),i[s.id]=s;break;case r.db.LINETYPE.ACTIVE_START:{const n=e[t.from?t.from.actor:t.to.actor],r=Ph(t.from?t.from.actor:t.to.actor).length,i=n.x+n.width/2+(r-1)*Dh.activationWidth/2,a={startx:i,stopx:i+Dh.activationWidth,actor:t.from.actor,enabled:!0};Oh.activations.push(a)}break;case r.db.LINETYPE.ACTIVE_END:{const e=Oh.activations.map((t=>t.actor)).lastIndexOf(t.from.actor);delete Oh.activations.splice(e,1)[0]}}void 0!==t.placement?(o=function(t,e,n){const r=e[t.from].x,i=e[t.to].x,a=t.wrap&&t.message;let s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Dh.width,Ih(Dh)):t.message,Ih(Dh));const o={width:a?Dh.width:Math.max(Dh.width,s.width+2*Dh.noteMargin),height:0,startx:e[t.from].x,stopx:0,starty:0,stopy:0,message:t.message};return t.placement===n.db.PLACEMENT.RIGHTOF?(o.width=a?Math.max(Dh.width,s.width):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width+Dh.actorMargin)/2):t.placement===n.db.PLACEMENT.LEFTOF?(o.width=a?Math.max(Dh.width,s.width+2*Dh.noteMargin):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r-o.width+(e[t.from].width-Dh.actorMargin)/2):t.to===t.from?(s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Math.max(Dh.width,e[t.from].width),Ih(Dh)):t.message,Ih(Dh)),o.width=a?Math.max(Dh.width,e[t.from].width):Math.max(e[t.from].width,Dh.width,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width-o.width)/2):(o.width=Math.abs(r+e[t.from].width/2-(i+e[t.to].width/2))+Dh.actorMargin,o.startx=r<i?r+e[t.from].width/2-Dh.actorMargin/2:i+e[t.to].width/2-Dh.actorMargin/2),a&&(o.message=Gn.wrapLabel(t.message,o.width-2*Dh.wrapPadding,Ih(Dh))),Nt.debug(`NM:[${o.startx},${o.stopx},${o.starty},${o.stopy}:${o.width},${o.height}=${t.message}]`),o}(t,e,r),t.noteModel=o,a.forEach((t=>{s=t,s.from=Math.min(s.from,o.startx),s.to=Math.max(s.to,o.startx+o.width),s.width=Math.max(s.width,Math.abs(s.from-s.to))-Dh.labelBoxWidth}))):(c=function(t,e,n){let r=!1;if([n.db.LINETYPE.SOLID_OPEN,n.db.LINETYPE.DOTTED_OPEN,n.db.LINETYPE.SOLID,n.db.LINETYPE.DOTTED,n.db.LINETYPE.SOLID_CROSS,n.db.LINETYPE.DOTTED_CROSS,n.db.LINETYPE.SOLID_POINT,n.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(r=!0),!r)return{};const i=jh(t.from,e),a=jh(t.to,e),s=i[0]<=a[0]?1:0,o=i[0]<a[0]?0:1,c=[...i,...a],l=Math.abs(a[o]-i[s]);t.wrap&&t.message&&(t.message=Gn.wrapLabel(t.message,Math.max(l+2*Dh.wrapPadding,Dh.width),Mh(Dh)));const h=Gn.calculateTextDimensions(t.message,Mh(Dh));return{width:Math.max(t.wrap?0:h.width+2*Dh.wrapPadding,l+2*Dh.wrapPadding,Dh.width),height:0,startx:i[s],stopx:a[o],starty:0,stopy:0,message:t.message,type:t.type,wrap:t.wrap,fromBounds:Math.min.apply(null,c),toBounds:Math.max.apply(null,c)}}(t,e,r),t.msgModel=c,c.startx&&c.stopx&&a.length>0&&a.forEach((n=>{if(s=n,c.startx===c.stopx){const n=e[t.from],r=e[t.to];s.from=Math.min(n.x-c.width/2,n.x-n.width/2,s.from),s.to=Math.max(r.x+c.width/2,r.x+n.width/2,s.to),s.width=Math.max(s.width,Math.abs(s.to-s.from))-Dh.labelBoxWidth}else s.from=Math.min(c.startx,s.from),s.to=Math.max(c.stopx,s.to),s.width=Math.max(s.width,c.width)-Dh.labelBoxWidth})))})),Oh.activations=[],Nt.debug("Loop type widths:",i),i},Wh={bounds:Oh,drawActors:$h,drawActorsPopup:Rh,setConf:Zh,draw:function(t,e,n,r){const{securityLevel:i,sequence:a}=ar();let s;Dh=a,r.db.clear(),r.parser.parse(t),"sandbox"===i&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===i?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l="sandbox"===i?s.nodes()[0].contentDocument:document;Oh.init(),Nt.debug(r.db);const h="sandbox"===i?c.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`),u=r.db.getActors(),d=r.db.getBoxes(),p=r.db.getActorKeys(),f=r.db.getMessages(),g=r.db.getDiagramTitle(),y=r.db.hasAtLeastOneBox(),m=r.db.hasAtLeastOneBoxWithTitle(),b=function(t,e,n){const r={};return e.forEach((function(e){if(t[e.to]&&t[e.from]){const i=t[e.to];if(e.placement===n.db.PLACEMENT.LEFTOF&&!i.prevActor)return;if(e.placement===n.db.PLACEMENT.RIGHTOF&&!i.nextActor)return;const a=void 0!==e.placement,s=!a,o=a?Ih(Dh):Mh(Dh),c=e.wrap?Gn.wrapLabel(e.message,Dh.width-2*Dh.wrapPadding,o):e.message,l=Gn.calculateTextDimensions(c,o).width+2*Dh.wrapPadding;s&&e.from===i.nextActor?r[e.to]=Math.max(r[e.to]||0,l):s&&e.from===i.prevActor?r[e.from]=Math.max(r[e.from]||0,l):s&&e.from===e.to?(r[e.from]=Math.max(r[e.from]||0,l/2),r[e.to]=Math.max(r[e.to]||0,l/2)):e.placement===n.db.PLACEMENT.RIGHTOF?r[e.from]=Math.max(r[e.from]||0,l):e.placement===n.db.PLACEMENT.LEFTOF?r[i.prevActor]=Math.max(r[i.prevActor]||0,l):e.placement===n.db.PLACEMENT.OVER&&(i.prevActor&&(r[i.prevActor]=Math.max(r[i.prevActor]||0,l/2)),i.nextActor&&(r[e.from]=Math.max(r[e.from]||0,l/2)))}})),Nt.debug("maxMessageWidthPerActor:",r),r}(u,f,r);Dh.height=function(t,e,n){let r=0;Object.keys(t).forEach((e=>{const n=t[e];n.wrap&&(n.description=Gn.wrapLabel(n.description,Dh.width-2*Dh.wrapPadding,Fh(Dh)));const i=Gn.calculateTextDimensions(n.description,Fh(Dh));n.width=n.wrap?Dh.width:Math.max(Dh.width,i.width+2*Dh.wrapPadding),n.height=n.wrap?Math.max(i.height,Dh.height):Dh.height,r=Math.max(r,n.height)}));for(const a in e){const n=t[a];if(!n)continue;const r=t[n.nextActor];if(!r){const t=e[a]+Dh.actorMargin-n.width/2;n.margin=Math.max(t,Dh.actorMargin);continue}const i=e[a]+Dh.actorMargin-n.width/2-r.width/2;n.margin=Math.max(i,Dh.actorMargin)}let i=0;return n.forEach((e=>{const n=Mh(Dh);let r=e.actorKeys.reduce(((e,n)=>e+(t[n].width+(t[n].margin||0))),0);r-=2*Dh.boxTextMargin,e.wrap&&(e.name=Gn.wrapLabel(e.name,r-2*Dh.wrapPadding,n));const a=Gn.calculateTextDimensions(e.name,n);i=Math.max(a.height,i);const s=Math.max(r,a.width+2*Dh.wrapPadding);if(e.margin=Dh.boxTextMargin,r<s){const t=(s-r)/2;e.margin+=t}})),n.forEach((t=>t.textMaxHeight=i)),Math.max(r,Dh.height)}(u,b,d),Nh.insertComputerIcon(h),Nh.insertDatabaseIcon(h),Nh.insertClockIcon(h),y&&(Oh.bumpVerticalPos(Dh.boxMargin),m&&Oh.bumpVerticalPos(d[0].textMaxHeight)),$h(h,u,p,0,Dh,f,!1);const _=Uh(f,u,b,r);Nh.insertArrowHead(h),Nh.insertArrowCrossHead(h),Nh.insertArrowFilledHead(h),Nh.insertSequenceNumber(h);let x=1,v=1;const k=[];f.forEach((function(t){let e,n,i;switch(t.type){case r.db.LINETYPE.NOTE:n=t.noteModel,function(t,e){Oh.bumpVerticalPos(Dh.boxMargin),e.height=Dh.boxMargin,e.starty=Oh.getVerticalPos();const n=Nh.getNoteRect();n.x=e.startx,n.y=e.starty,n.width=e.width||Dh.width,n.class="note";const r=t.append("g"),i=Nh.drawRect(r,n),a=Nh.getTextObj();a.x=e.startx,a.y=e.starty,a.width=n.width,a.dy="1em",a.text=e.message,a.class="noteText",a.fontFamily=Dh.noteFontFamily,a.fontSize=Dh.noteFontSize,a.fontWeight=Dh.noteFontWeight,a.anchor=Dh.noteAlign,a.textMargin=Dh.noteMargin,a.valign="center";const s=kh(r,a),o=Math.round(s.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));i.attr("height",o+2*Dh.noteMargin),e.height+=o+2*Dh.noteMargin,Oh.bumpVerticalPos(o+2*Dh.noteMargin),e.stopy=e.starty+o+2*Dh.noteMargin,e.stopx=e.startx+n.width,Oh.insert(e.startx,e.starty,e.stopx,e.stopy),Oh.models.addNote(e)}(h,n);break;case r.db.LINETYPE.ACTIVE_START:Oh.newActivation(t,h,u);break;case r.db.LINETYPE.ACTIVE_END:!function(t,e){const n=Oh.endActivation(t);n.starty+18>e&&(n.starty=e-6,e+=12),Nh.drawActivation(h,n,e,Dh,Ph(t.from.actor).length),Oh.insert(n.startx,e-10,n.stopx,e)}(t,Oh.getVerticalPos());break;case r.db.LINETYPE.LOOP_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.LOOP_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"loop",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.RECT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin,(t=>Oh.newLoop(void 0,t.message)));break;case r.db.LINETYPE.RECT_END:e=Oh.endLoop(),Nh.drawBackgroundRect(h,e),Oh.models.addLoop(e),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos());break;case r.db.LINETYPE.OPT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.OPT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"opt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.ALT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.ALT_ELSE:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.ALT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"alt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.PAR_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.PAR_AND:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.PAR_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"par",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.AUTONUMBER:x=t.message.start||x,v=t.message.step||v,t.message.visible?r.db.enableSequenceNumbers():r.db.disableSequenceNumbers();break;case r.db.LINETYPE.CRITICAL_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.CRITICAL_OPTION:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.CRITICAL_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"critical",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.BREAK_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.BREAK_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"break",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;default:try{i=t.msgModel,i.starty=Oh.getVerticalPos(),i.sequenceIndex=x,i.sequenceVisible=r.db.showSequenceNumbers();const e=function(t,e){Oh.bumpVerticalPos(10);const{startx:n,stopx:r,message:i}=e,a=Yt.splitBreaks(i).length,s=Gn.calculateTextDimensions(i,Mh(Dh)),o=s.height/a;let c;e.height+=o,Oh.bumpVerticalPos(o);let l=s.height-10;const h=s.width;if(n===r){c=Oh.getVerticalPos()+l,Dh.rightAngles||(l+=Dh.boxMargin,c=Oh.getVerticalPos()+l),l+=30;const t=Math.max(h/2,Dh.width/2);Oh.insert(n-t,Oh.getVerticalPos()-10+l,r+t,Oh.getVerticalPos()+30+l)}else l+=Dh.boxMargin,c=Oh.getVerticalPos()+l,Oh.insert(n,c-10,r,c);return Oh.bumpVerticalPos(l),e.height+=l,e.stopy=e.starty+e.height,Oh.insert(e.fromBounds,e.starty,e.toBounds,e.stopy),c}(0,i);k.push({messageModel:i,lineStartY:e}),Oh.models.addMessage(i)}catch(a){Nt.error("error while drawing message",a)}}[r.db.LINETYPE.SOLID_OPEN,r.db.LINETYPE.DOTTED_OPEN,r.db.LINETYPE.SOLID,r.db.LINETYPE.DOTTED,r.db.LINETYPE.SOLID_CROSS,r.db.LINETYPE.DOTTED_CROSS,r.db.LINETYPE.SOLID_POINT,r.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(x+=v)})),k.forEach((t=>function(t,e,n,r){const{startx:i,stopx:a,starty:s,message:o,type:c,sequenceIndex:l,sequenceVisible:h}=e,u=Gn.calculateTextDimensions(o,Mh(Dh)),d=Nh.getTextObj();d.x=i,d.y=s+10,d.width=a-i,d.class="messageText",d.dy="1em",d.text=o,d.fontFamily=Dh.messageFontFamily,d.fontSize=Dh.messageFontSize,d.fontWeight=Dh.messageFontWeight,d.anchor=Dh.messageAlign,d.valign="center",d.textMargin=Dh.wrapPadding,d.tspan=!1,kh(t,d);const p=u.width;let f;i===a?f=Dh.rightAngles?t.append("path").attr("d",`M  ${i},${n} H ${i+Math.max(Dh.width/2,p/2)} V ${n+25} H ${i}`):t.append("path").attr("d","M "+i+","+n+" C "+(i+60)+","+(n-10)+" "+(i+60)+","+(n+30)+" "+i+","+(n+20)):(f=t.append("line"),f.attr("x1",i),f.attr("y1",n),f.attr("x2",a),f.attr("y2",n)),c===r.db.LINETYPE.DOTTED||c===r.db.LINETYPE.DOTTED_CROSS||c===r.db.LINETYPE.DOTTED_POINT||c===r.db.LINETYPE.DOTTED_OPEN?(f.style("stroke-dasharray","3, 3"),f.attr("class","messageLine1")):f.attr("class","messageLine0");let g="";Dh.arrowMarkerAbsolute&&(g=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,g=g.replace(/\(/g,"\\("),g=g.replace(/\)/g,"\\)")),f.attr("stroke-width",2),f.attr("stroke","none"),f.style("fill","none"),c!==r.db.LINETYPE.SOLID&&c!==r.db.LINETYPE.DOTTED||f.attr("marker-end","url("+g+"#arrowhead)"),c!==r.db.LINETYPE.SOLID_POINT&&c!==r.db.LINETYPE.DOTTED_POINT||f.attr("marker-end","url("+g+"#filled-head)"),c!==r.db.LINETYPE.SOLID_CROSS&&c!==r.db.LINETYPE.DOTTED_CROSS||f.attr("marker-end","url("+g+"#crosshead)"),(h||Dh.showSequenceNumbers)&&(f.attr("marker-start","url("+g+"#sequencenumber)"),t.append("text").attr("x",i).attr("y",n+4).attr("font-family","sans-serif").attr("font-size","12px").attr("text-anchor","middle").attr("class","sequenceNumber").text(l))}(h,t.messageModel,t.lineStartY,r))),Dh.mirrorActors&&(Oh.bumpVerticalPos(2*Dh.boxMargin),$h(h,u,p,Oh.getVerticalPos(),Dh,f,!0),Oh.bumpVerticalPos(Dh.boxMargin),Ch(h,Oh.getVerticalPos())),Oh.models.boxes.forEach((function(t){t.height=Oh.getVerticalPos()-t.y,Oh.insert(t.x,t.y,t.x+t.width,t.height),t.startx=t.x,t.starty=t.y,t.stopx=t.startx+t.width,t.stopy=t.starty+t.height,t.stroke="rgb(0,0,0, 0.5)",Nh.drawBox(h,t,Dh)})),y&&Oh.bumpVerticalPos(Dh.boxMargin);const w=Rh(h,u,p,l),{bounds:E}=Oh.getBounds();Nt.debug("For line height fix Querying: #"+e+" .actor-line");(0,o.td_)("#"+e+" .actor-line").attr("y2",E.stopy);let C=E.stopy-E.starty;C<w.maxHeight&&(C=w.maxHeight);let T=C+2*Dh.diagramMarginY;Dh.mirrorActors&&(T=T-Dh.boxMargin+Dh.bottomMarginAdj);let S=E.stopx-E.startx;S<w.maxWidth&&(S=w.maxWidth);const A=S+2*Dh.diagramMarginX;g&&h.append("text").text(g).attr("x",(E.stopx-E.startx)/2-2*Dh.diagramMarginX).attr("y",-25),dr(h,T,A,Dh.useMaxWidth);const L=g?40:0;h.attr("viewBox",E.startx-Dh.diagramMarginX+" -"+(Dh.diagramMarginY+L)+" "+A+" "+(T+L)),Nt.debug("models:",Oh.models)}};var qh=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,21],h=[1,22],u=[1,23],d=[1,24],p=[1,37],f=[1,25],g=[1,26],y=[1,27],m=[1,28],b=[1,29],_=[1,32],x=[1,33],v=[1,34],k=[1,35],w=[1,36],E=[1,39],C=[1,40],T=[1,41],S=[1,42],A=[1,38],L=[1,45],B=[1,4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],N=[1,4,5,14,15,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],D=[1,4,5,7,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],O=[4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],M={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NL:5,directive:6,SD:7,document:8,line:9,statement:10,classDefStatement:11,cssClassStatement:12,idStatement:13,DESCR:14,"--\x3e":15,HIDE_EMPTY:16,scale:17,WIDTH:18,COMPOSIT_STATE:19,STRUCT_START:20,STRUCT_STOP:21,STATE_DESCR:22,AS:23,ID:24,FORK:25,JOIN:26,CHOICE:27,CONCURRENT:28,note:29,notePosition:30,NOTE_TEXT:31,direction:32,acc_title:33,acc_title_value:34,acc_descr:35,acc_descr_value:36,acc_descr_multiline_value:37,classDef:38,CLASSDEF_ID:39,CLASSDEF_STYLEOPTS:40,DEFAULT:41,class:42,CLASSENTITY_IDS:43,STYLECLASS:44,openDirective:45,typeDirective:46,closeDirective:47,":":48,argDirective:49,direction_tb:50,direction_bt:51,direction_rl:52,direction_lr:53,eol:54,";":55,EDGE_STATE:56,STYLE_SEPARATOR:57,left_of:58,right_of:59,open_directive:60,type_directive:61,arg_directive:62,close_directive:63,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NL",7:"SD",14:"DESCR",15:"--\x3e",16:"HIDE_EMPTY",17:"scale",18:"WIDTH",19:"COMPOSIT_STATE",20:"STRUCT_START",21:"STRUCT_STOP",22:"STATE_DESCR",23:"AS",24:"ID",25:"FORK",26:"JOIN",27:"CHOICE",28:"CONCURRENT",29:"note",31:"NOTE_TEXT",33:"acc_title",34:"acc_title_value",35:"acc_descr",36:"acc_descr_value",37:"acc_descr_multiline_value",38:"classDef",39:"CLASSDEF_ID",40:"CLASSDEF_STYLEOPTS",41:"DEFAULT",42:"class",43:"CLASSENTITY_IDS",44:"STYLECLASS",48:":",50:"direction_tb",51:"direction_bt",52:"direction_rl",53:"direction_lr",55:";",56:"EDGE_STATE",57:"STYLE_SEPARATOR",58:"left_of",59:"right_of",60:"open_directive",61:"type_directive",62:"arg_directive",63:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[10,1],[10,1],[10,1],[10,2],[10,3],[10,4],[10,1],[10,2],[10,1],[10,4],[10,3],[10,6],[10,1],[10,1],[10,1],[10,1],[10,4],[10,4],[10,1],[10,1],[10,2],[10,2],[10,1],[11,3],[11,3],[12,3],[6,3],[6,5],[32,1],[32,1],[32,1],[32,1],[54,1],[54,1],[13,1],[13,1],[13,3],[13,3],[30,1],[30,1],[45,1],[46,1],[49,1],[47,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.setRootDoc(a[o]),a[o];case 5:this.$=[];break;case 6:"nl"!=a[o]&&(a[o-1].push(a[o]),this.$=a[o-1]);break;case 7:case 8:case 12:this.$=a[o];break;case 9:this.$="nl";break;case 13:const t=a[o-1];t.description=r.trimColon(a[o]),this.$=t;break;case 14:this.$={stmt:"relation",state1:a[o-2],state2:a[o]};break;case 15:const e=r.trimColon(a[o]);this.$={stmt:"relation",state1:a[o-3],state2:a[o-1],description:e};break;case 19:this.$={stmt:"state",id:a[o-3],type:"default",description:"",doc:a[o-1]};break;case 20:var c=a[o],l=a[o-2].trim();if(a[o].match(":")){var h=a[o].split(":");c=h[0],l=[l,h[1]]}this.$={stmt:"state",id:c,type:"default",description:l};break;case 21:this.$={stmt:"state",id:a[o-3],type:"default",description:a[o-5],doc:a[o-1]};break;case 22:this.$={stmt:"state",id:a[o],type:"fork"};break;case 23:this.$={stmt:"state",id:a[o],type:"join"};break;case 24:this.$={stmt:"state",id:a[o],type:"choice"};break;case 25:this.$={stmt:"state",id:r.getDividerId(),type:"divider"};break;case 26:this.$={stmt:"state",id:a[o-1].trim(),note:{position:a[o-2].trim(),text:a[o].trim()}};break;case 30:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 31:case 32:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 33:case 34:this.$={stmt:"classDef",id:a[o-1].trim(),classes:a[o].trim()};break;case 35:this.$={stmt:"applyClass",id:a[o-1].trim(),styleClass:a[o].trim()};break;case 38:r.setDirection("TB"),this.$={stmt:"dir",value:"TB"};break;case 39:r.setDirection("BT"),this.$={stmt:"dir",value:"BT"};break;case 40:r.setDirection("RL"),this.$={stmt:"dir",value:"RL"};break;case 41:r.setDirection("LR"),this.$={stmt:"dir",value:"LR"};break;case 44:case 45:this.$={stmt:"state",id:a[o].trim(),type:"default",description:""};break;case 46:case 47:this.$={stmt:"state",id:a[o-2].trim(),classes:[a[o].trim()],type:"default",description:""};break;case 50:r.parseDirective("%%{","open_directive");break;case 51:r.parseDirective(a[o],"type_directive");break;case 52:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 53:r.parseDirective("}%%","close_directive","state")}},table:[{3:1,4:n,5:r,6:4,7:i,45:6,60:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,45:6,60:a},{3:9,4:n,5:r,6:4,7:i,45:6,60:a},{3:10,4:n,5:r,6:4,7:i,45:6,60:a},e([1,4,5,16,17,19,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],s,{8:11}),{46:12,61:[1,13]},{61:[2,50]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},{47:43,48:[1,44],63:L},e([48,63],[2,51]),e(B,[2,6]),{6:30,10:46,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,8]),e(B,[2,9]),e(B,[2,10]),e(B,[2,11]),e(B,[2,12],{14:[1,47],15:[1,48]}),e(B,[2,16]),{18:[1,49]},e(B,[2,18],{20:[1,50]}),{23:[1,51]},e(B,[2,22]),e(B,[2,23]),e(B,[2,24]),e(B,[2,25]),{30:52,31:[1,53],58:[1,54],59:[1,55]},e(B,[2,28]),e(B,[2,29]),{34:[1,56]},{36:[1,57]},e(B,[2,32]),{39:[1,58],41:[1,59]},{43:[1,60]},e(N,[2,44],{57:[1,61]}),e(N,[2,45],{57:[1,62]}),e(B,[2,38]),e(B,[2,39]),e(B,[2,40]),e(B,[2,41]),e(D,[2,36]),{49:63,62:[1,64]},e(D,[2,53]),e(B,[2,7]),e(B,[2,13]),{13:65,24:p,56:A},e(B,[2,17]),e(O,s,{8:66}),{24:[1,67]},{24:[1,68]},{23:[1,69]},{24:[2,48]},{24:[2,49]},e(B,[2,30]),e(B,[2,31]),{40:[1,70]},{40:[1,71]},{44:[1,72]},{24:[1,73]},{24:[1,74]},{47:75,63:L},{63:[2,52]},e(B,[2,14],{14:[1,76]}),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,77],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,20],{20:[1,78]}),{31:[1,79]},{24:[1,80]},e(B,[2,33]),e(B,[2,34]),e(B,[2,35]),e(N,[2,46]),e(N,[2,47]),e(D,[2,37]),e(B,[2,15]),e(B,[2,19]),e(O,s,{8:81}),e(B,[2,26]),e(B,[2,27]),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,82],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,21])],defaultActions:{7:[2,50],8:[2,1],9:[2,2],10:[2,3],54:[2,48],55:[2,49],64:[2,52]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},I=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 41;case 1:case 44:return 50;case 2:case 45:return 51;case 3:case 46:return 52;case 4:case 47:return 53;case 5:return this.begin("open_directive"),60;case 6:return this.begin("type_directive"),61;case 7:return this.popState(),this.begin("arg_directive"),48;case 8:return this.popState(),this.popState(),63;case 9:return 62;case 10:case 11:case 13:case 14:case 15:case 16:case 56:case 58:case 64:break;case 12:case 79:return 5;case 17:case 34:return this.pushState("SCALE"),17;case 18:case 35:return 18;case 19:case 25:case 36:case 51:case 54:this.popState();break;case 20:return this.begin("acc_title"),33;case 21:return this.popState(),"acc_title_value";case 22:return this.begin("acc_descr"),35;case 23:return this.popState(),"acc_descr_value";case 24:this.begin("acc_descr_multiline");break;case 26:return"acc_descr_multiline_value";case 27:return this.pushState("CLASSDEF"),38;case 28:return this.popState(),this.pushState("CLASSDEFID"),"DEFAULT_CLASSDEF_ID";case 29:return this.popState(),this.pushState("CLASSDEFID"),39;case 30:return this.popState(),40;case 31:return this.pushState("CLASS"),42;case 32:return this.popState(),this.pushState("CLASS_STYLE"),43;case 33:return this.popState(),44;case 37:this.pushState("STATE");break;case 38:case 41:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),25;case 39:case 42:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),26;case 40:case 43:return this.popState(),e.yytext=e.yytext.slice(0,-10).trim(),27;case 48:this.pushState("STATE_STRING");break;case 49:return this.pushState("STATE_ID"),"AS";case 50:case 66:return this.popState(),"ID";case 52:return"STATE_DESCR";case 53:return 19;case 55:return this.popState(),this.pushState("struct"),20;case 57:return this.popState(),21;case 59:return this.begin("NOTE"),29;case 60:return this.popState(),this.pushState("NOTE_ID"),58;case 61:return this.popState(),this.pushState("NOTE_ID"),59;case 62:this.popState(),this.pushState("FLOATING_NOTE");break;case 63:return this.popState(),this.pushState("FLOATING_NOTE_ID"),"AS";case 65:return"NOTE_TEXT";case 67:return this.popState(),this.pushState("NOTE_TEXT"),24;case 68:return this.popState(),e.yytext=e.yytext.substr(2).trim(),31;case 69:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),31;case 70:case 71:return 7;case 72:return 16;case 73:return 56;case 74:return 24;case 75:return e.yytext=e.yytext.trim(),14;case 76:return 15;case 77:return 28;case 78:return 57;case 80:return"INVALID"}},rules:[/^(?:default\b)/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:[\s]+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:classDef\s+)/i,/^(?:DEFAULT\s+)/i,/^(?:\w+\s+)/i,/^(?:[^\n]*)/i,/^(?:class\s+)/i,/^(?:(\w+)+((,\s*\w+)*))/i,/^(?:[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:state\s+)/i,/^(?:.*<<fork>>)/i,/^(?:.*<<join>>)/i,/^(?:.*<<choice>>)/i,/^(?:.*\[\[fork\]\])/i,/^(?:.*\[\[join\]\])/i,/^(?:.*\[\[choice\]\])/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:["])/i,/^(?:\s*as\s+)/i,/^(?:[^\n\{]*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n\s\{]+)/i,/^(?:\n)/i,/^(?:\{)/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:\})/i,/^(?:[\n])/i,/^(?:note\s+)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:")/i,/^(?:\s*as\s*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n]*)/i,/^(?:\s*[^:\n\s\-]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:[\s\S]*?end note\b)/i,/^(?:stateDiagram\s+)/i,/^(?:stateDiagram-v2\s+)/i,/^(?:hide empty description\b)/i,/^(?:\[\*\])/i,/^(?:[^:\n\s\-\{]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:-->)/i,/^(?:--)/i,/^(?::::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{LINE:{rules:[14,15],inclusive:!1},close_directive:{rules:[14,15],inclusive:!1},arg_directive:{rules:[8,9,14,15],inclusive:!1},type_directive:{rules:[7,8,14,15],inclusive:!1},open_directive:{rules:[6,14,15],inclusive:!1},struct:{rules:[14,15,27,31,37,44,45,46,47,56,57,58,59,73,74,75,76,77],inclusive:!1},FLOATING_NOTE_ID:{rules:[66],inclusive:!1},FLOATING_NOTE:{rules:[63,64,65],inclusive:!1},NOTE_TEXT:{rules:[68,69],inclusive:!1},NOTE_ID:{rules:[67],inclusive:!1},NOTE:{rules:[60,61,62],inclusive:!1},CLASS_STYLE:{rules:[33],inclusive:!1},CLASS:{rules:[32],inclusive:!1},CLASSDEFID:{rules:[30],inclusive:!1},CLASSDEF:{rules:[28,29],inclusive:!1},acc_descr_multiline:{rules:[25,26],inclusive:!1},acc_descr:{rules:[23],inclusive:!1},acc_title:{rules:[21],inclusive:!1},SCALE:{rules:[18,19,35,36],inclusive:!1},ALIAS:{rules:[],inclusive:!1},STATE_ID:{rules:[50],inclusive:!1},STATE_STRING:{rules:[51,52],inclusive:!1},FORK_STATE:{rules:[],inclusive:!1},STATE:{rules:[14,15,38,39,40,41,42,43,48,49,53,54,55],inclusive:!1},ID:{rules:[14,15],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,5,10,11,12,13,15,16,17,20,22,24,27,31,34,37,55,59,70,71,72,73,74,75,76,78,79,80],inclusive:!0}}},t);function F(){this.yy={}}return M.lexer=I,F.prototype=M,M.Parser=F,new F}();qh.parser=qh;const Hh=qh,Vh=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*stateDiagram/)},Gh=(t,e)=>{var n;return null!==t.match(/^\s*stateDiagram-v2/)||!(!t.match(/^\s*stateDiagram/)||"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer))},Xh="state",Kh="relation",Qh="default",Jh="divider",tu="[*]",eu="start",nu="color",ru="fill";let iu="LR",au=[],su={};let ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,hu=0;const uu=t=>JSON.parse(JSON.stringify(t)),du=(t,e,n)=>{if(e.stmt===Kh)du(t,e.state1,!0),du(t,e.state2,!1);else if(e.stmt===Xh&&("[*]"===e.id?(e.id=n?t.id+"_start":t.id+"_end",e.start=n):e.id=e.id.trim()),e.doc){const t=[];let n,r=[];for(n=0;n<e.doc.length;n++)if(e.doc[n].type===Jh){const i=uu(e.doc[n]);i.doc=uu(r),t.push(i),r=[]}else r.push(e.doc[n]);if(t.length>0&&r.length>0){const n={stmt:Xh,id:Fn(),type:"divider",doc:uu(r)};t.push(uu(n)),e.doc=t}e.doc.forEach((t=>du(e,t,!0)))}},pu=function(t,e="default",n=null,r=null,i=null,a=null,s=null,o=null){const c=null==t?void 0:t.trim();if(void 0===cu.states[c]?(Nt.info("Adding state ",c,r),cu.states[c]={id:c,descriptions:[],type:e,doc:n,note:i,classes:[],styles:[],textStyles:[]}):(cu.states[c].doc||(cu.states[c].doc=n),cu.states[c].type||(cu.states[c].type=e)),r&&(Nt.info("Setting state description",c,r),"string"==typeof r&&_u(c,r.trim()),"object"==typeof r&&r.forEach((t=>_u(c,t.trim())))),i&&(cu.states[c].note=i,cu.states[c].note.text=Yt.sanitizeText(cu.states[c].note.text,ar())),a){Nt.info("Setting state classes",c,a);("string"==typeof a?[a]:a).forEach((t=>vu(c,t.trim())))}if(s){Nt.info("Setting state styles",c,s);("string"==typeof s?[s]:s).forEach((t=>ku(c,t.trim())))}if(o){Nt.info("Setting state styles",c,s);("string"==typeof o?[o]:o).forEach((t=>wu(c,t.trim())))}},fu=function(t){ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,su={},t||Dr()},gu=function(t){return cu.states[t]};function yu(t=""){let e=t;return t===tu&&(lu++,e=`start${lu}`),e}function mu(t="",e="default"){return t===tu?eu:e}const bu=function(t,e,n){if("object"==typeof t)!function(t,e,n){let r=yu(t.id.trim()),i=mu(t.id.trim(),t.type),a=yu(e.id.trim()),s=mu(e.id.trim(),e.type);pu(r,i,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles),pu(a,s,e.doc,e.description,e.note,e.classes,e.styles,e.textStyles),cu.relations.push({id1:r,id2:a,relationTitle:Yt.sanitizeText(n,ar())})}(t,e,n);else{const r=yu(t.trim()),i=mu(t),a=function(t=""){let e=t;return"[*]"===t&&(lu++,e=`end${lu}`),e}(e.trim()),s=function(t="",e="default"){return"[*]"===t?"end":e}(e);pu(r,i),pu(a,s),cu.relations.push({id1:r,id2:a,title:Yt.sanitizeText(n,ar())})}},_u=function(t,e){const n=cu.states[t],r=e.startsWith(":")?e.replace(":","").trim():e;n.descriptions.push(Yt.sanitizeText(r,ar()))},xu=function(t,e=""){void 0===su[t]&&(su[t]={id:t,styles:[],textStyles:[]});const n=su[t];null!=e&&e.split(",").forEach((t=>{const e=t.replace(/([^;]*);/,"$1").trim();if(t.match(nu)){const t=e.replace(ru,"bgFill").replace(nu,ru);n.textStyles.push(t)}n.styles.push(e)}))},vu=function(t,e){t.split(",").forEach((function(t){let n=gu(t);if(void 0===n){const e=t.trim();pu(e),n=gu(e)}n.classes.push(e)}))},ku=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},wu=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},Eu={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().state,addState:pu,clear:fu,getState:gu,getStates:function(){return cu.states},getRelations:function(){return cu.relations},getClasses:function(){return su},getDirection:()=>iu,addRelation:bu,getDividerId:()=>(hu++,"divider-id-"+hu),setDirection:t=>{iu=t},cleanupLabel:function(t){return":"===t.substring(0,1)?t.substr(2).trim():t.trim()},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3},logDocuments:function(){Nt.info("Documents = ",ou)},getRootDoc:()=>au,setRootDoc:t=>{Nt.info("Setting root doc",t),au=t},getRootDocV2:()=>(du({id:"root"},{id:"root",doc:au},!0),{id:"root",doc:au}),extract:t=>{let e;e=t.doc?t.doc:t,Nt.info(e),fu(!0),Nt.info("Extract",e),e.forEach((t=>{switch(t.stmt){case Xh:pu(t.id.trim(),t.type,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles);break;case Kh:bu(t.state1,t.state2,t.description);break;case"classDef":xu(t.id.trim(),t.classes);break;case"applyClass":vu(t.id.trim(),t.styleClass)}}))},trimColon:t=>t&&":"===t[0]?t.substr(1).trim():t.trim(),getAccTitle:Mr,setAccTitle:Or,getAccDescription:Fr,setAccDescription:Ir,addStyleClass:xu,setCssClass:vu,addDescription:_u,setDiagramTitle:$r,getDiagramTitle:Rr},Cu={},Tu=(t,e)=>{Cu[t]=e},Su=(t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+1.3*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.descriptions[0]).node().getBBox(),r=n.height,i=t.append("text").attr("x",ar().state.padding).attr("y",r+.4*ar().state.padding+ar().state.dividerMargin+ar().state.textHeight).attr("class","state-description");let a=!0,s=!0;e.descriptions.forEach((function(t){a||(!function(t,e,n){const r=t.append("tspan").attr("x",2*ar().state.padding).text(e);n||r.attr("dy",ar().state.textHeight)}(i,t,s),s=!1),a=!1}));const o=t.append("line").attr("x1",ar().state.padding).attr("y1",ar().state.padding+r+ar().state.dividerMargin/2).attr("y2",ar().state.padding+r+ar().state.dividerMargin/2).attr("class","descr-divider"),c=i.node().getBBox(),l=Math.max(c.width,n.width);return o.attr("x2",l+3*ar().state.padding),t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",l+2*ar().state.padding).attr("height",c.height+r+2*ar().state.padding).attr("rx",ar().state.radius),t},Au=(t,e,n)=>{const r=ar().state.padding,i=2*ar().state.padding,a=t.node().getBBox(),s=a.width,o=a.x,c=t.append("text").attr("x",0).attr("y",ar().state.titleShift).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),l=c.node().getBBox().width+i;let h,u=Math.max(l,s);u===s&&(u+=i);const d=t.node().getBBox();e.doc,h=o-r,l>s&&(h=(s-u)/2+r),Math.abs(o-d.x)<r&&l>s&&(h=o-(l-s)/2);const p=1-ar().state.textHeight;return t.insert("rect",":first-child").attr("x",h).attr("y",p).attr("class",n?"alt-composit":"composit").attr("width",u).attr("height",d.height+ar().state.textHeight+ar().state.titleShift+1).attr("rx","0"),c.attr("x",h+r),l<=s&&c.attr("x",o+(u-i)/2-l/2+r),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",3*ar().state.textHeight).attr("rx",ar().state.radius),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",d.height+3+2*ar().state.textHeight).attr("rx",ar().state.radius),t},Lu=(t,e)=>{e.attr("class","state-note");const n=e.append("rect").attr("x",0).attr("y",ar().state.padding),r=e.append("g"),{textWidth:i,textHeight:a}=((t,e,n,r)=>{let i=0;const a=r.append("text");a.style("text-anchor","start"),a.attr("class","noteText");let s=t.replace(/\r\n/g,"<br/>");s=s.replace(/\n/g,"<br/>");const o=s.split(Yt.lineBreakRegex);let c=1.25*ar().state.noteMargin;for(const l of o){const t=l.trim();if(t.length>0){const r=a.append("tspan");r.text(t),0===c&&(c+=r.node().getBBox().height),i+=c,r.attr("x",e+ar().state.noteMargin),r.attr("y",n+i+1.25*ar().state.noteMargin)}}return{textWidth:a.node().getBBox().width,textHeight:i}})(t,0,0,r);return n.attr("height",a+2*ar().state.noteMargin),n.attr("width",i+2*ar().state.noteMargin),n},Bu=function(t,e){const n=e.id,r={id:n,label:e.id,width:0,height:0},i=t.append("g").attr("id",n).attr("class","stateGroup");"start"===e.type&&(t=>{t.append("circle").attr("class","start-state").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit).attr("cy",ar().state.padding+ar().state.sizeUnit)})(i),"end"===e.type&&(t=>{t.append("circle").attr("class","end-state-outer").attr("r",ar().state.sizeUnit+ar().state.miniPadding).attr("cx",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding).attr("cy",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding),t.append("circle").attr("class","end-state-inner").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit+2).attr("cy",ar().state.padding+ar().state.sizeUnit+2)})(i),"fork"!==e.type&&"join"!==e.type||((t,e)=>{let n=ar().state.forkWidth,r=ar().state.forkHeight;if(e.parentId){let t=n;n=r,r=t}t.append("rect").style("stroke","black").style("fill","black").attr("width",n).attr("height",r).attr("x",ar().state.padding).attr("y",ar().state.padding)})(i,e),"note"===e.type&&Lu(e.note.text,i),"divider"===e.type&&(t=>{t.append("line").style("stroke","grey").style("stroke-dasharray","3").attr("x1",ar().state.textHeight).attr("class","divider").attr("x2",2*ar().state.textHeight).attr("y1",0).attr("y2",0)})(i),"default"===e.type&&0===e.descriptions.length&&((t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+2*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),r=n.node().getBBox();t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",r.width+2*ar().state.padding).attr("height",r.height+2*ar().state.padding).attr("rx",ar().state.radius)})(i,e),"default"===e.type&&e.descriptions.length>0&&Su(i,e);const a=i.node().getBBox();return r.width=a.width+2*ar().state.padding,r.height=a.height+2*ar().state.padding,Tu(n,r),r};let Nu=0;let Du;const Ou={},Mu=(t,e,n,r,i,a,s)=>{const c=new ht.k({compound:!0,multigraph:!0});let l,h=!0;for(l=0;l<t.length;l++)if("relation"===t[l].stmt){h=!1;break}n?c.setGraph({rankdir:"LR",multigraph:!0,compound:!0,ranker:"tight-tree",ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,isMultiGraph:!0}):c.setGraph({rankdir:"TB",multigraph:!0,compound:!0,ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,ranker:"tight-tree",isMultiGraph:!0}),c.setDefaultEdgeLabel((function(){return{}})),s.db.extract(t);const u=s.db.getStates(),d=s.db.getRelations(),p=Object.keys(u);for(const o of p){const t=u[o];let l;if(n&&(t.parentId=n),t.doc){let n=e.append("g").attr("id",t.id).attr("class","stateGroup");l=Mu(t.doc,n,t.id,!r,i,a,s);{n=Au(n,t,r);let e=n.node().getBBox();l.width=e.width,l.height=e.height+Du.padding/2,Ou[t.id]={y:Du.compositTitleSize}}}else l=Bu(e,t);if(t.note){const n={descriptions:[],id:t.id+"-note",note:t.note,type:"note"},r=Bu(e,n);"left of"===t.note.position?(c.setNode(l.id+"-note",r),c.setNode(l.id,l)):(c.setNode(l.id,l),c.setNode(l.id+"-note",r)),c.setParent(l.id,l.id+"-group"),c.setParent(l.id+"-note",l.id+"-group")}else c.setNode(l.id,l)}Nt.debug("Count=",c.nodeCount(),c);let f=0;d.forEach((function(t){var e;f++,Nt.debug("Setting edge",t),c.setEdge(t.id1,t.id2,{relation:t,width:(e=t.title,e?e.length*Du.fontSizeFactor:1),height:Du.labelHeight*Yt.getRows(t.title).length,labelpos:"c"},"id"+f)})),(0,lt.bK)(c),Nt.debug("Graph after layout",c.nodes());const g=e.node();c.nodes().forEach((function(t){if(void 0!==t&&void 0!==c.node(t)){Nt.warn("Node "+t+": "+JSON.stringify(c.node(t))),i.select("#"+g.id+" #"+t).attr("transform","translate("+(c.node(t).x-c.node(t).width/2)+","+(c.node(t).y+(Ou[t]?Ou[t].y:0)-c.node(t).height/2)+" )"),i.select("#"+g.id+" #"+t).attr("data-x-shift",c.node(t).x-c.node(t).width/2);a.querySelectorAll("#"+g.id+" #"+t+" .divider").forEach((t=>{const e=t.parentElement;let n=0,r=0;e&&(e.parentElement&&(n=e.parentElement.getBBox().width),r=parseInt(e.getAttribute("data-x-shift"),10),Number.isNaN(r)&&(r=0)),t.setAttribute("x1",0-r+8),t.setAttribute("x2",n-r-8)}))}else Nt.debug("No Node "+t+": "+JSON.stringify(c.node(t)))}));let y=g.getBBox();c.edges().forEach((function(t){void 0!==t&&void 0!==c.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(c.edge(t))),function(t,e,n){e.points=e.points.filter((t=>!Number.isNaN(t.y)));const r=e.points,i=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),a=t.append("path").attr("d",i(r)).attr("id","edge"+Nu).attr("class","transition");let s="";if(ar().state.arrowMarkerAbsolute&&(s=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,s=s.replace(/\(/g,"\\("),s=s.replace(/\)/g,"\\)")),a.attr("marker-end","url("+s+"#"+function(t){switch(t){case Eu.relationType.AGGREGATION:return"aggregation";case Eu.relationType.EXTENSION:return"extension";case Eu.relationType.COMPOSITION:return"composition";case Eu.relationType.DEPENDENCY:return"dependency"}}(Eu.relationType.DEPENDENCY)+"End)"),void 0!==n.title){const r=t.append("g").attr("class","stateLabel"),{x:i,y:a}=Gn.calcLabelPosition(e.points),s=Yt.getRows(n.title);let o=0;const c=[];let l=0,h=0;for(let t=0;t<=s.length;t++){const e=r.append("text").attr("text-anchor","middle").text(s[t]).attr("x",i).attr("y",a+o),n=e.node().getBBox();if(l=Math.max(l,n.width),h=Math.min(h,n.x),Nt.info(n.x,i,a+o),0===o){const t=e.node().getBBox();o=t.height,Nt.info("Title height",o,a)}c.push(e)}let u=o*s.length;if(s.length>1){const t=(s.length-1)*o*.5;c.forEach(((e,n)=>e.attr("y",a+n*o-t))),u=o*s.length}const d=r.node().getBBox();r.insert("rect",":first-child").attr("class","box").attr("x",i-l/2-ar().state.padding/2).attr("y",a-u/2-ar().state.padding/2-3.5).attr("width",l+ar().state.padding).attr("height",u+ar().state.padding),Nt.info(d)}Nu++}(e,c.edge(t),c.edge(t).relation))})),y=g.getBBox();const m={id:n||"root",label:n||"root",width:0,height:0};return m.width=y.width+2*Du.padding,m.height=y.height+2*Du.padding,Nt.debug("Doc rendered",m,c),m},Iu={setConf:function(){},draw:function(t,e,n,r){Du=ar().state;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body"),c="sandbox"===i?a.nodes()[0].contentDocument:document;Nt.debug("Rendering diagram "+t);const l=s.select(`[id='${e}']`);l.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z");new ht.k({multigraph:!0,compound:!0,rankdir:"RL"}).setDefaultEdgeLabel((function(){return{}}));const h=r.db.getRootDoc();Mu(h,l,void 0,!1,s,c,r);const u=Du.padding,d=l.node().getBBox(),p=d.width+2*u,f=d.height+2*u;dr(l,f,1.75*p,Du.useMaxWidth),l.attr("viewBox",`${d.x-Du.padding}  ${d.y-Du.padding} `+p+" "+f)}},Fu="rect",$u="rectWithTitle",Ru="statediagram",Zu="transition",Pu="parent",ju="note",Yu="----parent",zu="fill:none",Uu="fill: #333",Wu="text",qu="normal";let Hu={},Vu=0;function Gu(t="",e=0,n="",r="----"){return`state-${t}${null!==n&&n.length>0?`${r}${n}`:""}-${e}`}const Xu=(t,e,n,r,i,a)=>{const s=n.id,o=null==(c=r[s])?"":c.classes?c.classes.join(" "):"";var c;if("root"!==s){let e=Fu;!0===n.start&&(e="start"),!1===n.start&&(e="end"),n.type!==Qh&&(e=n.type),Hu[s]||(Hu[s]={id:s,shape:e,description:Yt.sanitizeText(s,ar()),classes:`${o} statediagram-state`});const r=Hu[s];n.description&&(Array.isArray(r.description)?(r.shape=$u,r.description.push(n.description)):r.description.length>0?(r.shape=$u,r.description===s?r.description=[n.description]:r.description=[r.description,n.description]):(r.shape=Fu,r.description=n.description),r.description=Yt.sanitizeTextOrArray(r.description,ar())),1===r.description.length&&r.shape===$u&&(r.shape=Fu),!r.type&&n.doc&&(Nt.info("Setting cluster for ",s,Qu(n)),r.type="group",r.dir=Qu(n),r.shape=n.type===Jh?"divider":"roundedWithTitle",r.classes=r.classes+" statediagram-cluster "+(a?"statediagram-cluster-alt":""));const i={labelStyle:"",shape:r.shape,labelText:r.description,classes:r.classes,style:"",id:s,dir:r.dir,domId:Gu(s,Vu),type:r.type,padding:15};if(n.note){const e={labelStyle:"",shape:"note",labelText:n.note.text,classes:"statediagram-note",style:"",id:s+"----note-"+Vu,domId:Gu(s,Vu,ju),type:r.type,padding:15},a={labelStyle:"",shape:"noteGroup",labelText:n.note.text,classes:r.classes,style:"",id:s+Yu,domId:Gu(s,Vu,Pu),type:"group",padding:0};Vu++;const o=s+Yu;t.setNode(o,a),t.setNode(e.id,e),t.setNode(s,i),t.setParent(s,o),t.setParent(e.id,o);let c=s,l=e.id;"left of"===n.note.position&&(c=e.id,l=s),t.setEdge(c,l,{arrowhead:"none",arrowType:"",style:zu,labelStyle:"",classes:"transition note-edge",arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu})}else t.setNode(s,i)}e&&"root"!==e.id&&(Nt.trace("Setting node ",s," to be child of its parent ",e.id),t.setParent(s,e.id)),n.doc&&(Nt.trace("Adding nodes children "),Ku(t,n,n.doc,r,i,!a))},Ku=(t,e,n,r,i,a)=>{Nt.trace("items",n),n.forEach((n=>{switch(n.stmt){case Xh:case Qh:Xu(t,e,n,r,i,a);break;case Kh:{Xu(t,e,n.state1,r,i,a),Xu(t,e,n.state2,r,i,a);const s={id:"edge"+Vu,arrowhead:"normal",arrowTypeEnd:"arrow_barb",style:zu,labelStyle:"",label:Yt.sanitizeText(n.description,ar()),arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu,classes:Zu};t.setEdge(n.state1.id,n.state2.id,s,Vu),Vu++}}}))},Qu=(t,e="TB")=>{let n=e;if(t.doc)for(let r=0;r<t.doc.length;r++){const e=t.doc[r];"dir"===e.stmt&&(n=e.value)}return n},Ju={setConf:function(t){const e=Object.keys(t);for(const n of e)t[n]},getClasses:function(t,e){Nt.trace("Extracting classes"),e.db.clear();try{return e.parser.parse(t),e.db.extract(e.db.getRootDocV2()),e.db.getClasses()}catch(n){return n}},draw:function(t,e,n,r){Nt.info("Drawing state diagram (v2)",e),Hu={};let i=r.db.getDirection();void 0===i&&(i="LR");const{securityLevel:a,state:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;Nt.info(r.db.getRootDocV2()),r.db.extract(r.db.getRootDocV2()),Nt.info(r.db.getRootDocV2());const h=r.db.getStates(),u=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:Qu(r.db.getRootDocV2()),nodesep:c,ranksep:l,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));let d;Xu(u,void 0,r.db.getRootDocV2(),h,r.db,!0),"sandbox"===a&&(d=(0,o.Ys)("#i"+e));const p="sandbox"===a?(0,o.Ys)(d.nodes()[0].contentDocument.body):(0,o.Ys)("body"),f=p.select(`[id="${e}"]`),g=p.select("#"+e+" g");qs(g,u,["barb"],Ru,e);Gn.insertTitle(f,"statediagramTitleText",s.titleTopMargin,r.db.getDiagramTitle());const y=f.node().getBBox(),m=y.width+16,b=y.height+16;f.attr("class",Ru);const _=f.node().getBBox();dr(f,b,m,s.useMaxWidth);const x=`${_.x-8} ${_.y-8} ${m} ${b}`;Nt.debug(`viewBox ${x}`),f.attr("viewBox",x);const v=document.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const o of v){const t=o.getBBox(),e=document.createElementNS("http://www.w3.org/2000/svg",Fu);e.setAttribute("rx",0),e.setAttribute("ry",0),e.setAttribute("width",t.width),e.setAttribute("height",t.height),o.insertBefore(e,o.firstChild)}}};var td=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,17,18,20,22,23,24,26],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,24],d=[4,6,9,11,17,18,20,22,23,24,26],p={trace:function(){},yy:{},symbols_:{error:2,start:3,journey:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,title:17,acc_title:18,acc_title_value:19,acc_descr:20,acc_descr_value:21,acc_descr_multiline_value:22,section:23,taskName:24,taskData:25,open_directive:26,type_directive:27,arg_directive:28,close_directive:29,$accept:0,$end:1},terminals_:{2:"error",4:"journey",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",17:"title",18:"acc_title",19:"acc_title_value",20:"acc_descr",21:"acc_descr_value",22:"acc_descr_multiline_value",23:"section",24:"taskName",25:"taskData",26:"open_directive",27:"type_directive",28:"arg_directive",29:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,2],[10,2],[10,1],[10,1],[10,2],[10,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 11:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 12:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 13:case 14:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 15:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 16:r.addTask(a[o-1],a[o]),this.$="task";break;case 18:r.parseDirective("%%{","open_directive");break;case 19:r.parseDirective(a[o],"type_directive");break;case 20:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 21:r.parseDirective("}%%","close_directive","journey")}},table:[{3:1,4:n,7:3,12:4,26:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,26:r},{13:8,27:[1,9]},{27:[2,18]},{6:[1,10],7:21,8:11,9:[1,12],10:13,11:[1,14],12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},{1:[2,2]},{14:22,15:[1,23],29:u},e([15,29],[2,19]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:21,10:25,12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),{19:[1,26]},{21:[1,27]},e(i,[2,14]),e(i,[2,15]),{25:[1,28]},e(i,[2,17]),{11:[1,29]},{16:30,28:[1,31]},{11:[2,21]},e(i,[2,5]),e(i,[2,12]),e(i,[2,13]),e(i,[2,16]),e(d,[2,9]),{14:32,29:u},{29:[2,20]},{11:[1,33]},e(d,[2,10])],defaultActions:{5:[2,18],7:[2,2],24:[2,21],31:[2,20]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},f=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),26;case 1:return this.begin("type_directive"),27;case 2:return this.popState(),this.begin("arg_directive"),15;case 3:return this.popState(),this.popState(),29;case 4:return 28;case 5:case 6:case 8:case 9:break;case 7:return 11;case 10:return 4;case 11:return 17;case 12:return this.begin("acc_title"),18;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),20;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:return 23;case 20:return 24;case 21:return 25;case 22:return 15;case 23:return 6;case 24:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:journey\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{open_directive:{rules:[1],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,11,12,14,16,19,20,21,22,23,24],inclusive:!0}}},t);function g(){this.yy={}}return p.lexer=f,g.prototype=p,p.Parser=g,new g}();td.parser=td;const ed=td,nd=t=>null!==t.match(/^\s*journey/);let rd="";const id=[],ad=[],sd=[],od=function(){let t=!0;for(const[e,n]of sd.entries())sd[e].processed,t=t&&n.processed;return t},cd={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().journey,clear:function(){id.length=0,ad.length=0,rd="",sd.length=0,Dr()},setDiagramTitle:$r,getDiagramTitle:Rr,setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){rd=t,id.push(t)},getSections:function(){return id},getTasks:function(){let t=od();let e=0;for(;!t&&e<100;)t=od(),e++;return ad.push(...sd),ad},addTask:function(t,e){const n=e.substr(1).split(":");let r=0,i=[];1===n.length?(r=Number(n[0]),i=[]):(r=Number(n[0]),i=n[1].split(","));const a=i.map((t=>t.trim())),s={section:rd,type:rd,people:a,task:t,score:r};sd.push(s)},addTaskOrg:function(t){const e={section:rd,type:rd,description:t,task:t,classes:[]};ad.push(e)},getActors:function(){return function(){const t=[];return ad.forEach((e=>{e.people&&t.push(...e.people)})),[...new Set(t)].sort()}()}},ld=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},hd=function(t,e){const n=t.append("circle");return n.attr("cx",e.cx),n.attr("cy",e.cy),n.attr("class","actor-"+e.pos),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("r",e.r),void 0!==n.class&&n.attr("class",n.class),void 0!==e.title&&n.append("title").text(e.title),n},ud=function(t,e){const n=e.text.replace(/<br\s*\/?>/gi," "),r=t.append("text");r.attr("x",e.x),r.attr("y",e.y),r.attr("class","legend"),r.style("text-anchor",e.anchor),void 0!==e.class&&r.attr("class",e.class);const i=r.append("tspan");return i.attr("x",e.x+2*e.textMargin),i.text(n),r};let dd=-1;const pd=function(){return{x:0,y:0,width:100,anchor:"start",height:100,rx:0,ry:0}},fd=function(){function t(t,e,n,i,a,s,o,c){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("font-color",c).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c,l){const{taskFontSize:h,taskFontFamily:u}=c,d=t.split(/<br\s*\/?>/gi);for(let p=0;p<d.length;p++){const t=p*h-h*(d.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).attr("fill",l).style("text-anchor","middle").style("font-size",h).style("font-family",u);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(d[p]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).attr("position","fixed").append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").attr("class","label").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)n in e&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),gd=hd,yd=function(t,e,n){const r=t.append("g"),i=pd();i.x=e.x,i.y=e.y,i.fill=e.fill,i.width=n.width,i.height=n.height,i.class="journey-section section-type-"+e.num,i.rx=3,i.ry=3,ld(r,i),fd(n)(e.text,r,i.x,i.y,i.width,i.height,{class:"journey-section section-type-"+e.num},n,e.colour)},md=ud,bd=function(t,e,n){const r=e.x+n.width/2,i=t.append("g");dd++;i.append("line").attr("id","task"+dd).attr("x1",r).attr("y1",e.y).attr("x2",r).attr("y2",450).attr("class","task-line").attr("stroke-width","1px").attr("stroke-dasharray","4 2").attr("stroke","#666"),function(t,e){const n=15,r=t.append("circle").attr("cx",e.cx).attr("cy",e.cy).attr("class","face").attr("r",n).attr("stroke-width",2).attr("overflow","visible"),i=t.append("g");i.append("circle").attr("cx",e.cx-5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),i.append("circle").attr("cx",e.cx+5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),e.score>3?function(t){const r=(0,o.Nb1)().startAngle(Math.PI/2).endAngle(Math.PI/2*3).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+2)+")")}(i):e.score<3?function(t){const r=(0,o.Nb1)().startAngle(3*Math.PI/2).endAngle(Math.PI/2*5).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+7)+")")}(i):i.append("line").attr("class","mouth").attr("stroke",2).attr("x1",e.cx-5).attr("y1",e.cy+7).attr("x2",e.cx+5).attr("y2",e.cy+7).attr("class","mouth").attr("stroke-width","1px").attr("stroke","#666")}(i,{cx:r,cy:300+30*(5-e.score),score:e.score});const a=pd();a.x=e.x,a.y=e.y,a.fill=e.fill,a.width=n.width,a.height=n.height,a.class="task task-type-"+e.num,a.rx=3,a.ry=3,ld(i,a);let s=e.x+14;e.people.forEach((t=>{const n=e.actors[t].color,r={cx:s,cy:e.y,r:7,fill:n,stroke:"#000",title:t,pos:e.actors[t].position};hd(i,r),s+=10})),fd(n)(e.task,i,a.x,a.y,a.width,a.height,{class:"task"},n,e.colour)},_d=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",5).attr("refY",2).attr("markerWidth",6).attr("markerHeight",4).attr("orient","auto").append("path").attr("d","M 0,0 V 4 L6,2 Z")},xd={};const vd=ar().journey,kd=vd.leftMargin,wd={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],init:function(){this.sequenceItems=[],this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=ar().journey,a=this;let s=0;var o;this.sequenceItems.forEach((function(c){s++;const l=a.sequenceItems.length-s+1;a.updateVal(c,"starty",e-l*i.boxMargin,Math.min),a.updateVal(c,"stopy",r+l*i.boxMargin,Math.max),a.updateVal(wd.data,"startx",t-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopx",n+l*i.boxMargin,Math.max),"activation"!==o&&(a.updateVal(c,"startx",t-l*i.boxMargin,Math.min),a.updateVal(c,"stopx",n+l*i.boxMargin,Math.max),a.updateVal(wd.data,"starty",e-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopy",r+l*i.boxMargin,Math.max))}))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(wd.data,"startx",i,Math.min),this.updateVal(wd.data,"starty",s,Math.min),this.updateVal(wd.data,"stopx",a,Math.max),this.updateVal(wd.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return this.data}},Ed=vd.sectionFills,Cd=vd.sectionColours,Td=function(t,e,n){const r=ar().journey;let i="";const a=n+(2*r.height+r.diagramMarginY);let s=0,o="#CCC",c="black",l=0;for(const[h,u]of e.entries()){if(i!==u.section){o=Ed[s%Ed.length],l=s%Ed.length,c=Cd[s%Cd.length];const e={x:h*r.taskMargin+h*r.width+kd,y:50,text:u.section,fill:o,num:l,colour:c};yd(t,e,r),i=u.section,s++}const e=u.people.reduce(((t,e)=>(xd[e]&&(t[e]=xd[e]),t)),{});u.x=h*r.taskMargin+h*r.width+kd,u.y=a,u.width=r.diagramMarginX,u.height=r.diagramMarginY,u.colour=c,u.fill=o,u.num=l,u.actors=e,bd(t,u,r),wd.insert(u.x,u.y,u.x+u.width+r.taskMargin,450)}},Sd={setConf:function(t){Object.keys(t).forEach((function(e){vd[e]=t[e]}))},draw:function(t,e,n,r){const i=ar().journey;r.db.clear(),r.parser.parse(t+"\n");const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body");wd.init();const l=c.select("#"+e);_d(l);const h=r.db.getTasks(),u=r.db.getDiagramTitle(),d=r.db.getActors();for(const o in xd)delete xd[o];let p=0;d.forEach((t=>{xd[t]={color:i.actorColours[p%i.actorColours.length],position:p},p++})),function(t){const e=ar().journey;let n=60;Object.keys(xd).forEach((r=>{const i=xd[r].color,a={cx:20,cy:n,r:7,fill:i,stroke:"#000",pos:xd[r].position};gd(t,a);const s={x:40,y:n+7,fill:"#666",text:r,textMargin:5|e.boxTextMargin};md(t,s),n+=20}))}(l),wd.insert(0,0,kd,50*Object.keys(xd).length),Td(l,h,0);const f=wd.getBounds();u&&l.append("text").text(u).attr("x",kd).attr("font-size","4ex").attr("font-weight","bold").attr("y",25);const g=f.stopy-f.starty+2*i.diagramMarginY,y=kd+f.stopx+2*i.diagramMarginX;dr(l,g,y,i.useMaxWidth),l.append("line").attr("x1",kd).attr("y1",4*i.height).attr("x2",y-kd-4).attr("y2",4*i.height).attr("stroke-width",4).attr("stroke","black").attr("marker-end","url(#arrowhead)");const m=u?70:0;l.attr("viewBox",`${f.startx} -25 ${y} ${g+m}`),l.attr("preserveAspectRatio","xMinYMin meet"),l.attr("height",g+m+25)}};let Ad={};const Ld={setConf:function(t){Ad={...Ad,...t}},draw:(t,e,n)=>{try{Nt.debug("Renering svg for syntax error\n");const t=(0,o.Ys)("#"+e),r=t.append("g");r.append("path").attr("class","error-icon").attr("d","m411.313,123.313c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32-9.375,9.375-20.688-20.688c-12.484-12.5-32.766-12.5-45.25,0l-16,16c-1.261,1.261-2.304,2.648-3.31,4.051-21.739-8.561-45.324-13.426-70.065-13.426-105.867,0-192,86.133-192,192s86.133,192 192,192 192-86.133 192-192c0-24.741-4.864-48.327-13.426-70.065 1.402-1.007 2.79-2.049 4.051-3.31l16-16c12.5-12.492 12.5-32.758 0-45.25l-20.688-20.688 9.375-9.375 32.001-31.999zm-219.313,100.687c-52.938,0-96,43.063-96,96 0,8.836-7.164,16-16,16s-16-7.164-16-16c0-70.578 57.422-128 128-128 8.836,0 16,7.164 16,16s-7.164,16-16,16z"),r.append("path").attr("class","error-icon").attr("d","m459.02,148.98c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l16,16c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16.001-16z"),r.append("path").attr("class","error-icon").attr("d","m340.395,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16-16c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l15.999,16z"),r.append("path").attr("class","error-icon").attr("d","m400,64c8.844,0 16-7.164 16-16v-32c0-8.836-7.156-16-16-16-8.844,0-16,7.164-16,16v32c0,8.836 7.156,16 16,16z"),r.append("path").attr("class","error-icon").attr("d","m496,96.586h-32c-8.844,0-16,7.164-16,16 0,8.836 7.156,16 16,16h32c8.844,0 16-7.164 16-16 0-8.836-7.156-16-16-16z"),r.append("path").attr("class","error-icon").attr("d","m436.98,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688l32-32c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32c-6.251,6.25-6.251,16.375-0.001,22.625z"),r.append("text").attr("class","error-text").attr("x",1440).attr("y",250).attr("font-size","150px").style("text-anchor","middle").text("Syntax error in graph"),r.append("text").attr("class","error-text").attr("x",1250).attr("y",400).attr("font-size","100px").style("text-anchor","middle").text("mermaid version "+n),t.attr("height",100),t.attr("width",500),t.attr("viewBox","768 0 912 512")}catch(i){Nt.error("Error while rendering info diagram"),Nt.error((r=i)instanceof Error?r.message:String(r))}var r}},Bd="flowchart-elk",Nd={id:Bd,detector:(t,e)=>{var n;return!!(t.match(/^\s*flowchart-elk/)||t.match(/^\s*flowchart|graph/)&&"elk"===(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer))},loader:async()=>{const{diagram:t}=await n.e(9487).then(n.bind(n,9487));return{id:Bd,diagram:t}}},Dd="timeline",Od={id:Dd,detector:t=>null!==t.match(/^\s*timeline/),loader:async()=>{const{diagram:t}=await n.e(6316).then(n.bind(n,6316));return{id:Dd,diagram:t}}},Md="mindmap",Id={id:Md,detector:t=>null!==t.match(/^\s*mindmap/),loader:async()=>{const{diagram:t}=await n.e(7724).then(n.bind(n,7724));return{id:Md,diagram:t}}};let Fd=!1;const $d=()=>{Fd||(Fd=!0,En(Nd,Od,Id),Kr("error",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{}},init:()=>{}},(t=>"error"===t.toLowerCase().trim())),Kr("---",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{throw new Error("Diagrams beginning with --- are not valid. If you were trying to use a YAML front-matter, please ensure that you've correctly opened and closed the YAML front-matter with unindented `---` blocks")}},init:()=>null},(t=>t.toLowerCase().trimStart().startsWith("---"))),Kr("c4",{parser:Fi,db:Ki,renderer:La,styles:Cr,init:t=>{La.setConf(t.c4)}},$i),Kr("class",{parser:Na,db:Ga,renderer:cs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Da),Kr("classDiagram",{parser:Na,db:Ga,renderer:Xs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Oa),Kr("er",{parser:Qs,db:ro,renderer:yo,styles:gr},Js),Kr("gantt",{parser:Cc,db:il,renderer:ol,styles:br},Tc),Kr("info",{parser:ll,db:dl,renderer:pl,styles:_r},fl),Kr("pie",{parser:yl,db:xl,renderer:El,styles:xr},ml),Kr("requirement",{parser:Tl,db:Ol,renderer:Ul,styles:vr},Sl),Kr("sequence",{parser:ql,db:ph,renderer:Wh,styles:kr,init:t=>{if(t.sequence||(t.sequence={}),t.sequence.arrowMarkerAbsolute=t.arrowMarkerAbsolute,"sequenceDiagram"in t)throw new Error("`mermaid config.sequenceDiagram` has been renamed to `config.sequence`. Please update your mermaid config.");ph.setWrap(t.wrap),Wh.setConf(t.sequence)}},Hl),Kr("state",{parser:Hh,db:Eu,renderer:Iu,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Vh),Kr("stateDiagram",{parser:Hh,db:Eu,renderer:Ju,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Gh),Kr("journey",{parser:ed,db:cd,renderer:Sd,styles:Er,init:t=>{Sd.setConf(t.journey),cd.clear()}},nd),Kr("flowchart",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,_c(t.flowchart),yc.clear(),yc.setGen("gen-1")}},_o),Kr("flowchart-v2",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,ir({flowchart:{arrowMarkerAbsolute:t.arrowMarkerAbsolute}}),wc.setConf(t.flowchart),yc.clear(),yc.setGen("gen-2")}},xo),Kr("gitGraph",{parser:ti,db:bi,renderer:Oi,styles:Mi},ei))};class Rd{constructor(t,e){var n,r;this.txt=t,this.type="graph",this.detectTypeFailed=!1;const i=ar();this.txt=t;try{this.type=wn(t,i)}catch(o){this.handleError(o,e),this.type="error",this.detectTypeFailed=!0}const a=Qr(this.type);Nt.debug("Type "+this.type),this.db=a.db,null==(r=(n=this.db).clear)||r.call(n),this.renderer=a.renderer,this.parser=a.parser;const s=this.parser.parse.bind(this.parser);this.parser.parse=t=>s(function(t,e){var n;const r=t.match(_n);if(r){const i=bn(r[1],{schema:mn});return(null==i?void 0:i.title)&&(null==(n=e.setDiagramTitle)||n.call(e,i.title)),t.slice(r[0].length)}return t}(t,this.db)),this.parser.parser.yy=this.db,a.init&&(a.init(i),Nt.info("Initialized diagram "+this.type,i)),this.txt+="\n",this.parse(this.txt,e)}parse(t,e){var n,r;if(this.detectTypeFailed)return!1;try{return t+="\n",null==(r=(n=this.db).clear)||r.call(n),this.parser.parse(t),!0}catch(i){this.handleError(i,e)}return!1}handleError(t,e){if(void 0===e)throw t;Hn(t)?e(t.str,t.hash):e(t)}getParser(){return this.parser}getType(){return this.type}}const Zd=(t,e)=>{const n=wn(t,ar());try{Qr(n)}catch(r){const i=kn[n].loader;if(!i)throw new Error(`Diagram ${n} not found.`);return i().then((({diagram:r})=>(Kr(n,r,void 0),new Rd(t,e))))}return new Rd(t,e)},Pd=Rd;const jd=["graph","flowchart","flowchart-v2","stateDiagram","stateDiagram-v2"],Yd="graph TB;a[Maximum text size in diagram exceeded];style a fill:#faa",zd="sandbox",Ud="loose",Wd="http://www.w3.org/1999/xlink",qd="http://www.w3.org/1999/xhtml",Hd=["foreignobject"],Vd=["dominant-baseline"];const Gd=function(t){let e=t;return e=e.replace(/style.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/classDef.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/#\w+;/g,(function(t){const e=t.substring(1,t.length-1);return/^\+?\d+$/.test(e)?"\ufb02\xb0\xb0"+e+"\xb6\xdf":"\ufb02\xb0"+e+"\xb6\xdf"})),e},Xd=function(t){let e=t;return e=e.replace(/\ufb02\xb0\xb0/g,"&#"),e=e.replace(/\ufb02\xb0/g,"&"),e=e.replace(/\xb6\xdf/g,";"),e},Kd=(t,e,n=[])=>`\n.${t} ${e} { ${n.join(" !important; ")} !important; }`,Qd=(t,e,n,r)=>{const i=((t,e,n={})=>{var r;let i="";if(void 0!==t.themeCSS&&(i+=`\n${t.themeCSS}`),void 0!==t.fontFamily&&(i+=`\n:root { --mermaid-font-family: ${t.fontFamily}}`),void 0!==t.altFontFamily&&(i+=`\n:root { --mermaid-alt-font-family: ${t.altFontFamily}}`),!(0,Lt.Z)(n)&&jd.includes(e)){const e=["> *","span"],a=["rect","polygon","ellipse","circle","path"],s=t.htmlLabels||(null==(r=t.flowchart)?void 0:r.htmlLabels)?e:a;for(const t in n){const e=n[t];(0,Lt.Z)(e.styles)||s.forEach((t=>{i+=Kd(e.id,t,e.styles)})),(0,Lt.Z)(e.textStyles)||(i+=Kd(e.id,"tspan",e.textStyles))}}return i})(t,e,n);return I(it(`${r}{${Sr(e,i,t.themeVariables)}}`),F)},Jd=(t="",e,n)=>{let r=t;return n||e||(r=r.replace(/marker-end="url\(.*?#/g,'marker-end="url(#')),r=Xd(r),r=r.replace(/<br>/g,"<br/>"),r},tp=(t="",e)=>`<iframe style="width:100%;height:${e?e.viewBox.baseVal.height+"px":"100%"};border:0;margin:0;" src="data:text/html;base64,${btoa('<body style="margin:0">'+t+"</body>")}" sandbox="allow-top-navigation-by-user-activation allow-popups">\n  The "iframe" tag is not supported by your browser.\n</iframe>`,ep=(t,e,n,r,i)=>{const a=t.append("div");a.attr("id",n),r&&a.attr("style",r);const s=a.append("svg").attr("id",e).attr("width","100%").attr("xmlns","http://www.w3.org/2000/svg");return i&&s.attr("xmlns:xlink",i),s.append("g"),t};function np(t,e){return t.append("iframe").attr("id",e).attr("style","width: 100%; height: 100%;").attr("sandbox","")}const rp=(t,e,n,r)=>{var i,a,s;null==(i=t.getElementById(e))||i.remove(),null==(a=t.getElementById(n))||a.remove(),null==(s=t.getElementById(r))||s.remove()};function ip(t,e,n,r){var i,a;a=t,(i=e).attr("role","graphics-document document"),(0,Lt.Z)(a)||i.attr("aria-roledescription",a),function(t,e,n,r){if(void 0!==t.insert&&(e||n)){if(n){const e="chart-desc-"+r;t.attr("aria-describedby",e),t.insert("desc",":first-child").attr("id",e).text(n)}if(e){const n="chart-title-"+r;t.attr("aria-labelledby",n),t.insert("title",":first-child").attr("id",n).text(e)}}}(e,n,r,e.attr("id"))}const ap=Object.freeze({render:function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{if(v=Zd(e),"then"in v)throw new Error("Diagram is a promise. Use renderAsync.")}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},renderAsync:async function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{v=await Zd(e)}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{await v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},parse:function(t,e){return $d(),new Pd(t,e).parse(t,e)},parseAsync:async function(t,e){return $d(),(await Zd(t,e)).parse(t,e)},parseDirective:Yr,initialize:function(t={}){var e;(null==t?void 0:t.fontFamily)&&!(null==(e=t.themeVariables)?void 0:e.fontFamily)&&(t.themeVariables={fontFamily:t.fontFamily}),Qn=Sn({},t),(null==t?void 0:t.theme)&&t.theme in Ht?t.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables):t&&(t.themeVariables=Ht.default.getThemeVariables(t.themeVariables));const n="object"==typeof t?(t=>(Jn=Sn({},Kn),Jn=Sn(Jn,t),t.theme&&Ht[t.theme]&&(Jn.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables)),nr(Jn,tr),Jn))(t):rr();Dt(n.logLevel),$d()},getConfig:ar,setConfig:ir,getSiteConfig:rr,updateSiteConfig:t=>(Jn=Sn(Jn,t),nr(Jn,tr),Jn),reset:()=>{cr()},globalReset:()=>{cr(Kn)},defaultConfig:Kn});Dt(ar().logLevel),cr(ar());const sp=(t,e,n)=>{Nt.warn(t),Hn(t)?(n&&n(t.str,t.hash),e.push({...t,message:t.str,error:t})):(n&&n(t),t instanceof Error&&e.push({str:t.message,message:t.message,hash:t.name,error:t}))},op=async function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{await ap.renderAsync(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},cp=function(){if(dp.startOnLoad){const{startOnLoad:t}=ap.getConfig();t&&dp.init().catch((t=>Nt.error("Mermaid failed to initialize",t)))}};"undefined"!=typeof document&&window.addEventListener("load",cp,!1);const lp=[];let hp=!1;const up=async()=>{if(!hp){for(hp=!0;lp.length>0;){const e=lp.shift();if(e)try{await e()}catch(t){Nt.error("Error executing queue",t)}}hp=!1}},dp={startOnLoad:!0,diagrams:{},mermaidAPI:ap,parse:t=>ap.parse(t,dp.parseError),parseAsync:t=>new Promise(((e,n)=>{lp.push((()=>new Promise(((r,i)=>{ap.parseAsync(t,dp.parseError).then((t=>{r(t),e(t)}),(t=>{Nt.error("Error parsing",t),i(t),n(t)}))})))),up().catch(n)})),render:ap.render,renderAsync:(t,e,n,r)=>new Promise(((i,a)=>{lp.push((()=>new Promise(((s,o)=>{ap.renderAsync(t,e,n,r).then((t=>{s(t),i(t)}),(t=>{Nt.error("Error parsing",t),o(t),a(t)}))})))),up().catch(a)})),init:async function(t,e,n){try{await op(t,e,n)}catch(r){Nt.warn("Syntax Error rendering"),Hn(r)&&Nt.warn(r.str),dp.parseError&&dp.parseError(r)}},initThrowsErrors:function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{ap.render(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},initThrowsErrorsAsync:op,registerExternalDiagrams:async(t,{lazyLoad:e=!0}={})=>{e?En(...t):await(async(...t)=>{Nt.debug(`Loading ${t.length} external diagrams`);const e=(await Promise.allSettled(t.map((async({id:t,detector:e,loader:n})=>{const{diagram:r}=await n();Kr(t,r,e)})))).filter((t=>"rejected"===t.status));if(e.length>0){Nt.error(`Failed to load ${e.length} external diagrams`);for(const t of e)Nt.error(t);throw new Error(`Failed to load ${e.length} external diagrams`)}})(...t)},initialize:function(t){ap.initialize(t)},parseError:void 0,contentLoaded:cp,setParseErrorHandler:function(t){dp.parseError=t}}},7594:(t,e)=>{function n(t){let e,n=[];for(let r of t.split(",").map((t=>t.trim())))if(/^-?\d+$/.test(r))n.push(parseInt(r,10));else if(e=r.match(/^(-?\d+)(-|\.\.\.?|\u2025|\u2026|\u22EF)(-?\d+)$/)){let[t,r,i,a]=e;if(r&&a){r=parseInt(r),a=parseInt(a);const t=r<a?1:-1;"-"!==i&&".."!==i&&"\u2025"!==i||(a+=t);for(let e=r;e!==a;e+=t)n.push(e)}}return n}e.default=n,t.exports=n},9373:(t,e,n)=>{"use strict";function r(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n<r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n<i||void 0===n&&i>=i)&&(n=i)}return n}function i(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n>r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n>i||void 0===n&&i>=i)&&(n=i)}return n}function a(t){return t}n.d(e,{Nb1:()=>ao,LLu:()=>f,F5q:()=>p,$0Z:()=>_o,Dts:()=>vo,WQY:()=>wo,qpX:()=>Co,u93:()=>To,tFB:()=>Ao,YY7:()=>No,OvA:()=>Oo,dCK:()=>Io,zgE:()=>Ro,fGX:()=>Po,$m7:()=>Yo,c_6:()=>co,fxm:()=>Uo,FdL:()=>Qo,ak_:()=>Jo,SxZ:()=>nc,eA_:()=>ic,jsv:()=>sc,iJ:()=>ac,JHv:()=>dr,jvg:()=>uo,Fp7:()=>r,VV$:()=>i,ve8:()=>go,BYU:()=>ai,PKp:()=>di,Xf:()=>As,Ys:()=>Ls,td_:()=>Bs,YPS:()=>Hn,rr1:()=>Li,i$Z:()=>oa,WQD:()=>Si,Z_i:()=>Ci,F0B:()=>Vi,NGh:()=>Oi});var s=1e-6;function o(t){return"translate("+t+",0)"}function c(t){return"translate(0,"+t+")"}function l(t){return e=>+t(e)}function h(t,e){return e=Math.max(0,t.bandwidth()-2*e)/2,t.round()&&(e=Math.round(e)),n=>+t(n)+e}function u(){return!this.__axis}function d(t,e){var n=[],r=null,i=null,d=6,p=6,f=3,g="undefined"!=typeof window&&window.devicePixelRatio>1?0:.5,y=1===t||4===t?-1:1,m=4===t||2===t?"x":"y",b=1===t||3===t?o:c;function _(o){var c=null==r?e.ticks?e.ticks.apply(e,n):e.domain():r,_=null==i?e.tickFormat?e.tickFormat.apply(e,n):a:i,x=Math.max(d,0)+f,v=e.range(),k=+v[0]+g,w=+v[v.length-1]+g,E=(e.bandwidth?h:l)(e.copy(),g),C=o.selection?o.selection():o,T=C.selectAll(".domain").data([null]),S=C.selectAll(".tick").data(c,e).order(),A=S.exit(),L=S.enter().append("g").attr("class","tick"),B=S.select("line"),N=S.select("text");T=T.merge(T.enter().insert("path",".tick").attr("class","domain").attr("stroke","currentColor")),S=S.merge(L),B=B.merge(L.append("line").attr("stroke","currentColor").attr(m+"2",y*d)),N=N.merge(L.append("text").attr("fill","currentColor").attr(m,y*x).attr("dy",1===t?"0em":3===t?"0.71em":"0.32em")),o!==C&&(T=T.transition(o),S=S.transition(o),B=B.transition(o),N=N.transition(o),A=A.transition(o).attr("opacity",s).attr("transform",(function(t){return isFinite(t=E(t))?b(t+g):this.getAttribute("transform")})),L.attr("opacity",s).attr("transform",(function(t){var e=this.parentNode.__axis;return b((e&&isFinite(e=e(t))?e:E(t))+g)}))),A.remove(),T.attr("d",4===t||2===t?p?"M"+y*p+","+k+"H"+g+"V"+w+"H"+y*p:"M"+g+","+k+"V"+w:p?"M"+k+","+y*p+"V"+g+"H"+w+"V"+y*p:"M"+k+","+g+"H"+w),S.attr("opacity",1).attr("transform",(function(t){return b(E(t)+g)})),B.attr(m+"2",y*d),N.attr(m,y*x).text(_),C.filter(u).attr("fill","none").attr("font-size",10).attr("font-family","sans-serif").attr("text-anchor",2===t?"start":4===t?"end":"middle"),C.each((function(){this.__axis=E}))}return _.scale=function(t){return arguments.length?(e=t,_):e},_.ticks=function(){return n=Array.from(arguments),_},_.tickArguments=function(t){return arguments.length?(n=null==t?[]:Array.from(t),_):n.slice()},_.tickValues=function(t){return arguments.length?(r=null==t?null:Array.from(t),_):r&&r.slice()},_.tickFormat=function(t){return arguments.length?(i=t,_):i},_.tickSize=function(t){return arguments.length?(d=p=+t,_):d},_.tickSizeInner=function(t){return arguments.length?(d=+t,_):d},_.tickSizeOuter=function(t){return arguments.length?(p=+t,_):p},_.tickPadding=function(t){return arguments.length?(f=+t,_):f},_.offset=function(t){return arguments.length?(g=+t,_):g},_}function p(t){return d(1,t)}function f(t){return d(3,t)}function g(){}function y(t){return null==t?g:function(){return this.querySelector(t)}}function m(t){return null==t?[]:Array.isArray(t)?t:Array.from(t)}function b(){return[]}function _(t){return null==t?b:function(){return this.querySelectorAll(t)}}function x(t){return function(){return this.matches(t)}}function v(t){return function(e){return e.matches(t)}}var k=Array.prototype.find;function w(){return this.firstElementChild}var E=Array.prototype.filter;function C(){return Array.from(this.children)}function T(t){return new Array(t.length)}function S(t,e){this.ownerDocument=t.ownerDocument,this.namespaceURI=t.namespaceURI,this._next=null,this._parent=t,this.__data__=e}function A(t){return function(){return t}}function L(t,e,n,r,i,a){for(var s,o=0,c=e.length,l=a.length;o<l;++o)(s=e[o])?(s.__data__=a[o],r[o]=s):n[o]=new S(t,a[o]);for(;o<c;++o)(s=e[o])&&(i[o]=s)}function B(t,e,n,r,i,a,s){var o,c,l,h=new Map,u=e.length,d=a.length,p=new Array(u);for(o=0;o<u;++o)(c=e[o])&&(p[o]=l=s.call(c,c.__data__,o,e)+"",h.has(l)?i[o]=c:h.set(l,c));for(o=0;o<d;++o)l=s.call(t,a[o],o,a)+"",(c=h.get(l))?(r[o]=c,c.__data__=a[o],h.delete(l)):n[o]=new S(t,a[o]);for(o=0;o<u;++o)(c=e[o])&&h.get(p[o])===c&&(i[o]=c)}function N(t){return t.__data__}function D(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function O(t,e){return t<e?-1:t>e?1:t>=e?0:NaN}S.prototype={constructor:S,appendChild:function(t){return this._parent.insertBefore(t,this._next)},insertBefore:function(t,e){return this._parent.insertBefore(t,e)},querySelector:function(t){return this._parent.querySelector(t)},querySelectorAll:function(t){return this._parent.querySelectorAll(t)}};var M="http://www.w3.org/1999/xhtml";const I={svg:"http://www.w3.org/2000/svg",xhtml:M,xlink:"http://www.w3.org/1999/xlink",xml:"http://www.w3.org/XML/1998/namespace",xmlns:"http://www.w3.org/2000/xmlns/"};function F(t){var e=t+="",n=e.indexOf(":");return n>=0&&"xmlns"!==(e=t.slice(0,n))&&(t=t.slice(n+1)),I.hasOwnProperty(e)?{space:I[e],local:t}:t}function $(t){return function(){this.removeAttribute(t)}}function R(t){return function(){this.removeAttributeNS(t.space,t.local)}}function Z(t,e){return function(){this.setAttribute(t,e)}}function P(t,e){return function(){this.setAttributeNS(t.space,t.local,e)}}function j(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttribute(t):this.setAttribute(t,n)}}function Y(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttributeNS(t.space,t.local):this.setAttributeNS(t.space,t.local,n)}}function z(t){return t.ownerDocument&&t.ownerDocument.defaultView||t.document&&t||t.defaultView}function U(t){return function(){this.style.removeProperty(t)}}function W(t,e,n){return function(){this.style.setProperty(t,e,n)}}function q(t,e,n){return function(){var r=e.apply(this,arguments);null==r?this.style.removeProperty(t):this.style.setProperty(t,r,n)}}function H(t,e){return t.style.getPropertyValue(e)||z(t).getComputedStyle(t,null).getPropertyValue(e)}function V(t){return function(){delete this[t]}}function G(t,e){return function(){this[t]=e}}function X(t,e){return function(){var n=e.apply(this,arguments);null==n?delete this[t]:this[t]=n}}function K(t){return t.trim().split(/^|\s+/)}function Q(t){return t.classList||new J(t)}function J(t){this._node=t,this._names=K(t.getAttribute("class")||"")}function tt(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.add(e[r])}function et(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.remove(e[r])}function nt(t){return function(){tt(this,t)}}function rt(t){return function(){et(this,t)}}function it(t,e){return function(){(e.apply(this,arguments)?tt:et)(this,t)}}function at(){this.textContent=""}function st(t){return function(){this.textContent=t}}function ot(t){return function(){var e=t.apply(this,arguments);this.textContent=null==e?"":e}}function ct(){this.innerHTML=""}function lt(t){return function(){this.innerHTML=t}}function ht(t){return function(){var e=t.apply(this,arguments);this.innerHTML=null==e?"":e}}function ut(){this.nextSibling&&this.parentNode.appendChild(this)}function dt(){this.previousSibling&&this.parentNode.insertBefore(this,this.parentNode.firstChild)}function pt(t){return function(){var e=this.ownerDocument,n=this.namespaceURI;return n===M&&e.documentElement.namespaceURI===M?e.createElement(t):e.createElementNS(n,t)}}function ft(t){return function(){return this.ownerDocument.createElementNS(t.space,t.local)}}function gt(t){var e=F(t);return(e.local?ft:pt)(e)}function yt(){return null}function mt(){var t=this.parentNode;t&&t.removeChild(this)}function bt(){var t=this.cloneNode(!1),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function _t(){var t=this.cloneNode(!0),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function xt(t){return t.trim().split(/^|\s+/).map((function(t){var e="",n=t.indexOf(".");return n>=0&&(e=t.slice(n+1),t=t.slice(0,n)),{type:t,name:e}}))}function vt(t){return function(){var e=this.__on;if(e){for(var n,r=0,i=-1,a=e.length;r<a;++r)n=e[r],t.type&&n.type!==t.type||n.name!==t.name?e[++i]=n:this.removeEventListener(n.type,n.listener,n.options);++i?e.length=i:delete this.__on}}}function kt(t,e,n){return function(){var r,i=this.__on,a=function(t){return function(e){t.call(this,e,this.__data__)}}(e);if(i)for(var s=0,o=i.length;s<o;++s)if((r=i[s]).type===t.type&&r.name===t.name)return this.removeEventListener(r.type,r.listener,r.options),this.addEventListener(r.type,r.listener=a,r.options=n),void(r.value=e);this.addEventListener(t.type,a,n),r={type:t.type,name:t.name,value:e,listener:a,options:n},i?i.push(r):this.__on=[r]}}function wt(t,e,n){var r=z(t),i=r.CustomEvent;"function"==typeof i?i=new i(e,n):(i=r.document.createEvent("Event"),n?(i.initEvent(e,n.bubbles,n.cancelable),i.detail=n.detail):i.initEvent(e,!1,!1)),t.dispatchEvent(i)}function Et(t,e){return function(){return wt(this,t,e)}}function Ct(t,e){return function(){return wt(this,t,e.apply(this,arguments))}}J.prototype={add:function(t){this._names.indexOf(t)<0&&(this._names.push(t),this._node.setAttribute("class",this._names.join(" ")))},remove:function(t){var e=this._names.indexOf(t);e>=0&&(this._names.splice(e,1),this._node.setAttribute("class",this._names.join(" ")))},contains:function(t){return this._names.indexOf(t)>=0}};var Tt=[null];function St(t,e){this._groups=t,this._parents=e}function At(){return new St([[document.documentElement]],Tt)}St.prototype=At.prototype={constructor:St,select:function(t){"function"!=typeof t&&(t=y(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s,o=e[i],c=o.length,l=r[i]=new Array(c),h=0;h<c;++h)(a=o[h])&&(s=t.call(a,a.__data__,h,o))&&("__data__"in a&&(s.__data__=a.__data__),l[h]=s);return new St(r,this._parents)},selectAll:function(t){t="function"==typeof t?function(t){return function(){return m(t.apply(this,arguments))}}(t):_(t);for(var e=this._groups,n=e.length,r=[],i=[],a=0;a<n;++a)for(var s,o=e[a],c=o.length,l=0;l<c;++l)(s=o[l])&&(r.push(t.call(s,s.__data__,l,o)),i.push(s));return new St(r,i)},selectChild:function(t){return this.select(null==t?w:function(t){return function(){return k.call(this.children,t)}}("function"==typeof t?t:v(t)))},selectChildren:function(t){return this.selectAll(null==t?C:function(t){return function(){return E.call(this.children,t)}}("function"==typeof t?t:v(t)))},filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new St(r,this._parents)},data:function(t,e){if(!arguments.length)return Array.from(this,N);var n=e?B:L,r=this._parents,i=this._groups;"function"!=typeof t&&(t=A(t));for(var a=i.length,s=new Array(a),o=new Array(a),c=new Array(a),l=0;l<a;++l){var h=r[l],u=i[l],d=u.length,p=D(t.call(h,h&&h.__data__,l,r)),f=p.length,g=o[l]=new Array(f),y=s[l]=new Array(f),m=c[l]=new Array(d);n(h,u,g,y,m,p,e);for(var b,_,x=0,v=0;x<f;++x)if(b=g[x]){for(x>=v&&(v=x+1);!(_=y[v])&&++v<f;);b._next=_||null}}return(s=new St(s,r))._enter=o,s._exit=c,s},enter:function(){return new St(this._enter||this._groups.map(T),this._parents)},exit:function(){return new St(this._exit||this._groups.map(T),this._parents)},join:function(t,e,n){var r=this.enter(),i=this,a=this.exit();return"function"==typeof t?(r=t(r))&&(r=r.selection()):r=r.append(t+""),null!=e&&(i=e(i))&&(i=i.selection()),null==n?a.remove():n(a),r&&i?r.merge(i).order():i},merge:function(t){for(var e=t.selection?t.selection():t,n=this._groups,r=e._groups,i=n.length,a=r.length,s=Math.min(i,a),o=new Array(i),c=0;c<s;++c)for(var l,h=n[c],u=r[c],d=h.length,p=o[c]=new Array(d),f=0;f<d;++f)(l=h[f]||u[f])&&(p[f]=l);for(;c<i;++c)o[c]=n[c];return new St(o,this._parents)},selection:function(){return this},order:function(){for(var t=this._groups,e=-1,n=t.length;++e<n;)for(var r,i=t[e],a=i.length-1,s=i[a];--a>=0;)(r=i[a])&&(s&&4^r.compareDocumentPosition(s)&&s.parentNode.insertBefore(r,s),s=r);return this},sort:function(t){function e(e,n){return e&&n?t(e.__data__,n.__data__):!e-!n}t||(t=O);for(var n=this._groups,r=n.length,i=new Array(r),a=0;a<r;++a){for(var s,o=n[a],c=o.length,l=i[a]=new Array(c),h=0;h<c;++h)(s=o[h])&&(l[h]=s);l.sort(e)}return new St(i,this._parents).order()},call:function(){var t=arguments[0];return arguments[0]=this,t.apply(null,arguments),this},nodes:function(){return Array.from(this)},node:function(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r=t[e],i=0,a=r.length;i<a;++i){var s=r[i];if(s)return s}return null},size:function(){let t=0;for(const e of this)++t;return t},empty:function(){return!this.node()},each:function(t){for(var e=this._groups,n=0,r=e.length;n<r;++n)for(var i,a=e[n],s=0,o=a.length;s<o;++s)(i=a[s])&&t.call(i,i.__data__,s,a);return this},attr:function(t,e){var n=F(t);if(arguments.length<2){var r=this.node();return n.local?r.getAttributeNS(n.space,n.local):r.getAttribute(n)}return this.each((null==e?n.local?R:$:"function"==typeof e?n.local?Y:j:n.local?P:Z)(n,e))},style:function(t,e,n){return arguments.length>1?this.each((null==e?U:"function"==typeof e?q:W)(t,e,null==n?"":n)):H(this.node(),t)},property:function(t,e){return arguments.length>1?this.each((null==e?V:"function"==typeof e?X:G)(t,e)):this.node()[t]},classed:function(t,e){var n=K(t+"");if(arguments.length<2){for(var r=Q(this.node()),i=-1,a=n.length;++i<a;)if(!r.contains(n[i]))return!1;return!0}return this.each(("function"==typeof e?it:e?nt:rt)(n,e))},text:function(t){return arguments.length?this.each(null==t?at:("function"==typeof t?ot:st)(t)):this.node().textContent},html:function(t){return arguments.length?this.each(null==t?ct:("function"==typeof t?ht:lt)(t)):this.node().innerHTML},raise:function(){return this.each(ut)},lower:function(){return this.each(dt)},append:function(t){var e="function"==typeof t?t:gt(t);return this.select((function(){return this.appendChild(e.apply(this,arguments))}))},insert:function(t,e){var n="function"==typeof t?t:gt(t),r=null==e?yt:"function"==typeof e?e:y(e);return this.select((function(){return this.insertBefore(n.apply(this,arguments),r.apply(this,arguments)||null)}))},remove:function(){return this.each(mt)},clone:function(t){return this.select(t?_t:bt)},datum:function(t){return arguments.length?this.property("__data__",t):this.node().__data__},on:function(t,e,n){var r,i,a=xt(t+""),s=a.length;if(!(arguments.length<2)){for(o=e?kt:vt,r=0;r<s;++r)this.each(o(a[r],e,n));return this}var o=this.node().__on;if(o)for(var c,l=0,h=o.length;l<h;++l)for(r=0,c=o[l];r<s;++r)if((i=a[r]).type===c.type&&i.name===c.name)return c.value},dispatch:function(t,e){return this.each(("function"==typeof e?Ct:Et)(t,e))},[Symbol.iterator]:function*(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r,i=t[e],a=0,s=i.length;a<s;++a)(r=i[a])&&(yield r)}};const Lt=At;var Bt={value:()=>{}};function Nt(){for(var t,e=0,n=arguments.length,r={};e<n;++e){if(!(t=arguments[e]+"")||t in r||/[\s.]/.test(t))throw new Error("illegal type: "+t);r[t]=[]}return new Dt(r)}function Dt(t){this._=t}function Ot(t,e){return t.trim().split(/^|\s+/).map((function(t){var n="",r=t.indexOf(".");if(r>=0&&(n=t.slice(r+1),t=t.slice(0,r)),t&&!e.hasOwnProperty(t))throw new Error("unknown type: "+t);return{type:t,name:n}}))}function Mt(t,e){for(var n,r=0,i=t.length;r<i;++r)if((n=t[r]).name===e)return n.value}function It(t,e,n){for(var r=0,i=t.length;r<i;++r)if(t[r].name===e){t[r]=Bt,t=t.slice(0,r).concat(t.slice(r+1));break}return null!=n&&t.push({name:e,value:n}),t}Dt.prototype=Nt.prototype={constructor:Dt,on:function(t,e){var n,r=this._,i=Ot(t+"",r),a=-1,s=i.length;if(!(arguments.length<2)){if(null!=e&&"function"!=typeof e)throw new Error("invalid callback: "+e);for(;++a<s;)if(n=(t=i[a]).type)r[n]=It(r[n],t.name,e);else if(null==e)for(n in r)r[n]=It(r[n],t.name,null);return this}for(;++a<s;)if((n=(t=i[a]).type)&&(n=Mt(r[n],t.name)))return n},copy:function(){var t={},e=this._;for(var n in e)t[n]=e[n].slice();return new Dt(t)},call:function(t,e){if((n=arguments.length-2)>0)for(var n,r,i=new Array(n),a=0;a<n;++a)i[a]=arguments[a+2];if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(a=0,n=(r=this._[t]).length;a<n;++a)r[a].value.apply(e,i)},apply:function(t,e,n){if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(var r=this._[t],i=0,a=r.length;i<a;++i)r[i].value.apply(e,n)}};const Ft=Nt;var $t,Rt,Zt=0,Pt=0,jt=0,Yt=0,zt=0,Ut=0,Wt="object"==typeof performance&&performance.now?performance:Date,qt="object"==typeof window&&window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(t){setTimeout(t,17)};function Ht(){return zt||(qt(Vt),zt=Wt.now()+Ut)}function Vt(){zt=0}function Gt(){this._call=this._time=this._next=null}function Xt(t,e,n){var r=new Gt;return r.restart(t,e,n),r}function Kt(){zt=(Yt=Wt.now())+Ut,Zt=Pt=0;try{!function(){Ht(),++Zt;for(var t,e=$t;e;)(t=zt-e._time)>=0&&e._call.call(void 0,t),e=e._next;--Zt}()}finally{Zt=0,function(){var t,e,n=$t,r=1/0;for(;n;)n._call?(r>n._time&&(r=n._time),t=n,n=n._next):(e=n._next,n._next=null,n=t?t._next=e:$t=e);Rt=t,Jt(r)}(),zt=0}}function Qt(){var t=Wt.now(),e=t-Yt;e>1e3&&(Ut-=e,Yt=t)}function Jt(t){Zt||(Pt&&(Pt=clearTimeout(Pt)),t-zt>24?(t<1/0&&(Pt=setTimeout(Kt,t-Wt.now()-Ut)),jt&&(jt=clearInterval(jt))):(jt||(Yt=Wt.now(),jt=setInterval(Qt,1e3)),Zt=1,qt(Kt)))}function te(t,e,n){var r=new Gt;return e=null==e?0:+e,r.restart((n=>{r.stop(),t(n+e)}),e,n),r}Gt.prototype=Xt.prototype={constructor:Gt,restart:function(t,e,n){if("function"!=typeof t)throw new TypeError("callback is not a function");n=(null==n?Ht():+n)+(null==e?0:+e),this._next||Rt===this||(Rt?Rt._next=this:$t=this,Rt=this),this._call=t,this._time=n,Jt()},stop:function(){this._call&&(this._call=null,this._time=1/0,Jt())}};var ee=Ft("start","end","cancel","interrupt"),ne=[];function re(t,e,n,r,i,a){var s=t.__transition;if(s){if(n in s)return}else t.__transition={};!function(t,e,n){var r,i=t.__transition;function a(t){n.state=1,n.timer.restart(s,n.delay,n.time),n.delay<=t&&s(t-n.delay)}function s(a){var l,h,u,d;if(1!==n.state)return c();for(l in i)if((d=i[l]).name===n.name){if(3===d.state)return te(s);4===d.state?(d.state=6,d.timer.stop(),d.on.call("interrupt",t,t.__data__,d.index,d.group),delete i[l]):+l<e&&(d.state=6,d.timer.stop(),d.on.call("cancel",t,t.__data__,d.index,d.group),delete i[l])}if(te((function(){3===n.state&&(n.state=4,n.timer.restart(o,n.delay,n.time),o(a))})),n.state=2,n.on.call("start",t,t.__data__,n.index,n.group),2===n.state){for(n.state=3,r=new Array(u=n.tween.length),l=0,h=-1;l<u;++l)(d=n.tween[l].value.call(t,t.__data__,n.index,n.group))&&(r[++h]=d);r.length=h+1}}function o(e){for(var i=e<n.duration?n.ease.call(null,e/n.duration):(n.timer.restart(c),n.state=5,1),a=-1,s=r.length;++a<s;)r[a].call(t,i);5===n.state&&(n.on.call("end",t,t.__data__,n.index,n.group),c())}function c(){for(var r in n.state=6,n.timer.stop(),delete i[e],i)return;delete t.__transition}i[e]=n,n.timer=Xt(a,0,n.time)}(t,n,{name:e,index:r,group:i,on:ee,tween:ne,time:a.time,delay:a.delay,duration:a.duration,ease:a.ease,timer:null,state:0})}function ie(t,e){var n=se(t,e);if(n.state>0)throw new Error("too late; already scheduled");return n}function ae(t,e){var n=se(t,e);if(n.state>3)throw new Error("too late; already running");return n}function se(t,e){var n=t.__transition;if(!n||!(n=n[e]))throw new Error("transition not found");return n}function oe(t,e){return t=+t,e=+e,function(n){return t*(1-n)+e*n}}var ce,le=180/Math.PI,he={translateX:0,translateY:0,rotate:0,skewX:0,scaleX:1,scaleY:1};function ue(t,e,n,r,i,a){var s,o,c;return(s=Math.sqrt(t*t+e*e))&&(t/=s,e/=s),(c=t*n+e*r)&&(n-=t*c,r-=e*c),(o=Math.sqrt(n*n+r*r))&&(n/=o,r/=o,c/=o),t*r<e*n&&(t=-t,e=-e,c=-c,s=-s),{translateX:i,translateY:a,rotate:Math.atan2(e,t)*le,skewX:Math.atan(c)*le,scaleX:s,scaleY:o}}function de(t,e,n,r){function i(t){return t.length?t.pop()+" ":""}return function(a,s){var o=[],c=[];return a=t(a),s=t(s),function(t,r,i,a,s,o){if(t!==i||r!==a){var c=s.push("translate(",null,e,null,n);o.push({i:c-4,x:oe(t,i)},{i:c-2,x:oe(r,a)})}else(i||a)&&s.push("translate("+i+e+a+n)}(a.translateX,a.translateY,s.translateX,s.translateY,o,c),function(t,e,n,a){t!==e?(t-e>180?e+=360:e-t>180&&(t+=360),a.push({i:n.push(i(n)+"rotate(",null,r)-2,x:oe(t,e)})):e&&n.push(i(n)+"rotate("+e+r)}(a.rotate,s.rotate,o,c),function(t,e,n,a){t!==e?a.push({i:n.push(i(n)+"skewX(",null,r)-2,x:oe(t,e)}):e&&n.push(i(n)+"skewX("+e+r)}(a.skewX,s.skewX,o,c),function(t,e,n,r,a,s){if(t!==n||e!==r){var o=a.push(i(a)+"scale(",null,",",null,")");s.push({i:o-4,x:oe(t,n)},{i:o-2,x:oe(e,r)})}else 1===n&&1===r||a.push(i(a)+"scale("+n+","+r+")")}(a.scaleX,a.scaleY,s.scaleX,s.scaleY,o,c),a=s=null,function(t){for(var e,n=-1,r=c.length;++n<r;)o[(e=c[n]).i]=e.x(t);return o.join("")}}}var pe=de((function(t){const e=new("function"==typeof DOMMatrix?DOMMatrix:WebKitCSSMatrix)(t+"");return e.isIdentity?he:ue(e.a,e.b,e.c,e.d,e.e,e.f)}),"px, ","px)","deg)"),fe=de((function(t){return null==t?he:(ce||(ce=document.createElementNS("http://www.w3.org/2000/svg","g")),ce.setAttribute("transform",t),(t=ce.transform.baseVal.consolidate())?ue((t=t.matrix).a,t.b,t.c,t.d,t.e,t.f):he)}),", ",")",")");function ge(t,e){var n,r;return function(){var i=ae(this,t),a=i.tween;if(a!==n)for(var s=0,o=(r=n=a).length;s<o;++s)if(r[s].name===e){(r=r.slice()).splice(s,1);break}i.tween=r}}function ye(t,e,n){var r,i;if("function"!=typeof n)throw new Error;return function(){var a=ae(this,t),s=a.tween;if(s!==r){i=(r=s).slice();for(var o={name:e,value:n},c=0,l=i.length;c<l;++c)if(i[c].name===e){i[c]=o;break}c===l&&i.push(o)}a.tween=i}}function me(t,e,n){var r=t._id;return t.each((function(){var t=ae(this,r);(t.value||(t.value={}))[e]=n.apply(this,arguments)})),function(t){return se(t,r).value[e]}}function be(t,e,n){t.prototype=e.prototype=n,n.constructor=t}function _e(t,e){var n=Object.create(t.prototype);for(var r in e)n[r]=e[r];return n}function xe(){}var ve=.7,ke=1/ve,we="\\s*([+-]?\\d+)\\s*",Ee="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)\\s*",Ce="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)%\\s*",Te=/^#([0-9a-f]{3,8})$/,Se=new RegExp(`^rgb\\(${we},${we},${we}\\)$`),Ae=new RegExp(`^rgb\\(${Ce},${Ce},${Ce}\\)$`),Le=new RegExp(`^rgba\\(${we},${we},${we},${Ee}\\)$`),Be=new RegExp(`^rgba\\(${Ce},${Ce},${Ce},${Ee}\\)$`),Ne=new RegExp(`^hsl\\(${Ee},${Ce},${Ce}\\)$`),De=new RegExp(`^hsla\\(${Ee},${Ce},${Ce},${Ee}\\)$`),Oe={aliceblue:15792383,antiquewhite:16444375,aqua:65535,aquamarine:8388564,azure:15794175,beige:16119260,bisque:16770244,black:0,blanchedalmond:16772045,blue:255,blueviolet:9055202,brown:10824234,burlywood:14596231,cadetblue:6266528,chartreuse:8388352,chocolate:13789470,coral:16744272,cornflowerblue:6591981,cornsilk:16775388,crimson:14423100,cyan:65535,darkblue:139,darkcyan:35723,darkgoldenrod:12092939,darkgray:11119017,darkgreen:25600,darkgrey:11119017,darkkhaki:12433259,darkmagenta:9109643,darkolivegreen:5597999,darkorange:16747520,darkorchid:10040012,darkred:9109504,darksalmon:15308410,darkseagreen:9419919,darkslateblue:4734347,darkslategray:3100495,darkslategrey:3100495,darkturquoise:52945,darkviolet:9699539,deeppink:16716947,deepskyblue:49151,dimgray:6908265,dimgrey:6908265,dodgerblue:2003199,firebrick:11674146,floralwhite:16775920,forestgreen:2263842,fuchsia:16711935,gainsboro:14474460,ghostwhite:16316671,gold:16766720,goldenrod:14329120,gray:8421504,green:32768,greenyellow:11403055,grey:8421504,honeydew:15794160,hotpink:16738740,indianred:13458524,indigo:4915330,ivory:16777200,khaki:15787660,lavender:15132410,lavenderblush:16773365,lawngreen:8190976,lemonchiffon:16775885,lightblue:11393254,lightcoral:15761536,lightcyan:14745599,lightgoldenrodyellow:16448210,lightgray:13882323,lightgreen:9498256,lightgrey:13882323,lightpink:16758465,lightsalmon:16752762,lightseagreen:2142890,lightskyblue:8900346,lightslategray:7833753,lightslategrey:7833753,lightsteelblue:11584734,lightyellow:16777184,lime:65280,limegreen:3329330,linen:16445670,magenta:16711935,maroon:8388608,mediumaquamarine:6737322,mediumblue:205,mediumorchid:12211667,mediumpurple:9662683,mediumseagreen:3978097,mediumslateblue:8087790,mediumspringgreen:64154,mediumturquoise:4772300,mediumvioletred:13047173,midnightblue:1644912,mintcream:16121850,mistyrose:16770273,moccasin:16770229,navajowhite:16768685,navy:128,oldlace:16643558,olive:8421376,olivedrab:7048739,orange:16753920,orangered:16729344,orchid:14315734,palegoldenrod:15657130,palegreen:10025880,paleturquoise:11529966,palevioletred:14381203,papayawhip:16773077,peachpuff:16767673,peru:13468991,pink:16761035,plum:14524637,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateblue:6970061,slategray:7372944,slategrey:7372944,snow:16775930,springgreen:65407,steelblue:4620980,tan:13808780,teal:32896,thistle:14204888,tomato:16737095,turquoise:4251856,violet:15631086,wheat:16113331,white:16777215,whitesmoke:16119285,yellow:16776960,yellowgreen:10145074};function Me(){return this.rgb().formatHex()}function Ie(){return this.rgb().formatRgb()}function Fe(t){var e,n;return t=(t+"").trim().toLowerCase(),(e=Te.exec(t))?(n=e[1].length,e=parseInt(e[1],16),6===n?$e(e):3===n?new je(e>>8&15|e>>4&240,e>>4&15|240&e,(15&e)<<4|15&e,1):8===n?Re(e>>24&255,e>>16&255,e>>8&255,(255&e)/255):4===n?Re(e>>12&15|e>>8&240,e>>8&15|e>>4&240,e>>4&15|240&e,((15&e)<<4|15&e)/255):null):(e=Se.exec(t))?new je(e[1],e[2],e[3],1):(e=Ae.exec(t))?new je(255*e[1]/100,255*e[2]/100,255*e[3]/100,1):(e=Le.exec(t))?Re(e[1],e[2],e[3],e[4]):(e=Be.exec(t))?Re(255*e[1]/100,255*e[2]/100,255*e[3]/100,e[4]):(e=Ne.exec(t))?He(e[1],e[2]/100,e[3]/100,1):(e=De.exec(t))?He(e[1],e[2]/100,e[3]/100,e[4]):Oe.hasOwnProperty(t)?$e(Oe[t]):"transparent"===t?new je(NaN,NaN,NaN,0):null}function $e(t){return new je(t>>16&255,t>>8&255,255&t,1)}function Re(t,e,n,r){return r<=0&&(t=e=n=NaN),new je(t,e,n,r)}function Ze(t){return t instanceof xe||(t=Fe(t)),t?new je((t=t.rgb()).r,t.g,t.b,t.opacity):new je}function Pe(t,e,n,r){return 1===arguments.length?Ze(t):new je(t,e,n,null==r?1:r)}function je(t,e,n,r){this.r=+t,this.g=+e,this.b=+n,this.opacity=+r}function Ye(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}`}function ze(){const t=Ue(this.opacity);return`${1===t?"rgb(":"rgba("}${We(this.r)}, ${We(this.g)}, ${We(this.b)}${1===t?")":`, ${t})`}`}function Ue(t){return isNaN(t)?1:Math.max(0,Math.min(1,t))}function We(t){return Math.max(0,Math.min(255,Math.round(t)||0))}function qe(t){return((t=We(t))<16?"0":"")+t.toString(16)}function He(t,e,n,r){return r<=0?t=e=n=NaN:n<=0||n>=1?t=e=NaN:e<=0&&(t=NaN),new Ge(t,e,n,r)}function Ve(t){if(t instanceof Ge)return new Ge(t.h,t.s,t.l,t.opacity);if(t instanceof xe||(t=Fe(t)),!t)return new Ge;if(t instanceof Ge)return t;var e=(t=t.rgb()).r/255,n=t.g/255,r=t.b/255,i=Math.min(e,n,r),a=Math.max(e,n,r),s=NaN,o=a-i,c=(a+i)/2;return o?(s=e===a?(n-r)/o+6*(n<r):n===a?(r-e)/o+2:(e-n)/o+4,o/=c<.5?a+i:2-a-i,s*=60):o=c>0&&c<1?0:s,new Ge(s,o,c,t.opacity)}function Ge(t,e,n,r){this.h=+t,this.s=+e,this.l=+n,this.opacity=+r}function Xe(t){return(t=(t||0)%360)<0?t+360:t}function Ke(t){return Math.max(0,Math.min(1,t||0))}function Qe(t,e,n){return 255*(t<60?e+(n-e)*t/60:t<180?n:t<240?e+(n-e)*(240-t)/60:e)}function Je(t,e,n,r,i){var a=t*t,s=a*t;return((1-3*t+3*a-s)*e+(4-6*a+3*s)*n+(1+3*t+3*a-3*s)*r+s*i)/6}be(xe,Fe,{copy(t){return Object.assign(new this.constructor,this,t)},displayable(){return this.rgb().displayable()},hex:Me,formatHex:Me,formatHex8:function(){return this.rgb().formatHex8()},formatHsl:function(){return Ve(this).formatHsl()},formatRgb:Ie,toString:Ie}),be(je,Pe,_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},rgb(){return this},clamp(){return new je(We(this.r),We(this.g),We(this.b),Ue(this.opacity))},displayable(){return-.5<=this.r&&this.r<255.5&&-.5<=this.g&&this.g<255.5&&-.5<=this.b&&this.b<255.5&&0<=this.opacity&&this.opacity<=1},hex:Ye,formatHex:Ye,formatHex8:function(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}${qe(255*(isNaN(this.opacity)?1:this.opacity))}`},formatRgb:ze,toString:ze})),be(Ge,(function(t,e,n,r){return 1===arguments.length?Ve(t):new Ge(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new Ge(this.h,this.s,this.l*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new Ge(this.h,this.s,this.l*t,this.opacity)},rgb(){var t=this.h%360+360*(this.h<0),e=isNaN(t)||isNaN(this.s)?0:this.s,n=this.l,r=n+(n<.5?n:1-n)*e,i=2*n-r;return new je(Qe(t>=240?t-240:t+120,i,r),Qe(t,i,r),Qe(t<120?t+240:t-120,i,r),this.opacity)},clamp(){return new Ge(Xe(this.h),Ke(this.s),Ke(this.l),Ue(this.opacity))},displayable(){return(0<=this.s&&this.s<=1||isNaN(this.s))&&0<=this.l&&this.l<=1&&0<=this.opacity&&this.opacity<=1},formatHsl(){const t=Ue(this.opacity);return`${1===t?"hsl(":"hsla("}${Xe(this.h)}, ${100*Ke(this.s)}%, ${100*Ke(this.l)}%${1===t?")":`, ${t})`}`}}));const tn=t=>()=>t;function en(t,e){return function(n){return t+n*e}}function nn(t){return 1==(t=+t)?rn:function(e,n){return n-e?function(t,e,n){return t=Math.pow(t,n),e=Math.pow(e,n)-t,n=1/n,function(r){return Math.pow(t+r*e,n)}}(e,n,t):tn(isNaN(e)?n:e)}}function rn(t,e){var n=e-t;return n?en(t,n):tn(isNaN(t)?e:t)}const an=function t(e){var n=nn(e);function r(t,e){var r=n((t=Pe(t)).r,(e=Pe(e)).r),i=n(t.g,e.g),a=n(t.b,e.b),s=rn(t.opacity,e.opacity);return function(e){return t.r=r(e),t.g=i(e),t.b=a(e),t.opacity=s(e),t+""}}return r.gamma=t,r}(1);function sn(t){return function(e){var n,r,i=e.length,a=new Array(i),s=new Array(i),o=new Array(i);for(n=0;n<i;++n)r=Pe(e[n]),a[n]=r.r||0,s[n]=r.g||0,o[n]=r.b||0;return a=t(a),s=t(s),o=t(o),r.opacity=1,function(t){return r.r=a(t),r.g=s(t),r.b=o(t),r+""}}}sn((function(t){var e=t.length-1;return function(n){var r=n<=0?n=0:n>=1?(n=1,e-1):Math.floor(n*e),i=t[r],a=t[r+1],s=r>0?t[r-1]:2*i-a,o=r<e-1?t[r+2]:2*a-i;return Je((n-r/e)*e,s,i,a,o)}})),sn((function(t){var e=t.length;return function(n){var r=Math.floor(((n%=1)<0?++n:n)*e),i=t[(r+e-1)%e],a=t[r%e],s=t[(r+1)%e],o=t[(r+2)%e];return Je((n-r/e)*e,i,a,s,o)}}));var on=/[-+]?(?:\d+\.?\d*|\.?\d+)(?:[eE][-+]?\d+)?/g,cn=new RegExp(on.source,"g");function ln(t,e){var n,r,i,a=on.lastIndex=cn.lastIndex=0,s=-1,o=[],c=[];for(t+="",e+="";(n=on.exec(t))&&(r=cn.exec(e));)(i=r.index)>a&&(i=e.slice(a,i),o[s]?o[s]+=i:o[++s]=i),(n=n[0])===(r=r[0])?o[s]?o[s]+=r:o[++s]=r:(o[++s]=null,c.push({i:s,x:oe(n,r)})),a=cn.lastIndex;return a<e.length&&(i=e.slice(a),o[s]?o[s]+=i:o[++s]=i),o.length<2?c[0]?function(t){return function(e){return t(e)+""}}(c[0].x):function(t){return function(){return t}}(e):(e=c.length,function(t){for(var n,r=0;r<e;++r)o[(n=c[r]).i]=n.x(t);return o.join("")})}function hn(t,e){var n;return("number"==typeof e?oe:e instanceof Fe?an:(n=Fe(e))?(e=n,an):ln)(t,e)}function un(t){return function(){this.removeAttribute(t)}}function dn(t){return function(){this.removeAttributeNS(t.space,t.local)}}function pn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttribute(t);return s===a?null:s===r?i:i=e(r=s,n)}}function fn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttributeNS(t.space,t.local);return s===a?null:s===r?i:i=e(r=s,n)}}function gn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttribute(t))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttribute(t)}}function yn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttributeNS(t.space,t.local))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttributeNS(t.space,t.local)}}function mn(t,e){return function(n){this.setAttribute(t,e.call(this,n))}}function bn(t,e){return function(n){this.setAttributeNS(t.space,t.local,e.call(this,n))}}function _n(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&bn(t,i)),n}return i._value=e,i}function xn(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&mn(t,i)),n}return i._value=e,i}function vn(t,e){return function(){ie(this,t).delay=+e.apply(this,arguments)}}function kn(t,e){return e=+e,function(){ie(this,t).delay=e}}function wn(t,e){return function(){ae(this,t).duration=+e.apply(this,arguments)}}function En(t,e){return e=+e,function(){ae(this,t).duration=e}}function Cn(t,e){if("function"!=typeof e)throw new Error;return function(){ae(this,t).ease=e}}function Tn(t,e,n){var r,i,a=function(t){return(t+"").trim().split(/^|\s+/).every((function(t){var e=t.indexOf(".");return e>=0&&(t=t.slice(0,e)),!t||"start"===t}))}(e)?ie:ae;return function(){var s=a(this,t),o=s.on;o!==r&&(i=(r=o).copy()).on(e,n),s.on=i}}var Sn=Lt.prototype.constructor;function An(t){return function(){this.style.removeProperty(t)}}function Ln(t,e,n){return function(r){this.style.setProperty(t,e.call(this,r),n)}}function Bn(t,e,n){var r,i;function a(){var a=e.apply(this,arguments);return a!==i&&(r=(i=a)&&Ln(t,a,n)),r}return a._value=e,a}function Nn(t){return function(e){this.textContent=t.call(this,e)}}function Dn(t){var e,n;function r(){var r=t.apply(this,arguments);return r!==n&&(e=(n=r)&&Nn(r)),e}return r._value=t,r}var On=0;function Mn(t,e,n,r){this._groups=t,this._parents=e,this._name=n,this._id=r}function In(){return++On}var Fn=Lt.prototype;Mn.prototype=function(t){return Lt().transition(t)}.prototype={constructor:Mn,select:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=y(t));for(var r=this._groups,i=r.length,a=new Array(i),s=0;s<i;++s)for(var o,c,l=r[s],h=l.length,u=a[s]=new Array(h),d=0;d<h;++d)(o=l[d])&&(c=t.call(o,o.__data__,d,l))&&("__data__"in o&&(c.__data__=o.__data__),u[d]=c,re(u[d],e,n,d,u,se(o,n)));return new Mn(a,this._parents,e,n)},selectAll:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=_(t));for(var r=this._groups,i=r.length,a=[],s=[],o=0;o<i;++o)for(var c,l=r[o],h=l.length,u=0;u<h;++u)if(c=l[u]){for(var d,p=t.call(c,c.__data__,u,l),f=se(c,n),g=0,y=p.length;g<y;++g)(d=p[g])&&re(d,e,n,g,p,f);a.push(p),s.push(c)}return new Mn(a,s,e,n)},selectChild:Fn.selectChild,selectChildren:Fn.selectChildren,filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new Mn(r,this._parents,this._name,this._id)},merge:function(t){if(t._id!==this._id)throw new Error;for(var e=this._groups,n=t._groups,r=e.length,i=n.length,a=Math.min(r,i),s=new Array(r),o=0;o<a;++o)for(var c,l=e[o],h=n[o],u=l.length,d=s[o]=new Array(u),p=0;p<u;++p)(c=l[p]||h[p])&&(d[p]=c);for(;o<r;++o)s[o]=e[o];return new Mn(s,this._parents,this._name,this._id)},selection:function(){return new Sn(this._groups,this._parents)},transition:function(){for(var t=this._name,e=this._id,n=In(),r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)if(s=o[l]){var h=se(s,e);re(s,t,n,l,o,{time:h.time+h.delay+h.duration,delay:0,duration:h.duration,ease:h.ease})}return new Mn(r,this._parents,t,n)},call:Fn.call,nodes:Fn.nodes,node:Fn.node,size:Fn.size,empty:Fn.empty,each:Fn.each,on:function(t,e){var n=this._id;return arguments.length<2?se(this.node(),n).on.on(t):this.each(Tn(n,t,e))},attr:function(t,e){var n=F(t),r="transform"===n?fe:hn;return this.attrTween(t,"function"==typeof e?(n.local?yn:gn)(n,r,me(this,"attr."+t,e)):null==e?(n.local?dn:un)(n):(n.local?fn:pn)(n,r,e))},attrTween:function(t,e){var n="attr."+t;if(arguments.length<2)return(n=this.tween(n))&&n._value;if(null==e)return this.tween(n,null);if("function"!=typeof e)throw new Error;var r=F(t);return this.tween(n,(r.local?_n:xn)(r,e))},style:function(t,e,n){var r="transform"==(t+="")?pe:hn;return null==e?this.styleTween(t,function(t,e){var n,r,i;return function(){var a=H(this,t),s=(this.style.removeProperty(t),H(this,t));return a===s?null:a===n&&s===r?i:i=e(n=a,r=s)}}(t,r)).on("end.style."+t,An(t)):"function"==typeof e?this.styleTween(t,function(t,e,n){var r,i,a;return function(){var s=H(this,t),o=n(this),c=o+"";return null==o&&(this.style.removeProperty(t),c=o=H(this,t)),s===c?null:s===r&&c===i?a:(i=c,a=e(r=s,o))}}(t,r,me(this,"style."+t,e))).each(function(t,e){var n,r,i,a,s="style."+e,o="end."+s;return function(){var c=ae(this,t),l=c.on,h=null==c.value[s]?a||(a=An(e)):void 0;l===n&&i===h||(r=(n=l).copy()).on(o,i=h),c.on=r}}(this._id,t)):this.styleTween(t,function(t,e,n){var r,i,a=n+"";return function(){var s=H(this,t);return s===a?null:s===r?i:i=e(r=s,n)}}(t,r,e),n).on("end.style."+t,null)},styleTween:function(t,e,n){var r="style."+(t+="");if(arguments.length<2)return(r=this.tween(r))&&r._value;if(null==e)return this.tween(r,null);if("function"!=typeof e)throw new Error;return this.tween(r,Bn(t,e,null==n?"":n))},text:function(t){return this.tween("text","function"==typeof t?function(t){return function(){var e=t(this);this.textContent=null==e?"":e}}(me(this,"text",t)):function(t){return function(){this.textContent=t}}(null==t?"":t+""))},textTween:function(t){var e="text";if(arguments.length<1)return(e=this.tween(e))&&e._value;if(null==t)return this.tween(e,null);if("function"!=typeof t)throw new Error;return this.tween(e,Dn(t))},remove:function(){return this.on("end.remove",function(t){return function(){var e=this.parentNode;for(var n in this.__transition)if(+n!==t)return;e&&e.removeChild(this)}}(this._id))},tween:function(t,e){var n=this._id;if(t+="",arguments.length<2){for(var r,i=se(this.node(),n).tween,a=0,s=i.length;a<s;++a)if((r=i[a]).name===t)return r.value;return null}return this.each((null==e?ge:ye)(n,t,e))},delay:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?vn:kn)(e,t)):se(this.node(),e).delay},duration:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?wn:En)(e,t)):se(this.node(),e).duration},ease:function(t){var e=this._id;return arguments.length?this.each(Cn(e,t)):se(this.node(),e).ease},easeVarying:function(t){if("function"!=typeof t)throw new Error;return this.each(function(t,e){return function(){var n=e.apply(this,arguments);if("function"!=typeof n)throw new Error;ae(this,t).ease=n}}(this._id,t))},end:function(){var t,e,n=this,r=n._id,i=n.size();return new Promise((function(a,s){var o={value:s},c={value:function(){0==--i&&a()}};n.each((function(){var n=ae(this,r),i=n.on;i!==t&&((e=(t=i).copy())._.cancel.push(o),e._.interrupt.push(o),e._.end.push(c)),n.on=e})),0===i&&a()}))},[Symbol.iterator]:Fn[Symbol.iterator]};var $n={time:null,delay:0,duration:250,ease:function(t){return((t*=2)<=1?t*t*t:(t-=2)*t*t+2)/2}};function Rn(t,e){for(var n;!(n=t.__transition)||!(n=n[e]);)if(!(t=t.parentNode))throw new Error(`transition ${e} not found`);return n}Lt.prototype.interrupt=function(t){return this.each((function(){!function(t,e){var n,r,i,a=t.__transition,s=!0;if(a){for(i in e=null==e?null:e+"",a)(n=a[i]).name===e?(r=n.state>2&&n.state<5,n.state=6,n.timer.stop(),n.on.call(r?"interrupt":"cancel",t,t.__data__,n.index,n.group),delete a[i]):s=!1;s&&delete t.__transition}}(this,t)}))},Lt.prototype.transition=function(t){var e,n;t instanceof Mn?(e=t._id,t=t._name):(e=In(),(n=$n).time=Ht(),t=null==t?null:t+"");for(var r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)(s=o[l])&&re(s,t,e,l,o,n||Rn(s,e));return new Mn(r,this._parents,t,e)};const{abs:Zn,max:Pn,min:jn}=Math;function Yn(t){return[+t[0],+t[1]]}function zn(t){return[Yn(t[0]),Yn(t[1])]}["w","e"].map(Un),["n","s"].map(Un),["n","w","e","s","nw","ne","sw","se"].map(Un);function Un(t){return{type:t}}function Wn(t){if(!t.ok)throw new Error(t.status+" "+t.statusText);return t.text()}function qn(t){return(e,n)=>function(t,e){return fetch(t,e).then(Wn)}(e,n).then((e=>(new DOMParser).parseFromString(e,t)))}qn("application/xml");qn("text/html");var Hn=qn("image/svg+xml");const Vn=Math.PI/180,Gn=180/Math.PI,Xn=.96422,Kn=.82521,Qn=4/29,Jn=6/29,tr=3*Jn*Jn;function er(t){if(t instanceof nr)return new nr(t.l,t.a,t.b,t.opacity);if(t instanceof lr)return hr(t);t instanceof je||(t=Ze(t));var e,n,r=sr(t.r),i=sr(t.g),a=sr(t.b),s=rr((.2225045*r+.7168786*i+.0606169*a)/1);return r===i&&i===a?e=n=s:(e=rr((.4360747*r+.3850649*i+.1430804*a)/Xn),n=rr((.0139322*r+.0971045*i+.7141733*a)/Kn)),new nr(116*s-16,500*(e-s),200*(s-n),t.opacity)}function nr(t,e,n,r){this.l=+t,this.a=+e,this.b=+n,this.opacity=+r}function rr(t){return t>.008856451679035631?Math.pow(t,1/3):t/tr+Qn}function ir(t){return t>Jn?t*t*t:tr*(t-Qn)}function ar(t){return 255*(t<=.0031308?12.92*t:1.055*Math.pow(t,1/2.4)-.055)}function sr(t){return(t/=255)<=.04045?t/12.92:Math.pow((t+.055)/1.055,2.4)}function or(t){if(t instanceof lr)return new lr(t.h,t.c,t.l,t.opacity);if(t instanceof nr||(t=er(t)),0===t.a&&0===t.b)return new lr(NaN,0<t.l&&t.l<100?0:NaN,t.l,t.opacity);var e=Math.atan2(t.b,t.a)*Gn;return new lr(e<0?e+360:e,Math.sqrt(t.a*t.a+t.b*t.b),t.l,t.opacity)}function cr(t,e,n,r){return 1===arguments.length?or(t):new lr(t,e,n,null==r?1:r)}function lr(t,e,n,r){this.h=+t,this.c=+e,this.l=+n,this.opacity=+r}function hr(t){if(isNaN(t.h))return new nr(t.l,0,0,t.opacity);var e=t.h*Vn;return new nr(t.l,Math.cos(e)*t.c,Math.sin(e)*t.c,t.opacity)}function ur(t){return function(e,n){var r=t((e=cr(e)).h,(n=cr(n)).h),i=rn(e.c,n.c),a=rn(e.l,n.l),s=rn(e.opacity,n.opacity);return function(t){return e.h=r(t),e.c=i(t),e.l=a(t),e.opacity=s(t),e+""}}}be(nr,(function(t,e,n,r){return 1===arguments.length?er(t):new nr(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return new nr(this.l+18*(null==t?1:t),this.a,this.b,this.opacity)},darker(t){return new nr(this.l-18*(null==t?1:t),this.a,this.b,this.opacity)},rgb(){var t=(this.l+16)/116,e=isNaN(this.a)?t:t+this.a/500,n=isNaN(this.b)?t:t-this.b/200;return new je(ar(3.1338561*(e=Xn*ir(e))-1.6168667*(t=1*ir(t))-.4906146*(n=Kn*ir(n))),ar(-.9787684*e+1.9161415*t+.033454*n),ar(.0719453*e-.2289914*t+1.4052427*n),this.opacity)}})),be(lr,cr,_e(xe,{brighter(t){return new lr(this.h,this.c,this.l+18*(null==t?1:t),this.opacity)},darker(t){return new lr(this.h,this.c,this.l-18*(null==t?1:t),this.opacity)},rgb(){return hr(this).rgb()}}));const dr=ur((function(t,e){var n=e-t;return n?en(t,n>180||n<-180?n-360*Math.round(n/360):n):tn(isNaN(t)?e:t)}));ur(rn);const pr=Math.sqrt(50),fr=Math.sqrt(10),gr=Math.sqrt(2);function yr(t,e,n){const r=(e-t)/Math.max(0,n),i=Math.floor(Math.log10(r)),a=r/Math.pow(10,i),s=a>=pr?10:a>=fr?5:a>=gr?2:1;let o,c,l;return i<0?(l=Math.pow(10,-i)/s,o=Math.round(t*l),c=Math.round(e*l),o/l<t&&++o,c/l>e&&--c,l=-l):(l=Math.pow(10,i)*s,o=Math.round(t/l),c=Math.round(e/l),o*l<t&&++o,c*l>e&&--c),c<o&&.5<=n&&n<2?yr(t,e,2*n):[o,c,l]}function mr(t,e,n){return yr(t=+t,e=+e,n=+n)[2]}function br(t,e,n){n=+n;const r=(e=+e)<(t=+t),i=r?mr(e,t,n):mr(t,e,n);return(r?-1:1)*(i<0?1/-i:i)}function _r(t,e){return null==t||null==e?NaN:t<e?-1:t>e?1:t>=e?0:NaN}function xr(t,e){return null==t||null==e?NaN:e<t?-1:e>t?1:e>=t?0:NaN}function vr(t){let e,n,r;function i(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<0?i=e+1:a=e}while(i<a)}return i}return 2!==t.length?(e=_r,n=(e,n)=>_r(t(e),n),r=(e,n)=>t(e)-n):(e=t===_r||t===xr?t:kr,n=t,r=t),{left:i,center:function(t,e,n=0,a=t.length){const s=i(t,e,n,a-1);return s>n&&r(t[s-1],e)>-r(t[s],e)?s-1:s},right:function(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<=0?i=e+1:a=e}while(i<a)}return i}}}function kr(){return 0}const wr=vr(_r),Er=wr.right,Cr=(wr.left,vr((function(t){return null===t?NaN:+t})).center,Er);function Tr(t,e){var n,r=e?e.length:0,i=t?Math.min(r,t.length):0,a=new Array(i),s=new Array(r);for(n=0;n<i;++n)a[n]=Br(t[n],e[n]);for(;n<r;++n)s[n]=e[n];return function(t){for(n=0;n<i;++n)s[n]=a[n](t);return s}}function Sr(t,e){var n=new Date;return t=+t,e=+e,function(r){return n.setTime(t*(1-r)+e*r),n}}function Ar(t,e){var n,r={},i={};for(n in null!==t&&"object"==typeof t||(t={}),null!==e&&"object"==typeof e||(e={}),e)n in t?r[n]=Br(t[n],e[n]):i[n]=e[n];return function(t){for(n in r)i[n]=r[n](t);return i}}function Lr(t,e){e||(e=[]);var n,r=t?Math.min(e.length,t.length):0,i=e.slice();return function(a){for(n=0;n<r;++n)i[n]=t[n]*(1-a)+e[n]*a;return i}}function Br(t,e){var n,r,i=typeof e;return null==e||"boolean"===i?tn(e):("number"===i?oe:"string"===i?(n=Fe(e))?(e=n,an):ln:e instanceof Fe?an:e instanceof Date?Sr:(r=e,!ArrayBuffer.isView(r)||r instanceof DataView?Array.isArray(e)?Tr:"function"!=typeof e.valueOf&&"function"!=typeof e.toString||isNaN(e)?Ar:oe:Lr))(t,e)}function Nr(t,e){return t=+t,e=+e,function(n){return Math.round(t*(1-n)+e*n)}}function Dr(t){return+t}var Or=[0,1];function Mr(t){return t}function Ir(t,e){return(e-=t=+t)?function(n){return(n-t)/e}:(n=isNaN(e)?NaN:.5,function(){return n});var n}function Fr(t,e,n){var r=t[0],i=t[1],a=e[0],s=e[1];return i<r?(r=Ir(i,r),a=n(s,a)):(r=Ir(r,i),a=n(a,s)),function(t){return a(r(t))}}function $r(t,e,n){var r=Math.min(t.length,e.length)-1,i=new Array(r),a=new Array(r),s=-1;for(t[r]<t[0]&&(t=t.slice().reverse(),e=e.slice().reverse());++s<r;)i[s]=Ir(t[s],t[s+1]),a[s]=n(e[s],e[s+1]);return function(e){var n=Cr(t,e,1,r)-1;return a[n](i[n](e))}}function Rr(t,e){return e.domain(t.domain()).range(t.range()).interpolate(t.interpolate()).clamp(t.clamp()).unknown(t.unknown())}function Zr(){var t,e,n,r,i,a,s=Or,o=Or,c=Br,l=Mr;function h(){var t,e,n,c=Math.min(s.length,o.length);return l!==Mr&&(t=s[0],e=s[c-1],t>e&&(n=t,t=e,e=n),l=function(n){return Math.max(t,Math.min(e,n))}),r=c>2?$r:Fr,i=a=null,u}function u(e){return null==e||isNaN(e=+e)?n:(i||(i=r(s.map(t),o,c)))(t(l(e)))}return u.invert=function(n){return l(e((a||(a=r(o,s.map(t),oe)))(n)))},u.domain=function(t){return arguments.length?(s=Array.from(t,Dr),h()):s.slice()},u.range=function(t){return arguments.length?(o=Array.from(t),h()):o.slice()},u.rangeRound=function(t){return o=Array.from(t),c=Nr,h()},u.clamp=function(t){return arguments.length?(l=!!t||Mr,h()):l!==Mr},u.interpolate=function(t){return arguments.length?(c=t,h()):c},u.unknown=function(t){return arguments.length?(n=t,u):n},function(n,r){return t=n,e=r,h()}}function Pr(){return Zr()(Mr,Mr)}function jr(t,e){switch(arguments.length){case 0:break;case 1:this.range(t);break;default:this.range(e).domain(t)}return this}var Yr,zr=/^(?:(.)?([<>=^]))?([+\-( ])?([$#])?(0)?(\d+)?(,)?(\.\d+)?(~)?([a-z%])?$/i;function Ur(t){if(!(e=zr.exec(t)))throw new Error("invalid format: "+t);var e;return new Wr({fill:e[1],align:e[2],sign:e[3],symbol:e[4],zero:e[5],width:e[6],comma:e[7],precision:e[8]&&e[8].slice(1),trim:e[9],type:e[10]})}function Wr(t){this.fill=void 0===t.fill?" ":t.fill+"",this.align=void 0===t.align?">":t.align+"",this.sign=void 0===t.sign?"-":t.sign+"",this.symbol=void 0===t.symbol?"":t.symbol+"",this.zero=!!t.zero,this.width=void 0===t.width?void 0:+t.width,this.comma=!!t.comma,this.precision=void 0===t.precision?void 0:+t.precision,this.trim=!!t.trim,this.type=void 0===t.type?"":t.type+""}function qr(t,e){if((n=(t=e?t.toExponential(e-1):t.toExponential()).indexOf("e"))<0)return null;var n,r=t.slice(0,n);return[r.length>1?r[0]+r.slice(2):r,+t.slice(n+1)]}function Hr(t){return(t=qr(Math.abs(t)))?t[1]:NaN}function Vr(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1];return i<0?"0."+new Array(-i).join("0")+r:r.length>i+1?r.slice(0,i+1)+"."+r.slice(i+1):r+new Array(i-r.length+2).join("0")}Ur.prototype=Wr.prototype,Wr.prototype.toString=function(){return this.fill+this.align+this.sign+this.symbol+(this.zero?"0":"")+(void 0===this.width?"":Math.max(1,0|this.width))+(this.comma?",":"")+(void 0===this.precision?"":"."+Math.max(0,0|this.precision))+(this.trim?"~":"")+this.type};const Gr={"%":(t,e)=>(100*t).toFixed(e),b:t=>Math.round(t).toString(2),c:t=>t+"",d:function(t){return Math.abs(t=Math.round(t))>=1e21?t.toLocaleString("en").replace(/,/g,""):t.toString(10)},e:(t,e)=>t.toExponential(e),f:(t,e)=>t.toFixed(e),g:(t,e)=>t.toPrecision(e),o:t=>Math.round(t).toString(8),p:(t,e)=>Vr(100*t,e),r:Vr,s:function(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1],a=i-(Yr=3*Math.max(-8,Math.min(8,Math.floor(i/3))))+1,s=r.length;return a===s?r:a>s?r+new Array(a-s+1).join("0"):a>0?r.slice(0,a)+"."+r.slice(a):"0."+new Array(1-a).join("0")+qr(t,Math.max(0,e+a-1))[0]},X:t=>Math.round(t).toString(16).toUpperCase(),x:t=>Math.round(t).toString(16)};function Xr(t){return t}var Kr,Qr,Jr,ti=Array.prototype.map,ei=["y","z","a","f","p","n","\xb5","m","","k","M","G","T","P","E","Z","Y"];function ni(t){var e,n,r=void 0===t.grouping||void 0===t.thousands?Xr:(e=ti.call(t.grouping,Number),n=t.thousands+"",function(t,r){for(var i=t.length,a=[],s=0,o=e[0],c=0;i>0&&o>0&&(c+o+1>r&&(o=Math.max(1,r-c)),a.push(t.substring(i-=o,i+o)),!((c+=o+1)>r));)o=e[s=(s+1)%e.length];return a.reverse().join(n)}),i=void 0===t.currency?"":t.currency[0]+"",a=void 0===t.currency?"":t.currency[1]+"",s=void 0===t.decimal?".":t.decimal+"",o=void 0===t.numerals?Xr:function(t){return function(e){return e.replace(/[0-9]/g,(function(e){return t[+e]}))}}(ti.call(t.numerals,String)),c=void 0===t.percent?"%":t.percent+"",l=void 0===t.minus?"\u2212":t.minus+"",h=void 0===t.nan?"NaN":t.nan+"";function u(t){var e=(t=Ur(t)).fill,n=t.align,u=t.sign,d=t.symbol,p=t.zero,f=t.width,g=t.comma,y=t.precision,m=t.trim,b=t.type;"n"===b?(g=!0,b="g"):Gr[b]||(void 0===y&&(y=12),m=!0,b="g"),(p||"0"===e&&"="===n)&&(p=!0,e="0",n="=");var _="$"===d?i:"#"===d&&/[boxX]/.test(b)?"0"+b.toLowerCase():"",x="$"===d?a:/[%p]/.test(b)?c:"",v=Gr[b],k=/[defgprs%]/.test(b);function w(t){var i,a,c,d=_,w=x;if("c"===b)w=v(t)+w,t="";else{var E=(t=+t)<0||1/t<0;if(t=isNaN(t)?h:v(Math.abs(t),y),m&&(t=function(t){t:for(var e,n=t.length,r=1,i=-1;r<n;++r)switch(t[r]){case".":i=e=r;break;case"0":0===i&&(i=r),e=r;break;default:if(!+t[r])break t;i>0&&(i=0)}return i>0?t.slice(0,i)+t.slice(e+1):t}(t)),E&&0==+t&&"+"!==u&&(E=!1),d=(E?"("===u?u:l:"-"===u||"("===u?"":u)+d,w=("s"===b?ei[8+Yr/3]:"")+w+(E&&"("===u?")":""),k)for(i=-1,a=t.length;++i<a;)if(48>(c=t.charCodeAt(i))||c>57){w=(46===c?s+t.slice(i+1):t.slice(i))+w,t=t.slice(0,i);break}}g&&!p&&(t=r(t,1/0));var C=d.length+t.length+w.length,T=C<f?new Array(f-C+1).join(e):"";switch(g&&p&&(t=r(T+t,T.length?f-w.length:1/0),T=""),n){case"<":t=d+t+w+T;break;case"=":t=d+T+t+w;break;case"^":t=T.slice(0,C=T.length>>1)+d+t+w+T.slice(C);break;default:t=T+d+t+w}return o(t)}return y=void 0===y?6:/[gprs]/.test(b)?Math.max(1,Math.min(21,y)):Math.max(0,Math.min(20,y)),w.toString=function(){return t+""},w}return{format:u,formatPrefix:function(t,e){var n=u(((t=Ur(t)).type="f",t)),r=3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3))),i=Math.pow(10,-r),a=ei[8+r/3];return function(t){return n(i*t)+a}}}}function ri(t,e,n,r){var i,a=br(t,e,n);switch((r=Ur(null==r?",f":r)).type){case"s":var s=Math.max(Math.abs(t),Math.abs(e));return null!=r.precision||isNaN(i=function(t,e){return Math.max(0,3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3)))-Hr(Math.abs(t)))}(a,s))||(r.precision=i),Jr(r,s);case"":case"e":case"g":case"p":case"r":null!=r.precision||isNaN(i=function(t,e){return t=Math.abs(t),e=Math.abs(e)-t,Math.max(0,Hr(e)-Hr(t))+1}(a,Math.max(Math.abs(t),Math.abs(e))))||(r.precision=i-("e"===r.type));break;case"f":case"%":null!=r.precision||isNaN(i=function(t){return Math.max(0,-Hr(Math.abs(t)))}(a))||(r.precision=i-2*("%"===r.type))}return Qr(r)}function ii(t){var e=t.domain;return t.ticks=function(t){var n=e();return function(t,e,n){if(!((n=+n)>0))return[];if((t=+t)==(e=+e))return[t];const r=e<t,[i,a,s]=r?yr(e,t,n):yr(t,e,n);if(!(a>=i))return[];const o=a-i+1,c=new Array(o);if(r)if(s<0)for(let l=0;l<o;++l)c[l]=(a-l)/-s;else for(let l=0;l<o;++l)c[l]=(a-l)*s;else if(s<0)for(let l=0;l<o;++l)c[l]=(i+l)/-s;else for(let l=0;l<o;++l)c[l]=(i+l)*s;return c}(n[0],n[n.length-1],null==t?10:t)},t.tickFormat=function(t,n){var r=e();return ri(r[0],r[r.length-1],null==t?10:t,n)},t.nice=function(n){null==n&&(n=10);var r,i,a=e(),s=0,o=a.length-1,c=a[s],l=a[o],h=10;for(l<c&&(i=c,c=l,l=i,i=s,s=o,o=i);h-- >0;){if((i=mr(c,l,n))===r)return a[s]=c,a[o]=l,e(a);if(i>0)c=Math.floor(c/i)*i,l=Math.ceil(l/i)*i;else{if(!(i<0))break;c=Math.ceil(c*i)/i,l=Math.floor(l*i)/i}r=i}return t},t}function ai(){var t=Pr();return t.copy=function(){return Rr(t,ai())},jr.apply(t,arguments),ii(t)}Kr=ni({thousands:",",grouping:[3],currency:["$",""]}),Qr=Kr.format,Jr=Kr.formatPrefix;class si extends Map{constructor(t,e=hi){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:e}}),null!=t)for(const[n,r]of t)this.set(n,r)}get(t){return super.get(oi(this,t))}has(t){return super.has(oi(this,t))}set(t,e){return super.set(ci(this,t),e)}delete(t){return super.delete(li(this,t))}}Set;function oi({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):n}function ci({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):(t.set(r,n),n)}function li({_intern:t,_key:e},n){const r=e(n);return t.has(r)&&(n=t.get(r),t.delete(r)),n}function hi(t){return null!==t&&"object"==typeof t?t.valueOf():t}const ui=Symbol("implicit");function di(){var t=new si,e=[],n=[],r=ui;function i(i){let a=t.get(i);if(void 0===a){if(r!==ui)return r;t.set(i,a=e.push(i)-1)}return n[a%n.length]}return i.domain=function(n){if(!arguments.length)return e.slice();e=[],t=new si;for(const r of n)t.has(r)||t.set(r,e.push(r)-1);return i},i.range=function(t){return arguments.length?(n=Array.from(t),i):n.slice()},i.unknown=function(t){return arguments.length?(r=t,i):r},i.copy=function(){return di(e,n).unknown(r)},jr.apply(i,arguments),i}const pi=1e3,fi=6e4,gi=36e5,yi=864e5,mi=6048e5,bi=2592e6,_i=31536e6,xi=new Date,vi=new Date;function ki(t,e,n,r){function i(e){return t(e=0===arguments.length?new Date:new Date(+e)),e}return i.floor=e=>(t(e=new Date(+e)),e),i.ceil=n=>(t(n=new Date(n-1)),e(n,1),t(n),n),i.round=t=>{const e=i(t),n=i.ceil(t);return t-e<n-t?e:n},i.offset=(t,n)=>(e(t=new Date(+t),null==n?1:Math.floor(n)),t),i.range=(n,r,a)=>{const s=[];if(n=i.ceil(n),a=null==a?1:Math.floor(a),!(n<r&&a>0))return s;let o;do{s.push(o=new Date(+n)),e(n,a),t(n)}while(o<n&&n<r);return s},i.filter=n=>ki((e=>{if(e>=e)for(;t(e),!n(e);)e.setTime(e-1)}),((t,r)=>{if(t>=t)if(r<0)for(;++r<=0;)for(;e(t,-1),!n(t););else for(;--r>=0;)for(;e(t,1),!n(t););})),n&&(i.count=(e,r)=>(xi.setTime(+e),vi.setTime(+r),t(xi),t(vi),Math.floor(n(xi,vi))),i.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?i.filter(r?e=>r(e)%t==0:e=>i.count(0,e)%t==0):i:null)),i}const wi=ki((()=>{}),((t,e)=>{t.setTime(+t+e)}),((t,e)=>e-t));wi.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?ki((e=>{e.setTime(Math.floor(e/t)*t)}),((e,n)=>{e.setTime(+e+n*t)}),((e,n)=>(n-e)/t)):wi:null);wi.range;const Ei=ki((t=>{t.setTime(t-t.getMilliseconds())}),((t,e)=>{t.setTime(+t+e*pi)}),((t,e)=>(e-t)/pi),(t=>t.getUTCSeconds())),Ci=(Ei.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getMinutes()))),Ti=(Ci.range,ki((t=>{t.setUTCSeconds(0,0)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getUTCMinutes()))),Si=(Ti.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi-t.getMinutes()*fi)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getHours()))),Ai=(Si.range,ki((t=>{t.setUTCMinutes(0,0,0)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getUTCHours()))),Li=(Ai.range,ki((t=>t.setHours(0,0,0,0)),((t,e)=>t.setDate(t.getDate()+e)),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/yi),(t=>t.getDate()-1))),Bi=(Li.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>t.getUTCDate()-1))),Ni=(Bi.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>Math.floor(t/yi))));Ni.range;function Di(t){return ki((e=>{e.setDate(e.getDate()-(e.getDay()+7-t)%7),e.setHours(0,0,0,0)}),((t,e)=>{t.setDate(t.getDate()+7*e)}),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/mi))}const Oi=Di(0),Mi=Di(1),Ii=Di(2),Fi=Di(3),$i=Di(4),Ri=Di(5),Zi=Di(6);Oi.range,Mi.range,Ii.range,Fi.range,$i.range,Ri.range,Zi.range;function Pi(t){return ki((e=>{e.setUTCDate(e.getUTCDate()-(e.getUTCDay()+7-t)%7),e.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+7*e)}),((t,e)=>(e-t)/mi))}const ji=Pi(0),Yi=Pi(1),zi=Pi(2),Ui=Pi(3),Wi=Pi(4),qi=Pi(5),Hi=Pi(6),Vi=(ji.range,Yi.range,zi.range,Ui.range,Wi.range,qi.range,Hi.range,ki((t=>{t.setDate(1),t.setHours(0,0,0,0)}),((t,e)=>{t.setMonth(t.getMonth()+e)}),((t,e)=>e.getMonth()-t.getMonth()+12*(e.getFullYear()-t.getFullYear())),(t=>t.getMonth()))),Gi=(Vi.range,ki((t=>{t.setUTCDate(1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCMonth(t.getUTCMonth()+e)}),((t,e)=>e.getUTCMonth()-t.getUTCMonth()+12*(e.getUTCFullYear()-t.getUTCFullYear())),(t=>t.getUTCMonth()))),Xi=(Gi.range,ki((t=>{t.setMonth(0,1),t.setHours(0,0,0,0)}),((t,e)=>{t.setFullYear(t.getFullYear()+e)}),((t,e)=>e.getFullYear()-t.getFullYear()),(t=>t.getFullYear())));Xi.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setFullYear(Math.floor(e.getFullYear()/t)*t),e.setMonth(0,1),e.setHours(0,0,0,0)}),((e,n)=>{e.setFullYear(e.getFullYear()+n*t)})):null;Xi.range;const Ki=ki((t=>{t.setUTCMonth(0,1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCFullYear(t.getUTCFullYear()+e)}),((t,e)=>e.getUTCFullYear()-t.getUTCFullYear()),(t=>t.getUTCFullYear()));Ki.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setUTCFullYear(Math.floor(e.getUTCFullYear()/t)*t),e.setUTCMonth(0,1),e.setUTCHours(0,0,0,0)}),((e,n)=>{e.setUTCFullYear(e.getUTCFullYear()+n*t)})):null;Ki.range;function Qi(t,e,n,r,i,a){const s=[[Ei,1,pi],[Ei,5,5e3],[Ei,15,15e3],[Ei,30,3e4],[a,1,fi],[a,5,3e5],[a,15,9e5],[a,30,18e5],[i,1,gi],[i,3,108e5],[i,6,216e5],[i,12,432e5],[r,1,yi],[r,2,1728e5],[n,1,mi],[e,1,bi],[e,3,7776e6],[t,1,_i]];function o(e,n,r){const i=Math.abs(n-e)/r,a=vr((([,,t])=>t)).right(s,i);if(a===s.length)return t.every(br(e/_i,n/_i,r));if(0===a)return wi.every(Math.max(br(e,n,r),1));const[o,c]=s[i/s[a-1][2]<s[a][2]/i?a-1:a];return o.every(c)}return[function(t,e,n){const r=e<t;r&&([t,e]=[e,t]);const i=n&&"function"==typeof n.range?n:o(t,e,n),a=i?i.range(t,+e+1):[];return r?a.reverse():a},o]}const[Ji,ta]=Qi(Ki,Gi,ji,Ni,Ai,Ti),[ea,na]=Qi(Xi,Vi,Oi,Li,Si,Ci);function ra(t){if(0<=t.y&&t.y<100){var e=new Date(-1,t.m,t.d,t.H,t.M,t.S,t.L);return e.setFullYear(t.y),e}return new Date(t.y,t.m,t.d,t.H,t.M,t.S,t.L)}function ia(t){if(0<=t.y&&t.y<100){var e=new Date(Date.UTC(-1,t.m,t.d,t.H,t.M,t.S,t.L));return e.setUTCFullYear(t.y),e}return new Date(Date.UTC(t.y,t.m,t.d,t.H,t.M,t.S,t.L))}function aa(t,e,n){return{y:t,m:e,d:n,H:0,M:0,S:0,L:0}}var sa,oa,ca={"-":"",_:" ",0:"0"},la=/^\s*\d+/,ha=/^%/,ua=/[\\^$*+?|[\]().{}]/g;function da(t,e,n){var r=t<0?"-":"",i=(r?-t:t)+"",a=i.length;return r+(a<n?new Array(n-a+1).join(e)+i:i)}function pa(t){return t.replace(ua,"\\$&")}function fa(t){return new RegExp("^(?:"+t.map(pa).join("|")+")","i")}function ga(t){return new Map(t.map(((t,e)=>[t.toLowerCase(),e])))}function ya(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.w=+r[0],n+r[0].length):-1}function ma(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.u=+r[0],n+r[0].length):-1}function ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.U=+r[0],n+r[0].length):-1}function _a(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.V=+r[0],n+r[0].length):-1}function xa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.W=+r[0],n+r[0].length):-1}function va(t,e,n){var r=la.exec(e.slice(n,n+4));return r?(t.y=+r[0],n+r[0].length):-1}function ka(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.y=+r[0]+(+r[0]>68?1900:2e3),n+r[0].length):-1}function wa(t,e,n){var r=/^(Z)|([+-]\d\d)(?::?(\d\d))?/.exec(e.slice(n,n+6));return r?(t.Z=r[1]?0:-(r[2]+(r[3]||"00")),n+r[0].length):-1}function Ea(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.q=3*r[0]-3,n+r[0].length):-1}function Ca(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.m=r[0]-1,n+r[0].length):-1}function Ta(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.d=+r[0],n+r[0].length):-1}function Sa(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.m=0,t.d=+r[0],n+r[0].length):-1}function Aa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.H=+r[0],n+r[0].length):-1}function La(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.M=+r[0],n+r[0].length):-1}function Ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.S=+r[0],n+r[0].length):-1}function Na(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.L=+r[0],n+r[0].length):-1}function Da(t,e,n){var r=la.exec(e.slice(n,n+6));return r?(t.L=Math.floor(r[0]/1e3),n+r[0].length):-1}function Oa(t,e,n){var r=ha.exec(e.slice(n,n+1));return r?n+r[0].length:-1}function Ma(t,e,n){var r=la.exec(e.slice(n));return r?(t.Q=+r[0],n+r[0].length):-1}function Ia(t,e,n){var r=la.exec(e.slice(n));return r?(t.s=+r[0],n+r[0].length):-1}function Fa(t,e){return da(t.getDate(),e,2)}function $a(t,e){return da(t.getHours(),e,2)}function Ra(t,e){return da(t.getHours()%12||12,e,2)}function Za(t,e){return da(1+Li.count(Xi(t),t),e,3)}function Pa(t,e){return da(t.getMilliseconds(),e,3)}function ja(t,e){return Pa(t,e)+"000"}function Ya(t,e){return da(t.getMonth()+1,e,2)}function za(t,e){return da(t.getMinutes(),e,2)}function Ua(t,e){return da(t.getSeconds(),e,2)}function Wa(t){var e=t.getDay();return 0===e?7:e}function qa(t,e){return da(Oi.count(Xi(t)-1,t),e,2)}function Ha(t){var e=t.getDay();return e>=4||0===e?$i(t):$i.ceil(t)}function Va(t,e){return t=Ha(t),da($i.count(Xi(t),t)+(4===Xi(t).getDay()),e,2)}function Ga(t){return t.getDay()}function Xa(t,e){return da(Mi.count(Xi(t)-1,t),e,2)}function Ka(t,e){return da(t.getFullYear()%100,e,2)}function Qa(t,e){return da((t=Ha(t)).getFullYear()%100,e,2)}function Ja(t,e){return da(t.getFullYear()%1e4,e,4)}function ts(t,e){var n=t.getDay();return da((t=n>=4||0===n?$i(t):$i.ceil(t)).getFullYear()%1e4,e,4)}function es(t){var e=t.getTimezoneOffset();return(e>0?"-":(e*=-1,"+"))+da(e/60|0,"0",2)+da(e%60,"0",2)}function ns(t,e){return da(t.getUTCDate(),e,2)}function rs(t,e){return da(t.getUTCHours(),e,2)}function is(t,e){return da(t.getUTCHours()%12||12,e,2)}function as(t,e){return da(1+Bi.count(Ki(t),t),e,3)}function ss(t,e){return da(t.getUTCMilliseconds(),e,3)}function os(t,e){return ss(t,e)+"000"}function cs(t,e){return da(t.getUTCMonth()+1,e,2)}function ls(t,e){return da(t.getUTCMinutes(),e,2)}function hs(t,e){return da(t.getUTCSeconds(),e,2)}function us(t){var e=t.getUTCDay();return 0===e?7:e}function ds(t,e){return da(ji.count(Ki(t)-1,t),e,2)}function ps(t){var e=t.getUTCDay();return e>=4||0===e?Wi(t):Wi.ceil(t)}function fs(t,e){return t=ps(t),da(Wi.count(Ki(t),t)+(4===Ki(t).getUTCDay()),e,2)}function gs(t){return t.getUTCDay()}function ys(t,e){return da(Yi.count(Ki(t)-1,t),e,2)}function ms(t,e){return da(t.getUTCFullYear()%100,e,2)}function bs(t,e){return da((t=ps(t)).getUTCFullYear()%100,e,2)}function _s(t,e){return da(t.getUTCFullYear()%1e4,e,4)}function xs(t,e){var n=t.getUTCDay();return da((t=n>=4||0===n?Wi(t):Wi.ceil(t)).getUTCFullYear()%1e4,e,4)}function vs(){return"+0000"}function ks(){return"%"}function ws(t){return+t}function Es(t){return Math.floor(+t/1e3)}function Cs(t){return new Date(t)}function Ts(t){return t instanceof Date?+t:+new Date(+t)}function Ss(t,e,n,r,i,a,s,o,c,l){var h=Pr(),u=h.invert,d=h.domain,p=l(".%L"),f=l(":%S"),g=l("%I:%M"),y=l("%I %p"),m=l("%a %d"),b=l("%b %d"),_=l("%B"),x=l("%Y");function v(t){return(c(t)<t?p:o(t)<t?f:s(t)<t?g:a(t)<t?y:r(t)<t?i(t)<t?m:b:n(t)<t?_:x)(t)}return h.invert=function(t){return new Date(u(t))},h.domain=function(t){return arguments.length?d(Array.from(t,Ts)):d().map(Cs)},h.ticks=function(e){var n=d();return t(n[0],n[n.length-1],null==e?10:e)},h.tickFormat=function(t,e){return null==e?v:l(e)},h.nice=function(t){var n=d();return t&&"function"==typeof t.range||(t=e(n[0],n[n.length-1],null==t?10:t)),t?d(function(t,e){var n,r=0,i=(t=t.slice()).length-1,a=t[r],s=t[i];return s<a&&(n=r,r=i,i=n,n=a,a=s,s=n),t[r]=e.floor(a),t[i]=e.ceil(s),t}(n,t)):h},h.copy=function(){return Rr(h,Ss(t,e,n,r,i,a,s,o,c,l))},h}function As(){return jr.apply(Ss(ea,na,Xi,Vi,Oi,Li,Si,Ci,Ei,oa).domain([new Date(2e3,0,1),new Date(2e3,0,2)]),arguments)}function Ls(t){return"string"==typeof t?new St([[document.querySelector(t)]],[document.documentElement]):new St([[t]],Tt)}function Bs(t){return"string"==typeof t?new St([document.querySelectorAll(t)],[document.documentElement]):new St([m(t)],Tt)}function Ns(t){return function(){return t}}!function(t){sa=function(t){var e=t.dateTime,n=t.date,r=t.time,i=t.periods,a=t.days,s=t.shortDays,o=t.months,c=t.shortMonths,l=fa(i),h=ga(i),u=fa(a),d=ga(a),p=fa(s),f=ga(s),g=fa(o),y=ga(o),m=fa(c),b=ga(c),_={a:function(t){return s[t.getDay()]},A:function(t){return a[t.getDay()]},b:function(t){return c[t.getMonth()]},B:function(t){return o[t.getMonth()]},c:null,d:Fa,e:Fa,f:ja,g:Qa,G:ts,H:$a,I:Ra,j:Za,L:Pa,m:Ya,M:za,p:function(t){return i[+(t.getHours()>=12)]},q:function(t){return 1+~~(t.getMonth()/3)},Q:ws,s:Es,S:Ua,u:Wa,U:qa,V:Va,w:Ga,W:Xa,x:null,X:null,y:Ka,Y:Ja,Z:es,"%":ks},x={a:function(t){return s[t.getUTCDay()]},A:function(t){return a[t.getUTCDay()]},b:function(t){return c[t.getUTCMonth()]},B:function(t){return o[t.getUTCMonth()]},c:null,d:ns,e:ns,f:os,g:bs,G:xs,H:rs,I:is,j:as,L:ss,m:cs,M:ls,p:function(t){return i[+(t.getUTCHours()>=12)]},q:function(t){return 1+~~(t.getUTCMonth()/3)},Q:ws,s:Es,S:hs,u:us,U:ds,V:fs,w:gs,W:ys,x:null,X:null,y:ms,Y:_s,Z:vs,"%":ks},v={a:function(t,e,n){var r=p.exec(e.slice(n));return r?(t.w=f.get(r[0].toLowerCase()),n+r[0].length):-1},A:function(t,e,n){var r=u.exec(e.slice(n));return r?(t.w=d.get(r[0].toLowerCase()),n+r[0].length):-1},b:function(t,e,n){var r=m.exec(e.slice(n));return r?(t.m=b.get(r[0].toLowerCase()),n+r[0].length):-1},B:function(t,e,n){var r=g.exec(e.slice(n));return r?(t.m=y.get(r[0].toLowerCase()),n+r[0].length):-1},c:function(t,n,r){return E(t,e,n,r)},d:Ta,e:Ta,f:Da,g:ka,G:va,H:Aa,I:Aa,j:Sa,L:Na,m:Ca,M:La,p:function(t,e,n){var r=l.exec(e.slice(n));return r?(t.p=h.get(r[0].toLowerCase()),n+r[0].length):-1},q:Ea,Q:Ma,s:Ia,S:Ba,u:ma,U:ba,V:_a,w:ya,W:xa,x:function(t,e,r){return E(t,n,e,r)},X:function(t,e,n){return E(t,r,e,n)},y:ka,Y:va,Z:wa,"%":Oa};function k(t,e){return function(n){var r,i,a,s=[],o=-1,c=0,l=t.length;for(n instanceof Date||(n=new Date(+n));++o<l;)37===t.charCodeAt(o)&&(s.push(t.slice(c,o)),null!=(i=ca[r=t.charAt(++o)])?r=t.charAt(++o):i="e"===r?" ":"0",(a=e[r])&&(r=a(n,i)),s.push(r),c=o+1);return s.push(t.slice(c,o)),s.join("")}}function w(t,e){return function(n){var r,i,a=aa(1900,void 0,1);if(E(a,t,n+="",0)!=n.length)return null;if("Q"in a)return new Date(a.Q);if("s"in a)return new Date(1e3*a.s+("L"in a?a.L:0));if(e&&!("Z"in a)&&(a.Z=0),"p"in a&&(a.H=a.H%12+12*a.p),void 0===a.m&&(a.m="q"in a?a.q:0),"V"in a){if(a.V<1||a.V>53)return null;"w"in a||(a.w=1),"Z"in a?(i=(r=ia(aa(a.y,0,1))).getUTCDay(),r=i>4||0===i?Yi.ceil(r):Yi(r),r=Bi.offset(r,7*(a.V-1)),a.y=r.getUTCFullYear(),a.m=r.getUTCMonth(),a.d=r.getUTCDate()+(a.w+6)%7):(i=(r=ra(aa(a.y,0,1))).getDay(),r=i>4||0===i?Mi.ceil(r):Mi(r),r=Li.offset(r,7*(a.V-1)),a.y=r.getFullYear(),a.m=r.getMonth(),a.d=r.getDate()+(a.w+6)%7)}else("W"in a||"U"in a)&&("w"in a||(a.w="u"in a?a.u%7:"W"in a?1:0),i="Z"in a?ia(aa(a.y,0,1)).getUTCDay():ra(aa(a.y,0,1)).getDay(),a.m=0,a.d="W"in a?(a.w+6)%7+7*a.W-(i+5)%7:a.w+7*a.U-(i+6)%7);return"Z"in a?(a.H+=a.Z/100|0,a.M+=a.Z%100,ia(a)):ra(a)}}function E(t,e,n,r){for(var i,a,s=0,o=e.length,c=n.length;s<o;){if(r>=c)return-1;if(37===(i=e.charCodeAt(s++))){if(i=e.charAt(s++),!(a=v[i in ca?e.charAt(s++):i])||(r=a(t,n,r))<0)return-1}else if(i!=n.charCodeAt(r++))return-1}return r}return _.x=k(n,_),_.X=k(r,_),_.c=k(e,_),x.x=k(n,x),x.X=k(r,x),x.c=k(e,x),{format:function(t){var e=k(t+="",_);return e.toString=function(){return t},e},parse:function(t){var e=w(t+="",!1);return e.toString=function(){return t},e},utcFormat:function(t){var e=k(t+="",x);return e.toString=function(){return t},e},utcParse:function(t){var e=w(t+="",!0);return e.toString=function(){return t},e}}}(t),oa=sa.format,sa.parse,sa.utcFormat,sa.utcParse}({dateTime:"%x, %X",date:"%-m/%-d/%Y",time:"%-I:%M:%S %p",periods:["AM","PM"],days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],shortDays:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});const Ds=Math.abs,Os=Math.atan2,Ms=Math.cos,Is=Math.max,Fs=Math.min,$s=Math.sin,Rs=Math.sqrt,Zs=1e-12,Ps=Math.PI,js=Ps/2,Ys=2*Ps;function zs(t){return t>1?0:t<-1?Ps:Math.acos(t)}function Us(t){return t>=1?js:t<=-1?-js:Math.asin(t)}const Ws=Math.PI,qs=2*Ws,Hs=1e-6,Vs=qs-Hs;function Gs(t){this._+=t[0];for(let e=1,n=t.length;e<n;++e)this._+=arguments[e]+t[e]}class Xs{constructor(t){this._x0=this._y0=this._x1=this._y1=null,this._="",this._append=null==t?Gs:function(t){let e=Math.floor(t);if(!(e>=0))throw new Error(`invalid digits: ${t}`);if(e>15)return Gs;const n=10**e;return function(t){this._+=t[0];for(let e=1,r=t.length;e<r;++e)this._+=Math.round(arguments[e]*n)/n+t[e]}}(t)}moveTo(t,e){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}`}closePath(){null!==this._x1&&(this._x1=this._x0,this._y1=this._y0,this._append`Z`)}lineTo(t,e){this._append`L${this._x1=+t},${this._y1=+e}`}quadraticCurveTo(t,e,n,r){this._append`Q${+t},${+e},${this._x1=+n},${this._y1=+r}`}bezierCurveTo(t,e,n,r,i,a){this._append`C${+t},${+e},${+n},${+r},${this._x1=+i},${this._y1=+a}`}arcTo(t,e,n,r,i){if(t=+t,e=+e,n=+n,r=+r,(i=+i)<0)throw new Error(`negative radius: ${i}`);let a=this._x1,s=this._y1,o=n-t,c=r-e,l=a-t,h=s-e,u=l*l+h*h;if(null===this._x1)this._append`M${this._x1=t},${this._y1=e}`;else if(u>Hs)if(Math.abs(h*o-c*l)>Hs&&i){let d=n-a,p=r-s,f=o*o+c*c,g=d*d+p*p,y=Math.sqrt(f),m=Math.sqrt(u),b=i*Math.tan((Ws-Math.acos((f+u-g)/(2*y*m)))/2),_=b/m,x=b/y;Math.abs(_-1)>Hs&&this._append`L${t+_*l},${e+_*h}`,this._append`A${i},${i},0,0,${+(h*d>l*p)},${this._x1=t+x*o},${this._y1=e+x*c}`}else this._append`L${this._x1=t},${this._y1=e}`;else;}arc(t,e,n,r,i,a){if(t=+t,e=+e,a=!!a,(n=+n)<0)throw new Error(`negative radius: ${n}`);let s=n*Math.cos(r),o=n*Math.sin(r),c=t+s,l=e+o,h=1^a,u=a?r-i:i-r;null===this._x1?this._append`M${c},${l}`:(Math.abs(this._x1-c)>Hs||Math.abs(this._y1-l)>Hs)&&this._append`L${c},${l}`,n&&(u<0&&(u=u%qs+qs),u>Vs?this._append`A${n},${n},0,1,${h},${t-s},${e-o}A${n},${n},0,1,${h},${this._x1=c},${this._y1=l}`:u>Hs&&this._append`A${n},${n},0,${+(u>=Ws)},${h},${this._x1=t+n*Math.cos(i)},${this._y1=e+n*Math.sin(i)}`)}rect(t,e,n,r){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}h${n=+n}v${+r}h${-n}Z`}toString(){return this._}}function Ks(t){let e=3;return t.digits=function(n){if(!arguments.length)return e;if(null==n)e=null;else{const t=Math.floor(n);if(!(t>=0))throw new RangeError(`invalid digits: ${n}`);e=t}return t},()=>new Xs(e)}function Qs(t){return t.innerRadius}function Js(t){return t.outerRadius}function to(t){return t.startAngle}function eo(t){return t.endAngle}function no(t){return t&&t.padAngle}function ro(t,e,n,r,i,a,s,o){var c=n-t,l=r-e,h=s-i,u=o-a,d=u*c-h*l;if(!(d*d<Zs))return[t+(d=(h*(e-a)-u*(t-i))/d)*c,e+d*l]}function io(t,e,n,r,i,a,s){var o=t-n,c=e-r,l=(s?a:-a)/Rs(o*o+c*c),h=l*c,u=-l*o,d=t+h,p=e+u,f=n+h,g=r+u,y=(d+f)/2,m=(p+g)/2,b=f-d,_=g-p,x=b*b+_*_,v=i-a,k=d*g-f*p,w=(_<0?-1:1)*Rs(Is(0,v*v*x-k*k)),E=(k*_-b*w)/x,C=(-k*b-_*w)/x,T=(k*_+b*w)/x,S=(-k*b+_*w)/x,A=E-y,L=C-m,B=T-y,N=S-m;return A*A+L*L>B*B+N*N&&(E=T,C=S),{cx:E,cy:C,x01:-h,y01:-u,x11:E*(i/v-1),y11:C*(i/v-1)}}function ao(){var t=Qs,e=Js,n=Ns(0),r=null,i=to,a=eo,s=no,o=null,c=Ks(l);function l(){var l,h,u=+t.apply(this,arguments),d=+e.apply(this,arguments),p=i.apply(this,arguments)-js,f=a.apply(this,arguments)-js,g=Ds(f-p),y=f>p;if(o||(o=l=c()),d<u&&(h=d,d=u,u=h),d>Zs)if(g>Ys-Zs)o.moveTo(d*Ms(p),d*$s(p)),o.arc(0,0,d,p,f,!y),u>Zs&&(o.moveTo(u*Ms(f),u*$s(f)),o.arc(0,0,u,f,p,y));else{var m,b,_=p,x=f,v=p,k=f,w=g,E=g,C=s.apply(this,arguments)/2,T=C>Zs&&(r?+r.apply(this,arguments):Rs(u*u+d*d)),S=Fs(Ds(d-u)/2,+n.apply(this,arguments)),A=S,L=S;if(T>Zs){var B=Us(T/u*$s(C)),N=Us(T/d*$s(C));(w-=2*B)>Zs?(v+=B*=y?1:-1,k-=B):(w=0,v=k=(p+f)/2),(E-=2*N)>Zs?(_+=N*=y?1:-1,x-=N):(E=0,_=x=(p+f)/2)}var D=d*Ms(_),O=d*$s(_),M=u*Ms(k),I=u*$s(k);if(S>Zs){var F,$=d*Ms(x),R=d*$s(x),Z=u*Ms(v),P=u*$s(v);if(g<Ps)if(F=ro(D,O,Z,P,$,R,M,I)){var j=D-F[0],Y=O-F[1],z=$-F[0],U=R-F[1],W=1/$s(zs((j*z+Y*U)/(Rs(j*j+Y*Y)*Rs(z*z+U*U)))/2),q=Rs(F[0]*F[0]+F[1]*F[1]);A=Fs(S,(u-q)/(W-1)),L=Fs(S,(d-q)/(W+1))}else A=L=0}E>Zs?L>Zs?(m=io(Z,P,D,O,d,L,y),b=io($,R,M,I,d,L,y),o.moveTo(m.cx+m.x01,m.cy+m.y01),L<S?o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,d,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),!y),o.arc(b.cx,b.cy,L,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):(o.moveTo(D,O),o.arc(0,0,d,_,x,!y)):o.moveTo(D,O),u>Zs&&w>Zs?A>Zs?(m=io(M,I,$,R,u,-A,y),b=io(D,O,Z,P,u,-A,y),o.lineTo(m.cx+m.x01,m.cy+m.y01),A<S?o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,u,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),y),o.arc(b.cx,b.cy,A,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):o.arc(0,0,u,k,v,y):o.lineTo(M,I)}else o.moveTo(0,0);if(o.closePath(),l)return o=null,l+""||null}return l.centroid=function(){var n=(+t.apply(this,arguments)+ +e.apply(this,arguments))/2,r=(+i.apply(this,arguments)+ +a.apply(this,arguments))/2-Ps/2;return[Ms(r)*n,$s(r)*n]},l.innerRadius=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),l):t},l.outerRadius=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),l):e},l.cornerRadius=function(t){return arguments.length?(n="function"==typeof t?t:Ns(+t),l):n},l.padRadius=function(t){return arguments.length?(r=null==t?null:"function"==typeof t?t:Ns(+t),l):r},l.startAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),l):i},l.endAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),l):a},l.padAngle=function(t){return arguments.length?(s="function"==typeof t?t:Ns(+t),l):s},l.context=function(t){return arguments.length?(o=null==t?null:t,l):o},l}Array.prototype.slice;function so(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function oo(t){this._context=t}function co(t){return new oo(t)}function lo(t){return t[0]}function ho(t){return t[1]}function uo(t,e){var n=Ns(!0),r=null,i=co,a=null,s=Ks(o);function o(o){var c,l,h,u=(o=so(o)).length,d=!1;for(null==r&&(a=i(h=s())),c=0;c<=u;++c)!(c<u&&n(l=o[c],c,o))===d&&((d=!d)?a.lineStart():a.lineEnd()),d&&a.point(+t(l,c,o),+e(l,c,o));if(h)return a=null,h+""||null}return t="function"==typeof t?t:void 0===t?lo:Ns(t),e="function"==typeof e?e:void 0===e?ho:Ns(e),o.x=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),o):t},o.y=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),o):e},o.defined=function(t){return arguments.length?(n="function"==typeof t?t:Ns(!!t),o):n},o.curve=function(t){return arguments.length?(i=t,null!=r&&(a=i(r)),o):i},o.context=function(t){return arguments.length?(null==t?r=a=null:a=i(r=t),o):r},o}function po(t,e){return e<t?-1:e>t?1:e>=t?0:NaN}function fo(t){return t}function go(){var t=fo,e=po,n=null,r=Ns(0),i=Ns(Ys),a=Ns(0);function s(s){var o,c,l,h,u,d=(s=so(s)).length,p=0,f=new Array(d),g=new Array(d),y=+r.apply(this,arguments),m=Math.min(Ys,Math.max(-Ys,i.apply(this,arguments)-y)),b=Math.min(Math.abs(m)/d,a.apply(this,arguments)),_=b*(m<0?-1:1);for(o=0;o<d;++o)(u=g[f[o]=o]=+t(s[o],o,s))>0&&(p+=u);for(null!=e?f.sort((function(t,n){return e(g[t],g[n])})):null!=n&&f.sort((function(t,e){return n(s[t],s[e])})),o=0,l=p?(m-d*_)/p:0;o<d;++o,y=h)c=f[o],h=y+((u=g[c])>0?u*l:0)+_,g[c]={data:s[c],index:o,value:u,startAngle:y,endAngle:h,padAngle:b};return g}return s.value=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),s):t},s.sortValues=function(t){return arguments.length?(e=t,n=null,s):e},s.sort=function(t){return arguments.length?(n=t,e=null,s):n},s.startAngle=function(t){return arguments.length?(r="function"==typeof t?t:Ns(+t),s):r},s.endAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),s):i},s.padAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),s):a},s}function yo(){}function mo(t,e,n){t._context.bezierCurveTo((2*t._x0+t._x1)/3,(2*t._y0+t._y1)/3,(t._x0+2*t._x1)/3,(t._y0+2*t._y1)/3,(t._x0+4*t._x1+e)/6,(t._y0+4*t._y1+n)/6)}function bo(t){this._context=t}function _o(t){return new bo(t)}function xo(t){this._context=t}function vo(t){return new xo(t)}function ko(t){this._context=t}function wo(t){return new ko(t)}oo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._point=0},lineEnd:function(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._context.lineTo(t,e)}}},bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){switch(this._point){case 3:mo(this,this._x1,this._y1);case 2:this._context.lineTo(this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,this._context.lineTo((5*this._x0+this._x1)/6,(5*this._y0+this._y1)/6);default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},xo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._y0=this._y1=this._y2=this._y3=this._y4=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x2,this._y2),this._context.closePath();break;case 2:this._context.moveTo((this._x2+2*this._x3)/3,(this._y2+2*this._y3)/3),this._context.lineTo((this._x3+2*this._x2)/3,(this._y3+2*this._y2)/3),this._context.closePath();break;case 3:this.point(this._x2,this._y2),this.point(this._x3,this._y3),this.point(this._x4,this._y4)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x2=t,this._y2=e;break;case 1:this._point=2,this._x3=t,this._y3=e;break;case 2:this._point=3,this._x4=t,this._y4=e,this._context.moveTo((this._x0+4*this._x1+t)/6,(this._y0+4*this._y1+e)/6);break;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},ko.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3;var n=(this._x0+4*this._x1+t)/6,r=(this._y0+4*this._y1+e)/6;this._line?this._context.lineTo(n,r):this._context.moveTo(n,r);break;case 3:this._point=4;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}};class Eo{constructor(t,e){this._context=t,this._x=e}areaStart(){this._line=0}areaEnd(){this._line=NaN}lineStart(){this._point=0}lineEnd(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line}point(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._x?this._context.bezierCurveTo(this._x0=(this._x0+t)/2,this._y0,this._x0,e,t,e):this._context.bezierCurveTo(this._x0,this._y0=(this._y0+e)/2,t,this._y0,t,e)}this._x0=t,this._y0=e}}function Co(t){return new Eo(t,!0)}function To(t){return new Eo(t,!1)}function So(t,e){this._basis=new bo(t),this._beta=e}So.prototype={lineStart:function(){this._x=[],this._y=[],this._basis.lineStart()},lineEnd:function(){var t=this._x,e=this._y,n=t.length-1;if(n>0)for(var r,i=t[0],a=e[0],s=t[n]-i,o=e[n]-a,c=-1;++c<=n;)r=c/n,this._basis.point(this._beta*t[c]+(1-this._beta)*(i+r*s),this._beta*e[c]+(1-this._beta)*(a+r*o));this._x=this._y=null,this._basis.lineEnd()},point:function(t,e){this._x.push(+t),this._y.push(+e)}};const Ao=function t(e){function n(t){return 1===e?new bo(t):new So(t,e)}return n.beta=function(e){return t(+e)},n}(.85);function Lo(t,e,n){t._context.bezierCurveTo(t._x1+t._k*(t._x2-t._x0),t._y1+t._k*(t._y2-t._y0),t._x2+t._k*(t._x1-e),t._y2+t._k*(t._y1-n),t._x2,t._y2)}function Bo(t,e){this._context=t,this._k=(1-e)/6}Bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:Lo(this,this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2,this._x1=t,this._y1=e;break;case 2:this._point=3;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const No=function t(e){function n(t){return new Bo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Do(t,e){this._context=t,this._k=(1-e)/6}Do.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Oo=function t(e){function n(t){return new Do(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Mo(t,e){this._context=t,this._k=(1-e)/6}Mo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Io=function t(e){function n(t){return new Mo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Fo(t,e,n){var r=t._x1,i=t._y1,a=t._x2,s=t._y2;if(t._l01_a>Zs){var o=2*t._l01_2a+3*t._l01_a*t._l12_a+t._l12_2a,c=3*t._l01_a*(t._l01_a+t._l12_a);r=(r*o-t._x0*t._l12_2a+t._x2*t._l01_2a)/c,i=(i*o-t._y0*t._l12_2a+t._y2*t._l01_2a)/c}if(t._l23_a>Zs){var l=2*t._l23_2a+3*t._l23_a*t._l12_a+t._l12_2a,h=3*t._l23_a*(t._l23_a+t._l12_a);a=(a*l+t._x1*t._l23_2a-e*t._l12_2a)/h,s=(s*l+t._y1*t._l23_2a-n*t._l12_2a)/h}t._context.bezierCurveTo(r,i,a,s,t._x2,t._y2)}function $o(t,e){this._context=t,this._alpha=e}$o.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:this.point(this._x2,this._y2)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Ro=function t(e){function n(t){return e?new $o(t,e):new Bo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function Zo(t,e){this._context=t,this._alpha=e}Zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Po=function t(e){function n(t){return e?new Zo(t,e):new Do(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function jo(t,e){this._context=t,this._alpha=e}jo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Yo=function t(e){function n(t){return e?new jo(t,e):new Mo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function zo(t){this._context=t}function Uo(t){return new zo(t)}function Wo(t){return t<0?-1:1}function qo(t,e,n){var r=t._x1-t._x0,i=e-t._x1,a=(t._y1-t._y0)/(r||i<0&&-0),s=(n-t._y1)/(i||r<0&&-0),o=(a*i+s*r)/(r+i);return(Wo(a)+Wo(s))*Math.min(Math.abs(a),Math.abs(s),.5*Math.abs(o))||0}function Ho(t,e){var n=t._x1-t._x0;return n?(3*(t._y1-t._y0)/n-e)/2:e}function Vo(t,e,n){var r=t._x0,i=t._y0,a=t._x1,s=t._y1,o=(a-r)/3;t._context.bezierCurveTo(r+o,i+o*e,a-o,s-o*n,a,s)}function Go(t){this._context=t}function Xo(t){this._context=new Ko(t)}function Ko(t){this._context=t}function Qo(t){return new Go(t)}function Jo(t){return new Xo(t)}function tc(t){this._context=t}function ec(t){var e,n,r=t.length-1,i=new Array(r),a=new Array(r),s=new Array(r);for(i[0]=0,a[0]=2,s[0]=t[0]+2*t[1],e=1;e<r-1;++e)i[e]=1,a[e]=4,s[e]=4*t[e]+2*t[e+1];for(i[r-1]=2,a[r-1]=7,s[r-1]=8*t[r-1]+t[r],e=1;e<r;++e)n=i[e]/a[e-1],a[e]-=n,s[e]-=n*s[e-1];for(i[r-1]=s[r-1]/a[r-1],e=r-2;e>=0;--e)i[e]=(s[e]-i[e+1])/a[e];for(a[r-1]=(t[r]+i[r-1])/2,e=0;e<r-1;++e)a[e]=2*t[e+1]-i[e+1];return[i,a]}function nc(t){return new tc(t)}function rc(t,e){this._context=t,this._t=e}function ic(t){return new rc(t,.5)}function ac(t){return new rc(t,0)}function sc(t){return new rc(t,1)}function oc(t,e,n){this.k=t,this.x=e,this.y=n}zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._point=0},lineEnd:function(){this._point&&this._context.closePath()},point:function(t,e){t=+t,e=+e,this._point?this._context.lineTo(t,e):(this._point=1,this._context.moveTo(t,e))}},Go.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=this._t0=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x1,this._y1);break;case 3:Vo(this,this._t0,Ho(this,this._t0))}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){var n=NaN;if(e=+e,(t=+t)!==this._x1||e!==this._y1){switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,Vo(this,Ho(this,n=qo(this,t,e)),n);break;default:Vo(this,this._t0,n=qo(this,t,e))}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e,this._t0=n}}},(Xo.prototype=Object.create(Go.prototype)).point=function(t,e){Go.prototype.point.call(this,e,t)},Ko.prototype={moveTo:function(t,e){this._context.moveTo(e,t)},closePath:function(){this._context.closePath()},lineTo:function(t,e){this._context.lineTo(e,t)},bezierCurveTo:function(t,e,n,r,i,a){this._context.bezierCurveTo(e,t,r,n,a,i)}},tc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=[],this._y=[]},lineEnd:function(){var t=this._x,e=this._y,n=t.length;if(n)if(this._line?this._context.lineTo(t[0],e[0]):this._context.moveTo(t[0],e[0]),2===n)this._context.lineTo(t[1],e[1]);else for(var r=ec(t),i=ec(e),a=0,s=1;s<n;++a,++s)this._context.bezierCurveTo(r[0][a],i[0][a],r[1][a],i[1][a],t[s],e[s]);(this._line||0!==this._line&&1===n)&&this._context.closePath(),this._line=1-this._line,this._x=this._y=null},point:function(t,e){this._x.push(+t),this._y.push(+e)}},rc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=this._y=NaN,this._point=0},lineEnd:function(){0<this._t&&this._t<1&&2===this._point&&this._context.lineTo(this._x,this._y),(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line>=0&&(this._t=1-this._t,this._line=1-this._line)},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:if(this._t<=0)this._context.lineTo(this._x,e),this._context.lineTo(t,e);else{var n=this._x*(1-this._t)+t*this._t;this._context.lineTo(n,this._y),this._context.lineTo(n,e)}}this._x=t,this._y=e}},oc.prototype={constructor:oc,scale:function(t){return 1===t?this:new oc(this.k*t,this.x,this.y)},translate:function(t,e){return 0===t&0===e?this:new oc(this.k,this.x+this.k*t,this.y+this.k*e)},apply:function(t){return[t[0]*this.k+this.x,t[1]*this.k+this.y]},applyX:function(t){return t*this.k+this.x},applyY:function(t){return t*this.k+this.y},invert:function(t){return[(t[0]-this.x)/this.k,(t[1]-this.y)/this.k]},invertX:function(t){return(t-this.x)/this.k},invertY:function(t){return(t-this.y)/this.k},rescaleX:function(t){return t.copy().domain(t.range().map(this.invertX,this).map(t.invert,t))},rescaleY:function(t){return t.copy().domain(t.range().map(this.invertY,this).map(t.invert,t))},toString:function(){return"translate("+this.x+","+this.y+") scale("+this.k+")"}};new oc(1,0,0);oc.prototype},3352:(t,e,n)=>{"use strict";function r(t,e,n,r){var a,s,o,c,l,h,u,d,p,f,g,y,m;if(a=e.y-t.y,o=t.x-e.x,l=e.x*t.y-t.x*e.y,p=a*n.x+o*n.y+l,f=a*r.x+o*r.y+l,!(0!==p&&0!==f&&i(p,f)||(s=r.y-n.y,c=n.x-r.x,h=r.x*n.y-n.x*r.y,u=s*t.x+c*t.y+h,d=s*e.x+c*e.y+h,0!==u&&0!==d&&i(u,d)||0==(g=a*c-s*o))))return y=Math.abs(g/2),{x:(m=o*h-c*l)<0?(m-y)/g:(m+y)/g,y:(m=s*l-a*h)<0?(m-y)/g:(m+y)/g}}function i(t,e){return t*e>0}function a(t,e,n){var i=t.x,a=t.y,s=[],o=Number.POSITIVE_INFINITY,c=Number.POSITIVE_INFINITY;e.forEach((function(t){o=Math.min(o,t.x),c=Math.min(c,t.y)}));for(var l=i-t.width/2-o,h=a-t.height/2-c,u=0;u<e.length;u++){var d=e[u],p=e[u<e.length-1?u+1:0],f=r(t,n,{x:l+d.x,y:h+d.y},{x:l+p.x,y:h+p.y});f&&s.push(f)}return s.length?(s.length>1&&s.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),s[0]):(console.log("NO INTERSECTION FOUND, RETURN NODE CENTER",t),t)}n.d(e,{A:()=>a})},2930:(t,e,n)=>{"use strict";function r(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}}n.d(e,{q:()=>r})},3349:(t,e,n)=>{"use strict";n.d(e,{a:()=>i});var r=n(6225);function i(t,e){var n=t.append("foreignObject").attr("width","100000"),i=n.append("xhtml:div");i.attr("xmlns","http://www.w3.org/1999/xhtml");var a=e.label;switch(typeof a){case"function":i.insert(a);break;case"object":i.insert((function(){return a}));break;default:i.html(a)}r.bg(i,e.labelStyle),i.style("display","inline-block"),i.style("white-space","nowrap");var s=i.node().getBoundingClientRect();return n.attr("width",s.width).attr("height",s.height),n}},6225:(t,e,n)=>{"use strict";n.d(e,{$p:()=>h,O1:()=>s,WR:()=>u,bF:()=>a,bg:()=>l});var r=n(7514),i=n(3234);function a(t,e){return!!t.children(e).length}function s(t){return c(t.v)+":"+c(t.w)+":"+c(t.name)}var o=/:/g;function c(t){return t?String(t).replace(o,"\\:"):""}function l(t,e){e&&t.attr("style",e)}function h(t,e,n){e&&t.attr("class",e).attr("class",n+" "+t.attr("class"))}function u(t,e){var n=e.graph();if(r.Z(n)){var a=n.transition;if(i.Z(a))return a(t)}return t}},277:(t,e,n)=>{"use strict";n.d(e,{bK:()=>Ve});var r=n(870),i=n(6749),a=n(7452),s=n(2002),o=n(7961),c=n(3836),l=n(4379),h=n(5625);class u{constructor(){var t={};t._next=t._prev=t,this._sentinel=t}dequeue(){var t=this._sentinel,e=t._prev;if(e!==t)return d(e),e}enqueue(t){var e=this._sentinel;t._prev&&t._next&&d(t),t._next=e._next,e._next._prev=t,e._next=t,t._prev=e}toString(){for(var t=[],e=this._sentinel,n=e._prev;n!==e;)t.push(JSON.stringify(n,p)),n=n._prev;return"["+t.join(", ")+"]"}}function d(t){t._prev._next=t._next,t._next._prev=t._prev,delete t._next,delete t._prev}function p(t,e){if("_next"!==t&&"_prev"!==t)return e}var f=s.Z(1);function g(t,e){if(t.nodeCount()<=1)return[];var n=function(t,e){var n=new h.k,i=0,a=0;r.Z(t.nodes(),(function(t){n.setNode(t,{v:t,in:0,out:0})})),r.Z(t.edges(),(function(t){var r=n.edge(t.v,t.w)||0,s=e(t),o=r+s;n.setEdge(t.v,t.w,o),a=Math.max(a,n.node(t.v).out+=s),i=Math.max(i,n.node(t.w).in+=s)}));var s=l.Z(a+i+3).map((function(){return new u})),o=i+1;return r.Z(n.nodes(),(function(t){m(s,o,n.node(t))})),{graph:n,buckets:s,zeroIdx:o}}(t,e||f),i=function(t,e,n){var r,i=[],a=e[e.length-1],s=e[0];for(;t.nodeCount();){for(;r=s.dequeue();)y(t,e,n,r);for(;r=a.dequeue();)y(t,e,n,r);if(t.nodeCount())for(var o=e.length-2;o>0;--o)if(r=e[o].dequeue()){i=i.concat(y(t,e,n,r,!0));break}}return i}(n.graph,n.buckets,n.zeroIdx);return o.Z(c.Z(i,(function(e){return t.outEdges(e.v,e.w)})))}function y(t,e,n,i,a){var s=a?[]:void 0;return r.Z(t.inEdges(i.v),(function(r){var i=t.edge(r),o=t.node(r.v);a&&s.push({v:r.v,w:r.w}),o.out-=i,m(e,n,o)})),r.Z(t.outEdges(i.v),(function(r){var i=t.edge(r),a=r.w,s=t.node(a);s.in-=i,m(e,n,s)})),t.removeNode(i.v),s}function m(t,e,n){n.out?n.in?t[n.out-n.in+e].enqueue(n):t[t.length-1].enqueue(n):t[0].enqueue(n)}function b(t){var e="greedy"===t.graph().acyclicer?g(t,function(t){return function(e){return t.edge(e).weight}}(t)):function(t){var e=[],n={},i={};function s(o){a.Z(i,o)||(i[o]=!0,n[o]=!0,r.Z(t.outEdges(o),(function(t){a.Z(n,t.w)?e.push(t):s(t.w)})),delete n[o])}return r.Z(t.nodes(),s),e}(t);r.Z(e,(function(e){var n=t.edge(e);t.removeEdge(e),n.forwardName=e.name,n.reversed=!0,t.setEdge(e.w,e.v,n,i.Z("rev"))}))}var _=n(1667),x=n(4752),v=n(9651);const k=function(t,e,n){(void 0!==n&&!(0,v.Z)(t[e],n)||void 0===n&&!(e in t))&&(0,x.Z)(t,e,n)};var w=n(1395),E=n(1050),C=n(2701),T=n(7215),S=n(3658),A=n(9169),L=n(7771),B=n(836),N=n(7008),D=n(3234),O=n(7226),M=n(7514),I=n(8843);const F=function(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]};var $=n(1899),R=n(2957);const Z=function(t){return(0,$.Z)(t,(0,R.Z)(t))};const P=function(t,e,n,r,i,a,s){var o=F(t,n),c=F(e,n),l=s.get(c);if(l)k(t,n,l);else{var h=a?a(o,c,n+"",t,e,s):void 0,u=void 0===h;if(u){var d=(0,L.Z)(c),p=!d&&(0,N.Z)(c),f=!d&&!p&&(0,I.Z)(c);h=c,d||p||f?(0,L.Z)(o)?h=o:(0,B.Z)(o)?h=(0,T.Z)(o):p?(u=!1,h=(0,E.Z)(c,!0)):f?(u=!1,h=(0,C.Z)(c,!0)):h=[]:(0,M.Z)(c)||(0,A.Z)(c)?(h=o,(0,A.Z)(o)?h=Z(o):(0,O.Z)(o)&&!(0,D.Z)(o)||(h=(0,S.Z)(c))):u=!1}u&&(s.set(c,h),i(h,c,r,a,s),s.delete(c)),k(t,n,h)}};const j=function t(e,n,r,i,a){e!==n&&(0,w.Z)(n,(function(s,o){if(a||(a=new _.Z),(0,O.Z)(s))P(e,n,o,r,t,i,a);else{var c=i?i(F(e,o),s,o+"",e,n,a):void 0;void 0===c&&(c=s),k(e,o,c)}}),R.Z)};var Y=n(9581),z=n(439);const U=function(t){return(0,Y.Z)((function(e,n){var r=-1,i=n.length,a=i>1?n[i-1]:void 0,s=i>2?n[2]:void 0;for(a=t.length>3&&"function"==typeof a?(i--,a):void 0,s&&(0,z.Z)(n[0],n[1],s)&&(a=i<3?void 0:a,i=1),e=Object(e);++r<i;){var o=n[r];o&&t(e,o,r,a)}return e}))}((function(t,e,n){j(t,e,n)}));var W=n(1666),q=n(3688),H=n(2714);const V=function(t,e,n){for(var r=-1,i=t.length;++r<i;){var a=t[r],s=e(a);if(null!=s&&(void 0===o?s==s&&!(0,H.Z)(s):n(s,o)))var o=s,c=a}return c};const G=function(t,e){return t>e};var X=n(9203);const K=function(t){return t&&t.length?V(t,X.Z,G):void 0};const Q=function(t){var e=null==t?0:t.length;return e?t[e-1]:void 0};var J=n(2693),tt=n(4765);const et=function(t,e){var n={};return e=(0,tt.Z)(e,3),(0,J.Z)(t,(function(t,r,i){(0,x.Z)(n,r,e(t,r,i))})),n};var nt=n(9360);const rt=function(t,e){return t<e};const it=function(t){return t&&t.length?V(t,X.Z,rt):void 0};var at=n(6092);const st=function(){return at.Z.Date.now()};function ot(t,e,n,r){var a;do{a=i.Z(r)}while(t.hasNode(a));return n.dummy=e,t.setNode(a,n),a}function ct(t){var e=new h.k({multigraph:t.isMultigraph()}).setGraph(t.graph());return r.Z(t.nodes(),(function(n){t.children(n).length||e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){e.setEdge(n,t.edge(n))})),e}function lt(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;if(!s&&!o)throw new Error("Not possible to find intersection inside of the rectangle");return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=l*s/o,r=l):(s<0&&(c=-c),n=c,r=c*o/s),{x:i+n,y:a+r}}function ht(t){var e=c.Z(l.Z(dt(t)+1),(function(){return[]}));return r.Z(t.nodes(),(function(n){var r=t.node(n),i=r.rank;nt.Z(i)||(e[i][r.order]=n)})),e}function ut(t,e,n,r){var i={width:0,height:0};return arguments.length>=4&&(i.rank=n,i.order=r),ot(t,"border",i,e)}function dt(t){return K(c.Z(t.nodes(),(function(e){var n=t.node(e).rank;if(!nt.Z(n))return n})))}function pt(t,e){var n=st();try{return e()}finally{console.log(t+" time: "+(st()-n)+"ms")}}function ft(t,e){return e()}function gt(t,e,n,r,i,a){var s={width:0,height:0,rank:a,borderType:e},o=i[e][a-1],c=ot(t,"border",s,n);i[e][a]=c,t.setParent(c,r),o&&t.setEdge(o,c,{weight:1})}function yt(t){var e=t.graph().rankdir.toLowerCase();"bt"!==e&&"rl"!==e||function(t){r.Z(t.nodes(),(function(e){_t(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,_t),a.Z(n,"y")&&_t(n)}))}(t),"lr"!==e&&"rl"!==e||(!function(t){r.Z(t.nodes(),(function(e){xt(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,xt),a.Z(n,"x")&&xt(n)}))}(t),mt(t))}function mt(t){r.Z(t.nodes(),(function(e){bt(t.node(e))})),r.Z(t.edges(),(function(e){bt(t.edge(e))}))}function bt(t){var e=t.width;t.width=t.height,t.height=e}function _t(t){t.y=-t.y}function xt(t){var e=t.x;t.x=t.y,t.y=e}function vt(t){t.graph().dummyChains=[],r.Z(t.edges(),(function(e){!function(t,e){var n,r,i,a=e.v,s=t.node(a).rank,o=e.w,c=t.node(o).rank,l=e.name,h=t.edge(e),u=h.labelRank;if(c===s+1)return;for(t.removeEdge(e),i=0,++s;s<c;++i,++s)h.points=[],n=ot(t,"edge",r={width:0,height:0,edgeLabel:h,edgeObj:e,rank:s},"_d"),s===u&&(r.width=h.width,r.height=h.height,r.dummy="edge-label",r.labelpos=h.labelpos),t.setEdge(a,n,{weight:h.weight},l),0===i&&t.graph().dummyChains.push(n),a=n;t.setEdge(a,o,{weight:h.weight},l)}(t,e)}))}const kt=function(t,e){return t&&t.length?V(t,(0,tt.Z)(e,2),rt):void 0};function wt(t){var e={};r.Z(t.sources(),(function n(r){var i=t.node(r);if(a.Z(e,r))return i.rank;e[r]=!0;var s=it(c.Z(t.outEdges(r),(function(e){return n(e.w)-t.edge(e).minlen})));return s!==Number.POSITIVE_INFINITY&&null!=s||(s=0),i.rank=s}))}function Et(t,e){return t.node(e.w).rank-t.node(e.v).rank-t.edge(e).minlen}function Ct(t){var e,n,r=new h.k({directed:!1}),i=t.nodes()[0],a=t.nodeCount();for(r.setNode(i,{});Tt(r,t)<a;)e=St(r,t),n=r.hasNode(e.v)?Et(t,e):-Et(t,e),At(r,t,n);return r}function Tt(t,e){return r.Z(t.nodes(),(function n(i){r.Z(e.nodeEdges(i),(function(r){var a=r.v,s=i===a?r.w:a;t.hasNode(s)||Et(e,r)||(t.setNode(s,{}),t.setEdge(i,s,{}),n(s))}))})),t.nodeCount()}function St(t,e){return kt(e.edges(),(function(n){if(t.hasNode(n.v)!==t.hasNode(n.w))return Et(e,n)}))}function At(t,e,n){r.Z(t.nodes(),(function(t){e.node(t).rank+=n}))}var Lt=n(585),Bt=n(7179);const Nt=function(t){return function(e,n,r){var i=Object(e);if(!(0,Lt.Z)(e)){var a=(0,tt.Z)(n,3);e=(0,Bt.Z)(e),n=function(t){return a(i[t],t,i)}}var s=t(e,n,r);return s>-1?i[a?e[s]:s]:void 0}};var Dt=n(1692),Ot=n(4099);const Mt=function(t){var e=(0,Ot.Z)(t),n=e%1;return e==e?n?e-n:e:0};var It=Math.max;const Ft=Nt((function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var i=null==n?0:Mt(n);return i<0&&(i=It(r+i,0)),(0,Dt.Z)(t,(0,tt.Z)(e,3),i)}));var $t=n(3445);s.Z(1);s.Z(1);n(9473),n(3970),n(3589),n(8533);(0,n(4193).Z)("length");RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");var Rt="[\\ud800-\\udfff]",Zt="[\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff]",Pt="\\ud83c[\\udffb-\\udfff]",jt="[^\\ud800-\\udfff]",Yt="(?:\\ud83c[\\udde6-\\uddff]){2}",zt="[\\ud800-\\udbff][\\udc00-\\udfff]",Ut="(?:"+Zt+"|"+Pt+")"+"?",Wt="[\\ufe0e\\ufe0f]?",qt=Wt+Ut+("(?:\\u200d(?:"+[jt,Yt,zt].join("|")+")"+Wt+Ut+")*"),Ht="(?:"+[jt+Zt+"?",Zt,Yt,zt,Rt].join("|")+")";RegExp(Pt+"(?="+Pt+")|"+Ht+qt,"g");function Vt(){}function Gt(t,e,n){L.Z(e)||(e=[e]);var i=(t.isDirected()?t.successors:t.neighbors).bind(t),a=[],s={};return r.Z(e,(function(e){if(!t.hasNode(e))throw new Error("Graph does not have node: "+e);Xt(t,e,"post"===n,s,i,a)})),a}function Xt(t,e,n,i,s,o){a.Z(i,e)||(i[e]=!0,n||o.push(e),r.Z(s(e),(function(e){Xt(t,e,n,i,s,o)})),n&&o.push(e))}Vt.prototype=new Error;n(2544);function Kt(t){t=function(t){var e=(new h.k).setGraph(t.graph());return r.Z(t.nodes(),(function(n){e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){var r=e.edge(n.v,n.w)||{weight:0,minlen:1},i=t.edge(n);e.setEdge(n.v,n.w,{weight:r.weight+i.weight,minlen:Math.max(r.minlen,i.minlen)})})),e}(t),wt(t);var e,n=Ct(t);for(te(n),Qt(n,t);e=ne(n);)ie(n,t,e,re(n,t,e))}function Qt(t,e){var n=function(t,e){return Gt(t,e,"post")}(t,t.nodes());n=n.slice(0,n.length-1),r.Z(n,(function(n){!function(t,e,n){var r=t.node(n).parent;t.edge(n,r).cutvalue=Jt(t,e,n)}(t,e,n)}))}function Jt(t,e,n){var i=t.node(n).parent,a=!0,s=e.edge(n,i),o=0;return s||(a=!1,s=e.edge(i,n)),o=s.weight,r.Z(e.nodeEdges(n),(function(r){var s,c,l=r.v===n,h=l?r.w:r.v;if(h!==i){var u=l===a,d=e.edge(r).weight;if(o+=u?d:-d,s=n,c=h,t.hasEdge(s,c)){var p=t.edge(n,h).cutvalue;o+=u?-p:p}}})),o}function te(t,e){arguments.length<2&&(e=t.nodes()[0]),ee(t,{},1,e)}function ee(t,e,n,i,s){var o=n,c=t.node(i);return e[i]=!0,r.Z(t.neighbors(i),(function(r){a.Z(e,r)||(n=ee(t,e,n,r,i))})),c.low=o,c.lim=n++,s?c.parent=s:delete c.parent,n}function ne(t){return Ft(t.edges(),(function(e){return t.edge(e).cutvalue<0}))}function re(t,e,n){var r=n.v,i=n.w;e.hasEdge(r,i)||(r=n.w,i=n.v);var a=t.node(r),s=t.node(i),o=a,c=!1;a.lim>s.lim&&(o=s,c=!0);var l=$t.Z(e.edges(),(function(e){return c===ae(t,t.node(e.v),o)&&c!==ae(t,t.node(e.w),o)}));return kt(l,(function(t){return Et(e,t)}))}function ie(t,e,n,i){var a=n.v,s=n.w;t.removeEdge(a,s),t.setEdge(i.v,i.w,{}),te(t),Qt(t,e),function(t,e){var n=Ft(t.nodes(),(function(t){return!e.node(t).parent})),i=function(t,e){return Gt(t,e,"pre")}(t,n);i=i.slice(1),r.Z(i,(function(n){var r=t.node(n).parent,i=e.edge(n,r),a=!1;i||(i=e.edge(r,n),a=!0),e.node(n).rank=e.node(r).rank+(a?i.minlen:-i.minlen)}))}(t,e)}function ae(t,e,n){return n.low<=e.lim&&e.lim<=n.lim}function se(t){switch(t.graph().ranker){case"network-simplex":default:ce(t);break;case"tight-tree":!function(t){wt(t),Ct(t)}(t);break;case"longest-path":oe(t)}}Kt.initLowLimValues=te,Kt.initCutValues=Qt,Kt.calcCutValue=Jt,Kt.leaveEdge=ne,Kt.enterEdge=re,Kt.exchangeEdges=ie;var oe=wt;function ce(t){Kt(t)}var le=n(4148),he=n(2344);function ue(t){var e=ot(t,"root",{},"_root"),n=function(t){var e={};function n(i,a){var s=t.children(i);s&&s.length&&r.Z(s,(function(t){n(t,a+1)})),e[i]=a}return r.Z(t.children(),(function(t){n(t,1)})),e}(t),i=K(le.Z(n))-1,a=2*i+1;t.graph().nestingRoot=e,r.Z(t.edges(),(function(e){t.edge(e).minlen*=a}));var s=function(t){return he.Z(t.edges(),(function(e,n){return e+t.edge(n).weight}),0)}(t)+1;r.Z(t.children(),(function(r){de(t,e,a,s,i,n,r)})),t.graph().nodeRankFactor=a}function de(t,e,n,i,a,s,o){var c=t.children(o);if(c.length){var l=ut(t,"_bt"),h=ut(t,"_bb"),u=t.node(o);t.setParent(l,o),u.borderTop=l,t.setParent(h,o),u.borderBottom=h,r.Z(c,(function(r){de(t,e,n,i,a,s,r);var c=t.node(r),u=c.borderTop?c.borderTop:r,d=c.borderBottom?c.borderBottom:r,p=c.borderTop?i:2*i,f=u!==d?1:a-s[o]+1;t.setEdge(l,u,{weight:p,minlen:f,nestingEdge:!0}),t.setEdge(d,h,{weight:p,minlen:f,nestingEdge:!0})})),t.parent(o)||t.setEdge(e,l,{weight:0,minlen:a+s[o]})}else o!==e&&t.setEdge(e,o,{weight:0,minlen:n})}var pe=n(8451);const fe=function(t){return(0,pe.Z)(t,5)};function ge(t,e,n){var s=function(t){var e;for(;t.hasNode(e=i.Z("_root")););return e}(t),o=new h.k({compound:!0}).setGraph({root:s}).setDefaultNodeLabel((function(e){return t.node(e)}));return r.Z(t.nodes(),(function(i){var c=t.node(i),l=t.parent(i);(c.rank===e||c.minRank<=e&&e<=c.maxRank)&&(o.setNode(i),o.setParent(i,l||s),r.Z(t[n](i),(function(e){var n=e.v===i?e.w:e.v,r=o.edge(n,i),a=nt.Z(r)?0:r.weight;o.setEdge(n,i,{weight:t.edge(e).weight+a})})),a.Z(c,"minRank")&&o.setNode(i,{borderLeft:c.borderLeft[e],borderRight:c.borderRight[e]}))})),o}var ye=n(2954);const me=function(t,e,n){for(var r=-1,i=t.length,a=e.length,s={};++r<i;){var o=r<a?e[r]:void 0;n(s,t[r],o)}return s};const be=function(t,e){return me(t||[],e||[],ye.Z)};var _e=n(626),xe=n(4073),ve=n(3317),ke=n(1018);const we=function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t};var Ee=n(1162);const Ce=function(t,e){if(t!==e){var n=void 0!==t,r=null===t,i=t==t,a=(0,H.Z)(t),s=void 0!==e,o=null===e,c=e==e,l=(0,H.Z)(e);if(!o&&!l&&!a&&t>e||a&&s&&c&&!o&&!l||r&&s&&c||!n&&c||!i)return 1;if(!r&&!a&&!l&&t<e||l&&n&&i&&!r&&!a||o&&n&&i||!s&&i||!c)return-1}return 0};const Te=function(t,e,n){for(var r=-1,i=t.criteria,a=e.criteria,s=i.length,o=n.length;++r<s;){var c=Ce(i[r],a[r]);if(c)return r>=o?c:c*("desc"==n[r]?-1:1)}return t.index-e.index};const Se=function(t,e,n){e=e.length?(0,xe.Z)(e,(function(t){return(0,L.Z)(t)?function(e){return(0,ve.Z)(e,1===t.length?t[0]:t)}:t})):[X.Z];var r=-1;e=(0,xe.Z)(e,(0,Ee.Z)(tt.Z));var i=(0,ke.Z)(t,(function(t,n,i){return{criteria:(0,xe.Z)(e,(function(e){return e(t)})),index:++r,value:t}}));return we(i,(function(t,e){return Te(t,e,n)}))};const Ae=(0,Y.Z)((function(t,e){if(null==t)return[];var n=e.length;return n>1&&(0,z.Z)(t,e[0],e[1])?e=[]:n>2&&(0,z.Z)(e[0],e[1],e[2])&&(e=[e[0]]),Se(t,(0,_e.Z)(e,1),[])}));function Le(t,e){for(var n=0,r=1;r<e.length;++r)n+=Be(t,e[r-1],e[r]);return n}function Be(t,e,n){for(var i=be(n,c.Z(n,(function(t,e){return e}))),a=o.Z(c.Z(e,(function(e){return Ae(c.Z(t.outEdges(e),(function(e){return{pos:i[e.w],weight:t.edge(e).weight}})),"pos")}))),s=1;s<n.length;)s<<=1;var l=2*s-1;s-=1;var h=c.Z(new Array(l),(function(){return 0})),u=0;return r.Z(a.forEach((function(t){var e=t.pos+s;h[e]+=t.weight;for(var n=0;e>0;)e%2&&(n+=h[e+1]),h[e=e-1>>1]+=t.weight;u+=t.weight*n}))),u}function Ne(t,e){var n={};return r.Z(t,(function(t,e){var r=n[t.v]={indegree:0,in:[],out:[],vs:[t.v],i:e};nt.Z(t.barycenter)||(r.barycenter=t.barycenter,r.weight=t.weight)})),r.Z(e.edges(),(function(t){var e=n[t.v],r=n[t.w];nt.Z(e)||nt.Z(r)||(r.indegree++,e.out.push(n[t.w]))})),function(t){var e=[];function n(t){return function(e){e.merged||(nt.Z(e.barycenter)||nt.Z(t.barycenter)||e.barycenter>=t.barycenter)&&function(t,e){var n=0,r=0;t.weight&&(n+=t.barycenter*t.weight,r+=t.weight);e.weight&&(n+=e.barycenter*e.weight,r+=e.weight);t.vs=e.vs.concat(t.vs),t.barycenter=n/r,t.weight=r,t.i=Math.min(e.i,t.i),e.merged=!0}(t,e)}}function i(e){return function(n){n.in.push(e),0==--n.indegree&&t.push(n)}}for(;t.length;){var a=t.pop();e.push(a),r.Z(a.in.reverse(),n(a)),r.Z(a.out,i(a))}return c.Z($t.Z(e,(function(t){return!t.merged})),(function(t){return W.Z(t,["vs","i","barycenter","weight"])}))}($t.Z(n,(function(t){return!t.indegree})))}function De(t,e){var n,i=function(t,e){var n={lhs:[],rhs:[]};return r.Z(t,(function(t){e(t)?n.lhs.push(t):n.rhs.push(t)})),n}(t,(function(t){return a.Z(t,"barycenter")})),s=i.lhs,c=Ae(i.rhs,(function(t){return-t.i})),l=[],h=0,u=0,d=0;s.sort((n=!!e,function(t,e){return t.barycenter<e.barycenter?-1:t.barycenter>e.barycenter?1:n?e.i-t.i:t.i-e.i})),d=Oe(l,c,d),r.Z(s,(function(t){d+=t.vs.length,l.push(t.vs),h+=t.barycenter*t.weight,u+=t.weight,d=Oe(l,c,d)}));var p={vs:o.Z(l)};return u&&(p.barycenter=h/u,p.weight=u),p}function Oe(t,e,n){for(var r;e.length&&(r=Q(e)).i<=n;)e.pop(),t.push(r.vs),n++;return n}function Me(t,e,n,i){var s=t.children(e),l=t.node(e),h=l?l.borderLeft:void 0,u=l?l.borderRight:void 0,d={};h&&(s=$t.Z(s,(function(t){return t!==h&&t!==u})));var p=function(t,e){return c.Z(e,(function(e){var n=t.inEdges(e);if(n.length){var r=he.Z(n,(function(e,n){var r=t.edge(n),i=t.node(n.v);return{sum:e.sum+r.weight*i.order,weight:e.weight+r.weight}}),{sum:0,weight:0});return{v:e,barycenter:r.sum/r.weight,weight:r.weight}}return{v:e}}))}(t,s);r.Z(p,(function(e){if(t.children(e.v).length){var r=Me(t,e.v,n,i);d[e.v]=r,a.Z(r,"barycenter")&&(s=e,o=r,nt.Z(s.barycenter)?(s.barycenter=o.barycenter,s.weight=o.weight):(s.barycenter=(s.barycenter*s.weight+o.barycenter*o.weight)/(s.weight+o.weight),s.weight+=o.weight))}var s,o}));var f=Ne(p,n);!function(t,e){r.Z(t,(function(t){t.vs=o.Z(t.vs.map((function(t){return e[t]?e[t].vs:t})))}))}(f,d);var g=De(f,i);if(h&&(g.vs=o.Z([h,g.vs,u]),t.predecessors(h).length)){var y=t.node(t.predecessors(h)[0]),m=t.node(t.predecessors(u)[0]);a.Z(g,"barycenter")||(g.barycenter=0,g.weight=0),g.barycenter=(g.barycenter*g.weight+y.order+m.order)/(g.weight+2),g.weight+=2}return g}function Ie(t){var e=dt(t),n=Fe(t,l.Z(1,e+1),"inEdges"),i=Fe(t,l.Z(e-1,-1,-1),"outEdges"),s=function(t){var e={},n=$t.Z(t.nodes(),(function(e){return!t.children(e).length})),i=K(c.Z(n,(function(e){return t.node(e).rank}))),s=c.Z(l.Z(i+1),(function(){return[]})),o=Ae(n,(function(e){return t.node(e).rank}));return r.Z(o,(function n(i){if(!a.Z(e,i)){e[i]=!0;var o=t.node(i);s[o.rank].push(i),r.Z(t.successors(i),n)}})),s}(t);Re(t,s);for(var o,h=Number.POSITIVE_INFINITY,u=0,d=0;d<4;++u,++d){$e(u%2?n:i,u%4>=2);var p=Le(t,s=ht(t));p<h&&(d=0,o=fe(s),h=p)}Re(t,o)}function Fe(t,e,n){return c.Z(e,(function(e){return ge(t,e,n)}))}function $e(t,e){var n=new h.k;r.Z(t,(function(t){var i=t.graph().root,a=Me(t,i,n,e);r.Z(a.vs,(function(e,n){t.node(e).order=n})),function(t,e,n){var i,a={};r.Z(n,(function(n){for(var r,s,o=t.parent(n);o;){if((r=t.parent(o))?(s=a[r],a[r]=o):(s=i,i=o),s&&s!==o)return void e.setEdge(s,o);o=r}}))}(t,n,a.vs)}))}function Re(t,e){r.Z(e,(function(e){r.Z(e,(function(e,n){t.node(e).order=n}))}))}function Ze(t){var e=function(t){var e={},n=0;function i(a){var s=n;r.Z(t.children(a),i),e[a]={low:s,lim:n++}}return r.Z(t.children(),i),e}(t);r.Z(t.graph().dummyChains,(function(n){for(var r=t.node(n),i=r.edgeObj,a=function(t,e,n,r){var i,a,s=[],o=[],c=Math.min(e[n].low,e[r].low),l=Math.max(e[n].lim,e[r].lim);i=n;do{i=t.parent(i),s.push(i)}while(i&&(e[i].low>c||l>e[i].lim));a=i,i=r;for(;(i=t.parent(i))!==a;)o.push(i);return{path:s.concat(o.reverse()),lca:a}}(t,e,i.v,i.w),s=a.path,o=a.lca,c=0,l=s[c],h=!0;n!==i.w;){if(r=t.node(n),h){for(;(l=s[c])!==o&&t.node(l).maxRank<r.rank;)c++;l===o&&(h=!1)}if(!h){for(;c<s.length-1&&t.node(l=s[c+1]).minRank<=r.rank;)c++;l=s[c]}t.setParent(n,l),n=t.successors(n)[0]}}))}var Pe=n(8882);const je=function(t,e){return null==t?t:(0,w.Z)(t,(0,Pe.Z)(e),R.Z)};function Ye(t,e){var n={};return he.Z(e,(function(e,i){var a=0,s=0,o=e.length,c=Q(i);return r.Z(i,(function(e,l){var h=function(t,e){if(t.node(e).dummy)return Ft(t.predecessors(e),(function(e){return t.node(e).dummy}))}(t,e),u=h?t.node(h).order:o;(h||e===c)&&(r.Z(i.slice(s,l+1),(function(e){r.Z(t.predecessors(e),(function(r){var i=t.node(r),s=i.order;!(s<a||u<s)||i.dummy&&t.node(e).dummy||ze(n,r,e)}))})),s=l+1,a=u)})),i})),n}function ze(t,e,n){if(e>n){var r=e;e=n,n=r}var i=t[e];i||(t[e]=i={}),i[n]=!0}function Ue(t,e,n){if(e>n){var r=e;e=n,n=r}return a.Z(t[e],n)}function We(t,e,n,i,s){var o={},c=function(t,e,n,i){var s=new h.k,o=t.graph(),c=function(t,e,n){return function(r,i,s){var o,c=r.node(i),l=r.node(s),h=0;if(h+=c.width/2,a.Z(c,"labelpos"))switch(c.labelpos.toLowerCase()){case"l":o=-c.width/2;break;case"r":o=c.width/2}if(o&&(h+=n?o:-o),o=0,h+=(c.dummy?e:t)/2,h+=(l.dummy?e:t)/2,h+=l.width/2,a.Z(l,"labelpos"))switch(l.labelpos.toLowerCase()){case"l":o=l.width/2;break;case"r":o=-l.width/2}return o&&(h+=n?o:-o),o=0,h}}(o.nodesep,o.edgesep,i);return r.Z(e,(function(e){var i;r.Z(e,(function(e){var r=n[e];if(s.setNode(r),i){var a=n[i],o=s.edge(a,r);s.setEdge(a,r,Math.max(c(t,e,i),o||0))}i=e}))})),s}(t,e,n,s),l=s?"borderLeft":"borderRight";function u(t,e){for(var n=c.nodes(),r=n.pop(),i={};r;)i[r]?t(r):(i[r]=!0,n.push(r),n=n.concat(e(r))),r=n.pop()}return u((function(t){o[t]=c.inEdges(t).reduce((function(t,e){return Math.max(t,o[e.v]+c.edge(e))}),0)}),c.predecessors.bind(c)),u((function(e){var n=c.outEdges(e).reduce((function(t,e){return Math.min(t,o[e.w]-c.edge(e))}),Number.POSITIVE_INFINITY),r=t.node(e);n!==Number.POSITIVE_INFINITY&&r.borderType!==l&&(o[e]=Math.max(o[e],n))}),c.successors.bind(c)),r.Z(i,(function(t){o[t]=o[n[t]]})),o}function qe(t){var e,n=ht(t),i=U(Ye(t,n),function(t,e){var n={};function i(e,i,a,s,o){var c;r.Z(l.Z(i,a),(function(i){c=e[i],t.node(c).dummy&&r.Z(t.predecessors(c),(function(e){var r=t.node(e);r.dummy&&(r.order<s||r.order>o)&&ze(n,e,c)}))}))}return he.Z(e,(function(e,n){var a,s=-1,o=0;return r.Z(n,(function(r,c){if("border"===t.node(r).dummy){var l=t.predecessors(r);l.length&&(a=t.node(l[0]).order,i(n,o,c,s,a),o=c,s=a)}i(n,o,n.length,a,e.length)})),n})),n}(t,n)),a={};r.Z(["u","d"],(function(s){e="u"===s?n:le.Z(n).reverse(),r.Z(["l","r"],(function(n){"r"===n&&(e=c.Z(e,(function(t){return le.Z(t).reverse()})));var o=("u"===s?t.predecessors:t.successors).bind(t),l=function(t,e,n,i){var a={},s={},o={};return r.Z(e,(function(t){r.Z(t,(function(t,e){a[t]=t,s[t]=t,o[t]=e}))})),r.Z(e,(function(t){var e=-1;r.Z(t,(function(t){var r=i(t);if(r.length){r=Ae(r,(function(t){return o[t]}));for(var c=(r.length-1)/2,l=Math.floor(c),h=Math.ceil(c);l<=h;++l){var u=r[l];s[t]===t&&e<o[u]&&!Ue(n,t,u)&&(s[u]=t,s[t]=a[t]=a[u],e=o[u])}}}))})),{root:a,align:s}}(0,e,i,o),h=We(t,e,l.root,l.align,"r"===n);"r"===n&&(h=et(h,(function(t){return-t}))),a[s+n]=h}))}));var s=function(t,e){return kt(le.Z(e),(function(e){var n=Number.NEGATIVE_INFINITY,r=Number.POSITIVE_INFINITY;return je(e,(function(e,i){var a=function(t,e){return t.node(e).width}(t,i)/2;n=Math.max(e+a,n),r=Math.min(e-a,r)})),n-r}))}(t,a);return function(t,e){var n=le.Z(e),i=it(n),a=K(n);r.Z(["u","d"],(function(n){r.Z(["l","r"],(function(r){var s,o=n+r,c=t[o];if(c!==e){var l=le.Z(c);(s="l"===r?i-it(l):a-K(l))&&(t[o]=et(c,(function(t){return t+s})))}}))}))}(a,s),function(t,e){return et(t.ul,(function(n,r){if(e)return t[e.toLowerCase()][r];var i=Ae(c.Z(t,r));return(i[1]+i[2])/2}))}(a,t.graph().align)}function He(t){(function(t){var e=ht(t),n=t.graph().ranksep,i=0;r.Z(e,(function(e){var a=K(c.Z(e,(function(e){return t.node(e).height})));r.Z(e,(function(e){t.node(e).y=i+a/2})),i+=a+n}))})(t=ct(t)),r.Z(qe(t),(function(e,n){t.node(n).x=e}))}function Ve(t,e){var n=e&&e.debugTiming?pt:ft;n("layout",(function(){var e=n("  buildLayoutGraph",(function(){return function(t){var e=new h.k({multigraph:!0,compound:!0}),n=an(t.graph());return e.setGraph(U({},Xe,rn(n,Ge),W.Z(n,Ke))),r.Z(t.nodes(),(function(n){var r=an(t.node(n));e.setNode(n,q.Z(rn(r,Qe),Je)),e.setParent(n,t.parent(n))})),r.Z(t.edges(),(function(n){var r=an(t.edge(n));e.setEdge(n,U({},en,rn(r,tn),W.Z(r,nn)))})),e}(t)}));n("  runLayout",(function(){!function(t,e){e("    makeSpaceForEdgeLabels",(function(){!function(t){var e=t.graph();e.ranksep/=2,r.Z(t.edges(),(function(n){var r=t.edge(n);r.minlen*=2,"c"!==r.labelpos.toLowerCase()&&("TB"===e.rankdir||"BT"===e.rankdir?r.width+=r.labeloffset:r.height+=r.labeloffset)}))}(t)})),e("    removeSelfEdges",(function(){!function(t){r.Z(t.edges(),(function(e){if(e.v===e.w){var n=t.node(e.v);n.selfEdges||(n.selfEdges=[]),n.selfEdges.push({e:e,label:t.edge(e)}),t.removeEdge(e)}}))}(t)})),e("    acyclic",(function(){b(t)})),e("    nestingGraph.run",(function(){ue(t)})),e("    rank",(function(){se(ct(t))})),e("    injectEdgeLabelProxies",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.width&&n.height){var r=t.node(e.v),i={rank:(t.node(e.w).rank-r.rank)/2+r.rank,e:e};ot(t,"edge-proxy",i,"_ep")}}))}(t)})),e("    removeEmptyRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank}))),n=[];r.Z(t.nodes(),(function(r){var i=t.node(r).rank-e;n[i]||(n[i]=[]),n[i].push(r)}));var i=0,a=t.graph().nodeRankFactor;r.Z(n,(function(e,n){nt.Z(e)&&n%a!=0?--i:i&&r.Z(e,(function(e){t.node(e).rank+=i}))}))}(t)})),e("    nestingGraph.cleanup",(function(){!function(t){var e=t.graph();t.removeNode(e.nestingRoot),delete e.nestingRoot,r.Z(t.edges(),(function(e){t.edge(e).nestingEdge&&t.removeEdge(e)}))}(t)})),e("    normalizeRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank})));r.Z(t.nodes(),(function(n){var r=t.node(n);a.Z(r,"rank")&&(r.rank-=e)}))}(t)})),e("    assignRankMinMax",(function(){!function(t){var e=0;r.Z(t.nodes(),(function(n){var r=t.node(n);r.borderTop&&(r.minRank=t.node(r.borderTop).rank,r.maxRank=t.node(r.borderBottom).rank,e=K(e,r.maxRank))})),t.graph().maxRank=e}(t)})),e("    removeEdgeLabelProxies",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);"edge-proxy"===n.dummy&&(t.edge(n.e).labelRank=n.rank,t.removeNode(e))}))}(t)})),e("    normalize.run",(function(){vt(t)})),e("    parentDummyChains",(function(){Ze(t)})),e("    addBorderSegments",(function(){!function(t){r.Z(t.children(),(function e(n){var i=t.children(n),s=t.node(n);if(i.length&&r.Z(i,e),a.Z(s,"minRank")){s.borderLeft=[],s.borderRight=[];for(var o=s.minRank,c=s.maxRank+1;o<c;++o)gt(t,"borderLeft","_bl",n,s,o),gt(t,"borderRight","_br",n,s,o)}}))}(t)})),e("    order",(function(){Ie(t)})),e("    insertSelfEdges",(function(){!function(t){var e=ht(t);r.Z(e,(function(e){var n=0;r.Z(e,(function(e,i){var a=t.node(e);a.order=i+n,r.Z(a.selfEdges,(function(e){ot(t,"selfedge",{width:e.label.width,height:e.label.height,rank:a.rank,order:i+ ++n,e:e.e,label:e.label},"_se")})),delete a.selfEdges}))}))}(t)})),e("    adjustCoordinateSystem",(function(){!function(t){var e=t.graph().rankdir.toLowerCase();"lr"!==e&&"rl"!==e||mt(t)}(t)})),e("    position",(function(){He(t)})),e("    positionSelfEdges",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);if("selfedge"===n.dummy){var r=t.node(n.e.v),i=r.x+r.width/2,a=r.y,s=n.x-i,o=r.height/2;t.setEdge(n.e,n.label),t.removeNode(e),n.label.points=[{x:i+2*s/3,y:a-o},{x:i+5*s/6,y:a-o},{x:i+s,y:a},{x:i+5*s/6,y:a+o},{x:i+2*s/3,y:a+o}],n.label.x=n.x,n.label.y=n.y}}))}(t)})),e("    removeBorderNodes",(function(){!function(t){r.Z(t.nodes(),(function(e){if(t.children(e).length){var n=t.node(e),r=t.node(n.borderTop),i=t.node(n.borderBottom),a=t.node(Q(n.borderLeft)),s=t.node(Q(n.borderRight));n.width=Math.abs(s.x-a.x),n.height=Math.abs(i.y-r.y),n.x=a.x+n.width/2,n.y=r.y+n.height/2}})),r.Z(t.nodes(),(function(e){"border"===t.node(e).dummy&&t.removeNode(e)}))}(t)})),e("    normalize.undo",(function(){!function(t){r.Z(t.graph().dummyChains,(function(e){var n,r=t.node(e),i=r.edgeLabel;for(t.setEdge(r.edgeObj,i);r.dummy;)n=t.successors(e)[0],t.removeNode(e),i.points.push({x:r.x,y:r.y}),"edge-label"===r.dummy&&(i.x=r.x,i.y=r.y,i.width=r.width,i.height=r.height),e=n,r=t.node(e)}))}(t)})),e("    fixupEdgeLabelCoords",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(a.Z(n,"x"))switch("l"!==n.labelpos&&"r"!==n.labelpos||(n.width-=n.labeloffset),n.labelpos){case"l":n.x-=n.width/2+n.labeloffset;break;case"r":n.x+=n.width/2+n.labeloffset}}))}(t)})),e("    undoCoordinateSystem",(function(){yt(t)})),e("    translateGraph",(function(){!function(t){var e=Number.POSITIVE_INFINITY,n=0,i=Number.POSITIVE_INFINITY,s=0,o=t.graph(),c=o.marginx||0,l=o.marginy||0;function h(t){var r=t.x,a=t.y,o=t.width,c=t.height;e=Math.min(e,r-o/2),n=Math.max(n,r+o/2),i=Math.min(i,a-c/2),s=Math.max(s,a+c/2)}r.Z(t.nodes(),(function(e){h(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);a.Z(n,"x")&&h(n)})),e-=c,i-=l,r.Z(t.nodes(),(function(n){var r=t.node(n);r.x-=e,r.y-=i})),r.Z(t.edges(),(function(n){var s=t.edge(n);r.Z(s.points,(function(t){t.x-=e,t.y-=i})),a.Z(s,"x")&&(s.x-=e),a.Z(s,"y")&&(s.y-=i)})),o.width=n-e+c,o.height=s-i+l}(t)})),e("    assignNodeIntersects",(function(){!function(t){r.Z(t.edges(),(function(e){var n,r,i=t.edge(e),a=t.node(e.v),s=t.node(e.w);i.points?(n=i.points[0],r=i.points[i.points.length-1]):(i.points=[],n=s,r=a),i.points.unshift(lt(a,n)),i.points.push(lt(s,r))}))}(t)})),e("    reversePoints",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);n.reversed&&n.points.reverse()}))}(t)})),e("    acyclic.undo",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.reversed){t.removeEdge(e);var r=n.forwardName;delete n.reversed,delete n.forwardName,t.setEdge(e.w,e.v,n,r)}}))}(t)}))}(e,n)})),n("  updateInputGraph",(function(){!function(t,e){r.Z(t.nodes(),(function(n){var r=t.node(n),i=e.node(n);r&&(r.x=i.x,r.y=i.y,e.children(n).length&&(r.width=i.width,r.height=i.height))})),r.Z(t.edges(),(function(n){var r=t.edge(n),i=e.edge(n);r.points=i.points,a.Z(i,"x")&&(r.x=i.x,r.y=i.y)})),t.graph().width=e.graph().width,t.graph().height=e.graph().height}(t,e)}))}))}var Ge=["nodesep","edgesep","ranksep","marginx","marginy"],Xe={ranksep:50,edgesep:20,nodesep:50,rankdir:"tb"},Ke=["acyclicer","ranker","rankdir","align"],Qe=["width","height"],Je={width:0,height:0},tn=["minlen","weight","width","height","labeloffset"],en={minlen:1,weight:1,width:0,height:0,labeloffset:10,labelpos:"r"},nn=["labelpos"];function rn(t,e){return et(W.Z(t,e),Number)}function an(t){var e={};return r.Z(t,(function(t,n){e[n.toLowerCase()]=t})),e}},2544:(t,e,n)=>{"use strict";n.d(e,{k:()=>D});var r=n(7452),i=n(2002),a=n(3234),s=n(7179),o=n(3445),c=n(9697),l=n(870),h=n(9360),u=n(626),d=n(9581),p=n(3001),f=n(1692);const g=function(t){return t!=t};const y=function(t,e,n){for(var r=n-1,i=t.length;++r<i;)if(t[r]===e)return r;return-1};const m=function(t,e,n){return e==e?y(t,e,n):(0,f.Z)(t,g,n)};const b=function(t,e){return!!(null==t?0:t.length)&&m(t,e,0)>-1};const _=function(t,e,n){for(var r=-1,i=null==t?0:t.length;++r<i;)if(n(e,t[r]))return!0;return!1};var x=n(9548),v=n(3203);const k=function(){};var w=n(6545),E=v.Z&&1/(0,w.Z)(new v.Z([,-0]))[1]==1/0?function(t){return new v.Z(t)}:k;const C=E;const T=function(t,e,n){var r=-1,i=b,a=t.length,s=!0,o=[],c=o;if(n)s=!1,i=_;else if(a>=200){var l=e?null:C(t);if(l)return(0,w.Z)(l);s=!1,i=x.Z,c=new p.Z}else c=e?[]:o;t:for(;++r<a;){var h=t[r],u=e?e(h):h;if(h=n||0!==h?h:0,s&&u==u){for(var d=c.length;d--;)if(c[d]===u)continue t;e&&c.push(u),o.push(h)}else i(c,u,n)||(c!==o&&c.push(u),o.push(h))}return o};var S=n(836);const A=(0,d.Z)((function(t){return T((0,u.Z)(t,1,S.Z,!0))}));var L=n(4148),B=n(2344),N="\0";class D{constructor(t={}){this._isDirected=!r.Z(t,"directed")||t.directed,this._isMultigraph=!!r.Z(t,"multigraph")&&t.multigraph,this._isCompound=!!r.Z(t,"compound")&&t.compound,this._label=void 0,this._defaultNodeLabelFn=i.Z(void 0),this._defaultEdgeLabelFn=i.Z(void 0),this._nodes={},this._isCompound&&(this._parent={},this._children={},this._children["\0"]={}),this._in={},this._preds={},this._out={},this._sucs={},this._edgeObjs={},this._edgeLabels={}}isDirected(){return this._isDirected}isMultigraph(){return this._isMultigraph}isCompound(){return this._isCompound}setGraph(t){return this._label=t,this}graph(){return this._label}setDefaultNodeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultNodeLabelFn=t,this}nodeCount(){return this._nodeCount}nodes(){return s.Z(this._nodes)}sources(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._in[e])}))}sinks(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._out[e])}))}setNodes(t,e){var n=arguments,r=this;return l.Z(t,(function(t){n.length>1?r.setNode(t,e):r.setNode(t)})),this}setNode(t,e){return r.Z(this._nodes,t)?(arguments.length>1&&(this._nodes[t]=e),this):(this._nodes[t]=arguments.length>1?e:this._defaultNodeLabelFn(t),this._isCompound&&(this._parent[t]=N,this._children[t]={},this._children["\0"][t]=!0),this._in[t]={},this._preds[t]={},this._out[t]={},this._sucs[t]={},++this._nodeCount,this)}node(t){return this._nodes[t]}hasNode(t){return r.Z(this._nodes,t)}removeNode(t){var e=this;if(r.Z(this._nodes,t)){var n=function(t){e.removeEdge(e._edgeObjs[t])};delete this._nodes[t],this._isCompound&&(this._removeFromParentsChildList(t),delete this._parent[t],l.Z(this.children(t),(function(t){e.setParent(t)})),delete this._children[t]),l.Z(s.Z(this._in[t]),n),delete this._in[t],delete this._preds[t],l.Z(s.Z(this._out[t]),n),delete this._out[t],delete this._sucs[t],--this._nodeCount}return this}setParent(t,e){if(!this._isCompound)throw new Error("Cannot set parent in a non-compound graph");if(h.Z(e))e=N;else{for(var n=e+="";!h.Z(n);n=this.parent(n))if(n===t)throw new Error("Setting "+e+" as parent of "+t+" would create a cycle");this.setNode(e)}return this.setNode(t),this._removeFromParentsChildList(t),this._parent[t]=e,this._children[e][t]=!0,this}_removeFromParentsChildList(t){delete this._children[this._parent[t]][t]}parent(t){if(this._isCompound){var e=this._parent[t];if(e!==N)return e}}children(t){if(h.Z(t)&&(t=N),this._isCompound){var e=this._children[t];if(e)return s.Z(e)}else{if(t===N)return this.nodes();if(this.hasNode(t))return[]}}predecessors(t){var e=this._preds[t];if(e)return s.Z(e)}successors(t){var e=this._sucs[t];if(e)return s.Z(e)}neighbors(t){var e=this.predecessors(t);if(e)return A(e,this.successors(t))}isLeaf(t){return 0===(this.isDirected()?this.successors(t):this.neighbors(t)).length}filterNodes(t){var e=new this.constructor({directed:this._isDirected,multigraph:this._isMultigraph,compound:this._isCompound});e.setGraph(this.graph());var n=this;l.Z(this._nodes,(function(n,r){t(r)&&e.setNode(r,n)})),l.Z(this._edgeObjs,(function(t){e.hasNode(t.v)&&e.hasNode(t.w)&&e.setEdge(t,n.edge(t))}));var r={};function i(t){var a=n.parent(t);return void 0===a||e.hasNode(a)?(r[t]=a,a):a in r?r[a]:i(a)}return this._isCompound&&l.Z(e.nodes(),(function(t){e.setParent(t,i(t))})),e}setDefaultEdgeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultEdgeLabelFn=t,this}edgeCount(){return this._edgeCount}edges(){return L.Z(this._edgeObjs)}setPath(t,e){var n=this,r=arguments;return B.Z(t,(function(t,i){return r.length>1?n.setEdge(t,i,e):n.setEdge(t,i),i})),this}setEdge(){var t,e,n,i,a=!1,s=arguments[0];"object"==typeof s&&null!==s&&"v"in s?(t=s.v,e=s.w,n=s.name,2===arguments.length&&(i=arguments[1],a=!0)):(t=s,e=arguments[1],n=arguments[3],arguments.length>2&&(i=arguments[2],a=!0)),t=""+t,e=""+e,h.Z(n)||(n=""+n);var o=I(this._isDirected,t,e,n);if(r.Z(this._edgeLabels,o))return a&&(this._edgeLabels[o]=i),this;if(!h.Z(n)&&!this._isMultigraph)throw new Error("Cannot set a named edge when isMultigraph = false");this.setNode(t),this.setNode(e),this._edgeLabels[o]=a?i:this._defaultEdgeLabelFn(t,e,n);var c=function(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}var o={v:i,w:a};r&&(o.name=r);return o}(this._isDirected,t,e,n);return t=c.v,e=c.w,Object.freeze(c),this._edgeObjs[o]=c,O(this._preds[e],t),O(this._sucs[t],e),this._in[e][o]=c,this._out[t][o]=c,this._edgeCount++,this}edge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return this._edgeLabels[r]}hasEdge(t,e,n){var i=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return r.Z(this._edgeLabels,i)}removeEdge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n),i=this._edgeObjs[r];return i&&(t=i.v,e=i.w,delete this._edgeLabels[r],delete this._edgeObjs[r],M(this._preds[e],t),M(this._sucs[t],e),delete this._in[e][r],delete this._out[t][r],this._edgeCount--),this}inEdges(t,e){var n=this._in[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.v===e})):r}}outEdges(t,e){var n=this._out[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.w===e})):r}}nodeEdges(t,e){var n=this.inEdges(t,e);if(n)return n.concat(this.outEdges(t,e))}}function O(t,e){t[e]?t[e]++:t[e]=1}function M(t,e){--t[e]||delete t[e]}function I(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}return i+"\x01"+a+"\x01"+(h.Z(r)?"\0":r)}function F(t,e){return I(t,e.v,e.w,e.name)}D.prototype._nodeCount=0,D.prototype._edgeCount=0},5625:(t,e,n)=>{"use strict";n.d(e,{k:()=>r.k});var r=n(2544)},9354:(t,e,n)=>{"use strict";n.d(e,{c:()=>o});var r=n(9360),i=n(8451);const a=function(t){return(0,i.Z)(t,4)};var s=n(3836);n(2544);function o(t){var e={options:{directed:t.isDirected(),multigraph:t.isMultigraph(),compound:t.isCompound()},nodes:c(t),edges:l(t)};return r.Z(t.graph())||(e.value=a(t.graph())),e}function c(t){return s.Z(t.nodes(),(function(e){var n=t.node(e),i=t.parent(e),a={v:e};return r.Z(n)||(a.value=n),r.Z(i)||(a.parent=i),a}))}function l(t){return s.Z(t.edges(),(function(e){var n=t.edge(e),i={v:e.v,w:e.w};return r.Z(e.name)||(i.name=e.name),r.Z(n)||(i.value=n),i}))}},1518:(t,e,n)=>{"use strict";n.d(e,{sY:()=>N});var r=n(9373),i=n(7452),a=n(3688),s=n(870),o=n(277),c=n(6225),l={normal:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},vee:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 L 4 5 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},undirected:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 5 L 10 5").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])}};function h(t){l=t}var u=n(3349);function d(t,e,n){var r=e.label,i=t.append("g");"svg"===e.labelType?function(t,e){var n=t;n.node().appendChild(e.label),c.bg(n,e.labelStyle)}(i,e):"string"!=typeof r||"html"===e.labelType?(0,u.a)(i,e):function(t,e){for(var n=t.append("text"),r=function(t){for(var e,n="",r=!1,i=0;i<t.length;++i)e=t[i],r?(n+="n"===e?"\n":e,r=!1):"\\"===e?r=!0:n+=e;return n}(e.label).split("\n"),i=0;i<r.length;i++)n.append("tspan").attr("xml:space","preserve").attr("dy","1em").attr("x","1").text(r[i]);c.bg(n,e.labelStyle)}(i,e);var a,s=i.node().getBBox();switch(n){case"top":a=-e.height/2;break;case"bottom":a=e.height/2-s.height;break;default:a=-s.height/2}return i.attr("transform","translate("+-s.width/2+","+a+")"),i}var p=function(t,e){var n=e.nodes().filter((function(t){return c.bF(e,t)})),i=t.selectAll("g.cluster").data(n,(function(t){return t}));c.WR(i.exit(),e).style("opacity",0).remove();var a=i.enter().append("g").attr("class","cluster").attr("id",(function(t){return e.node(t).id})).style("opacity",0).each((function(t){var n=e.node(t),i=r.Ys(this);r.Ys(this).append("rect"),d(i.append("g").attr("class","label"),n,n.clusterLabelPos)}));return i=i.merge(a),(i=c.WR(i,e).style("opacity",1)).selectAll("rect").each((function(t){var n=e.node(t),i=r.Ys(this);c.bg(i,n.style)})),i};function f(t){p=t}let g=function(t,e){var n,a=t.selectAll("g.edgeLabel").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0);return a.exit().remove(),a.enter().append("g").classed("edgeLabel",!0).style("opacity",0),(a=t.selectAll("g.edgeLabel")).each((function(t){var n=r.Ys(this);n.select(".label").remove();var a=e.edge(t),s=d(n,e.edge(t),0).classed("label",!0),o=s.node().getBBox();a.labelId&&s.attr("id",a.labelId),i.Z(a,"width")||(a.width=o.width),i.Z(a,"height")||(a.height=o.height)})),n=a.exit?a.exit():a.selectAll(null),c.WR(n,e).style("opacity",0).remove(),a};function y(t){g=t}var m=n(6749),b=n(4379);function _(t,e){return t.intersect(e)}var x=function(t,e,n){var i=t.selectAll("g.edgePath").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0),a=function(t,e){var n=t.enter().append("g").attr("class","edgePath").style("opacity",0);return n.append("path").attr("class","path").attr("d",(function(t){var n=e.edge(t),r=e.node(t.v).elem;return k(n,b.Z(n.points.length).map((function(){return e=(t=r).getBBox(),{x:(n=t.ownerSVGElement.getScreenCTM().inverse().multiply(t.getScreenCTM()).translate(e.width/2,e.height/2)).e,y:n.f};var t,e,n})))})),n.append("defs"),n}(i,e);!function(t,e){var n=t.exit();c.WR(n,e).style("opacity",0).remove()}(i,e);var s=void 0!==i.merge?i.merge(a):i;return c.WR(s,e).style("opacity",1),s.each((function(t){var n=r.Ys(this),i=e.edge(t);i.elem=this,i.id&&n.attr("id",i.id),c.$p(n,i.class,(n.classed("update")?"update ":"")+"edgePath")})),s.selectAll("path.path").each((function(t){var n=e.edge(t);n.arrowheadId=m.Z("arrowhead");var i=r.Ys(this).attr("marker-end",(function(){return"url("+(t=location.href,e=n.arrowheadId,t.split("#")[0]+"#"+e+")");var t,e})).style("fill","none");c.WR(i,e).attr("d",(function(t){return function(t,e){var n=t.edge(e),r=t.node(e.v),i=t.node(e.w),a=n.points.slice(1,n.points.length-1);return a.unshift(_(r,a[0])),a.push(_(i,a[a.length-1])),k(n,a)}(e,t)})),c.bg(i,n.style)})),s.selectAll("defs *").remove(),s.selectAll("defs").each((function(t){var i=e.edge(t);(0,n[i.arrowhead])(r.Ys(this),i.arrowheadId,i,"arrowhead")})),s};function v(t){x=t}function k(t,e){var n=(r.jvg||r.YPS.line)().x((function(t){return t.x})).y((function(t){return t.y}));return(n.curve||n.interpolate)(t.curve),n(e)}var w=n(1666),E=function(t,e,n){var a,s=e.nodes().filter((function(t){return!c.bF(e,t)})),o=t.selectAll("g.node").data(s,(function(t){return t})).classed("update",!0);return o.exit().remove(),o.enter().append("g").attr("class","node").style("opacity",0),(o=t.selectAll("g.node")).each((function(t){var a=e.node(t),s=r.Ys(this);c.$p(s,a.class,(s.classed("update")?"update ":"")+"node"),s.select("g.label").remove();var o=s.append("g").attr("class","label"),l=d(o,a),h=n[a.shape],u=w.Z(l.node().getBBox(),"width","height");a.elem=this,a.id&&s.attr("id",a.id),a.labelId&&o.attr("id",a.labelId),i.Z(a,"width")&&(u.width=a.width),i.Z(a,"height")&&(u.height=a.height),u.width+=a.paddingLeft+a.paddingRight,u.height+=a.paddingTop+a.paddingBottom,o.attr("transform","translate("+(a.paddingLeft-a.paddingRight)/2+","+(a.paddingTop-a.paddingBottom)/2+")");var p=r.Ys(this);p.select(".label-container").remove();var f=h(p,u,a).classed("label-container",!0);c.bg(f,a.style);var g=f.node().getBBox();a.width=g.width,a.height=g.height})),a=o.exit?o.exit():o.selectAll(null),c.WR(a,e).style("opacity",0).remove(),o};function C(t){E=t}function T(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}var S=n(3352),A=n(2930),L={rect:function(t,e,n){var r=t.insert("rect",":first-child").attr("rx",n.rx).attr("ry",n.ry).attr("x",-e.width/2).attr("y",-e.height/2).attr("width",e.width).attr("height",e.height);return n.intersect=function(t){return(0,A.q)(n,t)},r},ellipse:function(t,e,n){var r=e.width/2,i=e.height/2,a=t.insert("ellipse",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("rx",r).attr("ry",i);return n.intersect=function(t){return T(n,r,i,t)},a},circle:function(t,e,n){var r=Math.max(e.width,e.height)/2,i=t.insert("circle",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("r",r);return n.intersect=function(t){return function(t,e,n){return T(t,e,e,n)}(n,r,t)},i},diamond:function(t,e,n){var r=e.width*Math.SQRT2/2,i=e.height*Math.SQRT2/2,a=[{x:0,y:-i},{x:-r,y:0},{x:0,y:i},{x:r,y:0}],s=t.insert("polygon",":first-child").attr("points",a.map((function(t){return t.x+","+t.y})).join(" "));return n.intersect=function(t){return(0,S.A)(n,a,t)},s}};function B(t){L=t}function N(){var t=function(t,e){!function(t){t.nodes().forEach((function(e){var n=t.node(e);i.Z(n,"label")||t.children(e).length||(n.label=e),i.Z(n,"paddingX")&&a.Z(n,{paddingLeft:n.paddingX,paddingRight:n.paddingX}),i.Z(n,"paddingY")&&a.Z(n,{paddingTop:n.paddingY,paddingBottom:n.paddingY}),i.Z(n,"padding")&&a.Z(n,{paddingLeft:n.padding,paddingRight:n.padding,paddingTop:n.padding,paddingBottom:n.padding}),a.Z(n,D),s.Z(["paddingLeft","paddingRight","paddingTop","paddingBottom"],(function(t){n[t]=Number(n[t])})),i.Z(n,"width")&&(n._prevWidth=n.width),i.Z(n,"height")&&(n._prevHeight=n.height)})),t.edges().forEach((function(e){var n=t.edge(e);i.Z(n,"label")||(n.label=""),a.Z(n,O)}))}(e);var n=M(t,"output"),h=M(n,"clusters"),u=M(n,"edgePaths"),d=g(M(n,"edgeLabels"),e),f=E(M(n,"nodes"),e,L);(0,o.bK)(e),function(t,e){function n(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(f,e),function(t,e){function n(t){var n=e.edge(t);return i.Z(n,"x")?"translate("+n.x+","+n.y+")":""}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(d,e),x(u,e,l),function(t,e){var n=t.filter((function(){return!r.Ys(this).classed("update")}));function i(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}n.attr("transform",i),c.WR(t,e).style("opacity",1).attr("transform",i),c.WR(n.selectAll("rect"),e).attr("width",(function(t){return e.node(t).width})).attr("height",(function(t){return e.node(t).height})).attr("x",(function(t){return-e.node(t).width/2})).attr("y",(function(t){return-e.node(t).height/2}))}(p(h,e),e),function(t){s.Z(t.nodes(),(function(e){var n=t.node(e);i.Z(n,"_prevWidth")?n.width=n._prevWidth:delete n.width,i.Z(n,"_prevHeight")?n.height=n._prevHeight:delete n.height,delete n._prevWidth,delete n._prevHeight}))}(e)};return t.createNodes=function(e){return arguments.length?(C(e),t):E},t.createClusters=function(e){return arguments.length?(f(e),t):p},t.createEdgeLabels=function(e){return arguments.length?(y(e),t):g},t.createEdgePaths=function(e){return arguments.length?(v(e),t):x},t.shapes=function(e){return arguments.length?(B(e),t):L},t.arrows=function(e){return arguments.length?(h(e),t):l},t}var D={paddingLeft:10,paddingRight:10,paddingTop:10,paddingBottom:10,rx:0,ry:0,shape:"rect"},O={arrowhead:"normal",curve:r.c_6};function M(t,e){var n=t.select("g."+e);return n.empty()&&(n=t.append("g").attr("class",e)),n}n(5625)},1883:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(1691),i=n(2142);const a=class{constructor(){this.type=i.w.ALL}get(){return this.type}set(t){if(this.type&&this.type!==t)throw new Error("Cannot change both RGB and HSL channels at the same time");this.type=t}reset(){this.type=i.w.ALL}is(t){return this.type===t}};const s=new class{constructor(t,e){this.color=e,this.changed=!1,this.data=t,this.type=new a}set(t,e){return this.color=e,this.changed=!1,this.data=t,this.type.type=i.w.ALL,this}_ensureHSL(){const t=this.data,{h:e,s:n,l:i}=t;void 0===e&&(t.h=r.Z.channel.rgb2hsl(t,"h")),void 0===n&&(t.s=r.Z.channel.rgb2hsl(t,"s")),void 0===i&&(t.l=r.Z.channel.rgb2hsl(t,"l"))}_ensureRGB(){const t=this.data,{r:e,g:n,b:i}=t;void 0===e&&(t.r=r.Z.channel.hsl2rgb(t,"r")),void 0===n&&(t.g=r.Z.channel.hsl2rgb(t,"g")),void 0===i&&(t.b=r.Z.channel.hsl2rgb(t,"b"))}get r(){const t=this.data,e=t.r;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"r")):e}get g(){const t=this.data,e=t.g;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"g")):e}get b(){const t=this.data,e=t.b;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"b")):e}get h(){const t=this.data,e=t.h;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"h")):e}get s(){const t=this.data,e=t.s;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"s")):e}get l(){const t=this.data,e=t.l;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"l")):e}get a(){return this.data.a}set r(t){this.type.set(i.w.RGB),this.changed=!0,this.data.r=t}set g(t){this.type.set(i.w.RGB),this.changed=!0,this.data.g=t}set b(t){this.type.set(i.w.RGB),this.changed=!0,this.data.b=t}set h(t){this.type.set(i.w.HSL),this.changed=!0,this.data.h=t}set s(t){this.type.set(i.w.HSL),this.changed=!0,this.data.s=t}set l(t){this.type.set(i.w.HSL),this.changed=!0,this.data.l=t}set a(t){this.changed=!0,this.data.a=t}}({r:0,g:0,b:0,a:0},"transparent")},1610:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=n(1883),i=n(2142);const a={re:/^#((?:[a-f0-9]{2}){2,4}|[a-f0-9]{3})$/i,parse:t=>{if(35!==t.charCodeAt(0))return;const e=t.match(a.re);if(!e)return;const n=e[1],i=parseInt(n,16),s=n.length,o=s%4==0,c=s>4,l=c?1:17,h=c?8:4,u=o?0:-1,d=c?255:15;return r.Z.set({r:(i>>h*(u+3)&d)*l,g:(i>>h*(u+2)&d)*l,b:(i>>h*(u+1)&d)*l,a:o?(i&d)*l/255:1},t)},stringify:t=>{const{r:e,g:n,b:r,a:a}=t;return a<1?`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}${i.Q[Math.round(255*a)]}`:`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}`}},s=a;var o=n(1691);const c={re:/^hsla?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(?:deg|grad|rad|turn)?)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(%)?))?\s*?\)$/i,hueRe:/^(.+?)(deg|grad|rad|turn)$/i,_hue2deg:t=>{const e=t.match(c.hueRe);if(e){const[,t,n]=e;switch(n){case"grad":return o.Z.channel.clamp.h(.9*parseFloat(t));case"rad":return o.Z.channel.clamp.h(180*parseFloat(t)/Math.PI);case"turn":return o.Z.channel.clamp.h(360*parseFloat(t))}}return o.Z.channel.clamp.h(parseFloat(t))},parse:t=>{const e=t.charCodeAt(0);if(104!==e&&72!==e)return;const n=t.match(c.re);if(!n)return;const[,i,a,s,l,h]=n;return r.Z.set({h:c._hue2deg(i),s:o.Z.channel.clamp.s(parseFloat(a)),l:o.Z.channel.clamp.l(parseFloat(s)),a:l?o.Z.channel.clamp.a(h?parseFloat(l)/100:parseFloat(l)):1},t)},stringify:t=>{const{h:e,s:n,l:r,a:i}=t;return i<1?`hsla(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%, ${i})`:`hsl(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%)`}},l=c,h={colors:{aliceblue:"#f0f8ff",antiquewhite:"#faebd7",aqua:"#00ffff",aquamarine:"#7fffd4",azure:"#f0ffff",beige:"#f5f5dc",bisque:"#ffe4c4",black:"#000000",blanchedalmond:"#ffebcd",blue:"#0000ff",blueviolet:"#8a2be2",brown:"#a52a2a",burlywood:"#deb887",cadetblue:"#5f9ea0",chartreuse:"#7fff00",chocolate:"#d2691e",coral:"#ff7f50",cornflowerblue:"#6495ed",cornsilk:"#fff8dc",crimson:"#dc143c",cyanaqua:"#00ffff",darkblue:"#00008b",darkcyan:"#008b8b",darkgoldenrod:"#b8860b",darkgray:"#a9a9a9",darkgreen:"#006400",darkgrey:"#a9a9a9",darkkhaki:"#bdb76b",darkmagenta:"#8b008b",darkolivegreen:"#556b2f",darkorange:"#ff8c00",darkorchid:"#9932cc",darkred:"#8b0000",darksalmon:"#e9967a",darkseagreen:"#8fbc8f",darkslateblue:"#483d8b",darkslategray:"#2f4f4f",darkslategrey:"#2f4f4f",darkturquoise:"#00ced1",darkviolet:"#9400d3",deeppink:"#ff1493",deepskyblue:"#00bfff",dimgray:"#696969",dimgrey:"#696969",dodgerblue:"#1e90ff",firebrick:"#b22222",floralwhite:"#fffaf0",forestgreen:"#228b22",fuchsia:"#ff00ff",gainsboro:"#dcdcdc",ghostwhite:"#f8f8ff",gold:"#ffd700",goldenrod:"#daa520",gray:"#808080",green:"#008000",greenyellow:"#adff2f",grey:"#808080",honeydew:"#f0fff0",hotpink:"#ff69b4",indianred:"#cd5c5c",indigo:"#4b0082",ivory:"#fffff0",khaki:"#f0e68c",lavender:"#e6e6fa",lavenderblush:"#fff0f5",lawngreen:"#7cfc00",lemonchiffon:"#fffacd",lightblue:"#add8e6",lightcoral:"#f08080",lightcyan:"#e0ffff",lightgoldenrodyellow:"#fafad2",lightgray:"#d3d3d3",lightgreen:"#90ee90",lightgrey:"#d3d3d3",lightpink:"#ffb6c1",lightsalmon:"#ffa07a",lightseagreen:"#20b2aa",lightskyblue:"#87cefa",lightslategray:"#778899",lightslategrey:"#778899",lightsteelblue:"#b0c4de",lightyellow:"#ffffe0",lime:"#00ff00",limegreen:"#32cd32",linen:"#faf0e6",magenta:"#ff00ff",maroon:"#800000",mediumaquamarine:"#66cdaa",mediumblue:"#0000cd",mediumorchid:"#ba55d3",mediumpurple:"#9370db",mediumseagreen:"#3cb371",mediumslateblue:"#7b68ee",mediumspringgreen:"#00fa9a",mediumturquoise:"#48d1cc",mediumvioletred:"#c71585",midnightblue:"#191970",mintcream:"#f5fffa",mistyrose:"#ffe4e1",moccasin:"#ffe4b5",navajowhite:"#ffdead",navy:"#000080",oldlace:"#fdf5e6",olive:"#808000",olivedrab:"#6b8e23",orange:"#ffa500",orangered:"#ff4500",orchid:"#da70d6",palegoldenrod:"#eee8aa",palegreen:"#98fb98",paleturquoise:"#afeeee",palevioletred:"#db7093",papayawhip:"#ffefd5",peachpuff:"#ffdab9",peru:"#cd853f",pink:"#ffc0cb",plum:"#dda0dd",powderblue:"#b0e0e6",purple:"#800080",rebeccapurple:"#663399",red:"#ff0000",rosybrown:"#bc8f8f",royalblue:"#4169e1",saddlebrown:"#8b4513",salmon:"#fa8072",sandybrown:"#f4a460",seagreen:"#2e8b57",seashell:"#fff5ee",sienna:"#a0522d",silver:"#c0c0c0",skyblue:"#87ceeb",slateblue:"#6a5acd",slategray:"#708090",slategrey:"#708090",snow:"#fffafa",springgreen:"#00ff7f",tan:"#d2b48c",teal:"#008080",thistle:"#d8bfd8",transparent:"#00000000",turquoise:"#40e0d0",violet:"#ee82ee",wheat:"#f5deb3",white:"#ffffff",whitesmoke:"#f5f5f5",yellow:"#ffff00",yellowgreen:"#9acd32"},parse:t=>{t=t.toLowerCase();const e=h.colors[t];if(e)return s.parse(e)},stringify:t=>{const e=s.stringify(t);for(const n in h.colors)if(h.colors[n]===e)return n}},u=h,d={re:/^rgba?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?)))?\s*?\)$/i,parse:t=>{const e=t.charCodeAt(0);if(114!==e&&82!==e)return;const n=t.match(d.re);if(!n)return;const[,i,a,s,c,l,h,u,p]=n;return r.Z.set({r:o.Z.channel.clamp.r(a?2.55*parseFloat(i):parseFloat(i)),g:o.Z.channel.clamp.g(c?2.55*parseFloat(s):parseFloat(s)),b:o.Z.channel.clamp.b(h?2.55*parseFloat(l):parseFloat(l)),a:u?o.Z.channel.clamp.a(p?parseFloat(u)/100:parseFloat(u)):1},t)},stringify:t=>{const{r:e,g:n,b:r,a:i}=t;return i<1?`rgba(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)}, ${o.Z.lang.round(i)})`:`rgb(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)})`}},p=d,f={format:{keyword:h,hex:s,rgb:d,rgba:d,hsl:c,hsla:c},parse:t=>{if("string"!=typeof t)return t;const e=s.parse(t)||p.parse(t)||l.parse(t)||u.parse(t);if(e)return e;throw new Error(`Unsupported color format: "${t}"`)},stringify:t=>!t.changed&&t.color?t.color:t.type.is(i.w.HSL)||void 0===t.data.r?l.stringify(t):t.a<1||!Number.isInteger(t.r)||!Number.isInteger(t.g)||!Number.isInteger(t.b)?p.stringify(t):s.stringify(t)},g=f},2142:(t,e,n)=>{"use strict";n.d(e,{Q:()=>i,w:()=>a});var r=n(1691);const i={};for(let s=0;s<=255;s++)i[s]=r.Z.unit.dec2hex(s);const a={ALL:0,RGB:1,HSL:2}},1506:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1691),i=n(1610);const a=(t,e,n)=>{const a=i.Z.parse(t),s=a[e],o=r.Z.channel.clamp[e](s+n);return s!==o&&(a[e]=o),i.Z.stringify(a)}},7201:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",-e)},5920:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",e)},1691:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});const r={min:{r:0,g:0,b:0,s:0,l:0,a:0},max:{r:255,g:255,b:255,h:360,s:100,l:100,a:1},clamp:{r:t=>t>=255?255:t<0?0:t,g:t=>t>=255?255:t<0?0:t,b:t=>t>=255?255:t<0?0:t,h:t=>t%360,s:t=>t>=100?100:t<0?0:t,l:t=>t>=100?100:t<0?0:t,a:t=>t>=1?1:t<0?0:t},toLinear:t=>{const e=t/255;return t>.03928?Math.pow((e+.055)/1.055,2.4):e/12.92},hue2rgb:(t,e,n)=>(n<0&&(n+=1),n>1&&(n-=1),n<1/6?t+6*(e-t)*n:n<.5?e:n<2/3?t+(e-t)*(2/3-n)*6:t),hsl2rgb:({h:t,s:e,l:n},i)=>{if(!e)return 2.55*n;t/=360,e/=100;const a=(n/=100)<.5?n*(1+e):n+e-n*e,s=2*n-a;switch(i){case"r":return 255*r.hue2rgb(s,a,t+1/3);case"g":return 255*r.hue2rgb(s,a,t);case"b":return 255*r.hue2rgb(s,a,t-1/3)}},rgb2hsl:({r:t,g:e,b:n},r)=>{t/=255,e/=255,n/=255;const i=Math.max(t,e,n),a=Math.min(t,e,n),s=(i+a)/2;if("l"===r)return 100*s;if(i===a)return 0;const o=i-a;if("s"===r)return 100*(s>.5?o/(2-i-a):o/(i+a));switch(i){case t:return 60*((e-n)/o+(e<n?6:0));case e:return 60*((n-t)/o+2);case n:return 60*((t-e)/o+4);default:return-1}}},i={channel:r,lang:{clamp:(t,e,n)=>e>n?Math.min(e,Math.max(n,t)):Math.min(n,Math.max(e,t)),round:t=>Math.round(1e10*t)/1e10},unit:{dec2hex:t=>{const e=Math.round(t).toString(16);return e.length>1?e:`0${e}`}}}},7308:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});const r=function(){this.__data__=[],this.size=0};var i=n(9651);const a=function(t,e){for(var n=t.length;n--;)if((0,i.Z)(t[n][0],e))return n;return-1};var s=Array.prototype.splice;const o=function(t){var e=this.__data__,n=a(e,t);return!(n<0)&&(n==e.length-1?e.pop():s.call(e,n,1),--this.size,!0)};const c=function(t){var e=this.__data__,n=a(e,t);return n<0?void 0:e[n][1]};const l=function(t){return a(this.__data__,t)>-1};const h=function(t,e){var n=this.__data__,r=a(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=r,u.prototype.delete=o,u.prototype.get=c,u.prototype.has=l,u.prototype.set=h;const d=u},6183:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Map")},7834:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});const r=(0,n(2508).Z)(Object,"create");const i=function(){this.__data__=r?r(null):{},this.size=0};const a=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e};var s=Object.prototype.hasOwnProperty;const o=function(t){var e=this.__data__;if(r){var n=e[t];return"__lodash_hash_undefined__"===n?void 0:n}return s.call(e,t)?e[t]:void 0};var c=Object.prototype.hasOwnProperty;const l=function(t){var e=this.__data__;return r?void 0!==e[t]:c.call(e,t)};const h=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=r&&void 0===e?"__lodash_hash_undefined__":e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=o,u.prototype.has=l,u.prototype.set=h;const d=u;var p=n(7308),f=n(6183);const g=function(){this.size=0,this.__data__={hash:new d,map:new(f.Z||p.Z),string:new d}};const y=function(t){var e=typeof t;return"string"==e||"number"==e||"symbol"==e||"boolean"==e?"__proto__"!==t:null===t};const m=function(t,e){var n=t.__data__;return y(e)?n["string"==typeof e?"string":"hash"]:n.map};const b=function(t){var e=m(this,t).delete(t);return this.size-=e?1:0,e};const _=function(t){return m(this,t).get(t)};const x=function(t){return m(this,t).has(t)};const v=function(t,e){var n=m(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this};function k(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}k.prototype.clear=g,k.prototype.delete=b,k.prototype.get=_,k.prototype.has=x,k.prototype.set=v;const w=k},3203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Set")},3001:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7834);const i=function(t){return this.__data__.set(t,"__lodash_hash_undefined__"),this};const a=function(t){return this.__data__.has(t)};function s(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r.Z;++e<n;)this.add(t[e])}s.prototype.add=s.prototype.push=i,s.prototype.has=a;const o=s},1667:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7308);const i=function(){this.__data__=new r.Z,this.size=0};const a=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n};const s=function(t){return this.__data__.get(t)};const o=function(t){return this.__data__.has(t)};var c=n(6183),l=n(7834);const h=function(t,e){var n=this.__data__;if(n instanceof r.Z){var i=n.__data__;if(!c.Z||i.length<199)return i.push([t,e]),this.size=++n.size,this;n=this.__data__=new l.Z(i)}return n.set(t,e),this.size=n.size,this};function u(t){var e=this.__data__=new r.Z(t);this.size=e.size}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=s,u.prototype.has=o,u.prototype.set=h;const d=u},7685:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Symbol},7623:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Uint8Array},6579:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}},8774:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=0,a=[];++n<r;){var s=t[n];e(s,n,t)&&(a[i++]=s)}return a}},7668:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});const r=function(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r};var i=n(9169),a=n(7771),s=n(7008),o=n(6009),c=n(8843),l=Object.prototype.hasOwnProperty;const h=function(t,e){var n=(0,a.Z)(t),h=!n&&(0,i.Z)(t),u=!n&&!h&&(0,s.Z)(t),d=!n&&!h&&!u&&(0,c.Z)(t),p=n||h||u||d,f=p?r(t.length,String):[],g=f.length;for(var y in t)!e&&!l.call(t,y)||p&&("length"==y||u&&("offset"==y||"parent"==y)||d&&("buffer"==y||"byteLength"==y||"byteOffset"==y)||(0,o.Z)(y,g))||f.push(y);return f}},4073:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=Array(r);++n<r;)i[n]=e(t[n],n,t);return i}},8694:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=e.length,i=t.length;++n<r;)t[i+n]=e[n];return t}},2954:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4752),i=n(9651),a=Object.prototype.hasOwnProperty;const s=function(t,e,n){var s=t[e];a.call(t,e)&&(0,i.Z)(s,n)&&(void 0!==n||e in t)||(0,r.Z)(t,e,n)}},4752:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7904);const i=function(t,e,n){"__proto__"==e&&r.Z?(0,r.Z)(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}},8451:(t,e,n)=>{"use strict";n.d(e,{Z:()=>J});var r=n(1667),i=n(6579),a=n(2954),s=n(1899),o=n(7179);const c=function(t,e){return t&&(0,s.Z)(e,(0,o.Z)(e),t)};var l=n(2957);const h=function(t,e){return t&&(0,s.Z)(e,(0,l.Z)(e),t)};var u=n(1050),d=n(7215),p=n(5695);const f=function(t,e){return(0,s.Z)(t,(0,p.Z)(t),e)};var g=n(8694),y=n(2513),m=n(532);const b=Object.getOwnPropertySymbols?function(t){for(var e=[];t;)(0,g.Z)(e,(0,p.Z)(t)),t=(0,y.Z)(t);return e}:m.Z;const _=function(t,e){return(0,s.Z)(t,b(t),e)};var x=n(1808),v=n(3327);const k=function(t){return(0,v.Z)(t,l.Z,b)};var w=n(3970),E=Object.prototype.hasOwnProperty;const C=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&E.call(t,"index")&&(n.index=t.index,n.input=t.input),n};var T=n(1884);const S=function(t,e){var n=e?(0,T.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)};var A=/\w*$/;const L=function(t){var e=new t.constructor(t.source,A.exec(t));return e.lastIndex=t.lastIndex,e};var B=n(7685),N=B.Z?B.Z.prototype:void 0,D=N?N.valueOf:void 0;const O=function(t){return D?Object(D.call(t)):{}};var M=n(2701);const I=function(t,e,n){var r=t.constructor;switch(e){case"[object ArrayBuffer]":return(0,T.Z)(t);case"[object Boolean]":case"[object Date]":return new r(+t);case"[object DataView]":return S(t,n);case"[object Float32Array]":case"[object Float64Array]":case"[object Int8Array]":case"[object Int16Array]":case"[object Int32Array]":case"[object Uint8Array]":case"[object Uint8ClampedArray]":case"[object Uint16Array]":case"[object Uint32Array]":return(0,M.Z)(t,n);case"[object Map]":case"[object Set]":return new r;case"[object Number]":case"[object String]":return new r(t);case"[object RegExp]":return L(t);case"[object Symbol]":return O(t)}};var F=n(3658),$=n(7771),R=n(7008),Z=n(8533);const P=function(t){return(0,Z.Z)(t)&&"[object Map]"==(0,w.Z)(t)};var j=n(1162),Y=n(8351),z=Y.Z&&Y.Z.isMap;const U=z?(0,j.Z)(z):P;var W=n(7226);const q=function(t){return(0,Z.Z)(t)&&"[object Set]"==(0,w.Z)(t)};var H=Y.Z&&Y.Z.isSet;const V=H?(0,j.Z)(H):q;var G="[object Arguments]",X="[object Function]",K="[object Object]",Q={};Q[G]=Q["[object Array]"]=Q["[object ArrayBuffer]"]=Q["[object DataView]"]=Q["[object Boolean]"]=Q["[object Date]"]=Q["[object Float32Array]"]=Q["[object Float64Array]"]=Q["[object Int8Array]"]=Q["[object Int16Array]"]=Q["[object Int32Array]"]=Q["[object Map]"]=Q["[object Number]"]=Q[K]=Q["[object RegExp]"]=Q["[object Set]"]=Q["[object String]"]=Q["[object Symbol]"]=Q["[object Uint8Array]"]=Q["[object Uint8ClampedArray]"]=Q["[object Uint16Array]"]=Q["[object Uint32Array]"]=!0,Q["[object Error]"]=Q[X]=Q["[object WeakMap]"]=!1;const J=function t(e,n,s,p,g,y){var m,b=1&n,v=2&n,E=4&n;if(s&&(m=g?s(e,p,g,y):s(e)),void 0!==m)return m;if(!(0,W.Z)(e))return e;var T=(0,$.Z)(e);if(T){if(m=C(e),!b)return(0,d.Z)(e,m)}else{var S=(0,w.Z)(e),A=S==X||"[object GeneratorFunction]"==S;if((0,R.Z)(e))return(0,u.Z)(e,b);if(S==K||S==G||A&&!g){if(m=v||A?{}:(0,F.Z)(e),!b)return v?_(e,h(m,e)):f(e,c(m,e))}else{if(!Q[S])return g?e:{};m=I(e,S,b)}}y||(y=new r.Z);var L=y.get(e);if(L)return L;y.set(e,m),V(e)?e.forEach((function(r){m.add(t(r,n,s,r,e,y))})):U(e)&&e.forEach((function(r,i){m.set(i,t(r,n,s,i,e,y))}));var B=E?v?k:x.Z:v?l.Z:o.Z,N=T?void 0:B(e);return(0,i.Z)(N||e,(function(r,i){N&&(r=e[i=r]),(0,a.Z)(m,i,t(r,n,s,i,e,y))})),m}},9811:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2693),i=n(585);const a=function(t,e){return function(n,r){if(null==n)return n;if(!(0,i.Z)(n))return t(n,r);for(var a=n.length,s=e?a:-1,o=Object(n);(e?s--:++s<a)&&!1!==r(o[s],s,o););return n}}(r.Z)},1692:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e,n,r){for(var i=t.length,a=n+(r?1:-1);r?a--:++a<i;)if(e(t[a],a,t))return a;return-1}},626:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(8694),i=n(7685),a=n(9169),s=n(7771),o=i.Z?i.Z.isConcatSpreadable:void 0;const c=function(t){return(0,s.Z)(t)||(0,a.Z)(t)||!!(o&&t&&t[o])};const l=function t(e,n,i,a,s){var o=-1,l=e.length;for(i||(i=c),s||(s=[]);++o<l;){var h=e[o];n>0&&i(h)?n>1?t(h,n-1,i,a,s):(0,r.Z)(s,h):a||(s[s.length]=h)}return s}},1395:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e,n,r){for(var i=-1,a=Object(e),s=r(e),o=s.length;o--;){var c=s[t?o:++i];if(!1===n(a[c],c,a))break}return e}}()},2693:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1395),i=n(7179);const a=function(t,e){return t&&(0,r.Z)(t,e,i.Z)}},3317:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2823),i=n(2281);const a=function(t,e){for(var n=0,a=(e=(0,r.Z)(e,t)).length;null!=t&&n<a;)t=t[(0,i.Z)(e[n++])];return n&&n==a?t:void 0}},3327:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(8694),i=n(7771);const a=function(t,e,n){var a=e(t);return(0,i.Z)(t)?a:(0,r.Z)(a,n(t))}},3589:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7685),i=Object.prototype,a=i.hasOwnProperty,s=i.toString,o=r.Z?r.Z.toStringTag:void 0;const c=function(t){var e=a.call(t,o),n=t[o];try{t[o]=void 0;var r=!0}catch(c){}var i=s.call(t);return r&&(e?t[o]=n:delete t[o]),i};var l=Object.prototype.toString;const h=function(t){return l.call(t)};var u=r.Z?r.Z.toStringTag:void 0;const d=function(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":u&&u in Object(t)?c(t):h(t)}},4765:(t,e,n)=>{"use strict";n.d(e,{Z:()=>H});var r=n(1667),i=n(3001);const a=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1};var s=n(9548);const o=function(t,e,n,r,o,c){var l=1&n,h=t.length,u=e.length;if(h!=u&&!(l&&u>h))return!1;var d=c.get(t),p=c.get(e);if(d&&p)return d==e&&p==t;var f=-1,g=!0,y=2&n?new i.Z:void 0;for(c.set(t,e),c.set(e,t);++f<h;){var m=t[f],b=e[f];if(r)var _=l?r(b,m,f,e,t,c):r(m,b,f,t,e,c);if(void 0!==_){if(_)continue;g=!1;break}if(y){if(!a(e,(function(t,e){if(!(0,s.Z)(y,e)&&(m===t||o(m,t,n,r,c)))return y.push(e)}))){g=!1;break}}else if(m!==b&&!o(m,b,n,r,c)){g=!1;break}}return c.delete(t),c.delete(e),g};var c=n(7685),l=n(7623),h=n(9651);const u=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t,r){n[++e]=[r,t]})),n};var d=n(6545),p=c.Z?c.Z.prototype:void 0,f=p?p.valueOf:void 0;const g=function(t,e,n,r,i,a,s){switch(n){case"[object DataView]":if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case"[object ArrayBuffer]":return!(t.byteLength!=e.byteLength||!a(new l.Z(t),new l.Z(e)));case"[object Boolean]":case"[object Date]":case"[object Number]":return(0,h.Z)(+t,+e);case"[object Error]":return t.name==e.name&&t.message==e.message;case"[object RegExp]":case"[object String]":return t==e+"";case"[object Map]":var c=u;case"[object Set]":var p=1&r;if(c||(c=d.Z),t.size!=e.size&&!p)return!1;var g=s.get(t);if(g)return g==e;r|=2,s.set(t,e);var y=o(c(t),c(e),r,i,a,s);return s.delete(t),y;case"[object Symbol]":if(f)return f.call(t)==f.call(e)}return!1};var y=n(1808),m=Object.prototype.hasOwnProperty;const b=function(t,e,n,r,i,a){var s=1&n,o=(0,y.Z)(t),c=o.length;if(c!=(0,y.Z)(e).length&&!s)return!1;for(var l=c;l--;){var h=o[l];if(!(s?h in e:m.call(e,h)))return!1}var u=a.get(t),d=a.get(e);if(u&&d)return u==e&&d==t;var p=!0;a.set(t,e),a.set(e,t);for(var f=s;++l<c;){var g=t[h=o[l]],b=e[h];if(r)var _=s?r(b,g,h,e,t,a):r(g,b,h,t,e,a);if(!(void 0===_?g===b||i(g,b,n,r,a):_)){p=!1;break}f||(f="constructor"==h)}if(p&&!f){var x=t.constructor,v=e.constructor;x==v||!("constructor"in t)||!("constructor"in e)||"function"==typeof x&&x instanceof x&&"function"==typeof v&&v instanceof v||(p=!1)}return a.delete(t),a.delete(e),p};var _=n(3970),x=n(7771),v=n(7008),k=n(8843),w="[object Arguments]",E="[object Array]",C="[object Object]",T=Object.prototype.hasOwnProperty;const S=function(t,e,n,i,a,s){var c=(0,x.Z)(t),l=(0,x.Z)(e),h=c?E:(0,_.Z)(t),u=l?E:(0,_.Z)(e),d=(h=h==w?C:h)==C,p=(u=u==w?C:u)==C,f=h==u;if(f&&(0,v.Z)(t)){if(!(0,v.Z)(e))return!1;c=!0,d=!1}if(f&&!d)return s||(s=new r.Z),c||(0,k.Z)(t)?o(t,e,n,i,a,s):g(t,e,h,n,i,a,s);if(!(1&n)){var y=d&&T.call(t,"__wrapped__"),m=p&&T.call(e,"__wrapped__");if(y||m){var S=y?t.value():t,A=m?e.value():e;return s||(s=new r.Z),a(S,A,n,i,s)}}return!!f&&(s||(s=new r.Z),b(t,e,n,i,a,s))};var A=n(8533);const L=function t(e,n,r,i,a){return e===n||(null==e||null==n||!(0,A.Z)(e)&&!(0,A.Z)(n)?e!=e&&n!=n:S(e,n,r,i,t,a))};const B=function(t,e,n,i){var a=n.length,s=a,o=!i;if(null==t)return!s;for(t=Object(t);a--;){var c=n[a];if(o&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++a<s;){var l=(c=n[a])[0],h=t[l],u=c[1];if(o&&c[2]){if(void 0===h&&!(l in t))return!1}else{var d=new r.Z;if(i)var p=i(h,u,l,t,e,d);if(!(void 0===p?L(u,h,3,i,d):p))return!1}}return!0};var N=n(7226);const D=function(t){return t==t&&!(0,N.Z)(t)};var O=n(7179);const M=function(t){for(var e=(0,O.Z)(t),n=e.length;n--;){var r=e[n],i=t[r];e[n]=[r,i,D(i)]}return e};const I=function(t,e){return function(n){return null!=n&&(n[t]===e&&(void 0!==e||t in Object(n)))}};const F=function(t){var e=M(t);return 1==e.length&&e[0][2]?I(e[0][0],e[0][1]):function(n){return n===t||B(n,t,e)}};var $=n(3317);const R=function(t,e,n){var r=null==t?void 0:(0,$.Z)(t,e);return void 0===r?n:r};var Z=n(5487),P=n(9365),j=n(2281);const Y=function(t,e){return(0,P.Z)(t)&&D(e)?I((0,j.Z)(t),e):function(n){var r=R(n,t);return void 0===r&&r===e?(0,Z.Z)(n,t):L(e,r,3)}};var z=n(9203),U=n(4193);const W=function(t){return function(e){return(0,$.Z)(e,t)}};const q=function(t){return(0,P.Z)(t)?(0,U.Z)((0,j.Z)(t)):W(t)};const H=function(t){return"function"==typeof t?t:null==t?z.Z:"object"==typeof t?(0,x.Z)(t)?Y(t[0],t[1]):F(t):q(t)}},9473:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(2764);const i=(0,n(1851).Z)(Object.keys,Object);var a=Object.prototype.hasOwnProperty;const s=function(t){if(!(0,r.Z)(t))return i(t);var e=[];for(var n in Object(t))a.call(t,n)&&"constructor"!=n&&e.push(n);return e}},1018:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(9811),i=n(585);const a=function(t,e){var n=-1,a=(0,i.Z)(t)?Array(t.length):[];return(0,r.Z)(t,(function(t,r,i){a[++n]=e(t,r,i)})),a}},4193:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return null==e?void 0:e[t]}}},9581:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(9203),i=n(1211),a=n(7227);const s=function(t,e){return(0,a.Z)((0,i.Z)(t,e,r.Z),t+"")}},1162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return t(e)}}},9548:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t.has(e)}},8882:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(9203);const i=function(t){return"function"==typeof t?t:r.Z}},2823:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7771),i=n(9365),a=n(2454);var s=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,o=/\\(\\)?/g;const c=function(t){var e=(0,a.Z)(t,(function(t){return 500===n.size&&n.clear(),t})),n=e.cache;return e}((function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(s,(function(t,n,r,i){e.push(r?i.replace(o,"$1"):n||t)})),e}));var l=n(751);const h=function(t,e){return(0,r.Z)(t)?t:(0,i.Z)(t,e)?[t]:c((0,l.Z)(t))}},1884:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7623);const i=function(t){var e=new t.constructor(t.byteLength);return new r.Z(e).set(new r.Z(t)),e}},1050:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i?r.Z.Buffer:void 0,o=s?s.allocUnsafe:void 0;const c=function(t,e){if(e)return t.slice();var n=t.length,r=o?o(n):new t.constructor(n);return t.copy(r),r}},2701:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1884);const i=function(t,e){var n=e?(0,r.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}},7215:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){var n=-1,r=t.length;for(e||(e=Array(r));++n<r;)e[n]=t[n];return e}},1899:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2954),i=n(4752);const a=function(t,e,n,a){var s=!n;n||(n={});for(var o=-1,c=e.length;++o<c;){var l=e[o],h=a?a(n[l],t[l],l,n,t):void 0;void 0===h&&(h=t[l]),s?(0,i.Z)(n,l,h):(0,r.Z)(n,l,h)}return n}},7904:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2508);const i=function(){try{var t=(0,r.Z)(Object,"defineProperty");return t({},"",{}),t}catch(e){}}()},3413:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r="object"==typeof global&&global&&global.Object===Object&&global},1808:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(3327),i=n(5695),a=n(7179);const s=function(t){return(0,r.Z)(t,a.Z,i.Z)}},2508:(t,e,n)=>{"use strict";n.d(e,{Z:()=>b});var r=n(3234);const i=n(6092).Z["__core-js_shared__"];var a,s=(a=/[^.]+$/.exec(i&&i.keys&&i.keys.IE_PROTO||""))?"Symbol(src)_1."+a:"";const o=function(t){return!!s&&s in t};var c=n(7226),l=n(19),h=/^\[object .+?Constructor\]$/,u=Function.prototype,d=Object.prototype,p=u.toString,f=d.hasOwnProperty,g=RegExp("^"+p.call(f).replace(/[\\^$.*+?()[\]{}|]/g,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$");const y=function(t){return!(!(0,c.Z)(t)||o(t))&&((0,r.Z)(t)?g:h).test((0,l.Z)(t))};const m=function(t,e){return null==t?void 0:t[e]};const b=function(t,e){var n=m(t,e);return y(n)?n:void 0}},2513:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=(0,n(1851).Z)(Object.getPrototypeOf,Object)},5695:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(8774),i=n(532),a=Object.prototype.propertyIsEnumerable,s=Object.getOwnPropertySymbols;const o=s?function(t){return null==t?[]:(t=Object(t),(0,r.Z)(s(t),(function(e){return a.call(t,e)})))}:i.Z},3970:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"DataView");var s=n(6183);const o=(0,r.Z)(i.Z,"Promise");var c=n(3203);const l=(0,r.Z)(i.Z,"WeakMap");var h=n(3589),u=n(19),d="[object Map]",p="[object Promise]",f="[object Set]",g="[object WeakMap]",y="[object DataView]",m=(0,u.Z)(a),b=(0,u.Z)(s.Z),_=(0,u.Z)(o),x=(0,u.Z)(c.Z),v=(0,u.Z)(l),k=h.Z;(a&&k(new a(new ArrayBuffer(1)))!=y||s.Z&&k(new s.Z)!=d||o&&k(o.resolve())!=p||c.Z&&k(new c.Z)!=f||l&&k(new l)!=g)&&(k=function(t){var e=(0,h.Z)(t),n="[object Object]"==e?t.constructor:void 0,r=n?(0,u.Z)(n):"";if(r)switch(r){case m:return y;case b:return d;case _:return p;case x:return f;case v:return g}return e});const w=k},6174:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(2823),i=n(9169),a=n(7771),s=n(6009),o=n(1656),c=n(2281);const l=function(t,e,n){for(var l=-1,h=(e=(0,r.Z)(e,t)).length,u=!1;++l<h;){var d=(0,c.Z)(e[l]);if(!(u=null!=t&&n(t,d)))break;t=t[d]}return u||++l!=h?u:!!(h=null==t?0:t.length)&&(0,o.Z)(h)&&(0,s.Z)(d,h)&&((0,a.Z)(t)||(0,i.Z)(t))}},3658:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(7226),i=Object.create;const a=function(){function t(){}return function(e){if(!(0,r.Z)(e))return{};if(i)return i(e);t.prototype=e;var n=new t;return t.prototype=void 0,n}}();var s=n(2513),o=n(2764);const c=function(t){return"function"!=typeof t.constructor||(0,o.Z)(t)?{}:a((0,s.Z)(t))}},6009:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=/^(?:0|[1-9]\d*)$/;const i=function(t,e){var n=typeof t;return!!(e=null==e?9007199254740991:e)&&("number"==n||"symbol"!=n&&r.test(t))&&t>-1&&t%1==0&&t<e}},439:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(9651),i=n(585),a=n(6009),s=n(7226);const o=function(t,e,n){if(!(0,s.Z)(n))return!1;var o=typeof e;return!!("number"==o?(0,i.Z)(n)&&(0,a.Z)(e,n.length):"string"==o&&e in n)&&(0,r.Z)(n[e],t)}},9365:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7771),i=n(2714),a=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,s=/^\w*$/;const o=function(t,e){if((0,r.Z)(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!(0,i.Z)(t))||(s.test(t)||!a.test(t)||null!=e&&t in Object(e))}},2764:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Object.prototype;const i=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||r)}},8351:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(3413),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i&&r.Z.process;const o=function(){try{var t=a&&a.require&&a.require("util").types;return t||s&&s.binding&&s.binding("util")}catch(e){}}()},1851:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return function(n){return t(e(n))}}},1211:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)};var i=Math.max;const a=function(t,e,n){return e=i(void 0===e?t.length-1:e,0),function(){for(var a=arguments,s=-1,o=i(a.length-e,0),c=Array(o);++s<o;)c[s]=a[e+s];s=-1;for(var l=Array(e+1);++s<e;)l[s]=a[s];return l[e]=n(c),r(t,this,l)}}},6092:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3413),i="object"==typeof self&&self&&self.Object===Object&&self;const a=r.Z||i||Function("return this")()},6545:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t){n[++e]=t})),n}},7227:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(2002),i=n(7904),a=n(9203);const s=i.Z?function(t,e){return(0,i.Z)(t,"toString",{configurable:!0,enumerable:!1,value:(0,r.Z)(e),writable:!0})}:a.Z;var o=Date.now;const c=function(t){var e=0,n=0;return function(){var r=o(),i=16-(r-n);if(n=r,i>0){if(++e>=800)return arguments[0]}else e=0;return t.apply(void 0,arguments)}}(s)},2281:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2714);const i=function(t){if("string"==typeof t||(0,r.Z)(t))return t;var e=t+"";return"0"==e&&1/t==-Infinity?"-0":e}},19:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Function.prototype.toString;const i=function(t){if(null!=t){try{return r.call(t)}catch(e){}try{return t+""}catch(e){}}return""}},2002:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(){return t}}},3688:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(9581),i=n(9651),a=n(439),s=n(2957),o=Object.prototype,c=o.hasOwnProperty;const l=(0,r.Z)((function(t,e){t=Object(t);var n=-1,r=e.length,l=r>2?e[2]:void 0;for(l&&(0,a.Z)(e[0],e[1],l)&&(r=1);++n<r;)for(var h=e[n],u=(0,s.Z)(h),d=-1,p=u.length;++d<p;){var f=u[d],g=t[f];(void 0===g||(0,i.Z)(g,o[f])&&!c.call(t,f))&&(t[f]=h[f])}return t}))},9651:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t===e||t!=t&&e!=e}},3445:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(8774),i=n(9811);const a=function(t,e){var n=[];return(0,i.Z)(t,(function(t,r,i){e(t,r,i)&&n.push(t)})),n};var s=n(4765),o=n(7771);const c=function(t,e){return((0,o.Z)(t)?r.Z:a)(t,(0,s.Z)(e,3))}},7961:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(626);const i=function(t){return(null==t?0:t.length)?(0,r.Z)(t,1):[]}},870:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(6579),i=n(9811),a=n(8882),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:i.Z)(t,(0,a.Z)(e))}},7452:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=Object.prototype.hasOwnProperty;const i=function(t,e){return null!=t&&r.call(t,e)};var a=n(6174);const s=function(t,e){return null!=t&&(0,a.Z)(t,e,i)}},5487:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e){return null!=t&&e in Object(t)};var i=n(6174);const a=function(t,e){return null!=t&&(0,i.Z)(t,e,r)}},9203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return t}},9169:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(3589),i=n(8533);const a=function(t){return(0,i.Z)(t)&&"[object Arguments]"==(0,r.Z)(t)};var s=Object.prototype,o=s.hasOwnProperty,c=s.propertyIsEnumerable;const l=a(function(){return arguments}())?a:function(t){return(0,i.Z)(t)&&o.call(t,"callee")&&!c.call(t,"callee")}},7771:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=Array.isArray},585:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3234),i=n(1656);const a=function(t){return null!=t&&(0,i.Z)(t.length)&&!(0,r.Z)(t)}},836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(585),i=n(8533);const a=function(t){return(0,i.Z)(t)&&(0,r.Z)(t)}},7008:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092);const i=function(){return!1};var a="object"==typeof exports&&exports&&!exports.nodeType&&exports,s=a&&"object"==typeof module&&module&&!module.nodeType&&module,o=s&&s.exports===a?r.Z.Buffer:void 0;const c=(o?o.isBuffer:void 0)||i},9697:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(9473),i=n(3970),a=n(9169),s=n(7771),o=n(585),c=n(7008),l=n(2764),h=n(8843),u=Object.prototype.hasOwnProperty;const d=function(t){if(null==t)return!0;if((0,o.Z)(t)&&((0,s.Z)(t)||"string"==typeof t||"function"==typeof t.splice||(0,c.Z)(t)||(0,h.Z)(t)||(0,a.Z)(t)))return!t.length;var e=(0,i.Z)(t);if("[object Map]"==e||"[object Set]"==e)return!t.size;if((0,l.Z)(t))return!(0,r.Z)(t).length;for(var n in t)if(u.call(t,n))return!1;return!0}},3234:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(7226);const a=function(t){if(!(0,i.Z)(t))return!1;var e=(0,r.Z)(t);return"[object Function]"==e||"[object GeneratorFunction]"==e||"[object AsyncFunction]"==e||"[object Proxy]"==e}},1656:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=9007199254740991}},7226:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},8533:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return null!=t&&"object"==typeof t}},7514:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(2513),a=n(8533),s=Function.prototype,o=Object.prototype,c=s.toString,l=o.hasOwnProperty,h=c.call(Object);const u=function(t){if(!(0,a.Z)(t)||"[object Object]"!=(0,r.Z)(t))return!1;var e=(0,i.Z)(t);if(null===e)return!0;var n=l.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&c.call(n)==h}},2714:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(8533);const a=function(t){return"symbol"==typeof t||(0,i.Z)(t)&&"[object Symbol]"==(0,r.Z)(t)}},8843:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(1656),a=n(8533),s={};s["[object Float32Array]"]=s["[object Float64Array]"]=s["[object Int8Array]"]=s["[object Int16Array]"]=s["[object Int32Array]"]=s["[object Uint8Array]"]=s["[object Uint8ClampedArray]"]=s["[object Uint16Array]"]=s["[object Uint32Array]"]=!0,s["[object Arguments]"]=s["[object Array]"]=s["[object ArrayBuffer]"]=s["[object Boolean]"]=s["[object DataView]"]=s["[object Date]"]=s["[object Error]"]=s["[object Function]"]=s["[object Map]"]=s["[object Number]"]=s["[object Object]"]=s["[object RegExp]"]=s["[object Set]"]=s["[object String]"]=s["[object WeakMap]"]=!1;const o=function(t){return(0,a.Z)(t)&&(0,i.Z)(t.length)&&!!s[(0,r.Z)(t)]};var c=n(1162),l=n(8351),h=l.Z&&l.Z.isTypedArray;const u=h?(0,c.Z)(h):o},9360:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return void 0===t}},7179:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7668),i=n(9473),a=n(585);const s=function(t){return(0,a.Z)(t)?(0,r.Z)(t):(0,i.Z)(t)}},2957:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7668),i=n(7226),a=n(2764);const s=function(t){var e=[];if(null!=t)for(var n in Object(t))e.push(n);return e};var o=Object.prototype.hasOwnProperty;const c=function(t){if(!(0,i.Z)(t))return s(t);var e=(0,a.Z)(t),n=[];for(var r in t)("constructor"!=r||!e&&o.call(t,r))&&n.push(r);return n};var l=n(585);const h=function(t){return(0,l.Z)(t)?(0,r.Z)(t,!0):c(t)}},3836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(4073),i=n(4765),a=n(1018),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:a.Z)(t,(0,i.Z)(e,3))}},2454:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(7834);function i(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new TypeError("Expected a function");var n=function(){var r=arguments,i=e?e.apply(this,r):r[0],a=n.cache;if(a.has(i))return a.get(i);var s=t.apply(this,r);return n.cache=a.set(i,s)||a,s};return n.cache=new(i.Cache||r.Z),n}i.Cache=r.Z;const a=i},1666:(t,e,n)=>{"use strict";n.d(e,{Z:()=>y});var r=n(3317),i=n(2954),a=n(2823),s=n(6009),o=n(7226),c=n(2281);const l=function(t,e,n,r){if(!(0,o.Z)(t))return t;for(var l=-1,h=(e=(0,a.Z)(e,t)).length,u=h-1,d=t;null!=d&&++l<h;){var p=(0,c.Z)(e[l]),f=n;if("__proto__"===p||"constructor"===p||"prototype"===p)return t;if(l!=u){var g=d[p];void 0===(f=r?r(g,p,d):void 0)&&(f=(0,o.Z)(g)?g:(0,s.Z)(e[l+1])?[]:{})}(0,i.Z)(d,p,f),d=d[p]}return t};const h=function(t,e,n){for(var i=-1,s=e.length,o={};++i<s;){var c=e[i],h=(0,r.Z)(t,c);n(h,c)&&l(o,(0,a.Z)(c,t),h)}return o};var u=n(5487);const d=function(t,e){return h(t,e,(function(e,n){return(0,u.Z)(t,n)}))};var p=n(7961),f=n(1211),g=n(7227);const y=function(t){return(0,g.Z)((0,f.Z)(t,void 0,p.Z),t+"")}((function(t,e){return null==t?{}:d(t,e)}))},4379:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=Math.ceil,i=Math.max;const a=function(t,e,n,a){for(var s=-1,o=i(r((e-t)/(n||1)),0),c=Array(o);o--;)c[a?o:++s]=t,t+=n;return c};var s=n(439),o=n(4099);const c=function(t){return function(e,n,r){return r&&"number"!=typeof r&&(0,s.Z)(e,n,r)&&(n=r=void 0),e=(0,o.Z)(e),void 0===n?(n=e,e=0):n=(0,o.Z)(n),r=void 0===r?e<n?1:-1:(0,o.Z)(r),a(e,n,r,t)}}()},2344:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});const r=function(t,e,n,r){var i=-1,a=null==t?0:t.length;for(r&&a&&(n=t[++i]);++i<a;)n=e(n,t[i],i,t);return n};var i=n(9811),a=n(4765);const s=function(t,e,n,r,i){return i(t,(function(t,i,a){n=r?(r=!1,t):e(n,t,i,a)})),n};var o=n(7771);const c=function(t,e,n){var c=(0,o.Z)(t)?r:s,l=arguments.length<3;return c(t,(0,a.Z)(e,4),n,l,i.Z)}},532:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(){return[]}},4099:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=/\s/;const i=function(t){for(var e=t.length;e--&&r.test(t.charAt(e)););return e};var a=/^\s+/;const s=function(t){return t?t.slice(0,i(t)+1).replace(a,""):t};var o=n(7226),c=n(2714),l=/^[-+]0x[0-9a-f]+$/i,h=/^0b[01]+$/i,u=/^0o[0-7]+$/i,d=parseInt;const p=function(t){if("number"==typeof t)return t;if((0,c.Z)(t))return NaN;if((0,o.Z)(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=(0,o.Z)(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=s(t);var n=h.test(t);return n||u.test(t)?d(t.slice(2),n?2:8):l.test(t)?NaN:+t};var f=1/0;const g=function(t){return t?(t=p(t))===f||t===-1/0?17976931348623157e292*(t<0?-1:1):t==t?t:0:0===t?t:0}},751:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7685),i=n(4073),a=n(7771),s=n(2714),o=r.Z?r.Z.prototype:void 0,c=o?o.toString:void 0;const l=function t(e){if("string"==typeof e)return e;if((0,a.Z)(e))return(0,i.Z)(e,t)+"";if((0,s.Z)(e))return c?c.call(e):"";var n=e+"";return"0"==n&&1/e==-Infinity?"-0":n};const h=function(t){return null==t?"":l(t)}},6749:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(751),i=0;const a=function(t){var e=++i;return(0,r.Z)(t)+e}},4148:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4073);const i=function(t,e){return(0,r.Z)(e,(function(e){return t[e]}))};var a=n(7179);const s=function(t){return null==t?[]:i(t,(0,a.Z)(t))}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/4972.8e6a9569.js b/kr/assets/js/4972.8e6a9569.js
new file mode 100644
index 000000000..6c5c128de
--- /dev/null
+++ b/kr/assets/js/4972.8e6a9569.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4972],{4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(1944),r=n(1573);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/4972.f742b7fa.js b/kr/assets/js/4972.f742b7fa.js
deleted file mode 100644
index 7406f8355..000000000
--- a/kr/assets/js/4972.f742b7fa.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4972],{4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(833),r=n(6999);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/5133fc91.691aa6a0.js b/kr/assets/js/5133fc91.afe024ee.js
similarity index 99%
rename from kr/assets/js/5133fc91.691aa6a0.js
rename to kr/assets/js/5133fc91.afe024ee.js
index eb22fe753..71a06f61f 100644
--- a/kr/assets/js/5133fc91.691aa6a0.js
+++ b/kr/assets/js/5133fc91.afe024ee.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7355],{3905:(e,n,t)=>{t.d(n,{Zo:()=>p,kt:()=>u});var a=t(7294);function i(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function r(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?r(Object(t),!0).forEach((function(n){i(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):r(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,i=function(e,n){if(null==e)return{};var t,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||(i[t]=e[t]);return i}(e,n);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(i[t]=e[t])}return i}var l=a.createContext({}),d=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},p=function(e){var n=d(e.components);return a.createElement(l.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,i=e.mdxType,r=e.originalType,l=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(t),u=i,f=m["".concat(l,".").concat(u)]||m[u]||c[u]||r;return t?a.createElement(f,s(s({ref:n},p),{},{components:t})):a.createElement(f,s({ref:n},p))}));function u(e,n){var t=arguments,i=n&&n.mdxType;if("string"==typeof e||i){var r=t.length,s=new Array(r);s[0]=m;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:i,s[1]=o;for(var d=2;d<r;d++)s[d]=t[d];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},4192:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>c,frontMatter:()=>r,metadata:()=>o,toc:()=>d});var a=t(3117),i=(t(7294),t(3905));const r={title:"Managing Packaged Components",weight:60},s=void 0,o={unversionedId:"installation/packaged-components",id:"installation/packaged-components",title:"Managing Packaged Components",description:"Auto-Deploying Manifests (AddOns)",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/packaged-components.md",sourceDirName:"installation",slug:"/installation/packaged-components",permalink:"/kr/installation/packaged-components",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Managing Packaged Components",weight:60},sidebar:"mySidebar",previous:{title:"Managing Server Roles",permalink:"/kr/installation/server-roles"},next:{title:"Kubernetes Dashboard",permalink:"/kr/installation/kube-dashboard"}},l={},d=[{value:"Auto-Deploying Manifests (AddOns)",id:"auto-deploying-manifests-addons",level:2},{value:"Packaged Components",id:"packaged-components",level:3},{value:"User AddOns",id:"user-addons",level:3},{value:"File Naming Requirements",id:"file-naming-requirements",level:4},{value:"Disabling Manifests",id:"disabling-manifests",level:2},{value:"Using the <code>--disable</code> flag",id:"using-the---disable-flag",level:3},{value:"Using .skip files",id:"using-skip-files",level:3},{value:"Helm AddOns",id:"helm-addons",level:2}],p={toc:d};function c(e){let{components:n,...t}=e;return(0,i.kt)("wrapper",(0,a.Z)({},p,t,{components:n,mdxType:"MDXLayout"}),(0,i.kt)("h2",{id:"auto-deploying-manifests-addons"},"Auto-Deploying Manifests (AddOns)"),(0,i.kt)("p",null,"On server nodes, any file found in ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," will automatically be deployed to Kubernetes in a manner similar to ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl apply"),", both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster."),(0,i.kt)("p",null,"Manifests are tracked as ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," custom resources in the ",(0,i.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Any errors or warnings encountered when applying the manifest file may seen by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl describe")," on the corresponding ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),", or by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl get event -n kube-system")," to view all events for that namespace, including those from the deploy controller."),(0,i.kt)("h3",{id:"packaged-components"},"Packaged Components"),(0,i.kt)("p",null,"K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: ",(0,i.kt)("inlineCode",{parentName:"p"},"coredns"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"local-storage"),", and ",(0,i.kt)("inlineCode",{parentName:"p"},"metrics-server"),". The embedded ",(0,i.kt)("inlineCode",{parentName:"p"},"servicelb")," LoadBalancer controller does not have a manifest file, but can be disabled as if it were an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," for historical reasons."),(0,i.kt)("p",null,"Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity."),(0,i.kt)("h3",{id:"user-addons"},"User AddOns"),(0,i.kt)("p",null,"You may place additional files in the manifests directory for deployment as an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),". Each file may contain multiple Kubernetes resources, delmited by the ",(0,i.kt)("inlineCode",{parentName:"p"},"---")," YAML document separator. For more information on organizing resources in manifests, see the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/"},"Managing Resources")," section of the Kubernetes documentation."),(0,i.kt)("h4",{id:"file-naming-requirements"},"File Naming Requirements"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," name for each file in the manifest directory is derived from the file basename.\nEnsure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/names/"},"object naming restrictions"),".\nCare should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled."),(0,i.kt)("p",null,"Here is en example of an error that would be reported if the file name contains underscores:"),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("inlineCode",{parentName:"p"},"Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:\n   Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\": \n   a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character\n   (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')"))),(0,i.kt)("admonition",{type:"warning"},(0,i.kt)("p",{parentName:"admonition"},"If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.")),(0,i.kt)("h2",{id:"disabling-manifests"},"Disabling Manifests"),(0,i.kt)("p",null,"There are two ways to disable deployment of specific content from the manifests directory."),(0,i.kt)("h3",{id:"using-the---disable-flag"},"Using the ",(0,i.kt)("inlineCode",{parentName:"h3"},"--disable")," flag"),(0,i.kt)("p",null,"The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory, can be disabled with the ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable")," flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory."),(0,i.kt)("p",null,"For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--skip=traefik"),". Multiple items can be disabled by separating their names with commas, or by repeating the flag."),(0,i.kt)("h3",{id:"using-skip-files"},"Using .skip files"),(0,i.kt)("p",null,"For any file under ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),", you can create a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file which will cause K3s to ignore the corresponding manifest. The contents of the ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file do not matter, only its existence is checked. Note that creating a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist."),(0,i.kt)("p",null,"For example, creating an empty ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml.skip")," file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"$ ls /var/lib/rancher/k3s/server/manifests\nccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip\ncoredns.yaml  traefik.yaml\n\n$ kubectl get pods -A\nNAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE\nkube-system   local-path-provisioner-64ffb68fd-xx98j   1/1     Running   0          74s\nkube-system   metrics-server-5489f84d5d-7zwkt          1/1     Running   0          74s\nkube-system   coredns-85cb69466-vcq7j                  1/1     Running   0          74s\n")),(0,i.kt)("p",null,"If Traefik had already been deployed prior to creating the ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.skip")," file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded."),(0,i.kt)("h2",{id:"helm-addons"},"Helm AddOns"),(0,i.kt)("p",null,"For information about managing Helm charts via auto-deploying manifests, refer to the section about ",(0,i.kt)("a",{parentName:"p",href:"/kr/helm/"},"Helm.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7355],{3905:(e,n,t)=>{t.d(n,{Zo:()=>p,kt:()=>u});var a=t(7294);function i(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function r(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?r(Object(t),!0).forEach((function(n){i(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):r(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,i=function(e,n){if(null==e)return{};var t,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||(i[t]=e[t]);return i}(e,n);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)t=r[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(i[t]=e[t])}return i}var l=a.createContext({}),d=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},p=function(e){var n=d(e.components);return a.createElement(l.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,i=e.mdxType,r=e.originalType,l=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(t),u=i,f=m["".concat(l,".").concat(u)]||m[u]||c[u]||r;return t?a.createElement(f,s(s({ref:n},p),{},{components:t})):a.createElement(f,s({ref:n},p))}));function u(e,n){var t=arguments,i=n&&n.mdxType;if("string"==typeof e||i){var r=t.length,s=new Array(r);s[0]=m;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:i,s[1]=o;for(var d=2;d<r;d++)s[d]=t[d];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},4192:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>c,frontMatter:()=>r,metadata:()=>o,toc:()=>d});var a=t(3117),i=(t(7294),t(3905));const r={title:"Managing Packaged Components",weight:60},s=void 0,o={unversionedId:"installation/packaged-components",id:"installation/packaged-components",title:"Managing Packaged Components",description:"Auto-Deploying Manifests (AddOns)",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/packaged-components.md",sourceDirName:"installation",slug:"/installation/packaged-components",permalink:"/kr/installation/packaged-components",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Managing Packaged Components",weight:60},sidebar:"mySidebar",previous:{title:"Managing Server Roles",permalink:"/kr/installation/server-roles"},next:{title:"Kubernetes Dashboard",permalink:"/kr/installation/kube-dashboard"}},l={},d=[{value:"Auto-Deploying Manifests (AddOns)",id:"auto-deploying-manifests-addons",level:2},{value:"Packaged Components",id:"packaged-components",level:3},{value:"User AddOns",id:"user-addons",level:3},{value:"File Naming Requirements",id:"file-naming-requirements",level:4},{value:"Disabling Manifests",id:"disabling-manifests",level:2},{value:"Using the <code>--disable</code> flag",id:"using-the---disable-flag",level:3},{value:"Using .skip files",id:"using-skip-files",level:3},{value:"Helm AddOns",id:"helm-addons",level:2}],p={toc:d};function c(e){let{components:n,...t}=e;return(0,i.kt)("wrapper",(0,a.Z)({},p,t,{components:n,mdxType:"MDXLayout"}),(0,i.kt)("h2",{id:"auto-deploying-manifests-addons"},"Auto-Deploying Manifests (AddOns)"),(0,i.kt)("p",null,"On server nodes, any file found in ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," will automatically be deployed to Kubernetes in a manner similar to ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl apply"),", both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster."),(0,i.kt)("p",null,"Manifests are tracked as ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," custom resources in the ",(0,i.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Any errors or warnings encountered when applying the manifest file may seen by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl describe")," on the corresponding ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),", or by using ",(0,i.kt)("inlineCode",{parentName:"p"},"kubectl get event -n kube-system")," to view all events for that namespace, including those from the deploy controller."),(0,i.kt)("h3",{id:"packaged-components"},"Packaged Components"),(0,i.kt)("p",null,"K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: ",(0,i.kt)("inlineCode",{parentName:"p"},"coredns"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik"),", ",(0,i.kt)("inlineCode",{parentName:"p"},"local-storage"),", and ",(0,i.kt)("inlineCode",{parentName:"p"},"metrics-server"),". The embedded ",(0,i.kt)("inlineCode",{parentName:"p"},"servicelb")," LoadBalancer controller does not have a manifest file, but can be disabled as if it were an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," for historical reasons."),(0,i.kt)("p",null,"Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity."),(0,i.kt)("h3",{id:"user-addons"},"User AddOns"),(0,i.kt)("p",null,"You may place additional files in the manifests directory for deployment as an ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn"),". Each file may contain multiple Kubernetes resources, delmited by the ",(0,i.kt)("inlineCode",{parentName:"p"},"---")," YAML document separator. For more information on organizing resources in manifests, see the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/"},"Managing Resources")," section of the Kubernetes documentation."),(0,i.kt)("h4",{id:"file-naming-requirements"},"File Naming Requirements"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"AddOn")," name for each file in the manifest directory is derived from the file basename.\nEnsure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/names/"},"object naming restrictions"),".\nCare should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled."),(0,i.kt)("p",null,"Here is en example of an error that would be reported if the file name contains underscores:"),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("inlineCode",{parentName:"p"},"Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:\n   Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\": \n   a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character\n   (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')"))),(0,i.kt)("admonition",{type:"warning"},(0,i.kt)("p",{parentName:"admonition"},"If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.")),(0,i.kt)("h2",{id:"disabling-manifests"},"Disabling Manifests"),(0,i.kt)("p",null,"There are two ways to disable deployment of specific content from the manifests directory."),(0,i.kt)("h3",{id:"using-the---disable-flag"},"Using the ",(0,i.kt)("inlineCode",{parentName:"h3"},"--disable")," flag"),(0,i.kt)("p",null,"The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory, can be disabled with the ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable")," flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the ",(0,i.kt)("inlineCode",{parentName:"p"},"manifests")," directory."),(0,i.kt)("p",null,"For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--skip=traefik"),". Multiple items can be disabled by separating their names with commas, or by repeating the flag."),(0,i.kt)("h3",{id:"using-skip-files"},"Using .skip files"),(0,i.kt)("p",null,"For any file under ",(0,i.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),", you can create a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file which will cause K3s to ignore the corresponding manifest. The contents of the ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file do not matter, only its existence is checked. Note that creating a ",(0,i.kt)("inlineCode",{parentName:"p"},".skip")," file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist."),(0,i.kt)("p",null,"For example, creating an empty ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml.skip")," file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.yaml"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"$ ls /var/lib/rancher/k3s/server/manifests\nccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip\ncoredns.yaml  traefik.yaml\n\n$ kubectl get pods -A\nNAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE\nkube-system   local-path-provisioner-64ffb68fd-xx98j   1/1     Running   0          74s\nkube-system   metrics-server-5489f84d5d-7zwkt          1/1     Running   0          74s\nkube-system   coredns-85cb69466-vcq7j                  1/1     Running   0          74s\n")),(0,i.kt)("p",null,"If Traefik had already been deployed prior to creating the ",(0,i.kt)("inlineCode",{parentName:"p"},"traefik.skip")," file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded."),(0,i.kt)("h2",{id:"helm-addons"},"Helm AddOns"),(0,i.kt)("p",null,"For information about managing Helm charts via auto-deploying manifests, refer to the section about ",(0,i.kt)("a",{parentName:"p",href:"/kr/helm/"},"Helm.")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/54490acd.8b3dc4e1.js b/kr/assets/js/54490acd.ebbcc024.js
similarity index 99%
rename from kr/assets/js/54490acd.8b3dc4e1.js
rename to kr/assets/js/54490acd.ebbcc024.js
index 79d156bc6..74fc3b2b5 100644
--- a/kr/assets/js/54490acd.8b3dc4e1.js
+++ b/kr/assets/js/54490acd.ebbcc024.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6169],{3905:(t,e,n)=>{n.d(e,{Zo:()=>d,kt:()=>c});var a=n(7294);function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);e&&(a=a.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,a)}return n}function i(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?l(Object(n),!0).forEach((function(e){r(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function p(t,e){if(null==t)return{};var n,a,r=function(t,e){if(null==t)return{};var n,a,r={},l=Object.keys(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||(r[n]=t[n]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(r[n]=t[n])}return r}var m=a.createContext({}),o=function(t){var e=a.useContext(m),n=e;return t&&(n="function"==typeof t?t(e):i(i({},e),t)),n},d=function(t){var e=o(t.components);return a.createElement(m.Provider,{value:e},t.children)},s={inlineCode:"code",wrapper:function(t){var e=t.children;return a.createElement(a.Fragment,{},e)}},k=a.forwardRef((function(t,e){var n=t.components,r=t.mdxType,l=t.originalType,m=t.parentName,d=p(t,["components","mdxType","originalType","parentName"]),k=o(n),c=r,u=k["".concat(m,".").concat(c)]||k[c]||s[c]||l;return n?a.createElement(u,i(i({ref:e},d),{},{components:n})):a.createElement(u,i({ref:e},d))}));function c(t,e){var n=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=n.length,i=new Array(l);i[0]=k;var p={};for(var m in e)hasOwnProperty.call(e,m)&&(p[m]=e[m]);p.originalType=t,p.mdxType="string"==typeof t?t:r,i[1]=p;for(var o=2;o<l;o++)i[o]=n[o];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},407:(t,e,n)=>{n.r(e),n.d(e,{assets:()=>m,contentTitle:()=>i,default:()=>s,frontMatter:()=>l,metadata:()=>p,toc:()=>o});var a=n(3117),r=(n(7294),n(3905));const l={title:"\ud5ec\ub984(Helm)",weight:42},i=void 0,p={unversionedId:"helm/helm",id:"helm/helm",title:"\ud5ec\ub984(Helm)",description:"\ud5ec\ub984(Helm)\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc704\ud55c \ud328\ud0a4\uc9c0 \uad00\ub9ac \ub3c4\uad6c\uc785\ub2c8\ub2e4. \ud5ec\ub984 \ucc28\ud2b8\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4 YAML \ub9e4\ub2c8\ud398\uc2a4\ud2b8 \ubb38\uc11c\ub97c \uc704\ud55c \ud15c\ud50c\ub9bf \uad6c\ubb38\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uac1c\ubc1c\uc790 \ub610\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc790\ub294 \ud5ec\ub984\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc815\uc801 \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub9cc \uc0ac\uc6a9\ud558\ub294 \ub300\uc2e0 \ucc28\ud2b8\ub77c\ub294 \uad6c\uc131 \uac00\ub2a5\ud55c \ud15c\ud50c\ub9bf\uc744 \ub9cc\ub4e4 \uc218 \uc788\ub2e4. \uc790\uc2e0\ub9cc\uc758 \ucc28\ud2b8 \uce74\ud0c8\ub85c\uadf8 \uc0dd\uc131\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 https://helm.sh/docs/intro/quickstart/\uc5d0\uc11c \ubb38\uc11c\ub97c \ud655\uc778\ud558\uc138\uc694.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/helm/helm.md",sourceDirName:"helm",slug:"/helm/",permalink:"/kr/helm/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ud5ec\ub984(Helm)",weight:42},sidebar:"mySidebar",previous:{title:"\ub124\ud2b8\uc6cc\ud0b9",permalink:"/kr/networking/"},next:{title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",permalink:"/kr/advanced/"}},m={},o=[{value:"\ud5ec\ub984 \ucee8\ud2b8\ub864\ub7ec \uc0ac\uc6a9\ud558\uae30",id:"\ud5ec\ub984-\ucee8\ud2b8\ub864\ub7ec-\uc0ac\uc6a9\ud558\uae30",level:3},{value:"HelmChart \ud544\ub4dc \uc815\uc758",id:"helmchart-\ud544\ub4dc-\uc815\uc758",level:4},{value:"HelmChartConfig\ub85c \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30",id:"helmchartconfig\ub85c-\ud328\ud0a4\uc9c0-\ucef4\ud3ec\ub10c\ud2b8-\ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30",level:3},{value:"\ud5ec\ub984 \ubc84\uc804 2\uc5d0\uc11c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30",id:"\ud5ec\ub984-\ubc84\uc804-2\uc5d0\uc11c-\ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30",level:3}],d={toc:o};function s(t){let{components:e,...n}=t;return(0,r.kt)("wrapper",(0,a.Z)({},d,n,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\ud5ec\ub984(Helm)\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc704\ud55c \ud328\ud0a4\uc9c0 \uad00\ub9ac \ub3c4\uad6c\uc785\ub2c8\ub2e4. \ud5ec\ub984 \ucc28\ud2b8\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4 YAML \ub9e4\ub2c8\ud398\uc2a4\ud2b8 \ubb38\uc11c\ub97c \uc704\ud55c \ud15c\ud50c\ub9bf \uad6c\ubb38\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uac1c\ubc1c\uc790 \ub610\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc790\ub294 \ud5ec\ub984\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc815\uc801 \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub9cc \uc0ac\uc6a9\ud558\ub294 \ub300\uc2e0 \ucc28\ud2b8\ub77c\ub294 \uad6c\uc131 \uac00\ub2a5\ud55c \ud15c\ud50c\ub9bf\uc744 \ub9cc\ub4e4 \uc218 \uc788\ub2e4. \uc790\uc2e0\ub9cc\uc758 \ucc28\ud2b8 \uce74\ud0c8\ub85c\uadf8 \uc0dd\uc131\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/intro/quickstart/"},"https://helm.sh/docs/intro/quickstart/"),"\uc5d0\uc11c \ubb38\uc11c\ub97c \ud655\uc778\ud558\uc138\uc694."),(0,r.kt)("p",null,"K3s\ub294 \ud5ec\ub984\uc744 \uc9c0\uc6d0\ud558\uae30 \uc704\ud55c \ubcc4\ub3c4\uc758 \uad6c\uc131\uc774 \ud544\uc694\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub2e4\ub9cc, ",(0,r.kt)("a",{parentName:"p",href:"/kr/cluster-access/"},"\ud074\ub7ec\uc2a4\ud130 \uc561\uc138\uc2a4")," \ubb38\uc11c\uc5d0 \ub530\ub77c kubeconfig \uacbd\ub85c\ub97c \uc62c\ubc14\ub974\uac8c \uc124\uc815\ud588\ub294\uc9c0 \ud655\uc778\ud558\uba74 \ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"K3s\uc5d0\ub294 \ud5ec\ub984 \ucc28\ud2b8\uc758 \uc124\uce58, \uc5c5\uadf8\ub808\uc774\ub4dc/\uc7ac\uad6c\uc131 \ubc0f \uc81c\uac70\ub97c \uad00\ub9ac\ud558\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller/"},"Helm Controller"),"\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc73c\uba70, \ud5ec\ub984 \ucc28\ud2b8 \ucee4\uc2a4\ud140 \ub9ac\uc18c\uc2a4 \uc815\uc758(CRD)\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud5ec\ub984 \ucc28\ud2b8\ub97c \uc124\uce58, \uc5c5\uadf8\ub808\uc774\ub4dc/\uc7ac\uad6c\uc131 \ubc0f \uc81c\uac70\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc560\ub4dc\uc628 \ub9e4\ub2c8\ud398\uc2a4\ud2b8 \uc790\ub3d9 \ubc30\ud3ec](/kr/installation/packaged-components)\uc640 \ud568\uaed8 \uc0ac\uc6a9\ud558\uba74 \ub514\uc2a4\ud06c\uc5d0 \ub2e8\uc77c \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130\uc5d0 \ud5ec\ub984 \ucc28\ud2b8\ub97c \uc124\uce58\ud558\ub294 \uac83\uc744 \uc790\ub3d9\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"\ud5ec\ub984-\ucee8\ud2b8\ub864\ub7ec-\uc0ac\uc6a9\ud558\uae30"},"\ud5ec\ub984 \ucee8\ud2b8\ub864\ub7ec \uc0ac\uc6a9\ud558\uae30"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller#helm-controller"},"\ud5ec\ub984 \ucc28\ud2b8 \ucee4\uc2a4\ud140 \ub9ac\uc18c\uc2a4"),"\ub294 \uc77c\ubc18\uc801\uc73c\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \uba85\ub839\uc904 \ub3c4\uad6c\uc5d0 \uc804\ub2ec\ud560 \ub300\ubd80\ubd84\uc758 \uc635\uc158\uc744 \ub2f4\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c\uc740 Bitnami \ucc28\ud2b8 \uc800\uc7a5\uc18c\uc5d0\uc11c \uc544\ud30c\uce58\ub97c \ubc30\ud3ec\ud558\uc5ec \uae30\ubcf8 \ucc28\ud2b8 \uac12 \uc911 \uc77c\ubd80\ub97c \uc7ac\uc815\uc758\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc608\uc81c\uc785\ub2c8\ub2e4. HelmChart \ub9ac\uc18c\uc2a4 \uc790\uccb4\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \uc788\uc9c0\ub9cc, \ucc28\ud2b8\uc758 \ub9ac\uc18c\uc2a4\ub294 \ub3d9\uc77c\ud55c \ub9e4\ub2c8\ud398\uc2a4\ud2b8\uc5d0 \uc0dd\uc131\ub418\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"web")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \ubc30\ud3ec\ub41c\ub2e4\ub294 \uc810\uc5d0 \uc720\uc758\ud558\uc138\uc694. \uc774\ub294 HelmChart \ub9ac\uc18c\uc2a4\ub97c \ubc30\ud3ec\ud558\ub294 \ub9ac\uc18c\uc2a4\uc640 \ubd84\ub9ac\ud558\uc5ec \uc720\uc9c0\ud558\ub824\ub294 \uacbd\uc6b0\uc5d0 \uc720\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: web\n---\napiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: apache\n  namespace: kube-system\nspec:\n  repo: https://charts.bitnami.com/bitnami\n  chart: apache\n  targetNamespace: web\n  valuesContent: |-\n    service:\n      type: ClusterIP\n    ingress:\n      enabled: true\n      hostname: www.example.com\n    metrics:\n      enabled: true\n")),(0,r.kt)("h4",{id:"helmchart-\ud544\ub4dc-\uc815\uc758"},"HelmChart \ud544\ub4dc \uc815\uc758"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\ud544\ub4dc"),(0,r.kt)("th",{parentName:"tr",align:null},"\uae30\ubcf8\uac12"),(0,r.kt)("th",{parentName:"tr",align:null},"\uc124\uba85"),(0,r.kt)("th",{parentName:"tr",align:null},"\ud5ec\ub984 \uc778\uc218 / \ud50c\ub798\uadf8 \uc0c1\uc751\uac12"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"metadata.name"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \uc774\ub984"),(0,r.kt)("td",{parentName:"tr",align:null},"NAME")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\uc5d0 \uc788\ub294 \ud5ec\ub984 \ucc28\ud2b8 \uc774\ub984 \ub610\ub294 \ucc28\ud2b8 \uc544\uce74\uc774\ube0c(.tgz)\uc5d0 \ub300\ud55c \uc804\uccb4 HTTPS URL"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.targetNamespace"),(0,r.kt)("td",{parentName:"tr",align:null},"default"),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \ub300\uc0c1 \ub124\uc784\uc2a4\ud398\uc774\uc2a4"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--namespace"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.version"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \ubc84\uc804(\ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\uc5d0\uc11c \uc124\uce58\ud558\ub294 \uacbd\uc6b0)"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--version"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repo"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac URL"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--repo"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repoCA"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"HTTPS \uc0ac\uc6a9 \uc11c\ubc84\uc758 \uc778\uc99d\uc11c\ub97c \uc9c0\uc815"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ca-file"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.helmVersion"),(0,r.kt)("td",{parentName:"tr",align:null},"v3"),(0,r.kt)("td",{parentName:"tr",align:null},"\uc0ac\uc6a9\ud560 \ud5ec\ub984 \ubc84\uc804 (",(0,r.kt)("inlineCode",{parentName:"td"},"v2")," \ud639\uc740 ",(0,r.kt)("inlineCode",{parentName:"td"},"v3"),")"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},"False"),(0,r.kt)("td",{parentName:"tr",align:null},"\ud074\ub7ec\uc2a4\ud130(\ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \uad00\ub9ac\uc790 \ub4f1)\ub97c \ubd80\ud2b8\uc2a4\ud2b8\ub7a9\ud558\ub294 \ub370 \uc774 \ucc28\ud2b8\uac00 \ud544\uc694\ud55c \uacbd\uc6b0 True\ub85c \uc124\uc815\ud569\ub2c8\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.set"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\uac04\ub2e8\ud55c \uae30\ubcf8 \ucc28\ud2b8 \uac12\uc744 \uc7ac\uc815\uc758\ud569\ub2c8\ub2e4. \uac12\uc744 \ud1b5\ud574 \uc124\uc815\ub41c \uc635\uc158\ubcf4\ub2e4 \uc6b0\uc120\ud569\ub2c8\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--set")," / ",(0,r.kt)("inlineCode",{parentName:"td"},"--set-string"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.jobImage"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8\ub97c \uc124\uce58\ud560 \ub54c \uc0ac\uc6a9\ud560 \uc774\ubbf8\uc9c0\ub97c \uc9c0\uc815\ud569\ub2c8\ub2e4. \uc608\uc2dc. rancher/klipper-helm:v0.3.0 ."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.timeout"),(0,r.kt)("td",{parentName:"tr",align:null},"300"),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \uc791\uc5c5 \uc2dc\uac04 \ucd08\uacfc(\ucd08)"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--timeout"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.failurePolicy"),(0,r.kt)("td",{parentName:"tr",align:null},"reinstall"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"abort"),"\ub85c \uc124\uc815\ud558\uba74 \ud5ec\ub984 \uc791\uc5c5\uc774 \uc911\ub2e8\ub418\uace0 \uc6b4\uc601\uc790\uc758 \uc218\ub3d9 \uac1c\uc785\uc774 \uc788\uc744 \ub54c\uae4c\uc9c0 \uc911\ub2e8\ub41c\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.valuesContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"YAML \ud30c\uc77c \ucf58\ud150\uce20\ub97c \ud1b5\ud574 \ubcf5\uc7a1\ud55c \uae30\ubcf8 \ucc28\ud2b8 \uac12 \uc7ac\uc815\uc758"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--values"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chartContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Base64\ub85c \uc778\ucf54\ub529\ub41c \ucc28\ud2b8 \uc544\uce74\uc774\ube0c .tgz - spec.chart\ub97c \uc7ac\uc815\uc758\ud569\ub2c8\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")))),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/static/"),"\uc5d0 \uc704\uce58\ud55c \ucf58\ud150\uce20\ub294 \ud074\ub7ec\uc2a4\ud130 \ub0b4\uc5d0\uc11c \ucfe0\ubc84\ub124\ud2f0\uc2a4 APIServer\ub97c \ud1b5\ud574 \uc775\uba85\uc73c\ub85c \uc561\uc138\uc2a4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 URL\uc740 ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.chart")," \ud544\ub4dc\uc5d0 \uc788\ub294 \ud2b9\uc218 \ubcc0\uc218 ",(0,r.kt)("inlineCode",{parentName:"p"},"%{KUBERNETES_API}%"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud15c\ud50c\ub9bf\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4, \ud328\ud0a4\uc9c0\ud654\ub41c Traefik \ucef4\ud3ec\ub10c\ud2b8\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz"),"\uc5d0\uc11c \ud574\ub2f9 \ucc28\ud2b8\ub97c \ub85c\ub4dc\ud569\ub2c8\ub2e4."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"name")," \ud544\ub4dc\ub294 \ud5ec\ub984 \ucc28\ud2b8 \uba85\uba85 \uaddc\uce59\uc744 \ub530\ub77c\uc57c \ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/chart_best_practices/conventions/#chart-names"},"\ud5ec\ub984 \ubca0\uc2a4\ud2b8 \ud504\ub799\ud2f0\uc2a4 \ubb38\uc11c"),"\ub97c \ucc38\uace0\ud558\uc138\uc694.")),(0,r.kt)("h3",{id:"helmchartconfig\ub85c-\ud328\ud0a4\uc9c0-\ucef4\ud3ec\ub10c\ud2b8-\ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30"},"HelmChartConfig\ub85c \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \ubd80\ud130 \uc0ac\uc6a9 \uac00\ub2a5")),(0,r.kt)("p",null,"HelmChart\ub85c \ubc30\ud3ec\ub418\ub294 \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8(\uc608\ub85c Traefik)\uc758 \uac12\uc744 \uc7ac\uc815\uc758\ud560 \uc218 \uc788\ub3c4\ub85d, K3s\ub294 HelmChartConfig \ub9ac\uc18c\uc2a4\ub97c \ud1b5\ud574 \ubc30\ud3ec\ub97c \uc0ac\uc6a9\uc790 \uc815\uc758\ud560 \uc218 \uc788\ub3c4\ub85d \uc9c0\uc6d0\ud569\ub2c8\ub2e4. HelmChartConfig \ub9ac\uc18c\uc2a4\ub294 \ud574\ub2f9 HelmChart\uc758 \uc774\ub984\uacfc \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc640 \uc77c\uce58\ud574\uc57c \ud558\uba70, \ucd94\uac00 \uac12 \ud30c\uc77c\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \uba85\ub839\uc5d0 \uc804\ub2ec\ub418\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"valuesContent"),"\ub97c \ucd94\uac00\ub85c \uc81c\uacf5\ud560 \uc218 \uc788\ub3c4\ub85d \uc9c0\uc6d0\ud569\ub2c8\ub2e4."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"HelmChart ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.set")," \uac12\uc740 HelmChart \ubc0f HelmChartConfig ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.valuesContent")," \uc124\uc815\uc744 \uc7ac\uc815\uc758\ud569\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc608\ub97c \ub4e4\uc5b4, \ud328\ud0a4\uc9d5\ub41c \ud2b8\ub798\ud53d \uc778\uadf8\ub808\uc2a4 \uad6c\uc131\uc744 \uc0ac\uc6a9\uc790 \uc815\uc758\ud558\ub824\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik-config.yaml"),"\uc774\ub77c\ub294 \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uace0 \ub2e4\uc74c \ub0b4\uc6a9\uc73c\ub85c \ucc44\uc6b0\uba74 \ub429\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: helm.cattle.io/v1\nkind: HelmChartConfig\nmetadata:\n  name: traefik\n  namespace: kube-system\nspec:\n  valuesContent: |-\n    image:\n      name: traefik\n      tag: v2.8.5\n    forwardedHeaders:\n      enabled: true\n      trustedIPs:\n        - 10.0.0.0/8\n    ssl:\n      enabled: true\n      permanentRedirect: false\n")),(0,r.kt)("h3",{id:"\ud5ec\ub984-\ubc84\uc804-2\uc5d0\uc11c-\ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30"},"\ud5ec\ub984 \ubc84\uc804 2\uc5d0\uc11c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"v1.17.",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1"},"v1.17.0+k3s.1"),"\ubd80\ud130 \ud5ec\ub984 v3\uac00 \uae30\ubcf8\uc801\uc73c\ub85c \uc9c0\uc6d0 \ubc0f \uc0ac\uc6a9\ub429\ub2c8\ub2e4.")),(0,r.kt)("p",null,"K3s\ub294 \ud5ec\ub984 v2 \ub610\ub294 \ud5ec\ub984 v3\ub97c \ucc98\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud5ec\ub984 v3\ub85c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\ub824\ub294 \uacbd\uc6b0, ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/"},"\uc774")," \ud5ec\ub984 \ube14\ub85c\uadf8 \uac8c\uc2dc\ubb3c\uc5d0\uc11c \ud50c\ub7ec\uadf8\uc778\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc131\uacf5\uc801\uc73c\ub85c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\ub294 \ubc29\ubc95\uc744 \uc124\uba85\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ud5ec\ub984 3 \uacf5\uc2dd \ubb38\uc11c ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/"},"\uc5ec\uae30"),"\ub97c \ucc38\uace0\ud558\uc138\uc694. ",(0,r.kt)("a",{parentName:"p",href:"/kr/cluster-access/"},"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc"),"\uc5d0 \ub300\ud55c \uc139\uc158\uc5d0 \ub530\ub77c kubeconfig\ub97c \uc62c\ubc14\ub974\uac8c \uc124\uc815\ud588\ub294\uc9c0 \ud655\uc778\ud558\uc138\uc694."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\ud5ec\ub984 3\uc5d0\uc11c\ub294 \ub354 \uc774\uc0c1 Tiller\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"helm init")," \uba85\ub839\uc774 \ud544\uc694\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uacf5\uc2dd \ubb38\uc11c\ub97c \ucc38\uace0\ud558\uc138\uc694.")))}s.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6169],{3905:(t,e,n)=>{n.d(e,{Zo:()=>d,kt:()=>c});var a=n(7294);function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);e&&(a=a.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,a)}return n}function i(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?l(Object(n),!0).forEach((function(e){r(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function p(t,e){if(null==t)return{};var n,a,r=function(t,e){if(null==t)return{};var n,a,r={},l=Object.keys(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||(r[n]=t[n]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(r[n]=t[n])}return r}var m=a.createContext({}),o=function(t){var e=a.useContext(m),n=e;return t&&(n="function"==typeof t?t(e):i(i({},e),t)),n},d=function(t){var e=o(t.components);return a.createElement(m.Provider,{value:e},t.children)},s={inlineCode:"code",wrapper:function(t){var e=t.children;return a.createElement(a.Fragment,{},e)}},k=a.forwardRef((function(t,e){var n=t.components,r=t.mdxType,l=t.originalType,m=t.parentName,d=p(t,["components","mdxType","originalType","parentName"]),k=o(n),c=r,u=k["".concat(m,".").concat(c)]||k[c]||s[c]||l;return n?a.createElement(u,i(i({ref:e},d),{},{components:n})):a.createElement(u,i({ref:e},d))}));function c(t,e){var n=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=n.length,i=new Array(l);i[0]=k;var p={};for(var m in e)hasOwnProperty.call(e,m)&&(p[m]=e[m]);p.originalType=t,p.mdxType="string"==typeof t?t:r,i[1]=p;for(var o=2;o<l;o++)i[o]=n[o];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},407:(t,e,n)=>{n.r(e),n.d(e,{assets:()=>m,contentTitle:()=>i,default:()=>s,frontMatter:()=>l,metadata:()=>p,toc:()=>o});var a=n(3117),r=(n(7294),n(3905));const l={title:"\ud5ec\ub984(Helm)",weight:42},i=void 0,p={unversionedId:"helm/helm",id:"helm/helm",title:"\ud5ec\ub984(Helm)",description:"\ud5ec\ub984(Helm)\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc704\ud55c \ud328\ud0a4\uc9c0 \uad00\ub9ac \ub3c4\uad6c\uc785\ub2c8\ub2e4. \ud5ec\ub984 \ucc28\ud2b8\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4 YAML \ub9e4\ub2c8\ud398\uc2a4\ud2b8 \ubb38\uc11c\ub97c \uc704\ud55c \ud15c\ud50c\ub9bf \uad6c\ubb38\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uac1c\ubc1c\uc790 \ub610\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc790\ub294 \ud5ec\ub984\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc815\uc801 \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub9cc \uc0ac\uc6a9\ud558\ub294 \ub300\uc2e0 \ucc28\ud2b8\ub77c\ub294 \uad6c\uc131 \uac00\ub2a5\ud55c \ud15c\ud50c\ub9bf\uc744 \ub9cc\ub4e4 \uc218 \uc788\ub2e4. \uc790\uc2e0\ub9cc\uc758 \ucc28\ud2b8 \uce74\ud0c8\ub85c\uadf8 \uc0dd\uc131\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 https://helm.sh/docs/intro/quickstart/\uc5d0\uc11c \ubb38\uc11c\ub97c \ud655\uc778\ud558\uc138\uc694.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/helm/helm.md",sourceDirName:"helm",slug:"/helm/",permalink:"/kr/helm/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ud5ec\ub984(Helm)",weight:42},sidebar:"mySidebar",previous:{title:"\ub124\ud2b8\uc6cc\ud0b9",permalink:"/kr/networking/"},next:{title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",permalink:"/kr/advanced/"}},m={},o=[{value:"\ud5ec\ub984 \ucee8\ud2b8\ub864\ub7ec \uc0ac\uc6a9\ud558\uae30",id:"\ud5ec\ub984-\ucee8\ud2b8\ub864\ub7ec-\uc0ac\uc6a9\ud558\uae30",level:3},{value:"HelmChart \ud544\ub4dc \uc815\uc758",id:"helmchart-\ud544\ub4dc-\uc815\uc758",level:4},{value:"HelmChartConfig\ub85c \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30",id:"helmchartconfig\ub85c-\ud328\ud0a4\uc9c0-\ucef4\ud3ec\ub10c\ud2b8-\ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30",level:3},{value:"\ud5ec\ub984 \ubc84\uc804 2\uc5d0\uc11c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30",id:"\ud5ec\ub984-\ubc84\uc804-2\uc5d0\uc11c-\ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30",level:3}],d={toc:o};function s(t){let{components:e,...n}=t;return(0,r.kt)("wrapper",(0,a.Z)({},d,n,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\ud5ec\ub984(Helm)\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc704\ud55c \ud328\ud0a4\uc9c0 \uad00\ub9ac \ub3c4\uad6c\uc785\ub2c8\ub2e4. \ud5ec\ub984 \ucc28\ud2b8\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4 YAML \ub9e4\ub2c8\ud398\uc2a4\ud2b8 \ubb38\uc11c\ub97c \uc704\ud55c \ud15c\ud50c\ub9bf \uad6c\ubb38\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uac1c\ubc1c\uc790 \ub610\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc790\ub294 \ud5ec\ub984\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc815\uc801 \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub9cc \uc0ac\uc6a9\ud558\ub294 \ub300\uc2e0 \ucc28\ud2b8\ub77c\ub294 \uad6c\uc131 \uac00\ub2a5\ud55c \ud15c\ud50c\ub9bf\uc744 \ub9cc\ub4e4 \uc218 \uc788\ub2e4. \uc790\uc2e0\ub9cc\uc758 \ucc28\ud2b8 \uce74\ud0c8\ub85c\uadf8 \uc0dd\uc131\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/intro/quickstart/"},"https://helm.sh/docs/intro/quickstart/"),"\uc5d0\uc11c \ubb38\uc11c\ub97c \ud655\uc778\ud558\uc138\uc694."),(0,r.kt)("p",null,"K3s\ub294 \ud5ec\ub984\uc744 \uc9c0\uc6d0\ud558\uae30 \uc704\ud55c \ubcc4\ub3c4\uc758 \uad6c\uc131\uc774 \ud544\uc694\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ub2e4\ub9cc, ",(0,r.kt)("a",{parentName:"p",href:"/kr/cluster-access/"},"\ud074\ub7ec\uc2a4\ud130 \uc561\uc138\uc2a4")," \ubb38\uc11c\uc5d0 \ub530\ub77c kubeconfig \uacbd\ub85c\ub97c \uc62c\ubc14\ub974\uac8c \uc124\uc815\ud588\ub294\uc9c0 \ud655\uc778\ud558\uba74 \ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"K3s\uc5d0\ub294 \ud5ec\ub984 \ucc28\ud2b8\uc758 \uc124\uce58, \uc5c5\uadf8\ub808\uc774\ub4dc/\uc7ac\uad6c\uc131 \ubc0f \uc81c\uac70\ub97c \uad00\ub9ac\ud558\ub294 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller/"},"Helm Controller"),"\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc73c\uba70, \ud5ec\ub984 \ucc28\ud2b8 \ucee4\uc2a4\ud140 \ub9ac\uc18c\uc2a4 \uc815\uc758(CRD)\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud5ec\ub984 \ucc28\ud2b8\ub97c \uc124\uce58, \uc5c5\uadf8\ub808\uc774\ub4dc/\uc7ac\uad6c\uc131 \ubc0f \uc81c\uac70\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc560\ub4dc\uc628 \ub9e4\ub2c8\ud398\uc2a4\ud2b8 \uc790\ub3d9 \ubc30\ud3ec](/kr/installation/packaged-components)\uc640 \ud568\uaed8 \uc0ac\uc6a9\ud558\uba74 \ub514\uc2a4\ud06c\uc5d0 \ub2e8\uc77c \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130\uc5d0 \ud5ec\ub984 \ucc28\ud2b8\ub97c \uc124\uce58\ud558\ub294 \uac83\uc744 \uc790\ub3d9\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"\ud5ec\ub984-\ucee8\ud2b8\ub864\ub7ec-\uc0ac\uc6a9\ud558\uae30"},"\ud5ec\ub984 \ucee8\ud2b8\ub864\ub7ec \uc0ac\uc6a9\ud558\uae30"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller#helm-controller"},"\ud5ec\ub984 \ucc28\ud2b8 \ucee4\uc2a4\ud140 \ub9ac\uc18c\uc2a4"),"\ub294 \uc77c\ubc18\uc801\uc73c\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \uba85\ub839\uc904 \ub3c4\uad6c\uc5d0 \uc804\ub2ec\ud560 \ub300\ubd80\ubd84\uc758 \uc635\uc158\uc744 \ub2f4\uace0 \uc788\uc2b5\ub2c8\ub2e4. \ub2e4\uc74c\uc740 Bitnami \ucc28\ud2b8 \uc800\uc7a5\uc18c\uc5d0\uc11c \uc544\ud30c\uce58\ub97c \ubc30\ud3ec\ud558\uc5ec \uae30\ubcf8 \ucc28\ud2b8 \uac12 \uc911 \uc77c\ubd80\ub97c \uc7ac\uc815\uc758\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc608\uc81c\uc785\ub2c8\ub2e4. HelmChart \ub9ac\uc18c\uc2a4 \uc790\uccb4\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \uc788\uc9c0\ub9cc, \ucc28\ud2b8\uc758 \ub9ac\uc18c\uc2a4\ub294 \ub3d9\uc77c\ud55c \ub9e4\ub2c8\ud398\uc2a4\ud2b8\uc5d0 \uc0dd\uc131\ub418\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"web")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \ubc30\ud3ec\ub41c\ub2e4\ub294 \uc810\uc5d0 \uc720\uc758\ud558\uc138\uc694. \uc774\ub294 HelmChart \ub9ac\uc18c\uc2a4\ub97c \ubc30\ud3ec\ud558\ub294 \ub9ac\uc18c\uc2a4\uc640 \ubd84\ub9ac\ud558\uc5ec \uc720\uc9c0\ud558\ub824\ub294 \uacbd\uc6b0\uc5d0 \uc720\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: web\n---\napiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: apache\n  namespace: kube-system\nspec:\n  repo: https://charts.bitnami.com/bitnami\n  chart: apache\n  targetNamespace: web\n  valuesContent: |-\n    service:\n      type: ClusterIP\n    ingress:\n      enabled: true\n      hostname: www.example.com\n    metrics:\n      enabled: true\n")),(0,r.kt)("h4",{id:"helmchart-\ud544\ub4dc-\uc815\uc758"},"HelmChart \ud544\ub4dc \uc815\uc758"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\ud544\ub4dc"),(0,r.kt)("th",{parentName:"tr",align:null},"\uae30\ubcf8\uac12"),(0,r.kt)("th",{parentName:"tr",align:null},"\uc124\uba85"),(0,r.kt)("th",{parentName:"tr",align:null},"\ud5ec\ub984 \uc778\uc218 / \ud50c\ub798\uadf8 \uc0c1\uc751\uac12"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"metadata.name"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \uc774\ub984"),(0,r.kt)("td",{parentName:"tr",align:null},"NAME")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\uc5d0 \uc788\ub294 \ud5ec\ub984 \ucc28\ud2b8 \uc774\ub984 \ub610\ub294 \ucc28\ud2b8 \uc544\uce74\uc774\ube0c(.tgz)\uc5d0 \ub300\ud55c \uc804\uccb4 HTTPS URL"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.targetNamespace"),(0,r.kt)("td",{parentName:"tr",align:null},"default"),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \ub300\uc0c1 \ub124\uc784\uc2a4\ud398\uc774\uc2a4"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--namespace"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.version"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \ubc84\uc804(\ub9ac\ud3ec\uc9c0\ud1a0\ub9ac\uc5d0\uc11c \uc124\uce58\ud558\ub294 \uacbd\uc6b0)"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--version"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repo"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8 \ub9ac\ud3ec\uc9c0\ud1a0\ub9ac URL"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--repo"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repoCA"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"HTTPS \uc0ac\uc6a9 \uc11c\ubc84\uc758 \uc778\uc99d\uc11c\ub97c \uc9c0\uc815"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ca-file"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.helmVersion"),(0,r.kt)("td",{parentName:"tr",align:null},"v3"),(0,r.kt)("td",{parentName:"tr",align:null},"\uc0ac\uc6a9\ud560 \ud5ec\ub984 \ubc84\uc804 (",(0,r.kt)("inlineCode",{parentName:"td"},"v2")," \ud639\uc740 ",(0,r.kt)("inlineCode",{parentName:"td"},"v3"),")"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},"False"),(0,r.kt)("td",{parentName:"tr",align:null},"\ud074\ub7ec\uc2a4\ud130(\ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \uad00\ub9ac\uc790 \ub4f1)\ub97c \ubd80\ud2b8\uc2a4\ud2b8\ub7a9\ud558\ub294 \ub370 \uc774 \ucc28\ud2b8\uac00 \ud544\uc694\ud55c \uacbd\uc6b0 True\ub85c \uc124\uc815\ud569\ub2c8\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.set"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\uac04\ub2e8\ud55c \uae30\ubcf8 \ucc28\ud2b8 \uac12\uc744 \uc7ac\uc815\uc758\ud569\ub2c8\ub2e4. \uac12\uc744 \ud1b5\ud574 \uc124\uc815\ub41c \uc635\uc158\ubcf4\ub2e4 \uc6b0\uc120\ud569\ub2c8\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--set")," / ",(0,r.kt)("inlineCode",{parentName:"td"},"--set-string"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.jobImage"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \ucc28\ud2b8\ub97c \uc124\uce58\ud560 \ub54c \uc0ac\uc6a9\ud560 \uc774\ubbf8\uc9c0\ub97c \uc9c0\uc815\ud569\ub2c8\ub2e4. \uc608\uc2dc. rancher/klipper-helm:v0.3.0 ."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.timeout"),(0,r.kt)("td",{parentName:"tr",align:null},"300"),(0,r.kt)("td",{parentName:"tr",align:null},"\ud5ec\ub984 \uc791\uc5c5 \uc2dc\uac04 \ucd08\uacfc(\ucd08)"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--timeout"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.failurePolicy"),(0,r.kt)("td",{parentName:"tr",align:null},"reinstall"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"abort"),"\ub85c \uc124\uc815\ud558\uba74 \ud5ec\ub984 \uc791\uc5c5\uc774 \uc911\ub2e8\ub418\uace0 \uc6b4\uc601\uc790\uc758 \uc218\ub3d9 \uac1c\uc785\uc774 \uc788\uc744 \ub54c\uae4c\uc9c0 \uc911\ub2e8\ub41c\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.valuesContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"YAML \ud30c\uc77c \ucf58\ud150\uce20\ub97c \ud1b5\ud574 \ubcf5\uc7a1\ud55c \uae30\ubcf8 \ucc28\ud2b8 \uac12 \uc7ac\uc815\uc758"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--values"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chartContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Base64\ub85c \uc778\ucf54\ub529\ub41c \ucc28\ud2b8 \uc544\uce74\uc774\ube0c .tgz - spec.chart\ub97c \uc7ac\uc815\uc758\ud569\ub2c8\ub2e4."),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")))),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/static/"),"\uc5d0 \uc704\uce58\ud55c \ucf58\ud150\uce20\ub294 \ud074\ub7ec\uc2a4\ud130 \ub0b4\uc5d0\uc11c \ucfe0\ubc84\ub124\ud2f0\uc2a4 APIServer\ub97c \ud1b5\ud574 \uc775\uba85\uc73c\ub85c \uc561\uc138\uc2a4\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 URL\uc740 ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.chart")," \ud544\ub4dc\uc5d0 \uc788\ub294 \ud2b9\uc218 \ubcc0\uc218 ",(0,r.kt)("inlineCode",{parentName:"p"},"%{KUBERNETES_API}%"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud15c\ud50c\ub9bf\ud654\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4, \ud328\ud0a4\uc9c0\ud654\ub41c Traefik \ucef4\ud3ec\ub10c\ud2b8\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz"),"\uc5d0\uc11c \ud574\ub2f9 \ucc28\ud2b8\ub97c \ub85c\ub4dc\ud569\ub2c8\ub2e4."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"name")," \ud544\ub4dc\ub294 \ud5ec\ub984 \ucc28\ud2b8 \uba85\uba85 \uaddc\uce59\uc744 \ub530\ub77c\uc57c \ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/chart_best_practices/conventions/#chart-names"},"\ud5ec\ub984 \ubca0\uc2a4\ud2b8 \ud504\ub799\ud2f0\uc2a4 \ubb38\uc11c"),"\ub97c \ucc38\uace0\ud558\uc138\uc694.")),(0,r.kt)("h3",{id:"helmchartconfig\ub85c-\ud328\ud0a4\uc9c0-\ucef4\ud3ec\ub10c\ud2b8-\ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30"},"HelmChartConfig\ub85c \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5\ud558\uae30"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \ubd80\ud130 \uc0ac\uc6a9 \uac00\ub2a5")),(0,r.kt)("p",null,"HelmChart\ub85c \ubc30\ud3ec\ub418\ub294 \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8(\uc608\ub85c Traefik)\uc758 \uac12\uc744 \uc7ac\uc815\uc758\ud560 \uc218 \uc788\ub3c4\ub85d, K3s\ub294 HelmChartConfig \ub9ac\uc18c\uc2a4\ub97c \ud1b5\ud574 \ubc30\ud3ec\ub97c \uc0ac\uc6a9\uc790 \uc815\uc758\ud560 \uc218 \uc788\ub3c4\ub85d \uc9c0\uc6d0\ud569\ub2c8\ub2e4. HelmChartConfig \ub9ac\uc18c\uc2a4\ub294 \ud574\ub2f9 HelmChart\uc758 \uc774\ub984\uacfc \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc640 \uc77c\uce58\ud574\uc57c \ud558\uba70, \ucd94\uac00 \uac12 \ud30c\uc77c\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \uba85\ub839\uc5d0 \uc804\ub2ec\ub418\ub294 ",(0,r.kt)("inlineCode",{parentName:"p"},"valuesContent"),"\ub97c \ucd94\uac00\ub85c \uc81c\uacf5\ud560 \uc218 \uc788\ub3c4\ub85d \uc9c0\uc6d0\ud569\ub2c8\ub2e4."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"HelmChart ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.set")," \uac12\uc740 HelmChart \ubc0f HelmChartConfig ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.valuesContent")," \uc124\uc815\uc744 \uc7ac\uc815\uc758\ud569\ub2c8\ub2e4.")),(0,r.kt)("p",null,"\uc608\ub97c \ub4e4\uc5b4, \ud328\ud0a4\uc9d5\ub41c \ud2b8\ub798\ud53d \uc778\uadf8\ub808\uc2a4 \uad6c\uc131\uc744 \uc0ac\uc6a9\uc790 \uc815\uc758\ud558\ub824\uba74 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik-config.yaml"),"\uc774\ub77c\ub294 \ud30c\uc77c\uc744 \uc0dd\uc131\ud558\uace0 \ub2e4\uc74c \ub0b4\uc6a9\uc73c\ub85c \ucc44\uc6b0\uba74 \ub429\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: helm.cattle.io/v1\nkind: HelmChartConfig\nmetadata:\n  name: traefik\n  namespace: kube-system\nspec:\n  valuesContent: |-\n    image:\n      name: traefik\n      tag: v2.8.5\n    forwardedHeaders:\n      enabled: true\n      trustedIPs:\n        - 10.0.0.0/8\n    ssl:\n      enabled: true\n      permanentRedirect: false\n")),(0,r.kt)("h3",{id:"\ud5ec\ub984-\ubc84\uc804-2\uc5d0\uc11c-\ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30"},"\ud5ec\ub984 \ubc84\uc804 2\uc5d0\uc11c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uae30"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"v1.17.",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1"},"v1.17.0+k3s.1"),"\ubd80\ud130 \ud5ec\ub984 v3\uac00 \uae30\ubcf8\uc801\uc73c\ub85c \uc9c0\uc6d0 \ubc0f \uc0ac\uc6a9\ub429\ub2c8\ub2e4.")),(0,r.kt)("p",null,"K3s\ub294 \ud5ec\ub984 v2 \ub610\ub294 \ud5ec\ub984 v3\ub97c \ucc98\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud5ec\ub984 v3\ub85c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\ub824\ub294 \uacbd\uc6b0, ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/"},"\uc774")," \ud5ec\ub984 \ube14\ub85c\uadf8 \uac8c\uc2dc\ubb3c\uc5d0\uc11c \ud50c\ub7ec\uadf8\uc778\uc744 \uc0ac\uc6a9\ud558\uc5ec \uc131\uacf5\uc801\uc73c\ub85c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\ub294 \ubc29\ubc95\uc744 \uc124\uba85\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ud5ec\ub984 3 \uacf5\uc2dd \ubb38\uc11c ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/"},"\uc5ec\uae30"),"\ub97c \ucc38\uace0\ud558\uc138\uc694. ",(0,r.kt)("a",{parentName:"p",href:"/kr/cluster-access/"},"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc"),"\uc5d0 \ub300\ud55c \uc139\uc158\uc5d0 \ub530\ub77c kubeconfig\ub97c \uc62c\ubc14\ub974\uac8c \uc124\uc815\ud588\ub294\uc9c0 \ud655\uc778\ud558\uc138\uc694."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\ud5ec\ub984 3\uc5d0\uc11c\ub294 \ub354 \uc774\uc0c1 Tiller\uc640 ",(0,r.kt)("inlineCode",{parentName:"p"},"helm init")," \uba85\ub839\uc774 \ud544\uc694\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uacf5\uc2dd \ubb38\uc11c\ub97c \ucc38\uace0\ud558\uc138\uc694.")))}s.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/5525.ab860f59.js b/kr/assets/js/5525.ab860f59.js
new file mode 100644
index 000000000..ead43e4a6
--- /dev/null
+++ b/kr/assets/js/5525.ab860f59.js
@@ -0,0 +1 @@
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5525],{5525:()=>{}}]);
\ No newline at end of file
diff --git a/kr/assets/js/59b068d1.c8b83cea.js b/kr/assets/js/59b068d1.c8b83cea.js
deleted file mode 100644
index c8f4f1e34..000000000
--- a/kr/assets/js/59b068d1.c8b83cea.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6385],{7085:s=>{s.exports=JSON.parse('{"name":"docusaurus-theme-search-algolia","id":"default"}')}}]);
\ No newline at end of file
diff --git a/kr/assets/js/609981e6.39f5ffad.js b/kr/assets/js/609981e6.c92f915c.js
similarity index 99%
rename from kr/assets/js/609981e6.39f5ffad.js
rename to kr/assets/js/609981e6.c92f915c.js
index e8c5399ef..9a28dec61 100644
--- a/kr/assets/js/609981e6.39f5ffad.js
+++ b/kr/assets/js/609981e6.c92f915c.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2466],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,a=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(r),m=i,h=u["".concat(s,".").concat(m)]||u[m]||d[m]||a;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var a=r.length,o=new Array(a);o[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var p=2;p<a;p++)o[p]=r[p];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},3724:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>h,frontMatter:()=>a,metadata:()=>l,toc:()=>p});var n=r(3117),i=(r(7294),r(3905));const a={title:"Private Registry Configuration",weight:55},o=void 0,l={unversionedId:"installation/private-registry",id:"installation/private-registry",title:"Private Registry Configuration",description:"Containerd can be configured to connect to private registries and use them to pull private images on the node.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/private-registry.md",sourceDirName:"installation",slug:"/installation/private-registry",permalink:"/kr/installation/private-registry",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Private Registry Configuration",weight:55},sidebar:"mySidebar",previous:{title:"Network Options",permalink:"/kr/installation/network-options"},next:{title:"Air-Gap Install",permalink:"/kr/installation/airgap"}},s={},p=[{value:"Registries Configuration File",id:"registries-configuration-file",level:2},{value:"Mirrors",id:"mirrors",level:3},{value:"Redirects",id:"redirects",level:4},{value:"Rewrites",id:"rewrites",level:4},{value:"Configs",id:"configs",level:3},{value:"With TLS",id:"with-tls",level:3},{value:"Without TLS",id:"without-tls",level:3},{value:"Adding Images to the Private Registry",id:"adding-images-to-the-private-registry",level:2}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},d=c("Tabs"),u=c("TabItem"),m={toc:p};function h(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},m,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"Containerd can be configured to connect to private registries and use them to pull private images on the node."),(0,i.kt)("p",null,"Upon startup, K3s will check to see if a ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file exists at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/")," and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry."),(0,i.kt)("p",null,"Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file on each server as well."),(0,i.kt)("p",null,"Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file and give different examples of using private registry configuration in K3s."),(0,i.kt)("h2",{id:"registries-configuration-file"},"Registries Configuration File"),(0,i.kt)("p",null,"The file consists of two main sections:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"mirrors"),(0,i.kt)("li",{parentName:"ul"},"configs")),(0,i.kt)("h3",{id:"mirrors"},"Mirrors"),(0,i.kt)("p",null,"Mirrors is a directive that defines the names and endpoints of the private registries, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  mycustomreg.com:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one."),(0,i.kt)("h4",{id:"redirects"},"Redirects"),(0,i.kt)("p",null,"If a public registry is used as a mirror, such as when configuring a ",(0,i.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/recipes/mirror/"},"pull through cache"),", images pulls are transparently redirected."),(0,i.kt)("p",null,"For example, if you have a mirror configured for ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Then pulling ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," will transparently pull the image from ",(0,i.kt)("inlineCode",{parentName:"p"},"https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3"),"."),(0,i.kt)("h4",{id:"rewrites"},"Rewrites"),(0,i.kt)("p",null,"Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one."),(0,i.kt)("p",null,"For example, the following configuration would transparently pull the image ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," from ",(0,i.kt)("inlineCode",{parentName:"p"},"registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://registry.example.com:5000"\n    rewrite:\n      "^rancher/(.*)": "mirrorproject/rancher-images/$1"\n')),(0,i.kt)("p",null,"The image will still be stored under the original name so that a ",(0,i.kt)("inlineCode",{parentName:"p"},"crictl image ls")," will show ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," as available on the node, even though the image was pulled from the mirrored registry with a different name."),(0,i.kt)("h3",{id:"configs"},"Configs"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"configs")," section defines the TLS and credential configuration for each mirror. For each mirror you can define ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," and/or ",(0,i.kt)("inlineCode",{parentName:"p"},"tls"),". "),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"tls")," part consists of:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"cert_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client certificate path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"key_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client key path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"ca_file")),(0,i.kt)("td",{parentName:"tr",align:null},"Defines the CA certificate path to be used to verify the registry's server cert file")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"insecure_skip_verify")),(0,i.kt)("td",{parentName:"tr",align:null},"Boolean that defines if TLS verification should be skipped for the registry")))),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," part consists of either username/password or authentication token:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"username")),(0,i.kt)("td",{parentName:"tr",align:null},"user name of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"password")),(0,i.kt)("td",{parentName:"tr",align:null},"user password of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"auth")),(0,i.kt)("td",{parentName:"tr",align:null},"authentication token of the private registry basic auth")))),(0,i.kt)("p",null,"Below are basic examples of using private registries in different modes:"),(0,i.kt)("h3",{id:"with-tls"},"With TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n')))),(0,i.kt)("h3",{id:"without-tls"},"Without TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when ",(0,i.kt)("em",{parentName:"p"},"not")," using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\n')))),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},"In case of no TLS communication, you need to specify ",(0,i.kt)("inlineCode",{parentName:"p"},"http://")," for the endpoints, otherwise it will default to https.")),(0,i.kt)("p",null,"In order for the registry changes to take effect, you need to restart K3s on each node."),(0,i.kt)("h2",{id:"adding-images-to-the-private-registry"},"Adding Images to the Private Registry"),(0,i.kt)("p",null,"First, obtain the ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," file from GitHub for the release you are working with.\nPull the K3s images listed on the k3s-images.txt file from docker.io"),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker pull docker.io/rancher/coredns-coredns:1.6.3")),(0,i.kt)("p",null,"Then, retag the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker tag coredns-coredns:1.6.3 mycustomreg:5000/coredns-coredns")),(0,i.kt)("p",null,"Last, push the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker push mycustomreg.com:5000/coredns-coredns")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2466],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,a=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(r),m=i,h=u["".concat(s,".").concat(m)]||u[m]||d[m]||a;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var a=r.length,o=new Array(a);o[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var p=2;p<a;p++)o[p]=r[p];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},3724:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>h,frontMatter:()=>a,metadata:()=>l,toc:()=>p});var n=r(3117),i=(r(7294),r(3905));const a={title:"Private Registry Configuration",weight:55},o=void 0,l={unversionedId:"installation/private-registry",id:"installation/private-registry",title:"Private Registry Configuration",description:"Containerd can be configured to connect to private registries and use them to pull private images on the node.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/private-registry.md",sourceDirName:"installation",slug:"/installation/private-registry",permalink:"/kr/installation/private-registry",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Private Registry Configuration",weight:55},sidebar:"mySidebar",previous:{title:"Network Options",permalink:"/kr/installation/network-options"},next:{title:"Air-Gap Install",permalink:"/kr/installation/airgap"}},s={},p=[{value:"Registries Configuration File",id:"registries-configuration-file",level:2},{value:"Mirrors",id:"mirrors",level:3},{value:"Redirects",id:"redirects",level:4},{value:"Rewrites",id:"rewrites",level:4},{value:"Configs",id:"configs",level:3},{value:"With TLS",id:"with-tls",level:3},{value:"Without TLS",id:"without-tls",level:3},{value:"Adding Images to the Private Registry",id:"adding-images-to-the-private-registry",level:2}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},d=c("Tabs"),u=c("TabItem"),m={toc:p};function h(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},m,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"Containerd can be configured to connect to private registries and use them to pull private images on the node."),(0,i.kt)("p",null,"Upon startup, K3s will check to see if a ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file exists at ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/")," and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry."),(0,i.kt)("p",null,"Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file on each server as well."),(0,i.kt)("p",null,"Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the ",(0,i.kt)("inlineCode",{parentName:"p"},"registries.yaml")," file and give different examples of using private registry configuration in K3s."),(0,i.kt)("h2",{id:"registries-configuration-file"},"Registries Configuration File"),(0,i.kt)("p",null,"The file consists of two main sections:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"mirrors"),(0,i.kt)("li",{parentName:"ul"},"configs")),(0,i.kt)("h3",{id:"mirrors"},"Mirrors"),(0,i.kt)("p",null,"Mirrors is a directive that defines the names and endpoints of the private registries, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  mycustomreg.com:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one."),(0,i.kt)("h4",{id:"redirects"},"Redirects"),(0,i.kt)("p",null,"If a public registry is used as a mirror, such as when configuring a ",(0,i.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/recipes/mirror/"},"pull through cache"),", images pulls are transparently redirected."),(0,i.kt)("p",null,"For example, if you have a mirror configured for ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,i.kt)("p",null,"Then pulling ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," will transparently pull the image from ",(0,i.kt)("inlineCode",{parentName:"p"},"https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3"),"."),(0,i.kt)("h4",{id:"rewrites"},"Rewrites"),(0,i.kt)("p",null,"Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one."),(0,i.kt)("p",null,"For example, the following configuration would transparently pull the image ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," from ",(0,i.kt)("inlineCode",{parentName:"p"},"registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3"),":"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://registry.example.com:5000"\n    rewrite:\n      "^rancher/(.*)": "mirrorproject/rancher-images/$1"\n')),(0,i.kt)("p",null,"The image will still be stored under the original name so that a ",(0,i.kt)("inlineCode",{parentName:"p"},"crictl image ls")," will show ",(0,i.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," as available on the node, even though the image was pulled from the mirrored registry with a different name."),(0,i.kt)("h3",{id:"configs"},"Configs"),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"configs")," section defines the TLS and credential configuration for each mirror. For each mirror you can define ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," and/or ",(0,i.kt)("inlineCode",{parentName:"p"},"tls"),". "),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"tls")," part consists of:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"cert_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client certificate path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"key_file")),(0,i.kt)("td",{parentName:"tr",align:null},"The client key path that will be used to authenticate with the registry")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"ca_file")),(0,i.kt)("td",{parentName:"tr",align:null},"Defines the CA certificate path to be used to verify the registry's server cert file")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"insecure_skip_verify")),(0,i.kt)("td",{parentName:"tr",align:null},"Boolean that defines if TLS verification should be skipped for the registry")))),(0,i.kt)("p",null,"The ",(0,i.kt)("inlineCode",{parentName:"p"},"auth")," part consists of either username/password or authentication token:"),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"Directive"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"username")),(0,i.kt)("td",{parentName:"tr",align:null},"user name of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"password")),(0,i.kt)("td",{parentName:"tr",align:null},"user password of the private registry basic auth")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"auth")),(0,i.kt)("td",{parentName:"tr",align:null},"authentication token of the private registry basic auth")))),(0,i.kt)("p",null,"Below are basic examples of using private registries in different modes:"),(0,i.kt)("h3",{id:"with-tls"},"With TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n')))),(0,i.kt)("h3",{id:"without-tls"},"Without TLS"),(0,i.kt)("p",null,"Below are examples showing how you may configure ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml")," on each node when ",(0,i.kt)("em",{parentName:"p"},"not")," using TLS."),(0,i.kt)(d,{mdxType:"Tabs"},(0,i.kt)(u,{value:"With Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n'))),(0,i.kt)(u,{value:"Without Authentication",mdxType:"TabItem"},(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\n')))),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},"In case of no TLS communication, you need to specify ",(0,i.kt)("inlineCode",{parentName:"p"},"http://")," for the endpoints, otherwise it will default to https.")),(0,i.kt)("p",null,"In order for the registry changes to take effect, you need to restart K3s on each node."),(0,i.kt)("h2",{id:"adding-images-to-the-private-registry"},"Adding Images to the Private Registry"),(0,i.kt)("p",null,"First, obtain the ",(0,i.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," file from GitHub for the release you are working with.\nPull the K3s images listed on the k3s-images.txt file from docker.io"),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker pull docker.io/rancher/coredns-coredns:1.6.3")),(0,i.kt)("p",null,"Then, retag the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker tag coredns-coredns:1.6.3 mycustomreg:5000/coredns-coredns")),(0,i.kt)("p",null,"Last, push the images to the private registry."),(0,i.kt)("p",null,"Example: ",(0,i.kt)("inlineCode",{parentName:"p"},"docker push mycustomreg.com:5000/coredns-coredns")))}h.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/65004aa0.eabed6be.js b/kr/assets/js/65004aa0.ff6a8d7d.js
similarity index 96%
rename from kr/assets/js/65004aa0.eabed6be.js
rename to kr/assets/js/65004aa0.ff6a8d7d.js
index b7e21c278..6815f31a7 100644
--- a/kr/assets/js/65004aa0.eabed6be.js
+++ b/kr/assets/js/65004aa0.ff6a8d7d.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8920],{3905:(e,r,t)=>{t.d(r,{Zo:()=>s,kt:()=>d});var n=t(7294);function o(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function c(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function a(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?c(Object(t),!0).forEach((function(r){o(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):c(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function i(e,r){if(null==e)return{};var t,n,o=function(e,r){if(null==e)return{};var t,n,o={},c=Object.keys(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||(o[t]=e[t]);return o}(e,r);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(o[t]=e[t])}return o}var l=n.createContext({}),p=function(e){var r=n.useContext(l),t=r;return e&&(t="function"==typeof e?e(r):a(a({},r),e)),t},s=function(e){var r=p(e.components);return n.createElement(l.Provider,{value:r},e.children)},u={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},f=n.forwardRef((function(e,r){var t=e.components,o=e.mdxType,c=e.originalType,l=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),f=p(t),d=o,m=f["".concat(l,".").concat(d)]||f[d]||u[d]||c;return t?n.createElement(m,a(a({ref:r},s),{},{components:t})):n.createElement(m,a({ref:r},s))}));function d(e,r){var t=arguments,o=r&&r.mdxType;if("string"==typeof e||o){var c=t.length,a=new Array(c);a[0]=f;var i={};for(var l in r)hasOwnProperty.call(r,l)&&(i[l]=r[l]);i.originalType=e,i.mdxType="string"==typeof e?e:o,a[1]=i;for(var p=2;p<c;p++)a[p]=t[p];return n.createElement.apply(null,a)}return n.createElement.apply(null,t)}f.displayName="MDXCreateElement"},6281:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>l,contentTitle:()=>a,default:()=>u,frontMatter:()=>c,metadata:()=>i,toc:()=>p});var n=t(3117),o=(t(7294),t(3905));const c={title:"\ub808\ud37c\ub7f0\uc2a4"},a=void 0,i={unversionedId:"reference/reference",id:"reference/reference",title:"\ub808\ud37c\ub7f0\uc2a4",description:"\uc774 \uc139\uc158\uc5d0\ub294 K3s \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8, \uc11c\ubc84/\ud074\ub77c\uc774\uc5b8\ud2b8 \uad6c\uc131 \uc635\uc158, \ucd94\uac00 \ub3c4\uad6c \uc0ac\uc6a9 \uc9c0\uce68\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/reference.md",sourceDirName:"reference",slug:"/reference/",permalink:"/kr/reference/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ub808\ud37c\ub7f0\uc2a4"},sidebar:"mySidebar",previous:{title:"token",permalink:"/kr/cli/token"},next:{title:"Environment Variables",permalink:"/kr/reference/env-variables"}},l={},p=[],s={toc:p};function u(e){let{components:r,...t}=e;return(0,o.kt)("wrapper",(0,n.Z)({},s,t,{components:r,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\ub294 K3s \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8, \uc11c\ubc84/\ud074\ub77c\uc774\uc5b8\ud2b8 \uad6c\uc131 \uc635\uc158, \ucd94\uac00 \ub3c4\uad6c \uc0ac\uc6a9 \uc9c0\uce68\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8920],{3905:(e,r,t)=>{t.d(r,{Zo:()=>s,kt:()=>d});var n=t(7294);function o(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function c(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function a(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?c(Object(t),!0).forEach((function(r){o(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):c(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function i(e,r){if(null==e)return{};var t,n,o=function(e,r){if(null==e)return{};var t,n,o={},c=Object.keys(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||(o[t]=e[t]);return o}(e,r);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(o[t]=e[t])}return o}var l=n.createContext({}),p=function(e){var r=n.useContext(l),t=r;return e&&(t="function"==typeof e?e(r):a(a({},r),e)),t},s=function(e){var r=p(e.components);return n.createElement(l.Provider,{value:r},e.children)},u={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},f=n.forwardRef((function(e,r){var t=e.components,o=e.mdxType,c=e.originalType,l=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),f=p(t),d=o,m=f["".concat(l,".").concat(d)]||f[d]||u[d]||c;return t?n.createElement(m,a(a({ref:r},s),{},{components:t})):n.createElement(m,a({ref:r},s))}));function d(e,r){var t=arguments,o=r&&r.mdxType;if("string"==typeof e||o){var c=t.length,a=new Array(c);a[0]=f;var i={};for(var l in r)hasOwnProperty.call(r,l)&&(i[l]=r[l]);i.originalType=e,i.mdxType="string"==typeof e?e:o,a[1]=i;for(var p=2;p<c;p++)a[p]=t[p];return n.createElement.apply(null,a)}return n.createElement.apply(null,t)}f.displayName="MDXCreateElement"},6281:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>l,contentTitle:()=>a,default:()=>u,frontMatter:()=>c,metadata:()=>i,toc:()=>p});var n=t(3117),o=(t(7294),t(3905));const c={title:"\ub808\ud37c\ub7f0\uc2a4"},a=void 0,i={unversionedId:"reference/reference",id:"reference/reference",title:"\ub808\ud37c\ub7f0\uc2a4",description:"\uc774 \uc139\uc158\uc5d0\ub294 K3s \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8, \uc11c\ubc84/\ud074\ub77c\uc774\uc5b8\ud2b8 \uad6c\uc131 \uc635\uc158, \ucd94\uac00 \ub3c4\uad6c \uc0ac\uc6a9 \uc9c0\uce68\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/reference.md",sourceDirName:"reference",slug:"/reference/",permalink:"/kr/reference/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ub808\ud37c\ub7f0\uc2a4"},sidebar:"mySidebar",previous:{title:"token",permalink:"/kr/cli/token"},next:{title:"Environment Variables",permalink:"/kr/reference/env-variables"}},l={},p=[],s={toc:p};function u(e){let{components:r,...t}=e;return(0,o.kt)("wrapper",(0,n.Z)({},s,t,{components:r,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\ub294 K3s \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8, \uc11c\ubc84/\ud074\ub77c\uc774\uc5b8\ud2b8 \uad6c\uc131 \uc635\uc158, \ucd94\uac00 \ub3c4\uad6c \uc0ac\uc6a9 \uc9c0\uce68\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/65309f9a.d0e9f1ae.js b/kr/assets/js/65309f9a.71bfa796.js
similarity index 97%
rename from kr/assets/js/65309f9a.d0e9f1ae.js
rename to kr/assets/js/65309f9a.71bfa796.js
index aed878f29..dd2468d48 100644
--- a/kr/assets/js/65309f9a.d0e9f1ae.js
+++ b/kr/assets/js/65309f9a.71bfa796.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6005],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>f});var r=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function c(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function a(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=r.createContext({}),l=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):c(c({},t),e)),n},p=function(e){var t=l(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},y=r.forwardRef((function(e,t){var n=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,p=a(e,["components","mdxType","originalType","parentName"]),y=l(n),f=i,d=y["".concat(s,".").concat(f)]||y[f]||u[f]||o;return n?r.createElement(d,c(c({ref:t},p),{},{components:n})):r.createElement(d,c({ref:t},p))}));function f(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var o=n.length,c=new Array(o);c[0]=y;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:i,c[1]=a;for(var l=2;l<o;l++)c[l]=n[l];return r.createElement.apply(null,c)}return r.createElement.apply(null,n)}y.displayName="MDXCreateElement"},2341:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>u,frontMatter:()=>o,metadata:()=>a,toc:()=>l});var r=n(3117),i=(n(7294),n(3905));const o={title:"Secrets Encryption",weight:26},c="Secrets Encryption Config",a={unversionedId:"security/secrets-encryption",id:"security/secrets-encryption",title:"Secrets Encryption",description:"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",sourceDirName:"security",slug:"/security/secrets-encryption",permalink:"/kr/security/secrets-encryption",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Secrets Encryption",weight:26},sidebar:"mySidebar",previous:{title:"\ubcf4\uc548",permalink:"/kr/security/"},next:{title:"CIS Hardening Guide",permalink:"/kr/security/hardening-guide"}},s={},l=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2}],p={toc:l};function u(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("h1",{id:"secrets-encryption-config"},"Secrets Encryption Config"),(0,i.kt)("p",null,"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag ",(0,i.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," will do the following automatically:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Generate an AES-CBC key"),(0,i.kt)("li",{parentName:"ul"},"Generate an encryption config file with the generated key"),(0,i.kt)("li",{parentName:"ul"},"Pass the config to the KubeAPI as encryption-provider-config")),(0,i.kt)("admonition",{type:"tip"},(0,i.kt)("p",{parentName:"admonition"},"Secrets-encryption cannot be enabled on an existing server without restarting it.",(0,i.kt)("br",{parentName:"p"}),"\n","Use ",(0,i.kt)("inlineCode",{parentName:"p"},"curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption")," if installing from script, or other methods described in ",(0,i.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-with-install-script"},"Configuration Options"),".")),(0,i.kt)("p",null,"Example of the encryption config file:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-json"},'{\n  "kind": "EncryptionConfiguration",\n  "apiVersion": "apiserver.config.k8s.io/v1",\n  "resources": [\n    {\n      "resources": [\n        "secrets"\n      ],\n      "providers": [\n        {\n          "aescbc": {\n            "keys": [\n              {\n                "name": "aescbckey",\n                "secret": "xxxxxxxxxxxxxxxxxxx"\n              }\n            ]\n          }\n        },\n        {\n          "identity": {}\n        }\n      ]\n    }\n  ]\n}\n')),(0,i.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,i.kt)("p",null,"K3s contains a utility tool ",(0,i.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,i.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,i.kt)("p",null,"For more information, see the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/secrets-encrypt"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," command documentation"),"."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6005],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>f});var r=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function c(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function a(e,t){if(null==e)return{};var n,r,i=function(e,t){if(null==e)return{};var n,r,i={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=r.createContext({}),l=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):c(c({},t),e)),n},p=function(e){var t=l(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},y=r.forwardRef((function(e,t){var n=e.components,i=e.mdxType,o=e.originalType,s=e.parentName,p=a(e,["components","mdxType","originalType","parentName"]),y=l(n),f=i,d=y["".concat(s,".").concat(f)]||y[f]||u[f]||o;return n?r.createElement(d,c(c({ref:t},p),{},{components:n})):r.createElement(d,c({ref:t},p))}));function f(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var o=n.length,c=new Array(o);c[0]=y;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:i,c[1]=a;for(var l=2;l<o;l++)c[l]=n[l];return r.createElement.apply(null,c)}return r.createElement.apply(null,n)}y.displayName="MDXCreateElement"},2341:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>u,frontMatter:()=>o,metadata:()=>a,toc:()=>l});var r=n(3117),i=(n(7294),n(3905));const o={title:"Secrets Encryption",weight:26},c="Secrets Encryption Config",a={unversionedId:"security/secrets-encryption",id:"security/secrets-encryption",title:"Secrets Encryption",description:"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",sourceDirName:"security",slug:"/security/secrets-encryption",permalink:"/kr/security/secrets-encryption",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Secrets Encryption",weight:26},sidebar:"mySidebar",previous:{title:"\ubcf4\uc548",permalink:"/kr/security/"},next:{title:"CIS Hardening Guide",permalink:"/kr/security/hardening-guide"}},s={},l=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2}],p={toc:l};function u(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("h1",{id:"secrets-encryption-config"},"Secrets Encryption Config"),(0,i.kt)("p",null,"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag ",(0,i.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," will do the following automatically:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Generate an AES-CBC key"),(0,i.kt)("li",{parentName:"ul"},"Generate an encryption config file with the generated key"),(0,i.kt)("li",{parentName:"ul"},"Pass the config to the KubeAPI as encryption-provider-config")),(0,i.kt)("admonition",{type:"tip"},(0,i.kt)("p",{parentName:"admonition"},"Secrets-encryption cannot be enabled on an existing server without restarting it.",(0,i.kt)("br",{parentName:"p"}),"\n","Use ",(0,i.kt)("inlineCode",{parentName:"p"},"curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption")," if installing from script, or other methods described in ",(0,i.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-with-install-script"},"Configuration Options"),".")),(0,i.kt)("p",null,"Example of the encryption config file:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-json"},'{\n  "kind": "EncryptionConfiguration",\n  "apiVersion": "apiserver.config.k8s.io/v1",\n  "resources": [\n    {\n      "resources": [\n        "secrets"\n      ],\n      "providers": [\n        {\n          "aescbc": {\n            "keys": [\n              {\n                "name": "aescbckey",\n                "secret": "xxxxxxxxxxxxxxxxxxx"\n              }\n            ]\n          }\n        },\n        {\n          "identity": {}\n        }\n      ]\n    }\n  ]\n}\n')),(0,i.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,i.kt)("p",null,"K3s contains a utility tool ",(0,i.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,i.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,i.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,i.kt)("p",null,"For more information, see the ",(0,i.kt)("a",{parentName:"p",href:"/kr/cli/secrets-encrypt"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," command documentation"),"."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/6780.6d95d5ed.js b/kr/assets/js/6780.6d95d5ed.js
deleted file mode 100644
index 803aa19e4..000000000
--- a/kr/assets/js/6780.6d95d5ed.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6780],{6780:(e,t,r)=>{function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t,r){var a,c=t.initialState;return{getState:function(){return c},dispatch:function(a,i){var l=function(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?n(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):n(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}({},c);c=e(c,{type:a,props:t,payload:i}),r({state:c,prevState:l})},pendingRequests:(a=[],{add:function(e){return a.push(e),e.finally((function(){a=a.filter((function(t){return t!==e}))}))},cancelAll:function(){a.forEach((function(e){return e.cancel()}))},isEmpty:function(){return 0===a.length}})}}function c(e){return e.reduce((function(e,t){return e.concat(t)}),[])}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function u(e){return 0===e.collections.length?0:e.collections.reduce((function(e,t){return e+t.items.length}),0)}r.r(t),r.d(t,{DocSearchModal:()=>Dr});var f=0;var m=function(){};function p(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function d(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function h(e,t){var r=[];return Promise.resolve(e(t)).then((function(e){return Array.isArray(e),Promise.all(e.filter((function(e){return Boolean(e)})).map((function(e){if(e.sourceId,r.includes(e.sourceId))throw new Error("[Autocomplete] The `sourceId` ".concat(JSON.stringify(e.sourceId)," is not unique."));r.push(e.sourceId);var t=function(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?p(Object(r),!0).forEach((function(t){d(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):p(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}({getItemInputValue:function(e){return e.state.query},getItemUrl:function(){},onSelect:function(e){(0,e.setIsOpen)(!1)},onActive:m},e);return Promise.resolve(t)})))}))}function v(e){return function(e){if(Array.isArray(e))return y(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return y(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return y(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function y(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function g(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function b(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?g(Object(r),!0).forEach((function(t){O(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):g(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function O(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function S(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function E(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?S(Object(r),!0).forEach((function(t){j(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):S(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function j(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function w(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function P(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?w(Object(r),!0).forEach((function(t){I(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):w(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function I(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function D(e){return function(e){if(Array.isArray(e))return k(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return k(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return k(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function k(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function C(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function A(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?C(Object(r),!0).forEach((function(t){x(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):C(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function x(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function N(e){return Boolean(e.execute)}function _(e,t){return r=e,Boolean(null==r?void 0:r.execute)?A(A({},e),{},{requests:e.queries.map((function(r){return{query:r,sourceId:t,transformResponse:e.transformResponse}}))}):{items:e,sourceId:t};var r}function R(e){var t=e.reduce((function(e,t){if(!N(t))return e.push(t),e;var r=t.searchClient,n=t.execute,o=t.requesterId,a=t.requests,c=e.find((function(e){return N(t)&&N(e)&&e.searchClient===r&&Boolean(o)&&e.requesterId===o}));if(c){var i;(i=c.items).push.apply(i,D(a))}else{var l={execute:n,requesterId:o,items:a,searchClient:r};e.push(l)}return e}),[]).map((function(e){if(!N(e))return Promise.resolve(e);var t=e,r=t.execute,n=t.items;return r({searchClient:t.searchClient,requests:n})}));return Promise.all(t).then((function(e){return c(e)}))}function q(e,t){return t.map((function(t){var r=e.filter((function(e){return e.sourceId===t.sourceId})),n=r.map((function(e){return e.items})),o=r[0].transformResponse,a=o?o(function(e){var t=e.map((function(e){var t;return P(P({},e),{},{hits:null===(t=e.hits)||void 0===t?void 0:t.map((function(t){return P(P({},t),{},{__autocomplete_indexName:e.index,__autocomplete_queryID:e.queryID})}))})}));return{results:t,hits:t.map((function(e){return e.hits})).filter(Boolean),facetHits:t.map((function(e){var t;return null===(t=e.facetHits)||void 0===t?void 0:t.map((function(e){return{label:e.value,count:e.count,_highlightResult:{label:{value:e.highlighted}}}}))})).filter(Boolean)}}(n)):n;return Array.isArray(a),a.every(Boolean),'The `getItems` function from source "'.concat(t.sourceId,'" must return an array of items but returned ').concat(JSON.stringify(void 0),".\n\nDid you forget to return items?\n\nSee: https://www.algolia.com/doc/ui-libraries/autocomplete/core-concepts/sources/#param-getitems"),{source:t,items:a}}))}function T(e,t){var r=t;return{then:function(t,n){return T(e.then(H(t,r,e),H(n,r,e)),r)},catch:function(t){return T(e.catch(H(t,r,e)),r)},finally:function(t){return t&&r.onCancelList.push(t),T(e.finally(H(t&&function(){return r.onCancelList=[],t()},r,e)),r)},cancel:function(){r.isCanceled=!0;var e=r.onCancelList;r.onCancelList=[],e.forEach((function(e){e()}))},isCanceled:function(){return!0===r.isCanceled}}}function L(e){return T(new Promise((function(t,r){return e(t,r)})),{isCanceled:!1,onCancelList:[]})}function M(e){return T(e,{isCanceled:!1,onCancelList:[]})}function H(e,t,r){return e?function(r){return t.isCanceled?r:e(r)}:r}function F(e){var t=function(e){var t=e.collections.map((function(e){return e.items.length})).reduce((function(e,t,r){var n=(e[r-1]||0)+t;return e.push(n),e}),[]).reduce((function(t,r){return r<=e.activeItemId?t+1:t}),0);return e.collections[t]}(e);if(!t)return null;var r=t.items[function(e){for(var t=e.state,r=e.collection,n=!1,o=0,a=0;!1===n;){var c=t.collections[o];if(c===r){n=!0;break}a+=c.items.length,o++}return t.activeItemId-a}({state:e,collection:t})],n=t.source;return{item:r,itemInputValue:n.getItemInputValue({item:r,state:e}),itemUrl:n.getItemUrl({item:r,state:e}),source:n}}L.resolve=function(e){return M(Promise.resolve(e))},L.reject=function(e){return M(Promise.reject(e))};var U=["event","nextState","props","query","refresh","store"];function B(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function V(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?B(Object(r),!0).forEach((function(t){K(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):B(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function K(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function J(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var $,z,W,Q=null,Z=($=-1,z=-1,W=void 0,function(e){var t=++$;return Promise.resolve(e).then((function(e){return W&&t<z?W:(z=t,W=e,e)}))});function Y(e){var t=e.event,r=e.nextState,n=void 0===r?{}:r,o=e.props,a=e.query,i=e.refresh,l=e.store,s=J(e,U);Q&&o.environment.clearTimeout(Q);var u=s.setCollections,f=s.setIsOpen,m=s.setQuery,p=s.setActiveItemId,d=s.setStatus;if(m(a),p(o.defaultActiveItemId),!a&&!1===o.openOnFocus){var h,v=l.getState().collections.map((function(e){return V(V({},e),{},{items:[]})}));d("idle"),u(v),f(null!==(h=n.isOpen)&&void 0!==h?h:o.shouldPanelOpen({state:l.getState()}));var y=M(Z(v).then((function(){return Promise.resolve()})));return l.pendingRequests.add(y)}d("loading"),Q=o.environment.setTimeout((function(){d("stalled")}),o.stallThreshold);var g=M(Z(o.getSources(V({query:a,refresh:i,state:l.getState()},s)).then((function(e){return Promise.all(e.map((function(e){return Promise.resolve(e.getItems(V({query:a,refresh:i,state:l.getState()},s))).then((function(t){return _(t,e.sourceId)}))}))).then(R).then((function(t){return q(t,e)})).then((function(e){return function(e){var t=e.collections,r=e.props,n=e.state,o=t.reduce((function(e,t){return E(E({},e),{},j({},t.source.sourceId,E(E({},t.source),{},{getItems:function(){return c(t.items)}})))}),{});return c(r.reshape({sources:Object.values(o),sourcesBySourceId:o,state:n})).filter(Boolean).map((function(e){return{source:e,items:e.getItems()}}))}({collections:e,props:o,state:l.getState()})}))})))).then((function(e){var r;d("idle"),u(e);var c=o.shouldPanelOpen({state:l.getState()});f(null!==(r=n.isOpen)&&void 0!==r?r:o.openOnFocus&&!a&&c||c);var m=F(l.getState());if(null!==l.getState().activeItemId&&m){var p=m.item,h=m.itemInputValue,v=m.itemUrl,y=m.source;y.onActive(V({event:t,item:p,itemInputValue:h,itemUrl:v,refresh:i,source:y,state:l.getState()},s))}})).finally((function(){d("idle"),Q&&o.environment.clearTimeout(Q)}));return l.pendingRequests.add(g)}var G=["event","props","refresh","store"];function X(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ee(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?X(Object(r),!0).forEach((function(t){te(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):X(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function te(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function re(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var ne=/((gt|sm)-|galaxy nexus)|samsung[- ]/i;var oe=["props","refresh","store"],ae=["inputElement","formElement","panelElement"],ce=["inputElement"],ie=["inputElement","maxLength"],le=["item","source"];function se(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ue(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?se(Object(r),!0).forEach((function(t){fe(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):se(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function fe(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function me(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function pe(e){var t=e.props,r=e.refresh,n=e.store,o=me(e,oe);return{getEnvironmentProps:function(e){var r=e.inputElement,o=e.formElement,a=e.panelElement;function c(e){!n.getState().isOpen&&n.pendingRequests.isEmpty()||e.target===r||!1===[o,a].some((function(t){return r=t,n=e.target,r===n||r.contains(n);var r,n}))&&(n.dispatch("blur",null),t.debug||n.pendingRequests.cancelAll())}return ue({onTouchStart:c,onMouseDown:c,onTouchMove:function(e){!1!==n.getState().isOpen&&r===t.environment.document.activeElement&&e.target!==r&&r.blur()}},me(e,ae))},getRootProps:function(e){return ue({role:"combobox","aria-expanded":n.getState().isOpen,"aria-haspopup":"listbox","aria-owns":n.getState().isOpen?"".concat(t.id,"-list"):void 0,"aria-labelledby":"".concat(t.id,"-label")},e)},getFormProps:function(e){e.inputElement;return ue({action:"",noValidate:!0,role:"search",onSubmit:function(a){var c;a.preventDefault(),t.onSubmit(ue({event:a,refresh:r,state:n.getState()},o)),n.dispatch("submit",null),null===(c=e.inputElement)||void 0===c||c.blur()},onReset:function(a){var c;a.preventDefault(),t.onReset(ue({event:a,refresh:r,state:n.getState()},o)),n.dispatch("reset",null),null===(c=e.inputElement)||void 0===c||c.focus()}},me(e,ce))},getLabelProps:function(e){return ue({htmlFor:"".concat(t.id,"-input"),id:"".concat(t.id,"-label")},e)},getInputProps:function(e){var a;function c(e){(t.openOnFocus||Boolean(n.getState().query))&&Y(ue({event:e,props:t,query:n.getState().completion||n.getState().query,refresh:r,store:n},o)),n.dispatch("focus",null)}var i=e||{},l=(i.inputElement,i.maxLength),s=void 0===l?512:l,u=me(i,ie),f=F(n.getState()),p=function(e){return Boolean(e&&e.match(ne))}((null===(a=t.environment.navigator)||void 0===a?void 0:a.userAgent)||""),d=null!=f&&f.itemUrl&&!p?"go":"search";return ue({"aria-autocomplete":"both","aria-activedescendant":n.getState().isOpen&&null!==n.getState().activeItemId?"".concat(t.id,"-item-").concat(n.getState().activeItemId):void 0,"aria-controls":n.getState().isOpen?"".concat(t.id,"-list"):void 0,"aria-labelledby":"".concat(t.id,"-label"),value:n.getState().completion||n.getState().query,id:"".concat(t.id,"-input"),autoComplete:"off",autoCorrect:"off",autoCapitalize:"off",enterKeyHint:d,spellCheck:"false",autoFocus:t.autoFocus,placeholder:t.placeholder,maxLength:s,type:"search",onChange:function(e){Y(ue({event:e,props:t,query:e.currentTarget.value.slice(0,s),refresh:r,store:n},o))},onKeyDown:function(e){!function(e){var t=e.event,r=e.props,n=e.refresh,o=e.store,a=re(e,G);if("ArrowUp"===t.key||"ArrowDown"===t.key){var c=function(){var e=r.environment.document.getElementById("".concat(r.id,"-item-").concat(o.getState().activeItemId));e&&(e.scrollIntoViewIfNeeded?e.scrollIntoViewIfNeeded(!1):e.scrollIntoView(!1))},i=function(){var e=F(o.getState());if(null!==o.getState().activeItemId&&e){var r=e.item,c=e.itemInputValue,i=e.itemUrl,l=e.source;l.onActive(ee({event:t,item:r,itemInputValue:c,itemUrl:i,refresh:n,source:l,state:o.getState()},a))}};t.preventDefault(),!1===o.getState().isOpen&&(r.openOnFocus||Boolean(o.getState().query))?Y(ee({event:t,props:r,query:o.getState().query,refresh:n,store:o},a)).then((function(){o.dispatch(t.key,{nextActiveItemId:r.defaultActiveItemId}),i(),setTimeout(c,0)})):(o.dispatch(t.key,{}),i(),c())}else if("Escape"===t.key)t.preventDefault(),o.dispatch(t.key,null),o.pendingRequests.cancelAll();else if("Tab"===t.key)o.dispatch("blur",null),o.pendingRequests.cancelAll();else if("Enter"===t.key){if(null===o.getState().activeItemId||o.getState().collections.every((function(e){return 0===e.items.length})))return void(r.debug||o.pendingRequests.cancelAll());t.preventDefault();var l=F(o.getState()),s=l.item,u=l.itemInputValue,f=l.itemUrl,m=l.source;if(t.metaKey||t.ctrlKey)void 0!==f&&(m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),r.navigator.navigateNewTab({itemUrl:f,item:s,state:o.getState()}));else if(t.shiftKey)void 0!==f&&(m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),r.navigator.navigateNewWindow({itemUrl:f,item:s,state:o.getState()}));else if(t.altKey);else{if(void 0!==f)return m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),void r.navigator.navigate({itemUrl:f,item:s,state:o.getState()});Y(ee({event:t,nextState:{isOpen:!1},props:r,query:u,refresh:n,store:o},a)).then((function(){m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a))}))}}}(ue({event:e,props:t,refresh:r,store:n},o))},onFocus:c,onBlur:m,onClick:function(r){e.inputElement!==t.environment.document.activeElement||n.getState().isOpen||c(r)}},u)},getPanelProps:function(e){return ue({onMouseDown:function(e){e.preventDefault()},onMouseLeave:function(){n.dispatch("mouseleave",null)}},e)},getListProps:function(e){return ue({role:"listbox","aria-labelledby":"".concat(t.id,"-label"),id:"".concat(t.id,"-list")},e)},getItemProps:function(e){var a=e.item,c=e.source,i=me(e,le);return ue({id:"".concat(t.id,"-item-").concat(a.__autocomplete_id),role:"option","aria-selected":n.getState().activeItemId===a.__autocomplete_id,onMouseMove:function(e){if(a.__autocomplete_id!==n.getState().activeItemId){n.dispatch("mousemove",a.__autocomplete_id);var t=F(n.getState());if(null!==n.getState().activeItemId&&t){var c=t.item,i=t.itemInputValue,l=t.itemUrl,s=t.source;s.onActive(ue({event:e,item:c,itemInputValue:i,itemUrl:l,refresh:r,source:s,state:n.getState()},o))}}},onMouseDown:function(e){e.preventDefault()},onClick:function(e){var i=c.getItemInputValue({item:a,state:n.getState()}),l=c.getItemUrl({item:a,state:n.getState()});(l?Promise.resolve():Y(ue({event:e,nextState:{isOpen:!1},props:t,query:i,refresh:r,store:n},o))).then((function(){c.onSelect(ue({event:e,item:a,itemInputValue:i,itemUrl:l,refresh:r,source:c,state:n.getState()},o))}))}},i)}}}var de=[{segment:"autocomplete-core",version:"1.7.4"}];function he(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ve(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?he(Object(r),!0).forEach((function(t){ye(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):he(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function ye(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function ge(e){var t,r,n,o,a=e.plugins,c=e.options,i=null===(t=((null===(r=c.__autocomplete_metadata)||void 0===r?void 0:r.userAgents)||[])[0])||void 0===t?void 0:t.segment,l=i?ye({},i,Object.keys((null===(n=c.__autocomplete_metadata)||void 0===n?void 0:n.options)||{})):{};return{plugins:a.map((function(e){return{name:e.name,options:Object.keys(e.__autocomplete_pluginOptions||[])}})),options:ve({"autocomplete-core":Object.keys(c)},l),ua:de.concat((null===(o=c.__autocomplete_metadata)||void 0===o?void 0:o.userAgents)||[])}}function be(e){var t,r=e.state;return!1===r.isOpen||null===r.activeItemId?null:(null===(t=F(r))||void 0===t?void 0:t.itemInputValue)||null}function Oe(e,t,r,n){if(!r)return null;if(e<0&&(null===t||null!==n&&0===t))return r+e;var o=(null===t?-1:t)+e;return o<=-1||o>=r?null===n?null:0:o}function Se(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Ee(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Se(Object(r),!0).forEach((function(t){je(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Se(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function je(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}var we=function(e,t){switch(t.type){case"setActiveItemId":case"mousemove":return Ee(Ee({},e),{},{activeItemId:t.payload});case"setQuery":return Ee(Ee({},e),{},{query:t.payload,completion:null});case"setCollections":return Ee(Ee({},e),{},{collections:t.payload});case"setIsOpen":return Ee(Ee({},e),{},{isOpen:t.payload});case"setStatus":return Ee(Ee({},e),{},{status:t.payload});case"setContext":return Ee(Ee({},e),{},{context:Ee(Ee({},e.context),t.payload)});case"ArrowDown":var r=Ee(Ee({},e),{},{activeItemId:t.payload.hasOwnProperty("nextActiveItemId")?t.payload.nextActiveItemId:Oe(1,e.activeItemId,u(e),t.props.defaultActiveItemId)});return Ee(Ee({},r),{},{completion:be({state:r})});case"ArrowUp":var n=Ee(Ee({},e),{},{activeItemId:Oe(-1,e.activeItemId,u(e),t.props.defaultActiveItemId)});return Ee(Ee({},n),{},{completion:be({state:n})});case"Escape":return e.isOpen?Ee(Ee({},e),{},{activeItemId:null,isOpen:!1,completion:null}):Ee(Ee({},e),{},{activeItemId:null,query:"",status:"idle",collections:[]});case"submit":return Ee(Ee({},e),{},{activeItemId:null,isOpen:!1,status:"idle"});case"reset":return Ee(Ee({},e),{},{activeItemId:!0===t.props.openOnFocus?t.props.defaultActiveItemId:null,status:"idle",query:""});case"focus":return Ee(Ee({},e),{},{activeItemId:t.props.defaultActiveItemId,isOpen:(t.props.openOnFocus||Boolean(e.query))&&t.props.shouldPanelOpen({state:e})});case"blur":return t.props.debug?e:Ee(Ee({},e),{},{isOpen:!1,activeItemId:null});case"mouseleave":return Ee(Ee({},e),{},{activeItemId:t.props.defaultActiveItemId});default:return"The reducer action ".concat(JSON.stringify(t.type)," is not supported."),e}};function Pe(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Ie(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Pe(Object(r),!0).forEach((function(t){De(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Pe(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function De(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function ke(e){var t=[],r=function(e,t){var r,n="undefined"!=typeof window?window:{},o=e.plugins||[];return b(b({debug:!1,openOnFocus:!1,placeholder:"",autoFocus:!1,defaultActiveItemId:null,stallThreshold:300,environment:n,shouldPanelOpen:function(e){return u(e.state)>0},reshape:function(e){return e.sources}},e),{},{id:null!==(r=e.id)&&void 0!==r?r:"autocomplete-".concat(f++),plugins:o,initialState:b({activeItemId:null,query:"",completion:null,collections:[],isOpen:!1,status:"idle",context:{}},e.initialState),onStateChange:function(t){var r;null===(r=e.onStateChange)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onStateChange)||void 0===r?void 0:r.call(e,t)}))},onSubmit:function(t){var r;null===(r=e.onSubmit)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onSubmit)||void 0===r?void 0:r.call(e,t)}))},onReset:function(t){var r;null===(r=e.onReset)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onReset)||void 0===r?void 0:r.call(e,t)}))},getSources:function(r){return Promise.all([].concat(v(o.map((function(e){return e.getSources}))),[e.getSources]).filter(Boolean).map((function(e){return h(e,r)}))).then((function(e){return c(e)})).then((function(e){return e.map((function(e){return b(b({},e),{},{onSelect:function(r){e.onSelect(r),t.forEach((function(e){var t;return null===(t=e.onSelect)||void 0===t?void 0:t.call(e,r)}))},onActive:function(r){e.onActive(r),t.forEach((function(e){var t;return null===(t=e.onActive)||void 0===t?void 0:t.call(e,r)}))}})}))}))},navigator:b({navigate:function(e){var t=e.itemUrl;n.location.assign(t)},navigateNewTab:function(e){var t=e.itemUrl,r=n.open(t,"_blank","noopener");null==r||r.focus()},navigateNewWindow:function(e){var t=e.itemUrl;n.open(t,"_blank","noopener")}},e.navigator)})}(e,t),n=a(we,r,(function(e){var t=e.prevState,n=e.state;r.onStateChange(Ie({prevState:t,state:n,refresh:s},o))})),o=function(e){var t=e.store;return{setActiveItemId:function(e){t.dispatch("setActiveItemId",e)},setQuery:function(e){t.dispatch("setQuery",e)},setCollections:function(e){var r=0,n=e.map((function(e){return l(l({},e),{},{items:c(e.items).map((function(e){return l(l({},e),{},{__autocomplete_id:r++})}))})}));t.dispatch("setCollections",n)},setIsOpen:function(e){t.dispatch("setIsOpen",e)},setStatus:function(e){t.dispatch("setStatus",e)},setContext:function(e){t.dispatch("setContext",e)}}}({store:n}),i=pe(Ie({props:r,refresh:s,store:n},o));function s(){return Y(Ie({event:new Event("input"),nextState:{isOpen:n.getState().isOpen},props:r,query:n.getState().query,refresh:s,store:n},o))}return r.plugins.forEach((function(e){var r;return null===(r=e.subscribe)||void 0===r?void 0:r.call(e,Ie(Ie({},o),{},{refresh:s,onSelect:function(e){t.push({onSelect:e})},onActive:function(e){t.push({onActive:e})}}))})),function(e){var t,r,n=e.metadata,o=e.environment;if(null===(t=o.navigator)||void 0===t||null===(r=t.userAgent)||void 0===r?void 0:r.includes("Algolia Crawler")){var a=o.document.createElement("meta"),c=o.document.querySelector("head");a.name="algolia:metadata",setTimeout((function(){a.content=JSON.stringify(n),c.appendChild(a)}),0)}}({metadata:ge({plugins:r.plugins,options:e}),environment:r.environment}),Ie(Ie({refresh:s},i),o)}var Ce=r(7294);function Ae(e){var t=e.translations,r=(void 0===t?{}:t).searchByText,n=void 0===r?"Search by":r;return Ce.createElement("a",{href:"https://www.algolia.com/ref/docsearch/?utm_source=".concat(window.location.hostname,"&utm_medium=referral&utm_content=powered_by&utm_campaign=docsearch"),target:"_blank",rel:"noopener noreferrer"},Ce.createElement("span",{className:"DocSearch-Label"},n),Ce.createElement("svg",{width:"77",height:"19","aria-label":"Algolia",role:"img",id:"Layer_1",xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 2196.2 500"},Ce.createElement("defs",null,Ce.createElement("style",null,".cls-1,.cls-2{fill:#003dff;}.cls-2{fill-rule:evenodd;}")),Ce.createElement("path",{className:"cls-2",d:"M1070.38,275.3V5.91c0-3.63-3.24-6.39-6.82-5.83l-50.46,7.94c-2.87,.45-4.99,2.93-4.99,5.84l.17,273.22c0,12.92,0,92.7,95.97,95.49,3.33,.1,6.09-2.58,6.09-5.91v-40.78c0-2.96-2.19-5.51-5.12-5.84-34.85-4.01-34.85-47.57-34.85-54.72Z"}),Ce.createElement("rect",{className:"cls-1",x:"1845.88",y:"104.73",width:"62.58",height:"277.9",rx:"5.9",ry:"5.9"}),Ce.createElement("path",{className:"cls-2",d:"M1851.78,71.38h50.77c3.26,0,5.9-2.64,5.9-5.9V5.9c0-3.62-3.24-6.39-6.82-5.83l-50.77,7.95c-2.87,.45-4.99,2.92-4.99,5.83v51.62c0,3.26,2.64,5.9,5.9,5.9Z"}),Ce.createElement("path",{className:"cls-2",d:"M1764.03,275.3V5.91c0-3.63-3.24-6.39-6.82-5.83l-50.46,7.94c-2.87,.45-4.99,2.93-4.99,5.84l.17,273.22c0,12.92,0,92.7,95.97,95.49,3.33,.1,6.09-2.58,6.09-5.91v-40.78c0-2.96-2.19-5.51-5.12-5.84-34.85-4.01-34.85-47.57-34.85-54.72Z"}),Ce.createElement("path",{className:"cls-2",d:"M1631.95,142.72c-11.14-12.25-24.83-21.65-40.78-28.31-15.92-6.53-33.26-9.85-52.07-9.85-18.78,0-36.15,3.17-51.92,9.85-15.59,6.66-29.29,16.05-40.76,28.31-11.47,12.23-20.38,26.87-26.76,44.03-6.38,17.17-9.24,37.37-9.24,58.36,0,20.99,3.19,36.87,9.55,54.21,6.38,17.32,15.14,32.11,26.45,44.36,11.29,12.23,24.83,21.62,40.6,28.46,15.77,6.83,40.12,10.33,52.4,10.48,12.25,0,36.78-3.82,52.7-10.48,15.92-6.68,29.46-16.23,40.78-28.46,11.29-12.25,20.05-27.04,26.25-44.36,6.22-17.34,9.24-33.22,9.24-54.21,0-20.99-3.34-41.19-10.03-58.36-6.38-17.17-15.14-31.8-26.43-44.03Zm-44.43,163.75c-11.47,15.75-27.56,23.7-48.09,23.7-20.55,0-36.63-7.8-48.1-23.7-11.47-15.75-17.21-34.01-17.21-61.2,0-26.89,5.59-49.14,17.06-64.87,11.45-15.75,27.54-23.52,48.07-23.52,20.55,0,36.63,7.78,48.09,23.52,11.47,15.57,17.36,37.98,17.36,64.87,0,27.19-5.72,45.3-17.19,61.2Z"}),Ce.createElement("path",{className:"cls-2",d:"M894.42,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-14.52,22.58-22.99,49.63-22.99,78.73,0,44.89,20.13,84.92,51.59,111.1,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47,1.23,0,2.46-.03,3.68-.09,.36-.02,.71-.05,1.07-.07,.87-.05,1.75-.11,2.62-.2,.34-.03,.68-.08,1.02-.12,.91-.1,1.82-.21,2.73-.34,.21-.03,.42-.07,.63-.1,32.89-5.07,61.56-30.82,70.9-62.81v57.83c0,3.26,2.64,5.9,5.9,5.9h50.42c3.26,0,5.9-2.64,5.9-5.9V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,206.92c-12.2,10.16-27.97,13.98-44.84,15.12-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-42.24,0-77.12-35.89-77.12-79.37,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33v142.83Z"}),Ce.createElement("path",{className:"cls-2",d:"M2133.97,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-14.52,22.58-22.99,49.63-22.99,78.73,0,44.89,20.13,84.92,51.59,111.1,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47,1.23,0,2.46-.03,3.68-.09,.36-.02,.71-.05,1.07-.07,.87-.05,1.75-.11,2.62-.2,.34-.03,.68-.08,1.02-.12,.91-.1,1.82-.21,2.73-.34,.21-.03,.42-.07,.63-.1,32.89-5.07,61.56-30.82,70.9-62.81v57.83c0,3.26,2.64,5.9,5.9,5.9h50.42c3.26,0,5.9-2.64,5.9-5.9V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,206.92c-12.2,10.16-27.97,13.98-44.84,15.12-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-42.24,0-77.12-35.89-77.12-79.37,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33v142.83Z"}),Ce.createElement("path",{className:"cls-2",d:"M1314.05,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-11.79,18.34-19.6,39.64-22.11,62.59-.58,5.3-.88,10.68-.88,16.14s.31,11.15,.93,16.59c4.28,38.09,23.14,71.61,50.66,94.52,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47h0c17.99,0,34.61-5.93,48.16-15.97,16.29-11.58,28.88-28.54,34.48-47.75v50.26h-.11v11.08c0,21.84-5.71,38.27-17.34,49.36-11.61,11.08-31.04,16.63-58.25,16.63-11.12,0-28.79-.59-46.6-2.41-2.83-.29-5.46,1.5-6.27,4.22l-12.78,43.11c-1.02,3.46,1.27,7.02,4.83,7.53,21.52,3.08,42.52,4.68,54.65,4.68,48.91,0,85.16-10.75,108.89-32.21,21.48-19.41,33.15-48.89,35.2-88.52V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,64.1s.65,139.13,0,143.36c-12.08,9.77-27.11,13.59-43.49,14.7-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-1.32,0-2.63-.03-3.94-.1-40.41-2.11-74.52-37.26-74.52-79.38,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33Z"}),Ce.createElement("path",{className:"cls-1",d:"M249.83,0C113.3,0,2,110.09,.03,246.16c-2,138.19,110.12,252.7,248.33,253.5,42.68,.25,83.79-10.19,120.3-30.03,3.56-1.93,4.11-6.83,1.08-9.51l-23.38-20.72c-4.75-4.21-11.51-5.4-17.36-2.92-25.48,10.84-53.17,16.38-81.71,16.03-111.68-1.37-201.91-94.29-200.13-205.96,1.76-110.26,92-199.41,202.67-199.41h202.69V407.41l-115-102.18c-3.72-3.31-9.42-2.66-12.42,1.31-18.46,24.44-48.53,39.64-81.93,37.34-46.33-3.2-83.87-40.5-87.34-86.81-4.15-55.24,39.63-101.52,94-101.52,49.18,0,89.68,37.85,93.91,85.95,.38,4.28,2.31,8.27,5.52,11.12l29.95,26.55c3.4,3.01,8.79,1.17,9.63-3.3,2.16-11.55,2.92-23.58,2.07-35.92-4.82-70.34-61.8-126.93-132.17-131.26-80.68-4.97-148.13,58.14-150.27,137.25-2.09,77.1,61.08,143.56,138.19,145.26,32.19,.71,62.03-9.41,86.14-26.95l150.26,133.2c6.44,5.71,16.61,1.14,16.61-7.47V9.48C499.66,4.25,495.42,0,490.18,0H249.83Z"})))}function xe(e){return Ce.createElement("svg",{width:"15",height:"15","aria-label":e.ariaLabel,role:"img"},Ce.createElement("g",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"1.2"},e.children))}function Ne(e){var t=e.translations,r=void 0===t?{}:t,n=r.selectText,o=void 0===n?"to select":n,a=r.selectKeyAriaLabel,c=void 0===a?"Enter key":a,i=r.navigateText,l=void 0===i?"to navigate":i,s=r.navigateUpKeyAriaLabel,u=void 0===s?"Arrow up":s,f=r.navigateDownKeyAriaLabel,m=void 0===f?"Arrow down":f,p=r.closeText,d=void 0===p?"to close":p,h=r.closeKeyAriaLabel,v=void 0===h?"Escape key":h,y=r.searchByText,g=void 0===y?"Search by":y;return Ce.createElement(Ce.Fragment,null,Ce.createElement("div",{className:"DocSearch-Logo"},Ce.createElement(Ae,{translations:{searchByText:g}})),Ce.createElement("ul",{className:"DocSearch-Commands"},Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:c},Ce.createElement("path",{d:"M12 3.53088v3c0 1-1 2-2 2H4M7 11.53088l-3-3 3-3"}))),Ce.createElement("span",{className:"DocSearch-Label"},o)),Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:m},Ce.createElement("path",{d:"M7.5 3.5v8M10.5 8.5l-3 3-3-3"}))),Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:u},Ce.createElement("path",{d:"M7.5 11.5v-8M10.5 6.5l-3-3-3 3"}))),Ce.createElement("span",{className:"DocSearch-Label"},l)),Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:v},Ce.createElement("path",{d:"M13.6167 8.936c-.1065.3583-.6883.962-1.4875.962-.7993 0-1.653-.9165-1.653-2.1258v-.5678c0-1.2548.7896-2.1016 1.653-2.1016.8634 0 1.3601.4778 1.4875 1.0724M9 6c-.1352-.4735-.7506-.9219-1.46-.8972-.7092.0246-1.344.57-1.344 1.2166s.4198.8812 1.3445.9805C8.465 7.3992 8.968 7.9337 9 8.5c.032.5663-.454 1.398-1.4595 1.398C6.6593 9.898 6 9 5.963 8.4851m-1.4748.5368c-.2635.5941-.8099.876-1.5443.876s-1.7073-.6248-1.7073-2.204v-.4603c0-1.0416.721-2.131 1.7073-2.131.9864 0 1.6425 1.031 1.5443 2.2492h-2.956"}))),Ce.createElement("span",{className:"DocSearch-Label"},d))))}function _e(e){var t=e.hit,r=e.children;return Ce.createElement("a",{href:t.url},r)}function Re(){return Ce.createElement("svg",{width:"40",height:"40",viewBox:"0 0 20 20",fill:"none",fillRule:"evenodd",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M19 4.8a16 16 0 00-2-1.2m-3.3-1.2A16 16 0 001.1 4.7M16.7 8a12 12 0 00-2.8-1.4M10 6a12 12 0 00-6.7 2M12.3 14.7a4 4 0 00-4.5 0M14.5 11.4A8 8 0 0010 10M3 16L18 2M10 18h0"}))}function qe(e){var t=e.translations,r=void 0===t?{}:t,n=r.titleText,o=void 0===n?"Unable to fetch results":n,a=r.helpText,c=void 0===a?"You might want to check your network connection.":a;return Ce.createElement("div",{className:"DocSearch-ErrorScreen"},Ce.createElement("div",{className:"DocSearch-Screen-Icon"},Ce.createElement(Re,null)),Ce.createElement("p",{className:"DocSearch-Title"},o),Ce.createElement("p",{className:"DocSearch-Help"},c))}function Te(){return Ce.createElement("svg",{width:"40",height:"40",viewBox:"0 0 20 20",fill:"none",fillRule:"evenodd",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M15.5 4.8c2 3 1.7 7-1 9.7h0l4.3 4.3-4.3-4.3a7.8 7.8 0 01-9.8 1m-2.2-2.2A7.8 7.8 0 0113.2 2.4M2 18L18 2"}))}var Le=["translations"];function Me(e){return function(e){if(Array.isArray(e))return He(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return He(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return He(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function He(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function Fe(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ue(e){var t=e.translations,r=void 0===t?{}:t,n=Fe(e,Le),o=r.noResultsText,a=void 0===o?"No results for":o,c=r.suggestedQueryText,i=void 0===c?"Try searching for":c,l=r.reportMissingResultsText,s=void 0===l?"Believe this query should return results?":l,u=r.reportMissingResultsLinkText,f=void 0===u?"Let us know.":u,m=n.state.context.searchSuggestions;return Ce.createElement("div",{className:"DocSearch-NoResults"},Ce.createElement("div",{className:"DocSearch-Screen-Icon"},Ce.createElement(Te,null)),Ce.createElement("p",{className:"DocSearch-Title"},a,' "',Ce.createElement("strong",null,n.state.query),'"'),m&&m.length>0&&Ce.createElement("div",{className:"DocSearch-NoResults-Prefill-List"},Ce.createElement("p",{className:"DocSearch-Help"},i,":"),Ce.createElement("ul",null,m.slice(0,3).reduce((function(e,t){return[].concat(Me(e),[Ce.createElement("li",{key:t},Ce.createElement("button",{className:"DocSearch-Prefill",key:t,type:"button",onClick:function(){n.setQuery(t.toLowerCase()+" "),n.refresh(),n.inputRef.current.focus()}},t))])}),[]))),n.getMissingResultsUrl&&Ce.createElement("p",{className:"DocSearch-Help"},"".concat(s," "),Ce.createElement("a",{href:n.getMissingResultsUrl({query:n.state.query}),target:"_blank",rel:"noopener noreferrer"},f)))}var Be=function(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M17 6v12c0 .52-.2 1-1 1H4c-.7 0-1-.33-1-1V2c0-.55.42-1 1-1h8l5 5zM14 8h-3.13c-.51 0-.87-.34-.87-.87V4",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))};function Ve(e){switch(e.type){case"lvl1":return Ce.createElement(Be,null);case"content":return Ce.createElement(Je,null);default:return Ce.createElement(Ke,null)}}function Ke(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M13 13h4-4V8H7v5h6v4-4H7V8H3h4V3v5h6V3v5h4-4v5zm-6 0v4-4H3h4z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}function Je(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M17 5H3h14zm0 5H3h14zm0 5H3h14z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))}function $e(){return Ce.createElement("svg",{className:"DocSearch-Hit-Select-Icon",width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M18 3v4c0 2-2 4-4 4H2"}),Ce.createElement("path",{d:"M8 17l-6-6 6-6"})))}var ze=["hit","attribute","tagName"];function We(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Qe(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?We(Object(r),!0).forEach((function(t){Ze(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):We(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function Ze(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function Ye(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ge(e,t){return t.split(".").reduce((function(e,t){return null!=e&&e[t]?e[t]:null}),e)}function Xe(e){var t=e.hit,r=e.attribute,n=e.tagName,o=void 0===n?"span":n,a=Ye(e,ze);return(0,Ce.createElement)(o,Qe(Qe({},a),{},{dangerouslySetInnerHTML:{__html:Ge(t,"_snippetResult.".concat(r,".value"))||Ge(t,r)}}))}function et(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==r)return;var n,o,a=[],c=!0,i=!1;try{for(r=r.call(e);!(c=(n=r.next()).done)&&(a.push(n.value),!t||a.length!==t);c=!0);}catch(l){i=!0,o=l}finally{try{c||null==r.return||r.return()}finally{if(i)throw o}}return a}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return tt(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return tt(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function tt(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function rt(){return rt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},rt.apply(this,arguments)}function nt(e){return e.collection&&0!==e.collection.items.length?Ce.createElement("section",{className:"DocSearch-Hits"},Ce.createElement("div",{className:"DocSearch-Hit-source"},e.title),Ce.createElement("ul",e.getListProps(),e.collection.items.map((function(t,r){return Ce.createElement(ot,rt({key:[e.title,t.objectID].join(":"),item:t,index:r},e))})))):null}function ot(e){var t=e.item,r=e.index,n=e.renderIcon,o=e.renderAction,a=e.getItemProps,c=e.onItemClick,i=e.collection,l=e.hitComponent,s=et(Ce.useState(!1),2),u=s[0],f=s[1],m=et(Ce.useState(!1),2),p=m[0],d=m[1],h=Ce.useRef(null),v=l;return Ce.createElement("li",rt({className:["DocSearch-Hit",t.__docsearch_parent&&"DocSearch-Hit--Child",u&&"DocSearch-Hit--deleting",p&&"DocSearch-Hit--favoriting"].filter(Boolean).join(" "),onTransitionEnd:function(){h.current&&h.current()}},a({item:t,source:i.source,onClick:function(){c(t)}})),Ce.createElement(v,{hit:t},Ce.createElement("div",{className:"DocSearch-Hit-Container"},n({item:t,index:r}),t.hierarchy[t.type]&&"lvl1"===t.type&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"hierarchy.lvl1"}),t.content&&Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"content"})),t.hierarchy[t.type]&&("lvl2"===t.type||"lvl3"===t.type||"lvl4"===t.type||"lvl5"===t.type||"lvl6"===t.type)&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"hierarchy.".concat(t.type)}),Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"hierarchy.lvl1"})),"content"===t.type&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"content"}),Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"hierarchy.lvl1"})),o({item:t,runDeleteTransition:function(e){f(!0),h.current=e},runFavoriteTransition:function(e){d(!0),h.current=e}}))))}var at=/(<mark>|<\/mark>)/g,ct=RegExp(at.source);function it(e){var t,r,n,o,a,c=e;if(!c.__docsearch_parent&&!e._highlightResult)return e.hierarchy.lvl0;var i=((c.__docsearch_parent?null===(t=c.__docsearch_parent)||void 0===t||null===(r=t._highlightResult)||void 0===r||null===(n=r.hierarchy)||void 0===n?void 0:n.lvl0:null===(o=e._highlightResult)||void 0===o||null===(a=o.hierarchy)||void 0===a?void 0:a.lvl0)||{}).value;return i&&ct.test(i)?i.replace(at,""):i}function lt(){return lt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},lt.apply(this,arguments)}function st(e){return Ce.createElement("div",{className:"DocSearch-Dropdown-Container"},e.state.collections.map((function(t){if(0===t.items.length)return null;var r=it(t.items[0]);return Ce.createElement(nt,lt({},e,{key:t.source.sourceId,title:r,collection:t,renderIcon:function(e){var r,n=e.item,o=e.index;return Ce.createElement(Ce.Fragment,null,n.__docsearch_parent&&Ce.createElement("svg",{className:"DocSearch-Hit-Tree",viewBox:"0 0 24 54"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},n.__docsearch_parent!==(null===(r=t.items[o+1])||void 0===r?void 0:r.__docsearch_parent)?Ce.createElement("path",{d:"M8 6v21M20 27H8.3"}):Ce.createElement("path",{d:"M8 6v42M20 27H8.3"}))),Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(Ve,{type:n.type})))},renderAction:function(){return Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement($e,null))}}))})),e.resultsFooterComponent&&Ce.createElement("section",{className:"DocSearch-HitsFooter"},Ce.createElement(e.resultsFooterComponent,{state:e.state})))}function ut(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M3.18 6.6a8.23 8.23 0 1112.93 9.94h0a8.23 8.23 0 01-11.63 0"}),Ce.createElement("path",{d:"M6.44 7.25H2.55V3.36M10.45 6v5.6M10.45 11.6L13 13"})))}function ft(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M10 14.2L5 17l1-5.6-4-4 5.5-.7 2.5-5 2.5 5 5.6.8-4 4 .9 5.5z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))}function mt(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M10 10l5.09-5.09L10 10l5.09 5.09L10 10zm0 0L4.91 4.91 10 10l-5.09 5.09L10 10z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}var pt=["translations"];function dt(){return dt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},dt.apply(this,arguments)}function ht(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function vt(e){var t=e.translations,r=void 0===t?{}:t,n=ht(e,pt),o=r.recentSearchesTitle,a=void 0===o?"Recent":o,c=r.noRecentSearchesText,i=void 0===c?"No recent searches":c,l=r.saveRecentSearchButtonTitle,s=void 0===l?"Save this search":l,u=r.removeRecentSearchButtonTitle,f=void 0===u?"Remove this search from history":u,m=r.favoriteSearchesTitle,p=void 0===m?"Favorite":m,d=r.removeFavoriteSearchButtonTitle,h=void 0===d?"Remove this search from favorites":d;return"idle"===n.state.status&&!1===n.hasCollections?n.disableUserPersonalization?null:Ce.createElement("div",{className:"DocSearch-StartScreen"},Ce.createElement("p",{className:"DocSearch-Help"},i)):!1===n.hasCollections?null:Ce.createElement("div",{className:"DocSearch-Dropdown-Container"},Ce.createElement(nt,dt({},n,{title:a,collection:n.state.collections[0],renderIcon:function(){return Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(ut,null))},renderAction:function(e){var t=e.item,r=e.runFavoriteTransition,o=e.runDeleteTransition;return Ce.createElement(Ce.Fragment,null,Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:s,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),r((function(){n.favoriteSearches.add(t),n.recentSearches.remove(t),n.refresh()}))}},Ce.createElement(ft,null))),Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:f,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),o((function(){n.recentSearches.remove(t),n.refresh()}))}},Ce.createElement(mt,null))))}})),Ce.createElement(nt,dt({},n,{title:p,collection:n.state.collections[1],renderIcon:function(){return Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(ft,null))},renderAction:function(e){var t=e.item,r=e.runDeleteTransition;return Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:h,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),r((function(){n.favoriteSearches.remove(t),n.refresh()}))}},Ce.createElement(mt,null)))}})))}var yt=["translations"];function gt(){return gt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},gt.apply(this,arguments)}function bt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var Ot=Ce.memo((function(e){var t=e.translations,r=void 0===t?{}:t,n=bt(e,yt);if("error"===n.state.status)return Ce.createElement(qe,{translations:null==r?void 0:r.errorScreen});var o=n.state.collections.some((function(e){return e.items.length>0}));return n.state.query?!1===o?Ce.createElement(Ue,gt({},n,{translations:null==r?void 0:r.noResultsScreen})):Ce.createElement(st,n):Ce.createElement(vt,gt({},n,{hasCollections:o,translations:null==r?void 0:r.startScreen}))}),(function(e,t){return"loading"===t.state.status||"stalled"===t.state.status}));function St(){return Ce.createElement("svg",{viewBox:"0 0 38 38",stroke:"currentColor",strokeOpacity:".5"},Ce.createElement("g",{fill:"none",fillRule:"evenodd"},Ce.createElement("g",{transform:"translate(1 1)",strokeWidth:"2"},Ce.createElement("circle",{strokeOpacity:".3",cx:"18",cy:"18",r:"18"}),Ce.createElement("path",{d:"M36 18c0-9.94-8.06-18-18-18"},Ce.createElement("animateTransform",{attributeName:"transform",type:"rotate",from:"0 18 18",to:"360 18 18",dur:"1s",repeatCount:"indefinite"})))))}var Et=r(830),jt=["translations"];function wt(){return wt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},wt.apply(this,arguments)}function Pt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function It(e){var t=e.translations,r=void 0===t?{}:t,n=Pt(e,jt),o=r.resetButtonTitle,a=void 0===o?"Clear the query":o,c=r.resetButtonAriaLabel,i=void 0===c?"Clear the query":c,l=r.cancelButtonText,s=void 0===l?"Cancel":l,u=r.cancelButtonAriaLabel,f=void 0===u?"Cancel":u,m=n.getFormProps({inputElement:n.inputRef.current}).onReset;return Ce.useEffect((function(){n.autoFocus&&n.inputRef.current&&n.inputRef.current.focus()}),[n.autoFocus,n.inputRef]),Ce.useEffect((function(){n.isFromSelection&&n.inputRef.current&&n.inputRef.current.select()}),[n.isFromSelection,n.inputRef]),Ce.createElement(Ce.Fragment,null,Ce.createElement("form",{className:"DocSearch-Form",onSubmit:function(e){e.preventDefault()},onReset:m},Ce.createElement("label",wt({className:"DocSearch-MagnifierLabel"},n.getLabelProps()),Ce.createElement(Et.W,null)),Ce.createElement("div",{className:"DocSearch-LoadingIndicator"},Ce.createElement(St,null)),Ce.createElement("input",wt({className:"DocSearch-Input",ref:n.inputRef},n.getInputProps({inputElement:n.inputRef.current,autoFocus:n.autoFocus,maxLength:64}))),Ce.createElement("button",{type:"reset",title:a,className:"DocSearch-Reset","aria-label":i,hidden:!n.state.query},Ce.createElement(mt,null))),Ce.createElement("button",{className:"DocSearch-Cancel",type:"reset","aria-label":f,onClick:n.onClose},s))}var Dt=["_highlightResult","_snippetResult"];function kt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ct(e){return!1===function(){var e="__TEST_KEY__";try{return localStorage.setItem(e,""),localStorage.removeItem(e),!0}catch(t){return!1}}()?{setItem:function(){},getItem:function(){return[]}}:{setItem:function(t){return window.localStorage.setItem(e,JSON.stringify(t))},getItem:function(){var t=window.localStorage.getItem(e);return t?JSON.parse(t):[]}}}function At(e){var t=e.key,r=e.limit,n=void 0===r?5:r,o=Ct(t),a=o.getItem().slice(0,n);return{add:function(e){var t=e,r=(t._highlightResult,t._snippetResult,kt(t,Dt)),c=a.findIndex((function(e){return e.objectID===r.objectID}));c>-1&&a.splice(c,1),a.unshift(r),a=a.slice(0,n),o.setItem(a)},remove:function(e){a=a.filter((function(t){return t.objectID!==e.objectID})),o.setItem(a)},getAll:function(){return a}}}function xt(e){const t=`algoliasearch-client-js-${e.key}`;let r;const n=()=>(void 0===r&&(r=e.localStorage||window.localStorage),r),o=()=>JSON.parse(n().getItem(t)||"{}");return{get:(e,t,r={miss:()=>Promise.resolve()})=>Promise.resolve().then((()=>{const r=JSON.stringify(e),n=o()[r];return Promise.all([n||t(),void 0!==n])})).then((([e,t])=>Promise.all([e,t||r.miss(e)]))).then((([e])=>e)),set:(e,r)=>Promise.resolve().then((()=>{const a=o();return a[JSON.stringify(e)]=r,n().setItem(t,JSON.stringify(a)),r})),delete:e=>Promise.resolve().then((()=>{const r=o();delete r[JSON.stringify(e)],n().setItem(t,JSON.stringify(r))})),clear:()=>Promise.resolve().then((()=>{n().removeItem(t)}))}}function Nt(e){const t=[...e.caches],r=t.shift();return void 0===r?{get:(e,t,r={miss:()=>Promise.resolve()})=>t().then((e=>Promise.all([e,r.miss(e)]))).then((([e])=>e)),set:(e,t)=>Promise.resolve(t),delete:e=>Promise.resolve(),clear:()=>Promise.resolve()}:{get:(e,n,o={miss:()=>Promise.resolve()})=>r.get(e,n,o).catch((()=>Nt({caches:t}).get(e,n,o))),set:(e,n)=>r.set(e,n).catch((()=>Nt({caches:t}).set(e,n))),delete:e=>r.delete(e).catch((()=>Nt({caches:t}).delete(e))),clear:()=>r.clear().catch((()=>Nt({caches:t}).clear()))}}function _t(e={serializable:!0}){let t={};return{get(r,n,o={miss:()=>Promise.resolve()}){const a=JSON.stringify(r);if(a in t)return Promise.resolve(e.serializable?JSON.parse(t[a]):t[a]);const c=n(),i=o&&o.miss||(()=>Promise.resolve());return c.then((e=>i(e))).then((()=>c))},set:(r,n)=>(t[JSON.stringify(r)]=e.serializable?JSON.stringify(n):n,Promise.resolve(n)),delete:e=>(delete t[JSON.stringify(e)],Promise.resolve()),clear:()=>(t={},Promise.resolve())}}function Rt(e){let t=e.length-1;for(;t>0;t--){const r=Math.floor(Math.random()*(t+1)),n=e[t];e[t]=e[r],e[r]=n}return e}function qt(e,t){return t?(Object.keys(t).forEach((r=>{e[r]=t[r](e)})),e):e}function Tt(e,...t){let r=0;return e.replace(/%s/g,(()=>encodeURIComponent(t[r++])))}const Lt="4.15.0",Mt={WithinQueryParameters:0,WithinHeaders:1};function Ht(e,t){const r=e||{},n=r.data||{};return Object.keys(r).forEach((e=>{-1===["timeout","headers","queryParameters","data","cacheable"].indexOf(e)&&(n[e]=r[e])})),{data:Object.entries(n).length>0?n:void 0,timeout:r.timeout||t,headers:r.headers||{},queryParameters:r.queryParameters||{},cacheable:r.cacheable}}const Ft={Read:1,Write:2,Any:3},Ut=1,Bt=2,Vt=3,Kt=12e4;function Jt(e,t=Ut){return{...e,status:t,lastUpdate:Date.now()}}function $t(e){return"string"==typeof e?{protocol:"https",url:e,accept:Ft.Any}:{protocol:e.protocol||"https",url:e.url,accept:e.accept||Ft.Any}}const zt="GET",Wt="POST";function Qt(e,t){return Promise.all(t.map((t=>e.get(t,(()=>Promise.resolve(Jt(t))))))).then((e=>{const r=e.filter((e=>function(e){return e.status===Ut||Date.now()-e.lastUpdate>Kt}(e))),n=e.filter((e=>function(e){return e.status===Vt&&Date.now()-e.lastUpdate<=Kt}(e))),o=[...r,...n];return{getTimeout:(e,t)=>(0===n.length&&0===e?1:n.length+3+e)*t,statelessHosts:o.length>0?o.map((e=>$t(e))):t}}))}function Zt(e,t,r,n){const o=[],a=function(e,t){if(e.method===zt||void 0===e.data&&void 0===t.data)return;const r=Array.isArray(e.data)?e.data:{...e.data,...t.data};return JSON.stringify(r)}(r,n),c=function(e,t){const r={...e.headers,...t.headers},n={};return Object.keys(r).forEach((e=>{const t=r[e];n[e.toLowerCase()]=t})),n}(e,n),i=r.method,l=r.method!==zt?{}:{...r.data,...n.data},s={"x-algolia-agent":e.userAgent.value,...e.queryParameters,...l,...n.queryParameters};let u=0;const f=(t,l)=>{const m=t.pop();if(void 0===m)throw{name:"RetryError",message:"Unreachable hosts - your application id may be incorrect. If the error persists, contact support@algolia.com.",transporterStackTrace:er(o)};const p={data:a,headers:c,method:i,url:Gt(m,r.path,s),connectTimeout:l(u,e.timeouts.connect),responseTimeout:l(u,n.timeout)},d=e=>{const r={request:p,response:e,host:m,triesLeft:t.length};return o.push(r),r},h={onSuccess:e=>function(e){try{return JSON.parse(e.content)}catch(t){throw function(e,t){return{name:"DeserializationError",message:e,response:t}}(t.message,e)}}(e),onRetry(r){const n=d(r);return r.isTimedOut&&u++,Promise.all([e.logger.info("Retryable failure",tr(n)),e.hostsCache.set(m,Jt(m,r.isTimedOut?Vt:Bt))]).then((()=>f(t,l)))},onFail(e){throw d(e),function({content:e,status:t},r){let n=e;try{n=JSON.parse(e).message}catch(o){}return function(e,t,r){return{name:"ApiError",message:e,status:t,transporterStackTrace:r}}(n,t,r)}(e,er(o))}};return e.requester.send(p).then((e=>((e,t)=>(e=>{const t=e.status;return e.isTimedOut||(({isTimedOut:e,status:t})=>!e&&0==~~t)(e)||2!=~~(t/100)&&4!=~~(t/100)})(e)?t.onRetry(e):(({status:e})=>2==~~(e/100))(e)?t.onSuccess(e):t.onFail(e))(e,h)))};return Qt(e.hostsCache,t).then((e=>f([...e.statelessHosts].reverse(),e.getTimeout)))}function Yt(e){const t={value:`Algolia for JavaScript (${e})`,add(e){const r=`; ${e.segment}${void 0!==e.version?` (${e.version})`:""}`;return-1===t.value.indexOf(r)&&(t.value=`${t.value}${r}`),t}};return t}function Gt(e,t,r){const n=Xt(r);let o=`${e.protocol}://${e.url}/${"/"===t.charAt(0)?t.substr(1):t}`;return n.length&&(o+=`?${n}`),o}function Xt(e){return Object.keys(e).map((t=>{return Tt("%s=%s",t,(r=e[t],"[object Object]"===Object.prototype.toString.call(r)||"[object Array]"===Object.prototype.toString.call(r)?JSON.stringify(e[t]):e[t]));var r})).join("&")}function er(e){return e.map((e=>tr(e)))}function tr(e){const t=e.request.headers["x-algolia-api-key"]?{"x-algolia-api-key":"*****"}:{};return{...e,request:{...e.request,headers:{...e.request.headers,...t}}}}const rr=e=>{const t=e.appId,r=function(e,t,r){const n={"x-algolia-api-key":r,"x-algolia-application-id":t};return{headers:()=>e===Mt.WithinHeaders?n:{},queryParameters:()=>e===Mt.WithinQueryParameters?n:{}}}(void 0!==e.authMode?e.authMode:Mt.WithinHeaders,t,e.apiKey),n=function(e){const{hostsCache:t,logger:r,requester:n,requestsCache:o,responsesCache:a,timeouts:c,userAgent:i,hosts:l,queryParameters:s,headers:u}=e,f={hostsCache:t,logger:r,requester:n,requestsCache:o,responsesCache:a,timeouts:c,userAgent:i,headers:u,queryParameters:s,hosts:l.map((e=>$t(e))),read(e,t){const r=Ht(t,f.timeouts.read),n=()=>Zt(f,f.hosts.filter((e=>0!=(e.accept&Ft.Read))),e,r);if(!0!==(void 0!==r.cacheable?r.cacheable:e.cacheable))return n();const o={request:e,mappedRequestOptions:r,transporter:{queryParameters:f.queryParameters,headers:f.headers}};return f.responsesCache.get(o,(()=>f.requestsCache.get(o,(()=>f.requestsCache.set(o,n()).then((e=>Promise.all([f.requestsCache.delete(o),e])),(e=>Promise.all([f.requestsCache.delete(o),Promise.reject(e)]))).then((([e,t])=>t))))),{miss:e=>f.responsesCache.set(o,e)})},write:(e,t)=>Zt(f,f.hosts.filter((e=>0!=(e.accept&Ft.Write))),e,Ht(t,f.timeouts.write))};return f}({hosts:[{url:`${t}-dsn.algolia.net`,accept:Ft.Read},{url:`${t}.algolia.net`,accept:Ft.Write}].concat(Rt([{url:`${t}-1.algolianet.com`},{url:`${t}-2.algolianet.com`},{url:`${t}-3.algolianet.com`}])),...e,headers:{...r.headers(),"content-type":"application/x-www-form-urlencoded",...e.headers},queryParameters:{...r.queryParameters(),...e.queryParameters}}),o={transporter:n,appId:t,addAlgoliaAgent(e,t){n.userAgent.add({segment:e,version:t})},clearCache:()=>Promise.all([n.requestsCache.clear(),n.responsesCache.clear()]).then((()=>{}))};return qt(o,e.methods)},nr=e=>(t,r)=>t.method===zt?e.transporter.read(t,r):e.transporter.write(t,r),or=e=>(t,r={})=>qt({transporter:e.transporter,appId:e.appId,indexName:t},r.methods),ar=e=>(t,r)=>{const n=t.map((e=>({...e,params:Xt(e.params||{})})));return e.transporter.read({method:Wt,path:"1/indexes/*/queries",data:{requests:n},cacheable:!0},r)},cr=e=>(t,r)=>Promise.all(t.map((t=>{const{facetName:n,facetQuery:o,...a}=t.params;return or(e)(t.indexName,{methods:{searchForFacetValues:sr}}).searchForFacetValues(n,o,{...r,...a})}))),ir=e=>(t,r,n)=>e.transporter.read({method:Wt,path:Tt("1/answers/%s/prediction",e.indexName),data:{query:t,queryLanguages:r},cacheable:!0},n),lr=e=>(t,r)=>e.transporter.read({method:Wt,path:Tt("1/indexes/%s/query",e.indexName),data:{query:t},cacheable:!0},r),sr=e=>(t,r,n)=>e.transporter.read({method:Wt,path:Tt("1/indexes/%s/facets/%s/query",e.indexName,t),data:{facetQuery:r},cacheable:!0},n),ur=1,fr=2,mr=3;function pr(e,t,r){const n={appId:e,apiKey:t,timeouts:{connect:1,read:2,write:30},requester:{send:e=>new Promise((t=>{const r=new XMLHttpRequest;r.open(e.method,e.url,!0),Object.keys(e.headers).forEach((t=>r.setRequestHeader(t,e.headers[t])));const n=(e,n)=>setTimeout((()=>{r.abort(),t({status:0,content:n,isTimedOut:!0})}),1e3*e),o=n(e.connectTimeout,"Connection timeout");let a;r.onreadystatechange=()=>{r.readyState>r.OPENED&&void 0===a&&(clearTimeout(o),a=n(e.responseTimeout,"Socket timeout"))},r.onerror=()=>{0===r.status&&(clearTimeout(o),clearTimeout(a),t({content:r.responseText||"Network request failed",status:r.status,isTimedOut:!1}))},r.onload=()=>{clearTimeout(o),clearTimeout(a),t({content:r.responseText,status:r.status,isTimedOut:!1})},r.send(e.data)}))},logger:(o=mr,{debug:(e,t)=>(ur>=o&&console.debug(e,t),Promise.resolve()),info:(e,t)=>(fr>=o&&console.info(e,t),Promise.resolve()),error:(e,t)=>(console.error(e,t),Promise.resolve())}),responsesCache:_t(),requestsCache:_t({serializable:!1}),hostsCache:Nt({caches:[xt({key:`4.15.0-${e}`}),_t()]}),userAgent:Yt(Lt).add({segment:"Browser",version:"lite"}),authMode:Mt.WithinQueryParameters};var o;return rr({...n,...r,methods:{search:ar,searchForFacetValues:cr,multipleQueries:ar,multipleSearchForFacetValues:cr,customRequest:nr,initIndex:e=>t=>or(e)(t,{methods:{search:lr,searchForFacetValues:sr,findAnswers:ir}})}})}pr.version=Lt;const dr=pr;var hr="3.3.3";function vr(){}function yr(e){return e}function gr(e,t){return e.reduce((function(e,r){var n=t(r);return e.hasOwnProperty(n)||(e[n]=[]),e[n].length<5&&e[n].push(r),e}),{})}var br=["footer","searchBox"];function Or(){return Or=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},Or.apply(this,arguments)}function Sr(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Er(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Sr(Object(r),!0).forEach((function(t){jr(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Sr(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function jr(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function wr(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==r)return;var n,o,a=[],c=!0,i=!1;try{for(r=r.call(e);!(c=(n=r.next()).done)&&(a.push(n.value),!t||a.length!==t);c=!0);}catch(l){i=!0,o=l}finally{try{c||null==r.return||r.return()}finally{if(i)throw o}}return a}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return Pr(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return Pr(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function Pr(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function Ir(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Dr(e){var t=e.appId,r=e.apiKey,n=e.indexName,o=e.placeholder,a=void 0===o?"Search docs":o,c=e.searchParameters,i=e.onClose,l=void 0===i?vr:i,s=e.transformItems,u=void 0===s?yr:s,f=e.hitComponent,m=void 0===f?_e:f,p=e.resultsFooterComponent,d=void 0===p?function(){return null}:p,h=e.navigator,v=e.initialScrollY,y=void 0===v?0:v,g=e.transformSearchClient,b=void 0===g?yr:g,O=e.disableUserPersonalization,S=void 0!==O&&O,E=e.initialQuery,j=void 0===E?"":E,w=e.translations,P=void 0===w?{}:w,I=e.getMissingResultsUrl,D=P.footer,k=P.searchBox,C=Ir(P,br),A=wr(Ce.useState({query:"",collections:[],completion:null,context:{},isOpen:!1,activeItemId:null,status:"idle"}),2),x=A[0],N=A[1],_=Ce.useRef(null),R=Ce.useRef(null),q=Ce.useRef(null),T=Ce.useRef(null),L=Ce.useRef(null),M=Ce.useRef(10),H=Ce.useRef("undefined"!=typeof window?window.getSelection().toString().slice(0,64):"").current,F=Ce.useRef(j||H).current,U=function(e,t,r){return Ce.useMemo((function(){var n=dr(e,t);return n.addAlgoliaAgent("docsearch",hr),!1===/docsearch.js \(.*\)/.test(n.transporter.userAgent.value)&&n.addAlgoliaAgent("docsearch-react",hr),r(n)}),[e,t,r])}(t,r,b),B=Ce.useRef(At({key:"__DOCSEARCH_FAVORITE_SEARCHES__".concat(n),limit:10})).current,V=Ce.useRef(At({key:"__DOCSEARCH_RECENT_SEARCHES__".concat(n),limit:0===B.getAll().length?7:4})).current,K=Ce.useCallback((function(e){if(!S){var t="content"===e.type?e.__docsearch_parent:e;t&&-1===B.getAll().findIndex((function(e){return e.objectID===t.objectID}))&&V.add(t)}}),[B,V,S]),J=Ce.useMemo((function(){return ke({id:"docsearch",defaultActiveItemId:0,placeholder:a,openOnFocus:!0,initialState:{query:F,context:{searchSuggestions:[]}},navigator:h,onStateChange:function(e){N(e.state)},getSources:function(e){var t=e.query,r=e.state,o=e.setContext,a=e.setStatus;return t?U.search([{query:t,indexName:n,params:Er({attributesToRetrieve:["hierarchy.lvl0","hierarchy.lvl1","hierarchy.lvl2","hierarchy.lvl3","hierarchy.lvl4","hierarchy.lvl5","hierarchy.lvl6","content","type","url"],attributesToSnippet:["hierarchy.lvl1:".concat(M.current),"hierarchy.lvl2:".concat(M.current),"hierarchy.lvl3:".concat(M.current),"hierarchy.lvl4:".concat(M.current),"hierarchy.lvl5:".concat(M.current),"hierarchy.lvl6:".concat(M.current),"content:".concat(M.current)],snippetEllipsisText:"\u2026",highlightPreTag:"<mark>",highlightPostTag:"</mark>",hitsPerPage:20},c)}]).catch((function(e){throw"RetryError"===e.name&&a("error"),e})).then((function(e){var t=e.results[0],n=t.hits,a=t.nbHits,c=gr(n,(function(e){return it(e)}));return r.context.searchSuggestions.length<Object.keys(c).length&&o({searchSuggestions:Object.keys(c)}),o({nbHits:a}),Object.values(c).map((function(e,t){return{sourceId:"hits".concat(t),onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return Object.values(gr(e,(function(e){return e.hierarchy.lvl1}))).map(u).map((function(e){return e.map((function(t){return Er(Er({},t),{},{__docsearch_parent:"lvl1"!==t.type&&e.find((function(e){return"lvl1"===e.type&&e.hierarchy.lvl1===t.hierarchy.lvl1}))})}))})).flat()}}}))})):S?[]:[{sourceId:"recentSearches",onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return V.getAll()}},{sourceId:"favoriteSearches",onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return B.getAll()}}]}})}),[n,c,U,l,V,B,K,F,a,h,u,S]),$=J.getEnvironmentProps,z=J.getRootProps,W=J.refresh;return function(e){var t=e.getEnvironmentProps,r=e.panelElement,n=e.formElement,o=e.inputElement;Ce.useEffect((function(){if(r&&n&&o){var e=t({panelElement:r,formElement:n,inputElement:o}),a=e.onTouchStart,c=e.onTouchMove;return window.addEventListener("touchstart",a),window.addEventListener("touchmove",c),function(){window.removeEventListener("touchstart",a),window.removeEventListener("touchmove",c)}}}),[t,r,n,o])}({getEnvironmentProps:$,panelElement:T.current,formElement:q.current,inputElement:L.current}),function(e){var t=e.container;Ce.useEffect((function(){if(t){var e=t.querySelectorAll("a[href]:not([disabled]), button:not([disabled]), input:not([disabled])"),r=e[0],n=e[e.length-1];return t.addEventListener("keydown",o),function(){t.removeEventListener("keydown",o)}}function o(e){"Tab"===e.key&&(e.shiftKey?document.activeElement===r&&(e.preventDefault(),n.focus()):document.activeElement===n&&(e.preventDefault(),r.focus()))}}),[t])}({container:_.current}),Ce.useEffect((function(){return document.body.classList.add("DocSearch--active"),function(){var e,t;document.body.classList.remove("DocSearch--active"),null===(e=(t=window).scrollTo)||void 0===e||e.call(t,0,y)}}),[]),Ce.useEffect((function(){window.matchMedia("(max-width: 768px)").matches&&(M.current=5)}),[]),Ce.useEffect((function(){T.current&&(T.current.scrollTop=0)}),[x.query]),Ce.useEffect((function(){F.length>0&&(W(),L.current&&L.current.focus())}),[F,W]),Ce.useEffect((function(){function e(){if(R.current){var e=.01*window.innerHeight;R.current.style.setProperty("--docsearch-vh","".concat(e,"px"))}}return e(),window.addEventListener("resize",e),function(){window.removeEventListener("resize",e)}}),[]),Ce.createElement("div",Or({ref:_},z({"aria-expanded":!0}),{className:["DocSearch","DocSearch-Container","stalled"===x.status&&"DocSearch-Container--Stalled","error"===x.status&&"DocSearch-Container--Errored"].filter(Boolean).join(" "),role:"button",tabIndex:0,onMouseDown:function(e){e.target===e.currentTarget&&l()}}),Ce.createElement("div",{className:"DocSearch-Modal",ref:R},Ce.createElement("header",{className:"DocSearch-SearchBar",ref:q},Ce.createElement(It,Or({},J,{state:x,autoFocus:0===F.length,inputRef:L,isFromSelection:Boolean(F)&&F===H,translations:k,onClose:l}))),Ce.createElement("div",{className:"DocSearch-Dropdown",ref:T},Ce.createElement(Ot,Or({},J,{indexName:n,state:x,hitComponent:m,resultsFooterComponent:d,disableUserPersonalization:S,recentSearches:V,favoriteSearches:B,inputRef:L,translations:C,getMissingResultsUrl:I,onItemClick:function(e){K(e),l()}}))),Ce.createElement("footer",{className:"DocSearch-Footer"},Ce.createElement(Ne,{translations:D}))))}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/6945.a46579e2.js b/kr/assets/js/6945.a46579e2.js
deleted file mode 100644
index f4f3153e0..000000000
--- a/kr/assets/js/6945.a46579e2.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6945],{6945:(s,k,_)=>{_.r(k)}}]);
\ No newline at end of file
diff --git a/kr/assets/js/6a7149bd.b8d6086f.js b/kr/assets/js/6a7149bd.5223e975.js
similarity index 99%
rename from kr/assets/js/6a7149bd.b8d6086f.js
rename to kr/assets/js/6a7149bd.5223e975.js
index 6dd44662d..5bad6f160 100644
--- a/kr/assets/js/6a7149bd.b8d6086f.js
+++ b/kr/assets/js/6a7149bd.5223e975.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1894],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>h});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),d=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=d(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},p=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),p=d(n),h=r,m=p["".concat(l,".").concat(h)]||p[h]||c[h]||o;return n?a.createElement(m,i(i({ref:t},u),{},{components:n})):a.createElement(m,i({ref:t},u))}));function h(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=p;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var d=2;d<o;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}p.displayName="MDXCreateElement"},8160:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>c,frontMatter:()=>o,metadata:()=>s,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const o={title:"High Availability External DB",weight:30},i=void 0,s={unversionedId:"datastore/ha",id:"datastore/ha",title:"High Availability External DB",description:"Note: Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha.md",sourceDirName:"datastore",slug:"/datastore/ha",permalink:"/kr/datastore/ha",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"High Availability External DB",weight:30},sidebar:"mySidebar",previous:{title:"High Availability Embedded etcd",permalink:"/kr/datastore/ha-embedded"},next:{title:"cluster-loadbalancer",permalink:"/kr/datastore/cluster-loadbalancer"}},l={},d=[{value:"Installation Outline",id:"installation-outline",level:2},{value:"1. Create an External Datastore",id:"1-create-an-external-datastore",level:3},{value:"2. Launch Server Nodes",id:"2-launch-server-nodes",level:3},{value:"3. Configure the Fixed Registration Address",id:"3-configure-the-fixed-registration-address",level:3},{value:"4. Optional: Join Additional Server Nodes",id:"4-optional-join-additional-server-nodes",level:3},{value:"5. Optional: Join Agent Nodes",id:"5-optional-join-agent-nodes",level:3}],u={toc:d};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release.")),(0,r.kt)("p",null,"This section describes how to install a high-availability K3s cluster with an external database."),(0,r.kt)("p",null,"Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is comprised of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Two or more ",(0,r.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,r.kt)("li",{parentName:"ul"},"Zero or more ",(0,r.kt)("strong",{parentName:"li"},"agent nodes")," that are designated to run your apps and services"),(0,r.kt)("li",{parentName:"ul"},"An ",(0,r.kt)("strong",{parentName:"li"},"external datastore")," (as opposed to the embedded SQLite datastore used in single-server setups)"),(0,r.kt)("li",{parentName:"ul"},"A ",(0,r.kt)("strong",{parentName:"li"},"fixed registration address")," that is placed in front of the server nodes to allow agent nodes to register with the cluster")),(0,r.kt)("p",null,"For more details on how these components work together, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/kr/architecture/#high-availability-k3s-server-with-an-external-db"},"architecture section.")),(0,r.kt)("p",null,"Agents register through the fixed registration address, but after registration they establish a connection directly to one of the server nodes. This is a websocket connection initiated by the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s agent")," process, it is maintained by a client-side load balancer running as part of the agent process."),(0,r.kt)("h2",{id:"installation-outline"},"Installation Outline"),(0,r.kt)("p",null,"Setting up an HA cluster requires the following steps:"),(0,r.kt)("h3",{id:"1-create-an-external-datastore"},"1. Create an External Datastore"),(0,r.kt)("p",null,"You will first need to create an external datastore for the cluster. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/"},"Cluster Datastore Options")," documentation for more details."),(0,r.kt)("h3",{id:"2-launch-server-nodes"},"2. Launch Server Nodes"),(0,r.kt)("p",null,"K3s requires two or more server nodes for this HA configuration. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/requirements"},"Requirements")," guide for minimum machine requirements."),(0,r.kt)("p",null,"When running the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," command on these nodes, you must set the ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter so that K3s knows how to connect to the external datastore. The ",(0,r.kt)("inlineCode",{parentName:"p"},"token")," parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use."),(0,r.kt)("p",null,"For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/server#cluster-options"},"set a token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,r.kt)("p",null,"The datastore endpoint format differs based on the database type. For details, refer to the section on ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/#datastore-endpoint-format-and-functionality"},"datastore endpoint formats.")),(0,r.kt)("p",null,"To configure TLS certificates when launching server nodes, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/#external-datastore-configuration-parameters"},"datastore configuration guide.")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The same installation options available to single-server installs are also available for high-availability installs. For more details, see the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration"},"Configuration Options")," documentation.")),(0,r.kt)("p",null,"By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The ",(0,r.kt)("inlineCode",{parentName:"p"},"node-taint")," parameter will allow you to configure nodes with taints, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint CriticalAddonsOnly=true:NoExecute"),"."),(0,r.kt)("p",null,"Once you've launched the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," process on all server nodes, ensure that the cluster has come up properly with ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s kubectl get nodes"),". You should see your server nodes in the Ready state."),(0,r.kt)("h3",{id:"3-configure-the-fixed-registration-address"},"3. Configure the Fixed Registration Address"),(0,r.kt)("p",null,"Agent nodes need a URL to register against. This can be the IP or hostname of any of the server nodes, but in many cases those may change over time. For example, if you are running your cluster in a cloud that supports scaling groups, you may scale the server node group up and down over time, causing nodes to be created and destroyed and thus having different IPs from the initial set of server nodes. Therefore, you should have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"A layer-4 (TCP) load balancer"),(0,r.kt)("li",{parentName:"ul"},"Round-robin DNS"),(0,r.kt)("li",{parentName:"ul"},"Virtual or elastic IP addresses")),(0,r.kt)("p",null,"This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," file to point to it instead of a specific node. To avoid certificate errors in such a configuration, you should install the server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--tls-san YOUR_IP_OR_HOSTNAME_HERE")," option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname."),(0,r.kt)("h3",{id:"4-optional-join-additional-server-nodes"},"4. Optional: Join Additional Server Nodes"),(0,r.kt)("p",null,"The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used."),(0,r.kt)("p",null,"If the first server node was started without the ",(0,r.kt)("inlineCode",{parentName:"p"},"--token")," CLI flag or ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," variable, the token value can be retrieved from any server already joined to the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,r.kt)("p",null,"Additional server nodes can then be added ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/server#cluster-options"},"using the token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,r.kt)("p",null,"There are a few config flags that must be the same in all server nodes:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Network related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,r.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable")),(0,r.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.")),(0,r.kt)("h3",{id:"5-optional-join-agent-nodes"},"5. Optional: Join Agent Nodes"),(0,r.kt)("p",null,"Because K3s server nodes are schedulable by default, the minimum number of nodes for an HA K3s server cluster is two server nodes and zero agent nodes. To add nodes designated to run your apps and services, join agent nodes to your cluster."),(0,r.kt)("p",null,"Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to and the token it should use."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"K3S_TOKEN=SECRET k3s agent --server https://fixed-registration-address:6443\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1894],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>h});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var l=a.createContext({}),d=function(e){var t=a.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=d(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},p=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,l=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),p=d(n),h=r,m=p["".concat(l,".").concat(h)]||p[h]||c[h]||o;return n?a.createElement(m,i(i({ref:t},u),{},{components:n})):a.createElement(m,i({ref:t},u))}));function h(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,i=new Array(o);i[0]=p;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var d=2;d<o;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}p.displayName="MDXCreateElement"},8160:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>c,frontMatter:()=>o,metadata:()=>s,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const o={title:"High Availability External DB",weight:30},i=void 0,s={unversionedId:"datastore/ha",id:"datastore/ha",title:"High Availability External DB",description:"Note: Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha.md",sourceDirName:"datastore",slug:"/datastore/ha",permalink:"/kr/datastore/ha",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"High Availability External DB",weight:30},sidebar:"mySidebar",previous:{title:"High Availability Embedded etcd",permalink:"/kr/datastore/ha-embedded"},next:{title:"cluster-loadbalancer",permalink:"/kr/datastore/cluster-loadbalancer"}},l={},d=[{value:"Installation Outline",id:"installation-outline",level:2},{value:"1. Create an External Datastore",id:"1-create-an-external-datastore",level:3},{value:"2. Launch Server Nodes",id:"2-launch-server-nodes",level:3},{value:"3. Configure the Fixed Registration Address",id:"3-configure-the-fixed-registration-address",level:3},{value:"4. Optional: Join Additional Server Nodes",id:"4-optional-join-additional-server-nodes",level:3},{value:"5. Optional: Join Agent Nodes",id:"5-optional-join-agent-nodes",level:3}],u={toc:d};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release.")),(0,r.kt)("p",null,"This section describes how to install a high-availability K3s cluster with an external database."),(0,r.kt)("p",null,"Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is comprised of:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Two or more ",(0,r.kt)("strong",{parentName:"li"},"server nodes")," that will serve the Kubernetes API and run other control plane services"),(0,r.kt)("li",{parentName:"ul"},"Zero or more ",(0,r.kt)("strong",{parentName:"li"},"agent nodes")," that are designated to run your apps and services"),(0,r.kt)("li",{parentName:"ul"},"An ",(0,r.kt)("strong",{parentName:"li"},"external datastore")," (as opposed to the embedded SQLite datastore used in single-server setups)"),(0,r.kt)("li",{parentName:"ul"},"A ",(0,r.kt)("strong",{parentName:"li"},"fixed registration address")," that is placed in front of the server nodes to allow agent nodes to register with the cluster")),(0,r.kt)("p",null,"For more details on how these components work together, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/kr/architecture/#high-availability-k3s-server-with-an-external-db"},"architecture section.")),(0,r.kt)("p",null,"Agents register through the fixed registration address, but after registration they establish a connection directly to one of the server nodes. This is a websocket connection initiated by the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s agent")," process, it is maintained by a client-side load balancer running as part of the agent process."),(0,r.kt)("h2",{id:"installation-outline"},"Installation Outline"),(0,r.kt)("p",null,"Setting up an HA cluster requires the following steps:"),(0,r.kt)("h3",{id:"1-create-an-external-datastore"},"1. Create an External Datastore"),(0,r.kt)("p",null,"You will first need to create an external datastore for the cluster. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/"},"Cluster Datastore Options")," documentation for more details."),(0,r.kt)("h3",{id:"2-launch-server-nodes"},"2. Launch Server Nodes"),(0,r.kt)("p",null,"K3s requires two or more server nodes for this HA configuration. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/requirements"},"Requirements")," guide for minimum machine requirements."),(0,r.kt)("p",null,"When running the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," command on these nodes, you must set the ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," parameter so that K3s knows how to connect to the external datastore. The ",(0,r.kt)("inlineCode",{parentName:"p"},"token")," parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use."),(0,r.kt)("p",null,"For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/server#cluster-options"},"set a token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,r.kt)("p",null,"The datastore endpoint format differs based on the database type. For details, refer to the section on ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/#datastore-endpoint-format-and-functionality"},"datastore endpoint formats.")),(0,r.kt)("p",null,"To configure TLS certificates when launching server nodes, refer to the ",(0,r.kt)("a",{parentName:"p",href:"/kr/datastore/#external-datastore-configuration-parameters"},"datastore configuration guide.")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The same installation options available to single-server installs are also available for high-availability installs. For more details, see the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration"},"Configuration Options")," documentation.")),(0,r.kt)("p",null,"By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The ",(0,r.kt)("inlineCode",{parentName:"p"},"node-taint")," parameter will allow you to configure nodes with taints, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint CriticalAddonsOnly=true:NoExecute"),"."),(0,r.kt)("p",null,"Once you've launched the ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server")," process on all server nodes, ensure that the cluster has come up properly with ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s kubectl get nodes"),". You should see your server nodes in the Ready state."),(0,r.kt)("h3",{id:"3-configure-the-fixed-registration-address"},"3. Configure the Fixed Registration Address"),(0,r.kt)("p",null,"Agent nodes need a URL to register against. This can be the IP or hostname of any of the server nodes, but in many cases those may change over time. For example, if you are running your cluster in a cloud that supports scaling groups, you may scale the server node group up and down over time, causing nodes to be created and destroyed and thus having different IPs from the initial set of server nodes. Therefore, you should have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"A layer-4 (TCP) load balancer"),(0,r.kt)("li",{parentName:"ul"},"Round-robin DNS"),(0,r.kt)("li",{parentName:"ul"},"Virtual or elastic IP addresses")),(0,r.kt)("p",null,"This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," file to point to it instead of a specific node. To avoid certificate errors in such a configuration, you should install the server with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--tls-san YOUR_IP_OR_HOSTNAME_HERE")," option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname."),(0,r.kt)("h3",{id:"4-optional-join-additional-server-nodes"},"4. Optional: Join Additional Server Nodes"),(0,r.kt)("p",null,"The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used."),(0,r.kt)("p",null,"If the first server node was started without the ",(0,r.kt)("inlineCode",{parentName:"p"},"--token")," CLI flag or ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," variable, the token value can be retrieved from any server already joined to the cluster:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,r.kt)("p",null,"Additional server nodes can then be added ",(0,r.kt)("a",{parentName:"p",href:"/kr/cli/server#cluster-options"},"using the token"),":"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,r.kt)("p",null,"There are a few config flags that must be the same in all server nodes:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"Network related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,r.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,r.kt)("inlineCode",{parentName:"li"},"--disable")),(0,r.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,r.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.")),(0,r.kt)("h3",{id:"5-optional-join-agent-nodes"},"5. Optional: Join Agent Nodes"),(0,r.kt)("p",null,"Because K3s server nodes are schedulable by default, the minimum number of nodes for an HA K3s server cluster is two server nodes and zero agent nodes. To add nodes designated to run your apps and services, join agent nodes to your cluster."),(0,r.kt)("p",null,"Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to and the token it should use."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"K3S_TOKEN=SECRET k3s agent --server https://fixed-registration-address:6443\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/7461830d.bfbf9d1d.js b/kr/assets/js/7461830d.b7f57052.js
similarity index 99%
rename from kr/assets/js/7461830d.bfbf9d1d.js
rename to kr/assets/js/7461830d.b7f57052.js
index 7eb750643..a0ef1d25f 100644
--- a/kr/assets/js/7461830d.bfbf9d1d.js
+++ b/kr/assets/js/7461830d.b7f57052.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1208],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var n=r(7294);function s(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,s=function(e,t){if(null==e)return{};var r,n,s={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(s[r]=e[r]);return s}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(s[r]=e[r])}return s}var l=n.createContext({}),c=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,s=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(r),k=s,m=d["".concat(l,".").concat(k)]||d[k]||p[k]||i;return r?n.createElement(m,a(a({ref:t},u),{},{components:r})):n.createElement(m,a({ref:t},u))}));function k(e,t){var r=arguments,s=t&&t.mdxType;if("string"==typeof e||s){var i=r.length,a=new Array(i);a[0]=d;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:s,a[1]=o;for(var c=2;c<i;c++)a[c]=r[c];return n.createElement.apply(null,a)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5720:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>a,default:()=>p,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var n=r(3117),s=(r(7294),r(3905));const i={title:"\uc54c\ub824\uc9c4 \uc774\uc288",weight:70},a=void 0,o={unversionedId:"known-issues/known-issues",id:"known-issues/known-issues",title:"\uc54c\ub824\uc9c4 \uc774\uc288",description:"\uc54c\ub824\uc9c4 \uc774\uc288\ub294 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \ub2e4\uc74c \ub9b4\ub9ac\uc2a4\uc5d0\uc11c \uc989\uc2dc \ud574\uacb0\ub418\uc9c0 \uc54a\uc744 \uc218 \uc788\ub294 \ubb38\uc81c\uc5d0 \ub300\ud574 \uc54c\ub824\ub4dc\ub9ac\uae30 \uc704\ud574 \uace0\uc548\ub418\uc5c8\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",sourceDirName:"known-issues",slug:"/known-issues/",permalink:"/kr/known-issues/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\uc54c\ub824\uc9c4 \uc774\uc288",weight:70},sidebar:"mySidebar",previous:{title:"Resource Profiling",permalink:"/kr/reference/resource-profiling"},next:{title:"\ubcf4\uc548",permalink:"/kr/security/"}},l={},c=[{value:"\uc2a4\ub0c5(Snap) \ub3c4\ucee4",id:"\uc2a4\ub0c5snap-\ub3c4\ucee4",level:3},{value:"Iptables",id:"iptables",level:3},{value:"Rootless Mode",id:"rootless-mode",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,s.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,s.kt)("p",null,"\uc54c\ub824\uc9c4 \uc774\uc288\ub294 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \ub2e4\uc74c \ub9b4\ub9ac\uc2a4\uc5d0\uc11c \uc989\uc2dc \ud574\uacb0\ub418\uc9c0 \uc54a\uc744 \uc218 \uc788\ub294 \ubb38\uc81c\uc5d0 \ub300\ud574 \uc54c\ub824\ub4dc\ub9ac\uae30 \uc704\ud574 \uace0\uc548\ub418\uc5c8\uc2b5\ub2c8\ub2e4."),(0,s.kt)("h3",{id:"\uc2a4\ub0c5snap-\ub3c4\ucee4"},"\uc2a4\ub0c5(Snap) \ub3c4\ucee4"),(0,s.kt)("p",null,"\uc2a4\ub0c5(Snap) \ud328\ud0a4\uc9c0\ub97c \ud1b5\ud574 \uc124\uce58\ub41c \ub3c4\ucee4\ub294 K3s\ub97c \uc2e4\ud589\ud558\ub294 \ub370 \ubb38\uc81c\ub97c \uc77c\uc73c\ud0a4\ub294 \uac83\uc73c\ub85c \uc54c\ub824\uc838 \uc788\uc73c\ubbc0\ub85c K3s\uc640 \ud568\uaed8 \uc0ac\uc6a9\ud558\ub824\ub294 \uacbd\uc6b0 \uad8c\uc7a5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4."),(0,s.kt)("h3",{id:"iptables"},"Iptables"),(0,s.kt)("p",null,"\ub808\uac70\uc2dc \ub300\uc2e0 nftables \ubaa8\ub4dc\uc5d0\uc11c iptables\ub97c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ubb38\uc81c\ub97c \ubc29\uc9c0\ud558\ub824\uba74 \ucd5c\uc2e0 \ubc84\uc804(\uc608: 1.6.1+)\uc758 iptables\ub97c \uc0ac\uc6a9\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4."),(0,s.kt)("p",null,"\ub610\ud55c 1.8.0-1.8.4 \ubc84\uc804\uc5d0\ub294 K3s\uac00 \uc2e4\ud328\ud560 \uc218 \uc788\ub294 \uc54c\ub824\uc9c4 \ubb38\uc81c\uac00 \uc788\uc2b5\ub2c8\ub2e4. \ud574\uacb0 \ubc29\ubc95\uc740 ",(0,s.kt)("a",{parentName:"p",href:"/kr/advanced/#old-iptables-versions"},"\ucd94\uac00 OS \uc900\ube44"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,s.kt)("h3",{id:"rootless-mode"},"Rootless Mode"),(0,s.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\ub85c K3s\ub97c \uc2e4\ud589\ud558\ub294 \uac83\uc740 \uc2e4\ud5d8 \uc911\uc774\uba70 \uba87 \uac00\uc9c0 ",(0,s.kt)("a",{parentName:"p",href:"/kr/advanced/#known-issues-with-rootless-mode"},"\uc54c\ub824\uc9c4 \uc774\uc288"),"\uac00 \uc788\uc2b5\ub2c8\ub2e4."),(0,s.kt)("h1",{id:"\uac15\ud654\ub41chardened-\ud074\ub7ec\uc2a4\ud130\ub97c-v124x\uc5d0\uc11c-v125x\ub85c-\uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"},"\uac15\ud654\ub41c(Hardened) \ud074\ub7ec\uc2a4\ud130\ub97c v1.24.x\uc5d0\uc11c v1.25.x\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"),(0,s.kt)("p",null,"\ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ud30c\ub4dc \ubcf4\uc548 \ud45c\uc900(PSS, Pod Security Standards)\uc744 \uc704\ud574 v1.25\uc5d0\uc11c PodSecurityPolicy\ub97c \uc81c\uac70\ud588\uc2b5\ub2c8\ub2e4. PSS\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,s.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/security/pod-security-standards/"},"\uc5c5\uc2a4\ud2b8\ub9bc \ubb38\uc11c"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. K3S\uc758 \uacbd\uc6b0, \ub178\ub4dc\uc5d0 'PodSecurityPolicy'\uac00 \uad6c\uc131\ub41c \uacbd\uc6b0 \uc218\ud589\ud574\uc57c \ud558\ub294 \uba87 \uac00\uc9c0 \uc218\ub3d9 \ub2e8\uacc4\uac00 \uc788\uc2b5\ub2c8\ub2e4."),(0,s.kt)("ol",null,(0,s.kt)("li",{parentName:"ol"},"\ubaa8\ub4e0 \ub178\ub4dc\uc5d0\uc11c ",(0,s.kt)("inlineCode",{parentName:"li"},"kube-apiserver-arg")," \uac12\uc744 \uc5c5\ub370\uc774\ud2b8\ud558\uc5ec ",(0,s.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicy")," \uc5b4\ub4dc\ubbf8\uc158 \ud50c\ub7ec\uadf8\uc778\uc744 \uc81c\uac70\ud569\ub2c8\ub2e4. \ub300\uc2e0 \ub2e4\uc74c arg \uac12\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4: ",(0,s.kt)("inlineCode",{parentName:"li"},"'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'")," \uc774\uc9c0\ub9cc, \uc544\uc9c1 K3S\ub97c \uc7ac\uc2dc\uc791\ud558\uac70\ub098 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uc9c0 \ub9c8\uc2ed\uc2dc\uc624. \uc544\ub798\ub294 \ub178\ub4dc\ub97c \uac15\ud654\ud55c \ud6c4 \uad6c\uc131 \ud30c\uc77c\uc758 \uc608\uc2dc\uc785\ub2c8\ub2e4.")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-yaml"},'protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - "admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n  - "audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log"\n  - "audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml"\n  - "audit-log-maxage=30"\n  - "audit-log-maxbackup=10"\n  - "audit-log-maxsize=100"\n  - "request-timeout=300s"\n  - "service-account-lookup=true"\nkube-controller-manager-arg:\n  - "terminated-pod-gc-threshold=10"\n  - "use-service-account-credentials=true"\nkubelet-arg:\n  - "streaming-connection-idle-timeout=5m"\n  - "make-iptables-util-chains=true"\n')),(0,s.kt)("ol",{start:2},(0,s.kt)("li",{parentName:"ol"},(0,s.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/psa.yaml")," \ud30c\uc77c\uc744 \ub2e4\uc74c \ub0b4\uc6a9\uc73c\ub85c \uc791\uc131\ud569\ub2c8\ub2e4. \ub354 \ub9ce\uc740 \ub124\uc784\uc2a4\ud398\uc774\uc2a4\ub97c \uc81c\uc678\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc544\ub798 \uc608\uc2dc\ub294 ",(0,s.kt)("inlineCode",{parentName:"li"},"kube-system"),"(\ud544\uc218), ",(0,s.kt)("inlineCode",{parentName:"li"},"cis-operator-system"),"(\uc120\ud0dd\uc801\uc774\uc9c0\ub9cc Rancher\ub97c \ud1b5\ud574 \ubcf4\uc548 \uc2a4\uce94\uc744 \uc2e4\ud589\ud560 \ub54c \uc720\uc6a9), ",(0,s.kt)("inlineCode",{parentName:"li"},"system-upgrade"),"(\uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc218\ud589\ud558\ub294 \uacbd\uc6b0 \ud544\uc218)\uc744 \uc81c\uc678\ud569\ub2c8\ub2e4.")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n  - name: PodSecurity\n    configuration:\n      apiVersion: pod-security.admission.config.k8s.io/v1beta1\n      kind: PodSecurityConfiguration\n      defaults:\n        enforce: "restricted"\n        enforce-version: "latest"\n        audit: "restricted"\n        audit-version: "latest"\n        warn: "restricted"\n        warn-version: "latest"\n      exemptions:\n        usernames: []\n        runtimeClasses: []\n        namespaces: [kube-system, cis-operator-system, system-upgrade]\n')),(0,s.kt)("ol",{start:3},(0,s.kt)("li",{parentName:"ol"},"\uc77c\ubc18\uc801\uc73c\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc218\ud589\ud569\ub2c8\ub2e4. ",(0,s.kt)("a",{parentName:"li",href:"/kr/upgrades/automated"},"\uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc"),"\ub97c \uc218\ud589\ud558\ub294 \uacbd\uc6b0 ",(0,s.kt)("inlineCode",{parentName:"li"},"system-upgrade-controller"),"\uac00 \uc2e4\ud589\ub418\ub294 \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uac00 ",(0,s.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels"},"\ud30c\ub4dc \ubcf4\uc548 \uc218\uc900"),"\uc5d0 \ub530\ub77c \uad8c\ud55c\uc774 \ubd80\uc5ec\ub41c \uac83\uc73c\ub85c \uc124\uc815\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: system-upgrade\n  labels:\n    # This value must be privileged for the controller to run successfully.\n    pod-security.kubernetes.io/enforce: privileged\n    pod-security.kubernetes.io/enforce-version: v1.25\n    # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.\n    pod-security.kubernetes.io/audit: privileged\n    pod-security.kubernetes.io/audit-version: v1.25\n    pod-security.kubernetes.io/warn: privileged\n    pod-security.kubernetes.io/warn-version: v1.25\n")),(0,s.kt)("ol",{start:4},(0,s.kt)("li",{parentName:"ol"},"\uc5c5\uadf8\ub808\uc774\ub4dc\uac00 \uc644\ub8cc\ub41c \ud6c4, \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c \ub0a8\uc544\uc788\ub294 \ubaa8\ub4e0 PSP \ub9ac\uc18c\uc2a4\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4. \ub300\ubd80\ubd84\uc758 \uacbd\uc6b0, ",(0,s.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/manifests/")," \ub0b4\ubd80\uc5d0\uc11c \uac15\ud654\ub97c \uc704\ud574 \uc0ac\uc6a9\ub41c \uc0ac\uc6a9\uc790 \uc815\uc758 \ud30c\uc77c\uc5d0\ub294 PodSecurityPolicies \ubc0f \uad00\ub828 RBAC \ub9ac\uc18c\uc2a4\uac00 \uc788\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ub9ac\uc18c\uc2a4\ub97c \uc81c\uac70\ud558\uba74 k3s\uac00 \uc790\ub3d9\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub429\ub2c8\ub2e4. \ub54c\ub54c\ub85c \uc2dc\uac04\uc774 \uc9c0\ub09c \ud6c4\uc5d0 \uc774\ub7ec\ud55c \ub9ac\uc18c\uc2a4\uac00 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub0a8\uc544\uc788\uc744 \uc218 \uc788\uc73c\ubbc0\ub85c \uc218\ub3d9\uc73c\ub85c \uc0ad\uc81c\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\uc804\uc5d0 ",(0,s.kt)("a",{parentName:"li",href:"/kr/security/hardening-guide"},"\uac15\ud654 \uac00\uc774\ub4dc"),"\ub97c \ub530\ub974\uba74 \ub2e4\uc74c\uacfc \uac19\uc774 \uc0ad\uc81c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-sh"},"# Get the resources associated with PSPs\n$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp\n\n# Delete those resources:\n$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[1208],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var n=r(7294);function s(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,s=function(e,t){if(null==e)return{};var r,n,s={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(s[r]=e[r]);return s}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(s[r]=e[r])}return s}var l=n.createContext({}),c=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,s=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(r),k=s,m=d["".concat(l,".").concat(k)]||d[k]||p[k]||i;return r?n.createElement(m,a(a({ref:t},u),{},{components:r})):n.createElement(m,a({ref:t},u))}));function k(e,t){var r=arguments,s=t&&t.mdxType;if("string"==typeof e||s){var i=r.length,a=new Array(i);a[0]=d;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:s,a[1]=o;for(var c=2;c<i;c++)a[c]=r[c];return n.createElement.apply(null,a)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5720:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>a,default:()=>p,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var n=r(3117),s=(r(7294),r(3905));const i={title:"\uc54c\ub824\uc9c4 \uc774\uc288",weight:70},a=void 0,o={unversionedId:"known-issues/known-issues",id:"known-issues/known-issues",title:"\uc54c\ub824\uc9c4 \uc774\uc288",description:"\uc54c\ub824\uc9c4 \uc774\uc288\ub294 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \ub2e4\uc74c \ub9b4\ub9ac\uc2a4\uc5d0\uc11c \uc989\uc2dc \ud574\uacb0\ub418\uc9c0 \uc54a\uc744 \uc218 \uc788\ub294 \ubb38\uc81c\uc5d0 \ub300\ud574 \uc54c\ub824\ub4dc\ub9ac\uae30 \uc704\ud574 \uace0\uc548\ub418\uc5c8\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",sourceDirName:"known-issues",slug:"/known-issues/",permalink:"/kr/known-issues/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\uc54c\ub824\uc9c4 \uc774\uc288",weight:70},sidebar:"mySidebar",previous:{title:"Resource Profiling",permalink:"/kr/reference/resource-profiling"},next:{title:"\ubcf4\uc548",permalink:"/kr/security/"}},l={},c=[{value:"\uc2a4\ub0c5(Snap) \ub3c4\ucee4",id:"\uc2a4\ub0c5snap-\ub3c4\ucee4",level:3},{value:"Iptables",id:"iptables",level:3},{value:"Rootless Mode",id:"rootless-mode",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,s.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,s.kt)("p",null,"\uc54c\ub824\uc9c4 \uc774\uc288\ub294 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \ub2e4\uc74c \ub9b4\ub9ac\uc2a4\uc5d0\uc11c \uc989\uc2dc \ud574\uacb0\ub418\uc9c0 \uc54a\uc744 \uc218 \uc788\ub294 \ubb38\uc81c\uc5d0 \ub300\ud574 \uc54c\ub824\ub4dc\ub9ac\uae30 \uc704\ud574 \uace0\uc548\ub418\uc5c8\uc2b5\ub2c8\ub2e4."),(0,s.kt)("h3",{id:"\uc2a4\ub0c5snap-\ub3c4\ucee4"},"\uc2a4\ub0c5(Snap) \ub3c4\ucee4"),(0,s.kt)("p",null,"\uc2a4\ub0c5(Snap) \ud328\ud0a4\uc9c0\ub97c \ud1b5\ud574 \uc124\uce58\ub41c \ub3c4\ucee4\ub294 K3s\ub97c \uc2e4\ud589\ud558\ub294 \ub370 \ubb38\uc81c\ub97c \uc77c\uc73c\ud0a4\ub294 \uac83\uc73c\ub85c \uc54c\ub824\uc838 \uc788\uc73c\ubbc0\ub85c K3s\uc640 \ud568\uaed8 \uc0ac\uc6a9\ud558\ub824\ub294 \uacbd\uc6b0 \uad8c\uc7a5\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4."),(0,s.kt)("h3",{id:"iptables"},"Iptables"),(0,s.kt)("p",null,"\ub808\uac70\uc2dc \ub300\uc2e0 nftables \ubaa8\ub4dc\uc5d0\uc11c iptables\ub97c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ubb38\uc81c\ub97c \ubc29\uc9c0\ud558\ub824\uba74 \ucd5c\uc2e0 \ubc84\uc804(\uc608: 1.6.1+)\uc758 iptables\ub97c \uc0ac\uc6a9\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4."),(0,s.kt)("p",null,"\ub610\ud55c 1.8.0-1.8.4 \ubc84\uc804\uc5d0\ub294 K3s\uac00 \uc2e4\ud328\ud560 \uc218 \uc788\ub294 \uc54c\ub824\uc9c4 \ubb38\uc81c\uac00 \uc788\uc2b5\ub2c8\ub2e4. \ud574\uacb0 \ubc29\ubc95\uc740 ",(0,s.kt)("a",{parentName:"p",href:"/kr/advanced/#old-iptables-versions"},"\ucd94\uac00 OS \uc900\ube44"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,s.kt)("h3",{id:"rootless-mode"},"Rootless Mode"),(0,s.kt)("p",null,"\ub8e8\ud2b8\ub9ac\uc2a4 \ubaa8\ub4dc\ub85c K3s\ub97c \uc2e4\ud589\ud558\ub294 \uac83\uc740 \uc2e4\ud5d8 \uc911\uc774\uba70 \uba87 \uac00\uc9c0 ",(0,s.kt)("a",{parentName:"p",href:"/kr/advanced/#known-issues-with-rootless-mode"},"\uc54c\ub824\uc9c4 \uc774\uc288"),"\uac00 \uc788\uc2b5\ub2c8\ub2e4."),(0,s.kt)("h1",{id:"\uac15\ud654\ub41chardened-\ud074\ub7ec\uc2a4\ud130\ub97c-v124x\uc5d0\uc11c-v125x\ub85c-\uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"},"\uac15\ud654\ub41c(Hardened) \ud074\ub7ec\uc2a4\ud130\ub97c v1.24.x\uc5d0\uc11c v1.25.x\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uae30"),(0,s.kt)("p",null,"\ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ud30c\ub4dc \ubcf4\uc548 \ud45c\uc900(PSS, Pod Security Standards)\uc744 \uc704\ud574 v1.25\uc5d0\uc11c PodSecurityPolicy\ub97c \uc81c\uac70\ud588\uc2b5\ub2c8\ub2e4. PSS\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,s.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/security/pod-security-standards/"},"\uc5c5\uc2a4\ud2b8\ub9bc \ubb38\uc11c"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. K3S\uc758 \uacbd\uc6b0, \ub178\ub4dc\uc5d0 'PodSecurityPolicy'\uac00 \uad6c\uc131\ub41c \uacbd\uc6b0 \uc218\ud589\ud574\uc57c \ud558\ub294 \uba87 \uac00\uc9c0 \uc218\ub3d9 \ub2e8\uacc4\uac00 \uc788\uc2b5\ub2c8\ub2e4."),(0,s.kt)("ol",null,(0,s.kt)("li",{parentName:"ol"},"\ubaa8\ub4e0 \ub178\ub4dc\uc5d0\uc11c ",(0,s.kt)("inlineCode",{parentName:"li"},"kube-apiserver-arg")," \uac12\uc744 \uc5c5\ub370\uc774\ud2b8\ud558\uc5ec ",(0,s.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicy")," \uc5b4\ub4dc\ubbf8\uc158 \ud50c\ub7ec\uadf8\uc778\uc744 \uc81c\uac70\ud569\ub2c8\ub2e4. \ub300\uc2e0 \ub2e4\uc74c arg \uac12\uc744 \ucd94\uac00\ud569\ub2c8\ub2e4: ",(0,s.kt)("inlineCode",{parentName:"li"},"'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'")," \uc774\uc9c0\ub9cc, \uc544\uc9c1 K3S\ub97c \uc7ac\uc2dc\uc791\ud558\uac70\ub098 \uc5c5\uadf8\ub808\uc774\ub4dc\ud558\uc9c0 \ub9c8\uc2ed\uc2dc\uc624. \uc544\ub798\ub294 \ub178\ub4dc\ub97c \uac15\ud654\ud55c \ud6c4 \uad6c\uc131 \ud30c\uc77c\uc758 \uc608\uc2dc\uc785\ub2c8\ub2e4.")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-yaml"},'protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - "admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n  - "audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log"\n  - "audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml"\n  - "audit-log-maxage=30"\n  - "audit-log-maxbackup=10"\n  - "audit-log-maxsize=100"\n  - "request-timeout=300s"\n  - "service-account-lookup=true"\nkube-controller-manager-arg:\n  - "terminated-pod-gc-threshold=10"\n  - "use-service-account-credentials=true"\nkubelet-arg:\n  - "streaming-connection-idle-timeout=5m"\n  - "make-iptables-util-chains=true"\n')),(0,s.kt)("ol",{start:2},(0,s.kt)("li",{parentName:"ol"},(0,s.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/psa.yaml")," \ud30c\uc77c\uc744 \ub2e4\uc74c \ub0b4\uc6a9\uc73c\ub85c \uc791\uc131\ud569\ub2c8\ub2e4. \ub354 \ub9ce\uc740 \ub124\uc784\uc2a4\ud398\uc774\uc2a4\ub97c \uc81c\uc678\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc544\ub798 \uc608\uc2dc\ub294 ",(0,s.kt)("inlineCode",{parentName:"li"},"kube-system"),"(\ud544\uc218), ",(0,s.kt)("inlineCode",{parentName:"li"},"cis-operator-system"),"(\uc120\ud0dd\uc801\uc774\uc9c0\ub9cc Rancher\ub97c \ud1b5\ud574 \ubcf4\uc548 \uc2a4\uce94\uc744 \uc2e4\ud589\ud560 \ub54c \uc720\uc6a9), ",(0,s.kt)("inlineCode",{parentName:"li"},"system-upgrade"),"(\uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc218\ud589\ud558\ub294 \uacbd\uc6b0 \ud544\uc218)\uc744 \uc81c\uc678\ud569\ub2c8\ub2e4.")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n  - name: PodSecurity\n    configuration:\n      apiVersion: pod-security.admission.config.k8s.io/v1beta1\n      kind: PodSecurityConfiguration\n      defaults:\n        enforce: "restricted"\n        enforce-version: "latest"\n        audit: "restricted"\n        audit-version: "latest"\n        warn: "restricted"\n        warn-version: "latest"\n      exemptions:\n        usernames: []\n        runtimeClasses: []\n        namespaces: [kube-system, cis-operator-system, system-upgrade]\n')),(0,s.kt)("ol",{start:3},(0,s.kt)("li",{parentName:"ol"},"\uc77c\ubc18\uc801\uc73c\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ub97c \uc218\ud589\ud569\ub2c8\ub2e4. ",(0,s.kt)("a",{parentName:"li",href:"/kr/upgrades/automated"},"\uc790\ub3d9 \uc5c5\uadf8\ub808\uc774\ub4dc"),"\ub97c \uc218\ud589\ud558\ub294 \uacbd\uc6b0 ",(0,s.kt)("inlineCode",{parentName:"li"},"system-upgrade-controller"),"\uac00 \uc2e4\ud589\ub418\ub294 \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uac00 ",(0,s.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels"},"\ud30c\ub4dc \ubcf4\uc548 \uc218\uc900"),"\uc5d0 \ub530\ub77c \uad8c\ud55c\uc774 \ubd80\uc5ec\ub41c \uac83\uc73c\ub85c \uc124\uc815\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: system-upgrade\n  labels:\n    # This value must be privileged for the controller to run successfully.\n    pod-security.kubernetes.io/enforce: privileged\n    pod-security.kubernetes.io/enforce-version: v1.25\n    # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.\n    pod-security.kubernetes.io/audit: privileged\n    pod-security.kubernetes.io/audit-version: v1.25\n    pod-security.kubernetes.io/warn: privileged\n    pod-security.kubernetes.io/warn-version: v1.25\n")),(0,s.kt)("ol",{start:4},(0,s.kt)("li",{parentName:"ol"},"\uc5c5\uadf8\ub808\uc774\ub4dc\uac00 \uc644\ub8cc\ub41c \ud6c4, \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c \ub0a8\uc544\uc788\ub294 \ubaa8\ub4e0 PSP \ub9ac\uc18c\uc2a4\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4. \ub300\ubd80\ubd84\uc758 \uacbd\uc6b0, ",(0,s.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/manifests/")," \ub0b4\ubd80\uc5d0\uc11c \uac15\ud654\ub97c \uc704\ud574 \uc0ac\uc6a9\ub41c \uc0ac\uc6a9\uc790 \uc815\uc758 \ud30c\uc77c\uc5d0\ub294 PodSecurityPolicies \ubc0f \uad00\ub828 RBAC \ub9ac\uc18c\uc2a4\uac00 \uc788\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ub9ac\uc18c\uc2a4\ub97c \uc81c\uac70\ud558\uba74 k3s\uac00 \uc790\ub3d9\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub429\ub2c8\ub2e4. \ub54c\ub54c\ub85c \uc2dc\uac04\uc774 \uc9c0\ub09c \ud6c4\uc5d0 \uc774\ub7ec\ud55c \ub9ac\uc18c\uc2a4\uac00 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub0a8\uc544\uc788\uc744 \uc218 \uc788\uc73c\ubbc0\ub85c \uc218\ub3d9\uc73c\ub85c \uc0ad\uc81c\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\uc804\uc5d0 ",(0,s.kt)("a",{parentName:"li",href:"/kr/security/hardening-guide"},"\uac15\ud654 \uac00\uc774\ub4dc"),"\ub97c \ub530\ub974\uba74 \ub2e4\uc74c\uacfc \uac19\uc774 \uc0ad\uc81c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4:")),(0,s.kt)("pre",null,(0,s.kt)("code",{parentName:"pre",className:"language-sh"},"# Get the resources associated with PSPs\n$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp\n\n# Delete those resources:\n$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/7f0bf1de.b51b38ad.js b/kr/assets/js/7f0bf1de.4389a498.js
similarity index 99%
rename from kr/assets/js/7f0bf1de.b51b38ad.js
rename to kr/assets/js/7f0bf1de.4389a498.js
index a581f2afe..c5516fd98 100644
--- a/kr/assets/js/7f0bf1de.b51b38ad.js
+++ b/kr/assets/js/7f0bf1de.4389a498.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5726],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>d});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),i=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=i(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,c=p(e,["components","mdxType","originalType","parentName"]),m=i(n),d=r,g=m["".concat(s,".").concat(d)]||m[d]||u[d]||l;return n?a.createElement(g,o(o({ref:t},c),{},{components:n})):a.createElement(g,o({ref:t},c))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=m;var p={};for(var s in t)hasOwnProperty.call(t,s)&&(p[s]=t[s]);p.originalType=e,p.mdxType="string"==typeof e?e:r,o[1]=p;for(var i=2;i<l;i++)o[i]=n[i];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2301:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>l,metadata:()=>p,toc:()=>i});var a=n(3117),r=(n(7294),n(3905));const l={title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",weight:30},o=void 0,p={unversionedId:"storage/storage",id:"storage/storage",title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",description:"\ub370\uc774\ud130\ub97c \uc720\uc9c0\ud574\uc57c \ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ubc30\ud3ec\ud560 \ub54c\ub294 \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \ub9cc\ub4e4\uc5b4\uc57c \ud569\ub2c8\ub2e4. \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc2e4\ud589\ud558\ub294 \ud30c\ub4dc \uc678\ubd80\uc5d0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc800\uc7a5\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc2a4\ud1a0\ub9ac\uc9c0 \ubc29\uc2dd\uc744 \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ud30c\ub4dc\uc5d0 \uc7a5\uc560\uac00 \ubc1c\uc0dd\ud558\ub354\ub77c\ub3c4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/storage/storage.md",sourceDirName:"storage",slug:"/storage/",permalink:"/kr/storage/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",weight:30},sidebar:"mySidebar",previous:{title:"Automated Upgrades",permalink:"/kr/upgrades/automated"},next:{title:"\ub124\ud2b8\uc6cc\ud0b9",permalink:"/kr/networking/"}},s={},i=[{value:"K3s \uc2a4\ud1a0\ub9ac\uc9c0\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?",id:"k3s-\uc2a4\ud1a0\ub9ac\uc9c0\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694",level:2},{value:"\ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0 \uacf5\uae09\uc790 \uc124\uc815\ud558\uae30",id:"\ub85c\uceec-\uc2a4\ud1a0\ub9ac\uc9c0-\uacf5\uae09\uc790-\uc124\uc815\ud558\uae30",level:2},{value:"pvc.yaml",id:"pvcyaml",level:3},{value:"pod.yaml",id:"podyaml",level:3},{value:"Longhorn \uad6c\uc131\ud558\uae30",id:"longhorn-\uad6c\uc131\ud558\uae30",level:2},{value:"pvc.yaml",id:"pvcyaml-1",level:3},{value:"pod.yaml",id:"podyaml-1",level:3}],c={toc:i};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\ub370\uc774\ud130\ub97c \uc720\uc9c0\ud574\uc57c \ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ubc30\ud3ec\ud560 \ub54c\ub294 \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \ub9cc\ub4e4\uc5b4\uc57c \ud569\ub2c8\ub2e4. \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc2e4\ud589\ud558\ub294 \ud30c\ub4dc \uc678\ubd80\uc5d0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc800\uc7a5\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc2a4\ud1a0\ub9ac\uc9c0 \ubc29\uc2dd\uc744 \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ud30c\ub4dc\uc5d0 \uc7a5\uc560\uac00 \ubc1c\uc0dd\ud558\ub354\ub77c\ub3c4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud37c\uc2dc\uc2a4\ud134\ud2b8 \ubcfc\ub968(PV: persistent volume)\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ud074\ub7ec\uc2a4\ud130\uc758 \uc2a4\ud1a0\ub9ac\uc9c0 \uc870\uac01\uc774\uba70, \ud37c\uc2dc\uc2a4\ud134\ud2b8 \ubcfc\ub968 \ud074\ub808\uc784(PVC: persistent volume claim)\uc740 \uc2a4\ud1a0\ub9ac\uc9c0\uc5d0 \ub300\ud55c \uc694\uccad\uc785\ub2c8\ub2e4. PV\uc640 PVC\uc758 \uc791\ub3d9 \ubc29\uc2dd\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/storage/volumes/"},"\uc2a4\ud1a0\ub9ac\uc9c0")," \uacf5\uc2dd \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubb38\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\uc774 \ud398\uc774\uc9c0\ub294 \ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0 \uc81c\uacf5\uc790 \ub610\ub294 ","[\ub871\ud63c(#setting-up-longhorn)]","\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc744 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"k3s-\uc2a4\ud1a0\ub9ac\uc9c0\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694"},"K3s \uc2a4\ud1a0\ub9ac\uc9c0\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?"),(0,r.kt)("p",null,'K3s\ub294 \uba87 \uac00\uc9c0 \uc120\ud0dd\uc801 \ubcfc\ub968 \ud50c\ub7ec\uadf8\uc778\uacfc \ubaa8\ub4e0 \ub0b4\uc7a5("in-tree"\ub77c\uace0\ub3c4 \ud568) \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc5c5\uccb4\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4. \uc774\ub294 \ub354 \uc791\uc740 \ubc14\uc774\ub108\ub9ac \ud06c\uae30\ub97c \ub2ec\uc131\ud558\uace0 \ub9ce\uc740 K3s \uc0ac\uc6a9 \uc0ac\ub840\uc5d0\uc11c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\ub294 \ud0c0\uc0ac \ud074\ub77c\uc6b0\ub4dc \ub610\ub294 \ub370\uc774\ud130\uc13c\ud130 \uae30\uc220 \ubc0f \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \uc758\uc874\uc744 \ud53c\ud558\uae30 \uc704\ud55c \uac83\uc785\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud50c\ub7ec\uadf8\uc778\uc744 \uc81c\uac70\ud574\ub3c4 \ud575\uc2ec Kubernetes \uae30\ub2a5\uc774\ub098 \uc801\ud569\uc131\uc5d0\ub294 \uc601\ud5a5\uc744 \ubbf8\uce58\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0 \uc774\ub807\uac8c \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.'),(0,r.kt)("p",null,"\ub2e4\uc74c \ubcfc\ub968 \ud50c\ub7ec\uadf8\uc778\uc740 K3s\uc5d0\uc11c \uc81c\uac70\ub418\uc5c8\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"cephfs"),(0,r.kt)("li",{parentName:"ul"},"fc"),(0,r.kt)("li",{parentName:"ul"},"flocker"),(0,r.kt)("li",{parentName:"ul"},"git_repo"),(0,r.kt)("li",{parentName:"ul"},"glusterfs"),(0,r.kt)("li",{parentName:"ul"},"portworx"),(0,r.kt)("li",{parentName:"ul"},"quobyte"),(0,r.kt)("li",{parentName:"ul"},"rbd"),(0,r.kt)("li",{parentName:"ul"},"storageos")),(0,r.kt)("p",null,"K3s\uc640 \ud568\uaed8 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ud2b8\ub9ac \uc678 \ub300\uc548\uc778 \ub450 \uad6c\uc131 \uc694\uc18c\uac00 \uc788\uc2b5\ub2c8\ub2e4:\n\ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/container-storage-interface/spec/blob/master/spec.md"},"\ucee8\ud14c\uc774\ub108 \uc2a4\ud1a0\ub9ac\uc9c0 \uc778\ud130\ud398\uc774\uc2a4(CSI)")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/"},"\ud074\ub77c\uc6b0\ub4dc \ud504\ub85c\ubc14\uc774\ub354 \uc778\ud130\ud398\uc774\uc2a4(CPI)"),"\uc785\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc720\uc9c0 \uad00\ub9ac\uc790\ub294 \uc778-\ud2b8\ub9ac \ubcfc\ub968 \ud50c\ub7ec\uadf8\uc778\uc744 CSI \ub4dc\ub77c\uc774\ubc84\ub85c \uc801\uadf9\uc801\uc73c\ub85c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ub9c8\uc774\uadf8\ub808\uc774\uc158\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/"},"\uc5ec\uae30"),"\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\ub85c\uceec-\uc2a4\ud1a0\ub9ac\uc9c0-\uacf5\uae09\uc790-\uc124\uc815\ud558\uae30"},"\ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0 \uacf5\uae09\uc790 \uc124\uc815\ud558\uae30"),(0,r.kt)("p",null,"K3s\ub294 \ub79c\ucc98\uc758 \ub85c\uceec \uacbd\ub85c \ud504\ub85c\ube44\uc800\ub108\uc640 \ud568\uaed8 \uc81c\uacf5\ub418\uba70, \uc774\ub97c \ud1b5\ud574 \uac01 \ub178\ub4dc\uc758 \ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc601\uad6c \ubcfc\ub968 \ud074\ub808\uc784(persistent volume claims)\uc744 \uc989\uc2dc \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc544\ub798\uc5d0\uc11c\ub294 \uac04\ub2e8\ud55c \uc608\uc81c\ub97c \ub2e4\ub8e8\uaca0\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uacf5\uc2dd \ubb38\uc11c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage"},"\uc5ec\uae30"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ud638\uc2a4\ud2b8 \uacbd\ub85c \uc9c0\uc6d0 \ud37c\uc2dc\uc2a4\ud134\ud2b8 \ubcfc\ub968 \ud074\ub808\uc784\uacfc \uc774\ub97c \ud65c\uc6a9\ud560 \ud30c\ub4dc\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4:"),(0,r.kt)("h3",{id:"pvcyaml"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: local-path-pvc\n  namespace: default\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: local-path\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n    - name: volume-test\n      image: nginx:stable-alpine\n      imagePullPolicy: IfNotPresent\n      volumeMounts:\n        - name: volv\n          mountPath: /data\n      ports:\n        - containerPort: 80\n  volumes:\n    - name: volv\n      persistentVolumeClaim:\n        claimName: local-path-pvc\n")),(0,r.kt)("p",null,"yaml\uc744 \uc801\uc6a9\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("p",null,"PV \ubc0f PVC\uac00 \uc0dd\uc131\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\uc0c1\ud0dc\ub294 \uac01\uac01 ",(0,r.kt)("inlineCode",{parentName:"p"},"Bound"),"\uc5ec\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"longhorn-\uad6c\uc131\ud558\uae30"},"Longhorn \uad6c\uc131\ud558\uae30"),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Longhorn\uc740 ARM32\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"K3s\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc6a9 \uc624\ud508\uc18c\uc2a4 \ubd84\uc0b0\ud615 \ube14\ub85d \uc2a4\ud1a0\ub9ac\uc9c0 \uc2dc\uc2a4\ud15c\uc778 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/longhorn/longhorn"},"Longhorn"),"\uc744 \uc9c0\uc6d0\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc544\ub798\ub294 \uac04\ub2e8\ud55c \uc608\uc81c\uc785\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://longhorn.io/docs/latest/"},"\uacf5\uc2dd \ubb38\uc11c"),"\ub97c \ucc38\uace0\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4."),(0,r.kt)("p",null,"longhorn.yaml\uc744 \uc801\uc6a9\ud558\uc5ec Longhorn\uc744 \uc124\uce58\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml\n")),(0,r.kt)("p",null,"Longhorn\uc740 \ub124\uc784\uc2a4\ud398\uc774\uc2a4 ",(0,r.kt)("inlineCode",{parentName:"p"},"longhorn-system"),"\uc5d0 \uc124\uce58\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"yaml\uc744 \uc801\uc6a9\ud558\uc5ec PVC\uc640 \ud30c\ub4dc\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("h3",{id:"pvcyaml-1"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: longhorn-volv-pvc\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: longhorn\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml-1"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n    - name: volume-test\n      image: nginx:stable-alpine\n      imagePullPolicy: IfNotPresent\n      volumeMounts:\n        - name: volv\n          mountPath: /data\n      ports:\n        - containerPort: 80\n  volumes:\n    - name: volv\n      persistentVolumeClaim:\n        claimName: longhorn-volv-pvc\n")),(0,r.kt)("p",null,"PV \ubc0f PVC\uac00 \uc0dd\uc131\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\uc0c1\ud0dc\ub294 \uac01\uac01 ",(0,r.kt)("inlineCode",{parentName:"p"},"Bound"),"\uc5ec\uc57c \ud569\ub2c8\ub2e4."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5726],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>d});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),i=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=i(e.components);return a.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,c=p(e,["components","mdxType","originalType","parentName"]),m=i(n),d=r,g=m["".concat(s,".").concat(d)]||m[d]||u[d]||l;return n?a.createElement(g,o(o({ref:t},c),{},{components:n})):a.createElement(g,o({ref:t},c))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=m;var p={};for(var s in t)hasOwnProperty.call(t,s)&&(p[s]=t[s]);p.originalType=e,p.mdxType="string"==typeof e?e:r,o[1]=p;for(var i=2;i<l;i++)o[i]=n[i];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2301:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>l,metadata:()=>p,toc:()=>i});var a=n(3117),r=(n(7294),n(3905));const l={title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",weight:30},o=void 0,p={unversionedId:"storage/storage",id:"storage/storage",title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",description:"\ub370\uc774\ud130\ub97c \uc720\uc9c0\ud574\uc57c \ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ubc30\ud3ec\ud560 \ub54c\ub294 \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \ub9cc\ub4e4\uc5b4\uc57c \ud569\ub2c8\ub2e4. \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc2e4\ud589\ud558\ub294 \ud30c\ub4dc \uc678\ubd80\uc5d0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc800\uc7a5\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc2a4\ud1a0\ub9ac\uc9c0 \ubc29\uc2dd\uc744 \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ud30c\ub4dc\uc5d0 \uc7a5\uc560\uac00 \ubc1c\uc0dd\ud558\ub354\ub77c\ub3c4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/storage/storage.md",sourceDirName:"storage",slug:"/storage/",permalink:"/kr/storage/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",weight:30},sidebar:"mySidebar",previous:{title:"Automated Upgrades",permalink:"/kr/upgrades/automated"},next:{title:"\ub124\ud2b8\uc6cc\ud0b9",permalink:"/kr/networking/"}},s={},i=[{value:"K3s \uc2a4\ud1a0\ub9ac\uc9c0\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?",id:"k3s-\uc2a4\ud1a0\ub9ac\uc9c0\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694",level:2},{value:"\ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0 \uacf5\uae09\uc790 \uc124\uc815\ud558\uae30",id:"\ub85c\uceec-\uc2a4\ud1a0\ub9ac\uc9c0-\uacf5\uae09\uc790-\uc124\uc815\ud558\uae30",level:2},{value:"pvc.yaml",id:"pvcyaml",level:3},{value:"pod.yaml",id:"podyaml",level:3},{value:"Longhorn \uad6c\uc131\ud558\uae30",id:"longhorn-\uad6c\uc131\ud558\uae30",level:2},{value:"pvc.yaml",id:"pvcyaml-1",level:3},{value:"pod.yaml",id:"podyaml-1",level:3}],c={toc:i};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\ub370\uc774\ud130\ub97c \uc720\uc9c0\ud574\uc57c \ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ubc30\ud3ec\ud560 \ub54c\ub294 \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \ub9cc\ub4e4\uc5b4\uc57c \ud569\ub2c8\ub2e4. \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc2e4\ud589\ud558\ub294 \ud30c\ub4dc \uc678\ubd80\uc5d0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc800\uc7a5\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \uc2a4\ud1a0\ub9ac\uc9c0 \ubc29\uc2dd\uc744 \uc0ac\uc6a9\ud558\uba74 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \ud30c\ub4dc\uc5d0 \uc7a5\uc560\uac00 \ubc1c\uc0dd\ud558\ub354\ub77c\ub3c4 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub370\uc774\ud130\ub97c \uc720\uc9c0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ud37c\uc2dc\uc2a4\ud134\ud2b8 \ubcfc\ub968(PV: persistent volume)\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ud074\ub7ec\uc2a4\ud130\uc758 \uc2a4\ud1a0\ub9ac\uc9c0 \uc870\uac01\uc774\uba70, \ud37c\uc2dc\uc2a4\ud134\ud2b8 \ubcfc\ub968 \ud074\ub808\uc784(PVC: persistent volume claim)\uc740 \uc2a4\ud1a0\ub9ac\uc9c0\uc5d0 \ub300\ud55c \uc694\uccad\uc785\ub2c8\ub2e4. PV\uc640 PVC\uc758 \uc791\ub3d9 \ubc29\uc2dd\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/storage/volumes/"},"\uc2a4\ud1a0\ub9ac\uc9c0")," \uacf5\uc2dd \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubb38\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\uc774 \ud398\uc774\uc9c0\ub294 \ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0 \uc81c\uacf5\uc790 \ub610\ub294 ","[\ub871\ud63c(#setting-up-longhorn)]","\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud37c\uc2dc\uc2a4\ud134\ud2b8 \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc744 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"k3s-\uc2a4\ud1a0\ub9ac\uc9c0\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694"},"K3s \uc2a4\ud1a0\ub9ac\uc9c0\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?"),(0,r.kt)("p",null,'K3s\ub294 \uba87 \uac00\uc9c0 \uc120\ud0dd\uc801 \ubcfc\ub968 \ud50c\ub7ec\uadf8\uc778\uacfc \ubaa8\ub4e0 \ub0b4\uc7a5("in-tree"\ub77c\uace0\ub3c4 \ud568) \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc5c5\uccb4\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4. \uc774\ub294 \ub354 \uc791\uc740 \ubc14\uc774\ub108\ub9ac \ud06c\uae30\ub97c \ub2ec\uc131\ud558\uace0 \ub9ce\uc740 K3s \uc0ac\uc6a9 \uc0ac\ub840\uc5d0\uc11c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\ub294 \ud0c0\uc0ac \ud074\ub77c\uc6b0\ub4dc \ub610\ub294 \ub370\uc774\ud130\uc13c\ud130 \uae30\uc220 \ubc0f \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \uc758\uc874\uc744 \ud53c\ud558\uae30 \uc704\ud55c \uac83\uc785\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud50c\ub7ec\uadf8\uc778\uc744 \uc81c\uac70\ud574\ub3c4 \ud575\uc2ec Kubernetes \uae30\ub2a5\uc774\ub098 \uc801\ud569\uc131\uc5d0\ub294 \uc601\ud5a5\uc744 \ubbf8\uce58\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0 \uc774\ub807\uac8c \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.'),(0,r.kt)("p",null,"\ub2e4\uc74c \ubcfc\ub968 \ud50c\ub7ec\uadf8\uc778\uc740 K3s\uc5d0\uc11c \uc81c\uac70\ub418\uc5c8\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"cephfs"),(0,r.kt)("li",{parentName:"ul"},"fc"),(0,r.kt)("li",{parentName:"ul"},"flocker"),(0,r.kt)("li",{parentName:"ul"},"git_repo"),(0,r.kt)("li",{parentName:"ul"},"glusterfs"),(0,r.kt)("li",{parentName:"ul"},"portworx"),(0,r.kt)("li",{parentName:"ul"},"quobyte"),(0,r.kt)("li",{parentName:"ul"},"rbd"),(0,r.kt)("li",{parentName:"ul"},"storageos")),(0,r.kt)("p",null,"K3s\uc640 \ud568\uaed8 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ud2b8\ub9ac \uc678 \ub300\uc548\uc778 \ub450 \uad6c\uc131 \uc694\uc18c\uac00 \uc788\uc2b5\ub2c8\ub2e4:\n\ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/container-storage-interface/spec/blob/master/spec.md"},"\ucee8\ud14c\uc774\ub108 \uc2a4\ud1a0\ub9ac\uc9c0 \uc778\ud130\ud398\uc774\uc2a4(CSI)")," \ubc0f ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/"},"\ud074\ub77c\uc6b0\ub4dc \ud504\ub85c\ubc14\uc774\ub354 \uc778\ud130\ud398\uc774\uc2a4(CPI)"),"\uc785\ub2c8\ub2e4."),(0,r.kt)("p",null,"\ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc720\uc9c0 \uad00\ub9ac\uc790\ub294 \uc778-\ud2b8\ub9ac \ubcfc\ub968 \ud50c\ub7ec\uadf8\uc778\uc744 CSI \ub4dc\ub77c\uc774\ubc84\ub85c \uc801\uadf9\uc801\uc73c\ub85c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ub9c8\uc774\uadf8\ub808\uc774\uc158\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/"},"\uc5ec\uae30"),"\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,r.kt)("h2",{id:"\ub85c\uceec-\uc2a4\ud1a0\ub9ac\uc9c0-\uacf5\uae09\uc790-\uc124\uc815\ud558\uae30"},"\ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0 \uacf5\uae09\uc790 \uc124\uc815\ud558\uae30"),(0,r.kt)("p",null,"K3s\ub294 \ub79c\ucc98\uc758 \ub85c\uceec \uacbd\ub85c \ud504\ub85c\ube44\uc800\ub108\uc640 \ud568\uaed8 \uc81c\uacf5\ub418\uba70, \uc774\ub97c \ud1b5\ud574 \uac01 \ub178\ub4dc\uc758 \ub85c\uceec \uc2a4\ud1a0\ub9ac\uc9c0\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc601\uad6c \ubcfc\ub968 \ud074\ub808\uc784(persistent volume claims)\uc744 \uc989\uc2dc \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc544\ub798\uc5d0\uc11c\ub294 \uac04\ub2e8\ud55c \uc608\uc81c\ub97c \ub2e4\ub8e8\uaca0\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uacf5\uc2dd \ubb38\uc11c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage"},"\uc5ec\uae30"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ud638\uc2a4\ud2b8 \uacbd\ub85c \uc9c0\uc6d0 \ud37c\uc2dc\uc2a4\ud134\ud2b8 \ubcfc\ub968 \ud074\ub808\uc784\uacfc \uc774\ub97c \ud65c\uc6a9\ud560 \ud30c\ub4dc\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4:"),(0,r.kt)("h3",{id:"pvcyaml"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: local-path-pvc\n  namespace: default\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: local-path\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n    - name: volume-test\n      image: nginx:stable-alpine\n      imagePullPolicy: IfNotPresent\n      volumeMounts:\n        - name: volv\n          mountPath: /data\n      ports:\n        - containerPort: 80\n  volumes:\n    - name: volv\n      persistentVolumeClaim:\n        claimName: local-path-pvc\n")),(0,r.kt)("p",null,"yaml\uc744 \uc801\uc6a9\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("p",null,"PV \ubc0f PVC\uac00 \uc0dd\uc131\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\uc0c1\ud0dc\ub294 \uac01\uac01 ",(0,r.kt)("inlineCode",{parentName:"p"},"Bound"),"\uc5ec\uc57c \ud569\ub2c8\ub2e4."),(0,r.kt)("h2",{id:"longhorn-\uad6c\uc131\ud558\uae30"},"Longhorn \uad6c\uc131\ud558\uae30"),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Longhorn\uc740 ARM32\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"K3s\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc6a9 \uc624\ud508\uc18c\uc2a4 \ubd84\uc0b0\ud615 \ube14\ub85d \uc2a4\ud1a0\ub9ac\uc9c0 \uc2dc\uc2a4\ud15c\uc778 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/longhorn/longhorn"},"Longhorn"),"\uc744 \uc9c0\uc6d0\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc544\ub798\ub294 \uac04\ub2e8\ud55c \uc608\uc81c\uc785\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://longhorn.io/docs/latest/"},"\uacf5\uc2dd \ubb38\uc11c"),"\ub97c \ucc38\uace0\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4."),(0,r.kt)("p",null,"longhorn.yaml\uc744 \uc801\uc6a9\ud558\uc5ec Longhorn\uc744 \uc124\uce58\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml\n")),(0,r.kt)("p",null,"Longhorn\uc740 \ub124\uc784\uc2a4\ud398\uc774\uc2a4 ",(0,r.kt)("inlineCode",{parentName:"p"},"longhorn-system"),"\uc5d0 \uc124\uce58\ub429\ub2c8\ub2e4."),(0,r.kt)("p",null,"yaml\uc744 \uc801\uc6a9\ud558\uc5ec PVC\uc640 \ud30c\ub4dc\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("h3",{id:"pvcyaml-1"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: longhorn-volv-pvc\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: longhorn\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml-1"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n    - name: volume-test\n      image: nginx:stable-alpine\n      imagePullPolicy: IfNotPresent\n      volumeMounts:\n        - name: volv\n          mountPath: /data\n      ports:\n        - containerPort: 80\n  volumes:\n    - name: volv\n      persistentVolumeClaim:\n        claimName: longhorn-volv-pvc\n")),(0,r.kt)("p",null,"PV \ubc0f PVC\uac00 \uc0dd\uc131\ub418\uc5c8\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\uc0c1\ud0dc\ub294 \uac01\uac01 ",(0,r.kt)("inlineCode",{parentName:"p"},"Bound"),"\uc5ec\uc57c \ud569\ub2c8\ub2e4."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/81cffba8.aad04d7e.js b/kr/assets/js/81cffba8.757deee8.js
similarity index 98%
rename from kr/assets/js/81cffba8.aad04d7e.js
rename to kr/assets/js/81cffba8.757deee8.js
index 994d88a91..8dbf464c8 100644
--- a/kr/assets/js/81cffba8.aad04d7e.js
+++ b/kr/assets/js/81cffba8.757deee8.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[804],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>k});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var u=n.createContext({}),p=function(e){var t=n.useContext(u),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(u.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,u=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),m=p(r),k=l,d=m["".concat(u,".").concat(k)]||m[k]||s[k]||a;return r?n.createElement(d,i(i({ref:t},c),{},{components:r})):n.createElement(d,i({ref:t},c))}));function k(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,i=new Array(a);i[0]=m;var o={};for(var u in t)hasOwnProperty.call(t,u)&&(o[u]=t[u]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var p=2;p<a;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},4754:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>i,default:()=>s,frontMatter:()=>a,metadata:()=>o,toc:()=>p});var n=r(3117),l=(r(7294),r(3905));const a={slug:"/",title:"K3s - Lightweight Kubernetes"},i=void 0,o={unversionedId:"introduction",id:"introduction",title:"K3s - Lightweight Kubernetes",description:"\uacbd\ub7c9\uc758 \ucfe0\ubc84\ub124\ud2f0\uc2a4. \uac04\ud3b8\ud55c \uc124\uce58\uc640 \uc808\ubc18\uc758 \uba54\ubaa8\ub9ac, \ubaa8\ub4e0\uac78 100MB \ubbf8\ub9cc\uc758 \ubc14\uc774\ub108\ub9ac\ub85c \uc81c\uacf5\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/introduction.md",sourceDirName:".",slug:"/",permalink:"/kr/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/introduction.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{slug:"/",title:"K3s - Lightweight Kubernetes"},sidebar:"mySidebar",next:{title:"\uc544\ud0a4\ud14d\ucc98",permalink:"/kr/architecture/"}},u={},p=[],c={toc:p};function s(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\uacbd\ub7c9\uc758 \ucfe0\ubc84\ub124\ud2f0\uc2a4. \uac04\ud3b8\ud55c \uc124\uce58\uc640 \uc808\ubc18\uc758 \uba54\ubaa8\ub9ac, \ubaa8\ub4e0\uac78 100MB \ubbf8\ub9cc\uc758 \ubc14\uc774\ub108\ub9ac\ub85c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc801\ud569\ud55c \ud658\uacbd:"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\uc5e3\uc9c0(Edge)"),(0,l.kt)("li",{parentName:"ul"},"\uc0ac\ubb3c\uc778\ud130\ub137(IoT)"),(0,l.kt)("li",{parentName:"ul"},"\uc9c0\uc18d\uc801\uc778 \ud1b5\ud569(CI)"),(0,l.kt)("li",{parentName:"ul"},"\uac1c\ubc1c"),(0,l.kt)("li",{parentName:"ul"},"ARM"),(0,l.kt)("li",{parentName:"ul"},"\uc784\ubca0\ub529 K8s"),(0,l.kt)("li",{parentName:"ul"},"k8s \ud074\ub7ec\uc2a4\ud130 \ubd84\uc57c\uc758 \ubc15\uc0ac \ud559\uc704\ub97c \ucde8\ub4dd\ud558\uae30 \uc5b4\ub824\uc6b4 \uc0c1\ud669")),(0,l.kt)("h1",{id:"k3s\ub780-\ubb34\uc5c7\uc785\ub2c8\uae4c"},"k3s\ub780 \ubb34\uc5c7\uc785\ub2c8\uae4c?"),(0,l.kt)("p",null,"K3s\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc640 \uc644\uc804\ud788 \ud638\ud658\ub418\uba70 \ub2e4\uc74c\uacfc \uac19\uc740 \ud5a5\uc0c1\ub41c \uae30\ub2a5\uc744 \uac16\ucd98 \ubc30\ud3ec\ud310\uc785\ub2c8\ub2e4:"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\ub2e8\uc77c \ubc14\uc774\ub108\ub9ac\ub85c \ud328\ud0a4\uc9c0\ud654."),(0,l.kt)("li",{parentName:"ul"},"\uae30\ubcf8 \uc2a4\ud1a0\ub9ac\uc9c0 \uba54\ucee4\ub2c8\uc998\uc73c\ub85c sqlite3\ub97c \uae30\ubc18\uc73c\ub85c \ud558\ub294 \uacbd\ub7c9 \uc2a4\ud1a0\ub9ac\uc9c0 \ubc31\uc5d4\ub4dc. etcd3, MySQL, Postgres\ub3c4 \uc0ac\uc6a9 \uac00\ub2a5."),(0,l.kt)("li",{parentName:"ul"},"\ubcf5\uc7a1\ud55c TLS \ubc0f \uc635\uc158\uc744 \ucc98\ub9ac\ud558\ub294 \uac04\ub2e8\ud55c \ub7f0\ucc98\uc5d0 \ud3ec\ud568."),(0,l.kt)("li",{parentName:"ul"},"\uacbd\ub7c9 \ud658\uacbd\uc744 \uc704\ud55c \ud569\ub9ac\uc801\uc778 \uae30\ubcf8\uac12\uc73c\ub85c \uae30\ubcf8\uc801\uc73c\ub85c \ubcf4\uc548\uc744 \uc720\uc9c0\ud568."),(0,l.kt)("li",{parentName:"ul"},"\ub2e4\uc74c\uacfc \uac19\uc774 \uac04\ub2e8\ud558\uc9c0\ub9cc \uac15\ub825\ud55c 'batteries-included' \uae30\ub2a5 \ucd94\uac00. \uc608\ub97c \ub4e4\uc5b4:",(0,l.kt)("ul",{parentName:"li"},(0,l.kt)("li",{parentName:"ul"},"local storage provider"),(0,l.kt)("li",{parentName:"ul"},"service load balancer"),(0,l.kt)("li",{parentName:"ul"},"Helm controller"),(0,l.kt)("li",{parentName:"ul"},"Traefik ingress controller"))),(0,l.kt)("li",{parentName:"ul"},"\ubaa8\ub4e0 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uad6c\uc131 \uc694\uc18c\uc758 \uc791\ub3d9\uc740 \ub2e8\uc77c \ubc14\uc774\ub108\ub9ac \ubc0f \ud504\ub85c\uc138\uc2a4\ub85c \ucea1\uc290\ud654. \uc774\ub97c \ud1b5\ud574 K3s\ub294 \uc778\uc99d\uc11c \ubc30\ud3ec\uc640 \uac19\uc740 \ubcf5\uc7a1\ud55c \ud074\ub7ec\uc2a4\ud130 \uc791\uc5c5\uc744 \uc790\ub3d9\ud654\ud558\uace0 \uad00\ub9ac."),(0,l.kt)("li",{parentName:"ul"},"\uc678\ubd80 \uc885\uc18d\uc131 \ucd5c\uc18c\ud654(\ucd5c\uc2e0 \ucee4\ub110\uacfc cgroup \ub9c8\uc6b4\ud2b8\ub9cc \ud544\uc694)")),(0,l.kt)("p",null,"K3s\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ud544\uc218 \uc885\uc18d\uc131\uc744 \ud328\ud0a4\uc9c0\ub85c \uc81c\uacf5\ud569\ub2c8\ub2e4:"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"Containerd"),(0,l.kt)("li",{parentName:"ul"},"Flannel (CNI)"),(0,l.kt)("li",{parentName:"ul"},"CoreDNS"),(0,l.kt)("li",{parentName:"ul"},"Traefik (\uc778\uadf8\ub808\uc2a4)"),(0,l.kt)("li",{parentName:"ul"},"Klipper-lb (\uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c)"),(0,l.kt)("li",{parentName:"ul"},"\uc784\ubca0\ub514\ub4dc \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec"),(0,l.kt)("li",{parentName:"ul"},"\uc784\ubca0\ub514\ub4dc \ub85c\uceec \uacbd\ub85c \ud504\ub85c\ube44\uc800\ub108"),(0,l.kt)("li",{parentName:"ul"},"\ud638\uc2a4\ud2b8 \uc720\ud2f8\ub9ac\ud2f0(iptables, socat \ub4f1)")),(0,l.kt)("h1",{id:"\uc774\ub984\uc5d0\ub294-\ubb34\uc2a8-\ub73b\uc774-\uc788\ub098\uc694"},"\uc774\ub984\uc5d0\ub294 \ubb34\uc2a8 \ub73b\uc774 \uc788\ub098\uc694?"),(0,l.kt)("p",null,"\uc6b0\ub9ac\ub294 \uba54\ubaa8\ub9ac \ud48b\ud504\ub9b0\ud2b8 \uce21\uba74\uc5d0\uc11c \uc808\ubc18 \ud06c\uae30\uc758 Kubernetes\ub97c \uc124\uce58\ud558\uae30\ub97c \uc6d0\ud588\uc2b5\ub2c8\ub2e4. Kubernetes\ub294 K8\ub85c \ud45c\uae30\ub418\ub294 10\uae00\uc790 \ub2e8\uc5b4\uc785\ub2c8\ub2e4. \ub530\ub77c\uc11c \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc758 \uc808\ubc18 \ud06c\uae30\ub77c\uba74 K3s\ub85c \ud45c\uae30\ub41c 5\uae00\uc790 \ub2e8\uc5b4\uac00 \ub420 \uac83\uc785\ub2c8\ub2e4. K3s\uc758 \uae34 \ud615\ud0dc\ub294 \uc5c6\uc73c\uba70 \uacf5\uc2dd\uc801\uc778 \ubc1c\uc74c\ub3c4 \uc5c6\uc2b5\ub2c8\ub2e4."))}s.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[804],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>k});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var u=n.createContext({}),p=function(e){var t=n.useContext(u),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(u.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,u=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),m=p(r),k=l,d=m["".concat(u,".").concat(k)]||m[k]||s[k]||a;return r?n.createElement(d,i(i({ref:t},c),{},{components:r})):n.createElement(d,i({ref:t},c))}));function k(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,i=new Array(a);i[0]=m;var o={};for(var u in t)hasOwnProperty.call(t,u)&&(o[u]=t[u]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var p=2;p<a;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},4754:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>i,default:()=>s,frontMatter:()=>a,metadata:()=>o,toc:()=>p});var n=r(3117),l=(r(7294),r(3905));const a={slug:"/",title:"K3s - Lightweight Kubernetes"},i=void 0,o={unversionedId:"introduction",id:"introduction",title:"K3s - Lightweight Kubernetes",description:"\uacbd\ub7c9\uc758 \ucfe0\ubc84\ub124\ud2f0\uc2a4. \uac04\ud3b8\ud55c \uc124\uce58\uc640 \uc808\ubc18\uc758 \uba54\ubaa8\ub9ac, \ubaa8\ub4e0\uac78 100MB \ubbf8\ub9cc\uc758 \ubc14\uc774\ub108\ub9ac\ub85c \uc81c\uacf5\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/introduction.md",sourceDirName:".",slug:"/",permalink:"/kr/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/introduction.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{slug:"/",title:"K3s - Lightweight Kubernetes"},sidebar:"mySidebar",next:{title:"\uc544\ud0a4\ud14d\ucc98",permalink:"/kr/architecture/"}},u={},p=[],c={toc:p};function s(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\uacbd\ub7c9\uc758 \ucfe0\ubc84\ub124\ud2f0\uc2a4. \uac04\ud3b8\ud55c \uc124\uce58\uc640 \uc808\ubc18\uc758 \uba54\ubaa8\ub9ac, \ubaa8\ub4e0\uac78 100MB \ubbf8\ub9cc\uc758 \ubc14\uc774\ub108\ub9ac\ub85c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc801\ud569\ud55c \ud658\uacbd:"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\uc5e3\uc9c0(Edge)"),(0,l.kt)("li",{parentName:"ul"},"\uc0ac\ubb3c\uc778\ud130\ub137(IoT)"),(0,l.kt)("li",{parentName:"ul"},"\uc9c0\uc18d\uc801\uc778 \ud1b5\ud569(CI)"),(0,l.kt)("li",{parentName:"ul"},"\uac1c\ubc1c"),(0,l.kt)("li",{parentName:"ul"},"ARM"),(0,l.kt)("li",{parentName:"ul"},"\uc784\ubca0\ub529 K8s"),(0,l.kt)("li",{parentName:"ul"},"k8s \ud074\ub7ec\uc2a4\ud130 \ubd84\uc57c\uc758 \ubc15\uc0ac \ud559\uc704\ub97c \ucde8\ub4dd\ud558\uae30 \uc5b4\ub824\uc6b4 \uc0c1\ud669")),(0,l.kt)("h1",{id:"k3s\ub780-\ubb34\uc5c7\uc785\ub2c8\uae4c"},"k3s\ub780 \ubb34\uc5c7\uc785\ub2c8\uae4c?"),(0,l.kt)("p",null,"K3s\ub294 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc640 \uc644\uc804\ud788 \ud638\ud658\ub418\uba70 \ub2e4\uc74c\uacfc \uac19\uc740 \ud5a5\uc0c1\ub41c \uae30\ub2a5\uc744 \uac16\ucd98 \ubc30\ud3ec\ud310\uc785\ub2c8\ub2e4:"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\ub2e8\uc77c \ubc14\uc774\ub108\ub9ac\ub85c \ud328\ud0a4\uc9c0\ud654."),(0,l.kt)("li",{parentName:"ul"},"\uae30\ubcf8 \uc2a4\ud1a0\ub9ac\uc9c0 \uba54\ucee4\ub2c8\uc998\uc73c\ub85c sqlite3\ub97c \uae30\ubc18\uc73c\ub85c \ud558\ub294 \uacbd\ub7c9 \uc2a4\ud1a0\ub9ac\uc9c0 \ubc31\uc5d4\ub4dc. etcd3, MySQL, Postgres\ub3c4 \uc0ac\uc6a9 \uac00\ub2a5."),(0,l.kt)("li",{parentName:"ul"},"\ubcf5\uc7a1\ud55c TLS \ubc0f \uc635\uc158\uc744 \ucc98\ub9ac\ud558\ub294 \uac04\ub2e8\ud55c \ub7f0\ucc98\uc5d0 \ud3ec\ud568."),(0,l.kt)("li",{parentName:"ul"},"\uacbd\ub7c9 \ud658\uacbd\uc744 \uc704\ud55c \ud569\ub9ac\uc801\uc778 \uae30\ubcf8\uac12\uc73c\ub85c \uae30\ubcf8\uc801\uc73c\ub85c \ubcf4\uc548\uc744 \uc720\uc9c0\ud568."),(0,l.kt)("li",{parentName:"ul"},"\ub2e4\uc74c\uacfc \uac19\uc774 \uac04\ub2e8\ud558\uc9c0\ub9cc \uac15\ub825\ud55c 'batteries-included' \uae30\ub2a5 \ucd94\uac00. \uc608\ub97c \ub4e4\uc5b4:",(0,l.kt)("ul",{parentName:"li"},(0,l.kt)("li",{parentName:"ul"},"local storage provider"),(0,l.kt)("li",{parentName:"ul"},"service load balancer"),(0,l.kt)("li",{parentName:"ul"},"Helm controller"),(0,l.kt)("li",{parentName:"ul"},"Traefik ingress controller"))),(0,l.kt)("li",{parentName:"ul"},"\ubaa8\ub4e0 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uad6c\uc131 \uc694\uc18c\uc758 \uc791\ub3d9\uc740 \ub2e8\uc77c \ubc14\uc774\ub108\ub9ac \ubc0f \ud504\ub85c\uc138\uc2a4\ub85c \ucea1\uc290\ud654. \uc774\ub97c \ud1b5\ud574 K3s\ub294 \uc778\uc99d\uc11c \ubc30\ud3ec\uc640 \uac19\uc740 \ubcf5\uc7a1\ud55c \ud074\ub7ec\uc2a4\ud130 \uc791\uc5c5\uc744 \uc790\ub3d9\ud654\ud558\uace0 \uad00\ub9ac."),(0,l.kt)("li",{parentName:"ul"},"\uc678\ubd80 \uc885\uc18d\uc131 \ucd5c\uc18c\ud654(\ucd5c\uc2e0 \ucee4\ub110\uacfc cgroup \ub9c8\uc6b4\ud2b8\ub9cc \ud544\uc694)")),(0,l.kt)("p",null,"K3s\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ud544\uc218 \uc885\uc18d\uc131\uc744 \ud328\ud0a4\uc9c0\ub85c \uc81c\uacf5\ud569\ub2c8\ub2e4:"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"Containerd"),(0,l.kt)("li",{parentName:"ul"},"Flannel (CNI)"),(0,l.kt)("li",{parentName:"ul"},"CoreDNS"),(0,l.kt)("li",{parentName:"ul"},"Traefik (\uc778\uadf8\ub808\uc2a4)"),(0,l.kt)("li",{parentName:"ul"},"Klipper-lb (\uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c)"),(0,l.kt)("li",{parentName:"ul"},"\uc784\ubca0\ub514\ub4dc \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec"),(0,l.kt)("li",{parentName:"ul"},"\uc784\ubca0\ub514\ub4dc \ub85c\uceec \uacbd\ub85c \ud504\ub85c\ube44\uc800\ub108"),(0,l.kt)("li",{parentName:"ul"},"\ud638\uc2a4\ud2b8 \uc720\ud2f8\ub9ac\ud2f0(iptables, socat \ub4f1)")),(0,l.kt)("h1",{id:"\uc774\ub984\uc5d0\ub294-\ubb34\uc2a8-\ub73b\uc774-\uc788\ub098\uc694"},"\uc774\ub984\uc5d0\ub294 \ubb34\uc2a8 \ub73b\uc774 \uc788\ub098\uc694?"),(0,l.kt)("p",null,"\uc6b0\ub9ac\ub294 \uba54\ubaa8\ub9ac \ud48b\ud504\ub9b0\ud2b8 \uce21\uba74\uc5d0\uc11c \uc808\ubc18 \ud06c\uae30\uc758 Kubernetes\ub97c \uc124\uce58\ud558\uae30\ub97c \uc6d0\ud588\uc2b5\ub2c8\ub2e4. Kubernetes\ub294 K8\ub85c \ud45c\uae30\ub418\ub294 10\uae00\uc790 \ub2e8\uc5b4\uc785\ub2c8\ub2e4. \ub530\ub77c\uc11c \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc758 \uc808\ubc18 \ud06c\uae30\ub77c\uba74 K3s\ub85c \ud45c\uae30\ub41c 5\uae00\uc790 \ub2e8\uc5b4\uac00 \ub420 \uac83\uc785\ub2c8\ub2e4. K3s\uc758 \uae34 \ud615\ud0dc\ub294 \uc5c6\uc73c\uba70 \uacf5\uc2dd\uc801\uc778 \ubc1c\uc74c\ub3c4 \uc5c6\uc2b5\ub2c8\ub2e4."))}s.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/832e9842.8a7bdbf3.js b/kr/assets/js/832e9842.839cc8c8.js
similarity index 99%
rename from kr/assets/js/832e9842.8a7bdbf3.js
rename to kr/assets/js/832e9842.839cc8c8.js
index e03e8a716..e5a51ee65 100644
--- a/kr/assets/js/832e9842.8a7bdbf3.js
+++ b/kr/assets/js/832e9842.839cc8c8.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9184],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var d=a.createContext({}),u=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=u(e.components);return a.createElement(d.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,d=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),k=u(n),m=r,g=k["".concat(d,".").concat(m)]||k[m]||s[m]||l;return n?a.createElement(g,i(i({ref:t},p),{},{components:n})):a.createElement(g,i({ref:t},p))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=k;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},6117:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>s,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var a=n(3117),r=(n(7294),n(3905));const l={title:"agent",weight:2},i="k3s agent",o={unversionedId:"cli/agent",id:"cli/agent",title:"agent",description:"In this section, you'll learn how to configure the K3s agent.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/agent.md",sourceDirName:"cli",slug:"/cli/agent",permalink:"/kr/cli/agent",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"agent",weight:2},sidebar:"mySidebar",previous:{title:"server",permalink:"/kr/cli/server"},next:{title:"certificate",permalink:"/kr/cli/certificate"}},d={},u=[{value:"Logging",id:"logging",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Data",id:"data",level:3},{value:"Node",id:"node",level:3},{value:"Runtime",id:"runtime",level:3},{value:"Networking",id:"networking",level:3},{value:"Customized Flags",id:"customized-flags",level:3},{value:"Experimental",id:"experimental",level:3},{value:"Deprecated",id:"deprecated",level:3},{value:"Node Labels and Taints for Agents",id:"node-labels-and-taints-for-agents",level:3},{value:"K3s Agent CLI Help",id:"k3s-agent-cli-help",level:3}],p={toc:u};function s(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-agent"},"k3s agent"),(0,r.kt)("p",null,"In this section, you'll learn how to configure the K3s agent."),(0,r.kt)("p",null,"Note that servers also run an agent, so all flags listed on this page are also valid for use on servers."),(0,r.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,r.kt)("h3",{id:"logging"},"Logging"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0"),(0,r.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,r.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token value, -t")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Token to use for authentication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"Token file to use for authentication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--server value, -s")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Server to connect to")))),(0,r.kt)("h3",{id:"data"},"Data"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"/var/lib/rancher/k3s"'),(0,r.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,r.kt)("h3",{id:"node"},"Node"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-name")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_NODE_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"Node name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--with-node-id")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Append id to node name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-label")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Registering and starting kubelet with set of labels")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-taint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Registering kubelet with set of taints")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--protect-kernel-defaults")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--selinux")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_SELINUX")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable SELinux in containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--lb-server-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_LB_SERVER_PORT")),(0,r.kt)("td",{parentName:"tr",align:null},"Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)")))),(0,r.kt)("h3",{id:"runtime"},"Runtime"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--container-runtime-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--pause-image")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"docker.io/rancher/pause:3.1"'),(0,r.kt)("td",{parentName:"tr",align:null},"Customized pause image for containerd or docker sandbox")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--private-registry")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"/etc/rancher/k3s/registries.yaml"'),(0,r.kt)("td",{parentName:"tr",align:null},"Private registry configuration file")))),(0,r.kt)("h3",{id:"networking"},"Networking"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-ip value, -i")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"IP address to advertise for node")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"External IP address to advertise for node")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--resolv-conf")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_RESOLV_CONF")),(0,r.kt)("td",{parentName:"tr",align:null},"Kubelet resolv.conf file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-iface")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Override default flannel interface")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Override default flannel config file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-cni-conf")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Override default flannel cni config file")))),(0,r.kt)("h3",{id:"customized-flags"},"Customized Flags"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,r.kt)("h3",{id:"experimental"},"Experimental"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,r.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--docker")),(0,r.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,r.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")))),(0,r.kt)("h3",{id:"deprecated"},"Deprecated"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--token"))))),(0,r.kt)("h3",{id:"node-labels-and-taints-for-agents"},"Node Labels and Taints for Agents"),(0,r.kt)("p",null,"K3s agents can be configured with the options ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands."),(0,r.kt)("p",null,"Below is an example showing how to add labels and a taint:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"     --node-label foo=bar \\\n     --node-label hello=world \\\n     --node-taint key1=value1:NoExecute\n")),(0,r.kt)("p",null,"If you want to change node labels and taints after node registration you should use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),". Refer to the official Kubernetes documentation for details on how to add ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"taints")," and ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"node labels.")),(0,r.kt)("h3",{id:"k3s-agent-cli-help"},"K3s Agent CLI Help"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"[$K3S_URL]"),", it means that the option can be passed in as an environment variable of that name.")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s agent - Run node agent\n\nUSAGE:\n   k3s agent [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --token value, -t value                    (cluster) Token to use for authentication [$K3S_TOKEN]\n   --token-file value                         (cluster) Token file to use for authentication [$K3S_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to [$K3S_URL]\n   --data-dir value, -d value                 (agent/data) Folder to hold state (default: "/var/lib/rancher/k3s")\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n')))}s.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9184],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var d=a.createContext({}),u=function(e){var t=a.useContext(d),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=u(e.components);return a.createElement(d.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,d=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),k=u(n),m=r,g=k["".concat(d,".").concat(m)]||k[m]||s[m]||l;return n?a.createElement(g,i(i({ref:t},p),{},{components:n})):a.createElement(g,i({ref:t},p))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=k;var o={};for(var d in t)hasOwnProperty.call(t,d)&&(o[d]=t[d]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},6117:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>d,contentTitle:()=>i,default:()=>s,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var a=n(3117),r=(n(7294),n(3905));const l={title:"agent",weight:2},i="k3s agent",o={unversionedId:"cli/agent",id:"cli/agent",title:"agent",description:"In this section, you'll learn how to configure the K3s agent.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/agent.md",sourceDirName:"cli",slug:"/cli/agent",permalink:"/kr/cli/agent",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"agent",weight:2},sidebar:"mySidebar",previous:{title:"server",permalink:"/kr/cli/server"},next:{title:"certificate",permalink:"/kr/cli/certificate"}},d={},u=[{value:"Logging",id:"logging",level:3},{value:"Cluster Options",id:"cluster-options",level:3},{value:"Data",id:"data",level:3},{value:"Node",id:"node",level:3},{value:"Runtime",id:"runtime",level:3},{value:"Networking",id:"networking",level:3},{value:"Customized Flags",id:"customized-flags",level:3},{value:"Experimental",id:"experimental",level:3},{value:"Deprecated",id:"deprecated",level:3},{value:"Node Labels and Taints for Agents",id:"node-labels-and-taints-for-agents",level:3},{value:"K3s Agent CLI Help",id:"k3s-agent-cli-help",level:3}],p={toc:u};function s(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-agent"},"k3s agent"),(0,r.kt)("p",null,"In this section, you'll learn how to configure the K3s agent."),(0,r.kt)("p",null,"Note that servers also run an agent, so all flags listed on this page are also valid for use on servers."),(0,r.kt)("p",null,"Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"Configuration File")," documentation for more information on using YAML configuration files."),(0,r.kt)("h3",{id:"logging"},"Logging"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"0"),(0,r.kt)("td",{parentName:"tr",align:null},"Number for the log level verbosity")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Log to standard error as well as file (if set)")))),(0,r.kt)("h3",{id:"cluster-options"},"Cluster Options"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token value, -t")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,r.kt)("td",{parentName:"tr",align:null},"Token to use for authentication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,r.kt)("td",{parentName:"tr",align:null},"Token file to use for authentication")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--server value, -s")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Server to connect to")))),(0,r.kt)("h3",{id:"data"},"Data"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"/var/lib/rancher/k3s"'),(0,r.kt)("td",{parentName:"tr",align:null},"Folder to hold state")))),(0,r.kt)("h3",{id:"node"},"Node"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-name")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_NODE_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"Node name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--with-node-id")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Append id to node name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-label")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Registering and starting kubelet with set of labels")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-taint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Registering kubelet with set of taints")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--protect-kernel-defaults")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--selinux")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_SELINUX")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable SELinux in containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--lb-server-port")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_LB_SERVER_PORT")),(0,r.kt)("td",{parentName:"tr",align:null},"Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)")))),(0,r.kt)("h3",{id:"runtime"},"Runtime"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Default"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--container-runtime-endpoint")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--pause-image")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"docker.io/rancher/pause:3.1"'),(0,r.kt)("td",{parentName:"tr",align:null},"Customized pause image for containerd or docker sandbox")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--private-registry")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'"/etc/rancher/k3s/registries.yaml"'),(0,r.kt)("td",{parentName:"tr",align:null},"Private registry configuration file")))),(0,r.kt)("h3",{id:"networking"},"Networking"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-ip value, -i")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"IP address to advertise for node")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"External IP address to advertise for node")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--resolv-conf")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_RESOLV_CONF")),(0,r.kt)("td",{parentName:"tr",align:null},"Kubelet resolv.conf file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-iface")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Override default flannel interface")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Override default flannel config file")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-cni-conf")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Override default flannel cni config file")))),(0,r.kt)("h3",{id:"customized-flags"},"Customized Flags"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kubelet process")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Customized flag for kube-proxy process")))),(0,r.kt)("h3",{id:"experimental"},"Experimental"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,r.kt)("td",{parentName:"tr",align:null},"Run rootless")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--docker")),(0,r.kt)("td",{parentName:"tr",align:null},"Use cri-dockerd instead of containerd")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,r.kt)("td",{parentName:"tr",align:null},"Prefer bundled userspace binaries over host binaries")))),(0,r.kt)("h3",{id:"deprecated"},"Deprecated"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,r.kt)("td",{parentName:"tr",align:null},"N/A"),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,r.kt)("td",{parentName:"tr",align:null},"Use ",(0,r.kt)("inlineCode",{parentName:"td"},"--token"))))),(0,r.kt)("h3",{id:"node-labels-and-taints-for-agents"},"Node Labels and Taints for Agents"),(0,r.kt)("p",null,"K3s agents can be configured with the options ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands."),(0,r.kt)("p",null,"Below is an example showing how to add labels and a taint:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"     --node-label foo=bar \\\n     --node-label hello=world \\\n     --node-taint key1=value1:NoExecute\n")),(0,r.kt)("p",null,"If you want to change node labels and taints after node registration you should use ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),". Refer to the official Kubernetes documentation for details on how to add ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"taints")," and ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"node labels.")),(0,r.kt)("h3",{id:"k3s-agent-cli-help"},"K3s Agent CLI Help"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"If an option appears in brackets below, for example ",(0,r.kt)("inlineCode",{parentName:"p"},"[$K3S_URL]"),", it means that the option can be passed in as an environment variable of that name.")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s agent - Run node agent\n\nUSAGE:\n   k3s agent [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --token value, -t value                    (cluster) Token to use for authentication [$K3S_TOKEN]\n   --token-file value                         (cluster) Token file to use for authentication [$K3S_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to [$K3S_URL]\n   --data-dir value, -d value                 (agent/data) Folder to hold state (default: "/var/lib/rancher/k3s")\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n')))}s.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/8443.6e4145c7.js b/kr/assets/js/8443.6e4145c7.js
new file mode 100644
index 000000000..0fac7051d
--- /dev/null
+++ b/kr/assets/js/8443.6e4145c7.js
@@ -0,0 +1,2 @@
+/*! For license information please see 8443.6e4145c7.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8443],{8443:(t,e,n)=>{"use strict";t.exports=n(295)},1228:(t,e,n)=>{"use strict";var i=n(2856),s={wrapper:{position:"relative",display:"inline-block"},hint:{position:"absolute",top:"0",left:"0",borderColor:"transparent",boxShadow:"none",opacity:"1"},input:{position:"relative",verticalAlign:"top",backgroundColor:"transparent"},inputWithNoHint:{position:"relative",verticalAlign:"top"},dropdown:{position:"absolute",top:"100%",left:"0",zIndex:"100",display:"none"},suggestions:{display:"block"},suggestion:{whiteSpace:"nowrap",cursor:"pointer"},suggestionChild:{whiteSpace:"normal"},ltr:{left:"0",right:"auto"},rtl:{left:"auto",right:"0"},defaultClasses:{root:"algolia-autocomplete",prefix:"aa",noPrefix:!1,dropdownMenu:"dropdown-menu",input:"input",hint:"hint",suggestions:"suggestions",suggestion:"suggestion",cursor:"cursor",dataset:"dataset",empty:"empty"},appendTo:{wrapper:{position:"absolute",zIndex:"100",display:"none"},input:{},inputWithNoHint:{},dropdown:{display:"block"}}};i.isMsie()&&i.mixin(s.input,{backgroundImage:"url(data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)"}),i.isMsie()&&i.isMsie()<=7&&i.mixin(s.input,{marginTop:"-1px"}),t.exports=s},9050:(t,e,n)=>{"use strict";var i="aaDataset",s="aaValue",r="aaDatum",o=n(2856),a=n(4910),u=n(3561),c=n(1228),l=n(3109);function h(t){var e;(t=t||{}).templates=t.templates||{},t.source||o.error("missing source"),t.name&&(e=t.name,!/^[_a-zA-Z0-9-]+$/.test(e))&&o.error("invalid dataset name: "+t.name),this.query=null,this._isEmpty=!0,this.highlight=!!t.highlight,this.name=void 0===t.name||null===t.name?o.getUniqueId():t.name,this.source=t.source,this.displayFn=function(t){return t=t||"value",o.isFunction(t)?t:e;function e(e){return e[t]}}(t.display||t.displayKey),this.debounce=t.debounce,this.cache=!1!==t.cache,this.templates=function(t,e){return{empty:t.empty&&o.templatify(t.empty),header:t.header&&o.templatify(t.header),footer:t.footer&&o.templatify(t.footer),suggestion:t.suggestion||n};function n(t){return"<p>"+e(t)+"</p>"}}(t.templates,this.displayFn),this.css=o.mixin({},c,t.appendTo?c.appendTo:{}),this.cssClasses=t.cssClasses=o.mixin({},c.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix||o.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix);var n=o.className(this.cssClasses.prefix,this.cssClasses.dataset);this.$el=t.$menu&&t.$menu.find(n+"-"+this.name).length>0?a.element(t.$menu.find(n+"-"+this.name)[0]):a.element(u.dataset.replace("%CLASS%",this.name).replace("%PREFIX%",this.cssClasses.prefix).replace("%DATASET%",this.cssClasses.dataset)),this.$menu=t.$menu,this.clearCachedSuggestions()}h.extractDatasetName=function(t){return a.element(t).data(i)},h.extractValue=function(t){return a.element(t).data(s)},h.extractDatum=function(t){var e=a.element(t).data(r);return"string"==typeof e&&(e=JSON.parse(e)),e},o.mixin(h.prototype,l,{_render:function(t,e){if(this.$el){var n,c=this,l=[].slice.call(arguments,2);if(this.$el.empty(),n=e&&e.length,this._isEmpty=!n,!n&&this.templates.empty)this.$el.html(h.apply(this,l)).prepend(c.templates.header?f.apply(this,l):null).append(c.templates.footer?d.apply(this,l):null);else if(n)this.$el.html(p.apply(this,l)).prepend(c.templates.header?f.apply(this,l):null).append(c.templates.footer?d.apply(this,l):null);else if(e&&!Array.isArray(e))throw new TypeError("suggestions must be an array");this.$menu&&this.$menu.addClass(this.cssClasses.prefix+(n?"with":"without")+"-"+this.name).removeClass(this.cssClasses.prefix+(n?"without":"with")+"-"+this.name),this.trigger("rendered",t)}function h(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!0}].concat(e),c.templates.empty.apply(this,e)}function p(){var t,n,l=[].slice.call(arguments,0),h=this,p=u.suggestions.replace("%PREFIX%",this.cssClasses.prefix).replace("%SUGGESTIONS%",this.cssClasses.suggestions);return t=a.element(p).css(this.css.suggestions),n=o.map(e,f),t.append.apply(t,n),t;function f(t){var e,n=u.suggestion.replace("%PREFIX%",h.cssClasses.prefix).replace("%SUGGESTION%",h.cssClasses.suggestion);return(e=a.element(n).attr({role:"option",id:["option",Math.floor(1e8*Math.random())].join("-")}).append(c.templates.suggestion.apply(this,[t].concat(l)))).data(i,c.name),e.data(s,c.displayFn(t)||void 0),e.data(r,JSON.stringify(t)),e.children().each((function(){a.element(this).css(h.css.suggestionChild)})),e}}function f(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!n}].concat(e),c.templates.header.apply(this,e)}function d(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!n}].concat(e),c.templates.footer.apply(this,e)}},getRoot:function(){return this.$el},update:function(t){function e(e){if(!this.canceled&&t===this.query){var n=[].slice.call(arguments,1);this.cacheSuggestions(t,e,n),this._render.apply(this,[t,e].concat(n))}}if(this.query=t,this.canceled=!1,this.shouldFetchFromCache(t))e.apply(this,[this.cachedSuggestions].concat(this.cachedRenderExtraArgs));else{var n=this,i=function(){n.canceled||n.source(t,e.bind(n))};if(this.debounce){clearTimeout(this.debounceTimeout),this.debounceTimeout=setTimeout((function(){n.debounceTimeout=null,i()}),this.debounce)}else i()}},cacheSuggestions:function(t,e,n){this.cachedQuery=t,this.cachedSuggestions=e,this.cachedRenderExtraArgs=n},shouldFetchFromCache:function(t){return this.cache&&this.cachedQuery===t&&this.cachedSuggestions&&this.cachedSuggestions.length},clearCachedSuggestions:function(){delete this.cachedQuery,delete this.cachedSuggestions,delete this.cachedRenderExtraArgs},cancel:function(){this.canceled=!0},clear:function(){this.$el&&(this.cancel(),this.$el.empty(),this.trigger("rendered",""))},isEmpty:function(){return this._isEmpty},destroy:function(){this.clearCachedSuggestions(),this.$el=null}}),t.exports=h},3354:(t,e,n)=>{"use strict";var i=n(2856),s=n(4910),r=n(3109),o=n(9050),a=n(1228);function u(t){var e,n,r,o=this;(t=t||{}).menu||i.error("menu is required"),i.isArray(t.datasets)||i.isObject(t.datasets)||i.error("1 or more datasets required"),t.datasets||i.error("datasets is required"),this.isOpen=!1,this.isEmpty=!0,this.minLength=t.minLength||0,this.templates={},this.appendTo=t.appendTo||!1,this.css=i.mixin({},a,t.appendTo?a.appendTo:{}),this.cssClasses=t.cssClasses=i.mixin({},a.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix||i.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix),e=i.bind(this._onSuggestionClick,this),n=i.bind(this._onSuggestionMouseEnter,this),r=i.bind(this._onSuggestionMouseLeave,this);var c=i.className(this.cssClasses.prefix,this.cssClasses.suggestion);this.$menu=s.element(t.menu).on("mouseenter.aa",c,n).on("mouseleave.aa",c,r).on("click.aa",c,e),this.$container=t.appendTo?t.wrapper:this.$menu,t.templates&&t.templates.header&&(this.templates.header=i.templatify(t.templates.header),this.$menu.prepend(this.templates.header())),t.templates&&t.templates.empty&&(this.templates.empty=i.templatify(t.templates.empty),this.$empty=s.element('<div class="'+i.className(this.cssClasses.prefix,this.cssClasses.empty,!0)+'"></div>'),this.$menu.append(this.$empty),this.$empty.hide()),this.datasets=i.map(t.datasets,(function(e){return function(t,e,n){return new u.Dataset(i.mixin({$menu:t,cssClasses:n},e))}(o.$menu,e,t.cssClasses)})),i.each(this.datasets,(function(t){var e=t.getRoot();e&&0===e.parent().length&&o.$menu.append(e),t.onSync("rendered",o._onRendered,o)})),t.templates&&t.templates.footer&&(this.templates.footer=i.templatify(t.templates.footer),this.$menu.append(this.templates.footer()));var l=this;s.element(window).resize((function(){l._redraw()}))}i.mixin(u.prototype,r,{_onSuggestionClick:function(t){this.trigger("suggestionClicked",s.element(t.currentTarget))},_onSuggestionMouseEnter:function(t){var e=s.element(t.currentTarget);if(!e.hasClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0))){this._removeCursor();var n=this;setTimeout((function(){n._setCursor(e,!1)}),0)}},_onSuggestionMouseLeave:function(t){if(t.relatedTarget&&s.element(t.relatedTarget).closest("."+i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).length>0)return;this._removeCursor(),this.trigger("cursorRemoved")},_onRendered:function(t,e){if(this.isEmpty=i.every(this.datasets,(function(t){return t.isEmpty()})),this.isEmpty)if(e.length>=this.minLength&&this.trigger("empty"),this.$empty)if(e.length<this.minLength)this._hide();else{var n=this.templates.empty({query:this.datasets[0]&&this.datasets[0].query});this.$empty.html(n),this.$empty.show(),this._show()}else i.any(this.datasets,(function(t){return t.templates&&t.templates.empty}))?e.length<this.minLength?this._hide():this._show():this._hide();else this.isOpen&&(this.$empty&&(this.$empty.empty(),this.$empty.hide()),e.length>=this.minLength?this._show():this._hide());this.trigger("datasetRendered")},_hide:function(){this.$container.hide()},_show:function(){this.$container.css("display","block"),this._redraw(),this.trigger("shown")},_redraw:function(){this.isOpen&&this.appendTo&&this.trigger("redrawn")},_getSuggestions:function(){return this.$menu.find(i.className(this.cssClasses.prefix,this.cssClasses.suggestion))},_getCursor:function(){return this.$menu.find(i.className(this.cssClasses.prefix,this.cssClasses.cursor)).first()},_setCursor:function(t,e){t.first().addClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).attr("aria-selected","true"),this.trigger("cursorMoved",e)},_removeCursor:function(){this._getCursor().removeClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).removeAttr("aria-selected")},_moveCursor:function(t){var e,n,i,s;this.isOpen&&(n=this._getCursor(),e=this._getSuggestions(),this._removeCursor(),-1!==(i=((i=e.index(n)+t)+1)%(e.length+1)-1)?(i<-1&&(i=e.length-1),this._setCursor(s=e.eq(i),!0),this._ensureVisible(s)):this.trigger("cursorRemoved"))},_ensureVisible:function(t){var e,n,i,s;n=(e=t.position().top)+t.height()+parseInt(t.css("margin-top"),10)+parseInt(t.css("margin-bottom"),10),i=this.$menu.scrollTop(),s=this.$menu.height()+parseInt(this.$menu.css("padding-top"),10)+parseInt(this.$menu.css("padding-bottom"),10),e<0?this.$menu.scrollTop(i+e):s<n&&this.$menu.scrollTop(i+(n-s))},close:function(){this.isOpen&&(this.isOpen=!1,this._removeCursor(),this._hide(),this.trigger("closed"))},open:function(){this.isOpen||(this.isOpen=!0,this.isEmpty||this._show(),this.trigger("opened"))},setLanguageDirection:function(t){this.$menu.css("ltr"===t?this.css.ltr:this.css.rtl)},moveCursorUp:function(){this._moveCursor(-1)},moveCursorDown:function(){this._moveCursor(1)},getDatumForSuggestion:function(t){var e=null;return t.length&&(e={raw:o.extractDatum(t),value:o.extractValue(t),datasetName:o.extractDatasetName(t)}),e},getCurrentCursor:function(){return this._getCursor().first()},getDatumForCursor:function(){return this.getDatumForSuggestion(this._getCursor().first())},getDatumForTopSuggestion:function(){return this.getDatumForSuggestion(this._getSuggestions().first())},cursorTopSuggestion:function(){this._setCursor(this._getSuggestions().first(),!1)},update:function(t){i.each(this.datasets,(function(e){e.update(t)}))},empty:function(){i.each(this.datasets,(function(t){t.clear()})),this.isEmpty=!0},isVisible:function(){return this.isOpen&&!this.isEmpty},destroy:function(){this.$menu.off(".aa"),this.$menu=null,i.each(this.datasets,(function(t){t.destroy()}))}}),u.Dataset=o,t.exports=u},50:(t,e,n)=>{"use strict";var i=n(2856),s=n(4910);function r(t){t&&t.el||i.error("EventBus initialized without el"),this.$el=s.element(t.el)}i.mixin(r.prototype,{trigger:function(t,e,n,s){var r=i.Event("autocomplete:"+t);return this.$el.trigger(r,[e,n,s]),r}}),t.exports=r},3109:(t,e,n)=>{"use strict";var i=n(624),s=/\s+/;function r(t,e,n,i){var r;if(!n)return this;for(e=e.split(s),n=i?function(t,e){return t.bind?t.bind(e):function(){t.apply(e,[].slice.call(arguments,0))}}(n,i):n,this._callbacks=this._callbacks||{};r=e.shift();)this._callbacks[r]=this._callbacks[r]||{sync:[],async:[]},this._callbacks[r][t].push(n);return this}function o(t,e,n){return function(){for(var i,s=0,r=t.length;!i&&s<r;s+=1)i=!1===t[s].apply(e,n);return!i}}t.exports={onSync:function(t,e,n){return r.call(this,"sync",t,e,n)},onAsync:function(t,e,n){return r.call(this,"async",t,e,n)},off:function(t){var e;if(!this._callbacks)return this;t=t.split(s);for(;e=t.shift();)delete this._callbacks[e];return this},trigger:function(t){var e,n,r,a,u;if(!this._callbacks)return this;t=t.split(s),r=[].slice.call(arguments,1);for(;(e=t.shift())&&(n=this._callbacks[e]);)a=o(n.sync,this,[e].concat(r)),u=o(n.async,this,[e].concat(r)),a()&&i(u);return this}}},3561:t=>{"use strict";t.exports={wrapper:'<span class="%ROOT%"></span>',dropdown:'<span class="%PREFIX%%DROPDOWN_MENU%"></span>',dataset:'<div class="%PREFIX%%DATASET%-%CLASS%"></div>',suggestions:'<span class="%PREFIX%%SUGGESTIONS%"></span>',suggestion:'<div class="%PREFIX%%SUGGESTION%"></div>'}},2534:(t,e,n)=>{"use strict";var i;i={9:"tab",27:"esc",37:"left",39:"right",13:"enter",38:"up",40:"down"};var s=n(2856),r=n(4910),o=n(3109);function a(t){var e,n,o,a,u,c=this;(t=t||{}).input||s.error("input is missing"),e=s.bind(this._onBlur,this),n=s.bind(this._onFocus,this),o=s.bind(this._onKeydown,this),a=s.bind(this._onInput,this),this.$hint=r.element(t.hint),this.$input=r.element(t.input).on("blur.aa",e).on("focus.aa",n).on("keydown.aa",o),0===this.$hint.length&&(this.setHint=this.getHint=this.clearHint=this.clearHintIfInvalid=s.noop),s.isMsie()?this.$input.on("keydown.aa keypress.aa cut.aa paste.aa",(function(t){i[t.which||t.keyCode]||s.defer(s.bind(c._onInput,c,t))})):this.$input.on("input.aa",a),this.query=this.$input.val(),this.$overflowHelper=(u=this.$input,r.element('<pre aria-hidden="true"></pre>').css({position:"absolute",visibility:"hidden",whiteSpace:"pre",fontFamily:u.css("font-family"),fontSize:u.css("font-size"),fontStyle:u.css("font-style"),fontVariant:u.css("font-variant"),fontWeight:u.css("font-weight"),wordSpacing:u.css("word-spacing"),letterSpacing:u.css("letter-spacing"),textIndent:u.css("text-indent"),textRendering:u.css("text-rendering"),textTransform:u.css("text-transform")}).insertAfter(u))}function u(t){return t.altKey||t.ctrlKey||t.metaKey||t.shiftKey}a.normalizeQuery=function(t){return(t||"").replace(/^\s*/g,"").replace(/\s{2,}/g," ")},s.mixin(a.prototype,o,{_onBlur:function(){this.resetInputValue(),this.$input.removeAttr("aria-activedescendant"),this.trigger("blurred")},_onFocus:function(){this.trigger("focused")},_onKeydown:function(t){var e=i[t.which||t.keyCode];this._managePreventDefault(e,t),e&&this._shouldTrigger(e,t)&&this.trigger(e+"Keyed",t)},_onInput:function(){this._checkInputValue()},_managePreventDefault:function(t,e){var n,i,s;switch(t){case"tab":i=this.getHint(),s=this.getInputValue(),n=i&&i!==s&&!u(e);break;case"up":case"down":n=!u(e);break;default:n=!1}n&&e.preventDefault()},_shouldTrigger:function(t,e){var n;if("tab"===t)n=!u(e);else n=!0;return n},_checkInputValue:function(){var t,e,n,i,s;t=this.getInputValue(),i=t,s=this.query,n=!(!(e=a.normalizeQuery(i)===a.normalizeQuery(s))||!this.query)&&this.query.length!==t.length,this.query=t,e?n&&this.trigger("whitespaceChanged",this.query):this.trigger("queryChanged",this.query)},focus:function(){this.$input.focus()},blur:function(){this.$input.blur()},getQuery:function(){return this.query},setQuery:function(t){this.query=t},getInputValue:function(){return this.$input.val()},setInputValue:function(t,e){void 0===t&&(t=this.query),this.$input.val(t),e?this.clearHint():this._checkInputValue()},expand:function(){this.$input.attr("aria-expanded","true")},collapse:function(){this.$input.attr("aria-expanded","false")},setActiveDescendant:function(t){this.$input.attr("aria-activedescendant",t)},removeActiveDescendant:function(){this.$input.removeAttr("aria-activedescendant")},resetInputValue:function(){this.setInputValue(this.query,!0)},getHint:function(){return this.$hint.val()},setHint:function(t){this.$hint.val(t)},clearHint:function(){this.setHint("")},clearHintIfInvalid:function(){var t,e,n;n=(t=this.getInputValue())!==(e=this.getHint())&&0===e.indexOf(t),""!==t&&n&&!this.hasOverflow()||this.clearHint()},getLanguageDirection:function(){return(this.$input.css("direction")||"ltr").toLowerCase()},hasOverflow:function(){var t=this.$input.width()-2;return this.$overflowHelper.text(this.getInputValue()),this.$overflowHelper.width()>=t},isCursorAtEnd:function(){var t,e,n;return t=this.$input.val().length,e=this.$input[0].selectionStart,s.isNumber(e)?e===t:!document.selection||((n=document.selection.createRange()).moveStart("character",-t),t===n.text.length)},destroy:function(){this.$hint.off(".aa"),this.$input.off(".aa"),this.$hint=this.$input=this.$overflowHelper=null}}),t.exports=a},6549:(t,e,n)=>{"use strict";var i="aaAttrs",s=n(2856),r=n(4910),o=n(50),a=n(2534),u=n(3354),c=n(3561),l=n(1228);function h(t){var e,n;if((t=t||{}).input||s.error("missing input"),this.isActivated=!1,this.debug=!!t.debug,this.autoselect=!!t.autoselect,this.autoselectOnBlur=!!t.autoselectOnBlur,this.openOnFocus=!!t.openOnFocus,this.minLength=s.isNumber(t.minLength)?t.minLength:1,this.autoWidth=void 0===t.autoWidth||!!t.autoWidth,this.clearOnSelected=!!t.clearOnSelected,this.tabAutocomplete=void 0===t.tabAutocomplete||!!t.tabAutocomplete,t.hint=!!t.hint,t.hint&&t.appendTo)throw new Error("[autocomplete.js] hint and appendTo options can't be used at the same time");this.css=t.css=s.mixin({},l,t.appendTo?l.appendTo:{}),this.cssClasses=t.cssClasses=s.mixin({},l.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix=s.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix),this.listboxId=t.listboxId=[this.cssClasses.root,"listbox",s.getUniqueId()].join("-");var a=function(t){var e,n,o,a;e=r.element(t.input),n=r.element(c.wrapper.replace("%ROOT%",t.cssClasses.root)).css(t.css.wrapper),t.appendTo||"block"!==e.css("display")||"table"!==e.parent().css("display")||n.css("display","table-cell");var u=c.dropdown.replace("%PREFIX%",t.cssClasses.prefix).replace("%DROPDOWN_MENU%",t.cssClasses.dropdownMenu);o=r.element(u).css(t.css.dropdown).attr({role:"listbox",id:t.listboxId}),t.templates&&t.templates.dropdownMenu&&o.html(s.templatify(t.templates.dropdownMenu)());(a=e.clone().css(t.css.hint).css(function(t){return{backgroundAttachment:t.css("background-attachment"),backgroundClip:t.css("background-clip"),backgroundColor:t.css("background-color"),backgroundImage:t.css("background-image"),backgroundOrigin:t.css("background-origin"),backgroundPosition:t.css("background-position"),backgroundRepeat:t.css("background-repeat"),backgroundSize:t.css("background-size")}}(e))).val("").addClass(s.className(t.cssClasses.prefix,t.cssClasses.hint,!0)).removeAttr("id name placeholder required").prop("readonly",!0).attr({"aria-hidden":"true",autocomplete:"off",spellcheck:"false",tabindex:-1}),a.removeData&&a.removeData();e.data(i,{"aria-autocomplete":e.attr("aria-autocomplete"),"aria-expanded":e.attr("aria-expanded"),"aria-owns":e.attr("aria-owns"),autocomplete:e.attr("autocomplete"),dir:e.attr("dir"),role:e.attr("role"),spellcheck:e.attr("spellcheck"),style:e.attr("style"),type:e.attr("type")}),e.addClass(s.className(t.cssClasses.prefix,t.cssClasses.input,!0)).attr({autocomplete:"off",spellcheck:!1,role:"combobox","aria-autocomplete":t.datasets&&t.datasets[0]&&t.datasets[0].displayKey?"both":"list","aria-expanded":"false","aria-label":t.ariaLabel,"aria-owns":t.listboxId}).css(t.hint?t.css.input:t.css.inputWithNoHint);try{e.attr("dir")||e.attr("dir","auto")}catch(l){}return(n=t.appendTo?n.appendTo(r.element(t.appendTo).eq(0)).eq(0):e.wrap(n).parent()).prepend(t.hint?a:null).append(o),{wrapper:n,input:e,hint:a,menu:o}}(t);this.$node=a.wrapper;var u=this.$input=a.input;e=a.menu,n=a.hint,t.dropdownMenuContainer&&r.element(t.dropdownMenuContainer).css("position","relative").append(e.css("top","0")),u.on("blur.aa",(function(t){var n=document.activeElement;s.isMsie()&&(e[0]===n||e[0].contains(n))&&(t.preventDefault(),t.stopImmediatePropagation(),s.defer((function(){u.focus()})))})),e.on("mousedown.aa",(function(t){t.preventDefault()})),this.eventBus=t.eventBus||new o({el:u}),this.dropdown=new h.Dropdown({appendTo:t.appendTo,wrapper:this.$node,menu:e,datasets:t.datasets,templates:t.templates,cssClasses:t.cssClasses,minLength:this.minLength}).onSync("suggestionClicked",this._onSuggestionClicked,this).onSync("cursorMoved",this._onCursorMoved,this).onSync("cursorRemoved",this._onCursorRemoved,this).onSync("opened",this._onOpened,this).onSync("closed",this._onClosed,this).onSync("shown",this._onShown,this).onSync("empty",this._onEmpty,this).onSync("redrawn",this._onRedrawn,this).onAsync("datasetRendered",this._onDatasetRendered,this),this.input=new h.Input({input:u,hint:n}).onSync("focused",this._onFocused,this).onSync("blurred",this._onBlurred,this).onSync("enterKeyed",this._onEnterKeyed,this).onSync("tabKeyed",this._onTabKeyed,this).onSync("escKeyed",this._onEscKeyed,this).onSync("upKeyed",this._onUpKeyed,this).onSync("downKeyed",this._onDownKeyed,this).onSync("leftKeyed",this._onLeftKeyed,this).onSync("rightKeyed",this._onRightKeyed,this).onSync("queryChanged",this._onQueryChanged,this).onSync("whitespaceChanged",this._onWhitespaceChanged,this),this._bindKeyboardShortcuts(t),this._setLanguageDirection()}s.mixin(h.prototype,{_bindKeyboardShortcuts:function(t){if(t.keyboardShortcuts){var e=this.$input,n=[];s.each(t.keyboardShortcuts,(function(t){"string"==typeof t&&(t=t.toUpperCase().charCodeAt(0)),n.push(t)})),r.element(document).keydown((function(t){var i=t.target||t.srcElement,s=i.tagName;if(!i.isContentEditable&&"INPUT"!==s&&"SELECT"!==s&&"TEXTAREA"!==s){var r=t.which||t.keyCode;-1!==n.indexOf(r)&&(e.focus(),t.stopPropagation(),t.preventDefault())}}))}},_onSuggestionClicked:function(t,e){var n;(n=this.dropdown.getDatumForSuggestion(e))&&this._select(n,{selectionMethod:"click"})},_onCursorMoved:function(t,e){var n=this.dropdown.getDatumForCursor(),i=this.dropdown.getCurrentCursor().attr("id");this.input.setActiveDescendant(i),n&&(e&&this.input.setInputValue(n.value,!0),this.eventBus.trigger("cursorchanged",n.raw,n.datasetName))},_onCursorRemoved:function(){this.input.resetInputValue(),this._updateHint(),this.eventBus.trigger("cursorremoved")},_onDatasetRendered:function(){this._updateHint(),this.eventBus.trigger("updated")},_onOpened:function(){this._updateHint(),this.input.expand(),this.eventBus.trigger("opened")},_onEmpty:function(){this.eventBus.trigger("empty")},_onRedrawn:function(){this.$node.css("top","0px"),this.$node.css("left","0px");var t=this.$input[0].getBoundingClientRect();this.autoWidth&&this.$node.css("width",t.width+"px");var e=this.$node[0].getBoundingClientRect(),n=t.bottom-e.top;this.$node.css("top",n+"px");var i=t.left-e.left;this.$node.css("left",i+"px"),this.eventBus.trigger("redrawn")},_onShown:function(){this.eventBus.trigger("shown"),this.autoselect&&this.dropdown.cursorTopSuggestion()},_onClosed:function(){this.input.clearHint(),this.input.removeActiveDescendant(),this.input.collapse(),this.eventBus.trigger("closed")},_onFocused:function(){if(this.isActivated=!0,this.openOnFocus){var t=this.input.getQuery();t.length>=this.minLength?this.dropdown.update(t):this.dropdown.empty(),this.dropdown.open()}},_onBlurred:function(){var t,e;t=this.dropdown.getDatumForCursor(),e=this.dropdown.getDatumForTopSuggestion();var n={selectionMethod:"blur"};this.debug||(this.autoselectOnBlur&&t?this._select(t,n):this.autoselectOnBlur&&e?this._select(e,n):(this.isActivated=!1,this.dropdown.empty(),this.dropdown.close()))},_onEnterKeyed:function(t,e){var n,i;n=this.dropdown.getDatumForCursor(),i=this.dropdown.getDatumForTopSuggestion();var s={selectionMethod:"enterKey"};n?(this._select(n,s),e.preventDefault()):this.autoselect&&i&&(this._select(i,s),e.preventDefault())},_onTabKeyed:function(t,e){if(this.tabAutocomplete){var n;(n=this.dropdown.getDatumForCursor())?(this._select(n,{selectionMethod:"tabKey"}),e.preventDefault()):this._autocomplete(!0)}else this.dropdown.close()},_onEscKeyed:function(){this.dropdown.close(),this.input.resetInputValue()},_onUpKeyed:function(){var t=this.input.getQuery();this.dropdown.isEmpty&&t.length>=this.minLength?this.dropdown.update(t):this.dropdown.moveCursorUp(),this.dropdown.open()},_onDownKeyed:function(){var t=this.input.getQuery();this.dropdown.isEmpty&&t.length>=this.minLength?this.dropdown.update(t):this.dropdown.moveCursorDown(),this.dropdown.open()},_onLeftKeyed:function(){"rtl"===this.dir&&this._autocomplete()},_onRightKeyed:function(){"ltr"===this.dir&&this._autocomplete()},_onQueryChanged:function(t,e){this.input.clearHintIfInvalid(),e.length>=this.minLength?this.dropdown.update(e):this.dropdown.empty(),this.dropdown.open(),this._setLanguageDirection()},_onWhitespaceChanged:function(){this._updateHint(),this.dropdown.open()},_setLanguageDirection:function(){var t=this.input.getLanguageDirection();this.dir!==t&&(this.dir=t,this.$node.css("direction",t),this.dropdown.setLanguageDirection(t))},_updateHint:function(){var t,e,n,i,r;(t=this.dropdown.getDatumForTopSuggestion())&&this.dropdown.isVisible()&&!this.input.hasOverflow()?(e=this.input.getInputValue(),n=a.normalizeQuery(e),i=s.escapeRegExChars(n),(r=new RegExp("^(?:"+i+")(.+$)","i").exec(t.value))?this.input.setHint(e+r[1]):this.input.clearHint()):this.input.clearHint()},_autocomplete:function(t){var e,n,i,s;e=this.input.getHint(),n=this.input.getQuery(),i=t||this.input.isCursorAtEnd(),e&&n!==e&&i&&((s=this.dropdown.getDatumForTopSuggestion())&&this.input.setInputValue(s.value),this.eventBus.trigger("autocompleted",s.raw,s.datasetName))},_select:function(t,e){void 0!==t.value&&this.input.setQuery(t.value),this.clearOnSelected?this.setVal(""):this.input.setInputValue(t.value,!0),this._setLanguageDirection(),!1===this.eventBus.trigger("selected",t.raw,t.datasetName,e).isDefaultPrevented()&&(this.dropdown.close(),s.defer(s.bind(this.dropdown.empty,this.dropdown)))},open:function(){if(!this.isActivated){var t=this.input.getInputValue();t.length>=this.minLength?this.dropdown.update(t):this.dropdown.empty()}this.dropdown.open()},close:function(){this.dropdown.close()},setVal:function(t){t=s.toStr(t),this.isActivated?this.input.setInputValue(t):(this.input.setQuery(t),this.input.setInputValue(t,!0)),this._setLanguageDirection()},getVal:function(){return this.input.getQuery()},destroy:function(){this.input.destroy(),this.dropdown.destroy(),function(t,e){var n=t.find(s.className(e.prefix,e.input));s.each(n.data(i),(function(t,e){void 0===t?n.removeAttr(e):n.attr(e,t)})),n.detach().removeClass(s.className(e.prefix,e.input,!0)).insertAfter(t),n.removeData&&n.removeData(i);t.remove()}(this.$node,this.cssClasses),this.$node=null},getWrapper:function(){return this.dropdown.$container[0]}}),h.Dropdown=u,h.Input=a,h.sources=n(8840),t.exports=h},4910:t=>{"use strict";t.exports={element:null}},6177:t=>{"use strict";t.exports=function(t){var e=t.match(/Algolia for JavaScript \((\d+\.)(\d+\.)(\d+)\)/)||t.match(/Algolia for vanilla JavaScript (\d+\.)(\d+\.)(\d+)/);if(e)return[e[1],e[2],e[3]]}},2856:(t,e,n)=>{"use strict";var i,s=n(8820),r=n(4910);function o(t){return t.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")}t.exports={isArray:null,isFunction:null,isObject:null,bind:null,each:null,map:null,mixin:null,isMsie:function(t){if(void 0===t&&(t=navigator.userAgent),/(msie|trident)/i.test(t)){var e=t.match(/(msie |rv:)(\d+(.\d+)?)/i);if(e)return e[2]}return!1},escapeRegExChars:function(t){return t.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")},isNumber:function(t){return"number"==typeof t},toStr:function(t){return null==t?"":t+""},cloneDeep:function(t){var e=this.mixin({},t),n=this;return this.each(e,(function(t,i){t&&(n.isArray(t)?e[i]=[].concat(t):n.isObject(t)&&(e[i]=n.cloneDeep(t)))})),e},error:function(t){throw new Error(t)},every:function(t,e){var n=!0;return t?(this.each(t,(function(i,s){n&&(n=e.call(null,i,s,t)&&n)})),!!n):n},any:function(t,e){var n=!1;return t?(this.each(t,(function(i,s){if(e.call(null,i,s,t))return n=!0,!1})),n):n},getUniqueId:(i=0,function(){return i++}),templatify:function(t){if(this.isFunction(t))return t;var e=r.element(t);return"SCRIPT"===e.prop("tagName")?function(){return e.text()}:function(){return String(t)}},defer:function(t){setTimeout(t,0)},noop:function(){},formatPrefix:function(t,e){return e?"":t+"-"},className:function(t,e,n){return n?t+e:"."+s(t+e,{isIdentifier:!0})},escapeHighlightedString:function(t,e,n){e=e||"<em>";var i=document.createElement("div");i.appendChild(document.createTextNode(e)),n=n||"</em>";var s=document.createElement("div");s.appendChild(document.createTextNode(n));var r=document.createElement("div");return r.appendChild(document.createTextNode(t)),r.innerHTML.replace(RegExp(o(i.innerHTML),"g"),e).replace(RegExp(o(s.innerHTML),"g"),n)}}},9983:(t,e,n)=>{"use strict";var i=n(2856),s=n(533),r=n(6177);var o,a,u=(o=[],a=window.Promise.resolve(),function(t,e){return function(n,s){(function(t,e){return window.Promise.resolve().then((function(){return o.length&&(a=t.search(o),o=[]),a})).then((function(t){if(t)return t.results[e]}))})(t.as,o.push({indexName:t.indexName,query:n,params:e})-1).then((function(t){t&&s(t.hits,t)})).catch((function(t){i.error(t.message)}))}});t.exports=function(t,e){var n=r(t.as._ua);if(n&&n[0]>=3&&n[1]>20){var i="autocomplete.js "+s;-1===t.as._ua.indexOf(i)&&(t.as._ua+="; "+i)}return u(t,e)}},8840:(t,e,n)=>{"use strict";t.exports={hits:n(9983),popularIn:n(4445)}},4445:(t,e,n)=>{"use strict";var i=n(2856),s=n(533),r=n(6177);t.exports=function(t,e,n,o){var a=r(t.as._ua);if(a&&a[0]>=3&&a[1]>20&&((e=e||{}).additionalUA="autocomplete.js "+s),!n.source)return i.error("Missing 'source' key");var u=i.isFunction(n.source)?n.source:function(t){return t[n.source]};if(!n.index)return i.error("Missing 'index' key");var c=n.index;return o=o||{},function(a,l){t.search(a,e,(function(t,a){if(t)i.error(t.message);else{if(a.hits.length>0){var h=a.hits[0],p=i.mixin({hitsPerPage:0},n);delete p.source,delete p.index;var f=r(c.as._ua);return f&&f[0]>=3&&f[1]>20&&(e.additionalUA="autocomplete.js "+s),void c.search(u(h),p,(function(t,e){if(t)i.error(t.message);else{var n=[];if(o.includeAll){var s=o.allTitle||"All departments";n.push(i.mixin({facet:{value:s,count:e.nbHits}},i.cloneDeep(h)))}i.each(e.facets,(function(t,e){i.each(t,(function(t,s){n.push(i.mixin({facet:{facet:e,value:s,count:t}},i.cloneDeep(h)))}))}));for(var r=1;r<a.hits.length;++r)n.push(a.hits[r]);l(n,a)}}))}l([])}}))}}},295:(t,e,n)=>{"use strict";var i=n(6990);n(4910).element=i;var s=n(2856);s.isArray=i.isArray,s.isFunction=i.isFunction,s.isObject=i.isPlainObject,s.bind=i.proxy,s.each=function(t,e){i.each(t,(function(t,n){return e(n,t)}))},s.map=i.map,s.mixin=i.extend,s.Event=i.Event;var r="aaAutocomplete",o=n(6549),a=n(50);function u(t,e,n,u){n=s.isArray(n)?n:[].slice.call(arguments,2);var c=i(t).each((function(t,s){var c=i(s),l=new a({el:c}),h=u||new o({input:c,eventBus:l,dropdownMenuContainer:e.dropdownMenuContainer,hint:void 0===e.hint||!!e.hint,minLength:e.minLength,autoselect:e.autoselect,autoselectOnBlur:e.autoselectOnBlur,tabAutocomplete:e.tabAutocomplete,openOnFocus:e.openOnFocus,templates:e.templates,debug:e.debug,clearOnSelected:e.clearOnSelected,cssClasses:e.cssClasses,datasets:n,keyboardShortcuts:e.keyboardShortcuts,appendTo:e.appendTo,autoWidth:e.autoWidth,ariaLabel:e.ariaLabel||s.getAttribute("aria-label")});c.data(r,h)}));return c.autocomplete={},s.each(["open","close","getVal","setVal","destroy","getWrapper"],(function(t){c.autocomplete[t]=function(){var e,n=arguments;return c.each((function(s,o){var a=i(o).data(r);e=a[t].apply(a,n)})),e}})),c}u.sources=o.sources,u.escapeHighlightedString=s.escapeHighlightedString;var c="autocomplete"in window,l=window.autocomplete;u.noConflict=function(){return c?window.autocomplete=l:delete window.autocomplete,u},t.exports=u},533:t=>{t.exports="0.38.1"},6990:t=>{var e;e=window,t.exports=function(t){var e,n,i=function(){var e,n,i,s,r,o,a=[],u=a.concat,c=a.filter,l=a.slice,h=t.document,p={},f={},d={"column-count":1,columns:1,"font-weight":1,"line-height":1,opacity:1,"z-index":1,zoom:1},g=/^\s*<(\w+|!)[^>]*>/,m=/^<(\w+)\s*\/?>(?:<\/\1>|)$/,v=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:]+)[^>]*)\/>/gi,y=/^(?:body|html)$/i,w=/([A-Z])/g,b=["val","css","html","text","data","width","height","offset"],C=["after","prepend","before","append"],x=h.createElement("table"),_=h.createElement("tr"),S={tr:h.createElement("tbody"),tbody:x,thead:x,tfoot:x,td:_,th:_,"*":h.createElement("div")},E=/complete|loaded|interactive/,A=/^[\w-]*$/,$={},T=$.toString,O={},D=h.createElement("div"),N={tabindex:"tabIndex",readonly:"readOnly",for:"htmlFor",class:"className",maxlength:"maxLength",cellspacing:"cellSpacing",cellpadding:"cellPadding",rowspan:"rowSpan",colspan:"colSpan",usemap:"useMap",frameborder:"frameBorder",contenteditable:"contentEditable"},k=Array.isArray||function(t){return t instanceof Array};function I(t){return null==t?String(t):$[T.call(t)]||"object"}function P(t){return"function"==I(t)}function L(t){return null!=t&&t==t.window}function M(t){return null!=t&&t.nodeType==t.DOCUMENT_NODE}function F(t){return"object"==I(t)}function R(t){return F(t)&&!L(t)&&Object.getPrototypeOf(t)==Object.prototype}function q(t){var e=!!t&&"length"in t&&t.length,n=i.type(t);return"function"!=n&&!L(t)&&("array"==n||0===e||"number"==typeof e&&e>0&&e-1 in t)}function V(t){return c.call(t,(function(t){return null!=t}))}function H(t){return t.length>0?i.fn.concat.apply([],t):t}function B(t){return t.replace(/::/g,"/").replace(/([A-Z]+)([A-Z][a-z])/g,"$1_$2").replace(/([a-z\d])([A-Z])/g,"$1_$2").replace(/_/g,"-").toLowerCase()}function K(t){return t in f?f[t]:f[t]=new RegExp("(^|\\s)"+t+"(\\s|$)")}function j(t,e){return"number"!=typeof e||d[B(t)]?e:e+"px"}function z(t){var e,n;return p[t]||(e=h.createElement(t),h.body.appendChild(e),n=getComputedStyle(e,"").getPropertyValue("display"),e.parentNode.removeChild(e),"none"==n&&(n="block"),p[t]=n),p[t]}function U(t){return"children"in t?l.call(t.children):i.map(t.childNodes,(function(t){if(1==t.nodeType)return t}))}function Q(t,e){var n,i=t?t.length:0;for(n=0;n<i;n++)this[n]=t[n];this.length=i,this.selector=e||""}function W(t,i,s){for(n in i)s&&(R(i[n])||k(i[n]))?(R(i[n])&&!R(t[n])&&(t[n]={}),k(i[n])&&!k(t[n])&&(t[n]=[]),W(t[n],i[n],s)):i[n]!==e&&(t[n]=i[n])}function Z(t,e){return null==e?i(t):i(t).filter(e)}function X(t,e,n,i){return P(e)?e.call(t,n,i):e}function G(t,e,n){null==n?t.removeAttribute(e):t.setAttribute(e,n)}function J(t,n){var i=t.className||"",s=i&&i.baseVal!==e;if(n===e)return s?i.baseVal:i;s?i.baseVal=n:t.className=n}function Y(t){try{return t?"true"==t||"false"!=t&&("null"==t?null:+t+""==t?+t:/^[\[\{]/.test(t)?i.parseJSON(t):t):t}catch(e){return t}}function tt(t,e){e(t);for(var n=0,i=t.childNodes.length;n<i;n++)tt(t.childNodes[n],e)}return O.matches=function(t,e){if(!e||!t||1!==t.nodeType)return!1;var n=t.matches||t.webkitMatchesSelector||t.mozMatchesSelector||t.oMatchesSelector||t.matchesSelector;if(n)return n.call(t,e);var i,s=t.parentNode,r=!s;return r&&(s=D).appendChild(t),i=~O.qsa(s,e).indexOf(t),r&&D.removeChild(t),i},r=function(t){return t.replace(/-+(.)?/g,(function(t,e){return e?e.toUpperCase():""}))},o=function(t){return c.call(t,(function(e,n){return t.indexOf(e)==n}))},O.fragment=function(t,n,s){var r,o,a;return m.test(t)&&(r=i(h.createElement(RegExp.$1))),r||(t.replace&&(t=t.replace(v,"<$1></$2>")),n===e&&(n=g.test(t)&&RegExp.$1),n in S||(n="*"),(a=S[n]).innerHTML=""+t,r=i.each(l.call(a.childNodes),(function(){a.removeChild(this)}))),R(s)&&(o=i(r),i.each(s,(function(t,e){b.indexOf(t)>-1?o[t](e):o.attr(t,e)}))),r},O.Z=function(t,e){return new Q(t,e)},O.isZ=function(t){return t instanceof O.Z},O.init=function(t,n){var s;if(!t)return O.Z();if("string"==typeof t)if("<"==(t=t.trim())[0]&&g.test(t))s=O.fragment(t,RegExp.$1,n),t=null;else{if(n!==e)return i(n).find(t);s=O.qsa(h,t)}else{if(P(t))return i(h).ready(t);if(O.isZ(t))return t;if(k(t))s=V(t);else if(F(t))s=[t],t=null;else if(g.test(t))s=O.fragment(t.trim(),RegExp.$1,n),t=null;else{if(n!==e)return i(n).find(t);s=O.qsa(h,t)}}return O.Z(s,t)},(i=function(t,e){return O.init(t,e)}).extend=function(t){var e,n=l.call(arguments,1);return"boolean"==typeof t&&(e=t,t=n.shift()),n.forEach((function(n){W(t,n,e)})),t},O.qsa=function(t,e){var n,i="#"==e[0],s=!i&&"."==e[0],r=i||s?e.slice(1):e,o=A.test(r);return t.getElementById&&o&&i?(n=t.getElementById(r))?[n]:[]:1!==t.nodeType&&9!==t.nodeType&&11!==t.nodeType?[]:l.call(o&&!i&&t.getElementsByClassName?s?t.getElementsByClassName(r):t.getElementsByTagName(e):t.querySelectorAll(e))},i.contains=h.documentElement.contains?function(t,e){return t!==e&&t.contains(e)}:function(t,e){for(;e&&(e=e.parentNode);)if(e===t)return!0;return!1},i.type=I,i.isFunction=P,i.isWindow=L,i.isArray=k,i.isPlainObject=R,i.isEmptyObject=function(t){var e;for(e in t)return!1;return!0},i.isNumeric=function(t){var e=Number(t),n=typeof t;return null!=t&&"boolean"!=n&&("string"!=n||t.length)&&!isNaN(e)&&isFinite(e)||!1},i.inArray=function(t,e,n){return a.indexOf.call(e,t,n)},i.camelCase=r,i.trim=function(t){return null==t?"":String.prototype.trim.call(t)},i.uuid=0,i.support={},i.expr={},i.noop=function(){},i.map=function(t,e){var n,i,s,r=[];if(q(t))for(i=0;i<t.length;i++)null!=(n=e(t[i],i))&&r.push(n);else for(s in t)null!=(n=e(t[s],s))&&r.push(n);return H(r)},i.each=function(t,e){var n,i;if(q(t)){for(n=0;n<t.length;n++)if(!1===e.call(t[n],n,t[n]))return t}else for(i in t)if(!1===e.call(t[i],i,t[i]))return t;return t},i.grep=function(t,e){return c.call(t,e)},t.JSON&&(i.parseJSON=JSON.parse),i.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),(function(t,e){$["[object "+e+"]"]=e.toLowerCase()})),i.fn={constructor:O.Z,length:0,forEach:a.forEach,reduce:a.reduce,push:a.push,sort:a.sort,splice:a.splice,indexOf:a.indexOf,concat:function(){var t,e,n=[];for(t=0;t<arguments.length;t++)e=arguments[t],n[t]=O.isZ(e)?e.toArray():e;return u.apply(O.isZ(this)?this.toArray():this,n)},map:function(t){return i(i.map(this,(function(e,n){return t.call(e,n,e)})))},slice:function(){return i(l.apply(this,arguments))},ready:function(t){return E.test(h.readyState)&&h.body?t(i):h.addEventListener("DOMContentLoaded",(function(){t(i)}),!1),this},get:function(t){return t===e?l.call(this):this[t>=0?t:t+this.length]},toArray:function(){return this.get()},size:function(){return this.length},remove:function(){return this.each((function(){null!=this.parentNode&&this.parentNode.removeChild(this)}))},each:function(t){return a.every.call(this,(function(e,n){return!1!==t.call(e,n,e)})),this},filter:function(t){return P(t)?this.not(this.not(t)):i(c.call(this,(function(e){return O.matches(e,t)})))},add:function(t,e){return i(o(this.concat(i(t,e))))},is:function(t){return this.length>0&&O.matches(this[0],t)},not:function(t){var n=[];if(P(t)&&t.call!==e)this.each((function(e){t.call(this,e)||n.push(this)}));else{var s="string"==typeof t?this.filter(t):q(t)&&P(t.item)?l.call(t):i(t);this.forEach((function(t){s.indexOf(t)<0&&n.push(t)}))}return i(n)},has:function(t){return this.filter((function(){return F(t)?i.contains(this,t):i(this).find(t).size()}))},eq:function(t){return-1===t?this.slice(t):this.slice(t,+t+1)},first:function(){var t=this[0];return t&&!F(t)?t:i(t)},last:function(){var t=this[this.length-1];return t&&!F(t)?t:i(t)},find:function(t){var e=this;return t?"object"==typeof t?i(t).filter((function(){var t=this;return a.some.call(e,(function(e){return i.contains(e,t)}))})):1==this.length?i(O.qsa(this[0],t)):this.map((function(){return O.qsa(this,t)})):i()},closest:function(t,e){var n=[],s="object"==typeof t&&i(t);return this.each((function(i,r){for(;r&&!(s?s.indexOf(r)>=0:O.matches(r,t));)r=r!==e&&!M(r)&&r.parentNode;r&&n.indexOf(r)<0&&n.push(r)})),i(n)},parents:function(t){for(var e=[],n=this;n.length>0;)n=i.map(n,(function(t){if((t=t.parentNode)&&!M(t)&&e.indexOf(t)<0)return e.push(t),t}));return Z(e,t)},parent:function(t){return Z(o(this.pluck("parentNode")),t)},children:function(t){return Z(this.map((function(){return U(this)})),t)},contents:function(){return this.map((function(){return this.contentDocument||l.call(this.childNodes)}))},siblings:function(t){return Z(this.map((function(t,e){return c.call(U(e.parentNode),(function(t){return t!==e}))})),t)},empty:function(){return this.each((function(){this.innerHTML=""}))},pluck:function(t){return i.map(this,(function(e){return e[t]}))},show:function(){return this.each((function(){"none"==this.style.display&&(this.style.display=""),"none"==getComputedStyle(this,"").getPropertyValue("display")&&(this.style.display=z(this.nodeName))}))},replaceWith:function(t){return this.before(t).remove()},wrap:function(t){var e=P(t);if(this[0]&&!e)var n=i(t).get(0),s=n.parentNode||this.length>1;return this.each((function(r){i(this).wrapAll(e?t.call(this,r):s?n.cloneNode(!0):n)}))},wrapAll:function(t){if(this[0]){var e;for(i(this[0]).before(t=i(t));(e=t.children()).length;)t=e.first();i(t).append(this)}return this},wrapInner:function(t){var e=P(t);return this.each((function(n){var s=i(this),r=s.contents(),o=e?t.call(this,n):t;r.length?r.wrapAll(o):s.append(o)}))},unwrap:function(){return this.parent().each((function(){i(this).replaceWith(i(this).children())})),this},clone:function(){return this.map((function(){return this.cloneNode(!0)}))},hide:function(){return this.css("display","none")},toggle:function(t){return this.each((function(){var n=i(this);(t===e?"none"==n.css("display"):t)?n.show():n.hide()}))},prev:function(t){return i(this.pluck("previousElementSibling")).filter(t||"*")},next:function(t){return i(this.pluck("nextElementSibling")).filter(t||"*")},html:function(t){return 0 in arguments?this.each((function(e){var n=this.innerHTML;i(this).empty().append(X(this,t,e,n))})):0 in this?this[0].innerHTML:null},text:function(t){return 0 in arguments?this.each((function(e){var n=X(this,t,e,this.textContent);this.textContent=null==n?"":""+n})):0 in this?this.pluck("textContent").join(""):null},attr:function(t,i){var s;return"string"!=typeof t||1 in arguments?this.each((function(e){if(1===this.nodeType)if(F(t))for(n in t)G(this,n,t[n]);else G(this,t,X(this,i,e,this.getAttribute(t)))})):0 in this&&1==this[0].nodeType&&null!=(s=this[0].getAttribute(t))?s:e},removeAttr:function(t){return this.each((function(){1===this.nodeType&&t.split(" ").forEach((function(t){G(this,t)}),this)}))},prop:function(t,e){return t=N[t]||t,1 in arguments?this.each((function(n){this[t]=X(this,e,n,this[t])})):this[0]&&this[0][t]},removeProp:function(t){return t=N[t]||t,this.each((function(){delete this[t]}))},data:function(t,n){var i="data-"+t.replace(w,"-$1").toLowerCase(),s=1 in arguments?this.attr(i,n):this.attr(i);return null!==s?Y(s):e},val:function(t){return 0 in arguments?(null==t&&(t=""),this.each((function(e){this.value=X(this,t,e,this.value)}))):this[0]&&(this[0].multiple?i(this[0]).find("option").filter((function(){return this.selected})).pluck("value"):this[0].value)},offset:function(e){if(e)return this.each((function(t){var n=i(this),s=X(this,e,t,n.offset()),r=n.offsetParent().offset(),o={top:s.top-r.top,left:s.left-r.left};"static"==n.css("position")&&(o.position="relative"),n.css(o)}));if(!this.length)return null;if(h.documentElement!==this[0]&&!i.contains(h.documentElement,this[0]))return{top:0,left:0};var n=this[0].getBoundingClientRect();return{left:n.left+t.pageXOffset,top:n.top+t.pageYOffset,width:Math.round(n.width),height:Math.round(n.height)}},css:function(t,e){if(arguments.length<2){var s=this[0];if("string"==typeof t){if(!s)return;return s.style[r(t)]||getComputedStyle(s,"").getPropertyValue(t)}if(k(t)){if(!s)return;var o={},a=getComputedStyle(s,"");return i.each(t,(function(t,e){o[e]=s.style[r(e)]||a.getPropertyValue(e)})),o}}var u="";if("string"==I(t))e||0===e?u=B(t)+":"+j(t,e):this.each((function(){this.style.removeProperty(B(t))}));else for(n in t)t[n]||0===t[n]?u+=B(n)+":"+j(n,t[n])+";":this.each((function(){this.style.removeProperty(B(n))}));return this.each((function(){this.style.cssText+=";"+u}))},index:function(t){return t?this.indexOf(i(t)[0]):this.parent().children().indexOf(this[0])},hasClass:function(t){return!!t&&a.some.call(this,(function(t){return this.test(J(t))}),K(t))},addClass:function(t){return t?this.each((function(e){if("className"in this){s=[];var n=J(this);X(this,t,e,n).split(/\s+/g).forEach((function(t){i(this).hasClass(t)||s.push(t)}),this),s.length&&J(this,n+(n?" ":"")+s.join(" "))}})):this},removeClass:function(t){return this.each((function(n){if("className"in this){if(t===e)return J(this,"");s=J(this),X(this,t,n,s).split(/\s+/g).forEach((function(t){s=s.replace(K(t)," ")})),J(this,s.trim())}}))},toggleClass:function(t,n){return t?this.each((function(s){var r=i(this);X(this,t,s,J(this)).split(/\s+/g).forEach((function(t){(n===e?!r.hasClass(t):n)?r.addClass(t):r.removeClass(t)}))})):this},scrollTop:function(t){if(this.length){var n="scrollTop"in this[0];return t===e?n?this[0].scrollTop:this[0].pageYOffset:this.each(n?function(){this.scrollTop=t}:function(){this.scrollTo(this.scrollX,t)})}},scrollLeft:function(t){if(this.length){var n="scrollLeft"in this[0];return t===e?n?this[0].scrollLeft:this[0].pageXOffset:this.each(n?function(){this.scrollLeft=t}:function(){this.scrollTo(t,this.scrollY)})}},position:function(){if(this.length){var t=this[0],e=this.offsetParent(),n=this.offset(),s=y.test(e[0].nodeName)?{top:0,left:0}:e.offset();return n.top-=parseFloat(i(t).css("margin-top"))||0,n.left-=parseFloat(i(t).css("margin-left"))||0,s.top+=parseFloat(i(e[0]).css("border-top-width"))||0,s.left+=parseFloat(i(e[0]).css("border-left-width"))||0,{top:n.top-s.top,left:n.left-s.left}}},offsetParent:function(){return this.map((function(){for(var t=this.offsetParent||h.body;t&&!y.test(t.nodeName)&&"static"==i(t).css("position");)t=t.offsetParent;return t}))}},i.fn.detach=i.fn.remove,["width","height"].forEach((function(t){var n=t.replace(/./,(function(t){return t[0].toUpperCase()}));i.fn[t]=function(s){var r,o=this[0];return s===e?L(o)?o["inner"+n]:M(o)?o.documentElement["scroll"+n]:(r=this.offset())&&r[t]:this.each((function(e){(o=i(this)).css(t,X(this,s,e,o[t]()))}))}})),C.forEach((function(n,s){var r=s%2;i.fn[n]=function(){var n,o,a=i.map(arguments,(function(t){var s=[];return"array"==(n=I(t))?(t.forEach((function(t){return t.nodeType!==e?s.push(t):i.zepto.isZ(t)?s=s.concat(t.get()):void(s=s.concat(O.fragment(t)))})),s):"object"==n||null==t?t:O.fragment(t)})),u=this.length>1;return a.length<1?this:this.each((function(e,n){o=r?n:n.parentNode,n=0==s?n.nextSibling:1==s?n.firstChild:2==s?n:null;var c=i.contains(h.documentElement,o);a.forEach((function(e){if(u)e=e.cloneNode(!0);else if(!o)return i(e).remove();o.insertBefore(e,n),c&&tt(e,(function(e){if(!(null==e.nodeName||"SCRIPT"!==e.nodeName.toUpperCase()||e.type&&"text/javascript"!==e.type||e.src)){var n=e.ownerDocument?e.ownerDocument.defaultView:t;n.eval.call(n,e.innerHTML)}}))}))}))},i.fn[r?n+"To":"insert"+(s?"Before":"After")]=function(t){return i(t)[n](this),this}})),O.Z.prototype=Q.prototype=i.fn,O.uniq=o,O.deserializeValue=Y,i.zepto=O,i}();return function(e){var n,i=1,s=Array.prototype.slice,r=e.isFunction,o=function(t){return"string"==typeof t},a={},u={},c="onfocusin"in t,l={focus:"focusin",blur:"focusout"},h={mouseenter:"mouseover",mouseleave:"mouseout"};function p(t){return t._zid||(t._zid=i++)}function f(t,e,n,i){if((e=d(e)).ns)var s=g(e.ns);return(a[p(t)]||[]).filter((function(t){return t&&(!e.e||t.e==e.e)&&(!e.ns||s.test(t.ns))&&(!n||p(t.fn)===p(n))&&(!i||t.sel==i)}))}function d(t){var e=(""+t).split(".");return{e:e[0],ns:e.slice(1).sort().join(" ")}}function g(t){return new RegExp("(?:^| )"+t.replace(" "," .* ?")+"(?: |$)")}function m(t,e){return t.del&&!c&&t.e in l||!!e}function v(t){return h[t]||c&&l[t]||t}function y(t,i,s,r,o,u,c){var l=p(t),f=a[l]||(a[l]=[]);i.split(/\s/).forEach((function(i){if("ready"==i)return e(document).ready(s);var a=d(i);a.fn=s,a.sel=o,a.e in h&&(s=function(t){var n=t.relatedTarget;if(!n||n!==this&&!e.contains(this,n))return a.fn.apply(this,arguments)}),a.del=u;var l=u||s;a.proxy=function(e){if(!(e=S(e)).isImmediatePropagationStopped()){try{var i=Object.getOwnPropertyDescriptor(e,"data");i&&!i.writable||(e.data=r)}catch(e){}var s=l.apply(t,e._args==n?[e]:[e].concat(e._args));return!1===s&&(e.preventDefault(),e.stopPropagation()),s}},a.i=f.length,f.push(a),"addEventListener"in t&&t.addEventListener(v(a.e),a.proxy,m(a,c))}))}function w(t,e,n,i,s){var r=p(t);(e||"").split(/\s/).forEach((function(e){f(t,e,n,i).forEach((function(e){delete a[r][e.i],"removeEventListener"in t&&t.removeEventListener(v(e.e),e.proxy,m(e,s))}))}))}u.click=u.mousedown=u.mouseup=u.mousemove="MouseEvents",e.event={add:y,remove:w},e.proxy=function(t,n){var i=2 in arguments&&s.call(arguments,2);if(r(t)){var a=function(){return t.apply(n,i?i.concat(s.call(arguments)):arguments)};return a._zid=p(t),a}if(o(n))return i?(i.unshift(t[n],t),e.proxy.apply(null,i)):e.proxy(t[n],t);throw new TypeError("expected function")},e.fn.bind=function(t,e,n){return this.on(t,e,n)},e.fn.unbind=function(t,e){return this.off(t,e)},e.fn.one=function(t,e,n,i){return this.on(t,e,n,i,1)};var b=function(){return!0},C=function(){return!1},x=/^([A-Z]|returnValue$|layer[XY]$|webkitMovement[XY]$)/,_={preventDefault:"isDefaultPrevented",stopImmediatePropagation:"isImmediatePropagationStopped",stopPropagation:"isPropagationStopped"};function S(t,i){if(i||!t.isDefaultPrevented){i||(i=t),e.each(_,(function(e,n){var s=i[e];t[e]=function(){return this[n]=b,s&&s.apply(i,arguments)},t[n]=C}));try{t.timeStamp||(t.timeStamp=Date.now())}catch(s){}(i.defaultPrevented!==n?i.defaultPrevented:"returnValue"in i?!1===i.returnValue:i.getPreventDefault&&i.getPreventDefault())&&(t.isDefaultPrevented=b)}return t}function E(t){var e,i={originalEvent:t};for(e in t)x.test(e)||t[e]===n||(i[e]=t[e]);return S(i,t)}e.fn.delegate=function(t,e,n){return this.on(e,t,n)},e.fn.undelegate=function(t,e,n){return this.off(e,t,n)},e.fn.live=function(t,n){return e(document.body).delegate(this.selector,t,n),this},e.fn.die=function(t,n){return e(document.body).undelegate(this.selector,t,n),this},e.fn.on=function(t,i,a,u,c){var l,h,p=this;return t&&!o(t)?(e.each(t,(function(t,e){p.on(t,i,a,e,c)})),p):(o(i)||r(u)||!1===u||(u=a,a=i,i=n),u!==n&&!1!==a||(u=a,a=n),!1===u&&(u=C),p.each((function(n,r){c&&(l=function(t){return w(r,t.type,u),u.apply(this,arguments)}),i&&(h=function(t){var n,o=e(t.target).closest(i,r).get(0);if(o&&o!==r)return n=e.extend(E(t),{currentTarget:o,liveFired:r}),(l||u).apply(o,[n].concat(s.call(arguments,1)))}),y(r,t,u,a,i,h||l)})))},e.fn.off=function(t,i,s){var a=this;return t&&!o(t)?(e.each(t,(function(t,e){a.off(t,i,e)})),a):(o(i)||r(s)||!1===s||(s=i,i=n),!1===s&&(s=C),a.each((function(){w(this,t,s,i)})))},e.fn.trigger=function(t,n){return(t=o(t)||e.isPlainObject(t)?e.Event(t):S(t))._args=n,this.each((function(){t.type in l&&"function"==typeof this[t.type]?this[t.type]():"dispatchEvent"in this?this.dispatchEvent(t):e(this).triggerHandler(t,n)}))},e.fn.triggerHandler=function(t,n){var i,s;return this.each((function(r,a){(i=E(o(t)?e.Event(t):t))._args=n,i.target=a,e.each(f(a,t.type||t),(function(t,e){if(s=e.proxy(i),i.isImmediatePropagationStopped())return!1}))})),s},"focusin focusout focus blur load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select keydown keypress keyup error".split(" ").forEach((function(t){e.fn[t]=function(e){return 0 in arguments?this.bind(t,e):this.trigger(t)}})),e.Event=function(t,e){o(t)||(t=(e=t).type);var n=document.createEvent(u[t]||"Events"),i=!0;if(e)for(var s in e)"bubbles"==s?i=!!e[s]:n[s]=e[s];return n.initEvent(t,i,!0),S(n)}}(i),n=[],i.fn.remove=function(){return this.each((function(){this.parentNode&&("IMG"===this.tagName&&(n.push(this),this.src="data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=",e&&clearTimeout(e),e=setTimeout((function(){n=[]}),6e4)),this.parentNode.removeChild(this))}))},function(t){var e={},n=t.fn.data,i=t.camelCase,s=t.expando="Zepto"+ +new Date,r=[];function o(r,o){var u=r[s],c=u&&e[u];if(void 0===o)return c||a(r);if(c){if(o in c)return c[o];var l=i(o);if(l in c)return c[l]}return n.call(t(r),o)}function a(n,r,o){var a=n[s]||(n[s]=++t.uuid),c=e[a]||(e[a]=u(n));return void 0!==r&&(c[i(r)]=o),c}function u(e){var n={};return t.each(e.attributes||r,(function(e,s){0==s.name.indexOf("data-")&&(n[i(s.name.replace("data-",""))]=t.zepto.deserializeValue(s.value))})),n}t.fn.data=function(e,n){return void 0===n?t.isPlainObject(e)?this.each((function(n,i){t.each(e,(function(t,e){a(i,t,e)}))})):0 in this?o(this[0],e):void 0:this.each((function(){a(this,e,n)}))},t.data=function(e,n,i){return t(e).data(n,i)},t.hasData=function(n){var i=n[s],r=i&&e[i];return!!r&&!t.isEmptyObject(r)},t.fn.removeData=function(n){return"string"==typeof n&&(n=n.split(/\s+/)),this.each((function(){var r=this[s],o=r&&e[r];o&&t.each(n||o,(function(t){delete o[n?i(this):t]}))}))},["remove","empty"].forEach((function(e){var n=t.fn[e];t.fn[e]=function(){var t=this.find("*");return"remove"===e&&(t=t.add(this)),t.removeData(),n.call(this)}}))}(i),i}(e)},8820:t=>{"use strict";var e={}.hasOwnProperty,n=/[ -,\.\/:-@\[-\^`\{-~]/,i=/[ -,\.\/:-@\[\]\^`\{-~]/,s=/(^|\\+)?(\\[A-F0-9]{1,6})\x20(?![a-fA-F0-9\x20])/g,r=function t(r,o){"single"!=(o=function(t,n){if(!t)return n;var i={};for(var s in n)i[s]=e.call(t,s)?t[s]:n[s];return i}(o,t.options)).quotes&&"double"!=o.quotes&&(o.quotes="single");for(var a="double"==o.quotes?'"':"'",u=o.isIdentifier,c=r.charAt(0),l="",h=0,p=r.length;h<p;){var f=r.charAt(h++),d=f.charCodeAt(),g=void 0;if(d<32||d>126){if(d>=55296&&d<=56319&&h<p){var m=r.charCodeAt(h++);56320==(64512&m)?d=((1023&d)<<10)+(1023&m)+65536:h--}g="\\"+d.toString(16).toUpperCase()+" "}else g=o.escapeEverything?n.test(f)?"\\"+f:"\\"+d.toString(16).toUpperCase()+" ":/[\t\n\f\r\x0B]/.test(f)?"\\"+d.toString(16).toUpperCase()+" ":"\\"==f||!u&&('"'==f&&a==f||"'"==f&&a==f)||u&&i.test(f)?"\\"+f:f;l+=g}return u&&(/^-[-\d]/.test(l)?l="\\-"+l.slice(1):/\d/.test(c)&&(l="\\3"+c+" "+l.slice(1))),l=l.replace(s,(function(t,e,n){return e&&e.length%2?t:(e||"")+n})),!u&&o.wrap?a+l+a:l};r.options={escapeEverything:!1,isIdentifier:!1,quotes:"single",wrap:!1},r.version="3.0.0",t.exports=r},624:(t,e,n)=>{"use strict";var i,s,r,o=[n(5525),n(4785),n(8291),n(2709),n(2506),n(9176)],a=-1,u=[],c=!1;function l(){i&&s&&(i=!1,s.length?u=s.concat(u):a=-1,u.length&&h())}function h(){if(!i){c=!1,i=!0;for(var t=u.length,e=setTimeout(l);t;){for(s=u,u=[];s&&++a<t;)s[a].run();a=-1,t=u.length}s=null,a=-1,i=!1,clearTimeout(e)}}for(var p=-1,f=o.length;++p<f;)if(o[p]&&o[p].test&&o[p].test()){r=o[p].install(h);break}function d(t,e){this.fun=t,this.array=e}d.prototype.run=function(){var t=this.fun,e=this.array;switch(e.length){case 0:return t();case 1:return t(e[0]);case 2:return t(e[0],e[1]);case 3:return t(e[0],e[1],e[2]);default:return t.apply(null,e)}},t.exports=function(t){var e=new Array(arguments.length-1);if(arguments.length>1)for(var n=1;n<arguments.length;n++)e[n-1]=arguments[n];u.push(new d(t,e)),c||i||(c=!0,r())}},2709:(t,e,n)=>{"use strict";e.test=function(){return!n.g.setImmediate&&void 0!==n.g.MessageChannel},e.install=function(t){var e=new n.g.MessageChannel;return e.port1.onmessage=t,function(){e.port2.postMessage(0)}}},8291:(t,e,n)=>{"use strict";var i=n.g.MutationObserver||n.g.WebKitMutationObserver;e.test=function(){return i},e.install=function(t){var e=0,s=new i(t),r=n.g.document.createTextNode("");return s.observe(r,{characterData:!0}),function(){r.data=e=++e%2}}},4785:(t,e,n)=>{"use strict";e.test=function(){return"function"==typeof n.g.queueMicrotask},e.install=function(t){return function(){n.g.queueMicrotask(t)}}},2506:(t,e,n)=>{"use strict";e.test=function(){return"document"in n.g&&"onreadystatechange"in n.g.document.createElement("script")},e.install=function(t){return function(){var e=n.g.document.createElement("script");return e.onreadystatechange=function(){t(),e.onreadystatechange=null,e.parentNode.removeChild(e),e=null},n.g.document.documentElement.appendChild(e),t}}},9176:(t,e)=>{"use strict";e.test=function(){return!0},e.install=function(t){return function(){setTimeout(t,0)}}}}]);
\ No newline at end of file
diff --git a/kr/assets/js/8443.6e4145c7.js.LICENSE.txt b/kr/assets/js/8443.6e4145c7.js.LICENSE.txt
new file mode 100644
index 000000000..4f7ccd8a7
--- /dev/null
+++ b/kr/assets/js/8443.6e4145c7.js.LICENSE.txt
@@ -0,0 +1 @@
+/*! https://mths.be/cssesc v3.0.0 by @mathias */
diff --git a/kr/assets/js/8894.b6a0e6e6.js b/kr/assets/js/8894.b6a0e6e6.js
deleted file mode 100644
index ab9a307a0..000000000
--- a/kr/assets/js/8894.b6a0e6e6.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8894],{8894:(s,k,_)=>{_.r(k)}}]);
\ No newline at end of file
diff --git a/kr/assets/js/944a1646.5bf5c9d6.js b/kr/assets/js/944a1646.6aa2e1b0.js
similarity index 99%
rename from kr/assets/js/944a1646.5bf5c9d6.js
rename to kr/assets/js/944a1646.6aa2e1b0.js
index ffeeb99b4..6baa99cf3 100644
--- a/kr/assets/js/944a1646.5bf5c9d6.js
+++ b/kr/assets/js/944a1646.6aa2e1b0.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2399],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),d=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,l=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),u=d(r),m=a,h=u["".concat(l,".").concat(m)]||u[m]||p[m]||i;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,o=new Array(i);o[0]=u;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,o[1]=s;for(var d=2;d<i;d++)o[d]=r[d];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},8724:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>p,frontMatter:()=>i,metadata:()=>s,toc:()=>d});var n=r(3117),a=(r(7294),r(3905));const i={title:"High Availability Embedded etcd",weight:40},o=void 0,s={unversionedId:"datastore/ha-embedded",id:"datastore/ha-embedded",title:"High Availability Embedded etcd",description:"Full support as of v1.19.5+k3s1",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",sourceDirName:"datastore",slug:"/datastore/ha-embedded",permalink:"/kr/datastore/ha-embedded",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"High Availability Embedded etcd",weight:40},sidebar:"mySidebar",previous:{title:"Backup and Restore",permalink:"/kr/datastore/backup-restore"},next:{title:"High Availability External DB",permalink:"/kr/datastore/ha"}},l={},d=[{value:"New cluster",id:"new-cluster",level:2},{value:"Existing clusters",id:"existing-clusters",level:2}],c={toc:d};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Full support as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.5%2Bk3s1"},"v1.19.5+k3s1"),(0,a.kt)("br",{parentName:"p"}),"\n","Experimental support as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,a.kt)("admonition",{title:"Notice: Deprecated Dqlite",type:"note"},(0,a.kt)("p",{parentName:"admonition"},"Embedded etcd replaced experimental Dqlite in the K3s v1.19.1 release. This is a breaking change. Please note that upgrades from experimental Dqlite to embedded etcd are not supported. If you attempt an upgrade it will not succeed and data will be lost.")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.")),(0,a.kt)("h2",{id:"new-cluster"},"New cluster"),(0,a.kt)("p",null,"To run K3s in this mode, you must have an odd number of server nodes. We recommend starting with three nodes."),(0,a.kt)("p",null,"To get started, first launch a server node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"cluster-init")," flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster."),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --cluster-init\n")),(0,a.kt)("p",null,"After launching the first server, join the second and third servers to the cluster using the shared secret:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443\n")),(0,a.kt)("p",null,"Check to see that the second and third servers are now part of the cluster:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME        STATUS   ROLES                       AGE   VERSION\nserver1     Ready    control-plane,etcd,master   28m   vX.Y.Z\nserver2     Ready    control-plane,etcd,master   13m   vX.Y.Z\n")),(0,a.kt)("p",null,"Now you have a highly available control plane. Any successfully clustered servers can be used in the ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," argument to join additional server and worker nodes. Joining additional worker nodes to the cluster follows the same procedure as a single server cluster."),(0,a.kt)("p",null,"There are a few config flags that must be the same in all server nodes:         "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Network related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,a.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")),(0,a.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("h2",{id:"existing-clusters"},"Existing clusters"),(0,a.kt)("p",null,"If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," flag. Once you've done that, you'll be able to add additional instances as described above."),(0,a.kt)("p",null,"If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--datastore-endpoint"),", etc) are ignored."),(0,a.kt)("blockquote",null,(0,a.kt)("p",{parentName:"blockquote"},(0,a.kt)("strong",{parentName:"p"},"Important:")," K3s v1.22.2 and newer support migration from SQLite to etcd. Older versions will create a new empty datastore if you add ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," to an existing server.")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2399],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),d=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},c=function(e){var t=d(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,l=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),u=d(r),m=a,h=u["".concat(l,".").concat(m)]||u[m]||p[m]||i;return r?n.createElement(h,o(o({ref:t},c),{},{components:r})):n.createElement(h,o({ref:t},c))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,o=new Array(i);o[0]=u;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,o[1]=s;for(var d=2;d<i;d++)o[d]=r[d];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},8724:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>p,frontMatter:()=>i,metadata:()=>s,toc:()=>d});var n=r(3117),a=(r(7294),r(3905));const i={title:"High Availability Embedded etcd",weight:40},o=void 0,s={unversionedId:"datastore/ha-embedded",id:"datastore/ha-embedded",title:"High Availability Embedded etcd",description:"Full support as of v1.19.5+k3s1",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",sourceDirName:"datastore",slug:"/datastore/ha-embedded",permalink:"/kr/datastore/ha-embedded",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"High Availability Embedded etcd",weight:40},sidebar:"mySidebar",previous:{title:"Backup and Restore",permalink:"/kr/datastore/backup-restore"},next:{title:"High Availability External DB",permalink:"/kr/datastore/ha"}},l={},d=[{value:"New cluster",id:"new-cluster",level:2},{value:"Existing clusters",id:"existing-clusters",level:2}],c={toc:d};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Full support as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.5%2Bk3s1"},"v1.19.5+k3s1"),(0,a.kt)("br",{parentName:"p"}),"\n","Experimental support as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,a.kt)("admonition",{title:"Notice: Deprecated Dqlite",type:"note"},(0,a.kt)("p",{parentName:"admonition"},"Embedded etcd replaced experimental Dqlite in the K3s v1.19.1 release. This is a breaking change. Please note that upgrades from experimental Dqlite to embedded etcd are not supported. If you attempt an upgrade it will not succeed and data will be lost.")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.")),(0,a.kt)("h2",{id:"new-cluster"},"New cluster"),(0,a.kt)("p",null,"To run K3s in this mode, you must have an odd number of server nodes. We recommend starting with three nodes."),(0,a.kt)("p",null,"To get started, first launch a server node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"cluster-init")," flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster."),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --cluster-init\n")),(0,a.kt)("p",null,"After launching the first server, join the second and third servers to the cluster using the shared secret:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443\n")),(0,a.kt)("p",null,"Check to see that the second and third servers are now part of the cluster:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME        STATUS   ROLES                       AGE   VERSION\nserver1     Ready    control-plane,etcd,master   28m   vX.Y.Z\nserver2     Ready    control-plane,etcd,master   13m   vX.Y.Z\n")),(0,a.kt)("p",null,"Now you have a highly available control plane. Any successfully clustered servers can be used in the ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," argument to join additional server and worker nodes. Joining additional worker nodes to the cluster follows the same procedure as a single server cluster."),(0,a.kt)("p",null,"There are a few config flags that must be the same in all server nodes:         "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Network related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--service-cidr")),(0,a.kt)("li",{parentName:"ul"},"Flags controlling the deployment of certain components: ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," and any component passed to ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")),(0,a.kt)("li",{parentName:"ul"},"Feature related flags: ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("h2",{id:"existing-clusters"},"Existing clusters"),(0,a.kt)("p",null,"If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," flag. Once you've done that, you'll be able to add additional instances as described above."),(0,a.kt)("p",null,"If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"--datastore-endpoint"),", etc) are ignored."),(0,a.kt)("blockquote",null,(0,a.kt)("p",{parentName:"blockquote"},(0,a.kt)("strong",{parentName:"p"},"Important:")," K3s v1.22.2 and newer support migration from SQLite to etcd. Older versions will create a new empty datastore if you add ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," to an existing server.")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/a0c5848d.f131b913.js b/kr/assets/js/a0c5848d.117222b4.js
similarity index 97%
rename from kr/assets/js/a0c5848d.f131b913.js
rename to kr/assets/js/a0c5848d.117222b4.js
index b0c467aa9..ad3a9b0f6 100644
--- a/kr/assets/js/a0c5848d.f131b913.js
+++ b/kr/assets/js/a0c5848d.117222b4.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9059],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},f=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),f=p(n),m=a,d=f["".concat(s,".").concat(m)]||f[m]||u[m]||o;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=f;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=n[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}f.displayName="MDXCreateElement"},5344:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const o={title:"\uc124\uce58",weight:20},i=void 0,l={unversionedId:"installation/installation",id:"installation/installation",title:"\uc124\uce58",description:"\uc774 \uc139\uc158\uc5d0\ub294 \ub2e4\uc591\ud55c \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc124\uce58\ud558\uae30 \uc704\ud55c \uc9c0\uce68\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. K3s \uc124\uce58\ub97c \uc2dc\uc791\ud558\uae30 \uc804\uc5d0 \uc694\uad6c \uc0ac\ud56d\uc744 \ucda9\uc871\ud588\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/installation.md",sourceDirName:"installation",slug:"/installation/",permalink:"/kr/installation/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\uc124\uce58",weight:20},sidebar:"mySidebar",previous:{title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",permalink:"/kr/quick-start/"},next:{title:"Requirements",permalink:"/kr/installation/requirements"}},s={},p=[],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\ub294 \ub2e4\uc591\ud55c \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc124\uce58\ud558\uae30 \uc704\ud55c \uc9c0\uce68\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. K3s \uc124\uce58\ub97c \uc2dc\uc791\ud558\uae30 \uc804\uc5d0 ",(0,a.kt)("a",{parentName:"p",href:"/kr/installation/requirements"},"\uc694\uad6c \uc0ac\ud56d"),"\uc744 \ucda9\uc871\ud588\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/configuration"},"\uad6c\uc131 \uc635\uc158"),"\uc5d0\uc11c\ub294 K3s\ub97c \uc124\uce58\ud560 \ub54c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \uc635\uc158\uc5d0 \ub300\ud55c \uc548\ub0b4\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/network-options"},"\ub124\ud2b8\uc6cc\ud06c \uc635\uc158"),"\uc5d0\uc11c\ub294 K3s\uc5d0\uc11c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ub124\ud2b8\uc6cc\ud06c \uc635\uc158\uc5d0 \ub300\ud55c \uc548\ub0b4\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/airgap"},"\uc5d0\uc5b4\uac2d \uc124\uce58"),"\uc5d0\uc11c\ub294 \uc778\ud130\ub137\uc5d0 \uc9c1\uc811 \uc811\uc18d\ud560 \uc218 \uc5c6\ub294 \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc744 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/server-roles"},"\uc11c\ubc84 \uc5ed\ud560"),"\uc5d0\uc11c\ub294 \uc804\uc6a9 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \ub610\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \uc11c\ubc84\ub85c K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc744 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/packaged-components"},"\ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8"),"\uc5d0\uc11c\ub294 \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8\ub97c \ube44\ud65c\uc131\ud654\ud558\uac70\ub098 \uc790\ub3d9 \ubc30\ud3ec \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc9c1\uc811 \uc124\uce58\ud558\ub294 \ubc29\ubc95\uc744 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9059],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},f=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),f=p(n),m=a,d=f["".concat(s,".").concat(m)]||f[m]||u[m]||o;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=f;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=n[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}f.displayName="MDXCreateElement"},5344:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const o={title:"\uc124\uce58",weight:20},i=void 0,l={unversionedId:"installation/installation",id:"installation/installation",title:"\uc124\uce58",description:"\uc774 \uc139\uc158\uc5d0\ub294 \ub2e4\uc591\ud55c \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc124\uce58\ud558\uae30 \uc704\ud55c \uc9c0\uce68\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. K3s \uc124\uce58\ub97c \uc2dc\uc791\ud558\uae30 \uc804\uc5d0 \uc694\uad6c \uc0ac\ud56d\uc744 \ucda9\uc871\ud588\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/installation.md",sourceDirName:"installation",slug:"/installation/",permalink:"/kr/installation/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\uc124\uce58",weight:20},sidebar:"mySidebar",previous:{title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",permalink:"/kr/quick-start/"},next:{title:"Requirements",permalink:"/kr/installation/requirements"}},s={},p=[],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc774 \uc139\uc158\uc5d0\ub294 \ub2e4\uc591\ud55c \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc124\uce58\ud558\uae30 \uc704\ud55c \uc9c0\uce68\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. K3s \uc124\uce58\ub97c \uc2dc\uc791\ud558\uae30 \uc804\uc5d0 ",(0,a.kt)("a",{parentName:"p",href:"/kr/installation/requirements"},"\uc694\uad6c \uc0ac\ud56d"),"\uc744 \ucda9\uc871\ud588\ub294\uc9c0 \ud655\uc778\ud558\uc2ed\uc2dc\uc624."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/configuration"},"\uad6c\uc131 \uc635\uc158"),"\uc5d0\uc11c\ub294 K3s\ub97c \uc124\uce58\ud560 \ub54c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \uc635\uc158\uc5d0 \ub300\ud55c \uc548\ub0b4\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/network-options"},"\ub124\ud2b8\uc6cc\ud06c \uc635\uc158"),"\uc5d0\uc11c\ub294 K3s\uc5d0\uc11c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ub124\ud2b8\uc6cc\ud06c \uc635\uc158\uc5d0 \ub300\ud55c \uc548\ub0b4\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/airgap"},"\uc5d0\uc5b4\uac2d \uc124\uce58"),"\uc5d0\uc11c\ub294 \uc778\ud130\ub137\uc5d0 \uc9c1\uc811 \uc811\uc18d\ud560 \uc218 \uc5c6\ub294 \ud658\uacbd\uc5d0\uc11c K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc744 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/server-roles"},"\uc11c\ubc84 \uc5ed\ud560"),"\uc5d0\uc11c\ub294 \uc804\uc6a9 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \ub610\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \uc11c\ubc84\ub85c K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc744 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/installation/packaged-components"},"\ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8"),"\uc5d0\uc11c\ub294 \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8\ub97c \ube44\ud65c\uc131\ud654\ud558\uac70\ub098 \uc790\ub3d9 \ubc30\ud3ec \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc9c1\uc811 \uc124\uce58\ud558\ub294 \ubc29\ubc95\uc744 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/a101d863.9fefa039.js b/kr/assets/js/a101d863.9395dc73.js
similarity index 99%
rename from kr/assets/js/a101d863.9fefa039.js
rename to kr/assets/js/a101d863.9395dc73.js
index e7bd4862d..af71490f5 100644
--- a/kr/assets/js/a101d863.9fefa039.js
+++ b/kr/assets/js/a101d863.9395dc73.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9166],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>u});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var p=n.createContext({}),k=function(e){var t=n.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=k(e.components);return n.createElement(p.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,p=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=k(r),u=l,m=d["".concat(p,".").concat(u)]||d[u]||s[u]||a;return r?n.createElement(m,i(i({ref:t},c),{},{components:r})):n.createElement(m,i({ref:t},c))}));function u(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,i=new Array(a);i[0]=d;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var k=2;k<a;k++)i[k]=r[k];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5696:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>s,frontMatter:()=>a,metadata:()=>o,toc:()=>k});var n=r(3117),l=(r(7294),r(3905));const a={title:"\ub124\ud2b8\uc6cc\ud0b9",weight:35},i=void 0,o={unversionedId:"networking/networking",id:"networking/networking",title:"\ub124\ud2b8\uc6cc\ud0b9",description:"\uc774 \ud398\uc774\uc9c0\ub294 CoreDNS, Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec, Klipper \uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uac00 K3s \ub0b4\uc5d0\uc11c \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd\uc744 \uc124\uba85\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/networking/networking.md",sourceDirName:"networking",slug:"/networking/",permalink:"/kr/networking/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ub124\ud2b8\uc6cc\ud0b9",weight:35},sidebar:"mySidebar",previous:{title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",permalink:"/kr/storage/"},next:{title:"\ud5ec\ub984(Helm)",permalink:"/kr/helm/"}},p={},k=[{value:"CoreDNS",id:"coredns",level:2},{value:"Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec",id:"traefik-\uc778\uadf8\ub808\uc2a4-\ucee8\ud2b8\ub864\ub7ec",level:2},{value:"\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec (Network Policy Controller)",id:"\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ucee8\ud2b8\ub864\ub7ec-network-policy-controller",level:2},{value:"\uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c",id:"\uc11c\ube44\uc2a4-\ub85c\ub4dc\ubc38\ub7f0\uc11c",level:2},{value:"ServiceLB \uc791\ub3d9 \ubc29\uc2dd",id:"servicelb-\uc791\ub3d9-\ubc29\uc2dd",level:3},{value:"\uc0ac\uc6a9\ubc95",id:"\uc0ac\uc6a9\ubc95",level:3},{value:"ServiceLB \ub178\ub4dc \uc120\ud0dd \uc81c\uc5b4\ud558\uae30",id:"servicelb-\ub178\ub4dc-\uc120\ud0dd-\uc81c\uc5b4\ud558\uae30",level:3},{value:"ServiceLB \ub178\ub4dc \ud480 \uc0dd\uc131\ud558\uae30",id:"servicelb-\ub178\ub4dc-\ud480-\uc0dd\uc131\ud558\uae30",level:3},{value:"ServiceLB \ube44\ud65c\uc131\ud654",id:"servicelb-\ube44\ud65c\uc131\ud654",level:3},{value:"\uc678\ubd80 \ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \ub9e4\ub2c8\uc800 \ubc30\ud3ec\ud558\uae30",id:"\uc678\ubd80-\ud074\ub77c\uc6b0\ub4dc-\ucee8\ud2b8\ub864\ub7ec-\ub9e4\ub2c8\uc800-\ubc30\ud3ec\ud558\uae30",level:2},{value:"\ud638\uc2a4\ud2b8 \uc774\ub984\uc774 \uc5c6\ub294 \ub178\ub4dc",id:"\ud638\uc2a4\ud2b8-\uc774\ub984\uc774-\uc5c6\ub294-\ub178\ub4dc",level:2}],c={toc:k};function s(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\uc774 \ud398\uc774\uc9c0\ub294 CoreDNS, Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec, Klipper \uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uac00 K3s \ub0b4\uc5d0\uc11c \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd\uc744 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"Flannel \uad6c\uc131 \uc635\uc158 \ubc0f \ubc31\uc5d4\ub4dc \uc120\ud0dd\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc774\ub098 \uc790\uccb4 CNI \uc124\uc815 \ubc29\ubc95\uc740 ",(0,l.kt)("a",{parentName:"p",href:"/kr/installation/network-options"},"\uc124\uce58 \ub124\ud2b8\uc6cc\ud06c \uc635\uc158")," \ud398\uc774\uc9c0\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("p",null,"K3s\ub97c \uc704\ud574 \uc5b4\ub5a4 \ud3ec\ud2b8\ub97c \uc5f4\uc5b4\uc57c \ud558\ub294\uc9c0\uc5d0 \ub300\ud55c \uc815\ubcf4\ub294 ",(0,l.kt)("a",{parentName:"p",href:"/kr/installation/requirements#networking"},"\ub124\ud2b8\uc6cc\ud0b9 \uc694\uad6c \uc0ac\ud56d"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("h2",{id:"coredns"},"CoreDNS"),(0,l.kt)("p",null,"CoreDNS\ub294 \uc11c\ubc84 \uc2dc\uc791 \uc2dc \uc790\ub3d9\uc73c\ub85c \ubc30\ud3ec\ub429\ub2c8\ub2e4. \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uc73c\ub824\uba74 \ud074\ub7ec\uc2a4\ud130\uc758 \ubaa8\ub4e0 \uc11c\ubc84\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable=coredns")," \uc635\uc158\uc744 \uc0ac\uc6a9\ud558\uc5ec \uad6c\uc131\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"CoreDNS\ub97c \uc124\uce58\ud558\uc9c0 \uc54a\uc740 \uacbd\uc6b0 \ud074\ub7ec\uc2a4\ud130 DNS \uacf5\uae09\uc790\ub97c \uc9c1\uc811 \uc124\uce58\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,l.kt)("h2",{id:"traefik-\uc778\uadf8\ub808\uc2a4-\ucee8\ud2b8\ub864\ub7ec"},"Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec"),(0,l.kt)("p",null,(0,l.kt)("a",{parentName:"p",href:"https://traefik.io/"},"Traefik"),"\uc740 \ub9c8\uc774\ud06c\ub85c\uc11c\ube44\uc2a4\ub97c \uc27d\uac8c \ubc30\ud3ec\ud560 \uc218 \uc788\ub3c4\ub85d \ub9cc\ub4e4\uc5b4\uc9c4 \ucd5c\uc2e0 HTTP \uc5ed\ubc29\ud5a5 \ud504\ub85d\uc2dc \ubc0f \ub85c\ub4dc\ubc38\ub7f0\uc11c\uc785\ub2c8\ub2e4. \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc124\uacc4, \ubc30\ud3ec \ubc0f \uc2e4\ud589\ud558\ub294 \ub3d9\uc548 \ub124\ud2b8\uc6cc\ud0b9 \ubcf5\uc7a1\uc131\uc744 \ub2e8\uc21c\ud654\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec\ub294 \ud3ec\ud2b8 80\uacfc 443\uc744 \uc0ac\uc6a9\ud558\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \ubc30\ud3ec\ud569\ub2c8\ub2e4. \uae30\ubcf8\uc801\uc73c\ub85c ServiceLB\ub294 \ubaa8\ub4e0 \ud074\ub7ec\uc2a4\ud130 \uba64\ubc84\uc5d0 \uc774\ub7ec\ud55c \ud3ec\ud2b8\ub97c \ub178\ucd9c\ud558\ubbc0\ub85c \ub2e4\ub978 HostPort \ub610\ub294 NodePort \ud30c\ub4dc\uc5d0\uc11c\ub294 \uc774\ub7ec\ud55c \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc11c\ubc84\ub97c \uc2dc\uc791\ud560 \ub54c \uae30\ubcf8\uc801\uc73c\ub85c Traefik\uc774 \ubc30\ud3ec\ub429\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,l.kt)("a",{parentName:"p",href:"/kr/installation/packaged-components"},"\ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \uad00\ub9ac"),"\ub97c \ucc38\uace0\ud558\uc138\uc694. \uae30\ubcf8 \uc124\uc815 \ud30c\uc77c\uc740 ",(0,l.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik.yaml"),"\uc5d0 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"K3s\uac00 \uc2dc\uc791\ud560 \ub54c \uc774 \ud30c\uc77c\uc744 \uae30\ubcf8\uac12\uc73c\ub85c \ub300\uccb4\ud558\ubbc0\ub85c ",(0,l.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," \ud30c\uc77c\uc744 \uc218\ub3d9\uc73c\ub85c \ud3b8\uc9d1\ud574\uc11c\ub294 \uc548 \ub429\ub2c8\ub2e4. \ub300\uc2e0, ",(0,l.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),"\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"HelmChartConfig")," \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub97c \ucd94\uac00\ub85c \uc0dd\uc131\ud558\uc5ec Traefik\uc744 \uc0ac\uc6a9\uc790 \uc815\uc758\ud574\uc57c \ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uacfc \uc608\uc81c\ub294 ",(0,l.kt)("a",{parentName:"p",href:"/kr/helm/#customizing-packaged-components-with-helmchartconfig"},"HelmChartConfig \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5"),"\uc744 \ucc38\uace0\ud558\uc138\uc694. \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uad6c\uc131 \uac12\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uacf5\uc2dd ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-helm-chart/tree/master/traefik"},"Traefik \ud5ec\ub984 \uad6c\uc131 \ub9e4\uac1c\ubcc0\uc218"),"\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,l.kt)("p",null,"\ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c Traefik\uc744 \uc81c\uac70\ud558\ub824\uba74 ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \ud50c\ub798\uadf8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ubaa8\ub4e0 \uc11c\ubc84\ub97c \uc2dc\uc791\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"K3s \ubc84\uc804 1.20 \uc774\ud558\uc5d0\ub294 Traefik v1\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4. K3s \ubc84\uc804 1.21 \uc774\uc0c1\uc740 \uae30\uc874\uc5d0 \uc124\uce58\ub41c Traefik v1\uc774 \ubc1c\uacac\ub418\uc9c0 \uc54a\ub294 \ud55c Traefik v2\ub97c \uc124\uce58\ud558\uba70, \uc774 \uacbd\uc6b0 Traefik\uc740 v2\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. K3s\uc5d0 \ud3ec\ud568\ub41c \ud2b9\uc815 Traefik \ubc84\uc804\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ud574\ub2f9 \ubc84\uc804\uc758 \ub9b4\ub9ac\uc2a4 \ub178\ud2b8\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("p",null,"\uc774\uc804 Traefik v1 \uc778\uc2a4\ud134\uc2a4\uc5d0\uc11c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\ub824\uba74 ",(0,l.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \ubb38\uc11c")," \ubc0f ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\ub9c8\uc774\uadf8\ub808\uc774\uc158 \ub3c4\uad6c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("h2",{id:"\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ucee8\ud2b8\ub864\ub7ec-network-policy-controller"},"\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec (Network Policy Controller)"),(0,l.kt)("p",null,"K3s\uc5d0\ub294 \uc784\ubca0\ub514\ub4dc \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. \uae30\ubcf8 \uad6c\ud604\uc740 ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/cloudnativelabs/kube-router"},"kube-router\uc758")," netpol \ucee8\ud2b8\ub864\ub7ec \ub77c\uc774\ube0c\ub7ec\ub9ac\uc774\uba70(\ub2e4\ub978 kube-router \uae30\ub2a5\uc740 \uc5c6\uc74c), ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol"},"\uc5ec\uae30"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"\ube44\ud65c\uc131\ud654\ud558\ub824\uba74, \uac01 \uc11c\ubc84\ub97c ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ud569\ub2c8\ub2e4."),(0,l.kt)("h2",{id:"\uc11c\ube44\uc2a4-\ub85c\ub4dc\ubc38\ub7f0\uc11c"},"\uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c"),(0,l.kt)("p",null,"K3s \ud074\ub7ec\uc2a4\ud130\uc5d0\ub294 \ubaa8\ub4e0 LoadBalancer \ucee8\ud2b8\ub864\ub7ec\ub97c \ubc30\ud3ec\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uae30\ubcf8\uc801\uc73c\ub85c K3s\ub294 \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ud638\uc2a4\ud2b8 \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud558\ub294 ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/klipper-lb"},"ServiceLB"),"(\uc774\uc804\uc758 Klipper LoadBalancer)\ub85c \uc54c\ub824\uc9c4 \ub85c\ub4dc\ubc38\ub7f0\uc11c\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc5c5\uc2a4\ud2b8\ub9bc \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc720\ud615\uc758 \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud560 \uc218 \uc788\uc9c0\ub9cc \uae30\ubcf8 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uad6c\ud604\uc740 \ud3ec\ud568\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc73c\ubbc0\ub85c \uc774\ub7ec\ud55c \uc11c\ube44\uc2a4\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uac00 \uc124\uce58\ub420 \ub54c\uae4c\uc9c0 ",(0,l.kt)("inlineCode",{parentName:"p"},"pending"),"\uc73c\ub85c \uc720\uc9c0\ub429\ub2c8\ub2e4. \ub9ce\uc740 \ud638\uc2a4\ud305 \uc11c\ube44\uc2a4\ub294 \uc678\ubd80 \ub85c\ub4dc \ubc38\ub7f0\uc11c \uad6c\ud604\uc744 \uc81c\uacf5\ud558\uae30 \uc704\ud574 Amazon EC2 \ub610\ub294 Microsoft Azure\uc640 \uac19\uc740 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc5c5\uccb4\uac00 \ud544\uc694\ud569\ub2c8\ub2e4. \ubc18\uba74, K3s ServiceLB\ub97c \uc0ac\uc6a9\ud558\uba74 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc5c5\uccb4\ub098 \ucd94\uac00 \uad6c\uc131 \uc5c6\uc774\ub3c4 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("h3",{id:"servicelb-\uc791\ub3d9-\ubc29\uc2dd"},"ServiceLB \uc791\ub3d9 \ubc29\uc2dd"),(0,l.kt)("p",null,"ServiceLB \ucee8\ud2b8\ub864\ub7ec\ub294 ",(0,l.kt)("inlineCode",{parentName:"p"},"spec.type")," \ud544\ub4dc\uac00 ",(0,l.kt)("inlineCode",{parentName:"p"},"LoadBalancer"),"\ub85c \uc124\uc815\ub41c \ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/services-networking/service/"},"\uc11c\ube44\uc2a4"),"\ub97c \uac10\uc2dc\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uac01 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub9c8\ub2e4 ",(0,l.kt)("inlineCode",{parentName:"p"},"kube-system")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/workloads/controllers/daemonset/"},"\ub370\ubaac\uc14b"),"\uc774 \uc0dd\uc131\ub41c\ub2e4. \uc774 \ub370\ubaac\uc14b\uc740 \ucc28\ub840\ub85c \uac01 \ub178\ub4dc\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"svc-")," \uc811\ub450\uc0ac\ub97c \uac00\uc9c4 \ud30c\ub4dc\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud30c\ub4dc\ub294 \uc544\uc774\ud53c\ud14c\uc774\ube14\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud30c\ub4dc\uc758 \ub178\ub4dc\ud3ec\ud2b8\uc5d0\uc11c \uc11c\ube44\uc2a4\uc758 \ud074\ub7ec\uc2a4\ud130IP \uc8fc\uc18c\uc640 \ud3ec\ud2b8\ub85c \ud2b8\ub798\ud53d\uc744 \uc804\ub2ec\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc678\ubd80 IP\uac00 \uad6c\uc131\ub41c \ub178\ub4dc\uc5d0\uc11c ServiceLB \ud30c\ub4dc\uac00 \uc2e4\ud589\ub418\ub294 \uacbd\uc6b0, \ub178\ub4dc\uc758 \uc678\ubd80 IP\uac00 \uc11c\ube44\uc2a4\uc758 ",(0,l.kt)("inlineCode",{parentName:"p"},"status.loadBalancer.ingress")," \uc8fc\uc18c \ubaa9\ub85d\uc5d0 \ucc44\uc6cc\uc9d1\ub2c8\ub2e4. \uadf8\ub807\uc9c0 \uc54a\uc73c\uba74 \ub178\ub4dc\uc758 \ub0b4\ubd80 IP\uac00 \uc0ac\uc6a9\ub429\ub2c8\ub2e4."),(0,l.kt)("p",null,"\ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\uac00 \uc5ec\ub7ec \uac1c \uc0dd\uc131\ub41c \uacbd\uc6b0, \uac01 \uc11c\ube44\uc2a4\ub9c8\ub2e4 \ubcc4\ub3c4\uc758 \ub370\ubaac\uc14b\uc774 \uc0dd\uc131\ub429\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc11c\ub85c \ub2e4\ub978 \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud55c\ub2e4\uba74 \ub3d9\uc77c\ud55c \ub178\ub4dc\uc5d0 \uc5ec\ub7ec \uac1c\uc758 \uc11c\ube44\uc2a4\ub97c \ub178\ucd9c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"\ud3ec\ud2b8 80\uc5d0\uc11c \uc218\uc2e0 \ub300\uae30\ud558\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud558\ub824\uace0 \ud558\uba74 ServiceLB\ub294 \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c \ud3ec\ud2b8 80\uc5d0 \ub300\ud55c \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ud638\uc2a4\ud2b8\ub97c \ucc3e\uc73c\ub824\uace0 \uc2dc\ub3c4\ud569\ub2c8\ub2e4. \ud574\ub2f9 \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ud638\uc2a4\ud2b8\uac00 \uc5c6\ub294 \uacbd\uc6b0, LB\ub294 \ubcf4\ub958 \uc0c1\ud0dc\ub85c \uc720\uc9c0\ub429\ub2c8\ub2e4."),(0,l.kt)("h3",{id:"\uc0ac\uc6a9\ubc95"},"\uc0ac\uc6a9\ubc95"),(0,l.kt)("p",null,"K3s\uc5d0 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/services-networking/service/#loadbalancer"},"LoadBalancer \ud0c0\uc785\uc758 \uc11c\ube44\uc2a4"),"\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4."),(0,l.kt)("h3",{id:"servicelb-\ub178\ub4dc-\uc120\ud0dd-\uc81c\uc5b4\ud558\uae30"},"ServiceLB \ub178\ub4dc \uc120\ud0dd \uc81c\uc5b4\ud558\uae30"),(0,l.kt)("p",null,"\ud558\ub098 \uc774\uc0c1\uc758 \ub178\ub4dc\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"svccontroller.k3s.cattle.io/enablelb=true")," \ub808\uc774\ube14\uc744 \ucd94\uac00\ud558\uba74 ServiceLB \ucee8\ud2b8\ub864\ub7ec\uac00 \ud5c8\uc6a9 \ubaa9\ub85d \ubaa8\ub4dc\ub85c \uc804\ud658\ub418\uba70, \ud574\ub2f9 \ub808\uc774\ube14\uc774 \uc788\ub294 \ub178\ub4dc\ub9cc LoadBalancer \ud30c\ub4dc\ub97c \ud638\uc2a4\ud2b8\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub808\uc774\ube14\uc774 \uc5c6\ub294 \ub178\ub4dc\ub294 ServiceLB\uc5d0\uc11c \uc0ac\uc6a9\uc5d0\uc11c \uc81c\uc678\ub429\ub2c8\ub2e4."),(0,l.kt)("admonition",{type:"note"},(0,l.kt)("p",{parentName:"admonition"},"\uae30\ubcf8\uc801\uc73c\ub85c \ub178\ub4dc\uc5d0\ub294 \ub808\uc774\ube14\uc774 \uc9c0\uc815\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ubaa8\ub4e0 \ub178\ub4dc\uac00 \ub808\uc774\ube14\uc774 \uc9c0\uc815\ub418\uc9c0 \uc54a\uc740 \uc0c1\ud0dc\ub85c \uc720\uc9c0\ub418\ub294 \ud55c, \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ud3ec\ud2b8\uac00 \uc788\ub294 \ubaa8\ub4e0 \ub178\ub4dc\uac00 ServiceLB\uc5d0\uc11c \uc0ac\uc6a9\ub429\ub2c8\ub2e4.")),(0,l.kt)("h3",{id:"servicelb-\ub178\ub4dc-\ud480-\uc0dd\uc131\ud558\uae30"},"ServiceLB \ub178\ub4dc \ud480 \uc0dd\uc131\ud558\uae30"),(0,l.kt)("p",null,"\ub85c\ub4dc\ubc38\ub7f0\uc11c\uc758 \ud30c\ub4dc\ub97c \ud638\uc2a4\ud305\ud560 \ud2b9\uc815 \ub178\ub4dc \ud558\uc704 \uc9d1\ud569\uc744 \uc120\ud0dd\ud558\ub824\uba74 \uc6d0\ud558\ub294 \ub178\ub4dc\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"enablelb")," \ub808\uc774\ube14\uc744 \ucd94\uac00\ud558\uace0 \ub178\ub4dc \ubc0f \uc11c\ube44\uc2a4\uc5d0\uc11c \uc77c\uce58\ud558\ub294 ",(0,l.kt)("inlineCode",{parentName:"p"},"lbpool")," \ub808\uc774\ube14 \uac12\uc744 \uc124\uc815\ud569\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uba74 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:"),(0,l.kt)("ol",null,(0,l.kt)("li",{parentName:"ol"},"\ub178\ub4dc A\uc640 \ub178\ub4dc B\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \ubc0f ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")," \ub808\uc774\ube14\uc744 \uc9c0\uc815\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ol"},"\ub178\ub4dc C\uc640 \ub178\ub4dc D\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \ubc0f ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true"),"\ub85c \ub808\uc774\ube14\uc744 \uc9c0\uc815\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ol"},"\ud3ec\ud2b8 443\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \ub808\uc774\ube14\uc744 \uac00\uc9c4 \ud558\ub098\uc758 LoadBalancer \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774 \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \ub370\ubaac\uc14b\uc740 \ub178\ub4dc A\uc640 \ub178\ub4dc B\uc5d0\ub9cc \ud30c\ub4dc\ub97c \ubc30\ud3ec\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ol"},"\ud3ec\ud2b8 443\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \ub808\uc774\ube14\uc744 \uac00\uc9c4 \ub2e4\ub978 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \ub370\ubaac\uc14b\uc740 \ub178\ub4dc C\uc640 \ub178\ub4dc D\uc5d0\ub9cc \ud30c\ub4dc\ub97c \ubc30\ud3ec\ud569\ub2c8\ub2e4.")),(0,l.kt)("h3",{id:"servicelb-\ube44\ud65c\uc131\ud654"},"ServiceLB \ube44\ud65c\uc131\ud654"),(0,l.kt)("p",null,"ServiceLB\ub97c \ube44\ud65c\uc131\ud654\ud558\ub824\uba74, \ud074\ub7ec\uc2a4\ud130\uc758 \ubaa8\ub4e0 \uc11c\ubc84\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable=servicelb")," \ud50c\ub798\uadf8\ub97c \uc0ac\uc6a9\ud558\uc5ec \uad6c\uc131\ud55c\ub2e4."),(0,l.kt)("p",null,"\uc774 \uc124\uc815\uc740 MetalLB\uc640 \uac19\uc740 \ub2e4\ub978 LB\ub97c \uc2e4\ud589\ud558\ub824\ub294 \uacbd\uc6b0\uc5d0 \ud544\uc694\ud569\ub2c8\ub2e4."),(0,l.kt)("h2",{id:"\uc678\ubd80-\ud074\ub77c\uc6b0\ub4dc-\ucee8\ud2b8\ub864\ub7ec-\ub9e4\ub2c8\uc800-\ubc30\ud3ec\ud558\uae30"},"\uc678\ubd80 \ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \ub9e4\ub2c8\uc800 \ubc30\ud3ec\ud558\uae30"),(0,l.kt)("p",null,'\ubc14\uc774\ub108\ub9ac \ud06c\uae30\ub97c \uc904\uc774\uae30 \uc704\ud574 K3s\ub294 \ubaa8\ub4e0 "\uc778-\ud2b8\ub9ac"(\ube4c\ud2b8\uc778) \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc790\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4. \ub300\uc2e0, K3s\ub294 \ub2e4\uc74c\uc744 \uc218\ud589\ud558\ub294 \uc784\ubca0\ub514\ub4dc \ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \uad00\ub9ac\uc790(CCM, Cloud Controller Manager) \uc2a4\ud141\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4:'),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\ub178\ub4dc \ub0b4\ubd80IP \ubc0f \uc678\ubd80IP \uc8fc\uc18c \ud544\ub4dc\ub97c ",(0,l.kt)("inlineCode",{parentName:"li"},"--node-ip")," \ubc0f ",(0,l.kt)("inlineCode",{parentName:"li"},"--node-external-ip")," \ud50c\ub798\uadf8\ub97c \uae30\ubc18\uc73c\ub85c \uc124\uc815\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ul"},"ServiceLB LoadBalancer \ucee8\ud2b8\ub864\ub7ec\ub97c \ud638\uc2a4\ud305\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ul"},"\ud074\ub77c\uc6b0\ub4dc-\ud504\ub85c\ubc14\uc774\ub354\uac00 ",(0,l.kt)("inlineCode",{parentName:"li"},"external"),"\ub85c \uc124\uc815\ub41c \uacbd\uc6b0 \uc874\uc7ac\ud558\ub294 ",(0,l.kt)("inlineCode",{parentName:"li"},"node.cloudprovider.kubernetes.io/uninitialized")," taint\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4.")),(0,l.kt)("p",null,"\uc678\ubd80 CCM\uc744 \ubc30\ud3ec\ud558\uae30 \uc804\uc5d0 \ubaa8\ub4e0 K3s \uc11c\ubc84\ub97c ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable-cloud-controller")," \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ud558\uc5ec \uc784\ubca0\ub514\ub4dc CCM\uc744 \ube44\ud65c\uc131\ud654\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,l.kt)("admonition",{type:"note"},(0,l.kt)("p",{parentName:"admonition"},"\uae30\ubcf8 \uc81c\uacf5 CCM\uc744 \ube44\ud65c\uc131\ud654\ud558\uace0 \uc678\ubd80 \ub300\uccb4\ud488\uc744 \ubc30\ud3ec\ud558\uace0 \uc62c\ubc14\ub974\uac8c \uad6c\uc131\ud558\uc9c0 \uc54a\uc73c\uba74 \ub178\ub4dc\uac00 \uc624\uc5fc\ub41c \uc0c1\ud0dc\ub85c \uc720\uc9c0\ub418\uc5b4 \uc2a4\ucf00\uc904\ub9c1\uc774 \ubd88\uac00\ub2a5\ud569\ub2c8\ub2e4.")),(0,l.kt)("h2",{id:"\ud638\uc2a4\ud2b8-\uc774\ub984\uc774-\uc5c6\ub294-\ub178\ub4dc"},"\ud638\uc2a4\ud2b8 \uc774\ub984\uc774 \uc5c6\ub294 \ub178\ub4dc"),(0,l.kt)("p",null,'Linode\uc640 \uac19\uc740 \uc77c\ubd80 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc790\ub294 \ud638\uc2a4\ud2b8 \uc774\ub984\uc774 "localhost"\uc778 \uba38\uc2e0\uc744 \uc0dd\uc131\ud558\uba70, \ub2e4\ub978 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc790\ub294 \ud638\uc2a4\ud2b8 \uc774\ub984\uc774 \uc804\ud600 \uc124\uc815\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub85c \uc778\ud574 \ub3c4\uba54\uc778 \uc774\ub984 \ud655\uc778\uc5d0 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. ',(0,l.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME"),"\ud50c\ub798\uadf8 \ub610\ub294",(0,l.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \ud658\uacbd \ubcc0\uc218\ub97c \uc0ac\uc6a9\ud558\uc5ec K3s\ub97c \uc2e4\ud589\ud558\uba74 \ub178\ub4dc \uc774\ub984\uc744 \uc804\ub2ec\ud558\uc5ec \uc774 \ubb38\uc81c\ub97c \ud574\uacb0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."))}s.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9166],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>u});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var p=n.createContext({}),k=function(e){var t=n.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=k(e.components);return n.createElement(p.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,p=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=k(r),u=l,m=d["".concat(p,".").concat(u)]||d[u]||s[u]||a;return r?n.createElement(m,i(i({ref:t},c),{},{components:r})):n.createElement(m,i({ref:t},c))}));function u(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,i=new Array(a);i[0]=d;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var k=2;k<a;k++)i[k]=r[k];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5696:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>s,frontMatter:()=>a,metadata:()=>o,toc:()=>k});var n=r(3117),l=(r(7294),r(3905));const a={title:"\ub124\ud2b8\uc6cc\ud0b9",weight:35},i=void 0,o={unversionedId:"networking/networking",id:"networking/networking",title:"\ub124\ud2b8\uc6cc\ud0b9",description:"\uc774 \ud398\uc774\uc9c0\ub294 CoreDNS, Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec, Klipper \uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uac00 K3s \ub0b4\uc5d0\uc11c \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd\uc744 \uc124\uba85\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/networking/networking.md",sourceDirName:"networking",slug:"/networking/",permalink:"/kr/networking/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ub124\ud2b8\uc6cc\ud0b9",weight:35},sidebar:"mySidebar",previous:{title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",permalink:"/kr/storage/"},next:{title:"\ud5ec\ub984(Helm)",permalink:"/kr/helm/"}},p={},k=[{value:"CoreDNS",id:"coredns",level:2},{value:"Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec",id:"traefik-\uc778\uadf8\ub808\uc2a4-\ucee8\ud2b8\ub864\ub7ec",level:2},{value:"\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec (Network Policy Controller)",id:"\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ucee8\ud2b8\ub864\ub7ec-network-policy-controller",level:2},{value:"\uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c",id:"\uc11c\ube44\uc2a4-\ub85c\ub4dc\ubc38\ub7f0\uc11c",level:2},{value:"ServiceLB \uc791\ub3d9 \ubc29\uc2dd",id:"servicelb-\uc791\ub3d9-\ubc29\uc2dd",level:3},{value:"\uc0ac\uc6a9\ubc95",id:"\uc0ac\uc6a9\ubc95",level:3},{value:"ServiceLB \ub178\ub4dc \uc120\ud0dd \uc81c\uc5b4\ud558\uae30",id:"servicelb-\ub178\ub4dc-\uc120\ud0dd-\uc81c\uc5b4\ud558\uae30",level:3},{value:"ServiceLB \ub178\ub4dc \ud480 \uc0dd\uc131\ud558\uae30",id:"servicelb-\ub178\ub4dc-\ud480-\uc0dd\uc131\ud558\uae30",level:3},{value:"ServiceLB \ube44\ud65c\uc131\ud654",id:"servicelb-\ube44\ud65c\uc131\ud654",level:3},{value:"\uc678\ubd80 \ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \ub9e4\ub2c8\uc800 \ubc30\ud3ec\ud558\uae30",id:"\uc678\ubd80-\ud074\ub77c\uc6b0\ub4dc-\ucee8\ud2b8\ub864\ub7ec-\ub9e4\ub2c8\uc800-\ubc30\ud3ec\ud558\uae30",level:2},{value:"\ud638\uc2a4\ud2b8 \uc774\ub984\uc774 \uc5c6\ub294 \ub178\ub4dc",id:"\ud638\uc2a4\ud2b8-\uc774\ub984\uc774-\uc5c6\ub294-\ub178\ub4dc",level:2}],c={toc:k};function s(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\uc774 \ud398\uc774\uc9c0\ub294 CoreDNS, Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec, Klipper \uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uac00 K3s \ub0b4\uc5d0\uc11c \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd\uc744 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"Flannel \uad6c\uc131 \uc635\uc158 \ubc0f \ubc31\uc5d4\ub4dc \uc120\ud0dd\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc774\ub098 \uc790\uccb4 CNI \uc124\uc815 \ubc29\ubc95\uc740 ",(0,l.kt)("a",{parentName:"p",href:"/kr/installation/network-options"},"\uc124\uce58 \ub124\ud2b8\uc6cc\ud06c \uc635\uc158")," \ud398\uc774\uc9c0\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("p",null,"K3s\ub97c \uc704\ud574 \uc5b4\ub5a4 \ud3ec\ud2b8\ub97c \uc5f4\uc5b4\uc57c \ud558\ub294\uc9c0\uc5d0 \ub300\ud55c \uc815\ubcf4\ub294 ",(0,l.kt)("a",{parentName:"p",href:"/kr/installation/requirements#networking"},"\ub124\ud2b8\uc6cc\ud0b9 \uc694\uad6c \uc0ac\ud56d"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("h2",{id:"coredns"},"CoreDNS"),(0,l.kt)("p",null,"CoreDNS\ub294 \uc11c\ubc84 \uc2dc\uc791 \uc2dc \uc790\ub3d9\uc73c\ub85c \ubc30\ud3ec\ub429\ub2c8\ub2e4. \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uc73c\ub824\uba74 \ud074\ub7ec\uc2a4\ud130\uc758 \ubaa8\ub4e0 \uc11c\ubc84\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable=coredns")," \uc635\uc158\uc744 \uc0ac\uc6a9\ud558\uc5ec \uad6c\uc131\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"CoreDNS\ub97c \uc124\uce58\ud558\uc9c0 \uc54a\uc740 \uacbd\uc6b0 \ud074\ub7ec\uc2a4\ud130 DNS \uacf5\uae09\uc790\ub97c \uc9c1\uc811 \uc124\uce58\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,l.kt)("h2",{id:"traefik-\uc778\uadf8\ub808\uc2a4-\ucee8\ud2b8\ub864\ub7ec"},"Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec"),(0,l.kt)("p",null,(0,l.kt)("a",{parentName:"p",href:"https://traefik.io/"},"Traefik"),"\uc740 \ub9c8\uc774\ud06c\ub85c\uc11c\ube44\uc2a4\ub97c \uc27d\uac8c \ubc30\ud3ec\ud560 \uc218 \uc788\ub3c4\ub85d \ub9cc\ub4e4\uc5b4\uc9c4 \ucd5c\uc2e0 HTTP \uc5ed\ubc29\ud5a5 \ud504\ub85d\uc2dc \ubc0f \ub85c\ub4dc\ubc38\ub7f0\uc11c\uc785\ub2c8\ub2e4. \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc124\uacc4, \ubc30\ud3ec \ubc0f \uc2e4\ud589\ud558\ub294 \ub3d9\uc548 \ub124\ud2b8\uc6cc\ud0b9 \ubcf5\uc7a1\uc131\uc744 \ub2e8\uc21c\ud654\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"Traefik \uc778\uadf8\ub808\uc2a4 \ucee8\ud2b8\ub864\ub7ec\ub294 \ud3ec\ud2b8 80\uacfc 443\uc744 \uc0ac\uc6a9\ud558\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \ubc30\ud3ec\ud569\ub2c8\ub2e4. \uae30\ubcf8\uc801\uc73c\ub85c ServiceLB\ub294 \ubaa8\ub4e0 \ud074\ub7ec\uc2a4\ud130 \uba64\ubc84\uc5d0 \uc774\ub7ec\ud55c \ud3ec\ud2b8\ub97c \ub178\ucd9c\ud558\ubbc0\ub85c \ub2e4\ub978 HostPort \ub610\ub294 NodePort \ud30c\ub4dc\uc5d0\uc11c\ub294 \uc774\ub7ec\ud55c \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc11c\ubc84\ub97c \uc2dc\uc791\ud560 \ub54c \uae30\ubcf8\uc801\uc73c\ub85c Traefik\uc774 \ubc30\ud3ec\ub429\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,l.kt)("a",{parentName:"p",href:"/kr/installation/packaged-components"},"\ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \uad00\ub9ac"),"\ub97c \ucc38\uace0\ud558\uc138\uc694. \uae30\ubcf8 \uc124\uc815 \ud30c\uc77c\uc740 ",(0,l.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik.yaml"),"\uc5d0 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"K3s\uac00 \uc2dc\uc791\ud560 \ub54c \uc774 \ud30c\uc77c\uc744 \uae30\ubcf8\uac12\uc73c\ub85c \ub300\uccb4\ud558\ubbc0\ub85c ",(0,l.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," \ud30c\uc77c\uc744 \uc218\ub3d9\uc73c\ub85c \ud3b8\uc9d1\ud574\uc11c\ub294 \uc548 \ub429\ub2c8\ub2e4. \ub300\uc2e0, ",(0,l.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests"),"\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"HelmChartConfig")," \ub9e4\ub2c8\ud398\uc2a4\ud2b8\ub97c \ucd94\uac00\ub85c \uc0dd\uc131\ud558\uc5ec Traefik\uc744 \uc0ac\uc6a9\uc790 \uc815\uc758\ud574\uc57c \ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uacfc \uc608\uc81c\ub294 ",(0,l.kt)("a",{parentName:"p",href:"/kr/helm/#customizing-packaged-components-with-helmchartconfig"},"HelmChartConfig \ud328\ud0a4\uc9c0 \ucef4\ud3ec\ub10c\ud2b8 \ucee4\uc2a4\ud130\ub9c8\uc774\uc9d5"),"\uc744 \ucc38\uace0\ud558\uc138\uc694. \uc0ac\uc6a9 \uac00\ub2a5\ud55c \uad6c\uc131 \uac12\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uacf5\uc2dd ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-helm-chart/tree/master/traefik"},"Traefik \ud5ec\ub984 \uad6c\uc131 \ub9e4\uac1c\ubcc0\uc218"),"\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,l.kt)("p",null,"\ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c Traefik\uc744 \uc81c\uac70\ud558\ub824\uba74 ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \ud50c\ub798\uadf8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ubaa8\ub4e0 \uc11c\ubc84\ub97c \uc2dc\uc791\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"K3s \ubc84\uc804 1.20 \uc774\ud558\uc5d0\ub294 Traefik v1\uc774 \ud3ec\ud568\ub429\ub2c8\ub2e4. K3s \ubc84\uc804 1.21 \uc774\uc0c1\uc740 \uae30\uc874\uc5d0 \uc124\uce58\ub41c Traefik v1\uc774 \ubc1c\uacac\ub418\uc9c0 \uc54a\ub294 \ud55c Traefik v2\ub97c \uc124\uce58\ud558\uba70, \uc774 \uacbd\uc6b0 Traefik\uc740 v2\ub85c \uc5c5\uadf8\ub808\uc774\ub4dc\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. K3s\uc5d0 \ud3ec\ud568\ub41c \ud2b9\uc815 Traefik \ubc84\uc804\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ud574\ub2f9 \ubc84\uc804\uc758 \ub9b4\ub9ac\uc2a4 \ub178\ud2b8\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("p",null,"\uc774\uc804 Traefik v1 \uc778\uc2a4\ud134\uc2a4\uc5d0\uc11c \ub9c8\uc774\uadf8\ub808\uc774\uc158\ud558\ub824\uba74 ",(0,l.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \ubb38\uc11c")," \ubc0f ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\ub9c8\uc774\uadf8\ub808\uc774\uc158 \ub3c4\uad6c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,l.kt)("h2",{id:"\ub124\ud2b8\uc6cc\ud06c-\uc815\ucc45-\ucee8\ud2b8\ub864\ub7ec-network-policy-controller"},"\ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec (Network Policy Controller)"),(0,l.kt)("p",null,"K3s\uc5d0\ub294 \uc784\ubca0\ub514\ub4dc \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4. \uae30\ubcf8 \uad6c\ud604\uc740 ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/cloudnativelabs/kube-router"},"kube-router\uc758")," netpol \ucee8\ud2b8\ub864\ub7ec \ub77c\uc774\ube0c\ub7ec\ub9ac\uc774\uba70(\ub2e4\ub978 kube-router \uae30\ub2a5\uc740 \uc5c6\uc74c), ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol"},"\uc5ec\uae30"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"\ube44\ud65c\uc131\ud654\ud558\ub824\uba74, \uac01 \uc11c\ubc84\ub97c ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ud569\ub2c8\ub2e4."),(0,l.kt)("h2",{id:"\uc11c\ube44\uc2a4-\ub85c\ub4dc\ubc38\ub7f0\uc11c"},"\uc11c\ube44\uc2a4 \ub85c\ub4dc\ubc38\ub7f0\uc11c"),(0,l.kt)("p",null,"K3s \ud074\ub7ec\uc2a4\ud130\uc5d0\ub294 \ubaa8\ub4e0 LoadBalancer \ucee8\ud2b8\ub864\ub7ec\ub97c \ubc30\ud3ec\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uae30\ubcf8\uc801\uc73c\ub85c K3s\ub294 \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ud638\uc2a4\ud2b8 \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud558\ub294 ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/klipper-lb"},"ServiceLB"),"(\uc774\uc804\uc758 Klipper LoadBalancer)\ub85c \uc54c\ub824\uc9c4 \ub85c\ub4dc\ubc38\ub7f0\uc11c\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc5c5\uc2a4\ud2b8\ub9bc \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc720\ud615\uc758 \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud560 \uc218 \uc788\uc9c0\ub9cc \uae30\ubcf8 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uad6c\ud604\uc740 \ud3ec\ud568\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc73c\ubbc0\ub85c \uc774\ub7ec\ud55c \uc11c\ube44\uc2a4\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uac00 \uc124\uce58\ub420 \ub54c\uae4c\uc9c0 ",(0,l.kt)("inlineCode",{parentName:"p"},"pending"),"\uc73c\ub85c \uc720\uc9c0\ub429\ub2c8\ub2e4. \ub9ce\uc740 \ud638\uc2a4\ud305 \uc11c\ube44\uc2a4\ub294 \uc678\ubd80 \ub85c\ub4dc \ubc38\ub7f0\uc11c \uad6c\ud604\uc744 \uc81c\uacf5\ud558\uae30 \uc704\ud574 Amazon EC2 \ub610\ub294 Microsoft Azure\uc640 \uac19\uc740 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc5c5\uccb4\uac00 \ud544\uc694\ud569\ub2c8\ub2e4. \ubc18\uba74, K3s ServiceLB\ub97c \uc0ac\uc6a9\ud558\uba74 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc5c5\uccb4\ub098 \ucd94\uac00 \uad6c\uc131 \uc5c6\uc774\ub3c4 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("h3",{id:"servicelb-\uc791\ub3d9-\ubc29\uc2dd"},"ServiceLB \uc791\ub3d9 \ubc29\uc2dd"),(0,l.kt)("p",null,"ServiceLB \ucee8\ud2b8\ub864\ub7ec\ub294 ",(0,l.kt)("inlineCode",{parentName:"p"},"spec.type")," \ud544\ub4dc\uac00 ",(0,l.kt)("inlineCode",{parentName:"p"},"LoadBalancer"),"\ub85c \uc124\uc815\ub41c \ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/services-networking/service/"},"\uc11c\ube44\uc2a4"),"\ub97c \uac10\uc2dc\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uac01 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub9c8\ub2e4 ",(0,l.kt)("inlineCode",{parentName:"p"},"kube-system")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/workloads/controllers/daemonset/"},"\ub370\ubaac\uc14b"),"\uc774 \uc0dd\uc131\ub41c\ub2e4. \uc774 \ub370\ubaac\uc14b\uc740 \ucc28\ub840\ub85c \uac01 \ub178\ub4dc\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"svc-")," \uc811\ub450\uc0ac\ub97c \uac00\uc9c4 \ud30c\ub4dc\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ud30c\ub4dc\ub294 \uc544\uc774\ud53c\ud14c\uc774\ube14\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud30c\ub4dc\uc758 \ub178\ub4dc\ud3ec\ud2b8\uc5d0\uc11c \uc11c\ube44\uc2a4\uc758 \ud074\ub7ec\uc2a4\ud130IP \uc8fc\uc18c\uc640 \ud3ec\ud2b8\ub85c \ud2b8\ub798\ud53d\uc744 \uc804\ub2ec\ud569\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc678\ubd80 IP\uac00 \uad6c\uc131\ub41c \ub178\ub4dc\uc5d0\uc11c ServiceLB \ud30c\ub4dc\uac00 \uc2e4\ud589\ub418\ub294 \uacbd\uc6b0, \ub178\ub4dc\uc758 \uc678\ubd80 IP\uac00 \uc11c\ube44\uc2a4\uc758 ",(0,l.kt)("inlineCode",{parentName:"p"},"status.loadBalancer.ingress")," \uc8fc\uc18c \ubaa9\ub85d\uc5d0 \ucc44\uc6cc\uc9d1\ub2c8\ub2e4. \uadf8\ub807\uc9c0 \uc54a\uc73c\uba74 \ub178\ub4dc\uc758 \ub0b4\ubd80 IP\uac00 \uc0ac\uc6a9\ub429\ub2c8\ub2e4."),(0,l.kt)("p",null,"\ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\uac00 \uc5ec\ub7ec \uac1c \uc0dd\uc131\ub41c \uacbd\uc6b0, \uac01 \uc11c\ube44\uc2a4\ub9c8\ub2e4 \ubcc4\ub3c4\uc758 \ub370\ubaac\uc14b\uc774 \uc0dd\uc131\ub429\ub2c8\ub2e4."),(0,l.kt)("p",null,"\uc11c\ub85c \ub2e4\ub978 \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud55c\ub2e4\uba74 \ub3d9\uc77c\ud55c \ub178\ub4dc\uc5d0 \uc5ec\ub7ec \uac1c\uc758 \uc11c\ube44\uc2a4\ub97c \ub178\ucd9c\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,l.kt)("p",null,"\ud3ec\ud2b8 80\uc5d0\uc11c \uc218\uc2e0 \ub300\uae30\ud558\ub294 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud558\ub824\uace0 \ud558\uba74 ServiceLB\ub294 \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c \ud3ec\ud2b8 80\uc5d0 \ub300\ud55c \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ud638\uc2a4\ud2b8\ub97c \ucc3e\uc73c\ub824\uace0 \uc2dc\ub3c4\ud569\ub2c8\ub2e4. \ud574\ub2f9 \ud3ec\ud2b8\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ud638\uc2a4\ud2b8\uac00 \uc5c6\ub294 \uacbd\uc6b0, LB\ub294 \ubcf4\ub958 \uc0c1\ud0dc\ub85c \uc720\uc9c0\ub429\ub2c8\ub2e4."),(0,l.kt)("h3",{id:"\uc0ac\uc6a9\ubc95"},"\uc0ac\uc6a9\ubc95"),(0,l.kt)("p",null,"K3s\uc5d0 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/concepts/services-networking/service/#loadbalancer"},"LoadBalancer \ud0c0\uc785\uc758 \uc11c\ube44\uc2a4"),"\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4."),(0,l.kt)("h3",{id:"servicelb-\ub178\ub4dc-\uc120\ud0dd-\uc81c\uc5b4\ud558\uae30"},"ServiceLB \ub178\ub4dc \uc120\ud0dd \uc81c\uc5b4\ud558\uae30"),(0,l.kt)("p",null,"\ud558\ub098 \uc774\uc0c1\uc758 \ub178\ub4dc\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"svccontroller.k3s.cattle.io/enablelb=true")," \ub808\uc774\ube14\uc744 \ucd94\uac00\ud558\uba74 ServiceLB \ucee8\ud2b8\ub864\ub7ec\uac00 \ud5c8\uc6a9 \ubaa9\ub85d \ubaa8\ub4dc\ub85c \uc804\ud658\ub418\uba70, \ud574\ub2f9 \ub808\uc774\ube14\uc774 \uc788\ub294 \ub178\ub4dc\ub9cc LoadBalancer \ud30c\ub4dc\ub97c \ud638\uc2a4\ud2b8\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub808\uc774\ube14\uc774 \uc5c6\ub294 \ub178\ub4dc\ub294 ServiceLB\uc5d0\uc11c \uc0ac\uc6a9\uc5d0\uc11c \uc81c\uc678\ub429\ub2c8\ub2e4."),(0,l.kt)("admonition",{type:"note"},(0,l.kt)("p",{parentName:"admonition"},"\uae30\ubcf8\uc801\uc73c\ub85c \ub178\ub4dc\uc5d0\ub294 \ub808\uc774\ube14\uc774 \uc9c0\uc815\ub418\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. \ubaa8\ub4e0 \ub178\ub4dc\uac00 \ub808\uc774\ube14\uc774 \uc9c0\uc815\ub418\uc9c0 \uc54a\uc740 \uc0c1\ud0dc\ub85c \uc720\uc9c0\ub418\ub294 \ud55c, \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ud3ec\ud2b8\uac00 \uc788\ub294 \ubaa8\ub4e0 \ub178\ub4dc\uac00 ServiceLB\uc5d0\uc11c \uc0ac\uc6a9\ub429\ub2c8\ub2e4.")),(0,l.kt)("h3",{id:"servicelb-\ub178\ub4dc-\ud480-\uc0dd\uc131\ud558\uae30"},"ServiceLB \ub178\ub4dc \ud480 \uc0dd\uc131\ud558\uae30"),(0,l.kt)("p",null,"\ub85c\ub4dc\ubc38\ub7f0\uc11c\uc758 \ud30c\ub4dc\ub97c \ud638\uc2a4\ud305\ud560 \ud2b9\uc815 \ub178\ub4dc \ud558\uc704 \uc9d1\ud569\uc744 \uc120\ud0dd\ud558\ub824\uba74 \uc6d0\ud558\ub294 \ub178\ub4dc\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"enablelb")," \ub808\uc774\ube14\uc744 \ucd94\uac00\ud558\uace0 \ub178\ub4dc \ubc0f \uc11c\ube44\uc2a4\uc5d0\uc11c \uc77c\uce58\ud558\ub294 ",(0,l.kt)("inlineCode",{parentName:"p"},"lbpool")," \ub808\uc774\ube14 \uac12\uc744 \uc124\uc815\ud569\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uba74 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:"),(0,l.kt)("ol",null,(0,l.kt)("li",{parentName:"ol"},"\ub178\ub4dc A\uc640 \ub178\ub4dc B\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \ubc0f ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")," \ub808\uc774\ube14\uc744 \uc9c0\uc815\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ol"},"\ub178\ub4dc C\uc640 \ub178\ub4dc D\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \ubc0f ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true"),"\ub85c \ub808\uc774\ube14\uc744 \uc9c0\uc815\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ol"},"\ud3ec\ud2b8 443\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \ub808\uc774\ube14\uc744 \uac00\uc9c4 \ud558\ub098\uc758 LoadBalancer \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc774 \uc11c\ube44\uc2a4\uc5d0 \ub300\ud55c \ub370\ubaac\uc14b\uc740 \ub178\ub4dc A\uc640 \ub178\ub4dc B\uc5d0\ub9cc \ud30c\ub4dc\ub97c \ubc30\ud3ec\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ol"},"\ud3ec\ud2b8 443\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \ub808\uc774\ube14\uc744 \uac00\uc9c4 \ub2e4\ub978 \ub85c\ub4dc\ubc38\ub7f0\uc11c \uc11c\ube44\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \ub370\ubaac\uc14b\uc740 \ub178\ub4dc C\uc640 \ub178\ub4dc D\uc5d0\ub9cc \ud30c\ub4dc\ub97c \ubc30\ud3ec\ud569\ub2c8\ub2e4.")),(0,l.kt)("h3",{id:"servicelb-\ube44\ud65c\uc131\ud654"},"ServiceLB \ube44\ud65c\uc131\ud654"),(0,l.kt)("p",null,"ServiceLB\ub97c \ube44\ud65c\uc131\ud654\ud558\ub824\uba74, \ud074\ub7ec\uc2a4\ud130\uc758 \ubaa8\ub4e0 \uc11c\ubc84\uc5d0 ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable=servicelb")," \ud50c\ub798\uadf8\ub97c \uc0ac\uc6a9\ud558\uc5ec \uad6c\uc131\ud55c\ub2e4."),(0,l.kt)("p",null,"\uc774 \uc124\uc815\uc740 MetalLB\uc640 \uac19\uc740 \ub2e4\ub978 LB\ub97c \uc2e4\ud589\ud558\ub824\ub294 \uacbd\uc6b0\uc5d0 \ud544\uc694\ud569\ub2c8\ub2e4."),(0,l.kt)("h2",{id:"\uc678\ubd80-\ud074\ub77c\uc6b0\ub4dc-\ucee8\ud2b8\ub864\ub7ec-\ub9e4\ub2c8\uc800-\ubc30\ud3ec\ud558\uae30"},"\uc678\ubd80 \ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \ub9e4\ub2c8\uc800 \ubc30\ud3ec\ud558\uae30"),(0,l.kt)("p",null,'\ubc14\uc774\ub108\ub9ac \ud06c\uae30\ub97c \uc904\uc774\uae30 \uc704\ud574 K3s\ub294 \ubaa8\ub4e0 "\uc778-\ud2b8\ub9ac"(\ube4c\ud2b8\uc778) \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc790\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4. \ub300\uc2e0, K3s\ub294 \ub2e4\uc74c\uc744 \uc218\ud589\ud558\ub294 \uc784\ubca0\ub514\ub4dc \ud074\ub77c\uc6b0\ub4dc \ucee8\ud2b8\ub864\ub7ec \uad00\ub9ac\uc790(CCM, Cloud Controller Manager) \uc2a4\ud141\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4:'),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\ub178\ub4dc \ub0b4\ubd80IP \ubc0f \uc678\ubd80IP \uc8fc\uc18c \ud544\ub4dc\ub97c ",(0,l.kt)("inlineCode",{parentName:"li"},"--node-ip")," \ubc0f ",(0,l.kt)("inlineCode",{parentName:"li"},"--node-external-ip")," \ud50c\ub798\uadf8\ub97c \uae30\ubc18\uc73c\ub85c \uc124\uc815\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ul"},"ServiceLB LoadBalancer \ucee8\ud2b8\ub864\ub7ec\ub97c \ud638\uc2a4\ud305\ud569\ub2c8\ub2e4."),(0,l.kt)("li",{parentName:"ul"},"\ud074\ub77c\uc6b0\ub4dc-\ud504\ub85c\ubc14\uc774\ub354\uac00 ",(0,l.kt)("inlineCode",{parentName:"li"},"external"),"\ub85c \uc124\uc815\ub41c \uacbd\uc6b0 \uc874\uc7ac\ud558\ub294 ",(0,l.kt)("inlineCode",{parentName:"li"},"node.cloudprovider.kubernetes.io/uninitialized")," taint\ub97c \uc81c\uac70\ud569\ub2c8\ub2e4.")),(0,l.kt)("p",null,"\uc678\ubd80 CCM\uc744 \ubc30\ud3ec\ud558\uae30 \uc804\uc5d0 \ubaa8\ub4e0 K3s \uc11c\ubc84\ub97c ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable-cloud-controller")," \ud50c\ub798\uadf8\ub85c \uc2dc\uc791\ud558\uc5ec \uc784\ubca0\ub514\ub4dc CCM\uc744 \ube44\ud65c\uc131\ud654\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,l.kt)("admonition",{type:"note"},(0,l.kt)("p",{parentName:"admonition"},"\uae30\ubcf8 \uc81c\uacf5 CCM\uc744 \ube44\ud65c\uc131\ud654\ud558\uace0 \uc678\ubd80 \ub300\uccb4\ud488\uc744 \ubc30\ud3ec\ud558\uace0 \uc62c\ubc14\ub974\uac8c \uad6c\uc131\ud558\uc9c0 \uc54a\uc73c\uba74 \ub178\ub4dc\uac00 \uc624\uc5fc\ub41c \uc0c1\ud0dc\ub85c \uc720\uc9c0\ub418\uc5b4 \uc2a4\ucf00\uc904\ub9c1\uc774 \ubd88\uac00\ub2a5\ud569\ub2c8\ub2e4.")),(0,l.kt)("h2",{id:"\ud638\uc2a4\ud2b8-\uc774\ub984\uc774-\uc5c6\ub294-\ub178\ub4dc"},"\ud638\uc2a4\ud2b8 \uc774\ub984\uc774 \uc5c6\ub294 \ub178\ub4dc"),(0,l.kt)("p",null,'Linode\uc640 \uac19\uc740 \uc77c\ubd80 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc790\ub294 \ud638\uc2a4\ud2b8 \uc774\ub984\uc774 "localhost"\uc778 \uba38\uc2e0\uc744 \uc0dd\uc131\ud558\uba70, \ub2e4\ub978 \ud074\ub77c\uc6b0\ub4dc \uc81c\uacf5\uc790\ub294 \ud638\uc2a4\ud2b8 \uc774\ub984\uc774 \uc804\ud600 \uc124\uc815\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub85c \uc778\ud574 \ub3c4\uba54\uc778 \uc774\ub984 \ud655\uc778\uc5d0 \ubb38\uc81c\uac00 \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. ',(0,l.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME"),"\ud50c\ub798\uadf8 \ub610\ub294",(0,l.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \ud658\uacbd \ubcc0\uc218\ub97c \uc0ac\uc6a9\ud558\uc5ec K3s\ub97c \uc2e4\ud589\ud558\uba74 \ub178\ub4dc \uc774\ub984\uc744 \uc804\ub2ec\ud558\uc5ec \uc774 \ubb38\uc81c\ub97c \ud574\uacb0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."))}s.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/a11c790a.d51277cf.js b/kr/assets/js/a11c790a.d90c9ad2.js
similarity index 99%
rename from kr/assets/js/a11c790a.d51277cf.js
rename to kr/assets/js/a11c790a.d90c9ad2.js
index 7daea4d1b..6e748bf81 100644
--- a/kr/assets/js/a11c790a.d51277cf.js
+++ b/kr/assets/js/a11c790a.d90c9ad2.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[937],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var o=r.createContext({}),p=function(e){var t=r.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},c=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,o=e.parentName,k=s(e,["components","mdxType","originalType","parentName"]),c=p(n),d=a,m=c["".concat(o,".").concat(d)]||c[d]||u[d]||l;return n?r.createElement(m,i(i({ref:t},k),{},{components:n})):r.createElement(m,i({ref:t},k))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=c;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var p=2;p<l;p++)i[p]=n[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}c.displayName="MDXCreateElement"},4951:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const l={title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",weight:60},i=void 0,s={unversionedId:"faq/faq",id:"faq/faq",title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",description:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc740 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \uc0ac\uc6a9\uc790\uac00 K3s\uc5d0 \ub300\ud574 \uac00\uc7a5 \uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc5d0 \ub300\ud55c \ub2f5\ubcc0\uc73c\ub85c \uad6c\uc131\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/faq/faq.md",sourceDirName:"faq",slug:"/faq/",permalink:"/kr/faq/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",weight:60},sidebar:"mySidebar",previous:{title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",permalink:"/kr/advanced/"},next:{title:"\uba85\ub839\uc904 \ub3c4\uad6c",permalink:"/kr/cli/"}},o={},p=[{value:"K3s\uac00 Kubernetes\ub97c \ub300\uccb4\ud558\uae30\uc5d0 \uc801\ud569\ud55c\uac00\uc694?",id:"k3s\uac00-kubernetes\ub97c-\ub300\uccb4\ud558\uae30\uc5d0-\uc801\ud569\ud55c\uac00\uc694",level:3},{value:"Traefik \ub300\uc2e0 \uc790\uccb4 Ingress\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?",id:"traefik-\ub300\uc2e0-\uc790\uccb4-ingress\ub97c-\uc0ac\uc6a9\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694",level:3},{value:"K3s\ub294 Windows\ub97c \uc9c0\uc6d0\ud558\ub098\uc694?",id:"k3s\ub294-windows\ub97c-\uc9c0\uc6d0\ud558\ub098\uc694",level:3},{value:"\uc18c\uc2a4\ub85c\ubd80\ud130 \ube4c\ub4dc\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?",id:"\uc18c\uc2a4\ub85c\ubd80\ud130-\ube4c\ub4dc\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694",level:3},{value:"K3s \ub85c\uadf8\ub294 \uc5b4\ub514\uc5d0 \uc788\ub098\uc694?",id:"k3s-\ub85c\uadf8\ub294-\uc5b4\ub514\uc5d0-\uc788\ub098\uc694",level:3},{value:"Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub098\uc694?",id:"docker\uc5d0\uc11c-k3s\ub97c-\uc2e4\ud589\ud560-\uc218-\uc788\ub098\uc694",level:3},{value:"K3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ud1a0\ud070\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?",id:"k3s-\uc11c\ubc84\uc640-\uc5d0\uc774\uc804\ud2b8-\ud1a0\ud070\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694",level:3},{value:"K3s\uc758 \ub2e4\ub978 \ubc84\uc804\ub4e4\uc740 \uc5bc\ub9c8\ub098 \ud638\ud658\ub418\ub098\uc694?",id:"k3s\uc758-\ub2e4\ub978-\ubc84\uc804\ub4e4\uc740-\uc5bc\ub9c8\ub098-\ud638\ud658\ub418\ub098\uc694",level:3},{value:"\ubb38\uc81c\uac00 \ubc1c\uc0dd\ud588\ub294\ub370 \uc5b4\ub514\uc11c \ub3c4\uc6c0\uc744 \ubc1b\uc744 \uc218 \uc788\ub098\uc694?",id:"\ubb38\uc81c\uac00-\ubc1c\uc0dd\ud588\ub294\ub370-\uc5b4\ub514\uc11c-\ub3c4\uc6c0\uc744-\ubc1b\uc744-\uc218-\uc788\ub098\uc694",level:3}],k={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},k,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc740 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \uc0ac\uc6a9\uc790\uac00 K3s\uc5d0 \ub300\ud574 \uac00\uc7a5 \uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc5d0 \ub300\ud55c \ub2f5\ubcc0\uc73c\ub85c \uad6c\uc131\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"k3s\uac00-kubernetes\ub97c-\ub300\uccb4\ud558\uae30\uc5d0-\uc801\ud569\ud55c\uac00\uc694"},"K3s\uac00 Kubernetes\ub97c \ub300\uccb4\ud558\uae30\uc5d0 \uc801\ud569\ud55c\uac00\uc694?"),(0,a.kt)("p",null,"K3s\ub294 CNCF \uc778\uc99d\uc744 \ubc1b\uc740 Kubernetes \ubc30\ud3ec\ud310\uc73c\ub85c, \ud45c\uc900 Kubernetes \ud074\ub7ec\uc2a4\ud130\uc5d0 \ud544\uc694\ud55c \ubaa8\ub4e0 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub2e8\uc9c0 \ub354 \uac00\ubcbc\uc6b4 \ubc84\uc804\uc77c \ubfd0\uc785\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/"},"main")," \ubb38\uc11c \ud398\uc774\uc9c0\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"traefik-\ub300\uc2e0-\uc790\uccb4-ingress\ub97c-\uc0ac\uc6a9\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694"},"Traefik \ub300\uc2e0 \uc790\uccb4 Ingress\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?"),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik"),"\uc73c\ub85c K3s \uc11c\ubc84\ub97c \uc2dc\uc791\ud558\uace0 \uc778\uadf8\ub808\uc2a4\ub97c \ubc30\ud3ec\ud558\uae30\ub9cc \ud558\uba74 \ub429\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"k3s\ub294-windows\ub97c-\uc9c0\uc6d0\ud558\ub098\uc694"},"K3s\ub294 Windows\ub97c \uc9c0\uc6d0\ud558\ub098\uc694?"),(0,a.kt)("p",null,"\ud604\uc7ac K3s\ub294 \uae30\ubcf8\uc801\uc73c\ub85c Windows\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc9c0\ub9cc, \ucd94\ud6c4\uc5d0 \uc9c0\uc6d0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"\uc18c\uc2a4\ub85c\ubd80\ud130-\ube4c\ub4dc\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694"},"\uc18c\uc2a4\ub85c\ubd80\ud130 \ube4c\ub4dc\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?"),(0,a.kt)("p",null,"K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/BUILDING.md"},"BUILDING.md"),"\uc5d0\uc11c \uc9c0\uce68\uc744 \ucc38\uc870\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"k3s-\ub85c\uadf8\ub294-\uc5b4\ub514\uc5d0-\uc788\ub098\uc694"},"K3s \ub85c\uadf8\ub294 \uc5b4\ub514\uc5d0 \uc788\ub098\uc694?"),(0,a.kt)("p",null,"K3s \ub85c\uadf8\uc758 \uc704\uce58\ub294 K3s\ub97c \uc2e4\ud589\ud558\ub294 \ubc29\ubc95\uacfc \ub178\ub4dc\uc758 OS\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9d1\ub2c8\ub2e4."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\uba85\ub839\uc904\uc5d0\uc11c \uc2e4\ud589\ud560 \uacbd\uc6b0, \ub85c\uadf8\ub294 stdout\uacfc stderr\ub85c \uc804\uc1a1\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"openrc\uc5d0\uc11c \uc2e4\ud589\ud558\uba74 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),"\uc5d0 \ub85c\uadf8\uac00 \uc0dd\uc131\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"Systemd\uc5d0\uc11c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0, \ub85c\uadf8\ub294 \uc800\ub110\ub110\ub85c \uc804\uc1a1\ub418\uba70 ",(0,a.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec \ubcfc \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\ud30c\ub4dc \ub85c\uadf8\ub294 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/pods"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\ucee8\ud14c\uc774\ub108 \ub85c\uadf8\ub294 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/containerd/containerd.log"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,a.kt)("p",null,"K3s\ub97c \uc2dc\uc791\ud560 \ub54c ",(0,a.kt)("inlineCode",{parentName:"p"},"--debug")," \ud50c\ub798\uadf8(\ub610\ub294 \ud658\uacbd\uc124\uc815 \ud30c\uc77c\uc5d0\uc11c ",(0,a.kt)("inlineCode",{parentName:"p"},"debug: true"),")\ub97c \uc0ac\uc6a9\ud558\uba74 \ub354 \uc790\uc138\ud55c \ub85c\uadf8\ub97c \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ud504\ub85c\uc138\uc2a4 \ub0b4\uc758 \ubaa8\ub4e0 \ucef4\ud3ec\ub10c\ud2b8\uc5d0 \ub300\ud574 \ub2e8\uc77c \ub85c\uae45 \uad6c\uc131\uc744 \uc0ac\uc6a9\ud558\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"klog"),"\ub77c\ub294 \ub85c\uae45 \ud504\ub808\uc784\uc6cc\ud06c\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\nK3s\ub294 \ub2e8\uc77c \ud504\ub85c\uc138\uc2a4 \ub0b4\uc5d0\uc11c \ubaa8\ub4e0 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ucef4\ud3ec\ub10c\ud2b8\ub97c \uc2e4\ud589\ud558\uae30 \ub54c\ubb38\uc5d0, \uac1c\ubcc4 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ucef4\ud3ec\ub10c\ud2b8\uc5d0 \ub300\ud574 \ub2e4\ub978 \ub85c\uadf8 \ub808\ubca8\uc774\ub098 \ub300\uc0c1\uc744 \uad6c\uc131\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.\n",(0,a.kt)("inlineCode",{parentName:"p"},"-v=<level>"),"\ub610\ub294",(0,a.kt)("inlineCode",{parentName:"p"},"--vmodule=<module>=<level>")," \ucef4\ud3ec\ub10c\ud2b8 \uc778\uc218\ub97c \uc0ac\uc6a9\ud558\uba74 \uc6d0\ud558\ub294 \ud6a8\uacfc\ub97c \uc5bb\uc9c0 \ubabb\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ub354 \ub9ce\uc740 \ub85c\uadf8 \uc635\uc158\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#additional-logging-sources"},"\ucd94\uac00 \ub85c\uae45 \uc18c\uc2a4"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"docker\uc5d0\uc11c-k3s\ub97c-\uc2e4\ud589\ud560-\uc218-\uc788\ub098\uc694"},"Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub098\uc694?"),(0,a.kt)("p",null,"\uc608, Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud558\ub294 \ubc29\ubc95\uc740 \uc5ec\ub7ec \uac00\uc9c0\uac00 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#running-k3s-in-docker"},"\uace0\uae09 \uc635\uc158"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"k3s-\uc11c\ubc84\uc640-\uc5d0\uc774\uc804\ud2b8-\ud1a0\ud070\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694"},"K3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ud1a0\ud070\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?"),(0,a.kt)("p",null,"K3s \uc870\uc778 \ud1a0\ud070 \uad00\ub9ac\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"k3s\uc758-\ub2e4\ub978-\ubc84\uc804\ub4e4\uc740-\uc5bc\ub9c8\ub098-\ud638\ud658\ub418\ub098\uc694"},"K3s\uc758 \ub2e4\ub978 \ubc84\uc804\ub4e4\uc740 \uc5bc\ub9c8\ub098 \ud638\ud658\ub418\ub098\uc694?"),(0,a.kt)("p",null,"\uc77c\ubc18\uc801\uc73c\ub85c ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/releases/version-skew-policy/"},"\ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubc84\uc804 skew \uc815\ucc45"),"\uc774 \uc801\uc6a9\ub429\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc989, \uc11c\ubc84\uac00 \uc5d0\uc774\uc804\ud2b8\ubcf4\ub2e4 \ucd5c\uc2e0 \ubc84\uc804\uc77c \uc218\ub294 \uc788\uc9c0\ub9cc \uc5d0\uc774\uc804\ud2b8\uac00 \uc11c\ubc84\ubcf4\ub2e4 \ucd5c\uc2e0 \ubc84\uc804\uc77c \uc218\ub294 \uc5c6\uc2b5\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"\ubb38\uc81c\uac00-\ubc1c\uc0dd\ud588\ub294\ub370-\uc5b4\ub514\uc11c-\ub3c4\uc6c0\uc744-\ubc1b\uc744-\uc218-\uc788\ub098\uc694"},"\ubb38\uc81c\uac00 \ubc1c\uc0dd\ud588\ub294\ub370 \uc5b4\ub514\uc11c \ub3c4\uc6c0\uc744 \ubc1b\uc744 \uc218 \uc788\ub098\uc694?"),(0,a.kt)("p",null,"K3s\ub97c \ubc30\ud3ec\ud558\ub294 \ub370 \ubb38\uc81c\uac00 \uc788\ub294 \uacbd\uc6b0 \ub2e4\uc74c\uacfc \uac19\uc774 \ud558\uc138\uc694:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},(0,a.kt)("a",{parentName:"p",href:"/kr/known-issues/"},"\uc54c\ub824\uc9c4 \ubb38\uc81c")," \ud398\uc774\uc9c0\ub97c \ud655\uc778\ud558\uc138\uc694.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#additional-os-preparations"},"\ucd94\uac00 OS \uc900\ube44\uc0ac\ud56d"),"\uc744 \ubaa8\ub450 \ud574\uacb0\ud588\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4. ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s check-config"),"\ub97c \uc2e4\ud589\ud558\uace0 \ud1b5\uacfc\ud588\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues"},"\uc774\uc288")," \ubc0f ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/discussions"},"\ud1a0\ub860"),"\uc5d0\uc11c \ubb38\uc81c\uc640 \uc77c\uce58\ud558\ub294 \ud56d\ubaa9\uc744 \uac80\uc0c9\ud569\ub2c8\ub2e4.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},(0,a.kt)("a",{parentName:"p",href:"https://slack.rancher.io/"},"Rancher \uc2ac\ub799")," K3s \ucc44\ub110\uc5d0 \uac00\uc785\ud558\uc5ec \ub3c4\uc6c0\uc744 \ubc1b\uc2b5\ub2c8\ub2e4.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"K3s \uae43\ud5c8\ube0c\uc5d0 \uc124\uc815\uacfc \ubc1c\uc0dd\ud55c \ubb38\uc81c\ub97c \uc124\uba85\ud558\ub294 ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/new/choose"},"\uc0c8 \uc774\uc288"),"\ub97c \uc81c\ucd9c\ud569\ub2c8\ub2e4."))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[937],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var o=r.createContext({}),p=function(e){var t=r.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},c=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,o=e.parentName,k=s(e,["components","mdxType","originalType","parentName"]),c=p(n),d=a,m=c["".concat(o,".").concat(d)]||c[d]||u[d]||l;return n?r.createElement(m,i(i({ref:t},k),{},{components:n})):r.createElement(m,i({ref:t},k))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=c;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var p=2;p<l;p++)i[p]=n[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}c.displayName="MDXCreateElement"},4951:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const l={title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",weight:60},i=void 0,s={unversionedId:"faq/faq",id:"faq/faq",title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",description:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc740 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \uc0ac\uc6a9\uc790\uac00 K3s\uc5d0 \ub300\ud574 \uac00\uc7a5 \uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc5d0 \ub300\ud55c \ub2f5\ubcc0\uc73c\ub85c \uad6c\uc131\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/faq/faq.md",sourceDirName:"faq",slug:"/faq/",permalink:"/kr/faq/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",weight:60},sidebar:"mySidebar",previous:{title:"\uace0\uae09 \uc635\uc158 / \uc124\uc815",permalink:"/kr/advanced/"},next:{title:"\uba85\ub839\uc904 \ub3c4\uad6c",permalink:"/kr/cli/"}},o={},p=[{value:"K3s\uac00 Kubernetes\ub97c \ub300\uccb4\ud558\uae30\uc5d0 \uc801\ud569\ud55c\uac00\uc694?",id:"k3s\uac00-kubernetes\ub97c-\ub300\uccb4\ud558\uae30\uc5d0-\uc801\ud569\ud55c\uac00\uc694",level:3},{value:"Traefik \ub300\uc2e0 \uc790\uccb4 Ingress\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?",id:"traefik-\ub300\uc2e0-\uc790\uccb4-ingress\ub97c-\uc0ac\uc6a9\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694",level:3},{value:"K3s\ub294 Windows\ub97c \uc9c0\uc6d0\ud558\ub098\uc694?",id:"k3s\ub294-windows\ub97c-\uc9c0\uc6d0\ud558\ub098\uc694",level:3},{value:"\uc18c\uc2a4\ub85c\ubd80\ud130 \ube4c\ub4dc\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?",id:"\uc18c\uc2a4\ub85c\ubd80\ud130-\ube4c\ub4dc\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694",level:3},{value:"K3s \ub85c\uadf8\ub294 \uc5b4\ub514\uc5d0 \uc788\ub098\uc694?",id:"k3s-\ub85c\uadf8\ub294-\uc5b4\ub514\uc5d0-\uc788\ub098\uc694",level:3},{value:"Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub098\uc694?",id:"docker\uc5d0\uc11c-k3s\ub97c-\uc2e4\ud589\ud560-\uc218-\uc788\ub098\uc694",level:3},{value:"K3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ud1a0\ud070\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?",id:"k3s-\uc11c\ubc84\uc640-\uc5d0\uc774\uc804\ud2b8-\ud1a0\ud070\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694",level:3},{value:"K3s\uc758 \ub2e4\ub978 \ubc84\uc804\ub4e4\uc740 \uc5bc\ub9c8\ub098 \ud638\ud658\ub418\ub098\uc694?",id:"k3s\uc758-\ub2e4\ub978-\ubc84\uc804\ub4e4\uc740-\uc5bc\ub9c8\ub098-\ud638\ud658\ub418\ub098\uc694",level:3},{value:"\ubb38\uc81c\uac00 \ubc1c\uc0dd\ud588\ub294\ub370 \uc5b4\ub514\uc11c \ub3c4\uc6c0\uc744 \ubc1b\uc744 \uc218 \uc788\ub098\uc694?",id:"\ubb38\uc81c\uac00-\ubc1c\uc0dd\ud588\ub294\ub370-\uc5b4\ub514\uc11c-\ub3c4\uc6c0\uc744-\ubc1b\uc744-\uc218-\uc788\ub098\uc694",level:3}],k={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},k,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc740 \uc8fc\uae30\uc801\uc73c\ub85c \uc5c5\ub370\uc774\ud2b8\ub418\uba70, \uc0ac\uc6a9\uc790\uac00 K3s\uc5d0 \ub300\ud574 \uac00\uc7a5 \uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38\uc5d0 \ub300\ud55c \ub2f5\ubcc0\uc73c\ub85c \uad6c\uc131\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"k3s\uac00-kubernetes\ub97c-\ub300\uccb4\ud558\uae30\uc5d0-\uc801\ud569\ud55c\uac00\uc694"},"K3s\uac00 Kubernetes\ub97c \ub300\uccb4\ud558\uae30\uc5d0 \uc801\ud569\ud55c\uac00\uc694?"),(0,a.kt)("p",null,"K3s\ub294 CNCF \uc778\uc99d\uc744 \ubc1b\uc740 Kubernetes \ubc30\ud3ec\ud310\uc73c\ub85c, \ud45c\uc900 Kubernetes \ud074\ub7ec\uc2a4\ud130\uc5d0 \ud544\uc694\ud55c \ubaa8\ub4e0 \uc791\uc5c5\uc744 \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ub2e8\uc9c0 \ub354 \uac00\ubcbc\uc6b4 \ubc84\uc804\uc77c \ubfd0\uc785\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/"},"main")," \ubb38\uc11c \ud398\uc774\uc9c0\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"traefik-\ub300\uc2e0-\uc790\uccb4-ingress\ub97c-\uc0ac\uc6a9\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694"},"Traefik \ub300\uc2e0 \uc790\uccb4 Ingress\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?"),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik"),"\uc73c\ub85c K3s \uc11c\ubc84\ub97c \uc2dc\uc791\ud558\uace0 \uc778\uadf8\ub808\uc2a4\ub97c \ubc30\ud3ec\ud558\uae30\ub9cc \ud558\uba74 \ub429\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"k3s\ub294-windows\ub97c-\uc9c0\uc6d0\ud558\ub098\uc694"},"K3s\ub294 Windows\ub97c \uc9c0\uc6d0\ud558\ub098\uc694?"),(0,a.kt)("p",null,"\ud604\uc7ac K3s\ub294 \uae30\ubcf8\uc801\uc73c\ub85c Windows\ub97c \uc9c0\uc6d0\ud558\uc9c0 \uc54a\uc9c0\ub9cc, \ucd94\ud6c4\uc5d0 \uc9c0\uc6d0\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"\uc18c\uc2a4\ub85c\ubd80\ud130-\ube4c\ub4dc\ud558\ub824\uba74-\uc5b4\ub5bb\uac8c-\ud574\uc57c-\ud558\ub098\uc694"},"\uc18c\uc2a4\ub85c\ubd80\ud130 \ube4c\ub4dc\ud558\ub824\uba74 \uc5b4\ub5bb\uac8c \ud574\uc57c \ud558\ub098\uc694?"),(0,a.kt)("p",null,"K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/BUILDING.md"},"BUILDING.md"),"\uc5d0\uc11c \uc9c0\uce68\uc744 \ucc38\uc870\ud558\uc2dc\uae30 \ubc14\ub78d\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"k3s-\ub85c\uadf8\ub294-\uc5b4\ub514\uc5d0-\uc788\ub098\uc694"},"K3s \ub85c\uadf8\ub294 \uc5b4\ub514\uc5d0 \uc788\ub098\uc694?"),(0,a.kt)("p",null,"K3s \ub85c\uadf8\uc758 \uc704\uce58\ub294 K3s\ub97c \uc2e4\ud589\ud558\ub294 \ubc29\ubc95\uacfc \ub178\ub4dc\uc758 OS\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9d1\ub2c8\ub2e4."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\uba85\ub839\uc904\uc5d0\uc11c \uc2e4\ud589\ud560 \uacbd\uc6b0, \ub85c\uadf8\ub294 stdout\uacfc stderr\ub85c \uc804\uc1a1\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"openrc\uc5d0\uc11c \uc2e4\ud589\ud558\uba74 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log"),"\uc5d0 \ub85c\uadf8\uac00 \uc0dd\uc131\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"Systemd\uc5d0\uc11c \uc2e4\ud589\ud558\ub294 \uacbd\uc6b0, \ub85c\uadf8\ub294 \uc800\ub110\ub110\ub85c \uc804\uc1a1\ub418\uba70 ",(0,a.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec \ubcfc \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\ud30c\ub4dc \ub85c\uadf8\ub294 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/pods"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\ucee8\ud14c\uc774\ub108 \ub85c\uadf8\ub294 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/containerd/containerd.log"),"\uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,a.kt)("p",null,"K3s\ub97c \uc2dc\uc791\ud560 \ub54c ",(0,a.kt)("inlineCode",{parentName:"p"},"--debug")," \ud50c\ub798\uadf8(\ub610\ub294 \ud658\uacbd\uc124\uc815 \ud30c\uc77c\uc5d0\uc11c ",(0,a.kt)("inlineCode",{parentName:"p"},"debug: true"),")\ub97c \uc0ac\uc6a9\ud558\uba74 \ub354 \uc790\uc138\ud55c \ub85c\uadf8\ub97c \uc0dd\uc131\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ucfe0\ubc84\ub124\ud2f0\uc2a4\ub294 \ud504\ub85c\uc138\uc2a4 \ub0b4\uc758 \ubaa8\ub4e0 \ucef4\ud3ec\ub10c\ud2b8\uc5d0 \ub300\ud574 \ub2e8\uc77c \ub85c\uae45 \uad6c\uc131\uc744 \uc0ac\uc6a9\ud558\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"klog"),"\ub77c\ub294 \ub85c\uae45 \ud504\ub808\uc784\uc6cc\ud06c\ub97c \uc0ac\uc6a9\ud569\ub2c8\ub2e4.\nK3s\ub294 \ub2e8\uc77c \ud504\ub85c\uc138\uc2a4 \ub0b4\uc5d0\uc11c \ubaa8\ub4e0 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ucef4\ud3ec\ub10c\ud2b8\ub97c \uc2e4\ud589\ud558\uae30 \ub54c\ubb38\uc5d0, \uac1c\ubcc4 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ucef4\ud3ec\ub10c\ud2b8\uc5d0 \ub300\ud574 \ub2e4\ub978 \ub85c\uadf8 \ub808\ubca8\uc774\ub098 \ub300\uc0c1\uc744 \uad6c\uc131\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.\n",(0,a.kt)("inlineCode",{parentName:"p"},"-v=<level>"),"\ub610\ub294",(0,a.kt)("inlineCode",{parentName:"p"},"--vmodule=<module>=<level>")," \ucef4\ud3ec\ub10c\ud2b8 \uc778\uc218\ub97c \uc0ac\uc6a9\ud558\uba74 \uc6d0\ud558\ub294 \ud6a8\uacfc\ub97c \uc5bb\uc9c0 \ubabb\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ub354 \ub9ce\uc740 \ub85c\uadf8 \uc635\uc158\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#additional-logging-sources"},"\ucd94\uac00 \ub85c\uae45 \uc18c\uc2a4"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"docker\uc5d0\uc11c-k3s\ub97c-\uc2e4\ud589\ud560-\uc218-\uc788\ub098\uc694"},"Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub098\uc694?"),(0,a.kt)("p",null,"\uc608, Docker\uc5d0\uc11c K3s\ub97c \uc2e4\ud589\ud558\ub294 \ubc29\ubc95\uc740 \uc5ec\ub7ec \uac00\uc9c0\uac00 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#running-k3s-in-docker"},"\uace0\uae09 \uc635\uc158"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"k3s-\uc11c\ubc84\uc640-\uc5d0\uc774\uc804\ud2b8-\ud1a0\ud070\uc758-\ucc28\uc774\uc810\uc740-\ubb34\uc5c7\uc778\uac00\uc694"},"K3s \uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ud1a0\ud070\uc758 \ucc28\uc774\uc810\uc740 \ubb34\uc5c7\uc778\uac00\uc694?"),(0,a.kt)("p",null,"K3s \uc870\uc778 \ud1a0\ud070 \uad00\ub9ac\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("h3",{id:"k3s\uc758-\ub2e4\ub978-\ubc84\uc804\ub4e4\uc740-\uc5bc\ub9c8\ub098-\ud638\ud658\ub418\ub098\uc694"},"K3s\uc758 \ub2e4\ub978 \ubc84\uc804\ub4e4\uc740 \uc5bc\ub9c8\ub098 \ud638\ud658\ub418\ub098\uc694?"),(0,a.kt)("p",null,"\uc77c\ubc18\uc801\uc73c\ub85c ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/releases/version-skew-policy/"},"\ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubc84\uc804 skew \uc815\ucc45"),"\uc774 \uc801\uc6a9\ub429\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc989, \uc11c\ubc84\uac00 \uc5d0\uc774\uc804\ud2b8\ubcf4\ub2e4 \ucd5c\uc2e0 \ubc84\uc804\uc77c \uc218\ub294 \uc788\uc9c0\ub9cc \uc5d0\uc774\uc804\ud2b8\uac00 \uc11c\ubc84\ubcf4\ub2e4 \ucd5c\uc2e0 \ubc84\uc804\uc77c \uc218\ub294 \uc5c6\uc2b5\ub2c8\ub2e4."),(0,a.kt)("h3",{id:"\ubb38\uc81c\uac00-\ubc1c\uc0dd\ud588\ub294\ub370-\uc5b4\ub514\uc11c-\ub3c4\uc6c0\uc744-\ubc1b\uc744-\uc218-\uc788\ub098\uc694"},"\ubb38\uc81c\uac00 \ubc1c\uc0dd\ud588\ub294\ub370 \uc5b4\ub514\uc11c \ub3c4\uc6c0\uc744 \ubc1b\uc744 \uc218 \uc788\ub098\uc694?"),(0,a.kt)("p",null,"K3s\ub97c \ubc30\ud3ec\ud558\ub294 \ub370 \ubb38\uc81c\uac00 \uc788\ub294 \uacbd\uc6b0 \ub2e4\uc74c\uacfc \uac19\uc774 \ud558\uc138\uc694:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},(0,a.kt)("a",{parentName:"p",href:"/kr/known-issues/"},"\uc54c\ub824\uc9c4 \ubb38\uc81c")," \ud398\uc774\uc9c0\ub97c \ud655\uc778\ud558\uc138\uc694.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#additional-os-preparations"},"\ucd94\uac00 OS \uc900\ube44\uc0ac\ud56d"),"\uc744 \ubaa8\ub450 \ud574\uacb0\ud588\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4. ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s check-config"),"\ub97c \uc2e4\ud589\ud558\uace0 \ud1b5\uacfc\ud588\ub294\uc9c0 \ud655\uc778\ud569\ub2c8\ub2e4.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues"},"\uc774\uc288")," \ubc0f ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/discussions"},"\ud1a0\ub860"),"\uc5d0\uc11c \ubb38\uc81c\uc640 \uc77c\uce58\ud558\ub294 \ud56d\ubaa9\uc744 \uac80\uc0c9\ud569\ub2c8\ub2e4.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},(0,a.kt)("a",{parentName:"p",href:"https://slack.rancher.io/"},"Rancher \uc2ac\ub799")," K3s \ucc44\ub110\uc5d0 \uac00\uc785\ud558\uc5ec \ub3c4\uc6c0\uc744 \ubc1b\uc2b5\ub2c8\ub2e4.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"K3s \uae43\ud5c8\ube0c\uc5d0 \uc124\uc815\uacfc \ubc1c\uc0dd\ud55c \ubb38\uc81c\ub97c \uc124\uba85\ud558\ub294 ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/new/choose"},"\uc0c8 \uc774\uc288"),"\ub97c \uc81c\ucd9c\ud569\ub2c8\ub2e4."))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/a1ce2930.de8a3220.js b/kr/assets/js/a1ce2930.0775ba29.js
similarity index 99%
rename from kr/assets/js/a1ce2930.de8a3220.js
rename to kr/assets/js/a1ce2930.0775ba29.js
index 44972be21..a5477969d 100644
--- a/kr/assets/js/a1ce2930.de8a3220.js
+++ b/kr/assets/js/a1ce2930.0775ba29.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2257],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>u});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),o=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=o(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),k=o(n),u=a,d=k["".concat(p,".").concat(u)]||k[u]||m[u]||s;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function u(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,i=new Array(s);i[0]=k;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var o=2;o<s;o++)i[o]=n[o];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},1588:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>d,frontMatter:()=>s,metadata:()=>l,toc:()=>o});var r=n(3117),a=(n(7294),n(3905));const s={title:"secrets-encrypt"},i="k3s secrets-encrypt",l={unversionedId:"cli/secrets-encrypt",id:"cli/secrets-encrypt",title:"secrets-encrypt",description:"K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",sourceDirName:"cli",slug:"/cli/secrets-encrypt",permalink:"/kr/cli/secrets-encrypt",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"secrets-encrypt"},sidebar:"mySidebar",previous:{title:"etcd-snapshot",permalink:"/kr/cli/etcd-snapshot"},next:{title:"token",permalink:"/kr/cli/token"}},p={},o=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2},{value:"Encryption Key Rotation",id:"encryption-key-rotation",level:3},{value:"Secrets Encryption Disable/Enable",id:"secrets-encryption-disableenable",level:3},{value:"Secrets Encryption Status",id:"secrets-encryption-status",level:3}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},m=c("Tabs"),k=c("TabItem"),u={toc:o};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-secrets-encrypt"},"k3s secrets-encrypt"),(0,a.kt)("p",null,"K3s supports enabling secrets encryption at rest. For more information, see ",(0,a.kt)("a",{parentName:"p",href:"/kr/security/secrets-encryption"},"Secrets Encryption"),"."),(0,a.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Available as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1"},"v1.21.8+k3s1"))),(0,a.kt)("p",null,"K3s contains a CLI tool ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,a.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.")),(0,a.kt)("h3",{id:"encryption-key-rotation"},"Encryption Key Rotation"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"To rotate secrets encryption keys on a single-server cluster:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Start the K3s server with the flag ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"p"},"not")," supported.")),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"The steps are the same for both embedded DB and external DB clusters."),(0,a.kt)("p",null,"To rotate secrets encryption keys on HA setups:"),(0,a.kt)("admonition",{title:"Notes",type:"note"},(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"li"},"not")," supported."),(0,a.kt)("li",{parentName:"ul"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"li"},"secrets-encrypt")," commands."))),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Start up all three K3s servers with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag. For brevity, the servers will be referred to as S1, S2, S3.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt on S1"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))))),(0,a.kt)("h3",{id:"secrets-encryption-disableenable"},"Secrets Encryption Disable/Enable"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag, secrets encryption can be disabled."),(0,a.kt)("p",null,"To disable secrets encryption on a single-node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a single node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a HA cluster with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flags, secrets encryption can be disabled."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt")," commands.")),(0,a.kt)("p",null,"For brevity, the three servers used in this guide will be referred to as S1, S2, S3."),(0,a.kt)("p",null,"To disable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))),(0,a.kt)("ol",{start:4},(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))))),(0,a.kt)("h3",{id:"secrets-encryption-status"},"Secrets Encryption Status"),(0,a.kt)("p",null,"The secrets-encrypt tool includes a ",(0,a.kt)("inlineCode",{parentName:"p"},"status")," command that displays information about the current status of secrets encryption on the node."),(0,a.kt)("p",null,"An example of the command on a single-server node:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: start\nServer Encryption Hashes: All hashes match\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Another example on HA cluster, after rotating the keys, but before restarting the servers:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: rotate\nServer Encryption Hashes: hash does not match between node-1 and node-2\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey-2021-12-10T22:54:38Z\n        AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Details on each section are as follows:  "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Encryption Status"),": Displayed whether secrets encryption is disabled or enabled on the node  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Current Rotation Stage"),": Indicates the current rotation stage on the node.",(0,a.kt)("br",{parentName:"li"}),"Stages are: ",(0,a.kt)("inlineCode",{parentName:"li"},"start"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"prepare"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"rotate"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_request"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_active"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_finished"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Server Encryption Hashes"),": Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Table"),": Summarizes information about the secrets encryption keys found on the node.  ",(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Active"),': The "*" indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.'),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Type"),": All keys using this tool are ",(0,a.kt)("inlineCode",{parentName:"li"},"AES-CBC")," type. See more info ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers"},"here.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Name"),": Name of the encryption key.")))))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2257],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>u});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),o=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=o(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,p=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),k=o(n),u=a,d=k["".concat(p,".").concat(u)]||k[u]||m[u]||s;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function u(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,i=new Array(s);i[0]=k;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var o=2;o<s;o++)i[o]=n[o];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},1588:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>d,frontMatter:()=>s,metadata:()=>l,toc:()=>o});var r=n(3117),a=(n(7294),n(3905));const s={title:"secrets-encrypt"},i="k3s secrets-encrypt",l={unversionedId:"cli/secrets-encrypt",id:"cli/secrets-encrypt",title:"secrets-encrypt",description:"K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",sourceDirName:"cli",slug:"/cli/secrets-encrypt",permalink:"/kr/cli/secrets-encrypt",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"secrets-encrypt"},sidebar:"mySidebar",previous:{title:"etcd-snapshot",permalink:"/kr/cli/etcd-snapshot"},next:{title:"token",permalink:"/kr/cli/token"}},p={},o=[{value:"Secrets Encryption Tool",id:"secrets-encryption-tool",level:2},{value:"Encryption Key Rotation",id:"encryption-key-rotation",level:3},{value:"Secrets Encryption Disable/Enable",id:"secrets-encryption-disableenable",level:3},{value:"Secrets Encryption Status",id:"secrets-encryption-status",level:3}],c=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},m=c("Tabs"),k=c("TabItem"),u={toc:o};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-secrets-encrypt"},"k3s secrets-encrypt"),(0,a.kt)("p",null,"K3s supports enabling secrets encryption at rest. For more information, see ",(0,a.kt)("a",{parentName:"p",href:"/kr/security/secrets-encryption"},"Secrets Encryption"),"."),(0,a.kt)("h2",{id:"secrets-encryption-tool"},"Secrets Encryption Tool"),(0,a.kt)("admonition",{title:"Version Gate",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Available as of ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1"},"v1.21.8+k3s1"))),(0,a.kt)("p",null,"K3s contains a CLI tool ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),", which enables automatic control over the following:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Disabling/Enabling secrets encryption"),(0,a.kt)("li",{parentName:"ul"},"Adding new encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Rotating and deleting encryption keys"),(0,a.kt)("li",{parentName:"ul"},"Reencrypting secrets")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.")),(0,a.kt)("h3",{id:"encryption-key-rotation"},"Encryption Key Rotation"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"To rotate secrets encryption keys on a single-server cluster:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Start the K3s server with the flag ",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"p"},"not")," supported.")),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"The steps are the same for both embedded DB and external DB clusters."),(0,a.kt)("p",null,"To rotate secrets encryption keys on HA setups:"),(0,a.kt)("admonition",{title:"Notes",type:"note"},(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"Starting K3s without encryption and enabling it at a later time is currently ",(0,a.kt)("em",{parentName:"li"},"not")," supported."),(0,a.kt)("li",{parentName:"ul"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"li"},"secrets-encrypt")," commands."))),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Start up all three K3s servers with the ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag. For brevity, the servers will be referred to as S1, S2, S3.")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Prepare on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Rotate on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt on S1"),(0,a.kt)("admonition",{parentName:"li",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"K3s will reencrypt ~5 secrets per second.",(0,a.kt)("br",{parentName:"p"}),"\n","Clusters with large # of secrets can take several minutes to reencrypt.")),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))))),(0,a.kt)("h3",{id:"secrets-encryption-disableenable"},"Secrets Encryption Disable/Enable"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"Single-Server",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flag, secrets encryption can be disabled."),(0,a.kt)("p",null,"To disable secrets encryption on a single-node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a single node cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart the K3s server with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n"))))),(0,a.kt)(k,{value:"High-Availability",default:!0,mdxType:"TabItem"},(0,a.kt)("p",null,"After launching a HA cluster with ",(0,a.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," flags, secrets encryption can be disabled."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"While not required, it is recommended that you pick one server node from which to run the ",(0,a.kt)("inlineCode",{parentName:"p"},"secrets-encrypt")," commands.")),(0,a.kt)("p",null,"For brevity, the three servers used in this guide will be referred to as S1, S2, S3."),(0,a.kt)("p",null,"To disable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Disable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments. If running K3s as a service:"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# If using systemd\nsystemctl restart k3s\n# If using openrc\nrc-service k3s restart\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3"))),(0,a.kt)("ol",{start:4},(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,a.kt)("p",null,"To re-enable secrets encryption on a HA cluster:"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Enable on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Kill and restart S1 with same arguments")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Once S1 is up, kill and restart the S2 and S3")),(0,a.kt)("li",{parentName:"ol"},(0,a.kt)("p",{parentName:"li"},"Reencrypt with flags on S1"),(0,a.kt)("pre",{parentName:"li"},(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))))),(0,a.kt)("h3",{id:"secrets-encryption-status"},"Secrets Encryption Status"),(0,a.kt)("p",null,"The secrets-encrypt tool includes a ",(0,a.kt)("inlineCode",{parentName:"p"},"status")," command that displays information about the current status of secrets encryption on the node."),(0,a.kt)("p",null,"An example of the command on a single-server node:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: start\nServer Encryption Hashes: All hashes match\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Another example on HA cluster, after rotating the keys, but before restarting the servers:  "),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: rotate\nServer Encryption Hashes: hash does not match between node-1 and node-2\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey-2021-12-10T22:54:38Z\n        AES-CBC   aescbckey\n\n")),(0,a.kt)("p",null,"Details on each section are as follows:  "),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Encryption Status"),": Displayed whether secrets encryption is disabled or enabled on the node  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Current Rotation Stage"),": Indicates the current rotation stage on the node.",(0,a.kt)("br",{parentName:"li"}),"Stages are: ",(0,a.kt)("inlineCode",{parentName:"li"},"start"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"prepare"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"rotate"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_request"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_active"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"reencrypt_finished"),"  "),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Server Encryption Hashes"),": Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Table"),": Summarizes information about the secrets encryption keys found on the node.  ",(0,a.kt)("ul",{parentName:"li"},(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Active"),': The "*" indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.'),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Key Type"),": All keys using this tool are ",(0,a.kt)("inlineCode",{parentName:"li"},"AES-CBC")," type. See more info ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers"},"here.")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"Name"),": Name of the encryption key.")))))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/b1445c4f.99c544f0.js b/kr/assets/js/b1445c4f.333614d2.js
similarity index 99%
rename from kr/assets/js/b1445c4f.99c544f0.js
rename to kr/assets/js/b1445c4f.333614d2.js
index 7e2d82240..0665dd15b 100644
--- a/kr/assets/js/b1445c4f.99c544f0.js
+++ b/kr/assets/js/b1445c4f.333614d2.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[547],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>u});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function s(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?s(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):s(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},s=Object.keys(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},d=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,s=e.originalType,i=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),m=p(a),u=r,k=m["".concat(i,".").concat(u)]||m[u]||c[u]||s;return a?n.createElement(k,l(l({ref:t},d),{},{components:a})):n.createElement(k,l({ref:t},d))}));function u(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var s=a.length,l=new Array(s);l[0]=m;var o={};for(var i in t)hasOwnProperty.call(t,i)&&(o[i]=t[i]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var p=2;p<s;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},1650:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>k,frontMatter:()=>s,metadata:()=>o,toc:()=>p});var n=a(3117),r=(a(7294),a(3905));const s={title:"etcd-snapshot"},l="k3s etcd-snapshot",o={unversionedId:"cli/etcd-snapshot",id:"cli/etcd-snapshot",title:"etcd-snapshot",description:"Available as of v1.19.1+k3s1",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",sourceDirName:"cli",slug:"/cli/etcd-snapshot",permalink:"/kr/cli/etcd-snapshot",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"etcd-snapshot"},sidebar:"mySidebar",previous:{title:"certificate",permalink:"/kr/cli/certificate"},next:{title:"secrets-encrypt",permalink:"/kr/cli/secrets-encrypt"}},i={},p=[{value:"Creating Snapshots",id:"creating-snapshots",level:4},{value:"Restoring a Cluster from a Snapshot",id:"restoring-a-cluster-from-a-snapshot",level:4},{value:"Options",id:"options",level:4},{value:"S3 Compatible API Support",id:"s3-compatible-api-support",level:4},{value:"Etcd Snapshot and Restore Subcommands",id:"etcd-snapshot-and-restore-subcommands",level:4}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},c=d("Tabs"),m=d("TabItem"),u={toc:p};function k(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-etcd-snapshot"},"k3s etcd-snapshot"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,r.kt)("p",null,"In this section, you'll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup."),(0,r.kt)("h4",{id:"creating-snapshots"},"Creating Snapshots"),(0,r.kt)("p",null,"Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the ",(0,r.kt)("a",{parentName:"p",href:"#options"},"options"),"."),(0,r.kt)("p",null,"The snapshot directory defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/snapshots"),". The data-dir value defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s")," and can be changed by setting the ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," flag."),(0,r.kt)("h4",{id:"restoring-a-cluster-from-a-snapshot"},"Restoring a Cluster from a Snapshot"),(0,r.kt)("p",null,"When K3s is restored from backup, the old data directory will be moved to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/etcd-old/"),". Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member."),(0,r.kt)("p",null,"To restore the cluster from backup:"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(m,{value:"Single Server",mdxType:"TabItem"},(0,r.kt)("p",null,"Run K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.")),(0,r.kt)(m,{value:"High Availability",mdxType:"TabItem"},(0,r.kt)("p",null,"In this example there are 3 servers, ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"S2"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"S3"),". The snapshot is located on ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),"."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags.")),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, stop K3s. Then delete the data directory, ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/db/"),":"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl stop k3s\nrm -rf /var/lib/rancher/k3s/server/db/\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s again:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, start K3s again to join the restored cluster:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n")))))),(0,r.kt)("h4",{id:"options"},"Options"),(0,r.kt)("p",null,"These options can be passed in with the command line, or in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"configuration file,")," which may be easier to use."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */5 * * *"),"(default: ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */12 * * *"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots. (Default location: ",(0,r.kt)("inlineCode",{parentName:"td"},"${data-dir}/db/snapshots"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster. This can also be set with the environment variable ",(0,r.kt)("inlineCode",{parentName:"td"},"[$K3S_CLUSTER_RESET]"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset-restore-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Path to snapshot file to be restored")))),(0,r.kt)("h4",{id:"s3-compatible-api-support"},"S3 Compatible API Support"),(0,r.kt)("p",null,"K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots."),(0,r.kt)("p",null,"The arguments below have been added to the ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," subcommand. These flags exist for the ",(0,r.kt)("inlineCode",{parentName:"p"},"etcd-snapshot")," subcommand as well however the ",(0,r.kt)("inlineCode",{parentName:"p"},"--etcd-s3")," portion is removed to avoid redundancy."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 endpoint url")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 region / bucket location (optional). defaults to us-east-1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")))),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot and save it to S3:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot \\\n  --s3 \\\n  --s3-bucket=<S3-BUCKET-NAME> \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn't running. Then run the following commands:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-init \\\n  --cluster-reset \\\n  --etcd-s3 \\\n  --cluster-reset-restore-path=<SNAPSHOT-NAME> \\\n  --etcd-s3-bucket=<S3-BUCKET-NAME> \\\n  --etcd-s3-access-key=<S3-ACCESS-KEY> \\\n  --etcd-s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("h4",{id:"etcd-snapshot-and-restore-subcommands"},"Etcd Snapshot and Restore Subcommands"),(0,r.kt)("p",null,"k3s supports a set of subcommands for working with your etcd snapshots."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Subcommand"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"delete"),(0,r.kt)("td",{parentName:"tr",align:null},"Delete given snapshot(s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"ls, list, l"),(0,r.kt)("td",{parentName:"tr",align:null},"List snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"prune"),(0,r.kt)("td",{parentName:"tr",align:null},"Remove snapshots that exceed the configured retention count")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"save"),(0,r.kt)("td",{parentName:"tr",align:null},"Trigger an immediate etcd snapshot")))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"save")," subcommand is the same as ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),". The latter will eventually be deprecated in favor of the former.")),(0,r.kt)("p",null,"These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store."),(0,r.kt)("p",null,"For additional information on the etcd snapshot subcommands, run ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),"."),(0,r.kt)("p",null,"Delete a snapshot from S3."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot delete          \\\n  --s3                            \\\n  --s3-bucket=<S3-BUCKET-NAME>    \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY> \\\n  <SNAPSHOT-NAME>\n")),(0,r.kt)("p",null,"Prune local snapshots with the default retention policy (5). The ",(0,r.kt)("inlineCode",{parentName:"p"},"prune")," subcommand takes an additional flag ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshot-retention")," that allows for overriding the default retention policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune --snapshot-retention 10\n")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[547],{3905:(e,t,a)=>{a.d(t,{Zo:()=>d,kt:()=>u});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function s(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function l(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?s(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):s(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},s=Object.keys(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(n=0;n<s.length;n++)a=s[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):l(l({},t),e)),a},d=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,s=e.originalType,i=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),m=p(a),u=r,k=m["".concat(i,".").concat(u)]||m[u]||c[u]||s;return a?n.createElement(k,l(l({ref:t},d),{},{components:a})):n.createElement(k,l({ref:t},d))}));function u(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var s=a.length,l=new Array(s);l[0]=m;var o={};for(var i in t)hasOwnProperty.call(t,i)&&(o[i]=t[i]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var p=2;p<s;p++)l[p]=a[p];return n.createElement.apply(null,l)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},1650:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>k,frontMatter:()=>s,metadata:()=>o,toc:()=>p});var n=a(3117),r=(a(7294),a(3905));const s={title:"etcd-snapshot"},l="k3s etcd-snapshot",o={unversionedId:"cli/etcd-snapshot",id:"cli/etcd-snapshot",title:"etcd-snapshot",description:"Available as of v1.19.1+k3s1",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",sourceDirName:"cli",slug:"/cli/etcd-snapshot",permalink:"/kr/cli/etcd-snapshot",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"etcd-snapshot"},sidebar:"mySidebar",previous:{title:"certificate",permalink:"/kr/cli/certificate"},next:{title:"secrets-encrypt",permalink:"/kr/cli/secrets-encrypt"}},i={},p=[{value:"Creating Snapshots",id:"creating-snapshots",level:4},{value:"Restoring a Cluster from a Snapshot",id:"restoring-a-cluster-from-a-snapshot",level:4},{value:"Options",id:"options",level:4},{value:"S3 Compatible API Support",id:"s3-compatible-api-support",level:4},{value:"Etcd Snapshot and Restore Subcommands",id:"etcd-snapshot-and-restore-subcommands",level:4}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},c=d("Tabs"),m=d("TabItem"),u={toc:p};function k(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-etcd-snapshot"},"k3s etcd-snapshot"),(0,r.kt)("admonition",{title:"Version Gate",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Available as of ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1"))),(0,r.kt)("p",null,"In this section, you'll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup."),(0,r.kt)("h4",{id:"creating-snapshots"},"Creating Snapshots"),(0,r.kt)("p",null,"Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the ",(0,r.kt)("a",{parentName:"p",href:"#options"},"options"),"."),(0,r.kt)("p",null,"The snapshot directory defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/snapshots"),". The data-dir value defaults to ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s")," and can be changed by setting the ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," flag."),(0,r.kt)("h4",{id:"restoring-a-cluster-from-a-snapshot"},"Restoring a Cluster from a Snapshot"),(0,r.kt)("p",null,"When K3s is restored from backup, the old data directory will be moved to ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/etcd-old/"),". Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member."),(0,r.kt)("p",null,"To restore the cluster from backup:"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(m,{value:"Single Server",mdxType:"TabItem"},(0,r.kt)("p",null,"Run K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.")),(0,r.kt)(m,{value:"High Availability",mdxType:"TabItem"},(0,r.kt)("p",null,"In this example there are 3 servers, ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"S2"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"S3"),". The snapshot is located on ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),"."),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," option, with the ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path")," also given:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Result:")," A message in the logs says that K3s can be restarted without the flags.")),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, stop K3s. Then delete the data directory, ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/db/"),":"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl stop k3s\nrm -rf /var/lib/rancher/k3s/server/db/\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S1, start K3s again:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"On S2 and S3, start K3s again to join the restored cluster:"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n")))))),(0,r.kt)("h4",{id:"options"},"Options"),(0,r.kt)("p",null,"These options can be passed in with the command line, or in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"configuration file,")," which may be easier to use."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"Disable automatic etcd snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Snapshot interval time in cron spec. eg. every 5 hours ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */5 * * *"),"(default: ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */12 * * *"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Number of snapshots to retain (default: 5)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to save db snapshots. (Default location: ",(0,r.kt)("inlineCode",{parentName:"td"},"${data-dir}/db/snapshots"),")")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},"Forget all peers and become sole member of a new cluster. This can also be set with the environment variable ",(0,r.kt)("inlineCode",{parentName:"td"},"[$K3S_CLUSTER_RESET]"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset-restore-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"Path to snapshot file to be restored")))),(0,r.kt)("h4",{id:"s3-compatible-api-support"},"S3 Compatible API Support"),(0,r.kt)("p",null,"K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots."),(0,r.kt)("p",null,"The arguments below have been added to the ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," subcommand. These flags exist for the ",(0,r.kt)("inlineCode",{parentName:"p"},"etcd-snapshot")," subcommand as well however the ",(0,r.kt)("inlineCode",{parentName:"p"},"--etcd-s3")," portion is removed to avoid redundancy."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Options"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"Enable backup to S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 endpoint url")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 custom CA cert to connect to S3 endpoint")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"Disables S3 SSL certificate validation")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 bucket name")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 region / bucket location (optional). defaults to us-east-1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 folder")))),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot and save it to S3:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot \\\n  --s3 \\\n  --s3-bucket=<S3-BUCKET-NAME> \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("p",null,"To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn't running. Then run the following commands:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-init \\\n  --cluster-reset \\\n  --etcd-s3 \\\n  --cluster-reset-restore-path=<SNAPSHOT-NAME> \\\n  --etcd-s3-bucket=<S3-BUCKET-NAME> \\\n  --etcd-s3-access-key=<S3-ACCESS-KEY> \\\n  --etcd-s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("h4",{id:"etcd-snapshot-and-restore-subcommands"},"Etcd Snapshot and Restore Subcommands"),(0,r.kt)("p",null,"k3s supports a set of subcommands for working with your etcd snapshots."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Subcommand"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"delete"),(0,r.kt)("td",{parentName:"tr",align:null},"Delete given snapshot(s)")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"ls, list, l"),(0,r.kt)("td",{parentName:"tr",align:null},"List snapshots")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"prune"),(0,r.kt)("td",{parentName:"tr",align:null},"Remove snapshots that exceed the configured retention count")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"save"),(0,r.kt)("td",{parentName:"tr",align:null},"Trigger an immediate etcd snapshot")))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The ",(0,r.kt)("inlineCode",{parentName:"p"},"save")," subcommand is the same as ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),". The latter will eventually be deprecated in favor of the former.")),(0,r.kt)("p",null,"These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store."),(0,r.kt)("p",null,"For additional information on the etcd snapshot subcommands, run ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),"."),(0,r.kt)("p",null,"Delete a snapshot from S3."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot delete          \\\n  --s3                            \\\n  --s3-bucket=<S3-BUCKET-NAME>    \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY> \\\n  <SNAPSHOT-NAME>\n")),(0,r.kt)("p",null,"Prune local snapshots with the default retention policy (5). The ",(0,r.kt)("inlineCode",{parentName:"p"},"prune")," subcommand takes an additional flag ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshot-retention")," that allows for overriding the default retention policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune --snapshot-retention 10\n")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/b5fc650f.a1bb84e6.js b/kr/assets/js/b5fc650f.52ad13fc.js
similarity index 99%
rename from kr/assets/js/b5fc650f.a1bb84e6.js
rename to kr/assets/js/b5fc650f.52ad13fc.js
index 32678f8ba..a04bb43ff 100644
--- a/kr/assets/js/b5fc650f.a1bb84e6.js
+++ b/kr/assets/js/b5fc650f.52ad13fc.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3443],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),c=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(r),k=a,m=d["".concat(o,".").concat(k)]||d[k]||p[k]||i;return r?n.createElement(m,l(l({ref:t},u),{},{components:r})):n.createElement(m,l({ref:t},u))}));function k(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,l=new Array(i);l[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,l[1]=s;for(var c=2;c<i;c++)l[c]=r[c];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},4227:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>o,default:()=>k,frontMatter:()=>s,metadata:()=>c,toc:()=>p});var n=r(3117),a=(r(7294),r(3905)),i=r(941),l=r(4996);const s={title:"\uc544\ud0a4\ud14d\ucc98",weight:1},o=void 0,c={unversionedId:"architecture/architecture",id:"architecture/architecture",title:"\uc544\ud0a4\ud14d\ucc98",description:"\uc774 \ud398\uc774\uc9c0\uc5d0\uc11c\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc758 \uc544\ud0a4\ud14d\ucc98\uc640 \ub2e8\uc77c \ub178\ub4dc \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc640\uc758 \ucc28\uc774\uc810\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/architecture/architecture.md",sourceDirName:"architecture",slug:"/architecture/",permalink:"/kr/architecture/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\uc544\ud0a4\ud14d\ucc98",weight:1},sidebar:"mySidebar",previous:{title:"K3s - Lightweight Kubernetes",permalink:"/kr/"},next:{title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",permalink:"/kr/quick-start/"}},u={},p=[{value:"\uc784\ubca0\ub514\ub4dc DB\uac00 \uc788\ub294 \ub2e8\uc77c \uc11c\ubc84 \uc124\uc815",id:"\uc784\ubca0\ub514\ub4dc-db\uac00-\uc788\ub294-\ub2e8\uc77c-\uc11c\ubc84-\uc124\uc815",level:3},{value:"\uc678\ubd80 DB\uac00 \uc788\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84",id:"\uc678\ubd80-db\uac00-\uc788\ub294-\uace0\uac00\uc6a9\uc131-k3s-\uc11c\ubc84",level:3},{value:"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \uc704\ud55c \uace0\uc815 \ub4f1\ub85d \uc8fc\uc18c",id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc\ub97c-\uc704\ud55c-\uace0\uc815-\ub4f1\ub85d-\uc8fc\uc18c",level:3},{value:"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc \ub4f1\ub85d \uc791\ub3d9 \ubc29\uc2dd",id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc-\ub4f1\ub85d-\uc791\ub3d9-\ubc29\uc2dd",level:3}],d={toc:p};function k(e){let{components:t,...s}=e;return(0,a.kt)("wrapper",(0,n.Z)({},d,s,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc774 \ud398\uc774\uc9c0\uc5d0\uc11c\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc758 \uc544\ud0a4\ud14d\ucc98\uc640 \ub2e8\uc77c \ub178\ub4dc \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc640\uc758 \ucc28\uc774\uc810\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ub610\ud55c \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\uac00 K3s \uc11c\ubc84\uc5d0 \ub4f1\ub85d\ub418\ub294 \ubc29\ubc95\ub3c4 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\uc11c\ubc84 \ub178\ub4dc\ub294 ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s server")," \uba85\ub839\uc744 \uc2e4\ud589\ud558\ub294 \ud638\uc2a4\ud2b8\ub85c \uc815\uc758\ub418\uba70, \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \ubc0f \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131 \uc694\uc18c\ub294 K3s\uc5d0\uc11c \uad00\ub9ac\ud569\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \ub610\ub294 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uad6c\uc131 \uc694\uc18c \uc5c6\uc774 ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s agent")," \uba85\ub839\uc744 \uc2e4\ud589\ud558\ub294 \ud638\uc2a4\ud2b8\ub85c \uc815\uc758\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ubaa8\ub450 kubelet, \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \ubc0f CNI\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc5d0\uc774\uc804\ud2b8 \uc5c6\ub294 \uc11c\ubc84 \uc2e4\ud589\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"li",href:"/kr/advanced/#running-agentless-servers-experimental"},"\uace0\uae09 \uc635\uc158")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("p",null,(0,a.kt)("img",{src:r(4530).Z,width:"1562",height:"898"})),(0,a.kt)("h3",{id:"\uc784\ubca0\ub514\ub4dc-db\uac00-\uc788\ub294-\ub2e8\uc77c-\uc11c\ubc84-\uc124\uc815"},"\uc784\ubca0\ub514\ub4dc DB\uac00 \uc788\ub294 \ub2e8\uc77c \uc11c\ubc84 \uc124\uc815"),(0,a.kt)("p",null,"\ub2e4\uc74c \ub2e4\uc774\uc5b4\uadf8\ub7a8\uc740 \uc784\ubca0\ub514\ub4dc SQLite \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uc788\ub294 \ub2e8\uc77c \ub178\ub4dc K3s \uc11c\ubc84\uac00 \uc788\ub294 \ud074\ub7ec\uc2a4\ud130\uc758 \uc608\ub97c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc774 \uad6c\uc131\uc5d0\uc11c \uac01 \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 \ub3d9\uc77c\ud55c \uc11c\ubc84 \ub178\ub4dc\uc5d0 \ub4f1\ub85d\ub429\ub2c8\ub2e4. K3s \uc0ac\uc6a9\uc790\ub294 \uc11c\ubc84 \ub178\ub4dc\uc5d0\uc11c K3s API\ub97c \ud638\ucd9c\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ub9ac\uc18c\uc2a4\ub97c \uc870\uc791\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)(i.Z,{alt:"K3s Architecture with a Single Server",sources:{light:(0,l.Z)("/img/k3s-architecture-single-server.svg"),dark:(0,l.Z)("/img/k3s-architecture-single-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\uc678\ubd80-db\uac00-\uc788\ub294-\uace0\uac00\uc6a9\uc131-k3s-\uc11c\ubc84"},"\uc678\ubd80 DB\uac00 \uc788\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84"),(0,a.kt)("p",null,"\ub2e8\uc77c \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\ub294 \ub2e4\uc591\ud55c \uc0ac\uc6a9 \uc0ac\ub840\ub97c \ucda9\uc871\ud560 \uc218 \uc788\uc9c0\ub9cc, Kubernetes \ucee8\ud2b8\ub864 \ud50c\ub808\uc778\uc758 \uac00\ub3d9 \uc2dc\uac04\uc774 \uc911\uc694\ud55c \ud658\uacbd\uc758 \uacbd\uc6b0, HA \uad6c\uc131\uc73c\ub85c K3s\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. HA K3s \ud074\ub7ec\uc2a4\ud130\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \uad6c\uc131\ub429\ub2c8\ub2e4:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\ub450 \uac1c \uc774\uc0c1\uc758 ",(0,a.kt)("strong",{parentName:"li"},"\uc11c\ubc84 \ub178\ub4dc"),"\uac00 Kubernetes API\ub97c \uc81c\uacf5\ud558\uace0 \ub2e4\ub978 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uc11c\ube44\uc2a4\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4"),"(\ub2e8\uc77c \uc11c\ubc84 \uc124\uc815\uc5d0 \uc0ac\uc6a9\ub418\ub294 \uc784\ubca0\ub514\ub4dc SQLite \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc640 \ubc18\ub300)")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers",sources:{light:(0,l.Z)("/img/k3s-architecture-ha-server.svg"),dark:(0,l.Z)("/img/k3s-architecture-ha-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc\ub97c-\uc704\ud55c-\uace0\uc815-\ub4f1\ub85d-\uc8fc\uc18c"},"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \uc704\ud55c \uace0\uc815 \ub4f1\ub85d \uc8fc\uc18c"),(0,a.kt)("p",null,"\uace0\uac00\uc6a9\uc131 \uc11c\ubc84 \uad6c\uc131\uc5d0\uc11c \uac01 \ub178\ub4dc\ub294 \uc544\ub798 \ub2e4\uc774\uc5b4\uadf8\ub7a8\uacfc \uac19\uc774 \uace0\uc815 \ub4f1\ub85d \uc8fc\uc18c\ub97c \uc0ac\uc6a9\ud558\uc5ec Kubernetes API\uc5d0 \ub4f1\ub85d\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ub4f1\ub85d \ud6c4 \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 \uc11c\ubc84 \ub178\ub4dc \uc911 \ud558\ub098\uc5d0 \uc9c1\uc811 \uc5f0\uacb0\uc744 \uc124\uc815\ud569\ub2c8\ub2e4."),(0,a.kt)(i.Z,{alt:"Agent Registration HA",sources:{light:(0,l.Z)("/img/k3s-production-setup.svg"),dark:(0,l.Z)("/img/k3s-production-setup-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc-\ub4f1\ub85d-\uc791\ub3d9-\ubc29\uc2dd"},"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc \ub4f1\ub85d \uc791\ub3d9 \ubc29\uc2dd"),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s agent")," \ud504\ub85c\uc138\uc2a4\uc5d0 \uc758\ud574 \uc2dc\uc791\ub41c \uc6f9\uc18c\ucf13 \uc5f0\uacb0\ub85c \ub4f1\ub85d\ub418\uba70, \uc5d0\uc774\uc804\ud2b8 \ud504\ub85c\uc138\uc2a4\uc758 \uc77c\ubd80\ub85c \uc2e4\ud589\ub418\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8 \uce21 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uc5d0 \uc758\ud574 \uc5f0\uacb0\uc774 \uc720\uc9c0\ub429\ub2c8\ub2e4. \uc774 \ub85c\ub4dc \ubc38\ub7f0\uc11c\ub294 \ud074\ub7ec\uc2a4\ud130\uc758 \ubaa8\ub4e0 \uc11c\ubc84\uc5d0 \ub300\ud55c \uc548\uc815\uc801\uc778 \uc5f0\uacb0\uc744 \uc720\uc9c0\ud558\uc5ec \uac1c\ubcc4 \uc11c\ubc84\uc758 \uc911\ub2e8\uc744 \ud5c8\uc6a9\ud558\ub294 \uc5d0\uc774\uc804\uc2dc \uc11c\ubc84\uc5d0 \ub300\ud55c \uc5f0\uacb0\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8\ub294 \ub178\ub4dc \ud074\ub7ec\uc2a4\ud130 \uc2dc\ud06c\ub9bf\uacfc \ub178\ub4dc\uc5d0 \ub300\ud574 \ubb34\uc791\uc704\ub85c \uc0dd\uc131\ub41c \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc11c\ubc84\uc5d0 \ub4f1\ub85d\ud558\uba70, \uc774 \ube44\ubc00\ubc88\ud638\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/password"),"\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4. \uc11c\ubc84\ub294 \uac1c\ubcc4 \ub178\ub4dc\uc758 \ube44\ubc00\ubc88\ud638\ub97c \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc2dc\ud06c\ub9bf\uc73c\ub85c \uc800\uc7a5\ud558\uba70, \uc774\ud6c4 \ubaa8\ub4e0 \uc2dc\ub3c4\ub294 \ub3d9\uc77c\ud55c \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4. \ub178\ub4dc \ud328\uc2a4\uc6cc\ub4dc \uc2dc\ud06c\ub9bf\uc740 ",(0,a.kt)("inlineCode",{parentName:"p"},"<host>.node-password.k3s")," \ud15c\ud50c\ub9bf\uc744 \uc0ac\uc6a9\ud558\ub294 \uc774\ub984\uc73c\ub85c ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4. \uc774\ub294 \ub178\ub4dc ID\uc758 \ubb34\uacb0\uc131\uc744 \ubcf4\ud638\ud558\uae30 \uc704\ud574 \uc218\ud589\ub429\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8\uc758 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node")," \ub514\ub809\ud130\ub9ac\uac00 \uc81c\uac70\ub418\uac70\ub098 \uae30\uc874 \uc774\ub984\uc744 \uc0ac\uc6a9\ud558\uc5ec \ub178\ub4dc\uc5d0 \ub2e4\uc2dc \uac00\uc785\ud558\ub824\ub294 \uacbd\uc6b0, \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c \ub178\ub4dc\ub97c \uc0ad\uc81c\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\ub807\uac8c \ud558\uba74 \uc774\uc804 \ub178\ub4dc \ud56d\ubaa9\uacfc \ub178\ub4dc \ube44\ubc00\ubc88\ud638 \uc2dc\ud06c\ub9bf\uc774 \ubaa8\ub450 \uc815\ub9ac\ub418\uace0 \ub178\ub4dc\uac00 \ud074\ub7ec\uc2a4\ud130\uc5d0 (\uc7ac)\uc870\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"K3s v1.20.2 \uc774\uc804 \uc11c\ubc84\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/cred/node-passwd"),"\uc5d0 \ub514\uc2a4\ud06c\uc5d0 \ube44\ubc00\ubc88\ud638\ub97c \uc800\uc7a5\ud569\ub2c8\ub2e4.")),(0,a.kt)("p",null,"\ud638\uc2a4\ud2b8 \uc774\ub984\uc744 \uc790\uc8fc \uc7ac\uc0ac\uc6a9\ud558\uc9c0\ub9cc \ub178\ub4dc \uc554\ud638 \uc2dc\ud06c\ub9bf\uc744 \uc81c\uac70\ud560 \uc218 \uc5c6\ub294 \uacbd\uc6b0, ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," \ud50c\ub798\uadf8\ub97c \uc0ac\uc6a9\ud558\uc5ec K3s \uc11c\ubc84 \ub610\ub294 \uc5d0\uc774\uc804\ud2b8\ub97c \uc2dc\uc791\ud558\uba74 \ud638\uc2a4\ud2b8 \uc774\ub984\uc5d0 \uace0\uc720 \ub178\ub4dc ID\ub97c \uc790\ub3d9\uc73c\ub85c \ucd94\uac00\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud65c\uc131\ud654\ud558\uba74 \ub178\ub4dc ID\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/"),"\uc5d0\ub3c4 \uc800\uc7a5\ub429\ub2c8\ub2e4."))}k.isMDXComponent=!0},4530:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg"}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3443],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),c=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(r),k=a,m=d["".concat(o,".").concat(k)]||d[k]||p[k]||i;return r?n.createElement(m,l(l({ref:t},u),{},{components:r})):n.createElement(m,l({ref:t},u))}));function k(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,l=new Array(i);l[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,l[1]=s;for(var c=2;c<i;c++)l[c]=r[c];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},4227:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>o,default:()=>k,frontMatter:()=>s,metadata:()=>c,toc:()=>p});var n=r(3117),a=(r(7294),r(3905)),i=r(941),l=r(4996);const s={title:"\uc544\ud0a4\ud14d\ucc98",weight:1},o=void 0,c={unversionedId:"architecture/architecture",id:"architecture/architecture",title:"\uc544\ud0a4\ud14d\ucc98",description:"\uc774 \ud398\uc774\uc9c0\uc5d0\uc11c\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc758 \uc544\ud0a4\ud14d\ucc98\uc640 \ub2e8\uc77c \ub178\ub4dc \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc640\uc758 \ucc28\uc774\uc810\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/architecture/architecture.md",sourceDirName:"architecture",slug:"/architecture/",permalink:"/kr/architecture/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\uc544\ud0a4\ud14d\ucc98",weight:1},sidebar:"mySidebar",previous:{title:"K3s - Lightweight Kubernetes",permalink:"/kr/"},next:{title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",permalink:"/kr/quick-start/"}},u={},p=[{value:"\uc784\ubca0\ub514\ub4dc DB\uac00 \uc788\ub294 \ub2e8\uc77c \uc11c\ubc84 \uc124\uc815",id:"\uc784\ubca0\ub514\ub4dc-db\uac00-\uc788\ub294-\ub2e8\uc77c-\uc11c\ubc84-\uc124\uc815",level:3},{value:"\uc678\ubd80 DB\uac00 \uc788\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84",id:"\uc678\ubd80-db\uac00-\uc788\ub294-\uace0\uac00\uc6a9\uc131-k3s-\uc11c\ubc84",level:3},{value:"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \uc704\ud55c \uace0\uc815 \ub4f1\ub85d \uc8fc\uc18c",id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc\ub97c-\uc704\ud55c-\uace0\uc815-\ub4f1\ub85d-\uc8fc\uc18c",level:3},{value:"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc \ub4f1\ub85d \uc791\ub3d9 \ubc29\uc2dd",id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc-\ub4f1\ub85d-\uc791\ub3d9-\ubc29\uc2dd",level:3}],d={toc:p};function k(e){let{components:t,...s}=e;return(0,a.kt)("wrapper",(0,n.Z)({},d,s,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc774 \ud398\uc774\uc9c0\uc5d0\uc11c\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc758 \uc544\ud0a4\ud14d\ucc98\uc640 \ub2e8\uc77c \ub178\ub4dc \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\uc640\uc758 \ucc28\uc774\uc810\uc5d0 \ub300\ud574 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ub610\ud55c \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\uac00 K3s \uc11c\ubc84\uc5d0 \ub4f1\ub85d\ub418\ub294 \ubc29\ubc95\ub3c4 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\uc11c\ubc84 \ub178\ub4dc\ub294 ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s server")," \uba85\ub839\uc744 \uc2e4\ud589\ud558\ub294 \ud638\uc2a4\ud2b8\ub85c \uc815\uc758\ub418\uba70, \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \ubc0f \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131 \uc694\uc18c\ub294 K3s\uc5d0\uc11c \uad00\ub9ac\ud569\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \ub610\ub294 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uad6c\uc131 \uc694\uc18c \uc5c6\uc774 ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s agent")," \uba85\ub839\uc744 \uc2e4\ud589\ud558\ub294 \ud638\uc2a4\ud2b8\ub85c \uc815\uc758\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},"\uc11c\ubc84\uc640 \uc5d0\uc774\uc804\ud2b8 \ubaa8\ub450 kubelet, \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \ubc0f CNI\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc5d0\uc774\uc804\ud2b8 \uc5c6\ub294 \uc11c\ubc84 \uc2e4\ud589\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"li",href:"/kr/advanced/#running-agentless-servers-experimental"},"\uace0\uae09 \uc635\uc158")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("p",null,(0,a.kt)("img",{src:r(4530).Z,width:"1562",height:"898"})),(0,a.kt)("h3",{id:"\uc784\ubca0\ub514\ub4dc-db\uac00-\uc788\ub294-\ub2e8\uc77c-\uc11c\ubc84-\uc124\uc815"},"\uc784\ubca0\ub514\ub4dc DB\uac00 \uc788\ub294 \ub2e8\uc77c \uc11c\ubc84 \uc124\uc815"),(0,a.kt)("p",null,"\ub2e4\uc74c \ub2e4\uc774\uc5b4\uadf8\ub7a8\uc740 \uc784\ubca0\ub514\ub4dc SQLite \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uc788\ub294 \ub2e8\uc77c \ub178\ub4dc K3s \uc11c\ubc84\uac00 \uc788\ub294 \ud074\ub7ec\uc2a4\ud130\uc758 \uc608\ub97c \ubcf4\uc5ec\uc90d\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc774 \uad6c\uc131\uc5d0\uc11c \uac01 \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 \ub3d9\uc77c\ud55c \uc11c\ubc84 \ub178\ub4dc\uc5d0 \ub4f1\ub85d\ub429\ub2c8\ub2e4. K3s \uc0ac\uc6a9\uc790\ub294 \uc11c\ubc84 \ub178\ub4dc\uc5d0\uc11c K3s API\ub97c \ud638\ucd9c\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ub9ac\uc18c\uc2a4\ub97c \uc870\uc791\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)(i.Z,{alt:"K3s Architecture with a Single Server",sources:{light:(0,l.Z)("/img/k3s-architecture-single-server.svg"),dark:(0,l.Z)("/img/k3s-architecture-single-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\uc678\ubd80-db\uac00-\uc788\ub294-\uace0\uac00\uc6a9\uc131-k3s-\uc11c\ubc84"},"\uc678\ubd80 DB\uac00 \uc788\ub294 \uace0\uac00\uc6a9\uc131 K3s \uc11c\ubc84"),(0,a.kt)("p",null,"\ub2e8\uc77c \uc11c\ubc84 \ud074\ub7ec\uc2a4\ud130\ub294 \ub2e4\uc591\ud55c \uc0ac\uc6a9 \uc0ac\ub840\ub97c \ucda9\uc871\ud560 \uc218 \uc788\uc9c0\ub9cc, Kubernetes \ucee8\ud2b8\ub864 \ud50c\ub808\uc778\uc758 \uac00\ub3d9 \uc2dc\uac04\uc774 \uc911\uc694\ud55c \ud658\uacbd\uc758 \uacbd\uc6b0, HA \uad6c\uc131\uc73c\ub85c K3s\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. HA K3s \ud074\ub7ec\uc2a4\ud130\ub294 \ub2e4\uc74c\uacfc \uac19\uc774 \uad6c\uc131\ub429\ub2c8\ub2e4:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\ub450 \uac1c \uc774\uc0c1\uc758 ",(0,a.kt)("strong",{parentName:"li"},"\uc11c\ubc84 \ub178\ub4dc"),"\uac00 Kubernetes API\ub97c \uc81c\uacf5\ud558\uace0 \ub2e4\ub978 \ucee8\ud2b8\ub864 \ud50c\ub808\uc778 \uc11c\ube44\uc2a4\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4"),"(\ub2e8\uc77c \uc11c\ubc84 \uc124\uc815\uc5d0 \uc0ac\uc6a9\ub418\ub294 \uc784\ubca0\ub514\ub4dc SQLite \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc640 \ubc18\ub300)")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers",sources:{light:(0,l.Z)("/img/k3s-architecture-ha-server.svg"),dark:(0,l.Z)("/img/k3s-architecture-ha-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc\ub97c-\uc704\ud55c-\uace0\uc815-\ub4f1\ub85d-\uc8fc\uc18c"},"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \uc704\ud55c \uace0\uc815 \ub4f1\ub85d \uc8fc\uc18c"),(0,a.kt)("p",null,"\uace0\uac00\uc6a9\uc131 \uc11c\ubc84 \uad6c\uc131\uc5d0\uc11c \uac01 \ub178\ub4dc\ub294 \uc544\ub798 \ub2e4\uc774\uc5b4\uadf8\ub7a8\uacfc \uac19\uc774 \uace0\uc815 \ub4f1\ub85d \uc8fc\uc18c\ub97c \uc0ac\uc6a9\ud558\uc5ec Kubernetes API\uc5d0 \ub4f1\ub85d\ud574\uc57c \ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"\ub4f1\ub85d \ud6c4 \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 \uc11c\ubc84 \ub178\ub4dc \uc911 \ud558\ub098\uc5d0 \uc9c1\uc811 \uc5f0\uacb0\uc744 \uc124\uc815\ud569\ub2c8\ub2e4."),(0,a.kt)(i.Z,{alt:"Agent Registration HA",sources:{light:(0,l.Z)("/img/k3s-production-setup.svg"),dark:(0,l.Z)("/img/k3s-production-setup-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\uc5d0\uc774\uc804\ud2b8-\ub178\ub4dc-\ub4f1\ub85d-\uc791\ub3d9-\ubc29\uc2dd"},"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc \ub4f1\ub85d \uc791\ub3d9 \ubc29\uc2dd"),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s agent")," \ud504\ub85c\uc138\uc2a4\uc5d0 \uc758\ud574 \uc2dc\uc791\ub41c \uc6f9\uc18c\ucf13 \uc5f0\uacb0\ub85c \ub4f1\ub85d\ub418\uba70, \uc5d0\uc774\uc804\ud2b8 \ud504\ub85c\uc138\uc2a4\uc758 \uc77c\ubd80\ub85c \uc2e4\ud589\ub418\ub294 \ud074\ub77c\uc774\uc5b8\ud2b8 \uce21 \ub85c\ub4dc\ubc38\ub7f0\uc11c\uc5d0 \uc758\ud574 \uc5f0\uacb0\uc774 \uc720\uc9c0\ub429\ub2c8\ub2e4. \uc774 \ub85c\ub4dc \ubc38\ub7f0\uc11c\ub294 \ud074\ub7ec\uc2a4\ud130\uc758 \ubaa8\ub4e0 \uc11c\ubc84\uc5d0 \ub300\ud55c \uc548\uc815\uc801\uc778 \uc5f0\uacb0\uc744 \uc720\uc9c0\ud558\uc5ec \uac1c\ubcc4 \uc11c\ubc84\uc758 \uc911\ub2e8\uc744 \ud5c8\uc6a9\ud558\ub294 \uc5d0\uc774\uc804\uc2dc \uc11c\ubc84\uc5d0 \ub300\ud55c \uc5f0\uacb0\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8\ub294 \ub178\ub4dc \ud074\ub7ec\uc2a4\ud130 \uc2dc\ud06c\ub9bf\uacfc \ub178\ub4dc\uc5d0 \ub300\ud574 \ubb34\uc791\uc704\ub85c \uc0dd\uc131\ub41c \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc11c\ubc84\uc5d0 \ub4f1\ub85d\ud558\uba70, \uc774 \ube44\ubc00\ubc88\ud638\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/password"),"\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4. \uc11c\ubc84\ub294 \uac1c\ubcc4 \ub178\ub4dc\uc758 \ube44\ubc00\ubc88\ud638\ub97c \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc2dc\ud06c\ub9bf\uc73c\ub85c \uc800\uc7a5\ud558\uba70, \uc774\ud6c4 \ubaa8\ub4e0 \uc2dc\ub3c4\ub294 \ub3d9\uc77c\ud55c \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud574\uc57c \ud569\ub2c8\ub2e4. \ub178\ub4dc \ud328\uc2a4\uc6cc\ub4dc \uc2dc\ud06c\ub9bf\uc740 ",(0,a.kt)("inlineCode",{parentName:"p"},"<host>.node-password.k3s")," \ud15c\ud50c\ub9bf\uc744 \uc0ac\uc6a9\ud558\ub294 \uc774\ub984\uc73c\ub85c ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," \ub124\uc784\uc2a4\ud398\uc774\uc2a4\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4. \uc774\ub294 \ub178\ub4dc ID\uc758 \ubb34\uacb0\uc131\uc744 \ubcf4\ud638\ud558\uae30 \uc704\ud574 \uc218\ud589\ub429\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8\uc758 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node")," \ub514\ub809\ud130\ub9ac\uac00 \uc81c\uac70\ub418\uac70\ub098 \uae30\uc874 \uc774\ub984\uc744 \uc0ac\uc6a9\ud558\uc5ec \ub178\ub4dc\uc5d0 \ub2e4\uc2dc \uac00\uc785\ud558\ub824\ub294 \uacbd\uc6b0, \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c \ub178\ub4dc\ub97c \uc0ad\uc81c\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774\ub807\uac8c \ud558\uba74 \uc774\uc804 \ub178\ub4dc \ud56d\ubaa9\uacfc \ub178\ub4dc \ube44\ubc00\ubc88\ud638 \uc2dc\ud06c\ub9bf\uc774 \ubaa8\ub450 \uc815\ub9ac\ub418\uace0 \ub178\ub4dc\uac00 \ud074\ub7ec\uc2a4\ud130\uc5d0 (\uc7ac)\uc870\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"K3s v1.20.2 \uc774\uc804 \uc11c\ubc84\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/cred/node-passwd"),"\uc5d0 \ub514\uc2a4\ud06c\uc5d0 \ube44\ubc00\ubc88\ud638\ub97c \uc800\uc7a5\ud569\ub2c8\ub2e4.")),(0,a.kt)("p",null,"\ud638\uc2a4\ud2b8 \uc774\ub984\uc744 \uc790\uc8fc \uc7ac\uc0ac\uc6a9\ud558\uc9c0\ub9cc \ub178\ub4dc \uc554\ud638 \uc2dc\ud06c\ub9bf\uc744 \uc81c\uac70\ud560 \uc218 \uc5c6\ub294 \uacbd\uc6b0, ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," \ud50c\ub798\uadf8\ub97c \uc0ac\uc6a9\ud558\uc5ec K3s \uc11c\ubc84 \ub610\ub294 \uc5d0\uc774\uc804\ud2b8\ub97c \uc2dc\uc791\ud558\uba74 \ud638\uc2a4\ud2b8 \uc774\ub984\uc5d0 \uace0\uc720 \ub178\ub4dc ID\ub97c \uc790\ub3d9\uc73c\ub85c \ucd94\uac00\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud65c\uc131\ud654\ud558\uba74 \ub178\ub4dc ID\ub294 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/"),"\uc5d0\ub3c4 \uc800\uc7a5\ub429\ub2c8\ub2e4."))}k.isMDXComponent=!0},4530:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg"}}]);
\ No newline at end of file
diff --git a/kr/assets/js/b64afda8.e320d50b.js b/kr/assets/js/b64afda8.a1d12b66.js
similarity index 99%
rename from kr/assets/js/b64afda8.e320d50b.js
rename to kr/assets/js/b64afda8.a1d12b66.js
index 8ea4b3647..cf5bd99ea 100644
--- a/kr/assets/js/b64afda8.e320d50b.js
+++ b/kr/assets/js/b64afda8.a1d12b66.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6263],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},1738:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const s={title:"CIS Self Assessment Guide",weight:90},i=void 0,l={unversionedId:"security/self-assessment",id:"security/self-assessment",title:"CIS Self Assessment Guide",description:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/self-assessment.md",sourceDirName:"security",slug:"/security/self-assessment",permalink:"/kr/security/self-assessment",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"CIS Self Assessment Guide",weight:90},sidebar:"mySidebar",previous:{title:"CIS Hardening Guide",permalink:"/kr/security/hardening-guide"}},o={},c=[{value:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)",id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)",id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)",id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)",id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)",id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)",id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)",id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)",id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual",level:3},{value:"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)",id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated",level:3},{value:"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)",id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated",level:3},{value:"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)",id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated",level:3},{value:"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)",id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)",id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)",id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)",id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)",id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)",id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)",id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)",id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual",level:3},{value:"1.2 API Server",id:"12-api-server",level:2},{value:"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)",id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual",level:3},{value:"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)",id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated",level:3},{value:"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)",id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated",level:3},{value:"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)",id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated",level:3},{value:"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)",id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)",id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)",id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated",level:3},{value:"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)",id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated",level:3},{value:"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)",id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual",level:3},{value:"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)",id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated",level:3},{value:"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)",id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual",level:3},{value:"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)",id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual",level:3},{value:"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)",id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated",level:3},{value:"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)",id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated",level:3},{value:"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)",id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated",level:3},{value:"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)",id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated",level:3},{value:"1.2.18 Ensure that the --profiling argument is set to false (Automated)",id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.2.19 Ensure that the --audit-log-path argument is set (Automated)",id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated",level:3},{value:"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)",id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated",level:3},{value:"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)",id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated",level:3},{value:"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)",id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated",level:3},{value:"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)",id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated",level:3},{value:"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)",id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)",id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)",id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)",id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)",id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual",level:3},{value:"1.2.31 Ensure that encryption providers are appropriately configured (Manual)",id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual",level:3},{value:"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)",id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"1.3 Controller Manager",id:"13-controller-manager",level:2},{value:"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)",id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual",level:3},{value:"1.3.2 Ensure that the --profiling argument is set to false (Automated)",id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)",id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated",level:3},{value:"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)",id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)",id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)",id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated",level:3},{value:"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"1.4 Scheduler",id:"14-scheduler",level:2},{value:"1.4.1 Ensure that the --profiling argument is set to false (Automated)",id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"2 Etcd Node Configuration",id:"2-etcd-node-configuration",level:2},{value:"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)",id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)",id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.3 Ensure that the --auto-tls argument is not set to true (Automated)",id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)",id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)",id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)",id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)",id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual",level:3},{value:"3.1 Authentication and Authorization",id:"31-authentication-and-authorization",level:2},{value:"3.1.1 Client certificate authentication should not be used for users (Manual)",id:"311-client-certificate-authentication-should-not-be-used-for-users-manual",level:3},{value:"3.2 Logging",id:"32-logging",level:2},{value:"3.2.1 Ensure that a minimal audit policy is created (Manual)",id:"321-ensure-that-a-minimal-audit-policy-is-created-manual",level:3},{value:"3.2.2 Ensure that the audit policy covers key security concerns (Manual)",id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual",level:3},{value:"4.1 Worker Node Configuration Files",id:"41-worker-node-configuration-files",level:2},{value:"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)",id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)",id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)",id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)",id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)",id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)",id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)",id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)",id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)",id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)",id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.2 Kubelet",id:"42-kubelet",level:2},{value:"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)",id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated",level:3},{value:"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)",id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual",level:3},{value:"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)",id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual",level:3},{value:"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)",id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated",level:3},{value:"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)",id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated",level:3},{value:"4.2.8 Ensure that the --hostname-override argument is not set (Manual)",id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual",level:3},{value:"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)",id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual",level:3},{value:"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)",id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual",level:3},{value:"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)",id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated",level:3},{value:"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)",id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual",level:3},{value:"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)",id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"5.1 RBAC and Service Accounts",id:"51-rbac-and-service-accounts",level:2},{value:"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)",id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual",level:3},{value:"5.1.2 Minimize access to secrets (Manual)",id:"512-minimize-access-to-secrets-manual",level:3},{value:"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)",id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual",level:3},{value:"5.1.4 Minimize access to create pods (Manual)",id:"514-minimize-access-to-create-pods-manual",level:3},{value:"5.1.5 Ensure that default service accounts are not actively used. (Manual)",id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual",level:3},{value:"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)",id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual",level:3},{value:"5.1.7 Avoid use of system:masters group (Manual)",id:"517-avoid-use-of-systemmasters-group-manual",level:3},{value:"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)",id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual",level:3},{value:"5.2 Pod Security Standards",id:"52-pod-security-standards",level:2},{value:"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)",id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual",level:3},{value:"5.2.2 Minimize the admission of privileged containers (Automated)",id:"522-minimize-the-admission-of-privileged-containers-automated",level:3},{value:"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)",id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated",level:3},{value:"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)",id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated",level:3},{value:"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)",id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated",level:3},{value:"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)",id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated",level:3},{value:"5.2.7 Minimize the admission of root containers (Automated)",id:"527-minimize-the-admission-of-root-containers-automated",level:3},{value:"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)",id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated",level:3},{value:"5.2.9 Minimize the admission of containers with added capabilities (Automated)",id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated",level:3},{value:"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)",id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual",level:3},{value:"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)",id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual",level:3},{value:"5.2.12 Minimize the admission of HostPath volumes (Manual)",id:"5212-minimize-the-admission-of-hostpath-volumes-manual",level:3},{value:"5.2.13 Minimize the admission of containers which use HostPorts (Manual)",id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual",level:3},{value:"5.3 Network Policies and CNI",id:"53-network-policies-and-cni",level:2},{value:"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)",id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual",level:3},{value:"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)",id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual",level:3},{value:"5.4 Secrets Management",id:"54-secrets-management",level:2},{value:"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)",id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual",level:3},{value:"5.4.2 Consider external secret storage (Manual)",id:"542-consider-external-secret-storage-manual",level:3},{value:"5.5 Extensible Admission Control",id:"55-extensible-admission-control",level:2},{value:"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)",id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual",level:3},{value:"5.7 General Policies",id:"57-general-policies",level:2},{value:"5.7.1 Create administrative boundaries between resources using namespaces (Manual)",id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual",level:3},{value:"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)",id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual",level:3},{value:"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)",id:"573-apply-securitycontext-to-your-pods-and-containers-manual",level:3},{value:"5.7.4 The default namespace should not be used (Manual)",id:"574-the-default-namespace-should-not-be-used-manual",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124"},"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"),(0,n.kt)("h4",{id:"overview"},"Overview"),(0,n.kt)("p",null,"This document is a companion to the ",(0,n.kt)("a",{parentName:"p",href:"/kr/security/hardening-guide"},"K3s security hardening guide"),". The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers."),(0,n.kt)("p",null,"This guide is specific to the ",(0,n.kt)("strong",{parentName:"p"},"v1.22"),", ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," and ",(0,n.kt)("strong",{parentName:"p"},"v1.24")," release line of K3s and the ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," release of the CIS Kubernetes Benchmark."),(0,n.kt)("p",null,"For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in ",(0,n.kt)("a",{parentName:"p",href:"https://www.cisecurity.org/benchmark/kubernetes/"},"Center for Internet Security (CIS)"),"."),(0,n.kt)("h4",{id:"testing-controls-methodology"},"Testing controls methodology"),(0,n.kt)("p",null,"Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide."),(0,n.kt)("p",null,"Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing."),(0,n.kt)("p",null,"These are the possible results for each control:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Pass")," - The K3s cluster under test passed the audit outlined in the benchmark."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Not Applicable")," - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Warn")," - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.")),(0,n.kt)("p",null,'This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the "audit" commands to fit your scenario.'),(0,n.kt)("blockquote",null,(0,n.kt)("p",{parentName:"blockquote"},"NOTE: Only ",(0,n.kt)("inlineCode",{parentName:"p"},"automated")," tests (previously called ",(0,n.kt)("inlineCode",{parentName:"p"},"scored"),") are covered in this guide.")),(0,n.kt)("h3",{id:"controls"},"Controls"),(0,n.kt)("hr",null),(0,n.kt)("h2",{id:"11-control-plane-node-configuration-files"},"1.1 Control Plane Node Configuration Files"),(0,n.kt)("h3",{id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the\ncontrol plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 <path/to/cni/files>"),(0,n.kt)("h3",{id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual"},"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root <path/to/cni/files>"),(0,n.kt)("h3",{id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated"},"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above). For example,\nchmod 700 /var/lib/etcd"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.1.11\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'700' is equal to '700'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"700\n")),(0,n.kt)("h3",{id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated"},"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above).\nFor example, chown etcd:etcd /var/lib/etcd"),(0,n.kt)("h3",{id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated"},"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("h3",{id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated"},"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/admin.conf"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated"},"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown -R root:root /etc/kubernetes/pki/"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root\n")),(0,n.kt)("h3",{id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 644 /etc/kubernetes/pki/*.crt"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt\n")),(0,n.kt)("h3",{id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual"},"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 600 /etc/kubernetes/pki/*.key"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key\n")),(0,n.kt)("h2",{id:"12-api-server"},"1.2 API Server"),(0,n.kt)("h3",{id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual"},"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--anonymous-auth=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'\n")),(0,n.kt)("h3",{id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated"},"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and configure alternate mechanisms for authentication. Then,\nedit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token-auth-file=<filename>")," parameter."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--token-auth-file' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated"},"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"DenyServiceExternalIPs"),"\nfrom enabled admission plugins."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated"},"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the --kubelet-https parameter."),(0,n.kt)("h3",{id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated"},"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the\napiserver and kubelets. Then, edit API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\nkubelet client certificate and key parameters as below.\n--kubelet-client-certificate=<path/to/client-certificate-file>\n--kubelet-client-key=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-client-certificate' is present AND '--kubelet-client-key' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated"},"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup the TLS connection between\nthe apiserver and kubelets. Then, edit the API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\n--kubelet-certificate-authority parameter to the path to the cert file for the certificate authority\n",(0,n.kt)("inlineCode",{parentName:"p"},"--kubelet-certificate-authority=<ca-string>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-certificate-authority' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow.\nOne such example could be as below.\n--authorization-mode=RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated"},"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes Node.\n--authorization-mode=Node,RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'Node'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated"},"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes RBAC,\nfor example ",(0,n.kt)("inlineCode",{parentName:"p"},"--authorization-mode=Node,RBAC"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'RBAC'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual"},"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set the desired limits in a configuration file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\nand set the below parameters.\n--enable-admission-plugins=...,EventRateLimit,...\n--admission-control-config-file=<path/to/configuration/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'EventRateLimit'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated"},"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --enable-admission-plugins parameter, or set it to a\nvalue that does not include AlwaysAdmit."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual"},"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nAlwaysPullImages.\n--enable-admission-plugins=...,AlwaysPullImages,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual"},"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nSecurityContextDeny, unless PodSecurityPolicy is already in place.\n--enable-admission-plugins=...,SecurityContextDeny,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated"},"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create ServiceAccount objects as per your environment.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and ensure that the --disable-admission-plugins parameter is set to a\nvalue that does not include ServiceAccount."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated"},"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --disable-admission-plugins parameter to\nensure it does not include NamespaceLifecycle."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated"},"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to a\nvalue that includes NodeRestriction.\n--enable-admission-plugins=...,NodeRestriction,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'NodeRestriction'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated"},"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --secure-port parameter or\nset it to a different (non-zero) desired port."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--secure-port' is greater than 0 OR '--secure-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.2.18 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated"},"1.2.19 Ensure that the --audit-log-path argument is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-path parameter to a suitable path and\nfile where you would like audit logs to be written, for example,\n--audit-log-path=/var/log/apiserver/audit.log"),(0,n.kt)("h3",{id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated"},"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxage parameter to 30\nor as an appropriate number of days, for example,\n--audit-log-maxage=30"),(0,n.kt)("h3",{id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated"},"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate\nvalue. For example,\n--audit-log-maxbackup=10"),(0,n.kt)("h3",{id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated"},"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB.\nFor example, to set it as 100 MB, --audit-log-maxsize=100"),(0,n.kt)("h3",{id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated"},"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--service-account-lookup=true\nAlternatively, you can delete the --service-account-lookup parameter from this file so\nthat the default takes effect."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-lookup' is not present OR '--service-account-lookup' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated"},"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --service-account-key-file parameter\nto the public key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-key-file=<filename>"),"."),(0,n.kt)("h3",{id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated"},"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate and key file parameters.\n--etcd-certfile=<path/to/client-certificate-file>\n--etcd-keyfile=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.2.29\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-certfile' is present AND '--etcd-keyfile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--etcd-certfile AND --etcd-keyfile\n")),(0,n.kt)("h3",{id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated"},"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the TLS certificate and private key file parameters.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the client certificate authority file.\n--client-ca-file=<path/to/client-ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated"},"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate authority file parameter.\n--etcd-cafile=<path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-cafile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual"},"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --encryption-provider-config parameter to the path of that file.\nFor example, --encryption-provider-config=</path/to/EncryptionConfig/File>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'\n")),(0,n.kt)("h3",{id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual"},"1.2.31 Ensure that encryption providers are appropriately configured (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nIn this file, choose aescbc, kms or secretbox as the encryption provider."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"grep aescbc /path/to/encryption-config.json\n")),(0,n.kt)("h3",{id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual"},"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\nTLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,\nTLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,\nTLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'\n")),(0,n.kt)("h2",{id:"13-controller-manager"},"1.3 Controller Manager"),(0,n.kt)("h3",{id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual"},"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold,\nfor example, --terminated-pod-gc-threshold=10"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'\n")),(0,n.kt)("h3",{id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.3.2 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated"},"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node to set the below parameter.\n--use-service-account-credentials=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--use-service-account-credentials' is not equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated"},"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --service-account-private-key-file parameter\nto the private key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-private-key-file=<filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated"},"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --root-ca-file parameter to the certificate bundle file`.\n--root-ca-file=<path/to/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--root-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated"},"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true.\n--feature-gates=RotateKubeletServerCertificate=true"),(0,n.kt)("h3",{id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is present OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h2",{id:"14-scheduler"},"1.4 Scheduler"),(0,n.kt)("h3",{id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.4.1 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h2",{id:"2-etcd-node-configuration"},"2 Etcd Node Configuration"),(0,n.kt)("h3",{id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated"},"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure TLS encryption.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml\non the master node and set the below parameters.\n--cert-file=</path/to/ca-file>\n--key-file=</path/to/key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file\n")),(0,n.kt)("h3",{id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated"},"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),'\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--client-cert-auth="true"'),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated"},"2.3 Ensure that the --auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --auto-tls parameter or set it to false.\n--auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.3\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory\n")),(0,n.kt)("h3",{id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated"},"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure peer TLS encryption as appropriate\nfor your etcd cluster.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameters.\n--peer-client-file=</path/to/peer-cert-file>\n--peer-key-file=</path/to/peer-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.4\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file\n")),(0,n.kt)("h3",{id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated"},"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--peer-client-cert-auth=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.5\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated"},"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --peer-auto-tls parameter or set it to false.\n--peer-auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.6\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false\n")),(0,n.kt)("h3",{id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual"},"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\n","[Manual test]","\nFollow the etcd documentation and create a dedicated certificate authority setup for the\netcd service.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameter.\n--trusted-ca-file=</path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.7\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'trusted-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file\n")),(0,n.kt)("h2",{id:"31-authentication-and-authorization"},"3.1 Authentication and Authorization"),(0,n.kt)("h3",{id:"311-client-certificate-authentication-should-not-be-used-for-users-manual"},"3.1.1 Client certificate authentication should not be used for users (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAlternative mechanisms provided by Kubernetes such as the use of OIDC should be\nimplemented in place of client certificates."),(0,n.kt)("h2",{id:"32-logging"},"3.2 Logging"),(0,n.kt)("h3",{id:"321-ensure-that-a-minimal-audit-policy-is-created-manual"},"3.2.1 Ensure that a minimal audit policy is created (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate an audit policy file for your cluster."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'\n")),(0,n.kt)("h3",{id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual"},"3.2.2 Ensure that the audit policy covers key security concerns (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the audit policy provided for the cluster and ensure that it covers\nat least the following areas,"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Access to Secrets managed by the cluster. Care should be taken to only\nlog Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in\norder to avoid risk of logging sensitive data."),(0,n.kt)("li",{parentName:"ul"},"Modification of Pod and Deployment objects."),(0,n.kt)("li",{parentName:"ul"},"Use of ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/exec"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/portforward"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/proxy")," and ",(0,n.kt)("inlineCode",{parentName:"li"},"services/proxy"),".\nFor most requests, minimally logging at the Metadata level is recommended\n(the most basic level of logging).")),(0,n.kt)("h2",{id:"41-worker-node-configuration-files"},"4.1 Worker Node Configuration Files"),(0,n.kt)("h3",{id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated"},"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual"},"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is equal to '644'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated"},"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the file permissions of the\n--client-ca-file: ",(0,n.kt)("inlineCode",{parentName:"p"},"chmod 644 <filename>")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 600\n")),(0,n.kt)("h3",{id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual"},"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the ownership of the --client-ca-file:\n",(0,n.kt)("inlineCode",{parentName:"p"},"chown root:root <filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated"},"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchmod 644 /var/lib/kubelet/config.yaml"),(0,n.kt)("h3",{id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated"},"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchown root:root /var/lib/kubelet/config.yaml"),(0,n.kt)("h2",{id:"42-kubelet"},"4.2 Kubelet"),(0,n.kt)("h3",{id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated"},"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication: anonymous: enabled")," to\n",(0,n.kt)("inlineCode",{parentName:"p"},"false"),".\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n",(0,n.kt)("inlineCode",{parentName:"p"},"--anonymous-auth=false"),"\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "anonymous-auth" | grep -v grep; else echo "--anonymous-auth=false"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--anonymous-auth' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authorization.mode")," to Webhook. If\nusing executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--authorization-mode=Webhook\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "authorization-mode" | grep -v grep; else echo "--authorization-mode=Webhook"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication.x509.clientCAFile")," to\nthe location of the client CA file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--client-ca-file=<path/to/client-ca-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "client-ca-file" | grep -v grep; else echo "--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual"},"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"readOnlyPort")," to 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--read-only-port=0\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--read-only-port' is equal to '0' OR '--read-only-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual"},"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"streamingConnectionIdleTimeout")," to a\nvalue other than 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--streaming-connection-idle-timeout=5m\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'\n")),(0,n.kt)("h3",{id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated"},"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"protectKernelDefaults")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--protect-kernel-defaults=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated"},"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"makeIPTablesUtilChains")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove the --make-iptables-util-chains argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual"},"4.2.8 Ensure that the --hostname-override argument is not set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and remove the --hostname-override argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual"},"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"eventRecordQPS")," to an appropriate level.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h3",{id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual"},"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsCertFile")," to the location\nof the certificate file to use to identify this Kubelet, and ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsPrivateKeyFile"),"\nto the location of the corresponding private key file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameters in KUBELET_CERTIFICATE_ARGS variable.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated"},"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to add the line ",(0,n.kt)("inlineCode",{parentName:"p"},"rotateCertificates")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true")," or\nremove it altogether to use the default value.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS\nvariable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual"},"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable.\n--feature-gates=RotateKubeletServerCertificate=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual"},"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"TLSCipherSuites")," to\nTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nor to a subset of these values.\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the --tls-cipher-suites parameter as follows, or to a subset of these values.\n--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h2",{id:"51-rbac-and-service-accounts"},"5.1 RBAC and Service Accounts"),(0,n.kt)("h3",{id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual"},"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIdentify all clusterrolebindings to the cluster-admin role. Check if they are used and\nif they need this role or if they could use a role with fewer privileges.\nWhere possible, first bind users to a lower privileged role and then remove the\nclusterrolebinding to the cluster-admin role :\nkubectl delete clusterrolebinding ","[name]"),(0,n.kt)("h3",{id:"512-minimize-access-to-secrets-manual"},"5.1.2 Minimize access to secrets (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove get, list and watch access to Secret objects in the cluster."),(0,n.kt)("h3",{id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual"},"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible replace any use of wildcards in clusterroles and roles with specific\nobjects or actions."),(0,n.kt)("h3",{id:"514-minimize-access-to-create-pods-manual"},"5.1.4 Minimize access to create pods (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove create access to pod objects in the cluster."),(0,n.kt)("h3",{id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual"},"5.1.5 Ensure that default service accounts are not actively used. (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate explicit service accounts wherever a Kubernetes workload requires specific access\nto the Kubernetes API server.\nModify the configuration of each default service account to include this value\nautomountServiceAccountToken: false"),(0,n.kt)("h3",{id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual"},"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nModify the definition of pods and service accounts which do not need to mount service\naccount tokens to disable it."),(0,n.kt)("h3",{id:"517-avoid-use-of-systemmasters-group-manual"},"5.1.7 Avoid use of system:masters group (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRemove the system:masters group from all users in the cluster."),(0,n.kt)("h3",{id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual"},"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove the impersonate, bind and escalate rights from subjects."),(0,n.kt)("h2",{id:"52-pod-security-standards"},"5.2 Pod Security Standards"),(0,n.kt)("h3",{id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual"},"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that either Pod Security Admission or an external policy control system is in place\nfor every namespace which contains user workloads."),(0,n.kt)("h3",{id:"522-minimize-the-admission-of-privileged-containers-automated"},"5.2.2 Minimize the admission of privileged containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of privileged containers."),(0,n.kt)("h3",{id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated"},"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPID")," containers."),(0,n.kt)("h3",{id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated"},"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostIPC")," containers."),(0,n.kt)("h3",{id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated"},"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostNetwork")," containers."),(0,n.kt)("h3",{id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated"},"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},".spec.allowPrivilegeEscalation")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"527-minimize-the-admission-of-root-containers-automated"},"5.2.7 Minimize the admission of root containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate a policy for each namespace in the cluster, ensuring that either ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAsNonRoot"),"\nor ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAs")," with the range of UIDs not including 0, is set."),(0,n.kt)("h3",{id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated"},"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with the ",(0,n.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capability."),(0,n.kt)("h3",{id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated"},"5.2.9 Minimize the admission of containers with added capabilities (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that ",(0,n.kt)("inlineCode",{parentName:"p"},"allowedCapabilities")," is not present in policies for the cluster unless\nit is set to an empty array."),(0,n.kt)("h3",{id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual"},"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the use of capabilities in applications running on your cluster. Where a namespace\ncontains applications which do not require any Linux capabilities to operate consider adding\na PSP which forbids the admission of containers which do not drop all capabilities."),(0,n.kt)("h3",{id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual"},"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers that have ",(0,n.kt)("inlineCode",{parentName:"p"},".securityContext.windowsOptions.hostProcess")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"5212-minimize-the-admission-of-hostpath-volumes-manual"},"5.2.12 Minimize the admission of HostPath volumes (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPath")," volumes."),(0,n.kt)("h3",{id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual"},"5.2.13 Minimize the admission of containers which use HostPorts (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers which use ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPort")," sections."),(0,n.kt)("h2",{id:"53-network-policies-and-cni"},"5.3 Network Policies and CNI"),(0,n.kt)("h3",{id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual"},"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf the CNI plugin in use does not support network policies, consideration should be given to\nmaking use of a different plugin, or finding an alternate mechanism for restricting traffic\nin the Kubernetes cluster."),(0,n.kt)("h3",{id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual"},"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create NetworkPolicy objects as you need them."),(0,n.kt)("h2",{id:"54-secrets-management"},"5.4 Secrets Management"),(0,n.kt)("h3",{id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual"},"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf possible, rewrite application code to read Secrets from mounted secret files, rather than\nfrom environment variables."),(0,n.kt)("h3",{id:"542-consider-external-secret-storage-manual"},"5.4.2 Consider external secret storage (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRefer to the Secrets management options offered by your cloud provider or a third-party\nsecrets management solution."),(0,n.kt)("h2",{id:"55-extensible-admission-control"},"5.5 Extensible Admission Control"),(0,n.kt)("h3",{id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual"},"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup image provenance."),(0,n.kt)("h2",{id:"57-general-policies"},"5.7 General Policies"),(0,n.kt)("h3",{id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual"},"5.7.1 Create administrative boundaries between resources using namespaces (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create namespaces for objects in your deployment as you need\nthem."),(0,n.kt)("h3",{id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual"},"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nUse ",(0,n.kt)("inlineCode",{parentName:"p"},"securityContext")," to enable the docker/default seccomp profile in your pod definitions.\nAn example is as below:\nsecurityContext:\nseccompProfile:\ntype: RuntimeDefault"),(0,n.kt)("h3",{id:"573-apply-securitycontext-to-your-pods-and-containers-manual"},"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and apply SecurityContexts to your Pods. For a\nsuggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker\nContainers."),(0,n.kt)("h3",{id:"574-the-default-namespace-should-not-be-used-manual"},"5.7.4 The default namespace should not be used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that namespaces are created to allow for appropriate segregation of Kubernetes\nresources and that all new resources are created in a specific namespace."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6263],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},1738:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const s={title:"CIS Self Assessment Guide",weight:90},i=void 0,l={unversionedId:"security/self-assessment",id:"security/self-assessment",title:"CIS Self Assessment Guide",description:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/self-assessment.md",sourceDirName:"security",slug:"/security/self-assessment",permalink:"/kr/security/self-assessment",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"CIS Self Assessment Guide",weight:90},sidebar:"mySidebar",previous:{title:"CIS Hardening Guide",permalink:"/kr/security/hardening-guide"}},o={},c=[{value:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)",id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)",id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)",id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)",id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)",id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)",id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)",id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)",id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual",level:3},{value:"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)",id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated",level:3},{value:"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)",id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated",level:3},{value:"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)",id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated",level:3},{value:"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)",id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)",id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)",id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)",id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)",id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)",id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)",id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)",id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual",level:3},{value:"1.2 API Server",id:"12-api-server",level:2},{value:"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)",id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual",level:3},{value:"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)",id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated",level:3},{value:"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)",id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated",level:3},{value:"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)",id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated",level:3},{value:"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)",id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)",id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)",id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated",level:3},{value:"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)",id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated",level:3},{value:"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)",id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual",level:3},{value:"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)",id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated",level:3},{value:"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)",id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual",level:3},{value:"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)",id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual",level:3},{value:"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)",id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated",level:3},{value:"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)",id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated",level:3},{value:"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)",id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated",level:3},{value:"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)",id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated",level:3},{value:"1.2.18 Ensure that the --profiling argument is set to false (Automated)",id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.2.19 Ensure that the --audit-log-path argument is set (Automated)",id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated",level:3},{value:"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)",id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated",level:3},{value:"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)",id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated",level:3},{value:"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)",id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated",level:3},{value:"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)",id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated",level:3},{value:"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)",id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)",id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)",id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)",id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)",id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual",level:3},{value:"1.2.31 Ensure that encryption providers are appropriately configured (Manual)",id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual",level:3},{value:"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)",id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"1.3 Controller Manager",id:"13-controller-manager",level:2},{value:"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)",id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual",level:3},{value:"1.3.2 Ensure that the --profiling argument is set to false (Automated)",id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)",id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated",level:3},{value:"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)",id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)",id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)",id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated",level:3},{value:"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"1.4 Scheduler",id:"14-scheduler",level:2},{value:"1.4.1 Ensure that the --profiling argument is set to false (Automated)",id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"2 Etcd Node Configuration",id:"2-etcd-node-configuration",level:2},{value:"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)",id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)",id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.3 Ensure that the --auto-tls argument is not set to true (Automated)",id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)",id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)",id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)",id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)",id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual",level:3},{value:"3.1 Authentication and Authorization",id:"31-authentication-and-authorization",level:2},{value:"3.1.1 Client certificate authentication should not be used for users (Manual)",id:"311-client-certificate-authentication-should-not-be-used-for-users-manual",level:3},{value:"3.2 Logging",id:"32-logging",level:2},{value:"3.2.1 Ensure that a minimal audit policy is created (Manual)",id:"321-ensure-that-a-minimal-audit-policy-is-created-manual",level:3},{value:"3.2.2 Ensure that the audit policy covers key security concerns (Manual)",id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual",level:3},{value:"4.1 Worker Node Configuration Files",id:"41-worker-node-configuration-files",level:2},{value:"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)",id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)",id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)",id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)",id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)",id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)",id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)",id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)",id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)",id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)",id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.2 Kubelet",id:"42-kubelet",level:2},{value:"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)",id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated",level:3},{value:"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)",id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual",level:3},{value:"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)",id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual",level:3},{value:"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)",id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated",level:3},{value:"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)",id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated",level:3},{value:"4.2.8 Ensure that the --hostname-override argument is not set (Manual)",id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual",level:3},{value:"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)",id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual",level:3},{value:"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)",id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual",level:3},{value:"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)",id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated",level:3},{value:"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)",id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual",level:3},{value:"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)",id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"5.1 RBAC and Service Accounts",id:"51-rbac-and-service-accounts",level:2},{value:"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)",id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual",level:3},{value:"5.1.2 Minimize access to secrets (Manual)",id:"512-minimize-access-to-secrets-manual",level:3},{value:"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)",id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual",level:3},{value:"5.1.4 Minimize access to create pods (Manual)",id:"514-minimize-access-to-create-pods-manual",level:3},{value:"5.1.5 Ensure that default service accounts are not actively used. (Manual)",id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual",level:3},{value:"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)",id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual",level:3},{value:"5.1.7 Avoid use of system:masters group (Manual)",id:"517-avoid-use-of-systemmasters-group-manual",level:3},{value:"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)",id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual",level:3},{value:"5.2 Pod Security Standards",id:"52-pod-security-standards",level:2},{value:"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)",id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual",level:3},{value:"5.2.2 Minimize the admission of privileged containers (Automated)",id:"522-minimize-the-admission-of-privileged-containers-automated",level:3},{value:"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)",id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated",level:3},{value:"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)",id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated",level:3},{value:"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)",id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated",level:3},{value:"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)",id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated",level:3},{value:"5.2.7 Minimize the admission of root containers (Automated)",id:"527-minimize-the-admission-of-root-containers-automated",level:3},{value:"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)",id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated",level:3},{value:"5.2.9 Minimize the admission of containers with added capabilities (Automated)",id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated",level:3},{value:"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)",id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual",level:3},{value:"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)",id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual",level:3},{value:"5.2.12 Minimize the admission of HostPath volumes (Manual)",id:"5212-minimize-the-admission-of-hostpath-volumes-manual",level:3},{value:"5.2.13 Minimize the admission of containers which use HostPorts (Manual)",id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual",level:3},{value:"5.3 Network Policies and CNI",id:"53-network-policies-and-cni",level:2},{value:"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)",id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual",level:3},{value:"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)",id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual",level:3},{value:"5.4 Secrets Management",id:"54-secrets-management",level:2},{value:"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)",id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual",level:3},{value:"5.4.2 Consider external secret storage (Manual)",id:"542-consider-external-secret-storage-manual",level:3},{value:"5.5 Extensible Admission Control",id:"55-extensible-admission-control",level:2},{value:"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)",id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual",level:3},{value:"5.7 General Policies",id:"57-general-policies",level:2},{value:"5.7.1 Create administrative boundaries between resources using namespaces (Manual)",id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual",level:3},{value:"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)",id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual",level:3},{value:"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)",id:"573-apply-securitycontext-to-your-pods-and-containers-manual",level:3},{value:"5.7.4 The default namespace should not be used (Manual)",id:"574-the-default-namespace-should-not-be-used-manual",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124"},"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"),(0,n.kt)("h4",{id:"overview"},"Overview"),(0,n.kt)("p",null,"This document is a companion to the ",(0,n.kt)("a",{parentName:"p",href:"/kr/security/hardening-guide"},"K3s security hardening guide"),". The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers."),(0,n.kt)("p",null,"This guide is specific to the ",(0,n.kt)("strong",{parentName:"p"},"v1.22"),", ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," and ",(0,n.kt)("strong",{parentName:"p"},"v1.24")," release line of K3s and the ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," release of the CIS Kubernetes Benchmark."),(0,n.kt)("p",null,"For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in ",(0,n.kt)("a",{parentName:"p",href:"https://www.cisecurity.org/benchmark/kubernetes/"},"Center for Internet Security (CIS)"),"."),(0,n.kt)("h4",{id:"testing-controls-methodology"},"Testing controls methodology"),(0,n.kt)("p",null,"Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide."),(0,n.kt)("p",null,"Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing."),(0,n.kt)("p",null,"These are the possible results for each control:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Pass")," - The K3s cluster under test passed the audit outlined in the benchmark."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Not Applicable")," - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Warn")," - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.")),(0,n.kt)("p",null,'This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the "audit" commands to fit your scenario.'),(0,n.kt)("blockquote",null,(0,n.kt)("p",{parentName:"blockquote"},"NOTE: Only ",(0,n.kt)("inlineCode",{parentName:"p"},"automated")," tests (previously called ",(0,n.kt)("inlineCode",{parentName:"p"},"scored"),") are covered in this guide.")),(0,n.kt)("h3",{id:"controls"},"Controls"),(0,n.kt)("hr",null),(0,n.kt)("h2",{id:"11-control-plane-node-configuration-files"},"1.1 Control Plane Node Configuration Files"),(0,n.kt)("h3",{id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the\ncontrol plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 <path/to/cni/files>"),(0,n.kt)("h3",{id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual"},"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root <path/to/cni/files>"),(0,n.kt)("h3",{id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated"},"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above). For example,\nchmod 700 /var/lib/etcd"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.1.11\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'700' is equal to '700'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"700\n")),(0,n.kt)("h3",{id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated"},"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above).\nFor example, chown etcd:etcd /var/lib/etcd"),(0,n.kt)("h3",{id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated"},"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("h3",{id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated"},"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/admin.conf"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated"},"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown -R root:root /etc/kubernetes/pki/"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root\n")),(0,n.kt)("h3",{id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 644 /etc/kubernetes/pki/*.crt"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt\n")),(0,n.kt)("h3",{id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual"},"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 600 /etc/kubernetes/pki/*.key"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key\n")),(0,n.kt)("h2",{id:"12-api-server"},"1.2 API Server"),(0,n.kt)("h3",{id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual"},"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--anonymous-auth=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'\n")),(0,n.kt)("h3",{id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated"},"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and configure alternate mechanisms for authentication. Then,\nedit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token-auth-file=<filename>")," parameter."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--token-auth-file' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated"},"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"DenyServiceExternalIPs"),"\nfrom enabled admission plugins."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated"},"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the --kubelet-https parameter."),(0,n.kt)("h3",{id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated"},"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the\napiserver and kubelets. Then, edit API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\nkubelet client certificate and key parameters as below.\n--kubelet-client-certificate=<path/to/client-certificate-file>\n--kubelet-client-key=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-client-certificate' is present AND '--kubelet-client-key' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated"},"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup the TLS connection between\nthe apiserver and kubelets. Then, edit the API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\n--kubelet-certificate-authority parameter to the path to the cert file for the certificate authority\n",(0,n.kt)("inlineCode",{parentName:"p"},"--kubelet-certificate-authority=<ca-string>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-certificate-authority' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow.\nOne such example could be as below.\n--authorization-mode=RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated"},"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes Node.\n--authorization-mode=Node,RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'Node'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated"},"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes RBAC,\nfor example ",(0,n.kt)("inlineCode",{parentName:"p"},"--authorization-mode=Node,RBAC"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'RBAC'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual"},"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set the desired limits in a configuration file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\nand set the below parameters.\n--enable-admission-plugins=...,EventRateLimit,...\n--admission-control-config-file=<path/to/configuration/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'EventRateLimit'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated"},"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --enable-admission-plugins parameter, or set it to a\nvalue that does not include AlwaysAdmit."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual"},"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nAlwaysPullImages.\n--enable-admission-plugins=...,AlwaysPullImages,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual"},"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nSecurityContextDeny, unless PodSecurityPolicy is already in place.\n--enable-admission-plugins=...,SecurityContextDeny,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated"},"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create ServiceAccount objects as per your environment.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and ensure that the --disable-admission-plugins parameter is set to a\nvalue that does not include ServiceAccount."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated"},"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --disable-admission-plugins parameter to\nensure it does not include NamespaceLifecycle."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated"},"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to a\nvalue that includes NodeRestriction.\n--enable-admission-plugins=...,NodeRestriction,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'NodeRestriction'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated"},"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --secure-port parameter or\nset it to a different (non-zero) desired port."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--secure-port' is greater than 0 OR '--secure-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.2.18 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated"},"1.2.19 Ensure that the --audit-log-path argument is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-path parameter to a suitable path and\nfile where you would like audit logs to be written, for example,\n--audit-log-path=/var/log/apiserver/audit.log"),(0,n.kt)("h3",{id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated"},"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxage parameter to 30\nor as an appropriate number of days, for example,\n--audit-log-maxage=30"),(0,n.kt)("h3",{id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated"},"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate\nvalue. For example,\n--audit-log-maxbackup=10"),(0,n.kt)("h3",{id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated"},"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB.\nFor example, to set it as 100 MB, --audit-log-maxsize=100"),(0,n.kt)("h3",{id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated"},"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--service-account-lookup=true\nAlternatively, you can delete the --service-account-lookup parameter from this file so\nthat the default takes effect."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-lookup' is not present OR '--service-account-lookup' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated"},"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --service-account-key-file parameter\nto the public key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-key-file=<filename>"),"."),(0,n.kt)("h3",{id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated"},"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate and key file parameters.\n--etcd-certfile=<path/to/client-certificate-file>\n--etcd-keyfile=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.2.29\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-certfile' is present AND '--etcd-keyfile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--etcd-certfile AND --etcd-keyfile\n")),(0,n.kt)("h3",{id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated"},"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the TLS certificate and private key file parameters.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the client certificate authority file.\n--client-ca-file=<path/to/client-ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated"},"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate authority file parameter.\n--etcd-cafile=<path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-cafile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual"},"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --encryption-provider-config parameter to the path of that file.\nFor example, --encryption-provider-config=</path/to/EncryptionConfig/File>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'\n")),(0,n.kt)("h3",{id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual"},"1.2.31 Ensure that encryption providers are appropriately configured (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nIn this file, choose aescbc, kms or secretbox as the encryption provider."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"grep aescbc /path/to/encryption-config.json\n")),(0,n.kt)("h3",{id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual"},"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\nTLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,\nTLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,\nTLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'\n")),(0,n.kt)("h2",{id:"13-controller-manager"},"1.3 Controller Manager"),(0,n.kt)("h3",{id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual"},"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold,\nfor example, --terminated-pod-gc-threshold=10"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'\n")),(0,n.kt)("h3",{id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.3.2 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated"},"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node to set the below parameter.\n--use-service-account-credentials=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--use-service-account-credentials' is not equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated"},"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --service-account-private-key-file parameter\nto the private key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-private-key-file=<filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated"},"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --root-ca-file parameter to the certificate bundle file`.\n--root-ca-file=<path/to/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--root-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated"},"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true.\n--feature-gates=RotateKubeletServerCertificate=true"),(0,n.kt)("h3",{id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is present OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h2",{id:"14-scheduler"},"1.4 Scheduler"),(0,n.kt)("h3",{id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.4.1 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h2",{id:"2-etcd-node-configuration"},"2 Etcd Node Configuration"),(0,n.kt)("h3",{id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated"},"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure TLS encryption.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml\non the master node and set the below parameters.\n--cert-file=</path/to/ca-file>\n--key-file=</path/to/key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file\n")),(0,n.kt)("h3",{id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated"},"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),'\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--client-cert-auth="true"'),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated"},"2.3 Ensure that the --auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --auto-tls parameter or set it to false.\n--auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.3\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory\n")),(0,n.kt)("h3",{id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated"},"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure peer TLS encryption as appropriate\nfor your etcd cluster.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameters.\n--peer-client-file=</path/to/peer-cert-file>\n--peer-key-file=</path/to/peer-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.4\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file\n")),(0,n.kt)("h3",{id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated"},"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--peer-client-cert-auth=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.5\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated"},"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --peer-auto-tls parameter or set it to false.\n--peer-auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.6\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false\n")),(0,n.kt)("h3",{id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual"},"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\n","[Manual test]","\nFollow the etcd documentation and create a dedicated certificate authority setup for the\netcd service.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameter.\n--trusted-ca-file=</path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.7\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'trusted-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file\n")),(0,n.kt)("h2",{id:"31-authentication-and-authorization"},"3.1 Authentication and Authorization"),(0,n.kt)("h3",{id:"311-client-certificate-authentication-should-not-be-used-for-users-manual"},"3.1.1 Client certificate authentication should not be used for users (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAlternative mechanisms provided by Kubernetes such as the use of OIDC should be\nimplemented in place of client certificates."),(0,n.kt)("h2",{id:"32-logging"},"3.2 Logging"),(0,n.kt)("h3",{id:"321-ensure-that-a-minimal-audit-policy-is-created-manual"},"3.2.1 Ensure that a minimal audit policy is created (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate an audit policy file for your cluster."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'\n")),(0,n.kt)("h3",{id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual"},"3.2.2 Ensure that the audit policy covers key security concerns (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the audit policy provided for the cluster and ensure that it covers\nat least the following areas,"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Access to Secrets managed by the cluster. Care should be taken to only\nlog Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in\norder to avoid risk of logging sensitive data."),(0,n.kt)("li",{parentName:"ul"},"Modification of Pod and Deployment objects."),(0,n.kt)("li",{parentName:"ul"},"Use of ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/exec"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/portforward"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/proxy")," and ",(0,n.kt)("inlineCode",{parentName:"li"},"services/proxy"),".\nFor most requests, minimally logging at the Metadata level is recommended\n(the most basic level of logging).")),(0,n.kt)("h2",{id:"41-worker-node-configuration-files"},"4.1 Worker Node Configuration Files"),(0,n.kt)("h3",{id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated"},"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual"},"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is equal to '644'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated"},"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the file permissions of the\n--client-ca-file: ",(0,n.kt)("inlineCode",{parentName:"p"},"chmod 644 <filename>")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 600\n")),(0,n.kt)("h3",{id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual"},"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the ownership of the --client-ca-file:\n",(0,n.kt)("inlineCode",{parentName:"p"},"chown root:root <filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated"},"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchmod 644 /var/lib/kubelet/config.yaml"),(0,n.kt)("h3",{id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated"},"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchown root:root /var/lib/kubelet/config.yaml"),(0,n.kt)("h2",{id:"42-kubelet"},"4.2 Kubelet"),(0,n.kt)("h3",{id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated"},"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication: anonymous: enabled")," to\n",(0,n.kt)("inlineCode",{parentName:"p"},"false"),".\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n",(0,n.kt)("inlineCode",{parentName:"p"},"--anonymous-auth=false"),"\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "anonymous-auth" | grep -v grep; else echo "--anonymous-auth=false"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--anonymous-auth' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authorization.mode")," to Webhook. If\nusing executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--authorization-mode=Webhook\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "authorization-mode" | grep -v grep; else echo "--authorization-mode=Webhook"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication.x509.clientCAFile")," to\nthe location of the client CA file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--client-ca-file=<path/to/client-ca-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "client-ca-file" | grep -v grep; else echo "--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual"},"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"readOnlyPort")," to 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--read-only-port=0\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--read-only-port' is equal to '0' OR '--read-only-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual"},"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"streamingConnectionIdleTimeout")," to a\nvalue other than 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--streaming-connection-idle-timeout=5m\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'\n")),(0,n.kt)("h3",{id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated"},"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"protectKernelDefaults")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--protect-kernel-defaults=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated"},"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"makeIPTablesUtilChains")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove the --make-iptables-util-chains argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual"},"4.2.8 Ensure that the --hostname-override argument is not set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and remove the --hostname-override argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual"},"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"eventRecordQPS")," to an appropriate level.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h3",{id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual"},"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsCertFile")," to the location\nof the certificate file to use to identify this Kubelet, and ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsPrivateKeyFile"),"\nto the location of the corresponding private key file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameters in KUBELET_CERTIFICATE_ARGS variable.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated"},"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to add the line ",(0,n.kt)("inlineCode",{parentName:"p"},"rotateCertificates")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true")," or\nremove it altogether to use the default value.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS\nvariable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual"},"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable.\n--feature-gates=RotateKubeletServerCertificate=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual"},"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"TLSCipherSuites")," to\nTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nor to a subset of these values.\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the --tls-cipher-suites parameter as follows, or to a subset of these values.\n--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h2",{id:"51-rbac-and-service-accounts"},"5.1 RBAC and Service Accounts"),(0,n.kt)("h3",{id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual"},"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIdentify all clusterrolebindings to the cluster-admin role. Check if they are used and\nif they need this role or if they could use a role with fewer privileges.\nWhere possible, first bind users to a lower privileged role and then remove the\nclusterrolebinding to the cluster-admin role :\nkubectl delete clusterrolebinding ","[name]"),(0,n.kt)("h3",{id:"512-minimize-access-to-secrets-manual"},"5.1.2 Minimize access to secrets (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove get, list and watch access to Secret objects in the cluster."),(0,n.kt)("h3",{id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual"},"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible replace any use of wildcards in clusterroles and roles with specific\nobjects or actions."),(0,n.kt)("h3",{id:"514-minimize-access-to-create-pods-manual"},"5.1.4 Minimize access to create pods (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove create access to pod objects in the cluster."),(0,n.kt)("h3",{id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual"},"5.1.5 Ensure that default service accounts are not actively used. (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate explicit service accounts wherever a Kubernetes workload requires specific access\nto the Kubernetes API server.\nModify the configuration of each default service account to include this value\nautomountServiceAccountToken: false"),(0,n.kt)("h3",{id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual"},"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nModify the definition of pods and service accounts which do not need to mount service\naccount tokens to disable it."),(0,n.kt)("h3",{id:"517-avoid-use-of-systemmasters-group-manual"},"5.1.7 Avoid use of system:masters group (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRemove the system:masters group from all users in the cluster."),(0,n.kt)("h3",{id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual"},"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove the impersonate, bind and escalate rights from subjects."),(0,n.kt)("h2",{id:"52-pod-security-standards"},"5.2 Pod Security Standards"),(0,n.kt)("h3",{id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual"},"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that either Pod Security Admission or an external policy control system is in place\nfor every namespace which contains user workloads."),(0,n.kt)("h3",{id:"522-minimize-the-admission-of-privileged-containers-automated"},"5.2.2 Minimize the admission of privileged containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of privileged containers."),(0,n.kt)("h3",{id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated"},"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPID")," containers."),(0,n.kt)("h3",{id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated"},"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostIPC")," containers."),(0,n.kt)("h3",{id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated"},"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostNetwork")," containers."),(0,n.kt)("h3",{id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated"},"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},".spec.allowPrivilegeEscalation")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"527-minimize-the-admission-of-root-containers-automated"},"5.2.7 Minimize the admission of root containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate a policy for each namespace in the cluster, ensuring that either ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAsNonRoot"),"\nor ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAs")," with the range of UIDs not including 0, is set."),(0,n.kt)("h3",{id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated"},"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with the ",(0,n.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capability."),(0,n.kt)("h3",{id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated"},"5.2.9 Minimize the admission of containers with added capabilities (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that ",(0,n.kt)("inlineCode",{parentName:"p"},"allowedCapabilities")," is not present in policies for the cluster unless\nit is set to an empty array."),(0,n.kt)("h3",{id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual"},"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the use of capabilities in applications running on your cluster. Where a namespace\ncontains applications which do not require any Linux capabilities to operate consider adding\na PSP which forbids the admission of containers which do not drop all capabilities."),(0,n.kt)("h3",{id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual"},"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers that have ",(0,n.kt)("inlineCode",{parentName:"p"},".securityContext.windowsOptions.hostProcess")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"5212-minimize-the-admission-of-hostpath-volumes-manual"},"5.2.12 Minimize the admission of HostPath volumes (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPath")," volumes."),(0,n.kt)("h3",{id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual"},"5.2.13 Minimize the admission of containers which use HostPorts (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers which use ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPort")," sections."),(0,n.kt)("h2",{id:"53-network-policies-and-cni"},"5.3 Network Policies and CNI"),(0,n.kt)("h3",{id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual"},"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf the CNI plugin in use does not support network policies, consideration should be given to\nmaking use of a different plugin, or finding an alternate mechanism for restricting traffic\nin the Kubernetes cluster."),(0,n.kt)("h3",{id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual"},"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create NetworkPolicy objects as you need them."),(0,n.kt)("h2",{id:"54-secrets-management"},"5.4 Secrets Management"),(0,n.kt)("h3",{id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual"},"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf possible, rewrite application code to read Secrets from mounted secret files, rather than\nfrom environment variables."),(0,n.kt)("h3",{id:"542-consider-external-secret-storage-manual"},"5.4.2 Consider external secret storage (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRefer to the Secrets management options offered by your cloud provider or a third-party\nsecrets management solution."),(0,n.kt)("h2",{id:"55-extensible-admission-control"},"5.5 Extensible Admission Control"),(0,n.kt)("h3",{id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual"},"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup image provenance."),(0,n.kt)("h2",{id:"57-general-policies"},"5.7 General Policies"),(0,n.kt)("h3",{id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual"},"5.7.1 Create administrative boundaries between resources using namespaces (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create namespaces for objects in your deployment as you need\nthem."),(0,n.kt)("h3",{id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual"},"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nUse ",(0,n.kt)("inlineCode",{parentName:"p"},"securityContext")," to enable the docker/default seccomp profile in your pod definitions.\nAn example is as below:\nsecurityContext:\nseccompProfile:\ntype: RuntimeDefault"),(0,n.kt)("h3",{id:"573-apply-securitycontext-to-your-pods-and-containers-manual"},"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and apply SecurityContexts to your Pods. For a\nsuggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker\nContainers."),(0,n.kt)("h3",{id:"574-the-default-namespace-should-not-be-used-manual"},"5.7.4 The default namespace should not be used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that namespaces are created to allow for appropriate segregation of Kubernetes\nresources and that all new resources are created in a specific namespace."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/b87d0734.6924b504.js b/kr/assets/js/b87d0734.d3f5fb44.js
similarity index 99%
rename from kr/assets/js/b87d0734.6924b504.js
rename to kr/assets/js/b87d0734.d3f5fb44.js
index 1194bb444..2b393a2a3 100644
--- a/kr/assets/js/b87d0734.6924b504.js
+++ b/kr/assets/js/b87d0734.d3f5fb44.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[660],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),u=d(n),c=r,k=u["".concat(s,".").concat(c)]||u[c]||m[c]||l;return n?a.createElement(k,i(i({ref:t},p),{},{components:n})):a.createElement(k,i({ref:t},p))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=u;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},4249:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"Environment Variables",weight:3},i=void 0,o={unversionedId:"reference/env-variables",id:"reference/env-variables",title:"Environment Variables",description:"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/env-variables.md",sourceDirName:"reference",slug:"/reference/env-variables",permalink:"/kr/reference/env-variables",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Environment Variables",weight:3},sidebar:"mySidebar",previous:{title:"\ub808\ud37c\ub7f0\uc2a4",permalink:"/kr/reference/"},next:{title:"Resource Profiling",permalink:"/kr/reference/resource-profiling"}},s={},d=[],p={toc:d};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"As mentioned in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,r.kt)("p",null,"The simplest form of this command is as follows:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"When using this method to install K3s, the following environment variables can be used to configure the installation:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not download K3s hash or binary.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYMLINK")),(0,r.kt)("td",{parentName:"tr",align:null},"By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to 'skip' will not create symlinks and 'force' will overwrite.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_ENABLE")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not enable or start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_START")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_VERSION")),(0,r.kt)("td",{parentName:"tr",align:null},"Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install K3s binary, links, and uninstall script to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/usr/local/bin")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR_READ_ONLY")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not write files to ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR"),", forces setting ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYSTEMD_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install systemd service and environment files to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/systemd/system")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_EXEC")),(0,r.kt)("td",{parentName:"tr",align:null},"Command with flags to use for launching K3s in the service. If the command is not specified, and the ",(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' is set, it will default to "agent." If ',(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' not set, it will default to "server." For help, refer to ',(0,r.kt)("a",{parentName:"td",href:"/kr/installation/configuration#configuration-with-install-script"},"this example."))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"Name of systemd service to create, will default to 'k3s' if running k3s as a server and 'k3s-agent' if running k3s as an agent. If specified the name will be prefixed with 'k3s-'.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_TYPE")),(0,r.kt)("td",{parentName:"tr",align:null},"Type of systemd service to create, will default from the K3s exec command if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SELINUX_WARN")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will continue if k3s-selinux policy is not found.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_SELINUX_RPM")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will skip automatic installation of the k3s RPM.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Channel URL for fetching K3s download URL. Defaults to ",(0,r.kt)("a",{parentName:"td",href:"https://update.k3s.io/v1-release/channels"},"https://update.k3s.io/v1-release/channels"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL")),(0,r.kt)("td",{parentName:"tr",align:null},'Channel to use for fetching K3s download URL. Defaults to "stable". Options include: ',(0,r.kt)("inlineCode",{parentName:"td"},"stable"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"latest"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"testing"),".")))),(0,r.kt)("p",null,"This example shows where to place aforementioned environment variables as options (after the pipe):"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"Environment variables which begin with ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," will be preserved for the systemd and openrc services to use."),(0,r.kt)("p",null,"Setting ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL"),' without explicitly setting an exec command will default the command to "agent".'),(0,r.kt)("p",null,"When running the agent, ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," must also be set."))}m.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[660],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),u=d(n),c=r,k=u["".concat(s,".").concat(c)]||u[c]||m[c]||l;return n?a.createElement(k,i(i({ref:t},p),{},{components:n})):a.createElement(k,i({ref:t},p))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=u;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},4249:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"Environment Variables",weight:3},i=void 0,o={unversionedId:"reference/env-variables",id:"reference/env-variables",title:"Environment Variables",description:"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/env-variables.md",sourceDirName:"reference",slug:"/reference/env-variables",permalink:"/kr/reference/env-variables",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Environment Variables",weight:3},sidebar:"mySidebar",previous:{title:"\ub808\ud37c\ub7f0\uc2a4",permalink:"/kr/reference/"},next:{title:"Resource Profiling",permalink:"/kr/reference/resource-profiling"}},s={},d=[],p={toc:d};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"As mentioned in the ",(0,r.kt)("a",{parentName:"p",href:"/kr/quick-start/"},"Quick-Start Guide"),", you can use the installation script available at ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," to install K3s as a service on systemd and openrc based systems."),(0,r.kt)("p",null,"The simplest form of this command is as follows:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"When using this method to install K3s, the following environment variables can be used to configure the installation:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not download K3s hash or binary.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYMLINK")),(0,r.kt)("td",{parentName:"tr",align:null},"By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to 'skip' will not create symlinks and 'force' will overwrite.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_ENABLE")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not enable or start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_START")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not start K3s service.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_VERSION")),(0,r.kt)("td",{parentName:"tr",align:null},"Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install K3s binary, links, and uninstall script to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/usr/local/bin")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR_READ_ONLY")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will not write files to ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR"),", forces setting ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYSTEMD_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"Directory to install systemd service and environment files to, or use ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/systemd/system")," as the default.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_EXEC")),(0,r.kt)("td",{parentName:"tr",align:null},"Command with flags to use for launching K3s in the service. If the command is not specified, and the ",(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' is set, it will default to "agent." If ',(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),' not set, it will default to "server." For help, refer to ',(0,r.kt)("a",{parentName:"td",href:"/kr/installation/configuration#configuration-with-install-script"},"this example."))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"Name of systemd service to create, will default to 'k3s' if running k3s as a server and 'k3s-agent' if running k3s as an agent. If specified the name will be prefixed with 'k3s-'.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_TYPE")),(0,r.kt)("td",{parentName:"tr",align:null},"Type of systemd service to create, will default from the K3s exec command if not specified.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SELINUX_WARN")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will continue if k3s-selinux policy is not found.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_SELINUX_RPM")),(0,r.kt)("td",{parentName:"tr",align:null},"If set to true will skip automatic installation of the k3s RPM.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"Channel URL for fetching K3s download URL. Defaults to ",(0,r.kt)("a",{parentName:"td",href:"https://update.k3s.io/v1-release/channels"},"https://update.k3s.io/v1-release/channels"),".")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL")),(0,r.kt)("td",{parentName:"tr",align:null},'Channel to use for fetching K3s download URL. Defaults to "stable". Options include: ',(0,r.kt)("inlineCode",{parentName:"td"},"stable"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"latest"),", ",(0,r.kt)("inlineCode",{parentName:"td"},"testing"),".")))),(0,r.kt)("p",null,"This example shows where to place aforementioned environment variables as options (after the pipe):"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"Environment variables which begin with ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," will be preserved for the systemd and openrc services to use."),(0,r.kt)("p",null,"Setting ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL"),' without explicitly setting an exec command will default the command to "agent".'),(0,r.kt)("p",null,"When running the agent, ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," must also be set."))}m.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/b97d3598.8a51ba82.js b/kr/assets/js/b97d3598.867e338e.js
similarity index 99%
rename from kr/assets/js/b97d3598.8a51ba82.js
rename to kr/assets/js/b97d3598.867e338e.js
index f214f43a4..9e4906e37 100644
--- a/kr/assets/js/b97d3598.8a51ba82.js
+++ b/kr/assets/js/b97d3598.867e338e.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7563],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>c});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),d=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(n),c=a,k=m["".concat(s,".").concat(c)]||m[c]||u[c]||l;return n?r.createElement(k,i(i({ref:t},p),{},{components:n})):r.createElement(k,i({ref:t},p))}));function c(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2238:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const l={title:"Requirements",weight:1},i=void 0,o={unversionedId:"installation/requirements",id:"installation/requirements",title:"Requirements",description:"K3s is very lightweight, but has some minimum requirements as outlined below.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/requirements.md",sourceDirName:"installation",slug:"/installation/requirements",permalink:"/kr/installation/requirements",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Requirements",weight:1},sidebar:"mySidebar",previous:{title:"\uc124\uce58",permalink:"/kr/installation/"},next:{title:"Configuration Options",permalink:"/kr/installation/configuration"}},s={},d=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Architecture",id:"architecture",level:2},{value:"Operating Systems",id:"operating-systems",level:2},{value:"Hardware",id:"hardware",level:2},{value:"Disks",id:"disks",level:4},{value:"Networking",id:"networking",level:2},{value:"Inbound Rules for K3s Server Nodes",id:"inbound-rules-for-k3s-server-nodes",level:3},{value:"Large Clusters",id:"large-clusters",level:2},{value:"CPU and Memory",id:"cpu-and-memory",level:3},{value:"Disks",id:"disks-1",level:3},{value:"Network",id:"network",level:3},{value:"Database",id:"database",level:3}],p={toc:d};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s is very lightweight, but has some minimum requirements as outlined below."),(0,a.kt)("p",null,"Whether you're configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself."),(0,a.kt)("h2",{id:"prerequisites"},"Prerequisites"),(0,a.kt)("p",null,"Two nodes cannot have the same hostname."),(0,a.kt)("p",null,"If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," option to append a random suffix for each node, or devise a unique name to pass with ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-name")," or ",(0,a.kt)("inlineCode",{parentName:"p"},"$K3S_NODE_NAME")," for each node you add to the cluster."),(0,a.kt)("h2",{id:"architecture"},"Architecture"),(0,a.kt)("p",null,"K3s is available for the following architectures:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"x86_64"),(0,a.kt)("li",{parentName:"ul"},"armhf"),(0,a.kt)("li",{parentName:"ul"},"arm64/aarch64"),(0,a.kt)("li",{parentName:"ul"},"s390x")),(0,a.kt)("p",null,"On ",(0,a.kt)("inlineCode",{parentName:"p"},"aarch64/arm64")," systems, the OS must use a 4k page size. ",(0,a.kt)("strong",{parentName:"p"},"RHEL9"),", ",(0,a.kt)("strong",{parentName:"p"},"Ubuntu"),", and ",(0,a.kt)("strong",{parentName:"p"},"SLES")," all meet this requirement."),(0,a.kt)("h2",{id:"operating-systems"},"Operating Systems"),(0,a.kt)("p",null,"K3s is expected to work on most modern Linux systems."),(0,a.kt)("p",null,"Some OSs have specific requirements:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"If you are using ",(0,a.kt)("strong",{parentName:"li"},"(Red Hat/CentOS) Enterprise Linux"),", follow ",(0,a.kt)("a",{parentName:"li",href:"/kr/advanced/#red-hat-enterprise-linux--centos"},"these steps")," for additional setup."),(0,a.kt)("li",{parentName:"ul"},"If you are using ",(0,a.kt)("strong",{parentName:"li"},"Raspberry Pi OS"),", follow ",(0,a.kt)("a",{parentName:"li",href:"/kr/advanced/#raspberry-pi"},"these steps")," to switch to legacy iptables.")),(0,a.kt)("p",null,"For more information on which OSs were tested with Rancher managed K3s clusters, refer to the ",(0,a.kt)("a",{parentName:"p",href:"https://rancher.com/support-maintenance-terms/"},"Rancher support and maintenance terms.")),(0,a.kt)("h2",{id:"hardware"},"Hardware"),(0,a.kt)("p",null,"Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here."),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Spec"),(0,a.kt)("th",{parentName:"tr",align:null},"Minimum"),(0,a.kt)("th",{parentName:"tr",align:null},"Recommended"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"CPU"),(0,a.kt)("td",{parentName:"tr",align:null},"1 core"),(0,a.kt)("td",{parentName:"tr",align:null},"2 cores")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"RAM"),(0,a.kt)("td",{parentName:"tr",align:null},"512 MB"),(0,a.kt)("td",{parentName:"tr",align:null},"1 GB")))),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/reference/resource-profiling"},"Resource Profiling")," captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,a.kt)("h4",{id:"disks"},"Disks"),(0,a.kt)("p",null,"K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC."),(0,a.kt)("h2",{id:"networking"},"Networking"),(0,a.kt)("p",null,"The K3s server needs port 6443 to be accessible by all nodes."),(0,a.kt)("p",null,"The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s."),(0,a.kt)("p",null,"If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250."),(0,a.kt)("p",null,"If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380."),(0,a.kt)("admonition",{title:"Important",type:"tip"},(0,a.kt)("p",{parentName:"admonition"},"The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.")),(0,a.kt)("admonition",{type:"warning"},(0,a.kt)("p",{parentName:"admonition"},"Flannel relies on the ",(0,a.kt)("a",{parentName:"p",href:"https://www.cni.dev/plugins/current/main/bridge/"},"Bridge CNI plugin")," to create a L2 network that switches traffic. Rogue pods with ",(0,a.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capabilities can abuse that L2 network to launch attacks such as ",(0,a.kt)("a",{parentName:"p",href:"https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf"},"ARP spoofing"),". Therefore, as documented in the ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"Kubernetes docs"),", please set a restricted profile that disables ",(0,a.kt)("inlineCode",{parentName:"p"},"NET_RAW")," on non-trustable pods.")),(0,a.kt)("h3",{id:"inbound-rules-for-k3s-server-nodes"},"Inbound Rules for K3s Server Nodes"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Protocol"),(0,a.kt)("th",{parentName:"tr",align:null},"Port"),(0,a.kt)("th",{parentName:"tr",align:null},"Source"),(0,a.kt)("th",{parentName:"tr",align:null},"Destination"),(0,a.kt)("th",{parentName:"tr",align:null},"Description"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"TCP"),(0,a.kt)("td",{parentName:"tr",align:null},"2379-2380"),(0,a.kt)("td",{parentName:"tr",align:null},"Servers"),(0,a.kt)("td",{parentName:"tr",align:null},"Servers"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for HA with embedded etcd")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"TCP"),(0,a.kt)("td",{parentName:"tr",align:null},"6443"),(0,a.kt)("td",{parentName:"tr",align:null},"Agents"),(0,a.kt)("td",{parentName:"tr",align:null},"Servers"),(0,a.kt)("td",{parentName:"tr",align:null},"K3s supervisor and Kubernetes API Server")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"UDP"),(0,a.kt)("td",{parentName:"tr",align:null},"8472"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for Flannel VXLAN")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"TCP"),(0,a.kt)("td",{parentName:"tr",align:null},"10250"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Kubelet metrics")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"UDP"),(0,a.kt)("td",{parentName:"tr",align:null},"51820"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv4")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"UDP"),(0,a.kt)("td",{parentName:"tr",align:null},"51821"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv6")))),(0,a.kt)("p",null,"Typically, all outbound traffic is allowed."),(0,a.kt)("p",null,"Additional changes to the firewall may be required depending on the OS used. See ",(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#additional-os-preparations"},"Additional OS Preparations"),"."),(0,a.kt)("h2",{id:"large-clusters"},"Large Clusters"),(0,a.kt)("p",null,"Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"MySQL"),(0,a.kt)("li",{parentName:"ul"},"PostgreSQL"),(0,a.kt)("li",{parentName:"ul"},"etcd")),(0,a.kt)("h3",{id:"cpu-and-memory"},"CPU and Memory"),(0,a.kt)("p",null,"The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,a.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,a.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,a.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,a.kt)("td",{parentName:"tr",align:"center"},"2"),(0,a.kt)("td",{parentName:"tr",align:"center"},"4 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,a.kt)("td",{parentName:"tr",align:"center"},"4"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16"),(0,a.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,a.kt)("td",{parentName:"tr",align:"center"},"32"),(0,a.kt)("td",{parentName:"tr",align:"center"},"64 GB")))),(0,a.kt)("h3",{id:"disks-1"},"Disks"),(0,a.kt)("p",null,"The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS."),(0,a.kt)("h3",{id:"network"},"Network"),(0,a.kt)("p",null,"You should consider increasing the subnet size for the cluster CIDR so that you don't run out of IPs for the pods. You can do that by passing the ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," option to K3s server upon starting."),(0,a.kt)("h3",{id:"database"},"Database"),(0,a.kt)("p",null,"K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd, the following is a sizing guide for the database resources you need to run large clusters:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,a.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,a.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,a.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,a.kt)("td",{parentName:"tr",align:"center"},"1"),(0,a.kt)("td",{parentName:"tr",align:"center"},"2 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,a.kt)("td",{parentName:"tr",align:"center"},"2"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,a.kt)("td",{parentName:"tr",align:"center"},"4"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8"),(0,a.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16"),(0,a.kt)("td",{parentName:"tr",align:"center"},"64 GB")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7563],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>c});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),d=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},p=function(e){var t=d(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=d(n),c=a,k=m["".concat(s,".").concat(c)]||m[c]||u[c]||l;return n?r.createElement(k,i(i({ref:t},p),{},{components:n})):r.createElement(k,i({ref:t},p))}));function c(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2238:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const l={title:"Requirements",weight:1},i=void 0,o={unversionedId:"installation/requirements",id:"installation/requirements",title:"Requirements",description:"K3s is very lightweight, but has some minimum requirements as outlined below.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/requirements.md",sourceDirName:"installation",slug:"/installation/requirements",permalink:"/kr/installation/requirements",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Requirements",weight:1},sidebar:"mySidebar",previous:{title:"\uc124\uce58",permalink:"/kr/installation/"},next:{title:"Configuration Options",permalink:"/kr/installation/configuration"}},s={},d=[{value:"Prerequisites",id:"prerequisites",level:2},{value:"Architecture",id:"architecture",level:2},{value:"Operating Systems",id:"operating-systems",level:2},{value:"Hardware",id:"hardware",level:2},{value:"Disks",id:"disks",level:4},{value:"Networking",id:"networking",level:2},{value:"Inbound Rules for K3s Server Nodes",id:"inbound-rules-for-k3s-server-nodes",level:3},{value:"Large Clusters",id:"large-clusters",level:2},{value:"CPU and Memory",id:"cpu-and-memory",level:3},{value:"Disks",id:"disks-1",level:3},{value:"Network",id:"network",level:3},{value:"Database",id:"database",level:3}],p={toc:d};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},p,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s is very lightweight, but has some minimum requirements as outlined below."),(0,a.kt)("p",null,"Whether you're configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself."),(0,a.kt)("h2",{id:"prerequisites"},"Prerequisites"),(0,a.kt)("p",null,"Two nodes cannot have the same hostname."),(0,a.kt)("p",null,"If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," option to append a random suffix for each node, or devise a unique name to pass with ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-name")," or ",(0,a.kt)("inlineCode",{parentName:"p"},"$K3S_NODE_NAME")," for each node you add to the cluster."),(0,a.kt)("h2",{id:"architecture"},"Architecture"),(0,a.kt)("p",null,"K3s is available for the following architectures:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"x86_64"),(0,a.kt)("li",{parentName:"ul"},"armhf"),(0,a.kt)("li",{parentName:"ul"},"arm64/aarch64"),(0,a.kt)("li",{parentName:"ul"},"s390x")),(0,a.kt)("p",null,"On ",(0,a.kt)("inlineCode",{parentName:"p"},"aarch64/arm64")," systems, the OS must use a 4k page size. ",(0,a.kt)("strong",{parentName:"p"},"RHEL9"),", ",(0,a.kt)("strong",{parentName:"p"},"Ubuntu"),", and ",(0,a.kt)("strong",{parentName:"p"},"SLES")," all meet this requirement."),(0,a.kt)("h2",{id:"operating-systems"},"Operating Systems"),(0,a.kt)("p",null,"K3s is expected to work on most modern Linux systems."),(0,a.kt)("p",null,"Some OSs have specific requirements:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"If you are using ",(0,a.kt)("strong",{parentName:"li"},"(Red Hat/CentOS) Enterprise Linux"),", follow ",(0,a.kt)("a",{parentName:"li",href:"/kr/advanced/#red-hat-enterprise-linux--centos"},"these steps")," for additional setup."),(0,a.kt)("li",{parentName:"ul"},"If you are using ",(0,a.kt)("strong",{parentName:"li"},"Raspberry Pi OS"),", follow ",(0,a.kt)("a",{parentName:"li",href:"/kr/advanced/#raspberry-pi"},"these steps")," to switch to legacy iptables.")),(0,a.kt)("p",null,"For more information on which OSs were tested with Rancher managed K3s clusters, refer to the ",(0,a.kt)("a",{parentName:"p",href:"https://rancher.com/support-maintenance-terms/"},"Rancher support and maintenance terms.")),(0,a.kt)("h2",{id:"hardware"},"Hardware"),(0,a.kt)("p",null,"Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here."),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Spec"),(0,a.kt)("th",{parentName:"tr",align:null},"Minimum"),(0,a.kt)("th",{parentName:"tr",align:null},"Recommended"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"CPU"),(0,a.kt)("td",{parentName:"tr",align:null},"1 core"),(0,a.kt)("td",{parentName:"tr",align:null},"2 cores")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"RAM"),(0,a.kt)("td",{parentName:"tr",align:null},"512 MB"),(0,a.kt)("td",{parentName:"tr",align:null},"1 GB")))),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/kr/reference/resource-profiling"},"Resource Profiling")," captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads."),(0,a.kt)("h4",{id:"disks"},"Disks"),(0,a.kt)("p",null,"K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC."),(0,a.kt)("h2",{id:"networking"},"Networking"),(0,a.kt)("p",null,"The K3s server needs port 6443 to be accessible by all nodes."),(0,a.kt)("p",null,"The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s."),(0,a.kt)("p",null,"If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250."),(0,a.kt)("p",null,"If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380."),(0,a.kt)("admonition",{title:"Important",type:"tip"},(0,a.kt)("p",{parentName:"admonition"},"The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.")),(0,a.kt)("admonition",{type:"warning"},(0,a.kt)("p",{parentName:"admonition"},"Flannel relies on the ",(0,a.kt)("a",{parentName:"p",href:"https://www.cni.dev/plugins/current/main/bridge/"},"Bridge CNI plugin")," to create a L2 network that switches traffic. Rogue pods with ",(0,a.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capabilities can abuse that L2 network to launch attacks such as ",(0,a.kt)("a",{parentName:"p",href:"https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf"},"ARP spoofing"),". Therefore, as documented in the ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"Kubernetes docs"),", please set a restricted profile that disables ",(0,a.kt)("inlineCode",{parentName:"p"},"NET_RAW")," on non-trustable pods.")),(0,a.kt)("h3",{id:"inbound-rules-for-k3s-server-nodes"},"Inbound Rules for K3s Server Nodes"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Protocol"),(0,a.kt)("th",{parentName:"tr",align:null},"Port"),(0,a.kt)("th",{parentName:"tr",align:null},"Source"),(0,a.kt)("th",{parentName:"tr",align:null},"Destination"),(0,a.kt)("th",{parentName:"tr",align:null},"Description"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"TCP"),(0,a.kt)("td",{parentName:"tr",align:null},"2379-2380"),(0,a.kt)("td",{parentName:"tr",align:null},"Servers"),(0,a.kt)("td",{parentName:"tr",align:null},"Servers"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for HA with embedded etcd")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"TCP"),(0,a.kt)("td",{parentName:"tr",align:null},"6443"),(0,a.kt)("td",{parentName:"tr",align:null},"Agents"),(0,a.kt)("td",{parentName:"tr",align:null},"Servers"),(0,a.kt)("td",{parentName:"tr",align:null},"K3s supervisor and Kubernetes API Server")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"UDP"),(0,a.kt)("td",{parentName:"tr",align:null},"8472"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for Flannel VXLAN")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"TCP"),(0,a.kt)("td",{parentName:"tr",align:null},"10250"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Kubelet metrics")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"UDP"),(0,a.kt)("td",{parentName:"tr",align:null},"51820"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv4")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},"UDP"),(0,a.kt)("td",{parentName:"tr",align:null},"51821"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"All nodes"),(0,a.kt)("td",{parentName:"tr",align:null},"Required only for Flannel Wireguard with IPv6")))),(0,a.kt)("p",null,"Typically, all outbound traffic is allowed."),(0,a.kt)("p",null,"Additional changes to the firewall may be required depending on the OS used. See ",(0,a.kt)("a",{parentName:"p",href:"/kr/advanced/#additional-os-preparations"},"Additional OS Preparations"),"."),(0,a.kt)("h2",{id:"large-clusters"},"Large Clusters"),(0,a.kt)("p",null,"Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"MySQL"),(0,a.kt)("li",{parentName:"ul"},"PostgreSQL"),(0,a.kt)("li",{parentName:"ul"},"etcd")),(0,a.kt)("h3",{id:"cpu-and-memory"},"CPU and Memory"),(0,a.kt)("p",null,"The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,a.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,a.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,a.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,a.kt)("td",{parentName:"tr",align:"center"},"2"),(0,a.kt)("td",{parentName:"tr",align:"center"},"4 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,a.kt)("td",{parentName:"tr",align:"center"},"4"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16"),(0,a.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,a.kt)("td",{parentName:"tr",align:"center"},"32"),(0,a.kt)("td",{parentName:"tr",align:"center"},"64 GB")))),(0,a.kt)("h3",{id:"disks-1"},"Disks"),(0,a.kt)("p",null,"The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS."),(0,a.kt)("h3",{id:"network"},"Network"),(0,a.kt)("p",null,"You should consider increasing the subnet size for the cluster CIDR so that you don't run out of IPs for the pods. You can do that by passing the ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," option to K3s server upon starting."),(0,a.kt)("h3",{id:"database"},"Database"),(0,a.kt)("p",null,"K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd, the following is a sizing guide for the database resources you need to run large clusters:"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:"center"},"Deployment Size"),(0,a.kt)("th",{parentName:"tr",align:"center"},"Nodes"),(0,a.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,a.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,a.kt)("td",{parentName:"tr",align:"center"},"1"),(0,a.kt)("td",{parentName:"tr",align:"center"},"2 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,a.kt)("td",{parentName:"tr",align:"center"},"2"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,a.kt)("td",{parentName:"tr",align:"center"},"4"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,a.kt)("td",{parentName:"tr",align:"center"},"8"),(0,a.kt)("td",{parentName:"tr",align:"center"},"32 GB")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,a.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,a.kt)("td",{parentName:"tr",align:"center"},"16"),(0,a.kt)("td",{parentName:"tr",align:"center"},"64 GB")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/bccfb1cb.2bc8b311.js b/kr/assets/js/bccfb1cb.287a8596.js
similarity index 98%
rename from kr/assets/js/bccfb1cb.2bc8b311.js
rename to kr/assets/js/bccfb1cb.287a8596.js
index b4fa30bcd..6c8ae25b4 100644
--- a/kr/assets/js/bccfb1cb.2bc8b311.js
+++ b/kr/assets/js/bccfb1cb.287a8596.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[910],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),d=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=a,g=u["".concat(s,".").concat(m)]||u[m]||p[m]||o;return n?r.createElement(g,i(i({ref:t},c),{},{components:n})):r.createElement(g,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},3335:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const o={title:"Managing Server Roles",weight:60},i=void 0,l={unversionedId:"installation/server-roles",id:"installation/server-roles",title:"Managing Server Roles",description:"Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/server-roles.md",sourceDirName:"installation",slug:"/installation/server-roles",permalink:"/kr/installation/server-roles",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Managing Server Roles",weight:60},sidebar:"mySidebar",previous:{title:"Air-Gap Install",permalink:"/kr/installation/airgap"},next:{title:"Managing Packaged Components",permalink:"/kr/installation/packaged-components"}},s={},d=[{value:"Dedicated <code>etcd</code> Nodes",id:"dedicated-etcd-nodes",level:2},{value:"Dedicated <code>control-plane</code> Nodes",id:"dedicated-control-plane-nodes",level:2},{value:"Adding Roles To Existing Servers",id:"adding-roles-to-existing-servers",level:2},{value:"Configuration File Syntax",id:"configuration-file-syntax",level:2}],c={toc:d};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Starting the K3s server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.")),(0,a.kt)("h2",{id:"dedicated-etcd-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"etcd")," Nodes"),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role, start K3s with all the control-plane components disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},"curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler\n")),(0,a.kt)("p",null,"This first node will start etcd, and wait for additional ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," and/or ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes to join. The cluster will not be usable until you join an additional server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," components enabled."),(0,a.kt)("h2",{id:"dedicated-control-plane-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"control-plane")," Nodes"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"A dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," node cannot be the first server in the cluster; there must be an existing node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role before joining dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes.")),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role, start k3s with etcd disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443 \n")),(0,a.kt)("p",null,"After creating dedicated server nodes, the selected roles will be visible in ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl get node"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME           STATUS   ROLES                       AGE     VERSION\nk3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1\nk3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1\n")),(0,a.kt)("h2",{id:"adding-roles-to-existing-servers"},"Adding Roles To Existing Servers"),(0,a.kt)("p",null,"Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role to a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can remove the ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-apiserver --disable-controller-manager --disable-scheduler")," flags from the systemd unit or config file, and restart the service."),(0,a.kt)("h2",{id:"configuration-file-syntax"},"Configuration File Syntax"),(0,a.kt)("p",null,"As with all other CLI flags, you can use the  ",(0,a.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"Configuration File")," to disable components, instead of passing the options as CLI flags. For example, to create a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can place the following values in ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"cluster-init: true\ndisable-apiserver: true\ndisable-controller-manager: true\ndisable-scheduler: true\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[910],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),d=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=a,g=u["".concat(s,".").concat(m)]||u[m]||p[m]||o;return n?r.createElement(g,i(i({ref:t},c),{},{components:n})):r.createElement(g,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var d=2;d<o;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},3335:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const o={title:"Managing Server Roles",weight:60},i=void 0,l={unversionedId:"installation/server-roles",id:"installation/server-roles",title:"Managing Server Roles",description:"Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/server-roles.md",sourceDirName:"installation",slug:"/installation/server-roles",permalink:"/kr/installation/server-roles",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Managing Server Roles",weight:60},sidebar:"mySidebar",previous:{title:"Air-Gap Install",permalink:"/kr/installation/airgap"},next:{title:"Managing Packaged Components",permalink:"/kr/installation/packaged-components"}},s={},d=[{value:"Dedicated <code>etcd</code> Nodes",id:"dedicated-etcd-nodes",level:2},{value:"Dedicated <code>control-plane</code> Nodes",id:"dedicated-control-plane-nodes",level:2},{value:"Adding Roles To Existing Servers",id:"adding-roles-to-existing-servers",level:2},{value:"Configuration File Syntax",id:"configuration-file-syntax",level:2}],c={toc:d};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"Starting the K3s server with ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.")),(0,a.kt)("h2",{id:"dedicated-etcd-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"etcd")," Nodes"),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role, start K3s with all the control-plane components disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},"curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler\n")),(0,a.kt)("p",null,"This first node will start etcd, and wait for additional ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," and/or ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes to join. The cluster will not be usable until you join an additional server with the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," components enabled."),(0,a.kt)("h2",{id:"dedicated-control-plane-nodes"},"Dedicated ",(0,a.kt)("inlineCode",{parentName:"h2"},"control-plane")," Nodes"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"A dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," node cannot be the first server in the cluster; there must be an existing node with the ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," role before joining dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," nodes.")),(0,a.kt)("p",null,"To create a server with only the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role, start k3s with etcd disabled:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443 \n")),(0,a.kt)("p",null,"After creating dedicated server nodes, the selected roles will be visible in ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl get node"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME           STATUS   ROLES                       AGE     VERSION\nk3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1\nk3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1\n")),(0,a.kt)("h2",{id:"adding-roles-to-existing-servers"},"Adding Roles To Existing Servers"),(0,a.kt)("p",null,"Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," role to a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can remove the ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-apiserver --disable-controller-manager --disable-scheduler")," flags from the systemd unit or config file, and restart the service."),(0,a.kt)("h2",{id:"configuration-file-syntax"},"Configuration File Syntax"),(0,a.kt)("p",null,"As with all other CLI flags, you can use the  ",(0,a.kt)("a",{parentName:"p",href:"/kr/installation/configuration#configuration-file"},"Configuration File")," to disable components, instead of passing the options as CLI flags. For example, to create a dedicated ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," node, you can place the following values in ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml"),":"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"cluster-init: true\ndisable-apiserver: true\ndisable-controller-manager: true\ndisable-scheduler: true\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/c7700003.0ce801d6.js b/kr/assets/js/c7700003.e8209e95.js
similarity index 99%
rename from kr/assets/js/c7700003.0ce801d6.js
rename to kr/assets/js/c7700003.e8209e95.js
index a2612f112..3c666f603 100644
--- a/kr/assets/js/c7700003.0ce801d6.js
+++ b/kr/assets/js/c7700003.e8209e95.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[240],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),p=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,i=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=p(n),m=r,h=d["".concat(i,".").concat(m)]||d[m]||c[m]||o;return n?a.createElement(h,l(l({ref:t},u),{},{components:n})):a.createElement(h,l({ref:t},u))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,l=new Array(o);l[0]=d;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,l[1]=s;for(var p=2;p<o;p++)l[p]=n[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},6512:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>c,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const o={title:"Automated Upgrades",weight:20},l=void 0,s={unversionedId:"upgrades/automated",id:"upgrades/automated",title:"Automated Upgrades",description:"Overview",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/automated.md",sourceDirName:"upgrades",slug:"/upgrades/automated",permalink:"/kr/upgrades/automated",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Automated Upgrades",weight:20},sidebar:"mySidebar",previous:{title:"Manual Upgrades",permalink:"/kr/upgrades/manual"},next:{title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",permalink:"/kr/storage/"}},i={},p=[{value:"Overview",id:"overview",level:3},{value:"Install the system-upgrade-controller",id:"install-the-system-upgrade-controller",level:3},{value:"Configure plans",id:"configure-plans",level:3}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h3",{id:"overview"},"Overview"),(0,r.kt)("p",null,"You can manage K3s cluster upgrades using Rancher's system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources"},"custom resource definition (CRD)"),", a ",(0,r.kt)("inlineCode",{parentName:"p"},"plan"),", and a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/architecture/controller/"},"controller"),"."),(0,r.kt)("p",null,"The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/"},"label selector"),". See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go"},"CRD"),"."),(0,r.kt)("p",null,"The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/"},"jobs")," on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The upgrade job that is launched must be highly privileged. It is configured with the following:"),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"Host ",(0,r.kt)("inlineCode",{parentName:"li"},"IPC"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"NET"),", and ",(0,r.kt)("inlineCode",{parentName:"li"},"PID")," namespaces"),(0,r.kt)("li",{parentName:"ul"},"The ",(0,r.kt)("inlineCode",{parentName:"li"},"CAP_SYS_BOOT")," capability"),(0,r.kt)("li",{parentName:"ul"},"Host root mounted at ",(0,r.kt)("inlineCode",{parentName:"li"},"/host")," with read and write permissions"))),(0,r.kt)("p",null,"To automate upgrades in this manner, you must do the following:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Install the system-upgrade-controller into your cluster"),(0,r.kt)("li",{parentName:"ol"},"Configure plans")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades."),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster is ",(0,r.kt)("em",{parentName:"li"},"not")," managed Rancher, you may follow the steps below."))),(0,r.kt)("p",null,"For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s-upgrade"},"k3s-upgrade"))),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"install-the-system-upgrade-controller"},"Install the system-upgrade-controller"),(0,r.kt)("p",null," The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml\n")),(0,r.kt)("p",null,"The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied."),(0,r.kt)("h3",{id:"configure-plans"},"Configure plans"),(0,r.kt)("p",null,"It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  "),(0,r.kt)("p",null,"The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'# Server plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: server-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: In\n      values:\n      - "true"\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n---\n# Agent plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: agent-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: DoesNotExist\n  prepare:\n    args:\n    - prepare\n    - server-plan\n    image: rancher/k3s-upgrade\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n')),(0,r.kt)("p",null,"There are a few important things to call out regarding these plans:"),(0,r.kt)("p",null,"1) The plans must be created in the same namespace where the controller was deployed."),(0,r.kt)("p",null,"2) The ",(0,r.kt)("inlineCode",{parentName:"p"},"concurrency")," field indicates how many nodes can be upgraded at the same time. "),(0,r.kt)("p",null,"3) The server-plan targets server nodes by specifying a label selector that selects nodes with the ",(0,r.kt)("inlineCode",{parentName:"p"},"node-role.kubernetes.io/control-plane")," label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label."),(0,r.kt)("p",null,"4) The ",(0,r.kt)("inlineCode",{parentName:"p"},"prepare")," step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute."),(0,r.kt)("p",null,"5) Both plans have the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field set to v1.24.6+k3s1. Alternatively, you can omit the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field and set the ",(0,r.kt)("inlineCode",{parentName:"p"},"channel")," field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the ",(0,r.kt)("a",{parentName:"p",href:"/kr/upgrades/manual#release-channels"},"release channels"),". Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: upgrade.cattle.io/v1\nkind: Plan\n...\nspec:\n  ...\n  channel: https://update.k3s.io/v1-release/channels/stable\n\n")),(0,r.kt)("p",null,"As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed."),(0,r.kt)("p",null,"You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl -n system-upgrade get plans -o yaml\nkubectl -n system-upgrade get jobs -o yaml\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[240],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},o=Object.keys(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)n=o[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),p=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,o=e.originalType,i=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=p(n),m=r,h=d["".concat(i,".").concat(m)]||d[m]||c[m]||o;return n?a.createElement(h,l(l({ref:t},u),{},{components:n})):a.createElement(h,l({ref:t},u))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var o=n.length,l=new Array(o);l[0]=d;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,l[1]=s;for(var p=2;p<o;p++)l[p]=n[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},6512:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>c,frontMatter:()=>o,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const o={title:"Automated Upgrades",weight:20},l=void 0,s={unversionedId:"upgrades/automated",id:"upgrades/automated",title:"Automated Upgrades",description:"Overview",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/automated.md",sourceDirName:"upgrades",slug:"/upgrades/automated",permalink:"/kr/upgrades/automated",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Automated Upgrades",weight:20},sidebar:"mySidebar",previous:{title:"Manual Upgrades",permalink:"/kr/upgrades/manual"},next:{title:"\ubcfc\ub968\uacfc \uc800\uc7a5\uc18c",permalink:"/kr/storage/"}},i={},p=[{value:"Overview",id:"overview",level:3},{value:"Install the system-upgrade-controller",id:"install-the-system-upgrade-controller",level:3},{value:"Configure plans",id:"configure-plans",level:3}],u={toc:p};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h3",{id:"overview"},"Overview"),(0,r.kt)("p",null,"You can manage K3s cluster upgrades using Rancher's system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources"},"custom resource definition (CRD)"),", a ",(0,r.kt)("inlineCode",{parentName:"p"},"plan"),", and a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/architecture/controller/"},"controller"),"."),(0,r.kt)("p",null,"The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/"},"label selector"),". See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go"},"CRD"),"."),(0,r.kt)("p",null,"The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/"},"jobs")," on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"The upgrade job that is launched must be highly privileged. It is configured with the following:"),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"Host ",(0,r.kt)("inlineCode",{parentName:"li"},"IPC"),", ",(0,r.kt)("inlineCode",{parentName:"li"},"NET"),", and ",(0,r.kt)("inlineCode",{parentName:"li"},"PID")," namespaces"),(0,r.kt)("li",{parentName:"ul"},"The ",(0,r.kt)("inlineCode",{parentName:"li"},"CAP_SYS_BOOT")," capability"),(0,r.kt)("li",{parentName:"ul"},"Host root mounted at ",(0,r.kt)("inlineCode",{parentName:"li"},"/host")," with read and write permissions"))),(0,r.kt)("p",null,"To automate upgrades in this manner, you must do the following:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Install the system-upgrade-controller into your cluster"),(0,r.kt)("li",{parentName:"ol"},"Configure plans")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades."),(0,r.kt)("ul",{parentName:"admonition"},(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page."),(0,r.kt)("li",{parentName:"ul"},"If the K3s cluster is ",(0,r.kt)("em",{parentName:"li"},"not")," managed Rancher, you may follow the steps below."))),(0,r.kt)("p",null,"For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s-upgrade"},"k3s-upgrade"))),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"install-the-system-upgrade-controller"},"Install the system-upgrade-controller"),(0,r.kt)("p",null," The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml\n")),(0,r.kt)("p",null,"The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied."),(0,r.kt)("h3",{id:"configure-plans"},"Configure plans"),(0,r.kt)("p",null,"It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  "),(0,r.kt)("p",null,"The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'# Server plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: server-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: In\n      values:\n      - "true"\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n---\n# Agent plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: agent-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: DoesNotExist\n  prepare:\n    args:\n    - prepare\n    - server-plan\n    image: rancher/k3s-upgrade\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n')),(0,r.kt)("p",null,"There are a few important things to call out regarding these plans:"),(0,r.kt)("p",null,"1) The plans must be created in the same namespace where the controller was deployed."),(0,r.kt)("p",null,"2) The ",(0,r.kt)("inlineCode",{parentName:"p"},"concurrency")," field indicates how many nodes can be upgraded at the same time. "),(0,r.kt)("p",null,"3) The server-plan targets server nodes by specifying a label selector that selects nodes with the ",(0,r.kt)("inlineCode",{parentName:"p"},"node-role.kubernetes.io/control-plane")," label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label."),(0,r.kt)("p",null,"4) The ",(0,r.kt)("inlineCode",{parentName:"p"},"prepare")," step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute."),(0,r.kt)("p",null,"5) Both plans have the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field set to v1.24.6+k3s1. Alternatively, you can omit the ",(0,r.kt)("inlineCode",{parentName:"p"},"version")," field and set the ",(0,r.kt)("inlineCode",{parentName:"p"},"channel")," field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the ",(0,r.kt)("a",{parentName:"p",href:"/kr/upgrades/manual#release-channels"},"release channels"),". Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: upgrade.cattle.io/v1\nkind: Plan\n...\nspec:\n  ...\n  channel: https://update.k3s.io/v1-release/channels/stable\n\n")),(0,r.kt)("p",null,"As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed."),(0,r.kt)("p",null,"You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl -n system-upgrade get plans -o yaml\nkubectl -n system-upgrade get jobs -o yaml\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/d05291c6.dc8a25d4.js b/kr/assets/js/d05291c6.98c06e60.js
similarity index 99%
rename from kr/assets/js/d05291c6.dc8a25d4.js
rename to kr/assets/js/d05291c6.98c06e60.js
index e1d18742f..06d481414 100644
--- a/kr/assets/js/d05291c6.dc8a25d4.js
+++ b/kr/assets/js/d05291c6.98c06e60.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4606],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var a=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,i=function(e,t){if(null==e)return{};var n,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,i=e.mdxType,r=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=i,k=u["".concat(s,".").concat(m)]||u[m]||c[m]||r;return n?a.createElement(k,o(o({ref:t},p),{},{components:n})):a.createElement(k,o({ref:t},p))}));function m(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var r=n.length,o=new Array(r);o[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var d=2;d<r;d++)o[d]=n[d];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},1353:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>k,frontMatter:()=>r,metadata:()=>l,toc:()=>d});var a=n(3117),i=(n(7294),n(3905));const r={title:"Network Options",weight:25},o=void 0,l={unversionedId:"installation/network-options",id:"installation/network-options",title:"Network Options",description:"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/network-options.md",sourceDirName:"installation",slug:"/installation/network-options",permalink:"/kr/installation/network-options",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Network Options",weight:25},sidebar:"mySidebar",previous:{title:"Configuration Options",permalink:"/kr/installation/configuration"},next:{title:"Private Registry Configuration",permalink:"/kr/installation/private-registry"}},s={},d=[{value:"Flannel Options",id:"flannel-options",level:2},{value:"Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code>",id:"migrating-from-wireguard-or-ipsec-to-wireguard-native",level:3},{value:"Custom CNI",id:"custom-cni",level:2},{value:"Control-Plane Egress Selector configuration",id:"control-plane-egress-selector-configuration",level:2},{value:"Dual-stack (IPv4 + IPv6) Networking",id:"dual-stack-ipv4--ipv6-networking",level:2},{value:"Single-stack IPv6 Networking",id:"single-stack-ipv6-networking",level:2},{value:"Distributed hybrid or multicloud cluster",id:"distributed-hybrid-or-multicloud-cluster",level:2}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},c=p("Tabs"),u=p("TabItem"),m={toc:d};function k(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("strong",{parentName:"p"},"Note:")," Please reference the ",(0,i.kt)("a",{parentName:"p",href:"/kr/networking/"},"Networking")," page for information about CoreDNS, Traefik, and the Service LB.")),(0,i.kt)("h2",{id:"flannel-options"},"Flannel Options"),(0,i.kt)("p",null,(0,i.kt)("a",{parentName:"p",href:"https://github.com/flannel-io/flannel/blob/master/README.md"},"Flannel")," is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Flannel options can only be set on server nodes, and must be identical on all servers in the cluster."),(0,i.kt)("li",{parentName:"ul"},"The default backend for Flannel is ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan"),". To enable encryption, use the ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," backend."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan")," on Rasperry Pi with recent versions of Ubuntu requires ",(0,i.kt)("a",{parentName:"li",href:"/kr/advanced/#raspberry-pi"},"additional preparation"),"."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," as the Flannel backend may require additional modules on some Linux distributions. Please see the ",(0,i.kt)("a",{parentName:"li",href:"https://www.wireguard.com/install/"},"WireGuard Install Guide")," for details.\nThe WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system.\nYou must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend.")),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"CLI Flag and Value"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,i.kt)("td",{parentName:"tr",align:null},"Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than ",(0,i.kt)("inlineCode",{parentName:"td"},"none"),".")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,i.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=vxlan")),(0,i.kt)("td",{parentName:"tr",align:null},"Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=host-gw")),(0,i.kt)("td",{parentName:"tr",align:null},"Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=ipsec")),(0,i.kt)("td",{parentName:"tr",align:null},"Use strongSwan IPSec via the ",(0,i.kt)("inlineCode",{parentName:"td"},"swanctl")," binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard via the ",(0,i.kt)("inlineCode",{parentName:"td"},"wg")," binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none")),(0,i.kt)("td",{parentName:"tr",align:null},"Disable Flannel entirely.")))),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"K3s no longer includes strongSwan ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend.")),(0,i.kt)("h3",{id:"migrating-from-wireguard-or-ipsec-to-wireguard-native"},"Migrating from ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"h3"},"ipsec")," to ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard-native")),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wg")," tool on the host. This backend will be removed in K3s v1.26, in favor of ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend, which directly interfaces with the kernel."),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries on the host. This backend will be removed in K3s v1.27, in favor of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend."),(0,i.kt)("p",null,"We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps:"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},"Update the K3s config on all server nodes. If using config files, the ",(0,i.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/config.yaml")," should include ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard-native")," instead of ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: ipsec"),". If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed."),(0,i.kt)("li",{parentName:"ol"},"Reboot all nodes, starting with the servers.")),(0,i.kt)("h2",{id:"custom-cni"},"Custom CNI"),(0,i.kt)("p",null,"Start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--flannel-backend=none")," and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," as well to avoid conflicts. IP Forwarding should be enabled for Canal and Calico; please reference the steps below."),(0,i.kt)(c,{mdxType:"Tabs"},(0,i.kt)(u,{value:"Canal",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Visit the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/"},"Project Calico Docs")," website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Canal YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-canal.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true.")),(0,i.kt)(u,{value:"Calico",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Follow the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/reference/configure-cni-plugins"},"Calico CNI Plugins Guide"),". Modify the Calico YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Calico YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-calico.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true."))),(0,i.kt)("h2",{id:"control-plane-egress-selector-configuration"},"Control-Plane Egress Selector configuration"),(0,i.kt)("p",null,"K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components.\nThis allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled.\nThis functionality is equivalent to the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/extend-kubernetes/setup-konnectivity/"},"Konnectivity")," service commonly used on other Kubernetes distributions, and is managed via the apiserver's egress selector configuration."),(0,i.kt)("p",null,"The egress selector mode may be configured on servers via the ",(0,i.kt)("inlineCode",{parentName:"p"},"--egress-selector-mode")," flag, and offers four modes:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"disabled"),": The apiserver does not use agent tunnels to communicate with kubelets or cluster endpoints.\nThis mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl exec")," and ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl logs"),"."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"agent")," (default): The apiserver uses agent tunnels to communicate with kubelets.\nThis is mode requires that servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"pod"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes.\n",(0,i.kt)("strong",{parentName:"li"},"NOTE"),": This will not work when using a CNI that uses its own IPAM and does not respect the node's PodCIDR allocation. ",(0,i.kt)("inlineCode",{parentName:"li"},"cluster")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"agent")," should be used with these CNIs instead."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"cluster"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.")),(0,i.kt)("h2",{id:"dual-stack-ipv4--ipv6-networking"},"Dual-stack (IPv4 + IPv6) Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Experimental support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"),".",(0,i.kt)("br",{parentName:"p"}),"\n","Stable support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1"},"v1.23.7+k3s1"),". ")),(0,i.kt)("admonition",{title:"Known Issue ",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Kubernetes v1.24 and v1.25 include ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/111695"},"an issue")," that ignores the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre"},'--kubelet-arg="node-ip=0.0.0.0" # To proritize IPv4 traffic\n#OR\n--kubelet-arg="node-ip=::" # To proritize IPv6 traffic\n'))),(0,i.kt)("p",null,"Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only."),(0,i.kt)("p",null,"To enable dual-stack in K3s, you must provide valid dual-stack ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," on all server nodes. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},"--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112\n")),(0,i.kt)("p",null,"Note that you may configure any valid ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," values, but the above masks are recommended. If you change the ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," mask, you should also change the ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv4")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv6")," values to match the planned pods per node and total node count. The largest supported ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud."),(0,i.kt)("p",null,"If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin's dual-stack documentation and verify if network policies can be enabled."),(0,i.kt)("h2",{id:"single-stack-ipv6-networking"},"Single-stack IPv6 Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1"},"v1.22.9+k3s1"))),(0,i.kt)("admonition",{title:"Known Issue",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl ",(0,i.kt)("inlineCode",{parentName:"p"},"net.ipv6.conf.all.accept_ra=2"),"; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/91507"},"man-in-the-middle attacks"),".")),(0,i.kt)("p",null,"Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"--service-cidr")," flags. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112\n")),(0,i.kt)("h2",{id:"distributed-hybrid-or-multicloud-cluster"},"Distributed hybrid or multicloud cluster"),(0,i.kt)("p",null,"A K3s cluster can still be deployed on nodes which use different private networks and are not directly connected (e.g. nodes in different public clouds). To achieve this, K3s sets a mesh of tunnels that become a VPN mesh. These nodes must have have an assigned IP through which they can be reached (e.g. a public IP). The server traffic will use a websocket tunnel and the data-plane traffic will use a wireguard tunnel."),(0,i.kt)("p",null,"To enable this type of deployment, you must add the following parameters on servers:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip\n")),(0,i.kt)("p",null,"and on agents:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<AGENT_EXTERNAL_IP>\n")),(0,i.kt)("p",null,"where ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," is the IP through which we can reach the server node and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," is the IP through which we can reach the agent/worker node. Note that the ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_URL")," config parameter in the agent/worker should use the ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," to be able to connect to it. Remember to check the ",(0,i.kt)("a",{parentName:"p",href:"/kr/installation/requirements#networking"},"Networking Requirements")," and allow access to the listed ports on both internal and external addresses."),(0,i.kt)("p",null,"Both ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," must have connectivity between them and are normally public IPs."),(0,i.kt)("admonition",{title:"Dynamic IPs",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-external-ip")," parameter to reflect the new IP. If running k3s as a service, you must modify ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service")," then run:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl daemon-reload\nsystemctl restart k3s\n"))),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.")),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Embedded etcd will not use external IPs for communication. If using embedded etcd; all server nodes must be reachable to each other via their private IPs.")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4606],{3905:(e,t,n)=>{n.d(t,{Zo:()=>p,kt:()=>m});var a=n(7294);function i(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){i(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,a,i=function(e,t){if(null==e)return{};var n,a,i={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(i[n]=e[n]);return i}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(i[n]=e[n])}return i}var s=a.createContext({}),d=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},p=function(e){var t=d(e.components);return a.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},u=a.forwardRef((function(e,t){var n=e.components,i=e.mdxType,r=e.originalType,s=e.parentName,p=l(e,["components","mdxType","originalType","parentName"]),u=d(n),m=i,k=u["".concat(s,".").concat(m)]||u[m]||c[m]||r;return n?a.createElement(k,o(o({ref:t},p),{},{components:n})):a.createElement(k,o({ref:t},p))}));function m(e,t){var n=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var r=n.length,o=new Array(r);o[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:i,o[1]=l;for(var d=2;d<r;d++)o[d]=n[d];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},1353:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>k,frontMatter:()=>r,metadata:()=>l,toc:()=>d});var a=n(3117),i=(n(7294),n(3905));const r={title:"Network Options",weight:25},o=void 0,l={unversionedId:"installation/network-options",id:"installation/network-options",title:"Network Options",description:"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/network-options.md",sourceDirName:"installation",slug:"/installation/network-options",permalink:"/kr/installation/network-options",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Network Options",weight:25},sidebar:"mySidebar",previous:{title:"Configuration Options",permalink:"/kr/installation/configuration"},next:{title:"Private Registry Configuration",permalink:"/kr/installation/private-registry"}},s={},d=[{value:"Flannel Options",id:"flannel-options",level:2},{value:"Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code>",id:"migrating-from-wireguard-or-ipsec-to-wireguard-native",level:3},{value:"Custom CNI",id:"custom-cni",level:2},{value:"Control-Plane Egress Selector configuration",id:"control-plane-egress-selector-configuration",level:2},{value:"Dual-stack (IPv4 + IPv6) Networking",id:"dual-stack-ipv4--ipv6-networking",level:2},{value:"Single-stack IPv6 Networking",id:"single-stack-ipv6-networking",level:2},{value:"Distributed hybrid or multicloud cluster",id:"distributed-hybrid-or-multicloud-cluster",level:2}],p=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,i.kt)("div",t)},c=p("Tabs"),u=p("TabItem"),m={toc:d};function k(e){let{components:t,...n}=e;return(0,i.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."),(0,i.kt)("blockquote",null,(0,i.kt)("p",{parentName:"blockquote"},(0,i.kt)("strong",{parentName:"p"},"Note:")," Please reference the ",(0,i.kt)("a",{parentName:"p",href:"/kr/networking/"},"Networking")," page for information about CoreDNS, Traefik, and the Service LB.")),(0,i.kt)("h2",{id:"flannel-options"},"Flannel Options"),(0,i.kt)("p",null,(0,i.kt)("a",{parentName:"p",href:"https://github.com/flannel-io/flannel/blob/master/README.md"},"Flannel")," is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin."),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"Flannel options can only be set on server nodes, and must be identical on all servers in the cluster."),(0,i.kt)("li",{parentName:"ul"},"The default backend for Flannel is ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan"),". To enable encryption, use the ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," backend."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"vxlan")," on Rasperry Pi with recent versions of Ubuntu requires ",(0,i.kt)("a",{parentName:"li",href:"/kr/advanced/#raspberry-pi"},"additional preparation"),"."),(0,i.kt)("li",{parentName:"ul"},"Using ",(0,i.kt)("inlineCode",{parentName:"li"},"wireguard-native")," as the Flannel backend may require additional modules on some Linux distributions. Please see the ",(0,i.kt)("a",{parentName:"li",href:"https://www.wireguard.com/install/"},"WireGuard Install Guide")," for details.\nThe WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system.\nYou must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend.")),(0,i.kt)("table",null,(0,i.kt)("thead",{parentName:"table"},(0,i.kt)("tr",{parentName:"thead"},(0,i.kt)("th",{parentName:"tr",align:null},"CLI Flag and Value"),(0,i.kt)("th",{parentName:"tr",align:null},"Description"))),(0,i.kt)("tbody",{parentName:"table"},(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,i.kt)("td",{parentName:"tr",align:null},"Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than ",(0,i.kt)("inlineCode",{parentName:"td"},"none"),".")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,i.kt)("td",{parentName:"tr",align:null},"Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=vxlan")),(0,i.kt)("td",{parentName:"tr",align:null},"Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=host-gw")),(0,i.kt)("td",{parentName:"tr",align:null},"Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules.")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=ipsec")),(0,i.kt)("td",{parentName:"tr",align:null},"Use strongSwan IPSec via the ",(0,i.kt)("inlineCode",{parentName:"td"},"swanctl")," binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard")),(0,i.kt)("td",{parentName:"tr",align:null},"Use WireGuard via the ",(0,i.kt)("inlineCode",{parentName:"td"},"wg")," binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0)")),(0,i.kt)("tr",{parentName:"tbody"},(0,i.kt)("td",{parentName:"tr",align:null},(0,i.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none")),(0,i.kt)("td",{parentName:"tr",align:null},"Disable Flannel entirely.")))),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"K3s no longer includes strongSwan ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend.")),(0,i.kt)("h3",{id:"migrating-from-wireguard-or-ipsec-to-wireguard-native"},"Migrating from ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"h3"},"ipsec")," to ",(0,i.kt)("inlineCode",{parentName:"h3"},"wireguard-native")),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wg")," tool on the host. This backend will be removed in K3s v1.26, in favor of ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend, which directly interfaces with the kernel."),(0,i.kt)("p",null,"The legacy ",(0,i.kt)("inlineCode",{parentName:"p"},"ipsec")," backend requires installation of the ",(0,i.kt)("inlineCode",{parentName:"p"},"swanctl")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"charon")," binaries on the host. This backend will be removed in K3s v1.27, in favor of the ",(0,i.kt)("inlineCode",{parentName:"p"},"wireguard-native")," backend."),(0,i.kt)("p",null,"We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps:"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},"Update the K3s config on all server nodes. If using config files, the ",(0,i.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/config.yaml")," should include ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard-native")," instead of ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"flannel-backend: ipsec"),". If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed."),(0,i.kt)("li",{parentName:"ol"},"Reboot all nodes, starting with the servers.")),(0,i.kt)("h2",{id:"custom-cni"},"Custom CNI"),(0,i.kt)("p",null,"Start K3s with ",(0,i.kt)("inlineCode",{parentName:"p"},"--flannel-backend=none")," and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set ",(0,i.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," as well to avoid conflicts. IP Forwarding should be enabled for Canal and Calico; please reference the steps below."),(0,i.kt)(c,{mdxType:"Tabs"},(0,i.kt)(u,{value:"Canal",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Visit the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/"},"Project Calico Docs")," website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Canal YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-canal.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true.")),(0,i.kt)(u,{value:"Calico",default:!0,mdxType:"TabItem"},(0,i.kt)("p",null,"Follow the ",(0,i.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/reference/configure-cni-plugins"},"Calico CNI Plugins Guide"),". Modify the Calico YAML so that IP forwarding is allowed in the ",(0,i.kt)("inlineCode",{parentName:"p"},"container_settings")," section, for example:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,i.kt)("p",null,"Apply the Calico YAML."),(0,i.kt)("p",null,"Ensure the settings were applied by running the following command on the host:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-calico.conflist\n")),(0,i.kt)("p",null,"You should see that IP forwarding is set to true."))),(0,i.kt)("h2",{id:"control-plane-egress-selector-configuration"},"Control-Plane Egress Selector configuration"),(0,i.kt)("p",null,"K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components.\nThis allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled.\nThis functionality is equivalent to the ",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/extend-kubernetes/setup-konnectivity/"},"Konnectivity")," service commonly used on other Kubernetes distributions, and is managed via the apiserver's egress selector configuration."),(0,i.kt)("p",null,"The egress selector mode may be configured on servers via the ",(0,i.kt)("inlineCode",{parentName:"p"},"--egress-selector-mode")," flag, and offers four modes:"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"disabled"),": The apiserver does not use agent tunnels to communicate with kubelets or cluster endpoints.\nThis mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl exec")," and ",(0,i.kt)("inlineCode",{parentName:"li"},"kubectl logs"),"."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"agent")," (default): The apiserver uses agent tunnels to communicate with kubelets.\nThis is mode requires that servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"pod"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes.\n",(0,i.kt)("strong",{parentName:"li"},"NOTE"),": This will not work when using a CNI that uses its own IPAM and does not respect the node's PodCIDR allocation. ",(0,i.kt)("inlineCode",{parentName:"li"},"cluster")," or ",(0,i.kt)("inlineCode",{parentName:"li"},"agent")," should be used with these CNIs instead."),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("inlineCode",{parentName:"li"},"cluster"),": The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.")),(0,i.kt)("h2",{id:"dual-stack-ipv4--ipv6-networking"},"Dual-stack (IPv4 + IPv6) Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Experimental support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1"),".",(0,i.kt)("br",{parentName:"p"}),"\n","Stable support is available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1"},"v1.23.7+k3s1"),". ")),(0,i.kt)("admonition",{title:"Known Issue ",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Kubernetes v1.24 and v1.25 include ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/111695"},"an issue")," that ignores the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre"},'--kubelet-arg="node-ip=0.0.0.0" # To proritize IPv4 traffic\n#OR\n--kubelet-arg="node-ip=::" # To proritize IPv6 traffic\n'))),(0,i.kt)("p",null,"Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only."),(0,i.kt)("p",null,"To enable dual-stack in K3s, you must provide valid dual-stack ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," on all server nodes. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre"},"--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112\n")),(0,i.kt)("p",null,"Note that you may configure any valid ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," values, but the above masks are recommended. If you change the ",(0,i.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," mask, you should also change the ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv4")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv6")," values to match the planned pods per node and total node count. The largest supported ",(0,i.kt)("inlineCode",{parentName:"p"},"service-cidr")," mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud."),(0,i.kt)("p",null,"If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin's dual-stack documentation and verify if network policies can be enabled."),(0,i.kt)("h2",{id:"single-stack-ipv6-networking"},"Single-stack IPv6 Networking"),(0,i.kt)("admonition",{title:"Version Gate",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"Available as of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1"},"v1.22.9+k3s1"))),(0,i.kt)("admonition",{title:"Known Issue",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl ",(0,i.kt)("inlineCode",{parentName:"p"},"net.ipv6.conf.all.accept_ra=2"),"; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of ",(0,i.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/91507"},"man-in-the-middle attacks"),".")),(0,i.kt)("p",null,"Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the ",(0,i.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"--service-cidr")," flags. This is an example of a valid configuration:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112\n")),(0,i.kt)("h2",{id:"distributed-hybrid-or-multicloud-cluster"},"Distributed hybrid or multicloud cluster"),(0,i.kt)("p",null,"A K3s cluster can still be deployed on nodes which use different private networks and are not directly connected (e.g. nodes in different public clouds). To achieve this, K3s sets a mesh of tunnels that become a VPN mesh. These nodes must have have an assigned IP through which they can be reached (e.g. a public IP). The server traffic will use a websocket tunnel and the data-plane traffic will use a wireguard tunnel."),(0,i.kt)("p",null,"To enable this type of deployment, you must add the following parameters on servers:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip\n")),(0,i.kt)("p",null,"and on agents:"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<AGENT_EXTERNAL_IP>\n")),(0,i.kt)("p",null,"where ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," is the IP through which we can reach the server node and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," is the IP through which we can reach the agent/worker node. Note that the ",(0,i.kt)("inlineCode",{parentName:"p"},"K3S_URL")," config parameter in the agent/worker should use the ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," to be able to connect to it. Remember to check the ",(0,i.kt)("a",{parentName:"p",href:"/kr/installation/requirements#networking"},"Networking Requirements")," and allow access to the listed ports on both internal and external addresses."),(0,i.kt)("p",null,"Both ",(0,i.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," and ",(0,i.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," must have connectivity between them and are normally public IPs."),(0,i.kt)("admonition",{title:"Dynamic IPs",type:"info"},(0,i.kt)("p",{parentName:"admonition"},"If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the ",(0,i.kt)("inlineCode",{parentName:"p"},"--node-external-ip")," parameter to reflect the new IP. If running k3s as a service, you must modify ",(0,i.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service")," then run:"),(0,i.kt)("pre",{parentName:"admonition"},(0,i.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl daemon-reload\nsystemctl restart k3s\n"))),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.")),(0,i.kt)("admonition",{title:"Warning",type:"caution"},(0,i.kt)("p",{parentName:"admonition"},"Embedded etcd will not use external IPs for communication. If using embedded etcd; all server nodes must be reachable to each other via their private IPs.")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/d428bf88.93f1d6ad.js b/kr/assets/js/d428bf88.d3a65457.js
similarity index 96%
rename from kr/assets/js/d428bf88.93f1d6ad.js
rename to kr/assets/js/d428bf88.d3a65457.js
index 5442654da..60d50e485 100644
--- a/kr/assets/js/d428bf88.93f1d6ad.js
+++ b/kr/assets/js/d428bf88.d3a65457.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3083],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var i=n.createContext({}),s=function(e){var t=n.useContext(i),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},u=function(e){var t=s(e.components);return n.createElement(i.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,i=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=s(r),f=a,m=d["".concat(i,".").concat(f)]||d[f]||p[f]||o;return r?n.createElement(m,c(c({ref:t},u),{},{components:r})):n.createElement(m,c({ref:t},u))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,c=new Array(o);c[0]=d;var l={};for(var i in t)hasOwnProperty.call(t,i)&&(l[i]=t[i]);l.originalType=e,l.mdxType="string"==typeof e?e:a,c[1]=l;for(var s=2;s<o;s++)c[s]=r[s];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},7987:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>i,contentTitle:()=>c,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>s});var n=r(3117),a=(r(7294),r(3905));const o={},c=void 0,l={unversionedId:"datastore/cluster-loadbalancer",id:"datastore/cluster-loadbalancer",title:"cluster-loadbalancer",description:"",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",sourceDirName:"datastore",slug:"/datastore/cluster-loadbalancer",permalink:"/kr/datastore/cluster-loadbalancer",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{},sidebar:"mySidebar",previous:{title:"High Availability External DB",permalink:"/kr/datastore/ha"},next:{title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",permalink:"/kr/cluster-access/"}},i={},s=[],u={toc:s};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3083],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var i=n.createContext({}),s=function(e){var t=n.useContext(i),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},u=function(e){var t=s(e.components);return n.createElement(i.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,i=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=s(r),f=a,m=d["".concat(i,".").concat(f)]||d[f]||p[f]||o;return r?n.createElement(m,c(c({ref:t},u),{},{components:r})):n.createElement(m,c({ref:t},u))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,c=new Array(o);c[0]=d;var l={};for(var i in t)hasOwnProperty.call(t,i)&&(l[i]=t[i]);l.originalType=e,l.mdxType="string"==typeof e?e:a,c[1]=l;for(var s=2;s<o;s++)c[s]=r[s];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},7987:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>i,contentTitle:()=>c,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>s});var n=r(3117),a=(r(7294),r(3905));const o={},c=void 0,l={unversionedId:"datastore/cluster-loadbalancer",id:"datastore/cluster-loadbalancer",title:"cluster-loadbalancer",description:"",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",sourceDirName:"datastore",slug:"/datastore/cluster-loadbalancer",permalink:"/kr/datastore/cluster-loadbalancer",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{},sidebar:"mySidebar",previous:{title:"High Availability External DB",permalink:"/kr/datastore/ha"},next:{title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",permalink:"/kr/cluster-access/"}},i={},s=[],u={toc:s};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/d539ae32.fc54c55c.js b/kr/assets/js/d539ae32.a4ce899b.js
similarity index 99%
rename from kr/assets/js/d539ae32.fc54c55c.js
rename to kr/assets/js/d539ae32.a4ce899b.js
index 736e34fa2..b5dc38283 100644
--- a/kr/assets/js/d539ae32.fc54c55c.js
+++ b/kr/assets/js/d539ae32.a4ce899b.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7453],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(7294);function c(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){c(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,c=function(e,t){if(null==e)return{};var r,n,c={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(c[r]=e[r]);return c}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(c[r]=e[r])}return c}var o=n.createContext({}),i=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},u=function(e){var t=i(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},k=n.forwardRef((function(e,t){var r=e.components,c=e.mdxType,a=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),k=i(r),m=c,d=k["".concat(o,".").concat(m)]||k[m]||p[m]||a;return r?n.createElement(d,l(l({ref:t},u),{},{components:r})):n.createElement(d,l({ref:t},u))}));function m(e,t){var r=arguments,c=t&&t.mdxType;if("string"==typeof e||c){var a=r.length,l=new Array(a);l[0]=k;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:c,l[1]=s;for(var i=2;i<a;i++)l[i]=r[i];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}k.displayName="MDXCreateElement"},8309:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>l,default:()=>p,frontMatter:()=>a,metadata:()=>s,toc:()=>i});var n=r(3117),c=(r(7294),r(3905));const a={title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",weight:21},l=void 0,s={unversionedId:"cluster-access/cluster-access",id:"cluster-access/cluster-access",title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",description:"/etc/rancher/k3s/k3s.yaml\uc5d0 \uc800\uc7a5\ub41c kubeconfig \ud30c\uc77c\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4\ub97c \uad6c\uc131\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. kubectl \ub610\ub294 helm\uacfc \uac19\uc740 \uc5c5\uc2a4\ud2b8\ub9bc Kubernetes \uba85\ub839\uc904 \ub3c4\uad6c\ub97c \uc124\uce58\ud55c \uacbd\uc6b0 \uc62c\ubc14\ub978 kubeconfig \uacbd\ub85c\ub85c \uad6c\uc131\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774 \uc791\uc5c5\uc740 kubeconfig \ud658\uacbd \ubcc0\uc218\ub97c \ub0b4\ubcf4\ub0b4\uac70\ub098 --kubeconfig \uba85\ub839\uc904 \ud50c\ub798\uadf8\ub97c \ud638\ucd9c\ud558\uc5ec \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uc544\ub798 \uc608\uc2dc\ub97c \ucc38\uace0\ud558\uc138\uc694.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",sourceDirName:"cluster-access",slug:"/cluster-access/",permalink:"/kr/cluster-access/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",weight:21},sidebar:"mySidebar",previous:{title:"cluster-loadbalancer",permalink:"/kr/datastore/cluster-loadbalancer"},next:{title:"\uc5c5\uadf8\ub808\uc774\ub4dc",permalink:"/kr/upgrades/"}},o={},i=[{value:"\uc678\ubd80\uc5d0\uc11c kubectl\ub85c \ud074\ub7ec\uc2a4\ud130\uc5d0 \uc811\uadfc\ud558\uae30",id:"\uc678\ubd80\uc5d0\uc11c-kubectl\ub85c-\ud074\ub7ec\uc2a4\ud130\uc5d0-\uc811\uadfc\ud558\uae30",level:3}],u={toc:i};function p(e){let{components:t,...r}=e;return(0,c.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,c.kt)("p",null,(0,c.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml"),"\uc5d0 \uc800\uc7a5\ub41c kubeconfig \ud30c\uc77c\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4\ub97c \uad6c\uc131\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. kubectl \ub610\ub294 helm\uacfc \uac19\uc740 \uc5c5\uc2a4\ud2b8\ub9bc Kubernetes \uba85\ub839\uc904 \ub3c4\uad6c\ub97c \uc124\uce58\ud55c \uacbd\uc6b0 \uc62c\ubc14\ub978 kubeconfig \uacbd\ub85c\ub85c \uad6c\uc131\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774 \uc791\uc5c5\uc740 ",(0,c.kt)("inlineCode",{parentName:"p"},"kubeconfig")," \ud658\uacbd \ubcc0\uc218\ub97c \ub0b4\ubcf4\ub0b4\uac70\ub098 ",(0,c.kt)("inlineCode",{parentName:"p"},"--kubeconfig")," \uba85\ub839\uc904 \ud50c\ub798\uadf8\ub97c \ud638\ucd9c\ud558\uc5ec \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uc544\ub798 \uc608\uc2dc\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,c.kt)("p",null,"KUBECONFIG \ud658\uacbd \ubcc0\uc218\ub97c \ud65c\uc6a9\ud569\ub2c8\ub2e4:"),(0,c.kt)("pre",null,(0,c.kt)("code",{parentName:"pre",className:"language-bash"},"export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\nkubectl get pods --all-namespaces\nhelm ls --all-namespaces\n")),(0,c.kt)("p",null,"\ub610\ub294 \uba85\ub839\uc5d0 kubeconfig \ud30c\uc77c\uc758 \uc704\uce58\ub97c \uc9c0\uc815\ud569\ub2c8\ub2e4:"),(0,c.kt)("pre",null,(0,c.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces\nhelm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces\n")),(0,c.kt)("h3",{id:"\uc678\ubd80\uc5d0\uc11c-kubectl\ub85c-\ud074\ub7ec\uc2a4\ud130\uc5d0-\uc811\uadfc\ud558\uae30"},"\uc678\ubd80\uc5d0\uc11c kubectl\ub85c \ud074\ub7ec\uc2a4\ud130\uc5d0 \uc811\uadfc\ud558\uae30"),(0,c.kt)("p",null,(0,c.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml"),"\ud30c\uc77c\uc744 \ud074\ub7ec\uc2a4\ud130 \uc678\ubd80\uc5d0 \uc704\uce58\ud55c \uba38\uc2e0\uc758 ",(0,c.kt)("inlineCode",{parentName:"p"},"~/.kube/config"),"\ub85c \ubcf5\uc0ac\ud569\ub2c8\ub2e4. \uadf8\ub7f0 \ub2e4\uc74c ",(0,c.kt)("inlineCode",{parentName:"p"},"server")," \ud544\ub4dc\uc758 \uac12\uc744 K3s \uc11c\ubc84\uc758 IP \ub610\ub294 \uc774\ub984\uc73c\ub85c \ubc14\uafc9\ub2c8\ub2e4. \uc774\uc81c ",(0,c.kt)("inlineCode",{parentName:"p"},"kubectl"),"\uc774 K3s \ud074\ub7ec\uc2a4\ud130\ub97c \uad00\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7453],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(7294);function c(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){c(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,c=function(e,t){if(null==e)return{};var r,n,c={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(c[r]=e[r]);return c}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(c[r]=e[r])}return c}var o=n.createContext({}),i=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},u=function(e){var t=i(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},k=n.forwardRef((function(e,t){var r=e.components,c=e.mdxType,a=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),k=i(r),m=c,d=k["".concat(o,".").concat(m)]||k[m]||p[m]||a;return r?n.createElement(d,l(l({ref:t},u),{},{components:r})):n.createElement(d,l({ref:t},u))}));function m(e,t){var r=arguments,c=t&&t.mdxType;if("string"==typeof e||c){var a=r.length,l=new Array(a);l[0]=k;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:c,l[1]=s;for(var i=2;i<a;i++)l[i]=r[i];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}k.displayName="MDXCreateElement"},8309:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>l,default:()=>p,frontMatter:()=>a,metadata:()=>s,toc:()=>i});var n=r(3117),c=(r(7294),r(3905));const a={title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",weight:21},l=void 0,s={unversionedId:"cluster-access/cluster-access",id:"cluster-access/cluster-access",title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",description:"/etc/rancher/k3s/k3s.yaml\uc5d0 \uc800\uc7a5\ub41c kubeconfig \ud30c\uc77c\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4\ub97c \uad6c\uc131\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. kubectl \ub610\ub294 helm\uacfc \uac19\uc740 \uc5c5\uc2a4\ud2b8\ub9bc Kubernetes \uba85\ub839\uc904 \ub3c4\uad6c\ub97c \uc124\uce58\ud55c \uacbd\uc6b0 \uc62c\ubc14\ub978 kubeconfig \uacbd\ub85c\ub85c \uad6c\uc131\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774 \uc791\uc5c5\uc740 kubeconfig \ud658\uacbd \ubcc0\uc218\ub97c \ub0b4\ubcf4\ub0b4\uac70\ub098 --kubeconfig \uba85\ub839\uc904 \ud50c\ub798\uadf8\ub97c \ud638\ucd9c\ud558\uc5ec \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uc544\ub798 \uc608\uc2dc\ub97c \ucc38\uace0\ud558\uc138\uc694.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",sourceDirName:"cluster-access",slug:"/cluster-access/",permalink:"/kr/cluster-access/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ud074\ub7ec\uc2a4\ud130 \uc811\uadfc",weight:21},sidebar:"mySidebar",previous:{title:"cluster-loadbalancer",permalink:"/kr/datastore/cluster-loadbalancer"},next:{title:"\uc5c5\uadf8\ub808\uc774\ub4dc",permalink:"/kr/upgrades/"}},o={},i=[{value:"\uc678\ubd80\uc5d0\uc11c kubectl\ub85c \ud074\ub7ec\uc2a4\ud130\uc5d0 \uc811\uadfc\ud558\uae30",id:"\uc678\ubd80\uc5d0\uc11c-kubectl\ub85c-\ud074\ub7ec\uc2a4\ud130\uc5d0-\uc811\uadfc\ud558\uae30",level:3}],u={toc:i};function p(e){let{components:t,...r}=e;return(0,c.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,c.kt)("p",null,(0,c.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml"),"\uc5d0 \uc800\uc7a5\ub41c kubeconfig \ud30c\uc77c\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ud074\ub7ec\uc2a4\ud130\uc5d0 \ub300\ud55c \uc561\uc138\uc2a4\ub97c \uad6c\uc131\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. kubectl \ub610\ub294 helm\uacfc \uac19\uc740 \uc5c5\uc2a4\ud2b8\ub9bc Kubernetes \uba85\ub839\uc904 \ub3c4\uad6c\ub97c \uc124\uce58\ud55c \uacbd\uc6b0 \uc62c\ubc14\ub978 kubeconfig \uacbd\ub85c\ub85c \uad6c\uc131\ud574\uc57c \ud569\ub2c8\ub2e4. \uc774 \uc791\uc5c5\uc740 ",(0,c.kt)("inlineCode",{parentName:"p"},"kubeconfig")," \ud658\uacbd \ubcc0\uc218\ub97c \ub0b4\ubcf4\ub0b4\uac70\ub098 ",(0,c.kt)("inlineCode",{parentName:"p"},"--kubeconfig")," \uba85\ub839\uc904 \ud50c\ub798\uadf8\ub97c \ud638\ucd9c\ud558\uc5ec \uc218\ud589\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uc544\ub798 \uc608\uc2dc\ub97c \ucc38\uace0\ud558\uc138\uc694."),(0,c.kt)("p",null,"KUBECONFIG \ud658\uacbd \ubcc0\uc218\ub97c \ud65c\uc6a9\ud569\ub2c8\ub2e4:"),(0,c.kt)("pre",null,(0,c.kt)("code",{parentName:"pre",className:"language-bash"},"export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\nkubectl get pods --all-namespaces\nhelm ls --all-namespaces\n")),(0,c.kt)("p",null,"\ub610\ub294 \uba85\ub839\uc5d0 kubeconfig \ud30c\uc77c\uc758 \uc704\uce58\ub97c \uc9c0\uc815\ud569\ub2c8\ub2e4:"),(0,c.kt)("pre",null,(0,c.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces\nhelm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces\n")),(0,c.kt)("h3",{id:"\uc678\ubd80\uc5d0\uc11c-kubectl\ub85c-\ud074\ub7ec\uc2a4\ud130\uc5d0-\uc811\uadfc\ud558\uae30"},"\uc678\ubd80\uc5d0\uc11c kubectl\ub85c \ud074\ub7ec\uc2a4\ud130\uc5d0 \uc811\uadfc\ud558\uae30"),(0,c.kt)("p",null,(0,c.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml"),"\ud30c\uc77c\uc744 \ud074\ub7ec\uc2a4\ud130 \uc678\ubd80\uc5d0 \uc704\uce58\ud55c \uba38\uc2e0\uc758 ",(0,c.kt)("inlineCode",{parentName:"p"},"~/.kube/config"),"\ub85c \ubcf5\uc0ac\ud569\ub2c8\ub2e4. \uadf8\ub7f0 \ub2e4\uc74c ",(0,c.kt)("inlineCode",{parentName:"p"},"server")," \ud544\ub4dc\uc758 \uac12\uc744 K3s \uc11c\ubc84\uc758 IP \ub610\ub294 \uc774\ub984\uc73c\ub85c \ubc14\uafc9\ub2c8\ub2e4. \uc774\uc81c ",(0,c.kt)("inlineCode",{parentName:"p"},"kubectl"),"\uc774 K3s \ud074\ub7ec\uc2a4\ud130\ub97c \uad00\ub9ac\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/dd0fba39.7e4cd2c7.js b/kr/assets/js/dd0fba39.e12b3c6b.js
similarity index 99%
rename from kr/assets/js/dd0fba39.7e4cd2c7.js
rename to kr/assets/js/dd0fba39.e12b3c6b.js
index 84e00624b..b9c4daabf 100644
--- a/kr/assets/js/dd0fba39.7e4cd2c7.js
+++ b/kr/assets/js/dd0fba39.e12b3c6b.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7713],{3905:(t,e,a)=>{a.d(e,{Zo:()=>s,kt:()=>k});var n=a(7294);function r(t,e,a){return e in t?Object.defineProperty(t,e,{value:a,enumerable:!0,configurable:!0,writable:!0}):t[e]=a,t}function l(t,e){var a=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),a.push.apply(a,n)}return a}function i(t){for(var e=1;e<arguments.length;e++){var a=null!=arguments[e]?arguments[e]:{};e%2?l(Object(a),!0).forEach((function(e){r(t,e,a[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(a,e))}))}return t}function o(t,e){if(null==t)return{};var a,n,r=function(t,e){if(null==t)return{};var a,n,r={},l=Object.keys(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||(r[a]=t[a]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(t,a)&&(r[a]=t[a])}return r}var p=n.createContext({}),d=function(t){var e=n.useContext(p),a=e;return t&&(a="function"==typeof t?t(e):i(i({},e),t)),a},s=function(t){var e=d(t.components);return n.createElement(p.Provider,{value:e},t.children)},m={inlineCode:"code",wrapper:function(t){var e=t.children;return n.createElement(n.Fragment,{},e)}},u=n.forwardRef((function(t,e){var a=t.components,r=t.mdxType,l=t.originalType,p=t.parentName,s=o(t,["components","mdxType","originalType","parentName"]),u=d(a),k=r,c=u["".concat(p,".").concat(k)]||u[k]||m[k]||l;return a?n.createElement(c,i(i({ref:e},s),{},{components:a})):n.createElement(c,i({ref:e},s))}));function k(t,e){var a=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=a.length,i=new Array(l);i[0]=u;var o={};for(var p in e)hasOwnProperty.call(e,p)&&(o[p]=e[p]);o.originalType=t,o.mdxType="string"==typeof t?t:r,i[1]=o;for(var d=2;d<l;d++)i[d]=a[d];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}u.displayName="MDXCreateElement"},2285:(t,e,a)=>{a.r(e),a.d(e,{assets:()=>p,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var n=a(3117),r=(a(7294),a(3905));const l={title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",weight:50},i=void 0,o={unversionedId:"datastore/datastore",id:"datastore/datastore",title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",description:"etcd\uac00 \uc544\ub2cc \ub2e4\ub978 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub294 \uae30\ub2a5\uc740 K3s\ub97c \ub2e4\ub978 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubc30\ud3ec\ud310\uacfc \ucc28\ubcc4\ud654\ud569\ub2c8\ub2e4. \uc774 \uae30\ub2a5\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc6b4\uc601\uc790\uc5d0\uac8c \uc720\uc5f0\uc131\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc635\uc158\uc744 \ud1b5\ud574 \uc0ac\uc6a9 \uc0ac\ub840\uc5d0 \uac00\uc7a5 \uc801\ud569\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc120\ud0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4:",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/datastore.md",sourceDirName:"datastore",slug:"/datastore/",permalink:"/kr/datastore/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",weight:50},sidebar:"mySidebar",previous:{title:"Uninstalling K3s",permalink:"/kr/installation/uninstall"},next:{title:"Backup and Restore",permalink:"/kr/datastore/backup-restore"}},p={},d=[{value:"\uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131 \ud30c\ub77c\ubbf8\ud130",id:"\uc678\ubd80-\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uad6c\uc131-\ud30c\ub77c\ubbf8\ud130",level:3},{value:"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc5d4\ub4dc\ud3ec\uc778\ud2b8 \ud615\uc2dd \ubc0f \uae30\ub2a5",id:"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uc5d4\ub4dc\ud3ec\uc778\ud2b8-\ud615\uc2dd-\ubc0f-\uae30\ub2a5",level:3}],s=t=>function(e){return console.warn("Component "+t+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",e)},m=s("Tabs"),u=s("TabItem"),k={toc:d};function c(t){let{components:e,...a}=t;return(0,r.kt)("wrapper",(0,n.Z)({},k,a,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"etcd\uac00 \uc544\ub2cc \ub2e4\ub978 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub294 \uae30\ub2a5\uc740 K3s\ub97c \ub2e4\ub978 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubc30\ud3ec\ud310\uacfc \ucc28\ubcc4\ud654\ud569\ub2c8\ub2e4. \uc774 \uae30\ub2a5\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc6b4\uc601\uc790\uc5d0\uac8c \uc720\uc5f0\uc131\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc635\uc158\uc744 \ud1b5\ud574 \uc0ac\uc6a9 \uc0ac\ub840\uc5d0 \uac00\uc7a5 \uc801\ud569\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc120\ud0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\ud300\uc5d0 etcd \uc6b4\uc601\uc5d0 \ub300\ud55c \uc804\ubb38 \uc9c0\uc2dd\uc774 \uc5c6\ub294 \uacbd\uc6b0, MySQL \ub610\ub294 PostgreSQL\uacfc \uac19\uc740 \uc5d4\ud130\ud504\ub77c\uc774\uc988\uae09 SQL \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc120\ud0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},"CI/CD \ud658\uacbd\uc5d0\uc11c \ub2e8\uc21c\ud558\uace0 \uc218\uba85\uc774 \uc9e7\uc740 \ud074\ub7ec\uc2a4\ud130\ub97c \uc2e4\ud589\ud574\uc57c \ud558\ub294 \uacbd\uc6b0, \uc784\ubca0\ub514\ub4dc SQLite \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},"\uc5e3\uc9c0\uc5d0 Kubernetes\ub97c \ubc30\ud3ec\ud558\uace0 \uace0\uac00\uc6a9\uc131 \uc194\ub8e8\uc158\uc774 \ud544\uc694\ud558\uc9c0\ub9cc \uc5e3\uc9c0\uc5d0\uc11c \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uad00\ub9ac\ud558\ub294 \ub370 \ub530\ub978 \uc6b4\uc601 \uc624\ubc84\ud5e4\ub4dc\ub97c \uac10\ub2f9\ud560 \uc218 \uc5c6\ub294 \uacbd\uc6b0, \uc784\ubca0\ub514\ub4dc etcd\ub97c \uae30\ubc18\uc73c\ub85c \uad6c\ucd95\ub41c K3s\uc758 \uc784\ubca0\ub514\ub4dc HA \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"K3s\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc635\uc158\uc744 \uc9c0\uc6d0\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\uc784\ubca0\ub514\ub4dc ",(0,r.kt)("a",{parentName:"strong",href:"https://www.sqlite.org/index.html"},"SQLite")),(0,r.kt)("br",{parentName:"li"}),"SQLite\ub294 \uc5ec\ub7ec \uc11c\ubc84\uac00 \uc788\ub294 \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c\ub294 \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.",(0,r.kt)("br",{parentName:"li"}),"SQLite\ub294 \uae30\ubcf8 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc774\uba70, \ub2e4\ub978 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131\uc774 \uc5c6\uace0 \ub514\uc2a4\ud06c\uc5d0 \uc784\ubca0\ub514\ub4dc etcd \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud30c\uc77c\uc774 \uc5c6\ub294 \uacbd\uc6b0 \uc0ac\uc6a9\ub429\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\uc784\ubca0\ub514\ub4dc etcd"),(0,r.kt)("br",{parentName:"li"}),"\uc5ec\ub7ec \uc11c\ubc84\uc5d0\uc11c \uc784\ubca0\ub514\ub4dc etcd\ub97c \uc0ac\uc6a9\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"li",href:"/kr/datastore/ha-embedded"},"\uace0\uac00\uc6a9\uc131 \uc784\ubca0\ub514\ub4dc etcd")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.\nK3s\uac00 \uc0c8 etcd \ud074\ub7ec\uc2a4\ud130\ub97c \ucd08\uae30\ud654\ud558\uac70\ub098 \uae30\uc874 etcd \ud074\ub7ec\uc2a4\ud130\uc5d0 \uac00\uc785\ud558\ub3c4\ub85d \uad6c\uc131\ub418\uc5c8\uac70\ub098 \uc2dc\uc791 \uc2dc \ub514\uc2a4\ud06c\uc5d0 etcd \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud30c\uc77c\uc774 \uc788\ub294 \uacbd\uc6b0 \uc784\ubca0\ub514\ub4dc etcd\uac00 \uc790\ub3d9\uc73c\ub85c \uc120\ud0dd\ub429\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\uc678\ubd80 \ub370\uc774\ud130\ubca0\uc774\uc2a4"),(0,r.kt)("br",{parentName:"li"}),"\uc5ec\ub7ec \uc11c\ubc84\uc5d0\uc11c \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"li",href:"/kr/datastore/ha"},"\uace0\uac00\uc6a9\uc131 \uc678\ubd80 DB")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.",(0,r.kt)("br",{parentName:"li"}),"\uc9c0\uc6d0\ub418\ub294 \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://etcd.io/"},"etcd")," (3.5.4 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.mysql.com/"},"MySQL")," (5.7 and 8.0 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://mariadb.org/"},"MariaDB")," (10.6.8 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.postgresql.org/"},"PostgreSQL")," (10.7, 11.5, and 14.2 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)")))),(0,r.kt)("h3",{id:"\uc678\ubd80-\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uad6c\uc131-\ud30c\ub77c\ubbf8\ud130"},"\uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131 \ud30c\ub77c\ubbf8\ud130"),(0,r.kt)("p",null,"PostgreSQL, MySQL, etcd\uc640 \uac19\uc740 \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 K3s\uac00 \uc5f0\uacb0 \ubc29\ubc95\uc744 \uc54c \uc218 \uc788\ub3c4\ub85d ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ud30c\ub77c\ubbf8\ud130\ub97c \uc124\uc815\ud574\uc57c \ud569\ub2c8\ub2e4. \ub610\ud55c \uc5f0\uacb0\uc758 \uc778\uc99d \ubc0f \uc554\ud638\ud654\ub97c \uad6c\uc131\ud558\ub294 \ud30c\ub77c\ubbf8\ud130\ub97c \uc9c0\uc815\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc544\ub798 \ud45c\uc5d0\ub294 \uc774\ub7ec\ud55c \ub9e4\uac1c\ubcc0\uc218\uac00 \uc694\uc57d\ub418\uc5b4 \uc788\uc73c\uba70, CLI \ud50c\ub798\uadf8 \ub610\ub294 \ud658\uacbd \ubcc0\uc218\ub85c \uc804\ub2ec\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"CLI Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"PostgreSQL, MySQL \ub610\ub294 etcd \uc5f0\uacb0 \ubb38\uc790\uc5f4\uc744 \uc9c0\uc815\ud569\ub2c8\ub2e4. \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \uc5f0\uacb0\uc744 \uc124\uba85\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\ub294 \ubb38\uc790\uc5f4\uc785\ub2c8\ub2e4. \uc774 \ubb38\uc790\uc5f4\uc758 \uad6c\uc870\ub294 \uac01 \ubc31\uc5d4\ub4dc\uc5d0 \ub530\ub77c \ub2e4\ub974\uba70 \uc544\ub798\uc5d0 \uc790\uc138\ud788 \uc124\uba85\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc640\uc758 \ud1b5\uc2e0\uc744 \ubcf4\ud638\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\ub294 TLS \uc778\uc99d \uae30\uad00(CA: Certificate Authority) \ud30c\uc77c\uc785\ub2c8\ub2e4. \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uc9c0\uc815 \uc778\uc99d \uae30\uad00\uc5d0\uc11c \uc11c\uba85\ud55c \uc778\uc99d\uc11c\ub97c \uc0ac\uc6a9\ud558\uc5ec TLS\ub97c \ud1b5\ud574 \uc694\uccad\uc744 \uc81c\uacf5\ud558\ub294 \uacbd\uc6b0, \uc774 \ub9e4\uac1c\ubcc0\uc218\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud574\ub2f9 CA\ub97c \uc9c0\uc815\ud558\uba74 K3s \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc778\uc99d\uc11c\ub97c \uc62c\ubc14\ub974\uac8c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc99d\uc11c \uae30\ubc18 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 TLS \uc778\uc99d\uc11c \ud30c\uc77c\uc785\ub2c8\ub2e4. \uc774 \uae30\ub2a5\uc744 \uc0ac\uc6a9\ud558\ub824\uba74 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uac00 \ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc99d\uc11c \uae30\ubc18 \uc778\uc99d\uc744 \uc9c0\uc6d0\ud558\ub3c4\ub85d \uad6c\uc131\ub418\uc5b4 \uc788\uc5b4\uc57c \ud569\ub2c8\ub2e4. \uc774 \ud30c\ub77c\ubbf8\ud130\ub97c \uc9c0\uc815\ud558\ub294 \uacbd\uc6b0 ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-keyfile")," \ud30c\ub77c\ubbf8\ud130\ub3c4 \uc9c0\uc815\ud574\uc57c \ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc99d\uc11c \uae30\ubc18 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 TLS \ud0a4 \ud30c\uc77c\uc785\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uc774\uc804 ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-certfile")," \ub9e4\uac1c\ubcc0\uc218\ub97c \ucc38\uc870\ud558\uc138\uc694.")))),(0,r.kt)("p",null,"\ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc790\uaca9 \uc99d\uba85\uc774\ub098 \uae30\ud0c0 \ubbfc\uac10\ud55c \uc815\ubcf4\uac00 \ud504\ub85c\uc138\uc2a4 \uc815\ubcf4\uc758 \uc77c\ubd80\ub85c \ub178\ucd9c\ub418\uc9c0 \uc54a\ub3c4\ub85d \uc774\ub7ec\ud55c \ub9e4\uac1c \ubcc0\uc218\ub97c \uba85\ub839\uc904 \uc778\uc218\uac00 \uc544\ub2cc \ud658\uacbd \ubcc0\uc218\ub85c \uc124\uc815\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uc5d4\ub4dc\ud3ec\uc778\ud2b8-\ud615\uc2dd-\ubc0f-\uae30\ub2a5"},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc5d4\ub4dc\ud3ec\uc778\ud2b8 \ud615\uc2dd \ubc0f \uae30\ub2a5"),(0,r.kt)("p",null,"\uc55e\uc11c \uc5b8\uae09\ud588\ub4ef\uc774, ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ub9e4\uac1c\ubcc0\uc218\uc5d0 \uc804\ub2ec\ub418\ub294 \uac12\uc758 \ud615\uc2dd\uc740 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \ubc31\uc5d4\ub4dc\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9d1\ub2c8\ub2e4. \ub2e4\uc74c\uc740 \uc9c0\uc6d0\ub418\ub294 \uac01 \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \uc774 \ud615\uc2dd\uacfc \uae30\ub2a5\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,r.kt)(m,{mdxType:"Tabs"},(0,r.kt)(u,{value:"PostgreSQL",mdxType:"TabItem"},(0,r.kt)("p",null,"\uac00\uc7a5 \uc77c\ubc18\uc801\uc778 \ud615\uc2dd\uc758 PostgreSQL\uc6a9 \ub370\uc774\ud130 \uc800\uc7a5\uc18c \uc5d4\ub4dc\ud3ec\uc778\ud2b8 \ub9e4\uac1c \ubcc0\uc218\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ud615\uc2dd\uc744 \uac16\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"postgres://username:password@hostname:port/database-name")),(0,r.kt)("p",null,"\ub354 \uace0\uae09 \uad6c\uc131 \ub9e4\uac1c\ubcc0\uc218\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://godoc.org/github.com/lib/pq"},"https://godoc.org/github.com/lib/pq")," \uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc774\ub984\uc744 \uc9c0\uc815\ud588\ub294\ub370 \ud574\ub2f9 \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uc874\uc7ac\ud558\uc9c0 \uc54a\uc73c\uba74 \uc11c\ubc84\uc5d0\uc11c \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc0dd\uc131\uc744 \uc2dc\ub3c4\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc5d4\ub4dc\ud3ec\uc778\ud2b8\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"postgres://"),"\ub9cc \uc81c\uacf5\ud558\ub294 \uacbd\uc6b0, K3s\ub294 \ub2e4\uc74c\uc744 \uc2dc\ub3c4\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\uc0ac\uc6a9\uc790 \uc774\ub984\uacfc \ube44\ubc00\ubc88\ud638\ub85c ",(0,r.kt)("inlineCode",{parentName:"li"},"postgres"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec localhost\uc5d0 \uc5f0\uacb0\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes"),"\ub77c\ub294 \uc774\ub984\uc758 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4."))),(0,r.kt)(u,{value:"MySQL / MariaDB",mdxType:"TabItem"},(0,r.kt)("p",null,"\uac00\uc7a5 \uc77c\ubc18\uc801\uc778 \ud615\ud0dc\uc778 MySQL\uacfc MariaDB\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ud30c\ub77c\ubbf8\ud130\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ud615\uc2dd\uc744 \uac16\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"mysql://username:password@tcp(hostname:3306)/database-name")),(0,r.kt)("p",null,"\ub354 \uace0\uae09 \uad6c\uc131 \ub9e4\uac1c\ubcc0\uc218\ub97c \uc0ac\uc6a9\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc774\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/go-sql-driver/mysql#dsn-data-source-name"},"https://github.com/go-sql-driver/mysql#dsn-data-source-name")," \uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"K3s\uc758 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/1093"},"\uc54c\ub824\uc9c4 \uc774\uc288"),"\ub85c \uc778\ud574 ",(0,r.kt)("inlineCode",{parentName:"p"},"tls"),' \ud30c\ub77c\ubbf8\ud130\ub97c \uc124\uc815\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4. TLS \ud1b5\uc2e0\uc740 \uc9c0\uc6d0\ub418\uc9c0\ub9cc \uc608\ub97c \ub4e4\uc5b4 \uc774 \ub9e4\uac1c\ubcc0\uc218\ub97c "skip-verify"\ub85c \uc124\uc815\ud558\uc5ec K3s\uac00 \uc778\uc99d\uc11c \ud655\uc778\uc744 \uac74\ub108\ub6f0\ub3c4\ub85d \ud560 \uc218\ub294 \uc5c6\uc2b5\ub2c8\ub2e4.'),(0,r.kt)("p",null,"\ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc774\ub984\uc744 \uc9c0\uc815\ud588\ub294\ub370 \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uc874\uc7ac\ud558\uc9c0 \uc54a\uc73c\uba74 \uc11c\ubc84\uc5d0\uc11c \ub9cc\ub4e4\ub824\uace0 \uc2dc\ub3c4\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc5d4\ub4dc\ud3ec\uc778\ud2b8\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"mysql://"),"\ub9cc \uc81c\uacf5\ud558\ub294 \uacbd\uc6b0, K3s\ub294 \ub2e4\uc74c\uc744 \uc2dc\ub3c4\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"root")," \uc0ac\uc6a9\uc790\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/run/mysqld/mysqld.sock"),"\uc5d0\uc11c MySQL \uc18c\ucf13\uc5d0 \uc5f0\uacb0\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes"),"\ub77c\ub294 \uc774\ub984\uc758 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4."))),(0,r.kt)(u,{value:"etcd",mdxType:"TabItem"},(0,r.kt)("p",null,"\uac00\uc7a5 \uc77c\ubc18\uc801\uc778 \ud615\ud0dc\uc778 etcd\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ud30c\ub77c\ubbf8\ud130\uc758 \ud615\uc2dd\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379")),(0,r.kt)("p",null,"\uc704\ub294 \uc77c\ubc18\uc801\uc778 \uc138 \uac1c\uc758 \ub178\ub4dc\uc778 etcd \ud074\ub7ec\uc2a4\ud130\ub97c \uac00\uc815\ud569\ub2c8\ub2e4. \uc774 \ub9e4\uac1c\ubcc0\uc218\ub294 \uc27c\ud45c\ub85c \uad6c\ubd84\ub41c \ud558\ub098 \uc774\uc0c1\uc758 etcd URL\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."))))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7713],{3905:(t,e,a)=>{a.d(e,{Zo:()=>s,kt:()=>k});var n=a(7294);function r(t,e,a){return e in t?Object.defineProperty(t,e,{value:a,enumerable:!0,configurable:!0,writable:!0}):t[e]=a,t}function l(t,e){var a=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),a.push.apply(a,n)}return a}function i(t){for(var e=1;e<arguments.length;e++){var a=null!=arguments[e]?arguments[e]:{};e%2?l(Object(a),!0).forEach((function(e){r(t,e,a[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(a,e))}))}return t}function o(t,e){if(null==t)return{};var a,n,r=function(t,e){if(null==t)return{};var a,n,r={},l=Object.keys(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||(r[a]=t[a]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(t,a)&&(r[a]=t[a])}return r}var p=n.createContext({}),d=function(t){var e=n.useContext(p),a=e;return t&&(a="function"==typeof t?t(e):i(i({},e),t)),a},s=function(t){var e=d(t.components);return n.createElement(p.Provider,{value:e},t.children)},m={inlineCode:"code",wrapper:function(t){var e=t.children;return n.createElement(n.Fragment,{},e)}},u=n.forwardRef((function(t,e){var a=t.components,r=t.mdxType,l=t.originalType,p=t.parentName,s=o(t,["components","mdxType","originalType","parentName"]),u=d(a),k=r,c=u["".concat(p,".").concat(k)]||u[k]||m[k]||l;return a?n.createElement(c,i(i({ref:e},s),{},{components:a})):n.createElement(c,i({ref:e},s))}));function k(t,e){var a=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=a.length,i=new Array(l);i[0]=u;var o={};for(var p in e)hasOwnProperty.call(e,p)&&(o[p]=e[p]);o.originalType=t,o.mdxType="string"==typeof t?t:r,i[1]=o;for(var d=2;d<l;d++)i[d]=a[d];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}u.displayName="MDXCreateElement"},2285:(t,e,a)=>{a.r(e),a.d(e,{assets:()=>p,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var n=a(3117),r=(a(7294),a(3905));const l={title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",weight:50},i=void 0,o={unversionedId:"datastore/datastore",id:"datastore/datastore",title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",description:"etcd\uac00 \uc544\ub2cc \ub2e4\ub978 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub294 \uae30\ub2a5\uc740 K3s\ub97c \ub2e4\ub978 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubc30\ud3ec\ud310\uacfc \ucc28\ubcc4\ud654\ud569\ub2c8\ub2e4. \uc774 \uae30\ub2a5\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc6b4\uc601\uc790\uc5d0\uac8c \uc720\uc5f0\uc131\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc635\uc158\uc744 \ud1b5\ud574 \uc0ac\uc6a9 \uc0ac\ub840\uc5d0 \uac00\uc7a5 \uc801\ud569\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc120\ud0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4:",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/datastore.md",sourceDirName:"datastore",slug:"/datastore/",permalink:"/kr/datastore/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",weight:50},sidebar:"mySidebar",previous:{title:"Uninstalling K3s",permalink:"/kr/installation/uninstall"},next:{title:"Backup and Restore",permalink:"/kr/datastore/backup-restore"}},p={},d=[{value:"\uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131 \ud30c\ub77c\ubbf8\ud130",id:"\uc678\ubd80-\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uad6c\uc131-\ud30c\ub77c\ubbf8\ud130",level:3},{value:"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc5d4\ub4dc\ud3ec\uc778\ud2b8 \ud615\uc2dd \ubc0f \uae30\ub2a5",id:"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uc5d4\ub4dc\ud3ec\uc778\ud2b8-\ud615\uc2dd-\ubc0f-\uae30\ub2a5",level:3}],s=t=>function(e){return console.warn("Component "+t+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",e)},m=s("Tabs"),u=s("TabItem"),k={toc:d};function c(t){let{components:e,...a}=t;return(0,r.kt)("wrapper",(0,n.Z)({},k,a,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"etcd\uac00 \uc544\ub2cc \ub2e4\ub978 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\uc5ec \ucfe0\ubc84\ub124\ud2f0\uc2a4\ub97c \uc2e4\ud589\ud560 \uc218 \uc788\ub294 \uae30\ub2a5\uc740 K3s\ub97c \ub2e4\ub978 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubc30\ud3ec\ud310\uacfc \ucc28\ubcc4\ud654\ud569\ub2c8\ub2e4. \uc774 \uae30\ub2a5\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 \uc6b4\uc601\uc790\uc5d0\uac8c \uc720\uc5f0\uc131\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc0ac\uc6a9 \uac00\ub2a5\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc635\uc158\uc744 \ud1b5\ud574 \uc0ac\uc6a9 \uc0ac\ub840\uc5d0 \uac00\uc7a5 \uc801\ud569\ud55c \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc120\ud0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\ud300\uc5d0 etcd \uc6b4\uc601\uc5d0 \ub300\ud55c \uc804\ubb38 \uc9c0\uc2dd\uc774 \uc5c6\ub294 \uacbd\uc6b0, MySQL \ub610\ub294 PostgreSQL\uacfc \uac19\uc740 \uc5d4\ud130\ud504\ub77c\uc774\uc988\uae09 SQL \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc120\ud0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},"CI/CD \ud658\uacbd\uc5d0\uc11c \ub2e8\uc21c\ud558\uace0 \uc218\uba85\uc774 \uc9e7\uc740 \ud074\ub7ec\uc2a4\ud130\ub97c \uc2e4\ud589\ud574\uc57c \ud558\ub294 \uacbd\uc6b0, \uc784\ubca0\ub514\ub4dc SQLite \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},"\uc5e3\uc9c0\uc5d0 Kubernetes\ub97c \ubc30\ud3ec\ud558\uace0 \uace0\uac00\uc6a9\uc131 \uc194\ub8e8\uc158\uc774 \ud544\uc694\ud558\uc9c0\ub9cc \uc5e3\uc9c0\uc5d0\uc11c \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uad00\ub9ac\ud558\ub294 \ub370 \ub530\ub978 \uc6b4\uc601 \uc624\ubc84\ud5e4\ub4dc\ub97c \uac10\ub2f9\ud560 \uc218 \uc5c6\ub294 \uacbd\uc6b0, \uc784\ubca0\ub514\ub4dc etcd\ub97c \uae30\ubc18\uc73c\ub85c \uad6c\ucd95\ub41c K3s\uc758 \uc784\ubca0\ub514\ub4dc HA \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("p",null,"K3s\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc635\uc158\uc744 \uc9c0\uc6d0\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\uc784\ubca0\ub514\ub4dc ",(0,r.kt)("a",{parentName:"strong",href:"https://www.sqlite.org/index.html"},"SQLite")),(0,r.kt)("br",{parentName:"li"}),"SQLite\ub294 \uc5ec\ub7ec \uc11c\ubc84\uac00 \uc788\ub294 \ud074\ub7ec\uc2a4\ud130\uc5d0\uc11c\ub294 \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.",(0,r.kt)("br",{parentName:"li"}),"SQLite\ub294 \uae30\ubcf8 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc774\uba70, \ub2e4\ub978 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131\uc774 \uc5c6\uace0 \ub514\uc2a4\ud06c\uc5d0 \uc784\ubca0\ub514\ub4dc etcd \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud30c\uc77c\uc774 \uc5c6\ub294 \uacbd\uc6b0 \uc0ac\uc6a9\ub429\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\uc784\ubca0\ub514\ub4dc etcd"),(0,r.kt)("br",{parentName:"li"}),"\uc5ec\ub7ec \uc11c\ubc84\uc5d0\uc11c \uc784\ubca0\ub514\ub4dc etcd\ub97c \uc0ac\uc6a9\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"li",href:"/kr/datastore/ha-embedded"},"\uace0\uac00\uc6a9\uc131 \uc784\ubca0\ub514\ub4dc etcd")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.\nK3s\uac00 \uc0c8 etcd \ud074\ub7ec\uc2a4\ud130\ub97c \ucd08\uae30\ud654\ud558\uac70\ub098 \uae30\uc874 etcd \ud074\ub7ec\uc2a4\ud130\uc5d0 \uac00\uc785\ud558\ub3c4\ub85d \uad6c\uc131\ub418\uc5c8\uac70\ub098 \uc2dc\uc791 \uc2dc \ub514\uc2a4\ud06c\uc5d0 etcd \ub370\uc774\ud130\ubca0\uc774\uc2a4 \ud30c\uc77c\uc774 \uc788\ub294 \uacbd\uc6b0 \uc784\ubca0\ub514\ub4dc etcd\uac00 \uc790\ub3d9\uc73c\ub85c \uc120\ud0dd\ub429\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\uc678\ubd80 \ub370\uc774\ud130\ubca0\uc774\uc2a4"),(0,r.kt)("br",{parentName:"li"}),"\uc5ec\ub7ec \uc11c\ubc84\uc5d0\uc11c \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"li",href:"/kr/datastore/ha"},"\uace0\uac00\uc6a9\uc131 \uc678\ubd80 DB")," \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc138\uc694.",(0,r.kt)("br",{parentName:"li"}),"\uc9c0\uc6d0\ub418\ub294 \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://etcd.io/"},"etcd")," (3.5.4 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.mysql.com/"},"MySQL")," (5.7 and 8.0 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://mariadb.org/"},"MariaDB")," (10.6.8 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.postgresql.org/"},"PostgreSQL")," (10.7, 11.5, and 14.2 \ubc84\uc804\uc5d0 \ub300\ud574 \uac80\uc99d\ub428)")))),(0,r.kt)("h3",{id:"\uc678\ubd80-\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uad6c\uc131-\ud30c\ub77c\ubbf8\ud130"},"\uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uad6c\uc131 \ud30c\ub77c\ubbf8\ud130"),(0,r.kt)("p",null,"PostgreSQL, MySQL, etcd\uc640 \uac19\uc740 \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\ub97c \uc0ac\uc6a9\ud558\ub824\uba74 K3s\uac00 \uc5f0\uacb0 \ubc29\ubc95\uc744 \uc54c \uc218 \uc788\ub3c4\ub85d ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ud30c\ub77c\ubbf8\ud130\ub97c \uc124\uc815\ud574\uc57c \ud569\ub2c8\ub2e4. \ub610\ud55c \uc5f0\uacb0\uc758 \uc778\uc99d \ubc0f \uc554\ud638\ud654\ub97c \uad6c\uc131\ud558\ub294 \ud30c\ub77c\ubbf8\ud130\ub97c \uc9c0\uc815\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc544\ub798 \ud45c\uc5d0\ub294 \uc774\ub7ec\ud55c \ub9e4\uac1c\ubcc0\uc218\uac00 \uc694\uc57d\ub418\uc5b4 \uc788\uc73c\uba70, CLI \ud50c\ub798\uadf8 \ub610\ub294 \ud658\uacbd \ubcc0\uc218\ub85c \uc804\ub2ec\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"CLI Flag"),(0,r.kt)("th",{parentName:"tr",align:null},"Environment Variable"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"PostgreSQL, MySQL \ub610\ub294 etcd \uc5f0\uacb0 \ubb38\uc790\uc5f4\uc744 \uc9c0\uc815\ud569\ub2c8\ub2e4. \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \uc5f0\uacb0\uc744 \uc124\uba85\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\ub294 \ubb38\uc790\uc5f4\uc785\ub2c8\ub2e4. \uc774 \ubb38\uc790\uc5f4\uc758 \uad6c\uc870\ub294 \uac01 \ubc31\uc5d4\ub4dc\uc5d0 \ub530\ub77c \ub2e4\ub974\uba70 \uc544\ub798\uc5d0 \uc790\uc138\ud788 \uc124\uba85\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc640\uc758 \ud1b5\uc2e0\uc744 \ubcf4\ud638\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\ub294 TLS \uc778\uc99d \uae30\uad00(CA: Certificate Authority) \ud30c\uc77c\uc785\ub2c8\ub2e4. \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0\uc11c \uc0ac\uc6a9\uc790 \uc9c0\uc815 \uc778\uc99d \uae30\uad00\uc5d0\uc11c \uc11c\uba85\ud55c \uc778\uc99d\uc11c\ub97c \uc0ac\uc6a9\ud558\uc5ec TLS\ub97c \ud1b5\ud574 \uc694\uccad\uc744 \uc81c\uacf5\ud558\ub294 \uacbd\uc6b0, \uc774 \ub9e4\uac1c\ubcc0\uc218\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud574\ub2f9 CA\ub97c \uc9c0\uc815\ud558\uba74 K3s \ud074\ub77c\uc774\uc5b8\ud2b8\uac00 \uc778\uc99d\uc11c\ub97c \uc62c\ubc14\ub974\uac8c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc99d\uc11c \uae30\ubc18 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 TLS \uc778\uc99d\uc11c \ud30c\uc77c\uc785\ub2c8\ub2e4. \uc774 \uae30\ub2a5\uc744 \uc0ac\uc6a9\ud558\ub824\uba74 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uac00 \ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc99d\uc11c \uae30\ubc18 \uc778\uc99d\uc744 \uc9c0\uc6d0\ud558\ub3c4\ub85d \uad6c\uc131\ub418\uc5b4 \uc788\uc5b4\uc57c \ud569\ub2c8\ub2e4. \uc774 \ud30c\ub77c\ubbf8\ud130\ub97c \uc9c0\uc815\ud558\ub294 \uacbd\uc6b0 ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-keyfile")," \ud30c\ub77c\ubbf8\ud130\ub3c4 \uc9c0\uc815\ud574\uc57c \ud569\ub2c8\ub2e4.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc99d\uc11c \uae30\ubc18 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 TLS \ud0a4 \ud30c\uc77c\uc785\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \uc774\uc804 ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-certfile")," \ub9e4\uac1c\ubcc0\uc218\ub97c \ucc38\uc870\ud558\uc138\uc694.")))),(0,r.kt)("p",null,"\ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc790\uaca9 \uc99d\uba85\uc774\ub098 \uae30\ud0c0 \ubbfc\uac10\ud55c \uc815\ubcf4\uac00 \ud504\ub85c\uc138\uc2a4 \uc815\ubcf4\uc758 \uc77c\ubd80\ub85c \ub178\ucd9c\ub418\uc9c0 \uc54a\ub3c4\ub85d \uc774\ub7ec\ud55c \ub9e4\uac1c \ubcc0\uc218\ub97c \uba85\ub839\uc904 \uc778\uc218\uac00 \uc544\ub2cc \ud658\uacbd \ubcc0\uc218\ub85c \uc124\uc815\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4."),(0,r.kt)("h3",{id:"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4-\uc5d4\ub4dc\ud3ec\uc778\ud2b8-\ud615\uc2dd-\ubc0f-\uae30\ub2a5"},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \uc5d4\ub4dc\ud3ec\uc778\ud2b8 \ud615\uc2dd \ubc0f \uae30\ub2a5"),(0,r.kt)("p",null,"\uc55e\uc11c \uc5b8\uae09\ud588\ub4ef\uc774, ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ub9e4\uac1c\ubcc0\uc218\uc5d0 \uc804\ub2ec\ub418\ub294 \uac12\uc758 \ud615\uc2dd\uc740 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4 \ubc31\uc5d4\ub4dc\uc5d0 \ub530\ub77c \ub2ec\ub77c\uc9d1\ub2c8\ub2e4. \ub2e4\uc74c\uc740 \uc9c0\uc6d0\ub418\ub294 \uac01 \uc678\ubd80 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc5d0 \ub300\ud55c \uc774 \ud615\uc2dd\uacfc \uae30\ub2a5\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,r.kt)(m,{mdxType:"Tabs"},(0,r.kt)(u,{value:"PostgreSQL",mdxType:"TabItem"},(0,r.kt)("p",null,"\uac00\uc7a5 \uc77c\ubc18\uc801\uc778 \ud615\uc2dd\uc758 PostgreSQL\uc6a9 \ub370\uc774\ud130 \uc800\uc7a5\uc18c \uc5d4\ub4dc\ud3ec\uc778\ud2b8 \ub9e4\uac1c \ubcc0\uc218\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ud615\uc2dd\uc744 \uac16\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"postgres://username:password@hostname:port/database-name")),(0,r.kt)("p",null,"\ub354 \uace0\uae09 \uad6c\uc131 \ub9e4\uac1c\ubcc0\uc218\ub97c \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://godoc.org/github.com/lib/pq"},"https://godoc.org/github.com/lib/pq")," \uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"\ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc774\ub984\uc744 \uc9c0\uc815\ud588\ub294\ub370 \ud574\ub2f9 \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uc874\uc7ac\ud558\uc9c0 \uc54a\uc73c\uba74 \uc11c\ubc84\uc5d0\uc11c \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc0dd\uc131\uc744 \uc2dc\ub3c4\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc5d4\ub4dc\ud3ec\uc778\ud2b8\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"postgres://"),"\ub9cc \uc81c\uacf5\ud558\ub294 \uacbd\uc6b0, K3s\ub294 \ub2e4\uc74c\uc744 \uc2dc\ub3c4\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\uc0ac\uc6a9\uc790 \uc774\ub984\uacfc \ube44\ubc00\ubc88\ud638\ub85c ",(0,r.kt)("inlineCode",{parentName:"li"},"postgres"),"\ub97c \uc0ac\uc6a9\ud558\uc5ec localhost\uc5d0 \uc5f0\uacb0\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes"),"\ub77c\ub294 \uc774\ub984\uc758 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4."))),(0,r.kt)(u,{value:"MySQL / MariaDB",mdxType:"TabItem"},(0,r.kt)("p",null,"\uac00\uc7a5 \uc77c\ubc18\uc801\uc778 \ud615\ud0dc\uc778 MySQL\uacfc MariaDB\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ud30c\ub77c\ubbf8\ud130\ub294 \ub2e4\uc74c\uacfc \uac19\uc740 \ud615\uc2dd\uc744 \uac16\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"mysql://username:password@tcp(hostname:3306)/database-name")),(0,r.kt)("p",null,"\ub354 \uace0\uae09 \uad6c\uc131 \ub9e4\uac1c\ubcc0\uc218\ub97c \uc0ac\uc6a9\ud560 \uc218\ub3c4 \uc788\uc2b5\ub2c8\ub2e4. \uc774\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/go-sql-driver/mysql#dsn-data-source-name"},"https://github.com/go-sql-driver/mysql#dsn-data-source-name")," \uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,r.kt)("p",null,"K3s\uc758 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/1093"},"\uc54c\ub824\uc9c4 \uc774\uc288"),"\ub85c \uc778\ud574 ",(0,r.kt)("inlineCode",{parentName:"p"},"tls"),' \ud30c\ub77c\ubbf8\ud130\ub97c \uc124\uc815\ud560 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4. TLS \ud1b5\uc2e0\uc740 \uc9c0\uc6d0\ub418\uc9c0\ub9cc \uc608\ub97c \ub4e4\uc5b4 \uc774 \ub9e4\uac1c\ubcc0\uc218\ub97c "skip-verify"\ub85c \uc124\uc815\ud558\uc5ec K3s\uac00 \uc778\uc99d\uc11c \ud655\uc778\uc744 \uac74\ub108\ub6f0\ub3c4\ub85d \ud560 \uc218\ub294 \uc5c6\uc2b5\ub2c8\ub2e4.'),(0,r.kt)("p",null,"\ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc774\ub984\uc744 \uc9c0\uc815\ud588\ub294\ub370 \ub370\uc774\ud130\ubca0\uc774\uc2a4\uac00 \uc874\uc7ac\ud558\uc9c0 \uc54a\uc73c\uba74 \uc11c\ubc84\uc5d0\uc11c \ub9cc\ub4e4\ub824\uace0 \uc2dc\ub3c4\ud569\ub2c8\ub2e4."),(0,r.kt)("p",null,"\uc5d4\ub4dc\ud3ec\uc778\ud2b8\ub85c ",(0,r.kt)("inlineCode",{parentName:"p"},"mysql://"),"\ub9cc \uc81c\uacf5\ud558\ub294 \uacbd\uc6b0, K3s\ub294 \ub2e4\uc74c\uc744 \uc2dc\ub3c4\ud569\ub2c8\ub2e4:"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"root")," \uc0ac\uc6a9\uc790\uc640 \ube44\ubc00\ubc88\ud638\ub97c \uc0ac\uc6a9\ud558\uc9c0 \uc54a\uace0 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/run/mysqld/mysqld.sock"),"\uc5d0\uc11c MySQL \uc18c\ucf13\uc5d0 \uc5f0\uacb0\ud569\ub2c8\ub2e4."),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes"),"\ub77c\ub294 \uc774\ub984\uc758 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4."))),(0,r.kt)(u,{value:"etcd",mdxType:"TabItem"},(0,r.kt)("p",null,"\uac00\uc7a5 \uc77c\ubc18\uc801\uc778 \ud615\ud0dc\uc778 etcd\uc758 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \ud30c\ub77c\ubbf8\ud130\uc758 \ud615\uc2dd\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4:"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379")),(0,r.kt)("p",null,"\uc704\ub294 \uc77c\ubc18\uc801\uc778 \uc138 \uac1c\uc758 \ub178\ub4dc\uc778 etcd \ud074\ub7ec\uc2a4\ud130\ub97c \uac00\uc815\ud569\ub2c8\ub2e4. \uc774 \ub9e4\uac1c\ubcc0\uc218\ub294 \uc27c\ud45c\ub85c \uad6c\ubd84\ub41c \ud558\ub098 \uc774\uc0c1\uc758 etcd URL\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4."))))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/e8666366.c7f24ec2.js b/kr/assets/js/e8666366.bfcf189e.js
similarity index 97%
rename from kr/assets/js/e8666366.c7f24ec2.js
rename to kr/assets/js/e8666366.bfcf189e.js
index e1fb431c6..eb41178b2 100644
--- a/kr/assets/js/e8666366.c7f24ec2.js
+++ b/kr/assets/js/e8666366.bfcf189e.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3936],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>g});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=u(n),g=a,f=d["".concat(s,".").concat(g)]||d[g]||p[g]||l;return n?r.createElement(f,i(i({ref:t},c),{},{components:n})):r.createElement(f,i({ref:t},c))}));function g(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},1115:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={title:"Uninstalling K3s",weight:61},i=void 0,o={unversionedId:"installation/uninstall",id:"installation/uninstall",title:"Uninstalling K3s",description:"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/uninstall.md",sourceDirName:"installation",slug:"/installation/uninstall",permalink:"/kr/installation/uninstall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Uninstalling K3s",weight:61},sidebar:"mySidebar",previous:{title:"Kubernetes Dashboard",permalink:"/kr/installation/kube-dashboard"},next:{title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",permalink:"/kr/datastore/"}},s={},u=[{value:"Uninstalling Servers",id:"uninstalling-servers",level:3},{value:"Uninstalling Agents",id:"uninstalling-agents",level:3}],c={toc:u};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",(0,a.kt)("br",{parentName:"p"}),"\n","It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.")),(0,a.kt)("p",null,"If you installed K3s using the installation script, a script to uninstall K3s was generated during installation."),(0,a.kt)("p",null,"If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the ",(0,a.kt)("a",{parentName:"p",href:"/kr/architecture/#how-agent-node-registration-works"},"Node Registration")," documentation for more information."),(0,a.kt)("h3",{id:"uninstalling-servers"},"Uninstalling Servers"),(0,a.kt)("p",null,"To uninstall K3s from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-uninstall.sh\n")),(0,a.kt)("h3",{id:"uninstalling-agents"},"Uninstalling Agents"),(0,a.kt)("p",null,"To uninstall K3s from an agent node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-agent-uninstall.sh\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3936],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>g});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),u=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=u(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),d=u(n),g=a,f=d["".concat(s,".").concat(g)]||d[g]||p[g]||l;return n?r.createElement(f,i(i({ref:t},c),{},{components:n})):r.createElement(f,i({ref:t},c))}));function g(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=d;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var u=2;u<l;u++)i[u]=n[u];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},1115:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>p,frontMatter:()=>l,metadata:()=>o,toc:()=>u});var r=n(3117),a=(n(7294),n(3905));const l={title:"Uninstalling K3s",weight:61},i=void 0,o={unversionedId:"installation/uninstall",id:"installation/uninstall",title:"Uninstalling K3s",description:"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/uninstall.md",sourceDirName:"installation",slug:"/installation/uninstall",permalink:"/kr/installation/uninstall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Uninstalling K3s",weight:61},sidebar:"mySidebar",previous:{title:"Kubernetes Dashboard",permalink:"/kr/installation/kube-dashboard"},next:{title:"\ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130 \uc800\uc7a5\uc18c",permalink:"/kr/datastore/"}},s={},u=[{value:"Uninstalling Servers",id:"uninstalling-servers",level:3},{value:"Uninstalling Agents",id:"uninstalling-agents",level:3}],c={toc:u};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.",(0,a.kt)("br",{parentName:"p"}),"\n","It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.")),(0,a.kt)("p",null,"If you installed K3s using the installation script, a script to uninstall K3s was generated during installation."),(0,a.kt)("p",null,"If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the ",(0,a.kt)("a",{parentName:"p",href:"/kr/architecture/#how-agent-node-registration-works"},"Node Registration")," documentation for more information."),(0,a.kt)("h3",{id:"uninstalling-servers"},"Uninstalling Servers"),(0,a.kt)("p",null,"To uninstall K3s from a server node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-uninstall.sh\n")),(0,a.kt)("h3",{id:"uninstalling-agents"},"Uninstalling Agents"),(0,a.kt)("p",null,"To uninstall K3s from an agent node, run:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-agent-uninstall.sh\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/e92581be.7a34a556.js b/kr/assets/js/e92581be.7677e33c.js
similarity index 99%
rename from kr/assets/js/e92581be.7a34a556.js
rename to kr/assets/js/e92581be.7677e33c.js
index 1f8a93b5d..8c79f00a1 100644
--- a/kr/assets/js/e92581be.7a34a556.js
+++ b/kr/assets/js/e92581be.7677e33c.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5470],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>m});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},u=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=p(a),m=r,g=d["".concat(i,".").concat(m)]||d[m]||c[m]||l;return a?n.createElement(g,s(s({ref:t},u),{},{components:a})):n.createElement(g,s({ref:t},u))}));function m(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,s=new Array(l);s[0]=d;var o={};for(var i in t)hasOwnProperty.call(t,i)&&(o[i]=t[i]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var p=2;p<l;p++)s[p]=a[p];return n.createElement.apply(null,s)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},154:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>s,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>p});var n=a(3117),r=(a(7294),a(3905));const l={title:"Manual Upgrades",weight:10},s=void 0,o={unversionedId:"upgrades/manual",id:"upgrades/manual",title:"Manual Upgrades",description:"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/manual.md",sourceDirName:"upgrades",slug:"/upgrades/manual",permalink:"/kr/upgrades/manual",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"Manual Upgrades",weight:10},sidebar:"mySidebar",previous:{title:"Stopping K3s",permalink:"/kr/upgrades/killall"},next:{title:"Automated Upgrades",permalink:"/kr/upgrades/automated"}},i={},p=[{value:"Release Channels",id:"release-channels",level:3},{value:"Upgrade K3s Using the Installation Script",id:"upgrade-k3s-using-the-installation-script",level:3},{value:"Manually Upgrade K3s Using the Binary",id:"manually-upgrade-k3s-using-the-binary",level:3},{value:"Restarting K3s",id:"restarting-k3s",level:3}],u={toc:p};function c(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"When upgrading, upgrade server nodes first one at a time, then any agent nodes.")),(0,r.kt)("h3",{id:"release-channels"},"Release Channels"),(0,r.kt)("p",null,"Upgrades performed via the installation script or using our ",(0,r.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"automated upgrades")," feature can be tied to different release channels. The following channels are available:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Channel"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"stable"),(0,r.kt)("td",{parentName:"tr",align:null},"(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"latest"),(0,r.kt)("td",{parentName:"tr",align:null},"Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"v1.26 (example)"),(0,r.kt)("td",{parentName:"tr",align:null},"There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.")))),(0,r.kt)("p",null,"For an exhaustive and up-to-date list of channels, you can visit the ",(0,r.kt)("a",{parentName:"p",href:"https://update.k3s.io/v1-release/channels"},"k3s channel service API"),". For more technical details on how channels work, you see the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/channelserver"},"channelserver project"),"."),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"upgrade-k3s-using-the-installation-script"},"Upgrade K3s Using the Installation Script"),(0,r.kt)("p",null,"To upgrade K3s from an older version you can re-run the installation script using the same flags, for example:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"This will upgrade to a newer version in the stable channel by default."),(0,r.kt)("p",null,"If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"If you want to upgrade to a specific version you can run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 sh -\n")),(0,r.kt)("h3",{id:"manually-upgrade-k3s-using-the-binary"},"Manually Upgrade K3s Using the Binary"),(0,r.kt)("p",null,"Or to manually upgrade K3s:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Download the desired version of the K3s binary from ",(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")),(0,r.kt)("li",{parentName:"ol"},"Copy the downloaded binary to ",(0,r.kt)("inlineCode",{parentName:"li"},"/usr/local/bin/k3s")," (or your desired location)"),(0,r.kt)("li",{parentName:"ol"},"Stop the old k3s binary"),(0,r.kt)("li",{parentName:"ol"},"Launch the new k3s binary")),(0,r.kt)("h3",{id:"restarting-k3s"},"Restarting K3s"),(0,r.kt)("p",null,"Restarting K3s is supported by the installation script for systemd and OpenRC."),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"systemd")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s-agent\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"OpenRC")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s restart\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s-agent restart\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5470],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>m});var n=a(7294);function r(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function s(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){r(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function o(e,t){if(null==e)return{};var a,n,r=function(e,t){if(null==e)return{};var a,n,r={},l=Object.keys(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||(r[a]=e[a]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(n=0;n<l.length;n++)a=l[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(r[a]=e[a])}return r}var i=n.createContext({}),p=function(e){var t=n.useContext(i),a=t;return e&&(a="function"==typeof e?e(t):s(s({},t),e)),a},u=function(e){var t=p(e.components);return n.createElement(i.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var a=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=p(a),m=r,g=d["".concat(i,".").concat(m)]||d[m]||c[m]||l;return a?n.createElement(g,s(s({ref:t},u),{},{components:a})):n.createElement(g,s({ref:t},u))}));function m(e,t){var a=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=a.length,s=new Array(l);s[0]=d;var o={};for(var i in t)hasOwnProperty.call(t,i)&&(o[i]=t[i]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var p=2;p<l;p++)s[p]=a[p];return n.createElement.apply(null,s)}return n.createElement.apply(null,a)}d.displayName="MDXCreateElement"},154:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>i,contentTitle:()=>s,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>p});var n=a(3117),r=(a(7294),a(3905));const l={title:"Manual Upgrades",weight:10},s=void 0,o={unversionedId:"upgrades/manual",id:"upgrades/manual",title:"Manual Upgrades",description:"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/manual.md",sourceDirName:"upgrades",slug:"/upgrades/manual",permalink:"/kr/upgrades/manual",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"Manual Upgrades",weight:10},sidebar:"mySidebar",previous:{title:"Stopping K3s",permalink:"/kr/upgrades/killall"},next:{title:"Automated Upgrades",permalink:"/kr/upgrades/automated"}},i={},p=[{value:"Release Channels",id:"release-channels",level:3},{value:"Upgrade K3s Using the Installation Script",id:"upgrade-k3s-using-the-installation-script",level:3},{value:"Manually Upgrade K3s Using the Binary",id:"manually-upgrade-k3s-using-the-binary",level:3},{value:"Restarting K3s",id:"restarting-k3s",level:3}],u={toc:p};function c(e){let{components:t,...a}=e;return(0,r.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"When upgrading, upgrade server nodes first one at a time, then any agent nodes.")),(0,r.kt)("h3",{id:"release-channels"},"Release Channels"),(0,r.kt)("p",null,"Upgrades performed via the installation script or using our ",(0,r.kt)("a",{parentName:"p",href:"/kr/upgrades/automated"},"automated upgrades")," feature can be tied to different release channels. The following channels are available:"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Channel"),(0,r.kt)("th",{parentName:"tr",align:null},"Description"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"stable"),(0,r.kt)("td",{parentName:"tr",align:null},"(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"latest"),(0,r.kt)("td",{parentName:"tr",align:null},"Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"v1.26 (example)"),(0,r.kt)("td",{parentName:"tr",align:null},"There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.")))),(0,r.kt)("p",null,"For an exhaustive and up-to-date list of channels, you can visit the ",(0,r.kt)("a",{parentName:"p",href:"https://update.k3s.io/v1-release/channels"},"k3s channel service API"),". For more technical details on how channels work, you see the ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/channelserver"},"channelserver project"),"."),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"When attempting to upgrade to a new version of K3s, the ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes version skew policy")," applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.")),(0,r.kt)("h3",{id:"upgrade-k3s-using-the-installation-script"},"Upgrade K3s Using the Installation Script"),(0,r.kt)("p",null,"To upgrade K3s from an older version you can re-run the installation script using the same flags, for example:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("p",null,"This will upgrade to a newer version in the stable channel by default."),(0,r.kt)("p",null,"If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"If you want to upgrade to a specific version you can run the following command:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 sh -\n")),(0,r.kt)("h3",{id:"manually-upgrade-k3s-using-the-binary"},"Manually Upgrade K3s Using the Binary"),(0,r.kt)("p",null,"Or to manually upgrade K3s:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"Download the desired version of the K3s binary from ",(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")),(0,r.kt)("li",{parentName:"ol"},"Copy the downloaded binary to ",(0,r.kt)("inlineCode",{parentName:"li"},"/usr/local/bin/k3s")," (or your desired location)"),(0,r.kt)("li",{parentName:"ol"},"Stop the old k3s binary"),(0,r.kt)("li",{parentName:"ol"},"Launch the new k3s binary")),(0,r.kt)("h3",{id:"restarting-k3s"},"Restarting K3s"),(0,r.kt)("p",null,"Restarting K3s is supported by the installation script for systemd and OpenRC."),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"systemd")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s-agent\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"OpenRC")),(0,r.kt)("p",null,"To restart servers manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s restart\n")),(0,r.kt)("p",null,"To restart agents manually:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s-agent restart\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/efc00427.29fedce4.js b/kr/assets/js/efc00427.7a172d74.js
similarity index 98%
rename from kr/assets/js/efc00427.29fedce4.js
rename to kr/assets/js/efc00427.7a172d74.js
index 15254bd92..6feddac6c 100644
--- a/kr/assets/js/efc00427.29fedce4.js
+++ b/kr/assets/js/efc00427.7a172d74.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3902],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),k=p(n),m=a,d=k["".concat(s,".").concat(m)]||k[m]||u[m]||i;return n?r.createElement(d,o(o({ref:t},c),{},{components:n})):r.createElement(d,o({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,o=new Array(i);o[0]=k;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,o[1]=l;for(var p=2;p<i;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},31:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const i={title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",weight:10},o=void 0,l={unversionedId:"quick-start/quick-start",id:"quick-start/quick-start",title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",description:"\uc774 \uac00\uc774\ub4dc\ub294 \uae30\ubcf8 \uc635\uc158\uc73c\ub85c \ud074\ub7ec\uc2a4\ud130\ub97c \ube60\ub974\uac8c \uc2dc\uc791\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub429\ub2c8\ub2e4. \uc124\uce58 \uc139\uc158\uc5d0\uc11c\ub294 K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",sourceDirName:"quick-start",slug:"/quick-start/",permalink:"/kr/quick-start/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",weight:10},sidebar:"mySidebar",previous:{title:"\uc544\ud0a4\ud14d\ucc98",permalink:"/kr/architecture/"},next:{title:"\uc124\uce58",permalink:"/kr/installation/"}},s={},p=[{value:"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8",id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8",level:2}],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc774 \uac00\uc774\ub4dc\ub294 \uae30\ubcf8 \uc635\uc158\uc73c\ub85c \ud074\ub7ec\uc2a4\ud130\ub97c \ube60\ub974\uac8c \uc2dc\uc791\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub429\ub2c8\ub2e4. ",(0,a.kt)("a",{parentName:"p",href:"/kr/installation/"},"\uc124\uce58 \uc139\uc158"),"\uc5d0\uc11c\ub294 K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"K3s \uad6c\uc131 \uc694\uc18c\ub4e4\uc774 \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/architecture/"},"\uc544\ud0a4\ud14d\ucc98 \uc139\uc158"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Kubernetes\ub97c \ucc98\uc74c \uc0ac\uc6a9\ud558\uc2dc\ub098\uc694?\n\uacf5\uc2dd \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubb38\uc11c\uc5d0\ub294 \uc774\ubbf8 \uae30\ubcf8 \uc0ac\ud56d\uc744 \uc124\uba85\ud558\ub294 \ud6cc\ub96d\ud55c \ud29c\ud1a0\ub9ac\uc5bc\uc774 ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/tutorials/kubernetes-basics/"},"\uc5ec\uae30")," \uc788\uc2b5\ub2c8\ub2e4.")),(0,a.kt)("h2",{id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8"},"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8"),(0,a.kt)("p",null,"K3s\ub294 systemd \ub610\ub294 openrc \uae30\ubc18 \uc2dc\uc2a4\ud15c\uc5d0 \uc11c\ube44\uc2a4\ub85c \uc124\uce58\ud558\ub294 \ud3b8\ub9ac\ud55c \ubc29\ubc95\uc73c\ub85c \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc774 \uc2a4\ud06c\ub9bd\ud2b8\ub294 ",(0,a.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ubc29\ubc95\uc73c\ub85c K3s\ub97c \uc124\uce58\ud558\ub824\uba74, \uac04\ub2e8\ud558\uac8c \ub2e4\uc74c\uc744 \uc2e4\ud589\ud558\uc138\uc694:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,a.kt)("p",null,"\uc774 \uc124\uce58\ub97c \uc2e4\ud589\ud55c \ud6c4:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\ub178\ub4dc\uac00 \uc7ac\ubd80\ud305\ub418\uac70\ub098 \ud504\ub85c\uc138\uc2a4\uac00 \ucda9\ub3cc \ub610\ub294 \uc885\ub8cc\ub41c \uacbd\uc6b0 \uc790\ub3d9\uc73c\ub85c \uc7ac\uc2dc\uc791\ub418\ub3c4\ub85d K3s \uc11c\ube44\uc2a4\uac00 \uad6c\uc131\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"kubectl"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"crictl"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"ctr"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-killall.sh")," \ubc0f ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-uninstall.sh"),"\ub97c \ud3ec\ud568\ud55c \ucd94\uac00 \uc720\ud2f8\ub9ac\ud2f0\uac00 \uc124\uce58\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/k3s.yaml"),"\uc5d0 ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," \ud30c\uc77c\uc744 \uc791\uc131\ud558\uace0, K3s\uac00 \uc124\uce58\ud55c kubectl\uc774 \uc790\ub3d9\uc73c\ub85c \uc774\ub97c \uc0ac\uc6a9\ud558\uac8c \ub429\ub2c8\ub2e4.")),(0,a.kt)("p",null,"\ub2e8\uc77c \ub178\ub4dc \uc11c\ubc84 \uc124\uce58\ub294 \uc6cc\ud06c\ub85c\ub4dc \ud30c\ub4dc\ub97c \ud638\uc2a4\ud305\ud558\ub294 \ub370 \ud544\uc694\ud55c \ubaa8\ub4e0 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4, \ucee8\ud2b8\ub864 \ud50c\ub808\uc778, kubelet \ubc0f \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uad6c\uc131 \uc694\uc18c\ub97c \ud3ec\ud568\ud558\uc5ec \ubaa8\ub4e0 \uae30\ub2a5\uc744 \uac16\ucd98 Kubernetes \ud074\ub7ec\uc2a4\ud130\uc785\ub2c8\ub2e4. \uc11c\ubc84 \ub610\ub294 \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \ucd94\uac00\ud560 \ud544\uc694\ub294 \uc5c6\uc9c0\ub9cc, \ud074\ub7ec\uc2a4\ud130\uc5d0 \ucd94\uac00 \uc6a9\ub7c9 \ub610\ub294 \uc911\ubcf5\uc131\uc744 \ucd94\uac00\ud558\uae30 \uc704\ud574 \ucd94\uac00\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \ucd94\uac00\ub85c \uc124\uce58\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130\uc5d0 \ucd94\uac00\ud558\ub824\uba74, ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \ubc0f ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \ud658\uacbd \ubcc0\uc218\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4. \ub2e4\uc74c\uc740 \uc5d0\uc774\uc804\ud2b8 \uac00\uc785 \ubc29\ubc95\uc744 \ubcf4\uc5ec\uc8fc\ub294 \uc608\uc81c\uc785\ub2c8\ub2e4:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n")),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \ud30c\ub77c\ubbf8\ud130\ub97c \uc124\uc815\ud558\uba74 \uc778\uc2a4\ud1a8\ub7ec\uac00 K3s\ub97c \uc11c\ubc84\uac00 \uc544\ub2cc \uc5d0\uc774\uc804\ud2b8\ub85c \uad6c\uc131\ud569\ub2c8\ub2e4. K3s \uc5d0\uc774\uc804\ud2b8\ub294 \uc81c\uacf5\ub41c URL\uc5d0\uc11c \uc218\uc2e0 \ub300\uae30 \uc911\uc778 K3s \uc11c\ubc84\uc5d0 \ub4f1\ub85d\ub429\ub2c8\ub2e4. ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN"),"\uc5d0 \uc0ac\uc6a9\ud560 \uac12\uc740 \uc11c\ubc84 \ub178\ub4dc\uc758 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/node-token"),"\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\uac01 \uba38\uc2e0\uc740 \uace0\uc720\ud55c \ud638\uc2a4\ud2b8 \uc774\ub984\uc744 \uac00\uc838\uc57c \ud569\ub2c8\ub2e4. \uba38\uc2e0\uc5d0 \uace0\uc720 \ud638\uc2a4\ud2b8\uba85\uc774 \uc5c6\ub294 \uacbd\uc6b0, ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \ud658\uacbd \ubcc0\uc218\ub97c \uc804\ub2ec\ud558\uace0 \uac01 \ub178\ub4dc\uc5d0 \ub300\ud574 \uc720\ud6a8\ud55c \uace0\uc720 \ud638\uc2a4\ud2b8\uba85\uc774 \uc788\ub294 \uac12\uc744 \uc81c\uacf5\ud558\uc138\uc694.")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3902],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),k=p(n),m=a,d=k["".concat(s,".").concat(m)]||k[m]||u[m]||i;return n?r.createElement(d,o(o({ref:t},c),{},{components:n})):r.createElement(d,o({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,o=new Array(i);o[0]=k;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,o[1]=l;for(var p=2;p<i;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},31:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const i={title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",weight:10},o=void 0,l={unversionedId:"quick-start/quick-start",id:"quick-start/quick-start",title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",description:"\uc774 \uac00\uc774\ub4dc\ub294 \uae30\ubcf8 \uc635\uc158\uc73c\ub85c \ud074\ub7ec\uc2a4\ud130\ub97c \ube60\ub974\uac8c \uc2dc\uc791\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub429\ub2c8\ub2e4. \uc124\uce58 \uc139\uc158\uc5d0\uc11c\ub294 K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",sourceDirName:"quick-start",slug:"/quick-start/",permalink:"/kr/quick-start/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\ube60\ub978 \uc2dc\uc791 \uac00\uc774\ub4dc",weight:10},sidebar:"mySidebar",previous:{title:"\uc544\ud0a4\ud14d\ucc98",permalink:"/kr/architecture/"},next:{title:"\uc124\uce58",permalink:"/kr/installation/"}},s={},p=[{value:"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8",id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8",level:2}],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\uc774 \uac00\uc774\ub4dc\ub294 \uae30\ubcf8 \uc635\uc158\uc73c\ub85c \ud074\ub7ec\uc2a4\ud130\ub97c \ube60\ub974\uac8c \uc2dc\uc791\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub429\ub2c8\ub2e4. ",(0,a.kt)("a",{parentName:"p",href:"/kr/installation/"},"\uc124\uce58 \uc139\uc158"),"\uc5d0\uc11c\ub294 K3s\ub97c \uc124\uc815\ud558\ub294 \ubc29\ubc95\uc5d0 \ub300\ud574 \uc790\uc138\ud788 \uc124\uba85\ud569\ub2c8\ub2e4."),(0,a.kt)("p",null,"K3s \uad6c\uc131 \uc694\uc18c\ub4e4\uc774 \uc791\ub3d9\ud558\ub294 \ubc29\uc2dd\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"p",href:"/kr/architecture/"},"\uc544\ud0a4\ud14d\ucc98 \uc139\uc158"),"\uc744 \ucc38\uc870\ud558\uc138\uc694."),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Kubernetes\ub97c \ucc98\uc74c \uc0ac\uc6a9\ud558\uc2dc\ub098\uc694?\n\uacf5\uc2dd \ucfe0\ubc84\ub124\ud2f0\uc2a4 \ubb38\uc11c\uc5d0\ub294 \uc774\ubbf8 \uae30\ubcf8 \uc0ac\ud56d\uc744 \uc124\uba85\ud558\ub294 \ud6cc\ub96d\ud55c \ud29c\ud1a0\ub9ac\uc5bc\uc774 ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/ko/docs/tutorials/kubernetes-basics/"},"\uc5ec\uae30")," \uc788\uc2b5\ub2c8\ub2e4.")),(0,a.kt)("h2",{id:"\uc124\uce58-\uc2a4\ud06c\ub9bd\ud2b8"},"\uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8"),(0,a.kt)("p",null,"K3s\ub294 systemd \ub610\ub294 openrc \uae30\ubc18 \uc2dc\uc2a4\ud15c\uc5d0 \uc11c\ube44\uc2a4\ub85c \uc124\uce58\ud558\ub294 \ud3b8\ub9ac\ud55c \ubc29\ubc95\uc73c\ub85c \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc81c\uacf5\ud569\ub2c8\ub2e4. \uc774 \uc2a4\ud06c\ub9bd\ud2b8\ub294 ",(0,a.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \uc5d0\uc11c \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774 \ubc29\ubc95\uc73c\ub85c K3s\ub97c \uc124\uce58\ud558\ub824\uba74, \uac04\ub2e8\ud558\uac8c \ub2e4\uc74c\uc744 \uc2e4\ud589\ud558\uc138\uc694:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,a.kt)("p",null,"\uc774 \uc124\uce58\ub97c \uc2e4\ud589\ud55c \ud6c4:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\ub178\ub4dc\uac00 \uc7ac\ubd80\ud305\ub418\uac70\ub098 \ud504\ub85c\uc138\uc2a4\uac00 \ucda9\ub3cc \ub610\ub294 \uc885\ub8cc\ub41c \uacbd\uc6b0 \uc790\ub3d9\uc73c\ub85c \uc7ac\uc2dc\uc791\ub418\ub3c4\ub85d K3s \uc11c\ube44\uc2a4\uac00 \uad6c\uc131\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"kubectl"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"crictl"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"ctr"),", ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-killall.sh")," \ubc0f ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-uninstall.sh"),"\ub97c \ud3ec\ud568\ud55c \ucd94\uac00 \uc720\ud2f8\ub9ac\ud2f0\uac00 \uc124\uce58\ub429\ub2c8\ub2e4."),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/k3s.yaml"),"\uc5d0 ",(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," \ud30c\uc77c\uc744 \uc791\uc131\ud558\uace0, K3s\uac00 \uc124\uce58\ud55c kubectl\uc774 \uc790\ub3d9\uc73c\ub85c \uc774\ub97c \uc0ac\uc6a9\ud558\uac8c \ub429\ub2c8\ub2e4.")),(0,a.kt)("p",null,"\ub2e8\uc77c \ub178\ub4dc \uc11c\ubc84 \uc124\uce58\ub294 \uc6cc\ud06c\ub85c\ub4dc \ud30c\ub4dc\ub97c \ud638\uc2a4\ud305\ud558\ub294 \ub370 \ud544\uc694\ud55c \ubaa8\ub4e0 \ub370\uc774\ud130\uc2a4\ud1a0\uc5b4, \ucee8\ud2b8\ub864 \ud50c\ub808\uc778, kubelet \ubc0f \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uad6c\uc131 \uc694\uc18c\ub97c \ud3ec\ud568\ud558\uc5ec \ubaa8\ub4e0 \uae30\ub2a5\uc744 \uac16\ucd98 Kubernetes \ud074\ub7ec\uc2a4\ud130\uc785\ub2c8\ub2e4. \uc11c\ubc84 \ub610\ub294 \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \ucd94\uac00\ud560 \ud544\uc694\ub294 \uc5c6\uc9c0\ub9cc, \ud074\ub7ec\uc2a4\ud130\uc5d0 \ucd94\uac00 \uc6a9\ub7c9 \ub610\ub294 \uc911\ubcf5\uc131\uc744 \ucd94\uac00\ud558\uae30 \uc704\ud574 \ucd94\uac00\ud558\ub294 \uac83\uc774 \uc88b\uc2b5\ub2c8\ub2e4."),(0,a.kt)("p",null,"\uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \ucd94\uac00\ub85c \uc124\uce58\ud558\uc5ec \ud074\ub7ec\uc2a4\ud130\uc5d0 \ucd94\uac00\ud558\ub824\uba74, ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \ubc0f ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \ud658\uacbd \ubcc0\uc218\ub97c \uc0ac\uc6a9\ud558\uc5ec \uc124\uce58 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4. \ub2e4\uc74c\uc740 \uc5d0\uc774\uc804\ud2b8 \uac00\uc785 \ubc29\ubc95\uc744 \ubcf4\uc5ec\uc8fc\ub294 \uc608\uc81c\uc785\ub2c8\ub2e4:"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n")),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \ud30c\ub77c\ubbf8\ud130\ub97c \uc124\uc815\ud558\uba74 \uc778\uc2a4\ud1a8\ub7ec\uac00 K3s\ub97c \uc11c\ubc84\uac00 \uc544\ub2cc \uc5d0\uc774\uc804\ud2b8\ub85c \uad6c\uc131\ud569\ub2c8\ub2e4. K3s \uc5d0\uc774\uc804\ud2b8\ub294 \uc81c\uacf5\ub41c URL\uc5d0\uc11c \uc218\uc2e0 \ub300\uae30 \uc911\uc778 K3s \uc11c\ubc84\uc5d0 \ub4f1\ub85d\ub429\ub2c8\ub2e4. ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN"),"\uc5d0 \uc0ac\uc6a9\ud560 \uac12\uc740 \uc11c\ubc84 \ub178\ub4dc\uc758 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/node-token"),"\uc5d0 \uc800\uc7a5\ub429\ub2c8\ub2e4."),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\uac01 \uba38\uc2e0\uc740 \uace0\uc720\ud55c \ud638\uc2a4\ud2b8 \uc774\ub984\uc744 \uac00\uc838\uc57c \ud569\ub2c8\ub2e4. \uba38\uc2e0\uc5d0 \uace0\uc720 \ud638\uc2a4\ud2b8\uba85\uc774 \uc5c6\ub294 \uacbd\uc6b0, ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \ud658\uacbd \ubcc0\uc218\ub97c \uc804\ub2ec\ud558\uace0 \uac01 \ub178\ub4dc\uc5d0 \ub300\ud574 \uc720\ud6a8\ud55c \uace0\uc720 \ud638\uc2a4\ud2b8\uba85\uc774 \uc788\ub294 \uac12\uc744 \uc81c\uacf5\ud558\uc138\uc694.")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/f5fc080a.cb4f7f2d.js b/kr/assets/js/f5fc080a.3c9b7097.js
similarity index 98%
rename from kr/assets/js/f5fc080a.cb4f7f2d.js
rename to kr/assets/js/f5fc080a.3c9b7097.js
index 94e5b6fb8..a56bedfca 100644
--- a/kr/assets/js/f5fc080a.cb4f7f2d.js
+++ b/kr/assets/js/f5fc080a.3c9b7097.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9176],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>s});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),d=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(p.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,p=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),m=d(n),s=a,u=m["".concat(p,".").concat(s)]||m[s]||k[s]||l;return n?r.createElement(u,i(i({ref:t},c),{},{components:n})):r.createElement(u,i({ref:t},c))}));function s(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8545:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>k,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const l={title:"\uba85\ub839\uc904 \ub3c4\uad6c",weight:1},i=void 0,o={unversionedId:"cli/cli",id:"cli/cli",title:"\uba85\ub839\uc904 \ub3c4\uad6c",description:"K3s \ubc14\uc774\ub108\ub9ac\uc5d0\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc5d0 \ub3c4\uc6c0\uc774 \ub418\ub294 \uc5ec\ub7ec \uac00\uc9c0 \ucd94\uac00 \ub3c4\uad6c\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/cli.md",sourceDirName:"cli",slug:"/cli/",permalink:"/kr/cli/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"Aug 1, 2023",frontMatter:{title:"\uba85\ub839\uc904 \ub3c4\uad6c",weight:1},sidebar:"mySidebar",previous:{title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",permalink:"/kr/faq/"},next:{title:"server",permalink:"/kr/cli/server"}},p={},d=[],c={toc:d};function k(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s \ubc14\uc774\ub108\ub9ac\uc5d0\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc5d0 \ub3c4\uc6c0\uc774 \ub418\ub294 \uc5ec\ub7ec \uac00\uc9c0 \ucd94\uac00 \ub3c4\uad6c\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Command"),(0,a.kt)("th",{parentName:"tr",align:null},"Description"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s server")),(0,a.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc640 \uc5d0\uc774\uc804\ud2b8 \ucef4\ud3ec\ub10c\ud2b8 \uc678\uc5d0 \ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,a.kt)("inlineCode",{parentName:"td"},"apiserver"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"scheduler"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"controller-manager"),", \uadf8\ub9ac\uace0 ",(0,a.kt)("inlineCode",{parentName:"td"},"cloud-controller-manager")," \ucef4\ud3ec\ub10c\ud2b8\ub97c \uc2e4\ud589\ud558\ub294 K3s \uc11c\ubc84 \ub178\ub4dc\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/server"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s server")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uace0\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s agent")),(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"containerd"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"flannel"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"kube-router")," \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec\uc640 \ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,a.kt)("inlineCode",{parentName:"td"},"kubelet")," \ubc0f ",(0,a.kt)("inlineCode",{parentName:"td"},"kube-proxy")," \uad6c\uc131 \uc694\uc18c\ub97c \uc2e4\ud589\ud558\ub294 K3s \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \uc2e4\ud589\ud55c\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/agent"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s agent")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s kubectl")),(0,a.kt)("td",{parentName:"tr",align:null},"\uc784\ubca0\ub4dc\ub41c ",(0,a.kt)("a",{parentName:"td",href:"https://kubernetes.io/ko/docs/reference/kubectl"},(0,a.kt)("inlineCode",{parentName:"a"},"kubectl")," \uba85\ub839"),"\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc774\uac83\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 apiserver\uc640 \uc0c1\ud638\uc791\uc6a9\ud558\uae30 \uc704\ud55c CLI\uc785\ub2c8\ub2e4. ",(0,a.kt)("inlineCode",{parentName:"td"},"KUBECONFIG")," \ud658\uacbd \ubcc0\uc218\uac00 \uc124\uc815\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc73c\uba74, \uc790\ub3d9\uc73c\ub85c ",(0,a.kt)("inlineCode",{parentName:"td"},"/etc/rancher/k3s/k3s.yaml"),"\uc5d0\uc11c kubeconfig\ub97c \uc0ac\uc6a9\ud558\ub824\uace0 \uc2dc\ub3c4\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s crictl")),(0,a.kt)("td",{parentName:"tr",align:null},"\uc784\ubca0\ub4dc\ub41c ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md"},(0,a.kt)("inlineCode",{parentName:"a"},"crictl")," \uba85\ub839"),"\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc774\uac83\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc758 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uc778\ud130\ud398\uc774\uc2a4(CRI: Container Runtime Interface)\uc640 \uc0c1\ud638 \uc791\uc6a9\ud558\uae30 \uc704\ud55c CLI\uc785\ub2c8\ub2e4. \ub514\ubc84\uae45\uc5d0 \uc720\uc6a9\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s ctr")),(0,a.kt)("td",{parentName:"tr",align:null},"\ub0b4\uc7a5\ub41c ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/projectatomic/containerd/blob/master/docs/cli.md"},(0,a.kt)("inlineCode",{parentName:"a"},"ctr")," \uba85\ub839"),"\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc774\ub294 K3s\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \ucee8\ud14c\uc774\ub108 \ub370\ubaac\uc778 containerd\uc758 CLI\uc785\ub2c8\ub2e4. \ub514\ubc84\uae45\uc5d0 \uc720\uc6a9\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s token")),(0,a.kt)("td",{parentName:"tr",align:null},"\ubd80\ud2b8\uc2a4\ud2b8\ub7a9 \ud1a0\ud070\uc744 \uad00\ub9ac\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s etcd-snapshot")),(0,a.kt)("td",{parentName:"tr",align:null},"K3s \ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130\uc758 \uc628\ub514\ub9e8\ub4dc \ubc31\uc5c5\uc744 \uc218\ud589\ud558\uc5ec S3\uc5d0 \uc5c5\ub85c\ub4dc\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/etcd-snapshot"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s secrets-encrypt")),(0,a.kt)("td",{parentName:"tr",align:null},"\ud074\ub7ec\uc2a4\ud130\uc5d0 \uc2dc\ud06c\ub9bf\uc744 \uc800\uc7a5\ud560 \ub54c \uc554\ud638\ud654\ud558\ub3c4\ub85d K3s\ub97c \uad6c\uc131\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/secrets-encrypt"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s certificate")),(0,a.kt)("td",{parentName:"tr",align:null},"K3s \uc778\uc99d\uc11c\ub97c \uad00\ub9ac\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/certificate"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s certificate")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s completion")),(0,a.kt)("td",{parentName:"tr",align:null},"k3s\uc6a9 \uc178 \uc790\ub3d9\uc644\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s help")),(0,a.kt)("td",{parentName:"tr",align:null},"\uba85\ub839 \ubaa9\ub85d \ub610\ub294 \ud55c \uba85\ub839\uc5b4\uc5d0 \ub300\ud55c \ub3c4\uc6c0\ub9d0\uc744 \ud45c\uc2dc\ud569\ub2c8\ub2e4.")))))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9176],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>s});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),d=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(p.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,p=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),m=d(n),s=a,u=m["".concat(p,".").concat(s)]||m[s]||k[s]||l;return n?r.createElement(u,i(i({ref:t},c),{},{components:n})):r.createElement(u,i({ref:t},c))}));function s(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=m;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8545:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>k,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const l={title:"\uba85\ub839\uc904 \ub3c4\uad6c",weight:1},i=void 0,o={unversionedId:"cli/cli",id:"cli/cli",title:"\uba85\ub839\uc904 \ub3c4\uad6c",description:"K3s \ubc14\uc774\ub108\ub9ac\uc5d0\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc5d0 \ub3c4\uc6c0\uc774 \ub418\ub294 \uc5ec\ub7ec \uac00\uc9c0 \ucd94\uac00 \ub3c4\uad6c\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4.",source:"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/cli.md",sourceDirName:"cli",slug:"/cli/",permalink:"/kr/cli/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"Aug 3, 2023",frontMatter:{title:"\uba85\ub839\uc904 \ub3c4\uad6c",weight:1},sidebar:"mySidebar",previous:{title:"\uc790\uc8fc \ubb3b\ub294 \uc9c8\ubb38",permalink:"/kr/faq/"},next:{title:"server",permalink:"/kr/cli/server"}},p={},d=[],c={toc:d};function k(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s \ubc14\uc774\ub108\ub9ac\uc5d0\ub294 \ud074\ub7ec\uc2a4\ud130 \uad00\ub9ac\uc5d0 \ub3c4\uc6c0\uc774 \ub418\ub294 \uc5ec\ub7ec \uac00\uc9c0 \ucd94\uac00 \ub3c4\uad6c\uac00 \ud3ec\ud568\ub418\uc5b4 \uc788\uc2b5\ub2c8\ub2e4."),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"Command"),(0,a.kt)("th",{parentName:"tr",align:null},"Description"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s server")),(0,a.kt)("td",{parentName:"tr",align:null},"\ub370\uc774\ud130\uc2a4\ud1a0\uc5b4\uc640 \uc5d0\uc774\uc804\ud2b8 \ucef4\ud3ec\ub10c\ud2b8 \uc678\uc5d0 \ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,a.kt)("inlineCode",{parentName:"td"},"apiserver"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"scheduler"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"controller-manager"),", \uadf8\ub9ac\uace0 ",(0,a.kt)("inlineCode",{parentName:"td"},"cloud-controller-manager")," \ucef4\ud3ec\ub10c\ud2b8\ub97c \uc2e4\ud589\ud558\ub294 K3s \uc11c\ubc84 \ub178\ub4dc\ub97c \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/server"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s server")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uace0\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s agent")),(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"containerd"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"flannel"),", ",(0,a.kt)("inlineCode",{parentName:"td"},"kube-router")," \ub124\ud2b8\uc6cc\ud06c \uc815\ucc45 \ucee8\ud2b8\ub864\ub7ec\uc640 \ucfe0\ubc84\ub124\ud2f0\uc2a4 ",(0,a.kt)("inlineCode",{parentName:"td"},"kubelet")," \ubc0f ",(0,a.kt)("inlineCode",{parentName:"td"},"kube-proxy")," \uad6c\uc131 \uc694\uc18c\ub97c \uc2e4\ud589\ud558\ub294 K3s \uc5d0\uc774\uc804\ud2b8 \ub178\ub4dc\ub97c \uc2e4\ud589\ud55c\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/agent"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s agent")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s kubectl")),(0,a.kt)("td",{parentName:"tr",align:null},"\uc784\ubca0\ub4dc\ub41c ",(0,a.kt)("a",{parentName:"td",href:"https://kubernetes.io/ko/docs/reference/kubectl"},(0,a.kt)("inlineCode",{parentName:"a"},"kubectl")," \uba85\ub839"),"\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc774\uac83\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4 apiserver\uc640 \uc0c1\ud638\uc791\uc6a9\ud558\uae30 \uc704\ud55c CLI\uc785\ub2c8\ub2e4. ",(0,a.kt)("inlineCode",{parentName:"td"},"KUBECONFIG")," \ud658\uacbd \ubcc0\uc218\uac00 \uc124\uc815\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc73c\uba74, \uc790\ub3d9\uc73c\ub85c ",(0,a.kt)("inlineCode",{parentName:"td"},"/etc/rancher/k3s/k3s.yaml"),"\uc5d0\uc11c kubeconfig\ub97c \uc0ac\uc6a9\ud558\ub824\uace0 \uc2dc\ub3c4\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s crictl")),(0,a.kt)("td",{parentName:"tr",align:null},"\uc784\ubca0\ub4dc\ub41c ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md"},(0,a.kt)("inlineCode",{parentName:"a"},"crictl")," \uba85\ub839"),"\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc774\uac83\uc740 \ucfe0\ubc84\ub124\ud2f0\uc2a4\uc758 \ucee8\ud14c\uc774\ub108 \ub7f0\ud0c0\uc784 \uc778\ud130\ud398\uc774\uc2a4(CRI: Container Runtime Interface)\uc640 \uc0c1\ud638 \uc791\uc6a9\ud558\uae30 \uc704\ud55c CLI\uc785\ub2c8\ub2e4. \ub514\ubc84\uae45\uc5d0 \uc720\uc6a9\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s ctr")),(0,a.kt)("td",{parentName:"tr",align:null},"\ub0b4\uc7a5\ub41c ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/projectatomic/containerd/blob/master/docs/cli.md"},(0,a.kt)("inlineCode",{parentName:"a"},"ctr")," \uba85\ub839"),"\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4. \uc774\ub294 K3s\uc5d0\uc11c \uc0ac\uc6a9\ud558\ub294 \ucee8\ud14c\uc774\ub108 \ub370\ubaac\uc778 containerd\uc758 CLI\uc785\ub2c8\ub2e4. \ub514\ubc84\uae45\uc5d0 \uc720\uc6a9\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s token")),(0,a.kt)("td",{parentName:"tr",align:null},"\ubd80\ud2b8\uc2a4\ud2b8\ub7a9 \ud1a0\ud070\uc744 \uad00\ub9ac\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s etcd-snapshot")),(0,a.kt)("td",{parentName:"tr",align:null},"K3s \ud074\ub7ec\uc2a4\ud130 \ub370\uc774\ud130\uc758 \uc628\ub514\ub9e8\ub4dc \ubc31\uc5c5\uc744 \uc218\ud589\ud558\uc5ec S3\uc5d0 \uc5c5\ub85c\ub4dc\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/etcd-snapshot"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s secrets-encrypt")),(0,a.kt)("td",{parentName:"tr",align:null},"\ud074\ub7ec\uc2a4\ud130\uc5d0 \uc2dc\ud06c\ub9bf\uc744 \uc800\uc7a5\ud560 \ub54c \uc554\ud638\ud654\ud558\ub3c4\ub85d K3s\ub97c \uad6c\uc131\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/secrets-encrypt"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s certificate")),(0,a.kt)("td",{parentName:"tr",align:null},"K3s \uc778\uc99d\uc11c\ub97c \uad00\ub9ac\ud569\ub2c8\ub2e4. \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 ",(0,a.kt)("a",{parentName:"td",href:"/kr/cli/certificate"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s certificate")," \uba85\ub839\uc5b4 \uc124\uba85\uc11c"),"\ub97c \ucc38\uc870\ud558\uc138\uc694.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s completion")),(0,a.kt)("td",{parentName:"tr",align:null},"k3s\uc6a9 \uc178 \uc790\ub3d9\uc644\uc131 \uc2a4\ud06c\ub9bd\ud2b8\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4.")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s help")),(0,a.kt)("td",{parentName:"tr",align:null},"\uba85\ub839 \ubaa9\ub85d \ub610\ub294 \ud55c \uba85\ub839\uc5b4\uc5d0 \ub300\ud55c \ub3c4\uc6c0\ub9d0\uc744 \ud45c\uc2dc\ud569\ub2c8\ub2e4.")))))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/kr/assets/js/main.70ddbead.js b/kr/assets/js/main.70ddbead.js
new file mode 100644
index 000000000..961579f88
--- /dev/null
+++ b/kr/assets/js/main.70ddbead.js
@@ -0,0 +1,2 @@
+/*! For license information please see main.70ddbead.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[179],{723:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(7294),a=n(3117),o=n(8356),i=n.n(o),l=n(6887);const s={"03ee9047":[()=>n.e(9482).then(n.bind(n,9181)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/certificate.md",9181],"0a63d2fd":[()=>n.e(9341).then(n.bind(n,7831)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",7831],"105936f9":[()=>n.e(3217).then(n.bind(n,9348)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",9348],"12d62c38":[()=>n.e(3573).then(n.bind(n,8567)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",8567],17896441:[()=>Promise.all([n.e(532),n.e(4835),n.e(7918)]).then(n.bind(n,2839)),"@theme/DocItem",2839],"18ace21a":[()=>n.e(9269).then(n.bind(n,9650)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/hardening-guide.md",9650],"1a4e3797":[()=>Promise.all([n.e(532),n.e(7920)]).then(n.bind(n,2027)),"@theme/SearchPage",2027],"1aef17e6":[()=>n.e(9169).then(n.bind(n,3024)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/security.md",3024],"1be78505":[()=>Promise.all([n.e(532),n.e(9514)]).then(n.bind(n,9963)),"@theme/DocPage",9963],"1fbd281a":[()=>n.e(3229).then(n.bind(n,8628)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/configuration.md",8628],"20aafa33":[()=>n.e(6515).then(n.bind(n,2063)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/server.md",2063],"247783bb":[()=>n.e(9334).then(n.t.bind(n,3769,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-plugin-content-docs/default/plugin-route-context-module-100.json",3769],"2f39a65d":[()=>n.e(4885).then(n.bind(n,3697)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/advanced/advanced.md",3697],"310030e7":[()=>n.e(5749).then(n.bind(n,9044)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/token.md",9044],"37e09f03":[()=>n.e(6328).then(n.bind(n,4364)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/killall.md",4364],"3f659917":[()=>n.e(6278).then(n.bind(n,930)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",930],"4129286c":[()=>n.e(5156).then(n.t.bind(n,2776,19)),"/home/runner/work/docs/docs/.docusaurus/@easyops-cn/docusaurus-search-local/default/plugin-route-context-module-100.json",2776],"42e456bb":[()=>n.e(9654).then(n.bind(n,2351)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/airgap.md",2351],"5133fc91":[()=>n.e(7355).then(n.bind(n,4192)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/packaged-components.md",4192],"54490acd":[()=>n.e(6169).then(n.bind(n,407)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/helm/helm.md",407],"609981e6":[()=>n.e(2466).then(n.bind(n,3724)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/private-registry.md",3724],"65004aa0":[()=>n.e(8920).then(n.bind(n,6281)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/reference.md",6281],"65309f9a":[()=>n.e(6005).then(n.bind(n,2341)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",2341],"6a7149bd":[()=>n.e(1894).then(n.bind(n,8160)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha.md",8160],"7461830d":[()=>n.e(1208).then(n.bind(n,5720)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",5720],"7f0bf1de":[()=>n.e(5726).then(n.bind(n,2301)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/storage/storage.md",2301],"81cffba8":[()=>n.e(804).then(n.bind(n,4754)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/introduction.md",4754],"832e9842":[()=>n.e(9184).then(n.bind(n,6117)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/agent.md",6117],"935f2afb":[()=>n.e(53).then(n.t.bind(n,1109,19)),"~docs/default/version-current-metadata-prop-751.json",1109],"944a1646":[()=>n.e(2399).then(n.bind(n,8724)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",8724],a0c5848d:[()=>n.e(9059).then(n.bind(n,5344)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/installation.md",5344],a101d863:[()=>n.e(9166).then(n.bind(n,5696)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/networking/networking.md",5696],a11c790a:[()=>n.e(937).then(n.bind(n,4951)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/faq/faq.md",4951],a1ce2930:[()=>n.e(2257).then(n.bind(n,1588)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",1588],b1445c4f:[()=>n.e(547).then(n.bind(n,1650)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",1650],b5fc650f:[()=>n.e(3443).then(n.bind(n,4227)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/architecture/architecture.md",4227],b64afda8:[()=>n.e(6263).then(n.bind(n,1738)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/self-assessment.md",1738],b87d0734:[()=>n.e(660).then(n.bind(n,4249)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/env-variables.md",4249],b97d3598:[()=>n.e(7563).then(n.bind(n,2238)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/requirements.md",2238],bccfb1cb:[()=>n.e(910).then(n.bind(n,3335)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/server-roles.md",3335],c7700003:[()=>n.e(240).then(n.bind(n,6512)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/automated.md",6512],d05291c6:[()=>n.e(4606).then(n.bind(n,1353)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/network-options.md",1353],d428bf88:[()=>n.e(3083).then(n.bind(n,7987)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",7987],d539ae32:[()=>n.e(7453).then(n.bind(n,8309)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",8309],dd0fba39:[()=>n.e(7713).then(n.bind(n,2285)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/datastore.md",2285],e8666366:[()=>n.e(3936).then(n.bind(n,1115)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/uninstall.md",1115],e92581be:[()=>n.e(5470).then(n.bind(n,154)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/manual.md",154],efc00427:[()=>n.e(3902).then(n.bind(n,31)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",31],f5fc080a:[()=>n.e(9176).then(n.bind(n,8545)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/cli.md",8545]};function u(e){let{error:t,retry:n,pastDelay:a}=e;return t?r.createElement("div",{style:{textAlign:"center",color:"#fff",backgroundColor:"#fa383e",borderColor:"#fa383e",borderStyle:"solid",borderRadius:"0.25rem",borderWidth:"1px",boxSizing:"border-box",display:"block",padding:"1rem",flex:"0 0 50%",marginLeft:"25%",marginRight:"25%",marginTop:"5rem",maxWidth:"50%",width:"100%"}},r.createElement("p",null,String(t)),r.createElement("div",null,r.createElement("button",{type:"button",onClick:n},"Retry"))):a?r.createElement("div",{style:{display:"flex",justifyContent:"center",alignItems:"center",height:"100vh"}},r.createElement("svg",{id:"loader",style:{width:128,height:110,position:"absolute",top:"calc(100vh - 64%)"},viewBox:"0 0 45 45",xmlns:"http://www.w3.org/2000/svg",stroke:"#61dafb"},r.createElement("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",strokeWidth:"2"},r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"1.5s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"1.5s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"1.5s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"3s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"3s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"3s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"8"},r.createElement("animate",{attributeName:"r",begin:"0s",dur:"1.5s",values:"6;1;2;3;4;5;6",calcMode:"linear",repeatCount:"indefinite"}))))):null}var c=n(9670),d=n(226);function f(e,t){if("*"===e)return i()({loading:u,loader:()=>n.e(4972).then(n.bind(n,4972)),modules:["@theme/NotFound"],webpack:()=>[4972],render(e,t){const n=e.default;return r.createElement(d.z,{value:{plugin:{name:"native",id:"default"}}},r.createElement(n,t))}});const o=l[`${e}-${t}`],f={},p=[],m=[],h=(0,c.Z)(o);return Object.entries(h).forEach((e=>{let[t,n]=e;const r=s[n];r&&(f[t]=r[0],p.push(r[1]),m.push(r[2]))})),i().Map({loading:u,loader:f,modules:p,webpack:()=>m,render(t,n){const i=JSON.parse(JSON.stringify(o));Object.entries(t).forEach((t=>{let[n,r]=t;const a=r.default;if(!a)throw new Error(`The page component at ${e} doesn't have a default export. This makes it impossible to render anything. Consider default-exporting a React component.`);"object"!=typeof a&&"function"!=typeof a||Object.keys(r).filter((e=>"default"!==e)).forEach((e=>{a[e]=r[e]}));let o=i;const l=n.split(".");l.slice(0,-1).forEach((e=>{o=o[e]})),o[l[l.length-1]]=a}));const l=i.__comp;delete i.__comp;const s=i.__context;return delete i.__context,r.createElement(d.z,{value:s},r.createElement(l,(0,a.Z)({},i,n)))}})}const p=[{path:"/kr/search",component:f("/kr/search","af9"),exact:!0},{path:"/kr/",component:f("/kr/","4d1"),routes:[{path:"/kr/",component:f("/kr/","064"),exact:!0,sidebar:"mySidebar"},{path:"/kr/advanced",component:f("/kr/advanced","6ef"),exact:!0,sidebar:"mySidebar"},{path:"/kr/architecture",component:f("/kr/architecture","120"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli",component:f("/kr/cli","1e9"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/agent",component:f("/kr/cli/agent","9ac"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/certificate",component:f("/kr/cli/certificate","fad"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/etcd-snapshot",component:f("/kr/cli/etcd-snapshot","579"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/secrets-encrypt",component:f("/kr/cli/secrets-encrypt","4e4"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/server",component:f("/kr/cli/server","238"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/token",component:f("/kr/cli/token","81c"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cluster-access",component:f("/kr/cluster-access","49f"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore",component:f("/kr/datastore","b49"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/backup-restore",component:f("/kr/datastore/backup-restore","a31"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/cluster-loadbalancer",component:f("/kr/datastore/cluster-loadbalancer","307"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/ha",component:f("/kr/datastore/ha","c2e"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/ha-embedded",component:f("/kr/datastore/ha-embedded","639"),exact:!0,sidebar:"mySidebar"},{path:"/kr/faq",component:f("/kr/faq","12e"),exact:!0,sidebar:"mySidebar"},{path:"/kr/helm",component:f("/kr/helm","c73"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation",component:f("/kr/installation","942"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/airgap",component:f("/kr/installation/airgap","a5a"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/configuration",component:f("/kr/installation/configuration","fd6"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/kube-dashboard",component:f("/kr/installation/kube-dashboard","381"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/network-options",component:f("/kr/installation/network-options","818"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/packaged-components",component:f("/kr/installation/packaged-components","54d"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/private-registry",component:f("/kr/installation/private-registry","d68"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/requirements",component:f("/kr/installation/requirements","455"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/server-roles",component:f("/kr/installation/server-roles","0f5"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/uninstall",component:f("/kr/installation/uninstall","3ee"),exact:!0,sidebar:"mySidebar"},{path:"/kr/known-issues",component:f("/kr/known-issues","c52"),exact:!0,sidebar:"mySidebar"},{path:"/kr/networking",component:f("/kr/networking","9a1"),exact:!0,sidebar:"mySidebar"},{path:"/kr/quick-start",component:f("/kr/quick-start","e3f"),exact:!0,sidebar:"mySidebar"},{path:"/kr/reference",component:f("/kr/reference","994"),exact:!0,sidebar:"mySidebar"},{path:"/kr/reference/env-variables",component:f("/kr/reference/env-variables","aff"),exact:!0,sidebar:"mySidebar"},{path:"/kr/reference/resource-profiling",component:f("/kr/reference/resource-profiling","6cc"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security",component:f("/kr/security","a34"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security/hardening-guide",component:f("/kr/security/hardening-guide","8eb"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security/secrets-encryption",component:f("/kr/security/secrets-encryption","466"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security/self-assessment",component:f("/kr/security/self-assessment","e43"),exact:!0,sidebar:"mySidebar"},{path:"/kr/storage",component:f("/kr/storage","369"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades",component:f("/kr/upgrades","002"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades/automated",component:f("/kr/upgrades/automated","255"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades/killall",component:f("/kr/upgrades/killall","a9e"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades/manual",component:f("/kr/upgrades/manual","0b0"),exact:!0,sidebar:"mySidebar"}]},{path:"*",component:f("*")}]},8934:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,t:()=>o});var r=n(7294);const a=r.createContext(!1);function o(e){let{children:t}=e;const[n,o]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{o(!0)}),[]),r.createElement(a.Provider,{value:n},t)}},9383:(e,t,n)=>{"use strict";var r=n(7294),a=n(3935),o=n(3727),i=n(405),l=n(412);const s=[n(2497),n(3310),n(8320),n(2295)];var u=n(723),c=n(6775),d=n(8790);function f(e){let{children:t}=e;return r.createElement(r.Fragment,null,t)}var p=n(3117),m=n(5742),h=n(2263),g=n(4996),v=n(6668),b=n(1944),y=n(4711),w=n(9727),k=n(3320),E=n(197);function S(){const{i18n:{defaultLocale:e,localeConfigs:t}}=(0,h.Z)(),n=(0,y.l)();return r.createElement(m.Z,null,Object.entries(t).map((e=>{let[t,{htmlLang:a}]=e;return r.createElement("link",{key:t,rel:"alternate",href:n.createUrl({locale:t,fullyQualified:!0}),hrefLang:a})})),r.createElement("link",{rel:"alternate",href:n.createUrl({locale:e,fullyQualified:!0}),hrefLang:"x-default"}))}function x(e){let{permalink:t}=e;const{siteConfig:{url:n}}=(0,h.Z)(),a=function(){const{siteConfig:{url:e}}=(0,h.Z)(),{pathname:t}=(0,c.TH)();return e+(0,g.Z)(t)}(),o=t?`${n}${t}`:a;return r.createElement(m.Z,null,r.createElement("meta",{property:"og:url",content:o}),r.createElement("link",{rel:"canonical",href:o}))}function T(){const{i18n:{currentLocale:e}}=(0,h.Z)(),{metadata:t,image:n}=(0,v.L)();return r.createElement(r.Fragment,null,r.createElement(m.Z,null,r.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),r.createElement("body",{className:w.h})),n&&r.createElement(b.d,{image:n}),r.createElement(x,null),r.createElement(S,null),r.createElement(E.Z,{tag:k.HX,locale:e}),r.createElement(m.Z,null,t.map(((e,t)=>r.createElement("meta",(0,p.Z)({key:t},e))))))}const C=new Map;function _(e){if(C.has(e.pathname))return{...e,pathname:C.get(e.pathname)};if((0,d.f)(u.Z,e.pathname).some((e=>{let{route:t}=e;return!0===t.exact})))return C.set(e.pathname,e.pathname),e;const t=e.pathname.trim().replace(/(?:\/index)?\.html$/,"")||"/";return C.set(e.pathname,t),{...e,pathname:t}}var L=n(8934),R=n(8940);function A(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];const a=s.map((t=>(t.default?.[e]??t[e])?.(...n)));return()=>a.forEach((e=>e?.()))}const N=function(e){let{children:t,location:n,previousLocation:a}=e;return(0,r.useLayoutEffect)((()=>{a!==n&&(!function(e){let{location:t,previousLocation:n}=e;if(!n)return;const r=t.pathname===n.pathname,a=t.hash===n.hash,o=t.search===n.search;if(r&&a&&!o)return;const{hash:i}=t;if(i){const e=decodeURIComponent(i.substring(1));document.getElementById(e)?.scrollIntoView()}else window.scrollTo(0,0)}({location:n,previousLocation:a}),A("onRouteDidUpdate",{previousLocation:a,location:n}))}),[a,n]),t};function P(e){const t=Array.from(new Set([e,decodeURI(e)])).map((e=>(0,d.f)(u.Z,e))).flat();return Promise.all(t.map((e=>e.route.component.preload?.())))}class O extends r.Component{constructor(e){super(e),this.previousLocation=void 0,this.routeUpdateCleanupCb=void 0,this.previousLocation=null,this.routeUpdateCleanupCb=l.Z.canUseDOM?A("onRouteUpdate",{previousLocation:null,location:this.props.location}):()=>{},this.state={nextRouteHasLoaded:!0}}shouldComponentUpdate(e,t){if(e.location===this.props.location)return t.nextRouteHasLoaded;const n=e.location;return this.previousLocation=this.props.location,this.setState({nextRouteHasLoaded:!1}),this.routeUpdateCleanupCb=A("onRouteUpdate",{previousLocation:this.previousLocation,location:n}),P(n.pathname).then((()=>{this.routeUpdateCleanupCb(),this.setState({nextRouteHasLoaded:!0})})).catch((e=>{console.warn(e),window.location.reload()})),!1}render(){const{children:e,location:t}=this.props;return r.createElement(N,{previousLocation:this.previousLocation,location:t},r.createElement(c.AW,{location:t,render:()=>e}))}}const I=O,D="__docusaurus-base-url-issue-banner-container",M="__docusaurus-base-url-issue-banner-suggestion-container",F="__DOCUSAURUS_INSERT_BASEURL_BANNER";function B(e){return`\nwindow['${F}'] = true;\n\ndocument.addEventListener('DOMContentLoaded', maybeInsertBanner);\n\nfunction maybeInsertBanner() {\n  var shouldInsert = window['${F}'];\n  shouldInsert && insertBanner();\n}\n\nfunction insertBanner() {\n  var bannerContainer = document.getElementById('${D}');\n  if (!bannerContainer) {\n    return;\n  }\n  var bannerHtml = ${JSON.stringify(function(e){return`\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">${e}</span> ${"/"===e?" (default value)":""}</p>\n   <p>We suggest trying baseUrl = <span id="${M}" style="font-weight: bold; color: green;"></span></p>\n</div>\n`}(e)).replace(/</g,"\\<")};\n  bannerContainer.innerHTML = bannerHtml;\n  var suggestionContainer = document.getElementById('${M}');\n  var actualHomePagePath = window.location.pathname;\n  var suggestedBaseUrl = actualHomePagePath.substr(-1) === '/'\n        ? actualHomePagePath\n        : actualHomePagePath + '/';\n  suggestionContainer.innerHTML = suggestedBaseUrl;\n}\n`}function j(){const{siteConfig:{baseUrl:e}}=(0,h.Z)();return(0,r.useLayoutEffect)((()=>{window[F]=!1}),[]),r.createElement(r.Fragment,null,!l.Z.canUseDOM&&r.createElement(m.Z,null,r.createElement("script",null,B(e))),r.createElement("div",{id:D}))}function z(){const{siteConfig:{baseUrl:e,baseUrlIssueBanner:t}}=(0,h.Z)(),{pathname:n}=(0,c.TH)();return t&&n===e?r.createElement(j,null):null}function $(){const{siteConfig:{favicon:e,title:t,noIndex:n},i18n:{currentLocale:a,localeConfigs:o}}=(0,h.Z)(),i=(0,g.Z)(e),{htmlLang:l,direction:s}=o[a];return r.createElement(m.Z,null,r.createElement("html",{lang:l,dir:s}),r.createElement("title",null,t),r.createElement("meta",{property:"og:title",content:t}),r.createElement("meta",{name:"viewport",content:"width=device-width, initial-scale=1.0"}),n&&r.createElement("meta",{name:"robots",content:"noindex, nofollow"}),e&&r.createElement("link",{rel:"icon",href:i}))}var U=n(4763);function q(){const e=(0,d.H)(u.Z),t=(0,c.TH)();return r.createElement(U.Z,null,r.createElement(R.M,null,r.createElement(L.t,null,r.createElement(f,null,r.createElement($,null),r.createElement(T,null),r.createElement(z,null),r.createElement(I,{location:_(t)},e)))))}var H=n(6887);const G=function(e){try{return document.createElement("link").relList.supports(e)}catch{return!1}}("prefetch")?function(e){return new Promise(((t,n)=>{if("undefined"==typeof document)return void n();const r=document.createElement("link");r.setAttribute("rel","prefetch"),r.setAttribute("href",e),r.onload=()=>t(),r.onerror=()=>n();(document.getElementsByTagName("head")[0]??document.getElementsByName("script")[0]?.parentNode)?.appendChild(r)}))}:function(e){return new Promise(((t,n)=>{const r=new XMLHttpRequest;r.open("GET",e,!0),r.withCredentials=!0,r.onload=()=>{200===r.status?t():n()},r.send(null)}))};var Z=n(9670);const Q=new Set,V=new Set,W=()=>navigator.connection?.effectiveType.includes("2g")||navigator.connection?.saveData,K={prefetch(e){if(!(e=>!W()&&!V.has(e)&&!Q.has(e))(e))return!1;Q.add(e);const t=(0,d.f)(u.Z,e).flatMap((e=>{return t=e.route.path,Object.entries(H).filter((e=>{let[n]=e;return n.replace(/-[^-]+$/,"")===t})).flatMap((e=>{let[,t]=e;return Object.values((0,Z.Z)(t))}));var t}));return Promise.all(t.map((e=>{const t=n.gca(e);return t&&!t.includes("undefined")?G(t).catch((()=>{})):Promise.resolve()})))},preload:e=>!!(e=>!W()&&!V.has(e))(e)&&(V.add(e),P(e))},Y=Object.freeze(K);if(l.Z.canUseDOM){window.docusaurus=Y;const e=a.hydrate;P(window.location.pathname).then((()=>{e(r.createElement(i.B6,null,r.createElement(o.VK,null,r.createElement(q,null))),document.getElementById("__docusaurus"))}))}},8940:(e,t,n)=>{"use strict";n.d(t,{_:()=>c,M:()=>d});var r=n(7294),a=n(6809);const o=JSON.parse('{"docusaurus-plugin-content-docs":{"default":{"path":"/kr/","versions":[{"name":"current","label":"\ud604\uc7ac \ubc84\uc804","isLast":true,"path":"/kr/","mainDocId":"introduction","docs":[{"id":"advanced/advanced","path":"/kr/advanced/","sidebar":"mySidebar"},{"id":"architecture/architecture","path":"/kr/architecture/","sidebar":"mySidebar"},{"id":"cli/agent","path":"/kr/cli/agent","sidebar":"mySidebar"},{"id":"cli/certificate","path":"/kr/cli/certificate","sidebar":"mySidebar"},{"id":"cli/cli","path":"/kr/cli/","sidebar":"mySidebar"},{"id":"cli/etcd-snapshot","path":"/kr/cli/etcd-snapshot","sidebar":"mySidebar"},{"id":"cli/secrets-encrypt","path":"/kr/cli/secrets-encrypt","sidebar":"mySidebar"},{"id":"cli/server","path":"/kr/cli/server","sidebar":"mySidebar"},{"id":"cli/token","path":"/kr/cli/token","sidebar":"mySidebar"},{"id":"cluster-access/cluster-access","path":"/kr/cluster-access/","sidebar":"mySidebar"},{"id":"datastore/backup-restore","path":"/kr/datastore/backup-restore","sidebar":"mySidebar"},{"id":"datastore/cluster-loadbalancer","path":"/kr/datastore/cluster-loadbalancer","sidebar":"mySidebar"},{"id":"datastore/datastore","path":"/kr/datastore/","sidebar":"mySidebar"},{"id":"datastore/ha","path":"/kr/datastore/ha","sidebar":"mySidebar"},{"id":"datastore/ha-embedded","path":"/kr/datastore/ha-embedded","sidebar":"mySidebar"},{"id":"faq/faq","path":"/kr/faq/","sidebar":"mySidebar"},{"id":"helm/helm","path":"/kr/helm/","sidebar":"mySidebar"},{"id":"installation/airgap","path":"/kr/installation/airgap","sidebar":"mySidebar"},{"id":"installation/configuration","path":"/kr/installation/configuration","sidebar":"mySidebar"},{"id":"installation/installation","path":"/kr/installation/","sidebar":"mySidebar"},{"id":"installation/kube-dashboard","path":"/kr/installation/kube-dashboard","sidebar":"mySidebar"},{"id":"installation/network-options","path":"/kr/installation/network-options","sidebar":"mySidebar"},{"id":"installation/packaged-components","path":"/kr/installation/packaged-components","sidebar":"mySidebar"},{"id":"installation/private-registry","path":"/kr/installation/private-registry","sidebar":"mySidebar"},{"id":"installation/requirements","path":"/kr/installation/requirements","sidebar":"mySidebar"},{"id":"installation/server-roles","path":"/kr/installation/server-roles","sidebar":"mySidebar"},{"id":"installation/uninstall","path":"/kr/installation/uninstall","sidebar":"mySidebar"},{"id":"introduction","path":"/kr/","sidebar":"mySidebar"},{"id":"known-issues/known-issues","path":"/kr/known-issues/","sidebar":"mySidebar"},{"id":"networking/networking","path":"/kr/networking/","sidebar":"mySidebar"},{"id":"quick-start/quick-start","path":"/kr/quick-start/","sidebar":"mySidebar"},{"id":"reference/env-variables","path":"/kr/reference/env-variables","sidebar":"mySidebar"},{"id":"reference/reference","path":"/kr/reference/","sidebar":"mySidebar"},{"id":"reference/resource-profiling","path":"/kr/reference/resource-profiling","sidebar":"mySidebar"},{"id":"security/hardening-guide","path":"/kr/security/hardening-guide","sidebar":"mySidebar"},{"id":"security/secrets-encryption","path":"/kr/security/secrets-encryption","sidebar":"mySidebar"},{"id":"security/security","path":"/kr/security/","sidebar":"mySidebar"},{"id":"security/self-assessment","path":"/kr/security/self-assessment","sidebar":"mySidebar"},{"id":"storage/storage","path":"/kr/storage/","sidebar":"mySidebar"},{"id":"upgrades/automated","path":"/kr/upgrades/automated","sidebar":"mySidebar"},{"id":"upgrades/killall","path":"/kr/upgrades/killall","sidebar":"mySidebar"},{"id":"upgrades/manual","path":"/kr/upgrades/manual","sidebar":"mySidebar"},{"id":"upgrades/upgrades","path":"/kr/upgrades/","sidebar":"mySidebar"}],"draftIds":[],"sidebars":{"mySidebar":{"link":{"path":"/kr/","label":"introduction"}}}}],"breadcrumbs":true}}}'),i=JSON.parse('{"defaultLocale":"en","locales":["en","zh","kr"],"path":"i18n","currentLocale":"kr","localeConfigs":{"en":{"label":"English","direction":"ltr","htmlLang":"en","calendar":"gregory","path":"en"},"zh":{"label":"\u7b80\u4f53\u4e2d\u6587","direction":"ltr","htmlLang":"zh","calendar":"gregory","path":"zh"},"kr":{"label":"\ud55c\uad6d\uc5b4","direction":"ltr","htmlLang":"kr","calendar":"gregory","path":"kr"}}}');var l=n(7529);const s=JSON.parse('{"docusaurusVersion":"2.4.1","siteVersion":"0.0.1","pluginVersions":{"docusaurus-plugin-content-docs":{"type":"package","name":"@docusaurus/plugin-content-docs","version":"2.4.1"},"docusaurus-plugin-content-pages":{"type":"package","name":"@docusaurus/plugin-content-pages","version":"2.4.1"},"docusaurus-plugin-sitemap":{"type":"package","name":"@docusaurus/plugin-sitemap","version":"2.4.1"},"docusaurus-theme-classic":{"type":"package","name":"@docusaurus/theme-classic","version":"2.4.1"},"docusaurus-plugin-client-redirects":{"type":"package","name":"@docusaurus/plugin-client-redirects","version":"2.4.1"},"docusaurus-theme-mermaid":{"type":"package","name":"@docusaurus/theme-mermaid","version":"2.4.1"},"@easyops-cn/docusaurus-search-local":{"type":"package","name":"@easyops-cn/docusaurus-search-local","version":"0.35.0"}}}'),u={siteConfig:a.Z,siteMetadata:s,globalData:o,i18n:i,codeTranslations:l},c=r.createContext(u);function d(e){let{children:t}=e;return r.createElement(c.Provider,{value:u},t)}},4763:(e,t,n)=>{"use strict";n.d(t,{Z:()=>f});var r=n(7294),a=n(412),o=n(5742),i=n(8780),l=n(1573);function s(e){let{error:t,tryAgain:n}=e;return r.createElement("div",{style:{display:"flex",flexDirection:"column",justifyContent:"center",alignItems:"flex-start",minHeight:"100vh",width:"100%",maxWidth:"80ch",fontSize:"20px",margin:"0 auto",padding:"1rem"}},r.createElement("h1",{style:{fontSize:"3rem"}},"This page crashed"),r.createElement("button",{type:"button",onClick:n,style:{margin:"1rem 0",fontSize:"2rem",cursor:"pointer",borderRadius:20,padding:"1rem"}},"Try again"),r.createElement(u,{error:t}))}function u(e){let{error:t}=e;const n=(0,i.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{style:{whiteSpace:"pre-wrap"}},n)}function c(e){let{error:t,tryAgain:n}=e;return r.createElement(f,{fallback:()=>r.createElement(s,{error:t,tryAgain:n})},r.createElement(o.Z,null,r.createElement("title",null,"Page Error")),r.createElement(l.Z,null,r.createElement(s,{error:t,tryAgain:n})))}const d=e=>r.createElement(c,e);class f extends r.Component{constructor(e){super(e),this.state={error:null}}componentDidCatch(e){a.Z.canUseDOM&&this.setState({error:e})}render(){const{children:e}=this.props,{error:t}=this.state;if(t){const e={error:t,tryAgain:()=>this.setState({error:null})};return(this.props.fallback??d)(e)}return e??null}}},412:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});const r="undefined"!=typeof window&&"document"in window&&"createElement"in window.document,a={canUseDOM:r,canUseEventListeners:r&&("addEventListener"in window||"attachEvent"in window),canUseIntersectionObserver:r&&"IntersectionObserver"in window,canUseViewport:r&&"screen"in window}},5742:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(405);function o(e){return r.createElement(a.ql,e)}},9960:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(3117),a=n(7294),o=n(3727),i=n(8780),l=n(2263),s=n(3919),u=n(412);const c=a.createContext({collectLink:()=>{}});var d=n(4996);function f(e,t){let{isNavLink:n,to:f,href:p,activeClassName:m,isActive:h,"data-noBrokenLinkCheck":g,autoAddBaseUrl:v=!0,...b}=e;const{siteConfig:{trailingSlash:y,baseUrl:w}}=(0,l.Z)(),{withBaseUrl:k}=(0,d.C)(),E=(0,a.useContext)(c),S=(0,a.useRef)(null);(0,a.useImperativeHandle)(t,(()=>S.current));const x=f||p;const T=(0,s.Z)(x),C=x?.replace("pathname://","");let _=void 0!==C?(L=C,v&&(e=>e.startsWith("/"))(L)?k(L):L):void 0;var L;_&&T&&(_=(0,i.applyTrailingSlash)(_,{trailingSlash:y,baseUrl:w}));const R=(0,a.useRef)(!1),A=n?o.OL:o.rU,N=u.Z.canUseIntersectionObserver,P=(0,a.useRef)(),O=()=>{R.current||null==_||(window.docusaurus.preload(_),R.current=!0)};(0,a.useEffect)((()=>(!N&&T&&null!=_&&window.docusaurus.prefetch(_),()=>{N&&P.current&&P.current.disconnect()})),[P,_,N,T]);const I=_?.startsWith("#")??!1,D=!_||!T||I;return D||g||E.collectLink(_),D?a.createElement("a",(0,r.Z)({ref:S,href:_},x&&!T&&{target:"_blank",rel:"noopener noreferrer"},b)):a.createElement(A,(0,r.Z)({},b,{onMouseEnter:O,onTouchStart:O,innerRef:e=>{S.current=e,N&&e&&T&&(P.current=new window.IntersectionObserver((t=>{t.forEach((t=>{e===t.target&&(t.isIntersecting||t.intersectionRatio>0)&&(P.current.unobserve(e),P.current.disconnect(),null!=_&&window.docusaurus.prefetch(_))}))})),P.current.observe(e))},to:_},n&&{isActive:h,activeClassName:m}))}const p=a.forwardRef(f)},5999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s,I:()=>l});var r=n(7294);function a(e,t){const n=e.split(/(\{\w+\})/).map(((e,n)=>{if(n%2==1){const n=t?.[e.slice(1,-1)];if(void 0!==n)return n}return e}));return n.some((e=>(0,r.isValidElement)(e)))?n.map(((e,t)=>(0,r.isValidElement)(e)?r.cloneElement(e,{key:t}):e)).filter((e=>""!==e)):n.join("")}var o=n(7529);function i(e){let{id:t,message:n}=e;if(void 0===t&&void 0===n)throw new Error("Docusaurus translation declarations must have at least a translation id or a default translation message");return o[t??n]??n??t}function l(e,t){let{message:n,id:r}=e;return a(i({message:n,id:r}),t)}function s(e){let{children:t,id:n,values:o}=e;if(t&&"string"!=typeof t)throw console.warn("Illegal <Translate> children",t),new Error("The Docusaurus <Translate> component only accept simple string values");const l=i({message:t,id:n});return r.createElement(r.Fragment,null,a(l,o))}},9935:(e,t,n)=>{"use strict";n.d(t,{m:()=>r});const r="default"},3919:(e,t,n)=>{"use strict";function r(e){return/^(?:\w*:|\/\/)/.test(e)}function a(e){return void 0!==e&&!r(e)}n.d(t,{Z:()=>a,b:()=>r})},4996:(e,t,n)=>{"use strict";n.d(t,{C:()=>i,Z:()=>l});var r=n(7294),a=n(2263),o=n(3919);function i(){const{siteConfig:{baseUrl:e,url:t}}=(0,a.Z)(),n=(0,r.useCallback)(((n,r)=>function(e,t,n,r){let{forcePrependBaseUrl:a=!1,absolute:i=!1}=void 0===r?{}:r;if(!n||n.startsWith("#")||(0,o.b)(n))return n;if(a)return t+n.replace(/^\//,"");if(n===t.replace(/\/$/,""))return t;const l=n.startsWith(t)?n:t+n.replace(/^\//,"");return i?e+l:l}(t,e,n,r)),[t,e]);return{withBaseUrl:n}}function l(e,t){void 0===t&&(t={});const{withBaseUrl:n}=i();return n(e,t)}},2263:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8940);function o(){return(0,r.useContext)(a._)}},2389:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8934);function o(){return(0,r.useContext)(a._)}},9670:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});function r(e){const t={};return function e(n,r){Object.entries(n).forEach((n=>{let[a,o]=n;const i=r?`${r}.${a}`:a;var l;"object"==typeof(l=o)&&l&&Object.keys(l).length>0?e(o,i):t[i]=o}))}(e),t}},226:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,z:()=>o});var r=n(7294);const a=r.createContext(null);function o(e){let{children:t,value:n}=e;const o=r.useContext(a),i=(0,r.useMemo)((()=>function(e){let{parent:t,value:n}=e;if(!t){if(!n)throw new Error("Unexpected: no Docusaurus route context found");if(!("plugin"in n))throw new Error("Unexpected: Docusaurus topmost route context has no `plugin` attribute");return n}const r={...t.data,...n?.data};return{plugin:t.plugin,data:r}}({parent:o,value:n})),[o,n]);return r.createElement(a.Provider,{value:i},t)}},143:(e,t,n)=>{"use strict";n.d(t,{Iw:()=>h,gA:()=>f,_r:()=>c,Jo:()=>g,zh:()=>d,yW:()=>m,gB:()=>p});var r=n(6775),a=n(2263),o=n(9935);function i(e,t){void 0===t&&(t={});const n=function(){const{globalData:e}=(0,a.Z)();return e}()[e];if(!n&&t.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin.`);return n}const l=e=>e.versions.find((e=>e.isLast));function s(e,t){const n=function(e,t){const n=l(e);return[...e.versions.filter((e=>e!==n)),n].find((e=>!!(0,r.LX)(t,{path:e.path,exact:!1,strict:!1})))}(e,t),a=n?.docs.find((e=>!!(0,r.LX)(t,{path:e.path,exact:!0,strict:!1})));return{activeVersion:n,activeDoc:a,alternateDocVersions:a?function(t){const n={};return e.versions.forEach((e=>{e.docs.forEach((r=>{r.id===t&&(n[e.name]=r)}))})),n}(a.id):{}}}const u={},c=()=>i("docusaurus-plugin-content-docs")??u,d=e=>function(e,t,n){void 0===t&&(t=o.m),void 0===n&&(n={});const r=i(e)?.[t];if(!r&&n.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin with id "${t}".`);return r}("docusaurus-plugin-content-docs",e,{failfast:!0});function f(e){void 0===e&&(e={});const t=c(),{pathname:n}=(0,r.TH)();return function(e,t,n){void 0===n&&(n={});const a=Object.entries(e).sort(((e,t)=>t[1].path.localeCompare(e[1].path))).find((e=>{let[,n]=e;return!!(0,r.LX)(t,{path:n.path,exact:!1,strict:!1})})),o=a?{pluginId:a[0],pluginData:a[1]}:void 0;if(!o&&n.failfast)throw new Error(`Can't find active docs plugin for "${t}" pathname, while it was expected to be found. Maybe you tried to use a docs feature that can only be used on a docs-related page? Existing docs plugin paths are: ${Object.values(e).map((e=>e.path)).join(", ")}`);return o}(t,n,e)}function p(e){return d(e).versions}function m(e){const t=d(e);return l(t)}function h(e){const t=d(e),{pathname:n}=(0,r.TH)();return s(t,n)}function g(e){const t=d(e),{pathname:n}=(0,r.TH)();return function(e,t){const n=l(e);return{latestDocSuggestion:s(e,t).alternateDocVersions[n.name],latestVersionSuggestion:n}}(t,n)}},8320:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>o});var r=n(4865),a=n.n(r);a().configure({showSpinner:!1});const o={onRouteUpdate(e){let{location:t,previousLocation:n}=e;if(n&&t.pathname!==n.pathname){const e=window.setTimeout((()=>{a().start()}),200);return()=>window.clearTimeout(e)}},onRouteDidUpdate(){a().done()}}},3310:(e,t,n)=>{"use strict";n.r(t);var r=n(7410),a=n(6809);!function(e){const{themeConfig:{prism:t}}=a.Z,{additionalLanguages:r}=t;globalThis.Prism=e,r.forEach((e=>{n(6726)(`./prism-${e}`)})),delete globalThis.Prism}(r.Z)},9471:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294);const a="iconExternalLink_nPIU";function o(e){let{width:t=13.5,height:n=13.5}=e;return r.createElement("svg",{width:t,height:n,"aria-hidden":"true",viewBox:"0 0 24 24",className:a},r.createElement("path",{fill:"currentColor",d:"M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"}))}},1573:(e,t,n)=>{"use strict";n.d(t,{Z:()=>Jt});var r=n(7294),a=n(6010),o=n(4763),i=n(1944),l=n(3117),s=n(6775),u=n(5999),c=n(5936);const d="__docusaurus_skipToContent_fallback";function f(e){e.setAttribute("tabindex","-1"),e.focus(),e.removeAttribute("tabindex")}function p(){const e=(0,r.useRef)(null),{action:t}=(0,s.k6)(),n=(0,r.useCallback)((e=>{e.preventDefault();const t=document.querySelector("main:first-of-type")??document.getElementById(d);t&&f(t)}),[]);return(0,c.S)((n=>{let{location:r}=n;e.current&&!r.hash&&"PUSH"===t&&f(e.current)})),{containerRef:e,onClick:n}}const m=(0,u.I)({id:"theme.common.skipToMainContent",description:"The skip to content label used for accessibility, allowing to rapidly navigate to main content with keyboard tab/enter navigation",message:"Skip to main content"});function h(e){const t=e.children??m,{containerRef:n,onClick:a}=p();return r.createElement("div",{ref:n,role:"region","aria-label":m},r.createElement("a",(0,l.Z)({},e,{href:`#${d}`,onClick:a}),t))}var g=n(5281),v=n(9727);const b="skipToContent_fXgn";function y(){return r.createElement(h,{className:b})}var w=n(6668),k=n(9689);function E(e){let{width:t=21,height:n=21,color:a="currentColor",strokeWidth:o=1.2,className:i,...s}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 15 15",width:t,height:n},s),r.createElement("g",{stroke:a,strokeWidth:o},r.createElement("path",{d:"M.75.75l13.5 13.5M14.25.75L.75 14.25"})))}const S="closeButton_CVFx";function x(e){return r.createElement("button",(0,l.Z)({type:"button","aria-label":(0,u.I)({id:"theme.AnnouncementBar.closeButtonAriaLabel",message:"Close",description:"The ARIA label for close button of announcement bar"})},e,{className:(0,a.Z)("clean-btn close",S,e.className)}),r.createElement(E,{width:14,height:14,strokeWidth:3.1}))}const T="content_knG7";function C(e){const{announcementBar:t}=(0,w.L)(),{content:n}=t;return r.createElement("div",(0,l.Z)({},e,{className:(0,a.Z)(T,e.className),dangerouslySetInnerHTML:{__html:n}}))}const _="announcementBar_mb4j",L="announcementBarPlaceholder_vyr4",R="announcementBarClose_gvF7",A="announcementBarContent_xLdY";function N(){const{announcementBar:e}=(0,w.L)(),{isActive:t,close:n}=(0,k.nT)();if(!t)return null;const{backgroundColor:a,textColor:o,isCloseable:i}=e;return r.createElement("div",{className:_,style:{backgroundColor:a,color:o},role:"banner"},i&&r.createElement("div",{className:L}),r.createElement(C,{className:A}),i&&r.createElement(x,{onClick:n,className:R}))}var P=n(3163),O=n(2466);var I=n(902),D=n(3102);const M=r.createContext(null);function F(e){let{children:t}=e;const n=function(){const e=(0,P.e)(),t=(0,D.HY)(),[n,a]=(0,r.useState)(!1),o=null!==t.component,i=(0,I.D9)(o);return(0,r.useEffect)((()=>{o&&!i&&a(!0)}),[o,i]),(0,r.useEffect)((()=>{o?e.shown||a(!0):a(!1)}),[e.shown,o]),(0,r.useMemo)((()=>[n,a]),[n])}();return r.createElement(M.Provider,{value:n},t)}function B(e){if(e.component){const t=e.component;return r.createElement(t,e.props)}}function j(){const e=(0,r.useContext)(M);if(!e)throw new I.i6("NavbarSecondaryMenuDisplayProvider");const[t,n]=e,a=(0,r.useCallback)((()=>n(!1)),[n]),o=(0,D.HY)();return(0,r.useMemo)((()=>({shown:t,hide:a,content:B(o)})),[a,o,t])}function z(e){let{header:t,primaryMenu:n,secondaryMenu:o}=e;const{shown:i}=j();return r.createElement("div",{className:"navbar-sidebar"},t,r.createElement("div",{className:(0,a.Z)("navbar-sidebar__items",{"navbar-sidebar__items--show-secondary":i})},r.createElement("div",{className:"navbar-sidebar__item menu"},n),r.createElement("div",{className:"navbar-sidebar__item menu"},o)))}var $=n(2949),U=n(2389);function q(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"}))}function H(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"}))}const G={toggle:"toggle_vylO",toggleButton:"toggleButton_gllP",darkToggleIcon:"darkToggleIcon_wfgR",lightToggleIcon:"lightToggleIcon_pyhR",toggleButtonDisabled:"toggleButtonDisabled_aARS"};function Z(e){let{className:t,buttonClassName:n,value:o,onChange:i}=e;const l=(0,U.Z)(),s=(0,u.I)({message:"Switch between dark and light mode (currently {mode})",id:"theme.colorToggle.ariaLabel",description:"The ARIA label for the navbar color mode toggle"},{mode:"dark"===o?(0,u.I)({message:"dark mode",id:"theme.colorToggle.ariaLabel.mode.dark",description:"The name for the dark color mode"}):(0,u.I)({message:"light mode",id:"theme.colorToggle.ariaLabel.mode.light",description:"The name for the light color mode"})});return r.createElement("div",{className:(0,a.Z)(G.toggle,t)},r.createElement("button",{className:(0,a.Z)("clean-btn",G.toggleButton,!l&&G.toggleButtonDisabled,n),type:"button",onClick:()=>i("dark"===o?"light":"dark"),disabled:!l,title:s,"aria-label":s,"aria-live":"polite"},r.createElement(q,{className:(0,a.Z)(G.toggleIcon,G.lightToggleIcon)}),r.createElement(H,{className:(0,a.Z)(G.toggleIcon,G.darkToggleIcon)})))}const Q=r.memo(Z),V="darkNavbarColorModeToggle_X3D1";function W(e){let{className:t}=e;const n=(0,w.L)().navbar.style,a=(0,w.L)().colorMode.disableSwitch,{colorMode:o,setColorMode:i}=(0,$.I)();return a?null:r.createElement(Q,{className:t,buttonClassName:"dark"===n?V:void 0,value:o,onChange:i})}var K=n(1327);function Y(){return r.createElement(K.Z,{className:"navbar__brand",imageClassName:"navbar__logo",titleClassName:"navbar__title text--truncate"})}function X(){const e=(0,P.e)();return r.createElement("button",{type:"button","aria-label":(0,u.I)({id:"theme.docs.sidebar.closeSidebarButtonAriaLabel",message:"Close navigation bar",description:"The ARIA label for close button of mobile sidebar"}),className:"clean-btn navbar-sidebar__close",onClick:()=>e.toggle()},r.createElement(E,{color:"var(--ifm-color-emphasis-600)"}))}function J(){return r.createElement("div",{className:"navbar-sidebar__brand"},r.createElement(Y,null),r.createElement("a",{href:"https://github.com/k3s-io/k3s",target:"_blank",rel:"noopener noreferrer",className:"margin-right--md header-github-link"}),r.createElement(W,{className:"margin-right--md"}),r.createElement(X,null))}var ee=n(9960),te=n(4996),ne=n(3919);function re(e,t){return void 0!==e&&void 0!==t&&new RegExp(e,"gi").test(t)}var ae=n(9471);function oe(e){let{activeBasePath:t,activeBaseRegex:n,to:a,href:o,label:i,html:s,isDropdownLink:u,prependBaseUrlToHref:c,...d}=e;const f=(0,te.Z)(a),p=(0,te.Z)(t),m=(0,te.Z)(o,{forcePrependBaseUrl:!0}),h=i&&o&&!(0,ne.Z)(o),g=s?{dangerouslySetInnerHTML:{__html:s}}:{children:r.createElement(r.Fragment,null,i,h&&r.createElement(ae.Z,u&&{width:12,height:12}))};return o?r.createElement(ee.Z,(0,l.Z)({href:c?m:o},d,g)):r.createElement(ee.Z,(0,l.Z)({to:f,isNavLink:!0},(t||n)&&{isActive:(e,t)=>n?re(n,t.pathname):t.pathname.startsWith(p)},d,g))}function ie(e){let{className:t,isDropdownItem:n=!1,...o}=e;const i=r.createElement(oe,(0,l.Z)({className:(0,a.Z)(n?"dropdown__link":"navbar__item navbar__link",t),isDropdownLink:n},o));return n?r.createElement("li",null,i):i}function le(e){let{className:t,isDropdownItem:n,...o}=e;return r.createElement("li",{className:"menu__list-item"},r.createElement(oe,(0,l.Z)({className:(0,a.Z)("menu__link",t)},o)))}function se(e){let{mobile:t=!1,position:n,...a}=e;const o=t?le:ie;return r.createElement(o,(0,l.Z)({},a,{activeClassName:a.activeClassName??(t?"menu__link--active":"navbar__link--active")}))}var ue=n(6043),ce=n(8596),de=n(2263);function fe(e,t){return e.some((e=>function(e,t){return!!(0,ce.Mg)(e.to,t)||!!re(e.activeBaseRegex,t)||!(!e.activeBasePath||!t.startsWith(e.activeBasePath))}(e,t)))}function pe(e){let{items:t,position:n,className:o,onClick:i,...s}=e;const u=(0,r.useRef)(null),[c,d]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{const e=e=>{u.current&&!u.current.contains(e.target)&&d(!1)};return document.addEventListener("mousedown",e),document.addEventListener("touchstart",e),document.addEventListener("focusin",e),()=>{document.removeEventListener("mousedown",e),document.removeEventListener("touchstart",e),document.removeEventListener("focusin",e)}}),[u]),r.createElement("div",{ref:u,className:(0,a.Z)("navbar__item","dropdown","dropdown--hoverable",{"dropdown--right":"right"===n,"dropdown--show":c})},r.createElement(oe,(0,l.Z)({"aria-haspopup":"true","aria-expanded":c,role:"button",href:s.to?void 0:"#",className:(0,a.Z)("navbar__link",o)},s,{onClick:s.to?void 0:e=>e.preventDefault(),onKeyDown:e=>{"Enter"===e.key&&(e.preventDefault(),d(!c))}}),s.children??s.label),r.createElement("ul",{className:"dropdown__menu"},t.map(((e,t)=>r.createElement(ft,(0,l.Z)({isDropdownItem:!0,activeClassName:"dropdown__link--active"},e,{key:t}))))))}function me(e){let{items:t,className:n,position:o,onClick:i,...u}=e;const c=function(){const{siteConfig:{baseUrl:e}}=(0,de.Z)(),{pathname:t}=(0,s.TH)();return t.replace(e,"/")}(),d=fe(t,c),{collapsed:f,toggleCollapsed:p,setCollapsed:m}=(0,ue.u)({initialState:()=>!d});return(0,r.useEffect)((()=>{d&&m(!d)}),[c,d,m]),r.createElement("li",{className:(0,a.Z)("menu__list-item",{"menu__list-item--collapsed":f})},r.createElement(oe,(0,l.Z)({role:"button",className:(0,a.Z)("menu__link menu__link--sublist menu__link--sublist-caret",n)},u,{onClick:e=>{e.preventDefault(),p()}}),u.children??u.label),r.createElement(ue.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:f},t.map(((e,t)=>r.createElement(ft,(0,l.Z)({mobile:!0,isDropdownItem:!0,onClick:i,activeClassName:"menu__link--active"},e,{key:t}))))))}function he(e){let{mobile:t=!1,...n}=e;const a=t?me:pe;return r.createElement(a,n)}var ge=n(4711);function ve(e){let{width:t=20,height:n=20,...a}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:t,height:n,"aria-hidden":!0},a),r.createElement("path",{fill:"currentColor",d:"M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"}))}const be="iconLanguage_nlXk";var ye=n(1029),we=n(412),ke=n(373),Ee=n(143),Se=n(22),xe=n(8202),Te=n(3926),Ce=n(1073),_e=n(2539),Le=n(726);const Re="searchBar_RVTs",Ae="dropdownMenu_qbY6",Ne="searchBarLeft_MXDe",Pe="suggestion_fB_2",Oe="cursor_eG29",Ie="hitTree_kk6K",De="hitIcon_a7Zy",Me="hitPath_ieM4",Fe="noResultsIcon_EBY5",Be="hitFooter_E9YW",je="hitWrapper_sAK8",ze="hitTitle_vyVt",$e="hitAction_NqkB",Ue="noResults_l6Q3",qe="searchBarContainer_NW3z",He="searchBarLoadingRing_YnHq",Ge="searchClearButton_qk4g",Ze="searchIndexLoading_EJ1f",Qe="searchHintContainer_Pkmr",Ve="searchHint_iIMx",We="focused_OWtg",Ke="input_FOTf",Ye="hint_URu1",Xe="suggestions_X8XU",Je="dataset_QiCy",et="empty_eITn";function tt(e){let{document:t,type:n,page:r,metadata:a,tokens:o,isInterOfTree:i,isLastOfTree:l}=e;const s=0===n,u=1===n,c=[];i?c.push('<svg viewBox="0 0 24 54"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M8 6v42M20 27H8.3"></path></g></svg>'):l&&c.push('<svg viewBox="0 0 24 54"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M8 6v21M20 27H8.3"></path></g></svg>');const d=c.map((e=>`<span class="${Ie}">${e}</span>`)),f=`<span class="${De}">${s?'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M17 6v12c0 .52-.2 1-1 1H4c-.7 0-1-.33-1-1V2c0-.55.42-1 1-1h8l5 5zM14 8h-3.13c-.51 0-.87-.34-.87-.87V4" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linejoin="round"></path></svg>':u?'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M13 13h4-4V8H7v5h6v4-4H7V8H3h4V3v5h6V3v5h4-4v5zm-6 0v4-4H3h4z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg>':'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M17 5H3h14zm0 5H3h14zm0 5H3h14z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linejoin="round"></path></svg>'}</span>`,p=[`<span class="${ze}">${(0,Le.o)(t.t,(0,Ce.m)(a,"t"),o)}</span>`];if(!i&&!l&&ye.H6){const e=r?(r.b??[]).concat(r.t).concat(t.s&&t.s!==r.t?t.s:[]):t.b;p.push(`<span class="${Me}">${(0,Te.e)(e??[])}</span>`)}else s||p.push(`<span class="${Me}">${(0,_e.C)(r.t||(t.u.startsWith("/docs/api-reference/")?"API Reference":""),o)}</span>`);const m=`<span class="${$e}"><svg width="20" height="20" viewBox="0 0 20 20"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M18 3v4c0 2-2 4-4 4H2"></path><path d="M8 17l-6-6 6-6"></path></g></svg></span>`;return[...d,f,`<span class="${je}">`,...p,"</span>",m].join("")}function nt(){return`<span class="${Ue}"><span class="${Fe}"><svg width="40" height="40" viewBox="0 0 20 20" fill="none" fill-rule="evenodd" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"><path d="M15.5 4.8c2 3 1.7 7-1 9.7h0l4.3 4.3-4.3-4.3a7.8 7.8 0 01-9.8 1m-2.2-2.2A7.8 7.8 0 0113.2 2.4M2 18L18 2"></path></svg></span><span>${(0,u.I)({id:"theme.SearchBar.noResultsText",message:"No results"})}</span></span>`}var rt=n(311);async function at(){const e=await Promise.all([n.e(8443),n.e(5525)]).then(n.t.bind(n,8443,23)),t=e.default;return t.noConflict?t.noConflict():e.noConflict&&e.noConflict(),t}const ot="_highlight";const it=function(e){let{handleSearchBarToggle:t}=e;const{siteConfig:{baseUrl:n}}=(0,de.Z)(),o=(0,Ee.gA)();let i=n;try{const{preferredVersion:e}=(0,ke.J)(o?.pluginId??ye.gQ);e&&!e.isLast&&(i=e.path+"/")}catch(D){if(ye.l9&&!(D instanceof I.i6))throw D}const l=(0,s.k6)(),c=(0,s.TH)(),d=(0,r.useRef)(null),f=(0,r.useRef)(new Map),p=(0,r.useRef)(!1),[m,h]=(0,r.useState)(!1),[g,v]=(0,r.useState)(!1),[b,y]=(0,r.useState)(""),w=(0,r.useRef)(null),k=(0,r.useRef)(""),[E,S]=(0,r.useState)("");(0,r.useEffect)((()=>{if(!Array.isArray(ye.Kc))return;let e="";if(c.pathname.startsWith(i)){const t=c.pathname.substring(i.length),n=ye.Kc.find((e=>t===e||t.startsWith(`${e}/`)));n&&(e=n)}k.current!==e&&(f.current.delete(e),k.current=e),S(e)}),[c.pathname,i]);const x=!!ye.hG&&Array.isArray(ye.Kc)&&""===E,T=(0,r.useCallback)((async()=>{if(x||f.current.get(E))return;f.current.set(E,"loading"),w.current?.autocomplete.destroy(),h(!0);const[{wrappedIndexes:e,zhDictionary:t},r]=await Promise.all([(0,Se.w)(i,E),at()]);if(w.current=r(d.current,{hint:!1,autoselect:!0,openOnFocus:!0,cssClasses:{root:(0,a.Z)(Re,{[Ne]:"left"===ye.pu}),noPrefix:!0,dropdownMenu:Ae,input:Ke,hint:Ye,suggestions:Xe,suggestion:Pe,cursor:Oe,dataset:Je,empty:et}},[{source:(0,xe.v)(e,t,ye.qo),templates:{suggestion:tt,empty:nt,footer:e=>{let{query:t,isEmpty:r}=e;if(r&&!E)return;const a=(e=>{let{query:t,isEmpty:r}=e;const a=document.createElement("a"),o=new URLSearchParams,s=(0,u.I)({id:"theme.SearchBar.seeAll",message:"See all results"}),c=(0,u.I)({id:"theme.SearchBar.seeAllOutsideContext",message:"See results outside {context}"},{context:E}),d=(0,u.I)({id:"theme.SearchBar.searchInContext",message:"See all results in {context}"},{context:E});let f;if(o.set("q",t),f=E&&r?c:E?d:s,Array.isArray(ye.Kc)&&!r&&o.set("ctx",E),i!==n){if(!i.startsWith(n))throw new Error(`Version url '${i}' does not start with base url '${n}', this is a bug of \`@easyops-cn/docusaurus-search-local\`, please report it.`);o.set("version",i.substring(n.length))}const p=`${n}search?${o.toString()}`;return a.href=p,a.textContent=f,a.addEventListener("click",(e=>{e.ctrlKey||e.metaKey||(e.preventDefault(),w.current?.autocomplete.close(),l.push(p))})),a})({query:t,isEmpty:r}),o=document.createElement("div");return o.className=Be,o.appendChild(a),o}}}]).on("autocomplete:selected",(function(e,t){let{document:{u:n,h:r},tokens:a}=t;d.current?.blur();let o=n;if(ye.vc&&a.length>0){const e=new URLSearchParams;for(const t of a)e.append(ot,t);o+=`?${e.toString()}`}r&&(o+=r),l.push(o)})).on("autocomplete:closed",(()=>{d.current?.blur()})),f.current.set(E,"done"),h(!1),p.current){const e=d.current;e.value&&w.current?.autocomplete.open(),e.focus()}}),[x,E,i,n,l]);(0,r.useEffect)((()=>{if(!ye.vc)return;const e=we.Z.canUseDOM?new URLSearchParams(c.search).getAll(ot):[];setTimeout((()=>{const t=document.querySelector("article");if(!t)return;const n=new ye.vc(t);n.unmark(),0!==e.length&&n.mark(e),y(e.join(" ")),w.current?.autocomplete.setVal(e.join(" "))}))}),[c.search,c.pathname]);const[C,_]=(0,r.useState)(!1),L=(0,r.useCallback)((()=>{p.current=!0,T(),_(!0),t?.(!0)}),[t,T]),R=(0,r.useCallback)((()=>{_(!1),t?.(!1)}),[t]),A=(0,r.useCallback)((()=>{T()}),[T]),N=(0,r.useCallback)((e=>{y(e.target.value),e.target.value&&v(!0)}),[]),P=!!we.Z.canUseDOM&&/mac/i.test(navigator.userAgentData?.platform??navigator.platform);(0,r.useEffect)((()=>{if(!ye.AY)return;const e=e=>{!(P?e.metaKey:e.ctrlKey)||"k"!==e.key&&"K"!==e.key||(e.preventDefault(),d.current?.focus(),L())};return document.addEventListener("keydown",e),()=>{document.removeEventListener("keydown",e)}}),[P,L]);const O=(0,r.useCallback)((()=>{const e=new URLSearchParams(c.search);e.delete(ot);const t=e.toString(),n=c.pathname+(""!=t?`?${t}`:"")+c.hash;n!=c.pathname+c.search+c.hash&&l.push(n),y(""),w.current?.autocomplete.setVal("")}),[c.pathname,c.search,c.hash,l]);return r.createElement("div",{className:(0,a.Z)("navbar__search",qe,{[Ze]:m&&g,[We]:C}),hidden:x},r.createElement("input",{placeholder:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"}),"aria-label":"Search",className:"navbar__search-input",onMouseEnter:A,onFocus:L,onBlur:R,onChange:N,ref:d,value:b}),r.createElement(rt.Z,{className:He}),ye.AY&&ye.t_&&(""!==b?r.createElement("button",{className:Ge,onClick:O},"\u2715"):we.Z.canUseDOM&&r.createElement("div",{className:Qe},r.createElement("kbd",{className:Ve},P?"\u2318":"ctrl"),r.createElement("kbd",{className:Ve},"K"))))},lt="searchBox_ZlJk";function st(e){let{children:t,className:n}=e;return r.createElement("div",{className:(0,a.Z)(n,lt)},t)}var ut=n(3438);const ct=e=>e.docs.find((t=>t.id===e.mainDocId));const dt={default:se,localeDropdown:function(e){let{mobile:t,dropdownItemsBefore:n,dropdownItemsAfter:a,...o}=e;const{i18n:{currentLocale:i,locales:c,localeConfigs:d}}=(0,de.Z)(),f=(0,ge.l)(),{search:p,hash:m}=(0,s.TH)(),h=[...n,...c.map((e=>{const n=`${`pathname://${f.createUrl({locale:e,fullyQualified:!1})}`}${p}${m}`;return{label:d[e].label,lang:d[e].htmlLang,to:n,target:"_self",autoAddBaseUrl:!1,className:e===i?t?"menu__link--active":"dropdown__link--active":""}})),...a],g=t?(0,u.I)({message:"Languages",id:"theme.navbar.mobileLanguageDropdown.label",description:"The label for the mobile language switcher dropdown"}):d[i].label;return r.createElement(he,(0,l.Z)({},o,{mobile:t,label:r.createElement(r.Fragment,null,r.createElement(ve,{className:be}),g),items:h}))},search:function(e){let{mobile:t,className:n}=e;return t?null:r.createElement(st,{className:n},r.createElement(it,null))},dropdown:he,html:function(e){let{value:t,className:n,mobile:o=!1,isDropdownItem:i=!1}=e;const l=i?"li":"div";return r.createElement(l,{className:(0,a.Z)({navbar__item:!o&&!i,"menu__list-item":o},n),dangerouslySetInnerHTML:{__html:t}})},doc:function(e){let{docId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ee.Iw)(a),s=(0,ut.vY)(t,a);return null===s?null:r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.path===s.path||!!i?.sidebar&&i.sidebar===s.sidebar,label:n??s.id,to:s.path}))},docSidebar:function(e){let{sidebarId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ee.Iw)(a),s=(0,ut.oz)(t,a).link;if(!s)throw new Error(`DocSidebarNavbarItem: Sidebar with ID "${t}" doesn't have anything to be linked to.`);return r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.sidebar===t,label:n??s.label,to:s.path}))},docsVersion:function(e){let{label:t,to:n,docsPluginId:a,...o}=e;const i=(0,ut.lO)(a)[0],s=t??i.label,u=n??(e=>e.docs.find((t=>t.id===e.mainDocId)))(i).path;return r.createElement(se,(0,l.Z)({},o,{label:s,to:u}))},docsVersionDropdown:function(e){let{mobile:t,docsPluginId:n,dropdownActiveClassDisabled:a,dropdownItemsBefore:o,dropdownItemsAfter:i,...c}=e;const{search:d,hash:f}=(0,s.TH)(),p=(0,Ee.Iw)(n),m=(0,Ee.gB)(n),{savePreferredVersionName:h}=(0,ke.J)(n),g=[...o,...m.map((e=>{const t=p.alternateDocVersions[e.name]??ct(e);return{label:e.label,to:`${t.path}${d}${f}`,isActive:()=>e===p.activeVersion,onClick:()=>h(e.name)}})),...i],v=(0,ut.lO)(n)[0],b=t&&g.length>1?(0,u.I)({id:"theme.navbar.mobileVersionsDropdown.label",message:"Versions",description:"The label for the navbar versions dropdown on mobile view"}):v.label,y=t&&g.length>1?void 0:ct(v).path;return g.length<=1?r.createElement(se,(0,l.Z)({},c,{mobile:t,label:b,to:y,isActive:a?()=>!1:void 0})):r.createElement(he,(0,l.Z)({},c,{mobile:t,label:b,to:y,items:g,isActive:a?()=>!1:void 0}))}};function ft(e){let{type:t,...n}=e;const a=function(e,t){return e&&"default"!==e?e:"items"in t?"dropdown":"default"}(t,n),o=dt[a];if(!o)throw new Error(`No NavbarItem component found for type "${t}".`);return r.createElement(o,n)}function pt(){const e=(0,P.e)(),t=(0,w.L)().navbar.items;return r.createElement("ul",{className:"menu__list"},t.map(((t,n)=>r.createElement(ft,(0,l.Z)({mobile:!0},t,{onClick:()=>e.toggle(),key:n})))))}function mt(e){return r.createElement("button",(0,l.Z)({},e,{type:"button",className:"clean-btn navbar-sidebar__back"}),r.createElement(u.Z,{id:"theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel",description:"The label of the back button to return to main menu, inside the mobile navbar sidebar secondary menu (notably used to display the docs sidebar)"},"\u2190 Back to main menu"))}function ht(){const e=0===(0,w.L)().navbar.items.length,t=j();return r.createElement(r.Fragment,null,!e&&r.createElement(mt,{onClick:()=>t.hide()}),t.content)}function gt(){const e=(0,P.e)();var t;return void 0===(t=e.shown)&&(t=!0),(0,r.useEffect)((()=>(document.body.style.overflow=t?"hidden":"visible",()=>{document.body.style.overflow="visible"})),[t]),e.shouldRender?r.createElement(z,{header:r.createElement(J,null),primaryMenu:r.createElement(pt,null),secondaryMenu:r.createElement(ht,null)}):null}const vt="navbarHideable_m1mJ",bt="navbarHidden_jGov";function yt(e){return r.createElement("div",(0,l.Z)({role:"presentation"},e,{className:(0,a.Z)("navbar-sidebar__backdrop",e.className)}))}function wt(e){let{children:t}=e;const{navbar:{hideOnScroll:n,style:o}}=(0,w.L)(),i=(0,P.e)(),{navbarRef:l,isNavbarVisible:s}=function(e){const[t,n]=(0,r.useState)(e),a=(0,r.useRef)(!1),o=(0,r.useRef)(0),i=(0,r.useCallback)((e=>{null!==e&&(o.current=e.getBoundingClientRect().height)}),[]);return(0,O.RF)(((t,r)=>{let{scrollY:i}=t;if(!e)return;if(i<o.current)return void n(!0);if(a.current)return void(a.current=!1);const l=r?.scrollY,s=document.documentElement.scrollHeight-o.current,u=window.innerHeight;l&&i>=l?n(!1):i+u<s&&n(!0)})),(0,c.S)((t=>{if(!e)return;const r=t.location.hash;if(r?document.getElementById(r.substring(1)):void 0)return a.current=!0,void n(!1);n(!0)})),{navbarRef:i,isNavbarVisible:t}}(n);return r.createElement("nav",{ref:l,"aria-label":(0,u.I)({id:"theme.NavBar.navAriaLabel",message:"Main",description:"The ARIA label for the main navigation"}),className:(0,a.Z)("navbar","navbar--fixed-top",n&&[vt,!s&&bt],{"navbar--dark":"dark"===o,"navbar--primary":"primary"===o,"navbar-sidebar--show":i.shown})},t,r.createElement(yt,{onClick:i.toggle}),r.createElement(gt,null))}var kt=n(8780);const Et="errorBoundaryError_a6uf";function St(e){return r.createElement("button",(0,l.Z)({type:"button"},e),r.createElement(u.Z,{id:"theme.ErrorPageContent.tryAgain",description:"The label of the button to try again rendering when the React error boundary captures an error"},"Try again"))}function xt(e){let{error:t}=e;const n=(0,kt.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{className:Et},n)}class Tt extends r.Component{componentDidCatch(e,t){throw this.props.onError(e,t)}render(){return this.props.children}}function Ct(e){let{width:t=30,height:n=30,className:a,...o}=e;return r.createElement("svg",(0,l.Z)({className:a,width:t,height:n,viewBox:"0 0 30 30","aria-hidden":"true"},o),r.createElement("path",{stroke:"currentColor",strokeLinecap:"round",strokeMiterlimit:"10",strokeWidth:"2",d:"M4 7h22M4 15h22M4 23h22"}))}function _t(){const{toggle:e,shown:t}=(0,P.e)();return r.createElement("button",{onClick:e,"aria-label":(0,u.I)({id:"theme.docs.sidebar.toggleSidebarButtonAriaLabel",message:"Toggle navigation bar",description:"The ARIA label for hamburger menu button of mobile navigation"}),"aria-expanded":t,className:"navbar__toggle clean-btn",type:"button"},r.createElement(Ct,null))}const Lt="colorModeToggle_DEke";function Rt(e){let{items:t}=e;return r.createElement(r.Fragment,null,t.map(((e,t)=>r.createElement(Tt,{key:t,onError:t=>new Error(`A theme navbar item failed to render.\nPlease double-check the following navbar item (themeConfig.navbar.items) of your Docusaurus config:\n${JSON.stringify(e,null,2)}`,{cause:t})},r.createElement(ft,e)))))}function At(e){let{left:t,right:n}=e;return r.createElement("div",{className:"navbar__inner"},r.createElement("div",{className:"navbar__items"},t),r.createElement("div",{className:"navbar__items navbar__items--right"},n))}function Nt(){const e=(0,P.e)(),t=(0,w.L)().navbar.items,[n,a]=function(e){function t(e){return"left"===(e.position??"right")}return[e.filter(t),e.filter((e=>!t(e)))]}(t),o=t.find((e=>"search"===e.type));return r.createElement(At,{left:r.createElement(r.Fragment,null,!e.disabled&&r.createElement(_t,null),r.createElement(Y,null),r.createElement(Rt,{items:n})),right:r.createElement(r.Fragment,null,r.createElement(Rt,{items:a}),r.createElement(W,{className:Lt}),!o&&r.createElement(st,null,r.createElement(it,null)))})}function Pt(){return r.createElement(wt,null,r.createElement(Nt,null))}function Ot(e){let{item:t}=e;const{to:n,href:a,label:o,prependBaseUrlToHref:i,...s}=t,u=(0,te.Z)(n),c=(0,te.Z)(a,{forcePrependBaseUrl:!0});return r.createElement(ee.Z,(0,l.Z)({className:"footer__link-item"},a?{href:i?c:a}:{to:u},s),o,a&&!(0,ne.Z)(a)&&r.createElement(ae.Z,null))}function It(e){let{item:t}=e;return t.html?r.createElement("li",{className:"footer__item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement("li",{key:t.href??t.to,className:"footer__item"},r.createElement(Ot,{item:t}))}function Dt(e){let{column:t}=e;return r.createElement("div",{className:"col footer__col"},r.createElement("div",{className:"footer__title"},t.title),r.createElement("ul",{className:"footer__items clean-list"},t.items.map(((e,t)=>r.createElement(It,{key:t,item:e})))))}function Mt(e){let{columns:t}=e;return r.createElement("div",{className:"row footer__links"},t.map(((e,t)=>r.createElement(Dt,{key:t,column:e}))))}function Ft(){return r.createElement("span",{className:"footer__link-separator"},"\xb7")}function Bt(e){let{item:t}=e;return t.html?r.createElement("span",{className:"footer__link-item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement(Ot,{item:t})}function jt(e){let{links:t}=e;return r.createElement("div",{className:"footer__links text--center"},r.createElement("div",{className:"footer__links"},t.map(((e,n)=>r.createElement(r.Fragment,{key:n},r.createElement(Bt,{item:e}),t.length!==n+1&&r.createElement(Ft,null))))))}function zt(e){let{links:t}=e;return function(e){return"title"in e[0]}(t)?r.createElement(Mt,{columns:t}):r.createElement(jt,{links:t})}var $t=n(941);const Ut="footerLogoLink_BH7S";function qt(e){let{logo:t}=e;const{withBaseUrl:n}=(0,te.C)(),o={light:n(t.src),dark:n(t.srcDark??t.src)};return r.createElement($t.Z,{className:(0,a.Z)("footer__logo",t.className),alt:t.alt,sources:o,width:t.width,height:t.height,style:t.style})}function Ht(e){let{logo:t}=e;return t.href?r.createElement(ee.Z,{href:t.href,className:Ut,target:t.target},r.createElement(qt,{logo:t})):r.createElement(qt,{logo:t})}function Gt(e){let{copyright:t}=e;return r.createElement("div",{className:"footer__copyright",dangerouslySetInnerHTML:{__html:t}})}function Zt(e){let{style:t,links:n,logo:o,copyright:i}=e;return r.createElement("footer",{className:(0,a.Z)("footer",{"footer--dark":"dark"===t})},r.createElement("div",{className:"container container-fluid"},n,(o||i)&&r.createElement("div",{className:"footer__bottom text--center"},o&&r.createElement("div",{className:"margin-bottom--sm"},o),i)))}function Qt(){const{footer:e}=(0,w.L)();if(!e)return null;const{copyright:t,links:n,logo:a,style:o}=e;return r.createElement(Zt,{style:o,links:n&&n.length>0&&r.createElement(zt,{links:n}),logo:a&&r.createElement(Ht,{logo:a}),copyright:t&&r.createElement(Gt,{copyright:t})})}const Vt=r.memo(Qt),Wt=(0,I.Qc)([$.S,k.pl,O.OC,ke.L5,i.VC,function(e){let{children:t}=e;return r.createElement(D.n2,null,r.createElement(P.M,null,r.createElement(F,null,t)))}]);function Kt(e){let{children:t}=e;return r.createElement(Wt,null,t)}function Yt(e){let{error:t,tryAgain:n}=e;return r.createElement("main",{className:"container margin-vert--xl"},r.createElement("div",{className:"row"},r.createElement("div",{className:"col col--6 col--offset-3"},r.createElement("h1",{className:"hero__title"},r.createElement(u.Z,{id:"theme.ErrorPageContent.title",description:"The title of the fallback page when the page crashed"},"This page crashed.")),r.createElement("div",{className:"margin-vert--lg"},r.createElement(St,{onClick:n,className:"button button--primary shadow--lw"})),r.createElement("hr",null),r.createElement("div",{className:"margin-vert--md"},r.createElement(xt,{error:t})))))}const Xt="mainWrapper_z2l0";function Jt(e){const{children:t,noFooter:n,wrapperClassName:l,title:s,description:u}=e;return(0,v.t)(),r.createElement(Kt,null,r.createElement(i.d,{title:s,description:u}),r.createElement(y,null),r.createElement(N,null),r.createElement(Pt,null),r.createElement("div",{id:d,className:(0,a.Z)(g.k.wrapper.main,Xt,l)},r.createElement(o.Z,{fallback:e=>r.createElement(Yt,e)},t)),!n&&r.createElement(Vt,null))}},1327:(e,t,n)=>{"use strict";n.d(t,{Z:()=>d});var r=n(3117),a=n(7294),o=n(9960),i=n(4996),l=n(2263),s=n(6668),u=n(941);function c(e){let{logo:t,alt:n,imageClassName:r}=e;const o={light:(0,i.Z)(t.src),dark:(0,i.Z)(t.srcDark||t.src)},l=a.createElement(u.Z,{className:t.className,sources:o,height:t.height,width:t.width,alt:n,style:t.style});return r?a.createElement("div",{className:r},l):l}function d(e){const{siteConfig:{title:t}}=(0,l.Z)(),{navbar:{title:n,logo:u}}=(0,s.L)(),{imageClassName:d,titleClassName:f,...p}=e,m=(0,i.Z)(u?.href||"/"),h=n?"":t,g=u?.alt??h;return a.createElement(o.Z,(0,r.Z)({to:m},p,u?.target&&{target:u.target}),u&&a.createElement(c,{logo:u,alt:g,imageClassName:d}),null!=n&&a.createElement("b",{className:f},n))}},197:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(5742);function o(e){let{locale:t,version:n,tag:o}=e;const i=t;return r.createElement(a.Z,null,t&&r.createElement("meta",{name:"docusaurus_locale",content:t}),n&&r.createElement("meta",{name:"docusaurus_version",content:n}),o&&r.createElement("meta",{name:"docusaurus_tag",content:o}),i&&r.createElement("meta",{name:"docsearch:language",content:i}),n&&r.createElement("meta",{name:"docsearch:version",content:n}),o&&r.createElement("meta",{name:"docsearch:docusaurus_tag",content:o}))}},941:(e,t,n)=>{"use strict";n.d(t,{Z:()=>u});var r=n(3117),a=n(7294),o=n(6010),i=n(2389),l=n(2949);const s={themedImage:"themedImage_ToTc","themedImage--light":"themedImage--light_HNdA","themedImage--dark":"themedImage--dark_i4oU"};function u(e){const t=(0,i.Z)(),{colorMode:n}=(0,l.I)(),{sources:u,className:c,alt:d,...f}=e,p=t?"dark"===n?["dark"]:["light"]:["light","dark"];return a.createElement(a.Fragment,null,p.map((e=>a.createElement("img",(0,r.Z)({key:e,src:u[e],alt:d,className:(0,o.Z)(s.themedImage,s[`themedImage--${e}`],c)},f)))))}},6043:(e,t,n)=>{"use strict";n.d(t,{u:()=>l,z:()=>h});var r=n(3117),a=n(7294),o=n(412),i=n(1442);function l(e){let{initialState:t}=e;const[n,r]=(0,a.useState)(t??!1),o=(0,a.useCallback)((()=>{r((e=>!e))}),[]);return{collapsed:n,setCollapsed:r,toggleCollapsed:o}}const s={display:"none",overflow:"hidden",height:"0px"},u={display:"block",overflow:"visible",height:"auto"};function c(e,t){const n=t?s:u;e.style.display=n.display,e.style.overflow=n.overflow,e.style.height=n.height}function d(e){let{collapsibleRef:t,collapsed:n,animation:r}=e;const o=(0,a.useRef)(!1);(0,a.useEffect)((()=>{const e=t.current;function a(){const t=e.scrollHeight,n=r?.duration??function(e){if((0,i.n)())return 1;const t=e/36;return Math.round(10*(4+15*t**.25+t/5))}(t);return{transition:`height ${n}ms ${r?.easing??"ease-in-out"}`,height:`${t}px`}}function l(){const t=a();e.style.transition=t.transition,e.style.height=t.height}if(!o.current)return c(e,n),void(o.current=!0);return e.style.willChange="height",function(){const t=requestAnimationFrame((()=>{n?(l(),requestAnimationFrame((()=>{e.style.height=s.height,e.style.overflow=s.overflow}))):(e.style.display="block",requestAnimationFrame((()=>{l()})))}));return()=>cancelAnimationFrame(t)}()}),[t,n,r])}function f(e){if(!o.Z.canUseDOM)return e?s:u}function p(e){let{as:t="div",collapsed:n,children:r,animation:o,onCollapseTransitionEnd:i,className:l,disableSSRStyle:s}=e;const u=(0,a.useRef)(null);return d({collapsibleRef:u,collapsed:n,animation:o}),a.createElement(t,{ref:u,style:s?void 0:f(n),onTransitionEnd:e=>{"height"===e.propertyName&&(c(u.current,n),i?.(n))},className:l},r)}function m(e){let{collapsed:t,...n}=e;const[o,i]=(0,a.useState)(!t),[l,s]=(0,a.useState)(t);return(0,a.useLayoutEffect)((()=>{t||i(!0)}),[t]),(0,a.useLayoutEffect)((()=>{o&&s(t)}),[o,t]),o?a.createElement(p,(0,r.Z)({},n,{collapsed:l})):null}function h(e){let{lazy:t,...n}=e;const r=t?m:p;return a.createElement(r,n)}},9689:(e,t,n)=>{"use strict";n.d(t,{nT:()=>m,pl:()=>p});var r=n(7294),a=n(2389),o=n(12),i=n(902),l=n(6668);const s=(0,o.WA)("docusaurus.announcement.dismiss"),u=(0,o.WA)("docusaurus.announcement.id"),c=()=>"true"===s.get(),d=e=>s.set(String(e)),f=r.createContext(null);function p(e){let{children:t}=e;const n=function(){const{announcementBar:e}=(0,l.L)(),t=(0,a.Z)(),[n,o]=(0,r.useState)((()=>!!t&&c()));(0,r.useEffect)((()=>{o(c())}),[]);const i=(0,r.useCallback)((()=>{d(!0),o(!0)}),[]);return(0,r.useEffect)((()=>{if(!e)return;const{id:t}=e;let n=u.get();"annoucement-bar"===n&&(n="announcement-bar");const r=t!==n;u.set(t),r&&d(!1),!r&&c()||o(!1)}),[e]),(0,r.useMemo)((()=>({isActive:!!e&&!n,close:i})),[e,n,i])}();return r.createElement(f.Provider,{value:n},t)}function m(){const e=(0,r.useContext)(f);if(!e)throw new i.i6("AnnouncementBarProvider");return e}},2949:(e,t,n)=>{"use strict";n.d(t,{I:()=>g,S:()=>h});var r=n(7294),a=n(412),o=n(902),i=n(12),l=n(6668);const s=r.createContext(void 0),u="theme",c=(0,i.WA)(u),d="light",f="dark",p=e=>e===f?f:d;function m(){const{colorMode:{defaultMode:e,disableSwitch:t,respectPrefersColorScheme:n}}=(0,l.L)(),[o,i]=(0,r.useState)((e=>a.Z.canUseDOM?p(document.documentElement.getAttribute("data-theme")):p(e))(e));(0,r.useEffect)((()=>{t&&c.del()}),[t]);const s=(0,r.useCallback)((function(t,r){void 0===r&&(r={});const{persist:a=!0}=r;t?(i(t),a&&(e=>{c.set(p(e))})(t)):(i(n?window.matchMedia("(prefers-color-scheme: dark)").matches?f:d:e),c.del())}),[n,e]);(0,r.useEffect)((()=>{document.documentElement.setAttribute("data-theme",p(o))}),[o]),(0,r.useEffect)((()=>{if(t)return;const e=e=>{if(e.key!==u)return;const t=c.get();null!==t&&s(p(t))};return window.addEventListener("storage",e),()=>window.removeEventListener("storage",e)}),[t,s]);const m=(0,r.useRef)(!1);return(0,r.useEffect)((()=>{if(t&&!n)return;const e=window.matchMedia("(prefers-color-scheme: dark)"),r=()=>{window.matchMedia("print").matches||m.current?m.current=window.matchMedia("print").matches:s(null)};return e.addListener(r),()=>e.removeListener(r)}),[s,t,n]),(0,r.useMemo)((()=>({colorMode:o,setColorMode:s,get isDarkTheme(){return o===f},setLightTheme(){s(d)},setDarkTheme(){s(f)}})),[o,s])}function h(e){let{children:t}=e;const n=m();return r.createElement(s.Provider,{value:n},t)}function g(){const e=(0,r.useContext)(s);if(null==e)throw new o.i6("ColorModeProvider","Please see https://docusaurus.io/docs/api/themes/configuration#use-color-mode.");return e}},373:(e,t,n)=>{"use strict";n.d(t,{J:()=>y,L5:()=>v});var r=n(7294),a=n(143),o=n(9935),i=n(6668),l=n(3438),s=n(902),u=n(12);const c=e=>`docs-preferred-version-${e}`,d=(e,t,n)=>{(0,u.WA)(c(e),{persistence:t}).set(n)},f=(e,t)=>(0,u.WA)(c(e),{persistence:t}).get(),p=(e,t)=>{(0,u.WA)(c(e),{persistence:t}).del()};const m=r.createContext(null);function h(){const e=(0,a._r)(),t=(0,i.L)().docs.versionPersistence,n=(0,r.useMemo)((()=>Object.keys(e)),[e]),[o,l]=(0,r.useState)((()=>(e=>Object.fromEntries(e.map((e=>[e,{preferredVersionName:null}]))))(n)));(0,r.useEffect)((()=>{l(function(e){let{pluginIds:t,versionPersistence:n,allDocsData:r}=e;function a(e){const t=f(e,n);return r[e].versions.some((e=>e.name===t))?{preferredVersionName:t}:(p(e,n),{preferredVersionName:null})}return Object.fromEntries(t.map((e=>[e,a(e)])))}({allDocsData:e,versionPersistence:t,pluginIds:n}))}),[e,t,n]);return[o,(0,r.useMemo)((()=>({savePreferredVersion:function(e,n){d(e,t,n),l((t=>({...t,[e]:{preferredVersionName:n}})))}})),[t])]}function g(e){let{children:t}=e;const n=h();return r.createElement(m.Provider,{value:n},t)}function v(e){let{children:t}=e;return l.cE?r.createElement(g,null,t):r.createElement(r.Fragment,null,t)}function b(){const e=(0,r.useContext)(m);if(!e)throw new s.i6("DocsPreferredVersionContextProvider");return e}function y(e){void 0===e&&(e=o.m);const t=(0,a.zh)(e),[n,i]=b(),{preferredVersionName:l}=n[e];return{preferredVersion:t.versions.find((e=>e.name===l))??null,savePreferredVersionName:(0,r.useCallback)((t=>{i.savePreferredVersion(e,t)}),[i,e])}}},1116:(e,t,n)=>{"use strict";n.d(t,{V:()=>s,b:()=>l});var r=n(7294),a=n(902);const o=Symbol("EmptyContext"),i=r.createContext(o);function l(e){let{children:t,name:n,items:a}=e;const o=(0,r.useMemo)((()=>n&&a?{name:n,items:a}:null),[n,a]);return r.createElement(i.Provider,{value:o},t)}function s(){const e=(0,r.useContext)(i);if(e===o)throw new a.i6("DocsSidebarProvider");return e}},3163:(e,t,n)=>{"use strict";n.d(t,{M:()=>d,e:()=>f});var r=n(7294),a=n(3102),o=n(7524),i=n(1980),l=n(6668),s=n(902);const u=r.createContext(void 0);function c(){const e=function(){const e=(0,a.HY)(),{items:t}=(0,l.L)().navbar;return 0===t.length&&!e.component}(),t=(0,o.i)(),n=!e&&"mobile"===t,[s,u]=(0,r.useState)(!1);(0,i.Rb)((()=>{if(s)return u(!1),!1}));const c=(0,r.useCallback)((()=>{u((e=>!e))}),[]);return(0,r.useEffect)((()=>{"desktop"===t&&u(!1)}),[t]),(0,r.useMemo)((()=>({disabled:e,shouldRender:n,toggle:c,shown:s})),[e,n,c,s])}function d(e){let{children:t}=e;const n=c();return r.createElement(u.Provider,{value:n},t)}function f(){const e=r.useContext(u);if(void 0===e)throw new s.i6("NavbarMobileSidebarProvider");return e}},3102:(e,t,n)=>{"use strict";n.d(t,{HY:()=>l,Zo:()=>s,n2:()=>i});var r=n(7294),a=n(902);const o=r.createContext(null);function i(e){let{children:t}=e;const n=(0,r.useState)({component:null,props:null});return r.createElement(o.Provider,{value:n},t)}function l(){const e=(0,r.useContext)(o);if(!e)throw new a.i6("NavbarSecondaryMenuContentProvider");return e[0]}function s(e){let{component:t,props:n}=e;const i=(0,r.useContext)(o);if(!i)throw new a.i6("NavbarSecondaryMenuContentProvider");const[,l]=i,s=(0,a.Ql)(n);return(0,r.useEffect)((()=>{l({component:t,props:s})}),[l,t,s]),(0,r.useEffect)((()=>()=>l({component:null,props:null})),[l]),null}},9727:(e,t,n)=>{"use strict";n.d(t,{h:()=>a,t:()=>o});var r=n(7294);const a="navigation-with-keyboard";function o(){(0,r.useEffect)((()=>{function e(e){"keydown"===e.type&&"Tab"===e.key&&document.body.classList.add(a),"mousedown"===e.type&&document.body.classList.remove(a)}return document.addEventListener("keydown",e),document.addEventListener("mousedown",e),()=>{document.body.classList.remove(a),document.removeEventListener("keydown",e),document.removeEventListener("mousedown",e)}}),[])}},7524:(e,t,n)=>{"use strict";n.d(t,{i:()=>u});var r=n(7294),a=n(412);const o="desktop",i="mobile",l="ssr";function s(){return a.Z.canUseDOM?window.innerWidth>996?o:i:l}function u(){const[e,t]=(0,r.useState)((()=>s()));return(0,r.useEffect)((()=>{function e(){t(s())}return window.addEventListener("resize",e),()=>{window.removeEventListener("resize",e),clearTimeout(undefined)}}),[]),e}},5281:(e,t,n)=>{"use strict";n.d(t,{k:()=>r});const r={page:{blogListPage:"blog-list-page",blogPostPage:"blog-post-page",blogTagsListPage:"blog-tags-list-page",blogTagPostListPage:"blog-tags-post-list-page",docsDocPage:"docs-doc-page",docsTagsListPage:"docs-tags-list-page",docsTagDocListPage:"docs-tags-doc-list-page",mdxPage:"mdx-page"},wrapper:{main:"main-wrapper",blogPages:"blog-wrapper",docsPages:"docs-wrapper",mdxPages:"mdx-wrapper"},common:{editThisPage:"theme-edit-this-page",lastUpdated:"theme-last-updated",backToTopButton:"theme-back-to-top-button",codeBlock:"theme-code-block",admonition:"theme-admonition",admonitionType:e=>`theme-admonition-${e}`},layout:{},docs:{docVersionBanner:"theme-doc-version-banner",docVersionBadge:"theme-doc-version-badge",docBreadcrumbs:"theme-doc-breadcrumbs",docMarkdown:"theme-doc-markdown",docTocMobile:"theme-doc-toc-mobile",docTocDesktop:"theme-doc-toc-desktop",docFooter:"theme-doc-footer",docFooterTagsRow:"theme-doc-footer-tags-row",docFooterEditMetaRow:"theme-doc-footer-edit-meta-row",docSidebarContainer:"theme-doc-sidebar-container",docSidebarMenu:"theme-doc-sidebar-menu",docSidebarItemCategory:"theme-doc-sidebar-item-category",docSidebarItemLink:"theme-doc-sidebar-item-link",docSidebarItemCategoryLevel:e=>`theme-doc-sidebar-item-category-level-${e}`,docSidebarItemLinkLevel:e=>`theme-doc-sidebar-item-link-level-${e}`},blog:{}}},1442:(e,t,n)=>{"use strict";function r(){return window.matchMedia("(prefers-reduced-motion: reduce)").matches}n.d(t,{n:()=>r})},3438:(e,t,n)=>{"use strict";n.d(t,{Wl:()=>f,_F:()=>m,cE:()=>d,hI:()=>w,lO:()=>v,oz:()=>b,s1:()=>g,vY:()=>y});var r=n(7294),a=n(6775),o=n(8790),i=n(143),l=n(373),s=n(1116),u=n(7392),c=n(8596);const d=!!i._r;function f(e){if(e.href)return e.href;for(const t of e.items){if("link"===t.type)return t.href;if("category"===t.type){const e=f(t);if(e)return e}}}const p=(e,t)=>void 0!==e&&(0,c.Mg)(e,t);function m(e,t){return"link"===e.type?p(e.href,t):"category"===e.type&&(p(e.href,t)||((e,t)=>e.some((e=>m(e,t))))(e.items,t))}function h(e){let{sidebarItems:t,pathname:n,onlyCategories:r=!1}=e;const a=[];return function e(t){for(const o of t)if("category"===o.type&&((0,c.Mg)(o.href,n)||e(o.items))||"link"===o.type&&(0,c.Mg)(o.href,n)){return r&&"category"!==o.type||a.unshift(o),!0}return!1}(t),a}function g(){const e=(0,s.V)(),{pathname:t}=(0,a.TH)(),n=(0,i.gA)()?.pluginData.breadcrumbs;return!1!==n&&e?h({sidebarItems:e.items,pathname:t}):null}function v(e){const{activeVersion:t}=(0,i.Iw)(e),{preferredVersion:n}=(0,l.J)(e),a=(0,i.yW)(e);return(0,r.useMemo)((()=>(0,u.j)([t,n,a].filter(Boolean))),[t,n,a])}function b(e,t){const n=v(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.sidebars?Object.entries(e.sidebars):[])),r=t.find((t=>t[0]===e));if(!r)throw new Error(`Can't find any sidebar with id "${e}" in version${n.length>1?"s":""} ${n.map((e=>e.name)).join(", ")}".\nAvailable sidebar ids are:\n- ${t.map((e=>e[0])).join("\n- ")}`);return r[1]}),[e,n])}function y(e,t){const n=v(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.docs)),r=t.find((t=>t.id===e));if(!r){if(n.flatMap((e=>e.draftIds)).includes(e))return null;throw new Error(`Couldn't find any doc with id "${e}" in version${n.length>1?"s":""} "${n.map((e=>e.name)).join(", ")}".\nAvailable doc ids are:\n- ${(0,u.j)(t.map((e=>e.id))).join("\n- ")}`)}return r}),[e,n])}function w(e){let{route:t,versionMetadata:n}=e;const r=(0,a.TH)(),i=t.routes,l=i.find((e=>(0,a.LX)(r.pathname,e)));if(!l)return null;const s=l.sidebar,u=s?n.docsSidebars[s]:void 0;return{docElement:(0,o.H)(i),sidebarName:s,sidebarItems:u}}},1980:(e,t,n)=>{"use strict";n.d(t,{Rb:()=>l,_X:()=>s});var r=n(7294),a=n(6775),o=n(1688),i=n(902);function l(e){!function(e){const t=(0,a.k6)(),n=(0,i.zX)(e);(0,r.useEffect)((()=>t.block(((e,t)=>n(e,t)))),[t,n])}(((t,n)=>{if("POP"===n)return e(t,n)}))}function s(e){return function(e){const t=(0,a.k6)();return(0,o.useSyncExternalStore)(t.listen,(()=>e(t)),(()=>e(t)))}((t=>null===e?null:new URLSearchParams(t.location.search).get(e)))}},7392:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=(e,t)=>e===t),e.filter(((n,r)=>e.findIndex((e=>t(e,n)))!==r))}function a(e){return Array.from(new Set(e))}n.d(t,{j:()=>a,l:()=>r})},1944:(e,t,n)=>{"use strict";n.d(t,{FG:()=>f,d:()=>c,VC:()=>p});var r=n(7294),a=n(6010),o=n(5742),i=n(226);function l(){const e=r.useContext(i._);if(!e)throw new Error("Unexpected: no Docusaurus route context found");return e}var s=n(4996),u=n(2263);function c(e){let{title:t,description:n,keywords:a,image:i,children:l}=e;const c=function(e){const{siteConfig:t}=(0,u.Z)(),{title:n,titleDelimiter:r}=t;return e?.trim().length?`${e.trim()} ${r} ${n}`:n}(t),{withBaseUrl:d}=(0,s.C)(),f=i?d(i,{absolute:!0}):void 0;return r.createElement(o.Z,null,t&&r.createElement("title",null,c),t&&r.createElement("meta",{property:"og:title",content:c}),n&&r.createElement("meta",{name:"description",content:n}),n&&r.createElement("meta",{property:"og:description",content:n}),a&&r.createElement("meta",{name:"keywords",content:Array.isArray(a)?a.join(","):a}),f&&r.createElement("meta",{property:"og:image",content:f}),f&&r.createElement("meta",{name:"twitter:image",content:f}),l)}const d=r.createContext(void 0);function f(e){let{className:t,children:n}=e;const i=r.useContext(d),l=(0,a.Z)(i,t);return r.createElement(d.Provider,{value:l},r.createElement(o.Z,null,r.createElement("html",{className:l})),n)}function p(e){let{children:t}=e;const n=l(),o=`plugin-${n.plugin.name.replace(/docusaurus-(?:plugin|theme)-(?:content-)?/gi,"")}`;const i=`plugin-id-${n.plugin.id}`;return r.createElement(f,{className:(0,a.Z)(o,i)},t)}},902:(e,t,n)=>{"use strict";n.d(t,{D9:()=>i,Qc:()=>u,Ql:()=>s,i6:()=>l,zX:()=>o});var r=n(7294);const a=n(412).Z.canUseDOM?r.useLayoutEffect:r.useEffect;function o(e){const t=(0,r.useRef)(e);return a((()=>{t.current=e}),[e]),(0,r.useCallback)((function(){return t.current(...arguments)}),[])}function i(e){const t=(0,r.useRef)();return a((()=>{t.current=e})),t.current}class l extends Error{constructor(e,t){super(),this.name="ReactContextError",this.message=`Hook ${this.stack?.split("\n")[1]?.match(/at (?:\w+\.)?(?<name>\w+)/)?.groups.name??""} is called outside the <${e}>. ${t??""}`}}function s(e){const t=Object.entries(e);return t.sort(((e,t)=>e[0].localeCompare(t[0]))),(0,r.useMemo)((()=>e),t.flat())}function u(e){return t=>{let{children:n}=t;return r.createElement(r.Fragment,null,e.reduceRight(((e,t)=>r.createElement(t,null,e)),n))}}},8596:(e,t,n)=>{"use strict";n.d(t,{Mg:()=>i,Ns:()=>l});var r=n(7294),a=n(723),o=n(2263);function i(e,t){const n=e=>(!e||e.endsWith("/")?e:`${e}/`)?.toLowerCase();return n(e)===n(t)}function l(){const{baseUrl:e}=(0,o.Z)().siteConfig;return(0,r.useMemo)((()=>function(e){let{baseUrl:t,routes:n}=e;function r(e){return e.path===t&&!0===e.exact}function a(e){return e.path===t&&!e.exact}return function e(t){if(0===t.length)return;return t.find(r)||e(t.filter(a).flatMap((e=>e.routes??[])))}(n)}({routes:a.Z,baseUrl:e})),[e])}},2466:(e,t,n)=>{"use strict";n.d(t,{Ct:()=>p,OC:()=>s,RF:()=>d,o5:()=>f});var r=n(7294),a=n(412),o=n(2389),i=n(902);const l=r.createContext(void 0);function s(e){let{children:t}=e;const n=function(){const e=(0,r.useRef)(!0);return(0,r.useMemo)((()=>({scrollEventsEnabledRef:e,enableScrollEvents:()=>{e.current=!0},disableScrollEvents:()=>{e.current=!1}})),[])}();return r.createElement(l.Provider,{value:n},t)}function u(){const e=(0,r.useContext)(l);if(null==e)throw new i.i6("ScrollControllerProvider");return e}const c=()=>a.Z.canUseDOM?{scrollX:window.pageXOffset,scrollY:window.pageYOffset}:null;function d(e,t){void 0===t&&(t=[]);const{scrollEventsEnabledRef:n}=u(),a=(0,r.useRef)(c()),o=(0,i.zX)(e);(0,r.useEffect)((()=>{const e=()=>{if(!n.current)return;const e=c();o(e,a.current),a.current=e},t={passive:!0};return e(),window.addEventListener("scroll",e,t),()=>window.removeEventListener("scroll",e,t)}),[o,n,...t])}function f(){const e=u(),t=function(){const e=(0,r.useRef)({elem:null,top:0}),t=(0,r.useCallback)((t=>{e.current={elem:t,top:t.getBoundingClientRect().top}}),[]),n=(0,r.useCallback)((()=>{const{current:{elem:t,top:n}}=e;if(!t)return{restored:!1};const r=t.getBoundingClientRect().top-n;return r&&window.scrollBy({left:0,top:r}),e.current={elem:null,top:0},{restored:0!==r}}),[]);return(0,r.useMemo)((()=>({save:t,restore:n})),[n,t])}(),n=(0,r.useRef)(void 0),a=(0,r.useCallback)((r=>{t.save(r),e.disableScrollEvents(),n.current=()=>{const{restored:r}=t.restore();if(n.current=void 0,r){const t=()=>{e.enableScrollEvents(),window.removeEventListener("scroll",t)};window.addEventListener("scroll",t)}else e.enableScrollEvents()}}),[e,t]);return(0,r.useLayoutEffect)((()=>{queueMicrotask((()=>n.current?.()))})),{blockElementScrollPositionUntilNextRender:a}}function p(){const e=(0,r.useRef)(null),t=(0,o.Z)()&&"smooth"===getComputedStyle(document.documentElement).scrollBehavior;return{startScroll:n=>{e.current=t?function(e){return window.scrollTo({top:e,behavior:"smooth"}),()=>{}}(n):function(e){let t=null;const n=document.documentElement.scrollTop>e;return function r(){const a=document.documentElement.scrollTop;(n&&a>e||!n&&a<e)&&(t=requestAnimationFrame(r),window.scrollTo(0,Math.floor(.85*(a-e))+e))}(),()=>t&&cancelAnimationFrame(t)}(n)},cancelScroll:()=>e.current?.()}}},3320:(e,t,n)=>{"use strict";n.d(t,{HX:()=>r,os:()=>a});n(2263);const r="default";function a(e,t){return`docs-${e}-${t}`}},12:(e,t,n)=>{"use strict";n.d(t,{Nk:()=>d,WA:()=>c});var r=n(7294),a=n(1688);const o="localStorage";function i(e){let{key:t,oldValue:n,newValue:r,storage:a}=e;if(n===r)return;const o=document.createEvent("StorageEvent");o.initStorageEvent("storage",!1,!1,t,n,r,window.location.href,a),window.dispatchEvent(o)}function l(e){if(void 0===e&&(e=o),"undefined"==typeof window)throw new Error("Browser storage is not available on Node.js/Docusaurus SSR process.");if("none"===e)return null;try{return window[e]}catch(n){return t=n,s||(console.warn("Docusaurus browser storage is not available.\nPossible reasons: running Docusaurus in an iframe, in an incognito browser session, or using too strict browser privacy settings.",t),s=!0),null}var t}let s=!1;const u={get:()=>null,set:()=>{},del:()=>{},listen:()=>()=>{}};function c(e,t){if("undefined"==typeof window)return function(e){function t(){throw new Error(`Illegal storage API usage for storage key "${e}".\nDocusaurus storage APIs are not supposed to be called on the server-rendering process.\nPlease only call storage APIs in effects and event handlers.`)}return{get:t,set:t,del:t,listen:t}}(e);const n=l(t?.persistence);return null===n?u:{get:()=>{try{return n.getItem(e)}catch(t){return console.error(`Docusaurus storage error, can't get key=${e}`,t),null}},set:t=>{try{const r=n.getItem(e);n.setItem(e,t),i({key:e,oldValue:r,newValue:t,storage:n})}catch(r){console.error(`Docusaurus storage error, can't set ${e}=${t}`,r)}},del:()=>{try{const t=n.getItem(e);n.removeItem(e),i({key:e,oldValue:t,newValue:null,storage:n})}catch(t){console.error(`Docusaurus storage error, can't delete key=${e}`,t)}},listen:t=>{try{const r=r=>{r.storageArea===n&&r.key===e&&t(r)};return window.addEventListener("storage",r),()=>window.removeEventListener("storage",r)}catch(r){return console.error(`Docusaurus storage error, can't listen for changes of key=${e}`,r),()=>{}}}}}function d(e,t){const n=(0,r.useRef)((()=>null===e?u:c(e,t))).current(),o=(0,r.useCallback)((e=>"undefined"==typeof window?()=>{}:n.listen(e)),[n]);return[(0,a.useSyncExternalStore)(o,(()=>"undefined"==typeof window?null:n.get()),(()=>null)),n]}},4711:(e,t,n)=>{"use strict";n.d(t,{l:()=>o});var r=n(2263),a=n(6775);function o(){const{siteConfig:{baseUrl:e,url:t},i18n:{defaultLocale:n,currentLocale:o}}=(0,r.Z)(),{pathname:i}=(0,a.TH)(),l=o===n?e:e.replace(`/${o}/`,"/"),s=i.replace(e,"");return{createUrl:function(e){let{locale:r,fullyQualified:a}=e;return`${a?t:""}${function(e){return e===n?`${l}`:`${l}${e}/`}(r)}${s}`}}}},5936:(e,t,n)=>{"use strict";n.d(t,{S:()=>i});var r=n(7294),a=n(6775),o=n(902);function i(e){const t=(0,a.TH)(),n=(0,o.D9)(t),i=(0,o.zX)(e);(0,r.useEffect)((()=>{n&&t!==n&&i({location:t,previousLocation:n})}),[i,t,n])}},6668:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){return(0,r.Z)().siteConfig.themeConfig}},8802:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){const{trailingSlash:n,baseUrl:r}=t;if(e.startsWith("#"))return e;if(void 0===n)return e;const[a]=e.split(/[#?]/),o="/"===a||a===r?a:(i=a,n?function(e){return e.endsWith("/")?e:`${e}/`}(i):function(e){return e.endsWith("/")?e.slice(0,-1):e}(i));var i;return e.replace(a,o)}},4143:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=void 0,t.getErrorCausalChain=function e(t){return t.cause?[t,...e(t.cause)]:[t]}},8780:function(e,t,n){"use strict";var r=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=t.applyTrailingSlash=t.blogPostContainerID=void 0,t.blogPostContainerID="__blog-post-container";var a=n(8802);Object.defineProperty(t,"applyTrailingSlash",{enumerable:!0,get:function(){return r(a).default}});var o=n(4143);Object.defineProperty(t,"getErrorCausalChain",{enumerable:!0,get:function(){return o.getErrorCausalChain}})},311:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(7294),a=n(6010);const o="loadingRing_RJI3";function i(e){let{className:t}=e;return r.createElement("div",{className:(0,a.Z)(o,t)},r.createElement("div",null),r.createElement("div",null),r.createElement("div",null),r.createElement("div",null))}},22:(e,t,n)=>{"use strict";n.d(t,{w:()=>l});var r=n(1336),a=n.n(r),o=n(1029);const i=new Map;function l(e,t){const n=`${e}${t}`;let r=i.get(n);return r||(r=async function(e,t){{const n=`${e}${o.J.replace("{dir}",t?`-${t.replace(/\//g,"-")}`:"")}`;if(new URL(n,location.origin).origin!==location.origin)throw new Error("Unexpected version url");const r=await(await fetch(n)).json(),i=r.map(((e,t)=>{let{documents:n,index:r}=e;return{type:t,documents:n,index:a().Index.load(r)}})),l=r.reduce(((e,t)=>{for(const n of t.index.invertedIndex)/\p{Unified_Ideograph}/u.test(n[0][0])&&e.add(n[0]);return e}),new Set);return{wrappedIndexes:i,zhDictionary:Array.from(l)}}return{wrappedIndexes:[],zhDictionary:[]}}(e,t),i.set(n,r)),r}},8202:(e,t,n)=>{"use strict";n.d(t,{v:()=>s});var r=n(1336),a=n.n(r);var o=n(1029);function i(e){return l(e).concat(l(e.filter((e=>{const t=e[e.length-1];return!t.trailing&&t.maybeTyping})),!0))}function l(e,t){return e.map((e=>({tokens:e.map((e=>e.value)),term:e.map((e=>({value:e.value,presence:a().Query.presence.REQUIRED,wildcard:(t?e.trailing||e.maybeTyping:e.trailing)?a().Query.wildcard.TRAILING:a().Query.wildcard.NONE})))})))}function s(e,t,n){return function(r,l){const s=function(e,t){if(1===t.length&&["ja","jp","th"].includes(t[0]))return a()[t[0]].tokenizer(e).map((e=>e.toString()));let n=/[^-\s]+/g;return t.includes("zh")&&(n=/\w+|\p{Unified_Ideograph}+/gu),e.toLowerCase().match(n)||[]}(r,o.dK);if(0===s.length)return void l([]);const u=function(e,t){const n=function(e,t){const n=[];return function e(r,a){if(0===r.length)return void n.push(a);const o=r[0];if(/\p{Unified_Ideograph}/u.test(o)){const n=function(e,t){const n=[];return function e(r,a){let o=0,i=!1;for(const l of t)if(r.substr(0,l.length)===l){const t={missed:a.missed,term:a.term.concat({value:l})};r.length>l.length?e(r.substr(l.length),t):n.push(t),i=!0}else for(let t=l.length-1;t>o;t-=1){const s=l.substr(0,t);if(r.substr(0,t)===s){o=t;const l={missed:a.missed,term:a.term.concat({value:s,trailing:!0})};r.length>t?e(r.substr(t),l):n.push(l),i=!0;break}}i||(r.length>0?e(r.substr(1),{missed:a.missed+1,term:a.term}):a.term.length>0&&n.push(a))}(e,{missed:0,term:[]}),n.sort(((e,t)=>{const n=e.missed>0?1:0,r=t.missed>0?1:0;return n!==r?n-r:e.term.length-t.term.length})).map((e=>e.term))}(o,t);for(const t of n){const n=a.concat(...t);e(r.slice(1),n)}}else{const t=a.concat({value:o});e(r.slice(1),t)}}(e,[]),n}(e,t);if(0===n.length)return[{tokens:e,term:e.map((e=>({value:e,presence:a().Query.presence.REQUIRED,wildcard:a().Query.wildcard.LEADING|a().Query.wildcard.TRAILING})))}];for(const a of n)a[a.length-1].maybeTyping=!0;const r=[];for(const i of o.dK)if("en"===i)o._k||r.unshift(a().stopWordFilter);else{const e=a()[i];e.stopWordFilter&&r.unshift(e.stopWordFilter)}let l;if(r.length>0){const e=e=>r.reduce(((e,t)=>e.filter((e=>t(e.value)))),e);l=[];const t=[];for(const r of n){const n=e(r);l.push(n),n.length<r.length&&n.length>0&&t.push(n)}n.push(...t)}else l=n.slice();const s=[];for(const a of l)if(a.length>2)for(let e=a.length-1;e>=0;e-=1)s.push(a.slice(0,e).concat(a.slice(e+1)));return i(n).concat(i(s))}(s,t),c=[];e:for(const{term:t,tokens:a}of u)for(const{documents:r,index:o,type:i}of e)if(c.push(...o.query((e=>{for(const n of t)e.term(n.value,{wildcard:n.wildcard,presence:n.presence})})).slice(0,n).filter((e=>!c.some((t=>t.document.i.toString()===e.ref)))).slice(0,n-c.length).map((t=>{const n=r.find((e=>e.i.toString()===t.ref));return{document:n,type:i,page:0!==i&&e[0].documents.find((e=>e.i===n.p)),metadata:t.matchData.metadata,tokens:a,score:t.score}}))),c.length>=n)break e;!function(e){e.forEach(((e,t)=>{e.index=t})),e.sort(((t,n)=>{let r=t.type>0&&t.page?e.findIndex((e=>e.document===t.page)):t.index,a=n.type>0&&n.page?e.findIndex((e=>e.document===n.page)):n.index;return-1===r&&(r=t.index),-1===a&&(a=n.index),r===a?0===t.type?-1:0===n.type?1:t.index-n.index:r-a}))}(c),function(e){e.forEach(((t,n)=>{n>0&&t.page&&e.some((e=>e.document===t.page))&&(n<e.length-1&&e[n+1].page===t.page?t.isInterOfTree=!0:t.isLastOfTree=!0)}))}(c),l(c)}}},3926:(e,t,n)=>{"use strict";function r(e){return e.join(" \u203a ")}n.d(t,{e:()=>r})},1690:(e,t,n)=>{"use strict";function r(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#039;")}n.d(t,{X:()=>r})},1073:(e,t,n)=>{"use strict";function r(e,t){const n=[];for(const r of Object.values(e))r[t]&&n.push(...r[t].position);return n.sort(((e,t)=>e[0]-t[0]||t[1]-e[1]))}n.d(t,{m:()=>r})},2539:(e,t,n)=>{"use strict";n.d(t,{C:()=>a});var r=n(1690);function a(e,t,n){const o=[];for(const i of t){const n=e.toLowerCase().indexOf(i);if(n>=0){n>0&&o.push(a(e.substr(0,n),t)),o.push(`<mark>${(0,r.X)(e.substr(n,i.length))}</mark>`);const l=n+i.length;l<e.length&&o.push(a(e.substr(l),t));break}}return 0===o.length?n?`<mark>${(0,r.X)(e)}</mark>`:(0,r.X)(e):o.join("")}},726:(e,t,n)=>{"use strict";n.d(t,{o:()=>s});var r=n(1690),a=n(2539);const o=/\w+|\p{Unified_Ideograph}/u;function i(e){const t=[];let n=0,r=e;for(;r.length>0;){const a=r.match(o);if(!a){t.push(r);break}a.index>0&&t.push(r.substring(0,a.index)),t.push(a[0]),n+=a.index+a[0].length,r=e.substring(n)}return t}var l=n(1029);function s(e,t,n,o){void 0===o&&(o=l.Hk);const{chunkIndex:s,chunks:u}=function(e,t,n){const o=[];let l=0,s=0,u=-1;for(;l<t.length;){const[c,d]=t[l];if(l+=1,!(c<s)){if(c>s){const t=i(e.substring(s,c)).map((e=>({html:(0,r.X)(e),textLength:e.length})));for(const e of t)o.push(e)}-1===u&&(u=o.length),s=c+d,o.push({html:(0,a.C)(e.substring(c,s),n,!0),textLength:d})}}if(s<e.length){const t=i(e.substring(s)).map((e=>({html:(0,r.X)(e),textLength:e.length})));for(const e of t)o.push(e)}return{chunkIndex:u,chunks:o}}(e,t,n),c=u.slice(0,s),d=u[s],f=[d.html],p=u.slice(s+1);let m=d.textLength,h=0,g=0,v=!1,b=!1;for(;m<o;)if((h<=g||0===p.length)&&c.length>0){const e=c.pop();m+e.textLength<=o?(f.unshift(e.html),h+=e.textLength,m+=e.textLength):(v=!0,c.length=0)}else{if(!(p.length>0))break;{const e=p.shift();m+e.textLength<=o?(f.push(e.html),g+=e.textLength,m+=e.textLength):(b=!0,p.length=0)}}return(v||c.length>0)&&f.unshift("\u2026"),(b||p.length>0)&&f.push("\u2026"),f.join("")}},1029:(e,t,n)=>{"use strict";n.d(t,{vc:()=>a(),gQ:()=>m,H6:()=>c,hG:()=>v,l9:()=>h,dK:()=>o,_k:()=>i,pu:()=>p,AY:()=>d,t_:()=>f,Kc:()=>g,J:()=>l,Hk:()=>u,qo:()=>s,pQ:()=>b});n(1336);var r=n(813),a=n.n(r);const o=["en"],i=!1,l="search-index{dir}.json?_=829cea69",s=8,u=50,c=!1,d=!0,f=!0,p="right",m=void 0,h=!0,g=null,v=!1,b=!1},6010:(e,t,n)=>{"use strict";function r(e){var t,n,a="";if("string"==typeof e||"number"==typeof e)a+=e;else if("object"==typeof e)if(Array.isArray(e))for(t=0;t<e.length;t++)e[t]&&(n=r(e[t]))&&(a&&(a+=" "),a+=n);else for(t in e)e[t]&&(a&&(a+=" "),a+=t);return a}n.d(t,{Z:()=>a});const a=function(){for(var e,t,n=0,a="";n<arguments.length;)(e=arguments[n++])&&(t=r(e))&&(a&&(a+=" "),a+=t);return a}},9318:(e,t,n)=>{"use strict";n.d(t,{lX:()=>w,q_:()=>C,ob:()=>p,PP:()=>L,Ep:()=>f});var r=n(3117);function a(e){return"/"===e.charAt(0)}function o(e,t){for(var n=t,r=n+1,a=e.length;r<a;n+=1,r+=1)e[n]=e[r];e.pop()}const i=function(e,t){void 0===t&&(t="");var n,r=e&&e.split("/")||[],i=t&&t.split("/")||[],l=e&&a(e),s=t&&a(t),u=l||s;if(e&&a(e)?i=r:r.length&&(i.pop(),i=i.concat(r)),!i.length)return"/";if(i.length){var c=i[i.length-1];n="."===c||".."===c||""===c}else n=!1;for(var d=0,f=i.length;f>=0;f--){var p=i[f];"."===p?o(i,f):".."===p?(o(i,f),d++):d&&(o(i,f),d--)}if(!u)for(;d--;d)i.unshift("..");!u||""===i[0]||i[0]&&a(i[0])||i.unshift("");var m=i.join("/");return n&&"/"!==m.substr(-1)&&(m+="/"),m};var l=n(2177);function s(e){return"/"===e.charAt(0)?e:"/"+e}function u(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return 0===e.toLowerCase().indexOf(t.toLowerCase())&&-1!=="/?#".indexOf(e.charAt(t.length))}(e,t)?e.substr(t.length):e}function d(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,a=t||"/";return n&&"?"!==n&&(a+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(a+="#"===r.charAt(0)?r:"#"+r),a}function p(e,t,n,a){var o;"string"==typeof e?(o=function(e){var t=e||"/",n="",r="",a=t.indexOf("#");-1!==a&&(r=t.substr(a),t=t.substr(0,a));var o=t.indexOf("?");return-1!==o&&(n=t.substr(o),t=t.substr(0,o)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),o.state=t):(void 0===(o=(0,r.Z)({},e)).pathname&&(o.pathname=""),o.search?"?"!==o.search.charAt(0)&&(o.search="?"+o.search):o.search="",o.hash?"#"!==o.hash.charAt(0)&&(o.hash="#"+o.hash):o.hash="",void 0!==t&&void 0===o.state&&(o.state=t));try{o.pathname=decodeURI(o.pathname)}catch(l){throw l instanceof URIError?new URIError('Pathname "'+o.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):l}return n&&(o.key=n),a?o.pathname?"/"!==o.pathname.charAt(0)&&(o.pathname=i(o.pathname,a.pathname)):o.pathname=a.pathname:o.pathname||(o.pathname="/"),o}function m(){var e=null;var t=[];return{setPrompt:function(t){return e=t,function(){e===t&&(e=null)}},confirmTransitionTo:function(t,n,r,a){if(null!=e){var o="function"==typeof e?e(t,n):e;"string"==typeof o?"function"==typeof r?r(o,a):a(!0):a(!1!==o)}else a(!0)},appendListener:function(e){var n=!0;function r(){n&&e.apply(void 0,arguments)}return t.push(r),function(){n=!1,t=t.filter((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];t.forEach((function(e){return e.apply(void 0,n)}))}}}var h=!("undefined"==typeof window||!window.document||!window.document.createElement);function g(e,t){t(window.confirm(e))}var v="popstate",b="hashchange";function y(){try{return window.history.state||{}}catch(e){return{}}}function w(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t,n=window.history,a=(-1===(t=window.navigator.userAgent).indexOf("Android 2.")&&-1===t.indexOf("Android 4.0")||-1===t.indexOf("Mobile Safari")||-1!==t.indexOf("Chrome")||-1!==t.indexOf("Windows Phone"))&&window.history&&"pushState"in window.history,o=!(-1===window.navigator.userAgent.indexOf("Trident")),i=e,u=i.forceRefresh,w=void 0!==u&&u,k=i.getUserConfirmation,E=void 0===k?g:k,S=i.keyLength,x=void 0===S?6:S,T=e.basename?d(s(e.basename)):"";function C(e){var t=e||{},n=t.key,r=t.state,a=window.location,o=a.pathname+a.search+a.hash;return T&&(o=c(o,T)),p(o,r,n)}function _(){return Math.random().toString(36).substr(2,x)}var L=m();function R(e){(0,r.Z)($,e),$.length=n.length,L.notifyListeners($.location,$.action)}function A(e){(function(e){return void 0===e.state&&-1===navigator.userAgent.indexOf("CriOS")})(e)||O(C(e.state))}function N(){O(C(y()))}var P=!1;function O(e){if(P)P=!1,R();else{L.confirmTransitionTo(e,"POP",E,(function(t){t?R({action:"POP",location:e}):function(e){var t=$.location,n=D.indexOf(t.key);-1===n&&(n=0);var r=D.indexOf(e.key);-1===r&&(r=0);var a=n-r;a&&(P=!0,F(a))}(e)}))}}var I=C(y()),D=[I.key];function M(e){return T+f(e)}function F(e){n.go(e)}var B=0;function j(e){1===(B+=e)&&1===e?(window.addEventListener(v,A),o&&window.addEventListener(b,N)):0===B&&(window.removeEventListener(v,A),o&&window.removeEventListener(b,N))}var z=!1;var $={length:n.length,action:"POP",location:I,createHref:M,push:function(e,t){var r="PUSH",o=p(e,t,_(),$.location);L.confirmTransitionTo(o,r,E,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.pushState({key:i,state:l},null,t),w)window.location.href=t;else{var s=D.indexOf($.location.key),u=D.slice(0,s+1);u.push(o.key),D=u,R({action:r,location:o})}else window.location.href=t}}))},replace:function(e,t){var r="REPLACE",o=p(e,t,_(),$.location);L.confirmTransitionTo(o,r,E,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.replaceState({key:i,state:l},null,t),w)window.location.replace(t);else{var s=D.indexOf($.location.key);-1!==s&&(D[s]=o.key),R({action:r,location:o})}else window.location.replace(t)}}))},go:F,goBack:function(){F(-1)},goForward:function(){F(1)},block:function(e){void 0===e&&(e=!1);var t=L.setPrompt(e);return z||(j(1),z=!0),function(){return z&&(z=!1,j(-1)),t()}},listen:function(e){var t=L.appendListener(e);return j(1),function(){j(-1),t()}}};return $}var k="hashchange",E={hashbang:{encodePath:function(e){return"!"===e.charAt(0)?e:"!/"+u(e)},decodePath:function(e){return"!"===e.charAt(0)?e.substr(1):e}},noslash:{encodePath:u,decodePath:s},slash:{encodePath:s,decodePath:s}};function S(e){var t=e.indexOf("#");return-1===t?e:e.slice(0,t)}function x(){var e=window.location.href,t=e.indexOf("#");return-1===t?"":e.substring(t+1)}function T(e){window.location.replace(S(window.location.href)+"#"+e)}function C(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t=window.history,n=(window.navigator.userAgent.indexOf("Firefox"),e),a=n.getUserConfirmation,o=void 0===a?g:a,i=n.hashType,u=void 0===i?"slash":i,v=e.basename?d(s(e.basename)):"",b=E[u],y=b.encodePath,w=b.decodePath;function C(){var e=w(x());return v&&(e=c(e,v)),p(e)}var _=m();function L(e){(0,r.Z)(z,e),z.length=t.length,_.notifyListeners(z.location,z.action)}var R=!1,A=null;function N(){var e,t,n=x(),r=y(n);if(n!==r)T(r);else{var a=C(),i=z.location;if(!R&&(t=a,(e=i).pathname===t.pathname&&e.search===t.search&&e.hash===t.hash))return;if(A===f(a))return;A=null,function(e){if(R)R=!1,L();else{var t="POP";_.confirmTransitionTo(e,t,o,(function(n){n?L({action:t,location:e}):function(e){var t=z.location,n=D.lastIndexOf(f(t));-1===n&&(n=0);var r=D.lastIndexOf(f(e));-1===r&&(r=0);var a=n-r;a&&(R=!0,M(a))}(e)}))}}(a)}}var P=x(),O=y(P);P!==O&&T(O);var I=C(),D=[f(I)];function M(e){t.go(e)}var F=0;function B(e){1===(F+=e)&&1===e?window.addEventListener(k,N):0===F&&window.removeEventListener(k,N)}var j=!1;var z={length:t.length,action:"POP",location:I,createHref:function(e){var t=document.querySelector("base"),n="";return t&&t.getAttribute("href")&&(n=S(window.location.href)),n+"#"+y(v+f(e))},push:function(e,t){var n="PUSH",r=p(e,void 0,void 0,z.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(v+t);if(x()!==a){A=t,function(e){window.location.hash=e}(a);var o=D.lastIndexOf(f(z.location)),i=D.slice(0,o+1);i.push(t),D=i,L({action:n,location:r})}else L()}}))},replace:function(e,t){var n="REPLACE",r=p(e,void 0,void 0,z.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(v+t);x()!==a&&(A=t,T(a));var o=D.indexOf(f(z.location));-1!==o&&(D[o]=t),L({action:n,location:r})}}))},go:M,goBack:function(){M(-1)},goForward:function(){M(1)},block:function(e){void 0===e&&(e=!1);var t=_.setPrompt(e);return j||(B(1),j=!0),function(){return j&&(j=!1,B(-1)),t()}},listen:function(e){var t=_.appendListener(e);return B(1),function(){B(-1),t()}}};return z}function _(e,t,n){return Math.min(Math.max(e,t),n)}function L(e){void 0===e&&(e={});var t=e,n=t.getUserConfirmation,a=t.initialEntries,o=void 0===a?["/"]:a,i=t.initialIndex,l=void 0===i?0:i,s=t.keyLength,u=void 0===s?6:s,c=m();function d(e){(0,r.Z)(w,e),w.length=w.entries.length,c.notifyListeners(w.location,w.action)}function h(){return Math.random().toString(36).substr(2,u)}var g=_(l,0,o.length-1),v=o.map((function(e){return p(e,void 0,"string"==typeof e?h():e.key||h())})),b=f;function y(e){var t=_(w.index+e,0,w.entries.length-1),r=w.entries[t];c.confirmTransitionTo(r,"POP",n,(function(e){e?d({action:"POP",location:r,index:t}):d()}))}var w={length:v.length,action:"POP",location:v[g],index:g,entries:v,createHref:b,push:function(e,t){var r="PUSH",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){if(e){var t=w.index+1,n=w.entries.slice(0);n.length>t?n.splice(t,n.length-t,a):n.push(a),d({action:r,location:a,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){e&&(w.entries[w.index]=a,d({action:r,location:a}))}))},go:y,goBack:function(){y(-1)},goForward:function(){y(1)},canGo:function(e){var t=w.index+e;return t>=0&&t<w.entries.length},block:function(e){return void 0===e&&(e=!1),c.setPrompt(e)},listen:function(e){return c.appendListener(e)}};return w}},8679:(e,t,n)=>{"use strict";var r=n(9864),a={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?i:l[e.$$typeof]||a}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var u=Object.defineProperty,c=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,m=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(m){var a=p(n);a&&a!==m&&e(t,a,r)}var i=c(n);d&&(i=i.concat(d(n)));for(var l=s(t),h=s(n),g=0;g<i.length;++g){var v=i[g];if(!(o[v]||r&&r[v]||h&&h[v]||l&&l[v])){var b=f(n,v);try{u(t,v,b)}catch(y){}}}}return t}},1143:e=>{"use strict";e.exports=function(e,t,n,r,a,o,i,l){if(!e){var s;if(void 0===t)s=new Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,a,o,i,l],c=0;(s=new Error(t.replace(/%s/g,(function(){return u[c++]})))).name="Invariant Violation"}throw s.framesToPop=1,s}}},5826:e=>{e.exports=Array.isArray||function(e){return"[object Array]"==Object.prototype.toString.call(e)}},1336:(e,t,n)=>{var r,a;!function(){var o,i,l,s,u,c,d,f,p,m,h,g,v,b,y,w,k,E,S,x,T,C,_,L,R,A,N=function(e){var t=new N.Builder;return t.pipeline.add(N.trimmer,N.stopWordFilter,N.stemmer),t.searchPipeline.add(N.stemmer),e.call(t,t),t.build()};N.version="2.3.9",N.utils={},N.utils.warn=(o=this,function(e){o.console&&console.warn&&console.warn(e)}),N.utils.asString=function(e){return null==e?"":e.toString()},N.utils.clone=function(e){if(null==e)return e;for(var t=Object.create(null),n=Object.keys(e),r=0;r<n.length;r++){var a=n[r],o=e[a];if(Array.isArray(o))t[a]=o.slice();else{if("string"!=typeof o&&"number"!=typeof o&&"boolean"!=typeof o)throw new TypeError("clone is not deep and does not support nested objects");t[a]=o}}return t},N.FieldRef=function(e,t,n){this.docRef=e,this.fieldName=t,this._stringValue=n},N.FieldRef.joiner="/",N.FieldRef.fromString=function(e){var t=e.indexOf(N.FieldRef.joiner);if(-1===t)throw"malformed field ref string";var n=e.slice(0,t),r=e.slice(t+1);return new N.FieldRef(r,n,e)},N.FieldRef.prototype.toString=function(){return null==this._stringValue&&(this._stringValue=this.fieldName+N.FieldRef.joiner+this.docRef),this._stringValue},N.Set=function(e){if(this.elements=Object.create(null),e){this.length=e.length;for(var t=0;t<this.length;t++)this.elements[e[t]]=!0}else this.length=0},N.Set.complete={intersect:function(e){return e},union:function(){return this},contains:function(){return!0}},N.Set.empty={intersect:function(){return this},union:function(e){return e},contains:function(){return!1}},N.Set.prototype.contains=function(e){return!!this.elements[e]},N.Set.prototype.intersect=function(e){var t,n,r,a=[];if(e===N.Set.complete)return this;if(e===N.Set.empty)return e;this.length<e.length?(t=this,n=e):(t=e,n=this),r=Object.keys(t.elements);for(var o=0;o<r.length;o++){var i=r[o];i in n.elements&&a.push(i)}return new N.Set(a)},N.Set.prototype.union=function(e){return e===N.Set.complete?N.Set.complete:e===N.Set.empty?this:new N.Set(Object.keys(this.elements).concat(Object.keys(e.elements)))},N.idf=function(e,t){var n=0;for(var r in e)"_index"!=r&&(n+=Object.keys(e[r]).length);var a=(t-n+.5)/(n+.5);return Math.log(1+Math.abs(a))},N.Token=function(e,t){this.str=e||"",this.metadata=t||{}},N.Token.prototype.toString=function(){return this.str},N.Token.prototype.update=function(e){return this.str=e(this.str,this.metadata),this},N.Token.prototype.clone=function(e){return e=e||function(e){return e},new N.Token(e(this.str,this.metadata),this.metadata)},N.tokenizer=function(e,t){if(null==e||null==e)return[];if(Array.isArray(e))return e.map((function(e){return new N.Token(N.utils.asString(e).toLowerCase(),N.utils.clone(t))}));for(var n=e.toString().toLowerCase(),r=n.length,a=[],o=0,i=0;o<=r;o++){var l=o-i;if(n.charAt(o).match(N.tokenizer.separator)||o==r){if(l>0){var s=N.utils.clone(t)||{};s.position=[i,l],s.index=a.length,a.push(new N.Token(n.slice(i,o),s))}i=o+1}}return a},N.tokenizer.separator=/[\s\-]+/,N.Pipeline=function(){this._stack=[]},N.Pipeline.registeredFunctions=Object.create(null),N.Pipeline.registerFunction=function(e,t){t in this.registeredFunctions&&N.utils.warn("Overwriting existing registered function: "+t),e.label=t,N.Pipeline.registeredFunctions[e.label]=e},N.Pipeline.warnIfFunctionNotRegistered=function(e){e.label&&e.label in this.registeredFunctions||N.utils.warn("Function is not registered with pipeline. This may cause problems when serialising the index.\n",e)},N.Pipeline.load=function(e){var t=new N.Pipeline;return e.forEach((function(e){var n=N.Pipeline.registeredFunctions[e];if(!n)throw new Error("Cannot load unregistered function: "+e);t.add(n)})),t},N.Pipeline.prototype.add=function(){var e=Array.prototype.slice.call(arguments);e.forEach((function(e){N.Pipeline.warnIfFunctionNotRegistered(e),this._stack.push(e)}),this)},N.Pipeline.prototype.after=function(e,t){N.Pipeline.warnIfFunctionNotRegistered(t);var n=this._stack.indexOf(e);if(-1==n)throw new Error("Cannot find existingFn");n+=1,this._stack.splice(n,0,t)},N.Pipeline.prototype.before=function(e,t){N.Pipeline.warnIfFunctionNotRegistered(t);var n=this._stack.indexOf(e);if(-1==n)throw new Error("Cannot find existingFn");this._stack.splice(n,0,t)},N.Pipeline.prototype.remove=function(e){var t=this._stack.indexOf(e);-1!=t&&this._stack.splice(t,1)},N.Pipeline.prototype.run=function(e){for(var t=this._stack.length,n=0;n<t;n++){for(var r=this._stack[n],a=[],o=0;o<e.length;o++){var i=r(e[o],o,e);if(null!=i&&""!==i)if(Array.isArray(i))for(var l=0;l<i.length;l++)a.push(i[l]);else a.push(i)}e=a}return e},N.Pipeline.prototype.runString=function(e,t){var n=new N.Token(e,t);return this.run([n]).map((function(e){return e.toString()}))},N.Pipeline.prototype.reset=function(){this._stack=[]},N.Pipeline.prototype.toJSON=function(){return this._stack.map((function(e){return N.Pipeline.warnIfFunctionNotRegistered(e),e.label}))},N.Vector=function(e){this._magnitude=0,this.elements=e||[]},N.Vector.prototype.positionForIndex=function(e){if(0==this.elements.length)return 0;for(var t=0,n=this.elements.length/2,r=n-t,a=Math.floor(r/2),o=this.elements[2*a];r>1&&(o<e&&(t=a),o>e&&(n=a),o!=e);)r=n-t,a=t+Math.floor(r/2),o=this.elements[2*a];return o==e||o>e?2*a:o<e?2*(a+1):void 0},N.Vector.prototype.insert=function(e,t){this.upsert(e,t,(function(){throw"duplicate index"}))},N.Vector.prototype.upsert=function(e,t,n){this._magnitude=0;var r=this.positionForIndex(e);this.elements[r]==e?this.elements[r+1]=n(this.elements[r+1],t):this.elements.splice(r,0,e,t)},N.Vector.prototype.magnitude=function(){if(this._magnitude)return this._magnitude;for(var e=0,t=this.elements.length,n=1;n<t;n+=2){var r=this.elements[n];e+=r*r}return this._magnitude=Math.sqrt(e)},N.Vector.prototype.dot=function(e){for(var t=0,n=this.elements,r=e.elements,a=n.length,o=r.length,i=0,l=0,s=0,u=0;s<a&&u<o;)(i=n[s])<(l=r[u])?s+=2:i>l?u+=2:i==l&&(t+=n[s+1]*r[u+1],s+=2,u+=2);return t},N.Vector.prototype.similarity=function(e){return this.dot(e)/this.magnitude()||0},N.Vector.prototype.toArray=function(){for(var e=new Array(this.elements.length/2),t=1,n=0;t<this.elements.length;t+=2,n++)e[n]=this.elements[t];return e},N.Vector.prototype.toJSON=function(){return this.elements},N.stemmer=(i={ational:"ate",tional:"tion",enci:"ence",anci:"ance",izer:"ize",bli:"ble",alli:"al",entli:"ent",eli:"e",ousli:"ous",ization:"ize",ation:"ate",ator:"ate",alism:"al",iveness:"ive",fulness:"ful",ousness:"ous",aliti:"al",iviti:"ive",biliti:"ble",logi:"log"},l={icate:"ic",ative:"",alize:"al",iciti:"ic",ical:"ic",ful:"",ness:""},s="[aeiouy]",u="[^aeiou][^aeiouy]*",c=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*"),d=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*[aeiouy][aeiou]*[^aeiou][^aeiouy]*"),f=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*([aeiouy][aeiou]*)?$"),p=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy]"),m=/^(.+?)(ss|i)es$/,h=/^(.+?)([^s])s$/,g=/^(.+?)eed$/,v=/^(.+?)(ed|ing)$/,b=/.$/,y=/(at|bl|iz)$/,w=new RegExp("([^aeiouylsz])\\1$"),k=new RegExp("^"+u+s+"[^aeiouwxy]$"),E=/^(.+?[^aeiou])y$/,S=/^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/,x=/^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/,T=/^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/,C=/^(.+?)(s|t)(ion)$/,_=/^(.+?)e$/,L=/ll$/,R=new RegExp("^"+u+s+"[^aeiouwxy]$"),A=function(e){var t,n,r,a,o,s,u;if(e.length<3)return e;if("y"==(r=e.substr(0,1))&&(e=r.toUpperCase()+e.substr(1)),o=h,(a=m).test(e)?e=e.replace(a,"$1$2"):o.test(e)&&(e=e.replace(o,"$1$2")),o=v,(a=g).test(e)){var A=a.exec(e);(a=c).test(A[1])&&(a=b,e=e.replace(a,""))}else o.test(e)&&(t=(A=o.exec(e))[1],(o=p).test(t)&&(s=w,u=k,(o=y).test(e=t)?e+="e":s.test(e)?(a=b,e=e.replace(a,"")):u.test(e)&&(e+="e")));return(a=E).test(e)&&(e=(t=(A=a.exec(e))[1])+"i"),(a=S).test(e)&&(t=(A=a.exec(e))[1],n=A[2],(a=c).test(t)&&(e=t+i[n])),(a=x).test(e)&&(t=(A=a.exec(e))[1],n=A[2],(a=c).test(t)&&(e=t+l[n])),o=C,(a=T).test(e)?(t=(A=a.exec(e))[1],(a=d).test(t)&&(e=t)):o.test(e)&&(t=(A=o.exec(e))[1]+A[2],(o=d).test(t)&&(e=t)),(a=_).test(e)&&(t=(A=a.exec(e))[1],o=f,s=R,((a=d).test(t)||o.test(t)&&!s.test(t))&&(e=t)),o=d,(a=L).test(e)&&o.test(e)&&(a=b,e=e.replace(a,"")),"y"==r&&(e=r.toLowerCase()+e.substr(1)),e},function(e){return e.update(A)}),N.Pipeline.registerFunction(N.stemmer,"stemmer"),N.generateStopWordFilter=function(e){var t=e.reduce((function(e,t){return e[t]=t,e}),{});return function(e){if(e&&t[e.toString()]!==e.toString())return e}},N.stopWordFilter=N.generateStopWordFilter(["a","able","about","across","after","all","almost","also","am","among","an","and","any","are","as","at","be","because","been","but","by","can","cannot","could","dear","did","do","does","either","else","ever","every","for","from","get","got","had","has","have","he","her","hers","him","his","how","however","i","if","in","into","is","it","its","just","least","let","like","likely","may","me","might","most","must","my","neither","no","nor","not","of","off","often","on","only","or","other","our","own","rather","said","say","says","she","should","since","so","some","than","that","the","their","them","then","there","these","they","this","tis","to","too","twas","us","wants","was","we","were","what","when","where","which","while","who","whom","why","will","with","would","yet","you","your"]),N.Pipeline.registerFunction(N.stopWordFilter,"stopWordFilter"),N.trimmer=function(e){return e.update((function(e){return e.replace(/^\W+/,"").replace(/\W+$/,"")}))},N.Pipeline.registerFunction(N.trimmer,"trimmer"),N.TokenSet=function(){this.final=!1,this.edges={},this.id=N.TokenSet._nextId,N.TokenSet._nextId+=1},N.TokenSet._nextId=1,N.TokenSet.fromArray=function(e){for(var t=new N.TokenSet.Builder,n=0,r=e.length;n<r;n++)t.insert(e[n]);return t.finish(),t.root},N.TokenSet.fromClause=function(e){return"editDistance"in e?N.TokenSet.fromFuzzyString(e.term,e.editDistance):N.TokenSet.fromString(e.term)},N.TokenSet.fromFuzzyString=function(e,t){for(var n=new N.TokenSet,r=[{node:n,editsRemaining:t,str:e}];r.length;){var a=r.pop();if(a.str.length>0){var o,i=a.str.charAt(0);i in a.node.edges?o=a.node.edges[i]:(o=new N.TokenSet,a.node.edges[i]=o),1==a.str.length&&(o.final=!0),r.push({node:o,editsRemaining:a.editsRemaining,str:a.str.slice(1)})}if(0!=a.editsRemaining){if("*"in a.node.edges)var l=a.node.edges["*"];else{l=new N.TokenSet;a.node.edges["*"]=l}if(0==a.str.length&&(l.final=!0),r.push({node:l,editsRemaining:a.editsRemaining-1,str:a.str}),a.str.length>1&&r.push({node:a.node,editsRemaining:a.editsRemaining-1,str:a.str.slice(1)}),1==a.str.length&&(a.node.final=!0),a.str.length>=1){if("*"in a.node.edges)var s=a.node.edges["*"];else{s=new N.TokenSet;a.node.edges["*"]=s}1==a.str.length&&(s.final=!0),r.push({node:s,editsRemaining:a.editsRemaining-1,str:a.str.slice(1)})}if(a.str.length>1){var u,c=a.str.charAt(0),d=a.str.charAt(1);d in a.node.edges?u=a.node.edges[d]:(u=new N.TokenSet,a.node.edges[d]=u),1==a.str.length&&(u.final=!0),r.push({node:u,editsRemaining:a.editsRemaining-1,str:c+a.str.slice(2)})}}}return n},N.TokenSet.fromString=function(e){for(var t=new N.TokenSet,n=t,r=0,a=e.length;r<a;r++){var o=e[r],i=r==a-1;if("*"==o)t.edges[o]=t,t.final=i;else{var l=new N.TokenSet;l.final=i,t.edges[o]=l,t=l}}return n},N.TokenSet.prototype.toArray=function(){for(var e=[],t=[{prefix:"",node:this}];t.length;){var n=t.pop(),r=Object.keys(n.node.edges),a=r.length;n.node.final&&(n.prefix.charAt(0),e.push(n.prefix));for(var o=0;o<a;o++){var i=r[o];t.push({prefix:n.prefix.concat(i),node:n.node.edges[i]})}}return e},N.TokenSet.prototype.toString=function(){if(this._str)return this._str;for(var e=this.final?"1":"0",t=Object.keys(this.edges).sort(),n=t.length,r=0;r<n;r++){var a=t[r];e=e+a+this.edges[a].id}return e},N.TokenSet.prototype.intersect=function(e){for(var t=new N.TokenSet,n=void 0,r=[{qNode:e,output:t,node:this}];r.length;){n=r.pop();for(var a=Object.keys(n.qNode.edges),o=a.length,i=Object.keys(n.node.edges),l=i.length,s=0;s<o;s++)for(var u=a[s],c=0;c<l;c++){var d=i[c];if(d==u||"*"==u){var f=n.node.edges[d],p=n.qNode.edges[u],m=f.final&&p.final,h=void 0;d in n.output.edges?(h=n.output.edges[d]).final=h.final||m:((h=new N.TokenSet).final=m,n.output.edges[d]=h),r.push({qNode:p,output:h,node:f})}}}return t},N.TokenSet.Builder=function(){this.previousWord="",this.root=new N.TokenSet,this.uncheckedNodes=[],this.minimizedNodes={}},N.TokenSet.Builder.prototype.insert=function(e){var t,n=0;if(e<this.previousWord)throw new Error("Out of order word insertion");for(var r=0;r<e.length&&r<this.previousWord.length&&e[r]==this.previousWord[r];r++)n++;this.minimize(n),t=0==this.uncheckedNodes.length?this.root:this.uncheckedNodes[this.uncheckedNodes.length-1].child;for(r=n;r<e.length;r++){var a=new N.TokenSet,o=e[r];t.edges[o]=a,this.uncheckedNodes.push({parent:t,char:o,child:a}),t=a}t.final=!0,this.previousWord=e},N.TokenSet.Builder.prototype.finish=function(){this.minimize(0)},N.TokenSet.Builder.prototype.minimize=function(e){for(var t=this.uncheckedNodes.length-1;t>=e;t--){var n=this.uncheckedNodes[t],r=n.child.toString();r in this.minimizedNodes?n.parent.edges[n.char]=this.minimizedNodes[r]:(n.child._str=r,this.minimizedNodes[r]=n.child),this.uncheckedNodes.pop()}},N.Index=function(e){this.invertedIndex=e.invertedIndex,this.fieldVectors=e.fieldVectors,this.tokenSet=e.tokenSet,this.fields=e.fields,this.pipeline=e.pipeline},N.Index.prototype.search=function(e){return this.query((function(t){new N.QueryParser(e,t).parse()}))},N.Index.prototype.query=function(e){for(var t=new N.Query(this.fields),n=Object.create(null),r=Object.create(null),a=Object.create(null),o=Object.create(null),i=Object.create(null),l=0;l<this.fields.length;l++)r[this.fields[l]]=new N.Vector;e.call(t,t);for(l=0;l<t.clauses.length;l++){var s=t.clauses[l],u=null,c=N.Set.empty;u=s.usePipeline?this.pipeline.runString(s.term,{fields:s.fields}):[s.term];for(var d=0;d<u.length;d++){var f=u[d];s.term=f;var p=N.TokenSet.fromClause(s),m=this.tokenSet.intersect(p).toArray();if(0===m.length&&s.presence===N.Query.presence.REQUIRED){for(var h=0;h<s.fields.length;h++){o[P=s.fields[h]]=N.Set.empty}break}for(var g=0;g<m.length;g++){var v=m[g],b=this.invertedIndex[v],y=b._index;for(h=0;h<s.fields.length;h++){var w=b[P=s.fields[h]],k=Object.keys(w),E=v+"/"+P,S=new N.Set(k);if(s.presence==N.Query.presence.REQUIRED&&(c=c.union(S),void 0===o[P]&&(o[P]=N.Set.complete)),s.presence!=N.Query.presence.PROHIBITED){if(r[P].upsert(y,s.boost,(function(e,t){return e+t})),!a[E]){for(var x=0;x<k.length;x++){var T,C=k[x],_=new N.FieldRef(C,P),L=w[C];void 0===(T=n[_])?n[_]=new N.MatchData(v,P,L):T.add(v,P,L)}a[E]=!0}}else void 0===i[P]&&(i[P]=N.Set.empty),i[P]=i[P].union(S)}}}if(s.presence===N.Query.presence.REQUIRED)for(h=0;h<s.fields.length;h++){o[P=s.fields[h]]=o[P].intersect(c)}}var R=N.Set.complete,A=N.Set.empty;for(l=0;l<this.fields.length;l++){var P;o[P=this.fields[l]]&&(R=R.intersect(o[P])),i[P]&&(A=A.union(i[P]))}var O=Object.keys(n),I=[],D=Object.create(null);if(t.isNegated()){O=Object.keys(this.fieldVectors);for(l=0;l<O.length;l++){_=O[l];var M=N.FieldRef.fromString(_);n[_]=new N.MatchData}}for(l=0;l<O.length;l++){var F=(M=N.FieldRef.fromString(O[l])).docRef;if(R.contains(F)&&!A.contains(F)){var B,j=this.fieldVectors[M],z=r[M.fieldName].similarity(j);if(void 0!==(B=D[F]))B.score+=z,B.matchData.combine(n[M]);else{var $={ref:F,score:z,matchData:n[M]};D[F]=$,I.push($)}}}return I.sort((function(e,t){return t.score-e.score}))},N.Index.prototype.toJSON=function(){var e=Object.keys(this.invertedIndex).sort().map((function(e){return[e,this.invertedIndex[e]]}),this),t=Object.keys(this.fieldVectors).map((function(e){return[e,this.fieldVectors[e].toJSON()]}),this);return{version:N.version,fields:this.fields,fieldVectors:t,invertedIndex:e,pipeline:this.pipeline.toJSON()}},N.Index.load=function(e){var t={},n={},r=e.fieldVectors,a=Object.create(null),o=e.invertedIndex,i=new N.TokenSet.Builder,l=N.Pipeline.load(e.pipeline);e.version!=N.version&&N.utils.warn("Version mismatch when loading serialised index. Current version of lunr '"+N.version+"' does not match serialized index '"+e.version+"'");for(var s=0;s<r.length;s++){var u=(d=r[s])[0],c=d[1];n[u]=new N.Vector(c)}for(s=0;s<o.length;s++){var d,f=(d=o[s])[0],p=d[1];i.insert(f),a[f]=p}return i.finish(),t.fields=e.fields,t.fieldVectors=n,t.invertedIndex=a,t.tokenSet=i.root,t.pipeline=l,new N.Index(t)},N.Builder=function(){this._ref="id",this._fields=Object.create(null),this._documents=Object.create(null),this.invertedIndex=Object.create(null),this.fieldTermFrequencies={},this.fieldLengths={},this.tokenizer=N.tokenizer,this.pipeline=new N.Pipeline,this.searchPipeline=new N.Pipeline,this.documentCount=0,this._b=.75,this._k1=1.2,this.termIndex=0,this.metadataWhitelist=[]},N.Builder.prototype.ref=function(e){this._ref=e},N.Builder.prototype.field=function(e,t){if(/\//.test(e))throw new RangeError("Field '"+e+"' contains illegal character '/'");this._fields[e]=t||{}},N.Builder.prototype.b=function(e){this._b=e<0?0:e>1?1:e},N.Builder.prototype.k1=function(e){this._k1=e},N.Builder.prototype.add=function(e,t){var n=e[this._ref],r=Object.keys(this._fields);this._documents[n]=t||{},this.documentCount+=1;for(var a=0;a<r.length;a++){var o=r[a],i=this._fields[o].extractor,l=i?i(e):e[o],s=this.tokenizer(l,{fields:[o]}),u=this.pipeline.run(s),c=new N.FieldRef(n,o),d=Object.create(null);this.fieldTermFrequencies[c]=d,this.fieldLengths[c]=0,this.fieldLengths[c]+=u.length;for(var f=0;f<u.length;f++){var p=u[f];if(null==d[p]&&(d[p]=0),d[p]+=1,null==this.invertedIndex[p]){var m=Object.create(null);m._index=this.termIndex,this.termIndex+=1;for(var h=0;h<r.length;h++)m[r[h]]=Object.create(null);this.invertedIndex[p]=m}null==this.invertedIndex[p][o][n]&&(this.invertedIndex[p][o][n]=Object.create(null));for(var g=0;g<this.metadataWhitelist.length;g++){var v=this.metadataWhitelist[g],b=p.metadata[v];null==this.invertedIndex[p][o][n][v]&&(this.invertedIndex[p][o][n][v]=[]),this.invertedIndex[p][o][n][v].push(b)}}}},N.Builder.prototype.calculateAverageFieldLengths=function(){for(var e=Object.keys(this.fieldLengths),t=e.length,n={},r={},a=0;a<t;a++){var o=N.FieldRef.fromString(e[a]),i=o.fieldName;r[i]||(r[i]=0),r[i]+=1,n[i]||(n[i]=0),n[i]+=this.fieldLengths[o]}var l=Object.keys(this._fields);for(a=0;a<l.length;a++){var s=l[a];n[s]=n[s]/r[s]}this.averageFieldLength=n},N.Builder.prototype.createFieldVectors=function(){for(var e={},t=Object.keys(this.fieldTermFrequencies),n=t.length,r=Object.create(null),a=0;a<n;a++){for(var o=N.FieldRef.fromString(t[a]),i=o.fieldName,l=this.fieldLengths[o],s=new N.Vector,u=this.fieldTermFrequencies[o],c=Object.keys(u),d=c.length,f=this._fields[i].boost||1,p=this._documents[o.docRef].boost||1,m=0;m<d;m++){var h,g,v,b=c[m],y=u[b],w=this.invertedIndex[b]._index;void 0===r[b]?(h=N.idf(this.invertedIndex[b],this.documentCount),r[b]=h):h=r[b],g=h*((this._k1+1)*y)/(this._k1*(1-this._b+this._b*(l/this.averageFieldLength[i]))+y),g*=f,g*=p,v=Math.round(1e3*g)/1e3,s.insert(w,v)}e[o]=s}this.fieldVectors=e},N.Builder.prototype.createTokenSet=function(){this.tokenSet=N.TokenSet.fromArray(Object.keys(this.invertedIndex).sort())},N.Builder.prototype.build=function(){return this.calculateAverageFieldLengths(),this.createFieldVectors(),this.createTokenSet(),new N.Index({invertedIndex:this.invertedIndex,fieldVectors:this.fieldVectors,tokenSet:this.tokenSet,fields:Object.keys(this._fields),pipeline:this.searchPipeline})},N.Builder.prototype.use=function(e){var t=Array.prototype.slice.call(arguments,1);t.unshift(this),e.apply(this,t)},N.MatchData=function(e,t,n){for(var r=Object.create(null),a=Object.keys(n||{}),o=0;o<a.length;o++){var i=a[o];r[i]=n[i].slice()}this.metadata=Object.create(null),void 0!==e&&(this.metadata[e]=Object.create(null),this.metadata[e][t]=r)},N.MatchData.prototype.combine=function(e){for(var t=Object.keys(e.metadata),n=0;n<t.length;n++){var r=t[n],a=Object.keys(e.metadata[r]);null==this.metadata[r]&&(this.metadata[r]=Object.create(null));for(var o=0;o<a.length;o++){var i=a[o],l=Object.keys(e.metadata[r][i]);null==this.metadata[r][i]&&(this.metadata[r][i]=Object.create(null));for(var s=0;s<l.length;s++){var u=l[s];null==this.metadata[r][i][u]?this.metadata[r][i][u]=e.metadata[r][i][u]:this.metadata[r][i][u]=this.metadata[r][i][u].concat(e.metadata[r][i][u])}}}},N.MatchData.prototype.add=function(e,t,n){if(!(e in this.metadata))return this.metadata[e]=Object.create(null),void(this.metadata[e][t]=n);if(t in this.metadata[e])for(var r=Object.keys(n),a=0;a<r.length;a++){var o=r[a];o in this.metadata[e][t]?this.metadata[e][t][o]=this.metadata[e][t][o].concat(n[o]):this.metadata[e][t][o]=n[o]}else this.metadata[e][t]=n},N.Query=function(e){this.clauses=[],this.allFields=e},N.Query.wildcard=new String("*"),N.Query.wildcard.NONE=0,N.Query.wildcard.LEADING=1,N.Query.wildcard.TRAILING=2,N.Query.presence={OPTIONAL:1,REQUIRED:2,PROHIBITED:3},N.Query.prototype.clause=function(e){return"fields"in e||(e.fields=this.allFields),"boost"in e||(e.boost=1),"usePipeline"in e||(e.usePipeline=!0),"wildcard"in e||(e.wildcard=N.Query.wildcard.NONE),e.wildcard&N.Query.wildcard.LEADING&&e.term.charAt(0)!=N.Query.wildcard&&(e.term="*"+e.term),e.wildcard&N.Query.wildcard.TRAILING&&e.term.slice(-1)!=N.Query.wildcard&&(e.term=e.term+"*"),"presence"in e||(e.presence=N.Query.presence.OPTIONAL),this.clauses.push(e),this},N.Query.prototype.isNegated=function(){for(var e=0;e<this.clauses.length;e++)if(this.clauses[e].presence!=N.Query.presence.PROHIBITED)return!1;return!0},N.Query.prototype.term=function(e,t){if(Array.isArray(e))return e.forEach((function(e){this.term(e,N.utils.clone(t))}),this),this;var n=t||{};return n.term=e.toString(),this.clause(n),this},N.QueryParseError=function(e,t,n){this.name="QueryParseError",this.message=e,this.start=t,this.end=n},N.QueryParseError.prototype=new Error,N.QueryLexer=function(e){this.lexemes=[],this.str=e,this.length=e.length,this.pos=0,this.start=0,this.escapeCharPositions=[]},N.QueryLexer.prototype.run=function(){for(var e=N.QueryLexer.lexText;e;)e=e(this)},N.QueryLexer.prototype.sliceString=function(){for(var e=[],t=this.start,n=this.pos,r=0;r<this.escapeCharPositions.length;r++)n=this.escapeCharPositions[r],e.push(this.str.slice(t,n)),t=n+1;return e.push(this.str.slice(t,this.pos)),this.escapeCharPositions.length=0,e.join("")},N.QueryLexer.prototype.emit=function(e){this.lexemes.push({type:e,str:this.sliceString(),start:this.start,end:this.pos}),this.start=this.pos},N.QueryLexer.prototype.escapeCharacter=function(){this.escapeCharPositions.push(this.pos-1),this.pos+=1},N.QueryLexer.prototype.next=function(){if(this.pos>=this.length)return N.QueryLexer.EOS;var e=this.str.charAt(this.pos);return this.pos+=1,e},N.QueryLexer.prototype.width=function(){return this.pos-this.start},N.QueryLexer.prototype.ignore=function(){this.start==this.pos&&(this.pos+=1),this.start=this.pos},N.QueryLexer.prototype.backup=function(){this.pos-=1},N.QueryLexer.prototype.acceptDigitRun=function(){var e,t;do{t=(e=this.next()).charCodeAt(0)}while(t>47&&t<58);e!=N.QueryLexer.EOS&&this.backup()},N.QueryLexer.prototype.more=function(){return this.pos<this.length},N.QueryLexer.EOS="EOS",N.QueryLexer.FIELD="FIELD",N.QueryLexer.TERM="TERM",N.QueryLexer.EDIT_DISTANCE="EDIT_DISTANCE",N.QueryLexer.BOOST="BOOST",N.QueryLexer.PRESENCE="PRESENCE",N.QueryLexer.lexField=function(e){return e.backup(),e.emit(N.QueryLexer.FIELD),e.ignore(),N.QueryLexer.lexText},N.QueryLexer.lexTerm=function(e){if(e.width()>1&&(e.backup(),e.emit(N.QueryLexer.TERM)),e.ignore(),e.more())return N.QueryLexer.lexText},N.QueryLexer.lexEditDistance=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(N.QueryLexer.EDIT_DISTANCE),N.QueryLexer.lexText},N.QueryLexer.lexBoost=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(N.QueryLexer.BOOST),N.QueryLexer.lexText},N.QueryLexer.lexEOS=function(e){e.width()>0&&e.emit(N.QueryLexer.TERM)},N.QueryLexer.termSeparator=N.tokenizer.separator,N.QueryLexer.lexText=function(e){for(;;){var t=e.next();if(t==N.QueryLexer.EOS)return N.QueryLexer.lexEOS;if(92!=t.charCodeAt(0)){if(":"==t)return N.QueryLexer.lexField;if("~"==t)return e.backup(),e.width()>0&&e.emit(N.QueryLexer.TERM),N.QueryLexer.lexEditDistance;if("^"==t)return e.backup(),e.width()>0&&e.emit(N.QueryLexer.TERM),N.QueryLexer.lexBoost;if("+"==t&&1===e.width())return e.emit(N.QueryLexer.PRESENCE),N.QueryLexer.lexText;if("-"==t&&1===e.width())return e.emit(N.QueryLexer.PRESENCE),N.QueryLexer.lexText;if(t.match(N.QueryLexer.termSeparator))return N.QueryLexer.lexTerm}else e.escapeCharacter()}},N.QueryParser=function(e,t){this.lexer=new N.QueryLexer(e),this.query=t,this.currentClause={},this.lexemeIdx=0},N.QueryParser.prototype.parse=function(){this.lexer.run(),this.lexemes=this.lexer.lexemes;for(var e=N.QueryParser.parseClause;e;)e=e(this);return this.query},N.QueryParser.prototype.peekLexeme=function(){return this.lexemes[this.lexemeIdx]},N.QueryParser.prototype.consumeLexeme=function(){var e=this.peekLexeme();return this.lexemeIdx+=1,e},N.QueryParser.prototype.nextClause=function(){var e=this.currentClause;this.query.clause(e),this.currentClause={}},N.QueryParser.parseClause=function(e){var t=e.peekLexeme();if(null!=t)switch(t.type){case N.QueryLexer.PRESENCE:return N.QueryParser.parsePresence;case N.QueryLexer.FIELD:return N.QueryParser.parseField;case N.QueryLexer.TERM:return N.QueryParser.parseTerm;default:var n="expected either a field or a term, found "+t.type;throw t.str.length>=1&&(n+=" with value '"+t.str+"'"),new N.QueryParseError(n,t.start,t.end)}},N.QueryParser.parsePresence=function(e){var t=e.consumeLexeme();if(null!=t){switch(t.str){case"-":e.currentClause.presence=N.Query.presence.PROHIBITED;break;case"+":e.currentClause.presence=N.Query.presence.REQUIRED;break;default:var n="unrecognised presence operator'"+t.str+"'";throw new N.QueryParseError(n,t.start,t.end)}var r=e.peekLexeme();if(null==r){n="expecting term or field, found nothing";throw new N.QueryParseError(n,t.start,t.end)}switch(r.type){case N.QueryLexer.FIELD:return N.QueryParser.parseField;case N.QueryLexer.TERM:return N.QueryParser.parseTerm;default:n="expecting term or field, found '"+r.type+"'";throw new N.QueryParseError(n,r.start,r.end)}}},N.QueryParser.parseField=function(e){var t=e.consumeLexeme();if(null!=t){if(-1==e.query.allFields.indexOf(t.str)){var n=e.query.allFields.map((function(e){return"'"+e+"'"})).join(", "),r="unrecognised field '"+t.str+"', possible fields: "+n;throw new N.QueryParseError(r,t.start,t.end)}e.currentClause.fields=[t.str];var a=e.peekLexeme();if(null==a){r="expecting term, found nothing";throw new N.QueryParseError(r,t.start,t.end)}if(a.type===N.QueryLexer.TERM)return N.QueryParser.parseTerm;r="expecting term, found '"+a.type+"'";throw new N.QueryParseError(r,a.start,a.end)}},N.QueryParser.parseTerm=function(e){var t=e.consumeLexeme();if(null!=t){e.currentClause.term=t.str.toLowerCase(),-1!=t.str.indexOf("*")&&(e.currentClause.usePipeline=!1);var n=e.peekLexeme();if(null!=n)switch(n.type){case N.QueryLexer.TERM:return e.nextClause(),N.QueryParser.parseTerm;case N.QueryLexer.FIELD:return e.nextClause(),N.QueryParser.parseField;case N.QueryLexer.EDIT_DISTANCE:return N.QueryParser.parseEditDistance;case N.QueryLexer.BOOST:return N.QueryParser.parseBoost;case N.QueryLexer.PRESENCE:return e.nextClause(),N.QueryParser.parsePresence;default:var r="Unexpected lexeme type '"+n.type+"'";throw new N.QueryParseError(r,n.start,n.end)}else e.nextClause()}},N.QueryParser.parseEditDistance=function(e){var t=e.consumeLexeme();if(null!=t){var n=parseInt(t.str,10);if(isNaN(n)){var r="edit distance must be numeric";throw new N.QueryParseError(r,t.start,t.end)}e.currentClause.editDistance=n;var a=e.peekLexeme();if(null!=a)switch(a.type){case N.QueryLexer.TERM:return e.nextClause(),N.QueryParser.parseTerm;case N.QueryLexer.FIELD:return e.nextClause(),N.QueryParser.parseField;case N.QueryLexer.EDIT_DISTANCE:return N.QueryParser.parseEditDistance;case N.QueryLexer.BOOST:return N.QueryParser.parseBoost;case N.QueryLexer.PRESENCE:return e.nextClause(),N.QueryParser.parsePresence;default:r="Unexpected lexeme type '"+a.type+"'";throw new N.QueryParseError(r,a.start,a.end)}else e.nextClause()}},N.QueryParser.parseBoost=function(e){var t=e.consumeLexeme();if(null!=t){var n=parseInt(t.str,10);if(isNaN(n)){var r="boost must be numeric";throw new N.QueryParseError(r,t.start,t.end)}e.currentClause.boost=n;var a=e.peekLexeme();if(null!=a)switch(a.type){case N.QueryLexer.TERM:return e.nextClause(),N.QueryParser.parseTerm;case N.QueryLexer.FIELD:return e.nextClause(),N.QueryParser.parseField;case N.QueryLexer.EDIT_DISTANCE:return N.QueryParser.parseEditDistance;case N.QueryLexer.BOOST:return N.QueryParser.parseBoost;case N.QueryLexer.PRESENCE:return e.nextClause(),N.QueryParser.parsePresence;default:r="Unexpected lexeme type '"+a.type+"'";throw new N.QueryParseError(r,a.start,a.end)}else e.nextClause()}},void 0===(a="function"==typeof(r=function(){return N})?r.call(t,n,t,e):r)||(e.exports=a)}()},813:function(e){e.exports=function(){"use strict";var e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},t=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")},n=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable||!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}return function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),r=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a=function(){function e(n){var r=!(arguments.length>1&&void 0!==arguments[1])||arguments[1],a=arguments.length>2&&void 0!==arguments[2]?arguments[2]:[],o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:5e3;t(this,e),this.ctx=n,this.iframes=r,this.exclude=a,this.iframesTimeout=o}return n(e,[{key:"getContexts",value:function(){var e=[];return(void 0!==this.ctx&&this.ctx?NodeList.prototype.isPrototypeOf(this.ctx)?Array.prototype.slice.call(this.ctx):Array.isArray(this.ctx)?this.ctx:"string"==typeof this.ctx?Array.prototype.slice.call(document.querySelectorAll(this.ctx)):[this.ctx]:[]).forEach((function(t){var n=e.filter((function(e){return e.contains(t)})).length>0;-1!==e.indexOf(t)||n||e.push(t)})),e}},{key:"getIframeContents",value:function(e,t){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:function(){},r=void 0;try{var a=e.contentWindow;if(r=a.document,!a||!r)throw new Error("iframe inaccessible")}catch(o){n()}r&&t(r)}},{key:"isIframeBlank",value:function(e){var t="about:blank",n=e.getAttribute("src").trim();return e.contentWindow.location.href===t&&n!==t&&n}},{key:"observeIframeLoad",value:function(e,t,n){var r=this,a=!1,o=null,i=function i(){if(!a){a=!0,clearTimeout(o);try{r.isIframeBlank(e)||(e.removeEventListener("load",i),r.getIframeContents(e,t,n))}catch(l){n()}}};e.addEventListener("load",i),o=setTimeout(i,this.iframesTimeout)}},{key:"onIframeReady",value:function(e,t,n){try{"complete"===e.contentWindow.document.readyState?this.isIframeBlank(e)?this.observeIframeLoad(e,t,n):this.getIframeContents(e,t,n):this.observeIframeLoad(e,t,n)}catch(r){n()}}},{key:"waitForIframes",value:function(e,t){var n=this,r=0;this.forEachIframe(e,(function(){return!0}),(function(e){r++,n.waitForIframes(e.querySelector("html"),(function(){--r||t()}))}),(function(e){e||t()}))}},{key:"forEachIframe",value:function(t,n,r){var a=this,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},i=t.querySelectorAll("iframe"),l=i.length,s=0;i=Array.prototype.slice.call(i);var u=function(){--l<=0&&o(s)};l||u(),i.forEach((function(t){e.matches(t,a.exclude)?u():a.onIframeReady(t,(function(e){n(t)&&(s++,r(e)),u()}),u)}))}},{key:"createIterator",value:function(e,t,n){return document.createNodeIterator(e,t,n,!1)}},{key:"createInstanceOnIframe",value:function(t){return new e(t.querySelector("html"),this.iframes)}},{key:"compareNodeIframe",value:function(e,t,n){if(e.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_PRECEDING){if(null===t)return!0;if(t.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_FOLLOWING)return!0}return!1}},{key:"getIteratorNode",value:function(e){var t=e.previousNode();return{prevNode:t,node:(null===t||e.nextNode())&&e.nextNode()}}},{key:"checkIframeFilter",value:function(e,t,n,r){var a=!1,o=!1;return r.forEach((function(e,t){e.val===n&&(a=t,o=e.handled)})),this.compareNodeIframe(e,t,n)?(!1!==a||o?!1===a||o||(r[a].handled=!0):r.push({val:n,handled:!0}),!0):(!1===a&&r.push({val:n,handled:!1}),!1)}},{key:"handleOpenIframes",value:function(e,t,n,r){var a=this;e.forEach((function(e){e.handled||a.getIframeContents(e.val,(function(e){a.createInstanceOnIframe(e).forEachNode(t,n,r)}))}))}},{key:"iterateThroughNodes",value:function(e,t,n,r,a){for(var o=this,i=this.createIterator(t,e,r),l=[],s=[],u=void 0,c=void 0,d=function(){var e=o.getIteratorNode(i);return c=e.prevNode,u=e.node};d();)this.iframes&&this.forEachIframe(t,(function(e){return o.checkIframeFilter(u,c,e,l)}),(function(t){o.createInstanceOnIframe(t).forEachNode(e,(function(e){return s.push(e)}),r)})),s.push(u);s.forEach((function(e){n(e)})),this.iframes&&this.handleOpenIframes(l,e,n,r),a()}},{key:"forEachNode",value:function(e,t,n){var r=this,a=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},o=this.getContexts(),i=o.length;i||a(),o.forEach((function(o){var l=function(){r.iterateThroughNodes(e,o,t,n,(function(){--i<=0&&a()}))};r.iframes?r.waitForIframes(o,l):l()}))}}],[{key:"matches",value:function(e,t){var n="string"==typeof t?[t]:t,r=e.matches||e.matchesSelector||e.msMatchesSelector||e.mozMatchesSelector||e.oMatchesSelector||e.webkitMatchesSelector;if(r){var a=!1;return n.every((function(t){return!r.call(e,t)||(a=!0,!1)})),a}return!1}}]),e}(),o=function(){function o(e){t(this,o),this.ctx=e,this.ie=!1;var n=window.navigator.userAgent;(n.indexOf("MSIE")>-1||n.indexOf("Trident")>-1)&&(this.ie=!0)}return n(o,[{key:"log",value:function(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"debug",r=this.opt.log;this.opt.debug&&"object"===(void 0===r?"undefined":e(r))&&"function"==typeof r[n]&&r[n]("mark.js: "+t)}},{key:"escapeStr",value:function(e){return e.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")}},{key:"createRegExp",value:function(e){return"disabled"!==this.opt.wildcards&&(e=this.setupWildcardsRegExp(e)),e=this.escapeStr(e),Object.keys(this.opt.synonyms).length&&(e=this.createSynonymsRegExp(e)),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),this.opt.diacritics&&(e=this.createDiacriticsRegExp(e)),e=this.createMergedBlanksRegExp(e),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.createJoinersRegExp(e)),"disabled"!==this.opt.wildcards&&(e=this.createWildcardsRegExp(e)),e=this.createAccuracyRegExp(e)}},{key:"createSynonymsRegExp",value:function(e){var t=this.opt.synonyms,n=this.opt.caseSensitive?"":"i",r=this.opt.ignoreJoiners||this.opt.ignorePunctuation.length?"\0":"";for(var a in t)if(t.hasOwnProperty(a)){var o=t[a],i="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(a):this.escapeStr(a),l="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(o):this.escapeStr(o);""!==i&&""!==l&&(e=e.replace(new RegExp("("+this.escapeStr(i)+"|"+this.escapeStr(l)+")","gm"+n),r+"("+this.processSynomyms(i)+"|"+this.processSynomyms(l)+")"+r))}return e}},{key:"processSynomyms",value:function(e){return(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),e}},{key:"setupWildcardsRegExp",value:function(e){return(e=e.replace(/(?:\\)*\?/g,(function(e){return"\\"===e.charAt(0)?"?":"\x01"}))).replace(/(?:\\)*\*/g,(function(e){return"\\"===e.charAt(0)?"*":"\x02"}))}},{key:"createWildcardsRegExp",value:function(e){var t="withSpaces"===this.opt.wildcards;return e.replace(/\u0001/g,t?"[\\S\\s]?":"\\S?").replace(/\u0002/g,t?"[\\S\\s]*?":"\\S*")}},{key:"setupIgnoreJoinersRegExp",value:function(e){return e.replace(/[^(|)\\]/g,(function(e,t,n){var r=n.charAt(t+1);return/[(|)\\]/.test(r)||""===r?e:e+"\0"}))}},{key:"createJoinersRegExp",value:function(e){var t=[],n=this.opt.ignorePunctuation;return Array.isArray(n)&&n.length&&t.push(this.escapeStr(n.join(""))),this.opt.ignoreJoiners&&t.push("\\u00ad\\u200b\\u200c\\u200d"),t.length?e.split(/\u0000+/).join("["+t.join("")+"]*"):e}},{key:"createDiacriticsRegExp",value:function(e){var t=this.opt.caseSensitive?"":"i",n=this.opt.caseSensitive?["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105","A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010d","C\xc7\u0106\u010c","d\u0111\u010f","D\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119","E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012b","I\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142","L\u0141","n\xf1\u0148\u0144","N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014d","O\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159","R\u0158","s\u0161\u015b\u0219\u015f","S\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163","T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016b","U\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xff","Y\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017a","Z\u017d\u017b\u0179"]:["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010dC\xc7\u0106\u010c","d\u0111\u010fD\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012bI\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142L\u0141","n\xf1\u0148\u0144N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014dO\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159R\u0158","s\u0161\u015b\u0219\u015fS\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016bU\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xffY\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017aZ\u017d\u017b\u0179"],r=[];return e.split("").forEach((function(a){n.every((function(n){if(-1!==n.indexOf(a)){if(r.indexOf(n)>-1)return!1;e=e.replace(new RegExp("["+n+"]","gm"+t),"["+n+"]"),r.push(n)}return!0}))})),e}},{key:"createMergedBlanksRegExp",value:function(e){return e.replace(/[\s]+/gim,"[\\s]+")}},{key:"createAccuracyRegExp",value:function(e){var t=this,n="!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~\xa1\xbf",r=this.opt.accuracy,a="string"==typeof r?r:r.value,o="string"==typeof r?[]:r.limiters,i="";switch(o.forEach((function(e){i+="|"+t.escapeStr(e)})),a){case"partially":default:return"()("+e+")";case"complementary":return"()([^"+(i="\\s"+(i||this.escapeStr(n)))+"]*"+e+"[^"+i+"]*)";case"exactly":return"(^|\\s"+i+")("+e+")(?=$|\\s"+i+")"}}},{key:"getSeparatedKeywords",value:function(e){var t=this,n=[];return e.forEach((function(e){t.opt.separateWordSearch?e.split(" ").forEach((function(e){e.trim()&&-1===n.indexOf(e)&&n.push(e)})):e.trim()&&-1===n.indexOf(e)&&n.push(e)})),{keywords:n.sort((function(e,t){return t.length-e.length})),length:n.length}}},{key:"isNumeric",value:function(e){return Number(parseFloat(e))==e}},{key:"checkRanges",value:function(e){var t=this;if(!Array.isArray(e)||"[object Object]"!==Object.prototype.toString.call(e[0]))return this.log("markRanges() will only accept an array of objects"),this.opt.noMatch(e),[];var n=[],r=0;return e.sort((function(e,t){return e.start-t.start})).forEach((function(e){var a=t.callNoMatchOnInvalidRanges(e,r),o=a.start,i=a.end;a.valid&&(e.start=o,e.length=i-o,n.push(e),r=i)})),n}},{key:"callNoMatchOnInvalidRanges",value:function(e,t){var n=void 0,r=void 0,a=!1;return e&&void 0!==e.start?(r=(n=parseInt(e.start,10))+parseInt(e.length,10),this.isNumeric(e.start)&&this.isNumeric(e.length)&&r-t>0&&r-n>0?a=!0:(this.log("Ignoring invalid or overlapping range: "+JSON.stringify(e)),this.opt.noMatch(e))):(this.log("Ignoring invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:n,end:r,valid:a}}},{key:"checkWhitespaceRanges",value:function(e,t,n){var r=void 0,a=!0,o=n.length,i=t-o,l=parseInt(e.start,10)-i;return(r=(l=l>o?o:l)+parseInt(e.length,10))>o&&(r=o,this.log("End range automatically set to the max value of "+o)),l<0||r-l<0||l>o||r>o?(a=!1,this.log("Invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)):""===n.substring(l,r).replace(/\s+/g,"")&&(a=!1,this.log("Skipping whitespace only range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:l,end:r,valid:a}}},{key:"getTextNodes",value:function(e){var t=this,n="",r=[];this.iterator.forEachNode(NodeFilter.SHOW_TEXT,(function(e){r.push({start:n.length,end:(n+=e.textContent).length,node:e})}),(function(e){return t.matchesExclude(e.parentNode)?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}),(function(){e({value:n,nodes:r})}))}},{key:"matchesExclude",value:function(e){return a.matches(e,this.opt.exclude.concat(["script","style","title","head","html"]))}},{key:"wrapRangeInTextNode",value:function(e,t,n){var r=this.opt.element?this.opt.element:"mark",a=e.splitText(t),o=a.splitText(n-t),i=document.createElement(r);return i.setAttribute("data-markjs","true"),this.opt.className&&i.setAttribute("class",this.opt.className),i.textContent=a.textContent,a.parentNode.replaceChild(i,a),o}},{key:"wrapRangeInMappedTextNode",value:function(e,t,n,r,a){var o=this;e.nodes.every((function(i,l){var s=e.nodes[l+1];if(void 0===s||s.start>t){if(!r(i.node))return!1;var u=t-i.start,c=(n>i.end?i.end:n)-i.start,d=e.value.substr(0,i.start),f=e.value.substr(c+i.start);if(i.node=o.wrapRangeInTextNode(i.node,u,c),e.value=d+f,e.nodes.forEach((function(t,n){n>=l&&(e.nodes[n].start>0&&n!==l&&(e.nodes[n].start-=c),e.nodes[n].end-=c)})),n-=c,a(i.node.previousSibling,i.start),!(n>i.end))return!1;t=i.end}return!0}))}},{key:"wrapMatches",value:function(e,t,n,r,a){var o=this,i=0===t?0:t+1;this.getTextNodes((function(t){t.nodes.forEach((function(t){t=t.node;for(var a=void 0;null!==(a=e.exec(t.textContent))&&""!==a[i];)if(n(a[i],t)){var l=a.index;if(0!==i)for(var s=1;s<i;s++)l+=a[s].length;t=o.wrapRangeInTextNode(t,l,l+a[i].length),r(t.previousSibling),e.lastIndex=0}})),a()}))}},{key:"wrapMatchesAcrossElements",value:function(e,t,n,r,a){var o=this,i=0===t?0:t+1;this.getTextNodes((function(t){for(var l=void 0;null!==(l=e.exec(t.value))&&""!==l[i];){var s=l.index;if(0!==i)for(var u=1;u<i;u++)s+=l[u].length;var c=s+l[i].length;o.wrapRangeInMappedTextNode(t,s,c,(function(e){return n(l[i],e)}),(function(t,n){e.lastIndex=n,r(t)}))}a()}))}},{key:"wrapRangeFromIndex",value:function(e,t,n,r){var a=this;this.getTextNodes((function(o){var i=o.value.length;e.forEach((function(e,r){var l=a.checkWhitespaceRanges(e,i,o.value),s=l.start,u=l.end;l.valid&&a.wrapRangeInMappedTextNode(o,s,u,(function(n){return t(n,e,o.value.substring(s,u),r)}),(function(t){n(t,e)}))})),r()}))}},{key:"unwrapMatches",value:function(e){for(var t=e.parentNode,n=document.createDocumentFragment();e.firstChild;)n.appendChild(e.removeChild(e.firstChild));t.replaceChild(n,e),this.ie?this.normalizeTextNode(t):t.normalize()}},{key:"normalizeTextNode",value:function(e){if(e){if(3===e.nodeType)for(;e.nextSibling&&3===e.nextSibling.nodeType;)e.nodeValue+=e.nextSibling.nodeValue,e.parentNode.removeChild(e.nextSibling);else this.normalizeTextNode(e.firstChild);this.normalizeTextNode(e.nextSibling)}}},{key:"markRegExp",value:function(e,t){var n=this;this.opt=t,this.log('Searching with expression "'+e+'"');var r=0,a="wrapMatches",o=function(e){r++,n.opt.each(e)};this.opt.acrossElements&&(a="wrapMatchesAcrossElements"),this[a](e,this.opt.ignoreGroups,(function(e,t){return n.opt.filter(t,e,r)}),o,(function(){0===r&&n.opt.noMatch(e),n.opt.done(r)}))}},{key:"mark",value:function(e,t){var n=this;this.opt=t;var r=0,a="wrapMatches",o=this.getSeparatedKeywords("string"==typeof e?[e]:e),i=o.keywords,l=o.length,s=this.opt.caseSensitive?"":"i",u=function e(t){var o=new RegExp(n.createRegExp(t),"gm"+s),u=0;n.log('Searching with expression "'+o+'"'),n[a](o,1,(function(e,a){return n.opt.filter(a,t,r,u)}),(function(e){u++,r++,n.opt.each(e)}),(function(){0===u&&n.opt.noMatch(t),i[l-1]===t?n.opt.done(r):e(i[i.indexOf(t)+1])}))};this.opt.acrossElements&&(a="wrapMatchesAcrossElements"),0===l?this.opt.done(r):u(i[0])}},{key:"markRanges",value:function(e,t){var n=this;this.opt=t;var r=0,a=this.checkRanges(e);a&&a.length?(this.log("Starting to mark with the following ranges: "+JSON.stringify(a)),this.wrapRangeFromIndex(a,(function(e,t,r,a){return n.opt.filter(e,t,r,a)}),(function(e,t){r++,n.opt.each(e,t)}),(function(){n.opt.done(r)}))):this.opt.done(r)}},{key:"unmark",value:function(e){var t=this;this.opt=e;var n=this.opt.element?this.opt.element:"*";n+="[data-markjs]",this.opt.className&&(n+="."+this.opt.className),this.log('Removal selector "'+n+'"'),this.iterator.forEachNode(NodeFilter.SHOW_ELEMENT,(function(e){t.unwrapMatches(e)}),(function(e){var r=a.matches(e,n),o=t.matchesExclude(e);return!r||o?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}),this.opt.done)}},{key:"opt",set:function(e){this._opt=r({},{element:"",className:"",exclude:[],iframes:!1,iframesTimeout:5e3,separateWordSearch:!0,diacritics:!0,synonyms:{},accuracy:"partially",acrossElements:!1,caseSensitive:!1,ignoreJoiners:!1,ignoreGroups:0,ignorePunctuation:[],wildcards:"disabled",each:function(){},noMatch:function(){},filter:function(){return!0},done:function(){},debug:!1,log:window.console},e)},get:function(){return this._opt}},{key:"iterator",get:function(){return new a(this.ctx,this.opt.iframes,this.opt.exclude,this.opt.iframesTimeout)}}]),o}();function i(e){var t=this,n=new o(e);return this.mark=function(e,r){return n.mark(e,r),t},this.markRegExp=function(e,r){return n.markRegExp(e,r),t},this.markRanges=function(e,r){return n.markRanges(e,r),t},this.unmark=function(e){return n.unmark(e),t},this}return i}()},2497:(e,t,n)=>{"use strict";n.r(t)},2295:(e,t,n)=>{"use strict";n.r(t)},4865:function(e,t,n){var r,a;r=function(){var e,t,n={version:"0.2.0"},r=n.settings={minimum:.08,easing:"ease",positionUsing:"",speed:200,trickle:!0,trickleRate:.02,trickleSpeed:800,showSpinner:!0,barSelector:'[role="bar"]',spinnerSelector:'[role="spinner"]',parent:"body",template:'<div class="bar" role="bar"><div class="peg"></div></div><div class="spinner" role="spinner"><div class="spinner-icon"></div></div>'};function a(e,t,n){return e<t?t:e>n?n:e}function o(e){return 100*(-1+e)}function i(e,t,n){var a;return(a="translate3d"===r.positionUsing?{transform:"translate3d("+o(e)+"%,0,0)"}:"translate"===r.positionUsing?{transform:"translate("+o(e)+"%,0)"}:{"margin-left":o(e)+"%"}).transition="all "+t+"ms "+n,a}n.configure=function(e){var t,n;for(t in e)void 0!==(n=e[t])&&e.hasOwnProperty(t)&&(r[t]=n);return this},n.status=null,n.set=function(e){var t=n.isStarted();e=a(e,r.minimum,1),n.status=1===e?null:e;var o=n.render(!t),u=o.querySelector(r.barSelector),c=r.speed,d=r.easing;return o.offsetWidth,l((function(t){""===r.positionUsing&&(r.positionUsing=n.getPositioningCSS()),s(u,i(e,c,d)),1===e?(s(o,{transition:"none",opacity:1}),o.offsetWidth,setTimeout((function(){s(o,{transition:"all "+c+"ms linear",opacity:0}),setTimeout((function(){n.remove(),t()}),c)}),c)):setTimeout(t,c)})),this},n.isStarted=function(){return"number"==typeof n.status},n.start=function(){n.status||n.set(0);var e=function(){setTimeout((function(){n.status&&(n.trickle(),e())}),r.trickleSpeed)};return r.trickle&&e(),this},n.done=function(e){return e||n.status?n.inc(.3+.5*Math.random()).set(1):this},n.inc=function(e){var t=n.status;return t?("number"!=typeof e&&(e=(1-t)*a(Math.random()*t,.1,.95)),t=a(t+e,0,.994),n.set(t)):n.start()},n.trickle=function(){return n.inc(Math.random()*r.trickleRate)},e=0,t=0,n.promise=function(r){return r&&"resolved"!==r.state()?(0===t&&n.start(),e++,t++,r.always((function(){0==--t?(e=0,n.done()):n.set((e-t)/e)})),this):this},n.render=function(e){if(n.isRendered())return document.getElementById("nprogress");c(document.documentElement,"nprogress-busy");var t=document.createElement("div");t.id="nprogress",t.innerHTML=r.template;var a,i=t.querySelector(r.barSelector),l=e?"-100":o(n.status||0),u=document.querySelector(r.parent);return s(i,{transition:"all 0 linear",transform:"translate3d("+l+"%,0,0)"}),r.showSpinner||(a=t.querySelector(r.spinnerSelector))&&p(a),u!=document.body&&c(u,"nprogress-custom-parent"),u.appendChild(t),t},n.remove=function(){d(document.documentElement,"nprogress-busy"),d(document.querySelector(r.parent),"nprogress-custom-parent");var e=document.getElementById("nprogress");e&&p(e)},n.isRendered=function(){return!!document.getElementById("nprogress")},n.getPositioningCSS=function(){var e=document.body.style,t="WebkitTransform"in e?"Webkit":"MozTransform"in e?"Moz":"msTransform"in e?"ms":"OTransform"in e?"O":"";return t+"Perspective"in e?"translate3d":t+"Transform"in e?"translate":"margin"};var l=function(){var e=[];function t(){var n=e.shift();n&&n(t)}return function(n){e.push(n),1==e.length&&t()}}(),s=function(){var e=["Webkit","O","Moz","ms"],t={};function n(e){return e.replace(/^-ms-/,"ms-").replace(/-([\da-z])/gi,(function(e,t){return t.toUpperCase()}))}function r(t){var n=document.body.style;if(t in n)return t;for(var r,a=e.length,o=t.charAt(0).toUpperCase()+t.slice(1);a--;)if((r=e[a]+o)in n)return r;return t}function a(e){return e=n(e),t[e]||(t[e]=r(e))}function o(e,t,n){t=a(t),e.style[t]=n}return function(e,t){var n,r,a=arguments;if(2==a.length)for(n in t)void 0!==(r=t[n])&&t.hasOwnProperty(n)&&o(e,n,r);else o(e,a[1],a[2])}}();function u(e,t){return("string"==typeof e?e:f(e)).indexOf(" "+t+" ")>=0}function c(e,t){var n=f(e),r=n+t;u(n,t)||(e.className=r.substring(1))}function d(e,t){var n,r=f(e);u(e,t)&&(n=r.replace(" "+t+" "," "),e.className=n.substring(1,n.length-1))}function f(e){return(" "+(e.className||"")+" ").replace(/\s+/gi," ")}function p(e){e&&e.parentNode&&e.parentNode.removeChild(e)}return n},void 0===(a="function"==typeof r?r.call(t,n,t,e):r)||(e.exports=a)},7418:e=>{"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;function a(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(a){return!1}}()?Object.assign:function(e,o){for(var i,l,s=a(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(s[c]=i[c]);if(t){l=t(i);for(var d=0;d<l.length;d++)r.call(i,l[d])&&(s[l[d]]=i[l[d]])}}return s}},7410:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=function(){var e=/(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i,t=0,n={},r={util:{encode:function e(t){return t instanceof a?new a(t.type,e(t.content),t.alias):Array.isArray(t)?t.map(e):t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/\u00a0/g," ")},type:function(e){return Object.prototype.toString.call(e).slice(8,-1)},objId:function(e){return e.__id||Object.defineProperty(e,"__id",{value:++t}),e.__id},clone:function e(t,n){var a,o;switch(n=n||{},r.util.type(t)){case"Object":if(o=r.util.objId(t),n[o])return n[o];for(var i in a={},n[o]=a,t)t.hasOwnProperty(i)&&(a[i]=e(t[i],n));return a;case"Array":return o=r.util.objId(t),n[o]?n[o]:(a=[],n[o]=a,t.forEach((function(t,r){a[r]=e(t,n)})),a);default:return t}},getLanguage:function(t){for(;t;){var n=e.exec(t.className);if(n)return n[1].toLowerCase();t=t.parentElement}return"none"},setLanguage:function(t,n){t.className=t.className.replace(RegExp(e,"gi"),""),t.classList.add("language-"+n)},isActive:function(e,t,n){for(var r="no-"+t;e;){var a=e.classList;if(a.contains(t))return!0;if(a.contains(r))return!1;e=e.parentElement}return!!n}},languages:{plain:n,plaintext:n,text:n,txt:n,extend:function(e,t){var n=r.util.clone(r.languages[e]);for(var a in t)n[a]=t[a];return n},insertBefore:function(e,t,n,a){var o=(a=a||r.languages)[e],i={};for(var l in o)if(o.hasOwnProperty(l)){if(l==t)for(var s in n)n.hasOwnProperty(s)&&(i[s]=n[s]);n.hasOwnProperty(l)||(i[l]=o[l])}var u=a[e];return a[e]=i,r.languages.DFS(r.languages,(function(t,n){n===u&&t!=e&&(this[t]=i)})),i},DFS:function e(t,n,a,o){o=o||{};var i=r.util.objId;for(var l in t)if(t.hasOwnProperty(l)){n.call(t,l,t[l],a||l);var s=t[l],u=r.util.type(s);"Object"!==u||o[i(s)]?"Array"!==u||o[i(s)]||(o[i(s)]=!0,e(s,n,l,o)):(o[i(s)]=!0,e(s,n,null,o))}}},plugins:{},highlight:function(e,t,n){var o={code:e,grammar:t,language:n};return r.hooks.run("before-tokenize",o),o.tokens=r.tokenize(o.code,o.grammar),r.hooks.run("after-tokenize",o),a.stringify(r.util.encode(o.tokens),o.language)},tokenize:function(e,t){var n=t.rest;if(n){for(var r in n)t[r]=n[r];delete t.rest}var a=new l;return s(a,a.head,e),i(e,a,t,a.head,0),function(e){var t=[],n=e.head.next;for(;n!==e.tail;)t.push(n.value),n=n.next;return t}(a)},hooks:{all:{},add:function(e,t){var n=r.hooks.all;n[e]=n[e]||[],n[e].push(t)},run:function(e,t){var n=r.hooks.all[e];if(n&&n.length)for(var a,o=0;a=n[o++];)a(t)}},Token:a};function a(e,t,n,r){this.type=e,this.content=t,this.alias=n,this.length=0|(r||"").length}function o(e,t,n,r){e.lastIndex=t;var a=e.exec(n);if(a&&r&&a[1]){var o=a[1].length;a.index+=o,a[0]=a[0].slice(o)}return a}function i(e,t,n,l,c,d){for(var f in n)if(n.hasOwnProperty(f)&&n[f]){var p=n[f];p=Array.isArray(p)?p:[p];for(var m=0;m<p.length;++m){if(d&&d.cause==f+","+m)return;var h=p[m],g=h.inside,v=!!h.lookbehind,b=!!h.greedy,y=h.alias;if(b&&!h.pattern.global){var w=h.pattern.toString().match(/[imsuy]*$/)[0];h.pattern=RegExp(h.pattern.source,w+"g")}for(var k=h.pattern||h,E=l.next,S=c;E!==t.tail&&!(d&&S>=d.reach);S+=E.value.length,E=E.next){var x=E.value;if(t.length>e.length)return;if(!(x instanceof a)){var T,C=1;if(b){if(!(T=o(k,S,e,v))||T.index>=e.length)break;var _=T.index,L=T.index+T[0].length,R=S;for(R+=E.value.length;_>=R;)R+=(E=E.next).value.length;if(S=R-=E.value.length,E.value instanceof a)continue;for(var A=E;A!==t.tail&&(R<L||"string"==typeof A.value);A=A.next)C++,R+=A.value.length;C--,x=e.slice(S,R),T.index-=S}else if(!(T=o(k,0,x,v)))continue;_=T.index;var N=T[0],P=x.slice(0,_),O=x.slice(_+N.length),I=S+x.length;d&&I>d.reach&&(d.reach=I);var D=E.prev;if(P&&(D=s(t,D,P),S+=P.length),u(t,D,C),E=s(t,D,new a(f,g?r.tokenize(N,g):N,y,N)),O&&s(t,E,O),C>1){var M={cause:f+","+m,reach:I};i(e,t,n,E.prev,S,M),d&&M.reach>d.reach&&(d.reach=M.reach)}}}}}}function l(){var e={value:null,prev:null,next:null},t={value:null,prev:e,next:null};e.next=t,this.head=e,this.tail=t,this.length=0}function s(e,t,n){var r=t.next,a={value:n,prev:t,next:r};return t.next=a,r.prev=a,e.length++,a}function u(e,t,n){for(var r=t.next,a=0;a<n&&r!==e.tail;a++)r=r.next;t.next=r,r.prev=t,e.length-=a}return a.stringify=function e(t,n){if("string"==typeof t)return t;if(Array.isArray(t)){var a="";return t.forEach((function(t){a+=e(t,n)})),a}var o={type:t.type,content:e(t.content,n),tag:"span",classes:["token",t.type],attributes:{},language:n},i=t.alias;i&&(Array.isArray(i)?Array.prototype.push.apply(o.classes,i):o.classes.push(i)),r.hooks.run("wrap",o);var l="";for(var s in o.attributes)l+=" "+s+'="'+(o.attributes[s]||"").replace(/"/g,"&quot;")+'"';return"<"+o.tag+' class="'+o.classes.join(" ")+'"'+l+">"+o.content+"</"+o.tag+">"},r}(),a=r;r.default=r,a.languages.markup={comment:{pattern:/<!--(?:(?!<!--)[\s\S])*?-->/,greedy:!0},prolog:{pattern:/<\?[\s\S]+?\?>/,greedy:!0},doctype:{pattern:/<!DOCTYPE(?:[^>"'[\]]|"[^"]*"|'[^']*')+(?:\[(?:[^<"'\]]|"[^"]*"|'[^']*'|<(?!!--)|<!--(?:[^-]|-(?!->))*-->)*\]\s*)?>/i,greedy:!0,inside:{"internal-subset":{pattern:/(^[^\[]*\[)[\s\S]+(?=\]>$)/,lookbehind:!0,greedy:!0,inside:null},string:{pattern:/"[^"]*"|'[^']*'/,greedy:!0},punctuation:/^<!|>$|[[\]]/,"doctype-tag":/^DOCTYPE/i,name:/[^\s<>'"]+/}},cdata:{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,greedy:!0},tag:{pattern:/<\/?(?!\d)[^\s>\/=$<%]+(?:\s(?:\s*[^\s>\/=]+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))|(?=[\s/>])))+)?\s*\/?>/,greedy:!0,inside:{tag:{pattern:/^<\/?[^\s>\/]+/,inside:{punctuation:/^<\/?/,namespace:/^[^\s>\/:]+:/}},"special-attr":[],"attr-value":{pattern:/=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+)/,inside:{punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}},punctuation:/\/?>/,"attr-name":{pattern:/[^\s>\/]+/,inside:{namespace:/^[^\s>\/:]+:/}}}},entity:[{pattern:/&[\da-z]{1,8};/i,alias:"named-entity"},/&#x?[\da-f]{1,8};/i]},a.languages.markup.tag.inside["attr-value"].inside.entity=a.languages.markup.entity,a.languages.markup.doctype.inside["internal-subset"].inside=a.languages.markup,a.hooks.add("wrap",(function(e){"entity"===e.type&&(e.attributes.title=e.content.replace(/&amp;/,"&"))})),Object.defineProperty(a.languages.markup.tag,"addInlined",{value:function(e,t){var n={};n["language-"+t]={pattern:/(^<!\[CDATA\[)[\s\S]+?(?=\]\]>$)/i,lookbehind:!0,inside:a.languages[t]},n.cdata=/^<!\[CDATA\[|\]\]>$/i;var r={"included-cdata":{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,inside:n}};r["language-"+t]={pattern:/[\s\S]+/,inside:a.languages[t]};var o={};o[e]={pattern:RegExp(/(<__[^>]*>)(?:<!\[CDATA\[(?:[^\]]|\](?!\]>))*\]\]>|(?!<!\[CDATA\[)[\s\S])*?(?=<\/__>)/.source.replace(/__/g,(function(){return e})),"i"),lookbehind:!0,greedy:!0,inside:r},a.languages.insertBefore("markup","cdata",o)}}),Object.defineProperty(a.languages.markup.tag,"addAttribute",{value:function(e,t){a.languages.markup.tag.inside["special-attr"].push({pattern:RegExp(/(^|["'\s])/.source+"(?:"+e+")"+/\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))/.source,"i"),lookbehind:!0,inside:{"attr-name":/^[^\s=]+/,"attr-value":{pattern:/=[\s\S]+/,inside:{value:{pattern:/(^=\s*(["']|(?!["'])))\S[\s\S]*(?=\2$)/,lookbehind:!0,alias:[t,"language-"+t],inside:a.languages[t]},punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}}}})}}),a.languages.html=a.languages.markup,a.languages.mathml=a.languages.markup,a.languages.svg=a.languages.markup,a.languages.xml=a.languages.extend("markup",{}),a.languages.ssml=a.languages.xml,a.languages.atom=a.languages.xml,a.languages.rss=a.languages.xml,function(e){var t="\\b(?:BASH|BASHOPTS|BASH_ALIASES|BASH_ARGC|BASH_ARGV|BASH_CMDS|BASH_COMPLETION_COMPAT_DIR|BASH_LINENO|BASH_REMATCH|BASH_SOURCE|BASH_VERSINFO|BASH_VERSION|COLORTERM|COLUMNS|COMP_WORDBREAKS|DBUS_SESSION_BUS_ADDRESS|DEFAULTS_PATH|DESKTOP_SESSION|DIRSTACK|DISPLAY|EUID|GDMSESSION|GDM_LANG|GNOME_KEYRING_CONTROL|GNOME_KEYRING_PID|GPG_AGENT_INFO|GROUPS|HISTCONTROL|HISTFILE|HISTFILESIZE|HISTSIZE|HOME|HOSTNAME|HOSTTYPE|IFS|INSTANCE|JOB|LANG|LANGUAGE|LC_ADDRESS|LC_ALL|LC_IDENTIFICATION|LC_MEASUREMENT|LC_MONETARY|LC_NAME|LC_NUMERIC|LC_PAPER|LC_TELEPHONE|LC_TIME|LESSCLOSE|LESSOPEN|LINES|LOGNAME|LS_COLORS|MACHTYPE|MAILCHECK|MANDATORY_PATH|NO_AT_BRIDGE|OLDPWD|OPTERR|OPTIND|ORBIT_SOCKETDIR|OSTYPE|PAPERSIZE|PATH|PIPESTATUS|PPID|PS1|PS2|PS3|PS4|PWD|RANDOM|REPLY|SECONDS|SELINUX_INIT|SESSION|SESSIONTYPE|SESSION_MANAGER|SHELL|SHELLOPTS|SHLVL|SSH_AUTH_SOCK|TERM|UID|UPSTART_EVENTS|UPSTART_INSTANCE|UPSTART_JOB|UPSTART_SESSION|USER|WINDOWID|XAUTHORITY|XDG_CONFIG_DIRS|XDG_CURRENT_DESKTOP|XDG_DATA_DIRS|XDG_GREETER_DATA_DIR|XDG_MENU_PREFIX|XDG_RUNTIME_DIR|XDG_SEAT|XDG_SEAT_PATH|XDG_SESSION_DESKTOP|XDG_SESSION_ID|XDG_SESSION_PATH|XDG_SESSION_TYPE|XDG_VTNR|XMODIFIERS)\\b",n={pattern:/(^(["']?)\w+\2)[ \t]+\S.*/,lookbehind:!0,alias:"punctuation",inside:null},r={bash:n,environment:{pattern:RegExp("\\$"+t),alias:"constant"},variable:[{pattern:/\$?\(\([\s\S]+?\)\)/,greedy:!0,inside:{variable:[{pattern:/(^\$\(\([\s\S]+)\)\)/,lookbehind:!0},/^\$\(\(/],number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee]-?\d+)?/,operator:/--|\+\+|\*\*=?|<<=?|>>=?|&&|\|\||[=!+\-*/%<>^&|]=?|[?~:]/,punctuation:/\(\(?|\)\)?|,|;/}},{pattern:/\$\((?:\([^)]+\)|[^()])+\)|`[^`]+`/,greedy:!0,inside:{variable:/^\$\(|^`|\)$|`$/}},{pattern:/\$\{[^}]+\}/,greedy:!0,inside:{operator:/:[-=?+]?|[!\/]|##?|%%?|\^\^?|,,?/,punctuation:/[\[\]]/,environment:{pattern:RegExp("(\\{)"+t),lookbehind:!0,alias:"constant"}}},/\$(?:\w+|[#?*!@$])/],entity:/\\(?:[abceEfnrtv\\"]|O?[0-7]{1,3}|U[0-9a-fA-F]{8}|u[0-9a-fA-F]{4}|x[0-9a-fA-F]{1,2})/};e.languages.bash={shebang:{pattern:/^#!\s*\/.*/,alias:"important"},comment:{pattern:/(^|[^"{\\$])#.*/,lookbehind:!0},"function-name":[{pattern:/(\bfunction\s+)[\w-]+(?=(?:\s*\(?:\s*\))?\s*\{)/,lookbehind:!0,alias:"function"},{pattern:/\b[\w-]+(?=\s*\(\s*\)\s*\{)/,alias:"function"}],"for-or-select":{pattern:/(\b(?:for|select)\s+)\w+(?=\s+in\s)/,alias:"variable",lookbehind:!0},"assign-left":{pattern:/(^|[\s;|&]|[<>]\()\w+(?=\+?=)/,inside:{environment:{pattern:RegExp("(^|[\\s;|&]|[<>]\\()"+t),lookbehind:!0,alias:"constant"}},alias:"variable",lookbehind:!0},string:[{pattern:/((?:^|[^<])<<-?\s*)(\w+)\s[\s\S]*?(?:\r?\n|\r)\2/,lookbehind:!0,greedy:!0,inside:r},{pattern:/((?:^|[^<])<<-?\s*)(["'])(\w+)\2\s[\s\S]*?(?:\r?\n|\r)\3/,lookbehind:!0,greedy:!0,inside:{bash:n}},{pattern:/(^|[^\\](?:\\\\)*)"(?:\\[\s\S]|\$\([^)]+\)|\$(?!\()|`[^`]+`|[^"\\`$])*"/,lookbehind:!0,greedy:!0,inside:r},{pattern:/(^|[^$\\])'[^']*'/,lookbehind:!0,greedy:!0},{pattern:/\$'(?:[^'\\]|\\[\s\S])*'/,greedy:!0,inside:{entity:r.entity}}],environment:{pattern:RegExp("\\$?"+t),alias:"constant"},variable:r.variable,function:{pattern:/(^|[\s;|&]|[<>]\()(?:add|apropos|apt|apt-cache|apt-get|aptitude|aspell|automysqlbackup|awk|basename|bash|bc|bconsole|bg|bzip2|cal|cat|cfdisk|chgrp|chkconfig|chmod|chown|chroot|cksum|clear|cmp|column|comm|composer|cp|cron|crontab|csplit|curl|cut|date|dc|dd|ddrescue|debootstrap|df|diff|diff3|dig|dir|dircolors|dirname|dirs|dmesg|docker|docker-compose|du|egrep|eject|env|ethtool|expand|expect|expr|fdformat|fdisk|fg|fgrep|file|find|fmt|fold|format|free|fsck|ftp|fuser|gawk|git|gparted|grep|groupadd|groupdel|groupmod|groups|grub-mkconfig|gzip|halt|head|hg|history|host|hostname|htop|iconv|id|ifconfig|ifdown|ifup|import|install|ip|jobs|join|kill|killall|less|link|ln|locate|logname|logrotate|look|lpc|lpr|lprint|lprintd|lprintq|lprm|ls|lsof|lynx|make|man|mc|mdadm|mkconfig|mkdir|mke2fs|mkfifo|mkfs|mkisofs|mknod|mkswap|mmv|more|most|mount|mtools|mtr|mutt|mv|nano|nc|netstat|nice|nl|node|nohup|notify-send|npm|nslookup|op|open|parted|passwd|paste|pathchk|ping|pkill|pnpm|podman|podman-compose|popd|pr|printcap|printenv|ps|pushd|pv|quota|quotacheck|quotactl|ram|rar|rcp|reboot|remsync|rename|renice|rev|rm|rmdir|rpm|rsync|scp|screen|sdiff|sed|sendmail|seq|service|sftp|sh|shellcheck|shuf|shutdown|sleep|slocate|sort|split|ssh|stat|strace|su|sudo|sum|suspend|swapon|sync|tac|tail|tar|tee|time|timeout|top|touch|tr|traceroute|tsort|tty|umount|uname|unexpand|uniq|units|unrar|unshar|unzip|update-grub|uptime|useradd|userdel|usermod|users|uudecode|uuencode|v|vcpkg|vdir|vi|vim|virsh|vmstat|wait|watch|wc|wget|whereis|which|who|whoami|write|xargs|xdg-open|yarn|yes|zenity|zip|zsh|zypper)(?=$|[)\s;|&])/,lookbehind:!0},keyword:{pattern:/(^|[\s;|&]|[<>]\()(?:case|do|done|elif|else|esac|fi|for|function|if|in|select|then|until|while)(?=$|[)\s;|&])/,lookbehind:!0},builtin:{pattern:/(^|[\s;|&]|[<>]\()(?:\.|:|alias|bind|break|builtin|caller|cd|command|continue|declare|echo|enable|eval|exec|exit|export|getopts|hash|help|let|local|logout|mapfile|printf|pwd|read|readarray|readonly|return|set|shift|shopt|source|test|times|trap|type|typeset|ulimit|umask|unalias|unset)(?=$|[)\s;|&])/,lookbehind:!0,alias:"class-name"},boolean:{pattern:/(^|[\s;|&]|[<>]\()(?:false|true)(?=$|[)\s;|&])/,lookbehind:!0},"file-descriptor":{pattern:/\B&\d\b/,alias:"important"},operator:{pattern:/\d?<>|>\||\+=|=[=~]?|!=?|<<[<-]?|[&\d]?>>|\d[<>]&?|[<>][&=]?|&[>&]?|\|[&|]?/,inside:{"file-descriptor":{pattern:/^\d/,alias:"important"}}},punctuation:/\$?\(\(?|\)\)?|\.\.|[{}[\];\\]/,number:{pattern:/(^|\s)(?:[1-9]\d*|0)(?:[.,]\d+)?\b/,lookbehind:!0}},n.inside=e.languages.bash;for(var a=["comment","function-name","for-or-select","assign-left","string","environment","function","keyword","builtin","boolean","file-descriptor","operator","punctuation","number"],o=r.variable[1].inside,i=0;i<a.length;i++)o[a[i]]=e.languages.bash[a[i]];e.languages.shell=e.languages.bash}(a),a.languages.clike={comment:[{pattern:/(^|[^\\])\/\*[\s\S]*?(?:\*\/|$)/,lookbehind:!0,greedy:!0},{pattern:/(^|[^\\:])\/\/.*/,lookbehind:!0,greedy:!0}],string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|trait)\s+|\bcatch\s+\()[\w.\\]+/i,lookbehind:!0,inside:{punctuation:/[.\\]/}},keyword:/\b(?:break|catch|continue|do|else|finally|for|function|if|in|instanceof|new|null|return|throw|try|while)\b/,boolean:/\b(?:false|true)\b/,function:/\b\w+(?=\()/,number:/\b0x[\da-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?/i,operator:/[<>]=?|[!=]=?=?|--?|\+\+?|&&?|\|\|?|[?*/~^%]/,punctuation:/[{}[\];(),.:]/},a.languages.c=a.languages.extend("clike",{comment:{pattern:/\/\/(?:[^\r\n\\]|\\(?:\r\n?|\n|(?![\r\n])))*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},"class-name":{pattern:/(\b(?:enum|struct)\s+(?:__attribute__\s*\(\([\s\S]*?\)\)\s*)?)\w+|\b[a-z]\w*_t\b/,lookbehind:!0},keyword:/\b(?:_Alignas|_Alignof|_Atomic|_Bool|_Complex|_Generic|_Imaginary|_Noreturn|_Static_assert|_Thread_local|__attribute__|asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|inline|int|long|register|return|short|signed|sizeof|static|struct|switch|typedef|typeof|union|unsigned|void|volatile|while)\b/,function:/\b[a-z_]\w*(?=\s*\()/i,number:/(?:\b0x(?:[\da-f]+(?:\.[\da-f]*)?|\.[\da-f]+)(?:p[+-]?\d+)?|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?)[ful]{0,4}/i,operator:/>>=?|<<=?|->|([-+&|:])\1|[?:~]|[-+*/%&|^!=<>]=?/}),a.languages.insertBefore("c","string",{char:{pattern:/'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n]){0,32}'/,greedy:!0}}),a.languages.insertBefore("c","string",{macro:{pattern:/(^[\t ]*)#\s*[a-z](?:[^\r\n\\/]|\/(?!\*)|\/\*(?:[^*]|\*(?!\/))*\*\/|\\(?:\r\n|[\s\S]))*/im,lookbehind:!0,greedy:!0,alias:"property",inside:{string:[{pattern:/^(#\s*include\s*)<[^>]+>/,lookbehind:!0},a.languages.c.string],char:a.languages.c.char,comment:a.languages.c.comment,"macro-name":[{pattern:/(^#\s*define\s+)\w+\b(?!\()/i,lookbehind:!0},{pattern:/(^#\s*define\s+)\w+\b(?=\()/i,lookbehind:!0,alias:"function"}],directive:{pattern:/^(#\s*)[a-z]+/,lookbehind:!0,alias:"keyword"},"directive-hash":/^#/,punctuation:/##|\\(?=[\r\n])/,expression:{pattern:/\S[\s\S]*/,inside:a.languages.c}}}}),a.languages.insertBefore("c","function",{constant:/\b(?:EOF|NULL|SEEK_CUR|SEEK_END|SEEK_SET|__DATE__|__FILE__|__LINE__|__TIMESTAMP__|__TIME__|__func__|stderr|stdin|stdout)\b/}),delete a.languages.c.boolean,function(e){var t=/\b(?:alignas|alignof|asm|auto|bool|break|case|catch|char|char16_t|char32_t|char8_t|class|co_await|co_return|co_yield|compl|concept|const|const_cast|consteval|constexpr|constinit|continue|decltype|default|delete|do|double|dynamic_cast|else|enum|explicit|export|extern|final|float|for|friend|goto|if|import|inline|int|int16_t|int32_t|int64_t|int8_t|long|module|mutable|namespace|new|noexcept|nullptr|operator|override|private|protected|public|register|reinterpret_cast|requires|return|short|signed|sizeof|static|static_assert|static_cast|struct|switch|template|this|thread_local|throw|try|typedef|typeid|typename|uint16_t|uint32_t|uint64_t|uint8_t|union|unsigned|using|virtual|void|volatile|wchar_t|while)\b/,n=/\b(?!<keyword>)\w+(?:\s*\.\s*\w+)*\b/.source.replace(/<keyword>/g,(function(){return t.source}));e.languages.cpp=e.languages.extend("c",{"class-name":[{pattern:RegExp(/(\b(?:class|concept|enum|struct|typename)\s+)(?!<keyword>)\w+/.source.replace(/<keyword>/g,(function(){return t.source}))),lookbehind:!0},/\b[A-Z]\w*(?=\s*::\s*\w+\s*\()/,/\b[A-Z_]\w*(?=\s*::\s*~\w+\s*\()/i,/\b\w+(?=\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>\s*::\s*\w+\s*\()/],keyword:t,number:{pattern:/(?:\b0b[01']+|\b0x(?:[\da-f']+(?:\.[\da-f']*)?|\.[\da-f']+)(?:p[+-]?[\d']+)?|(?:\b[\d']+(?:\.[\d']*)?|\B\.[\d']+)(?:e[+-]?[\d']+)?)[ful]{0,4}/i,greedy:!0},operator:/>>=?|<<=?|->|--|\+\+|&&|\|\||[?:~]|<=>|[-+*/%&|^!=<>]=?|\b(?:and|and_eq|bitand|bitor|not|not_eq|or|or_eq|xor|xor_eq)\b/,boolean:/\b(?:false|true)\b/}),e.languages.insertBefore("cpp","string",{module:{pattern:RegExp(/(\b(?:import|module)\s+)/.source+"(?:"+/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|<[^<>\r\n]*>/.source+"|"+/<mod-name>(?:\s*:\s*<mod-name>)?|:\s*<mod-name>/.source.replace(/<mod-name>/g,(function(){return n}))+")"),lookbehind:!0,greedy:!0,inside:{string:/^[<"][\s\S]+/,operator:/:/,punctuation:/\./}},"raw-string":{pattern:/R"([^()\\ ]{0,16})\([\s\S]*?\)\1"/,alias:"string",greedy:!0}}),e.languages.insertBefore("cpp","keyword",{"generic-function":{pattern:/\b(?!operator\b)[a-z_]\w*\s*<(?:[^<>]|<[^<>]*>)*>(?=\s*\()/i,inside:{function:/^\w+/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:e.languages.cpp}}}}),e.languages.insertBefore("cpp","operator",{"double-colon":{pattern:/::/,alias:"punctuation"}}),e.languages.insertBefore("cpp","class-name",{"base-clause":{pattern:/(\b(?:class|struct)\s+\w+\s*:\s*)[^;{}"'\s]+(?:\s+[^;{}"'\s]+)*(?=\s*[;{])/,lookbehind:!0,greedy:!0,inside:e.languages.extend("cpp",{})}}),e.languages.insertBefore("inside","double-colon",{"class-name":/\b[a-z_]\w*\b(?!\s*::)/i},e.languages.cpp["base-clause"])}(a),function(e){var t=/(?:"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n])*')/;e.languages.css={comment:/\/\*[\s\S]*?\*\//,atrule:{pattern:/@[\w-](?:[^;{\s]|\s+(?![\s{]))*(?:;|(?=\s*\{))/,inside:{rule:/^@[\w-]+/,"selector-function-argument":{pattern:/(\bselector\s*\(\s*(?![\s)]))(?:[^()\s]|\s+(?![\s)])|\((?:[^()]|\([^()]*\))*\))+(?=\s*\))/,lookbehind:!0,alias:"selector"},keyword:{pattern:/(^|[^\w-])(?:and|not|only|or)(?![\w-])/,lookbehind:!0}}},url:{pattern:RegExp("\\burl\\((?:"+t.source+"|"+/(?:[^\\\r\n()"']|\\[\s\S])*/.source+")\\)","i"),greedy:!0,inside:{function:/^url/i,punctuation:/^\(|\)$/,string:{pattern:RegExp("^"+t.source+"$"),alias:"url"}}},selector:{pattern:RegExp("(^|[{}\\s])[^{}\\s](?:[^{};\"'\\s]|\\s+(?![\\s{])|"+t.source+")*(?=\\s*\\{)"),lookbehind:!0},string:{pattern:t,greedy:!0},property:{pattern:/(^|[^-\w\xA0-\uFFFF])(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*(?=\s*:)/i,lookbehind:!0},important:/!important\b/i,function:{pattern:/(^|[^-a-z0-9])[-a-z0-9]+(?=\()/i,lookbehind:!0},punctuation:/[(){};:,]/},e.languages.css.atrule.inside.rest=e.languages.css;var n=e.languages.markup;n&&(n.tag.addInlined("style","css"),n.tag.addAttribute("style","css"))}(a),function(e){var t,n=/("|')(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/;e.languages.css.selector={pattern:e.languages.css.selector.pattern,lookbehind:!0,inside:t={"pseudo-element":/:(?:after|before|first-letter|first-line|selection)|::[-\w]+/,"pseudo-class":/:[-\w]+/,class:/\.[-\w]+/,id:/#[-\w]+/,attribute:{pattern:RegExp("\\[(?:[^[\\]\"']|"+n.source+")*\\]"),greedy:!0,inside:{punctuation:/^\[|\]$/,"case-sensitivity":{pattern:/(\s)[si]$/i,lookbehind:!0,alias:"keyword"},namespace:{pattern:/^(\s*)(?:(?!\s)[-*\w\xA0-\uFFFF])*\|(?!=)/,lookbehind:!0,inside:{punctuation:/\|$/}},"attr-name":{pattern:/^(\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+/,lookbehind:!0},"attr-value":[n,{pattern:/(=\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+(?=\s*$)/,lookbehind:!0}],operator:/[|~*^$]?=/}},"n-th":[{pattern:/(\(\s*)[+-]?\d*[\dn](?:\s*[+-]\s*\d+)?(?=\s*\))/,lookbehind:!0,inside:{number:/[\dn]+/,operator:/[+-]/}},{pattern:/(\(\s*)(?:even|odd)(?=\s*\))/i,lookbehind:!0}],combinator:/>|\+|~|\|\|/,punctuation:/[(),]/}},e.languages.css.atrule.inside["selector-function-argument"].inside=t,e.languages.insertBefore("css","property",{variable:{pattern:/(^|[^-\w\xA0-\uFFFF])--(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*/i,lookbehind:!0}});var r={pattern:/(\b\d+)(?:%|[a-z]+(?![\w-]))/,lookbehind:!0},a={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0};e.languages.insertBefore("css","function",{operator:{pattern:/(\s)[+\-*\/](?=\s)/,lookbehind:!0},hexcode:{pattern:/\B#[\da-f]{3,8}\b/i,alias:"color"},color:[{pattern:/(^|[^\w-])(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)(?![\w-])/i,lookbehind:!0},{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:r,number:a,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:r,number:a})}(a),a.languages.javascript=a.languages.extend("clike",{"class-name":[a.languages.clike["class-name"],{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$A-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\.(?:constructor|prototype))/,lookbehind:!0}],keyword:[{pattern:/((?:^|\})\s*)catch\b/,lookbehind:!0},{pattern:/(^|[^.]|\.\.\.\s*)\b(?:as|assert(?=\s*\{)|async(?=\s*(?:function\b|\(|[$\w\xA0-\uFFFF]|$))|await|break|case|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally(?=\s*(?:\{|$))|for|from(?=\s*(?:['"]|$))|function|(?:get|set)(?=\s*(?:[#\[$\w\xA0-\uFFFF]|$))|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)\b/,lookbehind:!0}],function:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*(?:\.\s*(?:apply|bind|call)\s*)?\()/,number:{pattern:RegExp(/(^|[^\w$])/.source+"(?:"+/NaN|Infinity/.source+"|"+/0[bB][01]+(?:_[01]+)*n?/.source+"|"+/0[oO][0-7]+(?:_[0-7]+)*n?/.source+"|"+/0[xX][\dA-Fa-f]+(?:_[\dA-Fa-f]+)*n?/.source+"|"+/\d+(?:_\d+)*n/.source+"|"+/(?:\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\.\d+(?:_\d+)*)(?:[Ee][+-]?\d+(?:_\d+)*)?/.source+")"+/(?![\w$])/.source),lookbehind:!0},operator:/--|\+\+|\*\*=?|=>|&&=?|\|\|=?|[!=]==|<<=?|>>>?=?|[-+*/%&|^!=<>]=?|\.{3}|\?\?=?|\?\.?|[~:]/}),a.languages.javascript["class-name"][0].pattern=/(\b(?:class|extends|implements|instanceof|interface|new)\s+)[\w.\\]+/,a.languages.insertBefore("javascript","keyword",{regex:{pattern:/((?:^|[^$\w\xA0-\uFFFF."'\])\s]|\b(?:return|yield))\s*)\/(?:\[(?:[^\]\\\r\n]|\\.)*\]|\\.|[^/\\\[\r\n])+\/[dgimyus]{0,7}(?=(?:\s|\/\*(?:[^*]|\*(?!\/))*\*\/)*(?:$|[\r\n,.;:})\]]|\/\/))/,lookbehind:!0,greedy:!0,inside:{"regex-source":{pattern:/^(\/)[\s\S]+(?=\/[a-z]*$)/,lookbehind:!0,alias:"language-regex",inside:a.languages.regex},"regex-delimiter":/^\/|\/$/,"regex-flags":/^[a-z]+$/}},"function-variable":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*[=:]\s*(?:async\s*)?(?:\bfunction\b|(?:\((?:[^()]|\([^()]*\))*\)|(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)\s*=>))/,alias:"function"},parameter:[{pattern:/(function(?:\s+(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)?\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\))/,lookbehind:!0,inside:a.languages.javascript},{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$a-z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*=>)/i,lookbehind:!0,inside:a.languages.javascript},{pattern:/(\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*=>)/,lookbehind:!0,inside:a.languages.javascript},{pattern:/((?:\b|\s|^)(?!(?:as|async|await|break|case|catch|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally|for|from|function|get|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|set|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)(?![$\w\xA0-\uFFFF]))(?:(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*)\(\s*|\]\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*\{)/,lookbehind:!0,inside:a.languages.javascript}],constant:/\b[A-Z](?:[A-Z_]|\dx?)*\b/}),a.languages.insertBefore("javascript","string",{hashbang:{pattern:/^#!.*/,greedy:!0,alias:"comment"},"template-string":{pattern:/`(?:\\[\s\S]|\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}|(?!\$\{)[^\\`])*`/,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},interpolation:{pattern:/((?:^|[^\\])(?:\\{2})*)\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}/,lookbehind:!0,inside:{"interpolation-punctuation":{pattern:/^\$\{|\}$/,alias:"punctuation"},rest:a.languages.javascript}},string:/[\s\S]+/}},"string-property":{pattern:/((?:^|[,{])[ \t]*)(["'])(?:\\(?:\r\n|[\s\S])|(?!\2)[^\\\r\n])*\2(?=\s*:)/m,lookbehind:!0,greedy:!0,alias:"property"}}),a.languages.insertBefore("javascript","operator",{"literal-property":{pattern:/((?:^|[,{])[ \t]*)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*:)/m,lookbehind:!0,alias:"property"}}),a.languages.markup&&(a.languages.markup.tag.addInlined("script","javascript"),a.languages.markup.tag.addAttribute(/on(?:abort|blur|change|click|composition(?:end|start|update)|dblclick|error|focus(?:in|out)?|key(?:down|up)|load|mouse(?:down|enter|leave|move|out|over|up)|reset|resize|scroll|select|slotchange|submit|unload|wheel)/.source,"javascript")),a.languages.js=a.languages.javascript,function(e){var t=/#(?!\{).+/,n={pattern:/#\{[^}]+\}/,alias:"variable"};e.languages.coffeescript=e.languages.extend("javascript",{comment:t,string:[{pattern:/'(?:\\[\s\S]|[^\\'])*'/,greedy:!0},{pattern:/"(?:\\[\s\S]|[^\\"])*"/,greedy:!0,inside:{interpolation:n}}],keyword:/\b(?:and|break|by|catch|class|continue|debugger|delete|do|each|else|extend|extends|false|finally|for|if|in|instanceof|is|isnt|let|loop|namespace|new|no|not|null|of|off|on|or|own|return|super|switch|then|this|throw|true|try|typeof|undefined|unless|until|when|while|window|with|yes|yield)\b/,"class-member":{pattern:/@(?!\d)\w+/,alias:"variable"}}),e.languages.insertBefore("coffeescript","comment",{"multiline-comment":{pattern:/###[\s\S]+?###/,alias:"comment"},"block-regex":{pattern:/\/{3}[\s\S]*?\/{3}/,alias:"regex",inside:{comment:t,interpolation:n}}}),e.languages.insertBefore("coffeescript","string",{"inline-javascript":{pattern:/`(?:\\[\s\S]|[^\\`])*`/,inside:{delimiter:{pattern:/^`|`$/,alias:"punctuation"},script:{pattern:/[\s\S]+/,alias:"language-javascript",inside:e.languages.javascript}}},"multiline-string":[{pattern:/'''[\s\S]*?'''/,greedy:!0,alias:"string"},{pattern:/"""[\s\S]*?"""/,greedy:!0,alias:"string",inside:{interpolation:n}}]}),e.languages.insertBefore("coffeescript","keyword",{property:/(?!\d)\w+(?=\s*:(?!:))/}),delete e.languages.coffeescript["template-string"],e.languages.coffee=e.languages.coffeescript}(a),function(e){var t=/[*&][^\s[\]{},]+/,n=/!(?:<[\w\-%#;/?:@&=+$,.!~*'()[\]]+>|(?:[a-zA-Z\d-]*!)?[\w\-%#;/?:@&=+$.~*'()]+)?/,r="(?:"+n.source+"(?:[ \t]+"+t.source+")?|"+t.source+"(?:[ \t]+"+n.source+")?)",a=/(?:[^\s\x00-\x08\x0e-\x1f!"#%&'*,\-:>?@[\]`{|}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]|[?:-]<PLAIN>)(?:[ \t]*(?:(?![#:])<PLAIN>|:<PLAIN>))*/.source.replace(/<PLAIN>/g,(function(){return/[^\s\x00-\x08\x0e-\x1f,[\]{}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]/.source})),o=/"(?:[^"\\\r\n]|\\.)*"|'(?:[^'\\\r\n]|\\.)*'/.source;function i(e,t){t=(t||"").replace(/m/g,"")+"m";var n=/([:\-,[{]\s*(?:\s<<prop>>[ \t]+)?)(?:<<value>>)(?=[ \t]*(?:$|,|\]|\}|(?:[\r\n]\s*)?#))/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<value>>/g,(function(){return e}));return RegExp(n,t)}e.languages.yaml={scalar:{pattern:RegExp(/([\-:]\s*(?:\s<<prop>>[ \t]+)?[|>])[ \t]*(?:((?:\r?\n|\r)[ \t]+)\S[^\r\n]*(?:\2[^\r\n]+)*)/.source.replace(/<<prop>>/g,(function(){return r}))),lookbehind:!0,alias:"string"},comment:/#.*/,key:{pattern:RegExp(/((?:^|[:\-,[{\r\n?])[ \t]*(?:<<prop>>[ \t]+)?)<<key>>(?=\s*:\s)/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<key>>/g,(function(){return"(?:"+a+"|"+o+")"}))),lookbehind:!0,greedy:!0,alias:"atrule"},directive:{pattern:/(^[ \t]*)%.+/m,lookbehind:!0,alias:"important"},datetime:{pattern:i(/\d{4}-\d\d?-\d\d?(?:[tT]|[ \t]+)\d\d?:\d{2}:\d{2}(?:\.\d*)?(?:[ \t]*(?:Z|[-+]\d\d?(?::\d{2})?))?|\d{4}-\d{2}-\d{2}|\d\d?:\d{2}(?::\d{2}(?:\.\d*)?)?/.source),lookbehind:!0,alias:"number"},boolean:{pattern:i(/false|true/.source,"i"),lookbehind:!0,alias:"important"},null:{pattern:i(/null|~/.source,"i"),lookbehind:!0,alias:"important"},string:{pattern:i(o),lookbehind:!0,greedy:!0},number:{pattern:i(/[+-]?(?:0x[\da-f]+|0o[0-7]+|(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?|\.inf|\.nan)/.source,"i"),lookbehind:!0},tag:n,important:t,punctuation:/---|[:[\]{}\-,|>?]|\.\.\./},e.languages.yml=e.languages.yaml}(a),function(e){var t=/(?:\\.|[^\\\n\r]|(?:\n|\r\n?)(?![\r\n]))/.source;function n(e){return e=e.replace(/<inner>/g,(function(){return t})),RegExp(/((?:^|[^\\])(?:\\{2})*)/.source+"(?:"+e+")")}var r=/(?:\\.|``(?:[^`\r\n]|`(?!`))+``|`[^`\r\n]+`|[^\\|\r\n`])+/.source,a=/\|?__(?:\|__)+\|?(?:(?:\n|\r\n?)|(?![\s\S]))/.source.replace(/__/g,(function(){return r})),o=/\|?[ \t]*:?-{3,}:?[ \t]*(?:\|[ \t]*:?-{3,}:?[ \t]*)+\|?(?:\n|\r\n?)/.source;e.languages.markdown=e.languages.extend("markup",{}),e.languages.insertBefore("markdown","prolog",{"front-matter-block":{pattern:/(^(?:\s*[\r\n])?)---(?!.)[\s\S]*?[\r\n]---(?!.)/,lookbehind:!0,greedy:!0,inside:{punctuation:/^---|---$/,"front-matter":{pattern:/\S+(?:\s+\S+)*/,alias:["yaml","language-yaml"],inside:e.languages.yaml}}},blockquote:{pattern:/^>(?:[\t ]*>)*/m,alias:"punctuation"},table:{pattern:RegExp("^"+a+o+"(?:"+a+")*","m"),inside:{"table-data-rows":{pattern:RegExp("^("+a+o+")(?:"+a+")*$"),lookbehind:!0,inside:{"table-data":{pattern:RegExp(r),inside:e.languages.markdown},punctuation:/\|/}},"table-line":{pattern:RegExp("^("+a+")"+o+"$"),lookbehind:!0,inside:{punctuation:/\||:?-{3,}:?/}},"table-header-row":{pattern:RegExp("^"+a+"$"),inside:{"table-header":{pattern:RegExp(r),alias:"important",inside:e.languages.markdown},punctuation:/\|/}}}},code:[{pattern:/((?:^|\n)[ \t]*\n|(?:^|\r\n?)[ \t]*\r\n?)(?: {4}|\t).+(?:(?:\n|\r\n?)(?: {4}|\t).+)*/,lookbehind:!0,alias:"keyword"},{pattern:/^```[\s\S]*?^```$/m,greedy:!0,inside:{"code-block":{pattern:/^(```.*(?:\n|\r\n?))[\s\S]+?(?=(?:\n|\r\n?)^```$)/m,lookbehind:!0},"code-language":{pattern:/^(```).+/,lookbehind:!0},punctuation:/```/}}],title:[{pattern:/\S.*(?:\n|\r\n?)(?:==+|--+)(?=[ \t]*$)/m,alias:"important",inside:{punctuation:/==+$|--+$/}},{pattern:/(^\s*)#.+/m,lookbehind:!0,alias:"important",inside:{punctuation:/^#+|#+$/}}],hr:{pattern:/(^\s*)([*-])(?:[\t ]*\2){2,}(?=\s*$)/m,lookbehind:!0,alias:"punctuation"},list:{pattern:/(^\s*)(?:[*+-]|\d+\.)(?=[\t ].)/m,lookbehind:!0,alias:"punctuation"},"url-reference":{pattern:/!?\[[^\]]+\]:[\t ]+(?:\S+|<(?:\\.|[^>\\])+>)(?:[\t ]+(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\)))?/,inside:{variable:{pattern:/^(!?\[)[^\]]+/,lookbehind:!0},string:/(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\))$/,punctuation:/^[\[\]!:]|[<>]/},alias:"url"},bold:{pattern:n(/\b__(?:(?!_)<inner>|_(?:(?!_)<inner>)+_)+__\b|\*\*(?:(?!\*)<inner>|\*(?:(?!\*)<inner>)+\*)+\*\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^..)[\s\S]+(?=..$)/,lookbehind:!0,inside:{}},punctuation:/\*\*|__/}},italic:{pattern:n(/\b_(?:(?!_)<inner>|__(?:(?!_)<inner>)+__)+_\b|\*(?:(?!\*)<inner>|\*\*(?:(?!\*)<inner>)+\*\*)+\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^.)[\s\S]+(?=.$)/,lookbehind:!0,inside:{}},punctuation:/[*_]/}},strike:{pattern:n(/(~~?)(?:(?!~)<inner>)+\2/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^~~?)[\s\S]+(?=\1$)/,lookbehind:!0,inside:{}},punctuation:/~~?/}},"code-snippet":{pattern:/(^|[^\\`])(?:``[^`\r\n]+(?:`[^`\r\n]+)*``(?!`)|`[^`\r\n]+`(?!`))/,lookbehind:!0,greedy:!0,alias:["code","keyword"]},url:{pattern:n(/!?\[(?:(?!\])<inner>)+\](?:\([^\s)]+(?:[\t ]+"(?:\\.|[^"\\])*")?\)|[ \t]?\[(?:(?!\])<inner>)+\])/.source),lookbehind:!0,greedy:!0,inside:{operator:/^!/,content:{pattern:/(^\[)[^\]]+(?=\])/,lookbehind:!0,inside:{}},variable:{pattern:/(^\][ \t]?\[)[^\]]+(?=\]$)/,lookbehind:!0},url:{pattern:/(^\]\()[^\s)]+/,lookbehind:!0},string:{pattern:/(^[ \t]+)"(?:\\.|[^"\\])*"(?=\)$)/,lookbehind:!0}}}}),["url","bold","italic","strike"].forEach((function(t){["url","bold","italic","strike","code-snippet"].forEach((function(n){t!==n&&(e.languages.markdown[t].inside.content.inside[n]=e.languages.markdown[n])}))})),e.hooks.add("after-tokenize",(function(e){"markdown"!==e.language&&"md"!==e.language||function e(t){if(t&&"string"!=typeof t)for(var n=0,r=t.length;n<r;n++){var a=t[n];if("code"===a.type){var o=a.content[1],i=a.content[3];if(o&&i&&"code-language"===o.type&&"code-block"===i.type&&"string"==typeof o.content){var l=o.content.replace(/\b#/g,"sharp").replace(/\b\+\+/g,"pp"),s="language-"+(l=(/[a-z][\w-]*/i.exec(l)||[""])[0].toLowerCase());i.alias?"string"==typeof i.alias?i.alias=[i.alias,s]:i.alias.push(s):i.alias=[s]}}else e(a.content)}}(e.tokens)})),e.hooks.add("wrap",(function(t){if("code-block"===t.type){for(var n="",r=0,a=t.classes.length;r<a;r++){var o=t.classes[r],u=/language-(.+)/.exec(o);if(u){n=u[1];break}}var c,d=e.languages[n];if(d)t.content=e.highlight((c=t.content,c.replace(i,"").replace(/&(\w{1,8}|#x?[\da-f]{1,8});/gi,(function(e,t){var n;if("#"===(t=t.toLowerCase())[0])return n="x"===t[1]?parseInt(t.slice(2),16):Number(t.slice(1)),s(n);var r=l[t];return r||e}))),d,n);else if(n&&"none"!==n&&e.plugins.autoloader){var f="md-"+(new Date).valueOf()+"-"+Math.floor(1e16*Math.random());t.attributes.id=f,e.plugins.autoloader.loadLanguages(n,(function(){var t=document.getElementById(f);t&&(t.innerHTML=e.highlight(t.textContent,e.languages[n],n))}))}}}));var i=RegExp(e.languages.markup.tag.pattern.source,"gi"),l={amp:"&",lt:"<",gt:">",quot:'"'},s=String.fromCodePoint||String.fromCharCode;e.languages.md=e.languages.markdown}(a),a.languages.graphql={comment:/#.*/,description:{pattern:/(?:"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*")(?=\s*[a-z_])/i,greedy:!0,alias:"string",inside:{"language-markdown":{pattern:/(^"(?:"")?)(?!\1)[\s\S]+(?=\1$)/,lookbehind:!0,inside:a.languages.markdown}}},string:{pattern:/"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*"/,greedy:!0},number:/(?:\B-|\b)\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,boolean:/\b(?:false|true)\b/,variable:/\$[a-z_]\w*/i,directive:{pattern:/@[a-z_]\w*/i,alias:"function"},"attr-name":{pattern:/\b[a-z_]\w*(?=\s*(?:\((?:[^()"]|"(?:\\.|[^\\"\r\n])*")*\))?:)/i,greedy:!0},"atom-input":{pattern:/\b[A-Z]\w*Input\b/,alias:"class-name"},scalar:/\b(?:Boolean|Float|ID|Int|String)\b/,constant:/\b[A-Z][A-Z_\d]*\b/,"class-name":{pattern:/(\b(?:enum|implements|interface|on|scalar|type|union)\s+|&\s*|:\s*|\[)[A-Z_]\w*/,lookbehind:!0},fragment:{pattern:/(\bfragment\s+|\.{3}\s*(?!on\b))[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-mutation":{pattern:/(\bmutation\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-query":{pattern:/(\bquery\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},keyword:/\b(?:directive|enum|extend|fragment|implements|input|interface|mutation|on|query|repeatable|scalar|schema|subscription|type|union)\b/,operator:/[!=|&]|\.{3}/,"property-query":/\w+(?=\s*\()/,object:/\w+(?=\s*\{)/,punctuation:/[!(){}\[\]:=,]/,property:/\w+/},a.hooks.add("after-tokenize",(function(e){if("graphql"===e.language)for(var t=e.tokens.filter((function(e){return"string"!=typeof e&&"comment"!==e.type&&"scalar"!==e.type})),n=0;n<t.length;){var r=t[n++];if("keyword"===r.type&&"mutation"===r.content){var a=[];if(d(["definition-mutation","punctuation"])&&"("===c(1).content){n+=2;var o=f(/^\($/,/^\)$/);if(-1===o)continue;for(;n<o;n++){var i=c(0);"variable"===i.type&&(p(i,"variable-input"),a.push(i.content))}n=o+1}if(d(["punctuation","property-query"])&&"{"===c(0).content&&(n++,p(c(0),"property-mutation"),a.length>0)){var l=f(/^\{$/,/^\}$/);if(-1===l)continue;for(var s=n;s<l;s++){var u=t[s];"variable"===u.type&&a.indexOf(u.content)>=0&&p(u,"variable-input")}}}}function c(e){return t[n+e]}function d(e,t){t=t||0;for(var n=0;n<e.length;n++){var r=c(n+t);if(!r||r.type!==e[n])return!1}return!0}function f(e,r){for(var a=1,o=n;o<t.length;o++){var i=t[o],l=i.content;if("punctuation"===i.type&&"string"==typeof l)if(e.test(l))a++;else if(r.test(l)&&0===--a)return o}return-1}function p(e,t){var n=e.alias;n?Array.isArray(n)||(e.alias=n=[n]):e.alias=n=[],n.push(t)}})),a.languages.sql={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|(?:--|\/\/|#).*)/,lookbehind:!0},variable:[{pattern:/@(["'`])(?:\\[\s\S]|(?!\1)[^\\])+\1/,greedy:!0},/@[\w.$]+/],string:{pattern:/(^|[^@\\])("|')(?:\\[\s\S]|(?!\2)[^\\]|\2\2)*\2/,greedy:!0,lookbehind:!0},identifier:{pattern:/(^|[^@\\])`(?:\\[\s\S]|[^`\\]|``)*`/,greedy:!0,lookbehind:!0,inside:{punctuation:/^`|`$/}},function:/\b(?:AVG|COUNT|FIRST|FORMAT|LAST|LCASE|LEN|MAX|MID|MIN|MOD|NOW|ROUND|SUM|UCASE)(?=\s*\()/i,keyword:/\b(?:ACTION|ADD|AFTER|ALGORITHM|ALL|ALTER|ANALYZE|ANY|APPLY|AS|ASC|AUTHORIZATION|AUTO_INCREMENT|BACKUP|BDB|BEGIN|BERKELEYDB|BIGINT|BINARY|BIT|BLOB|BOOL|BOOLEAN|BREAK|BROWSE|BTREE|BULK|BY|CALL|CASCADED?|CASE|CHAIN|CHAR(?:ACTER|SET)?|CHECK(?:POINT)?|CLOSE|CLUSTERED|COALESCE|COLLATE|COLUMNS?|COMMENT|COMMIT(?:TED)?|COMPUTE|CONNECT|CONSISTENT|CONSTRAINT|CONTAINS(?:TABLE)?|CONTINUE|CONVERT|CREATE|CROSS|CURRENT(?:_DATE|_TIME|_TIMESTAMP|_USER)?|CURSOR|CYCLE|DATA(?:BASES?)?|DATE(?:TIME)?|DAY|DBCC|DEALLOCATE|DEC|DECIMAL|DECLARE|DEFAULT|DEFINER|DELAYED|DELETE|DELIMITERS?|DENY|DESC|DESCRIBE|DETERMINISTIC|DISABLE|DISCARD|DISK|DISTINCT|DISTINCTROW|DISTRIBUTED|DO|DOUBLE|DROP|DUMMY|DUMP(?:FILE)?|DUPLICATE|ELSE(?:IF)?|ENABLE|ENCLOSED|END|ENGINE|ENUM|ERRLVL|ERRORS|ESCAPED?|EXCEPT|EXEC(?:UTE)?|EXISTS|EXIT|EXPLAIN|EXTENDED|FETCH|FIELDS|FILE|FILLFACTOR|FIRST|FIXED|FLOAT|FOLLOWING|FOR(?: EACH ROW)?|FORCE|FOREIGN|FREETEXT(?:TABLE)?|FROM|FULL|FUNCTION|GEOMETRY(?:COLLECTION)?|GLOBAL|GOTO|GRANT|GROUP|HANDLER|HASH|HAVING|HOLDLOCK|HOUR|IDENTITY(?:COL|_INSERT)?|IF|IGNORE|IMPORT|INDEX|INFILE|INNER|INNODB|INOUT|INSERT|INT|INTEGER|INTERSECT|INTERVAL|INTO|INVOKER|ISOLATION|ITERATE|JOIN|KEYS?|KILL|LANGUAGE|LAST|LEAVE|LEFT|LEVEL|LIMIT|LINENO|LINES|LINESTRING|LOAD|LOCAL|LOCK|LONG(?:BLOB|TEXT)|LOOP|MATCH(?:ED)?|MEDIUM(?:BLOB|INT|TEXT)|MERGE|MIDDLEINT|MINUTE|MODE|MODIFIES|MODIFY|MONTH|MULTI(?:LINESTRING|POINT|POLYGON)|NATIONAL|NATURAL|NCHAR|NEXT|NO|NONCLUSTERED|NULLIF|NUMERIC|OFF?|OFFSETS?|ON|OPEN(?:DATASOURCE|QUERY|ROWSET)?|OPTIMIZE|OPTION(?:ALLY)?|ORDER|OUT(?:ER|FILE)?|OVER|PARTIAL|PARTITION|PERCENT|PIVOT|PLAN|POINT|POLYGON|PRECEDING|PRECISION|PREPARE|PREV|PRIMARY|PRINT|PRIVILEGES|PROC(?:EDURE)?|PUBLIC|PURGE|QUICK|RAISERROR|READS?|REAL|RECONFIGURE|REFERENCES|RELEASE|RENAME|REPEAT(?:ABLE)?|REPLACE|REPLICATION|REQUIRE|RESIGNAL|RESTORE|RESTRICT|RETURN(?:ING|S)?|REVOKE|RIGHT|ROLLBACK|ROUTINE|ROW(?:COUNT|GUIDCOL|S)?|RTREE|RULE|SAVE(?:POINT)?|SCHEMA|SECOND|SELECT|SERIAL(?:IZABLE)?|SESSION(?:_USER)?|SET(?:USER)?|SHARE|SHOW|SHUTDOWN|SIMPLE|SMALLINT|SNAPSHOT|SOME|SONAME|SQL|START(?:ING)?|STATISTICS|STATUS|STRIPED|SYSTEM_USER|TABLES?|TABLESPACE|TEMP(?:ORARY|TABLE)?|TERMINATED|TEXT(?:SIZE)?|THEN|TIME(?:STAMP)?|TINY(?:BLOB|INT|TEXT)|TOP?|TRAN(?:SACTIONS?)?|TRIGGER|TRUNCATE|TSEQUAL|TYPES?|UNBOUNDED|UNCOMMITTED|UNDEFINED|UNION|UNIQUE|UNLOCK|UNPIVOT|UNSIGNED|UPDATE(?:TEXT)?|USAGE|USE|USER|USING|VALUES?|VAR(?:BINARY|CHAR|CHARACTER|YING)|VIEW|WAITFOR|WARNINGS|WHEN|WHERE|WHILE|WITH(?: ROLLUP|IN)?|WORK|WRITE(?:TEXT)?|YEAR)\b/i,boolean:/\b(?:FALSE|NULL|TRUE)\b/i,number:/\b0x[\da-f]+\b|\b\d+(?:\.\d*)?|\B\.\d+\b/i,operator:/[-+*\/=%^~]|&&?|\|\|?|!=?|<(?:=>?|<|>)?|>[>=]?|\b(?:AND|BETWEEN|DIV|ILIKE|IN|IS|LIKE|NOT|OR|REGEXP|RLIKE|SOUNDS LIKE|XOR)\b/i,punctuation:/[;[\]()`,.]/},function(e){var t=e.languages.javascript["template-string"],n=t.pattern.source,r=t.inside.interpolation,a=r.inside["interpolation-punctuation"],o=r.pattern.source;function i(t,r){if(e.languages[t])return{pattern:RegExp("((?:"+r+")\\s*)"+n),lookbehind:!0,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},"embedded-code":{pattern:/[\s\S]+/,alias:t}}}}function l(e,t){return"___"+t.toUpperCase()+"_"+e+"___"}function s(t,n,r){var a={code:t,grammar:n,language:r};return e.hooks.run("before-tokenize",a),a.tokens=e.tokenize(a.code,a.grammar),e.hooks.run("after-tokenize",a),a.tokens}function u(t){var n={};n["interpolation-punctuation"]=a;var o=e.tokenize(t,n);if(3===o.length){var i=[1,1];i.push.apply(i,s(o[1],e.languages.javascript,"javascript")),o.splice.apply(o,i)}return new e.Token("interpolation",o,r.alias,t)}function c(t,n,r){var a=e.tokenize(t,{interpolation:{pattern:RegExp(o),lookbehind:!0}}),i=0,c={},d=s(a.map((function(e){if("string"==typeof e)return e;for(var n,a=e.content;-1!==t.indexOf(n=l(i++,r)););return c[n]=a,n})).join(""),n,r),f=Object.keys(c);return i=0,function e(t){for(var n=0;n<t.length;n++){if(i>=f.length)return;var r=t[n];if("string"==typeof r||"string"==typeof r.content){var a=f[i],o="string"==typeof r?r:r.content,l=o.indexOf(a);if(-1!==l){++i;var s=o.substring(0,l),d=u(c[a]),p=o.substring(l+a.length),m=[];if(s&&m.push(s),m.push(d),p){var h=[p];e(h),m.push.apply(m,h)}"string"==typeof r?(t.splice.apply(t,[n,1].concat(m)),n+=m.length-1):r.content=m}}else{var g=r.content;Array.isArray(g)?e(g):e([g])}}}(d),new e.Token(r,d,"language-"+r,t)}e.languages.javascript["template-string"]=[i("css",/\b(?:styled(?:\([^)]*\))?(?:\s*\.\s*\w+(?:\([^)]*\))*)*|css(?:\s*\.\s*(?:global|resolve))?|createGlobalStyle|keyframes)/.source),i("html",/\bhtml|\.\s*(?:inner|outer)HTML\s*\+?=/.source),i("svg",/\bsvg/.source),i("markdown",/\b(?:markdown|md)/.source),i("graphql",/\b(?:gql|graphql(?:\s*\.\s*experimental)?)/.source),i("sql",/\bsql/.source),t].filter(Boolean);var d={javascript:!0,js:!0,typescript:!0,ts:!0,jsx:!0,tsx:!0};function f(e){return"string"==typeof e?e:Array.isArray(e)?e.map(f).join(""):f(e.content)}e.hooks.add("after-tokenize",(function(t){t.language in d&&function t(n){for(var r=0,a=n.length;r<a;r++){var o=n[r];if("string"!=typeof o){var i=o.content;if(Array.isArray(i))if("template-string"===o.type){var l=i[1];if(3===i.length&&"string"!=typeof l&&"embedded-code"===l.type){var s=f(l),u=l.alias,d=Array.isArray(u)?u[0]:u,p=e.languages[d];if(!p)continue;i[1]=c(s,p,d)}}else t(i);else"string"!=typeof i&&t([i])}}}(t.tokens)}))}(a),function(e){e.languages.typescript=e.languages.extend("javascript",{"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|type)\s+)(?!keyof\b)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?:\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?/,lookbehind:!0,greedy:!0,inside:null},builtin:/\b(?:Array|Function|Promise|any|boolean|console|never|number|string|symbol|unknown)\b/}),e.languages.typescript.keyword.push(/\b(?:abstract|declare|is|keyof|readonly|require)\b/,/\b(?:asserts|infer|interface|module|namespace|type)\b(?=\s*(?:[{_$a-zA-Z\xA0-\uFFFF]|$))/,/\btype\b(?=\s*(?:[\{*]|$))/),delete e.languages.typescript.parameter,delete e.languages.typescript["literal-property"];var t=e.languages.extend("typescript",{});delete t["class-name"],e.languages.typescript["class-name"].inside=t,e.languages.insertBefore("typescript","function",{decorator:{pattern:/@[$\w\xA0-\uFFFF]+/,inside:{at:{pattern:/^@/,alias:"operator"},function:/^[\s\S]+/}},"generic-function":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>(?=\s*\()/,greedy:!0,inside:{function:/^#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:t}}}}),e.languages.ts=e.languages.typescript}(a),function(e){function t(e,t){return RegExp(e.replace(/<ID>/g,(function(){return/(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/.source})),t)}e.languages.insertBefore("javascript","function-variable",{"method-variable":{pattern:RegExp("(\\.\\s*)"+e.languages.javascript["function-variable"].pattern.source),lookbehind:!0,alias:["function-variable","method","function","property-access"]}}),e.languages.insertBefore("javascript","function",{method:{pattern:RegExp("(\\.\\s*)"+e.languages.javascript.function.source),lookbehind:!0,alias:["function","property-access"]}}),e.languages.insertBefore("javascript","constant",{"known-class-name":[{pattern:/\b(?:(?:Float(?:32|64)|(?:Int|Uint)(?:8|16|32)|Uint8Clamped)?Array|ArrayBuffer|BigInt|Boolean|DataView|Date|Error|Function|Intl|JSON|(?:Weak)?(?:Map|Set)|Math|Number|Object|Promise|Proxy|Reflect|RegExp|String|Symbol|WebAssembly)\b/,alias:"class-name"},{pattern:/\b(?:[A-Z]\w*)Error\b/,alias:"class-name"}]}),e.languages.insertBefore("javascript","keyword",{imports:{pattern:t(/(\bimport\b\s*)(?:<ID>(?:\s*,\s*(?:\*\s*as\s+<ID>|\{[^{}]*\}))?|\*\s*as\s+<ID>|\{[^{}]*\})(?=\s*\bfrom\b)/.source),lookbehind:!0,inside:e.languages.javascript},exports:{pattern:t(/(\bexport\b\s*)(?:\*(?:\s*as\s+<ID>)?(?=\s*\bfrom\b)|\{[^{}]*\})/.source),lookbehind:!0,inside:e.languages.javascript}}),e.languages.javascript.keyword.unshift({pattern:/\b(?:as|default|export|from|import)\b/,alias:"module"},{pattern:/\b(?:await|break|catch|continue|do|else|finally|for|if|return|switch|throw|try|while|yield)\b/,alias:"control-flow"},{pattern:/\bnull\b/,alias:["null","nil"]},{pattern:/\bundefined\b/,alias:"nil"}),e.languages.insertBefore("javascript","operator",{spread:{pattern:/\.{3}/,alias:"operator"},arrow:{pattern:/=>/,alias:"operator"}}),e.languages.insertBefore("javascript","punctuation",{"property-access":{pattern:t(/(\.\s*)#?<ID>/.source),lookbehind:!0},"maybe-class-name":{pattern:/(^|[^$\w\xA0-\uFFFF])[A-Z][$\w\xA0-\uFFFF]+/,lookbehind:!0},dom:{pattern:/\b(?:document|(?:local|session)Storage|location|navigator|performance|window)\b/,alias:"variable"},console:{pattern:/\bconsole(?=\s*\.)/,alias:"class-name"}});for(var n=["function","function-variable","method","method-variable","property-access"],r=0;r<n.length;r++){var a=n[r],o=e.languages.javascript[a];"RegExp"===e.util.type(o)&&(o=e.languages.javascript[a]={pattern:o});var i=o.inside||{};o.inside=i,i["maybe-class-name"]=/^[A-Z][\s\S]*/}}(a),function(e){var t=e.util.clone(e.languages.javascript),n=/(?:\s|\/\/.*(?!.)|\/\*(?:[^*]|\*(?!\/))\*\/)/.source,r=/(?:\{(?:\{(?:\{[^{}]*\}|[^{}])*\}|[^{}])*\})/.source,a=/(?:\{<S>*\.{3}(?:[^{}]|<BRACES>)*\})/.source;function o(e,t){return e=e.replace(/<S>/g,(function(){return n})).replace(/<BRACES>/g,(function(){return r})).replace(/<SPREAD>/g,(function(){return a})),RegExp(e,t)}a=o(a).source,e.languages.jsx=e.languages.extend("markup",t),e.languages.jsx.tag.pattern=o(/<\/?(?:[\w.:-]+(?:<S>+(?:[\w.:$-]+(?:=(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s{'"/>=]+|<BRACES>))?|<SPREAD>))*<S>*\/?)?>/.source),e.languages.jsx.tag.inside.tag.pattern=/^<\/?[^\s>\/]*/,e.languages.jsx.tag.inside["attr-value"].pattern=/=(?!\{)(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s'">]+)/,e.languages.jsx.tag.inside.tag.inside["class-name"]=/^[A-Z]\w*(?:\.[A-Z]\w*)*$/,e.languages.jsx.tag.inside.comment=t.comment,e.languages.insertBefore("inside","attr-name",{spread:{pattern:o(/<SPREAD>/.source),inside:e.languages.jsx}},e.languages.jsx.tag),e.languages.insertBefore("inside","special-attr",{script:{pattern:o(/=<BRACES>/.source),alias:"language-javascript",inside:{"script-punctuation":{pattern:/^=(?=\{)/,alias:"punctuation"},rest:e.languages.jsx}}},e.languages.jsx.tag);var i=function(e){return e?"string"==typeof e?e:"string"==typeof e.content?e.content:e.content.map(i).join(""):""},l=function(t){for(var n=[],r=0;r<t.length;r++){var a=t[r],o=!1;if("string"!=typeof a&&("tag"===a.type&&a.content[0]&&"tag"===a.content[0].type?"</"===a.content[0].content[0].content?n.length>0&&n[n.length-1].tagName===i(a.content[0].content[1])&&n.pop():"/>"===a.content[a.content.length-1].content||n.push({tagName:i(a.content[0].content[1]),openedBraces:0}):n.length>0&&"punctuation"===a.type&&"{"===a.content?n[n.length-1].openedBraces++:n.length>0&&n[n.length-1].openedBraces>0&&"punctuation"===a.type&&"}"===a.content?n[n.length-1].openedBraces--:o=!0),(o||"string"==typeof a)&&n.length>0&&0===n[n.length-1].openedBraces){var s=i(a);r<t.length-1&&("string"==typeof t[r+1]||"plain-text"===t[r+1].type)&&(s+=i(t[r+1]),t.splice(r+1,1)),r>0&&("string"==typeof t[r-1]||"plain-text"===t[r-1].type)&&(s=i(t[r-1])+s,t.splice(r-1,1),r--),t[r]=new e.Token("plain-text",s,null,s)}a.content&&"string"!=typeof a.content&&l(a.content)}};e.hooks.add("after-tokenize",(function(e){"jsx"!==e.language&&"tsx"!==e.language||l(e.tokens)}))}(a),function(e){e.languages.diff={coord:[/^(?:\*{3}|-{3}|\+{3}).*$/m,/^@@.*@@$/m,/^\d.*$/m]};var t={"deleted-sign":"-","deleted-arrow":"<","inserted-sign":"+","inserted-arrow":">",unchanged:" ",diff:"!"};Object.keys(t).forEach((function(n){var r=t[n],a=[];/^\w+$/.test(n)||a.push(/\w+/.exec(n)[0]),"diff"===n&&a.push("bold"),e.languages.diff[n]={pattern:RegExp("^(?:["+r+"].*(?:\r\n?|\n|(?![\\s\\S])))+","m"),alias:a,inside:{line:{pattern:/(.)(?=[\s\S]).*(?:\r\n?|\n)?/,lookbehind:!0},prefix:{pattern:/[\s\S]/,alias:/\w+/.exec(n)[0]}}}})),Object.defineProperty(e.languages.diff,"PREFIXES",{value:t})}(a),a.languages.git={comment:/^#.*/m,deleted:/^[-\u2013].*/m,inserted:/^\+.*/m,string:/("|')(?:\\.|(?!\1)[^\\\r\n])*\1/,command:{pattern:/^.*\$ git .*$/m,inside:{parameter:/\s--?\w+/}},coord:/^@@.*@@$/m,"commit-sha1":/^commit \w{40}$/m},a.languages.go=a.languages.extend("clike",{string:{pattern:/(^|[^\\])"(?:\\.|[^"\\\r\n])*"|`[^`]*`/,lookbehind:!0,greedy:!0},keyword:/\b(?:break|case|chan|const|continue|default|defer|else|fallthrough|for|func|go(?:to)?|if|import|interface|map|package|range|return|select|struct|switch|type|var)\b/,boolean:/\b(?:_|false|iota|nil|true)\b/,number:[/\b0(?:b[01_]+|o[0-7_]+)i?\b/i,/\b0x(?:[a-f\d_]+(?:\.[a-f\d_]*)?|\.[a-f\d_]+)(?:p[+-]?\d+(?:_\d+)*)?i?(?!\w)/i,/(?:\b\d[\d_]*(?:\.[\d_]*)?|\B\.\d[\d_]*)(?:e[+-]?[\d_]+)?i?(?!\w)/i],operator:/[*\/%^!=]=?|\+[=+]?|-[=-]?|\|[=|]?|&(?:=|&|\^=?)?|>(?:>=?|=)?|<(?:<=?|=|-)?|:=|\.\.\./,builtin:/\b(?:append|bool|byte|cap|close|complex|complex(?:64|128)|copy|delete|error|float(?:32|64)|u?int(?:8|16|32|64)?|imag|len|make|new|panic|print(?:ln)?|real|recover|rune|string|uintptr)\b/}),a.languages.insertBefore("go","string",{char:{pattern:/'(?:\\.|[^'\\\r\n]){0,10}'/,greedy:!0}}),delete a.languages.go["class-name"],function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,a,o){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(a,(function(e){if("function"==typeof o&&!o(e))return e;for(var a,l=i.length;-1!==n.code.indexOf(a=t(r,l));)++l;return i[l]=e,a})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var a=0,o=Object.keys(n.tokenStack);!function i(l){for(var s=0;s<l.length&&!(a>=o.length);s++){var u=l[s];if("string"==typeof u||u.content&&"string"==typeof u.content){var c=o[a],d=n.tokenStack[c],f="string"==typeof u?u:u.content,p=t(r,c),m=f.indexOf(p);if(m>-1){++a;var h=f.substring(0,m),g=new e.Token(r,e.tokenize(d,n.grammar),"language-"+r,d),v=f.substring(m+p.length),b=[];h&&b.push.apply(b,i([h])),b.push(g),v&&b.push.apply(b,i([v])),"string"==typeof u?l.splice.apply(l,[s,1].concat(b)):u.content=b}}else u.content&&i(u.content)}return l}(n.tokens)}}}})}(a),function(e){e.languages.handlebars={comment:/\{\{![\s\S]*?\}\}/,delimiter:{pattern:/^\{\{\{?|\}\}\}?$/,alias:"punctuation"},string:/(["'])(?:\\.|(?!\1)[^\\\r\n])*\1/,number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee][+-]?\d+)?/,boolean:/\b(?:false|true)\b/,block:{pattern:/^(\s*(?:~\s*)?)[#\/]\S+?(?=\s*(?:~\s*)?$|\s)/,lookbehind:!0,alias:"keyword"},brackets:{pattern:/\[[^\]]+\]/,inside:{punctuation:/\[|\]/,variable:/[\s\S]+/}},punctuation:/[!"#%&':()*+,.\/;<=>@\[\\\]^`{|}~]/,variable:/[^!"#%&'()*+,\/;<=>@\[\\\]^`{|}~\s]+/},e.hooks.add("before-tokenize",(function(t){e.languages["markup-templating"].buildPlaceholders(t,"handlebars",/\{\{\{[\s\S]+?\}\}\}|\{\{[\s\S]+?\}\}/g)})),e.hooks.add("after-tokenize",(function(t){e.languages["markup-templating"].tokenizePlaceholders(t,"handlebars")})),e.languages.hbs=e.languages.handlebars}(a),a.languages.json={property:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?=\s*:)/,lookbehind:!0,greedy:!0},string:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?!\s*:)/,lookbehind:!0,greedy:!0},comment:{pattern:/\/\/.*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},number:/-?\b\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,punctuation:/[{}[\],]/,operator:/:/,boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"}},a.languages.webmanifest=a.languages.json,a.languages.less=a.languages.extend("css",{comment:[/\/\*[\s\S]*?\*\//,{pattern:/(^|[^\\])\/\/.*/,lookbehind:!0}],atrule:{pattern:/@[\w-](?:\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{punctuation:/[:()]/}},selector:{pattern:/(?:@\{[\w-]+\}|[^{};\s@])(?:@\{[\w-]+\}|\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};@\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{variable:/@+[\w-]+/}},property:/(?:@\{[\w-]+\}|[\w-])+(?:\+_?)?(?=\s*:)/,operator:/[+\-*\/]/}),a.languages.insertBefore("less","property",{variable:[{pattern:/@[\w-]+\s*:/,inside:{punctuation:/:/}},/@@?[\w-]+/],"mixin-usage":{pattern:/([{;]\s*)[.#](?!\d)[\w-].*?(?=[(;])/,lookbehind:!0,alias:"function"}}),a.languages.makefile={comment:{pattern:/(^|[^\\])#(?:\\(?:\r\n|[\s\S])|[^\\\r\n])*/,lookbehind:!0},string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"builtin-target":{pattern:/\.[A-Z][^:#=\s]+(?=\s*:(?!=))/,alias:"builtin"},target:{pattern:/^(?:[^:=\s]|[ \t]+(?![\s:]))+(?=\s*:(?!=))/m,alias:"symbol",inside:{variable:/\$+(?:(?!\$)[^(){}:#=\s]+|(?=[({]))/}},variable:/\$+(?:(?!\$)[^(){}:#=\s]+|\([@*%<^+?][DF]\)|(?=[({]))/,keyword:/-include\b|\b(?:define|else|endef|endif|export|ifn?def|ifn?eq|include|override|private|sinclude|undefine|unexport|vpath)\b/,function:{pattern:/(\()(?:abspath|addsuffix|and|basename|call|dir|error|eval|file|filter(?:-out)?|findstring|firstword|flavor|foreach|guile|if|info|join|lastword|load|notdir|or|origin|patsubst|realpath|shell|sort|strip|subst|suffix|value|warning|wildcard|word(?:list|s)?)(?=[ \t])/,lookbehind:!0},operator:/(?:::|[?:+!])?=|[|@]/,punctuation:/[:;(){}]/},a.languages.objectivec=a.languages.extend("c",{string:{pattern:/@?"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},keyword:/\b(?:asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|in|inline|int|long|register|return|self|short|signed|sizeof|static|struct|super|switch|typedef|typeof|union|unsigned|void|volatile|while)\b|(?:@interface|@end|@implementation|@protocol|@class|@public|@protected|@private|@property|@try|@catch|@finally|@throw|@synthesize|@dynamic|@selector)\b/,operator:/-[->]?|\+\+?|!=?|<<?=?|>>?=?|==?|&&?|\|\|?|[~^%?*\/@]/}),delete a.languages.objectivec["class-name"],a.languages.objc=a.languages.objectivec,a.languages.ocaml={comment:{pattern:/\(\*[\s\S]*?\*\)/,greedy:!0},char:{pattern:/'(?:[^\\\r\n']|\\(?:.|[ox]?[0-9a-f]{1,3}))'/i,greedy:!0},string:[{pattern:/"(?:\\(?:[\s\S]|\r\n)|[^\\\r\n"])*"/,greedy:!0},{pattern:/\{([a-z_]*)\|[\s\S]*?\|\1\}/,greedy:!0}],number:[/\b(?:0b[01][01_]*|0o[0-7][0-7_]*)\b/i,/\b0x[a-f0-9][a-f0-9_]*(?:\.[a-f0-9_]*)?(?:p[+-]?\d[\d_]*)?(?!\w)/i,/\b\d[\d_]*(?:\.[\d_]*)?(?:e[+-]?\d[\d_]*)?(?!\w)/i],directive:{pattern:/\B#\w+/,alias:"property"},label:{pattern:/\B~\w+/,alias:"property"},"type-variable":{pattern:/\B'\w+/,alias:"function"},variant:{pattern:/`\w+/,alias:"symbol"},keyword:/\b(?:as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|match|method|module|mutable|new|nonrec|object|of|open|private|rec|sig|struct|then|to|try|type|val|value|virtual|when|where|while|with)\b/,boolean:/\b(?:false|true)\b/,"operator-like-punctuation":{pattern:/\[[<>|]|[>|]\]|\{<|>\}/,alias:"punctuation"},operator:/\.[.~]|:[=>]|[=<>@^|&+\-*\/$%!?~][!$%&*+\-.\/:<=>?@^|~]*|\b(?:and|asr|land|lor|lsl|lsr|lxor|mod|or)\b/,punctuation:/;;|::|[(){}\[\].,:;#]|\b_\b/},a.languages.python={comment:{pattern:/(^|[^\\])#.*/,lookbehind:!0,greedy:!0},"string-interpolation":{pattern:/(?:f|fr|rf)(?:("""|''')[\s\S]*?\1|("|')(?:\\.|(?!\2)[^\\\r\n])*\2)/i,greedy:!0,inside:{interpolation:{pattern:/((?:^|[^{])(?:\{\{)*)\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}])+\})+\})+\}/,lookbehind:!0,inside:{"format-spec":{pattern:/(:)[^:(){}]+(?=\}$)/,lookbehind:!0},"conversion-option":{pattern:/![sra](?=[:}]$)/,alias:"punctuation"},rest:null}},string:/[\s\S]+/}},"triple-quoted-string":{pattern:/(?:[rub]|br|rb)?("""|''')[\s\S]*?\1/i,greedy:!0,alias:"string"},string:{pattern:/(?:[rub]|br|rb)?("|')(?:\\.|(?!\1)[^\\\r\n])*\1/i,greedy:!0},function:{pattern:/((?:^|\s)def[ \t]+)[a-zA-Z_]\w*(?=\s*\()/g,lookbehind:!0},"class-name":{pattern:/(\bclass\s+)\w+/i,lookbehind:!0},decorator:{pattern:/(^[\t ]*)@\w+(?:\.\w+)*/m,lookbehind:!0,alias:["annotation","punctuation"],inside:{punctuation:/\./}},keyword:/\b(?:_(?=\s*:)|and|as|assert|async|await|break|case|class|continue|def|del|elif|else|except|exec|finally|for|from|global|if|import|in|is|lambda|match|nonlocal|not|or|pass|print|raise|return|try|while|with|yield)\b/,builtin:/\b(?:__import__|abs|all|any|apply|ascii|basestring|bin|bool|buffer|bytearray|bytes|callable|chr|classmethod|cmp|coerce|compile|complex|delattr|dict|dir|divmod|enumerate|eval|execfile|file|filter|float|format|frozenset|getattr|globals|hasattr|hash|help|hex|id|input|int|intern|isinstance|issubclass|iter|len|list|locals|long|map|max|memoryview|min|next|object|oct|open|ord|pow|property|range|raw_input|reduce|reload|repr|reversed|round|set|setattr|slice|sorted|staticmethod|str|sum|super|tuple|type|unichr|unicode|vars|xrange|zip)\b/,boolean:/\b(?:False|None|True)\b/,number:/\b0(?:b(?:_?[01])+|o(?:_?[0-7])+|x(?:_?[a-f0-9])+)\b|(?:\b\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\B\.\d+(?:_\d+)*)(?:e[+-]?\d+(?:_\d+)*)?j?(?!\w)/i,operator:/[-+%=]=?|!=|:=|\*\*?=?|\/\/?=?|<[<=>]?|>[=>]?|[&|^~]/,punctuation:/[{}[\];(),.:]/},a.languages.python["string-interpolation"].inside.interpolation.inside.rest=a.languages.python,a.languages.py=a.languages.python,a.languages.reason=a.languages.extend("clike",{string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^\\\r\n"])*"/,greedy:!0},"class-name":/\b[A-Z]\w*/,keyword:/\b(?:and|as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|method|module|mutable|new|nonrec|object|of|open|or|private|rec|sig|struct|switch|then|to|try|type|val|virtual|when|while|with)\b/,operator:/\.{3}|:[:=]|\|>|->|=(?:==?|>)?|<=?|>=?|[|^?'#!~`]|[+\-*\/]\.?|\b(?:asr|land|lor|lsl|lsr|lxor|mod)\b/}),a.languages.insertBefore("reason","class-name",{char:{pattern:/'(?:\\x[\da-f]{2}|\\o[0-3][0-7][0-7]|\\\d{3}|\\.|[^'\\\r\n])'/,greedy:!0},constructor:/\b[A-Z]\w*\b(?!\s*\.)/,label:{pattern:/\b[a-z]\w*(?=::)/,alias:"symbol"}}),delete a.languages.reason.function,function(e){e.languages.sass=e.languages.extend("css",{comment:{pattern:/^([ \t]*)\/[\/*].*(?:(?:\r?\n|\r)\1[ \t].+)*/m,lookbehind:!0,greedy:!0}}),e.languages.insertBefore("sass","atrule",{"atrule-line":{pattern:/^(?:[ \t]*)[@+=].+/m,greedy:!0,inside:{atrule:/(?:@[\w-]+|[+=])/}}}),delete e.languages.sass.atrule;var t=/\$[-\w]+|#\{\$[-\w]+\}/,n=[/[+*\/%]|[=!]=|<=?|>=?|\b(?:and|not|or)\b/,{pattern:/(\s)-(?=\s)/,lookbehind:!0}];e.languages.insertBefore("sass","property",{"variable-line":{pattern:/^[ \t]*\$.+/m,greedy:!0,inside:{punctuation:/:/,variable:t,operator:n}},"property-line":{pattern:/^[ \t]*(?:[^:\s]+ *:.*|:[^:\s].*)/m,greedy:!0,inside:{property:[/[^:\s]+(?=\s*:)/,{pattern:/(:)[^:\s]+/,lookbehind:!0}],punctuation:/:/,variable:t,operator:n,important:e.languages.sass.important}}}),delete e.languages.sass.property,delete e.languages.sass.important,e.languages.insertBefore("sass","punctuation",{selector:{pattern:/^([ \t]*)\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*(?:,(?:\r?\n|\r)\1[ \t]+\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*)*/m,lookbehind:!0,greedy:!0}})}(a),a.languages.scss=a.languages.extend("css",{comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},atrule:{pattern:/@[\w-](?:\([^()]+\)|[^()\s]|\s+(?!\s))*?(?=\s+[{;])/,inside:{rule:/@[\w-]+/}},url:/(?:[-a-z]+-)?url(?=\()/i,selector:{pattern:/(?=\S)[^@;{}()]?(?:[^@;{}()\s]|\s+(?!\s)|#\{\$[-\w]+\})+(?=\s*\{(?:\}|\s|[^}][^:{}]*[:{][^}]))/,inside:{parent:{pattern:/&/,alias:"important"},placeholder:/%[-\w]+/,variable:/\$[-\w]+|#\{\$[-\w]+\}/}},property:{pattern:/(?:[-\w]|\$[-\w]|#\{\$[-\w]+\})+(?=\s*:)/,inside:{variable:/\$[-\w]+|#\{\$[-\w]+\}/}}}),a.languages.insertBefore("scss","atrule",{keyword:[/@(?:content|debug|each|else(?: if)?|extend|for|forward|function|if|import|include|mixin|return|use|warn|while)\b/i,{pattern:/( )(?:from|through)(?= )/,lookbehind:!0}]}),a.languages.insertBefore("scss","important",{variable:/\$[-\w]+|#\{\$[-\w]+\}/}),a.languages.insertBefore("scss","function",{"module-modifier":{pattern:/\b(?:as|hide|show|with)\b/i,alias:"keyword"},placeholder:{pattern:/%[-\w]+/,alias:"selector"},statement:{pattern:/\B!(?:default|optional)\b/i,alias:"keyword"},boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"},operator:{pattern:/(\s)(?:[-+*\/%]|[=!]=|<=?|>=?|and|not|or)(?=\s)/,lookbehind:!0}}),a.languages.scss.atrule.inside.rest=a.languages.scss,function(e){var t={pattern:/(\b\d+)(?:%|[a-z]+)/,lookbehind:!0},n={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0},r={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},url:{pattern:/\burl\((["']?).*?\1\)/i,greedy:!0},string:{pattern:/("|')(?:(?!\1)[^\\\r\n]|\\(?:\r\n|[\s\S]))*\1/,greedy:!0},interpolation:null,func:null,important:/\B!(?:important|optional)\b/i,keyword:{pattern:/(^|\s+)(?:(?:else|for|if|return|unless)(?=\s|$)|@[\w-]+)/,lookbehind:!0},hexcode:/#[\da-f]{3,6}/i,color:[/\b(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)\b/i,{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:t,number:n,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:t,boolean:/\b(?:false|true)\b/,operator:[/~|[+!\/%<>?=]=?|[-:]=|\*[*=]?|\.{2,3}|&&|\|\||\B-\B|\b(?:and|in|is(?: a| defined| not|nt)?|not|or)\b/],number:n,punctuation:/[{}()\[\];:,]/};r.interpolation={pattern:/\{[^\r\n}:]+\}/,alias:"variable",inside:{delimiter:{pattern:/^\{|\}$/,alias:"punctuation"},rest:r}},r.func={pattern:/[\w-]+\([^)]*\).*/,inside:{function:/^[^(]+/,rest:r}},e.languages.stylus={"atrule-declaration":{pattern:/(^[ \t]*)@.+/m,lookbehind:!0,inside:{atrule:/^@[\w-]+/,rest:r}},"variable-declaration":{pattern:/(^[ \t]*)[\w$-]+\s*.?=[ \t]*(?:\{[^{}]*\}|\S.*|$)/m,lookbehind:!0,inside:{variable:/^\S+/,rest:r}},statement:{pattern:/(^[ \t]*)(?:else|for|if|return|unless)[ \t].+/m,lookbehind:!0,inside:{keyword:/^\S+/,rest:r}},"property-declaration":{pattern:/((?:^|\{)([ \t]*))(?:[\w-]|\{[^}\r\n]+\})+(?:\s*:\s*|[ \t]+)(?!\s)[^{\r\n]*(?:;|[^{\r\n,]$(?!(?:\r?\n|\r)(?:\{|\2[ \t])))/m,lookbehind:!0,inside:{property:{pattern:/^[^\s:]+/,inside:{interpolation:r.interpolation}},rest:r}},selector:{pattern:/(^[ \t]*)(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)(?:(?:\r?\n|\r)(?:\1(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)))*(?:,$|\{|(?=(?:\r?\n|\r)(?:\{|\1[ \t])))/m,lookbehind:!0,inside:{interpolation:r.interpolation,comment:r.comment,punctuation:/[{},]/}},func:r.func,string:r.string,comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0,greedy:!0},interpolation:r.interpolation,punctuation:/[{}()\[\];:.]/}}(a),function(e){var t=e.util.clone(e.languages.typescript);e.languages.tsx=e.languages.extend("jsx",t),delete e.languages.tsx.parameter,delete e.languages.tsx["literal-property"];var n=e.languages.tsx.tag;n.pattern=RegExp(/(^|[^\w$]|(?=<\/))/.source+"(?:"+n.pattern.source+")",n.pattern.flags),n.lookbehind=!0}(a),a.languages.wasm={comment:[/\(;[\s\S]*?;\)/,{pattern:/;;.*/,greedy:!0}],string:{pattern:/"(?:\\[\s\S]|[^"\\])*"/,greedy:!0},keyword:[{pattern:/\b(?:align|offset)=/,inside:{operator:/=/}},{pattern:/\b(?:(?:f32|f64|i32|i64)(?:\.(?:abs|add|and|ceil|clz|const|convert_[su]\/i(?:32|64)|copysign|ctz|demote\/f64|div(?:_[su])?|eqz?|extend_[su]\/i32|floor|ge(?:_[su])?|gt(?:_[su])?|le(?:_[su])?|load(?:(?:8|16|32)_[su])?|lt(?:_[su])?|max|min|mul|neg?|nearest|or|popcnt|promote\/f32|reinterpret\/[fi](?:32|64)|rem_[su]|rot[lr]|shl|shr_[su]|sqrt|store(?:8|16|32)?|sub|trunc(?:_[su]\/f(?:32|64))?|wrap\/i64|xor))?|memory\.(?:grow|size))\b/,inside:{punctuation:/\./}},/\b(?:anyfunc|block|br(?:_if|_table)?|call(?:_indirect)?|data|drop|elem|else|end|export|func|get_(?:global|local)|global|if|import|local|loop|memory|module|mut|nop|offset|param|result|return|select|set_(?:global|local)|start|table|tee_local|then|type|unreachable)\b/],variable:/\$[\w!#$%&'*+\-./:<=>?@\\^`|~]+/,number:/[+-]?\b(?:\d(?:_?\d)*(?:\.\d(?:_?\d)*)?(?:[eE][+-]?\d(?:_?\d)*)?|0x[\da-fA-F](?:_?[\da-fA-F])*(?:\.[\da-fA-F](?:_?[\da-fA-D])*)?(?:[pP][+-]?\d(?:_?\d)*)?)\b|\binf\b|\bnan(?::0x[\da-fA-F](?:_?[\da-fA-D])*)?\b/,punctuation:/[()]/};const o=a},9901:e=>{e.exports&&(e.exports={core:{meta:{path:"components/prism-core.js",option:"mandatory"},core:"Core"},themes:{meta:{path:"themes/{id}.css",link:"index.html?theme={id}",exclusive:!0},prism:{title:"Default",option:"default"},"prism-dark":"Dark","prism-funky":"Funky","prism-okaidia":{title:"Okaidia",owner:"ocodia"},"prism-twilight":{title:"Twilight",owner:"remybach"},"prism-coy":{title:"Coy",owner:"tshedor"},"prism-solarizedlight":{title:"Solarized Light",owner:"hectormatos2011 "},"prism-tomorrow":{title:"Tomorrow Night",owner:"Rosey"}},languages:{meta:{path:"components/prism-{id}",noCSS:!0,examplesPath:"examples/prism-{id}",addCheckAll:!0},markup:{title:"Markup",alias:["html","xml","svg","mathml","ssml","atom","rss"],aliasTitles:{html:"HTML",xml:"XML",svg:"SVG",mathml:"MathML",ssml:"SSML",atom:"Atom",rss:"RSS"},option:"default"},css:{title:"CSS",option:"default",modify:"markup"},clike:{title:"C-like",option:"default"},javascript:{title:"JavaScript",require:"clike",modify:"markup",optional:"regex",alias:"js",option:"default"},abap:{title:"ABAP",owner:"dellagustin"},abnf:{title:"ABNF",owner:"RunDevelopment"},actionscript:{title:"ActionScript",require:"javascript",modify:"markup",owner:"Golmote"},ada:{title:"Ada",owner:"Lucretia"},agda:{title:"Agda",owner:"xy-ren"},al:{title:"AL",owner:"RunDevelopment"},antlr4:{title:"ANTLR4",alias:"g4",owner:"RunDevelopment"},apacheconf:{title:"Apache Configuration",owner:"GuiTeK"},apex:{title:"Apex",require:["clike","sql"],owner:"RunDevelopment"},apl:{title:"APL",owner:"ngn"},applescript:{title:"AppleScript",owner:"Golmote"},aql:{title:"AQL",owner:"RunDevelopment"},arduino:{title:"Arduino",require:"cpp",alias:"ino",owner:"dkern"},arff:{title:"ARFF",owner:"Golmote"},armasm:{title:"ARM Assembly",alias:"arm-asm",owner:"RunDevelopment"},arturo:{title:"Arturo",alias:"art",optional:["bash","css","javascript","markup","markdown","sql"],owner:"drkameleon"},asciidoc:{alias:"adoc",title:"AsciiDoc",owner:"Golmote"},aspnet:{title:"ASP.NET (C#)",require:["markup","csharp"],owner:"nauzilus"},asm6502:{title:"6502 Assembly",owner:"kzurawel"},asmatmel:{title:"Atmel AVR Assembly",owner:"cerkit"},autohotkey:{title:"AutoHotkey",owner:"aviaryan"},autoit:{title:"AutoIt",owner:"Golmote"},avisynth:{title:"AviSynth",alias:"avs",owner:"Zinfidel"},"avro-idl":{title:"Avro IDL",alias:"avdl",owner:"RunDevelopment"},awk:{title:"AWK",alias:"gawk",aliasTitles:{gawk:"GAWK"},owner:"RunDevelopment"},bash:{title:"Bash",alias:["sh","shell"],aliasTitles:{sh:"Shell",shell:"Shell"},owner:"zeitgeist87"},basic:{title:"BASIC",owner:"Golmote"},batch:{title:"Batch",owner:"Golmote"},bbcode:{title:"BBcode",alias:"shortcode",aliasTitles:{shortcode:"Shortcode"},owner:"RunDevelopment"},bbj:{title:"BBj",owner:"hyyan"},bicep:{title:"Bicep",owner:"johnnyreilly"},birb:{title:"Birb",require:"clike",owner:"Calamity210"},bison:{title:"Bison",require:"c",owner:"Golmote"},bnf:{title:"BNF",alias:"rbnf",aliasTitles:{rbnf:"RBNF"},owner:"RunDevelopment"},bqn:{title:"BQN",owner:"yewscion"},brainfuck:{title:"Brainfuck",owner:"Golmote"},brightscript:{title:"BrightScript",owner:"RunDevelopment"},bro:{title:"Bro",owner:"wayward710"},bsl:{title:"BSL (1C:Enterprise)",alias:"oscript",aliasTitles:{oscript:"OneScript"},owner:"Diversus23"},c:{title:"C",require:"clike",owner:"zeitgeist87"},csharp:{title:"C#",require:"clike",alias:["cs","dotnet"],owner:"mvalipour"},cpp:{title:"C++",require:"c",owner:"zeitgeist87"},cfscript:{title:"CFScript",require:"clike",alias:"cfc",owner:"mjclemente"},chaiscript:{title:"ChaiScript",require:["clike","cpp"],owner:"RunDevelopment"},cil:{title:"CIL",owner:"sbrl"},cilkc:{title:"Cilk/C",require:"c",alias:"cilk-c",owner:"OpenCilk"},cilkcpp:{title:"Cilk/C++",require:"cpp",alias:["cilk-cpp","cilk"],owner:"OpenCilk"},clojure:{title:"Clojure",owner:"troglotit"},cmake:{title:"CMake",owner:"mjrogozinski"},cobol:{title:"COBOL",owner:"RunDevelopment"},coffeescript:{title:"CoffeeScript",require:"javascript",alias:"coffee",owner:"R-osey"},concurnas:{title:"Concurnas",alias:"conc",owner:"jasontatton"},csp:{title:"Content-Security-Policy",owner:"ScottHelme"},cooklang:{title:"Cooklang",owner:"ahue"},coq:{title:"Coq",owner:"RunDevelopment"},crystal:{title:"Crystal",require:"ruby",owner:"MakeNowJust"},"css-extras":{title:"CSS Extras",require:"css",modify:"css",owner:"milesj"},csv:{title:"CSV",owner:"RunDevelopment"},cue:{title:"CUE",owner:"RunDevelopment"},cypher:{title:"Cypher",owner:"RunDevelopment"},d:{title:"D",require:"clike",owner:"Golmote"},dart:{title:"Dart",require:"clike",owner:"Golmote"},dataweave:{title:"DataWeave",owner:"machaval"},dax:{title:"DAX",owner:"peterbud"},dhall:{title:"Dhall",owner:"RunDevelopment"},diff:{title:"Diff",owner:"uranusjr"},django:{title:"Django/Jinja2",require:"markup-templating",alias:"jinja2",owner:"romanvm"},"dns-zone-file":{title:"DNS zone file",owner:"RunDevelopment",alias:"dns-zone"},docker:{title:"Docker",alias:"dockerfile",owner:"JustinBeckwith"},dot:{title:"DOT (Graphviz)",alias:"gv",optional:"markup",owner:"RunDevelopment"},ebnf:{title:"EBNF",owner:"RunDevelopment"},editorconfig:{title:"EditorConfig",owner:"osipxd"},eiffel:{title:"Eiffel",owner:"Conaclos"},ejs:{title:"EJS",require:["javascript","markup-templating"],owner:"RunDevelopment",alias:"eta",aliasTitles:{eta:"Eta"}},elixir:{title:"Elixir",owner:"Golmote"},elm:{title:"Elm",owner:"zwilias"},etlua:{title:"Embedded Lua templating",require:["lua","markup-templating"],owner:"RunDevelopment"},erb:{title:"ERB",require:["ruby","markup-templating"],owner:"Golmote"},erlang:{title:"Erlang",owner:"Golmote"},"excel-formula":{title:"Excel Formula",alias:["xlsx","xls"],owner:"RunDevelopment"},fsharp:{title:"F#",require:"clike",owner:"simonreynolds7"},factor:{title:"Factor",owner:"catb0t"},false:{title:"False",owner:"edukisto"},"firestore-security-rules":{title:"Firestore security rules",require:"clike",owner:"RunDevelopment"},flow:{title:"Flow",require:"javascript",owner:"Golmote"},fortran:{title:"Fortran",owner:"Golmote"},ftl:{title:"FreeMarker Template Language",require:"markup-templating",owner:"RunDevelopment"},gml:{title:"GameMaker Language",alias:"gamemakerlanguage",require:"clike",owner:"LiarOnce"},gap:{title:"GAP (CAS)",owner:"RunDevelopment"},gcode:{title:"G-code",owner:"RunDevelopment"},gdscript:{title:"GDScript",owner:"RunDevelopment"},gedcom:{title:"GEDCOM",owner:"Golmote"},gettext:{title:"gettext",alias:"po",owner:"RunDevelopment"},gherkin:{title:"Gherkin",owner:"hason"},git:{title:"Git",owner:"lgiraudel"},glsl:{title:"GLSL",require:"c",owner:"Golmote"},gn:{title:"GN",alias:"gni",owner:"RunDevelopment"},"linker-script":{title:"GNU Linker Script",alias:"ld",owner:"RunDevelopment"},go:{title:"Go",require:"clike",owner:"arnehormann"},"go-module":{title:"Go module",alias:"go-mod",owner:"RunDevelopment"},gradle:{title:"Gradle",require:"clike",owner:"zeabdelkhalek-badido18"},graphql:{title:"GraphQL",optional:"markdown",owner:"Golmote"},groovy:{title:"Groovy",require:"clike",owner:"robfletcher"},haml:{title:"Haml",require:"ruby",optional:["css","css-extras","coffeescript","erb","javascript","less","markdown","scss","textile"],owner:"Golmote"},handlebars:{title:"Handlebars",require:"markup-templating",alias:["hbs","mustache"],aliasTitles:{mustache:"Mustache"},owner:"Golmote"},haskell:{title:"Haskell",alias:"hs",owner:"bholst"},haxe:{title:"Haxe",require:"clike",optional:"regex",owner:"Golmote"},hcl:{title:"HCL",owner:"outsideris"},hlsl:{title:"HLSL",require:"c",owner:"RunDevelopment"},hoon:{title:"Hoon",owner:"matildepark"},http:{title:"HTTP",optional:["csp","css","hpkp","hsts","javascript","json","markup","uri"],owner:"danielgtaylor"},hpkp:{title:"HTTP Public-Key-Pins",owner:"ScottHelme"},hsts:{title:"HTTP Strict-Transport-Security",owner:"ScottHelme"},ichigojam:{title:"IchigoJam",owner:"BlueCocoa"},icon:{title:"Icon",owner:"Golmote"},"icu-message-format":{title:"ICU Message Format",owner:"RunDevelopment"},idris:{title:"Idris",alias:"idr",owner:"KeenS",require:"haskell"},ignore:{title:".ignore",owner:"osipxd",alias:["gitignore","hgignore","npmignore"],aliasTitles:{gitignore:".gitignore",hgignore:".hgignore",npmignore:".npmignore"}},inform7:{title:"Inform 7",owner:"Golmote"},ini:{title:"Ini",owner:"aviaryan"},io:{title:"Io",owner:"AlesTsurko"},j:{title:"J",owner:"Golmote"},java:{title:"Java",require:"clike",owner:"sherblot"},javadoc:{title:"JavaDoc",require:["markup","java","javadoclike"],modify:"java",optional:"scala",owner:"RunDevelopment"},javadoclike:{title:"JavaDoc-like",modify:["java","javascript","php"],owner:"RunDevelopment"},javastacktrace:{title:"Java stack trace",owner:"RunDevelopment"},jexl:{title:"Jexl",owner:"czosel"},jolie:{title:"Jolie",require:"clike",owner:"thesave"},jq:{title:"JQ",owner:"RunDevelopment"},jsdoc:{title:"JSDoc",require:["javascript","javadoclike","typescript"],modify:"javascript",optional:["actionscript","coffeescript"],owner:"RunDevelopment"},"js-extras":{title:"JS Extras",require:"javascript",modify:"javascript",optional:["actionscript","coffeescript","flow","n4js","typescript"],owner:"RunDevelopment"},json:{title:"JSON",alias:"webmanifest",aliasTitles:{webmanifest:"Web App Manifest"},owner:"CupOfTea696"},json5:{title:"JSON5",require:"json",owner:"RunDevelopment"},jsonp:{title:"JSONP",require:"json",owner:"RunDevelopment"},jsstacktrace:{title:"JS stack trace",owner:"sbrl"},"js-templates":{title:"JS Templates",require:"javascript",modify:"javascript",optional:["css","css-extras","graphql","markdown","markup","sql"],owner:"RunDevelopment"},julia:{title:"Julia",owner:"cdagnino"},keepalived:{title:"Keepalived Configure",owner:"dev-itsheng"},keyman:{title:"Keyman",owner:"mcdurdin"},kotlin:{title:"Kotlin",alias:["kt","kts"],aliasTitles:{kts:"Kotlin Script"},require:"clike",owner:"Golmote"},kumir:{title:"KuMir (\u041a\u0443\u041c\u0438\u0440)",alias:"kum",owner:"edukisto"},kusto:{title:"Kusto",owner:"RunDevelopment"},latex:{title:"LaTeX",alias:["tex","context"],aliasTitles:{tex:"TeX",context:"ConTeXt"},owner:"japborst"},latte:{title:"Latte",require:["clike","markup-templating","php"],owner:"nette"},less:{title:"Less",require:"css",optional:"css-extras",owner:"Golmote"},lilypond:{title:"LilyPond",require:"scheme",alias:"ly",owner:"RunDevelopment"},liquid:{title:"Liquid",require:"markup-templating",owner:"cinhtau"},lisp:{title:"Lisp",alias:["emacs","elisp","emacs-lisp"],owner:"JuanCaicedo"},livescript:{title:"LiveScript",owner:"Golmote"},llvm:{title:"LLVM IR",owner:"porglezomp"},log:{title:"Log file",optional:"javastacktrace",owner:"RunDevelopment"},lolcode:{title:"LOLCODE",owner:"Golmote"},lua:{title:"Lua",owner:"Golmote"},magma:{title:"Magma (CAS)",owner:"RunDevelopment"},makefile:{title:"Makefile",owner:"Golmote"},markdown:{title:"Markdown",require:"markup",optional:"yaml",alias:"md",owner:"Golmote"},"markup-templating":{title:"Markup templating",require:"markup",owner:"Golmote"},mata:{title:"Mata",owner:"RunDevelopment"},matlab:{title:"MATLAB",owner:"Golmote"},maxscript:{title:"MAXScript",owner:"RunDevelopment"},mel:{title:"MEL",owner:"Golmote"},mermaid:{title:"Mermaid",owner:"RunDevelopment"},metafont:{title:"METAFONT",owner:"LaeriExNihilo"},mizar:{title:"Mizar",owner:"Golmote"},mongodb:{title:"MongoDB",owner:"airs0urce",require:"javascript"},monkey:{title:"Monkey",owner:"Golmote"},moonscript:{title:"MoonScript",alias:"moon",owner:"RunDevelopment"},n1ql:{title:"N1QL",owner:"TMWilds"},n4js:{title:"N4JS",require:"javascript",optional:"jsdoc",alias:"n4jsd",owner:"bsmith-n4"},"nand2tetris-hdl":{title:"Nand To Tetris HDL",owner:"stephanmax"},naniscript:{title:"Naninovel Script",owner:"Elringus",alias:"nani"},nasm:{title:"NASM",owner:"rbmj"},neon:{title:"NEON",owner:"nette"},nevod:{title:"Nevod",owner:"nezaboodka"},nginx:{title:"nginx",owner:"volado"},nim:{title:"Nim",owner:"Golmote"},nix:{title:"Nix",owner:"Golmote"},nsis:{title:"NSIS",owner:"idleberg"},objectivec:{title:"Objective-C",require:"c",alias:"objc",owner:"uranusjr"},ocaml:{title:"OCaml",owner:"Golmote"},odin:{title:"Odin",owner:"edukisto"},opencl:{title:"OpenCL",require:"c",modify:["c","cpp"],owner:"Milania1"},openqasm:{title:"OpenQasm",alias:"qasm",owner:"RunDevelopment"},oz:{title:"Oz",owner:"Golmote"},parigp:{title:"PARI/GP",owner:"Golmote"},parser:{title:"Parser",require:"markup",owner:"Golmote"},pascal:{title:"Pascal",alias:"objectpascal",aliasTitles:{objectpascal:"Object Pascal"},owner:"Golmote"},pascaligo:{title:"Pascaligo",owner:"DefinitelyNotAGoat"},psl:{title:"PATROL Scripting Language",owner:"bertysentry"},pcaxis:{title:"PC-Axis",alias:"px",owner:"RunDevelopment"},peoplecode:{title:"PeopleCode",alias:"pcode",owner:"RunDevelopment"},perl:{title:"Perl",owner:"Golmote"},php:{title:"PHP",require:"markup-templating",owner:"milesj"},phpdoc:{title:"PHPDoc",require:["php","javadoclike"],modify:"php",owner:"RunDevelopment"},"php-extras":{title:"PHP Extras",require:"php",modify:"php",owner:"milesj"},"plant-uml":{title:"PlantUML",alias:"plantuml",owner:"RunDevelopment"},plsql:{title:"PL/SQL",require:"sql",owner:"Golmote"},powerquery:{title:"PowerQuery",alias:["pq","mscript"],owner:"peterbud"},powershell:{title:"PowerShell",owner:"nauzilus"},processing:{title:"Processing",require:"clike",owner:"Golmote"},prolog:{title:"Prolog",owner:"Golmote"},promql:{title:"PromQL",owner:"arendjr"},properties:{title:".properties",owner:"Golmote"},protobuf:{title:"Protocol Buffers",require:"clike",owner:"just-boris"},pug:{title:"Pug",require:["markup","javascript"],optional:["coffeescript","ejs","handlebars","less","livescript","markdown","scss","stylus","twig"],owner:"Golmote"},puppet:{title:"Puppet",owner:"Golmote"},pure:{title:"Pure",optional:["c","cpp","fortran"],owner:"Golmote"},purebasic:{title:"PureBasic",require:"clike",alias:"pbfasm",owner:"HeX0R101"},purescript:{title:"PureScript",require:"haskell",alias:"purs",owner:"sriharshachilakapati"},python:{title:"Python",alias:"py",owner:"multipetros"},qsharp:{title:"Q#",require:"clike",alias:"qs",owner:"fedonman"},q:{title:"Q (kdb+ database)",owner:"Golmote"},qml:{title:"QML",require:"javascript",owner:"RunDevelopment"},qore:{title:"Qore",require:"clike",owner:"temnroegg"},r:{title:"R",owner:"Golmote"},racket:{title:"Racket",require:"scheme",alias:"rkt",owner:"RunDevelopment"},cshtml:{title:"Razor C#",alias:"razor",require:["markup","csharp"],optional:["css","css-extras","javascript","js-extras"],owner:"RunDevelopment"},jsx:{title:"React JSX",require:["markup","javascript"],optional:["jsdoc","js-extras","js-templates"],owner:"vkbansal"},tsx:{title:"React TSX",require:["jsx","typescript"]},reason:{title:"Reason",require:"clike",owner:"Golmote"},regex:{title:"Regex",owner:"RunDevelopment"},rego:{title:"Rego",owner:"JordanSh"},renpy:{title:"Ren'py",alias:"rpy",owner:"HyuchiaDiego"},rescript:{title:"ReScript",alias:"res",owner:"vmarcosp"},rest:{title:"reST (reStructuredText)",owner:"Golmote"},rip:{title:"Rip",owner:"ravinggenius"},roboconf:{title:"Roboconf",owner:"Golmote"},robotframework:{title:"Robot Framework",alias:"robot",owner:"RunDevelopment"},ruby:{title:"Ruby",require:"clike",alias:"rb",owner:"samflores"},rust:{title:"Rust",owner:"Golmote"},sas:{title:"SAS",optional:["groovy","lua","sql"],owner:"Golmote"},sass:{title:"Sass (Sass)",require:"css",optional:"css-extras",owner:"Golmote"},scss:{title:"Sass (SCSS)",require:"css",optional:"css-extras",owner:"MoOx"},scala:{title:"Scala",require:"java",owner:"jozic"},scheme:{title:"Scheme",owner:"bacchus123"},"shell-session":{title:"Shell session",require:"bash",alias:["sh-session","shellsession"],owner:"RunDevelopment"},smali:{title:"Smali",owner:"RunDevelopment"},smalltalk:{title:"Smalltalk",owner:"Golmote"},smarty:{title:"Smarty",require:"markup-templating",optional:"php",owner:"Golmote"},sml:{title:"SML",alias:"smlnj",aliasTitles:{smlnj:"SML/NJ"},owner:"RunDevelopment"},solidity:{title:"Solidity (Ethereum)",alias:"sol",require:"clike",owner:"glachaud"},"solution-file":{title:"Solution file",alias:"sln",owner:"RunDevelopment"},soy:{title:"Soy (Closure Template)",require:"markup-templating",owner:"Golmote"},sparql:{title:"SPARQL",require:"turtle",owner:"Triply-Dev",alias:"rq"},"splunk-spl":{title:"Splunk SPL",owner:"RunDevelopment"},sqf:{title:"SQF: Status Quo Function (Arma 3)",require:"clike",owner:"RunDevelopment"},sql:{title:"SQL",owner:"multipetros"},squirrel:{title:"Squirrel",require:"clike",owner:"RunDevelopment"},stan:{title:"Stan",owner:"RunDevelopment"},stata:{title:"Stata Ado",require:["mata","java","python"],owner:"RunDevelopment"},iecst:{title:"Structured Text (IEC 61131-3)",owner:"serhioromano"},stylus:{title:"Stylus",owner:"vkbansal"},supercollider:{title:"SuperCollider",alias:"sclang",owner:"RunDevelopment"},swift:{title:"Swift",owner:"chrischares"},systemd:{title:"Systemd configuration file",owner:"RunDevelopment"},"t4-templating":{title:"T4 templating",owner:"RunDevelopment"},"t4-cs":{title:"T4 Text Templates (C#)",require:["t4-templating","csharp"],alias:"t4",owner:"RunDevelopment"},"t4-vb":{title:"T4 Text Templates (VB)",require:["t4-templating","vbnet"],owner:"RunDevelopment"},tap:{title:"TAP",owner:"isaacs",require:"yaml"},tcl:{title:"Tcl",owner:"PeterChaplin"},tt2:{title:"Template Toolkit 2",require:["clike","markup-templating"],owner:"gflohr"},textile:{title:"Textile",require:"markup",optional:"css",owner:"Golmote"},toml:{title:"TOML",owner:"RunDevelopment"},tremor:{title:"Tremor",alias:["trickle","troy"],owner:"darach",aliasTitles:{trickle:"trickle",troy:"troy"}},turtle:{title:"Turtle",alias:"trig",aliasTitles:{trig:"TriG"},owner:"jakubklimek"},twig:{title:"Twig",require:"markup-templating",owner:"brandonkelly"},typescript:{title:"TypeScript",require:"javascript",optional:"js-templates",alias:"ts",owner:"vkbansal"},typoscript:{title:"TypoScript",alias:"tsconfig",aliasTitles:{tsconfig:"TSConfig"},owner:"dkern"},unrealscript:{title:"UnrealScript",alias:["uscript","uc"],owner:"RunDevelopment"},uorazor:{title:"UO Razor Script",owner:"jaseowns"},uri:{title:"URI",alias:"url",aliasTitles:{url:"URL"},owner:"RunDevelopment"},v:{title:"V",require:"clike",owner:"taggon"},vala:{title:"Vala",require:"clike",optional:"regex",owner:"TemplarVolk"},vbnet:{title:"VB.Net",require:"basic",owner:"Bigsby"},velocity:{title:"Velocity",require:"markup",owner:"Golmote"},verilog:{title:"Verilog",owner:"a-rey"},vhdl:{title:"VHDL",owner:"a-rey"},vim:{title:"vim",owner:"westonganger"},"visual-basic":{title:"Visual Basic",alias:["vb","vba"],aliasTitles:{vba:"VBA"},owner:"Golmote"},warpscript:{title:"WarpScript",owner:"RunDevelopment"},wasm:{title:"WebAssembly",owner:"Golmote"},"web-idl":{title:"Web IDL",alias:"webidl",owner:"RunDevelopment"},wgsl:{title:"WGSL",owner:"Dr4gonthree"},wiki:{title:"Wiki markup",require:"markup",owner:"Golmote"},wolfram:{title:"Wolfram language",alias:["mathematica","nb","wl"],aliasTitles:{mathematica:"Mathematica",nb:"Mathematica Notebook"},owner:"msollami"},wren:{title:"Wren",owner:"clsource"},xeora:{title:"Xeora",require:"markup",alias:"xeoracube",aliasTitles:{xeoracube:"XeoraCube"},owner:"freakmaxi"},"xml-doc":{title:"XML doc (.net)",require:"markup",modify:["csharp","fsharp","vbnet"],owner:"RunDevelopment"},xojo:{title:"Xojo (REALbasic)",owner:"Golmote"},xquery:{title:"XQuery",require:"markup",owner:"Golmote"},yaml:{title:"YAML",alias:"yml",owner:"hason"},yang:{title:"YANG",owner:"RunDevelopment"},zig:{title:"Zig",owner:"RunDevelopment"}},plugins:{meta:{path:"plugins/{id}/prism-{id}",link:"plugins/{id}/"},"line-highlight":{title:"Line Highlight",description:"Highlights specific lines and/or line ranges."},"line-numbers":{title:"Line Numbers",description:"Line number at the beginning of code lines.",owner:"kuba-kubula"},"show-invisibles":{title:"Show Invisibles",description:"Show hidden characters such as tabs and line breaks.",optional:["autolinker","data-uri-highlight"]},autolinker:{title:"Autolinker",description:"Converts URLs and emails in code to clickable links. Parses Markdown links in comments."},wpd:{title:"WebPlatform Docs",description:'Makes tokens link to <a href="https://webplatform.github.io/docs/">WebPlatform.org documentation</a>. The links open in a new tab.'},"custom-class":{title:"Custom Class",description:"This plugin allows you to prefix Prism's default classes (<code>.comment</code> can become <code>.namespace--comment</code>) or replace them with your defined ones (like <code>.editor__comment</code>). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the <code>highlightAll</code> and <code>highlightAllUnder</code> methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},2885:(e,t,n)=>{const r=n(9901),a=n(9642),o=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...o,...Object.keys(Prism.languages)];a(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(6500).resolve(t)],delete Prism.languages[e],n(6500)(t),o.add(e)}))}i.silent=!1,e.exports=i},6726:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6726},6500:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6500},9642:e=>{"use strict";var t=function(){var e=function(){};function t(e,t){Array.isArray(e)?e.forEach(t):null!=e&&t(e,0)}function n(e){for(var t={},n=0,r=e.length;n<r;n++)t[e[n]]=!0;return t}function r(e){var n={},r=[];function a(r,o){if(!(r in n)){o.push(r);var i=o.indexOf(r);if(i<o.length-1)throw new Error("Circular dependency: "+o.slice(i).join(" -> "));var l={},s=e[r];if(s){function u(t){if(!(t in e))throw new Error(r+" depends on an unknown component "+t);if(!(t in l))for(var i in a(t,o),l[t]=!0,n[t])l[i]=!0}t(s.require,u),t(s.optional,u),t(s.modify,u)}n[r]=l,o.pop()}}return function(e){var t=n[e];return t||(a(e,r),t=n[e]),t}}function a(e){for(var t in e)return!0;return!1}return function(o,i,l){var s=function(e){var t={};for(var n in e){var r=e[n];for(var a in r)if("meta"!=a){var o=r[a];t[a]="string"==typeof o?{title:o}:o}}return t}(o),u=function(e){var n;return function(r){if(r in e)return r;if(!n)for(var a in n={},e){var o=e[a];t(o&&o.alias,(function(t){if(t in n)throw new Error(t+" cannot be alias for both "+a+" and "+n[t]);if(t in e)throw new Error(t+" cannot be alias of "+a+" because it is a component.");n[t]=a}))}return n[r]||r}}(s);i=i.map(u),l=(l||[]).map(u);var c=n(i),d=n(l);i.forEach((function e(n){var r=s[n];t(r&&r.require,(function(t){t in d||(c[t]=!0,e(t))}))}));for(var f,p=r(s),m=c;a(m);){for(var h in f={},m){var g=s[h];t(g&&g.modify,(function(e){e in d&&(f[e]=!0)}))}for(var v in d)if(!(v in c))for(var b in p(v))if(b in c){f[v]=!0;break}for(var y in m=f)c[y]=!0}var w={getIds:function(){var e=[];return w.load((function(t){e.push(t)})),e},load:function(t,n){return function(t,n,r,a){var o=a?a.series:void 0,i=a?a.parallel:e,l={},s={};function u(e){if(e in l)return l[e];s[e]=!0;var a,c=[];for(var d in t(e))d in n&&c.push(d);if(0===c.length)a=r(e);else{var f=i(c.map((function(e){var t=u(e);return delete s[e],t})));o?a=o(f,(function(){return r(e)})):r(e)}return l[e]=a}for(var c in n)u(c);var d=[];for(var f in s)d.push(l[f]);return i(d)}(p,c,t,n)}};return w}}();e.exports=t},2703:(e,t,n)=>{"use strict";var r=n(414);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,i){if(i!==r){var l=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw l.name="Invariant Violation",l}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},5697:(e,t,n)=>{e.exports=n(2703)()},414:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},4448:(e,t,n)=>{"use strict";var r=n(7294),a=n(7418),o=n(3840);function i(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(i(227));var l=new Set,s={};function u(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(s[e]=t,e=0;e<t.length;e++)l.add(t[e])}var d=!("undefined"==typeof window||void 0===window.document||void 0===window.document.createElement),f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p=Object.prototype.hasOwnProperty,m={},h={};function g(e,t,n,r,a,o,i){this.acceptsBooleans=2===t||3===t||4===t,this.attributeName=r,this.attributeNamespace=a,this.mustUseProperty=n,this.propertyName=e,this.type=t,this.sanitizeURL=o,this.removeEmptyString=i}var v={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach((function(e){v[e]=new g(e,0,!1,e,null,!1,!1)})),[["acceptCharset","accept-charset"],["className","class"],["htmlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];v[t]=new g(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){v[e]=new g(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach((function(e){v[e]=new g(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach((function(e){v[e]=new g(e,3,!1,e.toLowerCase(),null,!1,!1)})),["checked","multiple","muted","selected"].forEach((function(e){v[e]=new g(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){v[e]=new g(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){v[e]=new g(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((function(e){v[e]=new g(e,5,!1,e.toLowerCase(),null,!1,!1)}));var b=/[\-:]([a-z])/g;function y(e){return e[1].toUpperCase()}function w(e,t,n,r){var a=v.hasOwnProperty(t)?v[t]:null;(null!==a?0===a.type:!r&&(2<t.length&&("o"===t[0]||"O"===t[0])&&("n"===t[1]||"N"===t[1])))||(function(e,t,n,r){if(null==t||function(e,t,n,r){if(null!==n&&0===n.type)return!1;switch(typeof t){case"function":case"symbol":return!0;case"boolean":return!r&&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)||1>t}return!1}(t,n,a,r)&&(n=null),r||null===a?function(e){return!!p.call(h,e)||!p.call(m,e)&&(f.test(e)?h[e]=!0:(m[e]=!0,!1))}(t)&&(null===n?e.removeAttribute(t):e.setAttribute(t,""+n)):a.mustUseProperty?e[a.propertyName]=null===n?3!==a.type&&"":n:(t=a.attributeName,r=a.attributeNamespace,null===n?e.removeAttribute(t):(n=3===(a=a.type)||4===a&&!0===n?"":""+n,r?e.setAttributeNS(r,t,n):e.setAttribute(t,n))))}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-position overline-thickness paint-order panose-1 pointer-events rendering-intent shape-rendering stop-color stop-opacity strikethrough-position strikethrough-thickness stroke-dasharray stroke-dashoffset stroke-linecap stroke-linejoin stroke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var t=e.replace(b,y);v[t]=new g(t,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole xlink:role xlink:show xlink:title xlink:type".split(" ").forEach((function(e){var t=e.replace(b,y);v[t]=new g(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(b,y);v[t]=new g(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){v[e]=new g(e,1,!1,e.toLowerCase(),null,!1,!1)})),v.xlinkHref=new g("xlinkHref",1,!1,"xlink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){v[e]=new g(e,1,!1,e.toLowerCase(),null,!0,!0)}));var k=r.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,E=60103,S=60106,x=60107,T=60108,C=60114,_=60109,L=60110,R=60112,A=60113,N=60120,P=60115,O=60116,I=60121,D=60128,M=60129,F=60130,B=60131;if("function"==typeof Symbol&&Symbol.for){var j=Symbol.for;E=j("react.element"),S=j("react.portal"),x=j("react.fragment"),T=j("react.strict_mode"),C=j("react.profiler"),_=j("react.provider"),L=j("react.context"),R=j("react.forward_ref"),A=j("react.suspense"),N=j("react.suspense_list"),P=j("react.memo"),O=j("react.lazy"),I=j("react.block"),j("react.scope"),D=j("react.opaque.id"),M=j("react.debug_trace_mode"),F=j("react.offscreen"),B=j("react.legacy_hidden")}var z,$="function"==typeof Symbol&&Symbol.iterator;function U(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=$&&e[$]||e["@@iterator"])?e:null}function q(e){if(void 0===z)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);z=t&&t[1]||""}return"\n"+z+e}var H=!1;function G(e,t){if(!e||H)return"";H=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.construct(t,[])}catch(s){var r=s}Reflect.construct(e,[],t)}else{try{t.call()}catch(s){r=s}e.call(t.prototype)}else{try{throw Error()}catch(s){r=s}e()}}catch(s){if(s&&r&&"string"==typeof s.stack){for(var a=s.stack.split("\n"),o=r.stack.split("\n"),i=a.length-1,l=o.length-1;1<=i&&0<=l&&a[i]!==o[l];)l--;for(;1<=i&&0<=l;i--,l--)if(a[i]!==o[l]){if(1!==i||1!==l)do{if(i--,0>--l||a[i]!==o[l])return"\n"+a[i].replace(" at new "," at ")}while(1<=i&&0<=l);break}}}finally{H=!1,Error.prepareStackTrace=n}return(e=e?e.displayName||e.name:"")?q(e):""}function Z(e){switch(e.tag){case 5:return q(e.type);case 16:return q("Lazy");case 13:return q("Suspense");case 19:return q("SuspenseList");case 0:case 2:case 15:return e=G(e.type,!1);case 11:return e=G(e.type.render,!1);case 22:return e=G(e.type._render,!1);case 1:return e=G(e.type,!0);default:return""}}function Q(e){if(null==e)return null;if("function"==typeof e)return e.displayName||e.name||null;if("string"==typeof e)return e;switch(e){case x:return"Fragment";case S:return"Portal";case C:return"Profiler";case T:return"StrictMode";case A:return"Suspense";case N:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case L:return(e.displayName||"Context")+".Consumer";case _:return(e._context.displayName||"Context")+".Provider";case R:var t=e.render;return t=t.displayName||t.name||"",e.displayName||(""!==t?"ForwardRef("+t+")":"ForwardRef");case P:return Q(e.type);case I:return Q(e._render);case O:t=e._payload,e=e._init;try{return Q(e(t))}catch(n){}}return null}function V(e){switch(typeof e){case"boolean":case"number":case"object":case"string":case"undefined":return e;default:return""}}function W(e){var t=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===t||"radio"===t)}function K(e){e._valueTracker||(e._valueTracker=function(e){var t=W(e)?"checked":"value",n=Object.getOwnPropertyDescriptor(e.constructor.prototype,t),r=""+e[t];if(!e.hasOwnProperty(t)&&void 0!==n&&"function"==typeof n.get&&"function"==typeof n.set){var a=n.get,o=n.set;return Object.defineProperty(e,t,{configurable:!0,get:function(){return a.call(this)},set:function(e){r=""+e,o.call(this,e)}}),Object.defineProperty(e,t,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[t]}}}}(e))}function Y(e){if(!e)return!1;var t=e._valueTracker;if(!t)return!0;var n=t.getValue(),r="";return e&&(r=W(e)?e.checked?"true":"false":e.value),(e=r)!==n&&(t.setValue(e),!0)}function X(e){if(void 0===(e=e||("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement||e.body}catch(t){return e.body}}function J(e,t){var n=t.checked;return a({},t,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=n?n:e._wrapperState.initialChecked})}function ee(e,t){var n=null==t.defaultValue?"":t.defaultValue,r=null!=t.checked?t.checked:t.defaultChecked;n=V(null!=t.value?t.value:n),e._wrapperState={initialChecked:r,initialValue:n,controlled:"checkbox"===t.type||"radio"===t.type?null!=t.checked:null!=t.value}}function te(e,t){null!=(t=t.checked)&&w(e,"checked",t,!1)}function ne(e,t){te(e,t);var n=V(t.value),r=t.type;if(null!=n)"number"===r?(0===n&&""===e.value||e.value!=n)&&(e.value=""+n):e.value!==""+n&&(e.value=""+n);else if("submit"===r||"reset"===r)return void e.removeAttribute("value");t.hasOwnProperty("value")?ae(e,t.type,n):t.hasOwnProperty("defaultValue")&&ae(e,t.type,V(t.defaultValue)),null==t.checked&&null!=t.defaultChecked&&(e.defaultChecked=!!t.defaultChecked)}function re(e,t,n){if(t.hasOwnProperty("value")||t.hasOwnProperty("defaultValue")){var r=t.type;if(!("submit"!==r&&"reset"!==r||void 0!==t.value&&null!==t.value))return;t=""+e._wrapperState.initialValue,n||t===e.value||(e.value=t),e.defaultValue=t}""!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function ae(e,t,n){"number"===t&&X(e.ownerDocument)===e||(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultValue=""+n))}function oe(e,t){return e=a({children:void 0},t),(t=function(e){var t="";return r.Children.forEach(e,(function(e){null!=e&&(t+=e)})),t}(t.children))&&(e.children=t),e}function ie(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a<n.length;a++)t["$"+n[a]]=!0;for(n=0;n<e.length;n++)a=t.hasOwnProperty("$"+e[n].value),e[n].selected!==a&&(e[n].selected=a),a&&r&&(e[n].defaultSelected=!0)}else{for(n=""+V(n),t=null,a=0;a<e.length;a++){if(e[a].value===n)return e[a].selected=!0,void(r&&(e[a].defaultSelected=!0));null!==t||e[a].disabled||(t=e[a])}null!==t&&(t.selected=!0)}}function le(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(i(91));return a({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initialValue})}function se(e,t){var n=t.value;if(null==n){if(n=t.children,t=t.defaultValue,null!=n){if(null!=t)throw Error(i(92));if(Array.isArray(n)){if(!(1>=n.length))throw Error(i(93));n=n[0]}t=n}null==t&&(t=""),n=t}e._wrapperState={initialValue:V(n)}}function ue(e,t){var n=V(t.value),r=V(t.defaultValue);null!=n&&((n=""+n)!==e.value&&(e.value=n),null==t.defaultValue&&e.defaultValue!==n&&(e.defaultValue=n)),null!=r&&(e.defaultValue=""+r)}function ce(e){var t=e.textContent;t===e._wrapperState.initialValue&&""!==t&&null!==t&&(e.value=t)}var de="http://www.w3.org/1999/xhtml",fe="http://www.w3.org/2000/svg";function pe(e){switch(e){case"svg":return"http://www.w3.org/2000/svg";case"math":return"http://www.w3.org/1998/Math/MathML";default:return"http://www.w3.org/1999/xhtml"}}function me(e,t){return null==e||"http://www.w3.org/1999/xhtml"===e?pe(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var he,ge,ve=(ge=function(e,t){if(e.namespaceURI!==fe||"innerHTML"in e)e.innerHTML=t;else{for((he=he||document.createElement("div")).innerHTML="<svg>"+t.valueOf().toString()+"</svg>",t=he.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function be(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var ye={animationIterationCount:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,columnCount:!0,columns:!0,flex:!0,flexGrow:!0,flexPositive:!0,flexShrink:!0,flexNegative:!0,flexOrder:!0,gridArea:!0,gridRow:!0,gridRowEnd:!0,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},we=["Webkit","ms","Moz","O"];function ke(e,t,n){return null==t||"boolean"==typeof t||""===t?"":n||"number"!=typeof t||0===t||ye.hasOwnProperty(e)&&ye[e]?(""+t).trim():t+"px"}function Ee(e,t){for(var n in e=e.style,t)if(t.hasOwnProperty(n)){var r=0===n.indexOf("--"),a=ke(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,a):e[n]=a}}Object.keys(ye).forEach((function(e){we.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),ye[t]=ye[e]}))}));var Se=a({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function xe(e,t){if(t){if(Se[e]&&(null!=t.children||null!=t.dangerouslySetInnerHTML))throw Error(i(137,e));if(null!=t.dangerouslySetInnerHTML){if(null!=t.children)throw Error(i(60));if("object"!=typeof t.dangerouslySetInnerHTML||!("__html"in t.dangerouslySetInnerHTML))throw Error(i(61))}if(null!=t.style&&"object"!=typeof t.style)throw Error(i(62))}}function Te(e,t){if(-1===e.indexOf("-"))return"string"==typeof t.is;switch(e){case"annotation-xml":case"color-profile":case"font-face":case"font-face-src":case"font-face-uri":case"font-face-format":case"font-face-name":case"missing-glyph":return!1;default:return!0}}function Ce(e){return(e=e.target||e.srcElement||window).correspondingUseElement&&(e=e.correspondingUseElement),3===e.nodeType?e.parentNode:e}var _e=null,Le=null,Re=null;function Ae(e){if(e=ra(e)){if("function"!=typeof _e)throw Error(i(280));var t=e.stateNode;t&&(t=oa(t),_e(e.stateNode,e.type,t))}}function Ne(e){Le?Re?Re.push(e):Re=[e]:Le=e}function Pe(){if(Le){var e=Le,t=Re;if(Re=Le=null,Ae(e),t)for(e=0;e<t.length;e++)Ae(t[e])}}function Oe(e,t){return e(t)}function Ie(e,t,n,r,a){return e(t,n,r,a)}function De(){}var Me=Oe,Fe=!1,Be=!1;function je(){null===Le&&null===Re||(De(),Pe())}function ze(e,t){var n=e.stateNode;if(null===n)return null;var r=oa(n);if(null===r)return null;n=r[t];e:switch(t){case"onClick":case"onClickCapture":case"onDoubleClick":case"onDoubleClickCapture":case"onMouseDown":case"onMouseDownCapture":case"onMouseMove":case"onMouseMoveCapture":case"onMouseUp":case"onMouseUpCapture":case"onMouseEnter":(r=!r.disabled)||(r=!("button"===(e=e.type)||"input"===e||"select"===e||"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!=typeof n)throw Error(i(231,t,typeof n));return n}var $e=!1;if(d)try{var Ue={};Object.defineProperty(Ue,"passive",{get:function(){$e=!0}}),window.addEventListener("test",Ue,Ue),window.removeEventListener("test",Ue,Ue)}catch(ge){$e=!1}function qe(e,t,n,r,a,o,i,l,s){var u=Array.prototype.slice.call(arguments,3);try{t.apply(n,u)}catch(c){this.onError(c)}}var He=!1,Ge=null,Ze=!1,Qe=null,Ve={onError:function(e){He=!0,Ge=e}};function We(e,t,n,r,a,o,i,l,s){He=!1,Ge=null,qe.apply(Ve,arguments)}function Ke(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!=(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ye(e){if(13===e.tag){var t=e.memoizedState;if(null===t&&(null!==(e=e.alternate)&&(t=e.memoizedState)),null!==t)return t.dehydrated}return null}function Xe(e){if(Ke(e)!==e)throw Error(i(188))}function Je(e){if(e=function(e){var t=e.alternate;if(!t){if(null===(t=Ke(e)))throw Error(i(188));return t!==e?null:e}for(var n=e,r=t;;){var a=n.return;if(null===a)break;var o=a.alternate;if(null===o){if(null!==(r=a.return)){n=r;continue}break}if(a.child===o.child){for(o=a.child;o;){if(o===n)return Xe(a),e;if(o===r)return Xe(a),t;o=o.sibling}throw Error(i(188))}if(n.return!==r.return)n=a,r=o;else{for(var l=!1,s=a.child;s;){if(s===n){l=!0,n=a,r=o;break}if(s===r){l=!0,r=a,n=o;break}s=s.sibling}if(!l){for(s=o.child;s;){if(s===n){l=!0,n=o,r=a;break}if(s===r){l=!0,r=o,n=a;break}s=s.sibling}if(!l)throw Error(i(189))}}if(n.alternate!==r)throw Error(i(190))}if(3!==n.tag)throw Error(i(188));return n.stateNode.current===n?e:t}(e),!e)return null;for(var t=e;;){if(5===t.tag||6===t.tag)return t;if(t.child)t.child.return=t,t=t.child;else{if(t===e)break;for(;!t.sibling;){if(!t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}}return null}function et(e,t){for(var n=e.alternate;null!==t;){if(t===e||t===n)return!0;t=t.return}return!1}var tt,nt,rt,at,ot=!1,it=[],lt=null,st=null,ut=null,ct=new Map,dt=new Map,ft=[],pt="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend dragstart drop compositionend compositionstart keydown keypress keyup input textInput copy cut paste click change contextmenu reset submit".split(" ");function mt(e,t,n,r,a){return{blockedOn:e,domEventName:t,eventSystemFlags:16|n,nativeEvent:a,targetContainers:[r]}}function ht(e,t){switch(e){case"focusin":case"focusout":lt=null;break;case"dragenter":case"dragleave":st=null;break;case"mouseover":case"mouseout":ut=null;break;case"pointerover":case"pointerout":ct.delete(t.pointerId);break;case"gotpointercapture":case"lostpointercapture":dt.delete(t.pointerId)}}function gt(e,t,n,r,a,o){return null===e||e.nativeEvent!==o?(e=mt(t,n,r,a,o),null!==t&&(null!==(t=ra(t))&&nt(t)),e):(e.eventSystemFlags|=r,t=e.targetContainers,null!==a&&-1===t.indexOf(a)&&t.push(a),e)}function vt(e){var t=na(e.target);if(null!==t){var n=Ke(t);if(null!==n)if(13===(t=n.tag)){if(null!==(t=Ye(n)))return e.blockedOn=t,void at(e.lanePriority,(function(){o.unstable_runWithPriority(e.priority,(function(){rt(n)}))}))}else if(3===t&&n.stateNode.hydrate)return void(e.blockedOn=3===n.tag?n.stateNode.containerInfo:null)}e.blockedOn=null}function bt(e){if(null!==e.blockedOn)return!1;for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n)return null!==(t=ra(n))&&nt(t),e.blockedOn=n,!1;t.shift()}return!0}function yt(e,t,n){bt(e)&&n.delete(t)}function wt(){for(ot=!1;0<it.length;){var e=it[0];if(null!==e.blockedOn){null!==(e=ra(e.blockedOn))&&tt(e);break}for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n){e.blockedOn=n;break}t.shift()}null===e.blockedOn&&it.shift()}null!==lt&&bt(lt)&&(lt=null),null!==st&&bt(st)&&(st=null),null!==ut&&bt(ut)&&(ut=null),ct.forEach(yt),dt.forEach(yt)}function kt(e,t){e.blockedOn===t&&(e.blockedOn=null,ot||(ot=!0,o.unstable_scheduleCallback(o.unstable_NormalPriority,wt)))}function Et(e){function t(t){return kt(t,e)}if(0<it.length){kt(it[0],e);for(var n=1;n<it.length;n++){var r=it[n];r.blockedOn===e&&(r.blockedOn=null)}}for(null!==lt&&kt(lt,e),null!==st&&kt(st,e),null!==ut&&kt(ut,e),ct.forEach(t),dt.forEach(t),n=0;n<ft.length;n++)(r=ft[n]).blockedOn===e&&(r.blockedOn=null);for(;0<ft.length&&null===(n=ft[0]).blockedOn;)vt(n),null===n.blockedOn&&ft.shift()}function St(e,t){var n={};return n[e.toLowerCase()]=t.toLowerCase(),n["Webkit"+e]="webkit"+t,n["Moz"+e]="moz"+t,n}var xt={animationend:St("Animation","AnimationEnd"),animationiteration:St("Animation","AnimationIteration"),animationstart:St("Animation","AnimationStart"),transitionend:St("Transition","TransitionEnd")},Tt={},Ct={};function _t(e){if(Tt[e])return Tt[e];if(!xt[e])return e;var t,n=xt[e];for(t in n)if(n.hasOwnProperty(t)&&t in Ct)return Tt[e]=n[t];return e}d&&(Ct=document.createElement("div").style,"AnimationEvent"in window||(delete xt.animationend.animation,delete xt.animationiteration.animation,delete xt.animationstart.animation),"TransitionEvent"in window||delete xt.transitionend.transition);var Lt=_t("animationend"),Rt=_t("animationiteration"),At=_t("animationstart"),Nt=_t("transitionend"),Pt=new Map,Ot=new Map,It=["abort","abort",Lt,"animationEnd",Rt,"animationIteration",At,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange","durationChange","emptied","emptied","encrypted","encrypted","ended","ended","error","error","gotpointercapture","gotPointerCapture","load","load","loadeddata","loadedData","loadedmetadata","loadedMetadata","loadstart","loadStart","lostpointercapture","lostPointerCapture","playing","playing","progress","progress","seeking","seeking","stalled","stalled","suspend","suspend","timeupdate","timeUpdate",Nt,"transitionEnd","waiting","waiting"];function Dt(e,t){for(var n=0;n<e.length;n+=2){var r=e[n],a=e[n+1];a="on"+(a[0].toUpperCase()+a.slice(1)),Ot.set(r,t),Pt.set(r,a),u(a,[r])}}(0,o.unstable_now)();var Mt=8;function Ft(e){if(0!=(1&e))return Mt=15,1;if(0!=(2&e))return Mt=14,2;if(0!=(4&e))return Mt=13,4;var t=24&e;return 0!==t?(Mt=12,t):0!=(32&e)?(Mt=11,32):0!==(t=192&e)?(Mt=10,t):0!=(256&e)?(Mt=9,256):0!==(t=3584&e)?(Mt=8,t):0!=(4096&e)?(Mt=7,4096):0!==(t=4186112&e)?(Mt=6,t):0!==(t=62914560&e)?(Mt=5,t):67108864&e?(Mt=4,67108864):0!=(134217728&e)?(Mt=3,134217728):0!==(t=805306368&e)?(Mt=2,t):0!=(1073741824&e)?(Mt=1,1073741824):(Mt=8,e)}function Bt(e,t){var n=e.pendingLanes;if(0===n)return Mt=0;var r=0,a=0,o=e.expiredLanes,i=e.suspendedLanes,l=e.pingedLanes;if(0!==o)r=o,a=Mt=15;else if(0!==(o=134217727&n)){var s=o&~i;0!==s?(r=Ft(s),a=Mt):0!==(l&=o)&&(r=Ft(l),a=Mt)}else 0!==(o=n&~i)?(r=Ft(o),a=Mt):0!==l&&(r=Ft(l),a=Mt);if(0===r)return 0;if(r=n&((0>(r=31-Ht(r))?0:1<<r)<<1)-1,0!==t&&t!==r&&0==(t&i)){if(Ft(t),a<=Mt)return t;Mt=a}if(0!==(t=e.entangledLanes))for(e=e.entanglements,t&=r;0<t;)a=1<<(n=31-Ht(t)),r|=e[n],t&=~a;return r}function jt(e){return 0!==(e=-1073741825&e.pendingLanes)?e:1073741824&e?1073741824:0}function zt(e,t){switch(e){case 15:return 1;case 14:return 2;case 12:return 0===(e=$t(24&~t))?zt(10,t):e;case 10:return 0===(e=$t(192&~t))?zt(8,t):e;case 8:return 0===(e=$t(3584&~t))&&(0===(e=$t(4186112&~t))&&(e=512)),e;case 2:return 0===(t=$t(805306368&~t))&&(t=268435456),t}throw Error(i(358,e))}function $t(e){return e&-e}function Ut(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function qt(e,t,n){e.pendingLanes|=t;var r=t-1;e.suspendedLanes&=r,e.pingedLanes&=r,(e=e.eventTimes)[t=31-Ht(t)]=n}var Ht=Math.clz32?Math.clz32:function(e){return 0===e?32:31-(Gt(e)/Zt|0)|0},Gt=Math.log,Zt=Math.LN2;var Qt=o.unstable_UserBlockingPriority,Vt=o.unstable_runWithPriority,Wt=!0;function Kt(e,t,n,r){Fe||De();var a=Xt,o=Fe;Fe=!0;try{Ie(a,e,t,n,r)}finally{(Fe=o)||je()}}function Yt(e,t,n,r){Vt(Qt,Xt.bind(null,e,t,n,r))}function Xt(e,t,n,r){var a;if(Wt)if((a=0==(4&t))&&0<it.length&&-1<pt.indexOf(e))e=mt(null,e,t,n,r),it.push(e);else{var o=Jt(e,t,n,r);if(null===o)a&&ht(e,r);else{if(a){if(-1<pt.indexOf(e))return e=mt(o,e,t,n,r),void it.push(e);if(function(e,t,n,r,a){switch(t){case"focusin":return lt=gt(lt,e,t,n,r,a),!0;case"dragenter":return st=gt(st,e,t,n,r,a),!0;case"mouseover":return ut=gt(ut,e,t,n,r,a),!0;case"pointerover":var o=a.pointerId;return ct.set(o,gt(ct.get(o)||null,e,t,n,r,a)),!0;case"gotpointercapture":return o=a.pointerId,dt.set(o,gt(dt.get(o)||null,e,t,n,r,a)),!0}return!1}(o,e,t,n,r))return;ht(e,r)}Dr(e,t,r,null,n)}}}function Jt(e,t,n,r){var a=Ce(r);if(null!==(a=na(a))){var o=Ke(a);if(null===o)a=null;else{var i=o.tag;if(13===i){if(null!==(a=Ye(o)))return a;a=null}else if(3===i){if(o.stateNode.hydrate)return 3===o.tag?o.stateNode.containerInfo:null;a=null}else o!==a&&(a=null)}}return Dr(e,t,r,a,n),null}var en=null,tn=null,nn=null;function rn(){if(nn)return nn;var e,t,n=tn,r=n.length,a="value"in en?en.value:en.textContent,o=a.length;for(e=0;e<r&&n[e]===a[e];e++);var i=r-e;for(t=1;t<=i&&n[r-t]===a[o-t];t++);return nn=a.slice(e,1<t?1-t:void 0)}function an(e){var t=e.keyCode;return"charCode"in e?0===(e=e.charCode)&&13===t&&(e=13):e=t,10===e&&(e=13),32<=e||13===e?e:0}function on(){return!0}function ln(){return!1}function sn(e){function t(t,n,r,a,o){for(var i in this._reactName=t,this._targetInst=r,this.type=n,this.nativeEvent=a,this.target=o,this.currentTarget=null,e)e.hasOwnProperty(i)&&(t=e[i],this[i]=t?t(a):a[i]);return this.isDefaultPrevented=(null!=a.defaultPrevented?a.defaultPrevented:!1===a.returnValue)?on:ln,this.isPropagationStopped=ln,this}return a(t.prototype,{preventDefault:function(){this.defaultPrevented=!0;var e=this.nativeEvent;e&&(e.preventDefault?e.preventDefault():"unknown"!=typeof e.returnValue&&(e.returnValue=!1),this.isDefaultPrevented=on)},stopPropagation:function(){var e=this.nativeEvent;e&&(e.stopPropagation?e.stopPropagation():"unknown"!=typeof e.cancelBubble&&(e.cancelBubble=!0),this.isPropagationStopped=on)},persist:function(){},isPersistent:on}),t}var un,cn,dn,fn={eventPhase:0,bubbles:0,cancelable:0,timeStamp:function(e){return e.timeStamp||Date.now()},defaultPrevented:0,isTrusted:0},pn=sn(fn),mn=a({},fn,{view:0,detail:0}),hn=sn(mn),gn=a({},mn,{screenX:0,screenY:0,clientX:0,clientY:0,pageX:0,pageY:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,getModifierState:Ln,button:0,buttons:0,relatedTarget:function(e){return void 0===e.relatedTarget?e.fromElement===e.srcElement?e.toElement:e.fromElement:e.relatedTarget},movementX:function(e){return"movementX"in e?e.movementX:(e!==dn&&(dn&&"mousemove"===e.type?(un=e.screenX-dn.screenX,cn=e.screenY-dn.screenY):cn=un=0,dn=e),un)},movementY:function(e){return"movementY"in e?e.movementY:cn}}),vn=sn(gn),bn=sn(a({},gn,{dataTransfer:0})),yn=sn(a({},mn,{relatedTarget:0})),wn=sn(a({},fn,{animationName:0,elapsedTime:0,pseudoElement:0})),kn=a({},fn,{clipboardData:function(e){return"clipboardData"in e?e.clipboardData:window.clipboardData}}),En=sn(kn),Sn=sn(a({},fn,{data:0})),xn={Esc:"Escape",Spacebar:" ",Left:"ArrowLeft",Up:"ArrowUp",Right:"ArrowRight",Down:"ArrowDown",Del:"Delete",Win:"OS",Menu:"ContextMenu",Apps:"ContextMenu",Scroll:"ScrollLock",MozPrintableKey:"Unidentified"},Tn={8:"Backspace",9:"Tab",12:"Clear",13:"Enter",16:"Shift",17:"Control",18:"Alt",19:"Pause",20:"CapsLock",27:"Escape",32:" ",33:"PageUp",34:"PageDown",35:"End",36:"Home",37:"ArrowLeft",38:"ArrowUp",39:"ArrowRight",40:"ArrowDown",45:"Insert",46:"Delete",112:"F1",113:"F2",114:"F3",115:"F4",116:"F5",117:"F6",118:"F7",119:"F8",120:"F9",121:"F10",122:"F11",123:"F12",144:"NumLock",145:"ScrollLock",224:"Meta"},Cn={Alt:"altKey",Control:"ctrlKey",Meta:"metaKey",Shift:"shiftKey"};function _n(e){var t=this.nativeEvent;return t.getModifierState?t.getModifierState(e):!!(e=Cn[e])&&!!t[e]}function Ln(){return _n}var Rn=a({},mn,{key:function(e){if(e.key){var t=xn[e.key]||e.key;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=an(e))?"Enter":String.fromCharCode(e):"keydown"===e.type||"keyup"===e.type?Tn[e.keyCode]||"Unidentified":""},code:0,location:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,repeat:0,locale:0,getModifierState:Ln,charCode:function(e){return"keypress"===e.type?an(e):0},keyCode:function(e){return"keydown"===e.type||"keyup"===e.type?e.keyCode:0},which:function(e){return"keypress"===e.type?an(e):"keydown"===e.type||"keyup"===e.type?e.keyCode:0}}),An=sn(Rn),Nn=sn(a({},gn,{pointerId:0,width:0,height:0,pressure:0,tangentialPressure:0,tiltX:0,tiltY:0,twist:0,pointerType:0,isPrimary:0})),Pn=sn(a({},mn,{touches:0,targetTouches:0,changedTouches:0,altKey:0,metaKey:0,ctrlKey:0,shiftKey:0,getModifierState:Ln})),On=sn(a({},fn,{propertyName:0,elapsedTime:0,pseudoElement:0})),In=a({},gn,{deltaX:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Dn=sn(In),Mn=[9,13,27,32],Fn=d&&"CompositionEvent"in window,Bn=null;d&&"documentMode"in document&&(Bn=document.documentMode);var jn=d&&"TextEvent"in window&&!Bn,zn=d&&(!Fn||Bn&&8<Bn&&11>=Bn),$n=String.fromCharCode(32),Un=!1;function qn(e,t){switch(e){case"keyup":return-1!==Mn.indexOf(t.keyCode);case"keydown":return 229!==t.keyCode;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function Hn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var Gn=!1;var Zn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function Qn(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return"input"===t?!!Zn[e.type]:"textarea"===t}function Vn(e,t,n,r){Ne(r),0<(t=Fr(t,"onChange")).length&&(n=new pn("onChange","change",null,n,r),e.push({event:n,listeners:t}))}var Wn=null,Kn=null;function Yn(e){Rr(e,0)}function Xn(e){if(Y(aa(e)))return e}function Jn(e,t){if("change"===e)return t}var er=!1;if(d){var tr;if(d){var nr="oninput"in document;if(!nr){var rr=document.createElement("div");rr.setAttribute("oninput","return;"),nr="function"==typeof rr.oninput}tr=nr}else tr=!1;er=tr&&(!document.documentMode||9<document.documentMode)}function ar(){Wn&&(Wn.detachEvent("onpropertychange",or),Kn=Wn=null)}function or(e){if("value"===e.propertyName&&Xn(Kn)){var t=[];if(Vn(t,Kn,e,Ce(e)),e=Yn,Fe)e(t);else{Fe=!0;try{Oe(e,t)}finally{Fe=!1,je()}}}}function ir(e,t,n){"focusin"===e?(ar(),Kn=n,(Wn=t).attachEvent("onpropertychange",or)):"focusout"===e&&ar()}function lr(e){if("selectionchange"===e||"keyup"===e||"keydown"===e)return Xn(Kn)}function sr(e,t){if("click"===e)return Xn(t)}function ur(e,t){if("input"===e||"change"===e)return Xn(t)}var cr="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},dr=Object.prototype.hasOwnProperty;function fr(e,t){if(cr(e,t))return!0;if("object"!=typeof e||null===e||"object"!=typeof t||null===t)return!1;var n=Object.keys(e),r=Object.keys(t);if(n.length!==r.length)return!1;for(r=0;r<n.length;r++)if(!dr.call(t,n[r])||!cr(e[n[r]],t[n[r]]))return!1;return!0}function pr(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function mr(e,t){var n,r=pr(e);for(e=0;r;){if(3===r.nodeType){if(n=e+r.textContent.length,e<=t&&n>=t)return{node:r,offset:t-e};e=n}e:{for(;r;){if(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=pr(r)}}function hr(e,t){return!(!e||!t)&&(e===t||(!e||3!==e.nodeType)&&(t&&3===t.nodeType?hr(e,t.parentNode):"contains"in e?e.contains(t):!!e.compareDocumentPosition&&!!(16&e.compareDocumentPosition(t))))}function gr(){for(var e=window,t=X();t instanceof e.HTMLIFrameElement;){try{var n="string"==typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=X((e=t.contentWindow).document)}return t}function vr(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&("input"===t&&("text"===e.type||"search"===e.type||"tel"===e.type||"url"===e.type||"password"===e.type)||"textarea"===t||"true"===e.contentEditable)}var br=d&&"documentMode"in document&&11>=document.documentMode,yr=null,wr=null,kr=null,Er=!1;function Sr(e,t,n){var r=n.window===n?n.document:9===n.nodeType?n:n.ownerDocument;Er||null==yr||yr!==X(r)||("selectionStart"in(r=yr)&&vr(r)?r={start:r.selectionStart,end:r.selectionEnd}:r={anchorNode:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&fr(kr,r)||(kr=r,0<(r=Fr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({event:t,listeners:r}),t.target=yr)))}Dt("cancel cancel click click close close contextmenu contextMenu copy copy cut cut auxclick auxClick dblclick doubleClick dragend dragEnd dragstart dragStart drop drop focusin focus focusout blur input input invalid invalid keydown keyDown keypress keyPress keyup keyUp mousedown mouseDown mouseup mouseUp paste paste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(" "),0),Dt("drag drag dragenter dragEnter dragexit dragExit dragleave dragLeave dragover dragOver mousemove mouseMove mouseout mouseOut mouseover mouseOver pointermove pointerMove pointerout pointerOut pointerover pointerOver scroll scroll toggle toggle touchmove touchMove wheel wheel".split(" "),1),Dt(It,2);for(var xr="change selectionchange textInput compositionstart compositionend compositionupdate".split(" "),Tr=0;Tr<xr.length;Tr++)Ot.set(xr[Tr],0);c("onMouseEnter",["mouseout","mouseover"]),c("onMouseLeave",["mouseout","mouseover"]),c("onPointerEnter",["pointerout","pointerover"]),c("onPointerLeave",["pointerout","pointerover"]),u("onChange","change click focusin focusout input keydown keyup selectionchange".split(" ")),u("onSelect","focusout contextmenu dragend focusin keydown keyup mousedown mouseup selectionchange".split(" ")),u("onBeforeInput",["compositionend","keypress","textInput","paste"]),u("onCompositionEnd","compositionend focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionStart","compositionstart focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionUpdate","compositionupdate focusout keydown keypress keyup mousedown".split(" "));var Cr="abort canplay canplaythrough durationchange emptied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend timeupdate volumechange waiting".split(" "),_r=new Set("cancel close invalid load scroll toggle".split(" ").concat(Cr));function Lr(e,t,n){var r=e.type||"unknown-event";e.currentTarget=n,function(e,t,n,r,a,o,l,s,u){if(We.apply(this,arguments),He){if(!He)throw Error(i(198));var c=Ge;He=!1,Ge=null,Ze||(Ze=!0,Qe=c)}}(r,t,void 0,e),e.currentTarget=null}function Rr(e,t){t=0!=(4&t);for(var n=0;n<e.length;n++){var r=e[n],a=r.event;r=r.listeners;e:{var o=void 0;if(t)for(var i=r.length-1;0<=i;i--){var l=r[i],s=l.instance,u=l.currentTarget;if(l=l.listener,s!==o&&a.isPropagationStopped())break e;Lr(a,l,u),o=s}else for(i=0;i<r.length;i++){if(s=(l=r[i]).instance,u=l.currentTarget,l=l.listener,s!==o&&a.isPropagationStopped())break e;Lr(a,l,u),o=s}}}if(Ze)throw e=Qe,Ze=!1,Qe=null,e}function Ar(e,t){var n=ia(t),r=e+"__bubble";n.has(r)||(Ir(t,e,2,!1),n.add(r))}var Nr="_reactListening"+Math.random().toString(36).slice(2);function Pr(e){e[Nr]||(e[Nr]=!0,l.forEach((function(t){_r.has(t)||Or(t,!1,e,null),Or(t,!0,e,null)})))}function Or(e,t,n,r){var a=4<arguments.length&&void 0!==arguments[4]?arguments[4]:0,o=n;if("selectionchange"===e&&9!==n.nodeType&&(o=n.ownerDocument),null!==r&&!t&&_r.has(e)){if("scroll"!==e)return;a|=2,o=r}var i=ia(o),l=e+"__"+(t?"capture":"bubble");i.has(l)||(t&&(a|=4),Ir(o,e,a,t),i.add(l))}function Ir(e,t,n,r){var a=Ot.get(t);switch(void 0===a?2:a){case 0:a=Kt;break;case 1:a=Yt;break;default:a=Xt}n=a.bind(null,t,n,e),a=void 0,!$e||"touchstart"!==t&&"touchmove"!==t&&"wheel"!==t||(a=!0),r?void 0!==a?e.addEventListener(t,n,{capture:!0,passive:a}):e.addEventListener(t,n,!0):void 0!==a?e.addEventListener(t,n,{passive:a}):e.addEventListener(t,n,!1)}function Dr(e,t,n,r,a){var o=r;if(0==(1&t)&&0==(2&t)&&null!==r)e:for(;;){if(null===r)return;var i=r.tag;if(3===i||4===i){var l=r.stateNode.containerInfo;if(l===a||8===l.nodeType&&l.parentNode===a)break;if(4===i)for(i=r.return;null!==i;){var s=i.tag;if((3===s||4===s)&&((s=i.stateNode.containerInfo)===a||8===s.nodeType&&s.parentNode===a))return;i=i.return}for(;null!==l;){if(null===(i=na(l)))return;if(5===(s=i.tag)||6===s){r=o=i;continue e}l=l.parentNode}}r=r.return}!function(e,t,n){if(Be)return e(t,n);Be=!0;try{Me(e,t,n)}finally{Be=!1,je()}}((function(){var r=o,a=Ce(n),i=[];e:{var l=Pt.get(e);if(void 0!==l){var s=pn,u=e;switch(e){case"keypress":if(0===an(n))break e;case"keydown":case"keyup":s=An;break;case"focusin":u="focus",s=yn;break;case"focusout":u="blur",s=yn;break;case"beforeblur":case"afterblur":s=yn;break;case"click":if(2===n.button)break e;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":s=vn;break;case"drag":case"dragend":case"dragenter":case"dragexit":case"dragleave":case"dragover":case"dragstart":case"drop":s=bn;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":s=Pn;break;case Lt:case Rt:case At:s=wn;break;case Nt:s=On;break;case"scroll":s=hn;break;case"wheel":s=Dn;break;case"copy":case"cut":case"paste":s=En;break;case"gotpointercapture":case"lostpointercapture":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":s=Nn}var c=0!=(4&t),d=!c&&"scroll"===e,f=c?null!==l?l+"Capture":null:l;c=[];for(var p,m=r;null!==m;){var h=(p=m).stateNode;if(5===p.tag&&null!==h&&(p=h,null!==f&&(null!=(h=ze(m,f))&&c.push(Mr(m,h,p)))),d)break;m=m.return}0<c.length&&(l=new s(l,u,null,n,a),i.push({event:l,listeners:c}))}}if(0==(7&t)){if(s="mouseout"===e||"pointerout"===e,(!(l="mouseover"===e||"pointerover"===e)||0!=(16&t)||!(u=n.relatedTarget||n.fromElement)||!na(u)&&!u[ea])&&(s||l)&&(l=a.window===a?a:(l=a.ownerDocument)?l.defaultView||l.parentWindow:window,s?(s=r,null!==(u=(u=n.relatedTarget||n.toElement)?na(u):null)&&(u!==(d=Ke(u))||5!==u.tag&&6!==u.tag)&&(u=null)):(s=null,u=r),s!==u)){if(c=vn,h="onMouseLeave",f="onMouseEnter",m="mouse","pointerout"!==e&&"pointerover"!==e||(c=Nn,h="onPointerLeave",f="onPointerEnter",m="pointer"),d=null==s?l:aa(s),p=null==u?l:aa(u),(l=new c(h,m+"leave",s,n,a)).target=d,l.relatedTarget=p,h=null,na(a)===r&&((c=new c(f,m+"enter",u,n,a)).target=p,c.relatedTarget=d,h=c),d=h,s&&u)e:{for(f=u,m=0,p=c=s;p;p=Br(p))m++;for(p=0,h=f;h;h=Br(h))p++;for(;0<m-p;)c=Br(c),m--;for(;0<p-m;)f=Br(f),p--;for(;m--;){if(c===f||null!==f&&c===f.alternate)break e;c=Br(c),f=Br(f)}c=null}else c=null;null!==s&&jr(i,l,s,c,!1),null!==u&&null!==d&&jr(i,d,u,c,!0)}if("select"===(s=(l=r?aa(r):window).nodeName&&l.nodeName.toLowerCase())||"input"===s&&"file"===l.type)var g=Jn;else if(Qn(l))if(er)g=ur;else{g=lr;var v=ir}else(s=l.nodeName)&&"input"===s.toLowerCase()&&("checkbox"===l.type||"radio"===l.type)&&(g=sr);switch(g&&(g=g(e,r))?Vn(i,g,n,a):(v&&v(e,l,r),"focusout"===e&&(v=l._wrapperState)&&v.controlled&&"number"===l.type&&ae(l,"number",l.value)),v=r?aa(r):window,e){case"focusin":(Qn(v)||"true"===v.contentEditable)&&(yr=v,wr=r,kr=null);break;case"focusout":kr=wr=yr=null;break;case"mousedown":Er=!0;break;case"contextmenu":case"mouseup":case"dragend":Er=!1,Sr(i,n,a);break;case"selectionchange":if(br)break;case"keydown":case"keyup":Sr(i,n,a)}var b;if(Fn)e:{switch(e){case"compositionstart":var y="onCompositionStart";break e;case"compositionend":y="onCompositionEnd";break e;case"compositionupdate":y="onCompositionUpdate";break e}y=void 0}else Gn?qn(e,n)&&(y="onCompositionEnd"):"keydown"===e&&229===n.keyCode&&(y="onCompositionStart");y&&(zn&&"ko"!==n.locale&&(Gn||"onCompositionStart"!==y?"onCompositionEnd"===y&&Gn&&(b=rn()):(tn="value"in(en=a)?en.value:en.textContent,Gn=!0)),0<(v=Fr(r,y)).length&&(y=new Sn(y,e,null,n,a),i.push({event:y,listeners:v}),b?y.data=b:null!==(b=Hn(n))&&(y.data=b))),(b=jn?function(e,t){switch(e){case"compositionend":return Hn(t);case"keypress":return 32!==t.which?null:(Un=!0,$n);case"textInput":return(e=t.data)===$n&&Un?null:e;default:return null}}(e,n):function(e,t){if(Gn)return"compositionend"===e||!Fn&&qn(e,t)?(e=rn(),nn=tn=en=null,Gn=!1,e):null;switch(e){case"paste":default:return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1<t.char.length)return t.char;if(t.which)return String.fromCharCode(t.which)}return null;case"compositionend":return zn&&"ko"!==t.locale?null:t.data}}(e,n))&&(0<(r=Fr(r,"onBeforeInput")).length&&(a=new Sn("onBeforeInput","beforeinput",null,n,a),i.push({event:a,listeners:r}),a.data=b))}Rr(i,t)}))}function Mr(e,t,n){return{instance:e,listener:t,currentTarget:n}}function Fr(e,t){for(var n=t+"Capture",r=[];null!==e;){var a=e,o=a.stateNode;5===a.tag&&null!==o&&(a=o,null!=(o=ze(e,n))&&r.unshift(Mr(e,o,a)),null!=(o=ze(e,t))&&r.push(Mr(e,o,a))),e=e.return}return r}function Br(e){if(null===e)return null;do{e=e.return}while(e&&5!==e.tag);return e||null}function jr(e,t,n,r,a){for(var o=t._reactName,i=[];null!==n&&n!==r;){var l=n,s=l.alternate,u=l.stateNode;if(null!==s&&s===r)break;5===l.tag&&null!==u&&(l=u,a?null!=(s=ze(n,o))&&i.unshift(Mr(n,s,l)):a||null!=(s=ze(n,o))&&i.push(Mr(n,s,l))),n=n.return}0!==i.length&&e.push({event:t,listeners:i})}function zr(){}var $r=null,Ur=null;function qr(e,t){switch(e){case"button":case"input":case"select":case"textarea":return!!t.autoFocus}return!1}function Hr(e,t){return"textarea"===e||"option"===e||"noscript"===e||"string"==typeof t.children||"number"==typeof t.children||"object"==typeof t.dangerouslySetInnerHTML&&null!==t.dangerouslySetInnerHTML&&null!=t.dangerouslySetInnerHTML.__html}var Gr="function"==typeof setTimeout?setTimeout:void 0,Zr="function"==typeof clearTimeout?clearTimeout:void 0;function Qr(e){1===e.nodeType?e.textContent="":9===e.nodeType&&(null!=(e=e.body)&&(e.textContent=""))}function Vr(e){for(;null!=e;e=e.nextSibling){var t=e.nodeType;if(1===t||3===t)break}return e}function Wr(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n||"$!"===n||"$?"===n){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var Kr=0;var Yr=Math.random().toString(36).slice(2),Xr="__reactFiber$"+Yr,Jr="__reactProps$"+Yr,ea="__reactContainer$"+Yr,ta="__reactEvents$"+Yr;function na(e){var t=e[Xr];if(t)return t;for(var n=e.parentNode;n;){if(t=n[ea]||n[Xr]){if(n=t.alternate,null!==t.child||null!==n&&null!==n.child)for(e=Wr(e);null!==e;){if(n=e[Xr])return n;e=Wr(e)}return t}n=(e=n).parentNode}return null}function ra(e){return!(e=e[Xr]||e[ea])||5!==e.tag&&6!==e.tag&&13!==e.tag&&3!==e.tag?null:e}function aa(e){if(5===e.tag||6===e.tag)return e.stateNode;throw Error(i(33))}function oa(e){return e[Jr]||null}function ia(e){var t=e[ta];return void 0===t&&(t=e[ta]=new Set),t}var la=[],sa=-1;function ua(e){return{current:e}}function ca(e){0>sa||(e.current=la[sa],la[sa]=null,sa--)}function da(e,t){sa++,la[sa]=e.current,e.current=t}var fa={},pa=ua(fa),ma=ua(!1),ha=fa;function ga(e,t){var n=e.type.contextTypes;if(!n)return fa;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmaskedChildContext===t)return r.__reactInternalMemoizedMaskedChildContext;var a,o={};for(a in n)o[a]=t[a];return r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=t,e.__reactInternalMemoizedMaskedChildContext=o),o}function va(e){return null!=(e=e.childContextTypes)}function ba(){ca(ma),ca(pa)}function ya(e,t,n){if(pa.current!==fa)throw Error(i(168));da(pa,t),da(ma,n)}function wa(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.getChildContext)return n;for(var o in r=r.getChildContext())if(!(o in e))throw Error(i(108,Q(t)||"Unknown",o));return a({},n,r)}function ka(e){return e=(e=e.stateNode)&&e.__reactInternalMemoizedMergedChildContext||fa,ha=pa.current,da(pa,e),da(ma,ma.current),!0}function Ea(e,t,n){var r=e.stateNode;if(!r)throw Error(i(169));n?(e=wa(e,t,ha),r.__reactInternalMemoizedMergedChildContext=e,ca(ma),ca(pa),da(pa,e)):ca(ma),da(ma,n)}var Sa=null,xa=null,Ta=o.unstable_runWithPriority,Ca=o.unstable_scheduleCallback,_a=o.unstable_cancelCallback,La=o.unstable_shouldYield,Ra=o.unstable_requestPaint,Aa=o.unstable_now,Na=o.unstable_getCurrentPriorityLevel,Pa=o.unstable_ImmediatePriority,Oa=o.unstable_UserBlockingPriority,Ia=o.unstable_NormalPriority,Da=o.unstable_LowPriority,Ma=o.unstable_IdlePriority,Fa={},Ba=void 0!==Ra?Ra:function(){},ja=null,za=null,$a=!1,Ua=Aa(),qa=1e4>Ua?Aa:function(){return Aa()-Ua};function Ha(){switch(Na()){case Pa:return 99;case Oa:return 98;case Ia:return 97;case Da:return 96;case Ma:return 95;default:throw Error(i(332))}}function Ga(e){switch(e){case 99:return Pa;case 98:return Oa;case 97:return Ia;case 96:return Da;case 95:return Ma;default:throw Error(i(332))}}function Za(e,t){return e=Ga(e),Ta(e,t)}function Qa(e,t,n){return e=Ga(e),Ca(e,t,n)}function Va(){if(null!==za){var e=za;za=null,_a(e)}Wa()}function Wa(){if(!$a&&null!==ja){$a=!0;var e=0;try{var t=ja;Za(99,(function(){for(;e<t.length;e++){var n=t[e];do{n=n(!0)}while(null!==n)}})),ja=null}catch(n){throw null!==ja&&(ja=ja.slice(e+1)),Ca(Pa,Va),n}finally{$a=!1}}}var Ka=k.ReactCurrentBatchConfig;function Ya(e,t){if(e&&e.defaultProps){for(var n in t=a({},t),e=e.defaultProps)void 0===t[n]&&(t[n]=e[n]);return t}return t}var Xa=ua(null),Ja=null,eo=null,to=null;function no(){to=eo=Ja=null}function ro(e){var t=Xa.current;ca(Xa),e.type._context._currentValue=t}function ao(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n||(n.childLanes&t)===t)break;n.childLanes|=t}else e.childLanes|=t,null!==n&&(n.childLanes|=t);e=e.return}}function oo(e,t){Ja=e,to=eo=null,null!==(e=e.dependencies)&&null!==e.firstContext&&(0!=(e.lanes&t)&&(Fi=!0),e.firstContext=null)}function io(e,t){if(to!==e&&!1!==t&&0!==t)if("number"==typeof t&&1073741823!==t||(to=e,t=1073741823),t={context:e,observedBits:t,next:null},null===eo){if(null===Ja)throw Error(i(308));eo=t,Ja.dependencies={lanes:0,firstContext:t,responders:null}}else eo=eo.next=t;return e._currentValue}var lo=!1;function so(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null},effects:null}}function uo(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,effects:e.effects})}function co(e,t){return{eventTime:e,lane:t,tag:0,payload:null,callback:null,next:null}}function fo(e,t){if(null!==(e=e.updateQueue)){var n=(e=e.shared).pending;null===n?t.next=t:(t.next=n.next,n.next=t),e.pending=t}}function po(e,t){var n=e.updateQueue,r=e.alternate;if(null!==r&&n===(r=r.updateQueue)){var a=null,o=null;if(null!==(n=n.firstBaseUpdate)){do{var i={eventTime:n.eventTime,lane:n.lane,tag:n.tag,payload:n.payload,callback:n.callback,next:null};null===o?a=o=i:o=o.next=i,n=n.next}while(null!==n);null===o?a=o=t:o=o.next=t}else a=o=t;return n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:o,shared:r.shared,effects:r.effects},void(e.updateQueue=n)}null===(e=n.lastBaseUpdate)?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}function mo(e,t,n,r){var o=e.updateQueue;lo=!1;var i=o.firstBaseUpdate,l=o.lastBaseUpdate,s=o.shared.pending;if(null!==s){o.shared.pending=null;var u=s,c=u.next;u.next=null,null===l?i=c:l.next=c,l=u;var d=e.alternate;if(null!==d){var f=(d=d.updateQueue).lastBaseUpdate;f!==l&&(null===f?d.firstBaseUpdate=c:f.next=c,d.lastBaseUpdate=u)}}if(null!==i){for(f=o.baseState,l=0,d=c=u=null;;){s=i.lane;var p=i.eventTime;if((r&s)===s){null!==d&&(d=d.next={eventTime:p,lane:0,tag:i.tag,payload:i.payload,callback:i.callback,next:null});e:{var m=e,h=i;switch(s=t,p=n,h.tag){case 1:if("function"==typeof(m=h.payload)){f=m.call(p,f,s);break e}f=m;break e;case 3:m.flags=-4097&m.flags|64;case 0:if(null==(s="function"==typeof(m=h.payload)?m.call(p,f,s):m))break e;f=a({},f,s);break e;case 2:lo=!0}}null!==i.callback&&(e.flags|=32,null===(s=o.effects)?o.effects=[i]:s.push(i))}else p={eventTime:p,lane:s,tag:i.tag,payload:i.payload,callback:i.callback,next:null},null===d?(c=d=p,u=f):d=d.next=p,l|=s;if(null===(i=i.next)){if(null===(s=o.shared.pending))break;i=s.next,s.next=null,o.lastBaseUpdate=s,o.shared.pending=null}}null===d&&(u=f),o.baseState=u,o.firstBaseUpdate=c,o.lastBaseUpdate=d,$l|=l,e.lanes=l,e.memoizedState=f}}function ho(e,t,n){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],a=r.callback;if(null!==a){if(r.callback=null,r=n,"function"!=typeof a)throw Error(i(191,a));a.call(r)}}}var go=(new r.Component).refs;function vo(e,t,n,r){n=null==(n=n(r,t=e.memoizedState))?t:a({},t,n),e.memoizedState=n,0===e.lanes&&(e.updateQueue.baseState=n)}var bo={isMounted:function(e){return!!(e=e._reactInternals)&&Ke(e)===e},enqueueSetState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueReplaceState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.tag=1,o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=fs(),r=ps(e),a=co(n,r);a.tag=2,null!=t&&(a.callback=t),fo(e,a),ms(e,r,n)}};function yo(e,t,n,r,a,o,i){return"function"==typeof(e=e.stateNode).shouldComponentUpdate?e.shouldComponentUpdate(r,o,i):!t.prototype||!t.prototype.isPureReactComponent||(!fr(n,r)||!fr(a,o))}function wo(e,t,n){var r=!1,a=fa,o=t.contextType;return"object"==typeof o&&null!==o?o=io(o):(a=va(t)?ha:pa.current,o=(r=null!=(r=t.contextTypes))?ga(e,a):fa),t=new t(n,o),e.memoizedState=null!==t.state&&void 0!==t.state?t.state:null,t.updater=bo,e.stateNode=t,t._reactInternals=e,r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=a,e.__reactInternalMemoizedMaskedChildContext=o),t}function ko(e,t,n,r){e=t.state,"function"==typeof t.componentWillReceiveProps&&t.componentWillReceiveProps(n,r),"function"==typeof t.UNSAFE_componentWillReceiveProps&&t.UNSAFE_componentWillReceiveProps(n,r),t.state!==e&&bo.enqueueReplaceState(t,t.state,null)}function Eo(e,t,n,r){var a=e.stateNode;a.props=n,a.state=e.memoizedState,a.refs=go,so(e);var o=t.contextType;"object"==typeof o&&null!==o?a.context=io(o):(o=va(t)?ha:pa.current,a.context=ga(e,o)),mo(e,n,a,r),a.state=e.memoizedState,"function"==typeof(o=t.getDerivedStateFromProps)&&(vo(e,t,o,n),a.state=e.memoizedState),"function"==typeof t.getDerivedStateFromProps||"function"==typeof a.getSnapshotBeforeUpdate||"function"!=typeof a.UNSAFE_componentWillMount&&"function"!=typeof a.componentWillMount||(t=a.state,"function"==typeof a.componentWillMount&&a.componentWillMount(),"function"==typeof a.UNSAFE_componentWillMount&&a.UNSAFE_componentWillMount(),t!==a.state&&bo.enqueueReplaceState(a,a.state,null),mo(e,n,a,r),a.state=e.memoizedState),"function"==typeof a.componentDidMount&&(e.flags|=4)}var So=Array.isArray;function xo(e,t,n){if(null!==(e=n.ref)&&"function"!=typeof e&&"object"!=typeof e){if(n._owner){if(n=n._owner){if(1!==n.tag)throw Error(i(309));var r=n.stateNode}if(!r)throw Error(i(147,e));var a=""+e;return null!==t&&null!==t.ref&&"function"==typeof t.ref&&t.ref._stringRef===a?t.ref:(t=function(e){var t=r.refs;t===go&&(t=r.refs={}),null===e?delete t[a]:t[a]=e},t._stringRef=a,t)}if("string"!=typeof e)throw Error(i(284));if(!n._owner)throw Error(i(290,e))}return e}function To(e,t){if("textarea"!==e.type)throw Error(i(31,"[object Object]"===Object.prototype.toString.call(t)?"object with keys {"+Object.keys(t).join(", ")+"}":t))}function Co(e){function t(t,n){if(e){var r=t.lastEffect;null!==r?(r.nextEffect=n,t.lastEffect=n):t.firstEffect=t.lastEffect=n,n.nextEffect=null,n.flags=8}}function n(n,r){if(!e)return null;for(;null!==r;)t(n,r),r=r.sibling;return null}function r(e,t){for(e=new Map;null!==t;)null!==t.key?e.set(t.key,t):e.set(t.index,t),t=t.sibling;return e}function a(e,t){return(e=Zs(e,t)).index=0,e.sibling=null,e}function o(t,n,r){return t.index=r,e?null!==(r=t.alternate)?(r=r.index)<n?(t.flags=2,n):r:(t.flags=2,n):n}function l(t){return e&&null===t.alternate&&(t.flags=2),t}function s(e,t,n,r){return null===t||6!==t.tag?((t=Ks(n,e.mode,r)).return=e,t):((t=a(t,n)).return=e,t)}function u(e,t,n,r){return null!==t&&t.elementType===n.type?((r=a(t,n.props)).ref=xo(e,t,n),r.return=e,r):((r=Qs(n.type,n.key,n.props,null,e.mode,r)).ref=xo(e,t,n),r.return=e,r)}function c(e,t,n,r){return null===t||4!==t.tag||t.stateNode.containerInfo!==n.containerInfo||t.stateNode.implementation!==n.implementation?((t=Ys(n,e.mode,r)).return=e,t):((t=a(t,n.children||[])).return=e,t)}function d(e,t,n,r,o){return null===t||7!==t.tag?((t=Vs(n,e.mode,r,o)).return=e,t):((t=a(t,n)).return=e,t)}function f(e,t,n){if("string"==typeof t||"number"==typeof t)return(t=Ks(""+t,e.mode,n)).return=e,t;if("object"==typeof t&&null!==t){switch(t.$$typeof){case E:return(n=Qs(t.type,t.key,t.props,null,e.mode,n)).ref=xo(e,null,t),n.return=e,n;case S:return(t=Ys(t,e.mode,n)).return=e,t}if(So(t)||U(t))return(t=Vs(t,e.mode,n,null)).return=e,t;To(e,t)}return null}function p(e,t,n,r){var a=null!==t?t.key:null;if("string"==typeof n||"number"==typeof n)return null!==a?null:s(e,t,""+n,r);if("object"==typeof n&&null!==n){switch(n.$$typeof){case E:return n.key===a?n.type===x?d(e,t,n.props.children,r,a):u(e,t,n,r):null;case S:return n.key===a?c(e,t,n,r):null}if(So(n)||U(n))return null!==a?null:d(e,t,n,r,null);To(e,n)}return null}function m(e,t,n,r,a){if("string"==typeof r||"number"==typeof r)return s(t,e=e.get(n)||null,""+r,a);if("object"==typeof r&&null!==r){switch(r.$$typeof){case E:return e=e.get(null===r.key?n:r.key)||null,r.type===x?d(t,e,r.props.children,a,r.key):u(t,e,r,a);case S:return c(t,e=e.get(null===r.key?n:r.key)||null,r,a)}if(So(r)||U(r))return d(t,e=e.get(n)||null,r,a,null);To(t,r)}return null}function h(a,i,l,s){for(var u=null,c=null,d=i,h=i=0,g=null;null!==d&&h<l.length;h++){d.index>h?(g=d,d=null):g=d.sibling;var v=p(a,d,l[h],s);if(null===v){null===d&&(d=g);break}e&&d&&null===v.alternate&&t(a,d),i=o(v,i,h),null===c?u=v:c.sibling=v,c=v,d=g}if(h===l.length)return n(a,d),u;if(null===d){for(;h<l.length;h++)null!==(d=f(a,l[h],s))&&(i=o(d,i,h),null===c?u=d:c.sibling=d,c=d);return u}for(d=r(a,d);h<l.length;h++)null!==(g=m(d,a,h,l[h],s))&&(e&&null!==g.alternate&&d.delete(null===g.key?h:g.key),i=o(g,i,h),null===c?u=g:c.sibling=g,c=g);return e&&d.forEach((function(e){return t(a,e)})),u}function g(a,l,s,u){var c=U(s);if("function"!=typeof c)throw Error(i(150));if(null==(s=c.call(s)))throw Error(i(151));for(var d=c=null,h=l,g=l=0,v=null,b=s.next();null!==h&&!b.done;g++,b=s.next()){h.index>g?(v=h,h=null):v=h.sibling;var y=p(a,h,b.value,u);if(null===y){null===h&&(h=v);break}e&&h&&null===y.alternate&&t(a,h),l=o(y,l,g),null===d?c=y:d.sibling=y,d=y,h=v}if(b.done)return n(a,h),c;if(null===h){for(;!b.done;g++,b=s.next())null!==(b=f(a,b.value,u))&&(l=o(b,l,g),null===d?c=b:d.sibling=b,d=b);return c}for(h=r(a,h);!b.done;g++,b=s.next())null!==(b=m(h,a,g,b.value,u))&&(e&&null!==b.alternate&&h.delete(null===b.key?g:b.key),l=o(b,l,g),null===d?c=b:d.sibling=b,d=b);return e&&h.forEach((function(e){return t(a,e)})),c}return function(e,r,o,s){var u="object"==typeof o&&null!==o&&o.type===x&&null===o.key;u&&(o=o.props.children);var c="object"==typeof o&&null!==o;if(c)switch(o.$$typeof){case E:e:{for(c=o.key,u=r;null!==u;){if(u.key===c){if(7===u.tag){if(o.type===x){n(e,u.sibling),(r=a(u,o.props.children)).return=e,e=r;break e}}else if(u.elementType===o.type){n(e,u.sibling),(r=a(u,o.props)).ref=xo(e,u,o),r.return=e,e=r;break e}n(e,u);break}t(e,u),u=u.sibling}o.type===x?((r=Vs(o.props.children,e.mode,s,o.key)).return=e,e=r):((s=Qs(o.type,o.key,o.props,null,e.mode,s)).ref=xo(e,r,o),s.return=e,e=s)}return l(e);case S:e:{for(u=o.key;null!==r;){if(r.key===u){if(4===r.tag&&r.stateNode.containerInfo===o.containerInfo&&r.stateNode.implementation===o.implementation){n(e,r.sibling),(r=a(r,o.children||[])).return=e,e=r;break e}n(e,r);break}t(e,r),r=r.sibling}(r=Ys(o,e.mode,s)).return=e,e=r}return l(e)}if("string"==typeof o||"number"==typeof o)return o=""+o,null!==r&&6===r.tag?(n(e,r.sibling),(r=a(r,o)).return=e,e=r):(n(e,r),(r=Ks(o,e.mode,s)).return=e,e=r),l(e);if(So(o))return h(e,r,o,s);if(U(o))return g(e,r,o,s);if(c&&To(e,o),void 0===o&&!u)switch(e.tag){case 1:case 22:case 0:case 11:case 15:throw Error(i(152,Q(e.type)||"Component"))}return n(e,r)}}var _o=Co(!0),Lo=Co(!1),Ro={},Ao=ua(Ro),No=ua(Ro),Po=ua(Ro);function Oo(e){if(e===Ro)throw Error(i(174));return e}function Io(e,t){switch(da(Po,t),da(No,e),da(Ao,Ro),e=t.nodeType){case 9:case 11:t=(t=t.documentElement)?t.namespaceURI:me(null,"");break;default:t=me(t=(e=8===e?t.parentNode:t).namespaceURI||null,e=e.tagName)}ca(Ao),da(Ao,t)}function Do(){ca(Ao),ca(No),ca(Po)}function Mo(e){Oo(Po.current);var t=Oo(Ao.current),n=me(t,e.type);t!==n&&(da(No,e),da(Ao,n))}function Fo(e){No.current===e&&(ca(Ao),ca(No))}var Bo=ua(0);function jo(e){for(var t=e;null!==t;){if(13===t.tag){var n=t.memoizedState;if(null!==n&&(null===(n=n.dehydrated)||"$?"===n.data||"$!"===n.data))return t}else if(19===t.tag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.flags))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}return null}var zo=null,$o=null,Uo=!1;function qo(e,t){var n=Hs(5,null,null,0);n.elementType="DELETED",n.type="DELETED",n.stateNode=t,n.return=e,n.flags=8,null!==e.lastEffect?(e.lastEffect.nextEffect=n,e.lastEffect=n):e.firstEffect=e.lastEffect=n}function Ho(e,t){switch(e.tag){case 5:var n=e.type;return null!==(t=1!==t.nodeType||n.toLowerCase()!==t.nodeName.toLowerCase()?null:t)&&(e.stateNode=t,!0);case 6:return null!==(t=""===e.pendingProps||3!==t.nodeType?null:t)&&(e.stateNode=t,!0);default:return!1}}function Go(e){if(Uo){var t=$o;if(t){var n=t;if(!Ho(e,t)){if(!(t=Vr(n.nextSibling))||!Ho(e,t))return e.flags=-1025&e.flags|2,Uo=!1,void(zo=e);qo(zo,n)}zo=e,$o=Vr(t.firstChild)}else e.flags=-1025&e.flags|2,Uo=!1,zo=e}}function Zo(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;zo=e}function Qo(e){if(e!==zo)return!1;if(!Uo)return Zo(e),Uo=!0,!1;var t=e.type;if(5!==e.tag||"head"!==t&&"body"!==t&&!Hr(t,e.memoizedProps))for(t=$o;t;)qo(e,t),t=Vr(t.nextSibling);if(Zo(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(i(317));e:{for(e=e.nextSibling,t=0;e;){if(8===e.nodeType){var n=e.data;if("/$"===n){if(0===t){$o=Vr(e.nextSibling);break e}t--}else"$"!==n&&"$!"!==n&&"$?"!==n||t++}e=e.nextSibling}$o=null}}else $o=zo?Vr(e.stateNode.nextSibling):null;return!0}function Vo(){$o=zo=null,Uo=!1}var Wo=[];function Ko(){for(var e=0;e<Wo.length;e++)Wo[e]._workInProgressVersionPrimary=null;Wo.length=0}var Yo=k.ReactCurrentDispatcher,Xo=k.ReactCurrentBatchConfig,Jo=0,ei=null,ti=null,ni=null,ri=!1,ai=!1;function oi(){throw Error(i(321))}function ii(e,t){if(null===t)return!1;for(var n=0;n<t.length&&n<e.length;n++)if(!cr(e[n],t[n]))return!1;return!0}function li(e,t,n,r,a,o){if(Jo=o,ei=t,t.memoizedState=null,t.updateQueue=null,t.lanes=0,Yo.current=null===e||null===e.memoizedState?Oi:Ii,e=n(r,a),ai){o=0;do{if(ai=!1,!(25>o))throw Error(i(301));o+=1,ni=ti=null,t.updateQueue=null,Yo.current=Di,e=n(r,a)}while(ai)}if(Yo.current=Pi,t=null!==ti&&null!==ti.next,Jo=0,ni=ti=ei=null,ri=!1,t)throw Error(i(300));return e}function si(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===ni?ei.memoizedState=ni=e:ni=ni.next=e,ni}function ui(){if(null===ti){var e=ei.alternate;e=null!==e?e.memoizedState:null}else e=ti.next;var t=null===ni?ei.memoizedState:ni.next;if(null!==t)ni=t,ti=e;else{if(null===e)throw Error(i(310));e={memoizedState:(ti=e).memoizedState,baseState:ti.baseState,baseQueue:ti.baseQueue,queue:ti.queue,next:null},null===ni?ei.memoizedState=ni=e:ni=ni.next=e}return ni}function ci(e,t){return"function"==typeof t?t(e):t}function di(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=ti,a=r.baseQueue,o=n.pending;if(null!==o){if(null!==a){var l=a.next;a.next=o.next,o.next=l}r.baseQueue=a=o,n.pending=null}if(null!==a){a=a.next,r=r.baseState;var s=l=o=null,u=a;do{var c=u.lane;if((Jo&c)===c)null!==s&&(s=s.next={lane:0,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null}),r=u.eagerReducer===e?u.eagerState:e(r,u.action);else{var d={lane:c,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null};null===s?(l=s=d,o=r):s=s.next=d,ei.lanes|=c,$l|=c}u=u.next}while(null!==u&&u!==a);null===s?o=r:s.next=l,cr(r,t.memoizedState)||(Fi=!0),t.memoizedState=r,t.baseState=o,t.baseQueue=s,n.lastRenderedState=r}return[t.memoizedState,n.dispatch]}function fi(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=n.dispatch,a=n.pending,o=t.memoizedState;if(null!==a){n.pending=null;var l=a=a.next;do{o=e(o,l.action),l=l.next}while(l!==a);cr(o,t.memoizedState)||(Fi=!0),t.memoizedState=o,null===t.baseQueue&&(t.baseState=o),n.lastRenderedState=o}return[o,r]}function pi(e,t,n){var r=t._getVersion;r=r(t._source);var a=t._workInProgressVersionPrimary;if(null!==a?e=a===r:(e=e.mutableReadLanes,(e=(Jo&e)===e)&&(t._workInProgressVersionPrimary=r,Wo.push(t))),e)return n(t._source);throw Wo.push(t),Error(i(350))}function mi(e,t,n,r){var a=Ol;if(null===a)throw Error(i(349));var o=t._getVersion,l=o(t._source),s=Yo.current,u=s.useState((function(){return pi(a,t,n)})),c=u[1],d=u[0];u=ni;var f=e.memoizedState,p=f.refs,m=p.getSnapshot,h=f.source;f=f.subscribe;var g=ei;return e.memoizedState={refs:p,source:t,subscribe:r},s.useEffect((function(){p.getSnapshot=n,p.setSnapshot=c;var e=o(t._source);if(!cr(l,e)){e=n(t._source),cr(d,e)||(c(e),e=ps(g),a.mutableReadLanes|=e&a.pendingLanes),e=a.mutableReadLanes,a.entangledLanes|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-Ht(i),u=1<<s;r[s]|=e,i&=~u}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(g);a.mutableReadLanes|=r&a.pendingLanes}catch(o){n((function(){throw o}))}}))}),[t,r]),cr(m,n)&&cr(h,t)&&cr(f,r)||((e={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:d}).dispatch=c=Ni.bind(null,ei,e),u.queue=e,u.baseQueue=null,d=pi(a,t,n),u.memoizedState=u.baseState=d),d}function hi(e,t,n){return mi(ui(),e,t,n)}function gi(e){var t=si();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:e}).dispatch=Ni.bind(null,ei,e),[t.memoizedState,e]}function vi(e,t,n,r){return e={tag:e,create:t,destroy:n,deps:r,next:null},null===(t=ei.updateQueue)?(t={lastEffect:null},ei.updateQueue=t,t.lastEffect=e.next=e):null===(n=t.lastEffect)?t.lastEffect=e.next=e:(r=n.next,n.next=e,e.next=r,t.lastEffect=e),e}function bi(e){return e={current:e},si().memoizedState=e}function yi(){return ui().memoizedState}function wi(e,t,n,r){var a=si();ei.flags|=e,a.memoizedState=vi(1|t,n,void 0,void 0===r?null:r)}function ki(e,t,n,r){var a=ui();r=void 0===r?null:r;var o=void 0;if(null!==ti){var i=ti.memoizedState;if(o=i.destroy,null!==r&&ii(r,i.deps))return void vi(t,n,o,r)}ei.flags|=e,a.memoizedState=vi(1|t,n,o,r)}function Ei(e,t){return wi(516,4,e,t)}function Si(e,t){return ki(516,4,e,t)}function xi(e,t){return ki(4,2,e,t)}function Ti(e,t){return"function"==typeof t?(e=e(),t(e),function(){t(null)}):null!=t?(e=e(),t.current=e,function(){t.current=null}):void 0}function Ci(e,t,n){return n=null!=n?n.concat([e]):null,ki(4,2,Ti.bind(null,t,e),n)}function _i(){}function Li(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Ri(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(e=e(),n.memoizedState=[e,t],e)}function Ai(e,t){var n=Ha();Za(98>n?98:n,(function(){e(!0)})),Za(97<n?97:n,(function(){var n=Xo.transition;Xo.transition=1;try{e(!1),t()}finally{Xo.transition=n}}))}function Ni(e,t,n){var r=fs(),a=ps(e),o={lane:a,action:n,eagerReducer:null,eagerState:null,next:null},i=t.pending;if(null===i?o.next=o:(o.next=i.next,i.next=o),t.pending=o,i=e.alternate,e===ei||null!==i&&i===ei)ai=ri=!0;else{if(0===e.lanes&&(null===i||0===i.lanes)&&null!==(i=t.lastRenderedReducer))try{var l=t.lastRenderedState,s=i(l,n);if(o.eagerReducer=i,o.eagerState=s,cr(s,l))return}catch(u){}ms(e,a,r)}}var Pi={readContext:io,useCallback:oi,useContext:oi,useEffect:oi,useImperativeHandle:oi,useLayoutEffect:oi,useMemo:oi,useReducer:oi,useRef:oi,useState:oi,useDebugValue:oi,useDeferredValue:oi,useTransition:oi,useMutableSource:oi,useOpaqueIdentifier:oi,unstable_isNewReconciler:!1},Oi={readContext:io,useCallback:function(e,t){return si().memoizedState=[e,void 0===t?null:t],e},useContext:io,useEffect:Ei,useImperativeHandle:function(e,t,n){return n=null!=n?n.concat([e]):null,wi(4,2,Ti.bind(null,t,e),n)},useLayoutEffect:function(e,t){return wi(4,2,e,t)},useMemo:function(e,t){var n=si();return t=void 0===t?null:t,e=e(),n.memoizedState=[e,t],e},useReducer:function(e,t,n){var r=si();return t=void 0!==n?n(t):t,r.memoizedState=r.baseState=t,e=(e=r.queue={pending:null,dispatch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=Ni.bind(null,ei,e),[r.memoizedState,e]},useRef:bi,useState:gi,useDebugValue:_i,useDeferredValue:function(e){var t=gi(e),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=gi(!1),t=e[0];return bi(e=Ai.bind(null,e[1])),[e,t]},useMutableSource:function(e,t,n){var r=si();return r.memoizedState={refs:{getSnapshot:t,setSnapshot:null},source:e,subscribe:n},mi(r,e,t,n)},useOpaqueIdentifier:function(){if(Uo){var e=!1,t=function(e){return{$$typeof:D,toString:e,valueOf:e}}((function(){throw e||(e=!0,n("r:"+(Kr++).toString(36))),Error(i(355))})),n=gi(t)[1];return 0==(2&ei.mode)&&(ei.flags|=516,vi(5,(function(){n("r:"+(Kr++).toString(36))}),void 0,null)),t}return gi(t="r:"+(Kr++).toString(36)),t},unstable_isNewReconciler:!1},Ii={readContext:io,useCallback:Li,useContext:io,useEffect:Si,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Ri,useReducer:di,useRef:yi,useState:function(){return di(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=di(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=di(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return di(ci)[0]},unstable_isNewReconciler:!1},Di={readContext:io,useCallback:Li,useContext:io,useEffect:Si,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Ri,useReducer:fi,useRef:yi,useState:function(){return fi(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=fi(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=fi(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return fi(ci)[0]},unstable_isNewReconciler:!1},Mi=k.ReactCurrentOwner,Fi=!1;function Bi(e,t,n,r){t.child=null===e?Lo(t,null,n,r):_o(t,e.child,n,r)}function ji(e,t,n,r,a){n=n.render;var o=t.ref;return oo(t,a),r=li(e,t,n,r,o,a),null===e||Fi?(t.flags|=1,Bi(e,t,r,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function zi(e,t,n,r,a,o){if(null===e){var i=n.type;return"function"!=typeof i||Gs(i)||void 0!==i.defaultProps||null!==n.compare||void 0!==n.defaultProps?((e=Qs(n.type,null,r,t,t.mode,o)).ref=t.ref,e.return=t,t.child=e):(t.tag=15,t.type=i,$i(e,t,i,r,a,o))}return i=e.child,0==(a&o)&&(a=i.memoizedProps,(n=null!==(n=n.compare)?n:fr)(a,r)&&e.ref===t.ref)?ol(e,t,o):(t.flags|=1,(e=Zs(i,r)).ref=t.ref,e.return=t,t.child=e)}function $i(e,t,n,r,a,o){if(null!==e&&fr(e.memoizedProps,r)&&e.ref===t.ref){if(Fi=!1,0==(o&a))return t.lanes=e.lanes,ol(e,t,o);0!=(16384&e.flags)&&(Fi=!0)}return Hi(e,t,n,r,o)}function Ui(e,t,n){var r=t.pendingProps,a=r.children,o=null!==e?e.memoizedState:null;if("hidden"===r.mode||"unstable-defer-without-hiding"===r.mode)if(0==(4&t.mode))t.memoizedState={baseLanes:0},Es(t,n);else{if(0==(1073741824&n))return e=null!==o?o.baseLanes|n:n,t.lanes=t.childLanes=1073741824,t.memoizedState={baseLanes:e},Es(t,e),null;t.memoizedState={baseLanes:0},Es(t,null!==o?o.baseLanes:n)}else null!==o?(r=o.baseLanes|n,t.memoizedState=null):r=n,Es(t,r);return Bi(e,t,a,n),t.child}function qi(e,t){var n=t.ref;(null===e&&null!==n||null!==e&&e.ref!==n)&&(t.flags|=128)}function Hi(e,t,n,r,a){var o=va(n)?ha:pa.current;return o=ga(t,o),oo(t,a),n=li(e,t,n,r,o,a),null===e||Fi?(t.flags|=1,Bi(e,t,n,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function Gi(e,t,n,r,a){if(va(n)){var o=!0;ka(t)}else o=!1;if(oo(t,a),null===t.stateNode)null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),wo(t,n,r),Eo(t,n,r,a),r=!0;else if(null===e){var i=t.stateNode,l=t.memoizedProps;i.props=l;var s=i.context,u=n.contextType;"object"==typeof u&&null!==u?u=io(u):u=ga(t,u=va(n)?ha:pa.current);var c=n.getDerivedStateFromProps,d="function"==typeof c||"function"==typeof i.getSnapshotBeforeUpdate;d||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==r||s!==u)&&ko(t,i,r,u),lo=!1;var f=t.memoizedState;i.state=f,mo(t,r,i,a),s=t.memoizedState,l!==r||f!==s||ma.current||lo?("function"==typeof c&&(vo(t,n,c,r),s=t.memoizedState),(l=lo||yo(t,n,l,r,f,s,u))?(d||"function"!=typeof i.UNSAFE_componentWillMount&&"function"!=typeof i.componentWillMount||("function"==typeof i.componentWillMount&&i.componentWillMount(),"function"==typeof i.UNSAFE_componentWillMount&&i.UNSAFE_componentWillMount()),"function"==typeof i.componentDidMount&&(t.flags|=4)):("function"==typeof i.componentDidMount&&(t.flags|=4),t.memoizedProps=r,t.memoizedState=s),i.props=r,i.state=s,i.context=u,r=l):("function"==typeof i.componentDidMount&&(t.flags|=4),r=!1)}else{i=t.stateNode,uo(e,t),l=t.memoizedProps,u=t.type===t.elementType?l:Ya(t.type,l),i.props=u,d=t.pendingProps,f=i.context,"object"==typeof(s=n.contextType)&&null!==s?s=io(s):s=ga(t,s=va(n)?ha:pa.current);var p=n.getDerivedStateFromProps;(c="function"==typeof p||"function"==typeof i.getSnapshotBeforeUpdate)||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==d||f!==s)&&ko(t,i,r,s),lo=!1,f=t.memoizedState,i.state=f,mo(t,r,i,a);var m=t.memoizedState;l!==d||f!==m||ma.current||lo?("function"==typeof p&&(vo(t,n,p,r),m=t.memoizedState),(u=lo||yo(t,n,u,r,f,m,s))?(c||"function"!=typeof i.UNSAFE_componentWillUpdate&&"function"!=typeof i.componentWillUpdate||("function"==typeof i.componentWillUpdate&&i.componentWillUpdate(r,m,s),"function"==typeof i.UNSAFE_componentWillUpdate&&i.UNSAFE_componentWillUpdate(r,m,s)),"function"==typeof i.componentDidUpdate&&(t.flags|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(t.flags|=256)):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),t.memoizedProps=r,t.memoizedState=m),i.props=r,i.state=m,i.context=s,r=u):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),r=!1)}return Zi(e,t,n,r,o,a)}function Zi(e,t,n,r,a,o){qi(e,t);var i=0!=(64&t.flags);if(!r&&!i)return a&&Ea(t,n,!1),ol(e,t,o);r=t.stateNode,Mi.current=t;var l=i&&"function"!=typeof n.getDerivedStateFromError?null:r.render();return t.flags|=1,null!==e&&i?(t.child=_o(t,e.child,null,o),t.child=_o(t,null,l,o)):Bi(e,t,l,o),t.memoizedState=r.state,a&&Ea(t,n,!0),t.child}function Qi(e){var t=e.stateNode;t.pendingContext?ya(0,t.pendingContext,t.pendingContext!==t.context):t.context&&ya(0,t.context,!1),Io(e,t.containerInfo)}var Vi,Wi,Ki,Yi={dehydrated:null,retryLane:0};function Xi(e,t,n){var r,a=t.pendingProps,o=Bo.current,i=!1;return(r=0!=(64&t.flags))||(r=(null===e||null!==e.memoizedState)&&0!=(2&o)),r?(i=!0,t.flags&=-65):null!==e&&null===e.memoizedState||void 0===a.fallback||!0===a.unstable_avoidThisFallback||(o|=1),da(Bo,1&o),null===e?(void 0!==a.fallback&&Go(t),e=a.children,o=a.fallback,i?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Yi,e):"number"==typeof a.unstable_expectedLoadTime?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Yi,t.lanes=33554432,e):((n=Ws({mode:"visible",children:e},t.mode,n,null)).return=t,t.child=n)):(e.memoizedState,i?(a=tl(e,t,a.children,a.fallback,n),i=t.child,o=e.child.memoizedState,i.memoizedState=null===o?{baseLanes:n}:{baseLanes:o.baseLanes|n},i.childLanes=e.childLanes&~n,t.memoizedState=Yi,a):(n=el(e,t,a.children,n),t.memoizedState=null,n))}function Ji(e,t,n,r){var a=e.mode,o=e.child;return t={mode:"hidden",children:t},0==(2&a)&&null!==o?(o.childLanes=0,o.pendingProps=t):o=Ws(t,a,0,null),n=Vs(n,a,r,null),o.return=e,n.return=e,o.sibling=n,e.child=o,n}function el(e,t,n,r){var a=e.child;return e=a.sibling,n=Zs(a,{mode:"visible",children:n}),0==(2&t.mode)&&(n.lanes=r),n.return=t,n.sibling=null,null!==e&&(e.nextEffect=null,e.flags=8,t.firstEffect=t.lastEffect=e),t.child=n}function tl(e,t,n,r,a){var o=t.mode,i=e.child;e=i.sibling;var l={mode:"hidden",children:n};return 0==(2&o)&&t.child!==i?((n=t.child).childLanes=0,n.pendingProps=l,null!==(i=n.lastEffect)?(t.firstEffect=n.firstEffect,t.lastEffect=i,i.nextEffect=null):t.firstEffect=t.lastEffect=null):n=Zs(i,l),null!==e?r=Zs(e,r):(r=Vs(r,o,a,null)).flags|=2,r.return=t,n.return=t,n.sibling=r,t.child=n,r}function nl(e,t){e.lanes|=t;var n=e.alternate;null!==n&&(n.lanes|=t),ao(e.return,t)}function rl(e,t,n,r,a,o){var i=e.memoizedState;null===i?e.memoizedState={isBackwards:t,rendering:null,renderingStartTime:0,last:r,tail:n,tailMode:a,lastEffect:o}:(i.isBackwards=t,i.rendering=null,i.renderingStartTime=0,i.last=r,i.tail=n,i.tailMode=a,i.lastEffect=o)}function al(e,t,n){var r=t.pendingProps,a=r.revealOrder,o=r.tail;if(Bi(e,t,r.children,n),0!=(2&(r=Bo.current)))r=1&r|2,t.flags|=64;else{if(null!==e&&0!=(64&e.flags))e:for(e=t.child;null!==e;){if(13===e.tag)null!==e.memoizedState&&nl(e,n);else if(19===e.tag)nl(e,n);else if(null!==e.child){e.child.return=e,e=e.child;continue}if(e===t)break e;for(;null===e.sibling;){if(null===e.return||e.return===t)break e;e=e.return}e.sibling.return=e.return,e=e.sibling}r&=1}if(da(Bo,r),0==(2&t.mode))t.memoizedState=null;else switch(a){case"forwards":for(n=t.child,a=null;null!==n;)null!==(e=n.alternate)&&null===jo(e)&&(a=n),n=n.sibling;null===(n=a)?(a=t.child,t.child=null):(a=n.sibling,n.sibling=null),rl(t,!1,a,n,o,t.lastEffect);break;case"backwards":for(n=null,a=t.child,t.child=null;null!==a;){if(null!==(e=a.alternate)&&null===jo(e)){t.child=a;break}e=a.sibling,a.sibling=n,n=a,a=e}rl(t,!0,n,null,o,t.lastEffect);break;case"together":rl(t,!1,null,null,void 0,t.lastEffect);break;default:t.memoizedState=null}return t.child}function ol(e,t,n){if(null!==e&&(t.dependencies=e.dependencies),$l|=t.lanes,0!=(n&t.childLanes)){if(null!==e&&t.child!==e.child)throw Error(i(153));if(null!==t.child){for(n=Zs(e=t.child,e.pendingProps),t.child=n,n.return=t;null!==e.sibling;)e=e.sibling,(n=n.sibling=Zs(e,e.pendingProps)).return=t;n.sibling=null}return t.child}return null}function il(e,t){if(!Uo)switch(e.tailMode){case"hidden":t=e.tail;for(var n=null;null!==t;)null!==t.alternate&&(n=t),t=t.sibling;null===n?e.tail=null:n.sibling=null;break;case"collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t||null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function ll(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12:case 9:case 14:return null;case 1:case 17:return va(t.type)&&ba(),null;case 3:return Do(),ca(ma),ca(pa),Ko(),(r=t.stateNode).pendingContext&&(r.context=r.pendingContext,r.pendingContext=null),null!==e&&null!==e.child||(Qo(t)?t.flags|=4:r.hydrate||(t.flags|=256)),null;case 5:Fo(t);var o=Oo(Po.current);if(n=t.type,null!==e&&null!=t.stateNode)Wi(e,t,n,r),e.ref!==t.ref&&(t.flags|=128);else{if(!r){if(null===t.stateNode)throw Error(i(166));return null}if(e=Oo(Ao.current),Qo(t)){r=t.stateNode,n=t.type;var l=t.memoizedProps;switch(r[Xr]=t,r[Jr]=l,n){case"dialog":Ar("cancel",r),Ar("close",r);break;case"iframe":case"object":case"embed":Ar("load",r);break;case"video":case"audio":for(e=0;e<Cr.length;e++)Ar(Cr[e],r);break;case"source":Ar("error",r);break;case"img":case"image":case"link":Ar("error",r),Ar("load",r);break;case"details":Ar("toggle",r);break;case"input":ee(r,l),Ar("invalid",r);break;case"select":r._wrapperState={wasMultiple:!!l.multiple},Ar("invalid",r);break;case"textarea":se(r,l),Ar("invalid",r)}for(var u in xe(n,l),e=null,l)l.hasOwnProperty(u)&&(o=l[u],"children"===u?"string"==typeof o?r.textContent!==o&&(e=["children",o]):"number"==typeof o&&r.textContent!==""+o&&(e=["children",""+o]):s.hasOwnProperty(u)&&null!=o&&"onScroll"===u&&Ar("scroll",r));switch(n){case"input":K(r),re(r,l,!0);break;case"textarea":K(r),ce(r);break;case"select":case"option":break;default:"function"==typeof l.onClick&&(r.onclick=zr)}r=e,t.updateQueue=r,null!==r&&(t.flags|=4)}else{switch(u=9===o.nodeType?o:o.ownerDocument,e===de&&(e=pe(n)),e===de?"script"===n?((e=u.createElement("div")).innerHTML="<script><\/script>",e=e.removeChild(e.firstChild)):"string"==typeof r.is?e=u.createElement(n,{is:r.is}):(e=u.createElement(n),"select"===n&&(u=e,r.multiple?u.multiple=!0:r.size&&(u.size=r.size))):e=u.createElementNS(e,n),e[Xr]=t,e[Jr]=r,Vi(e,t),t.stateNode=e,u=Te(n,r),n){case"dialog":Ar("cancel",e),Ar("close",e),o=r;break;case"iframe":case"object":case"embed":Ar("load",e),o=r;break;case"video":case"audio":for(o=0;o<Cr.length;o++)Ar(Cr[o],e);o=r;break;case"source":Ar("error",e),o=r;break;case"img":case"image":case"link":Ar("error",e),Ar("load",e),o=r;break;case"details":Ar("toggle",e),o=r;break;case"input":ee(e,r),o=J(e,r),Ar("invalid",e);break;case"option":o=oe(e,r);break;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Ar("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Ar("invalid",e);break;default:o=r}xe(n,o);var c=o;for(l in c)if(c.hasOwnProperty(l)){var d=c[l];"style"===l?Ee(e,d):"dangerouslySetInnerHTML"===l?null!=(d=d?d.__html:void 0)&&ve(e,d):"children"===l?"string"==typeof d?("textarea"!==n||""!==d)&&be(e,d):"number"==typeof d&&be(e,""+d):"suppressContentEditableWarning"!==l&&"suppressHydrationWarning"!==l&&"autoFocus"!==l&&(s.hasOwnProperty(l)?null!=d&&"onScroll"===l&&Ar("scroll",e):null!=d&&w(e,l,d,u))}switch(n){case"input":K(e),re(e,r,!1);break;case"textarea":K(e),ce(e);break;case"option":null!=r.value&&e.setAttribute("value",""+V(r.value));break;case"select":e.multiple=!!r.multiple,null!=(l=r.value)?ie(e,!!r.multiple,l,!1):null!=r.defaultValue&&ie(e,!!r.multiple,r.defaultValue,!0);break;default:"function"==typeof o.onClick&&(e.onclick=zr)}qr(n,r)&&(t.flags|=4)}null!==t.ref&&(t.flags|=128)}return null;case 6:if(e&&null!=t.stateNode)Ki(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(i(166));n=Oo(Po.current),Oo(Ao.current),Qo(t)?(r=t.stateNode,n=t.memoizedProps,r[Xr]=t,r.nodeValue!==n&&(t.flags|=4)):((r=(9===n.nodeType?n:n.ownerDocument).createTextNode(r))[Xr]=t,t.stateNode=r)}return null;case 13:return ca(Bo),r=t.memoizedState,0!=(64&t.flags)?(t.lanes=n,t):(r=null!==r,n=!1,null===e?void 0!==t.memoizedProps.fallback&&Qo(t):n=null!==e.memoizedState,r&&!n&&0!=(2&t.mode)&&(null===e&&!0!==t.memoizedProps.unstable_avoidThisFallback||0!=(1&Bo.current)?0===Bl&&(Bl=3):(0!==Bl&&3!==Bl||(Bl=4),null===Ol||0==(134217727&$l)&&0==(134217727&Ul)||bs(Ol,Dl))),(r||n)&&(t.flags|=4),null);case 4:return Do(),null===e&&Pr(t.stateNode.containerInfo),null;case 10:return ro(t),null;case 19:if(ca(Bo),null===(r=t.memoizedState))return null;if(l=0!=(64&t.flags),null===(u=r.rendering))if(l)il(r,!1);else{if(0!==Bl||null!==e&&0!=(64&e.flags))for(e=t.child;null!==e;){if(null!==(u=jo(e))){for(t.flags|=64,il(r,!1),null!==(l=u.updateQueue)&&(t.updateQueue=l,t.flags|=4),null===r.lastEffect&&(t.firstEffect=null),t.lastEffect=r.lastEffect,r=n,n=t.child;null!==n;)e=r,(l=n).flags&=2,l.nextEffect=null,l.firstEffect=null,l.lastEffect=null,null===(u=l.alternate)?(l.childLanes=0,l.lanes=e,l.child=null,l.memoizedProps=null,l.memoizedState=null,l.updateQueue=null,l.dependencies=null,l.stateNode=null):(l.childLanes=u.childLanes,l.lanes=u.lanes,l.child=u.child,l.memoizedProps=u.memoizedProps,l.memoizedState=u.memoizedState,l.updateQueue=u.updateQueue,l.type=u.type,e=u.dependencies,l.dependencies=null===e?null:{lanes:e.lanes,firstContext:e.firstContext}),n=n.sibling;return da(Bo,1&Bo.current|2),t.child}e=e.sibling}null!==r.tail&&qa()>Zl&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432)}else{if(!l)if(null!==(e=jo(u))){if(t.flags|=64,l=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags|=4),il(r,!0),null===r.tail&&"hidden"===r.tailMode&&!u.alternate&&!Uo)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null),null}else 2*qa()-r.renderingStartTime>Zl&&1073741824!==n&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432);r.isBackwards?(u.sibling=t.child,t.child=u):(null!==(n=r.last)?n.sibling=u:t.child=u,r.last=u)}return null!==r.tail?(n=r.tail,r.rendering=n,r.tail=n.sibling,r.lastEffect=t.lastEffect,r.renderingStartTime=qa(),n.sibling=null,t=Bo.current,da(Bo,l?1&t|2:1&t),n):null;case 23:case 24:return Ss(),null!==e&&null!==e.memoizedState!=(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags|=4),null}throw Error(i(156,t.tag))}function sl(e){switch(e.tag){case 1:va(e.type)&&ba();var t=e.flags;return 4096&t?(e.flags=-4097&t|64,e):null;case 3:if(Do(),ca(ma),ca(pa),Ko(),0!=(64&(t=e.flags)))throw Error(i(285));return e.flags=-4097&t|64,e;case 5:return Fo(e),null;case 13:return ca(Bo),4096&(t=e.flags)?(e.flags=-4097&t|64,e):null;case 19:return ca(Bo),null;case 4:return Do(),null;case 10:return ro(e),null;case 23:case 24:return Ss(),null;default:return null}}function ul(e,t){try{var n="",r=t;do{n+=Z(r),r=r.return}while(r);var a=n}catch(o){a="\nError generating stack: "+o.message+"\n"+o.stack}return{value:e,source:t,stack:a}}function cl(e,t){try{console.error(t.value)}catch(n){setTimeout((function(){throw n}))}}Vi=function(e,t){for(var n=t.child;null!==n;){if(5===n.tag||6===n.tag)e.appendChild(n.stateNode);else if(4!==n.tag&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===t)break;for(;null===n.sibling;){if(null===n.return||n.return===t)return;n=n.return}n.sibling.return=n.return,n=n.sibling}},Wi=function(e,t,n,r){var o=e.memoizedProps;if(o!==r){e=t.stateNode,Oo(Ao.current);var i,l=null;switch(n){case"input":o=J(e,o),r=J(e,r),l=[];break;case"option":o=oe(e,o),r=oe(e,r),l=[];break;case"select":o=a({},o,{value:void 0}),r=a({},r,{value:void 0}),l=[];break;case"textarea":o=le(e,o),r=le(e,r),l=[];break;default:"function"!=typeof o.onClick&&"function"==typeof r.onClick&&(e.onclick=zr)}for(d in xe(n,r),n=null,o)if(!r.hasOwnProperty(d)&&o.hasOwnProperty(d)&&null!=o[d])if("style"===d){var u=o[d];for(i in u)u.hasOwnProperty(i)&&(n||(n={}),n[i]="")}else"dangerouslySetInnerHTML"!==d&&"children"!==d&&"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&"autoFocus"!==d&&(s.hasOwnProperty(d)?l||(l=[]):(l=l||[]).push(d,null));for(d in r){var c=r[d];if(u=null!=o?o[d]:void 0,r.hasOwnProperty(d)&&c!==u&&(null!=c||null!=u))if("style"===d)if(u){for(i in u)!u.hasOwnProperty(i)||c&&c.hasOwnProperty(i)||(n||(n={}),n[i]="");for(i in c)c.hasOwnProperty(i)&&u[i]!==c[i]&&(n||(n={}),n[i]=c[i])}else n||(l||(l=[]),l.push(d,n)),n=c;else"dangerouslySetInnerHTML"===d?(c=c?c.__html:void 0,u=u?u.__html:void 0,null!=c&&u!==c&&(l=l||[]).push(d,c)):"children"===d?"string"!=typeof c&&"number"!=typeof c||(l=l||[]).push(d,""+c):"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&(s.hasOwnProperty(d)?(null!=c&&"onScroll"===d&&Ar("scroll",e),l||u===c||(l=[])):"object"==typeof c&&null!==c&&c.$$typeof===D?c.toString():(l=l||[]).push(d,c))}n&&(l=l||[]).push("style",n);var d=l;(t.updateQueue=d)&&(t.flags|=4)}},Ki=function(e,t,n,r){n!==r&&(t.flags|=4)};var dl="function"==typeof WeakMap?WeakMap:Map;function fl(e,t,n){(n=co(-1,n)).tag=3,n.payload={element:null};var r=t.value;return n.callback=function(){Kl||(Kl=!0,Yl=r),cl(0,t)},n}function pl(e,t,n){(n=co(-1,n)).tag=3;var r=e.type.getDerivedStateFromError;if("function"==typeof r){var a=t.value;n.payload=function(){return cl(0,t),r(a)}}var o=e.stateNode;return null!==o&&"function"==typeof o.componentDidCatch&&(n.callback=function(){"function"!=typeof r&&(null===Xl?Xl=new Set([this]):Xl.add(this),cl(0,t));var e=t.stack;this.componentDidCatch(t.value,{componentStack:null!==e?e:""})}),n}var ml="function"==typeof WeakSet?WeakSet:Set;function hl(e){var t=e.ref;if(null!==t)if("function"==typeof t)try{t(null)}catch(n){zs(e,n)}else t.current=null}function gl(e,t){switch(t.tag){case 0:case 11:case 15:case 22:case 5:case 6:case 4:case 17:return;case 1:if(256&t.flags&&null!==e){var n=e.memoizedProps,r=e.memoizedState;t=(e=t.stateNode).getSnapshotBeforeUpdate(t.elementType===t.type?n:Ya(t.type,n),r),e.__reactInternalSnapshotBeforeUpdate=t}return;case 3:return void(256&t.flags&&Qr(t.stateNode.containerInfo))}throw Error(i(163))}function vl(e,t,n){switch(n.tag){case 0:case 11:case 15:case 22:if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{if(3==(3&e.tag)){var r=e.create;e.destroy=r()}e=e.next}while(e!==t)}if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{var a=e;r=a.next,0!=(4&(a=a.tag))&&0!=(1&a)&&(Fs(n,e),Ms(n,e)),e=r}while(e!==t)}return;case 1:return e=n.stateNode,4&n.flags&&(null===t?e.componentDidMount():(r=n.elementType===n.type?t.memoizedProps:Ya(n.type,t.memoizedProps),e.componentDidUpdate(r,t.memoizedState,e.__reactInternalSnapshotBeforeUpdate))),void(null!==(t=n.updateQueue)&&ho(n,t,e));case 3:if(null!==(t=n.updateQueue)){if(e=null,null!==n.child)switch(n.child.tag){case 5:case 1:e=n.child.stateNode}ho(n,t,e)}return;case 5:return e=n.stateNode,void(null===t&&4&n.flags&&qr(n.type,n.memoizedProps)&&e.focus());case 6:case 4:case 12:case 19:case 17:case 20:case 21:case 23:case 24:return;case 13:return void(null===n.memoizedState&&(n=n.alternate,null!==n&&(n=n.memoizedState,null!==n&&(n=n.dehydrated,null!==n&&Et(n)))))}throw Error(i(163))}function bl(e,t){for(var n=e;;){if(5===n.tag){var r=n.stateNode;if(t)"function"==typeof(r=r.style).setProperty?r.setProperty("display","none","important"):r.display="none";else{r=n.stateNode;var a=n.memoizedProps.style;a=null!=a&&a.hasOwnProperty("display")?a.display:null,r.style.display=ke("display",a)}}else if(6===n.tag)n.stateNode.nodeValue=t?"":n.memoizedProps;else if((23!==n.tag&&24!==n.tag||null===n.memoizedState||n===e)&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===e)break;for(;null===n.sibling;){if(null===n.return||n.return===e)return;n=n.return}n.sibling.return=n.return,n=n.sibling}}function yl(e,t){if(xa&&"function"==typeof xa.onCommitFiberUnmount)try{xa.onCommitFiberUnmount(Sa,t)}catch(o){}switch(t.tag){case 0:case 11:case 14:case 15:case 22:if(null!==(e=t.updateQueue)&&null!==(e=e.lastEffect)){var n=e=e.next;do{var r=n,a=r.destroy;if(r=r.tag,void 0!==a)if(0!=(4&r))Fs(t,n);else{r=t;try{a()}catch(o){zs(r,o)}}n=n.next}while(n!==e)}break;case 1:if(hl(t),"function"==typeof(e=t.stateNode).componentWillUnmount)try{e.props=t.memoizedProps,e.state=t.memoizedState,e.componentWillUnmount()}catch(o){zs(t,o)}break;case 5:hl(t);break;case 4:Tl(e,t)}}function wl(e){e.alternate=null,e.child=null,e.dependencies=null,e.firstEffect=null,e.lastEffect=null,e.memoizedProps=null,e.memoizedState=null,e.pendingProps=null,e.return=null,e.updateQueue=null}function kl(e){return 5===e.tag||3===e.tag||4===e.tag}function El(e){e:{for(var t=e.return;null!==t;){if(kl(t))break e;t=t.return}throw Error(i(160))}var n=t;switch(t=n.stateNode,n.tag){case 5:var r=!1;break;case 3:case 4:t=t.containerInfo,r=!0;break;default:throw Error(i(161))}16&n.flags&&(be(t,""),n.flags&=-17);e:t:for(n=e;;){for(;null===n.sibling;){if(null===n.return||kl(n.return)){n=null;break e}n=n.return}for(n.sibling.return=n.return,n=n.sibling;5!==n.tag&&6!==n.tag&&18!==n.tag;){if(2&n.flags)continue t;if(null===n.child||4===n.tag)continue t;n.child.return=n,n=n.child}if(!(2&n.flags)){n=n.stateNode;break e}}r?Sl(e,n,t):xl(e,n,t)}function Sl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?8===n.nodeType?n.parentNode.insertBefore(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!=(n=n._reactRootContainer)||null!==t.onclick||(t.onclick=zr));else if(4!==r&&null!==(e=e.child))for(Sl(e,t,n),e=e.sibling;null!==e;)Sl(e,t,n),e=e.sibling}function xl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?n.insertBefore(e,t):n.appendChild(e);else if(4!==r&&null!==(e=e.child))for(xl(e,t,n),e=e.sibling;null!==e;)xl(e,t,n),e=e.sibling}function Tl(e,t){for(var n,r,a=t,o=!1;;){if(!o){o=a.return;e:for(;;){if(null===o)throw Error(i(160));switch(n=o.stateNode,o.tag){case 5:r=!1;break e;case 3:case 4:n=n.containerInfo,r=!0;break e}o=o.return}o=!0}if(5===a.tag||6===a.tag){e:for(var l=e,s=a,u=s;;)if(yl(l,u),null!==u.child&&4!==u.tag)u.child.return=u,u=u.child;else{if(u===s)break e;for(;null===u.sibling;){if(null===u.return||u.return===s)break e;u=u.return}u.sibling.return=u.return,u=u.sibling}r?(l=n,s=a.stateNode,8===l.nodeType?l.parentNode.removeChild(s):l.removeChild(s)):n.removeChild(a.stateNode)}else if(4===a.tag){if(null!==a.child){n=a.stateNode.containerInfo,r=!0,a.child.return=a,a=a.child;continue}}else if(yl(e,a),null!==a.child){a.child.return=a,a=a.child;continue}if(a===t)break;for(;null===a.sibling;){if(null===a.return||a.return===t)return;4===(a=a.return).tag&&(o=!1)}a.sibling.return=a.return,a=a.sibling}}function Cl(e,t){switch(t.tag){case 0:case 11:case 14:case 15:case 22:var n=t.updateQueue;if(null!==(n=null!==n?n.lastEffect:null)){var r=n=n.next;do{3==(3&r.tag)&&(e=r.destroy,r.destroy=void 0,void 0!==e&&e()),r=r.next}while(r!==n)}return;case 1:case 12:case 17:return;case 5:if(null!=(n=t.stateNode)){r=t.memoizedProps;var a=null!==e?e.memoizedProps:r;e=t.type;var o=t.updateQueue;if(t.updateQueue=null,null!==o){for(n[Jr]=r,"input"===e&&"radio"===r.type&&null!=r.name&&te(n,r),Te(e,a),t=Te(e,r),a=0;a<o.length;a+=2){var l=o[a],s=o[a+1];"style"===l?Ee(n,s):"dangerouslySetInnerHTML"===l?ve(n,s):"children"===l?be(n,s):w(n,l,s,t)}switch(e){case"input":ne(n,r);break;case"textarea":ue(n,r);break;case"select":e=n._wrapperState.wasMultiple,n._wrapperState.wasMultiple=!!r.multiple,null!=(o=r.value)?ie(n,!!r.multiple,o,!1):e!==!!r.multiple&&(null!=r.defaultValue?ie(n,!!r.multiple,r.defaultValue,!0):ie(n,!!r.multiple,r.multiple?[]:"",!1))}}}return;case 6:if(null===t.stateNode)throw Error(i(162));return void(t.stateNode.nodeValue=t.memoizedProps);case 3:return void((n=t.stateNode).hydrate&&(n.hydrate=!1,Et(n.containerInfo)));case 13:return null!==t.memoizedState&&(Gl=qa(),bl(t.child,!0)),void _l(t);case 19:return void _l(t);case 23:case 24:return void bl(t,null!==t.memoizedState)}throw Error(i(163))}function _l(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new ml),t.forEach((function(t){var r=Us.bind(null,e,t);n.has(t)||(n.add(t),t.then(r,r))}))}}function Ll(e,t){return null!==e&&(null===(e=e.memoizedState)||null!==e.dehydrated)&&(null!==(t=t.memoizedState)&&null===t.dehydrated)}var Rl=Math.ceil,Al=k.ReactCurrentDispatcher,Nl=k.ReactCurrentOwner,Pl=0,Ol=null,Il=null,Dl=0,Ml=0,Fl=ua(0),Bl=0,jl=null,zl=0,$l=0,Ul=0,ql=0,Hl=null,Gl=0,Zl=1/0;function Ql(){Zl=qa()+500}var Vl,Wl=null,Kl=!1,Yl=null,Xl=null,Jl=!1,es=null,ts=90,ns=[],rs=[],as=null,os=0,is=null,ls=-1,ss=0,us=0,cs=null,ds=!1;function fs(){return 0!=(48&Pl)?qa():-1!==ls?ls:ls=qa()}function ps(e){if(0==(2&(e=e.mode)))return 1;if(0==(4&e))return 99===Ha()?1:2;if(0===ss&&(ss=zl),0!==Ka.transition){0!==us&&(us=null!==Hl?Hl.pendingLanes:0),e=ss;var t=4186112&~us;return 0===(t&=-t)&&(0===(t=(e=4186112&~e)&-e)&&(t=8192)),t}return e=Ha(),0!=(4&Pl)&&98===e?e=zt(12,ss):e=zt(e=function(e){switch(e){case 99:return 15;case 98:return 10;case 97:case 96:return 8;case 95:return 2;default:return 0}}(e),ss),e}function ms(e,t,n){if(50<os)throw os=0,is=null,Error(i(185));if(null===(e=hs(e,t)))return null;qt(e,t,n),e===Ol&&(Ul|=t,4===Bl&&bs(e,Dl));var r=Ha();1===t?0!=(8&Pl)&&0==(48&Pl)?ys(e):(gs(e,n),0===Pl&&(Ql(),Va())):(0==(4&Pl)||98!==r&&99!==r||(null===as?as=new Set([e]):as.add(e)),gs(e,n)),Hl=e}function hs(e,t){e.lanes|=t;var n=e.alternate;for(null!==n&&(n.lanes|=t),n=e,e=e.return;null!==e;)e.childLanes|=t,null!==(n=e.alternate)&&(n.childLanes|=t),n=e,e=e.return;return 3===n.tag?n.stateNode:null}function gs(e,t){for(var n=e.callbackNode,r=e.suspendedLanes,a=e.pingedLanes,o=e.expirationTimes,l=e.pendingLanes;0<l;){var s=31-Ht(l),u=1<<s,c=o[s];if(-1===c){if(0==(u&r)||0!=(u&a)){c=t,Ft(u);var d=Mt;o[s]=10<=d?c+250:6<=d?c+5e3:-1}}else c<=t&&(e.expiredLanes|=u);l&=~u}if(r=Bt(e,e===Ol?Dl:0),t=Mt,0===r)null!==n&&(n!==Fa&&_a(n),e.callbackNode=null,e.callbackPriority=0);else{if(null!==n){if(e.callbackPriority===t)return;n!==Fa&&_a(n)}15===t?(n=ys.bind(null,e),null===ja?(ja=[n],za=Ca(Pa,Wa)):ja.push(n),n=Fa):14===t?n=Qa(99,ys.bind(null,e)):(n=function(e){switch(e){case 15:case 14:return 99;case 13:case 12:case 11:case 10:return 98;case 9:case 8:case 7:case 6:case 4:case 5:return 97;case 3:case 2:case 1:return 95;case 0:return 90;default:throw Error(i(358,e))}}(t),n=Qa(n,vs.bind(null,e))),e.callbackPriority=t,e.callbackNode=n}}function vs(e){if(ls=-1,us=ss=0,0!=(48&Pl))throw Error(i(327));var t=e.callbackNode;if(Ds()&&e.callbackNode!==t)return null;var n=Bt(e,e===Ol?Dl:0);if(0===n)return null;var r=n,a=Pl;Pl|=16;var o=Cs();for(Ol===e&&Dl===r||(Ql(),xs(e,r));;)try{Rs();break}catch(s){Ts(e,s)}if(no(),Al.current=o,Pl=a,null!==Il?r=0:(Ol=null,Dl=0,r=Bl),0!=(zl&Ul))xs(e,0);else if(0!==r){if(2===r&&(Pl|=64,e.hydrate&&(e.hydrate=!1,Qr(e.containerInfo)),0!==(n=jt(e))&&(r=_s(e,n))),1===r)throw t=jl,xs(e,0),bs(e,n),gs(e,qa()),t;switch(e.finishedWork=e.current.alternate,e.finishedLanes=n,r){case 0:case 1:throw Error(i(345));case 2:case 5:Ps(e);break;case 3:if(bs(e,n),(62914560&n)===n&&10<(r=Gl+500-qa())){if(0!==Bt(e,0))break;if(((a=e.suspendedLanes)&n)!==n){fs(),e.pingedLanes|=e.suspendedLanes&a;break}e.timeoutHandle=Gr(Ps.bind(null,e),r);break}Ps(e);break;case 4:if(bs(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-Ht(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=qa()-n)?120:480>n?480:1080>n?1080:1920>n?1920:3e3>n?3e3:4320>n?4320:1960*Rl(n/1960))-n)){e.timeoutHandle=Gr(Ps.bind(null,e),n);break}Ps(e);break;default:throw Error(i(329))}}return gs(e,qa()),e.callbackNode===t?vs.bind(null,e):null}function bs(e,t){for(t&=~ql,t&=~Ul,e.suspendedLanes|=t,e.pingedLanes&=~t,e=e.expirationTimes;0<t;){var n=31-Ht(t),r=1<<n;e[n]=-1,t&=~r}}function ys(e){if(0!=(48&Pl))throw Error(i(327));if(Ds(),e===Ol&&0!=(e.expiredLanes&Dl)){var t=Dl,n=_s(e,t);0!=(zl&Ul)&&(n=_s(e,t=Bt(e,t)))}else n=_s(e,t=Bt(e,0));if(0!==e.tag&&2===n&&(Pl|=64,e.hydrate&&(e.hydrate=!1,Qr(e.containerInfo)),0!==(t=jt(e))&&(n=_s(e,t))),1===n)throw n=jl,xs(e,0),bs(e,t),gs(e,qa()),n;return e.finishedWork=e.current.alternate,e.finishedLanes=t,Ps(e),gs(e,qa()),null}function ws(e,t){var n=Pl;Pl|=1;try{return e(t)}finally{0===(Pl=n)&&(Ql(),Va())}}function ks(e,t){var n=Pl;Pl&=-2,Pl|=8;try{return e(t)}finally{0===(Pl=n)&&(Ql(),Va())}}function Es(e,t){da(Fl,Ml),Ml|=t,zl|=t}function Ss(){Ml=Fl.current,ca(Fl)}function xs(e,t){e.finishedWork=null,e.finishedLanes=0;var n=e.timeoutHandle;if(-1!==n&&(e.timeoutHandle=-1,Zr(n)),null!==Il)for(n=Il.return;null!==n;){var r=n;switch(r.tag){case 1:null!=(r=r.type.childContextTypes)&&ba();break;case 3:Do(),ca(ma),ca(pa),Ko();break;case 5:Fo(r);break;case 4:Do();break;case 13:case 19:ca(Bo);break;case 10:ro(r);break;case 23:case 24:Ss()}n=n.return}Ol=e,Il=Zs(e.current,null),Dl=Ml=zl=t,Bl=0,jl=null,ql=Ul=$l=0}function Ts(e,t){for(;;){var n=Il;try{if(no(),Yo.current=Pi,ri){for(var r=ei.memoizedState;null!==r;){var a=r.queue;null!==a&&(a.pending=null),r=r.next}ri=!1}if(Jo=0,ni=ti=ei=null,ai=!1,Nl.current=null,null===n||null===n.return){Bl=1,jl=t,Il=null;break}e:{var o=e,i=n.return,l=n,s=t;if(t=Dl,l.flags|=2048,l.firstEffect=l.lastEffect=null,null!==s&&"object"==typeof s&&"function"==typeof s.then){var u=s;if(0==(2&l.mode)){var c=l.alternate;c?(l.updateQueue=c.updateQueue,l.memoizedState=c.memoizedState,l.lanes=c.lanes):(l.updateQueue=null,l.memoizedState=null)}var d=0!=(1&Bo.current),f=i;do{var p;if(p=13===f.tag){var m=f.memoizedState;if(null!==m)p=null!==m.dehydrated;else{var h=f.memoizedProps;p=void 0!==h.fallback&&(!0!==h.unstable_avoidThisFallback||!d)}}if(p){var g=f.updateQueue;if(null===g){var v=new Set;v.add(u),f.updateQueue=v}else g.add(u);if(0==(2&f.mode)){if(f.flags|=64,l.flags|=16384,l.flags&=-2981,1===l.tag)if(null===l.alternate)l.tag=17;else{var b=co(-1,1);b.tag=2,fo(l,b)}l.lanes|=1;break e}s=void 0,l=t;var y=o.pingCache;if(null===y?(y=o.pingCache=new dl,s=new Set,y.set(u,s)):void 0===(s=y.get(u))&&(s=new Set,y.set(u,s)),!s.has(l)){s.add(l);var w=$s.bind(null,o,u,l);u.then(w,w)}f.flags|=4096,f.lanes=t;break e}f=f.return}while(null!==f);s=Error((Q(l.type)||"A React component")+" suspended while rendering, but no fallback UI was specified.\n\nAdd a <Suspense fallback=...> component higher in the tree to provide a loading indicator or placeholder to display.")}5!==Bl&&(Bl=2),s=ul(s,l),f=i;do{switch(f.tag){case 3:o=s,f.flags|=4096,t&=-t,f.lanes|=t,po(f,fl(0,o,t));break e;case 1:o=s;var k=f.type,E=f.stateNode;if(0==(64&f.flags)&&("function"==typeof k.getDerivedStateFromError||null!==E&&"function"==typeof E.componentDidCatch&&(null===Xl||!Xl.has(E)))){f.flags|=4096,t&=-t,f.lanes|=t,po(f,pl(f,o,t));break e}}f=f.return}while(null!==f)}Ns(n)}catch(S){t=S,Il===n&&null!==n&&(Il=n=n.return);continue}break}}function Cs(){var e=Al.current;return Al.current=Pi,null===e?Pi:e}function _s(e,t){var n=Pl;Pl|=16;var r=Cs();for(Ol===e&&Dl===t||xs(e,t);;)try{Ls();break}catch(a){Ts(e,a)}if(no(),Pl=n,Al.current=r,null!==Il)throw Error(i(261));return Ol=null,Dl=0,Bl}function Ls(){for(;null!==Il;)As(Il)}function Rs(){for(;null!==Il&&!La();)As(Il)}function As(e){var t=Vl(e.alternate,e,Ml);e.memoizedProps=e.pendingProps,null===t?Ns(e):Il=t,Nl.current=null}function Ns(e){var t=e;do{var n=t.alternate;if(e=t.return,0==(2048&t.flags)){if(null!==(n=ll(n,t,Ml)))return void(Il=n);if(24!==(n=t).tag&&23!==n.tag||null===n.memoizedState||0!=(1073741824&Ml)||0==(4&n.mode)){for(var r=0,a=n.child;null!==a;)r|=a.lanes|a.childLanes,a=a.sibling;n.childLanes=r}null!==e&&0==(2048&e.flags)&&(null===e.firstEffect&&(e.firstEffect=t.firstEffect),null!==t.lastEffect&&(null!==e.lastEffect&&(e.lastEffect.nextEffect=t.firstEffect),e.lastEffect=t.lastEffect),1<t.flags&&(null!==e.lastEffect?e.lastEffect.nextEffect=t:e.firstEffect=t,e.lastEffect=t))}else{if(null!==(n=sl(t)))return n.flags&=2047,void(Il=n);null!==e&&(e.firstEffect=e.lastEffect=null,e.flags|=2048)}if(null!==(t=t.sibling))return void(Il=t);Il=t=e}while(null!==t);0===Bl&&(Bl=5)}function Ps(e){var t=Ha();return Za(99,Os.bind(null,e,t)),null}function Os(e,t){do{Ds()}while(null!==es);if(0!=(48&Pl))throw Error(i(327));var n=e.finishedWork;if(null===n)return null;if(e.finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(i(177));e.callbackNode=null;var r=n.lanes|n.childLanes,a=r,o=e.pendingLanes&~a;e.pendingLanes=a,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=a,e.mutableReadLanes&=a,e.entangledLanes&=a,a=e.entanglements;for(var l=e.eventTimes,s=e.expirationTimes;0<o;){var u=31-Ht(o),c=1<<u;a[u]=0,l[u]=-1,s[u]=-1,o&=~c}if(null!==as&&0==(24&r)&&as.has(e)&&as.delete(e),e===Ol&&(Il=Ol=null,Dl=0),1<n.flags?null!==n.lastEffect?(n.lastEffect.nextEffect=n,r=n.firstEffect):r=n:r=n.firstEffect,null!==r){if(a=Pl,Pl|=32,Nl.current=null,$r=Wt,vr(l=gr())){if("selectionStart"in l)s={start:l.selectionStart,end:l.selectionEnd};else e:if(s=(s=l.ownerDocument)&&s.defaultView||window,(c=s.getSelection&&s.getSelection())&&0!==c.rangeCount){s=c.anchorNode,o=c.anchorOffset,u=c.focusNode,c=c.focusOffset;try{s.nodeType,u.nodeType}catch(C){s=null;break e}var d=0,f=-1,p=-1,m=0,h=0,g=l,v=null;t:for(;;){for(var b;g!==s||0!==o&&3!==g.nodeType||(f=d+o),g!==u||0!==c&&3!==g.nodeType||(p=d+c),3===g.nodeType&&(d+=g.nodeValue.length),null!==(b=g.firstChild);)v=g,g=b;for(;;){if(g===l)break t;if(v===s&&++m===o&&(f=d),v===u&&++h===c&&(p=d),null!==(b=g.nextSibling))break;v=(g=v).parentNode}g=b}s=-1===f||-1===p?null:{start:f,end:p}}else s=null;s=s||{start:0,end:0}}else s=null;Ur={focusedElem:l,selectionRange:s},Wt=!1,cs=null,ds=!1,Wl=r;do{try{Is()}catch(C){if(null===Wl)throw Error(i(330));zs(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);cs=null,Wl=r;do{try{for(l=e;null!==Wl;){var y=Wl.flags;if(16&y&&be(Wl.stateNode,""),128&y){var w=Wl.alternate;if(null!==w){var k=w.ref;null!==k&&("function"==typeof k?k(null):k.current=null)}}switch(1038&y){case 2:El(Wl),Wl.flags&=-3;break;case 6:El(Wl),Wl.flags&=-3,Cl(Wl.alternate,Wl);break;case 1024:Wl.flags&=-1025;break;case 1028:Wl.flags&=-1025,Cl(Wl.alternate,Wl);break;case 4:Cl(Wl.alternate,Wl);break;case 8:Tl(l,s=Wl);var E=s.alternate;wl(s),null!==E&&wl(E)}Wl=Wl.nextEffect}}catch(C){if(null===Wl)throw Error(i(330));zs(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);if(k=Ur,w=gr(),y=k.focusedElem,l=k.selectionRange,w!==y&&y&&y.ownerDocument&&hr(y.ownerDocument.documentElement,y)){null!==l&&vr(y)&&(w=l.start,void 0===(k=l.end)&&(k=w),"selectionStart"in y?(y.selectionStart=w,y.selectionEnd=Math.min(k,y.value.length)):(k=(w=y.ownerDocument||document)&&w.defaultView||window).getSelection&&(k=k.getSelection(),s=y.textContent.length,E=Math.min(l.start,s),l=void 0===l.end?E:Math.min(l.end,s),!k.extend&&E>l&&(s=l,l=E,E=s),s=mr(y,E),o=mr(y,l),s&&o&&(1!==k.rangeCount||k.anchorNode!==s.node||k.anchorOffset!==s.offset||k.focusNode!==o.node||k.focusOffset!==o.offset)&&((w=w.createRange()).setStart(s.node,s.offset),k.removeAllRanges(),E>l?(k.addRange(w),k.extend(o.node,o.offset)):(w.setEnd(o.node,o.offset),k.addRange(w))))),w=[];for(k=y;k=k.parentNode;)1===k.nodeType&&w.push({element:k,left:k.scrollLeft,top:k.scrollTop});for("function"==typeof y.focus&&y.focus(),y=0;y<w.length;y++)(k=w[y]).element.scrollLeft=k.left,k.element.scrollTop=k.top}Wt=!!$r,Ur=$r=null,e.current=n,Wl=r;do{try{for(y=e;null!==Wl;){var S=Wl.flags;if(36&S&&vl(y,Wl.alternate,Wl),128&S){w=void 0;var x=Wl.ref;if(null!==x){var T=Wl.stateNode;Wl.tag,w=T,"function"==typeof x?x(w):x.current=w}}Wl=Wl.nextEffect}}catch(C){if(null===Wl)throw Error(i(330));zs(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);Wl=null,Ba(),Pl=a}else e.current=n;if(Jl)Jl=!1,es=e,ts=t;else for(Wl=r;null!==Wl;)t=Wl.nextEffect,Wl.nextEffect=null,8&Wl.flags&&((S=Wl).sibling=null,S.stateNode=null),Wl=t;if(0===(r=e.pendingLanes)&&(Xl=null),1===r?e===is?os++:(os=0,is=e):os=0,n=n.stateNode,xa&&"function"==typeof xa.onCommitFiberRoot)try{xa.onCommitFiberRoot(Sa,n,void 0,64==(64&n.current.flags))}catch(C){}if(gs(e,qa()),Kl)throw Kl=!1,e=Yl,Yl=null,e;return 0!=(8&Pl)||Va(),null}function Is(){for(;null!==Wl;){var e=Wl.alternate;ds||null===cs||(0!=(8&Wl.flags)?et(Wl,cs)&&(ds=!0):13===Wl.tag&&Ll(e,Wl)&&et(Wl,cs)&&(ds=!0));var t=Wl.flags;0!=(256&t)&&gl(e,Wl),0==(512&t)||Jl||(Jl=!0,Qa(97,(function(){return Ds(),null}))),Wl=Wl.nextEffect}}function Ds(){if(90!==ts){var e=97<ts?97:ts;return ts=90,Za(e,Bs)}return!1}function Ms(e,t){ns.push(t,e),Jl||(Jl=!0,Qa(97,(function(){return Ds(),null})))}function Fs(e,t){rs.push(t,e),Jl||(Jl=!0,Qa(97,(function(){return Ds(),null})))}function Bs(){if(null===es)return!1;var e=es;if(es=null,0!=(48&Pl))throw Error(i(331));var t=Pl;Pl|=32;var n=rs;rs=[];for(var r=0;r<n.length;r+=2){var a=n[r],o=n[r+1],l=a.destroy;if(a.destroy=void 0,"function"==typeof l)try{l()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(n=ns,ns=[],r=0;r<n.length;r+=2){a=n[r],o=n[r+1];try{var s=a.create;a.destroy=s()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(s=e.current.firstEffect;null!==s;)e=s.nextEffect,s.nextEffect=null,8&s.flags&&(s.sibling=null,s.stateNode=null),s=e;return Pl=t,Va(),!0}function js(e,t,n){fo(e,t=fl(0,t=ul(n,t),1)),t=fs(),null!==(e=hs(e,1))&&(qt(e,1,t),gs(e,t))}function zs(e,t){if(3===e.tag)js(e,e,t);else for(var n=e.return;null!==n;){if(3===n.tag){js(n,e,t);break}if(1===n.tag){var r=n.stateNode;if("function"==typeof n.type.getDerivedStateFromError||"function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r))){var a=pl(n,e=ul(t,e),1);if(fo(n,a),a=fs(),null!==(n=hs(n,1)))qt(n,1,a),gs(n,a);else if("function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r)))try{r.componentDidCatch(t,e)}catch(o){}break}}n=n.return}}function $s(e,t,n){var r=e.pingCache;null!==r&&r.delete(t),t=fs(),e.pingedLanes|=e.suspendedLanes&n,Ol===e&&(Dl&n)===n&&(4===Bl||3===Bl&&(62914560&Dl)===Dl&&500>qa()-Gl?xs(e,0):ql|=n),gs(e,t)}function Us(e,t){var n=e.stateNode;null!==n&&n.delete(t),0===(t=0)&&(0==(2&(t=e.mode))?t=1:0==(4&t)?t=99===Ha()?1:2:(0===ss&&(ss=zl),0===(t=$t(62914560&~ss))&&(t=4194304))),n=fs(),null!==(e=hs(e,t))&&(qt(e,t,n),gs(e,n))}function qs(e,t,n,r){this.tag=e,this.key=n,this.sibling=this.child=this.return=this.stateNode=this.type=this.elementType=null,this.index=0,this.ref=null,this.pendingProps=t,this.dependencies=this.memoizedState=this.updateQueue=this.memoizedProps=null,this.mode=r,this.flags=0,this.lastEffect=this.firstEffect=this.nextEffect=null,this.childLanes=this.lanes=0,this.alternate=null}function Hs(e,t,n,r){return new qs(e,t,n,r)}function Gs(e){return!(!(e=e.prototype)||!e.isReactComponent)}function Zs(e,t){var n=e.alternate;return null===n?((n=Hs(e.tag,t,e.key,e.mode)).elementType=e.elementType,n.type=e.type,n.stateNode=e.stateNode,n.alternate=e,e.alternate=n):(n.pendingProps=t,n.type=e.type,n.flags=0,n.nextEffect=null,n.firstEffect=null,n.lastEffect=null),n.childLanes=e.childLanes,n.lanes=e.lanes,n.child=e.child,n.memoizedProps=e.memoizedProps,n.memoizedState=e.memoizedState,n.updateQueue=e.updateQueue,t=e.dependencies,n.dependencies=null===t?null:{lanes:t.lanes,firstContext:t.firstContext},n.sibling=e.sibling,n.index=e.index,n.ref=e.ref,n}function Qs(e,t,n,r,a,o){var l=2;if(r=e,"function"==typeof e)Gs(e)&&(l=1);else if("string"==typeof e)l=5;else e:switch(e){case x:return Vs(n.children,a,o,t);case M:l=8,a|=16;break;case T:l=8,a|=1;break;case C:return(e=Hs(12,n,t,8|a)).elementType=C,e.type=C,e.lanes=o,e;case A:return(e=Hs(13,n,t,a)).type=A,e.elementType=A,e.lanes=o,e;case N:return(e=Hs(19,n,t,a)).elementType=N,e.lanes=o,e;case F:return Ws(n,a,o,t);case B:return(e=Hs(24,n,t,a)).elementType=B,e.lanes=o,e;default:if("object"==typeof e&&null!==e)switch(e.$$typeof){case _:l=10;break e;case L:l=9;break e;case R:l=11;break e;case P:l=14;break e;case O:l=16,r=null;break e;case I:l=22;break e}throw Error(i(130,null==e?e:typeof e,""))}return(t=Hs(l,n,t,a)).elementType=e,t.type=r,t.lanes=o,t}function Vs(e,t,n,r){return(e=Hs(7,e,r,t)).lanes=n,e}function Ws(e,t,n,r){return(e=Hs(23,e,r,t)).elementType=F,e.lanes=n,e}function Ks(e,t,n){return(e=Hs(6,e,null,t)).lanes=n,e}function Ys(e,t,n){return(t=Hs(4,null!==e.children?e.children:[],e.key,t)).lanes=n,t.stateNode={containerInfo:e.containerInfo,pendingChildren:null,implementation:e.implementation},t}function Xs(e,t,n){this.tag=t,this.containerInfo=e,this.finishedWork=this.pingCache=this.current=this.pendingChildren=null,this.timeoutHandle=-1,this.pendingContext=this.context=null,this.hydrate=n,this.callbackNode=null,this.callbackPriority=0,this.eventTimes=Ut(0),this.expirationTimes=Ut(-1),this.entangledLanes=this.finishedLanes=this.mutableReadLanes=this.expiredLanes=this.pingedLanes=this.suspendedLanes=this.pendingLanes=0,this.entanglements=Ut(0),this.mutableSourceEagerHydrationData=null}function Js(e,t,n){var r=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null;return{$$typeof:S,key:null==r?null:""+r,children:e,containerInfo:t,implementation:n}}function eu(e,t,n,r){var a=t.current,o=fs(),l=ps(a);e:if(n){t:{if(Ke(n=n._reactInternals)!==n||1!==n.tag)throw Error(i(170));var s=n;do{switch(s.tag){case 3:s=s.stateNode.context;break t;case 1:if(va(s.type)){s=s.stateNode.__reactInternalMemoizedMergedChildContext;break t}}s=s.return}while(null!==s);throw Error(i(171))}if(1===n.tag){var u=n.type;if(va(u)){n=wa(n,u,s);break e}}n=s}else n=fa;return null===t.context?t.context=n:t.pendingContext=n,(t=co(o,l)).payload={element:e},null!==(r=void 0===r?null:r)&&(t.callback=r),fo(a,t),ms(a,l,o),l}function tu(e){return(e=e.current).child?(e.child.tag,e.child.stateNode):null}function nu(e,t){if(null!==(e=e.memoizedState)&&null!==e.dehydrated){var n=e.retryLane;e.retryLane=0!==n&&n<t?n:t}}function ru(e,t){nu(e,t),(e=e.alternate)&&nu(e,t)}function au(e,t,n){var r=null!=n&&null!=n.hydrationOptions&&n.hydrationOptions.mutableSources||null;if(n=new Xs(e,t,null!=n&&!0===n.hydrate),t=Hs(3,null,null,2===t?7:1===t?3:0),n.current=t,t.stateNode=n,so(t),e[ea]=n.current,Pr(8===e.nodeType?e.parentNode:e),r)for(e=0;e<r.length;e++){var a=(t=r[e])._getVersion;a=a(t._source),null==n.mutableSourceEagerHydrationData?n.mutableSourceEagerHydrationData=[t,a]:n.mutableSourceEagerHydrationData.push(t,a)}this._internalRoot=n}function ou(e){return!(!e||1!==e.nodeType&&9!==e.nodeType&&11!==e.nodeType&&(8!==e.nodeType||" react-mount-point-unstable "!==e.nodeValue))}function iu(e,t,n,r,a){var o=n._reactRootContainer;if(o){var i=o._internalRoot;if("function"==typeof a){var l=a;a=function(){var e=tu(i);l.call(e)}}eu(t,i,e,a)}else{if(o=n._reactRootContainer=function(e,t){if(t||(t=!(!(t=e?9===e.nodeType?e.documentElement:e.firstChild:null)||1!==t.nodeType||!t.hasAttribute("data-reactroot"))),!t)for(var n;n=e.lastChild;)e.removeChild(n);return new au(e,0,t?{hydrate:!0}:void 0)}(n,r),i=o._internalRoot,"function"==typeof a){var s=a;a=function(){var e=tu(i);s.call(e)}}ks((function(){eu(t,i,e,a)}))}return tu(i)}function lu(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!ou(t))throw Error(i(200));return Js(e,t,null,n)}Vl=function(e,t,n){var r=t.lanes;if(null!==e)if(e.memoizedProps!==t.pendingProps||ma.current)Fi=!0;else{if(0==(n&r)){switch(Fi=!1,t.tag){case 3:Qi(t),Vo();break;case 5:Mo(t);break;case 1:va(t.type)&&ka(t);break;case 4:Io(t,t.stateNode.containerInfo);break;case 10:r=t.memoizedProps.value;var a=t.type._context;da(Xa,a._currentValue),a._currentValue=r;break;case 13:if(null!==t.memoizedState)return 0!=(n&t.child.childLanes)?Xi(e,t,n):(da(Bo,1&Bo.current),null!==(t=ol(e,t,n))?t.sibling:null);da(Bo,1&Bo.current);break;case 19:if(r=0!=(n&t.childLanes),0!=(64&e.flags)){if(r)return al(e,t,n);t.flags|=64}if(null!==(a=t.memoizedState)&&(a.rendering=null,a.tail=null,a.lastEffect=null),da(Bo,Bo.current),r)break;return null;case 23:case 24:return t.lanes=0,Ui(e,t,n)}return ol(e,t,n)}Fi=0!=(16384&e.flags)}else Fi=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=ga(t,pa.current),oo(t,n),a=li(null,t,r,e,a,n),t.flags|=1,"object"==typeof a&&null!==a&&"function"==typeof a.render&&void 0===a.$$typeof){if(t.tag=1,t.memoizedState=null,t.updateQueue=null,va(r)){var o=!0;ka(t)}else o=!1;t.memoizedState=null!==a.state&&void 0!==a.state?a.state:null,so(t);var l=r.getDerivedStateFromProps;"function"==typeof l&&vo(t,r,l,e),a.updater=bo,t.stateNode=a,a._reactInternals=t,Eo(t,r,e,n),t=Zi(null,t,r,!0,o,n)}else t.tag=0,Bi(null,t,a,n),t=t.child;return t;case 16:a=t.elementType;e:{switch(null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=(o=a._init)(a._payload),t.type=a,o=t.tag=function(e){if("function"==typeof e)return Gs(e)?1:0;if(null!=e){if((e=e.$$typeof)===R)return 11;if(e===P)return 14}return 2}(a),e=Ya(a,e),o){case 0:t=Hi(null,t,a,e,n);break e;case 1:t=Gi(null,t,a,e,n);break e;case 11:t=ji(null,t,a,e,n);break e;case 14:t=zi(null,t,a,Ya(a.type,e),r,n);break e}throw Error(i(306,a,""))}return t;case 0:return r=t.type,a=t.pendingProps,Hi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 1:return r=t.type,a=t.pendingProps,Gi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 3:if(Qi(t),r=t.updateQueue,null===e||null===r)throw Error(i(282));if(r=t.pendingProps,a=null!==(a=t.memoizedState)?a.element:null,uo(e,t),mo(t,r,null,n),(r=t.memoizedState.element)===a)Vo(),t=ol(e,t,n);else{if((o=(a=t.stateNode).hydrate)&&($o=Vr(t.stateNode.containerInfo.firstChild),zo=t,o=Uo=!0),o){if(null!=(e=a.mutableSourceEagerHydrationData))for(a=0;a<e.length;a+=2)(o=e[a])._workInProgressVersionPrimary=e[a+1],Wo.push(o);for(n=Lo(t,null,r,n),t.child=n;n;)n.flags=-3&n.flags|1024,n=n.sibling}else Bi(e,t,r,n),Vo();t=t.child}return t;case 5:return Mo(t),null===e&&Go(t),r=t.type,a=t.pendingProps,o=null!==e?e.memoizedProps:null,l=a.children,Hr(r,a)?l=null:null!==o&&Hr(r,o)&&(t.flags|=16),qi(e,t),Bi(e,t,l,n),t.child;case 6:return null===e&&Go(t),null;case 13:return Xi(e,t,n);case 4:return Io(t,t.stateNode.containerInfo),r=t.pendingProps,null===e?t.child=_o(t,null,r,n):Bi(e,t,r,n),t.child;case 11:return r=t.type,a=t.pendingProps,ji(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 7:return Bi(e,t,t.pendingProps,n),t.child;case 8:case 12:return Bi(e,t,t.pendingProps.children,n),t.child;case 10:e:{r=t.type._context,a=t.pendingProps,l=t.memoizedProps,o=a.value;var s=t.type._context;if(da(Xa,s._currentValue),s._currentValue=o,null!==l)if(s=l.value,0===(o=cr(s,o)?0:0|("function"==typeof r._calculateChangedBits?r._calculateChangedBits(s,o):1073741823))){if(l.children===a.children&&!ma.current){t=ol(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var u=s.dependencies;if(null!==u){l=s.child;for(var c=u.firstContext;null!==c;){if(c.context===r&&0!=(c.observedBits&o)){1===s.tag&&((c=co(-1,n&-n)).tag=2,fo(s,c)),s.lanes|=n,null!==(c=s.alternate)&&(c.lanes|=n),ao(s.return,n),u.lanes|=n;break}c=c.next}}else l=10===s.tag&&s.type===t.type?null:s.child;if(null!==l)l.return=s;else for(l=s;null!==l;){if(l===t){l=null;break}if(null!==(s=l.sibling)){s.return=l.return,l=s;break}l=l.return}s=l}Bi(e,t,a.children,n),t=t.child}return t;case 9:return a=t.type,r=(o=t.pendingProps).children,oo(t,n),r=r(a=io(a,o.unstable_observedBits)),t.flags|=1,Bi(e,t,r,n),t.child;case 14:return o=Ya(a=t.type,t.pendingProps),zi(e,t,a,o=Ya(a.type,o),r,n);case 15:return $i(e,t,t.type,t.pendingProps,r,n);case 17:return r=t.type,a=t.pendingProps,a=t.elementType===r?a:Ya(r,a),null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),t.tag=1,va(r)?(e=!0,ka(t)):e=!1,oo(t,n),wo(t,r,a),Eo(t,r,a,n),Zi(null,t,r,!0,e,n);case 19:return al(e,t,n);case 23:case 24:return Ui(e,t,n)}throw Error(i(156,t.tag))},au.prototype.render=function(e){eu(e,this._internalRoot,null,null)},au.prototype.unmount=function(){var e=this._internalRoot,t=e.containerInfo;eu(null,e,null,(function(){t[ea]=null}))},tt=function(e){13===e.tag&&(ms(e,4,fs()),ru(e,4))},nt=function(e){13===e.tag&&(ms(e,67108864,fs()),ru(e,67108864))},rt=function(e){if(13===e.tag){var t=fs(),n=ps(e);ms(e,n,t),ru(e,n)}},at=function(e,t){return t()},_e=function(e,t,n){switch(t){case"input":if(ne(e,n),t=n.name,"radio"===n.type&&null!=t){for(n=e;n.parentNode;)n=n.parentNode;for(n=n.querySelectorAll("input[name="+JSON.stringify(""+t)+'][type="radio"]'),t=0;t<n.length;t++){var r=n[t];if(r!==e&&r.form===e.form){var a=oa(r);if(!a)throw Error(i(90));Y(r),ne(r,a)}}}break;case"textarea":ue(e,n);break;case"select":null!=(t=n.value)&&ie(e,!!n.multiple,t,!1)}},Oe=ws,Ie=function(e,t,n,r,a){var o=Pl;Pl|=4;try{return Za(98,e.bind(null,t,n,r,a))}finally{0===(Pl=o)&&(Ql(),Va())}},De=function(){0==(49&Pl)&&(function(){if(null!==as){var e=as;as=null,e.forEach((function(e){e.expiredLanes|=24&e.pendingLanes,gs(e,qa())}))}Va()}(),Ds())},Me=function(e,t){var n=Pl;Pl|=2;try{return e(t)}finally{0===(Pl=n)&&(Ql(),Va())}};var su={Events:[ra,aa,oa,Ne,Pe,Ds,{current:!1}]},uu={findFiberByHostInstance:na,bundleType:0,version:"17.0.2",rendererPackageName:"react-dom"},cu={bundleType:uu.bundleType,version:uu.version,rendererPackageName:uu.rendererPackageName,rendererConfig:uu.rendererConfig,overrideHookState:null,overrideHookStateDeletePath:null,overrideHookStateRenamePath:null,overrideProps:null,overridePropsDeletePath:null,overridePropsRenamePath:null,setSuspenseHandler:null,scheduleUpdate:null,currentDispatcherRef:k.ReactCurrentDispatcher,findHostInstanceByFiber:function(e){return null===(e=Je(e))?null:e.stateNode},findFiberByHostInstance:uu.findFiberByHostInstance||function(){return null},findHostInstancesForRefresh:null,scheduleRefresh:null,scheduleRoot:null,setRefreshHandler:null,getCurrentFiber:null};if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__){var du=__REACT_DEVTOOLS_GLOBAL_HOOK__;if(!du.isDisabled&&du.supportsFiber)try{Sa=du.inject(cu),xa=du}catch(ge){}}t.hydrate=function(e,t,n){if(!ou(t))throw Error(i(200));return iu(null,e,t,!0,n)}},3935:(e,t,n)=>{"use strict";!function e(){if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(e)}catch(t){console.error(t)}}(),e.exports=n(4448)},9590:e=>{var t="undefined"!=typeof Element,n="function"==typeof Map,r="function"==typeof Set,a="function"==typeof ArrayBuffer&&!!ArrayBuffer.isView;function o(e,i){if(e===i)return!0;if(e&&i&&"object"==typeof e&&"object"==typeof i){if(e.constructor!==i.constructor)return!1;var l,s,u,c;if(Array.isArray(e)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(!o(e[s],i[s]))return!1;return!0}if(n&&e instanceof Map&&i instanceof Map){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;for(c=e.entries();!(s=c.next()).done;)if(!o(s.value[1],i.get(s.value[0])))return!1;return!0}if(r&&e instanceof Set&&i instanceof Set){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;return!0}if(a&&ArrayBuffer.isView(e)&&ArrayBuffer.isView(i)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(e[s]!==i[s])return!1;return!0}if(e.constructor===RegExp)return e.source===i.source&&e.flags===i.flags;if(e.valueOf!==Object.prototype.valueOf)return e.valueOf()===i.valueOf();if(e.toString!==Object.prototype.toString)return e.toString()===i.toString();if((l=(u=Object.keys(e)).length)!==Object.keys(i).length)return!1;for(s=l;0!=s--;)if(!Object.prototype.hasOwnProperty.call(i,u[s]))return!1;if(t&&e instanceof Element)return!1;for(s=l;0!=s--;)if(("_owner"!==u[s]&&"__v"!==u[s]&&"__o"!==u[s]||!e.$$typeof)&&!o(e[u[s]],i[u[s]]))return!1;return!0}return e!=e&&i!=i}e.exports=function(e,t){try{return o(e,t)}catch(n){if((n.message||"").match(/stack|recursion/i))return console.warn("react-fast-compare cannot handle circular refs"),!1;throw n}}},405:(e,t,n)=>{"use strict";n.d(t,{B6:()=>G,ql:()=>J});var r=n(7294),a=n(5697),o=n.n(a),i=n(9590),l=n.n(i),s=n(1143),u=n.n(s),c=n(6774),d=n.n(c);function f(){return f=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},f.apply(this,arguments)}function p(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,m(e,t)}function m(e,t){return m=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e},m(e,t)}function h(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t.indexOf(n=o[r])>=0||(a[n]=e[n]);return a}var g={BASE:"base",BODY:"body",HEAD:"head",HTML:"html",LINK:"link",META:"meta",NOSCRIPT:"noscript",SCRIPT:"script",STYLE:"style",TITLE:"title",FRAGMENT:"Symbol(react.fragment)"},v={rel:["amphtml","canonical","alternate"]},b={type:["application/ld+json"]},y={charset:"",name:["robots","description"],property:["og:type","og:title","og:url","og:image","og:image:alt","og:description","twitter:url","twitter:title","twitter:description","twitter:image","twitter:image:alt","twitter:card","twitter:site"]},w=Object.keys(g).map((function(e){return g[e]})),k={accesskey:"accessKey",charset:"charSet",class:"className",contenteditable:"contentEditable",contextmenu:"contextMenu","http-equiv":"httpEquiv",itemprop:"itemProp",tabindex:"tabIndex"},E=Object.keys(k).reduce((function(e,t){return e[k[t]]=t,e}),{}),S=function(e,t){for(var n=e.length-1;n>=0;n-=1){var r=e[n];if(Object.prototype.hasOwnProperty.call(r,t))return r[t]}return null},x=function(e){var t=S(e,g.TITLE),n=S(e,"titleTemplate");if(Array.isArray(t)&&(t=t.join("")),n&&t)return n.replace(/%s/g,(function(){return t}));var r=S(e,"defaultTitle");return t||r||void 0},T=function(e){return S(e,"onChangeClientState")||function(){}},C=function(e,t){return t.filter((function(t){return void 0!==t[e]})).map((function(t){return t[e]})).reduce((function(e,t){return f({},e,t)}),{})},_=function(e,t){return t.filter((function(e){return void 0!==e[g.BASE]})).map((function(e){return e[g.BASE]})).reverse().reduce((function(t,n){if(!t.length)for(var r=Object.keys(n),a=0;a<r.length;a+=1){var o=r[a].toLowerCase();if(-1!==e.indexOf(o)&&n[o])return t.concat(n)}return t}),[])},L=function(e,t,n){var r={};return n.filter((function(t){return!!Array.isArray(t[e])||(void 0!==t[e]&&console&&"function"==typeof console.warn&&console.warn("Helmet: "+e+' should be of type "Array". Instead found type "'+typeof t[e]+'"'),!1)})).map((function(t){return t[e]})).reverse().reduce((function(e,n){var a={};n.filter((function(e){for(var n,o=Object.keys(e),i=0;i<o.length;i+=1){var l=o[i],s=l.toLowerCase();-1===t.indexOf(s)||"rel"===n&&"canonical"===e[n].toLowerCase()||"rel"===s&&"stylesheet"===e[s].toLowerCase()||(n=s),-1===t.indexOf(l)||"innerHTML"!==l&&"cssText"!==l&&"itemprop"!==l||(n=l)}if(!n||!e[n])return!1;var u=e[n].toLowerCase();return r[n]||(r[n]={}),a[n]||(a[n]={}),!r[n][u]&&(a[n][u]=!0,!0)})).reverse().forEach((function(t){return e.push(t)}));for(var o=Object.keys(a),i=0;i<o.length;i+=1){var l=o[i],s=f({},r[l],a[l]);r[l]=s}return e}),[]).reverse()},R=function(e,t){if(Array.isArray(e)&&e.length)for(var n=0;n<e.length;n+=1)if(e[n][t])return!0;return!1},A=function(e){return Array.isArray(e)?e.join(""):e},N=function(e,t){return Array.isArray(e)?e.reduce((function(e,n){return function(e,t){for(var n=Object.keys(e),r=0;r<n.length;r+=1)if(t[n[r]]&&t[n[r]].includes(e[n[r]]))return!0;return!1}(n,t)?e.priority.push(n):e.default.push(n),e}),{priority:[],default:[]}):{default:e}},P=function(e,t){var n;return f({},e,((n={})[t]=void 0,n))},O=[g.NOSCRIPT,g.SCRIPT,g.STYLE],I=function(e,t){return void 0===t&&(t=!0),!1===t?String(e):String(e).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")},D=function(e){return Object.keys(e).reduce((function(t,n){var r=void 0!==e[n]?n+'="'+e[n]+'"':""+n;return t?t+" "+r:r}),"")},M=function(e,t){return void 0===t&&(t={}),Object.keys(e).reduce((function(t,n){return t[k[n]||n]=e[n],t}),t)},F=function(e,t){return t.map((function(t,n){var a,o=((a={key:n})["data-rh"]=!0,a);return Object.keys(t).forEach((function(e){var n=k[e]||e;"innerHTML"===n||"cssText"===n?o.dangerouslySetInnerHTML={__html:t.innerHTML||t.cssText}:o[n]=t[e]})),r.createElement(e,o)}))},B=function(e,t,n){switch(e){case g.TITLE:return{toComponent:function(){return n=t.titleAttributes,(a={key:e=t.title})["data-rh"]=!0,o=M(n,a),[r.createElement(g.TITLE,o,e)];var e,n,a,o},toString:function(){return function(e,t,n,r){var a=D(n),o=A(t);return a?"<"+e+' data-rh="true" '+a+">"+I(o,r)+"</"+e+">":"<"+e+' data-rh="true">'+I(o,r)+"</"+e+">"}(e,t.title,t.titleAttributes,n)}};case"bodyAttributes":case"htmlAttributes":return{toComponent:function(){return M(t)},toString:function(){return D(t)}};default:return{toComponent:function(){return F(e,t)},toString:function(){return function(e,t,n){return t.reduce((function(t,r){var a=Object.keys(r).filter((function(e){return!("innerHTML"===e||"cssText"===e)})).reduce((function(e,t){var a=void 0===r[t]?t:t+'="'+I(r[t],n)+'"';return e?e+" "+a:a}),""),o=r.innerHTML||r.cssText||"",i=-1===O.indexOf(e);return t+"<"+e+' data-rh="true" '+a+(i?"/>":">"+o+"</"+e+">")}),"")}(e,t,n)}}}},j=function(e){var t=e.baseTag,n=e.bodyAttributes,r=e.encode,a=e.htmlAttributes,o=e.noscriptTags,i=e.styleTags,l=e.title,s=void 0===l?"":l,u=e.titleAttributes,c=e.linkTags,d=e.metaTags,f=e.scriptTags,p={toComponent:function(){},toString:function(){return""}};if(e.prioritizeSeoTags){var m=function(e){var t=e.linkTags,n=e.scriptTags,r=e.encode,a=N(e.metaTags,y),o=N(t,v),i=N(n,b);return{priorityMethods:{toComponent:function(){return[].concat(F(g.META,a.priority),F(g.LINK,o.priority),F(g.SCRIPT,i.priority))},toString:function(){return B(g.META,a.priority,r)+" "+B(g.LINK,o.priority,r)+" "+B(g.SCRIPT,i.priority,r)}},metaTags:a.default,linkTags:o.default,scriptTags:i.default}}(e);p=m.priorityMethods,c=m.linkTags,d=m.metaTags,f=m.scriptTags}return{priority:p,base:B(g.BASE,t,r),bodyAttributes:B("bodyAttributes",n,r),htmlAttributes:B("htmlAttributes",a,r),link:B(g.LINK,c,r),meta:B(g.META,d,r),noscript:B(g.NOSCRIPT,o,r),script:B(g.SCRIPT,f,r),style:B(g.STYLE,i,r),title:B(g.TITLE,{title:s,titleAttributes:u},r)}},z=[],$=function(e,t){var n=this;void 0===t&&(t="undefined"!=typeof document),this.instances=[],this.value={setHelmet:function(e){n.context.helmet=e},helmetInstances:{get:function(){return n.canUseDOM?z:n.instances},add:function(e){(n.canUseDOM?z:n.instances).push(e)},remove:function(e){var t=(n.canUseDOM?z:n.instances).indexOf(e);(n.canUseDOM?z:n.instances).splice(t,1)}}},this.context=e,this.canUseDOM=t,t||(e.helmet=j({baseTag:[],bodyAttributes:{},encodeSpecialCharacters:!0,htmlAttributes:{},linkTags:[],metaTags:[],noscriptTags:[],scriptTags:[],styleTags:[],title:"",titleAttributes:{}}))},U=r.createContext({}),q=o().shape({setHelmet:o().func,helmetInstances:o().shape({get:o().func,add:o().func,remove:o().func})}),H="undefined"!=typeof document,G=function(e){function t(n){var r;return(r=e.call(this,n)||this).helmetData=new $(r.props.context,t.canUseDOM),r}return p(t,e),t.prototype.render=function(){return r.createElement(U.Provider,{value:this.helmetData.value},this.props.children)},t}(r.Component);G.canUseDOM=H,G.propTypes={context:o().shape({helmet:o().shape()}),children:o().node.isRequired},G.defaultProps={context:{}},G.displayName="HelmetProvider";var Z=function(e,t){var n,r=document.head||document.querySelector(g.HEAD),a=r.querySelectorAll(e+"[data-rh]"),o=[].slice.call(a),i=[];return t&&t.length&&t.forEach((function(t){var r=document.createElement(e);for(var a in t)Object.prototype.hasOwnProperty.call(t,a)&&("innerHTML"===a?r.innerHTML=t.innerHTML:"cssText"===a?r.styleSheet?r.styleSheet.cssText=t.cssText:r.appendChild(document.createTextNode(t.cssText)):r.setAttribute(a,void 0===t[a]?"":t[a]));r.setAttribute("data-rh","true"),o.some((function(e,t){return n=t,r.isEqualNode(e)}))?o.splice(n,1):i.push(r)})),o.forEach((function(e){return e.parentNode.removeChild(e)})),i.forEach((function(e){return r.appendChild(e)})),{oldTags:o,newTags:i}},Q=function(e,t){var n=document.getElementsByTagName(e)[0];if(n){for(var r=n.getAttribute("data-rh"),a=r?r.split(","):[],o=[].concat(a),i=Object.keys(t),l=0;l<i.length;l+=1){var s=i[l],u=t[s]||"";n.getAttribute(s)!==u&&n.setAttribute(s,u),-1===a.indexOf(s)&&a.push(s);var c=o.indexOf(s);-1!==c&&o.splice(c,1)}for(var d=o.length-1;d>=0;d-=1)n.removeAttribute(o[d]);a.length===o.length?n.removeAttribute("data-rh"):n.getAttribute("data-rh")!==i.join(",")&&n.setAttribute("data-rh",i.join(","))}},V=function(e,t){var n=e.baseTag,r=e.htmlAttributes,a=e.linkTags,o=e.metaTags,i=e.noscriptTags,l=e.onChangeClientState,s=e.scriptTags,u=e.styleTags,c=e.title,d=e.titleAttributes;Q(g.BODY,e.bodyAttributes),Q(g.HTML,r),function(e,t){void 0!==e&&document.title!==e&&(document.title=A(e)),Q(g.TITLE,t)}(c,d);var f={baseTag:Z(g.BASE,n),linkTags:Z(g.LINK,a),metaTags:Z(g.META,o),noscriptTags:Z(g.NOSCRIPT,i),scriptTags:Z(g.SCRIPT,s),styleTags:Z(g.STYLE,u)},p={},m={};Object.keys(f).forEach((function(e){var t=f[e],n=t.newTags,r=t.oldTags;n.length&&(p[e]=n),r.length&&(m[e]=f[e].oldTags)})),t&&t(),l(e,p,m)},W=null,K=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).rendered=!1,t}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!d()(e,this.props)},n.componentDidUpdate=function(){this.emitChange()},n.componentWillUnmount=function(){this.props.context.helmetInstances.remove(this),this.emitChange()},n.emitChange=function(){var e,t,n=this.props.context,r=n.setHelmet,a=null,o=(e=n.helmetInstances.get().map((function(e){var t=f({},e.props);return delete t.context,t})),{baseTag:_(["href"],e),bodyAttributes:C("bodyAttributes",e),defer:S(e,"defer"),encode:S(e,"encodeSpecialCharacters"),htmlAttributes:C("htmlAttributes",e),linkTags:L(g.LINK,["rel","href"],e),metaTags:L(g.META,["name","charset","http-equiv","property","itemprop"],e),noscriptTags:L(g.NOSCRIPT,["innerHTML"],e),onChangeClientState:T(e),scriptTags:L(g.SCRIPT,["src","innerHTML"],e),styleTags:L(g.STYLE,["cssText"],e),title:x(e),titleAttributes:C("titleAttributes",e),prioritizeSeoTags:R(e,"prioritizeSeoTags")});G.canUseDOM?(t=o,W&&cancelAnimationFrame(W),t.defer?W=requestAnimationFrame((function(){V(t,(function(){W=null}))})):(V(t),W=null)):j&&(a=j(o)),r(a)},n.init=function(){this.rendered||(this.rendered=!0,this.props.context.helmetInstances.add(this),this.emitChange())},n.render=function(){return this.init(),null},t}(r.Component);K.propTypes={context:q.isRequired},K.displayName="HelmetDispatcher";var Y=["children"],X=["children"],J=function(e){function t(){return e.apply(this,arguments)||this}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!l()(P(this.props,"helmetData"),P(e,"helmetData"))},n.mapNestedChildrenToProps=function(e,t){if(!t)return null;switch(e.type){case g.SCRIPT:case g.NOSCRIPT:return{innerHTML:t};case g.STYLE:return{cssText:t};default:throw new Error("<"+e.type+" /> elements are self-closing and can not contain children. Refer to our API for more information.")}},n.flattenArrayTypeChildren=function(e){var t,n=e.child,r=e.arrayTypeChildren;return f({},r,((t={})[n.type]=[].concat(r[n.type]||[],[f({},e.newChildProps,this.mapNestedChildrenToProps(n,e.nestedChildren))]),t))},n.mapObjectTypeChildren=function(e){var t,n,r=e.child,a=e.newProps,o=e.newChildProps,i=e.nestedChildren;switch(r.type){case g.TITLE:return f({},a,((t={})[r.type]=i,t.titleAttributes=f({},o),t));case g.BODY:return f({},a,{bodyAttributes:f({},o)});case g.HTML:return f({},a,{htmlAttributes:f({},o)});default:return f({},a,((n={})[r.type]=f({},o),n))}},n.mapArrayTypeChildrenToProps=function(e,t){var n=f({},t);return Object.keys(e).forEach((function(t){var r;n=f({},n,((r={})[t]=e[t],r))})),n},n.warnOnInvalidChildren=function(e,t){return u()(w.some((function(t){return e.type===t})),"function"==typeof e.type?"You may be attempting to nest <Helmet> components within each other, which is not allowed. Refer to our API for more information.":"Only elements types "+w.join(", ")+" are allowed. Helmet does not support rendering <"+e.type+"> elements. Refer to our API for more information."),u()(!t||"string"==typeof t||Array.isArray(t)&&!t.some((function(e){return"string"!=typeof e})),"Helmet expects a string as a child of <"+e.type+">. Did you forget to wrap your children in braces? ( <"+e.type+">{``}</"+e.type+"> ) Refer to our API for more information."),!0},n.mapChildrenToProps=function(e,t){var n=this,a={};return r.Children.forEach(e,(function(e){if(e&&e.props){var r=e.props,o=r.children,i=h(r,Y),l=Object.keys(i).reduce((function(e,t){return e[E[t]||t]=i[t],e}),{}),s=e.type;switch("symbol"==typeof s?s=s.toString():n.warnOnInvalidChildren(e,o),s){case g.FRAGMENT:t=n.mapChildrenToProps(o,t);break;case g.LINK:case g.META:case g.NOSCRIPT:case g.SCRIPT:case g.STYLE:a=n.flattenArrayTypeChildren({child:e,arrayTypeChildren:a,newChildProps:l,nestedChildren:o});break;default:t=n.mapObjectTypeChildren({child:e,newProps:t,newChildProps:l,nestedChildren:o})}}})),this.mapArrayTypeChildrenToProps(a,t)},n.render=function(){var e=this.props,t=e.children,n=h(e,X),a=f({},n),o=n.helmetData;return t&&(a=this.mapChildrenToProps(t,a)),!o||o instanceof $||(o=new $(o.context,o.instances)),o?r.createElement(K,f({},a,{context:o.value,helmetData:void 0})):r.createElement(U.Consumer,null,(function(e){return r.createElement(K,f({},a,{context:e}))}))},t}(r.Component);J.propTypes={base:o().object,bodyAttributes:o().object,children:o().oneOfType([o().arrayOf(o().node),o().node]),defaultTitle:o().string,defer:o().bool,encodeSpecialCharacters:o().bool,htmlAttributes:o().object,link:o().arrayOf(o().object),meta:o().arrayOf(o().object),noscript:o().arrayOf(o().object),onChangeClientState:o().func,script:o().arrayOf(o().object),style:o().arrayOf(o().object),title:o().string,titleAttributes:o().object,titleTemplate:o().string,prioritizeSeoTags:o().bool,helmetData:o().object},J.defaultProps={defer:!0,encodeSpecialCharacters:!0,prioritizeSeoTags:!1},J.displayName="Helmet"},9921:(e,t)=>{"use strict";var n="function"==typeof Symbol&&Symbol.for,r=n?Symbol.for("react.element"):60103,a=n?Symbol.for("react.portal"):60106,o=n?Symbol.for("react.fragment"):60107,i=n?Symbol.for("react.strict_mode"):60108,l=n?Symbol.for("react.profiler"):60114,s=n?Symbol.for("react.provider"):60109,u=n?Symbol.for("react.context"):60110,c=n?Symbol.for("react.async_mode"):60111,d=n?Symbol.for("react.concurrent_mode"):60111,f=n?Symbol.for("react.forward_ref"):60112,p=n?Symbol.for("react.suspense"):60113,m=n?Symbol.for("react.suspense_list"):60120,h=n?Symbol.for("react.memo"):60115,g=n?Symbol.for("react.lazy"):60116,v=n?Symbol.for("react.block"):60121,b=n?Symbol.for("react.fundamental"):60117,y=n?Symbol.for("react.responder"):60118,w=n?Symbol.for("react.scope"):60119;function k(e){if("object"==typeof e&&null!==e){var t=e.$$typeof;switch(t){case r:switch(e=e.type){case c:case d:case o:case l:case i:case p:return e;default:switch(e=e&&e.$$typeof){case u:case f:case g:case h:case s:return e;default:return t}}case a:return t}}}function E(e){return k(e)===d}t.AsyncMode=c,t.ConcurrentMode=d,t.ContextConsumer=u,t.ContextProvider=s,t.Element=r,t.ForwardRef=f,t.Fragment=o,t.Lazy=g,t.Memo=h,t.Portal=a,t.Profiler=l,t.StrictMode=i,t.Suspense=p,t.isAsyncMode=function(e){return E(e)||k(e)===c},t.isConcurrentMode=E,t.isContextConsumer=function(e){return k(e)===u},t.isContextProvider=function(e){return k(e)===s},t.isElement=function(e){return"object"==typeof e&&null!==e&&e.$$typeof===r},t.isForwardRef=function(e){return k(e)===f},t.isFragment=function(e){return k(e)===o},t.isLazy=function(e){return k(e)===g},t.isMemo=function(e){return k(e)===h},t.isPortal=function(e){return k(e)===a},t.isProfiler=function(e){return k(e)===l},t.isStrictMode=function(e){return k(e)===i},t.isSuspense=function(e){return k(e)===p},t.isValidElementType=function(e){return"string"==typeof e||"function"==typeof e||e===o||e===d||e===l||e===i||e===p||e===m||"object"==typeof e&&null!==e&&(e.$$typeof===g||e.$$typeof===h||e.$$typeof===s||e.$$typeof===u||e.$$typeof===f||e.$$typeof===b||e.$$typeof===y||e.$$typeof===w||e.$$typeof===v)},t.typeOf=k},9864:(e,t,n)=>{"use strict";e.exports=n(9921)},8356:(e,t,n)=>{"use strict";function r(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function a(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(){return i=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},i.apply(this,arguments)}var l=n(7294),s=n(5697),u=[],c=[];function d(e){var t=e(),n={loading:!0,loaded:null,error:null};return n.promise=t.then((function(e){return n.loading=!1,n.loaded=e,e})).catch((function(e){throw n.loading=!1,n.error=e,e})),n}function f(e){var t={loading:!1,loaded:{},error:null},n=[];try{Object.keys(e).forEach((function(r){var a=d(e[r]);a.loading?t.loading=!0:(t.loaded[r]=a.loaded,t.error=a.error),n.push(a.promise),a.promise.then((function(e){t.loaded[r]=e})).catch((function(e){t.error=e}))}))}catch(r){t.error=r}return t.promise=Promise.all(n).then((function(e){return t.loading=!1,e})).catch((function(e){throw t.loading=!1,e})),t}function p(e,t){return l.createElement((n=e)&&n.__esModule?n.default:n,t);var n}function m(e,t){var d,f;if(!t.loading)throw new Error("react-loadable requires a `loading` component");var m=i({loader:null,loading:null,delay:200,timeout:null,render:p,webpack:null,modules:null},t),h=null;function g(){return h||(h=e(m.loader)),h.promise}return u.push(g),"function"==typeof m.webpack&&c.push((function(){if((0,m.webpack)().every((function(e){return void 0!==e&&void 0!==n.m[e]})))return g()})),f=d=function(t){function n(n){var r;return o(a(a(r=t.call(this,n)||this)),"retry",(function(){r.setState({error:null,loading:!0,timedOut:!1}),h=e(m.loader),r._loadModule()})),g(),r.state={error:h.error,pastDelay:!1,timedOut:!1,loading:h.loading,loaded:h.loaded},r}r(n,t),n.preload=function(){return g()};var i=n.prototype;return i.UNSAFE_componentWillMount=function(){this._loadModule()},i.componentDidMount=function(){this._mounted=!0},i._loadModule=function(){var e=this;if(this.context.loadable&&Array.isArray(m.modules)&&m.modules.forEach((function(t){e.context.loadable.report(t)})),h.loading){var t=function(t){e._mounted&&e.setState(t)};"number"==typeof m.delay&&(0===m.delay?this.setState({pastDelay:!0}):this._delay=setTimeout((function(){t({pastDelay:!0})}),m.delay)),"number"==typeof m.timeout&&(this._timeout=setTimeout((function(){t({timedOut:!0})}),m.timeout));var n=function(){t({error:h.error,loaded:h.loaded,loading:h.loading}),e._clearTimeouts()};h.promise.then((function(){return n(),null})).catch((function(e){return n(),null}))}},i.componentWillUnmount=function(){this._mounted=!1,this._clearTimeouts()},i._clearTimeouts=function(){clearTimeout(this._delay),clearTimeout(this._timeout)},i.render=function(){return this.state.loading||this.state.error?l.createElement(m.loading,{isLoading:this.state.loading,pastDelay:this.state.pastDelay,timedOut:this.state.timedOut,error:this.state.error,retry:this.retry}):this.state.loaded?m.render(this.state.loaded,this.props):null},n}(l.Component),o(d,"contextTypes",{loadable:s.shape({report:s.func.isRequired})}),f}function h(e){return m(d,e)}h.Map=function(e){if("function"!=typeof e.render)throw new Error("LoadableMap requires a `render(loaded, props)` function");return m(f,e)};var g=function(e){function t(){return e.apply(this,arguments)||this}r(t,e);var n=t.prototype;return n.getChildContext=function(){return{loadable:{report:this.props.report}}},n.render=function(){return l.Children.only(this.props.children)},t}(l.Component);function v(e){for(var t=[];e.length;){var n=e.pop();t.push(n())}return Promise.all(t).then((function(){if(e.length)return v(e)}))}o(g,"propTypes",{report:s.func.isRequired}),o(g,"childContextTypes",{loadable:s.shape({report:s.func.isRequired}).isRequired}),h.Capture=g,h.preloadAll=function(){return new Promise((function(e,t){v(u).then(e,t)}))},h.preloadReady=function(){return new Promise((function(e,t){v(c).then(e,e)}))},e.exports=h},8790:(e,t,n)=>{"use strict";n.d(t,{H:()=>l,f:()=>i});var r=n(6775),a=n(3117),o=n(7294);function i(e,t,n){return void 0===n&&(n=[]),e.some((function(e){var a=e.path?(0,r.LX)(t,e):n.length?n[n.length-1].match:r.F0.computeRootMatch(t);return a&&(n.push({route:e,match:a}),e.routes&&i(e.routes,t,n)),a})),n}function l(e,t,n){return void 0===t&&(t={}),void 0===n&&(n={}),e?o.createElement(r.rs,n,e.map((function(e,n){return o.createElement(r.AW,{key:e.key||n,path:e.path,exact:e.exact,strict:e.strict,render:function(n){return e.render?e.render((0,a.Z)({},n,{},t,{route:e})):o.createElement(e.component,(0,a.Z)({},n,t,{route:e}))}})}))):null}},3727:(e,t,n)=>{"use strict";n.d(t,{OL:()=>y,VK:()=>c,rU:()=>g});var r=n(6775),a=n(144),o=n(7294),i=n(9318),l=n(3117),s=n(102),u=n(2177),c=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).history=(0,i.lX)(t.props),t}return(0,a.Z)(t,e),t.prototype.render=function(){return o.createElement(r.F0,{history:this.history,children:this.props.children})},t}(o.Component);o.Component;var d=function(e,t){return"function"==typeof e?e(t):e},f=function(e,t){return"string"==typeof e?(0,i.ob)(e,null,null,t):e},p=function(e){return e},m=o.forwardRef;void 0===m&&(m=p);var h=m((function(e,t){var n=e.innerRef,r=e.navigate,a=e.onClick,i=(0,s.Z)(e,["innerRef","navigate","onClick"]),u=i.target,c=(0,l.Z)({},i,{onClick:function(e){try{a&&a(e)}catch(t){throw e.preventDefault(),t}e.defaultPrevented||0!==e.button||u&&"_self"!==u||function(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}(e)||(e.preventDefault(),r())}});return c.ref=p!==m&&t||n,o.createElement("a",c)}));var g=m((function(e,t){var n=e.component,a=void 0===n?h:n,c=e.replace,g=e.to,v=e.innerRef,b=(0,s.Z)(e,["component","replace","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=e.history,r=f(d(g,e.location),e.location),s=r?n.createHref(r):"",h=(0,l.Z)({},b,{href:s,navigate:function(){var t=d(g,e.location),r=(0,i.Ep)(e.location)===(0,i.Ep)(f(t));(c||r?n.replace:n.push)(t)}});return p!==m?h.ref=t||v:h.innerRef=v,o.createElement(a,h)}))})),v=function(e){return e},b=o.forwardRef;void 0===b&&(b=v);var y=b((function(e,t){var n=e["aria-current"],a=void 0===n?"page":n,i=e.activeClassName,c=void 0===i?"active":i,p=e.activeStyle,m=e.className,h=e.exact,y=e.isActive,w=e.location,k=e.sensitive,E=e.strict,S=e.style,x=e.to,T=e.innerRef,C=(0,s.Z)(e,["aria-current","activeClassName","activeStyle","className","exact","isActive","location","sensitive","strict","style","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=w||e.location,i=f(d(x,n),n),s=i.pathname,_=s&&s.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1"),L=_?(0,r.LX)(n.pathname,{path:_,exact:h,sensitive:k,strict:E}):null,R=!!(y?y(L,n):L),A="function"==typeof m?m(R):m,N="function"==typeof S?S(R):S;R&&(A=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return t.filter((function(e){return e})).join(" ")}(A,c),N=(0,l.Z)({},N,p));var P=(0,l.Z)({"aria-current":R&&a||null,className:A,style:N,to:i},C);return v!==b?P.ref=t||T:P.innerRef=T,o.createElement(g,P)}))}))},6775:(e,t,n)=>{"use strict";n.d(t,{AW:()=>T,F0:()=>k,rs:()=>N,s6:()=>w,LX:()=>x,k6:()=>O,TH:()=>I});var r=n(144),a=n(7294),o=n(9318),i=n(5697),l=n.n(i),s=1073741823,u="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:{};function c(e){var t=[];return{on:function(e){t.push(e)},off:function(e){t=t.filter((function(t){return t!==e}))},get:function(){return e},set:function(n,r){e=n,t.forEach((function(t){return t(e,r)}))}}}var d=a.createContext||function(e,t){var n,o,i="__create-react-context-"+function(){var e="__global_unique_id__";return u[e]=(u[e]||0)+1}()+"__",d=function(e){function n(){var t;return(t=e.apply(this,arguments)||this).emitter=c(t.props.value),t}(0,r.Z)(n,e);var a=n.prototype;return a.getChildContext=function(){var e;return(e={})[i]=this.emitter,e},a.componentWillReceiveProps=function(e){if(this.props.value!==e.value){var n,r=this.props.value,a=e.value;((o=r)===(i=a)?0!==o||1/o==1/i:o!=o&&i!=i)?n=0:(n="function"==typeof t?t(r,a):s,0!==(n|=0)&&this.emitter.set(e.value,n))}var o,i},a.render=function(){return this.props.children},n}(a.Component);d.childContextTypes=((n={})[i]=l().object.isRequired,n);var f=function(t){function n(){var e;return(e=t.apply(this,arguments)||this).state={value:e.getValue()},e.onUpdate=function(t,n){0!=((0|e.observedBits)&n)&&e.setState({value:e.getValue()})},e}(0,r.Z)(n,t);var a=n.prototype;return a.componentWillReceiveProps=function(e){var t=e.observedBits;this.observedBits=null==t?s:t},a.componentDidMount=function(){this.context[i]&&this.context[i].on(this.onUpdate);var e=this.props.observedBits;this.observedBits=null==e?s:e},a.componentWillUnmount=function(){this.context[i]&&this.context[i].off(this.onUpdate)},a.getValue=function(){return this.context[i]?this.context[i].get():e},a.render=function(){return(e=this.props.children,Array.isArray(e)?e[0]:e)(this.state.value);var e},n}(a.Component);return f.contextTypes=((o={})[i]=l().object,o),{Provider:d,Consumer:f}};const f=d;var p=n(2177),m=n(3117),h=n(9658),g=n.n(h),v=(n(9864),n(102)),b=(n(8679),function(e){var t=f();return t.displayName=e,t}),y=b("Router-History"),w=b("Router"),k=function(e){function t(t){var n;return(n=e.call(this,t)||this).state={location:t.history.location},n._isMounted=!1,n._pendingLocation=null,t.staticContext||(n.unlisten=t.history.listen((function(e){n._pendingLocation=e}))),n}(0,r.Z)(t,e),t.computeRootMatch=function(e){return{path:"/",url:"/",params:{},isExact:"/"===e}};var n=t.prototype;return n.componentDidMount=function(){var e=this;this._isMounted=!0,this.unlisten&&this.unlisten(),this.props.staticContext||(this.unlisten=this.props.history.listen((function(t){e._isMounted&&e.setState({location:t})}))),this._pendingLocation&&this.setState({location:this._pendingLocation})},n.componentWillUnmount=function(){this.unlisten&&(this.unlisten(),this._isMounted=!1,this._pendingLocation=null)},n.render=function(){return a.createElement(w.Provider,{value:{history:this.props.history,location:this.state.location,match:t.computeRootMatch(this.state.location.pathname),staticContext:this.props.staticContext}},a.createElement(y.Provider,{children:this.props.children||null,value:this.props.history}))},t}(a.Component);a.Component;a.Component;var E={},S=0;function x(e,t){void 0===t&&(t={}),("string"==typeof t||Array.isArray(t))&&(t={path:t});var n=t,r=n.path,a=n.exact,o=void 0!==a&&a,i=n.strict,l=void 0!==i&&i,s=n.sensitive,u=void 0!==s&&s;return[].concat(r).reduce((function(t,n){if(!n&&""!==n)return null;if(t)return t;var r=function(e,t){var n=""+t.end+t.strict+t.sensitive,r=E[n]||(E[n]={});if(r[e])return r[e];var a=[],o={regexp:g()(e,a,t),keys:a};return S<1e4&&(r[e]=o,S++),o}(n,{end:o,strict:l,sensitive:u}),a=r.regexp,i=r.keys,s=a.exec(e);if(!s)return null;var c=s[0],d=s.slice(1),f=e===c;return o&&!f?null:{path:n,url:"/"===n&&""===c?"/":c,isExact:f,params:i.reduce((function(e,t,n){return e[t.name]=d[n],e}),{})}}),null)}var T=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n=e.props.location||t.location,r=e.props.computedMatch?e.props.computedMatch:e.props.path?x(n.pathname,e.props):t.match,o=(0,m.Z)({},t,{location:n,match:r}),i=e.props,l=i.children,s=i.component,u=i.render;return Array.isArray(l)&&function(e){return 0===a.Children.count(e)}(l)&&(l=null),a.createElement(w.Provider,{value:o},o.match?l?"function"==typeof l?l(o):l:s?a.createElement(s,o):u?u(o):null:"function"==typeof l?l(o):null)}))},t}(a.Component);function C(e){return"/"===e.charAt(0)?e:"/"+e}function _(e,t){if(!e)return t;var n=C(e);return 0!==t.pathname.indexOf(n)?t:(0,m.Z)({},t,{pathname:t.pathname.substr(n.length)})}function L(e){return"string"==typeof e?e:(0,o.Ep)(e)}function R(e){return function(){(0,p.Z)(!1)}}function A(){}a.Component;var N=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n,r,o=e.props.location||t.location;return a.Children.forEach(e.props.children,(function(e){if(null==r&&a.isValidElement(e)){n=e;var i=e.props.path||e.props.from;r=i?x(o.pathname,(0,m.Z)({},e.props,{path:i})):t.match}})),r?a.cloneElement(n,{location:o,computedMatch:r}):null}))},t}(a.Component);var P=a.useContext;function O(){return P(y)}function I(){return P(w).location}},9658:(e,t,n)=>{var r=n(5826);e.exports=p,e.exports.parse=o,e.exports.compile=function(e,t){return l(o(e,t),t)},e.exports.tokensToFunction=l,e.exports.tokensToRegExp=f;var a=new RegExp(["(\\\\.)","([\\/.])?(?:(?:\\:(\\w+)(?:\\(((?:\\\\.|[^\\\\()])+)\\))?|\\(((?:\\\\.|[^\\\\()])+)\\))([+*?])?|(\\*))"].join("|"),"g");function o(e,t){for(var n,r=[],o=0,i=0,l="",c=t&&t.delimiter||"/";null!=(n=a.exec(e));){var d=n[0],f=n[1],p=n.index;if(l+=e.slice(i,p),i=p+d.length,f)l+=f[1];else{var m=e[i],h=n[2],g=n[3],v=n[4],b=n[5],y=n[6],w=n[7];l&&(r.push(l),l="");var k=null!=h&&null!=m&&m!==h,E="+"===y||"*"===y,S="?"===y||"*"===y,x=n[2]||c,T=v||b;r.push({name:g||o++,prefix:h||"",delimiter:x,optional:S,repeat:E,partial:k,asterisk:!!w,pattern:T?u(T):w?".*":"[^"+s(x)+"]+?"})}}return i<e.length&&(l+=e.substr(i)),l&&r.push(l),r}function i(e){return encodeURI(e).replace(/[\/?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()}))}function l(e,t){for(var n=new Array(e.length),a=0;a<e.length;a++)"object"==typeof e[a]&&(n[a]=new RegExp("^(?:"+e[a].pattern+")$",d(t)));return function(t,a){for(var o="",l=t||{},s=(a||{}).pretty?i:encodeURIComponent,u=0;u<e.length;u++){var c=e[u];if("string"!=typeof c){var d,f=l[c.name];if(null==f){if(c.optional){c.partial&&(o+=c.prefix);continue}throw new TypeError('Expected "'+c.name+'" to be defined')}if(r(f)){if(!c.repeat)throw new TypeError('Expected "'+c.name+'" to not repeat, but received `'+JSON.stringify(f)+"`");if(0===f.length){if(c.optional)continue;throw new TypeError('Expected "'+c.name+'" to not be empty')}for(var p=0;p<f.length;p++){if(d=s(f[p]),!n[u].test(d))throw new TypeError('Expected all "'+c.name+'" to match "'+c.pattern+'", but received `'+JSON.stringify(d)+"`");o+=(0===p?c.prefix:c.delimiter)+d}}else{if(d=c.asterisk?encodeURI(f).replace(/[?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})):s(f),!n[u].test(d))throw new TypeError('Expected "'+c.name+'" to match "'+c.pattern+'", but received "'+d+'"');o+=c.prefix+d}}else o+=c}return o}}function s(e){return e.replace(/([.+*?=^!:${}()[\]|\/\\])/g,"\\$1")}function u(e){return e.replace(/([=!:$\/()])/g,"\\$1")}function c(e,t){return e.keys=t,e}function d(e){return e&&e.sensitive?"":"i"}function f(e,t,n){r(t)||(n=t||n,t=[]);for(var a=(n=n||{}).strict,o=!1!==n.end,i="",l=0;l<e.length;l++){var u=e[l];if("string"==typeof u)i+=s(u);else{var f=s(u.prefix),p="(?:"+u.pattern+")";t.push(u),u.repeat&&(p+="(?:"+f+p+")*"),i+=p=u.optional?u.partial?f+"("+p+")?":"(?:"+f+"("+p+"))?":f+"("+p+")"}}var m=s(n.delimiter||"/"),h=i.slice(-m.length)===m;return a||(i=(h?i.slice(0,-m.length):i)+"(?:"+m+"(?=$))?"),i+=o?"$":a&&h?"":"(?="+m+"|$)",c(new RegExp("^"+i,d(n)),t)}function p(e,t,n){return r(t)||(n=t||n,t=[]),n=n||{},e instanceof RegExp?function(e,t){var n=e.source.match(/\((?!\?)/g);if(n)for(var r=0;r<n.length;r++)t.push({name:r,prefix:null,delimiter:null,optional:!1,repeat:!1,partial:!1,asterisk:!1,pattern:null});return c(e,t)}(e,t):r(e)?function(e,t,n){for(var r=[],a=0;a<e.length;a++)r.push(p(e[a],t,n).source);return c(new RegExp("(?:"+r.join("|")+")",d(n)),t)}(e,t,n):function(e,t,n){return f(o(e,n),t,n)}(e,t,n)}},2408:(e,t,n)=>{"use strict";var r=n(7418),a=60103,o=60106;t.Fragment=60107,t.StrictMode=60108,t.Profiler=60114;var i=60109,l=60110,s=60112;t.Suspense=60113;var u=60115,c=60116;if("function"==typeof Symbol&&Symbol.for){var d=Symbol.for;a=d("react.element"),o=d("react.portal"),t.Fragment=d("react.fragment"),t.StrictMode=d("react.strict_mode"),t.Profiler=d("react.profiler"),i=d("react.provider"),l=d("react.context"),s=d("react.forward_ref"),t.Suspense=d("react.suspense"),u=d("react.memo"),c=d("react.lazy")}var f="function"==typeof Symbol&&Symbol.iterator;function p(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var m={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},h={};function g(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}function v(){}function b(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}g.prototype.isReactComponent={},g.prototype.setState=function(e,t){if("object"!=typeof e&&"function"!=typeof e&&null!=e)throw Error(p(85));this.updater.enqueueSetState(this,e,t,"setState")},g.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")},v.prototype=g.prototype;var y=b.prototype=new v;y.constructor=b,r(y,g.prototype),y.isPureReactComponent=!0;var w={current:null},k=Object.prototype.hasOwnProperty,E={key:!0,ref:!0,__self:!0,__source:!0};function S(e,t,n){var r,o={},i=null,l=null;if(null!=t)for(r in void 0!==t.ref&&(l=t.ref),void 0!==t.key&&(i=""+t.key),t)k.call(t,r)&&!E.hasOwnProperty(r)&&(o[r]=t[r]);var s=arguments.length-2;if(1===s)o.children=n;else if(1<s){for(var u=Array(s),c=0;c<s;c++)u[c]=arguments[c+2];o.children=u}if(e&&e.defaultProps)for(r in s=e.defaultProps)void 0===o[r]&&(o[r]=s[r]);return{$$typeof:a,type:e,key:i,ref:l,props:o,_owner:w.current}}function x(e){return"object"==typeof e&&null!==e&&e.$$typeof===a}var T=/\/+/g;function C(e,t){return"object"==typeof e&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}(""+e.key):t.toString(36)}function _(e,t,n,r,i){var l=typeof e;"undefined"!==l&&"boolean"!==l||(e=null);var s=!1;if(null===e)s=!0;else switch(l){case"string":case"number":s=!0;break;case"object":switch(e.$$typeof){case a:case o:s=!0}}if(s)return i=i(s=e),e=""===r?"."+C(s,0):r,Array.isArray(i)?(n="",null!=e&&(n=e.replace(T,"$&/")+"/"),_(i,t,n,"",(function(e){return e}))):null!=i&&(x(i)&&(i=function(e,t){return{$$typeof:a,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}(i,n+(!i.key||s&&s.key===i.key?"":(""+i.key).replace(T,"$&/")+"/")+e)),t.push(i)),1;if(s=0,r=""===r?".":r+":",Array.isArray(e))for(var u=0;u<e.length;u++){var c=r+C(l=e[u],u);s+=_(l,t,n,c,i)}else if(c=function(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=f&&e[f]||e["@@iterator"])?e:null}(e),"function"==typeof c)for(e=c.call(e),u=0;!(l=e.next()).done;)s+=_(l=l.value,t,n,c=r+C(l,u++),i);else if("object"===l)throw t=""+e,Error(p(31,"[object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function L(e,t,n){if(null==e)return e;var r=[],a=0;return _(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function R(e){if(-1===e._status){var t=e._result;t=t(),e._status=0,e._result=t,t.then((function(t){0===e._status&&(t=t.default,e._status=1,e._result=t)}),(function(t){0===e._status&&(e._status=2,e._result=t)}))}if(1===e._status)return e._result;throw e._result}var A={current:null};function N(){var e=A.current;if(null===e)throw Error(p(321));return e}var P={ReactCurrentDispatcher:A,ReactCurrentBatchConfig:{transition:0},ReactCurrentOwner:w,IsSomeRendererActing:{current:!1},assign:r};t.Children={map:L,forEach:function(e,t,n){L(e,(function(){t.apply(this,arguments)}),n)},count:function(e){var t=0;return L(e,(function(){t++})),t},toArray:function(e){return L(e,(function(e){return e}))||[]},only:function(e){if(!x(e))throw Error(p(143));return e}},t.Component=g,t.PureComponent=b,t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=P,t.cloneElement=function(e,t,n){if(null==e)throw Error(p(267,e));var o=r({},e.props),i=e.key,l=e.ref,s=e._owner;if(null!=t){if(void 0!==t.ref&&(l=t.ref,s=w.current),void 0!==t.key&&(i=""+t.key),e.type&&e.type.defaultProps)var u=e.type.defaultProps;for(c in t)k.call(t,c)&&!E.hasOwnProperty(c)&&(o[c]=void 0===t[c]&&void 0!==u?u[c]:t[c])}var c=arguments.length-2;if(1===c)o.children=n;else if(1<c){u=Array(c);for(var d=0;d<c;d++)u[d]=arguments[d+2];o.children=u}return{$$typeof:a,type:e.type,key:i,ref:l,props:o,_owner:s}},t.createContext=function(e,t){return void 0===t&&(t=null),(e={$$typeof:l,_calculateChangedBits:t,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null}).Provider={$$typeof:i,_context:e},e.Consumer=e},t.createElement=S,t.createFactory=function(e){var t=S.bind(null,e);return t.type=e,t},t.createRef=function(){return{current:null}},t.forwardRef=function(e){return{$$typeof:s,render:e}},t.isValidElement=x,t.lazy=function(e){return{$$typeof:c,_payload:{_status:-1,_result:e},_init:R}},t.memo=function(e,t){return{$$typeof:u,type:e,compare:void 0===t?null:t}},t.useCallback=function(e,t){return N().useCallback(e,t)},t.useContext=function(e,t){return N().useContext(e,t)},t.useDebugValue=function(){},t.useEffect=function(e,t){return N().useEffect(e,t)},t.useImperativeHandle=function(e,t,n){return N().useImperativeHandle(e,t,n)},t.useLayoutEffect=function(e,t){return N().useLayoutEffect(e,t)},t.useMemo=function(e,t){return N().useMemo(e,t)},t.useReducer=function(e,t,n){return N().useReducer(e,t,n)},t.useRef=function(e){return N().useRef(e)},t.useState=function(e){return N().useState(e)},t.version="17.0.2"},7294:(e,t,n)=>{"use strict";e.exports=n(2408)},53:(e,t)=>{"use strict";var n,r,a,o;if("object"==typeof performance&&"function"==typeof performance.now){var i=performance;t.unstable_now=function(){return i.now()}}else{var l=Date,s=l.now();t.unstable_now=function(){return l.now()-s}}if("undefined"==typeof window||"function"!=typeof MessageChannel){var u=null,c=null,d=function(){if(null!==u)try{var e=t.unstable_now();u(!0,e),u=null}catch(n){throw setTimeout(d,0),n}};n=function(e){null!==u?setTimeout(n,0,e):(u=e,setTimeout(d,0))},r=function(e,t){c=setTimeout(e,t)},a=function(){clearTimeout(c)},t.unstable_shouldYield=function(){return!1},o=t.unstable_forceFrameRate=function(){}}else{var f=window.setTimeout,p=window.clearTimeout;if("undefined"!=typeof console){var m=window.cancelAnimationFrame;"function"!=typeof window.requestAnimationFrame&&console.error("This browser doesn't support requestAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills"),"function"!=typeof m&&console.error("This browser doesn't support cancelAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills")}var h=!1,g=null,v=-1,b=5,y=0;t.unstable_shouldYield=function(){return t.unstable_now()>=y},o=function(){},t.unstable_forceFrameRate=function(e){0>e||125<e?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):b=0<e?Math.floor(1e3/e):5};var w=new MessageChannel,k=w.port2;w.port1.onmessage=function(){if(null!==g){var e=t.unstable_now();y=e+b;try{g(!0,e)?k.postMessage(null):(h=!1,g=null)}catch(n){throw k.postMessage(null),n}}else h=!1},n=function(e){g=e,h||(h=!0,k.postMessage(null))},r=function(e,n){v=f((function(){e(t.unstable_now())}),n)},a=function(){p(v),v=-1}}function E(e,t){var n=e.length;e.push(t);e:for(;;){var r=n-1>>>1,a=e[r];if(!(void 0!==a&&0<T(a,t)))break e;e[r]=t,e[n]=a,n=r}}function S(e){return void 0===(e=e[0])?null:e}function x(e){var t=e[0];if(void 0!==t){var n=e.pop();if(n!==t){e[0]=n;e:for(var r=0,a=e.length;r<a;){var o=2*(r+1)-1,i=e[o],l=o+1,s=e[l];if(void 0!==i&&0>T(i,n))void 0!==s&&0>T(s,i)?(e[r]=s,e[l]=n,r=l):(e[r]=i,e[o]=n,r=o);else{if(!(void 0!==s&&0>T(s,n)))break e;e[r]=s,e[l]=n,r=l}}}return t}return null}function T(e,t){var n=e.sortIndex-t.sortIndex;return 0!==n?n:e.id-t.id}var C=[],_=[],L=1,R=null,A=3,N=!1,P=!1,O=!1;function I(e){for(var t=S(_);null!==t;){if(null===t.callback)x(_);else{if(!(t.startTime<=e))break;x(_),t.sortIndex=t.expirationTime,E(C,t)}t=S(_)}}function D(e){if(O=!1,I(e),!P)if(null!==S(C))P=!0,n(M);else{var t=S(_);null!==t&&r(D,t.startTime-e)}}function M(e,n){P=!1,O&&(O=!1,a()),N=!0;var o=A;try{for(I(n),R=S(C);null!==R&&(!(R.expirationTime>n)||e&&!t.unstable_shouldYield());){var i=R.callback;if("function"==typeof i){R.callback=null,A=R.priorityLevel;var l=i(R.expirationTime<=n);n=t.unstable_now(),"function"==typeof l?R.callback=l:R===S(C)&&x(C),I(n)}else x(C);R=S(C)}if(null!==R)var s=!0;else{var u=S(_);null!==u&&r(D,u.startTime-n),s=!1}return s}finally{R=null,A=o,N=!1}}var F=o;t.unstable_IdlePriority=5,t.unstable_ImmediatePriority=1,t.unstable_LowPriority=4,t.unstable_NormalPriority=3,t.unstable_Profiling=null,t.unstable_UserBlockingPriority=2,t.unstable_cancelCallback=function(e){e.callback=null},t.unstable_continueExecution=function(){P||N||(P=!0,n(M))},t.unstable_getCurrentPriorityLevel=function(){return A},t.unstable_getFirstCallbackNode=function(){return S(C)},t.unstable_next=function(e){switch(A){case 1:case 2:case 3:var t=3;break;default:t=A}var n=A;A=t;try{return e()}finally{A=n}},t.unstable_pauseExecution=function(){},t.unstable_requestPaint=F,t.unstable_runWithPriority=function(e,t){switch(e){case 1:case 2:case 3:case 4:case 5:break;default:e=3}var n=A;A=e;try{return t()}finally{A=n}},t.unstable_scheduleCallback=function(e,o,i){var l=t.unstable_now();switch("object"==typeof i&&null!==i?i="number"==typeof(i=i.delay)&&0<i?l+i:l:i=l,e){case 1:var s=-1;break;case 2:s=250;break;case 5:s=1073741823;break;case 4:s=1e4;break;default:s=5e3}return e={id:L++,callback:o,priorityLevel:e,startTime:i,expirationTime:s=i+s,sortIndex:-1},i>l?(e.sortIndex=i,E(_,e),null===S(C)&&e===S(_)&&(O?a():O=!0,r(D,i-l))):(e.sortIndex=s,E(C,e),P||N||(P=!0,n(M))),e},t.unstable_wrapCallback=function(e){var t=A;return function(){var n=A;A=t;try{return e.apply(this,arguments)}finally{A=n}}}},3840:(e,t,n)=>{"use strict";e.exports=n(53)},6774:e=>{e.exports=function(e,t,n,r){var a=n?n.call(r,e,t):void 0;if(void 0!==a)return!!a;if(e===t)return!0;if("object"!=typeof e||!e||"object"!=typeof t||!t)return!1;var o=Object.keys(e),i=Object.keys(t);if(o.length!==i.length)return!1;for(var l=Object.prototype.hasOwnProperty.bind(t),s=0;s<o.length;s++){var u=o[s];if(!l(u))return!1;var c=e[u],d=t[u];if(!1===(a=n?n.call(r,c,d,u):void 0)||void 0===a&&c!==d)return!1}return!0}},2177:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});var r="Invariant failed";function a(e,t){if(!e)throw new Error(r)}},3250:(e,t,n)=>{"use strict";var r=n(7294);var a="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},o=r.useState,i=r.useEffect,l=r.useLayoutEffect,s=r.useDebugValue;function u(e){var t=e.getSnapshot;e=e.value;try{var n=t();return!a(e,n)}catch(r){return!0}}var c="undefined"==typeof window||void 0===window.document||void 0===window.document.createElement?function(e,t){return t()}:function(e,t){var n=t(),r=o({inst:{value:n,getSnapshot:t}}),a=r[0].inst,c=r[1];return l((function(){a.value=n,a.getSnapshot=t,u(a)&&c({inst:a})}),[e,n,t]),i((function(){return u(a)&&c({inst:a}),e((function(){u(a)&&c({inst:a})}))}),[e]),s(n),n};t.useSyncExternalStore=void 0!==r.useSyncExternalStore?r.useSyncExternalStore:c},1688:(e,t,n)=>{"use strict";e.exports=n(3250)},6809:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});const r={title:"K3s",tagline:"",url:"https://docs.k3s.io",baseUrl:"/kr/",onBrokenLinks:"throw",onBrokenMarkdownLinks:"warn",favicon:"img/favicon.ico",organizationName:"k3s-io",projectName:"docs",trailingSlash:!1,markdown:{mermaid:!0},themes:["@docusaurus/theme-mermaid",["@easyops-cn/docusaurus-search-local",{docsRouteBasePath:"/",hashed:!0,highlightSearchTermsOnTargetPage:!0,indexBlog:!1}]],i18n:{defaultLocale:"en",locales:["en","zh","kr"],localeConfigs:{en:{label:"English",direction:"ltr"},zh:{label:"\u7b80\u4f53\u4e2d\u6587",direction:"ltr"},kr:{label:"\ud55c\uad6d\uc5b4",direction:"ltr"}},path:"i18n"},themeConfig:{colorMode:{defaultMode:"light",respectPrefersColorScheme:!0,disableSwitch:!1},navbar:{title:"",logo:{alt:"logo",src:"img/k3s-logo-light.svg",srcDark:"img/k3s-logo-dark.svg"},items:[{type:"search",position:"right"},{type:"localeDropdown",position:"right",dropdownItemsBefore:[],dropdownItemsAfter:[]},{to:"https://github.com/k3s-io/k3s/",label:"GitHub",position:"right",className:"navbar__github btn"}],hideOnScroll:!1},footer:{style:"dark",links:[],copyright:'Copyright \xa9 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks\n      and uses trademarks. For a list of trademarks of The Linux Foundation, \n      please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.'},docs:{versionPersistence:"localStorage",sidebar:{hideable:!1,autoCollapseCategories:!1}},metadata:[],prism:{additionalLanguages:[],theme:{plain:{color:"#bfc7d5",backgroundColor:"#292d3e"},styles:[{types:["comment"],style:{color:"rgb(105, 112, 152)",fontStyle:"italic"}},{types:["string","inserted"],style:{color:"rgb(195, 232, 141)"}},{types:["number"],style:{color:"rgb(247, 140, 108)"}},{types:["builtin","char","constant","function"],style:{color:"rgb(130, 170, 255)"}},{types:["punctuation","selector"],style:{color:"rgb(199, 146, 234)"}},{types:["variable"],style:{color:"rgb(191, 199, 213)"}},{types:["class-name","attr-name"],style:{color:"rgb(255, 203, 107)"}},{types:["tag","deleted"],style:{color:"rgb(255, 85, 114)"}},{types:["operator"],style:{color:"rgb(137, 221, 255)"}},{types:["boolean"],style:{color:"rgb(255, 88, 116)"}},{types:["keyword"],style:{fontStyle:"italic"}},{types:["doctype"],style:{color:"rgb(199, 146, 234)",fontStyle:"italic"}},{types:["namespace"],style:{color:"rgb(178, 204, 214)"}},{types:["url"],style:{color:"rgb(221, 221, 221)"}}]},magicComments:[{className:"theme-code-block-highlighted-line",line:"highlight-next-line",block:{start:"highlight-start",end:"highlight-end"}}]},tableOfContents:{minHeadingLevel:2,maxHeadingLevel:3},mermaid:{theme:{dark:"dark",light:"default"},options:{}}},presets:[["@docusaurus/preset-classic",{docs:{routeBasePath:"/",sidebarPath:"/home/runner/work/docs/docs/sidebars.js",showLastUpdateTime:!0,editUrl:"https://github.com/k3s-io/docs/edit/main/"},blog:!1,theme:{customCss:["/home/runner/work/docs/docs/src/css/custom.css"]}}]],plugins:[["@docusaurus/plugin-client-redirects",{redirects:[{from:"/installation/ha",to:"/datastore/ha"},{from:"/installation/ha-embedded",to:"/datastore/ha-embedded"},{from:"/installation/datastore",to:"/datastore"},{from:"/installation/disable-flags",to:"/installation/server-roles"},{from:"/backup-restore/backup-restore",to:"/datastore/backup-restore"},{from:"/reference/agent-config",to:"/cli/agent"},{from:"/reference/server-config",to:"/cli/server"}]}]],baseUrlIssueBanner:!0,onDuplicateRoutes:"warn",staticDirectories:["static"],customFields:{},scripts:[],headTags:[],stylesheets:[],clientModules:[],titleDelimiter:"|",noIndex:!1}},3117:(e,t,n)=>{"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}n.d(t,{Z:()=>r})},144:(e,t,n)=>{"use strict";function r(e,t){return r=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(e,t){return e.__proto__=t,e},r(e,t)}function a(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,r(e,t)}n.d(t,{Z:()=>a})},102:(e,t,n)=>{"use strict";function r(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}n.d(t,{Z:()=>r})},7529:e=>{"use strict";e.exports=JSON.parse('{"theme.ErrorPageContent.title":"\ud398\uc774\uc9c0\uac00 \ub2e4\uc6b4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.","theme.ErrorPageContent.tryAgain":"\uc7ac\uc2dc\ub3c4","theme.NotFound.title":"\ud398\uc774\uc9c0\ub97c \ucc3e\uc744 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4","theme.NotFound.p1":"\ucc3e\uc73c\uc2dc\ub824\ub294 \ud398\uc774\uc9c0\ub97c \ucc3e\uc744 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.","theme.NotFound.p2":"\uc6d0\ub798 \ub9c1\ud06c\uc758 \ucd9c\ucc98\uc778 \uc0ac\uc774\ud2b8\uc758 \uc18c\uc720\uc790\uc5d0\uac8c \uc5f0\ub77d\ud558\uc5ec \ub9c1\ud06c\uac00 \ub04a\uc5b4\uc84c\uc74c\uc744 \uc54c\ub824\uc8fc\uc138\uc694.","theme.admonition.note":"\ube44\uace0","theme.admonition.tip":"\ud301","theme.admonition.danger":"\uc704\ud5d8","theme.admonition.info":"\uc815\ubcf4","theme.admonition.caution":"\uacbd\uace0","theme.AnnouncementBar.closeButtonAriaLabel":"\ub2eb\uae30","theme.BackToTopButton.buttonAriaLabel":"\ub9e8 \uc704\ub85c","theme.blog.archive.title":"\uc81c\ubaa9","theme.blog.archive.description":"\uc124\uba85","theme.blog.paginator.navAriaLabel":"\ube14\ub85c\uadf8 \ub124\ube44\uac8c\uc774\uc158","theme.blog.paginator.newerEntries":"\uc0c8\ub85c\uc6b4 \uae00","theme.blog.paginator.olderEntries":"\uc774\uc804 \uae00","theme.blog.post.paginator.navAriaLabel":"\ube14\ub85c\uadf8 \ud3ec\uc2a4\ud2b8 \ub124\ube44\uac8c\uc774\uc158","theme.blog.post.paginator.newerPost":"\uc0c8\ub85c\uc6b4 \ud3ec\uc2a4\ud2b8","theme.blog.post.paginator.olderPost":"\uc774\uc804 \ud3ec\uc2a4\ud2b8","theme.blog.post.plurals":"{count} \uac1c\uc758 \ud3ec\uc2a4\ud2b8","theme.blog.tagTitle":"\u300c{tagName}\u300d \ud0dc\uadf8\uba85\uc744 \uac00\uc9c4 {nPosts}\uac1c\uc758 \ud3ec\uc2a4\ud2b8","theme.tags.tagsPageLink":"\ubaa8\ub4e0 \ud0dc\uadf8 \ubaa9\ub85d","theme.colorToggle.ariaLabel":"\ubc1d\uc740/\uc5b4\ub450\uc6b4 \ubaa8\ub4dc \uc804\ud658 (\ud604\uc7ac \ubaa8\ub4dc: {mode})","theme.colorToggle.ariaLabel.mode.dark":"\uc5b4\ub450\uc6b4 \ubaa8\ub4dc","theme.colorToggle.ariaLabel.mode.light":"\ubc1d\uc740 \ubaa8\ub4dc","theme.docs.breadcrumbs.home":"\ud648","theme.docs.breadcrumbs.navAriaLabel":"\ud398\uc774\uc9c0 \uacbd\ub85c","theme.docs.DocCard.categoryDescription":"{count} \uac1c\uc758 \ubb38\uc11c","theme.docs.paginator.navAriaLabel":"\ubb38\uc11c \ub124\ube44\uac8c\uc774\uc158","theme.docs.paginator.previous":"\uc774\uc804","theme.docs.paginator.next":"\ub2e4\uc74c","theme.docs.tagDocListPageTitle.nDocsTagged":"{count} \uac1c\uc758 \ubb38\uc11c","theme.docs.tagDocListPageTitle":"{nDocsTagged}\u300c{tagName}\u300d","theme.docs.versionBadge.label":"version: {versionLabel}","theme.docs.versions.unreleasedVersionLabel":"\uc774\uac83\uc740 \uc544\uc9c1 \ub9b4\ub9ac\uc988\ub418\uc9c0 \uc54a\uc740 \ubb38\uc11c\uc758 {siteTitle} {versionLabel} \ubc84\uc804\uc785\ub2c8\ub2e4.","theme.docs.versions.unmaintainedVersionLabel":"\uc774\uac83\uc740 \ub354 \uc774\uc0c1 \ud65c\ubc1c\ud558\uac8c \uc720\uc9c0 \uad00\ub9ac\ub418\uc9c0 \uc54a\ub294 {siteTitle} {versionLabel} \ubc84\uc804\uc5d0 \ub300\ud55c \ubb38\uc11c\uc785\ub2c8\ub2e4.","theme.docs.versions.latestVersionSuggestionLabel":"\ucd5c\uc2e0 \ubb38\uc11c\ub294 {latestVersionLink} ({versionLabel}) \uc744 \ucc38\uc870\ud558\uc138\uc694.","theme.docs.versions.latestVersionLinkLabel":"\ucd5c\uc2e0 \ubc84\uc804","theme.common.editThisPage":"\uc774 \ud398\uc774\uc9c0 \ud3b8\uc9d1","theme.common.headingLinkTitle":"\uc81c\ubaa9\uc5d0 \ub300\ud55c \uc9c1\uc811 \ub9c1\ud06c","theme.lastUpdated.atDate":"{date}\uc5d0","theme.lastUpdated.byUser":"{user}\uac00","theme.lastUpdated.lastUpdatedAtBy":"\ub9c8\uc9c0\ub9c9 {byUser}{atDate} \uc5c5\ub370\uc774\ud2b8","theme.navbar.mobileVersionsDropdown.label":"\ubc84\uc804 \uc120\ud0dd","theme.common.skipToMainContent":"\ubcf8\ubb38\uc73c\ub85c \uac74\ub108\ub6f0\uae30","theme.tags.tagsListLabel":"\ud0dc\uadf8 \ubaa9\ub85d","theme.blog.sidebar.navAriaLabel":"\ube14\ub85c\uadf8 \uc0ac\uc774\ub4dc\ubc14","theme.CodeBlock.copied":"\ubcf5\uc0ac\ub428","theme.CodeBlock.copyButtonAriaLabel":"\ucf54\ub4dc \ube14\ub85d \ubcf5\uc0ac","theme.CodeBlock.copy":"\ubcf5\uc0ac","theme.CodeBlock.wordWrapToggle":"\uc904 \ubc14\uafc8 \ud1a0\uae00","theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \uba54\ub274 \u300c{label}\u300d \uc5f4\uae30/\ub2eb\uae30","theme.navbar.mobileLanguageDropdown.label":"\uc5b8\uc5b4 \uc120\ud0dd","theme.TOCCollapsible.toggleButtonLabel":"\ubaa9\ucc28 \uc5f4\uae30/\ub2eb\uae30","theme.blog.post.readMore":"\ub354 \uc77d\uae30","theme.blog.post.readMoreLabel":"{title} \ube14\ub85c\uadf8 \uae00 \uc77d\uae30","theme.blog.post.readingTime.plurals":"\uc77d\ub294 \ub370 {readingTime} \ubd84\uc774 \uac78\ub9bd\ub2c8\ub2e4","theme.docs.sidebar.collapseButtonTitle":"\uc0ac\uc774\ub4dc\ubc14 \ub2eb\uae30","theme.docs.sidebar.collapseButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \ub2eb\uae30","theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel":"\u2190 \uba54\uc778 \uba54\ub274\ub85c \ub3cc\uc544\uac00\uae30","theme.docs.sidebar.expandButtonTitle":"\uc0ac\uc774\ub4dc\ubc14 \uc5f4\uae30","theme.docs.sidebar.expandButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \uc5f4\uae30","theme.docs.sidebar.closeSidebarButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \ub2eb\uae30","theme.docs.sidebar.toggleSidebarButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \uc5f4\uae30/\ub2eb\uae30","theme.SearchBar.seeAll":"{count} \uac1c\uc758 \uacb0\uacfc \ub354 \ubcf4\uae30","theme.SearchPage.documentsFound.plurals":"{count} \uac1c\uc758 \ubb38\uc11c\ub97c \ucc3e\uc558\uc2b5\ub2c8\ub2e4","theme.SearchPage.existingResultsTitle":"\u300c{query}\u300d\uc5d0 \ub300\ud55c \uac80\uc0c9 \uacb0\uacfc","theme.SearchPage.emptyResultsTitle":"\uac80\uc0c9 \uacb0\uacfc \uc5c6\uc74c","theme.SearchPage.inputPlaceholder":"\uc5ec\uae30\uc5d0 \uac80\uc0c9\uc5b4 \uc785\ub825","theme.SearchPage.inputLabel":"\uac80\uc0c9","theme.SearchPage.algoliaLabel":"Algolia \uac80\uc0c9","theme.SearchPage.noResultsText":"\uac80\uc0c9 \uacb0\uacfc\uac00 \uc5c6\uc2b5\ub2c8\ub2e4","theme.SearchPage.fetchingNewResults":"\uc0c8 \uac80\uc0c9 \uacb0\uacfc \uac00\uc838\uc624\ub294 \uc911...","theme.SearchBar.label":"\uac80\uc0c9","theme.SearchModal.searchBox.resetButtonTitle":"\uac80\uc0c9\uc5b4 \ucd08\uae30\ud654","theme.SearchModal.searchBox.cancelButtonText":"\ucde8\uc18c","theme.SearchModal.startScreen.recentSearchesTitle":"\ucd5c\uadfc \uac80\uc0c9","theme.SearchModal.startScreen.noRecentSearchesText":"\ucd5c\uadfc \uac80\uc0c9 \uae30\ub85d\uc774 \uc5c6\uc2b5\ub2c8\ub2e4","theme.SearchModal.startScreen.saveRecentSearchButtonTitle":"\uc774 \uac80\uc0c9\uc744 \ucd5c\uadfc \uac80\uc0c9\uc5d0 \uc800\uc7a5","theme.SearchModal.startScreen.removeRecentSearchButtonTitle":"\ucd5c\uadfc \uac80\uc0c9\uc5d0\uc11c \uc774 \uac80\uc0c9 \uc0ad\uc81c","theme.SearchModal.startScreen.favoriteSearchesTitle":"\uc990\uaca8\ucc3e\uae30 \uac80\uc0c9","theme.SearchModal.startScreen.removeFavoriteSearchButtonTitle":"\uc990\uaca8\ucc3e\uae30 \uac80\uc0c9\uc5d0\uc11c \uc774 \uac80\uc0c9 \uc0ad\uc81c","theme.SearchModal.errorScreen.titleText":"\uac80\uc0c9 \uacb0\uacfc\ub97c \uac00\uc838\uc624\ub294 \uc911 \uc624\ub958\uac00 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4","theme.SearchModal.errorScreen.helpText":"\uac80\uc0c9 \uacb0\uacfc\ub97c \uac00\uc838\uc624\ub294 \uc911 \uc624\ub958\uac00 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4. \ub2e4\uc2dc \uc2dc\ub3c4\ud574 \uc8fc\uc138\uc694.","theme.SearchModal.footer.selectText":"\uc120\ud0dd","theme.SearchModal.footer.selectKeyAriaLabel":"Enter \ud0a4","theme.SearchModal.footer.navigateText":"\uc704\ucabd/\uc544\ub798\ucabd \ud654\uc0b4\ud45c \ud0a4","theme.SearchModal.footer.navigateUpKeyAriaLabel":"\uc704\ucabd \ud654\uc0b4\ud45c \ud0a4","theme.SearchModal.footer.navigateDownKeyAriaLabel":"\uc544\ub798\ucabd \ud654\uc0b4\ud45c \ud0a4","theme.SearchModal.footer.closeText":"\ub2eb\uae30 \ud0a4","theme.SearchModal.footer.closeKeyAriaLabel":"Esc \ud0a4","theme.SearchModal.footer.searchByText":"\uac80\uc0c9 \uacb0\uacfc","theme.SearchModal.noResultsScreen.noResultsText":"\uac80\uc0c9 \uacb0\uacfc\uac00 \uc5c6\uc2b5\ub2c8\ub2e4","theme.SearchModal.noResultsScreen.suggestedQueryText":"\ub2e4\uc74c \uac80\uc0c9\uc5b4\ub97c \uc2dc\ub3c4\ud574 \ubcf4\uc138\uc694:","theme.SearchModal.noResultsScreen.reportMissingResultsText":"\uc774 \uac80\uc0c9 \uacb0\uacfc\uac00 \ub204\ub77d\ub418\uc5c8\ub2e4\uace0 \uc0dd\uac01\ud569\ub2c8\uae4c?","theme.SearchModal.noResultsScreen.reportMissingResultsLinkText":"\uacb0\uacfc\ub97c \ubcf4\uace0\ud558\uae30","theme.SearchModal.placeholder":"\ubb38\uc11c \uac80\uc0c9","theme.tags.tagsPageTitle":"\ud0dc\uadf8 \ubaa9\ub85d"}')},6887:e=>{"use strict";e.exports=JSON.parse('{"/kr/search-af9":{"__comp":"1a4e3797","__context":{"plugin":"4129286c"}},"/kr/-4d1":{"__comp":"1be78505","__context":{"plugin":"247783bb"},"versionMetadata":"935f2afb"},"/kr/-064":{"__comp":"17896441","content":"81cffba8"},"/kr/advanced-6ef":{"__comp":"17896441","content":"2f39a65d"},"/kr/architecture-120":{"__comp":"17896441","content":"b5fc650f"},"/kr/cli-1e9":{"__comp":"17896441","content":"f5fc080a"},"/kr/cli/agent-9ac":{"__comp":"17896441","content":"832e9842"},"/kr/cli/certificate-fad":{"__comp":"17896441","content":"03ee9047"},"/kr/cli/etcd-snapshot-579":{"__comp":"17896441","content":"b1445c4f"},"/kr/cli/secrets-encrypt-4e4":{"__comp":"17896441","content":"a1ce2930"},"/kr/cli/server-238":{"__comp":"17896441","content":"20aafa33"},"/kr/cli/token-81c":{"__comp":"17896441","content":"310030e7"},"/kr/cluster-access-49f":{"__comp":"17896441","content":"d539ae32"},"/kr/datastore-b49":{"__comp":"17896441","content":"dd0fba39"},"/kr/datastore/backup-restore-a31":{"__comp":"17896441","content":"0a63d2fd"},"/kr/datastore/cluster-loadbalancer-307":{"__comp":"17896441","content":"d428bf88"},"/kr/datastore/ha-c2e":{"__comp":"17896441","content":"6a7149bd"},"/kr/datastore/ha-embedded-639":{"__comp":"17896441","content":"944a1646"},"/kr/faq-12e":{"__comp":"17896441","content":"a11c790a"},"/kr/helm-c73":{"__comp":"17896441","content":"54490acd"},"/kr/installation-942":{"__comp":"17896441","content":"a0c5848d"},"/kr/installation/airgap-a5a":{"__comp":"17896441","content":"42e456bb"},"/kr/installation/configuration-fd6":{"__comp":"17896441","content":"1fbd281a"},"/kr/installation/kube-dashboard-381":{"__comp":"17896441","content":"12d62c38"},"/kr/installation/network-options-818":{"__comp":"17896441","content":"d05291c6"},"/kr/installation/packaged-components-54d":{"__comp":"17896441","content":"5133fc91"},"/kr/installation/private-registry-d68":{"__comp":"17896441","content":"609981e6"},"/kr/installation/requirements-455":{"__comp":"17896441","content":"b97d3598"},"/kr/installation/server-roles-0f5":{"__comp":"17896441","content":"bccfb1cb"},"/kr/installation/uninstall-3ee":{"__comp":"17896441","content":"e8666366"},"/kr/known-issues-c52":{"__comp":"17896441","content":"7461830d"},"/kr/networking-9a1":{"__comp":"17896441","content":"a101d863"},"/kr/quick-start-e3f":{"__comp":"17896441","content":"efc00427"},"/kr/reference-994":{"__comp":"17896441","content":"65004aa0"},"/kr/reference/env-variables-aff":{"__comp":"17896441","content":"b87d0734"},"/kr/reference/resource-profiling-6cc":{"__comp":"17896441","content":"105936f9"},"/kr/security-a34":{"__comp":"17896441","content":"1aef17e6"},"/kr/security/hardening-guide-8eb":{"__comp":"17896441","content":"18ace21a"},"/kr/security/secrets-encryption-466":{"__comp":"17896441","content":"65309f9a"},"/kr/security/self-assessment-e43":{"__comp":"17896441","content":"b64afda8"},"/kr/storage-369":{"__comp":"17896441","content":"7f0bf1de"},"/kr/upgrades-002":{"__comp":"17896441","content":"3f659917"},"/kr/upgrades/automated-255":{"__comp":"17896441","content":"c7700003"},"/kr/upgrades/killall-a9e":{"__comp":"17896441","content":"37e09f03"},"/kr/upgrades/manual-0b0":{"__comp":"17896441","content":"e92581be"}}')}},e=>{e.O(0,[532],(()=>{return t=9383,e(e.s=t);var t}));e.O()}]);
\ No newline at end of file
diff --git a/kr/assets/js/main.ff71f3d6.js.LICENSE.txt b/kr/assets/js/main.70ddbead.js.LICENSE.txt
similarity index 56%
rename from kr/assets/js/main.ff71f3d6.js.LICENSE.txt
rename to kr/assets/js/main.70ddbead.js.LICENSE.txt
index eb75d6910..fbc063517 100644
--- a/kr/assets/js/main.ff71f3d6.js.LICENSE.txt
+++ b/kr/assets/js/main.70ddbead.js.LICENSE.txt
@@ -7,6 +7,69 @@ object-assign
 /* NProgress, (c) 2013, 2014 Rico Sta. Cruz - http://ricostacruz.com/nprogress
  * @license MIT */
 
+/*!
+ * lunr.Builder
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Index
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Pipeline
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Set
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.TokenSet
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Vector
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.stemmer
+ * Copyright (C) 2020 Oliver Nightingale
+ * Includes code from - http://tartarus.org/~martin/PorterStemmer/js.txt
+ */
+
+/*!
+ * lunr.stopWordFilter
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.tokenizer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.trimmer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.utils
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!***************************************************
+* mark.js v8.11.1
+* https://markjs.io/
+* Copyright (c) 2014–2018, Julian Kühnel
+* Released under the MIT license https://git.io/vwTVl
+*****************************************************/
+
 /**
  * @license React
  * use-sync-external-store-shim.production.min.js
@@ -26,6 +89,12 @@ object-assign
  * @public
  */
 
+/**
+ * lunr - http://lunrjs.com - A bit like Solr, but much smaller and not as bright - 2.3.9
+ * Copyright (C) 2020 Oliver Nightingale
+ * @license MIT
+ */
+
 /** @license React v0.20.2
  * scheduler.production.min.js
  *
diff --git a/kr/assets/js/main.ff71f3d6.js b/kr/assets/js/main.ff71f3d6.js
deleted file mode 100644
index 34db24e31..000000000
--- a/kr/assets/js/main.ff71f3d6.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see main.ff71f3d6.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[179],{830:(e,t,n)=>{"use strict";n.d(t,{W:()=>a});var r=n(7294);function a(){return r.createElement("svg",{width:"20",height:"20",className:"DocSearch-Search-Icon",viewBox:"0 0 20 20"},r.createElement("path",{d:"M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}},723:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(7294),a=n(3117),o=n(8356),i=n.n(o),l=n(6887);const s={"03ee9047":[()=>n.e(9482).then(n.bind(n,9181)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/certificate.md",9181],"0a63d2fd":[()=>n.e(9341).then(n.bind(n,7831)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",7831],"105936f9":[()=>n.e(3217).then(n.bind(n,9348)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",9348],"12d62c38":[()=>n.e(3573).then(n.bind(n,8567)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",8567],17896441:[()=>Promise.all([n.e(532),n.e(4835),n.e(7918)]).then(n.bind(n,2839)),"@theme/DocItem",2839],"18ace21a":[()=>n.e(9269).then(n.bind(n,9650)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/hardening-guide.md",9650],"1a4e3797":[()=>Promise.all([n.e(532),n.e(7920)]).then(n.bind(n,6675)),"@theme/SearchPage",6675],"1aef17e6":[()=>n.e(9169).then(n.bind(n,3024)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/security.md",3024],"1be78505":[()=>Promise.all([n.e(532),n.e(9514)]).then(n.bind(n,9963)),"@theme/DocPage",9963],"1fbd281a":[()=>n.e(3229).then(n.bind(n,8628)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/configuration.md",8628],"20aafa33":[()=>n.e(6515).then(n.bind(n,2063)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/server.md",2063],"247783bb":[()=>n.e(9334).then(n.t.bind(n,3769,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-plugin-content-docs/default/plugin-route-context-module-100.json",3769],"2f39a65d":[()=>n.e(4885).then(n.bind(n,3697)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/advanced/advanced.md",3697],"310030e7":[()=>n.e(5749).then(n.bind(n,9044)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/token.md",9044],"37e09f03":[()=>n.e(6328).then(n.bind(n,4364)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/killall.md",4364],"3f659917":[()=>n.e(6278).then(n.bind(n,930)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",930],"42e456bb":[()=>n.e(9654).then(n.bind(n,2351)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/airgap.md",2351],"5133fc91":[()=>n.e(7355).then(n.bind(n,4192)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/packaged-components.md",4192],"54490acd":[()=>n.e(6169).then(n.bind(n,407)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/helm/helm.md",407],"59b068d1":[()=>n.e(6385).then(n.t.bind(n,7085,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-theme-search-algolia/default/plugin-route-context-module-100.json",7085],"609981e6":[()=>n.e(2466).then(n.bind(n,3724)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/private-registry.md",3724],"65004aa0":[()=>n.e(8920).then(n.bind(n,6281)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/reference.md",6281],"65309f9a":[()=>n.e(6005).then(n.bind(n,2341)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",2341],"6a7149bd":[()=>n.e(1894).then(n.bind(n,8160)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha.md",8160],"7461830d":[()=>n.e(1208).then(n.bind(n,5720)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",5720],"7f0bf1de":[()=>n.e(5726).then(n.bind(n,2301)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/storage/storage.md",2301],"81cffba8":[()=>n.e(804).then(n.bind(n,4754)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/introduction.md",4754],"832e9842":[()=>n.e(9184).then(n.bind(n,6117)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/agent.md",6117],"935f2afb":[()=>n.e(53).then(n.t.bind(n,1109,19)),"~docs/default/version-current-metadata-prop-751.json",1109],"944a1646":[()=>n.e(2399).then(n.bind(n,8724)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",8724],a0c5848d:[()=>n.e(9059).then(n.bind(n,5344)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/installation.md",5344],a101d863:[()=>n.e(9166).then(n.bind(n,5696)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/networking/networking.md",5696],a11c790a:[()=>n.e(937).then(n.bind(n,4951)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/faq/faq.md",4951],a1ce2930:[()=>n.e(2257).then(n.bind(n,1588)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",1588],b1445c4f:[()=>n.e(547).then(n.bind(n,1650)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",1650],b5fc650f:[()=>n.e(3443).then(n.bind(n,4227)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/architecture/architecture.md",4227],b64afda8:[()=>n.e(6263).then(n.bind(n,1738)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/security/self-assessment.md",1738],b87d0734:[()=>n.e(660).then(n.bind(n,4249)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/reference/env-variables.md",4249],b97d3598:[()=>n.e(7563).then(n.bind(n,2238)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/requirements.md",2238],bccfb1cb:[()=>n.e(910).then(n.bind(n,3335)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/server-roles.md",3335],c7700003:[()=>n.e(240).then(n.bind(n,6512)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/automated.md",6512],d05291c6:[()=>n.e(4606).then(n.bind(n,1353)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/network-options.md",1353],d428bf88:[()=>n.e(3083).then(n.bind(n,7987)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",7987],d539ae32:[()=>n.e(7453).then(n.bind(n,8309)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",8309],dd0fba39:[()=>n.e(7713).then(n.bind(n,2285)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/datastore/datastore.md",2285],e8666366:[()=>n.e(3936).then(n.bind(n,1115)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/installation/uninstall.md",1115],e92581be:[()=>n.e(5470).then(n.bind(n,154)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/upgrades/manual.md",154],efc00427:[()=>n.e(3902).then(n.bind(n,31)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",31],f5fc080a:[()=>n.e(9176).then(n.bind(n,8545)),"@site/i18n/kr/docusaurus-plugin-content-docs/current/cli/cli.md",8545]};function u(e){let{error:t,retry:n,pastDelay:a}=e;return t?r.createElement("div",{style:{textAlign:"center",color:"#fff",backgroundColor:"#fa383e",borderColor:"#fa383e",borderStyle:"solid",borderRadius:"0.25rem",borderWidth:"1px",boxSizing:"border-box",display:"block",padding:"1rem",flex:"0 0 50%",marginLeft:"25%",marginRight:"25%",marginTop:"5rem",maxWidth:"50%",width:"100%"}},r.createElement("p",null,String(t)),r.createElement("div",null,r.createElement("button",{type:"button",onClick:n},"Retry"))):a?r.createElement("div",{style:{display:"flex",justifyContent:"center",alignItems:"center",height:"100vh"}},r.createElement("svg",{id:"loader",style:{width:128,height:110,position:"absolute",top:"calc(100vh - 64%)"},viewBox:"0 0 45 45",xmlns:"http://www.w3.org/2000/svg",stroke:"#61dafb"},r.createElement("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",strokeWidth:"2"},r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"1.5s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"1.5s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"1.5s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"3s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"3s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"3s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"8"},r.createElement("animate",{attributeName:"r",begin:"0s",dur:"1.5s",values:"6;1;2;3;4;5;6",calcMode:"linear",repeatCount:"indefinite"}))))):null}var c=n(9670),d=n(226);function f(e,t){if("*"===e)return i()({loading:u,loader:()=>n.e(4972).then(n.bind(n,4972)),modules:["@theme/NotFound"],webpack:()=>[4972],render(e,t){const n=e.default;return r.createElement(d.z,{value:{plugin:{name:"native",id:"default"}}},r.createElement(n,t))}});const o=l[`${e}-${t}`],f={},p=[],m=[],h=(0,c.Z)(o);return Object.entries(h).forEach((e=>{let[t,n]=e;const r=s[n];r&&(f[t]=r[0],p.push(r[1]),m.push(r[2]))})),i().Map({loading:u,loader:f,modules:p,webpack:()=>m,render(t,n){const i=JSON.parse(JSON.stringify(o));Object.entries(t).forEach((t=>{let[n,r]=t;const a=r.default;if(!a)throw new Error(`The page component at ${e} doesn't have a default export. This makes it impossible to render anything. Consider default-exporting a React component.`);"object"!=typeof a&&"function"!=typeof a||Object.keys(r).filter((e=>"default"!==e)).forEach((e=>{a[e]=r[e]}));let o=i;const l=n.split(".");l.slice(0,-1).forEach((e=>{o=o[e]})),o[l[l.length-1]]=a}));const l=i.__comp;delete i.__comp;const s=i.__context;return delete i.__context,r.createElement(d.z,{value:s},r.createElement(l,(0,a.Z)({},i,n)))}})}const p=[{path:"/kr/search",component:f("/kr/search","8b2"),exact:!0},{path:"/kr/",component:f("/kr/","4d1"),routes:[{path:"/kr/",component:f("/kr/","064"),exact:!0,sidebar:"mySidebar"},{path:"/kr/advanced",component:f("/kr/advanced","6ef"),exact:!0,sidebar:"mySidebar"},{path:"/kr/architecture",component:f("/kr/architecture","120"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli",component:f("/kr/cli","1e9"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/agent",component:f("/kr/cli/agent","9ac"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/certificate",component:f("/kr/cli/certificate","fad"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/etcd-snapshot",component:f("/kr/cli/etcd-snapshot","579"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/secrets-encrypt",component:f("/kr/cli/secrets-encrypt","4e4"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/server",component:f("/kr/cli/server","238"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cli/token",component:f("/kr/cli/token","81c"),exact:!0,sidebar:"mySidebar"},{path:"/kr/cluster-access",component:f("/kr/cluster-access","49f"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore",component:f("/kr/datastore","b49"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/backup-restore",component:f("/kr/datastore/backup-restore","a31"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/cluster-loadbalancer",component:f("/kr/datastore/cluster-loadbalancer","307"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/ha",component:f("/kr/datastore/ha","c2e"),exact:!0,sidebar:"mySidebar"},{path:"/kr/datastore/ha-embedded",component:f("/kr/datastore/ha-embedded","639"),exact:!0,sidebar:"mySidebar"},{path:"/kr/faq",component:f("/kr/faq","12e"),exact:!0,sidebar:"mySidebar"},{path:"/kr/helm",component:f("/kr/helm","c73"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation",component:f("/kr/installation","942"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/airgap",component:f("/kr/installation/airgap","a5a"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/configuration",component:f("/kr/installation/configuration","fd6"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/kube-dashboard",component:f("/kr/installation/kube-dashboard","381"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/network-options",component:f("/kr/installation/network-options","818"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/packaged-components",component:f("/kr/installation/packaged-components","54d"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/private-registry",component:f("/kr/installation/private-registry","d68"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/requirements",component:f("/kr/installation/requirements","455"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/server-roles",component:f("/kr/installation/server-roles","0f5"),exact:!0,sidebar:"mySidebar"},{path:"/kr/installation/uninstall",component:f("/kr/installation/uninstall","3ee"),exact:!0,sidebar:"mySidebar"},{path:"/kr/known-issues",component:f("/kr/known-issues","c52"),exact:!0,sidebar:"mySidebar"},{path:"/kr/networking",component:f("/kr/networking","9a1"),exact:!0,sidebar:"mySidebar"},{path:"/kr/quick-start",component:f("/kr/quick-start","e3f"),exact:!0,sidebar:"mySidebar"},{path:"/kr/reference",component:f("/kr/reference","994"),exact:!0,sidebar:"mySidebar"},{path:"/kr/reference/env-variables",component:f("/kr/reference/env-variables","aff"),exact:!0,sidebar:"mySidebar"},{path:"/kr/reference/resource-profiling",component:f("/kr/reference/resource-profiling","6cc"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security",component:f("/kr/security","a34"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security/hardening-guide",component:f("/kr/security/hardening-guide","8eb"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security/secrets-encryption",component:f("/kr/security/secrets-encryption","466"),exact:!0,sidebar:"mySidebar"},{path:"/kr/security/self-assessment",component:f("/kr/security/self-assessment","e43"),exact:!0,sidebar:"mySidebar"},{path:"/kr/storage",component:f("/kr/storage","369"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades",component:f("/kr/upgrades","002"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades/automated",component:f("/kr/upgrades/automated","255"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades/killall",component:f("/kr/upgrades/killall","a9e"),exact:!0,sidebar:"mySidebar"},{path:"/kr/upgrades/manual",component:f("/kr/upgrades/manual","0b0"),exact:!0,sidebar:"mySidebar"}]},{path:"*",component:f("*")}]},8934:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,t:()=>o});var r=n(7294);const a=r.createContext(!1);function o(e){let{children:t}=e;const[n,o]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{o(!0)}),[]),r.createElement(a.Provider,{value:n},t)}},9383:(e,t,n)=>{"use strict";var r=n(7294),a=n(3935),o=n(3727),i=n(405),l=n(412);const s=[n(2497),n(3310),n(8320),n(2295)];var u=n(723),c=n(6775),d=n(8790);function f(e){let{children:t}=e;return r.createElement(r.Fragment,null,t)}var p=n(3117),m=n(5742),h=n(2263),g=n(4996),b=n(6668),v=n(833),y=n(4711),w=n(9727),k=n(3320),S=n(197);function E(){const{i18n:{defaultLocale:e,localeConfigs:t}}=(0,h.Z)(),n=(0,y.l)();return r.createElement(m.Z,null,Object.entries(t).map((e=>{let[t,{htmlLang:a}]=e;return r.createElement("link",{key:t,rel:"alternate",href:n.createUrl({locale:t,fullyQualified:!0}),hrefLang:a})})),r.createElement("link",{rel:"alternate",href:n.createUrl({locale:e,fullyQualified:!0}),hrefLang:"x-default"}))}function x(e){let{permalink:t}=e;const{siteConfig:{url:n}}=(0,h.Z)(),a=function(){const{siteConfig:{url:e}}=(0,h.Z)(),{pathname:t}=(0,c.TH)();return e+(0,g.Z)(t)}(),o=t?`${n}${t}`:a;return r.createElement(m.Z,null,r.createElement("meta",{property:"og:url",content:o}),r.createElement("link",{rel:"canonical",href:o}))}function T(){const{i18n:{currentLocale:e}}=(0,h.Z)(),{metadata:t,image:n}=(0,b.L)();return r.createElement(r.Fragment,null,r.createElement(m.Z,null,r.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),r.createElement("body",{className:w.h})),n&&r.createElement(v.d,{image:n}),r.createElement(x,null),r.createElement(E,null),r.createElement(S.Z,{tag:k.HX,locale:e}),r.createElement(m.Z,null,t.map(((e,t)=>r.createElement("meta",(0,p.Z)({key:t},e))))))}const C=new Map;function _(e){if(C.has(e.pathname))return{...e,pathname:C.get(e.pathname)};if((0,d.f)(u.Z,e.pathname).some((e=>{let{route:t}=e;return!0===t.exact})))return C.set(e.pathname,e.pathname),e;const t=e.pathname.trim().replace(/(?:\/index)?\.html$/,"")||"/";return C.set(e.pathname,t),{...e,pathname:t}}var A=n(8934),L=n(8940);function R(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];const a=s.map((t=>(t.default?.[e]??t[e])?.(...n)));return()=>a.forEach((e=>e?.()))}const P=function(e){let{children:t,location:n,previousLocation:a}=e;return(0,r.useLayoutEffect)((()=>{a!==n&&(!function(e){let{location:t,previousLocation:n}=e;if(!n)return;const r=t.pathname===n.pathname,a=t.hash===n.hash,o=t.search===n.search;if(r&&a&&!o)return;const{hash:i}=t;if(i){const e=decodeURIComponent(i.substring(1));document.getElementById(e)?.scrollIntoView()}else window.scrollTo(0,0)}({location:n,previousLocation:a}),R("onRouteDidUpdate",{previousLocation:a,location:n}))}),[a,n]),t};function N(e){const t=Array.from(new Set([e,decodeURI(e)])).map((e=>(0,d.f)(u.Z,e))).flat();return Promise.all(t.map((e=>e.route.component.preload?.())))}class O extends r.Component{constructor(e){super(e),this.previousLocation=void 0,this.routeUpdateCleanupCb=void 0,this.previousLocation=null,this.routeUpdateCleanupCb=l.Z.canUseDOM?R("onRouteUpdate",{previousLocation:null,location:this.props.location}):()=>{},this.state={nextRouteHasLoaded:!0}}shouldComponentUpdate(e,t){if(e.location===this.props.location)return t.nextRouteHasLoaded;const n=e.location;return this.previousLocation=this.props.location,this.setState({nextRouteHasLoaded:!1}),this.routeUpdateCleanupCb=R("onRouteUpdate",{previousLocation:this.previousLocation,location:n}),N(n.pathname).then((()=>{this.routeUpdateCleanupCb(),this.setState({nextRouteHasLoaded:!0})})).catch((e=>{console.warn(e),window.location.reload()})),!1}render(){const{children:e,location:t}=this.props;return r.createElement(P,{previousLocation:this.previousLocation,location:t},r.createElement(c.AW,{location:t,render:()=>e}))}}const I=O,D="__docusaurus-base-url-issue-banner-container",M="__docusaurus-base-url-issue-banner-suggestion-container",B="__DOCUSAURUS_INSERT_BASEURL_BANNER";function F(e){return`\nwindow['${B}'] = true;\n\ndocument.addEventListener('DOMContentLoaded', maybeInsertBanner);\n\nfunction maybeInsertBanner() {\n  var shouldInsert = window['${B}'];\n  shouldInsert && insertBanner();\n}\n\nfunction insertBanner() {\n  var bannerContainer = document.getElementById('${D}');\n  if (!bannerContainer) {\n    return;\n  }\n  var bannerHtml = ${JSON.stringify(function(e){return`\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">${e}</span> ${"/"===e?" (default value)":""}</p>\n   <p>We suggest trying baseUrl = <span id="${M}" style="font-weight: bold; color: green;"></span></p>\n</div>\n`}(e)).replace(/</g,"\\<")};\n  bannerContainer.innerHTML = bannerHtml;\n  var suggestionContainer = document.getElementById('${M}');\n  var actualHomePagePath = window.location.pathname;\n  var suggestedBaseUrl = actualHomePagePath.substr(-1) === '/'\n        ? actualHomePagePath\n        : actualHomePagePath + '/';\n  suggestionContainer.innerHTML = suggestedBaseUrl;\n}\n`}function j(){const{siteConfig:{baseUrl:e}}=(0,h.Z)();return(0,r.useLayoutEffect)((()=>{window[B]=!1}),[]),r.createElement(r.Fragment,null,!l.Z.canUseDOM&&r.createElement(m.Z,null,r.createElement("script",null,F(e))),r.createElement("div",{id:D}))}function z(){const{siteConfig:{baseUrl:e,baseUrlIssueBanner:t}}=(0,h.Z)(),{pathname:n}=(0,c.TH)();return t&&n===e?r.createElement(j,null):null}function U(){const{siteConfig:{favicon:e,title:t,noIndex:n},i18n:{currentLocale:a,localeConfigs:o}}=(0,h.Z)(),i=(0,g.Z)(e),{htmlLang:l,direction:s}=o[a];return r.createElement(m.Z,null,r.createElement("html",{lang:l,dir:s}),r.createElement("title",null,t),r.createElement("meta",{property:"og:title",content:t}),r.createElement("meta",{name:"viewport",content:"width=device-width, initial-scale=1.0"}),n&&r.createElement("meta",{name:"robots",content:"noindex, nofollow"}),e&&r.createElement("link",{rel:"icon",href:i}))}var $=n(4763);function q(){const e=(0,d.H)(u.Z),t=(0,c.TH)();return r.createElement($.Z,null,r.createElement(L.M,null,r.createElement(A.t,null,r.createElement(f,null,r.createElement(U,null),r.createElement(T,null),r.createElement(z,null),r.createElement(I,{location:_(t)},e)))))}var H=n(6887);const G=function(e){try{return document.createElement("link").relList.supports(e)}catch{return!1}}("prefetch")?function(e){return new Promise(((t,n)=>{if("undefined"==typeof document)return void n();const r=document.createElement("link");r.setAttribute("rel","prefetch"),r.setAttribute("href",e),r.onload=()=>t(),r.onerror=()=>n();(document.getElementsByTagName("head")[0]??document.getElementsByName("script")[0]?.parentNode)?.appendChild(r)}))}:function(e){return new Promise(((t,n)=>{const r=new XMLHttpRequest;r.open("GET",e,!0),r.withCredentials=!0,r.onload=()=>{200===r.status?t():n()},r.send(null)}))};var Z=n(9670);const V=new Set,W=new Set,K=()=>navigator.connection?.effectiveType.includes("2g")||navigator.connection?.saveData,Y={prefetch(e){if(!(e=>!K()&&!W.has(e)&&!V.has(e))(e))return!1;V.add(e);const t=(0,d.f)(u.Z,e).flatMap((e=>{return t=e.route.path,Object.entries(H).filter((e=>{let[n]=e;return n.replace(/-[^-]+$/,"")===t})).flatMap((e=>{let[,t]=e;return Object.values((0,Z.Z)(t))}));var t}));return Promise.all(t.map((e=>{const t=n.gca(e);return t&&!t.includes("undefined")?G(t).catch((()=>{})):Promise.resolve()})))},preload:e=>!!(e=>!K()&&!W.has(e))(e)&&(W.add(e),N(e))},Q=Object.freeze(Y);if(l.Z.canUseDOM){window.docusaurus=Q;const e=a.hydrate;N(window.location.pathname).then((()=>{e(r.createElement(i.B6,null,r.createElement(o.VK,null,r.createElement(q,null))),document.getElementById("__docusaurus"))}))}},8940:(e,t,n)=>{"use strict";n.d(t,{_:()=>c,M:()=>d});var r=n(7294),a=n(6809);const o=JSON.parse('{"docusaurus-plugin-content-docs":{"default":{"path":"/kr/","versions":[{"name":"current","label":"\ud604\uc7ac \ubc84\uc804","isLast":true,"path":"/kr/","mainDocId":"introduction","docs":[{"id":"advanced/advanced","path":"/kr/advanced/","sidebar":"mySidebar"},{"id":"architecture/architecture","path":"/kr/architecture/","sidebar":"mySidebar"},{"id":"cli/agent","path":"/kr/cli/agent","sidebar":"mySidebar"},{"id":"cli/certificate","path":"/kr/cli/certificate","sidebar":"mySidebar"},{"id":"cli/cli","path":"/kr/cli/","sidebar":"mySidebar"},{"id":"cli/etcd-snapshot","path":"/kr/cli/etcd-snapshot","sidebar":"mySidebar"},{"id":"cli/secrets-encrypt","path":"/kr/cli/secrets-encrypt","sidebar":"mySidebar"},{"id":"cli/server","path":"/kr/cli/server","sidebar":"mySidebar"},{"id":"cli/token","path":"/kr/cli/token","sidebar":"mySidebar"},{"id":"cluster-access/cluster-access","path":"/kr/cluster-access/","sidebar":"mySidebar"},{"id":"datastore/backup-restore","path":"/kr/datastore/backup-restore","sidebar":"mySidebar"},{"id":"datastore/cluster-loadbalancer","path":"/kr/datastore/cluster-loadbalancer","sidebar":"mySidebar"},{"id":"datastore/datastore","path":"/kr/datastore/","sidebar":"mySidebar"},{"id":"datastore/ha","path":"/kr/datastore/ha","sidebar":"mySidebar"},{"id":"datastore/ha-embedded","path":"/kr/datastore/ha-embedded","sidebar":"mySidebar"},{"id":"faq/faq","path":"/kr/faq/","sidebar":"mySidebar"},{"id":"helm/helm","path":"/kr/helm/","sidebar":"mySidebar"},{"id":"installation/airgap","path":"/kr/installation/airgap","sidebar":"mySidebar"},{"id":"installation/configuration","path":"/kr/installation/configuration","sidebar":"mySidebar"},{"id":"installation/installation","path":"/kr/installation/","sidebar":"mySidebar"},{"id":"installation/kube-dashboard","path":"/kr/installation/kube-dashboard","sidebar":"mySidebar"},{"id":"installation/network-options","path":"/kr/installation/network-options","sidebar":"mySidebar"},{"id":"installation/packaged-components","path":"/kr/installation/packaged-components","sidebar":"mySidebar"},{"id":"installation/private-registry","path":"/kr/installation/private-registry","sidebar":"mySidebar"},{"id":"installation/requirements","path":"/kr/installation/requirements","sidebar":"mySidebar"},{"id":"installation/server-roles","path":"/kr/installation/server-roles","sidebar":"mySidebar"},{"id":"installation/uninstall","path":"/kr/installation/uninstall","sidebar":"mySidebar"},{"id":"introduction","path":"/kr/","sidebar":"mySidebar"},{"id":"known-issues/known-issues","path":"/kr/known-issues/","sidebar":"mySidebar"},{"id":"networking/networking","path":"/kr/networking/","sidebar":"mySidebar"},{"id":"quick-start/quick-start","path":"/kr/quick-start/","sidebar":"mySidebar"},{"id":"reference/env-variables","path":"/kr/reference/env-variables","sidebar":"mySidebar"},{"id":"reference/reference","path":"/kr/reference/","sidebar":"mySidebar"},{"id":"reference/resource-profiling","path":"/kr/reference/resource-profiling","sidebar":"mySidebar"},{"id":"security/hardening-guide","path":"/kr/security/hardening-guide","sidebar":"mySidebar"},{"id":"security/secrets-encryption","path":"/kr/security/secrets-encryption","sidebar":"mySidebar"},{"id":"security/security","path":"/kr/security/","sidebar":"mySidebar"},{"id":"security/self-assessment","path":"/kr/security/self-assessment","sidebar":"mySidebar"},{"id":"storage/storage","path":"/kr/storage/","sidebar":"mySidebar"},{"id":"upgrades/automated","path":"/kr/upgrades/automated","sidebar":"mySidebar"},{"id":"upgrades/killall","path":"/kr/upgrades/killall","sidebar":"mySidebar"},{"id":"upgrades/manual","path":"/kr/upgrades/manual","sidebar":"mySidebar"},{"id":"upgrades/upgrades","path":"/kr/upgrades/","sidebar":"mySidebar"}],"draftIds":[],"sidebars":{"mySidebar":{"link":{"path":"/kr/","label":"introduction"}}}}],"breadcrumbs":true}}}'),i=JSON.parse('{"defaultLocale":"en","locales":["en","zh","kr"],"path":"i18n","currentLocale":"kr","localeConfigs":{"en":{"label":"English","direction":"ltr","htmlLang":"en","calendar":"gregory","path":"en"},"zh":{"label":"\u7b80\u4f53\u4e2d\u6587","direction":"ltr","htmlLang":"zh","calendar":"gregory","path":"zh"},"kr":{"label":"\ud55c\uad6d\uc5b4","direction":"ltr","htmlLang":"kr","calendar":"gregory","path":"kr"}}}');var l=n(7529);const s=JSON.parse('{"docusaurusVersion":"2.4.1","siteVersion":"0.0.1","pluginVersions":{"docusaurus-plugin-content-docs":{"type":"package","name":"@docusaurus/plugin-content-docs","version":"2.4.1"},"docusaurus-plugin-content-pages":{"type":"package","name":"@docusaurus/plugin-content-pages","version":"2.4.1"},"docusaurus-plugin-sitemap":{"type":"package","name":"@docusaurus/plugin-sitemap","version":"2.4.1"},"docusaurus-theme-classic":{"type":"package","name":"@docusaurus/theme-classic","version":"2.4.1"},"docusaurus-theme-search-algolia":{"type":"package","name":"@docusaurus/theme-search-algolia","version":"2.4.1"},"docusaurus-plugin-client-redirects":{"type":"package","name":"@docusaurus/plugin-client-redirects","version":"2.4.1"},"docusaurus-theme-mermaid":{"type":"package","name":"@docusaurus/theme-mermaid","version":"2.4.1"}}}'),u={siteConfig:a.Z,siteMetadata:s,globalData:o,i18n:i,codeTranslations:l},c=r.createContext(u);function d(e){let{children:t}=e;return r.createElement(c.Provider,{value:u},t)}},4763:(e,t,n)=>{"use strict";n.d(t,{Z:()=>f});var r=n(7294),a=n(412),o=n(5742),i=n(8780),l=n(6999);function s(e){let{error:t,tryAgain:n}=e;return r.createElement("div",{style:{display:"flex",flexDirection:"column",justifyContent:"center",alignItems:"flex-start",minHeight:"100vh",width:"100%",maxWidth:"80ch",fontSize:"20px",margin:"0 auto",padding:"1rem"}},r.createElement("h1",{style:{fontSize:"3rem"}},"This page crashed"),r.createElement("button",{type:"button",onClick:n,style:{margin:"1rem 0",fontSize:"2rem",cursor:"pointer",borderRadius:20,padding:"1rem"}},"Try again"),r.createElement(u,{error:t}))}function u(e){let{error:t}=e;const n=(0,i.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{style:{whiteSpace:"pre-wrap"}},n)}function c(e){let{error:t,tryAgain:n}=e;return r.createElement(f,{fallback:()=>r.createElement(s,{error:t,tryAgain:n})},r.createElement(o.Z,null,r.createElement("title",null,"Page Error")),r.createElement(l.Z,null,r.createElement(s,{error:t,tryAgain:n})))}const d=e=>r.createElement(c,e);class f extends r.Component{constructor(e){super(e),this.state={error:null}}componentDidCatch(e){a.Z.canUseDOM&&this.setState({error:e})}render(){const{children:e}=this.props,{error:t}=this.state;if(t){const e={error:t,tryAgain:()=>this.setState({error:null})};return(this.props.fallback??d)(e)}return e??null}}},412:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});const r="undefined"!=typeof window&&"document"in window&&"createElement"in window.document,a={canUseDOM:r,canUseEventListeners:r&&("addEventListener"in window||"attachEvent"in window),canUseIntersectionObserver:r&&"IntersectionObserver"in window,canUseViewport:r&&"screen"in window}},5742:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(405);function o(e){return r.createElement(a.ql,e)}},9960:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(3117),a=n(7294),o=n(3727),i=n(8780),l=n(2263),s=n(3919),u=n(412);const c=a.createContext({collectLink:()=>{}});var d=n(4996);function f(e,t){let{isNavLink:n,to:f,href:p,activeClassName:m,isActive:h,"data-noBrokenLinkCheck":g,autoAddBaseUrl:b=!0,...v}=e;const{siteConfig:{trailingSlash:y,baseUrl:w}}=(0,l.Z)(),{withBaseUrl:k}=(0,d.C)(),S=(0,a.useContext)(c),E=(0,a.useRef)(null);(0,a.useImperativeHandle)(t,(()=>E.current));const x=f||p;const T=(0,s.Z)(x),C=x?.replace("pathname://","");let _=void 0!==C?(A=C,b&&(e=>e.startsWith("/"))(A)?k(A):A):void 0;var A;_&&T&&(_=(0,i.applyTrailingSlash)(_,{trailingSlash:y,baseUrl:w}));const L=(0,a.useRef)(!1),R=n?o.OL:o.rU,P=u.Z.canUseIntersectionObserver,N=(0,a.useRef)(),O=()=>{L.current||null==_||(window.docusaurus.preload(_),L.current=!0)};(0,a.useEffect)((()=>(!P&&T&&null!=_&&window.docusaurus.prefetch(_),()=>{P&&N.current&&N.current.disconnect()})),[N,_,P,T]);const I=_?.startsWith("#")??!1,D=!_||!T||I;return D||g||S.collectLink(_),D?a.createElement("a",(0,r.Z)({ref:E,href:_},x&&!T&&{target:"_blank",rel:"noopener noreferrer"},v)):a.createElement(R,(0,r.Z)({},v,{onMouseEnter:O,onTouchStart:O,innerRef:e=>{E.current=e,P&&e&&T&&(N.current=new window.IntersectionObserver((t=>{t.forEach((t=>{e===t.target&&(t.isIntersecting||t.intersectionRatio>0)&&(N.current.unobserve(e),N.current.disconnect(),null!=_&&window.docusaurus.prefetch(_))}))})),N.current.observe(e))},to:_},n&&{isActive:h,activeClassName:m}))}const p=a.forwardRef(f)},5999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s,I:()=>l});var r=n(7294);function a(e,t){const n=e.split(/(\{\w+\})/).map(((e,n)=>{if(n%2==1){const n=t?.[e.slice(1,-1)];if(void 0!==n)return n}return e}));return n.some((e=>(0,r.isValidElement)(e)))?n.map(((e,t)=>(0,r.isValidElement)(e)?r.cloneElement(e,{key:t}):e)).filter((e=>""!==e)):n.join("")}var o=n(7529);function i(e){let{id:t,message:n}=e;if(void 0===t&&void 0===n)throw new Error("Docusaurus translation declarations must have at least a translation id or a default translation message");return o[t??n]??n??t}function l(e,t){let{message:n,id:r}=e;return a(i({message:n,id:r}),t)}function s(e){let{children:t,id:n,values:o}=e;if(t&&"string"!=typeof t)throw console.warn("Illegal <Translate> children",t),new Error("The Docusaurus <Translate> component only accept simple string values");const l=i({message:t,id:n});return r.createElement(r.Fragment,null,a(l,o))}},9935:(e,t,n)=>{"use strict";n.d(t,{m:()=>r});const r="default"},3919:(e,t,n)=>{"use strict";function r(e){return/^(?:\w*:|\/\/)/.test(e)}function a(e){return void 0!==e&&!r(e)}n.d(t,{Z:()=>a,b:()=>r})},4996:(e,t,n)=>{"use strict";n.d(t,{C:()=>i,Z:()=>l});var r=n(7294),a=n(2263),o=n(3919);function i(){const{siteConfig:{baseUrl:e,url:t}}=(0,a.Z)(),n=(0,r.useCallback)(((n,r)=>function(e,t,n,r){let{forcePrependBaseUrl:a=!1,absolute:i=!1}=void 0===r?{}:r;if(!n||n.startsWith("#")||(0,o.b)(n))return n;if(a)return t+n.replace(/^\//,"");if(n===t.replace(/\/$/,""))return t;const l=n.startsWith(t)?n:t+n.replace(/^\//,"");return i?e+l:l}(t,e,n,r)),[t,e]);return{withBaseUrl:n}}function l(e,t){void 0===t&&(t={});const{withBaseUrl:n}=i();return n(e,t)}},2263:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8940);function o(){return(0,r.useContext)(a._)}},2389:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8934);function o(){return(0,r.useContext)(a._)}},9670:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});function r(e){const t={};return function e(n,r){Object.entries(n).forEach((n=>{let[a,o]=n;const i=r?`${r}.${a}`:a;var l;"object"==typeof(l=o)&&l&&Object.keys(l).length>0?e(o,i):t[i]=o}))}(e),t}},226:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,z:()=>o});var r=n(7294);const a=r.createContext(null);function o(e){let{children:t,value:n}=e;const o=r.useContext(a),i=(0,r.useMemo)((()=>function(e){let{parent:t,value:n}=e;if(!t){if(!n)throw new Error("Unexpected: no Docusaurus route context found");if(!("plugin"in n))throw new Error("Unexpected: Docusaurus topmost route context has no `plugin` attribute");return n}const r={...t.data,...n?.data};return{plugin:t.plugin,data:r}}({parent:o,value:n})),[o,n]);return r.createElement(a.Provider,{value:i},t)}},143:(e,t,n)=>{"use strict";n.d(t,{Iw:()=>b,gA:()=>p,WS:()=>m,_r:()=>d,Jo:()=>v,zh:()=>f,yW:()=>g,gB:()=>h});var r=n(6775),a=n(2263),o=n(9935);function i(e,t){void 0===t&&(t={});const n=function(){const{globalData:e}=(0,a.Z)();return e}()[e];if(!n&&t.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin.`);return n}const l=e=>e.versions.find((e=>e.isLast));function s(e,t){const n=l(e);return[...e.versions.filter((e=>e!==n)),n].find((e=>!!(0,r.LX)(t,{path:e.path,exact:!1,strict:!1})))}function u(e,t){const n=s(e,t),a=n?.docs.find((e=>!!(0,r.LX)(t,{path:e.path,exact:!0,strict:!1})));return{activeVersion:n,activeDoc:a,alternateDocVersions:a?function(t){const n={};return e.versions.forEach((e=>{e.docs.forEach((r=>{r.id===t&&(n[e.name]=r)}))})),n}(a.id):{}}}const c={},d=()=>i("docusaurus-plugin-content-docs")??c,f=e=>function(e,t,n){void 0===t&&(t=o.m),void 0===n&&(n={});const r=i(e)?.[t];if(!r&&n.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin with id "${t}".`);return r}("docusaurus-plugin-content-docs",e,{failfast:!0});function p(e){void 0===e&&(e={});const t=d(),{pathname:n}=(0,r.TH)();return function(e,t,n){void 0===n&&(n={});const a=Object.entries(e).sort(((e,t)=>t[1].path.localeCompare(e[1].path))).find((e=>{let[,n]=e;return!!(0,r.LX)(t,{path:n.path,exact:!1,strict:!1})})),o=a?{pluginId:a[0],pluginData:a[1]}:void 0;if(!o&&n.failfast)throw new Error(`Can't find active docs plugin for "${t}" pathname, while it was expected to be found. Maybe you tried to use a docs feature that can only be used on a docs-related page? Existing docs plugin paths are: ${Object.values(e).map((e=>e.path)).join(", ")}`);return o}(t,n,e)}function m(e){void 0===e&&(e={});const t=p(e),{pathname:n}=(0,r.TH)();if(!t)return;return{activePlugin:t,activeVersion:s(t.pluginData,n)}}function h(e){return f(e).versions}function g(e){const t=f(e);return l(t)}function b(e){const t=f(e),{pathname:n}=(0,r.TH)();return u(t,n)}function v(e){const t=f(e),{pathname:n}=(0,r.TH)();return function(e,t){const n=l(e);return{latestDocSuggestion:u(e,t).alternateDocVersions[n.name],latestVersionSuggestion:n}}(t,n)}},8320:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>o});var r=n(4865),a=n.n(r);a().configure({showSpinner:!1});const o={onRouteUpdate(e){let{location:t,previousLocation:n}=e;if(n&&t.pathname!==n.pathname){const e=window.setTimeout((()=>{a().start()}),200);return()=>window.clearTimeout(e)}},onRouteDidUpdate(){a().done()}}},3310:(e,t,n)=>{"use strict";n.r(t);var r=n(7410),a=n(6809);!function(e){const{themeConfig:{prism:t}}=a.Z,{additionalLanguages:r}=t;globalThis.Prism=e,r.forEach((e=>{n(6726)(`./prism-${e}`)})),delete globalThis.Prism}(r.Z)},9471:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294);const a="iconExternalLink_nPIU";function o(e){let{width:t=13.5,height:n=13.5}=e;return r.createElement("svg",{width:t,height:n,"aria-hidden":"true",viewBox:"0 0 24 24",className:a},r.createElement("path",{fill:"currentColor",d:"M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"}))}},6999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>Ot});var r=n(7294),a=n(6010),o=n(4763),i=n(833),l=n(3117),s=n(6775),u=n(5999),c=n(5936);const d="__docusaurus_skipToContent_fallback";function f(e){e.setAttribute("tabindex","-1"),e.focus(),e.removeAttribute("tabindex")}function p(){const e=(0,r.useRef)(null),{action:t}=(0,s.k6)(),n=(0,r.useCallback)((e=>{e.preventDefault();const t=document.querySelector("main:first-of-type")??document.getElementById(d);t&&f(t)}),[]);return(0,c.S)((n=>{let{location:r}=n;e.current&&!r.hash&&"PUSH"===t&&f(e.current)})),{containerRef:e,onClick:n}}const m=(0,u.I)({id:"theme.common.skipToMainContent",description:"The skip to content label used for accessibility, allowing to rapidly navigate to main content with keyboard tab/enter navigation",message:"Skip to main content"});function h(e){const t=e.children??m,{containerRef:n,onClick:a}=p();return r.createElement("div",{ref:n,role:"region","aria-label":m},r.createElement("a",(0,l.Z)({},e,{href:`#${d}`,onClick:a}),t))}var g=n(5281),b=n(9727);const v="skipToContent_fXgn";function y(){return r.createElement(h,{className:v})}var w=n(6668),k=n(9689);function S(e){let{width:t=21,height:n=21,color:a="currentColor",strokeWidth:o=1.2,className:i,...s}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 15 15",width:t,height:n},s),r.createElement("g",{stroke:a,strokeWidth:o},r.createElement("path",{d:"M.75.75l13.5 13.5M14.25.75L.75 14.25"})))}const E="closeButton_CVFx";function x(e){return r.createElement("button",(0,l.Z)({type:"button","aria-label":(0,u.I)({id:"theme.AnnouncementBar.closeButtonAriaLabel",message:"Close",description:"The ARIA label for close button of announcement bar"})},e,{className:(0,a.Z)("clean-btn close",E,e.className)}),r.createElement(S,{width:14,height:14,strokeWidth:3.1}))}const T="content_knG7";function C(e){const{announcementBar:t}=(0,w.L)(),{content:n}=t;return r.createElement("div",(0,l.Z)({},e,{className:(0,a.Z)(T,e.className),dangerouslySetInnerHTML:{__html:n}}))}const _="announcementBar_mb4j",A="announcementBarPlaceholder_vyr4",L="announcementBarClose_gvF7",R="announcementBarContent_xLdY";function P(){const{announcementBar:e}=(0,w.L)(),{isActive:t,close:n}=(0,k.nT)();if(!t)return null;const{backgroundColor:a,textColor:o,isCloseable:i}=e;return r.createElement("div",{className:_,style:{backgroundColor:a,color:o},role:"banner"},i&&r.createElement("div",{className:A}),r.createElement(C,{className:R}),i&&r.createElement(x,{onClick:n,className:L}))}var N=n(3163),O=n(2466);var I=n(902),D=n(3102);const M=r.createContext(null);function B(e){let{children:t}=e;const n=function(){const e=(0,N.e)(),t=(0,D.HY)(),[n,a]=(0,r.useState)(!1),o=null!==t.component,i=(0,I.D9)(o);return(0,r.useEffect)((()=>{o&&!i&&a(!0)}),[o,i]),(0,r.useEffect)((()=>{o?e.shown||a(!0):a(!1)}),[e.shown,o]),(0,r.useMemo)((()=>[n,a]),[n])}();return r.createElement(M.Provider,{value:n},t)}function F(e){if(e.component){const t=e.component;return r.createElement(t,e.props)}}function j(){const e=(0,r.useContext)(M);if(!e)throw new I.i6("NavbarSecondaryMenuDisplayProvider");const[t,n]=e,a=(0,r.useCallback)((()=>n(!1)),[n]),o=(0,D.HY)();return(0,r.useMemo)((()=>({shown:t,hide:a,content:F(o)})),[a,o,t])}function z(e){let{header:t,primaryMenu:n,secondaryMenu:o}=e;const{shown:i}=j();return r.createElement("div",{className:"navbar-sidebar"},t,r.createElement("div",{className:(0,a.Z)("navbar-sidebar__items",{"navbar-sidebar__items--show-secondary":i})},r.createElement("div",{className:"navbar-sidebar__item menu"},n),r.createElement("div",{className:"navbar-sidebar__item menu"},o)))}var U=n(2949),$=n(2389);function q(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"}))}function H(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"}))}const G={toggle:"toggle_vylO",toggleButton:"toggleButton_gllP",darkToggleIcon:"darkToggleIcon_wfgR",lightToggleIcon:"lightToggleIcon_pyhR",toggleButtonDisabled:"toggleButtonDisabled_aARS"};function Z(e){let{className:t,buttonClassName:n,value:o,onChange:i}=e;const l=(0,$.Z)(),s=(0,u.I)({message:"Switch between dark and light mode (currently {mode})",id:"theme.colorToggle.ariaLabel",description:"The ARIA label for the navbar color mode toggle"},{mode:"dark"===o?(0,u.I)({message:"dark mode",id:"theme.colorToggle.ariaLabel.mode.dark",description:"The name for the dark color mode"}):(0,u.I)({message:"light mode",id:"theme.colorToggle.ariaLabel.mode.light",description:"The name for the light color mode"})});return r.createElement("div",{className:(0,a.Z)(G.toggle,t)},r.createElement("button",{className:(0,a.Z)("clean-btn",G.toggleButton,!l&&G.toggleButtonDisabled,n),type:"button",onClick:()=>i("dark"===o?"light":"dark"),disabled:!l,title:s,"aria-label":s,"aria-live":"polite"},r.createElement(q,{className:(0,a.Z)(G.toggleIcon,G.lightToggleIcon)}),r.createElement(H,{className:(0,a.Z)(G.toggleIcon,G.darkToggleIcon)})))}const V=r.memo(Z),W="darkNavbarColorModeToggle_X3D1";function K(e){let{className:t}=e;const n=(0,w.L)().navbar.style,a=(0,w.L)().colorMode.disableSwitch,{colorMode:o,setColorMode:i}=(0,U.I)();return a?null:r.createElement(V,{className:t,buttonClassName:"dark"===n?W:void 0,value:o,onChange:i})}var Y=n(1327);function Q(){return r.createElement(Y.Z,{className:"navbar__brand",imageClassName:"navbar__logo",titleClassName:"navbar__title text--truncate"})}function X(){const e=(0,N.e)();return r.createElement("button",{type:"button","aria-label":(0,u.I)({id:"theme.docs.sidebar.closeSidebarButtonAriaLabel",message:"Close navigation bar",description:"The ARIA label for close button of mobile sidebar"}),className:"clean-btn navbar-sidebar__close",onClick:()=>e.toggle()},r.createElement(S,{color:"var(--ifm-color-emphasis-600)"}))}function J(){return r.createElement("div",{className:"navbar-sidebar__brand"},r.createElement(Q,null),r.createElement("a",{href:"https://github.com/k3s-io/k3s",target:"_blank",rel:"noopener noreferrer",className:"margin-right--md header-github-link"}),r.createElement(K,{className:"margin-right--md"}),r.createElement(X,null))}var ee=n(9960),te=n(4996),ne=n(3919),re=n(8022),ae=n(9471);function oe(e){let{activeBasePath:t,activeBaseRegex:n,to:a,href:o,label:i,html:s,isDropdownLink:u,prependBaseUrlToHref:c,...d}=e;const f=(0,te.Z)(a),p=(0,te.Z)(t),m=(0,te.Z)(o,{forcePrependBaseUrl:!0}),h=i&&o&&!(0,ne.Z)(o),g=s?{dangerouslySetInnerHTML:{__html:s}}:{children:r.createElement(r.Fragment,null,i,h&&r.createElement(ae.Z,u&&{width:12,height:12}))};return o?r.createElement(ee.Z,(0,l.Z)({href:c?m:o},d,g)):r.createElement(ee.Z,(0,l.Z)({to:f,isNavLink:!0},(t||n)&&{isActive:(e,t)=>n?(0,re.F)(n,t.pathname):t.pathname.startsWith(p)},d,g))}function ie(e){let{className:t,isDropdownItem:n=!1,...o}=e;const i=r.createElement(oe,(0,l.Z)({className:(0,a.Z)(n?"dropdown__link":"navbar__item navbar__link",t),isDropdownLink:n},o));return n?r.createElement("li",null,i):i}function le(e){let{className:t,isDropdownItem:n,...o}=e;return r.createElement("li",{className:"menu__list-item"},r.createElement(oe,(0,l.Z)({className:(0,a.Z)("menu__link",t)},o)))}function se(e){let{mobile:t=!1,position:n,...a}=e;const o=t?le:ie;return r.createElement(o,(0,l.Z)({},a,{activeClassName:a.activeClassName??(t?"menu__link--active":"navbar__link--active")}))}var ue=n(6043),ce=n(8596),de=n(2263);function fe(e,t){return e.some((e=>function(e,t){return!!(0,ce.Mg)(e.to,t)||!!(0,re.F)(e.activeBaseRegex,t)||!(!e.activeBasePath||!t.startsWith(e.activeBasePath))}(e,t)))}function pe(e){let{items:t,position:n,className:o,onClick:i,...s}=e;const u=(0,r.useRef)(null),[c,d]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{const e=e=>{u.current&&!u.current.contains(e.target)&&d(!1)};return document.addEventListener("mousedown",e),document.addEventListener("touchstart",e),document.addEventListener("focusin",e),()=>{document.removeEventListener("mousedown",e),document.removeEventListener("touchstart",e),document.removeEventListener("focusin",e)}}),[u]),r.createElement("div",{ref:u,className:(0,a.Z)("navbar__item","dropdown","dropdown--hoverable",{"dropdown--right":"right"===n,"dropdown--show":c})},r.createElement(oe,(0,l.Z)({"aria-haspopup":"true","aria-expanded":c,role:"button",href:s.to?void 0:"#",className:(0,a.Z)("navbar__link",o)},s,{onClick:s.to?void 0:e=>e.preventDefault(),onKeyDown:e=>{"Enter"===e.key&&(e.preventDefault(),d(!c))}}),s.children??s.label),r.createElement("ul",{className:"dropdown__menu"},t.map(((e,t)=>r.createElement(Ze,(0,l.Z)({isDropdownItem:!0,activeClassName:"dropdown__link--active"},e,{key:t}))))))}function me(e){let{items:t,className:n,position:o,onClick:i,...u}=e;const c=function(){const{siteConfig:{baseUrl:e}}=(0,de.Z)(),{pathname:t}=(0,s.TH)();return t.replace(e,"/")}(),d=fe(t,c),{collapsed:f,toggleCollapsed:p,setCollapsed:m}=(0,ue.u)({initialState:()=>!d});return(0,r.useEffect)((()=>{d&&m(!d)}),[c,d,m]),r.createElement("li",{className:(0,a.Z)("menu__list-item",{"menu__list-item--collapsed":f})},r.createElement(oe,(0,l.Z)({role:"button",className:(0,a.Z)("menu__link menu__link--sublist menu__link--sublist-caret",n)},u,{onClick:e=>{e.preventDefault(),p()}}),u.children??u.label),r.createElement(ue.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:f},t.map(((e,t)=>r.createElement(Ze,(0,l.Z)({mobile:!0,isDropdownItem:!0,onClick:i,activeClassName:"menu__link--active"},e,{key:t}))))))}function he(e){let{mobile:t=!1,...n}=e;const a=t?me:pe;return r.createElement(a,n)}var ge=n(4711);function be(e){let{width:t=20,height:n=20,...a}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:t,height:n,"aria-hidden":!0},a),r.createElement("path",{fill:"currentColor",d:"M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"}))}const ve="iconLanguage_nlXk";function ye(){return r.createElement("svg",{width:"15",height:"15",className:"DocSearch-Control-Key-Icon"},r.createElement("path",{d:"M4.505 4.496h2M5.505 5.496v5M8.216 4.496l.055 5.993M10 7.5c.333.333.5.667.5 1v2M12.326 4.5v5.996M8.384 4.496c1.674 0 2.116 0 2.116 1.5s-.442 1.5-2.116 1.5M3.205 9.303c-.09.448-.277 1.21-1.241 1.203C1 10.5.5 9.513.5 8V7c0-1.57.5-2.5 1.464-2.494.964.006 1.134.598 1.24 1.342M12.553 10.5h1.953",strokeWidth:"1.2",stroke:"currentColor",fill:"none",strokeLinecap:"square"}))}var we=n(830),ke=["translations"];function Se(){return Se=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},Se.apply(this,arguments)}function Ee(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==n)return;var r,a,o=[],i=!0,l=!1;try{for(n=n.call(e);!(i=(r=n.next()).done)&&(o.push(r.value),!t||o.length!==t);i=!0);}catch(s){l=!0,a=s}finally{try{i||null==n.return||n.return()}finally{if(l)throw a}}return o}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return xe(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n||"Set"===n)return Array.from(e);if("Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n))return xe(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function xe(e,t){(null==t||t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function Te(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var Ce="Ctrl";var _e=r.forwardRef((function(e,t){var n=e.translations,a=void 0===n?{}:n,o=Te(e,ke),i=a.buttonText,l=void 0===i?"Search":i,s=a.buttonAriaLabel,u=void 0===s?"Search":s,c=Ee((0,r.useState)(null),2),d=c[0],f=c[1];return(0,r.useEffect)((function(){"undefined"!=typeof navigator&&(/(Mac|iPhone|iPod|iPad)/i.test(navigator.platform)?f("\u2318"):f(Ce))}),[]),r.createElement("button",Se({type:"button",className:"DocSearch DocSearch-Button","aria-label":u},o,{ref:t}),r.createElement("span",{className:"DocSearch-Button-Container"},r.createElement(we.W,null),r.createElement("span",{className:"DocSearch-Button-Placeholder"},l)),r.createElement("span",{className:"DocSearch-Button-Keys"},null!==d&&r.createElement(r.Fragment,null,r.createElement("kbd",{className:"DocSearch-Button-Key"},d===Ce?r.createElement(ye,null):d),r.createElement("kbd",{className:"DocSearch-Button-Key"},"K"))))})),Ae=n(5742),Le=n(6177),Re=n(239),Pe=n(3320);var Ne=n(3935);const Oe={button:{buttonText:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"}),buttonAriaLabel:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"})},modal:{searchBox:{resetButtonTitle:(0,u.I)({id:"theme.SearchModal.searchBox.resetButtonTitle",message:"Clear the query",description:"The label and ARIA label for search box reset button"}),resetButtonAriaLabel:(0,u.I)({id:"theme.SearchModal.searchBox.resetButtonTitle",message:"Clear the query",description:"The label and ARIA label for search box reset button"}),cancelButtonText:(0,u.I)({id:"theme.SearchModal.searchBox.cancelButtonText",message:"Cancel",description:"The label and ARIA label for search box cancel button"}),cancelButtonAriaLabel:(0,u.I)({id:"theme.SearchModal.searchBox.cancelButtonText",message:"Cancel",description:"The label and ARIA label for search box cancel button"})},startScreen:{recentSearchesTitle:(0,u.I)({id:"theme.SearchModal.startScreen.recentSearchesTitle",message:"Recent",description:"The title for recent searches"}),noRecentSearchesText:(0,u.I)({id:"theme.SearchModal.startScreen.noRecentSearchesText",message:"No recent searches",description:"The text when no recent searches"}),saveRecentSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.saveRecentSearchButtonTitle",message:"Save this search",description:"The label for save recent search button"}),removeRecentSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.removeRecentSearchButtonTitle",message:"Remove this search from history",description:"The label for remove recent search button"}),favoriteSearchesTitle:(0,u.I)({id:"theme.SearchModal.startScreen.favoriteSearchesTitle",message:"Favorite",description:"The title for favorite searches"}),removeFavoriteSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.removeFavoriteSearchButtonTitle",message:"Remove this search from favorites",description:"The label for remove favorite search button"})},errorScreen:{titleText:(0,u.I)({id:"theme.SearchModal.errorScreen.titleText",message:"Unable to fetch results",description:"The title for error screen of search modal"}),helpText:(0,u.I)({id:"theme.SearchModal.errorScreen.helpText",message:"You might want to check your network connection.",description:"The help text for error screen of search modal"})},footer:{selectText:(0,u.I)({id:"theme.SearchModal.footer.selectText",message:"to select",description:"The explanatory text of the action for the enter key"}),selectKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.selectKeyAriaLabel",message:"Enter key",description:"The ARIA label for the Enter key button that makes the selection"}),navigateText:(0,u.I)({id:"theme.SearchModal.footer.navigateText",message:"to navigate",description:"The explanatory text of the action for the Arrow up and Arrow down key"}),navigateUpKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.navigateUpKeyAriaLabel",message:"Arrow up",description:"The ARIA label for the Arrow up key button that makes the navigation"}),navigateDownKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.navigateDownKeyAriaLabel",message:"Arrow down",description:"The ARIA label for the Arrow down key button that makes the navigation"}),closeText:(0,u.I)({id:"theme.SearchModal.footer.closeText",message:"to close",description:"The explanatory text of the action for Escape key"}),closeKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.closeKeyAriaLabel",message:"Escape key",description:"The ARIA label for the Escape key button that close the modal"}),searchByText:(0,u.I)({id:"theme.SearchModal.footer.searchByText",message:"Search by",description:"The text explain that the search is making by Algolia"})},noResultsScreen:{noResultsText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.noResultsText",message:"No results for",description:"The text explains that there are no results for the following search"}),suggestedQueryText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.suggestedQueryText",message:"Try searching for",description:"The text for the suggested query when no results are found for the following search"}),reportMissingResultsText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.reportMissingResultsText",message:"Believe this query should return results?",description:"The text for the question where the user thinks there are missing results"}),reportMissingResultsLinkText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.reportMissingResultsLinkText",message:"Let us know.",description:"The text for the link to report missing results"})}},placeholder:(0,u.I)({id:"theme.SearchModal.placeholder",message:"Search docs",description:"The placeholder of the input of the DocSearch pop-up modal"})};let Ie=null;function De(e){let{hit:t,children:n}=e;return r.createElement(ee.Z,{to:t.url},n)}function Me(e){let{state:t,onClose:n}=e;const a=(0,Le.M)();return r.createElement(ee.Z,{to:a(t.query),onClick:n},r.createElement(u.Z,{id:"theme.SearchBar.seeAll",values:{count:t.context.nbHits}},"See all {count} results"))}function Be(e){let{contextualSearch:t,externalUrlRegex:a,...o}=e;const{siteMetadata:i}=(0,de.Z)(),u=(0,Re.l)(),c=function(){const{locale:e,tags:t}=(0,Pe._q)();return[`language:${e}`,t.map((e=>`docusaurus_tag:${e}`))]}(),d=o.searchParameters?.facetFilters??[],f=t?function(e,t){const n=e=>"string"==typeof e?[e]:e;return[...n(e),...n(t)]}(c,d):d,p={...o.searchParameters,facetFilters:f},m=(0,s.k6)(),h=(0,r.useRef)(null),g=(0,r.useRef)(null),[b,v]=(0,r.useState)(!1),[y,w]=(0,r.useState)(void 0),k=(0,r.useCallback)((()=>Ie?Promise.resolve():Promise.all([n.e(6780).then(n.bind(n,6780)),Promise.all([n.e(532),n.e(6945)]).then(n.bind(n,6945)),Promise.all([n.e(532),n.e(8894)]).then(n.bind(n,8894))]).then((e=>{let[{DocSearchModal:t}]=e;Ie=t}))),[]),S=(0,r.useCallback)((()=>{k().then((()=>{h.current=document.createElement("div"),document.body.insertBefore(h.current,document.body.firstChild),v(!0)}))}),[k,v]),E=(0,r.useCallback)((()=>{v(!1),h.current?.remove()}),[v]),x=(0,r.useCallback)((e=>{k().then((()=>{v(!0),w(e.key)}))}),[k,v,w]),T=(0,r.useRef)({navigate(e){let{itemUrl:t}=e;(0,re.F)(a,t)?window.location.href=t:m.push(t)}}).current,C=(0,r.useRef)((e=>o.transformItems?o.transformItems(e):e.map((e=>({...e,url:u(e.url)}))))).current,_=(0,r.useMemo)((()=>e=>r.createElement(Me,(0,l.Z)({},e,{onClose:E}))),[E]),A=(0,r.useCallback)((e=>(e.addAlgoliaAgent("docusaurus",i.docusaurusVersion),e)),[i.docusaurusVersion]);return function(e){var t=e.isOpen,n=e.onOpen,a=e.onClose,o=e.onInput,i=e.searchButtonRef;r.useEffect((function(){function e(e){(27===e.keyCode&&t||"k"===e.key.toLowerCase()&&(e.metaKey||e.ctrlKey)||!function(e){var t=e.target,n=t.tagName;return t.isContentEditable||"INPUT"===n||"SELECT"===n||"TEXTAREA"===n}(e)&&"/"===e.key&&!t)&&(e.preventDefault(),t?a():document.body.classList.contains("DocSearch--active")||document.body.classList.contains("DocSearch--active")||n()),i&&i.current===document.activeElement&&o&&/[a-zA-Z0-9]/.test(String.fromCharCode(e.keyCode))&&o(e)}return window.addEventListener("keydown",e),function(){window.removeEventListener("keydown",e)}}),[t,n,a,o,i])}({isOpen:b,onOpen:S,onClose:E,onInput:x,searchButtonRef:g}),r.createElement(r.Fragment,null,r.createElement(Ae.Z,null,r.createElement("link",{rel:"preconnect",href:`https://${o.appId}-dsn.algolia.net`,crossOrigin:"anonymous"})),r.createElement(_e,{onTouchStart:k,onFocus:k,onMouseOver:k,onClick:S,ref:g,translations:Oe.button}),b&&Ie&&h.current&&(0,Ne.createPortal)(r.createElement(Ie,(0,l.Z)({onClose:E,initialScrollY:window.scrollY,initialQuery:y,navigator:T,transformItems:C,hitComponent:De,transformSearchClient:A},o.searchPagePath&&{resultsFooterComponent:_},o,{searchParameters:p,placeholder:Oe.placeholder,translations:Oe.modal})),h.current))}function Fe(){const{siteConfig:e}=(0,de.Z)();return r.createElement(Be,e.themeConfig.algolia)}const je="searchBox_ZlJk";function ze(e){let{children:t,className:n}=e;return r.createElement("div",{className:(0,a.Z)(n,je)},t)}var Ue=n(143),$e=n(3438);var qe=n(373);const He=e=>e.docs.find((t=>t.id===e.mainDocId));const Ge={default:se,localeDropdown:function(e){let{mobile:t,dropdownItemsBefore:n,dropdownItemsAfter:a,...o}=e;const{i18n:{currentLocale:i,locales:c,localeConfigs:d}}=(0,de.Z)(),f=(0,ge.l)(),{search:p,hash:m}=(0,s.TH)(),h=[...n,...c.map((e=>{const n=`${`pathname://${f.createUrl({locale:e,fullyQualified:!1})}`}${p}${m}`;return{label:d[e].label,lang:d[e].htmlLang,to:n,target:"_self",autoAddBaseUrl:!1,className:e===i?t?"menu__link--active":"dropdown__link--active":""}})),...a],g=t?(0,u.I)({message:"Languages",id:"theme.navbar.mobileLanguageDropdown.label",description:"The label for the mobile language switcher dropdown"}):d[i].label;return r.createElement(he,(0,l.Z)({},o,{mobile:t,label:r.createElement(r.Fragment,null,r.createElement(be,{className:ve}),g),items:h}))},search:function(e){let{mobile:t,className:n}=e;return t?null:r.createElement(ze,{className:n},r.createElement(Fe,null))},dropdown:he,html:function(e){let{value:t,className:n,mobile:o=!1,isDropdownItem:i=!1}=e;const l=i?"li":"div";return r.createElement(l,{className:(0,a.Z)({navbar__item:!o&&!i,"menu__list-item":o},n),dangerouslySetInnerHTML:{__html:t}})},doc:function(e){let{docId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ue.Iw)(a),s=(0,$e.vY)(t,a);return null===s?null:r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.path===s.path||!!i?.sidebar&&i.sidebar===s.sidebar,label:n??s.id,to:s.path}))},docSidebar:function(e){let{sidebarId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ue.Iw)(a),s=(0,$e.oz)(t,a).link;if(!s)throw new Error(`DocSidebarNavbarItem: Sidebar with ID "${t}" doesn't have anything to be linked to.`);return r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.sidebar===t,label:n??s.label,to:s.path}))},docsVersion:function(e){let{label:t,to:n,docsPluginId:a,...o}=e;const i=(0,$e.lO)(a)[0],s=t??i.label,u=n??(e=>e.docs.find((t=>t.id===e.mainDocId)))(i).path;return r.createElement(se,(0,l.Z)({},o,{label:s,to:u}))},docsVersionDropdown:function(e){let{mobile:t,docsPluginId:n,dropdownActiveClassDisabled:a,dropdownItemsBefore:o,dropdownItemsAfter:i,...c}=e;const{search:d,hash:f}=(0,s.TH)(),p=(0,Ue.Iw)(n),m=(0,Ue.gB)(n),{savePreferredVersionName:h}=(0,qe.J)(n),g=[...o,...m.map((e=>{const t=p.alternateDocVersions[e.name]??He(e);return{label:e.label,to:`${t.path}${d}${f}`,isActive:()=>e===p.activeVersion,onClick:()=>h(e.name)}})),...i],b=(0,$e.lO)(n)[0],v=t&&g.length>1?(0,u.I)({id:"theme.navbar.mobileVersionsDropdown.label",message:"Versions",description:"The label for the navbar versions dropdown on mobile view"}):b.label,y=t&&g.length>1?void 0:He(b).path;return g.length<=1?r.createElement(se,(0,l.Z)({},c,{mobile:t,label:v,to:y,isActive:a?()=>!1:void 0})):r.createElement(he,(0,l.Z)({},c,{mobile:t,label:v,to:y,items:g,isActive:a?()=>!1:void 0}))}};function Ze(e){let{type:t,...n}=e;const a=function(e,t){return e&&"default"!==e?e:"items"in t?"dropdown":"default"}(t,n),o=Ge[a];if(!o)throw new Error(`No NavbarItem component found for type "${t}".`);return r.createElement(o,n)}function Ve(){const e=(0,N.e)(),t=(0,w.L)().navbar.items;return r.createElement("ul",{className:"menu__list"},t.map(((t,n)=>r.createElement(Ze,(0,l.Z)({mobile:!0},t,{onClick:()=>e.toggle(),key:n})))))}function We(e){return r.createElement("button",(0,l.Z)({},e,{type:"button",className:"clean-btn navbar-sidebar__back"}),r.createElement(u.Z,{id:"theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel",description:"The label of the back button to return to main menu, inside the mobile navbar sidebar secondary menu (notably used to display the docs sidebar)"},"\u2190 Back to main menu"))}function Ke(){const e=0===(0,w.L)().navbar.items.length,t=j();return r.createElement(r.Fragment,null,!e&&r.createElement(We,{onClick:()=>t.hide()}),t.content)}function Ye(){const e=(0,N.e)();var t;return void 0===(t=e.shown)&&(t=!0),(0,r.useEffect)((()=>(document.body.style.overflow=t?"hidden":"visible",()=>{document.body.style.overflow="visible"})),[t]),e.shouldRender?r.createElement(z,{header:r.createElement(J,null),primaryMenu:r.createElement(Ve,null),secondaryMenu:r.createElement(Ke,null)}):null}const Qe="navbarHideable_m1mJ",Xe="navbarHidden_jGov";function Je(e){return r.createElement("div",(0,l.Z)({role:"presentation"},e,{className:(0,a.Z)("navbar-sidebar__backdrop",e.className)}))}function et(e){let{children:t}=e;const{navbar:{hideOnScroll:n,style:o}}=(0,w.L)(),i=(0,N.e)(),{navbarRef:l,isNavbarVisible:s}=function(e){const[t,n]=(0,r.useState)(e),a=(0,r.useRef)(!1),o=(0,r.useRef)(0),i=(0,r.useCallback)((e=>{null!==e&&(o.current=e.getBoundingClientRect().height)}),[]);return(0,O.RF)(((t,r)=>{let{scrollY:i}=t;if(!e)return;if(i<o.current)return void n(!0);if(a.current)return void(a.current=!1);const l=r?.scrollY,s=document.documentElement.scrollHeight-o.current,u=window.innerHeight;l&&i>=l?n(!1):i+u<s&&n(!0)})),(0,c.S)((t=>{if(!e)return;const r=t.location.hash;if(r?document.getElementById(r.substring(1)):void 0)return a.current=!0,void n(!1);n(!0)})),{navbarRef:i,isNavbarVisible:t}}(n);return r.createElement("nav",{ref:l,"aria-label":(0,u.I)({id:"theme.NavBar.navAriaLabel",message:"Main",description:"The ARIA label for the main navigation"}),className:(0,a.Z)("navbar","navbar--fixed-top",n&&[Qe,!s&&Xe],{"navbar--dark":"dark"===o,"navbar--primary":"primary"===o,"navbar-sidebar--show":i.shown})},t,r.createElement(Je,{onClick:i.toggle}),r.createElement(Ye,null))}var tt=n(8780);const nt="errorBoundaryError_a6uf";function rt(e){return r.createElement("button",(0,l.Z)({type:"button"},e),r.createElement(u.Z,{id:"theme.ErrorPageContent.tryAgain",description:"The label of the button to try again rendering when the React error boundary captures an error"},"Try again"))}function at(e){let{error:t}=e;const n=(0,tt.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{className:nt},n)}class ot extends r.Component{componentDidCatch(e,t){throw this.props.onError(e,t)}render(){return this.props.children}}function it(e){let{width:t=30,height:n=30,className:a,...o}=e;return r.createElement("svg",(0,l.Z)({className:a,width:t,height:n,viewBox:"0 0 30 30","aria-hidden":"true"},o),r.createElement("path",{stroke:"currentColor",strokeLinecap:"round",strokeMiterlimit:"10",strokeWidth:"2",d:"M4 7h22M4 15h22M4 23h22"}))}function lt(){const{toggle:e,shown:t}=(0,N.e)();return r.createElement("button",{onClick:e,"aria-label":(0,u.I)({id:"theme.docs.sidebar.toggleSidebarButtonAriaLabel",message:"Toggle navigation bar",description:"The ARIA label for hamburger menu button of mobile navigation"}),"aria-expanded":t,className:"navbar__toggle clean-btn",type:"button"},r.createElement(it,null))}const st="colorModeToggle_DEke";function ut(e){let{items:t}=e;return r.createElement(r.Fragment,null,t.map(((e,t)=>r.createElement(ot,{key:t,onError:t=>new Error(`A theme navbar item failed to render.\nPlease double-check the following navbar item (themeConfig.navbar.items) of your Docusaurus config:\n${JSON.stringify(e,null,2)}`,{cause:t})},r.createElement(Ze,e)))))}function ct(e){let{left:t,right:n}=e;return r.createElement("div",{className:"navbar__inner"},r.createElement("div",{className:"navbar__items"},t),r.createElement("div",{className:"navbar__items navbar__items--right"},n))}function dt(){const e=(0,N.e)(),t=(0,w.L)().navbar.items,[n,a]=function(e){function t(e){return"left"===(e.position??"right")}return[e.filter(t),e.filter((e=>!t(e)))]}(t),o=t.find((e=>"search"===e.type));return r.createElement(ct,{left:r.createElement(r.Fragment,null,!e.disabled&&r.createElement(lt,null),r.createElement(Q,null),r.createElement(ut,{items:n})),right:r.createElement(r.Fragment,null,r.createElement(ut,{items:a}),r.createElement(K,{className:st}),!o&&r.createElement(ze,null,r.createElement(Fe,null)))})}function ft(){return r.createElement(et,null,r.createElement(dt,null))}function pt(e){let{item:t}=e;const{to:n,href:a,label:o,prependBaseUrlToHref:i,...s}=t,u=(0,te.Z)(n),c=(0,te.Z)(a,{forcePrependBaseUrl:!0});return r.createElement(ee.Z,(0,l.Z)({className:"footer__link-item"},a?{href:i?c:a}:{to:u},s),o,a&&!(0,ne.Z)(a)&&r.createElement(ae.Z,null))}function mt(e){let{item:t}=e;return t.html?r.createElement("li",{className:"footer__item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement("li",{key:t.href??t.to,className:"footer__item"},r.createElement(pt,{item:t}))}function ht(e){let{column:t}=e;return r.createElement("div",{className:"col footer__col"},r.createElement("div",{className:"footer__title"},t.title),r.createElement("ul",{className:"footer__items clean-list"},t.items.map(((e,t)=>r.createElement(mt,{key:t,item:e})))))}function gt(e){let{columns:t}=e;return r.createElement("div",{className:"row footer__links"},t.map(((e,t)=>r.createElement(ht,{key:t,column:e}))))}function bt(){return r.createElement("span",{className:"footer__link-separator"},"\xb7")}function vt(e){let{item:t}=e;return t.html?r.createElement("span",{className:"footer__link-item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement(pt,{item:t})}function yt(e){let{links:t}=e;return r.createElement("div",{className:"footer__links text--center"},r.createElement("div",{className:"footer__links"},t.map(((e,n)=>r.createElement(r.Fragment,{key:n},r.createElement(vt,{item:e}),t.length!==n+1&&r.createElement(bt,null))))))}function wt(e){let{links:t}=e;return function(e){return"title"in e[0]}(t)?r.createElement(gt,{columns:t}):r.createElement(yt,{links:t})}var kt=n(941);const St="footerLogoLink_BH7S";function Et(e){let{logo:t}=e;const{withBaseUrl:n}=(0,te.C)(),o={light:n(t.src),dark:n(t.srcDark??t.src)};return r.createElement(kt.Z,{className:(0,a.Z)("footer__logo",t.className),alt:t.alt,sources:o,width:t.width,height:t.height,style:t.style})}function xt(e){let{logo:t}=e;return t.href?r.createElement(ee.Z,{href:t.href,className:St,target:t.target},r.createElement(Et,{logo:t})):r.createElement(Et,{logo:t})}function Tt(e){let{copyright:t}=e;return r.createElement("div",{className:"footer__copyright",dangerouslySetInnerHTML:{__html:t}})}function Ct(e){let{style:t,links:n,logo:o,copyright:i}=e;return r.createElement("footer",{className:(0,a.Z)("footer",{"footer--dark":"dark"===t})},r.createElement("div",{className:"container container-fluid"},n,(o||i)&&r.createElement("div",{className:"footer__bottom text--center"},o&&r.createElement("div",{className:"margin-bottom--sm"},o),i)))}function _t(){const{footer:e}=(0,w.L)();if(!e)return null;const{copyright:t,links:n,logo:a,style:o}=e;return r.createElement(Ct,{style:o,links:n&&n.length>0&&r.createElement(wt,{links:n}),logo:a&&r.createElement(xt,{logo:a}),copyright:t&&r.createElement(Tt,{copyright:t})})}const At=r.memo(_t),Lt=(0,I.Qc)([U.S,k.pl,O.OC,qe.L5,i.VC,function(e){let{children:t}=e;return r.createElement(D.n2,null,r.createElement(N.M,null,r.createElement(B,null,t)))}]);function Rt(e){let{children:t}=e;return r.createElement(Lt,null,t)}function Pt(e){let{error:t,tryAgain:n}=e;return r.createElement("main",{className:"container margin-vert--xl"},r.createElement("div",{className:"row"},r.createElement("div",{className:"col col--6 col--offset-3"},r.createElement("h1",{className:"hero__title"},r.createElement(u.Z,{id:"theme.ErrorPageContent.title",description:"The title of the fallback page when the page crashed"},"This page crashed.")),r.createElement("div",{className:"margin-vert--lg"},r.createElement(rt,{onClick:n,className:"button button--primary shadow--lw"})),r.createElement("hr",null),r.createElement("div",{className:"margin-vert--md"},r.createElement(at,{error:t})))))}const Nt="mainWrapper_z2l0";function Ot(e){const{children:t,noFooter:n,wrapperClassName:l,title:s,description:u}=e;return(0,b.t)(),r.createElement(Rt,null,r.createElement(i.d,{title:s,description:u}),r.createElement(y,null),r.createElement(P,null),r.createElement(ft,null),r.createElement("div",{id:d,className:(0,a.Z)(g.k.wrapper.main,Nt,l)},r.createElement(o.Z,{fallback:e=>r.createElement(Pt,e)},t)),!n&&r.createElement(At,null))}},1327:(e,t,n)=>{"use strict";n.d(t,{Z:()=>d});var r=n(3117),a=n(7294),o=n(9960),i=n(4996),l=n(2263),s=n(6668),u=n(941);function c(e){let{logo:t,alt:n,imageClassName:r}=e;const o={light:(0,i.Z)(t.src),dark:(0,i.Z)(t.srcDark||t.src)},l=a.createElement(u.Z,{className:t.className,sources:o,height:t.height,width:t.width,alt:n,style:t.style});return r?a.createElement("div",{className:r},l):l}function d(e){const{siteConfig:{title:t}}=(0,l.Z)(),{navbar:{title:n,logo:u}}=(0,s.L)(),{imageClassName:d,titleClassName:f,...p}=e,m=(0,i.Z)(u?.href||"/"),h=n?"":t,g=u?.alt??h;return a.createElement(o.Z,(0,r.Z)({to:m},p,u?.target&&{target:u.target}),u&&a.createElement(c,{logo:u,alt:g,imageClassName:d}),null!=n&&a.createElement("b",{className:f},n))}},197:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(5742);function o(e){let{locale:t,version:n,tag:o}=e;const i=t;return r.createElement(a.Z,null,t&&r.createElement("meta",{name:"docusaurus_locale",content:t}),n&&r.createElement("meta",{name:"docusaurus_version",content:n}),o&&r.createElement("meta",{name:"docusaurus_tag",content:o}),i&&r.createElement("meta",{name:"docsearch:language",content:i}),n&&r.createElement("meta",{name:"docsearch:version",content:n}),o&&r.createElement("meta",{name:"docsearch:docusaurus_tag",content:o}))}},941:(e,t,n)=>{"use strict";n.d(t,{Z:()=>u});var r=n(3117),a=n(7294),o=n(6010),i=n(2389),l=n(2949);const s={themedImage:"themedImage_ToTc","themedImage--light":"themedImage--light_HNdA","themedImage--dark":"themedImage--dark_i4oU"};function u(e){const t=(0,i.Z)(),{colorMode:n}=(0,l.I)(),{sources:u,className:c,alt:d,...f}=e,p=t?"dark"===n?["dark"]:["light"]:["light","dark"];return a.createElement(a.Fragment,null,p.map((e=>a.createElement("img",(0,r.Z)({key:e,src:u[e],alt:d,className:(0,o.Z)(s.themedImage,s[`themedImage--${e}`],c)},f)))))}},6043:(e,t,n)=>{"use strict";n.d(t,{u:()=>l,z:()=>h});var r=n(3117),a=n(7294),o=n(412),i=n(1442);function l(e){let{initialState:t}=e;const[n,r]=(0,a.useState)(t??!1),o=(0,a.useCallback)((()=>{r((e=>!e))}),[]);return{collapsed:n,setCollapsed:r,toggleCollapsed:o}}const s={display:"none",overflow:"hidden",height:"0px"},u={display:"block",overflow:"visible",height:"auto"};function c(e,t){const n=t?s:u;e.style.display=n.display,e.style.overflow=n.overflow,e.style.height=n.height}function d(e){let{collapsibleRef:t,collapsed:n,animation:r}=e;const o=(0,a.useRef)(!1);(0,a.useEffect)((()=>{const e=t.current;function a(){const t=e.scrollHeight,n=r?.duration??function(e){if((0,i.n)())return 1;const t=e/36;return Math.round(10*(4+15*t**.25+t/5))}(t);return{transition:`height ${n}ms ${r?.easing??"ease-in-out"}`,height:`${t}px`}}function l(){const t=a();e.style.transition=t.transition,e.style.height=t.height}if(!o.current)return c(e,n),void(o.current=!0);return e.style.willChange="height",function(){const t=requestAnimationFrame((()=>{n?(l(),requestAnimationFrame((()=>{e.style.height=s.height,e.style.overflow=s.overflow}))):(e.style.display="block",requestAnimationFrame((()=>{l()})))}));return()=>cancelAnimationFrame(t)}()}),[t,n,r])}function f(e){if(!o.Z.canUseDOM)return e?s:u}function p(e){let{as:t="div",collapsed:n,children:r,animation:o,onCollapseTransitionEnd:i,className:l,disableSSRStyle:s}=e;const u=(0,a.useRef)(null);return d({collapsibleRef:u,collapsed:n,animation:o}),a.createElement(t,{ref:u,style:s?void 0:f(n),onTransitionEnd:e=>{"height"===e.propertyName&&(c(u.current,n),i?.(n))},className:l},r)}function m(e){let{collapsed:t,...n}=e;const[o,i]=(0,a.useState)(!t),[l,s]=(0,a.useState)(t);return(0,a.useLayoutEffect)((()=>{t||i(!0)}),[t]),(0,a.useLayoutEffect)((()=>{o&&s(t)}),[o,t]),o?a.createElement(p,(0,r.Z)({},n,{collapsed:l})):null}function h(e){let{lazy:t,...n}=e;const r=t?m:p;return a.createElement(r,n)}},9689:(e,t,n)=>{"use strict";n.d(t,{nT:()=>m,pl:()=>p});var r=n(7294),a=n(2389),o=n(12),i=n(902),l=n(6668);const s=(0,o.WA)("docusaurus.announcement.dismiss"),u=(0,o.WA)("docusaurus.announcement.id"),c=()=>"true"===s.get(),d=e=>s.set(String(e)),f=r.createContext(null);function p(e){let{children:t}=e;const n=function(){const{announcementBar:e}=(0,l.L)(),t=(0,a.Z)(),[n,o]=(0,r.useState)((()=>!!t&&c()));(0,r.useEffect)((()=>{o(c())}),[]);const i=(0,r.useCallback)((()=>{d(!0),o(!0)}),[]);return(0,r.useEffect)((()=>{if(!e)return;const{id:t}=e;let n=u.get();"annoucement-bar"===n&&(n="announcement-bar");const r=t!==n;u.set(t),r&&d(!1),!r&&c()||o(!1)}),[e]),(0,r.useMemo)((()=>({isActive:!!e&&!n,close:i})),[e,n,i])}();return r.createElement(f.Provider,{value:n},t)}function m(){const e=(0,r.useContext)(f);if(!e)throw new i.i6("AnnouncementBarProvider");return e}},2949:(e,t,n)=>{"use strict";n.d(t,{I:()=>g,S:()=>h});var r=n(7294),a=n(412),o=n(902),i=n(12),l=n(6668);const s=r.createContext(void 0),u="theme",c=(0,i.WA)(u),d="light",f="dark",p=e=>e===f?f:d;function m(){const{colorMode:{defaultMode:e,disableSwitch:t,respectPrefersColorScheme:n}}=(0,l.L)(),[o,i]=(0,r.useState)((e=>a.Z.canUseDOM?p(document.documentElement.getAttribute("data-theme")):p(e))(e));(0,r.useEffect)((()=>{t&&c.del()}),[t]);const s=(0,r.useCallback)((function(t,r){void 0===r&&(r={});const{persist:a=!0}=r;t?(i(t),a&&(e=>{c.set(p(e))})(t)):(i(n?window.matchMedia("(prefers-color-scheme: dark)").matches?f:d:e),c.del())}),[n,e]);(0,r.useEffect)((()=>{document.documentElement.setAttribute("data-theme",p(o))}),[o]),(0,r.useEffect)((()=>{if(t)return;const e=e=>{if(e.key!==u)return;const t=c.get();null!==t&&s(p(t))};return window.addEventListener("storage",e),()=>window.removeEventListener("storage",e)}),[t,s]);const m=(0,r.useRef)(!1);return(0,r.useEffect)((()=>{if(t&&!n)return;const e=window.matchMedia("(prefers-color-scheme: dark)"),r=()=>{window.matchMedia("print").matches||m.current?m.current=window.matchMedia("print").matches:s(null)};return e.addListener(r),()=>e.removeListener(r)}),[s,t,n]),(0,r.useMemo)((()=>({colorMode:o,setColorMode:s,get isDarkTheme(){return o===f},setLightTheme(){s(d)},setDarkTheme(){s(f)}})),[o,s])}function h(e){let{children:t}=e;const n=m();return r.createElement(s.Provider,{value:n},t)}function g(){const e=(0,r.useContext)(s);if(null==e)throw new o.i6("ColorModeProvider","Please see https://docusaurus.io/docs/api/themes/configuration#use-color-mode.");return e}},373:(e,t,n)=>{"use strict";n.d(t,{J:()=>y,L5:()=>b,Oh:()=>w});var r=n(7294),a=n(143),o=n(9935),i=n(6668),l=n(3438),s=n(902),u=n(12);const c=e=>`docs-preferred-version-${e}`,d=(e,t,n)=>{(0,u.WA)(c(e),{persistence:t}).set(n)},f=(e,t)=>(0,u.WA)(c(e),{persistence:t}).get(),p=(e,t)=>{(0,u.WA)(c(e),{persistence:t}).del()};const m=r.createContext(null);function h(){const e=(0,a._r)(),t=(0,i.L)().docs.versionPersistence,n=(0,r.useMemo)((()=>Object.keys(e)),[e]),[o,l]=(0,r.useState)((()=>(e=>Object.fromEntries(e.map((e=>[e,{preferredVersionName:null}]))))(n)));(0,r.useEffect)((()=>{l(function(e){let{pluginIds:t,versionPersistence:n,allDocsData:r}=e;function a(e){const t=f(e,n);return r[e].versions.some((e=>e.name===t))?{preferredVersionName:t}:(p(e,n),{preferredVersionName:null})}return Object.fromEntries(t.map((e=>[e,a(e)])))}({allDocsData:e,versionPersistence:t,pluginIds:n}))}),[e,t,n]);return[o,(0,r.useMemo)((()=>({savePreferredVersion:function(e,n){d(e,t,n),l((t=>({...t,[e]:{preferredVersionName:n}})))}})),[t])]}function g(e){let{children:t}=e;const n=h();return r.createElement(m.Provider,{value:n},t)}function b(e){let{children:t}=e;return l.cE?r.createElement(g,null,t):r.createElement(r.Fragment,null,t)}function v(){const e=(0,r.useContext)(m);if(!e)throw new s.i6("DocsPreferredVersionContextProvider");return e}function y(e){void 0===e&&(e=o.m);const t=(0,a.zh)(e),[n,i]=v(),{preferredVersionName:l}=n[e];return{preferredVersion:t.versions.find((e=>e.name===l))??null,savePreferredVersionName:(0,r.useCallback)((t=>{i.savePreferredVersion(e,t)}),[i,e])}}function w(){const e=(0,a._r)(),[t]=v();function n(n){const r=e[n],{preferredVersionName:a}=t[n];return r.versions.find((e=>e.name===a))??null}const r=Object.keys(e);return Object.fromEntries(r.map((e=>[e,n(e)])))}},1116:(e,t,n)=>{"use strict";n.d(t,{V:()=>s,b:()=>l});var r=n(7294),a=n(902);const o=Symbol("EmptyContext"),i=r.createContext(o);function l(e){let{children:t,name:n,items:a}=e;const o=(0,r.useMemo)((()=>n&&a?{name:n,items:a}:null),[n,a]);return r.createElement(i.Provider,{value:o},t)}function s(){const e=(0,r.useContext)(i);if(e===o)throw new a.i6("DocsSidebarProvider");return e}},3163:(e,t,n)=>{"use strict";n.d(t,{M:()=>d,e:()=>f});var r=n(7294),a=n(3102),o=n(7524),i=n(1980),l=n(6668),s=n(902);const u=r.createContext(void 0);function c(){const e=function(){const e=(0,a.HY)(),{items:t}=(0,l.L)().navbar;return 0===t.length&&!e.component}(),t=(0,o.i)(),n=!e&&"mobile"===t,[s,u]=(0,r.useState)(!1);(0,i.Rb)((()=>{if(s)return u(!1),!1}));const c=(0,r.useCallback)((()=>{u((e=>!e))}),[]);return(0,r.useEffect)((()=>{"desktop"===t&&u(!1)}),[t]),(0,r.useMemo)((()=>({disabled:e,shouldRender:n,toggle:c,shown:s})),[e,n,c,s])}function d(e){let{children:t}=e;const n=c();return r.createElement(u.Provider,{value:n},t)}function f(){const e=r.useContext(u);if(void 0===e)throw new s.i6("NavbarMobileSidebarProvider");return e}},3102:(e,t,n)=>{"use strict";n.d(t,{HY:()=>l,Zo:()=>s,n2:()=>i});var r=n(7294),a=n(902);const o=r.createContext(null);function i(e){let{children:t}=e;const n=(0,r.useState)({component:null,props:null});return r.createElement(o.Provider,{value:n},t)}function l(){const e=(0,r.useContext)(o);if(!e)throw new a.i6("NavbarSecondaryMenuContentProvider");return e[0]}function s(e){let{component:t,props:n}=e;const i=(0,r.useContext)(o);if(!i)throw new a.i6("NavbarSecondaryMenuContentProvider");const[,l]=i,s=(0,a.Ql)(n);return(0,r.useEffect)((()=>{l({component:t,props:s})}),[l,t,s]),(0,r.useEffect)((()=>()=>l({component:null,props:null})),[l]),null}},9727:(e,t,n)=>{"use strict";n.d(t,{h:()=>a,t:()=>o});var r=n(7294);const a="navigation-with-keyboard";function o(){(0,r.useEffect)((()=>{function e(e){"keydown"===e.type&&"Tab"===e.key&&document.body.classList.add(a),"mousedown"===e.type&&document.body.classList.remove(a)}return document.addEventListener("keydown",e),document.addEventListener("mousedown",e),()=>{document.body.classList.remove(a),document.removeEventListener("keydown",e),document.removeEventListener("mousedown",e)}}),[])}},6177:(e,t,n)=>{"use strict";n.d(t,{K:()=>i,M:()=>l});var r=n(7294),a=n(2263),o=n(1980);function i(){return(0,o.Nc)("q")}function l(){const{siteConfig:{baseUrl:e,themeConfig:t}}=(0,a.Z)(),{algolia:{searchPagePath:n}}=t;return(0,r.useCallback)((t=>`${e}${n}?q=${encodeURIComponent(t)}`),[e,n])}},7524:(e,t,n)=>{"use strict";n.d(t,{i:()=>u});var r=n(7294),a=n(412);const o="desktop",i="mobile",l="ssr";function s(){return a.Z.canUseDOM?window.innerWidth>996?o:i:l}function u(){const[e,t]=(0,r.useState)((()=>s()));return(0,r.useEffect)((()=>{function e(){t(s())}return window.addEventListener("resize",e),()=>{window.removeEventListener("resize",e),clearTimeout(undefined)}}),[]),e}},5281:(e,t,n)=>{"use strict";n.d(t,{k:()=>r});const r={page:{blogListPage:"blog-list-page",blogPostPage:"blog-post-page",blogTagsListPage:"blog-tags-list-page",blogTagPostListPage:"blog-tags-post-list-page",docsDocPage:"docs-doc-page",docsTagsListPage:"docs-tags-list-page",docsTagDocListPage:"docs-tags-doc-list-page",mdxPage:"mdx-page"},wrapper:{main:"main-wrapper",blogPages:"blog-wrapper",docsPages:"docs-wrapper",mdxPages:"mdx-wrapper"},common:{editThisPage:"theme-edit-this-page",lastUpdated:"theme-last-updated",backToTopButton:"theme-back-to-top-button",codeBlock:"theme-code-block",admonition:"theme-admonition",admonitionType:e=>`theme-admonition-${e}`},layout:{},docs:{docVersionBanner:"theme-doc-version-banner",docVersionBadge:"theme-doc-version-badge",docBreadcrumbs:"theme-doc-breadcrumbs",docMarkdown:"theme-doc-markdown",docTocMobile:"theme-doc-toc-mobile",docTocDesktop:"theme-doc-toc-desktop",docFooter:"theme-doc-footer",docFooterTagsRow:"theme-doc-footer-tags-row",docFooterEditMetaRow:"theme-doc-footer-edit-meta-row",docSidebarContainer:"theme-doc-sidebar-container",docSidebarMenu:"theme-doc-sidebar-menu",docSidebarItemCategory:"theme-doc-sidebar-item-category",docSidebarItemLink:"theme-doc-sidebar-item-link",docSidebarItemCategoryLevel:e=>`theme-doc-sidebar-item-category-level-${e}`,docSidebarItemLinkLevel:e=>`theme-doc-sidebar-item-link-level-${e}`},blog:{}}},1442:(e,t,n)=>{"use strict";function r(){return window.matchMedia("(prefers-reduced-motion: reduce)").matches}n.d(t,{n:()=>r})},3438:(e,t,n)=>{"use strict";n.d(t,{Wl:()=>f,_F:()=>m,cE:()=>d,hI:()=>w,lO:()=>b,oz:()=>v,s1:()=>g,vY:()=>y});var r=n(7294),a=n(6775),o=n(8790),i=n(143),l=n(373),s=n(1116),u=n(7392),c=n(8596);const d=!!i._r;function f(e){if(e.href)return e.href;for(const t of e.items){if("link"===t.type)return t.href;if("category"===t.type){const e=f(t);if(e)return e}}}const p=(e,t)=>void 0!==e&&(0,c.Mg)(e,t);function m(e,t){return"link"===e.type?p(e.href,t):"category"===e.type&&(p(e.href,t)||((e,t)=>e.some((e=>m(e,t))))(e.items,t))}function h(e){let{sidebarItems:t,pathname:n,onlyCategories:r=!1}=e;const a=[];return function e(t){for(const o of t)if("category"===o.type&&((0,c.Mg)(o.href,n)||e(o.items))||"link"===o.type&&(0,c.Mg)(o.href,n)){return r&&"category"!==o.type||a.unshift(o),!0}return!1}(t),a}function g(){const e=(0,s.V)(),{pathname:t}=(0,a.TH)(),n=(0,i.gA)()?.pluginData.breadcrumbs;return!1!==n&&e?h({sidebarItems:e.items,pathname:t}):null}function b(e){const{activeVersion:t}=(0,i.Iw)(e),{preferredVersion:n}=(0,l.J)(e),a=(0,i.yW)(e);return(0,r.useMemo)((()=>(0,u.j)([t,n,a].filter(Boolean))),[t,n,a])}function v(e,t){const n=b(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.sidebars?Object.entries(e.sidebars):[])),r=t.find((t=>t[0]===e));if(!r)throw new Error(`Can't find any sidebar with id "${e}" in version${n.length>1?"s":""} ${n.map((e=>e.name)).join(", ")}".\nAvailable sidebar ids are:\n- ${t.map((e=>e[0])).join("\n- ")}`);return r[1]}),[e,n])}function y(e,t){const n=b(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.docs)),r=t.find((t=>t.id===e));if(!r){if(n.flatMap((e=>e.draftIds)).includes(e))return null;throw new Error(`Couldn't find any doc with id "${e}" in version${n.length>1?"s":""} "${n.map((e=>e.name)).join(", ")}".\nAvailable doc ids are:\n- ${(0,u.j)(t.map((e=>e.id))).join("\n- ")}`)}return r}),[e,n])}function w(e){let{route:t,versionMetadata:n}=e;const r=(0,a.TH)(),i=t.routes,l=i.find((e=>(0,a.LX)(r.pathname,e)));if(!l)return null;const s=l.sidebar,u=s?n.docsSidebars[s]:void 0;return{docElement:(0,o.H)(i),sidebarName:s,sidebarItems:u}}},2128:(e,t,n)=>{"use strict";n.d(t,{p:()=>a});var r=n(2263);function a(e){const{siteConfig:t}=(0,r.Z)(),{title:n,titleDelimiter:a}=t;return e?.trim().length?`${e.trim()} ${a} ${n}`:n}},1980:(e,t,n)=>{"use strict";n.d(t,{Nc:()=>u,Rb:()=>l,_X:()=>s});var r=n(7294),a=n(6775),o=n(1688),i=n(902);function l(e){!function(e){const t=(0,a.k6)(),n=(0,i.zX)(e);(0,r.useEffect)((()=>t.block(((e,t)=>n(e,t)))),[t,n])}(((t,n)=>{if("POP"===n)return e(t,n)}))}function s(e){return function(e){const t=(0,a.k6)();return(0,o.useSyncExternalStore)(t.listen,(()=>e(t)),(()=>e(t)))}((t=>null===e?null:new URLSearchParams(t.location.search).get(e)))}function u(e){const t=s(e)??"",n=function(){const e=(0,a.k6)();return(0,r.useCallback)(((t,n,r)=>{const a=new URLSearchParams(e.location.search);n?a.set(t,n):a.delete(t),(r?.push?e.push:e.replace)({search:a.toString()})}),[e])}();return[t,(0,r.useCallback)(((t,r)=>{n(e,t,r)}),[n,e])]}},7392:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=(e,t)=>e===t),e.filter(((n,r)=>e.findIndex((e=>t(e,n)))!==r))}function a(e){return Array.from(new Set(e))}n.d(t,{j:()=>a,l:()=>r})},833:(e,t,n)=>{"use strict";n.d(t,{FG:()=>f,d:()=>c,VC:()=>p});var r=n(7294),a=n(6010),o=n(5742),i=n(226);function l(){const e=r.useContext(i._);if(!e)throw new Error("Unexpected: no Docusaurus route context found");return e}var s=n(4996),u=n(2128);function c(e){let{title:t,description:n,keywords:a,image:i,children:l}=e;const c=(0,u.p)(t),{withBaseUrl:d}=(0,s.C)(),f=i?d(i,{absolute:!0}):void 0;return r.createElement(o.Z,null,t&&r.createElement("title",null,c),t&&r.createElement("meta",{property:"og:title",content:c}),n&&r.createElement("meta",{name:"description",content:n}),n&&r.createElement("meta",{property:"og:description",content:n}),a&&r.createElement("meta",{name:"keywords",content:Array.isArray(a)?a.join(","):a}),f&&r.createElement("meta",{property:"og:image",content:f}),f&&r.createElement("meta",{name:"twitter:image",content:f}),l)}const d=r.createContext(void 0);function f(e){let{className:t,children:n}=e;const i=r.useContext(d),l=(0,a.Z)(i,t);return r.createElement(d.Provider,{value:l},r.createElement(o.Z,null,r.createElement("html",{className:l})),n)}function p(e){let{children:t}=e;const n=l(),o=`plugin-${n.plugin.name.replace(/docusaurus-(?:plugin|theme)-(?:content-)?/gi,"")}`;const i=`plugin-id-${n.plugin.id}`;return r.createElement(f,{className:(0,a.Z)(o,i)},t)}},902:(e,t,n)=>{"use strict";n.d(t,{D9:()=>i,Qc:()=>u,Ql:()=>s,i6:()=>l,zX:()=>o});var r=n(7294);const a=n(412).Z.canUseDOM?r.useLayoutEffect:r.useEffect;function o(e){const t=(0,r.useRef)(e);return a((()=>{t.current=e}),[e]),(0,r.useCallback)((function(){return t.current(...arguments)}),[])}function i(e){const t=(0,r.useRef)();return a((()=>{t.current=e})),t.current}class l extends Error{constructor(e,t){super(),this.name="ReactContextError",this.message=`Hook ${this.stack?.split("\n")[1]?.match(/at (?:\w+\.)?(?<name>\w+)/)?.groups.name??""} is called outside the <${e}>. ${t??""}`}}function s(e){const t=Object.entries(e);return t.sort(((e,t)=>e[0].localeCompare(t[0]))),(0,r.useMemo)((()=>e),t.flat())}function u(e){return t=>{let{children:n}=t;return r.createElement(r.Fragment,null,e.reduceRight(((e,t)=>r.createElement(t,null,e)),n))}}},8022:(e,t,n)=>{"use strict";function r(e,t){return void 0!==e&&void 0!==t&&new RegExp(e,"gi").test(t)}n.d(t,{F:()=>r})},8596:(e,t,n)=>{"use strict";n.d(t,{Mg:()=>i,Ns:()=>l});var r=n(7294),a=n(723),o=n(2263);function i(e,t){const n=e=>(!e||e.endsWith("/")?e:`${e}/`)?.toLowerCase();return n(e)===n(t)}function l(){const{baseUrl:e}=(0,o.Z)().siteConfig;return(0,r.useMemo)((()=>function(e){let{baseUrl:t,routes:n}=e;function r(e){return e.path===t&&!0===e.exact}function a(e){return e.path===t&&!e.exact}return function e(t){if(0===t.length)return;return t.find(r)||e(t.filter(a).flatMap((e=>e.routes??[])))}(n)}({routes:a.Z,baseUrl:e})),[e])}},2466:(e,t,n)=>{"use strict";n.d(t,{Ct:()=>p,OC:()=>s,RF:()=>d,o5:()=>f});var r=n(7294),a=n(412),o=n(2389),i=n(902);const l=r.createContext(void 0);function s(e){let{children:t}=e;const n=function(){const e=(0,r.useRef)(!0);return(0,r.useMemo)((()=>({scrollEventsEnabledRef:e,enableScrollEvents:()=>{e.current=!0},disableScrollEvents:()=>{e.current=!1}})),[])}();return r.createElement(l.Provider,{value:n},t)}function u(){const e=(0,r.useContext)(l);if(null==e)throw new i.i6("ScrollControllerProvider");return e}const c=()=>a.Z.canUseDOM?{scrollX:window.pageXOffset,scrollY:window.pageYOffset}:null;function d(e,t){void 0===t&&(t=[]);const{scrollEventsEnabledRef:n}=u(),a=(0,r.useRef)(c()),o=(0,i.zX)(e);(0,r.useEffect)((()=>{const e=()=>{if(!n.current)return;const e=c();o(e,a.current),a.current=e},t={passive:!0};return e(),window.addEventListener("scroll",e,t),()=>window.removeEventListener("scroll",e,t)}),[o,n,...t])}function f(){const e=u(),t=function(){const e=(0,r.useRef)({elem:null,top:0}),t=(0,r.useCallback)((t=>{e.current={elem:t,top:t.getBoundingClientRect().top}}),[]),n=(0,r.useCallback)((()=>{const{current:{elem:t,top:n}}=e;if(!t)return{restored:!1};const r=t.getBoundingClientRect().top-n;return r&&window.scrollBy({left:0,top:r}),e.current={elem:null,top:0},{restored:0!==r}}),[]);return(0,r.useMemo)((()=>({save:t,restore:n})),[n,t])}(),n=(0,r.useRef)(void 0),a=(0,r.useCallback)((r=>{t.save(r),e.disableScrollEvents(),n.current=()=>{const{restored:r}=t.restore();if(n.current=void 0,r){const t=()=>{e.enableScrollEvents(),window.removeEventListener("scroll",t)};window.addEventListener("scroll",t)}else e.enableScrollEvents()}}),[e,t]);return(0,r.useLayoutEffect)((()=>{queueMicrotask((()=>n.current?.()))})),{blockElementScrollPositionUntilNextRender:a}}function p(){const e=(0,r.useRef)(null),t=(0,o.Z)()&&"smooth"===getComputedStyle(document.documentElement).scrollBehavior;return{startScroll:n=>{e.current=t?function(e){return window.scrollTo({top:e,behavior:"smooth"}),()=>{}}(n):function(e){let t=null;const n=document.documentElement.scrollTop>e;return function r(){const a=document.documentElement.scrollTop;(n&&a>e||!n&&a<e)&&(t=requestAnimationFrame(r),window.scrollTo(0,Math.floor(.85*(a-e))+e))}(),()=>t&&cancelAnimationFrame(t)}(n)},cancelScroll:()=>e.current?.()}}},3320:(e,t,n)=>{"use strict";n.d(t,{HX:()=>i,_q:()=>s,os:()=>l});var r=n(143),a=n(2263),o=n(373);const i="default";function l(e,t){return`docs-${e}-${t}`}function s(){const{i18n:e}=(0,a.Z)(),t=(0,r._r)(),n=(0,r.WS)(),s=(0,o.Oh)();const u=[i,...Object.keys(t).map((function(e){const r=n?.activePlugin.pluginId===e?n.activeVersion:void 0,a=s[e],o=t[e].versions.find((e=>e.isLast));return l(e,(r??a??o).name)}))];return{locale:e.currentLocale,tags:u}}},12:(e,t,n)=>{"use strict";n.d(t,{Nk:()=>d,WA:()=>c});var r=n(7294),a=n(1688);const o="localStorage";function i(e){let{key:t,oldValue:n,newValue:r,storage:a}=e;if(n===r)return;const o=document.createEvent("StorageEvent");o.initStorageEvent("storage",!1,!1,t,n,r,window.location.href,a),window.dispatchEvent(o)}function l(e){if(void 0===e&&(e=o),"undefined"==typeof window)throw new Error("Browser storage is not available on Node.js/Docusaurus SSR process.");if("none"===e)return null;try{return window[e]}catch(n){return t=n,s||(console.warn("Docusaurus browser storage is not available.\nPossible reasons: running Docusaurus in an iframe, in an incognito browser session, or using too strict browser privacy settings.",t),s=!0),null}var t}let s=!1;const u={get:()=>null,set:()=>{},del:()=>{},listen:()=>()=>{}};function c(e,t){if("undefined"==typeof window)return function(e){function t(){throw new Error(`Illegal storage API usage for storage key "${e}".\nDocusaurus storage APIs are not supposed to be called on the server-rendering process.\nPlease only call storage APIs in effects and event handlers.`)}return{get:t,set:t,del:t,listen:t}}(e);const n=l(t?.persistence);return null===n?u:{get:()=>{try{return n.getItem(e)}catch(t){return console.error(`Docusaurus storage error, can't get key=${e}`,t),null}},set:t=>{try{const r=n.getItem(e);n.setItem(e,t),i({key:e,oldValue:r,newValue:t,storage:n})}catch(r){console.error(`Docusaurus storage error, can't set ${e}=${t}`,r)}},del:()=>{try{const t=n.getItem(e);n.removeItem(e),i({key:e,oldValue:t,newValue:null,storage:n})}catch(t){console.error(`Docusaurus storage error, can't delete key=${e}`,t)}},listen:t=>{try{const r=r=>{r.storageArea===n&&r.key===e&&t(r)};return window.addEventListener("storage",r),()=>window.removeEventListener("storage",r)}catch(r){return console.error(`Docusaurus storage error, can't listen for changes of key=${e}`,r),()=>{}}}}}function d(e,t){const n=(0,r.useRef)((()=>null===e?u:c(e,t))).current(),o=(0,r.useCallback)((e=>"undefined"==typeof window?()=>{}:n.listen(e)),[n]);return[(0,a.useSyncExternalStore)(o,(()=>"undefined"==typeof window?null:n.get()),(()=>null)),n]}},4711:(e,t,n)=>{"use strict";n.d(t,{l:()=>o});var r=n(2263),a=n(6775);function o(){const{siteConfig:{baseUrl:e,url:t},i18n:{defaultLocale:n,currentLocale:o}}=(0,r.Z)(),{pathname:i}=(0,a.TH)(),l=o===n?e:e.replace(`/${o}/`,"/"),s=i.replace(e,"");return{createUrl:function(e){let{locale:r,fullyQualified:a}=e;return`${a?t:""}${function(e){return e===n?`${l}`:`${l}${e}/`}(r)}${s}`}}}},5936:(e,t,n)=>{"use strict";n.d(t,{S:()=>i});var r=n(7294),a=n(6775),o=n(902);function i(e){const t=(0,a.TH)(),n=(0,o.D9)(t),i=(0,o.zX)(e);(0,r.useEffect)((()=>{n&&t!==n&&i({location:t,previousLocation:n})}),[i,t,n])}},6668:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){return(0,r.Z)().siteConfig.themeConfig}},6278:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){const{siteConfig:{themeConfig:e}}=(0,r.Z)();return e}},239:(e,t,n)=>{"use strict";n.d(t,{l:()=>l});var r=n(7294),a=n(8022),o=n(4996),i=n(6278);function l(){const{withBaseUrl:e}=(0,o.C)(),{algolia:{externalUrlRegex:t,replaceSearchResultPathname:n}}=(0,i.L)();return(0,r.useCallback)((r=>{const o=new URL(r);if((0,a.F)(t,o.href))return r;const i=`${o.pathname+o.hash}`;return e(function(e,t){return t?e.replaceAll(new RegExp(t.from,"g"),t.to):e}(i,n))}),[e,t,n])}},8802:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){const{trailingSlash:n,baseUrl:r}=t;if(e.startsWith("#"))return e;if(void 0===n)return e;const[a]=e.split(/[#?]/),o="/"===a||a===r?a:(i=a,n?function(e){return e.endsWith("/")?e:`${e}/`}(i):function(e){return e.endsWith("/")?e.slice(0,-1):e}(i));var i;return e.replace(a,o)}},4143:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=void 0,t.getErrorCausalChain=function e(t){return t.cause?[t,...e(t.cause)]:[t]}},8780:function(e,t,n){"use strict";var r=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=t.applyTrailingSlash=t.blogPostContainerID=void 0,t.blogPostContainerID="__blog-post-container";var a=n(8802);Object.defineProperty(t,"applyTrailingSlash",{enumerable:!0,get:function(){return r(a).default}});var o=n(4143);Object.defineProperty(t,"getErrorCausalChain",{enumerable:!0,get:function(){return o.getErrorCausalChain}})},6010:(e,t,n)=>{"use strict";function r(e){var t,n,a="";if("string"==typeof e||"number"==typeof e)a+=e;else if("object"==typeof e)if(Array.isArray(e))for(t=0;t<e.length;t++)e[t]&&(n=r(e[t]))&&(a&&(a+=" "),a+=n);else for(t in e)e[t]&&(a&&(a+=" "),a+=t);return a}n.d(t,{Z:()=>a});const a=function(){for(var e,t,n=0,a="";n<arguments.length;)(e=arguments[n++])&&(t=r(e))&&(a&&(a+=" "),a+=t);return a}},9318:(e,t,n)=>{"use strict";n.d(t,{lX:()=>w,q_:()=>C,ob:()=>p,PP:()=>A,Ep:()=>f});var r=n(3117);function a(e){return"/"===e.charAt(0)}function o(e,t){for(var n=t,r=n+1,a=e.length;r<a;n+=1,r+=1)e[n]=e[r];e.pop()}const i=function(e,t){void 0===t&&(t="");var n,r=e&&e.split("/")||[],i=t&&t.split("/")||[],l=e&&a(e),s=t&&a(t),u=l||s;if(e&&a(e)?i=r:r.length&&(i.pop(),i=i.concat(r)),!i.length)return"/";if(i.length){var c=i[i.length-1];n="."===c||".."===c||""===c}else n=!1;for(var d=0,f=i.length;f>=0;f--){var p=i[f];"."===p?o(i,f):".."===p?(o(i,f),d++):d&&(o(i,f),d--)}if(!u)for(;d--;d)i.unshift("..");!u||""===i[0]||i[0]&&a(i[0])||i.unshift("");var m=i.join("/");return n&&"/"!==m.substr(-1)&&(m+="/"),m};var l=n(2177);function s(e){return"/"===e.charAt(0)?e:"/"+e}function u(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return 0===e.toLowerCase().indexOf(t.toLowerCase())&&-1!=="/?#".indexOf(e.charAt(t.length))}(e,t)?e.substr(t.length):e}function d(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,a=t||"/";return n&&"?"!==n&&(a+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(a+="#"===r.charAt(0)?r:"#"+r),a}function p(e,t,n,a){var o;"string"==typeof e?(o=function(e){var t=e||"/",n="",r="",a=t.indexOf("#");-1!==a&&(r=t.substr(a),t=t.substr(0,a));var o=t.indexOf("?");return-1!==o&&(n=t.substr(o),t=t.substr(0,o)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),o.state=t):(void 0===(o=(0,r.Z)({},e)).pathname&&(o.pathname=""),o.search?"?"!==o.search.charAt(0)&&(o.search="?"+o.search):o.search="",o.hash?"#"!==o.hash.charAt(0)&&(o.hash="#"+o.hash):o.hash="",void 0!==t&&void 0===o.state&&(o.state=t));try{o.pathname=decodeURI(o.pathname)}catch(l){throw l instanceof URIError?new URIError('Pathname "'+o.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):l}return n&&(o.key=n),a?o.pathname?"/"!==o.pathname.charAt(0)&&(o.pathname=i(o.pathname,a.pathname)):o.pathname=a.pathname:o.pathname||(o.pathname="/"),o}function m(){var e=null;var t=[];return{setPrompt:function(t){return e=t,function(){e===t&&(e=null)}},confirmTransitionTo:function(t,n,r,a){if(null!=e){var o="function"==typeof e?e(t,n):e;"string"==typeof o?"function"==typeof r?r(o,a):a(!0):a(!1!==o)}else a(!0)},appendListener:function(e){var n=!0;function r(){n&&e.apply(void 0,arguments)}return t.push(r),function(){n=!1,t=t.filter((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];t.forEach((function(e){return e.apply(void 0,n)}))}}}var h=!("undefined"==typeof window||!window.document||!window.document.createElement);function g(e,t){t(window.confirm(e))}var b="popstate",v="hashchange";function y(){try{return window.history.state||{}}catch(e){return{}}}function w(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t,n=window.history,a=(-1===(t=window.navigator.userAgent).indexOf("Android 2.")&&-1===t.indexOf("Android 4.0")||-1===t.indexOf("Mobile Safari")||-1!==t.indexOf("Chrome")||-1!==t.indexOf("Windows Phone"))&&window.history&&"pushState"in window.history,o=!(-1===window.navigator.userAgent.indexOf("Trident")),i=e,u=i.forceRefresh,w=void 0!==u&&u,k=i.getUserConfirmation,S=void 0===k?g:k,E=i.keyLength,x=void 0===E?6:E,T=e.basename?d(s(e.basename)):"";function C(e){var t=e||{},n=t.key,r=t.state,a=window.location,o=a.pathname+a.search+a.hash;return T&&(o=c(o,T)),p(o,r,n)}function _(){return Math.random().toString(36).substr(2,x)}var A=m();function L(e){(0,r.Z)(U,e),U.length=n.length,A.notifyListeners(U.location,U.action)}function R(e){(function(e){return void 0===e.state&&-1===navigator.userAgent.indexOf("CriOS")})(e)||O(C(e.state))}function P(){O(C(y()))}var N=!1;function O(e){if(N)N=!1,L();else{A.confirmTransitionTo(e,"POP",S,(function(t){t?L({action:"POP",location:e}):function(e){var t=U.location,n=D.indexOf(t.key);-1===n&&(n=0);var r=D.indexOf(e.key);-1===r&&(r=0);var a=n-r;a&&(N=!0,B(a))}(e)}))}}var I=C(y()),D=[I.key];function M(e){return T+f(e)}function B(e){n.go(e)}var F=0;function j(e){1===(F+=e)&&1===e?(window.addEventListener(b,R),o&&window.addEventListener(v,P)):0===F&&(window.removeEventListener(b,R),o&&window.removeEventListener(v,P))}var z=!1;var U={length:n.length,action:"POP",location:I,createHref:M,push:function(e,t){var r="PUSH",o=p(e,t,_(),U.location);A.confirmTransitionTo(o,r,S,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.pushState({key:i,state:l},null,t),w)window.location.href=t;else{var s=D.indexOf(U.location.key),u=D.slice(0,s+1);u.push(o.key),D=u,L({action:r,location:o})}else window.location.href=t}}))},replace:function(e,t){var r="REPLACE",o=p(e,t,_(),U.location);A.confirmTransitionTo(o,r,S,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.replaceState({key:i,state:l},null,t),w)window.location.replace(t);else{var s=D.indexOf(U.location.key);-1!==s&&(D[s]=o.key),L({action:r,location:o})}else window.location.replace(t)}}))},go:B,goBack:function(){B(-1)},goForward:function(){B(1)},block:function(e){void 0===e&&(e=!1);var t=A.setPrompt(e);return z||(j(1),z=!0),function(){return z&&(z=!1,j(-1)),t()}},listen:function(e){var t=A.appendListener(e);return j(1),function(){j(-1),t()}}};return U}var k="hashchange",S={hashbang:{encodePath:function(e){return"!"===e.charAt(0)?e:"!/"+u(e)},decodePath:function(e){return"!"===e.charAt(0)?e.substr(1):e}},noslash:{encodePath:u,decodePath:s},slash:{encodePath:s,decodePath:s}};function E(e){var t=e.indexOf("#");return-1===t?e:e.slice(0,t)}function x(){var e=window.location.href,t=e.indexOf("#");return-1===t?"":e.substring(t+1)}function T(e){window.location.replace(E(window.location.href)+"#"+e)}function C(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t=window.history,n=(window.navigator.userAgent.indexOf("Firefox"),e),a=n.getUserConfirmation,o=void 0===a?g:a,i=n.hashType,u=void 0===i?"slash":i,b=e.basename?d(s(e.basename)):"",v=S[u],y=v.encodePath,w=v.decodePath;function C(){var e=w(x());return b&&(e=c(e,b)),p(e)}var _=m();function A(e){(0,r.Z)(z,e),z.length=t.length,_.notifyListeners(z.location,z.action)}var L=!1,R=null;function P(){var e,t,n=x(),r=y(n);if(n!==r)T(r);else{var a=C(),i=z.location;if(!L&&(t=a,(e=i).pathname===t.pathname&&e.search===t.search&&e.hash===t.hash))return;if(R===f(a))return;R=null,function(e){if(L)L=!1,A();else{var t="POP";_.confirmTransitionTo(e,t,o,(function(n){n?A({action:t,location:e}):function(e){var t=z.location,n=D.lastIndexOf(f(t));-1===n&&(n=0);var r=D.lastIndexOf(f(e));-1===r&&(r=0);var a=n-r;a&&(L=!0,M(a))}(e)}))}}(a)}}var N=x(),O=y(N);N!==O&&T(O);var I=C(),D=[f(I)];function M(e){t.go(e)}var B=0;function F(e){1===(B+=e)&&1===e?window.addEventListener(k,P):0===B&&window.removeEventListener(k,P)}var j=!1;var z={length:t.length,action:"POP",location:I,createHref:function(e){var t=document.querySelector("base"),n="";return t&&t.getAttribute("href")&&(n=E(window.location.href)),n+"#"+y(b+f(e))},push:function(e,t){var n="PUSH",r=p(e,void 0,void 0,z.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(b+t);if(x()!==a){R=t,function(e){window.location.hash=e}(a);var o=D.lastIndexOf(f(z.location)),i=D.slice(0,o+1);i.push(t),D=i,A({action:n,location:r})}else A()}}))},replace:function(e,t){var n="REPLACE",r=p(e,void 0,void 0,z.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(b+t);x()!==a&&(R=t,T(a));var o=D.indexOf(f(z.location));-1!==o&&(D[o]=t),A({action:n,location:r})}}))},go:M,goBack:function(){M(-1)},goForward:function(){M(1)},block:function(e){void 0===e&&(e=!1);var t=_.setPrompt(e);return j||(F(1),j=!0),function(){return j&&(j=!1,F(-1)),t()}},listen:function(e){var t=_.appendListener(e);return F(1),function(){F(-1),t()}}};return z}function _(e,t,n){return Math.min(Math.max(e,t),n)}function A(e){void 0===e&&(e={});var t=e,n=t.getUserConfirmation,a=t.initialEntries,o=void 0===a?["/"]:a,i=t.initialIndex,l=void 0===i?0:i,s=t.keyLength,u=void 0===s?6:s,c=m();function d(e){(0,r.Z)(w,e),w.length=w.entries.length,c.notifyListeners(w.location,w.action)}function h(){return Math.random().toString(36).substr(2,u)}var g=_(l,0,o.length-1),b=o.map((function(e){return p(e,void 0,"string"==typeof e?h():e.key||h())})),v=f;function y(e){var t=_(w.index+e,0,w.entries.length-1),r=w.entries[t];c.confirmTransitionTo(r,"POP",n,(function(e){e?d({action:"POP",location:r,index:t}):d()}))}var w={length:b.length,action:"POP",location:b[g],index:g,entries:b,createHref:v,push:function(e,t){var r="PUSH",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){if(e){var t=w.index+1,n=w.entries.slice(0);n.length>t?n.splice(t,n.length-t,a):n.push(a),d({action:r,location:a,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){e&&(w.entries[w.index]=a,d({action:r,location:a}))}))},go:y,goBack:function(){y(-1)},goForward:function(){y(1)},canGo:function(e){var t=w.index+e;return t>=0&&t<w.entries.length},block:function(e){return void 0===e&&(e=!1),c.setPrompt(e)},listen:function(e){return c.appendListener(e)}};return w}},8679:(e,t,n)=>{"use strict";var r=n(9864),a={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?i:l[e.$$typeof]||a}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var u=Object.defineProperty,c=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,m=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(m){var a=p(n);a&&a!==m&&e(t,a,r)}var i=c(n);d&&(i=i.concat(d(n)));for(var l=s(t),h=s(n),g=0;g<i.length;++g){var b=i[g];if(!(o[b]||r&&r[b]||h&&h[b]||l&&l[b])){var v=f(n,b);try{u(t,b,v)}catch(y){}}}}return t}},1143:e=>{"use strict";e.exports=function(e,t,n,r,a,o,i,l){if(!e){var s;if(void 0===t)s=new Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,a,o,i,l],c=0;(s=new Error(t.replace(/%s/g,(function(){return u[c++]})))).name="Invariant Violation"}throw s.framesToPop=1,s}}},5826:e=>{e.exports=Array.isArray||function(e){return"[object Array]"==Object.prototype.toString.call(e)}},2497:(e,t,n)=>{"use strict";n.r(t)},2295:(e,t,n)=>{"use strict";n.r(t)},4865:function(e,t,n){var r,a;r=function(){var e,t,n={version:"0.2.0"},r=n.settings={minimum:.08,easing:"ease",positionUsing:"",speed:200,trickle:!0,trickleRate:.02,trickleSpeed:800,showSpinner:!0,barSelector:'[role="bar"]',spinnerSelector:'[role="spinner"]',parent:"body",template:'<div class="bar" role="bar"><div class="peg"></div></div><div class="spinner" role="spinner"><div class="spinner-icon"></div></div>'};function a(e,t,n){return e<t?t:e>n?n:e}function o(e){return 100*(-1+e)}function i(e,t,n){var a;return(a="translate3d"===r.positionUsing?{transform:"translate3d("+o(e)+"%,0,0)"}:"translate"===r.positionUsing?{transform:"translate("+o(e)+"%,0)"}:{"margin-left":o(e)+"%"}).transition="all "+t+"ms "+n,a}n.configure=function(e){var t,n;for(t in e)void 0!==(n=e[t])&&e.hasOwnProperty(t)&&(r[t]=n);return this},n.status=null,n.set=function(e){var t=n.isStarted();e=a(e,r.minimum,1),n.status=1===e?null:e;var o=n.render(!t),u=o.querySelector(r.barSelector),c=r.speed,d=r.easing;return o.offsetWidth,l((function(t){""===r.positionUsing&&(r.positionUsing=n.getPositioningCSS()),s(u,i(e,c,d)),1===e?(s(o,{transition:"none",opacity:1}),o.offsetWidth,setTimeout((function(){s(o,{transition:"all "+c+"ms linear",opacity:0}),setTimeout((function(){n.remove(),t()}),c)}),c)):setTimeout(t,c)})),this},n.isStarted=function(){return"number"==typeof n.status},n.start=function(){n.status||n.set(0);var e=function(){setTimeout((function(){n.status&&(n.trickle(),e())}),r.trickleSpeed)};return r.trickle&&e(),this},n.done=function(e){return e||n.status?n.inc(.3+.5*Math.random()).set(1):this},n.inc=function(e){var t=n.status;return t?("number"!=typeof e&&(e=(1-t)*a(Math.random()*t,.1,.95)),t=a(t+e,0,.994),n.set(t)):n.start()},n.trickle=function(){return n.inc(Math.random()*r.trickleRate)},e=0,t=0,n.promise=function(r){return r&&"resolved"!==r.state()?(0===t&&n.start(),e++,t++,r.always((function(){0==--t?(e=0,n.done()):n.set((e-t)/e)})),this):this},n.render=function(e){if(n.isRendered())return document.getElementById("nprogress");c(document.documentElement,"nprogress-busy");var t=document.createElement("div");t.id="nprogress",t.innerHTML=r.template;var a,i=t.querySelector(r.barSelector),l=e?"-100":o(n.status||0),u=document.querySelector(r.parent);return s(i,{transition:"all 0 linear",transform:"translate3d("+l+"%,0,0)"}),r.showSpinner||(a=t.querySelector(r.spinnerSelector))&&p(a),u!=document.body&&c(u,"nprogress-custom-parent"),u.appendChild(t),t},n.remove=function(){d(document.documentElement,"nprogress-busy"),d(document.querySelector(r.parent),"nprogress-custom-parent");var e=document.getElementById("nprogress");e&&p(e)},n.isRendered=function(){return!!document.getElementById("nprogress")},n.getPositioningCSS=function(){var e=document.body.style,t="WebkitTransform"in e?"Webkit":"MozTransform"in e?"Moz":"msTransform"in e?"ms":"OTransform"in e?"O":"";return t+"Perspective"in e?"translate3d":t+"Transform"in e?"translate":"margin"};var l=function(){var e=[];function t(){var n=e.shift();n&&n(t)}return function(n){e.push(n),1==e.length&&t()}}(),s=function(){var e=["Webkit","O","Moz","ms"],t={};function n(e){return e.replace(/^-ms-/,"ms-").replace(/-([\da-z])/gi,(function(e,t){return t.toUpperCase()}))}function r(t){var n=document.body.style;if(t in n)return t;for(var r,a=e.length,o=t.charAt(0).toUpperCase()+t.slice(1);a--;)if((r=e[a]+o)in n)return r;return t}function a(e){return e=n(e),t[e]||(t[e]=r(e))}function o(e,t,n){t=a(t),e.style[t]=n}return function(e,t){var n,r,a=arguments;if(2==a.length)for(n in t)void 0!==(r=t[n])&&t.hasOwnProperty(n)&&o(e,n,r);else o(e,a[1],a[2])}}();function u(e,t){return("string"==typeof e?e:f(e)).indexOf(" "+t+" ")>=0}function c(e,t){var n=f(e),r=n+t;u(n,t)||(e.className=r.substring(1))}function d(e,t){var n,r=f(e);u(e,t)&&(n=r.replace(" "+t+" "," "),e.className=n.substring(1,n.length-1))}function f(e){return(" "+(e.className||"")+" ").replace(/\s+/gi," ")}function p(e){e&&e.parentNode&&e.parentNode.removeChild(e)}return n},void 0===(a="function"==typeof r?r.call(t,n,t,e):r)||(e.exports=a)},7418:e=>{"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;function a(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(a){return!1}}()?Object.assign:function(e,o){for(var i,l,s=a(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(s[c]=i[c]);if(t){l=t(i);for(var d=0;d<l.length;d++)r.call(i,l[d])&&(s[l[d]]=i[l[d]])}}return s}},7410:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=function(){var e=/(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i,t=0,n={},r={util:{encode:function e(t){return t instanceof a?new a(t.type,e(t.content),t.alias):Array.isArray(t)?t.map(e):t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/\u00a0/g," ")},type:function(e){return Object.prototype.toString.call(e).slice(8,-1)},objId:function(e){return e.__id||Object.defineProperty(e,"__id",{value:++t}),e.__id},clone:function e(t,n){var a,o;switch(n=n||{},r.util.type(t)){case"Object":if(o=r.util.objId(t),n[o])return n[o];for(var i in a={},n[o]=a,t)t.hasOwnProperty(i)&&(a[i]=e(t[i],n));return a;case"Array":return o=r.util.objId(t),n[o]?n[o]:(a=[],n[o]=a,t.forEach((function(t,r){a[r]=e(t,n)})),a);default:return t}},getLanguage:function(t){for(;t;){var n=e.exec(t.className);if(n)return n[1].toLowerCase();t=t.parentElement}return"none"},setLanguage:function(t,n){t.className=t.className.replace(RegExp(e,"gi"),""),t.classList.add("language-"+n)},isActive:function(e,t,n){for(var r="no-"+t;e;){var a=e.classList;if(a.contains(t))return!0;if(a.contains(r))return!1;e=e.parentElement}return!!n}},languages:{plain:n,plaintext:n,text:n,txt:n,extend:function(e,t){var n=r.util.clone(r.languages[e]);for(var a in t)n[a]=t[a];return n},insertBefore:function(e,t,n,a){var o=(a=a||r.languages)[e],i={};for(var l in o)if(o.hasOwnProperty(l)){if(l==t)for(var s in n)n.hasOwnProperty(s)&&(i[s]=n[s]);n.hasOwnProperty(l)||(i[l]=o[l])}var u=a[e];return a[e]=i,r.languages.DFS(r.languages,(function(t,n){n===u&&t!=e&&(this[t]=i)})),i},DFS:function e(t,n,a,o){o=o||{};var i=r.util.objId;for(var l in t)if(t.hasOwnProperty(l)){n.call(t,l,t[l],a||l);var s=t[l],u=r.util.type(s);"Object"!==u||o[i(s)]?"Array"!==u||o[i(s)]||(o[i(s)]=!0,e(s,n,l,o)):(o[i(s)]=!0,e(s,n,null,o))}}},plugins:{},highlight:function(e,t,n){var o={code:e,grammar:t,language:n};return r.hooks.run("before-tokenize",o),o.tokens=r.tokenize(o.code,o.grammar),r.hooks.run("after-tokenize",o),a.stringify(r.util.encode(o.tokens),o.language)},tokenize:function(e,t){var n=t.rest;if(n){for(var r in n)t[r]=n[r];delete t.rest}var a=new l;return s(a,a.head,e),i(e,a,t,a.head,0),function(e){var t=[],n=e.head.next;for(;n!==e.tail;)t.push(n.value),n=n.next;return t}(a)},hooks:{all:{},add:function(e,t){var n=r.hooks.all;n[e]=n[e]||[],n[e].push(t)},run:function(e,t){var n=r.hooks.all[e];if(n&&n.length)for(var a,o=0;a=n[o++];)a(t)}},Token:a};function a(e,t,n,r){this.type=e,this.content=t,this.alias=n,this.length=0|(r||"").length}function o(e,t,n,r){e.lastIndex=t;var a=e.exec(n);if(a&&r&&a[1]){var o=a[1].length;a.index+=o,a[0]=a[0].slice(o)}return a}function i(e,t,n,l,c,d){for(var f in n)if(n.hasOwnProperty(f)&&n[f]){var p=n[f];p=Array.isArray(p)?p:[p];for(var m=0;m<p.length;++m){if(d&&d.cause==f+","+m)return;var h=p[m],g=h.inside,b=!!h.lookbehind,v=!!h.greedy,y=h.alias;if(v&&!h.pattern.global){var w=h.pattern.toString().match(/[imsuy]*$/)[0];h.pattern=RegExp(h.pattern.source,w+"g")}for(var k=h.pattern||h,S=l.next,E=c;S!==t.tail&&!(d&&E>=d.reach);E+=S.value.length,S=S.next){var x=S.value;if(t.length>e.length)return;if(!(x instanceof a)){var T,C=1;if(v){if(!(T=o(k,E,e,b))||T.index>=e.length)break;var _=T.index,A=T.index+T[0].length,L=E;for(L+=S.value.length;_>=L;)L+=(S=S.next).value.length;if(E=L-=S.value.length,S.value instanceof a)continue;for(var R=S;R!==t.tail&&(L<A||"string"==typeof R.value);R=R.next)C++,L+=R.value.length;C--,x=e.slice(E,L),T.index-=E}else if(!(T=o(k,0,x,b)))continue;_=T.index;var P=T[0],N=x.slice(0,_),O=x.slice(_+P.length),I=E+x.length;d&&I>d.reach&&(d.reach=I);var D=S.prev;if(N&&(D=s(t,D,N),E+=N.length),u(t,D,C),S=s(t,D,new a(f,g?r.tokenize(P,g):P,y,P)),O&&s(t,S,O),C>1){var M={cause:f+","+m,reach:I};i(e,t,n,S.prev,E,M),d&&M.reach>d.reach&&(d.reach=M.reach)}}}}}}function l(){var e={value:null,prev:null,next:null},t={value:null,prev:e,next:null};e.next=t,this.head=e,this.tail=t,this.length=0}function s(e,t,n){var r=t.next,a={value:n,prev:t,next:r};return t.next=a,r.prev=a,e.length++,a}function u(e,t,n){for(var r=t.next,a=0;a<n&&r!==e.tail;a++)r=r.next;t.next=r,r.prev=t,e.length-=a}return a.stringify=function e(t,n){if("string"==typeof t)return t;if(Array.isArray(t)){var a="";return t.forEach((function(t){a+=e(t,n)})),a}var o={type:t.type,content:e(t.content,n),tag:"span",classes:["token",t.type],attributes:{},language:n},i=t.alias;i&&(Array.isArray(i)?Array.prototype.push.apply(o.classes,i):o.classes.push(i)),r.hooks.run("wrap",o);var l="";for(var s in o.attributes)l+=" "+s+'="'+(o.attributes[s]||"").replace(/"/g,"&quot;")+'"';return"<"+o.tag+' class="'+o.classes.join(" ")+'"'+l+">"+o.content+"</"+o.tag+">"},r}(),a=r;r.default=r,a.languages.markup={comment:{pattern:/<!--(?:(?!<!--)[\s\S])*?-->/,greedy:!0},prolog:{pattern:/<\?[\s\S]+?\?>/,greedy:!0},doctype:{pattern:/<!DOCTYPE(?:[^>"'[\]]|"[^"]*"|'[^']*')+(?:\[(?:[^<"'\]]|"[^"]*"|'[^']*'|<(?!!--)|<!--(?:[^-]|-(?!->))*-->)*\]\s*)?>/i,greedy:!0,inside:{"internal-subset":{pattern:/(^[^\[]*\[)[\s\S]+(?=\]>$)/,lookbehind:!0,greedy:!0,inside:null},string:{pattern:/"[^"]*"|'[^']*'/,greedy:!0},punctuation:/^<!|>$|[[\]]/,"doctype-tag":/^DOCTYPE/i,name:/[^\s<>'"]+/}},cdata:{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,greedy:!0},tag:{pattern:/<\/?(?!\d)[^\s>\/=$<%]+(?:\s(?:\s*[^\s>\/=]+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))|(?=[\s/>])))+)?\s*\/?>/,greedy:!0,inside:{tag:{pattern:/^<\/?[^\s>\/]+/,inside:{punctuation:/^<\/?/,namespace:/^[^\s>\/:]+:/}},"special-attr":[],"attr-value":{pattern:/=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+)/,inside:{punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}},punctuation:/\/?>/,"attr-name":{pattern:/[^\s>\/]+/,inside:{namespace:/^[^\s>\/:]+:/}}}},entity:[{pattern:/&[\da-z]{1,8};/i,alias:"named-entity"},/&#x?[\da-f]{1,8};/i]},a.languages.markup.tag.inside["attr-value"].inside.entity=a.languages.markup.entity,a.languages.markup.doctype.inside["internal-subset"].inside=a.languages.markup,a.hooks.add("wrap",(function(e){"entity"===e.type&&(e.attributes.title=e.content.replace(/&amp;/,"&"))})),Object.defineProperty(a.languages.markup.tag,"addInlined",{value:function(e,t){var n={};n["language-"+t]={pattern:/(^<!\[CDATA\[)[\s\S]+?(?=\]\]>$)/i,lookbehind:!0,inside:a.languages[t]},n.cdata=/^<!\[CDATA\[|\]\]>$/i;var r={"included-cdata":{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,inside:n}};r["language-"+t]={pattern:/[\s\S]+/,inside:a.languages[t]};var o={};o[e]={pattern:RegExp(/(<__[^>]*>)(?:<!\[CDATA\[(?:[^\]]|\](?!\]>))*\]\]>|(?!<!\[CDATA\[)[\s\S])*?(?=<\/__>)/.source.replace(/__/g,(function(){return e})),"i"),lookbehind:!0,greedy:!0,inside:r},a.languages.insertBefore("markup","cdata",o)}}),Object.defineProperty(a.languages.markup.tag,"addAttribute",{value:function(e,t){a.languages.markup.tag.inside["special-attr"].push({pattern:RegExp(/(^|["'\s])/.source+"(?:"+e+")"+/\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))/.source,"i"),lookbehind:!0,inside:{"attr-name":/^[^\s=]+/,"attr-value":{pattern:/=[\s\S]+/,inside:{value:{pattern:/(^=\s*(["']|(?!["'])))\S[\s\S]*(?=\2$)/,lookbehind:!0,alias:[t,"language-"+t],inside:a.languages[t]},punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}}}})}}),a.languages.html=a.languages.markup,a.languages.mathml=a.languages.markup,a.languages.svg=a.languages.markup,a.languages.xml=a.languages.extend("markup",{}),a.languages.ssml=a.languages.xml,a.languages.atom=a.languages.xml,a.languages.rss=a.languages.xml,function(e){var t="\\b(?:BASH|BASHOPTS|BASH_ALIASES|BASH_ARGC|BASH_ARGV|BASH_CMDS|BASH_COMPLETION_COMPAT_DIR|BASH_LINENO|BASH_REMATCH|BASH_SOURCE|BASH_VERSINFO|BASH_VERSION|COLORTERM|COLUMNS|COMP_WORDBREAKS|DBUS_SESSION_BUS_ADDRESS|DEFAULTS_PATH|DESKTOP_SESSION|DIRSTACK|DISPLAY|EUID|GDMSESSION|GDM_LANG|GNOME_KEYRING_CONTROL|GNOME_KEYRING_PID|GPG_AGENT_INFO|GROUPS|HISTCONTROL|HISTFILE|HISTFILESIZE|HISTSIZE|HOME|HOSTNAME|HOSTTYPE|IFS|INSTANCE|JOB|LANG|LANGUAGE|LC_ADDRESS|LC_ALL|LC_IDENTIFICATION|LC_MEASUREMENT|LC_MONETARY|LC_NAME|LC_NUMERIC|LC_PAPER|LC_TELEPHONE|LC_TIME|LESSCLOSE|LESSOPEN|LINES|LOGNAME|LS_COLORS|MACHTYPE|MAILCHECK|MANDATORY_PATH|NO_AT_BRIDGE|OLDPWD|OPTERR|OPTIND|ORBIT_SOCKETDIR|OSTYPE|PAPERSIZE|PATH|PIPESTATUS|PPID|PS1|PS2|PS3|PS4|PWD|RANDOM|REPLY|SECONDS|SELINUX_INIT|SESSION|SESSIONTYPE|SESSION_MANAGER|SHELL|SHELLOPTS|SHLVL|SSH_AUTH_SOCK|TERM|UID|UPSTART_EVENTS|UPSTART_INSTANCE|UPSTART_JOB|UPSTART_SESSION|USER|WINDOWID|XAUTHORITY|XDG_CONFIG_DIRS|XDG_CURRENT_DESKTOP|XDG_DATA_DIRS|XDG_GREETER_DATA_DIR|XDG_MENU_PREFIX|XDG_RUNTIME_DIR|XDG_SEAT|XDG_SEAT_PATH|XDG_SESSION_DESKTOP|XDG_SESSION_ID|XDG_SESSION_PATH|XDG_SESSION_TYPE|XDG_VTNR|XMODIFIERS)\\b",n={pattern:/(^(["']?)\w+\2)[ \t]+\S.*/,lookbehind:!0,alias:"punctuation",inside:null},r={bash:n,environment:{pattern:RegExp("\\$"+t),alias:"constant"},variable:[{pattern:/\$?\(\([\s\S]+?\)\)/,greedy:!0,inside:{variable:[{pattern:/(^\$\(\([\s\S]+)\)\)/,lookbehind:!0},/^\$\(\(/],number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee]-?\d+)?/,operator:/--|\+\+|\*\*=?|<<=?|>>=?|&&|\|\||[=!+\-*/%<>^&|]=?|[?~:]/,punctuation:/\(\(?|\)\)?|,|;/}},{pattern:/\$\((?:\([^)]+\)|[^()])+\)|`[^`]+`/,greedy:!0,inside:{variable:/^\$\(|^`|\)$|`$/}},{pattern:/\$\{[^}]+\}/,greedy:!0,inside:{operator:/:[-=?+]?|[!\/]|##?|%%?|\^\^?|,,?/,punctuation:/[\[\]]/,environment:{pattern:RegExp("(\\{)"+t),lookbehind:!0,alias:"constant"}}},/\$(?:\w+|[#?*!@$])/],entity:/\\(?:[abceEfnrtv\\"]|O?[0-7]{1,3}|U[0-9a-fA-F]{8}|u[0-9a-fA-F]{4}|x[0-9a-fA-F]{1,2})/};e.languages.bash={shebang:{pattern:/^#!\s*\/.*/,alias:"important"},comment:{pattern:/(^|[^"{\\$])#.*/,lookbehind:!0},"function-name":[{pattern:/(\bfunction\s+)[\w-]+(?=(?:\s*\(?:\s*\))?\s*\{)/,lookbehind:!0,alias:"function"},{pattern:/\b[\w-]+(?=\s*\(\s*\)\s*\{)/,alias:"function"}],"for-or-select":{pattern:/(\b(?:for|select)\s+)\w+(?=\s+in\s)/,alias:"variable",lookbehind:!0},"assign-left":{pattern:/(^|[\s;|&]|[<>]\()\w+(?=\+?=)/,inside:{environment:{pattern:RegExp("(^|[\\s;|&]|[<>]\\()"+t),lookbehind:!0,alias:"constant"}},alias:"variable",lookbehind:!0},string:[{pattern:/((?:^|[^<])<<-?\s*)(\w+)\s[\s\S]*?(?:\r?\n|\r)\2/,lookbehind:!0,greedy:!0,inside:r},{pattern:/((?:^|[^<])<<-?\s*)(["'])(\w+)\2\s[\s\S]*?(?:\r?\n|\r)\3/,lookbehind:!0,greedy:!0,inside:{bash:n}},{pattern:/(^|[^\\](?:\\\\)*)"(?:\\[\s\S]|\$\([^)]+\)|\$(?!\()|`[^`]+`|[^"\\`$])*"/,lookbehind:!0,greedy:!0,inside:r},{pattern:/(^|[^$\\])'[^']*'/,lookbehind:!0,greedy:!0},{pattern:/\$'(?:[^'\\]|\\[\s\S])*'/,greedy:!0,inside:{entity:r.entity}}],environment:{pattern:RegExp("\\$?"+t),alias:"constant"},variable:r.variable,function:{pattern:/(^|[\s;|&]|[<>]\()(?:add|apropos|apt|apt-cache|apt-get|aptitude|aspell|automysqlbackup|awk|basename|bash|bc|bconsole|bg|bzip2|cal|cat|cfdisk|chgrp|chkconfig|chmod|chown|chroot|cksum|clear|cmp|column|comm|composer|cp|cron|crontab|csplit|curl|cut|date|dc|dd|ddrescue|debootstrap|df|diff|diff3|dig|dir|dircolors|dirname|dirs|dmesg|docker|docker-compose|du|egrep|eject|env|ethtool|expand|expect|expr|fdformat|fdisk|fg|fgrep|file|find|fmt|fold|format|free|fsck|ftp|fuser|gawk|git|gparted|grep|groupadd|groupdel|groupmod|groups|grub-mkconfig|gzip|halt|head|hg|history|host|hostname|htop|iconv|id|ifconfig|ifdown|ifup|import|install|ip|jobs|join|kill|killall|less|link|ln|locate|logname|logrotate|look|lpc|lpr|lprint|lprintd|lprintq|lprm|ls|lsof|lynx|make|man|mc|mdadm|mkconfig|mkdir|mke2fs|mkfifo|mkfs|mkisofs|mknod|mkswap|mmv|more|most|mount|mtools|mtr|mutt|mv|nano|nc|netstat|nice|nl|node|nohup|notify-send|npm|nslookup|op|open|parted|passwd|paste|pathchk|ping|pkill|pnpm|podman|podman-compose|popd|pr|printcap|printenv|ps|pushd|pv|quota|quotacheck|quotactl|ram|rar|rcp|reboot|remsync|rename|renice|rev|rm|rmdir|rpm|rsync|scp|screen|sdiff|sed|sendmail|seq|service|sftp|sh|shellcheck|shuf|shutdown|sleep|slocate|sort|split|ssh|stat|strace|su|sudo|sum|suspend|swapon|sync|tac|tail|tar|tee|time|timeout|top|touch|tr|traceroute|tsort|tty|umount|uname|unexpand|uniq|units|unrar|unshar|unzip|update-grub|uptime|useradd|userdel|usermod|users|uudecode|uuencode|v|vcpkg|vdir|vi|vim|virsh|vmstat|wait|watch|wc|wget|whereis|which|who|whoami|write|xargs|xdg-open|yarn|yes|zenity|zip|zsh|zypper)(?=$|[)\s;|&])/,lookbehind:!0},keyword:{pattern:/(^|[\s;|&]|[<>]\()(?:case|do|done|elif|else|esac|fi|for|function|if|in|select|then|until|while)(?=$|[)\s;|&])/,lookbehind:!0},builtin:{pattern:/(^|[\s;|&]|[<>]\()(?:\.|:|alias|bind|break|builtin|caller|cd|command|continue|declare|echo|enable|eval|exec|exit|export|getopts|hash|help|let|local|logout|mapfile|printf|pwd|read|readarray|readonly|return|set|shift|shopt|source|test|times|trap|type|typeset|ulimit|umask|unalias|unset)(?=$|[)\s;|&])/,lookbehind:!0,alias:"class-name"},boolean:{pattern:/(^|[\s;|&]|[<>]\()(?:false|true)(?=$|[)\s;|&])/,lookbehind:!0},"file-descriptor":{pattern:/\B&\d\b/,alias:"important"},operator:{pattern:/\d?<>|>\||\+=|=[=~]?|!=?|<<[<-]?|[&\d]?>>|\d[<>]&?|[<>][&=]?|&[>&]?|\|[&|]?/,inside:{"file-descriptor":{pattern:/^\d/,alias:"important"}}},punctuation:/\$?\(\(?|\)\)?|\.\.|[{}[\];\\]/,number:{pattern:/(^|\s)(?:[1-9]\d*|0)(?:[.,]\d+)?\b/,lookbehind:!0}},n.inside=e.languages.bash;for(var a=["comment","function-name","for-or-select","assign-left","string","environment","function","keyword","builtin","boolean","file-descriptor","operator","punctuation","number"],o=r.variable[1].inside,i=0;i<a.length;i++)o[a[i]]=e.languages.bash[a[i]];e.languages.shell=e.languages.bash}(a),a.languages.clike={comment:[{pattern:/(^|[^\\])\/\*[\s\S]*?(?:\*\/|$)/,lookbehind:!0,greedy:!0},{pattern:/(^|[^\\:])\/\/.*/,lookbehind:!0,greedy:!0}],string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|trait)\s+|\bcatch\s+\()[\w.\\]+/i,lookbehind:!0,inside:{punctuation:/[.\\]/}},keyword:/\b(?:break|catch|continue|do|else|finally|for|function|if|in|instanceof|new|null|return|throw|try|while)\b/,boolean:/\b(?:false|true)\b/,function:/\b\w+(?=\()/,number:/\b0x[\da-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?/i,operator:/[<>]=?|[!=]=?=?|--?|\+\+?|&&?|\|\|?|[?*/~^%]/,punctuation:/[{}[\];(),.:]/},a.languages.c=a.languages.extend("clike",{comment:{pattern:/\/\/(?:[^\r\n\\]|\\(?:\r\n?|\n|(?![\r\n])))*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},"class-name":{pattern:/(\b(?:enum|struct)\s+(?:__attribute__\s*\(\([\s\S]*?\)\)\s*)?)\w+|\b[a-z]\w*_t\b/,lookbehind:!0},keyword:/\b(?:_Alignas|_Alignof|_Atomic|_Bool|_Complex|_Generic|_Imaginary|_Noreturn|_Static_assert|_Thread_local|__attribute__|asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|inline|int|long|register|return|short|signed|sizeof|static|struct|switch|typedef|typeof|union|unsigned|void|volatile|while)\b/,function:/\b[a-z_]\w*(?=\s*\()/i,number:/(?:\b0x(?:[\da-f]+(?:\.[\da-f]*)?|\.[\da-f]+)(?:p[+-]?\d+)?|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?)[ful]{0,4}/i,operator:/>>=?|<<=?|->|([-+&|:])\1|[?:~]|[-+*/%&|^!=<>]=?/}),a.languages.insertBefore("c","string",{char:{pattern:/'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n]){0,32}'/,greedy:!0}}),a.languages.insertBefore("c","string",{macro:{pattern:/(^[\t ]*)#\s*[a-z](?:[^\r\n\\/]|\/(?!\*)|\/\*(?:[^*]|\*(?!\/))*\*\/|\\(?:\r\n|[\s\S]))*/im,lookbehind:!0,greedy:!0,alias:"property",inside:{string:[{pattern:/^(#\s*include\s*)<[^>]+>/,lookbehind:!0},a.languages.c.string],char:a.languages.c.char,comment:a.languages.c.comment,"macro-name":[{pattern:/(^#\s*define\s+)\w+\b(?!\()/i,lookbehind:!0},{pattern:/(^#\s*define\s+)\w+\b(?=\()/i,lookbehind:!0,alias:"function"}],directive:{pattern:/^(#\s*)[a-z]+/,lookbehind:!0,alias:"keyword"},"directive-hash":/^#/,punctuation:/##|\\(?=[\r\n])/,expression:{pattern:/\S[\s\S]*/,inside:a.languages.c}}}}),a.languages.insertBefore("c","function",{constant:/\b(?:EOF|NULL|SEEK_CUR|SEEK_END|SEEK_SET|__DATE__|__FILE__|__LINE__|__TIMESTAMP__|__TIME__|__func__|stderr|stdin|stdout)\b/}),delete a.languages.c.boolean,function(e){var t=/\b(?:alignas|alignof|asm|auto|bool|break|case|catch|char|char16_t|char32_t|char8_t|class|co_await|co_return|co_yield|compl|concept|const|const_cast|consteval|constexpr|constinit|continue|decltype|default|delete|do|double|dynamic_cast|else|enum|explicit|export|extern|final|float|for|friend|goto|if|import|inline|int|int16_t|int32_t|int64_t|int8_t|long|module|mutable|namespace|new|noexcept|nullptr|operator|override|private|protected|public|register|reinterpret_cast|requires|return|short|signed|sizeof|static|static_assert|static_cast|struct|switch|template|this|thread_local|throw|try|typedef|typeid|typename|uint16_t|uint32_t|uint64_t|uint8_t|union|unsigned|using|virtual|void|volatile|wchar_t|while)\b/,n=/\b(?!<keyword>)\w+(?:\s*\.\s*\w+)*\b/.source.replace(/<keyword>/g,(function(){return t.source}));e.languages.cpp=e.languages.extend("c",{"class-name":[{pattern:RegExp(/(\b(?:class|concept|enum|struct|typename)\s+)(?!<keyword>)\w+/.source.replace(/<keyword>/g,(function(){return t.source}))),lookbehind:!0},/\b[A-Z]\w*(?=\s*::\s*\w+\s*\()/,/\b[A-Z_]\w*(?=\s*::\s*~\w+\s*\()/i,/\b\w+(?=\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>\s*::\s*\w+\s*\()/],keyword:t,number:{pattern:/(?:\b0b[01']+|\b0x(?:[\da-f']+(?:\.[\da-f']*)?|\.[\da-f']+)(?:p[+-]?[\d']+)?|(?:\b[\d']+(?:\.[\d']*)?|\B\.[\d']+)(?:e[+-]?[\d']+)?)[ful]{0,4}/i,greedy:!0},operator:/>>=?|<<=?|->|--|\+\+|&&|\|\||[?:~]|<=>|[-+*/%&|^!=<>]=?|\b(?:and|and_eq|bitand|bitor|not|not_eq|or|or_eq|xor|xor_eq)\b/,boolean:/\b(?:false|true)\b/}),e.languages.insertBefore("cpp","string",{module:{pattern:RegExp(/(\b(?:import|module)\s+)/.source+"(?:"+/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|<[^<>\r\n]*>/.source+"|"+/<mod-name>(?:\s*:\s*<mod-name>)?|:\s*<mod-name>/.source.replace(/<mod-name>/g,(function(){return n}))+")"),lookbehind:!0,greedy:!0,inside:{string:/^[<"][\s\S]+/,operator:/:/,punctuation:/\./}},"raw-string":{pattern:/R"([^()\\ ]{0,16})\([\s\S]*?\)\1"/,alias:"string",greedy:!0}}),e.languages.insertBefore("cpp","keyword",{"generic-function":{pattern:/\b(?!operator\b)[a-z_]\w*\s*<(?:[^<>]|<[^<>]*>)*>(?=\s*\()/i,inside:{function:/^\w+/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:e.languages.cpp}}}}),e.languages.insertBefore("cpp","operator",{"double-colon":{pattern:/::/,alias:"punctuation"}}),e.languages.insertBefore("cpp","class-name",{"base-clause":{pattern:/(\b(?:class|struct)\s+\w+\s*:\s*)[^;{}"'\s]+(?:\s+[^;{}"'\s]+)*(?=\s*[;{])/,lookbehind:!0,greedy:!0,inside:e.languages.extend("cpp",{})}}),e.languages.insertBefore("inside","double-colon",{"class-name":/\b[a-z_]\w*\b(?!\s*::)/i},e.languages.cpp["base-clause"])}(a),function(e){var t=/(?:"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n])*')/;e.languages.css={comment:/\/\*[\s\S]*?\*\//,atrule:{pattern:/@[\w-](?:[^;{\s]|\s+(?![\s{]))*(?:;|(?=\s*\{))/,inside:{rule:/^@[\w-]+/,"selector-function-argument":{pattern:/(\bselector\s*\(\s*(?![\s)]))(?:[^()\s]|\s+(?![\s)])|\((?:[^()]|\([^()]*\))*\))+(?=\s*\))/,lookbehind:!0,alias:"selector"},keyword:{pattern:/(^|[^\w-])(?:and|not|only|or)(?![\w-])/,lookbehind:!0}}},url:{pattern:RegExp("\\burl\\((?:"+t.source+"|"+/(?:[^\\\r\n()"']|\\[\s\S])*/.source+")\\)","i"),greedy:!0,inside:{function:/^url/i,punctuation:/^\(|\)$/,string:{pattern:RegExp("^"+t.source+"$"),alias:"url"}}},selector:{pattern:RegExp("(^|[{}\\s])[^{}\\s](?:[^{};\"'\\s]|\\s+(?![\\s{])|"+t.source+")*(?=\\s*\\{)"),lookbehind:!0},string:{pattern:t,greedy:!0},property:{pattern:/(^|[^-\w\xA0-\uFFFF])(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*(?=\s*:)/i,lookbehind:!0},important:/!important\b/i,function:{pattern:/(^|[^-a-z0-9])[-a-z0-9]+(?=\()/i,lookbehind:!0},punctuation:/[(){};:,]/},e.languages.css.atrule.inside.rest=e.languages.css;var n=e.languages.markup;n&&(n.tag.addInlined("style","css"),n.tag.addAttribute("style","css"))}(a),function(e){var t,n=/("|')(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/;e.languages.css.selector={pattern:e.languages.css.selector.pattern,lookbehind:!0,inside:t={"pseudo-element":/:(?:after|before|first-letter|first-line|selection)|::[-\w]+/,"pseudo-class":/:[-\w]+/,class:/\.[-\w]+/,id:/#[-\w]+/,attribute:{pattern:RegExp("\\[(?:[^[\\]\"']|"+n.source+")*\\]"),greedy:!0,inside:{punctuation:/^\[|\]$/,"case-sensitivity":{pattern:/(\s)[si]$/i,lookbehind:!0,alias:"keyword"},namespace:{pattern:/^(\s*)(?:(?!\s)[-*\w\xA0-\uFFFF])*\|(?!=)/,lookbehind:!0,inside:{punctuation:/\|$/}},"attr-name":{pattern:/^(\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+/,lookbehind:!0},"attr-value":[n,{pattern:/(=\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+(?=\s*$)/,lookbehind:!0}],operator:/[|~*^$]?=/}},"n-th":[{pattern:/(\(\s*)[+-]?\d*[\dn](?:\s*[+-]\s*\d+)?(?=\s*\))/,lookbehind:!0,inside:{number:/[\dn]+/,operator:/[+-]/}},{pattern:/(\(\s*)(?:even|odd)(?=\s*\))/i,lookbehind:!0}],combinator:/>|\+|~|\|\|/,punctuation:/[(),]/}},e.languages.css.atrule.inside["selector-function-argument"].inside=t,e.languages.insertBefore("css","property",{variable:{pattern:/(^|[^-\w\xA0-\uFFFF])--(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*/i,lookbehind:!0}});var r={pattern:/(\b\d+)(?:%|[a-z]+(?![\w-]))/,lookbehind:!0},a={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0};e.languages.insertBefore("css","function",{operator:{pattern:/(\s)[+\-*\/](?=\s)/,lookbehind:!0},hexcode:{pattern:/\B#[\da-f]{3,8}\b/i,alias:"color"},color:[{pattern:/(^|[^\w-])(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)(?![\w-])/i,lookbehind:!0},{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:r,number:a,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:r,number:a})}(a),a.languages.javascript=a.languages.extend("clike",{"class-name":[a.languages.clike["class-name"],{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$A-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\.(?:constructor|prototype))/,lookbehind:!0}],keyword:[{pattern:/((?:^|\})\s*)catch\b/,lookbehind:!0},{pattern:/(^|[^.]|\.\.\.\s*)\b(?:as|assert(?=\s*\{)|async(?=\s*(?:function\b|\(|[$\w\xA0-\uFFFF]|$))|await|break|case|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally(?=\s*(?:\{|$))|for|from(?=\s*(?:['"]|$))|function|(?:get|set)(?=\s*(?:[#\[$\w\xA0-\uFFFF]|$))|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)\b/,lookbehind:!0}],function:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*(?:\.\s*(?:apply|bind|call)\s*)?\()/,number:{pattern:RegExp(/(^|[^\w$])/.source+"(?:"+/NaN|Infinity/.source+"|"+/0[bB][01]+(?:_[01]+)*n?/.source+"|"+/0[oO][0-7]+(?:_[0-7]+)*n?/.source+"|"+/0[xX][\dA-Fa-f]+(?:_[\dA-Fa-f]+)*n?/.source+"|"+/\d+(?:_\d+)*n/.source+"|"+/(?:\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\.\d+(?:_\d+)*)(?:[Ee][+-]?\d+(?:_\d+)*)?/.source+")"+/(?![\w$])/.source),lookbehind:!0},operator:/--|\+\+|\*\*=?|=>|&&=?|\|\|=?|[!=]==|<<=?|>>>?=?|[-+*/%&|^!=<>]=?|\.{3}|\?\?=?|\?\.?|[~:]/}),a.languages.javascript["class-name"][0].pattern=/(\b(?:class|extends|implements|instanceof|interface|new)\s+)[\w.\\]+/,a.languages.insertBefore("javascript","keyword",{regex:{pattern:/((?:^|[^$\w\xA0-\uFFFF."'\])\s]|\b(?:return|yield))\s*)\/(?:\[(?:[^\]\\\r\n]|\\.)*\]|\\.|[^/\\\[\r\n])+\/[dgimyus]{0,7}(?=(?:\s|\/\*(?:[^*]|\*(?!\/))*\*\/)*(?:$|[\r\n,.;:})\]]|\/\/))/,lookbehind:!0,greedy:!0,inside:{"regex-source":{pattern:/^(\/)[\s\S]+(?=\/[a-z]*$)/,lookbehind:!0,alias:"language-regex",inside:a.languages.regex},"regex-delimiter":/^\/|\/$/,"regex-flags":/^[a-z]+$/}},"function-variable":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*[=:]\s*(?:async\s*)?(?:\bfunction\b|(?:\((?:[^()]|\([^()]*\))*\)|(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)\s*=>))/,alias:"function"},parameter:[{pattern:/(function(?:\s+(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)?\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\))/,lookbehind:!0,inside:a.languages.javascript},{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$a-z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*=>)/i,lookbehind:!0,inside:a.languages.javascript},{pattern:/(\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*=>)/,lookbehind:!0,inside:a.languages.javascript},{pattern:/((?:\b|\s|^)(?!(?:as|async|await|break|case|catch|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally|for|from|function|get|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|set|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)(?![$\w\xA0-\uFFFF]))(?:(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*)\(\s*|\]\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*\{)/,lookbehind:!0,inside:a.languages.javascript}],constant:/\b[A-Z](?:[A-Z_]|\dx?)*\b/}),a.languages.insertBefore("javascript","string",{hashbang:{pattern:/^#!.*/,greedy:!0,alias:"comment"},"template-string":{pattern:/`(?:\\[\s\S]|\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}|(?!\$\{)[^\\`])*`/,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},interpolation:{pattern:/((?:^|[^\\])(?:\\{2})*)\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}/,lookbehind:!0,inside:{"interpolation-punctuation":{pattern:/^\$\{|\}$/,alias:"punctuation"},rest:a.languages.javascript}},string:/[\s\S]+/}},"string-property":{pattern:/((?:^|[,{])[ \t]*)(["'])(?:\\(?:\r\n|[\s\S])|(?!\2)[^\\\r\n])*\2(?=\s*:)/m,lookbehind:!0,greedy:!0,alias:"property"}}),a.languages.insertBefore("javascript","operator",{"literal-property":{pattern:/((?:^|[,{])[ \t]*)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*:)/m,lookbehind:!0,alias:"property"}}),a.languages.markup&&(a.languages.markup.tag.addInlined("script","javascript"),a.languages.markup.tag.addAttribute(/on(?:abort|blur|change|click|composition(?:end|start|update)|dblclick|error|focus(?:in|out)?|key(?:down|up)|load|mouse(?:down|enter|leave|move|out|over|up)|reset|resize|scroll|select|slotchange|submit|unload|wheel)/.source,"javascript")),a.languages.js=a.languages.javascript,function(e){var t=/#(?!\{).+/,n={pattern:/#\{[^}]+\}/,alias:"variable"};e.languages.coffeescript=e.languages.extend("javascript",{comment:t,string:[{pattern:/'(?:\\[\s\S]|[^\\'])*'/,greedy:!0},{pattern:/"(?:\\[\s\S]|[^\\"])*"/,greedy:!0,inside:{interpolation:n}}],keyword:/\b(?:and|break|by|catch|class|continue|debugger|delete|do|each|else|extend|extends|false|finally|for|if|in|instanceof|is|isnt|let|loop|namespace|new|no|not|null|of|off|on|or|own|return|super|switch|then|this|throw|true|try|typeof|undefined|unless|until|when|while|window|with|yes|yield)\b/,"class-member":{pattern:/@(?!\d)\w+/,alias:"variable"}}),e.languages.insertBefore("coffeescript","comment",{"multiline-comment":{pattern:/###[\s\S]+?###/,alias:"comment"},"block-regex":{pattern:/\/{3}[\s\S]*?\/{3}/,alias:"regex",inside:{comment:t,interpolation:n}}}),e.languages.insertBefore("coffeescript","string",{"inline-javascript":{pattern:/`(?:\\[\s\S]|[^\\`])*`/,inside:{delimiter:{pattern:/^`|`$/,alias:"punctuation"},script:{pattern:/[\s\S]+/,alias:"language-javascript",inside:e.languages.javascript}}},"multiline-string":[{pattern:/'''[\s\S]*?'''/,greedy:!0,alias:"string"},{pattern:/"""[\s\S]*?"""/,greedy:!0,alias:"string",inside:{interpolation:n}}]}),e.languages.insertBefore("coffeescript","keyword",{property:/(?!\d)\w+(?=\s*:(?!:))/}),delete e.languages.coffeescript["template-string"],e.languages.coffee=e.languages.coffeescript}(a),function(e){var t=/[*&][^\s[\]{},]+/,n=/!(?:<[\w\-%#;/?:@&=+$,.!~*'()[\]]+>|(?:[a-zA-Z\d-]*!)?[\w\-%#;/?:@&=+$.~*'()]+)?/,r="(?:"+n.source+"(?:[ \t]+"+t.source+")?|"+t.source+"(?:[ \t]+"+n.source+")?)",a=/(?:[^\s\x00-\x08\x0e-\x1f!"#%&'*,\-:>?@[\]`{|}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]|[?:-]<PLAIN>)(?:[ \t]*(?:(?![#:])<PLAIN>|:<PLAIN>))*/.source.replace(/<PLAIN>/g,(function(){return/[^\s\x00-\x08\x0e-\x1f,[\]{}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]/.source})),o=/"(?:[^"\\\r\n]|\\.)*"|'(?:[^'\\\r\n]|\\.)*'/.source;function i(e,t){t=(t||"").replace(/m/g,"")+"m";var n=/([:\-,[{]\s*(?:\s<<prop>>[ \t]+)?)(?:<<value>>)(?=[ \t]*(?:$|,|\]|\}|(?:[\r\n]\s*)?#))/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<value>>/g,(function(){return e}));return RegExp(n,t)}e.languages.yaml={scalar:{pattern:RegExp(/([\-:]\s*(?:\s<<prop>>[ \t]+)?[|>])[ \t]*(?:((?:\r?\n|\r)[ \t]+)\S[^\r\n]*(?:\2[^\r\n]+)*)/.source.replace(/<<prop>>/g,(function(){return r}))),lookbehind:!0,alias:"string"},comment:/#.*/,key:{pattern:RegExp(/((?:^|[:\-,[{\r\n?])[ \t]*(?:<<prop>>[ \t]+)?)<<key>>(?=\s*:\s)/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<key>>/g,(function(){return"(?:"+a+"|"+o+")"}))),lookbehind:!0,greedy:!0,alias:"atrule"},directive:{pattern:/(^[ \t]*)%.+/m,lookbehind:!0,alias:"important"},datetime:{pattern:i(/\d{4}-\d\d?-\d\d?(?:[tT]|[ \t]+)\d\d?:\d{2}:\d{2}(?:\.\d*)?(?:[ \t]*(?:Z|[-+]\d\d?(?::\d{2})?))?|\d{4}-\d{2}-\d{2}|\d\d?:\d{2}(?::\d{2}(?:\.\d*)?)?/.source),lookbehind:!0,alias:"number"},boolean:{pattern:i(/false|true/.source,"i"),lookbehind:!0,alias:"important"},null:{pattern:i(/null|~/.source,"i"),lookbehind:!0,alias:"important"},string:{pattern:i(o),lookbehind:!0,greedy:!0},number:{pattern:i(/[+-]?(?:0x[\da-f]+|0o[0-7]+|(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?|\.inf|\.nan)/.source,"i"),lookbehind:!0},tag:n,important:t,punctuation:/---|[:[\]{}\-,|>?]|\.\.\./},e.languages.yml=e.languages.yaml}(a),function(e){var t=/(?:\\.|[^\\\n\r]|(?:\n|\r\n?)(?![\r\n]))/.source;function n(e){return e=e.replace(/<inner>/g,(function(){return t})),RegExp(/((?:^|[^\\])(?:\\{2})*)/.source+"(?:"+e+")")}var r=/(?:\\.|``(?:[^`\r\n]|`(?!`))+``|`[^`\r\n]+`|[^\\|\r\n`])+/.source,a=/\|?__(?:\|__)+\|?(?:(?:\n|\r\n?)|(?![\s\S]))/.source.replace(/__/g,(function(){return r})),o=/\|?[ \t]*:?-{3,}:?[ \t]*(?:\|[ \t]*:?-{3,}:?[ \t]*)+\|?(?:\n|\r\n?)/.source;e.languages.markdown=e.languages.extend("markup",{}),e.languages.insertBefore("markdown","prolog",{"front-matter-block":{pattern:/(^(?:\s*[\r\n])?)---(?!.)[\s\S]*?[\r\n]---(?!.)/,lookbehind:!0,greedy:!0,inside:{punctuation:/^---|---$/,"front-matter":{pattern:/\S+(?:\s+\S+)*/,alias:["yaml","language-yaml"],inside:e.languages.yaml}}},blockquote:{pattern:/^>(?:[\t ]*>)*/m,alias:"punctuation"},table:{pattern:RegExp("^"+a+o+"(?:"+a+")*","m"),inside:{"table-data-rows":{pattern:RegExp("^("+a+o+")(?:"+a+")*$"),lookbehind:!0,inside:{"table-data":{pattern:RegExp(r),inside:e.languages.markdown},punctuation:/\|/}},"table-line":{pattern:RegExp("^("+a+")"+o+"$"),lookbehind:!0,inside:{punctuation:/\||:?-{3,}:?/}},"table-header-row":{pattern:RegExp("^"+a+"$"),inside:{"table-header":{pattern:RegExp(r),alias:"important",inside:e.languages.markdown},punctuation:/\|/}}}},code:[{pattern:/((?:^|\n)[ \t]*\n|(?:^|\r\n?)[ \t]*\r\n?)(?: {4}|\t).+(?:(?:\n|\r\n?)(?: {4}|\t).+)*/,lookbehind:!0,alias:"keyword"},{pattern:/^```[\s\S]*?^```$/m,greedy:!0,inside:{"code-block":{pattern:/^(```.*(?:\n|\r\n?))[\s\S]+?(?=(?:\n|\r\n?)^```$)/m,lookbehind:!0},"code-language":{pattern:/^(```).+/,lookbehind:!0},punctuation:/```/}}],title:[{pattern:/\S.*(?:\n|\r\n?)(?:==+|--+)(?=[ \t]*$)/m,alias:"important",inside:{punctuation:/==+$|--+$/}},{pattern:/(^\s*)#.+/m,lookbehind:!0,alias:"important",inside:{punctuation:/^#+|#+$/}}],hr:{pattern:/(^\s*)([*-])(?:[\t ]*\2){2,}(?=\s*$)/m,lookbehind:!0,alias:"punctuation"},list:{pattern:/(^\s*)(?:[*+-]|\d+\.)(?=[\t ].)/m,lookbehind:!0,alias:"punctuation"},"url-reference":{pattern:/!?\[[^\]]+\]:[\t ]+(?:\S+|<(?:\\.|[^>\\])+>)(?:[\t ]+(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\)))?/,inside:{variable:{pattern:/^(!?\[)[^\]]+/,lookbehind:!0},string:/(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\))$/,punctuation:/^[\[\]!:]|[<>]/},alias:"url"},bold:{pattern:n(/\b__(?:(?!_)<inner>|_(?:(?!_)<inner>)+_)+__\b|\*\*(?:(?!\*)<inner>|\*(?:(?!\*)<inner>)+\*)+\*\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^..)[\s\S]+(?=..$)/,lookbehind:!0,inside:{}},punctuation:/\*\*|__/}},italic:{pattern:n(/\b_(?:(?!_)<inner>|__(?:(?!_)<inner>)+__)+_\b|\*(?:(?!\*)<inner>|\*\*(?:(?!\*)<inner>)+\*\*)+\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^.)[\s\S]+(?=.$)/,lookbehind:!0,inside:{}},punctuation:/[*_]/}},strike:{pattern:n(/(~~?)(?:(?!~)<inner>)+\2/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^~~?)[\s\S]+(?=\1$)/,lookbehind:!0,inside:{}},punctuation:/~~?/}},"code-snippet":{pattern:/(^|[^\\`])(?:``[^`\r\n]+(?:`[^`\r\n]+)*``(?!`)|`[^`\r\n]+`(?!`))/,lookbehind:!0,greedy:!0,alias:["code","keyword"]},url:{pattern:n(/!?\[(?:(?!\])<inner>)+\](?:\([^\s)]+(?:[\t ]+"(?:\\.|[^"\\])*")?\)|[ \t]?\[(?:(?!\])<inner>)+\])/.source),lookbehind:!0,greedy:!0,inside:{operator:/^!/,content:{pattern:/(^\[)[^\]]+(?=\])/,lookbehind:!0,inside:{}},variable:{pattern:/(^\][ \t]?\[)[^\]]+(?=\]$)/,lookbehind:!0},url:{pattern:/(^\]\()[^\s)]+/,lookbehind:!0},string:{pattern:/(^[ \t]+)"(?:\\.|[^"\\])*"(?=\)$)/,lookbehind:!0}}}}),["url","bold","italic","strike"].forEach((function(t){["url","bold","italic","strike","code-snippet"].forEach((function(n){t!==n&&(e.languages.markdown[t].inside.content.inside[n]=e.languages.markdown[n])}))})),e.hooks.add("after-tokenize",(function(e){"markdown"!==e.language&&"md"!==e.language||function e(t){if(t&&"string"!=typeof t)for(var n=0,r=t.length;n<r;n++){var a=t[n];if("code"===a.type){var o=a.content[1],i=a.content[3];if(o&&i&&"code-language"===o.type&&"code-block"===i.type&&"string"==typeof o.content){var l=o.content.replace(/\b#/g,"sharp").replace(/\b\+\+/g,"pp"),s="language-"+(l=(/[a-z][\w-]*/i.exec(l)||[""])[0].toLowerCase());i.alias?"string"==typeof i.alias?i.alias=[i.alias,s]:i.alias.push(s):i.alias=[s]}}else e(a.content)}}(e.tokens)})),e.hooks.add("wrap",(function(t){if("code-block"===t.type){for(var n="",r=0,a=t.classes.length;r<a;r++){var o=t.classes[r],u=/language-(.+)/.exec(o);if(u){n=u[1];break}}var c,d=e.languages[n];if(d)t.content=e.highlight((c=t.content,c.replace(i,"").replace(/&(\w{1,8}|#x?[\da-f]{1,8});/gi,(function(e,t){var n;if("#"===(t=t.toLowerCase())[0])return n="x"===t[1]?parseInt(t.slice(2),16):Number(t.slice(1)),s(n);var r=l[t];return r||e}))),d,n);else if(n&&"none"!==n&&e.plugins.autoloader){var f="md-"+(new Date).valueOf()+"-"+Math.floor(1e16*Math.random());t.attributes.id=f,e.plugins.autoloader.loadLanguages(n,(function(){var t=document.getElementById(f);t&&(t.innerHTML=e.highlight(t.textContent,e.languages[n],n))}))}}}));var i=RegExp(e.languages.markup.tag.pattern.source,"gi"),l={amp:"&",lt:"<",gt:">",quot:'"'},s=String.fromCodePoint||String.fromCharCode;e.languages.md=e.languages.markdown}(a),a.languages.graphql={comment:/#.*/,description:{pattern:/(?:"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*")(?=\s*[a-z_])/i,greedy:!0,alias:"string",inside:{"language-markdown":{pattern:/(^"(?:"")?)(?!\1)[\s\S]+(?=\1$)/,lookbehind:!0,inside:a.languages.markdown}}},string:{pattern:/"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*"/,greedy:!0},number:/(?:\B-|\b)\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,boolean:/\b(?:false|true)\b/,variable:/\$[a-z_]\w*/i,directive:{pattern:/@[a-z_]\w*/i,alias:"function"},"attr-name":{pattern:/\b[a-z_]\w*(?=\s*(?:\((?:[^()"]|"(?:\\.|[^\\"\r\n])*")*\))?:)/i,greedy:!0},"atom-input":{pattern:/\b[A-Z]\w*Input\b/,alias:"class-name"},scalar:/\b(?:Boolean|Float|ID|Int|String)\b/,constant:/\b[A-Z][A-Z_\d]*\b/,"class-name":{pattern:/(\b(?:enum|implements|interface|on|scalar|type|union)\s+|&\s*|:\s*|\[)[A-Z_]\w*/,lookbehind:!0},fragment:{pattern:/(\bfragment\s+|\.{3}\s*(?!on\b))[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-mutation":{pattern:/(\bmutation\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-query":{pattern:/(\bquery\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},keyword:/\b(?:directive|enum|extend|fragment|implements|input|interface|mutation|on|query|repeatable|scalar|schema|subscription|type|union)\b/,operator:/[!=|&]|\.{3}/,"property-query":/\w+(?=\s*\()/,object:/\w+(?=\s*\{)/,punctuation:/[!(){}\[\]:=,]/,property:/\w+/},a.hooks.add("after-tokenize",(function(e){if("graphql"===e.language)for(var t=e.tokens.filter((function(e){return"string"!=typeof e&&"comment"!==e.type&&"scalar"!==e.type})),n=0;n<t.length;){var r=t[n++];if("keyword"===r.type&&"mutation"===r.content){var a=[];if(d(["definition-mutation","punctuation"])&&"("===c(1).content){n+=2;var o=f(/^\($/,/^\)$/);if(-1===o)continue;for(;n<o;n++){var i=c(0);"variable"===i.type&&(p(i,"variable-input"),a.push(i.content))}n=o+1}if(d(["punctuation","property-query"])&&"{"===c(0).content&&(n++,p(c(0),"property-mutation"),a.length>0)){var l=f(/^\{$/,/^\}$/);if(-1===l)continue;for(var s=n;s<l;s++){var u=t[s];"variable"===u.type&&a.indexOf(u.content)>=0&&p(u,"variable-input")}}}}function c(e){return t[n+e]}function d(e,t){t=t||0;for(var n=0;n<e.length;n++){var r=c(n+t);if(!r||r.type!==e[n])return!1}return!0}function f(e,r){for(var a=1,o=n;o<t.length;o++){var i=t[o],l=i.content;if("punctuation"===i.type&&"string"==typeof l)if(e.test(l))a++;else if(r.test(l)&&0===--a)return o}return-1}function p(e,t){var n=e.alias;n?Array.isArray(n)||(e.alias=n=[n]):e.alias=n=[],n.push(t)}})),a.languages.sql={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|(?:--|\/\/|#).*)/,lookbehind:!0},variable:[{pattern:/@(["'`])(?:\\[\s\S]|(?!\1)[^\\])+\1/,greedy:!0},/@[\w.$]+/],string:{pattern:/(^|[^@\\])("|')(?:\\[\s\S]|(?!\2)[^\\]|\2\2)*\2/,greedy:!0,lookbehind:!0},identifier:{pattern:/(^|[^@\\])`(?:\\[\s\S]|[^`\\]|``)*`/,greedy:!0,lookbehind:!0,inside:{punctuation:/^`|`$/}},function:/\b(?:AVG|COUNT|FIRST|FORMAT|LAST|LCASE|LEN|MAX|MID|MIN|MOD|NOW|ROUND|SUM|UCASE)(?=\s*\()/i,keyword:/\b(?:ACTION|ADD|AFTER|ALGORITHM|ALL|ALTER|ANALYZE|ANY|APPLY|AS|ASC|AUTHORIZATION|AUTO_INCREMENT|BACKUP|BDB|BEGIN|BERKELEYDB|BIGINT|BINARY|BIT|BLOB|BOOL|BOOLEAN|BREAK|BROWSE|BTREE|BULK|BY|CALL|CASCADED?|CASE|CHAIN|CHAR(?:ACTER|SET)?|CHECK(?:POINT)?|CLOSE|CLUSTERED|COALESCE|COLLATE|COLUMNS?|COMMENT|COMMIT(?:TED)?|COMPUTE|CONNECT|CONSISTENT|CONSTRAINT|CONTAINS(?:TABLE)?|CONTINUE|CONVERT|CREATE|CROSS|CURRENT(?:_DATE|_TIME|_TIMESTAMP|_USER)?|CURSOR|CYCLE|DATA(?:BASES?)?|DATE(?:TIME)?|DAY|DBCC|DEALLOCATE|DEC|DECIMAL|DECLARE|DEFAULT|DEFINER|DELAYED|DELETE|DELIMITERS?|DENY|DESC|DESCRIBE|DETERMINISTIC|DISABLE|DISCARD|DISK|DISTINCT|DISTINCTROW|DISTRIBUTED|DO|DOUBLE|DROP|DUMMY|DUMP(?:FILE)?|DUPLICATE|ELSE(?:IF)?|ENABLE|ENCLOSED|END|ENGINE|ENUM|ERRLVL|ERRORS|ESCAPED?|EXCEPT|EXEC(?:UTE)?|EXISTS|EXIT|EXPLAIN|EXTENDED|FETCH|FIELDS|FILE|FILLFACTOR|FIRST|FIXED|FLOAT|FOLLOWING|FOR(?: EACH ROW)?|FORCE|FOREIGN|FREETEXT(?:TABLE)?|FROM|FULL|FUNCTION|GEOMETRY(?:COLLECTION)?|GLOBAL|GOTO|GRANT|GROUP|HANDLER|HASH|HAVING|HOLDLOCK|HOUR|IDENTITY(?:COL|_INSERT)?|IF|IGNORE|IMPORT|INDEX|INFILE|INNER|INNODB|INOUT|INSERT|INT|INTEGER|INTERSECT|INTERVAL|INTO|INVOKER|ISOLATION|ITERATE|JOIN|KEYS?|KILL|LANGUAGE|LAST|LEAVE|LEFT|LEVEL|LIMIT|LINENO|LINES|LINESTRING|LOAD|LOCAL|LOCK|LONG(?:BLOB|TEXT)|LOOP|MATCH(?:ED)?|MEDIUM(?:BLOB|INT|TEXT)|MERGE|MIDDLEINT|MINUTE|MODE|MODIFIES|MODIFY|MONTH|MULTI(?:LINESTRING|POINT|POLYGON)|NATIONAL|NATURAL|NCHAR|NEXT|NO|NONCLUSTERED|NULLIF|NUMERIC|OFF?|OFFSETS?|ON|OPEN(?:DATASOURCE|QUERY|ROWSET)?|OPTIMIZE|OPTION(?:ALLY)?|ORDER|OUT(?:ER|FILE)?|OVER|PARTIAL|PARTITION|PERCENT|PIVOT|PLAN|POINT|POLYGON|PRECEDING|PRECISION|PREPARE|PREV|PRIMARY|PRINT|PRIVILEGES|PROC(?:EDURE)?|PUBLIC|PURGE|QUICK|RAISERROR|READS?|REAL|RECONFIGURE|REFERENCES|RELEASE|RENAME|REPEAT(?:ABLE)?|REPLACE|REPLICATION|REQUIRE|RESIGNAL|RESTORE|RESTRICT|RETURN(?:ING|S)?|REVOKE|RIGHT|ROLLBACK|ROUTINE|ROW(?:COUNT|GUIDCOL|S)?|RTREE|RULE|SAVE(?:POINT)?|SCHEMA|SECOND|SELECT|SERIAL(?:IZABLE)?|SESSION(?:_USER)?|SET(?:USER)?|SHARE|SHOW|SHUTDOWN|SIMPLE|SMALLINT|SNAPSHOT|SOME|SONAME|SQL|START(?:ING)?|STATISTICS|STATUS|STRIPED|SYSTEM_USER|TABLES?|TABLESPACE|TEMP(?:ORARY|TABLE)?|TERMINATED|TEXT(?:SIZE)?|THEN|TIME(?:STAMP)?|TINY(?:BLOB|INT|TEXT)|TOP?|TRAN(?:SACTIONS?)?|TRIGGER|TRUNCATE|TSEQUAL|TYPES?|UNBOUNDED|UNCOMMITTED|UNDEFINED|UNION|UNIQUE|UNLOCK|UNPIVOT|UNSIGNED|UPDATE(?:TEXT)?|USAGE|USE|USER|USING|VALUES?|VAR(?:BINARY|CHAR|CHARACTER|YING)|VIEW|WAITFOR|WARNINGS|WHEN|WHERE|WHILE|WITH(?: ROLLUP|IN)?|WORK|WRITE(?:TEXT)?|YEAR)\b/i,boolean:/\b(?:FALSE|NULL|TRUE)\b/i,number:/\b0x[\da-f]+\b|\b\d+(?:\.\d*)?|\B\.\d+\b/i,operator:/[-+*\/=%^~]|&&?|\|\|?|!=?|<(?:=>?|<|>)?|>[>=]?|\b(?:AND|BETWEEN|DIV|ILIKE|IN|IS|LIKE|NOT|OR|REGEXP|RLIKE|SOUNDS LIKE|XOR)\b/i,punctuation:/[;[\]()`,.]/},function(e){var t=e.languages.javascript["template-string"],n=t.pattern.source,r=t.inside.interpolation,a=r.inside["interpolation-punctuation"],o=r.pattern.source;function i(t,r){if(e.languages[t])return{pattern:RegExp("((?:"+r+")\\s*)"+n),lookbehind:!0,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},"embedded-code":{pattern:/[\s\S]+/,alias:t}}}}function l(e,t){return"___"+t.toUpperCase()+"_"+e+"___"}function s(t,n,r){var a={code:t,grammar:n,language:r};return e.hooks.run("before-tokenize",a),a.tokens=e.tokenize(a.code,a.grammar),e.hooks.run("after-tokenize",a),a.tokens}function u(t){var n={};n["interpolation-punctuation"]=a;var o=e.tokenize(t,n);if(3===o.length){var i=[1,1];i.push.apply(i,s(o[1],e.languages.javascript,"javascript")),o.splice.apply(o,i)}return new e.Token("interpolation",o,r.alias,t)}function c(t,n,r){var a=e.tokenize(t,{interpolation:{pattern:RegExp(o),lookbehind:!0}}),i=0,c={},d=s(a.map((function(e){if("string"==typeof e)return e;for(var n,a=e.content;-1!==t.indexOf(n=l(i++,r)););return c[n]=a,n})).join(""),n,r),f=Object.keys(c);return i=0,function e(t){for(var n=0;n<t.length;n++){if(i>=f.length)return;var r=t[n];if("string"==typeof r||"string"==typeof r.content){var a=f[i],o="string"==typeof r?r:r.content,l=o.indexOf(a);if(-1!==l){++i;var s=o.substring(0,l),d=u(c[a]),p=o.substring(l+a.length),m=[];if(s&&m.push(s),m.push(d),p){var h=[p];e(h),m.push.apply(m,h)}"string"==typeof r?(t.splice.apply(t,[n,1].concat(m)),n+=m.length-1):r.content=m}}else{var g=r.content;Array.isArray(g)?e(g):e([g])}}}(d),new e.Token(r,d,"language-"+r,t)}e.languages.javascript["template-string"]=[i("css",/\b(?:styled(?:\([^)]*\))?(?:\s*\.\s*\w+(?:\([^)]*\))*)*|css(?:\s*\.\s*(?:global|resolve))?|createGlobalStyle|keyframes)/.source),i("html",/\bhtml|\.\s*(?:inner|outer)HTML\s*\+?=/.source),i("svg",/\bsvg/.source),i("markdown",/\b(?:markdown|md)/.source),i("graphql",/\b(?:gql|graphql(?:\s*\.\s*experimental)?)/.source),i("sql",/\bsql/.source),t].filter(Boolean);var d={javascript:!0,js:!0,typescript:!0,ts:!0,jsx:!0,tsx:!0};function f(e){return"string"==typeof e?e:Array.isArray(e)?e.map(f).join(""):f(e.content)}e.hooks.add("after-tokenize",(function(t){t.language in d&&function t(n){for(var r=0,a=n.length;r<a;r++){var o=n[r];if("string"!=typeof o){var i=o.content;if(Array.isArray(i))if("template-string"===o.type){var l=i[1];if(3===i.length&&"string"!=typeof l&&"embedded-code"===l.type){var s=f(l),u=l.alias,d=Array.isArray(u)?u[0]:u,p=e.languages[d];if(!p)continue;i[1]=c(s,p,d)}}else t(i);else"string"!=typeof i&&t([i])}}}(t.tokens)}))}(a),function(e){e.languages.typescript=e.languages.extend("javascript",{"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|type)\s+)(?!keyof\b)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?:\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?/,lookbehind:!0,greedy:!0,inside:null},builtin:/\b(?:Array|Function|Promise|any|boolean|console|never|number|string|symbol|unknown)\b/}),e.languages.typescript.keyword.push(/\b(?:abstract|declare|is|keyof|readonly|require)\b/,/\b(?:asserts|infer|interface|module|namespace|type)\b(?=\s*(?:[{_$a-zA-Z\xA0-\uFFFF]|$))/,/\btype\b(?=\s*(?:[\{*]|$))/),delete e.languages.typescript.parameter,delete e.languages.typescript["literal-property"];var t=e.languages.extend("typescript",{});delete t["class-name"],e.languages.typescript["class-name"].inside=t,e.languages.insertBefore("typescript","function",{decorator:{pattern:/@[$\w\xA0-\uFFFF]+/,inside:{at:{pattern:/^@/,alias:"operator"},function:/^[\s\S]+/}},"generic-function":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>(?=\s*\()/,greedy:!0,inside:{function:/^#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:t}}}}),e.languages.ts=e.languages.typescript}(a),function(e){function t(e,t){return RegExp(e.replace(/<ID>/g,(function(){return/(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/.source})),t)}e.languages.insertBefore("javascript","function-variable",{"method-variable":{pattern:RegExp("(\\.\\s*)"+e.languages.javascript["function-variable"].pattern.source),lookbehind:!0,alias:["function-variable","method","function","property-access"]}}),e.languages.insertBefore("javascript","function",{method:{pattern:RegExp("(\\.\\s*)"+e.languages.javascript.function.source),lookbehind:!0,alias:["function","property-access"]}}),e.languages.insertBefore("javascript","constant",{"known-class-name":[{pattern:/\b(?:(?:Float(?:32|64)|(?:Int|Uint)(?:8|16|32)|Uint8Clamped)?Array|ArrayBuffer|BigInt|Boolean|DataView|Date|Error|Function|Intl|JSON|(?:Weak)?(?:Map|Set)|Math|Number|Object|Promise|Proxy|Reflect|RegExp|String|Symbol|WebAssembly)\b/,alias:"class-name"},{pattern:/\b(?:[A-Z]\w*)Error\b/,alias:"class-name"}]}),e.languages.insertBefore("javascript","keyword",{imports:{pattern:t(/(\bimport\b\s*)(?:<ID>(?:\s*,\s*(?:\*\s*as\s+<ID>|\{[^{}]*\}))?|\*\s*as\s+<ID>|\{[^{}]*\})(?=\s*\bfrom\b)/.source),lookbehind:!0,inside:e.languages.javascript},exports:{pattern:t(/(\bexport\b\s*)(?:\*(?:\s*as\s+<ID>)?(?=\s*\bfrom\b)|\{[^{}]*\})/.source),lookbehind:!0,inside:e.languages.javascript}}),e.languages.javascript.keyword.unshift({pattern:/\b(?:as|default|export|from|import)\b/,alias:"module"},{pattern:/\b(?:await|break|catch|continue|do|else|finally|for|if|return|switch|throw|try|while|yield)\b/,alias:"control-flow"},{pattern:/\bnull\b/,alias:["null","nil"]},{pattern:/\bundefined\b/,alias:"nil"}),e.languages.insertBefore("javascript","operator",{spread:{pattern:/\.{3}/,alias:"operator"},arrow:{pattern:/=>/,alias:"operator"}}),e.languages.insertBefore("javascript","punctuation",{"property-access":{pattern:t(/(\.\s*)#?<ID>/.source),lookbehind:!0},"maybe-class-name":{pattern:/(^|[^$\w\xA0-\uFFFF])[A-Z][$\w\xA0-\uFFFF]+/,lookbehind:!0},dom:{pattern:/\b(?:document|(?:local|session)Storage|location|navigator|performance|window)\b/,alias:"variable"},console:{pattern:/\bconsole(?=\s*\.)/,alias:"class-name"}});for(var n=["function","function-variable","method","method-variable","property-access"],r=0;r<n.length;r++){var a=n[r],o=e.languages.javascript[a];"RegExp"===e.util.type(o)&&(o=e.languages.javascript[a]={pattern:o});var i=o.inside||{};o.inside=i,i["maybe-class-name"]=/^[A-Z][\s\S]*/}}(a),function(e){var t=e.util.clone(e.languages.javascript),n=/(?:\s|\/\/.*(?!.)|\/\*(?:[^*]|\*(?!\/))\*\/)/.source,r=/(?:\{(?:\{(?:\{[^{}]*\}|[^{}])*\}|[^{}])*\})/.source,a=/(?:\{<S>*\.{3}(?:[^{}]|<BRACES>)*\})/.source;function o(e,t){return e=e.replace(/<S>/g,(function(){return n})).replace(/<BRACES>/g,(function(){return r})).replace(/<SPREAD>/g,(function(){return a})),RegExp(e,t)}a=o(a).source,e.languages.jsx=e.languages.extend("markup",t),e.languages.jsx.tag.pattern=o(/<\/?(?:[\w.:-]+(?:<S>+(?:[\w.:$-]+(?:=(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s{'"/>=]+|<BRACES>))?|<SPREAD>))*<S>*\/?)?>/.source),e.languages.jsx.tag.inside.tag.pattern=/^<\/?[^\s>\/]*/,e.languages.jsx.tag.inside["attr-value"].pattern=/=(?!\{)(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s'">]+)/,e.languages.jsx.tag.inside.tag.inside["class-name"]=/^[A-Z]\w*(?:\.[A-Z]\w*)*$/,e.languages.jsx.tag.inside.comment=t.comment,e.languages.insertBefore("inside","attr-name",{spread:{pattern:o(/<SPREAD>/.source),inside:e.languages.jsx}},e.languages.jsx.tag),e.languages.insertBefore("inside","special-attr",{script:{pattern:o(/=<BRACES>/.source),alias:"language-javascript",inside:{"script-punctuation":{pattern:/^=(?=\{)/,alias:"punctuation"},rest:e.languages.jsx}}},e.languages.jsx.tag);var i=function(e){return e?"string"==typeof e?e:"string"==typeof e.content?e.content:e.content.map(i).join(""):""},l=function(t){for(var n=[],r=0;r<t.length;r++){var a=t[r],o=!1;if("string"!=typeof a&&("tag"===a.type&&a.content[0]&&"tag"===a.content[0].type?"</"===a.content[0].content[0].content?n.length>0&&n[n.length-1].tagName===i(a.content[0].content[1])&&n.pop():"/>"===a.content[a.content.length-1].content||n.push({tagName:i(a.content[0].content[1]),openedBraces:0}):n.length>0&&"punctuation"===a.type&&"{"===a.content?n[n.length-1].openedBraces++:n.length>0&&n[n.length-1].openedBraces>0&&"punctuation"===a.type&&"}"===a.content?n[n.length-1].openedBraces--:o=!0),(o||"string"==typeof a)&&n.length>0&&0===n[n.length-1].openedBraces){var s=i(a);r<t.length-1&&("string"==typeof t[r+1]||"plain-text"===t[r+1].type)&&(s+=i(t[r+1]),t.splice(r+1,1)),r>0&&("string"==typeof t[r-1]||"plain-text"===t[r-1].type)&&(s=i(t[r-1])+s,t.splice(r-1,1),r--),t[r]=new e.Token("plain-text",s,null,s)}a.content&&"string"!=typeof a.content&&l(a.content)}};e.hooks.add("after-tokenize",(function(e){"jsx"!==e.language&&"tsx"!==e.language||l(e.tokens)}))}(a),function(e){e.languages.diff={coord:[/^(?:\*{3}|-{3}|\+{3}).*$/m,/^@@.*@@$/m,/^\d.*$/m]};var t={"deleted-sign":"-","deleted-arrow":"<","inserted-sign":"+","inserted-arrow":">",unchanged:" ",diff:"!"};Object.keys(t).forEach((function(n){var r=t[n],a=[];/^\w+$/.test(n)||a.push(/\w+/.exec(n)[0]),"diff"===n&&a.push("bold"),e.languages.diff[n]={pattern:RegExp("^(?:["+r+"].*(?:\r\n?|\n|(?![\\s\\S])))+","m"),alias:a,inside:{line:{pattern:/(.)(?=[\s\S]).*(?:\r\n?|\n)?/,lookbehind:!0},prefix:{pattern:/[\s\S]/,alias:/\w+/.exec(n)[0]}}}})),Object.defineProperty(e.languages.diff,"PREFIXES",{value:t})}(a),a.languages.git={comment:/^#.*/m,deleted:/^[-\u2013].*/m,inserted:/^\+.*/m,string:/("|')(?:\\.|(?!\1)[^\\\r\n])*\1/,command:{pattern:/^.*\$ git .*$/m,inside:{parameter:/\s--?\w+/}},coord:/^@@.*@@$/m,"commit-sha1":/^commit \w{40}$/m},a.languages.go=a.languages.extend("clike",{string:{pattern:/(^|[^\\])"(?:\\.|[^"\\\r\n])*"|`[^`]*`/,lookbehind:!0,greedy:!0},keyword:/\b(?:break|case|chan|const|continue|default|defer|else|fallthrough|for|func|go(?:to)?|if|import|interface|map|package|range|return|select|struct|switch|type|var)\b/,boolean:/\b(?:_|false|iota|nil|true)\b/,number:[/\b0(?:b[01_]+|o[0-7_]+)i?\b/i,/\b0x(?:[a-f\d_]+(?:\.[a-f\d_]*)?|\.[a-f\d_]+)(?:p[+-]?\d+(?:_\d+)*)?i?(?!\w)/i,/(?:\b\d[\d_]*(?:\.[\d_]*)?|\B\.\d[\d_]*)(?:e[+-]?[\d_]+)?i?(?!\w)/i],operator:/[*\/%^!=]=?|\+[=+]?|-[=-]?|\|[=|]?|&(?:=|&|\^=?)?|>(?:>=?|=)?|<(?:<=?|=|-)?|:=|\.\.\./,builtin:/\b(?:append|bool|byte|cap|close|complex|complex(?:64|128)|copy|delete|error|float(?:32|64)|u?int(?:8|16|32|64)?|imag|len|make|new|panic|print(?:ln)?|real|recover|rune|string|uintptr)\b/}),a.languages.insertBefore("go","string",{char:{pattern:/'(?:\\.|[^'\\\r\n]){0,10}'/,greedy:!0}}),delete a.languages.go["class-name"],function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,a,o){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(a,(function(e){if("function"==typeof o&&!o(e))return e;for(var a,l=i.length;-1!==n.code.indexOf(a=t(r,l));)++l;return i[l]=e,a})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var a=0,o=Object.keys(n.tokenStack);!function i(l){for(var s=0;s<l.length&&!(a>=o.length);s++){var u=l[s];if("string"==typeof u||u.content&&"string"==typeof u.content){var c=o[a],d=n.tokenStack[c],f="string"==typeof u?u:u.content,p=t(r,c),m=f.indexOf(p);if(m>-1){++a;var h=f.substring(0,m),g=new e.Token(r,e.tokenize(d,n.grammar),"language-"+r,d),b=f.substring(m+p.length),v=[];h&&v.push.apply(v,i([h])),v.push(g),b&&v.push.apply(v,i([b])),"string"==typeof u?l.splice.apply(l,[s,1].concat(v)):u.content=v}}else u.content&&i(u.content)}return l}(n.tokens)}}}})}(a),function(e){e.languages.handlebars={comment:/\{\{![\s\S]*?\}\}/,delimiter:{pattern:/^\{\{\{?|\}\}\}?$/,alias:"punctuation"},string:/(["'])(?:\\.|(?!\1)[^\\\r\n])*\1/,number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee][+-]?\d+)?/,boolean:/\b(?:false|true)\b/,block:{pattern:/^(\s*(?:~\s*)?)[#\/]\S+?(?=\s*(?:~\s*)?$|\s)/,lookbehind:!0,alias:"keyword"},brackets:{pattern:/\[[^\]]+\]/,inside:{punctuation:/\[|\]/,variable:/[\s\S]+/}},punctuation:/[!"#%&':()*+,.\/;<=>@\[\\\]^`{|}~]/,variable:/[^!"#%&'()*+,\/;<=>@\[\\\]^`{|}~\s]+/},e.hooks.add("before-tokenize",(function(t){e.languages["markup-templating"].buildPlaceholders(t,"handlebars",/\{\{\{[\s\S]+?\}\}\}|\{\{[\s\S]+?\}\}/g)})),e.hooks.add("after-tokenize",(function(t){e.languages["markup-templating"].tokenizePlaceholders(t,"handlebars")})),e.languages.hbs=e.languages.handlebars}(a),a.languages.json={property:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?=\s*:)/,lookbehind:!0,greedy:!0},string:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?!\s*:)/,lookbehind:!0,greedy:!0},comment:{pattern:/\/\/.*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},number:/-?\b\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,punctuation:/[{}[\],]/,operator:/:/,boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"}},a.languages.webmanifest=a.languages.json,a.languages.less=a.languages.extend("css",{comment:[/\/\*[\s\S]*?\*\//,{pattern:/(^|[^\\])\/\/.*/,lookbehind:!0}],atrule:{pattern:/@[\w-](?:\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{punctuation:/[:()]/}},selector:{pattern:/(?:@\{[\w-]+\}|[^{};\s@])(?:@\{[\w-]+\}|\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};@\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{variable:/@+[\w-]+/}},property:/(?:@\{[\w-]+\}|[\w-])+(?:\+_?)?(?=\s*:)/,operator:/[+\-*\/]/}),a.languages.insertBefore("less","property",{variable:[{pattern:/@[\w-]+\s*:/,inside:{punctuation:/:/}},/@@?[\w-]+/],"mixin-usage":{pattern:/([{;]\s*)[.#](?!\d)[\w-].*?(?=[(;])/,lookbehind:!0,alias:"function"}}),a.languages.makefile={comment:{pattern:/(^|[^\\])#(?:\\(?:\r\n|[\s\S])|[^\\\r\n])*/,lookbehind:!0},string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"builtin-target":{pattern:/\.[A-Z][^:#=\s]+(?=\s*:(?!=))/,alias:"builtin"},target:{pattern:/^(?:[^:=\s]|[ \t]+(?![\s:]))+(?=\s*:(?!=))/m,alias:"symbol",inside:{variable:/\$+(?:(?!\$)[^(){}:#=\s]+|(?=[({]))/}},variable:/\$+(?:(?!\$)[^(){}:#=\s]+|\([@*%<^+?][DF]\)|(?=[({]))/,keyword:/-include\b|\b(?:define|else|endef|endif|export|ifn?def|ifn?eq|include|override|private|sinclude|undefine|unexport|vpath)\b/,function:{pattern:/(\()(?:abspath|addsuffix|and|basename|call|dir|error|eval|file|filter(?:-out)?|findstring|firstword|flavor|foreach|guile|if|info|join|lastword|load|notdir|or|origin|patsubst|realpath|shell|sort|strip|subst|suffix|value|warning|wildcard|word(?:list|s)?)(?=[ \t])/,lookbehind:!0},operator:/(?:::|[?:+!])?=|[|@]/,punctuation:/[:;(){}]/},a.languages.objectivec=a.languages.extend("c",{string:{pattern:/@?"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},keyword:/\b(?:asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|in|inline|int|long|register|return|self|short|signed|sizeof|static|struct|super|switch|typedef|typeof|union|unsigned|void|volatile|while)\b|(?:@interface|@end|@implementation|@protocol|@class|@public|@protected|@private|@property|@try|@catch|@finally|@throw|@synthesize|@dynamic|@selector)\b/,operator:/-[->]?|\+\+?|!=?|<<?=?|>>?=?|==?|&&?|\|\|?|[~^%?*\/@]/}),delete a.languages.objectivec["class-name"],a.languages.objc=a.languages.objectivec,a.languages.ocaml={comment:{pattern:/\(\*[\s\S]*?\*\)/,greedy:!0},char:{pattern:/'(?:[^\\\r\n']|\\(?:.|[ox]?[0-9a-f]{1,3}))'/i,greedy:!0},string:[{pattern:/"(?:\\(?:[\s\S]|\r\n)|[^\\\r\n"])*"/,greedy:!0},{pattern:/\{([a-z_]*)\|[\s\S]*?\|\1\}/,greedy:!0}],number:[/\b(?:0b[01][01_]*|0o[0-7][0-7_]*)\b/i,/\b0x[a-f0-9][a-f0-9_]*(?:\.[a-f0-9_]*)?(?:p[+-]?\d[\d_]*)?(?!\w)/i,/\b\d[\d_]*(?:\.[\d_]*)?(?:e[+-]?\d[\d_]*)?(?!\w)/i],directive:{pattern:/\B#\w+/,alias:"property"},label:{pattern:/\B~\w+/,alias:"property"},"type-variable":{pattern:/\B'\w+/,alias:"function"},variant:{pattern:/`\w+/,alias:"symbol"},keyword:/\b(?:as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|match|method|module|mutable|new|nonrec|object|of|open|private|rec|sig|struct|then|to|try|type|val|value|virtual|when|where|while|with)\b/,boolean:/\b(?:false|true)\b/,"operator-like-punctuation":{pattern:/\[[<>|]|[>|]\]|\{<|>\}/,alias:"punctuation"},operator:/\.[.~]|:[=>]|[=<>@^|&+\-*\/$%!?~][!$%&*+\-.\/:<=>?@^|~]*|\b(?:and|asr|land|lor|lsl|lsr|lxor|mod|or)\b/,punctuation:/;;|::|[(){}\[\].,:;#]|\b_\b/},a.languages.python={comment:{pattern:/(^|[^\\])#.*/,lookbehind:!0,greedy:!0},"string-interpolation":{pattern:/(?:f|fr|rf)(?:("""|''')[\s\S]*?\1|("|')(?:\\.|(?!\2)[^\\\r\n])*\2)/i,greedy:!0,inside:{interpolation:{pattern:/((?:^|[^{])(?:\{\{)*)\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}])+\})+\})+\}/,lookbehind:!0,inside:{"format-spec":{pattern:/(:)[^:(){}]+(?=\}$)/,lookbehind:!0},"conversion-option":{pattern:/![sra](?=[:}]$)/,alias:"punctuation"},rest:null}},string:/[\s\S]+/}},"triple-quoted-string":{pattern:/(?:[rub]|br|rb)?("""|''')[\s\S]*?\1/i,greedy:!0,alias:"string"},string:{pattern:/(?:[rub]|br|rb)?("|')(?:\\.|(?!\1)[^\\\r\n])*\1/i,greedy:!0},function:{pattern:/((?:^|\s)def[ \t]+)[a-zA-Z_]\w*(?=\s*\()/g,lookbehind:!0},"class-name":{pattern:/(\bclass\s+)\w+/i,lookbehind:!0},decorator:{pattern:/(^[\t ]*)@\w+(?:\.\w+)*/m,lookbehind:!0,alias:["annotation","punctuation"],inside:{punctuation:/\./}},keyword:/\b(?:_(?=\s*:)|and|as|assert|async|await|break|case|class|continue|def|del|elif|else|except|exec|finally|for|from|global|if|import|in|is|lambda|match|nonlocal|not|or|pass|print|raise|return|try|while|with|yield)\b/,builtin:/\b(?:__import__|abs|all|any|apply|ascii|basestring|bin|bool|buffer|bytearray|bytes|callable|chr|classmethod|cmp|coerce|compile|complex|delattr|dict|dir|divmod|enumerate|eval|execfile|file|filter|float|format|frozenset|getattr|globals|hasattr|hash|help|hex|id|input|int|intern|isinstance|issubclass|iter|len|list|locals|long|map|max|memoryview|min|next|object|oct|open|ord|pow|property|range|raw_input|reduce|reload|repr|reversed|round|set|setattr|slice|sorted|staticmethod|str|sum|super|tuple|type|unichr|unicode|vars|xrange|zip)\b/,boolean:/\b(?:False|None|True)\b/,number:/\b0(?:b(?:_?[01])+|o(?:_?[0-7])+|x(?:_?[a-f0-9])+)\b|(?:\b\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\B\.\d+(?:_\d+)*)(?:e[+-]?\d+(?:_\d+)*)?j?(?!\w)/i,operator:/[-+%=]=?|!=|:=|\*\*?=?|\/\/?=?|<[<=>]?|>[=>]?|[&|^~]/,punctuation:/[{}[\];(),.:]/},a.languages.python["string-interpolation"].inside.interpolation.inside.rest=a.languages.python,a.languages.py=a.languages.python,a.languages.reason=a.languages.extend("clike",{string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^\\\r\n"])*"/,greedy:!0},"class-name":/\b[A-Z]\w*/,keyword:/\b(?:and|as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|method|module|mutable|new|nonrec|object|of|open|or|private|rec|sig|struct|switch|then|to|try|type|val|virtual|when|while|with)\b/,operator:/\.{3}|:[:=]|\|>|->|=(?:==?|>)?|<=?|>=?|[|^?'#!~`]|[+\-*\/]\.?|\b(?:asr|land|lor|lsl|lsr|lxor|mod)\b/}),a.languages.insertBefore("reason","class-name",{char:{pattern:/'(?:\\x[\da-f]{2}|\\o[0-3][0-7][0-7]|\\\d{3}|\\.|[^'\\\r\n])'/,greedy:!0},constructor:/\b[A-Z]\w*\b(?!\s*\.)/,label:{pattern:/\b[a-z]\w*(?=::)/,alias:"symbol"}}),delete a.languages.reason.function,function(e){e.languages.sass=e.languages.extend("css",{comment:{pattern:/^([ \t]*)\/[\/*].*(?:(?:\r?\n|\r)\1[ \t].+)*/m,lookbehind:!0,greedy:!0}}),e.languages.insertBefore("sass","atrule",{"atrule-line":{pattern:/^(?:[ \t]*)[@+=].+/m,greedy:!0,inside:{atrule:/(?:@[\w-]+|[+=])/}}}),delete e.languages.sass.atrule;var t=/\$[-\w]+|#\{\$[-\w]+\}/,n=[/[+*\/%]|[=!]=|<=?|>=?|\b(?:and|not|or)\b/,{pattern:/(\s)-(?=\s)/,lookbehind:!0}];e.languages.insertBefore("sass","property",{"variable-line":{pattern:/^[ \t]*\$.+/m,greedy:!0,inside:{punctuation:/:/,variable:t,operator:n}},"property-line":{pattern:/^[ \t]*(?:[^:\s]+ *:.*|:[^:\s].*)/m,greedy:!0,inside:{property:[/[^:\s]+(?=\s*:)/,{pattern:/(:)[^:\s]+/,lookbehind:!0}],punctuation:/:/,variable:t,operator:n,important:e.languages.sass.important}}}),delete e.languages.sass.property,delete e.languages.sass.important,e.languages.insertBefore("sass","punctuation",{selector:{pattern:/^([ \t]*)\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*(?:,(?:\r?\n|\r)\1[ \t]+\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*)*/m,lookbehind:!0,greedy:!0}})}(a),a.languages.scss=a.languages.extend("css",{comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},atrule:{pattern:/@[\w-](?:\([^()]+\)|[^()\s]|\s+(?!\s))*?(?=\s+[{;])/,inside:{rule:/@[\w-]+/}},url:/(?:[-a-z]+-)?url(?=\()/i,selector:{pattern:/(?=\S)[^@;{}()]?(?:[^@;{}()\s]|\s+(?!\s)|#\{\$[-\w]+\})+(?=\s*\{(?:\}|\s|[^}][^:{}]*[:{][^}]))/,inside:{parent:{pattern:/&/,alias:"important"},placeholder:/%[-\w]+/,variable:/\$[-\w]+|#\{\$[-\w]+\}/}},property:{pattern:/(?:[-\w]|\$[-\w]|#\{\$[-\w]+\})+(?=\s*:)/,inside:{variable:/\$[-\w]+|#\{\$[-\w]+\}/}}}),a.languages.insertBefore("scss","atrule",{keyword:[/@(?:content|debug|each|else(?: if)?|extend|for|forward|function|if|import|include|mixin|return|use|warn|while)\b/i,{pattern:/( )(?:from|through)(?= )/,lookbehind:!0}]}),a.languages.insertBefore("scss","important",{variable:/\$[-\w]+|#\{\$[-\w]+\}/}),a.languages.insertBefore("scss","function",{"module-modifier":{pattern:/\b(?:as|hide|show|with)\b/i,alias:"keyword"},placeholder:{pattern:/%[-\w]+/,alias:"selector"},statement:{pattern:/\B!(?:default|optional)\b/i,alias:"keyword"},boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"},operator:{pattern:/(\s)(?:[-+*\/%]|[=!]=|<=?|>=?|and|not|or)(?=\s)/,lookbehind:!0}}),a.languages.scss.atrule.inside.rest=a.languages.scss,function(e){var t={pattern:/(\b\d+)(?:%|[a-z]+)/,lookbehind:!0},n={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0},r={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},url:{pattern:/\burl\((["']?).*?\1\)/i,greedy:!0},string:{pattern:/("|')(?:(?!\1)[^\\\r\n]|\\(?:\r\n|[\s\S]))*\1/,greedy:!0},interpolation:null,func:null,important:/\B!(?:important|optional)\b/i,keyword:{pattern:/(^|\s+)(?:(?:else|for|if|return|unless)(?=\s|$)|@[\w-]+)/,lookbehind:!0},hexcode:/#[\da-f]{3,6}/i,color:[/\b(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)\b/i,{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:t,number:n,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:t,boolean:/\b(?:false|true)\b/,operator:[/~|[+!\/%<>?=]=?|[-:]=|\*[*=]?|\.{2,3}|&&|\|\||\B-\B|\b(?:and|in|is(?: a| defined| not|nt)?|not|or)\b/],number:n,punctuation:/[{}()\[\];:,]/};r.interpolation={pattern:/\{[^\r\n}:]+\}/,alias:"variable",inside:{delimiter:{pattern:/^\{|\}$/,alias:"punctuation"},rest:r}},r.func={pattern:/[\w-]+\([^)]*\).*/,inside:{function:/^[^(]+/,rest:r}},e.languages.stylus={"atrule-declaration":{pattern:/(^[ \t]*)@.+/m,lookbehind:!0,inside:{atrule:/^@[\w-]+/,rest:r}},"variable-declaration":{pattern:/(^[ \t]*)[\w$-]+\s*.?=[ \t]*(?:\{[^{}]*\}|\S.*|$)/m,lookbehind:!0,inside:{variable:/^\S+/,rest:r}},statement:{pattern:/(^[ \t]*)(?:else|for|if|return|unless)[ \t].+/m,lookbehind:!0,inside:{keyword:/^\S+/,rest:r}},"property-declaration":{pattern:/((?:^|\{)([ \t]*))(?:[\w-]|\{[^}\r\n]+\})+(?:\s*:\s*|[ \t]+)(?!\s)[^{\r\n]*(?:;|[^{\r\n,]$(?!(?:\r?\n|\r)(?:\{|\2[ \t])))/m,lookbehind:!0,inside:{property:{pattern:/^[^\s:]+/,inside:{interpolation:r.interpolation}},rest:r}},selector:{pattern:/(^[ \t]*)(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)(?:(?:\r?\n|\r)(?:\1(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)))*(?:,$|\{|(?=(?:\r?\n|\r)(?:\{|\1[ \t])))/m,lookbehind:!0,inside:{interpolation:r.interpolation,comment:r.comment,punctuation:/[{},]/}},func:r.func,string:r.string,comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0,greedy:!0},interpolation:r.interpolation,punctuation:/[{}()\[\];:.]/}}(a),function(e){var t=e.util.clone(e.languages.typescript);e.languages.tsx=e.languages.extend("jsx",t),delete e.languages.tsx.parameter,delete e.languages.tsx["literal-property"];var n=e.languages.tsx.tag;n.pattern=RegExp(/(^|[^\w$]|(?=<\/))/.source+"(?:"+n.pattern.source+")",n.pattern.flags),n.lookbehind=!0}(a),a.languages.wasm={comment:[/\(;[\s\S]*?;\)/,{pattern:/;;.*/,greedy:!0}],string:{pattern:/"(?:\\[\s\S]|[^"\\])*"/,greedy:!0},keyword:[{pattern:/\b(?:align|offset)=/,inside:{operator:/=/}},{pattern:/\b(?:(?:f32|f64|i32|i64)(?:\.(?:abs|add|and|ceil|clz|const|convert_[su]\/i(?:32|64)|copysign|ctz|demote\/f64|div(?:_[su])?|eqz?|extend_[su]\/i32|floor|ge(?:_[su])?|gt(?:_[su])?|le(?:_[su])?|load(?:(?:8|16|32)_[su])?|lt(?:_[su])?|max|min|mul|neg?|nearest|or|popcnt|promote\/f32|reinterpret\/[fi](?:32|64)|rem_[su]|rot[lr]|shl|shr_[su]|sqrt|store(?:8|16|32)?|sub|trunc(?:_[su]\/f(?:32|64))?|wrap\/i64|xor))?|memory\.(?:grow|size))\b/,inside:{punctuation:/\./}},/\b(?:anyfunc|block|br(?:_if|_table)?|call(?:_indirect)?|data|drop|elem|else|end|export|func|get_(?:global|local)|global|if|import|local|loop|memory|module|mut|nop|offset|param|result|return|select|set_(?:global|local)|start|table|tee_local|then|type|unreachable)\b/],variable:/\$[\w!#$%&'*+\-./:<=>?@\\^`|~]+/,number:/[+-]?\b(?:\d(?:_?\d)*(?:\.\d(?:_?\d)*)?(?:[eE][+-]?\d(?:_?\d)*)?|0x[\da-fA-F](?:_?[\da-fA-F])*(?:\.[\da-fA-F](?:_?[\da-fA-D])*)?(?:[pP][+-]?\d(?:_?\d)*)?)\b|\binf\b|\bnan(?::0x[\da-fA-F](?:_?[\da-fA-D])*)?\b/,punctuation:/[()]/};const o=a},9901:e=>{e.exports&&(e.exports={core:{meta:{path:"components/prism-core.js",option:"mandatory"},core:"Core"},themes:{meta:{path:"themes/{id}.css",link:"index.html?theme={id}",exclusive:!0},prism:{title:"Default",option:"default"},"prism-dark":"Dark","prism-funky":"Funky","prism-okaidia":{title:"Okaidia",owner:"ocodia"},"prism-twilight":{title:"Twilight",owner:"remybach"},"prism-coy":{title:"Coy",owner:"tshedor"},"prism-solarizedlight":{title:"Solarized Light",owner:"hectormatos2011 "},"prism-tomorrow":{title:"Tomorrow Night",owner:"Rosey"}},languages:{meta:{path:"components/prism-{id}",noCSS:!0,examplesPath:"examples/prism-{id}",addCheckAll:!0},markup:{title:"Markup",alias:["html","xml","svg","mathml","ssml","atom","rss"],aliasTitles:{html:"HTML",xml:"XML",svg:"SVG",mathml:"MathML",ssml:"SSML",atom:"Atom",rss:"RSS"},option:"default"},css:{title:"CSS",option:"default",modify:"markup"},clike:{title:"C-like",option:"default"},javascript:{title:"JavaScript",require:"clike",modify:"markup",optional:"regex",alias:"js",option:"default"},abap:{title:"ABAP",owner:"dellagustin"},abnf:{title:"ABNF",owner:"RunDevelopment"},actionscript:{title:"ActionScript",require:"javascript",modify:"markup",owner:"Golmote"},ada:{title:"Ada",owner:"Lucretia"},agda:{title:"Agda",owner:"xy-ren"},al:{title:"AL",owner:"RunDevelopment"},antlr4:{title:"ANTLR4",alias:"g4",owner:"RunDevelopment"},apacheconf:{title:"Apache Configuration",owner:"GuiTeK"},apex:{title:"Apex",require:["clike","sql"],owner:"RunDevelopment"},apl:{title:"APL",owner:"ngn"},applescript:{title:"AppleScript",owner:"Golmote"},aql:{title:"AQL",owner:"RunDevelopment"},arduino:{title:"Arduino",require:"cpp",alias:"ino",owner:"dkern"},arff:{title:"ARFF",owner:"Golmote"},armasm:{title:"ARM Assembly",alias:"arm-asm",owner:"RunDevelopment"},arturo:{title:"Arturo",alias:"art",optional:["bash","css","javascript","markup","markdown","sql"],owner:"drkameleon"},asciidoc:{alias:"adoc",title:"AsciiDoc",owner:"Golmote"},aspnet:{title:"ASP.NET (C#)",require:["markup","csharp"],owner:"nauzilus"},asm6502:{title:"6502 Assembly",owner:"kzurawel"},asmatmel:{title:"Atmel AVR Assembly",owner:"cerkit"},autohotkey:{title:"AutoHotkey",owner:"aviaryan"},autoit:{title:"AutoIt",owner:"Golmote"},avisynth:{title:"AviSynth",alias:"avs",owner:"Zinfidel"},"avro-idl":{title:"Avro IDL",alias:"avdl",owner:"RunDevelopment"},awk:{title:"AWK",alias:"gawk",aliasTitles:{gawk:"GAWK"},owner:"RunDevelopment"},bash:{title:"Bash",alias:["sh","shell"],aliasTitles:{sh:"Shell",shell:"Shell"},owner:"zeitgeist87"},basic:{title:"BASIC",owner:"Golmote"},batch:{title:"Batch",owner:"Golmote"},bbcode:{title:"BBcode",alias:"shortcode",aliasTitles:{shortcode:"Shortcode"},owner:"RunDevelopment"},bbj:{title:"BBj",owner:"hyyan"},bicep:{title:"Bicep",owner:"johnnyreilly"},birb:{title:"Birb",require:"clike",owner:"Calamity210"},bison:{title:"Bison",require:"c",owner:"Golmote"},bnf:{title:"BNF",alias:"rbnf",aliasTitles:{rbnf:"RBNF"},owner:"RunDevelopment"},bqn:{title:"BQN",owner:"yewscion"},brainfuck:{title:"Brainfuck",owner:"Golmote"},brightscript:{title:"BrightScript",owner:"RunDevelopment"},bro:{title:"Bro",owner:"wayward710"},bsl:{title:"BSL (1C:Enterprise)",alias:"oscript",aliasTitles:{oscript:"OneScript"},owner:"Diversus23"},c:{title:"C",require:"clike",owner:"zeitgeist87"},csharp:{title:"C#",require:"clike",alias:["cs","dotnet"],owner:"mvalipour"},cpp:{title:"C++",require:"c",owner:"zeitgeist87"},cfscript:{title:"CFScript",require:"clike",alias:"cfc",owner:"mjclemente"},chaiscript:{title:"ChaiScript",require:["clike","cpp"],owner:"RunDevelopment"},cil:{title:"CIL",owner:"sbrl"},cilkc:{title:"Cilk/C",require:"c",alias:"cilk-c",owner:"OpenCilk"},cilkcpp:{title:"Cilk/C++",require:"cpp",alias:["cilk-cpp","cilk"],owner:"OpenCilk"},clojure:{title:"Clojure",owner:"troglotit"},cmake:{title:"CMake",owner:"mjrogozinski"},cobol:{title:"COBOL",owner:"RunDevelopment"},coffeescript:{title:"CoffeeScript",require:"javascript",alias:"coffee",owner:"R-osey"},concurnas:{title:"Concurnas",alias:"conc",owner:"jasontatton"},csp:{title:"Content-Security-Policy",owner:"ScottHelme"},cooklang:{title:"Cooklang",owner:"ahue"},coq:{title:"Coq",owner:"RunDevelopment"},crystal:{title:"Crystal",require:"ruby",owner:"MakeNowJust"},"css-extras":{title:"CSS Extras",require:"css",modify:"css",owner:"milesj"},csv:{title:"CSV",owner:"RunDevelopment"},cue:{title:"CUE",owner:"RunDevelopment"},cypher:{title:"Cypher",owner:"RunDevelopment"},d:{title:"D",require:"clike",owner:"Golmote"},dart:{title:"Dart",require:"clike",owner:"Golmote"},dataweave:{title:"DataWeave",owner:"machaval"},dax:{title:"DAX",owner:"peterbud"},dhall:{title:"Dhall",owner:"RunDevelopment"},diff:{title:"Diff",owner:"uranusjr"},django:{title:"Django/Jinja2",require:"markup-templating",alias:"jinja2",owner:"romanvm"},"dns-zone-file":{title:"DNS zone file",owner:"RunDevelopment",alias:"dns-zone"},docker:{title:"Docker",alias:"dockerfile",owner:"JustinBeckwith"},dot:{title:"DOT (Graphviz)",alias:"gv",optional:"markup",owner:"RunDevelopment"},ebnf:{title:"EBNF",owner:"RunDevelopment"},editorconfig:{title:"EditorConfig",owner:"osipxd"},eiffel:{title:"Eiffel",owner:"Conaclos"},ejs:{title:"EJS",require:["javascript","markup-templating"],owner:"RunDevelopment",alias:"eta",aliasTitles:{eta:"Eta"}},elixir:{title:"Elixir",owner:"Golmote"},elm:{title:"Elm",owner:"zwilias"},etlua:{title:"Embedded Lua templating",require:["lua","markup-templating"],owner:"RunDevelopment"},erb:{title:"ERB",require:["ruby","markup-templating"],owner:"Golmote"},erlang:{title:"Erlang",owner:"Golmote"},"excel-formula":{title:"Excel Formula",alias:["xlsx","xls"],owner:"RunDevelopment"},fsharp:{title:"F#",require:"clike",owner:"simonreynolds7"},factor:{title:"Factor",owner:"catb0t"},false:{title:"False",owner:"edukisto"},"firestore-security-rules":{title:"Firestore security rules",require:"clike",owner:"RunDevelopment"},flow:{title:"Flow",require:"javascript",owner:"Golmote"},fortran:{title:"Fortran",owner:"Golmote"},ftl:{title:"FreeMarker Template Language",require:"markup-templating",owner:"RunDevelopment"},gml:{title:"GameMaker Language",alias:"gamemakerlanguage",require:"clike",owner:"LiarOnce"},gap:{title:"GAP (CAS)",owner:"RunDevelopment"},gcode:{title:"G-code",owner:"RunDevelopment"},gdscript:{title:"GDScript",owner:"RunDevelopment"},gedcom:{title:"GEDCOM",owner:"Golmote"},gettext:{title:"gettext",alias:"po",owner:"RunDevelopment"},gherkin:{title:"Gherkin",owner:"hason"},git:{title:"Git",owner:"lgiraudel"},glsl:{title:"GLSL",require:"c",owner:"Golmote"},gn:{title:"GN",alias:"gni",owner:"RunDevelopment"},"linker-script":{title:"GNU Linker Script",alias:"ld",owner:"RunDevelopment"},go:{title:"Go",require:"clike",owner:"arnehormann"},"go-module":{title:"Go module",alias:"go-mod",owner:"RunDevelopment"},gradle:{title:"Gradle",require:"clike",owner:"zeabdelkhalek-badido18"},graphql:{title:"GraphQL",optional:"markdown",owner:"Golmote"},groovy:{title:"Groovy",require:"clike",owner:"robfletcher"},haml:{title:"Haml",require:"ruby",optional:["css","css-extras","coffeescript","erb","javascript","less","markdown","scss","textile"],owner:"Golmote"},handlebars:{title:"Handlebars",require:"markup-templating",alias:["hbs","mustache"],aliasTitles:{mustache:"Mustache"},owner:"Golmote"},haskell:{title:"Haskell",alias:"hs",owner:"bholst"},haxe:{title:"Haxe",require:"clike",optional:"regex",owner:"Golmote"},hcl:{title:"HCL",owner:"outsideris"},hlsl:{title:"HLSL",require:"c",owner:"RunDevelopment"},hoon:{title:"Hoon",owner:"matildepark"},http:{title:"HTTP",optional:["csp","css","hpkp","hsts","javascript","json","markup","uri"],owner:"danielgtaylor"},hpkp:{title:"HTTP Public-Key-Pins",owner:"ScottHelme"},hsts:{title:"HTTP Strict-Transport-Security",owner:"ScottHelme"},ichigojam:{title:"IchigoJam",owner:"BlueCocoa"},icon:{title:"Icon",owner:"Golmote"},"icu-message-format":{title:"ICU Message Format",owner:"RunDevelopment"},idris:{title:"Idris",alias:"idr",owner:"KeenS",require:"haskell"},ignore:{title:".ignore",owner:"osipxd",alias:["gitignore","hgignore","npmignore"],aliasTitles:{gitignore:".gitignore",hgignore:".hgignore",npmignore:".npmignore"}},inform7:{title:"Inform 7",owner:"Golmote"},ini:{title:"Ini",owner:"aviaryan"},io:{title:"Io",owner:"AlesTsurko"},j:{title:"J",owner:"Golmote"},java:{title:"Java",require:"clike",owner:"sherblot"},javadoc:{title:"JavaDoc",require:["markup","java","javadoclike"],modify:"java",optional:"scala",owner:"RunDevelopment"},javadoclike:{title:"JavaDoc-like",modify:["java","javascript","php"],owner:"RunDevelopment"},javastacktrace:{title:"Java stack trace",owner:"RunDevelopment"},jexl:{title:"Jexl",owner:"czosel"},jolie:{title:"Jolie",require:"clike",owner:"thesave"},jq:{title:"JQ",owner:"RunDevelopment"},jsdoc:{title:"JSDoc",require:["javascript","javadoclike","typescript"],modify:"javascript",optional:["actionscript","coffeescript"],owner:"RunDevelopment"},"js-extras":{title:"JS Extras",require:"javascript",modify:"javascript",optional:["actionscript","coffeescript","flow","n4js","typescript"],owner:"RunDevelopment"},json:{title:"JSON",alias:"webmanifest",aliasTitles:{webmanifest:"Web App Manifest"},owner:"CupOfTea696"},json5:{title:"JSON5",require:"json",owner:"RunDevelopment"},jsonp:{title:"JSONP",require:"json",owner:"RunDevelopment"},jsstacktrace:{title:"JS stack trace",owner:"sbrl"},"js-templates":{title:"JS Templates",require:"javascript",modify:"javascript",optional:["css","css-extras","graphql","markdown","markup","sql"],owner:"RunDevelopment"},julia:{title:"Julia",owner:"cdagnino"},keepalived:{title:"Keepalived Configure",owner:"dev-itsheng"},keyman:{title:"Keyman",owner:"mcdurdin"},kotlin:{title:"Kotlin",alias:["kt","kts"],aliasTitles:{kts:"Kotlin Script"},require:"clike",owner:"Golmote"},kumir:{title:"KuMir (\u041a\u0443\u041c\u0438\u0440)",alias:"kum",owner:"edukisto"},kusto:{title:"Kusto",owner:"RunDevelopment"},latex:{title:"LaTeX",alias:["tex","context"],aliasTitles:{tex:"TeX",context:"ConTeXt"},owner:"japborst"},latte:{title:"Latte",require:["clike","markup-templating","php"],owner:"nette"},less:{title:"Less",require:"css",optional:"css-extras",owner:"Golmote"},lilypond:{title:"LilyPond",require:"scheme",alias:"ly",owner:"RunDevelopment"},liquid:{title:"Liquid",require:"markup-templating",owner:"cinhtau"},lisp:{title:"Lisp",alias:["emacs","elisp","emacs-lisp"],owner:"JuanCaicedo"},livescript:{title:"LiveScript",owner:"Golmote"},llvm:{title:"LLVM IR",owner:"porglezomp"},log:{title:"Log file",optional:"javastacktrace",owner:"RunDevelopment"},lolcode:{title:"LOLCODE",owner:"Golmote"},lua:{title:"Lua",owner:"Golmote"},magma:{title:"Magma (CAS)",owner:"RunDevelopment"},makefile:{title:"Makefile",owner:"Golmote"},markdown:{title:"Markdown",require:"markup",optional:"yaml",alias:"md",owner:"Golmote"},"markup-templating":{title:"Markup templating",require:"markup",owner:"Golmote"},mata:{title:"Mata",owner:"RunDevelopment"},matlab:{title:"MATLAB",owner:"Golmote"},maxscript:{title:"MAXScript",owner:"RunDevelopment"},mel:{title:"MEL",owner:"Golmote"},mermaid:{title:"Mermaid",owner:"RunDevelopment"},metafont:{title:"METAFONT",owner:"LaeriExNihilo"},mizar:{title:"Mizar",owner:"Golmote"},mongodb:{title:"MongoDB",owner:"airs0urce",require:"javascript"},monkey:{title:"Monkey",owner:"Golmote"},moonscript:{title:"MoonScript",alias:"moon",owner:"RunDevelopment"},n1ql:{title:"N1QL",owner:"TMWilds"},n4js:{title:"N4JS",require:"javascript",optional:"jsdoc",alias:"n4jsd",owner:"bsmith-n4"},"nand2tetris-hdl":{title:"Nand To Tetris HDL",owner:"stephanmax"},naniscript:{title:"Naninovel Script",owner:"Elringus",alias:"nani"},nasm:{title:"NASM",owner:"rbmj"},neon:{title:"NEON",owner:"nette"},nevod:{title:"Nevod",owner:"nezaboodka"},nginx:{title:"nginx",owner:"volado"},nim:{title:"Nim",owner:"Golmote"},nix:{title:"Nix",owner:"Golmote"},nsis:{title:"NSIS",owner:"idleberg"},objectivec:{title:"Objective-C",require:"c",alias:"objc",owner:"uranusjr"},ocaml:{title:"OCaml",owner:"Golmote"},odin:{title:"Odin",owner:"edukisto"},opencl:{title:"OpenCL",require:"c",modify:["c","cpp"],owner:"Milania1"},openqasm:{title:"OpenQasm",alias:"qasm",owner:"RunDevelopment"},oz:{title:"Oz",owner:"Golmote"},parigp:{title:"PARI/GP",owner:"Golmote"},parser:{title:"Parser",require:"markup",owner:"Golmote"},pascal:{title:"Pascal",alias:"objectpascal",aliasTitles:{objectpascal:"Object Pascal"},owner:"Golmote"},pascaligo:{title:"Pascaligo",owner:"DefinitelyNotAGoat"},psl:{title:"PATROL Scripting Language",owner:"bertysentry"},pcaxis:{title:"PC-Axis",alias:"px",owner:"RunDevelopment"},peoplecode:{title:"PeopleCode",alias:"pcode",owner:"RunDevelopment"},perl:{title:"Perl",owner:"Golmote"},php:{title:"PHP",require:"markup-templating",owner:"milesj"},phpdoc:{title:"PHPDoc",require:["php","javadoclike"],modify:"php",owner:"RunDevelopment"},"php-extras":{title:"PHP Extras",require:"php",modify:"php",owner:"milesj"},"plant-uml":{title:"PlantUML",alias:"plantuml",owner:"RunDevelopment"},plsql:{title:"PL/SQL",require:"sql",owner:"Golmote"},powerquery:{title:"PowerQuery",alias:["pq","mscript"],owner:"peterbud"},powershell:{title:"PowerShell",owner:"nauzilus"},processing:{title:"Processing",require:"clike",owner:"Golmote"},prolog:{title:"Prolog",owner:"Golmote"},promql:{title:"PromQL",owner:"arendjr"},properties:{title:".properties",owner:"Golmote"},protobuf:{title:"Protocol Buffers",require:"clike",owner:"just-boris"},pug:{title:"Pug",require:["markup","javascript"],optional:["coffeescript","ejs","handlebars","less","livescript","markdown","scss","stylus","twig"],owner:"Golmote"},puppet:{title:"Puppet",owner:"Golmote"},pure:{title:"Pure",optional:["c","cpp","fortran"],owner:"Golmote"},purebasic:{title:"PureBasic",require:"clike",alias:"pbfasm",owner:"HeX0R101"},purescript:{title:"PureScript",require:"haskell",alias:"purs",owner:"sriharshachilakapati"},python:{title:"Python",alias:"py",owner:"multipetros"},qsharp:{title:"Q#",require:"clike",alias:"qs",owner:"fedonman"},q:{title:"Q (kdb+ database)",owner:"Golmote"},qml:{title:"QML",require:"javascript",owner:"RunDevelopment"},qore:{title:"Qore",require:"clike",owner:"temnroegg"},r:{title:"R",owner:"Golmote"},racket:{title:"Racket",require:"scheme",alias:"rkt",owner:"RunDevelopment"},cshtml:{title:"Razor C#",alias:"razor",require:["markup","csharp"],optional:["css","css-extras","javascript","js-extras"],owner:"RunDevelopment"},jsx:{title:"React JSX",require:["markup","javascript"],optional:["jsdoc","js-extras","js-templates"],owner:"vkbansal"},tsx:{title:"React TSX",require:["jsx","typescript"]},reason:{title:"Reason",require:"clike",owner:"Golmote"},regex:{title:"Regex",owner:"RunDevelopment"},rego:{title:"Rego",owner:"JordanSh"},renpy:{title:"Ren'py",alias:"rpy",owner:"HyuchiaDiego"},rescript:{title:"ReScript",alias:"res",owner:"vmarcosp"},rest:{title:"reST (reStructuredText)",owner:"Golmote"},rip:{title:"Rip",owner:"ravinggenius"},roboconf:{title:"Roboconf",owner:"Golmote"},robotframework:{title:"Robot Framework",alias:"robot",owner:"RunDevelopment"},ruby:{title:"Ruby",require:"clike",alias:"rb",owner:"samflores"},rust:{title:"Rust",owner:"Golmote"},sas:{title:"SAS",optional:["groovy","lua","sql"],owner:"Golmote"},sass:{title:"Sass (Sass)",require:"css",optional:"css-extras",owner:"Golmote"},scss:{title:"Sass (SCSS)",require:"css",optional:"css-extras",owner:"MoOx"},scala:{title:"Scala",require:"java",owner:"jozic"},scheme:{title:"Scheme",owner:"bacchus123"},"shell-session":{title:"Shell session",require:"bash",alias:["sh-session","shellsession"],owner:"RunDevelopment"},smali:{title:"Smali",owner:"RunDevelopment"},smalltalk:{title:"Smalltalk",owner:"Golmote"},smarty:{title:"Smarty",require:"markup-templating",optional:"php",owner:"Golmote"},sml:{title:"SML",alias:"smlnj",aliasTitles:{smlnj:"SML/NJ"},owner:"RunDevelopment"},solidity:{title:"Solidity (Ethereum)",alias:"sol",require:"clike",owner:"glachaud"},"solution-file":{title:"Solution file",alias:"sln",owner:"RunDevelopment"},soy:{title:"Soy (Closure Template)",require:"markup-templating",owner:"Golmote"},sparql:{title:"SPARQL",require:"turtle",owner:"Triply-Dev",alias:"rq"},"splunk-spl":{title:"Splunk SPL",owner:"RunDevelopment"},sqf:{title:"SQF: Status Quo Function (Arma 3)",require:"clike",owner:"RunDevelopment"},sql:{title:"SQL",owner:"multipetros"},squirrel:{title:"Squirrel",require:"clike",owner:"RunDevelopment"},stan:{title:"Stan",owner:"RunDevelopment"},stata:{title:"Stata Ado",require:["mata","java","python"],owner:"RunDevelopment"},iecst:{title:"Structured Text (IEC 61131-3)",owner:"serhioromano"},stylus:{title:"Stylus",owner:"vkbansal"},supercollider:{title:"SuperCollider",alias:"sclang",owner:"RunDevelopment"},swift:{title:"Swift",owner:"chrischares"},systemd:{title:"Systemd configuration file",owner:"RunDevelopment"},"t4-templating":{title:"T4 templating",owner:"RunDevelopment"},"t4-cs":{title:"T4 Text Templates (C#)",require:["t4-templating","csharp"],alias:"t4",owner:"RunDevelopment"},"t4-vb":{title:"T4 Text Templates (VB)",require:["t4-templating","vbnet"],owner:"RunDevelopment"},tap:{title:"TAP",owner:"isaacs",require:"yaml"},tcl:{title:"Tcl",owner:"PeterChaplin"},tt2:{title:"Template Toolkit 2",require:["clike","markup-templating"],owner:"gflohr"},textile:{title:"Textile",require:"markup",optional:"css",owner:"Golmote"},toml:{title:"TOML",owner:"RunDevelopment"},tremor:{title:"Tremor",alias:["trickle","troy"],owner:"darach",aliasTitles:{trickle:"trickle",troy:"troy"}},turtle:{title:"Turtle",alias:"trig",aliasTitles:{trig:"TriG"},owner:"jakubklimek"},twig:{title:"Twig",require:"markup-templating",owner:"brandonkelly"},typescript:{title:"TypeScript",require:"javascript",optional:"js-templates",alias:"ts",owner:"vkbansal"},typoscript:{title:"TypoScript",alias:"tsconfig",aliasTitles:{tsconfig:"TSConfig"},owner:"dkern"},unrealscript:{title:"UnrealScript",alias:["uscript","uc"],owner:"RunDevelopment"},uorazor:{title:"UO Razor Script",owner:"jaseowns"},uri:{title:"URI",alias:"url",aliasTitles:{url:"URL"},owner:"RunDevelopment"},v:{title:"V",require:"clike",owner:"taggon"},vala:{title:"Vala",require:"clike",optional:"regex",owner:"TemplarVolk"},vbnet:{title:"VB.Net",require:"basic",owner:"Bigsby"},velocity:{title:"Velocity",require:"markup",owner:"Golmote"},verilog:{title:"Verilog",owner:"a-rey"},vhdl:{title:"VHDL",owner:"a-rey"},vim:{title:"vim",owner:"westonganger"},"visual-basic":{title:"Visual Basic",alias:["vb","vba"],aliasTitles:{vba:"VBA"},owner:"Golmote"},warpscript:{title:"WarpScript",owner:"RunDevelopment"},wasm:{title:"WebAssembly",owner:"Golmote"},"web-idl":{title:"Web IDL",alias:"webidl",owner:"RunDevelopment"},wgsl:{title:"WGSL",owner:"Dr4gonthree"},wiki:{title:"Wiki markup",require:"markup",owner:"Golmote"},wolfram:{title:"Wolfram language",alias:["mathematica","nb","wl"],aliasTitles:{mathematica:"Mathematica",nb:"Mathematica Notebook"},owner:"msollami"},wren:{title:"Wren",owner:"clsource"},xeora:{title:"Xeora",require:"markup",alias:"xeoracube",aliasTitles:{xeoracube:"XeoraCube"},owner:"freakmaxi"},"xml-doc":{title:"XML doc (.net)",require:"markup",modify:["csharp","fsharp","vbnet"],owner:"RunDevelopment"},xojo:{title:"Xojo (REALbasic)",owner:"Golmote"},xquery:{title:"XQuery",require:"markup",owner:"Golmote"},yaml:{title:"YAML",alias:"yml",owner:"hason"},yang:{title:"YANG",owner:"RunDevelopment"},zig:{title:"Zig",owner:"RunDevelopment"}},plugins:{meta:{path:"plugins/{id}/prism-{id}",link:"plugins/{id}/"},"line-highlight":{title:"Line Highlight",description:"Highlights specific lines and/or line ranges."},"line-numbers":{title:"Line Numbers",description:"Line number at the beginning of code lines.",owner:"kuba-kubula"},"show-invisibles":{title:"Show Invisibles",description:"Show hidden characters such as tabs and line breaks.",optional:["autolinker","data-uri-highlight"]},autolinker:{title:"Autolinker",description:"Converts URLs and emails in code to clickable links. Parses Markdown links in comments."},wpd:{title:"WebPlatform Docs",description:'Makes tokens link to <a href="https://webplatform.github.io/docs/">WebPlatform.org documentation</a>. The links open in a new tab.'},"custom-class":{title:"Custom Class",description:"This plugin allows you to prefix Prism's default classes (<code>.comment</code> can become <code>.namespace--comment</code>) or replace them with your defined ones (like <code>.editor__comment</code>). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the <code>highlightAll</code> and <code>highlightAllUnder</code> methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},2885:(e,t,n)=>{const r=n(9901),a=n(9642),o=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...o,...Object.keys(Prism.languages)];a(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(6500).resolve(t)],delete Prism.languages[e],n(6500)(t),o.add(e)}))}i.silent=!1,e.exports=i},6726:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6726},6500:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6500},9642:e=>{"use strict";var t=function(){var e=function(){};function t(e,t){Array.isArray(e)?e.forEach(t):null!=e&&t(e,0)}function n(e){for(var t={},n=0,r=e.length;n<r;n++)t[e[n]]=!0;return t}function r(e){var n={},r=[];function a(r,o){if(!(r in n)){o.push(r);var i=o.indexOf(r);if(i<o.length-1)throw new Error("Circular dependency: "+o.slice(i).join(" -> "));var l={},s=e[r];if(s){function u(t){if(!(t in e))throw new Error(r+" depends on an unknown component "+t);if(!(t in l))for(var i in a(t,o),l[t]=!0,n[t])l[i]=!0}t(s.require,u),t(s.optional,u),t(s.modify,u)}n[r]=l,o.pop()}}return function(e){var t=n[e];return t||(a(e,r),t=n[e]),t}}function a(e){for(var t in e)return!0;return!1}return function(o,i,l){var s=function(e){var t={};for(var n in e){var r=e[n];for(var a in r)if("meta"!=a){var o=r[a];t[a]="string"==typeof o?{title:o}:o}}return t}(o),u=function(e){var n;return function(r){if(r in e)return r;if(!n)for(var a in n={},e){var o=e[a];t(o&&o.alias,(function(t){if(t in n)throw new Error(t+" cannot be alias for both "+a+" and "+n[t]);if(t in e)throw new Error(t+" cannot be alias of "+a+" because it is a component.");n[t]=a}))}return n[r]||r}}(s);i=i.map(u),l=(l||[]).map(u);var c=n(i),d=n(l);i.forEach((function e(n){var r=s[n];t(r&&r.require,(function(t){t in d||(c[t]=!0,e(t))}))}));for(var f,p=r(s),m=c;a(m);){for(var h in f={},m){var g=s[h];t(g&&g.modify,(function(e){e in d&&(f[e]=!0)}))}for(var b in d)if(!(b in c))for(var v in p(b))if(v in c){f[b]=!0;break}for(var y in m=f)c[y]=!0}var w={getIds:function(){var e=[];return w.load((function(t){e.push(t)})),e},load:function(t,n){return function(t,n,r,a){var o=a?a.series:void 0,i=a?a.parallel:e,l={},s={};function u(e){if(e in l)return l[e];s[e]=!0;var a,c=[];for(var d in t(e))d in n&&c.push(d);if(0===c.length)a=r(e);else{var f=i(c.map((function(e){var t=u(e);return delete s[e],t})));o?a=o(f,(function(){return r(e)})):r(e)}return l[e]=a}for(var c in n)u(c);var d=[];for(var f in s)d.push(l[f]);return i(d)}(p,c,t,n)}};return w}}();e.exports=t},2703:(e,t,n)=>{"use strict";var r=n(414);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,i){if(i!==r){var l=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw l.name="Invariant Violation",l}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},5697:(e,t,n)=>{e.exports=n(2703)()},414:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},4448:(e,t,n)=>{"use strict";var r=n(7294),a=n(7418),o=n(3840);function i(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(i(227));var l=new Set,s={};function u(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(s[e]=t,e=0;e<t.length;e++)l.add(t[e])}var d=!("undefined"==typeof window||void 0===window.document||void 0===window.document.createElement),f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p=Object.prototype.hasOwnProperty,m={},h={};function g(e,t,n,r,a,o,i){this.acceptsBooleans=2===t||3===t||4===t,this.attributeName=r,this.attributeNamespace=a,this.mustUseProperty=n,this.propertyName=e,this.type=t,this.sanitizeURL=o,this.removeEmptyString=i}var b={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach((function(e){b[e]=new g(e,0,!1,e,null,!1,!1)})),[["acceptCharset","accept-charset"],["className","class"],["htmlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];b[t]=new g(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){b[e]=new g(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach((function(e){b[e]=new g(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach((function(e){b[e]=new g(e,3,!1,e.toLowerCase(),null,!1,!1)})),["checked","multiple","muted","selected"].forEach((function(e){b[e]=new g(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){b[e]=new g(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){b[e]=new g(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((function(e){b[e]=new g(e,5,!1,e.toLowerCase(),null,!1,!1)}));var v=/[\-:]([a-z])/g;function y(e){return e[1].toUpperCase()}function w(e,t,n,r){var a=b.hasOwnProperty(t)?b[t]:null;(null!==a?0===a.type:!r&&(2<t.length&&("o"===t[0]||"O"===t[0])&&("n"===t[1]||"N"===t[1])))||(function(e,t,n,r){if(null==t||function(e,t,n,r){if(null!==n&&0===n.type)return!1;switch(typeof t){case"function":case"symbol":return!0;case"boolean":return!r&&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)||1>t}return!1}(t,n,a,r)&&(n=null),r||null===a?function(e){return!!p.call(h,e)||!p.call(m,e)&&(f.test(e)?h[e]=!0:(m[e]=!0,!1))}(t)&&(null===n?e.removeAttribute(t):e.setAttribute(t,""+n)):a.mustUseProperty?e[a.propertyName]=null===n?3!==a.type&&"":n:(t=a.attributeName,r=a.attributeNamespace,null===n?e.removeAttribute(t):(n=3===(a=a.type)||4===a&&!0===n?"":""+n,r?e.setAttributeNS(r,t,n):e.setAttribute(t,n))))}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-position overline-thickness paint-order panose-1 pointer-events rendering-intent shape-rendering stop-color stop-opacity strikethrough-position strikethrough-thickness stroke-dasharray stroke-dashoffset stroke-linecap stroke-linejoin stroke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole xlink:role xlink:show xlink:title xlink:type".split(" ").forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){b[e]=new g(e,1,!1,e.toLowerCase(),null,!1,!1)})),b.xlinkHref=new g("xlinkHref",1,!1,"xlink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){b[e]=new g(e,1,!1,e.toLowerCase(),null,!0,!0)}));var k=r.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,S=60103,E=60106,x=60107,T=60108,C=60114,_=60109,A=60110,L=60112,R=60113,P=60120,N=60115,O=60116,I=60121,D=60128,M=60129,B=60130,F=60131;if("function"==typeof Symbol&&Symbol.for){var j=Symbol.for;S=j("react.element"),E=j("react.portal"),x=j("react.fragment"),T=j("react.strict_mode"),C=j("react.profiler"),_=j("react.provider"),A=j("react.context"),L=j("react.forward_ref"),R=j("react.suspense"),P=j("react.suspense_list"),N=j("react.memo"),O=j("react.lazy"),I=j("react.block"),j("react.scope"),D=j("react.opaque.id"),M=j("react.debug_trace_mode"),B=j("react.offscreen"),F=j("react.legacy_hidden")}var z,U="function"==typeof Symbol&&Symbol.iterator;function $(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=U&&e[U]||e["@@iterator"])?e:null}function q(e){if(void 0===z)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);z=t&&t[1]||""}return"\n"+z+e}var H=!1;function G(e,t){if(!e||H)return"";H=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.construct(t,[])}catch(s){var r=s}Reflect.construct(e,[],t)}else{try{t.call()}catch(s){r=s}e.call(t.prototype)}else{try{throw Error()}catch(s){r=s}e()}}catch(s){if(s&&r&&"string"==typeof s.stack){for(var a=s.stack.split("\n"),o=r.stack.split("\n"),i=a.length-1,l=o.length-1;1<=i&&0<=l&&a[i]!==o[l];)l--;for(;1<=i&&0<=l;i--,l--)if(a[i]!==o[l]){if(1!==i||1!==l)do{if(i--,0>--l||a[i]!==o[l])return"\n"+a[i].replace(" at new "," at ")}while(1<=i&&0<=l);break}}}finally{H=!1,Error.prepareStackTrace=n}return(e=e?e.displayName||e.name:"")?q(e):""}function Z(e){switch(e.tag){case 5:return q(e.type);case 16:return q("Lazy");case 13:return q("Suspense");case 19:return q("SuspenseList");case 0:case 2:case 15:return e=G(e.type,!1);case 11:return e=G(e.type.render,!1);case 22:return e=G(e.type._render,!1);case 1:return e=G(e.type,!0);default:return""}}function V(e){if(null==e)return null;if("function"==typeof e)return e.displayName||e.name||null;if("string"==typeof e)return e;switch(e){case x:return"Fragment";case E:return"Portal";case C:return"Profiler";case T:return"StrictMode";case R:return"Suspense";case P:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case A:return(e.displayName||"Context")+".Consumer";case _:return(e._context.displayName||"Context")+".Provider";case L:var t=e.render;return t=t.displayName||t.name||"",e.displayName||(""!==t?"ForwardRef("+t+")":"ForwardRef");case N:return V(e.type);case I:return V(e._render);case O:t=e._payload,e=e._init;try{return V(e(t))}catch(n){}}return null}function W(e){switch(typeof e){case"boolean":case"number":case"object":case"string":case"undefined":return e;default:return""}}function K(e){var t=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===t||"radio"===t)}function Y(e){e._valueTracker||(e._valueTracker=function(e){var t=K(e)?"checked":"value",n=Object.getOwnPropertyDescriptor(e.constructor.prototype,t),r=""+e[t];if(!e.hasOwnProperty(t)&&void 0!==n&&"function"==typeof n.get&&"function"==typeof n.set){var a=n.get,o=n.set;return Object.defineProperty(e,t,{configurable:!0,get:function(){return a.call(this)},set:function(e){r=""+e,o.call(this,e)}}),Object.defineProperty(e,t,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[t]}}}}(e))}function Q(e){if(!e)return!1;var t=e._valueTracker;if(!t)return!0;var n=t.getValue(),r="";return e&&(r=K(e)?e.checked?"true":"false":e.value),(e=r)!==n&&(t.setValue(e),!0)}function X(e){if(void 0===(e=e||("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement||e.body}catch(t){return e.body}}function J(e,t){var n=t.checked;return a({},t,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=n?n:e._wrapperState.initialChecked})}function ee(e,t){var n=null==t.defaultValue?"":t.defaultValue,r=null!=t.checked?t.checked:t.defaultChecked;n=W(null!=t.value?t.value:n),e._wrapperState={initialChecked:r,initialValue:n,controlled:"checkbox"===t.type||"radio"===t.type?null!=t.checked:null!=t.value}}function te(e,t){null!=(t=t.checked)&&w(e,"checked",t,!1)}function ne(e,t){te(e,t);var n=W(t.value),r=t.type;if(null!=n)"number"===r?(0===n&&""===e.value||e.value!=n)&&(e.value=""+n):e.value!==""+n&&(e.value=""+n);else if("submit"===r||"reset"===r)return void e.removeAttribute("value");t.hasOwnProperty("value")?ae(e,t.type,n):t.hasOwnProperty("defaultValue")&&ae(e,t.type,W(t.defaultValue)),null==t.checked&&null!=t.defaultChecked&&(e.defaultChecked=!!t.defaultChecked)}function re(e,t,n){if(t.hasOwnProperty("value")||t.hasOwnProperty("defaultValue")){var r=t.type;if(!("submit"!==r&&"reset"!==r||void 0!==t.value&&null!==t.value))return;t=""+e._wrapperState.initialValue,n||t===e.value||(e.value=t),e.defaultValue=t}""!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function ae(e,t,n){"number"===t&&X(e.ownerDocument)===e||(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultValue=""+n))}function oe(e,t){return e=a({children:void 0},t),(t=function(e){var t="";return r.Children.forEach(e,(function(e){null!=e&&(t+=e)})),t}(t.children))&&(e.children=t),e}function ie(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a<n.length;a++)t["$"+n[a]]=!0;for(n=0;n<e.length;n++)a=t.hasOwnProperty("$"+e[n].value),e[n].selected!==a&&(e[n].selected=a),a&&r&&(e[n].defaultSelected=!0)}else{for(n=""+W(n),t=null,a=0;a<e.length;a++){if(e[a].value===n)return e[a].selected=!0,void(r&&(e[a].defaultSelected=!0));null!==t||e[a].disabled||(t=e[a])}null!==t&&(t.selected=!0)}}function le(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(i(91));return a({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initialValue})}function se(e,t){var n=t.value;if(null==n){if(n=t.children,t=t.defaultValue,null!=n){if(null!=t)throw Error(i(92));if(Array.isArray(n)){if(!(1>=n.length))throw Error(i(93));n=n[0]}t=n}null==t&&(t=""),n=t}e._wrapperState={initialValue:W(n)}}function ue(e,t){var n=W(t.value),r=W(t.defaultValue);null!=n&&((n=""+n)!==e.value&&(e.value=n),null==t.defaultValue&&e.defaultValue!==n&&(e.defaultValue=n)),null!=r&&(e.defaultValue=""+r)}function ce(e){var t=e.textContent;t===e._wrapperState.initialValue&&""!==t&&null!==t&&(e.value=t)}var de="http://www.w3.org/1999/xhtml",fe="http://www.w3.org/2000/svg";function pe(e){switch(e){case"svg":return"http://www.w3.org/2000/svg";case"math":return"http://www.w3.org/1998/Math/MathML";default:return"http://www.w3.org/1999/xhtml"}}function me(e,t){return null==e||"http://www.w3.org/1999/xhtml"===e?pe(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var he,ge,be=(ge=function(e,t){if(e.namespaceURI!==fe||"innerHTML"in e)e.innerHTML=t;else{for((he=he||document.createElement("div")).innerHTML="<svg>"+t.valueOf().toString()+"</svg>",t=he.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function ve(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var ye={animationIterationCount:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,columnCount:!0,columns:!0,flex:!0,flexGrow:!0,flexPositive:!0,flexShrink:!0,flexNegative:!0,flexOrder:!0,gridArea:!0,gridRow:!0,gridRowEnd:!0,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},we=["Webkit","ms","Moz","O"];function ke(e,t,n){return null==t||"boolean"==typeof t||""===t?"":n||"number"!=typeof t||0===t||ye.hasOwnProperty(e)&&ye[e]?(""+t).trim():t+"px"}function Se(e,t){for(var n in e=e.style,t)if(t.hasOwnProperty(n)){var r=0===n.indexOf("--"),a=ke(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,a):e[n]=a}}Object.keys(ye).forEach((function(e){we.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),ye[t]=ye[e]}))}));var Ee=a({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function xe(e,t){if(t){if(Ee[e]&&(null!=t.children||null!=t.dangerouslySetInnerHTML))throw Error(i(137,e));if(null!=t.dangerouslySetInnerHTML){if(null!=t.children)throw Error(i(60));if("object"!=typeof t.dangerouslySetInnerHTML||!("__html"in t.dangerouslySetInnerHTML))throw Error(i(61))}if(null!=t.style&&"object"!=typeof t.style)throw Error(i(62))}}function Te(e,t){if(-1===e.indexOf("-"))return"string"==typeof t.is;switch(e){case"annotation-xml":case"color-profile":case"font-face":case"font-face-src":case"font-face-uri":case"font-face-format":case"font-face-name":case"missing-glyph":return!1;default:return!0}}function Ce(e){return(e=e.target||e.srcElement||window).correspondingUseElement&&(e=e.correspondingUseElement),3===e.nodeType?e.parentNode:e}var _e=null,Ae=null,Le=null;function Re(e){if(e=ra(e)){if("function"!=typeof _e)throw Error(i(280));var t=e.stateNode;t&&(t=oa(t),_e(e.stateNode,e.type,t))}}function Pe(e){Ae?Le?Le.push(e):Le=[e]:Ae=e}function Ne(){if(Ae){var e=Ae,t=Le;if(Le=Ae=null,Re(e),t)for(e=0;e<t.length;e++)Re(t[e])}}function Oe(e,t){return e(t)}function Ie(e,t,n,r,a){return e(t,n,r,a)}function De(){}var Me=Oe,Be=!1,Fe=!1;function je(){null===Ae&&null===Le||(De(),Ne())}function ze(e,t){var n=e.stateNode;if(null===n)return null;var r=oa(n);if(null===r)return null;n=r[t];e:switch(t){case"onClick":case"onClickCapture":case"onDoubleClick":case"onDoubleClickCapture":case"onMouseDown":case"onMouseDownCapture":case"onMouseMove":case"onMouseMoveCapture":case"onMouseUp":case"onMouseUpCapture":case"onMouseEnter":(r=!r.disabled)||(r=!("button"===(e=e.type)||"input"===e||"select"===e||"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!=typeof n)throw Error(i(231,t,typeof n));return n}var Ue=!1;if(d)try{var $e={};Object.defineProperty($e,"passive",{get:function(){Ue=!0}}),window.addEventListener("test",$e,$e),window.removeEventListener("test",$e,$e)}catch(ge){Ue=!1}function qe(e,t,n,r,a,o,i,l,s){var u=Array.prototype.slice.call(arguments,3);try{t.apply(n,u)}catch(c){this.onError(c)}}var He=!1,Ge=null,Ze=!1,Ve=null,We={onError:function(e){He=!0,Ge=e}};function Ke(e,t,n,r,a,o,i,l,s){He=!1,Ge=null,qe.apply(We,arguments)}function Ye(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!=(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Qe(e){if(13===e.tag){var t=e.memoizedState;if(null===t&&(null!==(e=e.alternate)&&(t=e.memoizedState)),null!==t)return t.dehydrated}return null}function Xe(e){if(Ye(e)!==e)throw Error(i(188))}function Je(e){if(e=function(e){var t=e.alternate;if(!t){if(null===(t=Ye(e)))throw Error(i(188));return t!==e?null:e}for(var n=e,r=t;;){var a=n.return;if(null===a)break;var o=a.alternate;if(null===o){if(null!==(r=a.return)){n=r;continue}break}if(a.child===o.child){for(o=a.child;o;){if(o===n)return Xe(a),e;if(o===r)return Xe(a),t;o=o.sibling}throw Error(i(188))}if(n.return!==r.return)n=a,r=o;else{for(var l=!1,s=a.child;s;){if(s===n){l=!0,n=a,r=o;break}if(s===r){l=!0,r=a,n=o;break}s=s.sibling}if(!l){for(s=o.child;s;){if(s===n){l=!0,n=o,r=a;break}if(s===r){l=!0,r=o,n=a;break}s=s.sibling}if(!l)throw Error(i(189))}}if(n.alternate!==r)throw Error(i(190))}if(3!==n.tag)throw Error(i(188));return n.stateNode.current===n?e:t}(e),!e)return null;for(var t=e;;){if(5===t.tag||6===t.tag)return t;if(t.child)t.child.return=t,t=t.child;else{if(t===e)break;for(;!t.sibling;){if(!t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}}return null}function et(e,t){for(var n=e.alternate;null!==t;){if(t===e||t===n)return!0;t=t.return}return!1}var tt,nt,rt,at,ot=!1,it=[],lt=null,st=null,ut=null,ct=new Map,dt=new Map,ft=[],pt="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend dragstart drop compositionend compositionstart keydown keypress keyup input textInput copy cut paste click change contextmenu reset submit".split(" ");function mt(e,t,n,r,a){return{blockedOn:e,domEventName:t,eventSystemFlags:16|n,nativeEvent:a,targetContainers:[r]}}function ht(e,t){switch(e){case"focusin":case"focusout":lt=null;break;case"dragenter":case"dragleave":st=null;break;case"mouseover":case"mouseout":ut=null;break;case"pointerover":case"pointerout":ct.delete(t.pointerId);break;case"gotpointercapture":case"lostpointercapture":dt.delete(t.pointerId)}}function gt(e,t,n,r,a,o){return null===e||e.nativeEvent!==o?(e=mt(t,n,r,a,o),null!==t&&(null!==(t=ra(t))&&nt(t)),e):(e.eventSystemFlags|=r,t=e.targetContainers,null!==a&&-1===t.indexOf(a)&&t.push(a),e)}function bt(e){var t=na(e.target);if(null!==t){var n=Ye(t);if(null!==n)if(13===(t=n.tag)){if(null!==(t=Qe(n)))return e.blockedOn=t,void at(e.lanePriority,(function(){o.unstable_runWithPriority(e.priority,(function(){rt(n)}))}))}else if(3===t&&n.stateNode.hydrate)return void(e.blockedOn=3===n.tag?n.stateNode.containerInfo:null)}e.blockedOn=null}function vt(e){if(null!==e.blockedOn)return!1;for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n)return null!==(t=ra(n))&&nt(t),e.blockedOn=n,!1;t.shift()}return!0}function yt(e,t,n){vt(e)&&n.delete(t)}function wt(){for(ot=!1;0<it.length;){var e=it[0];if(null!==e.blockedOn){null!==(e=ra(e.blockedOn))&&tt(e);break}for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n){e.blockedOn=n;break}t.shift()}null===e.blockedOn&&it.shift()}null!==lt&&vt(lt)&&(lt=null),null!==st&&vt(st)&&(st=null),null!==ut&&vt(ut)&&(ut=null),ct.forEach(yt),dt.forEach(yt)}function kt(e,t){e.blockedOn===t&&(e.blockedOn=null,ot||(ot=!0,o.unstable_scheduleCallback(o.unstable_NormalPriority,wt)))}function St(e){function t(t){return kt(t,e)}if(0<it.length){kt(it[0],e);for(var n=1;n<it.length;n++){var r=it[n];r.blockedOn===e&&(r.blockedOn=null)}}for(null!==lt&&kt(lt,e),null!==st&&kt(st,e),null!==ut&&kt(ut,e),ct.forEach(t),dt.forEach(t),n=0;n<ft.length;n++)(r=ft[n]).blockedOn===e&&(r.blockedOn=null);for(;0<ft.length&&null===(n=ft[0]).blockedOn;)bt(n),null===n.blockedOn&&ft.shift()}function Et(e,t){var n={};return n[e.toLowerCase()]=t.toLowerCase(),n["Webkit"+e]="webkit"+t,n["Moz"+e]="moz"+t,n}var xt={animationend:Et("Animation","AnimationEnd"),animationiteration:Et("Animation","AnimationIteration"),animationstart:Et("Animation","AnimationStart"),transitionend:Et("Transition","TransitionEnd")},Tt={},Ct={};function _t(e){if(Tt[e])return Tt[e];if(!xt[e])return e;var t,n=xt[e];for(t in n)if(n.hasOwnProperty(t)&&t in Ct)return Tt[e]=n[t];return e}d&&(Ct=document.createElement("div").style,"AnimationEvent"in window||(delete xt.animationend.animation,delete xt.animationiteration.animation,delete xt.animationstart.animation),"TransitionEvent"in window||delete xt.transitionend.transition);var At=_t("animationend"),Lt=_t("animationiteration"),Rt=_t("animationstart"),Pt=_t("transitionend"),Nt=new Map,Ot=new Map,It=["abort","abort",At,"animationEnd",Lt,"animationIteration",Rt,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange","durationChange","emptied","emptied","encrypted","encrypted","ended","ended","error","error","gotpointercapture","gotPointerCapture","load","load","loadeddata","loadedData","loadedmetadata","loadedMetadata","loadstart","loadStart","lostpointercapture","lostPointerCapture","playing","playing","progress","progress","seeking","seeking","stalled","stalled","suspend","suspend","timeupdate","timeUpdate",Pt,"transitionEnd","waiting","waiting"];function Dt(e,t){for(var n=0;n<e.length;n+=2){var r=e[n],a=e[n+1];a="on"+(a[0].toUpperCase()+a.slice(1)),Ot.set(r,t),Nt.set(r,a),u(a,[r])}}(0,o.unstable_now)();var Mt=8;function Bt(e){if(0!=(1&e))return Mt=15,1;if(0!=(2&e))return Mt=14,2;if(0!=(4&e))return Mt=13,4;var t=24&e;return 0!==t?(Mt=12,t):0!=(32&e)?(Mt=11,32):0!==(t=192&e)?(Mt=10,t):0!=(256&e)?(Mt=9,256):0!==(t=3584&e)?(Mt=8,t):0!=(4096&e)?(Mt=7,4096):0!==(t=4186112&e)?(Mt=6,t):0!==(t=62914560&e)?(Mt=5,t):67108864&e?(Mt=4,67108864):0!=(134217728&e)?(Mt=3,134217728):0!==(t=805306368&e)?(Mt=2,t):0!=(1073741824&e)?(Mt=1,1073741824):(Mt=8,e)}function Ft(e,t){var n=e.pendingLanes;if(0===n)return Mt=0;var r=0,a=0,o=e.expiredLanes,i=e.suspendedLanes,l=e.pingedLanes;if(0!==o)r=o,a=Mt=15;else if(0!==(o=134217727&n)){var s=o&~i;0!==s?(r=Bt(s),a=Mt):0!==(l&=o)&&(r=Bt(l),a=Mt)}else 0!==(o=n&~i)?(r=Bt(o),a=Mt):0!==l&&(r=Bt(l),a=Mt);if(0===r)return 0;if(r=n&((0>(r=31-Ht(r))?0:1<<r)<<1)-1,0!==t&&t!==r&&0==(t&i)){if(Bt(t),a<=Mt)return t;Mt=a}if(0!==(t=e.entangledLanes))for(e=e.entanglements,t&=r;0<t;)a=1<<(n=31-Ht(t)),r|=e[n],t&=~a;return r}function jt(e){return 0!==(e=-1073741825&e.pendingLanes)?e:1073741824&e?1073741824:0}function zt(e,t){switch(e){case 15:return 1;case 14:return 2;case 12:return 0===(e=Ut(24&~t))?zt(10,t):e;case 10:return 0===(e=Ut(192&~t))?zt(8,t):e;case 8:return 0===(e=Ut(3584&~t))&&(0===(e=Ut(4186112&~t))&&(e=512)),e;case 2:return 0===(t=Ut(805306368&~t))&&(t=268435456),t}throw Error(i(358,e))}function Ut(e){return e&-e}function $t(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function qt(e,t,n){e.pendingLanes|=t;var r=t-1;e.suspendedLanes&=r,e.pingedLanes&=r,(e=e.eventTimes)[t=31-Ht(t)]=n}var Ht=Math.clz32?Math.clz32:function(e){return 0===e?32:31-(Gt(e)/Zt|0)|0},Gt=Math.log,Zt=Math.LN2;var Vt=o.unstable_UserBlockingPriority,Wt=o.unstable_runWithPriority,Kt=!0;function Yt(e,t,n,r){Be||De();var a=Xt,o=Be;Be=!0;try{Ie(a,e,t,n,r)}finally{(Be=o)||je()}}function Qt(e,t,n,r){Wt(Vt,Xt.bind(null,e,t,n,r))}function Xt(e,t,n,r){var a;if(Kt)if((a=0==(4&t))&&0<it.length&&-1<pt.indexOf(e))e=mt(null,e,t,n,r),it.push(e);else{var o=Jt(e,t,n,r);if(null===o)a&&ht(e,r);else{if(a){if(-1<pt.indexOf(e))return e=mt(o,e,t,n,r),void it.push(e);if(function(e,t,n,r,a){switch(t){case"focusin":return lt=gt(lt,e,t,n,r,a),!0;case"dragenter":return st=gt(st,e,t,n,r,a),!0;case"mouseover":return ut=gt(ut,e,t,n,r,a),!0;case"pointerover":var o=a.pointerId;return ct.set(o,gt(ct.get(o)||null,e,t,n,r,a)),!0;case"gotpointercapture":return o=a.pointerId,dt.set(o,gt(dt.get(o)||null,e,t,n,r,a)),!0}return!1}(o,e,t,n,r))return;ht(e,r)}Dr(e,t,r,null,n)}}}function Jt(e,t,n,r){var a=Ce(r);if(null!==(a=na(a))){var o=Ye(a);if(null===o)a=null;else{var i=o.tag;if(13===i){if(null!==(a=Qe(o)))return a;a=null}else if(3===i){if(o.stateNode.hydrate)return 3===o.tag?o.stateNode.containerInfo:null;a=null}else o!==a&&(a=null)}}return Dr(e,t,r,a,n),null}var en=null,tn=null,nn=null;function rn(){if(nn)return nn;var e,t,n=tn,r=n.length,a="value"in en?en.value:en.textContent,o=a.length;for(e=0;e<r&&n[e]===a[e];e++);var i=r-e;for(t=1;t<=i&&n[r-t]===a[o-t];t++);return nn=a.slice(e,1<t?1-t:void 0)}function an(e){var t=e.keyCode;return"charCode"in e?0===(e=e.charCode)&&13===t&&(e=13):e=t,10===e&&(e=13),32<=e||13===e?e:0}function on(){return!0}function ln(){return!1}function sn(e){function t(t,n,r,a,o){for(var i in this._reactName=t,this._targetInst=r,this.type=n,this.nativeEvent=a,this.target=o,this.currentTarget=null,e)e.hasOwnProperty(i)&&(t=e[i],this[i]=t?t(a):a[i]);return this.isDefaultPrevented=(null!=a.defaultPrevented?a.defaultPrevented:!1===a.returnValue)?on:ln,this.isPropagationStopped=ln,this}return a(t.prototype,{preventDefault:function(){this.defaultPrevented=!0;var e=this.nativeEvent;e&&(e.preventDefault?e.preventDefault():"unknown"!=typeof e.returnValue&&(e.returnValue=!1),this.isDefaultPrevented=on)},stopPropagation:function(){var e=this.nativeEvent;e&&(e.stopPropagation?e.stopPropagation():"unknown"!=typeof e.cancelBubble&&(e.cancelBubble=!0),this.isPropagationStopped=on)},persist:function(){},isPersistent:on}),t}var un,cn,dn,fn={eventPhase:0,bubbles:0,cancelable:0,timeStamp:function(e){return e.timeStamp||Date.now()},defaultPrevented:0,isTrusted:0},pn=sn(fn),mn=a({},fn,{view:0,detail:0}),hn=sn(mn),gn=a({},mn,{screenX:0,screenY:0,clientX:0,clientY:0,pageX:0,pageY:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,getModifierState:An,button:0,buttons:0,relatedTarget:function(e){return void 0===e.relatedTarget?e.fromElement===e.srcElement?e.toElement:e.fromElement:e.relatedTarget},movementX:function(e){return"movementX"in e?e.movementX:(e!==dn&&(dn&&"mousemove"===e.type?(un=e.screenX-dn.screenX,cn=e.screenY-dn.screenY):cn=un=0,dn=e),un)},movementY:function(e){return"movementY"in e?e.movementY:cn}}),bn=sn(gn),vn=sn(a({},gn,{dataTransfer:0})),yn=sn(a({},mn,{relatedTarget:0})),wn=sn(a({},fn,{animationName:0,elapsedTime:0,pseudoElement:0})),kn=a({},fn,{clipboardData:function(e){return"clipboardData"in e?e.clipboardData:window.clipboardData}}),Sn=sn(kn),En=sn(a({},fn,{data:0})),xn={Esc:"Escape",Spacebar:" ",Left:"ArrowLeft",Up:"ArrowUp",Right:"ArrowRight",Down:"ArrowDown",Del:"Delete",Win:"OS",Menu:"ContextMenu",Apps:"ContextMenu",Scroll:"ScrollLock",MozPrintableKey:"Unidentified"},Tn={8:"Backspace",9:"Tab",12:"Clear",13:"Enter",16:"Shift",17:"Control",18:"Alt",19:"Pause",20:"CapsLock",27:"Escape",32:" ",33:"PageUp",34:"PageDown",35:"End",36:"Home",37:"ArrowLeft",38:"ArrowUp",39:"ArrowRight",40:"ArrowDown",45:"Insert",46:"Delete",112:"F1",113:"F2",114:"F3",115:"F4",116:"F5",117:"F6",118:"F7",119:"F8",120:"F9",121:"F10",122:"F11",123:"F12",144:"NumLock",145:"ScrollLock",224:"Meta"},Cn={Alt:"altKey",Control:"ctrlKey",Meta:"metaKey",Shift:"shiftKey"};function _n(e){var t=this.nativeEvent;return t.getModifierState?t.getModifierState(e):!!(e=Cn[e])&&!!t[e]}function An(){return _n}var Ln=a({},mn,{key:function(e){if(e.key){var t=xn[e.key]||e.key;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=an(e))?"Enter":String.fromCharCode(e):"keydown"===e.type||"keyup"===e.type?Tn[e.keyCode]||"Unidentified":""},code:0,location:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,repeat:0,locale:0,getModifierState:An,charCode:function(e){return"keypress"===e.type?an(e):0},keyCode:function(e){return"keydown"===e.type||"keyup"===e.type?e.keyCode:0},which:function(e){return"keypress"===e.type?an(e):"keydown"===e.type||"keyup"===e.type?e.keyCode:0}}),Rn=sn(Ln),Pn=sn(a({},gn,{pointerId:0,width:0,height:0,pressure:0,tangentialPressure:0,tiltX:0,tiltY:0,twist:0,pointerType:0,isPrimary:0})),Nn=sn(a({},mn,{touches:0,targetTouches:0,changedTouches:0,altKey:0,metaKey:0,ctrlKey:0,shiftKey:0,getModifierState:An})),On=sn(a({},fn,{propertyName:0,elapsedTime:0,pseudoElement:0})),In=a({},gn,{deltaX:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Dn=sn(In),Mn=[9,13,27,32],Bn=d&&"CompositionEvent"in window,Fn=null;d&&"documentMode"in document&&(Fn=document.documentMode);var jn=d&&"TextEvent"in window&&!Fn,zn=d&&(!Bn||Fn&&8<Fn&&11>=Fn),Un=String.fromCharCode(32),$n=!1;function qn(e,t){switch(e){case"keyup":return-1!==Mn.indexOf(t.keyCode);case"keydown":return 229!==t.keyCode;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function Hn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var Gn=!1;var Zn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function Vn(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return"input"===t?!!Zn[e.type]:"textarea"===t}function Wn(e,t,n,r){Pe(r),0<(t=Br(t,"onChange")).length&&(n=new pn("onChange","change",null,n,r),e.push({event:n,listeners:t}))}var Kn=null,Yn=null;function Qn(e){Lr(e,0)}function Xn(e){if(Q(aa(e)))return e}function Jn(e,t){if("change"===e)return t}var er=!1;if(d){var tr;if(d){var nr="oninput"in document;if(!nr){var rr=document.createElement("div");rr.setAttribute("oninput","return;"),nr="function"==typeof rr.oninput}tr=nr}else tr=!1;er=tr&&(!document.documentMode||9<document.documentMode)}function ar(){Kn&&(Kn.detachEvent("onpropertychange",or),Yn=Kn=null)}function or(e){if("value"===e.propertyName&&Xn(Yn)){var t=[];if(Wn(t,Yn,e,Ce(e)),e=Qn,Be)e(t);else{Be=!0;try{Oe(e,t)}finally{Be=!1,je()}}}}function ir(e,t,n){"focusin"===e?(ar(),Yn=n,(Kn=t).attachEvent("onpropertychange",or)):"focusout"===e&&ar()}function lr(e){if("selectionchange"===e||"keyup"===e||"keydown"===e)return Xn(Yn)}function sr(e,t){if("click"===e)return Xn(t)}function ur(e,t){if("input"===e||"change"===e)return Xn(t)}var cr="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},dr=Object.prototype.hasOwnProperty;function fr(e,t){if(cr(e,t))return!0;if("object"!=typeof e||null===e||"object"!=typeof t||null===t)return!1;var n=Object.keys(e),r=Object.keys(t);if(n.length!==r.length)return!1;for(r=0;r<n.length;r++)if(!dr.call(t,n[r])||!cr(e[n[r]],t[n[r]]))return!1;return!0}function pr(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function mr(e,t){var n,r=pr(e);for(e=0;r;){if(3===r.nodeType){if(n=e+r.textContent.length,e<=t&&n>=t)return{node:r,offset:t-e};e=n}e:{for(;r;){if(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=pr(r)}}function hr(e,t){return!(!e||!t)&&(e===t||(!e||3!==e.nodeType)&&(t&&3===t.nodeType?hr(e,t.parentNode):"contains"in e?e.contains(t):!!e.compareDocumentPosition&&!!(16&e.compareDocumentPosition(t))))}function gr(){for(var e=window,t=X();t instanceof e.HTMLIFrameElement;){try{var n="string"==typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=X((e=t.contentWindow).document)}return t}function br(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&("input"===t&&("text"===e.type||"search"===e.type||"tel"===e.type||"url"===e.type||"password"===e.type)||"textarea"===t||"true"===e.contentEditable)}var vr=d&&"documentMode"in document&&11>=document.documentMode,yr=null,wr=null,kr=null,Sr=!1;function Er(e,t,n){var r=n.window===n?n.document:9===n.nodeType?n:n.ownerDocument;Sr||null==yr||yr!==X(r)||("selectionStart"in(r=yr)&&br(r)?r={start:r.selectionStart,end:r.selectionEnd}:r={anchorNode:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&fr(kr,r)||(kr=r,0<(r=Br(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({event:t,listeners:r}),t.target=yr)))}Dt("cancel cancel click click close close contextmenu contextMenu copy copy cut cut auxclick auxClick dblclick doubleClick dragend dragEnd dragstart dragStart drop drop focusin focus focusout blur input input invalid invalid keydown keyDown keypress keyPress keyup keyUp mousedown mouseDown mouseup mouseUp paste paste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(" "),0),Dt("drag drag dragenter dragEnter dragexit dragExit dragleave dragLeave dragover dragOver mousemove mouseMove mouseout mouseOut mouseover mouseOver pointermove pointerMove pointerout pointerOut pointerover pointerOver scroll scroll toggle toggle touchmove touchMove wheel wheel".split(" "),1),Dt(It,2);for(var xr="change selectionchange textInput compositionstart compositionend compositionupdate".split(" "),Tr=0;Tr<xr.length;Tr++)Ot.set(xr[Tr],0);c("onMouseEnter",["mouseout","mouseover"]),c("onMouseLeave",["mouseout","mouseover"]),c("onPointerEnter",["pointerout","pointerover"]),c("onPointerLeave",["pointerout","pointerover"]),u("onChange","change click focusin focusout input keydown keyup selectionchange".split(" ")),u("onSelect","focusout contextmenu dragend focusin keydown keyup mousedown mouseup selectionchange".split(" ")),u("onBeforeInput",["compositionend","keypress","textInput","paste"]),u("onCompositionEnd","compositionend focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionStart","compositionstart focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionUpdate","compositionupdate focusout keydown keypress keyup mousedown".split(" "));var Cr="abort canplay canplaythrough durationchange emptied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend timeupdate volumechange waiting".split(" "),_r=new Set("cancel close invalid load scroll toggle".split(" ").concat(Cr));function Ar(e,t,n){var r=e.type||"unknown-event";e.currentTarget=n,function(e,t,n,r,a,o,l,s,u){if(Ke.apply(this,arguments),He){if(!He)throw Error(i(198));var c=Ge;He=!1,Ge=null,Ze||(Ze=!0,Ve=c)}}(r,t,void 0,e),e.currentTarget=null}function Lr(e,t){t=0!=(4&t);for(var n=0;n<e.length;n++){var r=e[n],a=r.event;r=r.listeners;e:{var o=void 0;if(t)for(var i=r.length-1;0<=i;i--){var l=r[i],s=l.instance,u=l.currentTarget;if(l=l.listener,s!==o&&a.isPropagationStopped())break e;Ar(a,l,u),o=s}else for(i=0;i<r.length;i++){if(s=(l=r[i]).instance,u=l.currentTarget,l=l.listener,s!==o&&a.isPropagationStopped())break e;Ar(a,l,u),o=s}}}if(Ze)throw e=Ve,Ze=!1,Ve=null,e}function Rr(e,t){var n=ia(t),r=e+"__bubble";n.has(r)||(Ir(t,e,2,!1),n.add(r))}var Pr="_reactListening"+Math.random().toString(36).slice(2);function Nr(e){e[Pr]||(e[Pr]=!0,l.forEach((function(t){_r.has(t)||Or(t,!1,e,null),Or(t,!0,e,null)})))}function Or(e,t,n,r){var a=4<arguments.length&&void 0!==arguments[4]?arguments[4]:0,o=n;if("selectionchange"===e&&9!==n.nodeType&&(o=n.ownerDocument),null!==r&&!t&&_r.has(e)){if("scroll"!==e)return;a|=2,o=r}var i=ia(o),l=e+"__"+(t?"capture":"bubble");i.has(l)||(t&&(a|=4),Ir(o,e,a,t),i.add(l))}function Ir(e,t,n,r){var a=Ot.get(t);switch(void 0===a?2:a){case 0:a=Yt;break;case 1:a=Qt;break;default:a=Xt}n=a.bind(null,t,n,e),a=void 0,!Ue||"touchstart"!==t&&"touchmove"!==t&&"wheel"!==t||(a=!0),r?void 0!==a?e.addEventListener(t,n,{capture:!0,passive:a}):e.addEventListener(t,n,!0):void 0!==a?e.addEventListener(t,n,{passive:a}):e.addEventListener(t,n,!1)}function Dr(e,t,n,r,a){var o=r;if(0==(1&t)&&0==(2&t)&&null!==r)e:for(;;){if(null===r)return;var i=r.tag;if(3===i||4===i){var l=r.stateNode.containerInfo;if(l===a||8===l.nodeType&&l.parentNode===a)break;if(4===i)for(i=r.return;null!==i;){var s=i.tag;if((3===s||4===s)&&((s=i.stateNode.containerInfo)===a||8===s.nodeType&&s.parentNode===a))return;i=i.return}for(;null!==l;){if(null===(i=na(l)))return;if(5===(s=i.tag)||6===s){r=o=i;continue e}l=l.parentNode}}r=r.return}!function(e,t,n){if(Fe)return e(t,n);Fe=!0;try{Me(e,t,n)}finally{Fe=!1,je()}}((function(){var r=o,a=Ce(n),i=[];e:{var l=Nt.get(e);if(void 0!==l){var s=pn,u=e;switch(e){case"keypress":if(0===an(n))break e;case"keydown":case"keyup":s=Rn;break;case"focusin":u="focus",s=yn;break;case"focusout":u="blur",s=yn;break;case"beforeblur":case"afterblur":s=yn;break;case"click":if(2===n.button)break e;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":s=bn;break;case"drag":case"dragend":case"dragenter":case"dragexit":case"dragleave":case"dragover":case"dragstart":case"drop":s=vn;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":s=Nn;break;case At:case Lt:case Rt:s=wn;break;case Pt:s=On;break;case"scroll":s=hn;break;case"wheel":s=Dn;break;case"copy":case"cut":case"paste":s=Sn;break;case"gotpointercapture":case"lostpointercapture":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":s=Pn}var c=0!=(4&t),d=!c&&"scroll"===e,f=c?null!==l?l+"Capture":null:l;c=[];for(var p,m=r;null!==m;){var h=(p=m).stateNode;if(5===p.tag&&null!==h&&(p=h,null!==f&&(null!=(h=ze(m,f))&&c.push(Mr(m,h,p)))),d)break;m=m.return}0<c.length&&(l=new s(l,u,null,n,a),i.push({event:l,listeners:c}))}}if(0==(7&t)){if(s="mouseout"===e||"pointerout"===e,(!(l="mouseover"===e||"pointerover"===e)||0!=(16&t)||!(u=n.relatedTarget||n.fromElement)||!na(u)&&!u[ea])&&(s||l)&&(l=a.window===a?a:(l=a.ownerDocument)?l.defaultView||l.parentWindow:window,s?(s=r,null!==(u=(u=n.relatedTarget||n.toElement)?na(u):null)&&(u!==(d=Ye(u))||5!==u.tag&&6!==u.tag)&&(u=null)):(s=null,u=r),s!==u)){if(c=bn,h="onMouseLeave",f="onMouseEnter",m="mouse","pointerout"!==e&&"pointerover"!==e||(c=Pn,h="onPointerLeave",f="onPointerEnter",m="pointer"),d=null==s?l:aa(s),p=null==u?l:aa(u),(l=new c(h,m+"leave",s,n,a)).target=d,l.relatedTarget=p,h=null,na(a)===r&&((c=new c(f,m+"enter",u,n,a)).target=p,c.relatedTarget=d,h=c),d=h,s&&u)e:{for(f=u,m=0,p=c=s;p;p=Fr(p))m++;for(p=0,h=f;h;h=Fr(h))p++;for(;0<m-p;)c=Fr(c),m--;for(;0<p-m;)f=Fr(f),p--;for(;m--;){if(c===f||null!==f&&c===f.alternate)break e;c=Fr(c),f=Fr(f)}c=null}else c=null;null!==s&&jr(i,l,s,c,!1),null!==u&&null!==d&&jr(i,d,u,c,!0)}if("select"===(s=(l=r?aa(r):window).nodeName&&l.nodeName.toLowerCase())||"input"===s&&"file"===l.type)var g=Jn;else if(Vn(l))if(er)g=ur;else{g=lr;var b=ir}else(s=l.nodeName)&&"input"===s.toLowerCase()&&("checkbox"===l.type||"radio"===l.type)&&(g=sr);switch(g&&(g=g(e,r))?Wn(i,g,n,a):(b&&b(e,l,r),"focusout"===e&&(b=l._wrapperState)&&b.controlled&&"number"===l.type&&ae(l,"number",l.value)),b=r?aa(r):window,e){case"focusin":(Vn(b)||"true"===b.contentEditable)&&(yr=b,wr=r,kr=null);break;case"focusout":kr=wr=yr=null;break;case"mousedown":Sr=!0;break;case"contextmenu":case"mouseup":case"dragend":Sr=!1,Er(i,n,a);break;case"selectionchange":if(vr)break;case"keydown":case"keyup":Er(i,n,a)}var v;if(Bn)e:{switch(e){case"compositionstart":var y="onCompositionStart";break e;case"compositionend":y="onCompositionEnd";break e;case"compositionupdate":y="onCompositionUpdate";break e}y=void 0}else Gn?qn(e,n)&&(y="onCompositionEnd"):"keydown"===e&&229===n.keyCode&&(y="onCompositionStart");y&&(zn&&"ko"!==n.locale&&(Gn||"onCompositionStart"!==y?"onCompositionEnd"===y&&Gn&&(v=rn()):(tn="value"in(en=a)?en.value:en.textContent,Gn=!0)),0<(b=Br(r,y)).length&&(y=new En(y,e,null,n,a),i.push({event:y,listeners:b}),v?y.data=v:null!==(v=Hn(n))&&(y.data=v))),(v=jn?function(e,t){switch(e){case"compositionend":return Hn(t);case"keypress":return 32!==t.which?null:($n=!0,Un);case"textInput":return(e=t.data)===Un&&$n?null:e;default:return null}}(e,n):function(e,t){if(Gn)return"compositionend"===e||!Bn&&qn(e,t)?(e=rn(),nn=tn=en=null,Gn=!1,e):null;switch(e){case"paste":default:return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1<t.char.length)return t.char;if(t.which)return String.fromCharCode(t.which)}return null;case"compositionend":return zn&&"ko"!==t.locale?null:t.data}}(e,n))&&(0<(r=Br(r,"onBeforeInput")).length&&(a=new En("onBeforeInput","beforeinput",null,n,a),i.push({event:a,listeners:r}),a.data=v))}Lr(i,t)}))}function Mr(e,t,n){return{instance:e,listener:t,currentTarget:n}}function Br(e,t){for(var n=t+"Capture",r=[];null!==e;){var a=e,o=a.stateNode;5===a.tag&&null!==o&&(a=o,null!=(o=ze(e,n))&&r.unshift(Mr(e,o,a)),null!=(o=ze(e,t))&&r.push(Mr(e,o,a))),e=e.return}return r}function Fr(e){if(null===e)return null;do{e=e.return}while(e&&5!==e.tag);return e||null}function jr(e,t,n,r,a){for(var o=t._reactName,i=[];null!==n&&n!==r;){var l=n,s=l.alternate,u=l.stateNode;if(null!==s&&s===r)break;5===l.tag&&null!==u&&(l=u,a?null!=(s=ze(n,o))&&i.unshift(Mr(n,s,l)):a||null!=(s=ze(n,o))&&i.push(Mr(n,s,l))),n=n.return}0!==i.length&&e.push({event:t,listeners:i})}function zr(){}var Ur=null,$r=null;function qr(e,t){switch(e){case"button":case"input":case"select":case"textarea":return!!t.autoFocus}return!1}function Hr(e,t){return"textarea"===e||"option"===e||"noscript"===e||"string"==typeof t.children||"number"==typeof t.children||"object"==typeof t.dangerouslySetInnerHTML&&null!==t.dangerouslySetInnerHTML&&null!=t.dangerouslySetInnerHTML.__html}var Gr="function"==typeof setTimeout?setTimeout:void 0,Zr="function"==typeof clearTimeout?clearTimeout:void 0;function Vr(e){1===e.nodeType?e.textContent="":9===e.nodeType&&(null!=(e=e.body)&&(e.textContent=""))}function Wr(e){for(;null!=e;e=e.nextSibling){var t=e.nodeType;if(1===t||3===t)break}return e}function Kr(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n||"$!"===n||"$?"===n){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var Yr=0;var Qr=Math.random().toString(36).slice(2),Xr="__reactFiber$"+Qr,Jr="__reactProps$"+Qr,ea="__reactContainer$"+Qr,ta="__reactEvents$"+Qr;function na(e){var t=e[Xr];if(t)return t;for(var n=e.parentNode;n;){if(t=n[ea]||n[Xr]){if(n=t.alternate,null!==t.child||null!==n&&null!==n.child)for(e=Kr(e);null!==e;){if(n=e[Xr])return n;e=Kr(e)}return t}n=(e=n).parentNode}return null}function ra(e){return!(e=e[Xr]||e[ea])||5!==e.tag&&6!==e.tag&&13!==e.tag&&3!==e.tag?null:e}function aa(e){if(5===e.tag||6===e.tag)return e.stateNode;throw Error(i(33))}function oa(e){return e[Jr]||null}function ia(e){var t=e[ta];return void 0===t&&(t=e[ta]=new Set),t}var la=[],sa=-1;function ua(e){return{current:e}}function ca(e){0>sa||(e.current=la[sa],la[sa]=null,sa--)}function da(e,t){sa++,la[sa]=e.current,e.current=t}var fa={},pa=ua(fa),ma=ua(!1),ha=fa;function ga(e,t){var n=e.type.contextTypes;if(!n)return fa;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmaskedChildContext===t)return r.__reactInternalMemoizedMaskedChildContext;var a,o={};for(a in n)o[a]=t[a];return r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=t,e.__reactInternalMemoizedMaskedChildContext=o),o}function ba(e){return null!=(e=e.childContextTypes)}function va(){ca(ma),ca(pa)}function ya(e,t,n){if(pa.current!==fa)throw Error(i(168));da(pa,t),da(ma,n)}function wa(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.getChildContext)return n;for(var o in r=r.getChildContext())if(!(o in e))throw Error(i(108,V(t)||"Unknown",o));return a({},n,r)}function ka(e){return e=(e=e.stateNode)&&e.__reactInternalMemoizedMergedChildContext||fa,ha=pa.current,da(pa,e),da(ma,ma.current),!0}function Sa(e,t,n){var r=e.stateNode;if(!r)throw Error(i(169));n?(e=wa(e,t,ha),r.__reactInternalMemoizedMergedChildContext=e,ca(ma),ca(pa),da(pa,e)):ca(ma),da(ma,n)}var Ea=null,xa=null,Ta=o.unstable_runWithPriority,Ca=o.unstable_scheduleCallback,_a=o.unstable_cancelCallback,Aa=o.unstable_shouldYield,La=o.unstable_requestPaint,Ra=o.unstable_now,Pa=o.unstable_getCurrentPriorityLevel,Na=o.unstable_ImmediatePriority,Oa=o.unstable_UserBlockingPriority,Ia=o.unstable_NormalPriority,Da=o.unstable_LowPriority,Ma=o.unstable_IdlePriority,Ba={},Fa=void 0!==La?La:function(){},ja=null,za=null,Ua=!1,$a=Ra(),qa=1e4>$a?Ra:function(){return Ra()-$a};function Ha(){switch(Pa()){case Na:return 99;case Oa:return 98;case Ia:return 97;case Da:return 96;case Ma:return 95;default:throw Error(i(332))}}function Ga(e){switch(e){case 99:return Na;case 98:return Oa;case 97:return Ia;case 96:return Da;case 95:return Ma;default:throw Error(i(332))}}function Za(e,t){return e=Ga(e),Ta(e,t)}function Va(e,t,n){return e=Ga(e),Ca(e,t,n)}function Wa(){if(null!==za){var e=za;za=null,_a(e)}Ka()}function Ka(){if(!Ua&&null!==ja){Ua=!0;var e=0;try{var t=ja;Za(99,(function(){for(;e<t.length;e++){var n=t[e];do{n=n(!0)}while(null!==n)}})),ja=null}catch(n){throw null!==ja&&(ja=ja.slice(e+1)),Ca(Na,Wa),n}finally{Ua=!1}}}var Ya=k.ReactCurrentBatchConfig;function Qa(e,t){if(e&&e.defaultProps){for(var n in t=a({},t),e=e.defaultProps)void 0===t[n]&&(t[n]=e[n]);return t}return t}var Xa=ua(null),Ja=null,eo=null,to=null;function no(){to=eo=Ja=null}function ro(e){var t=Xa.current;ca(Xa),e.type._context._currentValue=t}function ao(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n||(n.childLanes&t)===t)break;n.childLanes|=t}else e.childLanes|=t,null!==n&&(n.childLanes|=t);e=e.return}}function oo(e,t){Ja=e,to=eo=null,null!==(e=e.dependencies)&&null!==e.firstContext&&(0!=(e.lanes&t)&&(Bi=!0),e.firstContext=null)}function io(e,t){if(to!==e&&!1!==t&&0!==t)if("number"==typeof t&&1073741823!==t||(to=e,t=1073741823),t={context:e,observedBits:t,next:null},null===eo){if(null===Ja)throw Error(i(308));eo=t,Ja.dependencies={lanes:0,firstContext:t,responders:null}}else eo=eo.next=t;return e._currentValue}var lo=!1;function so(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null},effects:null}}function uo(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,effects:e.effects})}function co(e,t){return{eventTime:e,lane:t,tag:0,payload:null,callback:null,next:null}}function fo(e,t){if(null!==(e=e.updateQueue)){var n=(e=e.shared).pending;null===n?t.next=t:(t.next=n.next,n.next=t),e.pending=t}}function po(e,t){var n=e.updateQueue,r=e.alternate;if(null!==r&&n===(r=r.updateQueue)){var a=null,o=null;if(null!==(n=n.firstBaseUpdate)){do{var i={eventTime:n.eventTime,lane:n.lane,tag:n.tag,payload:n.payload,callback:n.callback,next:null};null===o?a=o=i:o=o.next=i,n=n.next}while(null!==n);null===o?a=o=t:o=o.next=t}else a=o=t;return n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:o,shared:r.shared,effects:r.effects},void(e.updateQueue=n)}null===(e=n.lastBaseUpdate)?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}function mo(e,t,n,r){var o=e.updateQueue;lo=!1;var i=o.firstBaseUpdate,l=o.lastBaseUpdate,s=o.shared.pending;if(null!==s){o.shared.pending=null;var u=s,c=u.next;u.next=null,null===l?i=c:l.next=c,l=u;var d=e.alternate;if(null!==d){var f=(d=d.updateQueue).lastBaseUpdate;f!==l&&(null===f?d.firstBaseUpdate=c:f.next=c,d.lastBaseUpdate=u)}}if(null!==i){for(f=o.baseState,l=0,d=c=u=null;;){s=i.lane;var p=i.eventTime;if((r&s)===s){null!==d&&(d=d.next={eventTime:p,lane:0,tag:i.tag,payload:i.payload,callback:i.callback,next:null});e:{var m=e,h=i;switch(s=t,p=n,h.tag){case 1:if("function"==typeof(m=h.payload)){f=m.call(p,f,s);break e}f=m;break e;case 3:m.flags=-4097&m.flags|64;case 0:if(null==(s="function"==typeof(m=h.payload)?m.call(p,f,s):m))break e;f=a({},f,s);break e;case 2:lo=!0}}null!==i.callback&&(e.flags|=32,null===(s=o.effects)?o.effects=[i]:s.push(i))}else p={eventTime:p,lane:s,tag:i.tag,payload:i.payload,callback:i.callback,next:null},null===d?(c=d=p,u=f):d=d.next=p,l|=s;if(null===(i=i.next)){if(null===(s=o.shared.pending))break;i=s.next,s.next=null,o.lastBaseUpdate=s,o.shared.pending=null}}null===d&&(u=f),o.baseState=u,o.firstBaseUpdate=c,o.lastBaseUpdate=d,Ul|=l,e.lanes=l,e.memoizedState=f}}function ho(e,t,n){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],a=r.callback;if(null!==a){if(r.callback=null,r=n,"function"!=typeof a)throw Error(i(191,a));a.call(r)}}}var go=(new r.Component).refs;function bo(e,t,n,r){n=null==(n=n(r,t=e.memoizedState))?t:a({},t,n),e.memoizedState=n,0===e.lanes&&(e.updateQueue.baseState=n)}var vo={isMounted:function(e){return!!(e=e._reactInternals)&&Ye(e)===e},enqueueSetState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueReplaceState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.tag=1,o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=fs(),r=ps(e),a=co(n,r);a.tag=2,null!=t&&(a.callback=t),fo(e,a),ms(e,r,n)}};function yo(e,t,n,r,a,o,i){return"function"==typeof(e=e.stateNode).shouldComponentUpdate?e.shouldComponentUpdate(r,o,i):!t.prototype||!t.prototype.isPureReactComponent||(!fr(n,r)||!fr(a,o))}function wo(e,t,n){var r=!1,a=fa,o=t.contextType;return"object"==typeof o&&null!==o?o=io(o):(a=ba(t)?ha:pa.current,o=(r=null!=(r=t.contextTypes))?ga(e,a):fa),t=new t(n,o),e.memoizedState=null!==t.state&&void 0!==t.state?t.state:null,t.updater=vo,e.stateNode=t,t._reactInternals=e,r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=a,e.__reactInternalMemoizedMaskedChildContext=o),t}function ko(e,t,n,r){e=t.state,"function"==typeof t.componentWillReceiveProps&&t.componentWillReceiveProps(n,r),"function"==typeof t.UNSAFE_componentWillReceiveProps&&t.UNSAFE_componentWillReceiveProps(n,r),t.state!==e&&vo.enqueueReplaceState(t,t.state,null)}function So(e,t,n,r){var a=e.stateNode;a.props=n,a.state=e.memoizedState,a.refs=go,so(e);var o=t.contextType;"object"==typeof o&&null!==o?a.context=io(o):(o=ba(t)?ha:pa.current,a.context=ga(e,o)),mo(e,n,a,r),a.state=e.memoizedState,"function"==typeof(o=t.getDerivedStateFromProps)&&(bo(e,t,o,n),a.state=e.memoizedState),"function"==typeof t.getDerivedStateFromProps||"function"==typeof a.getSnapshotBeforeUpdate||"function"!=typeof a.UNSAFE_componentWillMount&&"function"!=typeof a.componentWillMount||(t=a.state,"function"==typeof a.componentWillMount&&a.componentWillMount(),"function"==typeof a.UNSAFE_componentWillMount&&a.UNSAFE_componentWillMount(),t!==a.state&&vo.enqueueReplaceState(a,a.state,null),mo(e,n,a,r),a.state=e.memoizedState),"function"==typeof a.componentDidMount&&(e.flags|=4)}var Eo=Array.isArray;function xo(e,t,n){if(null!==(e=n.ref)&&"function"!=typeof e&&"object"!=typeof e){if(n._owner){if(n=n._owner){if(1!==n.tag)throw Error(i(309));var r=n.stateNode}if(!r)throw Error(i(147,e));var a=""+e;return null!==t&&null!==t.ref&&"function"==typeof t.ref&&t.ref._stringRef===a?t.ref:(t=function(e){var t=r.refs;t===go&&(t=r.refs={}),null===e?delete t[a]:t[a]=e},t._stringRef=a,t)}if("string"!=typeof e)throw Error(i(284));if(!n._owner)throw Error(i(290,e))}return e}function To(e,t){if("textarea"!==e.type)throw Error(i(31,"[object Object]"===Object.prototype.toString.call(t)?"object with keys {"+Object.keys(t).join(", ")+"}":t))}function Co(e){function t(t,n){if(e){var r=t.lastEffect;null!==r?(r.nextEffect=n,t.lastEffect=n):t.firstEffect=t.lastEffect=n,n.nextEffect=null,n.flags=8}}function n(n,r){if(!e)return null;for(;null!==r;)t(n,r),r=r.sibling;return null}function r(e,t){for(e=new Map;null!==t;)null!==t.key?e.set(t.key,t):e.set(t.index,t),t=t.sibling;return e}function a(e,t){return(e=Zs(e,t)).index=0,e.sibling=null,e}function o(t,n,r){return t.index=r,e?null!==(r=t.alternate)?(r=r.index)<n?(t.flags=2,n):r:(t.flags=2,n):n}function l(t){return e&&null===t.alternate&&(t.flags=2),t}function s(e,t,n,r){return null===t||6!==t.tag?((t=Ys(n,e.mode,r)).return=e,t):((t=a(t,n)).return=e,t)}function u(e,t,n,r){return null!==t&&t.elementType===n.type?((r=a(t,n.props)).ref=xo(e,t,n),r.return=e,r):((r=Vs(n.type,n.key,n.props,null,e.mode,r)).ref=xo(e,t,n),r.return=e,r)}function c(e,t,n,r){return null===t||4!==t.tag||t.stateNode.containerInfo!==n.containerInfo||t.stateNode.implementation!==n.implementation?((t=Qs(n,e.mode,r)).return=e,t):((t=a(t,n.children||[])).return=e,t)}function d(e,t,n,r,o){return null===t||7!==t.tag?((t=Ws(n,e.mode,r,o)).return=e,t):((t=a(t,n)).return=e,t)}function f(e,t,n){if("string"==typeof t||"number"==typeof t)return(t=Ys(""+t,e.mode,n)).return=e,t;if("object"==typeof t&&null!==t){switch(t.$$typeof){case S:return(n=Vs(t.type,t.key,t.props,null,e.mode,n)).ref=xo(e,null,t),n.return=e,n;case E:return(t=Qs(t,e.mode,n)).return=e,t}if(Eo(t)||$(t))return(t=Ws(t,e.mode,n,null)).return=e,t;To(e,t)}return null}function p(e,t,n,r){var a=null!==t?t.key:null;if("string"==typeof n||"number"==typeof n)return null!==a?null:s(e,t,""+n,r);if("object"==typeof n&&null!==n){switch(n.$$typeof){case S:return n.key===a?n.type===x?d(e,t,n.props.children,r,a):u(e,t,n,r):null;case E:return n.key===a?c(e,t,n,r):null}if(Eo(n)||$(n))return null!==a?null:d(e,t,n,r,null);To(e,n)}return null}function m(e,t,n,r,a){if("string"==typeof r||"number"==typeof r)return s(t,e=e.get(n)||null,""+r,a);if("object"==typeof r&&null!==r){switch(r.$$typeof){case S:return e=e.get(null===r.key?n:r.key)||null,r.type===x?d(t,e,r.props.children,a,r.key):u(t,e,r,a);case E:return c(t,e=e.get(null===r.key?n:r.key)||null,r,a)}if(Eo(r)||$(r))return d(t,e=e.get(n)||null,r,a,null);To(t,r)}return null}function h(a,i,l,s){for(var u=null,c=null,d=i,h=i=0,g=null;null!==d&&h<l.length;h++){d.index>h?(g=d,d=null):g=d.sibling;var b=p(a,d,l[h],s);if(null===b){null===d&&(d=g);break}e&&d&&null===b.alternate&&t(a,d),i=o(b,i,h),null===c?u=b:c.sibling=b,c=b,d=g}if(h===l.length)return n(a,d),u;if(null===d){for(;h<l.length;h++)null!==(d=f(a,l[h],s))&&(i=o(d,i,h),null===c?u=d:c.sibling=d,c=d);return u}for(d=r(a,d);h<l.length;h++)null!==(g=m(d,a,h,l[h],s))&&(e&&null!==g.alternate&&d.delete(null===g.key?h:g.key),i=o(g,i,h),null===c?u=g:c.sibling=g,c=g);return e&&d.forEach((function(e){return t(a,e)})),u}function g(a,l,s,u){var c=$(s);if("function"!=typeof c)throw Error(i(150));if(null==(s=c.call(s)))throw Error(i(151));for(var d=c=null,h=l,g=l=0,b=null,v=s.next();null!==h&&!v.done;g++,v=s.next()){h.index>g?(b=h,h=null):b=h.sibling;var y=p(a,h,v.value,u);if(null===y){null===h&&(h=b);break}e&&h&&null===y.alternate&&t(a,h),l=o(y,l,g),null===d?c=y:d.sibling=y,d=y,h=b}if(v.done)return n(a,h),c;if(null===h){for(;!v.done;g++,v=s.next())null!==(v=f(a,v.value,u))&&(l=o(v,l,g),null===d?c=v:d.sibling=v,d=v);return c}for(h=r(a,h);!v.done;g++,v=s.next())null!==(v=m(h,a,g,v.value,u))&&(e&&null!==v.alternate&&h.delete(null===v.key?g:v.key),l=o(v,l,g),null===d?c=v:d.sibling=v,d=v);return e&&h.forEach((function(e){return t(a,e)})),c}return function(e,r,o,s){var u="object"==typeof o&&null!==o&&o.type===x&&null===o.key;u&&(o=o.props.children);var c="object"==typeof o&&null!==o;if(c)switch(o.$$typeof){case S:e:{for(c=o.key,u=r;null!==u;){if(u.key===c){if(7===u.tag){if(o.type===x){n(e,u.sibling),(r=a(u,o.props.children)).return=e,e=r;break e}}else if(u.elementType===o.type){n(e,u.sibling),(r=a(u,o.props)).ref=xo(e,u,o),r.return=e,e=r;break e}n(e,u);break}t(e,u),u=u.sibling}o.type===x?((r=Ws(o.props.children,e.mode,s,o.key)).return=e,e=r):((s=Vs(o.type,o.key,o.props,null,e.mode,s)).ref=xo(e,r,o),s.return=e,e=s)}return l(e);case E:e:{for(u=o.key;null!==r;){if(r.key===u){if(4===r.tag&&r.stateNode.containerInfo===o.containerInfo&&r.stateNode.implementation===o.implementation){n(e,r.sibling),(r=a(r,o.children||[])).return=e,e=r;break e}n(e,r);break}t(e,r),r=r.sibling}(r=Qs(o,e.mode,s)).return=e,e=r}return l(e)}if("string"==typeof o||"number"==typeof o)return o=""+o,null!==r&&6===r.tag?(n(e,r.sibling),(r=a(r,o)).return=e,e=r):(n(e,r),(r=Ys(o,e.mode,s)).return=e,e=r),l(e);if(Eo(o))return h(e,r,o,s);if($(o))return g(e,r,o,s);if(c&&To(e,o),void 0===o&&!u)switch(e.tag){case 1:case 22:case 0:case 11:case 15:throw Error(i(152,V(e.type)||"Component"))}return n(e,r)}}var _o=Co(!0),Ao=Co(!1),Lo={},Ro=ua(Lo),Po=ua(Lo),No=ua(Lo);function Oo(e){if(e===Lo)throw Error(i(174));return e}function Io(e,t){switch(da(No,t),da(Po,e),da(Ro,Lo),e=t.nodeType){case 9:case 11:t=(t=t.documentElement)?t.namespaceURI:me(null,"");break;default:t=me(t=(e=8===e?t.parentNode:t).namespaceURI||null,e=e.tagName)}ca(Ro),da(Ro,t)}function Do(){ca(Ro),ca(Po),ca(No)}function Mo(e){Oo(No.current);var t=Oo(Ro.current),n=me(t,e.type);t!==n&&(da(Po,e),da(Ro,n))}function Bo(e){Po.current===e&&(ca(Ro),ca(Po))}var Fo=ua(0);function jo(e){for(var t=e;null!==t;){if(13===t.tag){var n=t.memoizedState;if(null!==n&&(null===(n=n.dehydrated)||"$?"===n.data||"$!"===n.data))return t}else if(19===t.tag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.flags))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}return null}var zo=null,Uo=null,$o=!1;function qo(e,t){var n=Hs(5,null,null,0);n.elementType="DELETED",n.type="DELETED",n.stateNode=t,n.return=e,n.flags=8,null!==e.lastEffect?(e.lastEffect.nextEffect=n,e.lastEffect=n):e.firstEffect=e.lastEffect=n}function Ho(e,t){switch(e.tag){case 5:var n=e.type;return null!==(t=1!==t.nodeType||n.toLowerCase()!==t.nodeName.toLowerCase()?null:t)&&(e.stateNode=t,!0);case 6:return null!==(t=""===e.pendingProps||3!==t.nodeType?null:t)&&(e.stateNode=t,!0);default:return!1}}function Go(e){if($o){var t=Uo;if(t){var n=t;if(!Ho(e,t)){if(!(t=Wr(n.nextSibling))||!Ho(e,t))return e.flags=-1025&e.flags|2,$o=!1,void(zo=e);qo(zo,n)}zo=e,Uo=Wr(t.firstChild)}else e.flags=-1025&e.flags|2,$o=!1,zo=e}}function Zo(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;zo=e}function Vo(e){if(e!==zo)return!1;if(!$o)return Zo(e),$o=!0,!1;var t=e.type;if(5!==e.tag||"head"!==t&&"body"!==t&&!Hr(t,e.memoizedProps))for(t=Uo;t;)qo(e,t),t=Wr(t.nextSibling);if(Zo(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(i(317));e:{for(e=e.nextSibling,t=0;e;){if(8===e.nodeType){var n=e.data;if("/$"===n){if(0===t){Uo=Wr(e.nextSibling);break e}t--}else"$"!==n&&"$!"!==n&&"$?"!==n||t++}e=e.nextSibling}Uo=null}}else Uo=zo?Wr(e.stateNode.nextSibling):null;return!0}function Wo(){Uo=zo=null,$o=!1}var Ko=[];function Yo(){for(var e=0;e<Ko.length;e++)Ko[e]._workInProgressVersionPrimary=null;Ko.length=0}var Qo=k.ReactCurrentDispatcher,Xo=k.ReactCurrentBatchConfig,Jo=0,ei=null,ti=null,ni=null,ri=!1,ai=!1;function oi(){throw Error(i(321))}function ii(e,t){if(null===t)return!1;for(var n=0;n<t.length&&n<e.length;n++)if(!cr(e[n],t[n]))return!1;return!0}function li(e,t,n,r,a,o){if(Jo=o,ei=t,t.memoizedState=null,t.updateQueue=null,t.lanes=0,Qo.current=null===e||null===e.memoizedState?Oi:Ii,e=n(r,a),ai){o=0;do{if(ai=!1,!(25>o))throw Error(i(301));o+=1,ni=ti=null,t.updateQueue=null,Qo.current=Di,e=n(r,a)}while(ai)}if(Qo.current=Ni,t=null!==ti&&null!==ti.next,Jo=0,ni=ti=ei=null,ri=!1,t)throw Error(i(300));return e}function si(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===ni?ei.memoizedState=ni=e:ni=ni.next=e,ni}function ui(){if(null===ti){var e=ei.alternate;e=null!==e?e.memoizedState:null}else e=ti.next;var t=null===ni?ei.memoizedState:ni.next;if(null!==t)ni=t,ti=e;else{if(null===e)throw Error(i(310));e={memoizedState:(ti=e).memoizedState,baseState:ti.baseState,baseQueue:ti.baseQueue,queue:ti.queue,next:null},null===ni?ei.memoizedState=ni=e:ni=ni.next=e}return ni}function ci(e,t){return"function"==typeof t?t(e):t}function di(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=ti,a=r.baseQueue,o=n.pending;if(null!==o){if(null!==a){var l=a.next;a.next=o.next,o.next=l}r.baseQueue=a=o,n.pending=null}if(null!==a){a=a.next,r=r.baseState;var s=l=o=null,u=a;do{var c=u.lane;if((Jo&c)===c)null!==s&&(s=s.next={lane:0,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null}),r=u.eagerReducer===e?u.eagerState:e(r,u.action);else{var d={lane:c,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null};null===s?(l=s=d,o=r):s=s.next=d,ei.lanes|=c,Ul|=c}u=u.next}while(null!==u&&u!==a);null===s?o=r:s.next=l,cr(r,t.memoizedState)||(Bi=!0),t.memoizedState=r,t.baseState=o,t.baseQueue=s,n.lastRenderedState=r}return[t.memoizedState,n.dispatch]}function fi(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=n.dispatch,a=n.pending,o=t.memoizedState;if(null!==a){n.pending=null;var l=a=a.next;do{o=e(o,l.action),l=l.next}while(l!==a);cr(o,t.memoizedState)||(Bi=!0),t.memoizedState=o,null===t.baseQueue&&(t.baseState=o),n.lastRenderedState=o}return[o,r]}function pi(e,t,n){var r=t._getVersion;r=r(t._source);var a=t._workInProgressVersionPrimary;if(null!==a?e=a===r:(e=e.mutableReadLanes,(e=(Jo&e)===e)&&(t._workInProgressVersionPrimary=r,Ko.push(t))),e)return n(t._source);throw Ko.push(t),Error(i(350))}function mi(e,t,n,r){var a=Ol;if(null===a)throw Error(i(349));var o=t._getVersion,l=o(t._source),s=Qo.current,u=s.useState((function(){return pi(a,t,n)})),c=u[1],d=u[0];u=ni;var f=e.memoizedState,p=f.refs,m=p.getSnapshot,h=f.source;f=f.subscribe;var g=ei;return e.memoizedState={refs:p,source:t,subscribe:r},s.useEffect((function(){p.getSnapshot=n,p.setSnapshot=c;var e=o(t._source);if(!cr(l,e)){e=n(t._source),cr(d,e)||(c(e),e=ps(g),a.mutableReadLanes|=e&a.pendingLanes),e=a.mutableReadLanes,a.entangledLanes|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-Ht(i),u=1<<s;r[s]|=e,i&=~u}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(g);a.mutableReadLanes|=r&a.pendingLanes}catch(o){n((function(){throw o}))}}))}),[t,r]),cr(m,n)&&cr(h,t)&&cr(f,r)||((e={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:d}).dispatch=c=Pi.bind(null,ei,e),u.queue=e,u.baseQueue=null,d=pi(a,t,n),u.memoizedState=u.baseState=d),d}function hi(e,t,n){return mi(ui(),e,t,n)}function gi(e){var t=si();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:e}).dispatch=Pi.bind(null,ei,e),[t.memoizedState,e]}function bi(e,t,n,r){return e={tag:e,create:t,destroy:n,deps:r,next:null},null===(t=ei.updateQueue)?(t={lastEffect:null},ei.updateQueue=t,t.lastEffect=e.next=e):null===(n=t.lastEffect)?t.lastEffect=e.next=e:(r=n.next,n.next=e,e.next=r,t.lastEffect=e),e}function vi(e){return e={current:e},si().memoizedState=e}function yi(){return ui().memoizedState}function wi(e,t,n,r){var a=si();ei.flags|=e,a.memoizedState=bi(1|t,n,void 0,void 0===r?null:r)}function ki(e,t,n,r){var a=ui();r=void 0===r?null:r;var o=void 0;if(null!==ti){var i=ti.memoizedState;if(o=i.destroy,null!==r&&ii(r,i.deps))return void bi(t,n,o,r)}ei.flags|=e,a.memoizedState=bi(1|t,n,o,r)}function Si(e,t){return wi(516,4,e,t)}function Ei(e,t){return ki(516,4,e,t)}function xi(e,t){return ki(4,2,e,t)}function Ti(e,t){return"function"==typeof t?(e=e(),t(e),function(){t(null)}):null!=t?(e=e(),t.current=e,function(){t.current=null}):void 0}function Ci(e,t,n){return n=null!=n?n.concat([e]):null,ki(4,2,Ti.bind(null,t,e),n)}function _i(){}function Ai(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Li(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(e=e(),n.memoizedState=[e,t],e)}function Ri(e,t){var n=Ha();Za(98>n?98:n,(function(){e(!0)})),Za(97<n?97:n,(function(){var n=Xo.transition;Xo.transition=1;try{e(!1),t()}finally{Xo.transition=n}}))}function Pi(e,t,n){var r=fs(),a=ps(e),o={lane:a,action:n,eagerReducer:null,eagerState:null,next:null},i=t.pending;if(null===i?o.next=o:(o.next=i.next,i.next=o),t.pending=o,i=e.alternate,e===ei||null!==i&&i===ei)ai=ri=!0;else{if(0===e.lanes&&(null===i||0===i.lanes)&&null!==(i=t.lastRenderedReducer))try{var l=t.lastRenderedState,s=i(l,n);if(o.eagerReducer=i,o.eagerState=s,cr(s,l))return}catch(u){}ms(e,a,r)}}var Ni={readContext:io,useCallback:oi,useContext:oi,useEffect:oi,useImperativeHandle:oi,useLayoutEffect:oi,useMemo:oi,useReducer:oi,useRef:oi,useState:oi,useDebugValue:oi,useDeferredValue:oi,useTransition:oi,useMutableSource:oi,useOpaqueIdentifier:oi,unstable_isNewReconciler:!1},Oi={readContext:io,useCallback:function(e,t){return si().memoizedState=[e,void 0===t?null:t],e},useContext:io,useEffect:Si,useImperativeHandle:function(e,t,n){return n=null!=n?n.concat([e]):null,wi(4,2,Ti.bind(null,t,e),n)},useLayoutEffect:function(e,t){return wi(4,2,e,t)},useMemo:function(e,t){var n=si();return t=void 0===t?null:t,e=e(),n.memoizedState=[e,t],e},useReducer:function(e,t,n){var r=si();return t=void 0!==n?n(t):t,r.memoizedState=r.baseState=t,e=(e=r.queue={pending:null,dispatch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=Pi.bind(null,ei,e),[r.memoizedState,e]},useRef:vi,useState:gi,useDebugValue:_i,useDeferredValue:function(e){var t=gi(e),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=gi(!1),t=e[0];return vi(e=Ri.bind(null,e[1])),[e,t]},useMutableSource:function(e,t,n){var r=si();return r.memoizedState={refs:{getSnapshot:t,setSnapshot:null},source:e,subscribe:n},mi(r,e,t,n)},useOpaqueIdentifier:function(){if($o){var e=!1,t=function(e){return{$$typeof:D,toString:e,valueOf:e}}((function(){throw e||(e=!0,n("r:"+(Yr++).toString(36))),Error(i(355))})),n=gi(t)[1];return 0==(2&ei.mode)&&(ei.flags|=516,bi(5,(function(){n("r:"+(Yr++).toString(36))}),void 0,null)),t}return gi(t="r:"+(Yr++).toString(36)),t},unstable_isNewReconciler:!1},Ii={readContext:io,useCallback:Ai,useContext:io,useEffect:Ei,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Li,useReducer:di,useRef:yi,useState:function(){return di(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=di(ci),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=di(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return di(ci)[0]},unstable_isNewReconciler:!1},Di={readContext:io,useCallback:Ai,useContext:io,useEffect:Ei,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Li,useReducer:fi,useRef:yi,useState:function(){return fi(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=fi(ci),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=fi(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return fi(ci)[0]},unstable_isNewReconciler:!1},Mi=k.ReactCurrentOwner,Bi=!1;function Fi(e,t,n,r){t.child=null===e?Ao(t,null,n,r):_o(t,e.child,n,r)}function ji(e,t,n,r,a){n=n.render;var o=t.ref;return oo(t,a),r=li(e,t,n,r,o,a),null===e||Bi?(t.flags|=1,Fi(e,t,r,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function zi(e,t,n,r,a,o){if(null===e){var i=n.type;return"function"!=typeof i||Gs(i)||void 0!==i.defaultProps||null!==n.compare||void 0!==n.defaultProps?((e=Vs(n.type,null,r,t,t.mode,o)).ref=t.ref,e.return=t,t.child=e):(t.tag=15,t.type=i,Ui(e,t,i,r,a,o))}return i=e.child,0==(a&o)&&(a=i.memoizedProps,(n=null!==(n=n.compare)?n:fr)(a,r)&&e.ref===t.ref)?ol(e,t,o):(t.flags|=1,(e=Zs(i,r)).ref=t.ref,e.return=t,t.child=e)}function Ui(e,t,n,r,a,o){if(null!==e&&fr(e.memoizedProps,r)&&e.ref===t.ref){if(Bi=!1,0==(o&a))return t.lanes=e.lanes,ol(e,t,o);0!=(16384&e.flags)&&(Bi=!0)}return Hi(e,t,n,r,o)}function $i(e,t,n){var r=t.pendingProps,a=r.children,o=null!==e?e.memoizedState:null;if("hidden"===r.mode||"unstable-defer-without-hiding"===r.mode)if(0==(4&t.mode))t.memoizedState={baseLanes:0},Ss(t,n);else{if(0==(1073741824&n))return e=null!==o?o.baseLanes|n:n,t.lanes=t.childLanes=1073741824,t.memoizedState={baseLanes:e},Ss(t,e),null;t.memoizedState={baseLanes:0},Ss(t,null!==o?o.baseLanes:n)}else null!==o?(r=o.baseLanes|n,t.memoizedState=null):r=n,Ss(t,r);return Fi(e,t,a,n),t.child}function qi(e,t){var n=t.ref;(null===e&&null!==n||null!==e&&e.ref!==n)&&(t.flags|=128)}function Hi(e,t,n,r,a){var o=ba(n)?ha:pa.current;return o=ga(t,o),oo(t,a),n=li(e,t,n,r,o,a),null===e||Bi?(t.flags|=1,Fi(e,t,n,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function Gi(e,t,n,r,a){if(ba(n)){var o=!0;ka(t)}else o=!1;if(oo(t,a),null===t.stateNode)null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),wo(t,n,r),So(t,n,r,a),r=!0;else if(null===e){var i=t.stateNode,l=t.memoizedProps;i.props=l;var s=i.context,u=n.contextType;"object"==typeof u&&null!==u?u=io(u):u=ga(t,u=ba(n)?ha:pa.current);var c=n.getDerivedStateFromProps,d="function"==typeof c||"function"==typeof i.getSnapshotBeforeUpdate;d||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==r||s!==u)&&ko(t,i,r,u),lo=!1;var f=t.memoizedState;i.state=f,mo(t,r,i,a),s=t.memoizedState,l!==r||f!==s||ma.current||lo?("function"==typeof c&&(bo(t,n,c,r),s=t.memoizedState),(l=lo||yo(t,n,l,r,f,s,u))?(d||"function"!=typeof i.UNSAFE_componentWillMount&&"function"!=typeof i.componentWillMount||("function"==typeof i.componentWillMount&&i.componentWillMount(),"function"==typeof i.UNSAFE_componentWillMount&&i.UNSAFE_componentWillMount()),"function"==typeof i.componentDidMount&&(t.flags|=4)):("function"==typeof i.componentDidMount&&(t.flags|=4),t.memoizedProps=r,t.memoizedState=s),i.props=r,i.state=s,i.context=u,r=l):("function"==typeof i.componentDidMount&&(t.flags|=4),r=!1)}else{i=t.stateNode,uo(e,t),l=t.memoizedProps,u=t.type===t.elementType?l:Qa(t.type,l),i.props=u,d=t.pendingProps,f=i.context,"object"==typeof(s=n.contextType)&&null!==s?s=io(s):s=ga(t,s=ba(n)?ha:pa.current);var p=n.getDerivedStateFromProps;(c="function"==typeof p||"function"==typeof i.getSnapshotBeforeUpdate)||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==d||f!==s)&&ko(t,i,r,s),lo=!1,f=t.memoizedState,i.state=f,mo(t,r,i,a);var m=t.memoizedState;l!==d||f!==m||ma.current||lo?("function"==typeof p&&(bo(t,n,p,r),m=t.memoizedState),(u=lo||yo(t,n,u,r,f,m,s))?(c||"function"!=typeof i.UNSAFE_componentWillUpdate&&"function"!=typeof i.componentWillUpdate||("function"==typeof i.componentWillUpdate&&i.componentWillUpdate(r,m,s),"function"==typeof i.UNSAFE_componentWillUpdate&&i.UNSAFE_componentWillUpdate(r,m,s)),"function"==typeof i.componentDidUpdate&&(t.flags|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(t.flags|=256)):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),t.memoizedProps=r,t.memoizedState=m),i.props=r,i.state=m,i.context=s,r=u):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),r=!1)}return Zi(e,t,n,r,o,a)}function Zi(e,t,n,r,a,o){qi(e,t);var i=0!=(64&t.flags);if(!r&&!i)return a&&Sa(t,n,!1),ol(e,t,o);r=t.stateNode,Mi.current=t;var l=i&&"function"!=typeof n.getDerivedStateFromError?null:r.render();return t.flags|=1,null!==e&&i?(t.child=_o(t,e.child,null,o),t.child=_o(t,null,l,o)):Fi(e,t,l,o),t.memoizedState=r.state,a&&Sa(t,n,!0),t.child}function Vi(e){var t=e.stateNode;t.pendingContext?ya(0,t.pendingContext,t.pendingContext!==t.context):t.context&&ya(0,t.context,!1),Io(e,t.containerInfo)}var Wi,Ki,Yi,Qi={dehydrated:null,retryLane:0};function Xi(e,t,n){var r,a=t.pendingProps,o=Fo.current,i=!1;return(r=0!=(64&t.flags))||(r=(null===e||null!==e.memoizedState)&&0!=(2&o)),r?(i=!0,t.flags&=-65):null!==e&&null===e.memoizedState||void 0===a.fallback||!0===a.unstable_avoidThisFallback||(o|=1),da(Fo,1&o),null===e?(void 0!==a.fallback&&Go(t),e=a.children,o=a.fallback,i?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Qi,e):"number"==typeof a.unstable_expectedLoadTime?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Qi,t.lanes=33554432,e):((n=Ks({mode:"visible",children:e},t.mode,n,null)).return=t,t.child=n)):(e.memoizedState,i?(a=tl(e,t,a.children,a.fallback,n),i=t.child,o=e.child.memoizedState,i.memoizedState=null===o?{baseLanes:n}:{baseLanes:o.baseLanes|n},i.childLanes=e.childLanes&~n,t.memoizedState=Qi,a):(n=el(e,t,a.children,n),t.memoizedState=null,n))}function Ji(e,t,n,r){var a=e.mode,o=e.child;return t={mode:"hidden",children:t},0==(2&a)&&null!==o?(o.childLanes=0,o.pendingProps=t):o=Ks(t,a,0,null),n=Ws(n,a,r,null),o.return=e,n.return=e,o.sibling=n,e.child=o,n}function el(e,t,n,r){var a=e.child;return e=a.sibling,n=Zs(a,{mode:"visible",children:n}),0==(2&t.mode)&&(n.lanes=r),n.return=t,n.sibling=null,null!==e&&(e.nextEffect=null,e.flags=8,t.firstEffect=t.lastEffect=e),t.child=n}function tl(e,t,n,r,a){var o=t.mode,i=e.child;e=i.sibling;var l={mode:"hidden",children:n};return 0==(2&o)&&t.child!==i?((n=t.child).childLanes=0,n.pendingProps=l,null!==(i=n.lastEffect)?(t.firstEffect=n.firstEffect,t.lastEffect=i,i.nextEffect=null):t.firstEffect=t.lastEffect=null):n=Zs(i,l),null!==e?r=Zs(e,r):(r=Ws(r,o,a,null)).flags|=2,r.return=t,n.return=t,n.sibling=r,t.child=n,r}function nl(e,t){e.lanes|=t;var n=e.alternate;null!==n&&(n.lanes|=t),ao(e.return,t)}function rl(e,t,n,r,a,o){var i=e.memoizedState;null===i?e.memoizedState={isBackwards:t,rendering:null,renderingStartTime:0,last:r,tail:n,tailMode:a,lastEffect:o}:(i.isBackwards=t,i.rendering=null,i.renderingStartTime=0,i.last=r,i.tail=n,i.tailMode=a,i.lastEffect=o)}function al(e,t,n){var r=t.pendingProps,a=r.revealOrder,o=r.tail;if(Fi(e,t,r.children,n),0!=(2&(r=Fo.current)))r=1&r|2,t.flags|=64;else{if(null!==e&&0!=(64&e.flags))e:for(e=t.child;null!==e;){if(13===e.tag)null!==e.memoizedState&&nl(e,n);else if(19===e.tag)nl(e,n);else if(null!==e.child){e.child.return=e,e=e.child;continue}if(e===t)break e;for(;null===e.sibling;){if(null===e.return||e.return===t)break e;e=e.return}e.sibling.return=e.return,e=e.sibling}r&=1}if(da(Fo,r),0==(2&t.mode))t.memoizedState=null;else switch(a){case"forwards":for(n=t.child,a=null;null!==n;)null!==(e=n.alternate)&&null===jo(e)&&(a=n),n=n.sibling;null===(n=a)?(a=t.child,t.child=null):(a=n.sibling,n.sibling=null),rl(t,!1,a,n,o,t.lastEffect);break;case"backwards":for(n=null,a=t.child,t.child=null;null!==a;){if(null!==(e=a.alternate)&&null===jo(e)){t.child=a;break}e=a.sibling,a.sibling=n,n=a,a=e}rl(t,!0,n,null,o,t.lastEffect);break;case"together":rl(t,!1,null,null,void 0,t.lastEffect);break;default:t.memoizedState=null}return t.child}function ol(e,t,n){if(null!==e&&(t.dependencies=e.dependencies),Ul|=t.lanes,0!=(n&t.childLanes)){if(null!==e&&t.child!==e.child)throw Error(i(153));if(null!==t.child){for(n=Zs(e=t.child,e.pendingProps),t.child=n,n.return=t;null!==e.sibling;)e=e.sibling,(n=n.sibling=Zs(e,e.pendingProps)).return=t;n.sibling=null}return t.child}return null}function il(e,t){if(!$o)switch(e.tailMode){case"hidden":t=e.tail;for(var n=null;null!==t;)null!==t.alternate&&(n=t),t=t.sibling;null===n?e.tail=null:n.sibling=null;break;case"collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t||null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function ll(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12:case 9:case 14:return null;case 1:case 17:return ba(t.type)&&va(),null;case 3:return Do(),ca(ma),ca(pa),Yo(),(r=t.stateNode).pendingContext&&(r.context=r.pendingContext,r.pendingContext=null),null!==e&&null!==e.child||(Vo(t)?t.flags|=4:r.hydrate||(t.flags|=256)),null;case 5:Bo(t);var o=Oo(No.current);if(n=t.type,null!==e&&null!=t.stateNode)Ki(e,t,n,r),e.ref!==t.ref&&(t.flags|=128);else{if(!r){if(null===t.stateNode)throw Error(i(166));return null}if(e=Oo(Ro.current),Vo(t)){r=t.stateNode,n=t.type;var l=t.memoizedProps;switch(r[Xr]=t,r[Jr]=l,n){case"dialog":Rr("cancel",r),Rr("close",r);break;case"iframe":case"object":case"embed":Rr("load",r);break;case"video":case"audio":for(e=0;e<Cr.length;e++)Rr(Cr[e],r);break;case"source":Rr("error",r);break;case"img":case"image":case"link":Rr("error",r),Rr("load",r);break;case"details":Rr("toggle",r);break;case"input":ee(r,l),Rr("invalid",r);break;case"select":r._wrapperState={wasMultiple:!!l.multiple},Rr("invalid",r);break;case"textarea":se(r,l),Rr("invalid",r)}for(var u in xe(n,l),e=null,l)l.hasOwnProperty(u)&&(o=l[u],"children"===u?"string"==typeof o?r.textContent!==o&&(e=["children",o]):"number"==typeof o&&r.textContent!==""+o&&(e=["children",""+o]):s.hasOwnProperty(u)&&null!=o&&"onScroll"===u&&Rr("scroll",r));switch(n){case"input":Y(r),re(r,l,!0);break;case"textarea":Y(r),ce(r);break;case"select":case"option":break;default:"function"==typeof l.onClick&&(r.onclick=zr)}r=e,t.updateQueue=r,null!==r&&(t.flags|=4)}else{switch(u=9===o.nodeType?o:o.ownerDocument,e===de&&(e=pe(n)),e===de?"script"===n?((e=u.createElement("div")).innerHTML="<script><\/script>",e=e.removeChild(e.firstChild)):"string"==typeof r.is?e=u.createElement(n,{is:r.is}):(e=u.createElement(n),"select"===n&&(u=e,r.multiple?u.multiple=!0:r.size&&(u.size=r.size))):e=u.createElementNS(e,n),e[Xr]=t,e[Jr]=r,Wi(e,t),t.stateNode=e,u=Te(n,r),n){case"dialog":Rr("cancel",e),Rr("close",e),o=r;break;case"iframe":case"object":case"embed":Rr("load",e),o=r;break;case"video":case"audio":for(o=0;o<Cr.length;o++)Rr(Cr[o],e);o=r;break;case"source":Rr("error",e),o=r;break;case"img":case"image":case"link":Rr("error",e),Rr("load",e),o=r;break;case"details":Rr("toggle",e),o=r;break;case"input":ee(e,r),o=J(e,r),Rr("invalid",e);break;case"option":o=oe(e,r);break;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Rr("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Rr("invalid",e);break;default:o=r}xe(n,o);var c=o;for(l in c)if(c.hasOwnProperty(l)){var d=c[l];"style"===l?Se(e,d):"dangerouslySetInnerHTML"===l?null!=(d=d?d.__html:void 0)&&be(e,d):"children"===l?"string"==typeof d?("textarea"!==n||""!==d)&&ve(e,d):"number"==typeof d&&ve(e,""+d):"suppressContentEditableWarning"!==l&&"suppressHydrationWarning"!==l&&"autoFocus"!==l&&(s.hasOwnProperty(l)?null!=d&&"onScroll"===l&&Rr("scroll",e):null!=d&&w(e,l,d,u))}switch(n){case"input":Y(e),re(e,r,!1);break;case"textarea":Y(e),ce(e);break;case"option":null!=r.value&&e.setAttribute("value",""+W(r.value));break;case"select":e.multiple=!!r.multiple,null!=(l=r.value)?ie(e,!!r.multiple,l,!1):null!=r.defaultValue&&ie(e,!!r.multiple,r.defaultValue,!0);break;default:"function"==typeof o.onClick&&(e.onclick=zr)}qr(n,r)&&(t.flags|=4)}null!==t.ref&&(t.flags|=128)}return null;case 6:if(e&&null!=t.stateNode)Yi(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(i(166));n=Oo(No.current),Oo(Ro.current),Vo(t)?(r=t.stateNode,n=t.memoizedProps,r[Xr]=t,r.nodeValue!==n&&(t.flags|=4)):((r=(9===n.nodeType?n:n.ownerDocument).createTextNode(r))[Xr]=t,t.stateNode=r)}return null;case 13:return ca(Fo),r=t.memoizedState,0!=(64&t.flags)?(t.lanes=n,t):(r=null!==r,n=!1,null===e?void 0!==t.memoizedProps.fallback&&Vo(t):n=null!==e.memoizedState,r&&!n&&0!=(2&t.mode)&&(null===e&&!0!==t.memoizedProps.unstable_avoidThisFallback||0!=(1&Fo.current)?0===Fl&&(Fl=3):(0!==Fl&&3!==Fl||(Fl=4),null===Ol||0==(134217727&Ul)&&0==(134217727&$l)||vs(Ol,Dl))),(r||n)&&(t.flags|=4),null);case 4:return Do(),null===e&&Nr(t.stateNode.containerInfo),null;case 10:return ro(t),null;case 19:if(ca(Fo),null===(r=t.memoizedState))return null;if(l=0!=(64&t.flags),null===(u=r.rendering))if(l)il(r,!1);else{if(0!==Fl||null!==e&&0!=(64&e.flags))for(e=t.child;null!==e;){if(null!==(u=jo(e))){for(t.flags|=64,il(r,!1),null!==(l=u.updateQueue)&&(t.updateQueue=l,t.flags|=4),null===r.lastEffect&&(t.firstEffect=null),t.lastEffect=r.lastEffect,r=n,n=t.child;null!==n;)e=r,(l=n).flags&=2,l.nextEffect=null,l.firstEffect=null,l.lastEffect=null,null===(u=l.alternate)?(l.childLanes=0,l.lanes=e,l.child=null,l.memoizedProps=null,l.memoizedState=null,l.updateQueue=null,l.dependencies=null,l.stateNode=null):(l.childLanes=u.childLanes,l.lanes=u.lanes,l.child=u.child,l.memoizedProps=u.memoizedProps,l.memoizedState=u.memoizedState,l.updateQueue=u.updateQueue,l.type=u.type,e=u.dependencies,l.dependencies=null===e?null:{lanes:e.lanes,firstContext:e.firstContext}),n=n.sibling;return da(Fo,1&Fo.current|2),t.child}e=e.sibling}null!==r.tail&&qa()>Zl&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432)}else{if(!l)if(null!==(e=jo(u))){if(t.flags|=64,l=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags|=4),il(r,!0),null===r.tail&&"hidden"===r.tailMode&&!u.alternate&&!$o)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null),null}else 2*qa()-r.renderingStartTime>Zl&&1073741824!==n&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432);r.isBackwards?(u.sibling=t.child,t.child=u):(null!==(n=r.last)?n.sibling=u:t.child=u,r.last=u)}return null!==r.tail?(n=r.tail,r.rendering=n,r.tail=n.sibling,r.lastEffect=t.lastEffect,r.renderingStartTime=qa(),n.sibling=null,t=Fo.current,da(Fo,l?1&t|2:1&t),n):null;case 23:case 24:return Es(),null!==e&&null!==e.memoizedState!=(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags|=4),null}throw Error(i(156,t.tag))}function sl(e){switch(e.tag){case 1:ba(e.type)&&va();var t=e.flags;return 4096&t?(e.flags=-4097&t|64,e):null;case 3:if(Do(),ca(ma),ca(pa),Yo(),0!=(64&(t=e.flags)))throw Error(i(285));return e.flags=-4097&t|64,e;case 5:return Bo(e),null;case 13:return ca(Fo),4096&(t=e.flags)?(e.flags=-4097&t|64,e):null;case 19:return ca(Fo),null;case 4:return Do(),null;case 10:return ro(e),null;case 23:case 24:return Es(),null;default:return null}}function ul(e,t){try{var n="",r=t;do{n+=Z(r),r=r.return}while(r);var a=n}catch(o){a="\nError generating stack: "+o.message+"\n"+o.stack}return{value:e,source:t,stack:a}}function cl(e,t){try{console.error(t.value)}catch(n){setTimeout((function(){throw n}))}}Wi=function(e,t){for(var n=t.child;null!==n;){if(5===n.tag||6===n.tag)e.appendChild(n.stateNode);else if(4!==n.tag&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===t)break;for(;null===n.sibling;){if(null===n.return||n.return===t)return;n=n.return}n.sibling.return=n.return,n=n.sibling}},Ki=function(e,t,n,r){var o=e.memoizedProps;if(o!==r){e=t.stateNode,Oo(Ro.current);var i,l=null;switch(n){case"input":o=J(e,o),r=J(e,r),l=[];break;case"option":o=oe(e,o),r=oe(e,r),l=[];break;case"select":o=a({},o,{value:void 0}),r=a({},r,{value:void 0}),l=[];break;case"textarea":o=le(e,o),r=le(e,r),l=[];break;default:"function"!=typeof o.onClick&&"function"==typeof r.onClick&&(e.onclick=zr)}for(d in xe(n,r),n=null,o)if(!r.hasOwnProperty(d)&&o.hasOwnProperty(d)&&null!=o[d])if("style"===d){var u=o[d];for(i in u)u.hasOwnProperty(i)&&(n||(n={}),n[i]="")}else"dangerouslySetInnerHTML"!==d&&"children"!==d&&"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&"autoFocus"!==d&&(s.hasOwnProperty(d)?l||(l=[]):(l=l||[]).push(d,null));for(d in r){var c=r[d];if(u=null!=o?o[d]:void 0,r.hasOwnProperty(d)&&c!==u&&(null!=c||null!=u))if("style"===d)if(u){for(i in u)!u.hasOwnProperty(i)||c&&c.hasOwnProperty(i)||(n||(n={}),n[i]="");for(i in c)c.hasOwnProperty(i)&&u[i]!==c[i]&&(n||(n={}),n[i]=c[i])}else n||(l||(l=[]),l.push(d,n)),n=c;else"dangerouslySetInnerHTML"===d?(c=c?c.__html:void 0,u=u?u.__html:void 0,null!=c&&u!==c&&(l=l||[]).push(d,c)):"children"===d?"string"!=typeof c&&"number"!=typeof c||(l=l||[]).push(d,""+c):"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&(s.hasOwnProperty(d)?(null!=c&&"onScroll"===d&&Rr("scroll",e),l||u===c||(l=[])):"object"==typeof c&&null!==c&&c.$$typeof===D?c.toString():(l=l||[]).push(d,c))}n&&(l=l||[]).push("style",n);var d=l;(t.updateQueue=d)&&(t.flags|=4)}},Yi=function(e,t,n,r){n!==r&&(t.flags|=4)};var dl="function"==typeof WeakMap?WeakMap:Map;function fl(e,t,n){(n=co(-1,n)).tag=3,n.payload={element:null};var r=t.value;return n.callback=function(){Yl||(Yl=!0,Ql=r),cl(0,t)},n}function pl(e,t,n){(n=co(-1,n)).tag=3;var r=e.type.getDerivedStateFromError;if("function"==typeof r){var a=t.value;n.payload=function(){return cl(0,t),r(a)}}var o=e.stateNode;return null!==o&&"function"==typeof o.componentDidCatch&&(n.callback=function(){"function"!=typeof r&&(null===Xl?Xl=new Set([this]):Xl.add(this),cl(0,t));var e=t.stack;this.componentDidCatch(t.value,{componentStack:null!==e?e:""})}),n}var ml="function"==typeof WeakSet?WeakSet:Set;function hl(e){var t=e.ref;if(null!==t)if("function"==typeof t)try{t(null)}catch(n){zs(e,n)}else t.current=null}function gl(e,t){switch(t.tag){case 0:case 11:case 15:case 22:case 5:case 6:case 4:case 17:return;case 1:if(256&t.flags&&null!==e){var n=e.memoizedProps,r=e.memoizedState;t=(e=t.stateNode).getSnapshotBeforeUpdate(t.elementType===t.type?n:Qa(t.type,n),r),e.__reactInternalSnapshotBeforeUpdate=t}return;case 3:return void(256&t.flags&&Vr(t.stateNode.containerInfo))}throw Error(i(163))}function bl(e,t,n){switch(n.tag){case 0:case 11:case 15:case 22:if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{if(3==(3&e.tag)){var r=e.create;e.destroy=r()}e=e.next}while(e!==t)}if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{var a=e;r=a.next,0!=(4&(a=a.tag))&&0!=(1&a)&&(Bs(n,e),Ms(n,e)),e=r}while(e!==t)}return;case 1:return e=n.stateNode,4&n.flags&&(null===t?e.componentDidMount():(r=n.elementType===n.type?t.memoizedProps:Qa(n.type,t.memoizedProps),e.componentDidUpdate(r,t.memoizedState,e.__reactInternalSnapshotBeforeUpdate))),void(null!==(t=n.updateQueue)&&ho(n,t,e));case 3:if(null!==(t=n.updateQueue)){if(e=null,null!==n.child)switch(n.child.tag){case 5:case 1:e=n.child.stateNode}ho(n,t,e)}return;case 5:return e=n.stateNode,void(null===t&&4&n.flags&&qr(n.type,n.memoizedProps)&&e.focus());case 6:case 4:case 12:case 19:case 17:case 20:case 21:case 23:case 24:return;case 13:return void(null===n.memoizedState&&(n=n.alternate,null!==n&&(n=n.memoizedState,null!==n&&(n=n.dehydrated,null!==n&&St(n)))))}throw Error(i(163))}function vl(e,t){for(var n=e;;){if(5===n.tag){var r=n.stateNode;if(t)"function"==typeof(r=r.style).setProperty?r.setProperty("display","none","important"):r.display="none";else{r=n.stateNode;var a=n.memoizedProps.style;a=null!=a&&a.hasOwnProperty("display")?a.display:null,r.style.display=ke("display",a)}}else if(6===n.tag)n.stateNode.nodeValue=t?"":n.memoizedProps;else if((23!==n.tag&&24!==n.tag||null===n.memoizedState||n===e)&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===e)break;for(;null===n.sibling;){if(null===n.return||n.return===e)return;n=n.return}n.sibling.return=n.return,n=n.sibling}}function yl(e,t){if(xa&&"function"==typeof xa.onCommitFiberUnmount)try{xa.onCommitFiberUnmount(Ea,t)}catch(o){}switch(t.tag){case 0:case 11:case 14:case 15:case 22:if(null!==(e=t.updateQueue)&&null!==(e=e.lastEffect)){var n=e=e.next;do{var r=n,a=r.destroy;if(r=r.tag,void 0!==a)if(0!=(4&r))Bs(t,n);else{r=t;try{a()}catch(o){zs(r,o)}}n=n.next}while(n!==e)}break;case 1:if(hl(t),"function"==typeof(e=t.stateNode).componentWillUnmount)try{e.props=t.memoizedProps,e.state=t.memoizedState,e.componentWillUnmount()}catch(o){zs(t,o)}break;case 5:hl(t);break;case 4:Tl(e,t)}}function wl(e){e.alternate=null,e.child=null,e.dependencies=null,e.firstEffect=null,e.lastEffect=null,e.memoizedProps=null,e.memoizedState=null,e.pendingProps=null,e.return=null,e.updateQueue=null}function kl(e){return 5===e.tag||3===e.tag||4===e.tag}function Sl(e){e:{for(var t=e.return;null!==t;){if(kl(t))break e;t=t.return}throw Error(i(160))}var n=t;switch(t=n.stateNode,n.tag){case 5:var r=!1;break;case 3:case 4:t=t.containerInfo,r=!0;break;default:throw Error(i(161))}16&n.flags&&(ve(t,""),n.flags&=-17);e:t:for(n=e;;){for(;null===n.sibling;){if(null===n.return||kl(n.return)){n=null;break e}n=n.return}for(n.sibling.return=n.return,n=n.sibling;5!==n.tag&&6!==n.tag&&18!==n.tag;){if(2&n.flags)continue t;if(null===n.child||4===n.tag)continue t;n.child.return=n,n=n.child}if(!(2&n.flags)){n=n.stateNode;break e}}r?El(e,n,t):xl(e,n,t)}function El(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?8===n.nodeType?n.parentNode.insertBefore(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!=(n=n._reactRootContainer)||null!==t.onclick||(t.onclick=zr));else if(4!==r&&null!==(e=e.child))for(El(e,t,n),e=e.sibling;null!==e;)El(e,t,n),e=e.sibling}function xl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?n.insertBefore(e,t):n.appendChild(e);else if(4!==r&&null!==(e=e.child))for(xl(e,t,n),e=e.sibling;null!==e;)xl(e,t,n),e=e.sibling}function Tl(e,t){for(var n,r,a=t,o=!1;;){if(!o){o=a.return;e:for(;;){if(null===o)throw Error(i(160));switch(n=o.stateNode,o.tag){case 5:r=!1;break e;case 3:case 4:n=n.containerInfo,r=!0;break e}o=o.return}o=!0}if(5===a.tag||6===a.tag){e:for(var l=e,s=a,u=s;;)if(yl(l,u),null!==u.child&&4!==u.tag)u.child.return=u,u=u.child;else{if(u===s)break e;for(;null===u.sibling;){if(null===u.return||u.return===s)break e;u=u.return}u.sibling.return=u.return,u=u.sibling}r?(l=n,s=a.stateNode,8===l.nodeType?l.parentNode.removeChild(s):l.removeChild(s)):n.removeChild(a.stateNode)}else if(4===a.tag){if(null!==a.child){n=a.stateNode.containerInfo,r=!0,a.child.return=a,a=a.child;continue}}else if(yl(e,a),null!==a.child){a.child.return=a,a=a.child;continue}if(a===t)break;for(;null===a.sibling;){if(null===a.return||a.return===t)return;4===(a=a.return).tag&&(o=!1)}a.sibling.return=a.return,a=a.sibling}}function Cl(e,t){switch(t.tag){case 0:case 11:case 14:case 15:case 22:var n=t.updateQueue;if(null!==(n=null!==n?n.lastEffect:null)){var r=n=n.next;do{3==(3&r.tag)&&(e=r.destroy,r.destroy=void 0,void 0!==e&&e()),r=r.next}while(r!==n)}return;case 1:case 12:case 17:return;case 5:if(null!=(n=t.stateNode)){r=t.memoizedProps;var a=null!==e?e.memoizedProps:r;e=t.type;var o=t.updateQueue;if(t.updateQueue=null,null!==o){for(n[Jr]=r,"input"===e&&"radio"===r.type&&null!=r.name&&te(n,r),Te(e,a),t=Te(e,r),a=0;a<o.length;a+=2){var l=o[a],s=o[a+1];"style"===l?Se(n,s):"dangerouslySetInnerHTML"===l?be(n,s):"children"===l?ve(n,s):w(n,l,s,t)}switch(e){case"input":ne(n,r);break;case"textarea":ue(n,r);break;case"select":e=n._wrapperState.wasMultiple,n._wrapperState.wasMultiple=!!r.multiple,null!=(o=r.value)?ie(n,!!r.multiple,o,!1):e!==!!r.multiple&&(null!=r.defaultValue?ie(n,!!r.multiple,r.defaultValue,!0):ie(n,!!r.multiple,r.multiple?[]:"",!1))}}}return;case 6:if(null===t.stateNode)throw Error(i(162));return void(t.stateNode.nodeValue=t.memoizedProps);case 3:return void((n=t.stateNode).hydrate&&(n.hydrate=!1,St(n.containerInfo)));case 13:return null!==t.memoizedState&&(Gl=qa(),vl(t.child,!0)),void _l(t);case 19:return void _l(t);case 23:case 24:return void vl(t,null!==t.memoizedState)}throw Error(i(163))}function _l(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new ml),t.forEach((function(t){var r=$s.bind(null,e,t);n.has(t)||(n.add(t),t.then(r,r))}))}}function Al(e,t){return null!==e&&(null===(e=e.memoizedState)||null!==e.dehydrated)&&(null!==(t=t.memoizedState)&&null===t.dehydrated)}var Ll=Math.ceil,Rl=k.ReactCurrentDispatcher,Pl=k.ReactCurrentOwner,Nl=0,Ol=null,Il=null,Dl=0,Ml=0,Bl=ua(0),Fl=0,jl=null,zl=0,Ul=0,$l=0,ql=0,Hl=null,Gl=0,Zl=1/0;function Vl(){Zl=qa()+500}var Wl,Kl=null,Yl=!1,Ql=null,Xl=null,Jl=!1,es=null,ts=90,ns=[],rs=[],as=null,os=0,is=null,ls=-1,ss=0,us=0,cs=null,ds=!1;function fs(){return 0!=(48&Nl)?qa():-1!==ls?ls:ls=qa()}function ps(e){if(0==(2&(e=e.mode)))return 1;if(0==(4&e))return 99===Ha()?1:2;if(0===ss&&(ss=zl),0!==Ya.transition){0!==us&&(us=null!==Hl?Hl.pendingLanes:0),e=ss;var t=4186112&~us;return 0===(t&=-t)&&(0===(t=(e=4186112&~e)&-e)&&(t=8192)),t}return e=Ha(),0!=(4&Nl)&&98===e?e=zt(12,ss):e=zt(e=function(e){switch(e){case 99:return 15;case 98:return 10;case 97:case 96:return 8;case 95:return 2;default:return 0}}(e),ss),e}function ms(e,t,n){if(50<os)throw os=0,is=null,Error(i(185));if(null===(e=hs(e,t)))return null;qt(e,t,n),e===Ol&&($l|=t,4===Fl&&vs(e,Dl));var r=Ha();1===t?0!=(8&Nl)&&0==(48&Nl)?ys(e):(gs(e,n),0===Nl&&(Vl(),Wa())):(0==(4&Nl)||98!==r&&99!==r||(null===as?as=new Set([e]):as.add(e)),gs(e,n)),Hl=e}function hs(e,t){e.lanes|=t;var n=e.alternate;for(null!==n&&(n.lanes|=t),n=e,e=e.return;null!==e;)e.childLanes|=t,null!==(n=e.alternate)&&(n.childLanes|=t),n=e,e=e.return;return 3===n.tag?n.stateNode:null}function gs(e,t){for(var n=e.callbackNode,r=e.suspendedLanes,a=e.pingedLanes,o=e.expirationTimes,l=e.pendingLanes;0<l;){var s=31-Ht(l),u=1<<s,c=o[s];if(-1===c){if(0==(u&r)||0!=(u&a)){c=t,Bt(u);var d=Mt;o[s]=10<=d?c+250:6<=d?c+5e3:-1}}else c<=t&&(e.expiredLanes|=u);l&=~u}if(r=Ft(e,e===Ol?Dl:0),t=Mt,0===r)null!==n&&(n!==Ba&&_a(n),e.callbackNode=null,e.callbackPriority=0);else{if(null!==n){if(e.callbackPriority===t)return;n!==Ba&&_a(n)}15===t?(n=ys.bind(null,e),null===ja?(ja=[n],za=Ca(Na,Ka)):ja.push(n),n=Ba):14===t?n=Va(99,ys.bind(null,e)):(n=function(e){switch(e){case 15:case 14:return 99;case 13:case 12:case 11:case 10:return 98;case 9:case 8:case 7:case 6:case 4:case 5:return 97;case 3:case 2:case 1:return 95;case 0:return 90;default:throw Error(i(358,e))}}(t),n=Va(n,bs.bind(null,e))),e.callbackPriority=t,e.callbackNode=n}}function bs(e){if(ls=-1,us=ss=0,0!=(48&Nl))throw Error(i(327));var t=e.callbackNode;if(Ds()&&e.callbackNode!==t)return null;var n=Ft(e,e===Ol?Dl:0);if(0===n)return null;var r=n,a=Nl;Nl|=16;var o=Cs();for(Ol===e&&Dl===r||(Vl(),xs(e,r));;)try{Ls();break}catch(s){Ts(e,s)}if(no(),Rl.current=o,Nl=a,null!==Il?r=0:(Ol=null,Dl=0,r=Fl),0!=(zl&$l))xs(e,0);else if(0!==r){if(2===r&&(Nl|=64,e.hydrate&&(e.hydrate=!1,Vr(e.containerInfo)),0!==(n=jt(e))&&(r=_s(e,n))),1===r)throw t=jl,xs(e,0),vs(e,n),gs(e,qa()),t;switch(e.finishedWork=e.current.alternate,e.finishedLanes=n,r){case 0:case 1:throw Error(i(345));case 2:case 5:Ns(e);break;case 3:if(vs(e,n),(62914560&n)===n&&10<(r=Gl+500-qa())){if(0!==Ft(e,0))break;if(((a=e.suspendedLanes)&n)!==n){fs(),e.pingedLanes|=e.suspendedLanes&a;break}e.timeoutHandle=Gr(Ns.bind(null,e),r);break}Ns(e);break;case 4:if(vs(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-Ht(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=qa()-n)?120:480>n?480:1080>n?1080:1920>n?1920:3e3>n?3e3:4320>n?4320:1960*Ll(n/1960))-n)){e.timeoutHandle=Gr(Ns.bind(null,e),n);break}Ns(e);break;default:throw Error(i(329))}}return gs(e,qa()),e.callbackNode===t?bs.bind(null,e):null}function vs(e,t){for(t&=~ql,t&=~$l,e.suspendedLanes|=t,e.pingedLanes&=~t,e=e.expirationTimes;0<t;){var n=31-Ht(t),r=1<<n;e[n]=-1,t&=~r}}function ys(e){if(0!=(48&Nl))throw Error(i(327));if(Ds(),e===Ol&&0!=(e.expiredLanes&Dl)){var t=Dl,n=_s(e,t);0!=(zl&$l)&&(n=_s(e,t=Ft(e,t)))}else n=_s(e,t=Ft(e,0));if(0!==e.tag&&2===n&&(Nl|=64,e.hydrate&&(e.hydrate=!1,Vr(e.containerInfo)),0!==(t=jt(e))&&(n=_s(e,t))),1===n)throw n=jl,xs(e,0),vs(e,t),gs(e,qa()),n;return e.finishedWork=e.current.alternate,e.finishedLanes=t,Ns(e),gs(e,qa()),null}function ws(e,t){var n=Nl;Nl|=1;try{return e(t)}finally{0===(Nl=n)&&(Vl(),Wa())}}function ks(e,t){var n=Nl;Nl&=-2,Nl|=8;try{return e(t)}finally{0===(Nl=n)&&(Vl(),Wa())}}function Ss(e,t){da(Bl,Ml),Ml|=t,zl|=t}function Es(){Ml=Bl.current,ca(Bl)}function xs(e,t){e.finishedWork=null,e.finishedLanes=0;var n=e.timeoutHandle;if(-1!==n&&(e.timeoutHandle=-1,Zr(n)),null!==Il)for(n=Il.return;null!==n;){var r=n;switch(r.tag){case 1:null!=(r=r.type.childContextTypes)&&va();break;case 3:Do(),ca(ma),ca(pa),Yo();break;case 5:Bo(r);break;case 4:Do();break;case 13:case 19:ca(Fo);break;case 10:ro(r);break;case 23:case 24:Es()}n=n.return}Ol=e,Il=Zs(e.current,null),Dl=Ml=zl=t,Fl=0,jl=null,ql=$l=Ul=0}function Ts(e,t){for(;;){var n=Il;try{if(no(),Qo.current=Ni,ri){for(var r=ei.memoizedState;null!==r;){var a=r.queue;null!==a&&(a.pending=null),r=r.next}ri=!1}if(Jo=0,ni=ti=ei=null,ai=!1,Pl.current=null,null===n||null===n.return){Fl=1,jl=t,Il=null;break}e:{var o=e,i=n.return,l=n,s=t;if(t=Dl,l.flags|=2048,l.firstEffect=l.lastEffect=null,null!==s&&"object"==typeof s&&"function"==typeof s.then){var u=s;if(0==(2&l.mode)){var c=l.alternate;c?(l.updateQueue=c.updateQueue,l.memoizedState=c.memoizedState,l.lanes=c.lanes):(l.updateQueue=null,l.memoizedState=null)}var d=0!=(1&Fo.current),f=i;do{var p;if(p=13===f.tag){var m=f.memoizedState;if(null!==m)p=null!==m.dehydrated;else{var h=f.memoizedProps;p=void 0!==h.fallback&&(!0!==h.unstable_avoidThisFallback||!d)}}if(p){var g=f.updateQueue;if(null===g){var b=new Set;b.add(u),f.updateQueue=b}else g.add(u);if(0==(2&f.mode)){if(f.flags|=64,l.flags|=16384,l.flags&=-2981,1===l.tag)if(null===l.alternate)l.tag=17;else{var v=co(-1,1);v.tag=2,fo(l,v)}l.lanes|=1;break e}s=void 0,l=t;var y=o.pingCache;if(null===y?(y=o.pingCache=new dl,s=new Set,y.set(u,s)):void 0===(s=y.get(u))&&(s=new Set,y.set(u,s)),!s.has(l)){s.add(l);var w=Us.bind(null,o,u,l);u.then(w,w)}f.flags|=4096,f.lanes=t;break e}f=f.return}while(null!==f);s=Error((V(l.type)||"A React component")+" suspended while rendering, but no fallback UI was specified.\n\nAdd a <Suspense fallback=...> component higher in the tree to provide a loading indicator or placeholder to display.")}5!==Fl&&(Fl=2),s=ul(s,l),f=i;do{switch(f.tag){case 3:o=s,f.flags|=4096,t&=-t,f.lanes|=t,po(f,fl(0,o,t));break e;case 1:o=s;var k=f.type,S=f.stateNode;if(0==(64&f.flags)&&("function"==typeof k.getDerivedStateFromError||null!==S&&"function"==typeof S.componentDidCatch&&(null===Xl||!Xl.has(S)))){f.flags|=4096,t&=-t,f.lanes|=t,po(f,pl(f,o,t));break e}}f=f.return}while(null!==f)}Ps(n)}catch(E){t=E,Il===n&&null!==n&&(Il=n=n.return);continue}break}}function Cs(){var e=Rl.current;return Rl.current=Ni,null===e?Ni:e}function _s(e,t){var n=Nl;Nl|=16;var r=Cs();for(Ol===e&&Dl===t||xs(e,t);;)try{As();break}catch(a){Ts(e,a)}if(no(),Nl=n,Rl.current=r,null!==Il)throw Error(i(261));return Ol=null,Dl=0,Fl}function As(){for(;null!==Il;)Rs(Il)}function Ls(){for(;null!==Il&&!Aa();)Rs(Il)}function Rs(e){var t=Wl(e.alternate,e,Ml);e.memoizedProps=e.pendingProps,null===t?Ps(e):Il=t,Pl.current=null}function Ps(e){var t=e;do{var n=t.alternate;if(e=t.return,0==(2048&t.flags)){if(null!==(n=ll(n,t,Ml)))return void(Il=n);if(24!==(n=t).tag&&23!==n.tag||null===n.memoizedState||0!=(1073741824&Ml)||0==(4&n.mode)){for(var r=0,a=n.child;null!==a;)r|=a.lanes|a.childLanes,a=a.sibling;n.childLanes=r}null!==e&&0==(2048&e.flags)&&(null===e.firstEffect&&(e.firstEffect=t.firstEffect),null!==t.lastEffect&&(null!==e.lastEffect&&(e.lastEffect.nextEffect=t.firstEffect),e.lastEffect=t.lastEffect),1<t.flags&&(null!==e.lastEffect?e.lastEffect.nextEffect=t:e.firstEffect=t,e.lastEffect=t))}else{if(null!==(n=sl(t)))return n.flags&=2047,void(Il=n);null!==e&&(e.firstEffect=e.lastEffect=null,e.flags|=2048)}if(null!==(t=t.sibling))return void(Il=t);Il=t=e}while(null!==t);0===Fl&&(Fl=5)}function Ns(e){var t=Ha();return Za(99,Os.bind(null,e,t)),null}function Os(e,t){do{Ds()}while(null!==es);if(0!=(48&Nl))throw Error(i(327));var n=e.finishedWork;if(null===n)return null;if(e.finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(i(177));e.callbackNode=null;var r=n.lanes|n.childLanes,a=r,o=e.pendingLanes&~a;e.pendingLanes=a,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=a,e.mutableReadLanes&=a,e.entangledLanes&=a,a=e.entanglements;for(var l=e.eventTimes,s=e.expirationTimes;0<o;){var u=31-Ht(o),c=1<<u;a[u]=0,l[u]=-1,s[u]=-1,o&=~c}if(null!==as&&0==(24&r)&&as.has(e)&&as.delete(e),e===Ol&&(Il=Ol=null,Dl=0),1<n.flags?null!==n.lastEffect?(n.lastEffect.nextEffect=n,r=n.firstEffect):r=n:r=n.firstEffect,null!==r){if(a=Nl,Nl|=32,Pl.current=null,Ur=Kt,br(l=gr())){if("selectionStart"in l)s={start:l.selectionStart,end:l.selectionEnd};else e:if(s=(s=l.ownerDocument)&&s.defaultView||window,(c=s.getSelection&&s.getSelection())&&0!==c.rangeCount){s=c.anchorNode,o=c.anchorOffset,u=c.focusNode,c=c.focusOffset;try{s.nodeType,u.nodeType}catch(C){s=null;break e}var d=0,f=-1,p=-1,m=0,h=0,g=l,b=null;t:for(;;){for(var v;g!==s||0!==o&&3!==g.nodeType||(f=d+o),g!==u||0!==c&&3!==g.nodeType||(p=d+c),3===g.nodeType&&(d+=g.nodeValue.length),null!==(v=g.firstChild);)b=g,g=v;for(;;){if(g===l)break t;if(b===s&&++m===o&&(f=d),b===u&&++h===c&&(p=d),null!==(v=g.nextSibling))break;b=(g=b).parentNode}g=v}s=-1===f||-1===p?null:{start:f,end:p}}else s=null;s=s||{start:0,end:0}}else s=null;$r={focusedElem:l,selectionRange:s},Kt=!1,cs=null,ds=!1,Kl=r;do{try{Is()}catch(C){if(null===Kl)throw Error(i(330));zs(Kl,C),Kl=Kl.nextEffect}}while(null!==Kl);cs=null,Kl=r;do{try{for(l=e;null!==Kl;){var y=Kl.flags;if(16&y&&ve(Kl.stateNode,""),128&y){var w=Kl.alternate;if(null!==w){var k=w.ref;null!==k&&("function"==typeof k?k(null):k.current=null)}}switch(1038&y){case 2:Sl(Kl),Kl.flags&=-3;break;case 6:Sl(Kl),Kl.flags&=-3,Cl(Kl.alternate,Kl);break;case 1024:Kl.flags&=-1025;break;case 1028:Kl.flags&=-1025,Cl(Kl.alternate,Kl);break;case 4:Cl(Kl.alternate,Kl);break;case 8:Tl(l,s=Kl);var S=s.alternate;wl(s),null!==S&&wl(S)}Kl=Kl.nextEffect}}catch(C){if(null===Kl)throw Error(i(330));zs(Kl,C),Kl=Kl.nextEffect}}while(null!==Kl);if(k=$r,w=gr(),y=k.focusedElem,l=k.selectionRange,w!==y&&y&&y.ownerDocument&&hr(y.ownerDocument.documentElement,y)){null!==l&&br(y)&&(w=l.start,void 0===(k=l.end)&&(k=w),"selectionStart"in y?(y.selectionStart=w,y.selectionEnd=Math.min(k,y.value.length)):(k=(w=y.ownerDocument||document)&&w.defaultView||window).getSelection&&(k=k.getSelection(),s=y.textContent.length,S=Math.min(l.start,s),l=void 0===l.end?S:Math.min(l.end,s),!k.extend&&S>l&&(s=l,l=S,S=s),s=mr(y,S),o=mr(y,l),s&&o&&(1!==k.rangeCount||k.anchorNode!==s.node||k.anchorOffset!==s.offset||k.focusNode!==o.node||k.focusOffset!==o.offset)&&((w=w.createRange()).setStart(s.node,s.offset),k.removeAllRanges(),S>l?(k.addRange(w),k.extend(o.node,o.offset)):(w.setEnd(o.node,o.offset),k.addRange(w))))),w=[];for(k=y;k=k.parentNode;)1===k.nodeType&&w.push({element:k,left:k.scrollLeft,top:k.scrollTop});for("function"==typeof y.focus&&y.focus(),y=0;y<w.length;y++)(k=w[y]).element.scrollLeft=k.left,k.element.scrollTop=k.top}Kt=!!Ur,$r=Ur=null,e.current=n,Kl=r;do{try{for(y=e;null!==Kl;){var E=Kl.flags;if(36&E&&bl(y,Kl.alternate,Kl),128&E){w=void 0;var x=Kl.ref;if(null!==x){var T=Kl.stateNode;Kl.tag,w=T,"function"==typeof x?x(w):x.current=w}}Kl=Kl.nextEffect}}catch(C){if(null===Kl)throw Error(i(330));zs(Kl,C),Kl=Kl.nextEffect}}while(null!==Kl);Kl=null,Fa(),Nl=a}else e.current=n;if(Jl)Jl=!1,es=e,ts=t;else for(Kl=r;null!==Kl;)t=Kl.nextEffect,Kl.nextEffect=null,8&Kl.flags&&((E=Kl).sibling=null,E.stateNode=null),Kl=t;if(0===(r=e.pendingLanes)&&(Xl=null),1===r?e===is?os++:(os=0,is=e):os=0,n=n.stateNode,xa&&"function"==typeof xa.onCommitFiberRoot)try{xa.onCommitFiberRoot(Ea,n,void 0,64==(64&n.current.flags))}catch(C){}if(gs(e,qa()),Yl)throw Yl=!1,e=Ql,Ql=null,e;return 0!=(8&Nl)||Wa(),null}function Is(){for(;null!==Kl;){var e=Kl.alternate;ds||null===cs||(0!=(8&Kl.flags)?et(Kl,cs)&&(ds=!0):13===Kl.tag&&Al(e,Kl)&&et(Kl,cs)&&(ds=!0));var t=Kl.flags;0!=(256&t)&&gl(e,Kl),0==(512&t)||Jl||(Jl=!0,Va(97,(function(){return Ds(),null}))),Kl=Kl.nextEffect}}function Ds(){if(90!==ts){var e=97<ts?97:ts;return ts=90,Za(e,Fs)}return!1}function Ms(e,t){ns.push(t,e),Jl||(Jl=!0,Va(97,(function(){return Ds(),null})))}function Bs(e,t){rs.push(t,e),Jl||(Jl=!0,Va(97,(function(){return Ds(),null})))}function Fs(){if(null===es)return!1;var e=es;if(es=null,0!=(48&Nl))throw Error(i(331));var t=Nl;Nl|=32;var n=rs;rs=[];for(var r=0;r<n.length;r+=2){var a=n[r],o=n[r+1],l=a.destroy;if(a.destroy=void 0,"function"==typeof l)try{l()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(n=ns,ns=[],r=0;r<n.length;r+=2){a=n[r],o=n[r+1];try{var s=a.create;a.destroy=s()}catch(u){if(null===o)throw Error(i(330));zs(o,u)}}for(s=e.current.firstEffect;null!==s;)e=s.nextEffect,s.nextEffect=null,8&s.flags&&(s.sibling=null,s.stateNode=null),s=e;return Nl=t,Wa(),!0}function js(e,t,n){fo(e,t=fl(0,t=ul(n,t),1)),t=fs(),null!==(e=hs(e,1))&&(qt(e,1,t),gs(e,t))}function zs(e,t){if(3===e.tag)js(e,e,t);else for(var n=e.return;null!==n;){if(3===n.tag){js(n,e,t);break}if(1===n.tag){var r=n.stateNode;if("function"==typeof n.type.getDerivedStateFromError||"function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r))){var a=pl(n,e=ul(t,e),1);if(fo(n,a),a=fs(),null!==(n=hs(n,1)))qt(n,1,a),gs(n,a);else if("function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r)))try{r.componentDidCatch(t,e)}catch(o){}break}}n=n.return}}function Us(e,t,n){var r=e.pingCache;null!==r&&r.delete(t),t=fs(),e.pingedLanes|=e.suspendedLanes&n,Ol===e&&(Dl&n)===n&&(4===Fl||3===Fl&&(62914560&Dl)===Dl&&500>qa()-Gl?xs(e,0):ql|=n),gs(e,t)}function $s(e,t){var n=e.stateNode;null!==n&&n.delete(t),0===(t=0)&&(0==(2&(t=e.mode))?t=1:0==(4&t)?t=99===Ha()?1:2:(0===ss&&(ss=zl),0===(t=Ut(62914560&~ss))&&(t=4194304))),n=fs(),null!==(e=hs(e,t))&&(qt(e,t,n),gs(e,n))}function qs(e,t,n,r){this.tag=e,this.key=n,this.sibling=this.child=this.return=this.stateNode=this.type=this.elementType=null,this.index=0,this.ref=null,this.pendingProps=t,this.dependencies=this.memoizedState=this.updateQueue=this.memoizedProps=null,this.mode=r,this.flags=0,this.lastEffect=this.firstEffect=this.nextEffect=null,this.childLanes=this.lanes=0,this.alternate=null}function Hs(e,t,n,r){return new qs(e,t,n,r)}function Gs(e){return!(!(e=e.prototype)||!e.isReactComponent)}function Zs(e,t){var n=e.alternate;return null===n?((n=Hs(e.tag,t,e.key,e.mode)).elementType=e.elementType,n.type=e.type,n.stateNode=e.stateNode,n.alternate=e,e.alternate=n):(n.pendingProps=t,n.type=e.type,n.flags=0,n.nextEffect=null,n.firstEffect=null,n.lastEffect=null),n.childLanes=e.childLanes,n.lanes=e.lanes,n.child=e.child,n.memoizedProps=e.memoizedProps,n.memoizedState=e.memoizedState,n.updateQueue=e.updateQueue,t=e.dependencies,n.dependencies=null===t?null:{lanes:t.lanes,firstContext:t.firstContext},n.sibling=e.sibling,n.index=e.index,n.ref=e.ref,n}function Vs(e,t,n,r,a,o){var l=2;if(r=e,"function"==typeof e)Gs(e)&&(l=1);else if("string"==typeof e)l=5;else e:switch(e){case x:return Ws(n.children,a,o,t);case M:l=8,a|=16;break;case T:l=8,a|=1;break;case C:return(e=Hs(12,n,t,8|a)).elementType=C,e.type=C,e.lanes=o,e;case R:return(e=Hs(13,n,t,a)).type=R,e.elementType=R,e.lanes=o,e;case P:return(e=Hs(19,n,t,a)).elementType=P,e.lanes=o,e;case B:return Ks(n,a,o,t);case F:return(e=Hs(24,n,t,a)).elementType=F,e.lanes=o,e;default:if("object"==typeof e&&null!==e)switch(e.$$typeof){case _:l=10;break e;case A:l=9;break e;case L:l=11;break e;case N:l=14;break e;case O:l=16,r=null;break e;case I:l=22;break e}throw Error(i(130,null==e?e:typeof e,""))}return(t=Hs(l,n,t,a)).elementType=e,t.type=r,t.lanes=o,t}function Ws(e,t,n,r){return(e=Hs(7,e,r,t)).lanes=n,e}function Ks(e,t,n,r){return(e=Hs(23,e,r,t)).elementType=B,e.lanes=n,e}function Ys(e,t,n){return(e=Hs(6,e,null,t)).lanes=n,e}function Qs(e,t,n){return(t=Hs(4,null!==e.children?e.children:[],e.key,t)).lanes=n,t.stateNode={containerInfo:e.containerInfo,pendingChildren:null,implementation:e.implementation},t}function Xs(e,t,n){this.tag=t,this.containerInfo=e,this.finishedWork=this.pingCache=this.current=this.pendingChildren=null,this.timeoutHandle=-1,this.pendingContext=this.context=null,this.hydrate=n,this.callbackNode=null,this.callbackPriority=0,this.eventTimes=$t(0),this.expirationTimes=$t(-1),this.entangledLanes=this.finishedLanes=this.mutableReadLanes=this.expiredLanes=this.pingedLanes=this.suspendedLanes=this.pendingLanes=0,this.entanglements=$t(0),this.mutableSourceEagerHydrationData=null}function Js(e,t,n){var r=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null;return{$$typeof:E,key:null==r?null:""+r,children:e,containerInfo:t,implementation:n}}function eu(e,t,n,r){var a=t.current,o=fs(),l=ps(a);e:if(n){t:{if(Ye(n=n._reactInternals)!==n||1!==n.tag)throw Error(i(170));var s=n;do{switch(s.tag){case 3:s=s.stateNode.context;break t;case 1:if(ba(s.type)){s=s.stateNode.__reactInternalMemoizedMergedChildContext;break t}}s=s.return}while(null!==s);throw Error(i(171))}if(1===n.tag){var u=n.type;if(ba(u)){n=wa(n,u,s);break e}}n=s}else n=fa;return null===t.context?t.context=n:t.pendingContext=n,(t=co(o,l)).payload={element:e},null!==(r=void 0===r?null:r)&&(t.callback=r),fo(a,t),ms(a,l,o),l}function tu(e){return(e=e.current).child?(e.child.tag,e.child.stateNode):null}function nu(e,t){if(null!==(e=e.memoizedState)&&null!==e.dehydrated){var n=e.retryLane;e.retryLane=0!==n&&n<t?n:t}}function ru(e,t){nu(e,t),(e=e.alternate)&&nu(e,t)}function au(e,t,n){var r=null!=n&&null!=n.hydrationOptions&&n.hydrationOptions.mutableSources||null;if(n=new Xs(e,t,null!=n&&!0===n.hydrate),t=Hs(3,null,null,2===t?7:1===t?3:0),n.current=t,t.stateNode=n,so(t),e[ea]=n.current,Nr(8===e.nodeType?e.parentNode:e),r)for(e=0;e<r.length;e++){var a=(t=r[e])._getVersion;a=a(t._source),null==n.mutableSourceEagerHydrationData?n.mutableSourceEagerHydrationData=[t,a]:n.mutableSourceEagerHydrationData.push(t,a)}this._internalRoot=n}function ou(e){return!(!e||1!==e.nodeType&&9!==e.nodeType&&11!==e.nodeType&&(8!==e.nodeType||" react-mount-point-unstable "!==e.nodeValue))}function iu(e,t,n,r,a){var o=n._reactRootContainer;if(o){var i=o._internalRoot;if("function"==typeof a){var l=a;a=function(){var e=tu(i);l.call(e)}}eu(t,i,e,a)}else{if(o=n._reactRootContainer=function(e,t){if(t||(t=!(!(t=e?9===e.nodeType?e.documentElement:e.firstChild:null)||1!==t.nodeType||!t.hasAttribute("data-reactroot"))),!t)for(var n;n=e.lastChild;)e.removeChild(n);return new au(e,0,t?{hydrate:!0}:void 0)}(n,r),i=o._internalRoot,"function"==typeof a){var s=a;a=function(){var e=tu(i);s.call(e)}}ks((function(){eu(t,i,e,a)}))}return tu(i)}function lu(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!ou(t))throw Error(i(200));return Js(e,t,null,n)}Wl=function(e,t,n){var r=t.lanes;if(null!==e)if(e.memoizedProps!==t.pendingProps||ma.current)Bi=!0;else{if(0==(n&r)){switch(Bi=!1,t.tag){case 3:Vi(t),Wo();break;case 5:Mo(t);break;case 1:ba(t.type)&&ka(t);break;case 4:Io(t,t.stateNode.containerInfo);break;case 10:r=t.memoizedProps.value;var a=t.type._context;da(Xa,a._currentValue),a._currentValue=r;break;case 13:if(null!==t.memoizedState)return 0!=(n&t.child.childLanes)?Xi(e,t,n):(da(Fo,1&Fo.current),null!==(t=ol(e,t,n))?t.sibling:null);da(Fo,1&Fo.current);break;case 19:if(r=0!=(n&t.childLanes),0!=(64&e.flags)){if(r)return al(e,t,n);t.flags|=64}if(null!==(a=t.memoizedState)&&(a.rendering=null,a.tail=null,a.lastEffect=null),da(Fo,Fo.current),r)break;return null;case 23:case 24:return t.lanes=0,$i(e,t,n)}return ol(e,t,n)}Bi=0!=(16384&e.flags)}else Bi=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=ga(t,pa.current),oo(t,n),a=li(null,t,r,e,a,n),t.flags|=1,"object"==typeof a&&null!==a&&"function"==typeof a.render&&void 0===a.$$typeof){if(t.tag=1,t.memoizedState=null,t.updateQueue=null,ba(r)){var o=!0;ka(t)}else o=!1;t.memoizedState=null!==a.state&&void 0!==a.state?a.state:null,so(t);var l=r.getDerivedStateFromProps;"function"==typeof l&&bo(t,r,l,e),a.updater=vo,t.stateNode=a,a._reactInternals=t,So(t,r,e,n),t=Zi(null,t,r,!0,o,n)}else t.tag=0,Fi(null,t,a,n),t=t.child;return t;case 16:a=t.elementType;e:{switch(null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=(o=a._init)(a._payload),t.type=a,o=t.tag=function(e){if("function"==typeof e)return Gs(e)?1:0;if(null!=e){if((e=e.$$typeof)===L)return 11;if(e===N)return 14}return 2}(a),e=Qa(a,e),o){case 0:t=Hi(null,t,a,e,n);break e;case 1:t=Gi(null,t,a,e,n);break e;case 11:t=ji(null,t,a,e,n);break e;case 14:t=zi(null,t,a,Qa(a.type,e),r,n);break e}throw Error(i(306,a,""))}return t;case 0:return r=t.type,a=t.pendingProps,Hi(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 1:return r=t.type,a=t.pendingProps,Gi(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 3:if(Vi(t),r=t.updateQueue,null===e||null===r)throw Error(i(282));if(r=t.pendingProps,a=null!==(a=t.memoizedState)?a.element:null,uo(e,t),mo(t,r,null,n),(r=t.memoizedState.element)===a)Wo(),t=ol(e,t,n);else{if((o=(a=t.stateNode).hydrate)&&(Uo=Wr(t.stateNode.containerInfo.firstChild),zo=t,o=$o=!0),o){if(null!=(e=a.mutableSourceEagerHydrationData))for(a=0;a<e.length;a+=2)(o=e[a])._workInProgressVersionPrimary=e[a+1],Ko.push(o);for(n=Ao(t,null,r,n),t.child=n;n;)n.flags=-3&n.flags|1024,n=n.sibling}else Fi(e,t,r,n),Wo();t=t.child}return t;case 5:return Mo(t),null===e&&Go(t),r=t.type,a=t.pendingProps,o=null!==e?e.memoizedProps:null,l=a.children,Hr(r,a)?l=null:null!==o&&Hr(r,o)&&(t.flags|=16),qi(e,t),Fi(e,t,l,n),t.child;case 6:return null===e&&Go(t),null;case 13:return Xi(e,t,n);case 4:return Io(t,t.stateNode.containerInfo),r=t.pendingProps,null===e?t.child=_o(t,null,r,n):Fi(e,t,r,n),t.child;case 11:return r=t.type,a=t.pendingProps,ji(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 7:return Fi(e,t,t.pendingProps,n),t.child;case 8:case 12:return Fi(e,t,t.pendingProps.children,n),t.child;case 10:e:{r=t.type._context,a=t.pendingProps,l=t.memoizedProps,o=a.value;var s=t.type._context;if(da(Xa,s._currentValue),s._currentValue=o,null!==l)if(s=l.value,0===(o=cr(s,o)?0:0|("function"==typeof r._calculateChangedBits?r._calculateChangedBits(s,o):1073741823))){if(l.children===a.children&&!ma.current){t=ol(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var u=s.dependencies;if(null!==u){l=s.child;for(var c=u.firstContext;null!==c;){if(c.context===r&&0!=(c.observedBits&o)){1===s.tag&&((c=co(-1,n&-n)).tag=2,fo(s,c)),s.lanes|=n,null!==(c=s.alternate)&&(c.lanes|=n),ao(s.return,n),u.lanes|=n;break}c=c.next}}else l=10===s.tag&&s.type===t.type?null:s.child;if(null!==l)l.return=s;else for(l=s;null!==l;){if(l===t){l=null;break}if(null!==(s=l.sibling)){s.return=l.return,l=s;break}l=l.return}s=l}Fi(e,t,a.children,n),t=t.child}return t;case 9:return a=t.type,r=(o=t.pendingProps).children,oo(t,n),r=r(a=io(a,o.unstable_observedBits)),t.flags|=1,Fi(e,t,r,n),t.child;case 14:return o=Qa(a=t.type,t.pendingProps),zi(e,t,a,o=Qa(a.type,o),r,n);case 15:return Ui(e,t,t.type,t.pendingProps,r,n);case 17:return r=t.type,a=t.pendingProps,a=t.elementType===r?a:Qa(r,a),null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),t.tag=1,ba(r)?(e=!0,ka(t)):e=!1,oo(t,n),wo(t,r,a),So(t,r,a,n),Zi(null,t,r,!0,e,n);case 19:return al(e,t,n);case 23:case 24:return $i(e,t,n)}throw Error(i(156,t.tag))},au.prototype.render=function(e){eu(e,this._internalRoot,null,null)},au.prototype.unmount=function(){var e=this._internalRoot,t=e.containerInfo;eu(null,e,null,(function(){t[ea]=null}))},tt=function(e){13===e.tag&&(ms(e,4,fs()),ru(e,4))},nt=function(e){13===e.tag&&(ms(e,67108864,fs()),ru(e,67108864))},rt=function(e){if(13===e.tag){var t=fs(),n=ps(e);ms(e,n,t),ru(e,n)}},at=function(e,t){return t()},_e=function(e,t,n){switch(t){case"input":if(ne(e,n),t=n.name,"radio"===n.type&&null!=t){for(n=e;n.parentNode;)n=n.parentNode;for(n=n.querySelectorAll("input[name="+JSON.stringify(""+t)+'][type="radio"]'),t=0;t<n.length;t++){var r=n[t];if(r!==e&&r.form===e.form){var a=oa(r);if(!a)throw Error(i(90));Q(r),ne(r,a)}}}break;case"textarea":ue(e,n);break;case"select":null!=(t=n.value)&&ie(e,!!n.multiple,t,!1)}},Oe=ws,Ie=function(e,t,n,r,a){var o=Nl;Nl|=4;try{return Za(98,e.bind(null,t,n,r,a))}finally{0===(Nl=o)&&(Vl(),Wa())}},De=function(){0==(49&Nl)&&(function(){if(null!==as){var e=as;as=null,e.forEach((function(e){e.expiredLanes|=24&e.pendingLanes,gs(e,qa())}))}Wa()}(),Ds())},Me=function(e,t){var n=Nl;Nl|=2;try{return e(t)}finally{0===(Nl=n)&&(Vl(),Wa())}};var su={Events:[ra,aa,oa,Pe,Ne,Ds,{current:!1}]},uu={findFiberByHostInstance:na,bundleType:0,version:"17.0.2",rendererPackageName:"react-dom"},cu={bundleType:uu.bundleType,version:uu.version,rendererPackageName:uu.rendererPackageName,rendererConfig:uu.rendererConfig,overrideHookState:null,overrideHookStateDeletePath:null,overrideHookStateRenamePath:null,overrideProps:null,overridePropsDeletePath:null,overridePropsRenamePath:null,setSuspenseHandler:null,scheduleUpdate:null,currentDispatcherRef:k.ReactCurrentDispatcher,findHostInstanceByFiber:function(e){return null===(e=Je(e))?null:e.stateNode},findFiberByHostInstance:uu.findFiberByHostInstance||function(){return null},findHostInstancesForRefresh:null,scheduleRefresh:null,scheduleRoot:null,setRefreshHandler:null,getCurrentFiber:null};if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__){var du=__REACT_DEVTOOLS_GLOBAL_HOOK__;if(!du.isDisabled&&du.supportsFiber)try{Ea=du.inject(cu),xa=du}catch(ge){}}t.createPortal=lu,t.hydrate=function(e,t,n){if(!ou(t))throw Error(i(200));return iu(null,e,t,!0,n)}},3935:(e,t,n)=>{"use strict";!function e(){if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(e)}catch(t){console.error(t)}}(),e.exports=n(4448)},9590:e=>{var t="undefined"!=typeof Element,n="function"==typeof Map,r="function"==typeof Set,a="function"==typeof ArrayBuffer&&!!ArrayBuffer.isView;function o(e,i){if(e===i)return!0;if(e&&i&&"object"==typeof e&&"object"==typeof i){if(e.constructor!==i.constructor)return!1;var l,s,u,c;if(Array.isArray(e)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(!o(e[s],i[s]))return!1;return!0}if(n&&e instanceof Map&&i instanceof Map){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;for(c=e.entries();!(s=c.next()).done;)if(!o(s.value[1],i.get(s.value[0])))return!1;return!0}if(r&&e instanceof Set&&i instanceof Set){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;return!0}if(a&&ArrayBuffer.isView(e)&&ArrayBuffer.isView(i)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(e[s]!==i[s])return!1;return!0}if(e.constructor===RegExp)return e.source===i.source&&e.flags===i.flags;if(e.valueOf!==Object.prototype.valueOf)return e.valueOf()===i.valueOf();if(e.toString!==Object.prototype.toString)return e.toString()===i.toString();if((l=(u=Object.keys(e)).length)!==Object.keys(i).length)return!1;for(s=l;0!=s--;)if(!Object.prototype.hasOwnProperty.call(i,u[s]))return!1;if(t&&e instanceof Element)return!1;for(s=l;0!=s--;)if(("_owner"!==u[s]&&"__v"!==u[s]&&"__o"!==u[s]||!e.$$typeof)&&!o(e[u[s]],i[u[s]]))return!1;return!0}return e!=e&&i!=i}e.exports=function(e,t){try{return o(e,t)}catch(n){if((n.message||"").match(/stack|recursion/i))return console.warn("react-fast-compare cannot handle circular refs"),!1;throw n}}},405:(e,t,n)=>{"use strict";n.d(t,{B6:()=>G,ql:()=>J});var r=n(7294),a=n(5697),o=n.n(a),i=n(9590),l=n.n(i),s=n(1143),u=n.n(s),c=n(6774),d=n.n(c);function f(){return f=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},f.apply(this,arguments)}function p(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,m(e,t)}function m(e,t){return m=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e},m(e,t)}function h(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t.indexOf(n=o[r])>=0||(a[n]=e[n]);return a}var g={BASE:"base",BODY:"body",HEAD:"head",HTML:"html",LINK:"link",META:"meta",NOSCRIPT:"noscript",SCRIPT:"script",STYLE:"style",TITLE:"title",FRAGMENT:"Symbol(react.fragment)"},b={rel:["amphtml","canonical","alternate"]},v={type:["application/ld+json"]},y={charset:"",name:["robots","description"],property:["og:type","og:title","og:url","og:image","og:image:alt","og:description","twitter:url","twitter:title","twitter:description","twitter:image","twitter:image:alt","twitter:card","twitter:site"]},w=Object.keys(g).map((function(e){return g[e]})),k={accesskey:"accessKey",charset:"charSet",class:"className",contenteditable:"contentEditable",contextmenu:"contextMenu","http-equiv":"httpEquiv",itemprop:"itemProp",tabindex:"tabIndex"},S=Object.keys(k).reduce((function(e,t){return e[k[t]]=t,e}),{}),E=function(e,t){for(var n=e.length-1;n>=0;n-=1){var r=e[n];if(Object.prototype.hasOwnProperty.call(r,t))return r[t]}return null},x=function(e){var t=E(e,g.TITLE),n=E(e,"titleTemplate");if(Array.isArray(t)&&(t=t.join("")),n&&t)return n.replace(/%s/g,(function(){return t}));var r=E(e,"defaultTitle");return t||r||void 0},T=function(e){return E(e,"onChangeClientState")||function(){}},C=function(e,t){return t.filter((function(t){return void 0!==t[e]})).map((function(t){return t[e]})).reduce((function(e,t){return f({},e,t)}),{})},_=function(e,t){return t.filter((function(e){return void 0!==e[g.BASE]})).map((function(e){return e[g.BASE]})).reverse().reduce((function(t,n){if(!t.length)for(var r=Object.keys(n),a=0;a<r.length;a+=1){var o=r[a].toLowerCase();if(-1!==e.indexOf(o)&&n[o])return t.concat(n)}return t}),[])},A=function(e,t,n){var r={};return n.filter((function(t){return!!Array.isArray(t[e])||(void 0!==t[e]&&console&&"function"==typeof console.warn&&console.warn("Helmet: "+e+' should be of type "Array". Instead found type "'+typeof t[e]+'"'),!1)})).map((function(t){return t[e]})).reverse().reduce((function(e,n){var a={};n.filter((function(e){for(var n,o=Object.keys(e),i=0;i<o.length;i+=1){var l=o[i],s=l.toLowerCase();-1===t.indexOf(s)||"rel"===n&&"canonical"===e[n].toLowerCase()||"rel"===s&&"stylesheet"===e[s].toLowerCase()||(n=s),-1===t.indexOf(l)||"innerHTML"!==l&&"cssText"!==l&&"itemprop"!==l||(n=l)}if(!n||!e[n])return!1;var u=e[n].toLowerCase();return r[n]||(r[n]={}),a[n]||(a[n]={}),!r[n][u]&&(a[n][u]=!0,!0)})).reverse().forEach((function(t){return e.push(t)}));for(var o=Object.keys(a),i=0;i<o.length;i+=1){var l=o[i],s=f({},r[l],a[l]);r[l]=s}return e}),[]).reverse()},L=function(e,t){if(Array.isArray(e)&&e.length)for(var n=0;n<e.length;n+=1)if(e[n][t])return!0;return!1},R=function(e){return Array.isArray(e)?e.join(""):e},P=function(e,t){return Array.isArray(e)?e.reduce((function(e,n){return function(e,t){for(var n=Object.keys(e),r=0;r<n.length;r+=1)if(t[n[r]]&&t[n[r]].includes(e[n[r]]))return!0;return!1}(n,t)?e.priority.push(n):e.default.push(n),e}),{priority:[],default:[]}):{default:e}},N=function(e,t){var n;return f({},e,((n={})[t]=void 0,n))},O=[g.NOSCRIPT,g.SCRIPT,g.STYLE],I=function(e,t){return void 0===t&&(t=!0),!1===t?String(e):String(e).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")},D=function(e){return Object.keys(e).reduce((function(t,n){var r=void 0!==e[n]?n+'="'+e[n]+'"':""+n;return t?t+" "+r:r}),"")},M=function(e,t){return void 0===t&&(t={}),Object.keys(e).reduce((function(t,n){return t[k[n]||n]=e[n],t}),t)},B=function(e,t){return t.map((function(t,n){var a,o=((a={key:n})["data-rh"]=!0,a);return Object.keys(t).forEach((function(e){var n=k[e]||e;"innerHTML"===n||"cssText"===n?o.dangerouslySetInnerHTML={__html:t.innerHTML||t.cssText}:o[n]=t[e]})),r.createElement(e,o)}))},F=function(e,t,n){switch(e){case g.TITLE:return{toComponent:function(){return n=t.titleAttributes,(a={key:e=t.title})["data-rh"]=!0,o=M(n,a),[r.createElement(g.TITLE,o,e)];var e,n,a,o},toString:function(){return function(e,t,n,r){var a=D(n),o=R(t);return a?"<"+e+' data-rh="true" '+a+">"+I(o,r)+"</"+e+">":"<"+e+' data-rh="true">'+I(o,r)+"</"+e+">"}(e,t.title,t.titleAttributes,n)}};case"bodyAttributes":case"htmlAttributes":return{toComponent:function(){return M(t)},toString:function(){return D(t)}};default:return{toComponent:function(){return B(e,t)},toString:function(){return function(e,t,n){return t.reduce((function(t,r){var a=Object.keys(r).filter((function(e){return!("innerHTML"===e||"cssText"===e)})).reduce((function(e,t){var a=void 0===r[t]?t:t+'="'+I(r[t],n)+'"';return e?e+" "+a:a}),""),o=r.innerHTML||r.cssText||"",i=-1===O.indexOf(e);return t+"<"+e+' data-rh="true" '+a+(i?"/>":">"+o+"</"+e+">")}),"")}(e,t,n)}}}},j=function(e){var t=e.baseTag,n=e.bodyAttributes,r=e.encode,a=e.htmlAttributes,o=e.noscriptTags,i=e.styleTags,l=e.title,s=void 0===l?"":l,u=e.titleAttributes,c=e.linkTags,d=e.metaTags,f=e.scriptTags,p={toComponent:function(){},toString:function(){return""}};if(e.prioritizeSeoTags){var m=function(e){var t=e.linkTags,n=e.scriptTags,r=e.encode,a=P(e.metaTags,y),o=P(t,b),i=P(n,v);return{priorityMethods:{toComponent:function(){return[].concat(B(g.META,a.priority),B(g.LINK,o.priority),B(g.SCRIPT,i.priority))},toString:function(){return F(g.META,a.priority,r)+" "+F(g.LINK,o.priority,r)+" "+F(g.SCRIPT,i.priority,r)}},metaTags:a.default,linkTags:o.default,scriptTags:i.default}}(e);p=m.priorityMethods,c=m.linkTags,d=m.metaTags,f=m.scriptTags}return{priority:p,base:F(g.BASE,t,r),bodyAttributes:F("bodyAttributes",n,r),htmlAttributes:F("htmlAttributes",a,r),link:F(g.LINK,c,r),meta:F(g.META,d,r),noscript:F(g.NOSCRIPT,o,r),script:F(g.SCRIPT,f,r),style:F(g.STYLE,i,r),title:F(g.TITLE,{title:s,titleAttributes:u},r)}},z=[],U=function(e,t){var n=this;void 0===t&&(t="undefined"!=typeof document),this.instances=[],this.value={setHelmet:function(e){n.context.helmet=e},helmetInstances:{get:function(){return n.canUseDOM?z:n.instances},add:function(e){(n.canUseDOM?z:n.instances).push(e)},remove:function(e){var t=(n.canUseDOM?z:n.instances).indexOf(e);(n.canUseDOM?z:n.instances).splice(t,1)}}},this.context=e,this.canUseDOM=t,t||(e.helmet=j({baseTag:[],bodyAttributes:{},encodeSpecialCharacters:!0,htmlAttributes:{},linkTags:[],metaTags:[],noscriptTags:[],scriptTags:[],styleTags:[],title:"",titleAttributes:{}}))},$=r.createContext({}),q=o().shape({setHelmet:o().func,helmetInstances:o().shape({get:o().func,add:o().func,remove:o().func})}),H="undefined"!=typeof document,G=function(e){function t(n){var r;return(r=e.call(this,n)||this).helmetData=new U(r.props.context,t.canUseDOM),r}return p(t,e),t.prototype.render=function(){return r.createElement($.Provider,{value:this.helmetData.value},this.props.children)},t}(r.Component);G.canUseDOM=H,G.propTypes={context:o().shape({helmet:o().shape()}),children:o().node.isRequired},G.defaultProps={context:{}},G.displayName="HelmetProvider";var Z=function(e,t){var n,r=document.head||document.querySelector(g.HEAD),a=r.querySelectorAll(e+"[data-rh]"),o=[].slice.call(a),i=[];return t&&t.length&&t.forEach((function(t){var r=document.createElement(e);for(var a in t)Object.prototype.hasOwnProperty.call(t,a)&&("innerHTML"===a?r.innerHTML=t.innerHTML:"cssText"===a?r.styleSheet?r.styleSheet.cssText=t.cssText:r.appendChild(document.createTextNode(t.cssText)):r.setAttribute(a,void 0===t[a]?"":t[a]));r.setAttribute("data-rh","true"),o.some((function(e,t){return n=t,r.isEqualNode(e)}))?o.splice(n,1):i.push(r)})),o.forEach((function(e){return e.parentNode.removeChild(e)})),i.forEach((function(e){return r.appendChild(e)})),{oldTags:o,newTags:i}},V=function(e,t){var n=document.getElementsByTagName(e)[0];if(n){for(var r=n.getAttribute("data-rh"),a=r?r.split(","):[],o=[].concat(a),i=Object.keys(t),l=0;l<i.length;l+=1){var s=i[l],u=t[s]||"";n.getAttribute(s)!==u&&n.setAttribute(s,u),-1===a.indexOf(s)&&a.push(s);var c=o.indexOf(s);-1!==c&&o.splice(c,1)}for(var d=o.length-1;d>=0;d-=1)n.removeAttribute(o[d]);a.length===o.length?n.removeAttribute("data-rh"):n.getAttribute("data-rh")!==i.join(",")&&n.setAttribute("data-rh",i.join(","))}},W=function(e,t){var n=e.baseTag,r=e.htmlAttributes,a=e.linkTags,o=e.metaTags,i=e.noscriptTags,l=e.onChangeClientState,s=e.scriptTags,u=e.styleTags,c=e.title,d=e.titleAttributes;V(g.BODY,e.bodyAttributes),V(g.HTML,r),function(e,t){void 0!==e&&document.title!==e&&(document.title=R(e)),V(g.TITLE,t)}(c,d);var f={baseTag:Z(g.BASE,n),linkTags:Z(g.LINK,a),metaTags:Z(g.META,o),noscriptTags:Z(g.NOSCRIPT,i),scriptTags:Z(g.SCRIPT,s),styleTags:Z(g.STYLE,u)},p={},m={};Object.keys(f).forEach((function(e){var t=f[e],n=t.newTags,r=t.oldTags;n.length&&(p[e]=n),r.length&&(m[e]=f[e].oldTags)})),t&&t(),l(e,p,m)},K=null,Y=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).rendered=!1,t}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!d()(e,this.props)},n.componentDidUpdate=function(){this.emitChange()},n.componentWillUnmount=function(){this.props.context.helmetInstances.remove(this),this.emitChange()},n.emitChange=function(){var e,t,n=this.props.context,r=n.setHelmet,a=null,o=(e=n.helmetInstances.get().map((function(e){var t=f({},e.props);return delete t.context,t})),{baseTag:_(["href"],e),bodyAttributes:C("bodyAttributes",e),defer:E(e,"defer"),encode:E(e,"encodeSpecialCharacters"),htmlAttributes:C("htmlAttributes",e),linkTags:A(g.LINK,["rel","href"],e),metaTags:A(g.META,["name","charset","http-equiv","property","itemprop"],e),noscriptTags:A(g.NOSCRIPT,["innerHTML"],e),onChangeClientState:T(e),scriptTags:A(g.SCRIPT,["src","innerHTML"],e),styleTags:A(g.STYLE,["cssText"],e),title:x(e),titleAttributes:C("titleAttributes",e),prioritizeSeoTags:L(e,"prioritizeSeoTags")});G.canUseDOM?(t=o,K&&cancelAnimationFrame(K),t.defer?K=requestAnimationFrame((function(){W(t,(function(){K=null}))})):(W(t),K=null)):j&&(a=j(o)),r(a)},n.init=function(){this.rendered||(this.rendered=!0,this.props.context.helmetInstances.add(this),this.emitChange())},n.render=function(){return this.init(),null},t}(r.Component);Y.propTypes={context:q.isRequired},Y.displayName="HelmetDispatcher";var Q=["children"],X=["children"],J=function(e){function t(){return e.apply(this,arguments)||this}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!l()(N(this.props,"helmetData"),N(e,"helmetData"))},n.mapNestedChildrenToProps=function(e,t){if(!t)return null;switch(e.type){case g.SCRIPT:case g.NOSCRIPT:return{innerHTML:t};case g.STYLE:return{cssText:t};default:throw new Error("<"+e.type+" /> elements are self-closing and can not contain children. Refer to our API for more information.")}},n.flattenArrayTypeChildren=function(e){var t,n=e.child,r=e.arrayTypeChildren;return f({},r,((t={})[n.type]=[].concat(r[n.type]||[],[f({},e.newChildProps,this.mapNestedChildrenToProps(n,e.nestedChildren))]),t))},n.mapObjectTypeChildren=function(e){var t,n,r=e.child,a=e.newProps,o=e.newChildProps,i=e.nestedChildren;switch(r.type){case g.TITLE:return f({},a,((t={})[r.type]=i,t.titleAttributes=f({},o),t));case g.BODY:return f({},a,{bodyAttributes:f({},o)});case g.HTML:return f({},a,{htmlAttributes:f({},o)});default:return f({},a,((n={})[r.type]=f({},o),n))}},n.mapArrayTypeChildrenToProps=function(e,t){var n=f({},t);return Object.keys(e).forEach((function(t){var r;n=f({},n,((r={})[t]=e[t],r))})),n},n.warnOnInvalidChildren=function(e,t){return u()(w.some((function(t){return e.type===t})),"function"==typeof e.type?"You may be attempting to nest <Helmet> components within each other, which is not allowed. Refer to our API for more information.":"Only elements types "+w.join(", ")+" are allowed. Helmet does not support rendering <"+e.type+"> elements. Refer to our API for more information."),u()(!t||"string"==typeof t||Array.isArray(t)&&!t.some((function(e){return"string"!=typeof e})),"Helmet expects a string as a child of <"+e.type+">. Did you forget to wrap your children in braces? ( <"+e.type+">{``}</"+e.type+"> ) Refer to our API for more information."),!0},n.mapChildrenToProps=function(e,t){var n=this,a={};return r.Children.forEach(e,(function(e){if(e&&e.props){var r=e.props,o=r.children,i=h(r,Q),l=Object.keys(i).reduce((function(e,t){return e[S[t]||t]=i[t],e}),{}),s=e.type;switch("symbol"==typeof s?s=s.toString():n.warnOnInvalidChildren(e,o),s){case g.FRAGMENT:t=n.mapChildrenToProps(o,t);break;case g.LINK:case g.META:case g.NOSCRIPT:case g.SCRIPT:case g.STYLE:a=n.flattenArrayTypeChildren({child:e,arrayTypeChildren:a,newChildProps:l,nestedChildren:o});break;default:t=n.mapObjectTypeChildren({child:e,newProps:t,newChildProps:l,nestedChildren:o})}}})),this.mapArrayTypeChildrenToProps(a,t)},n.render=function(){var e=this.props,t=e.children,n=h(e,X),a=f({},n),o=n.helmetData;return t&&(a=this.mapChildrenToProps(t,a)),!o||o instanceof U||(o=new U(o.context,o.instances)),o?r.createElement(Y,f({},a,{context:o.value,helmetData:void 0})):r.createElement($.Consumer,null,(function(e){return r.createElement(Y,f({},a,{context:e}))}))},t}(r.Component);J.propTypes={base:o().object,bodyAttributes:o().object,children:o().oneOfType([o().arrayOf(o().node),o().node]),defaultTitle:o().string,defer:o().bool,encodeSpecialCharacters:o().bool,htmlAttributes:o().object,link:o().arrayOf(o().object),meta:o().arrayOf(o().object),noscript:o().arrayOf(o().object),onChangeClientState:o().func,script:o().arrayOf(o().object),style:o().arrayOf(o().object),title:o().string,titleAttributes:o().object,titleTemplate:o().string,prioritizeSeoTags:o().bool,helmetData:o().object},J.defaultProps={defer:!0,encodeSpecialCharacters:!0,prioritizeSeoTags:!1},J.displayName="Helmet"},9921:(e,t)=>{"use strict";var n="function"==typeof Symbol&&Symbol.for,r=n?Symbol.for("react.element"):60103,a=n?Symbol.for("react.portal"):60106,o=n?Symbol.for("react.fragment"):60107,i=n?Symbol.for("react.strict_mode"):60108,l=n?Symbol.for("react.profiler"):60114,s=n?Symbol.for("react.provider"):60109,u=n?Symbol.for("react.context"):60110,c=n?Symbol.for("react.async_mode"):60111,d=n?Symbol.for("react.concurrent_mode"):60111,f=n?Symbol.for("react.forward_ref"):60112,p=n?Symbol.for("react.suspense"):60113,m=n?Symbol.for("react.suspense_list"):60120,h=n?Symbol.for("react.memo"):60115,g=n?Symbol.for("react.lazy"):60116,b=n?Symbol.for("react.block"):60121,v=n?Symbol.for("react.fundamental"):60117,y=n?Symbol.for("react.responder"):60118,w=n?Symbol.for("react.scope"):60119;function k(e){if("object"==typeof e&&null!==e){var t=e.$$typeof;switch(t){case r:switch(e=e.type){case c:case d:case o:case l:case i:case p:return e;default:switch(e=e&&e.$$typeof){case u:case f:case g:case h:case s:return e;default:return t}}case a:return t}}}function S(e){return k(e)===d}t.AsyncMode=c,t.ConcurrentMode=d,t.ContextConsumer=u,t.ContextProvider=s,t.Element=r,t.ForwardRef=f,t.Fragment=o,t.Lazy=g,t.Memo=h,t.Portal=a,t.Profiler=l,t.StrictMode=i,t.Suspense=p,t.isAsyncMode=function(e){return S(e)||k(e)===c},t.isConcurrentMode=S,t.isContextConsumer=function(e){return k(e)===u},t.isContextProvider=function(e){return k(e)===s},t.isElement=function(e){return"object"==typeof e&&null!==e&&e.$$typeof===r},t.isForwardRef=function(e){return k(e)===f},t.isFragment=function(e){return k(e)===o},t.isLazy=function(e){return k(e)===g},t.isMemo=function(e){return k(e)===h},t.isPortal=function(e){return k(e)===a},t.isProfiler=function(e){return k(e)===l},t.isStrictMode=function(e){return k(e)===i},t.isSuspense=function(e){return k(e)===p},t.isValidElementType=function(e){return"string"==typeof e||"function"==typeof e||e===o||e===d||e===l||e===i||e===p||e===m||"object"==typeof e&&null!==e&&(e.$$typeof===g||e.$$typeof===h||e.$$typeof===s||e.$$typeof===u||e.$$typeof===f||e.$$typeof===v||e.$$typeof===y||e.$$typeof===w||e.$$typeof===b)},t.typeOf=k},9864:(e,t,n)=>{"use strict";e.exports=n(9921)},8356:(e,t,n)=>{"use strict";function r(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function a(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(){return i=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},i.apply(this,arguments)}var l=n(7294),s=n(5697),u=[],c=[];function d(e){var t=e(),n={loading:!0,loaded:null,error:null};return n.promise=t.then((function(e){return n.loading=!1,n.loaded=e,e})).catch((function(e){throw n.loading=!1,n.error=e,e})),n}function f(e){var t={loading:!1,loaded:{},error:null},n=[];try{Object.keys(e).forEach((function(r){var a=d(e[r]);a.loading?t.loading=!0:(t.loaded[r]=a.loaded,t.error=a.error),n.push(a.promise),a.promise.then((function(e){t.loaded[r]=e})).catch((function(e){t.error=e}))}))}catch(r){t.error=r}return t.promise=Promise.all(n).then((function(e){return t.loading=!1,e})).catch((function(e){throw t.loading=!1,e})),t}function p(e,t){return l.createElement((n=e)&&n.__esModule?n.default:n,t);var n}function m(e,t){var d,f;if(!t.loading)throw new Error("react-loadable requires a `loading` component");var m=i({loader:null,loading:null,delay:200,timeout:null,render:p,webpack:null,modules:null},t),h=null;function g(){return h||(h=e(m.loader)),h.promise}return u.push(g),"function"==typeof m.webpack&&c.push((function(){if((0,m.webpack)().every((function(e){return void 0!==e&&void 0!==n.m[e]})))return g()})),f=d=function(t){function n(n){var r;return o(a(a(r=t.call(this,n)||this)),"retry",(function(){r.setState({error:null,loading:!0,timedOut:!1}),h=e(m.loader),r._loadModule()})),g(),r.state={error:h.error,pastDelay:!1,timedOut:!1,loading:h.loading,loaded:h.loaded},r}r(n,t),n.preload=function(){return g()};var i=n.prototype;return i.UNSAFE_componentWillMount=function(){this._loadModule()},i.componentDidMount=function(){this._mounted=!0},i._loadModule=function(){var e=this;if(this.context.loadable&&Array.isArray(m.modules)&&m.modules.forEach((function(t){e.context.loadable.report(t)})),h.loading){var t=function(t){e._mounted&&e.setState(t)};"number"==typeof m.delay&&(0===m.delay?this.setState({pastDelay:!0}):this._delay=setTimeout((function(){t({pastDelay:!0})}),m.delay)),"number"==typeof m.timeout&&(this._timeout=setTimeout((function(){t({timedOut:!0})}),m.timeout));var n=function(){t({error:h.error,loaded:h.loaded,loading:h.loading}),e._clearTimeouts()};h.promise.then((function(){return n(),null})).catch((function(e){return n(),null}))}},i.componentWillUnmount=function(){this._mounted=!1,this._clearTimeouts()},i._clearTimeouts=function(){clearTimeout(this._delay),clearTimeout(this._timeout)},i.render=function(){return this.state.loading||this.state.error?l.createElement(m.loading,{isLoading:this.state.loading,pastDelay:this.state.pastDelay,timedOut:this.state.timedOut,error:this.state.error,retry:this.retry}):this.state.loaded?m.render(this.state.loaded,this.props):null},n}(l.Component),o(d,"contextTypes",{loadable:s.shape({report:s.func.isRequired})}),f}function h(e){return m(d,e)}h.Map=function(e){if("function"!=typeof e.render)throw new Error("LoadableMap requires a `render(loaded, props)` function");return m(f,e)};var g=function(e){function t(){return e.apply(this,arguments)||this}r(t,e);var n=t.prototype;return n.getChildContext=function(){return{loadable:{report:this.props.report}}},n.render=function(){return l.Children.only(this.props.children)},t}(l.Component);function b(e){for(var t=[];e.length;){var n=e.pop();t.push(n())}return Promise.all(t).then((function(){if(e.length)return b(e)}))}o(g,"propTypes",{report:s.func.isRequired}),o(g,"childContextTypes",{loadable:s.shape({report:s.func.isRequired}).isRequired}),h.Capture=g,h.preloadAll=function(){return new Promise((function(e,t){b(u).then(e,t)}))},h.preloadReady=function(){return new Promise((function(e,t){b(c).then(e,e)}))},e.exports=h},8790:(e,t,n)=>{"use strict";n.d(t,{H:()=>l,f:()=>i});var r=n(6775),a=n(3117),o=n(7294);function i(e,t,n){return void 0===n&&(n=[]),e.some((function(e){var a=e.path?(0,r.LX)(t,e):n.length?n[n.length-1].match:r.F0.computeRootMatch(t);return a&&(n.push({route:e,match:a}),e.routes&&i(e.routes,t,n)),a})),n}function l(e,t,n){return void 0===t&&(t={}),void 0===n&&(n={}),e?o.createElement(r.rs,n,e.map((function(e,n){return o.createElement(r.AW,{key:e.key||n,path:e.path,exact:e.exact,strict:e.strict,render:function(n){return e.render?e.render((0,a.Z)({},n,{},t,{route:e})):o.createElement(e.component,(0,a.Z)({},n,t,{route:e}))}})}))):null}},3727:(e,t,n)=>{"use strict";n.d(t,{OL:()=>y,VK:()=>c,rU:()=>g});var r=n(6775),a=n(144),o=n(7294),i=n(9318),l=n(3117),s=n(102),u=n(2177),c=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).history=(0,i.lX)(t.props),t}return(0,a.Z)(t,e),t.prototype.render=function(){return o.createElement(r.F0,{history:this.history,children:this.props.children})},t}(o.Component);o.Component;var d=function(e,t){return"function"==typeof e?e(t):e},f=function(e,t){return"string"==typeof e?(0,i.ob)(e,null,null,t):e},p=function(e){return e},m=o.forwardRef;void 0===m&&(m=p);var h=m((function(e,t){var n=e.innerRef,r=e.navigate,a=e.onClick,i=(0,s.Z)(e,["innerRef","navigate","onClick"]),u=i.target,c=(0,l.Z)({},i,{onClick:function(e){try{a&&a(e)}catch(t){throw e.preventDefault(),t}e.defaultPrevented||0!==e.button||u&&"_self"!==u||function(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}(e)||(e.preventDefault(),r())}});return c.ref=p!==m&&t||n,o.createElement("a",c)}));var g=m((function(e,t){var n=e.component,a=void 0===n?h:n,c=e.replace,g=e.to,b=e.innerRef,v=(0,s.Z)(e,["component","replace","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=e.history,r=f(d(g,e.location),e.location),s=r?n.createHref(r):"",h=(0,l.Z)({},v,{href:s,navigate:function(){var t=d(g,e.location),r=(0,i.Ep)(e.location)===(0,i.Ep)(f(t));(c||r?n.replace:n.push)(t)}});return p!==m?h.ref=t||b:h.innerRef=b,o.createElement(a,h)}))})),b=function(e){return e},v=o.forwardRef;void 0===v&&(v=b);var y=v((function(e,t){var n=e["aria-current"],a=void 0===n?"page":n,i=e.activeClassName,c=void 0===i?"active":i,p=e.activeStyle,m=e.className,h=e.exact,y=e.isActive,w=e.location,k=e.sensitive,S=e.strict,E=e.style,x=e.to,T=e.innerRef,C=(0,s.Z)(e,["aria-current","activeClassName","activeStyle","className","exact","isActive","location","sensitive","strict","style","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=w||e.location,i=f(d(x,n),n),s=i.pathname,_=s&&s.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1"),A=_?(0,r.LX)(n.pathname,{path:_,exact:h,sensitive:k,strict:S}):null,L=!!(y?y(A,n):A),R="function"==typeof m?m(L):m,P="function"==typeof E?E(L):E;L&&(R=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return t.filter((function(e){return e})).join(" ")}(R,c),P=(0,l.Z)({},P,p));var N=(0,l.Z)({"aria-current":L&&a||null,className:R,style:P,to:i},C);return b!==v?N.ref=t||T:N.innerRef=T,o.createElement(g,N)}))}))},6775:(e,t,n)=>{"use strict";n.d(t,{AW:()=>T,F0:()=>k,rs:()=>P,s6:()=>w,LX:()=>x,k6:()=>O,TH:()=>I});var r=n(144),a=n(7294),o=n(9318),i=n(5697),l=n.n(i),s=1073741823,u="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:{};function c(e){var t=[];return{on:function(e){t.push(e)},off:function(e){t=t.filter((function(t){return t!==e}))},get:function(){return e},set:function(n,r){e=n,t.forEach((function(t){return t(e,r)}))}}}var d=a.createContext||function(e,t){var n,o,i="__create-react-context-"+function(){var e="__global_unique_id__";return u[e]=(u[e]||0)+1}()+"__",d=function(e){function n(){var t;return(t=e.apply(this,arguments)||this).emitter=c(t.props.value),t}(0,r.Z)(n,e);var a=n.prototype;return a.getChildContext=function(){var e;return(e={})[i]=this.emitter,e},a.componentWillReceiveProps=function(e){if(this.props.value!==e.value){var n,r=this.props.value,a=e.value;((o=r)===(i=a)?0!==o||1/o==1/i:o!=o&&i!=i)?n=0:(n="function"==typeof t?t(r,a):s,0!==(n|=0)&&this.emitter.set(e.value,n))}var o,i},a.render=function(){return this.props.children},n}(a.Component);d.childContextTypes=((n={})[i]=l().object.isRequired,n);var f=function(t){function n(){var e;return(e=t.apply(this,arguments)||this).state={value:e.getValue()},e.onUpdate=function(t,n){0!=((0|e.observedBits)&n)&&e.setState({value:e.getValue()})},e}(0,r.Z)(n,t);var a=n.prototype;return a.componentWillReceiveProps=function(e){var t=e.observedBits;this.observedBits=null==t?s:t},a.componentDidMount=function(){this.context[i]&&this.context[i].on(this.onUpdate);var e=this.props.observedBits;this.observedBits=null==e?s:e},a.componentWillUnmount=function(){this.context[i]&&this.context[i].off(this.onUpdate)},a.getValue=function(){return this.context[i]?this.context[i].get():e},a.render=function(){return(e=this.props.children,Array.isArray(e)?e[0]:e)(this.state.value);var e},n}(a.Component);return f.contextTypes=((o={})[i]=l().object,o),{Provider:d,Consumer:f}};const f=d;var p=n(2177),m=n(3117),h=n(9658),g=n.n(h),b=(n(9864),n(102)),v=(n(8679),function(e){var t=f();return t.displayName=e,t}),y=v("Router-History"),w=v("Router"),k=function(e){function t(t){var n;return(n=e.call(this,t)||this).state={location:t.history.location},n._isMounted=!1,n._pendingLocation=null,t.staticContext||(n.unlisten=t.history.listen((function(e){n._pendingLocation=e}))),n}(0,r.Z)(t,e),t.computeRootMatch=function(e){return{path:"/",url:"/",params:{},isExact:"/"===e}};var n=t.prototype;return n.componentDidMount=function(){var e=this;this._isMounted=!0,this.unlisten&&this.unlisten(),this.props.staticContext||(this.unlisten=this.props.history.listen((function(t){e._isMounted&&e.setState({location:t})}))),this._pendingLocation&&this.setState({location:this._pendingLocation})},n.componentWillUnmount=function(){this.unlisten&&(this.unlisten(),this._isMounted=!1,this._pendingLocation=null)},n.render=function(){return a.createElement(w.Provider,{value:{history:this.props.history,location:this.state.location,match:t.computeRootMatch(this.state.location.pathname),staticContext:this.props.staticContext}},a.createElement(y.Provider,{children:this.props.children||null,value:this.props.history}))},t}(a.Component);a.Component;a.Component;var S={},E=0;function x(e,t){void 0===t&&(t={}),("string"==typeof t||Array.isArray(t))&&(t={path:t});var n=t,r=n.path,a=n.exact,o=void 0!==a&&a,i=n.strict,l=void 0!==i&&i,s=n.sensitive,u=void 0!==s&&s;return[].concat(r).reduce((function(t,n){if(!n&&""!==n)return null;if(t)return t;var r=function(e,t){var n=""+t.end+t.strict+t.sensitive,r=S[n]||(S[n]={});if(r[e])return r[e];var a=[],o={regexp:g()(e,a,t),keys:a};return E<1e4&&(r[e]=o,E++),o}(n,{end:o,strict:l,sensitive:u}),a=r.regexp,i=r.keys,s=a.exec(e);if(!s)return null;var c=s[0],d=s.slice(1),f=e===c;return o&&!f?null:{path:n,url:"/"===n&&""===c?"/":c,isExact:f,params:i.reduce((function(e,t,n){return e[t.name]=d[n],e}),{})}}),null)}var T=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n=e.props.location||t.location,r=e.props.computedMatch?e.props.computedMatch:e.props.path?x(n.pathname,e.props):t.match,o=(0,m.Z)({},t,{location:n,match:r}),i=e.props,l=i.children,s=i.component,u=i.render;return Array.isArray(l)&&function(e){return 0===a.Children.count(e)}(l)&&(l=null),a.createElement(w.Provider,{value:o},o.match?l?"function"==typeof l?l(o):l:s?a.createElement(s,o):u?u(o):null:"function"==typeof l?l(o):null)}))},t}(a.Component);function C(e){return"/"===e.charAt(0)?e:"/"+e}function _(e,t){if(!e)return t;var n=C(e);return 0!==t.pathname.indexOf(n)?t:(0,m.Z)({},t,{pathname:t.pathname.substr(n.length)})}function A(e){return"string"==typeof e?e:(0,o.Ep)(e)}function L(e){return function(){(0,p.Z)(!1)}}function R(){}a.Component;var P=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n,r,o=e.props.location||t.location;return a.Children.forEach(e.props.children,(function(e){if(null==r&&a.isValidElement(e)){n=e;var i=e.props.path||e.props.from;r=i?x(o.pathname,(0,m.Z)({},e.props,{path:i})):t.match}})),r?a.cloneElement(n,{location:o,computedMatch:r}):null}))},t}(a.Component);var N=a.useContext;function O(){return N(y)}function I(){return N(w).location}},9658:(e,t,n)=>{var r=n(5826);e.exports=p,e.exports.parse=o,e.exports.compile=function(e,t){return l(o(e,t),t)},e.exports.tokensToFunction=l,e.exports.tokensToRegExp=f;var a=new RegExp(["(\\\\.)","([\\/.])?(?:(?:\\:(\\w+)(?:\\(((?:\\\\.|[^\\\\()])+)\\))?|\\(((?:\\\\.|[^\\\\()])+)\\))([+*?])?|(\\*))"].join("|"),"g");function o(e,t){for(var n,r=[],o=0,i=0,l="",c=t&&t.delimiter||"/";null!=(n=a.exec(e));){var d=n[0],f=n[1],p=n.index;if(l+=e.slice(i,p),i=p+d.length,f)l+=f[1];else{var m=e[i],h=n[2],g=n[3],b=n[4],v=n[5],y=n[6],w=n[7];l&&(r.push(l),l="");var k=null!=h&&null!=m&&m!==h,S="+"===y||"*"===y,E="?"===y||"*"===y,x=n[2]||c,T=b||v;r.push({name:g||o++,prefix:h||"",delimiter:x,optional:E,repeat:S,partial:k,asterisk:!!w,pattern:T?u(T):w?".*":"[^"+s(x)+"]+?"})}}return i<e.length&&(l+=e.substr(i)),l&&r.push(l),r}function i(e){return encodeURI(e).replace(/[\/?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()}))}function l(e,t){for(var n=new Array(e.length),a=0;a<e.length;a++)"object"==typeof e[a]&&(n[a]=new RegExp("^(?:"+e[a].pattern+")$",d(t)));return function(t,a){for(var o="",l=t||{},s=(a||{}).pretty?i:encodeURIComponent,u=0;u<e.length;u++){var c=e[u];if("string"!=typeof c){var d,f=l[c.name];if(null==f){if(c.optional){c.partial&&(o+=c.prefix);continue}throw new TypeError('Expected "'+c.name+'" to be defined')}if(r(f)){if(!c.repeat)throw new TypeError('Expected "'+c.name+'" to not repeat, but received `'+JSON.stringify(f)+"`");if(0===f.length){if(c.optional)continue;throw new TypeError('Expected "'+c.name+'" to not be empty')}for(var p=0;p<f.length;p++){if(d=s(f[p]),!n[u].test(d))throw new TypeError('Expected all "'+c.name+'" to match "'+c.pattern+'", but received `'+JSON.stringify(d)+"`");o+=(0===p?c.prefix:c.delimiter)+d}}else{if(d=c.asterisk?encodeURI(f).replace(/[?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})):s(f),!n[u].test(d))throw new TypeError('Expected "'+c.name+'" to match "'+c.pattern+'", but received "'+d+'"');o+=c.prefix+d}}else o+=c}return o}}function s(e){return e.replace(/([.+*?=^!:${}()[\]|\/\\])/g,"\\$1")}function u(e){return e.replace(/([=!:$\/()])/g,"\\$1")}function c(e,t){return e.keys=t,e}function d(e){return e&&e.sensitive?"":"i"}function f(e,t,n){r(t)||(n=t||n,t=[]);for(var a=(n=n||{}).strict,o=!1!==n.end,i="",l=0;l<e.length;l++){var u=e[l];if("string"==typeof u)i+=s(u);else{var f=s(u.prefix),p="(?:"+u.pattern+")";t.push(u),u.repeat&&(p+="(?:"+f+p+")*"),i+=p=u.optional?u.partial?f+"("+p+")?":"(?:"+f+"("+p+"))?":f+"("+p+")"}}var m=s(n.delimiter||"/"),h=i.slice(-m.length)===m;return a||(i=(h?i.slice(0,-m.length):i)+"(?:"+m+"(?=$))?"),i+=o?"$":a&&h?"":"(?="+m+"|$)",c(new RegExp("^"+i,d(n)),t)}function p(e,t,n){return r(t)||(n=t||n,t=[]),n=n||{},e instanceof RegExp?function(e,t){var n=e.source.match(/\((?!\?)/g);if(n)for(var r=0;r<n.length;r++)t.push({name:r,prefix:null,delimiter:null,optional:!1,repeat:!1,partial:!1,asterisk:!1,pattern:null});return c(e,t)}(e,t):r(e)?function(e,t,n){for(var r=[],a=0;a<e.length;a++)r.push(p(e[a],t,n).source);return c(new RegExp("(?:"+r.join("|")+")",d(n)),t)}(e,t,n):function(e,t,n){return f(o(e,n),t,n)}(e,t,n)}},2408:(e,t,n)=>{"use strict";var r=n(7418),a=60103,o=60106;t.Fragment=60107,t.StrictMode=60108,t.Profiler=60114;var i=60109,l=60110,s=60112;t.Suspense=60113;var u=60115,c=60116;if("function"==typeof Symbol&&Symbol.for){var d=Symbol.for;a=d("react.element"),o=d("react.portal"),t.Fragment=d("react.fragment"),t.StrictMode=d("react.strict_mode"),t.Profiler=d("react.profiler"),i=d("react.provider"),l=d("react.context"),s=d("react.forward_ref"),t.Suspense=d("react.suspense"),u=d("react.memo"),c=d("react.lazy")}var f="function"==typeof Symbol&&Symbol.iterator;function p(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var m={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},h={};function g(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}function b(){}function v(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}g.prototype.isReactComponent={},g.prototype.setState=function(e,t){if("object"!=typeof e&&"function"!=typeof e&&null!=e)throw Error(p(85));this.updater.enqueueSetState(this,e,t,"setState")},g.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")},b.prototype=g.prototype;var y=v.prototype=new b;y.constructor=v,r(y,g.prototype),y.isPureReactComponent=!0;var w={current:null},k=Object.prototype.hasOwnProperty,S={key:!0,ref:!0,__self:!0,__source:!0};function E(e,t,n){var r,o={},i=null,l=null;if(null!=t)for(r in void 0!==t.ref&&(l=t.ref),void 0!==t.key&&(i=""+t.key),t)k.call(t,r)&&!S.hasOwnProperty(r)&&(o[r]=t[r]);var s=arguments.length-2;if(1===s)o.children=n;else if(1<s){for(var u=Array(s),c=0;c<s;c++)u[c]=arguments[c+2];o.children=u}if(e&&e.defaultProps)for(r in s=e.defaultProps)void 0===o[r]&&(o[r]=s[r]);return{$$typeof:a,type:e,key:i,ref:l,props:o,_owner:w.current}}function x(e){return"object"==typeof e&&null!==e&&e.$$typeof===a}var T=/\/+/g;function C(e,t){return"object"==typeof e&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}(""+e.key):t.toString(36)}function _(e,t,n,r,i){var l=typeof e;"undefined"!==l&&"boolean"!==l||(e=null);var s=!1;if(null===e)s=!0;else switch(l){case"string":case"number":s=!0;break;case"object":switch(e.$$typeof){case a:case o:s=!0}}if(s)return i=i(s=e),e=""===r?"."+C(s,0):r,Array.isArray(i)?(n="",null!=e&&(n=e.replace(T,"$&/")+"/"),_(i,t,n,"",(function(e){return e}))):null!=i&&(x(i)&&(i=function(e,t){return{$$typeof:a,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}(i,n+(!i.key||s&&s.key===i.key?"":(""+i.key).replace(T,"$&/")+"/")+e)),t.push(i)),1;if(s=0,r=""===r?".":r+":",Array.isArray(e))for(var u=0;u<e.length;u++){var c=r+C(l=e[u],u);s+=_(l,t,n,c,i)}else if(c=function(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=f&&e[f]||e["@@iterator"])?e:null}(e),"function"==typeof c)for(e=c.call(e),u=0;!(l=e.next()).done;)s+=_(l=l.value,t,n,c=r+C(l,u++),i);else if("object"===l)throw t=""+e,Error(p(31,"[object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function A(e,t,n){if(null==e)return e;var r=[],a=0;return _(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function L(e){if(-1===e._status){var t=e._result;t=t(),e._status=0,e._result=t,t.then((function(t){0===e._status&&(t=t.default,e._status=1,e._result=t)}),(function(t){0===e._status&&(e._status=2,e._result=t)}))}if(1===e._status)return e._result;throw e._result}var R={current:null};function P(){var e=R.current;if(null===e)throw Error(p(321));return e}var N={ReactCurrentDispatcher:R,ReactCurrentBatchConfig:{transition:0},ReactCurrentOwner:w,IsSomeRendererActing:{current:!1},assign:r};t.Children={map:A,forEach:function(e,t,n){A(e,(function(){t.apply(this,arguments)}),n)},count:function(e){var t=0;return A(e,(function(){t++})),t},toArray:function(e){return A(e,(function(e){return e}))||[]},only:function(e){if(!x(e))throw Error(p(143));return e}},t.Component=g,t.PureComponent=v,t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=N,t.cloneElement=function(e,t,n){if(null==e)throw Error(p(267,e));var o=r({},e.props),i=e.key,l=e.ref,s=e._owner;if(null!=t){if(void 0!==t.ref&&(l=t.ref,s=w.current),void 0!==t.key&&(i=""+t.key),e.type&&e.type.defaultProps)var u=e.type.defaultProps;for(c in t)k.call(t,c)&&!S.hasOwnProperty(c)&&(o[c]=void 0===t[c]&&void 0!==u?u[c]:t[c])}var c=arguments.length-2;if(1===c)o.children=n;else if(1<c){u=Array(c);for(var d=0;d<c;d++)u[d]=arguments[d+2];o.children=u}return{$$typeof:a,type:e.type,key:i,ref:l,props:o,_owner:s}},t.createContext=function(e,t){return void 0===t&&(t=null),(e={$$typeof:l,_calculateChangedBits:t,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null}).Provider={$$typeof:i,_context:e},e.Consumer=e},t.createElement=E,t.createFactory=function(e){var t=E.bind(null,e);return t.type=e,t},t.createRef=function(){return{current:null}},t.forwardRef=function(e){return{$$typeof:s,render:e}},t.isValidElement=x,t.lazy=function(e){return{$$typeof:c,_payload:{_status:-1,_result:e},_init:L}},t.memo=function(e,t){return{$$typeof:u,type:e,compare:void 0===t?null:t}},t.useCallback=function(e,t){return P().useCallback(e,t)},t.useContext=function(e,t){return P().useContext(e,t)},t.useDebugValue=function(){},t.useEffect=function(e,t){return P().useEffect(e,t)},t.useImperativeHandle=function(e,t,n){return P().useImperativeHandle(e,t,n)},t.useLayoutEffect=function(e,t){return P().useLayoutEffect(e,t)},t.useMemo=function(e,t){return P().useMemo(e,t)},t.useReducer=function(e,t,n){return P().useReducer(e,t,n)},t.useRef=function(e){return P().useRef(e)},t.useState=function(e){return P().useState(e)},t.version="17.0.2"},7294:(e,t,n)=>{"use strict";e.exports=n(2408)},53:(e,t)=>{"use strict";var n,r,a,o;if("object"==typeof performance&&"function"==typeof performance.now){var i=performance;t.unstable_now=function(){return i.now()}}else{var l=Date,s=l.now();t.unstable_now=function(){return l.now()-s}}if("undefined"==typeof window||"function"!=typeof MessageChannel){var u=null,c=null,d=function(){if(null!==u)try{var e=t.unstable_now();u(!0,e),u=null}catch(n){throw setTimeout(d,0),n}};n=function(e){null!==u?setTimeout(n,0,e):(u=e,setTimeout(d,0))},r=function(e,t){c=setTimeout(e,t)},a=function(){clearTimeout(c)},t.unstable_shouldYield=function(){return!1},o=t.unstable_forceFrameRate=function(){}}else{var f=window.setTimeout,p=window.clearTimeout;if("undefined"!=typeof console){var m=window.cancelAnimationFrame;"function"!=typeof window.requestAnimationFrame&&console.error("This browser doesn't support requestAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills"),"function"!=typeof m&&console.error("This browser doesn't support cancelAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills")}var h=!1,g=null,b=-1,v=5,y=0;t.unstable_shouldYield=function(){return t.unstable_now()>=y},o=function(){},t.unstable_forceFrameRate=function(e){0>e||125<e?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):v=0<e?Math.floor(1e3/e):5};var w=new MessageChannel,k=w.port2;w.port1.onmessage=function(){if(null!==g){var e=t.unstable_now();y=e+v;try{g(!0,e)?k.postMessage(null):(h=!1,g=null)}catch(n){throw k.postMessage(null),n}}else h=!1},n=function(e){g=e,h||(h=!0,k.postMessage(null))},r=function(e,n){b=f((function(){e(t.unstable_now())}),n)},a=function(){p(b),b=-1}}function S(e,t){var n=e.length;e.push(t);e:for(;;){var r=n-1>>>1,a=e[r];if(!(void 0!==a&&0<T(a,t)))break e;e[r]=t,e[n]=a,n=r}}function E(e){return void 0===(e=e[0])?null:e}function x(e){var t=e[0];if(void 0!==t){var n=e.pop();if(n!==t){e[0]=n;e:for(var r=0,a=e.length;r<a;){var o=2*(r+1)-1,i=e[o],l=o+1,s=e[l];if(void 0!==i&&0>T(i,n))void 0!==s&&0>T(s,i)?(e[r]=s,e[l]=n,r=l):(e[r]=i,e[o]=n,r=o);else{if(!(void 0!==s&&0>T(s,n)))break e;e[r]=s,e[l]=n,r=l}}}return t}return null}function T(e,t){var n=e.sortIndex-t.sortIndex;return 0!==n?n:e.id-t.id}var C=[],_=[],A=1,L=null,R=3,P=!1,N=!1,O=!1;function I(e){for(var t=E(_);null!==t;){if(null===t.callback)x(_);else{if(!(t.startTime<=e))break;x(_),t.sortIndex=t.expirationTime,S(C,t)}t=E(_)}}function D(e){if(O=!1,I(e),!N)if(null!==E(C))N=!0,n(M);else{var t=E(_);null!==t&&r(D,t.startTime-e)}}function M(e,n){N=!1,O&&(O=!1,a()),P=!0;var o=R;try{for(I(n),L=E(C);null!==L&&(!(L.expirationTime>n)||e&&!t.unstable_shouldYield());){var i=L.callback;if("function"==typeof i){L.callback=null,R=L.priorityLevel;var l=i(L.expirationTime<=n);n=t.unstable_now(),"function"==typeof l?L.callback=l:L===E(C)&&x(C),I(n)}else x(C);L=E(C)}if(null!==L)var s=!0;else{var u=E(_);null!==u&&r(D,u.startTime-n),s=!1}return s}finally{L=null,R=o,P=!1}}var B=o;t.unstable_IdlePriority=5,t.unstable_ImmediatePriority=1,t.unstable_LowPriority=4,t.unstable_NormalPriority=3,t.unstable_Profiling=null,t.unstable_UserBlockingPriority=2,t.unstable_cancelCallback=function(e){e.callback=null},t.unstable_continueExecution=function(){N||P||(N=!0,n(M))},t.unstable_getCurrentPriorityLevel=function(){return R},t.unstable_getFirstCallbackNode=function(){return E(C)},t.unstable_next=function(e){switch(R){case 1:case 2:case 3:var t=3;break;default:t=R}var n=R;R=t;try{return e()}finally{R=n}},t.unstable_pauseExecution=function(){},t.unstable_requestPaint=B,t.unstable_runWithPriority=function(e,t){switch(e){case 1:case 2:case 3:case 4:case 5:break;default:e=3}var n=R;R=e;try{return t()}finally{R=n}},t.unstable_scheduleCallback=function(e,o,i){var l=t.unstable_now();switch("object"==typeof i&&null!==i?i="number"==typeof(i=i.delay)&&0<i?l+i:l:i=l,e){case 1:var s=-1;break;case 2:s=250;break;case 5:s=1073741823;break;case 4:s=1e4;break;default:s=5e3}return e={id:A++,callback:o,priorityLevel:e,startTime:i,expirationTime:s=i+s,sortIndex:-1},i>l?(e.sortIndex=i,S(_,e),null===E(C)&&e===E(_)&&(O?a():O=!0,r(D,i-l))):(e.sortIndex=s,S(C,e),N||P||(N=!0,n(M))),e},t.unstable_wrapCallback=function(e){var t=R;return function(){var n=R;R=t;try{return e.apply(this,arguments)}finally{R=n}}}},3840:(e,t,n)=>{"use strict";e.exports=n(53)},6774:e=>{e.exports=function(e,t,n,r){var a=n?n.call(r,e,t):void 0;if(void 0!==a)return!!a;if(e===t)return!0;if("object"!=typeof e||!e||"object"!=typeof t||!t)return!1;var o=Object.keys(e),i=Object.keys(t);if(o.length!==i.length)return!1;for(var l=Object.prototype.hasOwnProperty.bind(t),s=0;s<o.length;s++){var u=o[s];if(!l(u))return!1;var c=e[u],d=t[u];if(!1===(a=n?n.call(r,c,d,u):void 0)||void 0===a&&c!==d)return!1}return!0}},2177:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});var r="Invariant failed";function a(e,t){if(!e)throw new Error(r)}},3250:(e,t,n)=>{"use strict";var r=n(7294);var a="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},o=r.useState,i=r.useEffect,l=r.useLayoutEffect,s=r.useDebugValue;function u(e){var t=e.getSnapshot;e=e.value;try{var n=t();return!a(e,n)}catch(r){return!0}}var c="undefined"==typeof window||void 0===window.document||void 0===window.document.createElement?function(e,t){return t()}:function(e,t){var n=t(),r=o({inst:{value:n,getSnapshot:t}}),a=r[0].inst,c=r[1];return l((function(){a.value=n,a.getSnapshot=t,u(a)&&c({inst:a})}),[e,n,t]),i((function(){return u(a)&&c({inst:a}),e((function(){u(a)&&c({inst:a})}))}),[e]),s(n),n};t.useSyncExternalStore=void 0!==r.useSyncExternalStore?r.useSyncExternalStore:c},1688:(e,t,n)=>{"use strict";e.exports=n(3250)},6809:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});const r={title:"K3s",tagline:"",url:"https://docs.k3s.io",baseUrl:"/kr/",onBrokenLinks:"throw",onBrokenMarkdownLinks:"warn",favicon:"img/favicon.ico",organizationName:"k3s-io",projectName:"docs",trailingSlash:!1,markdown:{mermaid:!0},themes:["@docusaurus/theme-mermaid"],i18n:{defaultLocale:"en",locales:["en","zh","kr"],localeConfigs:{en:{label:"English",direction:"ltr"},zh:{label:"\u7b80\u4f53\u4e2d\u6587",direction:"ltr"},kr:{label:"\ud55c\uad6d\uc5b4",direction:"ltr"}},path:"i18n"},themeConfig:{colorMode:{defaultMode:"light",respectPrefersColorScheme:!0,disableSwitch:!1},navbar:{title:"",logo:{alt:"logo",src:"img/k3s-logo-light.svg",srcDark:"img/k3s-logo-dark.svg"},items:[{type:"search",position:"right"},{type:"localeDropdown",position:"right",dropdownItemsBefore:[],dropdownItemsAfter:[]},{to:"https://github.com/k3s-io/k3s/",label:"GitHub",position:"right",className:"navbar__github btn"}],hideOnScroll:!1},algolia:{appId:"LLOD7N3LJA",apiKey:"4637c26b2ca6b8aeaf99a3ee421fb35c",indexName:"k3s",contextualSearch:!0,searchParameters:{},searchPagePath:"search"},footer:{style:"dark",links:[],copyright:'Copyright \xa9 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks\n      and uses trademarks. For a list of trademarks of The Linux Foundation, \n      please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.'},docs:{versionPersistence:"localStorage",sidebar:{hideable:!1,autoCollapseCategories:!1}},metadata:[],prism:{additionalLanguages:[],theme:{plain:{color:"#bfc7d5",backgroundColor:"#292d3e"},styles:[{types:["comment"],style:{color:"rgb(105, 112, 152)",fontStyle:"italic"}},{types:["string","inserted"],style:{color:"rgb(195, 232, 141)"}},{types:["number"],style:{color:"rgb(247, 140, 108)"}},{types:["builtin","char","constant","function"],style:{color:"rgb(130, 170, 255)"}},{types:["punctuation","selector"],style:{color:"rgb(199, 146, 234)"}},{types:["variable"],style:{color:"rgb(191, 199, 213)"}},{types:["class-name","attr-name"],style:{color:"rgb(255, 203, 107)"}},{types:["tag","deleted"],style:{color:"rgb(255, 85, 114)"}},{types:["operator"],style:{color:"rgb(137, 221, 255)"}},{types:["boolean"],style:{color:"rgb(255, 88, 116)"}},{types:["keyword"],style:{fontStyle:"italic"}},{types:["doctype"],style:{color:"rgb(199, 146, 234)",fontStyle:"italic"}},{types:["namespace"],style:{color:"rgb(178, 204, 214)"}},{types:["url"],style:{color:"rgb(221, 221, 221)"}}]},magicComments:[{className:"theme-code-block-highlighted-line",line:"highlight-next-line",block:{start:"highlight-start",end:"highlight-end"}}]},tableOfContents:{minHeadingLevel:2,maxHeadingLevel:3},mermaid:{theme:{dark:"dark",light:"default"},options:{}}},presets:[["@docusaurus/preset-classic",{docs:{routeBasePath:"/",sidebarPath:"/home/runner/work/docs/docs/sidebars.js",showLastUpdateTime:!0,editUrl:"https://github.com/k3s-io/docs/edit/main/"},blog:!1,theme:{customCss:["/home/runner/work/docs/docs/src/css/custom.css"]}}]],plugins:[["@docusaurus/plugin-client-redirects",{redirects:[{from:"/installation/ha",to:"/datastore/ha"},{from:"/installation/ha-embedded",to:"/datastore/ha-embedded"},{from:"/installation/datastore",to:"/datastore"},{from:"/installation/disable-flags",to:"/installation/server-roles"},{from:"/backup-restore/backup-restore",to:"/datastore/backup-restore"},{from:"/reference/agent-config",to:"/cli/agent"},{from:"/reference/server-config",to:"/cli/server"}]}]],baseUrlIssueBanner:!0,onDuplicateRoutes:"warn",staticDirectories:["static"],customFields:{},scripts:[],headTags:[],stylesheets:[],clientModules:[],titleDelimiter:"|",noIndex:!1}},3117:(e,t,n)=>{"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}n.d(t,{Z:()=>r})},144:(e,t,n)=>{"use strict";function r(e,t){return r=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(e,t){return e.__proto__=t,e},r(e,t)}function a(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,r(e,t)}n.d(t,{Z:()=>a})},102:(e,t,n)=>{"use strict";function r(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}n.d(t,{Z:()=>r})},7529:e=>{"use strict";e.exports=JSON.parse('{"theme.ErrorPageContent.title":"\ud398\uc774\uc9c0\uac00 \ub2e4\uc6b4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.","theme.ErrorPageContent.tryAgain":"\uc7ac\uc2dc\ub3c4","theme.NotFound.title":"\ud398\uc774\uc9c0\ub97c \ucc3e\uc744 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4","theme.NotFound.p1":"\ucc3e\uc73c\uc2dc\ub824\ub294 \ud398\uc774\uc9c0\ub97c \ucc3e\uc744 \uc218 \uc5c6\uc2b5\ub2c8\ub2e4.","theme.NotFound.p2":"\uc6d0\ub798 \ub9c1\ud06c\uc758 \ucd9c\ucc98\uc778 \uc0ac\uc774\ud2b8\uc758 \uc18c\uc720\uc790\uc5d0\uac8c \uc5f0\ub77d\ud558\uc5ec \ub9c1\ud06c\uac00 \ub04a\uc5b4\uc84c\uc74c\uc744 \uc54c\ub824\uc8fc\uc138\uc694.","theme.admonition.note":"\ube44\uace0","theme.admonition.tip":"\ud301","theme.admonition.danger":"\uc704\ud5d8","theme.admonition.info":"\uc815\ubcf4","theme.admonition.caution":"\uacbd\uace0","theme.AnnouncementBar.closeButtonAriaLabel":"\ub2eb\uae30","theme.BackToTopButton.buttonAriaLabel":"\ub9e8 \uc704\ub85c","theme.blog.archive.title":"\uc81c\ubaa9","theme.blog.archive.description":"\uc124\uba85","theme.blog.paginator.navAriaLabel":"\ube14\ub85c\uadf8 \ub124\ube44\uac8c\uc774\uc158","theme.blog.paginator.newerEntries":"\uc0c8\ub85c\uc6b4 \uae00","theme.blog.paginator.olderEntries":"\uc774\uc804 \uae00","theme.blog.post.paginator.navAriaLabel":"\ube14\ub85c\uadf8 \ud3ec\uc2a4\ud2b8 \ub124\ube44\uac8c\uc774\uc158","theme.blog.post.paginator.newerPost":"\uc0c8\ub85c\uc6b4 \ud3ec\uc2a4\ud2b8","theme.blog.post.paginator.olderPost":"\uc774\uc804 \ud3ec\uc2a4\ud2b8","theme.blog.post.plurals":"{count} \uac1c\uc758 \ud3ec\uc2a4\ud2b8","theme.blog.tagTitle":"\u300c{tagName}\u300d \ud0dc\uadf8\uba85\uc744 \uac00\uc9c4 {nPosts}\uac1c\uc758 \ud3ec\uc2a4\ud2b8","theme.tags.tagsPageLink":"\ubaa8\ub4e0 \ud0dc\uadf8 \ubaa9\ub85d","theme.colorToggle.ariaLabel":"\ubc1d\uc740/\uc5b4\ub450\uc6b4 \ubaa8\ub4dc \uc804\ud658 (\ud604\uc7ac \ubaa8\ub4dc: {mode})","theme.colorToggle.ariaLabel.mode.dark":"\uc5b4\ub450\uc6b4 \ubaa8\ub4dc","theme.colorToggle.ariaLabel.mode.light":"\ubc1d\uc740 \ubaa8\ub4dc","theme.docs.breadcrumbs.home":"\ud648","theme.docs.breadcrumbs.navAriaLabel":"\ud398\uc774\uc9c0 \uacbd\ub85c","theme.docs.DocCard.categoryDescription":"{count} \uac1c\uc758 \ubb38\uc11c","theme.docs.paginator.navAriaLabel":"\ubb38\uc11c \ub124\ube44\uac8c\uc774\uc158","theme.docs.paginator.previous":"\uc774\uc804","theme.docs.paginator.next":"\ub2e4\uc74c","theme.docs.tagDocListPageTitle.nDocsTagged":"{count} \uac1c\uc758 \ubb38\uc11c","theme.docs.tagDocListPageTitle":"{nDocsTagged}\u300c{tagName}\u300d","theme.docs.versionBadge.label":"version: {versionLabel}","theme.docs.versions.unreleasedVersionLabel":"\uc774\uac83\uc740 \uc544\uc9c1 \ub9b4\ub9ac\uc988\ub418\uc9c0 \uc54a\uc740 \ubb38\uc11c\uc758 {siteTitle} {versionLabel} \ubc84\uc804\uc785\ub2c8\ub2e4.","theme.docs.versions.unmaintainedVersionLabel":"\uc774\uac83\uc740 \ub354 \uc774\uc0c1 \ud65c\ubc1c\ud558\uac8c \uc720\uc9c0 \uad00\ub9ac\ub418\uc9c0 \uc54a\ub294 {siteTitle} {versionLabel} \ubc84\uc804\uc5d0 \ub300\ud55c \ubb38\uc11c\uc785\ub2c8\ub2e4.","theme.docs.versions.latestVersionSuggestionLabel":"\ucd5c\uc2e0 \ubb38\uc11c\ub294 {latestVersionLink} ({versionLabel}) \uc744 \ucc38\uc870\ud558\uc138\uc694.","theme.docs.versions.latestVersionLinkLabel":"\ucd5c\uc2e0 \ubc84\uc804","theme.common.editThisPage":"\uc774 \ud398\uc774\uc9c0 \ud3b8\uc9d1","theme.common.headingLinkTitle":"\uc81c\ubaa9\uc5d0 \ub300\ud55c \uc9c1\uc811 \ub9c1\ud06c","theme.lastUpdated.atDate":"{date}\uc5d0","theme.lastUpdated.byUser":"{user}\uac00","theme.lastUpdated.lastUpdatedAtBy":"\ub9c8\uc9c0\ub9c9 {byUser}{atDate} \uc5c5\ub370\uc774\ud2b8","theme.navbar.mobileVersionsDropdown.label":"\ubc84\uc804 \uc120\ud0dd","theme.common.skipToMainContent":"\ubcf8\ubb38\uc73c\ub85c \uac74\ub108\ub6f0\uae30","theme.tags.tagsListLabel":"\ud0dc\uadf8 \ubaa9\ub85d","theme.blog.sidebar.navAriaLabel":"\ube14\ub85c\uadf8 \uc0ac\uc774\ub4dc\ubc14","theme.CodeBlock.copied":"\ubcf5\uc0ac\ub428","theme.CodeBlock.copyButtonAriaLabel":"\ucf54\ub4dc \ube14\ub85d \ubcf5\uc0ac","theme.CodeBlock.copy":"\ubcf5\uc0ac","theme.CodeBlock.wordWrapToggle":"\uc904 \ubc14\uafc8 \ud1a0\uae00","theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \uba54\ub274 \u300c{label}\u300d \uc5f4\uae30/\ub2eb\uae30","theme.navbar.mobileLanguageDropdown.label":"\uc5b8\uc5b4 \uc120\ud0dd","theme.TOCCollapsible.toggleButtonLabel":"\ubaa9\ucc28 \uc5f4\uae30/\ub2eb\uae30","theme.blog.post.readMore":"\ub354 \uc77d\uae30","theme.blog.post.readMoreLabel":"{title} \ube14\ub85c\uadf8 \uae00 \uc77d\uae30","theme.blog.post.readingTime.plurals":"\uc77d\ub294 \ub370 {readingTime} \ubd84\uc774 \uac78\ub9bd\ub2c8\ub2e4","theme.docs.sidebar.collapseButtonTitle":"\uc0ac\uc774\ub4dc\ubc14 \ub2eb\uae30","theme.docs.sidebar.collapseButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \ub2eb\uae30","theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel":"\u2190 \uba54\uc778 \uba54\ub274\ub85c \ub3cc\uc544\uac00\uae30","theme.docs.sidebar.expandButtonTitle":"\uc0ac\uc774\ub4dc\ubc14 \uc5f4\uae30","theme.docs.sidebar.expandButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \uc5f4\uae30","theme.docs.sidebar.closeSidebarButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \ub2eb\uae30","theme.docs.sidebar.toggleSidebarButtonAriaLabel":"\uc0ac\uc774\ub4dc\ubc14 \uc5f4\uae30/\ub2eb\uae30","theme.SearchBar.seeAll":"{count} \uac1c\uc758 \uacb0\uacfc \ub354 \ubcf4\uae30","theme.SearchPage.documentsFound.plurals":"{count} \uac1c\uc758 \ubb38\uc11c\ub97c \ucc3e\uc558\uc2b5\ub2c8\ub2e4","theme.SearchPage.existingResultsTitle":"\u300c{query}\u300d\uc5d0 \ub300\ud55c \uac80\uc0c9 \uacb0\uacfc","theme.SearchPage.emptyResultsTitle":"\uac80\uc0c9 \uacb0\uacfc \uc5c6\uc74c","theme.SearchPage.inputPlaceholder":"\uc5ec\uae30\uc5d0 \uac80\uc0c9\uc5b4 \uc785\ub825","theme.SearchPage.inputLabel":"\uac80\uc0c9","theme.SearchPage.algoliaLabel":"Algolia \uac80\uc0c9","theme.SearchPage.noResultsText":"\uac80\uc0c9 \uacb0\uacfc\uac00 \uc5c6\uc2b5\ub2c8\ub2e4","theme.SearchPage.fetchingNewResults":"\uc0c8 \uac80\uc0c9 \uacb0\uacfc \uac00\uc838\uc624\ub294 \uc911...","theme.SearchBar.label":"\uac80\uc0c9","theme.SearchModal.searchBox.resetButtonTitle":"\uac80\uc0c9\uc5b4 \ucd08\uae30\ud654","theme.SearchModal.searchBox.cancelButtonText":"\ucde8\uc18c","theme.SearchModal.startScreen.recentSearchesTitle":"\ucd5c\uadfc \uac80\uc0c9","theme.SearchModal.startScreen.noRecentSearchesText":"\ucd5c\uadfc \uac80\uc0c9 \uae30\ub85d\uc774 \uc5c6\uc2b5\ub2c8\ub2e4","theme.SearchModal.startScreen.saveRecentSearchButtonTitle":"\uc774 \uac80\uc0c9\uc744 \ucd5c\uadfc \uac80\uc0c9\uc5d0 \uc800\uc7a5","theme.SearchModal.startScreen.removeRecentSearchButtonTitle":"\ucd5c\uadfc \uac80\uc0c9\uc5d0\uc11c \uc774 \uac80\uc0c9 \uc0ad\uc81c","theme.SearchModal.startScreen.favoriteSearchesTitle":"\uc990\uaca8\ucc3e\uae30 \uac80\uc0c9","theme.SearchModal.startScreen.removeFavoriteSearchButtonTitle":"\uc990\uaca8\ucc3e\uae30 \uac80\uc0c9\uc5d0\uc11c \uc774 \uac80\uc0c9 \uc0ad\uc81c","theme.SearchModal.errorScreen.titleText":"\uac80\uc0c9 \uacb0\uacfc\ub97c \uac00\uc838\uc624\ub294 \uc911 \uc624\ub958\uac00 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4","theme.SearchModal.errorScreen.helpText":"\uac80\uc0c9 \uacb0\uacfc\ub97c \uac00\uc838\uc624\ub294 \uc911 \uc624\ub958\uac00 \ubc1c\uc0dd\ud588\uc2b5\ub2c8\ub2e4. \ub2e4\uc2dc \uc2dc\ub3c4\ud574 \uc8fc\uc138\uc694.","theme.SearchModal.footer.selectText":"\uc120\ud0dd","theme.SearchModal.footer.selectKeyAriaLabel":"Enter \ud0a4","theme.SearchModal.footer.navigateText":"\uc704\ucabd/\uc544\ub798\ucabd \ud654\uc0b4\ud45c \ud0a4","theme.SearchModal.footer.navigateUpKeyAriaLabel":"\uc704\ucabd \ud654\uc0b4\ud45c \ud0a4","theme.SearchModal.footer.navigateDownKeyAriaLabel":"\uc544\ub798\ucabd \ud654\uc0b4\ud45c \ud0a4","theme.SearchModal.footer.closeText":"\ub2eb\uae30 \ud0a4","theme.SearchModal.footer.closeKeyAriaLabel":"Esc \ud0a4","theme.SearchModal.footer.searchByText":"\uac80\uc0c9 \uacb0\uacfc","theme.SearchModal.noResultsScreen.noResultsText":"\uac80\uc0c9 \uacb0\uacfc\uac00 \uc5c6\uc2b5\ub2c8\ub2e4","theme.SearchModal.noResultsScreen.suggestedQueryText":"\ub2e4\uc74c \uac80\uc0c9\uc5b4\ub97c \uc2dc\ub3c4\ud574 \ubcf4\uc138\uc694:","theme.SearchModal.noResultsScreen.reportMissingResultsText":"\uc774 \uac80\uc0c9 \uacb0\uacfc\uac00 \ub204\ub77d\ub418\uc5c8\ub2e4\uace0 \uc0dd\uac01\ud569\ub2c8\uae4c?","theme.SearchModal.noResultsScreen.reportMissingResultsLinkText":"\uacb0\uacfc\ub97c \ubcf4\uace0\ud558\uae30","theme.SearchModal.placeholder":"\ubb38\uc11c \uac80\uc0c9","theme.tags.tagsPageTitle":"\ud0dc\uadf8 \ubaa9\ub85d"}')},6887:e=>{"use strict";e.exports=JSON.parse('{"/kr/search-8b2":{"__comp":"1a4e3797","__context":{"plugin":"59b068d1"}},"/kr/-4d1":{"__comp":"1be78505","__context":{"plugin":"247783bb"},"versionMetadata":"935f2afb"},"/kr/-064":{"__comp":"17896441","content":"81cffba8"},"/kr/advanced-6ef":{"__comp":"17896441","content":"2f39a65d"},"/kr/architecture-120":{"__comp":"17896441","content":"b5fc650f"},"/kr/cli-1e9":{"__comp":"17896441","content":"f5fc080a"},"/kr/cli/agent-9ac":{"__comp":"17896441","content":"832e9842"},"/kr/cli/certificate-fad":{"__comp":"17896441","content":"03ee9047"},"/kr/cli/etcd-snapshot-579":{"__comp":"17896441","content":"b1445c4f"},"/kr/cli/secrets-encrypt-4e4":{"__comp":"17896441","content":"a1ce2930"},"/kr/cli/server-238":{"__comp":"17896441","content":"20aafa33"},"/kr/cli/token-81c":{"__comp":"17896441","content":"310030e7"},"/kr/cluster-access-49f":{"__comp":"17896441","content":"d539ae32"},"/kr/datastore-b49":{"__comp":"17896441","content":"dd0fba39"},"/kr/datastore/backup-restore-a31":{"__comp":"17896441","content":"0a63d2fd"},"/kr/datastore/cluster-loadbalancer-307":{"__comp":"17896441","content":"d428bf88"},"/kr/datastore/ha-c2e":{"__comp":"17896441","content":"6a7149bd"},"/kr/datastore/ha-embedded-639":{"__comp":"17896441","content":"944a1646"},"/kr/faq-12e":{"__comp":"17896441","content":"a11c790a"},"/kr/helm-c73":{"__comp":"17896441","content":"54490acd"},"/kr/installation-942":{"__comp":"17896441","content":"a0c5848d"},"/kr/installation/airgap-a5a":{"__comp":"17896441","content":"42e456bb"},"/kr/installation/configuration-fd6":{"__comp":"17896441","content":"1fbd281a"},"/kr/installation/kube-dashboard-381":{"__comp":"17896441","content":"12d62c38"},"/kr/installation/network-options-818":{"__comp":"17896441","content":"d05291c6"},"/kr/installation/packaged-components-54d":{"__comp":"17896441","content":"5133fc91"},"/kr/installation/private-registry-d68":{"__comp":"17896441","content":"609981e6"},"/kr/installation/requirements-455":{"__comp":"17896441","content":"b97d3598"},"/kr/installation/server-roles-0f5":{"__comp":"17896441","content":"bccfb1cb"},"/kr/installation/uninstall-3ee":{"__comp":"17896441","content":"e8666366"},"/kr/known-issues-c52":{"__comp":"17896441","content":"7461830d"},"/kr/networking-9a1":{"__comp":"17896441","content":"a101d863"},"/kr/quick-start-e3f":{"__comp":"17896441","content":"efc00427"},"/kr/reference-994":{"__comp":"17896441","content":"65004aa0"},"/kr/reference/env-variables-aff":{"__comp":"17896441","content":"b87d0734"},"/kr/reference/resource-profiling-6cc":{"__comp":"17896441","content":"105936f9"},"/kr/security-a34":{"__comp":"17896441","content":"1aef17e6"},"/kr/security/hardening-guide-8eb":{"__comp":"17896441","content":"18ace21a"},"/kr/security/secrets-encryption-466":{"__comp":"17896441","content":"65309f9a"},"/kr/security/self-assessment-e43":{"__comp":"17896441","content":"b64afda8"},"/kr/storage-369":{"__comp":"17896441","content":"7f0bf1de"},"/kr/upgrades-002":{"__comp":"17896441","content":"3f659917"},"/kr/upgrades/automated-255":{"__comp":"17896441","content":"c7700003"},"/kr/upgrades/killall-a9e":{"__comp":"17896441","content":"37e09f03"},"/kr/upgrades/manual-0b0":{"__comp":"17896441","content":"e92581be"}}')}},e=>{e.O(0,[532],(()=>{return t=9383,e(e.s=t);var t}));e.O()}]);
\ No newline at end of file
diff --git a/kr/assets/js/runtime~main.3118886f.js b/kr/assets/js/runtime~main.3118886f.js
deleted file mode 100644
index 7b03fcd83..000000000
--- a/kr/assets/js/runtime~main.3118886f.js
+++ /dev/null
@@ -1 +0,0 @@
-(()=>{"use strict";var e,a,f,t,r,d={},c={};function o(e){var a=c[e];if(void 0!==a)return a.exports;var f=c[e]={id:e,loaded:!1,exports:{}};return d[e].call(f.exports,f,f.exports,o),f.loaded=!0,f.exports}o.m=d,o.c=c,e=[],o.O=(a,f,t,r)=>{if(!f){var d=1/0;for(i=0;i<e.length;i++){f=e[i][0],t=e[i][1],r=e[i][2];for(var c=!0,b=0;b<f.length;b++)(!1&r||d>=r)&&Object.keys(o.O).every((e=>o.O[e](f[b])))?f.splice(b--,1):(c=!1,r<d&&(d=r));if(c){e.splice(i--,1);var n=t();void 0!==n&&(a=n)}}return a}r=r||0;for(var i=e.length;i>0&&e[i-1][2]>r;i--)e[i]=e[i-1];e[i]=[f,t,r]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a:a}),a},f=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,t){if(1&t&&(e=this(e)),8&t)return e;if("object"==typeof e&&e){if(4&t&&e.__esModule)return e;if(16&t&&"function"==typeof e.then)return e}var r=Object.create(null);o.r(r);var d={};a=a||[null,f({}),f([]),f(f)];for(var c=2&t&&e;"object"==typeof c&&!~a.indexOf(c);c=f(c))Object.getOwnPropertyNames(c).forEach((a=>d[a]=()=>e[a]));return d.default=()=>e,o.d(r,d),r},o.d=(e,a)=>{for(var f in a)o.o(a,f)&&!o.o(e,f)&&Object.defineProperty(e,f,{enumerable:!0,get:a[f]})},o.f={},o.e=e=>Promise.all(Object.keys(o.f).reduce(((a,f)=>(o.f[f](e,a),a)),[])),o.u=e=>"assets/js/"+({53:"935f2afb",240:"c7700003",547:"b1445c4f",660:"b87d0734",804:"81cffba8",910:"bccfb1cb",937:"a11c790a",1208:"7461830d",1894:"6a7149bd",2257:"a1ce2930",2399:"944a1646",2466:"609981e6",3083:"d428bf88",3217:"105936f9",3229:"1fbd281a",3443:"b5fc650f",3573:"12d62c38",3902:"efc00427",3936:"e8666366",4606:"d05291c6",4885:"2f39a65d",5470:"e92581be",5726:"7f0bf1de",5749:"310030e7",6005:"65309f9a",6169:"54490acd",6263:"b64afda8",6278:"3f659917",6328:"37e09f03",6385:"59b068d1",6515:"20aafa33",7355:"5133fc91",7453:"d539ae32",7563:"b97d3598",7713:"dd0fba39",7918:"17896441",7920:"1a4e3797",8920:"65004aa0",9059:"a0c5848d",9166:"a101d863",9169:"1aef17e6",9176:"f5fc080a",9184:"832e9842",9269:"18ace21a",9334:"247783bb",9341:"0a63d2fd",9482:"03ee9047",9514:"1be78505",9654:"42e456bb"}[e]||e)+"."+{53:"a1640455",240:"0ce801d6",547:"99c544f0",660:"6924b504",804:"aad04d7e",910:"2bc8b311",937:"d51277cf",1208:"bfbf9d1d",1894:"b8d6086f",2257:"de8a3220",2399:"5bf5c9d6",2466:"39f5ffad",3083:"93f1d6ad",3217:"15005aa1",3229:"39198784",3443:"a1bb84e6",3573:"d94bed84",3902:"29fedce4",3936:"c7f24ec2",4606:"dc8a25d4",4835:"0e2e1b5f",4885:"d76730dd",4972:"f742b7fa",5470:"7a34a556",5726:"b51b38ad",5749:"2c730129",6005:"d0e9f1ae",6169:"8b3dc4e1",6263:"e320d50b",6278:"05f6741f",6316:"9d17e9b9",6328:"a1573095",6385:"c8b83cea",6515:"d01495be",6780:"6d95d5ed",6945:"a46579e2",7355:"691aa6a0",7453:"fc54c55c",7563:"8a51ba82",7713:"7e4cd2c7",7724:"3223bc35",7918:"ec08c698",7920:"ac674e56",8894:"b6a0e6e6",8920:"eabed6be",9059:"f131b913",9166:"9fefa039",9169:"13bd00c9",9176:"cb4f7f2d",9184:"8a7bdbf3",9269:"4a7618ec",9334:"300ff908",9341:"22244517",9482:"d4787d48",9487:"3c7da419",9514:"1ff28fb4",9654:"3e64c383"}[e]+".js",o.miniCssF=e=>{},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),t={},r="k-3-s-docs:",o.l=(e,a,f,d)=>{if(t[e])t[e].push(a);else{var c,b;if(void 0!==f)for(var n=document.getElementsByTagName("script"),i=0;i<n.length;i++){var u=n[i];if(u.getAttribute("src")==e||u.getAttribute("data-webpack")==r+f){c=u;break}}c||(b=!0,(c=document.createElement("script")).charset="utf-8",c.timeout=120,o.nc&&c.setAttribute("nonce",o.nc),c.setAttribute("data-webpack",r+f),c.src=e),t[e]=[a];var l=(a,f)=>{c.onerror=c.onload=null,clearTimeout(s);var r=t[e];if(delete t[e],c.parentNode&&c.parentNode.removeChild(c),r&&r.forEach((e=>e(f))),a)return a(f)},s=setTimeout(l.bind(null,void 0,{type:"timeout",target:c}),12e4);c.onerror=l.bind(null,c.onerror),c.onload=l.bind(null,c.onload),b&&document.head.appendChild(c)}},o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.p="/kr/",o.gca=function(e){return e={17896441:"7918","935f2afb":"53",c7700003:"240",b1445c4f:"547",b87d0734:"660","81cffba8":"804",bccfb1cb:"910",a11c790a:"937","7461830d":"1208","6a7149bd":"1894",a1ce2930:"2257","944a1646":"2399","609981e6":"2466",d428bf88:"3083","105936f9":"3217","1fbd281a":"3229",b5fc650f:"3443","12d62c38":"3573",efc00427:"3902",e8666366:"3936",d05291c6:"4606","2f39a65d":"4885",e92581be:"5470","7f0bf1de":"5726","310030e7":"5749","65309f9a":"6005","54490acd":"6169",b64afda8:"6263","3f659917":"6278","37e09f03":"6328","59b068d1":"6385","20aafa33":"6515","5133fc91":"7355",d539ae32:"7453",b97d3598:"7563",dd0fba39:"7713","1a4e3797":"7920","65004aa0":"8920",a0c5848d:"9059",a101d863:"9166","1aef17e6":"9169",f5fc080a:"9176","832e9842":"9184","18ace21a":"9269","247783bb":"9334","0a63d2fd":"9341","03ee9047":"9482","1be78505":"9514","42e456bb":"9654"}[e]||e,o.p+o.u(e)},(()=>{var e={1303:0,532:0};o.f.j=(a,f)=>{var t=o.o(e,a)?e[a]:void 0;if(0!==t)if(t)f.push(t[2]);else if(/^(1303|532)$/.test(a))e[a]=0;else{var r=new Promise(((f,r)=>t=e[a]=[f,r]));f.push(t[2]=r);var d=o.p+o.u(a),c=new Error;o.l(d,(f=>{if(o.o(e,a)&&(0!==(t=e[a])&&(e[a]=void 0),t)){var r=f&&("load"===f.type?"missing":f.type),d=f&&f.target&&f.target.src;c.message="Loading chunk "+a+" failed.\n("+r+": "+d+")",c.name="ChunkLoadError",c.type=r,c.request=d,t[1](c)}}),"chunk-"+a,a)}},o.O.j=a=>0===e[a];var a=(a,f)=>{var t,r,d=f[0],c=f[1],b=f[2],n=0;if(d.some((a=>0!==e[a]))){for(t in c)o.o(c,t)&&(o.m[t]=c[t]);if(b)var i=b(o)}for(a&&a(f);n<d.length;n++)r=d[n],o.o(e,r)&&e[r]&&e[r][0](),e[r]=0;return o.O(i)},f=self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[];f.forEach(a.bind(null,0)),f.push=a.bind(null,f.push.bind(f))})()})();
\ No newline at end of file
diff --git a/kr/assets/js/runtime~main.4e834fa7.js b/kr/assets/js/runtime~main.4e834fa7.js
new file mode 100644
index 000000000..4a6e163e8
--- /dev/null
+++ b/kr/assets/js/runtime~main.4e834fa7.js
@@ -0,0 +1 @@
+(()=>{"use strict";var e,a,f,t,r,c={},d={};function o(e){var a=d[e];if(void 0!==a)return a.exports;var f=d[e]={id:e,loaded:!1,exports:{}};return c[e].call(f.exports,f,f.exports,o),f.loaded=!0,f.exports}o.m=c,o.c=d,e=[],o.O=(a,f,t,r)=>{if(!f){var c=1/0;for(i=0;i<e.length;i++){f=e[i][0],t=e[i][1],r=e[i][2];for(var d=!0,b=0;b<f.length;b++)(!1&r||c>=r)&&Object.keys(o.O).every((e=>o.O[e](f[b])))?f.splice(b--,1):(d=!1,r<c&&(c=r));if(d){e.splice(i--,1);var n=t();void 0!==n&&(a=n)}}return a}r=r||0;for(var i=e.length;i>0&&e[i-1][2]>r;i--)e[i]=e[i-1];e[i]=[f,t,r]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a:a}),a},f=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,t){if(1&t&&(e=this(e)),8&t)return e;if("object"==typeof e&&e){if(4&t&&e.__esModule)return e;if(16&t&&"function"==typeof e.then)return e}var r=Object.create(null);o.r(r);var c={};a=a||[null,f({}),f([]),f(f)];for(var d=2&t&&e;"object"==typeof d&&!~a.indexOf(d);d=f(d))Object.getOwnPropertyNames(d).forEach((a=>c[a]=()=>e[a]));return c.default=()=>e,o.d(r,c),r},o.d=(e,a)=>{for(var f in a)o.o(a,f)&&!o.o(e,f)&&Object.defineProperty(e,f,{enumerable:!0,get:a[f]})},o.f={},o.e=e=>Promise.all(Object.keys(o.f).reduce(((a,f)=>(o.f[f](e,a),a)),[])),o.u=e=>"assets/js/"+({53:"935f2afb",240:"c7700003",547:"b1445c4f",660:"b87d0734",804:"81cffba8",910:"bccfb1cb",937:"a11c790a",1208:"7461830d",1894:"6a7149bd",2257:"a1ce2930",2399:"944a1646",2466:"609981e6",3083:"d428bf88",3217:"105936f9",3229:"1fbd281a",3443:"b5fc650f",3573:"12d62c38",3902:"efc00427",3936:"e8666366",4606:"d05291c6",4885:"2f39a65d",5156:"4129286c",5470:"e92581be",5726:"7f0bf1de",5749:"310030e7",6005:"65309f9a",6169:"54490acd",6263:"b64afda8",6278:"3f659917",6328:"37e09f03",6515:"20aafa33",7355:"5133fc91",7453:"d539ae32",7563:"b97d3598",7713:"dd0fba39",7918:"17896441",7920:"1a4e3797",8920:"65004aa0",9059:"a0c5848d",9166:"a101d863",9169:"1aef17e6",9176:"f5fc080a",9184:"832e9842",9269:"18ace21a",9334:"247783bb",9341:"0a63d2fd",9482:"03ee9047",9514:"1be78505",9654:"42e456bb"}[e]||e)+"."+{53:"a1640455",240:"e8209e95",547:"333614d2",660:"d3f5fb44",804:"757deee8",910:"287a8596",937:"d90c9ad2",1208:"b7f57052",1894:"5223e975",2257:"0775ba29",2399:"6aa2e1b0",2466:"c92f915c",3083:"d3a65457",3217:"37f276c1",3229:"3f613947",3443:"52ad13fc",3573:"2fa4c368",3902:"7a172d74",3936:"bfcf189e",4606:"98c06e60",4835:"071674c5",4885:"5d04eb93",4972:"8e6a9569",5156:"c7656db7",5470:"7677e33c",5525:"ab860f59",5726:"4389a498",5749:"3f076907",6005:"71bfa796",6169:"ebbcc024",6263:"a1d12b66",6278:"63241f9b",6316:"9d17e9b9",6328:"b03e665c",6515:"8d84a102",7355:"afe024ee",7453:"a4ce899b",7563:"867e338e",7713:"e12b3c6b",7724:"3223bc35",7918:"ec08c698",7920:"8b5db6d2",8443:"6e4145c7",8920:"ff6a8d7d",9059:"117222b4",9166:"9395dc73",9169:"2bc538c2",9176:"3c9b7097",9184:"839cc8c8",9269:"b371d979",9334:"300ff908",9341:"eb1735e9",9482:"aff952f3",9487:"3c7da419",9514:"3b555d49",9654:"9e5ba74b"}[e]+".js",o.miniCssF=e=>{},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),t={},r="k-3-s-docs:",o.l=(e,a,f,c)=>{if(t[e])t[e].push(a);else{var d,b;if(void 0!==f)for(var n=document.getElementsByTagName("script"),i=0;i<n.length;i++){var u=n[i];if(u.getAttribute("src")==e||u.getAttribute("data-webpack")==r+f){d=u;break}}d||(b=!0,(d=document.createElement("script")).charset="utf-8",d.timeout=120,o.nc&&d.setAttribute("nonce",o.nc),d.setAttribute("data-webpack",r+f),d.src=e),t[e]=[a];var l=(a,f)=>{d.onerror=d.onload=null,clearTimeout(s);var r=t[e];if(delete t[e],d.parentNode&&d.parentNode.removeChild(d),r&&r.forEach((e=>e(f))),a)return a(f)},s=setTimeout(l.bind(null,void 0,{type:"timeout",target:d}),12e4);d.onerror=l.bind(null,d.onerror),d.onload=l.bind(null,d.onload),b&&document.head.appendChild(d)}},o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.p="/kr/",o.gca=function(e){return e={17896441:"7918","935f2afb":"53",c7700003:"240",b1445c4f:"547",b87d0734:"660","81cffba8":"804",bccfb1cb:"910",a11c790a:"937","7461830d":"1208","6a7149bd":"1894",a1ce2930:"2257","944a1646":"2399","609981e6":"2466",d428bf88:"3083","105936f9":"3217","1fbd281a":"3229",b5fc650f:"3443","12d62c38":"3573",efc00427:"3902",e8666366:"3936",d05291c6:"4606","2f39a65d":"4885","4129286c":"5156",e92581be:"5470","7f0bf1de":"5726","310030e7":"5749","65309f9a":"6005","54490acd":"6169",b64afda8:"6263","3f659917":"6278","37e09f03":"6328","20aafa33":"6515","5133fc91":"7355",d539ae32:"7453",b97d3598:"7563",dd0fba39:"7713","1a4e3797":"7920","65004aa0":"8920",a0c5848d:"9059",a101d863:"9166","1aef17e6":"9169",f5fc080a:"9176","832e9842":"9184","18ace21a":"9269","247783bb":"9334","0a63d2fd":"9341","03ee9047":"9482","1be78505":"9514","42e456bb":"9654"}[e]||e,o.p+o.u(e)},(()=>{var e={1303:0,532:0};o.f.j=(a,f)=>{var t=o.o(e,a)?e[a]:void 0;if(0!==t)if(t)f.push(t[2]);else if(/^(1303|532)$/.test(a))e[a]=0;else{var r=new Promise(((f,r)=>t=e[a]=[f,r]));f.push(t[2]=r);var c=o.p+o.u(a),d=new Error;o.l(c,(f=>{if(o.o(e,a)&&(0!==(t=e[a])&&(e[a]=void 0),t)){var r=f&&("load"===f.type?"missing":f.type),c=f&&f.target&&f.target.src;d.message="Loading chunk "+a+" failed.\n("+r+": "+c+")",d.name="ChunkLoadError",d.type=r,d.request=c,t[1](d)}}),"chunk-"+a,a)}},o.O.j=a=>0===e[a];var a=(a,f)=>{var t,r,c=f[0],d=f[1],b=f[2],n=0;if(c.some((a=>0!==e[a]))){for(t in d)o.o(d,t)&&(o.m[t]=d[t]);if(b)var i=b(o)}for(a&&a(f);n<c.length;n++)r=c[n],o.o(e,r)&&e[r]&&e[r][0](),e[r]=0;return o.O(i)},f=self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[];f.forEach(a.bind(null,0)),f.push=a.bind(null,f.push.bind(f))})()})();
\ No newline at end of file
diff --git a/kr/cli.html b/kr/cli.html
index 395de7264..83e1cb619 100644
--- a/kr/cli.html
+++ b/kr/cli.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">명령줄 도구 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="명령줄 도구 | K3s"><meta data-rh="true" name="description" content="K3s 바이너리에는 클러스터 관리에 도움이 되는 여러 가지 추가 도구가 포함되어 있습니다."><meta data-rh="true" property="og:description" content="K3s 바이너리에는 클러스터 관리에 도움이 되는 여러 가지 추가 도구가 포함되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">명령줄 도구 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="명령줄 도구 | K3s"><meta data-rh="true" name="description" content="K3s 바이너리에는 클러스터 관리에 도움이 되는 여러 가지 추가 도구가 포함되어 있습니다."><meta data-rh="true" property="og:description" content="K3s 바이너리에는 클러스터 관리에 도움이 되는 여러 가지 추가 도구가 포함되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">명령줄 도구</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>명령줄 도구</h1></header><p>K3s 바이너리에는 클러스터 관리에 도움이 되는 여러 가지 추가 도구가 포함되어 있습니다.</p><table><thead><tr><th>Command</th><th>Description</th></tr></thead><tbody><tr><td><code>k3s server</code></td><td>데이터스토어와 에이전트 컴포넌트 외에 쿠버네티스 <code>apiserver</code>, <code>scheduler</code>, <code>controller-manager</code>, 그리고 <code>cloud-controller-manager</code> 컴포넌트를 실행하는 K3s 서버 노드를 실행합니다. 자세한 내용은 <a href="/kr/cli/server"><code>k3s server</code> 명령어 설명서</a>를 참고하세요.</td></tr><tr><td><code>k3s agent</code></td><td><code>containerd</code>, <code>flannel</code>, <code>kube-router</code> 네트워크 정책 컨트롤러와 쿠버네티스 <code>kubelet</code> 및 <code>kube-proxy</code> 구성 요소를 실행하는 K3s 에이전트 노드를 실행한다. 자세한 내용은 <a href="/kr/cli/agent"><code>k3s agent</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s kubectl</code></td><td>임베드된 <a href="https://kubernetes.io/ko/docs/reference/kubectl" target="_blank" rel="noopener noreferrer"><code>kubectl</code> 명령</a>을 실행합니다. 이것은 쿠버네티스 apiserver와 상호작용하기 위한 CLI입니다. <code>KUBECONFIG</code> 환경 변수가 설정되어 있지 않으면, 자동으로 <code>/etc/rancher/k3s/k3s.yaml</code>에서 kubeconfig를 사용하려고 시도합니다.</td></tr><tr><td><code>k3s crictl</code></td><td>임베드된 <a href="https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md" target="_blank" rel="noopener noreferrer"><code>crictl</code> 명령</a>을 실행합니다. 이것은 쿠버네티스의 컨테이너 런타임 인터페이스(CRI: Container Runtime Interface)와 상호 작용하기 위한 CLI입니다. 디버깅에 유용합니다.</td></tr><tr><td><code>k3s ctr</code></td><td>내장된 <a href="https://github.com/projectatomic/containerd/blob/master/docs/cli.md" target="_blank" rel="noopener noreferrer"><code>ctr</code> 명령</a>을 실행합니다. 이는 K3s에서 사용하는 컨테이너 데몬인 containerd의 CLI입니다. 디버깅에 유용합니다.</td></tr><tr><td><code>k3s token</code></td><td>부트스트랩 토큰을 관리합니다. 자세한 내용은 <a href="/kr/cli/token"><code>k3s token</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s etcd-snapshot</code></td><td>K3s 클러스터 데이터의 온디맨드 백업을 수행하여 S3에 업로드합니다. 자세한 내용은 <a href="/kr/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s secrets-encrypt</code></td><td>클러스터에 시크릿을 저장할 때 암호화하도록 K3s를 구성합니다. 자세한 내용은 <a href="/kr/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s certificate</code></td><td>K3s 인증서를 관리합니다. 자세한 내용은 <a href="/kr/cli/certificate"><code>k3s certificate</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s completion</code></td><td>k3s용 셸 자동완성 스크립트를 생성합니다.</td></tr><tr><td><code>k3s help</code></td><td>명령 목록 또는 한 명령어에 대한 도움말을 표시합니다.</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/faq"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">자주 묻는 질문</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/server"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">server</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">명령줄 도구</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>명령줄 도구</h1></header><p>K3s 바이너리에는 클러스터 관리에 도움이 되는 여러 가지 추가 도구가 포함되어 있습니다.</p><table><thead><tr><th>Command</th><th>Description</th></tr></thead><tbody><tr><td><code>k3s server</code></td><td>데이터스토어와 에이전트 컴포넌트 외에 쿠버네티스 <code>apiserver</code>, <code>scheduler</code>, <code>controller-manager</code>, 그리고 <code>cloud-controller-manager</code> 컴포넌트를 실행하는 K3s 서버 노드를 실행합니다. 자세한 내용은 <a href="/kr/cli/server"><code>k3s server</code> 명령어 설명서</a>를 참고하세요.</td></tr><tr><td><code>k3s agent</code></td><td><code>containerd</code>, <code>flannel</code>, <code>kube-router</code> 네트워크 정책 컨트롤러와 쿠버네티스 <code>kubelet</code> 및 <code>kube-proxy</code> 구성 요소를 실행하는 K3s 에이전트 노드를 실행한다. 자세한 내용은 <a href="/kr/cli/agent"><code>k3s agent</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s kubectl</code></td><td>임베드된 <a href="https://kubernetes.io/ko/docs/reference/kubectl" target="_blank" rel="noopener noreferrer"><code>kubectl</code> 명령</a>을 실행합니다. 이것은 쿠버네티스 apiserver와 상호작용하기 위한 CLI입니다. <code>KUBECONFIG</code> 환경 변수가 설정되어 있지 않으면, 자동으로 <code>/etc/rancher/k3s/k3s.yaml</code>에서 kubeconfig를 사용하려고 시도합니다.</td></tr><tr><td><code>k3s crictl</code></td><td>임베드된 <a href="https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md" target="_blank" rel="noopener noreferrer"><code>crictl</code> 명령</a>을 실행합니다. 이것은 쿠버네티스의 컨테이너 런타임 인터페이스(CRI: Container Runtime Interface)와 상호 작용하기 위한 CLI입니다. 디버깅에 유용합니다.</td></tr><tr><td><code>k3s ctr</code></td><td>내장된 <a href="https://github.com/projectatomic/containerd/blob/master/docs/cli.md" target="_blank" rel="noopener noreferrer"><code>ctr</code> 명령</a>을 실행합니다. 이는 K3s에서 사용하는 컨테이너 데몬인 containerd의 CLI입니다. 디버깅에 유용합니다.</td></tr><tr><td><code>k3s token</code></td><td>부트스트랩 토큰을 관리합니다. 자세한 내용은 <a href="/kr/cli/token"><code>k3s token</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s etcd-snapshot</code></td><td>K3s 클러스터 데이터의 온디맨드 백업을 수행하여 S3에 업로드합니다. 자세한 내용은 <a href="/kr/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s secrets-encrypt</code></td><td>클러스터에 시크릿을 저장할 때 암호화하도록 K3s를 구성합니다. 자세한 내용은 <a href="/kr/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s certificate</code></td><td>K3s 인증서를 관리합니다. 자세한 내용은 <a href="/kr/cli/certificate"><code>k3s certificate</code> 명령어 설명서</a>를 참조하세요.</td></tr><tr><td><code>k3s completion</code></td><td>k3s용 셸 자동완성 스크립트를 생성합니다.</td></tr><tr><td><code>k3s help</code></td><td>명령 목록 또는 한 명령어에 대한 도움말을 표시합니다.</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/faq"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">자주 묻는 질문</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/server"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">server</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/cli/agent.html b/kr/cli/agent.html
index e97832b8e..a6fe9eb20 100644
--- a/kr/cli/agent.html
+++ b/kr/cli/agent.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">agent | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/agent"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="agent | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/agent"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/agent" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/agent" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">agent | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/agent"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="agent | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s agent."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/agent"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/agent" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/agent" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">agent</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s agent</h1><p>In this section, you&#x27;ll learn how to configure the K3s agent.</p><p>Note that servers also run an agent, so all flags listed on this page are also valid for use on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/kr/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token value, -t</code> value</td><td><code>K3S_TOKEN</code></td><td>Token to use for authentication</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>Token file to use for authentication</td></tr><tr><td><code>--server value, -s</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td>&quot;/var/lib/rancher/k3s&quot;</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node">Node<a href="#node" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-name</code> value</td><td><code>K3S_NODE_NAME</code></td><td>Node name</td></tr><tr><td><code>--with-node-id</code></td><td>N/A</td><td>Append id to node name</td></tr><tr><td><code>--node-label</code> value</td><td>N/A</td><td>Registering and starting kubelet with set of labels</td></tr><tr><td><code>--node-taint</code> value</td><td>N/A</td><td>Registering kubelet with set of taints</td></tr><tr><td><code>--protect-kernel-defaults</code></td><td>N/A</td><td>Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.</td></tr><tr><td><code>--selinux</code></td><td><code>K3S_SELINUX</code></td><td>Enable SELinux in containerd</td></tr><tr><td><code>--lb-server-port</code> value</td><td><code>K3S_LB_SERVER_PORT</code></td><td>Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="runtime">Runtime<a href="#runtime" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--container-runtime-endpoint</code> value</td><td>N/A</td><td>Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path</td></tr><tr><td><code>--pause-image</code> value</td><td>&quot;docker.io/rancher/pause:3.1&quot;</td><td>Customized pause image for containerd or docker sandbox</td></tr><tr><td><code>--private-registry</code> value</td><td>&quot;/etc/rancher/k3s/registries.yaml&quot;</td><td>Private registry configuration file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-ip value, -i</code> value</td><td>N/A</td><td>IP address to advertise for node</td></tr><tr><td><code>--node-external-ip</code> value</td><td>N/A</td><td>External IP address to advertise for node</td></tr><tr><td><code>--resolv-conf</code> value</td><td><code>K3S_RESOLV_CONF</code></td><td>Kubelet resolv.conf file</td></tr><tr><td><code>--flannel-iface</code> value</td><td>N/A</td><td>Override default flannel interface</td></tr><tr><td><code>--flannel-conf</code> value</td><td>N/A</td><td>Override default flannel config file</td></tr><tr><td><code>--flannel-cni-conf</code> value</td><td>N/A</td><td>Override default flannel cni config file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags">Customized Flags<a href="#customized-flags" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental">Experimental<a href="#experimental" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated">Deprecated<a href="#deprecated" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node-labels-and-taints-for-agents">Node Labels and Taints for Agents<a href="#node-labels-and-taints-for-agents" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s agents can be configured with the options <code>--node-label</code> and <code>--node-taint</code> which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands.</p><p>Below is an example showing how to add labels and a taint:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">foo</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">bar </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">hello</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">world </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-taint </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">key1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">value1:NoExecute</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to change node labels and taints after node registration you should use <code>kubectl</code>. Refer to the official Kubernetes documentation for details on how to add <a href="https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/" target="_blank" rel="noopener noreferrer">taints</a> and <a href="https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node" target="_blank" rel="noopener noreferrer">node labels.</a></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent-cli-help">K3s Agent CLI Help<a href="#k3s-agent-cli-help" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_URL]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent - Run </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> agent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/k3s&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/server"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">server</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/certificate"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">certificate</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#node" class="table-of-contents__link toc-highlight">Node</a></li><li><a href="#runtime" class="table-of-contents__link toc-highlight">Runtime</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#customized-flags" class="table-of-contents__link toc-highlight">Customized Flags</a></li><li><a href="#experimental" class="table-of-contents__link toc-highlight">Experimental</a></li><li><a href="#deprecated" class="table-of-contents__link toc-highlight">Deprecated</a></li><li><a href="#node-labels-and-taints-for-agents" class="table-of-contents__link toc-highlight">Node Labels and Taints for Agents</a></li><li><a href="#k3s-agent-cli-help" class="table-of-contents__link toc-highlight">K3s Agent CLI Help</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">agent</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s agent</h1><p>In this section, you&#x27;ll learn how to configure the K3s agent.</p><p>Note that servers also run an agent, so all flags listed on this page are also valid for use on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/kr/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token value, -t</code> value</td><td><code>K3S_TOKEN</code></td><td>Token to use for authentication</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>Token file to use for authentication</td></tr><tr><td><code>--server value, -s</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td>&quot;/var/lib/rancher/k3s&quot;</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node">Node<a href="#node" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-name</code> value</td><td><code>K3S_NODE_NAME</code></td><td>Node name</td></tr><tr><td><code>--with-node-id</code></td><td>N/A</td><td>Append id to node name</td></tr><tr><td><code>--node-label</code> value</td><td>N/A</td><td>Registering and starting kubelet with set of labels</td></tr><tr><td><code>--node-taint</code> value</td><td>N/A</td><td>Registering kubelet with set of taints</td></tr><tr><td><code>--protect-kernel-defaults</code></td><td>N/A</td><td>Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults.</td></tr><tr><td><code>--selinux</code></td><td><code>K3S_SELINUX</code></td><td>Enable SELinux in containerd</td></tr><tr><td><code>--lb-server-port</code> value</td><td><code>K3S_LB_SERVER_PORT</code></td><td>Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="runtime">Runtime<a href="#runtime" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--container-runtime-endpoint</code> value</td><td>N/A</td><td>Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path</td></tr><tr><td><code>--pause-image</code> value</td><td>&quot;docker.io/rancher/pause:3.1&quot;</td><td>Customized pause image for containerd or docker sandbox</td></tr><tr><td><code>--private-registry</code> value</td><td>&quot;/etc/rancher/k3s/registries.yaml&quot;</td><td>Private registry configuration file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--node-ip value, -i</code> value</td><td>N/A</td><td>IP address to advertise for node</td></tr><tr><td><code>--node-external-ip</code> value</td><td>N/A</td><td>External IP address to advertise for node</td></tr><tr><td><code>--resolv-conf</code> value</td><td><code>K3S_RESOLV_CONF</code></td><td>Kubelet resolv.conf file</td></tr><tr><td><code>--flannel-iface</code> value</td><td>N/A</td><td>Override default flannel interface</td></tr><tr><td><code>--flannel-conf</code> value</td><td>N/A</td><td>Override default flannel config file</td></tr><tr><td><code>--flannel-cni-conf</code> value</td><td>N/A</td><td>Override default flannel cni config file</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags">Customized Flags<a href="#customized-flags" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental">Experimental<a href="#experimental" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated">Deprecated<a href="#deprecated" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="node-labels-and-taints-for-agents">Node Labels and Taints for Agents<a href="#node-labels-and-taints-for-agents" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s agents can be configured with the options <code>--node-label</code> and <code>--node-taint</code> which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands.</p><p>Below is an example showing how to add labels and a taint:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">foo</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">bar </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">hello</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">world </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-taint </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">key1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">value1:NoExecute</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to change node labels and taints after node registration you should use <code>kubectl</code>. Refer to the official Kubernetes documentation for details on how to add <a href="https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/" target="_blank" rel="noopener noreferrer">taints</a> and <a href="https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node" target="_blank" rel="noopener noreferrer">node labels.</a></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent-cli-help">K3s Agent CLI Help<a href="#k3s-agent-cli-help" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_URL]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent - Run </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> agent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/k3s&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/server"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">server</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/certificate"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">certificate</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#node" class="table-of-contents__link toc-highlight">Node</a></li><li><a href="#runtime" class="table-of-contents__link toc-highlight">Runtime</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#customized-flags" class="table-of-contents__link toc-highlight">Customized Flags</a></li><li><a href="#experimental" class="table-of-contents__link toc-highlight">Experimental</a></li><li><a href="#deprecated" class="table-of-contents__link toc-highlight">Deprecated</a></li><li><a href="#node-labels-and-taints-for-agents" class="table-of-contents__link toc-highlight">Node Labels and Taints for Agents</a></li><li><a href="#k3s-agent-cli-help" class="table-of-contents__link toc-highlight">K3s Agent CLI Help</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/cli/certificate.html b/kr/cli/certificate.html
index b352da843..861d1ee47 100644
--- a/kr/cli/certificate.html
+++ b/kr/cli/certificate.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">certificate | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/certificate"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="certificate | K3s"><meta data-rh="true" name="description" content="Client and Server Certificates"><meta data-rh="true" property="og:description" content="Client and Server Certificates"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/certificate"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/certificate" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/certificate" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">certificate | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/certificate"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="certificate | K3s"><meta data-rh="true" name="description" content="Client and Server Certificates"><meta data-rh="true" property="og:description" content="Client and Server Certificates"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/certificate"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/certificate" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/certificate" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">certificate</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s certificate</h1><h2 class="anchor anchorWithStickyNavbar_LWe7" id="client-and-server-certificates">Client and Server Certificates<a href="#client-and-server-certificates" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rotating-client-and-server-certificates">Rotating Client and Server Certificates<a href="#rotating-client-and-server-certificates" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To rotate client and server certificates manually, use the <code>k3s certificate rotate</code> subcommand:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Stop K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Rotate certificates</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Start K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Individual or lists of certificates can be rotated by specifying the certificate name:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate --service </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">,</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The following certificates can be rotated: <code>admin</code>, <code>api-server</code>, <code>controller-manager</code>, <code>scheduler</code>, <code>k3s-controller</code>, <code>k3s-server</code>, <code>cloud-controller</code>, <code>etcd</code>, <code>auth-proxy</code>, <code>kubelet</code>, <code>kube-proxy</code>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-authority-ca-certificates">Certificate Authority (CA) Certificates<a href="#certificate-authority-ca-certificates" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes <a href="https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates" target="_blank" rel="noopener noreferrer">PKI Certificates and Requirements</a> documentation.</p><p>By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed.</p><p>The authoritative CA certificates and keys are stored within the datastore&#x27;s bootstrap key, encrypted using the <a href="/kr/cli/token#server">server token</a> as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">certificate</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s certificate</h1><h2 class="anchor anchorWithStickyNavbar_LWe7" id="client-and-server-certificates">Client and Server Certificates<a href="#client-and-server-certificates" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rotating-client-and-server-certificates">Rotating Client and Server Certificates<a href="#rotating-client-and-server-certificates" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To rotate client and server certificates manually, use the <code>k3s certificate rotate</code> subcommand:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Stop K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Rotate certificates</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Start K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Individual or lists of certificates can be rotated by specifying the certificate name:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate --service </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">,</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The following certificates can be rotated: <code>admin</code>, <code>api-server</code>, <code>controller-manager</code>, <code>scheduler</code>, <code>k3s-controller</code>, <code>k3s-server</code>, <code>cloud-controller</code>, <code>etcd</code>, <code>auth-proxy</code>, <code>kubelet</code>, <code>kube-proxy</code>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="certificate-authority-ca-certificates">Certificate Authority (CA) Certificates<a href="#certificate-authority-ca-certificates" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes <a href="https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates" target="_blank" rel="noopener noreferrer">PKI Certificates and Requirements</a> documentation.</p><p>By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed.</p><p>The authoritative CA certificates and keys are stored within the datastore&#x27;s bootstrap key, encrypted using the <a href="/kr/cli/token#server">server token</a> as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1.
 Copies of the CA certificates and keys are extracted to disk during K3s server startup.
 Any server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes <a href="https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/" target="_blank" rel="noopener noreferrer">Certificates API</a> controllers may issue additional certificates at runtime.</p><p>To rotate CA certificates and keys, use the <code>k3s certificate rotate-ca</code> command.
 The command performs integrity checks to confirm that the updated certificates and keys are usable.
@@ -32,10 +32,10 @@
 When rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated.
 It can be rotated independent of the cluster CAs by using the <code>k3s certificate rotate-ca</code> to install only an updated <code>service.key</code> file that includes both the new and old keys.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>You must not overwrite the currently in-use data in <code>/var/lib/rancher/k3s/server/tls</code>.<br>
 <!-- -->Stage the updated key into a separate directory.</p></div></div><p>For example, to rotate only the service-account issuer key, run the following commands:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Create a temporary directory for cert generation</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p /opt/k3s/server/tls</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Check OpenSSL version</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">openssl version </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> -qF </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;OpenSSL 3&#x27;</span><span class="token plain"> </span><span class="token operator" style="color:rgb(137, 221, 255)">&amp;&amp;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">OPENSSL_GENRSA_FLAGS</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">-traditional</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Generate a new key</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">openssl genrsa </span><span class="token variable" style="color:rgb(191, 199, 213)">${OPENSSL_GENRSA_FLAGS</span><span class="token variable operator" style="color:rgb(137, 221, 255)">:-</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain"> -out /opt/k3s/server/tls/service.key </span><span class="token number" style="color:rgb(247, 140, 108)">2048</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Append the existing key to avoid invalidating current tokens</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/tls/service.key </span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;&gt;</span><span class="token plain"> /opt/k3s/server/tls/service.key</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Load the updated key into the datastore</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate-ca --path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/opt/k3s/server</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>It is normal to see warnings for files that are not being updated. If the <code>rotate-ca</code> command returns an error, check the service log for errors.
-If the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/agent"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">agent</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/etcd-snapshot"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">etcd-snapshot</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#client-and-server-certificates" class="table-of-contents__link toc-highlight">Client and Server Certificates</a><ul><li><a href="#rotating-client-and-server-certificates" class="table-of-contents__link toc-highlight">Rotating Client and Server Certificates</a></li></ul></li><li><a href="#certificate-authority-ca-certificates" class="table-of-contents__link toc-highlight">Certificate Authority (CA) Certificates</a><ul><li><a href="#using-custom-ca-certificates" class="table-of-contents__link toc-highlight">Using Custom CA Certificates</a></li><li><a href="#rotating-custom-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Custom CA Certificates</a></li><li><a href="#rotating-self-signed-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Self-Signed CA Certificates</a></li></ul></li><li><a href="#service-account-issuer-key-rotation" class="table-of-contents__link toc-highlight">Service-Account Issuer Key Rotation</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+If the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/agent"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">agent</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/etcd-snapshot"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">etcd-snapshot</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#client-and-server-certificates" class="table-of-contents__link toc-highlight">Client and Server Certificates</a><ul><li><a href="#rotating-client-and-server-certificates" class="table-of-contents__link toc-highlight">Rotating Client and Server Certificates</a></li></ul></li><li><a href="#certificate-authority-ca-certificates" class="table-of-contents__link toc-highlight">Certificate Authority (CA) Certificates</a><ul><li><a href="#using-custom-ca-certificates" class="table-of-contents__link toc-highlight">Using Custom CA Certificates</a></li><li><a href="#rotating-custom-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Custom CA Certificates</a></li><li><a href="#rotating-self-signed-ca-certificates" class="table-of-contents__link toc-highlight">Rotating Self-Signed CA Certificates</a></li></ul></li><li><a href="#service-account-issuer-key-rotation" class="table-of-contents__link toc-highlight">Service-Account Issuer Key Rotation</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/cli/etcd-snapshot.html b/kr/cli/etcd-snapshot.html
index 6f1a3ef9c..34e402e41 100644
--- a/kr/cli/etcd-snapshot.html
+++ b/kr/cli/etcd-snapshot.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">etcd-snapshot | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/etcd-snapshot"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="etcd-snapshot | K3s"><meta data-rh="true" name="description" content="Available as of v1.19.1+k3s1"><meta data-rh="true" property="og:description" content="Available as of v1.19.1+k3s1"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/etcd-snapshot"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/etcd-snapshot" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/etcd-snapshot" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">etcd-snapshot | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/etcd-snapshot"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="etcd-snapshot | K3s"><meta data-rh="true" name="description" content="Available as of v1.19.1+k3s1"><meta data-rh="true" property="og:description" content="Available as of v1.19.1+k3s1"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/etcd-snapshot"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/etcd-snapshot" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/etcd-snapshot" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">etcd-snapshot</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s etcd-snapshot</h1><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In this section, you&#x27;ll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="creating-snapshots">Creating Snapshots<a href="#creating-snapshots" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the <a href="#options">options</a>.</p><p>The snapshot directory defaults to <code>${data-dir}/server/db/snapshots</code>. The data-dir value defaults to <code>/var/lib/rancher/k3s</code> and can be changed by setting the <code>--data-dir</code> flag.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="restoring-a-cluster-from-a-snapshot">Restoring a Cluster from a Snapshot<a href="#restoring-a-cluster-from-a-snapshot" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>When K3s is restored from backup, the old data directory will be moved to <code>${data-dir}/server/db/etcd-old/</code>. Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member.</p><p>To restore the cluster from backup:</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>Run K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>In this example there are 3 servers, <code>S1</code>, <code>S2</code>, and <code>S3</code>. The snapshot is located on <code>S1</code>.</p><ol><li><p>On S1, start K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags.</p></li><li><p>On S2 and S3, stop K3s. Then delete the data directory, <code>/var/lib/rancher/k3s/server/db/</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">rm</span><span class="token plain"> -rf /var/lib/rancher/k3s/server/db/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S1, start K3s again:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S2 and S3, start K3s again to join the restored cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="options">Options<a href="#options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>These options can be passed in with the command line, or in the <a href="/kr/installation/configuration#configuration-file">configuration file,</a> which may be easier to use.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-disable-snapshots</code></td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>Snapshot interval time in cron spec. eg. every 5 hours <code>0 */5 * * *</code>(default: <code>0 */12 * * *</code>)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>Directory to save db snapshots. (Default location: <code>${data-dir}/db/snapshots</code>)</td></tr><tr><td><code>--cluster-reset</code></td><td>Forget all peers and become sole member of a new cluster. This can also be set with the environment variable <code>[$K3S_CLUSTER_RESET]</code>.</td></tr><tr><td><code>--cluster-reset-restore-path</code> value</td><td>Path to snapshot file to be restored</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="s3-compatible-api-support">S3 Compatible API Support<a href="#s3-compatible-api-support" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots.</p><p>The arguments below have been added to the <code>server</code> subcommand. These flags exist for the <code>etcd-snapshot</code> subcommand as well however the <code>--etcd-s3</code> portion is removed to avoid redundancy.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-s3</code></td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code></td><td>S3 endpoint url</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code></td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code></td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code></td><td>S3 region / bucket location (optional). defaults to us-east-1</td></tr><tr><td><code>--etcd-s3-folder</code></td><td>S3 folder</td></tr></tbody></table><p>To perform an on-demand etcd snapshot and save it to S3:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn&#x27;t running. Then run the following commands:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="etcd-snapshot-and-restore-subcommands">Etcd Snapshot and Restore Subcommands<a href="#etcd-snapshot-and-restore-subcommands" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>k3s supports a set of subcommands for working with your etcd snapshots.</p><table><thead><tr><th>Subcommand</th><th>Description</th></tr></thead><tbody><tr><td>delete</td><td>Delete given snapshot(s)</td></tr><tr><td>ls, list, l</td><td>List snapshots</td></tr><tr><td>prune</td><td>Remove snapshots that exceed the configured retention count</td></tr><tr><td>save</td><td>Trigger an immediate etcd snapshot</td></tr></tbody></table><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>The <code>save</code> subcommand is the same as <code>k3s etcd-snapshot</code>. The latter will eventually be deprecated in favor of the former.</p></div></div><p>These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store.</p><p>For additional information on the etcd snapshot subcommands, run <code>k3s etcd-snapshot</code>.</p><p>Delete a snapshot from S3.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot delete          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Prune local snapshots with the default retention policy (5). The <code>prune</code> subcommand takes an additional flag <code>--snapshot-retention</code> that allows for overriding the default retention policy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune --snapshot-retention </span><span class="token number" style="color:rgb(247, 140, 108)">10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/certificate"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">certificate</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/secrets-encrypt"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">secrets-encrypt</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">etcd-snapshot</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s etcd-snapshot</h1><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In this section, you&#x27;ll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="creating-snapshots">Creating Snapshots<a href="#creating-snapshots" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the <a href="#options">options</a>.</p><p>The snapshot directory defaults to <code>${data-dir}/server/db/snapshots</code>. The data-dir value defaults to <code>/var/lib/rancher/k3s</code> and can be changed by setting the <code>--data-dir</code> flag.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="restoring-a-cluster-from-a-snapshot">Restoring a Cluster from a Snapshot<a href="#restoring-a-cluster-from-a-snapshot" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>When K3s is restored from backup, the old data directory will be moved to <code>${data-dir}/server/db/etcd-old/</code>. Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member.</p><p>To restore the cluster from backup:</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>Run K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot.</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>In this example there are 3 servers, <code>S1</code>, <code>S2</code>, and <code>S3</code>. The snapshot is located on <code>S1</code>.</p><ol><li><p>On S1, start K3s with the <code>--cluster-reset</code> option, with the <code>--cluster-reset-restore-path</code> also given:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>Result:</strong> A message in the logs says that K3s can be restarted without the flags.</p></li><li><p>On S2 and S3, stop K3s. Then delete the data directory, <code>/var/lib/rancher/k3s/server/db/</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">rm</span><span class="token plain"> -rf /var/lib/rancher/k3s/server/db/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S1, start K3s again:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>On S2 and S3, start K3s again to join the restored cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="options">Options<a href="#options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>These options can be passed in with the command line, or in the <a href="/kr/installation/configuration#configuration-file">configuration file,</a> which may be easier to use.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-disable-snapshots</code></td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>Snapshot interval time in cron spec. eg. every 5 hours <code>0 */5 * * *</code>(default: <code>0 */12 * * *</code>)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>Directory to save db snapshots. (Default location: <code>${data-dir}/db/snapshots</code>)</td></tr><tr><td><code>--cluster-reset</code></td><td>Forget all peers and become sole member of a new cluster. This can also be set with the environment variable <code>[$K3S_CLUSTER_RESET]</code>.</td></tr><tr><td><code>--cluster-reset-restore-path</code> value</td><td>Path to snapshot file to be restored</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="s3-compatible-api-support">S3 Compatible API Support<a href="#s3-compatible-api-support" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots.</p><p>The arguments below have been added to the <code>server</code> subcommand. These flags exist for the <code>etcd-snapshot</code> subcommand as well however the <code>--etcd-s3</code> portion is removed to avoid redundancy.</p><table><thead><tr><th>Options</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-s3</code></td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code></td><td>S3 endpoint url</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code></td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code></td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code></td><td>S3 region / bucket location (optional). defaults to us-east-1</td></tr><tr><td><code>--etcd-s3-folder</code></td><td>S3 folder</td></tr></tbody></table><p>To perform an on-demand etcd snapshot and save it to S3:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn&#x27;t running. Then run the following commands:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="etcd-snapshot-and-restore-subcommands">Etcd Snapshot and Restore Subcommands<a href="#etcd-snapshot-and-restore-subcommands" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>k3s supports a set of subcommands for working with your etcd snapshots.</p><table><thead><tr><th>Subcommand</th><th>Description</th></tr></thead><tbody><tr><td>delete</td><td>Delete given snapshot(s)</td></tr><tr><td>ls, list, l</td><td>List snapshots</td></tr><tr><td>prune</td><td>Remove snapshots that exceed the configured retention count</td></tr><tr><td>save</td><td>Trigger an immediate etcd snapshot</td></tr></tbody></table><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>The <code>save</code> subcommand is the same as <code>k3s etcd-snapshot</code>. The latter will eventually be deprecated in favor of the former.</p></div></div><p>These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store.</p><p>For additional information on the etcd snapshot subcommands, run <code>k3s etcd-snapshot</code>.</p><p>Delete a snapshot from S3.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot delete          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Prune local snapshots with the default retention policy (5). The <code>prune</code> subcommand takes an additional flag <code>--snapshot-retention</code> that allows for overriding the default retention policy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune --snapshot-retention </span><span class="token number" style="color:rgb(247, 140, 108)">10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/certificate"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">certificate</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/secrets-encrypt"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">secrets-encrypt</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/cli/secrets-encrypt.html b/kr/cli/secrets-encrypt.html
index b0250e760..8ebaab3e7 100644
--- a/kr/cli/secrets-encrypt.html
+++ b/kr/cli/secrets-encrypt.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">secrets-encrypt | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/secrets-encrypt"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="secrets-encrypt | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/secrets-encrypt"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/secrets-encrypt" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/secrets-encrypt" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">secrets-encrypt | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/secrets-encrypt"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="secrets-encrypt | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/secrets-encrypt"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/secrets-encrypt" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/secrets-encrypt" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">secrets-encrypt</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s secrets-encrypt</h1><p>K3s supports enabling secrets encryption at rest. For more information, see <a href="/kr/security/secrets-encryption">Secrets Encryption</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.8+k3s1</a></p></div></div><p>K3s contains a CLI tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="encryption-key-rotation">Encryption Key Rotation<a href="#encryption-key-rotation" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>To rotate secrets encryption keys on a single-server cluster:</p><ul><li>Start the K3s server with the flag <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>Starting K3s without encryption and enabling it at a later time is currently <em>not</em> supported.</p></div></div><ol><li><p>Prepare</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Rotate</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>K3s will reencrypt ~5 secrets per second.<br>
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">secrets-encrypt</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s secrets-encrypt</h1><p>K3s supports enabling secrets encryption at rest. For more information, see <a href="/kr/security/secrets-encryption">Secrets Encryption</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.8+k3s1</a></p></div></div><p>K3s contains a CLI tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="encryption-key-rotation">Encryption Key Rotation<a href="#encryption-key-rotation" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>To rotate secrets encryption keys on a single-server cluster:</p><ul><li>Start the K3s server with the flag <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>Starting K3s without encryption and enabling it at a later time is currently <em>not</em> supported.</p></div></div><ol><li><p>Prepare</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Rotate</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>K3s will reencrypt ~5 secrets per second.<br>
 <!-- -->Clusters with large # of secrets can take several minutes to reencrypt.</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>The steps are the same for both embedded DB and external DB clusters.</p><p>To rotate secrets encryption keys on HA setups:</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>Notes</div><div class="admonitionContent_S0QG"><ul><li>Starting K3s without encryption and enabling it at a later time is currently <em>not</em> supported.</li><li>While not required, it is recommended that you pick one server node from which to run the <code>secrets-encrypt</code> commands.</li></ul></div></div><ol><li><p>Start up all three K3s servers with the <code>--secrets-encryption</code> flag. For brevity, the servers will be referred to as S1, S2, S3.</p></li><li><p>Prepare on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Rotate on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Reencrypt on S1</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>K3s will reencrypt ~5 secrets per second.<br>
-<!-- -->Clusters with large # of secrets can take several minutes to reencrypt.</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-disableenable">Secrets Encryption Disable/Enable<a href="#secrets-encryption-disableenable" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>After launching a server with <code>--secrets-encryption</code> flag, secrets encryption can be disabled.</p><p>To disable secrets encryption on a single-node cluster:</p><ol><li><p>Disable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a single node cluster:</p><ol><li><p>Enable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>After launching a HA cluster with <code>--secrets-encryption</code> flags, secrets encryption can be disabled.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>While not required, it is recommended that you pick one server node from which to run the <code>secrets-encrypt</code> commands.</p></div></div><p>For brevity, the three servers used in this guide will be referred to as S1, S2, S3.</p><p>To disable secrets encryption on a HA cluster:</p><ol><li><p>Disable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol><ol start="4"><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a HA cluster:</p><ol><li><p>Enable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-status">Secrets Encryption Status<a href="#secrets-encryption-status" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The secrets-encrypt tool includes a <code>status</code> command that displays information about the current status of secrets encryption on the node.</p><p>An example of the command on a single-server node:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: start</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: All hashes match</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Another example on HA cluster, after rotating the keys, but before restarting the servers:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">hash</span><span class="token plain"> does not match between node-1 and node-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey-2021-12-10T22:54:38Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Details on each section are as follows:  </p><ul><li><strong>Encryption Status</strong>: Displayed whether secrets encryption is disabled or enabled on the node  </li><li><strong>Current Rotation Stage</strong>: Indicates the current rotation stage on the node.<br>Stages are: <code>start</code>, <code>prepare</code>, <code>rotate</code>, <code>reencrypt_request</code>, <code>reencrypt_active</code>, <code>reencrypt_finished</code>  </li><li><strong>Server Encryption Hashes</strong>: Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration.</li><li><strong>Key Table</strong>: Summarizes information about the secrets encryption keys found on the node.  <ul><li><strong>Active</strong>: The &quot;*&quot; indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.</li><li><strong>Key Type</strong>: All keys using this tool are <code>AES-CBC</code> type. See more info <a href="https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers" target="_blank" rel="noopener noreferrer">here.</a></li><li><strong>Name</strong>: Name of the encryption key.</li></ul></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/etcd-snapshot"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">etcd-snapshot</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/token"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">token</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a><ul><li><a href="#encryption-key-rotation" class="table-of-contents__link toc-highlight">Encryption Key Rotation</a></li><li><a href="#secrets-encryption-disableenable" class="table-of-contents__link toc-highlight">Secrets Encryption Disable/Enable</a></li><li><a href="#secrets-encryption-status" class="table-of-contents__link toc-highlight">Secrets Encryption Status</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<!-- -->Clusters with large # of secrets can take several minutes to reencrypt.</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-disableenable">Secrets Encryption Disable/Enable<a href="#secrets-encryption-disableenable" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single-Server</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High-Availability</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>After launching a server with <code>--secrets-encryption</code> flag, secrets encryption can be disabled.</p><p>To disable secrets encryption on a single-node cluster:</p><ol><li><p>Disable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a single node cluster:</p><ol><li><p>Enable</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart the K3s server with same arguments</p></li><li><p>Reencrypt with flags</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>After launching a HA cluster with <code>--secrets-encryption</code> flags, secrets encryption can be disabled.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>While not required, it is recommended that you pick one server node from which to run the <code>secrets-encrypt</code> commands.</p></div></div><p>For brevity, the three servers used in this guide will be referred to as S1, S2, S3.</p><p>To disable secrets encryption on a HA cluster:</p><ol><li><p>Disable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments. If running K3s as a service:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># If using openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li></ol><ol start="4"><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>To re-enable secrets encryption on a HA cluster:</p><ol><li><p>Enable on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>Kill and restart S1 with same arguments</p></li><li><p>Once S1 is up, kill and restart the S2 and S3</p></li><li><p>Reencrypt with flags on S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-status">Secrets Encryption Status<a href="#secrets-encryption-status" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The secrets-encrypt tool includes a <code>status</code> command that displays information about the current status of secrets encryption on the node.</p><p>An example of the command on a single-server node:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: start</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: All hashes match</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Another example on HA cluster, after rotating the keys, but before restarting the servers:  </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">hash</span><span class="token plain"> does not match between node-1 and node-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey-2021-12-10T22:54:38Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Details on each section are as follows:  </p><ul><li><strong>Encryption Status</strong>: Displayed whether secrets encryption is disabled or enabled on the node  </li><li><strong>Current Rotation Stage</strong>: Indicates the current rotation stage on the node.<br>Stages are: <code>start</code>, <code>prepare</code>, <code>rotate</code>, <code>reencrypt_request</code>, <code>reencrypt_active</code>, <code>reencrypt_finished</code>  </li><li><strong>Server Encryption Hashes</strong>: Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration.</li><li><strong>Key Table</strong>: Summarizes information about the secrets encryption keys found on the node.  <ul><li><strong>Active</strong>: The &quot;*&quot; indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets.</li><li><strong>Key Type</strong>: All keys using this tool are <code>AES-CBC</code> type. See more info <a href="https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers" target="_blank" rel="noopener noreferrer">here.</a></li><li><strong>Name</strong>: Name of the encryption key.</li></ul></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/etcd-snapshot"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">etcd-snapshot</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/token"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">token</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a><ul><li><a href="#encryption-key-rotation" class="table-of-contents__link toc-highlight">Encryption Key Rotation</a></li><li><a href="#secrets-encryption-disableenable" class="table-of-contents__link toc-highlight">Secrets Encryption Disable/Enable</a></li><li><a href="#secrets-encryption-status" class="table-of-contents__link toc-highlight">Secrets Encryption Status</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/cli/server.html b/kr/cli/server.html
index 9fa4343ee..8ace009c0 100644
--- a/kr/cli/server.html
+++ b/kr/cli/server.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">server | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/server"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="server | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s server."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s server."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/server"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/server" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/server" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">server | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/server"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="server | K3s"><meta data-rh="true" name="description" content="In this section, you&#x27;ll learn how to configure the K3s server."><meta data-rh="true" property="og:description" content="In this section, you&#x27;ll learn how to configure the K3s server."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/server"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/server" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/server" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">server</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s server</h1><p>In this section, you&#x27;ll learn how to configure the K3s server.</p><p>Note that servers also run an agent, so all of the configuration options listed in the <a href="/kr/cli/agent"><code>k3s agent</code> documentation</a> are also supported on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/kr/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="critical-configuration-values">Critical Configuration Values<a href="#critical-configuration-values" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore.</p><ul><li><code>--agent-token</code></li><li><code>--cluster-cidr</code></li><li><code>--cluster-dns</code></li><li><code>--cluster-domain</code></li><li><code>--disable-cloud-controller</code></li><li><code>--disable-helm-controller</code></li><li><code>--disable-network-policy</code></li><li><code>--disable-servicelb</code></li><li><code>--egress-selector-mode</code></li><li><code>--flannel-backend</code></li><li><code>--flannel-external-ip</code></li><li><code>--flannel-ipv6-masq</code></li><li><code>--secrets-encryption</code></li><li><code>--service-cidr</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="commonly-used-options">Commonly Used Options<a href="#commonly-used-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code> value</td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>Specify etcd, Mysql, Postgres, or Sqlite (default) data source name</td></tr><tr><td><code>--datastore-cafile</code> value</td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS Certificate Authority file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-certfile</code> value</td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS certification file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-keyfile</code> value</td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS key file used to secure datastore backend communication</td></tr><tr><td><code>--etcd-expose-metrics</code></td><td>N/A</td><td>Expose etcd metrics to client interface (default: false)</td></tr><tr><td><code>--etcd-disable-snapshots</code></td><td>N/A</td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-name</code> value</td><td>N/A</td><td>Set the base name of etcd snapshots. Default: etcd-snapshot-<code>&lt;unix-timestamp&gt;</code> (default:&quot;etcd-snapshot&quot;)</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>N/A</td><td>Snapshot interval time in cron spec. eg. every 5 hours &#x27;0 <em>/5 <em> <!-- -->*<!-- --> </em>&#x27; (default: &quot;0 </em>/12 <!-- -->*<!-- --> <!-- -->*<!-- --> <!-- -->*<!-- -->&quot;)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>N/A</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>N/A</td><td>Directory to save db snapshots (default: ${data-dir}/db/snapshots)</td></tr><tr><td><code>--etcd-s3</code></td><td>N/A</td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code> value</td><td>N/A</td><td>S3 endpoint url (default: &quot;s3.amazonaws.com&quot;)</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code> value</td><td>N/A</td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>N/A</td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code> value</td><td><code>AWS_ACCESS_KEY_ID</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code> value</td><td><code>AWS_SECRET_ACCESS_KEY</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code> value</td><td>N/A</td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code> value</td><td>N/A</td><td>S3 region / bucket location (optional) (default: &quot;us-east-1&quot;)</td></tr><tr><td><code>--etcd-s3-folder</code> value</td><td>N/A</td><td>S3 folder</td></tr><tr><td><code>--etcd-s3-insecure</code></td><td>Disables S3 over HTTPS</td><td></td></tr><tr><td><code>--etcd-s3-timeout</code> value</td><td>S3 timeout (default: 5m0s)</td><td></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token</code> value, <code>-t</code> value</td><td><code>K3S_TOKEN</code></td><td>Shared secret used to join a server or agent to a cluster</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>File containing the cluster-secret/token</td></tr><tr><td><code>--agent-token</code> value</td><td><code>K3S_AGENT_TOKEN</code></td><td>Shared secret used to join agents to the cluster, but not servers</td></tr><tr><td><code>--agent-token-file</code> value</td><td><code>K3S_AGENT_TOKEN_FILE</code></td><td>File containing the agent secret</td></tr><tr><td><code>--server</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to, used to join a cluster</td></tr><tr><td><code>--cluster-init</code></td><td><code>K3S_CLUSTER_INIT</code></td><td>Initialize a new cluster using embedded Etcd</td></tr><tr><td><code>--cluster-reset</code></td><td><code>K3S_CLUSTER_RESET</code></td><td>Forget all peers and become sole member of a new cluster</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="admin-kubeconfig-options">Admin Kubeconfig Options<a href="#admin-kubeconfig-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--write-kubeconfig value, -o</code> value</td><td><code>K3S_KUBECONFIG_OUTPUT</code></td><td>Write kubeconfig for admin client to this file</td></tr><tr><td><code>--write-kubeconfig-mode</code> value</td><td><code>K3S_KUBECONFIG_MODE</code></td><td>Write kubeconfig with this <a href="https://en.wikipedia.org/wiki/Chmod" target="_blank" rel="noopener noreferrer">mode.</a> The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-options">Advanced Options<a href="#advanced-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--debug</code></td><td>N/A</td><td>Turn on debug logs</td></tr><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="listeners">Listeners<a href="#listeners" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--bind-address</code> value</td><td>0.0.0.0</td><td>k3s bind address</td></tr><tr><td><code>--https-listen-port</code> value</td><td>6443</td><td>HTTPS listen port</td></tr><tr><td><code>--advertise-address</code> value</td><td>node-external-ip/node-ip</td><td>IPv4 address that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--advertise-port</code> value</td><td>listen-port/0</td><td>Port that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--tls-san</code> value</td><td>N/A</td><td>Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td><code>/var/lib/rancher/k3s</code> or <code>${HOME}/.rancher/k3s</code> if not root</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption">Secrets Encryption<a href="#secrets-encryption" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--secrets-encryption</code></td><td>false</td><td>Enable Secret encryption at rest</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--cluster-cidr</code> value</td><td>&quot;10.42.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for pod IPs</td></tr><tr><td><code>--service-cidr</code> value</td><td>&quot;10.43.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for service IPs</td></tr><tr><td><code>--service-node-port-range</code> value</td><td>&quot;30000-32767&quot;</td><td>Port range to reserve for services with NodePort visibility</td></tr><tr><td><code>--cluster-dns</code> value</td><td>&quot;10.43.0.10&quot;</td><td>IPv4 Cluster IP for coredns service. Should be in your service-cidr range</td></tr><tr><td><code>--cluster-domain</code> value</td><td>&quot;cluster.local&quot;</td><td>Cluster Domain</td></tr><tr><td><code>--flannel-backend</code> value</td><td>&quot;vxlan&quot;</td><td>One of &#x27;none&#x27;, &#x27;vxlan&#x27;, &#x27;ipsec&#x27;(deprecated), &#x27;host-gw&#x27;, &#x27;wireguard-native&#x27;, or &#x27;wireguard&#x27;(deprecated)</td></tr><tr><td><code>--flannel-ipv6-masq</code></td><td>&quot;N/A&quot;</td><td>Enable IPv6 masquerading for pod</td></tr><tr><td><code>--flannel-external-ip</code></td><td>&quot;N/A&quot;</td><td>Use node external IP addresses for Flannel traffic</td></tr><tr><td><code>--servicelb-namespace</code> value</td><td>&quot;kube-system&quot;</td><td>Namespace of the pods for the servicelb component</td></tr><tr><td><code>--egress-selector-mode</code> value</td><td>&quot;agent&quot;</td><td>Must be one of the following: <ul><li>disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs.</li><li>agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s.</li><li> pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node.</li><li>  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.</li></ul></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="storage-class">Storage Class<a href="#storage-class" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--default-local-storage-path</code> value</td><td>Default local storage path for local provisioner storage class</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-components">Kubernetes Components<a href="#kubernetes-components" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--disable</code> value</td><td>See &quot;<a href="/kr/installation/packaged-components#using-the---disable-flag">Using the <code>--disable</code> flag</a>&quot;</td></tr><tr><td><code>--disable-scheduler</code></td><td>Disable Kubernetes default scheduler</td></tr><tr><td><code>--disable-cloud-controller</code></td><td>Disable k3s default cloud controller manager</td></tr><tr><td><code>--disable-kube-proxy</code></td><td>Disable running kube-proxy</td></tr><tr><td><code>--disable-network-policy</code></td><td>Disable k3s default network policy controller</td></tr><tr><td><code>--disable-helm-controller</code></td><td>Disable Helm controller</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags-for-kubernetes-processes">Customized Flags for Kubernetes Processes<a href="#customized-flags-for-kubernetes-processes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-arg</code> value</td><td>Customized flag for etcd process</td></tr><tr><td><code>--kube-apiserver-arg</code> value</td><td>Customized flag for kube-apiserver process</td></tr><tr><td><code>--kube-scheduler-arg</code> value</td><td>Customized flag for kube-scheduler process</td></tr><tr><td><code>--kube-controller-manager-arg</code> value</td><td>Customized flag for kube-controller-manager process</td></tr><tr><td><code>--kube-cloud-controller-manager-arg</code> value</td><td>Customized flag for kube-cloud-controller-manager process</td></tr><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental-options">Experimental Options<a href="#experimental-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--enable-pprof</code></td><td>Enable pprof endpoint on supervisor port</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr><tr><td><code>--disable-agent</code></td><td>See &quot;<a href="/kr/advanced#running-agentless-servers-experimental">Running Agentless Servers (Experimental)</a>&quot;</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated-options">Deprecated Options<a href="#deprecated-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--no-deploy</code> value</td><td>N/A</td><td>Use <code>--disable</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr><tr><td><code>--flannel-backend</code> wireguard</td><td>N/A</td><td>Use <code>--flannel-backend=wireguard-native</code></td></tr><tr><td><code>--flannel-backend</code> value=option1=value</td><td>N/A</td><td>Use <code>--flannel-conf</code> to specify the flannel config file with the backend config</td></tr></tbody></table><h1>K3s Server CLI Help</h1><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_TOKEN]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server - Run management server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --bind-address value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> k3s </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">bind</span><span class="token plain"> address </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --https-listen-port value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> HTTPS listen port </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-address value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 address that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: node-external-ip/node-ip</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: listen-port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --tls-san value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: /var/lib/rancher/k3s or </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">HOME</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/.rancher/k3s </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> not root</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">service</span><span class="token plain"> IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-node-port-range value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port range to reserve </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> services with NodePort visibility </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;30000-32767&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-dns value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 Cluster IP </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> coredns service. Should be </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> your service-cidr range </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-domain value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Cluster Domain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;cluster.local&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-backend value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> backend</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;=</span><span class="token plain">option1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val1,option2</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">2</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> where backend is one of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;none&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;vxlan&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ipsec&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;host-gw&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard-native&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;vxlan&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-ipv6-masq                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable IPv6 masquerading </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-external-ip                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> external IP addresses </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> Flannel traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --egress-selector-mode value               </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> One of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;agent&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;cluster&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;pod&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;disabled&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --servicelb-namespace value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Namespace of the pods </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the servicelb component </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;kube-system&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig value, -o value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> admin client to this </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_OUTPUT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig-mode value              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig with this mode </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_MODE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a server or agent to a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the token </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> agents to the cluster, but not servers </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token-file value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the agent secret </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to, used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-init                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Initialize a new cluster using embedded Etcd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_INIT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Forget all peers and become sole member of a new cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_RESET</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset-restore-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Path to snapshot </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to be restored</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-apiserver-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-apiserver process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-arg value                           </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> etcd process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-controller-manager-arg value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-scheduler-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-scheduler process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-cloud-controller-manager-arg value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-cloud-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-endpoint value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Specify etcd, Mysql, Postgres, or Sqlite </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> data </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">source</span><span class="token plain"> name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_ENDPOINT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-cafile value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS Certificate Authority </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CAFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-certfile value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS certification </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CERTFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-keyfile value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS key </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_KEYFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-expose-metrics                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Expose etcd metrics to client interface. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token boolean" style="color:rgb(255, 88, 116)">false</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-disable-snapshots                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable automatic etcd snapshots</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-name value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Set the base name of etcd snapshots </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: etcd-snapshot-</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">unix-timestamp</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;etcd-snapshot&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-schedule-cron value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Snapshot interval </span><span class="token function" style="color:rgb(130, 170, 255)">time</span><span class="token plain"> </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cron</span><span class="token plain"> spec. eg. every </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain"> hours </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;* */5 * * *&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0 */12 * * *&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-retention value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number of snapshots to retain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-dir value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Directory to save db snapshots. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token variable" style="color:rgb(191, 199, 213)">${data-dir}</span><span class="token plain">/db/snapshots</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-compress                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Compress etcd snapshot</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable backup to S3</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 endpoint url </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;s3.amazonaws.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint-ca value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 custom CA cert to connect to S3 endpoint</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-skip-ssl-verify                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 SSL certificate validation</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-access-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 access key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_ACCESS_KEY_ID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-secret-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 secret key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_SECRET_ACCESS_KEY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-bucket value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 bucket name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-region value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 region / bucket location </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">optional</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;us-east-1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-folder value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 folder</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-insecure                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 over HTTPS</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-timeout value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 </span><span class="token function" style="color:rgb(130, 170, 255)">timeout</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: 5m0s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --default-local-storage-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Default </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> storage path </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> provisioner storage class</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Do not deploy packaged components and delete any deployed components </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">valid items: coredns, servicelb, traefik, local-storage, metrics-server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-scheduler                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Kubernetes default scheduler</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-cloud-controller                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default cloud controller manager</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-kube-proxy                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable running kube-proxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-network-policy                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default network policy controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-helm-controller                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Helm controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --system-default-registry value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry to be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> all system images </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SYSTEM_DEFAULT_REGISTRY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --secrets-encryption                       Enable secret encryption at rest</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --enable-pprof                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable pprof endpoint on supervisor port</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/server.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">명령줄 도구</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/agent"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">agent</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#critical-configuration-values" class="table-of-contents__link toc-highlight">Critical Configuration Values</a></li><li><a href="#commonly-used-options" class="table-of-contents__link toc-highlight">Commonly Used Options</a><ul><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#admin-kubeconfig-options" class="table-of-contents__link toc-highlight">Admin Kubeconfig Options</a></li></ul></li><li><a href="#advanced-options" class="table-of-contents__link toc-highlight">Advanced Options</a><ul><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#listeners" class="table-of-contents__link toc-highlight">Listeners</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#secrets-encryption" class="table-of-contents__link toc-highlight">Secrets Encryption</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#storage-class" class="table-of-contents__link toc-highlight">Storage Class</a></li><li><a href="#kubernetes-components" class="table-of-contents__link toc-highlight">Kubernetes Components</a></li><li><a href="#customized-flags-for-kubernetes-processes" class="table-of-contents__link toc-highlight">Customized Flags for Kubernetes Processes</a></li><li><a href="#experimental-options" class="table-of-contents__link toc-highlight">Experimental Options</a></li><li><a href="#deprecated-options" class="table-of-contents__link toc-highlight">Deprecated Options</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">server</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s server</h1><p>In this section, you&#x27;ll learn how to configure the K3s server.</p><p>Note that servers also run an agent, so all of the configuration options listed in the <a href="/kr/cli/agent"><code>k3s agent</code> documentation</a> are also supported on servers.</p><p>Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the <a href="/kr/installation/configuration#configuration-file">Configuration File</a> documentation for more information on using YAML configuration files.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="critical-configuration-values">Critical Configuration Values<a href="#critical-configuration-values" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore.</p><ul><li><code>--agent-token</code></li><li><code>--cluster-cidr</code></li><li><code>--cluster-dns</code></li><li><code>--cluster-domain</code></li><li><code>--disable-cloud-controller</code></li><li><code>--disable-helm-controller</code></li><li><code>--disable-network-policy</code></li><li><code>--disable-servicelb</code></li><li><code>--egress-selector-mode</code></li><li><code>--flannel-backend</code></li><li><code>--flannel-external-ip</code></li><li><code>--flannel-ipv6-masq</code></li><li><code>--secrets-encryption</code></li><li><code>--service-cidr</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="commonly-used-options">Commonly Used Options<a href="#commonly-used-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code> value</td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>Specify etcd, Mysql, Postgres, or Sqlite (default) data source name</td></tr><tr><td><code>--datastore-cafile</code> value</td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS Certificate Authority file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-certfile</code> value</td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS certification file used to secure datastore backend communication</td></tr><tr><td><code>--datastore-keyfile</code> value</td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS key file used to secure datastore backend communication</td></tr><tr><td><code>--etcd-expose-metrics</code></td><td>N/A</td><td>Expose etcd metrics to client interface (default: false)</td></tr><tr><td><code>--etcd-disable-snapshots</code></td><td>N/A</td><td>Disable automatic etcd snapshots</td></tr><tr><td><code>--etcd-snapshot-name</code> value</td><td>N/A</td><td>Set the base name of etcd snapshots. Default: etcd-snapshot-<code>&lt;unix-timestamp&gt;</code> (default:&quot;etcd-snapshot&quot;)</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>N/A</td><td>Snapshot interval time in cron spec. eg. every 5 hours &#x27;0 <em>/5 <em> <!-- -->*<!-- --> </em>&#x27; (default: &quot;0 </em>/12 <!-- -->*<!-- --> <!-- -->*<!-- --> <!-- -->*<!-- -->&quot;)</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>N/A</td><td>Number of snapshots to retain (default: 5)</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>N/A</td><td>Directory to save db snapshots (default: ${data-dir}/db/snapshots)</td></tr><tr><td><code>--etcd-s3</code></td><td>N/A</td><td>Enable backup to S3</td></tr><tr><td><code>--etcd-s3-endpoint</code> value</td><td>N/A</td><td>S3 endpoint url (default: &quot;s3.amazonaws.com&quot;)</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code> value</td><td>N/A</td><td>S3 custom CA cert to connect to S3 endpoint</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>N/A</td><td>Disables S3 SSL certificate validation</td></tr><tr><td><code>--etcd-s3-access-key</code> value</td><td><code>AWS_ACCESS_KEY_ID</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code> value</td><td><code>AWS_SECRET_ACCESS_KEY</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code> value</td><td>N/A</td><td>S3 bucket name</td></tr><tr><td><code>--etcd-s3-region</code> value</td><td>N/A</td><td>S3 region / bucket location (optional) (default: &quot;us-east-1&quot;)</td></tr><tr><td><code>--etcd-s3-folder</code> value</td><td>N/A</td><td>S3 folder</td></tr><tr><td><code>--etcd-s3-insecure</code></td><td>Disables S3 over HTTPS</td><td></td></tr><tr><td><code>--etcd-s3-timeout</code> value</td><td>S3 timeout (default: 5m0s)</td><td></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cluster-options">Cluster Options<a href="#cluster-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--token</code> value, <code>-t</code> value</td><td><code>K3S_TOKEN</code></td><td>Shared secret used to join a server or agent to a cluster</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>File containing the cluster-secret/token</td></tr><tr><td><code>--agent-token</code> value</td><td><code>K3S_AGENT_TOKEN</code></td><td>Shared secret used to join agents to the cluster, but not servers</td></tr><tr><td><code>--agent-token-file</code> value</td><td><code>K3S_AGENT_TOKEN_FILE</code></td><td>File containing the agent secret</td></tr><tr><td><code>--server</code> value</td><td><code>K3S_URL</code></td><td>Server to connect to, used to join a cluster</td></tr><tr><td><code>--cluster-init</code></td><td><code>K3S_CLUSTER_INIT</code></td><td>Initialize a new cluster using embedded Etcd</td></tr><tr><td><code>--cluster-reset</code></td><td><code>K3S_CLUSTER_RESET</code></td><td>Forget all peers and become sole member of a new cluster</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="admin-kubeconfig-options">Admin Kubeconfig Options<a href="#admin-kubeconfig-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--write-kubeconfig value, -o</code> value</td><td><code>K3S_KUBECONFIG_OUTPUT</code></td><td>Write kubeconfig for admin client to this file</td></tr><tr><td><code>--write-kubeconfig-mode</code> value</td><td><code>K3S_KUBECONFIG_MODE</code></td><td>Write kubeconfig with this <a href="https://en.wikipedia.org/wiki/Chmod" target="_blank" rel="noopener noreferrer">mode.</a> The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-options">Advanced Options<a href="#advanced-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--debug</code></td><td>N/A</td><td>Turn on debug logs</td></tr><tr><td><code>-v</code> value</td><td>0</td><td>Number for the log level verbosity</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>Log to file</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>Log to standard error as well as file (if set)</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="listeners">Listeners<a href="#listeners" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--bind-address</code> value</td><td>0.0.0.0</td><td>k3s bind address</td></tr><tr><td><code>--https-listen-port</code> value</td><td>6443</td><td>HTTPS listen port</td></tr><tr><td><code>--advertise-address</code> value</td><td>node-external-ip/node-ip</td><td>IPv4 address that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--advertise-port</code> value</td><td>listen-port/0</td><td>Port that apiserver uses to advertise to members of the cluster</td></tr><tr><td><code>--tls-san</code> value</td><td>N/A</td><td>Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="data">Data<a href="#data" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td><code>/var/lib/rancher/k3s</code> or <code>${HOME}/.rancher/k3s</code> if not root</td><td>Folder to hold state</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption">Secrets Encryption<a href="#secrets-encryption" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--secrets-encryption</code></td><td>false</td><td>Enable Secret encryption at rest</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Default</th><th>Description</th></tr></thead><tbody><tr><td><code>--cluster-cidr</code> value</td><td>&quot;10.42.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for pod IPs</td></tr><tr><td><code>--service-cidr</code> value</td><td>&quot;10.43.0.0/16&quot;</td><td>IPv4/IPv6 network CIDRs to use for service IPs</td></tr><tr><td><code>--service-node-port-range</code> value</td><td>&quot;30000-32767&quot;</td><td>Port range to reserve for services with NodePort visibility</td></tr><tr><td><code>--cluster-dns</code> value</td><td>&quot;10.43.0.10&quot;</td><td>IPv4 Cluster IP for coredns service. Should be in your service-cidr range</td></tr><tr><td><code>--cluster-domain</code> value</td><td>&quot;cluster.local&quot;</td><td>Cluster Domain</td></tr><tr><td><code>--flannel-backend</code> value</td><td>&quot;vxlan&quot;</td><td>One of &#x27;none&#x27;, &#x27;vxlan&#x27;, &#x27;ipsec&#x27;(deprecated), &#x27;host-gw&#x27;, &#x27;wireguard-native&#x27;, or &#x27;wireguard&#x27;(deprecated)</td></tr><tr><td><code>--flannel-ipv6-masq</code></td><td>&quot;N/A&quot;</td><td>Enable IPv6 masquerading for pod</td></tr><tr><td><code>--flannel-external-ip</code></td><td>&quot;N/A&quot;</td><td>Use node external IP addresses for Flannel traffic</td></tr><tr><td><code>--servicelb-namespace</code> value</td><td>&quot;kube-system&quot;</td><td>Namespace of the pods for the servicelb component</td></tr><tr><td><code>--egress-selector-mode</code> value</td><td>&quot;agent&quot;</td><td>Must be one of the following: <ul><li>disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs.</li><li>agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s.</li><li> pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node.</li><li>  cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.</li></ul></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="storage-class">Storage Class<a href="#storage-class" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--default-local-storage-path</code> value</td><td>Default local storage path for local provisioner storage class</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-components">Kubernetes Components<a href="#kubernetes-components" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--disable</code> value</td><td>See &quot;<a href="/kr/installation/packaged-components#using-the---disable-flag">Using the <code>--disable</code> flag</a>&quot;</td></tr><tr><td><code>--disable-scheduler</code></td><td>Disable Kubernetes default scheduler</td></tr><tr><td><code>--disable-cloud-controller</code></td><td>Disable k3s default cloud controller manager</td></tr><tr><td><code>--disable-kube-proxy</code></td><td>Disable running kube-proxy</td></tr><tr><td><code>--disable-network-policy</code></td><td>Disable k3s default network policy controller</td></tr><tr><td><code>--disable-helm-controller</code></td><td>Disable Helm controller</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="customized-flags-for-kubernetes-processes">Customized Flags for Kubernetes Processes<a href="#customized-flags-for-kubernetes-processes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--etcd-arg</code> value</td><td>Customized flag for etcd process</td></tr><tr><td><code>--kube-apiserver-arg</code> value</td><td>Customized flag for kube-apiserver process</td></tr><tr><td><code>--kube-scheduler-arg</code> value</td><td>Customized flag for kube-scheduler process</td></tr><tr><td><code>--kube-controller-manager-arg</code> value</td><td>Customized flag for kube-controller-manager process</td></tr><tr><td><code>--kube-cloud-controller-manager-arg</code> value</td><td>Customized flag for kube-cloud-controller-manager process</td></tr><tr><td><code>--kubelet-arg</code> value</td><td>Customized flag for kubelet process</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>Customized flag for kube-proxy process</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="experimental-options">Experimental Options<a href="#experimental-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>Run rootless</td></tr><tr><td><code>--enable-pprof</code></td><td>Enable pprof endpoint on supervisor port</td></tr><tr><td><code>--docker</code></td><td>Use cri-dockerd instead of containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>Prefer bundled userspace binaries over host binaries</td></tr><tr><td><code>--disable-agent</code></td><td>See &quot;<a href="/kr/advanced#running-agentless-servers-experimental">Running Agentless Servers (Experimental)</a>&quot;</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deprecated-options">Deprecated Options<a href="#deprecated-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>Use <code>--flannel-backend=none</code></td></tr><tr><td><code>--no-deploy</code> value</td><td>N/A</td><td>Use <code>--disable</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>Use <code>--token</code></td></tr><tr><td><code>--flannel-backend</code> wireguard</td><td>N/A</td><td>Use <code>--flannel-backend=wireguard-native</code></td></tr><tr><td><code>--flannel-backend</code> value=option1=value</td><td>N/A</td><td>Use <code>--flannel-conf</code> to specify the flannel config file with the backend config</td></tr></tbody></table><h1>K3s Server CLI Help</h1><blockquote><p>If an option appears in brackets below, for example <code>[$K3S_TOKEN]</code>, it means that the option can be passed in as an environment variable of that name.</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server - Run management server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --bind-address value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> k3s </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">bind</span><span class="token plain"> address </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --https-listen-port value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> HTTPS listen port </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-address value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 address that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: node-external-ip/node-ip</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: listen-port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --tls-san value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: /var/lib/rancher/k3s or </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">HOME</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/.rancher/k3s </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> not root</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">service</span><span class="token plain"> IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-node-port-range value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port range to reserve </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> services with NodePort visibility </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;30000-32767&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-dns value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 Cluster IP </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> coredns service. Should be </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> your service-cidr range </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-domain value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Cluster Domain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;cluster.local&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-backend value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> backend</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;=</span><span class="token plain">option1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val1,option2</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">2</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> where backend is one of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;none&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;vxlan&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ipsec&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;host-gw&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard-native&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;vxlan&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-ipv6-masq                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable IPv6 masquerading </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-external-ip                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> external IP addresses </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> Flannel traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --egress-selector-mode value               </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> One of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;agent&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;cluster&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;pod&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;disabled&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --servicelb-namespace value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Namespace of the pods </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the servicelb component </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;kube-system&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig value, -o value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> admin client to this </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_OUTPUT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig-mode value              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig with this mode </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_MODE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a server or agent to a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the token </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> agents to the cluster, but not servers </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token-file value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the agent secret </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to, used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-init                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Initialize a new cluster using embedded Etcd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_INIT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Forget all peers and become sole member of a new cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_RESET</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset-restore-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Path to snapshot </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to be restored</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-apiserver-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-apiserver process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-arg value                           </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> etcd process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-controller-manager-arg value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-scheduler-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-scheduler process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-cloud-controller-manager-arg value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-cloud-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-endpoint value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Specify etcd, Mysql, Postgres, or Sqlite </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> data </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">source</span><span class="token plain"> name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_ENDPOINT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-cafile value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS Certificate Authority </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CAFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-certfile value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS certification </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CERTFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-keyfile value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS key </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_KEYFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-expose-metrics                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Expose etcd metrics to client interface. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token boolean" style="color:rgb(255, 88, 116)">false</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-disable-snapshots                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable automatic etcd snapshots</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-name value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Set the base name of etcd snapshots </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: etcd-snapshot-</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">unix-timestamp</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;etcd-snapshot&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-schedule-cron value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Snapshot interval </span><span class="token function" style="color:rgb(130, 170, 255)">time</span><span class="token plain"> </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cron</span><span class="token plain"> spec. eg. every </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain"> hours </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;* */5 * * *&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0 */12 * * *&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-retention value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number of snapshots to retain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-dir value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Directory to save db snapshots. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token variable" style="color:rgb(191, 199, 213)">${data-dir}</span><span class="token plain">/db/snapshots</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-compress                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Compress etcd snapshot</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable backup to S3</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 endpoint url </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;s3.amazonaws.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint-ca value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 custom CA cert to connect to S3 endpoint</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-skip-ssl-verify                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 SSL certificate validation</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-access-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 access key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_ACCESS_KEY_ID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-secret-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 secret key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_SECRET_ACCESS_KEY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-bucket value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 bucket name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-region value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 region / bucket location </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">optional</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;us-east-1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-folder value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 folder</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-insecure                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 over HTTPS</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-timeout value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 </span><span class="token function" style="color:rgb(130, 170, 255)">timeout</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: 5m0s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --default-local-storage-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Default </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> storage path </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> provisioner storage class</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Do not deploy packaged components and delete any deployed components </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">valid items: coredns, servicelb, traefik, local-storage, metrics-server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-scheduler                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Kubernetes default scheduler</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-cloud-controller                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default cloud controller manager</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-kube-proxy                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable running kube-proxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-network-policy                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default network policy controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-helm-controller                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Helm controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --system-default-registry value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry to be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> all system images </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SYSTEM_DEFAULT_REGISTRY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --secrets-encryption                       Enable secret encryption at rest</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --enable-pprof                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable pprof endpoint on supervisor port</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/server.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">명령줄 도구</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli/agent"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">agent</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#critical-configuration-values" class="table-of-contents__link toc-highlight">Critical Configuration Values</a></li><li><a href="#commonly-used-options" class="table-of-contents__link toc-highlight">Commonly Used Options</a><ul><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li><li><a href="#cluster-options" class="table-of-contents__link toc-highlight">Cluster Options</a></li><li><a href="#admin-kubeconfig-options" class="table-of-contents__link toc-highlight">Admin Kubeconfig Options</a></li></ul></li><li><a href="#advanced-options" class="table-of-contents__link toc-highlight">Advanced Options</a><ul><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#listeners" class="table-of-contents__link toc-highlight">Listeners</a></li><li><a href="#data" class="table-of-contents__link toc-highlight">Data</a></li><li><a href="#secrets-encryption" class="table-of-contents__link toc-highlight">Secrets Encryption</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a></li><li><a href="#storage-class" class="table-of-contents__link toc-highlight">Storage Class</a></li><li><a href="#kubernetes-components" class="table-of-contents__link toc-highlight">Kubernetes Components</a></li><li><a href="#customized-flags-for-kubernetes-processes" class="table-of-contents__link toc-highlight">Customized Flags for Kubernetes Processes</a></li><li><a href="#experimental-options" class="table-of-contents__link toc-highlight">Experimental Options</a></li><li><a href="#deprecated-options" class="table-of-contents__link toc-highlight">Deprecated Options</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/cli/token.html b/kr/cli/token.html
index 573dc34c9..f464cbf20 100644
--- a/kr/cli/token.html
+++ b/kr/cli/token.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">token | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/token"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="token | K3s"><meta data-rh="true" name="description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><meta data-rh="true" property="og:description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/token"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/token" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/token" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">token | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cli/token"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="token | K3s"><meta data-rh="true" name="description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><meta data-rh="true" property="og:description" content="K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cli/token"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/token" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/token" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">token</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s token</h1><p>K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-format">Token Format<a href="#token-format" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secure">Secure<a href="#secure" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The secure token format (occasionally referred to as a &quot;full&quot; token) contains the following parts:</p><p><code>&lt;prefix&gt;&lt;cluster CA hash&gt;::&lt;credentials&gt;</code></p><ul><li><code>prefix</code>: a fixed <code>K10</code> prefix that identifies the token format</li><li><code>cluster CA hash</code>: The hash of the cluster&#x27;s server CA certificate, used to authenticate the server to the joining node.  <ul><li>For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  </li><li>For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint.</li></ul></li><li><code>credentials</code>: The username and password, or bearer token, used to authenticate the joining node to the cluster.</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="tls-bootstrapping">TLS Bootstrapping<a href="#tls-bootstrapping" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:</p><ol><li>With TLS verification disabled, download the CA bundle from <code>/cacerts</code> on the server it is joining.</li><li>Calculate the SHA256 hash of the CA certificate, as described above.</li><li>Compare the calculated SHA256 hash to the hash from the token.</li><li>If the hash matches, validate that the certificate presented by the server can be validated by the server&#x27;s CA bundle.</li><li>If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="short">Short<a href="#short" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The short token format includes only the password or bearer token used to authenticate the joining node to the cluster.</p><p>If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack" target="_blank" rel="noopener noreferrer">man-in-the-middle</a> attack.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-types">Token Types<a href="#token-types" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator.</p><table><thead><tr><th>Type</th><th>CLI Option</th><th>Environment Variable</th></tr></thead><tbody><tr><td>Server</td><td><code>--token</code></td><td><code>K3S_TOKEN</code></td></tr><tr><td>Agent</td><td><code>--agent-token</code></td><td><code>K3S_AGENT_TOKEN</code></td></tr><tr><td>Bootstrap</td><td><code>n/a</code></td><td><code>n/a</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="server">Server<a href="#server" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to <code>/var/lib/rancher/k3s/server/token</code>, in secure format.</p><p>The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully.</p><p>The server token is also used as the <a href="https://en.wikipedia.org/wiki/PBKDF2" target="_blank" rel="noopener noreferrer">PBKDF2</a> passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.</p></div></div><p>For more information on using custom CA certificates, see the <a href="/kr/cli/certificate"><code>k3s certificate</code> documentation</a>.<br>
-<!-- -->For more information on backing up your cluster, see the <a href="/kr/datastore/backup-restore">Backup and Restore</a> documentation.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent">Agent<a href="#agent" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire.</p><p>The agent token is written to <code>/var/lib/rancher/k3s/server/agent-token</code>, in secure format. If no agent token is specified, this file is a link to the server token.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="bootstrap">Bootstrap<a href="#bootstrap" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Support for the <code>k3s token</code> command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).</p></div></div><p>K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-1">k3s token<a href="#k3s-token-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s bootstrap tokens use the same generation and validation code as <code>kubeadm token</code> bootstrap tokens, and the <code>k3s token</code> CLI is similar.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token - Manage bootstrap tokens</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token command [command options] [arguments...]</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">COMMANDS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   create    Create bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   delete    Delete bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   generate  Generate and print a bootstrap token, but do not create it on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   list      List bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --help, -h  show help</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-create-token"><code>k3s token create [token]</code><a href="#k3s-token-create-token" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Create a new token. The <code>[token]</code> is the actual token to write, as generated by <code>k3s token generate</code>. If no token is given, a random one will be generated.</p><p>A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--description</code> value</td><td>A human friendly description of how this token is used</td></tr><tr><td><code>--groups</code> value</td><td>Extra groups that this token will authenticate as when used for authentication. (default: Default: &quot;system:bootstrappers:k3s:default-node-token&quot;)</td></tr><tr><td><code>--ttl</code> value</td><td>The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to &#x27;0&#x27;, the token will never expire (default: 24h0m0s)</td></tr><tr><td><code>--usages</code> value</td><td>Describes the ways in which this token can be used. (default: &quot;signing,authentication&quot;)</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-delete"><code>k3s token delete</code><a href="#k3s-token-delete" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Delete one or more tokens. The full token can be provided, or just the token ID.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-generate"><code>k3s token generate</code><a href="#k3s-token-generate" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Generate a randomly-generated bootstrap token.</p><p>You don&#x27;t have to use this command in order to generate a token. You can do so yourself as long as it is in the format &quot;<!-- -->[a-z0-9]<!-- -->{6}.<!-- -->[a-z0-9]<!-- -->{16}&quot;, where the first portion is the token ID, and the second portion is the secret.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-list"><code>k3s token list</code><a href="#k3s-token-list" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>List bootstrap tokens, showing their ID, description, and remaining time-to-live.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--output</code> value</td><td>Output format. Valid options: text, json (default: &quot;text&quot;)</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/token.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/secrets-encrypt"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">secrets-encrypt</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/reference"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">레퍼런스</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#token-format" class="table-of-contents__link toc-highlight">Token Format</a><ul><li><a href="#secure" class="table-of-contents__link toc-highlight">Secure</a></li><li><a href="#short" class="table-of-contents__link toc-highlight">Short</a></li></ul></li><li><a href="#token-types" class="table-of-contents__link toc-highlight">Token Types</a><ul><li><a href="#server" class="table-of-contents__link toc-highlight">Server</a></li><li><a href="#agent" class="table-of-contents__link toc-highlight">Agent</a></li><li><a href="#bootstrap" class="table-of-contents__link toc-highlight">Bootstrap</a></li></ul></li><li><a href="#k3s-token-1" class="table-of-contents__link toc-highlight">k3s token</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/cli"><span itemprop="name">명령줄 도구</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">token</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>k3s token</h1><p>K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-format">Token Format<a href="#token-format" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secure">Secure<a href="#secure" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The secure token format (occasionally referred to as a &quot;full&quot; token) contains the following parts:</p><p><code>&lt;prefix&gt;&lt;cluster CA hash&gt;::&lt;credentials&gt;</code></p><ul><li><code>prefix</code>: a fixed <code>K10</code> prefix that identifies the token format</li><li><code>cluster CA hash</code>: The hash of the cluster&#x27;s server CA certificate, used to authenticate the server to the joining node.  <ul><li>For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk.  </li><li>For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint.</li></ul></li><li><code>credentials</code>: The username and password, or bearer token, used to authenticate the joining node to the cluster.</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="tls-bootstrapping">TLS Bootstrapping<a href="#tls-bootstrapping" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials:</p><ol><li>With TLS verification disabled, download the CA bundle from <code>/cacerts</code> on the server it is joining.</li><li>Calculate the SHA256 hash of the CA certificate, as described above.</li><li>Compare the calculated SHA256 hash to the hash from the token.</li><li>If the hash matches, validate that the certificate presented by the server can be validated by the server&#x27;s CA bundle.</li><li>If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="short">Short<a href="#short" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The short token format includes only the password or bearer token used to authenticate the joining node to the cluster.</p><p>If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to <a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack" target="_blank" rel="noopener noreferrer">man-in-the-middle</a> attack.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-types">Token Types<a href="#token-types" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator.</p><table><thead><tr><th>Type</th><th>CLI Option</th><th>Environment Variable</th></tr></thead><tbody><tr><td>Server</td><td><code>--token</code></td><td><code>K3S_TOKEN</code></td></tr><tr><td>Agent</td><td><code>--agent-token</code></td><td><code>K3S_AGENT_TOKEN</code></td></tr><tr><td>Bootstrap</td><td><code>n/a</code></td><td><code>n/a</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="server">Server<a href="#server" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to <code>/var/lib/rancher/k3s/server/token</code>, in secure format.</p><p>The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully.</p><p>The server token is also used as the <a href="https://en.wikipedia.org/wiki/PBKDF2" target="_blank" rel="noopener noreferrer">PBKDF2</a> passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates.</p></div></div><p>For more information on using custom CA certificates, see the <a href="/kr/cli/certificate"><code>k3s certificate</code> documentation</a>.<br>
+<!-- -->For more information on backing up your cluster, see the <a href="/kr/datastore/backup-restore">Backup and Restore</a> documentation.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent">Agent<a href="#agent" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire.</p><p>The agent token is written to <code>/var/lib/rancher/k3s/server/agent-token</code>, in secure format. If no agent token is specified, this file is a link to the server token.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="bootstrap">Bootstrap<a href="#bootstrap" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Support for the <code>k3s token</code> command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).</p></div></div><p>K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-1">k3s token<a href="#k3s-token-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s bootstrap tokens use the same generation and validation code as <code>kubeadm token</code> bootstrap tokens, and the <code>k3s token</code> CLI is similar.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token - Manage bootstrap tokens</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token command [command options] [arguments...]</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">COMMANDS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   create    Create bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   delete    Delete bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   generate  Generate and print a bootstrap token, but do not create it on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   list      List bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --help, -h  show help</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-create-token"><code>k3s token create [token]</code><a href="#k3s-token-create-token" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Create a new token. The <code>[token]</code> is the actual token to write, as generated by <code>k3s token generate</code>. If no token is given, a random one will be generated.</p><p>A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--description</code> value</td><td>A human friendly description of how this token is used</td></tr><tr><td><code>--groups</code> value</td><td>Extra groups that this token will authenticate as when used for authentication. (default: Default: &quot;system:bootstrappers:k3s:default-node-token&quot;)</td></tr><tr><td><code>--ttl</code> value</td><td>The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to &#x27;0&#x27;, the token will never expire (default: 24h0m0s)</td></tr><tr><td><code>--usages</code> value</td><td>Describes the ways in which this token can be used. (default: &quot;signing,authentication&quot;)</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-delete"><code>k3s token delete</code><a href="#k3s-token-delete" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Delete one or more tokens. The full token can be provided, or just the token ID.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-generate"><code>k3s token generate</code><a href="#k3s-token-generate" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Generate a randomly-generated bootstrap token.</p><p>You don&#x27;t have to use this command in order to generate a token. You can do so yourself as long as it is in the format &quot;<!-- -->[a-z0-9]<!-- -->{6}.<!-- -->[a-z0-9]<!-- -->{16}&quot;, where the first portion is the token ID, and the second portion is the secret.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-list"><code>k3s token list</code><a href="#k3s-token-list" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>List bootstrap tokens, showing their ID, description, and remaining time-to-live.</p><table><thead><tr><th>Flag</th><th>Description</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>(data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root</td></tr><tr><td><code>--kubeconfig</code> value</td><td>(cluster) Server to connect to <!-- -->[$KUBECONFIG]</td></tr><tr><td><code>--output</code> value</td><td>Output format. Valid options: text, json (default: &quot;text&quot;)</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/token.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/secrets-encrypt"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">secrets-encrypt</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/reference"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">레퍼런스</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#token-format" class="table-of-contents__link toc-highlight">Token Format</a><ul><li><a href="#secure" class="table-of-contents__link toc-highlight">Secure</a></li><li><a href="#short" class="table-of-contents__link toc-highlight">Short</a></li></ul></li><li><a href="#token-types" class="table-of-contents__link toc-highlight">Token Types</a><ul><li><a href="#server" class="table-of-contents__link toc-highlight">Server</a></li><li><a href="#agent" class="table-of-contents__link toc-highlight">Agent</a></li><li><a href="#bootstrap" class="table-of-contents__link toc-highlight">Bootstrap</a></li></ul></li><li><a href="#k3s-token-1" class="table-of-contents__link toc-highlight">k3s token</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/cluster-access.html b/kr/cluster-access.html
index f88e6c1f1..2f488dc51 100644
--- a/kr/cluster-access.html
+++ b/kr/cluster-access.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">클러스터 접근 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cluster-access"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="클러스터 접근 | K3s"><meta data-rh="true" name="description" content="/etc/rancher/k3s/k3s.yaml에 저장된 kubeconfig 파일은 쿠버네티스 클러스터에 대한 액세스를 구성하는 데 사용됩니다. kubectl 또는 helm과 같은 업스트림 Kubernetes 명령줄 도구를 설치한 경우 올바른 kubeconfig 경로로 구성해야 합니다. 이 작업은 kubeconfig 환경 변수를 내보내거나 --kubeconfig 명령줄 플래그를 호출하여 수행할 수 있습니다. 자세한 내용은 아래 예시를 참고하세요."><meta data-rh="true" property="og:description" content="/etc/rancher/k3s/k3s.yaml에 저장된 kubeconfig 파일은 쿠버네티스 클러스터에 대한 액세스를 구성하는 데 사용됩니다. kubectl 또는 helm과 같은 업스트림 Kubernetes 명령줄 도구를 설치한 경우 올바른 kubeconfig 경로로 구성해야 합니다. 이 작업은 kubeconfig 환경 변수를 내보내거나 --kubeconfig 명령줄 플래그를 호출하여 수행할 수 있습니다. 자세한 내용은 아래 예시를 참고하세요."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cluster-access"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cluster-access" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cluster-access" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">클러스터 접근 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/cluster-access"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="클러스터 접근 | K3s"><meta data-rh="true" name="description" content="/etc/rancher/k3s/k3s.yaml에 저장된 kubeconfig 파일은 쿠버네티스 클러스터에 대한 액세스를 구성하는 데 사용됩니다. kubectl 또는 helm과 같은 업스트림 Kubernetes 명령줄 도구를 설치한 경우 올바른 kubeconfig 경로로 구성해야 합니다. 이 작업은 kubeconfig 환경 변수를 내보내거나 --kubeconfig 명령줄 플래그를 호출하여 수행할 수 있습니다. 자세한 내용은 아래 예시를 참고하세요."><meta data-rh="true" property="og:description" content="/etc/rancher/k3s/k3s.yaml에 저장된 kubeconfig 파일은 쿠버네티스 클러스터에 대한 액세스를 구성하는 데 사용됩니다. kubectl 또는 helm과 같은 업스트림 Kubernetes 명령줄 도구를 설치한 경우 올바른 kubeconfig 경로로 구성해야 합니다. 이 작업은 kubeconfig 환경 변수를 내보내거나 --kubeconfig 명령줄 플래그를 호출하여 수행할 수 있습니다. 자세한 내용은 아래 예시를 참고하세요."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/cluster-access"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cluster-access" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cluster-access" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">클러스터 접근</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>클러스터 접근</h1></header><p><code>/etc/rancher/k3s/k3s.yaml</code>에 저장된 kubeconfig 파일은 쿠버네티스 클러스터에 대한 액세스를 구성하는 데 사용됩니다. kubectl 또는 helm과 같은 업스트림 Kubernetes 명령줄 도구를 설치한 경우 올바른 kubeconfig 경로로 구성해야 합니다. 이 작업은 <code>kubeconfig</code> 환경 변수를 내보내거나 <code>--kubeconfig</code> 명령줄 플래그를 호출하여 수행할 수 있습니다. 자세한 내용은 아래 예시를 참고하세요.</p><p>KUBECONFIG 환경 변수를 활용합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token builtin class-name" style="color:rgb(255, 203, 107)">export</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">KUBECONFIG</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/etc/rancher/k3s/k3s.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>또는 명령에 kubeconfig 파일의 위치를 지정합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm --kubeconfig /etc/rancher/k3s/k3s.yaml </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="외부에서-kubectl로-클러스터에-접근하기">외부에서 kubectl로 클러스터에 접근하기<a href="#외부에서-kubectl로-클러스터에-접근하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><code>/etc/rancher/k3s/k3s.yaml</code>파일을 클러스터 외부에 위치한 머신의 <code>~/.kube/config</code>로 복사합니다. 그런 다음 <code>server</code> 필드의 값을 K3s 서버의 IP 또는 이름으로 바꿉니다. 이제 <code>kubectl</code>이 K3s 클러스터를 관리할 수 있습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">cluster-loadbalancer</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">업그레이드</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#외부에서-kubectl로-클러스터에-접근하기" class="table-of-contents__link toc-highlight">외부에서 kubectl로 클러스터에 접근하기</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">클러스터 접근</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>클러스터 접근</h1></header><p><code>/etc/rancher/k3s/k3s.yaml</code>에 저장된 kubeconfig 파일은 쿠버네티스 클러스터에 대한 액세스를 구성하는 데 사용됩니다. kubectl 또는 helm과 같은 업스트림 Kubernetes 명령줄 도구를 설치한 경우 올바른 kubeconfig 경로로 구성해야 합니다. 이 작업은 <code>kubeconfig</code> 환경 변수를 내보내거나 <code>--kubeconfig</code> 명령줄 플래그를 호출하여 수행할 수 있습니다. 자세한 내용은 아래 예시를 참고하세요.</p><p>KUBECONFIG 환경 변수를 활용합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token builtin class-name" style="color:rgb(255, 203, 107)">export</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">KUBECONFIG</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/etc/rancher/k3s/k3s.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>또는 명령에 kubeconfig 파일의 위치를 지정합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm --kubeconfig /etc/rancher/k3s/k3s.yaml </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="외부에서-kubectl로-클러스터에-접근하기">외부에서 kubectl로 클러스터에 접근하기<a href="#외부에서-kubectl로-클러스터에-접근하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><code>/etc/rancher/k3s/k3s.yaml</code>파일을 클러스터 외부에 위치한 머신의 <code>~/.kube/config</code>로 복사합니다. 그런 다음 <code>server</code> 필드의 값을 K3s 서버의 IP 또는 이름으로 바꿉니다. 이제 <code>kubectl</code>이 K3s 클러스터를 관리할 수 있습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">cluster-loadbalancer</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">업그레이드</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#외부에서-kubectl로-클러스터에-접근하기" class="table-of-contents__link toc-highlight">외부에서 kubectl로 클러스터에 접근하기</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/datastore.html b/kr/datastore.html
index 390946252..b57c612e0 100644
--- a/kr/datastore.html
+++ b/kr/datastore.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">클러스터 데이터 저장소 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="클러스터 데이터 저장소 | K3s"><meta data-rh="true" name="description" content="etcd가 아닌 다른 데이터스토어를 사용하여 쿠버네티스를 실행할 수 있는 기능은 K3s를 다른 쿠버네티스 배포판과 차별화합니다. 이 기능은 쿠버네티스 운영자에게 유연성을 제공합니다. 사용 가능한 데이터스토어 옵션을 통해 사용 사례에 가장 적합한 데이터스토어를 선택할 수 있습니다. 예를 들어:"><meta data-rh="true" property="og:description" content="etcd가 아닌 다른 데이터스토어를 사용하여 쿠버네티스를 실행할 수 있는 기능은 K3s를 다른 쿠버네티스 배포판과 차별화합니다. 이 기능은 쿠버네티스 운영자에게 유연성을 제공합니다. 사용 가능한 데이터스토어 옵션을 통해 사용 사례에 가장 적합한 데이터스토어를 선택할 수 있습니다. 예를 들어:"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">클러스터 데이터 저장소 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="클러스터 데이터 저장소 | K3s"><meta data-rh="true" name="description" content="etcd가 아닌 다른 데이터스토어를 사용하여 쿠버네티스를 실행할 수 있는 기능은 K3s를 다른 쿠버네티스 배포판과 차별화합니다. 이 기능은 쿠버네티스 운영자에게 유연성을 제공합니다. 사용 가능한 데이터스토어 옵션을 통해 사용 사례에 가장 적합한 데이터스토어를 선택할 수 있습니다. 예를 들어:"><meta data-rh="true" property="og:description" content="etcd가 아닌 다른 데이터스토어를 사용하여 쿠버네티스를 실행할 수 있는 기능은 K3s를 다른 쿠버네티스 배포판과 차별화합니다. 이 기능은 쿠버네티스 운영자에게 유연성을 제공합니다. 사용 가능한 데이터스토어 옵션을 통해 사용 사례에 가장 적합한 데이터스토어를 선택할 수 있습니다. 예를 들어:"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">클러스터 데이터 저장소</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>클러스터 데이터 저장소</h1></header><p>etcd가 아닌 다른 데이터스토어를 사용하여 쿠버네티스를 실행할 수 있는 기능은 K3s를 다른 쿠버네티스 배포판과 차별화합니다. 이 기능은 쿠버네티스 운영자에게 유연성을 제공합니다. 사용 가능한 데이터스토어 옵션을 통해 사용 사례에 가장 적합한 데이터스토어를 선택할 수 있습니다. 예를 들어:</p><ul><li>팀에 etcd 운영에 대한 전문 지식이 없는 경우, MySQL 또는 PostgreSQL과 같은 엔터프라이즈급 SQL 데이터베이스를 선택할 수 있습니다.</li><li>CI/CD 환경에서 단순하고 수명이 짧은 클러스터를 실행해야 하는 경우, 임베디드 SQLite 데이터베이스를 사용할 수 있습니다.</li><li>엣지에 Kubernetes를 배포하고 고가용성 솔루션이 필요하지만 엣지에서 데이터베이스를 관리하는 데 따른 운영 오버헤드를 감당할 수 없는 경우, 임베디드 etcd를 기반으로 구축된 K3s의 임베디드 HA 데이터스토어를 사용할 수 있습니다.</li></ul><p>K3s는 다음과 같은 데이터스토어 옵션을 지원합니다:</p><ul><li><strong>임베디드 <a href="https://www.sqlite.org/index.html" target="_blank" rel="noopener noreferrer">SQLite</a></strong><br>SQLite는 여러 서버가 있는 클러스터에서는 사용할 수 없습니다.<br>SQLite는 기본 데이터스토어이며, 다른 데이터스토어 구성이 없고 디스크에 임베디드 etcd 데이터베이스 파일이 없는 경우 사용됩니다.</li><li><strong>임베디드 etcd</strong><br>여러 서버에서 임베디드 etcd를 사용하는 방법에 대한 자세한 내용은 <a href="/kr/datastore/ha-embedded">고가용성 임베디드 etcd</a> 설명서를 참조하세요.
-K3s가 새 etcd 클러스터를 초기화하거나 기존 etcd 클러스터에 가입하도록 구성되었거나 시작 시 디스크에 etcd 데이터베이스 파일이 있는 경우 임베디드 etcd가 자동으로 선택됩니다.</li><li><strong>외부 데이터베이스</strong><br>여러 서버에서 외부 데이터스토어를 사용하는 방법에 대한 자세한 내용은 <a href="/kr/datastore/ha">고가용성 외부 DB</a> 설명서를 참조하세요.<br>지원되는 외부 데이터스토어는 다음과 같습니다:<ul><li><a href="https://etcd.io/" target="_blank" rel="noopener noreferrer">etcd</a> (3.5.4 버전에 대해 검증됨)</li><li><a href="https://www.mysql.com/" target="_blank" rel="noopener noreferrer">MySQL</a> (5.7 and 8.0 버전에 대해 검증됨)</li><li><a href="https://mariadb.org/" target="_blank" rel="noopener noreferrer">MariaDB</a> (10.6.8 버전에 대해 검증됨)</li><li><a href="https://www.postgresql.org/" target="_blank" rel="noopener noreferrer">PostgreSQL</a> (10.7, 11.5, and 14.2 버전에 대해 검증됨)</li></ul></li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="외부-데이터스토어-구성-파라미터">외부 데이터스토어 구성 파라미터<a href="#외부-데이터스토어-구성-파라미터" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>PostgreSQL, MySQL, etcd와 같은 외부 데이터스토어를 사용하려면 K3s가 연결 방법을 알 수 있도록 <code>datastore-endpoint</code> 파라미터를 설정해야 합니다. 또한 연결의 인증 및 암호화를 구성하는 파라미터를 지정할 수도 있습니다. 아래 표에는 이러한 매개변수가 요약되어 있으며, CLI 플래그 또는 환경 변수로 전달할 수 있습니다.</p><table><thead><tr><th>CLI Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code></td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>PostgreSQL, MySQL 또는 etcd 연결 문자열을 지정합니다. 데이터스토어에 대한 연결을 설명하는 데 사용되는 문자열입니다. 이 문자열의 구조는 각 백엔드에 따라 다르며 아래에 자세히 설명되어 있습니다.</td></tr><tr><td><code>--datastore-cafile</code></td><td><code>K3S_DATASTORE_CAFILE</code></td><td>데이터스토어와의 통신을 보호하는 데 사용되는 TLS 인증 기관(CA: Certificate Authority) 파일입니다. 데이터스토어에서 사용자 지정 인증 기관에서 서명한 인증서를 사용하여 TLS를 통해 요청을 제공하는 경우, 이 매개변수를 사용하여 해당 CA를 지정하면 K3s 클라이언트가 인증서를 올바르게 확인할 수 있습니다.</td></tr><tr><td><code>--datastore-certfile</code></td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>데이터스토어에 대한 클라이언트 인증서 기반 인증에 사용되는 TLS 인증서 파일입니다. 이 기능을 사용하려면 데이터스토어가 클라이언트 인증서 기반 인증을 지원하도록 구성되어 있어야 합니다. 이 파라미터를 지정하는 경우 <code>datastore-keyfile</code> 파라미터도 지정해야 합니다.</td></tr><tr><td><code>--datastore-keyfile</code></td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>데이터스토어에 대한 클라이언트 인증서 기반 인증에 사용되는 TLS 키 파일입니다. 자세한 내용은 이전 <code>datastore-certfile</code> 매개변수를 참조하세요.</td></tr></tbody></table><p>데이터베이스 자격 증명이나 기타 민감한 정보가 프로세스 정보의 일부로 노출되지 않도록 이러한 매개 변수를 명령줄 인수가 아닌 환경 변수로 설정하는 것이 좋습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="데이터스토어-엔드포인트-형식-및-기능">데이터스토어 엔드포인트 형식 및 기능<a href="#데이터스토어-엔드포인트-형식-및-기능" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>앞서 언급했듯이, <code>datastore-endpoint</code> 매개변수에 전달되는 값의 형식은 데이터스토어 백엔드에 따라 달라집니다. 다음은 지원되는 각 외부 데이터스토어에 대한 이 형식과 기능에 대해 자세히 설명합니다.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">PostgreSQL</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">MySQL / MariaDB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">etcd</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>가장 일반적인 형식의 PostgreSQL용 데이터 저장소 엔드포인트 매개 변수는 다음과 같은 형식을 갖습니다:</p><p><code>postgres://username:password@hostname:port/database-name</code></p><p>더 고급 구성 매개변수를 사용할 수 있습니다. 이에 대한 자세한 내용은 <a href="https://godoc.org/github.com/lib/pq" target="_blank" rel="noopener noreferrer">https://godoc.org/github.com/lib/pq</a> 을 참조하세요.</p><p>데이터베이스 이름을 지정했는데 해당 데이터베이스가 존재하지 않으면 서버에서 데이터베이스 생성을 시도합니다.</p><p>엔드포인트로 <code>postgres://</code>만 제공하는 경우, K3s는 다음을 시도합니다:</p><ul><li>사용자 이름과 비밀번호로 <code>postgres</code>를 사용하여 localhost에 연결합니다.</li><li><code>kubernetes</code>라는 이름의 데이터베이스를 생성합니다.</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>가장 일반적인 형태인 MySQL과 MariaDB의 <code>datastore-endpoint</code> 파라미터는 다음과 같은 형식을 갖습니다:</p><p><code>mysql://username:password@tcp(hostname:3306)/database-name</code></p><p>더 고급 구성 매개변수를 사용할 수도 있습니다. 이에 대한 자세한 내용은 <a href="https://github.com/go-sql-driver/mysql#dsn-data-source-name" target="_blank" rel="noopener noreferrer">https://github.com/go-sql-driver/mysql#dsn-data-source-name</a> 을 참조하세요.</p><p>K3s의 <a href="https://github.com/k3s-io/k3s/issues/1093" target="_blank" rel="noopener noreferrer">알려진 이슈</a>로 인해 <code>tls</code> 파라미터를 설정할 수 없습니다. TLS 통신은 지원되지만 예를 들어 이 매개변수를 &quot;skip-verify&quot;로 설정하여 K3s가 인증서 확인을 건너뛰도록 할 수는 없습니다.</p><p>데이터베이스 이름을 지정했는데 데이터베이스가 존재하지 않으면 서버에서 만들려고 시도합니다.</p><p>엔드포인트로 <code>mysql://</code>만 제공하는 경우, K3s는 다음을 시도합니다:</p><ul><li><code>root</code> 사용자와 비밀번호를 사용하지 않고 <code>/var/run/mysqld/mysqld.sock</code>에서 MySQL 소켓에 연결합니다.</li><li><code>kubernetes</code>라는 이름의 데이터베이스를 생성합니다.</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>가장 일반적인 형태인 etcd의 <code>datastore-endpoint</code> 파라미터의 형식은 다음과 같습니다:</p><p><code>https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379</code></p><p>위는 일반적인 세 개의 노드인 etcd 클러스터를 가정합니다. 이 매개변수는 쉼표로 구분된 하나 이상의 etcd URL을 사용할 수 있습니다.</p></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/uninstall"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Uninstalling K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/backup-restore"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Backup and Restore</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#외부-데이터스토어-구성-파라미터" class="table-of-contents__link toc-highlight">외부 데이터스토어 구성 파라미터</a></li><li><a href="#데이터스토어-엔드포인트-형식-및-기능" class="table-of-contents__link toc-highlight">데이터스토어 엔드포인트 형식 및 기능</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">클러스터 데이터 저장소</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>클러스터 데이터 저장소</h1></header><p>etcd가 아닌 다른 데이터스토어를 사용하여 쿠버네티스를 실행할 수 있는 기능은 K3s를 다른 쿠버네티스 배포판과 차별화합니다. 이 기능은 쿠버네티스 운영자에게 유연성을 제공합니다. 사용 가능한 데이터스토어 옵션을 통해 사용 사례에 가장 적합한 데이터스토어를 선택할 수 있습니다. 예를 들어:</p><ul><li>팀에 etcd 운영에 대한 전문 지식이 없는 경우, MySQL 또는 PostgreSQL과 같은 엔터프라이즈급 SQL 데이터베이스를 선택할 수 있습니다.</li><li>CI/CD 환경에서 단순하고 수명이 짧은 클러스터를 실행해야 하는 경우, 임베디드 SQLite 데이터베이스를 사용할 수 있습니다.</li><li>엣지에 Kubernetes를 배포하고 고가용성 솔루션이 필요하지만 엣지에서 데이터베이스를 관리하는 데 따른 운영 오버헤드를 감당할 수 없는 경우, 임베디드 etcd를 기반으로 구축된 K3s의 임베디드 HA 데이터스토어를 사용할 수 있습니다.</li></ul><p>K3s는 다음과 같은 데이터스토어 옵션을 지원합니다:</p><ul><li><strong>임베디드 <a href="https://www.sqlite.org/index.html" target="_blank" rel="noopener noreferrer">SQLite</a></strong><br>SQLite는 여러 서버가 있는 클러스터에서는 사용할 수 없습니다.<br>SQLite는 기본 데이터스토어이며, 다른 데이터스토어 구성이 없고 디스크에 임베디드 etcd 데이터베이스 파일이 없는 경우 사용됩니다.</li><li><strong>임베디드 etcd</strong><br>여러 서버에서 임베디드 etcd를 사용하는 방법에 대한 자세한 내용은 <a href="/kr/datastore/ha-embedded">고가용성 임베디드 etcd</a> 설명서를 참조하세요.
+K3s가 새 etcd 클러스터를 초기화하거나 기존 etcd 클러스터에 가입하도록 구성되었거나 시작 시 디스크에 etcd 데이터베이스 파일이 있는 경우 임베디드 etcd가 자동으로 선택됩니다.</li><li><strong>외부 데이터베이스</strong><br>여러 서버에서 외부 데이터스토어를 사용하는 방법에 대한 자세한 내용은 <a href="/kr/datastore/ha">고가용성 외부 DB</a> 설명서를 참조하세요.<br>지원되는 외부 데이터스토어는 다음과 같습니다:<ul><li><a href="https://etcd.io/" target="_blank" rel="noopener noreferrer">etcd</a> (3.5.4 버전에 대해 검증됨)</li><li><a href="https://www.mysql.com/" target="_blank" rel="noopener noreferrer">MySQL</a> (5.7 and 8.0 버전에 대해 검증됨)</li><li><a href="https://mariadb.org/" target="_blank" rel="noopener noreferrer">MariaDB</a> (10.6.8 버전에 대해 검증됨)</li><li><a href="https://www.postgresql.org/" target="_blank" rel="noopener noreferrer">PostgreSQL</a> (10.7, 11.5, and 14.2 버전에 대해 검증됨)</li></ul></li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="외부-데이터스토어-구성-파라미터">외부 데이터스토어 구성 파라미터<a href="#외부-데이터스토어-구성-파라미터" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>PostgreSQL, MySQL, etcd와 같은 외부 데이터스토어를 사용하려면 K3s가 연결 방법을 알 수 있도록 <code>datastore-endpoint</code> 파라미터를 설정해야 합니다. 또한 연결의 인증 및 암호화를 구성하는 파라미터를 지정할 수도 있습니다. 아래 표에는 이러한 매개변수가 요약되어 있으며, CLI 플래그 또는 환경 변수로 전달할 수 있습니다.</p><table><thead><tr><th>CLI Flag</th><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code></td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>PostgreSQL, MySQL 또는 etcd 연결 문자열을 지정합니다. 데이터스토어에 대한 연결을 설명하는 데 사용되는 문자열입니다. 이 문자열의 구조는 각 백엔드에 따라 다르며 아래에 자세히 설명되어 있습니다.</td></tr><tr><td><code>--datastore-cafile</code></td><td><code>K3S_DATASTORE_CAFILE</code></td><td>데이터스토어와의 통신을 보호하는 데 사용되는 TLS 인증 기관(CA: Certificate Authority) 파일입니다. 데이터스토어에서 사용자 지정 인증 기관에서 서명한 인증서를 사용하여 TLS를 통해 요청을 제공하는 경우, 이 매개변수를 사용하여 해당 CA를 지정하면 K3s 클라이언트가 인증서를 올바르게 확인할 수 있습니다.</td></tr><tr><td><code>--datastore-certfile</code></td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>데이터스토어에 대한 클라이언트 인증서 기반 인증에 사용되는 TLS 인증서 파일입니다. 이 기능을 사용하려면 데이터스토어가 클라이언트 인증서 기반 인증을 지원하도록 구성되어 있어야 합니다. 이 파라미터를 지정하는 경우 <code>datastore-keyfile</code> 파라미터도 지정해야 합니다.</td></tr><tr><td><code>--datastore-keyfile</code></td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>데이터스토어에 대한 클라이언트 인증서 기반 인증에 사용되는 TLS 키 파일입니다. 자세한 내용은 이전 <code>datastore-certfile</code> 매개변수를 참조하세요.</td></tr></tbody></table><p>데이터베이스 자격 증명이나 기타 민감한 정보가 프로세스 정보의 일부로 노출되지 않도록 이러한 매개 변수를 명령줄 인수가 아닌 환경 변수로 설정하는 것이 좋습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="데이터스토어-엔드포인트-형식-및-기능">데이터스토어 엔드포인트 형식 및 기능<a href="#데이터스토어-엔드포인트-형식-및-기능" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>앞서 언급했듯이, <code>datastore-endpoint</code> 매개변수에 전달되는 값의 형식은 데이터스토어 백엔드에 따라 달라집니다. 다음은 지원되는 각 외부 데이터스토어에 대한 이 형식과 기능에 대해 자세히 설명합니다.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">PostgreSQL</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">MySQL / MariaDB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">etcd</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>가장 일반적인 형식의 PostgreSQL용 데이터 저장소 엔드포인트 매개 변수는 다음과 같은 형식을 갖습니다:</p><p><code>postgres://username:password@hostname:port/database-name</code></p><p>더 고급 구성 매개변수를 사용할 수 있습니다. 이에 대한 자세한 내용은 <a href="https://godoc.org/github.com/lib/pq" target="_blank" rel="noopener noreferrer">https://godoc.org/github.com/lib/pq</a> 을 참조하세요.</p><p>데이터베이스 이름을 지정했는데 해당 데이터베이스가 존재하지 않으면 서버에서 데이터베이스 생성을 시도합니다.</p><p>엔드포인트로 <code>postgres://</code>만 제공하는 경우, K3s는 다음을 시도합니다:</p><ul><li>사용자 이름과 비밀번호로 <code>postgres</code>를 사용하여 localhost에 연결합니다.</li><li><code>kubernetes</code>라는 이름의 데이터베이스를 생성합니다.</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>가장 일반적인 형태인 MySQL과 MariaDB의 <code>datastore-endpoint</code> 파라미터는 다음과 같은 형식을 갖습니다:</p><p><code>mysql://username:password@tcp(hostname:3306)/database-name</code></p><p>더 고급 구성 매개변수를 사용할 수도 있습니다. 이에 대한 자세한 내용은 <a href="https://github.com/go-sql-driver/mysql#dsn-data-source-name" target="_blank" rel="noopener noreferrer">https://github.com/go-sql-driver/mysql#dsn-data-source-name</a> 을 참조하세요.</p><p>K3s의 <a href="https://github.com/k3s-io/k3s/issues/1093" target="_blank" rel="noopener noreferrer">알려진 이슈</a>로 인해 <code>tls</code> 파라미터를 설정할 수 없습니다. TLS 통신은 지원되지만 예를 들어 이 매개변수를 &quot;skip-verify&quot;로 설정하여 K3s가 인증서 확인을 건너뛰도록 할 수는 없습니다.</p><p>데이터베이스 이름을 지정했는데 데이터베이스가 존재하지 않으면 서버에서 만들려고 시도합니다.</p><p>엔드포인트로 <code>mysql://</code>만 제공하는 경우, K3s는 다음을 시도합니다:</p><ul><li><code>root</code> 사용자와 비밀번호를 사용하지 않고 <code>/var/run/mysqld/mysqld.sock</code>에서 MySQL 소켓에 연결합니다.</li><li><code>kubernetes</code>라는 이름의 데이터베이스를 생성합니다.</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>가장 일반적인 형태인 etcd의 <code>datastore-endpoint</code> 파라미터의 형식은 다음과 같습니다:</p><p><code>https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379</code></p><p>위는 일반적인 세 개의 노드인 etcd 클러스터를 가정합니다. 이 매개변수는 쉼표로 구분된 하나 이상의 etcd URL을 사용할 수 있습니다.</p></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/uninstall"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Uninstalling K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/backup-restore"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Backup and Restore</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#외부-데이터스토어-구성-파라미터" class="table-of-contents__link toc-highlight">외부 데이터스토어 구성 파라미터</a></li><li><a href="#데이터스토어-엔드포인트-형식-및-기능" class="table-of-contents__link toc-highlight">데이터스토어 엔드포인트 형식 및 기능</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/datastore/backup-restore.html b/kr/datastore/backup-restore.html
index 980dcd63f..def7323f1 100644
--- a/kr/datastore/backup-restore.html
+++ b/kr/datastore/backup-restore.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Backup and Restore | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/backup-restore"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Backup and Restore | K3s"><meta data-rh="true" name="description" content="The way K3s is backed up and restored depends on which type of datastore is used."><meta data-rh="true" property="og:description" content="The way K3s is backed up and restored depends on which type of datastore is used."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/backup-restore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/backup-restore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/backup-restore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Backup and Restore | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/backup-restore"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Backup and Restore | K3s"><meta data-rh="true" name="description" content="The way K3s is backed up and restored depends on which type of datastore is used."><meta data-rh="true" property="og:description" content="The way K3s is backed up and restored depends on which type of datastore is used."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/backup-restore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/backup-restore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/backup-restore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Backup and Restore</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Backup and Restore</h1></header><p>The way K3s is backed up and restored depends on which type of datastore is used.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>In addition to backing up the datastore itself, you must also back up the server token file at <code>/var/lib/rancher/k3s/server/token</code>.
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Backup and Restore</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Backup and Restore</h1></header><p>The way K3s is backed up and restored depends on which type of datastore is used.</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>In addition to backing up the datastore itself, you must also back up the server token file at <code>/var/lib/rancher/k3s/server/token</code>.
 You must restore this file, or pass its value into the <code>--token</code> option, when restoring from backup.
-If you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-sqlite">Backup and Restore with SQLite<a href="#backup-and-restore-with-sqlite" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>No special commands are required to back up or restore the SQLite datastore. </p><ul><li>To back up the SQLite datastore, take a copy of <code>/var/lib/rancher/k3s/server/db/</code>.</li><li>To restore the SQLite datastore, restore the contents of <code>/var/lib/rancher/k3s/server/db</code> (and the token, as discussed above).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-external-datastore">Backup and Restore with External Datastore<a href="#backup-and-restore-with-external-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump.</p><p>We recommend configuring the database to take recurring snapshots.</p><p>For details on taking database snapshots and restoring your database from them, refer to the official database documentation:</p><ul><li><a href="https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html" target="_blank" rel="noopener noreferrer">Official MySQL documentation</a></li><li><a href="https://www.postgresql.org/docs/8.3/backup-dump.html" target="_blank" rel="noopener noreferrer">Official PostgreSQL documentation</a></li><li><a href="https://etcd.io/docs/latest/op-guide/recovery/" target="_blank" rel="noopener noreferrer">Official etcd documentation</a></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-embedded-etcd-datastore">Backup and Restore with Embedded etcd Datastore<a href="#backup-and-restore-with-embedded-etcd-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>See the <a href="/kr/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> command documentation</a> for information on performing backup and restore operations on the embedded etcd datastore.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">클러스터 데이터 저장소</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/ha-embedded"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#backup-and-restore-with-sqlite" class="table-of-contents__link toc-highlight">Backup and Restore with SQLite</a></li><li><a href="#backup-and-restore-with-external-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with External Datastore</a></li><li><a href="#backup-and-restore-with-embedded-etcd-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with Embedded etcd Datastore</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+If you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-sqlite">Backup and Restore with SQLite<a href="#backup-and-restore-with-sqlite" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>No special commands are required to back up or restore the SQLite datastore. </p><ul><li>To back up the SQLite datastore, take a copy of <code>/var/lib/rancher/k3s/server/db/</code>.</li><li>To restore the SQLite datastore, restore the contents of <code>/var/lib/rancher/k3s/server/db</code> (and the token, as discussed above).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-external-datastore">Backup and Restore with External Datastore<a href="#backup-and-restore-with-external-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump.</p><p>We recommend configuring the database to take recurring snapshots.</p><p>For details on taking database snapshots and restoring your database from them, refer to the official database documentation:</p><ul><li><a href="https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html" target="_blank" rel="noopener noreferrer">Official MySQL documentation</a></li><li><a href="https://www.postgresql.org/docs/8.3/backup-dump.html" target="_blank" rel="noopener noreferrer">Official PostgreSQL documentation</a></li><li><a href="https://etcd.io/docs/latest/op-guide/recovery/" target="_blank" rel="noopener noreferrer">Official etcd documentation</a></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="backup-and-restore-with-embedded-etcd-datastore">Backup and Restore with Embedded etcd Datastore<a href="#backup-and-restore-with-embedded-etcd-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>See the <a href="/kr/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> command documentation</a> for information on performing backup and restore operations on the embedded etcd datastore.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">클러스터 데이터 저장소</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/ha-embedded"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#backup-and-restore-with-sqlite" class="table-of-contents__link toc-highlight">Backup and Restore with SQLite</a></li><li><a href="#backup-and-restore-with-external-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with External Datastore</a></li><li><a href="#backup-and-restore-with-embedded-etcd-datastore" class="table-of-contents__link toc-highlight">Backup and Restore with Embedded etcd Datastore</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/datastore/cluster-loadbalancer.html b/kr/datastore/cluster-loadbalancer.html
index 5fac76066..4fd8b4693 100644
--- a/kr/datastore/cluster-loadbalancer.html
+++ b/kr/datastore/cluster-loadbalancer.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">cluster-loadbalancer | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/cluster-loadbalancer"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="cluster-loadbalancer | K3s"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">cluster-loadbalancer | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/cluster-loadbalancer"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="cluster-loadbalancer | K3s"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">cluster-loadbalancer</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>cluster-loadbalancer</h1></header></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/ha"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">High Availability External DB</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cluster-access"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">클러스터 접근</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">cluster-loadbalancer</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>cluster-loadbalancer</h1></header></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/ha"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">High Availability External DB</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cluster-access"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">클러스터 접근</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/datastore/ha-embedded.html b/kr/datastore/ha-embedded.html
index 7aa25896b..52b7fe7fa 100644
--- a/kr/datastore/ha-embedded.html
+++ b/kr/datastore/ha-embedded.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">High Availability Embedded etcd | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/ha-embedded"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability Embedded etcd | K3s"><meta data-rh="true" name="description" content="Full support as of v1.19.5+k3s1"><meta data-rh="true" property="og:description" content="Full support as of v1.19.5+k3s1"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/ha-embedded"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha-embedded" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha-embedded" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">High Availability Embedded etcd | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/ha-embedded"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability Embedded etcd | K3s"><meta data-rh="true" name="description" content="Full support as of v1.19.5+k3s1"><meta data-rh="true" property="og:description" content="Full support as of v1.19.5+k3s1"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/ha-embedded"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha-embedded" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha-embedded" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability Embedded etcd</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability Embedded etcd</h1></header><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Full support as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.5%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.5+k3s1</a><br>
-<!-- -->Experimental support as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>Notice: Deprecated Dqlite</div><div class="admonitionContent_S0QG"><p>Embedded etcd replaced experimental Dqlite in the K3s v1.19.1 release. This is a breaking change. Please note that upgrades from experimental Dqlite to embedded etcd are not supported. If you attempt an upgrade it will not succeed and data will be lost.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="new-cluster">New cluster<a href="#new-cluster" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>To run K3s in this mode, you must have an odd number of server nodes. We recommend starting with three nodes.</p><p>To get started, first launch a server node with the <code>cluster-init</code> flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After launching the first server, join the second and third servers to the cluster using the shared secret:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">1</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Check to see that the second and third servers are now part of the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME        STATUS   ROLES                       AGE   VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server1     Ready    control-plane,etcd,master   28m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server2     Ready    control-plane,etcd,master   13m   vX.Y.Z</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Now you have a highly available control plane. Any successfully clustered servers can be used in the <code>--server</code> argument to join additional server and worker nodes. Joining additional worker nodes to the cluster follows the same procedure as a single server cluster.</p><p>There are a few config flags that must be the same in all server nodes:         </p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="existing-clusters">Existing clusters<a href="#existing-clusters" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the <code>--cluster-init</code> flag. Once you&#x27;ve done that, you&#x27;ll be able to add additional instances as described above.</p><p>If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (<code>--cluster-init</code>, <code>--server</code>, <code>--datastore-endpoint</code>, etc) are ignored.</p><blockquote><p><strong>Important:</strong> K3s v1.22.2 and newer support migration from SQLite to etcd. Older versions will create a new empty datastore if you add <code>--cluster-init</code> to an existing server.</p></blockquote></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/backup-restore"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Backup and Restore</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/ha"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">High Availability External DB</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#new-cluster" class="table-of-contents__link toc-highlight">New cluster</a></li><li><a href="#existing-clusters" class="table-of-contents__link toc-highlight">Existing clusters</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability Embedded etcd</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability Embedded etcd</h1></header><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Full support as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.5%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.5+k3s1</a><br>
+<!-- -->Experimental support as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>Notice: Deprecated Dqlite</div><div class="admonitionContent_S0QG"><p>Embedded etcd replaced experimental Dqlite in the K3s v1.19.1 release. This is a breaking change. Please note that upgrades from experimental Dqlite to embedded etcd are not supported. If you attempt an upgrade it will not succeed and data will be lost.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="new-cluster">New cluster<a href="#new-cluster" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>To run K3s in this mode, you must have an odd number of server nodes. We recommend starting with three nodes.</p><p>To get started, first launch a server node with the <code>cluster-init</code> flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After launching the first server, join the second and third servers to the cluster using the shared secret:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">1</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Check to see that the second and third servers are now part of the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME        STATUS   ROLES                       AGE   VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server1     Ready    control-plane,etcd,master   28m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server2     Ready    control-plane,etcd,master   13m   vX.Y.Z</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Now you have a highly available control plane. Any successfully clustered servers can be used in the <code>--server</code> argument to join additional server and worker nodes. Joining additional worker nodes to the cluster follows the same procedure as a single server cluster.</p><p>There are a few config flags that must be the same in all server nodes:         </p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="existing-clusters">Existing clusters<a href="#existing-clusters" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the <code>--cluster-init</code> flag. Once you&#x27;ve done that, you&#x27;ll be able to add additional instances as described above.</p><p>If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (<code>--cluster-init</code>, <code>--server</code>, <code>--datastore-endpoint</code>, etc) are ignored.</p><blockquote><p><strong>Important:</strong> K3s v1.22.2 and newer support migration from SQLite to etcd. Older versions will create a new empty datastore if you add <code>--cluster-init</code> to an existing server.</p></blockquote></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/backup-restore"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Backup and Restore</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/ha"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">High Availability External DB</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#new-cluster" class="table-of-contents__link toc-highlight">New cluster</a></li><li><a href="#existing-clusters" class="table-of-contents__link toc-highlight">Existing clusters</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/datastore/ha.html b/kr/datastore/ha.html
index fee4ef7d3..c4feeab64 100644
--- a/kr/datastore/ha.html
+++ b/kr/datastore/ha.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">High Availability External DB | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/ha"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability External DB | K3s"><meta data-rh="true" name="description" content="Note: Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release."><meta data-rh="true" property="og:description" content="Note: Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/ha"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">High Availability External DB | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/datastore/ha"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="High Availability External DB | K3s"><meta data-rh="true" name="description" content="Note: Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release."><meta data-rh="true" property="og:description" content="Note: Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/datastore/ha"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability External DB</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability External DB</h1></header><blockquote><p><strong>Note:</strong> Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release.</p></blockquote><p>This section describes how to install a high-availability K3s cluster with an external database.</p><p>Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is comprised of:</p><ul><li>Two or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>Zero or more <strong>agent nodes</strong> that are designated to run your apps and services</li><li>An <strong>external datastore</strong> (as opposed to the embedded SQLite datastore used in single-server setups)</li><li>A <strong>fixed registration address</strong> that is placed in front of the server nodes to allow agent nodes to register with the cluster</li></ul><p>For more details on how these components work together, refer to the <a href="/kr/architecture#high-availability-k3s-server-with-an-external-db">architecture section.</a></p><p>Agents register through the fixed registration address, but after registration they establish a connection directly to one of the server nodes. This is a websocket connection initiated by the <code>k3s agent</code> process, it is maintained by a client-side load balancer running as part of the agent process.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="installation-outline">Installation Outline<a href="#installation-outline" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Setting up an HA cluster requires the following steps:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="1-create-an-external-datastore">1. Create an External Datastore<a href="#1-create-an-external-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You will first need to create an external datastore for the cluster. See the <a href="/kr/datastore">Cluster Datastore Options</a> documentation for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="2-launch-server-nodes">2. Launch Server Nodes<a href="#2-launch-server-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s requires two or more server nodes for this HA configuration. See the <a href="/kr/installation/requirements">Requirements</a> guide for minimum machine requirements.</p><p>When running the <code>k3s server</code> command on these nodes, you must set the <code>datastore-endpoint</code> parameter so that K3s knows how to connect to the external datastore. The <code>token</code> parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use.</p><p>For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and <a href="/kr/cli/server#cluster-options">set a token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The datastore endpoint format differs based on the database type. For details, refer to the section on <a href="/kr/datastore#datastore-endpoint-format-and-functionality">datastore endpoint formats.</a></p><p>To configure TLS certificates when launching server nodes, refer to the <a href="/kr/datastore#external-datastore-configuration-parameters">datastore configuration guide.</a></p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>The same installation options available to single-server installs are also available for high-availability installs. For more details, see the <a href="/kr/installation/configuration">Configuration Options</a> documentation.</p></div></div><p>By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The <code>node-taint</code> parameter will allow you to configure nodes with taints, for example <code>--node-taint CriticalAddonsOnly=true:NoExecute</code>.</p><p>Once you&#x27;ve launched the <code>k3s server</code> process on all server nodes, ensure that the cluster has come up properly with <code>k3s kubectl get nodes</code>. You should see your server nodes in the Ready state.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="3-configure-the-fixed-registration-address">3. Configure the Fixed Registration Address<a href="#3-configure-the-fixed-registration-address" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Agent nodes need a URL to register against. This can be the IP or hostname of any of the server nodes, but in many cases those may change over time. For example, if you are running your cluster in a cloud that supports scaling groups, you may scale the server node group up and down over time, causing nodes to be created and destroyed and thus having different IPs from the initial set of server nodes. Therefore, you should have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:</p><ul><li>A layer-4 (TCP) load balancer</li><li>Round-robin DNS</li><li>Virtual or elastic IP addresses</li></ul><p>This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> file to point to it instead of a specific node. To avoid certificate errors in such a configuration, you should install the server with the <code>--tls-san YOUR_IP_OR_HOSTNAME_HERE</code> option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="4-optional-join-additional-server-nodes">4. Optional: Join Additional Server Nodes<a href="#4-optional-join-additional-server-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used.</p><p>If the first server node was started without the <code>--token</code> CLI flag or <code>K3S_TOKEN</code> variable, the token value can be retrieved from any server already joined to the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional server nodes can then be added <a href="/kr/cli/server#cluster-options">using the token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few config flags that must be the same in all server nodes:</p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="5-optional-join-agent-nodes">5. Optional: Join Agent Nodes<a href="#5-optional-join-agent-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Because K3s server nodes are schedulable by default, the minimum number of nodes for an HA K3s server cluster is two server nodes and zero agent nodes. To add nodes designated to run your apps and services, join agent nodes to your cluster.</p><p>Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to and the token it should use.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET k3s agent --server https://fixed-registration-address:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/ha-embedded"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">cluster-loadbalancer</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#installation-outline" class="table-of-contents__link toc-highlight">Installation Outline</a><ul><li><a href="#1-create-an-external-datastore" class="table-of-contents__link toc-highlight">1. Create an External Datastore</a></li><li><a href="#2-launch-server-nodes" class="table-of-contents__link toc-highlight">2. Launch Server Nodes</a></li><li><a href="#3-configure-the-fixed-registration-address" class="table-of-contents__link toc-highlight">3. Configure the Fixed Registration Address</a></li><li><a href="#4-optional-join-additional-server-nodes" class="table-of-contents__link toc-highlight">4. Optional: Join Additional Server Nodes</a></li><li><a href="#5-optional-join-agent-nodes" class="table-of-contents__link toc-highlight">5. Optional: Join Agent Nodes</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/backup-restore">Backup and Restore</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/ha-embedded">High Availability Embedded etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/datastore/ha">High Availability External DB</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/datastore"><span itemprop="name">클러스터 데이터 저장소</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">High Availability External DB</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>High Availability External DB</h1></header><blockquote><p><strong>Note:</strong> Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release.</p></blockquote><p>This section describes how to install a high-availability K3s cluster with an external database.</p><p>Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is comprised of:</p><ul><li>Two or more <strong>server nodes</strong> that will serve the Kubernetes API and run other control plane services</li><li>Zero or more <strong>agent nodes</strong> that are designated to run your apps and services</li><li>An <strong>external datastore</strong> (as opposed to the embedded SQLite datastore used in single-server setups)</li><li>A <strong>fixed registration address</strong> that is placed in front of the server nodes to allow agent nodes to register with the cluster</li></ul><p>For more details on how these components work together, refer to the <a href="/kr/architecture#high-availability-k3s-server-with-an-external-db">architecture section.</a></p><p>Agents register through the fixed registration address, but after registration they establish a connection directly to one of the server nodes. This is a websocket connection initiated by the <code>k3s agent</code> process, it is maintained by a client-side load balancer running as part of the agent process.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="installation-outline">Installation Outline<a href="#installation-outline" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Setting up an HA cluster requires the following steps:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="1-create-an-external-datastore">1. Create an External Datastore<a href="#1-create-an-external-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You will first need to create an external datastore for the cluster. See the <a href="/kr/datastore">Cluster Datastore Options</a> documentation for more details.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="2-launch-server-nodes">2. Launch Server Nodes<a href="#2-launch-server-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s requires two or more server nodes for this HA configuration. See the <a href="/kr/installation/requirements">Requirements</a> guide for minimum machine requirements.</p><p>When running the <code>k3s server</code> command on these nodes, you must set the <code>datastore-endpoint</code> parameter so that K3s knows how to connect to the external datastore. The <code>token</code> parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use.</p><p>For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and <a href="/kr/cli/server#cluster-options">set a token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The datastore endpoint format differs based on the database type. For details, refer to the section on <a href="/kr/datastore#datastore-endpoint-format-and-functionality">datastore endpoint formats.</a></p><p>To configure TLS certificates when launching server nodes, refer to the <a href="/kr/datastore#external-datastore-configuration-parameters">datastore configuration guide.</a></p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>The same installation options available to single-server installs are also available for high-availability installs. For more details, see the <a href="/kr/installation/configuration">Configuration Options</a> documentation.</p></div></div><p>By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The <code>node-taint</code> parameter will allow you to configure nodes with taints, for example <code>--node-taint CriticalAddonsOnly=true:NoExecute</code>.</p><p>Once you&#x27;ve launched the <code>k3s server</code> process on all server nodes, ensure that the cluster has come up properly with <code>k3s kubectl get nodes</code>. You should see your server nodes in the Ready state.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="3-configure-the-fixed-registration-address">3. Configure the Fixed Registration Address<a href="#3-configure-the-fixed-registration-address" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Agent nodes need a URL to register against. This can be the IP or hostname of any of the server nodes, but in many cases those may change over time. For example, if you are running your cluster in a cloud that supports scaling groups, you may scale the server node group up and down over time, causing nodes to be created and destroyed and thus having different IPs from the initial set of server nodes. Therefore, you should have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as:</p><ul><li>A layer-4 (TCP) load balancer</li><li>Round-robin DNS</li><li>Virtual or elastic IP addresses</li></ul><p>This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> file to point to it instead of a specific node. To avoid certificate errors in such a configuration, you should install the server with the <code>--tls-san YOUR_IP_OR_HOSTNAME_HERE</code> option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="4-optional-join-additional-server-nodes">4. Optional: Join Additional Server Nodes<a href="#4-optional-join-additional-server-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used.</p><p>If the first server node was started without the <code>--token</code> CLI flag or <code>K3S_TOKEN</code> variable, the token value can be retrieved from any server already joined to the cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional server nodes can then be added <a href="/kr/cli/server#cluster-options">using the token</a>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few config flags that must be the same in all server nodes:</p><ul><li>Network related flags: <code>--cluster-dns</code>, <code>--cluster-domain</code>, <code>--cluster-cidr</code>, <code>--service-cidr</code></li><li>Flags controlling the deployment of certain components: <code>--disable-helm-controller</code>, <code>--disable-kube-proxy</code>, <code>--disable-network-policy</code> and any component passed to <code>--disable</code></li><li>Feature related flags: <code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="5-optional-join-agent-nodes">5. Optional: Join Agent Nodes<a href="#5-optional-join-agent-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Because K3s server nodes are schedulable by default, the minimum number of nodes for an HA K3s server cluster is two server nodes and zero agent nodes. To add nodes designated to run your apps and services, join agent nodes to your cluster.</p><p>Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to and the token it should use.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET k3s agent --server https://fixed-registration-address:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/datastore/ha-embedded"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">High Availability Embedded etcd</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">cluster-loadbalancer</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#installation-outline" class="table-of-contents__link toc-highlight">Installation Outline</a><ul><li><a href="#1-create-an-external-datastore" class="table-of-contents__link toc-highlight">1. Create an External Datastore</a></li><li><a href="#2-launch-server-nodes" class="table-of-contents__link toc-highlight">2. Launch Server Nodes</a></li><li><a href="#3-configure-the-fixed-registration-address" class="table-of-contents__link toc-highlight">3. Configure the Fixed Registration Address</a></li><li><a href="#4-optional-join-additional-server-nodes" class="table-of-contents__link toc-highlight">4. Optional: Join Additional Server Nodes</a></li><li><a href="#5-optional-join-agent-nodes" class="table-of-contents__link toc-highlight">5. Optional: Join Agent Nodes</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/faq.html b/kr/faq.html
index e15d1944c..8d97f5bcd 100644
--- a/kr/faq.html
+++ b/kr/faq.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">자주 묻는 질문 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/faq"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="자주 묻는 질문 | K3s"><meta data-rh="true" name="description" content="자주 묻는 질문은 주기적으로 업데이트되며, 사용자가 K3s에 대해 가장 자주 묻는 질문에 대한 답변으로 구성되어 있습니다."><meta data-rh="true" property="og:description" content="자주 묻는 질문은 주기적으로 업데이트되며, 사용자가 K3s에 대해 가장 자주 묻는 질문에 대한 답변으로 구성되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/faq"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/faq" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/faq" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">자주 묻는 질문 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/faq"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="자주 묻는 질문 | K3s"><meta data-rh="true" name="description" content="자주 묻는 질문은 주기적으로 업데이트되며, 사용자가 K3s에 대해 가장 자주 묻는 질문에 대한 답변으로 구성되어 있습니다."><meta data-rh="true" property="og:description" content="자주 묻는 질문은 주기적으로 업데이트되며, 사용자가 K3s에 대해 가장 자주 묻는 질문에 대한 답변으로 구성되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/faq"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/faq" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/faq" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/faq" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">자주 묻는 질문</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>자주 묻는 질문</h1></header><p>자주 묻는 질문은 주기적으로 업데이트되며, 사용자가 K3s에 대해 가장 자주 묻는 질문에 대한 답변으로 구성되어 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s가-kubernetes를-대체하기에-적합한가요">K3s가 Kubernetes를 대체하기에 적합한가요?<a href="#k3s가-kubernetes를-대체하기에-적합한가요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s는 CNCF 인증을 받은 Kubernetes 배포판으로, 표준 Kubernetes 클러스터에 필요한 모든 작업을 수행할 수 있습니다. 단지 더 가벼운 버전일 뿐입니다. 자세한 내용은 <a href="/kr/">main</a> 문서 페이지를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요">Traefik 대신 자체 Ingress를 사용하려면 어떻게 해야 하나요?<a href="#traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><code>--disable=traefik</code>으로 K3s 서버를 시작하고 인그레스를 배포하기만 하면 됩니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s는-windows를-지원하나요">K3s는 Windows를 지원하나요?<a href="#k3s는-windows를-지원하나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>현재 K3s는 기본적으로 Windows를 지원하지 않지만, 추후에 지원할 수 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="소스로부터-빌드하려면-어떻게-해야-하나요">소스로부터 빌드하려면 어떻게 해야 하나요?<a href="#소스로부터-빌드하려면-어떻게-해야-하나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s <a href="https://github.com/k3s-io/k3s/blob/master/BUILDING.md" target="_blank" rel="noopener noreferrer">BUILDING.md</a>에서 지침을 참조하시기 바랍니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-로그는-어디에-있나요">K3s 로그는 어디에 있나요?<a href="#k3s-로그는-어디에-있나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s 로그의 위치는 K3s를 실행하는 방법과 노드의 OS에 따라 달라집니다.</p><ul><li>명령줄에서 실행할 경우, 로그는 stdout과 stderr로 전송됩니다.</li><li>openrc에서 실행하면 <code>/var/log/k3s.log</code>에 로그가 생성됩니다.</li><li>Systemd에서 실행하는 경우, 로그는 저널널로 전송되며 <code>journalctl -u k3s</code>를 사용하여 볼 수 있습니다.</li><li>파드 로그는 <code>/var/log/pods</code>에서 확인할 수 있습니다.</li><li>컨테이너 로그는 <code>/var/lib/rancher/k3s/agent/containerd/containerd.log</code>에서 확인할 수 있습니다.</li></ul><p>K3s를 시작할 때 <code>--debug</code> 플래그(또는 환경설정 파일에서 <code>debug: true</code>)를 사용하면 더 자세한 로그를 생성할 수 있습니다.</p><p>쿠버네티스는 프로세스 내의 모든 컴포넌트에 대해 단일 로깅 구성을 사용하는 <code>klog</code>라는 로깅 프레임워크를 사용합니다.
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/faq" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">자주 묻는 질문</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>자주 묻는 질문</h1></header><p>자주 묻는 질문은 주기적으로 업데이트되며, 사용자가 K3s에 대해 가장 자주 묻는 질문에 대한 답변으로 구성되어 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s가-kubernetes를-대체하기에-적합한가요">K3s가 Kubernetes를 대체하기에 적합한가요?<a href="#k3s가-kubernetes를-대체하기에-적합한가요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s는 CNCF 인증을 받은 Kubernetes 배포판으로, 표준 Kubernetes 클러스터에 필요한 모든 작업을 수행할 수 있습니다. 단지 더 가벼운 버전일 뿐입니다. 자세한 내용은 <a href="/kr/">main</a> 문서 페이지를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요">Traefik 대신 자체 Ingress를 사용하려면 어떻게 해야 하나요?<a href="#traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><code>--disable=traefik</code>으로 K3s 서버를 시작하고 인그레스를 배포하기만 하면 됩니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s는-windows를-지원하나요">K3s는 Windows를 지원하나요?<a href="#k3s는-windows를-지원하나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>현재 K3s는 기본적으로 Windows를 지원하지 않지만, 추후에 지원할 수 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="소스로부터-빌드하려면-어떻게-해야-하나요">소스로부터 빌드하려면 어떻게 해야 하나요?<a href="#소스로부터-빌드하려면-어떻게-해야-하나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s <a href="https://github.com/k3s-io/k3s/blob/master/BUILDING.md" target="_blank" rel="noopener noreferrer">BUILDING.md</a>에서 지침을 참조하시기 바랍니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-로그는-어디에-있나요">K3s 로그는 어디에 있나요?<a href="#k3s-로그는-어디에-있나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s 로그의 위치는 K3s를 실행하는 방법과 노드의 OS에 따라 달라집니다.</p><ul><li>명령줄에서 실행할 경우, 로그는 stdout과 stderr로 전송됩니다.</li><li>openrc에서 실행하면 <code>/var/log/k3s.log</code>에 로그가 생성됩니다.</li><li>Systemd에서 실행하는 경우, 로그는 저널널로 전송되며 <code>journalctl -u k3s</code>를 사용하여 볼 수 있습니다.</li><li>파드 로그는 <code>/var/log/pods</code>에서 확인할 수 있습니다.</li><li>컨테이너 로그는 <code>/var/lib/rancher/k3s/agent/containerd/containerd.log</code>에서 확인할 수 있습니다.</li></ul><p>K3s를 시작할 때 <code>--debug</code> 플래그(또는 환경설정 파일에서 <code>debug: true</code>)를 사용하면 더 자세한 로그를 생성할 수 있습니다.</p><p>쿠버네티스는 프로세스 내의 모든 컴포넌트에 대해 단일 로깅 구성을 사용하는 <code>klog</code>라는 로깅 프레임워크를 사용합니다.
 K3s는 단일 프로세스 내에서 모든 쿠버네티스 컴포넌트를 실행하기 때문에, 개별 쿠버네티스 컴포넌트에 대해 다른 로그 레벨이나 대상을 구성할 수 없습니다.
-<code>-v=&lt;level&gt;</code>또는<code>--vmodule=&lt;module&gt;=&lt;level&gt;</code> 컴포넌트 인수를 사용하면 원하는 효과를 얻지 못할 수 있습니다.</p><p>더 많은 로그 옵션은 <a href="/kr/advanced#additional-logging-sources">추가 로깅 소스</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="docker에서-k3s를-실행할-수-있나요">Docker에서 K3s를 실행할 수 있나요?<a href="#docker에서-k3s를-실행할-수-있나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>예, Docker에서 K3s를 실행하는 방법은 여러 가지가 있습니다. 자세한 내용은 <a href="/kr/advanced#running-k3s-in-docker">고급 옵션</a>을 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-서버와-에이전트-토큰의-차이점은-무엇인가요">K3s 서버와 에이전트 토큰의 차이점은 무엇인가요?<a href="#k3s-서버와-에이전트-토큰의-차이점은-무엇인가요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s 조인 토큰 관리에 대한 자세한 내용은 <a href="/kr/cli/token"><code>k3s token</code> 명령어 설명서</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s의-다른-버전들은-얼마나-호환되나요">K3s의 다른 버전들은 얼마나 호환되나요?<a href="#k3s의-다른-버전들은-얼마나-호환되나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>일반적으로 <a href="https://kubernetes.io/ko/releases/version-skew-policy/" target="_blank" rel="noopener noreferrer">쿠버네티스 버전 skew 정책</a>이 적용됩니다.</p><p>즉, 서버가 에이전트보다 최신 버전일 수는 있지만 에이전트가 서버보다 최신 버전일 수는 없습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="문제가-발생했는데-어디서-도움을-받을-수-있나요">문제가 발생했는데 어디서 도움을 받을 수 있나요?<a href="#문제가-발생했는데-어디서-도움을-받을-수-있나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s를 배포하는 데 문제가 있는 경우 다음과 같이 하세요:</p><ol><li><p><a href="/kr/known-issues">알려진 문제</a> 페이지를 확인하세요.</p></li><li><p><a href="/kr/advanced#additional-os-preparations">추가 OS 준비사항</a>을 모두 해결했는지 확인합니다. <code>k3s check-config</code>를 실행하고 통과했는지 확인합니다.</p></li><li><p>K3s <a href="https://github.com/k3s-io/k3s/issues" target="_blank" rel="noopener noreferrer">이슈</a> 및 <a href="https://github.com/k3s-io/k3s/discussions" target="_blank" rel="noopener noreferrer">토론</a>에서 문제와 일치하는 항목을 검색합니다.</p></li><li><p><a href="https://slack.rancher.io/" target="_blank" rel="noopener noreferrer">Rancher 슬랙</a> K3s 채널에 가입하여 도움을 받습니다.</p></li><li><p>K3s 깃허브에 설정과 발생한 문제를 설명하는 <a href="https://github.com/k3s-io/k3s/issues/new/choose" target="_blank" rel="noopener noreferrer">새 이슈</a>를 제출합니다.</p></li></ol></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/advanced"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">고급 옵션 / 설정</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">명령줄 도구</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s가-kubernetes를-대체하기에-적합한가요" class="table-of-contents__link toc-highlight">K3s가 Kubernetes를 대체하기에 적합한가요?</a></li><li><a href="#traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요" class="table-of-contents__link toc-highlight">Traefik 대신 자체 Ingress를 사용하려면 어떻게 해야 하나요?</a></li><li><a href="#k3s는-windows를-지원하나요" class="table-of-contents__link toc-highlight">K3s는 Windows를 지원하나요?</a></li><li><a href="#소스로부터-빌드하려면-어떻게-해야-하나요" class="table-of-contents__link toc-highlight">소스로부터 빌드하려면 어떻게 해야 하나요?</a></li><li><a href="#k3s-로그는-어디에-있나요" class="table-of-contents__link toc-highlight">K3s 로그는 어디에 있나요?</a></li><li><a href="#docker에서-k3s를-실행할-수-있나요" class="table-of-contents__link toc-highlight">Docker에서 K3s를 실행할 수 있나요?</a></li><li><a href="#k3s-서버와-에이전트-토큰의-차이점은-무엇인가요" class="table-of-contents__link toc-highlight">K3s 서버와 에이전트 토큰의 차이점은 무엇인가요?</a></li><li><a href="#k3s의-다른-버전들은-얼마나-호환되나요" class="table-of-contents__link toc-highlight">K3s의 다른 버전들은 얼마나 호환되나요?</a></li><li><a href="#문제가-발생했는데-어디서-도움을-받을-수-있나요" class="table-of-contents__link toc-highlight">문제가 발생했는데 어디서 도움을 받을 수 있나요?</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<code>-v=&lt;level&gt;</code>또는<code>--vmodule=&lt;module&gt;=&lt;level&gt;</code> 컴포넌트 인수를 사용하면 원하는 효과를 얻지 못할 수 있습니다.</p><p>더 많은 로그 옵션은 <a href="/kr/advanced#additional-logging-sources">추가 로깅 소스</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="docker에서-k3s를-실행할-수-있나요">Docker에서 K3s를 실행할 수 있나요?<a href="#docker에서-k3s를-실행할-수-있나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>예, Docker에서 K3s를 실행하는 방법은 여러 가지가 있습니다. 자세한 내용은 <a href="/kr/advanced#running-k3s-in-docker">고급 옵션</a>을 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-서버와-에이전트-토큰의-차이점은-무엇인가요">K3s 서버와 에이전트 토큰의 차이점은 무엇인가요?<a href="#k3s-서버와-에이전트-토큰의-차이점은-무엇인가요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s 조인 토큰 관리에 대한 자세한 내용은 <a href="/kr/cli/token"><code>k3s token</code> 명령어 설명서</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s의-다른-버전들은-얼마나-호환되나요">K3s의 다른 버전들은 얼마나 호환되나요?<a href="#k3s의-다른-버전들은-얼마나-호환되나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>일반적으로 <a href="https://kubernetes.io/ko/releases/version-skew-policy/" target="_blank" rel="noopener noreferrer">쿠버네티스 버전 skew 정책</a>이 적용됩니다.</p><p>즉, 서버가 에이전트보다 최신 버전일 수는 있지만 에이전트가 서버보다 최신 버전일 수는 없습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="문제가-발생했는데-어디서-도움을-받을-수-있나요">문제가 발생했는데 어디서 도움을 받을 수 있나요?<a href="#문제가-발생했는데-어디서-도움을-받을-수-있나요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s를 배포하는 데 문제가 있는 경우 다음과 같이 하세요:</p><ol><li><p><a href="/kr/known-issues">알려진 문제</a> 페이지를 확인하세요.</p></li><li><p><a href="/kr/advanced#additional-os-preparations">추가 OS 준비사항</a>을 모두 해결했는지 확인합니다. <code>k3s check-config</code>를 실행하고 통과했는지 확인합니다.</p></li><li><p>K3s <a href="https://github.com/k3s-io/k3s/issues" target="_blank" rel="noopener noreferrer">이슈</a> 및 <a href="https://github.com/k3s-io/k3s/discussions" target="_blank" rel="noopener noreferrer">토론</a>에서 문제와 일치하는 항목을 검색합니다.</p></li><li><p><a href="https://slack.rancher.io/" target="_blank" rel="noopener noreferrer">Rancher 슬랙</a> K3s 채널에 가입하여 도움을 받습니다.</p></li><li><p>K3s 깃허브에 설정과 발생한 문제를 설명하는 <a href="https://github.com/k3s-io/k3s/issues/new/choose" target="_blank" rel="noopener noreferrer">새 이슈</a>를 제출합니다.</p></li></ol></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/advanced"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">고급 옵션 / 설정</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/cli"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">명령줄 도구</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s가-kubernetes를-대체하기에-적합한가요" class="table-of-contents__link toc-highlight">K3s가 Kubernetes를 대체하기에 적합한가요?</a></li><li><a href="#traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요" class="table-of-contents__link toc-highlight">Traefik 대신 자체 Ingress를 사용하려면 어떻게 해야 하나요?</a></li><li><a href="#k3s는-windows를-지원하나요" class="table-of-contents__link toc-highlight">K3s는 Windows를 지원하나요?</a></li><li><a href="#소스로부터-빌드하려면-어떻게-해야-하나요" class="table-of-contents__link toc-highlight">소스로부터 빌드하려면 어떻게 해야 하나요?</a></li><li><a href="#k3s-로그는-어디에-있나요" class="table-of-contents__link toc-highlight">K3s 로그는 어디에 있나요?</a></li><li><a href="#docker에서-k3s를-실행할-수-있나요" class="table-of-contents__link toc-highlight">Docker에서 K3s를 실행할 수 있나요?</a></li><li><a href="#k3s-서버와-에이전트-토큰의-차이점은-무엇인가요" class="table-of-contents__link toc-highlight">K3s 서버와 에이전트 토큰의 차이점은 무엇인가요?</a></li><li><a href="#k3s의-다른-버전들은-얼마나-호환되나요" class="table-of-contents__link toc-highlight">K3s의 다른 버전들은 얼마나 호환되나요?</a></li><li><a href="#문제가-발생했는데-어디서-도움을-받을-수-있나요" class="table-of-contents__link toc-highlight">문제가 발생했는데 어디서 도움을 받을 수 있나요?</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/helm.html b/kr/helm.html
index c91b3ad19..2ea4b5040 100644
--- a/kr/helm.html
+++ b/kr/helm.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">헬름(Helm) | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/helm"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="헬름(Helm) | K3s"><meta data-rh="true" name="description" content="헬름(Helm)은 쿠버네티스를 위한 패키지 관리 도구입니다. 헬름 차트는 쿠버네티스 YAML 매니페스트 문서를 위한 템플릿 구문을 제공합니다. 개발자 또는 클러스터 관리자는 헬름을 사용하여 정적 매니페스트만 사용하는 대신 차트라는 구성 가능한 템플릿을 만들 수 있다. 자신만의 차트 카탈로그 생성에 대한 자세한 내용은 https://helm.sh/docs/intro/quickstart/에서 문서를 확인하세요."><meta data-rh="true" property="og:description" content="헬름(Helm)은 쿠버네티스를 위한 패키지 관리 도구입니다. 헬름 차트는 쿠버네티스 YAML 매니페스트 문서를 위한 템플릿 구문을 제공합니다. 개발자 또는 클러스터 관리자는 헬름을 사용하여 정적 매니페스트만 사용하는 대신 차트라는 구성 가능한 템플릿을 만들 수 있다. 자신만의 차트 카탈로그 생성에 대한 자세한 내용은 https://helm.sh/docs/intro/quickstart/에서 문서를 확인하세요."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/helm"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/helm" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/helm" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">헬름(Helm) | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/helm"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="헬름(Helm) | K3s"><meta data-rh="true" name="description" content="헬름(Helm)은 쿠버네티스를 위한 패키지 관리 도구입니다. 헬름 차트는 쿠버네티스 YAML 매니페스트 문서를 위한 템플릿 구문을 제공합니다. 개발자 또는 클러스터 관리자는 헬름을 사용하여 정적 매니페스트만 사용하는 대신 차트라는 구성 가능한 템플릿을 만들 수 있다. 자신만의 차트 카탈로그 생성에 대한 자세한 내용은 https://helm.sh/docs/intro/quickstart/에서 문서를 확인하세요."><meta data-rh="true" property="og:description" content="헬름(Helm)은 쿠버네티스를 위한 패키지 관리 도구입니다. 헬름 차트는 쿠버네티스 YAML 매니페스트 문서를 위한 템플릿 구문을 제공합니다. 개발자 또는 클러스터 관리자는 헬름을 사용하여 정적 매니페스트만 사용하는 대신 차트라는 구성 가능한 템플릿을 만들 수 있다. 자신만의 차트 카탈로그 생성에 대한 자세한 내용은 https://helm.sh/docs/intro/quickstart/에서 문서를 확인하세요."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/helm"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/helm" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/helm" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/helm" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">헬름(Helm)</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>헬름(Helm)</h1></header><p>헬름(Helm)은 쿠버네티스를 위한 패키지 관리 도구입니다. 헬름 차트는 쿠버네티스 YAML 매니페스트 문서를 위한 템플릿 구문을 제공합니다. 개발자 또는 클러스터 관리자는 헬름을 사용하여 정적 매니페스트만 사용하는 대신 차트라는 구성 가능한 템플릿을 만들 수 있다. 자신만의 차트 카탈로그 생성에 대한 자세한 내용은 <a href="https://helm.sh/docs/intro/quickstart/" target="_blank" rel="noopener noreferrer">https://helm.sh/docs/intro/quickstart/</a>에서 문서를 확인하세요.</p><p>K3s는 헬름을 지원하기 위한 별도의 구성이 필요하지 않습니다. 다만, <a href="/kr/cluster-access">클러스터 액세스</a> 문서에 따라 kubeconfig 경로를 올바르게 설정했는지 확인하면 됩니다.</p><p>K3s에는 헬름 차트의 설치, 업그레이드/재구성 및 제거를 관리하는 <a href="https://github.com/k3s-io/helm-controller/" target="_blank" rel="noopener noreferrer">Helm Controller</a>가 포함되어 있으며, 헬름 차트 커스텀 리소스 정의(CRD)를 사용하여 헬름 차트를 설치, 업그레이드/재구성 및 제거할 수 있습니다. 애드온 매니페스트 자동 배포](/kr/installation/packaged-components)와 함께 사용하면 디스크에 단일 파일을 생성하여 클러스터에 헬름 차트를 설치하는 것을 자동화할 수 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="헬름-컨트롤러-사용하기">헬름 컨트롤러 사용하기<a href="#헬름-컨트롤러-사용하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><a href="https://github.com/k3s-io/helm-controller#helm-controller" target="_blank" rel="noopener noreferrer">헬름 차트 커스텀 리소스</a>는 일반적으로 <code>helm</code> 명령줄 도구에 전달할 대부분의 옵션을 담고 있습니다. 다음은 Bitnami 차트 저장소에서 아파치를 배포하여 기본 차트 값 중 일부를 재정의하는 방법에 대한 예제입니다. HelmChart 리소스 자체는 <code>kube-system</code> 네임스페이스에 있지만, 차트의 리소스는 동일한 매니페스트에 생성되는 <code>web</code> 네임스페이스에 배포된다는 점에 유의하세요. 이는 HelmChart 리소스를 배포하는 리소스와 분리하여 유지하려는 경우에 유용할 수 있습니다.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChart</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">repo</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//charts.bitnami.com/bitnami</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">chart</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">targetNamespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">service</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">type</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterIP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">hostname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> www.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="helmchart-필드-정의">HelmChart 필드 정의<a href="#helmchart-필드-정의" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><table><thead><tr><th>필드</th><th>기본값</th><th>설명</th><th>헬름 인수 / 플래그 상응값</th></tr></thead><tbody><tr><td>metadata.name</td><td></td><td>헬름 차트 이름</td><td>NAME</td></tr><tr><td>spec.chart</td><td></td><td>리포지토리에 있는 헬름 차트 이름 또는 차트 아카이브(.tgz)에 대한 전체 HTTPS URL</td><td>CHART</td></tr><tr><td>spec.targetNamespace</td><td>default</td><td>헬름 차트 대상 네임스페이스</td><td><code>--namespace</code></td></tr><tr><td>spec.version</td><td></td><td>헬름 차트 버전(리포지토리에서 설치하는 경우)</td><td><code>--version</code></td></tr><tr><td>spec.repo</td><td></td><td>헬름 차트 리포지토리 URL</td><td><code>--repo</code></td></tr><tr><td>spec.repoCA</td><td></td><td>HTTPS 사용 서버의 인증서를 지정</td><td><code>--ca-file</code></td></tr><tr><td>spec.helmVersion</td><td>v3</td><td>사용할 헬름 버전 (<code>v2</code> 혹은 <code>v3</code>)</td><td></td></tr><tr><td>spec.bootstrap</td><td>False</td><td>클러스터(클라우드 컨트롤러 관리자 등)를 부트스트랩하는 데 이 차트가 필요한 경우 True로 설정합니다.</td><td></td></tr><tr><td>spec.set</td><td></td><td>간단한 기본 차트 값을 재정의합니다. 값을 통해 설정된 옵션보다 우선합니다.</td><td><code>--set</code> / <code>--set-string</code></td></tr><tr><td>spec.jobImage</td><td></td><td>헬름 차트를 설치할 때 사용할 이미지를 지정합니다. 예시. rancher/klipper-helm:v0.3.0 .</td><td></td></tr><tr><td>spec.timeout</td><td>300</td><td>헬름 작업 시간 초과(초)</td><td><code>--timeout</code></td></tr><tr><td>spec.failurePolicy</td><td>reinstall</td><td><code>abort</code>로 설정하면 헬름 작업이 중단되고 운영자의 수동 개입이 있을 때까지 중단된다.</td><td></td></tr><tr><td>spec.valuesContent</td><td></td><td>YAML 파일 콘텐츠를 통해 복잡한 기본 차트 값 재정의</td><td><code>--values</code></td></tr><tr><td>spec.chartContent</td><td></td><td>Base64로 인코딩된 차트 아카이브 .tgz - spec.chart를 재정의합니다.</td><td>CHART</td></tr></tbody></table><p><code>/var/lib/rancher/k3s/server/static/</code>에 위치한 콘텐츠는 클러스터 내에서 쿠버네티스 APIServer를 통해 익명으로 액세스할 수 있습니다. 이 URL은 <code>spec.chart</code> 필드에 있는 특수 변수 <code>%{KUBERNETES_API}%</code>를 사용하여 템플릿화할 수 있습니다. 예를 들어, 패키지화된 Traefik 컴포넌트는 <code>https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz</code>에서 해당 차트를 로드합니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p><code>name</code> 필드는 헬름 차트 명명 규칙을 따라야 합니다. 자세한 내용은 <a href="https://helm.sh/docs/chart_best_practices/conventions/#chart-names" target="_blank" rel="noopener noreferrer">헬름 베스트 프랙티스 문서</a>를 참고하세요.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="helmchartconfig로-패키지-컴포넌트-커스터마이징하기">HelmChartConfig로 패키지 컴포넌트 커스터마이징하기<a href="#helmchartconfig로-패키지-컴포넌트-커스터마이징하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p><a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 부터 사용 가능</p></div></div><p>HelmChart로 배포되는 패키지 컴포넌트(예로 Traefik)의 값을 재정의할 수 있도록, K3s는 HelmChartConfig 리소스를 통해 배포를 사용자 정의할 수 있도록 지원합니다. HelmChartConfig 리소스는 해당 HelmChart의 이름과 네임스페이스와 일치해야 하며, 추가 값 파일로 <code>helm</code> 명령에 전달되는 <code>valuesContent</code>를 추가로 제공할 수 있도록 지원합니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>HelmChart <code>spec.set</code> 값은 HelmChart 및 HelmChartConfig <code>spec.valuesContent</code> 설정을 재정의합니다.</p></div></div><p>예를 들어, 패키징된 트래픽 인그레스 구성을 사용자 정의하려면 <code>/var/lib/rancher/k3s/server/manifests/traefik-config.yaml</code>이라는 파일을 생성하고 다음 내용으로 채우면 됩니다:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChartConfig</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">tag</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v2.8.5</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">forwardedHeaders</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">trustedIPs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> 10.0.0.0/8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ssl</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">permanentRedirect</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="헬름-버전-2에서-마이그레이션하기">헬름 버전 2에서 마이그레이션하기<a href="#헬름-버전-2에서-마이그레이션하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>v1.17.<a href="https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1" target="_blank" rel="noopener noreferrer">v1.17.0+k3s.1</a>부터 헬름 v3가 기본적으로 지원 및 사용됩니다.</p></div></div><p>K3s는 헬름 v2 또는 헬름 v3를 처리할 수 있습니다. 헬름 v3로 마이그레이션하려는 경우, <a href="https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/" target="_blank" rel="noopener noreferrer">이</a> 헬름 블로그 게시물에서 플러그인을 사용하여 성공적으로 마이그레이션하는 방법을 설명합니다. 자세한 내용은 헬름 3 공식 문서 <a href="https://helm.sh/docs/" target="_blank" rel="noopener noreferrer">여기</a>를 참고하세요. <a href="/kr/cluster-access">클러스터 접근</a>에 대한 섹션에 따라 kubeconfig를 올바르게 설정했는지 확인하세요.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>헬름 3에서는 더 이상 Tiller와 <code>helm init</code> 명령이 필요하지 않습니다. 자세한 내용은 공식 문서를 참고하세요.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/networking"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">네트워킹</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/advanced"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">고급 옵션 / 설정</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#헬름-컨트롤러-사용하기" class="table-of-contents__link toc-highlight">헬름 컨트롤러 사용하기</a></li><li><a href="#helmchartconfig로-패키지-컴포넌트-커스터마이징하기" class="table-of-contents__link toc-highlight">HelmChartConfig로 패키지 컴포넌트 커스터마이징하기</a></li><li><a href="#헬름-버전-2에서-마이그레이션하기" class="table-of-contents__link toc-highlight">헬름 버전 2에서 마이그레이션하기</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/helm" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">헬름(Helm)</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>헬름(Helm)</h1></header><p>헬름(Helm)은 쿠버네티스를 위한 패키지 관리 도구입니다. 헬름 차트는 쿠버네티스 YAML 매니페스트 문서를 위한 템플릿 구문을 제공합니다. 개발자 또는 클러스터 관리자는 헬름을 사용하여 정적 매니페스트만 사용하는 대신 차트라는 구성 가능한 템플릿을 만들 수 있다. 자신만의 차트 카탈로그 생성에 대한 자세한 내용은 <a href="https://helm.sh/docs/intro/quickstart/" target="_blank" rel="noopener noreferrer">https://helm.sh/docs/intro/quickstart/</a>에서 문서를 확인하세요.</p><p>K3s는 헬름을 지원하기 위한 별도의 구성이 필요하지 않습니다. 다만, <a href="/kr/cluster-access">클러스터 액세스</a> 문서에 따라 kubeconfig 경로를 올바르게 설정했는지 확인하면 됩니다.</p><p>K3s에는 헬름 차트의 설치, 업그레이드/재구성 및 제거를 관리하는 <a href="https://github.com/k3s-io/helm-controller/" target="_blank" rel="noopener noreferrer">Helm Controller</a>가 포함되어 있으며, 헬름 차트 커스텀 리소스 정의(CRD)를 사용하여 헬름 차트를 설치, 업그레이드/재구성 및 제거할 수 있습니다. 애드온 매니페스트 자동 배포](/kr/installation/packaged-components)와 함께 사용하면 디스크에 단일 파일을 생성하여 클러스터에 헬름 차트를 설치하는 것을 자동화할 수 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="헬름-컨트롤러-사용하기">헬름 컨트롤러 사용하기<a href="#헬름-컨트롤러-사용하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><a href="https://github.com/k3s-io/helm-controller#helm-controller" target="_blank" rel="noopener noreferrer">헬름 차트 커스텀 리소스</a>는 일반적으로 <code>helm</code> 명령줄 도구에 전달할 대부분의 옵션을 담고 있습니다. 다음은 Bitnami 차트 저장소에서 아파치를 배포하여 기본 차트 값 중 일부를 재정의하는 방법에 대한 예제입니다. HelmChart 리소스 자체는 <code>kube-system</code> 네임스페이스에 있지만, 차트의 리소스는 동일한 매니페스트에 생성되는 <code>web</code> 네임스페이스에 배포된다는 점에 유의하세요. 이는 HelmChart 리소스를 배포하는 리소스와 분리하여 유지하려는 경우에 유용할 수 있습니다.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChart</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">repo</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//charts.bitnami.com/bitnami</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">chart</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">targetNamespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">service</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">type</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterIP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">hostname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> www.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="helmchart-필드-정의">HelmChart 필드 정의<a href="#helmchart-필드-정의" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><table><thead><tr><th>필드</th><th>기본값</th><th>설명</th><th>헬름 인수 / 플래그 상응값</th></tr></thead><tbody><tr><td>metadata.name</td><td></td><td>헬름 차트 이름</td><td>NAME</td></tr><tr><td>spec.chart</td><td></td><td>리포지토리에 있는 헬름 차트 이름 또는 차트 아카이브(.tgz)에 대한 전체 HTTPS URL</td><td>CHART</td></tr><tr><td>spec.targetNamespace</td><td>default</td><td>헬름 차트 대상 네임스페이스</td><td><code>--namespace</code></td></tr><tr><td>spec.version</td><td></td><td>헬름 차트 버전(리포지토리에서 설치하는 경우)</td><td><code>--version</code></td></tr><tr><td>spec.repo</td><td></td><td>헬름 차트 리포지토리 URL</td><td><code>--repo</code></td></tr><tr><td>spec.repoCA</td><td></td><td>HTTPS 사용 서버의 인증서를 지정</td><td><code>--ca-file</code></td></tr><tr><td>spec.helmVersion</td><td>v3</td><td>사용할 헬름 버전 (<code>v2</code> 혹은 <code>v3</code>)</td><td></td></tr><tr><td>spec.bootstrap</td><td>False</td><td>클러스터(클라우드 컨트롤러 관리자 등)를 부트스트랩하는 데 이 차트가 필요한 경우 True로 설정합니다.</td><td></td></tr><tr><td>spec.set</td><td></td><td>간단한 기본 차트 값을 재정의합니다. 값을 통해 설정된 옵션보다 우선합니다.</td><td><code>--set</code> / <code>--set-string</code></td></tr><tr><td>spec.jobImage</td><td></td><td>헬름 차트를 설치할 때 사용할 이미지를 지정합니다. 예시. rancher/klipper-helm:v0.3.0 .</td><td></td></tr><tr><td>spec.timeout</td><td>300</td><td>헬름 작업 시간 초과(초)</td><td><code>--timeout</code></td></tr><tr><td>spec.failurePolicy</td><td>reinstall</td><td><code>abort</code>로 설정하면 헬름 작업이 중단되고 운영자의 수동 개입이 있을 때까지 중단된다.</td><td></td></tr><tr><td>spec.valuesContent</td><td></td><td>YAML 파일 콘텐츠를 통해 복잡한 기본 차트 값 재정의</td><td><code>--values</code></td></tr><tr><td>spec.chartContent</td><td></td><td>Base64로 인코딩된 차트 아카이브 .tgz - spec.chart를 재정의합니다.</td><td>CHART</td></tr></tbody></table><p><code>/var/lib/rancher/k3s/server/static/</code>에 위치한 콘텐츠는 클러스터 내에서 쿠버네티스 APIServer를 통해 익명으로 액세스할 수 있습니다. 이 URL은 <code>spec.chart</code> 필드에 있는 특수 변수 <code>%{KUBERNETES_API}%</code>를 사용하여 템플릿화할 수 있습니다. 예를 들어, 패키지화된 Traefik 컴포넌트는 <code>https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz</code>에서 해당 차트를 로드합니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p><code>name</code> 필드는 헬름 차트 명명 규칙을 따라야 합니다. 자세한 내용은 <a href="https://helm.sh/docs/chart_best_practices/conventions/#chart-names" target="_blank" rel="noopener noreferrer">헬름 베스트 프랙티스 문서</a>를 참고하세요.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="helmchartconfig로-패키지-컴포넌트-커스터마이징하기">HelmChartConfig로 패키지 컴포넌트 커스터마이징하기<a href="#helmchartconfig로-패키지-컴포넌트-커스터마이징하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p><a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 부터 사용 가능</p></div></div><p>HelmChart로 배포되는 패키지 컴포넌트(예로 Traefik)의 값을 재정의할 수 있도록, K3s는 HelmChartConfig 리소스를 통해 배포를 사용자 정의할 수 있도록 지원합니다. HelmChartConfig 리소스는 해당 HelmChart의 이름과 네임스페이스와 일치해야 하며, 추가 값 파일로 <code>helm</code> 명령에 전달되는 <code>valuesContent</code>를 추가로 제공할 수 있도록 지원합니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>HelmChart <code>spec.set</code> 값은 HelmChart 및 HelmChartConfig <code>spec.valuesContent</code> 설정을 재정의합니다.</p></div></div><p>예를 들어, 패키징된 트래픽 인그레스 구성을 사용자 정의하려면 <code>/var/lib/rancher/k3s/server/manifests/traefik-config.yaml</code>이라는 파일을 생성하고 다음 내용으로 채우면 됩니다:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChartConfig</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">tag</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v2.8.5</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">forwardedHeaders</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">trustedIPs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> 10.0.0.0/8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ssl</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">permanentRedirect</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="헬름-버전-2에서-마이그레이션하기">헬름 버전 2에서 마이그레이션하기<a href="#헬름-버전-2에서-마이그레이션하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>v1.17.<a href="https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1" target="_blank" rel="noopener noreferrer">v1.17.0+k3s.1</a>부터 헬름 v3가 기본적으로 지원 및 사용됩니다.</p></div></div><p>K3s는 헬름 v2 또는 헬름 v3를 처리할 수 있습니다. 헬름 v3로 마이그레이션하려는 경우, <a href="https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/" target="_blank" rel="noopener noreferrer">이</a> 헬름 블로그 게시물에서 플러그인을 사용하여 성공적으로 마이그레이션하는 방법을 설명합니다. 자세한 내용은 헬름 3 공식 문서 <a href="https://helm.sh/docs/" target="_blank" rel="noopener noreferrer">여기</a>를 참고하세요. <a href="/kr/cluster-access">클러스터 접근</a>에 대한 섹션에 따라 kubeconfig를 올바르게 설정했는지 확인하세요.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>헬름 3에서는 더 이상 Tiller와 <code>helm init</code> 명령이 필요하지 않습니다. 자세한 내용은 공식 문서를 참고하세요.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/networking"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">네트워킹</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/advanced"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">고급 옵션 / 설정</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#헬름-컨트롤러-사용하기" class="table-of-contents__link toc-highlight">헬름 컨트롤러 사용하기</a></li><li><a href="#helmchartconfig로-패키지-컴포넌트-커스터마이징하기" class="table-of-contents__link toc-highlight">HelmChartConfig로 패키지 컴포넌트 커스터마이징하기</a></li><li><a href="#헬름-버전-2에서-마이그레이션하기" class="table-of-contents__link toc-highlight">헬름 버전 2에서 마이그레이션하기</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/index.html b/kr/index.html
index ce06aad22..fd5a234e0 100644
--- a/kr/index.html
+++ b/kr/index.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">K3s - Lightweight Kubernetes | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="K3s - Lightweight Kubernetes | K3s"><meta data-rh="true" name="description" content="경량의 쿠버네티스. 간편한 설치와 절반의 메모리, 모든걸 100MB 미만의 바이너리로 제공합니다."><meta data-rh="true" property="og:description" content="경량의 쿠버네티스. 간편한 설치와 절반의 메모리, 모든걸 100MB 미만의 바이너리로 제공합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><script data-rh="true">function maybeInsertBanner(){window.__DOCUSAURUS_INSERT_BASEURL_BANNER&&insertBanner()}function insertBanner(){var n=document.getElementById("__docusaurus-base-url-issue-banner-container");if(n){n.innerHTML='\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">/kr/</span> </p>\n   <p>We suggest trying baseUrl = <span id="__docusaurus-base-url-issue-banner-suggestion-container" style="font-weight: bold; color: green;"></span></p>\n</div>\n';var e=document.getElementById("__docusaurus-base-url-issue-banner-suggestion-container"),s=window.location.pathname,r="/"===s.substr(-1)?s:s+"/";e.innerHTML=r}}window.__DOCUSAURUS_INSERT_BASEURL_BANNER=!0,document.addEventListener("DOMContentLoaded",maybeInsertBanner)</script><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">K3s - Lightweight Kubernetes | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="K3s - Lightweight Kubernetes | K3s"><meta data-rh="true" name="description" content="경량의 쿠버네티스. 간편한 설치와 절반의 메모리, 모든걸 100MB 미만의 바이너리로 제공합니다."><meta data-rh="true" property="og:description" content="경량의 쿠버네티스. 간편한 설치와 절반의 메모리, 모든걸 100MB 미만의 바이너리로 제공합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="x-default"><script data-rh="true">function maybeInsertBanner(){window.__DOCUSAURUS_INSERT_BASEURL_BANNER&&insertBanner()}function insertBanner(){var n=document.getElementById("__docusaurus-base-url-issue-banner-container");if(n){n.innerHTML='\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">/kr/</span> </p>\n   <p>We suggest trying baseUrl = <span id="__docusaurus-base-url-issue-banner-suggestion-container" style="font-weight: bold; color: green;"></span></p>\n</div>\n';var e=document.getElementById("__docusaurus-base-url-issue-banner-suggestion-container"),s=window.location.pathname,r="/"===s.substr(-1)?s:s+"/";e.innerHTML=r}}window.__DOCUSAURUS_INSERT_BASEURL_BANNER=!0,document.addEventListener("DOMContentLoaded",maybeInsertBanner)</script><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div id="__docusaurus-base-url-issue-banner-container"></div><div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">K3s - Lightweight Kubernetes</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>K3s - Lightweight Kubernetes</h1></header><p>경량의 쿠버네티스. 간편한 설치와 절반의 메모리, 모든걸 100MB 미만의 바이너리로 제공합니다.</p><p>적합한 환경:</p><ul><li>엣지(Edge)</li><li>사물인터넷(IoT)</li><li>지속적인 통합(CI)</li><li>개발</li><li>ARM</li><li>임베딩 K8s</li><li>k8s 클러스터 분야의 박사 학위를 취득하기 어려운 상황</li></ul><h1>k3s란 무엇입니까?</h1><p>K3s는 쿠버네티스와 완전히 호환되며 다음과 같은 향상된 기능을 갖춘 배포판입니다:</p><ul><li>단일 바이너리로 패키지화.</li><li>기본 스토리지 메커니즘으로 sqlite3를 기반으로 하는 경량 스토리지 백엔드. etcd3, MySQL, Postgres도 사용 가능.</li><li>복잡한 TLS 및 옵션을 처리하는 간단한 런처에 포함.</li><li>경량 환경을 위한 합리적인 기본값으로 기본적으로 보안을 유지함.</li><li>다음과 같이 간단하지만 강력한 &#x27;batteries-included&#x27; 기능 추가. 예를 들어:<ul><li>local storage provider</li><li>service load balancer</li><li>Helm controller</li><li>Traefik ingress controller</li></ul></li><li>모든 쿠버네티스 컨트롤 플레인 구성 요소의 작동은 단일 바이너리 및 프로세스로 캡슐화. 이를 통해 K3s는 인증서 배포와 같은 복잡한 클러스터 작업을 자동화하고 관리.</li><li>외부 종속성 최소화(최신 커널과 cgroup 마운트만 필요)</li></ul><p>K3s는 다음과 같은 필수 종속성을 패키지로 제공합니다:</p><ul><li>Containerd</li><li>Flannel (CNI)</li><li>CoreDNS</li><li>Traefik (인그레스)</li><li>Klipper-lb (서비스 로드밸런서)</li><li>임베디드 네트워크 정책 컨트롤러</li><li>임베디드 로컬 경로 프로비저너</li><li>호스트 유틸리티(iptables, socat 등)</li></ul><h1>이름에는 무슨 뜻이 있나요?</h1><p>우리는 메모리 풋프린트 측면에서 절반 크기의 Kubernetes를 설치하기를 원했습니다. Kubernetes는 K8로 표기되는 10글자 단어입니다. 따라서 쿠버네티스의 절반 크기라면 K3s로 표기된 5글자 단어가 될 것입니다. K3s의 긴 형태는 없으며 공식적인 발음도 없습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/introduction.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--next" href="/kr/architecture"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">아키텍처</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div id="__docusaurus-base-url-issue-banner-container"></div><div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">K3s - Lightweight Kubernetes</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>K3s - Lightweight Kubernetes</h1></header><p>경량의 쿠버네티스. 간편한 설치와 절반의 메모리, 모든걸 100MB 미만의 바이너리로 제공합니다.</p><p>적합한 환경:</p><ul><li>엣지(Edge)</li><li>사물인터넷(IoT)</li><li>지속적인 통합(CI)</li><li>개발</li><li>ARM</li><li>임베딩 K8s</li><li>k8s 클러스터 분야의 박사 학위를 취득하기 어려운 상황</li></ul><h1>k3s란 무엇입니까?</h1><p>K3s는 쿠버네티스와 완전히 호환되며 다음과 같은 향상된 기능을 갖춘 배포판입니다:</p><ul><li>단일 바이너리로 패키지화.</li><li>기본 스토리지 메커니즘으로 sqlite3를 기반으로 하는 경량 스토리지 백엔드. etcd3, MySQL, Postgres도 사용 가능.</li><li>복잡한 TLS 및 옵션을 처리하는 간단한 런처에 포함.</li><li>경량 환경을 위한 합리적인 기본값으로 기본적으로 보안을 유지함.</li><li>다음과 같이 간단하지만 강력한 &#x27;batteries-included&#x27; 기능 추가. 예를 들어:<ul><li>local storage provider</li><li>service load balancer</li><li>Helm controller</li><li>Traefik ingress controller</li></ul></li><li>모든 쿠버네티스 컨트롤 플레인 구성 요소의 작동은 단일 바이너리 및 프로세스로 캡슐화. 이를 통해 K3s는 인증서 배포와 같은 복잡한 클러스터 작업을 자동화하고 관리.</li><li>외부 종속성 최소화(최신 커널과 cgroup 마운트만 필요)</li></ul><p>K3s는 다음과 같은 필수 종속성을 패키지로 제공합니다:</p><ul><li>Containerd</li><li>Flannel (CNI)</li><li>CoreDNS</li><li>Traefik (인그레스)</li><li>Klipper-lb (서비스 로드밸런서)</li><li>임베디드 네트워크 정책 컨트롤러</li><li>임베디드 로컬 경로 프로비저너</li><li>호스트 유틸리티(iptables, socat 등)</li></ul><h1>이름에는 무슨 뜻이 있나요?</h1><p>우리는 메모리 풋프린트 측면에서 절반 크기의 Kubernetes를 설치하기를 원했습니다. Kubernetes는 K8로 표기되는 10글자 단어입니다. 따라서 쿠버네티스의 절반 크기라면 K3s로 표기된 5글자 단어가 될 것입니다. K3s의 긴 형태는 없으며 공식적인 발음도 없습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/introduction.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--next" href="/kr/architecture"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">아키텍처</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation.html b/kr/installation.html
index 13030dbb5..20e8768a3 100644
--- a/kr/installation.html
+++ b/kr/installation.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">설치 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="설치 | K3s"><meta data-rh="true" name="description" content="이 섹션에는 다양한 환경에서 K3s를 설치하기 위한 지침이 포함되어 있습니다. K3s 설치를 시작하기 전에 요구 사항을 충족했는지 확인하십시오."><meta data-rh="true" property="og:description" content="이 섹션에는 다양한 환경에서 K3s를 설치하기 위한 지침이 포함되어 있습니다. K3s 설치를 시작하기 전에 요구 사항을 충족했는지 확인하십시오."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">설치 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="설치 | K3s"><meta data-rh="true" name="description" content="이 섹션에는 다양한 환경에서 K3s를 설치하기 위한 지침이 포함되어 있습니다. K3s 설치를 시작하기 전에 요구 사항을 충족했는지 확인하십시오."><meta data-rh="true" property="og:description" content="이 섹션에는 다양한 환경에서 K3s를 설치하기 위한 지침이 포함되어 있습니다. K3s 설치를 시작하기 전에 요구 사항을 충족했는지 확인하십시오."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">설치</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>설치</h1></header><p>이 섹션에는 다양한 환경에서 K3s를 설치하기 위한 지침이 포함되어 있습니다. K3s 설치를 시작하기 전에 <a href="/kr/installation/requirements">요구 사항</a>을 충족했는지 확인하십시오.</p><p><a href="/kr/installation/configuration">구성 옵션</a>에서는 K3s를 설치할 때 사용할 수 있는 옵션에 대한 안내를 제공합니다.</p><p><a href="/kr/installation/network-options">네트워크 옵션</a>에서는 K3s에서 사용할 수 있는 네트워크 옵션에 대한 안내를 제공합니다.</p><p><a href="/kr/installation/airgap">에어갭 설치</a>에서는 인터넷에 직접 접속할 수 없는 환경에서 K3s를 설정하는 방법을 자세히 설명합니다.</p><p><a href="/kr/installation/server-roles">서버 역할</a>에서는 전용 <code>control-plane</code> 또는 <code>etcd</code> 서버로 K3s를 설정하는 방법을 자세히 설명합니다.</p><p><a href="/kr/installation/packaged-components">패키지 컴포넌트</a>에서는 패키지 컴포넌트를 비활성화하거나 자동 배포 매니페스트를 사용하여 직접 설치하는 방법을 자세히 설명합니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/quick-start"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">빠른 시작 가이드</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/requirements"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Requirements</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">설치</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>설치</h1></header><p>이 섹션에는 다양한 환경에서 K3s를 설치하기 위한 지침이 포함되어 있습니다. K3s 설치를 시작하기 전에 <a href="/kr/installation/requirements">요구 사항</a>을 충족했는지 확인하십시오.</p><p><a href="/kr/installation/configuration">구성 옵션</a>에서는 K3s를 설치할 때 사용할 수 있는 옵션에 대한 안내를 제공합니다.</p><p><a href="/kr/installation/network-options">네트워크 옵션</a>에서는 K3s에서 사용할 수 있는 네트워크 옵션에 대한 안내를 제공합니다.</p><p><a href="/kr/installation/airgap">에어갭 설치</a>에서는 인터넷에 직접 접속할 수 없는 환경에서 K3s를 설정하는 방법을 자세히 설명합니다.</p><p><a href="/kr/installation/server-roles">서버 역할</a>에서는 전용 <code>control-plane</code> 또는 <code>etcd</code> 서버로 K3s를 설정하는 방법을 자세히 설명합니다.</p><p><a href="/kr/installation/packaged-components">패키지 컴포넌트</a>에서는 패키지 컴포넌트를 비활성화하거나 자동 배포 매니페스트를 사용하여 직접 설치하는 방법을 자세히 설명합니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/quick-start"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">빠른 시작 가이드</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/requirements"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Requirements</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/airgap.html b/kr/installation/airgap.html
index e4be8fa7e..04fd5de8e 100644
--- a/kr/installation/airgap.html
+++ b/kr/installation/airgap.html
@@ -3,19 +3,19 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Air-Gap Install | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/airgap"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Air-Gap Install | K3s"><meta data-rh="true" name="description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><meta data-rh="true" property="og:description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/airgap"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/airgap" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/airgap" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Air-Gap Install | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/airgap"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Air-Gap Install | K3s"><meta data-rh="true" name="description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><meta data-rh="true" property="og:description" content="You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/airgap"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/airgap" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/airgap" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Air-Gap Install</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Air-Gap Install</h1></header><p>You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="private-registry-method">Private Registry Method<a href="#private-registry-method" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host.</p><p>If you have not yet set up a private Docker registry, refer to the official documentation <a href="https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry" target="_blank" rel="noopener noreferrer">here</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="create-the-registry-yaml">Create the Registry YAML<a href="#create-the-registry-yaml" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Follow the <a href="/kr/installation/private-registry">Private Registry Configuration</a> guide to create and configure the registry.yaml file.</p><p>Once you have completed this, you may now go to the <a href="#install-k3s">Install K3s</a> section below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="manually-deploy-images-method">Manually Deploy Images Method<a href="#manually-deploy-images-method" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>We are assuming you have created your nodes in your air-gap environment.
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Air-Gap Install</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Air-Gap Install</h1></header><p>You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="private-registry-method">Private Registry Method<a href="#private-registry-method" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host.</p><p>If you have not yet set up a private Docker registry, refer to the official documentation <a href="https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry" target="_blank" rel="noopener noreferrer">here</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="create-the-registry-yaml">Create the Registry YAML<a href="#create-the-registry-yaml" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Follow the <a href="/kr/installation/private-registry">Private Registry Configuration</a> guide to create and configure the registry.yaml file.</p><p>Once you have completed this, you may now go to the <a href="#install-k3s">Install K3s</a> section below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="manually-deploy-images-method">Manually Deploy Images Method<a href="#manually-deploy-images-method" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>We are assuming you have created your nodes in your air-gap environment.
 This method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="prepare-the-images-directory-and-k3s-binary">Prepare the Images Directory and K3s Binary<a href="#prepare-the-images-directory-and-k3s-binary" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Obtain the images tar file for your architecture from the <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> page for the version of K3s you will be running.</p><p>Place the tar file in the <code>images</code> directory, for example:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p /var/lib/rancher/k3s/agent/images/</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cp</span><span class="token plain"> ./k3s-airgap-images-</span><span class="token variable" style="color:rgb(191, 199, 213)">$ARCH</span><span class="token plain">.tar /var/lib/rancher/k3s/agent/images/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Once you have completed this, you may now go to the <a href="#install-k3s">Install K3s</a> section below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="install-k3s">Install K3s<a href="#install-k3s" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><ul><li>Before installing K3s, complete the <a href="#private-registry-method">Private Registry Method</a> or the <a href="#manually-deploy-images-method">Manually Deploy Images Method</a> above to prepopulate the images that K3s needs to install.</li><li>Download the K3s binary from the <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> page, matching the same version used to get the airgap images. Place the binary in <code>/usr/local/bin</code> on each air-gapped node and ensure it is executable.</li><li>Download the K3s install script at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">get.k3s.io</a>. Place the install script anywhere on each air-gapped node, and name it <code>install.sh</code>.</li><li>K3s requires a default route in order to auto-detect the node&#x27;s primary IP, and for kube-proxy ClusterIP routing to function properly. Therefore, a default route must be configured on each node, even if that route is a dummy route or a black hole.</li></ul><p>When running the K3s script with the <code>INSTALL_K3S_SKIP_DOWNLOAD</code> environment variable, K3s will use the local version of the script and binary.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="installing-k3s-in-an-air-gapped-environment">Installing K3s in an Air-Gapped Environment<a href="#installing-k3s-in-an-air-gapped-environment" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You can install K3s on one or more servers as described below.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Single Server Configuration</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">High Availability Configuration</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>To install K3s on a single server, simply do the following on the server node:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To add additional agents, do the following on each agent node: </p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">YOUR_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>The token from the server is typically found at <code>/var/lib/rancher/k3s/server/token</code>.</p></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>Reference the <a href="/kr/datastore/ha">High Availability with an External DB</a> or <a href="/kr/datastore/ha-embedded">High Availability with Embedded DB</a> guides. You will be tweaking install commands so you specify <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code> and run your install script locally instead of via curl. You will also utilize <code>INSTALL_K3S_EXEC=&#x27;args&#x27;</code> to supply any arguments to k3s.</p><p>For example, step two of the High Availability with an External DB guide mentions the following:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Instead, you would modify such examples like below:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;server --token=SECRET&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_DATASTORE_ENDPOINT</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;mysql://username:password@tcp(hostname:3306)/database-name&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>K3s additionally provides a <code>--resolv-conf</code> flag for kubelets, which may help with configuring DNS in air-gap networks.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading">Upgrading<a href="#upgrading" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="install-script-method">Install Script Method<a href="#install-script-method" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Upgrading an air-gap environment can be accomplished in the following manner:</p><ol><li>Download the new air-gap images (tar file) from the <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> page for the version of K3s you will be upgrading to. Place the tar in the <code>/var/lib/rancher/k3s/agent/images/</code> directory on each
 node. Delete the old tar file.</li><li>Copy and replace the old K3s binary in <code>/usr/local/bin</code> on each node. Copy over the install script at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> (as it is possible it has changed since the last release). Run the script again just as you had done in the past
-with the same environment variables.</li><li>Restart the K3s service (if not restarted automatically by installer).</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="automated-upgrades-method">Automated Upgrades Method<a href="#automated-upgrades-method" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s supports <a href="/kr/upgrades/automated">automated upgrades</a>. To enable this in air-gapped environments, you must ensure the required images are available in your private registry.</p><p>You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the <code>+</code> in the K3s release with a <code>-</code> because Docker images do not support <code>+</code>.</p><p>You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller <a href="https://github.com/rancher/system-upgrade-controller/releases/latest" target="_blank" rel="noopener noreferrer">here</a> and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/system-upgrade-controller:v0.4.0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/kubectl:v0.17.0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the <a href="/kr/upgrades/automated">automated upgrades</a> guide.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/private-registry"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Private Registry Configuration</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/server-roles"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Managing Server Roles</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#private-registry-method" class="table-of-contents__link toc-highlight">Private Registry Method</a><ul><li><a href="#create-the-registry-yaml" class="table-of-contents__link toc-highlight">Create the Registry YAML</a></li></ul></li><li><a href="#manually-deploy-images-method" class="table-of-contents__link toc-highlight">Manually Deploy Images Method</a><ul><li><a href="#prepare-the-images-directory-and-k3s-binary" class="table-of-contents__link toc-highlight">Prepare the Images Directory and K3s Binary</a></li></ul></li><li><a href="#install-k3s" class="table-of-contents__link toc-highlight">Install K3s</a><ul><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#installing-k3s-in-an-air-gapped-environment" class="table-of-contents__link toc-highlight">Installing K3s in an Air-Gapped Environment</a></li></ul></li><li><a href="#upgrading" class="table-of-contents__link toc-highlight">Upgrading</a><ul><li><a href="#install-script-method" class="table-of-contents__link toc-highlight">Install Script Method</a></li><li><a href="#automated-upgrades-method" class="table-of-contents__link toc-highlight">Automated Upgrades Method</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+with the same environment variables.</li><li>Restart the K3s service (if not restarted automatically by installer).</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="automated-upgrades-method">Automated Upgrades Method<a href="#automated-upgrades-method" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s supports <a href="/kr/upgrades/automated">automated upgrades</a>. To enable this in air-gapped environments, you must ensure the required images are available in your private registry.</p><p>You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the <code>+</code> in the K3s release with a <code>-</code> because Docker images do not support <code>+</code>.</p><p>You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller <a href="https://github.com/rancher/system-upgrade-controller/releases/latest" target="_blank" rel="noopener noreferrer">here</a> and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/system-upgrade-controller:v0.4.0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/kubectl:v0.17.0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the <a href="/kr/upgrades/automated">automated upgrades</a> guide.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/private-registry"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Private Registry Configuration</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/server-roles"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Managing Server Roles</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#private-registry-method" class="table-of-contents__link toc-highlight">Private Registry Method</a><ul><li><a href="#create-the-registry-yaml" class="table-of-contents__link toc-highlight">Create the Registry YAML</a></li></ul></li><li><a href="#manually-deploy-images-method" class="table-of-contents__link toc-highlight">Manually Deploy Images Method</a><ul><li><a href="#prepare-the-images-directory-and-k3s-binary" class="table-of-contents__link toc-highlight">Prepare the Images Directory and K3s Binary</a></li></ul></li><li><a href="#install-k3s" class="table-of-contents__link toc-highlight">Install K3s</a><ul><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#installing-k3s-in-an-air-gapped-environment" class="table-of-contents__link toc-highlight">Installing K3s in an Air-Gapped Environment</a></li></ul></li><li><a href="#upgrading" class="table-of-contents__link toc-highlight">Upgrading</a><ul><li><a href="#install-script-method" class="table-of-contents__link toc-highlight">Install Script Method</a></li><li><a href="#automated-upgrades-method" class="table-of-contents__link toc-highlight">Automated Upgrades Method</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/configuration.html b/kr/installation/configuration.html
index a8526b27f..4181f622f 100644
--- a/kr/installation/configuration.html
+++ b/kr/installation/configuration.html
@@ -3,22 +3,22 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Configuration Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/configuration"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Configuration Options | K3s"><meta data-rh="true" name="description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><meta data-rh="true" property="og:description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/configuration"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/configuration" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/configuration" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Configuration Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/configuration"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Configuration Options | K3s"><meta data-rh="true" name="description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><meta data-rh="true" property="og:description" content="This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/configuration"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/configuration" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/configuration" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Configuration Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Configuration Options</h1></header><p>This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on <a href="/kr/advanced">Advanced Options and Configuration</a> and the <a href="/kr/cli/server">server</a> and <a href="/kr/cli/agent">agent</a> command documentation for more in-depth coverage.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-with-install-script">Configuration with install script<a href="#configuration-with-install-script" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>As mentioned in the <a href="/kr/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>You can use a combination of <code>INSTALL_K3S_EXEC</code>, <code>K3S_</code> environment variables, and command flags to pass configuration to the service configuration. The prefixed environment variables, <code>INSTALL_K3S_EXEC</code> value, and trailing shell arguments are all persisted into the service configuration. After installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options.</p><p>To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server --flannel-backend none&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --flannel-backend none</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># server is assumed below because there is no K3S_URL</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;--flannel-backend none --token 12345&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When registering an agent, the following commands all result in the same behavior:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent --server https://k3s.example.com --token mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3s_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --server https://k3s.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --token mypassword</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mypassword </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># agent is assumed because of K3S_URL</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For details on all environment variables, see <a href="/kr/reference/env-variables">Environment Variables.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-with-binary">Configuration with binary<a href="#configuration-with-binary" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>As stated, the installation script is primarily concerned with configuring K3s to run as a service.<br>
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Configuration Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Configuration Options</h1></header><p>This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on <a href="/kr/advanced">Advanced Options and Configuration</a> and the <a href="/kr/cli/server">server</a> and <a href="/kr/cli/agent">agent</a> command documentation for more in-depth coverage.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-with-install-script">Configuration with install script<a href="#configuration-with-install-script" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>As mentioned in the <a href="/kr/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>You can use a combination of <code>INSTALL_K3S_EXEC</code>, <code>K3S_</code> environment variables, and command flags to pass configuration to the service configuration. The prefixed environment variables, <code>INSTALL_K3S_EXEC</code> value, and trailing shell arguments are all persisted into the service configuration. After installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options.</p><p>To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server --flannel-backend none&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --flannel-backend none</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># server is assumed below because there is no K3S_URL</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;--flannel-backend none --token 12345&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When registering an agent, the following commands all result in the same behavior:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent --server https://k3s.example.com --token mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3s_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --server https://k3s.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --token mypassword</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mypassword </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># agent is assumed because of K3S_URL</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For details on all environment variables, see <a href="/kr/reference/env-variables">Environment Variables.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-with-binary">Configuration with binary<a href="#configuration-with-binary" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>As stated, the installation script is primarily concerned with configuring K3s to run as a service.<br>
 <!-- -->If you choose to not use the script, you can run K3s simply by downloading the binary from our <a href="https://github.com/k3s-io/k3s/releases/latest" target="_blank" rel="noopener noreferrer">release page</a>, placing it on your path, and executing it. This is not particularly useful for permanent installations, but may be useful when performing quick tests that do not merit managing K3s as a system service.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_ENABLE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You can configure K3s in this manner through <code>K3S_</code> environment variables:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or command flags:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server --write-kubeconfig-mode </span><span class="token number" style="color:rgb(247, 140, 108)">644</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The k3s agent can also be configured this way:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s agent --server https://k3s.example.com --token mypassword</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For details on configuring the K3s server, see the <a href="/kr/cli/server"><code>k3s server</code> documentation</a>.<br>
 <!-- -->For details on configuring the K3s agent, see the <a href="/kr/cli/agent"><code>k3s agent</code> documentation</a>.<br>
 <!-- -->You can also use the <code>--help</code> flag to see a list of all available options.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Matching Flags</div><div class="admonitionContent_S0QG"><p>It is important to match critical flags on your server nodes. For example, if you use the flag
 <code>--disable servicelb</code> or <code>--cluster-cidr=10.200.0.0/16</code> on your master node, but don&#x27;t set it on other server nodes, the nodes will fail to join. They will print errors such as:
 <code>failed to validate server configuration: critical configuration value mismatch.</code>
-See the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file">Configuration File<a href="#configuration-file" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file.</p><p>By default, values present in a YAML file located at <code>/etc/rancher/k3s/config.yaml</code> will be used on install.</p><p>An example of a basic <code>server</code> config file is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This is equivalent to the following CLI arguments:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --write-kubeconfig-mode </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain">             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as <code>true</code> or <code>false</code> in the YAML file.</p><p>It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as <code>--node-label</code>, the CLI arguments will overwrite all values in the list.</p><p>Finally, the location of the config file can be changed either through the CLI argument <code>--config FILE, -c FILE</code>, or the environment variable <code>$K3S_CONFIG_FILE</code>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="multiple-config-files">Multiple Config Files<a href="#multiple-config-files" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a></p></div></div><p>Multiple configuration files are supported. By default, configuration files are read from <code>/etc/rancher/k3s/config.yaml</code> and <code>/etc/rancher/k3s/config.yaml.d/*.yaml</code> in alphabetical order. The last value for a given key will be used. A <code>+</code> can be appended to the key to append the value to the existing string or slice, instead of replacing it.</p><p>An example of multiple config files is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=bar</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> bar=baz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test1.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">600</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test2.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a final configuration of:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="putting-it-all-together">Putting it all together<a href="#putting-it-all-together" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>All of the above options can be combined into a single example.</p><p>A <code>config.yaml</code> file is created at <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secret&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">debug</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then the installation script is run with a combination of environment variables and flags:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or if you have already installed the K3s Binary:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a server with:</p><ul><li>A kubeconfig file with permissions <code>644</code></li><li>Flannel backend set to <code>none</code></li><li>The token set to <code>secret</code></li><li>Debug logging enabled</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/requirements"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Requirements</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/network-options"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Network Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#configuration-with-install-script" class="table-of-contents__link toc-highlight">Configuration with install script</a></li><li><a href="#configuration-with-binary" class="table-of-contents__link toc-highlight">Configuration with binary</a></li><li><a href="#configuration-file" class="table-of-contents__link toc-highlight">Configuration File</a><ul><li><a href="#multiple-config-files" class="table-of-contents__link toc-highlight">Multiple Config Files</a></li></ul></li><li><a href="#putting-it-all-together" class="table-of-contents__link toc-highlight">Putting it all together</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+See the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file">Configuration File<a href="#configuration-file" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a></p></div></div><p>In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file.</p><p>By default, values present in a YAML file located at <code>/etc/rancher/k3s/config.yaml</code> will be used on install.</p><p>An example of a basic <code>server</code> config file is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This is equivalent to the following CLI arguments:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --write-kubeconfig-mode </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain">             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as <code>true</code> or <code>false</code> in the YAML file.</p><p>It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as <code>--node-label</code>, the CLI arguments will overwrite all values in the list.</p><p>Finally, the location of the config file can be changed either through the CLI argument <code>--config FILE, -c FILE</code>, or the environment variable <code>$K3S_CONFIG_FILE</code>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="multiple-config-files">Multiple Config Files<a href="#multiple-config-files" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a></p></div></div><p>Multiple configuration files are supported. By default, configuration files are read from <code>/etc/rancher/k3s/config.yaml</code> and <code>/etc/rancher/k3s/config.yaml.d/*.yaml</code> in alphabetical order. The last value for a given key will be used. A <code>+</code> can be appended to the key to append the value to the existing string or slice, instead of replacing it.</p><p>An example of multiple config files is below:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=bar</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> bar=baz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test1.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">600</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test2.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a final configuration of:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="putting-it-all-together">Putting it all together<a href="#putting-it-all-together" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>All of the above options can be combined into a single example.</p><p>A <code>config.yaml</code> file is created at <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secret&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">debug</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then the installation script is run with a combination of environment variables and flags:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Or if you have already installed the K3s Binary:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This results in a server with:</p><ul><li>A kubeconfig file with permissions <code>644</code></li><li>Flannel backend set to <code>none</code></li><li>The token set to <code>secret</code></li><li>Debug logging enabled</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/requirements"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Requirements</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/network-options"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Network Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#configuration-with-install-script" class="table-of-contents__link toc-highlight">Configuration with install script</a></li><li><a href="#configuration-with-binary" class="table-of-contents__link toc-highlight">Configuration with binary</a></li><li><a href="#configuration-file" class="table-of-contents__link toc-highlight">Configuration File</a><ul><li><a href="#multiple-config-files" class="table-of-contents__link toc-highlight">Multiple Config Files</a></li></ul></li><li><a href="#putting-it-all-together" class="table-of-contents__link toc-highlight">Putting it all together</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/kube-dashboard.html b/kr/installation/kube-dashboard.html
index fb77db67b..c16e5cb45 100644
--- a/kr/installation/kube-dashboard.html
+++ b/kr/installation/kube-dashboard.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Kubernetes Dashboard | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/kube-dashboard"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Kubernetes Dashboard | K3s"><meta data-rh="true" name="description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><meta data-rh="true" property="og:description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/kube-dashboard"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/kube-dashboard" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/kube-dashboard" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Kubernetes Dashboard | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/kube-dashboard"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Kubernetes Dashboard | K3s"><meta data-rh="true" name="description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><meta data-rh="true" property="og:description" content="This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/kube-dashboard"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/kube-dashboard" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/kube-dashboard" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Kubernetes Dashboard</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Kubernetes Dashboard</h1></header><p>This installation guide will help you to deploy and configure the <a href="https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/" target="_blank" rel="noopener noreferrer">Kubernetes Dashboard</a> on K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deploying-the-kubernetes-dashboard">Deploying the Kubernetes Dashboard<a href="#deploying-the-kubernetes-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="dashboard-rbac-configuration">Dashboard RBAC Configuration<a href="#dashboard-rbac-configuration" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><blockquote><p><strong>Important:</strong> The <code>admin-user</code> created in this guide will have administrative privileges in the Dashboard.</p></blockquote><p>Create the following resource manifest files:</p><p><code>dashboard.admin-user.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>dashboard.admin-user-role.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">admin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Deploy the <code>admin-user</code> configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="obtain-the-bearer-token">Obtain the Bearer Token<a href="#obtain-the-bearer-token" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.24 and newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.23 and older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard create token admin-user</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard describe secret admin-user-token </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;^token&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="local-access-to-the-dashboard">Local Access to the Dashboard<a href="#local-access-to-the-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To access the Dashboard you must create a secure channel to your K3s cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl proxy</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The Dashboard is now accessible at:</p><ul><li>http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/</li><li><code>Sign In</code> with the <code>admin-user</code> Bearer Token</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-remote-access-to-the-dashboard">Advanced: Remote Access to the Dashboard<a href="#advanced-remote-access-to-the-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Please see the Dashboard documentation: Using <a href="https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" target="_blank" rel="noopener noreferrer">Port Forwarding</a> to Access Applications in a Cluster.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading-the-dashboard">Upgrading the Dashboard<a href="#upgrading-the-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deleting-the-dashboard-and-admin-user-configuration">Deleting the Dashboard and admin-user configuration<a href="#deleting-the-dashboard-and-admin-user-configuration" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrolebinding kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrole kubernetes-dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/packaged-components"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Managing Packaged Components</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/uninstall"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Uninstalling K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#deploying-the-kubernetes-dashboard" class="table-of-contents__link toc-highlight">Deploying the Kubernetes Dashboard</a></li><li><a href="#dashboard-rbac-configuration" class="table-of-contents__link toc-highlight">Dashboard RBAC Configuration</a></li><li><a href="#obtain-the-bearer-token" class="table-of-contents__link toc-highlight">Obtain the Bearer Token</a></li><li><a href="#local-access-to-the-dashboard" class="table-of-contents__link toc-highlight">Local Access to the Dashboard</a></li><li><a href="#upgrading-the-dashboard" class="table-of-contents__link toc-highlight">Upgrading the Dashboard</a></li><li><a href="#deleting-the-dashboard-and-admin-user-configuration" class="table-of-contents__link toc-highlight">Deleting the Dashboard and admin-user configuration</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Kubernetes Dashboard</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Kubernetes Dashboard</h1></header><p>This installation guide will help you to deploy and configure the <a href="https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/" target="_blank" rel="noopener noreferrer">Kubernetes Dashboard</a> on K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deploying-the-kubernetes-dashboard">Deploying the Kubernetes Dashboard<a href="#deploying-the-kubernetes-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="dashboard-rbac-configuration">Dashboard RBAC Configuration<a href="#dashboard-rbac-configuration" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><blockquote><p><strong>Important:</strong> The <code>admin-user</code> created in this guide will have administrative privileges in the Dashboard.</p></blockquote><p>Create the following resource manifest files:</p><p><code>dashboard.admin-user.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>dashboard.admin-user-role.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">admin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Deploy the <code>admin-user</code> configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="obtain-the-bearer-token">Obtain the Bearer Token<a href="#obtain-the-bearer-token" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.24 and newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.23 and older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard create token admin-user</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard describe secret admin-user-token </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;^token&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="local-access-to-the-dashboard">Local Access to the Dashboard<a href="#local-access-to-the-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To access the Dashboard you must create a secure channel to your K3s cluster:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl proxy</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The Dashboard is now accessible at:</p><ul><li>http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/</li><li><code>Sign In</code> with the <code>admin-user</code> Bearer Token</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="advanced-remote-access-to-the-dashboard">Advanced: Remote Access to the Dashboard<a href="#advanced-remote-access-to-the-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Please see the Dashboard documentation: Using <a href="https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" target="_blank" rel="noopener noreferrer">Port Forwarding</a> to Access Applications in a Cluster.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading-the-dashboard">Upgrading the Dashboard<a href="#upgrading-the-dashboard" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="deleting-the-dashboard-and-admin-user-configuration">Deleting the Dashboard and admin-user configuration<a href="#deleting-the-dashboard-and-admin-user-configuration" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrolebinding kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrole kubernetes-dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/packaged-components"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Managing Packaged Components</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/uninstall"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Uninstalling K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#deploying-the-kubernetes-dashboard" class="table-of-contents__link toc-highlight">Deploying the Kubernetes Dashboard</a></li><li><a href="#dashboard-rbac-configuration" class="table-of-contents__link toc-highlight">Dashboard RBAC Configuration</a></li><li><a href="#obtain-the-bearer-token" class="table-of-contents__link toc-highlight">Obtain the Bearer Token</a></li><li><a href="#local-access-to-the-dashboard" class="table-of-contents__link toc-highlight">Local Access to the Dashboard</a></li><li><a href="#upgrading-the-dashboard" class="table-of-contents__link toc-highlight">Upgrading the Dashboard</a></li><li><a href="#deleting-the-dashboard-and-admin-user-configuration" class="table-of-contents__link toc-highlight">Deleting the Dashboard and admin-user configuration</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/network-options.html b/kr/installation/network-options.html
index d92d24ea7..1517e44eb 100644
--- a/kr/installation/network-options.html
+++ b/kr/installation/network-options.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Network Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/network-options"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Network Options | K3s"><meta data-rh="true" name="description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><meta data-rh="true" property="og:description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/network-options"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/network-options" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/network-options" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Network Options | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/network-options"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Network Options | K3s"><meta data-rh="true" name="description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><meta data-rh="true" property="og:description" content="This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/network-options"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/network-options" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/network-options" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Network Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Network Options</h1></header><p>This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.</p><blockquote><p><strong>Note:</strong> Please reference the <a href="/kr/networking">Networking</a> page for information about CoreDNS, Traefik, and the Service LB.</p></blockquote><h2 class="anchor anchorWithStickyNavbar_LWe7" id="flannel-options">Flannel Options<a href="#flannel-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p><a href="https://github.com/flannel-io/flannel/blob/master/README.md" target="_blank" rel="noopener noreferrer">Flannel</a> is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin.</p><ul><li>Flannel options can only be set on server nodes, and must be identical on all servers in the cluster.</li><li>The default backend for Flannel is <code>vxlan</code>. To enable encryption, use the <code>wireguard-native</code> backend.</li><li>Using <code>vxlan</code> on Rasperry Pi with recent versions of Ubuntu requires <a href="/kr/advanced#raspberry-pi">additional preparation</a>.</li><li>Using <code>wireguard-native</code> as the Flannel backend may require additional modules on some Linux distributions. Please see the <a href="https://www.wireguard.com/install/" target="_blank" rel="noopener noreferrer">WireGuard Install Guide</a> for details.
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Network Options</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Network Options</h1></header><p>This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6.</p><blockquote><p><strong>Note:</strong> Please reference the <a href="/kr/networking">Networking</a> page for information about CoreDNS, Traefik, and the Service LB.</p></blockquote><h2 class="anchor anchorWithStickyNavbar_LWe7" id="flannel-options">Flannel Options<a href="#flannel-options" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p><a href="https://github.com/flannel-io/flannel/blob/master/README.md" target="_blank" rel="noopener noreferrer">Flannel</a> is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin.</p><ul><li>Flannel options can only be set on server nodes, and must be identical on all servers in the cluster.</li><li>The default backend for Flannel is <code>vxlan</code>. To enable encryption, use the <code>wireguard-native</code> backend.</li><li>Using <code>vxlan</code> on Rasperry Pi with recent versions of Ubuntu requires <a href="/kr/advanced#raspberry-pi">additional preparation</a>.</li><li>Using <code>wireguard-native</code> as the Flannel backend may require additional modules on some Linux distributions. Please see the <a href="https://www.wireguard.com/install/" target="_blank" rel="noopener noreferrer">WireGuard Install Guide</a> for details.
 The WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system.
 You must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend.</li></ul><table><thead><tr><th>CLI Flag and Value</th><th>Description</th></tr></thead><tbody><tr><td><code>--flannel-ipv6-masq</code></td><td>Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than <code>none</code>.</td></tr><tr><td><code>--flannel-external-ip</code></td><td>Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node.</td></tr><tr><td><code>--flannel-backend=vxlan</code></td><td>Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi.</td></tr><tr><td><code>--flannel-backend=host-gw</code></td><td>Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster.</td></tr><tr><td><code>--flannel-backend=wireguard-native</code></td><td>Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules.</td></tr><tr><td><code>--flannel-backend=ipsec</code></td><td>Use strongSwan IPSec via the <code>swanctl</code> binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0)</td></tr><tr><td><code>--flannel-backend=wireguard</code></td><td>Use WireGuard via the <code>wg</code> binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0)</td></tr><tr><td><code>--flannel-backend=none</code></td><td>Disable Flannel entirely.</td></tr></tbody></table><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>K3s no longer includes strongSwan <code>swanctl</code> and <code>charon</code> binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the <code>ipsec</code> backend.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="migrating-from-wireguard-or-ipsec-to-wireguard-native">Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code><a href="#migrating-from-wireguard-or-ipsec-to-wireguard-native" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The legacy <code>wireguard</code> backend requires installation of the <code>wg</code> tool on the host. This backend will be removed in K3s v1.26, in favor of <code>wireguard-native</code> backend, which directly interfaces with the kernel.</p><p>The legacy <code>ipsec</code> backend requires installation of the <code>swanctl</code> and <code>charon</code> binaries on the host. This backend will be removed in K3s v1.27, in favor of the <code>wireguard-native</code> backend.</p><p>We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps:</p><ol><li>Update the K3s config on all server nodes. If using config files, the <code>/etc/rancher/k3s/config.yaml</code> should include <code>flannel-backend: wireguard-native</code> instead of <code>flannel-backend: wireguard</code> or <code>flannel-backend: ipsec</code>. If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed.</li><li>Reboot all nodes, starting with the servers.</li></ol><h2 class="anchor anchorWithStickyNavbar_LWe7" id="custom-cni">Custom CNI<a href="#custom-cni" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Start K3s with <code>--flannel-backend=none</code> and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set <code>--disable-network-policy</code> as well to avoid conflicts. IP Forwarding should be enabled for Canal and Calico; please reference the steps below.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Canal</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Calico</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>Visit the <a href="https://docs.tigera.io/calico/" target="_blank" rel="noopener noreferrer">Project Calico Docs</a> website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the <code>container_settings</code> section, for example:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;container_settings&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;allow_ip_forwarding&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Apply the Canal YAML.</p><p>Ensure the settings were applied by running the following command on the host:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /etc/cni/net.d/10-canal.conflist</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You should see that IP forwarding is set to true.</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>Follow the <a href="https://docs.tigera.io/calico/latest/reference/configure-cni-plugins" target="_blank" rel="noopener noreferrer">Calico CNI Plugins Guide</a>. Modify the Calico YAML so that IP forwarding is allowed in the <code>container_settings</code> section, for example:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;container_settings&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;allow_ip_forwarding&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Apply the Calico YAML.</p><p>Ensure the settings were applied by running the following command on the host:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /etc/cni/net.d/10-calico.conflist</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>You should see that IP forwarding is set to true.</p></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-egress-selector-configuration">Control-Plane Egress Selector configuration<a href="#control-plane-egress-selector-configuration" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components.
 This allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled.
@@ -17,10 +17,10 @@
 This mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform <code>kubectl exec</code> and <code>kubectl logs</code>.</li><li><code>agent</code> (default): The apiserver uses agent tunnels to communicate with kubelets.
 This is mode requires that servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints.</li><li><code>pod</code>: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes.
 <strong>NOTE</strong>: This will not work when using a CNI that uses its own IPAM and does not respect the node&#x27;s PodCIDR allocation. <code>cluster</code> or <code>agent</code> should be used with these CNIs instead.</li><li><code>cluster</code>: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dual-stack-ipv4--ipv6-networking">Dual-stack (IPv4 + IPv6) Networking<a href="#dual-stack-ipv4--ipv6-networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Experimental support is available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a>.<br>
-<!-- -->Stable support is available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.23.7+k3s1</a>. </p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue </div><div class="admonitionContent_S0QG"><p>Kubernetes v1.24 and v1.25 include <a href="https://github.com/kubernetes/kubernetes/issues/111695" target="_blank" rel="noopener noreferrer">an issue</a> that ignores the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=0.0.0.0&quot; # To proritize IPv4 traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">#OR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=::&quot; # To proritize IPv6 traffic</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only.</p><p>To enable dual-stack in K3s, you must provide valid dual-stack <code>cluster-cidr</code> and <code>service-cidr</code> on all server nodes. This is an example of a valid configuration:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Note that you may configure any valid <code>cluster-cidr</code> and <code>service-cidr</code> values, but the above masks are recommended. If you change the <code>cluster-cidr</code> mask, you should also change the <code>node-cidr-mask-size-ipv4</code> and <code>node-cidr-mask-size-ipv6</code> values to match the planned pods per node and total node count. The largest supported <code>service-cidr</code> mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud.</p><p>If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin&#x27;s dual-stack documentation and verify if network policies can be enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="single-stack-ipv6-networking">Single-stack IPv6 Networking<a href="#single-stack-ipv6-networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.9+k3s1</a></p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue</div><div class="admonitionContent_S0QG"><p>If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl <code>net.ipv6.conf.all.accept_ra=2</code>; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of <a href="https://github.com/kubernetes/kubernetes/issues/91507" target="_blank" rel="noopener noreferrer">man-in-the-middle attacks</a>.</p></div></div><p>Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the <code>--cluster-cidr</code> and <code>--service-cidr</code> flags. This is an example of a valid configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:0::/56 --service-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="distributed-hybrid-or-multicloud-cluster">Distributed hybrid or multicloud cluster<a href="#distributed-hybrid-or-multicloud-cluster" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>A K3s cluster can still be deployed on nodes which use different private networks and are not directly connected (e.g. nodes in different public clouds). To achieve this, K3s sets a mesh of tunnels that become a VPN mesh. These nodes must have have an assigned IP through which they can be reached (e.g. a public IP). The server traffic will use a websocket tunnel and the data-plane traffic will use a wireguard tunnel.</p><p>To enable this type of deployment, you must add the following parameters on servers:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --flannel-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">wireguard-native --flannel-external-ip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>and on agents:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">AGENT_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>where <code>SERVER_EXTERNAL_IP</code> is the IP through which we can reach the server node and <code>AGENT_EXTERNAL_IP</code> is the IP through which we can reach the agent/worker node. Note that the <code>K3S_URL</code> config parameter in the agent/worker should use the <code>SERVER_EXTERNAL_IP</code> to be able to connect to it. Remember to check the <a href="/kr/installation/requirements#networking">Networking Requirements</a> and allow access to the listed ports on both internal and external addresses.</p><p>Both <code>SERVER_EXTERNAL_IP</code> and <code>AGENT_EXTERNAL_IP</code> must have connectivity between them and are normally public IPs.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Dynamic IPs</div><div class="admonitionContent_S0QG"><p>If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the <code>--node-external-ip</code> parameter to reflect the new IP. If running k3s as a service, you must modify <code>/etc/systemd/system/k3s.service</code> then run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>Embedded etcd will not use external IPs for communication. If using embedded etcd; all server nodes must be reachable to each other via their private IPs.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/configuration"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Configuration Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/private-registry"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Private Registry Configuration</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#flannel-options" class="table-of-contents__link toc-highlight">Flannel Options</a><ul><li><a href="#migrating-from-wireguard-or-ipsec-to-wireguard-native" class="table-of-contents__link toc-highlight">Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code></a></li></ul></li><li><a href="#custom-cni" class="table-of-contents__link toc-highlight">Custom CNI</a></li><li><a href="#control-plane-egress-selector-configuration" class="table-of-contents__link toc-highlight">Control-Plane Egress Selector configuration</a></li><li><a href="#dual-stack-ipv4--ipv6-networking" class="table-of-contents__link toc-highlight">Dual-stack (IPv4 + IPv6) Networking</a></li><li><a href="#single-stack-ipv6-networking" class="table-of-contents__link toc-highlight">Single-stack IPv6 Networking</a></li><li><a href="#distributed-hybrid-or-multicloud-cluster" class="table-of-contents__link toc-highlight">Distributed hybrid or multicloud cluster</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<!-- -->Stable support is available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.23.7+k3s1</a>. </p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue </div><div class="admonitionContent_S0QG"><p>Kubernetes v1.24 and v1.25 include <a href="https://github.com/kubernetes/kubernetes/issues/111695" target="_blank" rel="noopener noreferrer">an issue</a> that ignores the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=0.0.0.0&quot; # To proritize IPv4 traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">#OR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=::&quot; # To proritize IPv6 traffic</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only.</p><p>To enable dual-stack in K3s, you must provide valid dual-stack <code>cluster-cidr</code> and <code>service-cidr</code> on all server nodes. This is an example of a valid configuration:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Note that you may configure any valid <code>cluster-cidr</code> and <code>service-cidr</code> values, but the above masks are recommended. If you change the <code>cluster-cidr</code> mask, you should also change the <code>node-cidr-mask-size-ipv4</code> and <code>node-cidr-mask-size-ipv6</code> values to match the planned pods per node and total node count. The largest supported <code>service-cidr</code> mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud.</p><p>If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin&#x27;s dual-stack documentation and verify if network policies can be enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="single-stack-ipv6-networking">Single-stack IPv6 Networking<a href="#single-stack-ipv6-networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Available as of <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.9+k3s1</a></p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Known Issue</div><div class="admonitionContent_S0QG"><p>If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl <code>net.ipv6.conf.all.accept_ra=2</code>; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of <a href="https://github.com/kubernetes/kubernetes/issues/91507" target="_blank" rel="noopener noreferrer">man-in-the-middle attacks</a>.</p></div></div><p>Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the <code>--cluster-cidr</code> and <code>--service-cidr</code> flags. This is an example of a valid configuration:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:0::/56 --service-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="distributed-hybrid-or-multicloud-cluster">Distributed hybrid or multicloud cluster<a href="#distributed-hybrid-or-multicloud-cluster" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>A K3s cluster can still be deployed on nodes which use different private networks and are not directly connected (e.g. nodes in different public clouds). To achieve this, K3s sets a mesh of tunnels that become a VPN mesh. These nodes must have have an assigned IP through which they can be reached (e.g. a public IP). The server traffic will use a websocket tunnel and the data-plane traffic will use a wireguard tunnel.</p><p>To enable this type of deployment, you must add the following parameters on servers:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --flannel-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">wireguard-native --flannel-external-ip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>and on agents:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">AGENT_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>where <code>SERVER_EXTERNAL_IP</code> is the IP through which we can reach the server node and <code>AGENT_EXTERNAL_IP</code> is the IP through which we can reach the agent/worker node. Note that the <code>K3S_URL</code> config parameter in the agent/worker should use the <code>SERVER_EXTERNAL_IP</code> to be able to connect to it. Remember to check the <a href="/kr/installation/requirements#networking">Networking Requirements</a> and allow access to the listed ports on both internal and external addresses.</p><p>Both <code>SERVER_EXTERNAL_IP</code> and <code>AGENT_EXTERNAL_IP</code> must have connectivity between them and are normally public IPs.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Dynamic IPs</div><div class="admonitionContent_S0QG"><p>If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the <code>--node-external-ip</code> parameter to reflect the new IP. If running k3s as a service, you must modify <code>/etc/systemd/system/k3s.service</code> then run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>Embedded etcd will not use external IPs for communication. If using embedded etcd; all server nodes must be reachable to each other via their private IPs.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/configuration"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Configuration Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/private-registry"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Private Registry Configuration</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#flannel-options" class="table-of-contents__link toc-highlight">Flannel Options</a><ul><li><a href="#migrating-from-wireguard-or-ipsec-to-wireguard-native" class="table-of-contents__link toc-highlight">Migrating from <code>wireguard</code> or <code>ipsec</code> to <code>wireguard-native</code></a></li></ul></li><li><a href="#custom-cni" class="table-of-contents__link toc-highlight">Custom CNI</a></li><li><a href="#control-plane-egress-selector-configuration" class="table-of-contents__link toc-highlight">Control-Plane Egress Selector configuration</a></li><li><a href="#dual-stack-ipv4--ipv6-networking" class="table-of-contents__link toc-highlight">Dual-stack (IPv4 + IPv6) Networking</a></li><li><a href="#single-stack-ipv6-networking" class="table-of-contents__link toc-highlight">Single-stack IPv6 Networking</a></li><li><a href="#distributed-hybrid-or-multicloud-cluster" class="table-of-contents__link toc-highlight">Distributed hybrid or multicloud cluster</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/packaged-components.html b/kr/installation/packaged-components.html
index a7478ceb0..6b74a50c2 100644
--- a/kr/installation/packaged-components.html
+++ b/kr/installation/packaged-components.html
@@ -3,21 +3,21 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Managing Packaged Components | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/packaged-components"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Packaged Components | K3s"><meta data-rh="true" name="description" content="Auto-Deploying Manifests (AddOns)"><meta data-rh="true" property="og:description" content="Auto-Deploying Manifests (AddOns)"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/packaged-components"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/packaged-components" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/packaged-components" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Managing Packaged Components | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/packaged-components"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Packaged Components | K3s"><meta data-rh="true" name="description" content="Auto-Deploying Manifests (AddOns)"><meta data-rh="true" property="og:description" content="Auto-Deploying Manifests (AddOns)"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/packaged-components"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/packaged-components" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/packaged-components" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Packaged Components</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Packaged Components</h1></header><h2 class="anchor anchorWithStickyNavbar_LWe7" id="auto-deploying-manifests-addons">Auto-Deploying Manifests (AddOns)<a href="#auto-deploying-manifests-addons" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>On server nodes, any file found in <code>/var/lib/rancher/k3s/server/manifests</code> will automatically be deployed to Kubernetes in a manner similar to <code>kubectl apply</code>, both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster.</p><p>Manifests are tracked as <code>AddOn</code> custom resources in the <code>kube-system</code> namespace. Any errors or warnings encountered when applying the manifest file may seen by using <code>kubectl describe</code> on the corresponding <code>AddOn</code>, or by using <code>kubectl get event -n kube-system</code> to view all events for that namespace, including those from the deploy controller.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="packaged-components">Packaged Components<a href="#packaged-components" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: <code>coredns</code>, <code>traefik</code>, <code>local-storage</code>, and <code>metrics-server</code>. The embedded <code>servicelb</code> LoadBalancer controller does not have a manifest file, but can be disabled as if it were an <code>AddOn</code> for historical reasons.</p><p>Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="user-addons">User AddOns<a href="#user-addons" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You may place additional files in the manifests directory for deployment as an <code>AddOn</code>. Each file may contain multiple Kubernetes resources, delmited by the <code>---</code> YAML document separator. For more information on organizing resources in manifests, see the <a href="https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/" target="_blank" rel="noopener noreferrer">Managing Resources</a> section of the Kubernetes documentation.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="file-naming-requirements">File Naming Requirements<a href="#file-naming-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>The <code>AddOn</code> name for each file in the manifest directory is derived from the file basename.
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Packaged Components</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Packaged Components</h1></header><h2 class="anchor anchorWithStickyNavbar_LWe7" id="auto-deploying-manifests-addons">Auto-Deploying Manifests (AddOns)<a href="#auto-deploying-manifests-addons" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>On server nodes, any file found in <code>/var/lib/rancher/k3s/server/manifests</code> will automatically be deployed to Kubernetes in a manner similar to <code>kubectl apply</code>, both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster.</p><p>Manifests are tracked as <code>AddOn</code> custom resources in the <code>kube-system</code> namespace. Any errors or warnings encountered when applying the manifest file may seen by using <code>kubectl describe</code> on the corresponding <code>AddOn</code>, or by using <code>kubectl get event -n kube-system</code> to view all events for that namespace, including those from the deploy controller.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="packaged-components">Packaged Components<a href="#packaged-components" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: <code>coredns</code>, <code>traefik</code>, <code>local-storage</code>, and <code>metrics-server</code>. The embedded <code>servicelb</code> LoadBalancer controller does not have a manifest file, but can be disabled as if it were an <code>AddOn</code> for historical reasons.</p><p>Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="user-addons">User AddOns<a href="#user-addons" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You may place additional files in the manifests directory for deployment as an <code>AddOn</code>. Each file may contain multiple Kubernetes resources, delmited by the <code>---</code> YAML document separator. For more information on organizing resources in manifests, see the <a href="https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/" target="_blank" rel="noopener noreferrer">Managing Resources</a> section of the Kubernetes documentation.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="file-naming-requirements">File Naming Requirements<a href="#file-naming-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>The <code>AddOn</code> name for each file in the manifest directory is derived from the file basename.
 Ensure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/names/" target="_blank" rel="noopener noreferrer">object naming restrictions</a>.
 Care should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled.</p><p>Here is en example of an error that would be reported if the file name contains underscores:</p><blockquote><p><code>Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:
    Addon.k3s.cattle.io &quot;example_manifest&quot; is invalid: metadata.name: Invalid value: &quot;example_manifest&quot;: 
    a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, &#x27;-&#x27; or &#x27;.&#x27;, and must start and end with an alphanumeric character
-   (e.g. &#x27;example.com&#x27;, regex used for validation is &#x27;[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*&#x27;)</code></p></blockquote><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>위험</div><div class="admonitionContent_S0QG"><p>If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="disabling-manifests">Disabling Manifests<a href="#disabling-manifests" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>There are two ways to disable deployment of specific content from the manifests directory.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-the---disable-flag">Using the <code>--disable</code> flag<a href="#using-the---disable-flag" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the <code>manifests</code> directory, can be disabled with the <code>--disable</code> flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the <code>manifests</code> directory.</p><p>For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with <code>--skip=traefik</code>. Multiple items can be disabled by separating their names with commas, or by repeating the flag.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-skip-files">Using .skip files<a href="#using-skip-files" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>For any file under <code>/var/lib/rancher/k3s/server/manifests</code>, you can create a <code>.skip</code> file which will cause K3s to ignore the corresponding manifest. The contents of the <code>.skip</code> file do not matter, only its existence is checked. Note that creating a <code>.skip</code> file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist.</p><p>For example, creating an empty <code>traefik.yaml.skip</code> file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying <code>traefik.yaml</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> /var/lib/rancher/k3s/server/manifests</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">coredns.yaml  traefik.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get pods -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   local-path-provisioner-64ffb68fd-xx98j   </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   metrics-server-5489f84d5d-7zwkt          </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   coredns-85cb69466-vcq7j                  </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If Traefik had already been deployed prior to creating the <code>traefik.skip</code> file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="helm-addons">Helm AddOns<a href="#helm-addons" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>For information about managing Helm charts via auto-deploying manifests, refer to the section about <a href="/kr/helm">Helm.</a></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/server-roles"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Managing Server Roles</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/kube-dashboard"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#auto-deploying-manifests-addons" class="table-of-contents__link toc-highlight">Auto-Deploying Manifests (AddOns)</a><ul><li><a href="#packaged-components" class="table-of-contents__link toc-highlight">Packaged Components</a></li><li><a href="#user-addons" class="table-of-contents__link toc-highlight">User AddOns</a></li></ul></li><li><a href="#disabling-manifests" class="table-of-contents__link toc-highlight">Disabling Manifests</a><ul><li><a href="#using-the---disable-flag" class="table-of-contents__link toc-highlight">Using the <code>--disable</code> flag</a></li><li><a href="#using-skip-files" class="table-of-contents__link toc-highlight">Using .skip files</a></li></ul></li><li><a href="#helm-addons" class="table-of-contents__link toc-highlight">Helm AddOns</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+   (e.g. &#x27;example.com&#x27;, regex used for validation is &#x27;[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*&#x27;)</code></p></blockquote><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>위험</div><div class="admonitionContent_S0QG"><p>If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="disabling-manifests">Disabling Manifests<a href="#disabling-manifests" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>There are two ways to disable deployment of specific content from the manifests directory.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-the---disable-flag">Using the <code>--disable</code> flag<a href="#using-the---disable-flag" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the <code>manifests</code> directory, can be disabled with the <code>--disable</code> flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the <code>manifests</code> directory.</p><p>For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with <code>--skip=traefik</code>. Multiple items can be disabled by separating their names with commas, or by repeating the flag.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="using-skip-files">Using .skip files<a href="#using-skip-files" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>For any file under <code>/var/lib/rancher/k3s/server/manifests</code>, you can create a <code>.skip</code> file which will cause K3s to ignore the corresponding manifest. The contents of the <code>.skip</code> file do not matter, only its existence is checked. Note that creating a <code>.skip</code> file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist.</p><p>For example, creating an empty <code>traefik.yaml.skip</code> file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying <code>traefik.yaml</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> /var/lib/rancher/k3s/server/manifests</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">coredns.yaml  traefik.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get pods -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   local-path-provisioner-64ffb68fd-xx98j   </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   metrics-server-5489f84d5d-7zwkt          </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   coredns-85cb69466-vcq7j                  </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If Traefik had already been deployed prior to creating the <code>traefik.skip</code> file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="helm-addons">Helm AddOns<a href="#helm-addons" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>For information about managing Helm charts via auto-deploying manifests, refer to the section about <a href="/kr/helm">Helm.</a></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/server-roles"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Managing Server Roles</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/kube-dashboard"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#auto-deploying-manifests-addons" class="table-of-contents__link toc-highlight">Auto-Deploying Manifests (AddOns)</a><ul><li><a href="#packaged-components" class="table-of-contents__link toc-highlight">Packaged Components</a></li><li><a href="#user-addons" class="table-of-contents__link toc-highlight">User AddOns</a></li></ul></li><li><a href="#disabling-manifests" class="table-of-contents__link toc-highlight">Disabling Manifests</a><ul><li><a href="#using-the---disable-flag" class="table-of-contents__link toc-highlight">Using the <code>--disable</code> flag</a></li><li><a href="#using-skip-files" class="table-of-contents__link toc-highlight">Using .skip files</a></li></ul></li><li><a href="#helm-addons" class="table-of-contents__link toc-highlight">Helm AddOns</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/private-registry.html b/kr/installation/private-registry.html
index 26549ffb0..e76c69f6a 100644
--- a/kr/installation/private-registry.html
+++ b/kr/installation/private-registry.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Private Registry Configuration | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/private-registry"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Private Registry Configuration | K3s"><meta data-rh="true" name="description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><meta data-rh="true" property="og:description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/private-registry"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/private-registry" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/private-registry" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Private Registry Configuration | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/private-registry"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Private Registry Configuration | K3s"><meta data-rh="true" name="description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><meta data-rh="true" property="og:description" content="Containerd can be configured to connect to private registries and use them to pull private images on the node."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/private-registry"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/private-registry" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/private-registry" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Private Registry Configuration</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Private Registry Configuration</h1></header><p>Containerd can be configured to connect to private registries and use them to pull private images on the node.</p><p>Upon startup, K3s will check to see if a <code>registries.yaml</code> file exists at <code>/etc/rancher/k3s/</code> and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry.</p><p>Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the <code>registries.yaml</code> file on each server as well.</p><p>Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the <code>registries.yaml</code> file and give different examples of using private registry configuration in K3s.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="registries-configuration-file">Registries Configuration File<a href="#registries-configuration-file" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The file consists of two main sections:</p><ul><li>mirrors</li><li>configs</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="mirrors">Mirrors<a href="#mirrors" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Mirrors is a directive that defines the names and endpoints of the private registries, for example:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  mycustomreg.com:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="redirects">Redirects<a href="#redirects" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>If a public registry is used as a mirror, such as when configuring a <a href="https://docs.docker.com/registry/recipes/mirror/" target="_blank" rel="noopener noreferrer">pull through cache</a>, images pulls are transparently redirected.</p><p>For example, if you have a mirror configured for <code>docker.io</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then pulling <code>docker.io/rancher/coredns-coredns:1.6.3</code> will transparently pull the image from <code>https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3</code>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="rewrites">Rewrites<a href="#rewrites" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one.</p><p>For example, the following configuration would transparently pull the image <code>docker.io/rancher/coredns-coredns:1.6.3</code> from <code>registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3</code>:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  docker.io:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://registry.example.com:5000&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    rewrite:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      &quot;^rancher/(.*)&quot;: &quot;mirrorproject/rancher-images/$1&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The image will still be stored under the original name so that a <code>crictl image ls</code> will show <code>docker.io/rancher/coredns-coredns:1.6.3</code> as available on the node, even though the image was pulled from the mirrored registry with a different name.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configs">Configs<a href="#configs" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The <code>configs</code> section defines the TLS and credential configuration for each mirror. For each mirror you can define <code>auth</code> and/or <code>tls</code>. </p><p>The <code>tls</code> part consists of:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>cert_file</code></td><td>The client certificate path that will be used to authenticate with the registry</td></tr><tr><td><code>key_file</code></td><td>The client key path that will be used to authenticate with the registry</td></tr><tr><td><code>ca_file</code></td><td>Defines the CA certificate path to be used to verify the registry&#x27;s server cert file</td></tr><tr><td><code>insecure_skip_verify</code></td><td>Boolean that defines if TLS verification should be skipped for the registry</td></tr></tbody></table><p>The <code>auth</code> part consists of either username/password or authentication token:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>username</code></td><td>user name of the private registry basic auth</td></tr><tr><td><code>password</code></td><td>user password of the private registry basic auth</td></tr><tr><td><code>auth</code></td><td>authentication token of the private registry basic auth</td></tr></tbody></table><p>Below are basic examples of using private registries in different modes:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="with-tls">With TLS<a href="#with-tls" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="without-tls">Without TLS<a href="#without-tls" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when <em>not</em> using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p>In case of no TLS communication, you need to specify <code>http://</code> for the endpoints, otherwise it will default to https.</p></blockquote><p>In order for the registry changes to take effect, you need to restart K3s on each node.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-images-to-the-private-registry">Adding Images to the Private Registry<a href="#adding-images-to-the-private-registry" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>First, obtain the <code>k3s-images.txt</code> file from GitHub for the release you are working with.
-Pull the K3s images listed on the k3s-images.txt file from docker.io</p><p>Example: <code>docker pull docker.io/rancher/coredns-coredns:1.6.3</code></p><p>Then, retag the images to the private registry.</p><p>Example: <code>docker tag coredns-coredns:1.6.3 mycustomreg:5000/coredns-coredns</code></p><p>Last, push the images to the private registry.</p><p>Example: <code>docker push mycustomreg.com:5000/coredns-coredns</code></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/network-options"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Network Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/airgap"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Air-Gap Install</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#registries-configuration-file" class="table-of-contents__link toc-highlight">Registries Configuration File</a><ul><li><a href="#mirrors" class="table-of-contents__link toc-highlight">Mirrors</a></li><li><a href="#configs" class="table-of-contents__link toc-highlight">Configs</a></li><li><a href="#with-tls" class="table-of-contents__link toc-highlight">With TLS</a></li><li><a href="#without-tls" class="table-of-contents__link toc-highlight">Without TLS</a></li></ul></li><li><a href="#adding-images-to-the-private-registry" class="table-of-contents__link toc-highlight">Adding Images to the Private Registry</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Private Registry Configuration</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Private Registry Configuration</h1></header><p>Containerd can be configured to connect to private registries and use them to pull private images on the node.</p><p>Upon startup, K3s will check to see if a <code>registries.yaml</code> file exists at <code>/etc/rancher/k3s/</code> and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry.</p><p>Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the <code>registries.yaml</code> file on each server as well.</p><p>Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the <code>registries.yaml</code> file and give different examples of using private registry configuration in K3s.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="registries-configuration-file">Registries Configuration File<a href="#registries-configuration-file" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The file consists of two main sections:</p><ul><li>mirrors</li><li>configs</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="mirrors">Mirrors<a href="#mirrors" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Mirrors is a directive that defines the names and endpoints of the private registries, for example:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  mycustomreg.com:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="redirects">Redirects<a href="#redirects" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>If a public registry is used as a mirror, such as when configuring a <a href="https://docs.docker.com/registry/recipes/mirror/" target="_blank" rel="noopener noreferrer">pull through cache</a>, images pulls are transparently redirected.</p><p>For example, if you have a mirror configured for <code>docker.io</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Then pulling <code>docker.io/rancher/coredns-coredns:1.6.3</code> will transparently pull the image from <code>https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3</code>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="rewrites">Rewrites<a href="#rewrites" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one.</p><p>For example, the following configuration would transparently pull the image <code>docker.io/rancher/coredns-coredns:1.6.3</code> from <code>registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3</code>:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  docker.io:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://registry.example.com:5000&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    rewrite:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      &quot;^rancher/(.*)&quot;: &quot;mirrorproject/rancher-images/$1&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The image will still be stored under the original name so that a <code>crictl image ls</code> will show <code>docker.io/rancher/coredns-coredns:1.6.3</code> as available on the node, even though the image was pulled from the mirrored registry with a different name.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configs">Configs<a href="#configs" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The <code>configs</code> section defines the TLS and credential configuration for each mirror. For each mirror you can define <code>auth</code> and/or <code>tls</code>. </p><p>The <code>tls</code> part consists of:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>cert_file</code></td><td>The client certificate path that will be used to authenticate with the registry</td></tr><tr><td><code>key_file</code></td><td>The client key path that will be used to authenticate with the registry</td></tr><tr><td><code>ca_file</code></td><td>Defines the CA certificate path to be used to verify the registry&#x27;s server cert file</td></tr><tr><td><code>insecure_skip_verify</code></td><td>Boolean that defines if TLS verification should be skipped for the registry</td></tr></tbody></table><p>The <code>auth</code> part consists of either username/password or authentication token:</p><table><thead><tr><th>Directive</th><th>Description</th></tr></thead><tbody><tr><td><code>username</code></td><td>user name of the private registry basic auth</td></tr><tr><td><code>password</code></td><td>user password of the private registry basic auth</td></tr><tr><td><code>auth</code></td><td>authentication token of the private registry basic auth</td></tr></tbody></table><p>Below are basic examples of using private registries in different modes:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="with-tls">With TLS<a href="#with-tls" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="without-tls">Without TLS<a href="#without-tls" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Below are examples showing how you may configure <code>/etc/rancher/k3s/registries.yaml</code> on each node when <em>not</em> using TLS.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">With Authentication</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Without Authentication</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p>In case of no TLS communication, you need to specify <code>http://</code> for the endpoints, otherwise it will default to https.</p></blockquote><p>In order for the registry changes to take effect, you need to restart K3s on each node.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-images-to-the-private-registry">Adding Images to the Private Registry<a href="#adding-images-to-the-private-registry" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>First, obtain the <code>k3s-images.txt</code> file from GitHub for the release you are working with.
+Pull the K3s images listed on the k3s-images.txt file from docker.io</p><p>Example: <code>docker pull docker.io/rancher/coredns-coredns:1.6.3</code></p><p>Then, retag the images to the private registry.</p><p>Example: <code>docker tag coredns-coredns:1.6.3 mycustomreg:5000/coredns-coredns</code></p><p>Last, push the images to the private registry.</p><p>Example: <code>docker push mycustomreg.com:5000/coredns-coredns</code></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/network-options"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Network Options</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/airgap"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Air-Gap Install</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#registries-configuration-file" class="table-of-contents__link toc-highlight">Registries Configuration File</a><ul><li><a href="#mirrors" class="table-of-contents__link toc-highlight">Mirrors</a></li><li><a href="#configs" class="table-of-contents__link toc-highlight">Configs</a></li><li><a href="#with-tls" class="table-of-contents__link toc-highlight">With TLS</a></li><li><a href="#without-tls" class="table-of-contents__link toc-highlight">Without TLS</a></li></ul></li><li><a href="#adding-images-to-the-private-registry" class="table-of-contents__link toc-highlight">Adding Images to the Private Registry</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/requirements.html b/kr/installation/requirements.html
index ffec0ba8c..fb29caf02 100644
--- a/kr/installation/requirements.html
+++ b/kr/installation/requirements.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Requirements | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/requirements"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Requirements | K3s"><meta data-rh="true" name="description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><meta data-rh="true" property="og:description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/requirements"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/requirements" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/requirements" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Requirements | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/requirements"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Requirements | K3s"><meta data-rh="true" name="description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><meta data-rh="true" property="og:description" content="K3s is very lightweight, but has some minimum requirements as outlined below."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/requirements"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/requirements" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/requirements" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Requirements</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Requirements</h1></header><p>K3s is very lightweight, but has some minimum requirements as outlined below.</p><p>Whether you&#x27;re configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Two nodes cannot have the same hostname.</p><p>If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the <code>--with-node-id</code> option to append a random suffix for each node, or devise a unique name to pass with <code>--node-name</code> or <code>$K3S_NODE_NAME</code> for each node you add to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="architecture">Architecture<a href="#architecture" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s is available for the following architectures:</p><ul><li>x86_64</li><li>armhf</li><li>arm64/aarch64</li><li>s390x</li></ul><p>On <code>aarch64/arm64</code> systems, the OS must use a 4k page size. <strong>RHEL9</strong>, <strong>Ubuntu</strong>, and <strong>SLES</strong> all meet this requirement.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="operating-systems">Operating Systems<a href="#operating-systems" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s is expected to work on most modern Linux systems.</p><p>Some OSs have specific requirements:</p><ul><li>If you are using <strong>(Red Hat/CentOS) Enterprise Linux</strong>, follow <a href="/kr/advanced#red-hat-enterprise-linux--centos">these steps</a> for additional setup.</li><li>If you are using <strong>Raspberry Pi OS</strong>, follow <a href="/kr/advanced#raspberry-pi">these steps</a> to switch to legacy iptables.</li></ul><p>For more information on which OSs were tested with Rancher managed K3s clusters, refer to the <a href="https://rancher.com/support-maintenance-terms/" target="_blank" rel="noopener noreferrer">Rancher support and maintenance terms.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="hardware">Hardware<a href="#hardware" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here.</p><table><thead><tr><th>Spec</th><th>Minimum</th><th>Recommended</th></tr></thead><tbody><tr><td>CPU</td><td>1 core</td><td>2 cores</td></tr><tr><td>RAM</td><td>512 MB</td><td>1 GB</td></tr></tbody></table><p><a href="/kr/reference/resource-profiling">Resource Profiling</a> captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="disks">Disks<a href="#disks" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The K3s server needs port 6443 to be accessible by all nodes.</p><p>The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s.</p><p>If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250.</p><p>If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>Important</div><div class="admonitionContent_S0QG"><p>The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.</p></div></div><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>위험</div><div class="admonitionContent_S0QG"><p>Flannel relies on the <a href="https://www.cni.dev/plugins/current/main/bridge/" target="_blank" rel="noopener noreferrer">Bridge CNI plugin</a> to create a L2 network that switches traffic. Rogue pods with <code>NET_RAW</code> capabilities can abuse that L2 network to launch attacks such as <a href="https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf" target="_blank" rel="noopener noreferrer">ARP spoofing</a>. Therefore, as documented in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">Kubernetes docs</a>, please set a restricted profile that disables <code>NET_RAW</code> on non-trustable pods.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="inbound-rules-for-k3s-server-nodes">Inbound Rules for K3s Server Nodes<a href="#inbound-rules-for-k3s-server-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Protocol</th><th>Port</th><th>Source</th><th>Destination</th><th>Description</th></tr></thead><tbody><tr><td>TCP</td><td>2379-2380</td><td>Servers</td><td>Servers</td><td>Required only for HA with embedded etcd</td></tr><tr><td>TCP</td><td>6443</td><td>Agents</td><td>Servers</td><td>K3s supervisor and Kubernetes API Server</td></tr><tr><td>UDP</td><td>8472</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel VXLAN</td></tr><tr><td>TCP</td><td>10250</td><td>All nodes</td><td>All nodes</td><td>Kubelet metrics</td></tr><tr><td>UDP</td><td>51820</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv4</td></tr><tr><td>UDP</td><td>51821</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv6</td></tr></tbody></table><p>Typically, all outbound traffic is allowed.</p><p>Additional changes to the firewall may be required depending on the OS used. See <a href="/kr/advanced#additional-os-preparations">Additional OS Preparations</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="large-clusters">Large Clusters<a href="#large-clusters" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:</p><ul><li>MySQL</li><li>PostgreSQL</li><li>etcd</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cpu-and-memory">CPU and Memory<a href="#cpu-and-memory" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">2</td><td align="center">4 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">4</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">8</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">16</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">32</td><td align="center">64 GB</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="disks-1">Disks<a href="#disks-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="network">Network<a href="#network" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You should consider increasing the subnet size for the cluster CIDR so that you don&#x27;t run out of IPs for the pods. You can do that by passing the <code>--cluster-cidr</code> option to K3s server upon starting.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd, the following is a sizing guide for the database resources you need to run large clusters:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">1</td><td align="center">2 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">2</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">4</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">8</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">16</td><td align="center">64 GB</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">설치</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/configuration"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Configuration Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#architecture" class="table-of-contents__link toc-highlight">Architecture</a></li><li><a href="#operating-systems" class="table-of-contents__link toc-highlight">Operating Systems</a></li><li><a href="#hardware" class="table-of-contents__link toc-highlight">Hardware</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a><ul><li><a href="#inbound-rules-for-k3s-server-nodes" class="table-of-contents__link toc-highlight">Inbound Rules for K3s Server Nodes</a></li></ul></li><li><a href="#large-clusters" class="table-of-contents__link toc-highlight">Large Clusters</a><ul><li><a href="#cpu-and-memory" class="table-of-contents__link toc-highlight">CPU and Memory</a></li><li><a href="#disks-1" class="table-of-contents__link toc-highlight">Disks</a></li><li><a href="#network" class="table-of-contents__link toc-highlight">Network</a></li><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Requirements</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Requirements</h1></header><p>K3s is very lightweight, but has some minimum requirements as outlined below.</p><p>Whether you&#x27;re configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="prerequisites">Prerequisites<a href="#prerequisites" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Two nodes cannot have the same hostname.</p><p>If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the <code>--with-node-id</code> option to append a random suffix for each node, or devise a unique name to pass with <code>--node-name</code> or <code>$K3S_NODE_NAME</code> for each node you add to the cluster.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="architecture">Architecture<a href="#architecture" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s is available for the following architectures:</p><ul><li>x86_64</li><li>armhf</li><li>arm64/aarch64</li><li>s390x</li></ul><p>On <code>aarch64/arm64</code> systems, the OS must use a 4k page size. <strong>RHEL9</strong>, <strong>Ubuntu</strong>, and <strong>SLES</strong> all meet this requirement.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="operating-systems">Operating Systems<a href="#operating-systems" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s is expected to work on most modern Linux systems.</p><p>Some OSs have specific requirements:</p><ul><li>If you are using <strong>(Red Hat/CentOS) Enterprise Linux</strong>, follow <a href="/kr/advanced#red-hat-enterprise-linux--centos">these steps</a> for additional setup.</li><li>If you are using <strong>Raspberry Pi OS</strong>, follow <a href="/kr/advanced#raspberry-pi">these steps</a> to switch to legacy iptables.</li></ul><p>For more information on which OSs were tested with Rancher managed K3s clusters, refer to the <a href="https://rancher.com/support-maintenance-terms/" target="_blank" rel="noopener noreferrer">Rancher support and maintenance terms.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="hardware">Hardware<a href="#hardware" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here.</p><table><thead><tr><th>Spec</th><th>Minimum</th><th>Recommended</th></tr></thead><tbody><tr><td>CPU</td><td>1 core</td><td>2 cores</td></tr><tr><td>RAM</td><td>512 MB</td><td>1 GB</td></tr></tbody></table><p><a href="/kr/reference/resource-profiling">Resource Profiling</a> captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="disks">Disks<a href="#disks" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="networking">Networking<a href="#networking" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The K3s server needs port 6443 to be accessible by all nodes.</p><p>The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s.</p><p>If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250.</p><p>If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>Important</div><div class="admonitionContent_S0QG"><p>The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472.</p></div></div><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>위험</div><div class="admonitionContent_S0QG"><p>Flannel relies on the <a href="https://www.cni.dev/plugins/current/main/bridge/" target="_blank" rel="noopener noreferrer">Bridge CNI plugin</a> to create a L2 network that switches traffic. Rogue pods with <code>NET_RAW</code> capabilities can abuse that L2 network to launch attacks such as <a href="https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf" target="_blank" rel="noopener noreferrer">ARP spoofing</a>. Therefore, as documented in the <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">Kubernetes docs</a>, please set a restricted profile that disables <code>NET_RAW</code> on non-trustable pods.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="inbound-rules-for-k3s-server-nodes">Inbound Rules for K3s Server Nodes<a href="#inbound-rules-for-k3s-server-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><table><thead><tr><th>Protocol</th><th>Port</th><th>Source</th><th>Destination</th><th>Description</th></tr></thead><tbody><tr><td>TCP</td><td>2379-2380</td><td>Servers</td><td>Servers</td><td>Required only for HA with embedded etcd</td></tr><tr><td>TCP</td><td>6443</td><td>Agents</td><td>Servers</td><td>K3s supervisor and Kubernetes API Server</td></tr><tr><td>UDP</td><td>8472</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel VXLAN</td></tr><tr><td>TCP</td><td>10250</td><td>All nodes</td><td>All nodes</td><td>Kubelet metrics</td></tr><tr><td>UDP</td><td>51820</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv4</td></tr><tr><td>UDP</td><td>51821</td><td>All nodes</td><td>All nodes</td><td>Required only for Flannel Wireguard with IPv6</td></tr></tbody></table><p>Typically, all outbound traffic is allowed.</p><p>Additional changes to the firewall may be required depending on the OS used. See <a href="/kr/advanced#additional-os-preparations">Additional OS Preparations</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="large-clusters">Large Clusters<a href="#large-clusters" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production:</p><ul><li>MySQL</li><li>PostgreSQL</li><li>etcd</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cpu-and-memory">CPU and Memory<a href="#cpu-and-memory" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">2</td><td align="center">4 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">4</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">8</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">16</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">32</td><td align="center">64 GB</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="disks-1">Disks<a href="#disks-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="network">Network<a href="#network" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You should consider increasing the subnet size for the cluster CIDR so that you don&#x27;t run out of IPs for the pods. You can do that by passing the <code>--cluster-cidr</code> option to K3s server upon starting.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="database">Database<a href="#database" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd, the following is a sizing guide for the database resources you need to run large clusters:</p><table><thead><tr><th align="center">Deployment Size</th><th align="center">Nodes</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">1</td><td align="center">2 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">2</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">4</td><td align="center">16 GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">8</td><td align="center">32 GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">16</td><td align="center">64 GB</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">설치</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/configuration"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Configuration Options</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#prerequisites" class="table-of-contents__link toc-highlight">Prerequisites</a></li><li><a href="#architecture" class="table-of-contents__link toc-highlight">Architecture</a></li><li><a href="#operating-systems" class="table-of-contents__link toc-highlight">Operating Systems</a></li><li><a href="#hardware" class="table-of-contents__link toc-highlight">Hardware</a></li><li><a href="#networking" class="table-of-contents__link toc-highlight">Networking</a><ul><li><a href="#inbound-rules-for-k3s-server-nodes" class="table-of-contents__link toc-highlight">Inbound Rules for K3s Server Nodes</a></li></ul></li><li><a href="#large-clusters" class="table-of-contents__link toc-highlight">Large Clusters</a><ul><li><a href="#cpu-and-memory" class="table-of-contents__link toc-highlight">CPU and Memory</a></li><li><a href="#disks-1" class="table-of-contents__link toc-highlight">Disks</a></li><li><a href="#network" class="table-of-contents__link toc-highlight">Network</a></li><li><a href="#database" class="table-of-contents__link toc-highlight">Database</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/server-roles.html b/kr/installation/server-roles.html
index ebb108df5..8b65f709e 100644
--- a/kr/installation/server-roles.html
+++ b/kr/installation/server-roles.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Managing Server Roles | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/server-roles"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Server Roles | K3s"><meta data-rh="true" name="description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><meta data-rh="true" property="og:description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/server-roles"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/server-roles" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/server-roles" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Managing Server Roles | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/server-roles"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Managing Server Roles | K3s"><meta data-rh="true" name="description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><meta data-rh="true" property="og:description" content="Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/server-roles"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/server-roles" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/server-roles" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Server Roles</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Server Roles</h1></header><p>Starting the K3s server with <code>--cluster-init</code> will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-etcd-nodes">Dedicated <code>etcd</code> Nodes<a href="#dedicated-etcd-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>To create a server with only the <code>etcd</code> role, start K3s with all the control-plane components disabled:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This first node will start etcd, and wait for additional <code>etcd</code> and/or <code>control-plane</code> nodes to join. The cluster will not be usable until you join an additional server with the <code>control-plane</code> components enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-control-plane-nodes">Dedicated <code>control-plane</code> Nodes<a href="#dedicated-control-plane-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>A dedicated <code>control-plane</code> node cannot be the first server in the cluster; there must be an existing node with the <code>etcd</code> role before joining dedicated <code>control-plane</code> nodes.</p></div></div><p>To create a server with only the <code>control-plane</code> role, start k3s with etcd disabled:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --token </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">token</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --disable-etcd --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">etcd-only-node</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After creating dedicated server nodes, the selected roles will be visible in <code>kubectl get node</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME           STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-roles-to-existing-servers">Adding Roles To Existing Servers<a href="#adding-roles-to-existing-servers" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the <code>control-plane</code> role to a dedicated <code>etcd</code> node, you can remove the <code>--disable-apiserver --disable-controller-manager --disable-scheduler</code> flags from the systemd unit or config file, and restart the service.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file-syntax">Configuration File Syntax<a href="#configuration-file-syntax" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>As with all other CLI flags, you can use the  <a href="/kr/installation/configuration#configuration-file">Configuration File</a> to disable components, instead of passing the options as CLI flags. For example, to create a dedicated <code>etcd</code> node, you can place the following values in <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-apiserver</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-controller-manager</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-scheduler</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/airgap"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Air-Gap Install</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/packaged-components"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Managing Packaged Components</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#dedicated-etcd-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>etcd</code> Nodes</a></li><li><a href="#dedicated-control-plane-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>control-plane</code> Nodes</a></li><li><a href="#adding-roles-to-existing-servers" class="table-of-contents__link toc-highlight">Adding Roles To Existing Servers</a></li><li><a href="#configuration-file-syntax" class="table-of-contents__link toc-highlight">Configuration File Syntax</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Managing Server Roles</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Managing Server Roles</h1></header><p>Starting the K3s server with <code>--cluster-init</code> will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-etcd-nodes">Dedicated <code>etcd</code> Nodes<a href="#dedicated-etcd-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>To create a server with only the <code>etcd</code> role, start K3s with all the control-plane components disabled:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This first node will start etcd, and wait for additional <code>etcd</code> and/or <code>control-plane</code> nodes to join. The cluster will not be usable until you join an additional server with the <code>control-plane</code> components enabled.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="dedicated-control-plane-nodes">Dedicated <code>control-plane</code> Nodes<a href="#dedicated-control-plane-nodes" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>A dedicated <code>control-plane</code> node cannot be the first server in the cluster; there must be an existing node with the <code>etcd</code> role before joining dedicated <code>control-plane</code> nodes.</p></div></div><p>To create a server with only the <code>control-plane</code> role, start k3s with etcd disabled:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --token </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">token</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --disable-etcd --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">etcd-only-node</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After creating dedicated server nodes, the selected roles will be visible in <code>kubectl get node</code>:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME           STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="adding-roles-to-existing-servers">Adding Roles To Existing Servers<a href="#adding-roles-to-existing-servers" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the <code>control-plane</code> role to a dedicated <code>etcd</code> node, you can remove the <code>--disable-apiserver --disable-controller-manager --disable-scheduler</code> flags from the systemd unit or config file, and restart the service.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-file-syntax">Configuration File Syntax<a href="#configuration-file-syntax" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>As with all other CLI flags, you can use the  <a href="/kr/installation/configuration#configuration-file">Configuration File</a> to disable components, instead of passing the options as CLI flags. For example, to create a dedicated <code>etcd</code> node, you can place the following values in <code>/etc/rancher/k3s/config.yaml</code>:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-apiserver</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-controller-manager</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-scheduler</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/airgap"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Air-Gap Install</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation/packaged-components"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Managing Packaged Components</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#dedicated-etcd-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>etcd</code> Nodes</a></li><li><a href="#dedicated-control-plane-nodes" class="table-of-contents__link toc-highlight">Dedicated <code>control-plane</code> Nodes</a></li><li><a href="#adding-roles-to-existing-servers" class="table-of-contents__link toc-highlight">Adding Roles To Existing Servers</a></li><li><a href="#configuration-file-syntax" class="table-of-contents__link toc-highlight">Configuration File Syntax</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/installation/uninstall.html b/kr/installation/uninstall.html
index 1b6ebdadf..2122dd210 100644
--- a/kr/installation/uninstall.html
+++ b/kr/installation/uninstall.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Uninstalling K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/uninstall"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Uninstalling K3s | K3s"><meta data-rh="true" name="description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><meta data-rh="true" property="og:description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/uninstall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/uninstall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/uninstall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Uninstalling K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/installation/uninstall"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Uninstalling K3s | K3s"><meta data-rh="true" name="description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><meta data-rh="true" property="og:description" content="Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/installation/uninstall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/uninstall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/uninstall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Uninstalling K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Uninstalling K3s</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.<br>
-<!-- -->It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.</p></div></div><p>If you installed K3s using the installation script, a script to uninstall K3s was generated during installation.</p><p>If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the <a href="/kr/architecture#how-agent-node-registration-works">Node Registration</a> documentation for more information.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-servers">Uninstalling Servers<a href="#uninstalling-servers" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To uninstall K3s from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-agents">Uninstalling Agents<a href="#uninstalling-agents" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To uninstall K3s from an agent node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-agent-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/kube-dashboard"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">클러스터 데이터 저장소</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#uninstalling-servers" class="table-of-contents__link toc-highlight">Uninstalling Servers</a></li><li><a href="#uninstalling-agents" class="table-of-contents__link toc-highlight">Uninstalling Agents</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/requirements">Requirements</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/configuration">Configuration Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/network-options">Network Options</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/private-registry">Private Registry Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/airgap">Air-Gap Install</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/server-roles">Managing Server Roles</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/packaged-components">Managing Packaged Components</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/installation/kube-dashboard">Kubernetes Dashboard</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/installation/uninstall">Uninstalling K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/installation"><span itemprop="name">설치</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Uninstalling K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Uninstalling K3s</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools.<br>
+<!-- -->It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes.</p></div></div><p>If you installed K3s using the installation script, a script to uninstall K3s was generated during installation.</p><p>If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the <a href="/kr/architecture#how-agent-node-registration-works">Node Registration</a> documentation for more information.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-servers">Uninstalling Servers<a href="#uninstalling-servers" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To uninstall K3s from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="uninstalling-agents">Uninstalling Agents<a href="#uninstalling-agents" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To uninstall K3s from an agent node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-agent-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/installation/kube-dashboard"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Kubernetes Dashboard</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/datastore"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">클러스터 데이터 저장소</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#uninstalling-servers" class="table-of-contents__link toc-highlight">Uninstalling Servers</a></li><li><a href="#uninstalling-agents" class="table-of-contents__link toc-highlight">Uninstalling Agents</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/known-issues.html b/kr/known-issues.html
index db3255f37..dc0138abd 100644
--- a/kr/known-issues.html
+++ b/kr/known-issues.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">알려진 이슈 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/known-issues"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="알려진 이슈 | K3s"><meta data-rh="true" name="description" content="알려진 이슈는 주기적으로 업데이트되며, 다음 릴리스에서 즉시 해결되지 않을 수 있는 문제에 대해 알려드리기 위해 고안되었습니다."><meta data-rh="true" property="og:description" content="알려진 이슈는 주기적으로 업데이트되며, 다음 릴리스에서 즉시 해결되지 않을 수 있는 문제에 대해 알려드리기 위해 고안되었습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/known-issues"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/known-issues" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/known-issues" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">알려진 이슈 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/known-issues"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="알려진 이슈 | K3s"><meta data-rh="true" name="description" content="알려진 이슈는 주기적으로 업데이트되며, 다음 릴리스에서 즉시 해결되지 않을 수 있는 문제에 대해 알려드리기 위해 고안되었습니다."><meta data-rh="true" property="og:description" content="알려진 이슈는 주기적으로 업데이트되며, 다음 릴리스에서 즉시 해결되지 않을 수 있는 문제에 대해 알려드리기 위해 고안되었습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/known-issues"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/known-issues" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/known-issues" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">알려진 이슈</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>알려진 이슈</h1></header><p>알려진 이슈는 주기적으로 업데이트되며, 다음 릴리스에서 즉시 해결되지 않을 수 있는 문제에 대해 알려드리기 위해 고안되었습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="스냅snap-도커">스냅(Snap) 도커<a href="#스냅snap-도커" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>스냅(Snap) 패키지를 통해 설치된 도커는 K3s를 실행하는 데 문제를 일으키는 것으로 알려져 있으므로 K3s와 함께 사용하려는 경우 권장하지 않습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="iptables">Iptables<a href="#iptables" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>레거시 대신 nftables 모드에서 iptables를 실행하는 경우 문제가 발생할 수 있습니다. 문제를 방지하려면 최신 버전(예: 1.6.1+)의 iptables를 사용하는 것이 좋습니다.</p><p>또한 1.8.0-1.8.4 버전에는 K3s가 실패할 수 있는 알려진 문제가 있습니다. 해결 방법은 <a href="/kr/advanced#old-iptables-versions">추가 OS 준비</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rootless-mode">Rootless Mode<a href="#rootless-mode" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>루트리스 모드로 K3s를 실행하는 것은 실험 중이며 몇 가지 <a href="/kr/advanced#known-issues-with-rootless-mode">알려진 이슈</a>가 있습니다.</p><h1>강화된(Hardened) 클러스터를 v1.24.x에서 v1.25.x로 업그레이드하기</h1><p>쿠버네티스는 파드 보안 표준(PSS, Pod Security Standards)을 위해 v1.25에서 PodSecurityPolicy를 제거했습니다. PSS에 대한 자세한 내용은 <a href="https://kubernetes.io/ko/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">업스트림 문서</a>에서 확인할 수 있습니다. K3S의 경우, 노드에 &#x27;PodSecurityPolicy&#x27;가 구성된 경우 수행해야 하는 몇 가지 수동 단계가 있습니다.</p><ol><li>모든 노드에서 <code>kube-apiserver-arg</code> 값을 업데이트하여 <code>PodSecurityPolicy</code> 어드미션 플러그인을 제거합니다. 대신 다음 arg 값을 추가합니다: <code>&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</code> 이지만, 아직 K3S를 재시작하거나 업그레이드하지 마십시오. 아래는 노드를 강화한 후 구성 파일의 예시입니다.</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-maxage=30&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-maxbackup=10&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-maxsize=100&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;request-timeout=300s&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;service-account-lookup=true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;terminated-pod-gc-threshold=10&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;use-service-account-credentials=true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;streaming-connection-idle-timeout=5m&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;make-iptables-util-chains=true&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="2"><li><code>/var/lib/rancher/k3s/server/psa.yaml</code> 파일을 다음 내용으로 작성합니다. 더 많은 네임스페이스를 제외할 수도 있습니다. 아래 예시는 <code>kube-system</code>(필수), <code>cis-operator-system</code>(선택적이지만 Rancher를 통해 보안 스캔을 실행할 때 유용), <code>system-upgrade</code>(자동 업그레이드를 수행하는 경우 필수)을 제외합니다.</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="3"><li>일반적으로 업그레이드를 수행합니다. <a href="/kr/upgrades/automated">자동 업그레이드</a>를 수행하는 경우 <code>system-upgrade-controller</code>가 실행되는 네임스페이스가 <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels" target="_blank" rel="noopener noreferrer">파드 보안 수준</a>에 따라 권한이 부여된 것으로 설정되었는지 확인합니다.</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">labels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># This value must be privileged for the controller to run successfully.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>업그레이드가 완료된 후, 클러스터에서 남아있는 모든 PSP 리소스를 제거합니다. 대부분의 경우, <code>/var/lib/rancher/k3s/server/manifests/</code> 내부에서 강화를 위해 사용된 사용자 정의 파일에는 PodSecurityPolicies 및 관련 RBAC 리소스가 있을 수 있습니다. 이러한 리소스를 제거하면 k3s가 자동으로 업데이트됩니다. 때때로 시간이 지난 후에 이러한 리소스가 클러스터에 남아있을 수 있으므로 수동으로 삭제해야 합니다. 이전에 <a href="/kr/security/hardening-guide">강화 가이드</a>를 따르면 다음과 같이 삭제할 수 있습니다:</li></ol><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Get the resources associated with PSPs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Delete those resources:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding &amp;&amp; kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/reference/resource-profiling"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Resource Profiling</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">보안</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#스냅snap-도커" class="table-of-contents__link toc-highlight">스냅(Snap) 도커</a></li><li><a href="#iptables" class="table-of-contents__link toc-highlight">Iptables</a></li><li><a href="#rootless-mode" class="table-of-contents__link toc-highlight">Rootless Mode</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">알려진 이슈</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>알려진 이슈</h1></header><p>알려진 이슈는 주기적으로 업데이트되며, 다음 릴리스에서 즉시 해결되지 않을 수 있는 문제에 대해 알려드리기 위해 고안되었습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="스냅snap-도커">스냅(Snap) 도커<a href="#스냅snap-도커" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>스냅(Snap) 패키지를 통해 설치된 도커는 K3s를 실행하는 데 문제를 일으키는 것으로 알려져 있으므로 K3s와 함께 사용하려는 경우 권장하지 않습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="iptables">Iptables<a href="#iptables" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>레거시 대신 nftables 모드에서 iptables를 실행하는 경우 문제가 발생할 수 있습니다. 문제를 방지하려면 최신 버전(예: 1.6.1+)의 iptables를 사용하는 것이 좋습니다.</p><p>또한 1.8.0-1.8.4 버전에는 K3s가 실패할 수 있는 알려진 문제가 있습니다. 해결 방법은 <a href="/kr/advanced#old-iptables-versions">추가 OS 준비</a>를 참조하세요.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rootless-mode">Rootless Mode<a href="#rootless-mode" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>루트리스 모드로 K3s를 실행하는 것은 실험 중이며 몇 가지 <a href="/kr/advanced#known-issues-with-rootless-mode">알려진 이슈</a>가 있습니다.</p><h1>강화된(Hardened) 클러스터를 v1.24.x에서 v1.25.x로 업그레이드하기</h1><p>쿠버네티스는 파드 보안 표준(PSS, Pod Security Standards)을 위해 v1.25에서 PodSecurityPolicy를 제거했습니다. PSS에 대한 자세한 내용은 <a href="https://kubernetes.io/ko/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">업스트림 문서</a>에서 확인할 수 있습니다. K3S의 경우, 노드에 &#x27;PodSecurityPolicy&#x27;가 구성된 경우 수행해야 하는 몇 가지 수동 단계가 있습니다.</p><ol><li>모든 노드에서 <code>kube-apiserver-arg</code> 값을 업데이트하여 <code>PodSecurityPolicy</code> 어드미션 플러그인을 제거합니다. 대신 다음 arg 값을 추가합니다: <code>&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</code> 이지만, 아직 K3S를 재시작하거나 업그레이드하지 마십시오. 아래는 노드를 강화한 후 구성 파일의 예시입니다.</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-maxage=30&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-maxbackup=10&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;audit-log-maxsize=100&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;request-timeout=300s&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;service-account-lookup=true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;terminated-pod-gc-threshold=10&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;use-service-account-credentials=true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;streaming-connection-idle-timeout=5m&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;make-iptables-util-chains=true&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="2"><li><code>/var/lib/rancher/k3s/server/psa.yaml</code> 파일을 다음 내용으로 작성합니다. 더 많은 네임스페이스를 제외할 수도 있습니다. 아래 예시는 <code>kube-system</code>(필수), <code>cis-operator-system</code>(선택적이지만 Rancher를 통해 보안 스캔을 실행할 때 유용), <code>system-upgrade</code>(자동 업그레이드를 수행하는 경우 필수)을 제외합니다.</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="3"><li>일반적으로 업그레이드를 수행합니다. <a href="/kr/upgrades/automated">자동 업그레이드</a>를 수행하는 경우 <code>system-upgrade-controller</code>가 실행되는 네임스페이스가 <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels" target="_blank" rel="noopener noreferrer">파드 보안 수준</a>에 따라 권한이 부여된 것으로 설정되었는지 확인합니다.</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">labels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># This value must be privileged for the controller to run successfully.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>업그레이드가 완료된 후, 클러스터에서 남아있는 모든 PSP 리소스를 제거합니다. 대부분의 경우, <code>/var/lib/rancher/k3s/server/manifests/</code> 내부에서 강화를 위해 사용된 사용자 정의 파일에는 PodSecurityPolicies 및 관련 RBAC 리소스가 있을 수 있습니다. 이러한 리소스를 제거하면 k3s가 자동으로 업데이트됩니다. 때때로 시간이 지난 후에 이러한 리소스가 클러스터에 남아있을 수 있으므로 수동으로 삭제해야 합니다. 이전에 <a href="/kr/security/hardening-guide">강화 가이드</a>를 따르면 다음과 같이 삭제할 수 있습니다:</li></ol><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Get the resources associated with PSPs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"># Delete those resources:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding &amp;&amp; kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/reference/resource-profiling"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Resource Profiling</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">보안</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#스냅snap-도커" class="table-of-contents__link toc-highlight">스냅(Snap) 도커</a></li><li><a href="#iptables" class="table-of-contents__link toc-highlight">Iptables</a></li><li><a href="#rootless-mode" class="table-of-contents__link toc-highlight">Rootless Mode</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/networking.html b/kr/networking.html
index e653dd606..9681bca0d 100644
--- a/kr/networking.html
+++ b/kr/networking.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">네트워킹 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/networking"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="네트워킹 | K3s"><meta data-rh="true" name="description" content="이 페이지는 CoreDNS, Traefik 인그레스 컨트롤러, Klipper 서비스 로드밸런서가 K3s 내에서 작동하는 방식을 설명합니다."><meta data-rh="true" property="og:description" content="이 페이지는 CoreDNS, Traefik 인그레스 컨트롤러, Klipper 서비스 로드밸런서가 K3s 내에서 작동하는 방식을 설명합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/networking"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/networking" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/networking" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">네트워킹 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/networking"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="네트워킹 | K3s"><meta data-rh="true" name="description" content="이 페이지는 CoreDNS, Traefik 인그레스 컨트롤러, Klipper 서비스 로드밸런서가 K3s 내에서 작동하는 방식을 설명합니다."><meta data-rh="true" property="og:description" content="이 페이지는 CoreDNS, Traefik 인그레스 컨트롤러, Klipper 서비스 로드밸런서가 K3s 내에서 작동하는 방식을 설명합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/networking"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/networking" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/networking" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/networking" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">네트워킹</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>네트워킹</h1></header><p>이 페이지는 CoreDNS, Traefik 인그레스 컨트롤러, Klipper 서비스 로드밸런서가 K3s 내에서 작동하는 방식을 설명합니다.</p><p>Flannel 구성 옵션 및 백엔드 선택에 대한 자세한 내용이나 자체 CNI 설정 방법은 <a href="/kr/installation/network-options">설치 네트워크 옵션</a> 페이지를 참조하세요.</p><p>K3s를 위해 어떤 포트를 열어야 하는지에 대한 정보는 <a href="/kr/installation/requirements#networking">네트워킹 요구 사항</a>을 참조하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="coredns">CoreDNS<a href="#coredns" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>CoreDNS는 서버 시작 시 자동으로 배포됩니다. 사용하지 않으려면 클러스터의 모든 서버에 <code>--disable=coredns</code> 옵션을 사용하여 구성합니다.</p><p>CoreDNS를 설치하지 않은 경우 클러스터 DNS 공급자를 직접 설치해야 합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-인그레스-컨트롤러">Traefik 인그레스 컨트롤러<a href="#traefik-인그레스-컨트롤러" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p><a href="https://traefik.io/" target="_blank" rel="noopener noreferrer">Traefik</a>은 마이크로서비스를 쉽게 배포할 수 있도록 만들어진 최신 HTTP 역방향 프록시 및 로드밸런서입니다. 애플리케이션을 설계, 배포 및 실행하는 동안 네트워킹 복잡성을 단순화합니다.</p><p>Traefik 인그레스 컨트롤러는 포트 80과 443을 사용하는 로드밸런서 서비스를 배포합니다. 기본적으로 ServiceLB는 모든 클러스터 멤버에 이러한 포트를 노출하므로 다른 HostPort 또는 NodePort 파드에서는 이러한 포트를 사용할 수 없습니다.</p><p>서버를 시작할 때 기본적으로 Traefik이 배포됩니다. 자세한 내용은 <a href="/kr/installation/packaged-components">패키지 컴포넌트 관리</a>를 참고하세요. 기본 설정 파일은 <code>/var/lib/rancher/k3s/server/manifests/traefik.yaml</code>에 있습니다.</p><p>K3s가 시작할 때 이 파일을 기본값으로 대체하므로 <code>traefik.yaml</code> 파일을 수동으로 편집해서는 안 됩니다. 대신, <code>/var/lib/rancher/k3s/server/manifests</code>에 <code>HelmChartConfig</code> 매니페스트를 추가로 생성하여 Traefik을 사용자 정의해야 합니다. 자세한 내용과 예제는 <a href="/kr/helm#customizing-packaged-components-with-helmchartconfig">HelmChartConfig 패키지 컴포넌트 커스터마이징</a>을 참고하세요. 사용 가능한 구성 값에 대한 자세한 내용은 공식 <a href="https://github.com/traefik/traefik-helm-chart/tree/master/traefik" target="_blank" rel="noopener noreferrer">Traefik 헬름 구성 매개변수</a>를 참고하세요.</p><p>클러스터에서 Traefik을 제거하려면 <code>--disable=traefik</code> 플래그를 사용하여 모든 서버를 시작합니다.</p><p>K3s 버전 1.20 이하에는 Traefik v1이 포함됩니다. K3s 버전 1.21 이상은 기존에 설치된 Traefik v1이 발견되지 않는 한 Traefik v2를 설치하며, 이 경우 Traefik은 v2로 업그레이드되지 않습니다. K3s에 포함된 특정 Traefik 버전에 대한 자세한 내용은 해당 버전의 릴리스 노트를 참조하세요.</p><p>이전 Traefik v1 인스턴스에서 마이그레이션하려면 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 문서</a> 및 <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">마이그레이션 도구</a>를 참조하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="네트워크-정책-컨트롤러-network-policy-controller">네트워크 정책 컨트롤러 (Network Policy Controller)<a href="#네트워크-정책-컨트롤러-network-policy-controller" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s에는 임베디드 네트워크 정책 컨트롤러가 포함되어 있습니다. 기본 구현은 <a href="https://github.com/cloudnativelabs/kube-router" target="_blank" rel="noopener noreferrer">kube-router의</a> netpol 컨트롤러 라이브러리이며(다른 kube-router 기능은 없음), <a href="https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol" target="_blank" rel="noopener noreferrer">여기</a>에서 확인할 수 있습니다.</p><p>비활성화하려면, 각 서버를 <code>--disable-network-policy</code> 플래그로 시작합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="서비스-로드밸런서">서비스 로드밸런서<a href="#서비스-로드밸런서" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s 클러스터에는 모든 LoadBalancer 컨트롤러를 배포할 수 있습니다. 기본적으로 K3s는 사용 가능한 호스트 포트를 사용하는 <a href="https://github.com/k3s-io/klipper-lb" target="_blank" rel="noopener noreferrer">ServiceLB</a>(이전의 Klipper LoadBalancer)로 알려진 로드밸런서를 제공합니다.</p><p>업스트림 쿠버네티스는 로드밸런서 유형의 서비스를 생성할 수 있지만 기본 로드밸런서 구현은 포함되어 있지 않으므로 이러한 서비스는 로드밸런서가 설치될 때까지 <code>pending</code>으로 유지됩니다. 많은 호스팅 서비스는 외부 로드 밸런서 구현을 제공하기 위해 Amazon EC2 또는 Microsoft Azure와 같은 클라우드 제공업체가 필요합니다. 반면, K3s ServiceLB를 사용하면 클라우드 제공업체나 추가 구성 없이도 로드밸런서 서비스를 사용할 수 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-작동-방식">ServiceLB 작동 방식<a href="#servicelb-작동-방식" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>ServiceLB 컨트롤러는 <code>spec.type</code> 필드가 <code>LoadBalancer</code>로 설정된 쿠버네티스 <a href="https://kubernetes.io/ko/docs/concepts/services-networking/service/" target="_blank" rel="noopener noreferrer">서비스</a>를 감시합니다.</p><p>각 로드밸런서 서비스마다 <code>kube-system</code> 네임스페이스에 <a href="https://kubernetes.io/ko/docs/concepts/workloads/controllers/daemonset/" target="_blank" rel="noopener noreferrer">데몬셋</a>이 생성된다. 이 데몬셋은 차례로 각 노드에 <code>svc-</code> 접두사를 가진 파드를 생성합니다. 이러한 파드는 아이피테이블을 사용하여 파드의 노드포트에서 서비스의 클러스터IP 주소와 포트로 트래픽을 전달합니다.</p><p>외부 IP가 구성된 노드에서 ServiceLB 파드가 실행되는 경우, 노드의 외부 IP가 서비스의 <code>status.loadBalancer.ingress</code> 주소 목록에 채워집니다. 그렇지 않으면 노드의 내부 IP가 사용됩니다.</p><p>로드밸런서 서비스가 여러 개 생성된 경우, 각 서비스마다 별도의 데몬셋이 생성됩니다.</p><p>서로 다른 포트를 사용한다면 동일한 노드에 여러 개의 서비스를 노출할 수 있습니다.</p><p>포트 80에서 수신 대기하는 로드밸런서 서비스를 생성하려고 하면 ServiceLB는 클러스터에서 포트 80에 대한 사용 가능한 호스트를 찾으려고 시도합니다. 해당 포트를 사용할 수 있는 호스트가 없는 경우, LB는 보류 상태로 유지됩니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="사용법">사용법<a href="#사용법" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s에 <a href="https://kubernetes.io/ko/docs/concepts/services-networking/service/#loadbalancer" target="_blank" rel="noopener noreferrer">LoadBalancer 타입의 서비스</a>를 생성합니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-노드-선택-제어하기">ServiceLB 노드 선택 제어하기<a href="#servicelb-노드-선택-제어하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>하나 이상의 노드에 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 레이블을 추가하면 ServiceLB 컨트롤러가 허용 목록 모드로 전환되며, 해당 레이블이 있는 노드만 LoadBalancer 파드를 호스트할 수 있습니다. 레이블이 없는 노드는 ServiceLB에서 사용에서 제외됩니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>기본적으로 노드에는 레이블이 지정되지 않습니다. 모든 노드가 레이블이 지정되지 않은 상태로 유지되는 한, 사용 가능한 포트가 있는 모든 노드가 ServiceLB에서 사용됩니다.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-노드-풀-생성하기">ServiceLB 노드 풀 생성하기<a href="#servicelb-노드-풀-생성하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>로드밸런서의 파드를 호스팅할 특정 노드 하위 집합을 선택하려면 원하는 노드에 <code>enablelb</code> 레이블을 추가하고 노드 및 서비스에서 일치하는 <code>lbpool</code> 레이블 값을 설정합니다. 예를 들면 다음과 같습니다:</p><ol><li>노드 A와 노드 B에 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 및 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 레이블을 지정합니다.</li><li>노드 C와 노드 D에 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 및 <code>svccontroller.k3s.cattle.io/enablelb=true</code>로 레이블을 지정합니다.</li><li>포트 443에 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 레이블을 가진 하나의 LoadBalancer 서비스를 생성합니다. 이 서비스에 대한 데몬셋은 노드 A와 노드 B에만 파드를 배포합니다.</li><li>포트 443에 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 레이블을 가진 다른 로드밸런서 서비스를 생성합니다. 데몬셋은 노드 C와 노드 D에만 파드를 배포합니다.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-비활성화">ServiceLB 비활성화<a href="#servicelb-비활성화" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>ServiceLB를 비활성화하려면, 클러스터의 모든 서버에 <code>--disable=servicelb</code> 플래그를 사용하여 구성한다.</p><p>이 설정은 MetalLB와 같은 다른 LB를 실행하려는 경우에 필요합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="외부-클라우드-컨트롤러-매니저-배포하기">외부 클라우드 컨트롤러 매니저 배포하기<a href="#외부-클라우드-컨트롤러-매니저-배포하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>바이너리 크기를 줄이기 위해 K3s는 모든 &quot;인-트리&quot;(빌트인) 클라우드 제공자를 제거합니다. 대신, K3s는 다음을 수행하는 임베디드 클라우드 컨트롤러 관리자(CCM, Cloud Controller Manager) 스텁을 제공합니다:</p><ul><li>노드 내부IP 및 외부IP 주소 필드를 <code>--node-ip</code> 및 <code>--node-external-ip</code> 플래그를 기반으로 설정합니다.</li><li>ServiceLB LoadBalancer 컨트롤러를 호스팅합니다.</li><li>클라우드-프로바이더가 <code>external</code>로 설정된 경우 존재하는 <code>node.cloudprovider.kubernetes.io/uninitialized</code> taint를 제거합니다.</li></ul><p>외부 CCM을 배포하기 전에 모든 K3s 서버를 <code>--disable-cloud-controller</code> 플래그로 시작하여 임베디드 CCM을 비활성화해야 합니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>기본 제공 CCM을 비활성화하고 외부 대체품을 배포하고 올바르게 구성하지 않으면 노드가 오염된 상태로 유지되어 스케줄링이 불가능합니다.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="호스트-이름이-없는-노드">호스트 이름이 없는 노드<a href="#호스트-이름이-없는-노드" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Linode와 같은 일부 클라우드 제공자는 호스트 이름이 &quot;localhost&quot;인 머신을 생성하며, 다른 클라우드 제공자는 호스트 이름이 전혀 설정되어 있지 않을 수 있습니다. 이로 인해 도메인 이름 확인에 문제가 발생할 수 있습니다. <code>K3S_NODE_NAME</code>플래그 또는<code>K3S_NODE_NAME</code> 환경 변수를 사용하여 K3s를 실행하면 노드 이름을 전달하여 이 문제를 해결할 수 있습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/storage"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">볼륨과 저장소</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/helm"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">헬름(Helm)</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#coredns" class="table-of-contents__link toc-highlight">CoreDNS</a></li><li><a href="#traefik-인그레스-컨트롤러" class="table-of-contents__link toc-highlight">Traefik 인그레스 컨트롤러</a></li><li><a href="#네트워크-정책-컨트롤러-network-policy-controller" class="table-of-contents__link toc-highlight">네트워크 정책 컨트롤러 (Network Policy Controller)</a></li><li><a href="#서비스-로드밸런서" class="table-of-contents__link toc-highlight">서비스 로드밸런서</a><ul><li><a href="#servicelb-작동-방식" class="table-of-contents__link toc-highlight">ServiceLB 작동 방식</a></li><li><a href="#사용법" class="table-of-contents__link toc-highlight">사용법</a></li><li><a href="#servicelb-노드-선택-제어하기" class="table-of-contents__link toc-highlight">ServiceLB 노드 선택 제어하기</a></li><li><a href="#servicelb-노드-풀-생성하기" class="table-of-contents__link toc-highlight">ServiceLB 노드 풀 생성하기</a></li><li><a href="#servicelb-비활성화" class="table-of-contents__link toc-highlight">ServiceLB 비활성화</a></li></ul></li><li><a href="#외부-클라우드-컨트롤러-매니저-배포하기" class="table-of-contents__link toc-highlight">외부 클라우드 컨트롤러 매니저 배포하기</a></li><li><a href="#호스트-이름이-없는-노드" class="table-of-contents__link toc-highlight">호스트 이름이 없는 노드</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/networking" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">네트워킹</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>네트워킹</h1></header><p>이 페이지는 CoreDNS, Traefik 인그레스 컨트롤러, Klipper 서비스 로드밸런서가 K3s 내에서 작동하는 방식을 설명합니다.</p><p>Flannel 구성 옵션 및 백엔드 선택에 대한 자세한 내용이나 자체 CNI 설정 방법은 <a href="/kr/installation/network-options">설치 네트워크 옵션</a> 페이지를 참조하세요.</p><p>K3s를 위해 어떤 포트를 열어야 하는지에 대한 정보는 <a href="/kr/installation/requirements#networking">네트워킹 요구 사항</a>을 참조하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="coredns">CoreDNS<a href="#coredns" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>CoreDNS는 서버 시작 시 자동으로 배포됩니다. 사용하지 않으려면 클러스터의 모든 서버에 <code>--disable=coredns</code> 옵션을 사용하여 구성합니다.</p><p>CoreDNS를 설치하지 않은 경우 클러스터 DNS 공급자를 직접 설치해야 합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-인그레스-컨트롤러">Traefik 인그레스 컨트롤러<a href="#traefik-인그레스-컨트롤러" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p><a href="https://traefik.io/" target="_blank" rel="noopener noreferrer">Traefik</a>은 마이크로서비스를 쉽게 배포할 수 있도록 만들어진 최신 HTTP 역방향 프록시 및 로드밸런서입니다. 애플리케이션을 설계, 배포 및 실행하는 동안 네트워킹 복잡성을 단순화합니다.</p><p>Traefik 인그레스 컨트롤러는 포트 80과 443을 사용하는 로드밸런서 서비스를 배포합니다. 기본적으로 ServiceLB는 모든 클러스터 멤버에 이러한 포트를 노출하므로 다른 HostPort 또는 NodePort 파드에서는 이러한 포트를 사용할 수 없습니다.</p><p>서버를 시작할 때 기본적으로 Traefik이 배포됩니다. 자세한 내용은 <a href="/kr/installation/packaged-components">패키지 컴포넌트 관리</a>를 참고하세요. 기본 설정 파일은 <code>/var/lib/rancher/k3s/server/manifests/traefik.yaml</code>에 있습니다.</p><p>K3s가 시작할 때 이 파일을 기본값으로 대체하므로 <code>traefik.yaml</code> 파일을 수동으로 편집해서는 안 됩니다. 대신, <code>/var/lib/rancher/k3s/server/manifests</code>에 <code>HelmChartConfig</code> 매니페스트를 추가로 생성하여 Traefik을 사용자 정의해야 합니다. 자세한 내용과 예제는 <a href="/kr/helm#customizing-packaged-components-with-helmchartconfig">HelmChartConfig 패키지 컴포넌트 커스터마이징</a>을 참고하세요. 사용 가능한 구성 값에 대한 자세한 내용은 공식 <a href="https://github.com/traefik/traefik-helm-chart/tree/master/traefik" target="_blank" rel="noopener noreferrer">Traefik 헬름 구성 매개변수</a>를 참고하세요.</p><p>클러스터에서 Traefik을 제거하려면 <code>--disable=traefik</code> 플래그를 사용하여 모든 서버를 시작합니다.</p><p>K3s 버전 1.20 이하에는 Traefik v1이 포함됩니다. K3s 버전 1.21 이상은 기존에 설치된 Traefik v1이 발견되지 않는 한 Traefik v2를 설치하며, 이 경우 Traefik은 v2로 업그레이드되지 않습니다. K3s에 포함된 특정 Traefik 버전에 대한 자세한 내용은 해당 버전의 릴리스 노트를 참조하세요.</p><p>이전 Traefik v1 인스턴스에서 마이그레이션하려면 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 문서</a> 및 <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">마이그레이션 도구</a>를 참조하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="네트워크-정책-컨트롤러-network-policy-controller">네트워크 정책 컨트롤러 (Network Policy Controller)<a href="#네트워크-정책-컨트롤러-network-policy-controller" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s에는 임베디드 네트워크 정책 컨트롤러가 포함되어 있습니다. 기본 구현은 <a href="https://github.com/cloudnativelabs/kube-router" target="_blank" rel="noopener noreferrer">kube-router의</a> netpol 컨트롤러 라이브러리이며(다른 kube-router 기능은 없음), <a href="https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol" target="_blank" rel="noopener noreferrer">여기</a>에서 확인할 수 있습니다.</p><p>비활성화하려면, 각 서버를 <code>--disable-network-policy</code> 플래그로 시작합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="서비스-로드밸런서">서비스 로드밸런서<a href="#서비스-로드밸런서" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s 클러스터에는 모든 LoadBalancer 컨트롤러를 배포할 수 있습니다. 기본적으로 K3s는 사용 가능한 호스트 포트를 사용하는 <a href="https://github.com/k3s-io/klipper-lb" target="_blank" rel="noopener noreferrer">ServiceLB</a>(이전의 Klipper LoadBalancer)로 알려진 로드밸런서를 제공합니다.</p><p>업스트림 쿠버네티스는 로드밸런서 유형의 서비스를 생성할 수 있지만 기본 로드밸런서 구현은 포함되어 있지 않으므로 이러한 서비스는 로드밸런서가 설치될 때까지 <code>pending</code>으로 유지됩니다. 많은 호스팅 서비스는 외부 로드 밸런서 구현을 제공하기 위해 Amazon EC2 또는 Microsoft Azure와 같은 클라우드 제공업체가 필요합니다. 반면, K3s ServiceLB를 사용하면 클라우드 제공업체나 추가 구성 없이도 로드밸런서 서비스를 사용할 수 있습니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-작동-방식">ServiceLB 작동 방식<a href="#servicelb-작동-방식" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>ServiceLB 컨트롤러는 <code>spec.type</code> 필드가 <code>LoadBalancer</code>로 설정된 쿠버네티스 <a href="https://kubernetes.io/ko/docs/concepts/services-networking/service/" target="_blank" rel="noopener noreferrer">서비스</a>를 감시합니다.</p><p>각 로드밸런서 서비스마다 <code>kube-system</code> 네임스페이스에 <a href="https://kubernetes.io/ko/docs/concepts/workloads/controllers/daemonset/" target="_blank" rel="noopener noreferrer">데몬셋</a>이 생성된다. 이 데몬셋은 차례로 각 노드에 <code>svc-</code> 접두사를 가진 파드를 생성합니다. 이러한 파드는 아이피테이블을 사용하여 파드의 노드포트에서 서비스의 클러스터IP 주소와 포트로 트래픽을 전달합니다.</p><p>외부 IP가 구성된 노드에서 ServiceLB 파드가 실행되는 경우, 노드의 외부 IP가 서비스의 <code>status.loadBalancer.ingress</code> 주소 목록에 채워집니다. 그렇지 않으면 노드의 내부 IP가 사용됩니다.</p><p>로드밸런서 서비스가 여러 개 생성된 경우, 각 서비스마다 별도의 데몬셋이 생성됩니다.</p><p>서로 다른 포트를 사용한다면 동일한 노드에 여러 개의 서비스를 노출할 수 있습니다.</p><p>포트 80에서 수신 대기하는 로드밸런서 서비스를 생성하려고 하면 ServiceLB는 클러스터에서 포트 80에 대한 사용 가능한 호스트를 찾으려고 시도합니다. 해당 포트를 사용할 수 있는 호스트가 없는 경우, LB는 보류 상태로 유지됩니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="사용법">사용법<a href="#사용법" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s에 <a href="https://kubernetes.io/ko/docs/concepts/services-networking/service/#loadbalancer" target="_blank" rel="noopener noreferrer">LoadBalancer 타입의 서비스</a>를 생성합니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-노드-선택-제어하기">ServiceLB 노드 선택 제어하기<a href="#servicelb-노드-선택-제어하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>하나 이상의 노드에 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 레이블을 추가하면 ServiceLB 컨트롤러가 허용 목록 모드로 전환되며, 해당 레이블이 있는 노드만 LoadBalancer 파드를 호스트할 수 있습니다. 레이블이 없는 노드는 ServiceLB에서 사용에서 제외됩니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>기본적으로 노드에는 레이블이 지정되지 않습니다. 모든 노드가 레이블이 지정되지 않은 상태로 유지되는 한, 사용 가능한 포트가 있는 모든 노드가 ServiceLB에서 사용됩니다.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-노드-풀-생성하기">ServiceLB 노드 풀 생성하기<a href="#servicelb-노드-풀-생성하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>로드밸런서의 파드를 호스팅할 특정 노드 하위 집합을 선택하려면 원하는 노드에 <code>enablelb</code> 레이블을 추가하고 노드 및 서비스에서 일치하는 <code>lbpool</code> 레이블 값을 설정합니다. 예를 들면 다음과 같습니다:</p><ol><li>노드 A와 노드 B에 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 및 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 레이블을 지정합니다.</li><li>노드 C와 노드 D에 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 및 <code>svccontroller.k3s.cattle.io/enablelb=true</code>로 레이블을 지정합니다.</li><li>포트 443에 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 레이블을 가진 하나의 LoadBalancer 서비스를 생성합니다. 이 서비스에 대한 데몬셋은 노드 A와 노드 B에만 파드를 배포합니다.</li><li>포트 443에 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 레이블을 가진 다른 로드밸런서 서비스를 생성합니다. 데몬셋은 노드 C와 노드 D에만 파드를 배포합니다.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-비활성화">ServiceLB 비활성화<a href="#servicelb-비활성화" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>ServiceLB를 비활성화하려면, 클러스터의 모든 서버에 <code>--disable=servicelb</code> 플래그를 사용하여 구성한다.</p><p>이 설정은 MetalLB와 같은 다른 LB를 실행하려는 경우에 필요합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="외부-클라우드-컨트롤러-매니저-배포하기">외부 클라우드 컨트롤러 매니저 배포하기<a href="#외부-클라우드-컨트롤러-매니저-배포하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>바이너리 크기를 줄이기 위해 K3s는 모든 &quot;인-트리&quot;(빌트인) 클라우드 제공자를 제거합니다. 대신, K3s는 다음을 수행하는 임베디드 클라우드 컨트롤러 관리자(CCM, Cloud Controller Manager) 스텁을 제공합니다:</p><ul><li>노드 내부IP 및 외부IP 주소 필드를 <code>--node-ip</code> 및 <code>--node-external-ip</code> 플래그를 기반으로 설정합니다.</li><li>ServiceLB LoadBalancer 컨트롤러를 호스팅합니다.</li><li>클라우드-프로바이더가 <code>external</code>로 설정된 경우 존재하는 <code>node.cloudprovider.kubernetes.io/uninitialized</code> taint를 제거합니다.</li></ul><p>외부 CCM을 배포하기 전에 모든 K3s 서버를 <code>--disable-cloud-controller</code> 플래그로 시작하여 임베디드 CCM을 비활성화해야 합니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>기본 제공 CCM을 비활성화하고 외부 대체품을 배포하고 올바르게 구성하지 않으면 노드가 오염된 상태로 유지되어 스케줄링이 불가능합니다.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="호스트-이름이-없는-노드">호스트 이름이 없는 노드<a href="#호스트-이름이-없는-노드" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Linode와 같은 일부 클라우드 제공자는 호스트 이름이 &quot;localhost&quot;인 머신을 생성하며, 다른 클라우드 제공자는 호스트 이름이 전혀 설정되어 있지 않을 수 있습니다. 이로 인해 도메인 이름 확인에 문제가 발생할 수 있습니다. <code>K3S_NODE_NAME</code>플래그 또는<code>K3S_NODE_NAME</code> 환경 변수를 사용하여 K3s를 실행하면 노드 이름을 전달하여 이 문제를 해결할 수 있습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/storage"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">볼륨과 저장소</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/helm"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">헬름(Helm)</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#coredns" class="table-of-contents__link toc-highlight">CoreDNS</a></li><li><a href="#traefik-인그레스-컨트롤러" class="table-of-contents__link toc-highlight">Traefik 인그레스 컨트롤러</a></li><li><a href="#네트워크-정책-컨트롤러-network-policy-controller" class="table-of-contents__link toc-highlight">네트워크 정책 컨트롤러 (Network Policy Controller)</a></li><li><a href="#서비스-로드밸런서" class="table-of-contents__link toc-highlight">서비스 로드밸런서</a><ul><li><a href="#servicelb-작동-방식" class="table-of-contents__link toc-highlight">ServiceLB 작동 방식</a></li><li><a href="#사용법" class="table-of-contents__link toc-highlight">사용법</a></li><li><a href="#servicelb-노드-선택-제어하기" class="table-of-contents__link toc-highlight">ServiceLB 노드 선택 제어하기</a></li><li><a href="#servicelb-노드-풀-생성하기" class="table-of-contents__link toc-highlight">ServiceLB 노드 풀 생성하기</a></li><li><a href="#servicelb-비활성화" class="table-of-contents__link toc-highlight">ServiceLB 비활성화</a></li></ul></li><li><a href="#외부-클라우드-컨트롤러-매니저-배포하기" class="table-of-contents__link toc-highlight">외부 클라우드 컨트롤러 매니저 배포하기</a></li><li><a href="#호스트-이름이-없는-노드" class="table-of-contents__link toc-highlight">호스트 이름이 없는 노드</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/opensearch.xml b/kr/opensearch.xml
deleted file mode 100644
index bd412d6dc..000000000
--- a/kr/opensearch.xml
+++ /dev/null
@@ -1,11 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"
-                       xmlns:moz="http://www.mozilla.org/2006/browser/search/">
-  <ShortName>K3s</ShortName>
-  <Description>Search K3s</Description>
-  <InputEncoding>UTF-8</InputEncoding>
-  <Image width="16" height="16" type="image/x-icon">https://docs.k3s.io/kr/img/favicon.ico</Image>
-  <Url type="text/html" method="get" template="https://docs.k3s.io/kr/search?q={searchTerms}"/>
-  <Url type="application/opensearchdescription+xml" rel="self" template="https://docs.k3s.io/kr/opensearch.xml" />
-  <moz:SearchForm>https://docs.k3s.io/kr/</moz:SearchForm>
-</OpenSearchDescription>
\ No newline at end of file
diff --git a/kr/quick-start.html b/kr/quick-start.html
index ae89e63ac..424264726 100644
--- a/kr/quick-start.html
+++ b/kr/quick-start.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">빠른 시작 가이드 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/quick-start"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="빠른 시작 가이드 | K3s"><meta data-rh="true" name="description" content="이 가이드는 기본 옵션으로 클러스터를 빠르게 시작하는 데 도움이 됩니다. 설치 섹션에서는 K3s를 설정하는 방법에 대해 자세히 설명합니다."><meta data-rh="true" property="og:description" content="이 가이드는 기본 옵션으로 클러스터를 빠르게 시작하는 데 도움이 됩니다. 설치 섹션에서는 K3s를 설정하는 방법에 대해 자세히 설명합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/quick-start"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/quick-start" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/quick-start" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">빠른 시작 가이드 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/quick-start"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="빠른 시작 가이드 | K3s"><meta data-rh="true" name="description" content="이 가이드는 기본 옵션으로 클러스터를 빠르게 시작하는 데 도움이 됩니다. 설치 섹션에서는 K3s를 설정하는 방법에 대해 자세히 설명합니다."><meta data-rh="true" property="og:description" content="이 가이드는 기본 옵션으로 클러스터를 빠르게 시작하는 데 도움이 됩니다. 설치 섹션에서는 K3s를 설정하는 방법에 대해 자세히 설명합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/quick-start"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/quick-start" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/quick-start" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">빠른 시작 가이드</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>빠른 시작 가이드</h1></header><p>이 가이드는 기본 옵션으로 클러스터를 빠르게 시작하는 데 도움이 됩니다. <a href="/kr/installation">설치 섹션</a>에서는 K3s를 설정하는 방법에 대해 자세히 설명합니다.</p><p>K3s 구성 요소들이 작동하는 방식에 대한 자세한 내용은 <a href="/kr/architecture">아키텍처 섹션</a>을 참조하세요.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>Kubernetes를 처음 사용하시나요?
-공식 쿠버네티스 문서에는 이미 기본 사항을 설명하는 훌륭한 튜토리얼이 <a href="https://kubernetes.io/ko/docs/tutorials/kubernetes-basics/" target="_blank" rel="noopener noreferrer">여기</a> 있습니다.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="설치-스크립트">설치 스크립트<a href="#설치-스크립트" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s는 systemd 또는 openrc 기반 시스템에 서비스로 설치하는 편리한 방법으로 설치 스크립트를 제공합니다. 이 스크립트는 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 에서 확인할 수 있습니다. 이 방법으로 K3s를 설치하려면, 간단하게 다음을 실행하세요:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>이 설치를 실행한 후:</p><ul><li>노드가 재부팅되거나 프로세스가 충돌 또는 종료된 경우 자동으로 재시작되도록 K3s 서비스가 구성됩니다.</li><li><code>kubectl</code>, <code>crictl</code>, <code>ctr</code>, <code>k3s-killall.sh</code> 및 <code>k3s-uninstall.sh</code>를 포함한 추가 유틸리티가 설치됩니다.</li><li><code>/etc/rancher/k3s/k3s.yaml</code>에 <a href="https://kubernetes.io/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> 파일을 작성하고, K3s가 설치한 kubectl이 자동으로 이를 사용하게 됩니다.</li></ul><p>단일 노드 서버 설치는 워크로드 파드를 호스팅하는 데 필요한 모든 데이터스토어, 컨트롤 플레인, kubelet 및 컨테이너 런타임 구성 요소를 포함하여 모든 기능을 갖춘 Kubernetes 클러스터입니다. 서버 또는 에이전트 노드를 추가할 필요는 없지만, 클러스터에 추가 용량 또는 중복성을 추가하기 위해 추가하는 것이 좋습니다.</p><p>에이전트 노드를 추가로 설치하여 클러스터에 추가하려면, <code>K3S_URL</code> 및 <code>K3S_TOKEN</code> 환경 변수를 사용하여 설치 스크립트를 실행합니다. 다음은 에이전트 가입 방법을 보여주는 예제입니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://myserver:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mynodetoken </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>K3S_URL</code> 파라미터를 설정하면 인스톨러가 K3s를 서버가 아닌 에이전트로 구성합니다. K3s 에이전트는 제공된 URL에서 수신 대기 중인 K3s 서버에 등록됩니다. <code>K3S_TOKEN</code>에 사용할 값은 서버 노드의 <code>/var/lib/rancher/k3s/server/node-token</code>에 저장됩니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>각 머신은 고유한 호스트 이름을 가져야 합니다. 머신에 고유 호스트명이 없는 경우, <code>K3S_NODE_NAME</code> 환경 변수를 전달하고 각 노드에 대해 유효한 고유 호스트명이 있는 값을 제공하세요.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/architecture"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">아키텍처</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">설치</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#설치-스크립트" class="table-of-contents__link toc-highlight">설치 스크립트</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">빠른 시작 가이드</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>빠른 시작 가이드</h1></header><p>이 가이드는 기본 옵션으로 클러스터를 빠르게 시작하는 데 도움이 됩니다. <a href="/kr/installation">설치 섹션</a>에서는 K3s를 설정하는 방법에 대해 자세히 설명합니다.</p><p>K3s 구성 요소들이 작동하는 방식에 대한 자세한 내용은 <a href="/kr/architecture">아키텍처 섹션</a>을 참조하세요.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>Kubernetes를 처음 사용하시나요?
+공식 쿠버네티스 문서에는 이미 기본 사항을 설명하는 훌륭한 튜토리얼이 <a href="https://kubernetes.io/ko/docs/tutorials/kubernetes-basics/" target="_blank" rel="noopener noreferrer">여기</a> 있습니다.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="설치-스크립트">설치 스크립트<a href="#설치-스크립트" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s는 systemd 또는 openrc 기반 시스템에 서비스로 설치하는 편리한 방법으로 설치 스크립트를 제공합니다. 이 스크립트는 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 에서 확인할 수 있습니다. 이 방법으로 K3s를 설치하려면, 간단하게 다음을 실행하세요:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>이 설치를 실행한 후:</p><ul><li>노드가 재부팅되거나 프로세스가 충돌 또는 종료된 경우 자동으로 재시작되도록 K3s 서비스가 구성됩니다.</li><li><code>kubectl</code>, <code>crictl</code>, <code>ctr</code>, <code>k3s-killall.sh</code> 및 <code>k3s-uninstall.sh</code>를 포함한 추가 유틸리티가 설치됩니다.</li><li><code>/etc/rancher/k3s/k3s.yaml</code>에 <a href="https://kubernetes.io/ko/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> 파일을 작성하고, K3s가 설치한 kubectl이 자동으로 이를 사용하게 됩니다.</li></ul><p>단일 노드 서버 설치는 워크로드 파드를 호스팅하는 데 필요한 모든 데이터스토어, 컨트롤 플레인, kubelet 및 컨테이너 런타임 구성 요소를 포함하여 모든 기능을 갖춘 Kubernetes 클러스터입니다. 서버 또는 에이전트 노드를 추가할 필요는 없지만, 클러스터에 추가 용량 또는 중복성을 추가하기 위해 추가하는 것이 좋습니다.</p><p>에이전트 노드를 추가로 설치하여 클러스터에 추가하려면, <code>K3S_URL</code> 및 <code>K3S_TOKEN</code> 환경 변수를 사용하여 설치 스크립트를 실행합니다. 다음은 에이전트 가입 방법을 보여주는 예제입니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://myserver:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mynodetoken </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>K3S_URL</code> 파라미터를 설정하면 인스톨러가 K3s를 서버가 아닌 에이전트로 구성합니다. K3s 에이전트는 제공된 URL에서 수신 대기 중인 K3s 서버에 등록됩니다. <code>K3S_TOKEN</code>에 사용할 값은 서버 노드의 <code>/var/lib/rancher/k3s/server/node-token</code>에 저장됩니다.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>각 머신은 고유한 호스트 이름을 가져야 합니다. 머신에 고유 호스트명이 없는 경우, <code>K3S_NODE_NAME</code> 환경 변수를 전달하고 각 노드에 대해 유효한 고유 호스트명이 있는 값을 제공하세요.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/architecture"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">아키텍처</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/installation"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">설치</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#설치-스크립트" class="table-of-contents__link toc-highlight">설치 스크립트</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/reference.html b/kr/reference.html
index ce0215e67..afcd56c34 100644
--- a/kr/reference.html
+++ b/kr/reference.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">레퍼런스 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/reference"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="레퍼런스 | K3s"><meta data-rh="true" name="description" content="이 섹션에는 K3s 설치 스크립트, 서버/클라이언트 구성 옵션, 추가 도구 사용 지침에 대한 자세한 내용이 포함되어 있습니다."><meta data-rh="true" property="og:description" content="이 섹션에는 K3s 설치 스크립트, 서버/클라이언트 구성 옵션, 추가 도구 사용 지침에 대한 자세한 내용이 포함되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/reference"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">레퍼런스 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/reference"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="레퍼런스 | K3s"><meta data-rh="true" name="description" content="이 섹션에는 K3s 설치 스크립트, 서버/클라이언트 구성 옵션, 추가 도구 사용 지침에 대한 자세한 내용이 포함되어 있습니다."><meta data-rh="true" property="og:description" content="이 섹션에는 K3s 설치 스크립트, 서버/클라이언트 구성 옵션, 추가 도구 사용 지침에 대한 자세한 내용이 포함되어 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/reference"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">레퍼런스</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>레퍼런스</h1></header><p>이 섹션에는 K3s 설치 스크립트, 서버/클라이언트 구성 옵션, 추가 도구 사용 지침에 대한 자세한 내용이 포함되어 있습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/token"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">token</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/reference/env-variables"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Environment Variables</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">레퍼런스</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>레퍼런스</h1></header><p>이 섹션에는 K3s 설치 스크립트, 서버/클라이언트 구성 옵션, 추가 도구 사용 지침에 대한 자세한 내용이 포함되어 있습니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cli/token"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">token</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/reference/env-variables"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Environment Variables</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/reference/env-variables.html b/kr/reference/env-variables.html
index cb7cd93ea..a9b5a7e54 100644
--- a/kr/reference/env-variables.html
+++ b/kr/reference/env-variables.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Environment Variables | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/reference/env-variables"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Environment Variables | K3s"><meta data-rh="true" name="description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><meta data-rh="true" property="og:description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/reference/env-variables"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/env-variables" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/env-variables" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Environment Variables | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/reference/env-variables"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Environment Variables | K3s"><meta data-rh="true" name="description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><meta data-rh="true" property="og:description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/reference/env-variables"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/env-variables" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/env-variables" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/reference"><span itemprop="name">레퍼런스</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Environment Variables</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Environment Variables</h1></header><p>As mentioned in the <a href="/kr/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>The simplest form of this command is as follows:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When using this method to install K3s, the following environment variables can be used to configure the installation:</p><table><thead><tr><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>INSTALL_K3S_SKIP_DOWNLOAD</code></td><td>If set to true will not download K3s hash or binary.</td></tr><tr><td><code>INSTALL_K3S_SYMLINK</code></td><td>By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to &#x27;skip&#x27; will not create symlinks and &#x27;force&#x27; will overwrite.</td></tr><tr><td><code>INSTALL_K3S_SKIP_ENABLE</code></td><td>If set to true will not enable or start K3s service.</td></tr><tr><td><code>INSTALL_K3S_SKIP_START</code></td><td>If set to true will not start K3s service.</td></tr><tr><td><code>INSTALL_K3S_VERSION</code></td><td>Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR</code></td><td>Directory to install K3s binary, links, and uninstall script to, or use <code>/usr/local/bin</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR_READ_ONLY</code></td><td>If set to true will not write files to <code>INSTALL_K3S_BIN_DIR</code>, forces setting <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>.</td></tr><tr><td><code>INSTALL_K3S_SYSTEMD_DIR</code></td><td>Directory to install systemd service and environment files to, or use <code>/etc/systemd/system</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_EXEC</code></td><td>Command with flags to use for launching K3s in the service. If the command is not specified, and the <code>K3S_URL</code> is set, it will default to &quot;agent.&quot; If <code>K3S_URL</code> not set, it will default to &quot;server.&quot; For help, refer to <a href="/kr/installation/configuration#configuration-with-install-script">this example.</a></td></tr><tr><td><code>INSTALL_K3S_NAME</code></td><td>Name of systemd service to create, will default to &#x27;k3s&#x27; if running k3s as a server and &#x27;k3s-agent&#x27; if running k3s as an agent. If specified the name will be prefixed with &#x27;k3s-&#x27;.</td></tr><tr><td><code>INSTALL_K3S_TYPE</code></td><td>Type of systemd service to create, will default from the K3s exec command if not specified.</td></tr><tr><td><code>INSTALL_K3S_SELINUX_WARN</code></td><td>If set to true will continue if k3s-selinux policy is not found.</td></tr><tr><td><code>INSTALL_K3S_SKIP_SELINUX_RPM</code></td><td>If set to true will skip automatic installation of the k3s RPM.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL_URL</code></td><td>Channel URL for fetching K3s download URL. Defaults to <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">https://update.k3s.io/v1-release/channels</a>.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL</code></td><td>Channel to use for fetching K3s download URL. Defaults to &quot;stable&quot;. Options include: <code>stable</code>, <code>latest</code>, <code>testing</code>.</td></tr></tbody></table><p>This example shows where to place aforementioned environment variables as options (after the pipe):</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_CHANNEL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">latest </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Environment variables which begin with <code>K3S_</code> will be preserved for the systemd and openrc services to use.</p><p>Setting <code>K3S_URL</code> without explicitly setting an exec command will default the command to &quot;agent&quot;.</p><p>When running the agent, <code>K3S_TOKEN</code> must also be set.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/reference"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">레퍼런스</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/reference/resource-profiling"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Resource Profiling</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/reference"><span itemprop="name">레퍼런스</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Environment Variables</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Environment Variables</h1></header><p>As mentioned in the <a href="/kr/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>The simplest form of this command is as follows:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When using this method to install K3s, the following environment variables can be used to configure the installation:</p><table><thead><tr><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>INSTALL_K3S_SKIP_DOWNLOAD</code></td><td>If set to true will not download K3s hash or binary.</td></tr><tr><td><code>INSTALL_K3S_SYMLINK</code></td><td>By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to &#x27;skip&#x27; will not create symlinks and &#x27;force&#x27; will overwrite.</td></tr><tr><td><code>INSTALL_K3S_SKIP_ENABLE</code></td><td>If set to true will not enable or start K3s service.</td></tr><tr><td><code>INSTALL_K3S_SKIP_START</code></td><td>If set to true will not start K3s service.</td></tr><tr><td><code>INSTALL_K3S_VERSION</code></td><td>Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR</code></td><td>Directory to install K3s binary, links, and uninstall script to, or use <code>/usr/local/bin</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR_READ_ONLY</code></td><td>If set to true will not write files to <code>INSTALL_K3S_BIN_DIR</code>, forces setting <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>.</td></tr><tr><td><code>INSTALL_K3S_SYSTEMD_DIR</code></td><td>Directory to install systemd service and environment files to, or use <code>/etc/systemd/system</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_EXEC</code></td><td>Command with flags to use for launching K3s in the service. If the command is not specified, and the <code>K3S_URL</code> is set, it will default to &quot;agent.&quot; If <code>K3S_URL</code> not set, it will default to &quot;server.&quot; For help, refer to <a href="/kr/installation/configuration#configuration-with-install-script">this example.</a></td></tr><tr><td><code>INSTALL_K3S_NAME</code></td><td>Name of systemd service to create, will default to &#x27;k3s&#x27; if running k3s as a server and &#x27;k3s-agent&#x27; if running k3s as an agent. If specified the name will be prefixed with &#x27;k3s-&#x27;.</td></tr><tr><td><code>INSTALL_K3S_TYPE</code></td><td>Type of systemd service to create, will default from the K3s exec command if not specified.</td></tr><tr><td><code>INSTALL_K3S_SELINUX_WARN</code></td><td>If set to true will continue if k3s-selinux policy is not found.</td></tr><tr><td><code>INSTALL_K3S_SKIP_SELINUX_RPM</code></td><td>If set to true will skip automatic installation of the k3s RPM.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL_URL</code></td><td>Channel URL for fetching K3s download URL. Defaults to <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">https://update.k3s.io/v1-release/channels</a>.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL</code></td><td>Channel to use for fetching K3s download URL. Defaults to &quot;stable&quot;. Options include: <code>stable</code>, <code>latest</code>, <code>testing</code>.</td></tr></tbody></table><p>This example shows where to place aforementioned environment variables as options (after the pipe):</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_CHANNEL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">latest </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Environment variables which begin with <code>K3S_</code> will be preserved for the systemd and openrc services to use.</p><p>Setting <code>K3S_URL</code> without explicitly setting an exec command will default the command to &quot;agent&quot;.</p><p>When running the agent, <code>K3S_TOKEN</code> must also be set.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/reference"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">레퍼런스</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/reference/resource-profiling"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Resource Profiling</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/reference/resource-profiling.html b/kr/reference/resource-profiling.html
index 2cc047df4..d9d404ae0 100644
--- a/kr/reference/resource-profiling.html
+++ b/kr/reference/resource-profiling.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Resource Profiling | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/reference/resource-profiling"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Resource Profiling | K3s"><meta data-rh="true" name="description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><meta data-rh="true" property="og:description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/reference/resource-profiling"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/resource-profiling" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/resource-profiling" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Resource Profiling | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/reference/resource-profiling"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Resource Profiling | K3s"><meta data-rh="true" name="description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><meta data-rh="true" property="og:description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/reference/resource-profiling"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/resource-profiling" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/resource-profiling" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/reference"><span itemprop="name">레퍼런스</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Resource Profiling</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Resource Profiling</h1></header><p>This section captures the results of tests to determine minimum resource requirements for K3s.</p><p>The results are summarized as follows:</p><table><thead><tr><th>Components</th><th>Processor</th><th>Min CPU</th><th>Min RAM with Kine/SQLite</th><th>Min RAM with Embedded etcd</th></tr></thead><tbody><tr><td>K3s server with a workload</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td><td>10% of a core</td><td>768 M</td><td>896 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td><td>10% of a core</td><td>512 M</td><td>768 M</td></tr><tr><td>K3s agent</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td><td>5% of a core</td><td>256 M</td><td>256 M</td></tr><tr><td>K3s server with a workload</td><td>Pi4B BCM2711, 1.50 GHz</td><td>20% of a core</td><td>768 M</td><td>896 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>20% of a core</td><td>512 M</td><td>768 M</td></tr><tr><td>K3s agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>10% of a core</td><td>256 M</td><td>256 M</td></tr></tbody></table><ul><li><a href="#scope-of-resource-testing">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements">Components Included for Baseline Measurements</a></li><li><a href="#methodology">Methodology</a></li><li><a href="#environment">Environment</a></li><li><a href="#baseline-resource-requirements">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent">K3s Agent</a></li></ul></li><li><a href="#analysis">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="scope-of-resource-testing">Scope of Resource Testing<a href="#scope-of-resource-testing" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The resource tests were intended to address the following problem statements:</p><ul><li>On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster.</li><li>On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="components-included-for-baseline-measurements">Components Included for Baseline Measurements<a href="#components-included-for-baseline-measurements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The tested components are:</p><ul><li>K3s 1.19.2 with all packaged components enabled</li><li>Prometheus + Grafana monitoring stack</li><li>Kubernetes Example PHP Guestbook app</li></ul><p>These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app.</p><p>Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. </p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="methodology">Methodology<a href="#methodology" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>A standalone instance of Prometheus v2.21.0 was used to collect host CPU, memory, and disk IO statistics using <code>prometheus-node-exporter</code> installed via apt.</p><p><code>systemd-cgtop</code> was used to spot-check systemd cgroup-level CPU and memory utilization. <code>system.slice/k3s.service</code> tracks resource utilization for both K3s and containerd, while individual pods are under the <code>kubepods</code> hierarchy.</p><p>Additional detailed K3s memory utilization data was collected from the <code>process_resident_memory_bytes</code> and <code>go_memstats_alloc_bytes</code> metrics using the kubelet exporter integrated into the server and agent processes.</p><p>Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="environment">Environment<a href="#environment" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>OS: Ubuntu 20.04 x86_64, aarch64</p><p>Hardware:</p><ul><li>AWS c5d.xlarge - 4 core, 8 GB RAM, NVME SSD</li><li>Raspberry Pi 4 Model B - 4 core, 8 GB RAM, Class 10 SDHC</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="baseline-resource-requirements">Baseline Resource Requirements<a href="#baseline-resource-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>This section captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-with-a-workload">K3s Server with a Workload<a href="#k3s-server-with-a-workload" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>These are the requirements for a single-node cluster in which the K3s server shares resources with a workload.</p><p>The CPU requirements are:</p><table><thead><tr><th>Resource Requirement</th><th>Tested Processor</th></tr></thead><tbody><tr><td>10% of a core</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td></tr><tr><td>20% of a core</td><td>Low-power processor such as Pi4B BCM2711, 1.50 GHz</td></tr></tbody></table><p>The IOPS and memory requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>IOPS</th><th>KiB/sec</th><th>Latency</th><th>RAM</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td><td>768 M</td></tr><tr><td>Embedded etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td><td>896 M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent<a href="#k3s-cluster-with-a-single-agent" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload.</p><p>The CPU requirements are:</p><table><thead><tr><th>Resource Requirement</th><th>Tested Processor</th></tr></thead><tbody><tr><td>10% of a core</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td></tr><tr><td>20% of a core</td><td>Pi4B BCM2711, 1.50 GHz</td></tr></tbody></table><p>The IOPS and memory requirements are:</p><table><thead><tr><th>Datastore</th><th>IOPS</th><th>KiB/sec</th><th>Latency</th><th>RAM</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td><td>512 M</td></tr><tr><td>Embedded etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td><td>768 M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent">K3s Agent<a href="#k3s-agent" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The CPU requirements are:</p><table><thead><tr><th>Resource Requirement</th><th>Tested Processor</th></tr></thead><tbody><tr><td>5% of a core</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td></tr><tr><td>10% of a core</td><td>Pi4B BCM2711, 1.50 GHz</td></tr></tbody></table><p>256 M of RAM is required.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="analysis">Analysis<a href="#analysis" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="primary-resource-utilization-drivers">Primary Resource Utilization Drivers<a href="#primary-resource-utilization-drivers" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server&#x27;s resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server&#x27;s resource requirements.</p><p>K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore<a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore.</p><p>This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store.</p><p>Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore.</p><p>Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/reference/env-variables"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Environment Variables</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/known-issues"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">알려진 이슈</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#scope-of-resource-testing" class="table-of-contents__link toc-highlight">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements" class="table-of-contents__link toc-highlight">Components Included for Baseline Measurements</a></li><li><a href="#methodology" class="table-of-contents__link toc-highlight">Methodology</a></li><li><a href="#environment" class="table-of-contents__link toc-highlight">Environment</a></li><li><a href="#baseline-resource-requirements" class="table-of-contents__link toc-highlight">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload" class="table-of-contents__link toc-highlight">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent" class="table-of-contents__link toc-highlight">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent" class="table-of-contents__link toc-highlight">K3s Agent</a></li></ul></li><li><a href="#analysis" class="table-of-contents__link toc-highlight">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers" class="table-of-contents__link toc-highlight">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="table-of-contents__link toc-highlight">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/reference"><span itemprop="name">레퍼런스</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Resource Profiling</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Resource Profiling</h1></header><p>This section captures the results of tests to determine minimum resource requirements for K3s.</p><p>The results are summarized as follows:</p><table><thead><tr><th>Components</th><th>Processor</th><th>Min CPU</th><th>Min RAM with Kine/SQLite</th><th>Min RAM with Embedded etcd</th></tr></thead><tbody><tr><td>K3s server with a workload</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td><td>10% of a core</td><td>768 M</td><td>896 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td><td>10% of a core</td><td>512 M</td><td>768 M</td></tr><tr><td>K3s agent</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td><td>5% of a core</td><td>256 M</td><td>256 M</td></tr><tr><td>K3s server with a workload</td><td>Pi4B BCM2711, 1.50 GHz</td><td>20% of a core</td><td>768 M</td><td>896 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>20% of a core</td><td>512 M</td><td>768 M</td></tr><tr><td>K3s agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>10% of a core</td><td>256 M</td><td>256 M</td></tr></tbody></table><ul><li><a href="#scope-of-resource-testing">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements">Components Included for Baseline Measurements</a></li><li><a href="#methodology">Methodology</a></li><li><a href="#environment">Environment</a></li><li><a href="#baseline-resource-requirements">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent">K3s Agent</a></li></ul></li><li><a href="#analysis">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="scope-of-resource-testing">Scope of Resource Testing<a href="#scope-of-resource-testing" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The resource tests were intended to address the following problem statements:</p><ul><li>On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster.</li><li>On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="components-included-for-baseline-measurements">Components Included for Baseline Measurements<a href="#components-included-for-baseline-measurements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The tested components are:</p><ul><li>K3s 1.19.2 with all packaged components enabled</li><li>Prometheus + Grafana monitoring stack</li><li>Kubernetes Example PHP Guestbook app</li></ul><p>These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app.</p><p>Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. </p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="methodology">Methodology<a href="#methodology" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>A standalone instance of Prometheus v2.21.0 was used to collect host CPU, memory, and disk IO statistics using <code>prometheus-node-exporter</code> installed via apt.</p><p><code>systemd-cgtop</code> was used to spot-check systemd cgroup-level CPU and memory utilization. <code>system.slice/k3s.service</code> tracks resource utilization for both K3s and containerd, while individual pods are under the <code>kubepods</code> hierarchy.</p><p>Additional detailed K3s memory utilization data was collected from the <code>process_resident_memory_bytes</code> and <code>go_memstats_alloc_bytes</code> metrics using the kubelet exporter integrated into the server and agent processes.</p><p>Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="environment">Environment<a href="#environment" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>OS: Ubuntu 20.04 x86_64, aarch64</p><p>Hardware:</p><ul><li>AWS c5d.xlarge - 4 core, 8 GB RAM, NVME SSD</li><li>Raspberry Pi 4 Model B - 4 core, 8 GB RAM, Class 10 SDHC</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="baseline-resource-requirements">Baseline Resource Requirements<a href="#baseline-resource-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>This section captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-with-a-workload">K3s Server with a Workload<a href="#k3s-server-with-a-workload" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>These are the requirements for a single-node cluster in which the K3s server shares resources with a workload.</p><p>The CPU requirements are:</p><table><thead><tr><th>Resource Requirement</th><th>Tested Processor</th></tr></thead><tbody><tr><td>10% of a core</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td></tr><tr><td>20% of a core</td><td>Low-power processor such as Pi4B BCM2711, 1.50 GHz</td></tr></tbody></table><p>The IOPS and memory requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>IOPS</th><th>KiB/sec</th><th>Latency</th><th>RAM</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td><td>768 M</td></tr><tr><td>Embedded etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td><td>896 M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent<a href="#k3s-cluster-with-a-single-agent" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload.</p><p>The CPU requirements are:</p><table><thead><tr><th>Resource Requirement</th><th>Tested Processor</th></tr></thead><tbody><tr><td>10% of a core</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td></tr><tr><td>20% of a core</td><td>Pi4B BCM2711, 1.50 GHz</td></tr></tbody></table><p>The IOPS and memory requirements are:</p><table><thead><tr><th>Datastore</th><th>IOPS</th><th>KiB/sec</th><th>Latency</th><th>RAM</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td><td>512 M</td></tr><tr><td>Embedded etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td><td>768 M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent">K3s Agent<a href="#k3s-agent" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>The CPU requirements are:</p><table><thead><tr><th>Resource Requirement</th><th>Tested Processor</th></tr></thead><tbody><tr><td>5% of a core</td><td>Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz</td></tr><tr><td>10% of a core</td><td>Pi4B BCM2711, 1.50 GHz</td></tr></tbody></table><p>256 M of RAM is required.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="analysis">Analysis<a href="#analysis" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="primary-resource-utilization-drivers">Primary Resource Utilization Drivers<a href="#primary-resource-utilization-drivers" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server&#x27;s resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server&#x27;s resource requirements.</p><p>K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore<a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore.</p><p>This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store.</p><p>Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore.</p><p>Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/reference/env-variables"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Environment Variables</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/known-issues"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">알려진 이슈</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#scope-of-resource-testing" class="table-of-contents__link toc-highlight">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements" class="table-of-contents__link toc-highlight">Components Included for Baseline Measurements</a></li><li><a href="#methodology" class="table-of-contents__link toc-highlight">Methodology</a></li><li><a href="#environment" class="table-of-contents__link toc-highlight">Environment</a></li><li><a href="#baseline-resource-requirements" class="table-of-contents__link toc-highlight">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload" class="table-of-contents__link toc-highlight">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent" class="table-of-contents__link toc-highlight">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent" class="table-of-contents__link toc-highlight">K3s Agent</a></li></ul></li><li><a href="#analysis" class="table-of-contents__link toc-highlight">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers" class="table-of-contents__link toc-highlight">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="table-of-contents__link toc-highlight">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/search-index.json b/kr/search-index.json
new file mode 100644
index 000000000..2559d960e
--- /dev/null
+++ b/kr/search-index.json
@@ -0,0 +1 @@
+[{"documents":[{"i":1633,"t":"K3s - Lightweight Kubernetes","u":"/kr/","b":[]},{"i":1639,"t":"k3s agent","u":"/kr/cli/agent","b":["명령줄 도구"]},{"i":1663,"t":"고급 옵션 / 설정","u":"/kr/advanced","b":[]},{"i":1722,"t":"명령줄 도구","u":"/kr/cli","b":["명령줄 도구"]},{"i":1724,"t":"아키텍처","u":"/kr/architecture","b":[]},{"i":1734,"t":"k3s certificate","u":"/kr/cli/certificate","b":["명령줄 도구"]},{"i":1749,"t":"k3s etcd-snapshot","u":"/kr/cli/etcd-snapshot","b":["명령줄 도구"]},{"i":1751,"t":"k3s secrets-encrypt","u":"/kr/cli/secrets-encrypt","b":["명령줄 도구"]},{"i":1761,"t":"k3s server","u":"/kr/cli/server","b":["명령줄 도구"]},{"i":1795,"t":"k3s token","u":"/kr/cli/token","b":["명령줄 도구"]},{"i":1812,"t":"클러스터 접근","u":"/kr/cluster-access","b":[]},{"i":1816,"t":"Backup and Restore","u":"/kr/datastore/backup-restore","b":["클러스터 데이터 저장소"]},{"i":1824,"t":"클러스터 데이터 저장소","u":"/kr/datastore","b":["클러스터 데이터 저장소"]},{"i":1830,"t":"cluster-loadbalancer","u":"/kr/datastore/cluster-loadbalancer","b":["클러스터 데이터 저장소"]},{"i":1831,"t":"High Availability External DB","u":"/kr/datastore/ha","b":["클러스터 데이터 저장소"]},{"i":1845,"t":"High Availability Embedded etcd","u":"/kr/datastore/ha-embedded","b":["클러스터 데이터 저장소"]},{"i":1851,"t":"자주 묻는 질문","u":"/kr/faq","b":[]},{"i":1871,"t":"설치","u":"/kr/installation","b":["설치"]},{"i":1873,"t":"헬름(Helm)","u":"/kr/helm","b":[]},{"i":1881,"t":"Air-Gap Install","u":"/kr/installation/airgap","b":["설치"]},{"i":1901,"t":"Configuration Options","u":"/kr/installation/configuration","b":["설치"]},{"i":1913,"t":"Kubernetes Dashboard","u":"/kr/installation/kube-dashboard","b":["설치"]},{"i":1927,"t":"Managing Packaged Components","u":"/kr/installation/packaged-components","b":["설치"]},{"i":1942,"t":"Network Options","u":"/kr/installation/network-options","b":["설치"]},{"i":1958,"t":"Private Registry Configuration","u":"/kr/installation/private-registry","b":["설치"]},{"i":1972,"t":"Requirements","u":"/kr/installation/requirements","b":["설치"]},{"i":1996,"t":"Managing Server Roles","u":"/kr/installation/server-roles","b":["설치"]},{"i":2006,"t":"Uninstalling K3s","u":"/kr/installation/uninstall","b":["설치"]},{"i":2012,"t":"알려진 이슈","u":"/kr/known-issues","b":[]},{"i":2022,"t":"네트워킹","u":"/kr/networking","b":[]},{"i":2046,"t":"빠른 시작 가이드","u":"/kr/quick-start","b":[]},{"i":2050,"t":"레퍼런스","u":"/kr/reference","b":["레퍼런스"]},{"i":2052,"t":"Environment Variables","u":"/kr/reference/env-variables","b":["레퍼런스"]},{"i":2054,"t":"Resource Profiling","u":"/kr/reference/resource-profiling","b":["레퍼런스"]},{"i":2078,"t":"Secrets Encryption Config","u":"/kr/security/secrets-encryption","b":["보안"]},{"i":2082,"t":"보안","u":"/kr/security","b":["보안"]},{"i":2084,"t":"CIS Hardening Guide","u":"/kr/security/hardening-guide","b":["보안"]},{"i":2134,"t":"볼륨과 저장소","u":"/kr/storage","b":[]},{"i":2150,"t":"업그레이드","u":"/kr/upgrades","b":["업그레이드"]},{"i":2155,"t":"Stopping K3s","u":"/kr/upgrades/killall","b":["업그레이드"]},{"i":2157,"t":"Automated Upgrades","u":"/kr/upgrades/automated","b":["업그레이드"]},{"i":2164,"t":"Manual Upgrades","u":"/kr/upgrades/manual","b":["업그레이드"]},{"i":2174,"t":"CIS Self Assessment Guide","u":"/kr/security/self-assessment","b":["보안"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/1633",[0,1.357,1,2.992,2,2.539]],["t/1639",[0,1.614,3,3.557]],["t/1663",[4,1.661]],["t/1722",[4,1.581]],["t/1724",[4,1.441]],["t/1734",[0,1.614,5,3.557]],["t/1749",[0,1.357,6,2.539,7,2.992]],["t/1751",[0,1.357,8,2.539,9,2.539]],["t/1761",[0,1.614,10,3.019]],["t/1795",[0,1.614,11,3.557]],["t/1812",[4,1.581]],["t/1816",[12,3.557,13,3.557]],["t/1824",[4,1.634]],["t/1830",[14,3.557,15,3.557]],["t/1831",[16,2.191,17,2.191,18,2.581,19,2.581]],["t/1845",[6,2.191,16,2.191,17,2.191,20,2.581]],["t/1851",[4,1.634]],["t/1871",[4,1.441]],["t/1873",[21,4.386]],["t/1881",[22,2.992,23,2.992,24,2.992]],["t/1901",[25,3.019,26,3.019]],["t/1913",[2,3.019,27,3.557]],["t/1927",[28,2.539,29,2.992,30,2.992]],["t/1942",[26,3.019,31,3.557]],["t/1958",[25,2.539,32,2.992,33,2.992]],["t/1972",[34,4.386]],["t/1996",[10,2.539,28,2.539,35,2.992]],["t/2006",[0,1.614,36,3.557]],["t/2012",[4,1.581]],["t/2022",[4,1.441]],["t/2046",[4,1.634]],["t/2050",[4,1.441]],["t/2052",[37,3.557,38,3.557]],["t/2054",[39,3.557,40,3.557]],["t/2078",[8,2.539,9,2.539,41,2.992]],["t/2082",[4,1.441]],["t/2084",[42,2.539,43,2.992,44,2.539]],["t/2134",[4,1.581]],["t/2150",[4,1.441]],["t/2155",[0,1.614,45,3.557]],["t/2157",[46,3.557,47,3.019]],["t/2164",[47,3.019,48,3.557]],["t/2174",[42,2.191,44,2.191,49,2.581,50,2.581]]],"invertedIndex":[["",{"_index":4,"t":{"1663":{"position":[[0,2],[3,2],[6,1],[8,2]]},"1722":{"position":[[0,3],[4,2]]},"1724":{"position":[[0,4]]},"1812":{"position":[[0,4],[5,2]]},"1824":{"position":[[0,4],[5,3],[9,3]]},"1851":{"position":[[0,2],[3,2],[6,2]]},"1871":{"position":[[0,2]]},"2012":{"position":[[0,3],[4,2]]},"2022":{"position":[[0,4]]},"2046":{"position":[[0,2],[3,2],[6,3]]},"2050":{"position":[[0,4]]},"2082":{"position":[[0,2]]},"2134":{"position":[[0,3],[4,3]]},"2150":{"position":[[0,5]]}}}],["agent",{"_index":3,"t":{"1639":{"position":[[4,5]]}}}],["air",{"_index":22,"t":{"1881":{"position":[[0,3]]}}}],["assess",{"_index":50,"t":{"2174":{"position":[[9,10]]}}}],["autom",{"_index":46,"t":{"2157":{"position":[[0,9]]}}}],["avail",{"_index":17,"t":{"1831":{"position":[[5,12]]},"1845":{"position":[[5,12]]}}}],["backup",{"_index":12,"t":{"1816":{"position":[[0,6]]}}}],["certif",{"_index":5,"t":{"1734":{"position":[[4,11]]}}}],["ci",{"_index":42,"t":{"2084":{"position":[[0,3]]},"2174":{"position":[[0,3]]}}}],["cluster",{"_index":14,"t":{"1830":{"position":[[0,7]]}}}],["compon",{"_index":30,"t":{"1927":{"position":[[18,10]]}}}],["config",{"_index":41,"t":{"2078":{"position":[[19,6]]}}}],["configur",{"_index":25,"t":{"1901":{"position":[[0,13]]},"1958":{"position":[[17,13]]}}}],["dashboard",{"_index":27,"t":{"1913":{"position":[[11,9]]}}}],["db",{"_index":19,"t":{"1831":{"position":[[27,2]]}}}],["embed",{"_index":20,"t":{"1845":{"position":[[18,8]]}}}],["encrypt",{"_index":9,"t":{"1751":{"position":[[12,7]]},"2078":{"position":[[8,10]]}}}],["environ",{"_index":37,"t":{"2052":{"position":[[0,11]]}}}],["etcd",{"_index":6,"t":{"1749":{"position":[[4,4]]},"1845":{"position":[[27,4]]}}}],["extern",{"_index":18,"t":{"1831":{"position":[[18,8]]}}}],["gap",{"_index":23,"t":{"1881":{"position":[[4,3]]}}}],["guid",{"_index":44,"t":{"2084":{"position":[[14,5]]},"2174":{"position":[[20,5]]}}}],["harden",{"_index":43,"t":{"2084":{"position":[[4,9]]}}}],["helm",{"_index":21,"t":{"1873":{"position":[[0,8]]}}}],["high",{"_index":16,"t":{"1831":{"position":[[0,4]]},"1845":{"position":[[0,4]]}}}],["instal",{"_index":24,"t":{"1881":{"position":[[8,7]]}}}],["k3",{"_index":0,"t":{"1633":{"position":[[0,3]]},"1639":{"position":[[0,3]]},"1734":{"position":[[0,3]]},"1749":{"position":[[0,3]]},"1751":{"position":[[0,3]]},"1761":{"position":[[0,3]]},"1795":{"position":[[0,3]]},"2006":{"position":[[13,3]]},"2155":{"position":[[9,3]]}}}],["kubernet",{"_index":2,"t":{"1633":{"position":[[18,10]]},"1913":{"position":[[0,10]]}}}],["lightweight",{"_index":1,"t":{"1633":{"position":[[6,11]]}}}],["loadbalanc",{"_index":15,"t":{"1830":{"position":[[8,12]]}}}],["manag",{"_index":28,"t":{"1927":{"position":[[0,8]]},"1996":{"position":[[0,8]]}}}],["manual",{"_index":48,"t":{"2164":{"position":[[0,6]]}}}],["network",{"_index":31,"t":{"1942":{"position":[[0,7]]}}}],["option",{"_index":26,"t":{"1901":{"position":[[14,7]]},"1942":{"position":[[8,7]]}}}],["packag",{"_index":29,"t":{"1927":{"position":[[9,8]]}}}],["privat",{"_index":32,"t":{"1958":{"position":[[0,7]]}}}],["profil",{"_index":40,"t":{"2054":{"position":[[9,9]]}}}],["registri",{"_index":33,"t":{"1958":{"position":[[8,8]]}}}],["requir",{"_index":34,"t":{"1972":{"position":[[0,12]]}}}],["resourc",{"_index":39,"t":{"2054":{"position":[[0,8]]}}}],["restor",{"_index":13,"t":{"1816":{"position":[[11,7]]}}}],["role",{"_index":35,"t":{"1996":{"position":[[16,5]]}}}],["secret",{"_index":8,"t":{"1751":{"position":[[4,7]]},"2078":{"position":[[0,7]]}}}],["self",{"_index":49,"t":{"2174":{"position":[[4,4]]}}}],["server",{"_index":10,"t":{"1761":{"position":[[4,6]]},"1996":{"position":[[9,6]]}}}],["snapshot",{"_index":7,"t":{"1749":{"position":[[9,8]]}}}],["stop",{"_index":45,"t":{"2155":{"position":[[0,8]]}}}],["token",{"_index":11,"t":{"1795":{"position":[[4,5]]}}}],["uninstal",{"_index":36,"t":{"2006":{"position":[[0,12]]}}}],["upgrad",{"_index":47,"t":{"2157":{"position":[[10,8]]},"2164":{"position":[[7,8]]}}}],["variabl",{"_index":38,"t":{"2052":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":1635,"t":"k3s란 무엇입니까?","u":"/kr/","h":"","p":1633},{"i":1637,"t":"이름에는 무슨 뜻이 있나요?","u":"/kr/","h":"","p":1633},{"i":1641,"t":"Logging","u":"/kr/cli/agent","h":"#logging","p":1639},{"i":1643,"t":"Cluster Options","u":"/kr/cli/agent","h":"#cluster-options","p":1639},{"i":1645,"t":"Data","u":"/kr/cli/agent","h":"#data","p":1639},{"i":1647,"t":"Node","u":"/kr/cli/agent","h":"#node","p":1639},{"i":1649,"t":"Runtime","u":"/kr/cli/agent","h":"#runtime","p":1639},{"i":1651,"t":"Networking","u":"/kr/cli/agent","h":"#networking","p":1639},{"i":1653,"t":"Customized Flags","u":"/kr/cli/agent","h":"#customized-flags","p":1639},{"i":1655,"t":"Experimental","u":"/kr/cli/agent","h":"#experimental","p":1639},{"i":1657,"t":"Deprecated","u":"/kr/cli/agent","h":"#deprecated","p":1639},{"i":1659,"t":"Node Labels and Taints for Agents","u":"/kr/cli/agent","h":"#node-labels-and-taints-for-agents","p":1639},{"i":1661,"t":"K3s Agent CLI Help","u":"/kr/cli/agent","h":"#k3s-agent-cli-help","p":1639},{"i":1665,"t":"인증서 관리","u":"/kr/advanced","h":"#인증서-관리","p":1663},{"i":1666,"t":"인증 기관 인증서","u":"/kr/advanced","h":"#인증-기관-인증서","p":1663},{"i":1668,"t":"클라이언트 및 서버 인증서","u":"/kr/advanced","h":"#클라이언트-및-서버-인증서","p":1663},{"i":1670,"t":"토큰 관리","u":"/kr/advanced","h":"#토큰-관리","p":1663},{"i":1672,"t":"HTTP 프록시 구성하기","u":"/kr/advanced","h":"#http-프록시-구성하기","p":1663},{"i":1674,"t":"컨테이너 런타임으로 Docker 사용","u":"/kr/advanced","h":"#컨테이너-런타임으로-docker-사용","p":1663},{"i":1676,"t":"etcdctl 사용하기","u":"/kr/advanced","h":"#etcdctl-사용하기","p":1663},{"i":1678,"t":"컨테이너 설정하기","u":"/kr/advanced","h":"#컨테이너-설정하기","p":1663},{"i":1680,"t":"NVIDIA 컨테이너 런타임 지원","u":"/kr/advanced","h":"#nvidia-컨테이너-런타임-지원","p":1663},{"i":1682,"t":"에이전트 없는 서버 실행하기(실험적)","u":"/kr/advanced","h":"#에이전트-없는-서버-실행하기실험적","p":1663},{"i":1684,"t":"루트리스 서버 실행(실험적)","u":"/kr/advanced","h":"#루트리스-서버-실행실험적","p":1663},{"i":1686,"t":"루트리스 모드의 알려진 이슈","u":"/kr/advanced","h":"#루트리스-모드의-알려진-이슈","p":1663},{"i":1688,"t":"루트리스 서버 시작하기","u":"/kr/advanced","h":"#루트리스-서버-시작하기","p":1663},{"i":1690,"t":"고급 루트리스 구성","u":"/kr/advanced","h":"#고급-루트리스-구성","p":1663},{"i":1692,"t":"루트리스 문제 해결하기","u":"/kr/advanced","h":"#루트리스-문제-해결하기","p":1663},{"i":1694,"t":"노드 레이블 및 테인트","u":"/kr/advanced","h":"#노드-레이블-및-테인트","p":1663},{"i":1696,"t":"설치 스크립트로 서비스 시작하기","u":"/kr/advanced","h":"#설치-스크립트로-서비스-시작하기","p":1663},{"i":1698,"t":"추가 OS 준비 사항","u":"/kr/advanced","h":"#추가-os-준비-사항","p":1663},{"i":1699,"t":"이전 iptables 버전","u":"/kr/advanced","h":"#이전-iptables-버전","p":1663},{"i":1701,"t":"Red Hat Enterprise Linux / CentOS","u":"/kr/advanced","h":"#red-hat-enterprise-linux--centos","p":1663},{"i":1703,"t":"Ubuntu","u":"/kr/advanced","h":"#ubuntu","p":1663},{"i":1705,"t":"Raspberry Pi","u":"/kr/advanced","h":"#raspberry-pi","p":1663},{"i":1707,"t":"Docker에서 k3s 실행하기","u":"/kr/advanced","h":"#docker에서-k3s-실행하기","p":1663},{"i":1709,"t":"SELinux 지원","u":"/kr/advanced","h":"#selinux-지원","p":1663},{"i":1711,"t":"SELinux 적용 활성화하기","u":"/kr/advanced","h":"#selinux-적용-활성화하기","p":1663},{"i":1713,"t":"지연 풀링의 지연 풀링 활성화 (실험적)","u":"/kr/advanced","h":"#지연-풀링의-지연-풀링-활성화-실험적","p":1663},{"i":1714,"t":"지연 풀링과 eStargz란 무엇인가요?","u":"/kr/advanced","h":"#지연-풀링과-estargz란-무엇인가요","p":1663},{"i":1716,"t":"지연 풀링이 가능하도록 k3s 구성하기","u":"/kr/advanced","h":"#지연-풀링이-가능하도록-k3s-구성하기","p":1663},{"i":1718,"t":"추가 로깅 소스","u":"/kr/advanced","h":"#추가-로깅-소스","p":1663},{"i":1720,"t":"추가 네트워크 정책 로깅","u":"/kr/advanced","h":"#추가-네트워크-정책-로깅","p":1663},{"i":1726,"t":"임베디드 DB가 있는 단일 서버 설정","u":"/kr/architecture","h":"#임베디드-db가-있는-단일-서버-설정","p":1724},{"i":1728,"t":"외부 DB가 있는 고가용성 K3s 서버","u":"/kr/architecture","h":"#외부-db가-있는-고가용성-k3s-서버","p":1724},{"i":1730,"t":"에이전트 노드를 위한 고정 등록 주소","u":"/kr/architecture","h":"#에이전트-노드를-위한-고정-등록-주소","p":1724},{"i":1732,"t":"에이전트 노드 등록 작동 방식","u":"/kr/architecture","h":"#에이전트-노드-등록-작동-방식","p":1724},{"i":1735,"t":"Client and Server Certificates","u":"/kr/cli/certificate","h":"#client-and-server-certificates","p":1734},{"i":1737,"t":"Rotating Client and Server Certificates","u":"/kr/cli/certificate","h":"#rotating-client-and-server-certificates","p":1734},{"i":1739,"t":"Certificate Authority (CA) Certificates","u":"/kr/cli/certificate","h":"#certificate-authority-ca-certificates","p":1734},{"i":1741,"t":"Using Custom CA Certificates","u":"/kr/cli/certificate","h":"#using-custom-ca-certificates","p":1734},{"i":1743,"t":"Rotating Custom CA Certificates","u":"/kr/cli/certificate","h":"#rotating-custom-ca-certificates","p":1734},{"i":1745,"t":"Rotating Self-Signed CA Certificates","u":"/kr/cli/certificate","h":"#rotating-self-signed-ca-certificates","p":1734},{"i":1747,"t":"Service-Account Issuer Key Rotation","u":"/kr/cli/certificate","h":"#service-account-issuer-key-rotation","p":1734},{"i":1753,"t":"Secrets Encryption Tool","u":"/kr/cli/secrets-encrypt","h":"#secrets-encryption-tool","p":1751},{"i":1755,"t":"Encryption Key Rotation","u":"/kr/cli/secrets-encrypt","h":"#encryption-key-rotation","p":1751},{"i":1757,"t":"Secrets Encryption Disable/Enable","u":"/kr/cli/secrets-encrypt","h":"#secrets-encryption-disableenable","p":1751},{"i":1759,"t":"Secrets Encryption Status","u":"/kr/cli/secrets-encrypt","h":"#secrets-encryption-status","p":1751},{"i":1763,"t":"Critical Configuration Values","u":"/kr/cli/server","h":"#critical-configuration-values","p":1761},{"i":1765,"t":"Commonly Used Options","u":"/kr/cli/server","h":"#commonly-used-options","p":1761},{"i":1766,"t":"Database","u":"/kr/cli/server","h":"#database","p":1761},{"i":1768,"t":"Cluster Options","u":"/kr/cli/server","h":"#cluster-options","p":1761},{"i":1770,"t":"Admin Kubeconfig Options","u":"/kr/cli/server","h":"#admin-kubeconfig-options","p":1761},{"i":1772,"t":"Advanced Options","u":"/kr/cli/server","h":"#advanced-options","p":1761},{"i":1773,"t":"Logging","u":"/kr/cli/server","h":"#logging","p":1761},{"i":1775,"t":"Listeners","u":"/kr/cli/server","h":"#listeners","p":1761},{"i":1777,"t":"Data","u":"/kr/cli/server","h":"#data","p":1761},{"i":1779,"t":"Secrets Encryption","u":"/kr/cli/server","h":"#secrets-encryption","p":1761},{"i":1781,"t":"Networking","u":"/kr/cli/server","h":"#networking","p":1761},{"i":1783,"t":"Storage Class","u":"/kr/cli/server","h":"#storage-class","p":1761},{"i":1785,"t":"Kubernetes Components","u":"/kr/cli/server","h":"#kubernetes-components","p":1761},{"i":1787,"t":"Customized Flags for Kubernetes Processes","u":"/kr/cli/server","h":"#customized-flags-for-kubernetes-processes","p":1761},{"i":1789,"t":"Experimental Options","u":"/kr/cli/server","h":"#experimental-options","p":1761},{"i":1791,"t":"Deprecated Options","u":"/kr/cli/server","h":"#deprecated-options","p":1761},{"i":1793,"t":"K3s Server CLI Help","u":"/kr/cli/server","h":"","p":1761},{"i":1797,"t":"Token Format","u":"/kr/cli/token","h":"#token-format","p":1795},{"i":1799,"t":"Secure","u":"/kr/cli/token","h":"#secure","p":1795},{"i":1801,"t":"Short","u":"/kr/cli/token","h":"#short","p":1795},{"i":1803,"t":"Token Types","u":"/kr/cli/token","h":"#token-types","p":1795},{"i":1805,"t":"Server","u":"/kr/cli/token","h":"#server","p":1795},{"i":1807,"t":"Agent","u":"/kr/cli/token","h":"#agent","p":1795},{"i":1809,"t":"Bootstrap","u":"/kr/cli/token","h":"#bootstrap","p":1795},{"i":1814,"t":"외부에서 kubectl로 클러스터에 접근하기","u":"/kr/cluster-access","h":"#외부에서-kubectl로-클러스터에-접근하기","p":1812},{"i":1818,"t":"Backup and Restore with SQLite","u":"/kr/datastore/backup-restore","h":"#backup-and-restore-with-sqlite","p":1816},{"i":1820,"t":"Backup and Restore with External Datastore","u":"/kr/datastore/backup-restore","h":"#backup-and-restore-with-external-datastore","p":1816},{"i":1822,"t":"Backup and Restore with Embedded etcd Datastore","u":"/kr/datastore/backup-restore","h":"#backup-and-restore-with-embedded-etcd-datastore","p":1816},{"i":1826,"t":"외부 데이터스토어 구성 파라미터","u":"/kr/datastore","h":"#외부-데이터스토어-구성-파라미터","p":1824},{"i":1828,"t":"데이터스토어 엔드포인트 형식 및 기능","u":"/kr/datastore","h":"#데이터스토어-엔드포인트-형식-및-기능","p":1824},{"i":1833,"t":"Installation Outline","u":"/kr/datastore/ha","h":"#installation-outline","p":1831},{"i":1835,"t":"1. Create an External Datastore","u":"/kr/datastore/ha","h":"#1-create-an-external-datastore","p":1831},{"i":1837,"t":"2. Launch Server Nodes","u":"/kr/datastore/ha","h":"#2-launch-server-nodes","p":1831},{"i":1839,"t":"3. Configure the Fixed Registration Address","u":"/kr/datastore/ha","h":"#3-configure-the-fixed-registration-address","p":1831},{"i":1841,"t":"4. Optional: Join Additional Server Nodes","u":"/kr/datastore/ha","h":"#4-optional-join-additional-server-nodes","p":1831},{"i":1843,"t":"5. Optional: Join Agent Nodes","u":"/kr/datastore/ha","h":"#5-optional-join-agent-nodes","p":1831},{"i":1847,"t":"New cluster","u":"/kr/datastore/ha-embedded","h":"#new-cluster","p":1845},{"i":1849,"t":"Existing clusters","u":"/kr/datastore/ha-embedded","h":"#existing-clusters","p":1845},{"i":1853,"t":"K3s가 Kubernetes를 대체하기에 적합한가요?","u":"/kr/faq","h":"#k3s가-kubernetes를-대체하기에-적합한가요","p":1851},{"i":1855,"t":"Traefik 대신 자체 Ingress를 사용하려면 어떻게 해야 하나요?","u":"/kr/faq","h":"#traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요","p":1851},{"i":1857,"t":"K3s는 Windows를 지원하나요?","u":"/kr/faq","h":"#k3s는-windows를-지원하나요","p":1851},{"i":1859,"t":"소스로부터 빌드하려면 어떻게 해야 하나요?","u":"/kr/faq","h":"#소스로부터-빌드하려면-어떻게-해야-하나요","p":1851},{"i":1861,"t":"K3s 로그는 어디에 있나요?","u":"/kr/faq","h":"#k3s-로그는-어디에-있나요","p":1851},{"i":1863,"t":"Docker에서 K3s를 실행할 수 있나요?","u":"/kr/faq","h":"#docker에서-k3s를-실행할-수-있나요","p":1851},{"i":1865,"t":"K3s 서버와 에이전트 토큰의 차이점은 무엇인가요?","u":"/kr/faq","h":"#k3s-서버와-에이전트-토큰의-차이점은-무엇인가요","p":1851},{"i":1867,"t":"K3s의 다른 버전들은 얼마나 호환되나요?","u":"/kr/faq","h":"#k3s의-다른-버전들은-얼마나-호환되나요","p":1851},{"i":1869,"t":"문제가 발생했는데 어디서 도움을 받을 수 있나요?","u":"/kr/faq","h":"#문제가-발생했는데-어디서-도움을-받을-수-있나요","p":1851},{"i":1875,"t":"헬름 컨트롤러 사용하기","u":"/kr/helm","h":"#헬름-컨트롤러-사용하기","p":1873},{"i":1877,"t":"HelmChartConfig로 패키지 컴포넌트 커스터마이징하기","u":"/kr/helm","h":"#helmchartconfig로-패키지-컴포넌트-커스터마이징하기","p":1873},{"i":1879,"t":"헬름 버전 2에서 마이그레이션하기","u":"/kr/helm","h":"#헬름-버전-2에서-마이그레이션하기","p":1873},{"i":1883,"t":"Private Registry Method","u":"/kr/installation/airgap","h":"#private-registry-method","p":1881},{"i":1885,"t":"Create the Registry YAML","u":"/kr/installation/airgap","h":"#create-the-registry-yaml","p":1881},{"i":1887,"t":"Manually Deploy Images Method","u":"/kr/installation/airgap","h":"#manually-deploy-images-method","p":1881},{"i":1889,"t":"Prepare the Images Directory and K3s Binary","u":"/kr/installation/airgap","h":"#prepare-the-images-directory-and-k3s-binary","p":1881},{"i":1891,"t":"Install K3s","u":"/kr/installation/airgap","h":"#install-k3s","p":1881},{"i":1892,"t":"Prerequisites","u":"/kr/installation/airgap","h":"#prerequisites","p":1881},{"i":1894,"t":"Installing K3s in an Air-Gapped Environment","u":"/kr/installation/airgap","h":"#installing-k3s-in-an-air-gapped-environment","p":1881},{"i":1896,"t":"Upgrading","u":"/kr/installation/airgap","h":"#upgrading","p":1881},{"i":1897,"t":"Install Script Method","u":"/kr/installation/airgap","h":"#install-script-method","p":1881},{"i":1899,"t":"Automated Upgrades Method","u":"/kr/installation/airgap","h":"#automated-upgrades-method","p":1881},{"i":1903,"t":"Configuration with install script","u":"/kr/installation/configuration","h":"#configuration-with-install-script","p":1901},{"i":1905,"t":"Configuration with binary","u":"/kr/installation/configuration","h":"#configuration-with-binary","p":1901},{"i":1907,"t":"Configuration File","u":"/kr/installation/configuration","h":"#configuration-file","p":1901},{"i":1909,"t":"Multiple Config Files","u":"/kr/installation/configuration","h":"#multiple-config-files","p":1901},{"i":1911,"t":"Putting it all together","u":"/kr/installation/configuration","h":"#putting-it-all-together","p":1901},{"i":1915,"t":"Deploying the Kubernetes Dashboard","u":"/kr/installation/kube-dashboard","h":"#deploying-the-kubernetes-dashboard","p":1913},{"i":1917,"t":"Dashboard RBAC Configuration","u":"/kr/installation/kube-dashboard","h":"#dashboard-rbac-configuration","p":1913},{"i":1919,"t":"Obtain the Bearer Token","u":"/kr/installation/kube-dashboard","h":"#obtain-the-bearer-token","p":1913},{"i":1921,"t":"Local Access to the Dashboard","u":"/kr/installation/kube-dashboard","h":"#local-access-to-the-dashboard","p":1913},{"i":1923,"t":"Upgrading the Dashboard","u":"/kr/installation/kube-dashboard","h":"#upgrading-the-dashboard","p":1913},{"i":1925,"t":"Deleting the Dashboard and admin-user configuration","u":"/kr/installation/kube-dashboard","h":"#deleting-the-dashboard-and-admin-user-configuration","p":1913},{"i":1928,"t":"Auto-Deploying Manifests (AddOns)","u":"/kr/installation/packaged-components","h":"#auto-deploying-manifests-addons","p":1927},{"i":1930,"t":"Packaged Components","u":"/kr/installation/packaged-components","h":"#packaged-components","p":1927},{"i":1932,"t":"User AddOns","u":"/kr/installation/packaged-components","h":"#user-addons","p":1927},{"i":1934,"t":"Disabling Manifests","u":"/kr/installation/packaged-components","h":"#disabling-manifests","p":1927},{"i":1936,"t":"Using the --disable flag","u":"/kr/installation/packaged-components","h":"#using-the---disable-flag","p":1927},{"i":1938,"t":"Using .skip files","u":"/kr/installation/packaged-components","h":"#using-skip-files","p":1927},{"i":1940,"t":"Helm AddOns","u":"/kr/installation/packaged-components","h":"#helm-addons","p":1927},{"i":1944,"t":"Flannel Options","u":"/kr/installation/network-options","h":"#flannel-options","p":1942},{"i":1946,"t":"Migrating from wireguard or ipsec to wireguard-native","u":"/kr/installation/network-options","h":"#migrating-from-wireguard-or-ipsec-to-wireguard-native","p":1942},{"i":1948,"t":"Custom CNI","u":"/kr/installation/network-options","h":"#custom-cni","p":1942},{"i":1950,"t":"Control-Plane Egress Selector configuration","u":"/kr/installation/network-options","h":"#control-plane-egress-selector-configuration","p":1942},{"i":1952,"t":"Dual-stack (IPv4 + IPv6) Networking","u":"/kr/installation/network-options","h":"#dual-stack-ipv4--ipv6-networking","p":1942},{"i":1954,"t":"Single-stack IPv6 Networking","u":"/kr/installation/network-options","h":"#single-stack-ipv6-networking","p":1942},{"i":1956,"t":"Distributed hybrid or multicloud cluster","u":"/kr/installation/network-options","h":"#distributed-hybrid-or-multicloud-cluster","p":1942},{"i":1960,"t":"Registries Configuration File","u":"/kr/installation/private-registry","h":"#registries-configuration-file","p":1958},{"i":1962,"t":"Mirrors","u":"/kr/installation/private-registry","h":"#mirrors","p":1958},{"i":1964,"t":"Configs","u":"/kr/installation/private-registry","h":"#configs","p":1958},{"i":1966,"t":"With TLS","u":"/kr/installation/private-registry","h":"#with-tls","p":1958},{"i":1968,"t":"Without TLS","u":"/kr/installation/private-registry","h":"#without-tls","p":1958},{"i":1970,"t":"Adding Images to the Private Registry","u":"/kr/installation/private-registry","h":"#adding-images-to-the-private-registry","p":1958},{"i":1974,"t":"Prerequisites","u":"/kr/installation/requirements","h":"#prerequisites","p":1972},{"i":1976,"t":"Architecture","u":"/kr/installation/requirements","h":"#architecture","p":1972},{"i":1978,"t":"Operating Systems","u":"/kr/installation/requirements","h":"#operating-systems","p":1972},{"i":1980,"t":"Hardware","u":"/kr/installation/requirements","h":"#hardware","p":1972},{"i":1982,"t":"Networking","u":"/kr/installation/requirements","h":"#networking","p":1972},{"i":1984,"t":"Inbound Rules for K3s Server Nodes","u":"/kr/installation/requirements","h":"#inbound-rules-for-k3s-server-nodes","p":1972},{"i":1986,"t":"Large Clusters","u":"/kr/installation/requirements","h":"#large-clusters","p":1972},{"i":1988,"t":"CPU and Memory","u":"/kr/installation/requirements","h":"#cpu-and-memory","p":1972},{"i":1990,"t":"Disks","u":"/kr/installation/requirements","h":"#disks-1","p":1972},{"i":1992,"t":"Network","u":"/kr/installation/requirements","h":"#network","p":1972},{"i":1994,"t":"Database","u":"/kr/installation/requirements","h":"#database","p":1972},{"i":1998,"t":"Dedicated etcd Nodes","u":"/kr/installation/server-roles","h":"#dedicated-etcd-nodes","p":1996},{"i":2000,"t":"Dedicated control-plane Nodes","u":"/kr/installation/server-roles","h":"#dedicated-control-plane-nodes","p":1996},{"i":2002,"t":"Adding Roles To Existing Servers","u":"/kr/installation/server-roles","h":"#adding-roles-to-existing-servers","p":1996},{"i":2004,"t":"Configuration File Syntax","u":"/kr/installation/server-roles","h":"#configuration-file-syntax","p":1996},{"i":2008,"t":"Uninstalling Servers","u":"/kr/installation/uninstall","h":"#uninstalling-servers","p":2006},{"i":2010,"t":"Uninstalling Agents","u":"/kr/installation/uninstall","h":"#uninstalling-agents","p":2006},{"i":2014,"t":"스냅(Snap) 도커","u":"/kr/known-issues","h":"#스냅snap-도커","p":2012},{"i":2016,"t":"Iptables","u":"/kr/known-issues","h":"#iptables","p":2012},{"i":2018,"t":"Rootless Mode","u":"/kr/known-issues","h":"#rootless-mode","p":2012},{"i":2020,"t":"강화된(Hardened) 클러스터를 v1.24.x에서 v1.25.x로 업그레이드하기","u":"/kr/known-issues","h":"","p":2012},{"i":2024,"t":"CoreDNS","u":"/kr/networking","h":"#coredns","p":2022},{"i":2026,"t":"Traefik 인그레스 컨트롤러","u":"/kr/networking","h":"#traefik-인그레스-컨트롤러","p":2022},{"i":2028,"t":"네트워크 정책 컨트롤러 (Network Policy Controller)","u":"/kr/networking","h":"#네트워크-정책-컨트롤러-network-policy-controller","p":2022},{"i":2030,"t":"서비스 로드밸런서","u":"/kr/networking","h":"#서비스-로드밸런서","p":2022},{"i":2032,"t":"ServiceLB 작동 방식","u":"/kr/networking","h":"#servicelb-작동-방식","p":2022},{"i":2034,"t":"사용법","u":"/kr/networking","h":"#사용법","p":2022},{"i":2036,"t":"ServiceLB 노드 선택 제어하기","u":"/kr/networking","h":"#servicelb-노드-선택-제어하기","p":2022},{"i":2038,"t":"ServiceLB 노드 풀 생성하기","u":"/kr/networking","h":"#servicelb-노드-풀-생성하기","p":2022},{"i":2040,"t":"ServiceLB 비활성화","u":"/kr/networking","h":"#servicelb-비활성화","p":2022},{"i":2042,"t":"외부 클라우드 컨트롤러 매니저 배포하기","u":"/kr/networking","h":"#외부-클라우드-컨트롤러-매니저-배포하기","p":2022},{"i":2044,"t":"호스트 이름이 없는 노드","u":"/kr/networking","h":"#호스트-이름이-없는-노드","p":2022},{"i":2048,"t":"설치 스크립트","u":"/kr/quick-start","h":"#설치-스크립트","p":2046},{"i":2056,"t":"Scope of Resource Testing","u":"/kr/reference/resource-profiling","h":"#scope-of-resource-testing","p":2054},{"i":2058,"t":"Components Included for Baseline Measurements","u":"/kr/reference/resource-profiling","h":"#components-included-for-baseline-measurements","p":2054},{"i":2060,"t":"Methodology","u":"/kr/reference/resource-profiling","h":"#methodology","p":2054},{"i":2062,"t":"Environment","u":"/kr/reference/resource-profiling","h":"#environment","p":2054},{"i":2064,"t":"Baseline Resource Requirements","u":"/kr/reference/resource-profiling","h":"#baseline-resource-requirements","p":2054},{"i":2066,"t":"K3s Server with a Workload","u":"/kr/reference/resource-profiling","h":"#k3s-server-with-a-workload","p":2054},{"i":2068,"t":"K3s Cluster with a Single Agent","u":"/kr/reference/resource-profiling","h":"#k3s-cluster-with-a-single-agent","p":2054},{"i":2070,"t":"K3s Agent","u":"/kr/reference/resource-profiling","h":"#k3s-agent","p":2054},{"i":2072,"t":"Analysis","u":"/kr/reference/resource-profiling","h":"#analysis","p":2054},{"i":2074,"t":"Primary Resource Utilization Drivers","u":"/kr/reference/resource-profiling","h":"#primary-resource-utilization-drivers","p":2054},{"i":2076,"t":"Preventing Agents and Workloads from Interfering with the Cluster Datastore","u":"/kr/reference/resource-profiling","h":"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore","p":2054},{"i":2080,"t":"Secrets Encryption Tool","u":"/kr/security/secrets-encryption","h":"#secrets-encryption-tool","p":2078},{"i":2086,"t":"Host-level Requirements","u":"/kr/security/hardening-guide","h":"#host-level-requirements","p":2084},{"i":2088,"t":"Ensure protect-kernel-defaults is set","u":"/kr/security/hardening-guide","h":"#ensure-protect-kernel-defaults-is-set","p":2084},{"i":2090,"t":"Kubernetes Runtime Requirements","u":"/kr/security/hardening-guide","h":"#kubernetes-runtime-requirements","p":2084},{"i":2092,"t":"Pod Security","u":"/kr/security/hardening-guide","h":"#pod-security","p":2084},{"i":2094,"t":"NetworkPolicies","u":"/kr/security/hardening-guide","h":"#networkpolicies","p":2084},{"i":2096,"t":"API Server audit configuration","u":"/kr/security/hardening-guide","h":"#api-server-audit-configuration","p":2084},{"i":2098,"t":"Configuration for Kubernetes Components","u":"/kr/security/hardening-guide","h":"#configuration-for-kubernetes-components","p":2084},{"i":2100,"t":"Control Plane Execution and Arguments","u":"/kr/security/hardening-guide","h":"#control-plane-execution-and-arguments","p":2084},{"i":2102,"t":"Known Issues","u":"/kr/security/hardening-guide","h":"#known-issues","p":2084},{"i":2104,"t":"Control 1.2.15","u":"/kr/security/hardening-guide","h":"#control-1215","p":2084},{"i":2106,"t":"Control 1.2.16","u":"/kr/security/hardening-guide","h":"#control-1216","p":2084},{"i":2108,"t":"Control 1.2.22","u":"/kr/security/hardening-guide","h":"#control-1222","p":2084},{"i":2110,"t":"Control 1.2.23","u":"/kr/security/hardening-guide","h":"#control-1223","p":2084},{"i":2112,"t":"Control 1.2.24","u":"/kr/security/hardening-guide","h":"#control-1224","p":2084},{"i":2114,"t":"Control 1.2.25","u":"/kr/security/hardening-guide","h":"#control-1225","p":2084},{"i":2116,"t":"Control 1.2.26","u":"/kr/security/hardening-guide","h":"#control-1226","p":2084},{"i":2118,"t":"Control 1.2.27","u":"/kr/security/hardening-guide","h":"#control-1227","p":2084},{"i":2120,"t":"Control 1.2.33","u":"/kr/security/hardening-guide","h":"#control-1233","p":2084},{"i":2122,"t":"Control 1.2.34","u":"/kr/security/hardening-guide","h":"#control-1234","p":2084},{"i":2124,"t":"Control 1.3.1","u":"/kr/security/hardening-guide","h":"#control-131","p":2084},{"i":2126,"t":"Control 3.2.1","u":"/kr/security/hardening-guide","h":"#control-321","p":2084},{"i":2128,"t":"Control 4.2.7","u":"/kr/security/hardening-guide","h":"#control-427","p":2084},{"i":2130,"t":"Control 5.1.5","u":"/kr/security/hardening-guide","h":"#control-515","p":2084},{"i":2132,"t":"Conclusion","u":"/kr/security/hardening-guide","h":"#conclusion","p":2084},{"i":2136,"t":"K3s 스토리지의 차이점은 무엇인가요?","u":"/kr/storage","h":"#k3s-스토리지의-차이점은-무엇인가요","p":2134},{"i":2138,"t":"로컬 스토리지 공급자 설정하기","u":"/kr/storage","h":"#로컬-스토리지-공급자-설정하기","p":2134},{"i":2140,"t":"pvc.yaml","u":"/kr/storage","h":"#pvcyaml","p":2134},{"i":2142,"t":"pod.yaml","u":"/kr/storage","h":"#podyaml","p":2134},{"i":2144,"t":"Longhorn 구성하기","u":"/kr/storage","h":"#longhorn-구성하기","p":2134},{"i":2146,"t":"pvc.yaml","u":"/kr/storage","h":"#pvcyaml-1","p":2134},{"i":2148,"t":"pod.yaml","u":"/kr/storage","h":"#podyaml-1","p":2134},{"i":2151,"t":"K3s 클러스터 업그레이드하기","u":"/kr/upgrades","h":"#k3s-클러스터-업그레이드하기","p":2150},{"i":2153,"t":"버전별 주의사항","u":"/kr/upgrades","h":"#버전별-주의사항","p":2150},{"i":2158,"t":"Overview","u":"/kr/upgrades/automated","h":"#overview","p":2157},{"i":2160,"t":"Install the system-upgrade-controller","u":"/kr/upgrades/automated","h":"#install-the-system-upgrade-controller","p":2157},{"i":2162,"t":"Configure plans","u":"/kr/upgrades/automated","h":"#configure-plans","p":2157},{"i":2166,"t":"Release Channels","u":"/kr/upgrades/manual","h":"#release-channels","p":2164},{"i":2168,"t":"Upgrade K3s Using the Installation Script","u":"/kr/upgrades/manual","h":"#upgrade-k3s-using-the-installation-script","p":2164},{"i":2170,"t":"Manually Upgrade K3s Using the Binary","u":"/kr/upgrades/manual","h":"#manually-upgrade-k3s-using-the-binary","p":2164},{"i":2172,"t":"Restarting K3s","u":"/kr/upgrades/manual","h":"#restarting-k3s","p":2164},{"i":2175,"t":"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24","u":"/kr/security/self-assessment","h":"#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124","p":2174},{"i":2177,"t":"Controls","u":"/kr/security/self-assessment","h":"#controls","p":2174},{"i":2178,"t":"1.1 Control Plane Node Configuration Files","u":"/kr/security/self-assessment","h":"#11-control-plane-node-configuration-files","p":2174},{"i":2179,"t":"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2181,"t":"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2183,"t":"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2185,"t":"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2187,"t":"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2189,"t":"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2191,"t":"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2193,"t":"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2195,"t":"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2197,"t":"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)","u":"/kr/security/self-assessment","h":"#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual","p":2174},{"i":2199,"t":"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated","p":2174},{"i":2201,"t":"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)","u":"/kr/security/self-assessment","h":"#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated","p":2174},{"i":2203,"t":"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated","p":2174},{"i":2205,"t":"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2207,"t":"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2209,"t":"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2211,"t":"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2213,"t":"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2215,"t":"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2217,"t":"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2219,"t":"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)","u":"/kr/security/self-assessment","h":"#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual","p":2174},{"i":2221,"t":"1.2 API Server","u":"/kr/security/self-assessment","h":"#12-api-server","p":2174},{"i":2222,"t":"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)","u":"/kr/security/self-assessment","h":"#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual","p":2174},{"i":2224,"t":"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)","u":"/kr/security/self-assessment","h":"#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated","p":2174},{"i":2226,"t":"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)","u":"/kr/security/self-assessment","h":"#123-ensure-that-the---denyserviceexternalips-is-not-set-automated","p":2174},{"i":2228,"t":"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated","p":2174},{"i":2230,"t":"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated","p":2174},{"i":2232,"t":"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated","p":2174},{"i":2234,"t":"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/kr/security/self-assessment","h":"#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":2174},{"i":2236,"t":"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)","u":"/kr/security/self-assessment","h":"#128-ensure-that-the---authorization-mode-argument-includes-node-automated","p":2174},{"i":2238,"t":"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)","u":"/kr/security/self-assessment","h":"#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated","p":2174},{"i":2240,"t":"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)","u":"/kr/security/self-assessment","h":"#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual","p":2174},{"i":2242,"t":"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)","u":"/kr/security/self-assessment","h":"#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated","p":2174},{"i":2244,"t":"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)","u":"/kr/security/self-assessment","h":"#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual","p":2174},{"i":2246,"t":"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)","u":"/kr/security/self-assessment","h":"#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual","p":2174},{"i":2248,"t":"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)","u":"/kr/security/self-assessment","h":"#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated","p":2174},{"i":2250,"t":"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)","u":"/kr/security/self-assessment","h":"#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated","p":2174},{"i":2252,"t":"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)","u":"/kr/security/self-assessment","h":"#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated","p":2174},{"i":2254,"t":"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)","u":"/kr/security/self-assessment","h":"#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated","p":2174},{"i":2256,"t":"1.2.18 Ensure that the --profiling argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#1218-ensure-that-the---profiling-argument-is-set-to-false-automated","p":2174},{"i":2258,"t":"1.2.19 Ensure that the --audit-log-path argument is set (Automated)","u":"/kr/security/self-assessment","h":"#1219-ensure-that-the---audit-log-path-argument-is-set-automated","p":2174},{"i":2260,"t":"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated","p":2174},{"i":2262,"t":"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated","p":2174},{"i":2264,"t":"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated","p":2174},{"i":2266,"t":"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated","p":2174},{"i":2268,"t":"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated","p":2174},{"i":2270,"t":"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated","p":2174},{"i":2272,"t":"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated","p":2174},{"i":2274,"t":"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2276,"t":"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated","p":2174},{"i":2278,"t":"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)","u":"/kr/security/self-assessment","h":"#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual","p":2174},{"i":2280,"t":"1.2.31 Ensure that encryption providers are appropriately configured (Manual)","u":"/kr/security/self-assessment","h":"#1231-ensure-that-encryption-providers-are-appropriately-configured-manual","p":2174},{"i":2282,"t":"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)","u":"/kr/security/self-assessment","h":"#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual","p":2174},{"i":2284,"t":"1.3 Controller Manager","u":"/kr/security/self-assessment","h":"#13-controller-manager","p":2174},{"i":2285,"t":"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)","u":"/kr/security/self-assessment","h":"#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual","p":2174},{"i":2287,"t":"1.3.2 Ensure that the --profiling argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#132-ensure-that-the---profiling-argument-is-set-to-false-automated","p":2174},{"i":2289,"t":"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated","p":2174},{"i":2291,"t":"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2293,"t":"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2295,"t":"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated","p":2174},{"i":2297,"t":"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/kr/security/self-assessment","h":"#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":2174},{"i":2299,"t":"1.4 Scheduler","u":"/kr/security/self-assessment","h":"#14-scheduler","p":2174},{"i":2300,"t":"1.4.1 Ensure that the --profiling argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#141-ensure-that-the---profiling-argument-is-set-to-false-automated","p":2174},{"i":2302,"t":"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/kr/security/self-assessment","h":"#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":2174},{"i":2304,"t":"2 Etcd Node Configuration","u":"/kr/security/self-assessment","h":"#2-etcd-node-configuration","p":2174},{"i":2305,"t":"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated","p":2174},{"i":2307,"t":"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated","p":2174},{"i":2309,"t":"2.3 Ensure that the --auto-tls argument is not set to true (Automated)","u":"/kr/security/self-assessment","h":"#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated","p":2174},{"i":2311,"t":"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated","p":2174},{"i":2313,"t":"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated","p":2174},{"i":2315,"t":"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)","u":"/kr/security/self-assessment","h":"#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated","p":2174},{"i":2317,"t":"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)","u":"/kr/security/self-assessment","h":"#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual","p":2174},{"i":2319,"t":"3.1 Authentication and Authorization","u":"/kr/security/self-assessment","h":"#31-authentication-and-authorization","p":2174},{"i":2320,"t":"3.1.1 Client certificate authentication should not be used for users (Manual)","u":"/kr/security/self-assessment","h":"#311-client-certificate-authentication-should-not-be-used-for-users-manual","p":2174},{"i":2322,"t":"3.2 Logging","u":"/kr/security/self-assessment","h":"#32-logging","p":2174},{"i":2323,"t":"3.2.1 Ensure that a minimal audit policy is created (Manual)","u":"/kr/security/self-assessment","h":"#321-ensure-that-a-minimal-audit-policy-is-created-manual","p":2174},{"i":2325,"t":"3.2.2 Ensure that the audit policy covers key security concerns (Manual)","u":"/kr/security/self-assessment","h":"#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual","p":2174},{"i":2327,"t":"4.1 Worker Node Configuration Files","u":"/kr/security/self-assessment","h":"#41-worker-node-configuration-files","p":2174},{"i":2328,"t":"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2330,"t":"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2332,"t":"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2334,"t":"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)","u":"/kr/security/self-assessment","h":"#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual","p":2174},{"i":2336,"t":"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2338,"t":"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2340,"t":"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2342,"t":"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)","u":"/kr/security/self-assessment","h":"#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual","p":2174},{"i":2344,"t":"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated","p":2174},{"i":2346,"t":"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2348,"t":"4.2 Kubelet","u":"/kr/security/self-assessment","h":"#42-kubelet","p":2174},{"i":2349,"t":"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated","p":2174},{"i":2351,"t":"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/kr/security/self-assessment","h":"#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":2174},{"i":2353,"t":"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2355,"t":"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)","u":"/kr/security/self-assessment","h":"#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual","p":2174},{"i":2357,"t":"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)","u":"/kr/security/self-assessment","h":"#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual","p":2174},{"i":2359,"t":"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated","p":2174},{"i":2361,"t":"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated","p":2174},{"i":2363,"t":"4.2.8 Ensure that the --hostname-override argument is not set (Manual)","u":"/kr/security/self-assessment","h":"#428-ensure-that-the---hostname-override-argument-is-not-set-manual","p":2174},{"i":2365,"t":"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)","u":"/kr/security/self-assessment","h":"#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual","p":2174},{"i":2367,"t":"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)","u":"/kr/security/self-assessment","h":"#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual","p":2174},{"i":2369,"t":"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)","u":"/kr/security/self-assessment","h":"#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated","p":2174},{"i":2371,"t":"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)","u":"/kr/security/self-assessment","h":"#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual","p":2174},{"i":2373,"t":"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)","u":"/kr/security/self-assessment","h":"#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual","p":2174},{"i":2375,"t":"5.1 RBAC and Service Accounts","u":"/kr/security/self-assessment","h":"#51-rbac-and-service-accounts","p":2174},{"i":2376,"t":"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)","u":"/kr/security/self-assessment","h":"#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual","p":2174},{"i":2378,"t":"5.1.2 Minimize access to secrets (Manual)","u":"/kr/security/self-assessment","h":"#512-minimize-access-to-secrets-manual","p":2174},{"i":2380,"t":"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)","u":"/kr/security/self-assessment","h":"#513-minimize-wildcard-use-in-roles-and-clusterroles-manual","p":2174},{"i":2382,"t":"5.1.4 Minimize access to create pods (Manual)","u":"/kr/security/self-assessment","h":"#514-minimize-access-to-create-pods-manual","p":2174},{"i":2384,"t":"5.1.5 Ensure that default service accounts are not actively used. (Manual)","u":"/kr/security/self-assessment","h":"#515-ensure-that-default-service-accounts-are-not-actively-used-manual","p":2174},{"i":2386,"t":"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)","u":"/kr/security/self-assessment","h":"#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual","p":2174},{"i":2388,"t":"5.1.7 Avoid use of system:masters group (Manual)","u":"/kr/security/self-assessment","h":"#517-avoid-use-of-systemmasters-group-manual","p":2174},{"i":2390,"t":"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)","u":"/kr/security/self-assessment","h":"#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual","p":2174},{"i":2392,"t":"5.2 Pod Security Standards","u":"/kr/security/self-assessment","h":"#52-pod-security-standards","p":2174},{"i":2393,"t":"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)","u":"/kr/security/self-assessment","h":"#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual","p":2174},{"i":2395,"t":"5.2.2 Minimize the admission of privileged containers (Automated)","u":"/kr/security/self-assessment","h":"#522-minimize-the-admission-of-privileged-containers-automated","p":2174},{"i":2397,"t":"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)","u":"/kr/security/self-assessment","h":"#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated","p":2174},{"i":2399,"t":"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)","u":"/kr/security/self-assessment","h":"#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated","p":2174},{"i":2401,"t":"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)","u":"/kr/security/self-assessment","h":"#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated","p":2174},{"i":2403,"t":"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)","u":"/kr/security/self-assessment","h":"#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated","p":2174},{"i":2405,"t":"5.2.7 Minimize the admission of root containers (Automated)","u":"/kr/security/self-assessment","h":"#527-minimize-the-admission-of-root-containers-automated","p":2174},{"i":2407,"t":"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)","u":"/kr/security/self-assessment","h":"#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated","p":2174},{"i":2409,"t":"5.2.9 Minimize the admission of containers with added capabilities (Automated)","u":"/kr/security/self-assessment","h":"#529-minimize-the-admission-of-containers-with-added-capabilities-automated","p":2174},{"i":2411,"t":"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)","u":"/kr/security/self-assessment","h":"#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual","p":2174},{"i":2413,"t":"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)","u":"/kr/security/self-assessment","h":"#5211-minimize-the-admission-of-windows-hostprocess-containers-manual","p":2174},{"i":2415,"t":"5.2.12 Minimize the admission of HostPath volumes (Manual)","u":"/kr/security/self-assessment","h":"#5212-minimize-the-admission-of-hostpath-volumes-manual","p":2174},{"i":2417,"t":"5.2.13 Minimize the admission of containers which use HostPorts (Manual)","u":"/kr/security/self-assessment","h":"#5213-minimize-the-admission-of-containers-which-use-hostports-manual","p":2174},{"i":2419,"t":"5.3 Network Policies and CNI","u":"/kr/security/self-assessment","h":"#53-network-policies-and-cni","p":2174},{"i":2420,"t":"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)","u":"/kr/security/self-assessment","h":"#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual","p":2174},{"i":2422,"t":"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)","u":"/kr/security/self-assessment","h":"#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual","p":2174},{"i":2424,"t":"5.4 Secrets Management","u":"/kr/security/self-assessment","h":"#54-secrets-management","p":2174},{"i":2425,"t":"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)","u":"/kr/security/self-assessment","h":"#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual","p":2174},{"i":2427,"t":"5.4.2 Consider external secret storage (Manual)","u":"/kr/security/self-assessment","h":"#542-consider-external-secret-storage-manual","p":2174},{"i":2429,"t":"5.5 Extensible Admission Control","u":"/kr/security/self-assessment","h":"#55-extensible-admission-control","p":2174},{"i":2430,"t":"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)","u":"/kr/security/self-assessment","h":"#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual","p":2174},{"i":2432,"t":"5.7 General Policies","u":"/kr/security/self-assessment","h":"#57-general-policies","p":2174},{"i":2433,"t":"5.7.1 Create administrative boundaries between resources using namespaces (Manual)","u":"/kr/security/self-assessment","h":"#571-create-administrative-boundaries-between-resources-using-namespaces-manual","p":2174},{"i":2435,"t":"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)","u":"/kr/security/self-assessment","h":"#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual","p":2174},{"i":2437,"t":"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)","u":"/kr/security/self-assessment","h":"#573-apply-securitycontext-to-your-pods-and-containers-manual","p":2174},{"i":2439,"t":"5.7.4 The default namespace should not be used (Manual)","u":"/kr/security/self-assessment","h":"#574-the-default-namespace-should-not-be-used-manual","p":2174}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/1635",[0,3.554,1,2.249]],["t/1637",[1,2.978]],["t/1641",[2,5.808]],["t/1643",[3,4.606,4,4.726]],["t/1645",[5,6.566]],["t/1647",[6,5.05]],["t/1649",[7,7.438]],["t/1651",[8,5.174]],["t/1653",[9,5.58,10,6.177]],["t/1655",[11,7.438]],["t/1657",[12,7.438]],["t/1659",[6,3.687,13,5.983,14,5.983,15,4.104]],["t/1661",[0,2.914,15,4.104,16,5.43,17,5.43]],["t/1665",[1,2.811]],["t/1666",[1,2.92]],["t/1668",[1,2.978]],["t/1670",[1,2.811]],["t/1672",[1,2.63,18,5.967]],["t/1674",[1,2.788,19,5.065]],["t/1676",[1,2.249,20,7.296]],["t/1678",[1,2.811]],["t/1680",[1,2.788,21,5.983]],["t/1682",[1,2.978]],["t/1684",[1,2.92]],["t/1686",[1,2.978]],["t/1688",[1,2.92]],["t/1690",[1,2.92]],["t/1692",[1,2.92]],["t/1694",[1,2.978]],["t/1696",[1,2.978]],["t/1698",[1,2.788,22,5.983]],["t/1699",[1,2.63,23,5.566]],["t/1701",[1,1.563,24,5.07,25,5.07,26,5.07,27,5.07,28,5.07]],["t/1703",[29,8.196]],["t/1705",[30,7.296,31,7.296]],["t/1707",[0,3.203,1,2.027,19,5.566]],["t/1709",[1,2.249,32,6.622]],["t/1711",[1,2.63,32,5.967]],["t/1713",[1,3.039]],["t/1714",[1,2.788,33,5.983]],["t/1716",[0,2.674,1,2.874]],["t/1718",[1,2.92]],["t/1720",[1,2.978]],["t/1726",[1,2.928,34,4.601]],["t/1728",[0,2.47,1,2.776,34,4.601]],["t/1730",[1,3.039]],["t/1732",[1,3.014]],["t/1735",[35,4.378,36,3.795,37,3.875]],["t/1737",[35,3.984,36,3.454,37,3.526,38,4.395]],["t/1739",[37,4.725,39,3.875,40,4.24]],["t/1741",[9,4.576,37,3.526,40,4.24,41,3.003]],["t/1743",[9,4.576,37,3.526,38,4.395,40,4.24]],["t/1745",[37,3.235,38,4.032,40,3.89,42,5.489,43,5.489]],["t/1747",[38,4.032,44,3.655,45,3.89,46,5.489,47,3.555]],["t/1753",[48,4.378,49,4.51,50,5.967]],["t/1755",[38,4.829,47,4.259,49,4.51]],["t/1757",[48,4.378,49,4.51,51,6.575]],["t/1759",[48,4.378,49,4.51,52,6.575]],["t/1763",[53,6.575,54,3.462,55,6.575]],["t/1765",[4,4.259,41,3.3,56,6.575]],["t/1766",[57,7.438]],["t/1768",[3,4.606,4,4.726]],["t/1770",[4,4.259,58,5.566,59,5.028]],["t/1772",[4,4.726,60,7.296]],["t/1773",[2,5.808]],["t/1775",[61,8.196]],["t/1777",[5,6.566]],["t/1779",[48,4.858,49,5.005]],["t/1781",[8,5.174]],["t/1783",[62,6.622,63,7.296]],["t/1785",[64,4.606,65,5.845]],["t/1787",[9,4.576,10,5.065,64,3.777,66,5.43]],["t/1789",[4,4.726,11,6.622]],["t/1791",[4,4.726,12,6.622]],["t/1793",[0,2.914,16,5.43,17,5.43,36,3.454]],["t/1797",[67,5.58,68,7.296]],["t/1799",[69,6.268]],["t/1801",[70,8.196]],["t/1803",[67,5.58,71,7.296]],["t/1805",[36,4.731]],["t/1807",[15,5.622]],["t/1809",[72,8.196]],["t/1814",[1,2.788,73,5.983]],["t/1818",[74,5.566,75,5.566,76,6.575]],["t/1820",[74,5.065,75,5.065,77,5.065,78,4.793]],["t/1822",[74,4.647,75,4.647,78,4.397,79,5.489,80,3.555]],["t/1826",[1,2.978]],["t/1828",[1,3.014]],["t/1833",[81,5.171,82,7.296]],["t/1835",[77,5.065,78,4.793,83,5.983,84,4.576]],["t/1837",[6,3.687,36,3.454,85,5.065,86,5.983]],["t/1839",[54,2.891,87,5.489,88,5.489,89,5.489,90,4.647]],["t/1841",[4,3.284,6,3.124,36,2.927,91,5.07,92,4.601,93,5.07]],["t/1843",[4,3.555,6,3.382,15,3.765,92,4.981,94,5.489]],["t/1847",[3,4.606,95,7.296]],["t/1849",[3,4.606,96,5.845]],["t/1853",[0,2.914,1,2.472,64,3.777]],["t/1855",[1,2.895,97,3.992,98,4.399]],["t/1857",[0,3.203,1,2.027,99,5.967]],["t/1859",[1,3.014]],["t/1861",[0,2.914,1,2.788]],["t/1863",[0,2.674,1,2.667,19,4.647]],["t/1865",[0,2.47,1,2.928]],["t/1867",[0,2.674,1,2.874]],["t/1869",[1,3.056]],["t/1875",[1,2.92]],["t/1877",[1,2.788,100,5.983]],["t/1879",[1,2.788,85,5.065]],["t/1883",[101,5.028,102,5.267,103,5.267]],["t/1885",[84,5.028,102,5.267,104,6.575]],["t/1887",[103,4.793,105,2.153,106,5.065,107,4.793]],["t/1889",[0,2.674,107,4.397,108,5.489,109,4.397,110,4.647]],["t/1891",[0,3.554,81,5.171]],["t/1892",[111,7.438]],["t/1894",[0,2.674,81,3.89,112,5.489,113,5.489,114,4.647]],["t/1896",[115,6.02]],["t/1897",[81,4.659,103,5.267,116,5.566]],["t/1899",[103,5.267,115,4.829,117,1.895]],["t/1903",[54,3.462,81,4.659,116,5.566]],["t/1905",[54,3.842,110,6.177]],["t/1907",[54,3.842,118,2.761]],["t/1909",[118,2.488,119,6.575,120,5.028]],["t/1911",[121,7.296,122,7.296]],["t/1915",[64,4.15,106,5.566,123,5.028]],["t/1917",[54,3.462,123,5.028,124,5.566]],["t/1919",[67,5.028,125,6.575,126,6.575]],["t/1921",[123,5.028,127,6.575,128,5.566]],["t/1923",[115,5.36,123,5.58]],["t/1925",[54,2.891,58,4.647,123,4.198,129,5.489,130,4.647]],["t/1928",[106,5.065,131,5.065,132,5.43,133,5.065]],["t/1930",[65,5.845,134,7.296]],["t/1932",[130,6.177,133,6.177]],["t/1934",[132,6.622,135,6.622]],["t/1936",[10,5.566,41,3.3,135,5.967]],["t/1938",[41,3.3,118,2.488,136,6.575]],["t/1940",[133,6.177,137,7.296]],["t/1944",[4,4.726,138,7.296]],["t/1946",[139,5.489,140,7.562,141,5.489,142,5.489]],["t/1948",[9,5.58,143,6.177]],["t/1950",[54,2.891,144,2.317,145,4.397,146,5.489,147,5.489]],["t/1952",[1,1.563,8,3.201,148,5.07,149,4.601,150,5.07,151,4.601]],["t/1954",[8,3.777,149,5.43,151,5.43,152,5.43]],["t/1956",[3,3.777,153,5.983,154,5.983,155,5.983]],["t/1960",[54,3.462,102,5.267,118,2.488]],["t/1962",[156,8.196]],["t/1964",[120,6.268]],["t/1966",[157,6.02]],["t/1968",[157,5.36,158,7.296]],["t/1970",[101,4.576,102,4.793,107,4.793,159,5.065]],["t/1974",[111,7.438]],["t/1976",[160,8.196]],["t/1978",[161,7.296,162,6.622]],["t/1980",[163,8.196]],["t/1982",[8,5.174]],["t/1984",[0,2.674,6,3.382,36,3.168,164,5.489,165,5.489]],["t/1986",[3,4.606,166,7.296]],["t/1988",[167,7.296,168,7.296]],["t/1990",[169,8.196]],["t/1992",[8,5.174]],["t/1994",[57,7.438]],["t/1998",[6,4.051,80,4.259,170,5.967]],["t/2000",[6,3.687,144,2.526,145,4.793,170,5.43]],["t/2002",[36,3.454,96,4.793,159,5.065,171,5.065]],["t/2004",[54,3.462,118,2.488,172,6.575]],["t/2008",[36,4.212,173,6.622]],["t/2010",[15,5.005,173,6.622]],["t/2014",[1,2.249,174,7.296]],["t/2016",[23,6.939]],["t/2018",[175,7.296,176,5.58]],["t/2020",[1,2.331,177,5.489,178,5.489,179,5.489]],["t/2024",[180,8.196]],["t/2026",[1,2.63,97,5.967]],["t/2028",[1,2.556,8,3.201,144,2.141,181,3.724]],["t/2030",[1,2.811]],["t/2032",[1,2.63,182,5.267]],["t/2034",[1,2.526]],["t/2036",[1,2.788,182,4.793]],["t/2038",[1,2.788,182,4.793]],["t/2040",[1,2.249,182,5.845]],["t/2042",[1,3.014]],["t/2044",[1,2.978]],["t/2048",[1,2.811]],["t/2056",[183,6.575,184,5.267,185,6.575]],["t/2058",[65,4.793,186,5.065,187,5.43,188,5.983]],["t/2060",[189,8.196]],["t/2062",[114,6.939]],["t/2064",[184,5.267,187,5.967,190,5.267]],["t/2066",[0,3.203,36,3.795,191,5.967]],["t/2068",[0,2.914,3,3.777,15,4.104,152,5.43]],["t/2070",[0,3.554,15,5.005]],["t/2072",[192,8.196]],["t/2074",[184,4.793,193,5.983,194,5.43,195,5.983]],["t/2076",[3,3.201,15,3.478,78,4.062,191,4.601,196,5.07,197,5.07]],["t/2080",[48,4.378,49,4.51,50,5.967]],["t/2086",[190,5.267,198,5.267,199,5.967]],["t/2088",[200,1.311,201,4.981,202,4.981,203,4.397,204,1.449]],["t/2090",[7,5.967,64,4.15,190,5.267]],["t/2092",[69,5.58,205,4.3]],["t/2094",[206,6.939]],["t/2096",[36,3.454,54,3.151,207,4.576,208,4.24]],["t/2098",[54,3.462,64,4.15,65,5.267]],["t/2100",[144,2.526,145,4.793,209,5.983,210,2.218]],["t/2102",[211,7.296,212,7.296]],["t/2104",[144,3.08,213,6.622]],["t/2106",[144,3.08,214,6.622]],["t/2108",[144,3.08,215,6.622]],["t/2110",[144,3.08,216,7.296]],["t/2112",[144,3.08,217,6.622]],["t/2114",[144,3.08,218,6.622]],["t/2116",[144,3.08,219,6.622]],["t/2118",[144,3.08,220,6.622]],["t/2120",[144,3.08,221,7.296]],["t/2122",[144,3.08,222,7.296]],["t/2124",[144,3.08,223,6.622]],["t/2126",[144,3.08,224,6.622]],["t/2128",[144,3.08,225,6.622]],["t/2130",[144,3.08,226,6.622]],["t/2132",[227,8.196]],["t/2136",[0,2.914,1,2.788]],["t/2138",[1,2.978]],["t/2140",[228,7.438]],["t/2142",[229,7.438]],["t/2144",[1,2.249,230,7.296]],["t/2146",[228,7.438]],["t/2148",[229,7.438]],["t/2151",[0,3.203,1,2.63]],["t/2153",[1,2.811]],["t/2158",[231,8.196]],["t/2160",[81,4.24,115,4.395,144,2.526,162,5.43]],["t/2162",[54,3.842,232,7.296]],["t/2166",[233,7.296,234,7.296]],["t/2168",[0,2.674,41,2.755,81,3.89,115,4.032,116,4.647]],["t/2170",[0,2.674,41,2.755,105,1.975,110,4.647,115,4.032]],["t/2172",[0,3.554,235,7.296]],["t/2175",[0,2.143,64,4.078,236,4.399,237,4.399,238,4.399,239,4.399,240,4.399]],["t/2177",[144,3.46]],["t/2178",[6,3.124,54,2.67,118,1.918,144,2.141,145,4.062,241,5.07]],["t/2179",[36,1.908,117,0.953,118,1.251,200,0.789,204,0.872,205,1.948,207,2.528,242,3.305,243,2.267,244,1.835,245,1.991,246,1.908,247,1.908]],["t/2181",[36,2.119,117,1.058,118,1.389,200,0.877,204,0.969,205,2.163,207,2.807,243,2.518,248,3.67,249,2.119,250,2.163]],["t/2183",[117,0.953,118,1.251,144,1.396,200,0.789,204,0.872,205,1.948,243,2.267,244,1.835,245,1.991,246,1.908,247,1.908,251,3.305,252,2.648]],["t/2185",[117,1.058,118,1.389,144,1.55,200,0.877,204,0.969,205,2.163,243,2.518,249,2.119,250,2.163,252,2.94,253,3.67]],["t/2187",[117,1.003,118,1.316,200,0.831,204,0.918,205,2.05,243,2.386,244,1.931,245,2.095,246,2.008,247,2.008,254,3.478,255,2.945]],["t/2189",[117,1.12,118,1.47,200,0.928,204,1.025,205,2.289,243,2.665,249,2.243,250,2.289,255,3.289,256,3.885]],["t/2191",[80,2.253,117,1.003,118,1.316,200,0.831,204,0.918,205,2.05,243,2.386,244,1.931,245,2.095,246,2.008,247,2.008,257,3.478]],["t/2193",[80,2.516,117,1.12,118,1.47,200,0.928,204,1.025,205,2.289,243,2.665,249,2.243,250,2.289,258,3.885]],["t/2195",[8,2.196,105,1.252,118,1.316,200,0.831,204,0.918,244,1.931,245,2.095,246,2.008,247,2.008,259,3.478,260,2.05,261,3.157]],["t/2197",[8,2.452,105,1.398,118,1.47,200,0.928,204,1.025,249,2.243,250,2.289,260,2.289,261,3.526,262,3.885]],["t/2199",[5,2.94,80,2.377,109,2.94,117,1.058,200,0.877,204,0.969,244,2.038,246,2.119,247,2.119,263,3.67,264,3.67]],["t/2201",[5,3.305,80,2.673,109,3.305,117,1.189,200,0.986,204,1.089,249,2.382,265,4.126,266,4.126]],["t/2203",[117,1.12,118,1.47,200,0.928,204,1.025,244,2.157,246,2.243,247,2.243,267,3.885,268,3.526,269,3.526]],["t/2205",[117,1.268,118,1.664,200,1.051,204,1.161,249,2.539,250,2.592,268,3.992,270,4.399]],["t/2207",[117,1.12,118,1.47,200,0.928,204,1.025,244,2.157,245,2.34,246,2.243,247,2.243,271,3.885,272,3.526]],["t/2209",[117,1.268,118,1.664,200,1.051,204,1.161,249,2.539,250,2.592,272,3.992,273,4.399]],["t/2211",[117,1.058,118,1.389,144,1.55,200,0.877,204,0.969,244,2.038,245,2.21,246,2.119,247,2.119,274,3.67,275,3.331]],["t/2213",[117,1.189,118,1.561,144,1.742,200,0.986,204,1.089,249,2.382,250,2.432,275,3.745,276,4.126]],["t/2215",[64,2.452,109,3.112,117,1.12,118,1.47,200,0.928,204,1.025,249,2.243,250,2.289,277,3.885,278,3.289]],["t/2217",[37,2.05,64,2.196,105,1.252,118,1.316,200,0.831,204,0.918,244,1.931,245,2.095,246,2.008,247,2.008,278,2.945,279,3.478]],["t/2219",[47,2.516,64,2.452,105,1.398,118,1.47,200,0.928,204,1.025,244,2.157,269,3.526,278,3.289,280,3.885]],["t/2221",[36,3.795,207,5.028,281,6.575]],["t/2222",[105,1.583,200,1.051,204,1.161,210,1.631,282,4.399,283,3.992,284,3.364,285,3.231]],["t/2224",[67,3.364,117,1.268,118,1.664,200,1.051,204,1.161,284,3.364,286,4.399,287,4.399]],["t/2226",[117,1.582,200,1.311,204,1.449,288,5.489,289,5.489]],["t/2228",[18,3.992,117,1.268,200,1.051,204,1.161,210,1.631,290,4.399,291,2.929,292,2.777]],["t/2230",[35,3.601,37,2.05,47,2.253,117,1.003,200,0.831,204,0.918,210,1.29,291,3.601,293,3.478,294,1.832]],["t/2232",[37,2.432,39,2.673,117,1.189,200,0.986,204,1.089,210,1.53,291,2.747,294,2.173,295,4.126]],["t/2234",[39,2.849,117,1.268,176,3.364,200,1.051,204,1.161,210,1.631,296,4.399,297,3.992]],["t/2236",[6,2.711,39,2.849,117,1.268,176,3.364,186,3.724,200,1.051,210,1.631,298,4.399]],["t/2238",[39,2.849,117,1.268,124,3.724,176,3.364,186,3.724,200,1.051,210,1.631,299,4.399]],["t/2240",[105,1.583,144,1.857,200,1.051,204,1.161,300,4.399,301,2.279,302,3.117,303,4.399]],["t/2242",[117,1.268,144,1.857,200,1.051,204,1.161,301,2.279,302,3.117,304,4.399,305,4.399]],["t/2244",[105,1.583,144,1.857,200,1.051,204,1.161,301,2.279,302,3.117,306,4.399,307,4.399]],["t/2246",[41,1.95,105,1.398,144,1.64,200,0.928,204,1.025,301,2.012,302,2.753,308,3.885,309,3.885,310,3.885]],["t/2248",[117,1.268,144,1.857,200,1.051,204,1.161,301,2.279,302,3.117,311,4.399,312,4.399]],["t/2250",[117,1.268,144,1.857,200,1.051,204,1.161,213,3.992,301,2.279,302,3.117,313,4.399]],["t/2252",[117,1.268,144,1.857,200,1.051,204,1.161,214,3.992,301,2.279,302,3.117,314,4.399]],["t/2254",[69,3.364,117,1.268,200,1.051,204,1.161,210,1.631,315,4.399,316,3.992,317,3.524]],["t/2256",[117,1.358,200,1.125,204,1.243,210,1.747,285,3.46,318,4.711,319,3.774]],["t/2258",[2,3.117,117,1.268,200,1.051,204,1.161,208,3.117,210,1.631,320,4.399,321,4.399]],["t/2260",[2,2.753,117,1.12,200,0.928,204,1.025,208,2.753,210,1.44,294,2.046,322,3.885,323,3.885,324,3.885]],["t/2262",[2,2.753,117,1.12,200,0.928,204,1.025,208,2.753,210,1.44,294,2.046,325,3.885,326,3.885,327,3.885]],["t/2264",[2,2.753,117,1.12,200,0.928,204,1.025,208,2.753,210,1.44,215,3.526,294,2.046,328,3.885,329,3.885]],["t/2266",[44,2.747,45,2.924,117,1.189,200,0.986,204,1.089,210,1.53,217,3.745,292,2.605,330,4.126]],["t/2268",[117,1.268,200,1.051,204,1.161,210,1.631,218,3.992,294,2.317,331,4.399,332,3.992]],["t/2270",[80,3.814,117,1.12,200,0.928,204,1.025,210,1.44,219,3.526,294,2.046,333,3.885,334,3.885]],["t/2272",[47,2.141,101,2.528,117,0.953,118,1.966,157,3.818,200,0.789,204,0.872,210,1.225,220,3,294,1.741,335,2.428]],["t/2274",[35,2.747,40,2.924,117,1.189,118,1.561,200,0.986,204,1.089,210,1.53,294,2.173,336,4.126]],["t/2276",[80,2.849,117,1.268,200,1.051,204,1.161,210,1.631,294,2.317,337,4.399,338,4.399]],["t/2278",[49,2.83,105,1.485,120,3.156,200,0.986,204,1.089,210,1.53,294,2.173,339,4.126,340,3.745]],["t/2280",[49,3.232,54,2.481,105,1.695,200,1.125,294,2.481,340,4.275,341,4.711]],["t/2282",[36,2.243,41,1.95,105,1.398,200,0.928,207,2.971,342,3.885,343,3.289,344,3.526,345,3.526,346,3.526]],["t/2284",[144,2.776,252,5.267,347,6.575]],["t/2285",[105,1.398,200,0.928,204,1.025,205,2.289,210,1.44,223,3.526,294,2.046,348,3.885,349,3.885,350,3.885]],["t/2287",[117,1.358,200,1.125,204,1.243,210,1.747,285,3.46,319,3.774,351,4.711]],["t/2289",[41,1.95,44,2.587,45,2.753,117,1.12,200,0.928,204,1.025,210,1.44,292,2.452,352,3.885,353,3.885]],["t/2291",[44,2.444,45,2.601,47,2.377,101,2.807,117,1.058,118,1.389,200,0.877,204,0.969,210,1.361,294,1.933,354,3.67]],["t/2293",[40,2.924,117,1.189,118,1.561,200,0.986,204,1.089,210,1.53,294,2.173,355,4.126,356,3.745]],["t/2295",[117,1.358,200,1.125,204,1.243,210,1.747,292,2.974,357,4.711,358,4.275]],["t/2297",[90,3.724,117,1.268,200,1.051,204,1.161,210,1.631,359,4.399,360,3.724,361,3.992]],["t/2299",[255,6.177,362,7.296]],["t/2300",[117,1.358,200,1.125,204,1.243,210,1.747,285,3.46,319,3.774,363,4.711]],["t/2302",[90,3.724,117,1.268,200,1.051,204,1.161,210,1.631,360,3.724,361,3.992,364,4.399]],["t/2304",[6,3.687,54,3.151,80,3.875,85,5.065]],["t/2305",[47,2.516,117,1.12,118,2.228,200,0.928,204,1.025,210,1.44,294,2.046,335,2.854,365,3.885]],["t/2307",[35,2.747,117,1.189,200,0.986,204,1.089,210,1.53,284,3.156,292,2.605,335,3.031,366,4.126]],["t/2309",[117,1.268,131,3.724,157,3.231,200,1.051,204,1.161,210,1.631,292,2.777,367,4.399]],["t/2311",[47,2.253,117,1.003,118,2.046,200,0.831,204,0.918,210,1.29,294,1.832,335,2.555,368,3.478,369,4.579]],["t/2313",[35,2.587,117,1.12,200,0.928,204,1.025,210,1.44,284,2.971,292,2.452,335,2.854,369,3.289,370,3.885]],["t/2315",[117,1.189,131,3.493,157,3.031,200,0.986,204,1.089,210,1.53,292,2.605,369,3.493,371,4.126]],["t/2317",[37,2.592,39,2.849,41,2.208,80,2.849,105,1.583,200,1.051,372,4.399,373,4.399]],["t/2319",[39,4.259,374,6.575,375,5.967]],["t/2320",[35,3.137,37,2.776,41,2.364,105,1.695,130,3.988,375,4.275,376,4.711]],["t/2322",[2,5.171,377,7.296]],["t/2323",[84,3.603,105,1.695,181,3.46,200,1.125,208,3.338,224,4.275,378,2.666]],["t/2325",[47,2.673,69,3.156,105,1.485,181,3.031,200,0.986,208,2.924,379,4.126,380,4.126,381,4.126]],["t/2327",[6,3.382,54,2.891,118,2.077,382,5.489,383,5.489]],["t/2328",[44,2.444,117,1.058,118,1.389,200,0.877,204,0.969,244,2.038,245,2.21,246,2.119,247,2.119,291,2.444,384,3.67]],["t/2330",[44,2.747,117,1.189,118,1.561,200,0.986,204,1.089,249,2.382,250,2.432,291,2.747,385,4.126]],["t/2332",[59,2.66,96,2.787,105,1.252,118,1.316,200,0.831,204,0.918,244,1.931,245,2.095,246,2.008,247,2.008,386,3.478,387,3.157]],["t/2334",[59,2.971,96,3.112,105,1.398,118,1.47,200,0.928,204,1.025,249,2.243,250,2.289,387,3.526,388,3.885]],["t/2336",[59,2.807,117,1.058,118,1.389,200,0.877,204,0.969,244,2.038,245,2.21,246,2.119,247,2.119,389,3.67,390,3.331]],["t/2338",[59,3.156,117,1.189,118,1.561,200,0.986,204,1.089,249,2.382,250,2.432,390,3.745,391,4.126]],["t/2340",[37,2.163,39,2.377,105,1.321,118,1.389,200,0.877,204,0.969,244,2.038,245,2.21,246,2.119,247,2.119,392,3.67]],["t/2342",[35,2.587,37,2.289,39,2.516,105,1.398,118,1.47,200,0.928,204,1.025,249,2.243,250,2.289,393,3.885]],["t/2344",[54,1.832,117,1.003,118,1.316,120,2.66,200,0.831,204,0.918,244,1.931,245,2.095,246,2.008,247,2.008,291,2.316,394,3.478]],["t/2346",[54,2.046,117,1.12,118,1.47,120,2.971,200,0.928,204,1.025,249,2.243,250,2.289,291,2.587,395,3.885]],["t/2348",[291,4.858,396,7.296]],["t/2349",[117,1.268,200,1.051,204,1.161,210,1.631,283,3.992,284,3.364,285,3.231,397,4.399]],["t/2351",[39,2.849,117,1.268,176,3.364,200,1.051,204,1.161,210,1.631,297,3.992,398,4.399]],["t/2353",[35,2.747,40,2.924,117,1.189,118,1.561,200,0.986,204,1.089,210,1.53,294,2.173,399,4.126]],["t/2355",[105,1.583,200,1.051,204,1.161,210,1.631,316,3.992,317,3.524,400,4.399,401,4.399]],["t/2357",[105,1.398,200,0.928,204,1.025,210,1.44,317,3.112,332,3.526,402,3.885,403,3.885,404,3.885,405,3.885]],["t/2359",[117,1.189,200,0.986,201,3.745,202,3.745,203,3.305,204,1.089,210,1.53,292,2.605,406,4.126]],["t/2361",[23,3.289,117,1.12,194,3.526,200,0.928,204,1.025,210,1.44,225,3.526,292,2.452,343,3.289,407,3.885]],["t/2363",[105,1.695,200,1.125,204,1.243,210,1.747,408,4.711,409,4.711,410,4.711]],["t/2365",[105,1.19,199,3,200,1.241,204,0.872,210,1.225,294,1.741,317,2.648,411,3.305,412,5.197,413,3.305,414,3.305]],["t/2367",[47,2.141,101,2.528,105,1.19,118,1.966,157,3.818,200,0.789,204,0.872,210,1.225,294,1.741,335,2.428,415,3.305]],["t/2369",[37,2.592,38,3.231,117,1.268,200,1.051,204,1.161,210,1.631,285,3.231,416,4.399]],["t/2371",[105,1.695,204,1.243,210,1.747,292,2.974,358,4.275,417,4.711,418,4.711]],["t/2373",[41,2.071,105,1.485,200,0.986,291,2.747,343,3.493,344,3.745,345,3.745,346,3.745,419,4.126]],["t/2375",[44,3.984,45,4.24,124,5.065,420,5.983]],["t/2376",[3,2.777,41,2.208,58,3.724,105,1.583,171,3.724,190,3.524,200,1.051,421,4.399]],["t/2378",[48,3.655,105,1.975,128,4.647,378,3.106,422,5.489]],["t/2380",[41,2.364,105,1.695,171,3.988,378,2.666,423,4.711,424,4.711,425,4.711]],["t/2382",[84,3.878,105,1.825,128,4.293,205,2.988,378,2.869,426,5.07]],["t/2384",[41,2.208,44,2.929,45,3.117,105,1.583,200,1.051,203,3.524,226,3.992,427,3.992]],["t/2386",[44,2.929,45,3.117,67,3.364,105,1.583,200,1.051,428,4.399,429,4.399,430,4.399]],["t/2388",[41,2.545,105,1.825,431,5.07,432,5.07,433,5.07,434,5.07]],["t/2390",[3,2.452,41,1.95,64,2.452,105,1.398,244,2.157,360,3.289,435,3.885,436,3.885,437,3.885,438,3.885]],["t/2392",[69,4.576,205,3.526,439,5.983,440,5.983]],["t/2393",[3,2.452,105,1.398,144,1.64,181,2.854,200,0.928,427,3.526,441,3.885,442,3.885,443,3.885,444,3.885]],["t/2395",[117,1.461,260,2.988,301,2.626,378,2.869,445,5.07,446,5.07]],["t/2397",[66,3.331,117,1.058,198,2.94,260,2.163,301,1.901,378,2.077,447,3.67,448,3.107,449,3.107,450,3.67,451,2.696]],["t/2399",[117,1.12,198,3.112,260,2.289,301,2.012,378,2.199,448,3.289,449,3.289,451,2.854,452,3.885,453,3.885]],["t/2401",[8,2.452,117,1.12,198,3.112,260,2.289,301,2.012,378,2.199,448,3.289,449,3.289,451,2.854,454,3.885]],["t/2403",[117,1.461,260,2.988,301,2.626,378,2.869,455,5.07,456,5.07]],["t/2405",[117,1.461,260,2.988,301,2.626,356,4.601,378,2.869,457,5.07]],["t/2407",[117,1.358,260,2.776,301,2.44,378,2.666,458,4.711,459,4.711,460,3.988]],["t/2409",[117,1.358,159,3.988,260,2.776,301,2.44,378,2.666,460,3.988,461,4.711]],["t/2411",[105,1.695,260,2.776,301,2.44,378,2.666,460,3.988,462,4.711,463,4.711]],["t/2413",[99,4.275,105,1.695,260,2.776,301,2.44,378,2.666,464,4.711,465,4.711]],["t/2415",[105,1.825,301,2.626,378,2.869,466,5.07,467,5.07,468,5.07]],["t/2417",[41,2.364,105,1.695,260,2.776,301,2.44,378,2.666,469,4.711,470,4.711]],["t/2419",[8,3.777,143,5.065,181,4.395,471,5.983]],["t/2420",[41,2.364,105,1.695,143,3.988,200,1.125,206,3.988,472,4.711,473,4.711]],["t/2422",[105,1.825,200,1.211,206,4.293,451,3.724,474,5.07,475,5.07]],["t/2424",[48,4.378,252,5.267,476,6.575]],["t/2425",[41,1.95,48,3.92,105,1.398,114,3.289,118,1.47,477,3.885,478,3.885,479,3.885,480,3.885]],["t/2427",[48,3.376,62,4.601,77,4.293,105,1.825,481,5.07,482,5.07]],["t/2429",[144,2.526,301,3.099,483,5.983,484,5.983]],["t/2430",[41,2.071,54,2.173,105,1.485,107,3.305,144,1.742,301,2.137,485,4.126,486,4.126,487,4.126]],["t/2432",[181,4.829,488,6.575,489,6.575]],["t/2433",[41,2.071,84,3.156,105,1.485,184,3.305,451,3.031,490,4.126,491,4.126,492,4.126,493,4.126]],["t/2435",[105,1.485,200,0.986,204,1.089,205,2.432,319,3.305,494,4.126,495,4.126,496,4.126,497,4.126]],["t/2437",[105,1.825,205,2.988,260,2.988,498,5.07,499,5.07,500,5.07]],["t/2439",[41,2.755,105,1.975,203,4.397,451,4.032,501,5.489]]],"invertedIndex":[["",{"_index":1,"t":{"1635":{"position":[[5,6]]},"1637":{"position":[[0,4],[5,2],[8,2],[11,4]]},"1665":{"position":[[0,3],[4,2]]},"1666":{"position":[[0,2],[3,2],[6,3]]},"1668":{"position":[[0,5],[6,1],[8,2],[11,3]]},"1670":{"position":[[0,2],[3,2]]},"1672":{"position":[[5,3],[9,4]]},"1674":{"position":[[0,4],[5,5],[18,2]]},"1676":{"position":[[8,4]]},"1678":{"position":[[0,4],[5,4]]},"1680":{"position":[[7,4],[12,3],[16,2]]},"1682":{"position":[[0,4],[5,2],[8,2],[11,9]]},"1684":{"position":[[0,4],[5,2],[8,7]]},"1686":{"position":[[0,4],[5,3],[9,3],[13,2]]},"1688":{"position":[[0,4],[5,2],[8,4]]},"1690":{"position":[[0,2],[3,4],[8,2]]},"1692":{"position":[[0,4],[5,2],[8,4]]},"1694":{"position":[[0,2],[3,3],[7,1],[9,3]]},"1696":{"position":[[0,2],[3,5],[9,3],[13,4]]},"1698":{"position":[[0,2],[6,2],[9,2]]},"1699":{"position":[[0,2],[12,2]]},"1701":{"position":[[25,1]]},"1707":{"position":[[13,4]]},"1709":{"position":[[8,2]]},"1711":{"position":[[8,2],[11,5]]},"1713":{"position":[[0,2],[3,3],[7,2],[10,2],[13,3],[17,5]]},"1714":{"position":[[0,2],[3,3],[16,6]]},"1716":{"position":[[0,2],[3,3],[7,5],[17,4]]},"1718":{"position":[[0,2],[3,2],[6,2]]},"1720":{"position":[[0,2],[3,4],[8,2],[11,2]]},"1726":{"position":[[0,4],[9,2],[12,2],[15,2],[18,2]]},"1728":{"position":[[0,2],[7,2],[10,4],[19,2]]},"1730":{"position":[[0,4],[5,3],[9,2],[12,2],[15,2],[18,2]]},"1732":{"position":[[0,4],[5,2],[8,2],[11,2],[14,2]]},"1814":{"position":[[0,4],[14,5],[20,4]]},"1826":{"position":[[0,2],[3,6],[10,2],[13,4]]},"1828":{"position":[[0,6],[7,5],[13,2],[16,1],[18,2]]},"1853":{"position":[[17,5],[23,6]]},"1855":{"position":[[8,2],[11,2],[23,5],[29,3],[33,2],[36,4]]},"1857":{"position":[[14,6]]},"1859":{"position":[[0,5],[6,5],[12,3],[16,2],[19,4]]},"1861":{"position":[[4,3],[8,3],[12,4]]},"1863":{"position":[[14,3],[18,1],[20,4]]},"1865":{"position":[[4,3],[8,4],[13,3],[17,4],[22,6]]},"1867":{"position":[[5,2],[8,4],[13,3],[17,6]]},"1869":{"position":[[0,3],[4,5],[10,3],[14,3],[18,2],[21,1],[23,4]]},"1875":{"position":[[0,2],[3,4],[8,4]]},"1877":{"position":[[17,3],[21,4],[26,8]]},"1879":{"position":[[0,2],[3,2],[10,8]]},"1952":{"position":[[17,1]]},"2014":{"position":[[9,2]]},"2020":{"position":[[14,5],[39,7]]},"2026":{"position":[[8,4],[13,4]]},"2028":{"position":[[0,4],[5,2],[8,4]]},"2030":{"position":[[0,3],[4,5]]},"2032":{"position":[[10,2],[13,2]]},"2034":{"position":[[0,3]]},"2036":{"position":[[10,2],[13,2],[16,4]]},"2038":{"position":[[10,2],[13,1],[15,4]]},"2040":{"position":[[10,4]]},"2042":{"position":[[0,2],[3,4],[8,4],[13,3],[17,4]]},"2044":{"position":[[0,3],[4,3],[8,2],[11,2]]},"2048":{"position":[[0,2],[3,4]]},"2136":{"position":[[4,5],[10,4],[15,6]]},"2138":{"position":[[0,2],[3,4],[8,3],[12,4]]},"2144":{"position":[[9,4]]},"2151":{"position":[[4,4],[9,7]]},"2153":{"position":[[0,3],[4,4]]}}}],["0",{"_index":317,"t":{"2254":{"position":[[60,1]]},"2355":{"position":[[58,1]]},"2357":{"position":[[81,1]]},"2365":{"position":[[53,1]]}}}],["1",{"_index":83,"t":{"1835":{"position":[[0,2]]}}}],["1.1",{"_index":241,"t":{"2178":{"position":[[0,3]]}}}],["1.1.1",{"_index":242,"t":{"2179":{"position":[[0,5]]}}}],["1.1.10",{"_index":262,"t":{"2197":{"position":[[0,6]]}}}],["1.1.11",{"_index":263,"t":{"2199":{"position":[[0,6]]}}}],["1.1.12",{"_index":265,"t":{"2201":{"position":[[0,6]]}}}],["1.1.13",{"_index":267,"t":{"2203":{"position":[[0,6]]}}}],["1.1.14",{"_index":270,"t":{"2205":{"position":[[0,6]]}}}],["1.1.15",{"_index":271,"t":{"2207":{"position":[[0,6]]}}}],["1.1.16",{"_index":273,"t":{"2209":{"position":[[0,6]]}}}],["1.1.17",{"_index":274,"t":{"2211":{"position":[[0,6]]}}}],["1.1.18",{"_index":276,"t":{"2213":{"position":[[0,6]]}}}],["1.1.19",{"_index":277,"t":{"2215":{"position":[[0,6]]}}}],["1.1.2",{"_index":248,"t":{"2181":{"position":[[0,5]]}}}],["1.1.20",{"_index":279,"t":{"2217":{"position":[[0,6]]}}}],["1.1.21",{"_index":280,"t":{"2219":{"position":[[0,6]]}}}],["1.1.3",{"_index":251,"t":{"2183":{"position":[[0,5]]}}}],["1.1.4",{"_index":253,"t":{"2185":{"position":[[0,5]]}}}],["1.1.5",{"_index":254,"t":{"2187":{"position":[[0,5]]}}}],["1.1.6",{"_index":256,"t":{"2189":{"position":[[0,5]]}}}],["1.1.7",{"_index":257,"t":{"2191":{"position":[[0,5]]}}}],["1.1.8",{"_index":258,"t":{"2193":{"position":[[0,5]]}}}],["1.1.9",{"_index":259,"t":{"2195":{"position":[[0,5]]}}}],["1.2",{"_index":281,"t":{"2221":{"position":[[0,3]]}}}],["1.2.1",{"_index":282,"t":{"2222":{"position":[[0,5]]}}}],["1.2.10",{"_index":300,"t":{"2240":{"position":[[0,6]]}}}],["1.2.11",{"_index":304,"t":{"2242":{"position":[[0,6]]}}}],["1.2.12",{"_index":306,"t":{"2244":{"position":[[0,6]]}}}],["1.2.13",{"_index":308,"t":{"2246":{"position":[[0,6]]}}}],["1.2.14",{"_index":311,"t":{"2248":{"position":[[0,6]]}}}],["1.2.15",{"_index":213,"t":{"2104":{"position":[[8,6]]},"2250":{"position":[[0,6]]}}}],["1.2.16",{"_index":214,"t":{"2106":{"position":[[8,6]]},"2252":{"position":[[0,6]]}}}],["1.2.17",{"_index":315,"t":{"2254":{"position":[[0,6]]}}}],["1.2.18",{"_index":318,"t":{"2256":{"position":[[0,6]]}}}],["1.2.19",{"_index":320,"t":{"2258":{"position":[[0,6]]}}}],["1.2.2",{"_index":286,"t":{"2224":{"position":[[0,5]]}}}],["1.2.20",{"_index":322,"t":{"2260":{"position":[[0,6]]}}}],["1.2.21",{"_index":325,"t":{"2262":{"position":[[0,6]]}}}],["1.2.22",{"_index":215,"t":{"2108":{"position":[[8,6]]},"2264":{"position":[[0,6]]}}}],["1.2.23",{"_index":216,"t":{"2110":{"position":[[8,6]]}}}],["1.2.24",{"_index":217,"t":{"2112":{"position":[[8,6]]},"2266":{"position":[[0,6]]}}}],["1.2.25",{"_index":218,"t":{"2114":{"position":[[8,6]]},"2268":{"position":[[0,6]]}}}],["1.2.26",{"_index":219,"t":{"2116":{"position":[[8,6]]},"2270":{"position":[[0,6]]}}}],["1.2.27",{"_index":220,"t":{"2118":{"position":[[8,6]]},"2272":{"position":[[0,6]]}}}],["1.2.28",{"_index":336,"t":{"2274":{"position":[[0,6]]}}}],["1.2.29",{"_index":337,"t":{"2276":{"position":[[0,6]]}}}],["1.2.3",{"_index":288,"t":{"2226":{"position":[[0,5]]}}}],["1.2.30",{"_index":339,"t":{"2278":{"position":[[0,6]]}}}],["1.2.31",{"_index":341,"t":{"2280":{"position":[[0,6]]}}}],["1.2.32",{"_index":342,"t":{"2282":{"position":[[0,6]]}}}],["1.2.33",{"_index":221,"t":{"2120":{"position":[[8,6]]}}}],["1.2.34",{"_index":222,"t":{"2122":{"position":[[8,6]]}}}],["1.2.4",{"_index":290,"t":{"2228":{"position":[[0,5]]}}}],["1.2.5",{"_index":293,"t":{"2230":{"position":[[0,5]]}}}],["1.2.6",{"_index":295,"t":{"2232":{"position":[[0,5]]}}}],["1.2.7",{"_index":296,"t":{"2234":{"position":[[0,5]]}}}],["1.2.8",{"_index":298,"t":{"2236":{"position":[[0,5]]}}}],["1.2.9",{"_index":299,"t":{"2238":{"position":[[0,5]]}}}],["1.3",{"_index":347,"t":{"2284":{"position":[[0,3]]}}}],["1.3.1",{"_index":223,"t":{"2124":{"position":[[8,5]]},"2285":{"position":[[0,5]]}}}],["1.3.2",{"_index":351,"t":{"2287":{"position":[[0,5]]}}}],["1.3.3",{"_index":352,"t":{"2289":{"position":[[0,5]]}}}],["1.3.4",{"_index":354,"t":{"2291":{"position":[[0,5]]}}}],["1.3.5",{"_index":355,"t":{"2293":{"position":[[0,5]]}}}],["1.3.6",{"_index":357,"t":{"2295":{"position":[[0,5]]}}}],["1.3.7",{"_index":359,"t":{"2297":{"position":[[0,5]]}}}],["1.4",{"_index":362,"t":{"2299":{"position":[[0,3]]}}}],["1.4.1",{"_index":363,"t":{"2300":{"position":[[0,5]]}}}],["1.4.2",{"_index":364,"t":{"2302":{"position":[[0,5]]}}}],["10",{"_index":327,"t":{"2262":{"position":[[64,2]]}}}],["100",{"_index":329,"t":{"2264":{"position":[[62,3]]}}}],["127.0.0.1",{"_index":361,"t":{"2297":{"position":[[56,9]]},"2302":{"position":[[56,9]]}}}],["2",{"_index":85,"t":{"1837":{"position":[[0,2]]},"1879":{"position":[[6,3]]},"2304":{"position":[[0,1]]}}}],["2.1",{"_index":365,"t":{"2305":{"position":[[0,3]]}}}],["2.2",{"_index":366,"t":{"2307":{"position":[[0,3]]}}}],["2.3",{"_index":367,"t":{"2309":{"position":[[0,3]]}}}],["2.4",{"_index":368,"t":{"2311":{"position":[[0,3]]}}}],["2.5",{"_index":370,"t":{"2313":{"position":[[0,3]]}}}],["2.6",{"_index":371,"t":{"2315":{"position":[[0,3]]}}}],["2.7",{"_index":372,"t":{"2317":{"position":[[0,3]]}}}],["3",{"_index":87,"t":{"1839":{"position":[[0,2]]}}}],["3.1",{"_index":374,"t":{"2319":{"position":[[0,3]]}}}],["3.1.1",{"_index":376,"t":{"2320":{"position":[[0,5]]}}}],["3.2",{"_index":377,"t":{"2322":{"position":[[0,3]]}}}],["3.2.1",{"_index":224,"t":{"2126":{"position":[[8,5]]},"2323":{"position":[[0,5]]}}}],["3.2.2",{"_index":379,"t":{"2325":{"position":[[0,5]]}}}],["30",{"_index":324,"t":{"2260":{"position":[[61,2]]}}}],["4",{"_index":91,"t":{"1841":{"position":[[0,2]]}}}],["4.1",{"_index":382,"t":{"2327":{"position":[[0,3]]}}}],["4.1.1",{"_index":384,"t":{"2328":{"position":[[0,5]]}}}],["4.1.10",{"_index":395,"t":{"2346":{"position":[[0,6]]}}}],["4.1.2",{"_index":385,"t":{"2330":{"position":[[0,5]]}}}],["4.1.3",{"_index":386,"t":{"2332":{"position":[[0,5]]}}}],["4.1.4",{"_index":388,"t":{"2334":{"position":[[0,5]]}}}],["4.1.5",{"_index":389,"t":{"2336":{"position":[[0,5]]}}}],["4.1.6",{"_index":391,"t":{"2338":{"position":[[0,5]]}}}],["4.1.7",{"_index":392,"t":{"2340":{"position":[[0,5]]}}}],["4.1.8",{"_index":393,"t":{"2342":{"position":[[0,5]]}}}],["4.1.9",{"_index":394,"t":{"2344":{"position":[[0,5]]}}}],["4.2",{"_index":396,"t":{"2348":{"position":[[0,3]]}}}],["4.2.1",{"_index":397,"t":{"2349":{"position":[[0,5]]}}}],["4.2.10",{"_index":415,"t":{"2367":{"position":[[0,6]]}}}],["4.2.11",{"_index":416,"t":{"2369":{"position":[[0,6]]}}}],["4.2.12",{"_index":417,"t":{"2371":{"position":[[0,6]]}}}],["4.2.13",{"_index":419,"t":{"2373":{"position":[[0,6]]}}}],["4.2.2",{"_index":398,"t":{"2351":{"position":[[0,5]]}}}],["4.2.3",{"_index":399,"t":{"2353":{"position":[[0,5]]}}}],["4.2.4",{"_index":400,"t":{"2355":{"position":[[0,5]]}}}],["4.2.5",{"_index":402,"t":{"2357":{"position":[[0,5]]}}}],["4.2.6",{"_index":406,"t":{"2359":{"position":[[0,5]]}}}],["4.2.7",{"_index":225,"t":{"2128":{"position":[[8,5]]},"2361":{"position":[[0,5]]}}}],["4.2.8",{"_index":408,"t":{"2363":{"position":[[0,5]]}}}],["4.2.9",{"_index":411,"t":{"2365":{"position":[[0,5]]}}}],["5",{"_index":94,"t":{"1843":{"position":[[0,2]]}}}],["5.1",{"_index":420,"t":{"2375":{"position":[[0,3]]}}}],["5.1.1",{"_index":421,"t":{"2376":{"position":[[0,5]]}}}],["5.1.2",{"_index":422,"t":{"2378":{"position":[[0,5]]}}}],["5.1.3",{"_index":423,"t":{"2380":{"position":[[0,5]]}}}],["5.1.4",{"_index":426,"t":{"2382":{"position":[[0,5]]}}}],["5.1.5",{"_index":226,"t":{"2130":{"position":[[8,5]]},"2384":{"position":[[0,5]]}}}],["5.1.6",{"_index":428,"t":{"2386":{"position":[[0,5]]}}}],["5.1.7",{"_index":431,"t":{"2388":{"position":[[0,5]]}}}],["5.1.8",{"_index":435,"t":{"2390":{"position":[[0,5]]}}}],["5.2",{"_index":439,"t":{"2392":{"position":[[0,3]]}}}],["5.2.1",{"_index":441,"t":{"2393":{"position":[[0,5]]}}}],["5.2.10",{"_index":462,"t":{"2411":{"position":[[0,6]]}}}],["5.2.11",{"_index":464,"t":{"2413":{"position":[[0,6]]}}}],["5.2.12",{"_index":466,"t":{"2415":{"position":[[0,6]]}}}],["5.2.13",{"_index":469,"t":{"2417":{"position":[[0,6]]}}}],["5.2.2",{"_index":445,"t":{"2395":{"position":[[0,5]]}}}],["5.2.3",{"_index":447,"t":{"2397":{"position":[[0,5]]}}}],["5.2.4",{"_index":452,"t":{"2399":{"position":[[0,5]]}}}],["5.2.5",{"_index":454,"t":{"2401":{"position":[[0,5]]}}}],["5.2.6",{"_index":455,"t":{"2403":{"position":[[0,5]]}}}],["5.2.7",{"_index":457,"t":{"2405":{"position":[[0,5]]}}}],["5.2.8",{"_index":458,"t":{"2407":{"position":[[0,5]]}}}],["5.2.9",{"_index":461,"t":{"2409":{"position":[[0,5]]}}}],["5.3",{"_index":471,"t":{"2419":{"position":[[0,3]]}}}],["5.3.1",{"_index":472,"t":{"2420":{"position":[[0,5]]}}}],["5.3.2",{"_index":474,"t":{"2422":{"position":[[0,5]]}}}],["5.4",{"_index":476,"t":{"2424":{"position":[[0,3]]}}}],["5.4.1",{"_index":477,"t":{"2425":{"position":[[0,5]]}}}],["5.4.2",{"_index":481,"t":{"2427":{"position":[[0,5]]}}}],["5.5",{"_index":483,"t":{"2429":{"position":[[0,3]]}}}],["5.5.1",{"_index":485,"t":{"2430":{"position":[[0,5]]}}}],["5.7",{"_index":488,"t":{"2432":{"position":[[0,3]]}}}],["5.7.1",{"_index":490,"t":{"2433":{"position":[[0,5]]}}}],["5.7.2",{"_index":494,"t":{"2435":{"position":[[0,5]]}}}],["5.7.3",{"_index":498,"t":{"2437":{"position":[[0,5]]}}}],["5.7.4",{"_index":501,"t":{"2439":{"position":[[0,5]]}}}],["600",{"_index":269,"t":{"2203":{"position":[[62,3]]},"2219":{"position":[[70,3]]}}}],["644",{"_index":245,"t":{"2179":{"position":[[79,3]]},"2183":{"position":[[87,3]]},"2187":{"position":[[78,3]]},"2191":{"position":[[73,3]]},"2195":{"position":[[78,3]]},"2207":{"position":[[66,3]]},"2211":{"position":[[75,3]]},"2217":{"position":[[78,3]]},"2328":{"position":[[66,3]]},"2332":{"position":[[68,3]]},"2336":{"position":[[76,3]]},"2340":{"position":[[74,3]]},"2344":{"position":[[81,3]]}}}],["700",{"_index":264,"t":{"2199":{"position":[[66,3]]}}}],["access",{"_index":128,"t":{"1921":{"position":[[6,6]]},"2378":{"position":[[15,6]]},"2382":{"position":[[15,6]]}}}],["account",{"_index":45,"t":{"1747":{"position":[[8,7]]},"2266":{"position":[[33,7]]},"2289":{"position":[[36,7]]},"2291":{"position":[[32,7]]},"2375":{"position":[[21,8]]},"2384":{"position":[[34,8]]},"2386":{"position":[[26,7]]}}}],["activ",{"_index":427,"t":{"2384":{"position":[[51,8]]},"2393":{"position":[[47,6]]}}}],["ad",{"_index":159,"t":{"1970":{"position":[[0,6]]},"2002":{"position":[[0,6]]},"2409":{"position":[[48,5]]}}}],["addit",{"_index":93,"t":{"1841":{"position":[[18,10]]}}}],["addon",{"_index":133,"t":{"1928":{"position":[[25,8]]},"1932":{"position":[[5,6]]},"1940":{"position":[[5,6]]}}}],["address",{"_index":90,"t":{"1839":{"position":[[36,7]]},"2297":{"position":[[29,7]]},"2302":{"position":[[29,7]]}}}],["admin",{"_index":58,"t":{"1770":{"position":[[0,5]]},"1925":{"position":[[27,5]]},"2376":{"position":[[30,5]]}}}],["admin.conf",{"_index":268,"t":{"2203":{"position":[[23,10]]},"2205":{"position":[[23,10]]}}}],["administr",{"_index":491,"t":{"2433":{"position":[[13,14]]}}}],["admiss",{"_index":301,"t":{"2240":{"position":[[23,9]]},"2242":{"position":[[23,9]]},"2244":{"position":[[23,9]]},"2246":{"position":[[23,9]]},"2248":{"position":[[23,9]]},"2250":{"position":[[23,9]]},"2252":{"position":[[23,9]]},"2395":{"position":[[19,9]]},"2397":{"position":[[19,9]]},"2399":{"position":[[19,9]]},"2401":{"position":[[19,9]]},"2403":{"position":[[19,9]]},"2405":{"position":[[19,9]]},"2407":{"position":[[19,9]]},"2409":{"position":[[19,9]]},"2411":{"position":[[20,9]]},"2413":{"position":[[20,9]]},"2415":{"position":[[20,9]]},"2417":{"position":[[20,9]]},"2429":{"position":[[15,9]]},"2430":{"position":[[58,9]]}}}],["advanc",{"_index":60,"t":{"1772":{"position":[[0,8]]}}}],["agent",{"_index":15,"t":{"1659":{"position":[[27,6]]},"1661":{"position":[[4,5]]},"1807":{"position":[[0,5]]},"1843":{"position":[[18,5]]},"2010":{"position":[[13,6]]},"2068":{"position":[[26,5]]},"2070":{"position":[[4,5]]},"2076":{"position":[[11,6]]}}}],["air",{"_index":112,"t":{"1894":{"position":[[21,3]]}}}],["allowprivilegeescal",{"_index":456,"t":{"2403":{"position":[[48,24]]}}}],["alwaysadmit",{"_index":305,"t":{"2242":{"position":[[48,11]]}}}],["alwaysallow",{"_index":297,"t":{"2234":{"position":[[66,11]]},"2351":{"position":[[66,11]]}}}],["alwayspullimag",{"_index":307,"t":{"2244":{"position":[[48,16]]}}}],["analysi",{"_index":192,"t":{"2072":{"position":[[0,8]]}}}],["anonym",{"_index":283,"t":{"2222":{"position":[[24,9]]},"2349":{"position":[[24,9]]}}}],["api",{"_index":207,"t":{"2096":{"position":[[0,3]]},"2179":{"position":[[22,3]]},"2181":{"position":[[22,3]]},"2221":{"position":[[4,3]]},"2282":{"position":[[23,3]]}}}],["appli",{"_index":499,"t":{"2437":{"position":[[6,5]]}}}],["appropri",{"_index":294,"t":{"2230":{"position":[[97,11]]},"2232":{"position":[[73,11]]},"2260":{"position":[[70,11]]},"2262":{"position":[[73,11]]},"2264":{"position":[[72,11]]},"2268":{"position":[[60,11]]},"2270":{"position":[[79,11]]},"2272":{"position":[[87,11]]},"2274":{"position":[[59,11]]},"2276":{"position":[[56,11]]},"2278":{"position":[[71,11]]},"2280":{"position":[[44,13]]},"2285":{"position":[[71,11]]},"2291":{"position":[[76,11]]},"2293":{"position":[[56,11]]},"2305":{"position":[[68,11]]},"2311":{"position":[[78,11]]},"2353":{"position":[[58,11]]},"2365":{"position":[[80,11]]},"2367":{"position":[[87,11]]}}}],["architectur",{"_index":160,"t":{"1976":{"position":[[0,12]]}}}],["argument",{"_index":210,"t":{"2100":{"position":[[28,9]]},"2222":{"position":[[39,8]]},"2228":{"position":[[38,8]]},"2230":{"position":[[76,9]]},"2232":{"position":[[54,8]]},"2234":{"position":[[43,8]]},"2236":{"position":[[43,8]]},"2238":{"position":[[43,8]]},"2254":{"position":[[37,8]]},"2256":{"position":[[35,8]]},"2258":{"position":[[40,8]]},"2260":{"position":[[42,8]]},"2262":{"position":[[45,8]]},"2264":{"position":[[43,8]]},"2266":{"position":[[48,8]]},"2268":{"position":[[41,8]]},"2270":{"position":[[58,9]]},"2272":{"position":[[66,9]]},"2274":{"position":[[40,8]]},"2276":{"position":[[37,8]]},"2278":{"position":[[52,8]]},"2285":{"position":[[52,8]]},"2287":{"position":[[34,8]]},"2289":{"position":[[56,8]]},"2291":{"position":[[57,8]]},"2293":{"position":[[37,8]]},"2295":{"position":[[53,8]]},"2297":{"position":[[37,8]]},"2300":{"position":[[34,8]]},"2302":{"position":[[37,8]]},"2305":{"position":[[47,9]]},"2307":{"position":[[39,8]]},"2309":{"position":[[31,8]]},"2311":{"position":[[57,9]]},"2313":{"position":[[44,8]]},"2315":{"position":[[36,8]]},"2349":{"position":[[39,8]]},"2351":{"position":[[43,8]]},"2353":{"position":[[39,8]]},"2355":{"position":[[39,8]]},"2357":{"position":[[58,8]]},"2359":{"position":[[48,8]]},"2361":{"position":[[50,8]]},"2363":{"position":[[42,8]]},"2365":{"position":[[34,8]]},"2367":{"position":[[66,9]]},"2369":{"position":[[45,8]]},"2371":{"position":[[54,8]]}}}],["assign",{"_index":463,"t":{"2411":{"position":[[62,8]]}}}],["audit",{"_index":208,"t":{"2096":{"position":[[11,5]]},"2258":{"position":[[25,5]]},"2260":{"position":[[25,5]]},"2262":{"position":[[25,5]]},"2264":{"position":[[25,5]]},"2323":{"position":[[28,5]]},"2325":{"position":[[22,5]]}}}],["auth",{"_index":284,"t":{"2222":{"position":[[34,4]]},"2224":{"position":[[30,4]]},"2307":{"position":[[34,4]]},"2313":{"position":[[39,4]]},"2349":{"position":[[34,4]]}}}],["authent",{"_index":375,"t":{"2319":{"position":[[4,14]]},"2320":{"position":[[25,14]]}}}],["author",{"_index":39,"t":{"1739":{"position":[[12,9]]},"2232":{"position":[[44,9]]},"2234":{"position":[[24,13]]},"2236":{"position":[[24,13]]},"2238":{"position":[[24,13]]},"2317":{"position":[[37,9]]},"2319":{"position":[[23,13]]},"2340":{"position":[[34,11]]},"2342":{"position":[[41,11]]},"2351":{"position":[[24,13]]}}}],["auto",{"_index":131,"t":{"1928":{"position":[[0,4]]},"2309":{"position":[[22,4]]},"2315":{"position":[[27,4]]}}}],["autom",{"_index":117,"t":{"1899":{"position":[[0,9]]},"2179":{"position":[[103,11]]},"2181":{"position":[[86,11]]},"2183":{"position":[[111,11]]},"2185":{"position":[[94,11]]},"2187":{"position":[[102,11]]},"2189":{"position":[[85,11]]},"2191":{"position":[[97,11]]},"2193":{"position":[[80,11]]},"2199":{"position":[[90,11]]},"2201":{"position":[[73,11]]},"2203":{"position":[[86,11]]},"2205":{"position":[[69,11]]},"2207":{"position":[[90,11]]},"2209":{"position":[[73,11]]},"2211":{"position":[[99,11]]},"2213":{"position":[[82,11]]},"2215":{"position":[[87,11]]},"2224":{"position":[[61,11]]},"2226":{"position":[[58,11]]},"2228":{"position":[[62,11]]},"2230":{"position":[[109,11]]},"2232":{"position":[[85,11]]},"2234":{"position":[[78,11]]},"2236":{"position":[[66,11]]},"2238":{"position":[[66,11]]},"2242":{"position":[[71,11]]},"2248":{"position":[[70,11]]},"2250":{"position":[[74,11]]},"2252":{"position":[[71,11]]},"2254":{"position":[[62,11]]},"2256":{"position":[[60,11]]},"2258":{"position":[[56,11]]},"2260":{"position":[[82,11]]},"2262":{"position":[[85,11]]},"2264":{"position":[[84,11]]},"2266":{"position":[[72,11]]},"2268":{"position":[[72,11]]},"2270":{"position":[[91,11]]},"2272":{"position":[[99,11]]},"2274":{"position":[[71,11]]},"2276":{"position":[[68,11]]},"2287":{"position":[[59,11]]},"2289":{"position":[[80,11]]},"2291":{"position":[[88,11]]},"2293":{"position":[[68,11]]},"2295":{"position":[[77,11]]},"2297":{"position":[[66,11]]},"2300":{"position":[[59,11]]},"2302":{"position":[[66,11]]},"2305":{"position":[[80,11]]},"2307":{"position":[[63,11]]},"2309":{"position":[[59,11]]},"2311":{"position":[[90,11]]},"2313":{"position":[[68,11]]},"2315":{"position":[[64,11]]},"2328":{"position":[[90,11]]},"2330":{"position":[[73,11]]},"2336":{"position":[[100,11]]},"2338":{"position":[[83,11]]},"2344":{"position":[[105,11]]},"2346":{"position":[[89,11]]},"2349":{"position":[[64,11]]},"2351":{"position":[[78,11]]},"2353":{"position":[[70,11]]},"2359":{"position":[[72,11]]},"2361":{"position":[[74,11]]},"2369":{"position":[[74,11]]},"2395":{"position":[[54,11]]},"2397":{"position":[[90,11]]},"2399":{"position":[[83,11]]},"2401":{"position":[[87,11]]},"2403":{"position":[[73,11]]},"2405":{"position":[[48,11]]},"2407":{"position":[[71,11]]},"2409":{"position":[[67,11]]}}}],["avoid",{"_index":432,"t":{"2388":{"position":[[6,5]]}}}],["backup",{"_index":74,"t":{"1818":{"position":[[0,6]]},"1820":{"position":[[0,6]]},"1822":{"position":[[0,6]]}}}],["baselin",{"_index":187,"t":{"2058":{"position":[[24,8]]},"2064":{"position":[[0,8]]}}}],["bearer",{"_index":126,"t":{"1919":{"position":[[11,6]]}}}],["benchmark",{"_index":237,"t":{"2175":{"position":[[15,9]]}}}],["between",{"_index":493,"t":{"2433":{"position":[[39,7]]}}}],["binari",{"_index":110,"t":{"1889":{"position":[[37,6]]},"1905":{"position":[[19,6]]},"2170":{"position":[[31,6]]}}}],["bind",{"_index":360,"t":{"2297":{"position":[[24,4]]},"2302":{"position":[[24,4]]},"2390":{"position":[[23,5]]}}}],["bootstrap",{"_index":72,"t":{"1809":{"position":[[0,9]]}}}],["boundari",{"_index":492,"t":{"2433":{"position":[[28,10]]}}}],["ca",{"_index":40,"t":{"1739":{"position":[[22,4]]},"1741":{"position":[[13,2]]},"1743":{"position":[[16,2]]},"1745":{"position":[[21,2]]},"2274":{"position":[[32,2]]},"2293":{"position":[[29,2]]},"2353":{"position":[[31,2]]}}}],["cafil",{"_index":338,"t":{"2276":{"position":[[30,6]]}}}],["capabl",{"_index":460,"t":{"2407":{"position":[[60,10]]},"2409":{"position":[[54,12]]},"2411":{"position":[[49,12]]}}}],["captur",{"_index":414,"t":{"2365":{"position":[[98,7]]}}}],["cento",{"_index":28,"t":{"1701":{"position":[[27,6]]}}}],["cert",{"_index":335,"t":{"2272":{"position":[[29,4]]},"2305":{"position":[[22,4]]},"2307":{"position":[[29,4]]},"2311":{"position":[[27,4]]},"2313":{"position":[[34,4]]},"2367":{"position":[[29,4]]}}}],["certfil",{"_index":333,"t":{"2270":{"position":[[30,8]]}}}],["certif",{"_index":37,"t":{"1735":{"position":[[18,12]]},"1737":{"position":[[27,12]]},"1739":{"position":[[0,11],[27,12]]},"1741":{"position":[[16,12]]},"1743":{"position":[[19,12]]},"1745":{"position":[[24,12]]},"2217":{"position":[[38,11]]},"2230":{"position":[[39,11]]},"2232":{"position":[[32,11]]},"2317":{"position":[[25,11]]},"2320":{"position":[[13,11]]},"2340":{"position":[[22,11]]},"2342":{"position":[[29,11]]},"2369":{"position":[[32,12]]}}}],["chain",{"_index":407,"t":{"2361":{"position":[[43,6]]}}}],["channel",{"_index":234,"t":{"2166":{"position":[[8,8]]}}}],["ci",{"_index":236,"t":{"2175":{"position":[[0,3]]}}}],["cipher",{"_index":346,"t":{"2282":{"position":[[73,7]]},"2373":{"position":[[70,7]]}}}],["class",{"_index":63,"t":{"1783":{"position":[[8,5]]}}}],["cli",{"_index":16,"t":{"1661":{"position":[[10,3]]},"1793":{"position":[[11,3]]}}}],["client",{"_index":35,"t":{"1735":{"position":[[0,6]]},"1737":{"position":[[9,6]]},"2230":{"position":[[32,6],[65,6]]},"2274":{"position":[[25,6]]},"2307":{"position":[[22,6]]},"2313":{"position":[[27,6]]},"2320":{"position":[[6,6]]},"2342":{"position":[[22,6]]},"2353":{"position":[[24,6]]}}}],["cluster",{"_index":3,"t":{"1643":{"position":[[0,7]]},"1768":{"position":[[0,7]]},"1847":{"position":[[4,7]]},"1849":{"position":[[9,8]]},"1956":{"position":[[33,7]]},"1986":{"position":[[6,8]]},"2068":{"position":[[4,7]]},"2076":{"position":[[58,7]]},"2376":{"position":[[22,7]]},"2390":{"position":[[84,7]]},"2393":{"position":[[22,7]]}}}],["clusterrol",{"_index":425,"t":{"2380":{"position":[[41,12]]}}}],["cni",{"_index":143,"t":{"1948":{"position":[[7,3]]},"2419":{"position":[[25,3]]},"2420":{"position":[[22,3]]}}}],["commonli",{"_index":56,"t":{"1765":{"position":[[0,8]]}}}],["compon",{"_index":65,"t":{"1785":{"position":[[11,10]]},"1930":{"position":[[9,10]]},"2058":{"position":[[0,10]]},"2098":{"position":[[29,10]]}}}],["concern",{"_index":381,"t":{"2325":{"position":[[55,8]]}}}],["conclus",{"_index":227,"t":{"2132":{"position":[[0,10]]}}}],["config",{"_index":120,"t":{"1909":{"position":[[9,6]]},"1964":{"position":[[0,7]]},"2278":{"position":[[45,6]]},"2344":{"position":[[32,6]]},"2346":{"position":[[33,6]]}}}],["configur",{"_index":54,"t":{"1763":{"position":[[9,13]]},"1839":{"position":[[3,9]]},"1903":{"position":[[0,13]]},"1905":{"position":[[0,13]]},"1907":{"position":[[0,13]]},"1917":{"position":[[15,13]]},"1925":{"position":[[38,13]]},"1950":{"position":[[30,13]]},"1960":{"position":[[11,13]]},"2004":{"position":[[0,13]]},"2096":{"position":[[17,13]]},"2098":{"position":[[0,13]]},"2162":{"position":[[0,9]]},"2178":{"position":[[23,13]]},"2280":{"position":[[58,10]]},"2304":{"position":[[12,13]]},"2327":{"position":[[16,13]]},"2344":{"position":[[39,13]]},"2346":{"position":[[40,13]]},"2430":{"position":[[6,9]]}}}],["connect",{"_index":404,"t":{"2357":{"position":[[34,10]]}}}],["consid",{"_index":482,"t":{"2427":{"position":[[6,8]]}}}],["contain",{"_index":260,"t":{"2195":{"position":[[22,9]]},"2197":{"position":[[23,9]]},"2395":{"position":[[43,10]]},"2397":{"position":[[32,10]]},"2399":{"position":[[32,10]]},"2401":{"position":[[32,10]]},"2403":{"position":[[32,10]]},"2405":{"position":[[37,10]]},"2407":{"position":[[32,10]]},"2409":{"position":[[32,10]]},"2411":{"position":[[33,10]]},"2413":{"position":[[53,10]]},"2417":{"position":[[33,10]]},"2437":{"position":[[45,10]]}}}],["control",{"_index":144,"t":{"1950":{"position":[[0,7]]},"2000":{"position":[[10,7]]},"2028":{"position":[[29,11]]},"2100":{"position":[[0,7]]},"2104":{"position":[[0,7]]},"2106":{"position":[[0,7]]},"2108":{"position":[[0,7]]},"2110":{"position":[[0,7]]},"2112":{"position":[[0,7]]},"2114":{"position":[[0,7]]},"2116":{"position":[[0,7]]},"2118":{"position":[[0,7]]},"2120":{"position":[[0,7]]},"2122":{"position":[[0,7]]},"2124":{"position":[[0,7]]},"2126":{"position":[[0,7]]},"2128":{"position":[[0,7]]},"2130":{"position":[[0,7]]},"2160":{"position":[[27,10]]},"2177":{"position":[[0,8]]},"2178":{"position":[[4,7]]},"2183":{"position":[[22,10]]},"2185":{"position":[[22,10]]},"2211":{"position":[[23,10]]},"2213":{"position":[[23,10]]},"2240":{"position":[[33,7]]},"2242":{"position":[[33,7]]},"2244":{"position":[[33,7]]},"2246":{"position":[[33,7]]},"2248":{"position":[[33,7]]},"2250":{"position":[[33,7]]},"2252":{"position":[[33,7]]},"2284":{"position":[[4,10]]},"2393":{"position":[[61,7]]},"2429":{"position":[[25,7]]},"2430":{"position":[[68,10]]}}}],["coredn",{"_index":180,"t":{"2024":{"position":[[0,7]]}}}],["cover",{"_index":380,"t":{"2325":{"position":[[35,6]]}}}],["cpu",{"_index":167,"t":{"1988":{"position":[[0,3]]}}}],["creat",{"_index":84,"t":{"1835":{"position":[[3,6]]},"1885":{"position":[[0,6]]},"2323":{"position":[[44,7]]},"2382":{"position":[[25,6]]},"2433":{"position":[[6,6]]}}}],["credenti",{"_index":353,"t":{"2289":{"position":[[44,11]]}}}],["critic",{"_index":53,"t":{"1763":{"position":[[0,8]]}}}],["cryptograph",{"_index":345,"t":{"2282":{"position":[[59,13]]},"2373":{"position":[[56,13]]}}}],["custom",{"_index":9,"t":{"1653":{"position":[[0,10]]},"1741":{"position":[[6,6]]},"1743":{"position":[[9,6]]},"1787":{"position":[[0,10]]},"1948":{"position":[[0,6]]}}}],["dashboard",{"_index":123,"t":{"1915":{"position":[[25,9]]},"1917":{"position":[[0,9]]},"1921":{"position":[[20,9]]},"1923":{"position":[[14,9]]},"1925":{"position":[[13,9]]}}}],["data",{"_index":5,"t":{"1645":{"position":[[0,4]]},"1777":{"position":[[0,4]]},"2199":{"position":[[28,4]]},"2201":{"position":[[28,4]]}}}],["databas",{"_index":57,"t":{"1766":{"position":[[0,8]]},"1994":{"position":[[0,8]]}}}],["datastor",{"_index":78,"t":{"1820":{"position":[[33,9]]},"1822":{"position":[[38,9]]},"1835":{"position":[[22,9]]},"2076":{"position":[[66,9]]}}}],["db",{"_index":34,"t":{"1726":{"position":[[5,3]]},"1728":{"position":[[3,3]]}}}],["dedic",{"_index":170,"t":{"1998":{"position":[[0,9]]},"2000":{"position":[[0,9]]}}}],["default",{"_index":203,"t":{"2088":{"position":[[22,8]]},"2359":{"position":[[39,8]]},"2384":{"position":[[18,7]]},"2439":{"position":[[10,7]]}}}],["defin",{"_index":475,"t":{"2422":{"position":[[54,7]]}}}],["definit",{"_index":497,"t":{"2435":{"position":[[75,11]]}}}],["delet",{"_index":129,"t":{"1925":{"position":[[0,8]]}}}],["denyserviceexternalip",{"_index":289,"t":{"2226":{"position":[[24,22]]}}}],["deploy",{"_index":106,"t":{"1887":{"position":[[9,6]]},"1915":{"position":[[0,9]]},"1928":{"position":[[5,9]]}}}],["deprec",{"_index":12,"t":{"1657":{"position":[[0,10]]},"1791":{"position":[[0,10]]}}}],["directori",{"_index":109,"t":{"1889":{"position":[[19,9]]},"2199":{"position":[[33,9]]},"2201":{"position":[[33,9]]},"2215":{"position":[[38,9]]}}}],["disabl",{"_index":135,"t":{"1934":{"position":[[0,9]]},"1936":{"position":[[12,7]]}}}],["disable/en",{"_index":51,"t":{"1757":{"position":[[19,14]]}}}],["disk",{"_index":169,"t":{"1990":{"position":[[0,5]]}}}],["distribut",{"_index":153,"t":{"1956":{"position":[[0,11]]}}}],["docker",{"_index":19,"t":{"1674":{"position":[[11,6]]},"1707":{"position":[[0,8]]},"1863":{"position":[[0,8]]}}}],["docker/default",{"_index":496,"t":{"2435":{"position":[[48,14]]}}}],["driver",{"_index":195,"t":{"2074":{"position":[[29,7]]}}}],["dual",{"_index":148,"t":{"1952":{"position":[[0,4]]}}}],["egress",{"_index":146,"t":{"1950":{"position":[[14,6]]}}}],["embed",{"_index":79,"t":{"1822":{"position":[[24,8]]}}}],["encrypt",{"_index":49,"t":{"1753":{"position":[[8,10]]},"1755":{"position":[[0,10]]},"1757":{"position":[[8,10]]},"1759":{"position":[[8,10]]},"1779":{"position":[[8,10]]},"2080":{"position":[[8,10]]},"2278":{"position":[[25,10]]},"2280":{"position":[[19,10]]}}}],["ensur",{"_index":200,"t":{"2088":{"position":[[0,6]]},"2179":{"position":[[6,6]]},"2181":{"position":[[6,6]]},"2183":{"position":[[6,6]]},"2185":{"position":[[6,6]]},"2187":{"position":[[6,6]]},"2189":{"position":[[6,6]]},"2191":{"position":[[6,6]]},"2193":{"position":[[6,6]]},"2195":{"position":[[6,6]]},"2197":{"position":[[7,6]]},"2199":{"position":[[7,6]]},"2201":{"position":[[7,6]]},"2203":{"position":[[7,6]]},"2205":{"position":[[7,6]]},"2207":{"position":[[7,6]]},"2209":{"position":[[7,6]]},"2211":{"position":[[7,6]]},"2213":{"position":[[7,6]]},"2215":{"position":[[7,6]]},"2217":{"position":[[7,6]]},"2219":{"position":[[7,6]]},"2222":{"position":[[6,6]]},"2224":{"position":[[6,6]]},"2226":{"position":[[6,6]]},"2228":{"position":[[6,6]]},"2230":{"position":[[6,6]]},"2232":{"position":[[6,6]]},"2234":{"position":[[6,6]]},"2236":{"position":[[6,6]]},"2238":{"position":[[6,6]]},"2240":{"position":[[7,6]]},"2242":{"position":[[7,6]]},"2244":{"position":[[7,6]]},"2246":{"position":[[7,6]]},"2248":{"position":[[7,6]]},"2250":{"position":[[7,6]]},"2252":{"position":[[7,6]]},"2254":{"position":[[7,6]]},"2256":{"position":[[7,6]]},"2258":{"position":[[7,6]]},"2260":{"position":[[7,6]]},"2262":{"position":[[7,6]]},"2264":{"position":[[7,6]]},"2266":{"position":[[7,6]]},"2268":{"position":[[7,6]]},"2270":{"position":[[7,6]]},"2272":{"position":[[7,6]]},"2274":{"position":[[7,6]]},"2276":{"position":[[7,6]]},"2278":{"position":[[7,6]]},"2280":{"position":[[7,6]]},"2282":{"position":[[7,6]]},"2285":{"position":[[6,6]]},"2287":{"position":[[6,6]]},"2289":{"position":[[6,6]]},"2291":{"position":[[6,6]]},"2293":{"position":[[6,6]]},"2295":{"position":[[6,6]]},"2297":{"position":[[6,6]]},"2300":{"position":[[6,6]]},"2302":{"position":[[6,6]]},"2305":{"position":[[4,6]]},"2307":{"position":[[4,6]]},"2309":{"position":[[4,6]]},"2311":{"position":[[4,6]]},"2313":{"position":[[4,6]]},"2315":{"position":[[4,6]]},"2317":{"position":[[4,6]]},"2323":{"position":[[6,6]]},"2325":{"position":[[6,6]]},"2328":{"position":[[6,6]]},"2330":{"position":[[6,6]]},"2332":{"position":[[38,6]]},"2334":{"position":[[38,6]]},"2336":{"position":[[6,6]]},"2338":{"position":[[6,6]]},"2340":{"position":[[6,6]]},"2342":{"position":[[6,6]]},"2344":{"position":[[6,6]]},"2346":{"position":[[7,6]]},"2349":{"position":[[6,6]]},"2351":{"position":[[6,6]]},"2353":{"position":[[6,6]]},"2355":{"position":[[6,6]]},"2357":{"position":[[6,6]]},"2359":{"position":[[6,6]]},"2361":{"position":[[6,6]]},"2363":{"position":[[6,6]]},"2365":{"position":[[6,6],[72,7]]},"2367":{"position":[[7,6]]},"2369":{"position":[[7,6]]},"2373":{"position":[[7,6]]},"2376":{"position":[[6,6]]},"2384":{"position":[[6,6]]},"2386":{"position":[[6,6]]},"2393":{"position":[[6,6]]},"2420":{"position":[[6,6]]},"2422":{"position":[[6,6]]},"2435":{"position":[[6,6]]}}}],["enterpris",{"_index":26,"t":{"1701":{"position":[[8,10]]}}}],["environ",{"_index":114,"t":{"1894":{"position":[[32,11]]},"2062":{"position":[[0,11]]},"2425":{"position":[[52,11]]}}}],["escal",{"_index":438,"t":{"2390":{"position":[[45,8]]}}}],["estargz",{"_index":33,"t":{"1714":{"position":[[7,8]]}}}],["etcd",{"_index":80,"t":{"1822":{"position":[[33,4]]},"1998":{"position":[[10,4]]},"2191":{"position":[[22,4]]},"2193":{"position":[[22,4]]},"2199":{"position":[[23,4]]},"2201":{"position":[[23,4]]},"2270":{"position":[[25,4],[45,4]]},"2276":{"position":[[25,4]]},"2304":{"position":[[2,4]]},"2317":{"position":[[59,4]]}}}],["etcd:etcd",{"_index":266,"t":{"2201":{"position":[[63,9]]}}}],["etcdctl",{"_index":20,"t":{"1676":{"position":[[0,7]]}}}],["event",{"_index":412,"t":{"2365":{"position":[[24,5],[92,5]]}}}],["eventratelimit",{"_index":303,"t":{"2240":{"position":[[48,14]]}}}],["execut",{"_index":209,"t":{"2100":{"position":[[14,9]]}}}],["exist",{"_index":96,"t":{"1849":{"position":[[0,8]]},"2002":{"position":[[16,8]]},"2332":{"position":[[31,6]]},"2334":{"position":[[31,6]]}}}],["experiment",{"_index":11,"t":{"1655":{"position":[[0,12]]},"1789":{"position":[[0,12]]}}}],["extens",{"_index":484,"t":{"2429":{"position":[[4,10]]}}}],["extern",{"_index":77,"t":{"1820":{"position":[[24,8]]},"1835":{"position":[[13,8]]},"2427":{"position":[[15,8]]}}}],["fals",{"_index":285,"t":{"2222":{"position":[[58,5]]},"2256":{"position":[[54,5]]},"2287":{"position":[[53,5]]},"2300":{"position":[[53,5]]},"2349":{"position":[[58,5]]},"2369":{"position":[[68,5]]}}}],["file",{"_index":118,"t":{"1907":{"position":[[14,4]]},"1909":{"position":[[16,5]]},"1938":{"position":[[12,5]]},"1960":{"position":[[25,4]]},"2004":{"position":[[14,4]]},"2178":{"position":[[37,5]]},"2179":{"position":[[51,4]]},"2181":{"position":[[51,4]]},"2183":{"position":[[59,4]]},"2185":{"position":[[59,4]]},"2187":{"position":[[50,4]]},"2189":{"position":[[50,4]]},"2191":{"position":[[45,4]]},"2193":{"position":[[45,4]]},"2195":{"position":[[50,4]]},"2197":{"position":[[51,4]]},"2203":{"position":[[34,4]]},"2205":{"position":[[34,4]]},"2207":{"position":[[38,4]]},"2209":{"position":[[38,4]]},"2211":{"position":[[47,4]]},"2213":{"position":[[47,4]]},"2215":{"position":[[52,4]]},"2217":{"position":[[50,4]]},"2219":{"position":[[42,4]]},"2224":{"position":[[35,4]]},"2272":{"position":[[34,4],[61,4]]},"2274":{"position":[[35,4]]},"2291":{"position":[[52,4]]},"2293":{"position":[[32,4]]},"2305":{"position":[[27,4],[42,4]]},"2311":{"position":[[32,4],[52,4]]},"2327":{"position":[[30,5]]},"2328":{"position":[[38,4]]},"2330":{"position":[[38,4]]},"2332":{"position":[[26,4]]},"2334":{"position":[[26,4]]},"2336":{"position":[[48,4]]},"2338":{"position":[[48,4]]},"2340":{"position":[[46,4]]},"2342":{"position":[[53,4]]},"2344":{"position":[[53,4]]},"2346":{"position":[[54,4]]},"2353":{"position":[[34,4]]},"2367":{"position":[[34,4],[61,4]]},"2425":{"position":[[30,5]]}}}],["fix",{"_index":88,"t":{"1839":{"position":[[17,5]]}}}],["flag",{"_index":10,"t":{"1653":{"position":[[11,5]]},"1787":{"position":[[11,5]]},"1936":{"position":[[20,4]]}}}],["flannel",{"_index":138,"t":{"1944":{"position":[[0,7]]}}}],["format",{"_index":68,"t":{"1797":{"position":[[6,6]]}}}],["gap",{"_index":113,"t":{"1894":{"position":[[25,6]]}}}],["gc",{"_index":349,"t":{"2285":{"position":[[39,2]]}}}],["gener",{"_index":489,"t":{"2432":{"position":[[4,7]]}}}],["group",{"_index":434,"t":{"2388":{"position":[[34,5]]}}}],["harden",{"_index":177,"t":{"2020":{"position":[[0,13]]}}}],["hardwar",{"_index":163,"t":{"1980":{"position":[[0,8]]}}}],["hat",{"_index":25,"t":{"1701":{"position":[[4,3]]}}}],["helm",{"_index":137,"t":{"1940":{"position":[[0,4]]}}}],["helmchartconfig",{"_index":100,"t":{"1877":{"position":[[0,16]]}}}],["help",{"_index":17,"t":{"1661":{"position":[[14,4]]},"1793":{"position":[[15,4]]}}}],["host",{"_index":198,"t":{"2086":{"position":[[0,4]]},"2397":{"position":[[64,4]]},"2399":{"position":[[64,4]]},"2401":{"position":[[64,4]]}}}],["hostnam",{"_index":409,"t":{"2363":{"position":[[24,8]]}}}],["hostpath",{"_index":467,"t":{"2415":{"position":[[33,8]]}}}],["hostport",{"_index":470,"t":{"2417":{"position":[[54,9]]}}}],["hostprocess",{"_index":465,"t":{"2413":{"position":[[41,11]]}}}],["http",{"_index":18,"t":{"1672":{"position":[[0,4]]},"2228":{"position":[[32,5]]}}}],["hybrid",{"_index":154,"t":{"1956":{"position":[[12,6]]}}}],["id",{"_index":450,"t":{"2397":{"position":[[77,2]]}}}],["idl",{"_index":405,"t":{"2357":{"position":[[45,4]]}}}],["imag",{"_index":107,"t":{"1887":{"position":[[16,6]]},"1889":{"position":[[12,6]]},"1970":{"position":[[7,6]]},"2430":{"position":[[16,5]]}}}],["imagepolicywebhook",{"_index":487,"t":{"2430":{"position":[[39,18]]}}}],["imperson",{"_index":437,"t":{"2390":{"position":[[29,11]]}}}],["inbound",{"_index":164,"t":{"1984":{"position":[[0,7]]}}}],["includ",{"_index":186,"t":{"2058":{"position":[[11,8]]},"2236":{"position":[[52,8]]},"2238":{"position":[[52,8]]}}}],["ingress",{"_index":98,"t":{"1855":{"position":[[14,8]]}}}],["instal",{"_index":81,"t":{"1833":{"position":[[0,12]]},"1891":{"position":[[0,7]]},"1894":{"position":[[0,10]]},"1897":{"position":[[0,7]]},"1903":{"position":[[19,7]]},"2160":{"position":[[0,7]]},"2168":{"position":[[22,12]]}}}],["interf",{"_index":197,"t":{"2076":{"position":[[37,11]]}}}],["interfac",{"_index":261,"t":{"2195":{"position":[[40,9]]},"2197":{"position":[[41,9]]}}}],["ipc",{"_index":453,"t":{"2399":{"position":[[69,3]]}}}],["ipsec",{"_index":141,"t":{"1946":{"position":[[28,5]]}}}],["iptabl",{"_index":23,"t":{"1699":{"position":[[3,8]]},"2016":{"position":[[0,8]]},"2361":{"position":[[29,8]]}}}],["ipv4",{"_index":150,"t":{"1952":{"position":[[11,5]]}}}],["ipv6",{"_index":151,"t":{"1952":{"position":[[19,5]]},"1954":{"position":[[13,4]]}}}],["issu",{"_index":212,"t":{"2102":{"position":[[6,6]]}}}],["issuer",{"_index":46,"t":{"1747":{"position":[[16,6]]}}}],["join",{"_index":92,"t":{"1841":{"position":[[13,4]]},"1843":{"position":[[13,4]]}}}],["k3",{"_index":0,"t":{"1635":{"position":[[0,4]]},"1661":{"position":[[0,3]]},"1707":{"position":[[9,3]]},"1716":{"position":[[13,3]]},"1728":{"position":[[15,3]]},"1793":{"position":[[0,3]]},"1853":{"position":[[0,4]]},"1857":{"position":[[0,4]]},"1861":{"position":[[0,3]]},"1863":{"position":[[9,4]]},"1865":{"position":[[0,3]]},"1867":{"position":[[0,4]]},"1889":{"position":[[33,3]]},"1891":{"position":[[8,3]]},"1894":{"position":[[11,3]]},"1984":{"position":[[18,3]]},"2066":{"position":[[0,3]]},"2068":{"position":[[0,3]]},"2070":{"position":[[0,3]]},"2136":{"position":[[0,3]]},"2151":{"position":[[0,3]]},"2168":{"position":[[8,3]]},"2170":{"position":[[17,3]]},"2172":{"position":[[11,3]]},"2175":{"position":[[33,3]]}}}],["kernel",{"_index":202,"t":{"2088":{"position":[[15,6]]},"2359":{"position":[[32,6]]}}}],["key",{"_index":47,"t":{"1747":{"position":[[23,3]]},"1755":{"position":[[11,3]]},"2219":{"position":[[38,3]]},"2230":{"position":[[72,3]]},"2272":{"position":[[57,3]]},"2291":{"position":[[48,3]]},"2305":{"position":[[38,3]]},"2311":{"position":[[48,3]]},"2325":{"position":[[42,3]]},"2367":{"position":[[57,3]]}}}],["keyfil",{"_index":334,"t":{"2270":{"position":[[50,7]]}}}],["known",{"_index":211,"t":{"2102":{"position":[[0,5]]}}}],["kubeconfig",{"_index":59,"t":{"1770":{"position":[[6,10]]},"2332":{"position":[[15,10]]},"2334":{"position":[[15,10]]},"2336":{"position":[[24,10]]},"2338":{"position":[[24,10]]}}}],["kubectl",{"_index":73,"t":{"1814":{"position":[[5,8]]}}}],["kubelet",{"_index":291,"t":{"2228":{"position":[[24,7]]},"2230":{"position":[[24,7],[57,7]]},"2232":{"position":[[24,7]]},"2328":{"position":[[22,7]]},"2330":{"position":[[22,7]]},"2344":{"position":[[22,7]]},"2346":{"position":[[23,7]]},"2348":{"position":[[4,7]]},"2373":{"position":[[23,7]]}}}],["kubelet.conf",{"_index":390,"t":{"2336":{"position":[[35,12]]},"2338":{"position":[[35,12]]}}}],["kubernet",{"_index":64,"t":{"1785":{"position":[[0,10]]},"1787":{"position":[[21,10]]},"1853":{"position":[[5,11]]},"1915":{"position":[[14,10]]},"2090":{"position":[[0,10]]},"2098":{"position":[[18,10]]},"2175":{"position":[[4,10],[42,10]]},"2215":{"position":[[23,10]]},"2217":{"position":[[23,10]]},"2219":{"position":[[23,10]]},"2390":{"position":[[73,10]]}}}],["label",{"_index":13,"t":{"1659":{"position":[[5,6]]}}}],["larg",{"_index":166,"t":{"1986":{"position":[[0,5]]}}}],["launch",{"_index":86,"t":{"1837":{"position":[[3,6]]}}}],["level",{"_index":199,"t":{"2086":{"position":[[5,5]]},"2365":{"position":[[60,5]]}}}],["limit",{"_index":436,"t":{"2390":{"position":[[6,5]]}}}],["linux",{"_index":27,"t":{"1701":{"position":[[19,5]]}}}],["listen",{"_index":61,"t":{"1775":{"position":[[0,9]]}}}],["local",{"_index":127,"t":{"1921":{"position":[[0,5]]}}}],["log",{"_index":2,"t":{"1641":{"position":[[0,7]]},"1773":{"position":[[0,7]]},"2258":{"position":[[31,3]]},"2260":{"position":[[31,3]]},"2262":{"position":[[31,3]]},"2264":{"position":[[31,3]]},"2322":{"position":[[4,7]]}}}],["longhorn",{"_index":230,"t":{"2144":{"position":[[0,8]]}}}],["lookup",{"_index":330,"t":{"2266":{"position":[[41,6]]}}}],["make",{"_index":343,"t":{"2282":{"position":[[39,5]]},"2361":{"position":[[24,4]]},"2373":{"position":[[36,5]]}}}],["manag",{"_index":252,"t":{"2183":{"position":[[33,7]]},"2185":{"position":[[33,7]]},"2284":{"position":[[15,7]]},"2424":{"position":[[12,10]]}}}],["manager.conf",{"_index":275,"t":{"2211":{"position":[[34,12]]},"2213":{"position":[[34,12]]}}}],["manifest",{"_index":132,"t":{"1928":{"position":[[15,9]]},"1934":{"position":[[10,9]]}}}],["manual",{"_index":105,"t":{"1887":{"position":[[0,8]]},"2170":{"position":[[0,8]]},"2195":{"position":[[102,8]]},"2197":{"position":[[86,8]]},"2217":{"position":[[102,8]]},"2219":{"position":[[74,8]]},"2222":{"position":[[64,8]]},"2240":{"position":[[70,8]]},"2244":{"position":[[72,8]]},"2246":{"position":[[108,8]]},"2278":{"position":[[83,8]]},"2280":{"position":[[69,8]]},"2282":{"position":[[81,8]]},"2285":{"position":[[83,8]]},"2317":{"position":[[64,8]]},"2320":{"position":[[69,8]]},"2323":{"position":[[52,8]]},"2325":{"position":[[64,8]]},"2332":{"position":[[92,8]]},"2334":{"position":[[75,8]]},"2340":{"position":[[98,8]]},"2342":{"position":[[88,8]]},"2355":{"position":[[60,8]]},"2357":{"position":[[83,8]]},"2363":{"position":[[62,8]]},"2365":{"position":[[106,8]]},"2367":{"position":[[99,8]]},"2371":{"position":[[78,8]]},"2373":{"position":[[78,8]]},"2376":{"position":[[69,8]]},"2378":{"position":[[33,8]]},"2380":{"position":[[54,8]]},"2382":{"position":[[37,8]]},"2384":{"position":[[66,8]]},"2386":{"position":[[74,8]]},"2388":{"position":[[40,8]]},"2390":{"position":[[92,8]]},"2393":{"position":[[88,8]]},"2411":{"position":[[71,8]]},"2413":{"position":[[64,8]]},"2415":{"position":[[50,8]]},"2417":{"position":[[64,8]]},"2420":{"position":[[58,8]]},"2422":{"position":[[62,8]]},"2425":{"position":[[74,8]]},"2427":{"position":[[39,8]]},"2430":{"position":[[79,8]]},"2433":{"position":[[74,8]]},"2435":{"position":[[87,8]]},"2437":{"position":[[56,8]]},"2439":{"position":[[47,8]]}}}],["maxag",{"_index":323,"t":{"2260":{"position":[[35,6]]}}}],["maxbackup",{"_index":326,"t":{"2262":{"position":[[35,9]]}}}],["maxsiz",{"_index":328,"t":{"2264":{"position":[[35,7]]}}}],["measur",{"_index":188,"t":{"2058":{"position":[[33,12]]}}}],["mechan",{"_index":443,"t":{"2393":{"position":[[69,9]]}}}],["memori",{"_index":168,"t":{"1988":{"position":[[8,6]]}}}],["method",{"_index":103,"t":{"1883":{"position":[[17,6]]},"1887":{"position":[[23,6]]},"1897":{"position":[[15,6]]},"1899":{"position":[[19,6]]}}}],["methodolog",{"_index":189,"t":{"2060":{"position":[[0,11]]}}}],["migrat",{"_index":139,"t":{"1946":{"position":[[0,9]]}}}],["minim",{"_index":378,"t":{"2323":{"position":[[20,7]]},"2378":{"position":[[6,8]]},"2380":{"position":[[6,8]]},"2382":{"position":[[6,8]]},"2395":{"position":[[6,8]]},"2397":{"position":[[6,8]]},"2399":{"position":[[6,8]]},"2401":{"position":[[6,8]]},"2403":{"position":[[6,8]]},"2405":{"position":[[6,8]]},"2407":{"position":[[6,8]]},"2409":{"position":[[6,8]]},"2411":{"position":[[7,8]]},"2413":{"position":[[7,8]]},"2415":{"position":[[7,8]]},"2417":{"position":[[7,8]]}}}],["mirror",{"_index":156,"t":{"1962":{"position":[[0,7]]}}}],["mode",{"_index":176,"t":{"2018":{"position":[[9,4]]},"2234":{"position":[[38,4]]},"2236":{"position":[[38,4]]},"2238":{"position":[[38,4]]},"2351":{"position":[[38,4]]}}}],["more",{"_index":246,"t":{"2179":{"position":[[86,4]]},"2183":{"position":[[94,4]]},"2187":{"position":[[85,4]]},"2191":{"position":[[80,4]]},"2195":{"position":[[85,4]]},"2199":{"position":[[73,4]]},"2203":{"position":[[69,4]]},"2207":{"position":[[73,4]]},"2211":{"position":[[82,4]]},"2217":{"position":[[85,4]]},"2328":{"position":[[73,4]]},"2332":{"position":[[75,4]]},"2336":{"position":[[83,4]]},"2340":{"position":[[81,4]]},"2344":{"position":[[88,4]]}}}],["mount",{"_index":429,"t":{"2386":{"position":[[50,7]]}}}],["multicloud",{"_index":155,"t":{"1956":{"position":[[22,10]]}}}],["multipl",{"_index":119,"t":{"1909":{"position":[[0,8]]}}}],["namespac",{"_index":451,"t":{"2397":{"position":[[80,9]]},"2399":{"position":[[73,9]]},"2401":{"position":[[77,9]]},"2422":{"position":[[22,10]]},"2433":{"position":[[63,10]]},"2439":{"position":[[18,9]]}}}],["namespacelifecycl",{"_index":313,"t":{"2250":{"position":[[48,18]]}}}],["nativ",{"_index":142,"t":{"1946":{"position":[[47,6]]}}}],["necessari",{"_index":430,"t":{"2386":{"position":[[64,9]]}}}],["net_raw",{"_index":459,"t":{"2407":{"position":[[52,7]]}}}],["network",{"_index":8,"t":{"1651":{"position":[[0,10]]},"1781":{"position":[[0,10]]},"1952":{"position":[[25,10]]},"1954":{"position":[[18,10]]},"1982":{"position":[[0,10]]},"1992":{"position":[[0,7]]},"2028":{"position":[[13,8]]},"2195":{"position":[[32,7]]},"2197":{"position":[[33,7]]},"2401":{"position":[[69,7]]},"2419":{"position":[[4,7]]}}}],["networkpolici",{"_index":206,"t":{"2094":{"position":[[0,15]]},"2420":{"position":[[42,15]]},"2422":{"position":[[38,15]]}}}],["new",{"_index":95,"t":{"1847":{"position":[[0,3]]}}}],["node",{"_index":6,"t":{"1647":{"position":[[0,4]]},"1659":{"position":[[0,4]]},"1837":{"position":[[17,5]]},"1841":{"position":[[36,5]]},"1843":{"position":[[24,5]]},"1984":{"position":[[29,5]]},"1998":{"position":[[15,5]]},"2000":{"position":[[24,5]]},"2178":{"position":[[18,4]]},"2236":{"position":[[61,4]]},"2304":{"position":[[7,4]]},"2327":{"position":[[11,4]]}}}],["noderestrict",{"_index":314,"t":{"2252":{"position":[[48,15]]}}}],["nvidia",{"_index":21,"t":{"1680":{"position":[[0,6]]}}}],["obtain",{"_index":125,"t":{"1919":{"position":[[0,6]]}}}],["on",{"_index":442,"t":{"2393":{"position":[[43,3]]}}}],["oper",{"_index":161,"t":{"1978":{"position":[[0,9]]}}}],["option",{"_index":4,"t":{"1643":{"position":[[8,7]]},"1765":{"position":[[14,7]]},"1768":{"position":[[8,7]]},"1770":{"position":[[17,7]]},"1772":{"position":[[9,7]]},"1789":{"position":[[13,7]]},"1791":{"position":[[11,7]]},"1841":{"position":[[3,9]]},"1843":{"position":[[3,9]]},"1944":{"position":[[8,7]]}}}],["os",{"_index":22,"t":{"1698":{"position":[[3,2]]}}}],["outlin",{"_index":82,"t":{"1833":{"position":[[13,7]]}}}],["over",{"_index":479,"t":{"2425":{"position":[[36,4]]}}}],["overrid",{"_index":410,"t":{"2363":{"position":[[33,8]]}}}],["overview",{"_index":231,"t":{"2158":{"position":[[0,8]]}}}],["ownership",{"_index":249,"t":{"2181":{"position":[[56,9]]},"2185":{"position":[[64,9]]},"2189":{"position":[[55,9]]},"2193":{"position":[[50,9]]},"2197":{"position":[[56,9]]},"2201":{"position":[[43,9]]},"2205":{"position":[[39,9]]},"2209":{"position":[[43,9]]},"2213":{"position":[[52,9]]},"2215":{"position":[[57,9]]},"2330":{"position":[[43,9]]},"2334":{"position":[[45,9]]},"2338":{"position":[[53,9]]},"2342":{"position":[[58,9]]},"2346":{"position":[[59,9]]}}}],["packag",{"_index":134,"t":{"1930":{"position":[[0,8]]}}}],["paramet",{"_index":287,"t":{"2224":{"position":[[40,9]]}}}],["path",{"_index":321,"t":{"2258":{"position":[[35,4]]}}}],["peer",{"_index":369,"t":{"2311":{"position":[[22,4],[43,4]]},"2313":{"position":[[22,4]]},"2315":{"position":[[22,4]]}}}],["permiss",{"_index":244,"t":{"2179":{"position":[[56,11]]},"2183":{"position":[[64,11]]},"2187":{"position":[[55,11]]},"2191":{"position":[[50,11]]},"2195":{"position":[[55,11]]},"2199":{"position":[[43,11]]},"2203":{"position":[[39,11]]},"2207":{"position":[[43,11]]},"2211":{"position":[[52,11]]},"2217":{"position":[[55,11]]},"2219":{"position":[[47,11]]},"2328":{"position":[[43,11]]},"2332":{"position":[[45,11]]},"2336":{"position":[[53,11]]},"2340":{"position":[[51,11]]},"2344":{"position":[[62,11]]},"2390":{"position":[[54,11]]}}}],["pi",{"_index":31,"t":{"1705":{"position":[[10,2]]}}}],["pki",{"_index":278,"t":{"2215":{"position":[[34,3]]},"2217":{"position":[[34,3]]},"2219":{"position":[[34,3]]}}}],["place",{"_index":444,"t":{"2393":{"position":[[82,5]]}}}],["plan",{"_index":232,"t":{"2162":{"position":[[10,5]]}}}],["plane",{"_index":145,"t":{"1950":{"position":[[8,5]]},"2000":{"position":[[18,5]]},"2100":{"position":[[8,5]]},"2178":{"position":[[12,5]]}}}],["plugin",{"_index":302,"t":{"2240":{"position":[[41,6]]},"2242":{"position":[[41,6]]},"2244":{"position":[[41,6]]},"2246":{"position":[[41,6]]},"2248":{"position":[[41,6]]},"2250":{"position":[[41,6]]},"2252":{"position":[[41,6]]}}}],["pod",{"_index":205,"t":{"2092":{"position":[[0,3]]},"2179":{"position":[[33,3]]},"2181":{"position":[[33,3]]},"2183":{"position":[[41,3]]},"2185":{"position":[[41,3]]},"2187":{"position":[[32,3]]},"2189":{"position":[[32,3]]},"2191":{"position":[[27,3]]},"2193":{"position":[[27,3]]},"2285":{"position":[[35,3]]},"2382":{"position":[[32,4]]},"2392":{"position":[[4,3]]},"2435":{"position":[[71,3]]},"2437":{"position":[[36,4]]}}}],["pod.yaml",{"_index":229,"t":{"2142":{"position":[[0,8]]},"2148":{"position":[[0,8]]}}}],["podsecuritypolici",{"_index":310,"t":{"2246":{"position":[[78,17]]}}}],["polici",{"_index":181,"t":{"2028":{"position":[[22,6]]},"2323":{"position":[[34,6]]},"2325":{"position":[[28,6]]},"2393":{"position":[[54,6]]},"2419":{"position":[[12,8]]},"2432":{"position":[[12,8]]}}}],["port",{"_index":316,"t":{"2254":{"position":[[32,4]]},"2355":{"position":[[34,4]]}}}],["prefer",{"_index":478,"t":{"2425":{"position":[[6,6]]}}}],["prepar",{"_index":108,"t":{"1889":{"position":[[0,7]]}}}],["prerequisit",{"_index":111,"t":{"1892":{"position":[[0,13]]},"1974":{"position":[[0,13]]}}}],["prevent",{"_index":196,"t":{"2076":{"position":[[0,10]]}}}],["primari",{"_index":193,"t":{"2074":{"position":[[0,7]]}}}],["privat",{"_index":101,"t":{"1883":{"position":[[0,7]]},"1970":{"position":[[21,7]]},"2272":{"position":[[49,7]]},"2291":{"position":[[40,7]]},"2367":{"position":[[49,7]]}}}],["privileg",{"_index":446,"t":{"2395":{"position":[[32,10]]}}}],["process",{"_index":66,"t":{"1787":{"position":[[32,9]]},"2397":{"position":[[69,7]]}}}],["profil",{"_index":319,"t":{"2256":{"position":[[25,9]]},"2287":{"position":[[24,9]]},"2300":{"position":[[24,9]]},"2435":{"position":[[30,7]]}}}],["protect",{"_index":201,"t":{"2088":{"position":[[7,7]]},"2359":{"position":[[24,7]]}}}],["proven",{"_index":486,"t":{"2430":{"position":[[22,10]]}}}],["provid",{"_index":340,"t":{"2278":{"position":[[36,8]]},"2280":{"position":[[30,9]]}}}],["proxi",{"_index":387,"t":{"2332":{"position":[[9,5]]},"2334":{"position":[[9,5]]}}}],["put",{"_index":121,"t":{"1911":{"position":[[0,7]]}}}],["pvc.yaml",{"_index":228,"t":{"2140":{"position":[[0,8]]},"2146":{"position":[[0,8]]}}}],["qp",{"_index":413,"t":{"2365":{"position":[[30,3]]}}}],["raspberri",{"_index":30,"t":{"1705":{"position":[[0,9]]}}}],["rbac",{"_index":124,"t":{"1917":{"position":[[10,4]]},"2238":{"position":[[61,4]]},"2375":{"position":[[4,4]]}}}],["read",{"_index":401,"t":{"2355":{"position":[[24,4]]}}}],["red",{"_index":24,"t":{"1701":{"position":[[0,3]]}}}],["registr",{"_index":89,"t":{"1839":{"position":[[23,12]]}}}],["registri",{"_index":102,"t":{"1883":{"position":[[8,8]]},"1885":{"position":[[11,8]]},"1960":{"position":[[0,10]]},"1970":{"position":[[29,8]]}}}],["releas",{"_index":233,"t":{"2166":{"position":[[0,7]]}}}],["request",{"_index":331,"t":{"2268":{"position":[[25,7]]}}}],["requir",{"_index":190,"t":{"2064":{"position":[[18,12]]},"2086":{"position":[[11,12]]},"2090":{"position":[[19,12]]},"2376":{"position":[[60,8]]}}}],["resourc",{"_index":184,"t":{"2056":{"position":[[9,8]]},"2064":{"position":[[9,8]]},"2074":{"position":[[8,8]]},"2433":{"position":[[47,9]]}}}],["restart",{"_index":235,"t":{"2172":{"position":[[0,10]]}}}],["restor",{"_index":75,"t":{"1818":{"position":[[11,7]]},"1820":{"position":[[11,7]]},"1822":{"position":[[11,7]]}}}],["restrict",{"_index":247,"t":{"2179":{"position":[[91,11]]},"2183":{"position":[[99,11]]},"2187":{"position":[[90,11]]},"2191":{"position":[[85,11]]},"2195":{"position":[[90,11]]},"2199":{"position":[[78,11]]},"2203":{"position":[[74,11]]},"2207":{"position":[[78,11]]},"2211":{"position":[[87,11]]},"2217":{"position":[[90,11]]},"2328":{"position":[[78,11]]},"2332":{"position":[[80,11]]},"2336":{"position":[[88,11]]},"2340":{"position":[[86,11]]},"2344":{"position":[[93,11]]}}}],["role",{"_index":171,"t":{"2002":{"position":[[7,5]]},"2376":{"position":[[36,4]]},"2380":{"position":[[31,5]]}}}],["root",{"_index":356,"t":{"2293":{"position":[[24,4]]},"2405":{"position":[[32,4]]}}}],["root:root",{"_index":250,"t":{"2181":{"position":[[76,9]]},"2185":{"position":[[84,9]]},"2189":{"position":[[75,9]]},"2193":{"position":[[70,9]]},"2197":{"position":[[76,9]]},"2205":{"position":[[59,9]]},"2209":{"position":[[63,9]]},"2213":{"position":[[72,9]]},"2215":{"position":[[77,9]]},"2330":{"position":[[63,9]]},"2334":{"position":[[65,9]]},"2338":{"position":[[73,9]]},"2342":{"position":[[78,9]]},"2346":{"position":[[79,9]]}}}],["rootless",{"_index":175,"t":{"2018":{"position":[[0,8]]}}}],["rotat",{"_index":38,"t":{"1737":{"position":[[0,8]]},"1743":{"position":[[0,8]]},"1745":{"position":[[0,8]]},"1747":{"position":[[27,8]]},"1755":{"position":[[15,8]]},"2369":{"position":[[25,6]]}}}],["rotatekubeletservercertif",{"_index":358,"t":{"2295":{"position":[[22,30]]},"2371":{"position":[[23,30]]}}}],["rule",{"_index":165,"t":{"1984":{"position":[[8,5]]}}}],["runtim",{"_index":7,"t":{"1649":{"position":[[0,7]]},"2090":{"position":[[11,7]]}}}],["schedul",{"_index":255,"t":{"2187":{"position":[[22,9]]},"2189":{"position":[[22,9]]},"2299":{"position":[[4,9]]}}}],["scheduler.conf",{"_index":272,"t":{"2207":{"position":[[23,14]]},"2209":{"position":[[23,14]]}}}],["scope",{"_index":183,"t":{"2056":{"position":[[0,5]]}}}],["script",{"_index":116,"t":{"1897":{"position":[[8,6]]},"1903":{"position":[[27,6]]},"2168":{"position":[[35,6]]}}}],["seccomp",{"_index":495,"t":{"2435":{"position":[[22,7]]}}}],["secret",{"_index":48,"t":{"1753":{"position":[[0,7]]},"1757":{"position":[[0,7]]},"1759":{"position":[[0,7]]},"1779":{"position":[[0,7]]},"2080":{"position":[[0,7]]},"2378":{"position":[[25,7]]},"2424":{"position":[[4,7]]},"2425":{"position":[[19,7],[41,7]]},"2427":{"position":[[24,6]]}}}],["secur",{"_index":69,"t":{"1799":{"position":[[0,6]]},"2092":{"position":[[4,8]]},"2254":{"position":[[25,6]]},"2325":{"position":[[46,8]]},"2392":{"position":[[8,8]]}}}],["securitycontext",{"_index":500,"t":{"2437":{"position":[[12,15]]}}}],["securitycontextdeni",{"_index":309,"t":{"2246":{"position":[[48,19]]}}}],["selector",{"_index":147,"t":{"1950":{"position":[[21,8]]}}}],["self",{"_index":42,"t":{"1745":{"position":[[9,4]]}}}],["selinux",{"_index":32,"t":{"1709":{"position":[[0,7]]},"1711":{"position":[[0,7]]}}}],["server",{"_index":36,"t":{"1735":{"position":[[11,6]]},"1737":{"position":[[20,6]]},"1793":{"position":[[4,6]]},"1805":{"position":[[0,6]]},"1837":{"position":[[10,6]]},"1841":{"position":[[29,6]]},"1984":{"position":[[22,6]]},"2002":{"position":[[25,7]]},"2008":{"position":[[13,7]]},"2066":{"position":[[4,6]]},"2096":{"position":[[4,6]]},"2179":{"position":[[26,6]]},"2181":{"position":[[26,6]]},"2221":{"position":[[8,6]]},"2282":{"position":[[27,6]]}}}],["servic",{"_index":44,"t":{"1747":{"position":[[0,7]]},"2266":{"position":[[25,7]]},"2289":{"position":[[28,7]]},"2291":{"position":[[24,7]]},"2328":{"position":[[30,7]]},"2330":{"position":[[30,7]]},"2375":{"position":[[13,7]]},"2384":{"position":[[26,7]]},"2386":{"position":[[18,7]]}}}],["serviceaccount",{"_index":312,"t":{"2248":{"position":[[48,14]]}}}],["servicelb",{"_index":182,"t":{"2032":{"position":[[0,9]]},"2036":{"position":[[0,9]]},"2038":{"position":[[0,9]]},"2040":{"position":[[0,9]]}}}],["set",{"_index":204,"t":{"2088":{"position":[[34,3]]},"2179":{"position":[[72,3]]},"2181":{"position":[[69,3]]},"2183":{"position":[[80,3]]},"2185":{"position":[[77,3]]},"2187":{"position":[[71,3]]},"2189":{"position":[[68,3]]},"2191":{"position":[[66,3]]},"2193":{"position":[[63,3]]},"2195":{"position":[[71,3]]},"2197":{"position":[[69,3]]},"2199":{"position":[[59,3]]},"2201":{"position":[[56,3]]},"2203":{"position":[[55,3]]},"2205":{"position":[[52,3]]},"2207":{"position":[[59,3]]},"2209":{"position":[[56,3]]},"2211":{"position":[[68,3]]},"2213":{"position":[[65,3]]},"2215":{"position":[[70,3]]},"2217":{"position":[[71,3]]},"2219":{"position":[[63,3]]},"2222":{"position":[[51,3]]},"2224":{"position":[[57,3]]},"2226":{"position":[[54,3]]},"2228":{"position":[[50,3]]},"2230":{"position":[[90,3]]},"2232":{"position":[[66,3]]},"2234":{"position":[[59,3]]},"2240":{"position":[[66,3]]},"2242":{"position":[[67,3]]},"2244":{"position":[[68,3]]},"2246":{"position":[[71,3]]},"2248":{"position":[[66,3]]},"2250":{"position":[[70,3]]},"2252":{"position":[[67,3]]},"2254":{"position":[[53,3]]},"2256":{"position":[[47,3]]},"2258":{"position":[[52,3]]},"2260":{"position":[[54,3]]},"2262":{"position":[[57,3]]},"2264":{"position":[[55,3]]},"2266":{"position":[[60,3]]},"2268":{"position":[[53,3]]},"2270":{"position":[[72,3]]},"2272":{"position":[[80,3]]},"2274":{"position":[[52,3]]},"2276":{"position":[[49,3]]},"2278":{"position":[[64,3]]},"2285":{"position":[[64,3]]},"2287":{"position":[[46,3]]},"2289":{"position":[[68,3]]},"2291":{"position":[[69,3]]},"2293":{"position":[[49,3]]},"2295":{"position":[[65,3]]},"2297":{"position":[[49,3]]},"2300":{"position":[[46,3]]},"2302":{"position":[[49,3]]},"2305":{"position":[[61,3]]},"2307":{"position":[[51,3]]},"2309":{"position":[[47,3]]},"2311":{"position":[[71,3]]},"2313":{"position":[[56,3]]},"2315":{"position":[[52,3]]},"2328":{"position":[[59,3]]},"2330":{"position":[[56,3]]},"2332":{"position":[[61,3]]},"2334":{"position":[[58,3]]},"2336":{"position":[[69,3]]},"2338":{"position":[[66,3]]},"2340":{"position":[[67,3]]},"2342":{"position":[[71,3]]},"2344":{"position":[[74,3]]},"2346":{"position":[[72,3]]},"2349":{"position":[[51,3]]},"2351":{"position":[[59,3]]},"2353":{"position":[[51,3]]},"2355":{"position":[[51,3]]},"2357":{"position":[[74,3]]},"2359":{"position":[[60,3]]},"2361":{"position":[[62,3]]},"2363":{"position":[[58,3]]},"2365":{"position":[[46,3]]},"2367":{"position":[[80,3]]},"2369":{"position":[[61,3]]},"2371":{"position":[[66,3]]},"2435":{"position":[[41,3]]}}}],["share",{"_index":449,"t":{"2397":{"position":[[54,5]]},"2399":{"position":[[54,5]]},"2401":{"position":[[54,5]]}}}],["short",{"_index":70,"t":{"1801":{"position":[[0,5]]}}}],["sign",{"_index":43,"t":{"1745":{"position":[[14,6]]}}}],["singl",{"_index":152,"t":{"1954":{"position":[[0,6]]},"2068":{"position":[[19,6]]}}}],["skip",{"_index":136,"t":{"1938":{"position":[[6,5]]}}}],["snap",{"_index":174,"t":{"2014":{"position":[[0,8]]}}}],["specif",{"_index":243,"t":{"2179":{"position":[[37,13]]},"2181":{"position":[[37,13]]},"2183":{"position":[[45,13]]},"2185":{"position":[[45,13]]},"2187":{"position":[[36,13]]},"2189":{"position":[[36,13]]},"2191":{"position":[[31,13]]},"2193":{"position":[[31,13]]}}}],["sqlite",{"_index":76,"t":{"1818":{"position":[[24,6]]}}}],["stack",{"_index":149,"t":{"1952":{"position":[[5,5]]},"1954":{"position":[[7,5]]}}}],["standard",{"_index":440,"t":{"2392":{"position":[[17,9]]}}}],["statu",{"_index":52,"t":{"1759":{"position":[[19,6]]}}}],["storag",{"_index":62,"t":{"1783":{"position":[[0,7]]},"2427":{"position":[[31,7]]}}}],["stream",{"_index":403,"t":{"2357":{"position":[[24,9]]}}}],["strong",{"_index":344,"t":{"2282":{"position":[[52,6]]},"2373":{"position":[[49,6]]}}}],["support",{"_index":473,"t":{"2420":{"position":[[33,8]]}}}],["syntax",{"_index":172,"t":{"2004":{"position":[[19,6]]}}}],["system",{"_index":162,"t":{"1978":{"position":[[10,7]]},"2160":{"position":[[12,6]]}}}],["system:mast",{"_index":433,"t":{"2388":{"position":[[19,14]]}}}],["taint",{"_index":14,"t":{"1659":{"position":[[16,6]]}}}],["termin",{"_index":348,"t":{"2285":{"position":[[24,10]]}}}],["test",{"_index":185,"t":{"2056":{"position":[[18,7]]}}}],["threshold",{"_index":350,"t":{"2285":{"position":[[42,9]]}}}],["timeout",{"_index":332,"t":{"2268":{"position":[[33,7]]},"2357":{"position":[[50,7]]}}}],["tl",{"_index":157,"t":{"1966":{"position":[[5,3]]},"1968":{"position":[[8,3]]},"2272":{"position":[[25,3],[45,3]]},"2309":{"position":[[27,3]]},"2315":{"position":[[32,3]]},"2367":{"position":[[25,3],[45,3]]}}}],["togeth",{"_index":122,"t":{"1911":{"position":[[15,8]]}}}],["token",{"_index":67,"t":{"1797":{"position":[[0,5]]},"1803":{"position":[[0,5]]},"1919":{"position":[[18,5]]},"2224":{"position":[[24,5]]},"2386":{"position":[[34,6]]}}}],["tool",{"_index":50,"t":{"1753":{"position":[[19,4]]},"2080":{"position":[[19,4]]}}}],["traefik",{"_index":97,"t":{"1855":{"position":[[0,7]]},"2026":{"position":[[0,7]]}}}],["true",{"_index":292,"t":{"2228":{"position":[[57,4]]},"2266":{"position":[[67,4]]},"2289":{"position":[[75,4]]},"2295":{"position":[[72,4]]},"2307":{"position":[[58,4]]},"2309":{"position":[[54,4]]},"2313":{"position":[[63,4]]},"2315":{"position":[[59,4]]},"2359":{"position":[[67,4]]},"2361":{"position":[[69,4]]},"2371":{"position":[[73,4]]}}}],["type",{"_index":71,"t":{"1803":{"position":[[6,5]]}}}],["ubuntu",{"_index":29,"t":{"1703":{"position":[[0,6]]}}}],["uninstal",{"_index":173,"t":{"2008":{"position":[[0,12]]},"2010":{"position":[[0,12]]}}}],["uniqu",{"_index":373,"t":{"2317":{"position":[[18,6]]}}}],["upgrad",{"_index":115,"t":{"1896":{"position":[[0,9]]},"1899":{"position":[[10,8]]},"1923":{"position":[[0,9]]},"2160":{"position":[[19,7]]},"2168":{"position":[[0,7]]},"2170":{"position":[[9,7]]}}}],["us",{"_index":41,"t":{"1741":{"position":[[0,5]]},"1765":{"position":[[9,4]]},"1936":{"position":[[0,5]]},"1938":{"position":[[0,5]]},"2168":{"position":[[12,5]]},"2170":{"position":[[21,5]]},"2246":{"position":[[103,4]]},"2282":{"position":[[45,3]]},"2289":{"position":[[24,3]]},"2317":{"position":[[50,4]]},"2320":{"position":[[54,4]]},"2373":{"position":[[42,3]]},"2376":{"position":[[49,4]]},"2380":{"position":[[24,3]]},"2384":{"position":[[60,5]]},"2388":{"position":[[12,3]]},"2390":{"position":[[12,3]]},"2417":{"position":[[50,3]]},"2420":{"position":[[29,3]]},"2425":{"position":[[13,5]]},"2430":{"position":[[33,5]]},"2433":{"position":[[57,5]]},"2439":{"position":[[42,4]]}}}],["user",{"_index":130,"t":{"1925":{"position":[[33,4]]},"1932":{"position":[[0,4]]},"2320":{"position":[[63,5]]}}}],["util",{"_index":194,"t":{"2074":{"position":[[17,11]]},"2361":{"position":[[38,4]]}}}],["v1.22",{"_index":239,"t":{"2175":{"position":[[53,5]]}}}],["v1.23",{"_index":238,"t":{"2175":{"position":[[25,5]]}}}],["v1.24",{"_index":240,"t":{"2175":{"position":[[62,5]]}}}],["v1.24.x",{"_index":178,"t":{"2020":{"position":[[20,9]]}}}],["v1.25.x",{"_index":179,"t":{"2020":{"position":[[30,8]]}}}],["valu",{"_index":55,"t":{"1763":{"position":[[23,6]]}}}],["variabl",{"_index":480,"t":{"2425":{"position":[[64,9]]}}}],["verifi",{"_index":418,"t":{"2371":{"position":[[7,6]]}}}],["volum",{"_index":468,"t":{"2415":{"position":[[42,7]]}}}],["wildcard",{"_index":424,"t":{"2380":{"position":[[15,8]]}}}],["window",{"_index":99,"t":{"1857":{"position":[[5,8]]},"2413":{"position":[[33,7]]}}}],["wireguard",{"_index":140,"t":{"1946":{"position":[[15,9],[37,9]]}}}],["wish",{"_index":448,"t":{"2397":{"position":[[43,7]]},"2399":{"position":[[43,7]]},"2401":{"position":[[43,7]]}}}],["without",{"_index":158,"t":{"1968":{"position":[[0,7]]}}}],["worker",{"_index":383,"t":{"2327":{"position":[[4,6]]}}}],["workload",{"_index":191,"t":{"2066":{"position":[[18,8]]},"2076":{"position":[[22,9]]}}}],["yaml",{"_index":104,"t":{"1885":{"position":[[20,4]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":1634,"t":"경량의 쿠버네티스. 간편한 설치와 절반의 메모리, 모든걸 100MB 미만의 바이너리로 제공합니다. 적합한 환경: 엣지(Edge) 사물인터넷(IoT) 지속적인 통합(CI) 개발 ARM 임베딩 K8s k8s 클러스터 분야의 박사 학위를 취득하기 어려운 상황","s":"K3s - Lightweight Kubernetes","u":"/kr/","h":"","p":1633},{"i":1636,"t":"K3s는 쿠버네티스와 완전히 호환되며 다음과 같은 향상된 기능을 갖춘 배포판입니다: 단일 바이너리로 패키지화. 기본 스토리지 메커니즘으로 sqlite3를 기반으로 하는 경량 스토리지 백엔드. etcd3, MySQL, Postgres도 사용 가능. 복잡한 TLS 및 옵션을 처리하는 간단한 런처에 포함. 경량 환경을 위한 합리적인 기본값으로 기본적으로 보안을 유지함. 다음과 같이 간단하지만 강력한 'batteries-included' 기능 추가. 예를 들어: local storage provider service load balancer Helm controller Traefik ingress controller 모든 쿠버네티스 컨트롤 플레인 구성 요소의 작동은 단일 바이너리 및 프로세스로 캡슐화. 이를 통해 K3s는 인증서 배포와 같은 복잡한 클러스터 작업을 자동화하고 관리. 외부 종속성 최소화(최신 커널과 cgroup 마운트만 필요) K3s는 다음과 같은 필수 종속성을 패키지로 제공합니다: Containerd Flannel (CNI) CoreDNS Traefik (인그레스) Klipper-lb (서비스 로드밸런서) 임베디드 네트워크 정책 컨트롤러 임베디드 로컬 경로 프로비저너 호스트 유틸리티(iptables, socat 등)","s":"k3s란 무엇입니까?","u":"/kr/","h":"","p":1633},{"i":1638,"t":"우리는 메모리 풋프린트 측면에서 절반 크기의 Kubernetes를 설치하기를 원했습니다. Kubernetes는 K8로 표기되는 10글자 단어입니다. 따라서 쿠버네티스의 절반 크기라면 K3s로 표기된 5글자 단어가 될 것입니다. K3s의 긴 형태는 없으며 공식적인 발음도 없습니다.","s":"이름에는 무슨 뜻이 있나요?","u":"/kr/","h":"","p":1633},{"i":1640,"t":"In this section, you'll learn how to configure the K3s agent. Note that servers also run an agent, so all flags listed on this page are also valid for use on servers. Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the Configuration File documentation for more information on using YAML configuration files.","s":"k3s agent","u":"/kr/cli/agent","h":"","p":1639},{"i":1642,"t":"Flag Default Description -v value 0 Number for the log level verbosity --vmodule value N/A Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value N/A Log to file --alsologtostderr N/A Log to standard error as well as file (if set)","s":"Logging","u":"/kr/cli/agent","h":"#logging","p":1639},{"i":1644,"t":"Flag Environment Variable Description --token value, -t value K3S_TOKEN Token to use for authentication --token-file value K3S_TOKEN_FILE Token file to use for authentication --server value, -s value K3S_URL Server to connect to","s":"Cluster Options","u":"/kr/cli/agent","h":"#cluster-options","p":1639},{"i":1646,"t":"Flag Default Description --data-dir value, -d value \"/var/lib/rancher/k3s\" Folder to hold state","s":"Data","u":"/kr/cli/agent","h":"#data","p":1639},{"i":1648,"t":"Flag Environment Variable Description --node-name value K3S_NODE_NAME Node name --with-node-id N/A Append id to node name --node-label value N/A Registering and starting kubelet with set of labels --node-taint value N/A Registering kubelet with set of taints --protect-kernel-defaults N/A Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults. --selinux K3S_SELINUX Enable SELinux in containerd --lb-server-port value K3S_LB_SERVER_PORT Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)","s":"Node","u":"/kr/cli/agent","h":"#node","p":1639},{"i":1650,"t":"Flag Default Description --container-runtime-endpoint value N/A Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path --pause-image value \"docker.io/rancher/pause:3.1\" Customized pause image for containerd or docker sandbox --private-registry value \"/etc/rancher/k3s/registries.yaml\" Private registry configuration file","s":"Runtime","u":"/kr/cli/agent","h":"#runtime","p":1639},{"i":1652,"t":"Flag Environment Variable Description --node-ip value, -i value N/A IP address to advertise for node --node-external-ip value N/A External IP address to advertise for node --resolv-conf value K3S_RESOLV_CONF Kubelet resolv.conf file --flannel-iface value N/A Override default flannel interface --flannel-conf value N/A Override default flannel config file --flannel-cni-conf value N/A Override default flannel cni config file","s":"Networking","u":"/kr/cli/agent","h":"#networking","p":1639},{"i":1654,"t":"Flag Description --kubelet-arg value Customized flag for kubelet process --kube-proxy-arg value Customized flag for kube-proxy process","s":"Customized Flags","u":"/kr/cli/agent","h":"#customized-flags","p":1639},{"i":1656,"t":"Flag Description --rootless Run rootless --docker Use cri-dockerd instead of containerd --prefer-bundled-bin Prefer bundled userspace binaries over host binaries","s":"Experimental","u":"/kr/cli/agent","h":"#experimental","p":1639},{"i":1658,"t":"Flag Environment Variable Description --no-flannel N/A Use --flannel-backend=none --cluster-secret value K3S_CLUSTER_SECRET Use --token","s":"Deprecated","u":"/kr/cli/agent","h":"#deprecated","p":1639},{"i":1660,"t":"K3s agents can be configured with the options --node-label and --node-taint which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands. Below is an example showing how to add labels and a taint: --node-label foo=bar \\ --node-label hello=world \\ --node-taint key1=value1:NoExecute If you want to change node labels and taints after node registration you should use kubectl. Refer to the official Kubernetes documentation for details on how to add taints and node labels.","s":"Node Labels and Taints for Agents","u":"/kr/cli/agent","h":"#node-labels-and-taints-for-agents","p":1639},{"i":1662,"t":"If an option appears in brackets below, for example [$K3S_URL], it means that the option can be passed in as an environment variable of that name. NAME: k3s agent - Run node agent USAGE: k3s agent [OPTIONS] OPTIONS: --config FILE, -c FILE (config) Load configuration from FILE (default: \"/etc/rancher/k3s/config.yaml\") [$K3S_CONFIG_FILE] --debug (logging) Turn on debug logs [$K3S_DEBUG] -v value (logging) Number for the log level verbosity (default: 0) --vmodule value (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value (logging) Log to file --alsologtostderr (logging) Log to standard error as well as file (if set) --token value, -t value (cluster) Token to use for authentication [$K3S_TOKEN] --token-file value (cluster) Token file to use for authentication [$K3S_TOKEN_FILE] --server value, -s value (cluster) Server to connect to [$K3S_URL] --data-dir value, -d value (agent/data) Folder to hold state (default: \"/var/lib/rancher/k3s\") --node-name value (agent/node) Node name [$K3S_NODE_NAME] --with-node-id (agent/node) Append id to node name --node-label value (agent/node) Registering and starting kubelet with set of labels --node-taint value (agent/node) Registering kubelet with set of taints --image-credential-provider-bin-dir value (agent/node) The path to the directory where credential provider plugin binaries are located (default: \"/var/lib/rancher/credentialprovider/bin\") --image-credential-provider-config value (agent/node) The path to the credential provider plugin config file (default: \"/var/lib/rancher/credentialprovider/config.yaml\") --selinux (agent/node) Enable SELinux in containerd [$K3S_SELINUX] --lb-server-port value (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT] --protect-kernel-defaults (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults. --container-runtime-endpoint value (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path --pause-image value (agent/runtime) Customized pause image for containerd or docker sandbox (default: \"rancher/mirrored-pause:3.6\") --snapshotter value (agent/runtime) Override default containerd snapshotter (default: \"overlayfs\") --private-registry value (agent/runtime) Private registry configuration file (default: \"/etc/rancher/k3s/registries.yaml\") --node-ip value, -i value (agent/networking) IPv4/IPv6 addresses to advertise for node --node-external-ip value (agent/networking) IPv4/IPv6 external IP addresses to advertise for node --resolv-conf value (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF] --flannel-iface value (agent/networking) Override default flannel interface --flannel-conf value (agent/networking) Override default flannel config file --flannel-cni-conf value (agent/networking) Override default flannel cni config file --kubelet-arg value (agent/flags) Customized flag for kubelet process --kube-proxy-arg value (agent/flags) Customized flag for kube-proxy process --rootless (experimental) Run rootless --prefer-bundled-bin (experimental) Prefer bundled userspace binaries over host binaries --docker (agent/runtime) (experimental) Use cri-dockerd instead of containerd","s":"K3s Agent CLI Help","u":"/kr/cli/agent","h":"#k3s-agent-cli-help","p":1639},{"i":1664,"t":"이 섹션에는 K3s를 실행하고 관리할 수 있는 다양한 방법과 K3s 사용을 위해 호스트 OS를 준비하는 데 필요한 단계를 설명하는 고급 정보가 포함되어 있습니다.","s":"고급 옵션 / 설정","u":"/kr/advanced","h":"","p":1663},{"i":1667,"t":"K3s는 첫 번째 서버 노드를 시작하는 동안 자체 서명된 CA(인증 기관) 인증서를 생성합니다. 이 CA 인증서는 10년 동안 유효하며 자동으로 갱신되지 않습니다. 사용자 지정 CA 인증서 사용 또는 자체 서명 CA 인증서 갱신에 대한 자세한 내용은 k3s 인증서 rotate-ca 명령 설명서를 참조하세요.","s":"인증 기관 인증서","u":"/kr/advanced","h":"#인증-기관-인증서","p":1663},{"i":1669,"t":"K3s 클라이언트 및 서버 인증서는 발급한 날로부터 365일 동안 유효합니다. 만료되었거나 만료 후 90일 이내에 만료된 인증서는 K3s를 시작할 때마다 자동으로 갱신됩니다. 클라이언트 및 서버 인증서를 수동으로 로테이션하는 것에 대한 정보는 k3s 인증서 로테이션 명령 설명서를 참조하세요.","s":"클라이언트 및 서버 인증서","u":"/kr/advanced","h":"#클라이언트-및-서버-인증서","p":1663},{"i":1671,"t":"기본적으로 K3s는 서버와 에이전트 모두에 단일 정적 토큰을 사용합니다. 이 토큰은 클러스터가 생성된 후에는 변경할 수 없습니다. 에이전트 조인에만 사용할 수 있는 두 번째 정적 토큰을 활성화하거나 자동으로 만료되는 임시 kubeadm 스타일 조인 토큰을 생성할 수 있습니다. 자세한 내용은 k3s token 명령어 설명서를 참고하세요.","s":"토큰 관리","u":"/kr/advanced","h":"#토큰-관리","p":1663},{"i":1673,"t":"HTTP 프록시를 통해서만 외부와 연결할 수 있는 환경에서 K3s를 실행하는 경우, K3s 시스템드 서비스에서 프록시 설정을 구성할 수 있습니다. 그러면 이 프록시 설정이 K3s에서 사용되어 내장 컨테이너와 kubelet에 전달됩니다. K3s 설치 스크립트는 자동으로 현재 셸에서 HTTP_PROXY, HTTPS_PROXY 및 NO_PROXY 변수와 CONTAINERD_HTTP_PROXY, CONTAINERD_HTTPS_PROXY 및 CONTAINERD_NO_PROXY 변수가 있는 경우 이를 systemd 서비스의 환경 파일에 작성합니다: /etc/systemd/system/k3s.service.env /etc/systemd/system/k3s-agent.service.env 물론 이 파일을 편집하여 프록시를 구성할 수도 있습니다. K3s는 클러스터 내부 파드 및 서비스 IP 범위와 클러스터 DNS 도메인을 자동으로 NO_PROXY 항목 목록에 추가합니다. 쿠버네티스 노드 자체에서 사용하는 IP 주소 범위(즉, 노드의 퍼블릭 및 프라이빗 IP)가 NO_PROXY 목록에 포함되어 있는지 또는 프록시를 통해 노드에 도달할 수 있는지 확인해야 합니다. HTTP_PROXY=http://your-proxy.example.com:8888 HTTPS_PROXY=http://your-proxy.example.com:8888 NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 K3s와 Kubelet에 영향을 주지 않고 컨테이너에 대한 프록시 설정을 구성하려면, 변수 앞에 CONTAINERD_를 붙이면 됩니다: CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888 CONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888 CONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16","s":"HTTP 프록시 구성하기","u":"/kr/advanced","h":"#http-프록시-구성하기","p":1663},{"i":1675,"t":"K3s는 업계 표준 컨테이너 런타임인 containerd를 포함하며 기본값으로 사용합니다. 쿠버네티스 1.24부터, kubelet은 더 이상 kubelet이 dockerd와 통신할 수 있도록 하는 컴포넌트인 dockershim을 포함하지 않습니다. K3s 1.24 이상에는 cri-dockerd가 포함되어 있어 이전 릴리즈의 K3s에서 원활하게 업그레이드하면서 Docker 컨테이너 런타임을 계속 사용할 수 있습니다. 컨테이너 대신 Docker를 사용하려면: K3s 노드에 Docker를 설치합니다. 랜처의 Docker 설치 스크립트 중 하나를 사용하여 Docker를 설치할 수 있습니다: curl https://releases.rancher.com/install-docker/20.10.sh | sh --docker 옵션을 사용하여 K3s를 설치합니다: curl -sfL https://get.k3s.io | sh -s - --docker 클러스터를 사용할 수 있는지 확인합니다: $ sudo k3s kubectl get pods --all-namespaces NAMESPACE NAME READY STATUS RESTARTS AGE kube-system local-path-provisioner-6d59f47c7-lncxn 1/1 Running 0 51s kube-system metrics-server-7566d596c8-9tnck 1/1 Running 0 51s kube-system helm-install-traefik-mbkn9 0/1 Completed 1 51s kube-system coredns-8655855d6-rtbnb 1/1 Running 0 51s kube-system svclb-traefik-jbmvl 2/2 Running 0 43s kube-system traefik-758cd5fc85-2wz97 1/1 Running 0 43s Docker 컨테이너가 실행 중인지 확인합니다: $ sudo docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 3e4d34729602 897ce3c5fc8f \"entry\" About a minute ago Up About a minute k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 bffdc9d7a65f rancher/klipper-lb \"entry\" About a minute ago Up About a minute k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 436b85c5e38d rancher/library-traefik \"/traefik --configfi…\" About a minute ago Up About a minute k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0 de8fded06188 rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 7c6a30aeeb2f rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0 ae6c58cab4a7 9d12f9848b99 \"local-path-provisio…\" About a minute ago Up About a minute k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0 be1450e1a11e 9dd718864ce6 \"/metrics-server\" About a minute ago Up About a minute k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0 4454d14e4d3f c4d3d16fe508 \"/coredns -conf /etc…\" About a minute ago Up About a minute k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0 c3675b87f96c rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0 4b1fddbe6ca6 rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0 64d3517d4a95 rancher/pause:3.1 \"/pause\"","s":"컨테이너 런타임으로 Docker 사용","u":"/kr/advanced","h":"#컨테이너-런타임으로-docker-사용","p":1663},{"i":1677,"t":"etcdctl은 etcd 서버와 상호 작용하기 위한 CLI를 제공합니다. K3s는 etcdctl을 번들로 제공하지 않습니다. etcdctl을 사용하여 K3s의 내장된 etcd와 상호 작용하려면 공식 문서를 참조하여 etcdctl을 설치하세요. ETCD_VERSION=\"v3.5.5\" ETCD_URL=\"https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz\" curl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin 그런 다음 인증에 K3s에서 관리하는 인증서 및 키를 사용하도록 etcdctl을 구성하여 사용할 수 있습니다: sudo etcdctl version \\ --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\ --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\ --key=/var/lib/rancher/k3s/server/tls/etcd/client.key","s":"etcdctl 사용하기","u":"/kr/advanced","h":"#etcdctl-사용하기","p":1663},{"i":1679,"t":"K3s는 /var/lib/rancher/k3s/agent/etc/containerd/config.toml에 컨테이너에 대한 config.toml을 생성합니다. 이 파일에 대한 고급 커스터마이징을 위해 같은 디렉터리에 config.toml.tmpl이라는 다른 파일을 생성하면 이 파일이 대신 사용된다. config.toml.tmpl은 Go 템플릿 파일로 취급되며, config.Node 구조가 템플릿으로 전달됩니다. 이 구조를 사용하여 구성 파일을 사용자 정의하는 방법에 대한 Linux 및 Windows 예제는 이 폴더를 참조하세요. config.Node Go 언어 구조체는 여기에 정의되어 있습니다.","s":"컨테이너 설정하기","u":"/kr/advanced","h":"#컨테이너-설정하기","p":1663},{"i":1681,"t":"K3s는 K3s 시작 시 NVIDIA 컨테이너 런타임이 있으면 자동으로 감지하여 설정합니다. 아래의 안내에 따라 노드에 엔비디아 컨테이너 패키지 리포지토리를 설치합니다: https://nvidia.github.io/libnvidia-container/ 엔비디아 컨테이너 런타임 패키지를 설치합니다. 예시: apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server K3s를 설치하거나 이미 설치되어 있는 경우 다시 시작합니다: curl -ksL get.k3s.io | sh - k3s가 엔비디아 컨테이너 런타임을 찾았는지 확인합니다: grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml 이렇게 하면 발견된 런타임 실행 파일에 따라 컨테이너 설정에 nvidia 및/또는 nvidia-experimental 런타임이 자동으로 추가됩니다. 여전히 클러스터에 런타임클래스 정의를 추가하고, 파드 스펙에서 runtimeClassName: nvidia를 설정하여 적절한 런타임을 명시적으로 요청하는 파드를 배포해야 합니다: apiVersion: node.k8s.io/v1 kind: RuntimeClass metadata: name: nvidia handler: nvidia --- apiVersion: v1 kind: Pod metadata: name: nbody-gpu-benchmark namespace: default spec: restartPolicy: OnFailure runtimeClassName: nvidia containers: - name: cuda-container image: nvcr.io/nvidia/k8s/cuda-sample:nbody args: [\"nbody\", \"-gpu\", \"-benchmark\"] resources: limits: nvidia.com/gpu: 1 env: - name: NVIDIA_VISIBLE_DEVICES value: all - name: NVIDIA_DRIVER_CAPABILITIES value: all 엔비디아 컨테이너 런타임은 엔비디아 디바이스 플러그인 및 GPU 기능 검색과 함께 자주 사용되며, 위에서 언급한 것처럼 파드 사양에 runtimeClassName: nvidia가 포함되도록 수정하여 별도로 설치해야 한다는 점에 유의하세요.","s":"NVIDIA 컨테이너 런타임 지원","u":"/kr/advanced","h":"#nvidia-컨테이너-런타임-지원","p":1663},{"i":1683,"t":"경고: 이 기능은 실험 단계입니다. disable-agent 플래그로 시작하면, 서버는 kubelet, 컨테이너 런타임 또는 CNI를 실행하지 않습니다. 클러스터에 노드 리소스를 등록하지 않으며, kubectl get nodes 출력에 나타나지 않습니다. 에이전트리스 서버는 kubelet을 호스트하지 않기 때문에, 파드를 실행하거나 내장된 etcd 컨트롤러 및 시스템 업그레이드 컨트롤러를 포함하여 클러스터 노드를 열거하는 데 의존하는 운영자가 관리할 수 없습니다. 에이전트리스 서버를 실행하는 것은 클러스터 운영자 지원 부족으로 인한 관리 오버헤드 증가를 감수하고서라도 에이전트와 워크로드에 의한 검색으로부터 컨트롤 플레인 노드를 숨기고자 하는 경우에 유리할 수 있습니다.","s":"에이전트 없는 서버 실행하기(실험적)","u":"/kr/advanced","h":"#에이전트-없는-서버-실행하기실험적","p":1663},{"i":1685,"t":"경고: 이 기능은 실험 단계입니다. 루트리스 모드는 잠재적인 컨테이너 브레이크아웃 공격으로부터 호스트의 실제 루트를 보호하기 위해 권한이 없는 사용자로 K3s 서버를 실행할 수 있습니다. 루트리스 쿠버네티스에 대한 자세한 내용은 https://rootlesscontaine.rs/ 을 참조하세요.","s":"루트리스 서버 실행(실험적)","u":"/kr/advanced","h":"#루트리스-서버-실행실험적","p":1663},{"i":1687,"t":"포트 루트리스 실행 시 새로운 네트워크 네임스페이스가 생성됩니다. 이는 K3s 인스턴스가 호스트와 네트워킹이 상당히 분리된 상태로 실행된다는 것을 의미합니다. 호스트에서 K3s에서 실행되는 서비스에 액세스하는 유일한 방법은 K3s 네트워크 네임스페이스에 포트 포워드를 설정하는 것입니다. 루트리스 K3s에는 6443 및 1024 미만의 서비스 포트를 10000 오프셋으로 호스트에 자동으로 바인딩하는 컨트롤러가 포함되어 있습니다. 예를 들어, 포트 80의 서비스는 호스트에서 10080이 되지만 8080은 오프셋 없이 8080이 됩니다. 현재 로드밸런서 서비스만 자동으로 바인딩됩니다. Cgroup Cgroup v1 및 하이브리드 v1/v2는 지원되지 않으며, 순수 Cgroup v2만 지원됩니다. 루트리스 실행 시 누락된 Cgroup으로 인해 K3s가 시작되지 않는 경우, 노드가 하이브리드 모드에 있고 \"누락된\" Cgroup이 여전히 v1 컨트롤러에 바인딩되어 있을 가능성이 높습니다. 멀티노드/멀티프로세스 클러스터 다중 노드 루트리스 클러스터 또는 동일한 노드에 있는 여러 개의 루트리스 k3s 프로세스는 현재 지원되지 않습니다. 자세한 내용은 #6488을 참조하세요.","s":"루트리스 모드의 알려진 이슈","u":"/kr/advanced","h":"#루트리스-모드의-알려진-이슈","p":1663},{"i":1689,"t":"https://rootlesscontaine.rs/getting-started/common/cgroup2/ 을 참조하여 cgroup v2 위임을 활성화합니다. 이 단계는 필수이며, 적절한 cgroups가 위임되지 않으면 루트리스 kubelet을 시작하지 못합니다. https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service](https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service)에서 k3s-rootless.service를 다운로드한다. k3s-rootless.service와 k3s의 버전이 같은 것을 사용해야 합니다. k3s-rootless.service를 ~/.config/systemd/user/k3s-rootless.service에 설치합니다. 이 파일을 시스템 전체 서비스(/etc/systemd/...)로 설치하는 것은 지원되지 않습니다. k3s 바이너리의 경로에 따라 파일의 ExecStart=/usr/local/bin/k3s ... 행을 수정해야 할 수 있습니다. systemctl --user daemon-reload를 실행합니다. systemctl --user enable --now k3s-rootless를 실행한다. KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A를 실행하고, 파드가 실행 중인지 확인한다. 참고: 터미널 세션은 cgroups v2 위임을 허용하지 않으므로 터미널에서 k3s server --rootless를 실행하지 않는다. 터미널에서 꼭 실행해야 하는 경우, systemd-run --user -p Delegate=yes --tty k3s server --roolless를 사용하여 systemd 범위로 래핑합니다.","s":"루트리스 서버 시작하기","u":"/kr/advanced","h":"#루트리스-서버-시작하기","p":1663},{"i":1691,"t":"루트리스 K3s는 호스트와 사용자 네트워크 네임스페이스 간 통신을 위해 rootlesskit 및 slirp4netns를 사용합니다. 루트리스킷과 slirp4net에서 사용하는 구성 중 일부는 환경 변수로 설정할 수 있습니다. 이를 설정하는 가장 좋은 방법은 k3s-rootless systemd 유닛의 Environment 필드에 추가하는 것입니다. Variable Default Description K3S_ROOTLESS_MTU 1500 slirp4netns 가상 인터페이스의 MTU를 설정합니다. K3S_ROOTLESS_CIDR 10.41.0.0/16 slirp4netns 가상 인터페이스에서 사용하는 CIDR을 설정합니다. K3S_ROOTLESS_ENABLE_IPV6 autotedected Enables slirp4netns IPv6 지원. 지정하지 않으면 K3가 듀얼 스택 작동을 위해 구성되면 자동으로 활성화됩니다. K3S_ROOTLESS_PORT_DRIVER builtin 루트리스 포트 드라이버를 선택합니다. builtin 또는 slirp4netns 중 하나를 선택합니다. 빌트인이 더 빠르지만 인바운드 패킷의 원래 소스 주소를 가장합니다. K3S_ROOTLESS_DISABLE_HOST_LOOPBACK true 게이트웨이 인터페이스를 통한 호스트의 루프백 주소에 대한 액세스를 사용할지 여부를 제어합니다. 보안상의 이유로 변경하지 않는 것이 좋습니다.","s":"고급 루트리스 구성","u":"/kr/advanced","h":"#고급-루트리스-구성","p":1663},{"i":1693,"t":"systemctl --user status k3s-rootless를 실행하여 데몬 상태를 확인합니다. journalctl --user -f -u k3s-rootless를 실행하여 데몬 로그를 확인합니다. https://rootlesscontaine.rs/ 참조","s":"루트리스 문제 해결하기","u":"/kr/advanced","h":"#루트리스-문제-해결하기","p":1663},{"i":1695,"t":"K3s 에이전트는 --node-label 및 --node-taint 옵션으로 구성할 수 있으며, 이 옵션은 kubelet에 레이블과 테인트를 추가합니다. 이 두 옵션은 [등록 시점에] 레이블 및/또는 테인트만 추가하므로(../cli/agent.md#node-labels-and-taints-for-agents), 노드가 클러스터에 처음 조인될 때만 설정할 수 있습니다. 현재 모든 버전의 쿠버네티스는 노드가 kubernetes.io 및 k8s.io 접두사가 포함된 대부분의 레이블, 특히 kubernetes.io/role 레이블에 등록하는 것을 제한합니다. 허용되지 않는 레이블을 가진 노드를 시작하려고 하면 K3s가 시작되지 않습니다. 쿠버네티스 작성자가 언급했듯이: 노드는 자체 역할 레이블을 어설트하는 것이 허용되지 않습니다. 노드 역할은 일반적으로 권한 또는 컨트롤 플레인 유형의 노드를 식별하는 데 사용되며, 노드가 해당 풀에 레이블을 지정하도록 허용하면 손상된 노드가 더 높은 권한 자격 증명에 대한 액세스 권한을 부여하는 워크로드(예: 컨트롤 플레인 데몬셋)를 사소하게 끌어들일 수 있습니다. 자세한 내용은 SIG-Auth KEP 279를 참조하세요. 노드 등록 후 노드 레이블과 틴트를 변경하거나 예약 레이블을 추가하려면 kubectl을 사용해야 합니다. taint 및 노드 레이블을 추가하는 방법에 대한 자세한 내용은 쿠버네티스 공식 문서를 참고하세요.","s":"노드 레이블 및 테인트","u":"/kr/advanced","h":"#노드-레이블-및-테인트","p":1663},{"i":1697,"t":"설치 스크립트는 설치 프로세스의 일부로 OS가 systemd 또는 openrc를 사용하는지 자동으로 감지하고 서비스를 활성화 및 시작합니다. openrc로 실행하면 /var/log/k3s.log에 로그가 생성됩니다. systemd로 실행하는 경우, /var/log/syslog에 로그가 생성되며 journalctl -u k3s(또는 에이전트에서는 journalctl -u k3s-agent)를 사용하여 로그를 확인할 수 있습니다. 설치 스크립트로 자동 시작 및 서비스 활성화를 비활성화하는 예제입니다: curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -","s":"설치 스크립트로 서비스 시작하기","u":"/kr/advanced","h":"#설치-스크립트로-서비스-시작하기","p":1663},{"i":1700,"t":"몇몇 유명 Linux 배포판에는 중복 규칙이 누적되어 노드의 성능과 안정성에 부정적인 영향을 주는 버그가 포함된 버전의 iptables가 포함되어 있습니다. 이 문제의 영향을 받는지 확인하는 방법에 대한 자세한 내용은 Issue #3117을 참조하세요. K3s에는 정상적으로 작동하는 iptables(v1.8.8) 버전이 포함되어 있습니다. --prefer-bundled-bin 옵션으로 K3s를 시작하거나 운영 체제에서 iptables/nftables 패키지를 제거하여 K3s가 번들 버전의 iptables를 사용하도록 설정할 수 있습니다. Version Gate prefer-bundled-bin 플래그는 2022-12 릴리스(v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1) 부터 사용할 수 있습니다.","s":"이전 iptables 버전","u":"/kr/advanced","h":"#이전-iptables-버전","p":1663},{"i":1702,"t":"firewalld를 끄는 것이 좋습니다: systemctl disable firewalld --now 방화벽을 사용하도록 설정하려면 기본적으로 다음 규칙이 필요합니다: firewall-cmd --permanent --add-port=6443/tcp #apiserver firewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods firewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services firewall-cmd --reload 설정에 따라 추가 포트를 열어야 할 수도 있습니다. 자세한 내용은 인바운드 규칙을 참조하세요. 파드 또는 서비스에 대한 기본 CIDR을 변경하는 경우, 그에 따라 방화벽 규칙을 업데이트해야 합니다. 활성화된 경우, nm-cloud-setup을 비활성화하고 노드를 재부팅해야 합니다: systemctl disable nm-cloud-setup.service nm-cloud-setup.timer reboot","s":"Red Hat Enterprise Linux / CentOS","u":"/kr/advanced","h":"#red-hat-enterprise-linux--centos","p":1663},{"i":1704,"t":"ufw(uncomplicated firewall)를 끄는 것이 좋습니다: ufw disable ufw를 사용하도록 설정하려면 기본적으로 다음 규칙이 필요합니다: ufw allow 6443/tcp #apiserver ufw allow from 10.42.0.0/16 to any #pods ufw allow from 10.43.0.0/16 to any #services 설정에 따라 추가 포트를 열어야 할 수도 있습니다. 자세한 내용은 인바운드 규칙을 참조한다. 파드 또는 서비스에 대한 기본 CIDR을 변경하는 경우, 그에 따라 방화벽 규칙을 업데이트해야 합니다.","s":"Ubuntu","u":"/kr/advanced","h":"#ubuntu","p":1663},{"i":1706,"t":"라즈베리파이 OS는 데비안 기반이며, 오래된 iptables 버전으로 인해 문제가 발생할 수 있습니다. 해결 방법을 참조하세요. 표준 라즈베리파이 OS 설치는 cgroups가 활성화된 상태에서 시작되지 않습니다. K3S는 systemd 서비스를 시작하기 위해 cgroups가 필요합니다. cgroups는 /boot/cmdline.txt에 cgroup_memory=1 cgroup_enable=memory를 추가하여 활성화할 수 있습니다. cmdline.txt 예시: console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory 우분투 21.10부터 라즈베리파이의 vxlan 지원은 별도의 커널 모듈로 옮겨졌습니다. sudo apt install linux-modules-extra-raspi","s":"Raspberry Pi","u":"/kr/advanced","h":"#raspberry-pi","p":1663},{"i":1708,"t":"Docker에서 K3s를 실행하는 방법에는 여러 가지가 있습니다: K3d Docker k3d는 도커에서 멀티노드 K3s 클러스터를 쉽게 실행할 수 있도록 설계된 유틸리티입니다. k3d를 사용하면 쿠버네티스의 로컬 개발 등을 위해 도커에서 단일 노드 및 다중 노드 k3s 클러스터를 매우 쉽게 생성할 수 있습니다. k3d 설치 및 사용 방법에 대한 자세한 내용은 설치 설명서를 참조하세요. Docker를 사용하려면 rancher/k3s 이미지를 사용하여 K3s 서버와 에이전트를 실행할 수도 있습니다. docker run 명령어를 사용합니다: sudo docker run \\ --privileged \\ --name k3s-server-1 \\ --hostname k3s-server-1 \\ -p 6443:6443 \\ -d rancher/k3s:v1.24.10-k3s1 \\ server 비고 태그에 유효한 K3s 버전을 지정해야 하며, latest 태그는 유지되지 않습니다. 도커 이미지는 태그에 + 기호를 허용하지 않으므로 태그에 -를 대신 사용하세요. K3s가 실행되고 나면, 관리자 kubeconfig를 Docker 컨테이너에서 복사하여 사용할 수 있습니다: sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config","s":"Docker에서 k3s 실행하기","u":"/kr/advanced","h":"#docker에서-k3s-실행하기","p":1663},{"i":1710,"t":"Version Gate v1.19.4+k3s1부터 사용 가능 기본적으로 SELinux가 활성화된 시스템(예로 CentOS)에 K3s를 설치하는 경우 적절한 SELinux 정책이 설치되어 있는지 확인해야 합니다. 자동 설치 수동 설치 에어 갭(폐쇄망) 설치를 수행하지 않는 경우 호환되는 시스템에서 설치 스크립트는 랜처 RPM 저장소에서 SELinux RPM을 자동으로 설치합니다. 자동 설치는 INSTALL_K3S_SKIP_SELINUX_RPM=true로 설정하여 건너뛸 수 있습니다. 필요한 policy는 다음 명령을 사용하여 설치할 수 있습니다: yum install -y container-selinux selinux-policy-base yum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm 설치 스크립트가 실패하지 않고 경고를 기록하도록 하려면 다음 환경 변수를 설정하면 됩니다: INSTALL_K3S_SELINUX_WARN=true.","s":"SELinux 지원","u":"/kr/advanced","h":"#selinux-지원","p":1663},{"i":1712,"t":"SELinux를 활용하려면 K3s 서버 및 에이전트를 시작할 때 --selinux 플래그를 지정하세요. 이 옵션은 K3s 구성 파일에서도 지정할 수 있습니다. selinux: true SELinux에서 사용자 지정 --data-dir을 사용하는 것은 지원되지 않습니다. 사용자 지정하려면 사용자 지정 정책을 직접 작성해야 할 가능성이 높습니다. 컨테이너 런타임에 대한 SELinux 정책 파일이 포함된 containers/container-selinux 리포지토리와 K3s를 위한 SELinux 정책이 포함된 k3s-io/k3s-selinux 리포지토리를 참고할 수 있습니다.","s":"SELinux 적용 활성화하기","u":"/kr/advanced","h":"#selinux-적용-활성화하기","p":1663},{"i":1715,"t":"이미지 풀링은 컨테이너 라이프사이클에서 시간이 많이 소요되는 단계 중 하나로 알려져 있습니다. Harter, et al.(https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter), 패키지 풀링은 컨테이너 시작 시간의 76%를 차지하지만, 그 중 읽기 데이터는 6.4%에 불과합니다. 이 문제를 해결하기 위해 k3s는 이미지 콘텐츠의 lazy pulling을 실험적으로 지원합니다. 이를 통해 k3s는 전체 이미지가 풀링되기 전에 컨테이너를 시작할 수 있습니다. 대신 필요한 콘텐츠 청크(예: 개별 파일)를 온디맨드 방식으로 가져옵니다. 특히 대용량 이미지의 경우 이 기술을 사용하면 컨테이너 시작 지연 시간을 단축할 수 있습니다. 지연 풀링을 사용하려면 대상 이미지의 포맷을 eStargz로 지정해야 합니다. 이 형식은 OCI 대체 형식이지만 지연 풀링을 위한 100% 호환되는 이미지 형식입니다. 호환성 때문에 eStargz는 표준 컨테이너 레지스트리(예: ghcr.io)로 푸시할 수 있을 뿐만 아니라 eStargz와 무관한 런타임에서도 실행 가능 합니다. eStargz는 Google CRFS 프로젝트에서 제안한 stargz 형식을 기반으로 개발되었지만 콘텐츠 검증 및 성능 최적화를 포함한 실용적인 기능을 제공합니다. 지연 풀링과 eStargz에 대한 자세한 내용은 Stargz Snapshotter 프로젝트 리포지토리를 참고하시기 바랍니다.","s":"지연 풀링과 eStargz란 무엇인가요?","u":"/kr/advanced","h":"#지연-풀링과-estargz란-무엇인가요","p":1663},{"i":1717,"t":"아래와 같이 k3s 서버와 에이전트에는 --snapshotter=stargz 옵션이 필요합니다. k3s server --snapshotter=stargz 이 구성을 사용하면, eStargz 형식의 이미지에 대해 지연 풀링을 수행할 수 있습니다. 다음 예제 파드 매니페스트는 eStargz 형식의 node:13.13.0 이미지(ghcr.io/stargz-containers/node:13.13.0-esgz)를 사용합니다. 스타즈 스냅샷터가 활성화되면 K3s는 이 이미지에 대해 지연 풀링을 수행합니다. apiVersion: v1 kind: Pod metadata: name: nodejs spec: containers: - name: nodejs-estargz image: ghcr.io/stargz-containers/node:13.13.0-esgz command: [\"node\"] args: - -e - var http = require('http'); http.createServer(function(req, res) { res.writeHead(200); res.end('Hello World!\\n'); }).listen(80); ports: - containerPort: 80","s":"지연 풀링이 가능하도록 k3s 구성하기","u":"/kr/advanced","h":"#지연-풀링이-가능하도록-k3s-구성하기","p":1663},{"i":1719,"t":"K3s용 랜처 로깅은 랜처를 사용하지 않고 설치할 수 있습니다. 이를 위해서는 다음 지침을 실행해야 합니다: helm repo add rancher-charts https://charts.rancher.io helm repo update helm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd helm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging","s":"추가 로깅 소스","u":"/kr/advanced","h":"#추가-로깅-소스","p":1663},{"i":1721,"t":"네트워크 정책에 의해 차단된 패킷을 로깅할 수 있습니다. 패킷은 차단 네트워크 정책을 포함한 패킷 세부 정보를 표시하는 iptables NFLOG 작업으로 전송됩니다. 트래픽이 많으면 로그 메시지 수가 매우 많아질 수 있습니다. 정책별로 로그 속도를 제어하려면, 해당 네트워크 정책에 다음 어노테이션을 추가하여 limit 및 limit-burst iptables 매개변수를 설정합니다: kube-router.io/netpol-nflog-limit=<LIMIT-VALUE> kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE> 기본값은 limit=10/minute와 limit-burst=10입니다. 이러한 필드의 형식과 사용 가능한 값에 대한 자세한 내용은 iptables manual을 참조하세요. NFLOG 패킷을 로그 항목으로 변환하려면 ulogd2를 설치하고 [log1]을 group=100에서 읽도록 구성합니다. 그런 다음 ulogd2 서비스를 다시 시작하여 새 구성이 커밋되도록 합니다. 네트워크 정책 규칙에 의해 패킷이 차단되면 /var/log/ulog/syslogemu.log에 로그 메시지가 나타납니다. NFLOG 넷링크 소켓으로 전송된 패킷은 tcpdump 또는 tshark와 같은 명령줄 도구를 사용하여 읽을 수도 있습니다: tcpdump -ni nflog:100 더 쉽게 사용할 수 있지만, tcpdump는 패킷을 차단한 네트워크 정책의 이름을 표시하지 않습니다. 대신 와이어샤크의 tshark 명령을 사용하여 정책 이름이 포함된 nflog.prefix 필드를 포함한 전체 NFLOG 패킷 헤더를 표시하세요.","s":"추가 네트워크 정책 로깅","u":"/kr/advanced","h":"#추가-네트워크-정책-로깅","p":1663},{"i":1723,"t":"K3s 바이너리에는 클러스터 관리에 도움이 되는 여러 가지 추가 도구가 포함되어 있습니다. Command Description k3s server 데이터스토어와 에이전트 컴포넌트 외에 쿠버네티스 apiserver, scheduler, controller-manager, 그리고 cloud-controller-manager 컴포넌트를 실행하는 K3s 서버 노드를 실행합니다. 자세한 내용은 k3s server 명령어 설명서를 참고하세요. k3s agent containerd, flannel, kube-router 네트워크 정책 컨트롤러와 쿠버네티스 kubelet 및 kube-proxy 구성 요소를 실행하는 K3s 에이전트 노드를 실행한다. 자세한 내용은 k3s agent 명령어 설명서를 참조하세요. k3s kubectl 임베드된 kubectl 명령을 실행합니다. 이것은 쿠버네티스 apiserver와 상호작용하기 위한 CLI입니다. KUBECONFIG 환경 변수가 설정되어 있지 않으면, 자동으로 /etc/rancher/k3s/k3s.yaml에서 kubeconfig를 사용하려고 시도합니다. k3s crictl 임베드된 crictl 명령을 실행합니다. 이것은 쿠버네티스의 컨테이너 런타임 인터페이스(CRI: Container Runtime Interface)와 상호 작용하기 위한 CLI입니다. 디버깅에 유용합니다. k3s ctr 내장된 ctr 명령을 실행합니다. 이는 K3s에서 사용하는 컨테이너 데몬인 containerd의 CLI입니다. 디버깅에 유용합니다. k3s token 부트스트랩 토큰을 관리합니다. 자세한 내용은 k3s token 명령어 설명서를 참조하세요. k3s etcd-snapshot K3s 클러스터 데이터의 온디맨드 백업을 수행하여 S3에 업로드합니다. 자세한 내용은 k3s etcd-snapshot 명령어 설명서를 참조하세요. k3s secrets-encrypt 클러스터에 시크릿을 저장할 때 암호화하도록 K3s를 구성합니다. 자세한 내용은 k3s secrets-encrypt 명령어 설명서를 참조하세요. k3s certificate K3s 인증서를 관리합니다. 자세한 내용은 k3s certificate 명령어 설명서를 참조하세요. k3s completion k3s용 셸 자동완성 스크립트를 생성합니다. k3s help 명령 목록 또는 한 명령어에 대한 도움말을 표시합니다.","s":"명령줄 도구","u":"/kr/cli","h":"","p":1722},{"i":1725,"t":"이 페이지에서는 고가용성 K3s 서버 클러스터의 아키텍처와 단일 노드 서버 클러스터와의 차이점에 대해 설명합니다. 또한 에이전트 노드가 K3s 서버에 등록되는 방법도 설명합니다. 서버 노드는 k3s server 명령을 실행하는 호스트로 정의되며, 컨트롤 플레인 및 데이터스토어 구성 요소는 K3s에서 관리합니다. 에이전트 노드는 데이터스토어 또는 컨트롤 플레인 구성 요소 없이 k3s agent 명령을 실행하는 호스트로 정의됩니다. 서버와 에이전트 모두 kubelet, 컨테이너 런타임 및 CNI를 실행합니다. 에이전트 없는 서버 실행에 대한 자세한 내용은 고급 옵션 설명서를 참조하세요.","s":"아키텍처","u":"/kr/architecture","h":"","p":1724},{"i":1727,"t":"다음 다이어그램은 임베디드 SQLite 데이터베이스가 있는 단일 노드 K3s 서버가 있는 클러스터의 예를 보여줍니다. 이 구성에서 각 에이전트 노드는 동일한 서버 노드에 등록됩니다. K3s 사용자는 서버 노드에서 K3s API를 호출하여 쿠버네티스 리소스를 조작할 수 있습니다.","s":"임베디드 DB가 있는 단일 서버 설정","u":"/kr/architecture","h":"#임베디드-db가-있는-단일-서버-설정","p":1724},{"i":1729,"t":"단일 서버 클러스터는 다양한 사용 사례를 충족할 수 있지만, Kubernetes 컨트롤 플레인의 가동 시간이 중요한 환경의 경우, HA 구성으로 K3s를 실행할 수 있습니다. HA K3s 클러스터는 다음과 같이 구성됩니다: 두 개 이상의 서버 노드가 Kubernetes API를 제공하고 다른 컨트롤 플레인 서비스를 실행합니다. 외부 데이터스토어(단일 서버 설정에 사용되는 임베디드 SQLite 데이터스토어와 반대)","s":"외부 DB가 있는 고가용성 K3s 서버","u":"/kr/architecture","h":"#외부-db가-있는-고가용성-k3s-서버","p":1724},{"i":1731,"t":"고가용성 서버 구성에서 각 노드는 아래 다이어그램과 같이 고정 등록 주소를 사용하여 Kubernetes API에 등록해야 합니다. 등록 후 에이전트 노드는 서버 노드 중 하나에 직접 연결을 설정합니다.","s":"에이전트 노드를 위한 고정 등록 주소","u":"/kr/architecture","h":"#에이전트-노드를-위한-고정-등록-주소","p":1724},{"i":1733,"t":"에이전트 노드는 k3s agent 프로세스에 의해 시작된 웹소켓 연결로 등록되며, 에이전트 프로세스의 일부로 실행되는 클라이언트 측 로드밸런서에 의해 연결이 유지됩니다. 이 로드 밸런서는 클러스터의 모든 서버에 대한 안정적인 연결을 유지하여 개별 서버의 중단을 허용하는 에이전시 서버에 대한 연결을 제공합니다. 에이전트는 노드 클러스터 시크릿과 노드에 대해 무작위로 생성된 비밀번호를 사용하여 서버에 등록하며, 이 비밀번호는 /etc/rancher/node/password에 저장됩니다. 서버는 개별 노드의 비밀번호를 쿠버네티스 시크릿으로 저장하며, 이후 모든 시도는 동일한 비밀번호를 사용해야 합니다. 노드 패스워드 시크릿은 <host>.node-password.k3s 템플릿을 사용하는 이름으로 kube-system 네임스페이스에 저장됩니다. 이는 노드 ID의 무결성을 보호하기 위해 수행됩니다. 에이전트의 /etc/rancher/node 디렉터리가 제거되거나 기존 이름을 사용하여 노드에 다시 가입하려는 경우, 클러스터에서 노드를 삭제해야 합니다. 이렇게 하면 이전 노드 항목과 노드 비밀번호 시크릿이 모두 정리되고 노드가 클러스터에 (재)조인할 수 있습니다. 비고 K3s v1.20.2 이전 서버는 /var/lib/rancher/k3s/server/cred/node-passwd에 디스크에 비밀번호를 저장합니다. 호스트 이름을 자주 재사용하지만 노드 암호 시크릿을 제거할 수 없는 경우, --with-node-id 플래그를 사용하여 K3s 서버 또는 에이전트를 시작하면 호스트 이름에 고유 노드 ID를 자동으로 추가할 수 있습니다. 활성화하면 노드 ID는 /etc/rancher/node/에도 저장됩니다.","s":"에이전트 노드 등록 작동 방식","u":"/kr/architecture","h":"#에이전트-노드-등록-작동-방식","p":1724},{"i":1736,"t":"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.","s":"Client and Server Certificates","u":"/kr/cli/certificate","h":"#client-and-server-certificates","p":1734},{"i":1738,"t":"To rotate client and server certificates manually, use the k3s certificate rotate subcommand: # Stop K3s systemctl stop k3s # Rotate certificates k3s certificate rotate # Start K3s systemctl start k3s Individual or lists of certificates can be rotated by specifying the certificate name: k3s certificate rotate --service <SERVICE>,<SERVICE> The following certificates can be rotated: admin, api-server, controller-manager, scheduler, k3s-controller, k3s-server, cloud-controller, etcd, auth-proxy, kubelet, kube-proxy.","s":"Rotating Client and Server Certificates","u":"/kr/cli/certificate","h":"#rotating-client-and-server-certificates","p":1734},{"i":1740,"t":"Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes PKI Certificates and Requirements documentation. By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed. The authoritative CA certificates and keys are stored within the datastore's bootstrap key, encrypted using the server token as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1. Copies of the CA certificates and keys are extracted to disk during K3s server startup. Any server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes Certificates API controllers may issue additional certificates at runtime. To rotate CA certificates and keys, use the k3s certificate rotate-ca command. The command performs integrity checks to confirm that the updated certificates and keys are usable. If the updated data is acceptable, the datastore's encrypted bootstrap key is updated, and the new certificates and keys will be used the next time K3s starts. If problems are encountered while validating the certificates and keys, an error is reported to the system log and the operation is cancelled without changes. Version Gate Support for the k3s certificate rotate-ca command and the ability to use CA certificates signed by an external CA is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).","s":"Certificate Authority (CA) Certificates","u":"/kr/cli/certificate","h":"#certificate-authority-ca-certificates","p":1734},{"i":1742,"t":"If CA certificates and keys are found the correct location during initial startup of the first server in the cluster, automatic generation of CA certificates will be bypassed. An example script to pre-create the appropriate certificates and keys is available in the K3s repo at contrib/util/generate-custom-ca-certs.sh. This script should be run prior to starting K3s for the first time, and will create a full set of leaf CA certificates signed by common Root and Intermediate CA certificates. If you have an existing Root or Intermediate CA, this script can be used (or used as a starting point) to create the correct CA certificates to provision a K3s cluster with PKI rooted in an existing authority. Custom Certificate Authority files must be placed in /var/lib/rancher/k3s/server/tls. The following files are required: server-ca.crt server-ca.key client-ca.crt client-ca.key request-header-ca.crt request-header-ca.key // note: etcd files are required even if embedded etcd is not in use. etcd/peer-ca.crt etcd/peer-ca.key etcd/server-ca.crt etcd/server-ca.key // note: This is the private key used to sign service-account tokens. It does not have a corresponding certificate. service.key Custom CA Topology​ Custom CA Certificates should observe the following topology: Using the Example Script​ 정보 If you want to sign the cluster CA certificates with an existing root CA using the example script, you must place the root and intermediate files in the target directory prior to running the script. If the files do not exist, the script will create new root and intermediate CA certificates. If you want to use only an existing root CA certificate, provide the following files: root.pem root.key If you want to use existing root and intermediate CA certificates, provide the following files: root.pem intermediate.pem intermediate.key To use the example script to generate custom certs and keys before starting K3s, run the following commands: # Create the target directory for cert generation. mkdir -p /var/lib/rancher/k3s/server/tls # Copy your root CA cert and intermediate CA cert+key into the correct location for the script. # For the purposes of this example, we assume you have existing root and intermediate CA files in /etc/ssl. # If you do not have an existing root and/or intermediate CA, the script will generate them for you. cp /etc/ssl/certs/root.pem /etc/ssl/certs/intermediate.pem /etc/ssl/private/intermediate.key /var/lib/rancher/k3s/server/tls # Generate custom CA certs and keys. curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash - If the command completes successfully, you may install and/or start K3s for the first time. If the script generated root and/or intermediate CA files, you should back up these files so that they can be reused if it is necessary to rotate the CA certificates at a later date.","s":"Using Custom CA Certificates","u":"/kr/cli/certificate","h":"#using-custom-ca-certificates","p":1734},{"i":1744,"t":"To rotate custom CA certificates, use the k3s certificate rotate-ca subcommand. Updated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates. 경고 You must not overwrite the currently in-use data in /var/lib/rancher/k3s/server/tls. Stage the updated certificates and keys into a separate directory. A cluster that has been started with custom CA certificates can renew or rotate the CA certificates and keys non-disruptively, as long as the same root CA is used. If a new root CA is required, the rotation will be disruptive. The k3s certificate rotate-ca --force option must be used, all nodes that were joined with a secure token (including servers) will need to be reconfigured to use the new token value, and pods will need to be restarted to trust the new root CA. Using the Example Script​ The example generate-custom-ca-certs.sh script linked above can also be used to generate updated certs in a new temporary directory, by copying files into the correct location and setting the DATA_DIR environment variable. To use the example script to generate updated certs and keys, run the following commands: # Create a temporary directory for cert generation. mkdir -p /opt/k3s/server/tls # Copy your root CA cert and intermediate CA cert+key into the correct location for the script. # Non-disruptive rotation requires the same root CA that was used to generate the original certificates. # If the original files are still in the data directory, you can just run: cp /var/lib/rancher/k3s/server/root.* /var/lib/rancher/k3s/server/intermediate.* /opt/k3s/server/tls # Copy the current service-account signing key, so that existing service-account tokens are not invalidated. cp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls # Generate updated custom CA certs and keys. curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash - # Load the updated CA certs and keys into the datastore. k3s certificate rotate-ca --path=/opt/k3s/server If the rotate-ca command returns an error, check the service log for errors. If the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents. If you used the --force option or changed the root CA, ensure that any nodes that were joined with a secure token are reconfigured to use the new token value, prior to being restarted. The token may be stored in a .env file, systemd unit, or config.yaml, depending on how the node was configured during initial installation.","s":"Rotating Custom CA Certificates","u":"/kr/cli/certificate","h":"#rotating-custom-ca-certificates","p":1734},{"i":1746,"t":"To rotate the K3s-generated self-signed CA certificates, use the k3s certificate rotate-ca subcommand. Updated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates. 경고 You must not overwrite the currently in-use data in /var/lib/rancher/k3s/server/tls. Stage the updated certificates and keys into a separate directory. If the cluster has been started with default self-signed CA certificates, rotation will be disruptive. All nodes that were joined with a secure token will need to be reconfigured to trust the new CA hash. If the new CA certificates are not cross-signed by the old CA certificates, you will need to use the --force option to bypass integrity checks, and pods will need to be restarted to trust the new root CA. Default CA Topology​ The default self-signed CA certificates have the following topology: When rotating the default self-signed CAs, a modified certificate topology with intermediate CAs and a new root CA cross-signed by the old CA can be used so that there is a continuous chain of trust between the old and new CAs: Using The Example Script​ An example script to create updated CA certificates and keys cross-signed by the existing CAs is available in the K3s repo at contrib/util/rotate-default-ca-certs.sh. To use the example script to generate updated self-signed certificates that are cross-signed by the existing CAs, run the following commands: # Create updated CA certs and keys, cross-signed by the current CAs. # This script will create a new temporary directory containing the updated certs, and output the new token values. curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash - # Load the updated certs into the datastore; see the script output for the updated token values. k3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca If the rotate-ca command returns an error, check the service log for errors. If the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents. Ensure that any nodes that were joined with a secure token, including other server nodes, are reconfigured to use the new token value prior to being restarted. The token may be stored in a .env file, systemd unit, or config.yaml, depending on how the node was configured during initial installation.","s":"Rotating Self-Signed CA Certificates","u":"/kr/cli/certificate","h":"#rotating-self-signed-ca-certificates","p":1734},{"i":1748,"t":"The service-account issuer key is an RSA private key used to sign service-account tokens. When rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated. It can be rotated independent of the cluster CAs by using the k3s certificate rotate-ca to install only an updated service.key file that includes both the new and old keys. 경고 You must not overwrite the currently in-use data in /var/lib/rancher/k3s/server/tls. Stage the updated key into a separate directory. For example, to rotate only the service-account issuer key, run the following commands: # Create a temporary directory for cert generation mkdir -p /opt/k3s/server/tls # Check OpenSSL version openssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional # Generate a new key openssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048 # Append the existing key to avoid invalidating current tokens cat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key # Load the updated key into the datastore k3s certificate rotate-ca --path=/opt/k3s/server It is normal to see warnings for files that are not being updated. If the rotate-ca command returns an error, check the service log for errors. If the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods.","s":"Service-Account Issuer Key Rotation","u":"/kr/cli/certificate","h":"#service-account-issuer-key-rotation","p":1734},{"i":1750,"t":"Version Gate Available as of v1.19.1+k3s1 In this section, you'll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup. Creating Snapshots​ Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the options. The snapshot directory defaults to ${data-dir}/server/db/snapshots. The data-dir value defaults to /var/lib/rancher/k3s and can be changed by setting the --data-dir flag. Restoring a Cluster from a Snapshot​ When K3s is restored from backup, the old data directory will be moved to ${data-dir}/server/db/etcd-old/. Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member. To restore the cluster from backup: Single Server High Availability Run K3s with the --cluster-reset option, with the --cluster-reset-restore-path also given: k3s server \\ --cluster-reset \\ --cluster-reset-restore-path=<PATH-TO-SNAPSHOT> Result: A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot. In this example there are 3 servers, S1, S2, and S3. The snapshot is located on S1. On S1, start K3s with the --cluster-reset option, with the --cluster-reset-restore-path also given: k3s server \\ --cluster-reset \\ --cluster-reset-restore-path=<PATH-TO-SNAPSHOT> Result: A message in the logs says that K3s can be restarted without the flags. On S2 and S3, stop K3s. Then delete the data directory, /var/lib/rancher/k3s/server/db/: systemctl stop k3s rm -rf /var/lib/rancher/k3s/server/db/ On S1, start K3s again: systemctl start k3s On S2 and S3, start K3s again to join the restored cluster: systemctl start k3s Options​ These options can be passed in with the command line, or in the configuration file, which may be easier to use. Options Description --etcd-disable-snapshots Disable automatic etcd snapshots --etcd-snapshot-schedule-cron value Snapshot interval time in cron spec. eg. every 5 hours 0 */5 * * *(default: 0 */12 * * *) --etcd-snapshot-retention value Number of snapshots to retain (default: 5) --etcd-snapshot-dir value Directory to save db snapshots. (Default location: ${data-dir}/db/snapshots) --cluster-reset Forget all peers and become sole member of a new cluster. This can also be set with the environment variable [$K3S_CLUSTER_RESET]. --cluster-reset-restore-path value Path to snapshot file to be restored S3 Compatible API Support​ K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots. The arguments below have been added to the server subcommand. These flags exist for the etcd-snapshot subcommand as well however the --etcd-s3 portion is removed to avoid redundancy. Options Description --etcd-s3 Enable backup to S3 --etcd-s3-endpoint S3 endpoint url --etcd-s3-endpoint-ca S3 custom CA cert to connect to S3 endpoint --etcd-s3-skip-ssl-verify Disables S3 SSL certificate validation --etcd-s3-access-key S3 access key --etcd-s3-secret-key S3 secret key --etcd-s3-bucket S3 bucket name --etcd-s3-region S3 region / bucket location (optional). defaults to us-east-1 --etcd-s3-folder S3 folder To perform an on-demand etcd snapshot and save it to S3: k3s etcd-snapshot \\ --s3 \\ --s3-bucket=<S3-BUCKET-NAME> \\ --s3-access-key=<S3-ACCESS-KEY> \\ --s3-secret-key=<S3-SECRET-KEY> To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn't running. Then run the following commands: k3s server \\ --cluster-init \\ --cluster-reset \\ --etcd-s3 \\ --cluster-reset-restore-path=<SNAPSHOT-NAME> \\ --etcd-s3-bucket=<S3-BUCKET-NAME> \\ --etcd-s3-access-key=<S3-ACCESS-KEY> \\ --etcd-s3-secret-key=<S3-SECRET-KEY> Etcd Snapshot and Restore Subcommands​ k3s supports a set of subcommands for working with your etcd snapshots. Subcommand Description delete Delete given snapshot(s) ls, list, l List snapshots prune Remove snapshots that exceed the configured retention count save Trigger an immediate etcd snapshot 비고 The save subcommand is the same as k3s etcd-snapshot. The latter will eventually be deprecated in favor of the former. These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store. For additional information on the etcd snapshot subcommands, run k3s etcd-snapshot. Delete a snapshot from S3. k3s etcd-snapshot delete \\ --s3 \\ --s3-bucket=<S3-BUCKET-NAME> \\ --s3-access-key=<S3-ACCESS-KEY> \\ --s3-secret-key=<S3-SECRET-KEY> \\ <SNAPSHOT-NAME> Prune local snapshots with the default retention policy (5). The prune subcommand takes an additional flag --snapshot-retention that allows for overriding the default retention policy. k3s etcd-snapshot prune k3s etcd-snapshot prune --snapshot-retention 10","s":"k3s etcd-snapshot","u":"/kr/cli/etcd-snapshot","h":"","p":1749},{"i":1752,"t":"K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption.","s":"k3s secrets-encrypt","u":"/kr/cli/secrets-encrypt","h":"","p":1751},{"i":1754,"t":"Version Gate Available as of v1.21.8+k3s1 K3s contains a CLI tool secrets-encrypt, which enables automatic control over the following: Disabling/Enabling secrets encryption Adding new encryption keys Rotating and deleting encryption keys Reencrypting secrets 경고 Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.","s":"Secrets Encryption Tool","u":"/kr/cli/secrets-encrypt","h":"#secrets-encryption-tool","p":1751},{"i":1756,"t":"Single-Server High-Availability To rotate secrets encryption keys on a single-server cluster: Start the K3s server with the flag --secrets-encryption 비고 Starting K3s without encryption and enabling it at a later time is currently not supported. Prepare k3s secrets-encrypt prepare Kill and restart the K3s server with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Rotate k3s secrets-encrypt rotate Kill and restart the K3s server with same arguments Reencrypt 정보 K3s will reencrypt ~5 secrets per second. Clusters with large # of secrets can take several minutes to reencrypt. k3s secrets-encrypt reencrypt The steps are the same for both embedded DB and external DB clusters. To rotate secrets encryption keys on HA setups: Notes Starting K3s without encryption and enabling it at a later time is currently not supported. While not required, it is recommended that you pick one server node from which to run the secrets-encrypt commands. Start up all three K3s servers with the --secrets-encryption flag. For brevity, the servers will be referred to as S1, S2, S3. Prepare on S1 k3s secrets-encrypt prepare Kill and restart S1 with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Once S1 is up, kill and restart the S2 and S3 Rotate on S1 k3s secrets-encrypt rotate Kill and restart S1 with same arguments Once S1 is up, kill and restart the S2 and S3 Reencrypt on S1 정보 K3s will reencrypt ~5 secrets per second. Clusters with large # of secrets can take several minutes to reencrypt. k3s secrets-encrypt reencrypt Kill and restart S1 with same arguments Once S1 is up, kill and restart the S2 and S3","s":"Encryption Key Rotation","u":"/kr/cli/secrets-encrypt","h":"#encryption-key-rotation","p":1751},{"i":1758,"t":"Single-Server High-Availability After launching a server with --secrets-encryption flag, secrets encryption can be disabled. To disable secrets encryption on a single-node cluster: Disable k3s secrets-encrypt disable Kill and restart the K3s server with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Reencrypt with flags k3s secrets-encrypt reencrypt --force --skip To re-enable secrets encryption on a single node cluster: Enable k3s secrets-encrypt enable Kill and restart the K3s server with same arguments Reencrypt with flags k3s secrets-encrypt reencrypt --force --skip After launching a HA cluster with --secrets-encryption flags, secrets encryption can be disabled. 비고 While not required, it is recommended that you pick one server node from which to run the secrets-encrypt commands. For brevity, the three servers used in this guide will be referred to as S1, S2, S3. To disable secrets encryption on a HA cluster: Disable on S1 k3s secrets-encrypt disable Kill and restart S1 with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Once S1 is up, kill and restart the S2 and S3 Reencrypt with flags on S1 k3s secrets-encrypt reencrypt --force --skip To re-enable secrets encryption on a HA cluster: Enable on S1 k3s secrets-encrypt enable Kill and restart S1 with same arguments Once S1 is up, kill and restart the S2 and S3 Reencrypt with flags on S1 k3s secrets-encrypt reencrypt --force --skip","s":"Secrets Encryption Disable/Enable","u":"/kr/cli/secrets-encrypt","h":"#secrets-encryption-disableenable","p":1751},{"i":1760,"t":"The secrets-encrypt tool includes a status command that displays information about the current status of secrets encryption on the node. An example of the command on a single-server node: $ k3s secrets-encrypt status Encryption Status: Enabled Current Rotation Stage: start Server Encryption Hashes: All hashes match Active Key Type Name ------ -------- ---- * AES-CBC aescbckey Another example on HA cluster, after rotating the keys, but before restarting the servers: $ k3s secrets-encrypt status Encryption Status: Enabled Current Rotation Stage: rotate Server Encryption Hashes: hash does not match between node-1 and node-2 Active Key Type Name ------ -------- ---- * AES-CBC aescbckey-2021-12-10T22:54:38Z AES-CBC aescbckey Details on each section are as follows: Encryption Status: Displayed whether secrets encryption is disabled or enabled on the node Current Rotation Stage: Indicates the current rotation stage on the node. Stages are: start, prepare, rotate, reencrypt_request, reencrypt_active, reencrypt_finished Server Encryption Hashes: Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration. Key Table: Summarizes information about the secrets encryption keys found on the node. Active: The \"*\" indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets. Key Type: All keys using this tool are AES-CBC type. See more info here. Name: Name of the encryption key.","s":"Secrets Encryption Status","u":"/kr/cli/secrets-encrypt","h":"#secrets-encryption-status","p":1751},{"i":1762,"t":"In this section, you'll learn how to configure the K3s server. Note that servers also run an agent, so all of the configuration options listed in the k3s agent documentation are also supported on servers. Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the Configuration File documentation for more information on using YAML configuration files.","s":"k3s server","u":"/kr/cli/server","h":"","p":1761},{"i":1764,"t":"The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore. --agent-token --cluster-cidr --cluster-dns --cluster-domain --disable-cloud-controller --disable-helm-controller --disable-network-policy --disable-servicelb --egress-selector-mode --flannel-backend --flannel-external-ip --flannel-ipv6-masq --secrets-encryption --service-cidr","s":"Critical Configuration Values","u":"/kr/cli/server","h":"#critical-configuration-values","p":1761},{"i":1767,"t":"Flag Environment Variable Description --datastore-endpoint value K3S_DATASTORE_ENDPOINT Specify etcd, Mysql, Postgres, or Sqlite (default) data source name --datastore-cafile value K3S_DATASTORE_CAFILE TLS Certificate Authority file used to secure datastore backend communication --datastore-certfile value K3S_DATASTORE_CERTFILE TLS certification file used to secure datastore backend communication --datastore-keyfile value K3S_DATASTORE_KEYFILE TLS key file used to secure datastore backend communication --etcd-expose-metrics N/A Expose etcd metrics to client interface (default: false) --etcd-disable-snapshots N/A Disable automatic etcd snapshots --etcd-snapshot-name value N/A Set the base name of etcd snapshots. Default: etcd-snapshot-<unix-timestamp> (default:\"etcd-snapshot\") --etcd-snapshot-schedule-cron value N/A Snapshot interval time in cron spec. eg. every 5 hours '0 /5 * ' (default: \"0 /12 * * *\") --etcd-snapshot-retention value N/A Number of snapshots to retain (default: 5) --etcd-snapshot-dir value N/A Directory to save db snapshots (default: ${data-dir}/db/snapshots) --etcd-s3 N/A Enable backup to S3 --etcd-s3-endpoint value N/A S3 endpoint url (default: \"s3.amazonaws.com\") --etcd-s3-endpoint-ca value N/A S3 custom CA cert to connect to S3 endpoint --etcd-s3-skip-ssl-verify N/A Disables S3 SSL certificate validation --etcd-s3-access-key value AWS_ACCESS_KEY_ID S3 access key --etcd-s3-secret-key value AWS_SECRET_ACCESS_KEY S3 secret key --etcd-s3-bucket value N/A S3 bucket name --etcd-s3-region value N/A S3 region / bucket location (optional) (default: \"us-east-1\") --etcd-s3-folder value N/A S3 folder --etcd-s3-insecure Disables S3 over HTTPS --etcd-s3-timeout value S3 timeout (default: 5m0s)","s":"Database","u":"/kr/cli/server","h":"#database","p":1761},{"i":1769,"t":"Flag Environment Variable Description --token value, -t value K3S_TOKEN Shared secret used to join a server or agent to a cluster --token-file value K3S_TOKEN_FILE File containing the cluster-secret/token --agent-token value K3S_AGENT_TOKEN Shared secret used to join agents to the cluster, but not servers --agent-token-file value K3S_AGENT_TOKEN_FILE File containing the agent secret --server value K3S_URL Server to connect to, used to join a cluster --cluster-init K3S_CLUSTER_INIT Initialize a new cluster using embedded Etcd --cluster-reset K3S_CLUSTER_RESET Forget all peers and become sole member of a new cluster","s":"Cluster Options","u":"/kr/cli/server","h":"#cluster-options","p":1761},{"i":1771,"t":"Flag Environment Variable Description --write-kubeconfig value, -o value K3S_KUBECONFIG_OUTPUT Write kubeconfig for admin client to this file --write-kubeconfig-mode value K3S_KUBECONFIG_MODE Write kubeconfig with this mode. The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.","s":"Admin Kubeconfig Options","u":"/kr/cli/server","h":"#admin-kubeconfig-options","p":1761},{"i":1774,"t":"Flag Default Description --debug N/A Turn on debug logs -v value 0 Number for the log level verbosity --vmodule value N/A Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value N/A Log to file --alsologtostderr N/A Log to standard error as well as file (if set)","s":"Logging","u":"/kr/cli/server","h":"#logging","p":1761},{"i":1776,"t":"Flag Default Description --bind-address value 0.0.0.0 k3s bind address --https-listen-port value 6443 HTTPS listen port --advertise-address value node-external-ip/node-ip IPv4 address that apiserver uses to advertise to members of the cluster --advertise-port value listen-port/0 Port that apiserver uses to advertise to members of the cluster --tls-san value N/A Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert","s":"Listeners","u":"/kr/cli/server","h":"#listeners","p":1761},{"i":1778,"t":"Flag Default Description --data-dir value, -d value /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root Folder to hold state","s":"Data","u":"/kr/cli/server","h":"#data","p":1761},{"i":1780,"t":"Flag Default Description --secrets-encryption false Enable Secret encryption at rest","s":"Secrets Encryption","u":"/kr/cli/server","h":"#secrets-encryption","p":1761},{"i":1782,"t":"Flag Default Description --cluster-cidr value \"10.42.0.0/16\" IPv4/IPv6 network CIDRs to use for pod IPs --service-cidr value \"10.43.0.0/16\" IPv4/IPv6 network CIDRs to use for service IPs --service-node-port-range value \"30000-32767\" Port range to reserve for services with NodePort visibility --cluster-dns value \"10.43.0.10\" IPv4 Cluster IP for coredns service. Should be in your service-cidr range --cluster-domain value \"cluster.local\" Cluster Domain --flannel-backend value \"vxlan\" One of 'none', 'vxlan', 'ipsec'(deprecated), 'host-gw', 'wireguard-native', or 'wireguard'(deprecated) --flannel-ipv6-masq \"N/A\" Enable IPv6 masquerading for pod --flannel-external-ip \"N/A\" Use node external IP addresses for Flannel traffic --servicelb-namespace value \"kube-system\" Namespace of the pods for the servicelb component --egress-selector-mode value \"agent\" Must be one of the following: disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs. agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s. pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node. cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.","s":"Networking","u":"/kr/cli/server","h":"#networking","p":1761},{"i":1784,"t":"Flag Description --default-local-storage-path value Default local storage path for local provisioner storage class","s":"Storage Class","u":"/kr/cli/server","h":"#storage-class","p":1761},{"i":1786,"t":"Flag Description --disable value See \"Using the --disable flag\" --disable-scheduler Disable Kubernetes default scheduler --disable-cloud-controller Disable k3s default cloud controller manager --disable-kube-proxy Disable running kube-proxy --disable-network-policy Disable k3s default network policy controller --disable-helm-controller Disable Helm controller","s":"Kubernetes Components","u":"/kr/cli/server","h":"#kubernetes-components","p":1761},{"i":1788,"t":"Flag Description --etcd-arg value Customized flag for etcd process --kube-apiserver-arg value Customized flag for kube-apiserver process --kube-scheduler-arg value Customized flag for kube-scheduler process --kube-controller-manager-arg value Customized flag for kube-controller-manager process --kube-cloud-controller-manager-arg value Customized flag for kube-cloud-controller-manager process --kubelet-arg value Customized flag for kubelet process --kube-proxy-arg value Customized flag for kube-proxy process","s":"Customized Flags for Kubernetes Processes","u":"/kr/cli/server","h":"#customized-flags-for-kubernetes-processes","p":1761},{"i":1790,"t":"Flag Description --rootless Run rootless --enable-pprof Enable pprof endpoint on supervisor port --docker Use cri-dockerd instead of containerd --prefer-bundled-bin Prefer bundled userspace binaries over host binaries --disable-agent See \"Running Agentless Servers (Experimental)\"","s":"Experimental Options","u":"/kr/cli/server","h":"#experimental-options","p":1761},{"i":1792,"t":"Flag Environment Variable Description --no-flannel N/A Use --flannel-backend=none --no-deploy value N/A Use --disable --cluster-secret value K3S_CLUSTER_SECRET Use --token --flannel-backend wireguard N/A Use --flannel-backend=wireguard-native --flannel-backend value=option1=value N/A Use --flannel-conf to specify the flannel config file with the backend config","s":"Deprecated Options","u":"/kr/cli/server","h":"#deprecated-options","p":1761},{"i":1794,"t":"If an option appears in brackets below, for example [$K3S_TOKEN], it means that the option can be passed in as an environment variable of that name. NAME: k3s server - Run management server USAGE: k3s server [OPTIONS] OPTIONS: --config FILE, -c FILE (config) Load configuration from FILE (default: \"/etc/rancher/k3s/config.yaml\") [$K3S_CONFIG_FILE] --debug (logging) Turn on debug logs [$K3S_DEBUG] -v value (logging) Number for the log level verbosity (default: 0) --vmodule value (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value (logging) Log to file --alsologtostderr (logging) Log to standard error as well as file (if set) --bind-address value (listener) k3s bind address (default: 0.0.0.0) --https-listen-port value (listener) HTTPS listen port (default: 6443) --advertise-address value (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip) --advertise-port value (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0) --tls-san value (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert --data-dir value, -d value (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root) --cluster-cidr value (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16) --service-cidr value (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16) --service-node-port-range value (networking) Port range to reserve for services with NodePort visibility (default: \"30000-32767\") --cluster-dns value (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10) --cluster-domain value (networking) Cluster Domain (default: \"cluster.local\") --flannel-backend value (networking) backend<=option1=val1,option2=val2> where backend is one of 'none', 'vxlan', 'ipsec' (deprecated), 'host-gw', 'wireguard-native', 'wireguard' (deprecated) (default: \"vxlan\") --flannel-ipv6-masq (networking) Enable IPv6 masquerading for pod --flannel-external-ip (networking) Use node external IP addresses for Flannel traffic --egress-selector-mode value (networking) One of 'agent', 'cluster', 'pod', 'disabled' (default: \"agent\") --servicelb-namespace value (networking) Namespace of the pods for the servicelb component (default: \"kube-system\") --write-kubeconfig value, -o value (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT] --write-kubeconfig-mode value (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE] --token value, -t value (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN] --token-file value (cluster) File containing the token [$K3S_TOKEN_FILE] --agent-token value (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN] --agent-token-file value (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE] --server value, -s value (cluster) Server to connect to, used to join a cluster [$K3S_URL] --cluster-init (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT] --cluster-reset (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET] --cluster-reset-restore-path value (db) Path to snapshot file to be restored --kube-apiserver-arg value (flags) Customized flag for kube-apiserver process --etcd-arg value (flags) Customized flag for etcd process --kube-controller-manager-arg value (flags) Customized flag for kube-controller-manager process --kube-scheduler-arg value (flags) Customized flag for kube-scheduler process --kube-cloud-controller-manager-arg value (flags) Customized flag for kube-cloud-controller-manager process --datastore-endpoint value (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT] --datastore-cafile value (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE] --datastore-certfile value (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE] --datastore-keyfile value (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE] --etcd-expose-metrics (db) Expose etcd metrics to client interface. (default: false) --etcd-disable-snapshots (db) Disable automatic etcd snapshots --etcd-snapshot-name value (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: \"etcd-snapshot\") --etcd-snapshot-schedule-cron value (db) Snapshot interval time in cron spec. eg. every 5 hours '* */5 * * *' (default: \"0 */12 * * *\") --etcd-snapshot-retention value (db) Number of snapshots to retain (default: 5) --etcd-snapshot-dir value (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots) --etcd-snapshot-compress (db) Compress etcd snapshot --etcd-s3 (db) Enable backup to S3 --etcd-s3-endpoint value (db) S3 endpoint url (default: \"s3.amazonaws.com\") --etcd-s3-endpoint-ca value (db) S3 custom CA cert to connect to S3 endpoint --etcd-s3-skip-ssl-verify (db) Disables S3 SSL certificate validation --etcd-s3-access-key value (db) S3 access key [$AWS_ACCESS_KEY_ID] --etcd-s3-secret-key value (db) S3 secret key [$AWS_SECRET_ACCESS_KEY] --etcd-s3-bucket value (db) S3 bucket name --etcd-s3-region value (db) S3 region / bucket location (optional) (default: \"us-east-1\") --etcd-s3-folder value (db) S3 folder --etcd-s3-insecure (db) Disables S3 over HTTPS --etcd-s3-timeout value (db) S3 timeout (default: 5m0s) --default-local-storage-path value (storage) Default local storage path for local provisioner storage class --disable value (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server) --disable-scheduler (components) Disable Kubernetes default scheduler --disable-cloud-controller (components) Disable k3s default cloud controller manager --disable-kube-proxy (components) Disable running kube-proxy --disable-network-policy (components) Disable k3s default network policy controller --disable-helm-controller (components) Disable Helm controller --node-name value (agent/node) Node name [$K3S_NODE_NAME] --with-node-id (agent/node) Append id to node name --node-label value (agent/node) Registering and starting kubelet with set of labels --node-taint value (agent/node) Registering kubelet with set of taints --image-credential-provider-bin-dir value (agent/node) The path to the directory where credential provider plugin binaries are located (default: \"/var/lib/rancher/credentialprovider/bin\") --image-credential-provider-config value (agent/node) The path to the credential provider plugin config file (default: \"/var/lib/rancher/credentialprovider/config.yaml\") --docker (agent/runtime) (experimental) Use cri-dockerd instead of containerd --container-runtime-endpoint value (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path --pause-image value (agent/runtime) Customized pause image for containerd or docker sandbox (default: \"rancher/mirrored-pause:3.6\") --snapshotter value (agent/runtime) Override default containerd snapshotter (default: \"overlayfs\") --private-registry value (agent/runtime) Private registry configuration file (default: \"/etc/rancher/k3s/registries.yaml\") --system-default-registry value (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY] --node-ip value, -i value (agent/networking) IPv4/IPv6 addresses to advertise for node --node-external-ip value (agent/networking) IPv4/IPv6 external IP addresses to advertise for node --resolv-conf value (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF] --flannel-iface value (agent/networking) Override default flannel interface --flannel-conf value (agent/networking) Override default flannel config file --flannel-cni-conf value (agent/networking) Override default flannel cni config file --kubelet-arg value (agent/flags) Customized flag for kubelet process --kube-proxy-arg value (agent/flags) Customized flag for kube-proxy process --protect-kernel-defaults (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults. --secrets-encryption Enable secret encryption at rest --enable-pprof (experimental) Enable pprof endpoint on supervisor port --rootless (experimental) Run rootless --prefer-bundled-bin (experimental) Prefer bundled userspace binaries over host binaries --selinux (agent/node) Enable SELinux in containerd [$K3S_SELINUX] --lb-server-port value (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]","s":"K3s Server CLI Help","u":"/kr/cli/server","h":"","p":1761},{"i":1796,"t":"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.","s":"k3s token","u":"/kr/cli/token","h":"","p":1795},{"i":1798,"t":"K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials.","s":"Token Format","u":"/kr/cli/token","h":"#token-format","p":1795},{"i":1800,"t":"The secure token format (occasionally referred to as a \"full\" token) contains the following parts: <prefix><cluster CA hash>::<credentials> prefix: a fixed K10 prefix that identifies the token format cluster CA hash: The hash of the cluster's server CA certificate, used to authenticate the server to the joining node. For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk. For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint. credentials: The username and password, or bearer token, used to authenticate the joining node to the cluster. TLS Bootstrapping​ When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials: With TLS verification disabled, download the CA bundle from /cacerts on the server it is joining. Calculate the SHA256 hash of the CA certificate, as described above. Compare the calculated SHA256 hash to the hash from the token. If the hash matches, validate that the certificate presented by the server can be validated by the server's CA bundle. If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.","s":"Secure","u":"/kr/cli/token","h":"#secure","p":1795},{"i":1802,"t":"The short token format includes only the password or bearer token used to authenticate the joining node to the cluster. If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to man-in-the-middle attack.","s":"Short","u":"/kr/cli/token","h":"#short","p":1795},{"i":1804,"t":"K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator. Type CLI Option Environment Variable Server --token K3S_TOKEN Agent --agent-token K3S_AGENT_TOKEN Bootstrap n/a n/a","s":"Token Types","u":"/kr/cli/token","h":"#token-types","p":1795},{"i":1806,"t":"If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to /var/lib/rancher/k3s/server/token, in secure format. The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully. The server token is also used as the PBKDF2 passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself. 경고 Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates. For more information on using custom CA certificates, see the k3s certificate documentation. For more information on backing up your cluster, see the Backup and Restore documentation.","s":"Server","u":"/kr/cli/token","h":"#server","p":1795},{"i":1808,"t":"By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire. The agent token is written to /var/lib/rancher/k3s/server/agent-token, in secure format. If no agent token is specified, this file is a link to the server token.","s":"Agent","u":"/kr/cli/token","h":"#agent","p":1795},{"i":1810,"t":"Version Gate Support for the k3s token command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1). K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents.","s":"Bootstrap","u":"/kr/cli/token","h":"#bootstrap","p":1795},{"i":1811,"t":"K3s bootstrap tokens use the same generation and validation code as kubeadm token bootstrap tokens, and the k3s token CLI is similar. NAME: k3s token - Manage bootstrap tokens USAGE: k3s token command [command options] [arguments...] COMMANDS: create Create bootstrap tokens on the server delete Delete bootstrap tokens on the server generate Generate and print a bootstrap token, but do not create it on the server list List bootstrap tokens on the server OPTIONS: --help, -h show help k3s token create [token]​ Create a new token. The [token] is the actual token to write, as generated by k3s token generate. If no token is given, a random one will be generated. A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] --description value A human friendly description of how this token is used --groups value Extra groups that this token will authenticate as when used for authentication. (default: Default: \"system:bootstrappers:k3s:default-node-token\") --ttl value The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default: 24h0m0s) --usages value Describes the ways in which this token can be used. (default: \"signing,authentication\") k3s token delete​ Delete one or more tokens. The full token can be provided, or just the token ID. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] k3s token generate​ Generate a randomly-generated bootstrap token. You don't have to use this command in order to generate a token. You can do so yourself as long as it is in the format \"[a-z0-9]{6}.[a-z0-9]{16}\", where the first portion is the token ID, and the second portion is the secret. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] k3s token list​ List bootstrap tokens, showing their ID, description, and remaining time-to-live. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] --output value Output format. Valid options: text, json (default: \"text\")","s":"k3s token","u":"/kr/cli/token","h":"#k3s-token-1","p":1795},{"i":1813,"t":"/etc/rancher/k3s/k3s.yaml에 저장된 kubeconfig 파일은 쿠버네티스 클러스터에 대한 액세스를 구성하는 데 사용됩니다. kubectl 또는 helm과 같은 업스트림 Kubernetes 명령줄 도구를 설치한 경우 올바른 kubeconfig 경로로 구성해야 합니다. 이 작업은 kubeconfig 환경 변수를 내보내거나 --kubeconfig 명령줄 플래그를 호출하여 수행할 수 있습니다. 자세한 내용은 아래 예시를 참고하세요. KUBECONFIG 환경 변수를 활용합니다: export KUBECONFIG=/etc/rancher/k3s/k3s.yaml kubectl get pods --all-namespaces helm ls --all-namespaces 또는 명령에 kubeconfig 파일의 위치를 지정합니다: kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces helm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces","s":"클러스터 접근","u":"/kr/cluster-access","h":"","p":1812},{"i":1815,"t":"/etc/rancher/k3s/k3s.yaml파일을 클러스터 외부에 위치한 머신의 ~/.kube/config로 복사합니다. 그런 다음 server 필드의 값을 K3s 서버의 IP 또는 이름으로 바꿉니다. 이제 kubectl이 K3s 클러스터를 관리할 수 있습니다.","s":"외부에서 kubectl로 클러스터에 접근하기","u":"/kr/cluster-access","h":"#외부에서-kubectl로-클러스터에-접근하기","p":1812},{"i":1817,"t":"The way K3s is backed up and restored depends on which type of datastore is used. 경고 In addition to backing up the datastore itself, you must also back up the server token file at /var/lib/rancher/k3s/server/token. You must restore this file, or pass its value into the --token option, when restoring from backup. If you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.","s":"Backup and Restore","u":"/kr/datastore/backup-restore","h":"","p":1816},{"i":1819,"t":"No special commands are required to back up or restore the SQLite datastore. To back up the SQLite datastore, take a copy of /var/lib/rancher/k3s/server/db/. To restore the SQLite datastore, restore the contents of /var/lib/rancher/k3s/server/db (and the token, as discussed above).","s":"Backup and Restore with SQLite","u":"/kr/datastore/backup-restore","h":"#backup-and-restore-with-sqlite","p":1816},{"i":1821,"t":"When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump. We recommend configuring the database to take recurring snapshots. For details on taking database snapshots and restoring your database from them, refer to the official database documentation: Official MySQL documentation Official PostgreSQL documentation Official etcd documentation","s":"Backup and Restore with External Datastore","u":"/kr/datastore/backup-restore","h":"#backup-and-restore-with-external-datastore","p":1816},{"i":1823,"t":"See the k3s etcd-snapshot command documentation for information on performing backup and restore operations on the embedded etcd datastore.","s":"Backup and Restore with Embedded etcd Datastore","u":"/kr/datastore/backup-restore","h":"#backup-and-restore-with-embedded-etcd-datastore","p":1816},{"i":1825,"t":"etcd가 아닌 다른 데이터스토어를 사용하여 쿠버네티스를 실행할 수 있는 기능은 K3s를 다른 쿠버네티스 배포판과 차별화합니다. 이 기능은 쿠버네티스 운영자에게 유연성을 제공합니다. 사용 가능한 데이터스토어 옵션을 통해 사용 사례에 가장 적합한 데이터스토어를 선택할 수 있습니다. 예를 들어: 팀에 etcd 운영에 대한 전문 지식이 없는 경우, MySQL 또는 PostgreSQL과 같은 엔터프라이즈급 SQL 데이터베이스를 선택할 수 있습니다. CI/CD 환경에서 단순하고 수명이 짧은 클러스터를 실행해야 하는 경우, 임베디드 SQLite 데이터베이스를 사용할 수 있습니다. 엣지에 Kubernetes를 배포하고 고가용성 솔루션이 필요하지만 엣지에서 데이터베이스를 관리하는 데 따른 운영 오버헤드를 감당할 수 없는 경우, 임베디드 etcd를 기반으로 구축된 K3s의 임베디드 HA 데이터스토어를 사용할 수 있습니다. K3s는 다음과 같은 데이터스토어 옵션을 지원합니다: 임베디드 SQLite SQLite는 여러 서버가 있는 클러스터에서는 사용할 수 없습니다. SQLite는 기본 데이터스토어이며, 다른 데이터스토어 구성이 없고 디스크에 임베디드 etcd 데이터베이스 파일이 없는 경우 사용됩니다. 임베디드 etcd 여러 서버에서 임베디드 etcd를 사용하는 방법에 대한 자세한 내용은 고가용성 임베디드 etcd 설명서를 참조하세요. K3s가 새 etcd 클러스터를 초기화하거나 기존 etcd 클러스터에 가입하도록 구성되었거나 시작 시 디스크에 etcd 데이터베이스 파일이 있는 경우 임베디드 etcd가 자동으로 선택됩니다. 외부 데이터베이스 여러 서버에서 외부 데이터스토어를 사용하는 방법에 대한 자세한 내용은 고가용성 외부 DB 설명서를 참조하세요. 지원되는 외부 데이터스토어는 다음과 같습니다: etcd (3.5.4 버전에 대해 검증됨) MySQL (5.7 and 8.0 버전에 대해 검증됨) MariaDB (10.6.8 버전에 대해 검증됨) PostgreSQL (10.7, 11.5, and 14.2 버전에 대해 검증됨)","s":"클러스터 데이터 저장소","u":"/kr/datastore","h":"","p":1824},{"i":1827,"t":"PostgreSQL, MySQL, etcd와 같은 외부 데이터스토어를 사용하려면 K3s가 연결 방법을 알 수 있도록 datastore-endpoint 파라미터를 설정해야 합니다. 또한 연결의 인증 및 암호화를 구성하는 파라미터를 지정할 수도 있습니다. 아래 표에는 이러한 매개변수가 요약되어 있으며, CLI 플래그 또는 환경 변수로 전달할 수 있습니다. CLI Flag Environment Variable Description --datastore-endpoint K3S_DATASTORE_ENDPOINT PostgreSQL, MySQL 또는 etcd 연결 문자열을 지정합니다. 데이터스토어에 대한 연결을 설명하는 데 사용되는 문자열입니다. 이 문자열의 구조는 각 백엔드에 따라 다르며 아래에 자세히 설명되어 있습니다. --datastore-cafile K3S_DATASTORE_CAFILE 데이터스토어와의 통신을 보호하는 데 사용되는 TLS 인증 기관(CA: Certificate Authority) 파일입니다. 데이터스토어에서 사용자 지정 인증 기관에서 서명한 인증서를 사용하여 TLS를 통해 요청을 제공하는 경우, 이 매개변수를 사용하여 해당 CA를 지정하면 K3s 클라이언트가 인증서를 올바르게 확인할 수 있습니다. --datastore-certfile K3S_DATASTORE_CERTFILE 데이터스토어에 대한 클라이언트 인증서 기반 인증에 사용되는 TLS 인증서 파일입니다. 이 기능을 사용하려면 데이터스토어가 클라이언트 인증서 기반 인증을 지원하도록 구성되어 있어야 합니다. 이 파라미터를 지정하는 경우 datastore-keyfile 파라미터도 지정해야 합니다. --datastore-keyfile K3S_DATASTORE_KEYFILE 데이터스토어에 대한 클라이언트 인증서 기반 인증에 사용되는 TLS 키 파일입니다. 자세한 내용은 이전 datastore-certfile 매개변수를 참조하세요. 데이터베이스 자격 증명이나 기타 민감한 정보가 프로세스 정보의 일부로 노출되지 않도록 이러한 매개 변수를 명령줄 인수가 아닌 환경 변수로 설정하는 것이 좋습니다.","s":"외부 데이터스토어 구성 파라미터","u":"/kr/datastore","h":"#외부-데이터스토어-구성-파라미터","p":1824},{"i":1829,"t":"앞서 언급했듯이, datastore-endpoint 매개변수에 전달되는 값의 형식은 데이터스토어 백엔드에 따라 달라집니다. 다음은 지원되는 각 외부 데이터스토어에 대한 이 형식과 기능에 대해 자세히 설명합니다. PostgreSQL MySQL / MariaDB etcd 가장 일반적인 형식의 PostgreSQL용 데이터 저장소 엔드포인트 매개 변수는 다음과 같은 형식을 갖습니다: postgres://username:password@hostname:port/database-name 더 고급 구성 매개변수를 사용할 수 있습니다. 이에 대한 자세한 내용은 https://godoc.org/github.com/lib/pq 을 참조하세요. 데이터베이스 이름을 지정했는데 해당 데이터베이스가 존재하지 않으면 서버에서 데이터베이스 생성을 시도합니다. 엔드포인트로 postgres://만 제공하는 경우, K3s는 다음을 시도합니다: 사용자 이름과 비밀번호로 postgres를 사용하여 localhost에 연결합니다. kubernetes라는 이름의 데이터베이스를 생성합니다. 가장 일반적인 형태인 MySQL과 MariaDB의 datastore-endpoint 파라미터는 다음과 같은 형식을 갖습니다: mysql://username:password@tcp(hostname:3306)/database-name 더 고급 구성 매개변수를 사용할 수도 있습니다. 이에 대한 자세한 내용은 https://github.com/go-sql-driver/mysql#dsn-data-source-name 을 참조하세요. K3s의 알려진 이슈로 인해 tls 파라미터를 설정할 수 없습니다. TLS 통신은 지원되지만 예를 들어 이 매개변수를 \"skip-verify\"로 설정하여 K3s가 인증서 확인을 건너뛰도록 할 수는 없습니다. 데이터베이스 이름을 지정했는데 데이터베이스가 존재하지 않으면 서버에서 만들려고 시도합니다. 엔드포인트로 mysql://만 제공하는 경우, K3s는 다음을 시도합니다: root 사용자와 비밀번호를 사용하지 않고 /var/run/mysqld/mysqld.sock에서 MySQL 소켓에 연결합니다. kubernetes라는 이름의 데이터베이스를 생성합니다. 가장 일반적인 형태인 etcd의 datastore-endpoint 파라미터의 형식은 다음과 같습니다: https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379 위는 일반적인 세 개의 노드인 etcd 클러스터를 가정합니다. 이 매개변수는 쉼표로 구분된 하나 이상의 etcd URL을 사용할 수 있습니다.","s":"데이터스토어 엔드포인트 형식 및 기능","u":"/kr/datastore","h":"#데이터스토어-엔드포인트-형식-및-기능","p":1824},{"i":1832,"t":"Note: Official support for installing Rancher on a Kubernetes cluster was introduced in our v1.0.0 release. This section describes how to install a high-availability K3s cluster with an external database. Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is comprised of: Two or more server nodes that will serve the Kubernetes API and run other control plane services Zero or more agent nodes that are designated to run your apps and services An external datastore (as opposed to the embedded SQLite datastore used in single-server setups) A fixed registration address that is placed in front of the server nodes to allow agent nodes to register with the cluster For more details on how these components work together, refer to the architecture section. Agents register through the fixed registration address, but after registration they establish a connection directly to one of the server nodes. This is a websocket connection initiated by the k3s agent process, it is maintained by a client-side load balancer running as part of the agent process.","s":"High Availability External DB","u":"/kr/datastore/ha","h":"","p":1831},{"i":1834,"t":"Setting up an HA cluster requires the following steps:","s":"Installation Outline","u":"/kr/datastore/ha","h":"#installation-outline","p":1831},{"i":1836,"t":"You will first need to create an external datastore for the cluster. See the Cluster Datastore Options documentation for more details.","s":"1. Create an External Datastore","u":"/kr/datastore/ha","h":"#1-create-an-external-datastore","p":1831},{"i":1838,"t":"K3s requires two or more server nodes for this HA configuration. See the Requirements guide for minimum machine requirements. When running the k3s server command on these nodes, you must set the datastore-endpoint parameter so that K3s knows how to connect to the external datastore. The token parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use. For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and set a token: curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" The datastore endpoint format differs based on the database type. For details, refer to the section on datastore endpoint formats. To configure TLS certificates when launching server nodes, refer to the datastore configuration guide. 비고 The same installation options available to single-server installs are also available for high-availability installs. For more details, see the Configuration Options documentation. By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The node-taint parameter will allow you to configure nodes with taints, for example --node-taint CriticalAddonsOnly=true:NoExecute. Once you've launched the k3s server process on all server nodes, ensure that the cluster has come up properly with k3s kubectl get nodes. You should see your server nodes in the Ready state.","s":"2. Launch Server Nodes","u":"/kr/datastore/ha","h":"#2-launch-server-nodes","p":1831},{"i":1840,"t":"Agent nodes need a URL to register against. This can be the IP or hostname of any of the server nodes, but in many cases those may change over time. For example, if you are running your cluster in a cloud that supports scaling groups, you may scale the server node group up and down over time, causing nodes to be created and destroyed and thus having different IPs from the initial set of server nodes. Therefore, you should have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as: A layer-4 (TCP) load balancer Round-robin DNS Virtual or elastic IP addresses This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your kubeconfig file to point to it instead of a specific node. To avoid certificate errors in such a configuration, you should install the server with the --tls-san YOUR_IP_OR_HOSTNAME_HERE option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname.","s":"3. Configure the Fixed Registration Address","u":"/kr/datastore/ha","h":"#3-configure-the-fixed-registration-address","p":1831},{"i":1842,"t":"The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used. If the first server node was started without the --token CLI flag or K3S_TOKEN variable, the token value can be retrieved from any server already joined to the cluster: cat /var/lib/rancher/k3s/server/token Additional server nodes can then be added using the token: curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" There are a few config flags that must be the same in all server nodes: Network related flags: --cluster-dns, --cluster-domain, --cluster-cidr, --service-cidr Flags controlling the deployment of certain components: --disable-helm-controller, --disable-kube-proxy, --disable-network-policy and any component passed to --disable Feature related flags: --secrets-encryption 비고 Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.","s":"4. Optional: Join Additional Server Nodes","u":"/kr/datastore/ha","h":"#4-optional-join-additional-server-nodes","p":1831},{"i":1844,"t":"Because K3s server nodes are schedulable by default, the minimum number of nodes for an HA K3s server cluster is two server nodes and zero agent nodes. To add nodes designated to run your apps and services, join agent nodes to your cluster. Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to and the token it should use. K3S_TOKEN=SECRET k3s agent --server https://fixed-registration-address:6443","s":"5. Optional: Join Agent Nodes","u":"/kr/datastore/ha","h":"#5-optional-join-agent-nodes","p":1831},{"i":1846,"t":"Version Gate Full support as of v1.19.5+k3s1 Experimental support as of v1.19.1+k3s1 Notice: Deprecated Dqlite Embedded etcd replaced experimental Dqlite in the K3s v1.19.1 release. This is a breaking change. Please note that upgrades from experimental Dqlite to embedded etcd are not supported. If you attempt an upgrade it will not succeed and data will be lost. 경고 Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards.","s":"High Availability Embedded etcd","u":"/kr/datastore/ha-embedded","h":"","p":1845},{"i":1848,"t":"To run K3s in this mode, you must have an odd number of server nodes. We recommend starting with three nodes. To get started, first launch a server node with the cluster-init flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster. curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --cluster-init After launching the first server, join the second and third servers to the cluster using the shared secret: curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443 Check to see that the second and third servers are now part of the cluster: $ kubectl get nodes NAME STATUS ROLES AGE VERSION server1 Ready control-plane,etcd,master 28m vX.Y.Z server2 Ready control-plane,etcd,master 13m vX.Y.Z Now you have a highly available control plane. Any successfully clustered servers can be used in the --server argument to join additional server and worker nodes. Joining additional worker nodes to the cluster follows the same procedure as a single server cluster. There are a few config flags that must be the same in all server nodes: Network related flags: --cluster-dns, --cluster-domain, --cluster-cidr, --service-cidr Flags controlling the deployment of certain components: --disable-helm-controller, --disable-kube-proxy, --disable-network-policy and any component passed to --disable Feature related flags: --secrets-encryption","s":"New cluster","u":"/kr/datastore/ha-embedded","h":"#new-cluster","p":1845},{"i":1850,"t":"If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the --cluster-init flag. Once you've done that, you'll be able to add additional instances as described above. If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (--cluster-init, --server, --datastore-endpoint, etc) are ignored. Important: K3s v1.22.2 and newer support migration from SQLite to etcd. Older versions will create a new empty datastore if you add --cluster-init to an existing server.","s":"Existing clusters","u":"/kr/datastore/ha-embedded","h":"#existing-clusters","p":1845},{"i":1852,"t":"자주 묻는 질문은 주기적으로 업데이트되며, 사용자가 K3s에 대해 가장 자주 묻는 질문에 대한 답변으로 구성되어 있습니다.","s":"자주 묻는 질문","u":"/kr/faq","h":"","p":1851},{"i":1854,"t":"K3s는 CNCF 인증을 받은 Kubernetes 배포판으로, 표준 Kubernetes 클러스터에 필요한 모든 작업을 수행할 수 있습니다. 단지 더 가벼운 버전일 뿐입니다. 자세한 내용은 main 문서 페이지를 참조하세요.","s":"K3s가 Kubernetes를 대체하기에 적합한가요?","u":"/kr/faq","h":"#k3s가-kubernetes를-대체하기에-적합한가요","p":1851},{"i":1856,"t":"--disable=traefik으로 K3s 서버를 시작하고 인그레스를 배포하기만 하면 됩니다.","s":"Traefik 대신 자체 Ingress를 사용하려면 어떻게 해야 하나요?","u":"/kr/faq","h":"#traefik-대신-자체-ingress를-사용하려면-어떻게-해야-하나요","p":1851},{"i":1858,"t":"현재 K3s는 기본적으로 Windows를 지원하지 않지만, 추후에 지원할 수 있습니다.","s":"K3s는 Windows를 지원하나요?","u":"/kr/faq","h":"#k3s는-windows를-지원하나요","p":1851},{"i":1860,"t":"K3s BUILDING.md에서 지침을 참조하시기 바랍니다.","s":"소스로부터 빌드하려면 어떻게 해야 하나요?","u":"/kr/faq","h":"#소스로부터-빌드하려면-어떻게-해야-하나요","p":1851},{"i":1862,"t":"K3s 로그의 위치는 K3s를 실행하는 방법과 노드의 OS에 따라 달라집니다. 명령줄에서 실행할 경우, 로그는 stdout과 stderr로 전송됩니다. openrc에서 실행하면 /var/log/k3s.log에 로그가 생성됩니다. Systemd에서 실행하는 경우, 로그는 저널널로 전송되며 journalctl -u k3s를 사용하여 볼 수 있습니다. 파드 로그는 /var/log/pods에서 확인할 수 있습니다. 컨테이너 로그는 /var/lib/rancher/k3s/agent/containerd/containerd.log에서 확인할 수 있습니다. K3s를 시작할 때 --debug 플래그(또는 환경설정 파일에서 debug: true)를 사용하면 더 자세한 로그를 생성할 수 있습니다. 쿠버네티스는 프로세스 내의 모든 컴포넌트에 대해 단일 로깅 구성을 사용하는 klog라는 로깅 프레임워크를 사용합니다. K3s는 단일 프로세스 내에서 모든 쿠버네티스 컴포넌트를 실행하기 때문에, 개별 쿠버네티스 컴포넌트에 대해 다른 로그 레벨이나 대상을 구성할 수 없습니다. -v=<level>또는--vmodule=<module>=<level> 컴포넌트 인수를 사용하면 원하는 효과를 얻지 못할 수 있습니다. 더 많은 로그 옵션은 추가 로깅 소스를 참조하세요.","s":"K3s 로그는 어디에 있나요?","u":"/kr/faq","h":"#k3s-로그는-어디에-있나요","p":1851},{"i":1864,"t":"예, Docker에서 K3s를 실행하는 방법은 여러 가지가 있습니다. 자세한 내용은 고급 옵션을 참조하세요.","s":"Docker에서 K3s를 실행할 수 있나요?","u":"/kr/faq","h":"#docker에서-k3s를-실행할-수-있나요","p":1851},{"i":1866,"t":"K3s 조인 토큰 관리에 대한 자세한 내용은 k3s token 명령어 설명서를 참조하세요.","s":"K3s 서버와 에이전트 토큰의 차이점은 무엇인가요?","u":"/kr/faq","h":"#k3s-서버와-에이전트-토큰의-차이점은-무엇인가요","p":1851},{"i":1868,"t":"일반적으로 쿠버네티스 버전 skew 정책이 적용됩니다. 즉, 서버가 에이전트보다 최신 버전일 수는 있지만 에이전트가 서버보다 최신 버전일 수는 없습니다.","s":"K3s의 다른 버전들은 얼마나 호환되나요?","u":"/kr/faq","h":"#k3s의-다른-버전들은-얼마나-호환되나요","p":1851},{"i":1870,"t":"K3s를 배포하는 데 문제가 있는 경우 다음과 같이 하세요: 알려진 문제 페이지를 확인하세요. 추가 OS 준비사항을 모두 해결했는지 확인합니다. k3s check-config를 실행하고 통과했는지 확인합니다. K3s 이슈 및 토론에서 문제와 일치하는 항목을 검색합니다. Rancher 슬랙 K3s 채널에 가입하여 도움을 받습니다. K3s 깃허브에 설정과 발생한 문제를 설명하는 새 이슈를 제출합니다.","s":"문제가 발생했는데 어디서 도움을 받을 수 있나요?","u":"/kr/faq","h":"#문제가-발생했는데-어디서-도움을-받을-수-있나요","p":1851},{"i":1872,"t":"이 섹션에는 다양한 환경에서 K3s를 설치하기 위한 지침이 포함되어 있습니다. K3s 설치를 시작하기 전에 요구 사항을 충족했는지 확인하십시오. 구성 옵션에서는 K3s를 설치할 때 사용할 수 있는 옵션에 대한 안내를 제공합니다. 네트워크 옵션에서는 K3s에서 사용할 수 있는 네트워크 옵션에 대한 안내를 제공합니다. 에어갭 설치에서는 인터넷에 직접 접속할 수 없는 환경에서 K3s를 설정하는 방법을 자세히 설명합니다. 서버 역할에서는 전용 control-plane 또는 etcd 서버로 K3s를 설정하는 방법을 자세히 설명합니다. 패키지 컴포넌트에서는 패키지 컴포넌트를 비활성화하거나 자동 배포 매니페스트를 사용하여 직접 설치하는 방법을 자세히 설명합니다.","s":"설치","u":"/kr/installation","h":"","p":1871},{"i":1874,"t":"헬름(Helm)은 쿠버네티스를 위한 패키지 관리 도구입니다. 헬름 차트는 쿠버네티스 YAML 매니페스트 문서를 위한 템플릿 구문을 제공합니다. 개발자 또는 클러스터 관리자는 헬름을 사용하여 정적 매니페스트만 사용하는 대신 차트라는 구성 가능한 템플릿을 만들 수 있다. 자신만의 차트 카탈로그 생성에 대한 자세한 내용은 https://helm.sh/docs/intro/quickstart/에서 문서를 확인하세요. K3s는 헬름을 지원하기 위한 별도의 구성이 필요하지 않습니다. 다만, 클러스터 액세스 문서에 따라 kubeconfig 경로를 올바르게 설정했는지 확인하면 됩니다. K3s에는 헬름 차트의 설치, 업그레이드/재구성 및 제거를 관리하는 Helm Controller가 포함되어 있으며, 헬름 차트 커스텀 리소스 정의(CRD)를 사용하여 헬름 차트를 설치, 업그레이드/재구성 및 제거할 수 있습니다. 애드온 매니페스트 자동 배포](/kr/installation/packaged-components)와 함께 사용하면 디스크에 단일 파일을 생성하여 클러스터에 헬름 차트를 설치하는 것을 자동화할 수 있습니다.","s":"헬름(Helm)","u":"/kr/helm","h":"","p":1873},{"i":1876,"t":"헬름 차트 커스텀 리소스는 일반적으로 helm 명령줄 도구에 전달할 대부분의 옵션을 담고 있습니다. 다음은 Bitnami 차트 저장소에서 아파치를 배포하여 기본 차트 값 중 일부를 재정의하는 방법에 대한 예제입니다. HelmChart 리소스 자체는 kube-system 네임스페이스에 있지만, 차트의 리소스는 동일한 매니페스트에 생성되는 web 네임스페이스에 배포된다는 점에 유의하세요. 이는 HelmChart 리소스를 배포하는 리소스와 분리하여 유지하려는 경우에 유용할 수 있습니다. apiVersion: v1 kind: Namespace metadata: name: web --- apiVersion: helm.cattle.io/v1 kind: HelmChart metadata: name: apache namespace: kube-system spec: repo: https://charts.bitnami.com/bitnami chart: apache targetNamespace: web valuesContent: |- service: type: ClusterIP ingress: enabled: true hostname: www.example.com metrics: enabled: true HelmChart 필드 정의​ 필드 기본값 설명 헬름 인수 / 플래그 상응값 metadata.name 헬름 차트 이름 NAME spec.chart 리포지토리에 있는 헬름 차트 이름 또는 차트 아카이브(.tgz)에 대한 전체 HTTPS URL CHART spec.targetNamespace default 헬름 차트 대상 네임스페이스 --namespace spec.version 헬름 차트 버전(리포지토리에서 설치하는 경우) --version spec.repo 헬름 차트 리포지토리 URL --repo spec.repoCA HTTPS 사용 서버의 인증서를 지정 --ca-file spec.helmVersion v3 사용할 헬름 버전 (v2 혹은 v3) spec.bootstrap False 클러스터(클라우드 컨트롤러 관리자 등)를 부트스트랩하는 데 이 차트가 필요한 경우 True로 설정합니다. spec.set 간단한 기본 차트 값을 재정의합니다. 값을 통해 설정된 옵션보다 우선합니다. --set / --set-string spec.jobImage 헬름 차트를 설치할 때 사용할 이미지를 지정합니다. 예시. rancher/klipper-helm:v0.3.0 . spec.timeout 300 헬름 작업 시간 초과(초) --timeout spec.failurePolicy reinstall abort로 설정하면 헬름 작업이 중단되고 운영자의 수동 개입이 있을 때까지 중단된다. spec.valuesContent YAML 파일 콘텐츠를 통해 복잡한 기본 차트 값 재정의 --values spec.chartContent Base64로 인코딩된 차트 아카이브 .tgz - spec.chart를 재정의합니다. CHART /var/lib/rancher/k3s/server/static/에 위치한 콘텐츠는 클러스터 내에서 쿠버네티스 APIServer를 통해 익명으로 액세스할 수 있습니다. 이 URL은 spec.chart 필드에 있는 특수 변수 %{KUBERNETES_API}%를 사용하여 템플릿화할 수 있습니다. 예를 들어, 패키지화된 Traefik 컴포넌트는 https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz에서 해당 차트를 로드합니다. 비고 name 필드는 헬름 차트 명명 규칙을 따라야 합니다. 자세한 내용은 헬름 베스트 프랙티스 문서를 참고하세요.","s":"헬름 컨트롤러 사용하기","u":"/kr/helm","h":"#헬름-컨트롤러-사용하기","p":1873},{"i":1878,"t":"Version Gate v1.19.1+k3s1 부터 사용 가능 HelmChart로 배포되는 패키지 컴포넌트(예로 Traefik)의 값을 재정의할 수 있도록, K3s는 HelmChartConfig 리소스를 통해 배포를 사용자 정의할 수 있도록 지원합니다. HelmChartConfig 리소스는 해당 HelmChart의 이름과 네임스페이스와 일치해야 하며, 추가 값 파일로 helm 명령에 전달되는 valuesContent를 추가로 제공할 수 있도록 지원합니다. 비고 HelmChart spec.set 값은 HelmChart 및 HelmChartConfig spec.valuesContent 설정을 재정의합니다. 예를 들어, 패키징된 트래픽 인그레스 구성을 사용자 정의하려면 /var/lib/rancher/k3s/server/manifests/traefik-config.yaml이라는 파일을 생성하고 다음 내용으로 채우면 됩니다: apiVersion: helm.cattle.io/v1 kind: HelmChartConfig metadata: name: traefik namespace: kube-system spec: valuesContent: |- image: name: traefik tag: v2.8.5 forwardedHeaders: enabled: true trustedIPs: - 10.0.0.0/8 ssl: enabled: true permanentRedirect: false","s":"HelmChartConfig로 패키지 컴포넌트 커스터마이징하기","u":"/kr/helm","h":"#helmchartconfig로-패키지-컴포넌트-커스터마이징하기","p":1873},{"i":1880,"t":"Version Gate v1.17.v1.17.0+k3s.1부터 헬름 v3가 기본적으로 지원 및 사용됩니다. K3s는 헬름 v2 또는 헬름 v3를 처리할 수 있습니다. 헬름 v3로 마이그레이션하려는 경우, 이 헬름 블로그 게시물에서 플러그인을 사용하여 성공적으로 마이그레이션하는 방법을 설명합니다. 자세한 내용은 헬름 3 공식 문서 여기를 참고하세요. 클러스터 접근에 대한 섹션에 따라 kubeconfig를 올바르게 설정했는지 확인하세요. 비고 헬름 3에서는 더 이상 Tiller와 helm init 명령이 필요하지 않습니다. 자세한 내용은 공식 문서를 참고하세요.","s":"헬름 버전 2에서 마이그레이션하기","u":"/kr/helm","h":"#헬름-버전-2에서-마이그레이션하기","p":1873},{"i":1882,"t":"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.","s":"Air-Gap Install","u":"/kr/installation/airgap","h":"","p":1881},{"i":1884,"t":"This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host. If you have not yet set up a private Docker registry, refer to the official documentation here.","s":"Private Registry Method","u":"/kr/installation/airgap","h":"#private-registry-method","p":1881},{"i":1886,"t":"Follow the Private Registry Configuration guide to create and configure the registry.yaml file. Once you have completed this, you may now go to the Install K3s section below.","s":"Create the Registry YAML","u":"/kr/installation/airgap","h":"#create-the-registry-yaml","p":1881},{"i":1888,"t":"We are assuming you have created your nodes in your air-gap environment. This method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical.","s":"Manually Deploy Images Method","u":"/kr/installation/airgap","h":"#manually-deploy-images-method","p":1881},{"i":1890,"t":"Obtain the images tar file for your architecture from the releases page for the version of K3s you will be running. Place the tar file in the images directory, for example: sudo mkdir -p /var/lib/rancher/k3s/agent/images/ sudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/ Once you have completed this, you may now go to the Install K3s section below.","s":"Prepare the Images Directory and K3s Binary","u":"/kr/installation/airgap","h":"#prepare-the-images-directory-and-k3s-binary","p":1881},{"i":1893,"t":"Before installing K3s, complete the Private Registry Method or the Manually Deploy Images Method above to prepopulate the images that K3s needs to install. Download the K3s binary from the releases page, matching the same version used to get the airgap images. Place the binary in /usr/local/bin on each air-gapped node and ensure it is executable. Download the K3s install script at get.k3s.io. Place the install script anywhere on each air-gapped node, and name it install.sh. K3s requires a default route in order to auto-detect the node's primary IP, and for kube-proxy ClusterIP routing to function properly. Therefore, a default route must be configured on each node, even if that route is a dummy route or a black hole. When running the K3s script with the INSTALL_K3S_SKIP_DOWNLOAD environment variable, K3s will use the local version of the script and binary.","s":"Prerequisites","u":"/kr/installation/airgap","h":"#prerequisites","p":1881},{"i":1895,"t":"You can install K3s on one or more servers as described below. Single Server Configuration High Availability Configuration To install K3s on a single server, simply do the following on the server node: INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh To add additional agents, do the following on each agent node: INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh 비고 The token from the server is typically found at /var/lib/rancher/k3s/server/token. Reference the High Availability with an External DB or High Availability with Embedded DB guides. You will be tweaking install commands so you specify INSTALL_K3S_SKIP_DOWNLOAD=true and run your install script locally instead of via curl. You will also utilize INSTALL_K3S_EXEC='args' to supply any arguments to k3s. For example, step two of the High Availability with an External DB guide mentions the following: curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" Instead, you would modify such examples like below: INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\ K3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\ ./install.sh 비고 K3s additionally provides a --resolv-conf flag for kubelets, which may help with configuring DNS in air-gap networks.","s":"Installing K3s in an Air-Gapped Environment","u":"/kr/installation/airgap","h":"#installing-k3s-in-an-air-gapped-environment","p":1881},{"i":1898,"t":"Upgrading an air-gap environment can be accomplished in the following manner: Download the new air-gap images (tar file) from the releases page for the version of K3s you will be upgrading to. Place the tar in the /var/lib/rancher/k3s/agent/images/ directory on each node. Delete the old tar file. Copy and replace the old K3s binary in /usr/local/bin on each node. Copy over the install script at https://get.k3s.io (as it is possible it has changed since the last release). Run the script again just as you had done in the past with the same environment variables. Restart the K3s service (if not restarted automatically by installer).","s":"Install Script Method","u":"/kr/installation/airgap","h":"#install-script-method","p":1881},{"i":1900,"t":"K3s supports automated upgrades. To enable this in air-gapped environments, you must ensure the required images are available in your private registry. You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the + in the K3s release with a - because Docker images do not support +. You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller here and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML: rancher/system-upgrade-controller:v0.4.0 rancher/kubectl:v0.17.0 Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the automated upgrades guide.","s":"Automated Upgrades Method","u":"/kr/installation/airgap","h":"#automated-upgrades-method","p":1881},{"i":1902,"t":"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage.","s":"Configuration Options","u":"/kr/installation/configuration","h":"","p":1901},{"i":1904,"t":"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems. You can use a combination of INSTALL_K3S_EXEC, K3S_ environment variables, and command flags to pass configuration to the service configuration. The prefixed environment variables, INSTALL_K3S_EXEC value, and trailing shell arguments are all persisted into the service configuration. After installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options. To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token: curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"server\" sh -s - --flannel-backend none --token 12345 curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"server --flannel-backend none\" K3S_TOKEN=12345 sh -s - curl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none # server is assumed below because there is no K3S_URL curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"--flannel-backend none --token 12345\" sh -s - curl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345 When registering an agent, the following commands all result in the same behavior: curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"agent --server https://k3s.example.com --token mypassword\" sh -s - curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"agent\" K3s_TOKEN=\"mypassword\" sh -s - --server https://k3s.example.com curl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword curl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL For details on all environment variables, see Environment Variables.","s":"Configuration with install script","u":"/kr/installation/configuration","h":"#configuration-with-install-script","p":1901},{"i":1906,"t":"As stated, the installation script is primarily concerned with configuring K3s to run as a service. If you choose to not use the script, you can run K3s simply by downloading the binary from our release page, placing it on your path, and executing it. This is not particularly useful for permanent installations, but may be useful when performing quick tests that do not merit managing K3s as a system service. curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_ENABLE=true sh - You can configure K3s in this manner through K3S_ environment variables: K3S_KUBECONFIG_MODE=\"644\" k3s server Or command flags: k3s server --write-kubeconfig-mode 644 The k3s agent can also be configured this way: k3s agent --server https://k3s.example.com --token mypassword For details on configuring the K3s server, see the k3s server documentation. For details on configuring the K3s agent, see the k3s agent documentation. You can also use the --help flag to see a list of all available options. Matching Flags It is important to match critical flags on your server nodes. For example, if you use the flag --disable servicelb or --cluster-cidr=10.200.0.0/16 on your master node, but don't set it on other server nodes, the nodes will fail to join. They will print errors such as: failed to validate server configuration: critical configuration value mismatch. See the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.","s":"Configuration with binary","u":"/kr/installation/configuration","h":"#configuration-with-binary","p":1901},{"i":1908,"t":"Version Gate Available as of v1.19.1+k3s1 In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file. By default, values present in a YAML file located at /etc/rancher/k3s/config.yaml will be used on install. An example of a basic server config file is below: write-kubeconfig-mode: \"0644\" tls-san: - \"foo.local\" node-label: - \"foo=bar\" - \"something=amazing\" cluster-init: true This is equivalent to the following CLI arguments: k3s server \\ --write-kubeconfig-mode \"0644\" \\ --tls-san \"foo.local\" \\ --node-label \"foo=bar\" \\ --node-label \"something=amazing\" \\ --cluster-init In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as true or false in the YAML file. It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as --node-label, the CLI arguments will overwrite all values in the list. Finally, the location of the config file can be changed either through the CLI argument --config FILE, -c FILE, or the environment variable $K3S_CONFIG_FILE.","s":"Configuration File","u":"/kr/installation/configuration","h":"#configuration-file","p":1901},{"i":1910,"t":"Version Gate Available as of v1.21.0+k3s1 Multiple configuration files are supported. By default, configuration files are read from /etc/rancher/k3s/config.yaml and /etc/rancher/k3s/config.yaml.d/*.yaml in alphabetical order. The last value for a given key will be used. A + can be appended to the key to append the value to the existing string or slice, instead of replacing it. An example of multiple config files is below: # config.yaml token: boop node-label: - foo=bar - bar=baz # config.yaml.d/test1.yaml write-kubeconfig-mode: 600 # config.yaml.d/test2.yaml write-kubeconfig-mode: 777 node-label: - other=what - foo=three This results in a final configuration of: write-kubeconfig-mode: 777 token: boop node-label: - other=what - foo=three","s":"Multiple Config Files","u":"/kr/installation/configuration","h":"#multiple-config-files","p":1901},{"i":1912,"t":"All of the above options can be combined into a single example. A config.yaml file is created at /etc/rancher/k3s/config.yaml: token: \"secret\" debug: true Then the installation script is run with a combination of environment variables and flags: curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=\"644\" INSTALL_K3S_EXEC=\"server\" sh -s - --flannel-backend none Or if you have already installed the K3s Binary: K3S_KUBECONFIG_MODE=\"644\" k3s server --flannel-backend none This results in a server with: A kubeconfig file with permissions 644 Flannel backend set to none The token set to secret Debug logging enabled","s":"Putting it all together","u":"/kr/installation/configuration","h":"#putting-it-all-together","p":1901},{"i":1914,"t":"This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s.","s":"Kubernetes Dashboard","u":"/kr/installation/kube-dashboard","h":"","p":1913},{"i":1916,"t":"GITHUB_URL=https://github.com/kubernetes/dashboard/releases VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||') sudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml","s":"Deploying the Kubernetes Dashboard","u":"/kr/installation/kube-dashboard","h":"#deploying-the-kubernetes-dashboard","p":1913},{"i":1918,"t":"Important: The admin-user created in this guide will have administrative privileges in the Dashboard. Create the following resource manifest files: dashboard.admin-user.yml apiVersion: v1 kind: ServiceAccount metadata: name: admin-user namespace: kubernetes-dashboard dashboard.admin-user-role.yml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: admin-user roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: admin-user namespace: kubernetes-dashboard Deploy the admin-user configuration: sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml","s":"Dashboard RBAC Configuration","u":"/kr/installation/kube-dashboard","h":"#dashboard-rbac-configuration","p":1913},{"i":1920,"t":"v1.24 and newer v1.23 and older sudo k3s kubectl -n kubernetes-dashboard create token admin-user sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'","s":"Obtain the Bearer Token","u":"/kr/installation/kube-dashboard","h":"#obtain-the-bearer-token","p":1913},{"i":1922,"t":"To access the Dashboard you must create a secure channel to your K3s cluster: sudo k3s kubectl proxy The Dashboard is now accessible at: http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/ Sign In with the admin-user Bearer Token Advanced: Remote Access to the Dashboard​ Please see the Dashboard documentation: Using Port Forwarding to Access Applications in a Cluster.","s":"Local Access to the Dashboard","u":"/kr/installation/kube-dashboard","h":"#local-access-to-the-dashboard","p":1913},{"i":1924,"t":"sudo k3s kubectl delete ns kubernetes-dashboard GITHUB_URL=https://github.com/kubernetes/dashboard/releases VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||') sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml","s":"Upgrading the Dashboard","u":"/kr/installation/kube-dashboard","h":"#upgrading-the-dashboard","p":1913},{"i":1926,"t":"sudo k3s kubectl delete ns kubernetes-dashboard sudo k3s kubectl delete clusterrolebinding kubernetes-dashboard sudo k3s kubectl delete clusterrole kubernetes-dashboard","s":"Deleting the Dashboard and admin-user configuration","u":"/kr/installation/kube-dashboard","h":"#deleting-the-dashboard-and-admin-user-configuration","p":1913},{"i":1929,"t":"On server nodes, any file found in /var/lib/rancher/k3s/server/manifests will automatically be deployed to Kubernetes in a manner similar to kubectl apply, both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster. Manifests are tracked as AddOn custom resources in the kube-system namespace. Any errors or warnings encountered when applying the manifest file may seen by using kubectl describe on the corresponding AddOn, or by using kubectl get event -n kube-system to view all events for that namespace, including those from the deploy controller.","s":"Auto-Deploying Manifests (AddOns)","u":"/kr/installation/packaged-components","h":"#auto-deploying-manifests-addons","p":1927},{"i":1931,"t":"K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: coredns, traefik, local-storage, and metrics-server. The embedded servicelb LoadBalancer controller does not have a manifest file, but can be disabled as if it were an AddOn for historical reasons. Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity.","s":"Packaged Components","u":"/kr/installation/packaged-components","h":"#packaged-components","p":1927},{"i":1933,"t":"You may place additional files in the manifests directory for deployment as an AddOn. Each file may contain multiple Kubernetes resources, delmited by the --- YAML document separator. For more information on organizing resources in manifests, see the Managing Resources section of the Kubernetes documentation. File Naming Requirements​ The AddOn name for each file in the manifest directory is derived from the file basename. Ensure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes object naming restrictions. Care should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled. Here is en example of an error that would be reported if the file name contains underscores: Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml: Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*') 위험 If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.","s":"User AddOns","u":"/kr/installation/packaged-components","h":"#user-addons","p":1927},{"i":1935,"t":"There are two ways to disable deployment of specific content from the manifests directory.","s":"Disabling Manifests","u":"/kr/installation/packaged-components","h":"#disabling-manifests","p":1927},{"i":1937,"t":"The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the manifests directory, can be disabled with the --disable flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the manifests directory. For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with --skip=traefik. Multiple items can be disabled by separating their names with commas, or by repeating the flag.","s":"Using the --disable flag","u":"/kr/installation/packaged-components","h":"#using-the---disable-flag","p":1927},{"i":1939,"t":"For any file under /var/lib/rancher/k3s/server/manifests, you can create a .skip file which will cause K3s to ignore the corresponding manifest. The contents of the .skip file do not matter, only its existence is checked. Note that creating a .skip file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist. For example, creating an empty traefik.yaml.skip file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying traefik.yaml: $ ls /var/lib/rancher/k3s/server/manifests ccm.yaml local-storage.yaml rolebindings.yaml traefik.yaml.skip coredns.yaml traefik.yaml $ kubectl get pods -A NAMESPACE NAME READY STATUS RESTARTS AGE kube-system local-path-provisioner-64ffb68fd-xx98j 1/1 Running 0 74s kube-system metrics-server-5489f84d5d-7zwkt 1/1 Running 0 74s kube-system coredns-85cb69466-vcq7j 1/1 Running 0 74s If Traefik had already been deployed prior to creating the traefik.skip file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded.","s":"Using .skip files","u":"/kr/installation/packaged-components","h":"#using-skip-files","p":1927},{"i":1941,"t":"For information about managing Helm charts via auto-deploying manifests, refer to the section about Helm.","s":"Helm AddOns","u":"/kr/installation/packaged-components","h":"#helm-addons","p":1927},{"i":1943,"t":"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6. Note: Please reference the Networking page for information about CoreDNS, Traefik, and the Service LB.","s":"Network Options","u":"/kr/installation/network-options","h":"","p":1942},{"i":1945,"t":"Flannel is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin. Flannel options can only be set on server nodes, and must be identical on all servers in the cluster. The default backend for Flannel is vxlan. To enable encryption, use the wireguard-native backend. Using vxlan on Rasperry Pi with recent versions of Ubuntu requires additional preparation. Using wireguard-native as the Flannel backend may require additional modules on some Linux distributions. Please see the WireGuard Install Guide for details. The WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system. You must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend. CLI Flag and Value Description --flannel-ipv6-masq Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than none. --flannel-external-ip Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node. --flannel-backend=vxlan Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi. --flannel-backend=host-gw Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster. --flannel-backend=wireguard-native Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules. --flannel-backend=ipsec Use strongSwan IPSec via the swanctl binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0) --flannel-backend=wireguard Use WireGuard via the wg binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0) --flannel-backend=none Disable Flannel entirely. Version Gate K3s no longer includes strongSwan swanctl and charon binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the ipsec backend.","s":"Flannel Options","u":"/kr/installation/network-options","h":"#flannel-options","p":1942},{"i":1947,"t":"The legacy wireguard backend requires installation of the wg tool on the host. This backend will be removed in K3s v1.26, in favor of wireguard-native backend, which directly interfaces with the kernel. The legacy ipsec backend requires installation of the swanctl and charon binaries on the host. This backend will be removed in K3s v1.27, in favor of the wireguard-native backend. We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps: Update the K3s config on all server nodes. If using config files, the /etc/rancher/k3s/config.yaml should include flannel-backend: wireguard-native instead of flannel-backend: wireguard or flannel-backend: ipsec. If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed. Reboot all nodes, starting with the servers.","s":"Migrating from wireguard or ipsec to wireguard-native","u":"/kr/installation/network-options","h":"#migrating-from-wireguard-or-ipsec-to-wireguard-native","p":1942},{"i":1949,"t":"Start K3s with --flannel-backend=none and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set --disable-network-policy as well to avoid conflicts. IP Forwarding should be enabled for Canal and Calico; please reference the steps below. Canal Calico Visit the Project Calico Docs website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the container_settings section, for example: \"container_settings\": { \"allow_ip_forwarding\": true } Apply the Canal YAML. Ensure the settings were applied by running the following command on the host: cat /etc/cni/net.d/10-canal.conflist You should see that IP forwarding is set to true. Follow the Calico CNI Plugins Guide. Modify the Calico YAML so that IP forwarding is allowed in the container_settings section, for example: \"container_settings\": { \"allow_ip_forwarding\": true } Apply the Calico YAML. Ensure the settings were applied by running the following command on the host: cat /etc/cni/net.d/10-calico.conflist You should see that IP forwarding is set to true.","s":"Custom CNI","u":"/kr/installation/network-options","h":"#custom-cni","p":1942},{"i":1951,"t":"K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components. This allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled. This functionality is equivalent to the Konnectivity service commonly used on other Kubernetes distributions, and is managed via the apiserver's egress selector configuration. The egress selector mode may be configured on servers via the --egress-selector-mode flag, and offers four modes: disabled: The apiserver does not use agent tunnels to communicate with kubelets or cluster endpoints. This mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform kubectl exec and kubectl logs. agent (default): The apiserver uses agent tunnels to communicate with kubelets. This is mode requires that servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints. pod: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes. NOTE: This will not work when using a CNI that uses its own IPAM and does not respect the node's PodCIDR allocation. cluster or agent should be used with these CNIs instead. cluster: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.","s":"Control-Plane Egress Selector configuration","u":"/kr/installation/network-options","h":"#control-plane-egress-selector-configuration","p":1942},{"i":1953,"t":"Version Gate Experimental support is available as of v1.21.0+k3s1. Stable support is available as of v1.23.7+k3s1. Known Issue Kubernetes v1.24 and v1.25 include an issue that ignores the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents: --kubelet-arg=\"node-ip=0.0.0.0\" # To proritize IPv4 traffic #OR --kubelet-arg=\"node-ip=::\" # To proritize IPv6 traffic Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only. To enable dual-stack in K3s, you must provide valid dual-stack cluster-cidr and service-cidr on all server nodes. This is an example of a valid configuration: --cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112 Note that you may configure any valid cluster-cidr and service-cidr values, but the above masks are recommended. If you change the cluster-cidr mask, you should also change the node-cidr-mask-size-ipv4 and node-cidr-mask-size-ipv6 values to match the planned pods per node and total node count. The largest supported service-cidr mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud. If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin's dual-stack documentation and verify if network policies can be enabled.","s":"Dual-stack (IPv4 + IPv6) Networking","u":"/kr/installation/network-options","h":"#dual-stack-ipv4--ipv6-networking","p":1942},{"i":1955,"t":"Version Gate Available as of v1.22.9+k3s1 Known Issue If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl net.ipv6.conf.all.accept_ra=2; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of man-in-the-middle attacks. Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the --cluster-cidr and --service-cidr flags. This is an example of a valid configuration: --cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112","s":"Single-stack IPv6 Networking","u":"/kr/installation/network-options","h":"#single-stack-ipv6-networking","p":1942},{"i":1957,"t":"A K3s cluster can still be deployed on nodes which use different private networks and are not directly connected (e.g. nodes in different public clouds). To achieve this, K3s sets a mesh of tunnels that become a VPN mesh. These nodes must have have an assigned IP through which they can be reached (e.g. a public IP). The server traffic will use a websocket tunnel and the data-plane traffic will use a wireguard tunnel. To enable this type of deployment, you must add the following parameters on servers: --node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip and on agents: --node-external-ip=<AGENT_EXTERNAL_IP> where SERVER_EXTERNAL_IP is the IP through which we can reach the server node and AGENT_EXTERNAL_IP is the IP through which we can reach the agent/worker node. Note that the K3S_URL config parameter in the agent/worker should use the SERVER_EXTERNAL_IP to be able to connect to it. Remember to check the Networking Requirements and allow access to the listed ports on both internal and external addresses. Both SERVER_EXTERNAL_IP and AGENT_EXTERNAL_IP must have connectivity between them and are normally public IPs. Dynamic IPs If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the --node-external-ip parameter to reflect the new IP. If running k3s as a service, you must modify /etc/systemd/system/k3s.service then run: systemctl daemon-reload systemctl restart k3s Warning The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high. Warning Embedded etcd will not use external IPs for communication. If using embedded etcd; all server nodes must be reachable to each other via their private IPs.","s":"Distributed hybrid or multicloud cluster","u":"/kr/installation/network-options","h":"#distributed-hybrid-or-multicloud-cluster","p":1942},{"i":1959,"t":"Containerd can be configured to connect to private registries and use them to pull private images on the node. Upon startup, K3s will check to see if a registries.yaml file exists at /etc/rancher/k3s/ and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry. Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the registries.yaml file on each server as well. Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the registries.yaml file and give different examples of using private registry configuration in K3s.","s":"Private Registry Configuration","u":"/kr/installation/private-registry","h":"","p":1958},{"i":1961,"t":"The file consists of two main sections: mirrors configs","s":"Registries Configuration File","u":"/kr/installation/private-registry","h":"#registries-configuration-file","p":1958},{"i":1963,"t":"Mirrors is a directive that defines the names and endpoints of the private registries, for example: mirrors: mycustomreg.com: endpoint: - \"https://mycustomreg.com:5000\" Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one. Redirects​ If a public registry is used as a mirror, such as when configuring a pull through cache, images pulls are transparently redirected. For example, if you have a mirror configured for docker.io: mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" Then pulling docker.io/rancher/coredns-coredns:1.6.3 will transparently pull the image from https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3. Rewrites​ Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one. For example, the following configuration would transparently pull the image docker.io/rancher/coredns-coredns:1.6.3 from registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3: mirrors: docker.io: endpoint: - \"https://registry.example.com:5000\" rewrite: \"^rancher/(.*)\": \"mirrorproject/rancher-images/$1\" The image will still be stored under the original name so that a crictl image ls will show docker.io/rancher/coredns-coredns:1.6.3 as available on the node, even though the image was pulled from the mirrored registry with a different name.","s":"Mirrors","u":"/kr/installation/private-registry","h":"#mirrors","p":1958},{"i":1965,"t":"The configs section defines the TLS and credential configuration for each mirror. For each mirror you can define auth and/or tls. The tls part consists of: Directive Description cert_file The client certificate path that will be used to authenticate with the registry key_file The client key path that will be used to authenticate with the registry ca_file Defines the CA certificate path to be used to verify the registry's server cert file insecure_skip_verify Boolean that defines if TLS verification should be skipped for the registry The auth part consists of either username/password or authentication token: Directive Description username user name of the private registry basic auth password user password of the private registry basic auth auth authentication token of the private registry basic auth Below are basic examples of using private registries in different modes:","s":"Configs","u":"/kr/installation/private-registry","h":"#configs","p":1958},{"i":1967,"t":"Below are examples showing how you may configure /etc/rancher/k3s/registries.yaml on each node when using TLS. With Authentication Without Authentication mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": auth: username: xxxxxx # this is the registry username password: xxxxxx # this is the registry password tls: cert_file: # path to the cert file used in the registry key_file: # path to the key file used in the registry ca_file: # path to the ca file used in the registry mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": tls: cert_file: # path to the cert file used in the registry key_file: # path to the key file used in the registry ca_file: # path to the ca file used in the registry","s":"With TLS","u":"/kr/installation/private-registry","h":"#with-tls","p":1958},{"i":1969,"t":"Below are examples showing how you may configure /etc/rancher/k3s/registries.yaml on each node when not using TLS. With Authentication Without Authentication mirrors: docker.io: endpoint: - \"http://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": auth: username: xxxxxx # this is the registry username password: xxxxxx # this is the registry password mirrors: docker.io: endpoint: - \"http://mycustomreg.com:5000\" In case of no TLS communication, you need to specify http:// for the endpoints, otherwise it will default to https. In order for the registry changes to take effect, you need to restart K3s on each node.","s":"Without TLS","u":"/kr/installation/private-registry","h":"#without-tls","p":1958},{"i":1971,"t":"First, obtain the k3s-images.txt file from GitHub for the release you are working with. Pull the K3s images listed on the k3s-images.txt file from docker.io Example: docker pull docker.io/rancher/coredns-coredns:1.6.3 Then, retag the images to the private registry. Example: docker tag coredns-coredns:1.6.3 mycustomreg:5000/coredns-coredns Last, push the images to the private registry. Example: docker push mycustomreg.com:5000/coredns-coredns","s":"Adding Images to the Private Registry","u":"/kr/installation/private-registry","h":"#adding-images-to-the-private-registry","p":1958},{"i":1973,"t":"K3s is very lightweight, but has some minimum requirements as outlined below. Whether you're configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself.","s":"Requirements","u":"/kr/installation/requirements","h":"","p":1972},{"i":1975,"t":"Two nodes cannot have the same hostname. If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the --with-node-id option to append a random suffix for each node, or devise a unique name to pass with --node-name or $K3S_NODE_NAME for each node you add to the cluster.","s":"Prerequisites","u":"/kr/installation/requirements","h":"#prerequisites","p":1972},{"i":1977,"t":"K3s is available for the following architectures: x86_64 armhf arm64/aarch64 s390x On aarch64/arm64 systems, the OS must use a 4k page size. RHEL9, Ubuntu, and SLES all meet this requirement.","s":"Architecture","u":"/kr/installation/requirements","h":"#architecture","p":1972},{"i":1979,"t":"K3s is expected to work on most modern Linux systems. Some OSs have specific requirements: If you are using (Red Hat/CentOS) Enterprise Linux, follow these steps for additional setup. If you are using Raspberry Pi OS, follow these steps to switch to legacy iptables. For more information on which OSs were tested with Rancher managed K3s clusters, refer to the Rancher support and maintenance terms.","s":"Operating Systems","u":"/kr/installation/requirements","h":"#operating-systems","p":1972},{"i":1981,"t":"Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here. Spec Minimum Recommended CPU 1 core 2 cores RAM 512 MB 1 GB Resource Profiling captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads. Disks​ K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC.","s":"Hardware","u":"/kr/installation/requirements","h":"#hardware","p":1972},{"i":1983,"t":"The K3s server needs port 6443 to be accessible by all nodes. The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s. If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250. If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380. Important The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472. 위험 Flannel relies on the Bridge CNI plugin to create a L2 network that switches traffic. Rogue pods with NET_RAW capabilities can abuse that L2 network to launch attacks such as ARP spoofing. Therefore, as documented in the Kubernetes docs, please set a restricted profile that disables NET_RAW on non-trustable pods.","s":"Networking","u":"/kr/installation/requirements","h":"#networking","p":1972},{"i":1985,"t":"Protocol Port Source Destination Description TCP 2379-2380 Servers Servers Required only for HA with embedded etcd TCP 6443 Agents Servers K3s supervisor and Kubernetes API Server UDP 8472 All nodes All nodes Required only for Flannel VXLAN TCP 10250 All nodes All nodes Kubelet metrics UDP 51820 All nodes All nodes Required only for Flannel Wireguard with IPv4 UDP 51821 All nodes All nodes Required only for Flannel Wireguard with IPv6 Typically, all outbound traffic is allowed. Additional changes to the firewall may be required depending on the OS used. See Additional OS Preparations.","s":"Inbound Rules for K3s Server Nodes","u":"/kr/installation/requirements","h":"#inbound-rules-for-k3s-server-nodes","p":1972},{"i":1987,"t":"Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production: MySQL PostgreSQL etcd","s":"Large Clusters","u":"/kr/installation/requirements","h":"#large-clusters","p":1972},{"i":1989,"t":"The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server: Deployment Size Nodes VCPUS RAM Small Up to 10 2 4 GB Medium Up to 100 4 8 GB Large Up to 250 8 16 GB X-Large Up to 500 16 32 GB XX-Large 500+ 32 64 GB","s":"CPU and Memory","u":"/kr/installation/requirements","h":"#cpu-and-memory","p":1972},{"i":1991,"t":"The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS.","s":"Disks","u":"/kr/installation/requirements","h":"#disks-1","p":1972},{"i":1993,"t":"You should consider increasing the subnet size for the cluster CIDR so that you don't run out of IPs for the pods. You can do that by passing the --cluster-cidr option to K3s server upon starting.","s":"Network","u":"/kr/installation/requirements","h":"#network","p":1972},{"i":1995,"t":"K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd, the following is a sizing guide for the database resources you need to run large clusters: Deployment Size Nodes VCPUS RAM Small Up to 10 1 2 GB Medium Up to 100 2 8 GB Large Up to 250 4 16 GB X-Large Up to 500 8 32 GB XX-Large 500+ 16 64 GB","s":"Database","u":"/kr/installation/requirements","h":"#database","p":1972},{"i":1997,"t":"Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes. 정보 This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.","s":"Managing Server Roles","u":"/kr/installation/server-roles","h":"","p":1996},{"i":1999,"t":"To create a server with only the etcd role, start K3s with all the control-plane components disabled: curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler This first node will start etcd, and wait for additional etcd and/or control-plane nodes to join. The cluster will not be usable until you join an additional server with the control-plane components enabled.","s":"Dedicated etcd Nodes","u":"/kr/installation/server-roles","h":"#dedicated-etcd-nodes","p":1996},{"i":2001,"t":"비고 A dedicated control-plane node cannot be the first server in the cluster; there must be an existing node with the etcd role before joining dedicated control-plane nodes. To create a server with only the control-plane role, start k3s with etcd disabled: curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443 After creating dedicated server nodes, the selected roles will be visible in kubectl get node: $ kubectl get nodes NAME STATUS ROLES AGE VERSION k3s-server-1 Ready etcd 5h39m v1.20.4+k3s1 k3s-server-2 Ready control-plane,master 5h39m v1.20.4+k3s1","s":"Dedicated control-plane Nodes","u":"/kr/installation/server-roles","h":"#dedicated-control-plane-nodes","p":1996},{"i":2003,"t":"Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the control-plane role to a dedicated etcd node, you can remove the --disable-apiserver --disable-controller-manager --disable-scheduler flags from the systemd unit or config file, and restart the service.","s":"Adding Roles To Existing Servers","u":"/kr/installation/server-roles","h":"#adding-roles-to-existing-servers","p":1996},{"i":2005,"t":"As with all other CLI flags, you can use the Configuration File to disable components, instead of passing the options as CLI flags. For example, to create a dedicated etcd node, you can place the following values in /etc/rancher/k3s/config.yaml: cluster-init: true disable-apiserver: true disable-controller-manager: true disable-scheduler: true","s":"Configuration File Syntax","u":"/kr/installation/server-roles","h":"#configuration-file-syntax","p":1996},{"i":2007,"t":"경고 Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools. It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes. If you installed K3s using the installation script, a script to uninstall K3s was generated during installation. If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the Node Registration documentation for more information.","s":"Uninstalling K3s","u":"/kr/installation/uninstall","h":"","p":2006},{"i":2009,"t":"To uninstall K3s from a server node, run: /usr/local/bin/k3s-uninstall.sh","s":"Uninstalling Servers","u":"/kr/installation/uninstall","h":"#uninstalling-servers","p":2006},{"i":2011,"t":"To uninstall K3s from an agent node, run: /usr/local/bin/k3s-agent-uninstall.sh","s":"Uninstalling Agents","u":"/kr/installation/uninstall","h":"#uninstalling-agents","p":2006},{"i":2013,"t":"알려진 이슈는 주기적으로 업데이트되며, 다음 릴리스에서 즉시 해결되지 않을 수 있는 문제에 대해 알려드리기 위해 고안되었습니다.","s":"알려진 이슈","u":"/kr/known-issues","h":"","p":2012},{"i":2015,"t":"스냅(Snap) 패키지를 통해 설치된 도커는 K3s를 실행하는 데 문제를 일으키는 것으로 알려져 있으므로 K3s와 함께 사용하려는 경우 권장하지 않습니다.","s":"스냅(Snap) 도커","u":"/kr/known-issues","h":"#스냅snap-도커","p":2012},{"i":2017,"t":"레거시 대신 nftables 모드에서 iptables를 실행하는 경우 문제가 발생할 수 있습니다. 문제를 방지하려면 최신 버전(예: 1.6.1+)의 iptables를 사용하는 것이 좋습니다. 또한 1.8.0-1.8.4 버전에는 K3s가 실패할 수 있는 알려진 문제가 있습니다. 해결 방법은 추가 OS 준비를 참조하세요.","s":"Iptables","u":"/kr/known-issues","h":"#iptables","p":2012},{"i":2019,"t":"루트리스 모드로 K3s를 실행하는 것은 실험 중이며 몇 가지 알려진 이슈가 있습니다.","s":"Rootless Mode","u":"/kr/known-issues","h":"#rootless-mode","p":2012},{"i":2021,"t":"쿠버네티스는 파드 보안 표준(PSS, Pod Security Standards)을 위해 v1.25에서 PodSecurityPolicy를 제거했습니다. PSS에 대한 자세한 내용은 업스트림 문서에서 확인할 수 있습니다. K3S의 경우, 노드에 'PodSecurityPolicy'가 구성된 경우 수행해야 하는 몇 가지 수동 단계가 있습니다. 모든 노드에서 kube-apiserver-arg 값을 업데이트하여 PodSecurityPolicy 어드미션 플러그인을 제거합니다. 대신 다음 arg 값을 추가합니다: 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml' 이지만, 아직 K3S를 재시작하거나 업그레이드하지 마십시오. 아래는 노드를 강화한 후 구성 파일의 예시입니다. protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - \"admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml\" - \"audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log\" - \"audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml\" - \"audit-log-maxage=30\" - \"audit-log-maxbackup=10\" - \"audit-log-maxsize=100\" - \"request-timeout=300s\" - \"service-account-lookup=true\" kube-controller-manager-arg: - \"terminated-pod-gc-threshold=10\" - \"use-service-account-credentials=true\" kubelet-arg: - \"streaming-connection-idle-timeout=5m\" - \"make-iptables-util-chains=true\" /var/lib/rancher/k3s/server/psa.yaml 파일을 다음 내용으로 작성합니다. 더 많은 네임스페이스를 제외할 수도 있습니다. 아래 예시는 kube-system(필수), cis-operator-system(선택적이지만 Rancher를 통해 보안 스캔을 실행할 때 유용), system-upgrade(자동 업그레이드를 수행하는 경우 필수)을 제외합니다. apiVersion: apiserver.config.k8s.io/v1 kind: AdmissionConfiguration plugins: - name: PodSecurity configuration: apiVersion: pod-security.admission.config.k8s.io/v1beta1 kind: PodSecurityConfiguration defaults: enforce: \"restricted\" enforce-version: \"latest\" audit: \"restricted\" audit-version: \"latest\" warn: \"restricted\" warn-version: \"latest\" exemptions: usernames: [] runtimeClasses: [] namespaces: [kube-system, cis-operator-system, system-upgrade] 일반적으로 업그레이드를 수행합니다. 자동 업그레이드를 수행하는 경우 system-upgrade-controller가 실행되는 네임스페이스가 파드 보안 수준에 따라 권한이 부여된 것으로 설정되었는지 확인합니다. apiVersion: v1 kind: Namespace metadata: name: system-upgrade labels: # This value must be privileged for the controller to run successfully. pod-security.kubernetes.io/enforce: privileged pod-security.kubernetes.io/enforce-version: v1.25 # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options. pod-security.kubernetes.io/audit: privileged pod-security.kubernetes.io/audit-version: v1.25 pod-security.kubernetes.io/warn: privileged pod-security.kubernetes.io/warn-version: v1.25 업그레이드가 완료된 후, 클러스터에서 남아있는 모든 PSP 리소스를 제거합니다. 대부분의 경우, /var/lib/rancher/k3s/server/manifests/ 내부에서 강화를 위해 사용된 사용자 정의 파일에는 PodSecurityPolicies 및 관련 RBAC 리소스가 있을 수 있습니다. 이러한 리소스를 제거하면 k3s가 자동으로 업데이트됩니다. 때때로 시간이 지난 후에 이러한 리소스가 클러스터에 남아있을 수 있으므로 수동으로 삭제해야 합니다. 이전에 강화 가이드를 따르면 다음과 같이 삭제할 수 있습니다: # Get the resources associated with PSPs $ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp # Delete those resources: $ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding","s":"강화된(Hardened) 클러스터를 v1.24.x에서 v1.25.x로 업그레이드하기","u":"/kr/known-issues","h":"","p":2012},{"i":2023,"t":"이 페이지는 CoreDNS, Traefik 인그레스 컨트롤러, Klipper 서비스 로드밸런서가 K3s 내에서 작동하는 방식을 설명합니다. Flannel 구성 옵션 및 백엔드 선택에 대한 자세한 내용이나 자체 CNI 설정 방법은 설치 네트워크 옵션 페이지를 참조하세요. K3s를 위해 어떤 포트를 열어야 하는지에 대한 정보는 네트워킹 요구 사항을 참조하세요.","s":"네트워킹","u":"/kr/networking","h":"","p":2022},{"i":2025,"t":"CoreDNS는 서버 시작 시 자동으로 배포됩니다. 사용하지 않으려면 클러스터의 모든 서버에 --disable=coredns 옵션을 사용하여 구성합니다. CoreDNS를 설치하지 않은 경우 클러스터 DNS 공급자를 직접 설치해야 합니다.","s":"CoreDNS","u":"/kr/networking","h":"#coredns","p":2022},{"i":2027,"t":"Traefik은 마이크로서비스를 쉽게 배포할 수 있도록 만들어진 최신 HTTP 역방향 프록시 및 로드밸런서입니다. 애플리케이션을 설계, 배포 및 실행하는 동안 네트워킹 복잡성을 단순화합니다. Traefik 인그레스 컨트롤러는 포트 80과 443을 사용하는 로드밸런서 서비스를 배포합니다. 기본적으로 ServiceLB는 모든 클러스터 멤버에 이러한 포트를 노출하므로 다른 HostPort 또는 NodePort 파드에서는 이러한 포트를 사용할 수 없습니다. 서버를 시작할 때 기본적으로 Traefik이 배포됩니다. 자세한 내용은 패키지 컴포넌트 관리를 참고하세요. 기본 설정 파일은 /var/lib/rancher/k3s/server/manifests/traefik.yaml에 있습니다. K3s가 시작할 때 이 파일을 기본값으로 대체하므로 traefik.yaml 파일을 수동으로 편집해서는 안 됩니다. 대신, /var/lib/rancher/k3s/server/manifests에 HelmChartConfig 매니페스트를 추가로 생성하여 Traefik을 사용자 정의해야 합니다. 자세한 내용과 예제는 HelmChartConfig 패키지 컴포넌트 커스터마이징을 참고하세요. 사용 가능한 구성 값에 대한 자세한 내용은 공식 Traefik 헬름 구성 매개변수를 참고하세요. 클러스터에서 Traefik을 제거하려면 --disable=traefik 플래그를 사용하여 모든 서버를 시작합니다. K3s 버전 1.20 이하에는 Traefik v1이 포함됩니다. K3s 버전 1.21 이상은 기존에 설치된 Traefik v1이 발견되지 않는 한 Traefik v2를 설치하며, 이 경우 Traefik은 v2로 업그레이드되지 않습니다. K3s에 포함된 특정 Traefik 버전에 대한 자세한 내용은 해당 버전의 릴리스 노트를 참조하세요. 이전 Traefik v1 인스턴스에서 마이그레이션하려면 Traefik 문서 및 마이그레이션 도구를 참조하세요.","s":"Traefik 인그레스 컨트롤러","u":"/kr/networking","h":"#traefik-인그레스-컨트롤러","p":2022},{"i":2029,"t":"K3s에는 임베디드 네트워크 정책 컨트롤러가 포함되어 있습니다. 기본 구현은 kube-router의 netpol 컨트롤러 라이브러리이며(다른 kube-router 기능은 없음), 여기에서 확인할 수 있습니다. 비활성화하려면, 각 서버를 --disable-network-policy 플래그로 시작합니다.","s":"네트워크 정책 컨트롤러 (Network Policy Controller)","u":"/kr/networking","h":"#네트워크-정책-컨트롤러-network-policy-controller","p":2022},{"i":2031,"t":"K3s 클러스터에는 모든 LoadBalancer 컨트롤러를 배포할 수 있습니다. 기본적으로 K3s는 사용 가능한 호스트 포트를 사용하는 ServiceLB(이전의 Klipper LoadBalancer)로 알려진 로드밸런서를 제공합니다. 업스트림 쿠버네티스는 로드밸런서 유형의 서비스를 생성할 수 있지만 기본 로드밸런서 구현은 포함되어 있지 않으므로 이러한 서비스는 로드밸런서가 설치될 때까지 pending으로 유지됩니다. 많은 호스팅 서비스는 외부 로드 밸런서 구현을 제공하기 위해 Amazon EC2 또는 Microsoft Azure와 같은 클라우드 제공업체가 필요합니다. 반면, K3s ServiceLB를 사용하면 클라우드 제공업체나 추가 구성 없이도 로드밸런서 서비스를 사용할 수 있습니다.","s":"서비스 로드밸런서","u":"/kr/networking","h":"#서비스-로드밸런서","p":2022},{"i":2033,"t":"ServiceLB 컨트롤러는 spec.type 필드가 LoadBalancer로 설정된 쿠버네티스 서비스를 감시합니다. 각 로드밸런서 서비스마다 kube-system 네임스페이스에 데몬셋이 생성된다. 이 데몬셋은 차례로 각 노드에 svc- 접두사를 가진 파드를 생성합니다. 이러한 파드는 아이피테이블을 사용하여 파드의 노드포트에서 서비스의 클러스터IP 주소와 포트로 트래픽을 전달합니다. 외부 IP가 구성된 노드에서 ServiceLB 파드가 실행되는 경우, 노드의 외부 IP가 서비스의 status.loadBalancer.ingress 주소 목록에 채워집니다. 그렇지 않으면 노드의 내부 IP가 사용됩니다. 로드밸런서 서비스가 여러 개 생성된 경우, 각 서비스마다 별도의 데몬셋이 생성됩니다. 서로 다른 포트를 사용한다면 동일한 노드에 여러 개의 서비스를 노출할 수 있습니다. 포트 80에서 수신 대기하는 로드밸런서 서비스를 생성하려고 하면 ServiceLB는 클러스터에서 포트 80에 대한 사용 가능한 호스트를 찾으려고 시도합니다. 해당 포트를 사용할 수 있는 호스트가 없는 경우, LB는 보류 상태로 유지됩니다.","s":"ServiceLB 작동 방식","u":"/kr/networking","h":"#servicelb-작동-방식","p":2022},{"i":2035,"t":"K3s에 LoadBalancer 타입의 서비스를 생성합니다.","s":"사용법","u":"/kr/networking","h":"#사용법","p":2022},{"i":2037,"t":"하나 이상의 노드에 svccontroller.k3s.cattle.io/enablelb=true 레이블을 추가하면 ServiceLB 컨트롤러가 허용 목록 모드로 전환되며, 해당 레이블이 있는 노드만 LoadBalancer 파드를 호스트할 수 있습니다. 레이블이 없는 노드는 ServiceLB에서 사용에서 제외됩니다. 비고 기본적으로 노드에는 레이블이 지정되지 않습니다. 모든 노드가 레이블이 지정되지 않은 상태로 유지되는 한, 사용 가능한 포트가 있는 모든 노드가 ServiceLB에서 사용됩니다.","s":"ServiceLB 노드 선택 제어하기","u":"/kr/networking","h":"#servicelb-노드-선택-제어하기","p":2022},{"i":2039,"t":"로드밸런서의 파드를 호스팅할 특정 노드 하위 집합을 선택하려면 원하는 노드에 enablelb 레이블을 추가하고 노드 및 서비스에서 일치하는 lbpool 레이블 값을 설정합니다. 예를 들면 다음과 같습니다: 노드 A와 노드 B에 svccontroller.k3s.cattle.io/lbpool=pool1 및 svccontroller.k3s.cattle.io/enablelb=true 레이블을 지정합니다. 노드 C와 노드 D에 svccontroller.k3s.cattle.io/lbpool=pool2 및 svccontroller.k3s.cattle.io/enablelb=true로 레이블을 지정합니다. 포트 443에 svccontroller.k3s.cattle.io/lbpool=pool1 레이블을 가진 하나의 LoadBalancer 서비스를 생성합니다. 이 서비스에 대한 데몬셋은 노드 A와 노드 B에만 파드를 배포합니다. 포트 443에 svccontroller.k3s.cattle.io/lbpool=pool2 레이블을 가진 다른 로드밸런서 서비스를 생성합니다. 데몬셋은 노드 C와 노드 D에만 파드를 배포합니다.","s":"ServiceLB 노드 풀 생성하기","u":"/kr/networking","h":"#servicelb-노드-풀-생성하기","p":2022},{"i":2041,"t":"ServiceLB를 비활성화하려면, 클러스터의 모든 서버에 --disable=servicelb 플래그를 사용하여 구성한다. 이 설정은 MetalLB와 같은 다른 LB를 실행하려는 경우에 필요합니다.","s":"ServiceLB 비활성화","u":"/kr/networking","h":"#servicelb-비활성화","p":2022},{"i":2043,"t":"바이너리 크기를 줄이기 위해 K3s는 모든 \"인-트리\"(빌트인) 클라우드 제공자를 제거합니다. 대신, K3s는 다음을 수행하는 임베디드 클라우드 컨트롤러 관리자(CCM, Cloud Controller Manager) 스텁을 제공합니다: 노드 내부IP 및 외부IP 주소 필드를 --node-ip 및 --node-external-ip 플래그를 기반으로 설정합니다. ServiceLB LoadBalancer 컨트롤러를 호스팅합니다. 클라우드-프로바이더가 external로 설정된 경우 존재하는 node.cloudprovider.kubernetes.io/uninitialized taint를 제거합니다. 외부 CCM을 배포하기 전에 모든 K3s 서버를 --disable-cloud-controller 플래그로 시작하여 임베디드 CCM을 비활성화해야 합니다. 비고 기본 제공 CCM을 비활성화하고 외부 대체품을 배포하고 올바르게 구성하지 않으면 노드가 오염된 상태로 유지되어 스케줄링이 불가능합니다.","s":"외부 클라우드 컨트롤러 매니저 배포하기","u":"/kr/networking","h":"#외부-클라우드-컨트롤러-매니저-배포하기","p":2022},{"i":2045,"t":"Linode와 같은 일부 클라우드 제공자는 호스트 이름이 \"localhost\"인 머신을 생성하며, 다른 클라우드 제공자는 호스트 이름이 전혀 설정되어 있지 않을 수 있습니다. 이로 인해 도메인 이름 확인에 문제가 발생할 수 있습니다. K3S_NODE_NAME플래그 또는K3S_NODE_NAME 환경 변수를 사용하여 K3s를 실행하면 노드 이름을 전달하여 이 문제를 해결할 수 있습니다.","s":"호스트 이름이 없는 노드","u":"/kr/networking","h":"#호스트-이름이-없는-노드","p":2022},{"i":2047,"t":"이 가이드는 기본 옵션으로 클러스터를 빠르게 시작하는 데 도움이 됩니다. 설치 섹션에서는 K3s를 설정하는 방법에 대해 자세히 설명합니다. K3s 구성 요소들이 작동하는 방식에 대한 자세한 내용은 아키텍처 섹션을 참조하세요. 정보 Kubernetes를 처음 사용하시나요? 공식 쿠버네티스 문서에는 이미 기본 사항을 설명하는 훌륭한 튜토리얼이 여기 있습니다.","s":"빠른 시작 가이드","u":"/kr/quick-start","h":"","p":2046},{"i":2049,"t":"K3s는 systemd 또는 openrc 기반 시스템에 서비스로 설치하는 편리한 방법으로 설치 스크립트를 제공합니다. 이 스크립트는 https://get.k3s.io 에서 확인할 수 있습니다. 이 방법으로 K3s를 설치하려면, 간단하게 다음을 실행하세요: curl -sfL https://get.k3s.io | sh - 이 설치를 실행한 후: 노드가 재부팅되거나 프로세스가 충돌 또는 종료된 경우 자동으로 재시작되도록 K3s 서비스가 구성됩니다. kubectl, crictl, ctr, k3s-killall.sh 및 k3s-uninstall.sh를 포함한 추가 유틸리티가 설치됩니다. /etc/rancher/k3s/k3s.yaml에 kubeconfig 파일을 작성하고, K3s가 설치한 kubectl이 자동으로 이를 사용하게 됩니다. 단일 노드 서버 설치는 워크로드 파드를 호스팅하는 데 필요한 모든 데이터스토어, 컨트롤 플레인, kubelet 및 컨테이너 런타임 구성 요소를 포함하여 모든 기능을 갖춘 Kubernetes 클러스터입니다. 서버 또는 에이전트 노드를 추가할 필요는 없지만, 클러스터에 추가 용량 또는 중복성을 추가하기 위해 추가하는 것이 좋습니다. 에이전트 노드를 추가로 설치하여 클러스터에 추가하려면, K3S_URL 및 K3S_TOKEN 환경 변수를 사용하여 설치 스크립트를 실행합니다. 다음은 에이전트 가입 방법을 보여주는 예제입니다: curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh - K3S_URL 파라미터를 설정하면 인스톨러가 K3s를 서버가 아닌 에이전트로 구성합니다. K3s 에이전트는 제공된 URL에서 수신 대기 중인 K3s 서버에 등록됩니다. K3S_TOKEN에 사용할 값은 서버 노드의 /var/lib/rancher/k3s/server/node-token에 저장됩니다. 비고 각 머신은 고유한 호스트 이름을 가져야 합니다. 머신에 고유 호스트명이 없는 경우, K3S_NODE_NAME 환경 변수를 전달하고 각 노드에 대해 유효한 고유 호스트명이 있는 값을 제공하세요.","s":"설치 스크립트","u":"/kr/quick-start","h":"#설치-스크립트","p":2046},{"i":2051,"t":"이 섹션에는 K3s 설치 스크립트, 서버/클라이언트 구성 옵션, 추가 도구 사용 지침에 대한 자세한 내용이 포함되어 있습니다.","s":"레퍼런스","u":"/kr/reference","h":"","p":2050},{"i":2053,"t":"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems. The simplest form of this command is as follows: curl -sfL https://get.k3s.io | sh - When using this method to install K3s, the following environment variables can be used to configure the installation: Environment Variable Description INSTALL_K3S_SKIP_DOWNLOAD If set to true will not download K3s hash or binary. INSTALL_K3S_SYMLINK By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to 'skip' will not create symlinks and 'force' will overwrite. INSTALL_K3S_SKIP_ENABLE If set to true will not enable or start K3s service. INSTALL_K3S_SKIP_START If set to true will not start K3s service. INSTALL_K3S_VERSION Version of K3s to download from Github. Will attempt to download from the stable channel if not specified. INSTALL_K3S_BIN_DIR Directory to install K3s binary, links, and uninstall script to, or use /usr/local/bin as the default. INSTALL_K3S_BIN_DIR_READ_ONLY If set to true will not write files to INSTALL_K3S_BIN_DIR, forces setting INSTALL_K3S_SKIP_DOWNLOAD=true. INSTALL_K3S_SYSTEMD_DIR Directory to install systemd service and environment files to, or use /etc/systemd/system as the default. INSTALL_K3S_EXEC Command with flags to use for launching K3s in the service. If the command is not specified, and the K3S_URL is set, it will default to \"agent.\" If K3S_URL not set, it will default to \"server.\" For help, refer to this example. INSTALL_K3S_NAME Name of systemd service to create, will default to 'k3s' if running k3s as a server and 'k3s-agent' if running k3s as an agent. If specified the name will be prefixed with 'k3s-'. INSTALL_K3S_TYPE Type of systemd service to create, will default from the K3s exec command if not specified. INSTALL_K3S_SELINUX_WARN If set to true will continue if k3s-selinux policy is not found. INSTALL_K3S_SKIP_SELINUX_RPM If set to true will skip automatic installation of the k3s RPM. INSTALL_K3S_CHANNEL_URL Channel URL for fetching K3s download URL. Defaults to https://update.k3s.io/v1-release/channels. INSTALL_K3S_CHANNEL Channel to use for fetching K3s download URL. Defaults to \"stable\". Options include: stable, latest, testing. This example shows where to place aforementioned environment variables as options (after the pipe): curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh - Environment variables which begin with K3S_ will be preserved for the systemd and openrc services to use. Setting K3S_URL without explicitly setting an exec command will default the command to \"agent\". When running the agent, K3S_TOKEN must also be set.","s":"Environment Variables","u":"/kr/reference/env-variables","h":"","p":2052},{"i":2055,"t":"This section captures the results of tests to determine minimum resource requirements for K3s. The results are summarized as follows: Components Processor Min CPU Min RAM with Kine/SQLite Min RAM with Embedded etcd K3s server with a workload Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz 10% of a core 768 M 896 M K3s cluster with a single agent Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz 10% of a core 512 M 768 M K3s agent Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz 5% of a core 256 M 256 M K3s server with a workload Pi4B BCM2711, 1.50 GHz 20% of a core 768 M 896 M K3s cluster with a single agent Pi4B BCM2711, 1.50 GHz 20% of a core 512 M 768 M K3s agent Pi4B BCM2711, 1.50 GHz 10% of a core 256 M 256 M Scope of Resource Testing Components Included for Baseline Measurements Methodology Environment Baseline Resource Requirements K3s Server with a Workload K3s Cluster with a Single Agent K3s Agent Analysis Primary Resource Utilization Drivers Preventing Agents and Workloads from Interfering with the Cluster Datastore","s":"Resource Profiling","u":"/kr/reference/resource-profiling","h":"","p":2054},{"i":2057,"t":"The resource tests were intended to address the following problem statements: On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster. On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).","s":"Scope of Resource Testing","u":"/kr/reference/resource-profiling","h":"#scope-of-resource-testing","p":2054},{"i":2059,"t":"The tested components are: K3s 1.19.2 with all packaged components enabled Prometheus + Grafana monitoring stack Kubernetes Example PHP Guestbook app These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app. Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements.","s":"Components Included for Baseline Measurements","u":"/kr/reference/resource-profiling","h":"#components-included-for-baseline-measurements","p":2054},{"i":2061,"t":"A standalone instance of Prometheus v2.21.0 was used to collect host CPU, memory, and disk IO statistics using prometheus-node-exporter installed via apt. systemd-cgtop was used to spot-check systemd cgroup-level CPU and memory utilization. system.slice/k3s.service tracks resource utilization for both K3s and containerd, while individual pods are under the kubepods hierarchy. Additional detailed K3s memory utilization data was collected from the process_resident_memory_bytes and go_memstats_alloc_bytes metrics using the kubelet exporter integrated into the server and agent processes. Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads.","s":"Methodology","u":"/kr/reference/resource-profiling","h":"#methodology","p":2054},{"i":2063,"t":"OS: Ubuntu 20.04 x86_64, aarch64 Hardware: AWS c5d.xlarge - 4 core, 8 GB RAM, NVME SSD Raspberry Pi 4 Model B - 4 core, 8 GB RAM, Class 10 SDHC","s":"Environment","u":"/kr/reference/resource-profiling","h":"#environment","p":2054},{"i":2065,"t":"This section captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent.","s":"Baseline Resource Requirements","u":"/kr/reference/resource-profiling","h":"#baseline-resource-requirements","p":2054},{"i":2067,"t":"These are the requirements for a single-node cluster in which the K3s server shares resources with a workload. The CPU requirements are: Resource Requirement Tested Processor 10% of a core Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz 20% of a core Low-power processor such as Pi4B BCM2711, 1.50 GHz The IOPS and memory requirements are: Tested Datastore IOPS KiB/sec Latency RAM Kine/SQLite 10 500 < 10 ms 768 M Embedded etcd 50 250 < 5 ms 896 M","s":"K3s Server with a Workload","u":"/kr/reference/resource-profiling","h":"#k3s-server-with-a-workload","p":2054},{"i":2069,"t":"These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload. The CPU requirements are: Resource Requirement Tested Processor 10% of a core Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz 20% of a core Pi4B BCM2711, 1.50 GHz The IOPS and memory requirements are: Datastore IOPS KiB/sec Latency RAM Kine/SQLite 10 500 < 10 ms 512 M Embedded etcd 50 250 < 5 ms 768 M","s":"K3s Cluster with a Single Agent","u":"/kr/reference/resource-profiling","h":"#k3s-cluster-with-a-single-agent","p":2054},{"i":2071,"t":"The CPU requirements are: Resource Requirement Tested Processor 5% of a core Intel(R) Xeon(R) Platinum 8124M CPU, 3.00 GHz 10% of a core Pi4B BCM2711, 1.50 GHz 256 M of RAM is required.","s":"K3s Agent","u":"/kr/reference/resource-profiling","h":"#k3s-agent","p":2054},{"i":2073,"t":"This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.","s":"Analysis","u":"/kr/reference/resource-profiling","h":"#analysis","p":2054},{"i":2075,"t":"K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server's resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server's resource requirements. K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts.","s":"Primary Resource Utilization Drivers","u":"/kr/reference/resource-profiling","h":"#primary-resource-utilization-drivers","p":2054},{"i":2077,"t":"When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore. This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store. Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore. Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state.","s":"Preventing Agents and Workloads from Interfering with the Cluster Datastore","u":"/kr/reference/resource-profiling","h":"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore","p":2054},{"i":2079,"t":"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically: Generate an AES-CBC key Generate an encryption config file with the generated key Pass the config to the KubeAPI as encryption-provider-config 팁 Secrets-encryption cannot be enabled on an existing server without restarting it. Use curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption if installing from script, or other methods described in Configuration Options. Example of the encryption config file: { \"kind\": \"EncryptionConfiguration\", \"apiVersion\": \"apiserver.config.k8s.io/v1\", \"resources\": [ { \"resources\": [ \"secrets\" ], \"providers\": [ { \"aescbc\": { \"keys\": [ { \"name\": \"aescbckey\", \"secret\": \"xxxxxxxxxxxxxxxxxxx\" } ] } }, { \"identity\": {} } ] } ] }","s":"Secrets Encryption Config","u":"/kr/security/secrets-encryption","h":"","p":2078},{"i":2081,"t":"K3s contains a utility tool secrets-encrypt, which enables automatic control over the following: Disabling/Enabling secrets encryption Adding new encryption keys Rotating and deleting encryption keys Reencrypting secrets For more information, see the k3s secrets-encrypt command documentation.","s":"Secrets Encryption Tool","u":"/kr/security/secrets-encryption","h":"#secrets-encryption-tool","p":2078},{"i":2083,"t":"이 섹션에서는 K3s 클러스터를 보호하는 방법론과 수단에 대해 설명합니다. 두 섹션으로 나뉘어져 있습니다. 이 가이드는 K3s가 임베디드 etcd로 실행되고 있다고 가정합니다. 아래 문서는 CIS 쿠버네티스 벤치마크 v1.23에 적용됩니다. 강화 가이드 CIS 벤치마크 자체 평가 가이드","s":"보안","u":"/kr/security","h":"","p":2082},{"i":2085,"t":"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS). K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark: K3s will not modify the host operating system. Any host-level modifications will need to be done manually. Certain CIS policy controls for NetworkPolicies and PodSecurityStandards (PodSecurityPolicies on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below. The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary.","s":"CIS Hardening Guide","u":"/kr/security/hardening-guide","h":"","p":2084},{"i":2087,"t":"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.","s":"Host-level Requirements","u":"/kr/security/hardening-guide","h":"#host-level-requirements","p":2084},{"i":2089,"t":"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults. Note: protect-kernel-defaults is exposed as a top-level flag for K3s. Set kernel parameters​ Create a file called /etc/sysctl.d/90-kubelet.conf and add the snippet below. Then run sysctl -p /etc/sysctl.d/90-kubelet.conf. vm.panic_on_oom=0 vm.overcommit_memory=1 kernel.panic=10 kernel.panic_on_oops=1 kernel.keys.root_maxbytes=25000000","s":"Ensure protect-kernel-defaults is set","u":"/kr/security/hardening-guide","h":"#ensure-protect-kernel-defaults-is-set","p":2084},{"i":2091,"t":"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section. By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the PodSecurity and NodeRestriction admission controllers enabled, among others.","s":"Kubernetes Runtime Requirements","u":"/kr/security/hardening-guide","h":"#kubernetes-runtime-requirements","p":2084},{"i":2093,"t":"v1.25 and Newer v1.24 and Older K3s v1.25 and newer support Pod Security Admissions (PSAs) for controlling pod security. PSAs are enabled by passing the following flag to the K3s server: --kube-apiserver-arg=\"admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml\" The policy should be written to a file named psa.yaml in /var/lib/rancher/k3s/server directory. Here is an example of a compliant PSA: apiVersion: apiserver.config.k8s.io/v1 kind: AdmissionConfiguration plugins: - name: PodSecurity configuration: apiVersion: pod-security.admission.config.k8s.io/v1beta1 kind: PodSecurityConfiguration defaults: enforce: \"restricted\" enforce-version: \"latest\" audit: \"restricted\" audit-version: \"latest\" warn: \"restricted\" warn-version: \"latest\" exemptions: usernames: [] runtimeClasses: [] namespaces: [kube-system, cis-operator-system] K3s v1.24 and older support Pod Security Policies (PSPs) for controlling pod security. PSPs are enabled by passing the following flag to the K3s server: --kube-apiserver-arg=\"enable-admission-plugins=NodeRestriction,PodSecurityPolicy\" This will have the effect of maintaining the NodeRestriction plugin as well as enabling the PodSecurityPolicy. When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark. Here is an example of a compliant PSP: apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: restricted-psp spec: privileged: false # CIS - 5.2.1 allowPrivilegeEscalation: false # CIS - 5.2.5 requiredDropCapabilities: # CIS - 5.2.7/8/9 - ALL volumes: - 'configMap' - 'emptyDir' - 'projected' - 'secret' - 'downwardAPI' - 'csi' - 'persistentVolumeClaim' - 'ephemeral' hostNetwork: false # CIS - 5.2.4 hostIPC: false # CIS - 5.2.3 hostPID: false # CIS - 5.2.2 runAsUser: rule: 'MustRunAsNonRoot' # CIS - 5.2.6 seLinux: rule: 'RunAsAny' supplementalGroups: rule: 'MustRunAs' ranges: - min: 1 max: 65535 fsGroup: rule: 'MustRunAs' ranges: - min: 1 max: 65535 readOnlyRootFilesystem: false For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a \"system unrestricted policy\" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly. Combining the configuration above with the Network Policy described in the next section, a single file can be placed in the /var/lib/rancher/k3s/server/manifests directory. Here is an example of a policy.yaml file: apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: restricted-psp spec: privileged: false allowPrivilegeEscalation: false requiredDropCapabilities: - ALL volumes: - 'configMap' - 'emptyDir' - 'projected' - 'secret' - 'downwardAPI' - 'csi' - 'persistentVolumeClaim' - 'ephemeral' hostNetwork: false hostIPC: false hostPID: false runAsUser: rule: 'MustRunAsNonRoot' seLinux: rule: 'RunAsAny' supplementalGroups: rule: 'MustRunAs' ranges: - min: 1 max: 65535 fsGroup: rule: 'MustRunAs' ranges: - min: 1 max: 65535 readOnlyRootFilesystem: false --- apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: system-unrestricted-psp annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*' spec: allowPrivilegeEscalation: true allowedCapabilities: - '*' fsGroup: rule: RunAsAny hostIPC: true hostNetwork: true hostPID: true hostPorts: - max: 65535 min: 0 privileged: true runAsUser: rule: RunAsAny seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny volumes: - '*' --- apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: svclb-psp annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*' spec: allowPrivilegeEscalation: false allowedCapabilities: - NET_ADMIN allowedUnsafeSysctls: - net.ipv4.ip_forward - net.ipv6.conf.all.forwarding fsGroup: rule: RunAsAny hostPorts: - max: 65535 min: 0 runAsUser: rule: RunAsAny seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:restricted-psp rules: - apiGroups: - policy resources: - podsecuritypolicies verbs: - use resourceNames: - restricted-psp --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:system-unrestricted-psp rules: - apiGroups: - policy resources: - podsecuritypolicies resourceNames: - system-unrestricted-psp verbs: - use --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:svclb-psp rules: - apiGroups: - policy resources: - podsecuritypolicies resourceNames: - svclb-psp verbs: - use --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: default:restricted-psp roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:restricted-psp subjects: - kind: Group name: system:authenticated apiGroup: rbac.authorization.k8s.io --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: system-unrestricted-node-psp-rolebinding roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:system-unrestricted-psp subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:nodes --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: system-unrestricted-svc-acct-psp-rolebinding namespace: kube-system roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:system-unrestricted-psp subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:serviceaccounts --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svclb-psp-rolebinding namespace: kube-system roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:svclb-psp subjects: - kind: ServiceAccount name: svclb --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-system spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-system --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: default spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: default --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-public spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-public Note: The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the kube-system namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.","s":"Pod Security","u":"/kr/security/hardening-guide","h":"#pod-security","p":2084},{"i":2095,"t":"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods. Network policies should be placed the /var/lib/rancher/k3s/server/manifests directory, where they will automatically be deployed on startup. Here is an example of a compliant network policy. kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-system spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-system With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS. apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: default-network-dns-policy namespace: <NAMESPACE> spec: ingress: - ports: - port: 53 protocol: TCP - port: 53 protocol: UDP podSelector: matchLabels: k8s-app: kube-dns policyTypes: - Ingress The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster. v1.21 and Newer v1.20 and Older apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-metrics-server namespace: kube-system spec: podSelector: matchLabels: k8s-app: metrics-server ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-svclbtraefik-ingress namespace: kube-system spec: podSelector: matchLabels: svccontroller.k3s.cattle.io/svcname: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-traefik-v121-ingress namespace: kube-system spec: podSelector: matchLabels: app.kubernetes.io/name: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-metrics-server namespace: kube-system spec: podSelector: matchLabels: k8s-app: metrics-server ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-svclbtraefik-ingress namespace: kube-system spec: podSelector: matchLabels: svccontroller.k3s.cattle.io/svcname: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-traefik-v120-ingress namespace: kube-system spec: podSelector: matchLabels: app: traefik ingress: - {} policyTypes: - Ingress --- 정보 Operators must manage network policies as normal for additional namespaces that are created.","s":"NetworkPolicies","u":"/kr/security/hardening-guide","h":"#networkpolicies","p":2084},{"i":2097,"t":"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment. The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information. sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs A starter audit policy to log request metadata is provided below. The policy should be written to a file named audit.yaml in /var/lib/rancher/k3s/server directory. Detailed information about policy configuration for the API server can be found in the Kubernetes documentation. apiVersion: audit.k8s.io/v1 kind: Policy rules: - level: Metadata Both configurations must be passed as arguments to the API Server as: --kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' --kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' If the configurations are created after K3s is installed, they must be added to K3s' systemd service in /etc/systemd/system/k3s.service. ExecStart=/usr/local/bin/k3s \\ server \\ '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\ '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\ K3s must be restarted to load the new configuration. sudo systemctl daemon-reload sudo systemctl restart k3s.service","s":"API Server audit configuration","u":"/kr/security/hardening-guide","h":"#api-server-audit-configuration","p":2084},{"i":2099,"t":"The configuration below should be placed in the configuration file, and contains all the necessary remediations to harden the Kubernetes components. v1.25 and Newer v1.24 and Older protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true' protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true'","s":"Configuration for Kubernetes Components","u":"/kr/security/hardening-guide","h":"#configuration-for-kubernetes-components","p":2084},{"i":2101,"t":"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy. kube-apiserver --advertise-port=6443 --allow-privileged=true --anonymous-auth=false # 1.2.1 --api-audiences=unknown --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt # 1.2.31 --enable-admission-plugins=NodeRestriction,PodSecurityPolicy # 1.2.17 --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt # 1.2.32 --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt # 1.2.29 --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key # 1.2.29 --etcd-servers=https://127.0.0.1:2379 --insecure-port=0 # 1.2.19 --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --profiling=false # 1.2.21 --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 # 1.2.20 --service-account-issuer=k3s --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.2.28 --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt # 1.2.30 --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 kube-controller-manager --address=127.0.0.1 --allocate-node-cidrs=true --bind-address=127.0.0.1 # 1.3.7 --cluster-cidr=10.42.0.0/16 --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --port=10252 --profiling=false # 1.3.2 --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt # 1.3.5 --secure-port=0 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 --use-service-account-credentials=true # 1.3.3 kube-scheduler --address=127.0.0.1 --bind-address=127.0.0.1 # 1.4.2 --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --port=10251 --profiling=false # 1.4.1 --secure-port=0 kubelet --address=0.0.0.0 --anonymous-auth=false # 4.2.1 --authentication-token-webhook=true --authorization-mode=Webhook # 4.2.2 --cgroup-driver=cgroupfs --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt # 4.2.3 --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d --container-runtime-endpoint=/run/k3s/containerd/containerd.sock --container-runtime=remote --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=hostname01 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --kubelet-cgroups=/systemd/system.slice --node-labels= --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --protect-kernel-defaults=true # 4.2.6 --read-only-port=0 # 4.2.4 --resolv-conf=/run/systemd/resolve/resolv.conf --runtime-cgroups=/systemd/system.slice --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt # 4.2.10 --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10 Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.","s":"Control Plane Execution and Arguments","u":"/kr/security/hardening-guide","h":"#control-plane-execution-and-arguments","p":2084},{"i":2103,"t":"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.","s":"Known Issues","u":"/kr/security/hardening-guide","h":"#known-issues","p":2084},{"i":2105,"t":"Ensure that the admission control plugin NamespaceLifecycle is set. Rationale Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects. This can be remediated by passing this argument as a value to the enable-admission-plugins= and pass that to --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.15","u":"/kr/security/hardening-guide","h":"#control-1215","p":2084},{"i":2107,"t":"Ensure that the admission control plugin PodSecurityPolicy is set. Rationale A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions. This can be remediated by passing this argument as a value to the enable-admission-plugins= and pass that to --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.16","u":"/kr/security/hardening-guide","h":"#control-1216","p":2084},{"i":2109,"t":"Ensure that the --audit-log-path argument is set. Rationale Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.22","u":"/kr/security/hardening-guide","h":"#control-1222","p":2084},{"i":2111,"t":"Ensure that the --audit-log-maxage argument is set to 30 or as appropriate. Rationale Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.23","u":"/kr/security/hardening-guide","h":"#control-1223","p":2084},{"i":2113,"t":"Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate. Rationale Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.24","u":"/kr/security/hardening-guide","h":"#control-1224","p":2084},{"i":2115,"t":"Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate. Rationale Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.25","u":"/kr/security/hardening-guide","h":"#control-1225","p":2084},{"i":2117,"t":"Ensure that the --request-timeout argument is set as appropriate. Rationale Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.26","u":"/kr/security/hardening-guide","h":"#control-1226","p":2084},{"i":2119,"t":"Ensure that the --service-account-lookup argument is set to true. Rationale If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.27","u":"/kr/security/hardening-guide","h":"#control-1227","p":2084},{"i":2121,"t":"Ensure that the --encryption-provider-config argument is set as appropriate. Rationale `etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures. Detailed steps on how to configure secrets encryption in K3s are available in Secrets Encryption.","s":"Control 1.2.33","u":"/kr/security/hardening-guide","h":"#control-1233","p":2084},{"i":2123,"t":"Ensure that encryption providers are appropriately configured. Rationale Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options. This can be remediated by passing a valid configuration to k3s as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in Secrets Encryption.","s":"Control 1.2.34","u":"/kr/security/hardening-guide","h":"#control-1234","p":2084},{"i":2125,"t":"Ensure that the --terminated-pod-gc-threshold argument is set as appropriate. Rationale Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.3.1","u":"/kr/security/hardening-guide","h":"#control-131","p":2084},{"i":2127,"t":"Ensure that a minimal audit policy is created. Rationale Logging is an important detective control for all systems, to detect potential unauthorized access. This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.","s":"Control 3.2.1","u":"/kr/security/hardening-guide","h":"#control-321","p":2084},{"i":2129,"t":"Ensure that the --make-iptables-util-chains argument is set to true. Rationale Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 4.2.7","u":"/kr/security/hardening-guide","h":"#control-427","p":2084},{"i":2131,"t":"Ensure that default service accounts are not actively used Rationale Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod. Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account. The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments. This can be remediated by updating the automountServiceAccountToken field to false for the default service account in each namespace. For default service accounts in the built-in namespaces (kube-system, kube-public, kube-node-lease, and default), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.","s":"Control 5.1.5","u":"/kr/security/hardening-guide","h":"#control-515","p":2084},{"i":2133,"t":"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the CIS Benchmark Self-Assessment Guide to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster.","s":"Conclusion","u":"/kr/security/hardening-guide","h":"#conclusion","p":2084},{"i":2135,"t":"데이터를 유지해야 하는 애플리케이션을 배포할 때는 퍼시스턴트 스토리지를 만들어야 합니다. 퍼시스턴트 스토리지를 사용하면 애플리케이션을 실행하는 파드 외부에 애플리케이션 데이터를 저장할 수 있습니다. 이 스토리지 방식을 사용하면 애플리케이션의 파드에 장애가 발생하더라도 애플리케이션 데이터를 유지할 수 있습니다. 퍼시스턴트 볼륨(PV: persistent volume)은 쿠버네티스 클러스터의 스토리지 조각이며, 퍼시스턴트 볼륨 클레임(PVC: persistent volume claim)은 스토리지에 대한 요청입니다. PV와 PVC의 작동 방식에 대한 자세한 내용은 스토리지 공식 쿠버네티스 문서를 참조하세요. 이 페이지는 로컬 스토리지 제공자 또는 [롱혼(#setting-up-longhorn)]을 사용하여 퍼시스턴트 스토리지를 설정하는 방법을 설명합니다.","s":"볼륨과 저장소","u":"/kr/storage","h":"","p":2134},{"i":2137,"t":"K3s는 몇 가지 선택적 볼륨 플러그인과 모든 내장(\"in-tree\"라고도 함) 클라우드 제공업체를 제거합니다. 이는 더 작은 바이너리 크기를 달성하고 많은 K3s 사용 사례에서 사용할 수 없는 타사 클라우드 또는 데이터센터 기술 및 서비스에 대한 의존을 피하기 위한 것입니다. 이러한 플러그인을 제거해도 핵심 Kubernetes 기능이나 적합성에는 영향을 미치지 않기 때문에 이렇게 할 수 있습니다. 다음 볼륨 플러그인은 K3s에서 제거되었습니다: cephfs fc flocker git_repo glusterfs portworx quobyte rbd storageos K3s와 함께 사용할 수 있는 트리 외 대안인 두 구성 요소가 있습니다: 쿠버네티스 컨테이너 스토리지 인터페이스(CSI) 및 클라우드 프로바이더 인터페이스(CPI)입니다. 쿠버네티스 유지 관리자는 인-트리 볼륨 플러그인을 CSI 드라이버로 적극적으로 마이그레이션하고 있습니다. 이 마이그레이션에 대한 자세한 내용은 여기를 참고하세요.","s":"K3s 스토리지의 차이점은 무엇인가요?","u":"/kr/storage","h":"#k3s-스토리지의-차이점은-무엇인가요","p":2134},{"i":2139,"t":"K3s는 랜처의 로컬 경로 프로비저너와 함께 제공되며, 이를 통해 각 노드의 로컬 스토리지를 사용하여 영구 볼륨 클레임(persistent volume claims)을 즉시 생성할 수 있습니다. 아래에서는 간단한 예제를 다루겠습니다. 자세한 내용은 공식 문서 여기를 참조하세요. 호스트 경로 지원 퍼시스턴트 볼륨 클레임과 이를 활용할 파드를 생성합니다:","s":"로컬 스토리지 공급자 설정하기","u":"/kr/storage","h":"#로컬-스토리지-공급자-설정하기","p":2134},{"i":2141,"t":"apiVersion: v1 kind: PersistentVolumeClaim metadata: name: local-path-pvc namespace: default spec: accessModes: - ReadWriteOnce storageClassName: local-path resources: requests: storage: 2Gi","s":"pvc.yaml","u":"/kr/storage","h":"#pvcyaml","p":2134},{"i":2143,"t":"apiVersion: v1 kind: Pod metadata: name: volume-test namespace: default spec: containers: - name: volume-test image: nginx:stable-alpine imagePullPolicy: IfNotPresent volumeMounts: - name: volv mountPath: /data ports: - containerPort: 80 volumes: - name: volv persistentVolumeClaim: claimName: local-path-pvc yaml을 적용합니다: kubectl create -f pvc.yaml kubectl create -f pod.yaml PV 및 PVC가 생성되었는지 확인합니다: kubectl get pv kubectl get pvc 상태는 각각 Bound여야 합니다.","s":"pod.yaml","u":"/kr/storage","h":"#podyaml","p":2134},{"i":2145,"t":"경고 Longhorn은 ARM32를 지원하지 않습니다. K3s는 쿠버네티스용 오픈소스 분산형 블록 스토리지 시스템인 Longhorn을 지원합니다. 아래는 간단한 예제입니다. 자세한 내용은 공식 문서를 참고하시기 바랍니다. longhorn.yaml을 적용하여 Longhorn을 설치합니다: kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml Longhorn은 네임스페이스 longhorn-system에 설치됩니다. yaml을 적용하여 PVC와 파드를 생성합니다: kubectl create -f pvc.yaml kubectl create -f pod.yaml","s":"Longhorn 구성하기","u":"/kr/storage","h":"#longhorn-구성하기","p":2134},{"i":2147,"t":"apiVersion: v1 kind: PersistentVolumeClaim metadata: name: longhorn-volv-pvc spec: accessModes: - ReadWriteOnce storageClassName: longhorn resources: requests: storage: 2Gi","s":"pvc.yaml","u":"/kr/storage","h":"#pvcyaml-1","p":2134},{"i":2149,"t":"apiVersion: v1 kind: Pod metadata: name: volume-test namespace: default spec: containers: - name: volume-test image: nginx:stable-alpine imagePullPolicy: IfNotPresent volumeMounts: - name: volv mountPath: /data ports: - containerPort: 80 volumes: - name: volv persistentVolumeClaim: claimName: longhorn-volv-pvc PV 및 PVC가 생성되었는지 확인합니다: kubectl get pv kubectl get pvc 상태는 각각 Bound여야 합니다.","s":"pod.yaml","u":"/kr/storage","h":"#podyaml-1","p":2134},{"i":2152,"t":"수동 업그레이드에서는 클러스터를 수동으로 업그레이드하는 몇 가지 기술을 설명합니다. 또한 Terraform과 같은 타사 코드형 인프라 도구(Infrastructure-as-Code)를 통한 업그레이드의 기초로 사용할 수도 있습니다. 자동 업그레이드는 Rancher의 시스템-업그레이드-컨트롤러(system-upgrade-controller)를 사용하여 쿠버네티스 네이티브 자동 업그레이드를 수행하는 방법을 설명합니다.","s":"K3s 클러스터 업그레이드하기","u":"/kr/upgrades","h":"#k3s-클러스터-업그레이드하기","p":2150},{"i":2154,"t":"Traefik: Traefik이 비활성화되지 않은 경우, K3s 버전 1.20 이하에서는 Traefik v1이 설치되고, K3s 버전 1.21 이상에서는 v1이 없는 경우 Traefik v2가 설치됩니다. 구형 Traefik v1에서 Traefik v2로 업그레이드하려면 Traefik 문서를 참조하시고 마이그레이션 도구를 사용하세요. K3s 부트스트랩 데이터: 외부 SQL 데이터스토어가 있는 HA 구성에서 K3s를 사용 중이고 서버(컨트롤 플레인) 노드가 --token CLI 플래그로 시작되지 않은 경우, 토큰을 지정하지 않고는 더 이상 클러스터에 K3s 서버를 추가할 수 없게 됩니다. 백업에서 복원할 때 필요하므로 이 토큰의 사본을 보관해야 합니다. 이전에는 K3s에서 외부 SQL 데이터스토어를 사용할 때 토큰을 사용하도록 강제하지 않았습니다. 영향을 받는 버전은 <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; 이며, 패치된 버전은 v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1 입니다. 다음과 같이 클러스터에 이미 가입된 서버에서 토큰 값을 찾을 수 있습니다: cat /var/lib/rancher/k3s/server/token 실험용 Dqlite: 실험용 내장 Dqlite 데이터 저장소는 K3s v1.19.1에서 더 이상 사용되지 않습니다. 실험용 Dqlite에서 실험용 내장 etcd 업그레이드는 지원되지 않는다는 점에 유의하세요. 업그레이드를 시도하면 성공하지 못하고 데이터가 손실됩니다.","s":"버전별 주의사항","u":"/kr/upgrades","h":"#버전별-주의사항","p":2150},{"i":2156,"t":"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped. To stop all of the K3s containers and reset the containerd state, the k3s-killall.sh script can be used. The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted. To run the killall script from a server node, run: /usr/local/bin/k3s-killall.sh","s":"Stopping K3s","u":"/kr/upgrades/killall","h":"","p":2155},{"i":2159,"t":"You can manage K3s cluster upgrades using Rancher's system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a custom resource definition (CRD), a plan, and a controller. The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a label selector. See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the CRD. The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade jobs on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly. 비고 The upgrade job that is launched must be highly privileged. It is configured with the following: Host IPC, NET, and PID namespaces The CAP_SYS_BOOT capability Host root mounted at /host with read and write permissions To automate upgrades in this manner, you must do the following: Install the system-upgrade-controller into your cluster Configure plans 위험 If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades. If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page. If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page. If the K3s cluster is not managed Rancher, you may follow the steps below. For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories: system-upgrade-controller k3s-upgrade 팁 When attempting to upgrade to a new version of K3s, the Kubernetes version skew policy applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.","s":"Overview","u":"/kr/upgrades/automated","h":"#overview","p":2157},{"i":2161,"t":"The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command: kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied.","s":"Install the system-upgrade-controller","u":"/kr/upgrades/automated","h":"#install-the-system-upgrade-controller","p":2157},{"i":2163,"t":"It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster. The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1: # Server plan apiVersion: upgrade.cattle.io/v1 kind: Plan metadata: name: server-plan namespace: system-upgrade spec: concurrency: 1 cordon: true nodeSelector: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: In values: - \"true\" serviceAccountName: system-upgrade upgrade: image: rancher/k3s-upgrade version: v1.24.6+k3s1 --- # Agent plan apiVersion: upgrade.cattle.io/v1 kind: Plan metadata: name: agent-plan namespace: system-upgrade spec: concurrency: 1 cordon: true nodeSelector: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: DoesNotExist prepare: args: - prepare - server-plan image: rancher/k3s-upgrade serviceAccountName: system-upgrade upgrade: image: rancher/k3s-upgrade version: v1.24.6+k3s1 There are a few important things to call out regarding these plans: 1) The plans must be created in the same namespace where the controller was deployed. 2) The concurrency field indicates how many nodes can be upgraded at the same time. 3) The server-plan targets server nodes by specifying a label selector that selects nodes with the node-role.kubernetes.io/control-plane label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label. 4) The prepare step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute. 5) Both plans have the version field set to v1.24.6+k3s1. Alternatively, you can omit the version field and set the channel field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the release channels. Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s: apiVersion: upgrade.cattle.io/v1 kind: Plan ... spec: ... channel: https://update.k3s.io/v1-release/channels/stable As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed. You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl: kubectl -n system-upgrade get plans -o yaml kubectl -n system-upgrade get jobs -o yaml","s":"Configure plans","u":"/kr/upgrades/automated","h":"#configure-plans","p":2157},{"i":2165,"t":"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version. 비고 When upgrading, upgrade server nodes first one at a time, then any agent nodes.","s":"Manual Upgrades","u":"/kr/upgrades/manual","h":"","p":2164},{"i":2167,"t":"Upgrades performed via the installation script or using our automated upgrades feature can be tied to different release channels. The following channels are available: Channel Description stable (Default) Stable is recommended for production environments. These releases have been through a period of community hardening. latest Latest is recommended for trying out the latest features. These releases have not yet been through a period of community hardening. v1.26 (example) There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release. For an exhaustive and up-to-date list of channels, you can visit the k3s channel service API. For more technical details on how channels work, you see the channelserver project. 팁 When attempting to upgrade to a new version of K3s, the Kubernetes version skew policy applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.","s":"Release Channels","u":"/kr/upgrades/manual","h":"#release-channels","p":2164},{"i":2169,"t":"To upgrade K3s from an older version you can re-run the installation script using the same flags, for example: curl -sfL https://get.k3s.io | sh - This will upgrade to a newer version in the stable channel by default. If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel: curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh - If you want to upgrade to a specific version you can run the following command: curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 sh -","s":"Upgrade K3s Using the Installation Script","u":"/kr/upgrades/manual","h":"#upgrade-k3s-using-the-installation-script","p":2164},{"i":2171,"t":"Or to manually upgrade K3s: Download the desired version of the K3s binary from releases Copy the downloaded binary to /usr/local/bin/k3s (or your desired location) Stop the old k3s binary Launch the new k3s binary","s":"Manually Upgrade K3s Using the Binary","u":"/kr/upgrades/manual","h":"#manually-upgrade-k3s-using-the-binary","p":2164},{"i":2173,"t":"Restarting K3s is supported by the installation script for systemd and OpenRC. systemd To restart servers manually: sudo systemctl restart k3s To restart agents manually: sudo systemctl restart k3s-agent OpenRC To restart servers manually: sudo service k3s restart To restart agents manually: sudo service k3s-agent restart","s":"Restarting K3s","u":"/kr/upgrades/manual","h":"#restarting-k3s","p":2164},{"i":2176,"t":"Overview​ This document is a companion to the K3s security hardening guide. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers. This guide is specific to the v1.22, v1.23 and v1.24 release line of K3s and the v1.23 release of the CIS Kubernetes Benchmark. For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in Center for Internet Security (CIS). Testing controls methodology​ Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide. Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing. These are the possible results for each control: Pass - The K3s cluster under test passed the audit outlined in the benchmark. Not Applicable - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so. Warn - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed. This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the \"audit\" commands to fit your scenario. NOTE: Only automated tests (previously called scored) are covered in this guide.","s":"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24","u":"/kr/security/self-assessment","h":"#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124","p":2174},{"i":2180,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml","s":"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2182,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml","s":"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2184,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml","s":"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2186,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml","s":"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2188,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml","s":"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2190,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml","s":"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2192,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/etcd.yaml","s":"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2194,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/etcd.yaml","s":"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2196,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 <path/to/cni/files>","s":"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2198,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root <path/to/cni/files>","s":"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)","u":"/kr/security/self-assessment","h":"#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual","p":2174},{"i":2200,"t":"Result: pass Remediation: On the etcd server node, get the etcd data directory, passed as an argument --data-dir, from the command 'ps -ef | grep etcd'. Run the below command (based on the etcd data directory found above). For example, chmod 700 /var/lib/etcd Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 1.1.11 Expected Result: '700' is equal to '700' Returned Value: 700","s":"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated","p":2174},{"i":2202,"t":"Result: Not Applicable Remediation: On the etcd server node, get the etcd data directory, passed as an argument --data-dir, from the command 'ps -ef | grep etcd'. Run the below command (based on the etcd data directory found above). For example, chown etcd:etcd /var/lib/etcd","s":"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)","u":"/kr/security/self-assessment","h":"#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated","p":2174},{"i":2204,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig","s":"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated","p":2174},{"i":2206,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/admin.conf Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi' Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root","s":"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2208,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 scheduler Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi' Expected Result: permissions has permissions 644, expected 644 or more restrictive Returned Value: permissions=644","s":"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2210,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root scheduler Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi' Expected Result: 'root:root' is present Returned Value: root:root","s":"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2212,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 controllermanager Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi' Expected Result: permissions has permissions 644, expected 644 or more restrictive Returned Value: permissions=644","s":"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2214,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root controllermanager Audit: stat -c %U:%G /var/lib/rancher/k3s/server/tls Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root","s":"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2216,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown -R root:root /etc/kubernetes/pki/ Audit: find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G Expected Result: 'root:root' is present Returned Value: root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root","s":"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2218,"t":"Result: warn Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod -R 644 /etc/kubernetes/pki/*.crt Audit: stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt","s":"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2220,"t":"Result: warn Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod -R 600 /etc/kubernetes/pki/*.key Audit: stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key","s":"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)","u":"/kr/security/self-assessment","h":"#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual","p":2174},{"i":2223,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --anonymous-auth=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'","s":"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)","u":"/kr/security/self-assessment","h":"#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual","p":2174},{"i":2225,"t":"Result: pass Remediation: Follow the documentation and configure alternate mechanisms for authentication. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the --token-auth-file=<filename> parameter. Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--token-auth-file' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)","u":"/kr/security/self-assessment","h":"#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated","p":2174},{"i":2227,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the DenyServiceExternalIPs from enabled admission plugins. Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)","u":"/kr/security/self-assessment","h":"#123-ensure-that-the---denyserviceexternalips-is-not-set-automated","p":2174},{"i":2229,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the --kubelet-https parameter.","s":"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated","p":2174},{"i":2231,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and kubelets. Then, edit API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the kubelet client certificate and key parameters as below. --kubelet-client-certificate=<path/to/client-certificate-file> --kubelet-client-key=<path/to/client-key-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority' Expected Result: '--kubelet-client-certificate' is present AND '--kubelet-client-key' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated","p":2174},{"i":2233,"t":"Result: pass Remediation: Follow the Kubernetes documentation and setup the TLS connection between the apiserver and kubelets. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --kubelet-certificate-authority parameter to the path to the cert file for the certificate authority --kubelet-certificate-authority=<ca-string>. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority' Expected Result: '--kubelet-certificate-authority' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated","p":2174},{"i":2235,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow. One such example could be as below. --authorization-mode=RBAC Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' does not have 'AlwaysAllow' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/kr/security/self-assessment","h":"#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":2174},{"i":2237,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to a value that includes Node. --authorization-mode=Node,RBAC Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' has 'Node' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)","u":"/kr/security/self-assessment","h":"#128-ensure-that-the---authorization-mode-argument-includes-node-automated","p":2174},{"i":2239,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to a value that includes RBAC, for example --authorization-mode=Node,RBAC. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' has 'RBAC' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)","u":"/kr/security/self-assessment","h":"#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated","p":2174},{"i":2241,"t":"Result: warn Remediation: Follow the Kubernetes documentation and set the desired limits in a configuration file. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml and set the below parameters. --enable-admission-plugins=...,EventRateLimit,... --admission-control-config-file=<path/to/configuration/file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'EventRateLimit' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)","u":"/kr/security/self-assessment","h":"#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual","p":2174},{"i":2243,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and either remove the --enable-admission-plugins parameter, or set it to a value that does not include AlwaysAdmit. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)","u":"/kr/security/self-assessment","h":"#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated","p":2174},{"i":2245,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to include AlwaysPullImages. --enable-admission-plugins=...,AlwaysPullImages,... Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--enable-admission-plugins' is present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)","u":"/kr/security/self-assessment","h":"#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual","p":2174},{"i":2247,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to include SecurityContextDeny, unless PodSecurityPolicy is already in place. --enable-admission-plugins=...,SecurityContextDeny,... Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)","u":"/kr/security/self-assessment","h":"#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual","p":2174},{"i":2249,"t":"Result: pass Remediation: Follow the documentation and create ServiceAccount objects as per your environment. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and ensure that the --disable-admission-plugins parameter is set to a value that does not include ServiceAccount. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)","u":"/kr/security/self-assessment","h":"#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated","p":2174},{"i":2251,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --disable-admission-plugins parameter to ensure it does not include NamespaceLifecycle. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)","u":"/kr/security/self-assessment","h":"#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated","p":2174},{"i":2253,"t":"Result: pass Remediation: Follow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to a value that includes NodeRestriction. --enable-admission-plugins=...,NodeRestriction,... Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'NodeRestriction' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)","u":"/kr/security/self-assessment","h":"#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated","p":2174},{"i":2255,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and either remove the --secure-port parameter or set it to a different (non-zero) desired port. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port' Expected Result: '--secure-port' is greater than 0 OR '--secure-port' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)","u":"/kr/security/self-assessment","h":"#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated","p":2174},{"i":2257,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling' Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.18 Ensure that the --profiling argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#1218-ensure-that-the---profiling-argument-is-set-to-false-automated","p":2174},{"i":2259,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-path parameter to a suitable path and file where you would like audit logs to be written, for example, --audit-log-path=/var/log/apiserver/audit.log","s":"1.2.19 Ensure that the --audit-log-path argument is set (Automated)","u":"/kr/security/self-assessment","h":"#1219-ensure-that-the---audit-log-path-argument-is-set-automated","p":2174},{"i":2261,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxage parameter to 30 or as an appropriate number of days, for example, --audit-log-maxage=30","s":"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated","p":2174},{"i":2263,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate value. For example, --audit-log-maxbackup=10","s":"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated","p":2174},{"i":2265,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB. For example, to set it as 100 MB, --audit-log-maxsize=100","s":"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated","p":2174},{"i":2267,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --service-account-lookup=true Alternatively, you can delete the --service-account-lookup parameter from this file so that the default takes effect. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--service-account-lookup' is not present OR '--service-account-lookup' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated","p":2174},{"i":2269,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --service-account-key-file parameter to the public key file for service accounts. For example, --service-account-key-file=<filename>.","s":"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated","p":2174},{"i":2271,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the etcd certificate and key file parameters. --etcd-certfile=<path/to/client-certificate-file> --etcd-keyfile=<path/to/client-key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 1.2.29 Expected Result: '--etcd-certfile' is present AND '--etcd-keyfile' is present Returned Value: --etcd-certfile AND --etcd-keyfile","s":"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated","p":2174},{"i":2273,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection on the apiserver. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the TLS certificate and private key file parameters. --tls-cert-file=<path/to/tls-certificate-file> --tls-private-key-file=<path/to/tls-key-file> Audit: journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2 Expected Result: '--tls-cert-file' is present AND '--tls-private-key-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated","p":2174},{"i":2275,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection on the apiserver. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the client certificate authority file. --client-ca-file=<path/to/client-ca-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file' Expected Result: '--client-ca-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2277,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the etcd certificate authority file parameter. --etcd-cafile=<path/to/ca-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile' Expected Result: '--etcd-cafile' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated","p":2174},{"i":2279,"t":"Result: warn Remediation: Follow the Kubernetes documentation and configure a EncryptionConfig file. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --encryption-provider-config parameter to the path of that file. For example, --encryption-provider-config=</path/to/EncryptionConfig/File> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'","s":"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)","u":"/kr/security/self-assessment","h":"#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual","p":2174},{"i":2281,"t":"Result: warn Remediation: Follow the Kubernetes documentation and configure a EncryptionConfig file. In this file, choose aescbc, kms or secretbox as the encryption provider. Audit: grep aescbc /path/to/encryption-config.json","s":"1.2.31 Ensure that encryption providers are appropriately configured (Manual)","u":"/kr/security/self-assessment","h":"#1231-ensure-that-encryption-providers-are-appropriately-configured-manual","p":2174},{"i":2283,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384 Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'","s":"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)","u":"/kr/security/self-assessment","h":"#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual","p":2174},{"i":2286,"t":"Result: warn Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold, for example, --terminated-pod-gc-threshold=10 Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'","s":"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)","u":"/kr/security/self-assessment","h":"#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual","p":2174},{"i":2288,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling' Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.2 Ensure that the --profiling argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#132-ensure-that-the---profiling-argument-is-set-to-false-automated","p":2174},{"i":2290,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node to set the below parameter. --use-service-account-credentials=true Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials' Expected Result: '--use-service-account-credentials' is not equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated","p":2174},{"i":2292,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --service-account-private-key-file parameter to the private key file for service accounts. For example, --service-account-private-key-file=<filename>. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file' Expected Result: '--service-account-private-key-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2294,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --root-ca-file parameter to the certificate bundle file`. --root-ca-file=<path/to/file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file' Expected Result: '--root-ca-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2296,"t":"Result: Not Applicable Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true. --feature-gates=RotateKubeletServerCertificate=true","s":"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated","p":2174},{"i":2298,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and ensure the correct value for the --bind-address parameter Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--bind-address' is present OR '--bind-address' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/kr/security/self-assessment","h":"#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":2174},{"i":2301,"t":"Result: pass Remediation: Edit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.4.1 Ensure that the --profiling argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#141-ensure-that-the---profiling-argument-is-set-to-false-automated","p":2174},{"i":2303,"t":"Result: pass Remediation: Edit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml on the control plane node and ensure the correct value for the --bind-address parameter Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address' Expected Result: '--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/kr/security/self-assessment","h":"#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":2174},{"i":2306,"t":"Result: pass Remediation: Follow the etcd service documentation and configure TLS encryption. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameters. --cert-file=</path/to/ca-file> --key-file=</path/to/key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.1 Expected Result: 'cert-file' is present AND 'key-file' is present Returned Value: cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file","s":"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated","p":2174},{"i":2308,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --client-cert-auth=\"true\" Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.2 Expected Result: '--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true' Returned Value: --client-cert-auth=true client-cert-auth: true --client-cert-auth=true","s":"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated","p":2174},{"i":2310,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and either remove the --auto-tls parameter or set it to false. --auto-tls=false Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.3 Expected Result: 'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present Returned Value: error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory","s":"2.3 Ensure that the --auto-tls argument is not set to true (Automated)","u":"/kr/security/self-assessment","h":"#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated","p":2174},{"i":2312,"t":"Result: pass Remediation: Follow the etcd service documentation and configure peer TLS encryption as appropriate for your etcd cluster. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameters. --peer-client-file=</path/to/peer-cert-file> --peer-key-file=</path/to/peer-key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.4 Expected Result: 'cert-file' is present AND 'key-file' is present Returned Value: peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file","s":"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated","p":2174},{"i":2314,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --peer-client-cert-auth=true Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.5 Expected Result: '--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true' Returned Value: --client-cert-auth=true client-cert-auth: true --client-cert-auth=true","s":"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated","p":2174},{"i":2316,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and either remove the --peer-auto-tls parameter or set it to false. --peer-auto-tls=false Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.6 Expected Result: '--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false' Returned Value: --peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false","s":"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)","u":"/kr/security/self-assessment","h":"#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated","p":2174},{"i":2318,"t":"Result: pass Remediation: [Manual test] Follow the etcd documentation and create a dedicated certificate authority setup for the etcd service. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --trusted-ca-file=</path/to/ca-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.7 Expected Result: 'trusted-ca-file' is present Returned Value: --trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file","s":"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)","u":"/kr/security/self-assessment","h":"#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual","p":2174},{"i":2321,"t":"Result: warn Remediation: Alternative mechanisms provided by Kubernetes such as the use of OIDC should be implemented in place of client certificates.","s":"3.1.1 Client certificate authentication should not be used for users (Manual)","u":"/kr/security/self-assessment","h":"#311-client-certificate-authentication-should-not-be-used-for-users-manual","p":2174},{"i":2324,"t":"Result: warn Remediation: Create an audit policy file for your cluster. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'","s":"3.2.1 Ensure that a minimal audit policy is created (Manual)","u":"/kr/security/self-assessment","h":"#321-ensure-that-a-minimal-audit-policy-is-created-manual","p":2174},{"i":2326,"t":"Result: warn Remediation: Review the audit policy provided for the cluster and ensure that it covers at least the following areas, Access to Secrets managed by the cluster. Care should be taken to only log Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in order to avoid risk of logging sensitive data. Modification of Pod and Deployment objects. Use of pods/exec, pods/portforward, pods/proxy and services/proxy. For most requests, minimally logging at the Metadata level is recommended (the most basic level of logging).","s":"3.2.2 Ensure that the audit policy covers key security concerns (Manual)","u":"/kr/security/self-assessment","h":"#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual","p":2174},{"i":2329,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf","s":"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2331,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf","s":"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2333,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Audit: stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Expected Result: 'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present Returned Value: 644 644","s":"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2335,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi' Expected Result: 'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present Returned Value: root:root root:root","s":"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)","u":"/kr/security/self-assessment","h":"#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual","p":2174},{"i":2337,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig Audit: stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig Expected Result: '644' is equal to '644' Returned Value: 644 644","s":"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":2174},{"i":2339,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig Audit: stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root root:root","s":"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2341,"t":"Result: pass Remediation: Run the following command to modify the file permissions of the --client-ca-file: chmod 644 <filename> Audit: stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt Expected Result: '644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present Returned Value: 644 600","s":"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)","u":"/kr/security/self-assessment","h":"#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual","p":2174},{"i":2343,"t":"Result: pass Remediation: Run the following command to modify the ownership of the --client-ca-file: chown root:root <filename>. Audit: stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root root:root","s":"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)","u":"/kr/security/self-assessment","h":"#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual","p":2174},{"i":2345,"t":"Result: Not Applicable Remediation: Run the following command (using the config file location identified in the Audit step) chmod 644 /var/lib/kubelet/config.yaml","s":"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)","u":"/kr/security/self-assessment","h":"#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated","p":2174},{"i":2347,"t":"Result: Not Applicable Remediation: Run the following command (using the config file location identified in the Audit step) chown root:root /var/lib/kubelet/config.yaml","s":"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)","u":"/kr/security/self-assessment","h":"#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated","p":2174},{"i":2350,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authentication: anonymous: enabled to false. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --anonymous-auth=false Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"anonymous-auth\" | grep -v grep; else echo \"--anonymous-auth=false\"; fi' Expected Result: '--anonymous-auth' is equal to 'false' Returned Value: --anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)","u":"/kr/security/self-assessment","h":"#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated","p":2174},{"i":2352,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authorization.mode to Webhook. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_AUTHZ_ARGS variable. --authorization-mode=Webhook Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"authorization-mode\" | grep -v grep; else echo \"--authorization-mode=Webhook\"; fi' Expected Result: '--authorization-mode' does not have 'AlwaysAllow' Returned Value: --authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/kr/security/self-assessment","h":"#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":2174},{"i":2354,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authentication.x509.clientCAFile to the location of the client CA file. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_AUTHZ_ARGS variable. --client-ca-file=<path/to/client-ca-file> Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"client-ca-file\" | grep -v grep; else echo \"--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt\"; fi' Expected Result: '--client-ca-file' is present Returned Value: --client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/kr/security/self-assessment","h":"#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":2174},{"i":2356,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set readOnlyPort to 0. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --read-only-port=0 Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port' Expected Result: '--read-only-port' is equal to '0' OR '--read-only-port' is not present Returned Value: Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time=\"2022-09-13T13:26:50Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:44Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\"","s":"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)","u":"/kr/security/self-assessment","h":"#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual","p":2174},{"i":2358,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set streamingConnectionIdleTimeout to a value other than 0. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --streaming-connection-idle-timeout=5m Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'","s":"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)","u":"/kr/security/self-assessment","h":"#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual","p":2174},{"i":2360,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to set protectKernelDefaults to true. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --protect-kernel-defaults=true Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated","p":2174},{"i":2362,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to set makeIPTablesUtilChains to true. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove the --make-iptables-util-chains argument from the KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)","u":"/kr/security/self-assessment","h":"#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated","p":2174},{"i":2364,"t":"Result: Not Applicable Remediation: Edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove the --hostname-override argument from the KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.8 Ensure that the --hostname-override argument is not set (Manual)","u":"/kr/security/self-assessment","h":"#428-ensure-that-the---hostname-override-argument-is-not-set-manual","p":2174},{"i":2366,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set eventRecordQPS to an appropriate level. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/ps -fC containerd","s":"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)","u":"/kr/security/self-assessment","h":"#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual","p":2174},{"i":2368,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set tlsCertFile to the location of the certificate file to use to identify this Kubelet, and tlsPrivateKeyFile to the location of the corresponding private key file. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameters in KUBELET_CERTIFICATE_ARGS variable. --tls-cert-file=<path/to/tls-certificate-file> --tls-private-key-file=<path/to/tls-key-file> Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 Expected Result: '--tls-cert-file' is present AND '--tls-private-key-file' is present Returned Value: Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time=\"2022-09-13T13:26:50Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:44Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\"","s":"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)","u":"/kr/security/self-assessment","h":"#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual","p":2174},{"i":2370,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to add the line rotateCertificates to true or remove it altogether to use the default value. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)","u":"/kr/security/self-assessment","h":"#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated","p":2174},{"i":2372,"t":"Result: Not Applicable Remediation: Edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable. --feature-gates=RotateKubeletServerCertificate=true Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)","u":"/kr/security/self-assessment","h":"#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual","p":2174},{"i":2374,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set TLSCipherSuites to TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 or to a subset of these values. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the --tls-cipher-suites parameter as follows, or to a subset of these values. --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/ps -fC containerd","s":"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)","u":"/kr/security/self-assessment","h":"#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual","p":2174},{"i":2377,"t":"Result: warn Remediation: Identify all clusterrolebindings to the cluster-admin role. Check if they are used and if they need this role or if they could use a role with fewer privileges. Where possible, first bind users to a lower privileged role and then remove the clusterrolebinding to the cluster-admin role : kubectl delete clusterrolebinding [name]","s":"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)","u":"/kr/security/self-assessment","h":"#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual","p":2174},{"i":2379,"t":"Result: warn Remediation: Where possible, remove get, list and watch access to Secret objects in the cluster.","s":"5.1.2 Minimize access to secrets (Manual)","u":"/kr/security/self-assessment","h":"#512-minimize-access-to-secrets-manual","p":2174},{"i":2381,"t":"Result: warn Remediation: Where possible replace any use of wildcards in clusterroles and roles with specific objects or actions.","s":"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)","u":"/kr/security/self-assessment","h":"#513-minimize-wildcard-use-in-roles-and-clusterroles-manual","p":2174},{"i":2383,"t":"Result: warn Remediation: Where possible, remove create access to pod objects in the cluster.","s":"5.1.4 Minimize access to create pods (Manual)","u":"/kr/security/self-assessment","h":"#514-minimize-access-to-create-pods-manual","p":2174},{"i":2385,"t":"Result: warn Remediation: Create explicit service accounts wherever a Kubernetes workload requires specific access to the Kubernetes API server. Modify the configuration of each default service account to include this value automountServiceAccountToken: false","s":"5.1.5 Ensure that default service accounts are not actively used. (Manual)","u":"/kr/security/self-assessment","h":"#515-ensure-that-default-service-accounts-are-not-actively-used-manual","p":2174},{"i":2387,"t":"Result: warn Remediation: Modify the definition of pods and service accounts which do not need to mount service account tokens to disable it.","s":"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)","u":"/kr/security/self-assessment","h":"#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual","p":2174},{"i":2389,"t":"Result: warn Remediation: Remove the system:masters group from all users in the cluster.","s":"5.1.7 Avoid use of system:masters group (Manual)","u":"/kr/security/self-assessment","h":"#517-avoid-use-of-systemmasters-group-manual","p":2174},{"i":2391,"t":"Result: warn Remediation: Where possible, remove the impersonate, bind and escalate rights from subjects.","s":"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)","u":"/kr/security/self-assessment","h":"#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual","p":2174},{"i":2394,"t":"Result: warn Remediation: Ensure that either Pod Security Admission or an external policy control system is in place for every namespace which contains user workloads.","s":"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)","u":"/kr/security/self-assessment","h":"#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual","p":2174},{"i":2396,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of privileged containers.","s":"5.2.2 Minimize the admission of privileged containers (Automated)","u":"/kr/security/self-assessment","h":"#522-minimize-the-admission-of-privileged-containers-automated","p":2174},{"i":2398,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostPID containers.","s":"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)","u":"/kr/security/self-assessment","h":"#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated","p":2174},{"i":2400,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostIPC containers.","s":"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)","u":"/kr/security/self-assessment","h":"#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated","p":2174},{"i":2402,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostNetwork containers.","s":"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)","u":"/kr/security/self-assessment","h":"#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated","p":2174},{"i":2404,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with .spec.allowPrivilegeEscalation set to true.","s":"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)","u":"/kr/security/self-assessment","h":"#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated","p":2174},{"i":2406,"t":"Result: warn Remediation: Create a policy for each namespace in the cluster, ensuring that either MustRunAsNonRoot or MustRunAs with the range of UIDs not including 0, is set.","s":"5.2.7 Minimize the admission of root containers (Automated)","u":"/kr/security/self-assessment","h":"#527-minimize-the-admission-of-root-containers-automated","p":2174},{"i":2408,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with the NET_RAW capability.","s":"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)","u":"/kr/security/self-assessment","h":"#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated","p":2174},{"i":2410,"t":"Result: warn Remediation: Ensure that allowedCapabilities is not present in policies for the cluster unless it is set to an empty array.","s":"5.2.9 Minimize the admission of containers with added capabilities (Automated)","u":"/kr/security/self-assessment","h":"#529-minimize-the-admission-of-containers-with-added-capabilities-automated","p":2174},{"i":2412,"t":"Result: warn Remediation: Review the use of capabilities in applications running on your cluster. Where a namespace contains applications which do not require any Linux capabilities to operate consider adding a PSP which forbids the admission of containers which do not drop all capabilities.","s":"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)","u":"/kr/security/self-assessment","h":"#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual","p":2174},{"i":2414,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers that have .securityContext.windowsOptions.hostProcess set to true.","s":"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)","u":"/kr/security/self-assessment","h":"#5211-minimize-the-admission-of-windows-hostprocess-containers-manual","p":2174},{"i":2416,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with hostPath volumes.","s":"5.2.12 Minimize the admission of HostPath volumes (Manual)","u":"/kr/security/self-assessment","h":"#5212-minimize-the-admission-of-hostpath-volumes-manual","p":2174},{"i":2418,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers which use hostPort sections.","s":"5.2.13 Minimize the admission of containers which use HostPorts (Manual)","u":"/kr/security/self-assessment","h":"#5213-minimize-the-admission-of-containers-which-use-hostports-manual","p":2174},{"i":2421,"t":"Result: warn Remediation: If the CNI plugin in use does not support network policies, consideration should be given to making use of a different plugin, or finding an alternate mechanism for restricting traffic in the Kubernetes cluster.","s":"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)","u":"/kr/security/self-assessment","h":"#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual","p":2174},{"i":2423,"t":"Result: warn Remediation: Follow the documentation and create NetworkPolicy objects as you need them.","s":"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)","u":"/kr/security/self-assessment","h":"#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual","p":2174},{"i":2426,"t":"Result: warn Remediation: If possible, rewrite application code to read Secrets from mounted secret files, rather than from environment variables.","s":"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)","u":"/kr/security/self-assessment","h":"#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual","p":2174},{"i":2428,"t":"Result: warn Remediation: Refer to the Secrets management options offered by your cloud provider or a third-party secrets management solution.","s":"5.4.2 Consider external secret storage (Manual)","u":"/kr/security/self-assessment","h":"#542-consider-external-secret-storage-manual","p":2174},{"i":2431,"t":"Result: warn Remediation: Follow the Kubernetes documentation and setup image provenance.","s":"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)","u":"/kr/security/self-assessment","h":"#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual","p":2174},{"i":2434,"t":"Result: warn Remediation: Follow the documentation and create namespaces for objects in your deployment as you need them.","s":"5.7.1 Create administrative boundaries between resources using namespaces (Manual)","u":"/kr/security/self-assessment","h":"#571-create-administrative-boundaries-between-resources-using-namespaces-manual","p":2174},{"i":2436,"t":"Result: warn Remediation: Use securityContext to enable the docker/default seccomp profile in your pod definitions. An example is as below: securityContext: seccompProfile: type: RuntimeDefault","s":"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)","u":"/kr/security/self-assessment","h":"#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual","p":2174},{"i":2438,"t":"Result: warn Remediation: Follow the Kubernetes documentation and apply SecurityContexts to your Pods. For a suggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker Containers.","s":"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)","u":"/kr/security/self-assessment","h":"#573-apply-securitycontext-to-your-pods-and-containers-manual","p":2174},{"i":2440,"t":"Result: warn Remediation: Ensure that namespaces are created to allow for appropriate segregation of Kubernetes resources and that all new resources are created in a specific namespace.","s":"5.7.4 The default namespace should not be used (Manual)","u":"/kr/security/self-assessment","h":"#574-the-default-namespace-should-not-be-used-manual","p":2174}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/1634",[0,1.517,1,7.638,2,6.937,3,7.638,4,3.113,5,6.937,6,7.974]],["t/1636",[0,1.533,7,0.688,8,3.082,9,4.739,10,3.082,11,3.803,12,1.761,13,4.739,14,2.068,15,2.696,16,2.119,17,2.36,18,1.336,19,2.933,20,3.49,21,2.807,22,1.586,23,4.046,24,3.632,25,3.262,26,2.471,27,2.512,28,2.75,29,3.082,30,3.803,31,3.167,32,3.004,33,4.739]],["t/1638",[0,1.519,6,6.392,7,0.801,34,3.075,35,4.465,36,4.064]],["t/1640",[7,0.631,37,3.715,38,5.899,39,6.231,40,3.179,41,3.379,42,4.031,43,1.787,44,1.41,45,3.284,46,3.896,47,5.972,48,4.353,49,1.774,50,3.871,51,3.664,52,4.183,53,2.056,54,1.78,55,3.46,56,3.607,57,4.031,58,4.549]],["t/1642",[45,2.612,46,3.871,54,1.775,59,2.472,60,3.227,61,3.692,62,2.362,63,3.35,64,4.239,65,5.076,66,4.157,67,5.863,68,5.863,69,6.332,70,5.599,71,4.75,72,5.863,73,2.186,74,5.863,75,3.937,76,5.863,77,5.38,78,4.239,79,4.631]],["t/1644",[43,1.844,45,2.767,49,1.832,54,1.685,60,3.418,62,2.473,80,3.337,81,3.261,82,4.009,83,6.211,84,5.326,85,4.721,86,6.211,87,4.49,88,5.326,89,3.643]],["t/1646",[45,3.071,59,2.906,60,3.793,62,2.276,90,4.098,91,5.584,92,3.19,93,6.324,94,6.104,95,6.582,96,4.886]],["t/1648",[15,3.279,19,4.85,20,5.771,26,3.005,31,3.851,43,1.121,45,2.06,49,1.113,59,3.013,60,2.545,62,2.155,69,6.056,73,2.127,78,3.344,80,2.485,81,2.429,97,1.604,98,3.552,99,4.244,100,4.741,101,4.244,102,4.85,103,5.569,104,2.515,105,2.884,106,5.393,107,3.567,108,5.644,109,4.885,110,4.417,111,4.885,112,3.054,113,5.569,114,4.885,115,1.883,116,4.026,117,4.885,118,6.006,119,2.883,120,2.474,121,4.885,122,2.677,123,2.677,124,4.625,125,4.885]],["t/1650",[26,4.679,40,2.146,45,2.533,49,1.734,54,1.259,59,2.398,60,3.129,62,2.222,69,4.491,73,1.693,126,2.919,127,4.491,128,4.031,129,2.986,130,3.694,131,6.378,132,7.608,133,4.876,134,4.922,135,6.096,136,7.202,137,4.342,138,7.085,139,4.031,140,6.006,141,3.506,142,5.207,143,5.43]],["t/1652",[27,5.636,28,4.889,45,2.297,54,1.671,59,3.182,60,2.838,62,2.444,69,6.569,80,2.771,81,2.708,97,1.553,105,2.081,144,3.982,145,3.511,146,4.077,147,4.466,148,4.422,149,6.683,150,5.447,151,5.447,152,5.447,153,7.207,154,4.422,155,3.013]],["t/1654",[45,3.764,60,3.634,62,2.219,105,3.187,139,5.599,156,5.303,157,5.954,158,2.84,159,4.346]],["t/1656",[26,4.201,44,1.546,45,2.881,49,1.556,60,3.559,131,5.726,135,4.987,160,6.906,161,6.176,162,5.107,163,4.701,164,6.688,165,5.934,166,6.466,167,5.755,168,5.239,169,4.675]],["t/1658",[27,5.281,45,3.005,49,1.925,60,3.712,62,1.895,69,5.327,80,3.624,81,3.541,82,3.153,170,6.744,171,1.646,172,3.757,173,7.632]],["t/1660",[0,1.058,7,0.713,34,2.072,40,1.905,41,2.313,44,1.206,49,1.215,50,3.501,51,2.508,97,1.703,102,6.773,105,2.037,106,7.42,174,4.928,175,3.891,176,4.819,177,6.667,178,3.511,179,3.891,180,3.804,181,4.137,182,5.046,183,1.952,184,1.718,185,1.513,186,4.63,187,5.33,188,6.288,189,6.288,190,4.63,191,2.847,192,3.332,193,5.046,194,3.389]],["t/1662",[7,0.342,15,1.356,17,2.996,19,3.184,20,2.937,26,3.492,27,3.839,28,2.314,31,1.592,40,1.208,41,1.893,43,1.001,44,0.765,45,1.426,46,1.263,49,1.399,50,2.535,53,0.666,54,1.65,59,3.247,61,1.204,62,2.426,63,1.092,64,1.382,65,4.187,66,1.356,67,1.912,68,1.912,70,1.826,71,1.549,72,1.912,73,1.731,74,1.912,75,1.284,76,1.912,77,1.754,78,2.314,79,1.51,80,1.027,81,1.004,82,2.257,83,1.912,84,1.64,85,1.986,86,1.912,87,1.382,88,2.745,89,1.121,90,1.137,91,2.593,92,0.885,93,1.754,94,1.693,95,1.826,96,1.356,97,1.384,98,2.672,99,1.754,100,2.413,101,1.754,102,2.468,103,2.835,104,1.04,105,2.347,106,2.745,107,1.474,108,3.261,109,2.02,110,1.826,111,2.02,112,1.263,113,2.835,114,2.02,115,0.778,116,2.535,117,2.02,118,3.057,119,1.467,120,1.259,121,2.02,122,1.107,123,1.107,124,1.912,125,2.02,126,0.982,127,1.51,128,1.356,129,1.004,130,1.242,131,2.835,132,3.381,133,1.64,134,3.299,135,3.723,136,3.201,137,2.911,139,2.927,140,2.02,141,1.558,142,2.314,143,1.826,144,2.052,145,1.662,146,1.93,147,2.114,148,1.64,149,3.656,150,2.02,151,2.02,152,2.02,153,4.611,154,1.64,155,2.59,156,2.15,157,2.413,158,1.151,159,1.762,160,2.835,161,1.826,162,1.51,163,1.93,164,2.745,165,2.937,166,1.912,167,3.047,168,1.549,169,1.382,171,1.008,184,0.651,185,0.573,195,2.164,196,2.164,197,2.164,198,1.826,199,1.027,200,1.693,201,2.02,202,3.057,203,1.912,204,2.164,205,2.382,206,7.615,207,4.431,208,1.169,209,2.114,210,1.004,211,2.164,212,2.164,213,6.082,214,2.164,215,1.912,216,3.381,217,2.164,218,6.579,219,3.201,220,3.622,221,3.789]],["t/1664",[0,1.518,7,0.828,222,5.168]],["t/1667",[0,1.525,7,0.765,35,4.146,223,3.736,224,4.146]],["t/1669",[0,1.526,7,0.855,225,6.593,226,6.593]],["t/1671",[0,1.53,7,0.762,82,2.611,227,6.32]],["t/1673",[0,1.532,7,0.824,105,2.169,144,3.146,228,3.08,229,4.609,230,4.609,231,7.887,232,4.609,233,4.609,234,4.609,235,2.484,236,4.609,237,4.609,238,4.609,239,2.921,240,4.609,241,8.656,242,4.609,243,4.609,244,4.609,245,4.609,246,4.609,247,4.609]],["t/1675",[0,1.464,7,0.638,15,2.366,21,1.483,23,4.878,26,1.306,29,2.704,31,1.673,43,1.037,44,1.321,63,3.158,87,1.453,98,1.659,100,1.515,105,1.347,116,2.247,123,1.163,126,1.032,131,1.78,134,3.776,135,5.29,136,5.526,137,1.212,149,1.78,158,2.144,161,3.187,183,0.778,191,1.134,248,4.158,249,2.504,250,2.204,251,2.504,252,2.504,253,2.366,254,1.515,255,1.425,256,2.516,257,0.664,258,1.713,259,1.92,260,3.062,261,1.148,262,2.01,263,2.161,264,4.279,265,5.331,266,2.504,267,5.637,268,6.207,269,2.704,270,4.158,271,2.504,272,1.021,273,2.504,274,2.504,275,1.587,276,5.331,277,2.504,278,2.274,279,2.504,280,2.504,281,4.158,282,5.331,283,2.504,284,1.92,285,0.904,286,2.504,287,2.504,288,4.158,289,9.307,290,8.813,291,4.149,292,4.158,293,2.504,294,5.331,295,5.331,296,5.331,297,5.331,298,5.331,299,5.331,300,2.504,301,2.274,302,2.504,303,2.504,304,2.504,305,2.504,306,2.504,307,4.158,308,4.158,309,4.158,310,4.158,311,4.158,312,4.158,313,2.504,314,6.886,315,2.504,316,2.504,317,2.504,318,2.504,319,2.504,320,2.504,321,2.504,322,2.504,323,4.158,324,4.158,325,4.158,326,4.158,327,4.158,328,4.158,329,2.504,330,2.504,331,2.504,332,2.504,333,2.504,334,2.504,335,2.504,336,2.504,337,2.504,338,2.504,339,2.504,340,2.504,341,2.274,342,2.504,343,4.158,344,4.158,345,4.158,346,4.158,347,4.158,348,4.158,349,2.504,350,2.504,351,2.504,352,2.504,353,2.504]],["t/1677",[0,1.512,7,0.791,52,3.503,199,2.655,250,3.262,256,4.956,354,10.508,355,2.522,356,6.156,357,6.156,358,6.156,359,6.156,360,4.237,361,6.156,362,4.94,363,6.156,364,5.218,365,6.156,366,6.156,367,6.156,368,4.94,369,2.686,370,6.156,371,2.752,372,6.156,373,6.156]],["t/1679",[0,1.528,7,0.564,360,4.521,374,4.838,375,6.569,376,8.55,377,6.861,378,8.55,379,5.966]],["t/1681",[0,1.523,7,0.689,43,0.767,59,1.334,62,1.345,98,3.436,123,1.832,126,3.305,127,2.499,137,1.908,156,2.125,221,2.904,250,2.09,253,2.244,257,1.045,258,1.625,272,1.607,374,2.904,380,10.274,381,3.943,382,3.343,383,3.581,384,5.965,385,3.581,386,3.943,387,5.965,388,3.943,389,3.943,390,3.581,391,1.41,392,7.194,393,3.461,394,3.943,395,3.461,396,3.343,397,3.461,398,3.943,399,2.386,400,5.965,401,7.194,402,4.239,403,2.288,404,3.943,405,3.943,406,3.943,407,3.943,408,1.881,409,3.022,410,3.943,411,3.343,412,3.943,413,3.943]],["t/1683",[0,1.535,28,3.36,41,2.131,97,0.901,105,2.547,129,2.441,191,2.622,355,1.783]],["t/1685",[0,1.527,7,0.643,414,6.804]],["t/1687",[0,1.535,7,0.83,25,6.388,399,4.122,415,3.618,416,4.72,417,4.72,418,3.476,419,4.72,420,6.813,421,4.72,422,2.992,423,4.72]],["t/1689",[0,1.523,7,0.887,25,5.643,43,1.369,44,0.947,105,1.6,115,1.614,160,5.002,191,2.236,235,3.793,257,1.309,422,4.461,424,4.939,425,4.939,426,3.963,427,4.939,428,4.939,429,4.939,430,9.446,431,4.939,432,4.939,433,4.485,434,3.557,435,3.203,436,2.81,437,2.758,438,3.637,439,4.939,440,3.399,441,4.939,442,4.939,443,4.939]],["t/1691",[0,1.531,7,0.707,59,1.686,60,2.2,80,2.148,81,2.099,115,1.627,160,3.54,235,2.684,444,4.98,445,9.477,446,4.98,447,4.98,448,4.98,449,4.98,450,4.98,451,4.98,452,3.157,453,4.98,454,4.98,455,3.238,456,4.98,457,7.08,458,4.98,459,2.517]],["t/1693",[0,1.474,7,0.834,160,6.906,260,5.934,414,7.318,434,4.072,435,3.796,460,3.084,461,5.726,462,3.084]],["t/1695",[0,1.537,7,0.55,41,1.595,97,0.997,102,3.963,105,1.405,106,5.24,191,1.963,463,4.336,464,4.336,465,3.324,466,4.336,467,4.336,468,1.827,469,4.336,470,4.336]],["t/1697",[0,1.522,7,0.729,41,2.39,222,4.224,235,4.574,250,3.443,253,3.696,254,3.931,255,3.696,460,3.249,462,3.249,471,5.841,472,5.9,473,6.497,474,6.497,475,5.9]],["t/1700",[0,1.526,7,0.776,32,5.069,163,3.869,164,5.503,165,5.889,360,4.086,369,2.591,476,4.373,477,5.938,478,5.938,479,5.938,480,3.445,481,5.393,482,4.22,483,5.393,484,5.393,485,5.393,486,5.393]],["t/1702",[0,1.517,18,1.593,120,1.785,129,3.259,174,4.389,257,1.498,434,3.908,437,3.156,438,4.162,452,3.583,487,7.733,488,8.034,489,9.478,490,7.472,491,5.652,492,7.733,493,5.652,494,5.652,495,8.815,496,4.671,497,3.89,498,5.652,499,5.652,500,5.133]],["t/1704",[0,1.522,18,1.862,120,2.086,129,2.784,257,1.751,452,4.188,488,5.6,501,6.606,502,10.456,503,3.927,504,6.606,505,5.6,506,5.6]],["t/1706",[0,1.517,7,0.526,25,6.319,32,3.882,222,5.308,235,3.3,256,3.705,272,2.496,360,4.214,382,5.191,507,6.124,508,8.163,509,8.163,510,6.124,511,6.124,512,6.124,513,6.124,514,5.191,515,6.124,516,6.124,517,6.124,518,6.124,519,6.124,520,4.51,521,5.561,522,3.095,523,6.124]],["t/1708",[0,1.53,7,0.888,43,1.684,44,1.284,92,1.712,98,1.839,123,3.111,135,6.126,256,4.052,440,3.172,524,8.656,525,3.907,526,3.276,527,2.921,528,4.609,529,4.609,530,4.609,531,3.276,532,2.729,533,3.699,534,4.609,535,4.186]],["t/1710",[0,1.527,7,0.483,113,7.273,126,2.318,272,3.141,369,2.455,383,7,480,3.264,536,5.625,537,5.625,538,7,539,5.625,540,3.212,541,7.708,542,2.03,543,5.625,544,5.625,545,5.625,546,5.625]],["t/1712",[0,1.527,7,0.85,90,3,91,4.088,113,7.778,459,3.178,547,6.288,548,6.288]],["t/1715",[0,1.536,7,0.554,216,3.717,549,4.385,550,4.385,551,4.385,552,4.385,553,4.385,554,4.385,555,4.385,556,3.361,557,8.184,558,4.385,559,3.229,560,4.385,561,4.385,562,4.385,563,6.457]],["t/1717",[0,1.51,7,0.766,43,1.127,97,0.901,98,3.136,116,2.441,126,2.386,137,2.802,156,3.121,183,1.798,228,3.87,257,1.535,393,3.36,395,3.36,397,3.36,399,3.504,403,3.36,418,4.265,557,8.107,564,7.862,565,5.791,566,7.862,567,7.862,568,7.862,569,7.862,570,3.234,571,5.791,572,5.791,573,5.791,574,4.265,575,5.791,576,5.791,577,5.791,578,5.791,579,4.909]],["t/1719",[0,1.468,7,0.564,21,5.962,65,5.037,73,1.57,174,3.271,258,3.523,263,2.487,272,3.485,285,3.086,580,6.861,581,6.974,582,5.569,583,6.569,584,4.39,585,6.076,586,8.55,587,7.248,588,8.55,589,6.569]],["t/1721",[0,1.533,32,4.754,62,1.417,158,1.814,409,6.365,590,9.301,591,6.284,592,6.284,593,4.227,594,4.227,595,4.227,596,4.227,597,2.453,598,6.284,599,4.227,600,4.227,601,4.227,602,7.5,603,6.284,604,4.227,605,4.227,606,4.227]],["t/1723",[0,1.53,7,0.957,22,1.277,26,2.869,27,1.881,41,2.025,43,1.07,52,3.835,60,1.568,82,2.065,105,1.15,120,1.738,126,1.463,127,2.25,131,2.523,154,2.443,158,1.588,159,1.568,172,2.461,183,1.102,191,2.492,275,2.25,355,1.695,496,1.881,532,3.259,607,1.822,608,2.172,609,3.009,610,2.849,611,4.416,612,4.665,613,3.911,614,2.614,615,2.701,616,2.172,617,2.372]],["t/1725",[0,1.534,7,0.867,28,3.445,41,2.185,43,1.155,105,1.923]],["t/1727",[0,1.525,7,0.86,618,5.059,619,2.653]],["t/1729",[0,1.529,7,0.742,34,2.849,618,4.598,619,2.412,620,5.35]],["t/1731",[0,1.524,34,2.551,619,2.793]],["t/1733",[0,1.538,7,0.632,41,1.506,97,0.637,100,4.946,158,1.182,263,1.191,621,4.094,622,4.094,623,4.094,624,6.136,625,4.094,626,4.094,627,4.094]],["t/1736",[7,0.838,43,1.578,48,4.805,104,3.541,119,2.985,178,4.53,225,7.368,226,7.368,616,3.852,628,8.272,629,6.511,630,7.368,631,7.479,632,6.511,633,4.23,634,6.878]],["t/1738",[0,1.188,7,0.952,18,1.782,22,2.165,43,1.815,46,3.35,49,1.221,98,2.522,104,3.638,105,2.048,119,2.326,158,1.825,159,3.682,224,6.393,355,1.947,434,4.214,468,2.664,496,3.35,597,3.668,607,3.244,608,2.495,616,4.325,619,2.282,635,5.073,636,6.691,637,5.359,638,3.597,639,6.322,640,1.915,641,4.493]],["t/1740",[7,0.759,22,0.971,34,2.722,35,2.477,43,1.607,48,3.692,49,1.707,51,1.668,55,1.969,56,2.052,57,2.293,59,1.415,64,2.426,65,1.969,78,2.426,82,1.569,90,1.995,97,0.97,104,2.72,122,1.943,127,2.651,147,2.216,171,0.819,178,2.335,181,2.082,183,2.314,223,3.655,224,4.414,263,1.217,369,1.825,476,3.08,480,2.426,514,3.545,584,4.98,615,3.059,616,4.339,619,1.509,629,3.356,630,3.798,632,3.356,633,2.18,634,3.545,642,2.091,643,3.798,644,3.547,645,3.798,646,3.858,647,3.205,648,2.753,649,4.591,650,4.778,651,2.18,652,4.182,653,4.182,654,3.399,655,2.878,656,6.234,657,4.591,658,3.798,659,3.798,660,4.182,661,4.182,662,4.182,663,4.182,664,2.972,665,4.182,666,2.719,667,3.798,668,2.216,669,2.426,670,3.08,671,2.114,672,4.182,673,3.798,674,3.545,675,2.023,676,3.545,677,3.798,678,3.798,679,3.798,680,4.182,681,2.53,682,2.146,683,3.545,684,1.783,685,3.798,686,2.379,687,3.798,688,3.798,689,3.798,690,3.798]],["t/1742",[0,1.143,7,0.635,17,2.312,18,0.808,42,2.546,43,1.139,44,1.123,49,1.734,54,1.639,73,0.685,82,1.075,104,2.938,119,1.708,130,1.494,139,4.746,141,1.119,171,1.147,176,4.487,178,2.593,183,1.442,185,1.78,190,4.311,208,2.279,210,1.957,223,3.739,224,1.697,250,1.518,272,1.168,275,1.816,285,2.67,291,1.349,355,1.43,362,2.299,371,3.308,426,2.299,440,1.972,533,2.299,580,2.299,616,3.916,629,2.299,633,1.494,640,2.241,642,1.557,645,2.602,646,4.902,648,2.586,649,2.11,650,2.196,651,3.052,654,2.549,664,2.036,667,2.602,675,1.386,684,1.221,691,1.544,692,4.029,693,1.571,694,2.602,695,4.564,696,2.865,697,1.518,698,2.865,699,3.936,700,3.726,701,2.196,702,2.865,703,5.097,704,6.88,705,4.764,706,2.602,707,2.299,708,2.026,709,2.546,710,4.311,711,5.448,712,3.103,713,2.383,714,2.11,715,4.643,716,4.643,717,1.194,718,2.036,719,2.602,720,4.217,721,2.865,722,4.217,723,4.643,724,2.865,725,2.865,726,2.865,727,2.501,728,1.494,729,2.196,730,2.602,731,2.602,732,2.196,733,2.865,734,2.865,735,2.865,736,2.865,737,2.602,738,2.429,739,1.972,740,2.036,741,2.602,742,2.036,743,2.602]],["t/1744",[0,1.17,7,0.658,14,1.339,18,1.728,19,3.036,40,0.929,41,1.128,43,0.954,44,0.941,49,1.893,50,2.067,54,1.244,62,1.106,65,1.444,71,1.994,73,0.733,78,2.846,80,1.323,81,1.293,82,3.064,90,2.341,97,1.192,104,1.339,139,4.358,171,0.961,181,1.527,183,1.903,185,1.475,208,3.758,210,2.067,223,3.683,224,5.276,235,1.653,250,1.626,257,0.813,261,3.211,272,1.25,275,1.944,285,1.107,362,2.462,411,2.6,426,2.462,440,2.111,533,3.937,584,5.73,616,3.626,634,2.6,635,2.462,640,0.929,642,1.645,646,5.055,648,1.355,649,2.259,651,1.599,654,2.815,655,2.111,664,4.356,668,2.6,671,1.55,675,3.705,692,3.376,693,1.682,695,3.388,699,4.158,700,2.462,703,4.329,704,2.351,705,1.682,710,2.259,717,2.044,727,3.035,729,2.351,730,2.786,737,2.786,738,2.6,739,2.111,744,3.937,745,4.919,746,2.279,747,2.351,748,3.278,749,3.937,750,5.567,751,2.6,752,2.6,753,3.937,754,1.69,755,2.517,756,4.455,757,1.898,758,2.462,759,1.816,760,3.067,761,5.567,762,4.158,763,2.6,764,3.067,765,3.067,766,2.6,767,2.786,768,3.067,769,2.786,770,1.067,771,1.097,772,2.351,773,2.351,774,1.505,775,2.111]],["t/1746",[0,0.99,7,0.71,14,1.378,18,0.89,19,3.107,40,0.957,41,1.162,43,0.977,44,0.606,49,1.739,50,1.331,54,0.892,55,1.487,59,2.8,62,1.409,65,1.487,71,2.053,78,2.913,82,3.104,90,1.507,97,1.288,104,1.378,126,1.301,171,0.983,183,1.94,185,1.504,208,3.067,223,3.836,224,4.9,235,1.702,250,1.674,257,0.837,261,3.265,272,1.287,275,2.002,285,2.255,362,2.534,411,2.677,426,2.534,580,2.534,584,6.198,616,3.897,635,2.534,640,1.521,646,3.107,647,5.956,648,4.198,649,2.326,651,1.647,654,2.153,655,2.173,668,2.661,670,2.326,671,2.537,675,4.356,684,1.346,693,1.732,694,2.868,695,3.759,699,4.256,700,2.534,703,2.661,704,2.421,705,2.753,710,2.326,720,5.675,727,2.322,738,2.677,739,2.173,744,4.029,745,4.029,746,2.332,747,2.421,748,3.355,750,2.868,753,2.534,754,1.73,755,3.207,756,4.56,757,3.868,770,1.098,771,1.129,772,2.421,773,2.421,774,1.55,775,2.173,776,2.326,777,7.77,778,4.441,779,2.002,780,2.677,781,2.534,782,2.002,783,3.158,784,4.56,785,3.158,786,3.158]],["t/1748",[0,1.316,7,0.651,14,1.879,18,2.639,19,2.664,41,1.584,43,0.837,44,0.826,49,1.464,54,1.347,55,2.026,65,2.026,71,2.799,78,3.695,82,2.844,90,2.054,101,3.17,141,1.682,171,1.248,183,2.354,185,1.036,208,3.126,223,2.94,224,5.545,257,1.141,261,3.476,272,1.754,275,2.729,285,1.554,369,2.779,391,1.539,440,2.962,584,5.598,616,2.514,640,1.304,646,3.942,648,1.901,654,3.561,671,3.219,675,3.081,705,3.493,710,3.17,717,3.726,719,3.909,727,1.599,729,3.299,739,2.962,742,3.059,744,3.455,745,3.455,746,2,747,3.299,748,4.256,761,3.909,766,5.399,767,3.909,769,3.909,770,1.497,772,3.299,778,4.527,787,7.581,788,4.305,789,2.449,790,2.962,791,4.305,792,2.549,793,8.378,794,4.305,795,3.299,796,6.369,797,4.305,798,4.305,799,3.059,800,6.369,801,4.305,802,2.876,803,3.17,804,3.649,805,1.554]],["t/1750",[0,1.257,7,0.847,15,1.64,35,0.967,36,2.869,37,0.825,38,1.311,39,1.384,40,1.171,43,1.143,44,1.021,45,1.904,46,1.527,48,0.967,49,0.315,50,2.847,53,0.457,54,0.512,57,0.896,59,2.406,60,1.708,62,1.201,63,1.321,64,1.672,65,1.357,73,0.924,75,0.88,79,1.035,80,0.704,81,0.688,89,0.769,90,3.223,91,2.515,93,1.203,94,2.048,98,2.345,104,2.771,115,0.942,122,1.339,123,0.759,128,2.654,129,1.63,130,0.852,133,2.662,134,2.558,139,0.929,153,1.252,171,1.787,172,3.021,178,1.609,179,1.011,181,0.813,182,3.104,183,1.201,184,0.446,185,0.393,192,0.866,208,2.613,210,1.63,223,1.011,261,1.321,263,0.838,285,1.396,355,3.219,369,0.713,403,0.948,434,1.955,480,0.948,482,1.161,503,0.673,540,1.201,607,1.479,613,7.601,614,7.806,616,0.645,619,1.04,633,0.852,635,5.421,636,2.313,638,0.929,640,0.495,651,0.852,654,2.557,655,1.983,668,0.866,669,2.244,675,1.871,681,1.744,682,2.394,684,1.649,705,0.896,727,0.607,739,1.124,746,0.759,752,0.866,778,2.048,789,0.929,790,2.662,792,0.967,795,1.252,802,1.091,806,1.311,807,3.664,808,6.095,809,1.633,810,1.633,811,2.443,812,1.633,813,1.633,814,1.633,815,1.161,816,2.313,817,0.929,818,1.011,819,6.373,820,2.882,821,0.557,822,2.882,823,3.955,824,3.278,825,3.029,826,2.617,827,1.633,828,1.633,829,1.035,830,1.633,831,2.443,832,1.384,833,1.384,834,4.717,835,3.744,836,1.203,837,1.384,838,1.384,839,1.011,840,1.311,841,1.384,842,1.384,843,3.512,844,1.091,845,3.868,846,0.696,847,1.483,848,1.457,849,1.633,850,1.035,851,1.035,852,2.313,853,1.124,854,3.641,855,4.983,856,2.443,857,1.384,858,3.868,859,5.878,860,1.062,861,1.483,862,1.633,863,1.062,864,1.633,865,1.124,866,1.633,867,1.311,868,5.324,869,1.483,870,1.483,871,1.633,872,1.633,873,1.633,874,1.633,875,1.311,876,1.483,877,1.633,878,0.568,879,1.311,880,1.011,881,1.161]],["t/1752",[7,0.743,55,4.073,56,4.245,57,4.745,115,2.827,172,4.533,615,4.975,682,4.44,882,6.631]],["t/1754",[0,0.897,7,0.605,22,1.635,52,4.007,115,2.301,126,2.902,168,4.579,171,1.379,172,4.392,179,4.358,224,5.295,369,3.073,480,4.086,490,5.97,615,5.234,633,3.672,640,2.708,643,6.396,654,3.385,675,3.407,684,3.002,825,4.007,883,7.042,884,5.398,885,6.396,886,5.652,887,5.97,888,6.396,889,7.042,890,7.042,891,7.042,892,7.042]],["t/1756",[0,1.212,7,0.931,18,2.099,36,2.885,42,1.878,43,1.801,44,1.264,45,1.914,49,1.439,97,0.533,104,3.25,115,1.749,130,1.786,147,1.815,171,1.459,172,4.671,178,2.989,180,3.986,183,1.064,192,1.815,224,5.073,235,2.885,261,4.621,289,4.861,291,3.506,434,2.705,471,3.684,497,2.357,614,5.485,615,5.014,620,2.12,642,1.149,654,1.844,681,3.239,682,2.747,684,1.46,743,4.861,748,3.577,752,4.539,789,1.949,792,2.028,817,3.046,818,2.12,823,8.252,824,6.314,836,3.942,846,3.444,881,3.804,886,7.432,893,5.709,894,8.41,895,4.861,896,4.296,897,4.296,898,4.103,899,5.353,900,1.949,901,1.913,902,2.904,903,2.749,904,3.111]],["t/1758",[0,1.072,7,0.92,18,2.201,43,1.727,44,1.336,45,3.174,49,1.626,97,1.084,115,2.901,129,4.017,171,1.649,172,4.828,180,3.468,183,1.162,192,1.983,235,3.089,261,4.574,291,2.698,434,2.897,471,3.945,574,4.221,614,5.13,615,5.298,620,4.311,642,1.255,684,1.595,752,4.137,753,6.265,789,2.129,817,3.964,818,2.316,823,8.285,824,5.905,846,3.328,851,4.949,886,7.651,894,8.064,895,5.205,901,2.09,902,3.172,903,3.003,904,3.398,905,4.073,906,2.216]],["t/1760",[0,1.058,7,0.482,14,1.587,15,2.07,34,1.199,37,1.838,40,1.699,43,1.838,49,1.605,54,0.646,55,1.712,56,1.785,57,3.076,97,1.508,98,3.068,104,2.447,112,1.928,115,2.236,123,2.605,129,1.533,171,1.099,172,4.224,183,1.741,185,1.647,194,1.96,224,5.418,260,6.737,261,3.138,291,1.712,482,2.585,615,5.233,620,4.236,640,1.102,642,1.22,654,3.411,675,1.76,676,3.084,691,1.96,728,2.924,744,7.342,748,6.113,752,2.972,759,2.154,776,6.465,782,2.306,817,2.07,879,5.493,884,4.299,893,2.788,907,5.608,908,4.299,909,5.896,910,5.002,911,6.986,912,6.986,913,6.216,914,2.306,915,3.748,916,3.638,917,3.638,918,1.325,919,6.986,920,3.638,921,3.638,922,3.638,923,2.679,924,3.638,925,3.084,926,3.638,927,3.304,928,3.638,929,2.585]],["t/1762",[7,0.783,37,3.669,38,5.826,39,6.154,40,3.26,41,3.353,42,3.982,43,1.938,44,1.393,45,2.596,46,3.848,47,4.721,49,1.402,50,4.198,51,3.974,52,4.131,53,2.03,54,1.77,55,3.418,56,3.563,57,3.982,58,4.493,682,3.726]],["t/1764",[18,1.821,21,3.826,22,1.963,27,4.997,41,2.377,43,1.645,49,1.634,50,2.723,62,1.457,73,1.544,82,2.424,129,4.215,130,3.369,144,2.577,147,4.482,171,2.086,172,2.889,239,4.095,355,1.989,452,5.361,455,4.201,496,3.424,540,2.692,615,3.171,640,1.957,644,3.676,668,3.424,675,3.126,746,3.001,752,3.424,887,5.477,930,4.758,931,4.592,932,6.461,933,4.952,934,3.424,935,3.998,936,3.217,937,3.126,938,3.826,939,4.201,940,5.185]],["t/1767",[0,1.065,10,2.104,11,2.597,12,2.359,36,3.423,45,1.157,48,1.917,49,1.227,50,1.364,54,1.128,59,3.164,60,1.429,62,2.351,63,2.347,64,1.878,69,6.391,73,0.773,80,1.396,81,1.364,89,1.523,90,2.443,91,2.104,94,3.638,98,2.88,115,1.057,119,1.191,123,1.503,128,4.474,129,3.042,139,1.841,154,2.227,168,2.104,172,2.289,178,1.807,208,1.588,210,1.364,223,1.796,228,2.163,269,3.329,355,3.346,403,1.878,482,2.3,542,1.168,607,1.661,613,7.061,614,8.041,616,2.507,618,2.227,633,1.687,638,1.841,654,2.71,708,1.412,727,1.202,746,4.069,754,2.188,790,2.227,807,2.227,811,2.744,831,4.34,832,2.744,833,2.744,834,2.597,835,2.597,836,2.383,837,2.744,850,2.051,851,2.051,852,4.108,853,2.227,854,2.759,855,5.383,856,4.34,857,2.744,939,4.129,941,2.744,942,2.383,943,2.597,944,2.744,945,4.371,946,2.003,947,2.744,948,2.003,949,2.744,950,3.924,951,1.636,952,2.939,953,2.939,954,3.236,955,2.939,956,2.939,957,2.939,958,2.744,959,3.924,960,2.939]],["t/1769",[41,3.727,43,1.889,45,2.145,49,1.876,54,1.726,60,2.649,62,2.352,80,2.587,81,2.528,82,3.644,83,4.814,84,4.128,86,4.814,88,4.128,89,2.824,126,3.318,130,3.128,171,2.121,172,4.063,355,1.847,668,4.816,675,3.895,693,3.29,816,4.814,819,4.814,838,5.085,839,3.712,840,4.814,841,5.085,842,5.085,863,3.9,961,6.461,962,5.999,963,5.085,964,5.448,965,5.448]],["t/1771",[45,2.564,54,1.607,59,2.427,60,3.167,62,2.234,80,3.093,81,3.022,119,2.638,169,4.161,181,3.571,435,2.801,503,2.955,532,6.351,641,5.097,703,3.801,844,6.95,938,6.16,966,5.497,967,6.513,968,6.513,969,7.171,970,4.935,971,5.497,972,4.08,973,4.935,974,7.171]],["t/1774",[45,2.533,46,3.755,54,1.75,59,2.398,60,3.129,61,3.581,62,2.336,63,3.249,64,4.111,65,5.138,66,4.031,67,5.686,68,5.686,69,6.564,70,5.43,71,4.607,72,5.686,73,2.144,74,5.686,75,3.818,76,5.686,77,5.217,78,4.111,79,4.491,202,6.879,203,5.686]],["t/1776",[7,0.555,12,3.142,45,2.31,49,1.634,59,2.187,60,2.854,62,2.341,69,4.095,97,1.005,98,2.577,116,4.215,120,2.67,122,3.001,144,2.577,145,4.326,146,4.839,147,3.424,171,1.657,174,3.217,219,5.185,228,5.651,415,4.952,527,4.095,727,2.4,816,6.787,975,3.691,976,5.868,977,7.992,978,5.868,979,4.592,980,6.461,981,5.185,982,4.758,983,4.446]],["t/1778",[45,3.026,59,2.864,60,3.738,62,2.257,90,4.039,91,5.504,92,3.144,93,6.233,94,6.016,95,6.487,96,4.816,703,4.486,984,7.175]],["t/1780",[45,3.116,59,2.95,60,3.85,115,2.848,172,4.552,615,4.996,882,6.68,951,4.405]],["t/1782",[7,0.309,18,2.781,27,4.05,29,2.336,40,1.088,41,3.695,43,1.081,44,1.066,45,1.285,49,1.759,59,1.88,60,1.587,62,2.122,65,1.691,69,3.521,89,4.112,97,1.563,105,1.164,115,1.174,116,2.341,120,2.758,128,5.182,129,1.514,144,3.296,145,3.184,147,2.944,158,1.037,169,2.085,171,1.784,191,2.515,219,4.458,239,2.278,257,2.025,258,2.289,263,1.045,452,5.773,455,3.612,503,2.799,505,3.046,506,3.046,520,4.091,640,1.088,642,1.863,669,2.085,692,3.823,789,3.161,854,2.994,933,4.258,934,2.944,935,3.438,936,1.789,937,1.738,938,2.128,939,2.336,940,2.884,945,5.259,979,2.554,985,6.133,986,3.263,987,1.844,988,3.263,989,3.046,990,3.046,991,3.263,992,3.263,993,2.754,994,3.593,995,3.046,996,2.401,997,2.473,998,3.593,999,3.046,1000,2.401,1001,1.738,1002,7.31,1003,2.754,1004,2.754,1005,3.046,1006,6.792,1007,3.263,1008,3.712,1009,4.709,1010,3.046]],["t/1784",[15,6.044,16,4.75,45,3.005,59,3.372,60,3.712,62,1.895,134,5.465,264,6.744,1011,7.124]],["t/1786",[7,0.759,21,5.235,22,2.462,34,2.28,44,1.327,45,3.16,49,1.336,55,3.256,59,3.297,60,3.055,62,1.56,129,4.847,158,2.551,159,3.904,496,4.685,540,3.683,607,4.537,608,2.731,934,4.685]],["t/1788",[22,2.273,45,3.89,60,2.705,62,2.416,105,2.644,120,2.578,139,6.094,156,5.773,157,6.481,158,3.212,159,3.605,355,2.514,496,4.326,607,4.19,608,3.866]],["t/1790",[26,3.833,41,2.704,43,1.43,44,1.762,45,2.628,49,1.42,55,3.46,60,3.247,115,3.001,116,3.098,118,5.634,128,4.183,129,3.098,131,5.224,135,4.549,160,6.528,161,5.634,162,4.66,163,4.444,164,6.321,165,5.413,166,5.899,167,5.44,168,4.78,169,4.265,221,5.413,1012,8.342,1013,7.351]],["t/1792",[27,5.876,45,2.533,49,2.064,54,1.259,60,3.129,62,2.024,69,6.564,80,3.055,81,2.986,82,2.658,129,2.986,149,5.035,155,3.209,170,5.686,171,1.388,172,3.168,173,6.434,638,4.031,939,6.405,996,4.734,997,4.876,1014,3.291,1015,6.006,1016,7.085]],["t/1794",[0,0.651,7,0.325,10,0.655,11,0.808,12,1.407,15,2.155,16,1.694,17,1.608,18,1.207,19,1.605,20,1.37,21,1.102,22,1.268,23,0.596,26,1.975,27,3.066,28,1.08,29,1.21,31,0.673,34,0.332,36,1.398,40,0.564,41,1.736,43,1.125,44,0.498,45,2.268,46,0.534,48,1.102,49,1.427,50,1.596,53,0.282,54,1.396,59,3.304,61,0.509,62,2.394,63,1.189,64,1.08,65,2.861,66,0.573,67,0.808,68,0.808,70,0.772,71,0.655,72,0.808,73,1.127,74,0.808,75,0.543,76,0.808,77,0.742,78,1.08,79,0.638,80,0.434,81,0.424,82,1.421,83,0.808,84,1.281,86,0.808,87,0.584,88,0.693,89,0.876,90,1.541,91,1.687,92,0.374,93,0.742,94,1.844,95,0.772,96,0.573,97,1.025,98,2.308,99,0.742,100,1.126,101,0.742,102,1.152,103,1.322,104,0.439,105,1.387,106,1.281,107,0.623,108,1.644,109,0.854,110,0.772,111,0.854,112,0.534,113,1.322,114,0.854,115,1.399,116,2.673,117,0.854,118,1.988,119,1.575,120,1.352,121,0.854,122,0.864,123,0.864,124,0.808,125,0.854,126,1.069,127,0.638,128,2.685,129,3.114,130,0.97,131,1.322,132,1.577,133,0.693,134,2.803,135,1.999,136,1.493,137,1.833,139,3.11,140,0.854,141,1.013,142,1.874,143,0.772,144,2.18,145,2.13,146,2.071,147,2.008,148,0.693,149,1.844,150,0.854,151,0.854,152,0.854,153,2.476,154,1.281,155,1.53,156,2.543,157,2.855,158,1.901,159,1.427,160,1.322,161,0.772,162,0.638,163,0.9,164,1.281,165,1.37,166,0.808,167,1.536,168,1.21,169,1.08,171,1.614,172,2.11,174,0.501,178,0.562,184,0.275,185,0.242,195,0.914,196,0.914,197,0.914,198,0.772,199,0.434,200,0.716,201,0.854,202,1.426,203,0.808,204,0.914,206,4.963,207,2.379,208,0.913,209,0.986,210,0.784,211,0.914,212,0.914,213,3.888,214,0.914,215,0.808,216,1.577,217,0.914,218,3.888,219,3.04,220,1.69,221,2.379,223,0.653,228,1.733,239,0.638,257,0.856,258,0.767,263,0.755,264,0.808,269,1.687,355,2.695,403,0.584,415,0.772,452,2.401,455,1.21,482,0.716,496,1.712,505,0.854,506,0.854,520,1.37,527,0.638,532,1.913,540,0.775,542,0.363,607,1.944,608,1.69,613,4.989,614,6.07,615,0.913,616,1.024,618,0.693,633,0.525,638,0.573,641,0.716,654,1.305,668,1.375,675,0.9,693,0.552,703,0.534,708,0.439,727,0.691,746,2.192,754,0.894,789,1.059,790,0.693,807,0.693,808,1.281,811,0.854,816,2.082,819,1.493,825,0.573,831,1.577,832,0.854,833,0.854,834,0.808,835,0.808,836,6.153,837,0.854,838,0.854,839,0.623,840,0.808,841,0.854,842,0.854,844,2.159,850,0.638,851,0.638,852,1.493,853,0.693,854,1.003,855,2.199,856,1.577,857,0.854,863,0.655,875,1.493,882,0.772,933,1.426,934,3.61,935,1.605,936,0.501,937,0.487,938,1.536,939,2.463,940,0.808,941,0.854,942,0.742,943,0.808,944,0.854,945,1.785,946,0.623,947,0.854,948,0.623,949,0.854,950,1.426,951,0.509,952,0.914,953,0.914,955,0.914,956,0.914,957,0.914,958,0.854,959,1.426,960,0.914,961,1.493,963,0.854,964,0.914,965,0.914,966,0.772,967,0.914,968,0.914,975,0.812,976,0.914,977,4.333,978,0.914,979,1.322,981,0.808,982,0.742,983,0.693,984,0.854,985,2.082,986,0.914,987,0.517,988,0.914,989,0.854,990,0.854,991,0.914,992,0.914,993,0.772,995,0.854,996,1.243,997,0.693,999,0.854,1000,0.673,1001,2.644,1011,0.854,1012,1.69,1014,0.864,1017,1.007,1018,0.854,1019,1.861,1020,0.673,1021,0.914,1022,1.007]],["t/1796",[7,0.727,49,1.635,82,3.754,85,4.214,97,1.658,157,5.121,171,1.96,668,5.304,754,2.917]],["t/1798",[7,0.706,82,3.086,85,4.096,115,2.688,119,3.027,163,3.98,171,1.611,207,6.059,638,4.681,668,4.36,728,4.289,754,3.39,1023,6.602,1024,6.993,1025,6.306,1026,8.227]],["t/1800",[12,2.481,43,1.863,48,5.117,49,1.52,82,3.8,85,3.918,89,2.161,97,1.225,126,1.892,129,1.935,139,2.612,164,4.595,171,1.541,192,2.433,207,5.795,223,3.555,616,4.076,638,2.612,640,2.023,647,3.519,648,2.028,655,3.159,657,3.381,666,2.985,668,4.865,669,2.664,701,3.519,703,2.433,728,2.394,754,2.301,759,2.719,775,3.159,776,7.054,900,2.612,908,3.519,910,2.985,923,3.381,1024,5.593,1025,3.519,1027,4.591,1028,3.684,1029,4.591,1030,4.591,1031,5.66,1032,4.169,1033,4.591,1034,4.169,1035,8.64,1036,6.677,1037,4.591,1038,4.591,1039,4.591,1040,3.684,1041,3.684,1042,4.591,1043,2.191,1044,3.263,1045,5.66,1046,4.169,1047,4.169,1048,3.159,1049,4.591,1050,6.677,1051,2.91,1052,4.591,1053,2.692,1054,4.169,1055,3.519]],["t/1802",[12,2.714,14,3.188,43,1.421,49,1.767,82,3.748,85,3.637,89,3.439,97,1.424,157,4.42,164,5.028,171,1.431,223,2.564,657,5.38,668,4.849,693,4.006,757,4.521,851,4.631,900,4.157,915,4.881,1023,7.343,1024,5.192,1044,5.192,1045,6.193,1053,2.945,1056,7.305,1057,5.38,1058,7.305,1059,6.635,1060,6.635,1061,5.863]],["t/1804",[7,0.652,40,2.299,41,3.447,43,1.822,50,3.198,52,4.318,59,2.568,69,5.938,80,3.273,81,3.198,82,4.09,84,5.223,122,3.525,285,2.739,657,5.588,682,3.895,684,3.235,903,6.09,910,6.608,963,6.433,1062,5.816]],["t/1806",[0,0.606,7,0.409,17,2.369,18,1.341,40,1.441,41,1.751,43,1.99,49,1.873,51,2.734,55,3.226,56,3.363,57,4.404,82,3.909,97,0.741,104,2.99,139,3.899,141,1.859,171,2.072,172,2.128,180,2.879,181,2.369,223,3.268,285,2.473,291,3.226,615,3.363,616,3.675,646,2.945,647,3.647,648,2.102,651,3.573,654,2.767,658,4.321,659,4.321,668,2.522,701,3.647,717,1.983,740,4.87,746,3.183,754,1.64,776,3.504,789,2.707,792,2.818,807,3.275,808,3.275,854,3.693,970,3.275,996,3.18,1023,3.819,1024,4.87,1041,3.819,1044,4.87,1062,3.647,1063,4.034,1064,4.034,1065,3.647,1066,4.321,1067,4.758,1068,4.758,1069,4.758,1070,4.321,1071,3.647,1072,2.61,1073,4.034,1074,4.758,1075,3.504,1076,3.819,1077,4.321]],["t/1808",[40,2.146,41,3.931,43,2.014,50,2.986,52,4.031,54,1.259,59,2.398,73,1.693,80,3.055,81,2.986,82,4.248,104,3.092,171,1.758,181,3.528,631,5.43,638,4.031,728,3.694,752,3.755,754,2.441,758,5.686,970,4.876,1024,5.035,1078,6.006,1079,7.085,1080,7.085]],["t/1810",[7,0.792,41,3.393,49,1.429,82,3.946,97,1.151,104,3.228,183,2.297,369,3.228,480,4.292,514,6.271,631,5.67,633,3.857,646,4.578,657,7.399,668,4.887,682,4.733,683,6.271,684,3.153,685,6.718,686,4.209,687,6.718,688,6.718,689,6.718,690,6.718,1081,6.271]],["t/1811",[7,0.775,14,1.272,17,1.451,43,1.701,45,2.431,46,3.604,48,2.788,49,1.442,50,2.496,52,1.659,56,1.43,59,3.056,60,3.71,62,2.215,63,1.337,73,0.696,82,4.217,85,2.344,89,3.201,90,4.172,91,4.422,93,5.008,94,4.833,95,5.212,96,3.869,97,0.454,98,1.163,100,3.584,133,2.006,171,1.462,172,2.105,178,1.628,182,2.339,183,2.318,186,3.467,198,3.609,223,1.023,227,2.647,285,2.694,522,1.473,532,5.178,608,1.151,617,3.146,631,2.234,633,1.52,646,5.739,651,1.52,657,6.65,675,1.41,701,2.234,703,3.604,728,1.52,751,2.471,752,1.545,754,1.004,776,2.147,784,5.379,789,2.679,825,4.247,835,2.339,844,1.948,846,1.243,847,5.379,897,2.339,970,2.006,984,5.765,1024,4.21,1051,1.848,1063,2.471,1078,2.471,1082,2.471,1083,2.647,1084,2.915,1085,1.848,1086,2.647,1087,2.915,1088,2.915,1089,2.915,1090,2.278,1091,2.915,1092,2.915,1093,2.647,1094,2.471,1095,2.915,1096,2.915,1097,2.915,1098,2.915,1099,2.915,1100,2.339,1101,2.915,1102,2.915,1103,2.471,1104,2.006,1105,2.915,1106,4.276,1107,2.915,1108,2.915,1109,2.647,1110,2.915,1111,3.991,1112,2.915]],["t/1813",[0,1.523,21,5.368,34,1.967,191,4.104,257,2.127,258,3.994,532,6.407,610,7.274,867,6.439,1113,5.42,1114,5.968]],["t/1815",[0,1.512,7,0.821,43,1.525,144,3.128,191,3.55,535,7.122,610,6.294]],["t/1817",[0,0.886,7,0.598,43,1.354,49,1.887,50,2.932,53,1.946,54,1.577,62,2.001,82,3.86,90,3.32,122,3.233,291,4.598,613,4.946,615,3.415,632,5.585,740,6.942,746,4.538,752,3.688,775,4.789,807,4.789,808,7.08,910,4.525,1065,5.334,1070,6.32,1075,6.534,1100,5.585,1115,6.32]],["t/1819",[82,2.962,183,2.451,291,4.518,618,7.118,642,2.648,664,5.611,740,6.822,746,4.804,759,4.675,808,7.118,826,8.717,881,5.611,1116,7.895,1117,6.051,1118,7.895]],["t/1821",[7,0.598,10,4.525,40,2.108,49,1.344,51,4.104,147,4.702,192,3.688,193,8.256,194,3.75,291,3.276,355,2.143,613,6.942,644,3.959,740,4.946,746,3.233,755,3.571,807,4.789,808,6.723,881,6.306,901,3.886,1062,5.334,1119,6.959,1120,6.32,1121,6.067,1122,6.959,1123,6.959,1124,5.125]],["t/1823",[7,0.727,51,3.376,55,3.984,57,4.642,130,4.413,183,2.628,355,3.082,613,6.016,644,4.816,669,4.911,746,3.932,807,5.825,808,5.825]],["t/1825",[0,1.537,7,0.648,10,3.545,34,1.156,355,3.121,618,5.192,620,2.171,836,2.583,1124,4.015,1125,2.815,1126,3.507,1127,3.507,1128,3.507,1129,3.507,1130,2.973,1131,3.507,1132,3.507,1133,3.507,1134,3.507]],["t/1827",[0,1.536,7,0.49,10,3.709,12,2.891,45,1.329,52,3.245,60,1.642,80,1.604,81,1.567,128,3.245,223,2.002,355,1.756,616,1.468,708,1.623,746,4.283,941,3.152,943,2.984,944,3.152,946,3.53,947,3.152,948,3.53,949,3.152,1124,4.2]],["t/1829",[0,1.535,7,0.647,10,4.897,11,4.365,12,2.021,34,1.793,90,1.668,98,2.663,128,3.798,169,3.873,355,2.319,703,1.853,746,3.101,850,2.216,851,2.216,853,2.406,942,2.575,1124,4.006,1125,2.806,1130,4.611,1135,3.497,1136,3.497,1137,3.176,1138,3.497,1139,3.497,1140,3.497,1141,3.497,1142,3.497,1143,3.497,1144,3.497,1145,3.497]],["t/1832",[7,0.762,18,1.96,19,3.006,20,3.577,22,1.614,34,2.677,37,3.515,40,1.471,41,3.453,42,2.664,43,1.826,44,1.701,49,1.343,56,3.986,80,2.095,89,3.274,97,1.461,103,4.942,119,1.787,130,2.532,145,2.898,147,3.685,157,4.208,171,1.838,175,3.006,177,6.519,192,2.574,193,3.898,194,2.618,272,2.834,497,3.342,503,2.001,581,3.245,618,3.342,619,1.753,620,4.304,682,2.493,684,2.07,686,2.763,693,2.664,709,2.664,746,3.23,789,2.763,817,3.957,818,3.006,865,3.342,1001,2.35,1028,3.898,1032,6.316,1051,3.079,1121,2.712,1146,4.857,1147,4.857,1148,3.898,1149,4.857,1150,2.818,1151,4.857,1152,2.089,1153,4.117,1154,4.411,1155,3.723,1156,4.117,1157,3.898,1158,3.723,1159,4.857,1160,4.411,1161,4.857,1162,3.898,1163,3.245,1164,4.857,1165,3.898,1166,4.117,1167,3.898,1168,4.857]],["t/1834",[73,2.13,171,1.746,291,4.196,620,5.517,640,2.7,642,2.99,900,5.072]],["t/1836",[50,3.593,51,3.401,55,4.013,56,4.184,147,4.518,171,1.969,194,4.595,285,3.077,651,4.445,746,4.669,755,4.376]],["t/1838",[0,1.05,7,0.794,10,2.71,12,1.548,22,0.967,37,2.106,40,2.672,43,1.994,44,1.193,49,1.593,50,2.62,51,1.662,55,3.501,56,3.051,59,1.41,73,1.777,82,3.094,87,2.418,89,1.962,96,2.371,97,1.62,98,1.662,106,5.675,112,2.208,128,4.232,147,3.295,157,2.521,171,0.816,175,2.579,179,2.579,180,2.521,183,1.93,185,1.496,191,1.887,192,3.295,194,3.351,250,2.208,253,2.371,254,2.521,255,2.371,259,3.194,272,3.361,291,1.962,435,1.628,503,1.717,542,1.504,607,2.139,616,1.645,620,2.579,633,2.173,640,1.262,642,2.495,646,2.579,684,3.17,746,4.453,752,2.208,771,1.49,817,2.371,818,2.579,905,5.286,906,3.682,910,2.71,1024,4.419,1121,3.472,1152,1.252,1169,2.579,1170,4.167,1171,2.563,1172,4.167,1173,4.167,1174,3.344,1175,3.532,1176,3.532,1177,3.532,1178,3.532,1179,3.008,1180,3.532,1181,3.194,1182,4.167,1183,3.784,1184,3.344,1185,3.532]],["t/1840",[12,2.614,19,3.056,20,3.637,34,1.628,40,1.496,41,1.817,43,1.837,44,0.947,49,1.359,50,2.966,54,0.878,64,2.865,73,1.681,78,2.865,97,1.573,98,1.97,103,3.51,112,2.617,122,2.294,128,4.665,144,3.768,145,2.058,162,3.13,168,5.331,171,0.967,174,2.459,178,4.99,181,3.504,185,1.694,239,3.13,272,2.013,285,1.782,291,3.313,496,2.617,527,5.197,532,2.925,616,1.949,619,1.782,638,2.81,682,2.535,693,2.708,706,4.485,727,1.835,755,2.535,779,3.13,792,2.925,802,3.3,850,3.13,854,3.793,930,3.637,981,3.963,982,3.637,983,3.399,1057,3.637,1072,3.859,1090,3.405,1150,2.865,1160,4.485,1178,4.186,1186,3.963,1187,4.186,1188,3.963,1189,5.966,1190,4.939,1191,4.939,1192,4.485,1193,3.963,1194,3.51,1195,4.485,1196,4.485,1197,4.186,1198,4.939,1199,4.939,1200,4.939,1201,4.939,1202,1.686,1203,4.939,1204,3.785,1205,2.988]],["t/1842",[0,1.143,7,0.428,18,1.404,21,2.949,22,1.643,43,1.915,45,3.388,49,1.831,52,2.834,53,1.393,62,1.123,81,2.099,82,3.694,84,3.428,87,2.89,97,1.533,98,1.987,104,2.173,122,3.289,129,3.78,147,2.639,155,1.781,158,1.437,159,2.2,171,1.757,172,2.227,179,4.382,183,1.546,185,1.199,239,3.157,250,2.639,253,2.834,254,3.013,255,2.834,452,4.488,540,2.075,615,2.444,642,1.671,651,3.691,664,3.54,668,3.752,681,3.013,746,3.289,752,3.752,755,2.556,771,1.781,790,3.428,803,3.668,807,3.428,808,3.428,900,2.834,915,3.328,933,3.817,934,3.752,1001,3.425,1014,2.314,1065,3.817,1125,3.997,1176,4.222,1177,4.222,1206,4.98,1207,3.54,1208,4.222,1209,6.002,1210,4.222,1211,2.284,1212,4.222,1213,3.817]],["t/1844",[7,0.816,18,1.852,41,3.937,43,2.03,44,1.26,49,1.269,59,2.223,64,3.812,82,2.465,97,1.719,103,4.669,171,1.972,174,3.271,175,4.066,177,5.272,607,3.372,620,5.291,638,3.738,668,5.037,752,3.481,755,3.372,817,3.738,850,4.164,1156,5.569,1157,5.272,1158,5.035,1169,4.066,1214,5.966,1215,6.569,1216,6.569]],["t/1846",[0,0.866,7,0.584,42,3.728,44,1.304,90,3.244,130,5.037,181,3.385,221,7.115,355,2.975,369,2.966,476,5.006,480,3.944,620,4.207,666,4.42,669,3.944,682,4.958,686,3.868,701,5.21,806,5.455,815,4.831,875,5.455,1072,3.728,1217,6.798,1218,6.798,1219,8.774,1220,5.006,1221,6.173,1222,6.798,1223,4.542,1224,5.071,1225,6.798,1226,6.798,1227,6.173,1228,5.455,1229,5.455,1230,6.173,1231,6.173]],["t/1848",[0,0.949,7,0.359,18,1.179,21,2.477,22,2.051,43,2.093,44,0.802,45,3.159,49,1.44,53,1.17,55,1.969,64,2.426,82,1.569,87,3.617,97,1.494,98,1.668,104,2.72,115,1.366,122,3.462,129,3.481,155,1.495,158,1.207,159,1.847,171,2.066,172,3.332,191,1.893,239,2.651,250,3.304,253,3.547,254,3.772,255,3.547,259,4.778,260,3.08,262,3.356,369,1.825,438,4.591,452,3.951,527,2.651,540,1.743,615,2.052,640,1.267,651,3.25,668,4.378,671,2.114,684,1.783,739,2.878,752,3.304,817,2.379,846,1.783,863,4.053,888,3.798,897,5.003,901,2.335,903,3.356,905,4.43,933,3.205,934,3.304,938,2.477,961,5.003,1001,3.016,1014,1.943,1028,3.356,1152,1.256,1208,3.545,1209,5.284,1210,3.545,1211,1.918,1214,5.661,1232,4.182,1233,5.661,1234,4.182,1235,4.182,1236,2.972,1237,4.182,1238,6.234,1239,4.182,1240,6.234,1241,4.182,1242,4.182,1243,3.356,1244,3.25]],["t/1850",[0,0.797,7,0.711,38,5.019,43,1.805,45,2.236,49,1.208,59,2.117,97,0.973,122,2.905,128,3.559,130,3.261,171,2.012,174,4.122,180,3.784,261,2.868,285,2.257,341,5.68,355,2.857,369,2.729,618,5.697,666,4.067,668,3.315,675,3.026,682,3.21,691,3.371,693,3.43,705,4.54,746,4.588,759,3.704,846,2.666,863,6.034,1051,3.964,1121,3.492,1174,5.019,1183,5.68,1207,4.445,1245,6.254,1246,4.794,1247,5.302,1248,5.68,1249,5.302,1250,4.179,1251,6.254,1252,4.445,1253,5.68,1254,4.445]],["t/1852",[0,1.512,7,0.716]],["t/1854",[0,1.518,7,0.669,34,3.138,1255,7.79,1256,7.075]],["t/1856",[0,1.465,7,0.76,1257,8.035]],["t/1858",[0,1.484,7,0.748,379,7.915]],["t/1860",[0,1.395,7,0.777,1258,9.052]],["t/1862",[0,1.535,7,0.807,202,5.346,222,3.171,235,2.628,459,2.465,460,1.867,462,1.867,471,3.356,472,4.429,1086,4.429,1259,4.877,1260,4.877,1261,4.877,1262,4.877,1263,4.877,1264,4.877]],["t/1864",[0,1.5,7,0.732,135,5.276]],["t/1866",[0,1.489,7,0.867,82,3.222]],["t/1868",[0,1.517,1265,6.925]],["t/1870",[0,1.528,7,0.904,155,2.416,222,4.394,581,4.516,671,3.416]],["t/1872",[0,1.535,7,0.883,22,1.325,355,1.757,1152,1.715]],["t/1874",[0,1.536,7,0.615,21,4.244,22,1.176,58,3.136,532,3,587,4.295,1001,2.451,1266,5.066,1267,5.066]],["t/1876",[0,1.532,18,0.798,21,1.676,23,1.676,24,2.17,54,0.503,58,1.752,59,0.958,62,0.638,73,1.098,98,2.666,115,1.502,120,0.894,158,1.327,223,0.993,228,3.072,258,2.392,263,1.338,269,1.841,301,2.571,369,1.235,393,2.668,395,2.668,397,2.668,399,1.713,403,1.642,422,1.794,459,2.934,527,1.794,580,3.69,582,4.922,850,3.68,910,1.841,951,1.431,959,2.17,1268,2.831,1269,6.071,1270,5.806,1271,2.571,1272,4.598,1273,2.831,1274,2.831,1275,2.571,1276,2.571,1277,2.831,1278,2.571,1279,5.806,1280,4.598,1281,2.831,1282,2.831,1283,2.831,1284,2.831,1285,2.831,1286,4.176,1287,2.831,1288,2.571,1289,2.399,1290,2.831,1291,2.831,1292,2.831,1293,2.831,1294,2.831,1295,2.571,1296,2.831,1297,2.571,1298,2.831,1299,2.831,1300,2.831,1301,2.831,1302,2.831,1303,2.831]],["t/1878",[0,1.521,7,0.451,21,3.108,23,5.019,98,2.93,115,2.4,137,2.539,158,1.515,258,2.162,263,1.527,369,2.29,393,3.045,395,3.045,397,3.045,403,3.045,459,3.713,480,3.045,774,2.575,806,4.211,852,4.211,951,2.652,1269,8.338,1271,4.766,1275,6.671,1288,4.766,1297,4.766,1304,8.338,1305,5.248,1306,4.211,1307,5.248,1308,5.248,1309,5.248,1310,5.248,1311,5.248]],["t/1880",[0,1.53,7,0.531,21,3.665,369,2.701,422,3.923,480,3.591,532,3.665,795,6.3,863,4.024,1286,8.383,1312,6.188,1313,6.188]],["t/1882",[7,0.665,49,1.495,80,4.421,89,3.643,112,4.101,137,3.744,141,3.023,142,4.49,171,1.516,175,4.789,272,3.154,597,4.49,1014,4.405,1072,4.244,1165,6.211,1314,6.739,1315,6.526,1316,5.931,1317,6.56,1318,5.699,1319,5.931,1320,6.56]],["t/1884",[51,3.86,73,1.912,80,3.451,97,1.245,135,5.989,141,3.78,142,5.615,169,4.643,192,4.241,193,6.422,285,2.888,291,3.767,732,6.134,929,5.687,1207,5.687,1314,5.687,1315,5.507,1321,8.003]],["t/1886",[7,0.711,37,4.187,40,2.993,54,1.472,141,3.236,142,4.807,180,5.013,184,2.264,272,3.377,275,5.252,285,2.99,377,6.649,438,6.101,640,2.51,906,4.906,1322,8.285]],["t/1888",[2,7.318,44,1.546,80,3.475,97,1.512,137,3.898,141,3.148,142,4.675,285,2.908,597,4.675,642,2.703,697,4.27,732,6.176,742,5.726,918,2.936,1014,4.514,1314,5.726,1315,5.545,1316,6.176,1323,8.058]],["t/1890",[7,0.86,37,3.715,44,1.41,47,4.78,54,1.632,137,4.847,180,4.448,184,2.009,185,1.769,208,3.607,256,5.558,272,2.996,275,4.66,364,7.786,369,3.208,377,5.899,438,5.413,440,5.059,533,5.899,686,4.183,709,4.031,729,5.634,1162,5.899,1324,6.676,1325,8.342,1326,6.676,1327,7.351]],["t/1893",[7,0.891,15,3.082,40,1.641,44,1.039,47,3.522,49,1.451,59,2.542,80,2.336,81,2.283,97,1.342,98,2.161,137,4.171,141,2.116,142,3.143,144,2.161,158,1.563,159,2.393,167,5.105,272,3.794,275,3.434,368,4.347,369,3.277,390,4.92,597,3.143,642,1.817,686,3.082,695,4.504,709,4.119,714,3.989,728,2.825,752,2.871,755,2.78,759,3.208,771,1.937,908,4.152,918,3.141,1004,4.152,1008,6.533,1014,2.516,1048,5.169,1104,3.728,1185,4.592,1193,4.347,1276,4.92,1314,5.338,1315,5.169,1316,5.756,1326,4.92,1328,5.417,1329,3.143,1330,5.417,1331,4.92,1332,3.434,1333,4.592,1334,4.92,1335,4.592,1336,5.417,1337,5.417,1338,5.417,1339,4.92]],["t/1895",[0,1.281,7,0.762,15,2.763,17,2.418,40,2.461,41,2.558,43,1.899,44,0.932,45,1.736,56,2.383,82,1.822,87,2.818,97,1.082,98,2.774,105,1.573,122,2.256,130,2.532,147,3.685,148,3.342,149,3.452,162,4.408,174,2.418,175,3.006,183,1.508,184,1.9,185,1.674,192,2.574,239,3.079,250,3.685,253,2.763,254,2.939,255,2.763,272,3.615,617,3.245,638,2.763,640,2.461,684,3.78,691,2.618,695,2.35,746,2.256,779,3.079,789,2.763,817,3.957,818,5.489,836,5.982,846,2.07,900,2.763,906,4.118,918,1.77,934,2.574,1051,3.079,1065,3.723,1072,2.664,1176,5.895,1177,4.117,1205,2.939,1246,3.723,1314,3.452,1315,3.342,1331,7.377,1340,8.055,1341,4.857,1342,4.857,1343,4.117,1344,4.857,1345,2.939,1346,4.857,1347,4.857,1348,3.723,1349,4.857,1350,4.857,1351,4.857]],["t/1898",[7,0.803,18,1.792,44,1.219,47,4.133,54,1.487,80,3.608,81,2.678,97,1.302,137,3.075,167,3.764,168,4.133,181,3.165,182,5.101,208,3.119,255,3.616,261,3.837,272,3.41,364,7.929,368,5.101,369,2.774,633,3.314,640,1.925,664,5.946,675,3.075,686,4.761,695,4.048,709,3.486,752,3.368,778,5.946,825,3.616,918,3.049,1048,4.374,1220,4.681,1224,4.855,1247,5.388,1314,5.946,1315,5.758,1325,5.772,1352,5.772,1353,5.101,1354,3.846,1355,5.388,1356,6.356]],["t/1900",[0,0.951,7,0.737,22,2.262,42,2.944,58,4.618,80,2.315,115,1.754,135,3.322,137,4.714,141,3.351,142,4.977,179,3.322,180,3.248,185,1.292,191,2.43,263,2.835,369,4.046,525,6.326,531,3.815,638,4.246,640,1.626,642,1.8,671,2.713,682,3.83,684,2.288,686,4.881,718,3.815,742,3.815,755,4.403,771,1.919,906,3.179,929,3.815,1014,2.493,1048,3.694,1220,3.953,1224,6.417,1306,4.308,1314,3.815,1315,3.694,1357,5.72,1358,4.875,1359,4.515,1360,4.875,1361,3.815,1362,4.875,1363,5.368,1364,7.463,1365,5.368,1366,5.368,1367,5.368]],["t/1902",[7,0.687,40,2.424,41,2.944,43,1.557,47,5.203,49,1.546,50,4.078,51,3.86,56,3.927,73,1.912,178,4.469,183,2.485,192,4.241,291,3.767,651,4.173,1040,6.422,1368,8.003,1369,6.784,1370,8.003,1371,8.003]],["t/1904",[0,1.298,7,0.328,18,2.223,27,4.741,40,2.572,41,2.594,43,1.651,44,0.732,45,1.364,49,1.124,50,1.608,53,1.067,54,0.678,55,1.796,62,0.86,80,3.661,81,3.323,82,3.356,87,5.702,88,4.003,103,4.134,104,1.665,110,4.458,183,2.189,184,1.042,194,2.056,235,2.056,250,5.208,253,5.592,254,5.946,255,5.704,263,1.11,272,3.214,471,2.625,542,1.377,574,2.809,640,1.762,675,1.846,681,2.308,684,1.626,695,1.846,732,4.458,752,3.083,821,1.124,846,1.626,906,2.259,939,5.52,993,6.507,1031,3.234,1071,2.924,1246,2.924,1348,2.924,1372,3.234,1373,3.234,1374,6.403,1375,3.234,1376,3.815,1377,3.815,1378,3.465,1379,1.951,1380,3.815,1381,5.283,1382,7.05,1383,5.817,1384,5.817,1385,5.283,1386,5.283,1387,3.815,1388,5.817,1389,3.815]],["t/1906",[0,0.565,7,0.917,18,1.835,40,3.039,41,3.127,43,2.024,44,1.249,45,3.383,46,2.35,47,2.884,48,2.626,49,1.749,50,1.869,51,3.077,55,4.001,56,2.176,57,2.432,62,1,73,1.555,78,2.573,80,1.913,81,1.869,82,1.664,96,2.523,97,1.409,129,1.869,134,2.432,167,2.626,171,0.869,183,1.377,185,1.067,194,3.509,250,2.35,253,2.523,254,2.683,255,2.523,263,1.29,272,2.653,475,4.028,490,3.759,532,2.626,608,1.751,617,2.963,668,2.35,669,2.573,684,1.89,686,2.523,695,3.15,709,2.432,758,3.559,759,2.626,844,2.963,908,4.99,931,4.627,935,2.745,938,2.626,972,2.523,1025,3.399,1048,3.052,1072,2.432,1083,4.028,1100,3.559,1103,3.759,1153,5.519,1163,2.963,1246,3.399,1250,2.963,1329,2.573,1353,3.559,1372,3.759,1375,3.759,1385,4.028,1386,4.028,1390,3.759,1391,4.028,1392,3.559,1393,4.435,1394,2.208,1395,4.435,1396,4.028,1397,4.435,1398,3.052,1399,4.435]],["t/1908",[0,1.168,7,0.674,12,2.474,19,2.83,40,2.017,43,1.295,45,1.635,46,3.529,49,1.517,52,5.757,54,1.798,58,5.338,59,1.548,62,1.771,80,2.871,81,2.806,97,1.342,102,5.338,122,2.124,155,3.084,171,1.304,181,2.277,184,1.25,185,1.101,187,5.644,199,1.972,200,3.25,201,3.877,210,2.806,272,1.864,369,1.996,459,3.365,480,2.653,532,3.943,640,1.385,646,2.83,654,1.576,684,1.949,747,3.505,772,3.505,792,3.943,806,3.67,844,4.449,846,4.398,863,4.329,881,3.25,938,3.943,942,3.368,951,2.311,981,5.343,1053,1.844,1055,3.505,1072,2.508,1163,3.056,1354,2.767,1400,6.658,1401,6.658,1402,6.658,1403,3.877,1404,4.573,1405,4.153,1406,6.047,1407,6.658,1408,4.153,1409,4.573,1410,4.573,1411,4.153]],["t/1910",[0,1.232,40,2.739,49,1.147,54,1.607,59,2.01,62,1.803,82,3,97,1.407,101,5.889,102,5.595,133,4.086,155,2.123,162,3.764,184,1.623,185,1.429,187,5.034,200,4.22,369,2.591,480,3.445,532,5.354,654,2.755,682,3.047,684,2.531,705,3.256,774,2.914,821,1.147,844,6.041,938,5.354,971,4.551,973,4.086,1104,4.086,1204,6.129,1220,4.373,1289,5.034,1355,5.034,1411,5.393,1412,5.393,1413,5.938,1414,5.938,1415,5.938,1416,7.996,1417,5.938,1418,5.938,1419,5.938,1420,7.996,1421,7.996,1422,7.996]],["t/1912",[0,0.823,7,0.726,27,4.997,43,1.645,44,1.239,45,2.31,50,2.723,54,1.503,65,3.041,73,2.021,80,2.786,81,2.723,82,3.173,87,3.749,115,2.111,167,3.826,172,3.781,185,1.555,200,4.592,202,6.482,250,3.424,253,3.676,254,3.909,255,3.676,272,3.447,285,2.332,459,3.265,532,3.826,695,3.126,759,3.826,774,3.171,817,3.676,821,1.248,939,6.131,972,3.676,993,7.226,1207,4.592,1373,7.169,1381,5.868,1396,7.681,1423,4.317]],["t/1914",[7,0.76,34,2.916,40,2.68,272,3.606,617,5.912,906,5.239,1014,4.11,1424,6.515]],["t/1916",[0,1.033,7,0.697,75,4.373,87,6.072,191,3.673,256,4.909,285,2.928,461,5.766,570,4.53,966,6.218,1425,7.368,1426,7.368,1427,7.368,1428,7.368,1429,7.368,1430,7.368,1431,7.368,1432,7.368]],["t/1918",[7,0.52,34,2.672,40,1.836,54,1.077,98,3.891,171,1.187,191,2.744,256,3.667,258,3.341,285,3.297,393,4.704,395,5.659,397,4.704,399,3.667,408,2.892,435,4.173,461,5.762,526,4.307,640,1.836,641,7.435,906,3.589,982,4.463,1014,2.815,1062,4.645,1250,4.05,1359,3.667,1424,6.727,1433,8.858,1434,7.362,1435,6.872,1436,7.362,1437,5.504,1438,4.645,1439,5.504,1440,5.504,1441,5.504,1442,4.864]],["t/1920",[0,0.979,7,0.811,34,3.113,82,3.835,172,3.438,191,4.276,256,5.714,285,2.775,391,2.749,435,3.689,585,6.712,641,6.712,1051,4.873,1252,5.464,1254,5.464,1424,6.955,1443,5.662,1444,6.517]],["t/1922",[7,0.786,49,1.411,51,2.914,55,3.439,82,2.741,116,3.078,159,3.227,171,1.792,191,3.307,256,4.42,285,2.637,435,2.854,438,5.38,641,5.192,648,3.227,754,2.517,854,5.643,1045,6.193,1223,4.881,1369,6.193,1424,7.711,1445,5.599,1446,7.305,1447,7.305,1448,7.305,1449,3.749,1450,6.635,1451,3.227]],["t/1924",[0,0.942,7,0.792,34,2.438,75,3.987,87,5.829,191,4.175,256,5.579,435,2.89,461,7.14,570,4.131,825,4.209,966,5.67,1424,5.448,1425,6.718,1426,6.718,1427,6.718,1428,6.718,1429,6.718,1430,6.718,1431,6.718,1432,6.718,1433,8.375,1434,6.718,1436,6.718,1452,6.718,1453,4.578]],["t/1926",[7,0.896,34,3.439,191,4.724,256,6.313,825,5.937,1424,7.684,1438,6.176,1442,6.466,1452,7.318]],["t/1929",[14,2.804,22,1.491,34,2.118,43,1.25,49,1.628,54,1.774,78,3.728,97,1,139,3.656,158,2.432,171,1.259,181,3.199,191,4.257,208,3.153,258,3.472,263,2.452,408,4.021,585,4.567,633,3.35,650,4.925,666,4.178,678,5.835,691,3.463,718,5.989,792,3.805,799,4.567,805,2.319,825,4.795,1014,3.915,1051,4.073,1078,5.447,1188,5.157,1353,5.157,1359,5.099,1453,5.215,1454,4.732,1455,5.835,1456,6.459,1457,6.425,1458,7.653,1459,5.835]],["t/1931",[7,0.843,15,4.007,16,3.149,22,1.635,23,4.17,29,4.579,43,1.37,54,1.589,64,4.086,104,3.073,129,2.968,130,3.672,208,3.456,269,4.579,574,5.186,608,2.78,666,4.579,670,5.186,771,2.518,935,4.358,970,4.847,1001,4.325,1007,6.396,1014,3.271,1020,5.974,1073,5.97,1104,4.847,1184,5.652,1205,4.261,1359,5.943,1378,6.396,1456,6.852,1460,5.005,1461,7.042]],["t/1933",[0,1.054,7,0.537,34,2.462,37,2.121,43,1.453,48,2.485,49,1.207,51,2.493,54,1.755,55,1.976,56,3.067,57,2.302,58,2.597,59,1.42,62,0.947,71,2.729,78,2.435,97,1.162,98,3.7,104,1.831,110,3.217,112,2.224,122,2.904,126,2.576,129,1.769,155,1.501,157,3.782,185,1.01,208,3.665,408,3.564,608,1.657,632,5.016,642,1.408,679,3.812,692,2.888,709,3.428,714,3.091,766,5.299,771,2.235,782,2.66,789,2.388,815,2.983,880,2.597,918,2.278,925,5.299,929,2.983,931,4.442,1001,3.024,1014,2.904,1020,2.804,1094,3.558,1106,8.425,1117,3.217,1150,2.435,1188,5.016,1204,4.791,1278,3.812,1359,5.613,1456,6.342,1462,4.197,1463,4.197,1464,4.197,1465,4.197,1466,4.197,1467,3.812,1468,4.197,1469,2.224,1470,3.558,1471,3.558,1472,5.299,1473,4.197,1474,4.197,1475,4.197,1476,4.197,1477,6.25,1478,4.197,1479,4.197,1480,4.197,1481,4.197,1482,3.558,1483,3.812,1484,6.25,1485,6.25,1486,3.812,1487,4.197,1488,4.197,1489,7.469,1490,6.25,1491,4.197,1492,3.812,1493,3.812,1494,4.197]],["t/1935",[129,3.728,175,5.475,208,4.341,1014,4.11,1100,7.1,1117,6.781,1202,3.021,1359,5.353]],["t/1937",[7,0.584,23,4.026,45,3.125,46,3.602,54,1.208,70,5.21,71,4.42,98,2.712,104,2.966,122,4.06,129,4.446,171,1.892,185,1.636,208,4.289,272,2.77,675,3.289,705,3.728,709,3.728,759,4.026,772,5.21,825,3.868,848,3.436,909,5.21,942,5.006,1001,3.289,1020,4.542,1021,6.173,1204,5.21,1359,6.17,1406,6.173,1456,7.405,1495,6.699,1496,6.798]],["t/1939",[0,0.896,7,0.767,15,4.004,23,4.168,29,3.211,42,2.708,43,0.961,44,1.573,54,1.796,63,3.76,98,1.97,104,2.155,134,2.708,158,2.366,178,2.758,185,1.189,191,2.236,208,2.423,257,1.309,258,2.035,259,3.785,260,3.637,261,2.265,262,3.963,263,2.385,264,3.963,267,7.446,269,3.211,285,3.544,408,2.356,584,3.3,651,2.575,671,2.496,700,3.963,705,3.859,718,3.51,728,2.575,779,3.13,848,2.496,851,5.665,867,3.963,930,5.183,1014,3.269,1117,3.785,1174,3.963,1207,5.002,1224,2.865,1246,3.785,1249,4.186,1359,4.258,1454,5.183,1456,3.785,1493,4.485,1497,3.963,1498,4.939,1499,4.186,1500,4.939,1501,7.037,1502,6.391,1503,4.939,1504,4.939,1505,4.939,1506,4.939,1507,4.939,1508,4.939,1509,8.199,1510,4.939,1511,4.939,1512,4.939,1513,4.939,1514,4.939,1515,4.485,1516,4.485]],["t/1941",[21,6.003,37,4.372,57,4.745,192,4.585,582,7.334,608,3.415,1014,4.019,1205,5.234,1332,5.484,1359,5.234]],["t/1943",[7,0.687,14,3.492,18,2.256,23,4.739,27,4.241,29,5.203,31,5.347,40,3.151,42,4.389,47,6.293,50,3.372,57,4.389,192,4.241,455,5.203,934,5.129,1051,5.073,1220,5.893,1223,5.347]],["t/1945",[7,0.276,14,1.405,17,1.603,27,5.519,28,2.957,34,1.061,40,0.975,41,1.184,43,1.231,45,1.151,49,1.884,50,1.356,52,1.831,55,1.515,59,1.725,60,1.422,62,0.726,73,1.218,89,1.515,97,1.411,104,1.405,108,4.971,115,1.052,122,3.643,126,1.326,129,1.356,144,3.328,145,1.341,147,3.353,154,2.215,162,2.04,167,3.747,170,2.583,171,1.239,190,2.37,192,1.706,194,1.735,209,1.706,257,0.853,263,0.936,272,3.197,360,2.215,369,2.224,455,4.114,480,1.868,481,2.923,482,2.288,483,2.923,484,2.923,485,2.923,486,2.923,520,4.66,521,7.576,615,3.532,642,2.798,644,1.831,684,1.372,686,2.9,692,2.215,697,1.706,728,2.658,771,1.822,782,2.04,792,1.906,795,2.467,815,2.288,843,2.923,848,2.576,875,4.09,893,2.467,900,1.831,906,1.906,915,2.151,934,4.156,939,5.424,940,2.583,979,2.288,993,2.467,995,2.728,996,6.057,997,4.355,999,2.728,1000,5.241,1003,2.467,1008,2.151,1015,4.321,1018,4.321,1020,2.151,1025,2.467,1040,2.583,1196,4.629,1205,3.829,1223,3.406,1224,1.868,1228,2.583,1229,4.09,1453,3.916,1517,2.923,1518,3.219,1519,2.728,1520,3.219,1521,3.219,1522,2.728,1523,2.923,1524,2.467,1525,2.923,1526,2.467,1527,2.923,1528,2.923,1529,3.219,1530,4.629,1531,3.219,1532,3.219,1533,2.923,1534,3.219,1535,5.097,1536,4.629,1537,3.219,1538,2.923,1539,3.219,1540,2.923,1541,3.219,1542,2.923]],["t/1947",[7,0.801,14,2.375,27,4.58,40,2.282,43,1.466,45,2.694,49,1.051,52,3.097,54,0.967,97,1.345,104,2.375,108,3.45,154,3.745,155,2.694,162,3.45,167,3.223,169,4.372,175,3.368,181,2.71,200,3.868,235,2.933,272,3.071,291,2.562,435,2.126,500,4.943,584,3.637,640,1.648,642,2.899,675,3.645,773,4.171,848,3.808,876,6.843,884,4.171,900,3.097,901,3.039,939,7.075,996,6.544,997,5.947,1018,6.387,1023,4.368,1165,4.368,1184,4.368,1205,3.293,1253,6.843,1354,3.293,1403,4.613,1536,4.943,1538,4.943,1542,4.943,1543,5.549,1544,4.943,1545,5.442,1546,4.943,1547,4.368,1548,5.442]],["t/1949",[0,1.145,7,0.429,27,2.651,28,4.791,37,3.589,44,1.362,55,3.343,58,5.562,73,2.268,79,3.17,104,2.183,115,1.634,129,2.108,144,3.786,169,4.12,170,4.014,183,2.205,184,1.367,185,1.709,192,2.651,209,3.763,272,2.894,459,4.543,503,2.926,540,2.959,640,2.722,771,2.539,779,4.501,802,3.342,803,5.23,900,4.04,901,2.793,906,2.962,934,3.763,1184,4.014,1223,3.342,1450,8.621,1453,5.562,1472,4.24,1549,5.002,1550,5.002,1551,9.492,1552,9.861,1553,4.542,1554,4.24,1555,4.542,1556,5.002,1557,8.988,1558,7.101,1559,7.101,1560,5.002,1561,5.002]],["t/1951",[7,0.35,18,2.587,22,1.42,26,2.127,28,4.734,34,1.345,40,1.854,41,3.903,42,2.238,43,1.587,44,1.174,45,1.459,49,1.934,59,1.381,65,1.921,89,4.115,97,0.952,105,3.172,116,1.719,120,3.006,126,1.681,127,2.586,128,5.571,129,2.579,158,1.766,159,2.703,162,2.586,171,1.598,191,2.771,257,1.081,503,1.681,608,1.611,642,2.053,644,3.482,669,2.367,681,2.469,692,4.212,782,3.879,854,3.298,865,2.808,936,3.657,937,3.553,938,5.177,945,6.017,950,3.127,1001,1.974,1002,7.016,1003,3.127,1004,3.127,1005,3.459,1008,4.09,1009,5.188,1040,3.274,1152,1.839,1166,3.459,1167,3.274,1205,3.703,1334,3.706,1403,3.459,1405,3.706,1523,3.706,1530,3.706,1562,4.08,1563,3.274,1564,4.08,1565,4.08,1566,4.08,1567,3.706,1568,4.08,1569,4.08,1570,4.08,1571,3.005]],["t/1953",[0,0.788,7,0.531,14,1.806,17,2.06,18,2.316,27,2.193,28,3.588,34,1.364,40,2.489,41,1.522,42,2.269,43,1.203,45,1.479,48,4.386,49,1.195,51,1.651,62,1.395,80,1.784,97,1.436,104,1.806,105,2.003,115,2.42,122,1.922,139,2.354,144,1.651,145,1.724,154,2.848,171,1.873,174,2.06,180,2.504,181,3.079,185,0.996,209,3.278,221,3.047,257,1.097,285,1.493,369,1.806,452,6.233,455,5.719,476,4.555,480,2.401,482,2.941,496,2.193,503,1.705,540,1.724,640,1.253,642,1.388,651,2.157,682,3.801,684,2.636,705,2.269,759,2.45,792,2.45,802,2.765,853,2.848,870,3.758,896,3.321,901,2.311,908,3.171,934,3.925,979,5.84,1000,5.491,1014,1.922,1041,3.321,1194,2.941,1223,2.765,1249,3.508,1335,3.508,1412,3.758,1443,3.047,1525,7.988,1526,6.741,1572,4.138,1573,3.321,1574,4.138,1575,6.185,1576,4.138,1577,6.185,1578,4.138,1579,4.138,1580,8.795,1581,3.92,1582,3.047,1583,4.138,1584,4.138,1585,4.138,1586,3.758,1587,3.047,1588,4.138,1589,4.138,1590,4.138]],["t/1955",[7,0.564,18,2.41,40,1.99,45,2.349,48,3.89,49,1.269,59,2.893,73,2.043,97,1.022,146,3.178,171,1.972,180,3.975,185,1.581,369,2.867,452,5.419,455,5.559,476,4.838,480,3.812,609,5.569,631,5.035,674,5.569,681,3.975,682,3.372,684,2.8,755,3.372,817,3.738,979,4.669,1008,5.713,1041,5.272,1059,5.966,1060,5.966,1061,5.272,1499,5.569,1526,5.035,1591,6.569,1592,8.55,1593,5.569,1594,6.569,1595,5.966,1596,6.569,1597,5.272,1598,5.966,1599,6.569,1600,6.569]],["t/1957",[7,0.695,18,1.13,27,3.202,41,1.475,42,2.199,43,1.574,44,1.159,46,2.125,49,1.762,56,1.968,73,0.958,88,2.76,89,3.808,90,1.914,97,1.605,112,3.202,115,1.31,116,1.69,130,3.15,141,2.36,144,4.217,145,1.671,147,5.016,155,1.434,171,1.183,174,1.997,181,1.997,261,1.839,355,1.86,434,3.053,436,2.282,437,2.239,496,2.125,503,1.653,640,1.215,642,2.026,669,2.327,671,2.027,675,1.94,763,3.4,779,3.829,782,3.829,792,3.578,804,3.4,805,2.18,818,2.482,840,3.219,854,2.161,910,2.608,918,1.461,934,3.852,945,2.76,996,2.68,997,2.76,1000,4.037,1002,5.833,1010,5.121,1014,2.806,1015,3.4,1081,5.121,1094,6.161,1152,1.205,1163,4.857,1165,3.219,1166,3.4,1171,2.504,1205,2.427,1528,3.642,1586,3.642,1587,5.352,1597,3.219,1601,3.642,1602,6.041,1603,4.011,1604,6.601,1605,4.011,1606,4.011,1607,7.268,1608,6.041,1609,6.041,1610,3.642,1611,4.011,1612,3.642,1613,4.848,1614,4.011,1615,4.011,1616,3.4,1617,4.011,1618,4.011]],["t/1959",[7,0.671,12,2.13,26,4.631,37,2.898,40,2.69,42,3.145,43,1.728,44,1.1,49,1.988,54,1.773,55,2.7,59,1.941,79,4.951,85,2.855,89,4.181,97,1.484,106,3.947,112,3.039,115,1.874,137,2.775,141,3.897,142,6.111,185,1.38,285,2.819,556,4.395,607,2.943,640,1.737,650,4.395,671,2.898,703,3.039,705,3.145,755,2.943,771,2.05,918,2.846,1179,2.775,1180,4.861,1223,3.832,1619,5.208,1620,8.881,1621,5.735,1622,5.735,1623,4.395,1624,4.861,1625,5.735]],["t/1961",[37,4.505,54,1.584,155,3.187,175,5.517,1256,8.096,1318,6.565,1482,7.557]],["t/1963",[26,2.491,40,2.438,49,1.555,73,1.642,97,0.744,98,3.511,112,3.642,128,5.526,137,4.954,141,1.866,142,5.411,181,2.379,185,1.937,186,3.518,542,1.724,556,7.67,581,3.193,611,3.834,640,1.447,651,2.491,655,3.288,684,2.037,714,3.518,762,4.05,763,4.05,789,5.008,850,3.028,865,3.288,867,3.834,918,2.504,1003,3.662,1072,2.62,1163,3.193,1306,3.834,1318,7.796,1319,6.169,1497,3.834,1587,3.518,1623,3.662,1626,4.778,1627,6.242,1628,3.834,1629,6.873,1630,4.778,1631,8.049,1632,7.31,1633,8.47,1634,4.778,1635,7.994,1636,4.778,1637,4.778,1638,4.778,1639,4.778,1640,4.778,1641,4.778,1642,4.778,1643,4.778,1644,4.778,1645,4.778,1646,4.339]],["t/1965",[12,3.486,37,2.789,40,1.672,43,1.074,49,1.812,54,0.981,60,3.36,82,2.854,85,4.672,98,2.202,112,2.925,119,2.799,134,4.774,141,3.665,142,6.049,155,1.973,176,4.23,184,1.508,185,1.328,207,4.064,223,1.937,435,2.972,468,4.288,616,3.003,654,1.902,727,2.05,851,3.498,853,3.798,918,2.772,938,3.268,1003,5.831,1028,6.105,1043,2.633,1044,5.407,1047,5.012,1055,7.192,1318,5.602,1408,5.012,1482,6.449,1623,7.192,1647,5.012,1648,5.012,1649,5.012,1650,5.519,1651,5.519,1652,5.519]],["t/1967",[0,1.367,12,3.308,40,1.746,49,2.037,54,1.832,85,3.902,97,0.897,128,4.459,134,5.653,142,6.227,143,4.417,155,2.802,184,1.575,185,1.387,186,4.244,223,2.75,468,2.429,654,2.7,681,3.487,727,2.911,918,2.1,1043,3.739,1044,5.569,1318,5.771,1319,6.006,1627,7.117,1647,7.117,1648,7.117,1649,7.117,1653,7.117,1654,7.117]],["t/1969",[0,1.093,7,0.567,12,3.188,40,2.001,49,1.276,59,2.236,85,4.273,97,1.335,128,5.423,142,5.53,143,5.063,155,2.362,181,3.289,184,1.805,185,1.59,186,4.865,228,5.734,261,3.029,468,2.784,638,3.759,681,3.997,755,4.404,881,4.695,918,3.127,945,4.546,1043,4.094,1044,6.098,1104,4.546,1150,3.833,1318,6.319,1319,6.577,1499,5.6,1653,6,1654,7.793,1655,8.581,1656,5.302]],["t/1971",[7,0.843,29,6.387,46,3.732,54,1.589,135,6.079,137,4.752,141,3.492,142,5.187,185,2.364,556,6.852,651,3.672,686,4.007,865,4.847,1306,5.652,1319,5.398,1324,6.396,1355,5.97,1362,8.119,1632,6.396,1633,8.119,1657,8.94,1658,6.396,1659,7.042,1660,7.042,1661,7.042]],["t/1973",[7,0.903,14,3.228,18,2.085,40,2.241,44,1.769,97,1.151,126,3.048,184,2.021,360,5.091,408,3.53,640,2.241,642,3.37,879,5.937,918,2.695,997,5.091,1001,3.579,1020,4.943,1075,5.448,1148,5.937,1169,5.707,1179,3.579,1517,6.718,1662,7.397,1663,5.257,1664,7.397,1665,5.937,1666,7.397]],["t/1975",[49,1.438,50,3.137,53,2.082,97,1.72,98,3.693,99,5.482,100,4.504,101,5.482,171,1.458,174,3.707,175,4.607,263,2.166,527,6.387,707,5.974,741,6.761,752,4.906,918,3.373,1063,6.311,1204,5.706,1357,5.706,1467,6.761,1667,7.444,1668,7.444]],["t/1977",[7,0.697,47,5.275,49,1.567,222,5.275,263,2.36,640,2.458,642,2.721,684,3.458,1148,6.511,1162,6.511,1522,6.878,1581,5.143,1669,7.368,1670,8.113,1671,8.113,1672,8.113,1673,8.113,1674,8.113,1675,8.113,1676,8.113]],["t/1979",[7,0.774,32,4.518,49,1.74,56,3.498,57,3.909,122,3.311,171,1.396,192,3.777,222,4.635,263,2.074,360,6.2,497,4.905,581,6.02,608,2.814,640,2.729,642,2.391,682,3.658,865,4.905,878,2.479,900,5.126,1202,2.434,1228,5.72,1229,5.72,1394,3.549,1543,5.249,1677,7.128,1678,9.009,1679,7.128,1680,7.128,1681,7.128,1682,6.473,1683,7.128,1684,7.128]],["t/1981",[5,5.286,7,0.861,41,3.53,43,1.741,49,1.124,107,3.602,123,3.665,126,2.398,171,1.14,403,3.377,408,3.764,542,2.101,642,2.646,666,5.129,669,5.192,746,2.704,771,2.081,775,4.005,789,3.312,821,1.124,901,4.997,915,3.889,929,4.136,1014,2.704,1121,3.25,1169,5.538,1179,3.817,1189,4.934,1230,5.286,1231,5.286,1345,4.773,1354,3.521,1361,4.136,1394,2.898,1581,3.689,1616,4.934,1663,4.136,1685,4.934,1686,3.889,1687,5.607,1688,4.005,1689,4.934,1690,4.671,1691,4.286,1692,4.286,1693,4.671,1694,4.671,1695,5.286,1696,4.934,1697,5.286,1698,4.934,1699,4.934,1700,5.286,1701,5.82,1702,5.82]],["t/1983",[0,0.574,7,0.668,17,2.242,27,4.827,28,3.82,34,1.484,43,1.665,44,1.263,49,1.76,51,1.796,73,1.076,89,2.12,97,1.599,105,1.459,116,4.331,129,2.774,130,2.348,139,2.562,168,4.281,171,0.882,209,2.386,257,1.745,269,2.928,285,1.625,291,2.12,355,1.387,415,3.451,455,2.928,520,4.848,684,1.919,749,3.614,755,4.394,818,2.787,854,4.909,860,2.928,905,3.2,918,2.399,934,4.124,939,2.928,950,3.451,977,3.817,996,3.009,1000,4.399,1002,5.283,1061,3.614,1066,4.089,1072,3.61,1090,2.179,1163,3.009,1180,3.817,1193,3.614,1223,3.009,1250,3.009,1345,2.724,1469,2.386,1555,4.089,1582,3.316,1601,4.089,1604,4.089,1682,4.089,1692,3.316,1703,5.581,1704,5.979,1705,4.089,1706,4.089,1707,4.503,1708,4.089,1709,4.089,1710,4.089,1711,4.089,1712,4.089,1713,4.089,1714,4.503,1715,4.503,1716,4.503,1717,4.503,1718,6.584,1719,4.503,1720,5.979,1721,3.451,1722,4.503,1723,4.503,1724,4.503,1725,4.503]],["t/1985",[7,0.526,27,4.866,34,2.018,41,2.253,43,1.905,49,1.183,55,2.883,60,2.705,97,1.693,105,1.984,116,2.581,118,4.694,122,3.792,130,3.193,181,3.049,222,5.308,269,3.982,355,1.886,415,4.694,455,3.982,488,5.191,503,2.523,520,4.51,619,2.21,620,3.79,642,3.422,775,4.214,893,4.694,942,4.51,979,4.352,996,5.455,1000,4.092,1197,7.784,1343,5.191,1527,5.561,1703,7.784,1704,5.561,1705,5.561,1706,5.561,1708,5.561,1709,5.561,1710,5.561,1711,5.561,1726,5.561]],["t/1987",[7,0.673,10,5.099,49,1.515,50,3.305,147,5.066,171,1.872,355,2.415,497,5.397,542,2.83,640,2.375,642,2.63,684,3.343,818,4.853,898,6.011,901,5.338,1121,5.338,1124,5.775,1581,4.971,1685,6.648,1727,7.672]],["t/1989",[7,0.591,35,4.073,43,1.338,97,1.37,291,4.822,559,5.065,640,2.083,642,2.307,684,2.932,818,4.256,898,7.446,915,4.595,1014,3.195,1057,6.485,1169,4.256,1320,5.83,1581,4.359,1686,4.595,1688,4.733,1691,7.797,1728,5.271,1729,6.246,1730,5.83,1731,7.465,1732,5.519,1733,7.998,1734,6.246,1735,7.067,1736,7.998,1737,6.246,1738,6.246]],["t/1991",[7,0.673,17,3.905,49,1.846,171,1.872,190,5.775,496,4.156,503,3.231,666,5.099,669,5.546,740,5.573,771,2.804,775,5.397,901,4.379,1064,6.648,1121,4.379,1169,4.853,1581,4.971,1697,7.122,1698,6.648,1699,6.648,1739,7.842,1740,5.775]],["t/1993",[7,0.702,43,1.589,44,1.567,50,3.443,53,2.285,104,3.565,144,3.259,171,1.919,257,2.165,452,6.211,799,5.806,1103,6.925,1533,7.42,1581,5.178,1597,6.556,1619,7.42,1741,7.42]],["t/1995",[7,0.564,10,4.272,14,2.867,35,3.89,44,1.26,97,1.022,112,3.481,123,3.052,171,1.287,291,4.739,355,2.023,408,3.135,559,4.838,640,1.99,682,3.372,755,3.372,898,7.716,906,3.89,915,5.713,1014,3.052,1057,4.838,1121,4.774,1124,4.838,1130,5.569,1320,5.569,1581,5.419,1688,4.521,1691,7.686,1729,5.966,1730,5.569,1731,7.248,1732,5.272,1733,7.765,1734,5.966,1735,6.861,1736,5.966,1737,5.966,1738,5.966]],["t/1997",[0,0.886,7,0.598,14,3.037,22,2.466,43,1.726,44,1.702,49,1.714,51,2.776,71,4.525,97,1.083,104,3.037,120,2.197,129,2.932,130,4.626,171,1.363,355,3.168,607,3.571,608,2.747,863,4.525,1001,4.726,1104,4.789,1152,3.091,1202,2.376,1236,6.306,1354,4.21,1742,6.959,1743,6.32]],["t/1999",[0,0.866,7,0.584,22,2.367,43,1.879,87,3.944,97,1.36,104,3.814,115,2.221,120,2.146,122,4.06,129,4.298,171,1.712,176,5.21,250,3.602,253,3.868,255,3.868,285,2.453,355,2.975,607,3.489,608,2.683,651,3.544,668,4.632,673,6.173,863,4.42,1001,4.229,1077,6.173,1152,2.903,1236,4.831,1744,6.173,1745,6.173]],["t/2001",[0,1.152,7,0.776,22,2.245,43,2.067,82,3,87,3.445,97,1.618,98,2.369,104,2.591,123,2.758,129,3.37,171,1.163,191,3.62,250,3.147,253,3.379,255,3.379,259,6.129,260,4.373,262,4.765,285,2.886,355,2.979,369,2.591,651,3.096,668,3.147,705,3.256,728,3.096,915,3.968,990,5.034,1152,2.716,1181,6.93,1236,6.875,1744,5.393,1746,5.938,1747,5.938,1748,4.765,1749,7.996,1750,7.996,1751,5.938]],["t/2003",[7,0.635,18,2.085,22,2.14,45,3.297,54,1.314,97,1.435,120,2.336,129,4.432,155,2.645,174,3.683,179,4.578,185,1.78,190,5.448,235,3.987,261,4.228,355,2.278,607,3.797,608,2.92,705,4.057,773,5.67,848,4.661,1152,2.222,1181,7.068,1236,6.554]],["t/2005",[22,1.717,40,2.241,45,3.297,49,1.429,50,3.117,52,5.247,53,2.069,54,1.314,62,1.668,97,1.151,120,2.336,129,4.432,162,4.689,171,1.449,185,1.78,200,5.257,285,2.67,355,2.278,459,5.316,607,3.797,608,2.92,640,2.241,709,4.057,863,4.81,1001,3.579,1181,5.67]],["t/2007",[0,0.832,7,0.814,15,3.717,16,2.921,34,2.153,40,1.979,49,1.645,51,2.606,52,3.717,55,3.075,56,3.206,57,3.583,90,4.065,97,1.563,147,4.515,171,1.857,172,2.921,177,5.243,257,1.731,272,3.863,285,2.358,646,4.043,649,4.811,695,4.586,705,3.583,746,3.035,771,2.336,825,4.847,848,4.305,861,5.933,884,5.007,1044,4.643,1295,5.933,1495,7.265,1582,4.811,1752,4.248,1753,6.533]],["t/2009",[7,0.765,43,1.734,44,1.71,97,1.387,1495,6.832,1754,7.154,1755,7.557]],["t/2011",[7,0.76,41,3.778,44,1.697,97,1.377,1495,6.781,1754,7.1,1755,7.5]],["t/2013",[0,1.515]],["t/2015",[0,1.512,7,0.841,1756,8.17]],["t/2017",[0,1.523,7,0.623,32,5.777,222,4.721,1757,7.26,1758,7.26,1759,7.26,1760,7.26]],["t/2019",[0,1.501,7,0.737]],["t/2021",[0,1.517,4,1.637,7,0.444,18,1.132,22,1.562,32,1.523,40,0.728,42,1.317,44,0.461,49,0.464,50,1.012,59,1.359,62,0.906,65,2.847,66,1.367,73,0.574,77,1.769,89,1.131,97,0.374,98,1.602,102,1.487,105,0.778,107,1.487,108,1.523,120,1.268,155,1.436,156,3.626,158,2.099,172,1.074,184,0.656,191,2.343,209,1.273,257,2.229,258,1.655,263,2.447,369,3.174,391,0.859,393,3.002,395,3.002,396,2.036,397,1.394,399,1.453,408,1.916,459,2.03,526,4.298,531,3.678,540,1.001,581,1.605,585,1.707,608,0.948,615,1.179,644,2.285,684,1.024,712,1.605,717,1.673,739,1.653,754,0.828,805,1.449,825,2.944,860,1.562,1043,1.146,1188,1.928,1213,3.966,1224,3.509,1345,1.453,1454,1.769,1469,2.742,1563,1.928,1573,4.853,1761,4.016,1762,4.635,1763,1.619,1764,3.404,1765,2.16,1766,2.036,1767,2.036,1768,2.036,1769,2.036,1770,2.036,1771,2.181,1772,2.036,1773,1.841,1774,1.928,1775,2.036,1776,1.707,1777,2.036,1778,2.036,1779,2.181,1780,2.402,1781,2.036,1782,2.181,1783,2.036,1784,2.181,1785,2.181,1786,2.181,1787,4.016,1788,2.402,1789,4.016,1790,4.016,1791,6.968,1792,2.181,1793,2.036,1794,2.402,1795,2.402,1796,2.402,1797,2.402,1798,4.7,1799,2.402,1800,2.402,1801,4.7,1802,2.402,1803,2.402,1804,2.036,1805,2.181]],["t/2023",[0,1.528,7,0.762,23,4.121,27,3.688,28,4.038,29,4.525,30,5.585]],["t/2025",[0,1.518,29,6.216,239,4.971,1806,7.842]],["t/2027",[0,1.535,7,0.691,23,6.247,228,2.653,399,4.371,418,2.923,422,3.8,935,2.457,989,3.365,1257,3.605,1304,5.445,1454,2.923,1502,3.605,1807,3.605,1808,3.365,1809,3.97,1810,3.365,1811,3.605]],["t/2029",[0,1.515,7,0.652,129,3.198,158,2.704,540,3.162,609,7.942,934,4.022,1812,7.589]],["t/2031",[0,1.532,7,0.774,30,4.741,935,4.932,1460,5.664,1813,5.908,1814,5.908,1815,5.908,1816,5.908,1817,5.908]],["t/2033",[0,1.536,31,3.286,144,3.558,158,1.419,263,1.431,418,5.167,935,5.062,1460,3.495,1804,4.169,1818,4.918,1819,4.918]],["t/2035",[0,1.395,7,0.777,1460,6.433]],["t/2037",[0,1.531,935,5.963,1460,4.803,1820,6.138]],["t/2039",[0,1.531,92,2.941,199,3.414,1460,4.157,1807,7.189,1820,7.189,1821,5.849,1822,5.849,1823,7.189,1824,7.915,1825,7.915]],["t/2041",[0,1.506,31,5.497,935,5.091,1826,8.227,1827,8.227]],["t/2043",[0,1.529,7,0.753,22,1.783,97,1.196,106,3.853,129,2.359,144,3.765,147,4.071,496,4.071,608,2.21,935,3.465,1460,3.979,1828,9.44,1829,5.598]],["t/2045",[0,1.53,7,0.594,99,6.51,1137,6.283,1830,6.918]],["t/2047",[0,1.531,7,0.762,34,2.293]],["t/2049",[0,1.536,7,0.835,34,1.214,82,1.382,84,3.897,88,3.897,99,2.712,105,1.193,191,2.564,235,1.985,250,3.001,253,3.222,254,3.426,255,3.925,471,2.535,532,2.181,610,2.956,611,2.956,612,3.122,850,2.335,1755,3.122,1831,3.345,1832,3.683,1833,3.683,1834,3.683]],["t/2051",[0,1.514,7,0.711]],["t/2053",[0,0.802,7,0.908,14,1.393,18,2.547,40,0.967,41,2.874,43,0.985,44,1.207,45,1.141,49,1.746,50,2.134,54,0.9,59,3.227,60,1.41,73,2.401,80,3.369,81,3.019,84,2.197,88,4.331,98,2.02,104,2.747,113,2.269,115,1.043,134,1.751,167,3.727,183,2.705,185,1.219,186,2.351,191,1.445,192,1.692,208,2.485,235,4.21,250,2.684,253,2.881,254,3.064,255,3.581,263,0.929,272,3.551,285,2.586,368,2.562,369,1.393,459,4.201,471,3.485,531,2.269,538,2.899,540,1.33,542,1.152,611,2.562,612,2.706,617,2.133,633,1.665,638,4.076,640,1.534,681,1.932,684,1.361,691,1.721,695,2.45,705,1.751,709,1.751,747,2.447,753,4.064,758,2.562,776,2.351,780,2.706,815,2.269,844,2.133,850,3.99,851,3.21,905,2.269,906,1.891,910,2.076,1005,4.293,1031,2.706,1048,5.376,1194,4.473,1207,2.269,1316,2.447,1339,2.899,1340,2.899,1348,2.447,1372,2.706,1374,2.899,1375,2.706,1394,1.59,1445,4.824,1495,2.447,1658,2.899,1835,3.192,1836,3.192,1837,3.192,1838,5.064,1839,3.192,1840,3.192,1841,3.192,1842,5.064,1843,3.192,1844,3.192,1845,3.192,1846,3.192,1847,3.192,1848,3.192,1849,3.192,1850,3.192,1851,5.064,1852,2.899,1853,3.192,1854,3.192,1855,3.192,1856,3.192,1857,2.899,1858,2.899,1859,3.192,1860,3.192]],["t/2055",[7,0.892,14,1.921,35,4.548,36,2.372,37,2.225,41,3.59,43,1.494,80,1.898,130,2.295,171,1.659,355,1.355,385,3.997,408,4.041,640,1.333,642,2.172,746,2.045,817,4.37,821,1.251,927,3.997,1001,3.132,1169,2.724,1179,4.097,1335,3.731,1345,2.663,1361,3.128,1394,3.224,1665,5.196,1686,5.659,1687,6.708,1688,4.456,1689,5.489,1693,3.532,1694,3.532,1861,3.532,1862,6.975,1863,3.731,1864,6.164,1865,6.164,1866,6.164,1867,6.164,1868,6.164,1869,7.574,1870,7.179,1871,8.169,1872,5.88,1873,7.691,1874,6.164,1875,6.164,1876,6.164,1877,5.489,1878,4.402,1879,4.402,1880,3.997,1881,3.997,1882,4.402]],["t/2057",[7,0.825,22,1.56,34,2.215,41,3.192,43,1.307,44,1.289,73,2.073,97,1.35,105,2.177,145,2.8,171,1.699,408,3.206,640,2.035,677,6.103,732,5.15,817,3.823,1001,3.251,1014,3.122,1152,2.019,1169,5.369,1179,3.251,1244,3.504,1358,6.103,1361,6.166,1394,3.346,1526,6.65,1540,6.103,1686,5.797,1728,6.65,1740,6.389,1883,6.72,1884,8.676,1885,8.676,1886,8.676,1887,6.72]],["t/2059",[0,0.801,7,0.713,14,3.625,15,3.578,16,2.811,22,1.459,23,3.724,24,4.819,30,5.046,31,4.202,34,2.738,41,2.313,44,1.206,49,1.215,65,2.96,66,3.578,77,4.63,115,2.054,126,2.591,134,3.448,137,3.042,185,1.999,263,2.417,408,3,608,3.279,642,2.109,746,2.921,1001,4.501,1020,5.551,1152,1.889,1158,6.367,1179,3.042,1194,4.469,1202,2.147,1394,3.131,1526,6.367,1665,5.046,1740,4.63,1888,6.288,1889,7.545,1890,8.308,1891,7.042,1892,6.288,1893,8.308,1894,7.042,1895,6.288]],["t/2061",[7,0.689,25,4.107,26,3.112,41,2.196,43,1.161,44,1.145,49,1.872,66,3.396,90,2.848,96,3.396,97,1.249,105,1.933,122,2.772,157,3.611,169,3.463,194,3.216,235,4.324,257,1.582,269,3.881,272,2.432,382,5.059,408,2.848,542,2.154,637,5.059,644,3.396,666,3.881,670,4.395,671,3.016,792,3.534,973,4.107,1051,3.783,1113,7.287,1179,2.887,1205,3.611,1248,5.42,1345,5.865,1455,5.42,1497,4.79,1686,5.361,1728,6.947,1889,7.287,1894,5.059,1896,5.968,1897,5.968,1898,7.287,1899,5.42,1900,5.968,1901,5.968,1902,5.968,1903,5.968,1904,5.968,1905,5.968,1906,5.968,1907,5.968,1908,5.968,1909,5.968,1910,5.968]],["t/2063",[35,4.553,222,4.999,1011,6.517,1057,7.528,1228,6.17,1229,6.17,1522,6.517,1610,6.982,1669,6.982,1685,6.517,1687,6.712,1688,6.499,1691,6.955,1699,6.517,1731,8.006,1823,6.982,1911,7.688,1912,7.688,1913,7.688,1914,7.688,1915,7.688,1916,7.688]],["t/2065",[7,0.907,37,4.187,41,3.635,43,1.922,408,3.953,642,2.779,789,4.714,821,1.6,1169,5.127,1179,4.008,1361,5.888,1394,4.125,1693,6.649]],["t/2067",[0,1.066,7,0.546,35,5.539,36,3.425,43,1.236,97,0.989,130,3.314,171,1.245,355,1.957,408,3.992,642,3.334,746,2.953,817,3.616,961,5.101,1072,3.486,1179,3.075,1394,4.166,1613,5.101,1686,5.591,1687,5.946,1688,4.374,1728,4.871,1732,5.101,1735,5.101,1740,6.162,1861,6.715,1863,5.388,1864,5.101,1865,5.101,1866,5.101,1867,5.101,1868,5.101,1869,6.715,1870,5.388,1871,6.413,1872,5.772,1874,5.101,1875,5.101,1876,5.101,1877,5.388,1917,6.356,1918,6.356,1919,5.772,1920,7.599,1921,5.772]],["t/2069",[0,1.081,7,0.812,35,5.598,36,3.501,41,2.39,43,1.264,97,1.011,130,3.387,171,1.273,355,2.001,408,3.1,642,3.362,746,3.018,1179,3.143,1394,3.235,1613,5.214,1665,5.214,1686,5.672,1687,6.032,1688,4.471,1689,5.507,1728,4.979,1732,5.214,1735,5.214,1740,6.251,1861,5.214,1863,5.507,1864,5.214,1865,5.214,1866,5.214,1867,5.214,1868,5.214,1869,6.812,1870,5.507,1871,6.506,1874,5.214,1875,5.214,1876,5.214,1877,5.507,1919,5.9,1920,7.708,1921,5.9]],["t/2071",[35,4.644,36,4.227,408,3.742,642,3.459,1394,3.905,1686,6.388,1687,6.794,1688,5.397,1861,6.294,1864,6.294,1865,6.294,1866,6.294,1867,6.294,1868,6.294,1869,7.672,1871,6.011,1873,7.122,1874,6.294,1875,6.294,1876,6.294]],["t/2073",[7,0.727,37,4.278,41,3.682,43,1.646,107,5.238,171,1.658,746,3.932,1179,4.095,1345,5.121,1616,7.175,1693,6.793,1695,7.687,1696,7.175]],["t/2075",[7,0.588,16,3.591,19,2.945,22,2.039,34,2.647,41,2.521,43,1.333,49,1.324,79,3.016,96,2.707,97,0.741,122,3.183,126,2.824,137,3.885,171,1.342,179,2.945,181,2.369,257,1.261,263,1.384,285,1.717,291,2.24,355,1.465,408,4.443,556,3.647,581,3.18,607,2.442,608,3.468,619,1.717,642,2.299,644,4.999,666,3.094,682,3.517,707,3.819,709,2.61,742,3.382,745,5.499,746,3.183,771,1.701,860,3.094,910,3.094,930,5.046,1001,2.302,1054,6.223,1072,3.758,1117,3.647,1152,1.43,1158,3.647,1179,2.302,1187,4.034,1189,4.034,1243,3.819,1343,4.034,1345,5.316,1354,2.879,1390,5.809,1451,2.102,1472,4.034,1597,5.499,1656,3.819,1686,3.18,1752,3.094,1894,5.809,1899,4.321,1922,6.853,1923,4.758,1924,6.853,1925,4.758,1926,4.758,1927,6.853,1928,4.758,1929,3.647,1930,6.853,1931,4.758,1932,4.758,1933,4.034,1934,4.758,1935,4.034,1936,4.321,1937,4.321]],["t/2077",[14,2.835,16,4.227,22,1.97,26,3.387,41,3.123,43,1.651,44,1.246,80,2.802,96,3.696,112,3.443,137,3.143,169,3.769,176,4.979,257,2.25,263,1.89,642,2.179,655,4.471,709,3.563,746,4.392,771,2.323,821,1.255,887,7.195,1001,4.107,1148,5.214,1152,2.55,1167,5.214,1179,4.574,1352,5.9,1470,5.507,1471,5.507,1492,5.9,1613,5.214,1696,5.507,1730,5.507,1740,4.784,1752,4.224,1935,5.507,1936,5.9,1937,5.9,1938,6.497,1939,5.507,1940,6.497,1941,6.497]],["t/2079",[0,1.476,7,0.459,17,3.704,40,1.618,43,1.665,45,1.91,49,1.032,50,2.252,53,2.08,54,1.322,87,3.1,98,2.131,104,2.332,115,2.43,155,3.308,172,4.504,185,1.286,250,2.832,253,3.04,254,3.233,255,3.04,261,2.45,272,2.178,393,3.1,395,3.1,408,3.549,615,5.071,633,2.786,640,1.618,646,5.296,651,2.786,654,2.949,681,3.233,682,2.742,695,2.585,705,2.93,882,4.095,911,4.853,912,4.853,913,4.853,1025,4.095,1051,3.387,1316,4.095,1781,4.529,1942,5.343,1943,5.343,1944,4.529,1945,5.343]],["t/2081",[7,0.798,22,1.739,51,2.989,55,3.527,56,3.676,57,4.109,115,2.448,126,3.087,168,4.871,172,4.724,179,4.637,183,2.326,224,4.437,615,5.331,633,3.906,640,2.269,654,3.203,675,3.625,825,4.263,884,5.742,885,6.804,886,6.012,1345,4.533]],["t/2083",[0,1.524,4,3.744,7,0.789,355,2.264,1444,6.231]],["t/2085",[4,3.856,7,0.812,17,2.469,22,2.078,34,2.326,37,3.567,40,2.489,45,1.773,50,2.09,51,1.978,53,1.387,54,0.881,59,1.678,64,4.096,66,2.822,79,3.144,115,1.62,145,2.066,167,2.937,169,4.096,171,0.971,179,3.069,183,1.54,184,1.355,194,2.673,203,3.98,209,2.628,257,1.314,263,1.443,272,2.021,402,5.841,540,2.941,597,4.768,642,2.368,644,2.822,651,2.586,681,3.001,697,3.741,754,2.432,755,2.545,779,3.144,817,2.822,829,3.144,1001,2.399,1004,3.801,1020,3.314,1053,2,1075,3.652,1175,4.204,1192,4.504,1210,4.204,1247,4.204,1254,3.525,1317,4.204,1345,3.001,1359,3.001,1390,4.204,1391,4.504,1423,3.314,1443,3.652,1453,4.368,1469,2.628,1663,3.525,1687,3.525,1727,3.98,1762,3.801,1763,2,1946,4.504,1947,4.504,1948,3.98,1949,4.204,1950,4.959,1951,6.411,1952,4.959,1953,4.959,1954,4.504,1955,4.959,1956,4.204,1957,3.98,1958,4.959,1959,4.959,1960,4.959,1961,4.504,1962,4.204,1963,4.959]],["t/2087",[37,4.34,40,2.601,66,4.886,108,5.444,169,4.983,175,5.315,355,2.645,642,2.881,1171,2.959,1663,6.104,1964,7.8,1965,8.588]],["t/2089",[7,0.598,42,3.816,44,1.335,45,3.172,54,1.237,59,3.003,62,1.569,66,3.959,73,2.12,105,2.874,107,4.307,108,6.192,112,3.688,174,3.465,184,1.902,285,2.512,440,4.789,642,2.334,930,5.125,950,5.334,1171,3.057,1593,5.899,1966,6.959,1967,6.959,1968,6.959,1969,6.959,1970,5.899,1971,8.873,1972,8.873,1973,6.959,1974,6.959,1975,6.959,1976,6.959,1977,6.959,1978,6.959]],["t/2091",[4,2.648,7,0.861,14,2.835,22,1.97,37,3.283,40,1.968,43,1.264,44,1.246,59,3.199,65,3.996,115,2.773,127,4.118,257,2.25,285,3.063,402,4.617,540,4.177,597,3.769,619,2.345,642,2.179,754,2.925,792,3.847,934,5.01,1205,3.931,1213,4.979,1663,4.617,1763,2.619,1765,2.803,1783,5.507,1791,5.214,1949,5.507,1956,5.507,1962,5.507,1979,6.497,1980,5.9,1981,6.497,1982,5.507,1983,6.497]],["t/2093",[0,1.097,4,2.853,7,0.392,14,0.691,22,1.059,24,3.496,28,0.918,34,0.522,37,1.417,40,0.849,42,0.868,43,0.545,44,0.538,45,1.002,49,0.729,53,0.784,54,0.67,59,1.277,63,1.285,66,0.9,79,1.003,97,0.246,98,3.908,113,3.242,115,1.49,120,0.885,122,1.752,123,2.119,124,1.27,155,0.566,158,2.111,172,1.253,185,0.908,208,1.375,209,1.485,239,1.003,257,1.653,258,3.128,263,2.346,278,4.142,285,0.571,369,1.646,393,4.998,395,5.545,396,1.342,397,4.795,402,1.125,403,3.62,408,1.8,459,2.636,503,0.652,526,3.242,531,2.681,540,3.048,640,0.849,642,0.531,644,0.9,676,1.342,682,1.438,709,0.868,742,1.992,754,1.572,755,1.936,759,1.66,805,1.012,817,0.9,929,2.681,934,0.839,935,0.979,951,4.075,970,1.089,982,3.359,985,3.66,1001,0.766,1004,1.213,1043,0.755,1051,1.777,1072,0.868,1090,1.825,1153,1.342,1167,1.27,1185,2.376,1193,1.27,1213,2.148,1252,1.992,1254,1.992,1373,1.342,1435,1.342,1437,5.665,1438,2.891,1439,4.142,1440,6.643,1441,5.665,1442,5.333,1443,2.064,1453,0.979,1454,1.165,1469,3.306,1524,6.926,1554,2.376,1573,2.249,1587,2.064,1593,1.342,1656,2.249,1752,2.453,1762,5.094,1763,1.13,1764,1.342,1765,0.784,1781,1.342,1782,1.437,1783,1.342,1784,1.437,1785,1.437,1786,1.437,1791,7.598,1798,6.035,1801,4.737,1804,1.342,1805,1.437,1808,2.376,1862,5.237,1935,2.376,1939,1.342,1957,3.027,1980,3.426,1982,1.342,1984,1.583,1985,1.583,1986,2.545,1987,1.583,1988,1.437,1989,1.437,1990,1.583,1991,4.561,1992,1.583,1993,4.561,1994,1.583,1995,2.803,1996,1.583,1997,2.376,1998,2.803,1999,2.803,2000,2.545,2001,2.148,2002,3.426,2003,1.583,2004,3.426,2005,1.583,2006,3.426,2007,1.583,2008,4.561,2009,2.545,2010,1.583,2011,7.314,2012,4.561,2013,4.142,2014,5.767,2015,5.767,2016,4.561,2017,2.803,2018,1.583,2019,2.803,2020,2.803,2021,2.545,2022,1.583,2023,1.583,2024,1.583,2025,1.583,2026,2.803,2027,3.772,2028,3.772,2029,3.772,2030,2.803,2031,1.583,2032,1.583,2033,1.583,2034,1.583,2035,3.426,2036,3.426,2037,3.426,2038,3.426,2039,3.426]],["t/2095",[0,1.124,4,1.218,6,5.107,7,0.257,22,0.694,23,5.535,24,8.124,43,1.471,49,0.928,58,1.85,59,1.626,98,3.633,102,1.85,112,1.584,116,2.539,122,1.389,158,2.629,171,0.586,184,1.646,185,0.719,208,1.467,239,4.374,257,0.792,258,4.074,263,2.567,269,4.916,285,1.734,369,2.097,393,5.121,395,5.121,397,5.121,399,1.809,403,5.121,409,2.291,422,1.895,503,3.753,540,3.536,608,1.18,633,1.559,642,1.003,644,1.701,650,2.291,705,1.639,709,1.639,731,2.715,771,1.069,804,2.534,854,1.611,929,2.124,934,4.498,1000,3.211,1014,1.389,1020,1.997,1053,1.205,1073,2.534,1076,2.399,1158,5.289,1197,2.534,1252,2.124,1254,2.124,1453,2.974,1454,2.201,1469,1.584,1703,2.534,1726,4.364,1793,2.534,1810,2.534,1957,7.083,1986,2.715,2035,8.015,2036,2.715,2037,8.015,2038,2.715,2039,8.015,2040,4.805,2041,4.805,2042,8.487,2043,2.989,2044,2.989,2045,2.989,2046,4.805,2047,4.805,2048,2.989,2049,2.989,2050,2.989]],["t/2097",[0,1.215,4,1.849,7,0.785,17,2.259,18,1.279,19,2.808,34,1.496,40,2.768,43,1.671,51,1.81,53,1.269,54,0.806,57,3.631,59,1.536,65,4.491,66,2.582,80,1.957,98,1.81,104,1.98,120,2.713,158,2.48,179,2.808,184,1.24,194,2.446,208,3.836,235,2.446,256,4.73,261,3.036,272,1.849,285,2.821,393,2.633,395,2.633,397,3.841,433,4.121,434,3.346,436,2.582,437,2.534,440,3.123,540,4.207,619,2.821,642,2.221,675,2.195,691,2.446,712,3.032,728,2.366,729,3.478,792,2.687,802,3.032,846,1.934,854,2.446,901,2.534,918,1.653,970,3.123,1202,1.549,1209,3.847,1423,3.032,1469,2.405,1524,3.478,1612,4.121,1765,2.403,1766,5.612,1767,5.612,1871,3.478,1939,3.847,1962,3.847,2051,3.847,2052,3.847,2053,4.121,2054,4.538,2055,4.538,2056,3.642,2057,3.847,2058,2.95,2059,4.538,2060,4.538,2061,4.538,2062,4.538,2063,6.621,2064,6.621,2065,4.538]],["t/2099",[18,2.458,22,1.847,32,4.294,34,1.543,40,2.052,49,1.308,54,0.832,59,2.292,65,4.794,89,3.189,105,2.194,107,4.192,108,4.294,115,1.53,120,2.139,126,1.929,155,1.674,156,5.198,158,2.517,172,3.029,184,1.28,257,1.795,459,4.408,540,2.822,608,2.674,615,3.324,709,2.568,712,4.526,717,3.634,742,3.328,860,4.404,1001,2.265,1252,3.328,1254,3.328,1345,4.098,1443,3.448,1563,5.436,1573,3.758,1763,2.731,1764,3.969,1765,2.947,1766,5.742,1767,5.742,1768,5.742,1769,5.742,1770,5.742,1771,6.152,1772,5.742,1773,5.192,1774,5.436,1775,5.742,1776,4.814,1777,5.742,1778,5.742,1779,6.152,1948,3.758,2066,0.867,2067,4.682]],["t/2101",[0,1.366,4,1.76,7,0.225,12,2.623,16,1.172,18,2.141,22,1.278,25,1.804,28,2.506,46,1.39,49,0.506,57,1.438,59,0.887,82,0.984,85,1.306,97,0.672,102,1.623,104,1.144,105,2.287,107,1.623,108,1.662,115,0.857,119,2.955,120,0.828,122,1.218,126,1.78,127,2.737,133,1.804,137,1.269,141,2.151,144,1.046,146,1.269,148,1.804,149,1.863,158,2.318,159,2.432,165,1.931,171,1.488,184,1.18,223,2.241,257,0.695,355,1.966,371,3.591,435,1.024,468,1.82,496,1.39,503,1.78,522,2.183,527,1.662,607,1.346,608,1.035,616,1.035,619,0.946,642,0.879,648,2.432,654,2.767,703,1.39,708,1.885,711,1.931,713,2.216,717,2.942,727,2.822,754,1.897,846,1.118,931,1.863,958,2.223,973,1.804,975,2.786,1001,1.269,1043,1.251,1053,1.057,1090,2.089,1152,0.788,1169,1.623,1359,2.613,1449,2.826,1571,1.931,1763,1.057,1776,1.863,1988,2.381,1989,2.381,2051,2.223,2052,2.223,2068,2.622,2069,2.223,2070,2.622,2071,1.367,2072,1.367,2073,2.15,2074,2.15,2075,2.622,2076,2.622,2077,1.367,2078,3.528,2079,1.367,2080,3.465,2081,2.622,2082,2.622,2083,1.367,2084,2.622,2085,1.367,2086,2.808,2087,1.367,2088,1.367,2089,5.412,2090,2.622,2091,1.367,2092,1.367,2093,2.252,2094,1.367,2095,2.252,2096,2.627,2097,2.622,2098,1.367,2099,1.367,2100,3.681,2101,1.367,2102,1.367,2103,1.367,2104,2.252,2105,1.367,2106,2.622,2107,2.622,2108,2.702,2109,2.622,2110,1.287,2111,1.367,2112,2.702,2113,4.319,2114,2.223,2115,2.622,2116,2.01,2117,2.622,2118,2.01,2119,2.01,2120,2.622,2121,2.622,2122,2.622,2123,2.622,2124,2.622,2125,2.622,2126,2.104,2127,2.622,2128,2.622,2129,2.223,2130,2.622,2131,2.223,2132,2.104,2133,2.622,2134,2.622,2135,2.223,2136,2.622,2137,2.223,2138,2.223,2139,2.223,2140,2.622,2141,2.622,2142,2.622,2143,2.622,2144,2.223,2145,3.661,2146,2.223,2147,2.223,2148,2.223,2149,2.223,2150,2.223,2151,2.622,2152,2.223,2153,4.319,2154,2.223,2155,2.381,2156,2.622,2157,2.622,2158,2.223,2159,2.223,2160,2.223,2161,3.661,2162,2.223,2163,4.319,2164,2.223]],["t/2103",[7,0.831,22,1.857,42,4.389,53,2.707,59,2.708,145,3.334,597,4.643,640,2.424,644,4.553,686,4.553,748,5.347,879,6.422,918,2.916,1163,5.347,1315,5.507,1516,7.268,1624,6.784,1954,7.268,2165,8.003,2166,8.003]],["t/2105",[7,0.574,22,2.006,43,1.3,49,1.291,53,2.418,62,1.507,73,2.065,115,2.183,120,2.11,156,3.601,157,4.043,158,1.928,184,1.826,185,1.608,209,4.581,258,3.949,285,3.12,540,2.784,670,4.92,675,3.233,684,2.848,691,3.601,705,3.664,749,5.362,771,3.091,846,3.685,880,5.93,901,3.731,1213,5.121,1252,4.749,1763,3.863,1773,6.625,2066,1.238,2167,7.85,2168,3.957,2169,6.682]],["t/2107",[7,0.537,22,2.292,43,1.217,44,1.2,49,1.208,53,2.315,62,1.411,66,3.559,73,2.217,115,2.043,120,1.975,156,3.371,158,1.805,171,1.225,184,1.709,185,1.505,209,4.387,257,2.798,263,1.819,408,2.984,540,3.449,669,3.629,674,5.302,683,5.302,691,3.371,754,3.197,771,2.236,846,3.529,854,5.001,880,3.871,1104,4.304,1154,5.68,1211,2.868,1423,4.179,1623,4.794,1762,6.345,1763,3.338,2066,1.159,2168,3.704,2170,5.68,2171,6.254,2172,6.254,2173,5.68]],["t/2109",[7,0.561,17,4.242,34,2.808,43,1.657,51,2.606,53,1.827,62,1.473,65,4.01,73,2.265,115,2.783,120,2.063,134,4.672,156,3.521,158,1.885,184,1.785,185,1.572,263,2.478,435,2.552,619,2.358,637,5.538,691,3.521,697,3.462,714,4.811,748,4.365,754,2.251,771,2.336,846,4.041,909,5.007,1001,3.161,1055,5.007,1062,5.007,1515,5.933,1646,5.933,1721,5.007,1743,5.933,1765,2.809,2066,1.21,2168,3.869,2174,6.533,2175,6.533,2176,6.533]],["t/2111",[7,0.601,43,1.362,53,1.958,62,1.579,65,4.611,73,2.128,120,2.21,156,3.773,158,2.02,178,3.909,184,1.913,185,1.685,377,5.618,628,7.55,642,2.348,691,3.773,697,3.71,740,4.975,771,3.184,790,4.818,834,5.618,846,4.175,896,5.618,1458,6.358,1547,5.618,1765,2.491,2066,1.297,2168,4.146,2177,6.358,2178,8.896,2179,5.934,2180,5.934,2181,7]],["t/2113",[7,0.546,34,2.095,35,4.955,43,1.236,49,1.228,53,1.778,54,1.766,62,1.433,64,3.688,65,4.991,73,1.999,90,3.992,120,2.007,123,2.953,156,3.425,158,1.834,184,1.737,185,2.014,224,3.764,559,4.681,633,3.314,684,2.709,691,3.425,697,3.368,771,2.991,778,5.946,790,4.374,799,4.517,846,3.987,1581,4.029,1690,5.101,1691,4.681,1694,5.101,1765,1.778,2056,5.101,2066,1.177,2168,3.764,2179,5.388,2180,5.388,2182,5.772,2183,5.388,2184,5.772,2185,5.772,2186,5.772]],["t/2115",[7,0.549,34,2.106,35,3.784,43,1.243,49,1.234,53,1.787,54,1.77,62,1.441,64,3.708,65,4.999,73,2.006,90,4.007,120,2.018,123,2.969,156,3.444,158,1.844,184,1.746,185,1.538,224,3.784,559,6.184,633,3.332,684,2.724,691,3.444,697,3.387,771,3.002,778,5.968,790,4.398,799,4.542,846,3.998,1581,4.051,1690,5.129,1691,4.706,1694,5.129,1765,1.787,2056,5.129,2066,1.184,2168,3.784,2179,5.417,2180,5.417,2183,5.417,2184,5.804,2185,5.804,2186,5.804,2187,5.804]],["t/2117",[7,0.495,18,1.624,43,1.732,53,1.612,59,2.652,62,1.3,73,2.388,89,3.689,90,2.75,120,1.82,156,3.106,158,1.663,171,1.129,180,3.487,181,2.869,184,1.575,185,1.387,408,3.739,409,7.323,503,2.375,619,2.828,691,3.106,697,4.719,712,6.385,755,2.958,771,2.06,846,3.795,860,5.095,869,5.234,897,7.146,898,4.417,901,3.218,959,7.323,1046,5.234,1061,4.625,1093,5.234,1227,5.234,1698,4.885,1752,3.747,2053,5.234,2066,1.068,2168,3.413,2173,5.234,2188,5.763,2189,5.763,2190,8.904,2191,5.763,2192,5.763,2193,5.234,2194,5.763,2195,5.763]],["t/2119",[0,0.823,7,0.555,18,2.926,43,1.257,48,5.008,49,1.634,53,1.807,62,1.457,73,1.544,82,3.537,85,3.217,115,2.111,120,2.67,156,3.482,158,1.865,178,4.723,184,1.765,185,2.035,355,1.989,459,3.265,476,4.758,503,2.662,671,3.265,691,3.482,712,4.317,714,4.758,717,4.326,718,4.592,754,2.226,771,2.31,825,3.676,846,4.019,853,4.446,1053,2.605,1085,4.095,1348,4.952,2066,1.197,2168,3.826,2196,7.681]],["t/2121",[7,0.62,16,3.226,17,3.593,34,2.378,40,2.186,49,1.394,62,1.627,73,1.724,155,2.58,172,4.059,194,3.889,355,2.222,615,5.116,619,2.604,654,2.486,655,4.966,684,3.87,697,3.824,771,2.58,802,4.821,846,3.076,880,5.619,882,6.958,900,4.105,1014,3.352,1071,5.53,1243,5.791,2057,6.117,2168,4.273,2197,7.215,2198,7.215]],["t/2123",[7,0.78,17,4.52,40,3.009,48,4.273,49,1.754,50,3.041,53,2.018,73,1.724,172,4.059,194,3.889,355,2.222,615,5.272,684,3.076,697,5.264,748,4.821,759,4.273,771,3.246,900,4.105,1250,4.821,1663,5.128,1944,6.117,2066,1.337,2168,4.273,2199,6.553,2200,6.553]],["t/2125",[7,0.54,43,1.223,53,1.759,62,1.874,73,1.985,120,1.985,156,3.389,158,1.815,178,3.511,184,1.718,185,1.513,257,2.202,263,2.707,408,3.964,542,2.269,669,3.648,684,3.541,691,3.389,697,4.403,748,4.202,751,5.33,771,2.97,802,4.202,818,3.891,846,3.966,909,4.819,1115,5.71,1150,3.648,1250,4.202,1392,5.046,1394,3.131,1547,5.046,1773,6.367,1774,5.046,1898,8.45,2066,1.165,2168,3.724,2183,5.33,2201,7.545,2202,9.304,2203,6.288,2204,6.288,2205,6.288,2206,6.288,2207,6.288]],["t/2127",[22,2.246,53,2.238,65,3.767,263,2.328,285,2.888,540,3.334,771,2.861,853,5.507,854,4.313,1250,5.347,1333,8.204,1765,2.238,2051,6.784,2052,6.784,2056,6.422,2066,1.483,2168,4.739,2208,7.268,2209,8.003,2210,8.003]],["t/2129",[7,0.534,32,6.681,40,2.985,43,1.21,50,2.622,53,1.74,62,1.403,73,1.486,105,2.672,120,1.964,156,3.353,158,1.795,181,4.608,184,1.7,185,1.497,257,2.453,459,3.144,542,2.245,597,3.61,608,3.256,633,3.244,642,2.087,691,3.353,771,2.949,781,4.993,782,3.943,846,3.945,860,4.045,901,3.474,925,5.274,934,4.905,945,4.281,1081,5.274,1109,5.65,1120,5.65,1345,3.764,1392,4.993,1469,3.297,1524,4.768,1712,5.65,1713,5.65,2066,1.153,2168,3.684,2211,6.221,2212,6.221]],["t/2131",[7,0.497,17,3.915,18,3.104,22,1.344,34,2.591,40,1.754,49,1.519,53,1.62,59,3.494,82,2.173,97,0.901,158,2.576,171,1.134,257,2.366,258,3.24,263,1.685,285,2.09,584,5.254,597,3.36,619,2.09,633,3.02,642,1.943,717,4.589,771,2.071,854,3.121,909,4.439,918,2.11,951,2.927,1010,6.665,1072,3.176,1179,2.802,1202,2.685,1587,4.265,2066,1.073,2069,6.665,2168,3.43,2213,5.791,2214,5.26,2215,5.26,2216,7.14,2217,5.791,2218,5.791]],["t/2133",[4,3.944,7,0.687,34,2.638,40,2.424,171,1.896,402,6.878,640,2.424,647,6.134,671,4.045,752,4.241,878,2.783,906,5.731,918,2.916,1956,6.784,2219,6.422,2220,8.003,2221,8.003,2222,8.003]],["t/2135",[0,1.533,73,1.377,291,2.713,1071,6.006,1752,5.095,2223,6.643,2224,5.771,2225,5.234,2226,4.625]],["t/2137",[0,1.534,7,0.779,34,1.684,2000,6.548,2227,5.111,2228,5.111,2229,4.332,2230,5.111,2231,5.111,2232,5.111,2233,5.111,2234,5.111,2235,5.111,2236,5.111,2237,5.111]],["t/2139",[0,1.53,7,0.601,1071,5.365,1752,4.552,2225,6.358]],["t/2141",[15,5.529,16,3.603,59,2.727,98,3.214,134,5.329,258,3.32,393,4.675,395,4.675,397,4.675,399,4.875,403,4.675,408,3.845,712,5.384,2001,6.176,2224,5.934,2238,7.318,2239,7.318,2240,7.318,2241,7.318]],["t/2143",[0,1.379,15,3.636,58,3.955,59,2.163,90,3.049,98,3.973,116,2.693,126,2.633,134,3.505,137,3.092,191,4.509,257,1.694,258,2.633,285,3.031,393,3.708,395,3.708,397,3.708,399,3.867,403,3.708,418,4.706,461,5.968,579,5.417,1394,4.181,1752,6.098,1933,5.417,2001,4.898,2223,7.118,2224,6.906,2242,5.804,2243,5.804,2244,5.804,2245,5.804,2246,5.804,2247,7.118,2248,5.804,2249,5.804,2250,5.804,2251,5.804]],["t/2145",[0,1.512,7,0.58,58,4.183,191,4.362,263,1.966,285,3.143,461,6.847,1453,4.183,2224,4.977,2226,8.451,2250,6.138,2251,6.138,2252,6.758,2253,6.758,2254,6.758]],["t/2147",[16,3.678,98,3.282,393,4.773,395,4.773,397,4.773,399,4.978,403,4.773,408,3.926,712,5.497,2001,6.306,2224,6.059,2226,7.897,2238,7.472,2239,7.472,2240,7.472,2241,7.472,2247,6.974]],["t/2149",[0,1.373,59,2.287,90,3.225,98,4.059,116,2.848,126,2.785,137,3.27,191,3.943,257,1.791,258,2.785,393,3.921,395,3.921,397,3.921,399,4.089,403,3.921,418,4.977,579,5.729,1394,4.336,1752,6.265,1933,5.729,2001,5.18,2223,7.382,2224,7.095,2226,5.424,2242,6.138,2243,6.138,2244,6.138,2245,6.138,2246,6.138,2247,8.167,2248,6.138,2249,6.138]],["t/2152",[0,1.525,22,1.664,263,2.086,581,4.792,1082,6.079,1224,4.161,2255,7.171,2256,7.171]],["t/2154",[0,1.533,7,0.837,23,5.771,52,2.495,82,1.645,355,1.35,399,4.637,422,4.093,620,2.714,803,3.229,1065,3.361,1125,5.182,1219,6.96,1221,3.982,1810,3.717,1811,3.982,2257,4.385,2258,4.385,2259,4.385,2260,4.385,2261,4.385,2262,4.385]],["t/2156",[7,0.908,18,1.927,26,3.565,32,4.334,43,1.33,44,1.858,49,1.321,90,3.262,96,3.89,97,1.064,126,3.992,171,1.339,208,3.355,291,3.219,503,2.817,636,7.041,649,5.035,684,2.914,695,4.687,780,5.796,781,5.487,818,4.231,819,5.487,825,3.89,848,3.456,934,3.623,1001,3.308,1224,3.967,1524,5.24,1754,5.487,1793,5.796,1831,7.968,2263,8.773,2264,6.837]],["t/2159",[0,0.884,7,0.838,22,2.264,34,2.287,40,2.102,41,1.368,44,1.094,47,3.709,49,1.34,50,1.567,55,2.685,56,2.799,59,1.258,97,1.08,102,3.53,107,2.301,139,2.116,169,4.026,171,1.864,181,1.851,184,1.559,194,2.004,258,1.532,263,2.682,272,1.515,275,2.357,369,3.662,408,1.774,526,2.643,540,2.377,581,6.161,587,4.835,607,1.908,608,3.496,640,2.683,642,1.247,670,2.738,675,1.799,697,1.971,703,1.971,704,2.85,707,2.984,739,2.559,771,1.329,815,2.643,844,2.485,851,2.357,900,3.948,905,2.643,937,1.799,973,2.559,997,2.559,1014,1.727,1075,2.738,1157,2.984,1162,2.984,1163,2.485,1186,2.984,1195,3.377,1223,2.485,1224,6.371,1243,2.984,1250,2.485,1265,3.152,1353,2.984,1357,2.85,1369,3.152,1423,2.485,1453,2.301,1582,7.006,1623,4.372,1721,2.85,1748,2.984,1891,3.152,2219,2.984,2265,3.718,2266,3.718,2267,3.152,2268,6.302,2269,3.718,2270,3.718,2271,3.718,2272,3.718,2273,3.718,2274,3.718,2275,3.152,2276,3.718,2277,3.718,2278,3.718,2279,3.377,2280,3.377]],["t/2161",[18,2.059,22,2.319,40,2.213,44,1.401,139,4.157,171,1.431,181,3.637,183,2.268,191,3.307,263,2.125,272,3.729,461,5.192,640,2.213,642,2.45,717,3.044,1001,3.534,1014,4.25,1205,4.42,1212,6.193,1224,5.796,1348,5.599,1360,6.635,1438,5.599,1453,5.662,1997,7.756,2281,7.305,2282,7.305,2283,7.305]],["t/2163",[0,0.861,7,0.505,22,1.942,36,1.556,40,0.874,41,2.924,43,1.627,58,2.891,62,0.651,73,1.116,79,1.83,96,1.642,97,1.471,98,1.863,102,4.185,122,1.341,123,2.733,137,2.847,148,3.215,156,1.556,171,1.324,175,2.891,178,2.608,180,1.746,185,0.695,191,2.664,258,2.424,263,2.312,275,1.83,285,2.68,291,1.359,369,2.951,393,3.414,395,3.414,397,2.71,403,3.414,459,2.974,525,4.988,574,2.126,584,1.929,585,3.32,633,1.505,638,2.658,640,1.415,644,2.658,654,1.609,675,1.396,681,1.746,686,3.847,722,4.242,728,1.505,752,2.475,755,2.397,771,1.032,792,1.709,795,2.212,799,2.051,850,2.961,865,1.986,893,4.51,900,1.642,901,1.612,902,2.447,914,1.83,915,1.929,919,2.621,930,4.333,937,2.26,966,3.58,983,1.986,1014,1.341,1057,2.126,1064,2.447,1152,2.031,1178,2.447,1187,2.447,1194,2.051,1205,1.746,1208,2.447,1224,6.224,1250,1.929,1329,1.675,1333,2.447,1361,2.051,1445,5.182,1459,2.621,1546,2.621,1582,8.078,1745,2.621,1748,3.749,1852,2.621,1858,4.242,1891,3.96,1970,2.447,2216,6.141,2268,5.344,2284,2.886,2285,6.762,2286,5.884,2287,5.884,2288,4.671,2289,4.671,2290,4.671,2291,5.884,2292,4.671,2293,2.886,2294,2.886,2295,2.886,2296,2.886,2297,2.886,2298,2.886,2299,2.621,2300,2.886]],["t/2165",[0,1.033,7,0.697,41,2.985,43,1.578,49,1.567,97,1.519,167,4.805,178,4.53,272,3.977,369,3.541,597,4.707,651,4.23,695,3.925,789,4.616,1224,6.072,2301,6.511]],["t/2167",[0,0.643,7,0.613,14,2.201,18,1.422,22,1.171,34,2.734,46,2.673,49,0.974,55,2.375,56,2.476,59,1.707,60,2.228,80,2.176,107,3.122,112,2.673,181,2.512,185,1.214,194,2.719,263,1.468,272,2.056,291,2.375,369,4.315,531,6.412,540,2.102,619,1.821,629,4.048,640,1.528,669,2.927,675,2.441,684,3.045,686,5.418,695,2.441,704,3.867,771,1.804,799,3.585,815,3.585,851,3.198,865,3.472,901,3.99,918,1.838,945,4.917,1075,3.715,1163,4.774,1186,4.048,1194,5.896,1205,3.052,1211,3.276,1224,5.525,1265,4.276,1357,3.867,1445,7.961,1453,3.122,1486,4.581,1544,4.581,1547,5.734,1553,4.581,1554,4.276,1582,3.715,1628,4.048,1727,4.048,1748,4.048,1948,5.734,2193,4.581,2279,6.489,2280,4.581,2302,7.145,2303,5.045,2304,5.045,2305,5.045,2306,5.045,2307,5.045]],["t/2169",[0,1.214,7,0.567,44,1.646,45,2.362,49,1.276,59,2.236,183,2.051,185,1.59,190,6.319,250,5.051,253,5.423,254,5.766,255,5.423,272,2.693,369,4.403,531,4.695,574,4.865,638,3.759,640,2.001,695,3.196,752,3.501,1072,3.623,1194,4.695,1202,2.93,1224,5.854,1252,6.098,1254,4.695,1445,7.305,1857,6,2308,6.606,2309,6.606]],["t/2171",[7,0.926,167,6.386,210,3.349,369,3.469,597,4.612,636,6.379,664,5.649,675,3.846,686,4.522,778,5.649,905,5.649,1048,6.633,1224,4.612,1754,6.379,2301,7.735]],["t/2173",[7,0.921,18,2.549,41,3.827,43,1.759,235,4.874,256,6.293,261,5.204,272,2.923,434,4.571,471,6.224,597,6.035,682,3.681,695,3.47]],["t/2176",[4,3.814,7,0.865,14,1.692,17,2.933,22,2.292,34,2.621,37,2.977,40,1.784,42,2.127,44,0.744,49,1.138,51,1.547,53,1.647,56,1.903,57,2.127,60,1.713,66,2.206,112,2.055,171,1.675,183,1.829,192,2.055,194,2.09,235,2.09,272,2.401,285,1.4,402,7.017,597,2.25,617,2.591,642,1.301,644,4.052,669,2.25,686,3.351,717,1.616,718,2.756,754,2.74,762,3.287,771,1.387,773,2.972,775,2.669,805,1.4,821,0.749,829,2.458,860,2.522,906,5.541,918,2.898,931,2.756,1034,3.522,1048,2.669,1150,2.25,1157,3.112,1175,3.287,1186,4.727,1202,2.011,1212,3.287,1317,3.287,1354,2.346,1357,2.972,1361,2.756,1394,4.483,1443,2.856,1444,4.993,1451,2.601,1497,4.727,1519,3.287,1624,3.287,1663,2.756,1700,3.522,1727,3.112,1765,2.392,1880,3.522,1881,3.522,1946,3.522,1947,3.522,1948,6.863,1949,3.287,1970,3.287,2066,1.091,2299,6.467,2310,3.878,2311,3.878,2312,3.878,2313,3.878,2314,3.878,2315,3.878,2316,3.878,2317,3.878,2318,3.878,2319,3.878,2320,3.878,2321,3.878,2322,3.878,2323,3.878,2324,3.878,2325,3.878,2326,3.878,2327,3.878,2328,3.522]],["t/2180",[22,1.909,44,1.578,54,1.462,97,1.28,183,2.554,184,2.248,185,1.98,210,3.467,263,2.393,542,2.969,821,1.589,972,4.681,1152,2.472,1451,3.634,2066,1.524,2329,4.681,2330,3.181,2331,3.678]],["t/2182",[22,1.909,44,1.578,54,1.462,97,1.28,183,2.554,184,2.248,185,1.98,210,3.467,263,2.393,542,2.969,821,1.589,1152,2.472,1451,3.634,2066,1.524,2330,3.181,2331,3.678,2332,4.773,2333,4.872]],["t/2184",[22,2.274,44,1.567,54,1.452,97,1.271,183,2.537,184,2.232,185,1.966,210,3.443,263,2.377,542,2.949,821,1.578,972,4.648,1152,2.455,1451,3.608,2066,1.514,2329,4.648,2330,3.159,2334,5.459]],["t/2186",[22,2.274,44,1.567,54,1.452,97,1.271,183,2.537,184,2.232,185,1.966,210,3.443,263,2.377,542,2.949,821,1.578,1152,2.455,1451,3.608,2066,1.514,2330,3.159,2332,4.74,2333,4.838,2334,5.459]],["t/2188",[22,1.909,44,1.578,54,1.462,97,1.28,183,2.554,184,2.248,185,1.98,210,3.467,263,2.393,542,2.969,821,1.589,972,4.681,1152,2.472,1451,3.634,2066,1.524,2329,4.681,2330,3.181,2335,6.602]],["t/2190",[22,1.909,44,1.578,54,1.462,97,1.28,183,2.554,184,2.248,185,1.98,210,3.467,263,2.393,542,2.969,821,1.589,1152,2.472,1451,3.634,2066,1.524,2330,3.181,2332,4.773,2333,4.872,2335,6.602]],["t/2192",[22,1.923,44,1.589,54,1.472,97,1.289,183,2.572,184,2.264,185,1.994,210,3.491,263,2.41,542,2.99,821,1.6,972,4.714,1152,2.489,1451,3.659,2066,1.535,2329,4.714,2336,5.536]],["t/2194",[22,1.923,44,1.589,54,1.472,97,1.289,183,2.572,184,2.264,185,1.994,210,3.491,263,2.41,542,2.99,821,1.6,1152,2.489,1451,3.659,2066,1.535,2332,4.807,2333,4.906,2336,5.536]],["t/2196",[22,1.923,44,1.589,54,1.472,97,1.289,183,2.572,184,2.264,185,1.994,210,3.491,263,2.41,542,2.99,821,1.6,972,4.714,1152,2.489,1451,3.659,2066,1.535,2329,4.714,2337,7.524]],["t/2198",[22,1.923,44,1.589,54,1.472,97,1.289,183,2.572,184,2.264,185,1.994,210,3.491,263,2.41,542,2.99,821,1.6,1152,2.489,1451,3.659,2066,1.535,2332,4.807,2333,4.906,2337,7.524]],["t/2200",[0,1.386,7,0.525,8,1.989,12,1.818,36,3.769,43,0.595,44,1.341,49,0.591,53,1.711,54,1.582,61,1.546,62,0.69,63,1.403,73,0.731,75,1.649,90,2.92,91,1.989,92,1.818,97,0.476,119,3.002,120,0.966,123,2.274,158,0.883,171,0.599,183,1.52,184,0.836,185,0.736,199,1.319,208,2.402,223,1.718,284,2.345,355,2.826,391,3.719,460,1.874,462,1.874,468,2.063,542,1.104,570,2.733,608,1.208,642,1.642,654,1.687,671,1.546,691,1.649,693,1.678,695,2.368,727,3.307,728,1.595,754,2.41,757,3.029,759,1.812,770,1.702,771,1.094,821,0.946,839,5.049,846,1.304,878,1.064,914,1.939,946,1.893,948,1.893,951,2.474,1085,1.939,1121,2.733,1150,2.84,1329,1.775,1332,3.879,1765,1.369,2058,4.973,2066,0.567,2086,3.183,2329,1.741,2338,2.253,2339,2.778,2340,3.271,2341,2.044,2342,2.044,2343,3.271,2344,6.541,2345,2.044,2346,2.044,2347,1.932,2348,1.893,2349,1.893,2350,4.089,2351,1.546,2352,2.044,2353,1.208,2354,1.22,2355,3.271,2356,4.673,2357,5.724,2358,3.271,2359,3.271,2360,3.271,2361,3.271,2362,3.271,2363,3.271,2364,3.271,2365,3.271,2366,2.044,2367,2.044,2368,3.271,2369,2.044,2370,1.708,2371,1.708]],["t/2202",[0,0.954,43,1.457,44,1.437,53,2.095,90,4.822,91,4.871,97,1.166,183,2.886,184,2.047,185,1.803,208,4.561,284,5.742,355,3.253,391,2.679,542,2.704,691,4.038,759,4.437,821,1.447,846,3.193,1451,3.309,2066,1.388,2332,4.347,2338,5.517,2339,6.804,2372,7.492]],["t/2204",[22,1.923,44,1.589,54,1.472,97,1.289,183,2.572,184,2.264,185,1.994,210,3.491,263,2.41,542,2.99,821,1.6,971,6.35,1152,2.489,1451,3.659,2066,1.535,2329,4.714,2373,6.649]],["t/2206",[22,1.696,44,1.401,53,2.043,54,1.298,62,1.648,97,1.137,183,2.268,184,1.996,185,1.758,199,3.946,210,3.078,263,2.125,542,2.637,570,4.079,770,2.54,821,1.767,878,2.54,1152,2.195,1394,3.637,1765,2.043,2066,1.353,2332,4.239,2333,6.201,2351,3.692,2370,4.079,2371,4.079,2373,7.343,2374,7.305,2375,5.028,2376,5.192]],["t/2208",[22,1.654,44,1.367,53,1.993,54,1.267,56,3.498,62,1.608,97,1.109,183,2.213,184,1.948,185,1.715,199,3.885,210,3.004,263,2.074,542,2.573,570,3.98,607,3.658,770,2.479,821,1.74,878,3.133,972,5.62,1152,2.141,1394,3.549,1423,6.02,1469,3.777,1765,1.993,2066,1.321,2329,4.056,2351,3.602,2370,3.98,2375,4.905,2377,8.182,2378,6.473,2379,6.473]],["t/2210",[22,1.706,44,1.41,53,2.056,54,1.306,62,1.658,97,1.144,183,2.282,184,2.009,185,1.769,199,3.961,210,3.098,263,2.139,542,2.653,570,4.105,607,3.773,770,2.556,821,1.774,878,2.556,1053,2.964,1152,2.209,1394,3.66,1765,2.056,2066,1.362,2332,4.265,2333,5.933,2351,3.715,2370,4.105,2375,5.059,2376,5.224,2377,8.342]],["t/2212",[22,1.654,44,1.367,53,1.993,54,1.267,56,3.498,62,1.608,97,1.109,183,2.213,184,1.948,185,1.715,199,3.885,210,3.004,263,2.074,542,2.573,570,3.98,770,2.479,821,1.74,878,3.133,972,5.62,1152,2.141,1394,3.549,1423,6.02,1469,3.777,1765,1.993,2066,1.321,2329,4.056,2351,3.602,2370,3.98,2375,4.905,2378,6.473,2379,6.473,2380,6.473,2381,9.009]],["t/2214",[22,1.761,44,1.456,53,2.122,54,1.348,62,1.711,97,1.181,183,2.356,184,2.074,185,1.826,199,3.273,210,3.198,263,2.208,542,2.739,710,5.588,770,2.639,821,1.81,878,2.639,1152,2.28,1765,2.122,2066,1.406,2332,4.403,2333,6.285,2351,3.835,2371,4.238,2376,5.393,2380,6.892]],["t/2216",[0,0.713,22,1.299,44,1.074,53,1.566,54,0.995,62,1.263,97,0.871,183,1.738,184,1.53,185,1.347,199,2.414,210,2.359,263,1.629,542,2.02,710,4.123,770,1.947,821,1.484,878,1.947,1053,2.257,1152,1.682,1765,1.566,2066,1.037,2332,3.248,2333,7.095,2351,2.829,2376,3.979,2382,4.745,2383,5.598,2384,5.084,2385,5.598]],["t/2218",[22,1.845,44,1.525,54,1.412,97,1.237,183,2.468,184,2.172,185,1.913,199,3.428,210,3.349,263,2.312,542,2.869,585,5.649,805,2.869,821,1.535,972,4.522,1152,2.388,1765,2.223,2066,1.473,2329,4.522,2351,4.017,2382,6.738,2386,7.948,2387,7.948]],["t/2220",[22,1.845,44,1.525,54,1.412,97,1.237,183,2.468,184,2.172,185,1.913,199,3.428,210,3.349,263,2.312,542,2.869,585,5.649,805,2.869,821,1.535,971,6.092,1152,2.388,1765,2.223,2066,1.473,2329,4.522,2351,4.017,2382,6.738,2388,7.948,2389,7.948]],["t/2223",[0,1.269,7,0.623,22,1.685,43,1.412,44,1.393,54,1.29,73,1.735,92,2.697,97,1.13,120,2.292,158,2.095,184,1.984,257,1.924,391,3.259,460,2.779,462,2.779,468,3.059,619,2.62,805,2.62,821,1.402,1152,2.181,1171,2.502,1202,2.479,1379,2.435,1765,2.03,2066,1.345,2073,4.538,2074,3.615,2330,2.807,2331,3.246,2347,2.866,2353,2.866,2354,2.896]],["t/2225",[0,1.303,22,0.9,26,3.071,40,1.175,43,0.754,51,1.547,53,1.085,54,1.047,61,1.96,62,0.875,63,4.291,82,2.21,85,1.931,96,2.206,97,0.604,100,5.661,123,4.347,145,3.899,199,1.672,257,1.028,258,3.856,374,2.856,391,2.546,422,5.931,465,7.172,468,2.482,619,1.4,640,1.175,703,5.233,770,1.348,821,1.138,848,1.96,878,1.348,983,2.669,1053,1.564,1152,1.165,1171,1.336,1202,1.324,1379,1.301,1765,1.085,2066,0.718,2330,1.499,2331,1.734,2338,2.856,2390,3.287,2391,3.287,2392,2.856,2393,3.112,2394,3.112,2395,3.112,2396,3.112,2397,3.112,2398,7.737,2399,3.112,2400,3.112,2401,3.112,2402,6.382,2403,7.509,2404,7.509,2405,7.509,2406,7.509,2407,3.112,2408,3.112,2409,3.112,2410,3.112,2411,3.112,2412,3.112,2413,3.112,2414,3.112,2415,4.727,2416,3.112,2417,3.112,2418,3.112,2419,3.112,2420,3.112,2421,3.112]],["t/2227",[0,1.322,22,0.903,26,3.079,43,0.757,53,1.088,54,0.691,61,1.966,62,0.878,63,4.296,96,2.214,97,0.606,100,5.668,115,2.331,123,4.352,145,3.903,199,1.678,209,3.782,257,1.031,258,3.86,374,2.865,391,2.551,422,5.938,465,7.18,619,1.404,703,5.238,770,1.353,821,1.141,848,1.966,878,1.353,1053,2.381,1152,1.169,1202,1.329,1379,1.305,1763,2.877,1765,1.088,2066,0.721,2330,1.504,2331,1.74,2338,2.865,2392,2.865,2393,3.123,2394,3.123,2395,3.123,2396,3.123,2397,3.123,2398,7.745,2399,3.123,2400,3.123,2401,3.123,2402,6.393,2403,7.518,2404,7.518,2405,7.518,2406,7.518,2407,3.123,2408,3.123,2409,3.123,2410,3.123,2411,3.123,2412,3.123,2413,3.123,2414,3.123,2415,4.739,2416,3.123,2417,3.123,2418,3.123,2419,3.123,2420,3.123,2421,3.123,2422,3.891]],["t/2229",[22,1.909,43,1.6,54,1.462,97,1.28,105,2.665,228,5.497,257,2.18,619,2.969,821,1.589,848,4.158,1152,2.472,1171,2.835,1202,2.809,1379,2.76,1451,3.634,2066,1.524,2330,3.181,2331,3.678]],["t/2231",[0,1.015,4,1.356,7,0.449,12,2.403,16,1.488,18,2.247,22,0.772,34,1.097,43,0.647,44,0.638,51,1.328,53,0.931,54,1.149,62,0.751,73,1.25,89,1.567,92,1.236,97,0.814,105,3.188,115,1.71,116,1.403,119,3.621,120,2.042,141,1.3,144,1.328,145,1.387,146,2.532,155,1.19,158,2.442,159,2.856,163,1.61,171,0.652,184,0.909,223,1.837,257,0.882,291,1.567,355,2.258,371,3.278,391,1.871,435,1.3,460,1.274,462,1.274,468,2.205,503,2.156,522,2.645,616,3.146,619,1.889,640,1.008,648,1.47,654,3.05,708,2.284,713,2.686,717,2.695,727,2.724,754,1.147,770,1.157,774,1.633,782,2.11,821,1.011,878,1.157,936,1.657,937,2.532,975,1.452,987,1.708,1043,1.588,1053,2.11,1090,2.532,1152,1,1171,1.147,1202,1.136,1211,1.526,1379,1.116,1449,3.319,1763,1.342,1765,0.931,2066,0.617,2071,1.735,2072,1.735,2073,1.657,2074,1.657,2077,1.735,2078,1.546,2079,1.735,2080,3.174,2083,1.735,2085,1.735,2087,1.735,2088,1.735,2091,1.735,2092,1.735,2093,2.729,2094,1.735,2095,2.729,2096,1.588,2098,1.735,2099,1.735,2100,4.156,2101,1.735,2102,1.735,2103,1.735,2104,2.729,2105,1.735,2108,2.568,2110,1.633,2111,1.735,2112,2.568,2330,1.287,2331,1.488,2347,1.314,2353,1.314,2354,1.328,2423,3.328,2424,3.328,2425,1.567,2426,1.567,2427,1.61,2428,1.567,2429,1.567,2430,1.567,2431,1.567,2432,1.567,2433,1.567,2434,1.567,2435,1.61,2436,1.567,2437,1.567,2438,1.764,2439,1.764,2440,1.764,2441,1.764,2442,1.764,2443,1.764,2444,1.657,2445,1.764,2446,1.764,2447,1.764]],["t/2233",[0,0.947,4,1.392,7,0.459,12,2.443,16,1.527,18,2.275,22,0.793,34,1.126,43,0.664,44,0.655,51,1.362,53,0.955,54,0.949,62,0.77,73,0.816,89,1.608,92,1.269,97,0.831,105,3.08,115,1.745,116,1.439,119,3.148,120,2.076,134,1.873,141,1.334,144,1.362,145,1.423,146,2.584,155,1.221,158,2.469,159,2.904,163,1.652,171,0.669,223,1.874,257,0.905,355,2.29,371,3.325,391,1.909,435,1.334,460,1.307,462,1.307,468,2.25,497,2.35,503,2.201,522,2.699,616,3.377,619,1.927,640,1.035,648,1.508,654,2.562,708,3.521,713,2.741,717,2.74,727,2.998,754,1.177,770,1.188,774,1.676,782,2.165,821,1.032,878,1.188,936,1.701,937,2.584,975,1.49,987,1.753,1043,1.63,1053,1.377,1090,2.584,1152,1.026,1171,1.177,1202,1.166,1211,1.566,1289,2.895,1379,1.146,1449,3.375,1763,1.377,1765,0.955,2066,0.633,2071,1.781,2072,1.781,2073,1.701,2074,1.701,2077,1.781,2078,1.587,2079,1.781,2080,3.227,2083,1.781,2085,1.781,2087,1.781,2088,1.781,2091,1.781,2092,1.781,2093,2.784,2094,1.781,2095,2.784,2096,1.63,2098,1.781,2099,1.781,2100,4.207,2101,1.781,2102,1.781,2103,1.781,2104,2.784,2105,1.781,2108,2.621,2110,1.676,2111,1.781,2112,2.621,2330,1.321,2331,1.527,2347,1.348,2353,1.348,2354,1.362,2425,1.608,2426,1.608,2427,1.652,2428,1.608,2429,1.608,2430,1.608,2431,1.608,2432,1.608,2433,1.608,2434,1.608,2435,1.652,2436,1.608,2437,1.608,2438,1.81,2439,1.81,2440,1.81,2441,1.81,2442,1.81,2443,1.81,2444,1.701,2445,1.81,2446,1.81,2447,1.81,2448,3.415]],["t/2235",[0,0.967,4,1.447,7,0.473,12,2.044,16,1.587,18,2.316,22,0.824,43,0.69,44,0.681,53,0.993,54,0.631,62,1.241,73,0.848,92,1.319,97,0.856,105,2.459,115,1.798,116,1.496,119,3.198,120,1.738,141,1.387,144,1.416,145,1.479,146,2.663,155,1.269,158,2.509,159,2.977,163,1.717,171,0.695,184,0.97,185,0.854,223,1.931,257,0.941,355,2.338,371,3.395,391,1.968,435,1.387,460,1.359,462,1.359,468,2.319,503,2.268,522,2.781,616,1.401,619,1.986,648,1.568,654,2.616,708,3.586,713,2.824,717,2.808,727,2.821,754,1.223,770,1.234,774,1.742,789,2.02,821,1.063,878,1.234,936,1.767,937,2.663,938,3.991,975,1.549,987,1.822,1043,1.694,1072,1.947,1090,2.663,1152,1.066,1171,1.223,1202,1.212,1211,1.628,1379,1.191,1449,3.459,1763,1.431,1765,0.993,2066,0.658,2071,1.851,2072,1.851,2073,1.767,2074,1.767,2077,1.851,2078,1.649,2079,1.851,2080,3.307,2083,1.851,2085,1.851,2087,1.851,2088,1.851,2091,1.851,2092,1.851,2093,2.869,2094,1.851,2095,2.869,2096,1.694,2098,1.851,2099,1.851,2100,4.284,2101,1.851,2102,1.851,2103,1.851,2104,2.869,2105,1.851,2108,2.701,2110,1.742,2111,1.851,2112,2.701,2330,1.372,2331,1.587,2347,1.401,2353,1.401,2354,1.416,2425,1.671,2426,1.671,2427,1.717,2428,1.671,2429,1.671,2430,1.671,2431,1.671,2432,1.671,2433,1.671,2434,1.671,2435,1.717,2436,1.671,2437,1.671,2438,1.881,2439,1.881,2440,1.881,2441,1.881,2442,1.881,2443,1.881,2444,1.767,2445,1.881,2446,1.881,2447,1.881,2449,4.998,2450,3.55]],["t/2237",[0,0.972,4,1.46,7,0.476,12,2.059,14,1.563,16,1.602,18,2.326,22,0.831,43,0.697,44,0.687,53,1.002,54,0.637,62,1.25,73,0.856,92,1.331,97,1.187,105,2.471,115,1.811,116,1.51,119,3.21,120,1.75,141,1.399,144,1.429,145,1.493,146,2.681,155,1.281,158,2.518,159,2.994,163,1.733,171,0.702,223,1.945,257,0.949,355,2.349,371,3.411,391,1.981,435,1.399,460,1.371,462,1.371,468,2.335,503,2.284,522,2.801,616,1.414,619,2,648,1.582,654,2.629,708,3.601,713,2.844,717,2.824,727,2.834,754,1.234,770,1.246,774,1.758,821,1.071,878,1.246,936,1.784,937,2.681,938,4.014,975,1.563,987,1.838,1043,1.709,1090,2.681,1152,1.076,1171,1.234,1202,1.223,1211,1.643,1379,1.202,1449,3.479,1763,1.444,1765,1.002,2066,0.664,2071,1.868,2072,1.868,2073,1.784,2074,1.784,2077,2.89,2078,1.664,2079,1.868,2080,3.326,2083,1.868,2085,1.868,2087,1.868,2088,1.868,2091,1.868,2092,1.868,2093,2.89,2094,1.868,2095,2.89,2096,1.709,2098,1.868,2099,1.868,2100,4.302,2101,1.868,2102,1.868,2103,1.868,2104,2.89,2105,1.868,2108,2.72,2110,1.758,2111,1.868,2112,2.72,2330,1.385,2331,1.602,2347,1.414,2353,1.414,2354,1.429,2425,1.686,2426,1.686,2427,1.733,2428,1.686,2429,1.686,2430,1.686,2431,1.686,2432,1.686,2433,1.686,2434,1.686,2435,1.733,2436,1.686,2437,1.686,2438,1.898,2439,1.898,2440,1.898,2441,1.898,2442,1.898,2443,1.898,2444,1.784,2445,1.898,2446,1.898,2447,1.898]],["t/2239",[0,0.97,4,1.456,7,0.475,12,2.054,14,1.558,16,1.597,18,2.322,22,0.829,43,0.695,44,0.685,53,0.999,54,0.635,62,1.247,73,0.853,92,1.327,97,0.86,105,2.467,115,1.807,116,1.505,119,3.206,120,1.746,141,1.395,144,1.425,145,1.488,146,2.675,155,1.277,158,2.515,159,2.988,163,1.728,171,0.7,185,0.859,223,1.94,257,0.947,355,2.346,371,3.406,391,1.977,435,1.395,460,1.367,462,1.367,468,2.33,503,2.278,522,2.794,616,1.41,619,1.996,648,1.577,654,2.625,708,3.596,713,2.838,717,2.819,727,2.83,754,1.231,770,1.242,774,1.752,821,1.068,878,1.242,936,1.778,937,2.675,938,4.007,975,1.558,987,1.833,1043,1.704,1090,2.675,1152,1.073,1171,1.231,1202,1.219,1211,1.638,1379,1.198,1449,3.472,1763,1.44,1765,0.999,1792,5.021,2066,0.662,2071,1.862,2072,1.862,2073,1.778,2074,1.778,2077,2.883,2078,1.659,2079,1.862,2080,3.32,2083,1.862,2085,1.862,2087,1.862,2088,1.862,2091,1.862,2092,1.862,2093,2.883,2094,1.862,2095,2.883,2096,1.704,2098,1.862,2099,1.862,2100,4.296,2101,1.862,2102,1.862,2103,1.862,2104,2.883,2105,1.862,2108,2.713,2110,1.752,2111,1.862,2112,2.713,2330,1.381,2331,1.597,2347,1.41,2353,1.41,2354,1.425,2425,1.681,2426,1.681,2427,1.728,2428,1.681,2429,1.681,2430,1.681,2431,1.681,2432,1.681,2433,1.681,2434,1.681,2435,1.728,2436,1.681,2437,1.681,2438,1.893,2439,1.893,2440,1.893,2441,1.893,2442,1.893,2443,1.893,2444,1.778,2445,1.893,2446,1.893,2447,1.893]],["t/2241",[0,0.959,4,1.425,7,0.467,12,2.021,16,1.563,18,2.3,22,0.812,34,1.152,40,1.059,43,0.68,44,0.671,51,1.395,54,0.967,62,0.789,73,1.3,92,1.299,97,0.544,105,2.44,115,2.666,116,1.474,119,3.178,120,1.717,141,1.366,144,1.395,145,1.457,146,2.632,155,1.945,158,2.493,159,2.949,163,1.692,171,0.685,184,0.956,209,2.883,223,1.909,257,0.927,355,2.319,371,3.368,391,1.945,409,2.68,435,1.366,460,1.338,462,1.338,468,2.292,503,2.241,522,2.749,616,1.38,619,1.963,640,1.059,648,1.544,654,2.595,708,1.526,713,2.792,717,2.782,727,2.798,754,1.205,770,1.216,774,1.716,805,1.262,821,1.051,878,1.216,936,1.741,937,2.632,975,1.526,987,1.795,1043,1.668,1090,2.632,1171,1.205,1202,1.194,1211,1.603,1379,1.173,1449,3.426,1763,3.29,1765,0.978,2066,0.648,2071,1.823,2072,1.823,2073,1.741,2074,1.741,2077,1.823,2078,1.624,2079,1.823,2080,3.276,2083,1.823,2085,1.823,2087,1.823,2088,1.823,2091,1.823,2092,1.823,2093,2.836,2094,1.823,2095,2.836,2096,1.668,2098,1.823,2099,1.823,2100,4.254,2101,1.823,2102,1.823,2103,1.823,2104,2.836,2105,1.823,2108,2.669,2110,1.716,2111,1.823,2112,2.669,2301,2.806,2330,1.352,2331,1.563,2347,1.38,2353,1.38,2354,1.395,2425,1.646,2426,1.646,2427,1.692,2428,1.646,2429,1.646,2430,1.646,2431,1.646,2432,1.646,2433,1.646,2434,1.646,2435,1.692,2436,1.646,2437,1.646,2438,1.853,2439,1.853,2440,1.853,2441,1.853,2442,1.853,2443,1.853,2444,1.741,2445,1.853,2446,1.853,2447,1.853,2451,3.497,2452,3.497,2453,3.497]],["t/2243",[0,1.041,4,1.429,7,0.468,12,2.025,14,1.531,16,1.568,18,2.303,22,0.814,43,0.682,44,0.673,53,0.981,54,0.623,62,1.23,73,0.838,92,1.303,97,0.848,105,2.444,115,2.826,116,1.478,119,3.182,120,1.721,141,1.37,144,1.399,145,1.461,146,2.638,155,1.254,158,2.496,159,2.954,163,1.697,171,0.687,209,3.998,223,1.913,257,0.93,355,2.323,371,3.373,391,1.949,435,1.37,460,1.342,462,1.342,468,2.298,503,2.247,522,2.756,616,1.384,619,1.968,648,1.549,654,2.599,708,1.531,713,2.798,717,2.787,727,2.802,754,1.208,770,1.22,774,1.721,821,1.053,848,1.773,878,1.22,936,1.746,937,2.638,975,1.531,987,1.8,1043,1.673,1053,1.414,1090,2.638,1152,1.054,1171,1.208,1202,1.198,1211,1.608,1379,1.176,1449,3.433,1763,3.294,1765,0.981,2066,0.65,2071,1.829,2072,1.829,2073,1.746,2074,1.746,2077,1.829,2078,1.629,2079,1.829,2080,3.282,2083,1.829,2085,1.829,2087,1.829,2088,1.829,2091,1.829,2092,1.829,2093,2.843,2094,1.829,2095,2.843,2096,1.673,2098,1.829,2099,1.829,2100,4.26,2101,1.829,2102,1.829,2103,1.829,2104,2.843,2105,1.829,2108,2.675,2110,1.721,2111,1.829,2112,2.675,2330,1.356,2331,1.568,2347,1.384,2353,1.384,2354,1.399,2425,1.651,2426,1.651,2427,1.697,2428,1.651,2429,1.651,2430,1.651,2431,1.651,2432,1.651,2433,1.651,2434,1.651,2435,1.697,2436,1.651,2437,1.651,2438,1.859,2439,1.859,2440,1.859,2441,1.859,2442,1.859,2443,1.859,2444,1.746,2445,1.859,2446,1.859,2447,1.859,2454,5.452]],["t/2245",[0,1.304,14,1.698,22,0.903,26,3.079,43,0.757,54,0.691,61,1.966,62,0.878,63,4.296,73,0.93,96,2.214,97,0.606,100,5.668,115,2.331,123,4.352,145,3.903,199,1.678,209,3.129,257,1.031,258,3.86,374,2.865,391,2.551,422,5.938,465,7.18,619,1.404,703,5.238,770,1.353,805,1.404,821,1.141,878,1.353,1053,1.569,1152,1.169,1171,1.341,1202,1.329,1379,1.305,1763,2.877,1765,1.088,2066,0.721,2330,1.504,2331,1.74,2338,2.865,2392,2.865,2393,3.123,2394,3.123,2395,3.123,2396,3.123,2397,3.123,2398,7.745,2399,3.123,2400,3.123,2401,3.123,2402,6.393,2403,7.518,2404,7.518,2405,7.518,2406,7.518,2407,3.123,2408,3.123,2409,3.123,2410,3.123,2411,3.123,2412,3.123,2413,3.123,2414,3.123,2415,4.739,2416,3.123,2417,3.123,2418,3.123,2419,3.123,2420,3.123,2421,3.123,2455,3.891,2456,3.891]],["t/2247",[0,1.034,4,1.408,7,0.463,12,2.002,14,1.508,16,1.545,18,2.287,22,0.802,43,0.672,44,0.663,54,0.614,62,0.779,73,0.826,92,1.284,97,0.839,105,2.424,115,2.934,116,1.456,119,3.163,120,1.702,141,1.35,144,1.378,145,1.44,146,2.608,155,1.235,158,2.481,159,2.926,163,1.672,171,0.677,209,3.966,223,1.891,257,0.916,355,2.304,371,3.346,391,1.927,435,1.35,460,1.323,462,1.323,468,2.271,503,2.221,522,2.724,616,1.364,619,1.945,648,1.526,654,2.579,708,1.508,709,1.895,713,2.766,717,2.761,727,2.78,754,1.191,770,1.202,774,1.696,805,1.247,821,1.041,878,1.202,936,1.721,937,2.608,975,1.508,987,1.773,1043,1.649,1076,2.773,1090,2.608,1152,1.038,1171,1.191,1202,1.18,1207,2.456,1211,1.585,1379,1.159,1449,3.4,1762,4.131,1763,3.466,1765,0.966,2066,0.64,2071,1.802,2072,1.802,2073,1.721,2074,1.721,2077,1.802,2078,1.605,2079,1.802,2080,3.251,2083,1.802,2085,1.802,2087,1.802,2088,1.802,2091,1.802,2092,1.802,2093,2.81,2094,1.802,2095,2.81,2096,1.649,2098,1.802,2099,1.802,2100,4.231,2101,1.802,2102,1.802,2103,1.802,2104,2.81,2105,1.802,2108,2.645,2110,1.696,2111,1.802,2112,2.645,2330,1.336,2331,1.545,2347,1.364,2353,1.364,2354,1.378,2425,1.627,2426,1.627,2427,1.672,2428,1.627,2429,1.627,2430,1.627,2431,1.627,2432,1.627,2433,1.627,2434,1.627,2435,1.672,2436,1.627,2437,1.627,2438,1.831,2439,1.831,2440,1.831,2441,1.831,2442,1.831,2443,1.831,2444,1.721,2445,1.831,2446,1.831,2447,1.831,2457,5.389,2458,3.456]],["t/2249",[0,1.032,4,1.404,7,0.462,12,1.998,14,1.504,16,1.541,18,2.284,22,0.8,43,0.67,44,0.661,51,1.374,53,0.964,54,0.612,61,1.741,62,1.213,73,0.823,80,1.486,92,1.28,97,0.837,105,2.42,115,1.757,116,1.452,119,3.159,120,1.698,129,2.787,141,1.346,144,1.374,145,1.436,146,2.602,155,1.232,158,2.478,159,2.921,163,1.667,171,0.675,209,3.505,223,1.887,257,0.913,285,1.244,355,2.301,371,3.341,391,2.364,435,1.346,460,1.319,462,1.319,468,2.266,503,2.216,522,2.718,616,1.36,619,1.941,640,1.044,648,1.522,654,2.575,708,1.504,713,2.76,717,2.755,727,2.776,754,1.187,770,1.198,771,1.232,774,1.691,821,1.039,878,1.198,880,2.132,896,2.765,936,1.716,937,2.602,975,1.504,987,1.768,1043,1.644,1053,2.168,1090,2.602,1152,1.035,1171,1.187,1202,1.177,1211,1.58,1379,1.156,1435,4.558,1449,3.394,1763,3.012,1765,0.964,2066,0.638,2071,1.796,2072,1.796,2073,1.716,2074,1.716,2077,1.796,2078,1.601,2079,1.796,2080,3.245,2083,1.796,2085,1.796,2087,1.796,2088,1.796,2091,1.796,2092,1.796,2093,2.804,2094,1.796,2095,2.804,2096,1.644,2098,1.796,2099,1.796,2100,4.225,2101,1.796,2102,1.796,2103,1.796,2104,2.804,2105,1.796,2108,2.639,2110,1.691,2111,1.796,2112,2.639,2330,1.332,2331,1.541,2347,1.36,2353,1.36,2354,1.374,2425,1.622,2426,1.622,2427,1.667,2428,1.622,2429,1.622,2430,1.622,2431,1.622,2432,1.622,2433,1.622,2434,1.622,2435,1.667,2436,1.622,2437,1.622,2438,1.826,2439,1.826,2440,1.826,2441,1.826,2442,1.826,2443,1.826,2444,1.716,2445,1.826,2446,1.826,2447,1.826]],["t/2251",[0,1.044,4,1.438,7,0.47,12,2.035,14,1.54,16,1.578,18,2.309,22,0.819,43,0.686,44,0.677,53,0.987,54,0.627,61,1.783,62,0.796,73,0.843,92,1.311,97,0.852,105,2.451,115,1.79,116,1.487,119,3.19,120,1.73,129,2.829,141,1.378,144,1.407,145,1.47,146,2.65,155,1.261,158,2.503,159,2.965,163,1.707,171,0.691,209,3.558,223,1.922,257,0.935,355,2.33,371,3.384,391,2.4,435,1.378,460,1.35,462,1.35,468,2.308,503,2.257,522,2.768,616,1.393,619,1.977,648,1.558,654,2.608,708,1.54,713,2.811,717,2.798,727,2.812,754,1.216,770,1.227,771,1.261,774,1.731,821,1.058,878,1.227,936,1.757,937,2.65,975,1.54,987,1.811,1043,1.684,1053,2.208,1090,2.65,1152,1.06,1171,1.216,1202,1.205,1211,1.618,1379,1.183,1449,3.446,1763,3.051,1765,0.987,2066,0.654,2071,1.84,2072,1.84,2073,1.757,2074,1.757,2077,1.84,2078,1.639,2079,1.84,2080,3.295,2083,1.84,2085,1.84,2087,1.84,2088,1.84,2091,1.84,2092,1.84,2093,2.856,2094,1.84,2095,2.856,2096,1.684,2098,1.84,2099,1.84,2100,4.272,2101,1.84,2102,1.84,2103,1.84,2104,2.856,2105,1.84,2108,2.688,2110,1.731,2111,1.84,2112,2.688,2167,3.204,2330,1.364,2331,1.578,2347,1.393,2353,1.393,2354,1.407,2425,1.661,2426,1.661,2427,1.707,2428,1.661,2429,1.661,2430,1.661,2431,1.661,2432,1.661,2433,1.661,2434,1.661,2435,1.707,2436,1.661,2437,1.661,2438,1.87,2439,1.87,2440,1.87,2441,1.87,2442,1.87,2443,1.87,2444,1.757,2445,1.87,2446,1.87,2447,1.87]],["t/2253",[0,0.955,4,1.413,7,0.464,12,2.007,14,1.512,16,1.55,18,2.29,22,0.804,34,1.142,40,1.05,43,0.674,44,0.665,51,1.383,53,0.969,54,0.616,62,1.218,73,0.828,92,1.288,97,0.841,105,2.632,115,2.812,116,1.46,119,3.167,120,1.706,141,1.354,144,1.383,145,1.444,146,2.614,155,1.239,158,2.484,159,2.932,163,1.677,171,0.679,209,3.518,223,1.896,257,0.919,355,2.308,371,3.351,391,1.931,435,1.354,460,1.326,462,1.326,468,2.276,503,2.226,522,2.73,616,1.368,619,1.95,640,1.05,648,1.531,654,2.583,708,1.512,713,2.772,717,2.766,727,2.785,754,1.194,770,1.205,774,1.701,821,1.043,878,1.205,936,1.726,937,2.614,975,1.512,987,1.779,1043,1.654,1090,2.614,1152,1.041,1171,1.194,1202,1.183,1211,1.589,1379,1.163,1449,3.407,1763,3.276,1765,0.969,1982,5.627,2066,0.642,2071,1.807,2072,1.807,2073,1.726,2074,1.726,2077,1.807,2078,1.61,2079,1.807,2080,3.257,2083,1.807,2085,1.807,2087,1.807,2088,1.807,2091,1.807,2092,1.807,2093,2.817,2094,1.807,2095,2.817,2096,1.654,2098,1.807,2099,1.807,2100,4.237,2101,1.807,2102,1.807,2103,1.807,2104,2.817,2105,1.807,2108,2.651,2110,1.701,2111,1.807,2112,2.651,2330,1.34,2331,1.55,2347,1.368,2353,1.368,2354,1.383,2425,1.631,2426,1.631,2427,1.677,2428,1.631,2429,1.631,2430,1.631,2431,1.631,2432,1.631,2433,1.631,2434,1.631,2435,1.677,2436,1.631,2437,1.631,2438,1.837,2439,1.837,2440,1.837,2441,1.837,2442,1.837,2443,1.837,2444,1.726,2445,1.837,2446,1.837,2447,1.837,2459,3.466,2460,3.466]],["t/2255",[0,1.042,4,1.434,7,0.469,12,2.03,16,1.573,18,2.306,22,0.816,43,0.684,44,0.675,53,0.984,54,0.625,62,0.793,63,1.613,73,0.84,92,1.307,97,0.85,105,2.447,112,1.864,115,1.785,116,3.65,119,3.186,120,1.725,141,1.374,144,1.403,145,1.466,146,2.644,155,1.258,158,2.5,159,2.96,163,1.702,171,0.689,223,1.918,257,0.932,355,2.327,371,3.378,391,1.954,435,1.374,460,1.346,462,1.346,468,2.303,503,2.252,522,2.762,616,1.389,619,1.972,648,1.554,654,2.604,708,1.535,713,2.805,717,2.792,727,2.807,749,2.823,754,2.819,770,1.223,774,1.726,821,1.056,848,1.778,878,1.223,936,1.752,937,2.644,975,1.535,987,1.805,1043,1.678,1053,1.418,1090,2.644,1152,1.057,1156,2.982,1171,1.212,1202,1.201,1211,1.613,1379,1.18,1449,3.439,1763,1.418,1765,0.984,2066,0.652,2071,1.834,2072,1.834,2073,1.752,2074,1.752,2077,1.834,2078,1.634,2079,1.834,2080,3.288,2083,1.834,2085,1.834,2087,1.834,2088,1.834,2091,1.834,2092,1.834,2093,2.849,2094,1.834,2095,2.849,2096,1.678,2098,1.834,2099,1.834,2100,4.266,2101,1.834,2102,1.834,2103,1.834,2104,2.849,2105,1.834,2108,2.682,2110,1.726,2111,1.834,2112,2.682,2301,2.823,2330,1.36,2331,1.573,2347,1.389,2353,1.389,2354,1.403,2425,1.656,2426,1.656,2427,1.702,2428,1.656,2429,1.656,2430,1.656,2431,1.656,2432,1.656,2433,1.656,2434,1.656,2435,1.702,2436,1.656,2437,1.656,2438,1.864,2439,1.864,2440,1.864,2441,1.864,2442,1.864,2443,1.864,2444,1.752,2445,1.864,2446,1.864,2447,1.864,2461,3.518]],["t/2257",[0,0.981,4,1.487,7,0.483,12,2.088,16,1.632,18,2.345,22,0.847,43,0.71,44,0.7,53,1.021,54,0.648,62,0.823,73,0.872,92,1.356,97,0.875,105,2.496,115,1.837,116,1.538,119,3.234,120,1.775,141,1.425,144,1.456,145,1.52,146,2.72,155,1.305,158,2.537,159,3.029,163,1.765,171,0.715,184,0.997,223,1.973,257,0.967,355,2.372,371,3.445,391,2.01,435,1.425,460,1.397,462,1.397,468,2.369,503,2.317,522,2.841,616,1.44,619,2.029,648,1.612,654,2.655,708,1.592,713,2.885,717,2.857,727,2.862,754,1.257,770,1.269,774,1.791,821,1.086,878,1.269,936,1.817,937,2.72,951,1.844,975,1.592,987,1.873,1043,1.741,1090,2.72,1152,1.096,1171,1.257,1202,1.246,1211,1.673,1379,1.224,1449,3.52,1692,4.14,1763,1.471,1765,1.021,2066,0.676,2071,1.903,2072,1.903,2073,1.817,2074,1.817,2077,1.903,2078,1.695,2079,1.903,2080,3.365,2083,1.903,2085,1.903,2087,1.903,2088,1.903,2091,1.903,2092,1.903,2093,2.931,2094,1.903,2095,2.931,2096,2.682,2098,1.903,2099,1.903,2100,4.339,2101,1.903,2102,1.903,2103,1.903,2104,2.931,2105,1.903,2108,2.759,2110,1.791,2111,1.903,2112,2.759,2330,1.411,2331,1.632,2347,1.44,2353,1.44,2354,1.456,2371,2.038,2425,1.718,2426,1.718,2427,1.765,2428,1.718,2429,1.718,2430,1.718,2431,1.718,2432,1.718,2433,1.718,2434,1.718,2435,1.765,2436,1.718,2437,1.718,2438,1.934,2439,1.934,2440,1.934,2441,1.934,2442,1.934,2443,1.934,2444,1.817,2445,1.934,2446,1.934,2447,1.934]],["t/2259",[22,1.773,43,1.486,54,1.671,65,4.798,73,1.825,97,1.189,134,5.158,185,1.838,257,2.024,619,2.757,821,1.475,970,5.257,1152,2.295,1171,2.632,1202,2.608,1379,2.562,1451,3.374,1765,2.851,2066,1.415,2330,2.953,2331,3.415,2462,7.638,2463,7.638]],["t/2261",[22,1.796,43,1.505,54,1.375,64,4.49,65,4.464,73,1.849,97,1.204,185,1.862,257,2.051,619,2.793,628,6.56,697,4.101,821,1.495,1152,2.325,1171,2.667,1202,2.643,1379,2.596,1451,3.418,1765,2.652,1768,6.56,2066,1.434,2177,7.028,2178,7.028,2330,2.992,2331,3.46]],["t/2263",[22,1.808,35,4.613,43,1.515,54,1.384,62,1.757,65,4.482,73,1.861,97,1.212,185,1.875,257,2.065,619,2.812,697,4.128,821,1.505,1152,2.34,1171,2.684,1202,2.66,1379,2.613,1451,3.441,1765,2.663,1769,6.604,2066,1.443,2182,7.075,2330,3.012,2331,3.483]],["t/2265",[22,1.773,43,1.486,54,1.357,65,4.428,73,2.247,97,1.189,185,1.838,257,2.024,559,5.625,619,2.757,697,4.048,821,1.475,1152,2.295,1171,2.632,1202,2.608,1379,2.562,1451,3.374,1581,4.842,1690,7.549,1765,2.631,1770,6.475,2066,1.415,2187,6.937,2330,2.953,2331,3.415]],["t/2267",[0,1.032,4,1.404,7,0.462,12,1.998,16,1.541,18,2.688,22,0.8,43,0.67,44,0.661,53,0.964,54,0.955,59,1.166,61,1.741,62,0.777,73,0.823,92,1.28,97,0.837,105,2.42,115,1.757,116,1.452,119,3.159,120,1.698,141,1.346,144,1.374,145,1.436,146,2.602,155,1.232,158,2.478,159,2.921,163,1.667,171,0.675,184,0.941,223,1.887,257,0.913,355,2.301,371,3.341,391,2.364,435,1.346,460,1.319,462,1.319,468,2.266,503,2.216,522,2.718,616,1.36,619,1.941,648,1.522,654,2.575,708,1.504,713,2.76,717,3.737,727,2.776,754,1.187,770,1.198,774,1.691,821,1.039,825,1.96,878,1.198,881,2.449,936,1.716,937,2.602,975,1.504,983,2.371,987,1.768,1043,1.644,1053,2.168,1090,2.602,1152,1.035,1171,1.853,1202,1.177,1211,1.58,1379,1.156,1449,3.394,1656,2.765,1763,1.389,1765,0.964,1772,2.921,2066,0.638,2071,1.796,2072,1.796,2073,1.716,2074,1.716,2077,1.796,2078,1.601,2079,1.796,2080,3.245,2083,1.796,2085,1.796,2087,1.796,2088,1.796,2091,1.796,2092,1.796,2093,2.804,2094,1.796,2095,2.804,2096,1.644,2098,1.796,2099,1.796,2100,4.225,2101,1.796,2102,1.796,2103,1.796,2104,2.804,2105,1.796,2108,2.639,2110,1.691,2111,1.796,2112,2.639,2196,6.006,2330,1.332,2331,1.541,2347,1.36,2353,1.36,2354,1.374,2425,1.622,2426,1.622,2427,1.667,2428,1.622,2429,1.622,2430,1.622,2431,1.622,2432,1.622,2433,1.622,2434,1.622,2435,1.667,2436,1.622,2437,1.622,2438,1.826,2439,1.826,2440,1.826,2441,1.826,2442,1.826,2443,1.826,2444,1.716,2445,1.826,2446,1.826,2447,1.826]],["t/2269",[18,2.865,22,1.761,43,1.476,54,1.806,73,1.813,97,1.181,185,1.826,257,2.011,619,2.739,654,3.502,717,4.235,821,1.466,1152,2.28,1171,2.615,1202,2.591,1379,2.545,1451,3.352,1587,5.588,2066,1.406,2330,2.934,2331,3.393,2391,6.433]],["t/2271",[0,1.385,7,0.513,8,1.919,12,2.219,22,0.685,34,0.973,36,3.692,43,0.574,44,1.146,49,0.57,51,1.177,53,1.33,54,1.723,61,1.492,62,0.666,63,1.353,73,1.427,75,1.591,89,1.389,92,1.767,97,0.459,119,2.954,120,1.502,123,2.209,158,0.852,171,0.578,199,1.273,223,1.669,257,0.782,291,1.389,355,3.034,391,3.657,460,1.82,462,1.82,468,2.004,570,2.656,608,1.165,616,1.877,619,1.065,640,0.894,642,1.595,654,2.36,671,1.492,693,1.619,695,2.301,727,3.263,728,1.539,754,2.36,757,2.944,770,1.654,771,1.055,782,1.871,821,0.919,839,4.969,878,1.026,914,1.871,946,3.697,948,3.697,951,2.404,1053,1.918,1085,1.871,1121,2.656,1150,2.76,1152,0.887,1171,1.017,1202,1.008,1329,1.713,1332,3.786,1379,0.99,1765,1.33,2058,1.919,2066,0.547,2086,3.884,2330,1.141,2331,1.32,2340,3.178,2341,1.972,2342,1.972,2343,3.178,2344,6.498,2345,1.972,2346,1.972,2347,1.877,2348,1.827,2349,1.827,2350,3.178,2351,1.492,2352,1.972,2353,1.165,2354,1.177,2355,3.178,2356,4.577,2357,5.642,2358,3.178,2359,3.178,2360,3.178,2361,3.178,2362,3.178,2363,3.178,2364,3.178,2365,3.178,2366,1.972,2367,1.972,2368,3.178,2369,1.972,2370,1.648,2464,2.952,2465,2.952]],["t/2273",[0,0.897,4,2.016,7,0.53,12,3.322,16,1.386,18,2.17,22,0.719,34,1.022,43,0.603,44,0.595,51,1.236,53,0.867,54,1.458,62,0.699,73,1.182,85,1.543,89,1.459,92,1.152,97,0.77,105,2.282,115,1.616,116,1.306,119,3.019,120,1.949,141,2.752,144,1.236,145,1.292,146,2.393,155,1.108,158,2.485,159,2.726,163,1.5,171,0.607,223,1.736,257,0.822,291,1.459,355,2.17,371,3.15,391,1.108,435,1.211,460,1.186,462,1.186,468,2.085,503,2.038,522,2.5,607,2.539,616,2.436,619,1.785,640,0.939,648,1.369,654,3.082,708,2.159,713,2.539,717,2.572,727,3.199,754,1.704,770,1.078,774,1.521,821,0.955,878,1.078,936,1.543,937,2.393,975,2.159,987,1.591,1043,1.479,1053,1.994,1090,2.393,1152,0.931,1171,1.068,1202,1.058,1211,1.421,1379,1.04,1449,3.168,1763,1.25,1765,0.867,2066,0.574,2071,1.616,2072,1.616,2073,1.543,2074,1.543,2077,1.616,2078,2.298,2079,1.616,2080,3.029,2083,1.616,2085,1.616,2087,1.616,2088,1.616,2091,1.616,2092,1.616,2093,2.579,2094,1.616,2095,2.579,2096,2.36,2098,1.616,2099,1.616,2100,4.014,2101,1.616,2102,1.616,2103,1.616,2104,2.579,2105,1.616,2108,2.427,2110,1.521,2111,1.616,2112,2.427,2126,4.954,2330,1.198,2331,1.386,2347,1.224,2353,1.224,2425,2.329,2426,2.329,2427,2.393,2428,2.329,2429,2.329,2430,2.329,2431,2.329,2432,2.329,2433,2.329,2434,2.329,2435,2.393,2436,2.329,2437,2.329,2438,1.643,2439,1.643,2440,1.643,2441,1.643,2442,1.643,2443,1.643,2444,1.543,2445,1.643,2446,1.643,2447,1.643,2466,4.492,2467,3.1,2468,3.1,2469,2.203,2470,2.628]],["t/2275",[0,0.955,4,1.413,7,0.464,12,2.466,16,1.55,18,2.29,22,0.804,34,1.142,43,0.674,44,0.665,51,1.383,53,0.969,54,1.444,62,0.782,73,1.291,89,1.631,92,1.288,97,0.841,105,2.428,115,1.765,116,1.46,119,3.593,120,2.096,141,1.354,144,1.383,145,1.444,146,2.614,155,1.239,158,2.484,159,2.932,163,1.677,171,0.679,223,3.021,257,0.919,291,1.631,355,2.308,371,3.351,391,1.931,435,1.354,460,1.326,462,1.326,468,2.276,503,2.226,522,2.73,616,2.132,619,1.95,640,1.05,648,1.531,654,2.583,708,2.357,713,2.772,717,2.766,727,2.785,754,1.194,770,1.205,774,1.701,821,1.043,878,1.205,936,1.726,937,2.614,975,1.512,987,1.779,1043,1.654,1053,1.397,1090,2.614,1152,1.041,1202,1.183,1211,1.589,1379,1.163,1449,3.407,1763,1.397,1765,0.969,2066,0.642,2071,1.807,2072,1.807,2073,1.726,2074,1.726,2077,1.807,2078,1.61,2079,1.807,2080,3.257,2083,1.807,2085,1.807,2087,1.807,2088,1.807,2091,1.807,2092,1.807,2093,2.817,2094,1.807,2095,2.817,2096,1.654,2098,1.807,2099,1.807,2100,4.237,2101,1.807,2102,1.807,2103,1.807,2104,2.817,2105,1.807,2108,2.651,2110,1.701,2111,1.807,2112,2.651,2330,1.34,2331,1.55,2347,1.368,2353,1.368,2354,1.383,2425,1.631,2426,1.631,2427,1.677,2428,1.631,2429,1.631,2430,1.631,2431,1.631,2432,1.631,2433,1.631,2434,1.631,2435,1.677,2436,1.631,2437,1.631,2438,1.837,2439,1.837,2440,1.837,2441,1.837,2442,1.837,2443,1.837,2444,1.726,2445,1.837,2446,1.837,2447,1.837,2471,3.148]],["t/2277",[0,0.956,4,1.417,7,0.465,12,2.471,16,1.554,18,2.293,22,0.807,34,1.146,43,0.676,44,0.667,51,1.387,53,0.972,54,1.182,62,0.784,73,1.294,89,1.636,92,1.291,97,0.843,105,2.432,115,1.769,116,1.465,119,3.171,120,2.1,141,1.358,144,1.387,145,1.448,146,2.62,155,1.243,158,2.487,159,2.937,163,1.682,171,0.681,223,1.9,257,0.921,291,1.636,355,2.944,371,3.357,391,1.936,435,1.358,460,1.33,462,1.33,468,2.282,503,2.231,522,2.736,616,2.137,619,1.954,640,1.053,648,1.535,654,2.587,708,2.363,713,2.779,717,2.771,727,2.789,754,1.198,770,1.209,774,1.706,782,2.203,821,1.046,878,1.209,936,1.731,937,2.62,943,4.345,975,1.517,987,1.784,1043,1.659,1053,1.401,1090,2.62,1152,1.044,1171,1.198,1202,1.187,1211,1.594,1379,1.166,1449,3.413,1763,1.401,1765,0.972,2066,0.644,2071,1.812,2072,1.812,2073,1.731,2074,1.731,2077,1.812,2078,1.615,2079,1.812,2080,3.264,2083,1.812,2085,1.812,2087,1.812,2088,1.812,2091,1.812,2092,1.812,2093,2.823,2094,1.812,2095,2.823,2096,1.659,2098,1.812,2099,1.812,2100,4.242,2101,1.812,2102,1.812,2103,1.812,2104,2.823,2105,1.812,2108,2.657,2110,1.706,2111,1.812,2112,2.657,2330,1.344,2331,1.554,2347,1.372,2353,1.372,2354,1.387,2425,1.636,2426,1.636,2427,1.682,2428,1.636,2429,1.636,2430,1.636,2431,1.636,2432,1.636,2433,1.636,2434,1.636,2435,1.682,2436,1.636,2437,1.636,2438,1.842,2439,1.842,2440,1.842,2441,1.842,2442,1.842,2443,1.842,2444,1.731,2445,1.842,2446,1.842,2447,1.842,2472,3.476]],["t/2279",[0,1.224,7,0.577,17,4.784,22,1.56,34,2.215,40,2.035,43,1.307,44,1.289,51,2.681,54,1.707,73,1.605,92,2.496,97,1.046,120,2.122,134,3.685,155,3.102,158,1.939,185,1.617,257,1.781,391,3.102,460,2.572,462,2.572,615,4.715,619,2.425,640,2.035,805,2.425,821,1.298,1152,2.019,1171,2.315,1202,2.295,1379,2.254,1765,1.879,2066,1.245,2330,2.598,2331,3.005,2347,2.652,2353,2.652,2354,2.681,2473,6.103,2474,6.72]],["t/2281",[17,4.012,34,2.656,40,2.441,51,3.214,54,1.727,391,2.881,615,3.954,640,2.441,805,2.908,821,1.556,1392,6.466,1765,2.253,1944,8.238,2066,1.493,2199,7.318,2200,7.318,2473,7.318,2475,8.058,2476,8.058]],["t/2283",[0,1.237,7,0.591,12,3.272,22,1.596,43,1.338,44,1.319,54,1.222,73,1.643,92,2.555,97,1.07,120,2.171,158,1.985,184,1.879,257,1.823,391,3.148,460,2.632,462,2.632,619,2.482,805,2.482,821,1.328,1152,2.066,1171,2.37,1202,2.348,1379,2.307,1765,1.923,2066,1.274,2114,7.465,2330,2.659,2331,3.075,2347,2.715,2353,2.715,2354,2.743,2477,6.877,2478,6.877,2479,6.877,2480,6.877,2481,6.877,2482,6.877,2483,6.877,2484,6.877,2485,6.246]],["t/2286",[0,1.231,7,0.584,22,2.367,44,1.304,54,1.208,73,1.624,92,2.525,97,1.058,158,1.962,185,1.636,257,2.703,391,3.125,460,2.602,462,2.602,608,3.45,697,3.602,805,2.453,821,1.313,1152,2.042,1202,2.321,1379,2.28,1765,1.901,1773,7.405,1774,7.753,1775,5.762,2066,1.259,2201,8.774,2330,2.628,2334,4.542,2347,2.683,2353,2.683,2354,2.712]],["t/2288",[0,1.03,4,1.635,7,0.519,18,2.28,22,2.197,40,1.215,44,0.769,49,0.775,53,1.122,54,0.713,62,0.904,73,0.958,85,1.997,92,1.49,97,1.131,105,2.62,119,2.976,120,1.908,141,1.567,144,1.6,158,2.335,171,1.989,184,1.096,223,1.407,257,1.063,371,3.88,391,2.16,460,1.535,462,1.535,496,3.202,608,3.193,648,4.302,654,2.99,703,2.125,708,1.75,711,5.957,717,2.517,727,3.224,754,1.382,770,1.395,821,1.167,878,1.395,951,2.027,975,1.75,1008,2.68,1152,1.205,1155,4.63,1171,1.382,1202,1.369,1211,1.839,1379,1.345,1543,4.449,1571,2.953,1692,4.449,1765,1.122,1776,2.85,1929,3.074,2066,0.743,2078,1.863,2080,3.97,2096,2.883,2108,1.968,2110,1.968,2112,4.259,2116,3.074,2118,3.074,2119,5.571,2330,1.551,2334,2.68,2347,1.583,2353,1.583,2354,1.6,2371,2.239,2425,1.888,2426,1.888,2427,1.94,2428,1.888,2429,1.888,2430,1.888,2431,1.888,2432,1.888,2433,1.888,2434,1.888,2435,1.94,2436,1.888,2437,1.888,2444,1.997,2469,2.85,2486,4.848,2487,3.219,2488,3.219]],["t/2290",[0,1.015,4,1.586,7,0.507,18,2.64,22,2.174,40,1.179,44,0.746,49,1.539,53,1.088,54,0.691,62,0.878,73,0.93,85,1.937,92,1.445,97,1.111,105,2.58,119,2.931,120,1.864,141,1.52,144,1.552,158,2.299,171,1.974,184,1.063,207,4.348,223,1.365,257,1.031,371,3.829,391,2.111,460,1.489,462,1.489,496,3.129,608,3.144,648,4.263,654,2.951,703,2.062,708,1.698,711,5.866,717,3.568,727,3.182,754,1.341,770,1.353,821,1.141,878,1.353,951,1.966,975,1.698,1008,2.6,1152,1.169,1155,4.526,1171,1.341,1202,1.329,1211,1.784,1379,1.305,1543,4.348,1571,2.865,1765,1.088,1776,4.196,1929,2.982,2066,0.721,2078,1.807,2080,3.909,2096,1.857,2108,1.909,2110,1.909,2112,4.203,2116,2.982,2118,2.982,2119,5.469,2330,1.504,2334,2.6,2347,1.536,2353,1.536,2354,1.552,2371,2.173,2425,1.832,2426,1.832,2427,1.882,2428,1.832,2429,1.832,2430,1.832,2431,1.832,2432,1.832,2433,1.832,2434,1.832,2435,1.882,2436,1.832,2437,1.832,2444,1.937,2469,2.765,2486,4.739,2487,3.123,2488,3.123]],["t/2292",[0,0.994,4,1.525,7,0.492,18,2.755,22,2.145,40,1.133,44,0.718,49,0.723,53,1.047,54,1.496,62,0.844,73,0.894,85,1.863,92,1.39,97,1.084,105,2.529,119,2.872,120,1.81,141,3.468,144,1.493,158,2.253,171,1.954,185,0.901,223,1.313,257,0.992,371,3.763,391,2.049,460,1.432,462,1.432,496,3.038,608,3.082,648,4.211,654,3.437,703,1.983,708,1.633,711,5.749,717,3.851,727,3.127,754,1.289,770,1.301,821,1.107,878,1.301,975,1.633,1008,2.5,1053,1.509,1152,1.124,1155,4.393,1171,1.289,1202,1.278,1211,1.716,1379,1.255,1543,4.221,1571,2.756,1765,1.047,1776,2.659,1929,2.868,2066,0.693,2078,1.738,2080,3.831,2096,1.786,2108,1.836,2110,1.836,2112,4.13,2116,2.868,2118,2.868,2119,5.339,2330,1.447,2334,2.5,2347,1.477,2353,1.477,2354,1.493,2391,3.172,2425,1.761,2426,1.761,2427,1.81,2428,1.761,2429,1.761,2430,1.761,2431,1.761,2432,1.761,2433,1.761,2434,1.761,2435,1.81,2436,1.761,2437,1.761,2444,1.863,2469,2.659,2486,4.6,2487,3.003,2488,3.003]],["t/2294",[0,1.013,4,1.581,7,0.506,18,2.242,22,2.172,40,1.175,44,0.744,49,0.749,53,1.085,54,1.52,62,0.875,73,0.927,85,1.931,92,1.441,97,1.108,105,2.576,119,2.926,120,1.86,141,1.515,144,1.547,158,2.295,164,2.669,171,1.972,223,3.001,257,1.028,371,3.824,391,2.106,460,1.484,462,1.484,496,3.121,608,3.139,616,1.531,648,4.258,654,2.947,703,4.532,708,1.692,711,5.856,717,2.454,727,3.177,754,1.336,770,1.348,821,1.138,878,1.348,975,1.692,1008,2.591,1053,1.564,1152,1.165,1155,4.514,1171,1.336,1202,1.324,1211,1.778,1379,1.301,1543,4.337,1571,2.856,1765,1.085,1776,2.756,1929,2.972,2066,0.718,2078,1.801,2080,3.903,2096,1.85,2108,1.903,2110,1.903,2112,4.197,2116,2.972,2118,2.972,2119,5.458,2330,1.499,2334,2.591,2347,1.531,2353,1.531,2354,1.547,2425,1.826,2426,1.826,2427,1.876,2428,1.826,2429,1.826,2430,1.826,2431,1.826,2432,1.826,2433,1.826,2434,1.826,2435,1.876,2436,1.826,2437,1.826,2444,1.931,2469,2.756,2486,4.727,2487,3.112,2488,3.112,2489,3.878]],["t/2296",[14,3.469,22,2.407,54,1.412,73,1.899,97,1.237,257,2.107,480,4.612,608,3.137,821,1.535,1152,2.388,1171,2.739,1202,2.714,1211,4.419,1379,2.666,1451,3.511,2066,1.473,2330,3.073,2334,5.311,2490,7.948,2491,7.219]],["t/2298",[0,1.322,22,1.656,26,3.079,53,1.088,54,0.691,61,1.966,62,1.332,63,4.296,96,2.214,97,0.606,100,5.668,123,4.352,145,4.199,199,1.678,257,1.031,258,3.86,374,2.865,391,2.551,422,5.938,465,7.18,608,1.536,692,2.678,703,5.238,770,1.353,771,1.391,821,1.141,878,1.353,975,3.114,1053,2.381,1152,1.169,1171,1.341,1202,1.329,1379,1.305,1765,1.088,2066,0.721,2330,1.504,2334,2.6,2338,2.865,2392,2.865,2393,3.123,2394,3.123,2395,3.123,2396,3.123,2397,3.123,2398,7.745,2399,3.123,2400,3.123,2401,3.123,2402,6.393,2403,7.518,2404,7.518,2405,7.518,2406,7.518,2407,3.123,2408,3.123,2409,3.123,2410,3.123,2411,3.123,2412,3.123,2413,3.123,2414,3.123,2415,4.739,2416,3.123,2417,3.123,2418,3.123,2419,3.123,2420,3.123,2421,3.123]],["t/2301",[0,1.161,4,2.457,7,0.694,22,1.399,44,1.157,53,1.686,54,1.436,62,1.36,73,1.441,85,3.002,92,2.24,97,0.938,158,2.332,184,1.648,257,1.598,391,2.156,460,2.308,462,2.308,607,4.995,708,2.631,727,2.24,754,2.078,770,2.097,821,1.561,878,2.097,951,3.047,975,2.631,1152,1.811,1171,2.078,1202,2.059,1379,2.022,1692,4.44,1765,1.686,2066,1.117,2078,2.801,2096,3.855,2126,7.312,2330,2.331,2335,4.839,2347,2.38,2353,2.38,2354,2.405,2371,3.367,2425,2.838,2426,2.838,2427,2.917,2428,2.838,2429,2.838,2430,2.838,2431,2.838,2432,2.838,2433,2.838,2434,2.838,2435,2.917,2436,2.838,2437,2.838,2469,4.285,2470,5.111]],["t/2303",[0,1.271,4,2.337,7,0.671,22,1.331,44,1.1,53,1.604,54,1.019,62,1.761,85,2.855,92,2.13,97,0.893,145,3.973,158,2.254,257,1.52,391,2.792,460,2.195,462,2.195,607,4.894,692,3.947,708,2.503,727,2.13,754,1.976,770,1.994,771,2.05,821,1.509,878,1.994,975,4.354,1053,2.312,1152,1.723,1171,1.976,1202,1.958,1379,1.924,1765,1.604,2066,1.062,2078,2.664,2096,2.736,2126,7.128,2330,2.217,2335,4.602,2347,2.264,2353,2.264,2354,2.288,2371,3.202,2425,2.7,2426,2.7,2427,2.775,2428,2.7,2429,2.7,2430,2.7,2431,2.7,2432,2.7,2433,2.7,2434,2.7,2435,2.775,2436,2.7,2437,2.7,2469,4.076,2470,4.861,2492,5.735]],["t/2306",[0,1.372,7,0.514,8,1.924,12,2.223,18,0.834,36,3.697,40,0.896,44,1.148,49,0.572,51,1.18,53,1.333,54,1.867,61,1.496,62,0.667,63,1.357,73,1.139,75,1.595,92,1.771,97,0.461,119,2.957,120,0.934,123,2.214,158,0.854,171,0.58,184,0.809,199,1.276,223,1.672,257,0.784,355,2.603,391,3.659,460,1.824,462,1.824,468,2.008,570,2.661,608,1.168,615,1.452,640,0.896,642,1.599,654,2.912,671,1.496,693,1.623,695,2.306,727,3.663,728,1.543,754,2.364,757,2.949,770,1.657,771,1.058,821,0.921,839,4.974,878,1.029,914,1.876,946,1.831,948,1.831,951,2.409,1053,1.922,1085,1.876,1121,2.661,1150,2.765,1171,1.02,1202,1.01,1329,1.717,1332,3.793,1379,0.993,1398,2.036,1765,1.333,2058,1.924,2066,0.548,2086,3.099,2336,1.977,2340,3.185,2341,1.977,2342,1.977,2343,3.185,2344,6.501,2345,1.977,2346,1.977,2347,1.881,2348,1.831,2349,1.831,2350,3.185,2351,1.496,2352,1.977,2353,1.168,2354,1.18,2355,3.998,2356,4.584,2357,5.648,2358,3.185,2359,3.185,2360,3.185,2361,3.185,2362,3.185,2363,3.185,2364,3.185,2365,3.185,2366,1.977,2367,1.977,2368,3.185,2369,1.977,2370,1.652,2493,2.687,2494,2.959,2495,4.328,2496,2.687,2497,2.687]],["t/2308",[0,1.385,7,0.525,8,1.984,12,1.815,36,3.763,44,1.172,49,0.589,53,1.366,54,1.63,61,1.542,62,0.688,63,1.399,73,1.167,75,1.645,92,1.815,97,0.475,119,3.6,120,0.963,123,2.269,158,0.881,171,0.598,184,0.834,199,1.316,223,1.714,257,0.809,355,2.509,391,3.683,459,2.469,460,1.87,462,1.87,468,3.219,570,2.728,608,1.204,642,1.639,654,1.683,671,1.542,693,1.673,695,2.363,727,3.742,728,1.591,754,2.406,757,3.023,770,1.699,771,1.091,821,0.944,839,5.043,878,1.061,914,1.934,946,1.888,948,1.888,951,2.469,1053,1.23,1085,1.934,1121,2.728,1150,2.834,1171,1.051,1202,1.042,1329,1.77,1332,3.872,1379,1.024,1398,2.1,1765,1.366,2058,1.984,2066,0.565,2086,3.176,2336,2.039,2340,3.264,2341,2.039,2342,2.039,2343,3.264,2344,6.538,2345,2.039,2346,2.039,2347,1.928,2348,1.888,2349,1.888,2350,3.264,2351,1.542,2352,2.039,2353,1.204,2354,1.217,2355,3.264,2356,4.666,2357,5.718,2358,3.264,2359,4.082,2360,3.264,2361,3.264,2362,3.264,2363,3.264,2364,3.264,2365,3.264,2366,2.039,2367,2.039,2368,4.666,2369,2.039,2370,1.704,2371,1.704,2498,3.051]],["t/2310",[0,1.341,7,0.468,8,1.679,12,2.024,36,3.408,44,1.045,46,2.887,49,0.499,50,2.295,53,1.192,54,1.658,55,2.564,56,2.673,61,1.305,62,0.582,63,1.184,73,1.019,75,1.391,78,4.374,92,1.584,97,0.402,100,3.296,119,2.774,120,0.815,122,2.53,123,1.981,157,3.296,158,0.745,171,0.506,194,2.936,198,4.175,199,1.113,208,2.673,223,1.496,257,0.684,284,6.626,355,2.321,391,3.547,460,1.632,462,1.632,468,1.797,570,2.381,608,1.019,617,5.777,642,1.43,654,1.469,671,1.305,693,1.416,695,2.063,727,3.098,728,1.346,754,2.179,757,2.639,770,1.483,771,0.923,803,4.011,821,0.824,839,4.666,848,1.305,878,0.898,914,1.636,946,1.598,948,1.598,951,2.753,1053,1.719,1072,2.987,1085,1.636,1111,4.617,1121,2.381,1150,2.474,1171,0.89,1202,0.882,1329,1.498,1332,4.438,1379,0.866,1398,1.777,1628,4.371,1765,1.192,2058,1.679,2066,0.478,2086,2.772,2336,1.725,2340,2.849,2341,1.725,2342,1.725,2343,2.849,2344,6.329,2345,1.725,2346,1.725,2347,1.683,2348,1.598,2349,1.598,2350,2.849,2351,1.305,2352,1.725,2353,1.019,2354,1.03,2355,2.849,2356,4.226,2357,5.33,2358,2.849,2359,2.849,2360,3.64,2361,2.849,2362,2.849,2363,2.849,2364,2.849,2365,2.849,2366,1.725,2367,1.725,2368,2.849,2369,2.849,2370,1.442,2499,4.264,2500,4.947,2501,4.947,2502,4.947,2503,4.947,2504,4.947]],["t/2312",[0,1.364,7,0.502,8,1.858,12,2.171,18,0.806,36,3.623,40,0.866,43,0.901,44,1.121,49,0.552,51,1.14,53,1.296,54,1.854,61,1.445,62,0.645,63,1.311,73,1.107,75,1.54,92,1.722,97,0.445,119,3.065,120,0.902,123,2.153,158,0.825,171,0.908,184,0.781,199,1.233,223,1.626,257,0.758,355,2.672,391,3.631,460,1.774,462,1.774,468,1.953,570,2.588,608,1.128,615,1.403,640,0.866,642,1.554,654,2.99,671,1.445,693,1.567,695,2.242,697,1.515,727,3.63,728,1.49,754,2.316,757,2.868,770,1.611,771,1.022,821,0.895,839,6.048,878,0.994,914,1.812,946,1.769,948,1.769,951,2.342,1053,1.868,1085,1.812,1121,2.588,1150,2.689,1171,0.985,1202,0.976,1329,1.658,1332,3.705,1379,0.959,1398,1.967,1765,1.296,2058,1.858,2066,0.53,2086,3.013,2336,1.91,2340,3.097,2341,1.91,2342,1.91,2343,3.097,2344,6.459,2345,1.91,2346,1.91,2347,1.829,2348,1.769,2349,1.769,2350,3.097,2351,1.445,2352,1.91,2353,1.128,2354,1.14,2355,3.097,2356,4.492,2357,5.568,2358,3.097,2359,3.097,2360,3.097,2361,3.905,2362,3.097,2363,3.097,2364,3.097,2365,3.097,2366,1.91,2367,1.91,2368,3.097,2369,1.91,2370,1.596,2496,2.596,2497,2.596,2505,4.634,2506,4.209]],["t/2314",[0,1.385,7,0.524,8,1.979,12,1.811,36,3.758,44,1.17,49,0.588,53,1.363,54,1.628,61,1.538,62,0.686,63,1.396,73,1.165,75,1.64,92,1.811,97,0.474,119,3.597,120,0.961,123,2.264,158,0.878,171,0.596,184,0.832,199,1.312,223,1.711,257,0.807,355,2.507,391,3.681,459,2.464,460,1.866,462,1.866,468,3.215,570,2.722,608,1.201,642,1.635,654,1.68,671,1.538,693,1.669,695,2.358,727,3.74,728,1.587,754,2.402,757,3.017,770,1.695,771,1.088,821,0.942,839,5.291,878,1.058,914,1.929,946,1.884,948,1.884,951,2.464,1053,1.227,1085,1.929,1121,2.722,1150,2.828,1171,1.049,1202,1.039,1329,1.766,1332,3.865,1379,1.021,1398,2.094,1765,1.363,2058,1.979,2066,0.564,2086,3.17,2336,2.034,2340,3.257,2341,2.034,2342,2.034,2343,3.257,2344,6.535,2345,2.034,2346,2.034,2347,1.924,2348,1.884,2349,1.884,2350,3.257,2351,1.538,2352,2.034,2353,1.201,2354,1.214,2355,3.257,2356,4.659,2357,5.713,2358,3.257,2359,3.257,2360,3.257,2361,3.257,2362,4.075,2363,3.257,2364,3.257,2365,3.257,2366,2.034,2367,2.034,2368,5.098,2369,2.034,2370,1.699,2371,1.699]],["t/2316",[0,1.377,7,0.499,8,1.845,12,2.735,36,3.608,44,1.116,46,1.504,49,0.548,50,1.196,53,1.288,54,1.634,55,1.336,56,1.392,61,1.434,62,0.64,63,1.301,73,1.101,75,1.529,78,2.673,92,1.711,97,0.442,100,1.717,119,2.901,120,0.896,122,1.318,123,2.14,157,1.717,158,0.819,171,0.556,194,1.529,198,2.175,199,1.224,208,1.392,223,1.617,257,0.752,284,4.457,355,2.428,391,3.625,460,1.763,462,1.763,468,1.941,570,2.572,608,1.12,617,3.886,642,1.545,654,1.587,671,1.434,693,1.556,695,2.229,727,3.215,728,1.479,754,2.307,757,2.851,770,1.602,771,1.014,803,2.09,821,0.89,839,5.936,848,1.434,878,0.987,914,1.799,946,1.756,948,1.756,951,3.383,1053,1.144,1072,1.556,1085,1.799,1111,2.405,1121,2.572,1150,2.673,1171,0.978,1202,0.969,1329,1.646,1332,5.67,1379,0.952,1398,1.953,1628,2.277,1765,1.288,2058,1.845,2066,0.526,2086,2.995,2336,1.896,2340,3.078,2341,1.896,2342,1.896,2343,3.078,2344,6.45,2345,1.896,2346,1.896,2347,1.818,2348,1.756,2349,1.756,2350,3.078,2351,1.434,2352,1.896,2353,1.12,2354,1.132,2355,3.078,2356,4.473,2357,5.551,2358,3.078,2359,3.078,2360,3.078,2361,3.078,2362,3.078,2363,3.886,2364,3.078,2365,3.078,2366,1.896,2367,1.896,2368,3.078,2369,4.473,2370,1.584,2371,1.584,2500,2.577,2501,2.577,2502,2.577,2503,2.577,2504,2.577]],["t/2318",[0,1.371,7,0.513,8,1.919,12,1.767,18,0.832,36,3.692,44,1.146,49,0.57,51,1.177,53,1.33,54,1.798,61,1.492,62,0.666,63,1.353,73,1.136,75,1.591,92,1.767,97,0.459,119,2.954,120,0.932,123,2.209,158,0.852,171,0.578,184,0.807,199,1.273,223,3.083,257,0.782,285,1.065,355,2.705,371,2.127,391,3.657,460,1.82,462,1.82,468,2.004,497,2.031,570,2.656,597,1.713,608,1.165,616,1.165,640,0.894,642,1.595,654,1.639,671,1.492,693,1.619,695,2.301,708,1.288,727,3.263,728,1.539,754,2.36,757,5.436,770,1.654,771,1.055,821,0.919,839,4.969,878,1.026,914,1.871,946,1.827,948,1.827,951,2.404,1053,1.19,1085,1.871,1121,2.656,1150,2.76,1171,1.017,1181,2.262,1202,1.008,1329,1.713,1332,3.786,1379,0.99,1394,1.47,1398,2.031,1765,1.33,2058,1.919,2066,0.547,2086,3.093,2336,1.972,2340,3.178,2341,1.972,2342,1.972,2343,3.178,2344,6.498,2345,1.972,2346,1.972,2347,1.877,2348,1.827,2349,1.827,2350,3.178,2351,1.492,2352,1.972,2353,1.165,2354,1.177,2355,3.178,2356,4.577,2357,5.642,2358,3.178,2359,3.178,2360,3.178,2361,3.178,2362,3.178,2363,3.178,2364,3.992,2365,3.178,2366,1.972,2367,1.972,2368,3.178,2369,1.972,2370,1.648,2493,2.681,2495,2.681,2506,2.681]],["t/2321",[17,4.214,34,2.79,49,1.635,119,3.114,616,3.341,709,4.642,805,3.055,821,1.635,983,5.825,1072,4.642,1519,7.175,2066,1.568,2390,7.175,2507,8.464]],["t/2324",[0,1.306,7,0.665,44,1.484,54,1.685,92,2.875,120,2.443,158,2.233,171,1.516,285,2.793,391,3.39,460,2.962,462,2.962,540,3.951,805,2.793,821,1.495,1765,2.867,2066,1.434,2347,3.055,2353,3.055,2354,3.087]],["t/2326",[17,3.385,49,1.313,65,4.801,66,4.973,90,3.244,171,1.712,172,3.908,257,1.802,397,5.071,540,2.832,608,2.683,640,2.059,712,5.841,771,2.43,802,4.542,805,2.453,821,1.313,854,3.664,880,4.207,901,3.796,1014,3.158,1055,5.21,1104,4.678,1470,5.762,1471,5.762,1598,6.173,1765,1.901,1951,6.173,1964,6.173,1997,5.762,2057,5.762,2066,1.259,2208,6.173,2219,5.455,2328,6.173,2508,6.798,2509,6.798,2510,6.798,2511,6.798,2512,6.798]],["t/2329",[44,1.578,54,1.462,97,1.28,183,2.554,184,2.248,185,1.98,210,3.467,263,2.393,542,2.969,821,1.589,918,2.998,972,4.681,1244,4.289,1451,3.634,2066,1.524,2329,4.681,2513,4.773,2514,4.773]],["t/2331",[44,1.578,54,1.462,97,1.28,183,2.554,184,2.248,185,1.98,210,3.467,263,2.393,542,2.969,821,1.589,918,2.998,1244,4.289,1451,3.634,2066,1.524,2332,4.773,2333,4.872,2513,4.773,2514,4.773]],["t/2333",[44,1.446,53,2.109,54,1.34,62,1.7,97,1.173,183,2.341,184,2.06,185,1.815,199,3.252,210,3.177,263,2.193,542,2.721,770,2.622,821,1.802,878,2.622,918,2.747,972,5.766,1053,3.762,1244,3.931,1423,5.038,1765,2.109,2066,1.397,2329,4.29,2351,3.811,2515,9.203]],["t/2335",[44,1.384,53,2.018,54,1.282,62,1.627,97,1.123,183,2.24,184,1.972,185,1.736,199,3.915,210,3.041,263,2.099,542,2.604,570,4.029,770,2.509,821,1.754,878,2.509,918,2.629,1053,3.66,1244,3.762,1394,3.593,1765,2.018,2066,1.337,2332,4.187,2333,6.173,2351,3.647,2370,4.029,2375,4.966,2376,5.128,2515,9.467]],["t/2337",[44,1.456,53,2.122,54,1.348,62,1.711,97,1.181,183,2.356,184,2.074,185,1.826,199,3.273,210,3.198,263,2.208,542,2.739,770,2.639,821,1.81,878,2.639,918,2.765,972,6.203,1244,3.957,1765,2.122,2066,1.406,2329,4.318,2351,3.835,2371,4.238,2373,6.09,2516,6.892]],["t/2339",[44,1.446,53,2.109,54,1.34,62,1.7,97,1.173,183,2.341,184,2.06,185,1.815,199,3.252,210,3.177,263,2.193,542,2.721,770,2.622,821,1.802,878,2.622,918,2.747,1244,3.931,1765,2.109,2066,1.397,2332,4.375,2333,6.445,2351,3.811,2371,4.21,2373,6.051,2376,5.359,2516,6.848]],["t/2341",[44,1.359,53,1.981,54,1.595,62,1.598,119,2.607,183,2.2,199,3.055,223,2.486,371,3.168,640,2.146,770,2.464,779,4.491,821,1.734,878,2.464,971,7.55,972,5.605,1053,4.401,1423,4.734,1765,1.981,2066,1.313,2329,4.031,2351,3.581,2371,3.956,2517,6.434,2518,7.085,2519,7.085,2520,7.085,2521,7.085,2522,7.085,2523,7.085]],["t/2343",[44,1.465,53,2.136,54,1.357,62,1.723,119,2.81,183,2.372,199,3.294,223,2.68,371,3.415,640,2.314,770,2.656,779,4.842,821,1.817,878,2.656,1765,2.136,1961,6.937,2066,1.415,2332,4.432,2333,6.469,2351,3.86,2371,4.265,2376,5.428,2517,6.937,2524,7.638]],["t/2345",[44,1.601,49,1.612,54,1.483,155,2.983,183,2.591,210,3.516,640,2.527,821,1.612,900,4.747,923,6.145,972,4.747,1451,3.685,1765,2.334,2066,1.546,2329,4.747,2525,7.578]],["t/2347",[44,1.601,49,1.612,54,1.483,155,2.983,183,2.591,210,3.516,640,2.527,821,1.612,900,4.747,923,6.145,1451,3.685,1765,2.334,2066,1.546,2332,4.841,2333,4.941,2525,7.578]],["t/2350",[0,1.138,4,1.26,7,0.529,12,1.834,16,1.382,18,2.425,44,0.947,49,0.953,53,0.865,54,1.095,61,1.562,62,0.697,63,1.418,73,1.179,75,1.666,81,1.303,85,1.539,92,1.834,97,0.768,105,2.787,115,2.013,116,1.303,119,3.016,120,1.946,141,1.208,144,1.233,145,1.288,146,2.388,155,1.765,158,2.483,159,2.722,163,1.496,171,0.606,184,0.845,185,0.744,199,1.333,223,1.732,261,2.263,263,0.899,355,2.166,371,3.146,391,2.749,434,2.495,435,1.208,436,1.759,437,1.726,460,1.889,462,1.889,468,2.965,503,2.034,522,2.495,542,1.116,616,1.22,619,1.116,648,1.365,654,2.424,708,1.349,713,2.533,717,2.567,727,2.614,754,1.065,770,1.075,774,1.517,821,0.953,846,1.318,878,1.075,918,1.126,936,1.539,937,2.388,951,2.495,975,1.349,987,1.587,1043,1.475,1090,2.388,1171,1.065,1211,1.418,1244,1.612,1329,1.794,1379,1.656,1394,1.539,1449,3.162,1763,1.246,1765,0.865,2066,0.573,2071,1.612,2072,1.612,2073,4.283,2074,3.503,2077,1.612,2078,1.436,2079,1.612,2080,3.024,2083,1.612,2085,1.612,2087,1.612,2088,1.612,2091,1.612,2092,1.612,2093,2.574,2094,1.612,2095,2.574,2096,1.475,2098,1.612,2099,1.612,2100,4.009,2101,1.612,2102,1.612,2103,1.612,2104,2.574,2105,1.612,2108,2.422,2110,1.517,2111,1.612,2112,2.422,2344,1.913,2347,1.948,2348,1.913,2349,1.913,2353,1.22,2354,1.233,2370,1.726,2371,1.726,2375,2.128,2425,1.455,2426,1.455,2427,1.496,2428,1.455,2429,1.455,2430,1.455,2431,1.455,2432,1.455,2433,1.455,2434,1.455,2435,1.496,2436,1.455,2437,1.455,2438,1.638,2439,1.638,2440,1.638,2441,1.638,2442,1.638,2443,1.638,2444,1.539,2445,1.638,2446,1.638,2447,1.638,2513,1.794,2514,1.794,2526,2.197,2527,1.871]],["t/2352",[0,1.141,4,1.27,7,0.532,12,1.845,16,1.393,18,2.432,44,0.953,49,0.96,53,0.872,54,1.101,61,1.575,62,0.703,63,1.429,73,1.187,75,1.679,81,1.313,92,1.845,97,0.773,105,2.795,115,1.623,116,1.313,119,3.026,120,1.956,141,1.217,144,1.243,145,1.298,146,2.403,155,1.776,158,2.491,159,2.736,163,1.508,171,0.61,184,0.852,185,0.75,199,1.344,223,1.743,261,2.278,263,0.907,355,2.176,371,3.16,391,2.76,434,2.511,435,1.217,436,1.773,437,1.74,460,1.901,462,1.901,468,2.093,503,2.047,522,2.511,542,1.125,616,1.23,619,1.125,648,1.376,654,2.435,708,3.59,713,2.549,717,2.581,727,2.625,754,1.074,770,1.084,774,1.529,821,0.96,846,1.328,878,1.084,918,1.135,936,1.552,937,2.403,938,2.942,975,1.36,987,1.599,1043,1.487,1090,2.403,1171,1.074,1211,1.429,1244,1.625,1329,1.808,1379,1.666,1394,1.552,1449,3.179,1763,1.256,1765,0.872,2066,0.577,2071,1.625,2072,1.625,2073,1.552,2074,1.552,2077,1.625,2078,1.448,2079,1.625,2080,3.04,2083,1.625,2085,1.625,2087,1.625,2088,1.625,2091,1.625,2092,1.625,2093,2.59,2094,1.625,2095,2.59,2096,1.487,2098,1.625,2099,1.625,2100,4.025,2101,1.625,2102,1.625,2103,1.625,2104,2.59,2105,1.625,2108,2.438,2110,1.529,2111,1.625,2112,2.438,2132,4.971,2344,1.929,2347,1.961,2348,1.929,2349,1.929,2353,1.23,2354,1.243,2370,1.74,2375,2.145,2425,1.467,2426,1.467,2427,1.508,2428,1.467,2429,1.467,2430,1.467,2431,1.467,2432,1.467,2433,1.467,2434,1.467,2435,1.508,2436,1.467,2437,1.467,2438,1.651,2439,1.651,2440,1.651,2441,1.651,2442,1.651,2443,1.651,2444,1.552,2445,1.651,2446,1.651,2447,1.651,2449,2.83,2513,1.808,2514,1.808,2527,1.885,2528,3.116,2529,3.116,2530,2.83]],["t/2354",[0,1.125,4,1.221,7,0.518,12,1.789,16,1.34,18,2.395,44,0.924,49,0.93,53,0.838,54,1.51,61,1.515,62,0.676,63,1.374,73,1.15,75,1.615,81,1.263,92,1.789,97,0.749,105,2.752,115,1.573,116,1.263,119,3.582,120,1.906,141,1.171,144,1.195,145,1.249,146,2.329,155,1.721,158,2.452,159,2.666,163,1.45,171,0.587,183,0.931,184,0.819,185,0.721,199,1.292,210,1.263,223,3.199,261,2.208,263,0.872,355,2.128,371,3.615,391,2.706,434,2.433,435,1.171,436,1.705,437,1.673,460,1.843,462,1.843,468,2.029,503,1.984,522,2.433,542,1.082,616,1.183,619,1.082,648,1.324,654,2.381,708,1.308,713,3.547,717,2.515,727,2.567,754,1.033,770,1.042,774,1.471,821,0.93,829,1.9,846,1.277,878,1.042,918,1.092,936,1.492,937,2.329,975,1.308,987,1.538,1043,1.43,1053,1.208,1090,2.329,1171,1.033,1211,1.374,1244,1.563,1379,1.615,1394,1.492,1449,3.097,1763,1.208,1765,0.838,2066,0.555,2071,1.563,2072,1.563,2073,1.492,2074,1.492,2077,1.563,2078,1.392,2079,1.563,2080,2.962,2083,1.563,2085,1.563,2087,1.563,2088,1.563,2091,1.563,2092,1.563,2093,2.51,2094,1.563,2095,2.51,2096,1.43,2098,1.563,2099,1.563,2100,3.947,2101,1.563,2102,3.147,2103,1.563,2104,2.51,2105,1.563,2108,2.363,2110,1.471,2111,1.563,2112,2.363,2344,1.855,2347,1.9,2348,1.855,2349,1.855,2353,1.183,2354,1.195,2370,1.673,2375,2.062,2425,1.411,2426,1.411,2427,1.45,2428,1.411,2429,1.411,2430,1.411,2431,1.411,2432,1.411,2433,1.411,2434,1.411,2435,1.45,2436,1.411,2437,1.411,2438,1.588,2439,1.588,2440,1.588,2441,1.588,2442,1.588,2443,1.588,2444,1.492,2445,1.588,2446,1.588,2447,1.588,2471,2.722,2513,1.739,2514,1.739,2527,1.813,2530,2.722,2531,2.997]],["t/2356",[0,0.981,4,2.872,7,0.53,12,2.617,18,1.394,25,3.404,44,0.595,49,0.955,53,0.867,54,1.097,62,0.699,63,2.268,73,1.182,81,1.306,82,1.856,85,2.463,92,1.152,97,0.961,105,2.658,116,2.601,119,1.82,126,2.903,127,3.135,137,2.393,141,1.932,148,3.404,155,1.108,171,1.38,183,0.962,184,0.847,185,0.746,215,3.97,223,1.736,257,1.867,261,2.268,263,0.902,371,2.212,391,1.769,434,2.5,436,1.764,437,1.731,460,1.186,462,1.186,496,2.621,527,3.135,542,1.119,654,1.704,708,2.159,727,1.838,770,1.078,821,0.955,829,1.965,846,1.321,878,1.078,918,1.129,931,3.516,973,5.648,975,2.159,1053,1.25,1169,3.061,1171,1.068,1244,1.616,1359,4.263,1379,1.659,1765,0.867,2066,0.574,2073,2.463,2074,2.463,2078,2.298,2089,5.232,2129,4.193,2131,4.193,2132,3.97,2135,4.193,2137,4.193,2138,4.193,2139,4.193,2144,4.193,2145,5.973,2146,4.193,2147,4.193,2148,4.193,2149,4.193,2150,4.193,2152,4.193,2154,4.193,2158,4.193,2159,4.193,2160,4.193,2161,5.973,2162,4.193,2164,4.193,2347,1.224,2353,1.224,2354,1.236,2371,1.731,2425,2.329,2426,2.329,2428,3.317,2429,2.329,2430,2.329,2431,2.329,2432,1.459,2433,2.329,2434,2.329,2436,2.329,2437,2.329,2513,1.798,2514,1.798,2526,2.203,2527,1.875,2532,3.1,2533,2.815,2534,4.492,2535,4.492,2536,4.492,2537,2.815,2538,2.815,2539,4.492,2540,4.492,2541,4.492,2542,2.815,2543,2.815,2544,2.815,2545,2.815,2546,2.815,2547,4.492,2548,4.492,2549,2.815,2550,2.815,2551,2.815,2552,2.815,2553,2.815,2554,2.815,2555,2.815]],["t/2358",[0,1.173,7,0.529,18,2.309,44,1.181,49,1.582,54,1.636,62,1.388,63,2.823,73,1.957,81,2.594,89,3.856,92,2.287,97,0.958,105,3.179,155,2.201,183,1.911,184,1.682,185,1.481,261,3.756,263,1.791,391,2.929,434,4.14,436,3.503,437,3.437,460,2.356,462,2.356,542,2.222,805,2.222,821,1.189,829,3.902,846,2.624,918,2.243,959,4.718,1171,2.121,1244,3.21,1379,2.748,1563,6.574,1765,1.722,1777,6.944,1778,5.218,2066,1.14,2347,2.43,2353,2.43,2354,2.456,2513,3.572,2514,3.572,2526,4.375,2527,3.725,2556,6.156]],["t/2360",[18,2.492,49,1.707,54,1.731,73,2.112,81,2.915,97,1.077,105,3.155,107,4.281,108,4.385,155,2.473,183,2.148,184,1.89,185,1.665,261,4.053,263,2.012,434,4.468,436,3.936,437,3.863,459,3.496,542,2.497,821,1.336,829,4.385,846,2.949,918,2.521,1171,2.384,1244,3.607,1379,2.965,1451,3.055,2066,1.282,2155,6.283,2513,4.014,2514,4.014,2526,4.916,2527,4.186,2557,6.918]],["t/2362",[18,2.492,32,4.385,49,1.707,54,1.731,73,1.653,81,2.915,97,1.077,105,3.155,155,2.473,183,2.148,185,1.665,261,4.053,263,2.012,434,4.468,436,3.936,437,3.863,459,3.496,542,2.497,781,5.552,821,1.336,829,4.385,846,3.768,848,3.496,860,4.498,918,2.521,1244,3.607,1345,4.186,1379,2.965,1451,3.055,2066,1.282,2513,4.014,2514,4.014,2526,4.916,2527,4.186,2558,6.918]],["t/2364",[18,2.641,54,1.348,81,3.198,97,1.181,105,3.035,153,5.816,185,1.826,261,4.296,263,2.208,434,4.735,436,4.318,437,4.238,527,4.81,542,2.739,821,1.466,846,3.235,848,3.835,918,2.765,1244,3.957,1379,2.545,1451,3.352,2066,1.406,2513,4.403,2514,4.403,2526,5.393,2527,4.591]],["t/2366",[18,2.473,26,3.565,49,1.695,54,1.721,66,3.89,73,2.096,81,2.881,97,1.064,105,3.138,155,2.445,183,2.123,184,1.868,185,1.645,261,4.023,263,1.989,434,4.434,436,3.89,437,3.818,542,2.468,697,3.623,805,2.468,821,1.321,829,4.334,846,2.914,918,2.491,1171,2.356,1244,3.565,1379,2.943,1765,1.912,2066,1.267,2229,5.796,2392,5.035,2513,3.967,2514,3.967,2526,4.859,2527,4.137,2559,6.837]],["t/2368",[0,0.874,4,2.796,7,0.514,12,3.266,18,1.343,25,3.28,44,0.568,49,1.156,53,0.828,54,1.613,62,0.667,73,1.139,81,1.247,82,1.788,85,2.373,92,1.099,97,0.931,105,2.738,119,1.753,126,2.827,127,3.021,137,2.306,141,2.938,148,3.28,155,1.058,171,1.344,183,0.919,184,0.809,185,0.712,210,2.008,215,3.825,223,1.672,257,1.818,261,2.185,263,0.861,371,2.131,391,1.058,434,2.409,436,1.684,437,1.652,460,1.133,462,1.133,496,2.526,527,3.021,542,1.068,616,1.881,654,2.77,708,2.08,718,2.103,727,2.549,770,1.029,821,0.921,829,1.876,846,1.261,878,1.029,918,1.078,923,2.179,931,3.387,973,3.28,975,2.08,1053,1.922,1169,2.949,1171,1.02,1244,1.543,1359,4.151,1379,1.599,1765,0.828,2066,0.548,2073,2.373,2074,2.373,2078,2.214,2089,4.04,2129,4.04,2131,4.04,2132,3.825,2135,4.04,2137,4.04,2138,4.04,2139,4.04,2144,4.04,2145,5.815,2146,4.04,2147,4.04,2148,4.04,2149,4.04,2150,4.04,2152,4.04,2154,4.04,2158,4.04,2159,4.04,2160,4.04,2161,5.815,2162,4.04,2164,4.04,2347,1.168,2353,1.168,2354,1.18,2425,2.243,2426,2.243,2428,3.229,2429,2.243,2430,2.243,2431,2.243,2432,1.393,2433,2.243,2434,2.243,2436,2.243,2437,2.243,2466,4.328,2513,1.717,2514,1.717,2527,1.79,2533,2.687,2534,4.328,2535,4.328,2536,4.328,2537,2.687,2538,2.687,2539,4.328,2540,4.328,2541,4.328,2542,2.687,2543,2.687,2544,2.687,2545,2.687,2546,2.687,2547,4.328,2548,4.328,2549,2.687,2550,2.687,2551,2.687,2552,2.687,2553,2.687,2554,2.687,2555,2.687,2560,2.959,2561,2.959,2562,2.508]],["t/2370",[18,2.455,49,1.861,54,1.712,59,2.287,62,1.524,81,2.848,97,1.052,105,3.121,155,2.416,174,3.365,183,2.098,185,1.626,224,4.002,261,3.993,263,1.966,434,4.401,436,3.845,437,3.774,459,3.416,542,2.439,821,1.305,829,5.52,846,3.712,848,4.401,918,2.463,1244,3.524,1379,2.921,1451,2.985,2066,1.252,2513,3.921,2514,3.921,2527,4.089,2562,5.729,2563,6.758,2564,6.758,2565,6.758]],["t/2372",[18,2.63,54,1.34,73,1.801,81,3.177,97,1.173,105,3.023,184,2.06,185,1.815,261,4.279,263,2.193,434,4.716,436,4.29,437,4.21,542,2.721,821,1.456,918,2.747,1171,2.598,1211,3.457,1244,3.931,1379,2.529,1451,3.33,2066,1.397,2491,6.848,2513,4.375,2514,4.375,2527,4.562,2562,6.392]],["t/2374",[12,3.188,18,2.419,26,3.445,49,1.658,54,1.693,62,1.935,73,2.05,97,1.028,105,3.087,155,2.362,185,1.59,261,3.935,263,1.922,434,4.337,436,3.759,437,3.689,542,2.384,640,2.001,805,2.384,821,1.276,846,2.816,918,2.407,1171,2.276,1244,3.445,1329,3.833,1379,2.878,1765,1.848,2066,1.224,2114,7.274,2229,5.6,2392,4.865,2485,6,2513,3.833,2514,3.833,2527,3.997,2566,6.606,2567,6.606,2568,8.581,2569,6.606]],["t/2377",[0,0.948,49,1.788,98,2.97,171,1.813,191,3.37,435,2.908,526,6.579,641,6.579,651,3.881,671,3.762,755,3.821,805,2.687,821,1.438,825,4.236,848,3.762,923,5.482,975,3.249,1236,7.706,1354,4.504,1438,7.723,1483,6.761,2066,1.379,2570,7.444]],["t/2379",[46,4.585,171,1.695,172,3.868,805,3.122,821,1.671,848,4.372,854,4.663,880,5.354,1009,7.334,1354,5.234,2066,1.603]],["t/2381",[49,1.659,805,3.1,821,1.659,880,5.315,1202,2.933,1220,6.324,1236,6.104,1354,5.196,1442,6.892,2066,1.591,2170,7.8,2571,8.588]],["t/2383",[171,1.707,257,2.31,285,3.146,805,3.146,821,1.684,848,4.405,854,4.697,880,5.394,1354,5.273,2066,1.615]],["t/2385",[14,3.4,18,2.684,34,3.138,40,2.36,43,1.515,59,2.636,62,1.757,285,2.812,619,2.812,642,2.613,717,3.967,779,4.938,805,2.812,821,1.505,854,4.198,918,2.839,951,3.937,1179,3.769,1202,2.66,2066,1.443,2214,7.075,2215,7.075,2572,7.79]],["t/2387",[18,2.821,82,3.176,129,3.567,257,2.243,717,4.17,755,4.344,779,5.365,805,3.055,821,1.635,2066,1.568,2267,7.175,2275,7.175]],["t/2389",[171,1.733,435,3.456,805,3.193,821,1.709,848,4.471,1090,4.28,2066,1.639,2573,8.847]],["t/2391",[805,3.146,821,1.684,848,4.405,975,3.803,982,6.418,1354,5.273,2066,1.615,2069,7.388,2574,8.716,2575,8.716]],["t/2394",[22,1.937,126,3.438,147,4.422,257,2.211,258,3.438,263,2.427,435,3.259,540,3.477,709,4.576,754,2.875,771,2.983,805,3.011,821,1.612,1179,4.037,1763,3.364,2066,1.546]],["t/2396",[126,3.488,171,1.658,174,4.214,258,3.488,435,3.306,526,6.016,540,3.527,805,3.055,821,1.635,918,3.084,1179,4.095,1469,4.486,1763,3.413,2066,1.568]],["t/2398",[126,3.488,171,1.658,174,4.214,258,3.488,435,3.306,540,3.527,805,3.055,821,1.635,918,3.084,1179,4.095,1469,4.486,1763,3.413,2006,7.687,2066,1.568]],["t/2400",[126,3.488,171,1.658,174,4.214,258,3.488,435,3.306,540,3.527,805,3.055,821,1.635,918,3.084,1179,4.095,1469,4.486,1763,3.413,2004,7.687,2066,1.568]],["t/2402",[126,3.488,171,1.658,174,4.214,258,3.488,435,3.306,540,3.527,805,3.055,821,1.635,918,3.084,1179,4.095,1469,4.486,1763,3.413,2002,7.687,2066,1.568]],["t/2404",[73,1.993,126,3.438,171,1.634,174,4.155,258,3.438,435,3.259,459,4.217,540,3.477,805,3.011,821,1.612,918,3.04,1179,4.037,1469,4.422,1763,3.364,2066,1.546,2576,8.344]],["t/2406",[14,3.641,63,3.826,73,1.993,171,1.634,258,3.438,285,3.011,540,3.477,771,2.983,805,3.011,821,1.612,918,3.04,985,6.696,2009,7.578,2013,7.578,2066,1.546,2577,8.344]],["t/2408",[126,3.463,171,1.646,174,4.184,258,3.463,435,3.283,540,3.502,805,3.033,821,1.623,918,3.062,1179,4.066,1469,4.454,1720,7.632,1721,6.441,1763,3.388,2066,1.557]],["t/2410",[73,2.052,171,1.682,540,3.578,771,3.071,805,3.1,821,1.659,1053,3.463,1076,6.892,1174,6.892,2021,7.8,2066,1.591,2578,8.588]],["t/2412",[44,1.514,49,1.525,126,3.955,171,1.546,179,4.886,258,3.253,360,5.433,642,2.648,644,4.492,805,2.849,821,1.525,1451,4.239,1595,7.17,1721,7.927,1741,7.17,1763,3.183,1791,6.336,2066,1.463,2219,6.336,2579,7.895]],["t/2414",[73,1.993,126,3.438,171,1.634,174,4.155,258,3.438,435,3.259,459,4.217,540,3.477,805,3.011,821,1.612,918,3.04,1179,4.037,1469,4.422,1763,3.364,2066,1.546,2580,8.344]],["t/2416",[126,3.463,171,1.646,174,4.184,258,3.463,435,3.283,540,3.502,805,3.033,821,1.623,918,3.062,1179,4.066,1469,4.454,1752,5.464,1763,3.388,2066,1.557,2581,8.404]],["t/2418",[37,4.217,49,1.612,126,3.438,171,1.634,174,4.155,258,3.438,435,3.259,540,3.477,805,3.011,821,1.612,918,3.04,1179,4.037,1469,4.422,1763,3.364,1808,7.073,2066,1.546]],["t/2421",[28,4.643,34,2.638,49,1.869,112,4.241,133,5.507,171,1.568,209,5.129,540,3.334,682,4.107,805,2.888,821,1.546,860,5.203,934,4.241,983,5.507,1000,5.347,1469,4.241,2066,1.483,2384,7.268,2390,6.784,2582,8.003]],["t/2423",[51,3.503,285,3.169,640,2.66,755,4.507,805,3.169,821,1.696,880,5.434,1957,7.047,2066,1.627]],["t/2426",[54,1.504,80,3.65,81,3.567,172,4.475,805,3.055,821,1.635,973,5.825,1082,7.175,1354,5.121,1451,3.738,1635,7.687,2066,1.568,2275,7.175]],["t/2428",[17,4.184,50,3.541,172,4.456,192,4.454,496,4.454,608,3.933,805,3.033,821,1.623,1233,7.632,1567,7.632,2066,1.557,2583,8.404,2584,8.404]],["t/2431",[34,2.894,51,3.503,137,4.248,497,6.043,640,2.66,805,3.169,821,1.696,2066,1.627,2585,8.781]],["t/2434",[51,3.477,258,3.591,285,3.146,640,2.64,755,4.473,805,3.146,821,1.684,880,5.394,1014,4.049,2066,1.615]],["t/2436",[49,1.6,115,2.707,184,2.264,185,1.994,257,2.196,805,2.99,821,1.6,910,5.387,1692,6.101,2066,1.535,2267,7.023,2586,8.974,2587,8.285,2588,8.285,2589,8.285,2590,8.285]],["t/2438",[4,3.353,34,2.711,46,4.36,51,3.282,126,3.39,135,5.091,192,4.36,257,2.18,402,5.847,640,2.492,754,2.835,805,2.969,821,1.589,1453,5.091,2066,1.524,2586,8.936,2591,8.227]],["t/2440",[34,2.75,258,4.089,285,3.581,408,4.735,503,3.438,675,4.037,697,4.422,771,2.983,805,3.011,821,1.612,1202,2.849,2066,1.546,2592,8.344]]],"invertedIndex":[["",{"_index":0,"t":{"1634":{"position":[[0,3],[4,6],[11,3],[15,3],[19,3],[23,4],[28,3],[38,3],[42,5],[48,6],[55,3],[59,3],[83,4],[95,2],[102,3],[114,4],[119,3],[123,2],[126,3],[130,4],[135,3],[139,2]]},"1636":{"position":[[5,6],[12,3],[16,4],[21,3],[25,2],[28,3],[32,3],[36,2],[39,7],[47,2],[50,5],[56,5],[62,2],[65,4],[70,6],[86,4],[91,2],[94,2],[97,4],[102,4],[131,2],[134,3],[138,3],[146,1],[148,3],[152,4],[157,3],[161,3],[165,3],[169,2],[172,3],[176,2],[179,4],[184,5],[190,5],[196,3],[200,4],[205,3],[209,2],[212,5],[218,3],[243,2],[246,3],[250,2],[253,3],[345,2],[348,5],[354,3],[358,3],[362,2],[365,3],[369,3],[373,2],[376,4],[381,1],[383,5],[389,4],[394,2],[397,2],[405,3],[409,3],[413,2],[416,3],[420,4],[425,3],[429,5],[435,3],[439,2],[442,3],[446,6],[453,3],[464,4],[469,3],[478,3],[482,2],[485,2],[488,4],[493,4],[498,6],[546,6],[564,4],[569,6],[576,4],[581,4],[586,2],[589,4],[594,4],[599,2],[602,2],[605,5],[611,3],[636,2]]},"1638":{"position":[[0,3],[4,3],[8,4],[13,4],[18,2],[21,3],[37,5],[43,6],[66,4],[76,6],[83,3],[87,6],[94,2],[97,4],[107,3],[115,3],[119,1],[121,5],[132,1],[134,3],[138,3],[142,4],[147,3],[151,5]]},"1660":{"position":[[358,1],[385,1]]},"1664":{"position":[[0,1],[2,4],[12,4],[17,3],[21,1],[23,2],[26,3],[30,3],[38,3],[42,2],[45,3],[53,4],[58,1],[60,3],[64,3],[68,4],[73,2],[76,3],[80,4],[85,5]]},"1667":{"position":[[5,1],[7,2],[10,2],[13,3],[17,4],[22,2],[25,2],[28,3],[38,3],[42,4],[47,6],[54,1],[59,4],[68,2],[71,4],[76,4],[81,4],[86,5],[92,3],[96,2],[102,3],[106,2],[109,2],[112,2],[115,2],[121,3],[125,3],[129,2],[132,3],[136,3],[144,3],[158,2],[161,4],[166,6]]},"1669":{"position":[[4,5],[10,1],[12,2],[15,4],[20,3],[24,4],[34,2],[37,6],[44,6],[51,2],[54,1],[60,3],[64,3],[68,4],[78,3],[82,3],[86,4],[91,6],[98,5],[104,1],[106,2],[109,4],[114,4],[119,6],[126,2],[129,2],[132,3],[140,3],[144,4],[149,2],[152,4],[157,6]]},"1671":{"position":[[0,5],[11,3],[15,4],[20,3],[24,2],[27,2],[30,3],[34,6],[41,1],[43,3],[47,5],[53,3],[57,3],[61,3],[65,1],[67,5],[73,4],[78,4],[83,3],[87,1],[89,2],[92,1],[94,2],[97,2],[100,3],[104,6],[111,4],[116,4],[121,2],[132,3],[136,2],[139,3],[143,3],[147,1],[149,5],[155,3],[159,3],[173,3],[177,4],[182,6]]},"1673":{"position":[[5,4],[10,4],[15,3],[19,3],[23,1],[25,2],[28,4],[38,4],[43,3],[51,4],[56,5],[62,3],[66,3],[70,3],[74,1],[76,5],[82,3],[86,1],[88,3],[92,3],[102,4],[107,2],[110,5],[125,6],[136,2],[139,5],[145,4],[150,2],[153,3],[181,1],[192,3],[242,1],[264,3],[268,2],[271,2],[274,2],[285,4],[290,2],[293,3],[297,6],[382,2],[385,1],[387,3],[391,4],[396,4],[401,3],[405,2],[408,5],[419,4],[424,2],[427,2],[430,1],[432,3],[439,3],[443,4],[452,4],[457,4],[471,2],[474,3],[478,6],[485,5],[491,2],[494,4],[499,4],[507,2],[510,5],[516,3],[520,3],[524,1],[526,4],[545,3],[549,4],[554,3],[558,2],[561,4],[566,2],[569,3],[573,3],[577,1],[579,3],[583,4],[588,4],[761,3],[765,2],[768,2],[771,5],[777,2],[780,3],[784,3],[788,6],[795,2],[798,2],[814,3],[818,4]]},"1675":{"position":[[5,2],[8,2],[11,4],[16,4],[33,4],[38,5],[44,6],[51,5],[74,1],[76,2],[97,3],[101,1],[103,3],[107,2],[110,5],[128,4],[133,5],[148,4],[166,4],[171,2],[174,2],[177,4],[188,4],[193,8],[209,4],[214,4],[219,2],[222,3],[226,1],[228,5],[234,4],[239,2],[250,6],[261,3],[273,6],[280,3],[291,2],[294,4],[299,1],[301,3],[305,4],[318,3],[322,1],[324,5],[388,1],[402,3],[406,4],[416,6],[452,1],[471,5],[477,3],[481,1],[483,3],[487,6],[494,1],[936,5],[942,2],[945,3],[949,6],[956,1]]},"1677":{"position":[[14,3],[18,2],[21,4],[26,2],[34,6],[55,3],[59,4],[64,5],[79,4],[89,3],[99,2],[102,5],[108,2],[111,3],[115,4],[129,6],[296,1],[351,2],[354,2],[357,3],[367,4],[372,3],[376,1],[378,2],[381,5],[396,4],[401,3],[405,1],[407,5],[434,1],[496,1],[553,1]]},"1679":{"position":[[60,5],[66,2],[82,6],[89,1],[91,3],[95,2],[98,2],[101,7],[109,2],[112,2],[115,5],[141,2],[144,3],[148,4],[153,1],[155,3],[159,2],[162,5],[189,3],[193,3],[197,5],[215,3],[219,5],[225,6],[232,1],[234,3],[238,4],[243,2],[246,3],[250,3],[254,4],[259,3],[263,2],[272,1],[282,3],[286,1],[288,3],[292,6],[314,2],[317,4],[322,3],[326,4],[331,5]]},"1681":{"position":[[9,2],[12,1],[21,4],[26,4],[31,3],[35,4],[40,4],[45,6],[52,3],[56,3],[60,2],[63,3],[67,4],[72,4],[77,3],[81,6],[88,6],[141,4],[146,4],[151,3],[155,4],[160,6],[167,3],[274,5],[280,2],[283,4],[288,2],[291,2],[294,2],[297,6],[325,1],[337,4],[342,4],[347,4],[352,4],[357,6],[430,3],[434,2],[437,3],[441,3],[445,2],[448,3],[452,2],[455,4],[460,3],[471,4],[496,4],[501,4],[506,6],[513,3],[517,5],[523,6],[530,3],[534,5],[540,2],[543,4],[574,4],[579,3],[583,4],[588,5],[594,4],[599,3],[603,4],[608,4],[933,1],[941,1],[1085,4],[1090,4],[1095,4],[1100,4],[1105,4],[1110,4],[1115,1],[1121,2],[1124,3],[1128,2],[1131,2],[1134,5],[1140,3],[1144,3],[1148,3],[1152,2],[1155,3],[1185,5],[1191,4],[1196,3],[1200,4],[1205,3],[1209,2],[1212,6]]},"1683":{"position":[[0,3],[4,1],[6,3],[10,2],[13,6],[34,4],[39,5],[45,3],[58,4],[63,3],[67,2],[75,4],[80,5],[86,5],[92,2],[95,4],[100,4],[105,4],[128,3],[132,4],[137,5],[143,6],[150,3],[163,5],[169,2],[172,4],[177,3],[181,5],[187,3],[196,4],[201,1],[203,3],[207,5],[213,5],[219,4],[224,4],[229,3],[233,4],[238,1],[240,4],[245,4],[250,3],[254,1],[256,5],[262,6],[269,3],[273,4],[278,2],[281,4],[286,3],[290,2],[293,4],[298,2],[301,2],[304,4],[309,3],[313,7],[321,5],[327,5],[333,2],[336,6],[343,3],[347,3],[351,3],[355,4],[360,2],[363,3],[367,3],[371,1],[373,5]]},"1685":{"position":[[0,3],[4,1],[6,3],[10,2],[13,6],[20,4],[25,3],[29,4],[34,4],[39,6],[46,6],[53,4],[58,2],[61,3],[65,4],[70,2],[73,3],[77,2],[80,4],[89,3],[93,3],[97,1],[99,5],[105,4],[110,6],[117,2],[120,3],[124,3],[157,1],[159,6]]},"1687":{"position":[[0,2],[3,4],[8,2],[11,1],[13,3],[17,4],[22,7],[30,6],[37,2],[44,5],[50,4],[55,5],[61,3],[65,3],[69,3],[73,5],[79,2],[82,6],[89,5],[101,4],[106,4],[111,5],[117,3],[121,3],[129,4],[134,7],[142,2],[145,4],[150,4],[155,5],[161,4],[177,1],[184,3],[188,3],[192,3],[202,5],[208,4],[213,4],[218,5],[224,5],[230,4],[235,5],[241,2],[244,3],[248,2],[255,4],[260,5],[273,3],[283,3],[287,2],[296,4],[301,2],[304,5],[310,4],[315,4],[320,7],[345,1],[347,5],[360,4],[365,4],[370,2],[384,6],[391,4],[396,2],[399,1],[401,3],[414,2],[422,4],[427,2],[430,3],[434,3],[438,5],[444,3],[448,2],[451,5],[465,3],[472,5],[478,5],[484,2],[487,4],[492,5],[498,11],[510,4],[515,2],[518,2],[521,4],[526,4],[531,2],[534,3],[538,3],[542,2],[545,2],[548,2],[551,4],[560,5],[566,2],[569,4],[574,5],[580,3],[584,3],[595,6]]},"1689":{"position":[[60,1],[62,4],[77,3],[81,7],[89,1],[91,3],[95,5],[101,3],[114,4],[119,3],[123,4],[137,4],[142,5],[303,7],[338,3],[342,2],[345,2],[348,4],[353,4],[425,6],[432,1],[434,3],[438,3],[442,2],[468,4],[473,2],[476,4],[481,5],[491,5],[497,3],[501,2],[504,3],[537,3],[541,2],[544,4],[549,1],[551,1],[553,5],[591,6],[642,5],[697,5],[703,3],[707,2],[710,3],[714,5],[720,3],[724,3],[728,3],[743,3],[747,4],[752,4],[757,5],[786,4],[791,4],[796,5],[802,1],[804,4],[809,2],[812,3],[880,4],[893,3],[897,6]]},"1691":{"position":[[0,4],[10,4],[15,3],[19,4],[24,6],[31,1],[33,3],[37,2],[52,1],[67,6],[74,6],[93,4],[98,2],[101,1],[103,3],[107,2],[110,3],[114,3],[118,1],[120,5],[126,2],[129,4],[134,2],[137,2],[140,3],[165,3],[181,3],[185,4],[190,5],[259,2],[262,6],[274,6],[324,2],[327,7],[335,4],[346,6],[416,3],[420,4],[425,3],[433,2],[436,2],[439,3],[443,2],[446,4],[451,4],[456,7],[497,4],[502,2],[505,5],[511,6],[526,2],[541,1],[543,3],[547,6],[554,4],[559,1],[561,4],[566,4],[571,3],[575,2],[578,2],[581,3],[585,6],[632,5],[638,6],[645,2],[648,4],[653,3],[657,3],[661,2],[664,4],[669,4],[674,3],[678,6],[685,4],[690,3],[694,4],[699,2],[702,2],[705,5]]},"1693":{"position":[[38,4],[43,2],[46,3],[50,6],[95,4],[100,2],[103,3],[107,6],[143,2]]},"1695":{"position":[[4,5],[23,1],[38,4],[43,3],[47,1],[49,4],[54,1],[56,3],[69,4],[74,4],[79,6],[86,1],[88,1],[90,3],[94,3],[98,4],[103,3],[107,4],[112,4],[175,3],[179,5],[185,2],[188,3],[192,2],[195,3],[199,1],[201,5],[207,2],[210,2],[213,3],[217,6],[224,3],[242,1],[251,4],[256,3],[260,4],[265,4],[270,2],[292,4],[297,4],[302,2],[305,6],[312,4],[317,2],[320,4],[325,2],[328,3],[332,5],[338,2],[346,4],[351,5],[357,5],[363,4],[368,6],[375,3],[379,2],[382,2],[385,4],[390,5],[396,2],[399,4],[404,5],[410,2],[413,3],[417,5],[423,2],[426,2],[429,3],[433,3],[437,3],[441,3],[445,4],[450,1],[452,5],[458,3],[462,2],[465,2],[468,4],[473,5],[479,4],[484,3],[488,3],[492,1],[494,2],[497,2],[500,2],[503,3],[507,2],[510,3],[514,3],[518,4],[523,7],[531,3],[535,3],[539,5],[545,4],[550,4],[555,1],[557,5],[563,3],[567,3],[589,6],[596,2],[599,2],[602,1],[604,2],[607,4],[612,3],[616,5],[622,2],[625,4],[630,5],[645,4],[650,4],[661,1],[663,2],[666,4],[671,4],[676,3],[680,2],[683,3],[687,3],[691,5],[697,2],[700,3],[704,6]]},"1697":{"position":[[0,2],[3,5],[9,2],[12,5],[18,3],[34,2],[45,5],[51,4],[56,4],[61,4],[66,3],[70,1],[72,6],[87,4],[110,3],[114,6],[130,4],[135,3],[156,3],[160,4],[186,7],[220,4],[225,3],[229,3],[233,1],[235,5],[241,2],[244,5],[250,2],[253,2],[256,1],[258,3],[262,4],[267,6],[274,6],[310,1]]},"1700":{"position":[[0,2],[3,2],[12,5],[18,2],[21,3],[25,4],[30,3],[34,3],[38,4],[43,4],[48,3],[52,2],[55,3],[59,3],[63,3],[77,4],[82,5],[88,1],[90,3],[94,3],[98,3],[102,4],[107,3],[111,2],[114,3],[118,3],[135,6],[148,5],[154,4],[176,3],[180,4],[185,5],[212,4],[222,5],[228,2],[231,4],[254,4],[259,4],[269,2],[272,3],[286,5],[292,3],[296,1],[298,5],[336,4],[410,2],[413,3],[417,1],[419,5]]},"1702":{"position":[[11,2],[14,2],[17,5],[57,4],[62,5],[68,5],[74,5],[80,2],[83,3],[87,6],[320,3],[324,2],[327,2],[330,3],[334,3],[338,1],[340,2],[343,5],[349,3],[353,3],[357,4],[362,3],[366,6],[373,2],[376,2],[379,4],[384,2],[387,2],[396,4],[401,3],[405,2],[408,2],[411,3],[415,3],[419,6],[426,4],[431,4],[436,3],[456,6],[463,3],[467,5],[473,4]]},"1704":{"position":[[29,2],[32,2],[35,5],[58,5],[64,5],[70,5],[76,2],[79,3],[83,6],[206,3],[210,2],[213,2],[216,3],[220,3],[224,1],[226,2],[229,5],[235,3],[239,3],[243,4],[248,3],[252,5],[258,2],[261,2],[264,4],[269,2],[272,2],[281,4],[286,3],[290,2],[293,2],[296,3],[300,3],[304,6],[311,4]]},"1706":{"position":[[0,6],[11,3],[15,5],[21,3],[34,4],[39,2],[42,3],[46,3],[50,1],[52,5],[58,2],[61,3],[65,6],[72,2],[75,6],[85,3],[98,4],[103,4],[108,4],[113,5],[132,4],[137,4],[142,2],[154,6],[227,4],[232,4],[237,1],[239,5],[257,3],[419,3],[431,7],[445,3],[449,3],[453,2],[456,3],[460,7]]},"1708":{"position":[[14,4],[19,4],[24,2],[27,3],[31,5],[53,4],[58,4],[67,5],[73,2],[76,3],[80,1],[82,3],[86,3],[90,8],[104,4],[109,6],[116,2],[119,2],[122,2],[125,2],[128,4],[133,2],[136,2],[139,1],[141,2],[144,2],[151,5],[157,2],[160,2],[163,3],[167,1],[169,5],[179,2],[182,1],[184,2],[187,3],[191,2],[194,3],[198,3],[202,2],[205,4],[210,6],[225,5],[243,4],[248,4],[257,3],[261,5],[267,3],[271,2],[274,5],[291,4],[296,6],[319,1],[334,1],[356,1],[382,1],[397,1],[428,1],[437,2],[440,3],[444,3],[452,3],[456,4],[461,3],[472,3],[476,4],[481,5],[487,2],[490,4],[495,3],[499,1],[501,3],[505,4],[510,4],[515,3],[520,1],[522,2],[525,6],[537,4],[542,3],[546,3],[569,6],[576,4],[581,3],[585,1],[587,5]]},"1710":{"position":[[28,2],[31,2],[34,5],[49,4],[54,6],[75,4],[80,2],[83,3],[95,3],[99,4],[104,3],[108,4],[113,4],[118,2],[121,2],[124,2],[127,2],[130,2],[133,6],[140,3],[144,4],[149,2],[152,2],[155,4],[160,5],[166,2],[169,5],[175,2],[182,5],[201,4],[206,6],[213,2],[216,3],[255,4],[260,3],[264,1],[266,5],[272,3],[284,2],[287,3],[291,4],[296,3],[300,1],[302,5],[468,2],[471,5],[477,4],[482,2],[485,3],[489,5],[495,3],[499,2],[502,2],[505,3],[509,4],[514,4]]},"1712":{"position":[[9,5],[19,2],[22,1],[24,5],[30,3],[34,1],[46,4],[51,6],[58,1],[60,3],[68,2],[71,5],[77,3],[81,1],[83,5],[113,3],[117,2],[132,4],[137,2],[140,4],[145,5],[151,3],[155,5],[161,3],[165,2],[168,3],[172,2],[175,4],[180,1],[182,4],[187,5],[193,4],[198,4],[203,2],[214,2],[217,3],[221,3],[254,6],[266,2],[277,3],[281,3],[304,6],[311,3],[315,1],[317,5]]},"1715":{"position":[[0,3],[4,3],[8,4],[13,8],[22,3],[26,2],[29,4],[34,2],[37,1],[39,3],[43,3],[47,5],[150,3],[154,3],[158,4],[163,2],[166,3],[175,6],[182,1],[184,1],[186,2],[189,4],[200,6],[207,1],[209,3],[213,4],[218,2],[226,3],[230,4],[249,5],[255,6],[262,2],[265,2],[273,2],[276,4],[281,4],[286,2],[289,5],[295,3],[299,1],[301,5],[307,2],[310,3],[314,3],[318,5],[324,2],[327,4],[332,4],[337,4],[342,6],[349,2],[352,3],[356,4],[361,2],[364,1],[366,3],[370,4],[375,4],[380,2],[383,2],[386,3],[390,3],[394,1],[396,5],[402,2],[405,3],[409,5],[415,2],[418,4],[423,3],[436,4],[441,4],[446,1],[448,3],[456,2],[459,5],[465,2],[468,3],[472,2],[480,4],[485,3],[489,6],[496,3],[500,3],[513,2],[516,4],[521,8],[540,3],[544,1],[546,2],[549,2],[552,3],[565,3],[569,6],[576,2],[579,2],[582,4],[608,6],[615,3],[626,3],[630,4],[635,6],[642,3],[646,2],[649,1],[651,2],[654,4],[659,3],[663,4],[668,3],[672,6],[679,2],[682,3],[695,2],[698,3],[702,3],[725,4],[730,6],[737,5],[743,5]]},"1717":{"position":[[0,3],[4,2],[11,3],[15,6],[43,3],[47,6],[86,1],[88,3],[92,5],[106,3],[110,4],[115,2],[118,2],[121,3],[125,3],[129,1],[131,5],[137,2],[140,2],[143,2],[146,6],[161,3],[228,6],[235,3],[239,5],[245,5],[256,1],[258,4],[263,2],[266,2],[269,3],[273,6],[460,1],[516,1]]},"1719":{"position":[[5,2],[8,3],[12,3],[16,4],[21,2],[24,3],[28,1],[30,5],[36,2],[39,4],[44,2],[47,3],[51,4],[56,4]]},"1721":{"position":[[0,4],[5,3],[9,2],[12,3],[16,3],[20,3],[24,1],[26,5],[32,3],[36,2],[39,4],[44,3],[48,3],[52,2],[55,2],[58,3],[62,4],[82,4],[87,6],[94,4],[99,3],[103,2],[106,3],[110,2],[113,2],[116,3],[120,1],[122,5],[128,4],[133,2],[136,3],[140,6],[147,2],[150,4],[155,3],[159,2],[162,6],[169,4],[180,1],[203,5],[209,6],[324,4],[365,3],[369,3],[373,3],[377,2],[380,3],[384,2],[387,2],[390,3],[394,3],[415,6],[428,3],[432,2],[435,4],[440,5],[454,4],[479,3],[483,6],[490,2],[493,2],[503,4],[508,2],[511,4],[516,1],[518,3],[522,5],[528,4],[533,4],[538,2],[541,3],[545,2],[548,3],[552,4],[586,2],[589,4],[594,6],[607,3],[611,4],[616,3],[620,3],[632,2],[643,2],[646,3],[650,3],[654,4],[659,2],[662,2],[665,5],[693,1],[695,2],[698,3],[702,1],[704,4],[718,3],[722,3],[726,4],[731,3],[735,3],[739,4],[744,5],[750,2],[753,6],[767,3],[771,4],[776,2],[779,3],[783,3],[800,3],[804,3],[808,2],[817,2],[820,3],[824,6]]},"1723":{"position":[[4,6],[11,4],[16,3],[20,3],[24,2],[27,2],[30,2],[33,2],[36,3],[40,4],[45,5],[82,7],[90,4],[95,4],[100,2],[103,5],[151,3],[180,5],[186,4],[195,2],[198,3],[202,6],[209,3],[213,3],[228,3],[232,4],[237,6],[287,4],[292,2],[295,5],[301,5],[315,1],[328,2],[331,3],[335,4],[344,4],[349,3],[353,5],[359,3],[363,3],[377,3],[381,4],[386,6],[405,4],[418,3],[422,6],[429,3],[433,5],[450,6],[457,2],[479,2],[482,3],[486,4],[491,2],[494,4],[499,4],[544,5],[550,6],[568,4],[580,3],[584,6],[591,3],[595,6],[602,4],[607,3],[652,2],[655,4],[660,2],[671,4],[676,6],[691,3],[699,3],[703,6],[710,2],[719,4],[724,4],[729,3],[753,4],[758,6],[775,5],[781,3],[785,6],[792,3],[796,3],[810,3],[814,4],[819,6],[848,4],[853,4],[858,4],[863,3],[867,4],[876,7],[884,3],[888,3],[910,3],[914,4],[919,6],[946,5],[952,4],[957,3],[961,1],[963,6],[975,6],[982,3],[986,3],[1010,3],[1014,4],[1019,6],[1046,4],[1051,6],[1058,3],[1062,3],[1082,3],[1086,4],[1091,6],[1118,1],[1120,4],[1125,5],[1131,6],[1147,2],[1150,2],[1153,2],[1156,1],[1158,4],[1163,2],[1166,4],[1171,6]]},"1725":{"position":[[0,1],[2,6],[9,4],[18,2],[21,5],[27,5],[33,2],[36,2],[39,2],[42,6],[49,4],[54,2],[57,6],[64,2],[67,4],[72,3],[80,3],[84,4],[89,3],[93,6],[100,2],[103,3],[118,3],[122,4],[127,4],[132,5],[138,3],[142,3],[146,1],[148,6],[155,2],[158,3],[168,6],[175,4],[180,3],[184,6],[191,2],[194,3],[198,3],[202,2],[205,2],[208,2],[221,3],[225,4],[230,4],[235,6],[242,3],[246,4],[251,2],[263,4],[268,3],[272,1],[279,6],[286,4],[291,2],[294,2],[297,3],[301,2],[304,3],[308,3],[312,2],[315,2],[318,4],[323,6]]},"1727":{"position":[[0,2],[3,6],[10,4],[22,7],[30,2],[33,2],[36,2],[43,3],[47,2],[50,5],[56,2],[59,6],[66,1],[68,4],[73,1],[75,4],[80,3],[84,3],[88,2],[91,3],[95,6],[106,4],[111,2],[114,4],[128,4],[133,5],[139,4],[144,3],[148,1],[150,5]]},"1729":{"position":[[0,2],[3,2],[6,5],[12,3],[16,2],[19,3],[23,3],[27,1],[29,4],[45,3],[49,4],[54,2],[57,3],[61,3],[65,3],[69,3],[76,4],[86,3],[90,1],[92,5],[105,5],[111,3],[115,2],[118,6],[125,1],[127,1],[129,3],[133,2],[136,3],[156,4],[161,2],[164,3],[168,3],[172,4],[177,6],[184,2],[187,9],[197,2],[200,3],[204,4],[209,4],[221,7],[229,3]]},"1731":{"position":[[0,4],[5,2],[8,4],[13,1],[15,3],[19,2],[22,6],[29,2],[32,2],[35,2],[38,3],[42,4],[63,4],[68,4],[73,2],[76,1],[78,4],[83,3],[87,2],[90,2],[93,1],[95,3],[99,2],[102,3],[106,6]]},"1733":{"position":[[0,4],[5,3],[19,5],[25,2],[28,3],[32,3],[36,3],[40,5],[46,4],[51,5],[57,3],[61,4],[66,5],[72,1],[74,6],[81,2],[84,3],[88,6],[95,1],[97,2],[100,4],[105,5],[111,2],[114,3],[118,2],[121,4],[126,3],[130,4],[135,2],[138,3],[142,3],[146,4],[151,4],[156,3],[160,2],[163,3],[167,6],[174,5],[180,2],[183,4],[188,4],[193,3],[197,2],[200,4],[205,3],[209,5],[215,4],[220,3],[224,5],[230,1],[232,5],[266,6],[273,3],[277,2],[280,3],[284,5],[290,5],[296,5],[302,5],[308,2],[311,2],[314,3],[318,3],[322,5],[328,4],[333,4],[338,2],[341,4],[346,4],[376,4],[381,4],[386,4],[403,7],[411,6],[418,2],[421,2],[428,4],[433,4],[438,2],[441,6],[448,5],[472,5],[478,5],[484,2],[487,3],[491,4],[496,3],[500,2],[503,5],[509,3],[513,6],[520,3],[524,4],[529,4],[534,3],[538,2],[541,2],[544,2],[547,3],[551,2],[554,4],[559,4],[564,2],[567,4],[572,3],[576,5],[582,6],[589,1],[591,5],[597,2],[612,2],[615,3],[665,4],[670,5],[676,6],[683,3],[687,3],[691,2],[694,6],[701,2],[704,2],[707,4],[712,3],[716,1],[718,2],[721,3],[740,4],[745,4],[754,2],[757,2],[760,5],[766,4],[771,3],[775,3],[779,2],[782,2],[789,4],[794,3],[798,1],[800,5],[806,5],[812,2],[840,6]]},"1738":{"position":[[94,1],[124,1],[169,1]]},"1742":{"position":[[925,2],[1067,2],[1303,2],[1950,1],[2042,1],[2138,1],[2246,1],[2472,1],[2600,1]]},"1744":{"position":[[236,2],[1201,1],[1282,1],[1378,1],[1483,1],[1659,1],[1835,1],[1971,1],[1998,1]]},"1746":{"position":[[259,2],[1477,1],[1546,1],[1751,1],[1760,1]]},"1748":{"position":[[422,2],[647,1],[727,1],[767,1],[790,2],[827,1],[887,1],[931,1],[1042,2],[1077,1]]},"1750":{"position":[[1006,1],[1024,1],[1438,1],[1456,1],[2153,1],[2155,1],[2175,1],[2177,1],[2179,2],[3308,1],[3462,1],[3469,1],[3500,1],[3534,1],[3707,1],[3724,1],[3742,1],[3754,1],[3801,1],[3837,1],[3876,1],[4214,2],[4595,1],[4602,1],[4633,1],[4667,1],[4701,1]]},"1754":{"position":[[259,2]]},"1756":{"position":[[150,2],[363,1],[404,1],[541,2],[606,1],[1259,1],[1300,1],[1529,2],[1594,1]]},"1758":{"position":[[299,1],[340,1],[755,2],[1118,1],[1159,1]]},"1760":{"position":[[188,1],[359,1],[470,1],[671,1],[1565,3]]},"1767":{"position":[[888,1],[890,1],[909,1],[911,1],[913,3],[1548,1]]},"1794":{"position":[[4747,2],[4754,1],[4756,1],[4758,2],[4779,1],[4781,1],[4783,3],[5496,1]]},"1806":{"position":[[843,2]]},"1813":{"position":[[27,3],[42,3],[46,5],[52,5],[58,2],[61,4],[66,4],[71,1],[73,6],[88,2],[97,2],[100,4],[116,3],[120,3],[124,3],[128,2],[131,3],[146,3],[150,4],[155,4],[160,1],[162,3],[177,2],[180,3],[184,5],[203,3],[207,4],[212,4],[217,3],[221,1],[223,5],[229,3],[233,3],[237,2],[240,3],[244,6],[262,2],[265,3],[269,6],[379,2],[382,3],[397,3],[401,3],[405,6]]},"1815":{"position":[[29,4],[34,3],[38,3],[42,3],[62,6],[69,2],[72,2],[82,3],[86,2],[93,3],[100,2],[103,4],[108,5],[114,2],[130,5],[136,3],[140,1],[142,5]]},"1817":{"position":[[82,2]]},"1825":{"position":[[6,2],[9,2],[12,7],[20,4],[25,6],[32,3],[36,1],[38,2],[41,3],[50,2],[53,5],[59,4],[64,7],[72,1],[74,3],[78,5],[84,5],[90,4],[95,6],[102,2],[105,3],[109,6],[116,3],[120,2],[123,2],[126,3],[130,2],[133,3],[137,7],[145,3],[149,1],[151,5],[157,2],[160,3],[164,2],[172,3],[176,2],[179,2],[182,3],[186,2],[189,3],[199,2],[214,2],[217,7],[229,7],[237,3],[241,1],[243,5],[255,4],[260,4],[265,3],[269,2],[272,5],[278,4],[283,2],[286,3],[290,4],[302,7],[310,3],[314,1],[316,5],[322,3],[338,4],[343,4],[348,4],[353,5],[359,4],[364,7],[372,4],[377,1],[379,2],[382,2],[385,5],[391,3],[395,1],[397,2],[400,3],[404,4],[415,4],[420,3],[429,4],[437,7],[445,3],[449,1],[451,5],[462,3],[466,2],[469,6],[476,3],[480,6],[487,4],[507,2],[510,3],[514,2],[517,7],[525,3],[529,1],[531,5],[545,2],[548,9],[558,2],[561,6],[568,3],[572,2],[575,4],[580,4],[590,6],[597,3],[601,2],[604,2],[607,6],[614,4],[624,2],[627,4],[632,4],[643,4],[648,3],[652,2],[655,3],[659,3],[663,4],[668,4],[678,4],[683,6],[695,1],[702,5],[708,6],[715,2],[723,5],[729,5],[735,6],[742,2],[745,1],[747,4],[757,6],[764,3],[768,2],[771,2],[774,4],[785,4],[790,6],[797,2],[800,6],[807,2],[810,4],[815,2],[818,7],[826,4],[831,3],[835,2],[838,3],[842,3],[846,4],[851,2],[857,4],[862,6],[869,4],[874,2],[877,7],[885,3],[889,5],[907,3],[911,2],[914,4],[938,3],[942,2],[945,4],[966,3],[970,2],[973,4],[1011,3],[1015,2],[1018,4]]},"1827":{"position":[[25,2],[28,2],[31,7],[39,5],[50,2],[53,3],[57,1],[59,1],[61,3],[84,5],[90,4],[95,4],[100,2],[103,3],[107,2],[110,1],[112,4],[117,4],[122,5],[128,3],[132,2],[135,5],[141,2],[144,3],[148,3],[152,5],[158,4],[163,4],[172,3],[176,2],[179,2],[182,3],[186,3],[190,1],[192,5],[302,2],[310,2],[313,4],[318,6],[325,7],[333,2],[336,3],[340,4],[345,1],[347,4],[352,7],[360,1],[362,4],[367,3],[371,1],[373,4],[378,2],[381,3],[385,3],[389,3],[393,4],[398,5],[444,8],[453,3],[457,4],[462,1],[464,4],[473,2],[506,6],[513,8],[522,3],[526,2],[529,2],[532,4],[537,3],[541,4],[546,4],[556,2],[559,3],[563,4],[568,3],[572,1],[574,5],[580,4],[585,2],[592,4],[601,6],[608,4],[613,4],[618,3],[622,1],[624,5],[674,7],[682,2],[685,5],[691,3],[695,2],[698,3],[702,4],[711,3],[715,6],[722,1],[724,3],[728,5],[734,7],[742,5],[748,3],[752,2],[755,3],[759,5],[765,4],[770,3],[774,4],[779,1],[781,5],[787,4],[792,2],[813,5],[819,4],[824,4],[871,7],[879,2],[882,5],[888,3],[892,2],[895,3],[899,4],[908,1],[910,6],[917,3],[921,3],[925,2],[947,5],[953,6],[960,6],[967,2],[970,4],[975,2],[978,3],[982,3],[986,4],[991,3],[995,3],[999,4],[1004,3],[1008,3],[1012,2],[1015,3],[1019,3],[1023,3],[1027,2],[1030,2],[1033,3],[1037,4],[1042,2],[1045,5]]},"1829":{"position":[[0,2],[3,6],[29,5],[35,4],[40,2],[43,3],[47,6],[54,4],[59,2],[62,6],[69,3],[73,4],[78,1],[80,2],[83,7],[91,2],[94,1],[96,3],[100,3],[104,2],[107,3],[111,6],[135,1],[150,2],[153,4],[158,3],[174,3],[178,3],[182,5],[188,2],[191,3],[195,3],[199,2],[202,3],[206,5],[269,1],[271,2],[274,2],[277,5],[283,3],[287,1],[289,5],[295,2],[298,2],[301,3],[305,3],[345,1],[347,6],[354,6],[361,3],[365,5],[371,2],[374,7],[382,4],[387,3],[391,4],[396,6],[403,3],[407,6],[414,6],[434,4],[439,3],[448,3],[452,6],[459,3],[463,3],[467,5],[483,4],[499,6],[519,3],[523,7],[531,6],[538,2],[541,4],[546,3],[585,5],[591,3],[595,2],[598,3],[602,5],[667,1],[669,2],[672,2],[675,5],[681,3],[685,2],[688,5],[694,2],[697,2],[700,3],[704,3],[768,1],[770,6],[782,3],[786,3],[790,2],[797,5],[803,3],[807,1],[809,5],[819,3],[823,5],[829,2],[832,2],[835,1],[837,5],[858,4],[868,3],[872,3],[876,5],[882,1],[884,2],[887,5],[893,6],[900,3],[904,5],[910,7],[918,4],[923,3],[927,4],[932,4],[937,6],[944,6],[961,4],[966,3],[975,3],[979,6],[991,4],[996,5],[1002,4],[1007,2],[1046,3],[1050,6],[1070,3],[1074,7],[1082,6],[1089,2],[1092,4],[1097,3],[1126,5],[1132,3],[1136,3],[1140,5],[1221,2],[1224,4],[1229,1],[1231,2],[1234,3],[1243,5],[1249,6],[1256,1],[1258,5],[1264,3],[1268,3],[1272,2],[1275,3],[1289,3],[1293,1],[1295,5]]},"1838":{"position":[[617,1],[634,1],[651,1],[969,2]]},"1842":{"position":[[429,1],[446,1],[463,1],[918,2]]},"1846":{"position":[[365,2]]},"1848":{"position":[[322,1],[508,1],[668,1]]},"1850":{"position":[[395,1]]},"1852":{"position":[[0,2],[3,2],[6,3],[10,5],[16,7],[24,4],[34,2],[37,2],[40,2],[43,2],[46,3],[50,2],[53,4],[58,4],[63,5]]},"1854":{"position":[[10,3],[14,2],[28,6],[35,2],[49,5],[55,3],[59,2],[62,3],[66,3],[70,1],[72,5],[78,2],[81,1],[83,3],[87,3],[91,5],[97,3],[101,3],[110,2],[113,4],[118,6]]},"1856":{"position":[[24,3],[28,4],[33,5],[39,5],[45,2],[48,4]]},"1858":{"position":[[0,2],[8,5],[23,4],[28,4],[33,3],[37,3],[41,1],[43,5]]},"1860":{"position":[[18,3],[22,5],[28,5]]},"1862":{"position":[[4,3],[8,3],[17,4],[22,3],[26,3],[34,2],[37,6],[44,5],[50,3],[54,3],[58,3],[78,6],[94,4],[117,3],[121,6],[138,4],[143,3],[147,3],[151,4],[156,4],[180,4],[185,1],[187,1],[189,5],[195,2],[198,3],[218,3],[222,1],[224,5],[230,4],[235,3],[294,3],[298,1],[300,5],[311,3],[315,1],[325,6],[332,4],[337,4],[356,4],[361,1],[363,3],[367,3],[371,3],[375,1],[377,5],[383,6],[390,4],[395,2],[398,2],[401,5],[407,2],[410,2],[413,2],[416,3],[420,4],[432,2],[435,6],[442,6],[454,2],[457,4],[462,3],[466,2],[469,5],[475,5],[481,4],[486,4],[491,2],[494,5],[500,5],[506,2],[509,2],[512,2],[515,4],[520,3],[524,3],[528,1],[530,5],[575,4],[580,3],[584,4],[589,3],[593,3],[597,2],[600,2],[603,1],[605,5],[611,1],[613,2],[616,2],[619,3],[623,2],[626,2],[629,3],[633,6]]},"1864":{"position":[[0,2],[17,4],[22,3],[26,2],[29,3],[33,5],[39,3],[43,3],[47,2],[50,3],[54,6]]},"1866":{"position":[[4,2],[7,2],[10,3],[14,2],[17,3],[21,3],[35,3],[39,4],[44,6]]},"1868":{"position":[[0,5],[6,5],[12,2],[20,3],[24,6],[31,2],[34,3],[38,6],[45,2],[48,3],[52,2],[55,3],[59,5],[65,4],[70,2],[73,3],[77,2],[80,5]]},"1870":{"position":[[5,4],[10,1],[12,3],[16,2],[19,2],[22,3],[26,2],[29,4],[34,3],[38,2],[41,4],[46,6],[53,2],[59,5],[65,2],[68,5],[74,6],[99,4],[104,5],[110,6],[121,2],[124,1],[126,4],[131,3],[135,4],[140,3],[144,6],[159,2],[166,3],[170,4],[175,3],[179,5],[189,4],[194,3],[198,3],[202,3],[206,4],[211,1],[213,3],[217,6]]},"1872":{"position":[[0,1],[2,4],[7,3],[11,4],[21,4],[26,2],[29,3],[33,4],[38,5],[48,3],[52,4],[57,2],[60,2],[63,3],[67,5],[73,7],[81,2],[84,5],[95,3],[99,1],[101,3],[105,1],[107,2],[110,3],[114,2],[117,3],[121,6],[128,4],[133,5],[145,3],[149,1],[151,2],[154,4],[159,3],[163,2],[166,3],[170,6],[177,3],[181,5],[187,4],[192,2],[195,3],[199,1],[201,2],[204,4],[214,4],[219,3],[223,3],[227,6],[234,2],[237,5],[243,2],[260,2],[268,3],[277,4],[282,3],[286,3],[290,6],[297,3],[301,7],[309,3],[313,5],[319,7],[327,2],[330,2],[333,6],[340,4],[345,2],[348,4],[353,3],[357,3],[361,6]]},"1874":{"position":[[10,6],[17,2],[20,3],[24,2],[27,6],[34,2],[37,3],[41,5],[52,5],[58,3],[62,2],[65,3],[69,3],[73,6],[80,3],[84,2],[87,4],[92,4],[97,3],[101,4],[106,2],[109,6],[116,4],[121,2],[124,4],[129,2],[132,3],[136,4],[141,2],[144,1],[146,3],[150,4],[155,2],[158,4],[163,3],[167,2],[170,3],[174,3],[219,3],[223,6],[235,3],[239,4],[244,2],[247,3],[251,3],[255,4],[260,5],[266,3],[270,4],[275,3],[279,3],[283,2],[297,3],[301,4],[306,5],[312,4],[317,4],[328,2],[331,3],[335,3],[339,9],[349,1],[351,3],[355,4],[377,4],[382,4],[387,2],[390,2],[393,3],[397,3],[410,4],[415,2],[418,3],[422,3],[426,9],[436,1],[438,3],[442,1],[444,5],[450,3],[454,5],[460,2],[506,2],[509,4],[514,4],[519,2],[522,3],[526,4],[531,5],[537,2],[540,3],[544,4],[549,2],[552,4],[557,1],[559,5]]},"1876":{"position":[[0,2],[3,2],[6,3],[10,4],[15,5],[26,3],[30,3],[34,3],[38,4],[43,3],[47,2],[50,5],[56,3],[68,2],[71,5],[77,4],[82,4],[87,2],[90,2],[93,1],[95,1],[97,3],[101,5],[107,3],[111,2],[114,6],[131,3],[135,3],[151,7],[159,4],[164,3],[168,4],[173,3],[177,6],[184,4],[193,7],[201,5],[207,2],[210,6],[217,2],[230,4],[235,4],[240,4],[245,4],[250,5],[256,3],[260,3],[264,1],[266,5],[516,1],[626,2],[629,3],[633,2],[636,3],[640,2],[643,2],[646,2],[649,1],[651,3],[655,3],[673,2],[676,2],[679,2],[698,6],[705,2],[708,2],[711,2],[714,2],[717,2],[720,2],[735,2],[738,2],[786,2],[789,2],[792,2],[795,6],[827,2],[830,2],[833,10],[844,4],[849,3],[873,2],[876,2],[879,5],[914,2],[917,3],[921,4],[926,2],[959,3],[963,2],[966,2],[973,2],[1001,9],[1011,4],[1016,3],[1020,3],[1024,7],[1032,1],[1034,1],[1036,3],[1040,3],[1044,2],[1053,6],[1069,3],[1073,2],[1076,2],[1079,2],[1082,7],[1090,2],[1093,2],[1096,3],[1100,4],[1105,6],[1118,1],[1147,2],[1150,3],[1154,3],[1158,1],[1160,3],[1164,4],[1169,6],[1176,3],[1208,1],[1227,2],[1230,2],[1233,2],[1236,5],[1288,4],[1293,2],[1296,3],[1300,4],[1305,4],[1310,2],[1313,3],[1317,2],[1320,3],[1324,5],[1354,2],[1357,4],[1362,2],[1365,3],[1369,2],[1372,2],[1375,1],[1377,3],[1416,4],[1421,2],[1424,4],[1448,7],[1499,3],[1503,4],[1508,4],[1513,3],[1517,5],[1534,2],[1537,4],[1542,4],[1547,1],[1549,5],[1555,1],[1573,3],[1577,2],[1580,2],[1583,2],[1606,4],[1611,5],[1617,1],[1619,5],[1625,2],[1628,3],[1632,5],[1646,5],[1716,2],[1719,3],[1723,6],[1730,2],[1738,3],[1742,2],[1745,2],[1748,2],[1751,3],[1755,3],[1759,4],[1764,3],[1768,3],[1772,2],[1775,3],[1779,4],[1784,3],[1788,6]]},"1878":{"position":[[26,2],[29,2],[32,2],[46,4],[51,3],[55,7],[73,2],[76,4],[81,1],[83,4],[109,4],[114,2],[117,3],[121,3],[125,3],[129,1],[131,3],[135,6],[158,4],[163,2],[177,3],[181,7],[189,4],[194,3],[198,2],[201,1],[203,3],[212,3],[216,4],[236,3],[240,3],[244,1],[246,3],[250,6],[257,2],[279,2],[292,1],[329,3],[333,7],[341,2],[344,3],[348,4],[353,3],[357,4],[362,3],[366,3],[370,5],[437,3],[441,4],[446,2],[449,4],[454,3],[458,4],[583,1]]},"1880":{"position":[[35,2],[42,5],[48,2],[51,1],[53,6],[65,2],[71,2],[74,2],[81,3],[85,1],[87,5],[93,2],[100,9],[110,3],[114,1],[116,2],[119,3],[123,5],[129,5],[135,4],[140,5],[146,8],[155,3],[159,6],[166,3],[170,3],[174,2],[179,2],[182,2],[185,3],[189,6],[196,4],[201,3],[205,2],[208,3],[212,2],[227,4],[232,5],[238,6],[245,2],[248,2],[256,1],[258,2],[279,3],[283,4],[288,5],[294,3],[298,3],[302,2],[305,3],[309,6]]},"1895":{"position":[[409,2],[938,1],[955,1],[972,1],[1180,1],[1266,1],[1281,2]]},"1900":{"position":[[299,1],[366,2]]},"1904":{"position":[[788,1],[890,1],[994,1],[1050,1],[1133,1],[1228,1],[1387,1],[1503,1],[1623,1],[1719,1],[1782,1]]},"1906":{"position":[[440,1]]},"1908":{"position":[[489,1],[522,1],[546,1],[571,1],[606,1]]},"1910":{"position":[[273,1],[426,1],[484,1],[538,1]]},"1912":{"position":[[275,1]]},"1916":{"position":[[158,1]]},"1920":{"position":[[171,1]]},"1924":{"position":[[206,1]]},"1933":{"position":[[1113,1],[1115,1],[1120,4],[1297,2]]},"1939":{"position":[[579,1],[712,1]]},"1949":{"position":[[511,1],[541,1],[894,1],[924,1]]},"1953":{"position":[[424,1],[483,1]]},"1967":{"position":[[269,1],[318,1],[366,1],[421,1],[474,1],[625,1],[680,1],[733,1]]},"1969":{"position":[[272,1],[321,1]]},"1983":{"position":[[1002,2]]},"1997":{"position":[[268,2]]},"1999":{"position":[[130,1]]},"2001":{"position":[[0,2],[284,1],[466,1]]},"2007":{"position":[[0,2]]},"2013":{"position":[[0,3],[4,3],[8,5],[14,7],[22,2],[25,5],[31,2],[34,4],[39,2],[42,1],[44,2],[47,3],[51,2],[54,5],[60,2],[63,8]]},"2015":{"position":[[9,4],[14,2],[17,3],[21,3],[30,4],[35,1],[37,3],[41,4],[46,3],[50,3],[54,4],[64,2],[67,5],[73,2],[76,4],[81,5]]},"2017":{"position":[[0,3],[4,2],[16,4],[31,4],[36,2],[39,3],[43,3],[47,1],[49,5],[55,3],[59,5],[65,2],[68,5],[93,4],[98,2],[101,5],[107,2],[122,4],[132,3],[136,1],[138,2],[141,3],[145,3],[149,5],[155,2],[158,3],[162,2],[168,3],[172,6]]},"2019":{"position":[[0,4],[5,3],[14,4],[19,2],[22,2],[25,3],[29,1],[31,2],[34,3],[38,3],[42,5]]},"2021":{"position":[[0,6],[7,2],[10,2],[46,2],[76,7],[89,2],[92,3],[96,3],[100,4],[105,4],[110,3],[114,1],[116,5],[127,3],[131,3],[156,3],[160,2],[163,4],[168,2],[171,1],[173,2],[176,2],[179,3],[183,5],[189,2],[192,4],[216,2],[219,6],[244,4],[249,5],[255,6],[262,2],[265,2],[272,2],[275,6],[351,4],[356,2],[364,6],[371,7],[379,5],[385,3],[389,3],[393,3],[397,1],[399,2],[402,3],[406,6],[1047,3],[1051,2],[1054,4],[1059,6],[1066,1],[1068,2],[1071,7],[1079,3],[1083,2],[1086,5],[1092,2],[1095,3],[1152,2],[1155,2],[1158,3],[1162,3],[1166,1],[1168,4],[1191,6],[1198,4],[1203,2],[1206,4],[1211,6],[1585,2],[1604,2],[1670,5],[1676,6],[1683,6],[1690,2],[1693,6],[1700,4],[1705,2],[1735,4],[1740,7],[1748,2],[1751,2],[1754,3],[1758,2],[1761,3],[1765,3],[1769,3],[1773,6],[1780,6],[1857,1],[2026,1],[2337,6],[2344,3],[2348,2],[2351,6],[2358,4],[2363,2],[2370,4],[2375,6],[2382,4],[2387,3],[2430,4],[2435,3],[2439,2],[2442,3],[2446,3],[2450,2],[2453,4],[2478,1],[2480,2],[2488,4],[2493,2],[2496,1],[2498,5],[2504,3],[2508,4],[2513,4],[2523,4],[2528,8],[2537,3],[2541,3],[2545,2],[2548,2],[2551,3],[2555,4],[2560,5],[2566,4],[2571,1],[2573,4],[2578,4],[2583,4],[2588,4],[2593,3],[2597,2],[2600,4],[2605,3],[2609,3],[2613,2],[2616,3],[2620,1],[2622,5],[2628,1],[2669,1],[2738,1],[2752,1],[2778,1],[3124,2]]},"2023":{"position":[[0,1],[2,4],[24,4],[29,5],[43,3],[47,6],[58,3],[62,4],[67,3],[71,6],[86,2],[89,2],[92,1],[94,3],[98,3],[102,2],[105,3],[109,4],[114,2],[121,2],[124,3],[128,2],[131,4],[136,2],[139,4],[144,6],[156,2],[159,2],[162,3],[166,3],[170,4],[175,2],[178,3],[182,4],[187,2],[190,3],[194,6]]},"2025":{"position":[[9,2],[12,2],[15,1],[17,4],[22,6],[29,4],[34,4],[39,5],[45,2],[48,3],[70,3],[74,4],[79,6],[95,4],[100,2],[103,2],[106,4],[115,4],[120,2],[123,4],[128,4]]},"2027":{"position":[[9,8],[18,2],[21,3],[25,1],[27,3],[31,4],[36,2],[44,3],[48,3],[52,1],[54,9],[64,7],[72,3],[76,2],[79,1],[81,4],[86,2],[89,4],[94,4],[99,7],[115,4],[120,5],[126,2],[138,4],[143,5],[149,4],[154,6],[161,5],[178,2],[181,4],[186,3],[190,3],[194,3],[198,5],[204,2],[216,2],[228,5],[234,3],[238,3],[242,3],[246,1],[248,5],[254,3],[258,3],[262,1],[264,5],[279,6],[286,3],[290,3],[294,3],[298,4],[303,3],[307,6],[314,2],[317,2],[320,3],[376,5],[387,3],[391,1],[393,1],[395,3],[399,5],[405,5],[424,3],[428,4],[433,5],[439,1],[441,4],[446,3],[505,6],[512,3],[516,4],[530,3],[534,4],[539,4],[544,3],[548,3],[552,3],[572,3],[576,4],[581,7],[589,6],[596,2],[599,3],[603,2],[606,2],[609,2],[612,3],[616,3],[620,2],[631,2],[634,2],[637,5],[643,6],[650,6],[666,5],[690,4],[695,4],[700,2],[703,3],[707,6],[718,2],[726,4],[743,6],[754,2],[762,3],[766,3],[770,3],[786,4],[791,2],[794,1],[808,5],[814,1],[816,2],[832,7],[840,5],[851,3],[855,2],[866,3],[870,2],[873,3],[877,3],[881,2],[884,3],[888,3],[892,3],[896,6],[903,2],[917,6],[924,9],[942,2],[945,1],[947,6],[954,3],[958,6]]},"2029":{"position":[[6,4],[11,4],[16,2],[19,5],[25,4],[30,5],[36,2],[39,3],[63,4],[68,10],[91,3],[95,4],[100,4],[105,3],[109,1],[111,5],[117,8],[126,1],[128,3],[157,4],[162,6]]},"2031":{"position":[[4,6],[11,2],[27,5],[33,3],[37,1],[39,5],[45,5],[56,2],[59,3],[63,3],[67,3],[71,4],[113,3],[117,6],[124,6],[131,4],[136,6],[143,5],[149,3],[153,4],[158,3],[162,1],[164,3],[168,2],[171,5],[177,3],[181,4],[186,2],[189,4],[194,3],[198,4],[203,6],[210,3],[214,3],[228,6],[235,2],[238,3],[242,4],[247,2],[250,2],[253,3],[257,3],[261,4],[266,2],[280,2],[300,2],[303,4],[308,5],[314,6],[321,3],[340,4],[345,4],[350,5],[356,2],[359,2],[362,3],[366,5],[372,4],[377,3],[381,1],[383,5]]},"2033":{"position":[[10,5],[26,3],[44,3],[48,5],[54,4],[59,6],[66,1],[68,5],[74,5],[92,7],[100,4],[105,5],[111,1],[113,4],[118,3],[122,1],[124,3],[133,4],[138,2],[141,3],[145,6],[152,3],[156,3],[160,7],[168,4],[173,3],[177,6],[184,4],[196,3],[200,3],[204,4],[209,6],[216,2],[223,3],[227,4],[242,3],[246,4],[251,3],[255,3],[259,2],[266,4],[299,2],[302,3],[306,6],[313,3],[317,3],[321,3],[325,2],[332,6],[339,5],[345,4],[350,2],[353,1],[355,3],[359,3],[363,1],[365,5],[371,3],[375,4],[380,6],[387,2],[390,2],[393,3],[397,5],[403,3],[407,3],[411,2],[414,2],[417,4],[422,3],[426,1],[428,5],[434,2],[442,2],[445,4],[450,5],[456,4],[461,5],[467,2],[481,6],[488,2],[495,2],[498,2],[501,3],[505,4],[510,4],[515,6],[522,2],[525,3],[529,3],[533,1],[535,2],[538,4],[543,2],[546,3],[554,2],[557,3],[561,6]]},"2035":{"position":[[18,3],[22,4],[27,6]]},"2037":{"position":[[0,2],[3,3],[7,3],[53,4],[58,4],[73,5],[79,2],[82,2],[85,3],[89,5],[95,2],[98,4],[103,2],[106,3],[123,3],[127,4],[132,1],[134,5],[140,4],[145,2],[148,3],[164,4],[169,6],[176,2],[179,5],[185,4],[190,4],[195,4],[200,5],[206,2],[209,3],[213,4],[218,4],[223,2],[226,3],[230,4],[235,2],[238,2],[241,3],[245,3],[249,2],[252,2],[255,3],[271,6]]},"2039":{"position":[[0,6],[7,3],[11,4],[16,2],[19,2],[22,2],[25,3],[29,5],[35,3],[39,3],[52,4],[57,4],[62,2],[65,1],[67,5],[73,4],[85,3],[89,2],[92,6],[99,2],[102,2],[105,3],[109,5],[115,2],[121,2],[168,1],[212,4],[217,6],[224,2],[230,2],[277,1],[322,4],[327,6],[334,2],[383,4],[388,2],[391,3],[408,4],[413,6],[420,1],[422,4],[427,2],[430,4],[435,2],[441,2],[448,3],[452,6],[459,2],[508,4],[513,2],[516,2],[519,5],[525,4],[530,6],[537,4],[542,2],[548,2],[555,3],[559,6]]},"2041":{"position":[[11,8],[20,5],[26,2],[29,3],[53,4],[58,4],[63,5],[69,1],[71,3],[84,2],[87,2],[94,5],[100,3],[104,6]]},"2043":{"position":[[0,4],[5,3],[9,3],[13,2],[21,2],[24,2],[27,8],[36,4],[41,4],[46,6],[53,3],[62,3],[66,4],[71,4],[76,4],[81,4],[121,3],[125,6],[132,2],[140,1],[147,2],[150,3],[164,1],[185,4],[190,4],[195,6],[225,5],[231,7],[239,4],[244,6],[261,3],[265,2],[268,4],[327,6],[334,2],[342,4],[347,2],[350,2],[357,3],[388,4],[393,4],[398,4],[408,6],[415,4],[420,2],[423,2],[426,2],[434,6],[441,2],[444,4],[449,4],[454,4],[459,4],[464,3],[468,3],[472,3],[476,3],[480,4],[485,5],[491,7]]},"2045":{"position":[[8,2],[11,2],[14,4],[19,4],[24,3],[28,3],[45,3],[49,5],[55,2],[58,4],[63,4],[68,3],[72,3],[76,2],[79,4],[84,2],[87,2],[90,1],[92,5],[98,2],[101,2],[104,3],[108,2],[111,3],[115,3],[119,3],[123,1],[125,5],[164,2],[167,3],[171,4],[181,4],[186,2],[189,3],[193,4],[198,1],[200,3],[204,3],[208,1],[210,5]]},"2047":{"position":[[0,1],[2,4],[7,2],[10,4],[15,5],[21,3],[25,4],[30,1],[32,3],[36,4],[41,2],[44,5],[55,4],[60,3],[64,2],[67,3],[71,6],[82,2],[85,4],[90,4],[95,3],[99,2],[102,3],[106,3],[110,4],[115,3],[119,6],[126,2],[141,2],[144,7],[152,2],[155,5],[161,4],[166,2],[169,2],[172,3],[176,4],[181,3],[185,5],[191,2],[194,5]]},"2049":{"position":[[13,2],[23,2],[26,4],[31,4],[36,4],[41,3],[45,4],[50,2],[53,5],[59,6],[66,1],[68,5],[93,2],[96,3],[100,1],[102,5],[108,1],[110,4],[120,6],[127,4],[132,3],[136,6],[172,1],[179,1],[181,3],[185,3],[189,2],[192,3],[196,6],[203,5],[209,2],[212,2],[215,3],[219,2],[222,4],[227,6],[238,4],[243,6],[287,1],[307,3],[311,2],[314,5],[320,6],[365,3],[369,5],[380,3],[393,4],[398,2],[401,4],[406,4],[411,2],[414,2],[417,2],[420,3],[424,4],[429,3],[433,5],[439,1],[441,3],[445,2],[448,7],[456,3],[460,4],[473,1],[475,4],[480,3],[484,2],[487,3],[491,4],[496,2],[499,3],[503,2],[517,8],[526,2],[529,2],[532,4],[537,3],[541,3],[545,3],[549,4],[554,5],[560,2],[563,2],[566,2],[569,4],[574,4],[579,2],[582,4],[587,2],[590,5],[596,4],[601,3],[605,3],[609,4],[614,5],[620,6],[635,1],[647,2],[650,3],[654,4],[659,2],[662,5],[668,6],[675,3],[679,4],[684,2],[687,3],[691,4],[696,6],[732,1],[799,5],[805,4],[810,5],[821,3],[825,2],[828,5],[834,6],[845,5],[851,3],[861,2],[864,2],[867,2],[874,3],[878,6],[896,3],[900,2],[903,2],[906,3],[950,6],[957,2],[960,1],[962,3],[966,3],[970,3],[974,3],[978,3],[982,4],[987,3],[991,2],[994,5],[1000,2],[1003,3],[1021,2],[1024,3],[1028,4],[1033,1],[1035,3],[1039,2],[1042,3],[1046,2],[1049,5],[1055,2],[1058,2],[1061,6]]},"2051":{"position":[[0,1],[2,4],[11,2],[14,5],[20,8],[29,2],[32,3],[36,2],[39,2],[42,2],[45,3],[49,2],[52,3],[56,3],[60,4],[65,5]]},"2053":{"position":[[250,1],[1795,2],[2471,1]]},"2059":{"position":[[86,1]]},"2067":{"position":[[399,1],[434,1]]},"2069":{"position":[[364,1],[399,1]]},"2079":{"position":[[300,1],[417,1],[574,1],[668,1],[670,1],[685,1],[697,2],[713,1],[715,1],[727,1],[737,1],[739,1],[794,1],[796,1],[798,1],[800,2],[803,1],[817,2],[820,1],[822,1],[824,1],[826,1],[828,1]]},"2083":{"position":[[0,1],[2,5],[12,5],[18,4],[23,4],[28,3],[32,2],[35,6],[42,1],[44,4],[49,4],[54,5],[60,1],[62,4],[72,4],[83,4],[88,3],[92,6],[99,2],[102,3],[110,5],[116,4],[128,6],[135,2],[138,3],[146,4],[151,2],[154,2],[157,3]]},"2093":{"position":[[779,2],[798,2],[1467,1],[1513,1],[1553,1],[1721,1],[1750,1],[1779,1],[1829,1],[3271,3],[3335,3],[3553,3],[3709,3],[5925,2],[6124,2],[6323,2]]},"2095":{"position":[[438,2],[1476,2],[1717,2],[1945,2],[2159,2],[2400,2],[2609,2],[2639,2]]},"2097":{"position":[[1193,1],[1202,1],[1204,1],[1285,1],[1287,1],[1367,1]]},"2101":{"position":[[256,1],[466,1],[536,1],[610,1],[683,1],[755,1],[820,1],[1091,1],[1554,1],[1663,1],[1890,1],[1981,1],[2338,1],[2620,1],[2689,1],[2792,1],[2839,1],[2907,1],[3013,1],[3086,1],[3159,1],[3250,1],[4064,1],[4091,1],[4279,1],[4358,1]]},"2119":{"position":[[79,1]]},"2135":{"position":[[0,4],[5,4],[10,2],[13,7],[21,3],[25,2],[28,5],[34,5],[40,4],[45,4],[50,5],[56,5],[62,4],[67,7],[75,4],[80,2],[83,3],[87,6],[94,4],[99,3],[103,1],[105,5],[111,1],[113,4],[118,3],[122,4],[127,7],[135,3],[139,3],[143,6],[150,6],[157,4],[162,3],[166,1],[168,5],[174,5],[207,5],[213,5],[219,4],[224,5],[230,5],[236,2],[274,5],[280,2],[283,6],[299,2],[302,3],[306,2],[309,3],[313,3],[317,4],[322,2],[325,5],[331,3],[335,6],[342,1],[344,4],[349,2],[352,4],[357,3],[361,2],[392,4],[397,5],[403,5],[409,4],[414,3],[418,6]]},"2137":{"position":[[5,1],[7,2],[10,3],[14,2],[17,5],[23,2],[42,2],[45,4],[50,5],[56,6],[63,2],[66,1],[68,2],[71,4],[76,3],[80,4],[85,2],[92,2],[95,4],[100,3],[104,1],[106,2],[109,2],[112,4],[117,2],[120,5],[126,2],[129,1],[131,4],[136,2],[139,3],[143,3],[147,2],[150,5],[156,3],[160,5],[166,4],[171,2],[185,4],[190,5],[196,3],[200,3],[204,2],[207,3],[211,3],[215,1],[217,1],[219,5],[225,2],[228,2],[231,5],[243,8],[325,2],[328,3],[332,1],[334,2],[337,2],[340,1],[342,3],[346,1],[348,2],[351,3],[355,5],[361,5],[367,4],[372,4],[388,1],[390,4],[395,5],[416,5],[422,2],[425,4],[430,1],[432,2],[435,2],[438,5],[448,5],[454,5],[460,8],[469,5],[475,1],[477,7],[485,2],[488,3],[492,3],[496,3],[500,6]]},"2139":{"position":[[5,3],[9,2],[12,2],[15,6],[22,2],[25,5],[31,2],[34,2],[37,1],[39,3],[43,2],[46,5],[52,4],[57,2],[60,2],[94,2],[97,3],[101,1],[103,5],[109,5],[115,3],[119,3],[123,7],[131,3],[135,3],[139,2],[142,2],[145,3],[149,6],[156,3],[160,2],[163,2],[166,5],[172,2],[175,4],[180,2],[183,3],[187,3],[191,6]]},"2143":{"position":[[315,6],[379,1],[386,6],[393,6],[431,3],[435,2],[446,4]]},"2145":{"position":[[0,2],[20,4],[25,5],[36,6],[43,4],[48,3],[52,2],[55,4],[60,4],[75,6],[82,3],[86,3],[90,6],[97,3],[101,3],[105,2],[108,3],[112,5],[118,5],[139,4],[154,6],[268,6],[292,6],[305,4],[315,3],[319,6]]},"2149":{"position":[[315,1],[322,6],[329,6],[367,3],[371,2],[382,4]]},"2152":{"position":[[0,2],[3,8],[12,5],[18,4],[23,7],[31,1],[33,2],[36,3],[40,6],[47,2],[61,2],[64,2],[67,3],[71,3],[103,2],[106,6],[113,3],[117,3],[121,2],[124,5],[130,2],[133,6],[149,3],[153,5],[192,4],[197,5],[203,4],[208,2],[211,6],[218,4],[223,3],[227,6]]},"2154":{"position":[[18,6],[25,2],[28,3],[36,2],[44,5],[62,5],[72,2],[80,5],[90,2],[93,2],[108,6],[115,2],[143,8],[160,3],[164,5],[170,6],[177,3],[181,6],[192,5],[198,4],[203,2],[210,7],[218,2],[224,4],[234,2],[237,3],[241,6],[248,4],[253,3],[269,4],[274,4],[279,2],[282,3],[286,3],[290,4],[295,3],[299,1],[301,2],[304,5],[314,3],[318,3],[322,1],[324,2],[327,4],[332,4],[337,3],[341,1],[343,5],[349,1],[351,3],[355,3],[359,4],[364,4],[369,4],[380,2],[387,7],[395,3],[399,1],[401,3],[405,5],[411,4],[416,6],[423,3],[427,2],[430,3],[434,2],[480,3],[484,3],[488,3],[534,4],[539,3],[543,2],[546,5],[552,2],[555,3],[559,4],[564,2],[567,2],[570,2],[573,1],[575,5],[619,3],[631,3],[635,2],[645,3],[649,4],[668,1],[670,2],[673,4],[678,5],[684,3],[697,3],[701,2],[709,6],[716,4],[721,4],[726,2],[729,6],[736,6],[743,4],[748,4],[753,3],[757,4],[762,6]]},"2159":{"position":[[690,2],[1047,2],[1700,1]]},"2163":{"position":[[406,1],[756,1],[2312,3],[2322,3]]},"2165":{"position":[[115,2]]},"2167":{"position":[[851,1]]},"2169":{"position":[[140,1],[357,1],[500,1]]},"2200":{"position":[[139,1],[308,1],[413,1],[471,1],[486,1],[515,2],[559,1],[602,1],[617,1],[633,3],[775,1],[807,1],[818,1],[831,4],[931,1],[1060,1],[1258,1],[1385,1],[1588,1],[1716,1],[1806,1],[1917,1],[1957,1],[1995,1]]},"2202":{"position":[[149,1]]},"2216":{"position":[[216,1]]},"2223":{"position":[[238,1],[270,1],[281,1]]},"2225":{"position":[[301,1],[319,1],[351,1],[425,1],[636,1],[918,1],[1200,1],[1482,1],[1764,1],[2046,1],[2328,1]]},"2227":{"position":[[230,1],[248,1],[280,1],[323,1],[406,1],[617,1],[899,1],[1181,1],[1463,1],[1745,1],[2027,1],[2309,1]]},"2231":{"position":[[468,1],[500,1],[511,1],[567,1],[613,1]]},"2233":{"position":[[451,1],[483,1],[494,1],[550,1]]},"2235":{"position":[[325,1],[357,1],[368,1],[413,1]]},"2237":{"position":[[291,1],[323,1],[334,1],[379,1]]},"2239":{"position":[[304,1],[336,1],[347,1],[392,1]]},"2241":{"position":[[395,1],[427,1],[438,1],[489,1]]},"2243":{"position":[[302,1],[334,1],[345,1],[396,1],[456,1]]},"2245":{"position":[[290,1],[308,1],[340,1],[419,1],[630,1],[912,1],[1194,1],[1476,1],[1758,1],[2040,1],[2322,1]]},"2247":{"position":[[368,1],[400,1],[411,1],[462,1],[520,1]]},"2249":{"position":[[390,1],[422,1],[433,1],[465,1],[509,1]]},"2251":{"position":[[286,1],[318,1],[329,1],[361,1],[405,1]]},"2253":{"position":[[421,1],[453,1],[464,1],[515,1]]},"2255":{"position":[[282,1],[314,1],[325,1],[363,1],[400,1]]},"2257":{"position":[[233,1],[265,1],[276,1],[312,1]]},"2267":{"position":[[363,1],[395,1],[406,1],[438,1],[483,1]]},"2271":{"position":[[438,1],[543,1],[601,1],[616,1],[645,2],[689,1],[732,1],[747,1],[763,3],[905,1],[937,1],[948,1],[961,4],[1061,1],[1190,1],[1388,1],[1515,1],[1718,1],[1846,1],[1936,1],[2047,1],[2087,1],[2125,1],[2220,1],[2253,1]]},"2273":{"position":[[430,1],[466,1],[494,1],[527,1]]},"2275":{"position":[[365,1],[397,1],[408,1],[449,1]]},"2277":{"position":[[377,1],[409,1],[420,1],[458,1]]},"2279":{"position":[[419,1],[451,1],[462,1]]},"2283":{"position":[[971,1],[1003,1],[1014,1]]},"2286":{"position":[[320,1],[361,1],[372,1]]},"2288":{"position":[[250,1],[291,1],[302,1],[338,1]]},"2290":{"position":[[270,1],[311,1],[322,1],[380,1]]},"2292":{"position":[[366,1],[407,1],[418,1],[477,1]]},"2294":{"position":[[303,1],[344,1],[355,1],[394,1]]},"2298":{"position":[[239,1],[257,1],[289,1],[320,1],[391,1],[602,1],[884,1],[1166,1],[1448,1],[1730,1],[2012,1],[2294,1]]},"2301":{"position":[[237,1],[269,1],[297,1]]},"2303":{"position":[[247,1],[279,1],[290,1],[329,1],[373,1]]},"2306":{"position":[[332,1],[437,1],[495,1],[510,1],[539,2],[583,1],[626,1],[641,1],[657,3],[799,1],[831,1],[842,1],[855,4],[955,1],[1084,1],[1282,1],[1409,1],[1612,1],[1740,1],[1830,1],[1941,1],[1981,1],[2019,1]]},"2308":{"position":[[221,1],[326,1],[384,1],[399,1],[428,2],[472,1],[515,1],[530,1],[546,3],[688,1],[720,1],[731,1],[744,4],[844,1],[973,1],[1171,1],[1298,1],[1501,1],[1629,1],[1719,1],[1830,1],[1870,1],[1908,1],[2000,1]]},"2310":{"position":[[246,1],[351,1],[409,1],[424,1],[453,2],[497,1],[540,1],[555,1],[571,3],[713,1],[745,1],[756,1],[769,4],[869,1],[998,1],[1196,1],[1323,1],[1526,1],[1654,1],[1744,1],[1855,1],[1895,1],[1933,1]]},"2312":{"position":[[398,1],[503,1],[561,1],[576,1],[605,2],[649,1],[692,1],[707,1],[723,3],[865,1],[897,1],[908,1],[921,4],[1021,1],[1150,1],[1348,1],[1475,1],[1678,1],[1806,1],[1896,1],[2007,1],[2047,1],[2085,1]]},"2314":{"position":[[224,1],[329,1],[387,1],[402,1],[431,2],[475,1],[518,1],[533,1],[549,3],[691,1],[723,1],[734,1],[747,4],[847,1],[976,1],[1174,1],[1301,1],[1504,1],[1632,1],[1722,1],[1833,1],[1873,1],[1911,1],[2003,1]]},"2316":{"position":[[256,1],[361,1],[419,1],[434,1],[463,2],[507,1],[550,1],[565,1],[581,3],[723,1],[755,1],[766,1],[779,4],[879,1],[1008,1],[1206,1],[1333,1],[1536,1],[1664,1],[1754,1],[1865,1],[1905,1],[1943,1],[2035,1],[2071,1]]},"2318":{"position":[[355,1],[460,1],[518,1],[533,1],[562,2],[606,1],[649,1],[664,1],[680,3],[822,1],[854,1],[865,1],[878,4],[978,1],[1107,1],[1305,1],[1432,1],[1635,1],[1763,1],[1853,1],[1964,1],[2004,1],[2042,1]]},"2324":{"position":[[117,1],[149,1],[160,1]]},"2350":{"position":[[537,1],[569,1],[628,1],[660,1],[671,1],[695,1],[721,1],[768,1]]},"2352":{"position":[[523,1],[555,1],[614,1],[646,1],[657,1],[685,1],[711,1],[764,1]]},"2354":{"position":[[579,1],[611,1],[670,1],[702,1],[713,1],[737,1],[763,1],[858,1]]},"2356":{"position":[[487,1],[512,1],[523,1],[564,1],[602,1]]},"2358":{"position":[[544,1],[569,1],[580,1]]},"2368":{"position":[[705,1],[730,1],[758,1],[791,1]]},"2377":{"position":[[312,1]]}}}],["0",{"_index":63,"t":{"1642":{"position":[[34,1]]},"1662":{"position":[[452,2]]},"1675":{"position":[[643,1],[705,1],[818,1],[868,1],[923,1]]},"1750":{"position":[[2147,1],[2168,1]]},"1767":{"position":[[882,2],[902,2]]},"1774":{"position":[[65,1]]},"1794":{"position":[[463,2],[1108,2],[4771,2]]},"1811":{"position":[[1374,4]]},"1939":{"position":[[838,1],[900,1],[954,1]]},"2093":{"position":[[3438,1],[3912,1]]},"2200":{"position":[[631,1]]},"2225":{"position":[[628,1],[910,1],[1192,1],[1474,1],[1756,1],[2038,1],[2320,1]]},"2227":{"position":[[609,1],[891,1],[1173,1],[1455,1],[1737,1],[2019,1],[2301,1]]},"2245":{"position":[[622,1],[904,1],[1186,1],[1468,1],[1750,1],[2032,1],[2314,1]]},"2255":{"position":[[395,1]]},"2271":{"position":[[761,1]]},"2298":{"position":[[594,1],[876,1],[1158,1],[1440,1],[1722,1],[2004,1],[2286,1]]},"2306":{"position":[[655,1]]},"2308":{"position":[[544,1]]},"2310":{"position":[[569,1]]},"2312":{"position":[[721,1]]},"2314":{"position":[[547,1]]},"2316":{"position":[[579,1]]},"2318":{"position":[[678,1]]},"2350":{"position":[[582,2]]},"2352":{"position":[[568,2]]},"2354":{"position":[[624,2]]},"2356":{"position":[[95,2],[595,3]]},"2358":{"position":[[132,2]]},"2406":{"position":[[165,2]]}}}],["0.0.0.0",{"_index":976,"t":{"1776":{"position":[[46,7]]},"1794":{"position":[[752,8]]}}}],["0.2",{"_index":544,"t":{"1710":{"position":[[445,3]]}}}],["0/1",{"_index":274,"t":{"1675":{"position":[[750,3]]}}}],["000",{"_index":2523,"t":{"2341":{"position":[[337,5]]}}}],["00:00",{"_index":809,"t":{"1750":{"position":[[227,5]]}}}],["00:00:00",{"_index":2403,"t":{"2225":{"position":[[638,8],[920,8],[1202,8],[1484,8],[1766,8],[2048,8],[2330,8]]},"2227":{"position":[[619,8],[901,8],[1183,8],[1465,8],[1747,8],[2029,8],[2311,8]]},"2245":{"position":[[632,8],[914,8],[1196,8],[1478,8],[1760,8],[2042,8],[2324,8]]},"2298":{"position":[[604,8],[886,8],[1168,8],[1450,8],[1732,8],[2014,8],[2296,8]]}}}],["00:01:28",{"_index":2397,"t":{"2225":{"position":[[427,8]]},"2227":{"position":[[408,8]]},"2245":{"position":[[421,8]]},"2298":{"position":[[393,8]]}}}],["02",{"_index":514,"t":{"1706":{"position":[[320,2]]},"1740":{"position":[[1499,2]]},"1810":{"position":[[135,2]]}}}],["04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c",{"_index":2416,"t":{"2225":{"position":[[1916,64]]},"2227":{"position":[[1897,64]]},"2245":{"position":[[1910,64]]},"2298":{"position":[[1882,64]]}}}],["0644",{"_index":1400,"t":{"1908":{"position":[[332,6],[515,6]]}}}],["073f",{"_index":296,"t":{"1675":{"position":[[1155,4],[1318,4],[1659,4]]}}}],["09",{"_index":2434,"t":{"2231":{"position":[[734,2]]},"2233":{"position":[[682,2]]},"2235":{"position":[[551,2]]},"2237":{"position":[[500,2]]},"2239":{"position":[[513,2]]},"2241":{"position":[[626,2]]},"2243":{"position":[[587,2]]},"2247":{"position":[[660,2]]},"2249":{"position":[[641,2]]},"2251":{"position":[[537,2]]},"2253":{"position":[[653,2]]},"2255":{"position":[[518,2]]},"2257":{"position":[[433,2]]},"2267":{"position":[[608,2]]},"2273":{"position":[[650,2],[2826,2]]},"2275":{"position":[[566,2]]},"2277":{"position":[[572,2]]},"2288":{"position":[[459,2]]},"2290":{"position":[[527,2]]},"2292":{"position":[[612,2]]},"2294":{"position":[[509,2]]},"2301":{"position":[[418,2]]},"2303":{"position":[[492,2]]},"2350":{"position":[[917,2]]},"2352":{"position":[[931,2]]},"2354":{"position":[[1046,2]]},"2356":{"position":[[723,2],[1946,2]]},"2368":{"position":[[914,2],[2137,2]]}}}],["0b836757eae8",{"_index":2546,"t":{"2356":{"position":[[1516,12]]},"2368":{"position":[[1707,12]]}}}],["1",{"_index":123,"t":{"1648":{"position":[[593,1]]},"1662":{"position":[[1849,1]]},"1675":{"position":[[764,1]]},"1681":{"position":[[990,1]]},"1708":{"position":[[354,1],[380,1]]},"1750":{"position":[[3358,1]]},"1760":{"position":[[616,1],[1295,1]]},"1767":{"position":[[1596,3]]},"1794":{"position":[[5544,3],[8951,1]]},"1981":{"position":[[139,1],[165,1]]},"1995":{"position":[[219,1]]},"2001":{"position":[[527,1]]},"2093":{"position":[[1922,1],[1977,1],[3007,1],[3062,1]]},"2113":{"position":[[393,1]]},"2115":{"position":[[379,1]]},"2163":{"position":[[537,1],[885,1],[1227,2]]},"2200":{"position":[[647,2],[1672,2]]},"2225":{"position":[[626,1],[908,1],[1190,1],[1472,1],[1754,1],[2036,1],[2318,1]]},"2227":{"position":[[607,1],[889,1],[1171,1],[1453,1],[1735,1],[2017,1],[2299,1]]},"2245":{"position":[[620,1],[902,1],[1184,1],[1466,1],[1748,1],[2030,1],[2312,1]]},"2271":{"position":[[777,2],[1802,2]]},"2298":{"position":[[592,1],[874,1],[1156,1],[1438,1],[1720,1],[2002,1],[2284,1]]},"2306":{"position":[[671,2],[1696,2]]},"2308":{"position":[[560,2],[1585,2]]},"2310":{"position":[[585,2],[1610,2]]},"2312":{"position":[[737,2],[1762,2]]},"2314":{"position":[[563,2],[1588,2]]},"2316":{"position":[[595,2],[1620,2]]},"2318":{"position":[[694,2],[1719,2]]}}}],["1.1",{"_index":1960,"t":{"2085":{"position":[[1048,5]]}}}],["1.1.11",{"_index":2350,"t":{"2200":{"position":[[653,9],[1678,9],[2066,6]]},"2271":{"position":[[783,9],[1808,9]]},"2306":{"position":[[677,9],[1702,9]]},"2308":{"position":[[566,9],[1591,9]]},"2310":{"position":[[591,9],[1616,9]]},"2312":{"position":[[743,9],[1768,9]]},"2314":{"position":[[569,9],[1594,9]]},"2316":{"position":[[601,9],[1626,9]]},"2318":{"position":[[700,9],[1725,9]]}}}],["1.19.2",{"_index":1888,"t":{"2059":{"position":[[31,6]]}}}],["1.2.1",{"_index":2075,"t":{"2101":{"position":[[258,5]]}}}],["1.2.17",{"_index":2082,"t":{"2101":{"position":[[538,6]]}}}],["1.2.19",{"_index":2090,"t":{"2101":{"position":[[822,6]]}}}],["1.2.20",{"_index":2106,"t":{"2101":{"position":[[1556,6]]}}}],["1.2.21",{"_index":2097,"t":{"2101":{"position":[[1093,6]]}}}],["1.2.22",{"_index":2051,"t":{"2097":{"position":[[17,6]]},"2101":{"position":[[4413,6]]},"2127":{"position":[[200,6]]}}}],["1.2.25",{"_index":2052,"t":{"2097":{"position":[[27,6]]},"2101":{"position":[[4423,6]]},"2127":{"position":[[209,6]]}}}],["1.2.28",{"_index":2109,"t":{"2101":{"position":[[1665,6]]}}}],["1.2.29",{"_index":2086,"t":{"2101":{"position":[[685,6],[757,6]]},"2200":{"position":[[720,9],[1701,9]]},"2271":{"position":[[850,9],[1831,9],[2196,6]]},"2306":{"position":[[744,9],[1725,9]]},"2308":{"position":[[633,9],[1614,9]]},"2310":{"position":[[658,9],[1639,9]]},"2312":{"position":[[810,9],[1791,9]]},"2314":{"position":[[636,9],[1617,9]]},"2316":{"position":[[668,9],[1649,9]]},"2318":{"position":[[767,9],[1748,9]]}}}],["1.2.30",{"_index":2113,"t":{"2101":{"position":[[1892,6],[1983,6]]}}}],["1.2.31",{"_index":2081,"t":{"2101":{"position":[[468,6]]}}}],["1.2.32",{"_index":2084,"t":{"2101":{"position":[[612,6]]}}}],["1.20",{"_index":1810,"t":{"2027":{"position":[[721,4]]},"2095":{"position":[[1087,4]]},"2154":{"position":[[39,4]]}}}],["1.21",{"_index":1811,"t":{"2027":{"position":[[757,4]]},"2154":{"position":[[75,4]]}}}],["1.24",{"_index":248,"t":{"1675":{"position":[[57,7],[143,4]]}}}],["1.3.2",{"_index":2121,"t":{"2101":{"position":[[2622,5]]}}}],["1.3.3",{"_index":2124,"t":{"2101":{"position":[[2841,5]]}}}],["1.3.4",{"_index":2123,"t":{"2101":{"position":[[2794,5]]}}}],["1.3.5",{"_index":2122,"t":{"2101":{"position":[[2691,5]]}}}],["1.3.7",{"_index":2117,"t":{"2101":{"position":[[2340,5]]}}}],["1.4.1",{"_index":2128,"t":{"2101":{"position":[[3015,5]]}}}],["1.4.2",{"_index":2125,"t":{"2101":{"position":[[2909,5]]}}}],["1.50",{"_index":1876,"t":{"2055":{"position":[[540,4],[621,4],[680,4]]},"2067":{"position":[[291,4]]},"2069":{"position":[[263,4]]},"2071":{"position":[[151,4]]}}}],["1.6",{"_index":2070,"t":{"2101":{"position":[[141,3]]}}}],["1.6.1",{"_index":1758,"t":{"2017":{"position":[[74,8]]}}}],["1.8.0",{"_index":1759,"t":{"2017":{"position":[[110,5]]}}}],["1.8.4",{"_index":1760,"t":{"2017":{"position":[[116,5]]}}}],["1.el7_8.noarch.rpm",{"_index":545,"t":{"1710":{"position":[[449,18]]}}}],["1/1",{"_index":267,"t":{"1675":{"position":[[631,3],[693,3],[806,3],[911,3]]},"1939":{"position":[[826,3],[888,3],[942,3]]}}}],["10",{"_index":35,"t":{"1638":{"position":[[71,4]]},"1667":{"position":[[64,3]]},"1740":{"position":[[330,2]]},"1750":{"position":[[4973,2]]},"1989":{"position":[[147,2]]},"1995":{"position":[[216,2]]},"2055":{"position":[[288,3],[392,3],[689,3]]},"2063":{"position":[[136,2]]},"2067":{"position":[[175,3],[392,2],[401,2]]},"2069":{"position":[[175,3],[357,2],[366,2]]},"2071":{"position":[[123,3]]},"2113":{"position":[[57,2],[362,3]]},"2115":{"position":[[348,3]]},"2263":{"position":[[198,2]]}}}],["10.0.0.0/8",{"_index":1310,"t":{"1878":{"position":[[665,10]]}}}],["10.41.0.0/16",{"_index":451,"t":{"1691":{"position":[[299,12]]}}}],["10.42.0.0/16",{"_index":505,"t":{"1704":{"position":[[135,12]]},"1782":{"position":[[46,14]]},"1794":{"position":[[1448,13]]}}}],["10.43.0.0/16",{"_index":506,"t":{"1704":{"position":[[176,12]]},"1782":{"position":[[125,14]]},"1794":{"position":[[1553,13]]}}}],["10.43.0.10",{"_index":991,"t":{"1782":{"position":[[313,12]]},"1794":{"position":[[1814,11]]}}}],["10.6.8",{"_index":1131,"t":{"1825":{"position":[[958,7]]}}}],["10.7",{"_index":1132,"t":{"1825":{"position":[[989,6]]}}}],["100",{"_index":559,"t":{"1715":{"position":[[475,4]]},"1989":{"position":[[170,3]]},"1995":{"position":[[239,3]]},"2113":{"position":[[312,3]]},"2115":{"position":[[55,3],[298,3]]},"2265":{"position":[[249,3]]}}}],["10000",{"_index":417,"t":{"1687":{"position":[[196,5]]}}}],["10080",{"_index":419,"t":{"1687":{"position":[[266,6]]}}}],["100mb",{"_index":1,"t":{"1634":{"position":[[32,5]]}}}],["1024",{"_index":416,"t":{"1687":{"position":[[179,4]]}}}],["10250",{"_index":1709,"t":{"1983":{"position":[[648,6]]},"1985":{"position":[[245,5]]}}}],["10t22:54:38z",{"_index":917,"t":{"1760":{"position":[[699,12]]}}}],["11.5",{"_index":1133,"t":{"1825":{"position":[[996,5]]}}}],["112",{"_index":1585,"t":{"1953":{"position":[[1282,4]]}}}],["1123",{"_index":1480,"t":{"1933":{"position":[[1046,4]]}}}],["12",{"_index":482,"t":{"1700":{"position":[[346,2]]},"1750":{"position":[[2170,4]]},"1760":{"position":[[696,2]]},"1767":{"position":[[905,3]]},"1794":{"position":[[4774,4]]},"1945":{"position":[[2142,2]]},"1953":{"position":[[1264,3]]}}}],["12,500",{"_index":2206,"t":{"2125":{"position":[[350,6]]}}}],["12.0.000.tgz",{"_index":1303,"t":{"1876":{"position":[[1701,14]]}}}],["123",{"_index":2428,"t":{"2231":{"position":[[683,3]]},"2233":{"position":[[631,3]]},"2235":{"position":[[500,3]]},"2237":{"position":[[449,3]]},"2239":{"position":[[462,3]]},"2241":{"position":[[575,3]]},"2243":{"position":[[536,3]]},"2247":{"position":[[609,3]]},"2249":{"position":[[590,3]]},"2251":{"position":[[486,3]]},"2253":{"position":[[602,3]]},"2255":{"position":[[467,3]]},"2257":{"position":[[382,3]]},"2267":{"position":[[557,3]]},"2273":{"position":[[599,3],[2775,3]]},"2275":{"position":[[515,3]]},"2277":{"position":[[521,3]]},"2288":{"position":[[408,3]]},"2290":{"position":[[476,3]]},"2292":{"position":[[561,3]]},"2294":{"position":[[458,3]]},"2301":{"position":[[367,3]]},"2303":{"position":[[441,3]]},"2350":{"position":[[866,3]]},"2352":{"position":[[880,3]]},"2354":{"position":[[995,3]]},"2356":{"position":[[672,3],[1368,3],[1895,3],[2591,3]]},"2368":{"position":[[863,3],[1559,3],[2086,3],[2782,3]]}}}],["12345",{"_index":1382,"t":{"1904":{"position":[[855,5],[1184,6],[1269,5]]}}}],["127.0.0.1",{"_index":2492,"t":{"2303":{"position":[[358,11]]}}}],["12:00",{"_index":810,"t":{"1750":{"position":[[237,5]]}}}],["13",{"_index":2426,"t":{"2231":{"position":[[667,2]]},"2233":{"position":[[615,2]]},"2235":{"position":[[484,2]]},"2237":{"position":[[433,2]]},"2239":{"position":[[446,2]]},"2241":{"position":[[559,2]]},"2243":{"position":[[520,2]]},"2247":{"position":[[593,2]]},"2249":{"position":[[574,2]]},"2251":{"position":[[470,2]]},"2253":{"position":[[586,2]]},"2255":{"position":[[451,2]]},"2257":{"position":[[366,2]]},"2267":{"position":[[541,2]]},"2273":{"position":[[583,2],[2759,2]]},"2275":{"position":[[499,2]]},"2277":{"position":[[505,2]]},"2288":{"position":[[392,2]]},"2290":{"position":[[460,2]]},"2292":{"position":[[545,2]]},"2294":{"position":[[442,2]]},"2301":{"position":[[351,2]]},"2303":{"position":[[425,2]]},"2350":{"position":[[850,2]]},"2352":{"position":[[864,2]]},"2354":{"position":[[979,2]]},"2356":{"position":[[656,2],[1879,2]]},"2368":{"position":[[847,2],[2070,2]]}}}],["13:26",{"_index":2396,"t":{"2225":{"position":[[419,5]]},"2227":{"position":[[400,5]]},"2245":{"position":[[413,5]]},"2298":{"position":[[385,5]]}}}],["13:26:40",{"_index":2427,"t":{"2231":{"position":[[670,8]]},"2233":{"position":[[618,8]]},"2235":{"position":[[487,8]]},"2237":{"position":[[436,8]]},"2239":{"position":[[449,8]]},"2241":{"position":[[562,8]]},"2243":{"position":[[523,8]]},"2247":{"position":[[596,8]]},"2249":{"position":[[577,8]]},"2251":{"position":[[473,8]]},"2253":{"position":[[589,8]]},"2255":{"position":[[454,8]]},"2257":{"position":[[369,8]]},"2267":{"position":[[544,8]]},"2273":{"position":[[586,8],[2762,8]]},"2275":{"position":[[502,8]]},"2277":{"position":[[508,8]]},"2288":{"position":[[395,8]]},"2290":{"position":[[463,8]]},"2292":{"position":[[548,8]]},"2294":{"position":[[445,8]]},"2301":{"position":[[354,8]]},"2303":{"position":[[428,8]]},"2350":{"position":[[853,8]]},"2352":{"position":[[867,8]]},"2354":{"position":[[982,8]]}}}],["13:26:44",{"_index":2549,"t":{"2356":{"position":[[1882,8]]},"2368":{"position":[[2073,8]]}}}],["13:26:50",{"_index":2533,"t":{"2356":{"position":[[659,8]]},"2368":{"position":[[850,8]]}}}],["13:27",{"_index":2402,"t":{"2225":{"position":[[630,5],[912,5],[1194,5],[1476,5]]},"2227":{"position":[[611,5],[893,5],[1175,5],[1457,5]]},"2245":{"position":[[624,5],[906,5],[1188,5],[1470,5]]},"2298":{"position":[[596,5],[878,5],[1160,5],[1442,5]]}}}],["13:28",{"_index":2415,"t":{"2225":{"position":[[1758,5],[2040,5]]},"2227":{"position":[[1739,5],[2021,5]]},"2245":{"position":[[1752,5],[2034,5]]},"2298":{"position":[[1724,5],[2006,5]]}}}],["13:47",{"_index":2420,"t":{"2225":{"position":[[2322,5]]},"2227":{"position":[[2303,5]]},"2245":{"position":[[2316,5]]},"2298":{"position":[[2288,5]]}}}],["13m",{"_index":1242,"t":{"1848":{"position":[[809,3]]}}}],["13t13:26:40z",{"_index":2435,"t":{"2231":{"position":[[737,13]]},"2233":{"position":[[685,13]]},"2235":{"position":[[554,13]]},"2237":{"position":[[503,13]]},"2239":{"position":[[516,13]]},"2241":{"position":[[629,13]]},"2243":{"position":[[590,13]]},"2247":{"position":[[663,13]]},"2249":{"position":[[644,13]]},"2251":{"position":[[540,13]]},"2253":{"position":[[656,13]]},"2255":{"position":[[521,13]]},"2257":{"position":[[436,13]]},"2267":{"position":[[611,13]]},"2273":{"position":[[653,13],[2829,13]]},"2275":{"position":[[569,13]]},"2277":{"position":[[575,13]]},"2288":{"position":[[462,13]]},"2290":{"position":[[530,13]]},"2292":{"position":[[615,13]]},"2294":{"position":[[512,13]]},"2301":{"position":[[421,13]]},"2303":{"position":[[495,13]]},"2350":{"position":[[920,13]]},"2352":{"position":[[934,13]]},"2354":{"position":[[1049,13]]}}}],["13t13:26:44z",{"_index":2550,"t":{"2356":{"position":[[1949,13]]},"2368":{"position":[[2140,13]]}}}],["13t13:26:50z",{"_index":2538,"t":{"2356":{"position":[[726,13]]},"2368":{"position":[[917,13]]}}}],["14.2",{"_index":1134,"t":{"1825":{"position":[[1006,4]]}}}],["1500",{"_index":448,"t":{"1691":{"position":[[242,4]]}}}],["16",{"_index":1733,"t":{"1989":{"position":[[199,2],[223,2]]},"1995":{"position":[[268,2],[314,2]]}}}],["1600",{"_index":2394,"t":{"2225":{"position":[[412,4]]},"2227":{"position":[[393,4]]},"2245":{"position":[[406,4]]},"2298":{"position":[[378,4]]}}}],["1616",{"_index":2393,"t":{"2225":{"position":[[407,4]]},"2227":{"position":[[388,4]]},"2245":{"position":[[401,4]]},"2298":{"position":[[373,4]]}}}],["1:/etc/rancher/k3s/k3s.yaml",{"_index":534,"t":{"1708":{"position":[[619,27]]}}}],["1:2379,https://etcd",{"_index":1143,"t":{"1829":{"position":[[1164,19]]}}}],["1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d",{"_index":2421,"t":{"2225":{"position":[[2480,64]]},"2227":{"position":[[2461,64]]},"2245":{"position":[[2474,64]]},"2298":{"position":[[2446,64]]}}}],["1s",{"_index":1095,"t":{"1811":{"position":[[1351,3]]}}}],["2",{"_index":915,"t":{"1760":{"position":[[627,1],[1306,1]]},"1802":{"position":[[226,1]]},"1842":{"position":[[33,1]]},"1945":{"position":[[1491,1]]},"1981":{"position":[[146,1]]},"1989":{"position":[[150,1]]},"1995":{"position":[[221,1],[243,1]]},"2001":{"position":[[570,1]]},"2163":{"position":[[1313,2]]}}}],["2.1",{"_index":2355,"t":{"2200":{"position":[[836,6],[1755,6]]},"2271":{"position":[[966,6],[1885,6]]},"2306":{"position":[[860,6],[1779,6],[2090,3]]},"2308":{"position":[[749,6],[1668,6]]},"2310":{"position":[[774,6],[1693,6]]},"2312":{"position":[[926,6],[1845,6]]},"2314":{"position":[[752,6],[1671,6]]},"2316":{"position":[[784,6],[1703,6]]},"2318":{"position":[[883,6],[1802,6]]}}}],["2.2",{"_index":2359,"t":{"2200":{"position":[[965,6],[1794,6]]},"2271":{"position":[[1095,6],[1924,6]]},"2306":{"position":[[989,6],[1818,6]]},"2308":{"position":[[878,6],[1707,6],[1979,3]]},"2310":{"position":[[903,6],[1732,6]]},"2312":{"position":[[1055,6],[1884,6]]},"2314":{"position":[[881,6],[1710,6]]},"2316":{"position":[[913,6],[1742,6]]},"2318":{"position":[[1012,6],[1841,6]]}}}],["2.3",{"_index":2360,"t":{"2200":{"position":[[1089,6],[1834,6]]},"2271":{"position":[[1219,6],[1964,6]]},"2306":{"position":[[1113,6],[1858,6]]},"2308":{"position":[[1002,6],[1747,6]]},"2310":{"position":[[1027,6],[1772,6],[2004,3]]},"2312":{"position":[[1179,6],[1924,6]]},"2314":{"position":[[1005,6],[1750,6]]},"2316":{"position":[[1037,6],[1782,6]]},"2318":{"position":[[1136,6],[1881,6]]}}}],["2.4",{"_index":2361,"t":{"2200":{"position":[[1165,6],[1856,6]]},"2271":{"position":[[1295,6],[1986,6]]},"2306":{"position":[[1189,6],[1880,6]]},"2308":{"position":[[1078,6],[1769,6]]},"2310":{"position":[[1103,6],[1794,6]]},"2312":{"position":[[1255,6],[1946,6],[2156,3]]},"2314":{"position":[[1081,6],[1772,6]]},"2316":{"position":[[1113,6],[1804,6]]},"2318":{"position":[[1212,6],[1903,6]]}}}],["2.5",{"_index":2362,"t":{"2200":{"position":[[1292,6],[1905,6]]},"2271":{"position":[[1422,6],[2035,6]]},"2306":{"position":[[1316,6],[1929,6]]},"2308":{"position":[[1205,6],[1818,6]]},"2310":{"position":[[1230,6],[1843,6]]},"2312":{"position":[[1382,6],[1995,6]]},"2314":{"position":[[1208,6],[1821,6],[1982,3]]},"2316":{"position":[[1240,6],[1853,6]]},"2318":{"position":[[1339,6],[1952,6]]}}}],["2.6",{"_index":2363,"t":{"2200":{"position":[[1414,6],[1945,6]]},"2271":{"position":[[1544,6],[2075,6]]},"2306":{"position":[[1438,6],[1969,6]]},"2308":{"position":[[1327,6],[1858,6]]},"2310":{"position":[[1352,6],[1883,6]]},"2312":{"position":[[1504,6],[2035,6]]},"2314":{"position":[[1330,6],[1861,6]]},"2316":{"position":[[1362,6],[1893,6],[2014,3]]},"2318":{"position":[[1461,6],[1992,6]]}}}],["2.7",{"_index":2364,"t":{"2200":{"position":[[1495,6],[1983,6]]},"2271":{"position":[[1625,6],[2113,6]]},"2306":{"position":[[1519,6],[2007,6]]},"2308":{"position":[[1408,6],[1896,6]]},"2310":{"position":[[1433,6],[1921,6]]},"2312":{"position":[[1585,6],[2073,6]]},"2314":{"position":[[1411,6],[1899,6]]},"2316":{"position":[[1443,6],[1931,6]]},"2318":{"position":[[1542,6],[2030,6],[2113,3]]}}}],["2/2",{"_index":280,"t":{"1675":{"position":[[856,3]]}}}],["20",{"_index":1877,"t":{"2055":{"position":[[549,3],[630,3]]},"2067":{"position":[[235,3]]},"2069":{"position":[[235,3]]}}}],["20.04",{"_index":1911,"t":{"2063":{"position":[[11,5]]}}}],["2021",{"_index":916,"t":{"1760":{"position":[[691,4]]}}}],["2022",{"_index":481,"t":{"1700":{"position":[[341,4]]},"1945":{"position":[[2137,4]]}}}],["2023",{"_index":685,"t":{"1740":{"position":[[1494,4]]},"1810":{"position":[[130,4]]}}}],["2048",{"_index":801,"t":{"1748":{"position":[[926,4]]}}}],["21.10",{"_index":519,"t":{"1706":{"position":[[423,7]]}}}],["2318",{"_index":2401,"t":{"2225":{"position":[[621,4]]},"2227":{"position":[[602,4]]},"2245":{"position":[[615,4]]},"2298":{"position":[[587,4]]}}}],["2341",{"_index":2408,"t":{"2225":{"position":[[903,4]]},"2227":{"position":[[884,4]]},"2245":{"position":[[897,4]]},"2298":{"position":[[869,4]]}}}],["2379",{"_index":1710,"t":{"1983":{"position":[[773,4]]},"1985":{"position":[[49,4]]}}}],["2380",{"_index":1711,"t":{"1983":{"position":[[782,5]]},"1985":{"position":[[54,4]]}}}],["24h0m0",{"_index":1099,"t":{"1811":{"position":[[1417,8]]}}}],["250",{"_index":1732,"t":{"1989":{"position":[[193,3]]},"1995":{"position":[[262,3]]},"2067":{"position":[[430,3]]},"2069":{"position":[[395,3]]}}}],["256",{"_index":1873,"t":{"2055":{"position":[[487,3],[493,3],[703,3],[709,3]]},"2071":{"position":[[160,3]]}}}],["279",{"_index":470,"t":{"1695":{"position":[[584,4]]}}}],["28m",{"_index":1239,"t":{"1848":{"position":[[758,3]]}}}],["2:2379,https://etcd",{"_index":1144,"t":{"1829":{"position":[[1189,19]]}}}],["2b1c8278a6a1_0",{"_index":348,"t":{"1675":{"position":[[2394,14],[2554,14]]}}}],["2gi",{"_index":2241,"t":{"2141":{"position":[[187,3]]},"2147":{"position":[[169,3]]}}}],["2m",{"_index":1096,"t":{"1811":{"position":[[1355,3]]}}}],["2wz97",{"_index":283,"t":{"1675":{"position":[[905,5]]}}}],["2wz97_kube",{"_index":307,"t":{"1675":{"position":[[1476,10],[1793,10]]}}}],["3",{"_index":795,"t":{"1748":{"position":[[787,2]]},"1750":{"position":[[1269,1]]},"1880":{"position":[[177,1],[251,4]]},"1945":{"position":[[43,1]]},"2163":{"position":[[1397,2]]}}}],["3.00",{"_index":1868,"t":{"2055":{"position":[[279,4],[383,4],[465,4]]},"2067":{"position":[[226,4]]},"2069":{"position":[[226,4]]},"2071":{"position":[[114,4]]}}}],["3.5.4",{"_index":1127,"t":{"1825":{"position":[[900,6]]}}}],["30",{"_index":2178,"t":{"2111":{"position":[[54,2],[114,2],[239,2]]},"2261":{"position":[[195,2]]}}}],["300",{"_index":1293,"t":{"1876":{"position":[[1223,3]]}}}],["30000",{"_index":986,"t":{"1782":{"position":[[219,6]]},"1794":{"position":[[1682,6]]}}}],["3117",{"_index":477,"t":{"1700":{"position":[[128,6]]}}}],["3199",{"_index":2410,"t":{"2225":{"position":[[1185,4]]},"2227":{"position":[[1166,4]]},"2245":{"position":[[1179,4]]},"2298":{"position":[[1151,4]]}}}],["32",{"_index":1736,"t":{"1989":{"position":[[226,2],[246,2]]},"1995":{"position":[[294,2]]}}}],["32767",{"_index":987,"t":{"1782":{"position":[[226,6]]},"1794":{"position":[[1689,7]]},"2231":{"position":[[2651,5]]},"2233":{"position":[[2599,5]]},"2235":{"position":[[2468,5]]},"2237":{"position":[[2417,5]]},"2239":{"position":[[2430,5]]},"2241":{"position":[[2543,5]]},"2243":{"position":[[2504,5]]},"2247":{"position":[[2577,5]]},"2249":{"position":[[2558,5]]},"2251":{"position":[[2454,5]]},"2253":{"position":[[2570,5]]},"2255":{"position":[[2435,5]]},"2257":{"position":[[2350,5]]},"2267":{"position":[[2525,5]]},"2273":{"position":[[2567,5]]},"2275":{"position":[[2483,5]]},"2277":{"position":[[2489,5]]},"2350":{"position":[[2834,5]]},"2352":{"position":[[2848,5]]},"2354":{"position":[[2963,5]]}}}],["365",{"_index":225,"t":{"1669":{"position":[[29,4]]},"1736":{"position":[[49,3]]}}}],["3923",{"_index":2412,"t":{"2225":{"position":[[1467,4]]},"2227":{"position":[[1448,4]]},"2245":{"position":[[1461,4]]},"2298":{"position":[[1433,4]]}}}],["3:2379",{"_index":1145,"t":{"1829":{"position":[[1214,6]]}}}],["3e4d34729602",{"_index":286,"t":{"1675":{"position":[[1027,12]]}}}],["3h",{"_index":1097,"t":{"1811":{"position":[[1359,4]]}}}],["4",{"_index":1057,"t":{"1802":{"position":[[228,1]]},"1840":{"position":[[584,1]]},"1989":{"position":[[152,1],[174,1]]},"1995":{"position":[[266,1]]},"2063":{"position":[[60,1],[100,1],[112,1]]},"2163":{"position":[[1645,2]]}}}],["4.2.1",{"_index":2130,"t":{"2101":{"position":[[3088,5]]}}}],["4.2.10",{"_index":2163,"t":{"2101":{"position":[[4281,6],[4360,6]]}}}],["4.2.2",{"_index":2133,"t":{"2101":{"position":[[3161,5]]}}}],["4.2.3",{"_index":2136,"t":{"2101":{"position":[[3252,5]]}}}],["4.2.4",{"_index":2157,"t":{"2101":{"position":[[4093,5]]}}}],["4.2.6",{"_index":2156,"t":{"2101":{"position":[[4066,5]]}}}],["400",{"_index":2522,"t":{"2341":{"position":[[317,5]]}}}],["410a",{"_index":346,"t":{"1675":{"position":[[2384,4],[2544,4]]}}}],["4206",{"_index":310,"t":{"1675":{"position":[[1508,4],[1825,4]]}}}],["43",{"_index":281,"t":{"1675":{"position":[[870,3],[925,3]]}}}],["4367",{"_index":2544,"t":{"2356":{"position":[[1506,4]]},"2368":{"position":[[1697,4]]}}}],["436b85c5e38d",{"_index":303,"t":{"1675":{"position":[[1348,12]]}}}],["440",{"_index":2521,"t":{"2341":{"position":[[297,5]]}}}],["443",{"_index":1807,"t":{"2027":{"position":[[133,4]]},"2039":{"position":[[337,4],[462,4]]}}}],["443_svclb",{"_index":293,"t":{"1675":{"position":[[1110,9]]}}}],["444",{"_index":2520,"t":{"2341":{"position":[[277,5]]}}}],["4454d14e4d3f",{"_index":339,"t":{"1675":{"position":[[2236,12]]}}}],["4559",{"_index":2414,"t":{"2225":{"position":[[1749,4]]},"2227":{"position":[[1730,4]]},"2245":{"position":[[1743,4]]},"2298":{"position":[[1715,4]]}}}],["4647",{"_index":2417,"t":{"2225":{"position":[[2031,4]]},"2227":{"position":[[2012,4]]},"2245":{"position":[[2025,4]]},"2298":{"position":[[1997,4]]}}}],["47ef",{"_index":336,"t":{"1675":{"position":[[2211,4]]}}}],["48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9",{"_index":2418,"t":{"2225":{"position":[[2198,64]]},"2227":{"position":[[2179,64]]},"2245":{"position":[[2192,64]]},"2298":{"position":[[2164,64]]}}}],["4b1fddbe6ca6",{"_index":351,"t":{"1675":{"position":[[2569,12]]}}}],["4bea",{"_index":326,"t":{"1675":{"position":[[2028,4],[2719,4]]}}}],["4c10",{"_index":2553,"t":{"2356":{"position":[[2729,4]]},"2368":{"position":[[2920,4]]}}}],["4c7e",{"_index":297,"t":{"1675":{"position":[[1160,4],[1323,4],[1664,4]]}}}],["4fb1",{"_index":345,"t":{"1675":{"position":[[2379,4],[2539,4]]}}}],["4k",{"_index":1674,"t":{"1977":{"position":[[127,2]]}}}],["5",{"_index":36,"t":{"1638":{"position":[[111,3]]},"1750":{"position":[[261,1],[2139,1],[2149,3],[2254,2],[4775,4]]},"1756":{"position":[[563,2],[1551,2]]},"1767":{"position":[[874,1],[885,2],[993,2]]},"1794":{"position":[[4739,1],[4750,3],[4864,2]]},"2055":{"position":[[474,2]]},"2067":{"position":[[436,1]]},"2069":{"position":[[401,1]]},"2071":{"position":[[64,2]]},"2163":{"position":[[1782,2]]},"2200":{"position":[[858,1],[987,1],[1187,1],[1314,1]]},"2271":{"position":[[988,1],[1117,1],[1317,1],[1444,1]]},"2306":{"position":[[882,1],[1011,1],[1211,1],[1338,1]]},"2308":{"position":[[771,1],[900,1],[1100,1],[1227,1]]},"2310":{"position":[[796,1],[925,1],[1125,1],[1252,1]]},"2312":{"position":[[948,1],[1077,1],[1277,1],[1404,1]]},"2314":{"position":[[774,1],[903,1],[1103,1],[1230,1]]},"2316":{"position":[[806,1],[935,1],[1135,1],[1262,1]]},"2318":{"position":[[905,1],[1034,1],[1234,1],[1361,1]]}}}],["5.2",{"_index":1990,"t":{"2093":{"position":[[1296,3]]}}}],["5.2.1",{"_index":1992,"t":{"2093":{"position":[[1475,5]]}}}],["5.2.2",{"_index":2007,"t":{"2093":{"position":[[1787,5]]}}}],["5.2.3",{"_index":2005,"t":{"2093":{"position":[[1758,5]]}}}],["5.2.4",{"_index":2003,"t":{"2093":{"position":[[1729,5]]}}}],["5.2.5",{"_index":1994,"t":{"2093":{"position":[[1521,5]]}}}],["5.2.6",{"_index":2010,"t":{"2093":{"position":[[1837,5]]}}}],["5.2.7/8/9",{"_index":1996,"t":{"2093":{"position":[[1561,9]]}}}],["5.7",{"_index":1128,"t":{"1825":{"position":[[925,4]]}}}],["50",{"_index":1921,"t":{"2067":{"position":[[427,2]]},"2069":{"position":[[392,2]]}}}],["500",{"_index":1735,"t":{"1989":{"position":[[219,3],[241,4]]},"1995":{"position":[[288,3],[309,4]]},"2067":{"position":[[395,3]]},"2069":{"position":[[360,3]]}}}],["51",{"_index":268,"t":{"1675":{"position":[[645,3],[707,3],[766,3],[820,3]]}}}],["512",{"_index":1689,"t":{"1981":{"position":[[158,3]]},"2055":{"position":[[406,3],[644,3]]},"2069":{"position":[[372,3]]}}}],["515",{"_index":387,"t":{"1681":{"position":[[238,3],[258,3]]}}}],["51820",{"_index":1705,"t":{"1983":{"position":[[173,5]]},"1985":{"position":[[291,5]]}}}],["51821",{"_index":1706,"t":{"1983":{"position":[[183,5]]},"1985":{"position":[[367,5]]}}}],["53",{"_index":2041,"t":{"2095":{"position":[[810,2],[835,2]]}}}],["5489f84d5d",{"_index":1510,"t":{"1939":{"position":[[871,10]]}}}],["5497",{"_index":2543,"t":{"2356":{"position":[[1501,4]]},"2368":{"position":[[1692,4]]}}}],["5h39m",{"_index":1749,"t":{"2001":{"position":[[540,5],[599,5]]}}}],["5m0",{"_index":960,"t":{"1767":{"position":[[1724,5]]},"1794":{"position":[[5683,5]]}}}],["6",{"_index":2395,"t":{"2225":{"position":[[417,1]]},"2227":{"position":[[398,1]]},"2245":{"position":[[411,1]]},"2298":{"position":[[383,1]]}}}],["6.4",{"_index":554,"t":{"1715":{"position":[[194,5]]}}}],["60",{"_index":2190,"t":{"2117":{"position":[[244,2],[411,2],[643,2]]}}}],["600",{"_index":971,"t":{"1771":{"position":[[298,4]]},"1910":{"position":[[534,3]]},"2204":{"position":[[148,3]]},"2220":{"position":[[141,3]]},"2341":{"position":[[250,5],[268,5],[374,3]]}}}],["620c90a6c1c1_0",{"_index":328,"t":{"1675":{"position":[[2038,14],[2729,14]]}}}],["64",{"_index":1738,"t":{"1989":{"position":[[249,2]]},"1995":{"position":[[317,2]]}}}],["640",{"_index":2519,"t":{"2341":{"position":[[230,5]]}}}],["644",{"_index":972,"t":{"1771":{"position":[[324,3]]},"1906":{"position":[[639,3]]},"1912":{"position":[[535,3]]},"2180":{"position":[[148,3]]},"2184":{"position":[[148,3]]},"2188":{"position":[[148,3]]},"2192":{"position":[[148,3]]},"2196":{"position":[[148,3]]},"2208":{"position":[[138,3],[369,4],[383,3]]},"2212":{"position":[[138,3],[379,4],[393,3]]},"2218":{"position":[[141,3]]},"2329":{"position":[[146,3]]},"2333":{"position":[[136,3],[380,3],[384,3]]},"2337":{"position":[[136,3],[271,5],[289,5],[311,3],[315,3]]},"2341":{"position":[[114,3],[210,5],[370,3]]},"2345":{"position":[[130,3]]}}}],["6443",{"_index":415,"t":{"1687":{"position":[[172,4]]},"1776":{"position":[[97,4]]},"1794":{"position":[[826,5]]},"1983":{"position":[[26,4]]},"1985":{"position":[[119,4]]}}}],["6443/tcp",{"_index":504,"t":{"1704":{"position":[[100,8]]}}}],["6443:6443",{"_index":528,"t":{"1708":{"position":[[387,9]]}}}],["6444",{"_index":125,"t":{"1648":{"position":[[683,5]]},"1662":{"position":[[1939,5]]},"1794":{"position":[[9041,5]]}}}],["6488",{"_index":423,"t":{"1687":{"position":[[588,6]]}}}],["64d3517d4a95",{"_index":353,"t":{"1675":{"position":[[2744,12]]}}}],["64ffb68fd",{"_index":1507,"t":{"1939":{"position":[[810,9]]}}}],["65535",{"_index":2015,"t":{"2093":{"position":[[1929,5],[1984,5],[3014,5],[3069,5],[3427,5],[3901,5]]}}}],["6610",{"_index":2419,"t":{"2225":{"position":[[2313,4]]},"2227":{"position":[[2294,4]]},"2245":{"position":[[2307,4]]},"2298":{"position":[[2279,4]]}}}],["6ad9",{"_index":325,"t":{"1675":{"position":[[2023,4],[2714,4]]}}}],["6b82a38edd8f",{"_index":2555,"t":{"2356":{"position":[[2739,12]]},"2368":{"position":[[2930,12]]}}}],["6d59f47c7",{"_index":265,"t":{"1675":{"position":[[615,9],[1986,9],[2677,9]]}}}],["700",{"_index":2058,"t":{"2097":{"position":[[416,3]]},"2200":{"position":[[242,3],[1693,7],[2090,5],[2108,5],[2130,3]]},"2271":{"position":[[1823,7]]},"2306":{"position":[[1717,7]]},"2308":{"position":[[1606,7]]},"2310":{"position":[[1631,7]]},"2312":{"position":[[1783,7]]},"2314":{"position":[[1609,7]]},"2316":{"position":[[1641,7]]},"2318":{"position":[[1740,7]]}}}],["74",{"_index":1509,"t":{"1939":{"position":[[840,3],[902,3],[956,3]]}}}],["7566d596c8",{"_index":270,"t":{"1675":{"position":[[676,10],[2168,10]]}}}],["758cd5fc85",{"_index":282,"t":{"1675":{"position":[[894,10],[1465,10],[1782,10]]}}}],["76",{"_index":553,"t":{"1715":{"position":[[170,4]]}}}],["768",{"_index":1870,"t":{"2055":{"position":[[302,3],[412,3],[563,3],[650,3]]},"2067":{"position":[[407,3]]},"2069":{"position":[[406,3]]}}}],["777",{"_index":1420,"t":{"1910":{"position":[[588,3],[694,3]]}}}],["7c6a30aeeb2f",{"_index":316,"t":{"1675":{"position":[[1689,12]]}}}],["7c9ca4fb39e7_0",{"_index":312,"t":{"1675":{"position":[[1518,14],[1835,14]]}}}],["7zwkt",{"_index":1511,"t":{"1939":{"position":[[882,5]]}}}],["8",{"_index":1731,"t":{"1989":{"position":[[176,1],[197,1]]},"1995":{"position":[[245,1],[292,1]]},"2063":{"position":[[68,1],[120,1]]}}}],["8.0",{"_index":1129,"t":{"1825":{"position":[[934,3]]}}}],["80",{"_index":418,"t":{"1687":{"position":[[251,3]]},"1717":{"position":[[604,2]]},"2027":{"position":[[129,3]]},"2033":{"position":[[437,4],[491,3]]},"2143":{"position":[[235,2]]},"2149":{"position":[[235,2]]}}}],["8080",{"_index":420,"t":{"1687":{"position":[[277,5],[290,5]]}}}],["80_svclb",{"_index":302,"t":{"1675":{"position":[[1274,8]]}}}],["8124m",{"_index":1867,"t":{"2055":{"position":[[268,5],[372,5],[454,5]]},"2067":{"position":[[215,5]]},"2069":{"position":[[215,5]]},"2071":{"position":[[103,5]]}}}],["8472",{"_index":1704,"t":{"1983":{"position":[[123,4],[996,5]]},"1985":{"position":[[184,4]]}}}],["85cb69466",{"_index":1512,"t":{"1939":{"position":[[926,9]]}}}],["8655855d6",{"_index":276,"t":{"1675":{"position":[[790,9],[2342,9],[2502,9]]}}}],["896",{"_index":1872,"t":{"2055":{"position":[[308,3],[569,3]]},"2067":{"position":[[441,3]]}}}],["897ce3c5fc8f",{"_index":287,"t":{"1675":{"position":[[1040,12]]}}}],["89f5",{"_index":2552,"t":{"2356":{"position":[[2724,4]]},"2368":{"position":[[2915,4]]}}}],["8c7f",{"_index":2554,"t":{"2356":{"position":[[2734,4]]},"2368":{"position":[[2925,4]]}}}],["8d7a",{"_index":298,"t":{"1675":{"position":[[1165,4],[1328,4],[1669,4]]}}}],["8e7ac18f9cb0_0",{"_index":299,"t":{"1675":{"position":[[1170,14],[1333,14],[1674,14]]}}}],["8e82",{"_index":347,"t":{"1675":{"position":[[2389,4],[2549,4]]}}}],["9",{"_index":1489,"t":{"1933":{"position":[[1236,4],[1269,4],[1288,8]]}}}],["90",{"_index":226,"t":{"1669":{"position":[[56,3]]},"1736":{"position":[[132,2]]}}}],["90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528",{"_index":2411,"t":{"2225":{"position":[[1352,64]]},"2227":{"position":[[1333,64]]},"2245":{"position":[[1346,64]]},"2298":{"position":[[1318,64]]}}}],["95th",{"_index":1908,"t":{"2061":{"position":[[625,4]]}}}],["98604672",{"_index":2535,"t":{"2356":{"position":[[686,8],[1382,8]]},"2368":{"position":[[877,8],[1573,8]]}}}],["9])?(\\\\.[a",{"_index":1491,"t":{"1933":{"position":[[1255,10]]}}}],["9]*[a",{"_index":1490,"t":{"1933":{"position":[[1246,5],[1279,5]]}}}],["9]{16",{"_index":1108,"t":{"1811":{"position":[[2024,8]]}}}],["9]{6}.[a",{"_index":1107,"t":{"1811":{"position":[[2012,8]]}}}],["9d12f9848b99",{"_index":319,"t":{"1675":{"position":[[1863,12]]}}}],["9dd718864ce6",{"_index":330,"t":{"1675":{"position":[[2066,12]]}}}],["9tnck",{"_index":271,"t":{"1675":{"position":[[687,5]]}}}],["9tnck_kube",{"_index":333,"t":{"1675":{"position":[[2179,10]]}}}],["_desired_",{"_index":1788,"t":{"2021":{"position":[[2056,9]]}}}],["a1",{"_index":2467,"t":{"2273":{"position":[[438,2]]}}}],["a70c",{"_index":2545,"t":{"2356":{"position":[[1511,4]]},"2368":{"position":[[1702,4]]}}}],["a73d",{"_index":327,"t":{"1675":{"position":[[2033,4],[2724,4]]}}}],["a88d",{"_index":337,"t":{"1675":{"position":[[2216,4]]}}}],["aarch64",{"_index":1912,"t":{"2063":{"position":[[25,7]]}}}],["aarch64/arm64",{"_index":1673,"t":{"1977":{"position":[[86,13]]}}}],["abil",{"_index":683,"t":{"1740":{"position":[[1407,7]]},"1810":{"position":[[55,7]]},"2107":{"position":[[196,7]]}}}],["abort",{"_index":1296,"t":{"1876":{"position":[[1281,6]]}}}],["abov",{"_index":759,"t":{"1744":{"position":[[942,5]]},"1760":{"position":[[1283,6]]},"1800":{"position":[[1034,6]]},"1819":{"position":[[275,7]]},"1850":{"position":[[249,6]]},"1893":{"position":[[97,5]]},"1906":{"position":[[1392,6]]},"1912":{"position":[[11,5]]},"1937":{"position":[[42,6]]},"1953":{"position":[[1010,5]]},"2093":{"position":[[2028,5],[2361,5]]},"2123":{"position":[[350,6]]},"2200":{"position":[[215,7]]},"2202":{"position":[[225,7]]}}}],["abus",{"_index":1722,"t":{"1983":{"position":[[1132,5]]}}}],["accept",{"_index":674,"t":{"1740":{"position":[[1040,11]]},"1955":{"position":[[262,9]]},"2107":{"position":[[314,8]]}}}],["access",{"_index":854,"t":{"1750":{"position":[[3189,6],[3203,6],[3507,6],[3522,6],[3849,6],[3864,6],[4640,6],[4655,6]]},"1767":{"position":[[1357,6],[1395,6]]},"1782":{"position":[[1099,6],[1368,6]]},"1794":{"position":[[5287,6],[5312,6]]},"1806":{"position":[[354,6],[416,6]]},"1840":{"position":[[689,9],[1103,6]]},"1922":{"position":[[3,6],[122,10],[300,6],[390,6]]},"1951":{"position":[[964,6],[1226,6]]},"1957":{"position":[[995,6]]},"1983":{"position":[[37,10],[615,10],[739,10],[899,8],[981,6]]},"2095":{"position":[[1041,7]]},"2097":{"position":[[316,6]]},"2107":{"position":[[207,7],[448,6],[501,6]]},"2127":{"position":[[149,7]]},"2131":{"position":[[216,6]]},"2326":{"position":[[131,6]]},"2379":{"position":[[69,6]]},"2383":{"position":[[56,6]]},"2385":{"position":[[108,6]]}}}],["accessmod",{"_index":2238,"t":{"2141":{"position":[[99,12]]},"2147":{"position":[[83,12]]}}}],["accompani",{"_index":2321,"t":{"2176":{"position":[[980,12]]}}}],["accomplish",{"_index":1352,"t":{"1898":{"position":[[40,12]]},"2077":{"position":[[193,12]]}}}],["accord",{"_index":2320,"t":{"2176":{"position":[[963,9]]}}}],["accordingli",{"_index":2270,"t":{"2159":{"position":[[677,12]]}}}],["account",{"_index":717,"t":{"1742":{"position":[[1121,7]]},"1744":{"position":[[1686,7],[1732,7]]},"1748":{"position":[[12,7],[74,7],[116,7],[213,7],[599,7]]},"1806":{"position":[[742,7]]},"2021":{"position":[[795,7],[895,7]]},"2099":{"position":[[563,7],[663,7],[1186,7],[1286,7]]},"2101":{"position":[[1573,7],[1602,7],[1682,7],[2723,7],[2814,7]]},"2119":{"position":[[26,7],[90,7],[229,7],[325,7],[376,7]]},"2131":{"position":[[28,8],[109,7],[178,7],[288,7],[363,8],[392,7],[461,7],[633,7],[680,8],[862,8]]},"2161":{"position":[[116,8]]},"2176":{"position":[[784,8]]},"2231":{"position":[[2369,7],[2439,7],[2510,7]]},"2233":{"position":[[2317,7],[2387,7],[2458,7]]},"2235":{"position":[[2186,7],[2256,7],[2327,7]]},"2237":{"position":[[2135,7],[2205,7],[2276,7]]},"2239":{"position":[[2148,7],[2218,7],[2289,7]]},"2241":{"position":[[2261,7],[2331,7],[2402,7]]},"2243":{"position":[[2222,7],[2292,7],[2363,7]]},"2247":{"position":[[2295,7],[2365,7],[2436,7]]},"2249":{"position":[[2276,7],[2346,7],[2417,7]]},"2251":{"position":[[2172,7],[2242,7],[2313,7]]},"2253":{"position":[[2288,7],[2358,7],[2429,7]]},"2255":{"position":[[2153,7],[2223,7],[2294,7]]},"2257":{"position":[[2068,7],[2138,7],[2209,7]]},"2267":{"position":[[180,7],[244,7],[449,7],[494,7],[2243,7],[2313,7],[2384,7]]},"2269":{"position":[[173,7],[235,9],[268,7]]},"2273":{"position":[[2285,7],[2355,7],[2426,7]]},"2275":{"position":[[2201,7],[2271,7],[2342,7]]},"2277":{"position":[[2207,7],[2277,7],[2348,7]]},"2288":{"position":[[1869,7],[1992,7]]},"2290":{"position":[[200,7],[342,7],[395,7],[1937,7],[2060,7]]},"2292":{"position":[[180,7],[251,9],[284,7],[434,7],[488,7],[2022,7],[2145,7]]},"2294":{"position":[[1919,7],[2042,7]]},"2350":{"position":[[2552,7],[2622,7],[2693,7]]},"2352":{"position":[[2566,7],[2636,7],[2707,7]]},"2354":{"position":[[2681,7],[2751,7],[2822,7]]},"2385":{"position":[[50,8],[194,7]]},"2387":{"position":[[68,8],[112,7]]}}}],["acct",{"_index":1805,"t":{"2021":{"position":[[3279,4]]},"2093":{"position":[[5312,4]]}}}],["achiev",{"_index":1601,"t":{"1957":{"position":[[157,7]]},"1983":{"position":[[670,9]]}}}],["action",{"_index":2170,"t":{"2107":{"position":[[145,7]]},"2381":{"position":[[121,8]]}}}],["activ",{"_index":909,"t":{"1760":{"position":[[317,6],[629,6],[1553,7],[1652,6]]},"1937":{"position":[[196,8]]},"2109":{"position":[[181,10]]},"2125":{"position":[[508,8]]},"2131":{"position":[[45,8]]}}}],["actual",{"_index":1085,"t":{"1811":{"position":[[552,6]]},"2119":{"position":[[271,8]]},"2200":{"position":[[352,8]]},"2271":{"position":[[482,8]]},"2306":{"position":[[376,8]]},"2308":{"position":[[265,8]]},"2310":{"position":[[290,8]]},"2312":{"position":[[442,8]]},"2314":{"position":[[268,8]]},"2316":{"position":[[300,8]]},"2318":{"position":[[399,8]]}}}],["ad",{"_index":179,"t":{"1660":{"position":[[209,5]]},"1750":{"position":[[2810,5]]},"1754":{"position":[[173,6]]},"1838":{"position":[[355,6]]},"1842":{"position":[[377,5],[1014,6]]},"1900":{"position":[[907,5]]},"2003":{"position":[[13,5]]},"2075":{"position":[[624,6]]},"2081":{"position":[[135,6]]},"2085":{"position":[[814,6]]},"2097":{"position":[[1098,5]]},"2412":{"position":[[202,6]]}}}],["add",{"_index":174,"t":{"1660":{"position":[[82,4],[142,3],[313,3],[584,3]]},"1702":{"position":[[121,3],[192,3],[264,3]]},"1719":{"position":[[71,3]]},"1776":{"position":[[364,3]]},"1794":{"position":[[1138,3]]},"1840":{"position":[[962,4]]},"1844":{"position":[[155,3]]},"1850":{"position":[[211,3],[590,3]]},"1895":{"position":[[249,3]]},"1953":{"position":[[337,3]]},"1957":{"position":[[465,3]]},"1975":{"position":[[311,3]]},"2003":{"position":[[125,3]]},"2089":{"position":[[320,3]]},"2370":{"position":[[85,3]]},"2396":{"position":[[26,3]]},"2398":{"position":[[26,3]]},"2400":{"position":[[26,3]]},"2402":{"position":[[26,3]]},"2404":{"position":[[26,3]]},"2408":{"position":[[26,3]]},"2414":{"position":[[26,3]]},"2416":{"position":[[26,3]]},"2418":{"position":[[26,3]]}}}],["addit",{"_index":122,"t":{"1648":{"position":[[577,10]]},"1662":{"position":[[1833,10]]},"1740":{"position":[[802,10]]},"1750":{"position":[[4463,10],[4810,10]]},"1776":{"position":[[368,10]]},"1794":{"position":[[1142,10],[8935,10]]},"1804":{"position":[[83,10]]},"1817":{"position":[[88,8]]},"1840":{"position":[[970,10]]},"1842":{"position":[[55,10],[341,10]]},"1848":{"position":[[258,10],[947,10],[991,10]]},"1850":{"position":[[215,10]]},"1895":{"position":[[253,10]]},"1908":{"position":[[45,8]]},"1933":{"position":[[14,10],[1345,10]]},"1937":{"position":[[52,8],[79,10]]},"1945":{"position":[[445,10],[527,10],[1357,10],[1645,10],[1909,10]]},"1953":{"position":[[1448,10]]},"1979":{"position":[[166,10]]},"1985":{"position":[[483,10],[564,10]]},"1999":{"position":[[277,10],[378,10]]},"2061":{"position":[[379,10]]},"2075":{"position":[[278,10],[631,10]]},"2093":{"position":[[2219,10],[2249,10],[6425,9]]},"2095":{"position":[[2695,10]]},"2101":{"position":[[4367,10]]},"2163":{"position":[[152,10]]},"2310":{"position":[[2245,10],[2485,10],[2725,10]]},"2316":{"position":[[2290,10]]}}}],["addition",{"_index":1351,"t":{"1895":{"position":[[1288,12]]}}}],["additionalloggingsources.k3s.enabled=tru",{"_index":589,"t":{"1719":{"position":[[324,41]]}}}],["addon",{"_index":1456,"t":{"1929":{"position":[[334,5],[510,6]]},"1931":{"position":[[68,6],[272,5]]},"1933":{"position":[[79,6],[341,5],[1356,5],[1495,5]]},"1937":{"position":[[4,6],[64,6],[185,6]]},"1939":{"position":[[263,5]]}}}],["addon.k3s.cattle.io",{"_index":1476,"t":{"1933":{"position":[[929,19]]}}}],["address",{"_index":145,"t":{"1652":{"position":[[71,7],[142,7]]},"1662":{"position":[[2687,9],[2785,9]]},"1776":{"position":[[32,7],[63,7],[132,7],[176,7],[402,9]]},"1782":{"position":[[697,9],[1281,10],[1630,10],[1887,10]]},"1794":{"position":[[700,7],[734,7],[844,7],[874,7],[1176,9],[2237,9],[7748,9],[7846,9]]},"1832":{"position":[[705,7],[945,8]]},"1840":{"position":[[644,9]]},"1945":{"position":[[1153,9]]},"1953":{"position":[[198,9]]},"1957":{"position":[[1052,10]]},"2057":{"position":[[36,7]]},"2085":{"position":[[149,7]]},"2103":{"position":[[209,9]]},"2225":{"position":[[854,7],[1136,7],[1418,7],[1700,7],[1982,7],[2264,7],[2546,7]]},"2227":{"position":[[835,7],[1117,7],[1399,7],[1681,7],[1963,7],[2245,7],[2527,7]]},"2231":{"position":[[1842,7]]},"2233":{"position":[[1790,7]]},"2235":{"position":[[1659,7]]},"2237":{"position":[[1608,7]]},"2239":{"position":[[1621,7]]},"2241":{"position":[[1734,7]]},"2243":{"position":[[1695,7]]},"2245":{"position":[[848,7],[1130,7],[1412,7],[1694,7],[1976,7],[2258,7],[2540,7]]},"2247":{"position":[[1768,7]]},"2249":{"position":[[1749,7]]},"2251":{"position":[[1645,7]]},"2253":{"position":[[1761,7]]},"2255":{"position":[[1626,7]]},"2257":{"position":[[1541,7]]},"2267":{"position":[[1716,7]]},"2273":{"position":[[1758,7]]},"2275":{"position":[[1674,7]]},"2277":{"position":[[1680,7]]},"2298":{"position":[[202,7],[297,8],[328,8],[820,7],[1102,7],[1384,7],[1666,7],[1948,7],[2230,7],[2512,7]]},"2303":{"position":[[184,7],[303,8],[337,8],[381,8]]},"2350":{"position":[[2025,7]]},"2352":{"position":[[2039,7]]},"2354":{"position":[[2154,7]]}}}],["address:6443",{"_index":1216,"t":{"1844":{"position":[[495,12]]}}}],["address=0.0.0.0",{"_index":2129,"t":{"2101":{"position":[[3047,15]]},"2356":{"position":[[774,15],[1997,15]]},"2368":{"position":[[965,15],[2188,15]]}}}],["address=127.0.0.1",{"_index":2078,"t":{"2101":{"position":[[326,17],[2268,17],[2320,17],[2864,17],[2889,17],[3809,17]]},"2231":{"position":[[995,17]]},"2233":{"position":[[943,17]]},"2235":{"position":[[812,17]]},"2237":{"position":[[761,17]]},"2239":{"position":[[774,17]]},"2241":{"position":[[887,17]]},"2243":{"position":[[848,17]]},"2247":{"position":[[921,17]]},"2249":{"position":[[902,17]]},"2251":{"position":[[798,17]]},"2253":{"position":[[914,17]]},"2255":{"position":[[779,17]]},"2257":{"position":[[694,17]]},"2267":{"position":[[869,17]]},"2273":{"position":[[911,17],[3052,17]]},"2275":{"position":[[827,17]]},"2277":{"position":[[833,17]]},"2288":{"position":[[723,17]]},"2290":{"position":[[791,17]]},"2292":{"position":[[876,17]]},"2294":{"position":[[773,17]]},"2301":{"position":[[644,17]]},"2303":{"position":[[718,17]]},"2350":{"position":[[1178,17]]},"2352":{"position":[[1192,17]]},"2354":{"position":[[1307,17]]},"2356":{"position":[[1326,17],[2549,17]]},"2368":{"position":[[1517,17],[2740,17]]}}}],["address=172.31.0.140",{"_index":2438,"t":{"2231":{"position":[[802,20]]},"2233":{"position":[[750,20]]},"2235":{"position":[[619,20]]},"2237":{"position":[[568,20]]},"2239":{"position":[[581,20]]},"2241":{"position":[[694,20]]},"2243":{"position":[[655,20]]},"2247":{"position":[[728,20]]},"2249":{"position":[[709,20]]},"2251":{"position":[[605,20]]},"2253":{"position":[[721,20]]},"2255":{"position":[[586,20]]},"2257":{"position":[[501,20]]},"2267":{"position":[[676,20]]},"2273":{"position":[[718,20]]},"2275":{"position":[[634,20]]},"2277":{"position":[[640,20]]},"2350":{"position":[[985,20]]},"2352":{"position":[[999,20]]},"2354":{"position":[[1114,20]]}}}],["adher",{"_index":1468,"t":{"1933":{"position":[[543,6]]}}}],["adjust",{"_index":2324,"t":{"2176":{"position":[[1866,6]]}}}],["admin",{"_index":641,"t":{"1738":{"position":[[384,6]]},"1771":{"position":[[116,5]]},"1794":{"position":[[2554,5]]},"1918":{"position":[[15,5],[225,5],[380,5],[468,5],[513,5],[567,5]]},"1920":{"position":[[86,5],[154,5]]},"1922":{"position":[[259,5]]},"2377":{"position":[[74,5],[301,5]]}}}],["administr",{"_index":1062,"t":{"1804":{"position":[[143,14]]},"1806":{"position":[[402,13]]},"1821":{"position":[[107,13]]},"1918":{"position":[[58,14]]},"2109":{"position":[[239,14]]}}}],["admiss",{"_index":1763,"t":{"2021":{"position":[[282,10],[490,10]]},"2085":{"position":[[858,9]]},"2091":{"position":[[537,9]]},"2093":{"position":[[73,10],[1030,9]]},"2099":{"position":[[258,10],[863,9]]},"2101":{"position":[[484,9]]},"2105":{"position":[[16,9],[86,9],[495,9]]},"2107":{"position":[[16,9],[594,9]]},"2227":{"position":[[192,9],[290,9],[333,9]]},"2231":{"position":[[1234,9]]},"2233":{"position":[[1182,9]]},"2235":{"position":[[1051,9]]},"2237":{"position":[[1000,9]]},"2239":{"position":[[1013,9]]},"2241":{"position":[[248,9],[291,9],[453,9],[499,9],[1126,9]]},"2243":{"position":[[172,9],[360,9],[406,9],[466,9],[1087,9]]},"2245":{"position":[[162,9],[228,9],[350,9]]},"2247":{"position":[[162,9],[277,9],[426,9],[472,9],[530,9],[1160,9]]},"2249":{"position":[[261,9],[476,9],[520,9],[1141,9]]},"2251":{"position":[[163,9],[372,9],[416,9],[1037,9]]},"2253":{"position":[[255,9],[334,9],[479,9],[525,9],[1153,9]]},"2255":{"position":[[1018,9]]},"2257":{"position":[[933,9]]},"2267":{"position":[[1108,9]]},"2273":{"position":[[1150,9]]},"2275":{"position":[[1066,9]]},"2277":{"position":[[1072,9]]},"2350":{"position":[[1417,9]]},"2352":{"position":[[1431,9]]},"2354":{"position":[[1546,9]]},"2394":{"position":[[58,9]]},"2396":{"position":[[113,9]]},"2398":{"position":[[113,9]]},"2400":{"position":[[113,9]]},"2402":{"position":[[113,9]]},"2404":{"position":[[113,9]]},"2408":{"position":[[113,9]]},"2412":{"position":[[233,9]]},"2414":{"position":[[113,9]]},"2416":{"position":[[113,9]]},"2418":{"position":[[113,9]]}}}],["admissionconfigur",{"_index":1782,"t":{"2021":{"position":[[1263,22]]},"2093":{"position":[[457,22]]}}}],["advanc",{"_index":1369,"t":{"1902":{"position":[[126,8]]},"1922":{"position":[[283,9]]},"2159":{"position":[[421,8]]}}}],["advertis",{"_index":146,"t":{"1652":{"position":[[82,9],[153,9]]},"1662":{"position":[[2700,9],[2798,9]]},"1776":{"position":[[122,9],[207,9],[245,9],[308,9]]},"1794":{"position":[[834,9],[905,9],[979,9],[1039,9],[7761,9],[7859,9]]},"1955":{"position":[[100,13]]},"2101":{"position":[[189,9]]},"2231":{"position":[[792,9],[825,9]]},"2233":{"position":[[740,9],[773,9]]},"2235":{"position":[[609,9],[642,9]]},"2237":{"position":[[558,9],[591,9]]},"2239":{"position":[[571,9],[604,9]]},"2241":{"position":[[684,9],[717,9]]},"2243":{"position":[[645,9],[678,9]]},"2247":{"position":[[718,9],[751,9]]},"2249":{"position":[[699,9],[732,9]]},"2251":{"position":[[595,9],[628,9]]},"2253":{"position":[[711,9],[744,9]]},"2255":{"position":[[576,9],[609,9]]},"2257":{"position":[[491,9],[524,9]]},"2267":{"position":[[666,9],[699,9]]},"2273":{"position":[[708,9],[741,9]]},"2275":{"position":[[624,9],[657,9]]},"2277":{"position":[[630,9],[663,9]]},"2350":{"position":[[975,9],[1008,9]]},"2352":{"position":[[989,9],[1022,9]]},"2354":{"position":[[1104,9],[1137,9]]}}}],["ae",{"_index":911,"t":{"1760":{"position":[[361,3],[673,3],[712,3],[1752,3]]},"2079":{"position":[[169,3]]}}}],["ae6c58cab4a7",{"_index":318,"t":{"1675":{"position":[[1850,12]]}}}],["aes256",{"_index":660,"t":{"1740":{"position":[[552,6]]}}}],["aescbc",{"_index":1944,"t":{"2079":{"position":[[717,9]]},"2123":{"position":[[205,9]]},"2281":{"position":[[122,7],[187,6]]}}}],["aescbckey",{"_index":913,"t":{"1760":{"position":[[369,9],[681,9],[720,9]]},"2079":{"position":[[749,12]]}}}],["affect",{"_index":1515,"t":{"1939":{"position":[[1081,8]]},"2109":{"position":[[202,8]]}}}],["aforement",{"_index":1855,"t":{"2053":{"position":[[2376,14]]}}}],["ag",{"_index":262,"t":{"1675":{"position":[[576,3]]},"1848":{"position":[[706,3]]},"1939":{"position":[[771,3]]},"2001":{"position":[[504,3]]}}}],["again",{"_index":182,"t":{"1660":{"position":[[247,5]]},"1750":{"position":[[1164,5],[1750,6],[1801,5]]},"1811":{"position":[[844,6]]},"1898":{"position":[[491,5]]}}}],["against",{"_index":1186,"t":{"1840":{"position":[[35,8]]},"2159":{"position":[[1932,7]]},"2167":{"position":[[1083,7]]},"2176":{"position":[[276,7],[921,7]]}}}],["agent",{"_index":41,"t":{"1640":{"position":[[55,6],[92,6]]},"1660":{"position":[[4,6]]},"1662":{"position":[[157,5],[174,5],[191,5]]},"1683":{"position":[[28,5]]},"1695":{"position":[[166,8]]},"1697":{"position":[[212,7]]},"1723":{"position":[[248,5],[371,5]]},"1725":{"position":[[215,5]]},"1733":{"position":[[13,5]]},"1744":{"position":[[2282,7]]},"1746":{"position":[[2106,7]]},"1748":{"position":[[1425,6]]},"1762":{"position":[[93,6],[154,5]]},"1764":{"position":[[251,5]]},"1769":{"position":[[111,5],[207,5],[268,6],[309,5],[373,5]]},"1782":{"position":[[848,7],[923,5],[990,7],[1045,7],[1166,6],[1192,5],[1323,7],[1450,5],[1557,5],[1703,5],[1810,5]]},"1790":{"position":[[228,5]]},"1794":{"position":[[2316,8],[2364,8],[2772,5],[2879,5],[2934,6],[2994,5],[3047,5]]},"1804":{"position":[[220,5],[228,5]]},"1806":{"position":[[254,5]]},"1808":{"position":[[16,5],[65,5],[220,5],[325,5],[416,5]]},"1810":{"position":[[266,5],[332,7]]},"1832":{"position":[[525,5],[766,5],[898,6],[1094,5],[1180,5]]},"1840":{"position":[[0,5]]},"1844":{"position":[[139,5],[212,5],[249,5],[301,5],[378,5],[453,5]]},"1895":{"position":[[264,7],[297,5]]},"1902":{"position":[[180,5]]},"1904":{"position":[[1295,6],[1665,5],[1784,5]]},"1906":{"position":[[651,5],[694,5],[864,6],[883,5]]},"1945":{"position":[[831,7]]},"1951":{"position":[[4,6],[163,5],[218,6],[409,5],[752,5],[919,7],[1031,5],[1067,5],[1276,5],[1386,5],[1539,5],[1613,5],[1723,5]]},"1953":{"position":[[384,7]]},"1957":{"position":[[610,7]]},"1981":{"position":[[274,6],[341,6],[426,5],[515,6]]},"1985":{"position":[[124,6]]},"2011":{"position":[[25,5],[61,5]]},"2053":{"position":[[1510,8],[1711,6],[1739,6],[2698,8],[2724,6]]},"2055":{"position":[[340,5],[422,5],[601,5],[660,5],[895,5],[905,5],[968,6]]},"2057":{"position":[[305,5],[489,7]]},"2059":{"position":[[519,6]]},"2061":{"position":[[574,5]]},"2065":{"position":[[98,6],[165,6]]},"2069":{"position":[[87,6]]},"2073":{"position":[[68,5],[157,6]]},"2075":{"position":[[737,5],[1197,5]]},"2077":{"position":[[115,5],[308,5]]},"2159":{"position":[[1369,5]]},"2163":{"position":[[124,5],[758,5],[829,5],[1545,5],[1564,5],[1672,5]]},"2165":{"position":[[185,5]]},"2173":{"position":[[154,6],[198,5],[276,6],[310,5]]}}}],["agent.service.env",{"_index":238,"t":{"1673":{"position":[[364,17]]}}}],["agent/data",{"_index":205,"t":{"1662":{"position":[[939,12]]}}}],["agent/flag",{"_index":220,"t":{"1662":{"position":[[3158,13],[3231,13]]},"1794":{"position":[[8219,13],[8292,13]]}}}],["agent/network",{"_index":218,"t":{"1662":{"position":[[2658,18],[2744,18],[2837,18],[2922,18],[2997,18],[3078,18]]},"1794":{"position":[[7719,18],[7805,18],[7898,18],[7983,18],[8058,18],[8139,18]]}}}],["agent/nod",{"_index":206,"t":{"1662":{"position":[[1025,12],[1080,12],[1135,12],[1219,12],[1313,12],[1500,12],[1639,12],[1719,12],[1993,12]]},"1794":{"position":[[6350,12],[6405,12],[6460,12],[6544,12],[6638,12],[6825,12],[8371,12],[8741,12],[8821,12]]}}}],["agent/runtim",{"_index":213,"t":{"1662":{"position":[[2135,15],[2298,15],[2430,15],[2534,15],[3421,15]]},"1794":{"position":[[6963,15],[7067,15],[7230,15],[7362,15],[7466,15],[7596,15]]}}}],["agent/work",{"_index":1609,"t":{"1957":{"position":[[798,12],[863,12]]}}}],["agent_external_ip",{"_index":1608,"t":{"1957":{"position":[[739,17],[1091,17]]}}}],["agentless",{"_index":1013,"t":{"1790":{"position":[[247,9]]}}}],["aggreg",{"_index":2442,"t":{"2231":{"position":[[1277,10]]},"2233":{"position":[[1225,10]]},"2235":{"position":[[1094,10]]},"2237":{"position":[[1043,10]]},"2239":{"position":[[1056,10]]},"2241":{"position":[[1169,10]]},"2243":{"position":[[1130,10]]},"2247":{"position":[[1203,10]]},"2249":{"position":[[1184,10]]},"2251":{"position":[[1080,10]]},"2253":{"position":[[1196,10]]},"2255":{"position":[[1061,10]]},"2257":{"position":[[976,10]]},"2267":{"position":[[1151,10]]},"2273":{"position":[[1193,10]]},"2275":{"position":[[1109,10]]},"2277":{"position":[[1115,10]]},"2350":{"position":[[1460,10]]},"2352":{"position":[[1474,10]]},"2354":{"position":[[1589,10]]}}}],["ago",{"_index":290,"t":{"1675":{"position":[[1076,3],[1240,3],[1423,3],[1588,3],[1744,3],[1914,3],[2112,3],[2300,3],[2464,3],[2624,3]]}}}],["air",{"_index":1314,"t":{"1882":{"position":[[26,3],[81,3]]},"1884":{"position":[[66,3]]},"1888":{"position":[[52,3]]},"1893":{"position":[[304,3],[438,3]]},"1895":{"position":[[1384,3]]},"1898":{"position":[[13,3],[95,3]]},"1900":{"position":[[51,3]]}}}],["airgap",{"_index":1326,"t":{"1890":{"position":[[236,6]]},"1893":{"position":[[246,6]]}}}],["al.(https://www.usenix.org/conference/fast16/techn",{"_index":551,"t":{"1715":{"position":[[64,54]]}}}],["alloc",{"_index":1571,"t":{"1951":{"position":[[1516,11]]},"2101":{"position":[[2288,8]]},"2288":{"position":[[526,8]]},"2290":{"position":[[594,8]]},"2292":{"position":[[679,8]]},"2294":{"position":[[576,8]]}}}],["allow",{"_index":503,"t":{"1704":{"position":[[94,5],[124,5],[165,5]]},"1750":{"position":[[4852,6]]},"1771":{"position":[[333,5]]},"1782":{"position":[[1239,5],[1588,5],[1845,5]]},"1832":{"position":[[760,5]]},"1838":{"position":[[1377,5]]},"1949":{"position":[[433,7],[816,7]]},"1951":{"position":[[211,6]]},"1953":{"position":[[1309,5]]},"1957":{"position":[[989,5]]},"1985":{"position":[[474,8]]},"1991":{"position":[[212,6]]},"2093":{"position":[[2272,6]]},"2095":{"position":[[578,8],[623,5],[1035,5],[1361,5],[1575,5],[1816,5],[2044,5],[2258,5],[2499,5]]},"2101":{"position":[[211,5],[1273,7]]},"2117":{"position":[[107,6]]},"2119":{"position":[[302,6]]},"2156":{"position":[[3,5]]},"2231":{"position":[[847,5],[2078,7]]},"2233":{"position":[[795,5],[2026,7]]},"2235":{"position":[[664,5],[1895,7]]},"2237":{"position":[[613,5],[1844,7]]},"2239":{"position":[[626,5],[1857,7]]},"2241":{"position":[[739,5],[1970,7]]},"2243":{"position":[[700,5],[1931,7]]},"2247":{"position":[[773,5],[2004,7]]},"2249":{"position":[[754,5],[1985,7]]},"2251":{"position":[[650,5],[1881,7]]},"2253":{"position":[[766,5],[1997,7]]},"2255":{"position":[[631,5],[1862,7]]},"2257":{"position":[[546,5],[1777,7]]},"2267":{"position":[[721,5],[1952,7]]},"2273":{"position":[[763,5],[1994,7]]},"2275":{"position":[[679,5],[1910,7]]},"2277":{"position":[[685,5],[1916,7]]},"2350":{"position":[[1030,5],[2261,7]]},"2352":{"position":[[1044,5],[2275,7]]},"2354":{"position":[[1159,5],[2390,7]]},"2440":{"position":[[64,5]]}}}],["allow_ip_forward",{"_index":1558,"t":{"1949":{"position":[[513,22],[896,22]]}}}],["allowedcap",{"_index":2021,"t":{"2093":{"position":[[3312,20],[3751,20]]},"2410":{"position":[[38,19]]}}}],["allowedunsafesysctl",{"_index":2023,"t":{"2093":{"position":[[3784,21]]}}}],["allowprivilegeescal",{"_index":1993,"t":{"2093":{"position":[[1481,25],[2654,25],[3281,25],[3719,25]]}}}],["along",{"_index":2165,"t":{"2103":{"position":[[100,5]]}}}],["alongsid",{"_index":1074,"t":{"1806":{"position":[[803,9]]}}}],["alphabet",{"_index":1414,"t":{"1910":{"position":[[206,12]]}}}],["alphanumer",{"_index":1484,"t":{"1933":{"position":[[1088,12],[1156,12]]}}}],["alpin",{"_index":2243,"t":{"2143":{"position":[[130,6]]},"2149":{"position":[[130,6]]}}}],["alreadi",{"_index":1207,"t":{"1842":{"position":[[272,7]]},"1850":{"position":[[362,8]]},"1884":{"position":[[31,7]]},"1912":{"position":[[375,7]]},"1939":{"position":[[273,7],[975,7]]},"2053":{"position":[[604,7]]},"2247":{"position":[[250,7]]}}}],["alsologtostderr",{"_index":76,"t":{"1642":{"position":[[213,15]]},"1662":{"position":[[609,15]]},"1774":{"position":[[244,15]]},"1794":{"position":[[620,15]]}}}],["alter",{"_index":1378,"t":{"1904":{"position":[[497,7]]},"1931":{"position":[[374,8]]}}}],["altern",{"_index":983,"t":{"1776":{"position":[[423,11]]},"1794":{"position":[[1197,11]]},"1840":{"position":[[1009,11]]},"2163":{"position":[[1840,14]]},"2225":{"position":[[65,9]]},"2267":{"position":[[200,14]]},"2321":{"position":[[26,11]]},"2421":{"position":[[167,9]]}}}],["altogeth",{"_index":2564,"t":{"2370":{"position":[[138,10]]}}}],["alway",{"_index":1064,"t":{"1806":{"position":[[130,6]]},"1991":{"position":[[95,6]]},"2163":{"position":[[2201,6]]}}}],["alwaysadmit",{"_index":2454,"t":{"2243":{"position":[[244,12],[439,13]]}}}],["alwaysallow",{"_index":2449,"t":{"2235":{"position":[[205,12],[450,13]]},"2352":{"position":[[801,13]]}}}],["alwayspullimag",{"_index":2455,"t":{"2245":{"position":[[201,17]]}}}],["amazon",{"_index":1814,"t":{"2031":{"position":[[269,6]]}}}],["amd64.tar.gz",{"_index":361,"t":{"1677":{"position":[[261,13]]}}}],["amount",{"_index":1885,"t":{"2057":{"position":[[137,6],[359,6]]}}}],["analysi",{"_index":1694,"t":{"1981":{"position":[[365,8]]},"2055":{"position":[[911,8]]},"2113":{"position":[[450,9]]},"2115":{"position":[[436,9]]}}}],["and/or",{"_index":176,"t":{"1660":{"position":[[153,6]]},"1742":{"position":[[2284,6],[2664,6],[2730,6]]},"1965":{"position":[[118,6]]},"1999":{"position":[[293,6]]},"2077":{"position":[[610,6]]}}}],["annot",{"_index":2019,"t":{"2093":{"position":[[3200,12],[3638,12]]}}}],["anonym",{"_index":2073,"t":{"2101":{"position":[[235,9],[3065,9]]},"2223":{"position":[[172,9],[288,10]]},"2231":{"position":[[871,9]]},"2233":{"position":[[819,9]]},"2235":{"position":[[688,9]]},"2237":{"position":[[637,9]]},"2239":{"position":[[650,9]]},"2241":{"position":[[763,9]]},"2243":{"position":[[724,9]]},"2247":{"position":[[797,9]]},"2249":{"position":[[778,9]]},"2251":{"position":[[674,9]]},"2253":{"position":[[790,9]]},"2255":{"position":[[655,9]]},"2257":{"position":[[570,9]]},"2267":{"position":[[745,9]]},"2273":{"position":[[787,9]]},"2275":{"position":[[703,9]]},"2277":{"position":[[709,9]]},"2350":{"position":[[95,10],[327,9],[678,10],[724,9],[771,9],[825,9],[1054,9]]},"2352":{"position":[[1068,9]]},"2354":{"position":[[1183,9]]},"2356":{"position":[[792,9],[2015,9]]},"2368":{"position":[[983,9],[2206,9]]}}}],["anoth",{"_index":914,"t":{"1760":{"position":[[379,7]]},"2163":{"position":[[2560,7]]},"2200":{"position":[[1593,7]]},"2271":{"position":[[1723,7]]},"2306":{"position":[[1617,7]]},"2308":{"position":[[1506,7]]},"2310":{"position":[[1531,7]]},"2312":{"position":[[1683,7]]},"2314":{"position":[[1509,7]]},"2316":{"position":[[1541,7]]},"2318":{"position":[[1640,7]]}}}],["anyon",{"_index":1066,"t":{"1806":{"position":[[342,6]]},"1983":{"position":[[911,7]]}}}],["anywher",{"_index":1330,"t":{"1893":{"position":[[421,8]]}}}],["apach",{"_index":1272,"t":{"1876":{"position":[[389,6],[473,6]]}}}],["api",{"_index":619,"t":{"1727":{"position":[[123,4]]},"1729":{"position":[[151,4]]},"1731":{"position":[[58,4]]},"1738":{"position":[[391,3]]},"1740":{"position":[[776,3]]},"1750":{"position":[[2593,3],[2706,5]]},"1832":{"position":[[471,3]]},"1840":{"position":[[714,4]]},"1985":{"position":[[169,3]]},"2075":{"position":[[107,3]]},"2091":{"position":[[130,3]]},"2097":{"position":[[80,3],[673,3],[851,3]]},"2101":{"position":[[266,3]]},"2109":{"position":[[84,3]]},"2117":{"position":[[128,3],[487,3]]},"2121":{"position":[[205,3]]},"2131":{"position":[[241,3]]},"2167":{"position":[[762,4]]},"2223":{"position":[[35,3]]},"2225":{"position":[[121,3]]},"2227":{"position":[[35,3]]},"2229":{"position":[[45,3]]},"2231":{"position":[[139,3],[894,3]]},"2233":{"position":[[142,3],[842,3]]},"2235":{"position":[[35,3],[711,3]]},"2237":{"position":[[35,3],[660,3]]},"2239":{"position":[[35,3],[673,3]]},"2241":{"position":[[129,3],[786,3]]},"2243":{"position":[[35,3],[747,3]]},"2245":{"position":[[35,3]]},"2247":{"position":[[35,3],[820,3]]},"2249":{"position":[[125,3],[801,3]]},"2251":{"position":[[35,3],[697,3]]},"2253":{"position":[[128,3],[813,3]]},"2255":{"position":[[35,3],[678,3]]},"2257":{"position":[[35,3],[593,3]]},"2259":{"position":[[45,3]]},"2261":{"position":[[45,3]]},"2263":{"position":[[45,3]]},"2265":{"position":[[45,3]]},"2267":{"position":[[35,3],[768,3]]},"2269":{"position":[[45,3]]},"2271":{"position":[[139,3]]},"2273":{"position":[[125,3],[810,3]]},"2275":{"position":[[125,3],[726,3]]},"2277":{"position":[[139,3],[732,3]]},"2279":{"position":[[116,3]]},"2283":{"position":[[35,3]]},"2350":{"position":[[1077,3]]},"2352":{"position":[[1091,3]]},"2354":{"position":[[1206,3]]},"2385":{"position":[[133,3]]}}}],["apigroup",{"_index":1440,"t":{"1918":{"position":[[400,9]]},"2093":{"position":[[4106,10],[4320,10],[4529,10],[4740,9],[4870,9],[5042,9],[5142,9],[5365,9],[5465,9],[5675,9]]}}}],["apiserv",{"_index":120,"t":{"1648":{"position":[[546,9],[641,9]]},"1662":{"position":[[1802,9],[1897,9]]},"1702":{"position":[[139,10]]},"1704":{"position":[[109,10]]},"1723":{"position":[[109,10],[439,10]]},"1776":{"position":[[189,9],[290,9]]},"1782":{"position":[[900,9],[1060,9],[1177,9],[1338,9],[1435,9],[1688,9]]},"1788":{"position":[[74,9],[119,9]]},"1794":{"position":[[887,9],[1021,9],[3453,9],[3506,9],[8904,9],[8999,9]]},"1876":{"position":[[1523,10]]},"1951":{"position":[[147,11],[729,9],[934,9],[1052,9],[1196,9],[1261,9],[1598,9]]},"1997":{"position":[[97,10]]},"1999":{"position":[[172,9]]},"2003":{"position":[[207,9]]},"2005":{"position":[[273,10]]},"2021":{"position":[[202,9],[473,9]]},"2093":{"position":[[194,9],[1008,9]]},"2097":{"position":[[873,9],[954,9],[1212,9],[1295,9]]},"2099":{"position":[[241,9],[838,9]]},"2101":{"position":[[177,9]]},"2105":{"position":[[538,9]]},"2107":{"position":[[637,9]]},"2109":{"position":[[518,9]]},"2111":{"position":[[358,9]]},"2113":{"position":[[533,9]]},"2115":{"position":[[519,9]]},"2117":{"position":[[743,9]]},"2119":{"position":[[126,9],[536,9]]},"2125":{"position":[[610,9]]},"2129":{"position":[[661,9]]},"2200":{"position":[[796,10]]},"2223":{"position":[[259,10]]},"2231":{"position":[[104,9],[489,10],[780,9]]},"2233":{"position":[[103,9],[472,10],[728,9]]},"2235":{"position":[[346,10],[597,9]]},"2237":{"position":[[312,10],[546,9]]},"2239":{"position":[[325,10],[559,9]]},"2241":{"position":[[416,10],[672,9]]},"2243":{"position":[[323,10],[633,9]]},"2247":{"position":[[389,10],[706,9]]},"2249":{"position":[[411,10],[687,9]]},"2251":{"position":[[307,10],[583,9]]},"2253":{"position":[[442,10],[699,9]]},"2255":{"position":[[303,10],[564,9]]},"2257":{"position":[[254,10],[479,9]]},"2267":{"position":[[384,10],[654,9]]},"2271":{"position":[[104,9],[926,10]]},"2273":{"position":[[99,10],[455,10],[696,9]]},"2275":{"position":[[99,10],[386,10],[612,9]]},"2277":{"position":[[104,9],[398,10],[618,9]]},"2279":{"position":[[440,10]]},"2283":{"position":[[992,10]]},"2288":{"position":[[859,9],[955,9]]},"2290":{"position":[[927,9],[1023,9]]},"2292":{"position":[[1012,9],[1108,9]]},"2294":{"position":[[909,9],[1005,9]]},"2306":{"position":[[820,10]]},"2308":{"position":[[709,10]]},"2310":{"position":[[734,10]]},"2312":{"position":[[886,10]]},"2314":{"position":[[712,10]]},"2316":{"position":[[744,10]]},"2318":{"position":[[843,10]]},"2324":{"position":[[138,10]]},"2350":{"position":[[558,10],[649,10],[963,9]]},"2352":{"position":[[544,10],[635,10],[977,9]]},"2354":{"position":[[600,10],[691,10],[1092,9]]}}}],["apiserver'",{"_index":1566,"t":{"1951":{"position":[[558,11]]}}}],["apiserver.config.k8s.io/v1",{"_index":1781,"t":{"2021":{"position":[[1230,26]]},"2079":{"position":[[625,29]]},"2093":{"position":[[424,26]]}}}],["apiserver.crt",{"_index":2093,"t":{"2101":{"position":[[980,13],[1876,13]]},"2231":{"position":[[1729,13],[2742,13]]},"2233":{"position":[[1677,13],[2690,13]]},"2235":{"position":[[1546,13],[2559,13]]},"2237":{"position":[[1495,13],[2508,13]]},"2239":{"position":[[1508,13],[2521,13]]},"2241":{"position":[[1621,13],[2634,13]]},"2243":{"position":[[1582,13],[2595,13]]},"2247":{"position":[[1655,13],[2668,13]]},"2249":{"position":[[1636,13],[2649,13]]},"2251":{"position":[[1532,13],[2545,13]]},"2253":{"position":[[1648,13],[2661,13]]},"2255":{"position":[[1513,13],[2526,13]]},"2257":{"position":[[1428,13],[2441,13]]},"2267":{"position":[[1603,13],[2616,13]]},"2273":{"position":[[1645,13],[2658,13]]},"2275":{"position":[[1561,13],[2574,13]]},"2277":{"position":[[1567,13],[2580,13]]},"2350":{"position":[[1912,13],[2925,13]]},"2352":{"position":[[1926,13],[2939,13]]},"2354":{"position":[[2041,13],[3054,13]]}}}],["apiserver.key",{"_index":2095,"t":{"2101":{"position":[[1059,13],[1967,13]]},"2231":{"position":[[1808,13],[2824,14]]},"2233":{"position":[[1756,13],[2772,14]]},"2235":{"position":[[1625,13],[2641,14]]},"2237":{"position":[[1574,13],[2590,14]]},"2239":{"position":[[1587,13],[2603,14]]},"2241":{"position":[[1700,13],[2716,14]]},"2243":{"position":[[1661,13],[2677,14]]},"2247":{"position":[[1734,13],[2750,14]]},"2249":{"position":[[1715,13],[2731,14]]},"2251":{"position":[[1611,13],[2627,14]]},"2253":{"position":[[1727,13],[2743,14]]},"2255":{"position":[[1592,13],[2608,14]]},"2257":{"position":[[1507,13],[2523,14]]},"2267":{"position":[[1682,13],[2698,14]]},"2273":{"position":[[1724,13],[2740,14]]},"2275":{"position":[[1640,13],[2656,14]]},"2277":{"position":[[1646,13],[2662,14]]},"2350":{"position":[[1991,13],[3007,14]]},"2352":{"position":[[2005,13],[3021,14]]},"2354":{"position":[[2120,13],[3136,14]]}}}],["apiserver.yaml",{"_index":2331,"t":{"2180":{"position":[[183,14]]},"2182":{"position":[[189,14]]},"2223":{"position":[[100,14]]},"2225":{"position":[[186,14]]},"2227":{"position":[[100,14]]},"2229":{"position":[[110,14]]},"2231":{"position":[[204,14]]},"2233":{"position":[[207,14]]},"2235":{"position":[[100,14]]},"2237":{"position":[[100,14]]},"2239":{"position":[[100,14]]},"2241":{"position":[[194,14]]},"2243":{"position":[[100,14]]},"2245":{"position":[[100,14]]},"2247":{"position":[[100,14]]},"2249":{"position":[[190,14]]},"2251":{"position":[[100,14]]},"2253":{"position":[[193,14]]},"2255":{"position":[[100,14]]},"2257":{"position":[[100,14]]},"2259":{"position":[[110,14]]},"2261":{"position":[[110,14]]},"2263":{"position":[[110,14]]},"2265":{"position":[[110,14]]},"2267":{"position":[[100,14]]},"2269":{"position":[[110,14]]},"2271":{"position":[[204,14]]},"2273":{"position":[[190,14]]},"2275":{"position":[[190,14]]},"2277":{"position":[[204,14]]},"2279":{"position":[[181,14]]},"2283":{"position":[[100,14]]}}}],["apivers",{"_index":393,"t":{"1681":{"position":[[613,11],[702,11]]},"1717":{"position":[[280,11]]},"1876":{"position":[[272,11],[327,11]]},"1878":{"position":[[463,11]]},"1918":{"position":[[173,11],[298,11]]},"2021":{"position":[[1218,11],[1330,11],[1787,11]]},"2079":{"position":[[611,13]]},"2093":{"position":[[412,11],[524,11],[1361,11],[2548,11],[3109,11],[3561,11],[4003,11],[4208,11],[4431,11],[4626,11],[4910,11],[5213,11],[5546,11],[5818,11],[6021,11],[6216,11]]},"2095":{"position":[[331,11],[659,11],[1292,11],[1506,11],[1747,11],[1975,11],[2189,11],[2430,11]]},"2097":{"position":[[730,11]]},"2141":{"position":[[0,11]]},"2143":{"position":[[0,11]]},"2147":{"position":[[0,11]]},"2149":{"position":[[0,11]]},"2163":{"position":[[420,11],[769,11],[2268,11]]}}}],["app",{"_index":1158,"t":{"1832":{"position":[[569,4]]},"1844":{"position":[[188,4]]},"2059":{"position":[[146,3],[369,4]]},"2075":{"position":[[437,4]]},"2095":{"position":[[882,4],[1445,4],[2128,4],[2585,4]]}}}],["app.kubernetes.io/nam",{"_index":2049,"t":{"2095":{"position":[[1902,23]]}}}],["appear",{"_index":195,"t":{"1662":{"position":[[13,7]]},"1794":{"position":[[13,7]]}}}],["append",{"_index":101,"t":{"1648":{"position":[[99,6]]},"1662":{"position":[[1093,6]]},"1748":{"position":[[933,6]]},"1794":{"position":[[6418,6]]},"1910":{"position":[[282,8],[305,6]]},"1975":{"position":[[188,6]]}}}],["appli",{"_index":1453,"t":{"1924":{"position":[[243,5]]},"1929":{"position":[[149,6],[427,8]]},"1945":{"position":[[946,5],[1012,7],[1233,7]]},"1949":{"position":[[543,5],[590,7],[926,5],[974,7]]},"2085":{"position":[[273,7],[946,8]]},"2093":{"position":[[1233,7]]},"2095":{"position":[[55,7],[519,7]]},"2145":{"position":[[169,5]]},"2159":{"position":[[1789,8]]},"2161":{"position":[[226,5],[492,8]]},"2167":{"position":[[940,8]]},"2438":{"position":[[66,5]]}}}],["applic",{"_index":1451,"t":{"1922":{"position":[[397,12]]},"2075":{"position":[[534,13]]},"2176":{"position":[[1263,10],[1295,10]]},"2180":{"position":[[12,10]]},"2182":{"position":[[12,10]]},"2184":{"position":[[12,10]]},"2186":{"position":[[12,10]]},"2188":{"position":[[12,10]]},"2190":{"position":[[12,10]]},"2192":{"position":[[12,10]]},"2194":{"position":[[12,10]]},"2196":{"position":[[12,10]]},"2198":{"position":[[12,10]]},"2202":{"position":[[12,10]]},"2204":{"position":[[12,10]]},"2229":{"position":[[12,10]]},"2259":{"position":[[12,10]]},"2261":{"position":[[12,10]]},"2263":{"position":[[12,10]]},"2265":{"position":[[12,10]]},"2269":{"position":[[12,10]]},"2296":{"position":[[12,10]]},"2329":{"position":[[12,10]]},"2331":{"position":[[12,10]]},"2345":{"position":[[12,10]]},"2347":{"position":[[12,10]]},"2360":{"position":[[12,10]]},"2362":{"position":[[12,10]]},"2364":{"position":[[12,10]]},"2370":{"position":[[12,10]]},"2372":{"position":[[12,10]]},"2412":{"position":[[60,12],[125,12]]},"2426":{"position":[[47,11]]}}}],["approach",{"_index":1195,"t":{"1840":{"position":[[555,11]]},"2159":{"position":[[107,8]]}}}],["appropri",{"_index":697,"t":{"1742":{"position":[[212,11]]},"1888":{"position":[[158,11]]},"1945":{"position":[[671,11]]},"2085":{"position":[[825,11],[955,11]]},"2109":{"position":[[417,11]]},"2111":{"position":[[63,12]]},"2113":{"position":[[66,12]]},"2115":{"position":[[65,12]]},"2117":{"position":[[53,12],[175,11],[599,11]]},"2121":{"position":[[64,12]]},"2123":{"position":[[37,13],[141,11],[254,11]]},"2125":{"position":[[65,12],[477,11]]},"2159":{"position":[[371,11]]},"2261":{"position":[[207,11]]},"2263":{"position":[[210,11]]},"2265":{"position":[[199,11]]},"2286":{"position":[[206,11]]},"2312":{"position":[[101,11]]},"2366":{"position":[[100,11]]},"2440":{"position":[[74,11]]}}}],["approxim",{"_index":2186,"t":{"2113":{"position":[[376,11]]},"2115":{"position":[[362,11]]}}}],["apt",{"_index":382,"t":{"1681":{"position":[[171,3]]},"1706":{"position":[[473,3]]},"2061":{"position":[[150,4]]}}}],["arch.tar",{"_index":1327,"t":{"1890":{"position":[[250,9]]}}}],["architectur",{"_index":1162,"t":{"1832":{"position":[[876,12]]},"1890":{"position":[[36,12]]},"1977":{"position":[[35,14]]},"2159":{"position":[[1551,12]]}}}],["area",{"_index":1964,"t":{"2087":{"position":[[14,5]]},"2326":{"position":[[124,6]]}}}],["arg",{"_index":156,"t":{"1654":{"position":[[27,3],[86,3]]},"1662":{"position":[[3148,3],[3221,3]]},"1681":{"position":[[917,5]]},"1717":{"position":[[438,5]]},"1788":{"position":[[24,3],[84,3],[154,3],[233,3],[327,3],[405,3],[464,3]]},"1794":{"position":[[3463,3],[3531,3],[3608,3],[3695,3],[3788,3],[8209,3],[8282,3]]},"2021":{"position":[[212,3],[268,3],[483,4],[840,4],[929,4]]},"2099":{"position":[[251,4],[608,4],[697,4],[848,4],[1231,4],[1320,4]]},"2105":{"position":[[548,4]]},"2107":{"position":[[647,4]]},"2109":{"position":[[528,4]]},"2111":{"position":[[368,4]]},"2113":{"position":[[543,4]]},"2115":{"position":[[529,4]]},"2117":{"position":[[753,4]]},"2119":{"position":[[546,4]]},"2125":{"position":[[620,4]]},"2129":{"position":[[671,4]]},"2163":{"position":[[1009,5]]}}}],["arg=\"admiss",{"_index":1984,"t":{"2093":{"position":[[204,14]]}}}],["arg=\"en",{"_index":1987,"t":{"2093":{"position":[[1018,11]]}}}],["arg=\"nod",{"_index":1575,"t":{"1953":{"position":[[402,9],[466,9]]}}}],["arg='audit",{"_index":2063,"t":{"2097":{"position":[[883,10],[964,10]]}}}],["arg=audit",{"_index":2064,"t":{"2097":{"position":[[1222,9],[1305,9]]}}}],["argument",{"_index":846,"t":{"1750":{"position":[[2784,9]]},"1756":{"position":[[323,10],[521,9],[1219,10],[1457,9],[1706,9]]},"1758":{"position":[[259,10],[581,9],[1078,10],[1437,9]]},"1811":{"position":[[219,14]]},"1848":{"position":[[930,8]]},"1850":{"position":[[385,9]]},"1895":{"position":[[794,9]]},"1904":{"position":[[396,9]]},"1908":{"position":[[108,10],[467,10],[639,9],[703,9],[872,10],[953,9],[1000,9],[1040,9],[1168,8]]},"2097":{"position":[[834,9]]},"2101":{"position":[[58,9]]},"2105":{"position":[[461,8],[553,8]]},"2107":{"position":[[560,8],[652,8]]},"2109":{"position":[[33,8],[484,8],[533,8]]},"2111":{"position":[[35,8],[324,8],[373,8]]},"2113":{"position":[[38,8],[499,8],[548,8]]},"2115":{"position":[[36,8],[485,8],[534,8]]},"2117":{"position":[[34,8],[709,8],[758,8]]},"2119":{"position":[[41,8],[502,8],[551,8]]},"2121":{"position":[[45,8]]},"2125":{"position":[[46,8],[576,8],[625,8]]},"2129":{"position":[[44,8],[627,8],[676,8]]},"2200":{"position":[[93,8]]},"2202":{"position":[[103,8]]},"2350":{"position":[[144,10]]},"2352":{"position":[[130,10]]},"2354":{"position":[[173,10]]},"2356":{"position":[[120,10]]},"2358":{"position":[[157,10]]},"2360":{"position":[[142,10]]},"2362":{"position":[[143,10],[301,8]]},"2364":{"position":[[175,8]]},"2366":{"position":[[141,10]]},"2368":{"position":[[263,10]]},"2370":{"position":[[197,10],[351,8]]},"2374":{"position":[[446,10]]}}}],["arm",{"_index":5,"t":{"1634":{"position":[[98,3]]},"1981":{"position":[[700,3]]}}}],["arm32",{"_index":2252,"t":{"2145":{"position":[[13,6]]}}}],["arm64/aarch64",{"_index":1671,"t":{"1977":{"position":[[63,13]]}}}],["armhf",{"_index":1670,"t":{"1977":{"position":[[57,5]]}}}],["around",{"_index":1979,"t":{"2091":{"position":[[71,6]]}}}],["arp",{"_index":1723,"t":{"1983":{"position":[[1180,3]]}}}],["array",{"_index":2578,"t":{"2410":{"position":[[130,6]]}}}],["asid",{"_index":1886,"t":{"2057":{"position":[[188,5],[410,5]]}}}],["assess",{"_index":2220,"t":{"2133":{"position":[[152,10]]}}}],["assign",{"_index":1010,"t":{"1782":{"position":[[1651,8]]},"1957":{"position":[[252,8],[1199,8]]},"2131":{"position":[[189,8],[513,12]]}}}],["associ",{"_index":1793,"t":{"2021":{"position":[[2648,10]]},"2095":{"position":[[1196,10]]},"2156":{"position":[[354,10]]}}}],["assum",{"_index":732,"t":{"1742":{"position":[[2177,6]]},"1884":{"position":[[14,7]]},"1888":{"position":[[7,8]]},"1904":{"position":[[1062,7],[1793,7]]},"2057":{"position":[[236,8]]}}}],["assumpt",{"_index":2323,"t":{"2176":{"position":[[1765,10]]}}}],["attack",{"_index":1061,"t":{"1802":{"position":[[338,7]]},"1955":{"position":[[321,8]]},"1983":{"position":[[1164,7]]},"2117":{"position":[[545,7]]}}}],["attempt",{"_index":815,"t":{"1750":{"position":[[706,7]]},"1846":{"position":[[303,7]]},"1933":{"position":[[1583,7]]},"1945":{"position":[[846,10]]},"2053":{"position":[[905,7]]},"2159":{"position":[[1707,10]]},"2167":{"position":[[858,10]]}}}],["audiences=https://kubernetes.default.svc.cluster.local,k3",{"_index":2439,"t":{"2231":{"position":[[898,58]]},"2233":{"position":[[846,58]]},"2235":{"position":[[715,58]]},"2237":{"position":[[664,58]]},"2239":{"position":[[677,58]]},"2241":{"position":[[790,58]]},"2243":{"position":[[751,58]]},"2247":{"position":[[824,58]]},"2249":{"position":[[805,58]]},"2251":{"position":[[701,58]]},"2253":{"position":[[817,58]]},"2255":{"position":[[682,58]]},"2257":{"position":[[597,58]]},"2267":{"position":[[772,58]]},"2273":{"position":[[814,58]]},"2275":{"position":[[730,58]]},"2277":{"position":[[736,58]]},"2350":{"position":[[1081,58]]},"2352":{"position":[[1095,58]]},"2354":{"position":[[1210,58]]}}}],["audiences=unknown",{"_index":2076,"t":{"2101":{"position":[[270,17]]}}}],["audit",{"_index":1765,"t":{"2021":{"position":[[561,6],[623,6],[684,6],[708,6],[735,6],[1476,6],[1496,5]]},"2091":{"position":[[141,8],[375,8],[399,5],[427,5]]},"2093":{"position":[[670,6],[690,5]]},"2097":{"position":[[61,5],[144,5],[161,8],[463,5]]},"2099":{"position":[[329,6],[391,6],[452,6],[476,6],[503,6],[952,6],[1014,6],[1075,6],[1099,6],[1126,6]]},"2109":{"position":[[18,5],[60,8],[343,5],[429,5]]},"2111":{"position":[[18,5],[209,5]]},"2113":{"position":[[18,5]]},"2115":{"position":[[18,5]]},"2127":{"position":[[22,5]]},"2176":{"position":[[1024,6],[1075,5],[1226,5],[1689,8],[1877,7]]},"2200":{"position":[[260,5],[2025,5]]},"2206":{"position":[[175,6]]},"2208":{"position":[[152,6]]},"2210":{"position":[[158,6]]},"2212":{"position":[[160,6]]},"2214":{"position":[[166,6]]},"2216":{"position":[[172,6]]},"2218":{"position":[[171,6]]},"2220":{"position":[[171,6]]},"2223":{"position":[[193,6]]},"2225":{"position":[[282,6]]},"2227":{"position":[[211,6]]},"2231":{"position":[[423,6]]},"2233":{"position":[[406,6]]},"2235":{"position":[[280,6]]},"2237":{"position":[[246,6]]},"2239":{"position":[[259,6]]},"2241":{"position":[[350,6]]},"2243":{"position":[[257,6]]},"2245":{"position":[[271,6]]},"2247":{"position":[[323,6]]},"2249":{"position":[[345,6]]},"2251":{"position":[[241,6]]},"2253":{"position":[[376,6]]},"2255":{"position":[[237,6]]},"2257":{"position":[[188,6]]},"2259":{"position":[[165,5],[239,5],[280,5]]},"2261":{"position":[[165,5],[250,5]]},"2263":{"position":[[165,5],[244,5]]},"2265":{"position":[[165,5],[259,5]]},"2267":{"position":[[318,6]]},"2271":{"position":[[390,5],[2155,5]]},"2273":{"position":[[385,6]]},"2275":{"position":[[320,6]]},"2277":{"position":[[332,6]]},"2279":{"position":[[374,6]]},"2281":{"position":[[175,6]]},"2283":{"position":[[926,6]]},"2286":{"position":[[275,6]]},"2288":{"position":[[205,6]]},"2290":{"position":[[225,6]]},"2292":{"position":[[321,6]]},"2294":{"position":[[258,6]]},"2298":{"position":[[220,6]]},"2301":{"position":[[192,6]]},"2303":{"position":[[202,6]]},"2306":{"position":[[284,5],[2049,5]]},"2308":{"position":[[173,5],[1938,5]]},"2310":{"position":[[198,5],[1963,5]]},"2312":{"position":[[350,5],[2115,5]]},"2314":{"position":[[176,5],[1941,5]]},"2316":{"position":[[208,5],[1973,5]]},"2318":{"position":[[307,5],[2072,5]]},"2324":{"position":[[36,5],[72,6],[167,6]]},"2326":{"position":[[37,5]]},"2333":{"position":[[188,6]]},"2335":{"position":[[194,6]]},"2337":{"position":[[190,6]]},"2339":{"position":[[196,6]]},"2341":{"position":[[129,6]]},"2343":{"position":[[129,6]]},"2345":{"position":[[112,5]]},"2347":{"position":[[112,5]]},"2350":{"position":[[470,6]]},"2352":{"position":[[456,6]]},"2354":{"position":[[512,6]]},"2356":{"position":[[442,6]]},"2358":{"position":[[499,6]]},"2366":{"position":[[444,6]]},"2368":{"position":[[660,6]]},"2374":{"position":[[1085,6]]}}}],["audit.k8s.io/v1",{"_index":2062,"t":{"2097":{"position":[[742,15]]}}}],["audit.yaml",{"_index":2061,"t":{"2097":{"position":[[564,10]]}}}],["auditor",{"_index":2314,"t":{"2176":{"position":[[381,9]]}}}],["auth",{"_index":468,"t":{"1695":{"position":[[575,4]]},"1738":{"position":[[486,4]]},"1965":{"position":[[113,4],[543,4],[686,4],[744,4],[749,4],[805,4]]},"1967":{"position":[[246,5]]},"1969":{"position":[[249,5]]},"2101":{"position":[[1164,4],[1242,4]]},"2200":{"position":[[1080,8],[1405,8]]},"2223":{"position":[[299,5]]},"2225":{"position":[[250,4],[360,4]]},"2231":{"position":[[1969,4],[2047,4]]},"2233":{"position":[[1917,4],[1995,4]]},"2235":{"position":[[1786,4],[1864,4]]},"2237":{"position":[[1735,4],[1813,4]]},"2239":{"position":[[1748,4],[1826,4]]},"2241":{"position":[[1861,4],[1939,4]]},"2243":{"position":[[1822,4],[1900,4]]},"2247":{"position":[[1895,4],[1973,4]]},"2249":{"position":[[1876,4],[1954,4]]},"2251":{"position":[[1772,4],[1850,4]]},"2253":{"position":[[1888,4],[1966,4]]},"2255":{"position":[[1753,4],[1831,4]]},"2257":{"position":[[1668,4],[1746,4]]},"2267":{"position":[[1843,4],[1921,4]]},"2271":{"position":[[1210,8],[1535,8]]},"2273":{"position":[[1885,4],[1963,4]]},"2275":{"position":[[1801,4],[1879,4]]},"2277":{"position":[[1807,4],[1885,4]]},"2306":{"position":[[1104,8],[1429,8]]},"2308":{"position":[[993,8],[1318,8],[2015,5],[2048,5],[2125,5]]},"2310":{"position":[[1018,8],[1343,8]]},"2312":{"position":[[1170,8],[1495,8]]},"2314":{"position":[[996,8],[1321,8],[2018,5],[2051,5],[2128,5]]},"2316":{"position":[[1028,8],[1353,8]]},"2318":{"position":[[1127,8],[1452,8]]},"2350":{"position":[[689,5],[781,5],[2152,4],[2230,4]]},"2352":{"position":[[2166,4],[2244,4]]},"2354":{"position":[[2281,4],[2359,4]]}}}],["auth=\"tru",{"_index":2498,"t":{"2308":{"position":[[161,11]]}}}],["auth=fals",{"_index":2074,"t":{"2101":{"position":[[245,10],[3075,10]]},"2223":{"position":[[182,10]]},"2231":{"position":[[881,10]]},"2233":{"position":[[829,10]]},"2235":{"position":[[698,10]]},"2237":{"position":[[647,10]]},"2239":{"position":[[660,10]]},"2241":{"position":[[773,10]]},"2243":{"position":[[734,10]]},"2247":{"position":[[807,10]]},"2249":{"position":[[788,10]]},"2251":{"position":[[684,10]]},"2253":{"position":[[800,10]]},"2255":{"position":[[665,10]]},"2257":{"position":[[580,10]]},"2267":{"position":[[755,10]]},"2273":{"position":[[797,10]]},"2275":{"position":[[713,10]]},"2277":{"position":[[719,10]]},"2350":{"position":[[337,10],[734,12],[835,10],[1064,10]]},"2352":{"position":[[1078,10]]},"2354":{"position":[[1193,10]]},"2356":{"position":[[802,10],[2025,10]]},"2368":{"position":[[993,10],[2216,10]]}}}],["auth=tru",{"_index":2368,"t":{"2200":{"position":[[1821,12],[1932,12]]},"2271":{"position":[[1951,12],[2062,12]]},"2306":{"position":[[1845,12],[1956,12]]},"2308":{"position":[[1734,12],[1845,12],[2103,9],[2150,9]]},"2310":{"position":[[1759,12],[1870,12]]},"2312":{"position":[[1911,12],[2022,12]]},"2314":{"position":[[166,9],[1737,12],[1848,12],[2106,9],[2153,9]]},"2316":{"position":[[1769,12],[1880,12]]},"2318":{"position":[[1868,12],[1979,12]]}}}],["authent",{"_index":85,"t":{"1644":{"position":[[89,14],[160,14]]},"1662":{"position":[[733,14],[812,14]]},"1796":{"position":[[56,12]]},"1798":{"position":[[122,12]]},"1800":{"position":[[274,12],[636,12],[1334,15]]},"1802":{"position":[[74,12]]},"1811":{"position":[[1166,12],[1196,15]]},"1959":{"position":[[737,14]]},"1965":{"position":[[237,12],[318,12],[593,14],[754,14]]},"1967":{"position":[[116,14],[139,14]]},"1969":{"position":[[120,14],[143,14]]},"2101":{"position":[[3096,14]]},"2119":{"position":[[159,14]]},"2225":{"position":[[90,15]]},"2273":{"position":[[2884,14]]},"2288":{"position":[[553,14]]},"2290":{"position":[[621,14]]},"2292":{"position":[[706,14]]},"2294":{"position":[[603,14]]},"2301":{"position":[[476,14]]},"2303":{"position":[[550,14]]},"2350":{"position":[[79,15]]},"2356":{"position":[[815,14],[2038,14]]},"2368":{"position":[[1006,14],[2229,14]]}}}],["authentication.x509.clientcafil",{"_index":2531,"t":{"2354":{"position":[[79,32]]}}}],["author",{"_index":708,"t":{"1742":{"position":[[694,10],[724,9]]},"1767":{"position":[[218,9]]},"1794":{"position":[[4036,9]]},"1827":{"position":[[495,10]]},"2101":{"position":[[290,13],[3132,13]]},"2231":{"position":[[539,10],[959,13]]},"2233":{"position":[[282,9],[351,9],[522,10],[573,10],[907,13]]},"2235":{"position":[[155,13],[256,13],[375,14],[416,13],[776,13]]},"2237":{"position":[[155,13],[217,13],[341,14],[382,13],[725,13]]},"2239":{"position":[[155,13],[229,13],[354,14],[395,13],[738,13]]},"2241":{"position":[[851,13]]},"2243":{"position":[[812,13]]},"2247":{"position":[[885,13]]},"2249":{"position":[[866,13]]},"2251":{"position":[[762,13]]},"2253":{"position":[[878,13]]},"2255":{"position":[[743,13]]},"2257":{"position":[[658,13]]},"2267":{"position":[[833,13]]},"2273":{"position":[[875,13],[2966,13]]},"2275":{"position":[[262,9],[791,13]]},"2277":{"position":[[274,9],[797,13]]},"2288":{"position":[[636,13]]},"2290":{"position":[[704,13]]},"2292":{"position":[[789,13]]},"2294":{"position":[[686,13]]},"2301":{"position":[[558,13]]},"2303":{"position":[[632,13]]},"2318":{"position":[[105,9]]},"2350":{"position":[[1142,13]]},"2352":{"position":[[307,13],[664,14],[714,13],[767,13],[833,13],[1156,13]]},"2354":{"position":[[1271,13]]},"2356":{"position":[[851,13],[2074,13]]},"2368":{"position":[[1042,13],[2265,13]]}}}],["authorit",{"_index":653,"t":{"1740":{"position":[[401,13]]}}}],["authority=/var/lib/rancher/k3s/server/tls/serv",{"_index":2091,"t":{"2101":{"position":[[851,48]]},"2231":{"position":[[1600,48]]},"2233":{"position":[[1548,48]]},"2235":{"position":[[1417,48]]},"2237":{"position":[[1366,48]]},"2239":{"position":[[1379,48]]},"2241":{"position":[[1492,48]]},"2243":{"position":[[1453,48]]},"2247":{"position":[[1526,48]]},"2249":{"position":[[1507,48]]},"2251":{"position":[[1403,48]]},"2253":{"position":[[1519,48]]},"2255":{"position":[[1384,48]]},"2257":{"position":[[1299,48]]},"2267":{"position":[[1474,48]]},"2273":{"position":[[1516,48]]},"2275":{"position":[[1432,48]]},"2277":{"position":[[1438,48]]},"2350":{"position":[[1783,48]]},"2352":{"position":[[1797,48]]},"2354":{"position":[[1912,48]]}}}],["authority=<ca",{"_index":2448,"t":{"2233":{"position":[[383,13]]}}}],["authorization.mod",{"_index":2528,"t":{"2352":{"position":[[79,18]]}}}],["auto",{"_index":1332,"t":{"1893":{"position":[[520,4]]},"1941":{"position":[[47,4]]},"2200":{"position":[[1108,5],[1439,4],[1965,4]]},"2271":{"position":[[1238,5],[1569,4],[2095,4]]},"2306":{"position":[[1132,5],[1463,4],[1989,4]]},"2308":{"position":[[1021,5],[1352,4],[1878,4]]},"2310":{"position":[[142,4],[183,4],[1046,5],[1377,4],[1903,4]]},"2312":{"position":[[1198,5],[1529,4],[2055,4]]},"2314":{"position":[[1024,5],[1355,4],[1881,4]]},"2316":{"position":[[147,4],[193,4],[1056,5],[1387,4],[1913,4],[2043,4],[2079,4],[2132,4],[2394,4]]},"2318":{"position":[[1155,5],[1486,4],[2012,4]]}}}],["autom",{"_index":1357,"t":{"1900":{"position":[[13,9],[1047,9]]},"1975":{"position":[[124,9]]},"2159":{"position":[[914,8]]},"2167":{"position":[[60,9]]},"2176":{"position":[[1927,9]]}}}],["automat",{"_index":633,"t":{"1736":{"position":[[157,13]]},"1740":{"position":[[374,13]]},"1742":{"position":[[118,9]]},"1750":{"position":[[2031,9]]},"1754":{"position":[[97,9]]},"1767":{"position":[[628,9]]},"1794":{"position":[[4489,9]]},"1810":{"position":[[243,13]]},"1811":{"position":[[1323,13]]},"1838":{"position":[[410,13]]},"1898":{"position":[[609,13]]},"1929":{"position":[[78,13]]},"2053":{"position":[[2051,9]]},"2079":{"position":[[142,14]]},"2081":{"position":[[59,9]]},"2095":{"position":[[223,13]]},"2113":{"position":[[100,13]]},"2115":{"position":[[99,13]]},"2129":{"position":[[92,13]]},"2131":{"position":[[787,13]]},"2163":{"position":[[2208,13]]}}}],["automountserviceaccounttoken",{"_index":2215,"t":{"2131":{"position":[[565,28]]},"2385":{"position":[[224,29]]}}}],["autotedect",{"_index":454,"t":{"1691":{"position":[[378,12]]}}}],["avail",{"_index":684,"t":{"1740":{"position":[[1466,9]]},"1742":{"position":[[249,9]]},"1746":{"position":[[1265,9]]},"1750":{"position":[[13,9],[891,12],[2726,9]]},"1754":{"position":[[13,9]]},"1756":{"position":[[19,12]]},"1758":{"position":[[19,12]]},"1804":{"position":[[61,9]]},"1810":{"position":[[102,9]]},"1832":{"position":[[153,12]]},"1838":{"position":[[1002,9],[1047,9],[1066,12]]},"1848":{"position":[[842,9]]},"1895":{"position":[[96,12],[514,12],[555,12],[846,12]]},"1900":{"position":[[116,9]]},"1904":{"position":[[75,9]]},"1906":{"position":[[958,9]]},"1908":{"position":[[13,9]]},"1910":{"position":[[13,9]]},"1945":{"position":[[789,9]]},"1953":{"position":[[37,9],[85,9]]},"1955":{"position":[[13,9]]},"1963":{"position":[[1452,9]]},"1977":{"position":[[7,9]]},"1983":{"position":[[685,12]]},"1987":{"position":[[126,12]]},"1989":{"position":[[78,12]]},"2021":{"position":[[2134,9]]},"2053":{"position":[[75,9]]},"2105":{"position":[[387,12]]},"2113":{"position":[[209,9]]},"2115":{"position":[[208,9]]},"2121":{"position":[[106,9],[379,9]]},"2123":{"position":[[422,9]]},"2125":{"position":[[150,12],[201,13]]},"2156":{"position":[[14,12]]},"2167":{"position":[[157,10],[628,10]]}}}],["avoid",{"_index":802,"t":{"1748":{"position":[[960,5]]},"1750":{"position":[[2945,5]]},"1840":{"position":[[818,5]]},"1949":{"position":[[194,5]]},"1953":{"position":[[321,5]]},"2097":{"position":[[352,5]]},"2121":{"position":[[291,5]]},"2125":{"position":[[167,8]]},"2326":{"position":[[282,5]]}}}],["aw",{"_index":1610,"t":{"1957":{"position":[[1248,5]]},"2063":{"position":[[43,3]]}}}],["awar",{"_index":1596,"t":{"1955":{"position":[[251,5]]}}}],["aws_access_key_id",{"_index":956,"t":{"1767":{"position":[[1374,17]]},"1794":{"position":[[5323,20]]}}}],["aws_secret_access_key",{"_index":957,"t":{"1767":{"position":[[1433,21]]},"1794":{"position":[[5390,24]]}}}],["azur",{"_index":1817,"t":{"2031":{"position":[[293,6]]}}}],["b",{"_index":1823,"t":{"2039":{"position":[[124,2],[444,3]]},"2063":{"position":[[108,1]]}}}],["b403f678",{"_index":2430,"t":{"2231":{"position":[[697,8]]},"2233":{"position":[[645,8]]},"2235":{"position":[[514,8]]},"2237":{"position":[[463,8]]},"2239":{"position":[[476,8]]},"2241":{"position":[[589,8]]},"2243":{"position":[[550,8]]},"2247":{"position":[[623,8]]},"2249":{"position":[[604,8]]},"2251":{"position":[[500,8]]},"2253":{"position":[[616,8]]},"2255":{"position":[[481,8]]},"2257":{"position":[[396,8]]},"2267":{"position":[[571,8]]},"2273":{"position":[[613,8],[2789,8]]},"2275":{"position":[[529,8]]},"2277":{"position":[[535,8]]},"2288":{"position":[[422,8]]},"2290":{"position":[[490,8]]},"2292":{"position":[[575,8]]},"2294":{"position":[[472,8]]},"2301":{"position":[[381,8]]},"2303":{"position":[[455,8]]},"2350":{"position":[[880,8]]},"2352":{"position":[[894,8]]},"2354":{"position":[[1009,8]]},"2356":{"position":[[1909,8],[2605,8]]},"2368":{"position":[[2100,8],[2796,8]]}}}],["b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7",{"_index":2407,"t":{"2225":{"position":[[788,64]]},"2227":{"position":[[769,64]]},"2245":{"position":[[782,64]]},"2298":{"position":[[754,64]]}}}],["back",{"_index":740,"t":{"1742":{"position":[[2771,4]]},"1806":{"position":[[793,6],[1238,7]]},"1817":{"position":[[15,6],[100,7],[147,4]]},"1819":{"position":[[36,4],[80,4]]},"1821":{"position":[[134,4]]},"1991":{"position":[[121,4]]},"2111":{"position":[[146,4]]}}}],["backend",{"_index":939,"t":{"1764":{"position":[[440,7]]},"1767":{"position":[[258,7],[378,7],[486,7]]},"1782":{"position":[[464,7]]},"1792":{"position":[[182,7],[253,7],[348,7]]},"1794":{"position":[[1914,7],[1983,7],[4076,7],[4202,7],[4319,7]]},"1904":{"position":[[834,7],[927,7],[1037,7],[1163,7],[1248,7]]},"1912":{"position":[[347,7],[456,7],[547,7]]},"1945":{"position":[[292,7],[369,8],[507,7],[886,8],[1085,7],[2340,8]]},"1947":{"position":[[21,7],[84,7],[151,8],[220,7],[303,7],[374,8],[426,7],[710,8],[755,8],[785,8]]},"1983":{"position":[[230,7]]}}}],["backend<=option1=val1,option2=val2",{"_index":1017,"t":{"1794":{"position":[[1941,35]]}}}],["backend=etcd3",{"_index":2111,"t":{"2101":{"position":[[1801,13]]},"2231":{"position":[[2667,13]]},"2233":{"position":[[2615,13]]},"2235":{"position":[[2484,13]]},"2237":{"position":[[2433,13]]},"2239":{"position":[[2446,13]]},"2241":{"position":[[2559,13]]},"2243":{"position":[[2520,13]]},"2247":{"position":[[2593,13]]},"2249":{"position":[[2574,13]]},"2251":{"position":[[2470,13]]},"2253":{"position":[[2586,13]]},"2255":{"position":[[2451,13]]},"2257":{"position":[[2366,13]]},"2267":{"position":[[2541,13]]},"2273":{"position":[[2583,13]]},"2275":{"position":[[2499,13]]},"2277":{"position":[[2505,13]]},"2350":{"position":[[2850,13]]},"2352":{"position":[[2864,13]]},"2354":{"position":[[2979,13]]}}}],["backend=host",{"_index":1532,"t":{"1945":{"position":[[1410,12]]}}}],["backend=ipsec",{"_index":1534,"t":{"1945":{"position":[[1682,13]]}}}],["backend=non",{"_index":170,"t":{"1658":{"position":[[69,12]]},"1792":{"position":[[69,12]]},"1945":{"position":[[2005,12]]},"1949":{"position":[[25,12]]}}}],["backend=vxlan",{"_index":1529,"t":{"1945":{"position":[[1293,13]]}}}],["backend=wireguard",{"_index":1015,"t":{"1792":{"position":[[218,17]]},"1945":{"position":[[1550,17],[1819,17]]},"1957":{"position":[[556,17]]}}}],["backup",{"_index":807,"t":{"1750":{"position":[[86,7],[162,7],[611,7],[864,7],[3000,6]]},"1767":{"position":[[1114,6]]},"1794":{"position":[[5041,6]]},"1806":{"position":[[1271,6]]},"1817":{"position":[[306,7]]},"1821":{"position":[[36,6]]},"1823":{"position":[[78,6]]},"1842":{"position":[[1003,6]]}}}],["balanc",{"_index":20,"t":{"1636":{"position":[[293,8]]},"1648":{"position":[[514,9],[663,9]]},"1662":{"position":[[1770,9],[1919,9]]},"1794":{"position":[[8872,9],[9021,9]]},"1832":{"position":[[1148,8]]},"1840":{"position":[[597,8]]}}}],["bar=baz",{"_index":1417,"t":{"1910":{"position":[[476,7]]}}}],["base",{"_index":542,"t":{"1710":{"position":[[356,4]]},"1767":{"position":[[692,4]]},"1794":{"position":[[4554,4]]},"1838":{"position":[[773,5]]},"1904":{"position":[[157,5]]},"1963":{"position":[[850,5]]},"1981":{"position":[[28,5]]},"1987":{"position":[[26,5]]},"2053":{"position":[[157,5]]},"2061":{"position":[[616,5]]},"2125":{"position":[[425,5]]},"2129":{"position":[[146,5]]},"2180":{"position":[[58,6]]},"2182":{"position":[[58,6]]},"2184":{"position":[[58,6]]},"2186":{"position":[[58,6]]},"2188":{"position":[[58,6]]},"2190":{"position":[[58,6]]},"2192":{"position":[[58,6]]},"2194":{"position":[[58,6]]},"2196":{"position":[[58,6]]},"2198":{"position":[[58,6]]},"2200":{"position":[[175,6]]},"2202":{"position":[[185,6]]},"2204":{"position":[[58,6]]},"2206":{"position":[[48,6]]},"2208":{"position":[[48,6]]},"2210":{"position":[[48,6]]},"2212":{"position":[[48,6]]},"2214":{"position":[[48,6]]},"2216":{"position":[[48,6]]},"2218":{"position":[[48,6]]},"2220":{"position":[[48,6]]},"2329":{"position":[[58,6]]},"2331":{"position":[[58,6]]},"2333":{"position":[[48,6]]},"2335":{"position":[[48,6]]},"2337":{"position":[[48,6]]},"2339":{"position":[[48,6]]},"2350":{"position":[[348,5]]},"2352":{"position":[[334,5]]},"2354":{"position":[[390,5]]},"2356":{"position":[[320,5]]},"2358":{"position":[[377,5]]},"2360":{"position":[[354,5]]},"2362":{"position":[[354,5]]},"2364":{"position":[[228,5]]},"2366":{"position":[[322,5]]},"2368":{"position":[[538,5]]},"2370":{"position":[[404,5]]},"2372":{"position":[[258,5]]},"2374":{"position":[[963,5]]}}}],["base64",{"_index":1299,"t":{"1876":{"position":[[1408,7]]}}}],["baselin",{"_index":1665,"t":{"1973":{"position":[[254,8]]},"2055":{"position":[[765,8],[811,8]]},"2059":{"position":[[160,8]]},"2069":{"position":[[14,8]]}}}],["basenam",{"_index":1465,"t":{"1933":{"position":[[417,9]]}}}],["bash",{"_index":738,"t":{"1742":{"position":[[2602,4]]},"1744":{"position":[[1991,4]]},"1746":{"position":[[1753,4]]}}}],["basic",{"_index":1055,"t":{"1800":{"position":[[1312,5]]},"1908":{"position":[[274,5]]},"1965":{"position":[[680,5],[738,5],[799,5],[820,5]]},"2109":{"position":[[337,5]]},"2326":{"position":[[515,5]]}}}],["bastion",{"_index":1321,"t":{"1884":{"position":[[129,7]]}}}],["batteri",{"_index":13,"t":{"1636":{"position":[[222,10]]}}}],["bcm2711",{"_index":1875,"t":{"2055":{"position":[[531,8],[612,8],[671,8]]},"2067":{"position":[[282,8]]},"2069":{"position":[[254,8]]},"2071":{"position":[[142,8]]}}}],["be",{"_index":772,"t":{"1744":{"position":[[2458,5]]},"1746":{"position":[[2257,5]]},"1748":{"position":[[1220,5]]},"1908":{"position":[[713,5]]},"1937":{"position":[[331,5]]}}}],["be1450e1a11",{"_index":329,"t":{"1675":{"position":[[2053,12]]}}}],["be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9",{"_index":2413,"t":{"2225":{"position":[[1634,64]]},"2227":{"position":[[1615,64]]},"2245":{"position":[[1628,64]]},"2298":{"position":[[1600,64]]}}}],["bearer",{"_index":1045,"t":{"1800":{"position":[[614,6],[1321,6]]},"1802":{"position":[[53,6]]},"1922":{"position":[[270,6]]}}}],["becom",{"_index":840,"t":{"1750":{"position":[[2397,6]]},"1769":{"position":[[586,6]]},"1794":{"position":[[3312,6]]},"1957":{"position":[[203,6]]}}}],["befor",{"_index":728,"t":{"1742":{"position":[[1901,6]]},"1760":{"position":[[439,6],[1228,6]]},"1798":{"position":[[178,6]]},"1800":{"position":[[841,6]]},"1808":{"position":[[88,6]]},"1811":{"position":[[1303,6]]},"1893":{"position":[[0,6]]},"1939":{"position":[[494,6]]},"1945":{"position":[[839,6],[2262,6]]},"2001":{"position":[[127,6]]},"2097":{"position":[[281,6]]},"2163":{"position":[[1761,6]]},"2200":{"position":[[415,6]]},"2271":{"position":[[545,6]]},"2306":{"position":[[439,6]]},"2308":{"position":[[328,6]]},"2310":{"position":[[353,6]]},"2312":{"position":[[505,6]]},"2314":{"position":[[331,6]]},"2316":{"position":[[363,6]]},"2318":{"position":[[462,6]]}}}],["begin",{"_index":1858,"t":{"2053":{"position":[[2533,5]]},"2163":{"position":[[296,5],[2412,5]]}}}],["behavior",{"_index":110,"t":{"1648":{"position":[[303,9]]},"1662":{"position":[[2020,9]]},"1794":{"position":[[8398,9]]},"1904":{"position":[[692,8],[1348,9]]},"1933":{"position":[[1553,8]]}}}],["behind",{"_index":1714,"t":{"1983":{"position":[[934,6]]}}}],["below",{"_index":184,"t":{"1660":{"position":[[278,5]]},"1662":{"position":[[33,6]]},"1750":{"position":[[2794,5]]},"1794":{"position":[[33,6]]},"1886":{"position":[[168,6]]},"1890":{"position":[[367,6]]},"1895":{"position":[[56,6],[1101,6]]},"1904":{"position":[[1070,5]]},"1908":{"position":[[302,6]]},"1910":{"position":[[419,6]]},"1949":{"position":[[292,6]]},"1965":{"position":[[810,5]]},"1967":{"position":[[0,5]]},"1969":{"position":[[0,5]]},"1973":{"position":[[71,6]]},"2021":{"position":[[2103,5]]},"2085":{"position":[[1023,6]]},"2089":{"position":[[336,6]]},"2095":{"position":[[587,5],[1096,5],[1182,5]]},"2097":{"position":[[512,6]]},"2099":{"position":[[18,5]]},"2101":{"position":[[7,5],[4443,6]]},"2105":{"position":[[601,6]]},"2107":{"position":[[700,6]]},"2109":{"position":[[581,6]]},"2111":{"position":[[421,6]]},"2113":{"position":[[596,6]]},"2115":{"position":[[582,6]]},"2117":{"position":[[806,6]]},"2119":{"position":[[599,6]]},"2125":{"position":[[673,6]]},"2129":{"position":[[724,6]]},"2159":{"position":[[341,5],[1509,6]]},"2180":{"position":[[44,5]]},"2182":{"position":[[44,5]]},"2184":{"position":[[44,5]]},"2186":{"position":[[44,5]]},"2188":{"position":[[44,5]]},"2190":{"position":[[44,5]]},"2192":{"position":[[44,5]]},"2194":{"position":[[44,5]]},"2196":{"position":[[44,5]]},"2198":{"position":[[44,5]]},"2200":{"position":[[161,5]]},"2202":{"position":[[171,5]]},"2204":{"position":[[44,5]]},"2206":{"position":[[34,5]]},"2208":{"position":[[34,5]]},"2210":{"position":[[34,5]]},"2212":{"position":[[34,5]]},"2214":{"position":[[34,5]]},"2216":{"position":[[34,5]]},"2218":{"position":[[34,5]]},"2220":{"position":[[34,5]]},"2223":{"position":[[153,5]]},"2231":{"position":[[306,6]]},"2235":{"position":[[247,6]]},"2241":{"position":[[221,5]]},"2257":{"position":[[153,5]]},"2267":{"position":[[153,5]]},"2283":{"position":[[153,5]]},"2288":{"position":[[170,5]]},"2290":{"position":[[169,5]]},"2301":{"position":[[157,5]]},"2306":{"position":[[204,5]]},"2308":{"position":[[130,5]]},"2312":{"position":[[246,5]]},"2314":{"position":[[130,5]]},"2318":{"position":[[253,5]]},"2329":{"position":[[44,5]]},"2331":{"position":[[44,5]]},"2333":{"position":[[34,5]]},"2335":{"position":[[34,5]]},"2337":{"position":[[34,5]]},"2339":{"position":[[34,5]]},"2350":{"position":[[271,5]]},"2352":{"position":[[257,5]]},"2354":{"position":[[300,5]]},"2356":{"position":[[247,5]]},"2358":{"position":[[284,5]]},"2360":{"position":[[269,5]]},"2366":{"position":[[268,5]]},"2368":{"position":[[390,5]]},"2372":{"position":[[152,5]]},"2436":{"position":[[133,6]]}}}],["benchmark",{"_index":402,"t":{"1681":{"position":[[753,9],[943,11]]},"2085":{"position":[[168,9],[486,10],[1065,9]]},"2091":{"position":[[48,9]]},"2093":{"position":[[1311,10]]},"2133":{"position":[[103,10],[137,9]]},"2176":{"position":[[184,9],[319,10],[529,10],[714,9],[751,10],[897,9],[1060,10],[1248,10],[1448,9]]},"2438":{"position":[[179,9]]}}}],["benchmark'",{"_index":2222,"t":{"2133":{"position":[[215,11]]}}}],["best",{"_index":1938,"t":{"2077":{"position":[[188,4]]}}}],["between",{"_index":782,"t":{"1746":{"position":[[1113,7]]},"1760":{"position":[[603,7]]},"1933":{"position":[[1509,7]]},"1945":{"position":[[1506,7]]},"1951":{"position":[[50,7],[121,7]]},"1957":{"position":[[1132,7],[1479,7]]},"2129":{"position":[[479,7]]},"2231":{"position":[[92,7]]},"2233":{"position":[[91,7]]},"2271":{"position":[[92,7]]},"2277":{"position":[[92,7]]}}}],["bfa1",{"_index":311,"t":{"1675":{"position":[[1513,4],[1830,4]]}}}],["bffdc9d7a65f",{"_index":300,"t":{"1675":{"position":[[1185,12]]}}}],["bidirect",{"_index":1562,"t":{"1951":{"position":[[93,13]]}}}],["biggest",{"_index":1695,"t":{"1981":{"position":[[393,7]]},"2073":{"position":[[35,7]]}}}],["bin",{"_index":165,"t":{"1656":{"position":[[105,3]]},"1662":{"position":[[1299,3],[3340,3]]},"1700":{"position":[[208,3],[332,3]]},"1790":{"position":[[161,3]]},"1794":{"position":[[6624,3],[8659,3]]},"2101":{"position":[[3346,3]]}}}],["bin/bash",{"_index":2341,"t":{"2200":{"position":[[296,11]]},"2271":{"position":[[426,11]]},"2306":{"position":[[320,11]]},"2308":{"position":[[209,11]]},"2310":{"position":[[234,11]]},"2312":{"position":[[386,11]]},"2314":{"position":[[212,11]]},"2316":{"position":[[244,11]]},"2318":{"position":[[343,11]]}}}],["bin/p",{"_index":2392,"t":{"2225":{"position":[[289,7]]},"2227":{"position":[[218,7]]},"2245":{"position":[[278,7]]},"2298":{"position":[[227,7]]},"2366":{"position":[[451,7]]},"2374":{"position":[[1092,7]]}}}],["bin/sh",{"_index":2375,"t":{"2206":{"position":[[182,7]]},"2208":{"position":[[159,7]]},"2210":{"position":[[165,7]]},"2212":{"position":[[167,7]]},"2335":{"position":[[201,7]]},"2350":{"position":[[477,7]]},"2352":{"position":[[463,7]]},"2354":{"position":[[519,7]]}}}],["binari",{"_index":167,"t":{"1656":{"position":[[134,8],[153,8]]},"1662":{"position":[[1385,8],[3384,8],[3403,8]]},"1790":{"position":[[190,8],[209,8]]},"1794":{"position":[[6710,8],[8703,8],[8722,8]]},"1893":{"position":[[173,6],[271,6],[861,7]]},"1898":{"position":[[327,6]]},"1906":{"position":[[179,6]]},"1912":{"position":[[401,7]]},"1945":{"position":[[1733,6],[1862,6],[2110,8]]},"1947":{"position":[[276,8]]},"2053":{"position":[[479,7],[572,8],[1012,7]]},"2085":{"position":[[1239,7]]},"2165":{"position":[[84,6]]},"2171":{"position":[[68,6],[109,6],[182,6],[208,6]]}}}],["bind",{"_index":975,"t":{"1776":{"position":[[27,4],[58,4]]},"1794":{"position":[[695,4],[729,4]]},"2101":{"position":[[321,4],[2315,4],[2884,4],[3804,4]]},"2231":{"position":[[990,4]]},"2233":{"position":[[938,4]]},"2235":{"position":[[807,4]]},"2237":{"position":[[756,4]]},"2239":{"position":[[769,4]]},"2241":{"position":[[882,4]]},"2243":{"position":[[843,4]]},"2247":{"position":[[916,4]]},"2249":{"position":[[897,4]]},"2251":{"position":[[793,4]]},"2253":{"position":[[909,4]]},"2255":{"position":[[774,4]]},"2257":{"position":[[689,4]]},"2267":{"position":[[864,4]]},"2273":{"position":[[906,4],[3047,4]]},"2275":{"position":[[822,4]]},"2277":{"position":[[828,4]]},"2288":{"position":[[718,4]]},"2290":{"position":[[786,4]]},"2292":{"position":[[871,4]]},"2294":{"position":[[768,4]]},"2298":{"position":[[197,4],[292,4],[323,4]]},"2301":{"position":[[639,4]]},"2303":{"position":[[179,4],[297,5],[332,4],[376,4],[713,4]]},"2350":{"position":[[1173,4]]},"2352":{"position":[[1187,4]]},"2354":{"position":[[1302,4]]},"2356":{"position":[[1321,4],[2544,4]]},"2368":{"position":[[1512,4],[2735,4]]},"2377":{"position":[[209,4]]},"2391":{"position":[[66,4]]}}}],["bitnami",{"_index":1268,"t":{"1876":{"position":[[60,7]]}}}],["black",{"_index":1337,"t":{"1893":{"position":[[715,5]]}}}],["block",{"_index":2040,"t":{"2095":{"position":[[553,7],[977,7]]}}}],["boolean",{"_index":1408,"t":{"1908":{"position":[[746,7]]},"1965":{"position":[[463,7]]}}}],["boop",{"_index":1416,"t":{"1910":{"position":[[447,4],[705,4]]}}}],["boot/cmdline.txt",{"_index":507,"t":{"1706":{"position":[[170,18]]}}}],["bootstrap",{"_index":657,"t":{"1740":{"position":[[474,9],[1078,9]]},"1800":{"position":[[686,14]]},"1802":{"position":[[241,13]]},"1804":{"position":[[256,9]]},"1810":{"position":[[82,9],[272,9],[290,9]]},"1811":{"position":[[4,9],[82,9],[159,9],[258,9],[303,9],[364,9],[426,9],[1869,9],[2324,9]]}}}],["both",{"_index":792,"t":{"1748":{"position":[[395,4]]},"1750":{"position":[[2740,4]]},"1756":{"position":[[715,4]]},"1806":{"position":[[238,4]]},"1840":{"position":[[1114,4]]},"1908":{"position":[[838,4],[931,4]]},"1929":{"position":[[156,4]]},"1945":{"position":[[814,4]]},"1953":{"position":[[363,4]]},"1957":{"position":[[1025,4],[1063,4]]},"2061":{"position":[[298,4]]},"2091":{"position":[[496,4]]},"2097":{"position":[[796,4]]},"2163":{"position":[[1785,4]]}}}],["bound",{"_index":1933,"t":{"2075":{"position":[[1043,6]]},"2143":{"position":[[438,7]]},"2149":{"position":[[374,7]]}}}],["bracket",{"_index":196,"t":{"1662":{"position":[[24,8]]},"1794":{"position":[[24,8]]}}}],["break",{"_index":1222,"t":{"1846":{"position":[[192,8]]}}}],["breviti",{"_index":904,"t":{"1756":{"position":[[1091,8]]},"1758":{"position":[[878,8]]}}}],["bridg",{"_index":1717,"t":{"1983":{"position":[[1027,6]]}}}],["bucket",{"_index":855,"t":{"1750":{"position":[[3259,6],[3269,6],[3310,6],[3487,6],[3824,6],[4620,6]]},"1767":{"position":[[1479,6],[1499,6],[1550,6]]},"1794":{"position":[[5425,6],[5446,6],[5498,6]]}}}],["bucket=<s3",{"_index":858,"t":{"1750":{"position":[[3476,10],[3813,10],[4609,10]]}}}],["bug",{"_index":1574,"t":{"1953":{"position":[[332,4]]}}}],["building.md",{"_index":1258,"t":{"1860":{"position":[[4,13]]}}}],["built",{"_index":2217,"t":{"2131":{"position":[[696,5]]}}}],["builtin",{"_index":457,"t":{"1691":{"position":[[489,7],[518,7]]}}}],["bundl",{"_index":164,"t":{"1656":{"position":[[97,7],[116,7]]},"1662":{"position":[[3332,7],[3366,7]]},"1700":{"position":[[200,7],[324,7]]},"1790":{"position":[[153,7],[172,7]]},"1794":{"position":[[8651,7],[8685,7]]},"1800":{"position":[[922,6],[1215,7]]},"1802":{"position":[[188,6]]},"2294":{"position":[[214,6]]}}}],["burst",{"_index":591,"t":{"1721":{"position":[[188,5],[311,5]]}}}],["burst=10",{"_index":596,"t":{"1721":{"position":[[352,12]]}}}],["burst=<limit",{"_index":594,"t":{"1721":{"position":[[298,12]]}}}],["busi",{"_index":2181,"t":{"2111":{"position":[[262,8]]}}}],["bypass",{"_index":694,"t":{"1742":{"position":[[166,9]]},"1746":{"position":[[738,6]]}}}],["bzdg5",{"_index":2431,"t":{"2231":{"position":[[706,5]]},"2233":{"position":[[654,5]]},"2235":{"position":[[523,5]]},"2237":{"position":[[472,5]]},"2239":{"position":[[485,5]]},"2241":{"position":[[598,5]]},"2243":{"position":[[559,5]]},"2247":{"position":[[632,5]]},"2249":{"position":[[613,5]]},"2251":{"position":[[509,5]]},"2253":{"position":[[625,5]]},"2255":{"position":[[490,5]]},"2257":{"position":[[405,5]]},"2267":{"position":[[580,5]]},"2273":{"position":[[622,5],[2798,5]]},"2275":{"position":[[538,5]]},"2277":{"position":[[544,5]]},"2288":{"position":[[431,5]]},"2290":{"position":[[499,5]]},"2292":{"position":[[584,5]]},"2294":{"position":[[481,5]]},"2301":{"position":[[390,5]]},"2303":{"position":[[464,5]]},"2350":{"position":[[889,5]]},"2352":{"position":[[903,5]]},"2354":{"position":[[1018,5]]},"2356":{"position":[[1918,5],[2614,5]]},"2368":{"position":[[2109,5],[2805,5]]}}}],["c",{"_index":199,"t":{"1662":{"position":[[232,1]]},"1677":{"position":[[334,1]]},"1794":{"position":[[243,1]]},"1908":{"position":[[1193,1]]},"2039":{"position":[[227,2],[545,2]]},"2200":{"position":[[676,1]]},"2206":{"position":[[191,1],[267,1]]},"2208":{"position":[[168,1],[248,1]]},"2210":{"position":[[174,1],[254,1]]},"2212":{"position":[[176,1],[257,1]]},"2214":{"position":[[179,1]]},"2216":{"position":[[230,1]]},"2218":{"position":[[184,1]]},"2220":{"position":[[184,1]]},"2225":{"position":[[448,1]]},"2227":{"position":[[429,1]]},"2245":{"position":[[442,1]]},"2271":{"position":[[806,1]]},"2298":{"position":[[414,1]]},"2306":{"position":[[700,1]]},"2308":{"position":[[589,1]]},"2310":{"position":[[614,1]]},"2312":{"position":[[766,1]]},"2314":{"position":[[592,1]]},"2316":{"position":[[624,1]]},"2318":{"position":[[723,1]]},"2333":{"position":[[201,1]]},"2335":{"position":[[210,1],[284,1]]},"2337":{"position":[[203,1]]},"2339":{"position":[[209,1]]},"2341":{"position":[[142,1]]},"2343":{"position":[[142,1]]},"2350":{"position":[[486,1]]},"2352":{"position":[[472,1]]},"2354":{"position":[[528,1]]}}}],["c3675b87f96c",{"_index":349,"t":{"1675":{"position":[[2409,12]]}}}],["c4d3d16fe508",{"_index":340,"t":{"1675":{"position":[[2249,12]]}}}],["c5d.xlarg",{"_index":1913,"t":{"2063":{"position":[[47,10]]}}}],["ca",{"_index":223,"t":{"1667":{"position":[[32,5],[56,2],[99,2],[118,2],[155,2]]},"1740":{"position":[[32,2],[114,2],[237,2],[300,2],[415,2],[592,2],[848,2],[905,2],[1388,2],[1422,2],[1460,2]]},"1742":{"position":[[3,2],[142,2],[307,2],[423,2],[478,2],[540,3],[620,2],[1202,2],[1222,2],[1338,2],[1376,2],[1581,2],[1639,2],[1752,2],[2059,2],[2084,2],[2224,2],[2304,3],[2490,2],[2588,2],[2750,2],[2851,2]]},"1744":{"position":[[17,2],[65,2],[435,2],[475,2],[543,2],[569,2],[645,2],[858,3],[916,2],[1299,2],[1324,2],[1427,2],[1861,2],[1959,2],[2017,2],[2078,2],[2118,2],[2341,3]]},"1746":{"position":[[40,2],[88,2],[471,2],[610,2],[630,2],[678,2],[820,3],[832,2],[869,2],[952,4],[1007,3],[1026,2],[1053,2],[1137,4],[1204,2],[1258,3],[1322,2],[1444,4],[1494,2],[1541,4],[1739,2],[1880,2],[1925,2],[1942,2]]},"1748":{"position":[[294,3],[334,2],[1142,2],[1249,2]]},"1750":{"position":[[3067,2],[3080,2]]},"1767":{"position":[[1221,2],[1244,2]]},"1794":{"position":[[5149,2],[5173,2]]},"1800":{"position":[[116,2],[208,2],[250,2],[335,2],[439,2],[919,2],[1005,2],[1212,2]]},"1802":{"position":[[185,2]]},"1806":{"position":[[714,2],[860,2],[1019,2],[1104,2],[1158,2]]},"1811":{"position":[[713,2]]},"1827":{"position":[[476,6],[588,3]]},"1876":{"position":[[931,2]]},"1965":{"position":[[369,2]]},"1967":{"position":[[488,2],[747,2]]},"2101":{"position":[[412,2],[1328,2],[2635,2],[3201,2]]},"2200":{"position":[[1523,2],[2006,2]]},"2231":{"position":[[1081,2],[2133,2]]},"2233":{"position":[[1029,2],[2081,2]]},"2235":{"position":[[898,2],[1950,2]]},"2237":{"position":[[847,2],[1899,2]]},"2239":{"position":[[860,2],[1912,2]]},"2241":{"position":[[973,2],[2025,2]]},"2243":{"position":[[934,2],[1986,2]]},"2247":{"position":[[1007,2],[2059,2]]},"2249":{"position":[[988,2],[2040,2]]},"2251":{"position":[[884,2],[1936,2]]},"2253":{"position":[[1000,2],[2052,2]]},"2255":{"position":[[865,2],[1917,2]]},"2257":{"position":[[780,2],[1832,2]]},"2267":{"position":[[955,2],[2007,2]]},"2271":{"position":[[1653,2],[2136,2]]},"2273":{"position":[[997,2],[2049,2]]},"2275":{"position":[[287,2],[311,2],[423,2],[459,2],[913,2],[1965,2]]},"2277":{"position":[[919,2],[1971,2]]},"2288":{"position":[[1785,2]]},"2290":{"position":[[1853,2]]},"2292":{"position":[[1938,2]]},"2294":{"position":[[177,2],[235,2],[368,2],[402,2],[1835,2]]},"2306":{"position":[[1547,2],[2030,2]]},"2308":{"position":[[1436,2],[1919,2]]},"2310":{"position":[[1461,2],[1944,2]]},"2312":{"position":[[1613,2],[2096,2]]},"2314":{"position":[[1439,2],[1922,2]]},"2316":{"position":[[1471,2],[1954,2]]},"2318":{"position":[[280,2],[1570,2],[2053,2],[2143,2],[2189,2],[2205,2],[2273,2],[2341,2]]},"2341":{"position":[[99,2]]},"2343":{"position":[[92,2]]},"2350":{"position":[[1264,2],[2316,2]]},"2352":{"position":[[1278,2],[2330,2]]},"2354":{"position":[[142,2],[357,2],[381,2],[728,2],[773,2],[868,2],[913,2],[1393,2],[2445,2]]},"2356":{"position":[[911,2],[2134,2]]},"2368":{"position":[[1102,2],[2325,2]]}}}],["ca.crt",{"_index":371,"t":{"1677":{"position":[[489,6]]},"1742":{"position":[[832,6],[860,6],[896,6],[1005,6],[1041,6]]},"2101":{"position":[[459,6],[603,6],[900,6],[1383,6],[2441,6],[2682,6],[3243,6]]},"2231":{"position":[[1128,6],[1359,6],[1649,6],[2188,6]]},"2233":{"position":[[1076,6],[1307,6],[1597,6],[2136,6]]},"2235":{"position":[[945,6],[1176,6],[1466,6],[2005,6]]},"2237":{"position":[[894,6],[1125,6],[1415,6],[1954,6]]},"2239":{"position":[[907,6],[1138,6],[1428,6],[1967,6]]},"2241":{"position":[[1020,6],[1251,6],[1541,6],[2080,6]]},"2243":{"position":[[981,6],[1212,6],[1502,6],[2041,6]]},"2247":{"position":[[1054,6],[1285,6],[1575,6],[2114,6]]},"2249":{"position":[[1035,6],[1266,6],[1556,6],[2095,6]]},"2251":{"position":[[931,6],[1162,6],[1452,6],[1991,6]]},"2253":{"position":[[1047,6],[1278,6],[1568,6],[2107,6]]},"2255":{"position":[[912,6],[1143,6],[1433,6],[1972,6]]},"2257":{"position":[[827,6],[1058,6],[1348,6],[1887,6]]},"2267":{"position":[[1002,6],[1233,6],[1523,6],[2062,6]]},"2273":{"position":[[1044,6],[1275,6],[1565,6],[2104,6]]},"2275":{"position":[[960,6],[1191,6],[1481,6],[2020,6]]},"2277":{"position":[[966,6],[1197,6],[1487,6],[2026,6]]},"2288":{"position":[[925,6],[1109,6],[1287,6],[1465,6],[1832,6]]},"2290":{"position":[[993,6],[1177,6],[1355,6],[1533,6],[1900,6]]},"2292":{"position":[[1078,6],[1262,6],[1440,6],[1618,6],[1985,6]]},"2294":{"position":[[975,6],[1159,6],[1337,6],[1515,6],[1882,6]]},"2318":{"position":[[2258,6],[2324,6]]},"2341":{"position":[[186,6]]},"2343":{"position":[[189,6]]},"2350":{"position":[[1311,6],[1542,6],[1832,6],[2371,6]]},"2352":{"position":[[1325,6],[1556,6],[1846,6],[2385,6]]},"2354":{"position":[[828,8],[968,6],[1440,6],[1671,6],[1961,6],[2500,6]]},"2356":{"position":[[953,6],[2176,6]]},"2368":{"position":[[1144,6],[2367,6]]}}}],["ca.key",{"_index":711,"t":{"1742":{"position":[[846,6],[874,6],[918,6],[1022,6],[1060,6]]},"2101":{"position":[[2514,6]]},"2288":{"position":[[1020,6],[1197,6],[1376,6],[1553,6]]},"2290":{"position":[[1088,6],[1265,6],[1444,6],[1621,6]]},"2292":{"position":[[1173,6],[1350,6],[1529,6],[1706,6]]},"2294":{"position":[[1070,6],[1247,6],[1426,6],[1603,6]]}}}],["ca_fil",{"_index":1649,"t":{"1965":{"position":[[349,7]]},"1967":{"position":[[465,8],[724,8]]}}}],["cacert",{"_index":1049,"t":{"1800":{"position":[[934,8]]}}}],["cacert=/var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":370,"t":{"1677":{"position":[[438,50]]}}}],["cach",{"_index":1630,"t":{"1963":{"position":[[435,6]]}}}],["cafil",{"_index":943,"t":{"1767":{"position":[[168,6]]},"1794":{"position":[[4002,6]]},"1827":{"position":[[416,6]]},"2277":{"position":[[433,7],[466,7]]}}}],["cafile=/var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":2083,"t":{"2101":{"position":[[552,50]]},"2231":{"position":[[1308,50]]},"2233":{"position":[[1256,50]]},"2235":{"position":[[1125,50]]},"2237":{"position":[[1074,50]]},"2239":{"position":[[1087,50]]},"2241":{"position":[[1200,50]]},"2243":{"position":[[1161,50]]},"2247":{"position":[[1234,50]]},"2249":{"position":[[1215,50]]},"2251":{"position":[[1111,50]]},"2253":{"position":[[1227,50]]},"2255":{"position":[[1092,50]]},"2257":{"position":[[1007,50]]},"2267":{"position":[[1182,50]]},"2273":{"position":[[1224,50]]},"2275":{"position":[[1140,50]]},"2277":{"position":[[1146,50]]},"2350":{"position":[[1491,50]]},"2352":{"position":[[1505,50]]},"2354":{"position":[[1620,50]]}}}],["cafile=<path/to/ca",{"_index":2472,"t":{"2277":{"position":[[307,18]]}}}],["calcul",{"_index":1050,"t":{"1800":{"position":[[972,9],[1053,10]]}}}],["calico",{"_index":1552,"t":{"1949":{"position":[[257,7],[305,6],[330,6],[742,6],[779,6],[936,6]]}}}],["calico.conflist",{"_index":1561,"t":{"1949":{"position":[[1050,15]]}}}],["call",{"_index":1970,"t":{"2089":{"position":[[279,6]]},"2163":{"position":[[1195,4]]},"2176":{"position":[[1955,6]]}}}],["canal",{"_index":1551,"t":{"1949":{"position":[[247,5],[299,5],[379,6],[397,5],[553,5]]}}}],["canal.conflist",{"_index":1560,"t":{"1949":{"position":[[666,14]]}}}],["cancel",{"_index":680,"t":{"1740":{"position":[[1309,9]]}}}],["cap_sys_boot",{"_index":2274,"t":{"2159":{"position":[[828,12]]}}}],["capabl",{"_index":1721,"t":{"1983":{"position":[[1115,12]]},"2109":{"position":[[349,13]]},"2159":{"position":[[841,10]]},"2408":{"position":[[154,11]]},"2412":{"position":[[44,12],[169,12],[279,13]]}}}],["captur",{"_index":1693,"t":{"1981":{"position":[[189,8]]},"2055":{"position":[[13,8]]},"2065":{"position":[[13,8]]},"2073":{"position":[[13,8]]}}}],["card",{"_index":1231,"t":{"1846":{"position":[[469,6]]},"1981":{"position":[[728,4]]}}}],["care",{"_index":1470,"t":{"1933":{"position":[[592,4]]},"2077":{"position":[[79,4]]},"2326":{"position":[[173,4]]}}}],["carefulli",{"_index":1069,"t":{"1806":{"position":[[468,10]]}}}],["carri",{"_index":2184,"t":{"2113":{"position":[[223,8]]},"2115":{"position":[[222,8]]}}}],["case",{"_index":1150,"t":{"1832":{"position":[[254,6]]},"1840":{"position":[[115,5]]},"1933":{"position":[[1083,4]]},"1969":{"position":[[418,4]]},"2125":{"position":[[228,5]]},"2176":{"position":[[1494,4]]},"2200":{"position":[[642,4],[1667,4]]},"2271":{"position":[[772,4],[1797,4]]},"2306":{"position":[[666,4],[1691,4]]},"2308":{"position":[[555,4],[1580,4]]},"2310":{"position":[[580,4],[1605,4]]},"2312":{"position":[[732,4],[1757,4]]},"2314":{"position":[[558,4],[1583,4]]},"2316":{"position":[[590,4],[1615,4]]},"2318":{"position":[[689,4],[1714,4]]}}}],["cat",{"_index":803,"t":{"1748":{"position":[[994,3]]},"1842":{"position":[[303,3]]},"1949":{"position":[[644,3],[1028,3]]},"2154":{"position":[[581,3]]},"2310":{"position":[[2295,4],[2535,4],[2775,4]]},"2316":{"position":[[2340,4]]}}}],["cattl",{"_index":586,"t":{"1719":{"position":[[168,6],[280,6]]}}}],["caus",{"_index":930,"t":{"1764":{"position":[[105,5]]},"1840":{"position":[[294,7]]},"1939":{"position":[[97,5],[537,5]]},"2075":{"position":[[379,5],[946,5]]},"2089":{"position":[[33,5]]},"2163":{"position":[[1688,5],[1966,5],[2498,5]]}}}],["caution",{"_index":892,"t":{"1754":{"position":[[385,8]]}}}],["cbc",{"_index":912,"t":{"1760":{"position":[[365,3],[677,3],[716,3],[1756,3]]},"2079":{"position":[[173,3]]}}}],["ccm",{"_index":1828,"t":{"2043":{"position":[[86,8],[337,4],[403,4],[429,4]]}}}],["ccm.yaml",{"_index":1503,"t":{"1939":{"position":[[622,8]]}}}],["center",{"_index":1949,"t":{"2085":{"position":[[196,6]]},"2091":{"position":[[62,8]]},"2176":{"position":[[796,6]]}}}],["cento",{"_index":537,"t":{"1710":{"position":[[61,8]]}}}],["cephf",{"_index":2228,"t":{"2137":{"position":[[252,6]]}}}],["cert",{"_index":727,"t":{"1742":{"position":[[1886,5],[1984,4],[2062,4],[2493,5]]},"1744":{"position":[[985,5],[1157,5],[1236,4],[1302,4],[1864,5],[2020,5]]},"1746":{"position":[[1497,5],[1621,6],[1779,5]]},"1748":{"position":[[682,4]]},"1750":{"position":[[3083,4]]},"1767":{"position":[[1247,4]]},"1776":{"position":[[452,4]]},"1794":{"position":[[1233,4],[5176,4]]},"1840":{"position":[[1037,5]]},"1965":{"position":[[432,4]]},"1967":{"position":[[380,4],[639,4]]},"2101":{"position":[[346,4],[397,5],[1115,4],[1821,4],[2392,4],[4222,4]]},"2200":{"position":[[941,5],[1075,4],[1268,5],[1400,4],[1767,5],[1816,4],[1874,4],[1927,4]]},"2231":{"position":[[1015,4],[1066,5],[1920,4],[2687,4]]},"2233":{"position":[[321,4],[963,4],[1014,5],[1868,4],[2635,4]]},"2235":{"position":[[832,4],[883,5],[1737,4],[2504,4]]},"2237":{"position":[[781,4],[832,5],[1686,4],[2453,4]]},"2239":{"position":[[794,4],[845,5],[1699,4],[2466,4]]},"2241":{"position":[[907,4],[958,5],[1812,4],[2579,4]]},"2243":{"position":[[868,4],[919,5],[1773,4],[2540,4]]},"2247":{"position":[[941,4],[992,5],[1846,4],[2613,4]]},"2249":{"position":[[922,4],[973,5],[1827,4],[2594,4]]},"2251":{"position":[[818,4],[869,5],[1723,4],[2490,4]]},"2253":{"position":[[934,4],[985,5],[1839,4],[2606,4]]},"2255":{"position":[[799,4],[850,5],[1704,4],[2471,4]]},"2257":{"position":[[714,4],[765,5],[1619,4],[2386,4]]},"2267":{"position":[[889,4],[940,5],[1794,4],[2561,4]]},"2271":{"position":[[1071,5],[1205,4],[1398,5],[1530,4],[1897,5],[1946,4],[2004,4],[2057,4]]},"2273":{"position":[[298,4],[501,4],[931,4],[982,5],[1836,4],[2603,4],[3072,4]]},"2275":{"position":[[847,4],[898,5],[1752,4],[2519,4]]},"2277":{"position":[[853,4],[904,5],[1758,4],[2525,4]]},"2288":{"position":[[743,4],[876,4],[1060,4],[1238,4],[1416,4]]},"2290":{"position":[[811,4],[944,4],[1128,4],[1306,4],[1484,4]]},"2292":{"position":[[896,4],[1029,4],[1213,4],[1391,4],[1569,4]]},"2294":{"position":[[793,4],[926,4],[1110,4],[1288,4],[1466,4]]},"2301":{"position":[[664,4]]},"2303":{"position":[[738,4]]},"2306":{"position":[[224,4],[965,5],[1099,4],[1292,5],[1424,4],[1791,5],[1840,4],[1898,4],[1951,4],[2111,5],[2176,4],[2199,4],[2330,4]]},"2308":{"position":[[156,4],[854,5],[988,4],[1181,5],[1313,4],[1680,5],[1729,4],[1787,4],[1840,4],[2010,4],[2043,4],[2098,4],[2120,4],[2145,4]]},"2310":{"position":[[879,5],[1013,4],[1206,5],[1338,4],[1705,5],[1754,4],[1812,4],[1865,4]]},"2312":{"position":[[298,4],[1031,5],[1165,4],[1358,5],[1490,4],[1857,5],[1906,4],[1964,4],[2017,4],[2177,5],[2247,4],[2275,4],[2421,4]]},"2314":{"position":[[161,4],[857,5],[991,4],[1184,5],[1316,4],[1683,5],[1732,4],[1790,4],[1843,4],[2013,4],[2046,4],[2101,4],[2123,4],[2148,4]]},"2316":{"position":[[889,5],[1023,4],[1216,5],[1348,4],[1715,5],[1764,4],[1822,4],[1875,4]]},"2318":{"position":[[988,5],[1122,4],[1315,5],[1447,4],[1814,5],[1863,4],[1921,4],[1974,4]]},"2350":{"position":[[1198,4],[1249,5],[2103,4],[2870,4]]},"2352":{"position":[[1212,4],[1263,5],[2117,4],[2884,4]]},"2354":{"position":[[1327,4],[1378,5],[2232,4],[2999,4]]},"2356":{"position":[[1747,4],[2970,4]]},"2368":{"position":[[451,4],[765,4],[1938,4],[3161,4]]}}}],["cert+key",{"_index":730,"t":{"1742":{"position":[[2087,8]]},"1744":{"position":[[1327,8]]}}}],["cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt",{"_index":372,"t":{"1677":{"position":[[500,52]]}}}],["cert_fil",{"_index":1647,"t":{"1965":{"position":[[178,9]]},"1967":{"position":[[355,10],[614,10]]}}}],["certain",{"_index":1210,"t":{"1842":{"position":[[742,7]]},"1848":{"position":[[1280,7]]},"2085":{"position":[[604,7]]}}}],["certfil",{"_index":946,"t":{"1767":{"position":[[292,8]]},"1794":{"position":[[4134,8]]},"1827":{"position":[[642,8],[938,8]]},"2200":{"position":[[1724,8]]},"2271":{"position":[[1854,8],[2228,9],[2304,8]]},"2306":{"position":[[1748,8]]},"2308":{"position":[[1637,8]]},"2310":{"position":[[1662,8]]},"2312":{"position":[[1814,8]]},"2314":{"position":[[1640,8]]},"2316":{"position":[[1672,8]]},"2318":{"position":[[1771,8]]}}}],["certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt",{"_index":2085,"t":{"2101":{"position":[[626,56]]},"2231":{"position":[[1373,56]]},"2233":{"position":[[1321,56]]},"2235":{"position":[[1190,56]]},"2237":{"position":[[1139,56]]},"2239":{"position":[[1152,56]]},"2241":{"position":[[1265,56]]},"2243":{"position":[[1226,56]]},"2247":{"position":[[1299,56]]},"2249":{"position":[[1280,56]]},"2251":{"position":[[1176,56]]},"2253":{"position":[[1292,56]]},"2255":{"position":[[1157,56]]},"2257":{"position":[[1072,56]]},"2267":{"position":[[1247,56]]},"2273":{"position":[[1289,56]]},"2275":{"position":[[1205,56]]},"2277":{"position":[[1211,56]]},"2350":{"position":[[1556,56]]},"2352":{"position":[[1570,56]]},"2354":{"position":[[1685,56]]}}}],["certfile=<path/to/cli",{"_index":2464,"t":{"2271":{"position":[[306,24]]}}}],["certif",{"_index":616,"t":{"1723":{"position":[[1030,11],[1070,11]]},"1736":{"position":[[22,12],[91,12]]},"1738":{"position":[[28,12],[63,11],[133,12],[150,11],[224,12],[270,11],[292,11],[355,12]]},"1740":{"position":[[35,12],[117,13],[154,12],[240,12],[303,12],[418,12],[595,12],[695,12],[763,12],[813,12],[851,12],[886,11],[983,12],[1116,12],[1226,12],[1369,11],[1425,12]]},"1742":{"position":[[6,12],[145,12],[224,12],[426,12],[481,13],[623,12],[712,11],[1170,12],[1225,12],[1341,12],[1584,13],[1642,12],[1755,13],[2854,12]]},"1744":{"position":[[20,13],[46,11],[222,13],[342,12],[438,12],[478,12],[626,11],[1469,13],[2059,11]]},"1746":{"position":[[43,13],[69,11],[245,13],[365,12],[474,13],[633,12],[681,13],[872,12],[968,11],[1207,12],[1393,12],[1861,11]]},"1748":{"position":[[315,11],[1123,11]]},"1750":{"position":[[3156,11]]},"1767":{"position":[[206,11],[334,13],[1324,11]]},"1794":{"position":[[4024,11],[4158,13],[5254,11]]},"1800":{"position":[[253,12],[338,13],[396,12],[442,13],[511,12],[546,11],[1008,12],[1143,11],[1237,11]]},"1806":{"position":[[717,12],[863,12],[1107,13],[1161,13],[1187,11]]},"1827":{"position":[[483,11]]},"1838":{"position":[[883,12]]},"1840":{"position":[[824,11]]},"1965":{"position":[[199,11],[372,11]]},"2101":{"position":[[839,11]]},"2231":{"position":[[272,11],[358,11],[527,11],[585,12],[1588,11]]},"2233":{"position":[[270,11],[339,11],[371,11],[510,11],[561,11],[1536,11]]},"2235":{"position":[[1405,11]]},"2237":{"position":[[1354,11]]},"2239":{"position":[[1367,11]]},"2241":{"position":[[1480,11]]},"2243":{"position":[[1441,11]]},"2247":{"position":[[1514,11]]},"2249":{"position":[[1495,11]]},"2251":{"position":[[1391,11]]},"2253":{"position":[[1507,11]]},"2255":{"position":[[1372,11]]},"2257":{"position":[[1287,11]]},"2267":{"position":[[1462,11]]},"2271":{"position":[[262,11],[331,11]]},"2273":{"position":[[247,11],[321,11],[1504,11]]},"2275":{"position":[[250,11],[1420,11]]},"2277":{"position":[[262,11],[1426,11]]},"2294":{"position":[[202,11]]},"2318":{"position":[[93,11]]},"2321":{"position":[[137,13]]},"2350":{"position":[[1771,11]]},"2352":{"position":[[1785,11]]},"2354":{"position":[[1900,11]]},"2368":{"position":[[114,11],[474,11]]}}}],["certificate=/var/lib/rancher/k3s/server/tls/cli",{"_index":2092,"t":{"2101":{"position":[[924,50]]},"2231":{"position":[[1673,50]]},"2233":{"position":[[1621,50]]},"2235":{"position":[[1490,50]]},"2237":{"position":[[1439,50]]},"2239":{"position":[[1452,50]]},"2241":{"position":[[1565,50]]},"2243":{"position":[[1526,50]]},"2247":{"position":[[1599,50]]},"2249":{"position":[[1580,50]]},"2251":{"position":[[1476,50]]},"2253":{"position":[[1592,50]]},"2255":{"position":[[1457,50]]},"2257":{"position":[[1372,50]]},"2267":{"position":[[1547,50]]},"2273":{"position":[[1589,50]]},"2275":{"position":[[1505,50]]},"2277":{"position":[[1511,50]]},"2350":{"position":[[1856,50]]},"2352":{"position":[[1870,50]]},"2354":{"position":[[1985,50]]}}}],["certificate=<path/to/cli",{"_index":2423,"t":{"2231":{"position":[[330,27]]}}}],["certificates=fals",{"_index":2565,"t":{"2370":{"position":[[332,18]]}}}],["certs.sh",{"_index":699,"t":{"1742":{"position":[[310,9],[2591,8]]},"1744":{"position":[[919,8],[1962,8]]},"1746":{"position":[[1325,9],[1742,8]]}}}],["cgroup",{"_index":25,"t":{"1636":{"position":[[457,6]]},"1687":{"position":[[328,6],[335,6],[373,6],[405,8],[457,7]]},"1689":{"position":[[67,6],[105,8],[732,7]]},"1706":{"position":[[89,8],[145,8],[161,8]]},"2061":{"position":[[200,6]]},"2101":{"position":[[3169,6]]},"2356":{"position":[[880,6],[2103,6]]},"2368":{"position":[[1071,6],[2294,6]]}}}],["cgroup_enable=memori",{"_index":509,"t":{"1706":{"position":[[205,21],[398,20]]}}}],["cgroup_memory=1",{"_index":508,"t":{"1706":{"position":[[189,15],[382,15]]}}}],["cgroups=/systemd/system.slic",{"_index":2153,"t":{"2101":{"position":[[3927,29],[4156,29]]}}}],["cgtop",{"_index":1901,"t":{"2061":{"position":[[163,5]]}}}],["chain",{"_index":781,"t":{"1746":{"position":[[1098,5]]},"2129":{"position":[[37,6]]},"2156":{"position":[[335,5]]},"2362":{"position":[[294,6]]}}}],["chains=tru",{"_index":1779,"t":{"2021":{"position":[[997,12]]},"2099":{"position":[[765,12],[1388,12]]}}}],["chang",{"_index":181,"t":{"1660":{"position":[[228,7],[437,6]]},"1740":{"position":[[1327,8]]},"1744":{"position":[[2324,7]]},"1750":{"position":[[508,7]]},"1771":{"position":[[303,8]]},"1806":{"position":[[295,7]]},"1808":{"position":[[137,8]]},"1840":{"position":[[131,6],[492,6]]},"1846":{"position":[[201,7]]},"1898":{"position":[[443,7]]},"1908":{"position":[[1137,7]]},"1929":{"position":[[193,7]]},"1947":{"position":[[894,8]]},"1953":{"position":[[1046,6],[1092,6]]},"1957":{"position":[[1231,7]]},"1963":{"position":[[823,6]]},"1969":{"position":[[557,7]]},"1985":{"position":[[494,7]]},"2075":{"position":[[220,7]]},"2117":{"position":[[615,6]]},"2129":{"position":[[126,7],[253,7],[440,7]]},"2159":{"position":[[1952,7]]},"2161":{"position":[[478,7]]},"2167":{"position":[[1103,7]]}}}],["channel",{"_index":1445,"t":{"1922":{"position":[[49,7]]},"2053":{"position":[[941,7],[2114,7],[2232,7]]},"2163":{"position":[[1898,7],[2103,9],[2167,7],[2326,8]]},"2167":{"position":[[120,9],[144,8],[168,7],[496,7],[590,8],[714,9],[746,7],[801,8]]},"2169":{"position":[[198,7],[274,7],[319,8]]}}}],["channelserv",{"_index":2307,"t":{"2167":{"position":[[828,13]]}}}],["charact",{"_index":1485,"t":{"1933":{"position":[[1101,11],[1169,9]]}}}],["charon",{"_index":1542,"t":{"1945":{"position":[[2103,6]]},"1947":{"position":[[269,6]]}}}],["chart",{"_index":582,"t":{"1719":{"position":[[83,6]]},"1876":{"position":[[466,6],[751,5],[1456,5]]},"1941":{"position":[[36,6]]}}}],["charts/ranch",{"_index":588,"t":{"1719":{"position":[[218,14],[374,14]]}}}],["check",{"_index":671,"t":{"1740":{"position":[[948,6]]},"1744":{"position":[[2147,5]]},"1746":{"position":[[755,7],[1971,5]]},"1748":{"position":[[729,5],[1278,5]]},"1848":{"position":[[592,5]]},"1870":{"position":[[85,5]]},"1900":{"position":[[530,5]]},"1939":{"position":[[213,8]]},"1957":{"position":[[951,5]]},"1959":{"position":[[134,5]]},"2061":{"position":[[186,5]]},"2119":{"position":[[426,5]]},"2133":{"position":[[227,6]]},"2200":{"position":[[425,6]]},"2271":{"position":[[555,6]]},"2306":{"position":[[449,6]]},"2308":{"position":[[338,6]]},"2310":{"position":[[363,6]]},"2312":{"position":[[515,6]]},"2314":{"position":[[341,6]]},"2316":{"position":[[373,6]]},"2318":{"position":[[472,6]]},"2377":{"position":[[86,5]]}}}],["check_for_k3s_etcd.sh",{"_index":2340,"t":{"2200":{"position":[[274,21],[2042,23]]},"2271":{"position":[[404,21],[2172,23]]},"2306":{"position":[[298,21],[2066,23]]},"2308":{"position":[[187,21],[1955,23]]},"2310":{"position":[[212,21],[1980,23]]},"2312":{"position":[[364,21],[2132,23]]},"2314":{"position":[[190,21],[1958,23]]},"2316":{"position":[[222,21],[1990,23]]},"2318":{"position":[[321,21],[2089,23]]}}}],["chmod",{"_index":2329,"t":{"2180":{"position":[[142,5]]},"2184":{"position":[[142,5]]},"2188":{"position":[[142,5]]},"2192":{"position":[[142,5]]},"2196":{"position":[[142,5]]},"2200":{"position":[[236,5]]},"2204":{"position":[[142,5]]},"2208":{"position":[[132,5]]},"2212":{"position":[[132,5]]},"2218":{"position":[[132,5]]},"2220":{"position":[[132,5]]},"2329":{"position":[[140,5]]},"2333":{"position":[[130,5]]},"2337":{"position":[[130,5]]},"2341":{"position":[[108,5]]},"2345":{"position":[[124,5]]}}}],["choic",{"_index":1549,"t":{"1949":{"position":[[62,7]]}}}],["choos",{"_index":1392,"t":{"1906":{"position":[[107,6]]},"2125":{"position":[[467,6]]},"2129":{"position":[[163,6]]},"2281":{"position":[[115,6]]}}}],["chown",{"_index":2332,"t":{"2182":{"position":[[142,5]]},"2186":{"position":[[142,5]]},"2190":{"position":[[142,5]]},"2194":{"position":[[142,5]]},"2198":{"position":[[142,5]]},"2202":{"position":[[246,5]]},"2206":{"position":[[132,5]]},"2210":{"position":[[132,5]]},"2214":{"position":[[132,5]]},"2216":{"position":[[132,5]]},"2331":{"position":[[140,5]]},"2335":{"position":[[130,5]]},"2339":{"position":[[130,5]]},"2343":{"position":[[101,5]]},"2347":{"position":[[124,5]]}}}],["chronolog",{"_index":2174,"t":{"2109":{"position":[[124,13]]}}}],["ci",{"_index":4,"t":{"1634":{"position":[[88,6]]},"2021":{"position":[[1116,3],[1633,3]]},"2083":{"position":[[106,3],[142,3]]},"2085":{"position":[[225,6],[347,3],[482,3],[612,3],[1061,3]]},"2091":{"position":[[44,3]]},"2093":{"position":[[827,3],[1307,3],[1469,3],[1515,3],[1555,3],[1723,3],[1752,3],[1781,3],[1831,3]]},"2095":{"position":[[0,3]]},"2097":{"position":[[0,3]]},"2101":{"position":[[137,3],[4396,3]]},"2133":{"position":[[88,3],[133,3]]},"2176":{"position":[[304,3],[514,3],[699,3],[825,6],[882,3],[1056,3],[1444,3]]},"2231":{"position":[[687,3]]},"2233":{"position":[[635,3]]},"2235":{"position":[[504,3]]},"2237":{"position":[[453,3]]},"2239":{"position":[[466,3]]},"2241":{"position":[[579,3]]},"2243":{"position":[[540,3]]},"2247":{"position":[[613,3]]},"2249":{"position":[[594,3]]},"2251":{"position":[[490,3]]},"2253":{"position":[[606,3]]},"2255":{"position":[[471,3]]},"2257":{"position":[[386,3]]},"2267":{"position":[[561,3]]},"2273":{"position":[[603,3],[2779,3]]},"2275":{"position":[[519,3]]},"2277":{"position":[[525,3]]},"2288":{"position":[[412,3]]},"2290":{"position":[[480,3]]},"2292":{"position":[[565,3]]},"2294":{"position":[[462,3]]},"2301":{"position":[[371,3]]},"2303":{"position":[[445,3]]},"2350":{"position":[[870,3]]},"2352":{"position":[[884,3]]},"2354":{"position":[[999,3]]},"2356":{"position":[[676,3],[1372,3],[1899,3],[2595,3]]},"2368":{"position":[[867,3],[1563,3],[2090,3],[2786,3]]},"2438":{"position":[[166,3]]}}}],["ci/cd",{"_index":1126,"t":{"1825":{"position":[[249,5]]}}}],["cidr",{"_index":452,"t":{"1691":{"position":[[340,5]]},"1702":{"position":[[390,5]]},"1704":{"position":[[275,5]]},"1764":{"position":[[273,4],[521,4]]},"1782":{"position":[[35,4],[79,5],[114,4],[158,5],[389,4],[1646,4],[1924,4]]},"1794":{"position":[[1371,4],[1413,5],[1472,4],[1514,5],[1793,4]]},"1842":{"position":[[685,5],[701,4]]},"1848":{"position":[[1223,5],[1239,4]]},"1953":{"position":[[741,4],[758,4],[972,4],[989,4],[1065,4],[1108,4],[1137,4],[1251,4]]},"1955":{"position":[[422,4],[441,4]]},"1993":{"position":[[63,4],[156,4]]}}}],["cidr=10.200.0.0/16",{"_index":1397,"t":{"1906":{"position":[[1120,18]]}}}],["cidr=10.42.0.0/16",{"_index":2118,"t":{"2101":{"position":[[2356,17]]},"2288":{"position":[[818,17]]},"2290":{"position":[[886,17]]},"2292":{"position":[[971,17]]},"2294":{"position":[[868,17]]}}}],["cidr=10.42.0.0/16,2001:cafe:42:0::/56",{"_index":1578,"t":{"1953":{"position":[[839,37]]}}}],["cidr=10.43.0.0/16,2001:cafe:42:1::/112",{"_index":1579,"t":{"1953":{"position":[[887,38]]}}}],["cidr=2001:cafe:42:0::/56",{"_index":1599,"t":{"1955":{"position":[[508,24]]}}}],["cidr=2001:cafe:42:1::/112",{"_index":1600,"t":{"1955":{"position":[[543,25]]}}}],["cidrs=tru",{"_index":2116,"t":{"2101":{"position":[[2302,10]]},"2288":{"position":[[540,10]]},"2290":{"position":[[608,10]]},"2292":{"position":[[693,10]]},"2294":{"position":[[590,10]]}}}],["cipher",{"_index":2114,"t":{"2101":{"position":[[1996,6]]},"2283":{"position":[[176,6],[1026,6]]},"2374":{"position":[[579,6],[653,6]]}}}],["claim",{"_index":2225,"t":{"2135":{"position":[[266,7]]},"2139":{"position":[[85,8]]}}}],["claimnam",{"_index":2249,"t":{"2143":{"position":[[283,10]]},"2149":{"position":[[283,10]]}}}],["clarifi",{"_index":2166,"t":{"2103":{"position":[[118,10]]}}}],["class",{"_index":1011,"t":{"1784":{"position":[[109,5]]},"1794":{"position":[[5791,5]]},"2063":{"position":[[130,5]]}}}],["clean",{"_index":2264,"t":{"2156":{"position":[[237,6]]}}}],["cli",{"_index":52,"t":{"1640":{"position":[[206,3]]},"1677":{"position":[[29,4]]},"1723":{"position":[[460,7],[663,7],[745,7]]},"1754":{"position":[[57,3]]},"1762":{"position":[[244,3]]},"1804":{"position":[[163,3]]},"1808":{"position":[[150,3]]},"1811":{"position":[[118,3]]},"1827":{"position":[[168,3],[198,3]]},"1842":{"position":[[191,3]]},"1908":{"position":[[104,3],[463,3],[635,3],[699,3],[868,3],[949,3],[1036,3],[1164,3]]},"1945":{"position":[[895,3]]},"1947":{"position":[[832,3]]},"2005":{"position":[[18,3],[121,3]]},"2007":{"position":[[94,3]]},"2154":{"position":[[265,3]]}}}],["cli/agent.md#nod",{"_index":463,"t":{"1695":{"position":[[117,26]]}}}],["client",{"_index":119,"t":{"1648":{"position":[[502,6],[651,6]]},"1662":{"position":[[1758,6],[1907,6]]},"1736":{"position":[[4,6]]},"1738":{"position":[[10,6]]},"1742":{"position":[[853,6],[867,6]]},"1767":{"position":[[557,6]]},"1771":{"position":[[122,6]]},"1794":{"position":[[2524,8],[2560,6],[2635,8],[4416,6],[8860,6],[9009,6]]},"1798":{"position":[[112,6]]},"1832":{"position":[[1131,6]]},"1965":{"position":[[192,6],[281,6]]},"2101":{"position":[[405,6],[917,6],[1004,6],[1108,6],[1187,6],[1321,6],[3194,6]]},"2200":{"position":[[860,7],[989,7],[1067,7],[1392,7],[1809,6],[1920,6]]},"2231":{"position":[[265,6],[323,6],[386,6],[578,6],[624,6],[1074,6],[1666,6],[1753,6],[1913,6],[1992,6],[2126,6]]},"2233":{"position":[[1022,6],[1614,6],[1701,6],[1861,6],[1940,6],[2074,6]]},"2235":{"position":[[891,6],[1483,6],[1570,6],[1730,6],[1809,6],[1943,6]]},"2237":{"position":[[840,6],[1432,6],[1519,6],[1679,6],[1758,6],[1892,6]]},"2239":{"position":[[853,6],[1445,6],[1532,6],[1692,6],[1771,6],[1905,6]]},"2241":{"position":[[966,6],[1558,6],[1645,6],[1805,6],[1884,6],[2018,6]]},"2243":{"position":[[927,6],[1519,6],[1606,6],[1766,6],[1845,6],[1979,6]]},"2247":{"position":[[1000,6],[1592,6],[1679,6],[1839,6],[1918,6],[2052,6]]},"2249":{"position":[[981,6],[1573,6],[1660,6],[1820,6],[1899,6],[2033,6]]},"2251":{"position":[[877,6],[1469,6],[1556,6],[1716,6],[1795,6],[1929,6]]},"2253":{"position":[[993,6],[1585,6],[1672,6],[1832,6],[1911,6],[2045,6]]},"2255":{"position":[[858,6],[1450,6],[1537,6],[1697,6],[1776,6],[1910,6]]},"2257":{"position":[[773,6],[1365,6],[1452,6],[1612,6],[1691,6],[1825,6]]},"2267":{"position":[[948,6],[1540,6],[1627,6],[1787,6],[1866,6],[2000,6]]},"2271":{"position":[[990,7],[1119,7],[1197,7],[1522,7],[1939,6],[2050,6]]},"2273":{"position":[[990,6],[1582,6],[1669,6],[1829,6],[1908,6],[2042,6]]},"2275":{"position":[[243,6],[280,6],[415,7],[452,6],[906,6],[1498,6],[1585,6],[1745,6],[1824,6],[1958,6]]},"2277":{"position":[[912,6],[1504,6],[1591,6],[1751,6],[1830,6],[1964,6]]},"2288":{"position":[[869,6],[965,6],[1053,6],[1142,6]]},"2290":{"position":[[937,6],[1033,6],[1121,6],[1210,6]]},"2292":{"position":[[1022,6],[1118,6],[1206,6],[1295,6]]},"2294":{"position":[[919,6],[1015,6],[1103,6],[1192,6]]},"2306":{"position":[[884,7],[1013,7],[1091,7],[1416,7],[1833,6],[1944,6]]},"2308":{"position":[[149,6],[773,7],[902,7],[980,7],[1305,7],[1722,6],[1833,6],[2003,6],[2035,7],[2091,6],[2113,6],[2138,6]]},"2310":{"position":[[798,7],[927,7],[1005,7],[1330,7],[1747,6],[1858,6]]},"2312":{"position":[[271,6],[950,7],[1079,7],[1157,7],[1482,7],[1899,6],[2010,6]]},"2314":{"position":[[154,6],[776,7],[905,7],[983,7],[1308,7],[1725,6],[1836,6],[2006,6],[2038,7],[2094,6],[2116,6],[2141,6]]},"2316":{"position":[[808,7],[937,7],[1015,7],[1340,7],[1757,6],[1868,6]]},"2318":{"position":[[907,7],[1036,7],[1114,7],[1439,7],[1856,6],[1967,6]]},"2321":{"position":[[130,6]]},"2341":{"position":[[92,6]]},"2343":{"position":[[85,6]]},"2350":{"position":[[1257,6],[1849,6],[1936,6],[2096,6],[2175,6],[2309,6]]},"2352":{"position":[[1271,6],[1863,6],[1950,6],[2110,6],[2189,6],[2323,6]]},"2354":{"position":[[135,6],[350,6],[720,7],[766,6],[861,6],[906,6],[1386,6],[1978,6],[2065,6],[2225,6],[2304,6],[2438,6]]},"2356":{"position":[[904,6],[2127,6]]},"2368":{"position":[[1095,6],[2318,6]]}}}],["client.crt",{"_index":2496,"t":{"2306":{"position":[[2254,10]]},"2312":{"position":[[2335,10]]}}}],["client.key",{"_index":2497,"t":{"2306":{"position":[[2319,10]]},"2312":{"position":[[2405,10]]}}}],["cloud",{"_index":496,"t":{"1702":{"position":[[443,5],[499,5],[522,5]]},"1723":{"position":[[155,5]]},"1738":{"position":[[462,5]]},"1764":{"position":[[319,5]]},"1786":{"position":[[131,5],[168,5]]},"1788":{"position":[[302,5],[362,5]]},"1794":{"position":[[3763,5],[3831,5],[6049,5],[6099,5]]},"1840":{"position":[[199,5]]},"1953":{"position":[[1361,6]]},"1957":{"position":[[145,8]]},"1991":{"position":[[147,5]]},"2043":{"position":[[95,5],[371,5]]},"2101":{"position":[[3260,5]]},"2288":{"position":[[1572,5],[1624,5]]},"2290":{"position":[[1640,5],[1692,5]]},"2292":{"position":[[1725,5],[1777,5]]},"2294":{"position":[[1622,5],[1674,5]]},"2356":{"position":[[962,5],[2185,5]]},"2368":{"position":[[1153,5],[2376,5]]},"2428":{"position":[[82,5]]}}}],["cluster",{"_index":171,"t":{"1658":{"position":[[84,7]]},"1662":{"position":[[706,9],[780,9],[870,9]]},"1740":{"position":[[735,8]]},"1742":{"position":[[109,8],[655,7],[1330,7]]},"1744":{"position":[[393,7],[2252,7]]},"1746":{"position":[[421,7],[2076,7]]},"1748":{"position":[[286,7],[1385,8]]},"1750":{"position":[[149,7],[560,7],[806,7],[851,7],[923,7],[956,7],[1010,7],[1028,7],[1355,7],[1388,7],[1442,7],[1460,7],[1828,8],[2362,7],[2425,8],[2509,7],[3711,7],[3728,7],[3758,7]]},"1754":{"position":[[341,7]]},"1756":{"position":[[85,8],[586,8],[748,9],[1574,8]]},"1758":{"position":[[172,8],[496,8],[678,7],[997,8],[1358,8]]},"1760":{"position":[[401,8],[1067,9]]},"1764":{"position":[[74,8],[143,7],[207,7],[265,7],[280,7],[294,7]]},"1769":{"position":[[122,7],[184,7],[282,8],[446,7],[456,7],[503,7],[533,7],[614,7]]},"1776":{"position":[[235,7],[336,7]]},"1782":{"position":[[27,7],[295,7],[331,7],[402,7],[439,7],[1675,8],[1916,7]]},"1792":{"position":[[120,7]]},"1794":{"position":[[933,7],[1067,7],[1363,7],[1699,7],[1735,7],[1828,7],[1862,7],[2325,10],[2723,9],[2783,7],[2823,9],[2897,9],[2948,8],[3017,9],[3109,9],[3156,7],[3177,7],[3190,9],[3217,7],[3267,7],[3281,9],[3340,7],[3371,7]]},"1796":{"position":[[73,7],[122,8]]},"1798":{"position":[[155,7]]},"1800":{"position":[[200,7],[673,8],[1291,7]]},"1802":{"position":[[111,8]]},"1806":{"position":[[62,8],[273,8],[312,7],[430,8],[706,7],[817,7],[982,8],[1011,7],[1096,7],[1254,8]]},"1808":{"position":[[108,7],[207,8]]},"1811":{"position":[[705,7],[997,9],[1774,9],[2258,9],[2547,9]]},"1832":{"position":[[62,7],[170,7],[219,8],[390,7],[799,7]]},"1834":{"position":[[17,7]]},"1836":{"position":[[60,8],[77,7]]},"1838":{"position":[[1560,7]]},"1840":{"position":[[186,7]]},"1842":{"position":[[294,8],[644,7],[659,7],[677,7]]},"1844":{"position":[[102,7],[232,8],[270,7],[332,8]]},"1848":{"position":[[162,7],[190,10],[284,8],[358,7],[446,7],[659,8],[884,9],[1022,7],[1076,8],[1182,7],[1197,7],[1215,7]]},"1850":{"position":[[24,7],[151,7],[354,7],[398,7],[596,7]]},"1882":{"position":[[286,9]]},"1906":{"position":[[1112,7]]},"1908":{"position":[[408,7],[610,7]]},"1918":{"position":[[460,7]]},"1922":{"position":[[69,8],[415,8]]},"1929":{"position":[[300,8]]},"1937":{"position":[[226,8],[356,8],[425,8]]},"1945":{"position":[[271,8],[1047,9],[1531,8]]},"1951":{"position":[[368,7],[798,7],[1528,7],[1585,8]]},"1953":{"position":[[301,7],[561,7],[623,7],[733,7],[831,7],[964,7],[1057,7]]},"1955":{"position":[[348,8],[357,9],[414,7],[500,7]]},"1957":{"position":[[6,7],[1633,7]]},"1975":{"position":[[322,8]]},"1979":{"position":[[338,9]]},"1981":{"position":[[457,7]]},"1983":{"position":[[877,7]]},"1987":{"position":[[56,8],[90,9]]},"1991":{"position":[[4,7],[135,8]]},"1993":{"position":[[55,7],[148,7]]},"1995":{"position":[[162,9]]},"1997":{"position":[[31,7]]},"1999":{"position":[[149,7],[333,7]]},"2001":{"position":[[68,8]]},"2005":{"position":[[246,7]]},"2007":{"position":[[38,7],[389,7],[470,7]]},"2055":{"position":[[318,7],[579,7],[873,7],[1015,7]]},"2057":{"position":[[95,8],[290,8]]},"2067":{"position":[[45,7]]},"2069":{"position":[[46,7]]},"2073":{"position":[[99,7]]},"2075":{"position":[[613,7],[665,7]]},"2085":{"position":[[757,8]]},"2095":{"position":[[1251,8]]},"2101":{"position":[[1761,7],[2348,7],[2376,7],[2450,7],[3286,7],[3311,7]]},"2107":{"position":[[104,7]]},"2117":{"position":[[311,7]]},"2131":{"position":[[134,7]]},"2133":{"position":[[42,7],[270,8]]},"2156":{"position":[[376,7]]},"2159":{"position":[[19,7],[119,7],[403,8],[1023,7],[1061,7],[1153,7],[1309,7],[1452,7]]},"2161":{"position":[[73,8]]},"2163":{"position":[[318,8],[377,7],[2023,7],[2190,7]]},"2176":{"position":[[268,7],[935,7],[1196,7],[1551,7],[1705,7]]},"2200":{"position":[[580,7]]},"2231":{"position":[[2589,7]]},"2233":{"position":[[2537,7]]},"2235":{"position":[[2406,7]]},"2237":{"position":[[2355,7]]},"2239":{"position":[[2368,7]]},"2241":{"position":[[2481,7]]},"2243":{"position":[[2442,7]]},"2247":{"position":[[2515,7]]},"2249":{"position":[[2496,7]]},"2251":{"position":[[2392,7]]},"2253":{"position":[[2508,7]]},"2255":{"position":[[2373,7]]},"2257":{"position":[[2288,7]]},"2267":{"position":[[2463,7]]},"2271":{"position":[[710,7]]},"2273":{"position":[[2505,7]]},"2275":{"position":[[2421,7]]},"2277":{"position":[[2427,7]]},"2288":{"position":[[810,7],[838,7],[934,7],[1029,7],[1118,7],[1206,7],[1296,7],[1385,7],[1474,7],[1948,7]]},"2290":{"position":[[878,7],[906,7],[1002,7],[1097,7],[1186,7],[1274,7],[1364,7],[1453,7],[1542,7],[2016,7]]},"2292":{"position":[[963,7],[991,7],[1087,7],[1182,7],[1271,7],[1359,7],[1449,7],[1538,7],[1627,7],[2101,7]]},"2294":{"position":[[860,7],[888,7],[984,7],[1079,7],[1168,7],[1256,7],[1346,7],[1435,7],[1524,7],[1998,7]]},"2306":{"position":[[604,7]]},"2308":{"position":[[493,7]]},"2310":{"position":[[518,7]]},"2312":{"position":[[127,8],[670,7]]},"2314":{"position":[[496,7]]},"2316":{"position":[[528,7]]},"2318":{"position":[[627,7]]},"2324":{"position":[[63,8]]},"2326":{"position":[[67,7],[164,8]]},"2350":{"position":[[2772,7]]},"2352":{"position":[[2786,7]]},"2354":{"position":[[2901,7]]},"2356":{"position":[[988,7],[1013,7],[2211,7],[2236,7]]},"2368":{"position":[[1179,7],[1204,7],[2402,7],[2427,7]]},"2377":{"position":[[66,7],[293,7]]},"2379":{"position":[[101,8]]},"2383":{"position":[[85,8]]},"2389":{"position":[[80,8]]},"2396":{"position":[[64,7]]},"2398":{"position":[[64,7]]},"2400":{"position":[[64,7]]},"2402":{"position":[[64,7]]},"2404":{"position":[[64,7]]},"2406":{"position":[[68,8]]},"2408":{"position":[[64,7]]},"2410":{"position":[[93,7]]},"2412":{"position":[[89,8]]},"2414":{"position":[[64,7]]},"2416":{"position":[[64,7]]},"2418":{"position":[[64,7]]},"2421":{"position":[[229,8]]}}}],["cluster'",{"_index":1034,"t":{"1800":{"position":[[233,9]]},"2176":{"position":[[1480,9]]}}}],["cluster.loc",{"_index":992,"t":{"1782":{"position":[[423,15]]},"1794":{"position":[[1887,16]]}}}],["clusterip",{"_index":1276,"t":{"1876":{"position":[[534,9]]},"1893":{"position":[[574,9]]}}}],["clusterrol",{"_index":1442,"t":{"1918":{"position":[[442,11]]},"1926":{"position":[[136,11]]},"2093":{"position":[[2075,11],[4050,11],[4255,11],[4478,11],[4782,11],[5084,11],[5407,11],[5717,11]]},"2381":{"position":[[73,12]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:restrict",{"_index":1795,"t":{"2021":{"position":[[2795,52]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:svclb",{"_index":1796,"t":{"2021":{"position":[[2852,47]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:system",{"_index":1797,"t":{"2021":{"position":[[2904,48]]}}}],["clusterrolebind",{"_index":1438,"t":{"1918":{"position":[[345,18]]},"1926":{"position":[[72,18]]},"2093":{"position":[[2093,19],[4673,18],[4957,18]]},"2161":{"position":[[125,19]]},"2377":{"position":[[39,19],[267,18],[329,18]]}}}],["clusterrolebinding.rbac.authorization.k8s.io/default:restrict",{"_index":1799,"t":{"2021":{"position":[[2970,63]]}}}],["clusterrolebinding.rbac.authorization.k8s.io/system",{"_index":1800,"t":{"2021":{"position":[[3038,51]]}}}],["cmd",{"_index":489,"t":{"1702":{"position":[[103,3],[159,3],[231,3],[307,3]]}}}],["cmdline.txt",{"_index":510,"t":{"1706":{"position":[[245,11]]}}}],["cncf",{"_index":1255,"t":{"1854":{"position":[[5,4]]}}}],["cni",{"_index":28,"t":{"1636":{"position":[[524,5]]},"1652":{"position":[[366,3],[410,3]]},"1662":{"position":[[3063,3],[3122,3]]},"1683":{"position":[[70,4]]},"1725":{"position":[[274,4]]},"1794":{"position":[[8124,3],[8183,3]]},"1945":{"position":[[119,6],[166,3]]},"1949":{"position":[[55,3],[75,3],[749,3]]},"1951":{"position":[[866,4],[1168,4],[1449,3],[1571,4]]},"1953":{"position":[[1394,3],[1413,3]]},"1983":{"position":[[493,4],[1034,3]]},"2023":{"position":[[117,3]]},"2093":{"position":[[6443,4]]},"2101":{"position":[[3342,3],[3451,3]]},"2421":{"position":[[33,3]]}}}],["code",{"_index":1082,"t":{"1811":{"position":[[60,4]]},"2152":{"position":[[96,6]]},"2426":{"position":[[59,4]]}}}],["collect",{"_index":1898,"t":{"2061":{"position":[[56,7],[431,9]]},"2125":{"position":[[96,10],[336,10],[525,11]]}}}],["coloc",{"_index":121,"t":{"1648":{"position":[[564,9]]},"1662":{"position":[[1820,9]]},"1794":{"position":[[8922,9]]}}}],["combin",{"_index":1373,"t":{"1904":{"position":[[186,11]]},"1912":{"position":[[32,8],[198,11]]},"2093":{"position":[[2333,9]]}}}],["come",{"_index":1184,"t":{"1838":{"position":[[1572,4]]},"1931":{"position":[[4,5]]},"1947":{"position":[[517,4]]},"1949":{"position":[[87,4]]}}}],["comma",{"_index":70,"t":{"1642":{"position":[[91,5]]},"1662":{"position":[[481,5]]},"1774":{"position":[[122,5]]},"1794":{"position":[[492,5]]},"1937":{"position":[[535,7]]}}}],["command",{"_index":183,"t":{"1660":{"position":[[268,9]]},"1675":{"position":[[992,7]]},"1717":{"position":[[420,8]]},"1723":{"position":[[51,7]]},"1740":{"position":[[908,8],[921,7],[1391,7]]},"1742":{"position":[[1940,9],[2616,7]]},"1744":{"position":[[1191,9],[2121,7],[2188,7]]},"1746":{"position":[[1467,9],[1945,7],[2012,7]]},"1748":{"position":[[637,9],[1252,7],[1319,7]]},"1750":{"position":[[1906,7],[3686,9],[4342,8]]},"1756":{"position":[[1010,9]]},"1758":{"position":[[864,9]]},"1760":{"position":[[43,7],[155,7]]},"1810":{"position":[[39,7]]},"1811":{"position":[[193,7],[201,8],[234,9],[768,7],[1913,7]]},"1819":{"position":[[11,8]]},"1823":{"position":[[26,7]]},"1838":{"position":[[154,7],[456,7]]},"1842":{"position":[[17,7]]},"1895":{"position":[[622,8]]},"1902":{"position":[[186,7]]},"1904":{"position":[[251,7],[660,8],[1316,8]]},"1906":{"position":[[589,7]]},"1949":{"position":[[623,7],[1007,7]]},"2053":{"position":[[198,7],[588,8],[1374,7],[1441,7],[1881,7],[2662,7],[2687,7]]},"2081":{"position":[[271,7]]},"2085":{"position":[[885,7]]},"2161":{"position":[[209,8]]},"2169":{"position":[[462,8]]},"2176":{"position":[[1081,8],[1885,8]]},"2180":{"position":[[50,7]]},"2182":{"position":[[50,7]]},"2184":{"position":[[50,7]]},"2186":{"position":[[50,7]]},"2188":{"position":[[50,7]]},"2190":{"position":[[50,7]]},"2192":{"position":[[50,7]]},"2194":{"position":[[50,7]]},"2196":{"position":[[50,7]]},"2198":{"position":[[50,7]]},"2200":{"position":[[123,7],[167,7]]},"2202":{"position":[[133,7],[177,7]]},"2204":{"position":[[50,7]]},"2206":{"position":[[40,7]]},"2208":{"position":[[40,7]]},"2210":{"position":[[40,7]]},"2212":{"position":[[40,7]]},"2214":{"position":[[40,7]]},"2216":{"position":[[40,7]]},"2218":{"position":[[40,7]]},"2220":{"position":[[40,7]]},"2329":{"position":[[50,7]]},"2331":{"position":[[50,7]]},"2333":{"position":[[40,7]]},"2335":{"position":[[40,7]]},"2337":{"position":[[40,7]]},"2339":{"position":[[40,7]]},"2341":{"position":[[44,7]]},"2343":{"position":[[44,7]]},"2345":{"position":[[54,7]]},"2347":{"position":[[54,7]]},"2354":{"position":[[160,7]]},"2356":{"position":[[107,7]]},"2358":{"position":[[144,7]]},"2360":{"position":[[129,7]]},"2362":{"position":[[130,7]]},"2366":{"position":[[128,7]]},"2368":{"position":[[250,7]]},"2370":{"position":[[184,7]]}}}],["comment",{"_index":2068,"t":{"2101":{"position":[[105,9]]}}}],["common",{"_index":702,"t":{"1742":{"position":[[449,6]]}}}],["commonli",{"_index":1040,"t":{"1800":{"position":[[524,8]]},"1902":{"position":[[42,8]]},"1945":{"position":[[140,8]]},"1951":{"position":[[486,8]]}}}],["commun",{"_index":945,"t":{"1767":{"position":[[266,13],[386,13],[494,13]]},"1782":{"position":[[940,11],[1209,11],[1467,11],[1720,11]]},"1794":{"position":[[4084,13],[4210,13],[4327,13]]},"1951":{"position":[[107,13],[769,11],[1084,11],[1293,11],[1630,11]]},"1957":{"position":[[1717,14]]},"1969":{"position":[[433,14]]},"2129":{"position":[[465,13]]},"2167":{"position":[[301,9],[440,9]]}}}],["companion",{"_index":2311,"t":{"2176":{"position":[[29,9]]}}}],["compar",{"_index":1052,"t":{"1800":{"position":[[1041,7]]}}}],["compat",{"_index":843,"t":{"1750":{"position":[[2582,10],[2695,10],[4434,10]]},"1945":{"position":[[1057,10]]}}}],["complet",{"_index":275,"t":{"1675":{"position":[[754,9]]},"1723":{"position":[[1102,10]]},"1742":{"position":[[2624,9]]},"1744":{"position":[[2196,9]]},"1746":{"position":[[2020,9]]},"1748":{"position":[[1327,9]]},"1886":{"position":[[110,9]]},"1890":{"position":[[309,9]]},"1893":{"position":[[23,8]]},"2159":{"position":[[601,10]]},"2163":{"position":[[1752,8]]}}}],["compli",{"_index":1956,"t":{"2085":{"position":[[466,6]]},"2091":{"position":[[28,6]]},"2133":{"position":[[72,6]]}}}],["compliant",{"_index":1986,"t":{"2093":{"position":[[397,9],[1346,9]]},"2095":{"position":[[285,9]]}}}],["compon",{"_index":1001,"t":{"1782":{"position":[[809,9]]},"1794":{"position":[[2454,9],[5813,12],[5849,10],[5884,10],[5989,12],[6066,12],[6145,12],[6210,12],[6295,12]]},"1832":{"position":[[837,10]]},"1842":{"position":[[750,11],[844,9]]},"1848":{"position":[[1288,11],[1382,9]]},"1874":{"position":[[493,12]]},"1931":{"position":[[36,10],[325,10]]},"1933":{"position":[[680,11],[706,10]]},"1937":{"position":[[24,10]]},"1951":{"position":[[194,11]]},"1973":{"position":[[288,11]]},"1997":{"position":[[71,11],[184,10],[425,11]]},"1999":{"position":[[81,10],[419,10]]},"2005":{"position":[[75,11]]},"2055":{"position":[[134,10],[741,10]]},"2057":{"position":[[457,10]]},"2059":{"position":[[11,10],[56,10],[221,10]]},"2075":{"position":[[1203,10]]},"2077":{"position":[[228,10],[314,10]]},"2085":{"position":[[1185,10]]},"2093":{"position":[[6595,10]]},"2099":{"position":[[137,11]]},"2101":{"position":[[39,10]]},"2109":{"position":[[263,10]]},"2156":{"position":[[291,10]]},"2161":{"position":[[179,11]]}}}],["components=1",{"_index":367,"t":{"1677":{"position":[[320,12]]}}}],["compress",{"_index":1019,"t":{"1794":{"position":[[4982,8],[4996,8]]}}}],["compris",{"_index":1154,"t":{"1832":{"position":[[401,9]]},"2107":{"position":[[366,9]]}}}],["concern",{"_index":1391,"t":{"1906":{"position":[[48,9]]},"2085":{"position":[[1075,8]]}}}],["concurr",{"_index":2287,"t":{"2163":{"position":[[524,12],[872,12],[1320,11]]}}}],["condit",{"_index":2171,"t":{"2107":{"position":[[263,10]]}}}],["conf",{"_index":149,"t":{"1652":{"position":[[181,4],[304,4],[370,4]]},"1662":{"position":[[2826,4],[2986,4],[3067,4]]},"1675":{"position":[[2273,4]]},"1792":{"position":[[299,4]]},"1794":{"position":[[7887,4],[8047,4],[8128,4]]},"1895":{"position":[[1321,4]]},"2101":{"position":[[3455,4]]}}}],["conf=/run/systemd/resolve/resolv.conf",{"_index":2158,"t":{"2101":{"position":[[4108,37]]},"2356":{"position":[[1673,37],[2896,37]]},"2368":{"position":[[1864,37],[3087,37]]}}}],["confidenti",{"_index":1070,"t":{"1806":{"position":[[562,12]]},"1817":{"position":[[432,12]]}}}],["config",{"_index":155,"t":{"1652":{"position":[[344,6],[414,6]]},"1662":{"position":[[218,6],[239,8],[1487,6],[1556,6],[3041,6],[3126,6]]},"1792":{"position":[[327,6],[356,6]]},"1794":{"position":[[229,6],[250,8],[6812,6],[6881,6],[8102,6],[8187,6]]},"1842":{"position":[[563,6]]},"1848":{"position":[[1101,6]]},"1870":{"position":[[91,7]]},"1908":{"position":[[138,6],[287,6],[1118,6],[1179,6]]},"1910":{"position":[[403,6]]},"1933":{"position":[[842,7]]},"1947":{"position":[[603,6],[640,6]]},"1957":{"position":[[839,6]]},"1961":{"position":[[48,7]]},"1965":{"position":[[4,7]]},"1967":{"position":[[217,8],[580,8]]},"1969":{"position":[[220,8]]},"2003":{"position":[[297,6]]},"2021":{"position":[[301,6],[509,6]]},"2079":{"position":[[204,6],[248,6],[293,6],[561,6]]},"2093":{"position":[[227,6]]},"2099":{"position":[[277,6]]},"2121":{"position":[[38,6]]},"2231":{"position":[[1153,6]]},"2233":{"position":[[1101,6]]},"2235":{"position":[[970,6]]},"2237":{"position":[[919,6]]},"2239":{"position":[[932,6]]},"2241":{"position":[[309,6],[1045,6]]},"2243":{"position":[[1006,6]]},"2247":{"position":[[1079,6]]},"2249":{"position":[[1060,6]]},"2251":{"position":[[956,6]]},"2253":{"position":[[1072,6]]},"2255":{"position":[[937,6]]},"2257":{"position":[[852,6]]},"2267":{"position":[[1027,6]]},"2273":{"position":[[1069,6]]},"2275":{"position":[[985,6]]},"2277":{"position":[[991,6]]},"2279":{"position":[[256,6],[490,7]]},"2345":{"position":[[73,6]]},"2347":{"position":[[73,6]]},"2350":{"position":[[45,6],[1336,6]]},"2352":{"position":[[45,6],[1350,6]]},"2354":{"position":[[45,6],[1465,6]]},"2356":{"position":[[45,6]]},"2358":{"position":[[45,6]]},"2360":{"position":[[55,6]]},"2362":{"position":[[55,6]]},"2366":{"position":[[45,6]]},"2368":{"position":[[45,6]]},"2370":{"position":[[55,6]]},"2374":{"position":[[45,6]]}}}],["config.json",{"_index":2476,"t":{"2281":{"position":[[214,11]]}}}],["config.nod",{"_index":378,"t":{"1679":{"position":[[203,11],[299,11]]}}}],["config.toml",{"_index":375,"t":{"1679":{"position":[[69,12]]}}}],["config.toml.tmpl",{"_index":376,"t":{"1679":{"position":[[121,19],[168,17]]}}}],["config.yaml",{"_index":774,"t":{"1744":{"position":[[2532,12]]},"1746":{"position":[[2331,12]]},"1878":{"position":[[422,14]]},"1910":{"position":[[428,11]]},"1912":{"position":[[66,11]]},"2231":{"position":[[1213,11]]},"2233":{"position":[[1161,11]]},"2235":{"position":[[1030,11]]},"2237":{"position":[[979,11]]},"2239":{"position":[[992,11]]},"2241":{"position":[[1105,11]]},"2243":{"position":[[1066,11]]},"2247":{"position":[[1139,11]]},"2249":{"position":[[1120,11]]},"2251":{"position":[[1016,11]]},"2253":{"position":[[1132,11]]},"2255":{"position":[[997,11]]},"2257":{"position":[[912,11]]},"2267":{"position":[[1087,11]]},"2273":{"position":[[1129,11]]},"2275":{"position":[[1045,11]]},"2277":{"position":[[1051,11]]},"2350":{"position":[[1396,11]]},"2352":{"position":[[1410,11]]},"2354":{"position":[[1525,11]]}}}],["config.yaml.d/test1.yaml",{"_index":1418,"t":{"1910":{"position":[[486,24]]}}}],["config.yaml.d/test2.yaml",{"_index":1419,"t":{"1910":{"position":[[540,24]]}}}],["config/systemd/user/k3",{"_index":431,"t":{"1689":{"position":[[380,26]]}}}],["config=</path/to/encryptionconfig/fil",{"_index":2474,"t":{"2279":{"position":[[334,39]]}}}],["configfi",{"_index":305,"t":{"1675":{"position":[[1397,10]]}}}],["configmap",{"_index":1997,"t":{"2093":{"position":[[1588,11],[2729,11]]},"2161":{"position":[[151,10],[421,10]]},"2326":{"position":[[240,11]]}}}],["configur",{"_index":40,"t":{"1640":{"position":[[37,9],[243,13],[279,13],[347,13]]},"1650":{"position":[[378,13]]},"1660":{"position":[[18,10]]},"1662":{"position":[[253,13],[2567,13]]},"1744":{"position":[[2575,10]]},"1746":{"position":[[2374,10]]},"1750":{"position":[[286,9],[1930,13],[4147,10]]},"1760":{"position":[[1394,14],[1451,14]]},"1762":{"position":[[37,9],[114,13],[281,13],[317,13],[385,13]]},"1782":{"position":[[1905,10]]},"1794":{"position":[[264,13],[7499,13]]},"1804":{"position":[[114,10]]},"1806":{"position":[[654,14]]},"1808":{"position":[[288,11]]},"1821":{"position":[[217,11]]},"1832":{"position":[[365,14]]},"1838":{"position":[[50,14],[869,9],[948,13],[1115,13],[1390,9]]},"1840":{"position":[[853,14]]},"1886":{"position":[[28,13],[62,9]]},"1893":{"position":[[649,10]]},"1895":{"position":[[77,13],[109,13],[1365,11]]},"1902":{"position":[[147,13]]},"1904":{"position":[[273,13],[302,14],[441,14],[476,13],[558,14]]},"1906":{"position":[[63,11],[484,9],[669,10],[767,11],[844,11],[1287,14],[1311,13],[1356,13]]},"1908":{"position":[[57,11],[845,13]]},"1910":{"position":[[51,13],[98,13],[653,13]]},"1914":{"position":[[52,9]]},"1918":{"position":[[578,14]]},"1943":{"position":[[32,13],[65,13],[110,11]]},"1945":{"position":[[1939,14]]},"1947":{"position":[[538,14],[812,11]]},"1951":{"position":[[586,14],[633,10]]},"1953":{"position":[[541,10],[814,14],[944,9],[1459,13]]},"1955":{"position":[[483,14]]},"1959":{"position":[[18,10],[610,13],[875,13]]},"1963":{"position":[[408,11],[519,10],[1018,13]]},"1965":{"position":[[51,13]]},"1967":{"position":[[39,9]]},"1969":{"position":[[39,9]]},"1973":{"position":[[93,11]]},"2005":{"position":[[45,13]]},"2007":{"position":[[52,14]]},"2021":{"position":[[1315,14]]},"2053":{"position":[[347,9]]},"2079":{"position":[[512,13]]},"2085":{"position":[[109,14],[795,9],[907,13]]},"2087":{"position":[[93,14]]},"2091":{"position":[[409,13]]},"2093":{"position":[[509,14],[2347,13]]},"2097":{"position":[[49,11],[651,13],[801,14],[1034,14],[1407,14]]},"2099":{"position":[[4,13],[48,13]]},"2121":{"position":[[339,9]]},"2123":{"position":[[51,11],[317,13],[382,9]]},"2129":{"position":[[305,13],[356,14],[380,11],[426,13]]},"2131":{"position":[[410,10]]},"2133":{"position":[[58,10]]},"2159":{"position":[[435,13],[759,10],[1031,9]]},"2161":{"position":[[366,10]]},"2163":{"position":[[2127,9]]},"2176":{"position":[[952,10],[1672,13]]},"2225":{"position":[[55,9]]},"2241":{"position":[[94,13]]},"2253":{"position":[[66,9]]},"2279":{"position":[[66,9]]},"2281":{"position":[[66,9]]},"2288":{"position":[[1562,9]]},"2290":{"position":[[1630,9]]},"2292":{"position":[[1715,9]]},"2294":{"position":[[1612,9]]},"2306":{"position":[[68,9]]},"2312":{"position":[[68,9]]},"2385":{"position":[[156,13]]}}}],["confirm",{"_index":672,"t":{"1740":{"position":[[958,7]]}}}],["conflict",{"_index":1472,"t":{"1933":{"position":[[625,8],[1601,11]]},"1949":{"position":[[200,10]]},"2075":{"position":[[1280,10]]}}}],["connect",{"_index":89,"t":{"1644":{"position":[[218,7]]},"1662":{"position":[[890,7]]},"1750":{"position":[[3091,7]]},"1767":{"position":[[1255,7]]},"1769":{"position":[[419,7]]},"1782":{"position":[[1014,12],[1256,10],[1530,11],[1605,10],[1783,11],[1862,10]]},"1794":{"position":[[3129,7],[5184,7]]},"1800":{"position":[[827,9]]},"1802":{"position":[[288,10]]},"1811":{"position":[[1017,7],[1794,7],[2278,7],[2567,7]]},"1832":{"position":[[994,10],[1062,10]]},"1838":{"position":[[249,7]]},"1882":{"position":[[144,9]]},"1945":{"position":[[1493,12]]},"1951":{"position":[[315,12],[357,7],[903,12],[1359,11],[1696,11]]},"1957":{"position":[[103,9],[924,7],[1119,12],[1519,12]]},"1959":{"position":[[32,7],[653,7],[694,10]]},"1983":{"position":[[354,11]]},"2021":{"position":[[947,10]]},"2099":{"position":[[715,10],[1338,10]]},"2117":{"position":[[201,10],[292,11]]},"2231":{"position":[[81,10]]},"2233":{"position":[[80,10]]},"2271":{"position":[[81,10]]},"2273":{"position":[[81,10]]},"2275":{"position":[[81,10]]},"2277":{"position":[[81,10]]},"2358":{"position":[[350,10],[598,10]]}}}],["consid",{"_index":1741,"t":{"1993":{"position":[[11,8]]},"2412":{"position":[[193,8]]}}}],["consider",{"_index":2582,"t":{"2421":{"position":[[86,13]]}}}],["consist",{"_index":1482,"t":{"1933":{"position":[[1066,7]]},"1961":{"position":[[9,8]]},"1965":{"position":[[143,8],[553,8]]}}}],["console=serial0,115200",{"_index":511,"t":{"1706":{"position":[[261,22]]}}}],["console=tty1",{"_index":512,"t":{"1706":{"position":[[284,12]]}}}],["consult",{"_index":1589,"t":{"1953":{"position":[[1497,7]]}}}],["consum",{"_index":1666,"t":{"1973":{"position":[[329,8]]}}}],["contain",{"_index":126,"t":{"1650":{"position":[[27,9]]},"1662":{"position":[[2102,9]]},"1675":{"position":[[973,9]]},"1681":{"position":[[130,10],[193,9],[838,11],[863,9]]},"1710":{"position":[[323,9]]},"1717":{"position":[[334,11]]},"1723":{"position":[[622,9]]},"1746":{"position":[[1598,10]]},"1754":{"position":[[46,8]]},"1769":{"position":[[169,10],[358,10]]},"1794":{"position":[[2838,10],[3032,10],[7034,9]]},"1800":{"position":[[69,8]]},"1933":{"position":[[100,7],[802,8]]},"1945":{"position":[[91,9]]},"1951":{"position":[[269,9]]},"1973":{"position":[[121,9]]},"1981":{"position":[[356,8]]},"2059":{"position":[[538,9]]},"2075":{"position":[[798,9],[930,10]]},"2081":{"position":[[4,8]]},"2099":{"position":[[72,8]]},"2101":{"position":[[3507,9],[3572,9]]},"2143":{"position":[[78,11]]},"2149":{"position":[[78,11]]},"2156":{"position":[[52,10],[136,10],[247,11]]},"2356":{"position":[[1044,9],[1541,9],[2267,9],[2764,9]]},"2368":{"position":[[1235,9],[1732,9],[2458,9],[2955,9]]},"2394":{"position":[[143,8]]},"2396":{"position":[[137,11]]},"2398":{"position":[[134,11]]},"2400":{"position":[[134,11]]},"2402":{"position":[[138,11]]},"2404":{"position":[[126,10]]},"2408":{"position":[[126,10]]},"2412":{"position":[[116,8],[246,10]]},"2414":{"position":[[126,10]]},"2416":{"position":[[126,10]]},"2418":{"position":[[126,10]]},"2438":{"position":[[200,11]]}}}],["container_set",{"_index":1557,"t":{"1949":{"position":[[448,18],[489,21],[831,18],[872,21]]}}}],["containerd",{"_index":26,"t":{"1636":{"position":[[505,10]]},"1648":{"position":[[423,10]]},"1650":{"position":[[81,10],[272,10]]},"1656":{"position":[[77,10]]},"1662":{"position":[[1670,10],[2168,10],[2341,10],[2463,10],[3479,10]]},"1675":{"position":[[21,11]]},"1723":{"position":[[254,11],[733,11]]},"1790":{"position":[[133,10]]},"1794":{"position":[[7021,10],[7100,10],[7273,10],[7395,10],[8772,10]]},"1951":{"position":[[182,11]]},"1959":{"position":[[0,10],[214,10],[627,10]]},"1963":{"position":[[259,10]]},"2061":{"position":[[311,11]]},"2077":{"position":[[373,10]]},"2156":{"position":[[161,10]]},"2225":{"position":[[308,10],[436,10]]},"2227":{"position":[[237,10],[417,10]]},"2245":{"position":[[297,10],[430,10]]},"2298":{"position":[[246,10],[402,10]]},"2366":{"position":[[463,10]]},"2374":{"position":[[1104,10]]}}}],["containerd=/run/k3s/containerd/containerd.sock",{"_index":2144,"t":{"2101":{"position":[[3599,46]]},"2356":{"position":[[1116,46],[2339,46]]},"2368":{"position":[[1307,46],[2530,46]]}}}],["containerd_",{"_index":244,"t":{"1673":{"position":[[801,12]]}}}],["containerd_http_proxi",{"_index":232,"t":{"1673":{"position":[[196,22]]}}}],["containerd_http_proxy=http://your",{"_index":245,"t":{"1673":{"position":[[823,33]]}}}],["containerd_https_proxi",{"_index":233,"t":{"1673":{"position":[[219,22]]}}}],["containerd_https_proxy=http://your",{"_index":246,"t":{"1673":{"position":[[880,34]]}}}],["containerd_no_proxi",{"_index":234,"t":{"1673":{"position":[[244,19]]}}}],["containerd_no_proxy=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16",{"_index":247,"t":{"1673":{"position":[[938,71]]}}}],["containerport",{"_index":579,"t":{"1717":{"position":[[589,14]]},"2143":{"position":[[220,14]]},"2149":{"position":[[220,14]]}}}],["containers/contain",{"_index":547,"t":{"1712":{"position":[[225,20]]}}}],["containers/node:13.13.0",{"_index":567,"t":{"1717":{"position":[[197,23],[391,23]]}}}],["content",{"_index":1117,"t":{"1819":{"position":[[203,8]]},"1933":{"position":[[1501,7]]},"1935":{"position":[[53,7]]},"1939":{"position":[[149,8]]},"2075":{"position":[[1086,7]]}}}],["continu",{"_index":780,"t":{"1746":{"position":[[1087,10]]},"2053":{"position":[[1952,8]]},"2156":{"position":[[63,8]]}}}],["contrib/util/gener",{"_index":698,"t":{"1742":{"position":[[278,21]]}}}],["contrib/util/rot",{"_index":783,"t":{"1746":{"position":[[1294,19]]}}}],["control",{"_index":22,"t":{"1636":{"position":[[307,10],[334,10]]},"1723":{"position":[[131,10],[161,10]]},"1738":{"position":[[403,10],[438,11],[468,11]]},"1740":{"position":[[780,11]]},"1754":{"position":[[107,7]]},"1764":{"position":[[325,10],[351,10]]},"1786":{"position":[[137,10],[174,10],[301,10],[327,10],[351,10]]},"1788":{"position":[[214,10],[268,10],[308,10],[368,10]]},"1794":{"position":[[3589,10],[3651,10],[3769,10],[3837,10],[6055,10],[6105,10],[6258,10],[6284,10],[6321,10]]},"1832":{"position":[[313,7],[489,7]]},"1838":{"position":[[1279,7]]},"1842":{"position":[[712,11],[777,11]]},"1848":{"position":[[732,7],[783,7],[852,7],[1250,11],[1315,11]]},"1872":{"position":[[246,7]]},"1874":{"position":[[365,11]]},"1900":{"position":[[419,10],[483,10],[581,10],[767,11],[971,11]]},"1929":{"position":[[633,11]]},"1931":{"position":[[193,10]]},"1951":{"position":[[133,7],[340,7]]},"1997":{"position":[[57,7],[108,10],[217,7],[384,7],[411,7]]},"1999":{"position":[[67,7],[192,10],[300,7],[405,7]]},"2001":{"position":[[15,7],[152,7],[206,7],[578,7]]},"2003":{"position":[[133,7],[227,10]]},"2005":{"position":[[297,10]]},"2021":{"position":[[293,7],[501,7],[821,10],[1723,11],[1897,10]]},"2043":{"position":[[101,10],[377,10]]},"2057":{"position":[[443,7]]},"2059":{"position":[[443,7]]},"2075":{"position":[[119,10],[153,7],[312,7],[829,7]]},"2077":{"position":[[596,7],[632,7]]},"2081":{"position":[[69,7]]},"2085":{"position":[[128,8],[178,8],[351,8],[623,8]]},"2091":{"position":[[289,10],[547,11]]},"2093":{"position":[[95,11],[219,7],[909,11],[1266,8]]},"2095":{"position":[[958,10]]},"2099":{"position":[[269,7],[589,10],[1212,10]]},"2101":{"position":[[25,7],[145,7],[2247,10]]},"2103":{"position":[[18,8]]},"2105":{"position":[[26,7],[96,7]]},"2107":{"position":[[26,7],[132,8],[408,7],[489,7]]},"2127":{"position":[[91,7],[191,8]]},"2131":{"position":[[883,8]]},"2152":{"position":[[179,12]]},"2159":{"position":[[67,11],[200,11],[485,10],[630,10],[1002,10],[1227,10],[1586,10],[1677,10],[1897,10]]},"2161":{"position":[[19,10],[348,10],[440,10]]},"2163":{"position":[[77,8],[182,7],[263,10],[1288,10],[1976,10],[2433,10],[2508,10]]},"2167":{"position":[[1048,10]]},"2176":{"position":[[289,7],[572,8],[840,8],[867,7],[1016,7],[1172,8],[1280,7],[1419,7],[1575,8]]},"2180":{"position":[[109,7]]},"2182":{"position":[[109,7]]},"2184":{"position":[[109,7],[183,10]]},"2186":{"position":[[109,7],[189,10]]},"2188":{"position":[[109,7]]},"2190":{"position":[[109,7]]},"2192":{"position":[[109,7]]},"2194":{"position":[[109,7]]},"2196":{"position":[[109,7]]},"2198":{"position":[[109,7]]},"2204":{"position":[[109,7]]},"2206":{"position":[[99,7]]},"2208":{"position":[[99,7]]},"2210":{"position":[[99,7]]},"2212":{"position":[[99,7]]},"2214":{"position":[[99,7]]},"2216":{"position":[[99,7]]},"2218":{"position":[[99,7]]},"2220":{"position":[[99,7]]},"2223":{"position":[[122,7]]},"2225":{"position":[[208,7]]},"2227":{"position":[[122,7]]},"2229":{"position":[[132,7]]},"2231":{"position":[[226,7]]},"2233":{"position":[[229,7]]},"2235":{"position":[[122,7]]},"2237":{"position":[[122,7]]},"2239":{"position":[[122,7]]},"2241":{"position":[[301,7]]},"2243":{"position":[[122,7]]},"2245":{"position":[[122,7]]},"2247":{"position":[[122,7]]},"2249":{"position":[[212,7]]},"2251":{"position":[[122,7]]},"2253":{"position":[[215,7]]},"2255":{"position":[[122,7]]},"2257":{"position":[[122,7]]},"2259":{"position":[[132,7]]},"2261":{"position":[[132,7]]},"2263":{"position":[[132,7]]},"2265":{"position":[[132,7]]},"2267":{"position":[[122,7]]},"2269":{"position":[[132,7]]},"2271":{"position":[[226,7]]},"2273":{"position":[[212,7]]},"2275":{"position":[[212,7]]},"2277":{"position":[[226,7]]},"2279":{"position":[[203,7]]},"2283":{"position":[[122,7]]},"2286":{"position":[[35,10],[108,10],[139,7],[341,10]]},"2288":{"position":[[35,10],[108,10],[139,7],[271,10],[505,10],[789,10],[1593,14]]},"2290":{"position":[[35,10],[108,10],[139,7],[291,10],[573,10],[857,10],[1661,14]]},"2292":{"position":[[35,10],[108,10],[139,7],[387,10],[658,10],[942,10],[1746,14]]},"2294":{"position":[[35,10],[108,10],[139,7],[324,10],[555,10],[839,10],[1643,14]]},"2296":{"position":[[45,10],[118,10],[149,7]]},"2298":{"position":[[35,10],[108,10],[139,7]]},"2301":{"position":[[126,7]]},"2303":{"position":[[121,7]]},"2394":{"position":[[90,7]]}}}],["controller.yaml",{"_index":1360,"t":{"1900":{"position":[[629,15]]},"2161":{"position":[[328,15]]}}}],["controller/releases/latest/download/system",{"_index":2282,"t":{"2161":{"position":[[277,42]]}}}],["controller:v0.4.0",{"_index":1365,"t":{"1900":{"position":[[851,17]]}}}],["controllermanag",{"_index":2380,"t":{"2212":{"position":[[142,17]]},"2214":{"position":[[148,17]]}}}],["convert",{"_index":1245,"t":{"1850":{"position":[[84,7]]}}}],["copi",{"_index":664,"t":{"1740":{"position":[[578,6]]},"1742":{"position":[[2044,4]]},"1744":{"position":[[1024,7],[1284,4],[1661,4]]},"1819":{"position":[[117,4]]},"1842":{"position":[[946,4]]},"1898":{"position":[[298,4],[366,4]]},"2171":{"position":[[89,4]]}}}],["cordon",{"_index":2288,"t":{"2163":{"position":[[539,7],[887,7]]}}}],["core",{"_index":1687,"t":{"1981":{"position":[[141,4],[148,5]]},"2055":{"position":[[297,4],[401,4],[482,4],[558,4],[639,4],[698,4]]},"2063":{"position":[[62,5],[114,5]]},"2067":{"position":[[184,4],[244,4]]},"2069":{"position":[[184,4],[244,4]]},"2071":{"position":[[72,4],[132,4]]},"2085":{"position":[[1180,4]]}}}],["coredn",{"_index":29,"t":{"1636":{"position":[[530,7]]},"1675":{"position":[[782,7],[2262,9]]},"1782":{"position":[[346,7]]},"1794":{"position":[[1750,7],[5909,8]]},"1931":{"position":[[104,8]]},"1939":{"position":[[918,7]]},"1943":{"position":[[193,8]]},"1971":{"position":[[286,7],[333,7],[438,7]]},"2023":{"position":[[7,8]]},"2025":{"position":[[0,8],[86,8]]}}}],["coredns.yaml",{"_index":1506,"t":{"1939":{"position":[[686,12]]}}}],["coredns:1.6.3",{"_index":1633,"t":{"1963":{"position":[[647,13],[745,14],[1093,13],[1175,14],[1435,13]]},"1971":{"position":[[204,13],[294,13]]}}}],["correct",{"_index":692,"t":{"1742":{"position":[[42,7],[612,7],[2105,7]]},"1744":{"position":[[1047,7],[1345,7]]},"1782":{"position":[[1549,7],[1802,7]]},"1933":{"position":[[1545,7]]},"1945":{"position":[[2232,7]]},"1951":{"position":[[1378,7],[1715,7]]},"2298":{"position":[[173,7]]},"2303":{"position":[[155,7]]}}}],["correl",{"_index":2180,"t":{"2111":{"position":[[178,9]]},"2113":{"position":[[257,12]]},"2115":{"position":[[256,12]]}}}],["correspond",{"_index":718,"t":{"1742":{"position":[[1156,13]]},"1900":{"position":[[206,11]]},"1929":{"position":[[267,13],[496,13]]},"1939":{"position":[[121,13]]},"2119":{"position":[[354,13]]},"2176":{"position":[[670,13]]},"2368":{"position":[[209,13]]}}}],["corrupt",{"_index":890,"t":{"1754":{"position":[[361,10]]}}}],["count",{"_index":870,"t":{"1750":{"position":[[4168,5]]},"1953":{"position":[[1214,6]]}}}],["cover",{"_index":2328,"t":{"2176":{"position":[[1974,7]]},"2326":{"position":[[94,6]]}}}],["coverag",{"_index":1371,"t":{"1902":{"position":[[226,9]]}}}],["cp",{"_index":533,"t":{"1708":{"position":[[605,2]]},"1742":{"position":[[2347,2]]},"1744":{"position":[[1558,2],[1768,2]]},"1890":{"position":[[227,2]]}}}],["cpi",{"_index":2237,"t":{"2137":{"position":[[401,14]]}}}],["cpu",{"_index":1686,"t":{"1981":{"position":[[135,3]]},"1989":{"position":[[30,3]]},"2055":{"position":[[159,3],[274,4],[378,4],[460,4]]},"2057":{"position":[[147,4],[369,4]]},"2061":{"position":[[69,4],[213,3]]},"2067":{"position":[[115,3],[221,4]]},"2069":{"position":[[115,3],[221,4]]},"2071":{"position":[[4,3],[109,4]]},"2075":{"position":[[1032,3]]}}}],["crash",{"_index":2205,"t":{"2125":{"position":[[251,5]]}}}],["crd",{"_index":587,"t":{"1719":{"position":[[206,3],[241,3]]},"1874":{"position":[[401,8]]},"2159":{"position":[[179,6],[476,4]]}}}],["creat",{"_index":285,"t":{"1675":{"position":[[1000,7]]},"1719":{"position":[[148,6],[260,6]]},"1742":{"position":[[201,6],[397,6],[601,6],[1548,6],[1952,6]]},"1744":{"position":[[1203,6]]},"1746":{"position":[[1189,6],[1479,6],[1565,6]]},"1748":{"position":[[649,6]]},"1750":{"position":[[79,6],[170,8],[741,8]]},"1804":{"position":[[128,7]]},"1806":{"position":[[78,7],[329,8]]},"1811":{"position":[[244,6],[251,6],[392,6],[497,6],[513,6]]},"1836":{"position":[[23,6]]},"1840":{"position":[[314,7]]},"1850":{"position":[[554,6]]},"1884":{"position":[[39,7]]},"1886":{"position":[[51,6]]},"1888":{"position":[[25,7]]},"1912":{"position":[[86,7]]},"1916":{"position":[[195,6]]},"1918":{"position":[[26,7],[102,6],[610,6]]},"1920":{"position":[[73,6]]},"1922":{"position":[[33,6]]},"1939":{"position":[[66,6],[232,8],[286,7],[353,8],[426,8],[1006,8]]},"1953":{"position":[[578,8]]},"1959":{"position":[[329,6],[554,6]]},"1983":{"position":[[1048,6]]},"1999":{"position":[[3,6]]},"2001":{"position":[[176,6],[377,8]]},"2005":{"position":[[148,6]]},"2007":{"position":[[162,7]]},"2053":{"position":[[523,6],[653,6],[1645,7],[1842,7]]},"2075":{"position":[[651,8]]},"2089":{"position":[[265,6]]},"2091":{"position":[[347,8],[448,7]]},"2093":{"position":[[2066,6]]},"2095":{"position":[[1024,7],[2726,8]]},"2097":{"position":[[104,6],[273,7],[1053,7]]},"2105":{"position":[[166,7],[262,8]]},"2127":{"position":[[38,8]]},"2131":{"position":[[306,7]]},"2143":{"position":[[330,6],[357,6]]},"2145":{"position":[[334,6],[361,6]]},"2163":{"position":[[22,6],[145,6],[250,8],[1248,7],[2468,8]]},"2176":{"position":[[768,8]]},"2249":{"position":[[55,6]]},"2318":{"position":[[74,6]]},"2324":{"position":[[26,6]]},"2383":{"position":[[49,6]]},"2385":{"position":[[26,6]]},"2406":{"position":[[26,6]]},"2423":{"position":[[55,6]]},"2434":{"position":[[55,6]]},"2440":{"position":[[53,7],[153,7]]}}}],["creating/destroy",{"_index":1931,"t":{"2075":{"position":[[910,19]]}}}],["creating/modifying/delet",{"_index":1926,"t":{"2075":{"position":[[335,27]]}}}],["credenti",{"_index":207,"t":{"1662":{"position":[[1279,10],[1358,10],[1467,10],[1529,10]]},"1794":{"position":[[6604,10],[6683,10],[6792,10],[6854,10]]},"1798":{"position":[[193,12]]},"1800":{"position":[[571,12],[861,12],[1267,11]]},"1965":{"position":[[40,10]]},"2290":{"position":[[350,12],[403,12]]}}}],["credentials=tru",{"_index":1776,"t":{"2021":{"position":[[903,17]]},"2099":{"position":[[671,17],[1294,17]]},"2101":{"position":[[2822,16]]},"2288":{"position":[[2000,17]]},"2290":{"position":[[208,16],[2068,17]]},"2292":{"position":[[2153,17]]},"2294":{"position":[[2050,17]]}}}],["crf",{"_index":562,"t":{"1715":{"position":[[603,4]]}}}],["cri",{"_index":131,"t":{"1650":{"position":[[104,3],[172,3]]},"1656":{"position":[[54,3]]},"1662":{"position":[[2191,3],[3456,3]]},"1675":{"position":[[153,3]]},"1723":{"position":[[611,10]]},"1790":{"position":[[110,3]]},"1794":{"position":[[6998,3],[7123,3]]}}}],["crictl",{"_index":611,"t":{"1723":{"position":[[561,6],[573,6]]},"1963":{"position":[[1383,6]]},"2049":{"position":[[259,7]]},"2053":{"position":[[556,7]]}}}],["critic",{"_index":1153,"t":{"1832":{"position":[[330,9]]},"1906":{"position":[[1017,8],[1302,8]]},"2093":{"position":[[6416,8]]}}}],["criticaladdonsonly=true:noexecut",{"_index":1182,"t":{"1838":{"position":[[1444,34]]}}}],["cron",{"_index":831,"t":{"1750":{"position":[[2081,4],[2118,4]]},"1767":{"position":[[812,4],[853,4]]},"1794":{"position":[[4676,4],[4718,4]]}}}],["cross",{"_index":777,"t":{"1746":{"position":[[654,5],[1029,5],[1229,5],[1415,5],[1513,5]]}}}],["csi",{"_index":2000,"t":{"2093":{"position":[[1656,5],[2797,5]]},"2137":{"position":[[377,10],[444,3]]}}}],["ctr",{"_index":612,"t":{"1723":{"position":[[687,3],[695,3]]},"2049":{"position":[[267,4]]},"2053":{"position":[[568,3]]}}}],["cuda",{"_index":384,"t":{"1681":{"position":[[211,4],[858,4]]}}}],["curl",{"_index":250,"t":{"1675":{"position":[[330,4],[423,4]]},"1677":{"position":[[275,4]]},"1681":{"position":[[304,4]]},"1697":{"position":[[281,4]]},"1742":{"position":[[2509,4]]},"1744":{"position":[[1880,4]]},"1746":{"position":[[1661,4]]},"1838":{"position":[[588,4]]},"1842":{"position":[[400,4]]},"1848":{"position":[[293,4],[479,4]]},"1895":{"position":[[728,5],[909,4]]},"1904":{"position":[[759,4],[861,4],[965,4],[1104,4],[1199,4],[1358,4],[1474,4],[1594,4],[1690,4]]},"1906":{"position":[[411,4]]},"1912":{"position":[[246,4]]},"1999":{"position":[[102,4]]},"2001":{"position":[[256,4]]},"2049":{"position":[[143,4],[703,4]]},"2053":{"position":[[221,4],[2442,4]]},"2079":{"position":[[388,4]]},"2169":{"position":[[111,4],[328,4],[471,4]]}}}],["current",{"_index":748,"t":{"1744":{"position":[[266,9],[1670,7]]},"1746":{"position":[[289,9],[1533,7]]},"1748":{"position":[[452,9],[979,7]]},"1756":{"position":[[220,9],[879,9]]},"1760":{"position":[[87,7],[244,7],[526,7],[861,7],[899,7],[1352,9],[1610,9]]},"2103":{"position":[[36,9]]},"2109":{"position":[[301,10]]},"2123":{"position":[[190,10]]},"2125":{"position":[[308,7]]}}}],["custom",{"_index":139,"t":{"1650":{"position":[[245,10]]},"1654":{"position":[[37,10],[96,10]]},"1662":{"position":[[2314,10],[3172,10],[3245,10]]},"1742":{"position":[[300,6],[705,6],[1195,6],[1215,6],[1879,6],[2483,6],[2581,6]]},"1744":{"position":[[10,6],[428,6],[909,6],[1854,6],[1952,6]]},"1750":{"position":[[3073,6]]},"1767":{"position":[[1237,6]]},"1788":{"position":[[34,10],[94,10],[164,10],[243,10],[337,10],[415,10],[474,10]]},"1794":{"position":[[3481,10],[3549,10],[3626,10],[3713,10],[3806,10],[5166,6],[7246,10],[8233,10],[8306,10]]},"1800":{"position":[[432,6]]},"1806":{"position":[[853,6],[1151,6]]},"1929":{"position":[[340,6]]},"1953":{"position":[[1387,6]]},"1983":{"position":[[486,6]]},"2159":{"position":[[152,6]]},"2161":{"position":[[381,10]]}}}],["d",{"_index":92,"t":{"1646":{"position":[[44,1]]},"1662":{"position":[[931,1]]},"1708":{"position":[[400,1]]},"1778":{"position":[[44,1]]},"1794":{"position":[[1257,1]]},"2039":{"position":[[233,2],[551,3]]},"2200":{"position":[[533,1],[749,1]]},"2223":{"position":[[212,1]]},"2231":{"position":[[442,1]]},"2233":{"position":[[425,1]]},"2235":{"position":[[299,1]]},"2237":{"position":[[265,1]]},"2239":{"position":[[278,1]]},"2241":{"position":[[369,1]]},"2243":{"position":[[276,1]]},"2247":{"position":[[342,1]]},"2249":{"position":[[364,1]]},"2251":{"position":[[260,1]]},"2253":{"position":[[395,1]]},"2255":{"position":[[256,1]]},"2257":{"position":[[207,1]]},"2267":{"position":[[337,1]]},"2271":{"position":[[663,1],[879,1]]},"2273":{"position":[[404,1]]},"2275":{"position":[[339,1]]},"2277":{"position":[[351,1]]},"2279":{"position":[[393,1]]},"2283":{"position":[[945,1]]},"2286":{"position":[[294,1]]},"2288":{"position":[[224,1]]},"2290":{"position":[[244,1]]},"2292":{"position":[[340,1]]},"2294":{"position":[[277,1]]},"2301":{"position":[[211,1]]},"2303":{"position":[[221,1]]},"2306":{"position":[[557,1],[773,1]]},"2308":{"position":[[446,1],[662,1]]},"2310":{"position":[[471,1],[687,1]]},"2312":{"position":[[623,1],[839,1]]},"2314":{"position":[[449,1],[665,1]]},"2316":{"position":[[481,1],[697,1]]},"2318":{"position":[[580,1],[796,1]]},"2324":{"position":[[91,1]]},"2350":{"position":[[511,1],[602,1]]},"2352":{"position":[[497,1],[588,1]]},"2354":{"position":[[553,1],[644,1]]},"2356":{"position":[[461,1]]},"2358":{"position":[[518,1]]},"2368":{"position":[[679,1]]}}}],["daemon",{"_index":436,"t":{"1689":{"position":[[576,6]]},"1957":{"position":[[1423,6]]},"2097":{"position":[[1437,6]]},"2350":{"position":[[422,6]]},"2352":{"position":[[408,6]]},"2354":{"position":[[464,6]]},"2356":{"position":[[394,6]]},"2358":{"position":[[451,6]]},"2360":{"position":[[428,6]]},"2362":{"position":[[428,6]]},"2364":{"position":[[302,6]]},"2366":{"position":[[396,6]]},"2368":{"position":[[612,6]]},"2370":{"position":[[478,6]]},"2372":{"position":[[332,6]]},"2374":{"position":[[1037,6]]}}}],["dashboard",{"_index":1424,"t":{"1914":{"position":[[77,9]]},"1918":{"position":[[91,10],[258,9],[546,9]]},"1920":{"position":[[63,9],[128,9]]},"1922":{"position":[[14,9],[105,9],[314,10],[340,9]]},"1924":{"position":[[38,9]]},"1926":{"position":[[38,9],[102,9],[159,9]]}}}],["dashboard.admin",{"_index":1433,"t":{"1918":{"position":[[148,15],[268,15],[620,15],[648,15]]},"1924":{"position":[[364,15],[392,15]]}}}],["dashboard/services/https:kubernet",{"_index":1447,"t":{"1922":{"position":[[188,35]]}}}],["dashboard:/proxi",{"_index":1448,"t":{"1922":{"position":[[224,17]]}}}],["data",{"_index":90,"t":{"1646":{"position":[[27,4]]},"1662":{"position":[[914,4]]},"1712":{"position":[[122,4]]},"1740":{"position":[[1032,4]]},"1744":{"position":[[283,4],[1524,4]]},"1746":{"position":[[306,4]]},"1748":{"position":[[469,4]]},"1750":{"position":[[412,6],[449,4],[533,4],[627,4],[659,6],[756,4],[1626,4],[2334,6]]},"1767":{"position":[[139,4],[1067,6]]},"1778":{"position":[[27,4]]},"1794":{"position":[[1240,4],[1265,6],[3947,4],[4940,6]]},"1811":{"position":[[870,4],[885,6],[1647,4],[1662,6],[2131,4],[2146,6],[2420,4],[2435,6]]},"1817":{"position":[[445,4]]},"1829":{"position":[[751,4]]},"1846":{"position":[[346,4]]},"1957":{"position":[[373,4]]},"2007":{"position":[[46,5],[128,4]]},"2061":{"position":[[422,4]]},"2113":{"position":[[204,4],[405,4]]},"2115":{"position":[[203,4],[391,4]]},"2117":{"position":[[351,4]]},"2143":{"position":[[205,5]]},"2149":{"position":[[205,5]]},"2156":{"position":[[384,4]]},"2200":{"position":[[64,4],[104,4],[194,4]]},"2202":{"position":[[74,4],[114,4],[204,4]]},"2326":{"position":[[314,5]]}}}],["data_dir",{"_index":760,"t":{"1744":{"position":[[1080,8]]}}}],["data_dir=/opt/k3",{"_index":768,"t":{"1744":{"position":[[1973,17]]}}}],["databas",{"_index":1121,"t":{"1821":{"position":[[98,8],[155,9],[233,8],[293,8],[331,8],[373,8]]},"1832":{"position":[[195,9]]},"1838":{"position":[[536,8],[786,8]]},"1850":{"position":[[66,9]]},"1981":{"position":[[594,9]]},"1987":{"position":[[162,9],[227,8]]},"1991":{"position":[[35,8]]},"1995":{"position":[[23,9],[121,8]]},"2200":{"position":[[389,9],[1601,8]]},"2271":{"position":[[519,9],[1731,8]]},"2306":{"position":[[413,9],[1625,8]]},"2308":{"position":[[302,9],[1514,8]]},"2310":{"position":[[327,9],[1539,8]]},"2312":{"position":[[479,9],[1691,8]]},"2314":{"position":[[305,9],[1517,8]]},"2316":{"position":[[337,9],[1549,8]]},"2318":{"position":[[436,9],[1648,8]]}}}],["datastor",{"_index":746,"t":{"1744":{"position":[[153,10],[2044,10]]},"1746":{"position":[[176,10],[1794,10]]},"1748":{"position":[[1109,9]]},"1750":{"position":[[119,10]]},"1764":{"position":[[238,10]]},"1767":{"position":[[40,9],[158,9],[248,9],[282,9],[368,9],[402,9],[476,9]]},"1794":{"position":[[3866,9],[3992,9],[4066,9],[4124,9],[4192,9],[4252,9],[4309,9]]},"1806":{"position":[[612,10],[825,9]]},"1817":{"position":[[63,9],[115,9],[461,9]]},"1819":{"position":[[66,10],[99,10],[180,10]]},"1821":{"position":[[17,9]]},"1823":{"position":[[129,10]]},"1827":{"position":[[65,9],[242,9],[406,9],[632,9],[795,9],[831,9],[928,9]]},"1829":{"position":[[10,9],[566,9],[1107,9]]},"1832":{"position":[[599,9],[644,9]]},"1836":{"position":[[42,9],[85,9]]},"1838":{"position":[[195,9],[273,10],[561,9],[655,9],[739,9],[838,9],[938,9]]},"1842":{"position":[[467,9],[1103,11]]},"1850":{"position":[[267,9],[375,9],[424,9],[573,9]]},"1895":{"position":[[976,9]]},"1981":{"position":[[465,9]]},"2007":{"position":[[147,11]]},"2055":{"position":[[1023,9]]},"2059":{"position":[[429,9]]},"2067":{"position":[[345,9]]},"2069":{"position":[[310,9]]},"2073":{"position":[[107,9]]},"2075":{"position":[[81,9],[484,9]]},"2077":{"position":[[165,10],[483,10],[510,9]]}}}],["datastore'",{"_index":656,"t":{"1740":{"position":[[462,11],[1056,11]]}}}],["date",{"_index":629,"t":{"1736":{"position":[[69,4]]},"1740":{"position":[[344,4]]},"1742":{"position":[[2878,5]]},"2167":{"position":[[701,4]]}}}],["day",{"_index":628,"t":{"1736":{"position":[[53,4],[135,4]]},"2111":{"position":[[117,4],[242,4]]},"2261":{"position":[[229,5]]}}}],["db",{"_index":836,"t":{"1750":{"position":[[2301,2]]},"1756":{"position":[[729,2],[745,2]]},"1767":{"position":[[1044,2]]},"1794":{"position":[[3404,4],[3891,4],[4015,4],[4149,4],[4276,4],[4388,4],[4476,4],[4541,4],[4687,4],[4819,4],[4893,4],[4916,2],[4991,4],[5029,4],[5079,4],[5158,4],[5233,4],[5304,4],[5371,4],[5438,4],[5481,4],[5571,4],[5605,4],[5657,4]]},"1825":{"position":[[854,2]]},"1895":{"position":[[544,2],[582,2],[876,2]]}}}],["de8fded06188",{"_index":313,"t":{"1675":{"position":[[1533,12]]}}}],["debug",{"_index":202,"t":{"1662":{"position":[[340,5],[364,5]]},"1774":{"position":[[27,5],[45,5]]},"1794":{"position":[[351,5],[375,5]]},"1862":{"position":[[319,5],[342,6]]},"1912":{"position":[[143,6],[591,5]]}}}],["decis",{"_index":2315,"t":{"2176":{"position":[[395,8]]}}}],["decompress",{"_index":1934,"t":{"2075":{"position":[[1066,13]]}}}],["dedic",{"_index":1181,"t":{"1838":{"position":[[1269,9]]},"2001":{"position":[[5,9],[142,9],[386,9]]},"2003":{"position":[[31,9],[157,9]]},"2005":{"position":[[157,9]]},"2318":{"position":[[83,9]]}}}],["default",{"_index":59,"t":{"1642":{"position":[[5,7]]},"1646":{"position":[[5,7]]},"1648":{"position":[[276,8],[373,9],[673,9]]},"1650":{"position":[[5,7]]},"1652":{"position":[[268,7],[328,7],[394,7]]},"1662":{"position":[[277,9],[442,9],[973,9],[1406,9],[1568,9],[1929,9],[1984,8],[2090,9],[2370,9],[2455,7],[2486,9],[2586,9],[2950,7],[3025,7],[3106,7]]},"1681":{"position":[[774,7]]},"1691":{"position":[[205,7]]},"1740":{"position":[[202,8]]},"1746":{"position":[[451,7],[824,7],[849,7],[932,7],[1314,7],[1731,7]]},"1750":{"position":[[215,8],[400,8],[464,8],[2157,10],[2244,9],[2315,8],[3338,8],[4750,7],[4878,7]]},"1767":{"position":[[129,9],[574,9],[721,8],[892,9],[983,9],[1057,9],[1172,9],[1577,9],[1714,9]]},"1771":{"position":[[282,7]]},"1774":{"position":[[5,7]]},"1776":{"position":[[5,7]]},"1778":{"position":[[5,7]]},"1780":{"position":[[5,7]]},"1782":{"position":[[5,7],[1409,7]]},"1784":{"position":[[19,7],[52,7]]},"1786":{"position":[[103,7],[160,7],[278,7]]},"1794":{"position":[[288,9],[453,9],[742,9],[816,9],[941,9],[1075,9],[1098,9],[1293,9],[1438,9],[1543,9],[1672,9],[1804,9],[1877,9],[2096,9],[2354,9],[2464,9],[3937,9],[4434,9],[4582,9],[4624,9],[4761,9],[4854,9],[4930,9],[5100,9],[5525,9],[5673,9],[5691,7],[5734,7],[6021,7],[6091,7],[6235,7],[6731,9],[6893,9],[7302,9],[7387,7],[7418,9],[7518,9],[7573,7],[8011,7],[8086,7],[8167,7],[8362,8],[8468,9],[9031,9]]},"1804":{"position":[[74,8]]},"1808":{"position":[[3,8]]},"1811":{"position":[[913,7],[1212,9],[1222,8],[1407,9],[1493,9],[1690,7],[2174,7],[2463,7],[2648,9]]},"1838":{"position":[[1155,8]]},"1844":{"position":[[44,8]]},"1850":{"position":[[42,7]]},"1876":{"position":[[778,7]]},"1893":{"position":[[494,7],[627,7]]},"1908":{"position":[[154,8]]},"1910":{"position":[[89,8]]},"1933":{"position":[[659,7]]},"1945":{"position":[[284,7],[987,8]]},"1951":{"position":[[1037,10]]},"1955":{"position":[[67,7],[217,7]]},"1959":{"position":[[442,8]]},"1969":{"position":[[513,7]]},"2021":{"position":[[428,9],[1418,9]]},"2053":{"position":[[510,7],[1081,8],[1348,8],[1499,7],[1547,7],[1658,7],[1855,7],[2157,8],[2278,8],[2675,7]]},"2085":{"position":[[298,7]]},"2089":{"position":[[162,9],[193,8]]},"2091":{"position":[[195,8],[387,8],[469,8]]},"2093":{"position":[[612,9],[6097,7],[6184,7]]},"2095":{"position":[[728,7],[988,7]]},"2097":{"position":[[114,7]]},"2099":{"position":[[196,9],[793,9]]},"2101":{"position":[[96,8]]},"2103":{"position":[[63,8]]},"2117":{"position":[[222,8],[626,7]]},"2131":{"position":[[12,7],[91,9],[376,7],[617,7],[664,7],[764,9]]},"2141":{"position":[[85,7]]},"2143":{"position":[[64,7]]},"2149":{"position":[[64,7]]},"2159":{"position":[[362,8]]},"2167":{"position":[[195,9]]},"2169":{"position":[[209,8]]},"2267":{"position":[[296,7]]},"2370":{"position":[[160,7]]},"2385":{"position":[[178,7]]}}}],["default:\"etcd",{"_index":954,"t":{"1767":{"position":[[761,14]]}}}],["default:restrict",{"_index":2031,"t":{"2093":{"position":[[4708,18]]}}}],["defaults=tru",{"_index":2155,"t":{"2101":{"position":[[4050,13]]},"2360":{"position":[[340,13]]}}}],["defin",{"_index":1623,"t":{"1959":{"position":[[247,7]]},"1963":{"position":[[28,7]]},"1965":{"position":[[20,7],[106,6],[357,7],[476,7]]},"2107":{"position":[[247,6]]},"2159":{"position":[[221,7],[272,7]]}}}],["definit",{"_index":2267,"t":{"2159":{"position":[[168,10]]},"2387":{"position":[[37,10]]},"2436":{"position":[[103,12]]}}}],["degrad",{"_index":2203,"t":{"2125":{"position":[[176,8]]}}}],["delay",{"_index":1941,"t":{"2077":{"position":[[570,7]]}}}],["delegate=y",{"_index":441,"t":{"1689":{"position":[[838,12]]}}}],["delet",{"_index":825,"t":{"1750":{"position":[[1615,6],[4049,6],[4056,6],[4543,6],[4588,6]]},"1754":{"position":[[213,8]]},"1794":{"position":[[5864,6]]},"1811":{"position":[[289,6],[296,6],[1337,7],[1539,7],[1547,6]]},"1898":{"position":[[273,6]]},"1924":{"position":[[17,6]]},"1926":{"position":[[17,6],[65,6],[129,6]]},"1929":{"position":[[210,8],[256,6]]},"1937":{"position":[[256,7]]},"2007":{"position":[[20,7],[445,6]]},"2021":{"position":[[2754,6],[2788,6],[3135,6]]},"2081":{"position":[[175,8]]},"2119":{"position":[[387,8]]},"2156":{"position":[[401,8]]},"2267":{"position":[[223,6]]},"2377":{"position":[[322,6]]}}}],["delmit",{"_index":1462,"t":{"1933":{"position":[[139,8]]}}}],["demand",{"_index":845,"t":{"1750":{"position":[[2748,6],[3404,6],[3585,6]]}}}],["denial",{"_index":2195,"t":{"2117":{"position":[[527,6]]}}}],["denyserviceexternalip",{"_index":2422,"t":{"2227":{"position":[[156,22]]}}}],["depend",{"_index":775,"t":{"1744":{"position":[[2545,9]]},"1746":{"position":[[2344,9]]},"1800":{"position":[[1350,9]]},"1817":{"position":[[38,7]]},"1981":{"position":[[560,7]]},"1985":{"position":[[534,9]]},"1991":{"position":[[24,7]]},"2176":{"position":[[1465,7]]}}}],["deploy",{"_index":1014,"t":{"1792":{"position":[[87,6]]},"1794":{"position":[[5833,6],[5875,8]]},"1842":{"position":[[728,10]]},"1848":{"position":[[1266,10]]},"1882":{"position":[[186,6],[254,6]]},"1888":{"position":[[110,6],[179,11]]},"1893":{"position":[[76,6]]},"1900":{"position":[[522,7]]},"1914":{"position":[[41,6]]},"1918":{"position":[[556,6]]},"1929":{"position":[[95,8],[626,6]]},"1931":{"position":[[56,8]]},"1933":{"position":[[62,10],[1594,6]]},"1935":{"position":[[30,10]]},"1939":{"position":[[555,9],[988,8]]},"1941":{"position":[[52,9]]},"1953":{"position":[[1339,9]]},"1957":{"position":[[27,8],[444,11]]},"1981":{"position":[[54,12]]},"1989":{"position":[[103,10]]},"1995":{"position":[[172,10]]},"2057":{"position":[[274,8]]},"2095":{"position":[[240,8]]},"2121":{"position":[[151,11]]},"2159":{"position":[[1238,10]]},"2161":{"position":[[52,10],[86,10]]},"2163":{"position":[[1303,9]]},"2326":{"position":[[344,10]]},"2434":{"position":[[93,10]]}}}],["deprec",{"_index":875,"t":{"1750":{"position":[[4301,10]]},"1794":{"position":[[2026,13],[2083,12]]},"1846":{"position":[[93,10]]},"1945":{"position":[[1768,12],[1954,12]]}}}],["depth",{"_index":1370,"t":{"1902":{"position":[[220,5]]}}}],["der",{"_index":1038,"t":{"1800":{"position":[[486,3]]}}}],["deriv",{"_index":1464,"t":{"1933":{"position":[[395,7]]}}}],["describ",{"_index":1051,"t":{"1800":{"position":[[1024,9]]},"1811":{"position":[[1441,9]]},"1832":{"position":[[121,9]]},"1850":{"position":[[239,9]]},"1895":{"position":[[46,9]]},"1920":{"position":[[138,8]]},"1929":{"position":[[480,8]]},"1943":{"position":[[10,9]]},"2061":{"position":[[699,9]]},"2079":{"position":[[499,9]]},"2093":{"position":[[1275,9],[2391,9]]}}}],["descript",{"_index":60,"t":{"1642":{"position":[[13,11]]},"1644":{"position":[[26,11]]},"1646":{"position":[[13,11]]},"1648":{"position":[[26,11]]},"1650":{"position":[[13,11]]},"1652":{"position":[[26,11]]},"1654":{"position":[[5,11]]},"1656":{"position":[[5,11]]},"1658":{"position":[[26,11]]},"1691":{"position":[[213,11]]},"1723":{"position":[[59,11]]},"1750":{"position":[[1986,11],[2971,11],[4037,11]]},"1767":{"position":[[26,11]]},"1769":{"position":[[26,11]]},"1771":{"position":[[26,11]]},"1774":{"position":[[13,11]]},"1776":{"position":[[13,11]]},"1778":{"position":[[13,11]]},"1780":{"position":[[13,11]]},"1782":{"position":[[13,11]]},"1784":{"position":[[5,11]]},"1786":{"position":[[5,11]]},"1788":{"position":[[5,11]]},"1790":{"position":[[5,11]]},"1792":{"position":[[26,11]]},"1811":{"position":[[856,11],[1044,11],[1079,11],[1633,11],[2117,11],[2360,12],[2406,11]]},"1827":{"position":[[228,11]]},"1945":{"position":[[914,11]]},"1965":{"position":[[166,11],[625,11]]},"1985":{"position":[[33,11]]},"2053":{"position":[[396,11]]},"2167":{"position":[[176,11]]},"2176":{"position":[[600,12]]}}}],["design",{"_index":1157,"t":{"1832":{"position":[[546,10]]},"1844":{"position":[[165,10]]},"2159":{"position":[[1540,6]]},"2176":{"position":[[1334,8]]}}}],["desir",{"_index":2301,"t":{"2165":{"position":[[98,7]]},"2171":{"position":[[41,7],[147,7]]},"2241":{"position":[[74,7]]},"2255":{"position":[[223,7]]}}}],["destin",{"_index":1527,"t":{"1945":{"position":[[1170,11]]},"1985":{"position":[[21,11]]}}}],["destroy",{"_index":1191,"t":{"1840":{"position":[[326,9]]}}}],["detail",{"_index":194,"t":{"1660":{"position":[[566,7]]},"1760":{"position":[[730,7]]},"1821":{"position":[[275,7]]},"1832":{"position":[[816,7]]},"1836":{"position":[[126,8]]},"1838":{"position":[[805,8],[1098,8]]},"1904":{"position":[[1824,7]]},"1906":{"position":[[756,7],[833,7]]},"1945":{"position":[[618,8]]},"2061":{"position":[[390,8]]},"2085":{"position":[[985,7]]},"2097":{"position":[[617,8]]},"2121":{"position":[[314,8]]},"2123":{"position":[[357,8]]},"2159":{"position":[[1525,7]]},"2167":{"position":[[786,7]]},"2176":{"position":[[591,8]]},"2310":{"position":[[2276,7],[2516,7],[2756,7]]},"2316":{"position":[[2321,7]]}}}],["detect",{"_index":1333,"t":{"1893":{"position":[[525,6]]},"2127":{"position":[[81,9],[119,6]]},"2163":{"position":[[2444,7]]}}}],["determin",{"_index":1361,"t":{"1900":{"position":[[648,9]]},"1981":{"position":[[222,9]]},"2055":{"position":[[46,9]]},"2057":{"position":[[104,9],[326,9]]},"2065":{"position":[[46,9]]},"2163":{"position":[[2547,9]]},"2176":{"position":[[1533,10]]}}}],["determinist",{"_index":1173,"t":{"1838":{"position":[[330,13]]}}}],["dev/nul",{"_index":1430,"t":{"1916":{"position":[[148,9]]},"1924":{"position":[[196,9]]}}}],["devic",{"_index":1701,"t":{"1981":{"position":[[704,7]]}}}],["devis",{"_index":1668,"t":{"1975":{"position":[[229,6]]}}}],["differ",{"_index":112,"t":{"1648":{"position":[[350,9]]},"1662":{"position":[[2067,9]]},"1760":{"position":[[1313,9]]},"1794":{"position":[[8445,9]]},"1838":{"position":[[765,7]]},"1840":{"position":[[352,9]]},"1882":{"position":[[59,9]]},"1933":{"position":[[1565,9]]},"1957":{"position":[[55,9],[128,9]]},"1959":{"position":[[830,9]]},"1963":{"position":[[960,9],[1542,9]]},"1965":{"position":[[866,9]]},"1995":{"position":[[13,9]]},"2077":{"position":[[274,9]]},"2089":{"position":[[133,9]]},"2095":{"position":[[1107,9]]},"2167":{"position":[[102,9]]},"2176":{"position":[[1031,6]]},"2255":{"position":[[202,9]]},"2421":{"position":[[135,9]]}}}],["dir",{"_index":91,"t":{"1646":{"position":[[32,3]]},"1662":{"position":[[919,3],[1303,3]]},"1712":{"position":[[127,4]]},"1750":{"position":[[454,3],[538,3],[2273,3]]},"1767":{"position":[[1012,3]]},"1778":{"position":[[32,3]]},"1794":{"position":[[1245,3],[4883,3],[6628,3]]},"1811":{"position":[[875,3],[1652,3],[2136,3],[2425,3]]},"2200":{"position":[[109,4]]},"2202":{"position":[[119,4]]}}}],["dir=/var/lib/rancher/k3s/agent/etc/cni/net.d",{"_index":2141,"t":{"2101":{"position":[[3460,44]]}}}],["dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin",{"_index":2140,"t":{"2101":{"position":[[3350,98]]}}}],["dir=/var/lib/rancher/k3s/server/tls/kub",{"_index":2469,"t":{"2273":{"position":[[3077,40]]},"2288":{"position":[[748,40]]},"2290":{"position":[[816,40]]},"2292":{"position":[[901,40]]},"2294":{"position":[[798,40]]},"2301":{"position":[[669,40]]},"2303":{"position":[[743,40]]}}}],["dir=/var/lib/rancher/k3s/server/tls/temporari",{"_index":2079,"t":{"2101":{"position":[[351,45]]},"2231":{"position":[[1020,45]]},"2233":{"position":[[968,45]]},"2235":{"position":[[837,45]]},"2237":{"position":[[786,45]]},"2239":{"position":[[799,45]]},"2241":{"position":[[912,45]]},"2243":{"position":[[873,45]]},"2247":{"position":[[946,45]]},"2249":{"position":[[927,45]]},"2251":{"position":[[823,45]]},"2253":{"position":[[939,45]]},"2255":{"position":[[804,45]]},"2257":{"position":[[719,45]]},"2267":{"position":[[894,45]]},"2273":{"position":[[936,45]]},"2275":{"position":[[852,45]]},"2277":{"position":[[858,45]]},"2350":{"position":[[1203,45]]},"2352":{"position":[[1217,45]]},"2354":{"position":[[1332,45]]}}}],["direct",{"_index":1003,"t":{"1782":{"position":[[1007,6]]},"1945":{"position":[[1478,6]]},"1951":{"position":[[896,6]]},"1963":{"position":[[13,9]]},"1965":{"position":[[156,9],[615,9]]}}}],["directli",{"_index":1165,"t":{"1832":{"position":[[1005,8]]},"1882":{"position":[[135,8]]},"1947":{"position":[[166,8]]},"1957":{"position":[[94,8]]}}}],["directori",{"_index":208,"t":{"1662":{"position":[[1342,9]]},"1742":{"position":[[1466,9],[1970,9]]},"1744":{"position":[[126,10],[380,10],[1010,10],[1222,9],[1529,10]]},"1746":{"position":[[149,10],[403,10],[1588,9]]},"1748":{"position":[[548,10],[668,9]]},"1750":{"position":[[390,9],[632,9],[761,10],[1631,10],[2283,9]]},"1767":{"position":[[1026,9]]},"1794":{"position":[[4898,9],[6667,9]]},"1890":{"position":[[149,10]]},"1898":{"position":[[249,9]]},"1929":{"position":[[237,9]]},"1931":{"position":[[93,10]]},"1933":{"position":[[48,9],[382,9],[470,9]]},"1935":{"position":[[80,10]]},"1937":{"position":[[124,10],[283,10]]},"1939":{"position":[[484,9]]},"2053":{"position":[[987,9],[1251,9]]},"2093":{"position":[[362,10],[2495,10]]},"2095":{"position":[[196,10]]},"2097":{"position":[[130,9],[245,10],[606,10]]},"2156":{"position":[[263,12]]},"2200":{"position":[[69,10],[199,9]]},"2202":{"position":[[79,10],[209,9]]},"2310":{"position":[[2332,9],[2572,9],[2812,9]]},"2316":{"position":[[2377,9]]}}}],["dir}/db/snapshot",{"_index":837,"t":{"1750":{"position":[[2341,18]]},"1767":{"position":[[1074,18]]},"1794":{"position":[[4947,18]]}}}],["dir}/server/db/etcd",{"_index":814,"t":{"1750":{"position":[[666,19]]}}}],["dir}/server/db/snapshot",{"_index":812,"t":{"1750":{"position":[[419,25]]}}}],["disabl",{"_index":129,"t":{"1650":{"position":[[64,7]]},"1662":{"position":[[2151,7]]},"1683":{"position":[[20,7]]},"1702":{"position":[[33,7],[488,7]]},"1704":{"position":[[45,7]]},"1750":{"position":[[2005,7],[2023,7],[3140,8]]},"1758":{"position":[[115,9],[128,7],[181,7],[209,7],[745,9],[962,7],[1006,7],[1040,7]]},"1760":{"position":[[829,8]]},"1764":{"position":[[311,7],[338,7],[364,7],[389,7]]},"1767":{"position":[[598,7],[620,7],[1308,8],[1656,8]]},"1782":{"position":[[886,9]]},"1786":{"position":[[19,7],[50,7],[66,7],[84,7],[123,7],[148,7],[195,7],[214,7],[243,7],[266,7],[314,7],[338,7]]},"1790":{"position":[[220,7]]},"1792":{"position":[[110,7]]},"1794":{"position":[[2343,10],[4458,7],[4481,7],[5238,8],[5610,8],[5799,7],[5971,7],[6002,7],[6041,7],[6079,7],[6126,7],[6158,7],[6187,7],[6223,7],[6271,7],[6308,7],[7083,7]]},"1800":{"position":[[896,9]]},"1842":{"position":[[764,7],[791,7],[813,7],[866,7]]},"1848":{"position":[[1302,7],[1329,7],[1351,7],[1404,7]]},"1906":{"position":[[1089,7]]},"1931":{"position":[[246,8]]},"1933":{"position":[[721,9]]},"1935":{"position":[[22,7]]},"1937":{"position":[[142,8],[162,7],[176,8],[310,7],[495,8]]},"1945":{"position":[[2018,7]]},"1949":{"position":[[160,7]]},"1951":{"position":[[415,9],[715,9]]},"1983":{"position":[[972,8],[1280,8]]},"1997":{"position":[[167,7]]},"1999":{"position":[[92,9],[164,7],[184,7],[213,7]]},"2001":{"position":[[246,9],[319,7]]},"2003":{"position":[[74,7],[199,7],[219,7],[248,7]]},"2005":{"position":[[67,7],[265,7],[289,7],[322,7]]},"2029":{"position":[[134,7]]},"2043":{"position":[[363,7]]},"2249":{"position":[[253,7],[468,7],[512,7]]},"2251":{"position":[[155,7],[364,7],[408,7]]},"2387":{"position":[[130,7]]}}}],["disable=coredn",{"_index":1806,"t":{"2025":{"position":[[54,15]]}}}],["disable=servicelb",{"_index":1826,"t":{"2041":{"position":[[35,17]]}}}],["disable=traefik",{"_index":1257,"t":{"1856":{"position":[[2,17]]},"2027":{"position":[[674,15]]}}}],["disabling/en",{"_index":885,"t":{"1754":{"position":[[135,18]]},"2081":{"position":[[97,18]]}}}],["disclosur",{"_index":2198,"t":{"2121":{"position":[[301,12]]}}}],["discuss",{"_index":1118,"t":{"1819":{"position":[[265,9]]}}}],["disk",{"_index":666,"t":{"1740":{"position":[[634,4]]},"1800":{"position":[[422,5]]},"1846":{"position":[[425,5]]},"1850":{"position":[[289,4]]},"1929":{"position":[[204,5]]},"1931":{"position":[[411,4]]},"1981":{"position":[[537,6],[670,4]]},"1991":{"position":[[112,5]]},"2061":{"position":[[86,4]]},"2075":{"position":[[1097,5]]}}}],["display",{"_index":907,"t":{"1760":{"position":[[56,8],[789,9]]}}}],["disrupt",{"_index":750,"t":{"1744":{"position":[[504,13],[606,11],[1384,10]]},"1746":{"position":[[505,11]]}}}],["distribut",{"_index":1523,"t":{"1945":{"position":[[560,14]]},"1951":{"position":[[520,14]]}}}],["dn",{"_index":239,"t":{"1673":{"position":[[448,3]]},"1764":{"position":[[288,3]]},"1782":{"position":[[303,3]]},"1794":{"position":[[1707,3]]},"1840":{"position":[[618,3]]},"1842":{"position":[[652,4]]},"1848":{"position":[[1190,4]]},"1895":{"position":[[1377,3]]},"2025":{"position":[[111,3]]},"2093":{"position":[[6448,4]]},"2095":{"position":[[541,3],[654,4],[744,3],[892,3]]}}}],["dns=10.43.0.10",{"_index":2138,"t":{"2101":{"position":[[3294,14]]},"2356":{"position":[[996,14],[2219,14]]},"2368":{"position":[[1187,14],[2410,14]]}}}],["doc",{"_index":1555,"t":{"1949":{"position":[[337,4]]},"1983":{"position":[[1237,5]]}}}],["docker",{"_index":135,"t":{"1650":{"position":[[151,6],[176,6],[286,6]]},"1656":{"position":[[43,6]]},"1662":{"position":[[2238,6],[2259,6],[2355,6],[3414,6]]},"1675":{"position":[[202,6],[242,7],[265,7],[284,6],[310,7],[395,6],[464,6],[929,6],[963,6]]},"1708":{"position":[[0,8],[41,6],[217,7],[280,6],[308,6],[562,6],[598,6]]},"1790":{"position":[[99,6]]},"1794":{"position":[[6956,6],[7170,6],[7191,6],[7287,6]]},"1864":{"position":[[3,8]]},"1884":{"position":[[97,6],[180,6]]},"1900":{"position":[[337,6]]},"1971":{"position":[[166,6],[275,6],[397,6]]},"2438":{"position":[[193,6]]}}}],["docker.io",{"_index":1319,"t":{"1882":{"position":[[223,10]]},"1963":{"position":[[534,10],[554,10],[1199,10]]},"1967":{"position":[[163,10],[526,10]]},"1969":{"position":[[167,10],[362,10]]},"1971":{"position":[[147,9]]}}}],["docker.io/rancher/coredn",{"_index":1632,"t":{"1963":{"position":[[621,25],[1067,25],[1409,25]]},"1971":{"position":[[178,25]]}}}],["docker.io/rancher/pause:3.1",{"_index":138,"t":{"1650":{"position":[[215,29]]}}}],["docker/20.10.sh",{"_index":252,"t":{"1675":{"position":[[372,15]]}}}],["docker/default",{"_index":2587,"t":{"2436":{"position":[[60,14]]}}}],["dockerd",{"_index":161,"t":{"1656":{"position":[[58,7]]},"1662":{"position":[[3460,7]]},"1675":{"position":[[88,8],[157,8]]},"1790":{"position":[[114,7]]},"1794":{"position":[[7002,7]]}}}],["dockershim",{"_index":249,"t":{"1675":{"position":[[116,11]]}}}],["document",{"_index":51,"t":{"1640":{"position":[[179,10],[298,13]]},"1660":{"position":[[548,13]]},"1740":{"position":[[184,14]]},"1762":{"position":[[160,13],[217,10],[336,13]]},"1806":{"position":[[1199,14],[1290,14]]},"1821":{"position":[[382,14],[412,13],[446,13],[474,13]]},"1823":{"position":[[34,13]]},"1836":{"position":[[103,13]]},"1838":{"position":[[1137,14]]},"1884":{"position":[[5,8],[219,13]]},"1902":{"position":[[109,13],[194,13]]},"1906":{"position":[[814,14],[889,14],[1370,13]]},"1922":{"position":[[350,14]]},"1933":{"position":[[164,8],[296,14]]},"1953":{"position":[[1530,13]]},"1983":{"position":[[1208,10]]},"1997":{"position":[[276,8]]},"2007":{"position":[[556,13]]},"2081":{"position":[[279,14]]},"2085":{"position":[[5,8]]},"2097":{"position":[[715,14]]},"2109":{"position":[[153,11]]},"2176":{"position":[[15,8]]},"2225":{"position":[[37,13]]},"2231":{"position":[[48,13]]},"2233":{"position":[[48,13]]},"2241":{"position":[[48,13]]},"2249":{"position":[[37,13]]},"2253":{"position":[[48,13]]},"2271":{"position":[[48,13]]},"2273":{"position":[[48,13]]},"2275":{"position":[[48,13]]},"2277":{"position":[[48,13]]},"2279":{"position":[[48,13]]},"2281":{"position":[[48,13]]},"2306":{"position":[[50,13]]},"2312":{"position":[[50,13]]},"2318":{"position":[[56,13]]},"2423":{"position":[[37,13]]},"2431":{"position":[[48,13]]},"2434":{"position":[[37,13]]},"2438":{"position":[[48,13]]}}}],["doesn't",{"_index":1962,"t":{"2085":{"position":[[1150,7]]},"2091":{"position":[[360,7]]},"2097":{"position":[[96,7]]}}}],["doesnotexist",{"_index":2293,"t":{"2163":{"position":[[987,12]]}}}],["domain",{"_index":933,"t":{"1764":{"position":[[302,6]]},"1782":{"position":[[410,6],[447,6]]},"1794":{"position":[[1836,6],[1870,6]]},"1842":{"position":[[667,7]]},"1848":{"position":[[1205,7]]}}}],["domain=cluster.loc",{"_index":2139,"t":{"2101":{"position":[[3319,20]]},"2356":{"position":[[1021,20],[2244,20]]},"2368":{"position":[[1212,20],[2435,20]]}}}],["don't",{"_index":1103,"t":{"1811":{"position":[[1890,5]]},"1906":{"position":[[1164,5]]},"1993":{"position":[[80,5]]}}}],["done",{"_index":1247,"t":{"1850":{"position":[[182,4]]},"1898":{"position":[[513,4]]},"2085":{"position":[[589,4]]}}}],["down",{"_index":1190,"t":{"1840":{"position":[[278,4]]}}}],["download",{"_index":1048,"t":{"1800":{"position":[[906,8]]},"1893":{"position":[[156,8],[349,8]]},"1898":{"position":[[78,8]]},"1900":{"position":[[601,8]]},"1906":{"position":[[163,11]]},"2053":{"position":[[458,8],[878,8],[916,8],[2143,8],[2264,8]]},"2171":{"position":[[28,8],[98,10]]},"2176":{"position":[[738,8]]}}}],["downtim",{"_index":1548,"t":{"1947":{"position":[[496,8]]}}}],["downwardapi",{"_index":1999,"t":{"2093":{"position":[[1640,13],[2781,13]]}}}],["dqlite",{"_index":1219,"t":{"1846":{"position":[[104,6],[147,6],[253,6]]},"2154":{"position":[[623,7],[638,6],[688,8]]}}}],["driven",{"_index":1922,"t":{"2075":{"position":[[45,6],[777,6]]}}}],["driver",{"_index":385,"t":{"1681":{"position":[[216,7]]},"2055":{"position":[[949,7]]}}}],["driver/mysql#dsn",{"_index":1140,"t":{"1829":{"position":[[734,16]]}}}],["driver=cgroupf",{"_index":2134,"t":{"2101":{"position":[[3176,15]]}}}],["driver=systemd",{"_index":2539,"t":{"2356":{"position":[[887,14],[2110,14]]},"2368":{"position":[[1078,14],[2301,14]]}}}],["drop",{"_index":1595,"t":{"1955":{"position":[[208,4]]},"2412":{"position":[[270,4]]}}}],["dual",{"_index":1525,"t":{"1945":{"position":[[1023,4]]},"1953":{"position":[[222,4],[511,4],[680,4],[722,4],[1519,4]]}}}],["dummi",{"_index":1336,"t":{"1893":{"position":[[698,5]]}}}],["dump",{"_index":1122,"t":{"1821":{"position":[[198,5]]}}}],["durat",{"_index":1093,"t":{"1811":{"position":[[1294,8]]},"2117":{"position":[[166,8]]}}}],["dure",{"_index":649,"t":{"1740":{"position":[[253,6],[639,6]]},"1742":{"position":[[59,6]]},"1744":{"position":[[2586,6]]},"1746":{"position":[[2385,6]]},"2007":{"position":[[313,6]]},"2156":{"position":[[27,6]]}}}],["dynam",{"_index":1081,"t":{"1810":{"position":[[220,11]]},"1957":{"position":[[1174,7],[1208,7]]},"2129":{"position":[[406,7]]}}}],["e",{"_index":570,"t":{"1717":{"position":[[447,1]]},"1916":{"position":[[165,1]]},"1924":{"position":[[213,1]]},"2200":{"position":[[939,1],[1266,1]]},"2206":{"position":[[203,1]]},"2208":{"position":[[180,1]]},"2210":{"position":[[186,1]]},"2212":{"position":[[188,1]]},"2271":{"position":[[1069,1],[1396,1]]},"2306":{"position":[[963,1],[1290,1]]},"2308":{"position":[[852,1],[1179,1]]},"2310":{"position":[[877,1],[1204,1]]},"2312":{"position":[[1029,1],[1356,1]]},"2314":{"position":[[855,1],[1182,1]]},"2316":{"position":[[887,1],[1214,1]]},"2318":{"position":[[986,1],[1313,1]]},"2335":{"position":[[222,1]]}}}],["e.g",{"_index":1094,"t":{"1811":{"position":[[1345,5]]},"1933":{"position":[[1179,5]]},"1957":{"position":[[113,5],[298,5],[1239,5]]}}}],["e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1",{"_index":2409,"t":{"2225":{"position":[[1070,64]]},"2227":{"position":[[1051,64]]},"2245":{"position":[[1064,64]]},"2298":{"position":[[1036,64]]}}}],["e9ef",{"_index":335,"t":{"1675":{"position":[[2206,4]]}}}],["each",{"_index":918,"t":{"1760":{"position":[[741,4]]},"1888":{"position":[[141,4]]},"1893":{"position":[[299,4],[433,4],[663,4]]},"1895":{"position":[[292,4]]},"1898":{"position":[[262,4],[355,4]]},"1933":{"position":[[86,4],[356,4]]},"1957":{"position":[[1794,4]]},"1959":{"position":[[357,4],[589,4]]},"1963":{"position":[[169,4],[770,4]]},"1965":{"position":[[69,4],[86,4]]},"1967":{"position":[[85,4]]},"1969":{"position":[[85,4],[608,4]]},"1973":{"position":[[161,4]]},"1975":{"position":[[215,4],[297,4]]},"1983":{"position":[[629,4],[753,4]]},"2097":{"position":[[199,4]]},"2103":{"position":[[72,4]]},"2131":{"position":[[644,4]]},"2133":{"position":[[203,4]]},"2167":{"position":[[512,4]]},"2176":{"position":[[284,4],[567,4],[862,4],[1167,4]]},"2329":{"position":[[109,4]]},"2331":{"position":[[109,4]]},"2333":{"position":[[99,4]]},"2335":{"position":[[99,4]]},"2337":{"position":[[99,4]]},"2339":{"position":[[99,4]]},"2350":{"position":[[242,4]]},"2352":{"position":[[228,4]]},"2354":{"position":[[271,4]]},"2356":{"position":[[218,4]]},"2358":{"position":[[255,4]]},"2360":{"position":[[240,4]]},"2362":{"position":[[241,4]]},"2364":{"position":[[123,4]]},"2366":{"position":[[239,4]]},"2368":{"position":[[361,4]]},"2370":{"position":[[295,4]]},"2372":{"position":[[123,4]]},"2374":{"position":[[544,4]]},"2385":{"position":[[173,4]]},"2396":{"position":[[42,4]]},"2398":{"position":[[42,4]]},"2400":{"position":[[42,4]]},"2402":{"position":[[42,4]]},"2404":{"position":[[42,4]]},"2406":{"position":[[46,4]]},"2408":{"position":[[42,4]]},"2414":{"position":[[42,4]]},"2416":{"position":[[42,4]]},"2418":{"position":[[42,4]]}}}],["easier",{"_index":830,"t":{"1750":{"position":[[1963,6]]}}}],["east",{"_index":857,"t":{"1750":{"position":[[3353,4]]},"1767":{"position":[[1591,4]]},"1794":{"position":[[5539,4]]}}}],["ec2",{"_index":1815,"t":{"2031":{"position":[[276,3]]}}}],["echo",{"_index":2344,"t":{"2200":{"position":[[473,4],[663,4],[730,4],[843,4],[972,4],[1096,4],[1172,4],[1299,4],[1421,4],[1502,4],[1688,4],[1711,4],[1762,4],[1801,4],[1841,4],[1863,4],[1912,4],[1952,4],[1990,4]]},"2271":{"position":[[603,4],[793,4],[860,4],[973,4],[1102,4],[1226,4],[1302,4],[1429,4],[1551,4],[1632,4],[1818,4],[1841,4],[1892,4],[1931,4],[1971,4],[1993,4],[2042,4],[2082,4],[2120,4]]},"2306":{"position":[[497,4],[687,4],[754,4],[867,4],[996,4],[1120,4],[1196,4],[1323,4],[1445,4],[1526,4],[1712,4],[1735,4],[1786,4],[1825,4],[1865,4],[1887,4],[1936,4],[1976,4],[2014,4]]},"2308":{"position":[[386,4],[576,4],[643,4],[756,4],[885,4],[1009,4],[1085,4],[1212,4],[1334,4],[1415,4],[1601,4],[1624,4],[1675,4],[1714,4],[1754,4],[1776,4],[1825,4],[1865,4],[1903,4]]},"2310":{"position":[[411,4],[601,4],[668,4],[781,4],[910,4],[1034,4],[1110,4],[1237,4],[1359,4],[1440,4],[1626,4],[1649,4],[1700,4],[1739,4],[1779,4],[1801,4],[1850,4],[1890,4],[1928,4]]},"2312":{"position":[[563,4],[753,4],[820,4],[933,4],[1062,4],[1186,4],[1262,4],[1389,4],[1511,4],[1592,4],[1778,4],[1801,4],[1852,4],[1891,4],[1931,4],[1953,4],[2002,4],[2042,4],[2080,4]]},"2314":{"position":[[389,4],[579,4],[646,4],[759,4],[888,4],[1012,4],[1088,4],[1215,4],[1337,4],[1418,4],[1604,4],[1627,4],[1678,4],[1717,4],[1757,4],[1779,4],[1828,4],[1868,4],[1906,4]]},"2316":{"position":[[421,4],[611,4],[678,4],[791,4],[920,4],[1044,4],[1120,4],[1247,4],[1369,4],[1450,4],[1636,4],[1659,4],[1710,4],[1749,4],[1789,4],[1811,4],[1860,4],[1900,4],[1938,4]]},"2318":{"position":[[520,4],[710,4],[777,4],[890,4],[1019,4],[1143,4],[1219,4],[1346,4],[1468,4],[1549,4],[1735,4],[1758,4],[1809,4],[1848,4],[1888,4],[1910,4],[1959,4],[1999,4],[2037,4]]},"2350":{"position":[[716,4]]},"2352":{"position":[[706,4]]},"2354":{"position":[[758,4]]}}}],["edg",{"_index":2,"t":{"1634":{"position":[[63,8]]},"1888":{"position":[[174,4]]}}}],["edit",{"_index":1379,"t":{"1904":{"position":[[508,7],[538,7]]},"2223":{"position":[[26,4]]},"2225":{"position":[[112,4]]},"2227":{"position":[[26,4]]},"2229":{"position":[[36,4]]},"2231":{"position":[[134,4]]},"2233":{"position":[[133,4]]},"2235":{"position":[[26,4]]},"2237":{"position":[[26,4]]},"2239":{"position":[[26,4]]},"2241":{"position":[[120,4]]},"2243":{"position":[[26,4]]},"2245":{"position":[[26,4]]},"2247":{"position":[[26,4]]},"2249":{"position":[[116,4]]},"2251":{"position":[[26,4]]},"2253":{"position":[[119,4]]},"2255":{"position":[[26,4]]},"2257":{"position":[[26,4]]},"2259":{"position":[[36,4]]},"2261":{"position":[[36,4]]},"2263":{"position":[[36,4]]},"2265":{"position":[[36,4]]},"2267":{"position":[[26,4]]},"2269":{"position":[[36,4]]},"2271":{"position":[[130,4]]},"2273":{"position":[[116,4]]},"2275":{"position":[[116,4]]},"2277":{"position":[[130,4]]},"2279":{"position":[[107,4]]},"2283":{"position":[[26,4]]},"2286":{"position":[[26,4]]},"2288":{"position":[[26,4]]},"2290":{"position":[[26,4]]},"2292":{"position":[[26,4]]},"2294":{"position":[[26,4]]},"2296":{"position":[[36,4]]},"2298":{"position":[[26,4]]},"2301":{"position":[[26,4]]},"2303":{"position":[[26,4]]},"2306":{"position":[[100,4]]},"2308":{"position":[[26,4]]},"2310":{"position":[[26,4]]},"2312":{"position":[[142,4]]},"2314":{"position":[[26,4]]},"2316":{"position":[[26,4]]},"2318":{"position":[[149,4]]},"2350":{"position":[[58,4],[155,4]]},"2352":{"position":[[58,4],[141,4]]},"2354":{"position":[[58,4],[184,4]]},"2356":{"position":[[58,4],[131,4]]},"2358":{"position":[[58,4],[168,4]]},"2360":{"position":[[68,4],[153,4]]},"2362":{"position":[[68,4],[154,4]]},"2364":{"position":[[36,4]]},"2366":{"position":[[58,4],[152,4]]},"2368":{"position":[[58,4],[274,4]]},"2370":{"position":[[68,4],[208,4]]},"2372":{"position":[[36,4]]},"2374":{"position":[[58,4],[457,4]]}}}],["ee",{"_index":2342,"t":{"2200":{"position":[[453,2]]},"2271":{"position":[[583,2]]},"2306":{"position":[[477,2]]},"2308":{"position":[[366,2]]},"2310":{"position":[[391,2]]},"2312":{"position":[[543,2]]},"2314":{"position":[[369,2]]},"2316":{"position":[[401,2]]},"2318":{"position":[[500,2]]}}}],["ef",{"_index":2338,"t":{"2200":{"position":[[136,2]]},"2202":{"position":[[146,2]]},"2225":{"position":[[298,2]]},"2227":{"position":[[227,2]]},"2245":{"position":[[287,2]]},"2298":{"position":[[236,2]]}}}],["effect",{"_index":1656,"t":{"1969":{"position":[[573,7]]},"2075":{"position":[[213,6]]},"2093":{"position":[[1102,6],[2044,10]]},"2267":{"position":[[310,7]]}}}],["efficaci",{"_index":2210,"t":{"2127":{"position":[[236,9]]}}}],["eg",{"_index":832,"t":{"1750":{"position":[[2129,3]]},"1767":{"position":[[864,3]]},"1794":{"position":[[4729,3]]}}}],["egress",{"_index":936,"t":{"1764":{"position":[[409,6]]},"1782":{"position":[[821,6]]},"1794":{"position":[[2269,6]]},"1951":{"position":[[570,6],[605,6],[665,6]]},"2231":{"position":[[1137,6]]},"2233":{"position":[[1085,6]]},"2235":{"position":[[954,6]]},"2237":{"position":[[903,6]]},"2239":{"position":[[916,6]]},"2241":{"position":[[1029,6]]},"2243":{"position":[[990,6]]},"2247":{"position":[[1063,6]]},"2249":{"position":[[1044,6]]},"2251":{"position":[[940,6]]},"2253":{"position":[[1056,6]]},"2255":{"position":[[921,6]]},"2257":{"position":[[836,6]]},"2267":{"position":[[1011,6]]},"2273":{"position":[[1053,6]]},"2275":{"position":[[969,6]]},"2277":{"position":[[975,6]]},"2350":{"position":[[1320,6]]},"2352":{"position":[[1334,6]]},"2354":{"position":[[1449,6]]}}}],["elast",{"_index":1201,"t":{"1840":{"position":[[633,7]]}}}],["elevator=deadlin",{"_index":516,"t":{"1706":{"position":[[339,17]]}}}],["embed",{"_index":130,"t":{"1650":{"position":[[72,8]]},"1662":{"position":[[2159,8]]},"1742":{"position":[[966,8]]},"1750":{"position":[[105,8]]},"1756":{"position":[[720,8]]},"1764":{"position":[[162,8]]},"1769":{"position":[[517,8]]},"1794":{"position":[[3231,8],[7091,8]]},"1823":{"position":[[115,8]]},"1832":{"position":[[628,8]]},"1846":{"position":[[111,8],[263,8],[368,8]]},"1850":{"position":[[50,8]]},"1895":{"position":[[573,8]]},"1931":{"position":[[161,8]]},"1957":{"position":[[1673,8],[1741,8]]},"1983":{"position":[[703,8]]},"1985":{"position":[[101,8]]},"1997":{"position":[[313,8],[343,8]]},"2055":{"position":[[201,8]]},"2067":{"position":[[413,8]]},"2069":{"position":[[378,8]]}}}],["emmc",{"_index":1702,"t":{"1981":{"position":[[736,5]]}}}],["empti",{"_index":1174,"t":{"1838":{"position":[[374,6]]},"1850":{"position":[[567,5]]},"1939":{"position":[[438,5]]},"2410":{"position":[[124,5]]}}}],["emptydir",{"_index":1998,"t":{"2093":{"position":[[1602,10],[2743,10]]}}}],["en",{"_index":1473,"t":{"1933":{"position":[[739,2]]}}}],["enabl",{"_index":115,"t":{"1648":{"position":[[405,6]]},"1662":{"position":[[1652,6]]},"1689":{"position":[[615,6]]},"1691":{"position":[[391,7]]},"1750":{"position":[[204,7],[2993,6]]},"1752":{"position":[[13,8]]},"1754":{"position":[[89,7]]},"1756":{"position":[[189,8],[848,8]]},"1758":{"position":[[453,6],[505,6],[532,6],[1324,6],[1367,6],[1400,6]]},"1760":{"position":[[236,7],[518,7],[841,7]]},"1767":{"position":[[1107,6]]},"1780":{"position":[[52,6]]},"1782":{"position":[[615,6]]},"1790":{"position":[[43,6],[56,6]]},"1794":{"position":[[2148,6],[5034,6],[8499,6],[8534,6],[8562,6],[8754,6]]},"1798":{"position":[[100,7]]},"1848":{"position":[[183,6]]},"1876":{"position":[[553,8],[602,8]]},"1878":{"position":[[637,8],[681,8]]},"1900":{"position":[[36,6]]},"1912":{"position":[[605,7]]},"1945":{"position":[[325,6]]},"1949":{"position":[[235,7]]},"1953":{"position":[[600,7],[673,6],[1582,8]]},"1957":{"position":[[424,6]]},"1959":{"position":[[730,6]]},"1999":{"position":[[430,8]]},"2053":{"position":[[745,6]]},"2059":{"position":[[67,7]]},"2079":{"position":[[13,8],[331,7]]},"2081":{"position":[[51,7]]},"2085":{"position":[[845,9]]},"2091":{"position":[[368,6],[559,8]]},"2093":{"position":[[130,7],[944,7],[1162,8],[1208,8]]},"2099":{"position":[[855,7]]},"2101":{"position":[[477,6]]},"2105":{"position":[[488,6]]},"2107":{"position":[[587,6]]},"2109":{"position":[[376,8],[393,6]]},"2119":{"position":[[113,8]]},"2227":{"position":[[184,7],[283,6],[326,6]]},"2231":{"position":[[1227,6],[1270,6]]},"2233":{"position":[[1175,6],[1218,6]]},"2235":{"position":[[1044,6],[1087,6]]},"2237":{"position":[[993,6],[1036,6]]},"2239":{"position":[[1006,6],[1049,6]]},"2241":{"position":[[241,6],[445,7],[492,6],[1119,6],[1162,6]]},"2243":{"position":[[165,6],[352,7],[399,6],[459,6],[1080,6],[1123,6]]},"2245":{"position":[[155,6],[221,6],[343,6]]},"2247":{"position":[[155,6],[270,6],[418,7],[465,6],[523,6],[1153,6],[1196,6]]},"2249":{"position":[[1134,6],[1177,6]]},"2251":{"position":[[1030,6],[1073,6]]},"2253":{"position":[[248,6],[327,6],[471,7],[518,6],[1146,6],[1189,6]]},"2255":{"position":[[1011,6],[1054,6]]},"2257":{"position":[[926,6],[969,6]]},"2267":{"position":[[1101,6],[1144,6]]},"2273":{"position":[[1143,6],[1186,6]]},"2275":{"position":[[1059,6],[1102,6]]},"2277":{"position":[[1065,6],[1108,6]]},"2350":{"position":[[106,7],[1410,6],[1453,6]]},"2352":{"position":[[1424,6],[1467,6]]},"2354":{"position":[[1539,6],[1582,6]]},"2436":{"position":[[49,6]]}}}],["enablelb",{"_index":1821,"t":{"2039":{"position":[[43,8]]}}}],["encapsul",{"_index":1530,"t":{"1945":{"position":[[1320,11],[1592,11]]},"1951":{"position":[[81,11]]}}}],["encod",{"_index":1039,"t":{"1800":{"position":[[490,8]]}}}],["encount",{"_index":678,"t":{"1740":{"position":[[1193,11]]},"1929":{"position":[[410,11]]}}}],["encrypt",{"_index":615,"t":{"1723":{"position":[[938,7],[1002,7]]},"1740":{"position":[[489,9],[1068,9]]},"1752":{"position":[[30,10],[84,11]]},"1754":{"position":[[74,8],[162,10],[184,10],[222,10],[310,10]]},"1756":{"position":[[50,10],[139,10],[174,10],[265,7],[464,7],[670,7],[776,10],[833,10],[1002,7],[1070,10],[1173,7],[1412,7],[1658,7]]},"1758":{"position":[[72,10],[97,10],[144,10],[201,7],[414,7],[468,10],[524,7],[624,7],[701,10],[727,10],[856,7],[978,10],[1032,7],[1285,7],[1339,10],[1392,7],[1532,7]]},"1760":{"position":[[12,7],[113,10],[202,7],[217,10],[281,10],[484,7],[499,10],[564,10],[770,10],[815,10],[1034,10],[1383,10],[1518,10],[1637,11],[1688,7],[1804,10]]},"1764":{"position":[[500,10]]},"1780":{"position":[[35,10],[66,10]]},"1794":{"position":[[8488,10],[8513,10]]},"1806":{"position":[[554,7],[643,10]]},"1817":{"position":[[424,7]]},"1842":{"position":[[907,10]]},"1848":{"position":[[1445,10]]},"1945":{"position":[[332,11],[1608,7],[1743,7],[1872,7]]},"2021":{"position":[[451,11]]},"2079":{"position":[[30,10],[109,10],[193,10],[273,10],[310,10],[444,10],[550,10]]},"2081":{"position":[[36,8],[124,10],[146,10],[184,10],[263,7]]},"2099":{"position":[[219,11],[816,11]]},"2121":{"position":[[18,10],[270,9],[357,10],[400,11]]},"2123":{"position":[[12,10],[86,10],[160,10],[400,10],[443,11]]},"2279":{"position":[[236,10],[314,10],[469,11]]},"2281":{"position":[[154,10]]},"2306":{"position":[[82,11]]},"2312":{"position":[[87,10]]}}}],["encryptionconfig",{"_index":2473,"t":{"2279":{"position":[[78,16]]},"2281":{"position":[[78,16]]}}}],["encryptionconfigur",{"_index":1943,"t":{"2079":{"position":[[584,26]]}}}],["end",{"_index":1486,"t":{"1933":{"position":[[1144,3]]},"2167":{"position":[[571,3]]}}}],["endpoint",{"_index":128,"t":{"1650":{"position":[[45,8]]},"1662":{"position":[[2120,8]]},"1750":{"position":[[3023,8],[3035,8],[3058,8],[3105,8]]},"1767":{"position":[[50,8],[1137,8],[1159,8],[1212,8],[1269,8]]},"1782":{"position":[[1114,9],[1383,10],[1502,10],[1521,8],[1755,10],[1774,8],[1828,10]]},"1790":{"position":[[69,8]]},"1794":{"position":[[3876,8],[5064,8],[5087,8],[5140,8],[5198,8],[7052,8],[8575,8]]},"1827":{"position":[[75,8],[252,8]]},"1829":{"position":[[20,8],[576,8],[1117,8]]},"1838":{"position":[[205,8],[749,8],[848,8]]},"1840":{"position":[[440,8],[515,8],[659,8]]},"1850":{"position":[[434,9]]},"1951":{"position":[[806,10],[979,9],[1241,10],[1331,10],[1350,8],[1668,10],[1687,8],[1741,10]]},"1963":{"position":[[50,9],[126,9],[209,10],[285,8],[565,9],[1210,9]]},"1967":{"position":[[174,9],[537,9]]},"1969":{"position":[[178,9],[373,9],[484,10]]}}}],["endpoint=\"mysql://username:password@tcp(hostname:3306)/databas",{"_index":1177,"t":{"1838":{"position":[[665,63]]},"1842":{"position":[[477,63]]},"1895":{"position":[[986,63]]}}}],["endpoint=/run/k3s/containerd/containerd.sock",{"_index":2142,"t":{"2101":{"position":[[3525,44]]}}}],["endpoint=unix:///run/k3s/containerd/containerd.sock",{"_index":2540,"t":{"2356":{"position":[[1062,51],[2285,51]]},"2368":{"position":[[1253,51],[2476,51]]}}}],["enforc",{"_index":1213,"t":{"1842":{"position":[[1052,7]]},"2021":{"position":[[1428,8],[1450,7],[2066,9]]},"2091":{"position":[[310,7]]},"2093":{"position":[[622,8],[644,7]]},"2105":{"position":[[311,7]]}}}],["engin",{"_index":1550,"t":{"1949":{"position":[[122,7]]}}}],["ensur",{"_index":771,"t":{"1744":{"position":[[2345,6]]},"1746":{"position":[[2114,6]]},"1838":{"position":[[1544,6]]},"1842":{"position":[[921,6]]},"1893":{"position":[[324,6]]},"1900":{"position":[[85,6]]},"1931":{"position":[[453,6]]},"1933":{"position":[[427,6],[1426,6]]},"1945":{"position":[[660,6],[748,6]]},"1949":{"position":[[565,6],[949,6]]},"1959":{"position":[[538,6]]},"1981":{"position":[[607,6]]},"1991":{"position":[[60,6]]},"2007":{"position":[[481,6]]},"2075":{"position":[[1246,6]]},"2077":{"position":[[103,6]]},"2095":{"position":[[1141,6]]},"2105":{"position":[[0,6],[135,7]]},"2107":{"position":[[0,6]]},"2109":{"position":[[0,6]]},"2111":{"position":[[0,6],[122,7]]},"2113":{"position":[[0,6],[161,7]]},"2115":{"position":[[0,6],[160,7]]},"2117":{"position":[[0,6]]},"2119":{"position":[[0,6]]},"2121":{"position":[[0,6]]},"2123":{"position":[[0,6],[125,6]]},"2125":{"position":[[0,6],[123,6]]},"2127":{"position":[[0,6]]},"2129":{"position":[[0,6],[279,7]]},"2131":{"position":[[0,6]]},"2159":{"position":[[1798,6]]},"2163":{"position":[[2178,6]]},"2167":{"position":[[949,6]]},"2176":{"position":[[1607,6]]},"2200":{"position":[[333,6]]},"2249":{"position":[[235,6]]},"2251":{"position":[[194,6]]},"2271":{"position":[[463,6]]},"2298":{"position":[[162,6]]},"2303":{"position":[[144,6]]},"2306":{"position":[[357,6]]},"2308":{"position":[[246,6]]},"2310":{"position":[[271,6]]},"2312":{"position":[[423,6]]},"2314":{"position":[[249,6]]},"2316":{"position":[[281,6]]},"2318":{"position":[[380,6]]},"2326":{"position":[[79,6]]},"2394":{"position":[[26,6]]},"2406":{"position":[[77,8]]},"2410":{"position":[[26,6]]},"2440":{"position":[[26,6]]}}}],["enterpris",{"_index":1681,"t":{"1979":{"position":[[125,10]]}}}],["entir",{"_index":1540,"t":{"1945":{"position":[[2034,9]]},"2057":{"position":[[205,6]]}}}],["entri",{"_index":288,"t":{"1675":{"position":[[1053,7],[1217,7]]}}}],["env",{"_index":411,"t":{"1681":{"position":[[992,4]]},"1744":{"position":[[2504,4]]},"1746":{"position":[[2303,4]]}}}],["environ",{"_index":80,"t":{"1644":{"position":[[5,11]]},"1648":{"position":[[5,11]]},"1652":{"position":[[5,11]]},"1658":{"position":[[5,11]]},"1662":{"position":[[112,11]]},"1691":{"position":[[169,11]]},"1744":{"position":[[1089,11]]},"1750":{"position":[[2464,11]]},"1767":{"position":[[5,11]]},"1769":{"position":[[5,11]]},"1771":{"position":[[5,11]]},"1792":{"position":[[5,11]]},"1794":{"position":[[114,11]]},"1804":{"position":[[174,11]]},"1808":{"position":[[164,11]]},"1827":{"position":[[207,11]]},"1832":{"position":[[269,12]]},"1882":{"position":[[37,11],[92,11],[111,11]]},"1884":{"position":[[74,11]]},"1888":{"position":[[60,12]]},"1893":{"position":[[790,11]]},"1898":{"position":[[21,11],[544,11]]},"1900":{"position":[[62,13]]},"1904":{"position":[[224,11],[330,11],[520,11],[1839,11],[1866,11]]},"1906":{"position":[[526,11]]},"1908":{"position":[[78,11],[1208,11]]},"1912":{"position":[[213,11]]},"1953":{"position":[[233,11]]},"2053":{"position":[[310,11],[375,11],[1292,11],[2391,11],[2505,11]]},"2055":{"position":[[799,11]]},"2077":{"position":[[19,11]]},"2097":{"position":[[224,12]]},"2167":{"position":[[242,13]]},"2249":{"position":[[97,12]]},"2426":{"position":[[124,11]]}}}],["ephemer",{"_index":1935,"t":{"2075":{"position":[[1138,9]]},"2077":{"position":[[419,9]]},"2093":{"position":[[1690,11],[2831,11]]}}}],["equal",{"_index":2371,"t":{"2200":{"position":[[2099,5]]},"2206":{"position":[[362,5]]},"2214":{"position":[[251,5]]},"2257":{"position":[[329,5]]},"2288":{"position":[[355,5]]},"2290":{"position":[[423,5]]},"2301":{"position":[[314,5]]},"2303":{"position":[[349,5]]},"2308":{"position":[[2057,5]]},"2314":{"position":[[2060,5]]},"2316":{"position":[[2092,5]]},"2337":{"position":[[280,5]]},"2339":{"position":[[295,5]]},"2341":{"position":[[259,5]]},"2343":{"position":[[228,5]]},"2350":{"position":[[790,5]]},"2356":{"position":[[586,5]]}}}],["equival",{"_index":1403,"t":{"1908":{"position":[[435,10]]},"1947":{"position":[[867,10]]},"1951":{"position":[[447,10]]}}}],["err",{"_index":2346,"t":{"2200":{"position":[[508,3]]},"2271":{"position":[[638,3]]},"2306":{"position":[[532,3]]},"2308":{"position":[[421,3]]},"2310":{"position":[[446,3]]},"2312":{"position":[[598,3]]},"2314":{"position":[[424,3]]},"2316":{"position":[[456,3]]},"2318":{"position":[[555,3]]}}}],["error",{"_index":78,"t":{"1642":{"position":[[249,5]]},"1648":{"position":[[321,5]]},"1662":{"position":[[651,5],[2038,5]]},"1740":{"position":[[1252,5]]},"1744":{"position":[[2140,6],[2173,7]]},"1746":{"position":[[1964,6],[1997,7]]},"1748":{"position":[[1271,6],[1304,7]]},"1774":{"position":[[280,5]]},"1794":{"position":[[662,5],[8416,5]]},"1840":{"position":[[836,6]]},"1906":{"position":[[1245,6]]},"1929":{"position":[[391,6]]},"1933":{"position":[[756,5]]},"2310":{"position":[[2102,6],[2132,5],[2342,6],[2372,5],[2582,6],[2612,5]]},"2316":{"position":[[2147,6],[2177,5]]}}}],["esac",{"_index":2365,"t":{"2200":{"position":[[1578,4],[2017,4]]},"2271":{"position":[[1708,4],[2147,4]]},"2306":{"position":[[1602,4],[2041,4]]},"2308":{"position":[[1491,4],[1930,4]]},"2310":{"position":[[1516,4],[1955,4]]},"2312":{"position":[[1668,4],[2107,4]]},"2314":{"position":[[1494,4],[1933,4]]},"2316":{"position":[[1526,4],[1965,4]]},"2318":{"position":[[1625,4],[2064,4]]}}}],["escal",{"_index":2575,"t":{"2391":{"position":[[75,8]]}}}],["esgz",{"_index":568,"t":{"1717":{"position":[[221,6],[415,4]]}}}],["essenti",{"_index":1067,"t":{"1806":{"position":[[381,11]]}}}],["establish",{"_index":1164,"t":{"1832":{"position":[[982,9]]}}}],["estargz",{"_index":557,"t":{"1715":{"position":[[427,8],[504,8],[556,8],[587,8],[686,8]]},"1717":{"position":[[98,7],[153,7],[361,7]]}}}],["et",{"_index":550,"t":{"1715":{"position":[[61,2]]}}}],["etc",{"_index":341,"t":{"1675":{"position":[[2278,6]]},"1850":{"position":[[444,4]]}}}],["etc/cni/net.d/10",{"_index":1559,"t":{"1949":{"position":[[648,17],[1032,17]]}}}],["etc/kubernetes/admin.conf",{"_index":2374,"t":{"2206":{"position":[[148,26]]}}}],["etc/kubernetes/manifests/etcd.yaml",{"_index":2336,"t":{"2192":{"position":[[152,35]]},"2194":{"position":[[158,35]]},"2306":{"position":[[137,35]]},"2308":{"position":[[63,35]]},"2310":{"position":[[63,35]]},"2312":{"position":[[179,35]]},"2314":{"position":[[63,35]]},"2316":{"position":[[63,35]]},"2318":{"position":[[186,35]]}}}],["etc/kubernetes/manifests/kub",{"_index":2330,"t":{"2180":{"position":[[152,30]]},"2182":{"position":[[158,30]]},"2184":{"position":[[152,30]]},"2186":{"position":[[158,30]]},"2188":{"position":[[152,30]]},"2190":{"position":[[158,30]]},"2223":{"position":[[69,30]]},"2225":{"position":[[155,30]]},"2227":{"position":[[69,30]]},"2229":{"position":[[79,30]]},"2231":{"position":[[173,30]]},"2233":{"position":[[176,30]]},"2235":{"position":[[69,30]]},"2237":{"position":[[69,30]]},"2239":{"position":[[69,30]]},"2241":{"position":[[163,30]]},"2243":{"position":[[69,30]]},"2245":{"position":[[69,30]]},"2247":{"position":[[69,30]]},"2249":{"position":[[159,30]]},"2251":{"position":[[69,30]]},"2253":{"position":[[162,30]]},"2255":{"position":[[69,30]]},"2257":{"position":[[69,30]]},"2259":{"position":[[79,30]]},"2261":{"position":[[79,30]]},"2263":{"position":[[79,30]]},"2265":{"position":[[79,30]]},"2267":{"position":[[69,30]]},"2269":{"position":[[79,30]]},"2271":{"position":[[173,30]]},"2273":{"position":[[159,30]]},"2275":{"position":[[159,30]]},"2277":{"position":[[173,30]]},"2279":{"position":[[150,30]]},"2283":{"position":[[69,30]]},"2286":{"position":[[77,30]]},"2288":{"position":[[77,30]]},"2290":{"position":[[77,30]]},"2292":{"position":[[77,30]]},"2294":{"position":[[77,30]]},"2296":{"position":[[87,30]]},"2298":{"position":[[77,30]]},"2301":{"position":[[68,30]]},"2303":{"position":[[68,30]]}}}],["etc/kubernetes/pki",{"_index":2383,"t":{"2216":{"position":[[151,20]]}}}],["etc/kubernetes/pki/*.crt",{"_index":2386,"t":{"2218":{"position":[[145,25]]}}}],["etc/kubernetes/pki/*.key",{"_index":2388,"t":{"2220":{"position":[[145,25]]}}}],["etc/rancher/k3",{"_index":1621,"t":{"1959":{"position":[[183,17]]}}}],["etc/rancher/k3s/config.yaml",{"_index":200,"t":{"1662":{"position":[[287,31]]},"1794":{"position":[[298,31]]},"1908":{"position":[[204,28]]},"1910":{"position":[[132,28]]},"1912":{"position":[[97,29]]},"1947":{"position":[[658,28]]},"2005":{"position":[[216,29]]}}}],["etc/rancher/k3s/config.yaml.d/*.yaml",{"_index":1413,"t":{"1910":{"position":[[165,37]]}}}],["etc/rancher/k3s/k3s.yaml",{"_index":610,"t":{"1723":{"position":[[504,27]]},"1813":{"position":[[0,26],[433,25],[503,25]]},"1815":{"position":[[0,28]]},"2049":{"position":[[327,26]]}}}],["etc/rancher/k3s/registries.yaml",{"_index":143,"t":{"1650":{"position":[[326,34]]},"1662":{"position":[[2596,35]]},"1794":{"position":[[7528,35]]},"1967":{"position":[[49,32]]},"1969":{"position":[[49,32]]}}}],["etc/rancher/nod",{"_index":624,"t":{"1733":{"position":[[454,17],[819,20]]}}}],["etc/rancher/node/password",{"_index":621,"t":{"1733":{"position":[[238,27]]}}}],["etc/ssl",{"_index":733,"t":{"1742":{"position":[[2236,9]]}}}],["etc/ssl/certs/intermediate.pem",{"_index":735,"t":{"1742":{"position":[[2374,31]]}}}],["etc/ssl/certs/root.pem",{"_index":734,"t":{"1742":{"position":[[2350,23]]}}}],["etc/ssl/private/intermediate.key",{"_index":736,"t":{"1742":{"position":[[2406,33]]}}}],["etc/sysctl.d/90",{"_index":1971,"t":{"2089":{"position":[[286,16],[362,16]]}}}],["etc/systemd",{"_index":432,"t":{"1689":{"position":[[445,22]]}}}],["etc/systemd/system",{"_index":1845,"t":{"2053":{"position":[[1321,19]]}}}],["etc/systemd/system/k3",{"_index":237,"t":{"1673":{"position":[[340,23]]}}}],["etc/systemd/system/k3s.servic",{"_index":1612,"t":{"1957":{"position":[[1371,31]]},"2097":{"position":[[1131,32]]}}}],["etc/systemd/system/k3s.service.env",{"_index":236,"t":{"1673":{"position":[[304,35]]}}}],["etc/systemd/system/kubelet.service.d/10",{"_index":2513,"t":{"2329":{"position":[[150,40]]},"2331":{"position":[[156,40]]},"2350":{"position":[[185,40]]},"2352":{"position":[[171,40]]},"2354":{"position":[[214,40]]},"2356":{"position":[[161,40]]},"2358":{"position":[[198,40]]},"2360":{"position":[[183,40]]},"2362":{"position":[[184,40]]},"2364":{"position":[[66,40]]},"2366":{"position":[[182,40]]},"2368":{"position":[[304,40]]},"2370":{"position":[[238,40]]},"2372":{"position":[[66,40]]},"2374":{"position":[[487,40]]}}}],["etcd",{"_index":355,"t":{"1677":{"position":[[9,4],[93,5]]},"1683":{"position":[[191,4]]},"1723":{"position":[[830,4],[896,4]]},"1738":{"position":[[480,5]]},"1742":{"position":[[934,4],[975,4]]},"1750":{"position":[[114,4],[786,4],[823,4],[2000,4],[2041,4],[2058,4],[2184,4],[2259,4],[2627,4],[2659,4],[2868,4],[2915,4],[2985,4],[3015,4],[3050,4],[3116,4],[3181,4],[3216,4],[3251,4],[3283,4],[3362,4],[3411,4],[3448,4],[3592,4],[3746,4],[3805,4],[3841,4],[3880,4],[3915,4],[4010,4],[4200,4],[4256,4],[4388,4],[4493,4],[4528,4],[4574,4],[4908,4],[4932,4]]},"1764":{"position":[[171,5]]},"1767":{"position":[[96,5],[510,4],[541,4],[593,4],[638,4],[655,4],[705,4],[730,4],[789,4],[919,4],[998,4],[1095,4],[1129,4],[1204,4],[1280,4],[1349,4],[1408,4],[1471,4],[1513,4],[1602,4],[1639,4],[1681,4]]},"1769":{"position":[[526,4]]},"1788":{"position":[[19,4],[54,4]]},"1794":{"position":[[3240,4],[3526,4],[3569,4],[3904,5],[4368,4],[4400,4],[4453,4],[4499,4],[4516,4],[4567,4],[4592,4],[4634,5],[4653,4],[4789,4],[4869,4],[4968,4],[5005,4],[5021,4],[5056,4],[5132,4],[5209,4],[5279,4],[5346,4],[5417,4],[5460,4],[5550,4],[5588,4],[5635,4]]},"1821":{"position":[[469,4]]},"1823":{"position":[[12,4],[124,4]]},"1825":{"position":[[0,5],[167,4],[409,5],[585,4],[619,4],[637,5],[673,4],[697,4],[718,4],[752,4],[779,5],[895,4]]},"1827":{"position":[[19,5],[305,4]]},"1829":{"position":[[145,4],[1101,5],[1238,4],[1279,4]]},"1846":{"position":[[120,4],[272,4],[377,4]]},"1850":{"position":[[98,4],[262,4],[528,5]]},"1872":{"position":[[263,4]]},"1957":{"position":[[1682,4],[1750,5]]},"1983":{"position":[[712,5]]},"1985":{"position":[[110,4]]},"1987":{"position":[[268,4]]},"1995":{"position":[[75,5]]},"1997":{"position":[[143,5],[235,4],[322,5],[352,5]]},"1999":{"position":[[33,4],[258,5],[288,4]]},"2001":{"position":[[117,4],[241,4],[327,4],[535,4]]},"2003":{"position":[[167,4]]},"2005":{"position":[[167,4]]},"2055":{"position":[[210,4]]},"2067":{"position":[[422,4]]},"2069":{"position":[[387,4]]},"2075":{"position":[[100,6]]},"2083":{"position":[[77,5]]},"2087":{"position":[[70,4]]},"2101":{"position":[[547,4],[621,4],[694,4],[766,4]]},"2119":{"position":[[291,5]]},"2121":{"position":[[87,6]]},"2123":{"position":[[79,6]]},"2154":{"position":[[704,4]]},"2200":{"position":[[33,4],[59,4],[146,6],[189,4],[369,4],[575,4],[825,5],[1719,4],[1739,4]]},"2202":{"position":[[43,4],[69,4],[156,6],[199,4]]},"2231":{"position":[[1303,4],[1368,4],[1432,4],[1495,4]]},"2233":{"position":[[1251,4],[1316,4],[1380,4],[1443,4]]},"2235":{"position":[[1120,4],[1185,4],[1249,4],[1312,4]]},"2237":{"position":[[1069,4],[1134,4],[1198,4],[1261,4]]},"2239":{"position":[[1082,4],[1147,4],[1211,4],[1274,4]]},"2241":{"position":[[1195,4],[1260,4],[1324,4],[1387,4]]},"2243":{"position":[[1156,4],[1221,4],[1285,4],[1348,4]]},"2247":{"position":[[1229,4],[1294,4],[1358,4],[1421,4]]},"2249":{"position":[[1210,4],[1275,4],[1339,4],[1402,4]]},"2251":{"position":[[1106,4],[1171,4],[1235,4],[1298,4]]},"2253":{"position":[[1222,4],[1287,4],[1351,4],[1414,4]]},"2255":{"position":[[1087,4],[1152,4],[1216,4],[1279,4]]},"2257":{"position":[[1002,4],[1067,4],[1131,4],[1194,4]]},"2267":{"position":[[1177,4],[1242,4],[1306,4],[1369,4]]},"2271":{"position":[[118,5],[257,4],[301,4],[351,4],[499,4],[705,4],[955,5],[1849,4],[1869,4],[2223,4],[2256,4],[2299,4],[2319,4]]},"2273":{"position":[[1219,4],[1284,4],[1348,4],[1411,4]]},"2275":{"position":[[1135,4],[1200,4],[1264,4],[1327,4]]},"2277":{"position":[[118,5],[257,4],[302,4],[427,5],[461,4],[1141,4],[1206,4],[1270,4],[1333,4]]},"2306":{"position":[[37,4],[109,4],[393,4],[599,4],[849,5],[1743,4],[1763,4]]},"2308":{"position":[[35,4],[282,4],[488,4],[738,5],[1632,4],[1652,4]]},"2310":{"position":[[35,4],[307,4],[513,4],[763,5],[1657,4],[1677,4]]},"2312":{"position":[[37,4],[122,4],[151,4],[459,4],[665,4],[915,5],[1809,4],[1829,4]]},"2314":{"position":[[35,4],[285,4],[491,4],[741,5],[1635,4],[1655,4]]},"2316":{"position":[[35,4],[317,4],[523,4],[773,5],[1667,4],[1687,4]]},"2318":{"position":[[51,4],[129,4],[158,4],[416,4],[622,4],[872,5],[1766,4],[1786,4]]},"2350":{"position":[[1486,4],[1551,4],[1615,4],[1678,4]]},"2352":{"position":[[1500,4],[1565,4],[1629,4],[1692,4]]},"2354":{"position":[[1615,4],[1680,4],[1744,4],[1807,4]]}}}],["etcd/peer",{"_index":715,"t":{"1742":{"position":[[995,9],[1012,9]]}}}],["etcd/serv",{"_index":716,"t":{"1742":{"position":[[1029,11],[1048,11]]}}}],["etcd3",{"_index":9,"t":{"1636":{"position":[[107,6]]}}}],["etcd:etcd",{"_index":2372,"t":{"2202":{"position":[[252,9]]}}}],["etcd_auto_tl",{"_index":2499,"t":{"2310":{"position":[[2025,15],[2059,15]]}}}],["etcd_url",{"_index":363,"t":{"1677":{"position":[[284,11]]}}}],["etcd_url=\"https://github.com/etcd",{"_index":357,"t":{"1677":{"position":[[158,33]]}}}],["etcd_vers",{"_index":359,"t":{"1677":{"position":[[239,15]]}}}],["etcd_version=\"v3.5.5",{"_index":356,"t":{"1677":{"position":[[136,21]]}}}],["etcdctl",{"_index":354,"t":{"1677":{"position":[[0,8],[46,8],[70,8],[120,8],[387,8],[418,7]]}}}],["evalu",{"_index":2299,"t":{"2163":{"position":[[2525,8]]},"2176":{"position":[[221,8],[911,9],[1594,9]]}}}],["even",{"_index":714,"t":{"1742":{"position":[[958,4]]},"1893":{"position":[[674,4]]},"1933":{"position":[[692,4]]},"1963":{"position":[[1475,4]]},"2109":{"position":[[289,4]]},"2119":{"position":[[339,4]]}}}],["event",{"_index":1458,"t":{"1929":{"position":[[541,5],[574,6]]},"2111":{"position":[[192,7]]}}}],["eventratelimit",{"_index":2453,"t":{"2241":{"position":[[522,16]]}}}],["eventrecordqp",{"_index":2559,"t":{"2366":{"position":[[79,14]]}}}],["eventu",{"_index":874,"t":{"1750":{"position":[[4287,10]]}}}],["everyth",{"_index":1963,"t":{"2085":{"position":[[1202,10]]}}}],["evict",{"_index":2145,"t":{"2101":{"position":[[3648,8],[3705,8]]},"2356":{"position":[[1165,8],[1222,8],[2388,8],[2445,8]]},"2368":{"position":[[1356,8],[1413,8],[2579,8],[2636,8]]}}}],["exampl",{"_index":185,"t":{"1660":{"position":[[290,7]]},"1662":{"position":[[44,7]]},"1742":{"position":[[179,7],[1287,7],[1389,7],[1852,7],[2165,8]]},"1744":{"position":[[872,7],[892,7],[1122,7]]},"1746":{"position":[[1152,7],[1171,7],[1346,7]]},"1748":{"position":[[563,8]]},"1750":{"position":[[1251,7]]},"1760":{"position":[[140,7],[387,7],[1275,7]]},"1794":{"position":[[44,7]]},"1838":{"position":[[445,8],[1423,7]]},"1840":{"position":[[153,8],[735,8]]},"1842":{"position":[[9,7]]},"1890":{"position":[[164,8]]},"1895":{"position":[[816,8],[1087,8]]},"1900":{"position":[[718,8]]},"1906":{"position":[[1058,8]]},"1908":{"position":[[261,7]]},"1910":{"position":[[383,7]]},"1912":{"position":[[55,8]]},"1933":{"position":[[742,7]]},"1937":{"position":[[298,8]]},"1939":{"position":[[417,8]]},"1949":{"position":[[480,8],[863,8]]},"1953":{"position":[[795,7]]},"1955":{"position":[[464,7]]},"1959":{"position":[[840,8]]},"1963":{"position":[[91,8],[489,8],[995,8]]},"1965":{"position":[[826,8]]},"1967":{"position":[[10,8]]},"1969":{"position":[[10,8]]},"1971":{"position":[[157,8],[266,8],[388,8]]},"2003":{"position":[[101,7]]},"2005":{"position":[[136,8]]},"2053":{"position":[[1592,8],[2347,7]]},"2059":{"position":[[124,7],[361,7]]},"2079":{"position":[[535,7]]},"2093":{"position":[[384,7],[1333,7],[2517,7]]},"2095":{"position":[[272,7]]},"2105":{"position":[[580,7]]},"2107":{"position":[[679,7]]},"2109":{"position":[[560,7]]},"2111":{"position":[[400,7]]},"2113":{"position":[[274,8],[575,7]]},"2115":{"position":[[561,7]]},"2117":{"position":[[785,7]]},"2119":{"position":[[407,7],[578,7]]},"2125":{"position":[[652,7]]},"2129":{"position":[[703,7]]},"2163":{"position":[[345,7]]},"2167":{"position":[[467,9]]},"2169":{"position":[[102,8]]},"2180":{"position":[[133,8]]},"2182":{"position":[[133,8]]},"2184":{"position":[[133,8]]},"2186":{"position":[[133,8]]},"2188":{"position":[[133,8]]},"2190":{"position":[[133,8]]},"2192":{"position":[[133,8]]},"2194":{"position":[[133,8]]},"2196":{"position":[[133,8]]},"2198":{"position":[[133,8]]},"2200":{"position":[[227,8]]},"2202":{"position":[[237,8]]},"2204":{"position":[[133,8]]},"2206":{"position":[[123,8]]},"2208":{"position":[[123,8]]},"2210":{"position":[[123,8]]},"2212":{"position":[[123,8]]},"2214":{"position":[[123,8]]},"2216":{"position":[[123,8]]},"2218":{"position":[[123,8]]},"2220":{"position":[[123,8]]},"2235":{"position":[[227,7]]},"2239":{"position":[[219,7]]},"2259":{"position":[[269,8]]},"2261":{"position":[[239,8]]},"2263":{"position":[[233,8]]},"2265":{"position":[[227,8]]},"2269":{"position":[[249,8]]},"2279":{"position":[[303,8]]},"2286":{"position":[[233,8]]},"2292":{"position":[[265,8]]},"2329":{"position":[[131,8]]},"2331":{"position":[[131,8]]},"2333":{"position":[[121,8]]},"2335":{"position":[[121,8]]},"2337":{"position":[[121,8]]},"2339":{"position":[[121,8]]},"2350":{"position":[[403,8]]},"2352":{"position":[[389,8]]},"2354":{"position":[[445,8]]},"2356":{"position":[[375,8]]},"2358":{"position":[[432,8]]},"2360":{"position":[[409,8]]},"2362":{"position":[[409,8]]},"2364":{"position":[[283,8]]},"2366":{"position":[[377,8]]},"2368":{"position":[[593,8]]},"2370":{"position":[[459,8]]},"2372":{"position":[[313,8]]},"2374":{"position":[[1018,8]]},"2436":{"position":[[119,7]]}}}],["example.com",{"_index":1487,"t":{"1933":{"position":[[1185,14]]}}}],["example_manifest",{"_index":1477,"t":{"1933":{"position":[[949,18],[1010,19]]}}}],["exce",{"_index":869,"t":{"1750":{"position":[[4136,6]]},"2117":{"position":[[376,7]]}}}],["except",{"_index":1953,"t":{"2085":{"position":[[405,10]]}}}],["exec",{"_index":1005,"t":{"1782":{"position":[[1143,4]]},"1951":{"position":[[1008,4]]},"2053":{"position":[[1876,4],[2657,4]]}}}],["execstart=/usr/local/bin/k3",{"_index":433,"t":{"1689":{"position":[[508,28]]},"2097":{"position":[[1164,28]]}}}],["execut",{"_index":1329,"t":{"1893":{"position":[[337,11]]},"1906":{"position":[[238,9]]},"2163":{"position":[[1773,8]]},"2200":{"position":[[2031,10]]},"2271":{"position":[[2161,10]]},"2306":{"position":[[2055,10]]},"2308":{"position":[[1944,10]]},"2310":{"position":[[1969,10]]},"2312":{"position":[[2121,10]]},"2314":{"position":[[1947,10]]},"2316":{"position":[[1979,10]]},"2318":{"position":[[2078,10]]},"2350":{"position":[[133,10]]},"2352":{"position":[[119,10]]},"2374":{"position":[[435,10]]}}}],["exempt",{"_index":1786,"t":{"2021":{"position":[[1562,11]]},"2093":{"position":[[756,11]]}}}],["exhaust",{"_index":2193,"t":{"2117":{"position":[[475,7]]},"2167":{"position":[[680,10]]}}}],["exist",{"_index":705,"t":{"1742":{"position":[[510,8],[685,8],[1362,8],[1525,6],[1625,8],[1721,8],[2193,8],[2270,8]]},"1744":{"position":[[1715,8]]},"1746":{"position":[[1249,8],[1435,8]]},"1748":{"position":[[196,8],[944,8]]},"1750":{"position":[[2854,5]]},"1850":{"position":[[15,8],[615,8]]},"1910":{"position":[[329,8]]},"1937":{"position":[[416,8]]},"1939":{"position":[[200,9],[406,6]]},"1953":{"position":[[614,8]]},"1959":{"position":[[173,6]]},"2001":{"position":[[94,8]]},"2003":{"position":[[22,8]]},"2007":{"position":[[380,8]]},"2053":{"position":[[612,5]]},"2079":{"position":[[345,8]]},"2095":{"position":[[644,5]]},"2105":{"position":[[181,8]]}}}],["exit",{"_index":1966,"t":{"2089":{"position":[[54,4]]}}}],["expect",{"_index":878,"t":{"1750":{"position":[[4367,8]]},"1979":{"position":[[7,8]]},"2133":{"position":[[187,12]]},"2200":{"position":[[2073,8]]},"2206":{"position":[[330,8]]},"2208":{"position":[[324,8],[374,8]]},"2210":{"position":[[321,8]]},"2212":{"position":[[334,8],[384,8]]},"2214":{"position":[[219,8]]},"2216":{"position":[[238,8]]},"2225":{"position":[[334,8]]},"2227":{"position":[[263,8]]},"2231":{"position":[[550,8]]},"2233":{"position":[[533,8]]},"2235":{"position":[[396,8]]},"2237":{"position":[[362,8]]},"2239":{"position":[[375,8]]},"2241":{"position":[[472,8]]},"2243":{"position":[[379,8]]},"2245":{"position":[[323,8]]},"2247":{"position":[[445,8]]},"2249":{"position":[[448,8]]},"2251":{"position":[[344,8]]},"2253":{"position":[[498,8]]},"2255":{"position":[[346,8]]},"2257":{"position":[[295,8]]},"2267":{"position":[[421,8]]},"2271":{"position":[[2203,8]]},"2273":{"position":[[477,8]]},"2275":{"position":[[432,8]]},"2277":{"position":[[441,8]]},"2288":{"position":[[321,8]]},"2290":{"position":[[363,8]]},"2292":{"position":[[460,8]]},"2294":{"position":[[377,8]]},"2298":{"position":[[272,8]]},"2301":{"position":[[280,8]]},"2303":{"position":[[312,8]]},"2306":{"position":[[2094,8]]},"2308":{"position":[[1983,8]]},"2310":{"position":[[2008,8]]},"2312":{"position":[[2160,8]]},"2314":{"position":[[1986,8]]},"2316":{"position":[[2018,8]]},"2318":{"position":[[2117,8]]},"2333":{"position":[[254,8]]},"2335":{"position":[[345,8]]},"2337":{"position":[[254,8]]},"2339":{"position":[[263,8]]},"2341":{"position":[[193,8]]},"2343":{"position":[[196,8]]},"2350":{"position":[[751,8]]},"2352":{"position":[[747,8]]},"2354":{"position":[[841,8]]},"2356":{"position":[[547,8]]},"2368":{"position":[[741,8]]}}}],["experiment",{"_index":221,"t":{"1662":{"position":[[3295,14],[3344,14],[3437,14]]},"1681":{"position":[[483,12]]},"1790":{"position":[[265,15]]},"1794":{"position":[[6979,14],[8547,14],[8614,14],[8663,14]]},"1846":{"position":[[45,12],[134,12],[240,12]]},"1953":{"position":[[13,12]]}}}],["expir",{"_index":631,"t":{"1736":{"position":[[113,8],[143,9]]},"1808":{"position":[[313,7]]},"1810":{"position":[[257,8]]},"1811":{"position":[[1400,6]]},"1955":{"position":[[239,8]]}}}],["explain",{"_index":1624,"t":{"1959":{"position":[[788,7]]},"2103":{"position":[[89,10]]},"2176":{"position":[[1384,7]]}}}],["explicit",{"_index":2214,"t":{"2131":{"position":[[497,8]]},"2385":{"position":[[33,8]]}}}],["explicitli",{"_index":1860,"t":{"2053":{"position":[[2635,10]]}}}],["export",{"_index":1113,"t":{"1813":{"position":[[276,6]]},"2061":{"position":[[127,8],[534,8]]}}}],["expos",{"_index":950,"t":{"1767":{"position":[[515,6],[534,6]]},"1794":{"position":[[4373,6],[4393,6]]},"1951":{"position":[[244,8]]},"1983":{"position":[[836,7]]},"2089":{"position":[[205,7]]}}}],["express",{"_index":1637,"t":{"1963":{"position":[[869,11]]}}}],["extend",{"_index":2189,"t":{"2117":{"position":[[114,9]]}}}],["extens",{"_index":1928,"t":{"2075":{"position":[[452,9]]}}}],["extern",{"_index":147,"t":{"1652":{"position":[[108,8],[130,8]]},"1662":{"position":[[2726,8],[2773,8]]},"1740":{"position":[[1451,8]]},"1756":{"position":[[736,8]]},"1764":{"position":[[229,8],[458,8]]},"1776":{"position":[[151,8]]},"1782":{"position":[[658,8],[685,8]]},"1794":{"position":[[956,8],[2191,8],[2225,8],[7787,8],[7834,8]]},"1821":{"position":[[8,8],[146,8]]},"1832":{"position":[[186,8],[590,8]]},"1836":{"position":[[33,8]]},"1838":{"position":[[264,8],[552,8]]},"1842":{"position":[[1090,8]]},"1895":{"position":[[535,8],[867,8]]},"1945":{"position":[[1120,8],[1141,8],[1253,8]]},"1957":{"position":[[513,8],[591,8],[625,8],[1043,8],[1281,8],[1510,8],[1700,8]]},"1987":{"position":[[153,8],[218,8]]},"2007":{"position":[[138,8],[184,8]]},"2043":{"position":[[173,8],[251,9]]},"2394":{"position":[[74,8]]}}}],["extra",{"_index":522,"t":{"1706":{"position":[[499,5]]},"1811":{"position":[[1132,5]]},"2101":{"position":[[1406,5],[1436,5]]},"2231":{"position":[[2211,5],[2241,5]]},"2233":{"position":[[2159,5],[2189,5]]},"2235":{"position":[[2028,5],[2058,5]]},"2237":{"position":[[1977,5],[2007,5]]},"2239":{"position":[[1990,5],[2020,5]]},"2241":{"position":[[2103,5],[2133,5]]},"2243":{"position":[[2064,5],[2094,5]]},"2247":{"position":[[2137,5],[2167,5]]},"2249":{"position":[[2118,5],[2148,5]]},"2251":{"position":[[2014,5],[2044,5]]},"2253":{"position":[[2130,5],[2160,5]]},"2255":{"position":[[1995,5],[2025,5]]},"2257":{"position":[[1910,5],[1940,5]]},"2267":{"position":[[2085,5],[2115,5]]},"2273":{"position":[[2127,5],[2157,5]]},"2275":{"position":[[2043,5],[2073,5]]},"2277":{"position":[[2049,5],[2079,5]]},"2350":{"position":[[2394,5],[2424,5]]},"2352":{"position":[[2408,5],[2438,5]]},"2354":{"position":[[2523,5],[2553,5]]}}}],["extract",{"_index":665,"t":{"1740":{"position":[[621,9]]}}}],["f",{"_index":461,"t":{"1693":{"position":[[76,1]]},"1916":{"position":[[203,1]]},"1918":{"position":[[618,1],[646,1]]},"1924":{"position":[[250,1],[362,1],[390,1]]},"2143":{"position":[[338,1],[365,1]]},"2145":{"position":[[176,1],[342,1],[369,1]]},"2161":{"position":[[233,1]]}}}],["fabric",{"_index":1518,"t":{"1945":{"position":[[53,6]]}}}],["fabricmanag",{"_index":386,"t":{"1681":{"position":[[224,13]]}}}],["factor",{"_index":2322,"t":{"2176":{"position":[[1513,6]]}}}],["fail",{"_index":931,"t":{"1764":{"position":[[126,4]]},"1906":{"position":[[1215,4],[1261,6]]},"1933":{"position":[[824,6],[850,6]]},"2101":{"position":[[3775,4]]},"2176":{"position":[[634,7]]},"2356":{"position":[[1292,4],[2515,4]]},"2368":{"position":[[1483,4],[2706,4]]}}}],["failur",{"_index":887,"t":{"1754":{"position":[[262,7]]},"1764":{"position":[[83,7]]},"2077":{"position":[[494,7],[617,7]]}}}],["fals",{"_index":951,"t":{"1767":{"position":[[584,6]]},"1780":{"position":[[46,5]]},"1794":{"position":[[4444,6]]},"1876":{"position":[[995,5]]},"1878":{"position":[[714,5]]},"1908":{"position":[[787,5]]},"2093":{"position":[[1461,5],[1507,5],[1715,5],[1744,5],[1773,5],[2014,5],[2648,5],[2680,5],[2856,5],[2871,5],[2886,5],[3099,5],[3745,5]]},"2131":{"position":[[603,5]]},"2200":{"position":[[478,7],[1846,9]]},"2257":{"position":[[338,7]]},"2271":{"position":[[608,7],[1976,9]]},"2288":{"position":[[364,7]]},"2290":{"position":[[432,7]]},"2301":{"position":[[323,7]]},"2306":{"position":[[502,7],[1870,9]]},"2308":{"position":[[391,7],[1759,9]]},"2310":{"position":[[174,6],[416,7],[1784,9]]},"2312":{"position":[[568,7],[1936,9]]},"2314":{"position":[[394,7],[1762,9]]},"2316":{"position":[[179,6],[426,7],[1794,9],[2101,7]]},"2318":{"position":[[525,7],[1893,9]]},"2350":{"position":[[117,6],[799,7]]},"2385":{"position":[[254,5]]}}}],["favor",{"_index":876,"t":{"1750":{"position":[[4315,5]]},"1947":{"position":[[125,5],[344,5]]}}}],["fbf3f726cbc6_0",{"_index":338,"t":{"1675":{"position":[[2221,14]]}}}],["fc",{"_index":2229,"t":{"2137":{"position":[[259,2]]},"2366":{"position":[[460,2]]},"2374":{"position":[[1101,2]]}}}],["featur",{"_index":1211,"t":{"1842":{"position":[[874,7]]},"1848":{"position":[[1412,7]]},"2107":{"position":[[429,8]]},"2167":{"position":[[79,7],[377,9]]},"2231":{"position":[[1533,7]]},"2233":{"position":[[1481,7]]},"2235":{"position":[[1350,7]]},"2237":{"position":[[1299,7]]},"2239":{"position":[[1312,7]]},"2241":{"position":[[1425,7]]},"2243":{"position":[[1386,7]]},"2247":{"position":[[1459,7]]},"2249":{"position":[[1440,7]]},"2251":{"position":[[1336,7]]},"2253":{"position":[[1452,7]]},"2255":{"position":[[1317,7]]},"2257":{"position":[[1232,7]]},"2267":{"position":[[1407,7]]},"2273":{"position":[[1449,7]]},"2275":{"position":[[1365,7]]},"2277":{"position":[[1371,7]]},"2288":{"position":[[1647,7]]},"2290":{"position":[[1715,7]]},"2292":{"position":[[1800,7]]},"2294":{"position":[[1697,7]]},"2296":{"position":[[182,7],[256,7]]},"2350":{"position":[[1716,7]]},"2352":{"position":[[1730,7]]},"2354":{"position":[[1845,7]]},"2372":{"position":[[208,7]]}}}],["fetch",{"_index":1851,"t":{"2053":{"position":[[2130,8],[2251,8]]}}}],["few",{"_index":1208,"t":{"1842":{"position":[[559,3]]},"1848":{"position":[[1097,3]]},"2163":{"position":[[1171,3]]}}}],["fewer",{"_index":2570,"t":{"2377":{"position":[[169,5]]}}}],["ffd6",{"_index":309,"t":{"1675":{"position":[[1503,4],[1820,4]]}}}],["fi",{"_index":2370,"t":{"2200":{"position":[[2022,2]]},"2206":{"position":[[326,3]]},"2208":{"position":[[320,3]]},"2210":{"position":[[317,3]]},"2212":{"position":[[330,3]]},"2271":{"position":[[2152,2]]},"2306":{"position":[[2046,2]]},"2308":{"position":[[1935,2]]},"2310":{"position":[[1960,2]]},"2312":{"position":[[2112,2]]},"2314":{"position":[[1938,2]]},"2316":{"position":[[1970,2]]},"2318":{"position":[[2069,2]]},"2335":{"position":[[341,3]]},"2350":{"position":[[747,3]]},"2352":{"position":[[743,3]]},"2354":{"position":[[837,3]]}}}],["field",{"_index":2216,"t":{"2131":{"position":[[594,5],[839,5]]},"2163":{"position":[[1332,5],[1813,5],[1880,5],[1906,5]]}}}],["figur",{"_index":1894,"t":{"2059":{"position":[[169,7],[383,7]]},"2061":{"position":[[603,7]]},"2075":{"position":[[23,7],[755,7]]}}}],["file",{"_index":54,"t":{"1640":{"position":[[257,4],[293,4],[361,6]]},"1642":{"position":[[151,4],[206,4],[266,4]]},"1644":{"position":[[112,4],[144,4]]},"1650":{"position":[[392,4]]},"1652":{"position":[[228,4],[351,4],[421,4]]},"1662":{"position":[[225,5],[234,4],[272,4],[541,4],[602,4],[668,4],[769,4],[796,4],[1563,4],[2581,4],[2876,4],[3048,4],[3133,4]]},"1742":{"position":[[734,5],[805,5],[939,5],[1446,5],[1512,5],[1677,6],[1791,6],[2227,5],[2753,6],[2785,5]]},"1744":{"position":[[88,5],[1032,5],[1501,5],[2509,5]]},"1746":{"position":[[111,5],[2308,5]]},"1748":{"position":[[183,4],[376,4],[1201,5]]},"1750":{"position":[[1944,5],[2559,4]]},"1760":{"position":[[1151,6]]},"1762":{"position":[[295,4],[331,4],[399,6]]},"1767":{"position":[[228,4],[348,4],[456,4]]},"1769":{"position":[[138,4],[164,4],[321,4],[353,4]]},"1771":{"position":[[137,4],[240,4]]},"1774":{"position":[[182,4],[237,4],[297,4]]},"1792":{"position":[[334,4]]},"1794":{"position":[[236,5],[245,4],[283,4],[552,4],[613,4],[679,4],[2575,4],[2812,4],[2833,4],[3006,4],[3027,4],[3426,4],[4046,4],[4172,4],[4289,4],[6888,4],[7513,4],[7937,4],[8109,4],[8194,4]]},"1808":{"position":[[447,4]]},"1817":{"position":[[172,4],[237,5]]},"1840":{"position":[[767,4]]},"1876":{"position":[[934,4]]},"1886":{"position":[[90,5]]},"1890":{"position":[[22,4],[130,4]]},"1898":{"position":[[115,5],[292,5]]},"1904":{"position":[[532,5]]},"1908":{"position":[[145,5],[188,4],[294,4],[805,5],[859,4],[1125,4],[1186,5],[1195,5]]},"1910":{"position":[[65,5],[112,5],[410,5]]},"1912":{"position":[[78,4],[513,4]]},"1918":{"position":[[141,6]]},"1929":{"position":[[21,4],[185,4],[219,5],[449,4]]},"1931":{"position":[[229,5],[387,5]]},"1933":{"position":[[25,5],[91,4],[311,4],[361,4],[412,4],[443,5],[792,4],[1438,5]]},"1937":{"position":[[250,5]]},"1939":{"position":[[8,4],[81,4],[171,4],[249,4],[366,4],[462,4],[1032,5]]},"1947":{"position":[[647,6]]},"1959":{"position":[[168,4],[262,5],[341,4],[581,4],[816,4]]},"1961":{"position":[[4,4]]},"1965":{"position":[[437,4]]},"1967":{"position":[[385,4],[439,4],[491,4],[644,4],[698,4],[750,4]]},"1971":{"position":[[33,4],[137,4]]},"2003":{"position":[[304,5]]},"2005":{"position":[[59,4]]},"2053":{"position":[[1150,5],[1304,5]]},"2079":{"position":[[211,4],[568,5]]},"2085":{"position":[[921,4]]},"2089":{"position":[[274,4]]},"2093":{"position":[[311,4],[2431,4],[2542,5]]},"2097":{"position":[[553,4]]},"2099":{"position":[[62,5]]},"2113":{"position":[[130,6],[155,5],[299,4],[345,5]]},"2115":{"position":[[129,6],[154,5],[285,4],[331,5]]},"2180":{"position":[[72,4]]},"2182":{"position":[[72,4]]},"2184":{"position":[[72,4]]},"2186":{"position":[[72,4]]},"2188":{"position":[[72,4]]},"2190":{"position":[[72,4]]},"2192":{"position":[[72,4]]},"2194":{"position":[[72,4]]},"2196":{"position":[[72,4]]},"2198":{"position":[[72,4]]},"2200":{"position":[[956,8],[1283,8],[1526,5],[1773,4],[1786,7],[1879,4],[1897,7],[2009,7]]},"2204":{"position":[[72,4]]},"2206":{"position":[[62,4]]},"2208":{"position":[[62,4]]},"2210":{"position":[[62,4]]},"2212":{"position":[[62,4]]},"2214":{"position":[[62,4]]},"2216":{"position":[[62,4]]},"2218":{"position":[[62,4]]},"2220":{"position":[[62,4]]},"2223":{"position":[[64,4]]},"2225":{"position":[[150,4],[365,5]]},"2227":{"position":[[64,4]]},"2229":{"position":[[74,4]]},"2231":{"position":[[168,4],[370,5],[417,5]]},"2233":{"position":[[171,4],[326,4]]},"2235":{"position":[[64,4]]},"2237":{"position":[[64,4]]},"2239":{"position":[[64,4]]},"2241":{"position":[[108,5],[158,4]]},"2243":{"position":[[64,4]]},"2245":{"position":[[64,4]]},"2247":{"position":[[64,4]]},"2249":{"position":[[154,4]]},"2251":{"position":[[64,4]]},"2253":{"position":[[157,4]]},"2255":{"position":[[64,4]]},"2257":{"position":[[64,4]]},"2259":{"position":[[74,4],[213,4]]},"2261":{"position":[[74,4]]},"2263":{"position":[[74,4]]},"2265":{"position":[[74,4]]},"2267":{"position":[[64,4],[279,4]]},"2269":{"position":[[74,4],[185,4],[218,4]]},"2271":{"position":[[168,4],[282,4],[343,5],[384,5],[1086,8],[1413,8],[1656,5],[1903,4],[1916,7],[2009,4],[2027,7],[2139,7]]},"2273":{"position":[[154,4],[275,4],[333,5],[379,5],[506,5],[546,5]]},"2275":{"position":[[154,4],[272,5],[314,5],[426,5],[462,5]]},"2277":{"position":[[168,4],[284,4],[326,5]]},"2279":{"position":[[95,5],[145,4],[293,5]]},"2281":{"position":[[95,5],[109,5]]},"2283":{"position":[[64,4]]},"2286":{"position":[[72,4]]},"2288":{"position":[[72,4]]},"2290":{"position":[[72,4]]},"2292":{"position":[[72,4],[200,4],[234,4],[454,5],[508,5]]},"2294":{"position":[[72,4],[180,4],[221,6],[371,5],[405,5]]},"2296":{"position":[[82,4]]},"2298":{"position":[[72,4]]},"2301":{"position":[[63,4],[114,4]]},"2303":{"position":[[63,4]]},"2306":{"position":[[132,4],[247,5],[278,5],[980,8],[1307,8],[1550,5],[1797,4],[1810,7],[1903,4],[1921,7],[2033,7],[2117,5],[2143,5],[2181,4],[2194,4],[2204,5],[2269,5],[2335,4],[2348,4]]},"2308":{"position":[[58,4],[869,8],[1196,8],[1439,5],[1686,4],[1699,7],[1792,4],[1810,7],[1922,7]]},"2310":{"position":[[58,4],[894,8],[1221,8],[1464,5],[1711,4],[1724,7],[1817,4],[1835,7],[1947,7],[2324,4],[2564,4],[2804,4]]},"2312":{"position":[[174,4],[303,5],[344,5],[1046,8],[1373,8],[1616,5],[1863,4],[1876,7],[1969,4],[1987,7],[2099,7],[2183,5],[2209,5],[2252,4],[2270,4],[2280,5],[2350,5],[2426,4],[2444,4]]},"2314":{"position":[[58,4],[872,8],[1199,8],[1442,5],[1689,4],[1702,7],[1795,4],[1813,7],[1925,7]]},"2316":{"position":[[58,4],[904,8],[1231,8],[1474,5],[1721,4],[1734,7],[1827,4],[1845,7],[1957,7],[2369,4]]},"2318":{"position":[[181,4],[301,5],[1003,8],[1330,8],[1573,5],[1820,4],[1833,7],[1926,4],[1944,7],[2056,7],[2146,5],[2192,4],[2208,5],[2276,5],[2344,4]]},"2324":{"position":[[49,4],[181,5]]},"2329":{"position":[[72,4]]},"2331":{"position":[[72,4]]},"2333":{"position":[[62,4]]},"2335":{"position":[[62,4]]},"2337":{"position":[[62,4]]},"2339":{"position":[[62,4]]},"2341":{"position":[[66,4],[102,5]]},"2343":{"position":[[95,5]]},"2345":{"position":[[80,4]]},"2347":{"position":[[80,4]]},"2350":{"position":[[52,5],[67,4],[180,4]]},"2352":{"position":[[52,5],[67,4],[166,4]]},"2354":{"position":[[52,5],[67,4],[145,5],[209,4],[384,5],[731,5],[871,5]]},"2356":{"position":[[52,5],[67,4],[156,4]]},"2358":{"position":[[52,5],[67,4],[193,4]]},"2360":{"position":[[62,5],[77,4],[178,4]]},"2362":{"position":[[62,5],[77,4],[179,4]]},"2364":{"position":[[61,4]]},"2366":{"position":[[52,5],[67,4],[177,4]]},"2368":{"position":[[52,5],[67,4],[126,4],[235,5],[299,4],[486,5],[532,5],[770,5],[810,5]]},"2370":{"position":[[62,5],[77,4],[233,4]]},"2372":{"position":[[61,4]]},"2374":{"position":[[52,5],[67,4],[482,4]]},"2426":{"position":[[100,6]]}}}],["file=/var/lib/rancher/k3s/agent/cli",{"_index":2135,"t":{"2101":{"position":[[3204,38]]},"2356":{"position":[[914,38],[2137,38]]},"2368":{"position":[[1105,38],[2328,38]]}}}],["file=/var/lib/rancher/k3s/agent/serv",{"_index":2161,"t":{"2101":{"position":[[4227,39],[4306,39]]},"2356":{"position":[[1752,39],[1822,39],[2975,39],[3045,39]]},"2368":{"position":[[1943,39],[2013,39],[3166,39],[3236,39]]}}}],["file=/var/lib/rancher/k3s/server/audit.yaml",{"_index":1767,"t":{"2021":{"position":[[637,44]]},"2097":{"position":[[982,44],[1322,44]]},"2099":{"position":[[405,44],[1028,44]]}}}],["file=/var/lib/rancher/k3s/server/etc/egress",{"_index":2440,"t":{"2231":{"position":[[1160,43]]},"2233":{"position":[[1108,43]]},"2235":{"position":[[977,43]]},"2237":{"position":[[926,43]]},"2239":{"position":[[939,43]]},"2241":{"position":[[1052,43]]},"2243":{"position":[[1013,43]]},"2247":{"position":[[1086,43]]},"2249":{"position":[[1067,43]]},"2251":{"position":[[963,43]]},"2253":{"position":[[1079,43]]},"2255":{"position":[[944,43]]},"2257":{"position":[[859,43]]},"2267":{"position":[[1034,43]]},"2273":{"position":[[1076,43]]},"2275":{"position":[[992,43]]},"2277":{"position":[[998,43]]},"2350":{"position":[[1343,43]]},"2352":{"position":[[1357,43]]},"2354":{"position":[[1472,43]]}}}],["file=/var/lib/rancher/k3s/server/psa.yaml",{"_index":1764,"t":{"2021":{"position":[[308,42],[516,42]]},"2093":{"position":[[234,42]]},"2099":{"position":[[284,42]]}}}],["file=/var/lib/rancher/k3s/server/tls/cli",{"_index":2080,"t":{"2101":{"position":[[415,43],[1120,43],[1198,43],[2397,43],[2470,43]]},"2231":{"position":[[1084,43],[1925,43],[2003,43]]},"2233":{"position":[[1032,43],[1873,43],[1951,43]]},"2235":{"position":[[901,43],[1742,43],[1820,43]]},"2237":{"position":[[850,43],[1691,43],[1769,43]]},"2239":{"position":[[863,43],[1704,43],[1782,43]]},"2241":{"position":[[976,43],[1817,43],[1895,43]]},"2243":{"position":[[937,43],[1778,43],[1856,43]]},"2247":{"position":[[1010,43],[1851,43],[1929,43]]},"2249":{"position":[[991,43],[1832,43],[1910,43]]},"2251":{"position":[[887,43],[1728,43],[1806,43]]},"2253":{"position":[[1003,43],[1844,43],[1922,43]]},"2255":{"position":[[868,43],[1709,43],[1787,43]]},"2257":{"position":[[783,43],[1624,43],[1702,43]]},"2267":{"position":[[958,43],[1799,43],[1877,43]]},"2273":{"position":[[1000,43],[1841,43],[1919,43]]},"2275":{"position":[[916,43],[1757,43],[1835,43]]},"2277":{"position":[[922,43],[1763,43],[1841,43]]},"2288":{"position":[[881,43],[976,43],[1065,43],[1153,43]]},"2290":{"position":[[949,43],[1044,43],[1133,43],[1221,43]]},"2292":{"position":[[1034,43],[1129,43],[1218,43],[1306,43]]},"2294":{"position":[[931,43],[1026,43],[1115,43],[1203,43]]},"2350":{"position":[[1267,43],[2108,43],[2186,43]]},"2352":{"position":[[1281,43],[2122,43],[2200,43]]},"2354":{"position":[[1396,43],[2237,43],[2315,43]]}}}],["file=/var/lib/rancher/k3s/server/tls/request",{"_index":2102,"t":{"2101":{"position":[[1331,44]]},"2231":{"position":[[2136,44]]},"2233":{"position":[[2084,44]]},"2235":{"position":[[1953,44]]},"2237":{"position":[[1902,44]]},"2239":{"position":[[1915,44]]},"2241":{"position":[[2028,44]]},"2243":{"position":[[1989,44]]},"2247":{"position":[[2062,44]]},"2249":{"position":[[2043,44]]},"2251":{"position":[[1939,44]]},"2253":{"position":[[2055,44]]},"2255":{"position":[[1920,44]]},"2257":{"position":[[1835,44]]},"2267":{"position":[[2010,44]]},"2273":{"position":[[2052,44]]},"2275":{"position":[[1968,44]]},"2277":{"position":[[1974,44]]},"2350":{"position":[[2319,44]]},"2352":{"position":[[2333,44]]},"2354":{"position":[[776,44],[916,44],[2448,44]]}}}],["file=/var/lib/rancher/k3s/server/tls/serv",{"_index":2112,"t":{"2101":{"position":[[1826,44],[1917,44],[2638,43]]},"2231":{"position":[[2692,44],[2774,44]]},"2233":{"position":[[2640,44],[2722,44]]},"2235":{"position":[[2509,44],[2591,44]]},"2237":{"position":[[2458,44],[2540,44]]},"2239":{"position":[[2471,44],[2553,44]]},"2241":{"position":[[2584,44],[2666,44]]},"2243":{"position":[[2545,44],[2627,44]]},"2247":{"position":[[2618,44],[2700,44]]},"2249":{"position":[[2599,44],[2681,44]]},"2251":{"position":[[2495,44],[2577,44]]},"2253":{"position":[[2611,44],[2693,44]]},"2255":{"position":[[2476,44],[2558,44]]},"2257":{"position":[[2391,44],[2473,44]]},"2267":{"position":[[2566,44],[2648,44]]},"2273":{"position":[[2608,44],[2690,44]]},"2275":{"position":[[2524,44],[2606,44]]},"2277":{"position":[[2530,44],[2612,44]]},"2288":{"position":[[1243,43],[1332,43],[1421,43],[1509,43],[1788,43]]},"2290":{"position":[[1311,43],[1400,43],[1489,43],[1577,43],[1856,43]]},"2292":{"position":[[1396,43],[1485,43],[1574,43],[1662,43],[1941,43]]},"2294":{"position":[[1293,43],[1382,43],[1471,43],[1559,43],[1838,43]]},"2350":{"position":[[2875,44],[2957,44]]},"2352":{"position":[[2889,44],[2971,44]]},"2354":{"position":[[3004,44],[3086,44]]}}}],["file=/var/lib/rancher/k3s/server/tls/service.key",{"_index":2108,"t":{"2101":{"position":[[1614,48],[1702,48],[2743,48]]},"2231":{"position":[[2451,48],[2530,48]]},"2233":{"position":[[2399,48],[2478,48]]},"2235":{"position":[[2268,48],[2347,48]]},"2237":{"position":[[2217,48],[2296,48]]},"2239":{"position":[[2230,48],[2309,48]]},"2241":{"position":[[2343,48],[2422,48]]},"2243":{"position":[[2304,48],[2383,48]]},"2247":{"position":[[2377,48],[2456,48]]},"2249":{"position":[[2358,48],[2437,48]]},"2251":{"position":[[2254,48],[2333,48]]},"2253":{"position":[[2370,48],[2449,48]]},"2255":{"position":[[2235,48],[2314,48]]},"2257":{"position":[[2150,48],[2229,48]]},"2267":{"position":[[2325,48],[2404,48]]},"2273":{"position":[[2367,48],[2446,48]]},"2275":{"position":[[2283,48],[2362,48]]},"2277":{"position":[[2289,48],[2368,48]]},"2288":{"position":[[1889,48]]},"2290":{"position":[[1957,48]]},"2292":{"position":[[2042,48]]},"2294":{"position":[[1939,48]]},"2350":{"position":[[2634,48],[2713,48]]},"2352":{"position":[[2648,48],[2727,48]]},"2354":{"position":[[2763,48],[2842,48]]}}}],["file=</path/to/ca",{"_index":2493,"t":{"2306":{"position":[[229,17]]},"2318":{"position":[[283,17]]}}}],["file=</path/to/key",{"_index":2494,"t":{"2306":{"position":[[259,18]]}}}],["file=</path/to/p",{"_index":2505,"t":{"2312":{"position":[[278,19],[320,19]]}}}],["file=<filenam",{"_index":2391,"t":{"2225":{"position":[[255,15]]},"2269":{"position":[[280,16]]},"2292":{"position":[[304,16]]}}}],["file=<path/to/cli",{"_index":2471,"t":{"2275":{"position":[[290,20]]},"2354":{"position":[[360,20]]}}}],["file=<path/to/configuration/fil",{"_index":2452,"t":{"2241":{"position":[[316,33]]}}}],["file=<path/to/fil",{"_index":2489,"t":{"2294":{"position":[[238,19]]}}}],["file=<path/to/tl",{"_index":2466,"t":{"2273":{"position":[[303,17],[357,17]]},"2368":{"position":[[456,17],[510,17]]}}}],["file_pattern=log_level",{"_index":72,"t":{"1642":{"position":[[115,22]]},"1662":{"position":[[505,22]]},"1774":{"position":[[146,22]]},"1794":{"position":[[516,22]]}}}],["filenam",{"_index":2517,"t":{"2341":{"position":[[118,10]]},"2343":{"position":[[117,11]]}}}],["file|key",{"_index":2358,"t":{"2200":{"position":[[947,8],[1274,8]]},"2271":{"position":[[1077,8],[1404,8]]},"2306":{"position":[[971,8],[1298,8]]},"2308":{"position":[[860,8],[1187,8]]},"2310":{"position":[[885,8],[1212,8]]},"2312":{"position":[[1037,8],[1364,8]]},"2314":{"position":[[863,8],[1190,8]]},"2316":{"position":[[895,8],[1222,8]]},"2318":{"position":[[994,8],[1321,8]]}}}],["filter",{"_index":74,"t":{"1642":{"position":[[156,8]]},"1662":{"position":[[546,8]]},"1774":{"position":[[187,8]]},"1794":{"position":[[557,8]]}}}],["final",{"_index":1411,"t":{"1908":{"position":[[1089,8]]},"1910":{"position":[[647,5]]}}}],["find",{"_index":2384,"t":{"2216":{"position":[[179,4]]},"2421":{"position":[[156,7]]}}}],["fingerprint",{"_index":1042,"t":{"1800":{"position":[[558,12]]}}}],["firewal",{"_index":488,"t":{"1702":{"position":[[94,8],[150,8],[222,8],[298,8]]},"1704":{"position":[[18,10]]},"1985":{"position":[[509,8]]}}}],["firewall/secur",{"_index":1715,"t":{"1983":{"position":[[943,17]]}}}],["firewalld",{"_index":487,"t":{"1702":{"position":[[0,10],[41,9]]}}}],["first",{"_index":651,"t":{"1740":{"position":[[275,5]]},"1742":{"position":[[89,5],[376,5],[2689,5]]},"1744":{"position":[[2270,6]]},"1746":{"position":[[2094,6]]},"1750":{"position":[[3623,5]]},"1806":{"position":[[42,5],[962,5]]},"1811":{"position":[[2043,5]]},"1836":{"position":[[9,5]]},"1842":{"position":[[105,5],[141,5]]},"1848":{"position":[[126,5],[391,5]]},"1902":{"position":[[84,5]]},"1939":{"position":[[520,5]]},"1953":{"position":[[572,5]]},"1963":{"position":[[323,5]]},"1971":{"position":[[0,6]]},"1999":{"position":[[236,5]]},"2001":{"position":[[48,5]]},"2079":{"position":[[55,5]]},"2085":{"position":[[1034,5]]},"2165":{"position":[[155,5]]},"2377":{"position":[[203,5]]}}}],["fit",{"_index":2325,"t":{"2176":{"position":[[1897,3]]}}}],["fix",{"_index":1032,"t":{"1800":{"position":[[150,5]]},"1832":{"position":[[686,5],[926,5]]}}}],["fl",{"_index":1744,"t":{"1999":{"position":[[108,2]]},"2001":{"position":[[262,2]]}}}],["flag",{"_index":45,"t":{"1640":{"position":[[106,5],[210,6]]},"1642":{"position":[[0,4]]},"1644":{"position":[[0,4]]},"1646":{"position":[[0,4]]},"1648":{"position":[[0,4]]},"1650":{"position":[[0,4]]},"1652":{"position":[[0,4]]},"1654":{"position":[[0,4],[48,4],[107,4]]},"1656":{"position":[[0,4]]},"1658":{"position":[[0,4]]},"1662":{"position":[[3183,4],[3256,4]]},"1750":{"position":[[542,5],[1147,6],[1579,6],[2848,5],[4821,4]]},"1756":{"position":[[124,4],[1081,5]]},"1758":{"position":[[83,5],[396,5],[606,5],[712,6],[1261,5],[1508,5]]},"1762":{"position":[[248,6]]},"1767":{"position":[[0,4]]},"1769":{"position":[[0,4]]},"1771":{"position":[[0,4]]},"1774":{"position":[[0,4]]},"1776":{"position":[[0,4]]},"1778":{"position":[[0,4]]},"1780":{"position":[[0,4]]},"1782":{"position":[[0,4]]},"1784":{"position":[[0,4]]},"1786":{"position":[[0,4],[58,5]]},"1788":{"position":[[0,4],[45,4],[105,4],[175,4],[254,4],[348,4],[426,4],[485,4]]},"1790":{"position":[[0,4]]},"1792":{"position":[[0,4]]},"1794":{"position":[[3473,7],[3492,4],[3541,7],[3560,4],[3618,7],[3637,4],[3705,7],[3724,4],[3798,7],[3817,4],[8244,4],[8317,4]]},"1811":{"position":[[851,4],[1628,4],[2112,4],[2401,4]]},"1827":{"position":[[202,4]]},"1842":{"position":[[195,4],[570,5],[635,6],[706,5],[890,6]]},"1848":{"position":[[175,4],[1108,5],[1173,6],[1244,5],[1428,6]]},"1850":{"position":[[164,5]]},"1895":{"position":[[1326,4]]},"1904":{"position":[[259,5]]},"1906":{"position":[[597,6],[932,4],[986,5],[1026,5],[1082,4],[1429,5]]},"1908":{"position":[[754,5]]},"1912":{"position":[[239,6]]},"1937":{"position":[[170,5],[563,5]]},"1945":{"position":[[899,4]]},"1947":{"position":[[836,5],[878,5]]},"1951":{"position":[[686,5]]},"1953":{"position":[[355,4]]},"1955":{"position":[[446,6]]},"2003":{"position":[[82,5],[266,5]]},"2005":{"position":[[22,6],[125,6]]},"2053":{"position":[[1387,5]]},"2079":{"position":[[94,4]]},"2085":{"position":[[898,5]]},"2089":{"position":[[18,4],[228,4]]},"2093":{"position":[[163,4],[977,4]]},"2169":{"position":[[91,6]]}}}],["flannel",{"_index":27,"t":{"1636":{"position":[[516,7]]},"1652":{"position":[[235,7],[276,7],[296,7],[336,7],[358,7],[402,7]]},"1658":{"position":[[43,7],[61,7]]},"1662":{"position":[[2902,7],[2958,7],[2978,7],[3033,7],[3055,7],[3114,7]]},"1723":{"position":[[266,8]]},"1764":{"position":[[432,7],[450,7],[472,7]]},"1782":{"position":[[456,7],[591,7],[650,7],[711,7]]},"1792":{"position":[[43,7],[61,7],[174,7],[210,7],[245,7],[291,7],[319,7]]},"1794":{"position":[[1906,7],[2117,7],[2183,7],[2251,7],[7963,7],[8019,7],[8039,7],[8094,7],[8116,7],[8175,7]]},"1904":{"position":[[733,7],[826,7],[919,7],[1029,7],[1155,7],[1240,7]]},"1912":{"position":[[339,7],[448,7],[539,7]]},"1943":{"position":[[97,8]]},"1945":{"position":[[0,7],[178,7],[304,7],[499,7],[878,7],[928,7],[1077,7],[1112,7],[1186,7],[1285,7],[1402,7],[1542,7],[1674,7],[1811,7],[1997,7],[2026,7]]},"1947":{"position":[[702,7],[747,7],[777,7]]},"1949":{"position":[[17,7]]},"1953":{"position":[[1435,8]]},"1957":{"position":[[548,7],[583,7]]},"1983":{"position":[[133,7],[212,7],[457,7],[523,7],[1005,7]]},"1985":{"position":[[227,7],[335,7],[411,7]]},"2023":{"position":[[78,7]]}}}],["flocker",{"_index":2230,"t":{"2137":{"position":[[262,7]]}}}],["focus",{"_index":1368,"t":{"1902":{"position":[[10,7]]}}}],["folder",{"_index":94,"t":{"1646":{"position":[[75,6]]},"1662":{"position":[[952,6]]},"1750":{"position":[[3370,6],[3380,6]]},"1767":{"position":[[1610,6],[1630,6]]},"1778":{"position":[[109,6]]},"1794":{"position":[[1272,6],[5558,6],[5579,6]]},"1811":{"position":[[892,6],[1669,6],[2153,6],[2442,6]]}}}],["follow",{"_index":640,"t":{"1738":{"position":[[345,9]]},"1742":{"position":[[795,9],[1257,9],[1667,9],[1781,9],[1930,9]]},"1744":{"position":[[1181,9]]},"1746":{"position":[[894,9],[1457,9]]},"1748":{"position":[[627,9]]},"1750":{"position":[[3676,9]]},"1754":{"position":[[124,10],[273,6]]},"1760":{"position":[[761,8]]},"1764":{"position":[[4,9]]},"1782":{"position":[[875,10]]},"1800":{"position":[[82,9],[765,9]]},"1834":{"position":[[38,9]]},"1838":{"position":[[473,9]]},"1848":{"position":[[1030,7]]},"1886":{"position":[[0,6]]},"1895":{"position":[[172,9],[279,9],[898,10]]},"1898":{"position":[[60,9]]},"1900":{"position":[[1036,6]]},"1904":{"position":[[650,9],[1306,9]]},"1908":{"position":[[453,9]]},"1918":{"position":[[113,9]]},"1947":{"position":[[564,6]]},"1949":{"position":[[351,6],[613,9],[731,6],[997,9]]},"1953":{"position":[[345,9]]},"1957":{"position":[[473,9]]},"1959":{"position":[[765,9]]},"1963":{"position":[[1008,9]]},"1973":{"position":[[199,9]]},"1977":{"position":[[25,9]]},"1979":{"position":[[143,6],[218,6]]},"1987":{"position":[[176,9]]},"1989":{"position":[[4,9]]},"1995":{"position":[[85,9]]},"2005":{"position":[[196,9]]},"2053":{"position":[[212,8],[300,9]]},"2055":{"position":[[125,8]]},"2057":{"position":[[48,9]]},"2079":{"position":[[132,9]]},"2081":{"position":[[86,10]]},"2093":{"position":[[153,9],[967,9]]},"2103":{"position":[[4,9]]},"2133":{"position":[[12,8]]},"2159":{"position":[[779,10],[964,10],[1267,6],[1410,6],[1492,6],[1634,9]]},"2161":{"position":[[199,9]]},"2163":{"position":[[331,9],[2157,9]]},"2167":{"position":[[134,9]]},"2169":{"position":[[452,9]]},"2225":{"position":[[26,6]]},"2231":{"position":[[26,6]]},"2233":{"position":[[26,6]]},"2241":{"position":[[26,6]]},"2249":{"position":[[26,6]]},"2253":{"position":[[26,6]]},"2271":{"position":[[26,6]]},"2273":{"position":[[26,6]]},"2275":{"position":[[26,6]]},"2277":{"position":[[26,6]]},"2279":{"position":[[26,6]]},"2281":{"position":[[26,6]]},"2306":{"position":[[26,6]]},"2312":{"position":[[26,6]]},"2318":{"position":[[40,6]]},"2326":{"position":[[114,9]]},"2341":{"position":[[34,9]]},"2343":{"position":[[34,9]]},"2345":{"position":[[44,9]]},"2347":{"position":[[44,9]]},"2374":{"position":[[606,8]]},"2423":{"position":[[26,6]]},"2431":{"position":[[26,6]]},"2434":{"position":[[26,6]]},"2438":{"position":[[26,6]]}}}],["foo.loc",{"_index":1401,"t":{"1908":{"position":[[350,11],[534,11]]}}}],["foo=bar",{"_index":187,"t":{"1660":{"position":[[350,7]]},"1908":{"position":[[376,9],[561,9]]},"1910":{"position":[[466,7]]}}}],["foo=thre",{"_index":1422,"t":{"1910":{"position":[[619,9],[737,9]]}}}],["forbid",{"_index":2579,"t":{"2412":{"position":[[221,7]]}}}],["forc",{"_index":753,"t":{"1744":{"position":[[650,5],[2308,5]]},"1746":{"position":[[722,5]]},"1758":{"position":[[434,5],[644,5],[1305,5],[1552,5]]},"2053":{"position":[[673,7],[1180,6]]}}}],["forget",{"_index":838,"t":{"1750":{"position":[[2376,6]]},"1769":{"position":[[565,6]]},"1794":{"position":[[3291,6]]}}}],["form",{"_index":1836,"t":{"2053":{"position":[[185,4]]}}}],["format",{"_index":1024,"t":{"1798":{"position":[[54,7],[73,6]]},"1800":{"position":[[17,6],[193,6],[386,9]]},"1802":{"position":[[16,6]]},"1806":{"position":[[193,7],[925,6]]},"1808":{"position":[[402,7]]},"1811":{"position":[[683,7],[1998,6],[2614,7]]},"1838":{"position":[[758,6],[857,8]]}}}],["former",{"_index":877,"t":{"1750":{"position":[[4328,7]]}}}],["forward",{"_index":1450,"t":{"1922":{"position":[[376,10]]},"1949":{"position":[[214,10],[419,10],[704,10],[802,10],[1089,10]]}}}],["forwardedhead",{"_index":1308,"t":{"1878":{"position":[[619,17]]}}}],["found",{"_index":691,"t":{"1742":{"position":[[32,5]]},"1760":{"position":[[1534,5]]},"1850":{"position":[[280,5]]},"1895":{"position":[[451,5]]},"1929":{"position":[[26,5]]},"2053":{"position":[[1990,6]]},"2097":{"position":[[691,5]]},"2105":{"position":[[595,5]]},"2107":{"position":[[694,5]]},"2109":{"position":[[575,5]]},"2111":{"position":[[415,5]]},"2113":{"position":[[590,5]]},"2115":{"position":[[576,5]]},"2117":{"position":[[800,5]]},"2119":{"position":[[593,5]]},"2125":{"position":[[667,5]]},"2129":{"position":[[718,5]]},"2200":{"position":[[209,5]]},"2202":{"position":[[219,5]]}}}],["four",{"_index":1568,"t":{"1951":{"position":[[703,4]]}}}],["free",{"_index":2319,"t":{"2176":{"position":[[779,4]]}}}],["friendli",{"_index":1089,"t":{"1811":{"position":[[1070,8]]}}}],["front",{"_index":1160,"t":{"1832":{"position":[[731,5]]},"1840":{"position":[[452,5]]}}}],["fsck.repair=y",{"_index":517,"t":{"1706":{"position":[[357,15]]}}}],["fsgroup",{"_index":2016,"t":{"2093":{"position":[[1935,8],[3020,8],[3339,8],[3859,8]]}}}],["full",{"_index":701,"t":{"1742":{"position":[[406,4]]},"1800":{"position":[[55,6]]},"1806":{"position":[[397,4]]},"1811":{"position":[[1578,4]]},"1846":{"position":[[13,4]]}}}],["fulli",{"_index":1955,"t":{"2085":{"position":[[460,5]]}}}],["function",{"_index":1004,"t":{"1782":{"position":[[1090,8]]},"1893":{"position":[[595,8]]},"1951":{"position":[[430,13]]},"2085":{"position":[[736,13]]},"2093":{"position":[[2314,8]]}}}],["further",{"_index":1175,"t":{"1838":{"position":[[428,7]]},"2085":{"position":[[977,7]]},"2176":{"position":[[1664,7]]}}}],["futur",{"_index":1516,"t":{"1939":{"position":[[1093,6]]},"2103":{"position":[[224,6]]}}}],["gap",{"_index":1315,"t":{"1882":{"position":[[30,6],[85,6]]},"1884":{"position":[[70,3]]},"1888":{"position":[[56,3]]},"1893":{"position":[[308,6],[442,6]]},"1895":{"position":[[1388,3]]},"1898":{"position":[[17,3],[99,3]]},"1900":{"position":[[55,6]]},"2103":{"position":[[77,3]]}}}],["garbag",{"_index":2202,"t":{"2125":{"position":[[88,7],[328,7],[517,7]]}}}],["gate",{"_index":480,"t":{"1700":{"position":[[312,4]]},"1710":{"position":[[8,4]]},"1740":{"position":[[1344,4]]},"1750":{"position":[[8,4]]},"1754":{"position":[[8,4]]},"1810":{"position":[[8,4]]},"1846":{"position":[[8,4]]},"1878":{"position":[[8,4]]},"1880":{"position":[[8,4]]},"1908":{"position":[[8,4]]},"1910":{"position":[[8,4]]},"1945":{"position":[[2052,4]]},"1953":{"position":[[8,4]]},"1955":{"position":[[8,4]]},"2296":{"position":[[190,5]]}}}],["gates=jobtrackingwithfinalizers=tru",{"_index":2444,"t":{"2231":{"position":[[1541,36]]},"2233":{"position":[[1489,36]]},"2235":{"position":[[1358,36]]},"2237":{"position":[[1307,36]]},"2239":{"position":[[1320,36]]},"2241":{"position":[[1433,36]]},"2243":{"position":[[1394,36]]},"2247":{"position":[[1467,36]]},"2249":{"position":[[1448,36]]},"2251":{"position":[[1344,36]]},"2253":{"position":[[1460,36]]},"2255":{"position":[[1325,36]]},"2257":{"position":[[1240,36]]},"2267":{"position":[[1415,36]]},"2273":{"position":[[1457,36]]},"2275":{"position":[[1373,36]]},"2277":{"position":[[1379,36]]},"2288":{"position":[[1655,36]]},"2290":{"position":[[1723,36]]},"2292":{"position":[[1808,36]]},"2294":{"position":[[1705,36]]},"2350":{"position":[[1724,36]]},"2352":{"position":[[1738,36]]},"2354":{"position":[[1853,36]]}}}],["gates=rotatekubeletservercertificate=tru",{"_index":2491,"t":{"2296":{"position":[[264,41]]},"2372":{"position":[[216,41]]}}}],["gb",{"_index":1691,"t":{"1981":{"position":[[167,2]]},"1989":{"position":[[154,2],[178,2],[202,2],[229,2],[252,2]]},"1995":{"position":[[223,2],[247,2],[271,2],[297,2],[320,2]]},"2063":{"position":[[70,2],[122,2]]},"2113":{"position":[[395,2]]},"2115":{"position":[[381,2]]}}}],["gc",{"_index":1774,"t":{"2021":{"position":[[863,2]]},"2099":{"position":[[631,2],[1254,2]]},"2125":{"position":[[33,2]]},"2286":{"position":[[187,2],[259,2],[395,2]]}}}],["gcm",{"_index":661,"t":{"1740":{"position":[[559,3]]}}}],["gener",{"_index":646,"t":{"1740":{"position":[[215,9],[681,8]]},"1742":{"position":[[128,10],[1870,8],[1989,11],[2324,8],[2474,8],[2715,9]]},"1744":{"position":[[900,8],[968,8],[1140,8],[1241,11],[1447,8],[1837,8]]},"1746":{"position":[[18,9],[1364,8]]},"1748":{"position":[[687,10],[829,8]]},"1806":{"position":[[1070,9]]},"1810":{"position":[[232,10]]},"1811":{"position":[[34,10],[334,8],[343,8],[578,9],[601,9],[654,10],[1829,9],[1839,8],[1859,9],[1933,8]]},"1838":{"position":[[400,9]]},"1908":{"position":[[626,8]]},"2007":{"position":[[303,9]]},"2079":{"position":[[157,8],[181,8],[225,9]]}}}],["genrsa",{"_index":798,"t":{"1748":{"position":[[856,6]]}}}],["get.k3s.io",{"_index":390,"t":{"1681":{"position":[[314,10]]},"1893":{"position":[[384,11]]}}}],["ghcr.io",{"_index":560,"t":{"1715":{"position":[[530,9]]}}}],["ghcr.io/stargz",{"_index":566,"t":{"1717":{"position":[[178,18],[376,14]]}}}],["ghz",{"_index":1869,"t":{"2055":{"position":[[284,3],[388,3],[470,3],[545,3],[626,3],[685,3]]},"2067":{"position":[[231,3],[296,3]]},"2069":{"position":[[231,3],[268,3]]},"2071":{"position":[[119,3],[156,3]]}}}],["git",{"_index":2277,"t":{"2159":{"position":[[1644,3]]}}}],["git_repo",{"_index":2231,"t":{"2137":{"position":[[270,8]]}}}],["github",{"_index":1658,"t":{"1971":{"position":[[43,6]]},"2053":{"position":[[892,7]]}}}],["github_url=https://github.com/kubernetes/dashboard/releas",{"_index":1425,"t":{"1916":{"position":[[0,59]]},"1924":{"position":[[48,59]]}}}],["github_url}/latest",{"_index":1429,"t":{"1916":{"position":[[124,20]]},"1924":{"position":[[172,20]]}}}],["give",{"_index":1625,"t":{"1959":{"position":[[825,4]]}}}],["given",{"_index":133,"t":{"1650":{"position":[[122,5]]},"1662":{"position":[[2209,5]]},"1750":{"position":[[988,6],[1420,6],[4063,5]]},"1794":{"position":[[7141,5]]},"1811":{"position":[[626,6]]},"1910":{"position":[[247,5]]},"2101":{"position":[[77,5]]},"2421":{"position":[[110,5]]}}}],["global",{"_index":2188,"t":{"2117":{"position":[[84,6]]}}}],["glusterf",{"_index":2232,"t":{"2137":{"position":[[279,9]]}}}],["go",{"_index":377,"t":{"1679":{"position":[[186,2],[311,2]]},"1886":{"position":[[138,2]]},"1890":{"position":[[337,2]]},"2111":{"position":[[143,2]]}}}],["go_memstats_alloc_byt",{"_index":1907,"t":{"2061":{"position":[[484,23]]}}}],["googl",{"_index":561,"t":{"1715":{"position":[[596,6]]}}}],["gpu",{"_index":401,"t":{"1681":{"position":[[749,3],[935,5],[1117,3]]}}}],["grafana",{"_index":1890,"t":{"2059":{"position":[[88,7],[334,8]]}}}],["grant",{"_index":2213,"t":{"2131":{"position":[[339,7]]}}}],["greater",{"_index":2461,"t":{"2255":{"position":[[382,7]]}}}],["grep",{"_index":391,"t":{"1681":{"position":[[364,4]]},"1748":{"position":[[769,4]]},"1920":{"position":[[173,4]]},"2021":{"position":[[2740,4]]},"2200":{"position":[[141,4],[561,4],[604,4],[612,4],[777,4],[820,4],[848,6],[933,4],[977,6],[1062,4],[1101,6],[1177,6],[1260,4],[1304,6],[1387,4],[1426,6],[1507,6]]},"2202":{"position":[[151,4]]},"2223":{"position":[[240,4],[283,4]]},"2225":{"position":[[303,4],[321,4],[329,4]]},"2227":{"position":[[232,4],[250,4],[258,4]]},"2231":{"position":[[470,4],[513,4]]},"2233":{"position":[[453,4],[496,4]]},"2235":{"position":[[327,4],[370,4]]},"2237":{"position":[[293,4],[336,4]]},"2239":{"position":[[306,4],[349,4]]},"2241":{"position":[[397,4],[440,4]]},"2243":{"position":[[304,4],[347,4]]},"2245":{"position":[[292,4],[310,4],[318,4]]},"2247":{"position":[[370,4],[413,4]]},"2249":{"position":[[392,4],[435,4],[443,4]]},"2251":{"position":[[288,4],[331,4],[339,4]]},"2253":{"position":[[423,4],[466,4]]},"2255":{"position":[[284,4],[327,4]]},"2257":{"position":[[235,4],[278,4]]},"2267":{"position":[[365,4],[408,4],[416,4]]},"2271":{"position":[[691,4],[734,4],[742,4],[907,4],[950,4],[978,6],[1063,4],[1107,6],[1192,4],[1231,6],[1307,6],[1390,4],[1434,6],[1517,4],[1556,6],[1637,6]]},"2273":{"position":[[432,4]]},"2275":{"position":[[367,4],[410,4]]},"2277":{"position":[[379,4],[422,4]]},"2279":{"position":[[421,4],[464,4]]},"2281":{"position":[[182,4]]},"2283":{"position":[[973,4],[1016,4]]},"2286":{"position":[[322,4],[374,4]]},"2288":{"position":[[252,4],[304,4]]},"2290":{"position":[[272,4],[324,4]]},"2292":{"position":[[368,4],[420,4]]},"2294":{"position":[[305,4],[357,4]]},"2298":{"position":[[241,4],[259,4],[267,4]]},"2301":{"position":[[239,4]]},"2303":{"position":[[249,4],[292,4]]},"2306":{"position":[[585,4],[628,4],[636,4],[801,4],[844,4],[872,6],[957,4],[1001,6],[1086,4],[1125,6],[1201,6],[1284,4],[1328,6],[1411,4],[1450,6],[1531,6]]},"2308":{"position":[[474,4],[517,4],[525,4],[690,4],[733,4],[761,6],[846,4],[890,6],[975,4],[1014,6],[1090,6],[1173,4],[1217,6],[1300,4],[1339,6],[1420,6]]},"2310":{"position":[[499,4],[542,4],[550,4],[715,4],[758,4],[786,6],[871,4],[915,6],[1000,4],[1039,6],[1115,6],[1198,4],[1242,6],[1325,4],[1364,6],[1445,6]]},"2312":{"position":[[651,4],[694,4],[702,4],[867,4],[910,4],[938,6],[1023,4],[1067,6],[1152,4],[1191,6],[1267,6],[1350,4],[1394,6],[1477,4],[1516,6],[1597,6]]},"2314":{"position":[[477,4],[520,4],[528,4],[693,4],[736,4],[764,6],[849,4],[893,6],[978,4],[1017,6],[1093,6],[1176,4],[1220,6],[1303,4],[1342,6],[1423,6]]},"2316":{"position":[[509,4],[552,4],[560,4],[725,4],[768,4],[796,6],[881,4],[925,6],[1010,4],[1049,6],[1125,6],[1208,4],[1252,6],[1335,4],[1374,6],[1455,6]]},"2318":{"position":[[608,4],[651,4],[659,4],[824,4],[867,4],[895,6],[980,4],[1024,6],[1109,4],[1148,6],[1224,6],[1307,4],[1351,6],[1434,4],[1473,6],[1554,6]]},"2324":{"position":[[119,4],[162,4]]},"2350":{"position":[[539,4],[630,4],[673,4],[697,4],[705,5]]},"2352":{"position":[[525,4],[616,4],[659,4],[687,4],[695,5]]},"2354":{"position":[[581,4],[672,4],[715,4],[739,4],[747,5]]},"2356":{"position":[[489,4],[525,4]]},"2358":{"position":[[546,4],[582,4]]},"2368":{"position":[[707,4]]}}}],["group",{"_index":1090,"t":{"1811":{"position":[[1119,6],[1138,6]]},"1840":{"position":[[227,7],[265,5]]},"1983":{"position":[[961,5]]},"2093":{"position":[[4837,5],[5184,5],[5507,5]]},"2101":{"position":[[1459,5],[1482,5]]},"2231":{"position":[[2264,5],[2287,5]]},"2233":{"position":[[2212,5],[2235,5]]},"2235":{"position":[[2081,5],[2104,5]]},"2237":{"position":[[2030,5],[2053,5]]},"2239":{"position":[[2043,5],[2066,5]]},"2241":{"position":[[2156,5],[2179,5]]},"2243":{"position":[[2117,5],[2140,5]]},"2247":{"position":[[2190,5],[2213,5]]},"2249":{"position":[[2171,5],[2194,5]]},"2251":{"position":[[2067,5],[2090,5]]},"2253":{"position":[[2183,5],[2206,5]]},"2255":{"position":[[2048,5],[2071,5]]},"2257":{"position":[[1963,5],[1986,5]]},"2267":{"position":[[2138,5],[2161,5]]},"2273":{"position":[[2180,5],[2203,5]]},"2275":{"position":[[2096,5],[2119,5]]},"2277":{"position":[[2102,5],[2125,5]]},"2350":{"position":[[2447,5],[2470,5]]},"2352":{"position":[[2461,5],[2484,5]]},"2354":{"position":[[2576,5],[2599,5]]},"2389":{"position":[[52,5]]}}}],["group=100",{"_index":600,"t":{"1721":{"position":[[467,11]]}}}],["gt",{"_index":2349,"t":{"2200":{"position":[[628,2]]},"2271":{"position":[[758,2]]},"2306":{"position":[[652,2]]},"2308":{"position":[[541,2]]},"2310":{"position":[[566,2]]},"2312":{"position":[[718,2]]},"2314":{"position":[[544,2]]},"2316":{"position":[[576,2]]},"2318":{"position":[[675,2]]},"2350":{"position":[[579,2]]},"2352":{"position":[[565,2]]},"2354":{"position":[[621,2]]}}}],["guarante",{"_index":1494,"t":{"1933":{"position":[[1535,9]]}}}],["guard",{"_index":1068,"t":{"1806":{"position":[[460,7]]}}}],["guestbook",{"_index":1893,"t":{"2059":{"position":[[136,9],[351,9]]}}}],["guid",{"_index":906,"t":{"1758":{"position":[[918,5]]},"1838":{"position":[[86,5],[962,6]]},"1886":{"position":[[42,5]]},"1895":{"position":[[585,7],[879,5]]},"1900":{"position":[[1066,6]]},"1904":{"position":[[32,6]]},"1914":{"position":[[18,5]]},"1918":{"position":[[42,5]]},"1945":{"position":[[608,5]]},"1949":{"position":[[761,6]]},"1995":{"position":[[107,5]]},"2053":{"position":[[32,6]]},"2133":{"position":[[26,6],[163,5]]},"2176":{"position":[[69,6],[90,5],[194,5],[417,5],[1003,6],[1749,5],[1990,6]]}}}],["guidanc",{"_index":1947,"t":{"2085":{"position":[[36,8]]},"2176":{"position":[[118,8]]}}}],["gw",{"_index":995,"t":{"1782":{"position":[[537,4]]},"1794":{"position":[[2046,4]]},"1945":{"position":[[1423,2]]}}}],["h",{"_index":1084,"t":{"1811":{"position":[[475,1]]}}}],["ha",{"_index":620,"t":{"1729":{"position":[[73,2],[98,2]]},"1756":{"position":[[795,2]]},"1758":{"position":[[675,2],[994,2],[1355,2]]},"1760":{"position":[[398,2],[1064,2],[1272,2]]},"1825":{"position":[[434,2]]},"1832":{"position":[[362,2],[383,2]]},"1834":{"position":[[14,2]]},"1838":{"position":[[47,2]]},"1844":{"position":[[88,2],[267,2]]},"1846":{"position":[[382,4]]},"1985":{"position":[[93,2]]},"2154":{"position":[[221,2]]}}}],["hamper",{"_index":2211,"t":{"2129":{"position":[[454,6]]}}}],["handl",{"_index":1119,"t":{"1821":{"position":[[70,7]]}}}],["handle_error",{"_index":2343,"t":{"2200":{"position":[[456,14],[493,14]]},"2271":{"position":[[586,14],[623,14]]},"2306":{"position":[[480,14],[517,14]]},"2308":{"position":[[369,14],[406,14]]},"2310":{"position":[[394,14],[431,14]]},"2312":{"position":[[546,14],[583,14]]},"2314":{"position":[[372,14],[409,14]]},"2316":{"position":[[404,14],[441,14]]},"2318":{"position":[[503,14],[540,14]]}}}],["handler",{"_index":398,"t":{"1681":{"position":[[682,8]]}}}],["hard=imagefs.available<5%,nodefs.available<5",{"_index":2146,"t":{"2101":{"position":[[3657,45]]},"2356":{"position":[[1174,45],[2397,45]]},"2368":{"position":[[1365,45],[2588,45]]}}}],["harden",{"_index":1948,"t":{"2085":{"position":[[49,9]]},"2099":{"position":[[115,6]]},"2167":{"position":[[311,10],[450,10]]},"2176":{"position":[[59,9],[80,9],[131,9],[259,8],[993,9]]}}}],["hardwar",{"_index":1685,"t":{"1981":{"position":[[0,8]]},"1987":{"position":[[0,8]]},"2063":{"position":[[33,9]]}}}],["harter",{"_index":549,"t":{"1715":{"position":[[53,7]]}}}],["hash",{"_index":776,"t":{"1746":{"position":[[613,5]]},"1760":{"position":[[292,7],[304,6],[575,7],[583,4],[1045,7],[1323,7]]},"1800":{"position":[[211,5],[221,4],[993,4],[1071,4],[1083,4],[1111,4]]},"1806":{"position":[[1022,4]]},"1811":{"position":[[716,5]]},"2053":{"position":[[471,4]]}}}],["hash>::<credenti",{"_index":1030,"t":{"1800":{"position":[[119,20]]}}}],["hat/cento",{"_index":1680,"t":{"1979":{"position":[[113,11]]}}}],["have",{"_index":1192,"t":{"1840":{"position":[[345,6]]},"2085":{"position":[[784,6]]}}}],["header",{"_index":713,"t":{"1742":{"position":[[889,6],[911,6]]},"2101":{"position":[[1376,6],[1412,7]]},"2231":{"position":[[2181,6],[2217,7]]},"2233":{"position":[[2129,6],[2165,7]]},"2235":{"position":[[1998,6],[2034,7]]},"2237":{"position":[[1947,6],[1983,7]]},"2239":{"position":[[1960,6],[1996,7]]},"2241":{"position":[[2073,6],[2109,7]]},"2243":{"position":[[2034,6],[2070,7]]},"2247":{"position":[[2107,6],[2143,7]]},"2249":{"position":[[2088,6],[2124,7]]},"2251":{"position":[[1984,6],[2020,7]]},"2253":{"position":[[2100,6],[2136,7]]},"2255":{"position":[[1965,6],[2001,7]]},"2257":{"position":[[1880,6],[1916,7]]},"2267":{"position":[[2055,6],[2091,7]]},"2273":{"position":[[2097,6],[2133,7]]},"2275":{"position":[[2013,6],[2049,7]]},"2277":{"position":[[2019,6],[2055,7]]},"2350":{"position":[[2364,6],[2400,7]]},"2352":{"position":[[2378,6],[2414,7]]},"2354":{"position":[[821,6],[961,6],[2493,6],[2529,7]]}}}],["headers=x",{"_index":2104,"t":{"2101":{"position":[[1465,9],[1513,9]]},"2231":{"position":[[2270,9],[2318,9]]},"2233":{"position":[[2218,9],[2266,9]]},"2235":{"position":[[2087,9],[2135,9]]},"2237":{"position":[[2036,9],[2084,9]]},"2239":{"position":[[2049,9],[2097,9]]},"2241":{"position":[[2162,9],[2210,9]]},"2243":{"position":[[2123,9],[2171,9]]},"2247":{"position":[[2196,9],[2244,9]]},"2249":{"position":[[2177,9],[2225,9]]},"2251":{"position":[[2073,9],[2121,9]]},"2253":{"position":[[2189,9],[2237,9]]},"2255":{"position":[[2054,9],[2102,9]]},"2257":{"position":[[1969,9],[2017,9]]},"2267":{"position":[[2144,9],[2192,9]]},"2273":{"position":[[2186,9],[2234,9]]},"2275":{"position":[[2102,9],[2150,9]]},"2277":{"position":[[2108,9],[2156,9]]},"2350":{"position":[[2453,9],[2501,9]]},"2352":{"position":[[2467,9],[2515,9]]},"2354":{"position":[[2582,9],[2630,9]]}}}],["headless",{"_index":388,"t":{"1681":{"position":[[249,8]]}}}],["health",{"_index":1617,"t":{"1957":{"position":[[1619,6]]}}}],["healthz",{"_index":2150,"t":{"2101":{"position":[[3796,7]]},"2356":{"position":[[1313,7],[2536,7]]},"2368":{"position":[[1504,7],[2727,7]]}}}],["hello=world",{"_index":188,"t":{"1660":{"position":[[373,11]]}}}],["helm",{"_index":21,"t":{"1636":{"position":[[302,4]]},"1675":{"position":[[723,4]]},"1719":{"position":[[61,4],[116,4],[133,4],[245,4]]},"1764":{"position":[[346,4]]},"1786":{"position":[[322,4],[346,4]]},"1794":{"position":[[6279,4],[6316,4]]},"1813":{"position":[[91,5],[354,4],[485,4]]},"1842":{"position":[[772,4]]},"1848":{"position":[[1310,4]]},"1874":{"position":[[0,9],[360,4]]},"1876":{"position":[[21,4]]},"1878":{"position":[[207,4]]},"1880":{"position":[[269,4]]},"1941":{"position":[[31,4],[100,5]]}}}],["helm.cattle.io/v1",{"_index":1271,"t":{"1876":{"position":[[339,17]]},"1878":{"position":[[475,17]]}}}],["helm:v0.3.0",{"_index":1291,"t":{"1876":{"position":[[1196,11]]}}}],["helmchart",{"_index":1269,"t":{"1876":{"position":[[121,9],[220,9],[363,9],[616,9]]},"1878":{"position":[[35,10],[166,10],[260,9],[282,9]]}}}],["helmchartconfig",{"_index":1304,"t":{"1878":{"position":[[93,15],[142,15],[294,15],[499,15]]},"2027":{"position":[[489,15],[556,15]]}}}],["help",{"_index":617,"t":{"1723":{"position":[[1142,4]]},"1811":{"position":[[468,5],[482,4]]},"1895":{"position":[[1355,4]]},"1906":{"position":[[927,4]]},"1914":{"position":[[29,4]]},"2053":{"position":[[1572,5]]},"2176":{"position":[[212,4]]},"2310":{"position":[[2168,4],[2221,4],[2256,4],[2408,4],[2461,4],[2496,4],[2648,4],[2701,4],[2736,4]]},"2316":{"position":[[2213,4],[2266,4],[2301,4]]}}}],["henc",{"_index":2173,"t":{"2107":{"position":[[462,5]]},"2117":{"position":[[553,6]]}}}],["here",{"_index":929,"t":{"1760":{"position":[[1780,5]]},"1884":{"position":[[233,5]]},"1900":{"position":[[592,4]]},"1933":{"position":[[731,4]]},"1981":{"position":[[104,5]]},"2093":{"position":[[373,4],[1322,4],[2506,4]]},"2095":{"position":[[261,4]]}}}],["hierarchi",{"_index":1905,"t":{"2061":{"position":[[368,10]]}}}],["high",{"_index":818,"t":{"1750":{"position":[[886,4]]},"1756":{"position":[[14,4]]},"1758":{"position":[[14,4]]},"1832":{"position":[[148,4]]},"1838":{"position":[[1061,4]]},"1895":{"position":[[91,4],[509,4],[550,4],[841,4]]},"1957":{"position":[[1659,5]]},"1983":{"position":[[680,4]]},"1987":{"position":[[121,4]]},"1989":{"position":[[73,4]]},"2125":{"position":[[392,4]]},"2156":{"position":[[9,4]]}}}],["highli",{"_index":1243,"t":{"1848":{"position":[[835,6]]},"2075":{"position":[[1025,6]]},"2121":{"position":[[99,6]]},"2159":{"position":[[734,6]]}}}],["histor",{"_index":1007,"t":{"1782":{"position":[[1398,10]]},"1931":{"position":[[282,10]]}}}],["hmac",{"_index":662,"t":{"1740":{"position":[[567,4]]}}}],["hold",{"_index":95,"t":{"1646":{"position":[[85,4]]},"1662":{"position":[[962,4]]},"1778":{"position":[[119,4]]},"1794":{"position":[[1282,4]]},"1811":{"position":[[902,4],[1679,4],[2163,4],[2452,4]]}}}],["hole",{"_index":1338,"t":{"1893":{"position":[[721,5]]}}}],["home}/.rancher/k3",{"_index":984,"t":{"1778":{"position":[[76,20]]},"1794":{"position":[[1327,20]]},"1811":{"position":[[945,20],[1722,20],[2206,20],[2495,20]]}}}],["hop",{"_index":1614,"t":{"1957":{"position":[[1546,5]]}}}],["host",{"_index":169,"t":{"1656":{"position":[[148,4]]},"1662":{"position":[[3398,4]]},"1771":{"position":[[388,5]]},"1782":{"position":[[531,5]]},"1790":{"position":[[204,4]]},"1794":{"position":[[2040,5],[8717,4]]},"1829":{"position":[[1159,4],[1184,4],[1209,4]]},"1884":{"position":[[137,5]]},"1947":{"position":[[73,5],[292,5]]},"1949":{"position":[[638,5],[1022,5]]},"2061":{"position":[[64,4]]},"2077":{"position":[[56,7]]},"2085":{"position":[[521,4],[548,4]]},"2087":{"position":[[23,4]]},"2159":{"position":[[790,4],[852,4],[873,5]]}}}],["host>.nod",{"_index":622,"t":{"1733":{"position":[[351,11]]}}}],["hostipc",{"_index":2004,"t":{"2093":{"position":[[1735,8],[2862,8],[3363,8]]},"2400":{"position":[[126,7]]}}}],["hostnam",{"_index":527,"t":{"1708":{"position":[[360,8]]},"1776":{"position":[[379,9]]},"1794":{"position":[[1153,9]]},"1840":{"position":[[66,8],[981,8],[1134,9]]},"1848":{"position":[[566,8]]},"1876":{"position":[[567,9]]},"1975":{"position":[[31,9],[78,9],[94,9]]},"2101":{"position":[[3829,8]]},"2356":{"position":[[1346,8],[2569,8]]},"2364":{"position":[[157,8]]},"2368":{"position":[[1537,8],[2760,8]]}}}],["hostnetwork",{"_index":2002,"t":{"2093":{"position":[[1702,12],[2843,12],[3377,12]]},"2402":{"position":[[126,11]]}}}],["hostpath",{"_index":2581,"t":{"2416":{"position":[[142,8]]}}}],["hostpid",{"_index":2006,"t":{"2093":{"position":[[1764,8],[2877,8],[3395,8]]},"2398":{"position":[[126,7]]}}}],["hostport",{"_index":1808,"t":{"2027":{"position":[[207,8]]},"2093":{"position":[[3409,10],[3883,10]]},"2418":{"position":[[147,8]]}}}],["hour",{"_index":833,"t":{"1750":{"position":[[2141,5]]},"1767":{"position":[[876,5]]},"1794":{"position":[[4741,5]]}}}],["hr9p5",{"_index":2536,"t":{"2356":{"position":[[695,5],[1391,5]]},"2368":{"position":[[886,5],[1582,5]]}}}],["http",{"_index":228,"t":{"1673":{"position":[[0,4]]},"1717":{"position":[[455,4]]},"1767":{"position":[[1673,5]]},"1776":{"position":[[73,5],[102,5]]},"1794":{"position":[[763,5],[798,5],[5627,5]]},"1876":{"position":[[741,5],[908,5]]},"1969":{"position":[[468,7],[524,6]]},"2027":{"position":[[39,4]]},"2229":{"position":[[176,5]]}}}],["http.createserver(function(req",{"_index":573,"t":{"1717":{"position":[[479,31]]}}}],["http://localhost:8001/api/v1/namespaces/kubernet",{"_index":1446,"t":{"1922":{"position":[[137,50]]}}}],["http://mycustomreg.com:5000",{"_index":1655,"t":{"1969":{"position":[[190,29],[385,29]]}}}],["http_proxi",{"_index":229,"t":{"1673":{"position":[[157,11]]}}}],["http_proxy=http://your",{"_index":240,"t":{"1673":{"position":[[593,22]]}}}],["https://%{kubernetes_api}%/static/charts/traefik",{"_index":1302,"t":{"1876":{"position":[[1652,48]]}}}],["https://<etcd",{"_index":1746,"t":{"2001":{"position":[[341,13]]}}}],["https://<ip",{"_index":1234,"t":{"1848":{"position":[[551,11]]}}}],["https://charts.bitnami.com/bitnami",{"_index":1273,"t":{"1876":{"position":[[431,34]]}}}],["https://charts.rancher.io",{"_index":583,"t":{"1719":{"position":[[90,25]]}}}],["https://etcd",{"_index":1142,"t":{"1829":{"position":[[1146,12]]}}}],["https://fix",{"_index":1215,"t":{"1844":{"position":[[468,13]]}}}],["https://get.k3s.io",{"_index":255,"t":{"1675":{"position":[[433,18]]},"1697":{"position":[[291,18]]},"1838":{"position":[[598,18]]},"1842":{"position":[[410,18]]},"1848":{"position":[[303,18],[489,18]]},"1895":{"position":[[919,18]]},"1898":{"position":[[398,18]]},"1904":{"position":[[88,18],[769,18],[871,18],[975,18],[1114,18],[1209,18],[1368,18],[1484,18],[1604,18],[1700,18]]},"1906":{"position":[[421,18]]},"1912":{"position":[[256,18]]},"1999":{"position":[[111,18]]},"2001":{"position":[[265,18]]},"2049":{"position":[[74,18],[153,18],[713,18]]},"2053":{"position":[[88,18],[231,18],[2452,18]]},"2079":{"position":[[398,18]]},"2169":{"position":[[121,18],[338,18],[481,18]]}}}],["https://github.com/go",{"_index":1139,"t":{"1829":{"position":[[708,21]]}}}],["https://github.com/k3",{"_index":426,"t":{"1689":{"position":[[148,22]]},"1742":{"position":[[2518,22]]},"1744":{"position":[[1889,22]]},"1746":{"position":[[1670,22]]}}}],["https://github.com/rancher/system",{"_index":2281,"t":{"2161":{"position":[[235,33]]}}}],["https://godoc.org/github.com/lib/pq",{"_index":1136,"t":{"1829":{"position":[[309,35]]}}}],["https://helm.sh/docs/intro/quickstart",{"_index":1266,"t":{"1874":{"position":[[178,40]]}}}],["https://k3s.example.com",{"_index":1385,"t":{"1904":{"position":[[1422,23],[1570,23]]},"1906":{"position":[[709,23]]}}}],["https://mycustomreg.com:5000",{"_index":1627,"t":{"1963":{"position":[[138,30],[577,30]]},"1967":{"position":[[186,30],[549,30]]}}}],["https://mycustomreg.com:5000/rancher/coredn",{"_index":1634,"t":{"1963":{"position":[[700,44]]}}}],["https://nvidia.github.io/libnvidia",{"_index":381,"t":{"1681":{"position":[[95,34]]}}}],["https://raw.githubusercontent.com/kubernetes/dashboard/${version_kube_dashboard}/aio/deploy/recommended.yaml",{"_index":1432,"t":{"1916":{"position":[[205,108]]},"1924":{"position":[[252,108]]}}}],["https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml",{"_index":2254,"t":{"2145":{"position":[[178,79]]}}}],["https://registry.example.com:5000",{"_index":1643,"t":{"1963":{"position":[[1222,35]]}}}],["https://releases.rancher.com/instal",{"_index":251,"t":{"1675":{"position":[[335,36]]}}}],["https://rootlesscontaine.r",{"_index":414,"t":{"1685":{"position":[[128,28]]},"1693":{"position":[[114,28]]}}}],["https://rootlesscontaine.rs/get",{"_index":424,"t":{"1689":{"position":[[0,35]]}}}],["https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3",{"_index":543,"t":{"1710":{"position":[[376,60]]}}}],["https://update.k3s.io/v1",{"_index":1852,"t":{"2053":{"position":[[2169,24]]},"2163":{"position":[[2335,24]]}}}],["https_proxi",{"_index":230,"t":{"1673":{"position":[[169,11]]}}}],["https_proxy=http://your",{"_index":242,"t":{"1673":{"position":[[639,23]]}}}],["human",{"_index":1088,"t":{"1811":{"position":[[1064,5]]}}}],["i.",{"_index":1588,"t":{"1953":{"position":[[1406,4]]}}}],["id",{"_index":100,"t":{"1648":{"position":[[92,2],[106,2]]},"1662":{"position":[[1077,2],[1100,2]]},"1675":{"position":[[983,2]]},"1733":{"position":[[424,3],[737,2],[785,3],[815,3]]},"1794":{"position":[[6402,2],[6425,2]]},"1811":{"position":[[1624,3],[2070,3],[2356,3]]},"1975":{"position":[[175,2]]},"2225":{"position":[[785,2],[1067,2],[1349,2],[1631,2],[1913,2],[2195,2],[2477,2]]},"2227":{"position":[[766,2],[1048,2],[1330,2],[1612,2],[1894,2],[2176,2],[2458,2]]},"2245":{"position":[[779,2],[1061,2],[1343,2],[1625,2],[1907,2],[2189,2],[2471,2]]},"2298":{"position":[[751,2],[1033,2],[1315,2],[1597,2],[1879,2],[2161,2],[2443,2]]},"2310":{"position":[[2117,2],[2357,2],[2597,2]]},"2316":{"position":[[2162,2]]}}}],["ideal",{"_index":2054,"t":{"2097":{"position":[[256,8]]}}}],["ident",{"_index":1025,"t":{"1798":{"position":[[139,8]]},"1800":{"position":[[797,8]]},"1906":{"position":[[1447,11]]},"1945":{"position":[[239,9]]},"2079":{"position":[[805,11]]}}}],["identifi",{"_index":923,"t":{"1760":{"position":[[1178,8]]},"1800":{"position":[[172,10]]},"2345":{"position":[[94,10]]},"2347":{"position":[[94,10]]},"2368":{"position":[[141,8]]},"2377":{"position":[[26,8]]}}}],["idl",{"_index":1777,"t":{"2021":{"position":[[958,4]]},"2099":{"position":[[726,4],[1349,4]]},"2358":{"position":[[361,4],[609,4]]}}}],["ifac",{"_index":152,"t":{"1652":{"position":[[243,5]]},"1662":{"position":[[2910,5]]},"1794":{"position":[[7971,5]]}}}],["ifnotpres",{"_index":2245,"t":{"2143":{"position":[[154,12]]},"2149":{"position":[[154,12]]}}}],["ignor",{"_index":1249,"t":{"1850":{"position":[[453,8]]},"1939":{"position":[[110,6]]},"1953":{"position":[[176,7]]}}}],["illustr",{"_index":1380,"t":{"1904":{"position":[[629,10]]}}}],["imag",{"_index":137,"t":{"1650":{"position":[[203,5],[262,5]]},"1662":{"position":[[1273,5],[1461,5],[2286,5],[2331,5]]},"1675":{"position":[[986,5]]},"1681":{"position":[[873,6]]},"1717":{"position":[[369,6]]},"1794":{"position":[[6598,5],[6786,5],[7218,5],[7263,5],[7655,6]]},"1878":{"position":[[586,6]]},"1882":{"position":[[261,6]]},"1888":{"position":[[131,6]]},"1890":{"position":[[11,6],[142,6],[243,6]]},"1893":{"position":[[83,6],[122,6],[253,7]]},"1898":{"position":[[103,6]]},"1900":{"position":[[105,6],[276,5],[344,6],[785,6],[1003,6]]},"1959":{"position":[[91,6]]},"1963":{"position":[[236,5],[442,6],[689,5],[844,5],[1061,5],[1322,5],[1390,5],[1491,5]]},"1971":{"position":[[101,6],[234,6],[356,6]]},"2059":{"position":[[548,5]]},"2075":{"position":[[877,7],[985,5],[1080,5]]},"2077":{"position":[[384,5]]},"2101":{"position":[[4198,5]]},"2143":{"position":[[110,6]]},"2149":{"position":[[110,6]]},"2163":{"position":[[703,6],[1039,6],[1110,6]]},"2356":{"position":[[1723,5],[2946,5]]},"2368":{"position":[[1914,5],[3137,5]]},"2431":{"position":[[72,5]]}}}],["image=rancher/mirror",{"_index":2548,"t":{"2356":{"position":[[1551,22],[2774,22]]},"2368":{"position":[[1742,22],[2965,22]]}}}],["imagepullpolici",{"_index":2244,"t":{"2143":{"position":[[137,16]]},"2149":{"position":[[137,16]]}}}],["images.txt",{"_index":1657,"t":{"1971":{"position":[[22,10],[126,10]]}}}],["images/$1",{"_index":1645,"t":{"1963":{"position":[[1307,10]]}}}],["images/coredn",{"_index":1642,"t":{"1963":{"position":[[1160,14]]}}}],["immedi",{"_index":872,"t":{"1750":{"position":[[4190,9]]}}}],["impact",{"_index":1616,"t":{"1957":{"position":[[1608,6]]},"1981":{"position":[[401,6]]},"2073":{"position":[[43,6]]}}}],["imperson",{"_index":2574,"t":{"2391":{"position":[[53,12]]}}}],["implement",{"_index":1519,"t":{"1945":{"position":[[65,10]]},"2176":{"position":[[1641,15]]},"2321":{"position":[[106,11]]}}}],["implicitli",{"_index":1056,"t":{"1802":{"position":[[163,10]]}}}],["import",{"_index":1250,"t":{"1850":{"position":[[462,10]]},"1906":{"position":[[998,9]]},"1918":{"position":[[0,10]]},"1983":{"position":[[788,9]]},"2123":{"position":[[112,9]]},"2125":{"position":[[110,9]]},"2127":{"position":[[71,9]]},"2159":{"position":[[1165,8]]},"2163":{"position":[[1175,9]]}}}],["inaccess",{"_index":2192,"t":{"2117":{"position":[[329,12]]}}}],["includ",{"_index":14,"t":{"1636":{"position":[[233,9]]},"1744":{"position":[[724,10]]},"1746":{"position":[[2174,9]]},"1748":{"position":[[386,8]]},"1760":{"position":[[25,8]]},"1802":{"position":[[23,8]]},"1811":{"position":[[691,9]]},"1929":{"position":[[601,9]]},"1943":{"position":[[55,9]]},"1945":{"position":[[2071,8]]},"1947":{"position":[[694,7]]},"1953":{"position":[[154,7]]},"1973":{"position":[[311,7]]},"1995":{"position":[[33,9]]},"1997":{"position":[[83,9]]},"2053":{"position":[[2308,8]]},"2055":{"position":[[752,8]]},"2059":{"position":[[391,9],[474,7]]},"2077":{"position":[[361,7]]},"2091":{"position":[[217,7]]},"2093":{"position":[[2129,7]]},"2167":{"position":[[543,9]]},"2176":{"position":[[581,9]]},"2237":{"position":[[200,8]]},"2239":{"position":[[200,8]]},"2243":{"position":[[236,7]]},"2245":{"position":[[193,7]]},"2247":{"position":[[193,7]]},"2249":{"position":[[321,7]]},"2251":{"position":[[213,7]]},"2253":{"position":[[299,8]]},"2296":{"position":[[209,7]]},"2385":{"position":[[205,7]]},"2406":{"position":[[155,9]]}}}],["incom",{"_index":1564,"t":{"1951":{"position":[[306,8]]}}}],["incorrect",{"_index":932,"t":{"1764":{"position":[[180,9]]}}}],["increas",{"_index":1597,"t":{"1955":{"position":[[282,8]]},"1957":{"position":[[1498,8]]},"1993":{"position":[[20,10]]},"2075":{"position":[[553,8],[688,8]]}}}],["independ",{"_index":791,"t":{"1748":{"position":[[267,11]]}}}],["indic",{"_index":919,"t":{"1760":{"position":[[885,9],[1082,9],[1331,10],[1569,9]]},"2163":{"position":[[1338,9]]}}}],["individu",{"_index":637,"t":{"1738":{"position":[[201,10]]},"2061":{"position":[[329,10]]},"2109":{"position":[[221,10]]}}}],["info",{"_index":928,"t":{"1760":{"position":[[1775,4]]}}}],["inform",{"_index":57,"t":{"1640":{"position":[[321,11]]},"1740":{"position":[[79,11]]},"1750":{"position":[[4474,11]]},"1752":{"position":[[59,12]]},"1760":{"position":[[65,11],[1488,11]]},"1762":{"position":[[359,11]]},"1806":{"position":[[575,11],[1130,11],[1223,11]]},"1823":{"position":[[52,11]]},"1906":{"position":[[1408,11]]},"1933":{"position":[[193,11]]},"1941":{"position":[[4,11]]},"1943":{"position":[[175,11]]},"1979":{"position":[[276,11]]},"2007":{"position":[[579,12]]},"2081":{"position":[[230,12]]},"2097":{"position":[[386,12],[626,11]]},"2101":{"position":[[4378,11]]},"2176":{"position":[[549,11]]}}}],["infra",{"_index":2547,"t":{"2356":{"position":[[1535,5],[2758,5]]},"2368":{"position":[[1726,5],[2949,5]]}}}],["infrastructur",{"_index":2256,"t":{"2152":{"position":[[75,17]]}}}],["ingress",{"_index":24,"t":{"1636":{"position":[[326,7]]},"1876":{"position":[[544,8]]},"2059":{"position":[[241,8]]},"2093":{"position":[[5928,8],[6127,8],[6326,8],[6457,7]]},"2095":{"position":[[441,8],[784,8],[911,7],[950,7],[1465,8],[1494,7],[1598,7],[1706,8],[1735,7],[1839,7],[1934,8],[1963,7],[2148,8],[2177,7],[2281,7],[2389,8],[2418,7],[2522,7],[2598,8],[2627,7]]}}}],["init",{"_index":863,"t":{"1750":{"position":[[3719,4]]},"1769":{"position":[[464,4]]},"1794":{"position":[[3185,4]]},"1848":{"position":[[170,4],[366,4]]},"1850":{"position":[[159,4],[406,5],[604,4]]},"1880":{"position":[[274,4]]},"1908":{"position":[[416,5],[618,4]]},"1997":{"position":[[39,4]]},"1999":{"position":[[157,4]]},"2005":{"position":[[254,5]]}}}],["initi",{"_index":693,"t":{"1742":{"position":[[66,7]]},"1744":{"position":[[2593,7]]},"1746":{"position":[[2392,7]]},"1769":{"position":[[486,10]]},"1794":{"position":[[3200,10]]},"1802":{"position":[[280,7]]},"1832":{"position":[[1073,9]]},"1840":{"position":[[375,7]]},"1850":{"position":[[330,11]]},"2200":{"position":[[588,13]]},"2271":{"position":[[718,13]]},"2306":{"position":[[612,13]]},"2308":{"position":[[501,13]]},"2310":{"position":[[526,13]]},"2312":{"position":[[678,13]]},"2314":{"position":[[504,13]]},"2316":{"position":[[536,13]]},"2318":{"position":[[635,13]]}}}],["insecur",{"_index":958,"t":{"1767":{"position":[[1647,8]]},"1794":{"position":[[5596,8]]},"2101":{"position":[[804,8]]}}}],["insecure_skip_verifi",{"_index":1651,"t":{"1965":{"position":[[442,20]]}}}],["instal",{"_index":272,"t":{"1675":{"position":[[728,7]]},"1681":{"position":[[175,7]]},"1706":{"position":[[477,7]]},"1710":{"position":[[312,7],[365,7]]},"1719":{"position":[[138,7],[250,7]]},"1742":{"position":[[2656,7]]},"1744":{"position":[[2601,13]]},"1746":{"position":[[2400,13]]},"1748":{"position":[[340,7]]},"1832":{"position":[[27,10],[138,7]]},"1838":{"position":[[500,7],[981,12],[1029,8],[1079,9]]},"1840":{"position":[[879,7]]},"1882":{"position":[[8,7]]},"1886":{"position":[[148,7]]},"1890":{"position":[[347,7]]},"1893":{"position":[[7,10],[147,8],[366,7],[406,7]]},"1895":{"position":[[8,7],[126,7],[614,7],[690,7]]},"1898":{"position":[[380,7],[626,11]]},"1904":{"position":[[55,12],[110,7],[462,13],[598,9]]},"1906":{"position":[[15,12],[298,14]]},"1908":{"position":[[249,8]]},"1912":{"position":[[164,12],[383,9]]},"1914":{"position":[[5,12]]},"1937":{"position":[[337,9]]},"1945":{"position":[[600,7],[641,7],[702,9],[2220,7],[2285,10]]},"1947":{"position":[[38,12],[237,12]]},"1949":{"position":[[42,7],[371,7]]},"2007":{"position":[[228,9],[252,12],[320,13]]},"2053":{"position":[[55,12],[110,7],[283,7],[361,13],[1000,7],[1264,7],[2061,12]]},"2061":{"position":[[136,9]]},"2079":{"position":[[458,10]]},"2085":{"position":[[72,12]]},"2097":{"position":[[1074,10]]},"2159":{"position":[[975,7]]},"2161":{"position":[[37,9],[165,7]]},"2165":{"position":[[33,12],[69,10]]},"2167":{"position":[[27,12]]},"2169":{"position":[[56,12]]},"2173":{"position":[[35,12]]},"2176":{"position":[[154,12],[1820,12]]}}}],["install.sh",{"_index":1331,"t":{"1893":{"position":[[467,11]]},"1895":{"position":[[233,12],[396,12],[1268,12]]}}}],["install_k3s_bin_dir",{"_index":1842,"t":{"2053":{"position":[[967,19],[1159,20]]}}}],["install_k3s_bin_dir_read_onli",{"_index":1843,"t":{"2053":{"position":[[1090,29]]}}}],["install_k3s_channel",{"_index":1854,"t":{"2053":{"position":[[2212,19]]}}}],["install_k3s_channel=latest",{"_index":1857,"t":{"2053":{"position":[[2473,26]]},"2169":{"position":[[359,26]]}}}],["install_k3s_channel_url",{"_index":1850,"t":{"2053":{"position":[[2090,23]]}}}],["install_k3s_exec",{"_index":1374,"t":{"1904":{"position":[[201,17],[353,16],[1135,18]]},"2053":{"position":[[1357,16]]}}}],["install_k3s_exec=\"ag",{"_index":1384,"t":{"1904":{"position":[[1389,23],[1505,24]]}}}],["install_k3s_exec=\"serv",{"_index":1381,"t":{"1904":{"position":[[790,25],[892,24]]},"1912":{"position":[[303,25]]}}}],["install_k3s_exec='arg",{"_index":1346,"t":{"1895":{"position":[[756,23]]}}}],["install_k3s_exec='serv",{"_index":1349,"t":{"1895":{"position":[[1139,24]]}}}],["install_k3s_nam",{"_index":1846,"t":{"2053":{"position":[[1601,16]]}}}],["install_k3s_selinux_warn",{"_index":1848,"t":{"2053":{"position":[[1907,24]]}}}],["install_k3s_selinux_warn=tru",{"_index":546,"t":{"1710":{"position":[[519,30]]}}}],["install_k3s_skip_download",{"_index":1339,"t":{"1893":{"position":[[764,25]]},"2053":{"position":[[408,25]]}}}],["install_k3s_skip_download=tru",{"_index":1340,"t":{"1895":{"position":[[202,30],[309,30],[646,30],[1108,30]]},"2053":{"position":[[1195,31]]}}}],["install_k3s_skip_en",{"_index":1839,"t":{"2053":{"position":[[697,23]]}}}],["install_k3s_skip_enable=tru",{"_index":475,"t":{"1697":{"position":[[340,28]]},"1906":{"position":[[442,28]]}}}],["install_k3s_skip_selinux_rpm",{"_index":1849,"t":{"2053":{"position":[[1997,28]]}}}],["install_k3s_skip_selinux_rpm=tru",{"_index":539,"t":{"1710":{"position":[[220,34]]}}}],["install_k3s_skip_start",{"_index":1840,"t":{"2053":{"position":[[774,22]]}}}],["install_k3s_skip_start=tru",{"_index":474,"t":{"1697":{"position":[[312,27]]}}}],["install_k3s_symlink",{"_index":1837,"t":{"2053":{"position":[[487,19]]}}}],["install_k3s_systemd_dir",{"_index":1844,"t":{"2053":{"position":[[1227,23]]}}}],["install_k3s_typ",{"_index":1847,"t":{"2053":{"position":[[1798,16]]}}}],["install_k3s_vers",{"_index":1841,"t":{"2053":{"position":[[840,19]]}}}],["install_k3s_version=vx.y.z",{"_index":2308,"t":{"2169":{"position":[[502,26]]}}}],["instanc",{"_index":1248,"t":{"1850":{"position":[[226,9]]},"2061":{"position":[[13,8]]}}}],["instead",{"_index":162,"t":{"1656":{"position":[[66,7]]},"1662":{"position":[[3468,7]]},"1790":{"position":[[122,7]]},"1794":{"position":[[7010,7]]},"1840":{"position":[[787,7]]},"1895":{"position":[[713,7],[1056,8]]},"1910":{"position":[[355,7]]},"1945":{"position":[[1203,7]]},"1947":{"position":[[736,7]]},"1951":{"position":[[1576,8]]},"2005":{"position":[[87,7]]}}}],["instruct",{"_index":1622,"t":{"1959":{"position":[[205,8]]}}}],["integr",{"_index":670,"t":{"1740":{"position":[[938,9]]},"1746":{"position":[[745,9]]},"1931":{"position":[[466,10]]},"2061":{"position":[[543,10]]},"2105":{"position":[[323,9]]},"2159":{"position":[[1604,11]]}}}],["intel(r",{"_index":1864,"t":{"2055":{"position":[[242,8],[346,8],[428,8]]},"2067":{"position":[[189,8]]},"2069":{"position":[[189,8]]},"2071":{"position":[[77,8]]}}}],["intend",{"_index":1358,"t":{"1900":{"position":[[244,6]]},"2057":{"position":[[24,8]]}}}],["interf",{"_index":1882,"t":{"2055":{"position":[[994,11]]}}}],["interfac",{"_index":154,"t":{"1652":{"position":[[284,9]]},"1662":{"position":[[2966,9]]},"1723":{"position":[[640,11]]},"1767":{"position":[[564,9]]},"1794":{"position":[[4423,10],[8027,9]]},"1945":{"position":[[109,9]]},"1947":{"position":[[175,10]]},"1953":{"position":[[287,9]]}}}],["interfer",{"_index":1696,"t":{"1981":{"position":[[497,12]]},"2073":{"position":[[139,12]]},"2077":{"position":[[146,9]]}}}],["intermedi",{"_index":704,"t":{"1742":{"position":[[465,12],[527,12],[1433,12],[1568,12],[1739,12],[2071,12],[2211,12],[2291,12],[2737,12]]},"1744":{"position":[[1311,12]]},"1746":{"position":[[994,12]]},"2159":{"position":[[1834,12]]},"2167":{"position":[[985,12]]}}}],["intermediate.key",{"_index":726,"t":{"1742":{"position":[[1824,16]]}}}],["intermediate.pem",{"_index":725,"t":{"1742":{"position":[[1807,16]]}}}],["intern",{"_index":1528,"t":{"1945":{"position":[[1214,8]]},"1957":{"position":[[1030,8]]}}}],["internet",{"_index":1317,"t":{"1882":{"position":[[161,9]]},"2085":{"position":[[207,8]]},"2176":{"position":[[807,8]]}}}],["interv",{"_index":811,"t":{"1750":{"position":[[309,8],[2101,8]]},"1767":{"position":[[836,8]]},"1794":{"position":[[4701,8]]}}}],["intervent",{"_index":1954,"t":{"2085":{"position":[[444,12]]},"2103":{"position":[[178,13]]}}}],["intra",{"_index":2036,"t":{"2093":{"position":[[5867,5],[6070,5],[6265,5]]},"2095":{"position":[[380,5]]}}}],["introduc",{"_index":1146,"t":{"1832":{"position":[[74,10]]}}}],["invalid",{"_index":766,"t":{"1744":{"position":[[1755,12]]},"1748":{"position":[[236,12],[966,12]]},"1933":{"position":[[971,8],[995,7]]}}}],["investig",{"_index":2179,"t":{"2111":{"position":[[163,11]]},"2113":{"position":[[240,13]]},"2115":{"position":[[239,13]]}}}],["involv",{"_index":1930,"t":{"2075":{"position":[[860,7],[1058,7]]}}}],["io",{"_index":1899,"t":{"2061":{"position":[[91,2]]},"2075":{"position":[[1040,2]]}}}],["io/etcd/releases/download/${etcd_version}/etcd",{"_index":358,"t":{"1677":{"position":[[192,46]]}}}],["io/k3",{"_index":548,"t":{"1712":{"position":[[289,6]]}}}],["io/k3s/blob/<version>/k3",{"_index":427,"t":{"1689":{"position":[[171,25]]}}}],["io/k3s/blob/master/k3",{"_index":429,"t":{"1689":{"position":[[238,22]]}}}],["io/k3s/raw/master/contrib/util/gener",{"_index":737,"t":{"1742":{"position":[[2541,39]]},"1744":{"position":[[1912,39]]}}}],["io/k3s/raw/master/contrib/util/rot",{"_index":785,"t":{"1746":{"position":[[1693,37]]}}}],["iop",{"_index":1740,"t":{"1991":{"position":[[231,5]]},"2057":{"position":[[164,4],[386,4]]},"2059":{"position":[[401,4]]},"2067":{"position":[[304,4],[355,4]]},"2069":{"position":[[276,4],[320,4]]},"2077":{"position":[[134,4]]}}}],["iot",{"_index":3,"t":{"1634":{"position":[[72,10]]}}}],["ip",{"_index":144,"t":{"1652":{"position":[[45,2],[68,2],[117,2],[139,2]]},"1662":{"position":[[2639,2],[2735,2],[2782,2]]},"1673":{"position":[[436,2],[504,2],[531,4]]},"1764":{"position":[[467,2]]},"1776":{"position":[[168,2]]},"1782":{"position":[[100,3],[183,3],[339,2],[667,2],[694,2]]},"1794":{"position":[[973,3],[1434,3],[1539,3],[1743,2],[2200,2],[2234,2],[7700,2],[7796,2],[7843,2]]},"1815":{"position":[[97,2]]},"1840":{"position":[[60,2],[362,3],[641,2],[993,2],[1123,2]]},"1893":{"position":[[551,3]]},"1945":{"position":[[1129,2],[1150,2],[1223,4],[1262,2],[1430,2],[1464,4]]},"1949":{"position":[[211,2],[416,2],[701,2],[799,2],[1086,2]]},"1953":{"position":[[476,6]]},"1957":{"position":[[261,2],[313,4],[600,2],[689,2],[764,2],[1169,4],[1182,3],[1216,3],[1228,2],[1290,2],[1322,3],[1709,3],[1823,4]]},"1993":{"position":[[97,3]]},"2033":{"position":[[189,6],[219,3],[262,3],[328,3]]},"2043":{"position":[[135,4],[142,4],[161,2],[182,2]]},"2101":{"position":[[1769,2]]},"2231":{"position":[[2597,2]]},"2233":{"position":[[2545,2]]},"2235":{"position":[[2414,2]]},"2237":{"position":[[2363,2]]},"2239":{"position":[[2376,2]]},"2241":{"position":[[2489,2]]},"2243":{"position":[[2450,2]]},"2247":{"position":[[2523,2]]},"2249":{"position":[[2504,2]]},"2251":{"position":[[2400,2]]},"2253":{"position":[[2516,2]]},"2255":{"position":[[2381,2]]},"2257":{"position":[[2296,2]]},"2267":{"position":[[2471,2]]},"2273":{"position":[[2513,2]]},"2275":{"position":[[2429,2]]},"2277":{"position":[[2435,2]]},"2288":{"position":[[1956,2]]},"2290":{"position":[[2024,2]]},"2292":{"position":[[2109,2]]},"2294":{"position":[[2006,2]]},"2350":{"position":[[2780,2]]},"2352":{"position":[[2794,2]]},"2354":{"position":[[2909,2]]}}}],["ip/nod",{"_index":978,"t":{"1776":{"position":[[160,7]]},"1794":{"position":[[965,7]]}}}],["ip=0.0.0.0",{"_index":1576,"t":{"1953":{"position":[[412,11]]}}}],["ip=<agent_external_ip",{"_index":1606,"t":{"1957":{"position":[[634,22]]}}}],["ip=<server_external_ip",{"_index":1605,"t":{"1957":{"position":[[522,23]]}}}],["ipam",{"_index":1569,"t":{"1951":{"position":[[1471,4]]}}}],["ipc",{"_index":2271,"t":{"2159":{"position":[[795,4]]}}}],["ipsec",{"_index":1018,"t":{"1794":{"position":[[2018,7]]},"1945":{"position":[[1711,5],[2334,5]]},"1947":{"position":[[214,5],[794,6]]}}}],["ipsec'(deprec",{"_index":994,"t":{"1782":{"position":[[510,20]]}}}],["iptabl",{"_index":32,"t":{"1636":{"position":[[615,14]]},"1700":{"position":[[67,9],[276,9]]},"1706":{"position":[[25,8]]},"1721":{"position":[[67,8],[194,8],[398,8]]},"1979":{"position":[[257,9]]},"2017":{"position":[[21,9],[83,9]]},"2021":{"position":[[983,8]]},"2099":{"position":[[751,8],[1374,8]]},"2129":{"position":[[23,8],[137,8],[264,9],[296,8],[392,8],[544,8]]},"2156":{"position":[[326,8]]},"2362":{"position":[[280,8]]}}}],["iptables(v1.8.8",{"_index":478,"t":{"1700":{"position":[[159,16]]}}}],["iptables/nft",{"_index":479,"t":{"1700":{"position":[[236,17]]}}}],["ipv4",{"_index":979,"t":{"1776":{"position":[[171,4]]},"1782":{"position":[[326,4]]},"1794":{"position":[[869,4],[1730,4]]},"1945":{"position":[[1000,6]]},"1953":{"position":[[439,4],[659,4],[1123,4],[1272,5]]},"1955":{"position":[[375,5]]},"1985":{"position":[[358,4]]}}}],["ipv4/ipv6",{"_index":219,"t":{"1662":{"position":[[2677,9],[2763,9]]},"1776":{"position":[[392,9]]},"1782":{"position":[[61,9],[140,9]]},"1794":{"position":[[1166,9],[1395,9],[1496,9],[7738,9],[7824,9]]}}}],["ipv6",{"_index":455,"t":{"1691":{"position":[[411,4]]},"1764":{"position":[[480,4]]},"1782":{"position":[[599,4],[622,4]]},"1794":{"position":[[2125,4],[2155,4]]},"1943":{"position":[[122,5]]},"1945":{"position":[[936,4],[974,4],[1037,4]]},"1953":{"position":[[193,4],[498,4],[1152,4],[1291,5],[1315,4]]},"1955":{"position":[[62,4],[343,4]]},"1983":{"position":[[201,5]]},"1985":{"position":[[434,4]]}}}],["isn't",{"_index":862,"t":{"1750":{"position":[[3648,5]]}}}],["isol",{"_index":1936,"t":{"2075":{"position":[[1179,8]]},"2077":{"position":[[465,8]]}}}],["issu",{"_index":476,"t":{"1700":{"position":[[122,5]]},"1740":{"position":[[796,5]]},"1846":{"position":[[408,6]]},"1953":{"position":[[121,5],[165,5]]},"1955":{"position":[[48,5]]},"2119":{"position":[[456,6]]}}}],["issuanc",{"_index":630,"t":{"1736":{"position":[[77,9]]},"1740":{"position":[[352,9]]}}}],["issuer",{"_index":787,"t":{"1748":{"position":[[20,6],[124,6],[607,6]]}}}],["issuer=https://kubernetes.default.svc.cluster.loc",{"_index":2446,"t":{"2231":{"position":[[2377,51]]},"2233":{"position":[[2325,51]]},"2235":{"position":[[2194,51]]},"2237":{"position":[[2143,51]]},"2239":{"position":[[2156,51]]},"2241":{"position":[[2269,51]]},"2243":{"position":[[2230,51]]},"2247":{"position":[[2303,51]]},"2249":{"position":[[2284,51]]},"2251":{"position":[[2180,51]]},"2253":{"position":[[2296,51]]},"2255":{"position":[[2161,51]]},"2257":{"position":[[2076,51]]},"2267":{"position":[[2251,51]]},"2273":{"position":[[2293,51]]},"2275":{"position":[[2209,51]]},"2277":{"position":[[2215,51]]},"2350":{"position":[[2560,51]]},"2352":{"position":[[2574,51]]},"2354":{"position":[[2689,51]]}}}],["issuer=k3",{"_index":2107,"t":{"2101":{"position":[[1581,10]]}}}],["item",{"_index":1021,"t":{"1794":{"position":[[5902,6]]},"1937":{"position":[[482,5]]}}}],["itself",{"_index":1075,"t":{"1806":{"position":[[835,7]]},"1817":{"position":[[125,7],[471,7]]},"1973":{"position":[[354,7]]},"2085":{"position":[[1084,6]]},"2159":{"position":[[1908,6]]},"2167":{"position":[[1059,6]]}}}],["jbmvl",{"_index":279,"t":{"1675":{"position":[[850,5]]}}}],["jbmvl_kube",{"_index":294,"t":{"1675":{"position":[[1128,10],[1291,10],[1632,10]]}}}],["job",{"_index":2268,"t":{"2159":{"position":[[570,4],[586,3],[705,3]]},"2163":{"position":[[1702,4],[2654,4],[2746,4]]}}}],["join",{"_index":668,"t":{"1740":{"position":[[726,4]]},"1744":{"position":[[697,6],[2377,6]]},"1746":{"position":[[537,6],[2146,6]]},"1750":{"position":[[1810,4]]},"1764":{"position":[[134,4]]},"1769":{"position":[[94,4],[263,4],[439,4]]},"1794":{"position":[[2755,4],[2929,4],[3149,4]]},"1796":{"position":[[35,4],[88,7]]},"1798":{"position":[[169,8]]},"1800":{"position":[[305,7],[653,7],[739,7],[963,8],[1282,4]]},"1802":{"position":[[91,7],[150,7]]},"1806":{"position":[[233,4]]},"1810":{"position":[[66,4],[327,4]]},"1842":{"position":[[50,4],[280,6]]},"1844":{"position":[[207,4],[241,7],[293,7]]},"1848":{"position":[[253,4],[405,4],[942,4],[983,7]]},"1850":{"position":[[345,6]]},"1906":{"position":[[1223,5]]},"1999":{"position":[[323,5],[370,4]]},"2001":{"position":[[134,7]]}}}],["journalctl",{"_index":460,"t":{"1693":{"position":[[57,10]]},"1697":{"position":[[165,10],[194,10]]},"1862":{"position":[[161,10]]},"2200":{"position":[[518,13],[735,12]]},"2223":{"position":[[200,10]]},"2231":{"position":[[430,10]]},"2233":{"position":[[413,10]]},"2235":{"position":[[287,10]]},"2237":{"position":[[253,10]]},"2239":{"position":[[266,10]]},"2241":{"position":[[357,10]]},"2243":{"position":[[264,10]]},"2247":{"position":[[330,10]]},"2249":{"position":[[352,10]]},"2251":{"position":[[248,10]]},"2253":{"position":[[383,10]]},"2255":{"position":[[244,10]]},"2257":{"position":[[195,10]]},"2267":{"position":[[325,10]]},"2271":{"position":[[648,13],[865,12]]},"2273":{"position":[[392,10]]},"2275":{"position":[[327,10]]},"2277":{"position":[[339,10]]},"2279":{"position":[[381,10]]},"2283":{"position":[[933,10]]},"2286":{"position":[[282,10]]},"2288":{"position":[[212,10]]},"2290":{"position":[[232,10]]},"2292":{"position":[[328,10]]},"2294":{"position":[[265,10]]},"2301":{"position":[[199,10]]},"2303":{"position":[[209,10]]},"2306":{"position":[[542,13],[759,12]]},"2308":{"position":[[431,13],[648,12]]},"2310":{"position":[[456,13],[673,12]]},"2312":{"position":[[608,13],[825,12]]},"2314":{"position":[[434,13],[651,12]]},"2316":{"position":[[466,13],[683,12]]},"2318":{"position":[[565,13],[782,12]]},"2324":{"position":[[79,10]]},"2350":{"position":[[497,12],[590,10]]},"2352":{"position":[[483,12],[576,10]]},"2354":{"position":[[539,12],[632,10]]},"2356":{"position":[[449,10]]},"2358":{"position":[[506,10]]},"2368":{"position":[[667,10]]}}}],["json",{"_index":1112,"t":{"1811":{"position":[[2643,4]]}}}],["k10",{"_index":1033,"t":{"1800":{"position":[[156,3]]}}}],["k3",{"_index":7,"t":{"1636":{"position":[[0,4],[400,4],[473,4]]},"1638":{"position":[[102,4],[127,4]]},"1640":{"position":[[51,3]]},"1660":{"position":[[0,3],[264,3]]},"1662":{"position":[[153,3],[187,3]]},"1664":{"position":[[7,4],[34,3]]},"1667":{"position":[[0,4],[140,3]]},"1669":{"position":[[0,3],[73,4],[136,3]]},"1671":{"position":[[6,4],[163,3]]},"1673":{"position":[[33,4],[47,3],[96,5],[132,3],[414,4],[747,4]]},"1675":{"position":[[0,4],[139,3],[182,5],[257,3],[411,4],[501,3]]},"1677":{"position":[[41,4],[84,4],[361,5]]},"1679":{"position":[[0,4]]},"1681":{"position":[[0,4],[5,3],[269,4],[332,4]]},"1685":{"position":[[85,3]]},"1687":{"position":[[40,3],[95,5],[125,3],[166,5],[417,4],[556,3]]},"1689":{"position":[[281,3],[311,3],[333,4],[358,3],[487,3],[628,3],[763,3],[857,3]]},"1691":{"position":[[5,4],[144,3],[429,3]]},"1693":{"position":[[24,3],[81,3]]},"1695":{"position":[[0,3],[341,4]]},"1697":{"position":[[179,6],[208,3]]},"1700":{"position":[[142,5],[217,4],[264,4]]},"1706":{"position":[[119,4]]},"1708":{"position":[[9,4],[63,3],[147,3],[253,3],[343,3],[369,3],[448,3],[532,4],[608,3]]},"1710":{"position":[[70,4]]},"1712":{"position":[[15,3],[64,3],[261,4],[285,3]]},"1715":{"position":[[221,4],[268,4]]},"1717":{"position":[[7,3],[54,3],[251,4]]},"1719":{"position":[[0,4]]},"1723":{"position":[[0,3],[71,3],[191,3],[217,3],[244,3],[340,3],[367,3],[393,3],[557,3],[683,3],[713,5],[765,3],[800,3],[826,3],[844,3],[892,3],[926,3],[970,4],[990,3],[1026,3],[1042,3],[1066,3],[1098,3],[1113,4],[1138,3]]},"1725":{"position":[[14,3],[76,3],[107,3],[162,5],[211,3]]},"1727":{"position":[[39,3],[102,3],[119,3]]},"1729":{"position":[[81,4],[101,3]]},"1733":{"position":[[9,3],[600,3],[750,3]]},"1736":{"position":[[0,3],[190,3]]},"1738":{"position":[[59,3],[101,3],[120,3],[146,3],[177,3],[197,3],[288,3],[434,3],[450,3]]},"1740":{"position":[[211,3],[646,3],[882,3],[1165,3],[1365,3]]},"1742":{"position":[[266,3],[364,3],[651,3],[1917,4],[2677,3]]},"1744":{"position":[[42,3],[168,3],[622,3],[2055,3],[2228,3]]},"1746":{"position":[[14,3],[65,3],[191,3],[1282,3],[1857,3],[2052,3]]},"1748":{"position":[[311,3],[1119,3],[1359,3]]},"1750":{"position":[[101,3],[590,3],[697,3],[802,3],[908,3],[995,3],[1114,3],[1160,3],[1340,3],[1427,3],[1546,3],[1605,4],[1690,3],[1746,3],[1773,3],[1797,3],[1853,3],[2606,3],[3444,3],[3644,3],[3696,3],[3954,3],[4252,3],[4524,3],[4570,3],[4904,3],[4928,3]]},"1752":{"position":[[0,3]]},"1754":{"position":[[42,3]]},"1756":{"position":[[104,3],[162,3],[253,3],[302,3],[345,3],[400,3],[433,3],[452,3],[500,3],[544,3],[658,3],[821,3],[1039,3],[1161,3],[1241,3],[1296,3],[1329,3],[1400,3],[1532,3],[1646,3]]},"1758":{"position":[[189,3],[238,3],[281,3],[336,3],[369,3],[402,3],[512,3],[560,3],[612,3],[1020,3],[1100,3],[1155,3],[1188,3],[1273,3],[1380,3],[1520,3]]},"1760":{"position":[[190,3],[472,3]]},"1762":{"position":[[51,3],[150,3]]},"1776":{"position":[[54,3]]},"1782":{"position":[[1421,4]]},"1786":{"position":[[156,3],[274,3]]},"1794":{"position":[[155,3],[197,3],[725,3],[6087,3],[6231,3]]},"1796":{"position":[[0,3]]},"1798":{"position":[[0,3]]},"1804":{"position":[[0,3]]},"1806":{"position":[[1183,3]]},"1810":{"position":[[29,3],[207,3]]},"1811":{"position":[[0,3],[108,3],[140,3],[183,3],[487,3],[591,3],[1529,3],[1819,3],[2303,3]]},"1815":{"position":[[89,3],[126,3]]},"1817":{"position":[[8,3]]},"1821":{"position":[[89,4]]},"1823":{"position":[[8,3]]},"1825":{"position":[[45,4],[424,4],[457,4],[690,4]]},"1827":{"position":[[45,4],[597,3]]},"1829":{"position":[[443,4],[777,4],[863,4],[970,4]]},"1832":{"position":[[166,3],[352,3],[386,3],[1090,3]]},"1838":{"position":[[0,3],[143,3],[232,3],[512,3],[1504,3],[1594,3]]},"1842":{"position":[[1040,3]]},"1844":{"position":[[8,3],[91,3],[449,3]]},"1846":{"position":[[161,3]]},"1848":{"position":[[7,3]]},"1850":{"position":[[129,3],[473,3]]},"1852":{"position":[[29,4]]},"1854":{"position":[[0,4]]},"1856":{"position":[[20,3]]},"1858":{"position":[[3,4]]},"1860":{"position":[[0,3]]},"1862":{"position":[[0,3],[12,4],[175,4],[306,4],[449,4]]},"1864":{"position":[[12,4]]},"1866":{"position":[[0,3],[25,3]]},"1870":{"position":[[0,4],[81,3],[117,3],[162,3],[185,3]]},"1872":{"position":[[16,4],[44,3],[90,4],[139,5],[209,4],[272,4]]},"1874":{"position":[[230,4],[322,5]]},"1878":{"position":[[88,4]]},"1880":{"position":[[60,4]]},"1882":{"position":[[16,3]]},"1886":{"position":[[156,3]]},"1890":{"position":[[91,3],[230,5],[355,3]]},"1893":{"position":[[18,4],[134,3],[169,3],[362,3],[479,3],[744,3],[812,3]]},"1895":{"position":[[16,3],[134,3],[807,4],[1284,3]]},"1898":{"position":[[163,3],[323,3],[579,3]]},"1900":{"position":[[0,3],[236,3],[308,3]]},"1902":{"position":[[72,3]]},"1904":{"position":[[118,3]]},"1906":{"position":[[75,3],[149,3],[386,3],[494,3],[575,3],[604,3],[647,3],[690,3],[783,3],[803,3],[860,3],[879,3]]},"1908":{"position":[[69,3],[119,3],[478,3]]},"1912":{"position":[[397,3],[435,3]]},"1914":{"position":[[90,4]]},"1916":{"position":[[183,3]]},"1918":{"position":[[598,3]]},"1920":{"position":[[37,3],[102,3]]},"1922":{"position":[[65,3],[83,3]]},"1924":{"position":[[5,3],[231,3]]},"1926":{"position":[[5,3],[53,3],[117,3]]},"1931":{"position":[[0,3],[351,4],[425,3]]},"1933":{"position":[[667,3],[1477,3]]},"1937":{"position":[[448,3]]},"1939":{"position":[[103,3],[501,3],[543,3],[1113,3]]},"1943":{"position":[[20,3]]},"1945":{"position":[[2057,3]]},"1947":{"position":[[111,3],[330,3],[599,3],[824,3]]},"1949":{"position":[[6,3]]},"1951":{"position":[[0,3]]},"1953":{"position":[[368,3],[694,4]]},"1955":{"position":[[398,3]]},"1957":{"position":[[2,3],[171,3],[1337,3],[1455,3]]},"1959":{"position":[[125,3],[892,4]]},"1969":{"position":[[601,3]]},"1971":{"position":[[18,3],[97,3],[122,3]]},"1973":{"position":[[0,3],[105,3],[179,3],[267,3]]},"1977":{"position":[[0,3]]},"1979":{"position":[[0,3],[334,3]]},"1981":{"position":[[270,3],[285,3],[321,3],[411,3],[544,3]]},"1983":{"position":[[4,3],[293,3],[549,4]]},"1985":{"position":[[139,3]]},"1987":{"position":[[52,3]]},"1989":{"position":[[91,3]]},"1991":{"position":[[131,3]]},"1993":{"position":[[171,3]]},"1995":{"position":[[0,3]]},"1997":{"position":[[13,3]]},"1999":{"position":[[50,3]]},"2001":{"position":[[232,3],[516,3],[559,3]]},"2003":{"position":[[61,3]]},"2007":{"position":[[16,3],[238,3],[295,3]]},"2009":{"position":[[13,3]]},"2011":{"position":[[13,3]]},"2015":{"position":[[25,4],[59,4]]},"2017":{"position":[[127,4]]},"2019":{"position":[[9,4]]},"2021":{"position":[[122,4],[359,4],[2518,4]]},"2023":{"position":[[54,3],[151,4]]},"2027":{"position":[[382,4],[714,3],[750,3],[846,4]]},"2029":{"position":[[0,5]]},"2031":{"position":[[0,3],[51,4],[325,3]]},"2035":{"position":[[0,4]]},"2043":{"position":[[16,4],[57,4],[353,3]]},"2045":{"position":[[176,4]]},"2047":{"position":[[50,4],[78,3]]},"2049":{"position":[[0,4],[115,4],[234,3],[272,3],[289,3],[375,4],[816,4],[841,3],[870,3]]},"2051":{"position":[[7,3]]},"2053":{"position":[[118,3],[291,4],[467,3],[761,3],[827,3],[871,3],[1008,3],[1414,3],[1669,5],[1686,3],[1706,4],[1729,3],[1790,4],[1872,3],[1964,3],[2081,3],[2139,3],[2260,3]]},"2055":{"position":[[90,4],[215,3],[314,3],[418,3],[499,3],[575,3],[656,3],[842,3],[869,3],[901,3]]},"2057":{"position":[[212,3],[439,3],[485,3]]},"2059":{"position":[[27,3],[208,3]]},"2061":{"position":[[303,3],[399,3]]},"2065":{"position":[[94,3],[109,3],[145,3]]},"2067":{"position":[[66,3]]},"2069":{"position":[[42,3],[61,3],[83,3]]},"2073":{"position":[[53,3]]},"2075":{"position":[[0,3],[733,3]]},"2079":{"position":[[0,3]]},"2081":{"position":[[0,3],[251,3]]},"2083":{"position":[[8,3],[67,4]]},"2085":{"position":[[88,4],[232,3],[497,3],[791,3],[1146,3]]},"2089":{"position":[[237,4]]},"2091":{"position":[[204,3],[272,3],[356,3],[478,3]]},"2093":{"position":[[32,3],[175,3],[848,3],[989,3]]},"2095":{"position":[[1075,3]]},"2097":{"position":[[92,3],[297,4],[1067,3],[1107,4],[1369,3]]},"2101":{"position":[[21,3]]},"2103":{"position":[[32,3],[242,4]]},"2105":{"position":[[565,3]]},"2107":{"position":[[664,3]]},"2109":{"position":[[545,3]]},"2111":{"position":[[385,3]]},"2113":{"position":[[560,3]]},"2115":{"position":[[546,3]]},"2117":{"position":[[770,3]]},"2119":{"position":[[563,3]]},"2121":{"position":[[371,3]]},"2123":{"position":[[334,3],[414,3]]},"2125":{"position":[[637,3]]},"2129":{"position":[[688,3]]},"2131":{"position":[[774,3]]},"2133":{"position":[[38,3]]},"2137":{"position":[[0,4],[88,3],[237,5],[320,4]]},"2139":{"position":[[0,4]]},"2145":{"position":[[31,4]]},"2154":{"position":[[32,3],[68,3],[188,3],[229,4],[310,3],[374,5],[654,3]]},"2156":{"position":[[48,3],[89,3],[132,3],[183,3],[259,3]]},"2159":{"position":[[15,3],[399,3],[1057,3],[1149,3],[1305,3],[1448,3],[1621,4],[1688,3],[1749,4]]},"2163":{"position":[[388,3],[1951,4],[2263,4]]},"2165":{"position":[[16,3]]},"2167":{"position":[[742,3],[900,4]]},"2169":{"position":[[11,3]]},"2171":{"position":[[23,4],[64,3],[178,3],[204,3]]},"2173":{"position":[[11,3],[139,3],[194,3],[253,3],[306,3]]},"2176":{"position":[[46,3],[170,4],[350,3],[481,3],[931,3],[1102,3],[1192,3],[1309,3],[1614,3],[1781,3]]},"2200":{"position":[[345,3],[555,3],[771,3]]},"2223":{"position":[[234,3]]},"2231":{"position":[[464,3],[679,3]]},"2233":{"position":[[447,3],[627,3]]},"2235":{"position":[[321,3],[496,3]]},"2237":{"position":[[287,3],[445,3]]},"2239":{"position":[[300,3],[458,3]]},"2241":{"position":[[391,3],[571,3]]},"2243":{"position":[[298,3],[532,3]]},"2247":{"position":[[364,3],[605,3]]},"2249":{"position":[[386,3],[586,3]]},"2251":{"position":[[282,3],[482,3]]},"2253":{"position":[[417,3],[598,3]]},"2255":{"position":[[278,3],[463,3]]},"2257":{"position":[[229,3],[378,3]]},"2267":{"position":[[359,3],[553,3]]},"2271":{"position":[[475,3],[685,3],[901,3]]},"2273":{"position":[[426,3],[595,3],[2771,3]]},"2275":{"position":[[361,3],[511,3]]},"2277":{"position":[[373,3],[517,3]]},"2279":{"position":[[415,3]]},"2283":{"position":[[967,3]]},"2286":{"position":[[316,3]]},"2288":{"position":[[246,3],[404,3]]},"2290":{"position":[[266,3],[472,3]]},"2292":{"position":[[362,3],[557,3]]},"2294":{"position":[[299,3],[454,3]]},"2301":{"position":[[233,3],[363,3]]},"2303":{"position":[[243,3],[437,3]]},"2306":{"position":[[369,3],[579,3],[795,3]]},"2308":{"position":[[258,3],[468,3],[684,3]]},"2310":{"position":[[283,3],[493,3],[709,3]]},"2312":{"position":[[435,3],[645,3],[861,3]]},"2314":{"position":[[261,3],[471,3],[687,3]]},"2316":{"position":[[293,3],[503,3],[719,3]]},"2318":{"position":[[392,3],[602,3],[818,3]]},"2324":{"position":[[113,3]]},"2350":{"position":[[533,3],[624,3],[862,3]]},"2352":{"position":[[519,3],[610,3],[876,3]]},"2354":{"position":[[575,3],[666,3],[991,3]]},"2356":{"position":[[483,3],[668,3],[1891,3]]},"2358":{"position":[[540,3]]},"2368":{"position":[[701,3],[859,3],[2082,3]]}}}],["k3d",{"_index":524,"t":{"1708":{"position":[[37,3],[48,4],[99,4],[175,3]]}}}],["k3s.servic",{"_index":2065,"t":{"2097":{"position":[[1474,11]]}}}],["k3s1",{"_index":530,"t":{"1708":{"position":[[423,4]]}}}],["k3s[1592",{"_index":2537,"t":{"2356":{"position":[[701,10]]},"2368":{"position":[[892,10]]}}}],["k3s[1600",{"_index":2432,"t":{"2231":{"position":[[712,10]]},"2233":{"position":[[660,10]]},"2235":{"position":[[529,10]]},"2237":{"position":[[478,10]]},"2239":{"position":[[491,10]]},"2241":{"position":[[604,10]]},"2243":{"position":[[565,10]]},"2247":{"position":[[638,10]]},"2249":{"position":[[619,10]]},"2251":{"position":[[515,10]]},"2253":{"position":[[631,10]]},"2255":{"position":[[496,10]]},"2257":{"position":[[411,10]]},"2267":{"position":[[586,10]]},"2273":{"position":[[628,10],[2804,10]]},"2275":{"position":[[544,10]]},"2277":{"position":[[550,10]]},"2288":{"position":[[437,10]]},"2290":{"position":[[505,10]]},"2292":{"position":[[590,10]]},"2294":{"position":[[487,10]]},"2301":{"position":[[396,10]]},"2303":{"position":[[470,10]]},"2350":{"position":[[895,10]]},"2352":{"position":[[909,10]]},"2354":{"position":[[1024,10]]},"2356":{"position":[[1924,10]]},"2368":{"position":[[2115,10]]}}}],["k3s_",{"_index":1375,"t":{"1904":{"position":[[219,4]]},"1906":{"position":[[521,4]]},"2053":{"position":[[2544,4]]}}}],["k3s_agent_token",{"_index":963,"t":{"1769":{"position":[[225,15]]},"1794":{"position":[[2973,18]]},"1804":{"position":[[240,15]]}}}],["k3s_agent_token_fil",{"_index":964,"t":{"1769":{"position":[[332,20]]},"1794":{"position":[[3060,23]]}}}],["k3s_cluster_init",{"_index":965,"t":{"1769":{"position":[[469,16]]},"1794":{"position":[[3245,19]]}}}],["k3s_cluster_reset",{"_index":842,"t":{"1750":{"position":[[2485,21]]},"1769":{"position":[[547,17]]},"1794":{"position":[[3348,20]]}}}],["k3s_cluster_secret",{"_index":173,"t":{"1658":{"position":[[105,18]]},"1792":{"position":[[141,18]]}}}],["k3s_config_fil",{"_index":201,"t":{"1662":{"position":[[319,18]]},"1794":{"position":[[330,18]]},"1908":{"position":[[1229,17]]}}}],["k3s_datastore_cafil",{"_index":944,"t":{"1767":{"position":[[181,20]]},"1794":{"position":[[4098,23]]},"1827":{"position":[[423,20]]}}}],["k3s_datastore_certfil",{"_index":947,"t":{"1767":{"position":[[307,22]]},"1794":{"position":[[4224,25]]},"1827":{"position":[[651,22]]}}}],["k3s_datastore_endpoint",{"_index":941,"t":{"1767":{"position":[[65,22]]},"1794":{"position":[[3964,25]]},"1827":{"position":[[261,22]]}}}],["k3s_datastore_endpoint='mysql://username:password@tcp(hostname:3306)/databas",{"_index":1350,"t":{"1895":{"position":[[1182,77]]}}}],["k3s_datastore_keyfil",{"_index":949,"t":{"1767":{"position":[[426,21]]},"1794":{"position":[[4341,24]]},"1827":{"position":[[849,21]]}}}],["k3s_debug",{"_index":204,"t":{"1662":{"position":[[375,12]]},"1794":{"position":[[386,12]]}}}],["k3s_kubeconfig_mod",{"_index":968,"t":{"1771":{"position":[[172,19]]},"1794":{"position":[[2676,22]]}}}],["k3s_kubeconfig_mode=\"644",{"_index":1396,"t":{"1906":{"position":[[549,25]]},"1912":{"position":[[277,25],[409,25]]}}}],["k3s_kubeconfig_output",{"_index":967,"t":{"1771":{"position":[[73,21]]},"1794":{"position":[[2580,24]]}}}],["k3s_lb_server_port",{"_index":117,"t":{"1648":{"position":[[457,18]]},"1662":{"position":[[1945,21]]},"1794":{"position":[[9047,21]]}}}],["k3s_node_nam",{"_index":99,"t":{"1648":{"position":[[56,13]]},"1662":{"position":[[1048,16]]},"1794":{"position":[[6373,16]]},"1975":{"position":[[278,14]]},"2045":{"position":[[131,16],[148,15]]},"2049":{"position":[[1007,13]]}}}],["k3s_resolv_conf",{"_index":150,"t":{"1652":{"position":[[192,15]]},"1662":{"position":[[2881,18]]},"1794":{"position":[[7942,18]]}}}],["k3s_rootless_cidr",{"_index":450,"t":{"1691":{"position":[[281,17]]}}}],["k3s_rootless_disable_host_loopback",{"_index":458,"t":{"1691":{"position":[[592,34]]}}}],["k3s_rootless_enable_ipv6",{"_index":453,"t":{"1691":{"position":[[353,24]]}}}],["k3s_rootless_mtu",{"_index":447,"t":{"1691":{"position":[[225,16]]}}}],["k3s_rootless_port_driv",{"_index":456,"t":{"1691":{"position":[[464,24]]}}}],["k3s_selinux",{"_index":114,"t":{"1648":{"position":[[393,11]]},"1662":{"position":[[1681,14]]},"1794":{"position":[[8783,14]]}}}],["k3s_system_default_registri",{"_index":1022,"t":{"1794":{"position":[[7662,30]]}}}],["k3s_token",{"_index":84,"t":{"1644":{"position":[[62,9]]},"1662":{"position":[[748,12]]},"1769":{"position":[[62,9]]},"1794":{"position":[[52,13],[2791,12]]},"1804":{"position":[[210,9]]},"1842":{"position":[[203,9]]},"2049":{"position":[[637,9],[885,10]]},"2053":{"position":[[2731,9]]}}}],["k3s_token=\"mypassword",{"_index":1387,"t":{"1904":{"position":[[1530,22]]}}}],["k3s_token=12345",{"_index":1383,"t":{"1904":{"position":[[941,15],[996,15]]}}}],["k3s_token=<your_token",{"_index":1342,"t":{"1895":{"position":[[373,22]]}}}],["k3s_token=mynodetoken",{"_index":1833,"t":{"2049":{"position":[[764,21]]}}}],["k3s_token=mypassword",{"_index":1389,"t":{"1904":{"position":[[1753,20]]}}}],["k3s_token=secret",{"_index":1214,"t":{"1844":{"position":[[432,16]]},"1848":{"position":[[324,16],[510,16]]}}}],["k3s_token_fil",{"_index":86,"t":{"1644":{"position":[[123,14]]},"1662":{"position":[[827,17]]},"1769":{"position":[[149,14]]},"1794":{"position":[[2859,17]]}}}],["k3s_url",{"_index":88,"t":{"1644":{"position":[[200,7]]},"1662":{"position":[[52,11],[901,10]]},"1769":{"position":[[401,7]]},"1794":{"position":[[3164,10]]},"1904":{"position":[[1096,7],[1812,7]]},"1957":{"position":[[831,7]]},"2049":{"position":[[627,7],[791,7]]},"2053":{"position":[[1475,7],[1522,7],[2619,7]]}}}],["k3s_url=https://<server_ip>:6443",{"_index":1341,"t":{"1895":{"position":[[340,32]]}}}],["k3s_url=https://k3s.example.com",{"_index":1388,"t":{"1904":{"position":[[1625,31],[1721,31]]}}}],["k3s_url=https://myserver:6443",{"_index":1832,"t":{"2049":{"position":[[734,29]]}}}],["k8",{"_index":6,"t":{"1634":{"position":[[106,3],[110,3]]},"1638":{"position":[[62,3]]},"2095":{"position":[[878,3],[1441,3],[2124,3]]}}}],["k8s.io",{"_index":465,"t":{"1695":{"position":[[244,6]]},"2225":{"position":[[777,6],[1059,6],[1341,6],[1623,6],[1905,6],[2187,6],[2469,6]]},"2227":{"position":[[758,6],[1040,6],[1322,6],[1604,6],[1886,6],[2168,6],[2450,6]]},"2245":{"position":[[771,6],[1053,6],[1335,6],[1617,6],[1899,6],[2181,6],[2463,6]]},"2298":{"position":[[743,6],[1025,6],[1307,6],[1589,6],[1871,6],[2153,6],[2435,6]]}}}],["k8s_coredns_coredn",{"_index":342,"t":{"1675":{"position":[[2322,19]]}}}],["k8s_lb",{"_index":292,"t":{"1675":{"position":[[1098,6],[1262,6]]}}}],["k8s_local",{"_index":321,"t":{"1675":{"position":[[1936,9]]}}}],["k8s_metric",{"_index":331,"t":{"1675":{"position":[[2134,11]]}}}],["k8s_pod_coredn",{"_index":350,"t":{"1675":{"position":[[2486,15]]}}}],["k8s_pod_loc",{"_index":352,"t":{"1675":{"position":[[2646,13]]}}}],["k8s_pod_svclb",{"_index":315,"t":{"1675":{"position":[[1610,13]]}}}],["k8s_pod_traefik",{"_index":317,"t":{"1675":{"position":[[1766,15]]}}}],["k8s_traefik_traefik",{"_index":306,"t":{"1675":{"position":[[1445,19]]}}}],["keep",{"_index":2185,"t":{"2113":{"position":[[354,4]]},"2115":{"position":[[340,4]]}}}],["kep",{"_index":469,"t":{"1695":{"position":[[580,3]]}}}],["kernel",{"_index":108,"t":{"1648":{"position":[[269,6],[289,6],[330,6]]},"1662":{"position":[[1977,6],[2006,6],[2047,6]]},"1794":{"position":[[8355,6],[8384,6],[8425,6]]},"1945":{"position":[[683,6],[770,6],[1368,6],[1656,6],[1920,6]]},"1947":{"position":[[195,7]]},"2021":{"position":[[421,6]]},"2087":{"position":[[48,6]]},"2089":{"position":[[75,6],[186,6],[246,6]]},"2099":{"position":[[189,6],[786,6]]},"2101":{"position":[[4043,6]]},"2360":{"position":[[333,6]]}}}],["kernel.keys.root_maxbytes=25000000",{"_index":1978,"t":{"2089":{"position":[[473,34]]}}}],["kernel.panic=10",{"_index":1976,"t":{"2089":{"position":[[434,15]]}}}],["kernel.panic_on_oops=1",{"_index":1977,"t":{"2089":{"position":[[450,22]]}}}],["key",{"_index":654,"t":{"1740":{"position":[[435,4],[484,4],[612,4],[868,5],[1000,4],[1088,3],[1133,4],[1243,5]]},"1742":{"position":[[23,4],[241,4],[1096,3],[1896,4],[2503,5]]},"1744":{"position":[[359,4],[495,4],[1167,5],[1702,4],[1874,5],[2030,4]]},"1746":{"position":[[382,4],[1224,4],[1507,5]]},"1748":{"position":[[27,3],[49,3],[131,4],[153,3],[416,5],[528,3],[614,4],[844,3],[953,3],[1096,3]]},"1750":{"position":[[3196,3],[3210,3],[3231,3],[3245,3],[3529,4],[3563,4],[3871,4],[3910,4],[4662,4],[4696,4]]},"1754":{"position":[[195,4],[233,4],[321,4]]},"1756":{"position":[[61,4],[787,4]]},"1760":{"position":[[324,3],[429,5],[636,3],[1466,3],[1529,4],[1601,4],[1659,3],[1713,3],[1727,4],[1815,4]]},"1767":{"position":[[452,3],[1364,3],[1402,3],[1423,3],[1465,3]]},"1794":{"position":[[4285,3],[5294,3],[5319,3],[5361,3],[5386,3]]},"1806":{"position":[[542,3],[679,5],[697,4]]},"1908":{"position":[[678,4]]},"1910":{"position":[[253,3],[298,3]]},"1965":{"position":[[288,3]]},"1967":{"position":[[435,3],[694,3]]},"2079":{"position":[[177,3],[235,3],[729,7]]},"2081":{"position":[[157,4],[195,4]]},"2101":{"position":[[1194,3],[1610,3],[1698,3],[1913,3],[2466,3],[2739,3],[4302,3]]},"2121":{"position":[[116,3]]},"2163":{"position":[[586,4],[934,4]]},"2200":{"position":[[1782,3],[1893,3]]},"2231":{"position":[[288,3],[413,3],[631,4],[1999,3],[2447,3],[2526,3],[2770,3]]},"2233":{"position":[[1947,3],[2395,3],[2474,3],[2718,3]]},"2235":{"position":[[1816,3],[2264,3],[2343,3],[2587,3]]},"2237":{"position":[[1765,3],[2213,3],[2292,3],[2536,3]]},"2239":{"position":[[1778,3],[2226,3],[2305,3],[2549,3]]},"2241":{"position":[[1891,3],[2339,3],[2418,3],[2662,3]]},"2243":{"position":[[1852,3],[2300,3],[2379,3],[2623,3]]},"2247":{"position":[[1925,3],[2373,3],[2452,3],[2696,3]]},"2249":{"position":[[1906,3],[2354,3],[2433,3],[2677,3]]},"2251":{"position":[[1802,3],[2250,3],[2329,3],[2573,3]]},"2253":{"position":[[1918,3],[2366,3],[2445,3],[2689,3]]},"2255":{"position":[[1783,3],[2231,3],[2310,3],[2554,3]]},"2257":{"position":[[1698,3],[2146,3],[2225,3],[2469,3]]},"2267":{"position":[[1873,3],[2321,3],[2400,3],[2644,3]]},"2269":{"position":[[181,3],[214,3],[276,3]]},"2271":{"position":[[278,3],[380,3],[1912,3],[2023,3]]},"2273":{"position":[[271,3],[353,3],[375,3],[542,3],[1915,3],[2363,3],[2442,3],[2686,3]]},"2275":{"position":[[1831,3],[2279,3],[2358,3],[2602,3]]},"2277":{"position":[[1837,3],[2285,3],[2364,3],[2608,3]]},"2288":{"position":[[972,3],[1149,3],[1328,3],[1505,3],[1885,3]]},"2290":{"position":[[1040,3],[1217,3],[1396,3],[1573,3],[1953,3]]},"2292":{"position":[[196,3],[230,3],[300,3],[450,3],[504,3],[1125,3],[1302,3],[1481,3],[1658,3],[2038,3]]},"2294":{"position":[[1022,3],[1199,3],[1378,3],[1555,3],[1935,3]]},"2306":{"position":[[255,3],[1806,3],[1917,3],[2138,4],[2190,3],[2265,3],[2344,3]]},"2308":{"position":[[1695,3],[1806,3]]},"2310":{"position":[[1720,3],[1831,3]]},"2312":{"position":[[316,3],[340,3],[1872,3],[1983,3],[2204,4],[2266,3],[2346,3],[2440,3]]},"2314":{"position":[[1698,3],[1809,3]]},"2316":{"position":[[1730,3],[1841,3]]},"2318":{"position":[[1829,3],[1940,3]]},"2350":{"position":[[2182,3],[2630,3],[2709,3],[2953,3]]},"2352":{"position":[[2196,3],[2644,3],[2723,3],[2967,3]]},"2354":{"position":[[2311,3],[2759,3],[2838,3],[3082,3]]},"2356":{"position":[[1818,3],[3041,3]]},"2368":{"position":[[231,3],[506,3],[528,3],[806,3],[2009,3],[3232,3]]}}}],["key1=value1:noexecut",{"_index":189,"t":{"1660":{"position":[[400,21]]}}}],["key=/var/lib/rancher/k3s/server/tls/cli",{"_index":2094,"t":{"2101":{"position":[[1011,42]]},"2231":{"position":[[1760,42]]},"2233":{"position":[[1708,42]]},"2235":{"position":[[1577,42]]},"2237":{"position":[[1526,42]]},"2239":{"position":[[1539,42]]},"2241":{"position":[[1652,42]]},"2243":{"position":[[1613,42]]},"2247":{"position":[[1686,42]]},"2249":{"position":[[1667,42]]},"2251":{"position":[[1563,42]]},"2253":{"position":[[1679,42]]},"2255":{"position":[[1544,42]]},"2257":{"position":[[1459,42]]},"2267":{"position":[[1634,42]]},"2273":{"position":[[1676,42]]},"2275":{"position":[[1592,42]]},"2277":{"position":[[1598,42]]},"2350":{"position":[[1943,42]]},"2352":{"position":[[1957,42]]},"2354":{"position":[[2072,42]]}}}],["key=/var/lib/rancher/k3s/server/tls/etcd/client.key",{"_index":373,"t":{"1677":{"position":[[557,51]]}}}],["key=<path/to/cli",{"_index":2424,"t":{"2231":{"position":[[393,19]]}}}],["key=<s3",{"_index":859,"t":{"1750":{"position":[[3514,7],[3548,7],[3856,7],[3895,7],[4647,7],[4681,7]]}}}],["key_fil",{"_index":1648,"t":{"1965":{"position":[[268,8]]},"1967":{"position":[[411,9],[670,9]]}}}],["keyfil",{"_index":948,"t":{"1767":{"position":[[412,7]]},"1794":{"position":[[4262,7]]},"1827":{"position":[[805,7],[841,7]]},"2200":{"position":[[1744,10]]},"2271":{"position":[[1874,10],[2261,8],[2324,7]]},"2306":{"position":[[1768,10]]},"2308":{"position":[[1657,10]]},"2310":{"position":[[1682,10]]},"2312":{"position":[[1834,10]]},"2314":{"position":[[1660,10]]},"2316":{"position":[[1692,10]]},"2318":{"position":[[1791,10]]}}}],["keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key",{"_index":2087,"t":{"2101":{"position":[[699,55]]},"2231":{"position":[[1437,55]]},"2233":{"position":[[1385,55]]},"2235":{"position":[[1254,55]]},"2237":{"position":[[1203,55]]},"2239":{"position":[[1216,55]]},"2241":{"position":[[1329,55]]},"2243":{"position":[[1290,55]]},"2247":{"position":[[1363,55]]},"2249":{"position":[[1344,55]]},"2251":{"position":[[1240,55]]},"2253":{"position":[[1356,55]]},"2255":{"position":[[1221,55]]},"2257":{"position":[[1136,55]]},"2267":{"position":[[1311,55]]},"2273":{"position":[[1353,55]]},"2275":{"position":[[1269,55]]},"2277":{"position":[[1275,55]]},"2350":{"position":[[1620,55]]},"2352":{"position":[[1634,55]]},"2354":{"position":[[1749,55]]}}}],["keyfile=<path/to/cli",{"_index":2465,"t":{"2271":{"position":[[356,23]]}}}],["kib/sec",{"_index":1919,"t":{"2067":{"position":[[360,7]]},"2069":{"position":[[325,7]]}}}],["kill",{"_index":894,"t":{"1756":{"position":[[281,4],[479,4],[1189,4],[1356,4],[1427,4],[1482,4],[1676,4],[1731,4]]},"1758":{"position":[[217,4],[539,4],[1048,4],[1215,4],[1407,4],[1462,4]]}}}],["killal",{"_index":2263,"t":{"2156":{"position":[[222,7],[421,7]]}}}],["killall.sh",{"_index":1831,"t":{"2049":{"position":[[276,10]]},"2156":{"position":[[187,10],[480,10]]}}}],["kind",{"_index":395,"t":{"1681":{"position":[[640,5],[717,5]]},"1717":{"position":[[295,5]]},"1876":{"position":[[287,5],[357,5]]},"1878":{"position":[[493,5]]},"1918":{"position":[[188,5],[339,5],[436,5],[486,5]]},"2021":{"position":[[1257,5],[1387,5],[1802,5]]},"2079":{"position":[[576,7]]},"2093":{"position":[[451,5],[581,5],[1388,5],[2575,5],[3136,5],[3588,5],[4044,5],[4249,5],[4472,5],[4667,5],[4776,5],[4831,5],[4951,5],[5078,5],[5178,5],[5254,5],[5401,5],[5501,5],[5587,5],[5711,5],[5761,5],[5798,5],[6001,5],[6196,5]]},"2095":{"position":[[311,5],[692,5],[1325,5],[1539,5],[1780,5],[2008,5],[2222,5],[2463,5]]},"2097":{"position":[[758,5]]},"2141":{"position":[[15,5]]},"2143":{"position":[[15,5]]},"2147":{"position":[[15,5]]},"2149":{"position":[[15,5]]},"2163":{"position":[[453,5],[802,5],[2301,5]]}}}],["kine",{"_index":1923,"t":{"2075":{"position":[[91,5]]}}}],["kine/sqlit",{"_index":1863,"t":{"2055":{"position":[[176,11]]},"2067":{"position":[[380,11]]},"2069":{"position":[[345,11]]}}}],["klipper",{"_index":30,"t":{"1636":{"position":[[553,7]]},"2023":{"position":[[35,7]]},"2031":{"position":[[90,7]]},"2059":{"position":[[250,7]]}}}],["klog",{"_index":1262,"t":{"1862":{"position":[[425,6]]}}}],["km",{"_index":2199,"t":{"2123":{"position":[[215,5]]},"2281":{"position":[[130,3]]}}}],["know",{"_index":1172,"t":{"1838":{"position":[[236,5]]}}}],["known",{"_index":1041,"t":{"1800":{"position":[[533,5]]},"1806":{"position":[[1037,5]]},"1953":{"position":[[115,5]]},"1955":{"position":[[42,5]]}}}],["konnect",{"_index":1565,"t":{"1951":{"position":[[465,12]]}}}],["kr/installation/packag",{"_index":1267,"t":{"1874":{"position":[[463,29]]}}}],["ksl",{"_index":389,"t":{"1681":{"position":[[310,3]]}}}],["kube",{"_index":158,"t":{"1654":{"position":[[75,4],[116,4]]},"1662":{"position":[[3210,4],[3265,4]]},"1675":{"position":[[580,4],[649,4],[711,4],[770,4],[824,4],[874,4]]},"1721":{"position":[[216,4],[264,4]]},"1723":{"position":[[275,4],[317,4]]},"1733":{"position":[[391,4]]},"1738":{"position":[[507,4]]},"1782":{"position":[[755,5]]},"1786":{"position":[[203,4],[230,4]]},"1788":{"position":[[69,4],[114,4],[139,4],[184,4],[209,4],[263,4],[297,4],[357,4],[453,4],[494,4]]},"1794":{"position":[[2474,5],[3448,4],[3501,4],[3584,4],[3646,4],[3680,4],[3733,4],[3758,4],[3826,4],[6134,4],[6174,4],[8271,4],[8326,4]]},"1842":{"position":[[799,4]]},"1848":{"position":[[1337,4]]},"1876":{"position":[[139,4],[407,4]]},"1878":{"position":[[550,4]]},"1893":{"position":[[563,4]]},"1929":{"position":[[364,4],[550,4]]},"1939":{"position":[[775,4],[844,4],[906,4]]},"1951":{"position":[[875,4],[1177,4]]},"2021":{"position":[[197,4],[468,4],[816,4],[1099,4],[1619,5],[3145,4]]},"2029":{"position":[[43,4],[79,4]]},"2033":{"position":[[80,4]]},"2093":{"position":[[189,4],[813,5],[1003,4],[5344,4],[5654,4],[5894,4],[5985,4],[6292,4],[6383,4],[6488,4]]},"2095":{"position":[[407,4],[498,4],[887,4],[1397,4],[1617,4],[1858,4],[2080,4],[2300,4],[2541,4]]},"2097":{"position":[[868,4],[949,4],[1207,4],[1290,4]]},"2099":{"position":[[236,4],[584,4],[833,4],[1207,4]]},"2101":{"position":[[172,4],[975,4],[1054,4],[1871,4],[1962,4],[2242,4],[2847,4]]},"2105":{"position":[[533,4]]},"2107":{"position":[[632,4]]},"2109":{"position":[[513,4]]},"2111":{"position":[[353,4]]},"2113":{"position":[[528,4]]},"2115":{"position":[[514,4]]},"2117":{"position":[[738,4]]},"2119":{"position":[[531,4]]},"2125":{"position":[[605,4]]},"2129":{"position":[[656,4]]},"2131":{"position":[[716,5],[730,4],[743,4]]},"2200":{"position":[[791,4]]},"2223":{"position":[[254,4]]},"2231":{"position":[[484,4],[775,4],[1724,4],[1803,4],[2737,4],[2819,4]]},"2233":{"position":[[467,4],[723,4],[1672,4],[1751,4],[2685,4],[2767,4]]},"2235":{"position":[[341,4],[592,4],[1541,4],[1620,4],[2554,4],[2636,4]]},"2237":{"position":[[307,4],[541,4],[1490,4],[1569,4],[2503,4],[2585,4]]},"2239":{"position":[[320,4],[554,4],[1503,4],[1582,4],[2516,4],[2598,4]]},"2241":{"position":[[411,4],[667,4],[1616,4],[1695,4],[2629,4],[2711,4]]},"2243":{"position":[[318,4],[628,4],[1577,4],[1656,4],[2590,4],[2672,4]]},"2247":{"position":[[384,4],[701,4],[1650,4],[1729,4],[2663,4],[2745,4]]},"2249":{"position":[[406,4],[682,4],[1631,4],[1710,4],[2644,4],[2726,4]]},"2251":{"position":[[302,4],[578,4],[1527,4],[1606,4],[2540,4],[2622,4]]},"2253":{"position":[[437,4],[694,4],[1643,4],[1722,4],[2656,4],[2738,4]]},"2255":{"position":[[298,4],[559,4],[1508,4],[1587,4],[2521,4],[2603,4]]},"2257":{"position":[[249,4],[474,4],[1423,4],[1502,4],[2436,4],[2518,4]]},"2267":{"position":[[379,4],[649,4],[1598,4],[1677,4],[2611,4],[2693,4]]},"2271":{"position":[[921,4]]},"2273":{"position":[[450,4],[691,4],[1640,4],[1719,4],[2653,4],[2735,4],[2867,4]]},"2275":{"position":[[381,4],[607,4],[1556,4],[1635,4],[2569,4],[2651,4]]},"2277":{"position":[[393,4],[613,4],[1562,4],[1641,4],[2575,4],[2657,4]]},"2279":{"position":[[435,4]]},"2283":{"position":[[987,4]]},"2286":{"position":[[336,4]]},"2288":{"position":[[266,4],[500,4],[854,4],[950,4]]},"2290":{"position":[[286,4],[568,4],[922,4],[1018,4]]},"2292":{"position":[[382,4],[653,4],[1007,4],[1103,4]]},"2294":{"position":[[319,4],[550,4],[904,4],[1000,4]]},"2301":{"position":[[253,4],[459,4]]},"2303":{"position":[[263,4],[533,4]]},"2306":{"position":[[815,4]]},"2308":{"position":[[704,4]]},"2310":{"position":[[729,4]]},"2312":{"position":[[881,4]]},"2314":{"position":[[707,4]]},"2316":{"position":[[739,4]]},"2318":{"position":[[838,4]]},"2324":{"position":[[133,4]]},"2350":{"position":[[553,4],[644,4],[958,4],[1907,4],[1986,4],[2920,4],[3002,4]]},"2352":{"position":[[539,4],[630,4],[972,4],[1921,4],[2000,4],[2934,4],[3016,4]]},"2354":{"position":[[595,4],[686,4],[1087,4],[2036,4],[2115,4],[3049,4],[3131,4]]}}}],["kube/config",{"_index":535,"t":{"1708":{"position":[[647,14]]},"1815":{"position":[[46,15]]}}}],["kubeadm",{"_index":227,"t":{"1671":{"position":[[124,7]]},"1811":{"position":[[68,7]]}}}],["kubeadm.conf",{"_index":2514,"t":{"2329":{"position":[[191,12]]},"2331":{"position":[[197,12]]},"2350":{"position":[[226,12]]},"2352":{"position":[[212,12]]},"2354":{"position":[[255,12]]},"2356":{"position":[[202,12]]},"2358":{"position":[[239,12]]},"2360":{"position":[[224,12]]},"2362":{"position":[[225,12]]},"2364":{"position":[[107,12]]},"2366":{"position":[[223,12]]},"2368":{"position":[[345,12]]},"2370":{"position":[[279,12]]},"2372":{"position":[[107,12]]},"2374":{"position":[[528,12]]}}}],["kubeapi",{"_index":1942,"t":{"2079":{"position":[[262,7]]}}}],["kubeconfig",{"_index":532,"t":{"1708":{"position":[[550,11]]},"1723":{"position":[[468,10],[532,11]]},"1771":{"position":[[46,10],[101,10],[150,10],[198,10],[229,10]]},"1794":{"position":[[2497,10],[2539,10],[2613,10],[2650,10]]},"1811":{"position":[[980,10],[1028,13],[1757,10],[1805,13],[2241,10],[2289,13],[2530,10],[2578,13]]},"1813":{"position":[[31,10],[135,10],[166,10],[192,10],[251,10],[386,10],[422,10],[492,10]]},"1840":{"position":[[756,10]]},"1874":{"position":[[286,10]]},"1880":{"position":[[215,11]]},"1906":{"position":[[623,10]]},"1908":{"position":[[315,10],[499,10]]},"1910":{"position":[[517,10],[571,10],[677,10]]},"1912":{"position":[[502,10]]},"2049":{"position":[[354,10]]}}}],["kubeconfig=/etc/rancher/k3s/k3s.yaml",{"_index":1114,"t":{"1813":{"position":[[283,36]]}}}],["kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig",{"_index":2152,"t":{"2101":{"position":[[3860,56]]},"2356":{"position":[[1399,56],[2622,56]]},"2368":{"position":[[1590,56],[2813,56]]}}}],["kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig",{"_index":2119,"t":{"2101":{"position":[[2523,65]]},"2288":{"position":[[568,65],[650,65],[1694,65]]},"2290":{"position":[[636,65],[718,65],[1762,65]]},"2292":{"position":[[721,65],[803,65],[1847,65]]},"2294":{"position":[[618,65],[700,65],[1744,65]]}}}],["kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig",{"_index":2126,"t":{"2101":{"position":[[2917,64]]},"2273":{"position":[[2899,64],[2980,64],[3130,64]]},"2301":{"position":[[491,64],[572,64],[722,64]]},"2303":{"position":[[565,64],[646,64],[796,64]]}}}],["kubeconfig=~/.kube/k3s.yaml",{"_index":439,"t":{"1689":{"position":[[648,27]]}}}],["kubectl",{"_index":191,"t":{"1660":{"position":[[506,8]]},"1675":{"position":[[505,7]]},"1683":{"position":[[110,7]]},"1689":{"position":[[676,7]]},"1695":{"position":[[636,8]]},"1723":{"position":[[397,7],[410,7]]},"1782":{"position":[[1135,7],[1152,7]]},"1813":{"position":[[80,7],[320,7],[412,7]]},"1815":{"position":[[117,8]]},"1838":{"position":[[1598,7]]},"1848":{"position":[[670,7]]},"1900":{"position":[[434,7]]},"1916":{"position":[[187,7]]},"1918":{"position":[[602,7]]},"1920":{"position":[[41,7],[106,7]]},"1922":{"position":[[87,7]]},"1924":{"position":[[9,7],[235,7]]},"1926":{"position":[[9,7],[57,7],[121,7]]},"1929":{"position":[[141,7],[472,7],[529,7]]},"1939":{"position":[[714,7]]},"1951":{"position":[[1000,7],[1017,7]]},"2001":{"position":[[448,7],[468,7]]},"2021":{"position":[[2671,7],[2780,7],[3127,7]]},"2049":{"position":[[250,8],[384,8]]},"2053":{"position":[[547,8]]},"2143":{"position":[[322,7],[349,7],[400,7],[415,7]]},"2145":{"position":[[161,7],[326,7],[353,7]]},"2149":{"position":[[336,7],[351,7]]},"2161":{"position":[[218,7]]},"2163":{"position":[[2663,8],[2672,7],[2716,7]]},"2377":{"position":[[314,7]]}}}],["kubelet",{"_index":105,"t":{"1648":{"position":[[170,7],[232,7],[365,7]]},"1652":{"position":[[208,7]]},"1654":{"position":[[19,7],[57,7]]},"1660":{"position":[[112,8]]},"1662":{"position":[[1173,7],[1244,7],[2082,7],[2856,7],[3140,7],[3192,7]]},"1673":{"position":[[116,8],[752,8]]},"1675":{"position":[[65,8],[79,8]]},"1683":{"position":[[49,8],[154,8]]},"1689":{"position":[[128,8]]},"1695":{"position":[[60,8]]},"1723":{"position":[[307,7]]},"1725":{"position":[[254,8]]},"1738":{"position":[[498,8]]},"1782":{"position":[[1034,7]]},"1788":{"position":[[397,7],[435,7]]},"1794":{"position":[[6498,7],[6569,7],[7917,7],[8201,7],[8253,7],[8460,7]]},"1895":{"position":[[1335,9]]},"1951":{"position":[[169,8],[257,7],[786,8],[857,8],[1101,9],[1159,8],[1310,8],[1647,8]]},"1953":{"position":[[394,7],[458,7]]},"1983":{"position":[[388,7]]},"1985":{"position":[[271,7]]},"2021":{"position":[[921,7]]},"2049":{"position":[[465,7]]},"2057":{"position":[[473,7]]},"2061":{"position":[[526,7]]},"2089":{"position":[[10,7],[43,7]]},"2099":{"position":[[689,7],[1312,7]]},"2101":{"position":[[831,7],[909,7],[996,7],[3037,7],[3919,7]]},"2129":{"position":[[79,8],[233,8]]},"2229":{"position":[[168,7]]},"2231":{"position":[[118,9],[257,7],[315,7],[378,7],[518,8],[570,7],[616,7],[1580,7],[1658,7],[1745,7],[1824,7]]},"2233":{"position":[[117,9],[262,7],[363,7],[501,8],[553,7],[1528,7],[1606,7],[1693,7],[1772,7]]},"2235":{"position":[[1397,7],[1475,7],[1562,7],[1641,7]]},"2237":{"position":[[1346,7],[1424,7],[1511,7],[1590,7]]},"2239":{"position":[[1359,7],[1437,7],[1524,7],[1603,7]]},"2241":{"position":[[1472,7],[1550,7],[1637,7],[1716,7]]},"2243":{"position":[[1433,7],[1511,7],[1598,7],[1677,7]]},"2247":{"position":[[1506,7],[1584,7],[1671,7],[1750,7]]},"2249":{"position":[[1487,7],[1565,7],[1652,7],[1731,7]]},"2251":{"position":[[1383,7],[1461,7],[1548,7],[1627,7]]},"2253":{"position":[[103,9],[1499,7],[1577,7],[1664,7],[1743,7]]},"2255":{"position":[[1364,7],[1442,7],[1529,7],[1608,7]]},"2257":{"position":[[1279,7],[1357,7],[1444,7],[1523,7]]},"2267":{"position":[[1454,7],[1532,7],[1619,7],[1698,7]]},"2273":{"position":[[1496,7],[1574,7],[1661,7],[1740,7]]},"2275":{"position":[[1412,7],[1490,7],[1577,7],[1656,7]]},"2277":{"position":[[1418,7],[1496,7],[1583,7],[1662,7]]},"2288":{"position":[[1045,7],[1134,7],[1222,7],[1312,7]]},"2290":{"position":[[1113,7],[1202,7],[1290,7],[1380,7]]},"2292":{"position":[[1198,7],[1287,7],[1375,7],[1465,7]]},"2294":{"position":[[1095,7],[1184,7],[1272,7],[1362,7]]},"2350":{"position":[[37,7],[164,7],[382,7],[1763,7],[1841,7],[1928,7],[2007,7]]},"2352":{"position":[[37,7],[150,7],[368,7],[1777,7],[1855,7],[1942,7],[2021,7]]},"2354":{"position":[[37,7],[193,7],[424,7],[1892,7],[1970,7],[2057,7],[2136,7]]},"2356":{"position":[[37,7],[140,7],[354,7],[503,8],[764,7],[1987,7]]},"2358":{"position":[[37,7],[177,7],[411,7],[560,8]]},"2360":{"position":[[47,7],[162,7],[388,7]]},"2362":{"position":[[47,7],[163,7],[388,7]]},"2364":{"position":[[45,7],[262,7]]},"2366":{"position":[[37,7],[161,7],[356,7]]},"2368":{"position":[[37,7],[155,8],[283,7],[572,7],[721,8],[955,7],[2178,7]]},"2370":{"position":[[47,7],[217,7],[438,7]]},"2372":{"position":[[45,7],[292,7]]},"2374":{"position":[[37,7],[466,7],[997,7]]}}}],["kubelet'",{"_index":1968,"t":{"2089":{"position":[[152,9]]}}}],["kubelet.conf",{"_index":1972,"t":{"2089":{"position":[[303,12],[379,13]]}}}],["kubelet.crt",{"_index":2162,"t":{"2101":{"position":[[4267,11]]},"2356":{"position":[[1792,11],[3015,11]]},"2368":{"position":[[1983,11],[3206,11]]}}}],["kubelet.key",{"_index":2164,"t":{"2101":{"position":[[4346,11]]},"2356":{"position":[[1862,12],[3085,12]]},"2368":{"position":[[2053,12],[3276,12]]}}}],["kubelet.servic",{"_index":2527,"t":{"2350":{"position":[[454,15]]},"2352":{"position":[[440,15]]},"2354":{"position":[[496,15]]},"2356":{"position":[[426,15]]},"2358":{"position":[[483,15]]},"2360":{"position":[[460,15]]},"2362":{"position":[[460,15]]},"2364":{"position":[[334,15]]},"2366":{"position":[[428,15]]},"2368":{"position":[[644,15]]},"2370":{"position":[[510,15]]},"2372":{"position":[[364,15]]},"2374":{"position":[[1069,15]]}}}],["kubelet_authz_arg",{"_index":2530,"t":{"2352":{"position":[[276,18]]},"2354":{"position":[[319,18]]}}}],["kubelet_certificate_arg",{"_index":2562,"t":{"2368":{"position":[[410,24]]},"2370":{"position":[[369,24]]},"2372":{"position":[[171,24]]}}}],["kubelet_system_pods_arg",{"_index":2526,"t":{"2350":{"position":[[290,24]]},"2356":{"position":[[266,24]]},"2358":{"position":[[303,24]]},"2360":{"position":[[288,24]]},"2362":{"position":[[319,24]]},"2364":{"position":[[193,24]]},"2366":{"position":[[287,24]]}}}],["kubepod",{"_index":1904,"t":{"2061":{"position":[[359,8]]}}}],["kubernet",{"_index":34,"t":{"1638":{"position":[[25,11],[50,11]]},"1660":{"position":[[537,10]]},"1729":{"position":[[34,10],[140,10]]},"1731":{"position":[[47,10]]},"1740":{"position":[[0,10],[98,10],[139,10],[752,10]]},"1760":{"position":[[1674,10]]},"1786":{"position":[[92,10]]},"1794":{"position":[[6010,10]]},"1813":{"position":[[105,10]]},"1825":{"position":[[326,11]]},"1829":{"position":[[506,12],[1057,12]]},"1832":{"position":[[51,10],[302,10],[460,10]]},"1840":{"position":[[703,10]]},"1854":{"position":[[17,10],[38,10]]},"1914":{"position":[[66,10]]},"1918":{"position":[[247,10],[535,10]]},"1920":{"position":[[52,10],[117,10]]},"1924":{"position":[[27,10]]},"1926":{"position":[[27,10],[91,10],[148,10]]},"1929":{"position":[[107,10]]},"1933":{"position":[[117,10],[285,10],[553,10]]},"1945":{"position":[[80,10]]},"1951":{"position":[[509,10]]},"1953":{"position":[[127,10]]},"1983":{"position":[[1226,10]]},"1985":{"position":[[158,10]]},"2007":{"position":[[193,10]]},"2047":{"position":[[129,11]]},"2049":{"position":[[506,10]]},"2057":{"position":[[424,10]]},"2059":{"position":[[113,10],[418,10]]},"2075":{"position":[[70,10],[301,10],[473,10]]},"2085":{"position":[[157,10],[336,10]]},"2093":{"position":[[6405,10]]},"2097":{"position":[[704,10]]},"2099":{"position":[[126,10]]},"2109":{"position":[[73,10],[312,10]]},"2113":{"position":[[89,10]]},"2115":{"position":[[88,10]]},"2121":{"position":[[140,10]]},"2131":{"position":[[69,10],[230,10]]},"2133":{"position":[[92,10]]},"2137":{"position":[[174,10]]},"2159":{"position":[[89,10],[1758,10],[1967,10]]},"2167":{"position":[[517,10],[909,10],[1118,10]]},"2176":{"position":[[308,10],[518,10],[703,10],[886,10]]},"2231":{"position":[[37,10]]},"2233":{"position":[[37,10]]},"2241":{"position":[[37,10]]},"2253":{"position":[[37,10]]},"2271":{"position":[[37,10]]},"2273":{"position":[[37,10]]},"2275":{"position":[[37,10]]},"2277":{"position":[[37,10]]},"2279":{"position":[[37,10]]},"2281":{"position":[[37,10]]},"2321":{"position":[[61,10]]},"2385":{"position":[[70,10],[122,10]]},"2421":{"position":[[218,10]]},"2431":{"position":[[37,10]]},"2438":{"position":[[37,10]]},"2440":{"position":[[101,10]]}}}],["kubernetes.io",{"_index":464,"t":{"1695":{"position":[[228,13]]}}}],["kubernetes.io/rol",{"_index":466,"t":{"1695":{"position":[[273,18]]}}}],["kubernetes_api",{"_index":1301,"t":{"1876":{"position":[[1586,19]]}}}],["l",{"_index":75,"t":{"1642":{"position":[[187,1]]},"1662":{"position":[[577,1]]},"1750":{"position":[[4091,1]]},"1774":{"position":[[218,1]]},"1794":{"position":[[588,1]]},"1916":{"position":[[116,1]]},"1924":{"position":[[164,1]]},"2200":{"position":[[623,3]]},"2271":{"position":[[753,3]]},"2306":{"position":[[647,3]]},"2308":{"position":[[536,3]]},"2310":{"position":[[561,3]]},"2312":{"position":[[713,3]]},"2314":{"position":[[539,3]]},"2316":{"position":[[571,3]]},"2318":{"position":[[670,3]]},"2350":{"position":[[575,2]]},"2352":{"position":[[561,2]]},"2354":{"position":[[617,2]]}}}],["l2",{"_index":1718,"t":{"1983":{"position":[[1057,2],[1143,2]]}}}],["label",{"_index":102,"t":{"1648":{"position":[[129,5],[190,6]]},"1660":{"position":[[53,5],[89,5],[146,6],[317,6],[344,5],[367,5],[449,6],[604,7]]},"1662":{"position":[[1123,5],[1193,6]]},"1695":{"position":[[17,5],[144,6]]},"1794":{"position":[[6448,5],[6518,6]]},"1908":{"position":[[367,6],[555,5],[580,5],[1025,6]]},"1910":{"position":[[457,6],[597,6],[715,6]]},"2021":{"position":[[1849,7]]},"2095":{"position":[[1117,6]]},"2101":{"position":[[3964,7]]},"2159":{"position":[[321,5],[646,5]]},"2163":{"position":[[1453,5],[1534,6],[1592,5],[1638,6]]}}}],["labels=rke.cattle.io/machine=00c4e7a0",{"_index":2542,"t":{"2356":{"position":[[1463,37]]},"2368":{"position":[[1654,37]]}}}],["labels=rke.cattle.io/machine=109d596c",{"_index":2551,"t":{"2356":{"position":[[2686,37]]},"2368":{"position":[[2877,37]]}}}],["larg",{"_index":898,"t":{"1756":{"position":[[600,5],[1588,5]]},"1987":{"position":[[84,5]]},"1989":{"position":[[181,5],[207,5],[235,5]]},"1995":{"position":[[156,5],[250,5],[276,5],[303,5]]},"2117":{"position":[[465,5]]}}}],["largest",{"_index":1584,"t":{"1953":{"position":[[1225,7]]}}}],["last",{"_index":1355,"t":{"1898":{"position":[[461,4]]},"1910":{"position":[[230,4]]},"1971":{"position":[[341,5]]}}}],["latenc",{"_index":1613,"t":{"1957":{"position":[[1471,7],[1644,7]]},"2067":{"position":[[368,7]]},"2069":{"position":[[333,7]]},"2077":{"position":[[535,7]]}}}],["later",{"_index":743,"t":{"1742":{"position":[[2872,5]]},"1756":{"position":[[206,5],[865,5]]}}}],["latest",{"_index":531,"t":{"1708":{"position":[[465,6]]},"1900":{"position":[[544,6]]},"2021":{"position":[[1467,8],[1511,8],[1553,8]]},"2053":{"position":[[2325,7]]},"2093":{"position":[[661,8],[705,8],[747,8]]},"2167":{"position":[[322,6],[329,6],[370,6],[615,6]]},"2169":{"position":[[291,7]]}}}],["latter",{"_index":873,"t":{"1750":{"position":[[4275,6]]}}}],["launch",{"_index":905,"t":{"1758":{"position":[[38,9],[663,9]]},"1838":{"position":[[901,9],[1229,8],[1491,8]]},"1848":{"position":[[132,6],[377,9]]},"1983":{"position":[[1157,6]]},"2053":{"position":[[1404,9]]},"2159":{"position":[[717,8]]},"2171":{"position":[[189,6]]}}}],["layer",{"_index":1196,"t":{"1840":{"position":[[578,5]]},"1945":{"position":[[37,5],[1485,5]]}}}],["lazi",{"_index":555,"t":{"1715":{"position":[[235,4]]}}}],["lb",{"_index":31,"t":{"1636":{"position":[[561,2]]},"1648":{"position":[[436,2]]},"1662":{"position":[[1698,2]]},"1675":{"position":[[1214,2]]},"1794":{"position":[[8800,2]]},"1943":{"position":[[227,3]]},"2033":{"position":[[550,3]]},"2041":{"position":[[90,3]]},"2059":{"position":[[258,3]]}}}],["lbpool",{"_index":1822,"t":{"2039":{"position":[[78,6]]}}}],["leaf",{"_index":667,"t":{"1740":{"position":[[690,4]]},"1742":{"position":[[418,4]]}}}],["leak",{"_index":2055,"t":{"2097":{"position":[[358,7]]}}}],["learn",{"_index":39,"t":{"1640":{"position":[[24,5]]},"1750":{"position":[[66,5]]},"1762":{"position":[[24,5]]}}}],["leas",{"_index":2218,"t":{"2131":{"position":[[753,6]]}}}],["leav",{"_index":889,"t":{"1754":{"position":[[330,5]]}}}],["legaci",{"_index":1543,"t":{"1947":{"position":[[4,6],[207,6]]},"1979":{"position":[[250,6]]},"2288":{"position":[[1401,6],[1490,6]]},"2290":{"position":[[1469,6],[1558,6]]},"2292":{"position":[[1554,6],[1643,6]]},"2294":{"position":[[1451,6],[1540,6]]}}}],["legitim",{"_index":1884,"t":{"2057":{"position":[[118,10],[340,10]]}}}],["less",{"_index":124,"t":{"1648":{"position":[[595,4]]},"1662":{"position":[[1851,4]]},"1794":{"position":[[8953,4]]},"2093":{"position":[[6564,4]]}}}],["level",{"_index":66,"t":{"1642":{"position":[[55,5]]},"1662":{"position":[[426,5]]},"1774":{"position":[[86,5]]},"1794":{"position":[[437,5]]},"2021":{"position":[[2076,6]]},"2059":{"position":[[502,5]]},"2061":{"position":[[207,5]]},"2085":{"position":[[553,5]]},"2087":{"position":[[28,5]]},"2089":{"position":[[222,5]]},"2093":{"position":[[2195,5]]},"2097":{"position":[[780,6]]},"2107":{"position":[[112,5]]},"2176":{"position":[[234,5]]},"2326":{"position":[[484,5],[521,5]]},"2366":{"position":[[112,6]]}}}],["level=info",{"_index":2436,"t":{"2231":{"position":[[751,10]]},"2233":{"position":[[699,10]]},"2235":{"position":[[568,10]]},"2237":{"position":[[517,10]]},"2239":{"position":[[530,10]]},"2241":{"position":[[643,10]]},"2243":{"position":[[604,10]]},"2247":{"position":[[677,10]]},"2249":{"position":[[658,10]]},"2251":{"position":[[554,10]]},"2253":{"position":[[670,10]]},"2255":{"position":[[535,10]]},"2257":{"position":[[450,10]]},"2267":{"position":[[625,10]]},"2273":{"position":[[667,10],[2843,10]]},"2275":{"position":[[583,10]]},"2277":{"position":[[589,10]]},"2288":{"position":[[476,10]]},"2290":{"position":[[544,10]]},"2292":{"position":[[629,10]]},"2294":{"position":[[526,10]]},"2301":{"position":[[435,10]]},"2303":{"position":[[509,10]]},"2350":{"position":[[934,10]]},"2352":{"position":[[948,10]]},"2354":{"position":[[1063,10]]},"2356":{"position":[[740,10],[1963,10]]},"2368":{"position":[[931,10],[2154,10]]}}}],["leverag",{"_index":2266,"t":{"2159":{"position":[[140,9]]}}}],["life",{"_index":2303,"t":{"2167":{"position":[[578,5]]}}}],["lifecycl",{"_index":1929,"t":{"2075":{"position":[[808,9]]},"2288":{"position":[[1635,9]]},"2290":{"position":[[1703,9]]},"2292":{"position":[[1788,9]]},"2294":{"position":[[1685,9]]}}}],["lightweight",{"_index":1517,"t":{"1945":{"position":[[13,11]]},"1973":{"position":[[12,12]]}}}],["limit",{"_index":409,"t":{"1681":{"position":[[966,7]]},"1721":{"position":[[174,5],[182,5],[292,5],[346,5]]},"2095":{"position":[[79,6]]},"2117":{"position":[[155,5],[449,5],[590,5],[634,5]]},"2241":{"position":[[82,6]]}}}],["limit=10/minut",{"_index":595,"t":{"1721":{"position":[[329,16]]}}}],["limit=<limit",{"_index":593,"t":{"1721":{"position":[[244,12]]}}}],["line",{"_index":829,"t":{"1750":{"position":[[1914,5]]},"2085":{"position":[[893,4]]},"2176":{"position":[[473,4]]},"2354":{"position":[[168,4]]},"2356":{"position":[[115,4]]},"2358":{"position":[[152,4]]},"2360":{"position":[[137,4]]},"2362":{"position":[[138,4]]},"2366":{"position":[[136,4]]},"2368":{"position":[[258,4]]},"2370":{"position":[[93,4],[192,4]]}}}],["link",{"_index":758,"t":{"1744":{"position":[[935,6]]},"1808":{"position":[[457,4]]},"1906":{"position":[[1384,7]]},"2053":{"position":[[1020,6]]}}}],["linod",{"_index":1830,"t":{"2045":{"position":[[0,7]]}}}],["linux",{"_index":360,"t":{"1677":{"position":[[255,5]]},"1679":{"position":[[266,5]]},"1700":{"position":[[6,5]]},"1706":{"position":[[485,5]]},"1945":{"position":[[554,5]]},"1973":{"position":[[146,5]]},"1979":{"position":[[39,5],[136,6]]},"2412":{"position":[[163,5]]}}}],["list",{"_index":46,"t":{"1640":{"position":[[112,6]]},"1642":{"position":[[107,4]]},"1662":{"position":[[497,4]]},"1738":{"position":[[215,5]]},"1750":{"position":[[4085,5],[4093,4]]},"1762":{"position":[[136,6]]},"1774":{"position":[[138,4]]},"1794":{"position":[[508,4]]},"1811":{"position":[[416,4],[421,4],[2313,5],[2319,4]]},"1906":{"position":[[946,4]]},"1908":{"position":[[739,6],[1083,5]]},"1937":{"position":[[35,6]]},"1957":{"position":[[1009,6]]},"1971":{"position":[[108,6]]},"2101":{"position":[[0,6]]},"2167":{"position":[[706,4]]},"2310":{"position":[[2120,4],[2360,4],[2600,4]]},"2316":{"position":[[2165,4]]},"2379":{"position":[[54,4]]},"2438":{"position":[[119,4]]}}}],["listen",{"_index":977,"t":{"1776":{"position":[[79,6],[108,6],[266,6]]},"1794":{"position":[[714,10],[769,6],[787,10],[804,6],[858,10],[1000,10],[1085,6],[1127,10]]},"1983":{"position":[[267,6]]}}}],["listen(80",{"_index":578,"t":{"1717":{"position":[[565,14]]}}}],["live",{"_index":1110,"t":{"1811":{"position":[[2395,5]]}}}],["lncxn",{"_index":266,"t":{"1675":{"position":[[625,5]]}}}],["lncxn_kube",{"_index":323,"t":{"1675":{"position":[[1996,10],[2687,10]]}}}],["load",{"_index":19,"t":{"1636":{"position":[[288,4]]},"1648":{"position":[[509,4],[658,4]]},"1662":{"position":[[248,4],[1765,4],[1914,4]]},"1744":{"position":[[137,6],[2000,4]]},"1746":{"position":[[160,6],[1762,4]]},"1748":{"position":[[1079,4]]},"1794":{"position":[[259,4],[8867,4],[9016,4]]},"1832":{"position":[[1143,4]]},"1840":{"position":[[592,4]]},"1908":{"position":[[919,6]]},"2075":{"position":[[289,4]]},"2097":{"position":[[1394,4]]}}}],["loadbalanc",{"_index":1460,"t":{"1931":{"position":[[180,12]]},"2031":{"position":[[14,12],[98,14]]},"2033":{"position":[[30,13]]},"2035":{"position":[[5,12]]},"2037":{"position":[[110,12]]},"2039":{"position":[[395,12]]},"2043":{"position":[[212,12]]}}}],["local",{"_index":15,"t":{"1636":{"position":[[257,5]]},"1648":{"position":[[476,5]]},"1662":{"position":[[1732,5]]},"1675":{"position":[[592,5],[1876,6]]},"1750":{"position":[[4414,7],[4725,5]]},"1760":{"position":[[1145,5]]},"1784":{"position":[[27,5],[60,5],[83,5]]},"1794":{"position":[[5699,5],[5742,5],[5765,5],[5938,5],[8834,5]]},"1893":{"position":[[829,5]]},"1895":{"position":[[705,7]]},"1931":{"position":[[122,5]]},"1939":{"position":[[631,5],[787,5]]},"2007":{"position":[[32,5]]},"2059":{"position":[[262,5]]},"2141":{"position":[[59,5],[146,5]]},"2143":{"position":[[294,5]]}}}],["localhost",{"_index":1137,"t":{"1829":{"position":[[488,10]]},"2045":{"position":[[32,12]]}}}],["locat",{"_index":210,"t":{"1662":{"position":[[1398,7]]},"1742":{"position":[[50,8],[2113,8]]},"1744":{"position":[[1055,8],[1353,8]]},"1750":{"position":[[1312,7],[2324,9],[3317,8]]},"1767":{"position":[[1557,8]]},"1794":{"position":[[5505,8],[6723,7]]},"1908":{"position":[[193,7],[1102,8]]},"2171":{"position":[[155,9]]},"2180":{"position":[[77,8]]},"2182":{"position":[[77,8]]},"2184":{"position":[[77,8]]},"2186":{"position":[[77,8]]},"2188":{"position":[[77,8]]},"2190":{"position":[[77,8]]},"2192":{"position":[[77,8]]},"2194":{"position":[[77,8]]},"2196":{"position":[[77,8]]},"2198":{"position":[[77,8]]},"2204":{"position":[[77,8]]},"2206":{"position":[[67,8]]},"2208":{"position":[[67,8]]},"2210":{"position":[[67,8]]},"2212":{"position":[[67,8]]},"2214":{"position":[[67,8]]},"2216":{"position":[[67,8]]},"2218":{"position":[[67,8]]},"2220":{"position":[[67,8]]},"2329":{"position":[[77,8]]},"2331":{"position":[[77,8]]},"2333":{"position":[[67,8]]},"2335":{"position":[[67,8]]},"2337":{"position":[[67,8]]},"2339":{"position":[[67,8]]},"2345":{"position":[[85,8]]},"2347":{"position":[[85,8]]},"2354":{"position":[[119,8]]},"2368":{"position":[[98,8],[193,8]]}}}],["log",{"_index":65,"t":{"1642":{"position":[[51,3],[165,7],[175,3],[199,3],[233,3]]},"1662":{"position":[[346,9],[370,4],[397,9],[422,3],[471,9],[555,7],[565,3],[585,9],[595,3],[625,9],[635,3]]},"1719":{"position":[[175,7],[198,7],[233,7],[287,7],[310,7],[389,7]]},"1740":{"position":[[1284,3]]},"1744":{"position":[[2165,3]]},"1746":{"position":[[1989,3]]},"1748":{"position":[[1296,3]]},"1750":{"position":[[1099,4],[1531,4]]},"1774":{"position":[[51,4],[82,3],[196,7],[206,3],[230,3],[264,3]]},"1782":{"position":[[1160,5]]},"1794":{"position":[[357,9],[381,4],[408,9],[433,3],[482,9],[566,7],[576,3],[596,9],[606,3],[636,9],[646,3]]},"1912":{"position":[[597,7]]},"1951":{"position":[[1025,5]]},"2021":{"position":[[568,3],[691,3],[715,3],[742,3]]},"2059":{"position":[[529,8]]},"2091":{"position":[[150,5],[405,3]]},"2097":{"position":[[67,4],[126,3],[241,3],[479,3],[894,3],[1232,3]]},"2099":{"position":[[336,3],[459,3],[483,3],[510,3],[959,3],[1082,3],[1106,3],[1133,3]]},"2109":{"position":[[24,3],[435,3]]},"2111":{"position":[[24,3],[96,4],[215,3]]},"2113":{"position":[[24,3],[126,3],[151,3],[200,3],[341,3],[401,3]]},"2115":{"position":[[24,3],[125,3],[150,3],[199,3],[327,3],[387,3]]},"2127":{"position":[[57,7]]},"2259":{"position":[[171,3],[245,4],[286,3]]},"2261":{"position":[[171,3],[256,3]]},"2263":{"position":[[171,3],[250,3]]},"2265":{"position":[[171,3],[265,3]]},"2326":{"position":[[202,3],[296,7],[460,7],[530,9]]}}}],["log1",{"_index":599,"t":{"1721":{"position":[[459,7]]}}}],["long",{"_index":751,"t":{"1744":{"position":[[521,4]]},"1811":{"position":[[1977,4]]},"2125":{"position":[[283,4]]}}}],["longer",{"_index":1541,"t":{"1945":{"position":[[2064,6]]}}}],["longhorn",{"_index":2226,"t":{"2135":{"position":[[380,11]]},"2145":{"position":[[3,9],[65,9],[144,9],[258,9],[275,8]]},"2147":{"position":[[59,8],[130,8]]},"2149":{"position":[[294,8]]}}}],["longhorn.yaml",{"_index":2253,"t":{"2145":{"position":[[124,14]]}}}],["lookup",{"_index":2196,"t":{"2119":{"position":[[34,6],[98,7]]},"2267":{"position":[[252,6],[457,7],[502,7]]}}}],["lookup=tru",{"_index":1772,"t":{"2021":{"position":[[803,12]]},"2099":{"position":[[571,12],[1194,12]]},"2267":{"position":[[188,11]]}}}],["loop",{"_index":1924,"t":{"2075":{"position":[[161,6],[837,6]]}}}],["loopback",{"_index":1006,"t":{"1782":{"position":[[1272,8],[1621,8],[1878,8]]}}}],["lost",{"_index":1226,"t":{"1846":{"position":[[359,5]]}}}],["low",{"_index":1917,"t":{"2067":{"position":[[249,3]]}}}],["lower",{"_index":1483,"t":{"1933":{"position":[[1077,5]]},"2377":{"position":[[225,5]]}}}],["lowercas",{"_index":1478,"t":{"1933":{"position":[[1032,9]]}}}],["ls",{"_index":867,"t":{"1750":{"position":[[4081,3]]},"1813":{"position":[[359,2],[529,2]]},"1939":{"position":[[581,2]]},"1963":{"position":[[1396,2]]}}}],["m",{"_index":1871,"t":{"2055":{"position":[[306,1],[312,1],[410,1],[416,1],[491,1],[497,1],[567,1],[573,1],[648,1],[654,1],[707,1],[713,1]]},"2067":{"position":[[411,1],[445,1]]},"2069":{"position":[[376,1],[410,1]]},"2071":{"position":[[164,1]]},"2097":{"position":[[414,1]]}}}],["machin",{"_index":1170,"t":{"1838":{"position":[[104,7]]}}}],["main",{"_index":1256,"t":{"1854":{"position":[[105,4]]},"1961":{"position":[[25,4]]}}}],["maintain",{"_index":1167,"t":{"1832":{"position":[[1115,10]]},"1951":{"position":[[23,8]]},"2077":{"position":[[649,8]]},"2093":{"position":[[1112,11]]}}}],["mainten",{"_index":1683,"t":{"1979":{"position":[[381,11]]}}}],["make",{"_index":860,"t":{"1750":{"position":[[3629,4]]},"1983":{"position":[[340,4]]},"2021":{"position":[[977,5]]},"2075":{"position":[[447,4]]},"2099":{"position":[[745,5],[1368,5]]},"2117":{"position":[[304,6],[508,6]]},"2129":{"position":[[18,4]]},"2176":{"position":[[1755,5]]},"2362":{"position":[[275,4]]},"2421":{"position":[[119,6]]}}}],["makeiptablesutilchain",{"_index":2558,"t":{"2362":{"position":[[89,22]]}}}],["maker",{"_index":2316,"t":{"2176":{"position":[[404,7]]}}}],["man",{"_index":1059,"t":{"1802":{"position":[[320,3]]},"1955":{"position":[[303,3]]}}}],["manag",{"_index":608,"t":{"1723":{"position":[[142,8],[172,7]]},"1738":{"position":[[414,8]]},"1786":{"position":[[185,7]]},"1788":{"position":[[225,7],[279,7],[319,7],[379,7]]},"1794":{"position":[[172,10],[3600,7],[3662,7],[3780,7],[3848,7],[6116,7]]},"1811":{"position":[[152,6]]},"1906":{"position":[[377,8]]},"1931":{"position":[[340,7]]},"1933":{"position":[[251,8]]},"1941":{"position":[[22,8]]},"1951":{"position":[[542,7]]},"1979":{"position":[[326,7]]},"1997":{"position":[[119,8]]},"1999":{"position":[[203,7]]},"2003":{"position":[[238,7]]},"2005":{"position":[[308,8]]},"2021":{"position":[[832,7]]},"2043":{"position":[[112,8]]},"2059":{"position":[[508,10],[554,11]]},"2075":{"position":[[130,8],[183,10],[818,10],[868,8]]},"2095":{"position":[[2657,6]]},"2099":{"position":[[600,7],[1223,7]]},"2101":{"position":[[2258,7]]},"2129":{"position":[[106,6],[242,6]]},"2159":{"position":[[8,6],[1072,7],[1125,6],[1201,6],[1378,6],[1467,7]]},"2200":{"position":[[566,8]]},"2271":{"position":[[696,8]]},"2286":{"position":[[46,7],[352,8]]},"2288":{"position":[[46,7],[282,8],[516,7],[800,7]]},"2290":{"position":[[46,7],[302,8],[584,7],[868,7]]},"2292":{"position":[[46,7],[398,8],[669,7],[953,7]]},"2294":{"position":[[46,7],[335,8],[566,7],[850,7]]},"2296":{"position":[[56,7]]},"2298":{"position":[[46,7]]},"2306":{"position":[[590,8]]},"2308":{"position":[[479,8]]},"2310":{"position":[[504,8]]},"2312":{"position":[[656,8]]},"2314":{"position":[[482,8]]},"2316":{"position":[[514,8]]},"2318":{"position":[[613,8]]},"2326":{"position":[[149,7]]},"2428":{"position":[[47,10],[122,10]]}}}],["manager.yaml",{"_index":2334,"t":{"2184":{"position":[[194,12]]},"2186":{"position":[[200,12]]},"2286":{"position":[[119,12]]},"2288":{"position":[[119,12]]},"2290":{"position":[[119,12]]},"2292":{"position":[[119,12]]},"2294":{"position":[[119,12]]},"2296":{"position":[[129,12]]},"2298":{"position":[[119,12]]}}}],["mani",{"_index":1187,"t":{"1840":{"position":[[110,4]]},"2075":{"position":[[660,4]]},"2163":{"position":[[1352,4]]}}}],["manifest",{"_index":1359,"t":{"1900":{"position":[[494,8],[813,8]]},"1918":{"position":[[132,8]]},"1929":{"position":[[309,9],[440,8]]},"1931":{"position":[[83,9],[220,8],[302,9]]},"1933":{"position":[[38,9],[232,10],[373,8],[460,9],[1362,9],[1613,10]]},"1935":{"position":[[70,9]]},"1937":{"position":[[90,9],[114,9],[273,9],[399,8]]},"1939":{"position":[[135,9],[474,9]]},"1941":{"position":[[62,10]]},"2085":{"position":[[1110,8]]},"2101":{"position":[[3978,8],[4023,9]]},"2356":{"position":[[1590,8],[1635,9],[2813,8],[2858,9]]},"2368":{"position":[[1781,8],[1826,9],[3004,8],[3049,9]]}}}],["manner",{"_index":1353,"t":{"1898":{"position":[[70,7]]},"1906":{"position":[[506,6]]},"1929":{"position":[[123,6]]},"2159":{"position":[[940,7]]}}}],["manual",{"_index":597,"t":{"1721":{"position":[[407,7]]},"1738":{"position":[[41,9]]},"1882":{"position":[[245,8]]},"1888":{"position":[[101,8]]},"1893":{"position":[[67,8]]},"2085":{"position":[[437,6],[594,9],[937,8]]},"2091":{"position":[[456,9]]},"2103":{"position":[[162,6]]},"2129":{"position":[[371,8]]},"2131":{"position":[[818,8]]},"2165":{"position":[[60,8]]},"2171":{"position":[[6,8]]},"2173":{"position":[[106,9],[161,9],[230,9],[283,9]]},"2176":{"position":[[1430,6]]},"2318":{"position":[[26,7]]}}}],["map",{"_index":1404,"t":{"1908":{"position":[[649,3]]}}}],["mariadb",{"_index":1130,"t":{"1825":{"position":[[950,7]]},"1829":{"position":[[137,7],[557,8]]},"1995":{"position":[[62,8]]}}}],["mask",{"_index":1580,"t":{"1953":{"position":[[1016,5],[1070,5],[1113,4],[1142,4],[1256,4]]}}}],["masq",{"_index":940,"t":{"1764":{"position":[[485,4]]},"1782":{"position":[[604,4]]},"1794":{"position":[[2130,4]]},"1945":{"position":[[941,4]]}}}],["masquerad",{"_index":999,"t":{"1782":{"position":[[627,12]]},"1794":{"position":[[2160,12]]},"1945":{"position":[[952,12]]}}}],["master",{"_index":1398,"t":{"1906":{"position":[[1147,6]]},"2306":{"position":[[180,6]]},"2308":{"position":[[106,6]]},"2310":{"position":[[106,6]]},"2312":{"position":[[222,6]]},"2314":{"position":[[106,6]]},"2316":{"position":[[106,6]]},"2318":{"position":[[229,6]]}}}],["match",{"_index":908,"t":{"1760":{"position":[[311,5],[597,5]]},"1800":{"position":[[1116,8]]},"1893":{"position":[[204,8]]},"1906":{"position":[[977,8],[1011,5]]},"1953":{"position":[[1167,5]]}}}],["matchexpress",{"_index":2290,"t":{"2163":{"position":[[566,17],[914,17]]}}}],["matchlabel",{"_index":2039,"t":{"2093":{"position":[[5966,12],[6165,12],[6364,12]]},"2095":{"position":[[479,12],[865,12],[1428,12],[1648,12],[1889,12],[2111,12],[2331,12],[2572,12]]}}}],["matter",{"_index":1498,"t":{"1939":{"position":[[183,7]]}}}],["max",{"_index":2014,"t":{"2093":{"position":[[1924,4],[1979,4],[3009,4],[3064,4],[3422,4],[3896,4]]}}}],["maxag",{"_index":2177,"t":{"2111":{"position":[[28,6]]},"2261":{"position":[[175,6]]}}}],["maxage=30",{"_index":1768,"t":{"2021":{"position":[[695,10]]},"2099":{"position":[[463,10],[1086,10]]},"2261":{"position":[[260,9]]}}}],["maxbackup",{"_index":2182,"t":{"2113":{"position":[[28,9]]},"2263":{"position":[[175,9]]}}}],["maxbackup=10",{"_index":1769,"t":{"2021":{"position":[[719,13]]},"2099":{"position":[[487,13],[1110,13]]},"2263":{"position":[[254,12]]}}}],["maximum",{"_index":1739,"t":{"1991":{"position":[[223,7]]}}}],["maxsiz",{"_index":2187,"t":{"2115":{"position":[[28,7]]},"2265":{"position":[[175,7]]}}}],["maxsize=100",{"_index":1770,"t":{"2021":{"position":[[746,12]]},"2099":{"position":[[514,12],[1137,12]]},"2265":{"position":[[269,11]]}}}],["mb",{"_index":1690,"t":{"1981":{"position":[[162,2]]},"2113":{"position":[[316,2]]},"2115":{"position":[[302,2]]},"2265":{"position":[[219,3],[253,3]]}}}],["mbkn9",{"_index":273,"t":{"1675":{"position":[[744,5]]}}}],["mean",{"_index":197,"t":{"1662":{"position":[[67,5]]},"1794":{"position":[[69,5]]}}}],["meant",{"_index":2312,"t":{"2176":{"position":[[203,5]]}}}],["measur",{"_index":1879,"t":{"2055":{"position":[[774,12]]}}}],["mechan",{"_index":2390,"t":{"2225":{"position":[[75,10]]},"2321":{"position":[[38,10]]},"2421":{"position":[[177,9]]}}}],["medium",{"_index":1730,"t":{"1989":{"position":[[157,6]]},"1995":{"position":[[226,6]]},"2077":{"position":[[292,6]]}}}],["meet",{"_index":1148,"t":{"1832":{"position":[[232,4]]},"1973":{"position":[[190,4]]},"1977":{"position":[[169,4]]},"2077":{"position":[[505,4]]}}}],["member",{"_index":816,"t":{"1750":{"position":[[828,7],[2409,6]]},"1769":{"position":[[598,6]]},"1776":{"position":[[220,7],[321,7]]},"1794":{"position":[[918,7],[1052,7],[3324,6]]}}}],["memori",{"_index":1728,"t":{"1989":{"position":[[38,6]]},"2057":{"position":[[152,7],[374,7]]},"2061":{"position":[[74,7],[221,6],[403,6]]},"2067":{"position":[[313,6]]},"2069":{"position":[[285,6]]}}}],["mention",{"_index":1348,"t":{"1895":{"position":[[885,8]]},"1904":{"position":[[3,9]]},"2053":{"position":[[3,9]]},"2119":{"position":[[243,9]]},"2161":{"position":[[411,9]]}}}],["merit",{"_index":1395,"t":{"1906":{"position":[[371,5]]}}}],["mesh",{"_index":1602,"t":{"1957":{"position":[[182,4],[216,5]]}}}],["messag",{"_index":822,"t":{"1750":{"position":[[1084,7],[1516,7]]}}}],["metadata",{"_index":397,"t":{"1681":{"position":[[659,9],[727,9]]},"1717":{"position":[[305,9]]},"1876":{"position":[[303,9],[373,9]]},"1878":{"position":[[515,9]]},"1918":{"position":[[209,9],[364,9]]},"2021":{"position":[[1818,9]]},"2093":{"position":[[1412,9],[2599,9],[3160,9],[3612,9],[4062,9],[4267,9],[4490,9],[4692,9],[4976,9],[5272,9],[5605,9],[5851,9],[6054,9],[6249,9]]},"2095":{"position":[[364,9],[712,9],[1345,9],[1559,9],[1800,9],[2028,9],[2242,9],[2483,9]]},"2097":{"position":[[491,8],[787,8]]},"2141":{"position":[[43,9]]},"2143":{"position":[[25,9]]},"2147":{"position":[[43,9]]},"2149":{"position":[[25,9]]},"2163":{"position":[[464,9],[813,9]]},"2326":{"position":[[206,8],[475,8]]}}}],["metadata.nam",{"_index":1278,"t":{"1876":{"position":[[659,13]]},"1933":{"position":[[980,14]]}}}],["metallb",{"_index":1827,"t":{"2041":{"position":[[75,8]]}}}],["method",{"_index":1316,"t":{"1882":{"position":[[69,8]]},"1888":{"position":[[78,6]]},"1893":{"position":[[53,6],[90,6]]},"2053":{"position":[[273,6]]},"2079":{"position":[[491,7]]}}}],["methodolog",{"_index":1880,"t":{"2055":{"position":[[787,11]]},"2176":{"position":[[849,12]]}}}],["metric",{"_index":269,"t":{"1675":{"position":[[661,7],[2079,9]]},"1767":{"position":[[522,7],[546,7]]},"1794":{"position":[[4380,7],[4405,7],[5953,7]]},"1876":{"position":[[593,8]]},"1931":{"position":[[141,7]]},"1939":{"position":[[856,7]]},"1983":{"position":[[581,7]]},"1985":{"position":[[279,7]]},"2061":{"position":[[508,7]]},"2095":{"position":[[923,7],[1371,7],[1450,7],[2054,7],[2133,7]]}}}],["microsoft",{"_index":1816,"t":{"2031":{"position":[[283,9]]}}}],["middl",{"_index":1060,"t":{"1802":{"position":[[331,6]]},"1955":{"position":[[314,6]]}}}],["migrat",{"_index":1253,"t":{"1850":{"position":[[503,9]]},"1947":{"position":[[407,7],[459,9]]}}}],["min",{"_index":1862,"t":{"2055":{"position":[[155,3],[163,3],[188,3]]},"2093":{"position":[[1917,4],[1972,4],[3002,4],[3057,4],[3433,4],[3907,4]]}}}],["minim",{"_index":2208,"t":{"2127":{"position":[[14,7]]},"2326":{"position":[[450,9]]}}}],["minimum",{"_index":1169,"t":{"1838":{"position":[[96,7]]},"1844":{"position":[[57,7]]},"1973":{"position":[[38,7],[209,7]]},"1981":{"position":[[67,7],[115,7],[232,7]]},"1989":{"position":[[22,7]]},"1991":{"position":[[194,7]]},"2055":{"position":[[56,7]]},"2057":{"position":[[129,7],[351,7]]},"2065":{"position":[[56,7]]},"2101":{"position":[[3714,7]]},"2356":{"position":[[1231,7],[2454,7]]},"2368":{"position":[[1422,7],[2645,7]]}}}],["minor",{"_index":2279,"t":{"2159":{"position":[[1847,5]]},"2167":{"position":[[528,5],[998,5]]}}}],["minut",{"_index":289,"t":{"1675":{"position":[[1069,6],[1091,6],[1233,6],[1255,6],[1416,6],[1438,6],[1581,6],[1603,6],[1737,6],[1759,6],[1907,6],[1929,6],[2105,6],[2127,6],[2293,6],[2315,6],[2457,6],[2479,6],[2617,6],[2639,6]]},"1756":{"position":[[636,7],[1624,7]]}}}],["mirror",{"_index":1318,"t":{"1882":{"position":[[216,6]]},"1961":{"position":[[40,7]]},"1963":{"position":[[0,7],[100,8],[174,6],[387,7],[512,6],[545,8],[775,6],[941,6],[1190,8],[1517,8]]},"1965":{"position":[[74,7],[91,6]]},"1967":{"position":[[154,8],[517,8]]},"1969":{"position":[[158,8],[353,8]]}}}],["mirrorproject/ranch",{"_index":1644,"t":{"1963":{"position":[[1284,22]]}}}],["mismatch",{"_index":1399,"t":{"1906":{"position":[[1331,9]]}}}],["mitig",{"_index":1950,"t":{"2085":{"position":[[261,11]]}}}],["mkdir",{"_index":729,"t":{"1742":{"position":[[2001,5]]},"1744":{"position":[[1253,5]]},"1748":{"position":[[698,5]]},"1890":{"position":[[178,5]]},"2097":{"position":[[404,5]]}}}],["mode",{"_index":938,"t":{"1764":{"position":[[425,4]]},"1771":{"position":[[161,4],[219,5],[290,4],[316,4]]},"1782":{"position":[[837,4]]},"1794":{"position":[[2285,4],[2624,4],[2671,4]]},"1848":{"position":[[19,5]]},"1906":{"position":[[634,4]]},"1908":{"position":[[326,5],[510,4]]},"1910":{"position":[[528,5],[582,5],[688,5]]},"1951":{"position":[[621,4],[681,4],[708,6],[822,4],[1119,4]]},"1965":{"position":[[876,6]]},"2235":{"position":[[169,4],[390,5],[430,5]]},"2237":{"position":[[169,4],[356,5],[396,5]]},"2239":{"position":[[169,4],[369,5],[409,5]]},"2352":{"position":[[679,5],[781,5]]}}}],["mode=node,rbac",{"_index":2077,"t":{"2101":{"position":[[304,14]]},"2231":{"position":[[973,14]]},"2233":{"position":[[921,14]]},"2235":{"position":[[790,14]]},"2237":{"position":[[231,14],[739,14]]},"2239":{"position":[[243,15],[752,14]]},"2241":{"position":[[865,14]]},"2243":{"position":[[826,14]]},"2247":{"position":[[899,14]]},"2249":{"position":[[880,14]]},"2251":{"position":[[776,14]]},"2253":{"position":[[892,14]]},"2255":{"position":[[757,14]]},"2257":{"position":[[672,14]]},"2267":{"position":[[847,14]]},"2273":{"position":[[889,14]]},"2275":{"position":[[805,14]]},"2277":{"position":[[811,14]]},"2350":{"position":[[1156,14]]},"2352":{"position":[[1170,14]]},"2354":{"position":[[1285,14]]}}}],["mode=rbac",{"_index":2450,"t":{"2235":{"position":[[270,9]]}}}],["mode=webhook",{"_index":2132,"t":{"2101":{"position":[[3146,12]]},"2352":{"position":[[321,12],[728,14],[847,12]]},"2356":{"position":[[865,12],[2088,12]]},"2368":{"position":[[1056,12],[2279,12]]}}}],["model",{"_index":1915,"t":{"2063":{"position":[[102,5]]}}}],["modern",{"_index":1677,"t":{"1979":{"position":[[32,6]]}}}],["modif",{"_index":1951,"t":{"2085":{"position":[[368,13],[559,13]]},"2326":{"position":[[320,12]]}}}],["modifi",{"_index":779,"t":{"1746":{"position":[[959,8]]},"1840":{"position":[[744,6]]},"1895":{"position":[[1075,6]]},"1939":{"position":[[323,6]]},"1949":{"position":[[386,6],[768,6]]},"1957":{"position":[[1263,6],[1364,6]]},"2085":{"position":[[510,6]]},"2341":{"position":[[55,6]]},"2343":{"position":[[55,6]]},"2385":{"position":[[145,6]]},"2387":{"position":[[26,6]]}}}],["modul",{"_index":521,"t":{"1706":{"position":[[491,7]]},"1945":{"position":[[538,7],[690,7],[777,7],[1375,7],[1663,8],[1927,7]]}}}],["monitor",{"_index":1891,"t":{"2059":{"position":[[96,10],[301,10]]},"2159":{"position":[[518,10]]},"2163":{"position":[[1990,7],[2595,7]]}}}],["more",{"_index":56,"t":{"1640":{"position":[[316,4]]},"1740":{"position":[[74,4]]},"1752":{"position":[[54,4]]},"1760":{"position":[[1770,4]]},"1762":{"position":[[354,4]]},"1806":{"position":[[1125,4],[1218,4]]},"1811":{"position":[[1561,4]]},"1832":{"position":[[422,4],[520,4],[811,4]]},"1836":{"position":[[121,4]]},"1838":{"position":[[20,4],[1093,4]]},"1895":{"position":[[30,4]]},"1902":{"position":[[212,4]]},"1906":{"position":[[1403,4]]},"1933":{"position":[[188,4],[1375,4]]},"1957":{"position":[[1541,4]]},"1979":{"position":[[271,4]]},"2007":{"position":[[574,4]]},"2081":{"position":[[225,4]]},"2159":{"position":[[416,4],[1520,4]]},"2167":{"position":[[771,4]]},"2176":{"position":[[544,4]]},"2208":{"position":[[390,4]]},"2212":{"position":[[400,4]]},"2310":{"position":[[2271,4],[2511,4],[2751,4]]},"2316":{"position":[[2316,4]]}}}],["mount",{"_index":2275,"t":{"2159":{"position":[[862,7]]},"2387":{"position":[[98,5]]},"2426":{"position":[[85,7]]}}}],["mountpath",{"_index":2248,"t":{"2143":{"position":[[194,10]]},"2149":{"position":[[194,10]]}}}],["move",{"_index":813,"t":{"1750":{"position":[[650,5]]}}}],["ms",{"_index":1920,"t":{"2067":{"position":[[404,2],[438,2]]},"2069":{"position":[[369,2],[403,2]]}}}],["msg=\"run",{"_index":2437,"t":{"2231":{"position":[[762,12]]},"2233":{"position":[[710,12]]},"2235":{"position":[[579,12]]},"2237":{"position":[[528,12]]},"2239":{"position":[[541,12]]},"2241":{"position":[[654,12]]},"2243":{"position":[[615,12]]},"2247":{"position":[[688,12]]},"2249":{"position":[[669,12]]},"2251":{"position":[[565,12]]},"2253":{"position":[[681,12]]},"2255":{"position":[[546,12]]},"2257":{"position":[[461,12]]},"2267":{"position":[[636,12]]},"2273":{"position":[[678,12],[2854,12]]},"2275":{"position":[[594,12]]},"2277":{"position":[[600,12]]},"2288":{"position":[[487,12]]},"2290":{"position":[[555,12]]},"2292":{"position":[[640,12]]},"2294":{"position":[[537,12]]},"2301":{"position":[[446,12]]},"2303":{"position":[[520,12]]},"2350":{"position":[[945,12]]},"2352":{"position":[[959,12]]},"2354":{"position":[[1074,12]]},"2356":{"position":[[751,12],[1974,12]]},"2368":{"position":[[942,12],[2165,12]]}}}],["mtu",{"_index":449,"t":{"1691":{"position":[[269,4]]}}}],["multipl",{"_index":1204,"t":{"1840":{"position":[[1067,8]]},"1910":{"position":[[42,8],[394,8]]},"1933":{"position":[[108,8],[1312,8]]},"1937":{"position":[[473,8]]},"1975":{"position":[[44,8]]}}}],["mustruna",{"_index":2013,"t":{"2093":{"position":[[1895,11],[1950,11],[2980,11],[3035,11]]},"2406":{"position":[[118,9]]}}}],["mustrunasnonroot",{"_index":2009,"t":{"2093":{"position":[[1810,18],[2909,18]]},"2406":{"position":[[98,16]]}}}],["mycustomreg.com",{"_index":1626,"t":{"1963":{"position":[[109,16]]}}}],["mycustomreg.com:5000/coredn",{"_index":1661,"t":{"1971":{"position":[[409,28]]}}}],["mycustomreg:5000",{"_index":1653,"t":{"1967":{"position":[[226,19],[589,19]]},"1969":{"position":[[229,19]]}}}],["mycustomreg:5000/coredn",{"_index":1660,"t":{"1971":{"position":[[308,24]]}}}],["mypassword",{"_index":1386,"t":{"1904":{"position":[[1454,11],[1679,10]]},"1906":{"position":[[741,10]]}}}],["mysql",{"_index":10,"t":{"1636":{"position":[[114,6]]},"1767":{"position":[[102,6]]},"1794":{"position":[[3910,6]]},"1821":{"position":[[406,5]]},"1825":{"position":[[193,5],[919,5]]},"1827":{"position":[[12,6],[296,5]]},"1829":{"position":[[129,5],[550,6],[951,9],[1040,5]]},"1838":{"position":[[530,5]]},"1987":{"position":[[251,5]]},"1995":{"position":[[43,6]]}}}],["mysql://username:password@tcp(hostname:3306)/databas",{"_index":1138,"t":{"1829":{"position":[[608,53]]}}}],["n",{"_index":585,"t":{"1719":{"position":[[166,1],[278,1]]},"1920":{"position":[[50,1],[115,1]]},"1929":{"position":[[548,1]]},"2021":{"position":[[3143,1]]},"2163":{"position":[[2681,1],[2725,1]]},"2218":{"position":[[186,2]]},"2220":{"position":[[186,2]]}}}],["n/a",{"_index":69,"t":{"1642":{"position":[[87,3],[195,3],[229,3]]},"1648":{"position":[[95,3],[141,3],[216,3],[285,3]]},"1650":{"position":[[60,3]]},"1652":{"position":[[64,3],[126,3],[255,3],[315,3],[381,3]]},"1658":{"position":[[51,3]]},"1767":{"position":[[530,3],[616,3],[680,3],[823,3],[949,3],[1022,3],[1103,3],[1152,3],[1230,3],[1304,3],[1492,3],[1534,3],[1623,3]]},"1774":{"position":[[33,3],[118,3],[226,3],[260,3]]},"1776":{"position":[[360,3]]},"1782":{"position":[[609,5],[670,5]]},"1792":{"position":[[51,3],[100,3],[200,3],[281,3]]},"1804":{"position":[[266,3],[270,3]]}}}],["n1",{"_index":2354,"t":{"2200":{"position":[[815,2]]},"2223":{"position":[[278,2]]},"2231":{"position":[[508,2]]},"2233":{"position":[[491,2]]},"2235":{"position":[[365,2]]},"2237":{"position":[[331,2]]},"2239":{"position":[[344,2]]},"2241":{"position":[[435,2]]},"2243":{"position":[[342,2]]},"2247":{"position":[[408,2]]},"2249":{"position":[[430,2]]},"2251":{"position":[[326,2]]},"2253":{"position":[[461,2]]},"2255":{"position":[[322,2]]},"2257":{"position":[[273,2]]},"2267":{"position":[[403,2]]},"2271":{"position":[[945,2]]},"2275":{"position":[[405,2]]},"2277":{"position":[[417,2]]},"2279":{"position":[[459,2]]},"2283":{"position":[[1011,2]]},"2286":{"position":[[369,2]]},"2288":{"position":[[299,2]]},"2290":{"position":[[319,2]]},"2292":{"position":[[415,2]]},"2294":{"position":[[352,2]]},"2301":{"position":[[277,2]]},"2303":{"position":[[287,2]]},"2306":{"position":[[839,2]]},"2308":{"position":[[728,2]]},"2310":{"position":[[753,2]]},"2312":{"position":[[905,2]]},"2314":{"position":[[731,2]]},"2316":{"position":[[763,2]]},"2318":{"position":[[862,2]]},"2324":{"position":[[157,2]]},"2350":{"position":[[668,2]]},"2352":{"position":[[654,2]]},"2354":{"position":[[710,2]]},"2356":{"position":[[520,2]]},"2358":{"position":[[577,2]]},"2368":{"position":[[738,2]]}}}],["n2",{"_index":2468,"t":{"2273":{"position":[[474,2]]}}}],["name",{"_index":98,"t":{"1648":{"position":[[45,4],[75,4],[117,4]]},"1662":{"position":[[141,5],[147,5],[1014,4],[1043,4],[1111,4]]},"1675":{"position":[[549,4],[1021,5]]},"1681":{"position":[[669,5],[737,5],[852,5],[999,5],[1041,5]]},"1708":{"position":[[338,4]]},"1717":{"position":[[315,5],[348,5]]},"1738":{"position":[[282,5]]},"1750":{"position":[[3276,4],[3494,5],[3795,5],[3831,5],[4627,5],[4713,5]]},"1760":{"position":[[333,4],[645,4],[1786,5],[1792,4]]},"1767":{"position":[[151,4],[669,4],[697,4],[1506,4]]},"1776":{"position":[[435,5]]},"1794":{"position":[[143,5],[149,5],[1209,5],[3959,4],[4530,4],[4559,4],[5453,4],[6339,4],[6368,4],[6436,4]]},"1811":{"position":[[134,5]]},"1829":{"position":[[264,4],[662,4],[763,4]]},"1838":{"position":[[729,5]]},"1840":{"position":[[1021,4]]},"1842":{"position":[[541,5]]},"1848":{"position":[[688,4]]},"1876":{"position":[[313,5],[383,5],[682,4],[1733,4]]},"1878":{"position":[[525,5],[593,5]]},"1893":{"position":[[459,4]]},"1895":{"position":[[1050,5],[1260,5]]},"1918":{"position":[[219,5],[374,5],[454,5],[507,5]]},"1933":{"position":[[316,6],[347,4],[516,5],[571,6],[639,5],[797,4]]},"1937":{"position":[[524,5]]},"1939":{"position":[[744,4]]},"1963":{"position":[[40,5],[193,4],[1368,4],[1552,5]]},"1965":{"position":[[651,4]]},"1975":{"position":[[245,4],[270,4]]},"2001":{"position":[[486,4]]},"2021":{"position":[[1297,5],[1828,5]]},"2053":{"position":[[1618,4],[1763,4]]},"2079":{"position":[[741,7]]},"2093":{"position":[[316,5],[491,5],[1422,5],[2609,5],[3170,5],[3622,5],[4072,5],[4277,5],[4500,5],[4702,5],[4794,5],[4843,5],[4986,5],[5096,5],[5190,5],[5282,5],[5419,5],[5513,5],[5615,5],[5729,5],[5782,5],[5861,5],[5979,5],[6064,5],[6178,5],[6259,5],[6377,5]]},"2095":{"position":[[374,5],[492,5],[722,5],[1355,5],[1569,5],[1810,5],[2038,5],[2252,5],[2493,5]]},"2097":{"position":[[558,5]]},"2141":{"position":[[53,5]]},"2143":{"position":[[35,5],[92,5],[183,5],[249,5]]},"2147":{"position":[[53,5]]},"2149":{"position":[[35,5],[92,5],[183,5],[249,5]]},"2163":{"position":[[474,5],[823,5]]},"2377":{"position":[[348,6]]}}}],["names=system:auth",{"_index":2101,"t":{"2101":{"position":[[1281,17]]},"2231":{"position":[[2086,17]]},"2233":{"position":[[2034,17]]},"2235":{"position":[[1903,17]]},"2237":{"position":[[1852,17]]},"2239":{"position":[[1865,17]]},"2241":{"position":[[1978,17]]},"2243":{"position":[[1939,17]]},"2247":{"position":[[2012,17]]},"2249":{"position":[[1993,17]]},"2251":{"position":[[1889,17]]},"2253":{"position":[[2005,17]]},"2255":{"position":[[1870,17]]},"2257":{"position":[[1785,17]]},"2267":{"position":[[1960,17]]},"2273":{"position":[[2002,17]]},"2275":{"position":[[1918,17]]},"2277":{"position":[[1924,17]]},"2350":{"position":[[2269,17]]},"2352":{"position":[[2283,17]]},"2354":{"position":[[2398,17]]}}}],["namespac",{"_index":258,"t":{"1675":{"position":[[528,10],[539,9]]},"1681":{"position":[[763,10]]},"1719":{"position":[[155,9],[267,9]]},"1782":{"position":[[739,9],[769,9]]},"1794":{"position":[[2385,9],[2414,9]]},"1813":{"position":[[343,10],[368,10],[474,10],[538,10]]},"1876":{"position":[[293,9],[396,10],[804,9]]},"1878":{"position":[[539,10]]},"1918":{"position":[[236,10],[524,10]]},"1929":{"position":[[376,10],[590,10]]},"1939":{"position":[[734,9]]},"2021":{"position":[[1607,11],[1808,9]]},"2093":{"position":[[801,11],[5333,10],[5643,10],[5873,9],[5883,10],[6076,9],[6086,10],[6271,9],[6281,10],[6500,10],[6527,9]]},"2095":{"position":[[22,10],[99,10],[386,9],[396,10],[755,10],[766,11],[1386,10],[1606,10],[1847,10],[2069,10],[2289,10],[2530,10],[2706,10]]},"2105":{"position":[[190,11],[211,10],[340,9]]},"2131":{"position":[[649,10],[705,10]]},"2141":{"position":[[74,10]]},"2143":{"position":[[53,10]]},"2149":{"position":[[53,10]]},"2159":{"position":[[813,10]]},"2163":{"position":[[492,10],[840,10],[1268,9]]},"2225":{"position":[[767,9],[1049,9],[1331,9],[1613,9],[1895,9],[2177,9],[2459,9]]},"2227":{"position":[[748,9],[1030,9],[1312,9],[1594,9],[1876,9],[2158,9],[2440,9]]},"2245":{"position":[[761,9],[1043,9],[1325,9],[1607,9],[1889,9],[2171,9],[2453,9]]},"2298":{"position":[[733,9],[1015,9],[1297,9],[1579,9],[1861,9],[2143,9],[2425,9]]},"2394":{"position":[[127,9]]},"2396":{"position":[[47,9]]},"2398":{"position":[[47,9]]},"2400":{"position":[[47,9]]},"2402":{"position":[[47,9]]},"2404":{"position":[[47,9]]},"2406":{"position":[[51,9]]},"2408":{"position":[[47,9]]},"2412":{"position":[[106,9]]},"2414":{"position":[[47,9]]},"2416":{"position":[[47,9]]},"2418":{"position":[[47,9]]},"2434":{"position":[[62,10]]},"2440":{"position":[[38,10],[175,10]]}}}],["namespacelifecycl",{"_index":2167,"t":{"2105":{"position":[[41,18],[114,20]]},"2251":{"position":[[221,19]]}}}],["namespaceselector",{"_index":2038,"t":{"2093":{"position":[[5947,18],[6146,18],[6345,18]]},"2095":{"position":[[460,18]]}}}],["nativ",{"_index":997,"t":{"1782":{"position":[[553,8]]},"1792":{"position":[[236,6]]},"1794":{"position":[[2062,8]]},"1945":{"position":[[362,6],[485,6],[1568,6]]},"1947":{"position":[[144,6],[367,6],[729,6]]},"1957":{"position":[[574,6]]},"1973":{"position":[[139,6]]},"2159":{"position":[[100,6]]}}}],["natur",{"_index":2197,"t":{"2121":{"position":[[249,6]]}}}],["nbodi",{"_index":400,"t":{"1681":{"position":[[743,5],[923,9]]}}}],["necessari",{"_index":742,"t":{"1742":{"position":[[2827,9]]},"1748":{"position":[[1404,9]]},"1888":{"position":[[121,9]]},"1900":{"position":[[917,9]]},"2075":{"position":[[200,9]]},"2093":{"position":[[1256,9],[2287,9]]},"2099":{"position":[[89,9]]}}}],["necessarili",{"_index":2305,"t":{"2167":{"position":[[643,11]]}}}],["need",{"_index":755,"t":{"1744":{"position":[[749,4],[815,4]]},"1746":{"position":[[569,4],[704,4],[777,4]]},"1821":{"position":[[126,4]]},"1836":{"position":[[15,4]]},"1840":{"position":[[12,4]]},"1842":{"position":[[116,5]]},"1844":{"position":[[350,4]]},"1893":{"position":[[138,5]]},"1900":{"position":[[161,4],[383,4],[675,4]]},"1955":{"position":[[129,4]]},"1959":{"position":[[321,4]]},"1969":{"position":[[452,4],[585,4]]},"1983":{"position":[[15,5],[72,4],[513,6],[539,6]]},"1995":{"position":[[144,4]]},"2085":{"position":[[578,4]]},"2093":{"position":[[2058,4],[2121,4],[2177,6]]},"2117":{"position":[[662,7]]},"2163":{"position":[[172,6],[2579,7]]},"2377":{"position":[[121,4]]},"2387":{"position":[[90,4]]},"2423":{"position":[[91,4]]},"2434":{"position":[[111,4]]}}}],["net",{"_index":2272,"t":{"2159":{"position":[[800,4]]}}}],["net.ipv4.ip_forward",{"_index":2024,"t":{"2093":{"position":[[3808,19]]}}}],["net.ipv6.conf.all.accept_ra=2",{"_index":1594,"t":{"1955":{"position":[[152,30]]}}}],["net.ipv6.conf.all.forward",{"_index":2025,"t":{"2093":{"position":[[3830,28]]}}}],["net_admin",{"_index":2022,"t":{"2093":{"position":[[3774,9]]}}}],["net_raw",{"_index":1720,"t":{"1983":{"position":[[1107,7],[1289,7]]},"2408":{"position":[[146,7]]}}}],["netpol",{"_index":1812,"t":{"2029":{"position":[[56,6]]}}}],["network",{"_index":934,"t":{"1764":{"position":[[372,7]]},"1782":{"position":[[71,7],[150,7]]},"1786":{"position":[[251,7],[286,7]]},"1794":{"position":[[1382,12],[1405,7],[1483,12],[1506,7],[1599,12],[1717,12],[1849,12],[1928,12],[2135,12],[2203,12],[2296,12],[2401,12],[6195,7],[6243,7]]},"1842":{"position":[[619,7],[821,7]]},"1848":{"position":[[1157,7],[1359,7]]},"1895":{"position":[[1392,9]]},"1943":{"position":[[24,7],[155,10]]},"1945":{"position":[[45,7],[101,7],[1616,7],[1751,7],[1880,7]]},"1949":{"position":[[107,7],[168,7]]},"1953":{"position":[[279,7],[522,10],[1558,7]]},"1957":{"position":[[73,8],[961,10],[1573,7]]},"1983":{"position":[[885,7],[1060,7],[1146,7]]},"2029":{"position":[[142,7]]},"2091":{"position":[[109,7],[245,7],[318,7]]},"2093":{"position":[[2376,7]]},"2095":{"position":[[40,7],[120,7],[295,7],[598,7],[736,7],[999,7],[2664,7]]},"2129":{"position":[[175,10],[345,10],[418,7]]},"2156":{"position":[[280,10]]},"2421":{"position":[[68,7]]}}}],["networking.k8s.io/v1",{"_index":2035,"t":{"2093":{"position":[[5830,20],[6033,20],[6228,20]]},"2095":{"position":[[343,20],[671,20],[1304,20],[1518,20],[1759,20],[1987,20],[2201,20],[2442,20]]}}}],["networkpolici",{"_index":1957,"t":{"2085":{"position":[[636,15]]},"2093":{"position":[[5804,13],[6007,13],[6202,13]]},"2095":{"position":[[317,13],[698,13],[1331,13],[1545,13],[1786,13],[2014,13],[2228,13],[2469,13]]},"2423":{"position":[[62,13]]}}}],["never",{"_index":1098,"t":{"1811":{"position":[[1394,5]]}}}],["new",{"_index":675,"t":{"1740":{"position":[[1112,3]]},"1742":{"position":[[1555,3]]},"1744":{"position":[[560,3],[784,3],[849,3],[996,3],[2432,3]]},"1746":{"position":[[606,3],[626,3],[811,3],[1017,3],[1133,3],[1574,3],[1643,3],[2232,3]]},"1748":{"position":[[404,3],[840,3]]},"1750":{"position":[[752,3],[798,3],[2421,3]]},"1754":{"position":[[180,3]]},"1760":{"position":[[1700,3]]},"1764":{"position":[[111,3]]},"1769":{"position":[[499,3],[610,3]]},"1794":{"position":[[3213,3],[3336,3]]},"1811":{"position":[[522,3]]},"1850":{"position":[[563,3]]},"1898":{"position":[[91,3]]},"1904":{"position":[[613,3]]},"1937":{"position":[[352,3]]},"1947":{"position":[[422,3],[534,3]]},"1957":{"position":[[1318,3]]},"2081":{"position":[[142,3]]},"2097":{"position":[[1403,3]]},"2105":{"position":[[275,3]]},"2159":{"position":[[1734,3]]},"2163":{"position":[[2057,3]]},"2167":{"position":[[885,3]]},"2171":{"position":[[200,3]]},"2440":{"position":[[135,3]]}}}],["newer",{"_index":1252,"t":{"1850":{"position":[[489,5]]},"1920":{"position":[[10,5]]},"2093":{"position":[[10,5],[46,5]]},"2095":{"position":[[1270,5]]},"2099":{"position":[[159,5]]},"2105":{"position":[[407,5]]},"2169":{"position":[[170,5],[246,5]]}}}],["newest",{"_index":2297,"t":{"2163":{"position":[[2238,6]]}}}],["next",{"_index":676,"t":{"1740":{"position":[[1155,4]]},"1760":{"position":[[1253,4]]},"2093":{"position":[[2408,4]]}}}],["nflog",{"_index":590,"t":{"1721":{"position":[[76,5],[238,5],[286,5],[422,5],[601,5],[811,5]]}}}],["nflog.prefix",{"_index":606,"t":{"1721":{"position":[[787,12]]}}}],["nflog:100",{"_index":605,"t":{"1721":{"position":[[683,9]]}}}],["nftabl",{"_index":1757,"t":{"2017":{"position":[[7,8]]}}}],["nginx:stabl",{"_index":2242,"t":{"2143":{"position":[[117,12]]},"2149":{"position":[[117,12]]}}}],["ni",{"_index":604,"t":{"1721":{"position":[[680,2]]}}}],["nm",{"_index":495,"t":{"1702":{"position":[[440,2],[496,2],[519,2]]}}}],["no_proxi",{"_index":231,"t":{"1673":{"position":[[183,8],[462,8],[536,8]]}}}],["no_proxy=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16",{"_index":243,"t":{"1673":{"position":[[686,60]]}}}],["node",{"_index":97,"t":{"1648":{"position":[[40,4],[70,4],[87,4],[112,4],[124,4],[199,4]]},"1652":{"position":[[40,4],[96,4],[103,4],[167,4]]},"1660":{"position":[[48,4],[65,4],[339,4],[362,4],[389,4],[444,4],[473,4],[599,4]]},"1662":{"position":[[169,4],[1009,4],[1038,4],[1072,4],[1106,4],[1118,4],[1202,4],[2634,4],[2714,4],[2721,4],[2812,4]]},"1683":{"position":[[122,5]]},"1695":{"position":[[12,4],[27,4]]},"1717":{"position":[[429,8]]},"1733":{"position":[[732,4]]},"1740":{"position":[[288,5],[712,5]]},"1744":{"position":[[197,5],[681,5],[2239,5],[2361,5],[2566,4]]},"1746":{"position":[[220,5],[521,5],[2063,5],[2130,5],[2197,6],[2365,4]]},"1756":{"position":[[967,4]]},"1758":{"position":[[167,4],[491,4],[821,4]]},"1760":{"position":[[131,5],[182,5],[611,4],[622,4],[856,4],[929,5],[1290,4],[1301,4],[1547,5]]},"1776":{"position":[[146,4]]},"1782":{"position":[[197,4],[680,4],[957,6],[1226,6],[1233,5],[1484,5],[1575,6],[1582,5],[1669,5],[1737,5],[1839,5]]},"1794":{"position":[[951,4],[1577,4],[2220,4],[6334,4],[6363,4],[6397,4],[6431,4],[6443,4],[6527,4],[7695,4],[7775,4],[7782,4],[7873,4]]},"1796":{"position":[[30,4],[96,5],[110,4]]},"1800":{"position":[[313,5],[661,4],[747,4]]},"1802":{"position":[[99,4],[158,4]]},"1806":{"position":[[260,5]]},"1810":{"position":[[71,5]]},"1811":{"position":[[1265,4]]},"1832":{"position":[[434,5],[531,5],[751,5],[772,5],[1035,6]]},"1838":{"position":[[32,5],[171,6],[362,6],[918,6],[1171,5],[1351,4],[1400,5],[1433,4],[1537,6],[1610,6],[1644,5]]},"1840":{"position":[[6,5],[96,6],[260,4],[302,5],[397,6],[472,5],[809,5]]},"1842":{"position":[[73,6],[111,4],[154,4],[359,5],[612,6],[1021,6]]},"1844":{"position":[[19,5],[75,5],[124,5],[145,6],[159,5],[218,5],[255,5],[307,5]]},"1848":{"position":[[63,6],[103,6],[148,4],[682,5],[976,6],[1009,5],[1150,6]]},"1850":{"position":[[314,4]]},"1884":{"position":[[52,5]]},"1888":{"position":[[38,5],[146,4]]},"1893":{"position":[[315,4],[449,5],[668,5]]},"1895":{"position":[[196,5],[303,5]]},"1898":{"position":[[267,5],[360,5]]},"1906":{"position":[[1047,6],[1154,5],[1193,6],[1204,5],[1469,6]]},"1908":{"position":[[362,4],[550,4],[575,4],[1020,4]]},"1910":{"position":[[452,4],[592,4],[710,4]]},"1929":{"position":[[10,6]]},"1933":{"position":[[1328,6],[1470,6],[1517,6]]},"1945":{"position":[[220,6],[808,5],[1136,4],[1248,4],[1277,5],[1459,4],[1518,5],[2257,4]]},"1947":{"position":[[511,5],[624,6],[914,6]]},"1951":{"position":[[58,5],[1404,6]]},"1953":{"position":[[188,4],[777,6],[1103,4],[1132,4],[1194,4],[1209,4]]},"1955":{"position":[[198,4]]},"1957":{"position":[[39,5],[119,5],[228,5],[508,4],[620,4],[730,4],[811,5],[1189,5],[1276,4],[1487,5],[1767,5]]},"1959":{"position":[[105,5],[362,4],[417,5],[486,5]]},"1963":{"position":[[1469,5]]},"1967":{"position":[[90,4]]},"1969":{"position":[[90,4],[613,5]]},"1973":{"position":[[166,4]]},"1975":{"position":[[4,5],[53,5],[170,4],[220,5],[265,4],[302,4]]},"1983":{"position":[[55,6],[66,5],[103,5],[251,4],[334,5],[601,5],[725,5],[816,5],[928,5]]},"1985":{"position":[[193,5],[203,5],[255,5],[265,5],[301,5],[311,5],[377,5],[387,5]]},"1989":{"position":[[62,5],[119,5]]},"1995":{"position":[[188,5]]},"1997":{"position":[[261,6]]},"1999":{"position":[[242,4],[314,5]]},"2001":{"position":[[29,4],[103,4],[166,6],[403,6],[460,5],[480,5]]},"2003":{"position":[[41,5],[172,5]]},"2005":{"position":[[172,5]]},"2007":{"position":[[369,4],[456,4],[497,4],[538,4]]},"2009":{"position":[[31,5]]},"2011":{"position":[[31,5]]},"2021":{"position":[[3103,4]]},"2043":{"position":[[156,4],[168,4]]},"2057":{"position":[[90,4],[320,5]]},"2061":{"position":[[122,4],[681,5]]},"2067":{"position":[[40,4]]},"2069":{"position":[[72,4]]},"2075":{"position":[[642,5]]},"2093":{"position":[[5012,4]]},"2101":{"position":[[2297,4],[3959,4]]},"2131":{"position":[[748,4]]},"2156":{"position":[[450,5]]},"2159":{"position":[[286,5],[549,5],[656,4]]},"2163":{"position":[[93,5],[130,6],[224,6],[591,4],[939,4],[1357,5],[1431,5],[1481,5],[1496,4],[1570,5],[1619,5]]},"2165":{"position":[[149,5],[191,6]]},"2180":{"position":[[123,5]]},"2182":{"position":[[123,5]]},"2184":{"position":[[123,5]]},"2186":{"position":[[123,5]]},"2188":{"position":[[123,5]]},"2190":{"position":[[123,5]]},"2192":{"position":[[123,5]]},"2194":{"position":[[123,5]]},"2196":{"position":[[123,5]]},"2198":{"position":[[123,5]]},"2200":{"position":[[45,5]]},"2202":{"position":[[55,5]]},"2204":{"position":[[123,5]]},"2206":{"position":[[113,5]]},"2208":{"position":[[113,5]]},"2210":{"position":[[113,5]]},"2212":{"position":[[113,5]]},"2214":{"position":[[113,5]]},"2216":{"position":[[113,5]]},"2218":{"position":[[113,5]]},"2220":{"position":[[113,5]]},"2223":{"position":[[136,4]]},"2225":{"position":[[222,4]]},"2227":{"position":[[136,4]]},"2229":{"position":[[146,4]]},"2231":{"position":[[240,4],[2629,4]]},"2233":{"position":[[243,4],[2577,4]]},"2235":{"position":[[136,4],[2446,4]]},"2237":{"position":[[136,4],[209,5],[406,6],[2395,4]]},"2239":{"position":[[136,4],[2408,4]]},"2241":{"position":[[2521,4]]},"2243":{"position":[[136,4],[2482,4]]},"2245":{"position":[[136,4]]},"2247":{"position":[[136,4],[2555,4]]},"2249":{"position":[[226,4],[2536,4]]},"2251":{"position":[[136,4],[2432,4]]},"2253":{"position":[[229,4],[2548,4]]},"2255":{"position":[[136,4],[2413,4]]},"2257":{"position":[[136,4],[2328,4]]},"2259":{"position":[[146,4]]},"2261":{"position":[[146,4]]},"2263":{"position":[[146,4]]},"2265":{"position":[[146,4]]},"2267":{"position":[[136,4],[2503,4]]},"2269":{"position":[[146,4]]},"2271":{"position":[[240,4]]},"2273":{"position":[[226,4],[2545,4]]},"2275":{"position":[[226,4],[2461,4]]},"2277":{"position":[[240,4],[2467,4]]},"2279":{"position":[[217,4]]},"2283":{"position":[[136,4]]},"2286":{"position":[[153,4]]},"2288":{"position":[[153,4],[535,4],[1630,4]]},"2290":{"position":[[153,4],[603,4],[1698,4]]},"2292":{"position":[[153,4],[688,4],[1783,4]]},"2294":{"position":[[153,4],[585,4],[1680,4]]},"2296":{"position":[[163,4]]},"2298":{"position":[[153,4]]},"2301":{"position":[[140,4]]},"2303":{"position":[[135,4]]},"2306":{"position":[[187,4]]},"2308":{"position":[[113,4]]},"2310":{"position":[[113,4]]},"2312":{"position":[[229,4]]},"2314":{"position":[[113,4]]},"2316":{"position":[[113,4]]},"2318":{"position":[[236,4]]},"2329":{"position":[[121,5]]},"2331":{"position":[[121,5]]},"2333":{"position":[[111,5]]},"2335":{"position":[[111,5]]},"2337":{"position":[[111,5]]},"2339":{"position":[[111,5]]},"2350":{"position":[[254,4],[2812,4]]},"2352":{"position":[[240,4],[2826,4]]},"2354":{"position":[[283,4],[2941,4]]},"2356":{"position":[[230,4],[1458,4],[2681,4]]},"2358":{"position":[[267,4]]},"2360":{"position":[[252,4]]},"2362":{"position":[[253,4]]},"2364":{"position":[[135,4]]},"2366":{"position":[[251,4]]},"2368":{"position":[[373,4],[1649,4],[2872,4]]},"2370":{"position":[[307,4]]},"2372":{"position":[[135,4]]},"2374":{"position":[[556,4]]}}}],["node'",{"_index":1334,"t":{"1893":{"position":[[536,6]]},"1951":{"position":[[1501,6]]}}}],["node.cloudprovider.kubernetes.io/uniniti",{"_index":1829,"t":{"2043":{"position":[[273,46]]}}}],["node.k8s.io/v1",{"_index":394,"t":{"1681":{"position":[[625,14]]}}}],["node:13.13.0",{"_index":565,"t":{"1717":{"position":[[165,12]]}}}],["node>:6443",{"_index":1747,"t":{"2001":{"position":[[360,10]]}}}],["nodej",{"_index":569,"t":{"1717":{"position":[[321,6],[354,6]]}}}],["nodeport",{"_index":989,"t":{"1782":{"position":[[273,8]]},"1794":{"position":[[1652,8]]},"2027":{"position":[[219,8]]}}}],["noderestrict",{"_index":1982,"t":{"2091":{"position":[[521,15]]},"2093":{"position":[[1128,15]]},"2253":{"position":[[76,15],[308,16],[548,17]]}}}],["nodeselector",{"_index":2289,"t":{"2163":{"position":[[552,13],[900,13]]}}}],["non",{"_index":749,"t":{"1744":{"position":[[500,3],[1380,3]]},"1983":{"position":[[1300,3]]},"2105":{"position":[[177,3]]},"2255":{"position":[[212,4]]}}}],["none",{"_index":993,"t":{"1782":{"position":[[493,7]]},"1794":{"position":[[2001,7]]},"1904":{"position":[[842,4],[935,5],[1045,4],[1171,4],[1256,4]]},"1912":{"position":[[355,4],[464,4],[562,4]]},"1945":{"position":[[1104,5]]}}}],["normal",{"_index":804,"t":{"1748":{"position":[[1174,6]]},"1957":{"position":[[1153,8]]},"2095":{"position":[[2684,6]]}}}],["notabl",{"_index":1952,"t":{"2085":{"position":[[397,7]]}}}],["note",{"_index":42,"t":{"1640":{"position":[[62,4]]},"1742":{"position":[[928,5],[1070,5]]},"1756":{"position":[[806,5]]},"1762":{"position":[[63,4]]},"1832":{"position":[[0,5]]},"1846":{"position":[[216,4]]},"1900":{"position":[[266,5]]},"1939":{"position":[[222,4]]},"1943":{"position":[[128,5]]},"1951":{"position":[[1411,5]]},"1953":{"position":[[926,4]]},"1957":{"position":[[817,4]]},"1959":{"position":[[400,4]]},"2021":{"position":[[2087,4]]},"2089":{"position":[[172,5]]},"2093":{"position":[[6395,5]]},"2103":{"position":[[113,4]]},"2176":{"position":[[1916,5]]}}}],["notic",{"_index":1218,"t":{"1846":{"position":[[85,7]]}}}],["now",{"_index":438,"t":{"1689":{"position":[[624,3]]},"1702":{"position":[[53,3]]},"1848":{"position":[[643,3],[820,3]]},"1886":{"position":[[134,3]]},"1890":{"position":[[333,3]]},"1922":{"position":[[118,3]]}}}],["ns",{"_index":1452,"t":{"1924":{"position":[[24,2]]},"1926":{"position":[[24,2]]}}}],["number",{"_index":64,"t":{"1642":{"position":[[36,6]]},"1662":{"position":[[407,6]]},"1740":{"position":[[22,6]]},"1750":{"position":[[325,6],[2214,6]]},"1767":{"position":[[953,6]]},"1774":{"position":[[67,6]]},"1794":{"position":[[418,6],[4824,6]]},"1840":{"position":[[548,6]]},"1844":{"position":[[65,6]]},"1848":{"position":[[46,6]]},"1931":{"position":[[17,6]]},"2085":{"position":[[242,6],[322,6]]},"2113":{"position":[[327,6]]},"2115":{"position":[[313,6]]},"2261":{"position":[[219,6]]}}}],["nvcr.io/nvidia/k8s/cuda",{"_index":406,"t":{"1681":{"position":[[880,23]]}}}],["nvidia",{"_index":380,"t":{"1681":{"position":[[14,6],[186,6],[242,6],[369,6],[464,6],[476,6],[566,7],[675,6],[691,6],[831,6],[1177,7]]}}}],["nvidia.com/gpu",{"_index":410,"t":{"1681":{"position":[[974,15]]}}}],["nvidia_driver_cap",{"_index":413,"t":{"1681":{"position":[[1047,26]]}}}],["nvidia_visible_devic",{"_index":412,"t":{"1681":{"position":[[1005,22]]}}}],["nvme",{"_index":1914,"t":{"2063":{"position":[[78,4]]}}}],["o",{"_index":966,"t":{"1771":{"position":[[65,1]]},"1794":{"position":[[2516,1]]},"1916":{"position":[[146,1]]},"1924":{"position":[[194,1]]},"2163":{"position":[[2709,1],[2752,1]]}}}],["object",{"_index":880,"t":{"1750":{"position":[[4445,6]]},"1933":{"position":[[564,6]]},"2105":{"position":[[148,7],[279,8],[413,8]]},"2107":{"position":[[239,7]]},"2121":{"position":[[209,8],[224,7]]},"2249":{"position":[[77,7]]},"2326":{"position":[[355,8]]},"2379":{"position":[[86,7]]},"2381":{"position":[[110,7]]},"2383":{"position":[[70,7]]},"2423":{"position":[[76,7]]},"2434":{"position":[[77,7]]}}}],["observ",{"_index":721,"t":{"1742":{"position":[[1245,7]]}}}],["obtain",{"_index":1324,"t":{"1890":{"position":[[0,6]]},"1971":{"position":[[7,6]]}}}],["occasion",{"_index":1027,"t":{"1800":{"position":[[24,13]]}}}],["oci",{"_index":558,"t":{"1715":{"position":[[452,3]]}}}],["odd",{"_index":1232,"t":{"1848":{"position":[[42,3]]}}}],["offer",{"_index":1567,"t":{"1951":{"position":[[696,6]]},"2428":{"position":[[66,7]]}}}],["offici",{"_index":193,"t":{"1660":{"position":[[528,8]]},"1821":{"position":[[364,8],[397,8],[426,8],[460,8]]},"1832":{"position":[[6,8]]},"1884":{"position":[[210,8]]}}}],["oidc",{"_index":2507,"t":{"2321":{"position":[[91,4]]}}}],["old",{"_index":778,"t":{"1746":{"position":[[674,3],[1049,3],[1125,3]]},"1748":{"position":[[149,3],[412,3]]},"1750":{"position":[[623,3],[686,5]]},"1898":{"position":[[284,3],[319,3]]},"2113":{"position":[[147,3],[337,3]]},"2115":{"position":[[146,3],[323,3]]},"2171":{"position":[[174,3]]}}}],["older",{"_index":1254,"t":{"1850":{"position":[[534,5]]},"1920":{"position":[[26,5]]},"2085":{"position":[[711,6]]},"2093":{"position":[[26,5],[862,5]]},"2095":{"position":[[1286,5]]},"2099":{"position":[[175,5]]},"2169":{"position":[[23,5]]}}}],["omit",{"_index":2296,"t":{"2163":{"position":[[1863,4]]}}}],["on",{"_index":789,"t":{"1748":{"position":[[145,3]]},"1750":{"position":[[819,3]]},"1756":{"position":[[956,3]]},"1758":{"position":[[810,3]]},"1782":{"position":[[486,3],[864,3]]},"1794":{"position":[[1994,3],[2309,3]]},"1806":{"position":[[71,3]]},"1811":{"position":[[642,3],[1554,3]]},"1832":{"position":[[1017,3]]},"1895":{"position":[[23,3]]},"1933":{"position":[[1385,3]]},"1963":{"position":[[299,3],[306,4],[337,4],[986,4]]},"1981":{"position":[[337,3]]},"2065":{"position":[[161,3]]},"2165":{"position":[[161,3]]},"2235":{"position":[[218,3]]}}}],["on=fals",{"_index":2149,"t":{"2101":{"position":[[3785,8]]},"2356":{"position":[[1302,8],[2525,8]]},"2368":{"position":[[1493,8],[2716,8]]}}}],["onc",{"_index":180,"t":{"1660":{"position":[[215,4]]},"1756":{"position":[[1341,4],[1467,4],[1716,4]]},"1758":{"position":[[1200,4],[1447,4]]},"1806":{"position":[[303,4]]},"1838":{"position":[[1479,4]]},"1850":{"position":[[170,4]]},"1886":{"position":[[96,4]]},"1890":{"position":[[295,4]]},"1900":{"position":[[893,4]]},"1953":{"position":[[631,4]]},"1955":{"position":[[231,4]]},"2117":{"position":[[342,4]]},"2163":{"position":[[231,4]]}}}],["onfailur",{"_index":405,"t":{"1681":{"position":[[803,9]]}}}],["open",{"_index":1713,"t":{"1983":{"position":[[863,5]]},"2129":{"position":[[582,5]]}}}],["openrc",{"_index":471,"t":{"1697":{"position":[[37,7],[79,7]]},"1756":{"position":[[415,6],[1311,6]]},"1758":{"position":[[351,6],[1170,6]]},"1862":{"position":[[85,8]]},"1904":{"position":[[150,6]]},"2049":{"position":[[16,6]]},"2053":{"position":[[150,6],[2587,6]]},"2173":{"position":[[71,7],[204,6]]}}}],["openssl",{"_index":793,"t":{"1748":{"position":[[735,7],[751,7],[778,8],[848,7]]}}}],["openssl_genrsa_flag",{"_index":796,"t":{"1748":{"position":[[793,21],[863,23]]}}}],["oper",{"_index":644,"t":{"1740":{"position":[[59,10],[1296,9]]},"1764":{"position":[[190,9]]},"1821":{"position":[[55,10]]},"1823":{"position":[[97,10]]},"1945":{"position":[[721,9]]},"1951":{"position":[[228,7],[390,9]]},"2021":{"position":[[1120,8],[1637,8]]},"2061":{"position":[[668,9]]},"2075":{"position":[[256,10],[424,9],[520,8],[844,10]]},"2085":{"position":[[526,9]]},"2093":{"position":[[831,8]]},"2095":{"position":[[2642,9]]},"2103":{"position":[[169,8]]},"2163":{"position":[[629,9],[977,9]]},"2176":{"position":[[354,10],[1346,8],[1559,9]]},"2412":{"position":[[185,7]]}}}],["oppos",{"_index":1159,"t":{"1832":{"position":[[613,7]]}}}],["opt",{"_index":1959,"t":{"2085":{"position":[[775,3]]}}}],["opt/k3s/server/tl",{"_index":761,"t":{"1744":{"position":[[1262,19],[1639,19],[1815,19]]},"1748":{"position":[[707,19]]}}}],["opt/k3s/server/tls/service.key",{"_index":800,"t":{"1748":{"position":[[894,31],[1045,31]]}}}],["optim",{"_index":1697,"t":{"1981":{"position":[[614,7]]},"1991":{"position":[[67,7]]}}}],["option",{"_index":50,"t":{"1640":{"position":[[167,7],[262,8]]},"1660":{"position":[[38,7],[129,7]]},"1662":{"position":[[6,6],[82,6],[197,9],[207,8]]},"1744":{"position":[[656,6],[2314,6]]},"1746":{"position":[[728,6]]},"1750":{"position":[[368,8],[937,7],[1369,7],[1857,8],[1872,7],[1978,7],[2963,7],[3326,11]]},"1762":{"position":[[128,7],[205,7],[300,8]]},"1764":{"position":[[14,7]]},"1767":{"position":[[1566,10]]},"1794":{"position":[[6,6],[84,6],[208,9],[218,8],[5514,10]]},"1804":{"position":[[167,6]]},"1808":{"position":[[154,6]]},"1811":{"position":[[210,8],[457,8],[2628,8]]},"1817":{"position":[[278,7]]},"1836":{"position":[[95,7]]},"1838":{"position":[[994,7],[1129,7]]},"1840":{"position":[[942,7],[955,6]]},"1902":{"position":[[25,7],[135,7]]},"1904":{"position":[[617,8]]},"1906":{"position":[[968,8]]},"1912":{"position":[[17,7]]},"1943":{"position":[[46,8]]},"1945":{"position":[[186,7]]},"1975":{"position":[[178,6]]},"1987":{"position":[[186,7]]},"1993":{"position":[[161,6]]},"2005":{"position":[[110,7]]},"2021":{"position":[[2144,8]]},"2053":{"position":[[2300,7],[2416,7]]},"2079":{"position":[[526,8]]},"2085":{"position":[[837,7]]},"2123":{"position":[[266,8]]},"2129":{"position":[[186,7]]},"2159":{"position":[[449,8]]},"2310":{"position":[[2148,9],[2388,9],[2628,9]]},"2316":{"position":[[2193,9]]},"2428":{"position":[[58,7]]}}}],["order",{"_index":1104,"t":{"1811":{"position":[[1924,5]]},"1893":{"position":[[511,5]]},"1910":{"position":[[219,6]]},"1931":{"position":[[444,5]]},"1969":{"position":[[534,5]]},"1997":{"position":[[198,5]]},"2107":{"position":[[302,5]]},"2326":{"position":[[273,5]]}}}],["organ",{"_index":1463,"t":{"1933":{"position":[[208,10]]}}}],["organization/project",{"_index":1638,"t":{"1963":{"position":[[903,20]]}}}],["origin",{"_index":762,"t":{"1744":{"position":[[1460,8],[1492,8]]},"1963":{"position":[[1359,8]]},"2176":{"position":[[1047,8]]}}}],["os",{"_index":222,"t":{"1664":{"position":[[49,3]]},"1697":{"position":[[22,3]]},"1706":{"position":[[7,3],[82,2]]},"1862":{"position":[[30,3]]},"1870":{"position":[[56,2]]},"1977":{"position":[[113,2]]},"1979":{"position":[[214,3]]},"1985":{"position":[[551,2],[575,2]]},"2017":{"position":[[165,2]]},"2063":{"position":[[0,3]]}}}],["oss",{"_index":1678,"t":{"1979":{"position":[[59,3],[297,3]]}}}],["other",{"_index":1983,"t":{"2091":{"position":[[574,7]]}}}],["other=what",{"_index":1421,"t":{"1910":{"position":[[606,10],[724,10]]}}}],["otherwis",{"_index":1499,"t":{"1939":{"position":[[313,9]]},"1955":{"position":[[183,10]]},"1969":{"position":[[495,9]]}}}],["out",{"_index":799,"t":{"1748":{"position":[[890,3]]},"1929":{"position":[[225,3]]},"1993":{"position":[[90,3]]},"2113":{"position":[[232,3]]},"2115":{"position":[[231,3]]},"2163":{"position":[[1200,3]]},"2167":{"position":[[362,3]]}}}],["outbound",{"_index":1708,"t":{"1983":{"position":[[345,8]]},"1985":{"position":[[454,8]]}}}],["outlin",{"_index":1663,"t":{"1973":{"position":[[62,8]]},"1981":{"position":[[95,8]]},"2085":{"position":[[96,8]]},"2087":{"position":[[118,8]]},"2091":{"position":[[166,8]]},"2123":{"position":[[341,8]]},"2176":{"position":[[1232,8]]}}}],["output",{"_index":784,"t":{"1746":{"position":[[1632,6],[1820,6]]},"1811":{"position":[[753,6],[2594,6],[2607,6]]}}}],["outsid",{"_index":1120,"t":{"1821":{"position":[[78,7]]},"2129":{"position":[[514,7]]}}}],["over",{"_index":168,"t":{"1656":{"position":[[143,4]]},"1662":{"position":[[3393,4]]},"1754":{"position":[[115,4]]},"1767":{"position":[[1668,4]]},"1790":{"position":[[199,4]]},"1794":{"position":[[5622,4],[8712,4]]},"1840":{"position":[[138,4],[283,4],[499,4]]},"1898":{"position":[[371,4]]},"1983":{"position":[[109,4],[158,4]]},"2081":{"position":[[77,4]]}}}],["overhead",{"_index":1895,"t":{"2059":{"position":[[482,8]]}}}],["overlayf",{"_index":217,"t":{"1662":{"position":[[2496,12]]},"1794":{"position":[[7428,12]]}}}],["overrid",{"_index":153,"t":{"1652":{"position":[[259,8],[319,8],[385,8]]},"1662":{"position":[[2446,8],[2941,8],[3016,8],[3097,8]]},"1750":{"position":[[4863,10]]},"1794":{"position":[[7378,8],[8002,8],[8077,8],[8158,8]]},"2364":{"position":[[166,8]]}}}],["override=hostname01",{"_index":2151,"t":{"2101":{"position":[[3838,19]]}}}],["override=k3",{"_index":2541,"t":{"2356":{"position":[[1355,12],[2578,12]]},"2368":{"position":[[1546,12],[2769,12]]}}}],["overview",{"_index":2310,"t":{"2176":{"position":[[0,9]]}}}],["overwrit",{"_index":747,"t":{"1744":{"position":[[252,9]]},"1746":{"position":[[275,9]]},"1748":{"position":[[438,9]]},"1908":{"position":[[1055,9]]},"2053":{"position":[[686,10]]}}}],["own",{"_index":969,"t":{"1771":{"position":[[248,5]]}}}],["ownership",{"_index":1961,"t":{"2085":{"position":[[1135,10]]},"2343":{"position":[[66,9]]}}}],["p",{"_index":440,"t":{"1689":{"position":[[836,1]]},"1708":{"position":[[385,1]]},"1742":{"position":[[2008,1]]},"1744":{"position":[[1260,1]]},"1748":{"position":[[705,1]]},"1890":{"position":[[185,1]]},"2089":{"position":[[360,1]]},"2097":{"position":[[411,1]]}}}],["packag",{"_index":1020,"t":{"1794":{"position":[[5840,8]]},"1931":{"position":[[27,8],[316,8]]},"1933":{"position":[[671,8]]},"1937":{"position":[[15,8]]},"1945":{"position":[[2240,8]]},"1973":{"position":[[279,8]]},"2059":{"position":[[47,8],[212,8]]},"2085":{"position":[[1216,8]]},"2095":{"position":[[1063,8]]}}}],["packet",{"_index":1531,"t":{"1945":{"position":[[1336,8]]}}}],["page",{"_index":47,"t":{"1640":{"position":[[127,4],[198,4]]},"1762":{"position":[[236,4]]},"1890":{"position":[[67,4]]},"1893":{"position":[[198,5]]},"1898":{"position":[[139,4]]},"1902":{"position":[[5,4]]},"1906":{"position":[[203,5]]},"1943":{"position":[[5,4],[166,4]]},"1977":{"position":[[130,4]]},"2159":{"position":[[1292,5],[1435,5]]}}}],["paramet",{"_index":1171,"t":{"1838":{"position":[[214,9],[294,9],[1362,9]]},"1957":{"position":[[483,10],[846,9],[1293,9]]},"2087":{"position":[[55,10]]},"2089":{"position":[[82,10],[253,11]]},"2223":{"position":[[159,10]]},"2225":{"position":[[271,10]]},"2229":{"position":[[182,10]]},"2231":{"position":[[292,10]]},"2233":{"position":[[292,9]]},"2235":{"position":[[174,9]]},"2237":{"position":[[174,9]]},"2239":{"position":[[174,9]]},"2241":{"position":[[227,11]]},"2243":{"position":[[190,10]]},"2245":{"position":[[180,9]]},"2247":{"position":[[180,9]]},"2249":{"position":[[279,9]]},"2251":{"position":[[181,9]]},"2253":{"position":[[273,9]]},"2255":{"position":[[177,9]]},"2257":{"position":[[159,10]]},"2259":{"position":[[180,9]]},"2261":{"position":[[182,9]]},"2263":{"position":[[185,9]]},"2265":{"position":[[183,9]]},"2267":{"position":[[159,10],[259,9]]},"2269":{"position":[[190,9]]},"2271":{"position":[[287,11]]},"2273":{"position":[[280,11]]},"2277":{"position":[[289,10]]},"2279":{"position":[[263,9]]},"2283":{"position":[[159,10]]},"2288":{"position":[[176,10]]},"2290":{"position":[[175,10]]},"2292":{"position":[[205,9]]},"2294":{"position":[[185,9]]},"2296":{"position":[[196,9]]},"2298":{"position":[[210,9]]},"2301":{"position":[[163,10]]},"2303":{"position":[[192,9]]},"2306":{"position":[[210,11]]},"2308":{"position":[[136,10]]},"2310":{"position":[[151,9]]},"2312":{"position":[[252,11]]},"2314":{"position":[[136,10]]},"2316":{"position":[[156,9]]},"2318":{"position":[[259,10]]},"2350":{"position":[[277,9]]},"2352":{"position":[[263,9]]},"2354":{"position":[[306,9]]},"2356":{"position":[[253,9]]},"2358":{"position":[[290,9]]},"2360":{"position":[[275,9]]},"2366":{"position":[[274,9]]},"2368":{"position":[[396,10]]},"2372":{"position":[[158,9]]},"2374":{"position":[[593,9]]}}}],["part",{"_index":1028,"t":{"1800":{"position":[[92,6]]},"1832":{"position":[[1168,4]]},"1848":{"position":[[647,4]]},"1965":{"position":[[138,4],[548,4]]}}}],["parti",{"_index":2583,"t":{"2428":{"position":[[108,5]]}}}],["particular",{"_index":1932,"t":{"2075":{"position":[[1000,10]]}}}],["particularli",{"_index":1393,"t":{"1906":{"position":[[264,12]]}}}],["pass",{"_index":53,"t":{"1640":{"position":[[233,6]]},"1662":{"position":[[96,6]]},"1750":{"position":[[1887,6]]},"1762":{"position":[[271,6]]},"1794":{"position":[[98,6]]},"1817":{"position":[[246,4]]},"1842":{"position":[[854,6]]},"1848":{"position":[[1392,6]]},"1904":{"position":[[268,4]]},"1975":{"position":[[253,4]]},"1993":{"position":[[134,7]]},"2005":{"position":[[98,7]]},"2079":{"position":[[82,7],[239,4]]},"2085":{"position":[[315,4]]},"2093":{"position":[[141,7],[955,7]]},"2097":{"position":[[824,6]]},"2103":{"position":[[55,4],[147,6]]},"2105":{"position":[[448,7],[518,4]]},"2107":{"position":[[547,7],[617,4]]},"2109":{"position":[[471,7]]},"2111":{"position":[[311,7]]},"2113":{"position":[[486,7]]},"2115":{"position":[[472,7]]},"2117":{"position":[[696,7]]},"2119":{"position":[[489,7]]},"2123":{"position":[[301,7]]},"2125":{"position":[[563,7]]},"2127":{"position":[[183,7]]},"2129":{"position":[[614,7]]},"2131":{"position":[[874,4]]},"2176":{"position":[[1181,4],[1215,6]]},"2200":{"position":[[8,4],[80,6],[1653,4]]},"2202":{"position":[[90,6]]},"2206":{"position":[[8,4]]},"2208":{"position":[[8,4]]},"2210":{"position":[[8,4]]},"2212":{"position":[[8,4]]},"2214":{"position":[[8,4]]},"2216":{"position":[[8,4]]},"2225":{"position":[[8,4]]},"2227":{"position":[[8,4]]},"2231":{"position":[[8,4]]},"2233":{"position":[[8,4]]},"2235":{"position":[[8,4]]},"2237":{"position":[[8,4]]},"2239":{"position":[[8,4]]},"2243":{"position":[[8,4]]},"2249":{"position":[[8,4]]},"2251":{"position":[[8,4]]},"2253":{"position":[[8,4]]},"2255":{"position":[[8,4]]},"2257":{"position":[[8,4]]},"2267":{"position":[[8,4]]},"2271":{"position":[[8,4],[1783,4]]},"2273":{"position":[[8,4]]},"2275":{"position":[[8,4]]},"2277":{"position":[[8,4]]},"2288":{"position":[[8,4]]},"2290":{"position":[[8,4]]},"2292":{"position":[[8,4]]},"2294":{"position":[[8,4]]},"2298":{"position":[[8,4]]},"2301":{"position":[[8,4]]},"2303":{"position":[[8,4]]},"2306":{"position":[[8,4],[1677,4]]},"2308":{"position":[[8,4],[1566,4]]},"2310":{"position":[[8,4],[1591,4]]},"2312":{"position":[[8,4],[1743,4]]},"2314":{"position":[[8,4],[1569,4]]},"2316":{"position":[[8,4],[1601,4]]},"2318":{"position":[[8,4],[1700,4]]},"2333":{"position":[[8,4]]},"2335":{"position":[[8,4]]},"2337":{"position":[[8,4]]},"2339":{"position":[[8,4]]},"2341":{"position":[[8,4]]},"2343":{"position":[[8,4]]},"2350":{"position":[[8,4]]},"2352":{"position":[[8,4]]},"2354":{"position":[[8,4]]},"2356":{"position":[[8,4]]},"2368":{"position":[[8,4]]}}}],["passphras",{"_index":659,"t":{"1740":{"position":[[536,10]]},"1806":{"position":[[523,10]]}}}],["passwd",{"_index":627,"t":{"1733":{"position":[[657,7]]}}}],["password",{"_index":1044,"t":{"1800":{"position":[[601,9]]},"1802":{"position":[[41,8]]},"1806":{"position":[[100,9],[903,9]]},"1965":{"position":[[691,8],[705,8]]},"1967":{"position":[[301,9],[341,8]]},"1969":{"position":[[304,9],[344,8]]},"2007":{"position":[[502,8]]}}}],["password.k3",{"_index":623,"t":{"1733":{"position":[[363,12]]}}}],["past",{"_index":1356,"t":{"1898":{"position":[[525,4]]}}}],["patch",{"_index":2304,"t":{"2167":{"position":[[622,5]]}}}],["path",{"_index":134,"t":{"1650":{"position":[[128,5],[190,4]]},"1662":{"position":[[1330,4],[1517,4],[2215,5],[2273,4]]},"1675":{"position":[[598,4],[1883,4],[1946,4],[1969,4],[2660,4]]},"1750":{"position":[[978,4],[1410,4],[2531,4],[2542,4]]},"1784":{"position":[[41,4],[74,4]]},"1794":{"position":[[3393,4],[3409,4],[5713,4],[5756,4],[6655,4],[6842,4],[7147,5],[7205,4]]},"1906":{"position":[[228,5]]},"1939":{"position":[[793,4]]},"1965":{"position":[[211,4],[292,4],[384,4]]},"1967":{"position":[[368,4],[423,4],[476,4],[627,4],[682,4],[735,4]]},"2053":{"position":[[621,5]]},"2059":{"position":[[268,4]]},"2109":{"position":[[28,4],[439,5]]},"2141":{"position":[[65,4],[152,4]]},"2143":{"position":[[300,4]]},"2233":{"position":[[309,4]]},"2259":{"position":[[175,4],[204,4]]},"2279":{"position":[[280,4]]}}}],["path/to/cni/fil",{"_index":2337,"t":{"2196":{"position":[[152,19]]},"2198":{"position":[[158,19]]}}}],["path/to/encrypt",{"_index":2475,"t":{"2281":{"position":[[194,19]]}}}],["path=/opt/k3s/serv",{"_index":769,"t":{"1744":{"position":[[2083,20]]},"1748":{"position":[[1147,20]]}}}],["path=/var/lib/rancher/k3s/agent/pod",{"_index":2154,"t":{"2101":{"position":[[3987,35]]},"2356":{"position":[[1599,35],[2822,35]]},"2368":{"position":[[1790,35],[3013,35]]}}}],["path=/var/lib/rancher/k3s/server/logs/audit.log",{"_index":1766,"t":{"2021":{"position":[[572,48]]},"2097":{"position":[[898,48],[1236,48]]},"2099":{"position":[[340,48],[963,48]]}}}],["path=/var/lib/rancher/k3s/server/rot",{"_index":786,"t":{"1746":{"position":[[1885,39]]}}}],["path=/var/log/apiserver/audit.log",{"_index":2463,"t":{"2259":{"position":[[290,33]]}}}],["path=<path",{"_index":820,"t":{"1750":{"position":[[1050,10],[1482,10]]}}}],["path=<snapshot",{"_index":864,"t":{"1750":{"position":[[3780,14]]}}}],["paus",{"_index":136,"t":{"1650":{"position":[[197,5],[256,5]]},"1662":{"position":[[2280,5],[2325,5]]},"1675":{"position":[[1564,8],[1720,8],[2440,8],[2600,8],[2775,8]]},"1794":{"position":[[7212,5],[7257,5]]}}}],["pause:3.6",{"_index":215,"t":{"1662":{"position":[[2398,11]]},"1794":{"position":[[7330,11]]},"2356":{"position":[[1574,9],[2797,9]]},"2368":{"position":[[1765,9],[2988,9]]}}}],["pbkdf2",{"_index":658,"t":{"1740":{"position":[[529,6]]},"1806":{"position":[[516,6]]}}}],["peer",{"_index":839,"t":{"1750":{"position":[[2387,5]]},"1769":{"position":[[576,5]]},"1794":{"position":[[3302,5]]},"2200":{"position":[[1189,5],[1316,5],[1433,5],[1868,5],[1888,4],[1960,4]]},"2271":{"position":[[1319,5],[1446,5],[1563,5],[1998,5],[2018,4],[2090,4]]},"2306":{"position":[[1213,5],[1340,5],[1457,5],[1892,5],[1912,4],[1984,4]]},"2308":{"position":[[1102,5],[1229,5],[1346,5],[1781,5],[1801,4],[1873,4]]},"2310":{"position":[[1127,5],[1254,5],[1371,5],[1806,5],[1826,4],[1898,4]]},"2312":{"position":[[78,4],[266,4],[311,4],[1279,5],[1406,5],[1523,5],[1958,5],[1978,4],[2050,4],[2242,4],[2261,4],[2416,4],[2435,4]]},"2314":{"position":[[149,4],[1105,5],[1232,5],[1349,5],[1784,5],[1804,4],[1876,4]]},"2316":{"position":[[142,4],[188,4],[1137,5],[1264,5],[1381,5],[1816,5],[1836,4],[1908,4],[2038,4],[2074,4],[2127,4],[2389,4]]},"2318":{"position":[[1236,5],[1363,5],[1480,5],[1915,5],[1935,4],[2007,4]]}}}],["pem",{"_index":1037,"t":{"1800":{"position":[[382,3]]}}}],["pend",{"_index":1813,"t":{"2031":{"position":[[218,9]]}}}],["per",{"_index":896,"t":{"1756":{"position":[[574,3],[1562,3]]},"1953":{"position":[[1190,3]]},"2111":{"position":[[253,3]]},"2249":{"position":[[88,3]]}}}],["percentil",{"_index":1909,"t":{"2061":{"position":[[630,10]]}}}],["perform",{"_index":669,"t":{"1740":{"position":[[929,8]]},"1750":{"position":[[3390,7],[3571,7],[4356,7]]},"1782":{"position":[[1127,7]]},"1800":{"position":[[752,8]]},"1823":{"position":[[67,10]]},"1846":{"position":[[396,11]]},"1906":{"position":[[336,10]]},"1951":{"position":[[992,7]]},"1957":{"position":[[1581,11]]},"1981":{"position":[[548,11],[575,11],[675,11]]},"1991":{"position":[[12,11],[44,12]]},"2107":{"position":[[168,7]]},"2125":{"position":[[185,11]]},"2167":{"position":[[9,9]]},"2176":{"position":[[1733,10]]}}}],["period",{"_index":1547,"t":{"1947":{"position":[[486,6]]},"2111":{"position":[[229,6]]},"2125":{"position":[[288,6]]},"2167":{"position":[[291,6],[430,6]]}}}],["perman",{"_index":490,"t":{"1702":{"position":[[109,9],[165,9],[237,9]]},"1754":{"position":[[349,11]]},"1906":{"position":[[288,9]]}}}],["permanentredirect",{"_index":1311,"t":{"1878":{"position":[[695,18]]}}}],["permiss",{"_index":1423,"t":{"1912":{"position":[[523,11]]},"2085":{"position":[[1119,11]]},"2097":{"position":[[323,10]]},"2107":{"position":[[508,12]]},"2159":{"position":[[899,11]]},"2208":{"position":[[341,11],[357,11]]},"2212":{"position":[[351,11],[367,11]]},"2333":{"position":[[271,13]]},"2341":{"position":[[71,11]]}}}],["permissions=%a",{"_index":2378,"t":{"2208":{"position":[[250,14]]},"2212":{"position":[[259,14]]}}}],["permissions=644",{"_index":2379,"t":{"2208":{"position":[[423,15]]},"2212":{"position":[[433,15]]}}}],["persist",{"_index":1071,"t":{"1806":{"position":[[595,9]]},"1904":{"position":[[414,9]]},"2121":{"position":[[167,10]]},"2135":{"position":[[187,10],[248,10]]},"2139":{"position":[[63,14]]}}}],["persistentvolumeclaim",{"_index":2001,"t":{"2093":{"position":[[1664,23],[2805,23]]},"2141":{"position":[[21,21]]},"2143":{"position":[[260,22]]},"2147":{"position":[[21,21]]},"2149":{"position":[[260,22]]}}}],["php",{"_index":1892,"t":{"2059":{"position":[[132,3]]}}}],["pi",{"_index":1229,"t":{"1846":{"position":[[449,3]]},"1945":{"position":[[402,2],[1396,3]]},"1979":{"position":[[211,2]]},"2063":{"position":[[97,2]]}}}],["pi4b",{"_index":1874,"t":{"2055":{"position":[[526,4],[607,4],[666,4]]},"2067":{"position":[[277,4]]},"2069":{"position":[[249,4]]},"2071":{"position":[[137,4]]}}}],["pick",{"_index":902,"t":{"1756":{"position":[[951,4]]},"1758":{"position":[[805,4]]},"2163":{"position":[[279,4]]}}}],["pid",{"_index":2273,"t":{"2159":{"position":[[809,3]]}}}],["pipe",{"_index":1856,"t":{"2053":{"position":[[2435,6]]}}}],["pki",{"_index":645,"t":{"1740":{"position":[[150,3]]},"1742":{"position":[[668,3]]}}}],["place",{"_index":709,"t":{"1742":{"position":[[748,6],[1414,5]]},"1832":{"position":[[721,6]]},"1890":{"position":[[116,5]]},"1893":{"position":[[261,5],[396,5]]},"1898":{"position":[[193,5]]},"1906":{"position":[[209,7]]},"1933":{"position":[[8,5],[1339,5]]},"1937":{"position":[[100,6]]},"2005":{"position":[[186,5]]},"2053":{"position":[[2370,5]]},"2075":{"position":[[272,5]]},"2077":{"position":[[209,7]]},"2093":{"position":[[2443,6]]},"2095":{"position":[[147,6]]},"2099":{"position":[[34,6]]},"2247":{"position":[[261,6]]},"2321":{"position":[[121,5]]},"2394":{"position":[[111,5]]}}}],["plan",{"_index":1582,"t":{"1953":{"position":[[1177,7]]},"1983":{"position":[[662,4]]},"2007":{"position":[[345,8]]},"2159":{"position":[[188,5],[216,4],[351,5],[430,4],[529,5],[1041,5],[1253,6],[1815,4]]},"2163":{"position":[[42,6],[51,4],[105,4],[163,5],[240,5],[353,5],[415,4],[459,4],[487,4],[764,4],[808,4],[835,4],[1034,4],[1220,6],[1234,5],[1411,4],[1551,4],[1678,4],[1716,4],[1744,4],[1790,5],[2142,5],[2307,4],[2459,4],[2488,4],[2538,4],[2645,4],[2702,5]]},"2167":{"position":[[966,4]]}}}],["plane",{"_index":1152,"t":{"1832":{"position":[[321,5],[497,5]]},"1838":{"position":[[1287,5]]},"1848":{"position":[[860,6]]},"1872":{"position":[[254,5]]},"1951":{"position":[[141,5],[348,5]]},"1957":{"position":[[378,5]]},"1997":{"position":[[65,5],[225,5],[392,5],[419,5]]},"1999":{"position":[[75,5],[308,5],[413,5]]},"2001":{"position":[[23,5],[160,5],[214,5]]},"2003":{"position":[[141,5]]},"2057":{"position":[[451,5]]},"2059":{"position":[[451,5]]},"2075":{"position":[[320,6]]},"2077":{"position":[[604,5],[640,5]]},"2101":{"position":[[33,5]]},"2163":{"position":[[86,6],[623,5],[971,5],[1528,5]]},"2180":{"position":[[117,5]]},"2182":{"position":[[117,5]]},"2184":{"position":[[117,5]]},"2186":{"position":[[117,5]]},"2188":{"position":[[117,5]]},"2190":{"position":[[117,5]]},"2192":{"position":[[117,5]]},"2194":{"position":[[117,5]]},"2196":{"position":[[117,5]]},"2198":{"position":[[117,5]]},"2204":{"position":[[117,5]]},"2206":{"position":[[107,5]]},"2208":{"position":[[107,5]]},"2210":{"position":[[107,5]]},"2212":{"position":[[107,5]]},"2214":{"position":[[107,5]]},"2216":{"position":[[107,5]]},"2218":{"position":[[107,5]]},"2220":{"position":[[107,5]]},"2223":{"position":[[130,5]]},"2225":{"position":[[216,5]]},"2227":{"position":[[130,5]]},"2229":{"position":[[140,5]]},"2231":{"position":[[234,5]]},"2233":{"position":[[237,5]]},"2235":{"position":[[130,5]]},"2237":{"position":[[130,5]]},"2239":{"position":[[130,5]]},"2243":{"position":[[130,5]]},"2245":{"position":[[130,5]]},"2247":{"position":[[130,5]]},"2249":{"position":[[220,5]]},"2251":{"position":[[130,5]]},"2253":{"position":[[223,5]]},"2255":{"position":[[130,5]]},"2257":{"position":[[130,5]]},"2259":{"position":[[140,5]]},"2261":{"position":[[140,5]]},"2263":{"position":[[140,5]]},"2265":{"position":[[140,5]]},"2267":{"position":[[130,5]]},"2269":{"position":[[140,5]]},"2271":{"position":[[234,5]]},"2273":{"position":[[220,5]]},"2275":{"position":[[220,5]]},"2277":{"position":[[234,5]]},"2279":{"position":[[211,5]]},"2283":{"position":[[130,5]]},"2286":{"position":[[147,5]]},"2288":{"position":[[147,5]]},"2290":{"position":[[147,5]]},"2292":{"position":[[147,5]]},"2294":{"position":[[147,5]]},"2296":{"position":[[157,5]]},"2298":{"position":[[147,5]]},"2301":{"position":[[134,5]]},"2303":{"position":[[129,5]]}}}],["plane,etcd,mast",{"_index":1238,"t":{"1848":{"position":[[740,17],[791,17]]}}}],["plane,mast",{"_index":1751,"t":{"2001":{"position":[[586,12]]}}}],["platinum",{"_index":1866,"t":{"2055":{"position":[[259,8],[363,8],[445,8]]},"2067":{"position":[[206,8]]},"2069":{"position":[[206,8]]},"2071":{"position":[[94,8]]}}}],["pleas",{"_index":1223,"t":{"1846":{"position":[[209,6]]},"1922":{"position":[[325,6]]},"1943":{"position":[[134,6]]},"1945":{"position":[[575,6],[2213,6]]},"1949":{"position":[[265,6]]},"1953":{"position":[[1490,6]]},"1959":{"position":[[531,6]]},"1983":{"position":[[1243,6]]},"2159":{"position":[[458,6]]}}}],["plug",{"_index":2459,"t":{"2253":{"position":[[92,4]]}}}],["plugin",{"_index":209,"t":{"1662":{"position":[[1378,6],[1549,6]]},"1794":{"position":[[6703,6],[6874,6]]},"1945":{"position":[[170,7]]},"1949":{"position":[[79,7],[753,7]]},"1953":{"position":[[1398,7],[1417,6]]},"1983":{"position":[[1038,6]]},"2021":{"position":[[1286,8]]},"2085":{"position":[[868,8]]},"2093":{"position":[[480,8],[1144,6]]},"2105":{"position":[[34,6],[505,8]]},"2107":{"position":[[34,6],[604,8]]},"2227":{"position":[[202,8],[300,8],[343,8]]},"2241":{"position":[[463,8],[509,8]]},"2243":{"position":[[182,7],[370,8],[416,8],[476,8]]},"2245":{"position":[[172,7],[360,8]]},"2247":{"position":[[172,7],[436,8],[482,8],[540,8]]},"2249":{"position":[[271,7],[486,8],[530,8]]},"2251":{"position":[[173,7],[382,8],[426,8]]},"2253":{"position":[[265,7],[489,8],[535,8]]},"2421":{"position":[[37,6],[145,7]]}}}],["plugin'",{"_index":1590,"t":{"1953":{"position":[[1510,8]]}}}],["plugins=...,alwayspullimag",{"_index":2456,"t":{"2245":{"position":[[238,32]]}}}],["plugins=...,eventratelimit",{"_index":2451,"t":{"2241":{"position":[[258,30]]}}}],["plugins=...,noderestrict",{"_index":2460,"t":{"2253":{"position":[[344,31]]}}}],["plugins=...,securitycontextdeni",{"_index":2458,"t":{"2247":{"position":[[287,35]]}}}],["plugins=noderestrict",{"_index":2441,"t":{"2231":{"position":[[1244,23]]},"2233":{"position":[[1192,23]]},"2235":{"position":[[1061,23]]},"2237":{"position":[[1010,23]]},"2239":{"position":[[1023,23]]},"2241":{"position":[[1136,23]]},"2243":{"position":[[1097,23]]},"2247":{"position":[[1170,23]]},"2249":{"position":[[1151,23]]},"2251":{"position":[[1047,23]]},"2253":{"position":[[1163,23]]},"2255":{"position":[[1028,23]]},"2257":{"position":[[943,23]]},"2267":{"position":[[1118,23]]},"2273":{"position":[[1160,23]]},"2275":{"position":[[1076,23]]},"2277":{"position":[[1082,23]]},"2350":{"position":[[1427,23]]},"2352":{"position":[[1441,23]]},"2354":{"position":[[1556,23]]}}}],["plugins=noderestriction,podsecuritypolici",{"_index":1988,"t":{"2093":{"position":[[1040,42]]},"2101":{"position":[[494,41]]}}}],["plugins=noderestriction,podsecuritypolicy,namespacelifecycle,serviceaccount",{"_index":2067,"t":{"2099":{"position":[[873,76]]}}}],["pod",{"_index":257,"t":{"1675":{"position":[[517,4]]},"1681":{"position":[[723,3]]},"1689":{"position":[[688,4]]},"1702":{"position":[[216,5]]},"1704":{"position":[[155,5]]},"1717":{"position":[[301,3]]},"1744":{"position":[[805,4]]},"1746":{"position":[[767,4]]},"1748":{"position":[[1447,5]]},"1782":{"position":[[96,3],[644,3],[786,4],[1426,4]]},"1794":{"position":[[1430,3],[2177,3],[2336,6],[2431,4]]},"1813":{"position":[[332,4],[463,4]]},"1939":{"position":[[726,4]]},"1945":{"position":[[1443,3]]},"1951":{"position":[[1252,4]]},"1953":{"position":[[1185,4]]},"1983":{"position":[[1097,4],[1314,5]]},"1993":{"position":[[109,5]]},"2007":{"position":[[173,4]]},"2021":{"position":[[21,3],[859,3],[1342,3],[1929,3],[1976,3],[2153,3],[2198,3],[2246,3],[2290,3]]},"2061":{"position":[[340,4]]},"2075":{"position":[[1133,4]]},"2077":{"position":[[73,5],[414,4]]},"2085":{"position":[[1106,3]]},"2091":{"position":[[78,3],[229,3]]},"2093":{"position":[[60,3],[107,3],[536,3],[876,3],[921,3],[2201,4],[6476,4]]},"2095":{"position":[[114,5]]},"2099":{"position":[[627,3],[1250,3]]},"2101":{"position":[[3974,3]]},"2107":{"position":[[79,3],[160,3],[281,3],[340,3],[440,3],[497,3]]},"2125":{"position":[[29,3],[368,4]]},"2129":{"position":[[202,5],[340,4],[414,3]]},"2131":{"position":[[205,4],[252,3],[323,4]]},"2143":{"position":[[21,3]]},"2149":{"position":[[21,3]]},"2223":{"position":[[46,3]]},"2225":{"position":[[132,3]]},"2227":{"position":[[46,3]]},"2229":{"position":[[56,3]]},"2231":{"position":[[150,3]]},"2233":{"position":[[153,3]]},"2235":{"position":[[46,3]]},"2237":{"position":[[46,3]]},"2239":{"position":[[46,3]]},"2241":{"position":[[140,3]]},"2243":{"position":[[46,3]]},"2245":{"position":[[46,3]]},"2247":{"position":[[46,3]]},"2249":{"position":[[136,3]]},"2251":{"position":[[46,3]]},"2253":{"position":[[139,3]]},"2255":{"position":[[46,3]]},"2257":{"position":[[46,3]]},"2259":{"position":[[56,3]]},"2261":{"position":[[56,3]]},"2263":{"position":[[56,3]]},"2265":{"position":[[56,3]]},"2267":{"position":[[46,3]]},"2269":{"position":[[56,3]]},"2271":{"position":[[150,3]]},"2273":{"position":[[136,3]]},"2275":{"position":[[136,3]]},"2277":{"position":[[150,3]]},"2279":{"position":[[127,3]]},"2283":{"position":[[46,3]]},"2286":{"position":[[54,3],[183,3],[255,3],[391,3]]},"2288":{"position":[[54,3]]},"2290":{"position":[[54,3]]},"2292":{"position":[[54,3]]},"2294":{"position":[[54,3]]},"2296":{"position":[[64,3]]},"2298":{"position":[[54,3]]},"2301":{"position":[[45,3]]},"2303":{"position":[[45,3]]},"2306":{"position":[[114,3]]},"2308":{"position":[[40,3]]},"2310":{"position":[[40,3]]},"2312":{"position":[[156,3]]},"2314":{"position":[[40,3]]},"2316":{"position":[[40,3]]},"2318":{"position":[[163,3]]},"2326":{"position":[[336,3]]},"2356":{"position":[[1531,3],[1586,3],[2754,3],[2809,3]]},"2368":{"position":[[1722,3],[1777,3],[2945,3],[3000,3]]},"2383":{"position":[[66,3]]},"2387":{"position":[[51,4]]},"2394":{"position":[[45,3]]},"2436":{"position":[[99,3]]},"2438":{"position":[[97,5]]}}}],["pod.yaml",{"_index":2251,"t":{"2143":{"position":[[367,8]]},"2145":{"position":[[371,8]]}}}],["podcidr",{"_index":1570,"t":{"1951":{"position":[[1508,7]]}}}],["pods/contain",{"_index":2212,"t":{"2129":{"position":[[487,15]]}}}],["pods/exec",{"_index":2509,"t":{"2326":{"position":[[371,10]]}}}],["pods/portforward",{"_index":2510,"t":{"2326":{"position":[[382,17]]}}}],["pods/proxi",{"_index":2511,"t":{"2326":{"position":[[400,10]]}}}],["podsecur",{"_index":1783,"t":{"2021":{"position":[[1303,11]]},"2091":{"position":[[505,11]]},"2093":{"position":[[497,11]]}}}],["podsecurityconfigur",{"_index":1785,"t":{"2021":{"position":[[1393,24]]},"2093":{"position":[[587,24]]}}}],["podsecuritypolici",{"_index":1762,"t":{"2021":{"position":[[57,18],[135,20],[226,17],[2458,19]]},"2085":{"position":[[677,20]]},"2093":{"position":[[1175,18],[1394,17],[2581,17],[3142,17],[3594,17],[4139,19],[4353,19],[4562,19]]},"2107":{"position":[[41,17],[219,19]]},"2247":{"position":[[229,17],[553,19]]}}}],["podsecuritystandard",{"_index":1958,"t":{"2085":{"position":[[656,20]]}}}],["podselector",{"_index":2037,"t":{"2093":{"position":[[5912,12],[6111,12],[6310,12]]},"2095":{"position":[[425,12],[852,12],[1415,12],[1635,12],[1876,12],[2098,12],[2318,12],[2559,12]]}}}],["point",{"_index":706,"t":{"1742":{"position":[[591,6]]},"1840":{"position":[[775,5]]}}}],["polici",{"_index":540,"t":{"1710":{"position":[[276,7],[349,6]]},"1750":{"position":[[4768,6],[4896,7]]},"1764":{"position":[[380,6]]},"1786":{"position":[[259,6],[294,6]]},"1794":{"position":[[6203,6],[6251,6]]},"1842":{"position":[[829,6]]},"1848":{"position":[[1367,6]]},"1949":{"position":[[115,6],[176,6]]},"1953":{"position":[[1566,8]]},"2021":{"position":[[630,6]]},"2029":{"position":[[150,6]]},"2053":{"position":[[1976,6]]},"2085":{"position":[[616,6],[967,9]]},"2091":{"position":[[117,8],[253,9],[326,9],[433,6]]},"2093":{"position":[[281,6],[889,8],[1219,6],[2160,7],[2260,6],[2384,6],[4119,6],[4333,6],[4542,6],[6549,6]]},"2095":{"position":[[48,6],[128,8],[303,7],[606,6],[748,6],[1007,8],[2672,8]]},"2097":{"position":[[150,7],[211,8],[469,6],[523,6],[644,6],[764,6],[975,6],[1315,6]]},"2099":{"position":[[398,6],[1021,6]]},"2105":{"position":[[104,6]]},"2107":{"position":[[92,6],[353,8]]},"2127":{"position":[[28,6]]},"2159":{"position":[[237,8],[1782,6]]},"2167":{"position":[[933,6]]},"2324":{"position":[[42,6],[174,6]]},"2326":{"position":[[43,6]]},"2394":{"position":[[83,6]]},"2396":{"position":[[30,8]]},"2398":{"position":[[30,8]]},"2400":{"position":[[30,8]]},"2402":{"position":[[30,8]]},"2404":{"position":[[30,8]]},"2406":{"position":[[35,6]]},"2408":{"position":[[30,8]]},"2410":{"position":[[76,8]]},"2414":{"position":[[30,8]]},"2416":{"position":[[30,8]]},"2418":{"position":[[30,8]]},"2421":{"position":[[76,9]]}}}],["policy.yaml",{"_index":2018,"t":{"2093":{"position":[[2530,11]]}}}],["policy/v1beta1",{"_index":1991,"t":{"2093":{"position":[[1373,14],[2560,14],[3121,14],[3573,14]]}}}],["policytyp",{"_index":2042,"t":{"2095":{"position":[[896,12],[1479,12],[1720,12],[1948,12],[2162,12],[2403,12],[2612,12]]}}}],["pool2",{"_index":2534,"t":{"2356":{"position":[[680,5],[1376,5]]},"2368":{"position":[[871,5],[1567,5]]}}}],["pool3",{"_index":2429,"t":{"2231":{"position":[[691,5]]},"2233":{"position":[[639,5]]},"2235":{"position":[[508,5]]},"2237":{"position":[[457,5]]},"2239":{"position":[[470,5]]},"2241":{"position":[[583,5]]},"2243":{"position":[[544,5]]},"2247":{"position":[[617,5]]},"2249":{"position":[[598,5]]},"2251":{"position":[[494,5]]},"2253":{"position":[[610,5]]},"2255":{"position":[[475,5]]},"2257":{"position":[[390,5]]},"2267":{"position":[[565,5]]},"2273":{"position":[[607,5],[2783,5]]},"2275":{"position":[[523,5]]},"2277":{"position":[[529,5]]},"2288":{"position":[[416,5]]},"2290":{"position":[[484,5]]},"2292":{"position":[[569,5]]},"2294":{"position":[[466,5]]},"2301":{"position":[[375,5]]},"2303":{"position":[[449,5]]},"2350":{"position":[[874,5]]},"2352":{"position":[[888,5]]},"2354":{"position":[[1003,5]]},"2356":{"position":[[1903,5],[2599,5]]},"2368":{"position":[[2094,5],[2790,5]]}}}],["port",{"_index":116,"t":{"1648":{"position":[[446,4],[482,4],[588,4],[610,4]]},"1662":{"position":[[1708,4],[1738,4],[1844,4],[1866,4]]},"1675":{"position":[[1015,5],[1105,4],[1269,4]]},"1717":{"position":[[580,6]]},"1776":{"position":[[86,4],[115,4],[255,4],[280,4]]},"1782":{"position":[[202,4],[233,4]]},"1790":{"position":[[92,4]]},"1794":{"position":[[776,4],[811,4],[989,4],[1011,4],[1092,5],[1582,4],[1612,4],[8598,4],[8810,4],[8840,4],[8946,4],[8968,4]]},"1922":{"position":[[371,4]]},"1951":{"position":[[297,5]]},"1957":{"position":[[1016,5]]},"1983":{"position":[[21,4],[118,4],[167,5],[287,5],[507,5],[643,4],[767,5],[808,4],[991,4]]},"1985":{"position":[[9,4]]},"2095":{"position":[[795,6],[804,5],[829,5]]},"2143":{"position":[[211,6]]},"2149":{"position":[[211,6]]},"2231":{"position":[[2634,4]]},"2233":{"position":[[2582,4]]},"2235":{"position":[[2451,4]]},"2237":{"position":[[2400,4]]},"2239":{"position":[[2413,4]]},"2241":{"position":[[2526,4]]},"2243":{"position":[[2487,4]]},"2247":{"position":[[2560,4]]},"2249":{"position":[[2541,4]]},"2251":{"position":[[2437,4]]},"2253":{"position":[[2553,4]]},"2255":{"position":[[172,4],[231,5],[340,5],[373,5],[410,5],[2418,4]]},"2257":{"position":[[2333,4]]},"2267":{"position":[[2508,4]]},"2273":{"position":[[2550,4]]},"2275":{"position":[[2466,4]]},"2277":{"position":[[2472,4]]},"2350":{"position":[[2817,4]]},"2352":{"position":[[2831,4]]},"2354":{"position":[[2946,4]]},"2356":{"position":[[541,5],[577,5],[615,5]]}}}],["port/0",{"_index":980,"t":{"1776":{"position":[[273,6]]}}}],["port=0",{"_index":2089,"t":{"2101":{"position":[[813,6],[2706,6],[3030,6],[4084,6]]},"2356":{"position":[[313,6],[1657,6],[2880,6]]},"2368":{"position":[[1848,6],[3071,6]]}}}],["port=10251",{"_index":2127,"t":{"2101":{"position":[[2984,10]]}}}],["port=10252",{"_index":2120,"t":{"2101":{"position":[[2591,10]]}}}],["port=10257",{"_index":2488,"t":{"2288":{"position":[[1848,10]]},"2290":{"position":[[1916,10]]},"2292":{"position":[[2001,10]]},"2294":{"position":[[1898,10]]}}}],["port=10259",{"_index":2470,"t":{"2273":{"position":[[3222,11]]},"2301":{"position":[[814,11]]},"2303":{"position":[[888,11]]}}}],["port=6443",{"_index":2071,"t":{"2101":{"position":[[199,9]]},"2231":{"position":[[835,9]]},"2233":{"position":[[783,9]]},"2235":{"position":[[652,9]]},"2237":{"position":[[601,9]]},"2239":{"position":[[614,9]]},"2241":{"position":[[727,9]]},"2243":{"position":[[688,9]]},"2247":{"position":[[761,9]]},"2249":{"position":[[742,9]]},"2251":{"position":[[638,9]]},"2253":{"position":[[754,9]]},"2255":{"position":[[619,9]]},"2257":{"position":[[534,9]]},"2267":{"position":[[709,9]]},"2273":{"position":[[751,9]]},"2275":{"position":[[667,9]]},"2277":{"position":[[673,9]]},"2350":{"position":[[1018,9]]},"2352":{"position":[[1032,9]]},"2354":{"position":[[1147,9]]}}}],["port=6443/tcp",{"_index":491,"t":{"1702":{"position":[[125,13]]}}}],["port=6444",{"_index":2105,"t":{"2101":{"position":[[1544,9]]},"2231":{"position":[[2349,9]]},"2233":{"position":[[2297,9]]},"2235":{"position":[[2166,9]]},"2237":{"position":[[2115,9]]},"2239":{"position":[[2128,9]]},"2241":{"position":[[2241,9]]},"2243":{"position":[[2202,9]]},"2247":{"position":[[2275,9]]},"2249":{"position":[[2256,9]]},"2251":{"position":[[2152,9]]},"2253":{"position":[[2268,9]]},"2255":{"position":[[2133,9]]},"2257":{"position":[[2048,9]]},"2267":{"position":[[2223,9]]},"2273":{"position":[[2265,9]]},"2275":{"position":[[2181,9]]},"2277":{"position":[[2187,9]]},"2350":{"position":[[2532,9]]},"2352":{"position":[[2546,9]]},"2354":{"position":[[2661,9]]}}}],["portion",{"_index":847,"t":{"1750":{"position":[[2923,7]]},"1811":{"position":[[807,7],[2049,7],[2089,7]]}}}],["portworx",{"_index":2233,"t":{"2137":{"position":[[289,8]]}}}],["possibl",{"_index":1354,"t":{"1898":{"position":[[427,8]]},"1908":{"position":[[822,8]]},"1947":{"position":[[445,9]]},"1981":{"position":[[660,9]]},"1997":{"position":[[155,8]]},"2075":{"position":[[1106,9]]},"2176":{"position":[[1146,8]]},"2377":{"position":[[193,9]]},"2379":{"position":[[32,9]]},"2381":{"position":[[32,8]]},"2383":{"position":[[32,9]]},"2391":{"position":[[32,9]]},"2426":{"position":[[29,9]]}}}],["postgr",{"_index":11,"t":{"1636":{"position":[[121,9]]},"1767":{"position":[[109,9]]},"1794":{"position":[[3917,9]]},"1829":{"position":[[421,12],[473,9]]}}}],["postgres://username:password@hostname:port/databas",{"_index":1135,"t":{"1829":{"position":[[212,51]]}}}],["postgresql",{"_index":1124,"t":{"1821":{"position":[[435,10]]},"1825":{"position":[[202,11],[978,10]]},"1827":{"position":[[0,11],[284,11]]},"1829":{"position":[[118,10],[162,11]]},"1987":{"position":[[257,10]]},"1995":{"position":[[50,11]]}}}],["potenti",{"_index":2056,"t":{"2097":{"position":[[366,9]]},"2113":{"position":[[425,11]]},"2115":{"position":[[411,11]]},"2127":{"position":[[126,9]]}}}],["power",{"_index":1918,"t":{"2067":{"position":[[253,5]]}}}],["pprof",{"_index":1012,"t":{"1790":{"position":[[50,5],[63,5]]},"1794":{"position":[[8541,5],[8569,5]]}}}],["practic",{"_index":1323,"t":{"1888":{"position":[[231,10]]}}}],["pre",{"_index":696,"t":{"1742":{"position":[[197,3]]}}}],["preced",{"_index":1410,"t":{"1908":{"position":[[973,11]]}}}],["prefer",{"_index":163,"t":{"1656":{"position":[[90,6],[109,6]]},"1662":{"position":[[3325,6],[3359,6]]},"1700":{"position":[[193,6],[317,6]]},"1790":{"position":[[146,6],[165,6]]},"1794":{"position":[[8644,6],[8678,6]]},"1798":{"position":[[83,10]]},"2231":{"position":[[1832,9]]},"2233":{"position":[[1780,9]]},"2235":{"position":[[1649,9]]},"2237":{"position":[[1598,9]]},"2239":{"position":[[1611,9]]},"2241":{"position":[[1724,9]]},"2243":{"position":[[1685,9]]},"2247":{"position":[[1758,9]]},"2249":{"position":[[1739,9]]},"2251":{"position":[[1635,9]]},"2253":{"position":[[1751,9]]},"2255":{"position":[[1616,9]]},"2257":{"position":[[1531,9]]},"2267":{"position":[[1706,9]]},"2273":{"position":[[1748,9]]},"2275":{"position":[[1664,9]]},"2277":{"position":[[1670,9]]},"2350":{"position":[[2015,9]]},"2352":{"position":[[2029,9]]},"2354":{"position":[[2144,9]]}}}],["prefix",{"_index":1031,"t":{"1800":{"position":[[140,7],[160,6]]},"1904":{"position":[[321,8]]},"2053":{"position":[[1776,8]]}}}],["prefix=x",{"_index":2103,"t":{"2101":{"position":[[1420,8]]},"2231":{"position":[[2225,8]]},"2233":{"position":[[2173,8]]},"2235":{"position":[[2042,8]]},"2237":{"position":[[1991,8]]},"2239":{"position":[[2004,8]]},"2241":{"position":[[2117,8]]},"2243":{"position":[[2078,8]]},"2247":{"position":[[2151,8]]},"2249":{"position":[[2132,8]]},"2251":{"position":[[2028,8]]},"2253":{"position":[[2144,8]]},"2255":{"position":[[2009,8]]},"2257":{"position":[[1924,8]]},"2267":{"position":[[2099,8]]},"2273":{"position":[[2141,8]]},"2275":{"position":[[2057,8]]},"2277":{"position":[[2063,8]]},"2350":{"position":[[2408,8]]},"2352":{"position":[[2422,8]]},"2354":{"position":[[2537,8]]}}}],["prefix><clust",{"_index":1029,"t":{"1800":{"position":[[99,16]]}}}],["prepar",{"_index":893,"t":{"1756":{"position":[[245,7],[273,7],[1147,7],[1181,7]]},"1760":{"position":[[954,8]]},"1945":{"position":[[456,12]]},"1985":{"position":[[578,13]]},"2163":{"position":[[1000,8],[1017,7],[1652,7]]}}}],["prepopul",{"_index":1328,"t":{"1893":{"position":[[106,11]]}}}],["prescript",{"_index":1946,"t":{"2085":{"position":[[23,12]]},"2176":{"position":[[105,12]]}}}],["present",{"_index":1053,"t":{"1800":{"position":[[1155,9],[1259,7]]},"1802":{"position":[[195,9]]},"1908":{"position":[[170,7]]},"2085":{"position":[[997,9]]},"2095":{"position":[[1235,7]]},"2101":{"position":[[4433,9]]},"2119":{"position":[[280,7]]},"2210":{"position":[[353,7]]},"2216":{"position":[[270,7]]},"2225":{"position":[[378,7]]},"2227":{"position":[[312,7],[359,7]]},"2231":{"position":[[601,7],[639,7]]},"2233":{"position":[[587,7]]},"2243":{"position":[[492,7]]},"2245":{"position":[[372,7]]},"2249":{"position":[[498,7],[546,7]]},"2251":{"position":[[394,7],[442,7]]},"2255":{"position":[[423,7]]},"2267":{"position":[[472,7],[513,7]]},"2271":{"position":[[2241,7],[2273,7]]},"2273":{"position":[[515,7],[555,7]]},"2275":{"position":[[471,7]]},"2277":{"position":[[477,7]]},"2292":{"position":[[517,7]]},"2294":{"position":[[414,7]]},"2298":{"position":[[309,7],[344,7]]},"2303":{"position":[[397,7]]},"2306":{"position":[[2126,7],[2152,7]]},"2308":{"position":[[2024,7]]},"2310":{"position":[[2048,7],[2078,7]]},"2312":{"position":[[2192,7],[2218,7]]},"2314":{"position":[[2027,7]]},"2316":{"position":[[2060,7]]},"2318":{"position":[[2155,7]]},"2333":{"position":[[288,7],[356,7]]},"2335":{"position":[[377,7],[445,7]]},"2341":{"position":[[219,7],[239,7],[286,7],[306,7],[326,7],[346,7]]},"2354":{"position":[[880,7]]},"2356":{"position":[[628,7]]},"2368":{"position":[[779,7],[819,7]]},"2410":{"position":[[65,7]]}}}],["preserv",{"_index":1859,"t":{"2053":{"position":[[2557,9]]}}}],["prevent",{"_index":1881,"t":{"2055":{"position":[[957,10]]},"2176":{"position":[[1627,7]]}}}],["previous",{"_index":1212,"t":{"1842":{"position":[[1028,11]]},"2161":{"position":[[400,10]]},"2176":{"position":[[1943,11]]}}}],["primari",{"_index":1335,"t":{"1893":{"position":[[543,7]]},"1953":{"position":[[271,7]]},"2055":{"position":[[920,7]]}}}],["primarili",{"_index":1390,"t":{"1906":{"position":[[38,9]]},"2075":{"position":[[35,9],[767,9]]},"2085":{"position":[[1091,9]]}}}],["print",{"_index":1083,"t":{"1811":{"position":[[356,5]]},"1906":{"position":[[1239,5]]}}}],["prior",{"_index":700,"t":{"1742":{"position":[[346,5],[1476,5]]},"1744":{"position":[[2449,5]]},"1746":{"position":[[2248,5]]},"1939":{"position":[[997,5]]}}}],["privat",{"_index":141,"t":{"1650":{"position":[[303,7],[361,7]]},"1662":{"position":[[2511,7],[2550,7]]},"1742":{"position":[[1088,7]]},"1748":{"position":[[41,7]]},"1794":{"position":[[7443,7],[7482,7],[7612,7]]},"1806":{"position":[[689,7]]},"1882":{"position":[[195,7]]},"1884":{"position":[[104,7],[172,7]]},"1886":{"position":[[11,7]]},"1888":{"position":[[207,7]]},"1893":{"position":[[36,7]]},"1900":{"position":[[134,7],[696,7],[1018,7]]},"1957":{"position":[[65,7],[1815,7]]},"1959":{"position":[[43,7],[83,7],[289,7],[666,7],[858,7]]},"1963":{"position":[[67,7]]},"1965":{"position":[[663,7],[721,7],[782,7],[844,7]]},"1971":{"position":[[248,7],[370,7]]},"2101":{"position":[[1905,7],[2731,7],[4294,7]]},"2231":{"position":[[2762,7]]},"2233":{"position":[[2710,7]]},"2235":{"position":[[2579,7]]},"2237":{"position":[[2528,7]]},"2239":{"position":[[2541,7]]},"2241":{"position":[[2654,7]]},"2243":{"position":[[2615,7]]},"2247":{"position":[[2688,7]]},"2249":{"position":[[2669,7]]},"2251":{"position":[[2565,7]]},"2253":{"position":[[2681,7]]},"2255":{"position":[[2546,7]]},"2257":{"position":[[2461,7]]},"2267":{"position":[[2636,7]]},"2273":{"position":[[263,7],[345,7],[534,7],[2678,7]]},"2275":{"position":[[2594,7]]},"2277":{"position":[[2600,7]]},"2288":{"position":[[1877,7]]},"2290":{"position":[[1945,7]]},"2292":{"position":[[188,7],[222,7],[292,7],[442,7],[496,7],[2030,7]]},"2294":{"position":[[1927,7]]},"2350":{"position":[[2945,7]]},"2352":{"position":[[2959,7]]},"2354":{"position":[[3074,7]]},"2356":{"position":[[1810,7],[3033,7]]},"2368":{"position":[[223,7],[498,7],[798,7],[2001,7],[3224,7]]}}}],["privileg",{"_index":526,"t":{"1708":{"position":[[323,10]]},"1918":{"position":[[73,10]]},"2021":{"position":[[1878,10],[1965,10],[2187,10],[2279,10]]},"2093":{"position":[[1449,11],[2230,11],[2636,11],[3440,11]]},"2159":{"position":[[741,11]]},"2377":{"position":[[175,11],[231,10]]},"2396":{"position":[[126,10]]}}}],["privileged=tru",{"_index":2072,"t":{"2101":{"position":[[217,15]]},"2231":{"position":[[853,15]]},"2233":{"position":[[801,15]]},"2235":{"position":[[670,15]]},"2237":{"position":[[619,15]]},"2239":{"position":[[632,15]]},"2241":{"position":[[745,15]]},"2243":{"position":[[706,15]]},"2247":{"position":[[779,15]]},"2249":{"position":[[760,15]]},"2251":{"position":[[656,15]]},"2253":{"position":[[772,15]]},"2255":{"position":[[637,15]]},"2257":{"position":[[552,15]]},"2267":{"position":[[727,15]]},"2273":{"position":[[769,15]]},"2275":{"position":[[685,15]]},"2277":{"position":[[691,15]]},"2350":{"position":[[1036,15]]},"2352":{"position":[[1050,15]]},"2354":{"position":[[1165,15]]}}}],["problem",{"_index":677,"t":{"1740":{"position":[[1180,8]]},"2057":{"position":[[58,7]]}}}],["problemat",{"_index":2191,"t":{"2117":{"position":[[270,11]]}}}],["proc//environ",{"_index":2504,"t":{"2310":{"position":[[2300,15],[2540,15],[2780,15]]},"2316":{"position":[[2345,15]]}}}],["proce",{"_index":891,"t":{"1754":{"position":[[372,7]]}}}],["procedur",{"_index":888,"t":{"1754":{"position":[[287,9]]},"1848":{"position":[[1047,9]]}}}],["proceed",{"_index":924,"t":{"1760":{"position":[[1235,10]]}}}],["process",{"_index":157,"t":{"1654":{"position":[[65,7],[127,7]]},"1662":{"position":[[3200,7],[3276,7]]},"1788":{"position":[[59,7],[129,7],[199,7],[287,7],[387,7],[443,7],[505,7]]},"1794":{"position":[[3516,7],[3574,7],[3670,7],[3748,7],[3856,7],[8261,7],[8337,7]]},"1796":{"position":[[40,8]]},"1802":{"position":[[255,7]]},"1832":{"position":[[1100,8],[1186,8]]},"1838":{"position":[[1515,7]]},"1933":{"position":[[834,7],[860,7]]},"2061":{"position":[[580,10]]},"2105":{"position":[[362,7]]},"2310":{"position":[[2109,7],[2349,7],[2589,7]]},"2316":{"position":[[2154,7]]}}}],["process/directori",{"_index":1965,"t":{"2087":{"position":[[75,17]]}}}],["process_resident_memory_byt",{"_index":1906,"t":{"2061":{"position":[[450,29]]}}}],["processor",{"_index":1861,"t":{"2055":{"position":[[145,9]]},"2067":{"position":[[165,9],[259,9]]},"2069":{"position":[[165,9]]},"2071":{"position":[[54,9]]}}}],["product",{"_index":1727,"t":{"1987":{"position":[[69,10],[239,11]]},"2085":{"position":[[61,10]]},"2167":{"position":[[231,10]]},"2176":{"position":[[143,10]]}}}],["profil",{"_index":1692,"t":{"1981":{"position":[[179,9]]},"1983":{"position":[[1267,7]]},"2257":{"position":[[283,11],[315,10]]},"2288":{"position":[[309,11],[341,10]]},"2301":{"position":[[300,10]]},"2436":{"position":[[83,7]]}}}],["profiling=fals",{"_index":2096,"t":{"2101":{"position":[[1075,15],[2604,15],[2997,15]]},"2231":{"position":[[1889,15]]},"2233":{"position":[[1837,15]]},"2235":{"position":[[1706,15]]},"2237":{"position":[[1655,15]]},"2239":{"position":[[1668,15]]},"2241":{"position":[[1781,15]]},"2243":{"position":[[1742,15]]},"2247":{"position":[[1815,15]]},"2249":{"position":[[1796,15]]},"2251":{"position":[[1692,15]]},"2253":{"position":[[1808,15]]},"2255":{"position":[[1673,15]]},"2257":{"position":[[172,15],[1588,15]]},"2267":{"position":[[1763,15]]},"2273":{"position":[[1805,15],[3197,15]]},"2275":{"position":[[1721,15]]},"2277":{"position":[[1727,15]]},"2288":{"position":[[189,15],[1762,15]]},"2290":{"position":[[1830,15]]},"2292":{"position":[[1915,15]]},"2294":{"position":[[1812,15]]},"2301":{"position":[[176,15],[789,15]]},"2303":{"position":[[863,15]]},"2350":{"position":[[2072,15]]},"2352":{"position":[[2086,15]]},"2354":{"position":[[2201,15]]}}}],["progress",{"_index":2300,"t":{"2163":{"position":[[2607,8]]}}}],["project",{"_index":1554,"t":{"1949":{"position":[[322,7]]},"2093":{"position":[[1615,11],[2756,11]]},"2167":{"position":[[842,8]]}}}],["prometheu",{"_index":1889,"t":{"2059":{"position":[[75,10],[318,11]]},"2061":{"position":[[25,10],[111,10]]}}}],["prone",{"_index":2194,"t":{"2117":{"position":[[518,5]]}}}],["proper",{"_index":643,"t":{"1740":{"position":[[52,6]]},"1754":{"position":[[280,6]]}}}],["properli",{"_index":1185,"t":{"1838":{"position":[[1580,8]]},"1893":{"position":[[604,9]]},"2093":{"position":[[2323,9],[6614,9]]}}}],["prorit",{"_index":1577,"t":{"1953":{"position":[[429,9],[488,9]]}}}],["protect",{"_index":107,"t":{"1648":{"position":[[261,7]]},"1662":{"position":[[1969,7]]},"1794":{"position":[[8347,7]]},"1981":{"position":[[482,9]]},"2021":{"position":[[413,7]]},"2073":{"position":[[124,9]]},"2089":{"position":[[178,7]]},"2099":{"position":[[181,7],[778,7]]},"2101":{"position":[[4035,7]]},"2159":{"position":[[1924,7]]},"2167":{"position":[[1075,7]]},"2360":{"position":[[325,7]]}}}],["protectkerneldefault",{"_index":2557,"t":{"2360":{"position":[[89,21]]}}}],["protocol",{"_index":1726,"t":{"1985":{"position":[[0,8]]},"2095":{"position":[[813,9],[838,9]]}}}],["proven",{"_index":2585,"t":{"2431":{"position":[[78,11]]}}}],["provid",{"_index":17,"t":{"1636":{"position":[[271,8]]},"1662":{"position":[[1290,8],[1369,8],[1478,8],[1540,8]]},"1742":{"position":[[1655,7],[1769,7]]},"1794":{"position":[[6615,8],[6694,8],[6803,8],[6865,8]]},"1806":{"position":[[15,8]]},"1811":{"position":[[1596,9]]},"1895":{"position":[[1301,8]]},"1945":{"position":[[25,8]]},"1953":{"position":[[708,7]]},"1983":{"position":[[469,7]]},"1991":{"position":[[153,10]]},"2079":{"position":[[284,8],[700,12]]},"2085":{"position":[[14,8]]},"2097":{"position":[[503,8]]},"2109":{"position":[[95,8],[323,8]]},"2121":{"position":[[29,8]]},"2123":{"position":[[23,9],[171,9]]},"2131":{"position":[[80,8],[443,7]]},"2176":{"position":[[96,8],[1110,8]]},"2279":{"position":[[247,8],[325,8],[481,8]]},"2281":{"position":[[165,9]]},"2321":{"position":[[49,8]]},"2326":{"position":[[50,8]]},"2428":{"position":[[88,8]]}}}],["provider=extern",{"_index":2137,"t":{"2101":{"position":[[3266,17]]},"2356":{"position":[[968,17],[2191,17]]},"2368":{"position":[[1159,17],[2382,17]]}}}],["provis",{"_index":707,"t":{"1742":{"position":[[639,9]]},"1975":{"position":[[134,12]]},"2075":{"position":[[885,12]]},"2159":{"position":[[1321,11]]}}}],["provisio",{"_index":320,"t":{"1675":{"position":[[1888,10]]}}}],["provision",{"_index":264,"t":{"1675":{"position":[[603,11],[1974,11],[2665,11]]},"1784":{"position":[[89,11]]},"1794":{"position":[[5771,11]]},"1939":{"position":[[798,11]]}}}],["provisioner_loc",{"_index":322,"t":{"1675":{"position":[[1951,17]]}}}],["proxi",{"_index":159,"t":{"1654":{"position":[[80,5],[121,5]]},"1662":{"position":[[3215,5],[3270,5]]},"1723":{"position":[[322,5]]},"1738":{"position":[[491,6],[512,6]]},"1786":{"position":[[208,5],[235,5]]},"1788":{"position":[[458,5],[499,5]]},"1794":{"position":[[6139,5],[6179,5],[8276,5],[8331,5]]},"1842":{"position":[[804,6]]},"1848":{"position":[[1342,6]]},"1893":{"position":[[568,5]]},"1922":{"position":[[95,5]]},"1951":{"position":[[880,6],[1182,6]]},"2101":{"position":[[1102,5],[1181,5],[1299,5]]},"2231":{"position":[[1907,5],[1986,5],[2104,5]]},"2233":{"position":[[1855,5],[1934,5],[2052,5]]},"2235":{"position":[[1724,5],[1803,5],[1921,5]]},"2237":{"position":[[1673,5],[1752,5],[1870,5]]},"2239":{"position":[[1686,5],[1765,5],[1883,5]]},"2241":{"position":[[1799,5],[1878,5],[1996,5]]},"2243":{"position":[[1760,5],[1839,5],[1957,5]]},"2247":{"position":[[1833,5],[1912,5],[2030,5]]},"2249":{"position":[[1814,5],[1893,5],[2011,5]]},"2251":{"position":[[1710,5],[1789,5],[1907,5]]},"2253":{"position":[[1826,5],[1905,5],[2023,5]]},"2255":{"position":[[1691,5],[1770,5],[1888,5]]},"2257":{"position":[[1606,5],[1685,5],[1803,5]]},"2267":{"position":[[1781,5],[1860,5],[1978,5]]},"2273":{"position":[[1823,5],[1902,5],[2020,5]]},"2275":{"position":[[1739,5],[1818,5],[1936,5]]},"2277":{"position":[[1745,5],[1824,5],[1942,5]]},"2350":{"position":[[2090,5],[2169,5],[2287,5]]},"2352":{"position":[[2104,5],[2183,5],[2301,5]]},"2354":{"position":[[2219,5],[2298,5],[2416,5]]}}}],["proxy.crt",{"_index":2098,"t":{"2101":{"position":[[1169,9]]},"2231":{"position":[[1974,9]]},"2233":{"position":[[1922,9]]},"2235":{"position":[[1791,9]]},"2237":{"position":[[1740,9]]},"2239":{"position":[[1753,9]]},"2241":{"position":[[1866,9]]},"2243":{"position":[[1827,9]]},"2247":{"position":[[1900,9]]},"2249":{"position":[[1881,9]]},"2251":{"position":[[1777,9]]},"2253":{"position":[[1893,9]]},"2255":{"position":[[1758,9]]},"2257":{"position":[[1673,9]]},"2267":{"position":[[1848,9]]},"2273":{"position":[[1890,9]]},"2275":{"position":[[1806,9]]},"2277":{"position":[[1812,9]]},"2350":{"position":[[2157,9]]},"2352":{"position":[[2171,9]]},"2354":{"position":[[2286,9]]}}}],["proxy.example.com:8888",{"_index":241,"t":{"1673":{"position":[[616,22],[663,22],[857,22],[915,22]]}}}],["proxy.key",{"_index":2099,"t":{"2101":{"position":[[1247,9]]},"2231":{"position":[[2052,9]]},"2233":{"position":[[2000,9]]},"2235":{"position":[[1869,9]]},"2237":{"position":[[1818,9]]},"2239":{"position":[[1831,9]]},"2241":{"position":[[1944,9]]},"2243":{"position":[[1905,9]]},"2247":{"position":[[1978,9]]},"2249":{"position":[[1959,9]]},"2251":{"position":[[1855,9]]},"2253":{"position":[[1971,9]]},"2255":{"position":[[1836,9]]},"2257":{"position":[[1751,9]]},"2267":{"position":[[1926,9]]},"2273":{"position":[[1968,9]]},"2275":{"position":[[1884,9]]},"2277":{"position":[[1890,9]]},"2350":{"position":[[2235,9]]},"2352":{"position":[[2249,9]]},"2354":{"position":[[2364,9]]}}}],["prune",{"_index":868,"t":{"1750":{"position":[[4108,5],[4719,5],[4784,5],[4922,5],[4946,5]]}}}],["ps",{"_index":284,"t":{"1675":{"position":[[970,2]]},"2200":{"position":[[131,3]]},"2202":{"position":[[141,3]]},"2310":{"position":[[2145,2],[2162,3],[2215,3],[2385,2],[2402,3],[2455,3],[2625,2],[2642,3],[2695,3]]},"2316":{"position":[[2190,2],[2207,3],[2260,3]]}}}],["ps(1",{"_index":2503,"t":{"2310":{"position":[[2288,6],[2528,6],[2768,6]]},"2316":{"position":[[2333,6]]}}}],["psa",{"_index":1980,"t":{"2091":{"position":[[103,5]]},"2093":{"position":[[84,6],[121,4],[407,4]]}}}],["psa.yaml",{"_index":1985,"t":{"2093":{"position":[[322,8]]}}}],["psp",{"_index":1791,"t":{"2021":{"position":[[2366,3],[2664,4],[2748,3],[2848,3],[2900,3],[2966,3],[3034,3],[3108,3],[3201,3],[3284,3]]},"2091":{"position":[[96,3]]},"2093":{"position":[[898,6],[935,4],[1199,4],[1356,4],[1439,3],[2034,3],[2626,3],[3196,3],[3634,3],[4093,3],[4200,3],[4307,3],[4410,3],[4516,3],[4605,3],[4727,3],[4815,3],[5017,3],[5126,3],[5317,3],[5449,3],[5627,3],[5745,3]]},"2412":{"position":[[211,3]]}}}],["psp:restrict",{"_index":2026,"t":{"2093":{"position":[[4078,14],[4800,14]]}}}],["psp:svclb",{"_index":2030,"t":{"2093":{"position":[[4506,9],[5735,9]]}}}],["psp:system",{"_index":2029,"t":{"2093":{"position":[[4283,10],[5102,10],[5425,10]]}}}],["pss",{"_index":1761,"t":{"2021":{"position":[[13,7],[84,4]]}}}],["public",{"_index":1587,"t":{"1953":{"position":[[1354,6]]},"1957":{"position":[[138,6],[306,6],[1162,6]]},"1963":{"position":[[358,6]]},"2093":{"position":[[6297,6],[6388,6]]},"2131":{"position":[[735,7]]},"2269":{"position":[[207,6]]}}}],["pull",{"_index":556,"t":{"1715":{"position":[[240,8]]},"1959":{"position":[[78,4]]},"1963":{"position":[[225,7],[422,4],[449,5],[613,7],[680,4],[1052,4],[1501,6]]},"1971":{"position":[[88,4],[173,4]]},"2075":{"position":[[991,5]]}}}],["pulls=fals",{"_index":2160,"t":{"2101":{"position":[[4204,11]]},"2356":{"position":[[1729,11],[2952,11]]},"2368":{"position":[[1920,11],[3143,11]]}}}],["purpos",{"_index":731,"t":{"1742":{"position":[[2148,8]]},"2095":{"position":[[568,9]]}}}],["push",{"_index":1362,"t":{"1900":{"position":[[683,4]]},"1971":{"position":[[347,4],[404,4]]}}}],["pv",{"_index":2223,"t":{"2135":{"position":[[180,6],[290,3]]},"2143":{"position":[[376,2],[412,2]]},"2149":{"position":[[312,2],[348,2]]}}}],["pvc",{"_index":2224,"t":{"2135":{"position":[[239,8],[294,4]]},"2141":{"position":[[70,3]]},"2143":{"position":[[305,3],[381,4],[427,3]]},"2145":{"position":[[310,4]]},"2147":{"position":[[73,3]]},"2149":{"position":[[308,3],[317,4],[363,3]]}}}],["pvc.yaml",{"_index":2250,"t":{"2143":{"position":[[340,8]]},"2145":{"position":[[344,8]]}}}],["qf",{"_index":794,"t":{"1748":{"position":[[775,2]]}}}],["quick",{"_index":1372,"t":{"1904":{"position":[[20,5]]},"1906":{"position":[[347,5]]},"2053":{"position":[[20,5]]}}}],["quobyt",{"_index":2234,"t":{"2137":{"position":[[298,7]]}}}],["r",{"_index":2382,"t":{"2216":{"position":[[139,1]]},"2218":{"position":[[139,1]]},"2220":{"position":[[139,1]]}}}],["ra",{"_index":1592,"t":{"1955":{"position":[[114,5],[272,3]]}}}],["ram",{"_index":1688,"t":{"1981":{"position":[[154,3]]},"1989":{"position":[[131,3]]},"1995":{"position":[[200,3]]},"2055":{"position":[[167,3],[192,3]]},"2063":{"position":[[73,4],[125,4]]},"2067":{"position":[[376,3]]},"2069":{"position":[[341,3]]},"2071":{"position":[[169,3]]}}}],["ran",{"_index":2269,"t":{"2159":{"position":[[673,3]]}}}],["rancher",{"_index":581,"t":{"1719":{"position":[[75,7],[190,7],[210,7],[302,7],[366,7]]},"1832":{"position":[[38,7]]},"1870":{"position":[[151,7]]},"1963":{"position":[[1267,16]]},"1979":{"position":[[318,7],[361,7]]},"2021":{"position":[[1143,8]]},"2075":{"position":[[503,7]]},"2152":{"position":[[140,8]]},"2159":{"position":[[1083,8],[1111,7],[1179,8],[1188,7],[1336,8],[1345,7],[1475,8]]}}}],["rancher'",{"_index":2265,"t":{"2159":{"position":[[42,9]]}}}],["rancher/k3",{"_index":525,"t":{"1708":{"position":[[231,11]]},"1900":{"position":[[181,11],[927,11]]},"2163":{"position":[[710,11],[1046,11],[1117,11]]}}}],["rancher/k3s:v1.24.10",{"_index":529,"t":{"1708":{"position":[[402,20]]}}}],["rancher/klipp",{"_index":301,"t":{"1675":{"position":[[1198,15]]},"1876":{"position":[[1180,15]]}}}],["rancher/kubectl",{"_index":1367,"t":{"1900":{"position":[[987,15]]}}}],["rancher/kubectl:v0.17.0",{"_index":1366,"t":{"1900":{"position":[[869,23]]}}}],["rancher/librari",{"_index":304,"t":{"1675":{"position":[[1361,15]]}}}],["rancher/mirror",{"_index":214,"t":{"1662":{"position":[[2380,17]]},"1794":{"position":[[7312,17]]}}}],["rancher/pause:3.1",{"_index":314,"t":{"1675":{"position":[[1546,17],[1702,17],[2422,17],[2582,17],[2757,17]]}}}],["rancher/system",{"_index":1364,"t":{"1900":{"position":[[828,14],[948,14]]}}}],["random",{"_index":1063,"t":{"1806":{"position":[[93,6]]},"1811":{"position":[[635,6]]},"1975":{"position":[[197,6]]}}}],["randomli",{"_index":1102,"t":{"1811":{"position":[[1850,8]]}}}],["rang",{"_index":985,"t":{"1782":{"position":[[207,5],[238,5],[394,5],[1929,6]]},"1794":{"position":[[1587,5],[1617,5],[1798,5]]},"2093":{"position":[[1907,7],[1962,7],[2992,7],[3047,7]]},"2406":{"position":[[137,5]]}}}],["range=10.43.0.0/16",{"_index":2110,"t":{"2101":{"position":[[1772,18]]},"2231":{"position":[[2600,18]]},"2233":{"position":[[2548,18]]},"2235":{"position":[[2417,18]]},"2237":{"position":[[2366,18]]},"2239":{"position":[[2379,18]]},"2241":{"position":[[2492,18]]},"2243":{"position":[[2453,18]]},"2247":{"position":[[2526,18]]},"2249":{"position":[[2507,18]]},"2251":{"position":[[2403,18]]},"2253":{"position":[[2519,18]]},"2255":{"position":[[2384,18]]},"2257":{"position":[[2299,18]]},"2267":{"position":[[2474,18]]},"2273":{"position":[[2516,18]]},"2275":{"position":[[2432,18]]},"2277":{"position":[[2438,18]]},"2288":{"position":[[1959,18]]},"2290":{"position":[[2027,18]]},"2292":{"position":[[2112,18]]},"2294":{"position":[[2009,18]]},"2350":{"position":[[2783,18]]},"2352":{"position":[[2797,18]]},"2354":{"position":[[2912,18]]}}}],["range=30000",{"_index":2447,"t":{"2231":{"position":[[2639,11]]},"2233":{"position":[[2587,11]]},"2235":{"position":[[2456,11]]},"2237":{"position":[[2405,11]]},"2239":{"position":[[2418,11]]},"2241":{"position":[[2531,11]]},"2243":{"position":[[2492,11]]},"2247":{"position":[[2565,11]]},"2249":{"position":[[2546,11]]},"2251":{"position":[[2442,11]]},"2253":{"position":[[2558,11]]},"2255":{"position":[[2423,11]]},"2257":{"position":[[2338,11]]},"2267":{"position":[[2513,11]]},"2273":{"position":[[2555,11]]},"2275":{"position":[[2471,11]]},"2277":{"position":[[2477,11]]},"2350":{"position":[[2822,11]]},"2352":{"position":[[2836,11]]},"2354":{"position":[[2951,11]]}}}],["raspberri",{"_index":1228,"t":{"1846":{"position":[[439,9]]},"1945":{"position":[[1386,9]]},"1979":{"position":[[201,9]]},"2063":{"position":[[87,9]]}}}],["rasperri",{"_index":1520,"t":{"1945":{"position":[[393,8]]}}}],["raspi",{"_index":523,"t":{"1706":{"position":[[505,5]]}}}],["rational",{"_index":2168,"t":{"2105":{"position":[[68,9]]},"2107":{"position":[[67,9]]},"2109":{"position":[[50,9]]},"2111":{"position":[[76,9]]},"2113":{"position":[[79,9]]},"2115":{"position":[[78,9]]},"2117":{"position":[[66,9]]},"2119":{"position":[[66,9]]},"2121":{"position":[[77,9]]},"2123":{"position":[[63,9]]},"2125":{"position":[[78,9]]},"2127":{"position":[[47,9]]},"2129":{"position":[[69,9]]},"2131":{"position":[[59,9]]}}}],["rbac",{"_index":1792,"t":{"2021":{"position":[[2483,4]]},"2239":{"position":[[209,5],[419,6]]}}}],["rbac.authorization.k8s.io",{"_index":1441,"t":{"1918":{"position":[[410,25]]},"2093":{"position":[[4750,25],[4880,25],[5052,25],[5152,25],[5375,25],[5475,25],[5685,25]]}}}],["rbac.authorization.k8s.io/v1",{"_index":1437,"t":{"1918":{"position":[[310,28]]},"2093":{"position":[[4015,28],[4220,28],[4443,28],[4638,28],[4922,28],[5225,28],[5558,28]]}}}],["rbd",{"_index":2235,"t":{"2137":{"position":[[306,3]]}}}],["rc",{"_index":895,"t":{"1756":{"position":[[422,2],[1318,2]]},"1758":{"position":[[358,2],[1177,2]]}}}],["rc1",{"_index":2309,"t":{"2169":{"position":[[529,3]]}}}],["re",{"_index":574,"t":{"1717":{"position":[[511,4]]},"1758":{"position":[[450,2],[1321,2]]},"1904":{"position":[[583,2]]},"1931":{"position":[[397,2]]},"2163":{"position":[[2522,2]]},"2169":{"position":[[45,2]]}}}],["reach",{"_index":1604,"t":{"1957":{"position":[[290,7],[713,5],[788,5]]},"1983":{"position":[[91,5]]}}}],["reachabl",{"_index":1618,"t":{"1957":{"position":[[1781,9]]}}}],["read",{"_index":973,"t":{"1771":{"position":[[348,4]]},"1910":{"position":[[122,4]]},"2061":{"position":[[641,8]]},"2101":{"position":[[4074,4]]},"2159":{"position":[[884,4]]},"2356":{"position":[[303,4],[530,5],[567,4],[605,4],[1647,4],[2870,4]]},"2368":{"position":[[1838,4],[3061,4]]},"2426":{"position":[[67,4]]}}}],["readi",{"_index":259,"t":{"1675":{"position":[[554,5]]},"1838":{"position":[[1657,5]]},"1848":{"position":[[726,5],[777,5]]},"1939":{"position":[[749,5]]},"2001":{"position":[[529,5],[572,5]]}}}],["readonlyport",{"_index":2532,"t":{"2356":{"position":[[79,12]]}}}],["readonlyrootfilesystem",{"_index":2017,"t":{"2093":{"position":[[1990,23],[3075,23]]}}}],["readwriteonc",{"_index":2239,"t":{"2141":{"position":[[114,13]]},"2147":{"position":[[98,13]]}}}],["real",{"_index":1887,"t":{"2057":{"position":[[252,4]]}}}],["reason",{"_index":1073,"t":{"1806":{"position":[[767,7]]},"1931":{"position":[[293,8]]},"2095":{"position":[[68,10]]}}}],["reboot",{"_index":500,"t":{"1702":{"position":[[540,6]]},"1947":{"position":[[903,6]]}}}],["recent",{"_index":1521,"t":{"1945":{"position":[[410,6]]}}}],["reclaim=imagefs.available=10%,nodefs.available=10",{"_index":2147,"t":{"2101":{"position":[[3722,50]]},"2356":{"position":[[1239,50],[2462,50]]},"2368":{"position":[[1430,50],[2653,50]]}}}],["recommend",{"_index":901,"t":{"1756":{"position":[[930,11]]},"1758":{"position":[[784,11]]},"1821":{"position":[[207,9]]},"1848":{"position":[[73,9]]},"1947":{"position":[[386,9]]},"1949":{"position":[[139,11]]},"1953":{"position":[[1026,12]]},"1981":{"position":[[75,15],[123,11],[632,9]]},"1987":{"position":[[103,9],[198,11]]},"1991":{"position":[[85,9]]},"2097":{"position":[[337,11]]},"2105":{"position":[[296,11]]},"2117":{"position":[[566,11]]},"2129":{"position":[[214,11]]},"2163":{"position":[[6,11]]},"2167":{"position":[[215,11],[339,11]]},"2326":{"position":[[493,11]]}}}],["reconfigur",{"_index":756,"t":{"1744":{"position":[[760,12],[2408,12]]},"1746":{"position":[[580,12],[2208,12]]}}}],["record",{"_index":2175,"t":{"2109":{"position":[[145,7]]}}}],["recur",{"_index":1123,"t":{"1821":{"position":[[250,9]]}}}],["red",{"_index":1679,"t":{"1979":{"position":[[108,4]]}}}],["redeploy",{"_index":2283,"t":{"2161":{"position":[[459,10]]}}}],["redirect",{"_index":1629,"t":{"1963":{"position":[[342,10],[473,11]]}}}],["reduc",{"_index":1615,"t":{"1957":{"position":[[1562,6]]}}}],["redund",{"_index":849,"t":{"1750":{"position":[[2951,11]]}}}],["reencrypt",{"_index":886,"t":{"1754":{"position":[[238,12]]},"1756":{"position":[[531,9],[553,9],[647,10],[678,9],[1513,9],[1541,9],[1635,10],[1666,9]]},"1758":{"position":[[381,9],[422,9],[591,9],[632,9],[1246,9],[1293,9],[1493,9],[1540,9]]},"2081":{"position":[[200,12]]}}}],["reencrypt_act",{"_index":921,"t":{"1760":{"position":[[990,17]]}}}],["reencrypt_finish",{"_index":922,"t":{"1760":{"position":[[1008,18]]}}}],["reencrypt_request",{"_index":920,"t":{"1760":{"position":[[971,18]]}}}],["refer",{"_index":192,"t":{"1660":{"position":[[515,5]]},"1750":{"position":[[355,5]]},"1756":{"position":[[1120,8]]},"1758":{"position":[[932,8]]},"1800":{"position":[[38,8]]},"1821":{"position":[[351,5]]},"1832":{"position":[[863,5]]},"1838":{"position":[[814,5],[925,5]]},"1884":{"position":[[197,5]]},"1895":{"position":[[495,9]]},"1902":{"position":[[96,5]]},"1941":{"position":[[73,5]]},"1943":{"position":[[141,9]]},"1945":{"position":[[149,8]]},"1949":{"position":[[272,9]]},"1979":{"position":[[348,5]]},"2053":{"position":[[1578,5]]},"2176":{"position":[[657,5]]},"2428":{"position":[[26,5]]},"2438":{"position":[[153,5]]}}}],["reflect",{"_index":1611,"t":{"1957":{"position":[[1306,7]]}}}],["regard",{"_index":2295,"t":{"2163":{"position":[[1204,9]]}}}],["regex",{"_index":1488,"t":{"1933":{"position":[[1200,5]]}}}],["region",{"_index":856,"t":{"1750":{"position":[[3291,6],[3301,6]]},"1767":{"position":[[1521,6],[1541,6]]},"1794":{"position":[[5468,6],[5489,6]]}}}],["regist",{"_index":103,"t":{"1648":{"position":[[145,11],[220,11]]},"1662":{"position":[[1148,11],[1232,11]]},"1794":{"position":[[6473,11],[6557,11]]},"1832":{"position":[[781,8],[905,8]]},"1840":{"position":[[26,8]]},"1844":{"position":[[391,8]]},"1904":{"position":[[704,11],[1280,11]]}}}],["registr",{"_index":177,"t":{"1660":{"position":[[170,12],[478,12]]},"1832":{"position":[[692,12],[932,12],[964,12]]},"1844":{"position":[[482,12]]},"2007":{"position":[[543,12]]}}}],["registri",{"_index":142,"t":{"1650":{"position":[[311,8],[369,8]]},"1662":{"position":[[2519,8],[2558,8]]},"1794":{"position":[[7451,8],[7490,8],[7581,8],[7620,8]]},"1882":{"position":[[203,8]]},"1884":{"position":[[112,8],[187,9]]},"1886":{"position":[[19,8]]},"1888":{"position":[[215,8]]},"1893":{"position":[[44,8]]},"1900":{"position":[[142,9],[704,9],[1026,9]]},"1959":{"position":[[51,10],[236,10],[297,9],[390,9],[674,8],[714,10],[866,8]]},"1963":{"position":[[75,11],[249,9],[365,8],[948,8],[1526,8]]},"1965":{"position":[[259,8],[340,8],[530,8],[671,8],[729,8],[790,8],[852,10]]},"1967":{"position":[[283,8],[332,8],[402,8],[456,8],[508,8],[661,8],[715,8],[767,8]]},"1969":{"position":[[286,8],[335,8],[548,8]]},"1971":{"position":[[256,9],[378,9]]}}}],["registries.yaml",{"_index":1620,"t":{"1959":{"position":[[152,15],[565,15],[800,15]]}}}],["registry'",{"_index":1650,"t":{"1965":{"position":[[414,10]]}}}],["registry.example.com:5000/mirrorproject/ranch",{"_index":1641,"t":{"1963":{"position":[[1112,47]]}}}],["registry.yaml",{"_index":1322,"t":{"1886":{"position":[[76,13]]}}}],["regular",{"_index":1636,"t":{"1963":{"position":[[861,7]]}}}],["reinstal",{"_index":1295,"t":{"1876":{"position":[[1271,9]]},"2007":{"position":[[420,13]]}}}],["rejoin",{"_index":1753,"t":{"2007":{"position":[[357,9]]}}}],["relat",{"_index":1209,"t":{"1842":{"position":[[627,7],[882,7]]},"1848":{"position":[[1165,7],[1420,7]]},"2097":{"position":[[38,7]]}}}],["releas",{"_index":686,"t":{"1740":{"position":[[1502,8]]},"1810":{"position":[[138,8]]},"1832":{"position":[[99,8]]},"1846":{"position":[[173,8]]},"1890":{"position":[[58,8]]},"1893":{"position":[[189,8]]},"1898":{"position":[[130,8],[466,9]]},"1900":{"position":[[312,7],[551,7],[730,7]]},"1906":{"position":[[195,7]]},"1945":{"position":[[2145,8],[2302,8]]},"1971":{"position":[[58,7]]},"2103":{"position":[[231,7]]},"2163":{"position":[[1940,7],[2061,8],[2095,7],[2252,7]]},"2167":{"position":[[112,7],[262,8],[393,8],[488,7],[664,8]]},"2171":{"position":[[80,8]]},"2176":{"position":[[465,7],[499,7]]}}}],["release/channel",{"_index":1853,"t":{"2053":{"position":[[2194,17]]}}}],["release/channels/st",{"_index":2298,"t":{"2163":{"position":[[2360,23]]}}}],["relev",{"_index":1743,"t":{"1997":{"position":[[293,8]]},"2109":{"position":[[115,8]]}}}],["reli",{"_index":1716,"t":{"1983":{"position":[[1013,6]]}}}],["reload",{"_index":437,"t":{"1689":{"position":[[583,7]]},"1702":{"position":[[313,6]]},"1957":{"position":[[1430,6]]},"2097":{"position":[[1444,6]]},"2350":{"position":[[429,6]]},"2352":{"position":[[415,6]]},"2354":{"position":[[471,6]]},"2356":{"position":[[401,6]]},"2358":{"position":[[458,6]]},"2360":{"position":[[435,6]]},"2362":{"position":[[435,6]]},"2364":{"position":[[309,6]]},"2366":{"position":[[403,6]]},"2368":{"position":[[619,6]]},"2370":{"position":[[485,6]]},"2372":{"position":[[339,6]]},"2374":{"position":[[1044,6]]}}}],["remain",{"_index":1109,"t":{"1811":{"position":[[2377,9]]},"2129":{"position":[[319,7]]}}}],["remedi",{"_index":2066,"t":{"2099":{"position":[[99,12]]},"2105":{"position":[[434,10]]},"2107":{"position":[[533,10]]},"2109":{"position":[[457,10]]},"2111":{"position":[[297,10]]},"2113":{"position":[[472,10]]},"2115":{"position":[[458,10]]},"2117":{"position":[[682,10]]},"2119":{"position":[[475,10]]},"2123":{"position":[[287,10]]},"2125":{"position":[[549,10]]},"2127":{"position":[[169,10]]},"2129":{"position":[[600,10]]},"2131":{"position":[[538,10]]},"2176":{"position":[[617,12],[1359,11]]},"2180":{"position":[[23,12]]},"2182":{"position":[[23,12]]},"2184":{"position":[[23,12]]},"2186":{"position":[[23,12]]},"2188":{"position":[[23,12]]},"2190":{"position":[[23,12]]},"2192":{"position":[[23,12]]},"2194":{"position":[[23,12]]},"2196":{"position":[[23,12]]},"2198":{"position":[[23,12]]},"2200":{"position":[[13,12]]},"2202":{"position":[[23,12]]},"2204":{"position":[[23,12]]},"2206":{"position":[[13,12]]},"2208":{"position":[[13,12]]},"2210":{"position":[[13,12]]},"2212":{"position":[[13,12]]},"2214":{"position":[[13,12]]},"2216":{"position":[[13,12]]},"2218":{"position":[[13,12]]},"2220":{"position":[[13,12]]},"2223":{"position":[[13,12]]},"2225":{"position":[[13,12]]},"2227":{"position":[[13,12]]},"2229":{"position":[[23,12]]},"2231":{"position":[[13,12]]},"2233":{"position":[[13,12]]},"2235":{"position":[[13,12]]},"2237":{"position":[[13,12]]},"2239":{"position":[[13,12]]},"2241":{"position":[[13,12]]},"2243":{"position":[[13,12]]},"2245":{"position":[[13,12]]},"2247":{"position":[[13,12]]},"2249":{"position":[[13,12]]},"2251":{"position":[[13,12]]},"2253":{"position":[[13,12]]},"2255":{"position":[[13,12]]},"2257":{"position":[[13,12]]},"2259":{"position":[[23,12]]},"2261":{"position":[[23,12]]},"2263":{"position":[[23,12]]},"2265":{"position":[[23,12]]},"2267":{"position":[[13,12]]},"2269":{"position":[[23,12]]},"2271":{"position":[[13,12]]},"2273":{"position":[[13,12]]},"2275":{"position":[[13,12]]},"2277":{"position":[[13,12]]},"2279":{"position":[[13,12]]},"2281":{"position":[[13,12]]},"2283":{"position":[[13,12]]},"2286":{"position":[[13,12]]},"2288":{"position":[[13,12]]},"2290":{"position":[[13,12]]},"2292":{"position":[[13,12]]},"2294":{"position":[[13,12]]},"2296":{"position":[[23,12]]},"2298":{"position":[[13,12]]},"2301":{"position":[[13,12]]},"2303":{"position":[[13,12]]},"2306":{"position":[[13,12]]},"2308":{"position":[[13,12]]},"2310":{"position":[[13,12]]},"2312":{"position":[[13,12]]},"2314":{"position":[[13,12]]},"2316":{"position":[[13,12]]},"2318":{"position":[[13,12]]},"2321":{"position":[[13,12]]},"2324":{"position":[[13,12]]},"2326":{"position":[[13,12]]},"2329":{"position":[[23,12]]},"2331":{"position":[[23,12]]},"2333":{"position":[[13,12]]},"2335":{"position":[[13,12]]},"2337":{"position":[[13,12]]},"2339":{"position":[[13,12]]},"2341":{"position":[[13,12]]},"2343":{"position":[[13,12]]},"2345":{"position":[[23,12]]},"2347":{"position":[[23,12]]},"2350":{"position":[[13,12]]},"2352":{"position":[[13,12]]},"2354":{"position":[[13,12]]},"2356":{"position":[[13,12]]},"2358":{"position":[[13,12]]},"2360":{"position":[[23,12]]},"2362":{"position":[[23,12]]},"2364":{"position":[[23,12]]},"2366":{"position":[[13,12]]},"2368":{"position":[[13,12]]},"2370":{"position":[[23,12]]},"2372":{"position":[[23,12]]},"2374":{"position":[[13,12]]},"2377":{"position":[[13,12]]},"2379":{"position":[[13,12]]},"2381":{"position":[[13,12]]},"2383":{"position":[[13,12]]},"2385":{"position":[[13,12]]},"2387":{"position":[[13,12]]},"2389":{"position":[[13,12]]},"2391":{"position":[[13,12]]},"2394":{"position":[[13,12]]},"2396":{"position":[[13,12]]},"2398":{"position":[[13,12]]},"2400":{"position":[[13,12]]},"2402":{"position":[[13,12]]},"2404":{"position":[[13,12]]},"2406":{"position":[[13,12]]},"2408":{"position":[[13,12]]},"2410":{"position":[[13,12]]},"2412":{"position":[[13,12]]},"2414":{"position":[[13,12]]},"2416":{"position":[[13,12]]},"2418":{"position":[[13,12]]},"2421":{"position":[[13,12]]},"2423":{"position":[[13,12]]},"2426":{"position":[[13,12]]},"2428":{"position":[[13,12]]},"2431":{"position":[[13,12]]},"2434":{"position":[[13,12]]},"2436":{"position":[[13,12]]},"2438":{"position":[[13,12]]},"2440":{"position":[[13,12]]}}}],["rememb",{"_index":1586,"t":{"1953":{"position":[[1297,8]]},"1957":{"position":[[939,8]]}}}],["remot",{"_index":1449,"t":{"1922":{"position":[[293,6]]},"2101":{"position":[[1429,6],[1475,6],[1523,6]]},"2231":{"position":[[2234,6],[2280,6],[2328,6]]},"2233":{"position":[[2182,6],[2228,6],[2276,6]]},"2235":{"position":[[2051,6],[2097,6],[2145,6]]},"2237":{"position":[[2000,6],[2046,6],[2094,6]]},"2239":{"position":[[2013,6],[2059,6],[2107,6]]},"2241":{"position":[[2126,6],[2172,6],[2220,6]]},"2243":{"position":[[2087,6],[2133,6],[2181,6]]},"2247":{"position":[[2160,6],[2206,6],[2254,6]]},"2249":{"position":[[2141,6],[2187,6],[2235,6]]},"2251":{"position":[[2037,6],[2083,6],[2131,6]]},"2253":{"position":[[2153,6],[2199,6],[2247,6]]},"2255":{"position":[[2018,6],[2064,6],[2112,6]]},"2257":{"position":[[1933,6],[1979,6],[2027,6]]},"2267":{"position":[[2108,6],[2154,6],[2202,6]]},"2273":{"position":[[2150,6],[2196,6],[2244,6]]},"2275":{"position":[[2066,6],[2112,6],[2160,6]]},"2277":{"position":[[2072,6],[2118,6],[2166,6]]},"2350":{"position":[[2417,6],[2463,6],[2511,6]]},"2352":{"position":[[2431,6],[2477,6],[2525,6]]},"2354":{"position":[[2546,6],[2592,6],[2640,6]]}}}],["remov",{"_index":848,"t":{"1750":{"position":[[2934,7],[4114,6]]},"1937":{"position":[[388,6]]},"1939":{"position":[[303,6]]},"1945":{"position":[[1789,7],[1975,7]]},"1947":{"position":[[100,7],[319,7]]},"2003":{"position":[[88,8],[186,6]]},"2007":{"position":[[117,6],[521,8]]},"2156":{"position":[[313,8]]},"2225":{"position":[[231,6]]},"2227":{"position":[[145,6]]},"2229":{"position":[[155,6]]},"2243":{"position":[[152,6]]},"2255":{"position":[[152,6]]},"2310":{"position":[[129,6]]},"2316":{"position":[[129,6]]},"2362":{"position":[[262,6]]},"2364":{"position":[[144,6]]},"2370":{"position":[[128,6],[316,6]]},"2377":{"position":[[256,6]]},"2379":{"position":[[42,6]]},"2383":{"position":[[42,6]]},"2389":{"position":[[26,6]]},"2391":{"position":[[42,6]]}}}],["renew",{"_index":634,"t":{"1736":{"position":[[171,7]]},"1740":{"position":[[388,8]]},"1744":{"position":[[455,5]]}}}],["repeat",{"_index":1406,"t":{"1908":{"position":[[688,10],[989,10]]},"1937":{"position":[[549,9]]}}}],["replac",{"_index":1220,"t":{"1846":{"position":[[125,8]]},"1898":{"position":[[307,7]]},"1900":{"position":[[286,8]]},"1910":{"position":[[366,9]]},"1943":{"position":[[82,11]]},"2381":{"position":[[41,7]]}}}],["repo",{"_index":580,"t":{"1719":{"position":[[66,4],[121,4]]},"1742":{"position":[[270,4]]},"1746":{"position":[[1286,4]]},"1876":{"position":[[425,5],[891,4]]}}}],["report",{"_index":679,"t":{"1740":{"position":[[1261,8]]},"1933":{"position":[[776,8]]}}}],["repositori",{"_index":2278,"t":{"2159":{"position":[[1648,13]]}}}],["repres",{"_index":1407,"t":{"1908":{"position":[[719,11],[764,11]]}}}],["request",{"_index":712,"t":{"1742":{"position":[[881,7],[903,7]]},"2021":{"position":[[761,8]]},"2097":{"position":[[483,7]]},"2099":{"position":[[529,8],[1152,8]]},"2117":{"position":[[18,7],[91,7],[139,7],[367,8]]},"2119":{"position":[[260,7]]},"2141":{"position":[[168,9]]},"2147":{"position":[[150,9]]},"2326":{"position":[[219,8],[440,9]]}}}],["requesthead",{"_index":2100,"t":{"2101":{"position":[[1259,13],[1307,13],[1392,13],[1445,13],[1490,13]]},"2231":{"position":[[2064,13],[2112,13],[2197,13],[2250,13],[2295,13]]},"2233":{"position":[[2012,13],[2060,13],[2145,13],[2198,13],[2243,13]]},"2235":{"position":[[1881,13],[1929,13],[2014,13],[2067,13],[2112,13]]},"2237":{"position":[[1830,13],[1878,13],[1963,13],[2016,13],[2061,13]]},"2239":{"position":[[1843,13],[1891,13],[1976,13],[2029,13],[2074,13]]},"2241":{"position":[[1956,13],[2004,13],[2089,13],[2142,13],[2187,13]]},"2243":{"position":[[1917,13],[1965,13],[2050,13],[2103,13],[2148,13]]},"2247":{"position":[[1990,13],[2038,13],[2123,13],[2176,13],[2221,13]]},"2249":{"position":[[1971,13],[2019,13],[2104,13],[2157,13],[2202,13]]},"2251":{"position":[[1867,13],[1915,13],[2000,13],[2053,13],[2098,13]]},"2253":{"position":[[1983,13],[2031,13],[2116,13],[2169,13],[2214,13]]},"2255":{"position":[[1848,13],[1896,13],[1981,13],[2034,13],[2079,13]]},"2257":{"position":[[1763,13],[1811,13],[1896,13],[1949,13],[1994,13]]},"2267":{"position":[[1938,13],[1986,13],[2071,13],[2124,13],[2169,13]]},"2273":{"position":[[1980,13],[2028,13],[2113,13],[2166,13],[2211,13]]},"2275":{"position":[[1896,13],[1944,13],[2029,13],[2082,13],[2127,13]]},"2277":{"position":[[1902,13],[1950,13],[2035,13],[2088,13],[2133,13]]},"2350":{"position":[[2247,13],[2295,13],[2380,13],[2433,13],[2478,13]]},"2352":{"position":[[2261,13],[2309,13],[2394,13],[2447,13],[2492,13]]},"2354":{"position":[[2376,13],[2424,13],[2509,13],[2562,13],[2607,13]]}}}],["requir",{"_index":642,"t":{"1740":{"position":[[11,8],[171,12]]},"1742":{"position":[[815,9],[949,8]]},"1744":{"position":[[575,9],[1404,8]]},"1756":{"position":[[914,9]]},"1758":{"position":[[768,9]]},"1760":{"position":[[1219,8]]},"1782":{"position":[[964,8],[1292,8]]},"1819":{"position":[[24,8]]},"1834":{"position":[[25,8]]},"1838":{"position":[[4,8],[73,12],[112,13]]},"1842":{"position":[[974,8]]},"1888":{"position":[[85,8]]},"1893":{"position":[[483,8]]},"1900":{"position":[[96,8]]},"1933":{"position":[[323,13]]},"1945":{"position":[[436,8],[519,7],[1349,7],[1469,8],[1637,7],[1901,7]]},"1947":{"position":[[29,8],[228,8],[469,8]]},"1951":{"position":[[827,8],[1124,8]]},"1953":{"position":[[1480,9]]},"1957":{"position":[[972,12],[1532,8]]},"1973":{"position":[[46,12],[217,13],[237,12]]},"1977":{"position":[[179,12]]},"1979":{"position":[[77,13]]},"1981":{"position":[[9,12],[249,12]]},"1985":{"position":[[75,8],[209,8],[317,8],[393,8],[525,8]]},"1987":{"position":[[9,12]]},"1989":{"position":[[45,12]]},"2055":{"position":[[73,12],[829,12]]},"2059":{"position":[[591,13]]},"2065":{"position":[[73,12]]},"2067":{"position":[[14,12],[119,12],[146,11],[320,12]]},"2069":{"position":[[23,12],[119,12],[146,11],[292,12]]},"2071":{"position":[[8,12],[35,11],[176,9]]},"2075":{"position":[[584,13],[719,13]]},"2077":{"position":[[543,12]]},"2085":{"position":[[137,8],[429,7]]},"2087":{"position":[[34,13]]},"2089":{"position":[[66,8]]},"2091":{"position":[[12,12]]},"2093":{"position":[[2211,7]]},"2095":{"position":[[4,8]]},"2097":{"position":[[4,12],[170,12]]},"2101":{"position":[[4400,12]]},"2111":{"position":[[271,13]]},"2129":{"position":[[117,8]]},"2131":{"position":[[259,9]]},"2159":{"position":[[250,13]]},"2161":{"position":[[97,8]]},"2176":{"position":[[1851,7]]},"2200":{"position":[[436,11],[1641,8]]},"2271":{"position":[[566,11],[1771,8]]},"2306":{"position":[[460,11],[1665,8]]},"2308":{"position":[[349,11],[1554,8]]},"2310":{"position":[[374,11],[1579,8]]},"2312":{"position":[[526,11],[1731,8]]},"2314":{"position":[[352,11],[1557,8]]},"2316":{"position":[[384,11],[1589,8]]},"2318":{"position":[[483,11],[1688,8]]},"2385":{"position":[[90,8]]},"2412":{"position":[[151,7]]}}}],["require('http",{"_index":572,"t":{"1717":{"position":[[462,16]]}}}],["requireddropcap",{"_index":1995,"t":{"2093":{"position":[[1527,25],[2686,25]]}}}],["res.end('hello",{"_index":576,"t":{"1717":{"position":[[538,14]]}}}],["res.writehead(200",{"_index":575,"t":{"1717":{"position":[[518,19]]}}}],["reserv",{"_index":988,"t":{"1782":{"position":[[247,7]]},"1794":{"position":[[1626,7]]}}}],["reset",{"_index":819,"t":{"1750":{"position":[[931,5],[964,5],[1018,5],[1036,5],[1363,5],[1396,5],[1450,5],[1468,5],[2370,5],[2517,5],[3736,5],[3766,5]]},"1769":{"position":[[541,5]]},"1794":{"position":[[3275,5],[3379,5]]},"2156":{"position":[[151,5]]}}}],["resolv",{"_index":148,"t":{"1652":{"position":[[174,6]]},"1662":{"position":[[2819,6]]},"1794":{"position":[[7880,6]]},"1895":{"position":[[1314,6]]},"2101":{"position":[[4101,6]]},"2163":{"position":[[1926,8],[2043,8]]},"2356":{"position":[[1666,6],[2889,6]]},"2368":{"position":[[1857,6],[3080,6]]}}}],["resolv.conf",{"_index":151,"t":{"1652":{"position":[[216,11]]},"1662":{"position":[[2864,11]]},"1794":{"position":[[7925,11]]}}}],["resourc",{"_index":408,"t":{"1681":{"position":[[955,10]]},"1918":{"position":[[123,8]]},"1929":{"position":[[281,9],[347,9]]},"1933":{"position":[[128,10],[219,9],[260,9]]},"1939":{"position":[[340,9]]},"1973":{"position":[[319,9]]},"1981":{"position":[[170,8],[240,8]]},"1995":{"position":[[130,9]]},"2021":{"position":[[2638,9],[2767,10]]},"2055":{"position":[[64,8],[724,8],[820,8],[928,8]]},"2057":{"position":[[4,8]]},"2059":{"position":[[374,8]]},"2061":{"position":[[273,8]]},"2065":{"position":[[64,8]]},"2067":{"position":[[84,9],[137,8]]},"2069":{"position":[[137,8]]},"2071":{"position":[[26,8]]},"2075":{"position":[[363,10],[575,8],[673,9],[710,8],[1271,8]]},"2079":{"position":[[655,12],[672,12]]},"2093":{"position":[[4126,10],[4340,10],[4549,10]]},"2107":{"position":[[118,8]]},"2117":{"position":[[319,9],[498,9]]},"2125":{"position":[[141,8],[446,9]]},"2141":{"position":[[157,10]]},"2147":{"position":[[139,10]]},"2159":{"position":[[159,8]]},"2440":{"position":[[112,9],[139,9]]}}}],["resourcenam",{"_index":2028,"t":{"2093":{"position":[[4172,14],[4373,14],[4582,14]]}}}],["respect",{"_index":1405,"t":{"1908":{"position":[[662,10]]},"1951":{"position":[[1489,7]]}}}],["respons",{"_index":1492,"t":{"1933":{"position":[[1408,14]]},"2077":{"position":[[578,8]]}}}],["rest",{"_index":882,"t":{"1752":{"position":[[44,5]]},"1780":{"position":[[80,4]]},"1794":{"position":[[8527,4]]},"2079":{"position":[[44,5]]},"2121":{"position":[[200,4],[283,4]]}}}],["restart",{"_index":261,"t":{"1675":{"position":[[567,8]]},"1744":{"position":[[180,9],[826,9],[2220,7],[2464,10]]},"1746":{"position":[[203,9],[788,9],[2044,7],[2263,10]]},"1748":{"position":[[1351,7],[1417,7],[1435,7]]},"1750":{"position":[[1125,9],[1557,9]]},"1756":{"position":[[290,7],[392,7],[437,7],[488,7],[1198,7],[1288,7],[1333,7],[1365,7],[1436,7],[1491,7],[1685,7],[1740,7]]},"1758":{"position":[[226,7],[328,7],[373,7],[548,7],[1057,7],[1147,7],[1192,7],[1224,7],[1416,7],[1471,7]]},"1760":{"position":[[446,10],[1197,7],[1409,10]]},"1850":{"position":[[113,10]]},"1898":{"position":[[567,7],[599,9]]},"1939":{"position":[[762,8]]},"1957":{"position":[[1447,7]]},"1969":{"position":[[593,7]]},"2003":{"position":[[50,10],[314,7]]},"2079":{"position":[[369,10]]},"2097":{"position":[[1381,9],[1466,7]]},"2173":{"position":[[0,10],[90,7],[131,7],[146,7],[186,7],[214,7],[257,7],[268,7],[316,7]]},"2350":{"position":[[370,7],[446,7]]},"2352":{"position":[[356,7],[432,7]]},"2354":{"position":[[412,7],[488,7]]},"2356":{"position":[[342,7],[418,7]]},"2358":{"position":[[399,7],[475,7]]},"2360":{"position":[[376,7],[452,7]]},"2362":{"position":[[376,7],[452,7]]},"2364":{"position":[[250,7],[326,7]]},"2366":{"position":[[344,7],[420,7]]},"2368":{"position":[[560,7],[636,7]]},"2370":{"position":[[426,7],[502,7]]},"2372":{"position":[[280,7],[356,7]]},"2374":{"position":[[985,7],[1061,7]]}}}],["restartpolici",{"_index":404,"t":{"1681":{"position":[[788,14]]}}}],["restor",{"_index":808,"t":{"1750":{"position":[[137,7],[548,9],[597,8],[717,7],[839,7],[970,7],[1042,7],[1205,8],[1402,7],[1474,7],[1819,8],[2523,7],[2570,8],[2649,9],[3606,7],[3772,7],[3933,7]]},"1794":{"position":[[3385,7],[3437,8]]},"1806":{"position":[[1282,7]]},"1817":{"position":[[29,8],[224,7],[291,9],[358,10]]},"1819":{"position":[[47,7],[161,7],[191,7]]},"1821":{"position":[[47,7],[168,7],[316,9]]},"1823":{"position":[[89,7]]},"1842":{"position":[[988,9]]}}}],["restrict",{"_index":1469,"t":{"1933":{"position":[[578,13]]},"1983":{"position":[[1256,10]]},"2021":{"position":[[1437,12],[1483,12],[1526,12]]},"2085":{"position":[[723,8]]},"2093":{"position":[[631,12],[677,12],[720,12],[1428,10],[2615,10],[4189,10],[6569,11]]},"2095":{"position":[[527,13]]},"2097":{"position":[[304,11]]},"2129":{"position":[[563,11]]},"2208":{"position":[[395,11]]},"2212":{"position":[[405,11]]},"2396":{"position":[[100,8]]},"2398":{"position":[[100,8]]},"2400":{"position":[[100,8]]},"2402":{"position":[[100,8]]},"2404":{"position":[[100,8]]},"2408":{"position":[[100,8]]},"2414":{"position":[[100,8]]},"2416":{"position":[[100,8]]},"2418":{"position":[[100,8]]},"2421":{"position":[[191,11]]}}}],["result",{"_index":821,"t":{"1750":{"position":[[1074,7],[1506,7]]},"1904":{"position":[[673,6],[1329,6]]},"1910":{"position":[[634,7]]},"1912":{"position":[[474,7]]},"1981":{"position":[[202,7]]},"2055":{"position":[[26,7],[99,7]]},"2065":{"position":[[26,7]]},"2077":{"position":[[560,6]]},"2176":{"position":[[1155,7]]},"2180":{"position":[[0,7]]},"2182":{"position":[[0,7]]},"2184":{"position":[[0,7]]},"2186":{"position":[[0,7]]},"2188":{"position":[[0,7]]},"2190":{"position":[[0,7]]},"2192":{"position":[[0,7]]},"2194":{"position":[[0,7]]},"2196":{"position":[[0,7]]},"2198":{"position":[[0,7]]},"2200":{"position":[[0,7],[2082,7]]},"2202":{"position":[[0,7]]},"2204":{"position":[[0,7]]},"2206":{"position":[[0,7],[339,7]]},"2208":{"position":[[0,7],[333,7]]},"2210":{"position":[[0,7],[330,7]]},"2212":{"position":[[0,7],[343,7]]},"2214":{"position":[[0,7],[228,7]]},"2216":{"position":[[0,7],[247,7]]},"2218":{"position":[[0,7]]},"2220":{"position":[[0,7]]},"2223":{"position":[[0,7]]},"2225":{"position":[[0,7],[343,7]]},"2227":{"position":[[0,7],[272,7]]},"2229":{"position":[[0,7]]},"2231":{"position":[[0,7],[559,7]]},"2233":{"position":[[0,7],[542,7]]},"2235":{"position":[[0,7],[405,7]]},"2237":{"position":[[0,7],[371,7]]},"2239":{"position":[[0,7],[384,7]]},"2241":{"position":[[0,7],[481,7]]},"2243":{"position":[[0,7],[388,7]]},"2245":{"position":[[0,7],[332,7]]},"2247":{"position":[[0,7],[454,7]]},"2249":{"position":[[0,7],[457,7]]},"2251":{"position":[[0,7],[353,7]]},"2253":{"position":[[0,7],[507,7]]},"2255":{"position":[[0,7],[355,7]]},"2257":{"position":[[0,7],[304,7]]},"2259":{"position":[[0,7]]},"2261":{"position":[[0,7]]},"2263":{"position":[[0,7]]},"2265":{"position":[[0,7]]},"2267":{"position":[[0,7],[430,7]]},"2269":{"position":[[0,7]]},"2271":{"position":[[0,7],[2212,7]]},"2273":{"position":[[0,7],[486,7]]},"2275":{"position":[[0,7],[441,7]]},"2277":{"position":[[0,7],[450,7]]},"2279":{"position":[[0,7]]},"2281":{"position":[[0,7]]},"2283":{"position":[[0,7]]},"2286":{"position":[[0,7]]},"2288":{"position":[[0,7],[330,7]]},"2290":{"position":[[0,7],[372,7]]},"2292":{"position":[[0,7],[469,7]]},"2294":{"position":[[0,7],[386,7]]},"2296":{"position":[[0,7]]},"2298":{"position":[[0,7],[281,7]]},"2301":{"position":[[0,7],[289,7]]},"2303":{"position":[[0,7],[321,7]]},"2306":{"position":[[0,7],[2103,7]]},"2308":{"position":[[0,7],[1992,7]]},"2310":{"position":[[0,7],[2017,7]]},"2312":{"position":[[0,7],[2169,7]]},"2314":{"position":[[0,7],[1995,7]]},"2316":{"position":[[0,7],[2027,7]]},"2318":{"position":[[0,7],[2126,7]]},"2321":{"position":[[0,7]]},"2324":{"position":[[0,7]]},"2326":{"position":[[0,7]]},"2329":{"position":[[0,7]]},"2331":{"position":[[0,7]]},"2333":{"position":[[0,7],[263,7]]},"2335":{"position":[[0,7],[354,7]]},"2337":{"position":[[0,7],[263,7]]},"2339":{"position":[[0,7],[272,7]]},"2341":{"position":[[0,7],[202,7]]},"2343":{"position":[[0,7],[205,7]]},"2345":{"position":[[0,7]]},"2347":{"position":[[0,7]]},"2350":{"position":[[0,7],[760,7]]},"2352":{"position":[[0,7],[756,7]]},"2354":{"position":[[0,7],[850,7]]},"2356":{"position":[[0,7],[556,7]]},"2358":{"position":[[0,7]]},"2360":{"position":[[0,7]]},"2362":{"position":[[0,7]]},"2364":{"position":[[0,7]]},"2366":{"position":[[0,7]]},"2368":{"position":[[0,7],[750,7]]},"2370":{"position":[[0,7]]},"2372":{"position":[[0,7]]},"2374":{"position":[[0,7]]},"2377":{"position":[[0,7]]},"2379":{"position":[[0,7]]},"2381":{"position":[[0,7]]},"2383":{"position":[[0,7]]},"2385":{"position":[[0,7]]},"2387":{"position":[[0,7]]},"2389":{"position":[[0,7]]},"2391":{"position":[[0,7]]},"2394":{"position":[[0,7]]},"2396":{"position":[[0,7]]},"2398":{"position":[[0,7]]},"2400":{"position":[[0,7]]},"2402":{"position":[[0,7]]},"2404":{"position":[[0,7]]},"2406":{"position":[[0,7]]},"2408":{"position":[[0,7]]},"2410":{"position":[[0,7]]},"2412":{"position":[[0,7]]},"2414":{"position":[[0,7]]},"2416":{"position":[[0,7]]},"2418":{"position":[[0,7]]},"2421":{"position":[[0,7]]},"2423":{"position":[[0,7]]},"2426":{"position":[[0,7]]},"2428":{"position":[[0,7]]},"2431":{"position":[[0,7]]},"2434":{"position":[[0,7]]},"2436":{"position":[[0,7]]},"2438":{"position":[[0,7]]},"2440":{"position":[[0,7]]}}}],["retag",{"_index":1659,"t":{"1971":{"position":[[224,5]]}}}],["retain",{"_index":790,"t":{"1748":{"position":[[167,8]]},"1750":{"position":[[273,9],[335,8],[2237,6]]},"1767":{"position":[[976,6]]},"1794":{"position":[[4847,6]]},"1842":{"position":[[937,6]]},"2111":{"position":[[86,9]]},"2113":{"position":[[137,9]]},"2115":{"position":[[136,9]]}}}],["retent",{"_index":834,"t":{"1750":{"position":[[2198,9],[4158,9],[4758,9],[4837,9],[4886,9],[4963,9]]},"1767":{"position":[[933,9]]},"1794":{"position":[[4803,9]]},"2111":{"position":[[219,9]]}}}],["retriev",{"_index":1206,"t":{"1842":{"position":[[246,9]]}}}],["return",{"_index":770,"t":{"1744":{"position":[[2129,7]]},"1746":{"position":[[1953,7]]},"1748":{"position":[[1260,7]]},"2200":{"position":[[1622,6],[2114,8]]},"2206":{"position":[[383,8]]},"2208":{"position":[[407,8]]},"2210":{"position":[[361,8]]},"2212":{"position":[[417,8]]},"2214":{"position":[[272,8]]},"2216":{"position":[[278,8]]},"2225":{"position":[[386,8]]},"2227":{"position":[[367,8]]},"2231":{"position":[[647,8]]},"2233":{"position":[[595,8]]},"2235":{"position":[[464,8]]},"2237":{"position":[[413,8]]},"2239":{"position":[[426,8]]},"2241":{"position":[[539,8]]},"2243":{"position":[[500,8]]},"2245":{"position":[[380,8]]},"2247":{"position":[[573,8]]},"2249":{"position":[[554,8]]},"2251":{"position":[[450,8]]},"2253":{"position":[[566,8]]},"2255":{"position":[[431,8]]},"2257":{"position":[[346,8]]},"2267":{"position":[[521,8]]},"2271":{"position":[[1752,6],[2281,8]]},"2273":{"position":[[563,8]]},"2275":{"position":[[479,8]]},"2277":{"position":[[485,8]]},"2288":{"position":[[372,8]]},"2290":{"position":[[440,8]]},"2292":{"position":[[525,8]]},"2294":{"position":[[422,8]]},"2298":{"position":[[352,8]]},"2301":{"position":[[331,8]]},"2303":{"position":[[405,8]]},"2306":{"position":[[1646,6],[2160,8]]},"2308":{"position":[[1535,6],[2073,8]]},"2310":{"position":[[1560,6],[2086,8]]},"2312":{"position":[[1712,6],[2226,8]]},"2314":{"position":[[1538,6],[2076,8]]},"2316":{"position":[[1570,6],[2109,8]]},"2318":{"position":[[1669,6],[2163,8]]},"2333":{"position":[[364,8]]},"2335":{"position":[[453,8]]},"2337":{"position":[[295,8]]},"2339":{"position":[[316,8]]},"2341":{"position":[[354,8]]},"2343":{"position":[[249,8]]},"2350":{"position":[[807,8]]},"2352":{"position":[[815,8]]},"2354":{"position":[[888,8]]},"2356":{"position":[[636,8]]},"2368":{"position":[[827,8]]}}}],["reus",{"_index":741,"t":{"1742":{"position":[[2811,6]]},"1975":{"position":[[111,6]]}}}],["revers",{"_index":1707,"t":{"1983":{"position":[[302,7]]}}}],["review",{"_index":2219,"t":{"2133":{"position":[[122,6]]},"2159":{"position":[[465,6]]},"2326":{"position":[[26,6]]},"2412":{"position":[[26,6]]}}}],["rewrit",{"_index":1635,"t":{"1963":{"position":[[760,9],[800,9],[810,8],[1258,8]]},"2426":{"position":[[39,7]]}}}],["rf",{"_index":828,"t":{"1750":{"position":[[1698,2]]}}}],["rfc",{"_index":1479,"t":{"1933":{"position":[[1042,3]]}}}],["rhel9",{"_index":1675,"t":{"1977":{"position":[[141,6]]}}}],["right",{"_index":2069,"t":{"2101":{"position":[[124,5]]},"2131":{"position":[[332,6],[506,6]]},"2391":{"position":[[84,6]]}}}],["risk",{"_index":1598,"t":{"1955":{"position":[[295,4]]},"2326":{"position":[[288,4]]}}}],["rm",{"_index":827,"t":{"1750":{"position":[[1694,2]]}}}],["robin",{"_index":1199,"t":{"1840":{"position":[[612,5]]}}}],["rogu",{"_index":1719,"t":{"1983":{"position":[[1091,5]]}}}],["role",{"_index":1236,"t":{"1848":{"position":[[700,5]]},"1997":{"position":[[240,5],[398,4]]},"1999":{"position":[[38,5]]},"2001":{"position":[[122,4],[220,5],[423,5],[498,5]]},"2003":{"position":[[0,5],[147,4]]},"2377":{"position":[[80,5],[131,4],[159,4],[242,4],[307,4]]},"2381":{"position":[[90,5]]}}}],["role.kubernetes.io/control",{"_index":2291,"t":{"2163":{"position":[[596,26],[944,26],[1501,26]]}}}],["role.yml",{"_index":1436,"t":{"1918":{"position":[[289,8],[669,8]]},"1924":{"position":[[413,8]]}}}],["rolebind",{"_index":1801,"t":{"2021":{"position":[[3112,11],[3205,11],[3288,11]]},"2093":{"position":[[5021,11],[5260,11],[5321,11],[5593,11],[5631,11]]}}}],["rolebinding.rbac.authorization.k8s.io/svclb",{"_index":1802,"t":{"2021":{"position":[[3157,43]]}}}],["rolebinding.rbac.authorization.k8s.io/system",{"_index":1803,"t":{"2021":{"position":[[3217,44]]}}}],["rolebindings.yaml",{"_index":1505,"t":{"1939":{"position":[[650,17]]}}}],["roleref",{"_index":1439,"t":{"1918":{"position":[[391,8]]},"2093":{"position":[[4731,8],[5033,8],[5356,8],[5666,8]]}}}],["roles,clusterroles,rolebindings,clusterrolebind",{"_index":1794,"t":{"2021":{"position":[[2683,51]]}}}],["rollout",{"_index":2284,"t":{"2163":{"position":[[194,7]]}}}],["roolless",{"_index":443,"t":{"1689":{"position":[[870,9]]}}}],["root",{"_index":703,"t":{"1742":{"position":[[456,4],[519,4],[672,6],[1371,4],[1424,4],[1559,4],[1634,4],[1730,4],[2054,4],[2202,4],[2279,4],[2725,4]]},"1744":{"position":[[538,4],[564,4],[853,4],[1294,4],[1422,4],[2336,4]]},"1746":{"position":[[815,4],[1021,4]]},"1771":{"position":[[257,5]]},"1778":{"position":[[104,4]]},"1794":{"position":[[1355,5]]},"1800":{"position":[[506,4]]},"1811":{"position":[[973,4],[1750,4],[2234,4],[2523,4]]},"1829":{"position":[[986,4]]},"1959":{"position":[[349,4]]},"2101":{"position":[[2630,4]]},"2159":{"position":[[857,4]]},"2225":{"position":[[402,4],[573,4],[616,4],[898,4],[1180,4],[1462,4],[1744,4],[2026,4],[2308,4]]},"2227":{"position":[[383,4],[554,4],[597,4],[879,4],[1161,4],[1443,4],[1725,4],[2007,4],[2289,4]]},"2245":{"position":[[396,4],[567,4],[610,4],[892,4],[1174,4],[1456,4],[1738,4],[2020,4],[2302,4]]},"2288":{"position":[[1780,4]]},"2290":{"position":[[1848,4]]},"2292":{"position":[[1933,4]]},"2294":{"position":[[172,4],[230,4],[362,5],[397,4],[1830,4]]},"2298":{"position":[[368,4],[539,4],[582,4],[864,4],[1146,4],[1428,4],[1710,4],[1992,4],[2274,4]]}}}],["root.key",{"_index":724,"t":{"1742":{"position":[[1693,8]]}}}],["root.pem",{"_index":723,"t":{"1742":{"position":[[1684,8],[1798,8]]}}}],["root:root",{"_index":2333,"t":{"2182":{"position":[[148,9]]},"2186":{"position":[[148,9]]},"2190":{"position":[[148,9]]},"2194":{"position":[[148,9]]},"2198":{"position":[[148,9]]},"2206":{"position":[[138,9],[347,11],[371,11],[399,9]]},"2210":{"position":[[138,9],[338,11],[377,9]]},"2214":{"position":[[138,9],[236,11],[260,11],[288,9]]},"2216":{"position":[[141,9],[255,11],[294,9],[304,9],[314,9],[324,9],[334,9],[344,9],[354,9],[364,9],[374,9],[384,9],[394,9],[404,9],[414,9],[424,9],[434,9],[444,9],[454,9],[464,9],[474,9],[484,9],[494,9],[504,9],[514,9],[524,9],[534,9],[544,9],[554,9],[564,9],[574,9],[584,9],[594,9],[604,9],[614,9],[624,9],[634,9],[644,9],[654,9],[664,9],[674,9],[684,9],[694,9],[704,9],[714,9],[724,9],[734,9],[744,9],[754,9],[764,9],[774,9],[784,9],[794,9],[804,9],[814,9]]},"2331":{"position":[[146,9]]},"2335":{"position":[[136,9],[362,11],[469,9],[479,9]]},"2339":{"position":[[136,9],[280,11],[304,11],[332,9],[342,9]]},"2343":{"position":[[107,9],[213,11],[237,11],[265,9],[275,9]]},"2347":{"position":[[130,9]]}}}],["root=partuuid=58b06195",{"_index":513,"t":{"1706":{"position":[[297,22]]}}}],["rootfstype=ext4",{"_index":515,"t":{"1706":{"position":[[323,15]]}}}],["rootless",{"_index":160,"t":{"1656":{"position":[[19,8],[32,8]]},"1662":{"position":[[3286,8],[3314,8]]},"1689":{"position":[[632,9],[776,9]]},"1691":{"position":[[148,8]]},"1693":{"position":[[28,9],[85,9]]},"1790":{"position":[[19,8],[32,8]]},"1794":{"position":[[8605,8],[8633,8]]}}}],["rootless.servic",{"_index":430,"t":{"1689":{"position":[[261,19],[285,17],[315,17],[362,17],[407,17]]}}}],["rootless.service](https://github.com/k3",{"_index":428,"t":{"1689":{"position":[[197,40]]}}}],["rootlesskit",{"_index":444,"t":{"1691":{"position":[[40,11]]}}}],["rootwait",{"_index":518,"t":{"1706":{"position":[[373,8]]}}}],["rotat",{"_index":224,"t":{"1667":{"position":[[148,6]]},"1738":{"position":[[3,6],[75,6],[126,6],[162,6],[244,7],[304,6],[375,8]]},"1740":{"position":[[841,6],[898,6],[1381,6]]},"1742":{"position":[[2840,6]]},"1744":{"position":[[3,6],[58,6],[464,6],[589,8],[638,6],[1395,8],[2071,6],[2111,6]]},"1746":{"position":[[3,6],[81,6],[488,8],[919,8],[1873,6],[1935,6]]},"1748":{"position":[[95,8],[259,7],[327,6],[575,6],[1135,6],[1242,6]]},"1754":{"position":[[200,8],[301,8]]},"1756":{"position":[[35,6],[445,6],[472,6],[761,6],[1387,6],[1420,6]]},"1760":{"position":[[252,8],[416,8],[534,8],[550,6],[869,8],[907,8],[963,7]]},"2081":{"position":[[162,8]]},"2113":{"position":[[114,7]]},"2115":{"position":[[113,7]]},"2370":{"position":[[325,6]]}}}],["rotatecertif",{"_index":2563,"t":{"2370":{"position":[[98,18]]}}}],["rotatekubeletservercertificate=tru",{"_index":2490,"t":{"2296":{"position":[[217,36]]}}}],["round",{"_index":1198,"t":{"1840":{"position":[[606,5]]}}}],["rout",{"_index":1008,"t":{"1782":{"position":[[1513,7],[1766,7]]},"1893":{"position":[[502,5],[584,7],[635,5],[687,5],[704,5]]},"1945":{"position":[[1433,6]]},"1951":{"position":[[1342,7],[1679,7]]},"1955":{"position":[[75,5],[225,5]]},"2288":{"position":[[1617,6]]},"2290":{"position":[[1685,6]]},"2292":{"position":[[1770,6]]},"2294":{"position":[[1667,6]]}}}],["router",{"_index":609,"t":{"1723":{"position":[[280,6]]},"1955":{"position":[[93,6]]},"2029":{"position":[[48,7],[84,6]]}}}],["router.io/netpol",{"_index":592,"t":{"1721":{"position":[[221,16],[269,16]]}}}],["routes=fals",{"_index":2487,"t":{"2288":{"position":[[1578,12]]},"2290":{"position":[[1646,12]]},"2292":{"position":[[1731,12]]},"2294":{"position":[[1628,12]]}}}],["routing=tru",{"_index":2443,"t":{"2231":{"position":[[1288,12]]},"2233":{"position":[[1236,12]]},"2235":{"position":[[1105,12]]},"2237":{"position":[[1054,12]]},"2239":{"position":[[1067,12]]},"2241":{"position":[[1180,12]]},"2243":{"position":[[1141,12]]},"2247":{"position":[[1214,12]]},"2249":{"position":[[1195,12]]},"2251":{"position":[[1091,12]]},"2253":{"position":[[1207,12]]},"2255":{"position":[[1072,12]]},"2257":{"position":[[987,12]]},"2267":{"position":[[1162,12]]},"2273":{"position":[[1204,12]]},"2275":{"position":[[1120,12]]},"2277":{"position":[[1126,12]]},"2350":{"position":[[1471,12]]},"2352":{"position":[[1485,12]]},"2354":{"position":[[1600,12]]}}}],["rpm",{"_index":538,"t":{"1710":{"position":[[178,3],[196,4]]},"2053":{"position":[[2085,4]]}}}],["rsa",{"_index":788,"t":{"1748":{"position":[[37,3]]}}}],["rtbnb",{"_index":277,"t":{"1675":{"position":[[800,5]]}}}],["rtbnb_kube",{"_index":343,"t":{"1675":{"position":[[2352,10],[2512,10]]}}}],["rule",{"_index":1524,"t":{"1945":{"position":[[965,5]]},"2093":{"position":[[1804,5],[1852,5],[1889,5],[1944,5],[2903,5],[2937,5],[2974,5],[3029,5],[3348,5],[3468,5],[3492,5],[3527,5],[3868,5],[3925,5],[3949,5],[3984,5],[4097,6],[4311,6],[4520,6]]},"2097":{"position":[[771,6]]},"2129":{"position":[[553,5]]},"2156":{"position":[[365,6]]}}}],["run",{"_index":44,"t":{"1640":{"position":[[85,3]]},"1656":{"position":[[28,3]]},"1660":{"position":[[256,7]]},"1662":{"position":[[165,3],[3310,3]]},"1675":{"position":[[635,7],[697,7],[810,7],[860,7],[915,7]]},"1689":{"position":[[824,3]]},"1708":{"position":[[287,3],[315,3]]},"1742":{"position":[[342,3],[1485,7],[1922,3]]},"1744":{"position":[[1173,3],[1553,4]]},"1746":{"position":[[1449,3]]},"1748":{"position":[[619,3]]},"1750":{"position":[[904,3],[1181,3],[3654,8],[3668,3],[4520,3]]},"1756":{"position":[[337,7],[986,3],[1233,7]]},"1758":{"position":[[273,7],[840,3],[1092,7]]},"1762":{"position":[[86,3]]},"1782":{"position":[[986,3],[1319,3]]},"1786":{"position":[[222,7]]},"1790":{"position":[[28,3],[238,8]]},"1794":{"position":[[168,3],[6166,7],[8629,3]]},"1832":{"position":[[348,3],[479,3],[560,3],[1157,7]]},"1838":{"position":[[131,7],[1322,4]]},"1840":{"position":[[173,7]]},"1844":{"position":[[179,3]]},"1846":{"position":[[453,7]]},"1848":{"position":[[3,3]]},"1888":{"position":[[197,7]]},"1890":{"position":[[107,8]]},"1893":{"position":[[732,7]]},"1895":{"position":[[681,3]]},"1898":{"position":[[476,3]]},"1904":{"position":[[586,7]]},"1906":{"position":[[82,3],[145,3]]},"1912":{"position":[[187,3]]},"1939":{"position":[[830,7],[892,7],[946,7]]},"1949":{"position":[[601,7],[985,7]]},"1951":{"position":[[849,3],[1151,3]]},"1957":{"position":[[1329,7],[1408,4]]},"1959":{"position":[[504,7]]},"1973":{"position":[[112,3],[171,7]]},"1983":{"position":[[404,4],[919,3]]},"1993":{"position":[[86,3]]},"1995":{"position":[[152,3]]},"1997":{"position":[[49,3],[407,3]]},"2009":{"position":[[37,4]]},"2011":{"position":[[37,4]]},"2021":{"position":[[1911,3]]},"2053":{"position":[[1678,7],[1721,7],[2712,7]]},"2057":{"position":[[197,3]]},"2059":{"position":[[282,7]]},"2061":{"position":[[687,7]]},"2077":{"position":[[5,7]]},"2089":{"position":[[348,3]]},"2091":{"position":[[482,4]]},"2093":{"position":[[6469,3],[6610,3]]},"2107":{"position":[[290,3]]},"2156":{"position":[[72,7],[413,3],[456,4]]},"2159":{"position":[[558,3],[594,3]]},"2161":{"position":[[191,3]]},"2169":{"position":[[48,3],[444,3]]},"2176":{"position":[[1788,7]]},"2180":{"position":[[36,3]]},"2182":{"position":[[36,3]]},"2184":{"position":[[36,3]]},"2186":{"position":[[36,3]]},"2188":{"position":[[36,3]]},"2190":{"position":[[36,3]]},"2192":{"position":[[36,3]]},"2194":{"position":[[36,3]]},"2196":{"position":[[36,3]]},"2198":{"position":[[36,3]]},"2200":{"position":[[153,3],[361,7],[782,8],[1613,8]]},"2202":{"position":[[163,3]]},"2204":{"position":[[36,3]]},"2206":{"position":[[26,3]]},"2208":{"position":[[26,3]]},"2210":{"position":[[26,3]]},"2212":{"position":[[26,3]]},"2214":{"position":[[26,3]]},"2216":{"position":[[26,3]]},"2218":{"position":[[26,3]]},"2220":{"position":[[26,3]]},"2223":{"position":[[245,8]]},"2231":{"position":[[475,8]]},"2233":{"position":[[458,8]]},"2235":{"position":[[332,8]]},"2237":{"position":[[298,8]]},"2239":{"position":[[311,8]]},"2241":{"position":[[402,8]]},"2243":{"position":[[309,8]]},"2247":{"position":[[375,8]]},"2249":{"position":[[397,8]]},"2251":{"position":[[293,8]]},"2253":{"position":[[428,8]]},"2255":{"position":[[289,8]]},"2257":{"position":[[240,8]]},"2267":{"position":[[370,8]]},"2271":{"position":[[491,7],[912,8],[1743,8]]},"2273":{"position":[[441,8]]},"2275":{"position":[[372,8]]},"2277":{"position":[[384,8]]},"2279":{"position":[[426,8]]},"2283":{"position":[[978,8]]},"2286":{"position":[[327,8]]},"2288":{"position":[[257,8]]},"2290":{"position":[[277,8]]},"2292":{"position":[[373,8]]},"2294":{"position":[[310,8]]},"2301":{"position":[[244,8]]},"2303":{"position":[[254,8]]},"2306":{"position":[[385,7],[806,8],[1637,8]]},"2308":{"position":[[274,7],[695,8],[1526,8]]},"2310":{"position":[[299,7],[720,8],[1551,8]]},"2312":{"position":[[451,7],[872,8],[1703,8]]},"2314":{"position":[[277,7],[698,8],[1529,8]]},"2316":{"position":[[309,7],[730,8],[1561,8]]},"2318":{"position":[[408,7],[829,8],[1660,8]]},"2324":{"position":[[124,8]]},"2329":{"position":[[36,3]]},"2331":{"position":[[36,3]]},"2333":{"position":[[26,3]]},"2335":{"position":[[26,3]]},"2337":{"position":[[26,3]]},"2339":{"position":[[26,3]]},"2341":{"position":[[26,3]]},"2343":{"position":[[26,3]]},"2345":{"position":[[36,3]]},"2347":{"position":[[36,3]]},"2350":{"position":[[544,8],[635,8]]},"2352":{"position":[[530,8],[621,8]]},"2354":{"position":[[586,8],[677,8]]},"2356":{"position":[[494,8]]},"2358":{"position":[[551,8]]},"2368":{"position":[[712,8]]},"2412":{"position":[[73,7]]}}}],["run/k3s/containerd",{"_index":2399,"t":{"2225":{"position":[[551,19]]},"2227":{"position":[[532,19]]},"2245":{"position":[[545,19]]},"2298":{"position":[[517,19]]}}}],["run/k3s/containerd/containerd.sock",{"_index":2398,"t":{"2225":{"position":[[507,35],[862,35],[1144,35],[1426,35],[1708,35],[1990,35],[2272,35],[2554,35]]},"2227":{"position":[[488,35],[843,35],[1125,35],[1407,35],[1689,35],[1971,35],[2253,35],[2535,35]]},"2245":{"position":[[501,35],[856,35],[1138,35],[1420,35],[1702,35],[1984,35],[2266,35],[2548,35]]},"2298":{"position":[[473,35],[828,35],[1110,35],[1392,35],[1674,35],[1956,35],[2238,35],[2520,35]]}}}],["runasani",{"_index":2011,"t":{"2093":{"position":[[1858,10],[2943,10],[3354,8],[3474,8],[3498,8],[3533,8],[3874,8],[3931,8],[3955,8],[3990,8]]}}}],["runasus",{"_index":2008,"t":{"2093":{"position":[[1793,10],[2892,10],[3457,10],[3914,10]]}}}],["runc",{"_index":2406,"t":{"2225":{"position":[[758,4],[1040,4],[1322,4],[1604,4],[1886,4],[2168,4],[2450,4]]},"2227":{"position":[[739,4],[1021,4],[1303,4],[1585,4],[1867,4],[2149,4],[2431,4]]},"2245":{"position":[[752,4],[1034,4],[1316,4],[1598,4],[1880,4],[2162,4],[2444,4]]},"2298":{"position":[[724,4],[1006,4],[1288,4],[1570,4],[1852,4],[2134,4],[2416,4]]}}}],["runtim",{"_index":127,"t":{"1650":{"position":[[37,7]]},"1662":{"position":[[2112,7]]},"1681":{"position":[[203,7]]},"1723":{"position":[[632,7]]},"1740":{"position":[[829,8]]},"1794":{"position":[[7044,7]]},"1951":{"position":[[279,7]]},"2091":{"position":[[4,7]]},"2101":{"position":[[3517,7],[4148,7]]},"2356":{"position":[[1054,7],[2277,7]]},"2368":{"position":[[1245,7],[2468,7]]}}}],["runtime=remot",{"_index":2143,"t":{"2101":{"position":[[3582,14]]}}}],["runtimeclass",{"_index":396,"t":{"1681":{"position":[[646,12]]},"2021":{"position":[[1588,15]]},"2093":{"position":[[782,15]]}}}],["runtimeclassnam",{"_index":392,"t":{"1681":{"position":[[548,17],[813,17],[1159,17]]}}}],["runtimedefault",{"_index":2590,"t":{"2436":{"position":[[179,14]]}}}],["s",{"_index":87,"t":{"1644":{"position":[[192,1]]},"1662":{"position":[[862,1]]},"1675":{"position":[[458,1]]},"1794":{"position":[[3101,1]]},"1838":{"position":[[623,1]]},"1842":{"position":[[435,1]]},"1848":{"position":[[345,1],[531,1]]},"1895":{"position":[[944,1]]},"1904":{"position":[[820,1],[961,1],[1016,1],[1195,1],[1234,1],[1470,1],[1557,1],[1661,1],[1778,1]]},"1912":{"position":[[333,1]]},"1916":{"position":[[119,1],[122,1],[167,10]]},"1924":{"position":[[167,1],[170,1],[215,10]]},"1999":{"position":[[136,1]]},"2001":{"position":[[290,1]]},"2079":{"position":[[423,1]]}}}],["s1",{"_index":823,"t":{"1750":{"position":[[1280,3],[1323,3],[1330,3],[1736,3]]},"1756":{"position":[[1135,3],[1158,2],[1206,2],[1346,2],[1397,2],[1444,2],[1472,2],[1526,2],[1693,2],[1721,2]]},"1758":{"position":[[947,3],[1017,2],[1065,2],[1205,2],[1270,2],[1377,2],[1424,2],[1452,2],[1517,2]]}}}],["s2",{"_index":824,"t":{"1750":{"position":[[1284,3],[1589,2],[1780,2]]},"1756":{"position":[[1139,3],[1377,2],[1503,2],[1752,2]]},"1758":{"position":[[951,3],[1236,2],[1483,2]]}}}],["s3",{"_index":614,"t":{"1723":{"position":[[872,3]]},"1750":{"position":[[1292,3],[1596,3],[1787,3],[2579,2],[2692,2],[2712,2],[2920,2],[2990,2],[3010,2],[3020,2],[3032,2],[3055,2],[3070,2],[3102,2],[3121,2],[3149,2],[3186,2],[3200,2],[3221,2],[3235,2],[3256,2],[3266,2],[3288,2],[3298,2],[3367,2],[3377,2],[3440,3],[3466,2],[3473,2],[3504,2],[3538,2],[3619,3],[3751,2],[3810,2],[3846,2],[3885,2],[4431,2],[4566,3],[4599,2],[4606,2],[4637,2],[4671,2]]},"1756":{"position":[[1143,3],[1384,2],[1510,2],[1759,2]]},"1758":{"position":[[955,3],[1243,2],[1490,2]]},"1767":{"position":[[1100,2],[1124,2],[1134,2],[1156,2],[1209,2],[1234,2],[1266,2],[1285,2],[1317,2],[1354,2],[1392,2],[1413,2],[1455,2],[1476,2],[1496,2],[1518,2],[1538,2],[1607,2],[1627,2],[1644,2],[1665,2],[1686,2],[1703,2]]},"1794":{"position":[[5026,2],[5051,2],[5061,2],[5084,2],[5137,2],[5163,2],[5195,2],[5214,2],[5247,2],[5284,2],[5309,2],[5351,2],[5376,2],[5422,2],[5443,2],[5465,2],[5486,2],[5555,2],[5576,2],[5593,2],[5619,2],[5640,2],[5662,2]]}}}],["s3.amazonaws.com",{"_index":955,"t":{"1767":{"position":[[1182,19]]},"1794":{"position":[[5110,19]]}}}],["s390x",{"_index":1672,"t":{"1977":{"position":[[77,5]]}}}],["same",{"_index":752,"t":{"1744":{"position":[[533,4],[1417,4]]},"1750":{"position":[[4244,4]]},"1756":{"position":[[318,4],[516,4],[706,4],[1214,4],[1452,4],[1701,4]]},"1758":{"position":[[254,4],[576,4],[1073,4],[1432,4]]},"1760":{"position":[[1123,4],[1378,4]]},"1764":{"position":[[41,4]]},"1808":{"position":[[35,4]]},"1811":{"position":[[29,4]]},"1817":{"position":[[336,4]]},"1838":{"position":[[976,4]]},"1842":{"position":[[4,4],[593,4]]},"1844":{"position":[[285,4]]},"1848":{"position":[[1042,4],[1131,4]]},"1893":{"position":[[217,4]]},"1898":{"position":[[539,4]]},"1904":{"position":[[687,4],[1343,4]]},"1975":{"position":[[26,4],[73,4]]},"2133":{"position":[[257,4]]},"2163":{"position":[[1263,4],[1386,4]]},"2169":{"position":[[86,4]]}}}],["sampl",{"_index":2043,"t":{"2095":{"position":[[1170,6]]}}}],["sample:nbodi",{"_index":407,"t":{"1681":{"position":[[904,12]]}}}],["san",{"_index":981,"t":{"1776":{"position":[[350,3]]},"1794":{"position":[[1117,3]]},"1840":{"position":[[913,3]]},"1908":{"position":[[343,4],[530,3]]}}}],["sandbox",{"_index":140,"t":{"1650":{"position":[[293,7]]},"1662":{"position":[[2362,7]]},"1794":{"position":[[7294,7]]}}}],["satisfi",{"_index":1989,"t":{"2093":{"position":[[1244,7]]},"2101":{"position":[[163,8]]}}}],["save",{"_index":835,"t":{"1750":{"position":[[2296,4],[3429,4],[4174,4],[4221,4]]},"1767":{"position":[[1039,4]]},"1794":{"position":[[4911,4]]},"1811":{"position":[[786,6]]}}}],["scale",{"_index":1189,"t":{"1840":{"position":[[219,7],[243,5]]},"1981":{"position":[[22,5]]},"2075":{"position":[[598,7]]}}}],["scan",{"_index":2367,"t":{"2200":{"position":[[1662,4]]},"2271":{"position":[[1792,4]]},"2306":{"position":[[1686,4]]},"2308":{"position":[[1575,4]]},"2310":{"position":[[1600,4]]},"2312":{"position":[[1752,4]]},"2314":{"position":[[1578,4]]},"2316":{"position":[[1610,4]]},"2318":{"position":[[1709,4]]}}}],["scenario",{"_index":2326,"t":{"2176":{"position":[[1906,9]]}}}],["schedul",{"_index":607,"t":{"1723":{"position":[[120,10]]},"1738":{"position":[[423,10]]},"1750":{"position":[[2072,8],[2759,9]]},"1767":{"position":[[803,8]]},"1786":{"position":[[74,9],[111,9]]},"1788":{"position":[[144,9],[189,9]]},"1794":{"position":[[3685,9],[3738,9],[4667,8],[5979,9],[6029,9]]},"1838":{"position":[[1185,11]]},"1844":{"position":[[29,11]]},"1959":{"position":[[427,11]]},"1997":{"position":[[128,10]]},"1999":{"position":[[221,9]]},"2003":{"position":[[256,9]]},"2005":{"position":[[330,10]]},"2075":{"position":[[143,9]]},"2101":{"position":[[2852,9]]},"2159":{"position":[[496,9]]},"2208":{"position":[[142,9]]},"2210":{"position":[[148,9]]},"2273":{"position":[[2872,9],[3118,9]]},"2301":{"position":[[35,9],[258,10],[464,9],[710,9]]},"2303":{"position":[[35,9],[268,10],[538,9],[784,9]]}}}],["scheduler.yaml",{"_index":2335,"t":{"2188":{"position":[[183,14]]},"2190":{"position":[[189,14]]},"2301":{"position":[[99,14]]},"2303":{"position":[[99,14]]}}}],["scope",{"_index":1878,"t":{"2055":{"position":[[715,5]]}}}],["score",{"_index":2327,"t":{"2176":{"position":[[1962,7]]}}}],["script",{"_index":695,"t":{"1742":{"position":[[187,6],[325,6],[549,6],[1295,7],[1397,7],[1497,7],[1536,6],[1860,6],[2130,7],[2312,6],[2708,6]]},"1744":{"position":[[880,7],[928,6],[1130,6],[1370,7]]},"1746":{"position":[[1160,7],[1179,6],[1354,6],[1553,6],[1813,6]]},"1893":{"position":[[374,6],[414,6],[748,6],[850,6]]},"1895":{"position":[[698,6]]},"1898":{"position":[[388,6],[484,6]]},"1904":{"position":[[68,6]]},"1906":{"position":[[28,6],[129,7]]},"1912":{"position":[[177,6]]},"2007":{"position":[[82,7],[265,7],[275,6]]},"2053":{"position":[[68,6],[1041,6]]},"2079":{"position":[[474,7]]},"2156":{"position":[[198,6],[230,6],[429,6]]},"2165":{"position":[[46,7]]},"2167":{"position":[[40,6]]},"2169":{"position":[[69,6]]},"2173":{"position":[[48,6]]},"2200":{"position":[[266,7],[315,6]]},"2271":{"position":[[396,7],[445,6]]},"2306":{"position":[[290,7],[339,6]]},"2308":{"position":[[179,7],[228,6]]},"2310":{"position":[[204,7],[253,6]]},"2312":{"position":[[356,7],[405,6]]},"2314":{"position":[[182,7],[231,6]]},"2316":{"position":[[214,7],[263,6]]},"2318":{"position":[[313,7],[362,6]]}}}],["sd",{"_index":1230,"t":{"1846":{"position":[[466,2]]},"1981":{"position":[[725,2]]}}}],["sdhc",{"_index":1916,"t":{"2063":{"position":[[139,4]]}}}],["seccomp",{"_index":2588,"t":{"2436":{"position":[[75,7]]}}}],["seccomp.security.alpha.kubernetes.io/allowedprofilenam",{"_index":2020,"t":{"2093":{"position":[[3213,57],[3651,57]]}}}],["seccompprofil",{"_index":2589,"t":{"2436":{"position":[[157,15]]}}}],["second",{"_index":897,"t":{"1756":{"position":[[578,7],[1566,7]]},"1811":{"position":[[2082,6]]},"1848":{"position":[[414,6],[614,6]]},"2117":{"position":[[247,7],[414,8],[646,7]]}}}],["secret",{"_index":172,"t":{"1658":{"position":[[92,6]]},"1723":{"position":[[930,7],[994,7]]},"1750":{"position":[[3224,6],[3238,6],[3541,6],[3556,6],[3888,6],[3903,6],[4674,6],[4689,6]]},"1752":{"position":[[22,7],[76,7]]},"1754":{"position":[[66,7],[154,7],[251,7]]},"1756":{"position":[[42,7],[131,7],[257,7],[456,7],[566,7],[611,7],[662,7],[768,7],[994,7],[1062,7],[1165,7],[1404,7],[1554,7],[1599,7],[1650,7]]},"1758":{"position":[[64,7],[89,7],[136,7],[193,7],[406,7],[460,7],[516,7],[616,7],[693,7],[719,7],[848,7],[970,7],[1024,7],[1277,7],[1331,7],[1384,7],[1524,7]]},"1760":{"position":[[4,7],[105,7],[194,7],[476,7],[807,7],[1510,7],[1629,7],[1704,8]]},"1764":{"position":[[492,7]]},"1767":{"position":[[1416,6],[1458,6]]},"1769":{"position":[[79,6],[248,6],[379,6]]},"1780":{"position":[[27,7],[59,6]]},"1792":{"position":[[128,6]]},"1794":{"position":[[2740,6],[2914,6],[3053,6],[5354,6],[5379,6],[8480,7],[8506,6]]},"1806":{"position":[[635,7]]},"1811":{"position":[[800,6],[2104,7]]},"1842":{"position":[[899,7]]},"1848":{"position":[[243,6],[471,7],[1437,7]]},"1912":{"position":[[134,8],[584,6]]},"1920":{"position":[[147,6]]},"2007":{"position":[[511,6]]},"2021":{"position":[[443,7]]},"2079":{"position":[[22,7],[101,7],[302,7],[436,7],[687,9],[762,9]]},"2081":{"position":[[28,7],[116,7],[213,7],[255,7]]},"2093":{"position":[[1629,8],[2770,8]]},"2099":{"position":[[211,7],[808,7]]},"2121":{"position":[[349,7],[392,7]]},"2123":{"position":[[392,7],[435,7]]},"2326":{"position":[[141,7],[231,8]]},"2379":{"position":[[79,6]]},"2426":{"position":[[72,7],[93,6]]},"2428":{"position":[[39,7],[114,7]]}}}],["secret/token",{"_index":962,"t":{"1769":{"position":[[192,12]]}}}],["secretbox",{"_index":2200,"t":{"2123":{"position":[[225,11]]},"2281":{"position":[[137,9]]}}}],["section",{"_index":37,"t":{"1640":{"position":[[8,8]]},"1750":{"position":[[50,8]]},"1760":{"position":[[746,7]]},"1762":{"position":[[8,8]]},"1832":{"position":[[113,7],[889,8]]},"1838":{"position":[[827,7]]},"1886":{"position":[[160,7]]},"1890":{"position":[[359,7]]},"1933":{"position":[[270,7]]},"1941":{"position":[[86,7]]},"1949":{"position":[[467,8],[850,8]]},"1959":{"position":[[775,7]]},"1961":{"position":[[30,9]]},"1965":{"position":[[12,7]]},"2055":{"position":[[5,7]]},"2065":{"position":[[5,7]]},"2073":{"position":[[5,7]]},"2085":{"position":[[1014,8],[1040,7]]},"2087":{"position":[[135,8]]},"2091":{"position":[[183,8]]},"2093":{"position":[[1288,7],[2413,8]]},"2176":{"position":[[684,7],[1371,7]]},"2418":{"position":[[156,9]]}}}],["secur",{"_index":754,"t":{"1744":{"position":[[711,6],[2391,6]]},"1746":{"position":[[551,6],[2160,6]]},"1767":{"position":[[241,6],[361,6],[469,6]]},"1794":{"position":[[4059,6],[4185,6],[4302,6]]},"1796":{"position":[[19,6]]},"1798":{"position":[[38,6],[66,6]]},"1800":{"position":[[4,6],[708,6]]},"1806":{"position":[[186,6]]},"1808":{"position":[[395,6]]},"1811":{"position":[[676,6]]},"1922":{"position":[[42,6]]},"2021":{"position":[[25,8]]},"2085":{"position":[[216,8],[252,8]]},"2091":{"position":[[82,8],[233,8]]},"2093":{"position":[[64,8],[111,9],[880,8],[925,9]]},"2101":{"position":[[1537,6],[2699,6],[3023,6]]},"2107":{"position":[[83,8],[344,8],[420,8]]},"2109":{"position":[[106,8]]},"2119":{"position":[[447,8]]},"2176":{"position":[[50,8],[243,8],[365,8],[816,8]]},"2200":{"position":[[878,9],[1007,9],[1205,9],[1332,9]]},"2231":{"position":[[2342,6]]},"2233":{"position":[[2290,6]]},"2235":{"position":[[2159,6]]},"2237":{"position":[[2108,6]]},"2239":{"position":[[2121,6]]},"2241":{"position":[[2234,6]]},"2243":{"position":[[2195,6]]},"2247":{"position":[[2268,6]]},"2249":{"position":[[2249,6]]},"2251":{"position":[[2145,6]]},"2253":{"position":[[2261,6]]},"2255":{"position":[[165,6],[332,7],[366,6],[403,6],[2126,6]]},"2257":{"position":[[2041,6]]},"2267":{"position":[[2216,6]]},"2271":{"position":[[1008,9],[1137,9],[1335,9],[1462,9]]},"2273":{"position":[[2258,6],[3215,6]]},"2275":{"position":[[2174,6]]},"2277":{"position":[[2180,6]]},"2288":{"position":[[1841,6]]},"2290":{"position":[[1909,6]]},"2292":{"position":[[1994,6]]},"2294":{"position":[[1891,6]]},"2301":{"position":[[807,6]]},"2303":{"position":[[881,6]]},"2306":{"position":[[902,9],[1031,9],[1229,9],[1356,9]]},"2308":{"position":[[791,9],[920,9],[1118,9],[1245,9]]},"2310":{"position":[[816,9],[945,9],[1143,9],[1270,9]]},"2312":{"position":[[968,9],[1097,9],[1295,9],[1422,9]]},"2314":{"position":[[794,9],[923,9],[1121,9],[1248,9]]},"2316":{"position":[[826,9],[955,9],[1153,9],[1280,9]]},"2318":{"position":[[925,9],[1054,9],[1252,9],[1379,9]]},"2350":{"position":[[2525,6]]},"2352":{"position":[[2539,6]]},"2354":{"position":[[2654,6]]},"2394":{"position":[[49,8]]},"2438":{"position":[[170,8]]}}}],["security.admission.config.k8s.io/v1beta1",{"_index":1784,"t":{"2021":{"position":[[1346,40]]},"2093":{"position":[[540,40]]}}}],["security.kubernetes.io/audit",{"_index":1789,"t":{"2021":{"position":[[2157,29],[2202,28]]}}}],["security.kubernetes.io/enforc",{"_index":1787,"t":{"2021":{"position":[[1933,31],[1980,30]]}}}],["security.kubernetes.io/warn",{"_index":1790,"t":{"2021":{"position":[[2250,28],[2294,27]]}}}],["securitycontext",{"_index":2586,"t":{"2436":{"position":[[30,15],[140,16]]},"2438":{"position":[[72,16],[127,17]]}}}],["securitycontext.windowsoptions.hostprocess",{"_index":2580,"t":{"2414":{"position":[[147,43]]}}}],["securitycontextdeni",{"_index":2457,"t":{"2247":{"position":[[201,20],[495,21]]}}}],["sed",{"_index":1431,"t":{"1916":{"position":[[160,3]]},"1924":{"position":[[208,3]]}}}],["see",{"_index":55,"t":{"1640":{"position":[[271,3]]},"1740":{"position":[[131,3]]},"1746":{"position":[[1805,3]]},"1748":{"position":[[1184,3]]},"1752":{"position":[[72,3]]},"1760":{"position":[[1766,3]]},"1762":{"position":[[309,3]]},"1786":{"position":[[33,3]]},"1790":{"position":[[234,3]]},"1806":{"position":[[1175,3],[1263,3]]},"1823":{"position":[[0,3]]},"1836":{"position":[[69,3]]},"1838":{"position":[[65,3],[1107,3],[1628,3]]},"1848":{"position":[[601,3]]},"1904":{"position":[[1862,3]]},"1906":{"position":[[795,3],[871,3],[940,3],[1341,3]]},"1922":{"position":[[332,3]]},"1933":{"position":[[243,3]]},"1945":{"position":[[582,3]]},"1949":{"position":[[692,3],[1077,3]]},"1959":{"position":[[143,3]]},"1985":{"position":[[560,3]]},"2007":{"position":[[530,3]]},"2081":{"position":[[243,3]]},"2159":{"position":[[337,3],[1626,3]]},"2167":{"position":[[820,3]]},"2310":{"position":[[2284,3],[2524,3],[2764,3]]},"2316":{"position":[[2329,3]]}}}],["seen",{"_index":1457,"t":{"1929":{"position":[[458,4]]}}}],["segreg",{"_index":2592,"t":{"2440":{"position":[[86,11]]}}}],["select",{"_index":1748,"t":{"2001":{"position":[[414,8]]},"2159":{"position":[[539,9]]},"2163":{"position":[[1473,7],[1612,6]]},"2167":{"position":[[604,6]]}}}],["selector",{"_index":937,"t":{"1764":{"position":[[416,8]]},"1782":{"position":[[828,8]]},"1794":{"position":[[2276,8]]},"1951":{"position":[[577,8],[612,8],[672,8]]},"2159":{"position":[[327,9]]},"2163":{"position":[[1459,8],[1598,8]]},"2231":{"position":[[1144,8],[1204,8]]},"2233":{"position":[[1092,8],[1152,8]]},"2235":{"position":[[961,8],[1021,8]]},"2237":{"position":[[910,8],[970,8]]},"2239":{"position":[[923,8],[983,8]]},"2241":{"position":[[1036,8],[1096,8]]},"2243":{"position":[[997,8],[1057,8]]},"2247":{"position":[[1070,8],[1130,8]]},"2249":{"position":[[1051,8],[1111,8]]},"2251":{"position":[[947,8],[1007,8]]},"2253":{"position":[[1063,8],[1123,8]]},"2255":{"position":[[928,8],[988,8]]},"2257":{"position":[[843,8],[903,8]]},"2267":{"position":[[1018,8],[1078,8]]},"2273":{"position":[[1060,8],[1120,8]]},"2275":{"position":[[976,8],[1036,8]]},"2277":{"position":[[982,8],[1042,8]]},"2350":{"position":[[1327,8],[1387,8]]},"2352":{"position":[[1341,8],[1401,8]]},"2354":{"position":[[1456,8],[1516,8]]}}}],["self",{"_index":647,"t":{"1740":{"position":[[225,4]]},"1746":{"position":[[28,4],[459,4],[857,4],[940,4],[1381,4]]},"1800":{"position":[[323,4]]},"1806":{"position":[[1084,4]]},"2133":{"position":[[147,4]]}}}],["selinux",{"_index":113,"t":{"1648":{"position":[[385,7],[412,7]]},"1662":{"position":[[1631,7],[1659,7]]},"1710":{"position":[[40,8],[87,7],[188,7],[333,7],[341,7],[437,7]]},"1712":{"position":[[0,8],[38,7],[89,8],[103,9],[206,7],[246,7],[269,7],[296,7]]},"1794":{"position":[[8733,7],[8761,7]]},"2053":{"position":[[1968,7]]},"2093":{"position":[[1843,8],[2928,8],[3483,8],[3940,8]]}}}],["send",{"_index":1026,"t":{"1798":{"position":[[185,7]]}}}],["sensit",{"_index":2057,"t":{"2097":{"position":[[376,9]]},"2121":{"position":[[236,9]]},"2326":{"position":[[304,9]]}}}],["sep",{"_index":2425,"t":{"2231":{"position":[[663,3]]},"2233":{"position":[[611,3]]},"2235":{"position":[[480,3]]},"2237":{"position":[[429,3]]},"2239":{"position":[[442,3]]},"2241":{"position":[[555,3]]},"2243":{"position":[[516,3]]},"2247":{"position":[[589,3]]},"2249":{"position":[[570,3]]},"2251":{"position":[[466,3]]},"2253":{"position":[[582,3]]},"2255":{"position":[[447,3]]},"2257":{"position":[[362,3]]},"2267":{"position":[[537,3]]},"2273":{"position":[[579,3],[2755,3]]},"2275":{"position":[[495,3]]},"2277":{"position":[[501,3]]},"2288":{"position":[[388,3]]},"2290":{"position":[[456,3]]},"2292":{"position":[[541,3]]},"2294":{"position":[[438,3]]},"2301":{"position":[[347,3]]},"2303":{"position":[[421,3]]},"2350":{"position":[[846,3]]},"2352":{"position":[[860,3]]},"2354":{"position":[[975,3]]},"2356":{"position":[[652,3],[1875,3]]},"2368":{"position":[[843,3],[2066,3]]}}}],["separ",{"_index":71,"t":{"1642":{"position":[[97,9]]},"1662":{"position":[[487,9]]},"1744":{"position":[[371,8]]},"1746":{"position":[[394,8]]},"1748":{"position":[[539,8]]},"1774":{"position":[[128,9]]},"1794":{"position":[[498,9]]},"1933":{"position":[[173,10]]},"1937":{"position":[[507,10]]},"1997":{"position":[[252,8]]}}}],["sequenc",{"_index":2176,"t":{"2109":{"position":[[169,8]]}}}],["serial",{"_index":2159,"t":{"2101":{"position":[[4188,9]]},"2356":{"position":[[1713,9],[2936,9]]},"2368":{"position":[[1904,9],[3127,9]]}}}],["serv",{"_index":1155,"t":{"1832":{"position":[[450,5]]},"2288":{"position":[[1230,7],[1320,7]]},"2290":{"position":[[1298,7],[1388,7]]},"2292":{"position":[[1383,7],[1473,7]]},"2294":{"position":[[1280,7],[1370,7]]}}}],["server",{"_index":43,"t":{"1640":{"position":[[72,7],[158,8]]},"1644":{"position":[[177,6],[208,6]]},"1648":{"position":[[439,6]]},"1662":{"position":[[847,6],[880,6],[1701,6]]},"1675":{"position":[[669,6],[2089,7],[2161,6]]},"1681":{"position":[[262,6]]},"1689":{"position":[[767,6],[861,6]]},"1708":{"position":[[347,6],[373,6],[430,6],[612,6]]},"1717":{"position":[[58,6]]},"1723":{"position":[[75,6],[221,6]]},"1725":{"position":[[111,6]]},"1736":{"position":[[15,6]]},"1738":{"position":[[21,6],[395,7],[454,7]]},"1740":{"position":[[281,6],[509,6],[650,6],[670,6]]},"1742":{"position":[[95,6],[825,6],[839,6]]},"1744":{"position":[[735,8],[2262,7]]},"1746":{"position":[[2086,7],[2190,6]]},"1748":{"position":[[1370,7]]},"1750":{"position":[[879,6],[999,6],[1271,8],[1431,6],[2823,6],[3700,6]]},"1756":{"position":[[7,6],[78,6],[108,6],[306,6],[504,6],[960,6],[1043,7],[1104,7]]},"1758":{"position":[[7,6],[50,6],[242,6],[564,6],[814,6],[897,7]]},"1760":{"position":[[175,6],[274,6],[461,8],[557,6],[1027,6],[1104,7],[1208,7],[1424,7]]},"1762":{"position":[[55,7],[73,7],[196,8]]},"1764":{"position":[[59,7],[115,7]]},"1769":{"position":[[101,6],[299,7],[388,6],[409,6]]},"1782":{"position":[[978,7],[1306,7]]},"1790":{"position":[[257,7]]},"1794":{"position":[[159,6],[183,6],[201,6],[1222,6],[2762,6],[2965,7],[3086,6],[3119,6],[5961,7],[8803,6]]},"1800":{"position":[[243,6],[291,6],[813,6],[950,6],[1172,6],[1230,6]]},"1802":{"position":[[212,7]]},"1804":{"position":[[45,6],[195,6]]},"1806":{"position":[[48,6],[114,6],[205,6],[243,6],[368,6],[483,6],[968,6],[1059,6]]},"1808":{"position":[[47,6],[192,7],[250,6],[469,6]]},"1811":{"position":[[282,6],[327,6],[409,6],[450,6],[1007,6],[1784,6],[2268,6],[2557,6]]},"1815":{"position":[[75,6]]},"1817":{"position":[[159,6]]},"1832":{"position":[[212,6],[427,6],[669,6],[744,6],[1028,6]]},"1838":{"position":[[25,6],[147,6],[516,6],[627,6],[911,6],[1022,6],[1164,6],[1508,6],[1530,6],[1637,6]]},"1840":{"position":[[89,6],[253,6],[390,6],[465,6],[891,6]]},"1842":{"position":[[66,6],[147,6],[265,6],[352,6],[439,6],[605,6]]},"1844":{"position":[[12,6],[95,6],[117,6],[325,6],[461,6]]},"1848":{"position":[[56,6],[141,6],[269,7],[349,6],[397,7],[431,7],[535,6],[544,6],[631,7],[894,7],[923,6],[958,6],[1069,6],[1143,6]]},"1850":{"position":[[133,6],[414,7],[624,7]]},"1895":{"position":[[35,7],[70,6],[150,7],[189,6],[431,6],[948,6]]},"1902":{"position":[[169,6]]},"1904":{"position":[[718,6],[1020,6],[1052,6],[1415,6],[1563,6]]},"1906":{"position":[[579,6],[608,6],[702,6],[787,7],[807,6],[1040,6],[1186,6],[1280,6],[1349,6],[1462,6]]},"1908":{"position":[[280,6],[482,6]]},"1912":{"position":[[439,6],[487,6]]},"1929":{"position":[[3,6]]},"1931":{"position":[[149,7]]},"1933":{"position":[[1321,6],[1389,7],[1575,7]]},"1939":{"position":[[864,6]]},"1945":{"position":[[213,6],[256,7],[819,7]]},"1947":{"position":[[617,6],[939,8]]},"1951":{"position":[[15,7],[647,7],[841,7],[1138,7]]},"1953":{"position":[[372,7],[770,6]]},"1957":{"position":[[322,6],[497,8],[723,6],[1760,6]]},"1959":{"position":[[410,6],[479,6],[594,6]]},"1965":{"position":[[425,6]]},"1981":{"position":[[289,6],[325,6],[415,6]]},"1983":{"position":[[8,6],[373,6],[589,7],[718,6]]},"1985":{"position":[[59,7],[67,7],[131,7],[173,6]]},"1989":{"position":[[95,7]]},"1993":{"position":[[175,6]]},"1997":{"position":[[17,6],[362,7]]},"1999":{"position":[[12,6],[140,6],[389,6]]},"2001":{"position":[[54,6],[185,6],[294,6],[334,6],[396,6],[520,6],[563,6]]},"2009":{"position":[[24,6]]},"2053":{"position":[[1558,9],[1695,6]]},"2055":{"position":[[219,6],[503,6],[846,6]]},"2057":{"position":[[222,6]]},"2061":{"position":[[563,6]]},"2065":{"position":[[113,6],[149,6]]},"2067":{"position":[[70,6]]},"2069":{"position":[[65,6]]},"2073":{"position":[[57,6]]},"2075":{"position":[[4,6],[111,7]]},"2077":{"position":[[41,6],[221,6]]},"2079":{"position":[[74,7],[354,6],[427,6]]},"2091":{"position":[[134,6]]},"2093":{"position":[[179,7],[993,7]]},"2095":{"position":[[931,6],[1379,6],[1458,6],[2062,6],[2141,6]]},"2097":{"position":[[84,7],[677,6],[855,6],[1195,6]]},"2105":{"position":[[569,7]]},"2107":{"position":[[668,7]]},"2109":{"position":[[88,6],[549,7]]},"2111":{"position":[[389,7]]},"2113":{"position":[[564,7]]},"2115":{"position":[[550,7]]},"2117":{"position":[[132,6],[491,6],[774,7]]},"2119":{"position":[[567,7]]},"2125":{"position":[[641,7]]},"2129":{"position":[[692,7]]},"2156":{"position":[[443,6]]},"2163":{"position":[[70,6],[408,6],[480,6],[1027,6],[1404,6],[1424,6],[1737,6]]},"2165":{"position":[[142,6]]},"2173":{"position":[[98,7],[222,7]]},"2200":{"position":[[38,6]]},"2202":{"position":[[48,6]]},"2223":{"position":[[39,6]]},"2225":{"position":[[125,6]]},"2227":{"position":[[39,6]]},"2229":{"position":[[49,6]]},"2231":{"position":[[143,6]]},"2233":{"position":[[146,6]]},"2235":{"position":[[39,6]]},"2237":{"position":[[39,6]]},"2239":{"position":[[39,6]]},"2241":{"position":[[133,6]]},"2243":{"position":[[39,6]]},"2245":{"position":[[39,6]]},"2247":{"position":[[39,6]]},"2249":{"position":[[129,6]]},"2251":{"position":[[39,6]]},"2253":{"position":[[132,6]]},"2255":{"position":[[39,6]]},"2257":{"position":[[39,6]]},"2259":{"position":[[49,6]]},"2261":{"position":[[49,6]]},"2263":{"position":[[49,6]]},"2265":{"position":[[49,6]]},"2267":{"position":[[39,6]]},"2269":{"position":[[49,6]]},"2271":{"position":[[143,6]]},"2273":{"position":[[129,6]]},"2275":{"position":[[129,6]]},"2277":{"position":[[143,6]]},"2279":{"position":[[120,6]]},"2283":{"position":[[39,6]]},"2312":{"position":[[2328,6],[2398,6]]},"2385":{"position":[[137,7]]}}}],["server'",{"_index":1054,"t":{"1800":{"position":[[1203,8]]},"2075":{"position":[[566,8],[701,8]]}}}],["server1",{"_index":1237,"t":{"1848":{"position":[[718,7]]}}}],["server1>:6443",{"_index":1235,"t":{"1848":{"position":[[578,13]]}}}],["server2",{"_index":1241,"t":{"1848":{"position":[[769,7]]}}}],["server_external_ip",{"_index":1607,"t":{"1957":{"position":[[663,18],[891,18],[1068,18]]}}}],["server_metr",{"_index":332,"t":{"1675":{"position":[[2146,14]]}}}],["servers=https://127.0.0.1:2379",{"_index":2088,"t":{"2101":{"position":[[771,30]]},"2231":{"position":[[1500,30]]},"2233":{"position":[[1448,30]]},"2235":{"position":[[1317,30]]},"2237":{"position":[[1266,30]]},"2239":{"position":[[1279,30]]},"2241":{"position":[[1392,30]]},"2243":{"position":[[1353,30]]},"2247":{"position":[[1426,30]]},"2249":{"position":[[1407,30]]},"2251":{"position":[[1303,30]]},"2253":{"position":[[1419,30]]},"2255":{"position":[[1284,30]]},"2257":{"position":[[1199,30]]},"2267":{"position":[[1374,30]]},"2273":{"position":[[1416,30]]},"2275":{"position":[[1332,30]]},"2277":{"position":[[1338,30]]},"2350":{"position":[[1683,30]]},"2352":{"position":[[1697,30]]},"2354":{"position":[[1812,30]]}}}],["servic",{"_index":18,"t":{"1636":{"position":[[280,7]]},"1702":{"position":[[288,9]]},"1704":{"position":[[196,9]]},"1738":{"position":[[313,7]]},"1742":{"position":[[1113,7]]},"1744":{"position":[[1678,7],[1724,7],[2157,7]]},"1746":{"position":[[1981,7]]},"1748":{"position":[[4,7],[66,7],[108,7],[205,7],[591,7],[1288,7]]},"1756":{"position":[[354,8],[425,7],[1250,8],[1321,7]]},"1758":{"position":[[290,8],[361,7],[1109,8],[1180,7]]},"1764":{"position":[[513,7]]},"1782":{"position":[[106,7],[175,7],[189,7],[259,8],[354,8],[381,7],[1106,7],[1375,7],[1494,7],[1747,7]]},"1794":{"position":[[1464,7],[1531,7],[1569,7],[1638,8],[1758,8],[1785,7]]},"1806":{"position":[[734,7]]},"1832":{"position":[[503,8],[578,8]]},"1842":{"position":[[693,7]]},"1844":{"position":[[197,9]]},"1848":{"position":[[1231,7]]},"1876":{"position":[[519,8]]},"1898":{"position":[[583,7]]},"1904":{"position":[[127,7],[294,7],[433,7],[550,7]]},"1906":{"position":[[91,8],[402,8]]},"1943":{"position":[[219,7]]},"1951":{"position":[[376,8],[478,7],[971,7],[1233,7],[1323,7],[1660,7]]},"1953":{"position":[[750,7],[879,7],[981,7],[1243,7]]},"1955":{"position":[[433,7],[535,7]]},"1957":{"position":[[1346,8]]},"1973":{"position":[[152,8]]},"2003":{"position":[[326,8]]},"2021":{"position":[[786,8],[887,7]]},"2053":{"position":[[127,7],[765,8],[831,8],[1280,7],[1425,8],[1634,7],[1831,7],[2594,8]]},"2097":{"position":[[1120,7]]},"2099":{"position":[[554,8],[655,7],[1177,8],[1278,7]]},"2101":{"position":[[1565,7],[1594,7],[1674,7],[1753,7],[2715,7],[2806,7]]},"2117":{"position":[[537,7]]},"2119":{"position":[[18,7],[82,7],[221,7],[317,7],[368,7]]},"2131":{"position":[[20,7],[101,7],[170,7],[280,7],[355,7],[384,7],[453,7],[625,7],[672,7],[854,7]]},"2156":{"position":[[93,7]]},"2161":{"position":[[108,7]]},"2167":{"position":[[754,7]]},"2173":{"position":[[245,7],[298,7]]},"2231":{"position":[[2361,7],[2431,7],[2502,7],[2581,7],[2621,7]]},"2233":{"position":[[2309,7],[2379,7],[2450,7],[2529,7],[2569,7]]},"2235":{"position":[[2178,7],[2248,7],[2319,7],[2398,7],[2438,7]]},"2237":{"position":[[2127,7],[2197,7],[2268,7],[2347,7],[2387,7]]},"2239":{"position":[[2140,7],[2210,7],[2281,7],[2360,7],[2400,7]]},"2241":{"position":[[2253,7],[2323,7],[2394,7],[2473,7],[2513,7]]},"2243":{"position":[[2214,7],[2284,7],[2355,7],[2434,7],[2474,7]]},"2247":{"position":[[2287,7],[2357,7],[2428,7],[2507,7],[2547,7]]},"2249":{"position":[[2268,7],[2338,7],[2409,7],[2488,7],[2528,7]]},"2251":{"position":[[2164,7],[2234,7],[2305,7],[2384,7],[2424,7]]},"2253":{"position":[[2280,7],[2350,7],[2421,7],[2500,7],[2540,7]]},"2255":{"position":[[2145,7],[2215,7],[2286,7],[2365,7],[2405,7]]},"2257":{"position":[[2060,7],[2130,7],[2201,7],[2280,7],[2320,7]]},"2267":{"position":[[172,7],[236,7],[441,7],[486,7],[2235,7],[2305,7],[2376,7],[2455,7],[2495,7]]},"2269":{"position":[[165,7],[227,7],[260,7]]},"2273":{"position":[[2277,7],[2347,7],[2418,7],[2497,7],[2537,7]]},"2275":{"position":[[2193,7],[2263,7],[2334,7],[2413,7],[2453,7]]},"2277":{"position":[[2199,7],[2269,7],[2340,7],[2419,7],[2459,7]]},"2288":{"position":[[1608,8],[1861,7],[1940,7],[1984,7]]},"2290":{"position":[[192,7],[334,7],[387,7],[1676,8],[1929,7],[2008,7],[2052,7]]},"2292":{"position":[[172,7],[243,7],[276,7],[425,8],[480,7],[1761,8],[2014,7],[2093,7],[2137,7]]},"2294":{"position":[[1658,8],[1911,7],[1990,7],[2034,7]]},"2306":{"position":[[42,7]]},"2312":{"position":[[42,7]]},"2318":{"position":[[134,8]]},"2350":{"position":[[172,7],[390,8],[2544,7],[2614,7],[2685,7],[2764,7],[2804,7]]},"2352":{"position":[[158,7],[376,8],[2558,7],[2628,7],[2699,7],[2778,7],[2818,7]]},"2354":{"position":[[201,7],[432,8],[2673,7],[2743,7],[2814,7],[2893,7],[2933,7]]},"2356":{"position":[[148,7],[362,8]]},"2358":{"position":[[185,7],[419,8]]},"2360":{"position":[[170,7],[396,8]]},"2362":{"position":[[171,7],[396,8]]},"2364":{"position":[[53,7],[270,8]]},"2366":{"position":[[169,7],[364,8]]},"2368":{"position":[[291,7],[580,8]]},"2370":{"position":[[225,7],[446,8]]},"2372":{"position":[[53,7],[300,8]]},"2374":{"position":[[474,7],[1005,8]]},"2385":{"position":[[42,7],[186,7]]},"2387":{"position":[[60,7],[104,7]]}}}],["service.key",{"_index":719,"t":{"1742":{"position":[[1183,11]]},"1748":{"position":[[364,11]]}}}],["service>,<servic",{"_index":639,"t":{"1738":{"position":[[321,19]]}}}],["serviceaccount",{"_index":1435,"t":{"1918":{"position":[[194,14],[492,14]]},"2093":{"position":[[5767,14]]},"2249":{"position":[[62,14],[329,15]]}}}],["serviceaccountnam",{"_index":2292,"t":{"2163":{"position":[[659,19],[1066,19]]}}}],["servicelb",{"_index":935,"t":{"1764":{"position":[[397,9]]},"1782":{"position":[[729,9],[799,9]]},"1794":{"position":[[2375,9],[2444,9],[5918,10]]},"1906":{"position":[[1097,9]]},"1931":{"position":[[170,9]]},"2027":{"position":[[167,10]]},"2031":{"position":[[76,13],[329,10]]},"2033":{"position":[[0,9],[232,9],[470,10]]},"2037":{"position":[[63,9],[152,11],[259,11]]},"2041":{"position":[[0,10]]},"2043":{"position":[[202,9]]},"2093":{"position":[[2301,9]]}}}],["services/proxi",{"_index":2512,"t":{"2326":{"position":[[415,15]]}}}],["sessions/presentation/hart",{"_index":552,"t":{"1715":{"position":[[119,30]]}}}],["set",{"_index":73,"t":{"1642":{"position":[[138,8],[275,4]]},"1648":{"position":[[183,3],[245,3],[316,4]]},"1650":{"position":[[163,4]]},"1662":{"position":[[528,8],[677,4],[1186,3],[1257,3],[2033,4],[2250,4]]},"1719":{"position":[[320,3]]},"1742":{"position":[[411,3]]},"1744":{"position":[[1068,7]]},"1750":{"position":[[519,7],[2451,3],[3969,3]]},"1764":{"position":[[30,3]]},"1767":{"position":[[684,3]]},"1774":{"position":[[169,8],[306,4]]},"1794":{"position":[[539,8],[688,4],[4546,3],[6511,3],[6582,3],[7182,4],[8411,4]]},"1808":{"position":[[84,3]]},"1811":{"position":[[1367,3]]},"1834":{"position":[[0,7]]},"1838":{"position":[[187,3],[324,3],[575,3]]},"1840":{"position":[[383,3],[531,3]]},"1876":{"position":[[1114,3],[1122,3]]},"1884":{"position":[[163,3]]},"1902":{"position":[[61,7]]},"1906":{"position":[[1170,3],[1443,3]]},"1912":{"position":[[555,3],[577,3]]},"1945":{"position":[[206,3],[1268,3]]},"1949":{"position":[[154,3],[576,8],[718,3],[960,8],[1103,3]]},"1955":{"position":[[84,3],[137,3]]},"1957":{"position":[[175,4]]},"1963":{"position":[[202,3],[793,3]]},"1983":{"position":[[1250,3]]},"2021":{"position":[[2035,7]]},"2053":{"position":[[437,3],[630,3],[724,3],[800,3],[1123,3],[1187,7],[1486,4],[1534,4],[1935,3],[2029,3],[2611,7],[2646,7],[2754,4]]},"2057":{"position":[[184,3],[406,3]]},"2089":{"position":[[110,3],[242,3]]},"2105":{"position":[[63,4],[78,7]]},"2107":{"position":[[62,4],[256,3],[379,8]]},"2109":{"position":[[45,4],[138,3],[406,7]]},"2111":{"position":[[47,3],[200,3]]},"2113":{"position":[[50,3],[295,3]]},"2115":{"position":[[48,3],[281,3]]},"2117":{"position":[[46,3],[76,7],[237,3],[428,7],[581,3]]},"2119":{"position":[[53,3]]},"2121":{"position":[[57,3]]},"2123":{"position":[[153,3]]},"2125":{"position":[[58,3],[316,7]]},"2129":{"position":[[56,3]]},"2135":{"position":[[364,12]]},"2163":{"position":[[1819,3],[1890,3]]},"2200":{"position":[[448,3]]},"2223":{"position":[[145,3]]},"2231":{"position":[[66,3],[249,3]]},"2233":{"position":[[252,3]]},"2235":{"position":[[145,3]]},"2237":{"position":[[145,3]]},"2239":{"position":[[145,3]]},"2241":{"position":[[66,3],[213,3]]},"2243":{"position":[[204,3]]},"2245":{"position":[[145,3]]},"2247":{"position":[[145,3]]},"2249":{"position":[[292,3]]},"2251":{"position":[[145,3]]},"2253":{"position":[[238,3]]},"2255":{"position":[[190,3]]},"2257":{"position":[[145,3]]},"2259":{"position":[[155,3]]},"2261":{"position":[[155,3]]},"2263":{"position":[[155,3]]},"2265":{"position":[[155,3],[239,3]]},"2267":{"position":[[145,3]]},"2269":{"position":[[155,3]]},"2271":{"position":[[66,3],[249,3],[578,3]]},"2273":{"position":[[66,3],[235,3]]},"2275":{"position":[[66,3],[235,3]]},"2277":{"position":[[66,3],[249,3]]},"2279":{"position":[[226,3]]},"2283":{"position":[[145,3]]},"2286":{"position":[[162,3]]},"2288":{"position":[[162,3]]},"2290":{"position":[[161,3]]},"2292":{"position":[[162,3]]},"2294":{"position":[[162,3]]},"2296":{"position":[[172,3]]},"2301":{"position":[[149,3]]},"2306":{"position":[[196,3],[472,3]]},"2308":{"position":[[122,3],[361,3]]},"2310":{"position":[[164,3],[386,3]]},"2312":{"position":[[238,3],[538,3]]},"2314":{"position":[[122,3],[364,3]]},"2316":{"position":[[169,3],[396,3]]},"2318":{"position":[[245,3],[495,3]]},"2350":{"position":[[75,3],[263,3]]},"2352":{"position":[[75,3],[249,3]]},"2354":{"position":[[75,3],[292,3]]},"2356":{"position":[[75,3],[239,3]]},"2358":{"position":[[75,3],[276,3]]},"2360":{"position":[[85,3],[261,3]]},"2362":{"position":[[85,3]]},"2366":{"position":[[75,3],[260,3]]},"2368":{"position":[[75,3],[382,3]]},"2372":{"position":[[144,3]]},"2374":{"position":[[75,3],[565,3]]},"2404":{"position":[[173,3]]},"2406":{"position":[[171,4]]},"2410":{"position":[[114,3]]},"2414":{"position":[[191,3]]}}}],["setup",{"_index":497,"t":{"1702":{"position":[[449,6]]},"1756":{"position":[[798,7]]},"1832":{"position":[[676,7]]},"1979":{"position":[[177,6]]},"1987":{"position":[[139,5]]},"2233":{"position":[[66,5]]},"2318":{"position":[[115,5]]},"2431":{"position":[[66,5]]}}}],["setup.servic",{"_index":498,"t":{"1702":{"position":[[505,13]]}}}],["setup.tim",{"_index":499,"t":{"1702":{"position":[[528,11]]}}}],["sever",{"_index":899,"t":{"1756":{"position":[[628,7],[1616,7]]}}}],["sfl",{"_index":254,"t":{"1675":{"position":[[429,3]]},"1697":{"position":[[287,3]]},"1838":{"position":[[594,3]]},"1842":{"position":[[406,3]]},"1848":{"position":[[299,3],[485,3]]},"1895":{"position":[[915,3]]},"1904":{"position":[[765,3],[867,3],[971,3],[1110,3],[1205,3],[1364,3],[1480,3],[1600,3],[1696,3]]},"1906":{"position":[[417,3]]},"1912":{"position":[[252,3]]},"2049":{"position":[[149,3],[709,3]]},"2053":{"position":[[227,3],[2448,3]]},"2079":{"position":[[394,3]]},"2169":{"position":[[117,3],[334,3],[477,3]]}}}],["sh",{"_index":253,"t":{"1675":{"position":[[390,2],[454,2]]},"1681":{"position":[[327,2]]},"1697":{"position":[[369,2]]},"1838":{"position":[[619,2]]},"1842":{"position":[[431,2]]},"1848":{"position":[[341,2],[527,2]]},"1895":{"position":[[940,2]]},"1904":{"position":[[816,2],[957,2],[1012,2],[1191,2],[1230,2],[1466,2],[1553,2],[1657,2],[1774,2]]},"1906":{"position":[[471,2]]},"1912":{"position":[[329,2]]},"1999":{"position":[[132,2]]},"2001":{"position":[[286,2]]},"2049":{"position":[[174,2],[786,2]]},"2053":{"position":[[252,2],[2500,2]]},"2079":{"position":[[419,2]]},"2169":{"position":[[142,2],[386,2],[533,2]]}}}],["sha1",{"_index":663,"t":{"1740":{"position":[[572,5]]}}}],["sha256",{"_index":1035,"t":{"1800":{"position":[[364,6],[468,6],[986,6],[1064,6]]}}}],["share",{"_index":961,"t":{"1769":{"position":[[72,6],[241,6]]},"1794":{"position":[[2733,6],[2907,6]]},"1848":{"position":[[236,6],[464,6]]},"2067":{"position":[[77,6]]}}}],["shell",{"_index":1377,"t":{"1904":{"position":[[390,5]]}}}],["shim",{"_index":2405,"t":{"2225":{"position":[[753,4],[1035,4],[1317,4],[1599,4],[1881,4],[2163,4],[2445,4]]},"2227":{"position":[[734,4],[1016,4],[1298,4],[1580,4],[1862,4],[2144,4],[2426,4]]},"2245":{"position":[[747,4],[1029,4],[1311,4],[1593,4],[1875,4],[2157,4],[2439,4]]},"2298":{"position":[[719,4],[1001,4],[1283,4],[1565,4],[1847,4],[2129,4],[2411,4]]}}}],["ship",{"_index":1981,"t":{"2091":{"position":[[276,5]]}}}],["short",{"_index":1023,"t":{"1798":{"position":[[48,5]]},"1802":{"position":[[4,5],[125,5]]},"1806":{"position":[[897,5]]},"1947":{"position":[[480,5]]}}}],["show",{"_index":186,"t":{"1660":{"position":[[298,7]]},"1811":{"position":[[477,4],[2342,7]]},"1963":{"position":[[1404,4]]},"1967":{"position":[[19,7]]},"1969":{"position":[[19,7]]},"2053":{"position":[[2355,5]]}}}],["shown",{"_index":1087,"t":{"1811":{"position":[[838,5]]}}}],["side",{"_index":1168,"t":{"1832":{"position":[[1138,4]]}}}],["sig",{"_index":467,"t":{"1695":{"position":[[571,3]]}}}],["sign",{"_index":648,"t":{"1740":{"position":[[230,6],[1438,6]]},"1742":{"position":[[439,6],[1108,4],[1321,4]]},"1744":{"position":[[1694,7]]},"1746":{"position":[[33,6],[464,6],[660,6],[862,6],[945,6],[1035,6],[1235,6],[1386,6],[1421,6],[1519,6]]},"1748":{"position":[[61,4]]},"1800":{"position":[[328,6]]},"1806":{"position":[[1089,6]]},"1922":{"position":[[242,4]]},"2101":{"position":[[1690,7],[2384,7],[2458,7]]},"2231":{"position":[[2518,7]]},"2233":{"position":[[2466,7]]},"2235":{"position":[[2335,7]]},"2237":{"position":[[2284,7]]},"2239":{"position":[[2297,7]]},"2241":{"position":[[2410,7]]},"2243":{"position":[[2371,7]]},"2247":{"position":[[2444,7]]},"2249":{"position":[[2425,7]]},"2251":{"position":[[2321,7]]},"2253":{"position":[[2437,7]]},"2255":{"position":[[2302,7]]},"2257":{"position":[[2217,7]]},"2267":{"position":[[2392,7]]},"2273":{"position":[[2434,7]]},"2275":{"position":[[2350,7]]},"2277":{"position":[[2356,7]]},"2288":{"position":[[846,7],[942,7],[1037,7],[1126,7],[1214,7],[1304,7],[1393,7],[1482,7]]},"2290":{"position":[[914,7],[1010,7],[1105,7],[1194,7],[1282,7],[1372,7],[1461,7],[1550,7]]},"2292":{"position":[[999,7],[1095,7],[1190,7],[1279,7],[1367,7],[1457,7],[1546,7],[1635,7]]},"2294":{"position":[[896,7],[992,7],[1087,7],[1176,7],[1264,7],[1354,7],[1443,7],[1532,7]]},"2350":{"position":[[2701,7]]},"2352":{"position":[[2715,7]]},"2354":{"position":[[2830,7]]}}}],["signing,authent",{"_index":1101,"t":{"1811":{"position":[[1503,25]]}}}],["similar",{"_index":1078,"t":{"1808":{"position":[[235,7]]},"1811":{"position":[[125,8]]},"1929":{"position":[[130,7]]}}}],["simplest",{"_index":1835,"t":{"2053":{"position":[[176,8]]}}}],["simple|list|output|threads|misc|al",{"_index":2501,"t":{"2310":{"position":[[2173,38],[2413,38],[2653,38]]},"2316":{"position":[[2218,38]]}}}],["simpli",{"_index":1246,"t":{"1850":{"position":[[106,6]]},"1895":{"position":[[158,6]]},"1904":{"position":[[576,6]]},"1906":{"position":[[153,6]]},"1939":{"position":[[374,6]]}}}],["singl",{"_index":817,"t":{"1750":{"position":[[872,6]]},"1756":{"position":[[0,6],[71,6]]},"1758":{"position":[[0,6],[160,6],[484,6]]},"1760":{"position":[[168,6]]},"1832":{"position":[[205,6],[662,6]]},"1838":{"position":[[1015,6]]},"1844":{"position":[[318,6]]},"1848":{"position":[[1062,6]]},"1895":{"position":[[63,6],[143,6]]},"1912":{"position":[[48,6]]},"1955":{"position":[[330,6]]},"2055":{"position":[[333,6],[594,6],[888,6]]},"2057":{"position":[[83,6]]},"2067":{"position":[[33,6]]},"2085":{"position":[[1232,6]]},"2093":{"position":[[2424,6]]}}}],["situat",{"_index":1409,"t":{"1908":{"position":[[892,11]]}}}],["size",{"_index":1581,"t":{"1953":{"position":[[1118,4],[1147,4]]},"1977":{"position":[[135,5]]},"1981":{"position":[[41,4]]},"1987":{"position":[[39,4]]},"1989":{"position":[[114,4]]},"1991":{"position":[[202,4]]},"1993":{"position":[[42,4]]},"1995":{"position":[[100,6],[183,4]]},"2113":{"position":[[304,4]]},"2115":{"position":[[290,4]]},"2265":{"position":[[211,4]]}}}],["skew",{"_index":1265,"t":{"1868":{"position":[[15,4]]},"2159":{"position":[[1777,4]]},"2167":{"position":[[928,4]]}}}],["skip",{"_index":851,"t":{"1750":{"position":[[3124,4]]},"1758":{"position":[[442,4],[652,4],[1313,4],[1560,4]]},"1767":{"position":[[1288,4]]},"1794":{"position":[[5217,4]]},"1802":{"position":[[267,8]]},"1829":{"position":[[843,5]]},"1939":{"position":[[75,5],[165,5],[243,5],[550,4]]},"1965":{"position":[[514,7]]},"2053":{"position":[[637,6],[2046,4]]},"2159":{"position":[[1829,4]]},"2167":{"position":[[980,4]]}}}],["skip=traefik",{"_index":1496,"t":{"1937":{"position":[[459,13]]}}}],["sl",{"_index":362,"t":{"1677":{"position":[[281,2]]},"1742":{"position":[[2515,2]]},"1744":{"position":[[1886,2]]},"1746":{"position":[[1667,2]]}}}],["sle",{"_index":1676,"t":{"1977":{"position":[[160,4]]}}}],["slice",{"_index":1415,"t":{"1910":{"position":[[348,6]]}}}],["slirp4net",{"_index":446,"t":{"1691":{"position":[[81,11]]}}}],["slirp4netn",{"_index":445,"t":{"1691":{"position":[[54,12],[247,11],[312,11],[399,11],[529,11]]}}}],["slower",{"_index":1227,"t":{"1846":{"position":[[418,6]]},"2117":{"position":[[285,6]]}}}],["small",{"_index":1320,"t":{"1882":{"position":[[280,5]]},"1989":{"position":[[135,5]]},"1995":{"position":[[204,5]]}}}],["snap",{"_index":1756,"t":{"2015":{"position":[[0,8]]}}}],["snapshot",{"_index":613,"t":{"1723":{"position":[[835,8],[901,8]]},"1750":{"position":[[179,10],[190,9],[263,9],[300,8],[344,10],[381,8],[575,9],[729,8],[1064,9],[1233,9],[1300,8],[1496,9],[2013,9],[2046,9],[2063,8],[2092,8],[2189,8],[2224,9],[2264,8],[2304,10],[2550,8],[2632,9],[2664,9],[2769,10],[2873,8],[3416,8],[3453,8],[3597,8],[3920,8],[4015,10],[4098,9],[4121,9],[4205,8],[4261,9],[4393,9],[4498,8],[4533,9],[4552,8],[4579,8],[4703,9],[4731,9],[4828,8],[4913,8],[4937,8],[4954,8]]},"1767":{"position":[[606,9],[643,9],[660,8],[710,10],[735,8],[776,10],[794,8],[827,8],[924,8],[963,9],[1003,8],[1047,9]]},"1794":{"position":[[3417,8],[4466,9],[4504,9],[4521,8],[4572,9],[4597,8],[4640,10],[4658,8],[4692,8],[4794,8],[4834,9],[4874,8],[4919,10],[4973,8],[5010,8]]},"1817":{"position":[[373,8]]},"1821":{"position":[[186,8],[260,10],[302,9]]},"1823":{"position":[[17,8]]}}}],["snapshot(",{"_index":866,"t":{"1750":{"position":[[4069,11]]}}}],["snapshott",{"_index":216,"t":{"1662":{"position":[[2412,11],[2474,11]]},"1715":{"position":[[713,11]]},"1794":{"position":[[7344,11],[7406,11]]}}}],["snapshotter=stargz",{"_index":564,"t":{"1717":{"position":[[24,18],[67,18]]}}}],["snippet",{"_index":1973,"t":{"2089":{"position":[[328,7]]}}}],["socat",{"_index":33,"t":{"1636":{"position":[[630,5]]}}}],["socket",{"_index":132,"t":{"1650":{"position":[[108,6],[183,6]]},"1662":{"position":[[2195,6],[2266,6]]},"1794":{"position":[[7127,6],[7198,6]]}}}],["sole",{"_index":841,"t":{"1750":{"position":[[2404,4]]},"1769":{"position":[[593,4]]},"1794":{"position":[[3319,4]]}}}],["solut",{"_index":2584,"t":{"2428":{"position":[[133,9]]}}}],["something=amaz",{"_index":1402,"t":{"1908":{"position":[[388,19],[586,19]]}}}],["soon",{"_index":1546,"t":{"1947":{"position":[[437,4]]},"2163":{"position":[[2421,4]]}}}],["sourc",{"_index":942,"t":{"1767":{"position":[[144,6]]},"1794":{"position":[[3952,6]]},"1829":{"position":[[756,6]]},"1908":{"position":[[936,8]]},"1937":{"position":[[243,6]]},"1985":{"position":[[14,6]]}}}],["source=10.42.0.0/16",{"_index":493,"t":{"1702":{"position":[[196,19]]}}}],["source=10.43.0.0/16",{"_index":494,"t":{"1702":{"position":[[268,19]]}}}],["spec",{"_index":403,"t":{"1681":{"position":[[782,5]]},"1717":{"position":[[328,5]]},"1750":{"position":[[2123,5]]},"1767":{"position":[[858,5]]},"1794":{"position":[[4723,5]]},"1876":{"position":[[419,5]]},"1878":{"position":[[562,5]]},"1981":{"position":[[110,4]]},"2093":{"position":[[1443,5],[2630,5],[3275,5],[3713,5],[5906,5],[6105,5],[6304,5]]},"2095":{"position":[[419,5],[778,5],[1409,5],[1629,5],[1870,5],[2092,5],[2312,5],[2553,5]]},"2141":{"position":[[93,5]]},"2143":{"position":[[72,5]]},"2147":{"position":[[77,5]]},"2149":{"position":[[72,5]]},"2163":{"position":[[518,5],[866,5],[2316,5]]}}}],["spec.allowprivilegeescal",{"_index":2576,"t":{"2404":{"position":[[142,30]]}}}],["spec.bootstrap",{"_index":1287,"t":{"1876":{"position":[[980,14]]}}}],["spec.chart",{"_index":1279,"t":{"1876":{"position":[[687,10],[1436,11],[1562,10]]}}}],["spec.chartcont",{"_index":1298,"t":{"1876":{"position":[[1390,17]]}}}],["spec.failurepolici",{"_index":1294,"t":{"1876":{"position":[[1252,18]]}}}],["spec.helmvers",{"_index":1285,"t":{"1876":{"position":[[939,16]]}}}],["spec.jobimag",{"_index":1290,"t":{"1876":{"position":[[1133,13]]}}}],["spec.repo",{"_index":1283,"t":{"1876":{"position":[[863,9]]}}}],["spec.repoca",{"_index":1284,"t":{"1876":{"position":[[896,11]]}}}],["spec.set",{"_index":1288,"t":{"1876":{"position":[[1060,8]]},"1878":{"position":[[270,8]]}}}],["spec.targetnamespac",{"_index":1281,"t":{"1876":{"position":[[757,20]]}}}],["spec.timeout",{"_index":1292,"t":{"1876":{"position":[[1210,12]]}}}],["spec.typ",{"_index":1818,"t":{"2033":{"position":[[16,9]]}}}],["spec.valuescont",{"_index":1297,"t":{"1876":{"position":[[1330,18]]},"1878":{"position":[[310,18]]}}}],["spec.vers",{"_index":1282,"t":{"1876":{"position":[[814,12]]}}}],["special",{"_index":1116,"t":{"1819":{"position":[[3,7]]}}}],["specif",{"_index":1202,"t":{"1840":{"position":[[800,8]]},"1935":{"position":[[44,8]]},"1979":{"position":[[68,8]]},"1997":{"position":[[175,8]]},"2059":{"position":[[582,8]]},"2097":{"position":[[187,8]]},"2131":{"position":[[161,8],[271,8]]},"2169":{"position":[[265,8],[419,8]]},"2176":{"position":[[426,8],[1090,8]]},"2223":{"position":[[50,13]]},"2225":{"position":[[136,13]]},"2227":{"position":[[50,13]]},"2229":{"position":[[60,13]]},"2231":{"position":[[154,13]]},"2233":{"position":[[157,13]]},"2235":{"position":[[50,13]]},"2237":{"position":[[50,13]]},"2239":{"position":[[50,13]]},"2241":{"position":[[144,13]]},"2243":{"position":[[50,13]]},"2245":{"position":[[50,13]]},"2247":{"position":[[50,13]]},"2249":{"position":[[140,13]]},"2251":{"position":[[50,13]]},"2253":{"position":[[143,13]]},"2255":{"position":[[50,13]]},"2257":{"position":[[50,13]]},"2259":{"position":[[60,13]]},"2261":{"position":[[60,13]]},"2263":{"position":[[60,13]]},"2265":{"position":[[60,13]]},"2267":{"position":[[50,13]]},"2269":{"position":[[60,13]]},"2271":{"position":[[154,13]]},"2273":{"position":[[140,13]]},"2275":{"position":[[140,13]]},"2277":{"position":[[154,13]]},"2279":{"position":[[131,13]]},"2283":{"position":[[50,13]]},"2286":{"position":[[58,13]]},"2288":{"position":[[58,13]]},"2290":{"position":[[58,13]]},"2292":{"position":[[58,13]]},"2294":{"position":[[58,13]]},"2296":{"position":[[68,13]]},"2298":{"position":[[58,13]]},"2301":{"position":[[49,13]]},"2303":{"position":[[49,13]]},"2306":{"position":[[118,13]]},"2308":{"position":[[44,13]]},"2310":{"position":[[44,13]]},"2312":{"position":[[160,13]]},"2314":{"position":[[44,13]]},"2316":{"position":[[44,13]]},"2318":{"position":[[167,13]]},"2381":{"position":[[101,8]]},"2385":{"position":[[99,8]]},"2440":{"position":[[166,8]]}}}],["specifi",{"_index":638,"t":{"1738":{"position":[[255,10]]},"1750":{"position":[[1223,9]]},"1767":{"position":[[88,7]]},"1792":{"position":[[307,7]]},"1794":{"position":[[3896,7]]},"1798":{"position":[[18,9]]},"1800":{"position":[[724,10]]},"1808":{"position":[[431,10]]},"1840":{"position":[[1057,9]]},"1844":{"position":[[358,7]]},"1895":{"position":[[638,7]]},"1900":{"position":[[451,9],[796,9]]},"1969":{"position":[[460,7]]},"2053":{"position":[[956,10],[1456,10],[1749,9],[1896,10]]},"2163":{"position":[[1440,10],[1579,10]]},"2169":{"position":[[307,7]]}}}],["speed",{"_index":1698,"t":{"1981":{"position":[[622,6]]},"1991":{"position":[[75,6]]},"2117":{"position":[[212,6]]}}}],["spike",{"_index":1927,"t":{"2075":{"position":[[395,6],[962,6]]}}}],["split",{"_index":1742,"t":{"1997":{"position":[[207,5]]}}}],["spoof",{"_index":1724,"t":{"1983":{"position":[[1184,9]]}}}],["spot",{"_index":1902,"t":{"2061":{"position":[[181,4]]}}}],["sql",{"_index":1125,"t":{"1825":{"position":[[225,3]]},"1829":{"position":[[730,3]]},"1842":{"position":[[1099,3]]},"2154":{"position":[[206,3],[383,3]]}}}],["sqlite",{"_index":618,"t":{"1727":{"position":[[15,6]]},"1729":{"position":[[214,6]]},"1767":{"position":[[122,6]]},"1794":{"position":[[3930,6]]},"1819":{"position":[[59,6],[92,6],[173,6]]},"1825":{"position":[[295,6],[492,6],[499,7],[537,7]]},"1832":{"position":[[637,6]]},"1850":{"position":[[59,6],[518,6]]}}}],["sqlite3",{"_index":8,"t":{"1636":{"position":[[77,8]]},"2200":{"position":[[404,8]]},"2271":{"position":[[534,8]]},"2306":{"position":[[428,8]]},"2308":{"position":[[317,8]]},"2310":{"position":[[342,8]]},"2312":{"position":[[494,8]]},"2314":{"position":[[320,8]]},"2316":{"position":[[352,8]]},"2318":{"position":[[451,8]]}}}],["ssd",{"_index":1699,"t":{"1981":{"position":[[651,3]]},"1991":{"position":[[108,3]]},"2063":{"position":[[83,3]]}}}],["ssl",{"_index":852,"t":{"1750":{"position":[[3129,3],[3152,3]]},"1767":{"position":[[1293,3],[1320,3]]},"1794":{"position":[[5222,3],[5250,3]]},"1878":{"position":[[676,4]]}}}],["stabl",{"_index":1194,"t":{"1840":{"position":[[433,6]]},"1953":{"position":[[67,6]]},"2053":{"position":[[934,6],[2290,9],[2317,7]]},"2059":{"position":[[183,6]]},"2163":{"position":[[2245,6]]},"2167":{"position":[[188,6],[205,6],[657,6]]},"2169":{"position":[[191,6]]}}}],["stack",{"_index":1526,"t":{"1945":{"position":[[1028,5]]},"1953":{"position":[[227,5],[516,5],[685,5],[727,5],[1524,5]]},"1955":{"position":[[337,5]]},"2057":{"position":[[216,5],[229,6]]},"2059":{"position":[[107,5],[312,5]]}}}],["stage",{"_index":744,"t":{"1744":{"position":[[102,6],[324,5]]},"1746":{"position":[[125,6],[347,5]]},"1748":{"position":[[510,5]]},"1760":{"position":[[261,6],[543,6],[878,6],[916,5],[935,6],[1128,5],[1258,6]]}}}],["standalon",{"_index":1896,"t":{"2061":{"position":[[2,10]]}}}],["standard",{"_index":77,"t":{"1642":{"position":[[240,8]]},"1662":{"position":[[642,8]]},"1774":{"position":[[271,8]]},"1794":{"position":[[653,8]]},"2021":{"position":[[34,11]]},"2059":{"position":[[292,8]]}}}],["stargz",{"_index":563,"t":{"1715":{"position":[[619,6],[706,6]]}}}],["start",{"_index":104,"t":{"1648":{"position":[[161,8]]},"1662":{"position":[[1164,8]]},"1736":{"position":[[194,7]]},"1738":{"position":[[171,5],[191,5]]},"1740":{"position":[[1169,7],[1476,8]]},"1742":{"position":[[355,8],[582,8],[1908,8],[2671,5]]},"1744":{"position":[[415,7]]},"1746":{"position":[[438,7]]},"1750":{"position":[[777,8],[1154,5],[1334,5],[1740,5],[1767,5],[1791,5],[1847,5]]},"1756":{"position":[[94,5],[153,8],[812,8],[1020,5]]},"1760":{"position":[[268,5],[947,6]]},"1794":{"position":[[6489,8]]},"1806":{"position":[[29,8],[949,8]]},"1808":{"position":[[125,8]]},"1810":{"position":[[112,8]]},"1842":{"position":[[163,7]]},"1848":{"position":[[83,8],[117,8]]},"1904":{"position":[[26,5]]},"1931":{"position":[[432,8]]},"1933":{"position":[[1134,5]]},"1937":{"position":[[442,5]]},"1939":{"position":[[508,7]]},"1945":{"position":[[2119,8]]},"1947":{"position":[[921,8]]},"1949":{"position":[[0,5]]},"1953":{"position":[[648,7]]},"1993":{"position":[[187,9]]},"1997":{"position":[[0,8]]},"1999":{"position":[[44,5],[252,5]]},"2001":{"position":[[226,5]]},"2053":{"position":[[26,5],[755,5],[821,5]]},"2079":{"position":[[61,8]]},"2097":{"position":[[288,8]]},"2101":{"position":[[86,6]]}}}],["started/common/cgroup2",{"_index":425,"t":{"1689":{"position":[[36,23]]}}}],["starter",{"_index":2060,"t":{"2097":{"position":[[455,7]]}}}],["startup",{"_index":650,"t":{"1740":{"position":[[260,7],[657,8]]},"1742":{"position":[[74,7]]},"1929":{"position":[[164,7]]},"1959":{"position":[[116,8]]},"2095":{"position":[[252,8]]}}}],["stat",{"_index":2351,"t":{"2200":{"position":[[668,6]]},"2206":{"position":[[261,4]]},"2208":{"position":[[242,4]]},"2210":{"position":[[248,4]]},"2212":{"position":[[251,4]]},"2214":{"position":[[173,4]]},"2216":{"position":[[224,4]]},"2218":{"position":[[178,4]]},"2220":{"position":[[178,4]]},"2271":{"position":[[798,6]]},"2306":{"position":[[692,6]]},"2308":{"position":[[581,6]]},"2310":{"position":[[606,6]]},"2312":{"position":[[758,6]]},"2314":{"position":[[584,6]]},"2316":{"position":[[616,6]]},"2318":{"position":[[715,6]]},"2333":{"position":[[195,4]]},"2335":{"position":[[278,4]]},"2337":{"position":[[197,4]]},"2339":{"position":[[203,4]]},"2341":{"position":[[136,4]]},"2343":{"position":[[136,4]]}}}],["state",{"_index":96,"t":{"1646":{"position":[[90,5]]},"1662":{"position":[[967,5]]},"1778":{"position":[[124,5]]},"1794":{"position":[[1287,5]]},"1811":{"position":[[907,5],[1684,5],[2168,5],[2457,5]]},"1838":{"position":[[1663,6]]},"1906":{"position":[[3,7]]},"2061":{"position":[[662,5]]},"2075":{"position":[[235,5]]},"2077":{"position":[[665,6]]},"2156":{"position":[[172,6]]},"2163":{"position":[[2387,7]]},"2225":{"position":[[545,5]]},"2227":{"position":[[526,5]]},"2245":{"position":[[539,5]]},"2298":{"position":[[511,5]]}}}],["statement",{"_index":1883,"t":{"2057":{"position":[[66,11]]}}}],["static",{"_index":1079,"t":{"1808":{"position":[[277,10]]}}}],["statist",{"_index":1900,"t":{"2061":{"position":[[94,10]]}}}],["statu",{"_index":260,"t":{"1675":{"position":[[560,6],[1008,6]]},"1693":{"position":[[17,6]]},"1760":{"position":[[36,6],[95,6],[210,6],[228,7],[492,6],[510,7],[781,7]]},"1848":{"position":[[693,6]]},"1939":{"position":[[755,6]]},"2001":{"position":[[491,6]]}}}],["status.loadbalancer.ingress",{"_index":1819,"t":{"2033":{"position":[[271,27]]}}}],["stay",{"_index":1493,"t":{"1933":{"position":[[1444,4]]},"1939":{"position":[[1052,4]]}}}],["stderr",{"_index":1259,"t":{"1862":{"position":[[70,7]]}}}],["stdout",{"_index":1086,"t":{"1811":{"position":[[741,7]]},"1862":{"position":[[62,7]]}}}],["steadi",{"_index":1910,"t":{"2061":{"position":[[655,6]]}}}],["step",{"_index":900,"t":{"1756":{"position":[[692,5]]},"1800":{"position":[[775,5]]},"1802":{"position":[[220,5]]},"1834":{"position":[[48,6]]},"1842":{"position":[[28,4]]},"1895":{"position":[[825,4]]},"1945":{"position":[[649,5]]},"1947":{"position":[[581,6]]},"1949":{"position":[[286,5],[362,5]]},"1979":{"position":[[156,5],[231,5]]},"2121":{"position":[[323,5]]},"2123":{"position":[[366,5]]},"2159":{"position":[[1278,5],[1421,5],[1503,5]]},"2163":{"position":[[1660,4]]},"2345":{"position":[[118,5]]},"2347":{"position":[[118,5]]}}}],["still",{"_index":763,"t":{"1744":{"position":[[1511,5]]},"1957":{"position":[[18,5]]},"1963":{"position":[[1333,5]]}}}],["stop",{"_index":636,"t":{"1738":{"position":[[96,4],[115,4]]},"1750":{"position":[[1600,4],[1685,4]]},"2156":{"position":[[104,8],[116,4]]},"2171":{"position":[[165,4]]}}}],["storag",{"_index":16,"t":{"1636":{"position":[[263,7]]},"1784":{"position":[[33,7],[66,7],[101,7]]},"1794":{"position":[[5705,7],[5724,9],[5748,7],[5783,7],[5944,8]]},"1931":{"position":[[128,8]]},"2007":{"position":[[204,7]]},"2059":{"position":[[273,8]]},"2075":{"position":[[898,8],[1125,7],[1148,7]]},"2077":{"position":[[284,7],[406,7],[429,7]]},"2101":{"position":[[1793,7]]},"2121":{"position":[[178,7]]},"2141":{"position":[[178,8]]},"2147":{"position":[[160,8]]},"2231":{"position":[[2659,7]]},"2233":{"position":[[2607,7]]},"2235":{"position":[[2476,7]]},"2237":{"position":[[2425,7]]},"2239":{"position":[[2438,7]]},"2241":{"position":[[2551,7]]},"2243":{"position":[[2512,7]]},"2247":{"position":[[2585,7]]},"2249":{"position":[[2566,7]]},"2251":{"position":[[2462,7]]},"2253":{"position":[[2578,7]]},"2255":{"position":[[2443,7]]},"2257":{"position":[[2358,7]]},"2267":{"position":[[2533,7]]},"2273":{"position":[[2575,7]]},"2275":{"position":[[2491,7]]},"2277":{"position":[[2497,7]]},"2350":{"position":[[2842,7]]},"2352":{"position":[[2856,7]]},"2354":{"position":[[2971,7]]}}}],["storage.yaml",{"_index":1504,"t":{"1939":{"position":[[637,12]]}}}],["storageclassnam",{"_index":2240,"t":{"2141":{"position":[[128,17]]},"2147":{"position":[[112,17]]}}}],["storageo",{"_index":2236,"t":{"2137":{"position":[[310,9]]}}}],["store",{"_index":655,"t":{"1740":{"position":[[444,6]]},"1744":{"position":[[2492,6]]},"1746":{"position":[[2291,6]]},"1750":{"position":[[4407,6],[4452,6]]},"1800":{"position":[[412,6]]},"1963":{"position":[[1342,6]]},"2077":{"position":[[390,6]]},"2121":{"position":[[126,5]]}}}],["strategi",{"_index":2172,"t":{"2107":{"position":[[392,10]]}}}],["stream",{"_index":1563,"t":{"1951":{"position":[[287,9]]},"2021":{"position":[[936,10]]},"2099":{"position":[[704,10],[1327,10]]},"2358":{"position":[[340,9],[587,10]]}}}],["streamingconnectionidletimeout",{"_index":2556,"t":{"2358":{"position":[[79,30]]}}}],["string",{"_index":1289,"t":{"1876":{"position":[[1126,6]]},"1910":{"position":[[338,6]]},"2233":{"position":[[397,8]]}}}],["strip",{"_index":366,"t":{"1677":{"position":[[314,5]]}}}],["strongswan",{"_index":1535,"t":{"1945":{"position":[[1700,10],[2080,10]]}}}],["structur",{"_index":1639,"t":{"1963":{"position":[[924,9]]}}}],["subcommand",{"_index":635,"t":{"1738":{"position":[[82,11]]},"1744":{"position":[[68,11]]},"1746":{"position":[[91,11]]},"1750":{"position":[[2830,11],[2882,10],[3941,12],[3976,11],[4026,10],[4226,10],[4507,12],[4790,10]]}}}],["subdirectori",{"_index":1466,"t":{"1933":{"position":[[495,15]]}}}],["subdomain",{"_index":1481,"t":{"1933":{"position":[[1051,9]]}}}],["subject",{"_index":982,"t":{"1776":{"position":[[415,7]]},"1794":{"position":[[1189,7]]},"1840":{"position":[[1001,7]]},"1918":{"position":[[474,9]]},"2093":{"position":[[4819,9],[5130,9],[5453,9],[5749,9]]},"2391":{"position":[[96,9]]}}}],["subnet",{"_index":1533,"t":{"1945":{"position":[[1447,7]]},"1993":{"position":[[35,6]]}}}],["subset",{"_index":2568,"t":{"2374":{"position":[[402,6],[623,6]]}}}],["succe",{"_index":1225,"t":{"1846":{"position":[[334,7]]}}}],["successfulli",{"_index":739,"t":{"1742":{"position":[[2634,13]]},"1744":{"position":[[2206,13]]},"1746":{"position":[[2030,13]]},"1748":{"position":[[1337,13]]},"1750":{"position":[[1185,12]]},"1848":{"position":[[871,12]]},"2021":{"position":[[1915,13]]},"2159":{"position":[[612,13]]}}}],["such",{"_index":1072,"t":{"1806":{"position":[[623,4]]},"1840":{"position":[[567,4],[846,4]]},"1846":{"position":[[431,4]]},"1882":{"position":[[268,4]]},"1895":{"position":[[1082,4]]},"1906":{"position":[[1252,4]]},"1908":{"position":[[1010,4]]},"1963":{"position":[[395,4]]},"1983":{"position":[[320,4],[1172,4]]},"2067":{"position":[[269,4]]},"2075":{"position":[[327,4],[494,5]]},"2093":{"position":[[6435,4]]},"2131":{"position":[[421,4]]},"2169":{"position":[[282,5]]},"2235":{"position":[[222,4]]},"2310":{"position":[[2319,4],[2559,4],[2799,4]]},"2316":{"position":[[2364,4]]},"2321":{"position":[[72,4]]}}}],["sudo",{"_index":256,"t":{"1675":{"position":[[496,4],[958,4]]},"1677":{"position":[[298,4],[413,4]]},"1706":{"position":[[468,4]]},"1708":{"position":[[303,4],[593,4]]},"1890":{"position":[[173,4],[222,4]]},"1916":{"position":[[178,4]]},"1918":{"position":[[593,4]]},"1920":{"position":[[32,4],[97,4]]},"1922":{"position":[[78,4]]},"1924":{"position":[[0,4],[226,4]]},"1926":{"position":[[0,4],[48,4],[112,4]]},"2097":{"position":[[399,4],[1422,4],[1451,4]]},"2173":{"position":[[116,4],[171,4],[240,4],[293,4]]}}}],["suffici",{"_index":2183,"t":{"2113":{"position":[[189,10]]},"2115":{"position":[[188,10]]},"2125":{"position":[[130,10]]}}}],["suffix",{"_index":1667,"t":{"1975":{"position":[[204,6]]}}}],["suggest",{"_index":2591,"t":{"2438":{"position":[[109,9]]}}}],["suit",{"_index":2485,"t":{"2283":{"position":[[1033,7]]},"2374":{"position":[[586,6]]}}}],["suitabl",{"_index":2462,"t":{"2259":{"position":[[195,8]]}}}],["suites=tls_aes_128_gcm_sha256,tls_aes_256_gcm_sha384,tls_chacha20_poly1305_sha256",{"_index":2477,"t":{"2283":{"position":[[183,82]]}}}],["suites=tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_gcm_sha256",{"_index":2569,"t":{"2374":{"position":[[660,302]]}}}],["suites=tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_chacha20_poly1305",{"_index":2115,"t":{"2101":{"position":[[2003,238]]}}}],["sum",{"_index":1036,"t":{"1800":{"position":[[371,3],[475,3]]}}}],["summar",{"_index":927,"t":{"1760":{"position":[[1477,10]]},"2055":{"position":[[111,10]]}}}],["supervisor",{"_index":118,"t":{"1648":{"position":[[491,10],[531,10]]},"1662":{"position":[[1747,10],[1787,10]]},"1790":{"position":[[81,10]]},"1794":{"position":[[8587,10],[8849,10],[8889,10]]},"1985":{"position":[[143,10]]}}}],["supplementalgroup",{"_index":2012,"t":{"2093":{"position":[[1869,19],[2954,19],[3507,19],[3964,19]]}}}],["suppli",{"_index":1347,"t":{"1895":{"position":[[783,6]]}}}],["support",{"_index":682,"t":{"1740":{"position":[[1349,7]]},"1750":{"position":[[2597,8],[2610,8],[2715,7],[3958,8]]},"1752":{"position":[[4,8]]},"1756":{"position":[[234,10],[893,10]]},"1762":{"position":[[183,9]]},"1804":{"position":[[4,8]]},"1810":{"position":[[13,7],[211,8]]},"1832":{"position":[[15,7]]},"1840":{"position":[[210,8]]},"1846":{"position":[[18,7],[58,7],[285,10]]},"1850":{"position":[[495,7]]},"1900":{"position":[[4,8],[358,7]]},"1910":{"position":[[75,10]]},"1953":{"position":[[26,7],[74,7],[1233,9]]},"1955":{"position":[[385,9]]},"1979":{"position":[[369,7]]},"1995":{"position":[[4,8]]},"2075":{"position":[[55,7],[787,7]]},"2079":{"position":[[4,8]]},"2093":{"position":[[52,7],[868,7]]},"2173":{"position":[[18,9]]},"2421":{"position":[[60,7]]}}}],["sure",{"_index":861,"t":{"1750":{"position":[[3634,4]]},"2007":{"position":[[437,4]]}}}],["sustain",{"_index":2207,"t":{"2125":{"position":[[416,8]]}}}],["svc",{"_index":1804,"t":{"2021":{"position":[[3275,3]]},"2033":{"position":[[128,3]]},"2093":{"position":[[5308,3]]}}}],["svccontroller.k3s.cattle.io/enablelb=tru",{"_index":1820,"t":{"2037":{"position":[[11,41]]},"2039":{"position":[[170,41],[279,42]]}}}],["svccontroller.k3s.cattle.io/lbpool=pool1",{"_index":1824,"t":{"2039":{"position":[[127,40],[342,40]]}}}],["svccontroller.k3s.cattle.io/lbpool=pool2",{"_index":1825,"t":{"2039":{"position":[[236,40],[467,40]]}}}],["svccontroller.k3s.cattle.io/svcnam",{"_index":2047,"t":{"2095":{"position":[[1661,36],[2344,36]]}}}],["svclb",{"_index":278,"t":{"1675":{"position":[[836,5]]},"2093":{"position":[[3628,5],[4599,5],[5621,5],[5788,5]]}}}],["svclbtraefik",{"_index":2046,"t":{"2095":{"position":[[1585,12],[2268,12]]}}}],["swanctl",{"_index":1536,"t":{"1945":{"position":[[1725,7],[2091,7]]},"1947":{"position":[[257,7]]}}}],["swap",{"_index":2148,"t":{"2101":{"position":[[3780,4]]},"2356":{"position":[[1297,4],[2520,4]]},"2368":{"position":[[1488,4],[2711,4]]}}}],["switch",{"_index":1682,"t":{"1979":{"position":[[240,6]]},"1983":{"position":[[1073,8]]}}}],["symlink",{"_index":1838,"t":{"2053":{"position":[[530,8],[660,8]]}}}],["sync",{"_index":925,"t":{"1760":{"position":[[1437,4]]},"1933":{"position":[[1452,4],[1490,4]]},"2129":{"position":[[330,4]]}}}],["syntax",{"_index":2500,"t":{"2310":{"position":[[2125,6],[2365,6],[2605,6]]},"2316":{"position":[[2170,6]]}}}],["sysctl",{"_index":1593,"t":{"1955":{"position":[[145,6]]},"2089":{"position":[[352,6]]},"2093":{"position":[[2279,7]]}}}],["system",{"_index":263,"t":{"1675":{"position":[[585,6],[654,6],[716,6],[775,6],[829,6],[879,6]]},"1719":{"position":[[183,6],[295,6]]},"1733":{"position":[[396,6]]},"1740":{"position":[[1277,6]]},"1750":{"position":[[243,6],[2679,7]]},"1782":{"position":[[761,7]]},"1794":{"position":[[2480,8],[7566,6],[7648,6]]},"1876":{"position":[[144,6],[412,6]]},"1878":{"position":[[555,6]]},"1900":{"position":[[404,6],[468,6],[566,6],[614,6],[752,6]]},"1904":{"position":[[163,8]]},"1906":{"position":[[395,6]]},"1929":{"position":[[369,6],[555,6]]},"1939":{"position":[[780,6],[849,6],[911,6]]},"1945":{"position":[[731,7]]},"1975":{"position":[[147,7]]},"1977":{"position":[[100,8]]},"1979":{"position":[[45,8]]},"2021":{"position":[[1104,11],[1129,13],[1173,6],[1625,7],[1646,7],[1654,6],[1708,6],[1834,6],[3150,6]]},"2033":{"position":[[85,6]]},"2053":{"position":[[163,8]]},"2059":{"position":[[190,6],[495,6]]},"2075":{"position":[[248,7]]},"2077":{"position":[[658,6]]},"2085":{"position":[[536,7]]},"2093":{"position":[[819,7],[840,7],[2139,7],[2188,6],[3176,6],[4390,6],[4992,6],[5288,6],[5349,6],[5659,6],[5899,6],[5990,6],[6493,6]]},"2095":{"position":[[412,6],[503,6],[1402,6],[1622,6],[1863,6],[2085,6],[2305,6],[2546,6]]},"2107":{"position":[[332,7]]},"2109":{"position":[[211,6],[281,7]]},"2125":{"position":[[238,6],[406,6],[439,6]]},"2127":{"position":[[107,8]]},"2131":{"position":[[722,7]]},"2145":{"position":[[284,7]]},"2152":{"position":[[159,11]]},"2159":{"position":[[52,6],[987,6],[1212,6],[1362,6],[1571,6],[1662,6],[1882,6]]},"2161":{"position":[[4,6]]},"2163":{"position":[[503,6],[679,6],[851,6],[1086,6],[2683,6],[2727,6]]},"2167":{"position":[[1033,6]]},"2180":{"position":[[94,7]]},"2182":{"position":[[94,7]]},"2184":{"position":[[94,7]]},"2186":{"position":[[94,7]]},"2188":{"position":[[94,7]]},"2190":{"position":[[94,7]]},"2192":{"position":[[94,7]]},"2194":{"position":[[94,7]]},"2196":{"position":[[94,7]]},"2198":{"position":[[94,7]]},"2204":{"position":[[94,7]]},"2206":{"position":[[84,7]]},"2208":{"position":[[84,7]]},"2210":{"position":[[84,7]]},"2212":{"position":[[84,7]]},"2214":{"position":[[84,7]]},"2216":{"position":[[84,7]]},"2218":{"position":[[84,7]]},"2220":{"position":[[84,7]]},"2329":{"position":[[94,7]]},"2331":{"position":[[94,7]]},"2333":{"position":[[84,7]]},"2335":{"position":[[84,7]]},"2337":{"position":[[84,7]]},"2339":{"position":[[84,7]]},"2350":{"position":[[362,7]]},"2352":{"position":[[348,7]]},"2354":{"position":[[404,7]]},"2356":{"position":[[334,7]]},"2358":{"position":[[391,7]]},"2360":{"position":[[368,7]]},"2362":{"position":[[368,7]]},"2364":{"position":[[242,7]]},"2366":{"position":[[336,7]]},"2368":{"position":[[552,7]]},"2370":{"position":[[418,7]]},"2372":{"position":[[272,7]]},"2374":{"position":[[977,7]]},"2394":{"position":[[98,6]]}}}],["system.slice/k3s.servic",{"_index":1903,"t":{"2061":{"position":[[241,24]]}}}],["system:authent",{"_index":2032,"t":{"2093":{"position":[[4849,20]]}}}],["system:bootstrappers:k3s:default",{"_index":1091,"t":{"1811":{"position":[[1231,33]]}}}],["system:mast",{"_index":2573,"t":{"2389":{"position":[[37,14]]}}}],["system:nod",{"_index":2033,"t":{"2093":{"position":[[5196,12]]}}}],["system:serviceaccount",{"_index":2034,"t":{"2093":{"position":[[5519,22]]}}}],["system_031e74b5",{"_index":334,"t":{"1675":{"position":[[2190,15]]}}}],["system_07abe831",{"_index":308,"t":{"1675":{"position":[[1487,15],[1804,15]]}}}],["system_2dbd22bf",{"_index":324,"t":{"1675":{"position":[[2007,15],[2698,15]]}}}],["system_d05725df",{"_index":344,"t":{"1675":{"position":[[2363,15],[2523,15]]}}}],["system_d46f10c6",{"_index":295,"t":{"1675":{"position":[[1139,15],[1302,15],[1643,15]]}}}],["systemctl",{"_index":434,"t":{"1689":{"position":[[559,9],[598,9]]},"1693":{"position":[[0,9]]},"1702":{"position":[[23,9],[478,9]]},"1738":{"position":[[105,9],[181,9]]},"1750":{"position":[[1675,9],[1757,9],[1837,9]]},"1756":{"position":[[382,9],[1278,9]]},"1758":{"position":[[318,9],[1137,9]]},"1957":{"position":[[1413,9],[1437,9]]},"2097":{"position":[[1427,9],[1456,9]]},"2173":{"position":[[121,9],[176,9]]},"2350":{"position":[[412,9],[436,9]]},"2352":{"position":[[398,9],[422,9]]},"2354":{"position":[[454,9],[478,9]]},"2356":{"position":[[384,9],[408,9]]},"2358":{"position":[[441,9],[465,9]]},"2360":{"position":[[418,9],[442,9]]},"2362":{"position":[[418,9],[442,9]]},"2364":{"position":[[292,9],[316,9]]},"2366":{"position":[[386,9],[410,9]]},"2368":{"position":[[602,9],[626,9]]},"2370":{"position":[[468,9],[492,9]]},"2372":{"position":[[322,9],[346,9]]},"2374":{"position":[[1027,9],[1051,9]]}}}],["systemd",{"_index":235,"t":{"1673":{"position":[[277,7]]},"1689":{"position":[[816,7],[885,7]]},"1691":{"position":[[157,7]]},"1697":{"position":[[26,7],[121,8]]},"1706":{"position":[[124,7]]},"1744":{"position":[[2515,7]]},"1746":{"position":[[2314,7]]},"1756":{"position":[[374,7],[1270,7]]},"1758":{"position":[[310,7],[1129,7]]},"1862":{"position":[[128,9]]},"1904":{"position":[[138,7]]},"1947":{"position":[[849,7]]},"2003":{"position":[[281,7]]},"2049":{"position":[[5,7]]},"2053":{"position":[[138,7],[1272,7],[1626,7],[1823,7],[2575,7]]},"2061":{"position":[[155,7],[192,7]]},"2097":{"position":[[1112,7]]},"2173":{"position":[[59,7],[79,7]]},"2176":{"position":[[1801,7]]}}}],["s|l|o|t|m|a",{"_index":2502,"t":{"2310":{"position":[[2226,14],[2466,14],[2706,14]]},"2316":{"position":[[2271,14]]}}}],["t",{"_index":83,"t":{"1644":{"position":[[54,1]]},"1662":{"position":[[698,1]]},"1769":{"position":[[54,1]]},"1794":{"position":[[2715,1]]}}}],["tabl",{"_index":926,"t":{"1760":{"position":[[1470,6]]}}}],["tag",{"_index":1306,"t":{"1878":{"position":[[607,4]]},"1900":{"position":[[282,3]]},"1963":{"position":[[834,3]]},"1971":{"position":[[282,3]]}}}],["tail",{"_index":2353,"t":{"2200":{"position":[[809,4]]},"2223":{"position":[[272,4]]},"2231":{"position":[[502,4]]},"2233":{"position":[[485,4]]},"2235":{"position":[[359,4]]},"2237":{"position":[[325,4]]},"2239":{"position":[[338,4]]},"2241":{"position":[[429,4]]},"2243":{"position":[[336,4]]},"2247":{"position":[[402,4]]},"2249":{"position":[[424,4]]},"2251":{"position":[[320,4]]},"2253":{"position":[[455,4]]},"2255":{"position":[[316,4]]},"2257":{"position":[[267,4]]},"2267":{"position":[[397,4]]},"2271":{"position":[[939,4]]},"2273":{"position":[[468,4]]},"2275":{"position":[[399,4]]},"2277":{"position":[[411,4]]},"2279":{"position":[[453,4]]},"2283":{"position":[[1005,4]]},"2286":{"position":[[363,4]]},"2288":{"position":[[293,4]]},"2290":{"position":[[313,4]]},"2292":{"position":[[409,4]]},"2294":{"position":[[346,4]]},"2301":{"position":[[271,4]]},"2303":{"position":[[281,4]]},"2306":{"position":[[833,4]]},"2308":{"position":[[722,4]]},"2310":{"position":[[747,4]]},"2312":{"position":[[899,4]]},"2314":{"position":[[725,4]]},"2316":{"position":[[757,4]]},"2318":{"position":[[856,4]]},"2324":{"position":[[151,4]]},"2350":{"position":[[662,4]]},"2352":{"position":[[648,4]]},"2354":{"position":[[704,4]]},"2356":{"position":[[514,4]]},"2358":{"position":[[571,4]]},"2368":{"position":[[732,4]]}}}],["taint",{"_index":106,"t":{"1648":{"position":[[204,5],[252,6]]},"1660":{"position":[[70,5],[99,5],[160,6],[330,6],[394,5],[460,6],[588,6]]},"1662":{"position":[[1207,5],[1264,6]]},"1695":{"position":[[32,5],[155,6],[655,5]]},"1794":{"position":[[6532,5],[6589,6]]},"1838":{"position":[[1339,7],[1356,5],[1411,7],[1438,5]]},"1959":{"position":[[467,7]]},"2043":{"position":[[320,6]]}}}],["take",{"_index":881,"t":{"1750":{"position":[[4801,5]]},"1756":{"position":[[623,4],[1611,4]]},"1819":{"position":[[110,4]]},"1821":{"position":[[245,4],[286,6]]},"1908":{"position":[[968,4]]},"1969":{"position":[[568,4]]},"2267":{"position":[[304,5]]}}}],["taken",{"_index":1471,"t":{"1933":{"position":[[612,5]]},"2077":{"position":[[94,5]]},"2326":{"position":[[188,5]]}}}],["tar",{"_index":364,"t":{"1677":{"position":[[303,3]]},"1890":{"position":[[18,3],[126,3]]},"1898":{"position":[[110,4],[203,3],[288,3]]}}}],["target",{"_index":722,"t":{"1742":{"position":[[1459,6],[1963,6]]},"2163":{"position":[[1416,7],[1556,7]]}}}],["targetnamespac",{"_index":1274,"t":{"1876":{"position":[[480,16]]}}}],["task",{"_index":1925,"t":{"2075":{"position":[[194,5]]}}}],["tcp",{"_index":1197,"t":{"1840":{"position":[[586,5]]},"1985":{"position":[[45,3],[115,3],[241,3]]},"2095":{"position":[[823,3]]}}}],["tcpdump",{"_index":602,"t":{"1721":{"position":[[624,7],[671,7],[709,8]]}}}],["team",{"_index":2313,"t":{"2176":{"position":[[374,6]]}}}],["technic",{"_index":2306,"t":{"2167":{"position":[[776,9]]}}}],["temporari",{"_index":745,"t":{"1744":{"position":[[116,9],[1000,9],[1212,9]]},"1746":{"position":[[139,9],[1578,9]]},"1748":{"position":[[658,9]]},"2075":{"position":[[385,9],[952,9]]}}}],["term",{"_index":1684,"t":{"1979":{"position":[[393,6]]}}}],["termin",{"_index":1773,"t":{"2021":{"position":[[847,11]]},"2099":{"position":[[615,11],[1238,11]]},"2105":{"position":[[233,11],[350,11]]},"2125":{"position":[[18,10],[357,10]]},"2286":{"position":[[172,10],[244,10],[379,11]]}}}],["terraform",{"_index":2255,"t":{"2152":{"position":[[50,10]]}}}],["test",{"_index":1394,"t":{"1906":{"position":[[353,5]]},"1979":{"position":[[306,6]]},"1981":{"position":[[213,5]]},"2053":{"position":[[2333,8]]},"2055":{"position":[[37,5],[733,7]]},"2057":{"position":[[13,5]]},"2059":{"position":[[4,6]]},"2065":{"position":[[37,5]]},"2067":{"position":[[158,6],[338,6]]},"2069":{"position":[[158,6]]},"2071":{"position":[[47,6]]},"2125":{"position":[[460,6]]},"2143":{"position":[[48,4],[105,4]]},"2149":{"position":[[48,4],[105,4]]},"2176":{"position":[[642,6],[832,7],[1123,8],[1210,4],[1719,4],[1937,5]]},"2206":{"position":[[197,4]]},"2208":{"position":[[174,4]]},"2210":{"position":[[180,4]]},"2212":{"position":[[182,4]]},"2318":{"position":[[34,5]]},"2335":{"position":[[216,4]]},"2350":{"position":[[492,4]]},"2352":{"position":[[478,4]]},"2354":{"position":[[534,4]]}}}],["text",{"_index":1111,"t":{"1811":{"position":[[2637,5],[2658,7]]},"2310":{"position":[[2261,5],[2501,5],[2741,5]]},"2316":{"position":[[2306,5]]}}}],["tgz",{"_index":1280,"t":{"1876":{"position":[[723,11],[1429,4]]}}}],["therefor",{"_index":1193,"t":{"1840":{"position":[[404,10]]},"1893":{"position":[[614,10]]},"1983":{"position":[[1194,10]]},"2093":{"position":[[6511,10]]}}}],["thing",{"_index":2294,"t":{"2163":{"position":[[1185,6]]}}}],["third",{"_index":1233,"t":{"1848":{"position":[[425,5],[625,5]]},"2428":{"position":[[102,5]]}}}],["those",{"_index":1188,"t":{"1840":{"position":[[121,5]]},"1929":{"position":[[611,5]]},"1933":{"position":[[700,5],[1464,5]]},"2021":{"position":[[2761,5]]}}}],["though",{"_index":1646,"t":{"1963":{"position":[[1480,6]]},"2109":{"position":[[294,6]]}}}],["three",{"_index":903,"t":{"1756":{"position":[[1033,5]]},"1758":{"position":[[891,5]]},"1804":{"position":[[13,5]]},"1848":{"position":[[97,5]]}}}],["threshold",{"_index":2201,"t":{"2125":{"position":[[36,9],[489,9]]},"2286":{"position":[[190,9],[218,10],[398,10]]}}}],["threshold=10",{"_index":1775,"t":{"2021":{"position":[[866,13]]},"2099":{"position":[[634,13],[1257,13]]},"2286":{"position":[[262,12]]}}}],["through",{"_index":1163,"t":{"1832":{"position":[[914,7]]},"1906":{"position":[[513,7]]},"1908":{"position":[[1152,7]]},"1957":{"position":[[264,7],[692,7],[767,7]]},"1963":{"position":[[427,7]]},"1983":{"position":[[409,7]]},"2103":{"position":[[154,7]]},"2159":{"position":[[311,7]]},"2167":{"position":[[281,7],[420,7]]}}}],["throughput",{"_index":1940,"t":{"2077":{"position":[[520,10]]}}}],["thu",{"_index":1178,"t":{"1838":{"position":[[1201,4]]},"1840":{"position":[[340,4]]},"2163":{"position":[[2113,5]]}}}],["ti",{"_index":2302,"t":{"2167":{"position":[[94,4],[504,4]]}}}],["tiller",{"_index":1313,"t":{"1880":{"position":[[261,7]]}}}],["time",{"_index":178,"t":{"1660":{"position":[[183,5]]},"1736":{"position":[[185,4]]},"1740":{"position":[[1160,4]]},"1742":{"position":[[382,5],[2695,5]]},"1750":{"position":[[250,5],[2110,4]]},"1756":{"position":[[212,4],[871,4]]},"1767":{"position":[[845,4]]},"1794":{"position":[[4710,4]]},"1811":{"position":[[2387,4]]},"1840":{"position":[[143,5],[288,5],[504,5],[1076,5]]},"1902":{"position":[[90,5]]},"1939":{"position":[[526,5]]},"2111":{"position":[[154,4]]},"2119":{"position":[[418,4],[435,4]]},"2125":{"position":[[298,5]]},"2163":{"position":[[1391,5],[2035,4]]},"2165":{"position":[[170,5]]}}}],["time=\"2022",{"_index":2433,"t":{"2231":{"position":[[723,10]]},"2233":{"position":[[671,10]]},"2235":{"position":[[540,10]]},"2237":{"position":[[489,10]]},"2239":{"position":[[502,10]]},"2241":{"position":[[615,10]]},"2243":{"position":[[576,10]]},"2247":{"position":[[649,10]]},"2249":{"position":[[630,10]]},"2251":{"position":[[526,10]]},"2253":{"position":[[642,10]]},"2255":{"position":[[507,10]]},"2257":{"position":[[422,10]]},"2267":{"position":[[597,10]]},"2273":{"position":[[639,10],[2815,10]]},"2275":{"position":[[555,10]]},"2277":{"position":[[561,10]]},"2288":{"position":[[448,10]]},"2290":{"position":[[516,10]]},"2292":{"position":[[601,10]]},"2294":{"position":[[498,10]]},"2301":{"position":[[407,10]]},"2303":{"position":[[481,10]]},"2350":{"position":[[906,10]]},"2352":{"position":[[920,10]]},"2354":{"position":[[1035,10]]},"2356":{"position":[[712,10],[1935,10]]},"2368":{"position":[[903,10],[2126,10]]}}}],["timeout",{"_index":959,"t":{"1767":{"position":[[1689,7],[1706,7]]},"1794":{"position":[[5643,7],[5665,7]]},"1876":{"position":[[1244,7]]},"2117":{"position":[[26,7],[99,7],[147,7],[441,7]]},"2358":{"position":[[614,8]]}}}],["timeout=300",{"_index":1771,"t":{"2021":{"position":[[770,13]]},"2099":{"position":[[538,13],[1161,13]]}}}],["timeout=5m",{"_index":1778,"t":{"2021":{"position":[[963,11]]},"2099":{"position":[[731,11],[1354,11]]},"2358":{"position":[[366,10]]}}}],["timestamp",{"_index":953,"t":{"1767":{"position":[[750,10]]},"1794":{"position":[[4612,11]]}}}],["tl",{"_index":12,"t":{"1636":{"position":[[142,3]]},"1767":{"position":[[202,3],[330,3],[448,3]]},"1776":{"position":[[346,3],[448,3]]},"1794":{"position":[[1113,3],[1229,3],[4020,3],[4154,3],[4281,3]]},"1800":{"position":[[682,3],[879,3]]},"1802":{"position":[[237,3]]},"1827":{"position":[[469,3],[551,4],[707,3],[904,3]]},"1829":{"position":[[793,3],[815,3]]},"1838":{"position":[[879,3]]},"1840":{"position":[[909,3],[1033,3]]},"1908":{"position":[[339,3],[526,3]]},"1959":{"position":[[690,3]]},"1965":{"position":[[32,3],[125,4],[134,3],[487,3]]},"1967":{"position":[[106,4],[350,4],[609,4]]},"1969":{"position":[[110,4],[429,3]]},"2101":{"position":[[1817,3],[1901,3],[1992,3],[4218,3],[4290,3]]},"2200":{"position":[[1114,4],[1444,4]]},"2231":{"position":[[77,3],[2683,3],[2758,3]]},"2233":{"position":[[76,3],[2631,3],[2706,3]]},"2235":{"position":[[2500,3],[2575,3]]},"2237":{"position":[[2449,3],[2524,3]]},"2239":{"position":[[2462,3],[2537,3]]},"2241":{"position":[[2575,3],[2650,3]]},"2243":{"position":[[2536,3],[2611,3]]},"2247":{"position":[[2609,3],[2684,3]]},"2249":{"position":[[2590,3],[2665,3]]},"2251":{"position":[[2486,3],[2561,3]]},"2253":{"position":[[2602,3],[2677,3]]},"2255":{"position":[[2467,3],[2542,3]]},"2257":{"position":[[2382,3],[2457,3]]},"2267":{"position":[[2557,3],[2632,3]]},"2271":{"position":[[77,3],[1244,4],[1574,4]]},"2273":{"position":[[77,3],[243,3],[294,3],[341,3],[497,3],[530,3],[2599,3],[2674,3]]},"2275":{"position":[[77,3],[2515,3],[2590,3]]},"2277":{"position":[[77,3],[2521,3],[2596,3]]},"2283":{"position":[[172,3],[1021,4]]},"2306":{"position":[[78,3],[1138,4],[1468,4]]},"2308":{"position":[[1027,4],[1357,4]]},"2310":{"position":[[147,3],[1052,4],[1382,4]]},"2312":{"position":[[83,3],[1204,4],[1534,4]]},"2314":{"position":[[1030,4],[1360,4]]},"2316":{"position":[[152,3],[1062,4],[1392,4],[2048,4],[2084,4]]},"2318":{"position":[[1161,4],[1491,4]]},"2350":{"position":[[2866,3],[2941,3]]},"2352":{"position":[[2880,3],[2955,3]]},"2354":{"position":[[2995,3],[3070,3]]},"2356":{"position":[[1743,3],[1806,3],[2966,3],[3029,3]]},"2368":{"position":[[447,3],[494,3],[761,3],[794,3],[1934,3],[1997,3],[3157,3],[3220,3]]},"2374":{"position":[[575,3],[649,3]]}}}],["tls=fals",{"_index":2369,"t":{"2200":{"position":[[1970,12]]},"2271":{"position":[[2100,12]]},"2306":{"position":[[1994,12]]},"2308":{"position":[[1883,12]]},"2310":{"position":[[188,9],[1908,12]]},"2312":{"position":[[2060,12]]},"2314":{"position":[[1886,12]]},"2316":{"position":[[198,9],[1918,12],[2137,9],[2399,9]]},"2318":{"position":[[2017,12]]}}}],["tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_128_gcm_sha256",{"_index":2478,"t":{"2283":{"position":[[266,77]]}}}],["tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_gcm_sha256",{"_index":2567,"t":{"2374":{"position":[[98,295]]}}}],["tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384",{"_index":2479,"t":{"2283":{"position":[[344,77]]}}}],["tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_chacha20_poly1305_sha256",{"_index":2480,"t":{"2283":{"position":[[422,85]]}}}],["tls_ecdhe_rsa_with_3des_ede_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_128_gcm_sha256",{"_index":2481,"t":{"2283":{"position":[[508,109]]}}}],["tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305",{"_index":2482,"t":{"2283":{"position":[[618,110]]}}}],["tls_ecdhe_rsa_with_chacha20_poly1305_sha256,tls_rsa_with_3des_ede_cbc_sha,tls_rsa_with_aes_128_cbc_sha",{"_index":2483,"t":{"2283":{"position":[[729,103]]}}}],["tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_256_gcm_sha384",{"_index":2484,"t":{"2283":{"position":[[833,92]]}}}],["tlscertfil",{"_index":2560,"t":{"2368":{"position":[[79,11]]}}}],["tlsciphersuit",{"_index":2566,"t":{"2374":{"position":[[79,15]]}}}],["tlsprivatekeyfil",{"_index":2561,"t":{"2368":{"position":[[168,17]]}}}],["togeth",{"_index":1161,"t":{"1832":{"position":[[853,9]]}}}],["token",{"_index":82,"t":{"1644":{"position":[[40,5],[72,5],[106,5],[138,5]]},"1658":{"position":[[130,5]]},"1662":{"position":[[684,5],[716,5],[763,5],[790,5]]},"1671":{"position":[[167,5]]},"1723":{"position":[[769,5],[804,5]]},"1740":{"position":[[516,5]]},"1742":{"position":[[1129,7]]},"1744":{"position":[[718,5],[788,5],[1740,6],[2398,5],[2436,5],[2479,5]]},"1746":{"position":[[558,5],[1647,5],[1843,5],[2167,6],[2236,5],[2278,5]]},"1748":{"position":[[82,7],[221,6],[987,6]]},"1764":{"position":[[257,5]]},"1769":{"position":[[40,5],[132,5],[213,5],[315,5]]},"1792":{"position":[[166,5]]},"1794":{"position":[[2701,5],[2806,5],[2853,5],[2885,5],[3000,5]]},"1796":{"position":[[9,6],[49,6]]},"1798":{"position":[[4,6]]},"1800":{"position":[[11,5],[62,6],[187,5],[621,6],[715,5],[1097,6],[1328,5],[1367,5]]},"1802":{"position":[[10,5],[60,5],[131,5]]},"1804":{"position":[[28,7],[52,5],[94,5],[204,5],[234,5]]},"1806":{"position":[[6,5],[121,5],[212,5],[375,5],[444,5],[490,5],[750,7],[779,5],[919,5]]},"1808":{"position":[[22,5],[54,6],[71,5],[226,5],[257,5],[331,5],[385,6],[422,5],[476,6]]},"1810":{"position":[[33,5],[92,6],[282,7],[300,6]]},"1811":{"position":[[14,6],[76,5],[92,7],[112,5],[144,5],[169,6],[187,5],[268,6],[313,6],[374,6],[436,6],[491,5],[504,8],[526,6],[537,7],[559,5],[595,5],[617,5],[667,5],[822,5],[1103,5],[1155,5],[1270,7],[1314,5],[1383,5],[1474,5],[1533,5],[1566,7],[1583,5],[1618,5],[1823,5],[1879,6],[1944,6],[2064,5],[2307,5],[2334,7]]},"1817":{"position":[[166,5],[272,5],[341,5],[407,5]]},"1819":{"position":[[255,6]]},"1838":{"position":[[288,5],[344,5],[386,5],[581,6]]},"1842":{"position":[[90,5],[185,5],[227,5],[393,6],[959,5],[1073,5]]},"1844":{"position":[[411,5]]},"1848":{"position":[[207,5]]},"1866":{"position":[[29,5]]},"1895":{"position":[[416,5]]},"1904":{"position":[[752,6],[849,5],[1178,5],[1263,5],[1448,5],[1673,5]]},"1906":{"position":[[735,5]]},"1910":{"position":[[440,6],[698,6]]},"1912":{"position":[[127,6],[571,5]]},"1920":{"position":[[80,5],[165,5],[178,8]]},"1922":{"position":[[277,5]]},"1965":{"position":[[608,6],[769,5]]},"2001":{"position":[[303,5],[309,7]]},"2049":{"position":[[943,6]]},"2101":{"position":[[3111,5]]},"2119":{"position":[[174,5],[237,5],[333,5]]},"2131":{"position":[[469,5]]},"2154":{"position":[[259,5]]},"2225":{"position":[[244,5],[354,5]]},"2356":{"position":[[830,5],[2053,5]]},"2368":{"position":[[1021,5],[2244,5]]},"2387":{"position":[[120,6]]}}}],["token=secret",{"_index":1176,"t":{"1838":{"position":[[638,12]]},"1842":{"position":[[450,12]]},"1895":{"position":[[959,12],[1166,13]]}}}],["tokenreview",{"_index":2508,"t":{"2326":{"position":[[256,13]]}}}],["tool",{"_index":884,"t":{"1754":{"position":[[61,4]]},"1760":{"position":[[20,4],[1743,4]]},"1947":{"position":[[61,4]]},"2007":{"position":[[98,6]]},"2081":{"position":[[23,4]]}}}],["top",{"_index":1969,"t":{"2089":{"position":[[218,3]]}}}],["topolog",{"_index":720,"t":{"1742":{"position":[[1205,9],[1267,9]]},"1746":{"position":[[835,9],[904,9],[980,8]]}}}],["total",{"_index":1583,"t":{"1953":{"position":[[1203,5]]}}}],["track",{"_index":1455,"t":{"1929":{"position":[[323,7]]},"2061":{"position":[[266,6]]}}}],["tradit",{"_index":797,"t":{"1748":{"position":[[815,11]]}}}],["traefik",{"_index":23,"t":{"1636":{"position":[[318,7],[538,7]]},"1675":{"position":[[736,7],[842,7],[886,7],[1120,7],[1283,7],[1377,7],[1385,9],[1624,7]]},"1794":{"position":[[5929,8]]},"1876":{"position":[[1638,7]]},"1878":{"position":[[63,9],[531,7],[599,7]]},"1931":{"position":[[113,8]]},"1937":{"position":[[318,7]]},"1939":{"position":[[963,7],[1038,7]]},"1943":{"position":[[202,8]]},"2023":{"position":[[16,7]]},"2027":{"position":[[0,8],[107,7],[270,8],[521,8],[623,7],[657,8],[731,7],[774,7],[796,7],[819,8],[858,7],[906,7],[934,7]]},"2059":{"position":[[232,8]]},"2095":{"position":[[942,7],[1049,7],[1129,7],[1227,7],[1698,7],[1826,7],[1926,7],[2381,7],[2509,7],[2590,7]]},"2154":{"position":[[0,8],[9,8],[50,7],[96,7],[118,7],[131,7],[152,7]]}}}],["traefik.skip",{"_index":1514,"t":{"1939":{"position":[[1019,12]]}}}],["traefik.yaml",{"_index":1502,"t":{"1939":{"position":[[565,13],[699,12]]},"2027":{"position":[[411,12]]}}}],["traefik.yaml.skip",{"_index":1501,"t":{"1939":{"position":[[444,17],[668,17]]}}}],["traffic",{"_index":1000,"t":{"1782":{"position":[[719,7]]},"1794":{"position":[[2259,7]]},"1945":{"position":[[979,7],[1194,8],[1624,8],[1759,8],[1888,8]]},"1953":{"position":[[309,8],[444,7],[503,7],[1320,7]]},"1957":{"position":[[329,7],[384,7]]},"1983":{"position":[[396,7],[1082,8]]},"1985":{"position":[[463,7]]},"2095":{"position":[[86,7],[633,7]]},"2421":{"position":[[203,7]]}}}],["trail",{"_index":1376,"t":{"1904":{"position":[[381,8]]}}}],["transmit",{"_index":1046,"t":{"1800":{"position":[[848,12]]},"2117":{"position":[[396,11]]}}}],["transpar",{"_index":1631,"t":{"1963":{"position":[[459,13],[666,13],[1038,13]]}}}],["transport",{"_index":2356,"t":{"2200":{"position":[[868,9],[997,9],[1195,9],[1322,9]]},"2271":{"position":[[998,9],[1127,9],[1325,9],[1452,9]]},"2306":{"position":[[892,9],[1021,9],[1219,9],[1346,9]]},"2308":{"position":[[781,9],[910,9],[1108,9],[1235,9]]},"2310":{"position":[[806,9],[935,9],[1133,9],[1260,9]]},"2312":{"position":[[958,9],[1087,9],[1285,9],[1412,9]]},"2314":{"position":[[784,9],[913,9],[1111,9],[1238,9]]},"2316":{"position":[[816,9],[945,9],[1143,9],[1270,9]]},"2318":{"position":[[915,9],[1044,9],[1242,9],[1369,9]]}}}],["trap",{"_index":2345,"t":{"2200":{"position":[[488,4]]},"2271":{"position":[[618,4]]},"2306":{"position":[[512,4]]},"2308":{"position":[[401,4]]},"2310":{"position":[[426,4]]},"2312":{"position":[[578,4]]},"2314":{"position":[[404,4]]},"2316":{"position":[[436,4]]},"2318":{"position":[[535,4]]}}}],["treat",{"_index":1500,"t":{"1939":{"position":[[381,7]]}}}],["tree",{"_index":2227,"t":{"2137":{"position":[[33,8]]}}}],["tri",{"_index":1628,"t":{"1963":{"position":[[275,3]]},"2167":{"position":[[355,6]]},"2310":{"position":[[2158,3],[2398,3],[2638,3]]},"2316":{"position":[[2203,3]]}}}],["trigger",{"_index":871,"t":{"1750":{"position":[[4179,7]]}}}],["true",{"_index":459,"t":{"1691":{"position":[[627,4]]},"1712":{"position":[[98,4]]},"1862":{"position":[[349,6]]},"1876":{"position":[[562,4],[611,4],[1047,5]]},"1878":{"position":[[646,4],[690,4]]},"1908":{"position":[[422,4],[779,4]]},"1912":{"position":[[150,4]]},"1949":{"position":[[536,4],[725,5],[919,4],[1110,5]]},"2005":{"position":[[260,4],[284,4],[317,4],[341,4]]},"2021":{"position":[[438,4],[463,4]]},"2053":{"position":[[444,4],[731,4],[807,4],[1130,4],[1942,4],[2036,4]]},"2093":{"position":[[3307,4],[3372,4],[3390,4],[3404,4],[3452,4]]},"2099":{"position":[[206,4],[231,4],[803,4],[828,4]]},"2119":{"position":[[60,5]]},"2129":{"position":[[63,5]]},"2163":{"position":[[547,4],[652,6],[895,4]]},"2308":{"position":[[2066,6],[2131,4]]},"2314":{"position":[[2069,6],[2134,4]]},"2360":{"position":[[114,5]]},"2362":{"position":[[115,5]]},"2370":{"position":[[120,4]]},"2404":{"position":[[180,5]]},"2414":{"position":[[198,5]]}}}],["trust",{"_index":757,"t":{"1744":{"position":[[839,5]]},"1746":{"position":[[596,5],[801,5],[1107,5]]},"1802":{"position":[[174,6]]},"2200":{"position":[[1514,8],[1998,7]]},"2271":{"position":[[1644,8],[2128,7]]},"2306":{"position":[[1538,8],[2022,7]]},"2308":{"position":[[1427,8],[1911,7]]},"2310":{"position":[[1452,8],[1936,7]]},"2312":{"position":[[1604,8],[2088,7]]},"2314":{"position":[[1430,8],[1914,7]]},"2316":{"position":[[1462,8],[1946,7]]},"2318":{"position":[[272,7],[1561,8],[2045,7],[2134,8],[2181,7],[2197,7],[2265,7],[2333,7]]}}}],["trustabl",{"_index":1725,"t":{"1983":{"position":[[1304,9]]}}}],["trustedip",{"_index":1309,"t":{"1878":{"position":[[651,11]]}}}],["tshark",{"_index":603,"t":{"1721":{"position":[[635,7],[760,6]]}}}],["tti",{"_index":442,"t":{"1689":{"position":[[853,3]]}}}],["ttl",{"_index":1092,"t":{"1811":{"position":[[1280,3]]}}}],["tunabl",{"_index":111,"t":{"1648":{"position":[[337,8]]},"1662":{"position":[[2054,8]]},"1794":{"position":[[8432,8]]}}}],["tune",{"_index":109,"t":{"1648":{"position":[[296,6]]},"1662":{"position":[[2013,6]]},"1794":{"position":[[8391,6]]}}}],["tunnel",{"_index":1002,"t":{"1782":{"position":[[929,7],[1198,7],[1249,6],[1456,7],[1598,6],[1709,7],[1855,6]]},"1951":{"position":[[42,7],[758,7],[1073,7],[1282,7],[1619,7]]},"1957":{"position":[[190,7],[358,6],[413,7]]},"1983":{"position":[[310,9],[422,7]]}}}],["turn",{"_index":203,"t":{"1662":{"position":[[356,4]]},"1774":{"position":[[37,4]]},"1794":{"position":[[367,4]]},"2085":{"position":[[285,6]]}}}],["tweak",{"_index":1344,"t":{"1895":{"position":[[605,8]]}}}],["two",{"_index":175,"t":{"1660":{"position":[[125,3]]},"1832":{"position":[[415,3]]},"1838":{"position":[[13,3]]},"1844":{"position":[[113,3]]},"1882":{"position":[[55,3]]},"1895":{"position":[[830,3]]},"1935":{"position":[[10,3]]},"1947":{"position":[[577,3]]},"1961":{"position":[[21,3]]},"1975":{"position":[[0,3]]},"2087":{"position":[[10,3]]},"2163":{"position":[[38,3],[341,3]]}}}],["type",{"_index":910,"t":{"1760":{"position":[[328,4],[640,4],[1717,5],[1760,5]]},"1800":{"position":[[1373,5]]},"1804":{"position":[[19,5],[100,5],[158,4]]},"1817":{"position":[[55,4]]},"1838":{"position":[[795,5]]},"1876":{"position":[[528,5]]},"1957":{"position":[[436,4]]},"2053":{"position":[[1815,4]]},"2075":{"position":[[529,4]]},"2436":{"position":[[173,5]]}}}],["types=internalip,externalip,hostnam",{"_index":2445,"t":{"2231":{"position":[[1850,36]]},"2233":{"position":[[1798,36]]},"2235":{"position":[[1667,36]]},"2237":{"position":[[1616,36]]},"2239":{"position":[[1629,36]]},"2241":{"position":[[1742,36]]},"2243":{"position":[[1703,36]]},"2247":{"position":[[1776,36]]},"2249":{"position":[[1757,36]]},"2251":{"position":[[1653,36]]},"2253":{"position":[[1769,36]]},"2255":{"position":[[1634,36]]},"2257":{"position":[[1549,36]]},"2267":{"position":[[1724,36]]},"2273":{"position":[[1766,36]]},"2275":{"position":[[1682,36]]},"2277":{"position":[[1688,36]]},"2350":{"position":[[2033,36]]},"2352":{"position":[[2047,36]]},"2354":{"position":[[2162,36]]}}}],["typic",{"_index":1343,"t":{"1895":{"position":[[441,9]]},"1985":{"position":[[439,10]]},"2075":{"position":[[1015,9]]}}}],["u",{"_index":462,"t":{"1693":{"position":[[79,1]]},"1697":{"position":[[177,1],[206,1]]},"1862":{"position":[[173,1]]},"2200":{"position":[[553,1],[769,1]]},"2223":{"position":[[232,1]]},"2231":{"position":[[462,1]]},"2233":{"position":[[445,1]]},"2235":{"position":[[319,1]]},"2237":{"position":[[285,1]]},"2239":{"position":[[298,1]]},"2241":{"position":[[389,1]]},"2243":{"position":[[296,1]]},"2247":{"position":[[362,1]]},"2249":{"position":[[384,1]]},"2251":{"position":[[280,1]]},"2253":{"position":[[415,1]]},"2255":{"position":[[276,1]]},"2257":{"position":[[227,1]]},"2267":{"position":[[357,1]]},"2271":{"position":[[683,1],[899,1]]},"2273":{"position":[[424,1]]},"2275":{"position":[[359,1]]},"2277":{"position":[[371,1]]},"2279":{"position":[[413,1]]},"2283":{"position":[[965,1]]},"2286":{"position":[[314,1]]},"2288":{"position":[[244,1]]},"2290":{"position":[[264,1]]},"2292":{"position":[[360,1]]},"2294":{"position":[[297,1]]},"2301":{"position":[[231,1]]},"2303":{"position":[[241,1]]},"2306":{"position":[[577,1],[793,1]]},"2308":{"position":[[466,1],[682,1]]},"2310":{"position":[[491,1],[707,1]]},"2312":{"position":[[643,1],[859,1]]},"2314":{"position":[[469,1],[685,1]]},"2316":{"position":[[501,1],[717,1]]},"2318":{"position":[[600,1],[816,1]]},"2324":{"position":[[111,1]]},"2350":{"position":[[531,1],[622,1]]},"2352":{"position":[[517,1],[608,1]]},"2354":{"position":[[573,1],[664,1]]},"2356":{"position":[[481,1]]},"2358":{"position":[[538,1]]},"2368":{"position":[[699,1]]}}}],["u:%g",{"_index":2376,"t":{"2206":{"position":[[269,5]]},"2210":{"position":[[256,5]]},"2214":{"position":[[181,5]]},"2216":{"position":[[232,5]]},"2335":{"position":[[286,5]]},"2339":{"position":[[211,5]]},"2343":{"position":[[144,5]]}}}],["ubuntu",{"_index":1522,"t":{"1945":{"position":[[429,6]]},"1977":{"position":[[148,7]]},"2063":{"position":[[4,6]]}}}],["udp",{"_index":1703,"t":{"1983":{"position":[[114,3],[163,3]]},"1985":{"position":[[180,3],[287,3],[363,3]]},"2095":{"position":[[848,3]]}}}],["ufw",{"_index":502,"t":{"1704":{"position":[[41,3],[53,4],[90,3],[120,3],[161,3]]}}}],["ufw(uncompl",{"_index":501,"t":{"1704":{"position":[[0,17]]}}}],["ui",{"_index":2276,"t":{"2159":{"position":[[1119,2]]}}}],["uid",{"_index":2577,"t":{"2406":{"position":[[146,4]]}}}],["ulogd2",{"_index":598,"t":{"1721":{"position":[[446,7],[496,6]]}}}],["unauthor",{"_index":2209,"t":{"2127":{"position":[[136,12]]}}}],["under",{"_index":1497,"t":{"1939":{"position":[[13,5]]},"1963":{"position":[[1349,5]]},"2061":{"position":[[349,5]]},"2176":{"position":[[1204,5],[1713,5]]}}}],["undergo",{"_index":2169,"t":{"2105":{"position":[[222,10]]}}}],["underscor",{"_index":1474,"t":{"1933":{"position":[[811,12]]}}}],["understand",{"_index":2221,"t":{"2133":{"position":[[172,10]]}}}],["uninstal",{"_index":1495,"t":{"1937":{"position":[[205,11],[371,9]]},"2007":{"position":[[3,12],[285,9],[403,12]]},"2009":{"position":[[3,9]]},"2011":{"position":[[3,9]]},"2053":{"position":[[1031,9]]}}}],["uninstall.sh",{"_index":1755,"t":{"2009":{"position":[[61,12]]},"2011":{"position":[[67,12]]},"2049":{"position":[[293,13]]}}}],["uniqu",{"_index":1467,"t":{"1933":{"position":[[531,7]]},"1975":{"position":[[238,6]]}}}],["unit",{"_index":773,"t":{"1744":{"position":[[2523,5]]},"1746":{"position":[[2322,5]]},"1947":{"position":[[857,5]]},"2003":{"position":[[289,4]]},"2176":{"position":[[1809,5]]}}}],["unix",{"_index":952,"t":{"1767":{"position":[[744,5]]},"1794":{"position":[[4606,5]]}}}],["unknown",{"_index":2486,"t":{"2288":{"position":[[1408,7],[1497,7]]},"2290":{"position":[[1476,7],[1565,7]]},"2292":{"position":[[1561,7],[1650,7]]},"2294":{"position":[[1458,7],[1547,7]]}}}],["unless",{"_index":1076,"t":{"1806":{"position":[[846,6]]},"2095":{"position":[[561,6]]},"2247":{"position":[[222,6]]},"2410":{"position":[[101,6]]}}}],["unprivileg",{"_index":974,"t":{"1771":{"position":[[362,12]]}}}],["unrestrict",{"_index":1798,"t":{"2021":{"position":[[2953,12],[3090,12],[3262,12]]},"2093":{"position":[[2147,12],[3183,12],[4294,12],[4397,12],[4999,12],[5113,12],[5295,12],[5436,12]]}}}],["unset",{"_index":1967,"t":{"2089":{"position":[[97,5]]}}}],["unsupport",{"_index":2280,"t":{"2159":{"position":[[1940,11]]},"2167":{"position":[[1091,11]]}}}],["until",{"_index":1077,"t":{"1806":{"position":[[1043,5]]},"1999":{"position":[[360,5]]}}}],["unus",{"_index":1115,"t":{"1817":{"position":[[390,9]]},"2125":{"position":[[268,8]]}}}],["up",{"_index":291,"t":{"1675":{"position":[[1080,2],[1244,2],[1427,2],[1592,2],[1748,2],[1918,2],[2116,2],[2304,2],[2468,2],[2628,2]]},"1742":{"position":[[2776,2]]},"1756":{"position":[[1026,2],[1352,3],[1478,3],[1727,3]]},"1758":{"position":[[1211,3],[1458,3]]},"1760":{"position":[[1442,2]]},"1806":{"position":[[800,2],[1246,2]]},"1817":{"position":[[22,2],[108,2],[152,2]]},"1819":{"position":[[41,2],[85,2]]},"1821":{"position":[[139,2]]},"1834":{"position":[[8,2]]},"1838":{"position":[[1577,2]]},"1840":{"position":[[271,2],[535,2]]},"1884":{"position":[[167,2]]},"1902":{"position":[[69,2]]},"1947":{"position":[[522,2]]},"1983":{"position":[[869,2]]},"1989":{"position":[[141,2],[164,2],[187,2],[213,2]]},"1995":{"position":[[210,2],[233,2],[256,2],[282,2]]},"2075":{"position":[[606,2]]},"2135":{"position":[[377,2]]},"2156":{"position":[[244,2]]},"2163":{"position":[[289,2]]},"2167":{"position":[[695,2]]},"2231":{"position":[[70,2]]},"2271":{"position":[[70,2]]},"2273":{"position":[[70,2]]},"2275":{"position":[[70,2]]},"2277":{"position":[[70,2]]}}}],["updat",{"_index":584,"t":{"1719":{"position":[[126,6]]},"1740":{"position":[[975,7],[1024,7],[1095,8]]},"1744":{"position":[[80,7],[214,7],[334,7],[977,7],[1149,7],[1846,7],[2009,7]]},"1746":{"position":[[103,7],[237,7],[357,7],[1196,7],[1373,7],[1486,7],[1613,7],[1771,7],[1835,7]]},"1748":{"position":[[356,7],[520,7],[1088,7],[1226,8]]},"1939":{"position":[[1100,7]]},"1947":{"position":[[588,6]]},"2131":{"position":[[552,8],[827,6]]},"2163":{"position":[[2477,8]]}}}],["upgrad",{"_index":1224,"t":{"1846":{"position":[[226,8],[314,7]]},"1898":{"position":[[0,9],[179,9]]},"1900":{"position":[[23,9],[193,7],[254,7],[411,7],[475,7],[573,7],[621,7],[759,7],[843,7],[939,8],[963,7],[1057,8]]},"1939":{"position":[[1120,9]]},"1945":{"position":[[2269,9]]},"2021":{"position":[[1180,10],[1661,8],[1715,7],[1841,7]]},"2152":{"position":[[171,7]]},"2156":{"position":[[34,9]]},"2159":{"position":[[27,8],[59,7],[127,9],[229,7],[302,8],[387,9],[506,8],[562,7],[697,7],[923,8],[994,7],[1132,9],[1219,7],[1393,9],[1578,7],[1669,7],[1692,7],[1721,7],[1867,10],[1889,7]]},"2161":{"position":[[11,7],[269,7],[320,7]]},"2163":{"position":[[60,9],[114,9],[209,7],[305,7],[364,7],[510,7],[686,7],[694,8],[722,7],[858,7],[1058,7],[1093,7],[1101,8],[1129,7],[1370,8],[1694,7],[2011,7],[2222,8],[2399,7],[2568,7],[2622,7],[2690,7],[2734,7]]},"2165":{"position":[[8,7],[123,10],[134,7]]},"2167":{"position":[[0,8],[70,8],[872,7],[1018,10],[1040,7]]},"2169":{"position":[[3,7],[157,7],[233,7],[406,7]]},"2171":{"position":[[15,7]]}}}],["upgrade.cattle.io/v1",{"_index":2286,"t":{"2163":{"position":[[432,20],[781,20],[2280,20]]}}}],["upon",{"_index":1619,"t":{"1959":{"position":[[111,4]]},"1993":{"position":[[182,4]]}}}],["upstream",{"_index":1640,"t":{"1963":{"position":[[977,8]]}}}],["uptim",{"_index":1151,"t":{"1832":{"position":[[288,6]]}}}],["url",{"_index":850,"t":{"1750":{"position":[[3044,3]]},"1767":{"position":[[1168,3]]},"1794":{"position":[[5096,3]]},"1829":{"position":[[1284,4]]},"1840":{"position":[[19,3]]},"1844":{"position":[[370,3]]},"1876":{"position":[[747,3],[885,3],[1557,4]]},"1963":{"position":[[294,4]]},"2049":{"position":[[855,5]]},"2053":{"position":[[2122,3],[2152,4],[2273,4]]},"2163":{"position":[[1917,3],[2003,3]]}}}],["url_effect",{"_index":1428,"t":{"1916":{"position":[[93,18]]},"1924":{"position":[[141,18]]}}}],["us",{"_index":49,"t":{"1640":{"position":[[151,3],[336,5]]},"1644":{"position":[[81,3],[152,3]]},"1648":{"position":[[628,4]]},"1650":{"position":[[96,3],[139,4]]},"1656":{"position":[[50,3]]},"1658":{"position":[[55,3],[124,3]]},"1660":{"position":[[502,3]]},"1662":{"position":[[725,3],[804,3],[1884,4],[2183,3],[2226,4],[3452,3]]},"1738":{"position":[[51,3]]},"1740":{"position":[[109,4],[499,5],[874,3],[1146,4],[1418,3]]},"1742":{"position":[[563,4],[572,4],[990,4],[1100,4],[1277,5],[1379,5],[1613,3],[1717,3],[1844,3]]},"1744":{"position":[[34,3],[206,3],[279,3],[549,5],[671,5],[776,3],[862,5],[960,4],[1114,3],[1439,4],[2297,4],[2424,3]]},"1746":{"position":[[57,3],[229,3],[302,3],[712,3],[1063,4],[1142,5],[1338,3],[2224,3]]},"1748":{"position":[[53,4],[301,5],[465,3]]},"1750":{"position":[[1973,4]]},"1756":{"position":[[368,5],[409,5],[1264,5],[1305,5]]},"1758":{"position":[[304,5],[345,5],[905,4],[1123,5],[1164,5]]},"1760":{"position":[[1053,6],[1170,4],[1620,4],[1666,4],[1732,5]]},"1762":{"position":[[374,5]]},"1764":{"position":[[156,5],[220,5]]},"1767":{"position":[[233,4],[353,4],[461,4]]},"1769":{"position":[[86,4],[255,4],[431,4],[511,5]]},"1776":{"position":[[199,4],[300,4]]},"1782":{"position":[[88,3],[167,3],[676,3],[919,3],[1187,4],[1445,4],[1698,4]]},"1786":{"position":[[37,6]]},"1790":{"position":[[106,3]]},"1792":{"position":[[55,3],[104,3],[160,3],[204,3],[285,3]]},"1794":{"position":[[897,4],[1031,4],[1422,3],[1523,3],[2216,3],[2747,4],[2921,4],[3141,4],[3225,5],[4051,4],[4177,4],[4294,4],[6994,3],[7115,3],[7158,4],[7635,4],[8986,4]]},"1796":{"position":[[4,4]]},"1800":{"position":[[266,4],[628,4],[1299,5]]},"1802":{"position":[[66,4],[140,5]]},"1806":{"position":[[225,4],[504,4],[546,4],[883,4],[939,4],[1145,5]]},"1810":{"position":[[319,4]]},"1811":{"position":[[21,3],[1112,4],[1187,4],[1487,5],[1904,3]]},"1817":{"position":[[76,5],[328,3],[416,4]]},"1821":{"position":[[30,5]]},"1832":{"position":[[250,3],[654,4]]},"1838":{"position":[[316,4],[436,4],[492,4],[1335,3]]},"1840":{"position":[[538,5],[680,4]]},"1842":{"position":[[42,4],[128,5],[383,5],[1064,3],[1084,5]]},"1844":{"position":[[427,4]]},"1848":{"position":[[226,4],[454,5],[909,4]]},"1850":{"position":[[32,5]]},"1882":{"position":[[49,5]]},"1893":{"position":[[230,4],[821,3]]},"1902":{"position":[[51,4]]},"1904":{"position":[[47,3],[180,3]]},"1906":{"position":[[121,3],[277,6],[324,6],[917,3],[1074,3]]},"1908":{"position":[[132,3],[241,4],[834,3]]},"1910":{"position":[[265,5]]},"1922":{"position":[[365,5]]},"1929":{"position":[[466,5],[523,5]]},"1933":{"position":[[648,3],[1206,4]]},"1945":{"position":[[344,3],[378,5],[469,5],[860,3],[1132,3],[1307,3],[1426,3],[1575,3],[1696,3],[1837,3],[2326,3]]},"1947":{"position":[[634,5]]},"1951":{"position":[[73,4],[495,4],[748,3],[1062,4],[1271,4],[1441,5],[1458,4],[1555,4],[1608,4]]},"1953":{"position":[[261,5],[1379,5]]},"1955":{"position":[[402,5]]},"1957":{"position":[[51,3],[342,3],[397,3],[883,3],[1696,3],[1735,5]]},"1959":{"position":[[66,3],[228,3],[283,3],[380,5],[645,4],[852,5]]},"1963":{"position":[[315,3],[377,4],[889,6]]},"1965":{"position":[[229,4],[310,4],[395,4],[838,5]]},"1967":{"position":[[100,5],[390,4],[444,4],[496,4],[649,4],[703,4],[755,4]]},"1969":{"position":[[104,5]]},"1975":{"position":[[155,3]]},"1977":{"position":[[121,3]]},"1979":{"position":[[102,5],[195,5]]},"1981":{"position":[[642,5]]},"1983":{"position":[[150,4],[195,5],[241,5],[297,4],[453,3]]},"1985":{"position":[[554,5]]},"1987":{"position":[[113,5]]},"1991":{"position":[[102,5],[186,3]]},"1997":{"position":[[307,5],[337,5]]},"2005":{"position":[[37,3]]},"2007":{"position":[[178,5],[242,5]]},"2021":{"position":[[882,4]]},"2053":{"position":[[47,3],[262,5],[339,4],[1055,3],[1317,3],[1396,3],[2243,3],[2606,4]]},"2059":{"position":[[197,5]]},"2061":{"position":[[48,4],[105,5],[173,4],[516,5]]},"2075":{"position":[[418,5],[462,3]]},"2079":{"position":[[384,3]]},"2093":{"position":[[4168,3],[4423,3],[4618,3]]},"2095":{"position":[[1102,4],[1162,3]]},"2099":{"position":[[650,4],[1273,4]]},"2101":{"position":[[2802,3]]},"2105":{"position":[[253,4]]},"2107":{"position":[[481,4]]},"2113":{"position":[[437,3]]},"2115":{"position":[[423,3]]},"2119":{"position":[[309,5],[443,3]]},"2121":{"position":[[132,4]]},"2123":{"position":[[100,5],[184,5]]},"2131":{"position":[[54,4],[126,4]]},"2156":{"position":[[212,5]]},"2159":{"position":[[36,5],[1103,3],[1358,3]]},"2165":{"position":[[23,5]]},"2167":{"position":[[50,5]]},"2169":{"position":[[76,5]]},"2176":{"position":[[342,4],[1490,3]]},"2200":{"position":[[325,4]]},"2271":{"position":[[455,4]]},"2288":{"position":[[1980,3]]},"2290":{"position":[[188,3],[329,4],[383,3],[2048,3]]},"2292":{"position":[[2133,3]]},"2294":{"position":[[2030,3]]},"2306":{"position":[[349,4]]},"2308":{"position":[[238,4]]},"2310":{"position":[[263,4]]},"2312":{"position":[[415,4]]},"2314":{"position":[[241,4]]},"2316":{"position":[[273,4]]},"2318":{"position":[[372,4]]},"2321":{"position":[[84,3]]},"2326":{"position":[[364,3]]},"2345":{"position":[[62,6]]},"2347":{"position":[[62,6]]},"2350":{"position":[[29,5],[127,5]]},"2352":{"position":[[29,5],[113,5]]},"2354":{"position":[[29,5],[154,5]]},"2356":{"position":[[29,5],[101,5]]},"2358":{"position":[[29,5],[138,5]]},"2360":{"position":[[39,5],[123,5]]},"2362":{"position":[[39,5],[124,5]]},"2366":{"position":[[29,5],[122,5]]},"2368":{"position":[[29,5],[134,3],[244,5]]},"2370":{"position":[[39,5],[152,3],[178,5]]},"2374":{"position":[[29,5],[429,5]]},"2377":{"position":[[104,4],[153,3]]},"2381":{"position":[[53,3]]},"2412":{"position":[[37,3]]},"2418":{"position":[[143,3]]},"2421":{"position":[[47,3],[126,3]]},"2436":{"position":[[26,3]]}}}],["usabl",{"_index":673,"t":{"1740":{"position":[[1009,7]]},"1999":{"position":[[353,6]]}}}],["usag",{"_index":198,"t":{"1662":{"position":[[180,6]]},"1794":{"position":[[190,6]]},"1811":{"position":[[176,6],[1428,6]]},"2310":{"position":[[2138,6],[2378,6],[2618,6]]},"2316":{"position":[[2183,6]]}}}],["user",{"_index":435,"t":{"1689":{"position":[[571,4],[610,4],[830,4]]},"1693":{"position":[[12,4],[70,4]]},"1771":{"position":[[375,5]]},"1838":{"position":[[1302,4]]},"1918":{"position":[[21,4],[231,4],[284,4],[386,4],[519,4],[573,4],[664,4]]},"1920":{"position":[[92,4],[160,4]]},"1922":{"position":[[265,4]]},"1924":{"position":[[408,4]]},"1947":{"position":[[401,5]]},"1965":{"position":[[646,4],[700,4]]},"2101":{"position":[[1530,4]]},"2109":{"position":[[232,6]]},"2231":{"position":[[2335,4]]},"2233":{"position":[[2283,4]]},"2235":{"position":[[2152,4]]},"2237":{"position":[[2101,4]]},"2239":{"position":[[2114,4]]},"2241":{"position":[[2227,4]]},"2243":{"position":[[2188,4]]},"2247":{"position":[[2261,4]]},"2249":{"position":[[2242,4]]},"2251":{"position":[[2138,4]]},"2253":{"position":[[2254,4]]},"2255":{"position":[[2119,4]]},"2257":{"position":[[2034,4]]},"2267":{"position":[[2209,4]]},"2273":{"position":[[2251,4]]},"2275":{"position":[[2167,4]]},"2277":{"position":[[2173,4]]},"2350":{"position":[[2518,4]]},"2352":{"position":[[2532,4]]},"2354":{"position":[[2647,4]]},"2377":{"position":[[214,5]]},"2389":{"position":[[67,5]]},"2394":{"position":[[152,4]]},"2396":{"position":[[82,4]]},"2398":{"position":[[82,4]]},"2400":{"position":[[82,4]]},"2402":{"position":[[82,4]]},"2404":{"position":[[82,4]]},"2408":{"position":[[82,4]]},"2414":{"position":[[82,4]]},"2416":{"position":[[82,4]]},"2418":{"position":[[82,4]]}}}],["user'",{"_index":2053,"t":{"2097":{"position":[[204,6]]},"2117":{"position":[[194,6]]}}}],["user.yml",{"_index":1434,"t":{"1918":{"position":[[164,8],[636,8]]},"1924":{"position":[[380,8]]}}}],["usernam",{"_index":1043,"t":{"1800":{"position":[[588,8]]},"1965":{"position":[[637,8]]},"1967":{"position":[[252,9],[292,8]]},"1969":{"position":[[255,9],[295,8]]},"2021":{"position":[[1574,10]]},"2093":{"position":[[768,10]]},"2101":{"position":[[1504,8]]},"2231":{"position":[[2309,8]]},"2233":{"position":[[2257,8]]},"2235":{"position":[[2126,8]]},"2237":{"position":[[2075,8]]},"2239":{"position":[[2088,8]]},"2241":{"position":[[2201,8]]},"2243":{"position":[[2162,8]]},"2247":{"position":[[2235,8]]},"2249":{"position":[[2216,8]]},"2251":{"position":[[2112,8]]},"2253":{"position":[[2228,8]]},"2255":{"position":[[2093,8]]},"2257":{"position":[[2008,8]]},"2267":{"position":[[2183,8]]},"2273":{"position":[[2225,8]]},"2275":{"position":[[2141,8]]},"2277":{"position":[[2147,8]]},"2350":{"position":[[2492,8]]},"2352":{"position":[[2506,8]]},"2354":{"position":[[2621,8]]}}}],["username/password",{"_index":1652,"t":{"1965":{"position":[[572,17]]}}}],["userspac",{"_index":166,"t":{"1656":{"position":[[124,9]]},"1662":{"position":[[3374,9]]},"1790":{"position":[[180,9]]},"1794":{"position":[[8693,9]]}}}],["usr/local/bin",{"_index":368,"t":{"1677":{"position":[[336,14]]},"1893":{"position":[[281,14]]},"1898":{"position":[[337,14]]},"2053":{"position":[[1059,14]]}}}],["usr/local/bin/k3",{"_index":1754,"t":{"2009":{"position":[[42,18]]},"2011":{"position":[[42,18]]},"2156":{"position":[[461,18]]},"2171":{"position":[[119,18]]}}}],["util",{"_index":1345,"t":{"1895":{"position":[[748,7]]},"1981":{"position":[[432,12],[712,9]]},"1983":{"position":[[569,7]]},"2021":{"position":[[992,4]]},"2055":{"position":[[937,11]]},"2061":{"position":[[228,12],[282,11],[410,11],[591,11]]},"2073":{"position":[[74,12]]},"2075":{"position":[[11,11],[405,12],[743,11],[972,12]]},"2081":{"position":[[15,7]]},"2085":{"position":[[1158,7]]},"2099":{"position":[[760,4],[1383,4]]},"2129":{"position":[[32,4]]},"2362":{"position":[[289,4]]}}}],["v",{"_index":61,"t":{"1642":{"position":[[26,1]]},"1662":{"position":[[389,1]]},"1774":{"position":[[57,1]]},"1794":{"position":[[400,1]]},"2200":{"position":[[610,1]]},"2225":{"position":[[327,1]]},"2227":{"position":[[256,1]]},"2245":{"position":[[316,1]]},"2249":{"position":[[441,1]]},"2251":{"position":[[337,1]]},"2267":{"position":[[414,1]]},"2271":{"position":[[740,1]]},"2298":{"position":[[265,1]]},"2306":{"position":[[634,1]]},"2308":{"position":[[523,1]]},"2310":{"position":[[548,1]]},"2312":{"position":[[700,1]]},"2314":{"position":[[526,1]]},"2316":{"position":[[558,1]]},"2318":{"position":[[657,1]]},"2350":{"position":[[703,1]]},"2352":{"position":[[693,1]]},"2354":{"position":[[745,1]]}}}],["v0.4.0",{"_index":1363,"t":{"1900":{"position":[[738,6]]}}}],["v1",{"_index":399,"t":{"1681":{"position":[[714,2]]},"1687":{"position":[[342,2],[469,2]]},"1717":{"position":[[292,2]]},"1876":{"position":[[284,2]]},"1918":{"position":[[185,2]]},"2021":{"position":[[1799,2]]},"2027":{"position":[[739,3],[782,3],[914,2]]},"2095":{"position":[[1057,2]]},"2141":{"position":[[12,2]]},"2143":{"position":[[12,2]]},"2147":{"position":[[12,2]]},"2149":{"position":[[12,2]]},"2154":{"position":[[58,3],[86,3],[126,4]]}}}],["v1.0.0",{"_index":1147,"t":{"1832":{"position":[[92,6]]}}}],["v1.17.v1.17.0+k3s.1",{"_index":1312,"t":{"1880":{"position":[[13,21]]}}}],["v1.19.1",{"_index":1221,"t":{"1846":{"position":[[165,7]]},"2154":{"position":[[658,9]]}}}],["v1.19.1+k3s1",{"_index":806,"t":{"1750":{"position":[[29,12]]},"1846":{"position":[[72,12]]},"1878":{"position":[[13,12]]},"1908":{"position":[[29,12]]}}}],["v1.19.12+k3s1",{"_index":2257,"t":{"2154":{"position":[[437,14]]}}}],["v1.19.13+k3s1",{"_index":2260,"t":{"2154":{"position":[[492,14]]}}}],["v1.19.4+k3s1",{"_index":536,"t":{"1710":{"position":[[13,14]]}}}],["v1.19.5+k3s1",{"_index":1217,"t":{"1846":{"position":[[32,12]]}}}],["v1.20",{"_index":2045,"t":{"2095":{"position":[[1276,5]]}}}],["v1.20.2",{"_index":625,"t":{"1733":{"position":[[604,7]]}}}],["v1.20.4+k3s1",{"_index":1750,"t":{"2001":{"position":[[546,12],[605,12]]}}}],["v1.20.8+k3s1",{"_index":2258,"t":{"2154":{"position":[[452,13]]}}}],["v1.20.9+k3s1",{"_index":2261,"t":{"2154":{"position":[[507,13]]}}}],["v1.21",{"_index":2044,"t":{"2095":{"position":[[1260,5]]}}}],["v1.21.0+k3s1",{"_index":1412,"t":{"1910":{"position":[[29,12]]},"1953":{"position":[[53,13]]}}}],["v1.21.2+k3s1",{"_index":2259,"t":{"2154":{"position":[[466,13]]}}}],["v1.21.3+k3s1",{"_index":2262,"t":{"2154":{"position":[[521,12]]}}}],["v1.21.8+k3s1",{"_index":883,"t":{"1754":{"position":[[29,12]]}}}],["v1.22",{"_index":2317,"t":{"2176":{"position":[[442,6]]}}}],["v1.22.2",{"_index":1251,"t":{"1850":{"position":[[477,7]]}}}],["v1.22.9+k3s1",{"_index":1591,"t":{"1955":{"position":[[29,12]]}}}],["v1.23",{"_index":1444,"t":{"1920":{"position":[[16,5]]},"2083":{"position":[[121,6]]},"2176":{"position":[[449,5],[493,5]]}}}],["v1.23.15+k3s1",{"_index":486,"t":{"1700":{"position":[[395,14]]},"1945":{"position":[[2197,15]]}}}],["v1.23.17+k3s1",{"_index":690,"t":{"1740":{"position":[[1555,15]]},"1810":{"position":[[191,15]]}}}],["v1.23.7+k3s1",{"_index":1572,"t":{"1953":{"position":[[101,13]]}}}],["v1.24",{"_index":1443,"t":{"1920":{"position":[[0,5]]},"1953":{"position":[[138,5]]},"2085":{"position":[[701,5]]},"2093":{"position":[[16,5],[852,5]]},"2099":{"position":[[165,5]]},"2176":{"position":[[459,5]]}}}],["v1.24.11+k3s1",{"_index":689,"t":{"1740":{"position":[[1540,14]]},"1810":{"position":[[176,14]]}}}],["v1.24.6+k3s1",{"_index":2285,"t":{"2163":{"position":[[392,13],[739,12],[1146,12],[1826,13]]}}}],["v1.24.9+k3s1",{"_index":485,"t":{"1700":{"position":[[381,13]]},"1945":{"position":[[2183,13]]}}}],["v1.25",{"_index":1573,"t":{"1953":{"position":[[148,5]]},"2021":{"position":[[49,7],[2020,5],[2240,5],[2331,5]]},"2093":{"position":[[0,5],[36,5]]},"2099":{"position":[[149,5]]}}}],["v1.25.5+k3s1",{"_index":484,"t":{"1700":{"position":[[367,13]]},"1945":{"position":[[2169,13]]}}}],["v1.25.7+k3s1",{"_index":688,"t":{"1740":{"position":[[1526,13]]},"1810":{"position":[[162,13]]}}}],["v1.26",{"_index":1544,"t":{"1947":{"position":[[115,6]]},"2167":{"position":[[461,5]]}}}],["v1.26.0",{"_index":1539,"t":{"1945":{"position":[[1986,8]]}}}],["v1.26.0+k3s1",{"_index":483,"t":{"1700":{"position":[[349,17]]},"1945":{"position":[[2154,14]]}}}],["v1.26.2+k3s1",{"_index":687,"t":{"1740":{"position":[[1511,14]]},"1810":{"position":[[147,14]]}}}],["v1.27",{"_index":1545,"t":{"1947":{"position":[[334,6]]}}}],["v1.27.0",{"_index":1537,"t":{"1945":{"position":[[1800,8]]}}}],["v1.6",{"_index":2318,"t":{"2176":{"position":[[724,5]]}}}],["v1/v2",{"_index":421,"t":{"1687":{"position":[[353,6]]}}}],["v120",{"_index":2050,"t":{"2095":{"position":[[2517,4]]}}}],["v121",{"_index":2048,"t":{"2095":{"position":[[1834,4]]}}}],["v2",{"_index":422,"t":{"1687":{"position":[[380,3]]},"1689":{"position":[[74,2],[740,2]]},"1876":{"position":[[969,3]]},"1880":{"position":[[68,2]]},"2027":{"position":[[804,3],[828,3]]},"2095":{"position":[[1137,3]]},"2154":{"position":[[104,3],[139,3]]},"2225":{"position":[[763,2],[1045,2],[1327,2],[1609,2],[1891,2],[2173,2],[2455,2]]},"2227":{"position":[[744,2],[1026,2],[1308,2],[1590,2],[1872,2],[2154,2],[2436,2]]},"2245":{"position":[[757,2],[1039,2],[1321,2],[1603,2],[1885,2],[2167,2],[2449,2]]},"2298":{"position":[[729,2],[1011,2],[1293,2],[1575,2],[1857,2],[2139,2],[2421,2]]}}}],["v2.21.0",{"_index":1897,"t":{"2061":{"position":[[36,7]]}}}],["v2.8.5",{"_index":1307,"t":{"1878":{"position":[[612,6]]}}}],["v3",{"_index":1286,"t":{"1876":{"position":[[956,2],[976,3]]},"1880":{"position":[[38,3],[77,3],[96,3]]}}}],["v=<level",{"_index":1263,"t":{"1862":{"position":[[537,11]]}}}],["valid",{"_index":48,"t":{"1640":{"position":[[141,5]]},"1736":{"position":[[39,5]]},"1740":{"position":[[320,5],[1211,10]]},"1750":{"position":[[3168,10]]},"1767":{"position":[[1336,10]]},"1794":{"position":[[5266,10],[5895,6]]},"1800":{"position":[[784,8],[1125,8],[1186,9],[1252,6]]},"1811":{"position":[[49,10],[2622,5]]},"1906":{"position":[[1271,8]]},"1933":{"position":[[1215,10]]},"1953":{"position":[[716,5],[808,5],[958,5]]},"1955":{"position":[[477,5]]},"2119":{"position":[[183,6],[203,8]]},"2123":{"position":[[311,5]]}}}],["valu",{"_index":62,"t":{"1642":{"position":[[28,5],[81,5],[179,6],[189,5]]},"1644":{"position":[[46,6],[56,5],[117,5],[184,6],[194,5]]},"1646":{"position":[[36,6],[46,5]]},"1648":{"position":[[50,5],[135,5],[210,5],[451,5]]},"1650":{"position":[[54,5],[209,5],[320,5]]},"1652":{"position":[[48,6],[58,5],[120,5],[186,5],[249,5],[309,5],[375,5]]},"1654":{"position":[[31,5],[90,5]]},"1658":{"position":[[99,5]]},"1662":{"position":[[391,5],[465,5],[569,6],[579,5],[690,6],[700,5],[774,5],[854,6],[864,5],[923,6],[933,5],[1019,5],[1129,5],[1213,5],[1307,5],[1494,5],[1713,5],[2129,5],[2292,5],[2424,5],[2528,5],[2642,6],[2652,5],[2738,5],[2831,5],[2916,5],[2991,5],[3072,5],[3152,5],[3225,5]]},"1681":{"position":[[1028,6],[1074,6]]},"1721":{"position":[[257,6],[317,6]]},"1744":{"position":[[794,6],[2442,6]]},"1746":{"position":[[1653,7],[1849,7],[2242,5]]},"1750":{"position":[[458,5],[2086,5],[2208,5],[2277,5],[2536,5]]},"1764":{"position":[[46,5]]},"1767":{"position":[[59,5],[175,5],[301,5],[420,5],[674,5],[817,5],[943,5],[1016,5],[1146,5],[1224,5],[1368,5],[1427,5],[1486,5],[1528,5],[1617,5],[1697,5]]},"1769":{"position":[[46,6],[56,5],[143,5],[219,5],[326,5],[395,5]]},"1771":{"position":[[57,6],[67,5],[166,5]]},"1774":{"position":[[59,5],[112,5],[210,6],[220,5]]},"1776":{"position":[[40,5],[91,5],[140,5],[260,5],[354,5]]},"1778":{"position":[[36,6],[46,5]]},"1782":{"position":[[40,5],[119,5],[213,5],[307,5],[417,5],[472,5],[749,5],[842,5]]},"1784":{"position":[[46,5]]},"1786":{"position":[[27,5]]},"1788":{"position":[[28,5],[88,5],[158,5],[237,5],[331,5],[409,5],[468,5]]},"1792":{"position":[[94,5],[135,5]]},"1794":{"position":[[402,5],[476,5],[580,6],[590,5],[708,5],[781,5],[852,5],[994,5],[1121,5],[1249,6],[1259,5],[1376,5],[1477,5],[1593,5],[1711,5],[1843,5],[1922,5],[2290,5],[2395,5],[2508,6],[2518,5],[2629,5],[2707,6],[2717,5],[2817,5],[2891,5],[3011,5],[3093,6],[3103,5],[3398,5],[3467,5],[3535,5],[3612,5],[3699,5],[3792,5],[3885,5],[4009,5],[4143,5],[4270,5],[4535,5],[4681,5],[4813,5],[4887,5],[5073,5],[5152,5],[5298,5],[5365,5],[5432,5],[5475,5],[5565,5],[5651,5],[5718,5],[5807,5],[6344,5],[6454,5],[6538,5],[6632,5],[6819,5],[7061,5],[7224,5],[7356,5],[7460,5],[7590,5],[7703,6],[7713,5],[7799,5],[7892,5],[7977,5],[8052,5],[8133,5],[8213,5],[8286,5],[8815,5]]},"1811":{"position":[[879,5],[991,5],[1056,5],[1126,5],[1284,5],[1435,5],[1656,5],[1768,5],[2140,5],[2252,5],[2429,5],[2541,5],[2601,5]]},"1817":{"position":[[255,5],[347,5]]},"1842":{"position":[[233,5]]},"1876":{"position":[[1383,6]]},"1904":{"position":[[370,6]]},"1906":{"position":[[1325,5]]},"1908":{"position":[[163,6],[904,6],[1069,6]]},"1910":{"position":[[235,5],[316,5]]},"1933":{"position":[[1003,6]]},"1945":{"position":[[908,5]]},"1953":{"position":[[994,7],[1157,6]]},"2005":{"position":[[206,6]]},"2021":{"position":[[1864,5],[2109,6]]},"2089":{"position":[[117,6]]},"2105":{"position":[[475,5]]},"2107":{"position":[[574,5]]},"2109":{"position":[[498,5]]},"2111":{"position":[[338,5]]},"2113":{"position":[[513,5]]},"2115":{"position":[[499,5]]},"2117":{"position":[[723,5]]},"2119":{"position":[[516,5]]},"2121":{"position":[[120,5]]},"2125":{"position":[[499,5],[590,5]]},"2129":{"position":[[641,5]]},"2163":{"position":[[642,7]]},"2200":{"position":[[2123,6]]},"2206":{"position":[[392,6]]},"2208":{"position":[[416,6]]},"2210":{"position":[[370,6]]},"2212":{"position":[[426,6]]},"2214":{"position":[[281,6]]},"2216":{"position":[[287,6]]},"2225":{"position":[[395,6]]},"2227":{"position":[[376,6]]},"2231":{"position":[[656,6]]},"2233":{"position":[[604,6]]},"2235":{"position":[[187,6],[473,6]]},"2237":{"position":[[189,5],[422,6]]},"2239":{"position":[[189,5],[435,6]]},"2241":{"position":[[548,6]]},"2243":{"position":[[216,5],[509,6]]},"2245":{"position":[[389,6]]},"2247":{"position":[[582,6]]},"2249":{"position":[[301,5],[563,6]]},"2251":{"position":[[459,6]]},"2253":{"position":[[288,5],[575,6]]},"2255":{"position":[[440,6]]},"2257":{"position":[[355,6]]},"2263":{"position":[[222,6]]},"2267":{"position":[[530,6]]},"2271":{"position":[[2290,6]]},"2273":{"position":[[572,6]]},"2275":{"position":[[488,6]]},"2277":{"position":[[494,6]]},"2288":{"position":[[381,6]]},"2290":{"position":[[449,6]]},"2292":{"position":[[534,6]]},"2294":{"position":[[431,6]]},"2298":{"position":[[181,5],[361,6]]},"2301":{"position":[[340,6]]},"2303":{"position":[[163,5],[414,6]]},"2306":{"position":[[2169,6]]},"2308":{"position":[[2082,6]]},"2310":{"position":[[2095,6]]},"2312":{"position":[[2235,6]]},"2314":{"position":[[2085,6]]},"2316":{"position":[[2118,6]]},"2318":{"position":[[2172,6]]},"2333":{"position":[[373,6]]},"2335":{"position":[[462,6]]},"2337":{"position":[[304,6]]},"2339":{"position":[[325,6]]},"2341":{"position":[[363,6]]},"2343":{"position":[[258,6]]},"2350":{"position":[[816,6]]},"2352":{"position":[[824,6]]},"2354":{"position":[[897,6]]},"2356":{"position":[[645,6]]},"2358":{"position":[[115,5]]},"2368":{"position":[[836,6]]},"2370":{"position":[[168,6]]},"2374":{"position":[[418,7],[639,7]]},"2385":{"position":[[218,5]]}}}],["value=option1=valu",{"_index":1016,"t":{"1792":{"position":[[261,19]]}}}],["valuescont",{"_index":1275,"t":{"1876":{"position":[[501,14]]},"1878":{"position":[[221,14],[568,14]]}}}],["var",{"_index":571,"t":{"1717":{"position":[[451,3]]}}}],["var/lib/etcd",{"_index":2339,"t":{"2200":{"position":[[246,13]]},"2202":{"position":[[262,13]]}}}],["var/lib/kubelet/config.yaml",{"_index":2525,"t":{"2345":{"position":[[134,28]]},"2347":{"position":[[140,28]]}}}],["var/lib/rancher/credentialprovider/bin",{"_index":211,"t":{"1662":{"position":[[1416,42]]},"1794":{"position":[[6741,42]]}}}],["var/lib/rancher/credentialprovider/config.yaml",{"_index":212,"t":{"1662":{"position":[[1578,50]]},"1794":{"position":[[6903,50]]}}}],["var/lib/rancher/k3",{"_index":93,"t":{"1646":{"position":[[52,22]]},"1662":{"position":[[983,23]]},"1750":{"position":[[476,20]]},"1778":{"position":[[52,20]]},"1794":{"position":[[1303,20]]},"1811":{"position":[[921,20],[1698,20],[2182,20],[2471,20]]}}}],["var/lib/rancher/k3s/ag",{"_index":1937,"t":{"2075":{"position":[[1214,28]]},"2077":{"position":[[325,29]]}}}],["var/lib/rancher/k3s/agent/containerd",{"_index":2400,"t":{"2225":{"position":[[578,37]]},"2227":{"position":[[559,37]]},"2245":{"position":[[572,37]]},"2298":{"position":[[544,37]]}}}],["var/lib/rancher/k3s/agent/containerd/containerd.log",{"_index":1261,"t":{"1862":{"position":[[239,54]]}}}],["var/lib/rancher/k3s/agent/etc/containerd/config.toml",{"_index":374,"t":{"1679":{"position":[[5,54]]},"1681":{"position":[[376,53]]},"2225":{"position":[[450,53]]},"2227":{"position":[[431,53]]},"2245":{"position":[[444,53]]},"2298":{"position":[[416,53]]}}}],["var/lib/rancher/k3s/agent/imag",{"_index":1325,"t":{"1890":{"position":[[187,34],[260,34]]},"1898":{"position":[[214,34]]}}}],["var/lib/rancher/k3s/agent/kubelet.kubeconfig",{"_index":2516,"t":{"2337":{"position":[[208,45]]},"2339":{"position":[[217,45]]}}}],["var/lib/rancher/k3s/agent/kubeproxy.kubeconfig",{"_index":2515,"t":{"2333":{"position":[[140,47],[206,47],[299,49]]},"2335":{"position":[[146,47],[224,48],[292,48],[388,49]]}}}],["var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd",{"_index":2404,"t":{"2225":{"position":[[647,105],[929,105],[1211,105],[1493,105],[1775,105],[2057,105],[2339,105]]},"2227":{"position":[[628,105],[910,105],[1192,105],[1474,105],[1756,105],[2038,105],[2320,105]]},"2245":{"position":[[641,105],[923,105],[1205,105],[1487,105],[1769,105],[2051,105],[2333,105]]},"2298":{"position":[[613,105],[895,105],[1177,105],[1459,105],[1741,105],[2023,105],[2305,105]]}}}],["var/lib/rancher/k3s/serv",{"_index":1939,"t":{"2077":{"position":[[239,29]]},"2093":{"position":[[334,27]]},"2097":{"position":[[578,27]]}}}],["var/lib/rancher/k3s/server/ag",{"_index":1080,"t":{"1808":{"position":[[351,33]]}}}],["var/lib/rancher/k3s/server/cred/admin.kubeconfig",{"_index":2373,"t":{"2204":{"position":[[152,49]]},"2206":{"position":[[205,50],[275,50]]},"2337":{"position":[[140,49]]},"2339":{"position":[[146,49]]}}}],["var/lib/rancher/k3s/server/cred/controller.kubeconfig",{"_index":2381,"t":{"2212":{"position":[[190,55],[274,55]]}}}],["var/lib/rancher/k3s/server/cred/nod",{"_index":626,"t":{"1733":{"position":[[619,37]]}}}],["var/lib/rancher/k3s/server/cred/scheduler.kubeconfig",{"_index":2377,"t":{"2208":{"position":[[182,54],[265,54]]},"2210":{"position":[[188,54],[262,54]]}}}],["var/lib/rancher/k3s/server/db",{"_index":826,"t":{"1750":{"position":[[1642,32],[1701,31]]},"1819":{"position":[[125,32],[215,30]]}}}],["var/lib/rancher/k3s/server/db/etcd",{"_index":2352,"t":{"2200":{"position":[[681,38]]},"2271":{"position":[[811,38]]},"2306":{"position":[[705,38]]},"2308":{"position":[[594,38]]},"2310":{"position":[[619,38]]},"2312":{"position":[[771,38]]},"2314":{"position":[[597,38]]},"2316":{"position":[[629,38]]},"2318":{"position":[[728,38]]}}}],["var/lib/rancher/k3s/server/db/etcd/config",{"_index":2357,"t":{"2200":{"position":[[888,42],[1017,42],[1119,45],[1215,42],[1342,42],[1449,45],[1532,45]]},"2271":{"position":[[1018,42],[1147,42],[1249,45],[1345,42],[1472,42],[1579,45],[1662,45]]},"2306":{"position":[[912,42],[1041,42],[1143,45],[1239,42],[1366,42],[1473,45],[1556,45]]},"2308":{"position":[[801,42],[930,42],[1032,45],[1128,42],[1255,42],[1362,45],[1445,45]]},"2310":{"position":[[826,42],[955,42],[1057,45],[1153,42],[1280,42],[1387,45],[1470,45]]},"2312":{"position":[[978,42],[1107,42],[1209,45],[1305,42],[1432,42],[1539,45],[1622,45]]},"2314":{"position":[[804,42],[933,42],[1035,45],[1131,42],[1258,42],[1365,45],[1448,45]]},"2316":{"position":[[836,42],[965,42],[1067,45],[1163,42],[1290,42],[1397,45],[1480,45]]},"2318":{"position":[[935,42],[1064,42],[1166,45],[1262,42],[1389,42],[1496,45],[1579,45]]}}}],["var/lib/rancher/k3s/server/intermedi",{"_index":765,"t":{"1744":{"position":[[1596,42]]}}}],["var/lib/rancher/k3s/server/log",{"_index":2059,"t":{"2097":{"position":[[420,32]]}}}],["var/lib/rancher/k3s/server/manifest",{"_index":1454,"t":{"1929":{"position":[[35,37]]},"1939":{"position":[[19,38],[584,37]]},"2021":{"position":[[2391,38]]},"2027":{"position":[[450,38]]},"2093":{"position":[[2457,37]]},"2095":{"position":[[158,37]]}}}],["var/lib/rancher/k3s/server/manifests/example_manifest.yaml",{"_index":1475,"t":{"1933":{"position":[[868,60]]}}}],["var/lib/rancher/k3s/server/manifests/traefik",{"_index":1305,"t":{"1878":{"position":[[376,45]]}}}],["var/lib/rancher/k3s/server/manifests/traefik.yaml",{"_index":1809,"t":{"2027":{"position":[[324,51]]}}}],["var/lib/rancher/k3s/server/nod",{"_index":1834,"t":{"2049":{"position":[[910,32]]}}}],["var/lib/rancher/k3s/server/psa.yaml",{"_index":1780,"t":{"2021":{"position":[[1010,36]]}}}],["var/lib/rancher/k3s/server/root",{"_index":764,"t":{"1744":{"position":[[1561,34]]}}}],["var/lib/rancher/k3s/server/stat",{"_index":1300,"t":{"1876":{"position":[[1462,36]]}}}],["var/lib/rancher/k3s/server/tl",{"_index":710,"t":{"1742":{"position":[[758,32],[2010,31],[2440,31]]},"1744":{"position":[[291,32]]},"1746":{"position":[[314,32]]},"1748":{"position":[[477,32]]},"2214":{"position":[[187,31]]},"2216":{"position":[[184,31]]}}}],["var/lib/rancher/k3s/server/tls/*.crt",{"_index":2387,"t":{"2218":{"position":[[192,37]]}}}],["var/lib/rancher/k3s/server/tls/*.key",{"_index":2389,"t":{"2220":{"position":[[192,37]]}}}],["var/lib/rancher/k3s/server/tls/cli",{"_index":2524,"t":{"2343":{"position":[[150,38]]}}}],["var/lib/rancher/k3s/server/tls/etcd/p",{"_index":2506,"t":{"2312":{"position":[[2286,41],[2356,41]]},"2318":{"position":[[2282,41]]}}}],["var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":2495,"t":{"2306":{"position":[[2210,43],[2275,43]]},"2318":{"position":[[2214,43]]}}}],["var/lib/rancher/k3s/server/tls/serv",{"_index":2518,"t":{"2341":{"position":[[147,38]]}}}],["var/lib/rancher/k3s/server/tls/service.key",{"_index":767,"t":{"1744":{"position":[[1771,43]]},"1748":{"position":[[998,43]]}}}],["var/lib/rancher/k3s/server/token",{"_index":1065,"t":{"1806":{"position":[[148,34]]},"1817":{"position":[[180,34]]},"1842":{"position":[[307,33]]},"1895":{"position":[[460,34]]},"2154":{"position":[[585,33]]}}}],["var/log/journ",{"_index":2347,"t":{"2200":{"position":[[535,16],[751,16]]},"2223":{"position":[[214,16]]},"2231":{"position":[[444,16]]},"2233":{"position":[[427,16]]},"2235":{"position":[[301,16]]},"2237":{"position":[[267,16]]},"2239":{"position":[[280,16]]},"2241":{"position":[[371,16]]},"2243":{"position":[[278,16]]},"2247":{"position":[[344,16]]},"2249":{"position":[[366,16]]},"2251":{"position":[[262,16]]},"2253":{"position":[[397,16]]},"2255":{"position":[[258,16]]},"2257":{"position":[[209,16]]},"2267":{"position":[[339,16]]},"2271":{"position":[[665,16],[881,16]]},"2273":{"position":[[406,16]]},"2275":{"position":[[341,16]]},"2277":{"position":[[353,16]]},"2279":{"position":[[395,16]]},"2283":{"position":[[947,16]]},"2286":{"position":[[296,16]]},"2288":{"position":[[226,16]]},"2290":{"position":[[246,16]]},"2292":{"position":[[342,16]]},"2294":{"position":[[279,16]]},"2301":{"position":[[213,16]]},"2303":{"position":[[223,16]]},"2306":{"position":[[559,16],[775,16]]},"2308":{"position":[[448,16],[664,16]]},"2310":{"position":[[473,16],[689,16]]},"2312":{"position":[[625,16],[841,16]]},"2314":{"position":[[451,16],[667,16]]},"2316":{"position":[[483,16],[699,16]]},"2318":{"position":[[582,16],[798,16]]},"2324":{"position":[[93,16]]},"2350":{"position":[[513,16],[604,16]]},"2352":{"position":[[499,16],[590,16]]},"2354":{"position":[[555,16],[646,16]]},"2356":{"position":[[463,16]]},"2358":{"position":[[520,16]]},"2368":{"position":[[681,16]]}}}],["var/log/k3s.log",{"_index":472,"t":{"1697":{"position":[[92,17]]},"1862":{"position":[[99,17]]}}}],["var/log/pod",{"_index":1260,"t":{"1862":{"position":[[202,15]]}}}],["var/log/syslog",{"_index":473,"t":{"1697":{"position":[[139,16]]}}}],["var/log/ulog/syslogemu.log",{"_index":601,"t":{"1721":{"position":[[557,28]]}}}],["var/run/mysqld/mysqld.sock",{"_index":1141,"t":{"1829":{"position":[[1010,29]]}}}],["vari",{"_index":1700,"t":{"1981":{"position":[[692,4]]},"2176":{"position":[[1837,4]]}}}],["variabl",{"_index":81,"t":{"1644":{"position":[[17,8]]},"1648":{"position":[[17,8]]},"1652":{"position":[[17,8]]},"1658":{"position":[[17,8]]},"1662":{"position":[[124,8]]},"1691":{"position":[[196,8]]},"1744":{"position":[[1101,9]]},"1750":{"position":[[2476,8]]},"1767":{"position":[[17,8]]},"1769":{"position":[[17,8]]},"1771":{"position":[[17,8]]},"1792":{"position":[[17,8]]},"1794":{"position":[[126,8]]},"1804":{"position":[[186,8]]},"1808":{"position":[[176,8]]},"1827":{"position":[[219,8]]},"1842":{"position":[[213,9]]},"1893":{"position":[[802,9]]},"1898":{"position":[[556,10]]},"1904":{"position":[[236,10],[342,10],[1851,10],[1878,10]]},"1906":{"position":[[538,10]]},"1908":{"position":[[90,9],[1220,8]]},"1912":{"position":[[225,9]]},"2053":{"position":[[322,9],[387,8],[2403,9],[2517,9]]},"2350":{"position":[[315,9]]},"2352":{"position":[[295,9]]},"2354":{"position":[[338,9]]},"2356":{"position":[[291,9]]},"2358":{"position":[[328,9]]},"2360":{"position":[[313,9]]},"2362":{"position":[[344,9]]},"2364":{"position":[[218,9]]},"2366":{"position":[[312,9]]},"2368":{"position":[[435,9]]},"2370":{"position":[[394,9]]},"2372":{"position":[[196,9]]},"2426":{"position":[[136,10]]}}}],["varieti",{"_index":1149,"t":{"1832":{"position":[[239,7]]}}}],["vcpu",{"_index":1729,"t":{"1989":{"position":[[125,5]]},"1995":{"position":[[194,5]]}}}],["vcq7j",{"_index":1513,"t":{"1939":{"position":[[936,5]]}}}],["verb",{"_index":2027,"t":{"2093":{"position":[[4159,6],[4414,6],[4609,6]]}}}],["verbos",{"_index":67,"t":{"1642":{"position":[[61,9]]},"1662":{"position":[[432,9]]},"1774":{"position":[[92,9]]},"1794":{"position":[[443,9]]}}}],["veri",{"_index":1662,"t":{"1973":{"position":[[7,4]]}}}],["verif",{"_index":1047,"t":{"1800":{"position":[[883,12]]},"1965":{"position":[[491,12]]}}}],["verifi",{"_index":853,"t":{"1750":{"position":[[3133,6]]},"1767":{"position":[[1297,6]]},"1794":{"position":[[5226,6]]},"1829":{"position":[[849,8]]},"1953":{"position":[[1548,6]]},"1965":{"position":[[403,6]]},"2119":{"position":[[141,8]]},"2127":{"position":[[220,9]]}}}],["version",{"_index":369,"t":{"1677":{"position":[[426,7]]},"1700":{"position":[[304,7]]},"1710":{"position":[[0,7]]},"1740":{"position":[[1336,7]]},"1748":{"position":[[743,7],[759,7]]},"1750":{"position":[[0,7]]},"1754":{"position":[[0,7]]},"1810":{"position":[[0,7]]},"1846":{"position":[[0,7]]},"1848":{"position":[[710,7]]},"1850":{"position":[[540,8]]},"1876":{"position":[[855,7]]},"1878":{"position":[[0,7]]},"1880":{"position":[[0,7]]},"1890":{"position":[[80,7]]},"1893":{"position":[[222,7],[835,7]]},"1898":{"position":[[152,7]]},"1900":{"position":[[170,7],[225,7],[392,8],[662,8]]},"1908":{"position":[[0,7]]},"1910":{"position":[[0,7]]},"1945":{"position":[[417,8],[2044,7]]},"1953":{"position":[[0,7]]},"1955":{"position":[[0,7]]},"2001":{"position":[[508,7]]},"2021":{"position":[[1458,8],[1502,8],[1544,8],[2011,8],[2231,8],[2322,8]]},"2053":{"position":[[860,7]]},"2093":{"position":[[652,8],[696,8],[738,8]]},"2095":{"position":[[1079,7],[1216,7]]},"2159":{"position":[[1385,7],[1738,7],[1769,7],[1853,8],[1978,8]]},"2163":{"position":[[730,8],[1137,8],[1805,7],[1872,7]]},"2165":{"position":[[106,8]]},"2167":{"position":[[534,8],[553,8],[889,7],[920,7],[1004,8],[1129,8]]},"2169":{"position":[[29,7],[176,7],[252,7],[428,7]]},"2171":{"position":[[49,7]]}}}],["version_kube_dashboard=$(curl",{"_index":1426,"t":{"1916":{"position":[[60,29]]},"1924":{"position":[[108,29]]}}}],["via",{"_index":1205,"t":{"1840":{"position":[[1110,3]]},"1895":{"position":[[724,3]]},"1931":{"position":[[75,3]]},"1941":{"position":[[43,3]]},"1945":{"position":[[1455,3],[1717,3],[1851,3]]},"1947":{"position":[[828,3]]},"1951":{"position":[[550,3],[655,3]]},"1957":{"position":[[1805,3]]},"2061":{"position":[[146,3]]},"2091":{"position":[[91,4]]},"2161":{"position":[[392,3]]},"2163":{"position":[[2659,3]]},"2167":{"position":[[19,3]]}}}],["view",{"_index":1459,"t":{"1929":{"position":[[565,4]]},"2163":{"position":[[2633,7]]}}}],["virtual",{"_index":1200,"t":{"1840":{"position":[[622,7]]}}}],["visibl",{"_index":990,"t":{"1782":{"position":[[282,10]]},"1794":{"position":[[1661,10]]},"2001":{"position":[[437,7]]}}}],["visit",{"_index":1553,"t":{"1949":{"position":[[312,5]]},"2167":{"position":[[732,5]]}}}],["vm.overcommit_memory=1",{"_index":1975,"t":{"2089":{"position":[[411,22]]}}}],["vm.panic_on_oom=0",{"_index":1974,"t":{"2089":{"position":[[393,17]]}}}],["vmodul",{"_index":68,"t":{"1642":{"position":[[73,7]]},"1662":{"position":[[457,7]]},"1774":{"position":[[104,7]]},"1794":{"position":[[468,7]]}}}],["vmodule=<module>=<level",{"_index":1264,"t":{"1862":{"position":[[550,24]]}}}],["volum",{"_index":1752,"t":{"2007":{"position":[[212,8]]},"2075":{"position":[[1160,8]]},"2077":{"position":[[441,8]]},"2093":{"position":[[1577,8],[2718,8],[3542,8]]},"2117":{"position":[[356,6]]},"2135":{"position":[[198,8],[259,6]]},"2139":{"position":[[78,6]]},"2143":{"position":[[41,6],[98,6],[238,8]]},"2149":{"position":[[41,6],[98,6],[238,8]]},"2416":{"position":[[151,8]]}}}],["volumemount",{"_index":2246,"t":{"2143":{"position":[[167,13]]},"2149":{"position":[[167,13]]}}}],["volv",{"_index":2247,"t":{"2143":{"position":[[189,4],[255,4]]},"2147":{"position":[[68,4]]},"2149":{"position":[[189,4],[255,4],[303,4]]}}}],["vpn",{"_index":1603,"t":{"1957":{"position":[[212,3]]}}}],["vulner",{"_index":1058,"t":{"1802":{"position":[[306,10]]}}}],["vx.y.z",{"_index":1240,"t":{"1848":{"position":[[762,6],[813,6]]}}}],["vxlan",{"_index":520,"t":{"1706":{"position":[[439,5]]},"1782":{"position":[[478,7],[501,8]]},"1794":{"position":[[2009,8],[2106,8]]},"1945":{"position":[[315,6],[384,5],[1311,5]]},"1983":{"position":[[141,5],[802,5]]},"1985":{"position":[[235,5]]}}}],["w",{"_index":1427,"t":{"1916":{"position":[[91,1]]},"1924":{"position":[[139,1]]}}}],["wait",{"_index":1745,"t":{"1999":{"position":[[268,4]]},"2163":{"position":[[1724,4]]}}}],["want",{"_index":190,"t":{"1660":{"position":[[429,4]]},"1742":{"position":[[1313,4],[1605,4],[1709,4]]},"1945":{"position":[[2318,4]]},"1991":{"position":[[178,4]]},"2003":{"position":[[117,4]]},"2169":{"position":[[225,4],[398,4]]}}}],["warn",{"_index":805,"t":{"1748":{"position":[[1188,8]]},"1929":{"position":[[401,8]]},"1957":{"position":[[1459,7],[1665,7]]},"2021":{"position":[[1520,5],[1539,4]]},"2093":{"position":[[714,5],[733,4]]},"2176":{"position":[[1408,4]]},"2218":{"position":[[8,4]]},"2220":{"position":[[8,4]]},"2223":{"position":[[8,4]]},"2241":{"position":[[8,4]]},"2245":{"position":[[8,4]]},"2247":{"position":[[8,4]]},"2279":{"position":[[8,4]]},"2281":{"position":[[8,4]]},"2283":{"position":[[8,4]]},"2286":{"position":[[8,4]]},"2321":{"position":[[8,4]]},"2324":{"position":[[8,4]]},"2326":{"position":[[8,4]]},"2358":{"position":[[8,4]]},"2366":{"position":[[8,4]]},"2374":{"position":[[8,4]]},"2377":{"position":[[8,4]]},"2379":{"position":[[8,4]]},"2381":{"position":[[8,4]]},"2383":{"position":[[8,4]]},"2385":{"position":[[8,4]]},"2387":{"position":[[8,4]]},"2389":{"position":[[8,4]]},"2391":{"position":[[8,4]]},"2394":{"position":[[8,4]]},"2396":{"position":[[8,4]]},"2398":{"position":[[8,4]]},"2400":{"position":[[8,4]]},"2402":{"position":[[8,4]]},"2404":{"position":[[8,4]]},"2406":{"position":[[8,4]]},"2408":{"position":[[8,4]]},"2410":{"position":[[8,4]]},"2412":{"position":[[8,4]]},"2414":{"position":[[8,4]]},"2416":{"position":[[8,4]]},"2418":{"position":[[8,4]]},"2421":{"position":[[8,4]]},"2423":{"position":[[8,4]]},"2426":{"position":[[8,4]]},"2428":{"position":[[8,4]]},"2431":{"position":[[8,4]]},"2434":{"position":[[8,4]]},"2436":{"position":[[8,4]]},"2438":{"position":[[8,4]]},"2440":{"position":[[8,4]]}}}],["watch",{"_index":1009,"t":{"1782":{"position":[[1566,8],[1819,8]]},"1951":{"position":[[1395,8],[1732,8]]},"2379":{"position":[[63,5]]}}}],["way",{"_index":1100,"t":{"1811":{"position":[[1455,4]]},"1817":{"position":[[4,3]]},"1906":{"position":[[685,4]]},"1935":{"position":[[14,4]]}}}],["wc",{"_index":2348,"t":{"2200":{"position":[[619,2]]},"2271":{"position":[[749,2]]},"2306":{"position":[[643,2]]},"2308":{"position":[[532,2]]},"2310":{"position":[[557,2]]},"2312":{"position":[[709,2]]},"2314":{"position":[[535,2]]},"2316":{"position":[[567,2]]},"2318":{"position":[[666,2]]},"2350":{"position":[[571,2]]},"2352":{"position":[[557,2]]},"2354":{"position":[[613,2]]}}}],["web",{"_index":1270,"t":{"1876":{"position":[[189,3],[319,3],[497,3]]}}}],["webhook",{"_index":2529,"t":{"2352":{"position":[[101,8]]}}}],["webhook=tru",{"_index":2131,"t":{"2101":{"position":[[3117,12]]},"2356":{"position":[[836,12],[2059,12]]},"2368":{"position":[[1027,12],[2250,12]]}}}],["websit",{"_index":1556,"t":{"1949":{"position":[[342,8]]}}}],["websocket",{"_index":1166,"t":{"1832":{"position":[[1052,9]]},"1951":{"position":[[32,9]]},"1957":{"position":[[348,9]]}}}],["well",{"_index":79,"t":{"1642":{"position":[[258,4]]},"1662":{"position":[[660,4]]},"1750":{"position":[[2896,4]]},"1774":{"position":[[289,4]]},"1794":{"position":[[671,4]]},"1949":{"position":[[186,4]]},"1959":{"position":[[604,5],[755,5]]},"2075":{"position":[[171,4]]},"2085":{"position":[[929,4]]},"2093":{"position":[[1154,4]]},"2163":{"position":[[2081,4]]}}}],["wg",{"_index":1538,"t":{"1945":{"position":[[1859,2]]},"1947":{"position":[[58,2]]}}}],["whatev",{"_index":2366,"t":{"2200":{"position":[[1629,8]]},"2271":{"position":[[1759,8]]},"2306":{"position":[[1653,8]]},"2308":{"position":[[1542,8]]},"2310":{"position":[[1567,8]]},"2312":{"position":[[1719,8]]},"2314":{"position":[[1545,8]]},"2316":{"position":[[1577,8]]},"2318":{"position":[[1676,8]]}}}],["whenev",{"_index":1461,"t":{"1931":{"position":[[416,8]]}}}],["wherev",{"_index":2572,"t":{"2385":{"position":[[59,8]]}}}],["whether",{"_index":879,"t":{"1750":{"position":[[4376,7]]},"1760":{"position":[[799,7],[1092,7],[1187,7]]},"1973":{"position":[[78,7]]},"2103":{"position":[[129,7]]}}}],["wildcard",{"_index":2571,"t":{"2381":{"position":[[60,9]]}}}],["window",{"_index":379,"t":{"1679":{"position":[[274,7]]},"1858":{"position":[[14,8]]}}}],["wireguard",{"_index":996,"t":{"1782":{"position":[[542,10]]},"1792":{"position":[[190,9]]},"1794":{"position":[[2051,10],[2071,11]]},"1806":{"position":[[669,9]]},"1945":{"position":[[352,9],[475,9],[590,9],[631,9],[760,9],[868,9],[1579,9],[1841,9]]},"1947":{"position":[[11,9],[134,9],[357,9],[719,9],[764,9]]},"1957":{"position":[[403,9]]},"1983":{"position":[[220,9]]},"1985":{"position":[[343,9],[419,9]]}}}],["wireguard'(deprec",{"_index":998,"t":{"1782":{"position":[[565,23]]}}}],["wish",{"_index":1180,"t":{"1838":{"position":[[1254,4]]},"1959":{"position":[[275,4]]},"1983":{"position":[[561,4]]}}}],["within",{"_index":632,"t":{"1736":{"position":[[125,6]]},"1740":{"position":[[451,6]]},"1817":{"position":[[450,6]]},"1933":{"position":[[449,6],[484,6]]}}}],["without",{"_index":681,"t":{"1740":{"position":[[1319,7]]},"1750":{"position":[[1135,7],[1567,7]]},"1756":{"position":[[166,7],[825,7]]},"1842":{"position":[[171,7]]},"1904":{"position":[[725,7]]},"1951":{"position":[[236,7]]},"1955":{"position":[[367,7]]},"1967":{"position":[[131,7]]},"1969":{"position":[[135,7]]},"2053":{"position":[[2627,7]]},"2079":{"position":[[361,7]]},"2085":{"position":[[360,7]]},"2163":{"position":[[1625,7]]}}}],["work",{"_index":865,"t":{"1750":{"position":[[3992,7]]},"1832":{"position":[[848,4]]},"1951":{"position":[[1431,4]]},"1963":{"position":[[329,7]]},"1971":{"position":[[74,7]]},"1979":{"position":[[19,4]]},"2163":{"position":[[2075,5]]},"2167":{"position":[[810,5]]}}}],["worker",{"_index":1244,"t":{"1848":{"position":[[969,6],[1002,6]]},"2057":{"position":[[311,8]]},"2329":{"position":[[114,6]]},"2331":{"position":[[114,6]]},"2333":{"position":[[104,6]]},"2335":{"position":[[104,6]]},"2337":{"position":[[104,6]]},"2339":{"position":[[104,6]]},"2350":{"position":[[247,6]]},"2352":{"position":[[233,6]]},"2354":{"position":[[276,6]]},"2356":{"position":[[223,6]]},"2358":{"position":[[260,6]]},"2360":{"position":[[245,6]]},"2362":{"position":[[246,6]]},"2364":{"position":[[128,6]]},"2366":{"position":[[244,6]]},"2368":{"position":[[366,6]]},"2370":{"position":[[300,6]]},"2372":{"position":[[128,6]]},"2374":{"position":[[549,6]]}}}],["workload",{"_index":1179,"t":{"1838":{"position":[[1211,9],[1307,9]]},"1959":{"position":[[512,9]]},"1973":{"position":[[345,8]]},"1981":{"position":[[303,9],[526,10]]},"2055":{"position":[[233,8],[517,8],[860,8],[979,9]]},"2057":{"position":[[257,8]]},"2059":{"position":[[573,8]]},"2061":{"position":[[709,10]]},"2065":{"position":[[127,9]]},"2067":{"position":[[101,9]]},"2069":{"position":[[101,9]]},"2073":{"position":[[168,10]]},"2075":{"position":[[1116,8]]},"2077":{"position":[[64,8],[125,8],[397,8]]},"2131":{"position":[[142,9]]},"2385":{"position":[[81,8]]},"2394":{"position":[[157,10]]},"2396":{"position":[[87,9]]},"2398":{"position":[[87,9]]},"2400":{"position":[[87,9]]},"2402":{"position":[[87,9]]},"2404":{"position":[[87,9]]},"2408":{"position":[[87,9]]},"2414":{"position":[[87,9]]},"2416":{"position":[[87,9]]},"2418":{"position":[[87,9]]}}}],["world",{"_index":1712,"t":{"1983":{"position":[[851,5]]},"2129":{"position":[[522,6]]}}}],["world!\\n",{"_index":577,"t":{"1717":{"position":[[553,11]]}}}],["worst",{"_index":2204,"t":{"2125":{"position":[[222,5]]}}}],["write",{"_index":844,"t":{"1750":{"position":[[2619,7]]},"1771":{"position":[[40,5],[95,5],[144,5],[192,5]]},"1794":{"position":[[2491,5],[2533,5],[2607,5],[2644,5]]},"1811":{"position":[[568,6]]},"1906":{"position":[[617,5]]},"1908":{"position":[[309,5],[493,5]]},"1910":{"position":[[511,5],[565,5],[671,5]]},"2053":{"position":[[1144,5]]},"2159":{"position":[[893,5]]}}}],["written",{"_index":970,"t":{"1771":{"position":[[267,7]]},"1806":{"position":[[137,7]]},"1808":{"position":[[340,7]]},"1811":{"position":[[730,7]]},"1931":{"position":[[400,7]]},"2093":{"position":[[298,7]]},"2097":{"position":[[540,7]]},"2259":{"position":[[256,8]]}}}],["www.example.com",{"_index":1277,"t":{"1876":{"position":[[577,15]]}}}],["x",{"_index":1734,"t":{"1989":{"position":[[205,1]]},"1995":{"position":[[274,1]]}}}],["x86_64",{"_index":1669,"t":{"1977":{"position":[[50,6]]},"2063":{"position":[[17,7]]}}}],["xarg",{"_index":2385,"t":{"2216":{"position":[[218,5]]}}}],["xeon(r",{"_index":1865,"t":{"2055":{"position":[[251,7],[355,7],[437,7]]},"2067":{"position":[[198,7]]},"2069":{"position":[[198,7]]},"2071":{"position":[[86,7]]}}}],["xx",{"_index":1737,"t":{"1989":{"position":[[232,2]]},"1995":{"position":[[300,2]]}}}],["xx98j",{"_index":1508,"t":{"1939":{"position":[[820,5]]}}}],["xxxxxx",{"_index":1654,"t":{"1967":{"position":[[262,6],[311,6]]},"1969":{"position":[[265,6],[314,6]]}}}],["xxxxxxxxxxxxxxxxxxx",{"_index":1945,"t":{"2079":{"position":[[772,21]]}}}],["y",{"_index":383,"t":{"1681":{"position":[[184,1]]},"1710":{"position":[[321,1],[374,1]]}}}],["yaml",{"_index":58,"t":{"1640":{"position":[[342,4]]},"1762":{"position":[[380,4]]},"1874":{"position":[[47,4]]},"1876":{"position":[[1349,4]]},"1900":{"position":[[503,4],[822,5]]},"1908":{"position":[[183,4],[673,4],[734,4],[800,4]]},"1933":{"position":[[159,4]]},"1949":{"position":[[403,4],[559,5],[786,4],[943,5]]},"2095":{"position":[[1177,4]]},"2143":{"position":[[309,5]]},"2145":{"position":[[299,5]]},"2163":{"position":[[2711,4],[2754,4]]}}}],["year",{"_index":652,"t":{"1740":{"position":[[333,5]]}}}],["you'll",{"_index":38,"t":{"1640":{"position":[[17,6]]},"1750":{"position":[[59,6]]},"1762":{"position":[[17,6]]},"1850":{"position":[[193,6]]}}}],["you'r",{"_index":1664,"t":{"1973":{"position":[[86,6]]}}}],["you'v",{"_index":1183,"t":{"1838":{"position":[[1484,6]]},"1850":{"position":[[175,6]]}}}],["your_ip_or_hostname_her",{"_index":1203,"t":{"1840":{"position":[[917,24]]}}}],["yourself",{"_index":1105,"t":{"1811":{"position":[[1965,8]]}}}],["yum",{"_index":541,"t":{"1710":{"position":[[308,3],[361,3]]}}}],["z0",{"_index":1106,"t":{"1811":{"position":[[2009,2],[2021,2]]},"1933":{"position":[[1233,2],[1243,2],[1252,2],[1266,2],[1276,2],[1285,2]]}}}],["zero",{"_index":1156,"t":{"1832":{"position":[[512,4]]},"1844":{"position":[[134,4]]},"2255":{"position":[[217,5]]}}}],["zone=trust",{"_index":492,"t":{"1702":{"position":[[177,12],[249,12]]}}}],["zxv",{"_index":365,"t":{"1677":{"position":[[308,3]]}}}]],"pipeline":["stemmer"]}}]
\ No newline at end of file
diff --git a/kr/search.html b/kr/search.html
index 092350d95..1c25dcbc2 100644
--- a/kr/search.html
+++ b/kr/search.html
@@ -1,18 +1,18 @@
 <!doctype html>
-<html lang="kr" dir="ltr" class="search-page-wrapper plugin-search-algolia plugin-id-default">
+<html lang="kr" dir="ltr" class="plugin-@easyops-cn/docusaurus-search-local plugin-id-default">
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">검색 결과 없음 | K3s</title><meta data-rh="true" property="og:title" content="K3s"><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/search"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="robots" content="noindex, follow"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/search"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/search" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/search" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">검색 결과 없음</title><meta data-rh="true" property="og:title" content="K3s"><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/search"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="robots" content="noindex, follow"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/search"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/search" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/search" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/search" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><div class="container margin-vert--lg"><h1>검색 결과 없음</h1><form class="row"><div class="col searchQueryColumn_RTkw col--12"><input type="search" name="q" class="searchQueryInput_u2C7" placeholder="여기에 검색어 입력" aria-label="검색" autocomplete="off" autofocus=""></div></form><div class="row"><div class="col col--8 searchResultsColumn_JPFH"></div><div class="col col--4 text--right searchLogoColumn_rJIA"><a target="_blank" rel="noopener noreferrer" href="https://www.algolia.com/" aria-label="Algolia 검색"><svg viewBox="0 0 168 24" class="algoliaLogo_rT1R"><g fill="none"><path class="algoliaLogoPathFill_WdUC" d="M120.925 18.804c-4.386.02-4.386-3.54-4.386-4.106l-.007-13.336 2.675-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-10.846-2.18c.821 0 1.43-.047 1.855-.129v-2.719a6.334 6.334 0 0 0-1.574-.199 5.7 5.7 0 0 0-.897.069 2.699 2.699 0 0 0-.814.24c-.24.116-.439.28-.582.491-.15.212-.219.335-.219.656 0 .628.219.991.616 1.23s.938.362 1.615.362zm-.233-9.7c.883 0 1.629.109 2.231.328.602.218 1.088.525 1.444.915.363.396.609.922.76 1.483.157.56.232 1.175.232 1.85v6.874a32.5 32.5 0 0 1-1.868.314c-.834.123-1.772.185-2.813.185-.69 0-1.327-.069-1.895-.198a4.001 4.001 0 0 1-1.471-.636 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.803 0-.656.13-1.073.384-1.525a3.24 3.24 0 0 1 1.047-1.106c.445-.287.95-.492 1.532-.615a8.8 8.8 0 0 1 1.82-.185 8.404 8.404 0 0 1 1.972.24v-.438c0-.307-.035-.6-.11-.874a1.88 1.88 0 0 0-.384-.73 1.784 1.784 0 0 0-.724-.493 3.164 3.164 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.735 7.735 0 0 0-1.26.307l-.321-2.192c.335-.117.834-.233 1.478-.349a10.98 10.98 0 0 1 2.073-.178zm52.842 9.626c.822 0 1.43-.048 1.854-.13V13.7a6.347 6.347 0 0 0-1.574-.199c-.294 0-.595.021-.896.069a2.7 2.7 0 0 0-.814.24 1.46 1.46 0 0 0-.582.491c-.15.212-.218.335-.218.656 0 .628.218.991.615 1.23.404.245.938.362 1.615.362zm-.226-9.694c.883 0 1.629.108 2.231.327.602.219 1.088.526 1.444.915.355.39.609.923.759 1.483a6.8 6.8 0 0 1 .233 1.852v6.873c-.41.088-1.034.19-1.868.314-.834.123-1.772.184-2.813.184-.69 0-1.327-.068-1.895-.198a4.001 4.001 0 0 1-1.471-.635 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.804 0-.656.13-1.073.384-1.524.26-.45.608-.82 1.047-1.107.445-.286.95-.491 1.532-.614a8.803 8.803 0 0 1 2.751-.13c.329.034.671.096 1.04.185v-.437a3.3 3.3 0 0 0-.109-.875 1.873 1.873 0 0 0-.384-.731 1.784 1.784 0 0 0-.724-.492 3.165 3.165 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.75 7.75 0 0 0-1.26.307l-.321-2.193c.335-.116.834-.232 1.478-.348a11.633 11.633 0 0 1 2.073-.177zm-8.034-1.271a1.626 1.626 0 0 1-1.628-1.62c0-.895.725-1.62 1.628-1.62.904 0 1.63.725 1.63 1.62 0 .895-.733 1.62-1.63 1.62zm1.348 13.22h-2.689V7.27l2.69-.423v11.956zm-4.714 0c-4.386.02-4.386-3.54-4.386-4.107l-.008-13.336 2.676-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-8.698-5.903c0-1.156-.253-2.119-.746-2.788-.493-.677-1.183-1.01-2.067-1.01-.882 0-1.574.333-2.065 1.01-.493.676-.733 1.632-.733 2.788 0 1.168.246 1.953.74 2.63.492.683 1.183 1.018 2.066 1.018.882 0 1.574-.342 2.067-1.019.492-.683.738-1.46.738-2.63zm2.737-.007c0 .902-.13 1.584-.397 2.33a5.52 5.52 0 0 1-1.128 1.906 4.986 4.986 0 0 1-1.752 1.223c-.685.286-1.739.45-2.265.45-.528-.006-1.574-.157-2.252-.45a5.096 5.096 0 0 1-1.744-1.223c-.487-.527-.863-1.162-1.137-1.906a6.345 6.345 0 0 1-.41-2.33c0-.902.123-1.77.397-2.508a5.554 5.554 0 0 1 1.15-1.892 5.133 5.133 0 0 1 1.75-1.216c.679-.287 1.425-.423 2.232-.423.808 0 1.553.142 2.237.423a4.88 4.88 0 0 1 1.753 1.216 5.644 5.644 0 0 1 1.135 1.892c.287.738.431 1.606.431 2.508zm-20.138 0c0 1.12.246 2.363.738 2.882.493.52 1.13.78 1.91.78.424 0 .828-.062 1.204-.178.377-.116.677-.253.917-.417V9.33a10.476 10.476 0 0 0-1.766-.226c-.971-.028-1.71.37-2.23 1.004-.513.636-.773 1.75-.773 2.788zm7.438 5.274c0 1.824-.466 3.156-1.404 4.004-.936.846-2.367 1.27-4.296 1.27-.705 0-2.17-.137-3.34-.396l.431-2.118c.98.205 2.272.26 2.95.26 1.074 0 1.84-.219 2.299-.656.459-.437.684-1.086.684-1.948v-.437a8.07 8.07 0 0 1-1.047.397c-.43.13-.93.198-1.492.198-.739 0-1.41-.116-2.018-.349a4.206 4.206 0 0 1-1.567-1.025c-.431-.45-.774-1.017-1.013-1.694-.24-.677-.363-1.885-.363-2.773 0-.834.13-1.88.384-2.577.26-.696.629-1.298 1.129-1.796.493-.498 1.095-.881 1.8-1.162a6.605 6.605 0 0 1 2.428-.457c.87 0 1.67.109 2.45.24.78.129 1.444.265 1.985.415V18.17zM6.972 6.677v1.627c-.712-.446-1.52-.67-2.425-.67-.585 0-1.045.13-1.38.391a1.24 1.24 0 0 0-.502 1.03c0 .425.164.765.494 1.02.33.256.835.532 1.516.83.447.192.795.356 1.045.495.25.138.537.332.862.582.324.25.563.548.718.894.154.345.23.741.23 1.188 0 .947-.334 1.691-1.004 2.234-.67.542-1.537.814-2.601.814-1.18 0-2.16-.229-2.936-.686v-1.708c.84.628 1.814.942 2.92.942.585 0 1.048-.136 1.388-.407.34-.271.51-.646.51-1.125 0-.287-.1-.55-.302-.79-.203-.24-.42-.42-.655-.542-.234-.123-.585-.29-1.053-.503a61.27 61.27 0 0 1-.582-.271 13.67 13.67 0 0 1-.55-.287 4.275 4.275 0 0 1-.567-.351 6.92 6.92 0 0 1-.455-.4c-.18-.17-.31-.34-.39-.51-.08-.17-.155-.37-.224-.598a2.553 2.553 0 0 1-.104-.742c0-.915.333-1.638.998-2.17.664-.532 1.523-.798 2.576-.798.968 0 1.793.17 2.473.51zm7.468 5.696v-.287c-.022-.607-.187-1.088-.495-1.444-.309-.357-.75-.535-1.324-.535-.532 0-.99.194-1.373.583-.382.388-.622.949-.717 1.683h3.909zm1.005 2.792v1.404c-.596.34-1.383.51-2.362.51-1.255 0-2.255-.377-3-1.132-.744-.755-1.116-1.744-1.116-2.968 0-1.297.34-2.316 1.021-3.055.68-.74 1.548-1.11 2.6-1.11 1.033 0 1.852.323 2.458.966.606.644.91 1.572.91 2.784 0 .33-.033.676-.096 1.038h-5.314c.107.702.405 1.239.894 1.611.49.372 1.106.558 1.85.558.862 0 1.58-.202 2.155-.606zm6.605-1.77h-1.212c-.596 0-1.045.116-1.349.35-.303.234-.454.532-.454.894 0 .372.117.664.35.877.235.213.575.32 1.022.32.51 0 .912-.142 1.204-.424.293-.281.44-.651.44-1.108v-.91zm-4.068-2.554V9.325c.627-.361 1.457-.542 2.489-.542 2.116 0 3.175 1.026 3.175 3.08V17h-1.548v-.957c-.415.68-1.143 1.02-2.186 1.02-.766 0-1.38-.22-1.843-.661-.462-.442-.694-1.003-.694-1.684 0-.776.293-1.38.878-1.81.585-.431 1.404-.647 2.457-.647h1.34V11.8c0-.554-.133-.971-.399-1.253-.266-.282-.707-.423-1.324-.423a4.07 4.07 0 0 0-2.345.718zm9.333-1.93v1.42c.394-1 1.101-1.5 2.123-1.5.148 0 .313.016.494.048v1.531a1.885 1.885 0 0 0-.75-.143c-.542 0-.989.24-1.34.718-.351.479-.527 1.048-.527 1.707V17h-1.563V8.91h1.563zm5.01 4.084c.022.82.272 1.492.75 2.019.479.526 1.15.79 2.01.79.639 0 1.235-.176 1.788-.527v1.404c-.521.319-1.186.479-1.995.479-1.265 0-2.276-.4-3.031-1.197-.755-.798-1.133-1.792-1.133-2.984 0-1.16.38-2.151 1.14-2.975.761-.825 1.79-1.237 3.088-1.237.702 0 1.346.149 1.93.447v1.436a3.242 3.242 0 0 0-1.77-.495c-.84 0-1.513.266-2.019.798-.505.532-.758 1.213-.758 2.042zM40.24 5.72v4.579c.458-1 1.293-1.5 2.505-1.5.787 0 1.42.245 1.899.734.479.49.718 1.17.718 2.042V17h-1.564v-5.106c0-.553-.14-.98-.422-1.284-.282-.303-.652-.455-1.11-.455-.531 0-1.002.202-1.411.606-.41.405-.615 1.022-.615 1.851V17h-1.563V5.72h1.563zm14.966 10.02c.596 0 1.096-.253 1.5-.758.404-.506.606-1.157.606-1.955 0-.915-.202-1.62-.606-2.114-.404-.495-.92-.742-1.548-.742-.553 0-1.05.224-1.491.67-.442.447-.662 1.133-.662 2.058 0 .958.212 1.67.638 2.138.425.469.946.703 1.563.703zM53.004 5.72v4.42c.574-.894 1.388-1.341 2.44-1.341 1.022 0 1.857.383 2.506 1.149.649.766.973 1.781.973 3.047 0 1.138-.309 2.109-.925 2.912-.617.803-1.463 1.205-2.537 1.205-1.075 0-1.894-.447-2.457-1.34V17h-1.58V5.72h1.58zm9.908 11.104l-3.223-7.913h1.739l1.005 2.632 1.26 3.415c.096-.32.48-1.458 1.15-3.415l.909-2.632h1.66l-2.92 7.866c-.777 2.074-1.963 3.11-3.559 3.11a2.92 2.92 0 0 1-.734-.079v-1.34c.17.042.351.064.543.064 1.032 0 1.755-.57 2.17-1.708z"></path><path fill="#5468FF" d="M78.988.938h16.594a2.968 2.968 0 0 1 2.966 2.966V20.5a2.967 2.967 0 0 1-2.966 2.964H78.988a2.967 2.967 0 0 1-2.966-2.964V3.897A2.961 2.961 0 0 1 78.988.938z"></path><path fill="white" d="M89.632 5.967v-.772a.978.978 0 0 0-.978-.977h-2.28a.978.978 0 0 0-.978.977v.793c0 .088.082.15.171.13a7.127 7.127 0 0 1 1.984-.28c.65 0 1.295.088 1.917.259.082.02.164-.04.164-.13m-6.248 1.01l-.39-.389a.977.977 0 0 0-1.382 0l-.465.465a.973.973 0 0 0 0 1.38l.383.383c.062.061.15.047.205-.014.226-.307.472-.601.746-.874.281-.28.568-.526.883-.751.068-.042.075-.137.02-.2m4.16 2.453v3.341c0 .096.104.165.192.117l2.97-1.537c.068-.034.089-.117.055-.184a3.695 3.695 0 0 0-3.08-1.866c-.068 0-.136.054-.136.13m0 8.048a4.489 4.489 0 0 1-4.49-4.482 4.488 4.488 0 0 1 4.49-4.482 4.488 4.488 0 0 1 4.489 4.482 4.484 4.484 0 0 1-4.49 4.482m0-10.85a6.363 6.363 0 1 0 0 12.729 6.37 6.37 0 0 0 6.372-6.368 6.358 6.358 0 0 0-6.371-6.36"></path></g></svg></a></div></div></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/search" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><div class="container margin-vert--lg"><h1>검색 결과 없음</h1><div class="row"><div class="col col--12"><input type="search" name="q" class="searchQueryInput_CFBF" aria-label="Search" autocomplete="off" autofocus=""></div></div><section></section></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/security.html b/kr/security.html
index 1fea0315a..e3d9510b9 100644
--- a/kr/security.html
+++ b/kr/security.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">보안 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="보안 | K3s"><meta data-rh="true" name="description" content="이 섹션에서는 K3s 클러스터를 보호하는 방법론과 수단에 대해 설명합니다. 두 섹션으로 나뉘어져 있습니다. 이 가이드는 K3s가 임베디드 etcd로 실행되고 있다고 가정합니다."><meta data-rh="true" property="og:description" content="이 섹션에서는 K3s 클러스터를 보호하는 방법론과 수단에 대해 설명합니다. 두 섹션으로 나뉘어져 있습니다. 이 가이드는 K3s가 임베디드 etcd로 실행되고 있다고 가정합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">보안 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="보안 | K3s"><meta data-rh="true" name="description" content="이 섹션에서는 K3s 클러스터를 보호하는 방법론과 수단에 대해 설명합니다. 두 섹션으로 나뉘어져 있습니다. 이 가이드는 K3s가 임베디드 etcd로 실행되고 있다고 가정합니다."><meta data-rh="true" property="og:description" content="이 섹션에서는 K3s 클러스터를 보호하는 방법론과 수단에 대해 설명합니다. 두 섹션으로 나뉘어져 있습니다. 이 가이드는 K3s가 임베디드 etcd로 실행되고 있다고 가정합니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">보안</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>보안</h1></header><p>이 섹션에서는 K3s 클러스터를 보호하는 방법론과 수단에 대해 설명합니다. 두 섹션으로 나뉘어져 있습니다. 이 가이드는 K3s가 임베디드 etcd로 실행되고 있다고 가정합니다.</p><p>아래 문서는 CIS 쿠버네티스 벤치마크 v1.23에 적용됩니다.</p><ul><li><a href="/kr/security/hardening-guide">강화 가이드</a></li><li><a href="/kr/security/self-assessment">CIS 벤치마크 자체 평가 가이드</a></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/security.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/known-issues"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">알려진 이슈</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security/secrets-encryption"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Secrets Encryption</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">보안</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>보안</h1></header><p>이 섹션에서는 K3s 클러스터를 보호하는 방법론과 수단에 대해 설명합니다. 두 섹션으로 나뉘어져 있습니다. 이 가이드는 K3s가 임베디드 etcd로 실행되고 있다고 가정합니다.</p><p>아래 문서는 CIS 쿠버네티스 벤치마크 v1.23에 적용됩니다.</p><ul><li><a href="/kr/security/hardening-guide">강화 가이드</a></li><li><a href="/kr/security/self-assessment">CIS 벤치마크 자체 평가 가이드</a></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/security.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/known-issues"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">알려진 이슈</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security/secrets-encryption"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Secrets Encryption</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/security/hardening-guide.html b/kr/security/hardening-guide.html
index 9444f2b69..c7cadd2a0 100644
--- a/kr/security/hardening-guide.html
+++ b/kr/security/hardening-guide.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CIS Hardening Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security/hardening-guide"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Hardening Guide | K3s"><meta data-rh="true" name="description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><meta data-rh="true" property="og:description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security/hardening-guide"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/hardening-guide" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/hardening-guide" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">CIS Hardening Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security/hardening-guide"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Hardening Guide | K3s"><meta data-rh="true" name="description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><meta data-rh="true" property="og:description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security/hardening-guide"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/hardening-guide" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/hardening-guide" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/security"><span itemprop="name">보안</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Hardening Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Hardening Guide</h1></header><p>This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).</p><p>K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:</p><ol><li>K3s will not modify the host operating system. Any host-level modifications will need to be done manually.</li><li>Certain CIS policy controls for <code>NetworkPolicies</code> and <code>PodSecurityStandards</code> (<code>PodSecurityPolicies</code> on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.</li></ol><p>The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn&#x27;t utilize these for the core components since everything is packaged into a single binary.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="host-level-requirements">Host-level Requirements<a href="#host-level-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ensure-protect-kernel-defaults-is-set">Ensure <code>protect-kernel-defaults</code> is set<a href="#ensure-protect-kernel-defaults-is-set" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet&#x27;s defaults.</p><blockquote><p><strong>Note:</strong> <code>protect-kernel-defaults</code> is exposed as a top-level flag for K3s.</p></blockquote><h4 class="anchor anchorWithStickyNavbar_LWe7" id="set-kernel-parameters">Set kernel parameters<a href="#set-kernel-parameters" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Create a file called <code>/etc/sysctl.d/90-kubelet.conf</code> and add the snippet below. Then run <code>sysctl -p /etc/sysctl.d/90-kubelet.conf</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.panic_on_oom</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.overcommit_memory</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic_on_oops</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.keys.root_maxbytes</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">25000000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-runtime-requirements">Kubernetes Runtime Requirements<a href="#kubernetes-runtime-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section.</p><p>By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn&#x27;t enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the <code>PodSecurity</code> and <code>NodeRestriction</code> admission controllers enabled, among others.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pod-security">Pod Security<a href="#pod-security" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>K3s v1.25 and newer support <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/" target="_blank" rel="noopener noreferrer">Pod Security Admissions (PSAs)</a> for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The policy should be written to a file named <code>psa.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. </p><p>Here is an example of a compliant PSA:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>K3s v1.24 and older support <a href="https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/" target="_blank" rel="noopener noreferrer">Pod Security Policies (PSPs)</a> for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;enable-admission-plugins=NodeRestriction,PodSecurityPolicy&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will have the effect of maintaining the <code>NodeRestriction</code> plugin as well as enabling the <code>PodSecurityPolicy</code>. </p><p>When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark.</p><p>Here is an example of a compliant PSP:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.7/8/9</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">               </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain">       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a &quot;system unrestricted policy&quot; which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.</p><p>Combining the configuration above with the <a href="#networkpolicies">Network Policy</a> described in the next section, a single file can be placed in the <code>/var/lib/rancher/k3s/server/manifests</code> directory. Here is an example of a <code>policy.yaml</code> file: </p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> NET_ADMIN</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedUnsafeSysctls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv4.ip_forward</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv6.conf.all.forwarding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">authenticated</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svc</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">acct</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">serviceaccounts</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p><strong>Note:</strong> The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the <code>kube-system</code> namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networkpolicies">NetworkPolicies<a href="#networkpolicies" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods.</p><p>Network policies should be placed the <code>/var/lib/rancher/k3s/server/manifests</code> directory, where they will automatically be deployed on startup.</p><p>Here is an example of a compliant network policy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">network</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> &lt;NAMESPACE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">&gt;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> TCP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> UDP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.21 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.20 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v121</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app.kubernetes.io/name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v120</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>Operators must manage network policies as normal for additional namespaces that are created.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="api-server-audit-configuration">API Server audit configuration<a href="#api-server-audit-configuration" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn&#x27;t create by default the log directory and audit policy, as auditing requirements are specific to each user&#x27;s policies and environment.</p><p>The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p -m </span><span class="token number" style="color:rgb(247, 140, 108)">700</span><span class="token plain"> /var/lib/rancher/k3s/server/logs</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>A starter audit policy to log request metadata is provided below. The policy should be written to a file named <code>audit.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. Detailed information about policy configuration for the API server can be found in the Kubernetes <a href="https://kubernetes.io/docs/tasks/debug-application-cluster/audit/" target="_blank" rel="noopener noreferrer">documentation</a>.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> audit.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">level</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Metadata</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Both configurations must be passed as arguments to the API Server as:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If the configurations are created after K3s is installed, they must be added to K3s&#x27; systemd service in <code>/etc/systemd/system/k3s.service</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">ExecStart</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/usr/local/bin/k3s </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s must be restarted to load the new configuration.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl restart k3s.service</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-for-kubernetes-components">Configuration for Kubernetes Components<a href="#configuration-for-kubernetes-components" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The configuration below should be placed in the <a href="/kr/installation/configuration#configuration-file">configuration file</a>, and contains all the necessary remediations to harden the Kubernetes components.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-execution-and-arguments">Control Plane Execution and Arguments<a href="#control-plane-execution-and-arguments" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-apiserver </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --advertise-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allow-privileged</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --api-audiences</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">unknown </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Node,RBAC </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cert-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/temporary-certs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.31</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --enable-admission-plugins</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">NodeRestriction,PodSecurityPolicy                      </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.17</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-cafile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.32</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-certfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-keyfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.key                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-servers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://127.0.0.1:2379 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --insecure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.19</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-certificate-authority</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-certificate</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.21</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-allowed-names</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">system:auth-proxy </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/request-header-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-extra-headers-prefix</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Extra- </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-group-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Group </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-username-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-User </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token plain">                                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.20</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-issuer</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">k3s </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.28</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-cluster-ip-range</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --storage-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">etcd3 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cipher-suites</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-controller-manager </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allocate-node-cidrs</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                                       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.7</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/controller.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10252</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --root-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.4 </span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --use-service-account-credentials</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                         </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.3</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-scheduler </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10251</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                     </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubelet </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authentication-token-webhook</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Webhook                                          </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cgroup-driver</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cgroupfs </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/client-ca.crt             </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cloud-provider</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">external </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-dns</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-domain</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cluster.local </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-bin-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-conf-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/etc/cni/net.d </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">remote </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --containerd</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-hard</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-minimum-reclaim</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --fail-swap-on</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --healthz-bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --hostname-override</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">hostname01 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/kubelet.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --node-labels</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --pod-manifest-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/pod-manifests </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --protect-kernel-defaults</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --read-only-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --resolv-conf</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/systemd/resolve/resolv.conf </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --runtime-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --serialize-image-pulls</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="known-issues">Known Issues<a href="#known-issues" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1215">Control 1.2.15<a href="#control-1215" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the admission control plugin <code>NamespaceLifecycle</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1216">Control 1.2.16<a href="#control-1216" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the admission control plugin <code>PodSecurityPolicy</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1222">Control 1.2.22<a href="#control-1222" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-path</code> argument is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1223">Control 1.2.23<a href="#control-1223" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-maxage</code> argument is set to 30 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1224">Control 1.2.24<a href="#control-1224" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-maxbackup</code> argument is set to 10 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1225">Control 1.2.25<a href="#control-1225" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-maxsize</code> argument is set to 100 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1226">Control 1.2.26<a href="#control-1226" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--request-timeout</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user&#x27;s connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1227">Control 1.2.27<a href="#control-1227" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--service-account-lookup</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1233">Control 1.2.33<a href="#control-1233" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--encryption-provider-config</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.<p>Detailed steps on how to configure secrets encryption in K3s are available in <a href="/kr/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1234">Control 1.2.34<a href="#control-1234" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that encryption providers are appropriately configured.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.<p>This can be remediated by passing a valid configuration to <code>k3s</code> as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in <a href="/kr/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-131">Control 1.3.1<a href="#control-131" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--terminated-pod-gc-threshold</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-321">Control 3.2.1<a href="#control-321" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that a minimal audit policy is created.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Logging is an important detective control for all systems, to detect potential unauthorized access.<p>This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-427">Control 4.2.7<a href="#control-427" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--make-iptables-util-chains</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-515">Control 5.1.5<a href="#control-515" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that default service accounts are not actively used</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.<p>Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account.</p><p>The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments.</p><p>This can be remediated by updating the <code>automountServiceAccountToken</code> field to <code>false</code> for the <code>default</code> service account in each namespace.</p><p>For <code>default</code> service accounts in the built-in namespaces (<code>kube-system</code>, <code>kube-public</code>, <code>kube-node-lease</code>, and <code>default</code>), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.</p></div></div></details><h2 class="anchor anchorWithStickyNavbar_LWe7" id="conclusion">Conclusion<a href="#conclusion" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the <a href="/kr/security/self-assessment">CIS Benchmark Self-Assessment Guide</a> to understand the expectations of each of the benchmark&#x27;s checks and how you can do the same on your cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/security/secrets-encryption"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Secrets Encryption</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security/self-assessment"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">CIS Self Assessment Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#host-level-requirements" class="table-of-contents__link toc-highlight">Host-level Requirements</a><ul><li><a href="#ensure-protect-kernel-defaults-is-set" class="table-of-contents__link toc-highlight">Ensure <code>protect-kernel-defaults</code> is set</a></li></ul></li><li><a href="#kubernetes-runtime-requirements" class="table-of-contents__link toc-highlight">Kubernetes Runtime Requirements</a><ul><li><a href="#pod-security" class="table-of-contents__link toc-highlight">Pod Security</a></li><li><a href="#networkpolicies" class="table-of-contents__link toc-highlight">NetworkPolicies</a></li><li><a href="#api-server-audit-configuration" class="table-of-contents__link toc-highlight">API Server audit configuration</a></li></ul></li><li><a href="#configuration-for-kubernetes-components" class="table-of-contents__link toc-highlight">Configuration for Kubernetes Components</a></li><li><a href="#control-plane-execution-and-arguments" class="table-of-contents__link toc-highlight">Control Plane Execution and Arguments</a></li><li><a href="#known-issues" class="table-of-contents__link toc-highlight">Known Issues</a><ul><li><a href="#control-1215" class="table-of-contents__link toc-highlight">Control 1.2.15</a></li><li><a href="#control-1216" class="table-of-contents__link toc-highlight">Control 1.2.16</a></li><li><a href="#control-1222" class="table-of-contents__link toc-highlight">Control 1.2.22</a></li><li><a href="#control-1223" class="table-of-contents__link toc-highlight">Control 1.2.23</a></li><li><a href="#control-1224" class="table-of-contents__link toc-highlight">Control 1.2.24</a></li><li><a href="#control-1225" class="table-of-contents__link toc-highlight">Control 1.2.25</a></li><li><a href="#control-1226" class="table-of-contents__link toc-highlight">Control 1.2.26</a></li><li><a href="#control-1227" class="table-of-contents__link toc-highlight">Control 1.2.27</a></li><li><a href="#control-1233" class="table-of-contents__link toc-highlight">Control 1.2.33</a></li><li><a href="#control-1234" class="table-of-contents__link toc-highlight">Control 1.2.34</a></li><li><a href="#control-131" class="table-of-contents__link toc-highlight">Control 1.3.1</a></li><li><a href="#control-321" class="table-of-contents__link toc-highlight">Control 3.2.1</a></li><li><a href="#control-427" class="table-of-contents__link toc-highlight">Control 4.2.7</a></li><li><a href="#control-515" class="table-of-contents__link toc-highlight">Control 5.1.5</a></li></ul></li><li><a href="#conclusion" class="table-of-contents__link toc-highlight">Conclusion</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/security"><span itemprop="name">보안</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Hardening Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Hardening Guide</h1></header><p>This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).</p><p>K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:</p><ol><li>K3s will not modify the host operating system. Any host-level modifications will need to be done manually.</li><li>Certain CIS policy controls for <code>NetworkPolicies</code> and <code>PodSecurityStandards</code> (<code>PodSecurityPolicies</code> on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.</li></ol><p>The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn&#x27;t utilize these for the core components since everything is packaged into a single binary.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="host-level-requirements">Host-level Requirements<a href="#host-level-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ensure-protect-kernel-defaults-is-set">Ensure <code>protect-kernel-defaults</code> is set<a href="#ensure-protect-kernel-defaults-is-set" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet&#x27;s defaults.</p><blockquote><p><strong>Note:</strong> <code>protect-kernel-defaults</code> is exposed as a top-level flag for K3s.</p></blockquote><h4 class="anchor anchorWithStickyNavbar_LWe7" id="set-kernel-parameters">Set kernel parameters<a href="#set-kernel-parameters" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Create a file called <code>/etc/sysctl.d/90-kubelet.conf</code> and add the snippet below. Then run <code>sysctl -p /etc/sysctl.d/90-kubelet.conf</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.panic_on_oom</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.overcommit_memory</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic_on_oops</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.keys.root_maxbytes</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">25000000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-runtime-requirements">Kubernetes Runtime Requirements<a href="#kubernetes-runtime-requirements" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section.</p><p>By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn&#x27;t enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the <code>PodSecurity</code> and <code>NodeRestriction</code> admission controllers enabled, among others.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pod-security">Pod Security<a href="#pod-security" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>K3s v1.25 and newer support <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/" target="_blank" rel="noopener noreferrer">Pod Security Admissions (PSAs)</a> for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The policy should be written to a file named <code>psa.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. </p><p>Here is an example of a compliant PSA:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>K3s v1.24 and older support <a href="https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/" target="_blank" rel="noopener noreferrer">Pod Security Policies (PSPs)</a> for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;enable-admission-plugins=NodeRestriction,PodSecurityPolicy&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will have the effect of maintaining the <code>NodeRestriction</code> plugin as well as enabling the <code>PodSecurityPolicy</code>. </p><p>When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark.</p><p>Here is an example of a compliant PSP:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.7/8/9</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">               </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain">       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a &quot;system unrestricted policy&quot; which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.</p><p>Combining the configuration above with the <a href="#networkpolicies">Network Policy</a> described in the next section, a single file can be placed in the <code>/var/lib/rancher/k3s/server/manifests</code> directory. Here is an example of a <code>policy.yaml</code> file: </p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> NET_ADMIN</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedUnsafeSysctls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv4.ip_forward</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv6.conf.all.forwarding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">authenticated</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svc</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">acct</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">serviceaccounts</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p><strong>Note:</strong> The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the <code>kube-system</code> namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networkpolicies">NetworkPolicies<a href="#networkpolicies" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods.</p><p>Network policies should be placed the <code>/var/lib/rancher/k3s/server/manifests</code> directory, where they will automatically be deployed on startup.</p><p>Here is an example of a compliant network policy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">network</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> &lt;NAMESPACE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">&gt;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> TCP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> UDP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.21 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.20 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v121</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app.kubernetes.io/name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v120</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>정보</div><div class="admonitionContent_S0QG"><p>Operators must manage network policies as normal for additional namespaces that are created.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="api-server-audit-configuration">API Server audit configuration<a href="#api-server-audit-configuration" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn&#x27;t create by default the log directory and audit policy, as auditing requirements are specific to each user&#x27;s policies and environment.</p><p>The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p -m </span><span class="token number" style="color:rgb(247, 140, 108)">700</span><span class="token plain"> /var/lib/rancher/k3s/server/logs</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>A starter audit policy to log request metadata is provided below. The policy should be written to a file named <code>audit.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. Detailed information about policy configuration for the API server can be found in the Kubernetes <a href="https://kubernetes.io/docs/tasks/debug-application-cluster/audit/" target="_blank" rel="noopener noreferrer">documentation</a>.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> audit.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">level</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Metadata</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Both configurations must be passed as arguments to the API Server as:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If the configurations are created after K3s is installed, they must be added to K3s&#x27; systemd service in <code>/etc/systemd/system/k3s.service</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">ExecStart</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/usr/local/bin/k3s </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s must be restarted to load the new configuration.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl restart k3s.service</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-for-kubernetes-components">Configuration for Kubernetes Components<a href="#configuration-for-kubernetes-components" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The configuration below should be placed in the <a href="/kr/installation/configuration#configuration-file">configuration file</a>, and contains all the necessary remediations to harden the Kubernetes components.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-execution-and-arguments">Control Plane Execution and Arguments<a href="#control-plane-execution-and-arguments" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-apiserver </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --advertise-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allow-privileged</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --api-audiences</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">unknown </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Node,RBAC </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cert-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/temporary-certs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.31</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --enable-admission-plugins</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">NodeRestriction,PodSecurityPolicy                      </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.17</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-cafile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.32</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-certfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-keyfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.key                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-servers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://127.0.0.1:2379 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --insecure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.19</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-certificate-authority</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-certificate</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.21</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-allowed-names</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">system:auth-proxy </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/request-header-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-extra-headers-prefix</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Extra- </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-group-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Group </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-username-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-User </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token plain">                                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.20</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-issuer</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">k3s </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.28</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-cluster-ip-range</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --storage-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">etcd3 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cipher-suites</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-controller-manager </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allocate-node-cidrs</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                                       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.7</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/controller.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10252</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --root-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.4 </span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --use-service-account-credentials</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                         </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.3</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-scheduler </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10251</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                     </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubelet </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authentication-token-webhook</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Webhook                                          </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cgroup-driver</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cgroupfs </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/client-ca.crt             </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cloud-provider</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">external </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-dns</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-domain</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cluster.local </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-bin-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-conf-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/etc/cni/net.d </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">remote </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --containerd</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-hard</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-minimum-reclaim</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --fail-swap-on</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --healthz-bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --hostname-override</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">hostname01 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/kubelet.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --node-labels</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --pod-manifest-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/pod-manifests </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --protect-kernel-defaults</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --read-only-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --resolv-conf</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/systemd/resolve/resolv.conf </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --runtime-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --serialize-image-pulls</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="known-issues">Known Issues<a href="#known-issues" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1215">Control 1.2.15<a href="#control-1215" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the admission control plugin <code>NamespaceLifecycle</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1216">Control 1.2.16<a href="#control-1216" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the admission control plugin <code>PodSecurityPolicy</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1222">Control 1.2.22<a href="#control-1222" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-path</code> argument is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1223">Control 1.2.23<a href="#control-1223" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-maxage</code> argument is set to 30 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1224">Control 1.2.24<a href="#control-1224" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-maxbackup</code> argument is set to 10 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1225">Control 1.2.25<a href="#control-1225" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--audit-log-maxsize</code> argument is set to 100 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1226">Control 1.2.26<a href="#control-1226" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--request-timeout</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user&#x27;s connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1227">Control 1.2.27<a href="#control-1227" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--service-account-lookup</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1233">Control 1.2.33<a href="#control-1233" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--encryption-provider-config</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.<p>Detailed steps on how to configure secrets encryption in K3s are available in <a href="/kr/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1234">Control 1.2.34<a href="#control-1234" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that encryption providers are appropriately configured.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.<p>This can be remediated by passing a valid configuration to <code>k3s</code> as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in <a href="/kr/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-131">Control 1.3.1<a href="#control-131" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--terminated-pod-gc-threshold</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-321">Control 3.2.1<a href="#control-321" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that a minimal audit policy is created.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Logging is an important detective control for all systems, to detect potential unauthorized access.<p>This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-427">Control 4.2.7<a href="#control-427" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that the <code>--make-iptables-util-chains</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-515">Control 5.1.5<a href="#control-515" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Ensure that default service accounts are not actively used</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.<p>Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account.</p><p>The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments.</p><p>This can be remediated by updating the <code>automountServiceAccountToken</code> field to <code>false</code> for the <code>default</code> service account in each namespace.</p><p>For <code>default</code> service accounts in the built-in namespaces (<code>kube-system</code>, <code>kube-public</code>, <code>kube-node-lease</code>, and <code>default</code>), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.</p></div></div></details><h2 class="anchor anchorWithStickyNavbar_LWe7" id="conclusion">Conclusion<a href="#conclusion" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the <a href="/kr/security/self-assessment">CIS Benchmark Self-Assessment Guide</a> to understand the expectations of each of the benchmark&#x27;s checks and how you can do the same on your cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/security/secrets-encryption"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Secrets Encryption</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security/self-assessment"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">CIS Self Assessment Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#host-level-requirements" class="table-of-contents__link toc-highlight">Host-level Requirements</a><ul><li><a href="#ensure-protect-kernel-defaults-is-set" class="table-of-contents__link toc-highlight">Ensure <code>protect-kernel-defaults</code> is set</a></li></ul></li><li><a href="#kubernetes-runtime-requirements" class="table-of-contents__link toc-highlight">Kubernetes Runtime Requirements</a><ul><li><a href="#pod-security" class="table-of-contents__link toc-highlight">Pod Security</a></li><li><a href="#networkpolicies" class="table-of-contents__link toc-highlight">NetworkPolicies</a></li><li><a href="#api-server-audit-configuration" class="table-of-contents__link toc-highlight">API Server audit configuration</a></li></ul></li><li><a href="#configuration-for-kubernetes-components" class="table-of-contents__link toc-highlight">Configuration for Kubernetes Components</a></li><li><a href="#control-plane-execution-and-arguments" class="table-of-contents__link toc-highlight">Control Plane Execution and Arguments</a></li><li><a href="#known-issues" class="table-of-contents__link toc-highlight">Known Issues</a><ul><li><a href="#control-1215" class="table-of-contents__link toc-highlight">Control 1.2.15</a></li><li><a href="#control-1216" class="table-of-contents__link toc-highlight">Control 1.2.16</a></li><li><a href="#control-1222" class="table-of-contents__link toc-highlight">Control 1.2.22</a></li><li><a href="#control-1223" class="table-of-contents__link toc-highlight">Control 1.2.23</a></li><li><a href="#control-1224" class="table-of-contents__link toc-highlight">Control 1.2.24</a></li><li><a href="#control-1225" class="table-of-contents__link toc-highlight">Control 1.2.25</a></li><li><a href="#control-1226" class="table-of-contents__link toc-highlight">Control 1.2.26</a></li><li><a href="#control-1227" class="table-of-contents__link toc-highlight">Control 1.2.27</a></li><li><a href="#control-1233" class="table-of-contents__link toc-highlight">Control 1.2.33</a></li><li><a href="#control-1234" class="table-of-contents__link toc-highlight">Control 1.2.34</a></li><li><a href="#control-131" class="table-of-contents__link toc-highlight">Control 1.3.1</a></li><li><a href="#control-321" class="table-of-contents__link toc-highlight">Control 3.2.1</a></li><li><a href="#control-427" class="table-of-contents__link toc-highlight">Control 4.2.7</a></li><li><a href="#control-515" class="table-of-contents__link toc-highlight">Control 5.1.5</a></li></ul></li><li><a href="#conclusion" class="table-of-contents__link toc-highlight">Conclusion</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/security/secrets-encryption.html b/kr/security/secrets-encryption.html
index f1325ab09..05d2ae50b 100644
--- a/kr/security/secrets-encryption.html
+++ b/kr/security/secrets-encryption.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Secrets Encryption | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security/secrets-encryption"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Secrets Encryption | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security/secrets-encryption"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/secrets-encryption" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/secrets-encryption" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Secrets Encryption | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security/secrets-encryption"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Secrets Encryption | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security/secrets-encryption"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/secrets-encryption" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/secrets-encryption" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/security"><span itemprop="name">보안</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Secrets Encryption</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>Secrets Encryption Config</h1><p>K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag <code>--secrets-encryption</code> will do the following automatically:</p><ul><li>Generate an AES-CBC key</li><li>Generate an encryption config file with the generated key</li><li>Pass the config to the KubeAPI as encryption-provider-config</li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>팁</div><div class="admonitionContent_S0QG"><p>Secrets-encryption cannot be enabled on an existing server without restarting it.<br>
-<!-- -->Use <code>curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption</code> if installing from script, or other methods described in <a href="/kr/installation/configuration#configuration-with-install-script">Configuration Options</a>.</p></div></div><p>Example of the encryption config file:</p><div class="language-json codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-json codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;kind&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;EncryptionConfiguration&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;apiVersion&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;apiserver.config.k8s.io/v1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secrets&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;providers&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;aescbc&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token property">&quot;keys&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;name&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;aescbckey&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;secret&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;xxxxxxxxxxxxxxxxxxx&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;identity&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s contains a utility tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><p>For more information, see the <a href="/kr/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> command documentation</a>.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/security"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">보안</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security/hardening-guide"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/security"><span itemprop="name">보안</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Secrets Encryption</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><h1>Secrets Encryption Config</h1><p>K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag <code>--secrets-encryption</code> will do the following automatically:</p><ul><li>Generate an AES-CBC key</li><li>Generate an encryption config file with the generated key</li><li>Pass the config to the KubeAPI as encryption-provider-config</li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>팁</div><div class="admonitionContent_S0QG"><p>Secrets-encryption cannot be enabled on an existing server without restarting it.<br>
+<!-- -->Use <code>curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption</code> if installing from script, or other methods described in <a href="/kr/installation/configuration#configuration-with-install-script">Configuration Options</a>.</p></div></div><p>Example of the encryption config file:</p><div class="language-json codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-json codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;kind&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;EncryptionConfiguration&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;apiVersion&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;apiserver.config.k8s.io/v1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secrets&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;providers&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;aescbc&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token property">&quot;keys&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;name&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;aescbckey&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;secret&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;xxxxxxxxxxxxxxxxxxx&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;identity&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s contains a utility tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><p>For more information, see the <a href="/kr/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> command documentation</a>.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/security"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">보안</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/security/hardening-guide"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/security/self-assessment.html b/kr/security/self-assessment.html
index f54012deb..3f668b3cf 100644
--- a/kr/security/self-assessment.html
+++ b/kr/security/self-assessment.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CIS Self Assessment Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security/self-assessment"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Self Assessment Guide | K3s"><meta data-rh="true" name="description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><meta data-rh="true" property="og:description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security/self-assessment"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/self-assessment" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/self-assessment" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">CIS Self Assessment Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/security/self-assessment"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Self Assessment Guide | K3s"><meta data-rh="true" name="description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><meta data-rh="true" property="og:description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/security/self-assessment"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/self-assessment" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/self-assessment" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/security"><span itemprop="name">보안</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Self Assessment Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Self Assessment Guide</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24<a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><h4 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>This document is a companion to the <a href="/kr/security/hardening-guide">K3s security hardening guide</a>. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers.</p><p>This guide is specific to the <strong>v1.22</strong>, <strong>v1.23</strong> and <strong>v1.24</strong> release line of K3s and the <strong>v1.23</strong> release of the CIS Kubernetes Benchmark.</p><p>For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in <a href="https://www.cisecurity.org/benchmark/kubernetes/" target="_blank" rel="noopener noreferrer">Center for Internet Security (CIS)</a>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="testing-controls-methodology">Testing controls methodology<a href="#testing-controls-methodology" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide.</p><p>Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing.</p><p>These are the possible results for each control:</p><ul><li><strong>Pass</strong> - The K3s cluster under test passed the audit outlined in the benchmark.</li><li><strong>Not Applicable</strong> - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so.</li><li><strong>Warn</strong> - The control is manual in the CIS benchmark and it depends on the cluster&#x27;s use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.</li></ul><p>This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the &quot;audit&quot; commands to fit your scenario.</p><blockquote><p>NOTE: Only <code>automated</code> tests (previously called <code>scored</code>) are covered in this guide.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controls">Controls<a href="#controls" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><hr><h2 class="anchor anchorWithStickyNavbar_LWe7" id="11-control-plane-node-configuration-files">1.1 Control Plane Node Configuration Files<a href="#11-control-plane-node-configuration-files" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)<a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/security"><span itemprop="name">보안</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Self Assessment Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Self Assessment Guide</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24<a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><h4 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>This document is a companion to the <a href="/kr/security/hardening-guide">K3s security hardening guide</a>. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers.</p><p>This guide is specific to the <strong>v1.22</strong>, <strong>v1.23</strong> and <strong>v1.24</strong> release line of K3s and the <strong>v1.23</strong> release of the CIS Kubernetes Benchmark.</p><p>For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in <a href="https://www.cisecurity.org/benchmark/kubernetes/" target="_blank" rel="noopener noreferrer">Center for Internet Security (CIS)</a>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="testing-controls-methodology">Testing controls methodology<a href="#testing-controls-methodology" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h4><p>Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide.</p><p>Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing.</p><p>These are the possible results for each control:</p><ul><li><strong>Pass</strong> - The K3s cluster under test passed the audit outlined in the benchmark.</li><li><strong>Not Applicable</strong> - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so.</li><li><strong>Warn</strong> - The control is manual in the CIS benchmark and it depends on the cluster&#x27;s use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.</li></ul><p>This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the &quot;audit&quot; commands to fit your scenario.</p><blockquote><p>NOTE: Only <code>automated</code> tests (previously called <code>scored</code>) are covered in this guide.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controls">Controls<a href="#controls" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><hr><h2 class="anchor anchorWithStickyNavbar_LWe7" id="11-control-plane-node-configuration-files">1.1 Control Plane Node Configuration Files<a href="#11-control-plane-node-configuration-files" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)<a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
 Run the below command (based on the file location on your system) on the
 control plane node.
 For example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)<a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
@@ -451,10 +451,10 @@
 suggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker
 Containers.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="574-the-default-namespace-should-not-be-used-manual">5.7.4 The default namespace should not be used (Manual)<a href="#574-the-default-namespace-should-not-be-used-manual" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><strong>Result:</strong> warn</p><p><strong>Remediation:</strong>
 Ensure that namespaces are created to allow for appropriate segregation of Kubernetes
-resources and that all new resources are created in a specific namespace.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/security/hardening-guide"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="table-of-contents__link toc-highlight">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24</a></li><li><a href="#controls" class="table-of-contents__link toc-highlight">Controls</a></li><li><a href="#11-control-plane-node-configuration-files" class="table-of-contents__link toc-highlight">1.1 Control Plane Node Configuration Files</a><ul><li><a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)</a></li><li><a href="#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)</a></li><li><a href="#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated" class="table-of-contents__link toc-highlight">1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)</a></li><li><a href="#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)</a></li><li><a href="#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)</a></li><li><a href="#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual" class="table-of-contents__link toc-highlight">1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)</a></li></ul></li><li><a href="#12-api-server" class="table-of-contents__link toc-highlight">1.2 API Server</a><ul><li><a href="#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual" class="table-of-contents__link toc-highlight">1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)</a></li><li><a href="#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)</a></li><li><a href="#123-ensure-that-the---denyserviceexternalips-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)</a></li><li><a href="#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)</a></li><li><a href="#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)</a></li><li><a href="#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)</a></li><li><a href="#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#128-ensure-that-the---authorization-mode-argument-includes-node-automated" class="table-of-contents__link toc-highlight">1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)</a></li><li><a href="#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated" class="table-of-contents__link toc-highlight">1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)</a></li><li><a href="#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual" class="table-of-contents__link toc-highlight">1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)</a></li><li><a href="#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)</a></li><li><a href="#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual" class="table-of-contents__link toc-highlight">1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)</a></li><li><a href="#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual" class="table-of-contents__link toc-highlight">1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)</a></li><li><a href="#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated" class="table-of-contents__link toc-highlight">1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)</a></li><li><a href="#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated" class="table-of-contents__link toc-highlight">1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)</a></li><li><a href="#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated" class="table-of-contents__link toc-highlight">1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)</a></li><li><a href="#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated" class="table-of-contents__link toc-highlight">1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)</a></li><li><a href="#1218-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.2.18 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#1219-ensure-that-the---audit-log-path-argument-is-set-automated" class="table-of-contents__link toc-highlight">1.2.19 Ensure that the --audit-log-path argument is set (Automated)</a></li><li><a href="#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)</a></li><li><a href="#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)</a></li><li><a href="#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)</a></li><li><a href="#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)</a></li><li><a href="#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)</a></li><li><a href="#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)</a></li><li><a href="#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)</a></li><li><a href="#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)</a></li><li><a href="#1231-ensure-that-encryption-providers-are-appropriately-configured-manual" class="table-of-contents__link toc-highlight">1.2.31 Ensure that encryption providers are appropriately configured (Manual)</a></li><li><a href="#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#13-controller-manager" class="table-of-contents__link toc-highlight">1.3 Controller Manager</a><ul><li><a href="#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)</a></li><li><a href="#132-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.3.2 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)</a></li><li><a href="#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)</a></li><li><a href="#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)</a></li><li><a href="#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#14-scheduler" class="table-of-contents__link toc-highlight">1.4 Scheduler</a><ul><li><a href="#141-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.4.1 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#2-etcd-node-configuration" class="table-of-contents__link toc-highlight">2 Etcd Node Configuration</a><ul><li><a href="#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)</a></li><li><a href="#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.2 Ensure that the --client-cert-auth argument is set to true (Automated)</a></li><li><a href="#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.3 Ensure that the --auto-tls argument is not set to true (Automated)</a></li><li><a href="#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)</a></li><li><a href="#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)</a></li><li><a href="#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual" class="table-of-contents__link toc-highlight">2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)</a></li></ul></li><li><a href="#31-authentication-and-authorization" class="table-of-contents__link toc-highlight">3.1 Authentication and Authorization</a><ul><li><a href="#311-client-certificate-authentication-should-not-be-used-for-users-manual" class="table-of-contents__link toc-highlight">3.1.1 Client certificate authentication should not be used for users (Manual)</a></li></ul></li><li><a href="#32-logging" class="table-of-contents__link toc-highlight">3.2 Logging</a><ul><li><a href="#321-ensure-that-a-minimal-audit-policy-is-created-manual" class="table-of-contents__link toc-highlight">3.2.1 Ensure that a minimal audit policy is created (Manual)</a></li><li><a href="#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual" class="table-of-contents__link toc-highlight">3.2.2 Ensure that the audit policy covers key security concerns (Manual)</a></li></ul></li><li><a href="#41-worker-node-configuration-files" class="table-of-contents__link toc-highlight">4.1 Worker Node Configuration Files</a><ul><li><a href="#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)</a></li><li><a href="#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)</a></li><li><a href="#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)</a></li><li><a href="#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)</a></li><li><a href="#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)</a></li><li><a href="#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)</a></li></ul></li><li><a href="#42-kubelet" class="table-of-contents__link toc-highlight">4.2 Kubelet</a><ul><li><a href="#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)</a></li><li><a href="#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)</a></li><li><a href="#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)</a></li><li><a href="#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)</a></li><li><a href="#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)</a></li><li><a href="#428-ensure-that-the---hostname-override-argument-is-not-set-manual" class="table-of-contents__link toc-highlight">4.2.8 Ensure that the --hostname-override argument is not set (Manual)</a></li><li><a href="#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual" class="table-of-contents__link toc-highlight">4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)</a></li><li><a href="#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)</a></li><li><a href="#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)</a></li><li><a href="#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual" class="table-of-contents__link toc-highlight">4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)</a></li><li><a href="#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#51-rbac-and-service-accounts" class="table-of-contents__link toc-highlight">5.1 RBAC and Service Accounts</a><ul><li><a href="#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual" class="table-of-contents__link toc-highlight">5.1.1 Ensure that the cluster-admin role is only used where required (Manual)</a></li><li><a href="#512-minimize-access-to-secrets-manual" class="table-of-contents__link toc-highlight">5.1.2 Minimize access to secrets (Manual)</a></li><li><a href="#513-minimize-wildcard-use-in-roles-and-clusterroles-manual" class="table-of-contents__link toc-highlight">5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)</a></li><li><a href="#514-minimize-access-to-create-pods-manual" class="table-of-contents__link toc-highlight">5.1.4 Minimize access to create pods (Manual)</a></li><li><a href="#515-ensure-that-default-service-accounts-are-not-actively-used-manual" class="table-of-contents__link toc-highlight">5.1.5 Ensure that default service accounts are not actively used. (Manual)</a></li><li><a href="#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual" class="table-of-contents__link toc-highlight">5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)</a></li><li><a href="#517-avoid-use-of-systemmasters-group-manual" class="table-of-contents__link toc-highlight">5.1.7 Avoid use of system:masters group (Manual)</a></li><li><a href="#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual" class="table-of-contents__link toc-highlight">5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)</a></li></ul></li><li><a href="#52-pod-security-standards" class="table-of-contents__link toc-highlight">5.2 Pod Security Standards</a><ul><li><a href="#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual" class="table-of-contents__link toc-highlight">5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)</a></li><li><a href="#522-minimize-the-admission-of-privileged-containers-automated" class="table-of-contents__link toc-highlight">5.2.2 Minimize the admission of privileged containers (Automated)</a></li><li><a href="#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated" class="table-of-contents__link toc-highlight">5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)</a></li><li><a href="#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated" class="table-of-contents__link toc-highlight">5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)</a></li><li><a href="#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated" class="table-of-contents__link toc-highlight">5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)</a></li><li><a href="#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated" class="table-of-contents__link toc-highlight">5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)</a></li><li><a href="#527-minimize-the-admission-of-root-containers-automated" class="table-of-contents__link toc-highlight">5.2.7 Minimize the admission of root containers (Automated)</a></li><li><a href="#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated" class="table-of-contents__link toc-highlight">5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)</a></li><li><a href="#529-minimize-the-admission-of-containers-with-added-capabilities-automated" class="table-of-contents__link toc-highlight">5.2.9 Minimize the admission of containers with added capabilities (Automated)</a></li><li><a href="#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual" class="table-of-contents__link toc-highlight">5.2.10 Minimize the admission of containers with capabilities assigned (Manual)</a></li><li><a href="#5211-minimize-the-admission-of-windows-hostprocess-containers-manual" class="table-of-contents__link toc-highlight">5.2.11 Minimize the admission of Windows HostProcess containers (Manual)</a></li><li><a href="#5212-minimize-the-admission-of-hostpath-volumes-manual" class="table-of-contents__link toc-highlight">5.2.12 Minimize the admission of HostPath volumes (Manual)</a></li><li><a href="#5213-minimize-the-admission-of-containers-which-use-hostports-manual" class="table-of-contents__link toc-highlight">5.2.13 Minimize the admission of containers which use HostPorts (Manual)</a></li></ul></li><li><a href="#53-network-policies-and-cni" class="table-of-contents__link toc-highlight">5.3 Network Policies and CNI</a><ul><li><a href="#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual" class="table-of-contents__link toc-highlight">5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)</a></li><li><a href="#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual" class="table-of-contents__link toc-highlight">5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)</a></li></ul></li><li><a href="#54-secrets-management" class="table-of-contents__link toc-highlight">5.4 Secrets Management</a><ul><li><a href="#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual" class="table-of-contents__link toc-highlight">5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)</a></li><li><a href="#542-consider-external-secret-storage-manual" class="table-of-contents__link toc-highlight">5.4.2 Consider external secret storage (Manual)</a></li></ul></li><li><a href="#55-extensible-admission-control" class="table-of-contents__link toc-highlight">5.5 Extensible Admission Control</a><ul><li><a href="#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual" class="table-of-contents__link toc-highlight">5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)</a></li></ul></li><li><a href="#57-general-policies" class="table-of-contents__link toc-highlight">5.7 General Policies</a><ul><li><a href="#571-create-administrative-boundaries-between-resources-using-namespaces-manual" class="table-of-contents__link toc-highlight">5.7.1 Create administrative boundaries between resources using namespaces (Manual)</a></li><li><a href="#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual" class="table-of-contents__link toc-highlight">5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)</a></li><li><a href="#573-apply-securitycontext-to-your-pods-and-containers-manual" class="table-of-contents__link toc-highlight">5.7.3 Apply SecurityContext to your Pods and Containers (Manual)</a></li><li><a href="#574-the-default-namespace-should-not-be-used-manual" class="table-of-contents__link toc-highlight">5.7.4 The default namespace should not be used (Manual)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+resources and that all new resources are created in a specific namespace.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/security/hardening-guide"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="table-of-contents__link toc-highlight">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24</a></li><li><a href="#controls" class="table-of-contents__link toc-highlight">Controls</a></li><li><a href="#11-control-plane-node-configuration-files" class="table-of-contents__link toc-highlight">1.1 Control Plane Node Configuration Files</a><ul><li><a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)</a></li><li><a href="#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)</a></li><li><a href="#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated" class="table-of-contents__link toc-highlight">1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)</a></li><li><a href="#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)</a></li><li><a href="#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)</a></li><li><a href="#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual" class="table-of-contents__link toc-highlight">1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)</a></li></ul></li><li><a href="#12-api-server" class="table-of-contents__link toc-highlight">1.2 API Server</a><ul><li><a href="#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual" class="table-of-contents__link toc-highlight">1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)</a></li><li><a href="#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)</a></li><li><a href="#123-ensure-that-the---denyserviceexternalips-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)</a></li><li><a href="#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)</a></li><li><a href="#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)</a></li><li><a href="#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)</a></li><li><a href="#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#128-ensure-that-the---authorization-mode-argument-includes-node-automated" class="table-of-contents__link toc-highlight">1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)</a></li><li><a href="#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated" class="table-of-contents__link toc-highlight">1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)</a></li><li><a href="#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual" class="table-of-contents__link toc-highlight">1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)</a></li><li><a href="#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)</a></li><li><a href="#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual" class="table-of-contents__link toc-highlight">1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)</a></li><li><a href="#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual" class="table-of-contents__link toc-highlight">1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)</a></li><li><a href="#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated" class="table-of-contents__link toc-highlight">1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)</a></li><li><a href="#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated" class="table-of-contents__link toc-highlight">1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)</a></li><li><a href="#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated" class="table-of-contents__link toc-highlight">1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)</a></li><li><a href="#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated" class="table-of-contents__link toc-highlight">1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)</a></li><li><a href="#1218-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.2.18 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#1219-ensure-that-the---audit-log-path-argument-is-set-automated" class="table-of-contents__link toc-highlight">1.2.19 Ensure that the --audit-log-path argument is set (Automated)</a></li><li><a href="#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)</a></li><li><a href="#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)</a></li><li><a href="#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)</a></li><li><a href="#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)</a></li><li><a href="#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)</a></li><li><a href="#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)</a></li><li><a href="#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)</a></li><li><a href="#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)</a></li><li><a href="#1231-ensure-that-encryption-providers-are-appropriately-configured-manual" class="table-of-contents__link toc-highlight">1.2.31 Ensure that encryption providers are appropriately configured (Manual)</a></li><li><a href="#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#13-controller-manager" class="table-of-contents__link toc-highlight">1.3 Controller Manager</a><ul><li><a href="#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)</a></li><li><a href="#132-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.3.2 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)</a></li><li><a href="#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)</a></li><li><a href="#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)</a></li><li><a href="#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#14-scheduler" class="table-of-contents__link toc-highlight">1.4 Scheduler</a><ul><li><a href="#141-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.4.1 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#2-etcd-node-configuration" class="table-of-contents__link toc-highlight">2 Etcd Node Configuration</a><ul><li><a href="#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)</a></li><li><a href="#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.2 Ensure that the --client-cert-auth argument is set to true (Automated)</a></li><li><a href="#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.3 Ensure that the --auto-tls argument is not set to true (Automated)</a></li><li><a href="#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)</a></li><li><a href="#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)</a></li><li><a href="#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual" class="table-of-contents__link toc-highlight">2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)</a></li></ul></li><li><a href="#31-authentication-and-authorization" class="table-of-contents__link toc-highlight">3.1 Authentication and Authorization</a><ul><li><a href="#311-client-certificate-authentication-should-not-be-used-for-users-manual" class="table-of-contents__link toc-highlight">3.1.1 Client certificate authentication should not be used for users (Manual)</a></li></ul></li><li><a href="#32-logging" class="table-of-contents__link toc-highlight">3.2 Logging</a><ul><li><a href="#321-ensure-that-a-minimal-audit-policy-is-created-manual" class="table-of-contents__link toc-highlight">3.2.1 Ensure that a minimal audit policy is created (Manual)</a></li><li><a href="#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual" class="table-of-contents__link toc-highlight">3.2.2 Ensure that the audit policy covers key security concerns (Manual)</a></li></ul></li><li><a href="#41-worker-node-configuration-files" class="table-of-contents__link toc-highlight">4.1 Worker Node Configuration Files</a><ul><li><a href="#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)</a></li><li><a href="#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)</a></li><li><a href="#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)</a></li><li><a href="#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)</a></li><li><a href="#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)</a></li><li><a href="#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)</a></li></ul></li><li><a href="#42-kubelet" class="table-of-contents__link toc-highlight">4.2 Kubelet</a><ul><li><a href="#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)</a></li><li><a href="#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)</a></li><li><a href="#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)</a></li><li><a href="#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)</a></li><li><a href="#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)</a></li><li><a href="#428-ensure-that-the---hostname-override-argument-is-not-set-manual" class="table-of-contents__link toc-highlight">4.2.8 Ensure that the --hostname-override argument is not set (Manual)</a></li><li><a href="#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual" class="table-of-contents__link toc-highlight">4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)</a></li><li><a href="#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)</a></li><li><a href="#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)</a></li><li><a href="#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual" class="table-of-contents__link toc-highlight">4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)</a></li><li><a href="#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#51-rbac-and-service-accounts" class="table-of-contents__link toc-highlight">5.1 RBAC and Service Accounts</a><ul><li><a href="#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual" class="table-of-contents__link toc-highlight">5.1.1 Ensure that the cluster-admin role is only used where required (Manual)</a></li><li><a href="#512-minimize-access-to-secrets-manual" class="table-of-contents__link toc-highlight">5.1.2 Minimize access to secrets (Manual)</a></li><li><a href="#513-minimize-wildcard-use-in-roles-and-clusterroles-manual" class="table-of-contents__link toc-highlight">5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)</a></li><li><a href="#514-minimize-access-to-create-pods-manual" class="table-of-contents__link toc-highlight">5.1.4 Minimize access to create pods (Manual)</a></li><li><a href="#515-ensure-that-default-service-accounts-are-not-actively-used-manual" class="table-of-contents__link toc-highlight">5.1.5 Ensure that default service accounts are not actively used. (Manual)</a></li><li><a href="#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual" class="table-of-contents__link toc-highlight">5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)</a></li><li><a href="#517-avoid-use-of-systemmasters-group-manual" class="table-of-contents__link toc-highlight">5.1.7 Avoid use of system:masters group (Manual)</a></li><li><a href="#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual" class="table-of-contents__link toc-highlight">5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)</a></li></ul></li><li><a href="#52-pod-security-standards" class="table-of-contents__link toc-highlight">5.2 Pod Security Standards</a><ul><li><a href="#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual" class="table-of-contents__link toc-highlight">5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)</a></li><li><a href="#522-minimize-the-admission-of-privileged-containers-automated" class="table-of-contents__link toc-highlight">5.2.2 Minimize the admission of privileged containers (Automated)</a></li><li><a href="#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated" class="table-of-contents__link toc-highlight">5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)</a></li><li><a href="#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated" class="table-of-contents__link toc-highlight">5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)</a></li><li><a href="#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated" class="table-of-contents__link toc-highlight">5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)</a></li><li><a href="#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated" class="table-of-contents__link toc-highlight">5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)</a></li><li><a href="#527-minimize-the-admission-of-root-containers-automated" class="table-of-contents__link toc-highlight">5.2.7 Minimize the admission of root containers (Automated)</a></li><li><a href="#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated" class="table-of-contents__link toc-highlight">5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)</a></li><li><a href="#529-minimize-the-admission-of-containers-with-added-capabilities-automated" class="table-of-contents__link toc-highlight">5.2.9 Minimize the admission of containers with added capabilities (Automated)</a></li><li><a href="#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual" class="table-of-contents__link toc-highlight">5.2.10 Minimize the admission of containers with capabilities assigned (Manual)</a></li><li><a href="#5211-minimize-the-admission-of-windows-hostprocess-containers-manual" class="table-of-contents__link toc-highlight">5.2.11 Minimize the admission of Windows HostProcess containers (Manual)</a></li><li><a href="#5212-minimize-the-admission-of-hostpath-volumes-manual" class="table-of-contents__link toc-highlight">5.2.12 Minimize the admission of HostPath volumes (Manual)</a></li><li><a href="#5213-minimize-the-admission-of-containers-which-use-hostports-manual" class="table-of-contents__link toc-highlight">5.2.13 Minimize the admission of containers which use HostPorts (Manual)</a></li></ul></li><li><a href="#53-network-policies-and-cni" class="table-of-contents__link toc-highlight">5.3 Network Policies and CNI</a><ul><li><a href="#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual" class="table-of-contents__link toc-highlight">5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)</a></li><li><a href="#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual" class="table-of-contents__link toc-highlight">5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)</a></li></ul></li><li><a href="#54-secrets-management" class="table-of-contents__link toc-highlight">5.4 Secrets Management</a><ul><li><a href="#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual" class="table-of-contents__link toc-highlight">5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)</a></li><li><a href="#542-consider-external-secret-storage-manual" class="table-of-contents__link toc-highlight">5.4.2 Consider external secret storage (Manual)</a></li></ul></li><li><a href="#55-extensible-admission-control" class="table-of-contents__link toc-highlight">5.5 Extensible Admission Control</a><ul><li><a href="#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual" class="table-of-contents__link toc-highlight">5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)</a></li></ul></li><li><a href="#57-general-policies" class="table-of-contents__link toc-highlight">5.7 General Policies</a><ul><li><a href="#571-create-administrative-boundaries-between-resources-using-namespaces-manual" class="table-of-contents__link toc-highlight">5.7.1 Create administrative boundaries between resources using namespaces (Manual)</a></li><li><a href="#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual" class="table-of-contents__link toc-highlight">5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)</a></li><li><a href="#573-apply-securitycontext-to-your-pods-and-containers-manual" class="table-of-contents__link toc-highlight">5.7.3 Apply SecurityContext to your Pods and Containers (Manual)</a></li><li><a href="#574-the-default-namespace-should-not-be-used-manual" class="table-of-contents__link toc-highlight">5.7.4 The default namespace should not be used (Manual)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/storage.html b/kr/storage.html
index 95baa166f..9f44d030e 100644
--- a/kr/storage.html
+++ b/kr/storage.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">볼륨과 저장소 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/storage"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="볼륨과 저장소 | K3s"><meta data-rh="true" name="description" content="데이터를 유지해야 하는 애플리케이션을 배포할 때는 퍼시스턴트 스토리지를 만들어야 합니다. 퍼시스턴트 스토리지를 사용하면 애플리케이션을 실행하는 파드 외부에 애플리케이션 데이터를 저장할 수 있습니다. 이 스토리지 방식을 사용하면 애플리케이션의 파드에 장애가 발생하더라도 애플리케이션 데이터를 유지할 수 있습니다."><meta data-rh="true" property="og:description" content="데이터를 유지해야 하는 애플리케이션을 배포할 때는 퍼시스턴트 스토리지를 만들어야 합니다. 퍼시스턴트 스토리지를 사용하면 애플리케이션을 실행하는 파드 외부에 애플리케이션 데이터를 저장할 수 있습니다. 이 스토리지 방식을 사용하면 애플리케이션의 파드에 장애가 발생하더라도 애플리케이션 데이터를 유지할 수 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/storage"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/storage" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/storage" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">볼륨과 저장소 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/storage"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="볼륨과 저장소 | K3s"><meta data-rh="true" name="description" content="데이터를 유지해야 하는 애플리케이션을 배포할 때는 퍼시스턴트 스토리지를 만들어야 합니다. 퍼시스턴트 스토리지를 사용하면 애플리케이션을 실행하는 파드 외부에 애플리케이션 데이터를 저장할 수 있습니다. 이 스토리지 방식을 사용하면 애플리케이션의 파드에 장애가 발생하더라도 애플리케이션 데이터를 유지할 수 있습니다."><meta data-rh="true" property="og:description" content="데이터를 유지해야 하는 애플리케이션을 배포할 때는 퍼시스턴트 스토리지를 만들어야 합니다. 퍼시스턴트 스토리지를 사용하면 애플리케이션을 실행하는 파드 외부에 애플리케이션 데이터를 저장할 수 있습니다. 이 스토리지 방식을 사용하면 애플리케이션의 파드에 장애가 발생하더라도 애플리케이션 데이터를 유지할 수 있습니다."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/storage"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/storage" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/storage" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/storage" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">볼륨과 저장소</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>볼륨과 저장소</h1></header><p>데이터를 유지해야 하는 애플리케이션을 배포할 때는 퍼시스턴트 스토리지를 만들어야 합니다. 퍼시스턴트 스토리지를 사용하면 애플리케이션을 실행하는 파드 외부에 애플리케이션 데이터를 저장할 수 있습니다. 이 스토리지 방식을 사용하면 애플리케이션의 파드에 장애가 발생하더라도 애플리케이션 데이터를 유지할 수 있습니다.</p><p>퍼시스턴트 볼륨(PV: persistent volume)은 쿠버네티스 클러스터의 스토리지 조각이며, 퍼시스턴트 볼륨 클레임(PVC: persistent volume claim)은 스토리지에 대한 요청입니다. PV와 PVC의 작동 방식에 대한 자세한 내용은 <a href="https://kubernetes.io/ko/docs/concepts/storage/volumes/" target="_blank" rel="noopener noreferrer">스토리지</a> 공식 쿠버네티스 문서를 참조하세요.</p><p>이 페이지는 로컬 스토리지 제공자 또는 <!-- -->[롱혼(#setting-up-longhorn)]<!-- -->을 사용하여 퍼시스턴트 스토리지를 설정하는 방법을 설명합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-스토리지의-차이점은-무엇인가요">K3s 스토리지의 차이점은 무엇인가요?<a href="#k3s-스토리지의-차이점은-무엇인가요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s는 몇 가지 선택적 볼륨 플러그인과 모든 내장(&quot;in-tree&quot;라고도 함) 클라우드 제공업체를 제거합니다. 이는 더 작은 바이너리 크기를 달성하고 많은 K3s 사용 사례에서 사용할 수 없는 타사 클라우드 또는 데이터센터 기술 및 서비스에 대한 의존을 피하기 위한 것입니다. 이러한 플러그인을 제거해도 핵심 Kubernetes 기능이나 적합성에는 영향을 미치지 않기 때문에 이렇게 할 수 있습니다.</p><p>다음 볼륨 플러그인은 K3s에서 제거되었습니다:</p><ul><li>cephfs</li><li>fc</li><li>flocker</li><li>git_repo</li><li>glusterfs</li><li>portworx</li><li>quobyte</li><li>rbd</li><li>storageos</li></ul><p>K3s와 함께 사용할 수 있는 트리 외 대안인 두 구성 요소가 있습니다:
-쿠버네티스 <a href="https://github.com/container-storage-interface/spec/blob/master/spec.md" target="_blank" rel="noopener noreferrer">컨테이너 스토리지 인터페이스(CSI)</a> 및 <a href="https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/" target="_blank" rel="noopener noreferrer">클라우드 프로바이더 인터페이스(CPI)</a>입니다.</p><p>쿠버네티스 유지 관리자는 인-트리 볼륨 플러그인을 CSI 드라이버로 적극적으로 마이그레이션하고 있습니다. 이 마이그레이션에 대한 자세한 내용은 <a href="https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/" target="_blank" rel="noopener noreferrer">여기</a>를 참고하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="로컬-스토리지-공급자-설정하기">로컬 스토리지 공급자 설정하기<a href="#로컬-스토리지-공급자-설정하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s는 랜처의 로컬 경로 프로비저너와 함께 제공되며, 이를 통해 각 노드의 로컬 스토리지를 사용하여 영구 볼륨 클레임(persistent volume claims)을 즉시 생성할 수 있습니다. 아래에서는 간단한 예제를 다루겠습니다. 자세한 내용은 공식 문서 <a href="https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage" target="_blank" rel="noopener noreferrer">여기</a>를 참조하세요.</p><p>호스트 경로 지원 퍼시스턴트 볼륨 클레임과 이를 활용할 파드를 생성합니다:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml">pvc.yaml<a href="#pvcyaml" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml">pod.yaml<a href="#podyaml" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>yaml을 적용합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>PV 및 PVC가 생성되었는지 확인합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>상태는 각각 <code>Bound</code>여야 합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="longhorn-구성하기">Longhorn 구성하기<a href="#longhorn-구성하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Longhorn은 ARM32를 지원하지 않습니다.</p></div></div><p>K3s는 쿠버네티스용 오픈소스 분산형 블록 스토리지 시스템인 <a href="https://github.com/longhorn/longhorn" target="_blank" rel="noopener noreferrer">Longhorn</a>을 지원합니다.</p><p>아래는 간단한 예제입니다. 자세한 내용은 <a href="https://longhorn.io/docs/latest/" target="_blank" rel="noopener noreferrer">공식 문서</a>를 참고하시기 바랍니다.</p><p>longhorn.yaml을 적용하여 Longhorn을 설치합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Longhorn은 네임스페이스 <code>longhorn-system</code>에 설치됩니다.</p><p>yaml을 적용하여 PVC와 파드를 생성합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml-1">pvc.yaml<a href="#pvcyaml-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml-1">pod.yaml<a href="#podyaml-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>PV 및 PVC가 생성되었는지 확인합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>상태는 각각 <code>Bound</code>여야 합니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades/automated"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Automated Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/networking"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">네트워킹</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-스토리지의-차이점은-무엇인가요" class="table-of-contents__link toc-highlight">K3s 스토리지의 차이점은 무엇인가요?</a></li><li><a href="#로컬-스토리지-공급자-설정하기" class="table-of-contents__link toc-highlight">로컬 스토리지 공급자 설정하기</a><ul><li><a href="#pvcyaml" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li><li><a href="#longhorn-구성하기" class="table-of-contents__link toc-highlight">Longhorn 구성하기</a><ul><li><a href="#pvcyaml-1" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml-1" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/storage" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">볼륨과 저장소</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>볼륨과 저장소</h1></header><p>데이터를 유지해야 하는 애플리케이션을 배포할 때는 퍼시스턴트 스토리지를 만들어야 합니다. 퍼시스턴트 스토리지를 사용하면 애플리케이션을 실행하는 파드 외부에 애플리케이션 데이터를 저장할 수 있습니다. 이 스토리지 방식을 사용하면 애플리케이션의 파드에 장애가 발생하더라도 애플리케이션 데이터를 유지할 수 있습니다.</p><p>퍼시스턴트 볼륨(PV: persistent volume)은 쿠버네티스 클러스터의 스토리지 조각이며, 퍼시스턴트 볼륨 클레임(PVC: persistent volume claim)은 스토리지에 대한 요청입니다. PV와 PVC의 작동 방식에 대한 자세한 내용은 <a href="https://kubernetes.io/ko/docs/concepts/storage/volumes/" target="_blank" rel="noopener noreferrer">스토리지</a> 공식 쿠버네티스 문서를 참조하세요.</p><p>이 페이지는 로컬 스토리지 제공자 또는 <!-- -->[롱혼(#setting-up-longhorn)]<!-- -->을 사용하여 퍼시스턴트 스토리지를 설정하는 방법을 설명합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-스토리지의-차이점은-무엇인가요">K3s 스토리지의 차이점은 무엇인가요?<a href="#k3s-스토리지의-차이점은-무엇인가요" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s는 몇 가지 선택적 볼륨 플러그인과 모든 내장(&quot;in-tree&quot;라고도 함) 클라우드 제공업체를 제거합니다. 이는 더 작은 바이너리 크기를 달성하고 많은 K3s 사용 사례에서 사용할 수 없는 타사 클라우드 또는 데이터센터 기술 및 서비스에 대한 의존을 피하기 위한 것입니다. 이러한 플러그인을 제거해도 핵심 Kubernetes 기능이나 적합성에는 영향을 미치지 않기 때문에 이렇게 할 수 있습니다.</p><p>다음 볼륨 플러그인은 K3s에서 제거되었습니다:</p><ul><li>cephfs</li><li>fc</li><li>flocker</li><li>git_repo</li><li>glusterfs</li><li>portworx</li><li>quobyte</li><li>rbd</li><li>storageos</li></ul><p>K3s와 함께 사용할 수 있는 트리 외 대안인 두 구성 요소가 있습니다:
+쿠버네티스 <a href="https://github.com/container-storage-interface/spec/blob/master/spec.md" target="_blank" rel="noopener noreferrer">컨테이너 스토리지 인터페이스(CSI)</a> 및 <a href="https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/" target="_blank" rel="noopener noreferrer">클라우드 프로바이더 인터페이스(CPI)</a>입니다.</p><p>쿠버네티스 유지 관리자는 인-트리 볼륨 플러그인을 CSI 드라이버로 적극적으로 마이그레이션하고 있습니다. 이 마이그레이션에 대한 자세한 내용은 <a href="https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/" target="_blank" rel="noopener noreferrer">여기</a>를 참고하세요.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="로컬-스토리지-공급자-설정하기">로컬 스토리지 공급자 설정하기<a href="#로컬-스토리지-공급자-설정하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><p>K3s는 랜처의 로컬 경로 프로비저너와 함께 제공되며, 이를 통해 각 노드의 로컬 스토리지를 사용하여 영구 볼륨 클레임(persistent volume claims)을 즉시 생성할 수 있습니다. 아래에서는 간단한 예제를 다루겠습니다. 자세한 내용은 공식 문서 <a href="https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage" target="_blank" rel="noopener noreferrer">여기</a>를 참조하세요.</p><p>호스트 경로 지원 퍼시스턴트 볼륨 클레임과 이를 활용할 파드를 생성합니다:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml">pvc.yaml<a href="#pvcyaml" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml">pod.yaml<a href="#podyaml" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>yaml을 적용합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>PV 및 PVC가 생성되었는지 확인합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>상태는 각각 <code>Bound</code>여야 합니다.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="longhorn-구성하기">Longhorn 구성하기<a href="#longhorn-구성하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h2><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>경고</div><div class="admonitionContent_S0QG"><p>Longhorn은 ARM32를 지원하지 않습니다.</p></div></div><p>K3s는 쿠버네티스용 오픈소스 분산형 블록 스토리지 시스템인 <a href="https://github.com/longhorn/longhorn" target="_blank" rel="noopener noreferrer">Longhorn</a>을 지원합니다.</p><p>아래는 간단한 예제입니다. 자세한 내용은 <a href="https://longhorn.io/docs/latest/" target="_blank" rel="noopener noreferrer">공식 문서</a>를 참고하시기 바랍니다.</p><p>longhorn.yaml을 적용하여 Longhorn을 설치합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Longhorn은 네임스페이스 <code>longhorn-system</code>에 설치됩니다.</p><p>yaml을 적용하여 PVC와 파드를 생성합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml-1">pvc.yaml<a href="#pvcyaml-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml-1">pod.yaml<a href="#podyaml-1" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>PV 및 PVC가 생성되었는지 확인합니다:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>상태는 각각 <code>Bound</code>여야 합니다.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades/automated"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Automated Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/networking"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">네트워킹</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-스토리지의-차이점은-무엇인가요" class="table-of-contents__link toc-highlight">K3s 스토리지의 차이점은 무엇인가요?</a></li><li><a href="#로컬-스토리지-공급자-설정하기" class="table-of-contents__link toc-highlight">로컬 스토리지 공급자 설정하기</a><ul><li><a href="#pvcyaml" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li><li><a href="#longhorn-구성하기" class="table-of-contents__link toc-highlight">Longhorn 구성하기</a><ul><li><a href="#pvcyaml-1" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml-1" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/upgrades.html b/kr/upgrades.html
index dbcfb37bd..d2a1287d3 100644
--- a/kr/upgrades.html
+++ b/kr/upgrades.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">업그레이드 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="업그레이드 | K3s"><meta data-rh="true" name="description" content="K3s 클러스터 업그레이드하기"><meta data-rh="true" property="og:description" content="K3s 클러스터 업그레이드하기"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">업그레이드 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="업그레이드 | K3s"><meta data-rh="true" name="description" content="K3s 클러스터 업그레이드하기"><meta data-rh="true" property="og:description" content="K3s 클러스터 업그레이드하기"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">업그레이드</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>업그레이드</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-클러스터-업그레이드하기">K3s 클러스터 업그레이드하기<a href="#k3s-클러스터-업그레이드하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><a href="/kr/upgrades/manual">수동 업그레이드</a>에서는 클러스터를 수동으로 업그레이드하는 몇 가지 기술을 설명합니다. 또한 <a href="https://www.terraform.io/" target="_blank" rel="noopener noreferrer">Terraform</a>과 같은 타사 코드형 인프라 도구(Infrastructure-as-Code)를 통한 업그레이드의 기초로 사용할 수도 있습니다.</p><p><a href="/kr/upgrades/automated">자동 업그레이드</a>는 Rancher의 <a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">시스템-업그레이드-컨트롤러(system-upgrade-controller)</a>를 사용하여 쿠버네티스 네이티브 자동 업그레이드를 수행하는 방법을 설명합니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="버전별-주의사항">버전별 주의사항<a href="#버전별-주의사항" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><ul><li><p><strong>Traefik:</strong> Traefik이 비활성화되지 않은 경우, K3s 버전 1.20 이하에서는 Traefik v1이 설치되고, K3s 버전 1.21 이상에서는 v1이 없는 경우 Traefik v2가 설치됩니다. 구형 Traefik v1에서 Traefik v2로 업그레이드하려면 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 문서</a>를 참조하시고 <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">마이그레이션 도구</a>를 사용하세요.</p></li><li><p><strong>K3s 부트스트랩 데이터:</strong> 외부 SQL 데이터스토어가 있는 HA 구성에서 K3s를 사용 중이고 서버(컨트롤 플레인) 노드가 <code>--token</code> CLI 플래그로 시작되지 않은 경우, 토큰을 지정하지 않고는 더 이상 클러스터에 K3s 서버를 추가할 수 없게 됩니다. 백업에서 복원할 때 필요하므로 이 토큰의 사본을 보관해야 합니다. 이전에는 K3s에서 외부 SQL 데이터스토어를 사용할 때 토큰을 사용하도록 강제하지 않았습니다.</p><ul><li><p>영향을 받는 버전은 &lt;= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; 이며, 패치된 버전은 v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1 입니다.</p></li><li><p>다음과 같이 클러스터에 이미 가입된 서버에서 토큰 값을 찾을 수 있습니다:</p></li></ul></li></ul><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ul><li><strong>실험용 Dqlite:</strong> 실험용 내장 Dqlite 데이터 저장소는 K3s v1.19.1에서 더 이상 사용되지 않습니다. 실험용 Dqlite에서 실험용 내장 etcd 업그레이드는 지원되지 않는다는 점에 유의하세요. 업그레이드를 시도하면 성공하지 못하고 데이터가 손실됩니다.</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cluster-access"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">클러스터 접근</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades/killall"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Stopping K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-클러스터-업그레이드하기" class="table-of-contents__link toc-highlight">K3s 클러스터 업그레이드하기</a></li><li><a href="#버전별-주의사항" class="table-of-contents__link toc-highlight">버전별 주의사항</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">업그레이드</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>업그레이드</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-클러스터-업그레이드하기">K3s 클러스터 업그레이드하기<a href="#k3s-클러스터-업그레이드하기" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p><a href="/kr/upgrades/manual">수동 업그레이드</a>에서는 클러스터를 수동으로 업그레이드하는 몇 가지 기술을 설명합니다. 또한 <a href="https://www.terraform.io/" target="_blank" rel="noopener noreferrer">Terraform</a>과 같은 타사 코드형 인프라 도구(Infrastructure-as-Code)를 통한 업그레이드의 기초로 사용할 수도 있습니다.</p><p><a href="/kr/upgrades/automated">자동 업그레이드</a>는 Rancher의 <a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">시스템-업그레이드-컨트롤러(system-upgrade-controller)</a>를 사용하여 쿠버네티스 네이티브 자동 업그레이드를 수행하는 방법을 설명합니다.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="버전별-주의사항">버전별 주의사항<a href="#버전별-주의사항" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><ul><li><p><strong>Traefik:</strong> Traefik이 비활성화되지 않은 경우, K3s 버전 1.20 이하에서는 Traefik v1이 설치되고, K3s 버전 1.21 이상에서는 v1이 없는 경우 Traefik v2가 설치됩니다. 구형 Traefik v1에서 Traefik v2로 업그레이드하려면 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 문서</a>를 참조하시고 <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">마이그레이션 도구</a>를 사용하세요.</p></li><li><p><strong>K3s 부트스트랩 데이터:</strong> 외부 SQL 데이터스토어가 있는 HA 구성에서 K3s를 사용 중이고 서버(컨트롤 플레인) 노드가 <code>--token</code> CLI 플래그로 시작되지 않은 경우, 토큰을 지정하지 않고는 더 이상 클러스터에 K3s 서버를 추가할 수 없게 됩니다. 백업에서 복원할 때 필요하므로 이 토큰의 사본을 보관해야 합니다. 이전에는 K3s에서 외부 SQL 데이터스토어를 사용할 때 토큰을 사용하도록 강제하지 않았습니다.</p><ul><li><p>영향을 받는 버전은 &lt;= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; 이며, 패치된 버전은 v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1 입니다.</p></li><li><p>다음과 같이 클러스터에 이미 가입된 서버에서 토큰 값을 찾을 수 있습니다:</p></li></ul></li></ul><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ul><li><strong>실험용 Dqlite:</strong> 실험용 내장 Dqlite 데이터 저장소는 K3s v1.19.1에서 더 이상 사용되지 않습니다. 실험용 Dqlite에서 실험용 내장 etcd 업그레이드는 지원되지 않는다는 점에 유의하세요. 업그레이드를 시도하면 성공하지 못하고 데이터가 손실됩니다.</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/cluster-access"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">클러스터 접근</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades/killall"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Stopping K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-클러스터-업그레이드하기" class="table-of-contents__link toc-highlight">K3s 클러스터 업그레이드하기</a></li><li><a href="#버전별-주의사항" class="table-of-contents__link toc-highlight">버전별 주의사항</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/upgrades/automated.html b/kr/upgrades/automated.html
index 0527c5349..83778b63a 100644
--- a/kr/upgrades/automated.html
+++ b/kr/upgrades/automated.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Automated Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades/automated"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Automated Upgrades | K3s"><meta data-rh="true" name="description" content="Overview"><meta data-rh="true" property="og:description" content="Overview"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades/automated"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/automated" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/automated" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Automated Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades/automated"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Automated Upgrades | K3s"><meta data-rh="true" name="description" content="Overview"><meta data-rh="true" property="og:description" content="Overview"><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades/automated"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/automated" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/automated" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/upgrades"><span itemprop="name">업그레이드</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Automated Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Automated Upgrades</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You can manage K3s cluster upgrades using Rancher&#x27;s system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a <a href="https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources" target="_blank" rel="noopener noreferrer">custom resource definition (CRD)</a>, a <code>plan</code>, and a <a href="https://kubernetes.io/docs/concepts/architecture/controller/" target="_blank" rel="noopener noreferrer">controller</a>.</p><p>The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/" target="_blank" rel="noopener noreferrer">label selector</a>. See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the <a href="https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go" target="_blank" rel="noopener noreferrer">CRD</a>.</p><p>The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade <a href="https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/" target="_blank" rel="noopener noreferrer">jobs</a> on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>The upgrade job that is launched must be highly privileged. It is configured with the following:</p><ul><li>Host <code>IPC</code>, <code>NET</code>, and <code>PID</code> namespaces</li><li>The <code>CAP_SYS_BOOT</code> capability</li><li>Host root mounted at <code>/host</code> with read and write permissions</li></ul></div></div><p>To automate upgrades in this manner, you must do the following:</p><ol><li>Install the system-upgrade-controller into your cluster</li><li>Configure plans</li></ol><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>위험</div><div class="admonitionContent_S0QG"><p>If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades.</p><ul><li>If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page.</li><li>If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page.</li><li>If the K3s cluster is <em>not</em> managed Rancher, you may follow the steps below.</li></ul></div></div><p>For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:</p><ul><li><a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a></li><li><a href="https://github.com/k3s-io/k3s-upgrade" target="_blank" rel="noopener noreferrer">k3s-upgrade</a></li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>팁</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="install-the-system-upgrade-controller">Install the system-upgrade-controller<a href="#install-the-system-upgrade-controller" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p> The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configure-plans">Configure plans<a href="#configure-plans" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  </p><p>The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Server plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">values</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Agent plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> agent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> DoesNotExist</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">prepare</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> prepare</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few important things to call out regarding these plans:</p><p>1) The plans must be created in the same namespace where the controller was deployed.</p><p>2) The <code>concurrency</code> field indicates how many nodes can be upgraded at the same time. </p><p>3) The server-plan targets server nodes by specifying a label selector that selects nodes with the <code>node-role.kubernetes.io/control-plane</code> label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label.</p><p>4) The <code>prepare</code> step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute.</p><p>5) Both plans have the <code>version</code> field set to v1.24.6+k3s1. Alternatively, you can omit the <code>version</code> field and set the <code>channel</code> field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the <a href="/kr/upgrades/manual#release-channels">release channels</a>. Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">channel</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//update.k3s.io/v1</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">release/channels/stable</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed.</p><p>You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get plans -o yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get </span><span class="token function" style="color:rgb(130, 170, 255)">jobs</span><span class="token plain"> -o yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades/manual"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Manual Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/storage"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">볼륨과 저장소</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#overview" class="table-of-contents__link toc-highlight">Overview</a></li><li><a href="#install-the-system-upgrade-controller" class="table-of-contents__link toc-highlight">Install the system-upgrade-controller</a></li><li><a href="#configure-plans" class="table-of-contents__link toc-highlight">Configure plans</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/upgrades"><span itemprop="name">업그레이드</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Automated Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Automated Upgrades</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>You can manage K3s cluster upgrades using Rancher&#x27;s system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a <a href="https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources" target="_blank" rel="noopener noreferrer">custom resource definition (CRD)</a>, a <code>plan</code>, and a <a href="https://kubernetes.io/docs/concepts/architecture/controller/" target="_blank" rel="noopener noreferrer">controller</a>.</p><p>The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/" target="_blank" rel="noopener noreferrer">label selector</a>. See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the <a href="https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go" target="_blank" rel="noopener noreferrer">CRD</a>.</p><p>The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade <a href="https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/" target="_blank" rel="noopener noreferrer">jobs</a> on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>The upgrade job that is launched must be highly privileged. It is configured with the following:</p><ul><li>Host <code>IPC</code>, <code>NET</code>, and <code>PID</code> namespaces</li><li>The <code>CAP_SYS_BOOT</code> capability</li><li>Host root mounted at <code>/host</code> with read and write permissions</li></ul></div></div><p>To automate upgrades in this manner, you must do the following:</p><ol><li>Install the system-upgrade-controller into your cluster</li><li>Configure plans</li></ol><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>위험</div><div class="admonitionContent_S0QG"><p>If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades.</p><ul><li>If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page.</li><li>If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page.</li><li>If the K3s cluster is <em>not</em> managed Rancher, you may follow the steps below.</li></ul></div></div><p>For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:</p><ul><li><a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a></li><li><a href="https://github.com/k3s-io/k3s-upgrade" target="_blank" rel="noopener noreferrer">k3s-upgrade</a></li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>팁</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="install-the-system-upgrade-controller">Install the system-upgrade-controller<a href="#install-the-system-upgrade-controller" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p> The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configure-plans">Configure plans<a href="#configure-plans" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  </p><p>The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Server plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">values</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Agent plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> agent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> DoesNotExist</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">prepare</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> prepare</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few important things to call out regarding these plans:</p><p>1) The plans must be created in the same namespace where the controller was deployed.</p><p>2) The <code>concurrency</code> field indicates how many nodes can be upgraded at the same time. </p><p>3) The server-plan targets server nodes by specifying a label selector that selects nodes with the <code>node-role.kubernetes.io/control-plane</code> label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label.</p><p>4) The <code>prepare</code> step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute.</p><p>5) Both plans have the <code>version</code> field set to v1.24.6+k3s1. Alternatively, you can omit the <code>version</code> field and set the <code>channel</code> field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the <a href="/kr/upgrades/manual#release-channels">release channels</a>. Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">channel</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//update.k3s.io/v1</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">release/channels/stable</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed.</p><p>You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get plans -o yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get </span><span class="token function" style="color:rgb(130, 170, 255)">jobs</span><span class="token plain"> -o yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades/manual"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Manual Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/storage"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">볼륨과 저장소</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#overview" class="table-of-contents__link toc-highlight">Overview</a></li><li><a href="#install-the-system-upgrade-controller" class="table-of-contents__link toc-highlight">Install the system-upgrade-controller</a></li><li><a href="#configure-plans" class="table-of-contents__link toc-highlight">Configure plans</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/upgrades/killall.html b/kr/upgrades/killall.html
index 79ffe56ef..48a432bda 100644
--- a/kr/upgrades/killall.html
+++ b/kr/upgrades/killall.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Stopping K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades/killall"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Stopping K3s | K3s"><meta data-rh="true" name="description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><meta data-rh="true" property="og:description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades/killall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/killall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/killall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Stopping K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades/killall"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Stopping K3s | K3s"><meta data-rh="true" name="description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><meta data-rh="true" property="og:description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades/killall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/killall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/killall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/upgrades"><span itemprop="name">업그레이드</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Stopping K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Stopping K3s</h1></header><p>To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.</p><p>To stop all of the K3s containers and reset the containerd state, the <code>k3s-killall.sh</code> script can be used.</p><p>The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted.</p><p>To run the killall script from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-killall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">업그레이드</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades/manual"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Manual Upgrades</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/upgrades"><span itemprop="name">업그레이드</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Stopping K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Stopping K3s</h1></header><p>To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.</p><p>To stop all of the K3s containers and reset the containerd state, the <code>k3s-killall.sh</code> script can be used.</p><p>The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted.</p><p>To run the killall script from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-killall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">업그레이드</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades/manual"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Manual Upgrades</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/kr/upgrades/manual.html b/kr/upgrades/manual.html
index 60c394ec5..0468fbdea 100644
--- a/kr/upgrades/manual.html
+++ b/kr/upgrades/manual.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Manual Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades/manual"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Manual Upgrades | K3s"><meta data-rh="true" name="description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><meta data-rh="true" property="og:description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades/manual"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/manual" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/manual" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/kr/opensearch.xml"><link rel="stylesheet" href="/kr/assets/css/styles.676217c8.css">
-<link rel="preload" href="/kr/assets/js/runtime~main.3118886f.js" as="script">
-<link rel="preload" href="/kr/assets/js/main.ff71f3d6.js" as="script">
+<title data-rh="true">Manual Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/kr/upgrades/manual"><meta data-rh="true" name="docusaurus_locale" content="kr"><meta data-rh="true" name="docsearch:language" content="kr"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Manual Upgrades | K3s"><meta data-rh="true" name="description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><meta data-rh="true" property="og:description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><link data-rh="true" rel="icon" href="/kr/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/kr/upgrades/manual"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/manual" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/manual" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="x-default"><link rel="stylesheet" href="/kr/assets/css/styles.175028e6.css">
+<link rel="preload" href="/kr/assets/js/runtime~main.4e834fa7.js" as="script">
+<link rel="preload" href="/kr/assets/js/main.70ddbead.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="검색"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">검색</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/upgrades"><span itemprop="name">업그레이드</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Manual Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Manual Upgrades</h1></header><p>You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>When upgrading, upgrade server nodes first one at a time, then any agent nodes.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="release-channels">Release Channels<a href="#release-channels" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Upgrades performed via the installation script or using our <a href="/kr/upgrades/automated">automated upgrades</a> feature can be tied to different release channels. The following channels are available:</p><table><thead><tr><th>Channel</th><th>Description</th></tr></thead><tbody><tr><td>stable</td><td>(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.</td></tr><tr><td>latest</td><td>Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.</td></tr><tr><td>v1.26 (example)</td><td>There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.</td></tr></tbody></table><p>For an exhaustive and up-to-date list of channels, you can visit the <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">k3s channel service API</a>. For more technical details on how channels work, you see the <a href="https://github.com/rancher/channelserver" target="_blank" rel="noopener noreferrer">channelserver project</a>.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>팁</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrade-k3s-using-the-installation-script">Upgrade K3s Using the Installation Script<a href="#upgrade-k3s-using-the-installation-script" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To upgrade K3s from an older version you can re-run the installation script using the same flags, for example:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will upgrade to a newer version in the stable channel by default.</p><p>If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to upgrade to a specific version you can run the following command:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="manually-upgrade-k3s-using-the-binary">Manually Upgrade K3s Using the Binary<a href="#manually-upgrade-k3s-using-the-binary" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Or to manually upgrade K3s:</p><ol><li>Download the desired version of the K3s binary from <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a></li><li>Copy the downloaded binary to <code>/usr/local/bin/k3s</code> (or your desired location)</li><li>Stop the old k3s binary</li><li>Launch the new k3s binary</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="restarting-k3s">Restarting K3s<a href="#restarting-k3s" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Restarting K3s is supported by the installation script for systemd and OpenRC.</p><p><strong>systemd</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s-agent</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>OpenRC</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s-agent restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades/killall"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Stopping K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades/automated"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Automated Upgrades</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#release-channels" class="table-of-contents__link toc-highlight">Release Channels</a></li><li><a href="#upgrade-k3s-using-the-installation-script" class="table-of-contents__link toc-highlight">Upgrade K3s Using the Installation Script</a></li><li><a href="#manually-upgrade-k3s-using-the-binary" class="table-of-contents__link toc-highlight">Manually Upgrade K3s Using the Binary</a></li><li><a href="#restarting-k3s" class="table-of-contents__link toc-highlight">Restarting K3s</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="본문으로 건너뛰기"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">본문으로 건너뛰기</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="사이드바 열기/닫기" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/kr/"><div class="navbar__logo"><img src="/kr/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/kr/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="검색" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>한국어</a><ul class="dropdown__menu"><li><a href="/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-label="밝은/어두운 모드 전환 (현재 모드: 밝은 모드)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="맨 위로" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/architecture">아키텍처</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/quick-start">빠른 시작 가이드</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/installation">설치</a><button aria-label="사이드바 메뉴 「설치」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/datastore">클러스터 데이터 저장소</a><button aria-label="사이드바 메뉴 「클러스터 데이터 저장소」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/cluster-access">클러스터 접근</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/kr/upgrades">업그레이드</a><button aria-label="사이드바 메뉴 「업그레이드」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/kr/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/kr/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/storage">볼륨과 저장소</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/networking">네트워킹</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/helm">헬름(Helm)</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/advanced">고급 옵션 / 설정</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/faq">자주 묻는 질문</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/cli">명령줄 도구</a><button aria-label="사이드바 메뉴 「명령줄 도구」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/reference">레퍼런스</a><button aria-label="사이드바 메뉴 「레퍼런스」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/kr/known-issues">알려진 이슈</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/kr/security">보안</a><button aria-label="사이드바 메뉴 「보안」 열기/닫기" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="페이지 경로"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="홈" class="breadcrumbs__link" href="/kr/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/kr/upgrades"><span itemprop="name">업그레이드</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Manual Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">목차 열기/닫기</button></div><div class="theme-doc-markdown markdown"><header><h1>Manual Upgrades</h1></header><p>You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>비고</div><div class="admonitionContent_S0QG"><p>When upgrading, upgrade server nodes first one at a time, then any agent nodes.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="release-channels">Release Channels<a href="#release-channels" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Upgrades performed via the installation script or using our <a href="/kr/upgrades/automated">automated upgrades</a> feature can be tied to different release channels. The following channels are available:</p><table><thead><tr><th>Channel</th><th>Description</th></tr></thead><tbody><tr><td>stable</td><td>(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.</td></tr><tr><td>latest</td><td>Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.</td></tr><tr><td>v1.26 (example)</td><td>There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.</td></tr></tbody></table><p>For an exhaustive and up-to-date list of channels, you can visit the <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">k3s channel service API</a>. For more technical details on how channels work, you see the <a href="https://github.com/rancher/channelserver" target="_blank" rel="noopener noreferrer">channelserver project</a>.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>팁</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrade-k3s-using-the-installation-script">Upgrade K3s Using the Installation Script<a href="#upgrade-k3s-using-the-installation-script" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>To upgrade K3s from an older version you can re-run the installation script using the same flags, for example:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will upgrade to a newer version in the stable channel by default.</p><p>If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to upgrade to a specific version you can run the following command:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="manually-upgrade-k3s-using-the-binary">Manually Upgrade K3s Using the Binary<a href="#manually-upgrade-k3s-using-the-binary" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Or to manually upgrade K3s:</p><ol><li>Download the desired version of the K3s binary from <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a></li><li>Copy the downloaded binary to <code>/usr/local/bin/k3s</code> (or your desired location)</li><li>Stop the old k3s binary</li><li>Launch the new k3s binary</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="restarting-k3s">Restarting K3s<a href="#restarting-k3s" class="hash-link" aria-label="제목에 대한 직접 링크" title="제목에 대한 직접 링크">​</a></h3><p>Restarting K3s is supported by the installation script for systemd and OpenRC.</p><p><strong>systemd</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s-agent</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>OpenRC</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s-agent restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="코드 블록 복사" title="복사" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>이 페이지 편집</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">마지막 <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b>에<!-- --> 업데이트</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="문서 네비게이션"><a class="pagination-nav__link pagination-nav__link--prev" href="/kr/upgrades/killall"><div class="pagination-nav__sublabel">이전</div><div class="pagination-nav__label">Stopping K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/kr/upgrades/automated"><div class="pagination-nav__sublabel">다음</div><div class="pagination-nav__label">Automated Upgrades</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#release-channels" class="table-of-contents__link toc-highlight">Release Channels</a></li><li><a href="#upgrade-k3s-using-the-installation-script" class="table-of-contents__link toc-highlight">Upgrade K3s Using the Installation Script</a></li><li><a href="#manually-upgrade-k3s-using-the-binary" class="table-of-contents__link toc-highlight">Manually Upgrade K3s Using the Binary</a></li><li><a href="#restarting-k3s" class="table-of-contents__link toc-highlight">Restarting K3s</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/kr/assets/js/runtime~main.3118886f.js"></script>
-<script src="/kr/assets/js/main.ff71f3d6.js"></script>
+<script src="/kr/assets/js/runtime~main.4e834fa7.js"></script>
+<script src="/kr/assets/js/main.70ddbead.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/networking.html b/networking.html
index e028f8135..3b3cbd412 100644
--- a/networking.html
+++ b/networking.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Networking | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/networking"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Networking | K3s"><meta data-rh="true" name="description" content="This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s."><meta data-rh="true" property="og:description" content="This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/networking"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/networking" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/networking" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Networking | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/networking"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Networking | K3s"><meta data-rh="true" name="description" content="This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s."><meta data-rh="true" property="og:description" content="This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/networking"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/networking" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/networking" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/networking" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Networking</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Networking</h1></header><p>This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s.</p><p>Refer to the <a href="/installation/network-options">Installation Network Options</a> page for details on Flannel configuration options and backend selection, or how to set up your own CNI.</p><p>For information on which ports need to be opened for K3s, refer to the <a href="/installation/requirements#networking">Networking Requirements</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="coredns">CoreDNS<a href="#coredns" class="hash-link" aria-label="Direct link to CoreDNS" title="Direct link to CoreDNS">​</a></h2><p>CoreDNS is deployed automatically on server startup. To disable it, configure all servers in the cluster with the <code>--disable=coredns</code> option.</p><p>If you don&#x27;t install CoreDNS, you will need to install a cluster DNS provider yourself.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-ingress-controller">Traefik Ingress Controller<a href="#traefik-ingress-controller" class="hash-link" aria-label="Direct link to Traefik Ingress Controller" title="Direct link to Traefik Ingress Controller">​</a></h2><p><a href="https://traefik.io/" target="_blank" rel="noopener noreferrer">Traefik</a> is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It simplifies networking complexity while designing, deploying, and running applications.</p><p>The Traefik ingress controller deploys a LoadBalancer Service that uses ports 80 and 443. By default, ServiceLB will expose these ports on all cluster members, meaning these ports will not be usable for other HostPort or NodePort pods.</p><p>Traefik is deployed by default when starting the server. For more information see <a href="/installation/packaged-components">Managing Packaged Components</a>. The default config file is found in <code>/var/lib/rancher/k3s/server/manifests/traefik.yaml</code>.</p><p>The <code>traefik.yaml</code> file should not be edited manually, as K3s will replace the file with defaults at startup. Instead, you should customize Traefik by creating an additional <code>HelmChartConfig</code> manifest in <code>/var/lib/rancher/k3s/server/manifests</code>. For more details and an example see <a href="/helm#customizing-packaged-components-with-helmchartconfig">Customizing Packaged Components with HelmChartConfig</a>. For more information on the possible configuration values, refer to the official <a href="https://github.com/traefik/traefik-helm-chart/tree/master/traefik" target="_blank" rel="noopener noreferrer">Traefik Helm Configuration Parameters.</a>.</p><p>To remove Traefik from your cluster, start all servers with the <code>--disable=traefik</code> flag.</p><p>K3s versions 1.20 and earlier include Traefik v1. K3s versions 1.21 and later install Traefik v2, unless an existing installation of Traefik v1 is found, in which case Traefik is not upgraded to v2. For more information on the specific version of Traefik included with K3s, consult the Release Notes for your version.</p><p>To migrate from an older Traefik v1 instance please refer to the <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik documentation</a> and <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">migration tool</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="network-policy-controller">Network Policy Controller<a href="#network-policy-controller" class="hash-link" aria-label="Direct link to Network Policy Controller" title="Direct link to Network Policy Controller">​</a></h2><p>K3s includes an embedded network policy controller. The underlying implementation is <a href="https://github.com/cloudnativelabs/kube-router" target="_blank" rel="noopener noreferrer">kube-router&#x27;s</a> netpol controller library (no other kube-router functionality is present) and can be found <a href="https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol" target="_blank" rel="noopener noreferrer">here</a>. </p><p>To disable it, start each server with the <code>--disable-network-policy</code> flag.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Network policy iptables rules are not removed if the K3s configuration is changed to disable the network policy controller. To clean up the configured kube-router network policy rules after disabling the network policy controller, use the <code>k3s-killall.sh</code> script, or clean them using <code>iptables-save</code> and <code>iptables-restore</code>. These steps must be ryn manually on all nodes in the cluster.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">iptables-save | grep -v KUBE-ROUTER | iptables-restore</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="service-load-balancer">Service Load Balancer<a href="#service-load-balancer" class="hash-link" aria-label="Direct link to Service Load Balancer" title="Direct link to Service Load Balancer">​</a></h2><p>Any LoadBalancer controller can be deployed to your K3s cluster. By default, K3s provides a load balancer known as <a href="https://github.com/k3s-io/klipper-lb" target="_blank" rel="noopener noreferrer">ServiceLB</a> (formerly Klipper LoadBalancer) that uses available host ports.</p><p>Upstream Kubernetes allows Services of type LoadBalancer to be created, but doesn&#x27;t include a default load balancer implementation, so these services will remain <code>pending</code> until one is installed. Many hosted services require a cloud provider such as Amazon EC2 or Microsoft Azure to offer an external load balancer implementation. By contrast, the K3s ServiceLB makes it possible to use LoadBalancer Services without a cloud provider or any additional configuration.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-servicelb-works">How ServiceLB Works<a href="#how-servicelb-works" class="hash-link" aria-label="Direct link to How ServiceLB Works" title="Direct link to How ServiceLB Works">​</a></h3><p>The ServiceLB controller watches Kubernetes <a href="https://kubernetes.io/docs/concepts/services-networking/service/" target="_blank" rel="noopener noreferrer">Services</a> with the <code>spec.type</code> field set to <code>LoadBalancer</code>.</p><p>For each LoadBalancer Service, a <a href="https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/" target="_blank" rel="noopener noreferrer">DaemonSet</a> is created in the <code>kube-system</code> namespace. This DaemonSet in turn creates Pods with a <code>svc-</code> prefix, on each node. These Pods use iptables to forward traffic from the Pod&#x27;s NodePort, to the Service&#x27;s ClusterIP address and port.</p><p>If the ServiceLB Pod runs on a node that has an external IP configured, the node&#x27;s external IP is populated into the Service&#x27;s <code>status.loadBalancer.ingress</code> address list. Otherwise, the node&#x27;s internal IP is used.</p><p>If multiple LoadBalancer Services are created, a separate DaemonSet is created for each Service.</p><p>It is possible to expose multiple Services on the same node, as long as they use different ports.</p><p>If you try to create a LoadBalancer Service that listens on port 80, the ServiceLB will try to find a free host in the cluster for port 80. If no host with that port is available, the LB will remain Pending.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="usage">Usage<a href="#usage" class="hash-link" aria-label="Direct link to Usage" title="Direct link to Usage">​</a></h3><p>Create a <a href="https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer" target="_blank" rel="noopener noreferrer">Service of type LoadBalancer</a> in K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controlling-servicelb-node-selection">Controlling ServiceLB Node Selection<a href="#controlling-servicelb-node-selection" class="hash-link" aria-label="Direct link to Controlling ServiceLB Node Selection" title="Direct link to Controlling ServiceLB Node Selection">​</a></h3><p>Adding the <code>svccontroller.k3s.cattle.io/enablelb=true</code> label to one or more nodes switches the ServiceLB controller into allow-list mode, where only nodes with the label are eligible to host LoadBalancer pods. Nodes that remain unlabeled will be excluded from use by ServiceLB.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>By default, nodes are not labeled. As long as all nodes remain unlabeled, all nodes with ports available will be used by ServiceLB.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="creating-servicelb-node-pools">Creating ServiceLB Node Pools<a href="#creating-servicelb-node-pools" class="hash-link" aria-label="Direct link to Creating ServiceLB Node Pools" title="Direct link to Creating ServiceLB Node Pools">​</a></h3><p>To select a particular subset of nodes to host pods for a LoadBalancer, add the <code>enablelb</code> label to the desired nodes, and set matching <code>lbpool</code> label values on the Nodes and Services. For example:</p><ol><li>Label Node A and Node B with <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> and <code>svccontroller.k3s.cattle.io/enablelb=true</code></li><li>Label Node C and Node D with <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> and <code>svccontroller.k3s.cattle.io/enablelb=true</code></li><li>Create one LoadBalancer Service on port 443 with label <code>svccontroller.k3s.cattle.io/lbpool=pool1</code>. The DaemonSet for this service only deploy Pods to Node A and Node B.</li><li>Create another LoadBalancer Service on port 443 with label <code>svccontroller.k3s.cattle.io/lbpool=pool2</code>. The DaemonSet will only deploy Pods to Node C and Node D.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="disabling-servicelb">Disabling ServiceLB<a href="#disabling-servicelb" class="hash-link" aria-label="Direct link to Disabling ServiceLB" title="Direct link to Disabling ServiceLB">​</a></h3><p>To disable ServiceLB, configure all servers in the cluster with the <code>--disable=servicelb</code> flag.</p><p>This is necessary if you wish to run a different LB, such as MetalLB.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="deploying-an-external-cloud-controller-manager">Deploying an External Cloud Controller Manager<a href="#deploying-an-external-cloud-controller-manager" class="hash-link" aria-label="Direct link to Deploying an External Cloud Controller Manager" title="Direct link to Deploying an External Cloud Controller Manager">​</a></h2><p>In order to reduce binary size, K3s removes all &quot;in-tree&quot; (built-in) cloud providers. Instead, K3s provides an embedded Cloud Controller Manager (CCM) stub that does the following:</p><ul><li>Sets node InternalIP and ExternalIP address fields based on the <code>--node-ip</code> and <code>--node-external-ip</code> flags.</li><li>Hosts the ServiceLB LoadBalancer controller.</li><li>Clears the <code>node.cloudprovider.kubernetes.io/uninitialized</code> taint that is present when the cloud-provider is set to <code>external</code> </li></ul><p>Before deploying an external CCM, you must start all K3s servers with the <code>--disable-cloud-controller</code> flag to disable to embedded CCM. </p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>If you disable the built-in CCM and do not deploy and properly configure an external substitute, nodes will remain tainted and unschedulable.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="nodes-without-a-hostname">Nodes Without a Hostname<a href="#nodes-without-a-hostname" class="hash-link" aria-label="Direct link to Nodes Without a Hostname" title="Direct link to Nodes Without a Hostname">​</a></h2><p>Some cloud providers, such as Linode, will create machines with &quot;localhost&quot; as the hostname and others may not have a hostname set at all. This can cause problems with domain name resolution. You can run K3s with the <code>--node-name</code> flag or <code>K3S_NODE_NAME</code> environment variable and this will pass the node name to resolve this issue.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="multicluster-cidr-experimental">Multicluster CIDR (Experimental)<a href="#multicluster-cidr-experimental" class="hash-link" aria-label="Direct link to Multicluster CIDR (Experimental)" title="Direct link to Multicluster CIDR (Experimental)">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Experimental as of v1.26.3+k3s1</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>The network policy controller could not work properly when this flag is enabled.</p></div></div><p>From <code>v1.26</code> Kubernetes introduced Multicluster CIDR as an alpha feature. (<a href="https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs" target="_blank" rel="noopener noreferrer">https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs</a>)</p><p>This feature can be enabled on K3s server with the <code>--multi-cluster-cidr</code> flag and it gives the possibility to define multiple cluster CIDR used to allocate the podCIDR for each node with also the possibility to extend it on an already running cluster.
-The <code>clustercidr</code> resources will be visible through the API and <code>kubectl</code> (the CIDR configured with <code>--cluster-cidr</code> is defined as the default one).</p><p>A new <code>clustercidr</code> can be defined as follow:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">apiVersion: networking.k8s.io/v1alpha1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kind: ClusterCIDR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">metadata:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  name: new-cidr</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">spec:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  nodeSelector:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    nodeSelectorTerms:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - matchExpressions:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        - key: kubernetes.io/hostname</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          operator: In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          values:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          -  &quot;worker2&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  perNodeHostBits: 8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  ipv4: 10.247.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The nodes that match the <code>nodeSelector</code> will use a podCIDR from the new defined resource.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>A node that already has a CIDR cannot get a new one. It has to be removed and restarted.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>A dualstack CIDR could be defined with both <code>ipv4</code> and <code>ipv6</code> configuration but the <code>perNodeHostBits</code> will be the same. When a dualstack configuration is defined with <code>--cluster-cidr</code> the <code>--node-cidr-mask-size-ipv6</code> flag on the <code>kube-controller</code> should be defined to have the same size of IPv4.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/storage"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Volumes and Storage</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/helm"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Helm</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#coredns" class="table-of-contents__link toc-highlight">CoreDNS</a></li><li><a href="#traefik-ingress-controller" class="table-of-contents__link toc-highlight">Traefik Ingress Controller</a></li><li><a href="#network-policy-controller" class="table-of-contents__link toc-highlight">Network Policy Controller</a></li><li><a href="#service-load-balancer" class="table-of-contents__link toc-highlight">Service Load Balancer</a><ul><li><a href="#how-servicelb-works" class="table-of-contents__link toc-highlight">How ServiceLB Works</a></li><li><a href="#usage" class="table-of-contents__link toc-highlight">Usage</a></li><li><a href="#controlling-servicelb-node-selection" class="table-of-contents__link toc-highlight">Controlling ServiceLB Node Selection</a></li><li><a href="#creating-servicelb-node-pools" class="table-of-contents__link toc-highlight">Creating ServiceLB Node Pools</a></li><li><a href="#disabling-servicelb" class="table-of-contents__link toc-highlight">Disabling ServiceLB</a></li></ul></li><li><a href="#deploying-an-external-cloud-controller-manager" class="table-of-contents__link toc-highlight">Deploying an External Cloud Controller Manager</a></li><li><a href="#nodes-without-a-hostname" class="table-of-contents__link toc-highlight">Nodes Without a Hostname</a></li><li><a href="#multicluster-cidr-experimental" class="table-of-contents__link toc-highlight">Multicluster CIDR (Experimental)</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/networking" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Networking</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Networking</h1></header><p>This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s.</p><p>Refer to the <a href="/installation/network-options">Installation Network Options</a> page for details on Flannel configuration options and backend selection, or how to set up your own CNI.</p><p>For information on which ports need to be opened for K3s, refer to the <a href="/installation/requirements#networking">Networking Requirements</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="coredns">CoreDNS<a href="#coredns" class="hash-link" aria-label="Direct link to CoreDNS" title="Direct link to CoreDNS">​</a></h2><p>CoreDNS is deployed automatically on server startup. To disable it, configure all servers in the cluster with the <code>--disable=coredns</code> option.</p><p>If you don&#x27;t install CoreDNS, you will need to install a cluster DNS provider yourself.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-ingress-controller">Traefik Ingress Controller<a href="#traefik-ingress-controller" class="hash-link" aria-label="Direct link to Traefik Ingress Controller" title="Direct link to Traefik Ingress Controller">​</a></h2><p><a href="https://traefik.io/" target="_blank" rel="noopener noreferrer">Traefik</a> is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It simplifies networking complexity while designing, deploying, and running applications.</p><p>The Traefik ingress controller deploys a LoadBalancer Service that uses ports 80 and 443. By default, ServiceLB will expose these ports on all cluster members, meaning these ports will not be usable for other HostPort or NodePort pods.</p><p>Traefik is deployed by default when starting the server. For more information see <a href="/installation/packaged-components">Managing Packaged Components</a>. The default config file is found in <code>/var/lib/rancher/k3s/server/manifests/traefik.yaml</code>.</p><p>The <code>traefik.yaml</code> file should not be edited manually, as K3s will replace the file with defaults at startup. Instead, you should customize Traefik by creating an additional <code>HelmChartConfig</code> manifest in <code>/var/lib/rancher/k3s/server/manifests</code>. For more details and an example see <a href="/helm#customizing-packaged-components-with-helmchartconfig">Customizing Packaged Components with HelmChartConfig</a>. For more information on the possible configuration values, refer to the official <a href="https://github.com/traefik/traefik-helm-chart/tree/master/traefik" target="_blank" rel="noopener noreferrer">Traefik Helm Configuration Parameters.</a>.</p><p>To remove Traefik from your cluster, start all servers with the <code>--disable=traefik</code> flag.</p><p>K3s versions 1.20 and earlier include Traefik v1. K3s versions 1.21 and later install Traefik v2, unless an existing installation of Traefik v1 is found, in which case Traefik is not upgraded to v2. For more information on the specific version of Traefik included with K3s, consult the Release Notes for your version.</p><p>To migrate from an older Traefik v1 instance please refer to the <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik documentation</a> and <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">migration tool</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="network-policy-controller">Network Policy Controller<a href="#network-policy-controller" class="hash-link" aria-label="Direct link to Network Policy Controller" title="Direct link to Network Policy Controller">​</a></h2><p>K3s includes an embedded network policy controller. The underlying implementation is <a href="https://github.com/cloudnativelabs/kube-router" target="_blank" rel="noopener noreferrer">kube-router&#x27;s</a> netpol controller library (no other kube-router functionality is present) and can be found <a href="https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol" target="_blank" rel="noopener noreferrer">here</a>. </p><p>To disable it, start each server with the <code>--disable-network-policy</code> flag.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Network policy iptables rules are not removed if the K3s configuration is changed to disable the network policy controller. To clean up the configured kube-router network policy rules after disabling the network policy controller, use the <code>k3s-killall.sh</code> script, or clean them using <code>iptables-save</code> and <code>iptables-restore</code>. These steps must be ryn manually on all nodes in the cluster.</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">iptables-save | grep -v KUBE-ROUTER | iptables-restore</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="service-load-balancer">Service Load Balancer<a href="#service-load-balancer" class="hash-link" aria-label="Direct link to Service Load Balancer" title="Direct link to Service Load Balancer">​</a></h2><p>Any LoadBalancer controller can be deployed to your K3s cluster. By default, K3s provides a load balancer known as <a href="https://github.com/k3s-io/klipper-lb" target="_blank" rel="noopener noreferrer">ServiceLB</a> (formerly Klipper LoadBalancer) that uses available host ports.</p><p>Upstream Kubernetes allows Services of type LoadBalancer to be created, but doesn&#x27;t include a default load balancer implementation, so these services will remain <code>pending</code> until one is installed. Many hosted services require a cloud provider such as Amazon EC2 or Microsoft Azure to offer an external load balancer implementation. By contrast, the K3s ServiceLB makes it possible to use LoadBalancer Services without a cloud provider or any additional configuration.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="how-servicelb-works">How ServiceLB Works<a href="#how-servicelb-works" class="hash-link" aria-label="Direct link to How ServiceLB Works" title="Direct link to How ServiceLB Works">​</a></h3><p>The ServiceLB controller watches Kubernetes <a href="https://kubernetes.io/docs/concepts/services-networking/service/" target="_blank" rel="noopener noreferrer">Services</a> with the <code>spec.type</code> field set to <code>LoadBalancer</code>.</p><p>For each LoadBalancer Service, a <a href="https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/" target="_blank" rel="noopener noreferrer">DaemonSet</a> is created in the <code>kube-system</code> namespace. This DaemonSet in turn creates Pods with a <code>svc-</code> prefix, on each node. These Pods use iptables to forward traffic from the Pod&#x27;s NodePort, to the Service&#x27;s ClusterIP address and port.</p><p>If the ServiceLB Pod runs on a node that has an external IP configured, the node&#x27;s external IP is populated into the Service&#x27;s <code>status.loadBalancer.ingress</code> address list. Otherwise, the node&#x27;s internal IP is used.</p><p>If multiple LoadBalancer Services are created, a separate DaemonSet is created for each Service.</p><p>It is possible to expose multiple Services on the same node, as long as they use different ports.</p><p>If you try to create a LoadBalancer Service that listens on port 80, the ServiceLB will try to find a free host in the cluster for port 80. If no host with that port is available, the LB will remain Pending.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="usage">Usage<a href="#usage" class="hash-link" aria-label="Direct link to Usage" title="Direct link to Usage">​</a></h3><p>Create a <a href="https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer" target="_blank" rel="noopener noreferrer">Service of type LoadBalancer</a> in K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controlling-servicelb-node-selection">Controlling ServiceLB Node Selection<a href="#controlling-servicelb-node-selection" class="hash-link" aria-label="Direct link to Controlling ServiceLB Node Selection" title="Direct link to Controlling ServiceLB Node Selection">​</a></h3><p>Adding the <code>svccontroller.k3s.cattle.io/enablelb=true</code> label to one or more nodes switches the ServiceLB controller into allow-list mode, where only nodes with the label are eligible to host LoadBalancer pods. Nodes that remain unlabeled will be excluded from use by ServiceLB.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>By default, nodes are not labeled. As long as all nodes remain unlabeled, all nodes with ports available will be used by ServiceLB.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="creating-servicelb-node-pools">Creating ServiceLB Node Pools<a href="#creating-servicelb-node-pools" class="hash-link" aria-label="Direct link to Creating ServiceLB Node Pools" title="Direct link to Creating ServiceLB Node Pools">​</a></h3><p>To select a particular subset of nodes to host pods for a LoadBalancer, add the <code>enablelb</code> label to the desired nodes, and set matching <code>lbpool</code> label values on the Nodes and Services. For example:</p><ol><li>Label Node A and Node B with <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> and <code>svccontroller.k3s.cattle.io/enablelb=true</code></li><li>Label Node C and Node D with <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> and <code>svccontroller.k3s.cattle.io/enablelb=true</code></li><li>Create one LoadBalancer Service on port 443 with label <code>svccontroller.k3s.cattle.io/lbpool=pool1</code>. The DaemonSet for this service only deploy Pods to Node A and Node B.</li><li>Create another LoadBalancer Service on port 443 with label <code>svccontroller.k3s.cattle.io/lbpool=pool2</code>. The DaemonSet will only deploy Pods to Node C and Node D.</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="disabling-servicelb">Disabling ServiceLB<a href="#disabling-servicelb" class="hash-link" aria-label="Direct link to Disabling ServiceLB" title="Direct link to Disabling ServiceLB">​</a></h3><p>To disable ServiceLB, configure all servers in the cluster with the <code>--disable=servicelb</code> flag.</p><p>This is necessary if you wish to run a different LB, such as MetalLB.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="deploying-an-external-cloud-controller-manager">Deploying an External Cloud Controller Manager<a href="#deploying-an-external-cloud-controller-manager" class="hash-link" aria-label="Direct link to Deploying an External Cloud Controller Manager" title="Direct link to Deploying an External Cloud Controller Manager">​</a></h2><p>In order to reduce binary size, K3s removes all &quot;in-tree&quot; (built-in) cloud providers. Instead, K3s provides an embedded Cloud Controller Manager (CCM) stub that does the following:</p><ul><li>Sets node InternalIP and ExternalIP address fields based on the <code>--node-ip</code> and <code>--node-external-ip</code> flags.</li><li>Hosts the ServiceLB LoadBalancer controller.</li><li>Clears the <code>node.cloudprovider.kubernetes.io/uninitialized</code> taint that is present when the cloud-provider is set to <code>external</code> </li></ul><p>Before deploying an external CCM, you must start all K3s servers with the <code>--disable-cloud-controller</code> flag to disable to embedded CCM. </p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>If you disable the built-in CCM and do not deploy and properly configure an external substitute, nodes will remain tainted and unschedulable.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="nodes-without-a-hostname">Nodes Without a Hostname<a href="#nodes-without-a-hostname" class="hash-link" aria-label="Direct link to Nodes Without a Hostname" title="Direct link to Nodes Without a Hostname">​</a></h2><p>Some cloud providers, such as Linode, will create machines with &quot;localhost&quot; as the hostname and others may not have a hostname set at all. This can cause problems with domain name resolution. You can run K3s with the <code>--node-name</code> flag or <code>K3S_NODE_NAME</code> environment variable and this will pass the node name to resolve this issue.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="multicluster-cidr-experimental">Multicluster CIDR (Experimental)<a href="#multicluster-cidr-experimental" class="hash-link" aria-label="Direct link to Multicluster CIDR (Experimental)" title="Direct link to Multicluster CIDR (Experimental)">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Version Gate</div><div class="admonitionContent_S0QG"><p>Experimental as of v1.26.3+k3s1</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>The network policy controller could not work properly when this flag is enabled.</p></div></div><p>From <code>v1.26</code> Kubernetes introduced Multicluster CIDR as an alpha feature. (<a href="https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs" target="_blank" rel="noopener noreferrer">https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs</a>)</p><p>This feature can be enabled on K3s server with the <code>--multi-cluster-cidr</code> flag and it gives the possibility to define multiple cluster CIDR used to allocate the podCIDR for each node with also the possibility to extend it on an already running cluster.
+The <code>clustercidr</code> resources will be visible through the API and <code>kubectl</code> (the CIDR configured with <code>--cluster-cidr</code> is defined as the default one).</p><p>A new <code>clustercidr</code> can be defined as follow:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">apiVersion: networking.k8s.io/v1alpha1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kind: ClusterCIDR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">metadata:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  name: new-cidr</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">spec:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  nodeSelector:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    nodeSelectorTerms:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - matchExpressions:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        - key: kubernetes.io/hostname</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          operator: In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          values:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          -  &quot;worker2&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  perNodeHostBits: 8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  ipv4: 10.247.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The nodes that match the <code>nodeSelector</code> will use a podCIDR from the new defined resource.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>A node that already has a CIDR cannot get a new one. It has to be removed and restarted.</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>Warning</div><div class="admonitionContent_S0QG"><p>A dualstack CIDR could be defined with both <code>ipv4</code> and <code>ipv6</code> configuration but the <code>perNodeHostBits</code> will be the same. When a dualstack configuration is defined with <code>--cluster-cidr</code> the <code>--node-cidr-mask-size-ipv6</code> flag on the <code>kube-controller</code> should be defined to have the same size of IPv4.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/storage"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Volumes and Storage</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/helm"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Helm</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#coredns" class="table-of-contents__link toc-highlight">CoreDNS</a></li><li><a href="#traefik-ingress-controller" class="table-of-contents__link toc-highlight">Traefik Ingress Controller</a></li><li><a href="#network-policy-controller" class="table-of-contents__link toc-highlight">Network Policy Controller</a></li><li><a href="#service-load-balancer" class="table-of-contents__link toc-highlight">Service Load Balancer</a><ul><li><a href="#how-servicelb-works" class="table-of-contents__link toc-highlight">How ServiceLB Works</a></li><li><a href="#usage" class="table-of-contents__link toc-highlight">Usage</a></li><li><a href="#controlling-servicelb-node-selection" class="table-of-contents__link toc-highlight">Controlling ServiceLB Node Selection</a></li><li><a href="#creating-servicelb-node-pools" class="table-of-contents__link toc-highlight">Creating ServiceLB Node Pools</a></li><li><a href="#disabling-servicelb" class="table-of-contents__link toc-highlight">Disabling ServiceLB</a></li></ul></li><li><a href="#deploying-an-external-cloud-controller-manager" class="table-of-contents__link toc-highlight">Deploying an External Cloud Controller Manager</a></li><li><a href="#nodes-without-a-hostname" class="table-of-contents__link toc-highlight">Nodes Without a Hostname</a></li><li><a href="#multicluster-cidr-experimental" class="table-of-contents__link toc-highlight">Multicluster CIDR (Experimental)</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/opensearch.xml b/opensearch.xml
deleted file mode 100644
index 66bc83f61..000000000
--- a/opensearch.xml
+++ /dev/null
@@ -1,11 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"
-                       xmlns:moz="http://www.mozilla.org/2006/browser/search/">
-  <ShortName>K3s</ShortName>
-  <Description>Search K3s</Description>
-  <InputEncoding>UTF-8</InputEncoding>
-  <Image width="16" height="16" type="image/x-icon">https://docs.k3s.io/img/favicon.ico</Image>
-  <Url type="text/html" method="get" template="https://docs.k3s.io/search?q={searchTerms}"/>
-  <Url type="application/opensearchdescription+xml" rel="self" template="https://docs.k3s.io/opensearch.xml" />
-  <moz:SearchForm>https://docs.k3s.io/</moz:SearchForm>
-</OpenSearchDescription>
\ No newline at end of file
diff --git a/quick-start.html b/quick-start.html
index 23744aff9..63a11cf54 100644
--- a/quick-start.html
+++ b/quick-start.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Quick-Start Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/quick-start"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Quick-Start Guide | K3s"><meta data-rh="true" name="description" content="This guide will help you quickly launch a cluster with default options. The installation section covers in greater detail how K3s can be set up."><meta data-rh="true" property="og:description" content="This guide will help you quickly launch a cluster with default options. The installation section covers in greater detail how K3s can be set up."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/quick-start"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/quick-start" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/quick-start" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Quick-Start Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/quick-start"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Quick-Start Guide | K3s"><meta data-rh="true" name="description" content="This guide will help you quickly launch a cluster with default options. The installation section covers in greater detail how K3s can be set up."><meta data-rh="true" property="og:description" content="This guide will help you quickly launch a cluster with default options. The installation section covers in greater detail how K3s can be set up."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/quick-start"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/quick-start" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/quick-start" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Quick-Start Guide</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Quick-Start Guide</h1></header><p>This guide will help you quickly launch a cluster with default options. The <a href="/installation">installation section</a> covers in greater detail how K3s can be set up.</p><p>For information on how K3s components work together, refer to the <a href="/architecture">architecture section.</a></p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>New to Kubernetes? The official Kubernetes docs already have some great tutorials outlining the basics <a href="https://kubernetes.io/docs/tutorials/kubernetes-basics/" target="_blank" rel="noopener noreferrer">here</a>.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="install-script">Install Script<a href="#install-script" class="hash-link" aria-label="Direct link to Install Script" title="Direct link to Install Script">​</a></h2><p>K3s provides an installation script that is a convenient way to install it as a service on systemd or openrc based systems. This script is available at <a href="https://get.k3s.io." target="_blank" rel="noopener noreferrer">https://get.k3s.io.</a> To install K3s using this method, just run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After running this installation:</p><ul><li>The K3s service will be configured to automatically restart after node reboots or if the process crashes or is killed</li><li>Additional utilities will be installed, including <code>kubectl</code>, <code>crictl</code>, <code>ctr</code>, <code>k3s-killall.sh</code>, and <code>k3s-uninstall.sh</code></li><li>A <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> file will be written to <code>/etc/rancher/k3s/k3s.yaml</code> and the kubectl installed by K3s will automatically use it</li></ul><p>A single-node server installation is a fully-functional Kubernetes cluster, including all the datastore, control-plane, kubelet, and container runtime components necessary to host workload pods. It is not necessary to add additional server or agents nodes, but you may want to do so to add additional capacity or redundancy to your cluster.</p><p>To install additional agent nodes and add them to the cluster, run the installation script with the <code>K3S_URL</code> and <code>K3S_TOKEN</code> environment variables. Here is an example showing how to join an agent:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://myserver:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mynodetoken </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Setting the <code>K3S_URL</code> parameter causes the installer to configure K3s as an agent, instead of a server. The K3s agent will register with the K3s server listening at the supplied URL. The value to use for <code>K3S_TOKEN</code> is stored at <code>/var/lib/rancher/k3s/server/node-token</code> on your server node.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Each machine must have a unique hostname. If your machines do not have unique hostnames, pass the <code>K3S_NODE_NAME</code> environment variable and provide a value with a valid and unique hostname for each node.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/architecture"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Architecture</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Installation</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#install-script" class="table-of-contents__link toc-highlight">Install Script</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Quick-Start Guide</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Quick-Start Guide</h1></header><p>This guide will help you quickly launch a cluster with default options. The <a href="/installation">installation section</a> covers in greater detail how K3s can be set up.</p><p>For information on how K3s components work together, refer to the <a href="/architecture">architecture section.</a></p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>New to Kubernetes? The official Kubernetes docs already have some great tutorials outlining the basics <a href="https://kubernetes.io/docs/tutorials/kubernetes-basics/" target="_blank" rel="noopener noreferrer">here</a>.</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="install-script">Install Script<a href="#install-script" class="hash-link" aria-label="Direct link to Install Script" title="Direct link to Install Script">​</a></h2><p>K3s provides an installation script that is a convenient way to install it as a service on systemd or openrc based systems. This script is available at <a href="https://get.k3s.io." target="_blank" rel="noopener noreferrer">https://get.k3s.io.</a> To install K3s using this method, just run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>After running this installation:</p><ul><li>The K3s service will be configured to automatically restart after node reboots or if the process crashes or is killed</li><li>Additional utilities will be installed, including <code>kubectl</code>, <code>crictl</code>, <code>ctr</code>, <code>k3s-killall.sh</code>, and <code>k3s-uninstall.sh</code></li><li>A <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> file will be written to <code>/etc/rancher/k3s/k3s.yaml</code> and the kubectl installed by K3s will automatically use it</li></ul><p>A single-node server installation is a fully-functional Kubernetes cluster, including all the datastore, control-plane, kubelet, and container runtime components necessary to host workload pods. It is not necessary to add additional server or agents nodes, but you may want to do so to add additional capacity or redundancy to your cluster.</p><p>To install additional agent nodes and add them to the cluster, run the installation script with the <code>K3S_URL</code> and <code>K3S_TOKEN</code> environment variables. Here is an example showing how to join an agent:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://myserver:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mynodetoken </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Setting the <code>K3S_URL</code> parameter causes the installer to configure K3s as an agent, instead of a server. The K3s agent will register with the K3s server listening at the supplied URL. The value to use for <code>K3S_TOKEN</code> is stored at <code>/var/lib/rancher/k3s/server/node-token</code> on your server node.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>Each machine must have a unique hostname. If your machines do not have unique hostnames, pass the <code>K3S_NODE_NAME</code> environment variable and provide a value with a valid and unique hostname for each node.</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/architecture"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Architecture</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/installation"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Installation</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#install-script" class="table-of-contents__link toc-highlight">Install Script</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/reference.html b/reference.html
index 56ba26b7c..d7e3ce058 100644
--- a/reference.html
+++ b/reference.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Reference | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/reference"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Reference | K3s"><meta data-rh="true" name="description" content="This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools."><meta data-rh="true" property="og:description" content="This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/reference"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Reference | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/reference"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Reference | K3s"><meta data-rh="true" name="description" content="This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools."><meta data-rh="true" property="og:description" content="This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/reference"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/reference" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Reference</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Reference</h1></header><p>This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/token"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">token</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/reference/env-variables"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Environment Variables</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/reference" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Reference</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Reference</h1></header><p>This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cli/token"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">token</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/reference/env-variables"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Environment Variables</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/reference/env-variables.html b/reference/env-variables.html
index f444159cc..099292d18 100644
--- a/reference/env-variables.html
+++ b/reference/env-variables.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Environment Variables | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/reference/env-variables"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Environment Variables | K3s"><meta data-rh="true" name="description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><meta data-rh="true" property="og:description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/reference/env-variables"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/env-variables" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/env-variables" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Environment Variables | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/reference/env-variables"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Environment Variables | K3s"><meta data-rh="true" name="description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><meta data-rh="true" property="og:description" content="As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/reference/env-variables"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/env-variables" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/env-variables" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/reference"><span itemprop="name">Reference</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Environment Variables</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Environment Variables</h1></header><p>As mentioned in the <a href="/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>The simplest form of this command is as follows:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When using this method to install K3s, the following environment variables can be used to configure the installation:</p><table><thead><tr><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>INSTALL_K3S_SKIP_DOWNLOAD</code></td><td>If set to true will not download K3s hash or binary.</td></tr><tr><td><code>INSTALL_K3S_SYMLINK</code></td><td>By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to &#x27;skip&#x27; will not create symlinks and &#x27;force&#x27; will overwrite.</td></tr><tr><td><code>INSTALL_K3S_SKIP_ENABLE</code></td><td>If set to true will not enable or start K3s service.</td></tr><tr><td><code>INSTALL_K3S_SKIP_START</code></td><td>If set to true will not start K3s service.</td></tr><tr><td><code>INSTALL_K3S_VERSION</code></td><td>Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR</code></td><td>Directory to install K3s binary, links, and uninstall script to, or use <code>/usr/local/bin</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR_READ_ONLY</code></td><td>If set to true will not write files to <code>INSTALL_K3S_BIN_DIR</code>, forces setting <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>.</td></tr><tr><td><code>INSTALL_K3S_SYSTEMD_DIR</code></td><td>Directory to install systemd service and environment files to, or use <code>/etc/systemd/system</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_EXEC</code></td><td>Command with flags to use for launching K3s in the service. If the command is not specified, and the <code>K3S_URL</code> is set, it will default to &quot;agent.&quot; If <code>K3S_URL</code> not set, it will default to &quot;server.&quot; For help, refer to <a href="/installation/configuration#configuration-with-install-script">this example.</a></td></tr><tr><td><code>INSTALL_K3S_NAME</code></td><td>Name of systemd service to create, will default to &#x27;k3s&#x27; if running k3s as a server and &#x27;k3s-agent&#x27; if running k3s as an agent. If specified the name will be prefixed with &#x27;k3s-&#x27;.</td></tr><tr><td><code>INSTALL_K3S_TYPE</code></td><td>Type of systemd service to create, will default from the K3s exec command if not specified.</td></tr><tr><td><code>INSTALL_K3S_SELINUX_WARN</code></td><td>If set to true will continue if k3s-selinux policy is not found.</td></tr><tr><td><code>INSTALL_K3S_SKIP_SELINUX_RPM</code></td><td>If set to true will skip automatic installation of the k3s RPM.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL_URL</code></td><td>Channel URL for fetching K3s download URL. Defaults to <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">https://update.k3s.io/v1-release/channels</a>.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL</code></td><td>Channel to use for fetching K3s download URL. Defaults to &quot;stable&quot;. Options include: <code>stable</code>, <code>latest</code>, <code>testing</code>.</td></tr></tbody></table><p>This example shows where to place aforementioned environment variables as options (after the pipe):</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_CHANNEL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">latest </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Environment variables which begin with <code>K3S_</code> will be preserved for the systemd and openrc services to use.</p><p>Setting <code>K3S_URL</code> without explicitly setting an exec command will default the command to &quot;agent&quot;.</p><p>When running the agent, <code>K3S_TOKEN</code> must also be set.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/reference"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Reference</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/reference/resource-profiling"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Resource Profiling</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/reference"><span itemprop="name">Reference</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Environment Variables</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Environment Variables</h1></header><p>As mentioned in the <a href="/quick-start">Quick-Start Guide</a>, you can use the installation script available at <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> to install K3s as a service on systemd and openrc based systems.</p><p>The simplest form of this command is as follows:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>When using this method to install K3s, the following environment variables can be used to configure the installation:</p><table><thead><tr><th>Environment Variable</th><th>Description</th></tr></thead><tbody><tr><td><code>INSTALL_K3S_SKIP_DOWNLOAD</code></td><td>If set to true will not download K3s hash or binary.</td></tr><tr><td><code>INSTALL_K3S_SYMLINK</code></td><td>By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to &#x27;skip&#x27; will not create symlinks and &#x27;force&#x27; will overwrite.</td></tr><tr><td><code>INSTALL_K3S_SKIP_ENABLE</code></td><td>If set to true will not enable or start K3s service.</td></tr><tr><td><code>INSTALL_K3S_SKIP_START</code></td><td>If set to true will not start K3s service.</td></tr><tr><td><code>INSTALL_K3S_VERSION</code></td><td>Version of K3s to download from Github. Will attempt to download from the stable channel if not specified.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR</code></td><td>Directory to install K3s binary, links, and uninstall script to, or use <code>/usr/local/bin</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR_READ_ONLY</code></td><td>If set to true will not write files to <code>INSTALL_K3S_BIN_DIR</code>, forces setting <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>.</td></tr><tr><td><code>INSTALL_K3S_SYSTEMD_DIR</code></td><td>Directory to install systemd service and environment files to, or use <code>/etc/systemd/system</code> as the default.</td></tr><tr><td><code>INSTALL_K3S_EXEC</code></td><td>Command with flags to use for launching K3s in the service. If the command is not specified, and the <code>K3S_URL</code> is set, it will default to &quot;agent.&quot; If <code>K3S_URL</code> not set, it will default to &quot;server.&quot; For help, refer to <a href="/installation/configuration#configuration-with-install-script">this example.</a></td></tr><tr><td><code>INSTALL_K3S_NAME</code></td><td>Name of systemd service to create, will default to &#x27;k3s&#x27; if running k3s as a server and &#x27;k3s-agent&#x27; if running k3s as an agent. If specified the name will be prefixed with &#x27;k3s-&#x27;.</td></tr><tr><td><code>INSTALL_K3S_TYPE</code></td><td>Type of systemd service to create, will default from the K3s exec command if not specified.</td></tr><tr><td><code>INSTALL_K3S_SELINUX_WARN</code></td><td>If set to true will continue if k3s-selinux policy is not found.</td></tr><tr><td><code>INSTALL_K3S_SKIP_SELINUX_RPM</code></td><td>If set to true will skip automatic installation of the k3s RPM.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL_URL</code></td><td>Channel URL for fetching K3s download URL. Defaults to <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">https://update.k3s.io/v1-release/channels</a>.</td></tr><tr><td><code>INSTALL_K3S_CHANNEL</code></td><td>Channel to use for fetching K3s download URL. Defaults to &quot;stable&quot;. Options include: <code>stable</code>, <code>latest</code>, <code>testing</code>.</td></tr></tbody></table><p>This example shows where to place aforementioned environment variables as options (after the pipe):</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_CHANNEL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">latest </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Environment variables which begin with <code>K3S_</code> will be preserved for the systemd and openrc services to use.</p><p>Setting <code>K3S_URL</code> without explicitly setting an exec command will default the command to &quot;agent&quot;.</p><p>When running the agent, <code>K3S_TOKEN</code> must also be set.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/reference"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Reference</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/reference/resource-profiling"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Resource Profiling</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/reference/resource-profiling.html b/reference/resource-profiling.html
index bff5afcee..f6925f230 100644
--- a/reference/resource-profiling.html
+++ b/reference/resource-profiling.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Resource Profiling | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/reference/resource-profiling"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Resource Profiling | K3s"><meta data-rh="true" name="description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><meta data-rh="true" property="og:description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/reference/resource-profiling"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/resource-profiling" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/resource-profiling" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Resource Profiling | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/reference/resource-profiling"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Resource Profiling | K3s"><meta data-rh="true" name="description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><meta data-rh="true" property="og:description" content="This section captures the results of tests to determine minimum resource requirements for K3s."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/reference/resource-profiling"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/resource-profiling" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/resource-profiling" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/reference"><span itemprop="name">Reference</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Resource Profiling</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Resource Profiling</h1></header><p>This section captures the results of tests to determine minimum resource requirements for K3s.</p><p>The results are summarized as follows:</p><table><thead><tr><th>Components</th><th>Processor</th><th>Min CPU</th><th>Min RAM with Kine/SQLite</th><th>Min RAM with Embedded etcd</th></tr></thead><tbody><tr><td>K3s server with a workload</td><td>Intel 8375C CPU, 2.90 GHz</td><td>6% of a core</td><td>1596 M</td><td>1606 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Intel 8375C CPU, 2.90 GHz</td><td>5% of a core</td><td>1428 M</td><td>1450 M</td></tr><tr><td>K3s agent</td><td>Intel 8375C CPU, 2.90 GHz</td><td>3% of a core</td><td>275 M</td><td>275 M</td></tr><tr><td>K3s server with a workload</td><td>Pi4B BCM2711, 1.50 GHz</td><td>30% of a core</td><td>1588 M</td><td>1613 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>25% of a core</td><td>1215 M</td><td>1413 M</td></tr><tr><td>K3s agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>10% of a core</td><td>268 M</td><td>268 M</td></tr></tbody></table><ul><li><a href="#scope-of-resource-testing">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements">Components Included for Baseline Measurements</a></li><li><a href="#methodology">Methodology</a></li><li><a href="#environment">Environment</a></li><li><a href="#baseline-resource-requirements">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent">K3s Agent</a></li></ul></li><li><a href="#analysis">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="scope-of-resource-testing">Scope of Resource Testing<a href="#scope-of-resource-testing" class="hash-link" aria-label="Direct link to Scope of Resource Testing" title="Direct link to Scope of Resource Testing">​</a></h2><p>The resource tests were intended to address the following problem statements:</p><ul><li>On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster.</li><li>On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="components-included-for-baseline-measurements">Components Included for Baseline Measurements<a href="#components-included-for-baseline-measurements" class="hash-link" aria-label="Direct link to Components Included for Baseline Measurements" title="Direct link to Components Included for Baseline Measurements">​</a></h2><p>The tested components are:</p><ul><li>K3s v1.26.5 with all packaged components enabled</li><li>Prometheus + Grafana monitoring stack</li><li><a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">Kubernetes Example Nginx Deployment</a></li></ul><p>These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app.</p><p>Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. </p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="methodology">Methodology<a href="#methodology" class="hash-link" aria-label="Direct link to Methodology" title="Direct link to Methodology">​</a></h2><p>A standalone instance of Prometheus v2.43.0 was used to collect host CPU, memory, and disk IO statistics using <code>prometheus-node-exporter</code> installed via apt.</p><p><code>systemd-cgtop</code> was used to spot-check systemd cgroup-level CPU and memory utilization. <code>system.slice/k3s.service</code> tracks resource utilization for both K3s and containerd, while individual pods are under the <code>kubepods</code> hierarchy.</p><p>Additional detailed K3s memory utilization data was collected from <code>kubectl top node</code> using the integrated metrics-server for the server and agent processes.</p><p>Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="environment">Environment<a href="#environment" class="hash-link" aria-label="Direct link to Environment" title="Direct link to Environment">​</a></h2><table><thead><tr><th>Arch</th><th>OS</th><th>System</th><th>CPU</th><th>RAM</th><th>Disk</th></tr></thead><tbody><tr><td>x86_64</td><td>Ubuntu 22.04</td><td>AWS c6id.xlarge</td><td>Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz</td><td>8 GB</td><td>NVME SSD</td></tr><tr><td>aarch64</td><td>Raspberry Pi OS 11</td><td>Raspberry Pi 4 Model B</td><td>BCM2711, 4 Core 1.50 GHz</td><td>8 GB</td><td>UHS-III SDXC</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="baseline-resource-requirements">Baseline Resource Requirements<a href="#baseline-resource-requirements" class="hash-link" aria-label="Direct link to Baseline Resource Requirements" title="Direct link to Baseline Resource Requirements">​</a></h2><p>This section captures the results of tests to determine minimum resource requirements for basic K3s operation.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-with-a-workload">K3s Server with a Workload<a href="#k3s-server-with-a-workload" class="hash-link" aria-label="Direct link to K3s Server with a Workload" title="Direct link to K3s Server with a Workload">​</a></h3><p>These are the requirements for a single-node cluster in which the K3s server shares resources with a <a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">simple workload</a>.</p><p>The CPU requirements are:</p><table><thead><tr><th>System</th><th>CPU Core Usage</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>6% of a core</td></tr><tr><td>Pi4B</td><td>30% of a core</td></tr></tbody></table><p>The Memory Requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>System</th><th>Memory</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1596 M</td></tr><tr><td></td><td>Pi4B</td><td>1588 M</td></tr><tr><td>Embedded etcd</td><td>Intel 8375C</td><td>1606 M</td></tr><tr><td></td><td>Pi4B</td><td>1613 M</td></tr></tbody></table><p>The Disk requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>IOPS</th><th>KiB/sec</th><th>Latency</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td></tr><tr><td>Embedded etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent<a href="#k3s-cluster-with-a-single-agent" class="hash-link" aria-label="Direct link to K3s Cluster with a Single Agent" title="Direct link to K3s Cluster with a Single Agent">​</a></h3><p>These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server">K3s Server<a href="#k3s-server" class="hash-link" aria-label="Direct link to K3s Server" title="Direct link to K3s Server">​</a></h4><p>The CPU requirements are:</p><table><thead><tr><th>System</th><th>CPU Core Usage</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>5% of a core</td></tr><tr><td>Pi4B</td><td>25% of a core</td></tr></tbody></table><p>The Memory Requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>System</th><th>Memory</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1428 M</td></tr><tr><td></td><td>Pi4B</td><td>1215 M</td></tr><tr><td>Embedded etcd</td><td>Intel 8375C</td><td>1450 M</td></tr><tr><td></td><td>Pi4B</td><td>1413 M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent">K3s Agent<a href="#k3s-agent" class="hash-link" aria-label="Direct link to K3s Agent" title="Direct link to K3s Agent">​</a></h3><p>The requirements are:</p><table><thead><tr><th>System</th><th>CPU Core Usage</th><th>RAM</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>3% of a core</td><td>275 M</td></tr><tr><td>Pi4B</td><td>5% of a core</td><td>268 M</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="analysis">Analysis<a href="#analysis" class="hash-link" aria-label="Direct link to Analysis" title="Direct link to Analysis">​</a></h2><p>This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="primary-resource-utilization-drivers">Primary Resource Utilization Drivers<a href="#primary-resource-utilization-drivers" class="hash-link" aria-label="Direct link to Primary Resource Utilization Drivers" title="Direct link to Primary Resource Utilization Drivers">​</a></h3><p>K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server&#x27;s resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server&#x27;s resource requirements.</p><p>K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore<a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="hash-link" aria-label="Direct link to Preventing Agents and Workloads from Interfering with the Cluster Datastore" title="Direct link to Preventing Agents and Workloads from Interfering with the Cluster Datastore">​</a></h3><p>When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore.</p><p>This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store.</p><p>Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore.</p><p>Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/reference/env-variables"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Environment Variables</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/known-issues"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Known Issues</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#scope-of-resource-testing" class="table-of-contents__link toc-highlight">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements" class="table-of-contents__link toc-highlight">Components Included for Baseline Measurements</a></li><li><a href="#methodology" class="table-of-contents__link toc-highlight">Methodology</a></li><li><a href="#environment" class="table-of-contents__link toc-highlight">Environment</a></li><li><a href="#baseline-resource-requirements" class="table-of-contents__link toc-highlight">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload" class="table-of-contents__link toc-highlight">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent" class="table-of-contents__link toc-highlight">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent" class="table-of-contents__link toc-highlight">K3s Agent</a></li></ul></li><li><a href="#analysis" class="table-of-contents__link toc-highlight">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers" class="table-of-contents__link toc-highlight">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="table-of-contents__link toc-highlight">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/reference/env-variables">Environment Variables</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/reference/resource-profiling">Resource Profiling</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/reference"><span itemprop="name">Reference</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Resource Profiling</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Resource Profiling</h1></header><p>This section captures the results of tests to determine minimum resource requirements for K3s.</p><p>The results are summarized as follows:</p><table><thead><tr><th>Components</th><th>Processor</th><th>Min CPU</th><th>Min RAM with Kine/SQLite</th><th>Min RAM with Embedded etcd</th></tr></thead><tbody><tr><td>K3s server with a workload</td><td>Intel 8375C CPU, 2.90 GHz</td><td>6% of a core</td><td>1596 M</td><td>1606 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Intel 8375C CPU, 2.90 GHz</td><td>5% of a core</td><td>1428 M</td><td>1450 M</td></tr><tr><td>K3s agent</td><td>Intel 8375C CPU, 2.90 GHz</td><td>3% of a core</td><td>275 M</td><td>275 M</td></tr><tr><td>K3s server with a workload</td><td>Pi4B BCM2711, 1.50 GHz</td><td>30% of a core</td><td>1588 M</td><td>1613 M</td></tr><tr><td>K3s cluster with a single agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>25% of a core</td><td>1215 M</td><td>1413 M</td></tr><tr><td>K3s agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>10% of a core</td><td>268 M</td><td>268 M</td></tr></tbody></table><ul><li><a href="#scope-of-resource-testing">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements">Components Included for Baseline Measurements</a></li><li><a href="#methodology">Methodology</a></li><li><a href="#environment">Environment</a></li><li><a href="#baseline-resource-requirements">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent">K3s Agent</a></li></ul></li><li><a href="#analysis">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="scope-of-resource-testing">Scope of Resource Testing<a href="#scope-of-resource-testing" class="hash-link" aria-label="Direct link to Scope of Resource Testing" title="Direct link to Scope of Resource Testing">​</a></h2><p>The resource tests were intended to address the following problem statements:</p><ul><li>On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster.</li><li>On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="components-included-for-baseline-measurements">Components Included for Baseline Measurements<a href="#components-included-for-baseline-measurements" class="hash-link" aria-label="Direct link to Components Included for Baseline Measurements" title="Direct link to Components Included for Baseline Measurements">​</a></h2><p>The tested components are:</p><ul><li>K3s v1.26.5 with all packaged components enabled</li><li>Prometheus + Grafana monitoring stack</li><li><a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">Kubernetes Example Nginx Deployment</a></li></ul><p>These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app.</p><p>Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements. </p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="methodology">Methodology<a href="#methodology" class="hash-link" aria-label="Direct link to Methodology" title="Direct link to Methodology">​</a></h2><p>A standalone instance of Prometheus v2.43.0 was used to collect host CPU, memory, and disk IO statistics using <code>prometheus-node-exporter</code> installed via apt.</p><p><code>systemd-cgtop</code> was used to spot-check systemd cgroup-level CPU and memory utilization. <code>system.slice/k3s.service</code> tracks resource utilization for both K3s and containerd, while individual pods are under the <code>kubepods</code> hierarchy.</p><p>Additional detailed K3s memory utilization data was collected from <code>kubectl top node</code> using the integrated metrics-server for the server and agent processes.</p><p>Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="environment">Environment<a href="#environment" class="hash-link" aria-label="Direct link to Environment" title="Direct link to Environment">​</a></h2><table><thead><tr><th>Arch</th><th>OS</th><th>System</th><th>CPU</th><th>RAM</th><th>Disk</th></tr></thead><tbody><tr><td>x86_64</td><td>Ubuntu 22.04</td><td>AWS c6id.xlarge</td><td>Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz</td><td>8 GB</td><td>NVME SSD</td></tr><tr><td>aarch64</td><td>Raspberry Pi OS 11</td><td>Raspberry Pi 4 Model B</td><td>BCM2711, 4 Core 1.50 GHz</td><td>8 GB</td><td>UHS-III SDXC</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="baseline-resource-requirements">Baseline Resource Requirements<a href="#baseline-resource-requirements" class="hash-link" aria-label="Direct link to Baseline Resource Requirements" title="Direct link to Baseline Resource Requirements">​</a></h2><p>This section captures the results of tests to determine minimum resource requirements for basic K3s operation.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-with-a-workload">K3s Server with a Workload<a href="#k3s-server-with-a-workload" class="hash-link" aria-label="Direct link to K3s Server with a Workload" title="Direct link to K3s Server with a Workload">​</a></h3><p>These are the requirements for a single-node cluster in which the K3s server shares resources with a <a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">simple workload</a>.</p><p>The CPU requirements are:</p><table><thead><tr><th>System</th><th>CPU Core Usage</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>6% of a core</td></tr><tr><td>Pi4B</td><td>30% of a core</td></tr></tbody></table><p>The Memory Requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>System</th><th>Memory</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1596 M</td></tr><tr><td></td><td>Pi4B</td><td>1588 M</td></tr><tr><td>Embedded etcd</td><td>Intel 8375C</td><td>1606 M</td></tr><tr><td></td><td>Pi4B</td><td>1613 M</td></tr></tbody></table><p>The Disk requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>IOPS</th><th>KiB/sec</th><th>Latency</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td></tr><tr><td>Embedded etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-cluster-with-a-single-agent">K3s Cluster with a Single Agent<a href="#k3s-cluster-with-a-single-agent" class="hash-link" aria-label="Direct link to K3s Cluster with a Single Agent" title="Direct link to K3s Cluster with a Single Agent">​</a></h3><p>These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server">K3s Server<a href="#k3s-server" class="hash-link" aria-label="Direct link to K3s Server" title="Direct link to K3s Server">​</a></h4><p>The CPU requirements are:</p><table><thead><tr><th>System</th><th>CPU Core Usage</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>5% of a core</td></tr><tr><td>Pi4B</td><td>25% of a core</td></tr></tbody></table><p>The Memory Requirements are:</p><table><thead><tr><th>Tested Datastore</th><th>System</th><th>Memory</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1428 M</td></tr><tr><td></td><td>Pi4B</td><td>1215 M</td></tr><tr><td>Embedded etcd</td><td>Intel 8375C</td><td>1450 M</td></tr><tr><td></td><td>Pi4B</td><td>1413 M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent">K3s Agent<a href="#k3s-agent" class="hash-link" aria-label="Direct link to K3s Agent" title="Direct link to K3s Agent">​</a></h3><p>The requirements are:</p><table><thead><tr><th>System</th><th>CPU Core Usage</th><th>RAM</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>3% of a core</td><td>275 M</td></tr><tr><td>Pi4B</td><td>5% of a core</td><td>268 M</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="analysis">Analysis<a href="#analysis" class="hash-link" aria-label="Direct link to Analysis" title="Direct link to Analysis">​</a></h2><p>This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="primary-resource-utilization-drivers">Primary Resource Utilization Drivers<a href="#primary-resource-utilization-drivers" class="hash-link" aria-label="Direct link to Primary Resource Utilization Drivers" title="Direct link to Primary Resource Utilization Drivers">​</a></h3><p>K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server&#x27;s resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server&#x27;s resource requirements.</p><p>K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore">Preventing Agents and Workloads from Interfering with the Cluster Datastore<a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="hash-link" aria-label="Direct link to Preventing Agents and Workloads from Interfering with the Cluster Datastore" title="Direct link to Preventing Agents and Workloads from Interfering with the Cluster Datastore">​</a></h3><p>When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore.</p><p>This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store.</p><p>Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore.</p><p>Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/reference/env-variables"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Environment Variables</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/known-issues"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Known Issues</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#scope-of-resource-testing" class="table-of-contents__link toc-highlight">Scope of Resource Testing</a></li><li><a href="#components-included-for-baseline-measurements" class="table-of-contents__link toc-highlight">Components Included for Baseline Measurements</a></li><li><a href="#methodology" class="table-of-contents__link toc-highlight">Methodology</a></li><li><a href="#environment" class="table-of-contents__link toc-highlight">Environment</a></li><li><a href="#baseline-resource-requirements" class="table-of-contents__link toc-highlight">Baseline Resource Requirements</a><ul><li><a href="#k3s-server-with-a-workload" class="table-of-contents__link toc-highlight">K3s Server with a Workload</a></li><li><a href="#k3s-cluster-with-a-single-agent" class="table-of-contents__link toc-highlight">K3s Cluster with a Single Agent</a></li><li><a href="#k3s-agent" class="table-of-contents__link toc-highlight">K3s Agent</a></li></ul></li><li><a href="#analysis" class="table-of-contents__link toc-highlight">Analysis</a><ul><li><a href="#primary-resource-utilization-drivers" class="table-of-contents__link toc-highlight">Primary Resource Utilization Drivers</a></li><li><a href="#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore" class="table-of-contents__link toc-highlight">Preventing Agents and Workloads from Interfering with the Cluster Datastore</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/search-index.json b/search-index.json
new file mode 100644
index 000000000..307f76281
--- /dev/null
+++ b/search-index.json
@@ -0,0 +1 @@
+[{"documents":[{"i":1,"t":"K3s - Lightweight Kubernetes","u":"/","b":[]},{"i":7,"t":"Advanced Options / Configuration","u":"/advanced","b":[]},{"i":66,"t":"Architecture","u":"/architecture","b":[]},{"i":76,"t":"CLI Tools","u":"/cli","b":["CLI Tools"]},{"i":78,"t":"k3s agent","u":"/cli/agent","b":["CLI Tools"]},{"i":102,"t":"k3s certificate","u":"/cli/certificate","b":["CLI Tools"]},{"i":117,"t":"k3s etcd-snapshot","u":"/cli/etcd-snapshot","b":["CLI Tools"]},{"i":119,"t":"k3s secrets-encrypt","u":"/cli/secrets-encrypt","b":["CLI Tools"]},{"i":129,"t":"k3s server","u":"/cli/server","b":["CLI Tools"]},{"i":163,"t":"k3s token","u":"/cli/token","b":["CLI Tools"]},{"i":180,"t":"Cluster Access","u":"/cluster-access","b":[]},{"i":184,"t":"Cluster Datastore","u":"/datastore","b":["Cluster Datastore"]},{"i":190,"t":"Backup and Restore","u":"/datastore/backup-restore","b":["Cluster Datastore"]},{"i":198,"t":"Cluster Load Balancer","u":"/datastore/cluster-loadbalancer","b":["Cluster Datastore"]},{"i":206,"t":"High Availability External DB","u":"/datastore/ha","b":["Cluster Datastore"]},{"i":220,"t":"High Availability Embedded etcd","u":"/datastore/ha-embedded","b":["Cluster Datastore"]},{"i":224,"t":"FAQ","u":"/faq","b":[]},{"i":244,"t":"Helm","u":"/helm","b":[]},{"i":252,"t":"Installation","u":"/installation","b":["Installation"]},{"i":254,"t":"Air-Gap Install","u":"/installation/airgap","b":["Installation"]},{"i":274,"t":"Configuration Options","u":"/installation/configuration","b":["Installation"]},{"i":286,"t":"Kubernetes Dashboard","u":"/installation/kube-dashboard","b":["Installation"]},{"i":300,"t":"Network Options","u":"/installation/network-options","b":["Installation"]},{"i":320,"t":"Managing Packaged Components","u":"/installation/packaged-components","b":["Installation"]},{"i":335,"t":"Private Registry Configuration","u":"/installation/private-registry","b":["Installation"]},{"i":349,"t":"Requirements","u":"/installation/requirements","b":["Installation"]},{"i":373,"t":"Managing Server Roles","u":"/installation/server-roles","b":["Installation"]},{"i":383,"t":"Uninstalling K3s","u":"/installation/uninstall","b":["Installation"]},{"i":389,"t":"Known Issues","u":"/known-issues","b":[]},{"i":399,"t":"Networking","u":"/networking","b":[]},{"i":425,"t":"Quick-Start Guide","u":"/quick-start","b":[]},{"i":429,"t":"Reference","u":"/reference","b":["Reference"]},{"i":431,"t":"Environment Variables","u":"/reference/env-variables","b":["Reference"]},{"i":433,"t":"Resource Profiling","u":"/reference/resource-profiling","b":["Reference"]},{"i":457,"t":"Security","u":"/security","b":["Security"]},{"i":459,"t":"CIS Hardening Guide","u":"/security/hardening-guide","b":["Security"]},{"i":509,"t":"Secrets Encryption Config","u":"/security/secrets-encryption","b":["Security"]},{"i":513,"t":"Volumes and Storage","u":"/storage","b":[]},{"i":529,"t":"Upgrades","u":"/upgrades","b":["Upgrades"]},{"i":534,"t":"Automated Upgrades","u":"/upgrades/automated","b":["Upgrades"]},{"i":541,"t":"Stopping K3s","u":"/upgrades/killall","b":["Upgrades"]},{"i":543,"t":"Manual Upgrades","u":"/upgrades/manual","b":["Upgrades"]},{"i":553,"t":"CIS Self Assessment Guide","u":"/security/self-assessment","b":["Security"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/1",[0,1.344,1,2.962,2,2.514]],["t/7",[3,2.552,4,1.912,5,2.552,6,1.912]],["t/66",[7,4.364]],["t/76",[8,3.529,9,3.529]],["t/78",[0,1.601,10,3.529]],["t/102",[0,1.601,11,3.529]],["t/117",[0,1.344,12,2.514,13,2.962]],["t/119",[0,1.344,14,2.514,15,2.514]],["t/129",[0,1.601,16,2.996]],["t/163",[0,1.601,17,3.529]],["t/180",[18,2.644,19,3.529]],["t/184",[18,2.644,20,3.529]],["t/190",[21,3.529,22,3.529]],["t/198",[18,2.219,23,2.962,24,2.962]],["t/206",[25,2.166,26,2.166,27,2.552,28,2.552]],["t/220",[12,2.166,25,2.166,26,2.166,29,2.552]],["t/224",[30,4.364]],["t/244",[31,4.364]],["t/252",[32,3.705]],["t/254",[32,2.514,33,2.962,34,2.962]],["t/274",[4,2.644,6,2.644]],["t/286",[2,2.996,35,3.529]],["t/300",[4,2.644,36,2.996]],["t/320",[37,2.514,38,2.962,39,2.962]],["t/335",[6,2.219,40,2.962,41,2.962]],["t/349",[42,4.364]],["t/373",[16,2.514,37,2.514,43,2.962]],["t/383",[0,1.601,44,3.529]],["t/389",[45,3.529,46,3.529]],["t/399",[36,3.705]],["t/425",[47,2.962,48,2.962,49,2.219]],["t/429",[50,4.364]],["t/431",[51,3.529,52,3.529]],["t/433",[53,3.529,54,3.529]],["t/457",[55,4.364]],["t/459",[49,2.219,56,2.514,57,2.962]],["t/509",[14,2.514,15,2.514,58,2.962]],["t/513",[59,3.529,60,3.529]],["t/529",[61,3.27]],["t/534",[61,2.644,62,3.529]],["t/541",[0,1.601,63,3.529]],["t/543",[61,2.644,64,3.529]],["t/553",[49,1.912,56,2.166,65,2.552,66,2.552]]],"invertedIndex":[["",{"_index":5,"t":{"7":{"position":[[17,1]]}}}],["access",{"_index":19,"t":{"180":{"position":[[8,6]]}}}],["advanc",{"_index":3,"t":{"7":{"position":[[0,8]]}}}],["agent",{"_index":10,"t":{"78":{"position":[[4,5]]}}}],["air",{"_index":33,"t":{"254":{"position":[[0,3]]}}}],["architectur",{"_index":7,"t":{"66":{"position":[[0,12]]}}}],["assess",{"_index":66,"t":{"553":{"position":[[9,10]]}}}],["autom",{"_index":62,"t":{"534":{"position":[[0,9]]}}}],["avail",{"_index":26,"t":{"206":{"position":[[5,12]]},"220":{"position":[[5,12]]}}}],["backup",{"_index":21,"t":{"190":{"position":[[0,6]]}}}],["balanc",{"_index":24,"t":{"198":{"position":[[13,8]]}}}],["certif",{"_index":11,"t":{"102":{"position":[[4,11]]}}}],["ci",{"_index":56,"t":{"459":{"position":[[0,3]]},"553":{"position":[[0,3]]}}}],["cli",{"_index":8,"t":{"76":{"position":[[0,3]]}}}],["cluster",{"_index":18,"t":{"180":{"position":[[0,7]]},"184":{"position":[[0,7]]},"198":{"position":[[0,7]]}}}],["compon",{"_index":39,"t":{"320":{"position":[[18,10]]}}}],["config",{"_index":58,"t":{"509":{"position":[[19,6]]}}}],["configur",{"_index":6,"t":{"7":{"position":[[19,13]]},"274":{"position":[[0,13]]},"335":{"position":[[17,13]]}}}],["dashboard",{"_index":35,"t":{"286":{"position":[[11,9]]}}}],["datastor",{"_index":20,"t":{"184":{"position":[[8,9]]}}}],["db",{"_index":28,"t":{"206":{"position":[[27,2]]}}}],["embed",{"_index":29,"t":{"220":{"position":[[18,8]]}}}],["encrypt",{"_index":15,"t":{"119":{"position":[[12,7]]},"509":{"position":[[8,10]]}}}],["environ",{"_index":51,"t":{"431":{"position":[[0,11]]}}}],["etcd",{"_index":12,"t":{"117":{"position":[[4,4]]},"220":{"position":[[27,4]]}}}],["extern",{"_index":27,"t":{"206":{"position":[[18,8]]}}}],["faq",{"_index":30,"t":{"224":{"position":[[0,3]]}}}],["gap",{"_index":34,"t":{"254":{"position":[[4,3]]}}}],["guid",{"_index":49,"t":{"425":{"position":[[12,5]]},"459":{"position":[[14,5]]},"553":{"position":[[20,5]]}}}],["harden",{"_index":57,"t":{"459":{"position":[[4,9]]}}}],["helm",{"_index":31,"t":{"244":{"position":[[0,4]]}}}],["high",{"_index":25,"t":{"206":{"position":[[0,4]]},"220":{"position":[[0,4]]}}}],["instal",{"_index":32,"t":{"252":{"position":[[0,12]]},"254":{"position":[[8,7]]}}}],["issu",{"_index":46,"t":{"389":{"position":[[6,6]]}}}],["k3",{"_index":0,"t":{"1":{"position":[[0,3]]},"78":{"position":[[0,3]]},"102":{"position":[[0,3]]},"117":{"position":[[0,3]]},"119":{"position":[[0,3]]},"129":{"position":[[0,3]]},"163":{"position":[[0,3]]},"383":{"position":[[13,3]]},"541":{"position":[[9,3]]}}}],["known",{"_index":45,"t":{"389":{"position":[[0,5]]}}}],["kubernet",{"_index":2,"t":{"1":{"position":[[18,10]]},"286":{"position":[[0,10]]}}}],["lightweight",{"_index":1,"t":{"1":{"position":[[6,11]]}}}],["load",{"_index":23,"t":{"198":{"position":[[8,4]]}}}],["manag",{"_index":37,"t":{"320":{"position":[[0,8]]},"373":{"position":[[0,8]]}}}],["manual",{"_index":64,"t":{"543":{"position":[[0,6]]}}}],["network",{"_index":36,"t":{"300":{"position":[[0,7]]},"399":{"position":[[0,10]]}}}],["option",{"_index":4,"t":{"7":{"position":[[9,7]]},"274":{"position":[[14,7]]},"300":{"position":[[8,7]]}}}],["packag",{"_index":38,"t":{"320":{"position":[[9,8]]}}}],["privat",{"_index":40,"t":{"335":{"position":[[0,7]]}}}],["profil",{"_index":54,"t":{"433":{"position":[[9,9]]}}}],["quick",{"_index":47,"t":{"425":{"position":[[0,5]]}}}],["refer",{"_index":50,"t":{"429":{"position":[[0,9]]}}}],["registri",{"_index":41,"t":{"335":{"position":[[8,8]]}}}],["requir",{"_index":42,"t":{"349":{"position":[[0,12]]}}}],["resourc",{"_index":53,"t":{"433":{"position":[[0,8]]}}}],["restor",{"_index":22,"t":{"190":{"position":[[11,7]]}}}],["role",{"_index":43,"t":{"373":{"position":[[16,5]]}}}],["secret",{"_index":14,"t":{"119":{"position":[[4,7]]},"509":{"position":[[0,7]]}}}],["secur",{"_index":55,"t":{"457":{"position":[[0,8]]}}}],["self",{"_index":65,"t":{"553":{"position":[[4,4]]}}}],["server",{"_index":16,"t":{"129":{"position":[[4,6]]},"373":{"position":[[9,6]]}}}],["snapshot",{"_index":13,"t":{"117":{"position":[[9,8]]}}}],["start",{"_index":48,"t":{"425":{"position":[[6,5]]}}}],["stop",{"_index":63,"t":{"541":{"position":[[0,8]]}}}],["storag",{"_index":60,"t":{"513":{"position":[[12,7]]}}}],["token",{"_index":17,"t":{"163":{"position":[[4,5]]}}}],["tool",{"_index":9,"t":{"76":{"position":[[4,5]]}}}],["uninstal",{"_index":44,"t":{"383":{"position":[[0,12]]}}}],["upgrad",{"_index":61,"t":{"529":{"position":[[0,8]]},"534":{"position":[[10,8]]},"543":{"position":[[7,8]]}}}],["variabl",{"_index":52,"t":{"431":{"position":[[12,9]]}}}],["volum",{"_index":59,"t":{"513":{"position":[[0,7]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":3,"t":"What is K3s?","u":"/","h":"","p":1},{"i":5,"t":"What's with the name?","u":"/","h":"","p":1},{"i":9,"t":"Certificate Management","u":"/advanced","h":"#certificate-management","p":7},{"i":10,"t":"Certificate Authority Certificates","u":"/advanced","h":"#certificate-authority-certificates","p":7},{"i":12,"t":"Client and Server certificates","u":"/advanced","h":"#client-and-server-certificates","p":7},{"i":14,"t":"Token Management","u":"/advanced","h":"#token-management","p":7},{"i":16,"t":"Configuring an HTTP proxy","u":"/advanced","h":"#configuring-an-http-proxy","p":7},{"i":18,"t":"Using Docker as the Container Runtime","u":"/advanced","h":"#using-docker-as-the-container-runtime","p":7},{"i":20,"t":"Using etcdctl","u":"/advanced","h":"#using-etcdctl","p":7},{"i":22,"t":"Configuring containerd","u":"/advanced","h":"#configuring-containerd","p":7},{"i":24,"t":"NVIDIA Container Runtime Support","u":"/advanced","h":"#nvidia-container-runtime-support","p":7},{"i":26,"t":"Running Agentless Servers (Experimental)","u":"/advanced","h":"#running-agentless-servers-experimental","p":7},{"i":28,"t":"Running Rootless Servers (Experimental)","u":"/advanced","h":"#running-rootless-servers-experimental","p":7},{"i":30,"t":"Known Issues with Rootless mode","u":"/advanced","h":"#known-issues-with-rootless-mode","p":7},{"i":32,"t":"Starting Rootless Servers","u":"/advanced","h":"#starting-rootless-servers","p":7},{"i":34,"t":"Advanced Rootless Configuration","u":"/advanced","h":"#advanced-rootless-configuration","p":7},{"i":36,"t":"Troubleshooting Rootless","u":"/advanced","h":"#troubleshooting-rootless","p":7},{"i":38,"t":"Node Labels and Taints","u":"/advanced","h":"#node-labels-and-taints","p":7},{"i":40,"t":"Starting the Service with the Installation Script","u":"/advanced","h":"#starting-the-service-with-the-installation-script","p":7},{"i":42,"t":"Additional OS Preparations","u":"/advanced","h":"#additional-os-preparations","p":7},{"i":43,"t":"Old iptables versions","u":"/advanced","h":"#old-iptables-versions","p":7},{"i":45,"t":"Red Hat Enterprise Linux / CentOS","u":"/advanced","h":"#red-hat-enterprise-linux--centos","p":7},{"i":47,"t":"Ubuntu","u":"/advanced","h":"#ubuntu","p":7},{"i":49,"t":"Raspberry Pi","u":"/advanced","h":"#raspberry-pi","p":7},{"i":51,"t":"Running K3s in Docker","u":"/advanced","h":"#running-k3s-in-docker","p":7},{"i":53,"t":"SELinux Support","u":"/advanced","h":"#selinux-support","p":7},{"i":55,"t":"Enabling SELinux Enforcement","u":"/advanced","h":"#enabling-selinux-enforcement","p":7},{"i":57,"t":"Enabling Lazy Pulling of eStargz (Experimental)","u":"/advanced","h":"#enabling-lazy-pulling-of-estargz-experimental","p":7},{"i":58,"t":"What's lazy pulling and eStargz?","u":"/advanced","h":"#whats-lazy-pulling-and-estargz","p":7},{"i":60,"t":"Configure k3s for lazy pulling of eStargz","u":"/advanced","h":"#configure-k3s-for-lazy-pulling-of-estargz","p":7},{"i":62,"t":"Additional Logging Sources","u":"/advanced","h":"#additional-logging-sources","p":7},{"i":64,"t":"Additional Network Policy Logging","u":"/advanced","h":"#additional-network-policy-logging","p":7},{"i":68,"t":"Single-server Setup with an Embedded DB","u":"/architecture","h":"#single-server-setup-with-an-embedded-db","p":66},{"i":70,"t":"High-Availability K3s","u":"/architecture","h":"#high-availability-k3s","p":66},{"i":72,"t":"Fixed Registration Address for Agent Nodes","u":"/architecture","h":"#fixed-registration-address-for-agent-nodes","p":66},{"i":74,"t":"How Agent Node Registration Works","u":"/architecture","h":"#how-agent-node-registration-works","p":66},{"i":80,"t":"Logging","u":"/cli/agent","h":"#logging","p":78},{"i":82,"t":"Cluster Options","u":"/cli/agent","h":"#cluster-options","p":78},{"i":84,"t":"Data","u":"/cli/agent","h":"#data","p":78},{"i":86,"t":"Node","u":"/cli/agent","h":"#node","p":78},{"i":88,"t":"Runtime","u":"/cli/agent","h":"#runtime","p":78},{"i":90,"t":"Networking","u":"/cli/agent","h":"#networking","p":78},{"i":92,"t":"Customized Flags","u":"/cli/agent","h":"#customized-flags","p":78},{"i":94,"t":"Experimental","u":"/cli/agent","h":"#experimental","p":78},{"i":96,"t":"Deprecated","u":"/cli/agent","h":"#deprecated","p":78},{"i":98,"t":"Node Labels and Taints for Agents","u":"/cli/agent","h":"#node-labels-and-taints-for-agents","p":78},{"i":100,"t":"K3s Agent CLI Help","u":"/cli/agent","h":"#k3s-agent-cli-help","p":78},{"i":103,"t":"Client and Server Certificates","u":"/cli/certificate","h":"#client-and-server-certificates","p":102},{"i":105,"t":"Rotating Client and Server Certificates","u":"/cli/certificate","h":"#rotating-client-and-server-certificates","p":102},{"i":107,"t":"Certificate Authority (CA) Certificates","u":"/cli/certificate","h":"#certificate-authority-ca-certificates","p":102},{"i":109,"t":"Using Custom CA Certificates","u":"/cli/certificate","h":"#using-custom-ca-certificates","p":102},{"i":111,"t":"Rotating Custom CA Certificates","u":"/cli/certificate","h":"#rotating-custom-ca-certificates","p":102},{"i":113,"t":"Rotating Self-Signed CA Certificates","u":"/cli/certificate","h":"#rotating-self-signed-ca-certificates","p":102},{"i":115,"t":"Service-Account Issuer Key Rotation","u":"/cli/certificate","h":"#service-account-issuer-key-rotation","p":102},{"i":121,"t":"Secrets Encryption Tool","u":"/cli/secrets-encrypt","h":"#secrets-encryption-tool","p":119},{"i":123,"t":"Encryption Key Rotation","u":"/cli/secrets-encrypt","h":"#encryption-key-rotation","p":119},{"i":125,"t":"Secrets Encryption Disable/Enable","u":"/cli/secrets-encrypt","h":"#secrets-encryption-disableenable","p":119},{"i":127,"t":"Secrets Encryption Status","u":"/cli/secrets-encrypt","h":"#secrets-encryption-status","p":119},{"i":131,"t":"Critical Configuration Values","u":"/cli/server","h":"#critical-configuration-values","p":129},{"i":133,"t":"Commonly Used Options","u":"/cli/server","h":"#commonly-used-options","p":129},{"i":134,"t":"Database","u":"/cli/server","h":"#database","p":129},{"i":136,"t":"Cluster Options","u":"/cli/server","h":"#cluster-options","p":129},{"i":138,"t":"Admin Kubeconfig Options","u":"/cli/server","h":"#admin-kubeconfig-options","p":129},{"i":140,"t":"Advanced Options","u":"/cli/server","h":"#advanced-options","p":129},{"i":141,"t":"Logging","u":"/cli/server","h":"#logging","p":129},{"i":143,"t":"Listeners","u":"/cli/server","h":"#listeners","p":129},{"i":145,"t":"Data","u":"/cli/server","h":"#data","p":129},{"i":147,"t":"Secrets Encryption","u":"/cli/server","h":"#secrets-encryption","p":129},{"i":149,"t":"Networking","u":"/cli/server","h":"#networking","p":129},{"i":151,"t":"Storage Class","u":"/cli/server","h":"#storage-class","p":129},{"i":153,"t":"Kubernetes Components","u":"/cli/server","h":"#kubernetes-components","p":129},{"i":155,"t":"Customized Flags for Kubernetes Processes","u":"/cli/server","h":"#customized-flags-for-kubernetes-processes","p":129},{"i":157,"t":"Experimental Options","u":"/cli/server","h":"#experimental-options","p":129},{"i":159,"t":"Deprecated Options","u":"/cli/server","h":"#deprecated-options","p":129},{"i":161,"t":"K3s Server CLI Help","u":"/cli/server","h":"","p":129},{"i":165,"t":"Token Format","u":"/cli/token","h":"#token-format","p":163},{"i":167,"t":"Secure","u":"/cli/token","h":"#secure","p":163},{"i":169,"t":"Short","u":"/cli/token","h":"#short","p":163},{"i":171,"t":"Token Types","u":"/cli/token","h":"#token-types","p":163},{"i":173,"t":"Server","u":"/cli/token","h":"#server","p":163},{"i":175,"t":"Agent","u":"/cli/token","h":"#agent","p":163},{"i":177,"t":"Bootstrap","u":"/cli/token","h":"#bootstrap","p":163},{"i":182,"t":"Accessing the Cluster from Outside with kubectl","u":"/cluster-access","h":"#accessing-the-cluster-from-outside-with-kubectl","p":180},{"i":186,"t":"External Datastore Configuration Parameters","u":"/datastore","h":"#external-datastore-configuration-parameters","p":184},{"i":188,"t":"Datastore Endpoint Format and Functionality","u":"/datastore","h":"#datastore-endpoint-format-and-functionality","p":184},{"i":192,"t":"Backup and Restore with SQLite","u":"/datastore/backup-restore","h":"#backup-and-restore-with-sqlite","p":190},{"i":194,"t":"Backup and Restore with External Datastore","u":"/datastore/backup-restore","h":"#backup-and-restore-with-external-datastore","p":190},{"i":196,"t":"Backup and Restore with Embedded etcd Datastore","u":"/datastore/backup-restore","h":"#backup-and-restore-with-embedded-etcd-datastore","p":190},{"i":200,"t":"Prerequisites","u":"/datastore/cluster-loadbalancer","h":"#prerequisites","p":198},{"i":202,"t":"Setup Load Balancer","u":"/datastore/cluster-loadbalancer","h":"#setup-load-balancer","p":198},{"i":204,"t":"Nginx Load Balancer","u":"/datastore/cluster-loadbalancer","h":"#nginx-load-balancer","p":198},{"i":208,"t":"Installation Outline","u":"/datastore/ha","h":"#installation-outline","p":206},{"i":210,"t":"1. Create an External Datastore","u":"/datastore/ha","h":"#1-create-an-external-datastore","p":206},{"i":212,"t":"2. Launch Server Nodes","u":"/datastore/ha","h":"#2-launch-server-nodes","p":206},{"i":214,"t":"3. Optional: Join Additional Server Nodes","u":"/datastore/ha","h":"#3-optional-join-additional-server-nodes","p":206},{"i":216,"t":"4. Optional: Configure a Fixed Registration Address","u":"/datastore/ha","h":"#4-optional-configure-a-fixed-registration-address","p":206},{"i":218,"t":"5. Optional: Join Agent Nodes","u":"/datastore/ha","h":"#5-optional-join-agent-nodes","p":206},{"i":222,"t":"Existing single-node clusters","u":"/datastore/ha-embedded","h":"#existing-single-node-clusters","p":220},{"i":226,"t":"Is K3s a suitable replacement for Kubernetes?","u":"/faq","h":"#is-k3s-a-suitable-replacement-for-kubernetes","p":224},{"i":228,"t":"How can I use my own Ingress instead of Traefik?","u":"/faq","h":"#how-can-i-use-my-own-ingress-instead-of-traefik","p":224},{"i":230,"t":"Does K3s support Windows?","u":"/faq","h":"#does-k3s-support-windows","p":224},{"i":232,"t":"How can I build from source?","u":"/faq","h":"#how-can-i-build-from-source","p":224},{"i":234,"t":"Where are the K3s logs?","u":"/faq","h":"#where-are-the-k3s-logs","p":224},{"i":236,"t":"Can I run K3s in Docker?","u":"/faq","h":"#can-i-run-k3s-in-docker","p":224},{"i":238,"t":"What is the difference between K3s Server and Agent Tokens?","u":"/faq","h":"#what-is-the-difference-between-k3s-server-and-agent-tokens","p":224},{"i":240,"t":"How compatible are different versions of K3s?","u":"/faq","h":"#how-compatible-are-different-versions-of-k3s","p":224},{"i":242,"t":"I'm having an issue, where can I get help?","u":"/faq","h":"#im-having-an-issue-where-can-i-get-help","p":224},{"i":246,"t":"Using the Helm Controller","u":"/helm","h":"#using-the-helm-controller","p":244},{"i":248,"t":"Customizing Packaged Components with HelmChartConfig","u":"/helm","h":"#customizing-packaged-components-with-helmchartconfig","p":244},{"i":250,"t":"Migrating from Helm v2","u":"/helm","h":"#migrating-from-helm-v2","p":244},{"i":256,"t":"Private Registry Method","u":"/installation/airgap","h":"#private-registry-method","p":254},{"i":258,"t":"Create the Registry YAML","u":"/installation/airgap","h":"#create-the-registry-yaml","p":254},{"i":260,"t":"Manually Deploy Images Method","u":"/installation/airgap","h":"#manually-deploy-images-method","p":254},{"i":262,"t":"Prepare the Images Directory and K3s Binary","u":"/installation/airgap","h":"#prepare-the-images-directory-and-k3s-binary","p":254},{"i":264,"t":"Install K3s","u":"/installation/airgap","h":"#install-k3s","p":254},{"i":265,"t":"Prerequisites","u":"/installation/airgap","h":"#prerequisites","p":254},{"i":267,"t":"Installing K3s in an Air-Gapped Environment","u":"/installation/airgap","h":"#installing-k3s-in-an-air-gapped-environment","p":254},{"i":269,"t":"Upgrading","u":"/installation/airgap","h":"#upgrading","p":254},{"i":270,"t":"Install Script Method","u":"/installation/airgap","h":"#install-script-method","p":254},{"i":272,"t":"Automated Upgrades Method","u":"/installation/airgap","h":"#automated-upgrades-method","p":254},{"i":276,"t":"Configuration with install script","u":"/installation/configuration","h":"#configuration-with-install-script","p":274},{"i":278,"t":"Configuration with binary","u":"/installation/configuration","h":"#configuration-with-binary","p":274},{"i":280,"t":"Configuration File","u":"/installation/configuration","h":"#configuration-file","p":274},{"i":282,"t":"Multiple Config Files","u":"/installation/configuration","h":"#multiple-config-files","p":274},{"i":284,"t":"Putting it all together","u":"/installation/configuration","h":"#putting-it-all-together","p":274},{"i":288,"t":"Deploying the Kubernetes Dashboard","u":"/installation/kube-dashboard","h":"#deploying-the-kubernetes-dashboard","p":286},{"i":290,"t":"Dashboard RBAC Configuration","u":"/installation/kube-dashboard","h":"#dashboard-rbac-configuration","p":286},{"i":292,"t":"Obtain the Bearer Token","u":"/installation/kube-dashboard","h":"#obtain-the-bearer-token","p":286},{"i":294,"t":"Local Access to the Dashboard","u":"/installation/kube-dashboard","h":"#local-access-to-the-dashboard","p":286},{"i":296,"t":"Upgrading the Dashboard","u":"/installation/kube-dashboard","h":"#upgrading-the-dashboard","p":286},{"i":298,"t":"Deleting the Dashboard and admin-user configuration","u":"/installation/kube-dashboard","h":"#deleting-the-dashboard-and-admin-user-configuration","p":286},{"i":302,"t":"Flannel Options","u":"/installation/network-options","h":"#flannel-options","p":300},{"i":304,"t":"Migrating from wireguard or ipsec to wireguard-native","u":"/installation/network-options","h":"#migrating-from-wireguard-or-ipsec-to-wireguard-native","p":300},{"i":306,"t":"Custom CNI","u":"/installation/network-options","h":"#custom-cni","p":300},{"i":308,"t":"Control-Plane Egress Selector configuration","u":"/installation/network-options","h":"#control-plane-egress-selector-configuration","p":300},{"i":310,"t":"Dual-stack (IPv4 + IPv6) Networking","u":"/installation/network-options","h":"#dual-stack-ipv4--ipv6-networking","p":300},{"i":312,"t":"Single-stack IPv6 Networking","u":"/installation/network-options","h":"#single-stack-ipv6-networking","p":300},{"i":314,"t":"Distributed hybrid or multicloud cluster","u":"/installation/network-options","h":"#distributed-hybrid-or-multicloud-cluster","p":300},{"i":316,"t":"Embedded k3s multicloud solution","u":"/installation/network-options","h":"#embedded-k3s-multicloud-solution","p":300},{"i":318,"t":"Integration with the Tailscale VPN provider (experimental)","u":"/installation/network-options","h":"#integration-with-the-tailscale-vpn-provider-experimental","p":300},{"i":321,"t":"Auto-Deploying Manifests (AddOns)","u":"/installation/packaged-components","h":"#auto-deploying-manifests-addons","p":320},{"i":323,"t":"Packaged Components","u":"/installation/packaged-components","h":"#packaged-components","p":320},{"i":325,"t":"User AddOns","u":"/installation/packaged-components","h":"#user-addons","p":320},{"i":327,"t":"Disabling Manifests","u":"/installation/packaged-components","h":"#disabling-manifests","p":320},{"i":329,"t":"Using the --disable flag","u":"/installation/packaged-components","h":"#using-the---disable-flag","p":320},{"i":331,"t":"Using .skip files","u":"/installation/packaged-components","h":"#using-skip-files","p":320},{"i":333,"t":"Helm AddOns","u":"/installation/packaged-components","h":"#helm-addons","p":320},{"i":337,"t":"Registries Configuration File","u":"/installation/private-registry","h":"#registries-configuration-file","p":335},{"i":339,"t":"Mirrors","u":"/installation/private-registry","h":"#mirrors","p":335},{"i":341,"t":"Configs","u":"/installation/private-registry","h":"#configs","p":335},{"i":343,"t":"With TLS","u":"/installation/private-registry","h":"#with-tls","p":335},{"i":345,"t":"Without TLS","u":"/installation/private-registry","h":"#without-tls","p":335},{"i":347,"t":"Adding Images to the Private Registry","u":"/installation/private-registry","h":"#adding-images-to-the-private-registry","p":335},{"i":351,"t":"Prerequisites","u":"/installation/requirements","h":"#prerequisites","p":349},{"i":353,"t":"Architecture","u":"/installation/requirements","h":"#architecture","p":349},{"i":355,"t":"Operating Systems","u":"/installation/requirements","h":"#operating-systems","p":349},{"i":357,"t":"Hardware","u":"/installation/requirements","h":"#hardware","p":349},{"i":359,"t":"Networking","u":"/installation/requirements","h":"#networking","p":349},{"i":361,"t":"Inbound Rules for K3s Server Nodes","u":"/installation/requirements","h":"#inbound-rules-for-k3s-server-nodes","p":349},{"i":363,"t":"Large Clusters","u":"/installation/requirements","h":"#large-clusters","p":349},{"i":365,"t":"CPU and Memory","u":"/installation/requirements","h":"#cpu-and-memory","p":349},{"i":367,"t":"Disks","u":"/installation/requirements","h":"#disks-1","p":349},{"i":369,"t":"Network","u":"/installation/requirements","h":"#network","p":349},{"i":371,"t":"Database","u":"/installation/requirements","h":"#database","p":349},{"i":375,"t":"Dedicated etcd Nodes","u":"/installation/server-roles","h":"#dedicated-etcd-nodes","p":373},{"i":377,"t":"Dedicated control-plane Nodes","u":"/installation/server-roles","h":"#dedicated-control-plane-nodes","p":373},{"i":379,"t":"Adding Roles To Existing Servers","u":"/installation/server-roles","h":"#adding-roles-to-existing-servers","p":373},{"i":381,"t":"Configuration File Syntax","u":"/installation/server-roles","h":"#configuration-file-syntax","p":373},{"i":385,"t":"Uninstalling Servers","u":"/installation/uninstall","h":"#uninstalling-servers","p":383},{"i":387,"t":"Uninstalling Agents","u":"/installation/uninstall","h":"#uninstalling-agents","p":383},{"i":391,"t":"Snap Docker","u":"/known-issues","h":"#snap-docker","p":389},{"i":393,"t":"Iptables","u":"/known-issues","h":"#iptables","p":389},{"i":395,"t":"Rootless Mode","u":"/known-issues","h":"#rootless-mode","p":389},{"i":397,"t":"Upgrading Hardened Clusters from v1.24.x to v1.25.x","u":"/known-issues","h":"#hardened-125","p":389},{"i":401,"t":"CoreDNS","u":"/networking","h":"#coredns","p":399},{"i":403,"t":"Traefik Ingress Controller","u":"/networking","h":"#traefik-ingress-controller","p":399},{"i":405,"t":"Network Policy Controller","u":"/networking","h":"#network-policy-controller","p":399},{"i":407,"t":"Service Load Balancer","u":"/networking","h":"#service-load-balancer","p":399},{"i":409,"t":"How ServiceLB Works","u":"/networking","h":"#how-servicelb-works","p":399},{"i":411,"t":"Usage","u":"/networking","h":"#usage","p":399},{"i":413,"t":"Controlling ServiceLB Node Selection","u":"/networking","h":"#controlling-servicelb-node-selection","p":399},{"i":415,"t":"Creating ServiceLB Node Pools","u":"/networking","h":"#creating-servicelb-node-pools","p":399},{"i":417,"t":"Disabling ServiceLB","u":"/networking","h":"#disabling-servicelb","p":399},{"i":419,"t":"Deploying an External Cloud Controller Manager","u":"/networking","h":"#deploying-an-external-cloud-controller-manager","p":399},{"i":421,"t":"Nodes Without a Hostname","u":"/networking","h":"#nodes-without-a-hostname","p":399},{"i":423,"t":"Multicluster CIDR (Experimental)","u":"/networking","h":"#multicluster-cidr-experimental","p":399},{"i":427,"t":"Install Script","u":"/quick-start","h":"#install-script","p":425},{"i":435,"t":"Scope of Resource Testing","u":"/reference/resource-profiling","h":"#scope-of-resource-testing","p":433},{"i":437,"t":"Components Included for Baseline Measurements","u":"/reference/resource-profiling","h":"#components-included-for-baseline-measurements","p":433},{"i":439,"t":"Methodology","u":"/reference/resource-profiling","h":"#methodology","p":433},{"i":441,"t":"Environment","u":"/reference/resource-profiling","h":"#environment","p":433},{"i":443,"t":"Baseline Resource Requirements","u":"/reference/resource-profiling","h":"#baseline-resource-requirements","p":433},{"i":445,"t":"K3s Server with a Workload","u":"/reference/resource-profiling","h":"#k3s-server-with-a-workload","p":433},{"i":447,"t":"K3s Cluster with a Single Agent","u":"/reference/resource-profiling","h":"#k3s-cluster-with-a-single-agent","p":433},{"i":449,"t":"K3s Agent","u":"/reference/resource-profiling","h":"#k3s-agent","p":433},{"i":451,"t":"Analysis","u":"/reference/resource-profiling","h":"#analysis","p":433},{"i":453,"t":"Primary Resource Utilization Drivers","u":"/reference/resource-profiling","h":"#primary-resource-utilization-drivers","p":433},{"i":455,"t":"Preventing Agents and Workloads from Interfering with the Cluster Datastore","u":"/reference/resource-profiling","h":"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore","p":433},{"i":461,"t":"Host-level Requirements","u":"/security/hardening-guide","h":"#host-level-requirements","p":459},{"i":463,"t":"Ensure protect-kernel-defaults is set","u":"/security/hardening-guide","h":"#ensure-protect-kernel-defaults-is-set","p":459},{"i":465,"t":"Kubernetes Runtime Requirements","u":"/security/hardening-guide","h":"#kubernetes-runtime-requirements","p":459},{"i":467,"t":"Pod Security","u":"/security/hardening-guide","h":"#pod-security","p":459},{"i":469,"t":"NetworkPolicies","u":"/security/hardening-guide","h":"#networkpolicies","p":459},{"i":471,"t":"API Server audit configuration","u":"/security/hardening-guide","h":"#api-server-audit-configuration","p":459},{"i":473,"t":"Configuration for Kubernetes Components","u":"/security/hardening-guide","h":"#configuration-for-kubernetes-components","p":459},{"i":475,"t":"Control Plane Execution and Arguments","u":"/security/hardening-guide","h":"#control-plane-execution-and-arguments","p":459},{"i":477,"t":"Known Issues","u":"/security/hardening-guide","h":"#known-issues","p":459},{"i":479,"t":"Control 1.2.15","u":"/security/hardening-guide","h":"#control-1215","p":459},{"i":481,"t":"Control 1.2.16","u":"/security/hardening-guide","h":"#control-1216","p":459},{"i":483,"t":"Control 1.2.22","u":"/security/hardening-guide","h":"#control-1222","p":459},{"i":485,"t":"Control 1.2.23","u":"/security/hardening-guide","h":"#control-1223","p":459},{"i":487,"t":"Control 1.2.24","u":"/security/hardening-guide","h":"#control-1224","p":459},{"i":489,"t":"Control 1.2.25","u":"/security/hardening-guide","h":"#control-1225","p":459},{"i":491,"t":"Control 1.2.26","u":"/security/hardening-guide","h":"#control-1226","p":459},{"i":493,"t":"Control 1.2.27","u":"/security/hardening-guide","h":"#control-1227","p":459},{"i":495,"t":"Control 1.2.33","u":"/security/hardening-guide","h":"#control-1233","p":459},{"i":497,"t":"Control 1.2.34","u":"/security/hardening-guide","h":"#control-1234","p":459},{"i":499,"t":"Control 1.3.1","u":"/security/hardening-guide","h":"#control-131","p":459},{"i":501,"t":"Control 3.2.1","u":"/security/hardening-guide","h":"#control-321","p":459},{"i":503,"t":"Control 4.2.7","u":"/security/hardening-guide","h":"#control-427","p":459},{"i":505,"t":"Control 5.1.5","u":"/security/hardening-guide","h":"#control-515","p":459},{"i":507,"t":"Conclusion","u":"/security/hardening-guide","h":"#conclusion","p":459},{"i":511,"t":"Secrets Encryption Tool","u":"/security/secrets-encryption","h":"#secrets-encryption-tool","p":509},{"i":515,"t":"What's different about K3s storage?","u":"/storage","h":"#whats-different-about-k3s-storage","p":513},{"i":517,"t":"Setting up the Local Storage Provider","u":"/storage","h":"#setting-up-the-local-storage-provider","p":513},{"i":519,"t":"pvc.yaml","u":"/storage","h":"#pvcyaml","p":513},{"i":521,"t":"pod.yaml","u":"/storage","h":"#podyaml","p":513},{"i":523,"t":"Setting up Longhorn","u":"/storage","h":"#setting-up-longhorn","p":513},{"i":525,"t":"pvc.yaml","u":"/storage","h":"#pvcyaml-1","p":513},{"i":527,"t":"pod.yaml","u":"/storage","h":"#podyaml-1","p":513},{"i":530,"t":"Upgrading your K3s cluster","u":"/upgrades","h":"#upgrading-your-k3s-cluster","p":529},{"i":532,"t":"Version-specific caveats","u":"/upgrades","h":"#version-specific-caveats","p":529},{"i":535,"t":"Overview","u":"/upgrades/automated","h":"#overview","p":534},{"i":537,"t":"Install the system-upgrade-controller","u":"/upgrades/automated","h":"#install-the-system-upgrade-controller","p":534},{"i":539,"t":"Configure plans","u":"/upgrades/automated","h":"#configure-plans","p":534},{"i":545,"t":"Release Channels","u":"/upgrades/manual","h":"#release-channels","p":543},{"i":547,"t":"Upgrade K3s Using the Installation Script","u":"/upgrades/manual","h":"#upgrade-k3s-using-the-installation-script","p":543},{"i":549,"t":"Manually Upgrade K3s Using the Binary","u":"/upgrades/manual","h":"#manually-upgrade-k3s-using-the-binary","p":543},{"i":551,"t":"Restarting K3s","u":"/upgrades/manual","h":"#restarting-k3s","p":543},{"i":554,"t":"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24","u":"/security/self-assessment","h":"#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124","p":553},{"i":556,"t":"Controls","u":"/security/self-assessment","h":"#controls","p":553},{"i":557,"t":"1.1 Control Plane Node Configuration Files","u":"/security/self-assessment","h":"#11-control-plane-node-configuration-files","p":553},{"i":558,"t":"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":560,"t":"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":562,"t":"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":564,"t":"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":566,"t":"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":568,"t":"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":570,"t":"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":572,"t":"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":574,"t":"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":576,"t":"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)","u":"/security/self-assessment","h":"#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual","p":553},{"i":578,"t":"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated","p":553},{"i":580,"t":"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)","u":"/security/self-assessment","h":"#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated","p":553},{"i":582,"t":"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated","p":553},{"i":584,"t":"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":586,"t":"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":588,"t":"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":590,"t":"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":592,"t":"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":594,"t":"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated","p":553},{"i":596,"t":"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":598,"t":"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)","u":"/security/self-assessment","h":"#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual","p":553},{"i":600,"t":"1.2 API Server","u":"/security/self-assessment","h":"#12-api-server","p":553},{"i":601,"t":"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)","u":"/security/self-assessment","h":"#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual","p":553},{"i":603,"t":"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)","u":"/security/self-assessment","h":"#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated","p":553},{"i":605,"t":"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)","u":"/security/self-assessment","h":"#123-ensure-that-the---denyserviceexternalips-is-not-set-automated","p":553},{"i":607,"t":"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)","u":"/security/self-assessment","h":"#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated","p":553},{"i":609,"t":"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated","p":553},{"i":611,"t":"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated","p":553},{"i":613,"t":"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/security/self-assessment","h":"#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":553},{"i":615,"t":"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)","u":"/security/self-assessment","h":"#128-ensure-that-the---authorization-mode-argument-includes-node-automated","p":553},{"i":617,"t":"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)","u":"/security/self-assessment","h":"#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated","p":553},{"i":619,"t":"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)","u":"/security/self-assessment","h":"#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual","p":553},{"i":621,"t":"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)","u":"/security/self-assessment","h":"#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated","p":553},{"i":623,"t":"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)","u":"/security/self-assessment","h":"#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual","p":553},{"i":625,"t":"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)","u":"/security/self-assessment","h":"#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual","p":553},{"i":627,"t":"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)","u":"/security/self-assessment","h":"#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated","p":553},{"i":629,"t":"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)","u":"/security/self-assessment","h":"#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated","p":553},{"i":631,"t":"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)","u":"/security/self-assessment","h":"#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated","p":553},{"i":633,"t":"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)","u":"/security/self-assessment","h":"#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated","p":553},{"i":635,"t":"1.2.18 Ensure that the --profiling argument is set to false (Automated)","u":"/security/self-assessment","h":"#1218-ensure-that-the---profiling-argument-is-set-to-false-automated","p":553},{"i":637,"t":"1.2.19 Ensure that the --audit-log-path argument is set (Automated)","u":"/security/self-assessment","h":"#1219-ensure-that-the---audit-log-path-argument-is-set-automated","p":553},{"i":639,"t":"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)","u":"/security/self-assessment","h":"#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated","p":553},{"i":641,"t":"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)","u":"/security/self-assessment","h":"#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated","p":553},{"i":643,"t":"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)","u":"/security/self-assessment","h":"#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated","p":553},{"i":645,"t":"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)","u":"/security/self-assessment","h":"#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated","p":553},{"i":647,"t":"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated","p":553},{"i":649,"t":"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated","p":553},{"i":651,"t":"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated","p":553},{"i":653,"t":"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":553},{"i":655,"t":"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated","p":553},{"i":657,"t":"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)","u":"/security/self-assessment","h":"#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual","p":553},{"i":659,"t":"1.2.31 Ensure that encryption providers are appropriately configured (Manual)","u":"/security/self-assessment","h":"#1231-ensure-that-encryption-providers-are-appropriately-configured-manual","p":553},{"i":661,"t":"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)","u":"/security/self-assessment","h":"#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual","p":553},{"i":663,"t":"1.3 Controller Manager","u":"/security/self-assessment","h":"#13-controller-manager","p":553},{"i":664,"t":"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)","u":"/security/self-assessment","h":"#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual","p":553},{"i":666,"t":"1.3.2 Ensure that the --profiling argument is set to false (Automated)","u":"/security/self-assessment","h":"#132-ensure-that-the---profiling-argument-is-set-to-false-automated","p":553},{"i":668,"t":"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)","u":"/security/self-assessment","h":"#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated","p":553},{"i":670,"t":"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated","p":553},{"i":672,"t":"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated","p":553},{"i":674,"t":"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)","u":"/security/self-assessment","h":"#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated","p":553},{"i":676,"t":"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/security/self-assessment","h":"#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":553},{"i":678,"t":"1.4 Scheduler","u":"/security/self-assessment","h":"#14-scheduler","p":553},{"i":679,"t":"1.4.1 Ensure that the --profiling argument is set to false (Automated)","u":"/security/self-assessment","h":"#141-ensure-that-the---profiling-argument-is-set-to-false-automated","p":553},{"i":681,"t":"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/security/self-assessment","h":"#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":553},{"i":683,"t":"2 Etcd Node Configuration","u":"/security/self-assessment","h":"#2-etcd-node-configuration","p":553},{"i":684,"t":"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated","p":553},{"i":686,"t":"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)","u":"/security/self-assessment","h":"#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated","p":553},{"i":688,"t":"2.3 Ensure that the --auto-tls argument is not set to true (Automated)","u":"/security/self-assessment","h":"#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated","p":553},{"i":690,"t":"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated","p":553},{"i":692,"t":"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)","u":"/security/self-assessment","h":"#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated","p":553},{"i":694,"t":"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)","u":"/security/self-assessment","h":"#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated","p":553},{"i":696,"t":"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)","u":"/security/self-assessment","h":"#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual","p":553},{"i":698,"t":"3.1 Authentication and Authorization","u":"/security/self-assessment","h":"#31-authentication-and-authorization","p":553},{"i":699,"t":"3.1.1 Client certificate authentication should not be used for users (Manual)","u":"/security/self-assessment","h":"#311-client-certificate-authentication-should-not-be-used-for-users-manual","p":553},{"i":701,"t":"3.2 Logging","u":"/security/self-assessment","h":"#32-logging","p":553},{"i":702,"t":"3.2.1 Ensure that a minimal audit policy is created (Manual)","u":"/security/self-assessment","h":"#321-ensure-that-a-minimal-audit-policy-is-created-manual","p":553},{"i":704,"t":"3.2.2 Ensure that the audit policy covers key security concerns (Manual)","u":"/security/self-assessment","h":"#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual","p":553},{"i":706,"t":"4.1 Worker Node Configuration Files","u":"/security/self-assessment","h":"#41-worker-node-configuration-files","p":553},{"i":707,"t":"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":709,"t":"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated","p":553},{"i":711,"t":"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":713,"t":"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)","u":"/security/self-assessment","h":"#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual","p":553},{"i":715,"t":"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":717,"t":"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":719,"t":"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":721,"t":"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)","u":"/security/self-assessment","h":"#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual","p":553},{"i":723,"t":"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated","p":553},{"i":725,"t":"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated","p":553},{"i":727,"t":"4.2 Kubelet","u":"/security/self-assessment","h":"#42-kubelet","p":553},{"i":728,"t":"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)","u":"/security/self-assessment","h":"#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated","p":553},{"i":730,"t":"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/security/self-assessment","h":"#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":553},{"i":732,"t":"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":553},{"i":734,"t":"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)","u":"/security/self-assessment","h":"#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual","p":553},{"i":736,"t":"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)","u":"/security/self-assessment","h":"#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual","p":553},{"i":738,"t":"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)","u":"/security/self-assessment","h":"#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated","p":553},{"i":740,"t":"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)","u":"/security/self-assessment","h":"#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated","p":553},{"i":742,"t":"4.2.8 Ensure that the --hostname-override argument is not set (Manual)","u":"/security/self-assessment","h":"#428-ensure-that-the---hostname-override-argument-is-not-set-manual","p":553},{"i":744,"t":"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)","u":"/security/self-assessment","h":"#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual","p":553},{"i":746,"t":"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)","u":"/security/self-assessment","h":"#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual","p":553},{"i":748,"t":"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)","u":"/security/self-assessment","h":"#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated","p":553},{"i":750,"t":"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)","u":"/security/self-assessment","h":"#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual","p":553},{"i":752,"t":"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)","u":"/security/self-assessment","h":"#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual","p":553},{"i":754,"t":"5.1 RBAC and Service Accounts","u":"/security/self-assessment","h":"#51-rbac-and-service-accounts","p":553},{"i":755,"t":"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)","u":"/security/self-assessment","h":"#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual","p":553},{"i":757,"t":"5.1.2 Minimize access to secrets (Manual)","u":"/security/self-assessment","h":"#512-minimize-access-to-secrets-manual","p":553},{"i":759,"t":"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)","u":"/security/self-assessment","h":"#513-minimize-wildcard-use-in-roles-and-clusterroles-manual","p":553},{"i":761,"t":"5.1.4 Minimize access to create pods (Manual)","u":"/security/self-assessment","h":"#514-minimize-access-to-create-pods-manual","p":553},{"i":763,"t":"5.1.5 Ensure that default service accounts are not actively used. (Manual)","u":"/security/self-assessment","h":"#515-ensure-that-default-service-accounts-are-not-actively-used-manual","p":553},{"i":765,"t":"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)","u":"/security/self-assessment","h":"#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual","p":553},{"i":767,"t":"5.1.7 Avoid use of system:masters group (Manual)","u":"/security/self-assessment","h":"#517-avoid-use-of-systemmasters-group-manual","p":553},{"i":769,"t":"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)","u":"/security/self-assessment","h":"#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual","p":553},{"i":771,"t":"5.2 Pod Security Standards","u":"/security/self-assessment","h":"#52-pod-security-standards","p":553},{"i":772,"t":"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)","u":"/security/self-assessment","h":"#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual","p":553},{"i":774,"t":"5.2.2 Minimize the admission of privileged containers (Automated)","u":"/security/self-assessment","h":"#522-minimize-the-admission-of-privileged-containers-automated","p":553},{"i":776,"t":"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)","u":"/security/self-assessment","h":"#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated","p":553},{"i":778,"t":"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)","u":"/security/self-assessment","h":"#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated","p":553},{"i":780,"t":"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)","u":"/security/self-assessment","h":"#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated","p":553},{"i":782,"t":"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)","u":"/security/self-assessment","h":"#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated","p":553},{"i":784,"t":"5.2.7 Minimize the admission of root containers (Automated)","u":"/security/self-assessment","h":"#527-minimize-the-admission-of-root-containers-automated","p":553},{"i":786,"t":"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)","u":"/security/self-assessment","h":"#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated","p":553},{"i":788,"t":"5.2.9 Minimize the admission of containers with added capabilities (Automated)","u":"/security/self-assessment","h":"#529-minimize-the-admission-of-containers-with-added-capabilities-automated","p":553},{"i":790,"t":"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)","u":"/security/self-assessment","h":"#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual","p":553},{"i":792,"t":"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)","u":"/security/self-assessment","h":"#5211-minimize-the-admission-of-windows-hostprocess-containers-manual","p":553},{"i":794,"t":"5.2.12 Minimize the admission of HostPath volumes (Manual)","u":"/security/self-assessment","h":"#5212-minimize-the-admission-of-hostpath-volumes-manual","p":553},{"i":796,"t":"5.2.13 Minimize the admission of containers which use HostPorts (Manual)","u":"/security/self-assessment","h":"#5213-minimize-the-admission-of-containers-which-use-hostports-manual","p":553},{"i":798,"t":"5.3 Network Policies and CNI","u":"/security/self-assessment","h":"#53-network-policies-and-cni","p":553},{"i":799,"t":"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)","u":"/security/self-assessment","h":"#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual","p":553},{"i":801,"t":"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)","u":"/security/self-assessment","h":"#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual","p":553},{"i":803,"t":"5.4 Secrets Management","u":"/security/self-assessment","h":"#54-secrets-management","p":553},{"i":804,"t":"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)","u":"/security/self-assessment","h":"#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual","p":553},{"i":806,"t":"5.4.2 Consider external secret storage (Manual)","u":"/security/self-assessment","h":"#542-consider-external-secret-storage-manual","p":553},{"i":808,"t":"5.5 Extensible Admission Control","u":"/security/self-assessment","h":"#55-extensible-admission-control","p":553},{"i":809,"t":"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)","u":"/security/self-assessment","h":"#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual","p":553},{"i":811,"t":"5.7 General Policies","u":"/security/self-assessment","h":"#57-general-policies","p":553},{"i":812,"t":"5.7.1 Create administrative boundaries between resources using namespaces (Manual)","u":"/security/self-assessment","h":"#571-create-administrative-boundaries-between-resources-using-namespaces-manual","p":553},{"i":814,"t":"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)","u":"/security/self-assessment","h":"#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual","p":553},{"i":816,"t":"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)","u":"/security/self-assessment","h":"#573-apply-securitycontext-to-your-pods-and-containers-manual","p":553},{"i":818,"t":"5.7.4 The default namespace should not be used (Manual)","u":"/security/self-assessment","h":"#574-the-default-namespace-should-not-be-used-manual","p":553}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/3",[0,3.945]],["t/5",[1,6.168,2,7.283]],["t/9",[3,4.052,4,5.166]],["t/10",[3,4.741,5,4.142]],["t/12",[3,3.645,6,4.25,7,3.402]],["t/14",[4,5.166,8,5.166]],["t/16",[9,3.2,10,5.948,11,5.55]],["t/18",[12,2.827,13,4.774,14,3.377,15,4.774]],["t/20",[12,3.457,16,7.283]],["t/22",[9,3.556,17,7.283]],["t/24",[14,3.377,15,4.774,18,5.956,19,4.774]],["t/26",[7,3.092,20,4.774,21,5.956,22,4.225]],["t/28",[7,3.092,20,4.774,22,4.225,23,4.378]],["t/30",[23,4.378,24,5.406,25,5.044,26,4.378]],["t/32",[7,3.402,23,4.817,27,5.948]],["t/34",[9,3.2,23,4.817,28,5.948]],["t/36",[23,5.354,29,7.283]],["t/38",[30,3.517,31,5.948,32,5.948]],["t/40",[27,5.406,33,3.765,34,3.97,35,4.558]],["t/42",[36,5.253,37,6.553,38,5.948]],["t/43",[39,6.553,40,5.55,41,5.55]],["t/45",[42,5.038,43,5.038,44,5.038,45,5.038,46,4.573,47,5.038]],["t/47",[48,8.196]],["t/49",[49,7.283,50,7.283]],["t/51",[0,3.154,13,5.253,20,5.253]],["t/53",[19,5.838,51,6.611]],["t/55",[51,5.948,52,5.948,53,6.553]],["t/57",[22,3.872,52,4.955,54,4.623,55,4.623,56,4.623]],["t/58",[1,5.044,54,5.044,55,5.044,56,5.044]],["t/60",[0,2.628,9,2.665,54,4.623,55,4.623,56,4.623]],["t/62",[36,5.253,57,4.25,58,5.948]],["t/64",[36,4.774,57,3.863,59,3.675,60,4.225]],["t/68",[7,2.834,61,4.375,62,4.955,63,4.623,64,5.458]],["t/70",[0,3.154,65,6.553,66,6.553]],["t/72",[30,2.93,67,4.955,68,4.623,69,4.375,70,3.45]],["t/74",[30,3.197,68,5.044,70,3.765,71,5.406]],["t/80",[57,5.316]],["t/82",[72,4.393,73,4.604]],["t/84",[74,6.57]],["t/86",[30,4.399]],["t/88",[15,6.57]],["t/90",[59,5.058]],["t/92",[75,5.354,76,6.168]],["t/94",[22,5.814]],["t/96",[77,7.44]],["t/98",[30,3.197,31,5.406,32,5.406,70,3.765]],["t/100",[0,2.867,70,3.765,78,5.406,79,5.044]],["t/103",[3,3.645,6,4.25,7,3.402]],["t/105",[3,3.313,6,3.863,7,3.092,80,4.378]],["t/107",[3,4.451,5,3.765,81,4.225]],["t/109",[3,3.313,12,2.827,75,4.378,81,4.225]],["t/111",[3,3.313,75,4.378,80,4.378,81,4.225]],["t/113",[3,3.037,80,4.013,81,3.872,82,5.458,83,5.458]],["t/115",[33,3.45,80,4.013,84,3.872,85,5.458,86,3.54]],["t/121",[87,4.368,88,4.5,89,5.948]],["t/123",[80,4.817,86,4.25,88,4.5]],["t/125",[87,4.368,88,4.5,90,6.553]],["t/127",[87,4.368,88,4.5,91,6.553]],["t/131",[9,3.2,92,6.553,93,6.553]],["t/133",[12,3.111,73,4.142,94,6.553]],["t/134",[95,7.44]],["t/136",[72,4.393,73,4.604]],["t/138",[73,4.142,96,5.55,97,5.015]],["t/140",[28,6.611,73,4.604]],["t/141",[57,5.316]],["t/143",[98,8.196]],["t/145",[74,6.57]],["t/147",[87,4.855,88,5.001]],["t/149",[59,5.058]],["t/151",[99,5.838,100,7.283]],["t/153",[101,4.604,102,5.574]],["t/155",[75,4.378,76,5.044,101,3.765,103,5.406]],["t/157",[22,5.166,73,4.604]],["t/159",[73,4.604,77,6.611]],["t/161",[0,2.867,7,3.092,78,5.406,79,5.044]],["t/165",[8,5.166,104,6.611]],["t/167",[105,6.273]],["t/169",[106,8.196]],["t/171",[8,5.166,107,7.283]],["t/173",[7,4.255]],["t/175",[70,5.181]],["t/177",[108,8.196]],["t/182",[72,3.592,109,4.774,110,5.956,111,5.956]],["t/186",[9,2.908,112,4.558,113,4.378,114,5.406]],["t/188",[104,5.406,113,4.378,115,5.956,116,5.956]],["t/192",[117,5.55,118,5.55,119,6.553]],["t/194",[112,4.558,113,4.378,117,5.044,118,5.044]],["t/196",[63,4.623,113,4.013,117,4.623,118,4.623,120,3.54]],["t/200",[121,6.942]],["t/202",[62,5.948,122,5.55,123,5.55]],["t/204",[122,5.55,123,5.55,124,6.553]],["t/208",[34,4.855,125,7.283]],["t/210",[112,4.558,113,4.378,126,5.956,127,4.378]],["t/212",[7,3.092,30,3.197,128,5.406,129,5.956]],["t/214",[7,2.615,30,2.704,36,4.038,73,3.185,130,5.038,131,4.573]],["t/216",[9,2.46,67,4.573,68,4.267,69,4.038,73,3.185,132,5.038]],["t/218",[30,2.93,70,3.45,73,3.45,131,4.955,133,5.458]],["t/222",[30,3.197,61,4.774,72,3.592,134,4.774]],["t/226",[0,2.867,101,3.765,135,5.956,136,5.956]],["t/228",[12,2.827,137,5.406,138,5.956,139,5.406]],["t/230",[0,3.154,19,5.253,140,5.948]],["t/232",[58,6.611,141,7.283]],["t/234",[0,3.506,57,4.723]],["t/236",[0,3.154,13,5.253,20,5.253]],["t/238",[0,2.425,7,2.615,8,3.573,70,3.185,142,4.267,143,4.573]],["t/240",[0,2.867,41,5.044,142,5.044,144,5.956]],["t/242",[25,5.044,79,5.044,145,5.956,146,5.956]],["t/246",[12,3.111,147,5.55,148,2.652]],["t/248",[75,4.378,102,4.558,149,5.406,150,5.956]],["t/250",[147,5.55,151,5.948,152,6.553]],["t/256",[153,5.015,154,5.253,155,5.253]],["t/258",[127,4.817,154,5.253,156,6.553]],["t/260",[155,4.774,157,2.152,158,4.774,159,4.774]],["t/262",[0,2.628,38,4.955,159,4.375,160,4.375,161,4.623]],["t/264",[0,3.506,34,4.855]],["t/265",[121,6.942]],["t/267",[0,2.628,34,3.639,162,5.458,163,5.458,164,4.623]],["t/269",[165,5.628]],["t/270",[34,4.368,35,5.015,155,5.253]],["t/272",[155,5.253,165,4.5,166,1.9]],["t/276",[9,3.2,34,4.368,35,5.015]],["t/278",[9,3.556,161,6.168]],["t/280",[9,3.556,167,2.766]],["t/282",[167,2.489,168,6.553,169,5.015]],["t/284",[170,7.283,171,7.283]],["t/288",[101,4.142,158,5.253,172,5.015]],["t/290",[9,3.2,172,5.015,173,5.55]],["t/292",[8,4.648,174,6.553,175,6.553]],["t/294",[109,5.253,172,5.015,176,5.948]],["t/296",[165,5.001,172,5.574]],["t/298",[9,2.665,96,4.623,172,4.178,177,5.458,178,4.623]],["t/302",[73,4.604,179,7.283]],["t/304",[151,4.955,180,7.539,181,5.458,182,5.458]],["t/306",[75,5.354,183,6.168]],["t/308",[9,2.665,148,2.209,184,4.375,185,5.458,186,5.458]],["t/310",[46,4.573,59,3.109,187,5.038,188,4.573,189,5.038,190,4.573]],["t/312",[59,3.675,61,4.774,188,5.406,190,5.406]],["t/314",[72,3.592,191,5.956,192,5.956,193,5.406]],["t/316",[0,2.867,63,5.044,193,5.406,194,5.956]],["t/318",[22,3.872,195,5.458,196,5.458,197,5.458,198,4.375]],["t/321",[158,4.774,199,5.044,200,5.406,201,5.044]],["t/323",[102,5.574,149,6.611]],["t/325",[178,6.168,201,6.168]],["t/327",[200,6.611,202,6.168]],["t/329",[12,3.111,76,5.55,202,5.55]],["t/331",[12,3.111,167,2.489,203,6.553]],["t/333",[147,6.168,201,6.168]],["t/337",[9,3.2,154,5.253,167,2.489]],["t/339",[204,8.196]],["t/341",[169,6.273]],["t/343",[205,6.026]],["t/345",[205,5.354,206,6.611]],["t/347",[153,4.558,154,4.774,159,4.774,207,5.044]],["t/351",[121,6.942]],["t/353",[208,8.196]],["t/355",[209,7.283,210,6.611]],["t/357",[211,8.196]],["t/359",[59,5.058]],["t/361",[0,2.628,7,2.834,30,2.93,212,5.458,213,5.458]],["t/363",[72,4.393,214,7.283]],["t/365",[215,7.283,216,7.283]],["t/367",[217,8.196]],["t/369",[59,5.058]],["t/371",[95,7.44]],["t/375",[30,3.517,120,4.25,218,5.948]],["t/377",[30,3.197,148,2.411,184,4.774,218,5.406]],["t/379",[7,3.092,134,4.774,207,5.044,219,5.044]],["t/381",[9,3.2,167,2.489,220,6.553]],["t/385",[7,3.781,221,6.611]],["t/387",[70,4.604,221,6.611]],["t/391",[13,5.838,222,7.283]],["t/393",[40,6.942]],["t/395",[23,5.354,26,5.354]],["t/397",[72,3.292,165,3.748,223,5.458,224,5.458,225,5.458]],["t/401",[226,8.196]],["t/403",[137,5.948,139,5.948,148,2.652]],["t/405",[59,4.044,60,4.648,148,2.652]],["t/407",[33,4.142,122,5.55,123,5.55]],["t/409",[71,6.611,227,5.838]],["t/411",[228,8.196]],["t/413",[30,3.197,148,2.411,227,4.774,229,5.956]],["t/415",[30,3.197,127,4.378,227,4.774,230,5.956]],["t/417",[202,6.168,227,5.838]],["t/419",[4,3.872,112,4.178,148,2.209,158,4.375,231,5.458]],["t/421",[30,3.517,206,5.948,232,5.948]],["t/423",[22,4.648,233,6.553,234,6.553]],["t/427",[34,4.855,35,5.574]],["t/435",[235,6.553,236,5.253,237,6.553]],["t/437",[102,4.558,238,5.044,239,5.406,240,5.956]],["t/439",[241,8.196]],["t/441",[164,6.942]],["t/443",[236,5.253,239,5.948,242,5.253]],["t/445",[0,3.154,7,3.402,243,5.948]],["t/447",[0,2.867,61,4.774,70,3.765,72,3.592]],["t/449",[0,3.506,70,4.604]],["t/451",[244,8.196]],["t/453",[236,4.774,245,5.956,246,5.406,247,5.956]],["t/455",[70,3.185,72,3.039,113,3.704,243,4.573,248,5.038,249,5.038]],["t/461",[242,5.253,250,5.253,251,5.948]],["t/463",[252,1.314,253,4.955,254,4.955,255,4.375,256,1.428]],["t/465",[15,5.253,101,4.142,242,5.253]],["t/467",[105,5.574,257,4.299]],["t/469",[258,6.942]],["t/471",[7,3.092,9,2.908,259,4.558,260,4.225]],["t/473",[9,3.2,101,4.142,102,5.015]],["t/475",[148,2.411,184,4.774,261,5.956,262,2.217]],["t/477",[24,6.611,25,6.168]],["t/479",[148,2.948,263,6.611]],["t/481",[148,2.948,264,6.611]],["t/483",[148,2.948,265,6.611]],["t/485",[148,2.948,266,7.283]],["t/487",[148,2.948,267,6.611]],["t/489",[148,2.948,268,6.611]],["t/491",[148,2.948,269,6.611]],["t/493",[148,2.948,270,6.611]],["t/495",[148,2.948,271,7.283]],["t/497",[148,2.948,272,7.283]],["t/499",[148,2.948,273,6.611]],["t/501",[148,2.948,274,6.611]],["t/503",[148,2.948,275,6.611]],["t/505",[148,2.948,276,6.611]],["t/507",[277,8.196]],["t/511",[87,4.368,88,4.5,89,5.948]],["t/515",[0,2.867,1,5.044,99,4.774,142,5.044]],["t/517",[99,4.375,176,4.955,198,4.375,256,1.428,278,4.955]],["t/519",[279,7.44]],["t/521",[280,7.44]],["t/523",[256,1.714,278,5.948,281,6.553]],["t/525",[279,7.44]],["t/527",[280,7.44]],["t/530",[0,3.154,72,3.953,165,4.5]],["t/532",[41,5.55,282,4.368,283,6.553]],["t/535",[284,8.196]],["t/537",[34,3.97,148,2.411,165,4.09,210,5.406]],["t/539",[9,3.556,285,7.283]],["t/545",[286,7.283,287,7.283]],["t/547",[0,2.628,12,2.591,34,3.639,35,4.178,165,3.748]],["t/549",[0,2.628,12,2.591,157,1.973,161,4.623,165,3.748]],["t/551",[0,3.506,288,7.283]],["t/554",[0,2.101,101,4.063,289,4.365,290,4.365,291,4.365,292,4.365,293,4.365]],["t/556",[148,3.318]],["t/557",[9,2.46,30,2.704,148,2.039,167,1.914,184,4.038,294,5.038]],["t/558",[7,1.699,166,0.949,167,1.243,252,0.788,256,0.856,257,1.932,259,2.504,282,2.181,295,3.272,296,1.82,297,1.974,298,1.892,299,1.892]],["t/560",[7,1.888,166,1.054,167,1.381,252,0.875,256,0.951,257,2.146,259,2.783,282,2.424,300,3.636,301,2.103,302,2.146]],["t/562",[4,2.321,148,1.325,166,0.949,167,1.243,252,0.788,256,0.856,257,1.932,282,2.181,296,1.82,297,1.974,298,1.892,299,1.892,303,3.272]],["t/564",[4,2.579,148,1.472,166,1.054,167,1.381,252,0.875,256,0.951,257,2.146,282,2.424,301,2.103,302,2.146,304,3.636]],["t/566",[166,0.999,167,1.308,252,0.829,256,0.901,257,2.033,282,2.296,296,1.916,297,2.078,298,1.992,299,1.992,305,3.445,306,2.918]],["t/568",[166,1.116,167,1.463,252,0.927,256,1.007,257,2.273,282,2.567,301,2.227,302,2.273,306,3.261,307,3.851]],["t/570",[120,2.234,166,0.999,167,1.308,252,0.829,256,0.901,257,2.033,282,2.296,296,1.916,297,2.078,298,1.992,299,1.992,308,3.445]],["t/572",[120,2.497,166,1.116,167,1.463,252,0.927,256,1.007,257,2.273,282,2.567,301,2.227,302,2.273,309,3.851]],["t/574",[14,1.953,59,2.126,157,1.245,167,1.308,252,0.829,256,0.901,296,1.916,297,2.078,298,1.992,299,1.992,310,3.445,311,3.127]],["t/576",[14,2.183,59,2.376,157,1.392,167,1.463,252,0.927,256,1.007,301,2.227,302,2.273,311,3.495,312,3.851]],["t/578",[74,2.915,120,2.358,160,2.915,166,1.054,252,0.875,256,0.951,296,2.023,298,2.103,299,2.103,313,3.636,314,3.636]],["t/580",[74,3.28,120,2.654,160,3.28,166,1.186,252,0.985,256,1.07,301,2.366,315,4.092,316,4.092]],["t/582",[166,1.116,167,1.463,252,0.927,256,1.007,296,2.142,298,2.227,299,2.227,317,3.851,318,3.495,319,3.495]],["t/584",[166,1.266,167,1.658,252,1.05,256,1.142,301,2.524,302,2.576,318,3.962,320,4.365]],["t/586",[166,1.116,167,1.463,252,0.927,256,1.007,296,2.142,297,2.323,298,2.227,299,2.227,321,3.851,322,3.495]],["t/588",[166,1.266,167,1.658,252,1.05,256,1.142,301,2.524,302,2.576,322,3.962,323,4.365]],["t/590",[148,1.472,166,1.054,167,1.381,252,0.875,256,0.951,296,2.023,297,2.193,298,2.103,299,2.103,324,3.636,325,3.301]],["t/592",[148,1.656,166,1.186,167,1.554,252,0.985,256,1.07,301,2.366,302,2.415,325,3.714,326,4.092]],["t/594",[101,2.434,160,3.087,166,1.116,167,1.463,252,0.927,256,1.007,301,2.227,302,2.273,327,3.851,328,3.261]],["t/596",[3,1.916,101,2.178,157,1.245,167,1.308,252,0.829,256,0.901,296,1.916,297,2.078,298,1.992,299,1.992,328,2.918,329,3.445]],["t/598",[86,2.497,101,2.434,157,1.392,167,1.463,252,0.927,256,1.007,296,2.142,319,3.495,328,3.261,330,3.851]],["t/600",[7,3.402,259,5.015,331,6.553]],["t/601",[157,1.577,252,1.05,256,1.142,262,1.625,332,4.365,333,3.962,334,3.341,335,3.209]],["t/603",[8,3.096,114,3.962,166,1.266,167,1.658,252,1.05,256,1.142,334,3.341,336,4.365]],["t/605",[166,1.583,252,1.314,256,1.428,337,5.458,338,5.458]],["t/607",[10,3.962,166,1.266,252,1.05,256,1.142,262,1.625,339,4.365,340,2.91,341,2.759]],["t/609",[3,1.916,6,3.483,86,2.234,166,0.999,252,0.829,256,0.901,262,1.282,340,3.58,342,3.445,343,1.818]],["t/611",[3,2.276,5,2.586,166,1.186,252,0.985,256,1.07,262,1.523,340,2.728,343,2.159,344,4.092]],["t/613",[5,2.759,26,3.209,166,1.266,252,1.05,256,1.142,262,1.625,345,4.365,346,3.962]],["t/615",[5,2.759,26,3.209,30,2.343,166,1.266,238,3.697,252,1.05,262,1.625,347,4.365]],["t/617",[5,2.759,26,3.209,166,1.266,173,3.697,238,3.697,252,1.05,262,1.625,348,4.365]],["t/619",[148,1.767,157,1.577,252,1.05,256,1.142,349,4.365,350,2.266,351,3.096,352,4.365]],["t/621",[148,1.767,166,1.266,252,1.05,256,1.142,350,2.266,351,3.096,353,4.365,354,4.365]],["t/623",[148,1.767,157,1.577,252,1.05,256,1.142,350,2.266,351,3.096,355,4.365,356,4.365]],["t/625",[12,1.828,148,1.559,157,1.392,252,0.927,256,1.007,350,1.999,351,2.731,357,3.851,358,3.851,359,3.851]],["t/627",[148,1.767,166,1.266,252,1.05,256,1.142,350,2.266,351,3.096,360,4.365,361,4.365]],["t/629",[148,1.767,166,1.266,252,1.05,256,1.142,263,3.962,350,2.266,351,3.096,362,4.365]],["t/631",[148,1.767,166,1.266,252,1.05,256,1.142,264,3.962,350,2.266,351,3.096,363,4.365]],["t/633",[105,3.341,166,1.266,252,1.05,256,1.142,262,1.625,364,4.365,365,3.962,366,3.499]],["t/635",[166,1.356,252,1.126,256,1.224,262,1.741,335,3.439,367,4.677,368,3.749]],["t/637",[57,2.831,166,1.266,252,1.05,256,1.142,260,3.096,262,1.625,369,4.365,370,4.365]],["t/639",[57,2.497,166,1.116,252,0.927,256,1.007,260,2.731,262,1.433,343,2.032,371,3.851,372,3.851,373,3.851]],["t/641",[57,2.497,166,1.116,252,0.927,256,1.007,260,2.731,262,1.433,343,2.032,374,3.851,375,3.851,376,3.851]],["t/643",[57,2.497,166,1.116,252,0.927,256,1.007,260,2.731,262,1.433,265,3.495,343,2.032,377,3.851,378,3.851]],["t/645",[33,2.586,84,2.902,166,1.186,252,0.985,256,1.07,262,1.523,267,3.714,341,2.586,379,4.092]],["t/647",[166,1.266,252,1.05,256,1.142,262,1.625,268,3.962,343,2.304,380,4.365,381,3.962]],["t/649",[120,3.795,166,1.116,252,0.927,256,1.007,262,1.433,269,3.495,343,2.032,382,3.851,383,3.851]],["t/651",[86,2.122,153,2.504,166,0.949,167,1.96,205,3.793,252,0.788,256,0.856,262,1.218,270,2.97,343,1.727,384,2.406]],["t/653",[6,2.654,81,2.902,166,1.186,167,1.554,252,0.985,256,1.07,262,1.523,343,2.159,385,4.092]],["t/655",[120,2.831,166,1.266,252,1.05,256,1.142,262,1.625,343,2.304,386,4.365,387,4.365]],["t/657",[88,2.81,157,1.479,169,3.132,198,3.28,252,0.985,256,1.07,262,1.523,343,2.159,388,4.092]],["t/659",[9,2.284,88,3.212,157,1.69,198,3.749,252,1.126,343,2.468,389,4.677]],["t/661",[7,1.999,12,1.828,157,1.392,252,0.927,259,2.947,390,3.851,391,3.261,392,3.495,393,3.495,394,3.495]],["t/663",[4,4.648,148,2.652,395,6.553]],["t/664",[157,1.392,252,0.927,256,1.007,257,2.273,262,1.433,273,3.495,343,2.032,396,3.851,397,3.851,398,3.851]],["t/666",[166,1.356,252,1.126,256,1.224,262,1.741,335,3.439,368,3.749,399,4.677]],["t/668",[12,1.828,33,2.434,84,2.731,166,1.116,252,0.927,256,1.007,262,1.433,341,2.434,400,3.851,401,3.851]],["t/670",[33,2.299,84,2.579,86,2.358,153,2.783,166,1.054,167,1.381,252,0.875,256,0.951,262,1.354,343,1.919,402,3.636]],["t/672",[81,2.902,166,1.186,167,1.554,252,0.985,256,1.07,262,1.523,343,2.159,403,4.092,404,3.714]],["t/674",[166,1.356,252,1.126,256,1.224,262,1.741,341,2.957,405,4.677,406,4.246]],["t/676",[69,3.499,166,1.266,252,1.05,256,1.142,262,1.625,407,4.365,408,3.697,409,3.962]],["t/678",[306,6.168,410,7.283]],["t/679",[166,1.356,252,1.126,256,1.224,262,1.741,335,3.439,368,3.749,411,4.677]],["t/681",[69,3.499,166,1.266,252,1.05,256,1.142,262,1.625,408,3.697,409,3.962,412,4.365]],["t/683",[9,2.908,30,3.197,120,3.863,128,5.406]],["t/684",[86,2.497,166,1.116,167,2.223,252,0.927,256,1.007,262,1.433,343,2.032,384,2.831,413,3.851]],["t/686",[6,2.654,166,1.186,252,0.985,256,1.07,262,1.523,334,3.132,341,2.586,384,3.008,414,4.092]],["t/688",[166,1.266,199,3.697,205,3.209,252,1.05,256,1.142,262,1.625,341,2.759,415,4.365]],["t/690",[86,2.234,166,0.999,167,2.04,252,0.829,256,0.901,262,1.282,343,1.818,384,2.532,416,3.445,417,4.549]],["t/692",[6,2.497,166,1.116,252,0.927,256,1.007,262,1.433,334,2.947,341,2.434,384,2.831,417,3.261,418,3.851]],["t/694",[166,1.186,199,3.465,205,3.008,252,0.985,256,1.07,262,1.523,341,2.586,417,3.465,419,4.092]],["t/696",[3,2.428,5,2.759,12,2.072,120,2.831,157,1.577,252,1.05,420,4.365,421,4.365]],["t/698",[5,4.142,422,6.553,423,5.948]],["t/699",[3,2.602,6,3.033,12,2.22,157,1.69,178,3.961,423,4.246,424,4.677]],["t/701",[57,4.723,425,7.283]],["t/702",[60,3.318,127,3.439,157,1.69,252,1.126,260,3.318,274,4.246,426,2.652]],["t/704",[60,2.902,86,2.654,105,3.132,157,1.479,252,0.985,260,2.902,427,4.092,428,4.092,429,4.092]],["t/706",[9,2.665,30,2.93,167,2.073,430,5.458,431,5.458]],["t/707",[33,2.299,166,1.054,167,1.381,252,0.875,256,0.951,296,2.023,297,2.193,298,2.103,299,2.103,340,2.424,432,3.636]],["t/709",[33,2.586,166,1.186,167,1.554,252,0.985,256,1.07,301,2.366,302,2.415,340,2.728,433,4.092]],["t/711",[11,2.918,97,2.636,134,2.761,157,1.245,167,1.308,252,0.829,256,0.901,296,1.916,297,2.078,298,1.992,299,1.992,434,3.445]],["t/713",[11,3.261,97,2.947,134,3.087,157,1.392,167,1.463,252,0.927,256,1.007,301,2.227,302,2.273,435,3.851]],["t/715",[97,2.783,166,1.054,167,1.381,252,0.875,256,0.951,296,2.023,297,2.193,298,2.103,299,2.103,436,3.636,437,3.301]],["t/717",[97,3.132,166,1.186,167,1.554,252,0.985,256,1.07,301,2.366,302,2.415,437,3.714,438,4.092]],["t/719",[3,2.023,5,2.299,157,1.314,167,1.381,252,0.875,256,0.951,296,2.023,297,2.193,298,2.103,299,2.103,439,3.636]],["t/721",[3,2.142,5,2.434,6,2.497,157,1.392,167,1.463,252,0.927,256,1.007,301,2.227,302,2.273,440,3.851]],["t/723",[9,1.682,166,0.999,167,1.308,169,2.636,252,0.829,256,0.901,296,1.916,297,2.078,298,1.992,299,1.992,340,2.296,441,3.445]],["t/725",[9,1.88,166,1.116,167,1.463,169,2.947,252,0.927,256,1.007,301,2.227,302,2.273,340,2.567,442,3.851]],["t/727",[340,4.855,443,7.283]],["t/728",[166,1.266,252,1.05,256,1.142,262,1.625,333,3.962,334,3.341,335,3.209,444,4.365]],["t/730",[5,2.759,26,3.209,166,1.266,252,1.05,256,1.142,262,1.625,346,3.962,445,4.365]],["t/732",[6,2.654,81,2.902,166,1.186,167,1.554,252,0.985,256,1.07,262,1.523,343,2.159,446,4.092]],["t/734",[157,1.577,252,1.05,256,1.142,262,1.625,365,3.962,366,3.499,447,4.365,448,4.365]],["t/736",[157,1.392,252,0.927,256,1.007,262,1.433,366,3.087,381,3.495,449,3.851,450,3.851,451,3.851,452,3.851]],["t/738",[166,1.186,252,0.985,253,3.714,254,3.714,255,3.28,256,1.07,262,1.523,341,2.586,453,4.092]],["t/740",[40,3.261,166,1.116,246,3.495,252,0.927,256,1.007,262,1.433,275,3.495,341,2.434,391,3.261,454,3.851]],["t/742",[157,1.69,232,4.246,252,1.126,256,1.224,262,1.741,455,4.677,456,4.677]],["t/744",[157,1.183,251,2.97,252,1.242,256,0.856,262,1.218,343,1.727,366,2.623,457,3.272,458,5.159,459,3.272,460,3.272]],["t/746",[86,2.122,153,2.504,157,1.183,167,1.96,205,3.793,252,0.788,256,0.856,262,1.218,343,1.727,384,2.406,461,3.272]],["t/748",[3,2.428,80,3.209,166,1.266,252,1.05,256,1.142,262,1.625,335,3.209,462,4.365]],["t/750",[157,1.69,256,1.224,262,1.741,341,2.957,406,4.246,463,4.677,464,4.677]],["t/752",[12,1.942,157,1.479,252,0.985,340,2.728,391,3.465,392,3.714,393,3.714,394,3.714,465,4.092]],["t/754",[33,3.765,84,4.225,173,5.044,466,5.956]],["t/755",[12,2.072,72,2.633,96,3.697,157,1.577,219,3.697,242,3.499,252,1.05,467,4.365]],["t/757",[87,3.639,109,4.375,157,1.973,426,3.095,468,5.458]],["t/759",[12,2.22,157,1.69,219,3.961,426,2.652,469,4.677,470,4.677,471,4.677]],["t/761",[109,4.038,127,3.704,157,1.821,257,2.974,426,2.856,472,5.038]],["t/763",[12,2.072,33,2.759,84,3.096,157,1.577,252,1.05,255,3.499,276,3.962,473,3.962]],["t/765",[8,3.096,33,2.759,84,3.096,157,1.577,252,1.05,474,4.365,475,4.365,476,4.365]],["t/767",[12,2.391,157,1.821,477,5.038,478,5.038,479,5.038,480,5.038]],["t/769",[12,1.828,72,2.323,101,2.434,157,1.392,296,2.142,408,3.261,481,3.851,482,3.851,483,3.851,484,3.851]],["t/771",[105,4.558,257,3.516,485,5.956,486,5.956]],["t/772",[60,2.731,72,2.323,148,1.559,157,1.392,252,0.927,473,3.495,487,3.851,488,3.851,489,3.851,490,3.851]],["t/774",[14,2.856,166,1.461,350,2.615,426,2.856,491,5.038,492,5.038]],["t/776",[14,2.062,103,3.301,166,1.054,250,2.915,350,1.888,426,2.062,493,3.636,494,3.08,495,3.08,496,3.636,497,2.673]],["t/778",[14,2.183,166,1.116,250,3.087,350,1.999,426,2.183,494,3.261,495,3.261,497,2.831,498,3.851,499,3.851]],["t/780",[14,2.183,59,2.376,166,1.116,250,3.087,350,1.999,426,2.183,494,3.261,495,3.261,497,2.831,500,3.851]],["t/782",[14,2.856,166,1.461,350,2.615,426,2.856,501,5.038,502,5.038]],["t/784",[14,2.856,166,1.461,350,2.615,404,4.573,426,2.856,503,5.038]],["t/786",[14,2.652,166,1.356,350,2.428,426,2.652,504,4.677,505,4.677,506,3.961]],["t/788",[14,2.652,166,1.356,207,3.961,350,2.428,426,2.652,506,3.961,507,4.677]],["t/790",[14,2.652,157,1.69,350,2.428,426,2.652,506,3.961,508,4.677,509,4.677]],["t/792",[14,2.652,140,4.246,157,1.69,350,2.428,426,2.652,510,4.677,511,4.677]],["t/794",[157,1.821,350,2.615,426,2.856,512,5.038,513,5.038,514,5.038]],["t/796",[12,2.22,14,2.652,157,1.69,350,2.428,426,2.652,515,4.677,516,4.677]],["t/798",[59,3.675,60,4.225,183,5.044,517,5.956]],["t/799",[12,2.22,19,3.749,157,1.69,183,3.961,252,1.126,258,3.961,518,4.677]],["t/801",[157,1.821,252,1.212,258,4.267,497,3.704,519,5.038,520,5.038]],["t/803",[4,4.648,87,4.368,521,6.553]],["t/804",[12,1.828,87,3.901,157,1.392,164,3.261,167,1.463,522,3.851,523,3.851,524,3.851,525,3.851]],["t/806",[87,3.358,99,4.038,112,3.856,157,1.821,526,5.038,527,5.038]],["t/808",[148,2.411,350,3.092,528,5.956,529,5.956]],["t/809",[9,1.998,12,1.942,148,1.656,157,1.479,159,3.28,350,2.124,530,4.092,531,4.092,532,4.092]],["t/811",[60,4.648,533,6.553,534,6.553]],["t/812",[12,1.942,127,3.008,143,3.714,157,1.479,236,3.28,497,3.008,535,4.092,536,4.092,537,4.092]],["t/814",[157,1.479,252,0.985,256,1.07,257,2.415,368,3.28,538,4.092,539,4.092,540,4.092,541,4.092]],["t/816",[14,2.856,157,1.821,257,2.974,542,5.038,543,5.038,544,5.038]],["t/818",[12,2.591,157,1.973,255,4.375,497,4.013,545,5.458]]],"invertedIndex":[["",{"_index":46,"t":{"45":{"position":[[25,1]]},"310":{"position":[[17,1]]}}}],["0",{"_index":366,"t":{"633":{"position":[[60,1]]},"734":{"position":[[58,1]]},"736":{"position":[[81,1]]},"744":{"position":[[53,1]]}}}],["1",{"_index":126,"t":{"210":{"position":[[0,2]]}}}],["1.1",{"_index":294,"t":{"557":{"position":[[0,3]]}}}],["1.1.1",{"_index":295,"t":{"558":{"position":[[0,5]]}}}],["1.1.10",{"_index":312,"t":{"576":{"position":[[0,6]]}}}],["1.1.11",{"_index":313,"t":{"578":{"position":[[0,6]]}}}],["1.1.12",{"_index":315,"t":{"580":{"position":[[0,6]]}}}],["1.1.13",{"_index":317,"t":{"582":{"position":[[0,6]]}}}],["1.1.14",{"_index":320,"t":{"584":{"position":[[0,6]]}}}],["1.1.15",{"_index":321,"t":{"586":{"position":[[0,6]]}}}],["1.1.16",{"_index":323,"t":{"588":{"position":[[0,6]]}}}],["1.1.17",{"_index":324,"t":{"590":{"position":[[0,6]]}}}],["1.1.18",{"_index":326,"t":{"592":{"position":[[0,6]]}}}],["1.1.19",{"_index":327,"t":{"594":{"position":[[0,6]]}}}],["1.1.2",{"_index":300,"t":{"560":{"position":[[0,5]]}}}],["1.1.20",{"_index":329,"t":{"596":{"position":[[0,6]]}}}],["1.1.21",{"_index":330,"t":{"598":{"position":[[0,6]]}}}],["1.1.3",{"_index":303,"t":{"562":{"position":[[0,5]]}}}],["1.1.4",{"_index":304,"t":{"564":{"position":[[0,5]]}}}],["1.1.5",{"_index":305,"t":{"566":{"position":[[0,5]]}}}],["1.1.6",{"_index":307,"t":{"568":{"position":[[0,5]]}}}],["1.1.7",{"_index":308,"t":{"570":{"position":[[0,5]]}}}],["1.1.8",{"_index":309,"t":{"572":{"position":[[0,5]]}}}],["1.1.9",{"_index":310,"t":{"574":{"position":[[0,5]]}}}],["1.2",{"_index":331,"t":{"600":{"position":[[0,3]]}}}],["1.2.1",{"_index":332,"t":{"601":{"position":[[0,5]]}}}],["1.2.10",{"_index":349,"t":{"619":{"position":[[0,6]]}}}],["1.2.11",{"_index":353,"t":{"621":{"position":[[0,6]]}}}],["1.2.12",{"_index":355,"t":{"623":{"position":[[0,6]]}}}],["1.2.13",{"_index":357,"t":{"625":{"position":[[0,6]]}}}],["1.2.14",{"_index":360,"t":{"627":{"position":[[0,6]]}}}],["1.2.15",{"_index":263,"t":{"479":{"position":[[8,6]]},"629":{"position":[[0,6]]}}}],["1.2.16",{"_index":264,"t":{"481":{"position":[[8,6]]},"631":{"position":[[0,6]]}}}],["1.2.17",{"_index":364,"t":{"633":{"position":[[0,6]]}}}],["1.2.18",{"_index":367,"t":{"635":{"position":[[0,6]]}}}],["1.2.19",{"_index":369,"t":{"637":{"position":[[0,6]]}}}],["1.2.2",{"_index":336,"t":{"603":{"position":[[0,5]]}}}],["1.2.20",{"_index":371,"t":{"639":{"position":[[0,6]]}}}],["1.2.21",{"_index":374,"t":{"641":{"position":[[0,6]]}}}],["1.2.22",{"_index":265,"t":{"483":{"position":[[8,6]]},"643":{"position":[[0,6]]}}}],["1.2.23",{"_index":266,"t":{"485":{"position":[[8,6]]}}}],["1.2.24",{"_index":267,"t":{"487":{"position":[[8,6]]},"645":{"position":[[0,6]]}}}],["1.2.25",{"_index":268,"t":{"489":{"position":[[8,6]]},"647":{"position":[[0,6]]}}}],["1.2.26",{"_index":269,"t":{"491":{"position":[[8,6]]},"649":{"position":[[0,6]]}}}],["1.2.27",{"_index":270,"t":{"493":{"position":[[8,6]]},"651":{"position":[[0,6]]}}}],["1.2.28",{"_index":385,"t":{"653":{"position":[[0,6]]}}}],["1.2.29",{"_index":386,"t":{"655":{"position":[[0,6]]}}}],["1.2.3",{"_index":337,"t":{"605":{"position":[[0,5]]}}}],["1.2.30",{"_index":388,"t":{"657":{"position":[[0,6]]}}}],["1.2.31",{"_index":389,"t":{"659":{"position":[[0,6]]}}}],["1.2.32",{"_index":390,"t":{"661":{"position":[[0,6]]}}}],["1.2.33",{"_index":271,"t":{"495":{"position":[[8,6]]}}}],["1.2.34",{"_index":272,"t":{"497":{"position":[[8,6]]}}}],["1.2.4",{"_index":339,"t":{"607":{"position":[[0,5]]}}}],["1.2.5",{"_index":342,"t":{"609":{"position":[[0,5]]}}}],["1.2.6",{"_index":344,"t":{"611":{"position":[[0,5]]}}}],["1.2.7",{"_index":345,"t":{"613":{"position":[[0,5]]}}}],["1.2.8",{"_index":347,"t":{"615":{"position":[[0,5]]}}}],["1.2.9",{"_index":348,"t":{"617":{"position":[[0,5]]}}}],["1.3",{"_index":395,"t":{"663":{"position":[[0,3]]}}}],["1.3.1",{"_index":273,"t":{"499":{"position":[[8,5]]},"664":{"position":[[0,5]]}}}],["1.3.2",{"_index":399,"t":{"666":{"position":[[0,5]]}}}],["1.3.3",{"_index":400,"t":{"668":{"position":[[0,5]]}}}],["1.3.4",{"_index":402,"t":{"670":{"position":[[0,5]]}}}],["1.3.5",{"_index":403,"t":{"672":{"position":[[0,5]]}}}],["1.3.6",{"_index":405,"t":{"674":{"position":[[0,5]]}}}],["1.3.7",{"_index":407,"t":{"676":{"position":[[0,5]]}}}],["1.4",{"_index":410,"t":{"678":{"position":[[0,3]]}}}],["1.4.1",{"_index":411,"t":{"679":{"position":[[0,5]]}}}],["1.4.2",{"_index":412,"t":{"681":{"position":[[0,5]]}}}],["10",{"_index":376,"t":{"641":{"position":[[64,2]]}}}],["100",{"_index":378,"t":{"643":{"position":[[62,3]]}}}],["127.0.0.1",{"_index":409,"t":{"676":{"position":[[56,9]]},"681":{"position":[[56,9]]}}}],["2",{"_index":128,"t":{"212":{"position":[[0,2]]},"683":{"position":[[0,1]]}}}],["2.1",{"_index":413,"t":{"684":{"position":[[0,3]]}}}],["2.2",{"_index":414,"t":{"686":{"position":[[0,3]]}}}],["2.3",{"_index":415,"t":{"688":{"position":[[0,3]]}}}],["2.4",{"_index":416,"t":{"690":{"position":[[0,3]]}}}],["2.5",{"_index":418,"t":{"692":{"position":[[0,3]]}}}],["2.6",{"_index":419,"t":{"694":{"position":[[0,3]]}}}],["2.7",{"_index":420,"t":{"696":{"position":[[0,3]]}}}],["3",{"_index":130,"t":{"214":{"position":[[0,2]]}}}],["3.1",{"_index":422,"t":{"698":{"position":[[0,3]]}}}],["3.1.1",{"_index":424,"t":{"699":{"position":[[0,5]]}}}],["3.2",{"_index":425,"t":{"701":{"position":[[0,3]]}}}],["3.2.1",{"_index":274,"t":{"501":{"position":[[8,5]]},"702":{"position":[[0,5]]}}}],["3.2.2",{"_index":427,"t":{"704":{"position":[[0,5]]}}}],["30",{"_index":373,"t":{"639":{"position":[[61,2]]}}}],["4",{"_index":132,"t":{"216":{"position":[[0,2]]}}}],["4.1",{"_index":430,"t":{"706":{"position":[[0,3]]}}}],["4.1.1",{"_index":432,"t":{"707":{"position":[[0,5]]}}}],["4.1.10",{"_index":442,"t":{"725":{"position":[[0,6]]}}}],["4.1.2",{"_index":433,"t":{"709":{"position":[[0,5]]}}}],["4.1.3",{"_index":434,"t":{"711":{"position":[[0,5]]}}}],["4.1.4",{"_index":435,"t":{"713":{"position":[[0,5]]}}}],["4.1.5",{"_index":436,"t":{"715":{"position":[[0,5]]}}}],["4.1.6",{"_index":438,"t":{"717":{"position":[[0,5]]}}}],["4.1.7",{"_index":439,"t":{"719":{"position":[[0,5]]}}}],["4.1.8",{"_index":440,"t":{"721":{"position":[[0,5]]}}}],["4.1.9",{"_index":441,"t":{"723":{"position":[[0,5]]}}}],["4.2",{"_index":443,"t":{"727":{"position":[[0,3]]}}}],["4.2.1",{"_index":444,"t":{"728":{"position":[[0,5]]}}}],["4.2.10",{"_index":461,"t":{"746":{"position":[[0,6]]}}}],["4.2.11",{"_index":462,"t":{"748":{"position":[[0,6]]}}}],["4.2.12",{"_index":463,"t":{"750":{"position":[[0,6]]}}}],["4.2.13",{"_index":465,"t":{"752":{"position":[[0,6]]}}}],["4.2.2",{"_index":445,"t":{"730":{"position":[[0,5]]}}}],["4.2.3",{"_index":446,"t":{"732":{"position":[[0,5]]}}}],["4.2.4",{"_index":447,"t":{"734":{"position":[[0,5]]}}}],["4.2.5",{"_index":449,"t":{"736":{"position":[[0,5]]}}}],["4.2.6",{"_index":453,"t":{"738":{"position":[[0,5]]}}}],["4.2.7",{"_index":275,"t":{"503":{"position":[[8,5]]},"740":{"position":[[0,5]]}}}],["4.2.8",{"_index":455,"t":{"742":{"position":[[0,5]]}}}],["4.2.9",{"_index":457,"t":{"744":{"position":[[0,5]]}}}],["5",{"_index":133,"t":{"218":{"position":[[0,2]]}}}],["5.1",{"_index":466,"t":{"754":{"position":[[0,3]]}}}],["5.1.1",{"_index":467,"t":{"755":{"position":[[0,5]]}}}],["5.1.2",{"_index":468,"t":{"757":{"position":[[0,5]]}}}],["5.1.3",{"_index":469,"t":{"759":{"position":[[0,5]]}}}],["5.1.4",{"_index":472,"t":{"761":{"position":[[0,5]]}}}],["5.1.5",{"_index":276,"t":{"505":{"position":[[8,5]]},"763":{"position":[[0,5]]}}}],["5.1.6",{"_index":474,"t":{"765":{"position":[[0,5]]}}}],["5.1.7",{"_index":477,"t":{"767":{"position":[[0,5]]}}}],["5.1.8",{"_index":481,"t":{"769":{"position":[[0,5]]}}}],["5.2",{"_index":485,"t":{"771":{"position":[[0,3]]}}}],["5.2.1",{"_index":487,"t":{"772":{"position":[[0,5]]}}}],["5.2.10",{"_index":508,"t":{"790":{"position":[[0,6]]}}}],["5.2.11",{"_index":510,"t":{"792":{"position":[[0,6]]}}}],["5.2.12",{"_index":512,"t":{"794":{"position":[[0,6]]}}}],["5.2.13",{"_index":515,"t":{"796":{"position":[[0,6]]}}}],["5.2.2",{"_index":491,"t":{"774":{"position":[[0,5]]}}}],["5.2.3",{"_index":493,"t":{"776":{"position":[[0,5]]}}}],["5.2.4",{"_index":498,"t":{"778":{"position":[[0,5]]}}}],["5.2.5",{"_index":500,"t":{"780":{"position":[[0,5]]}}}],["5.2.6",{"_index":501,"t":{"782":{"position":[[0,5]]}}}],["5.2.7",{"_index":503,"t":{"784":{"position":[[0,5]]}}}],["5.2.8",{"_index":504,"t":{"786":{"position":[[0,5]]}}}],["5.2.9",{"_index":507,"t":{"788":{"position":[[0,5]]}}}],["5.3",{"_index":517,"t":{"798":{"position":[[0,3]]}}}],["5.3.1",{"_index":518,"t":{"799":{"position":[[0,5]]}}}],["5.3.2",{"_index":519,"t":{"801":{"position":[[0,5]]}}}],["5.4",{"_index":521,"t":{"803":{"position":[[0,3]]}}}],["5.4.1",{"_index":522,"t":{"804":{"position":[[0,5]]}}}],["5.4.2",{"_index":526,"t":{"806":{"position":[[0,5]]}}}],["5.5",{"_index":528,"t":{"808":{"position":[[0,3]]}}}],["5.5.1",{"_index":530,"t":{"809":{"position":[[0,5]]}}}],["5.7",{"_index":533,"t":{"811":{"position":[[0,3]]}}}],["5.7.1",{"_index":535,"t":{"812":{"position":[[0,5]]}}}],["5.7.2",{"_index":538,"t":{"814":{"position":[[0,5]]}}}],["5.7.3",{"_index":542,"t":{"816":{"position":[[0,5]]}}}],["5.7.4",{"_index":545,"t":{"818":{"position":[[0,5]]}}}],["600",{"_index":319,"t":{"582":{"position":[[62,3]]},"598":{"position":[[70,3]]}}}],["644",{"_index":297,"t":{"558":{"position":[[79,3]]},"562":{"position":[[87,3]]},"566":{"position":[[78,3]]},"570":{"position":[[73,3]]},"574":{"position":[[78,3]]},"586":{"position":[[66,3]]},"590":{"position":[[75,3]]},"596":{"position":[[78,3]]},"707":{"position":[[66,3]]},"711":{"position":[[68,3]]},"715":{"position":[[76,3]]},"719":{"position":[[74,3]]},"723":{"position":[[81,3]]}}}],["700",{"_index":314,"t":{"578":{"position":[[66,3]]}}}],["access",{"_index":109,"t":{"182":{"position":[[0,9]]},"294":{"position":[[6,6]]},"757":{"position":[[15,6]]},"761":{"position":[[15,6]]}}}],["account",{"_index":84,"t":{"115":{"position":[[8,7]]},"645":{"position":[[33,7]]},"668":{"position":[[36,7]]},"670":{"position":[[32,7]]},"754":{"position":[[21,8]]},"763":{"position":[[34,8]]},"765":{"position":[[26,7]]}}}],["activ",{"_index":473,"t":{"763":{"position":[[51,8]]},"772":{"position":[[47,6]]}}}],["ad",{"_index":207,"t":{"347":{"position":[[0,6]]},"379":{"position":[[0,6]]},"788":{"position":[[48,5]]}}}],["addit",{"_index":36,"t":{"42":{"position":[[0,10]]},"62":{"position":[[0,10]]},"64":{"position":[[0,10]]},"214":{"position":[[18,10]]}}}],["addon",{"_index":201,"t":{"321":{"position":[[25,8]]},"325":{"position":[[5,6]]},"333":{"position":[[5,6]]}}}],["address",{"_index":69,"t":{"72":{"position":[[19,7]]},"216":{"position":[[44,7]]},"676":{"position":[[29,7]]},"681":{"position":[[29,7]]}}}],["admin",{"_index":96,"t":{"138":{"position":[[0,5]]},"298":{"position":[[27,5]]},"755":{"position":[[30,5]]}}}],["admin.conf",{"_index":318,"t":{"582":{"position":[[23,10]]},"584":{"position":[[23,10]]}}}],["administr",{"_index":536,"t":{"812":{"position":[[13,14]]}}}],["admiss",{"_index":350,"t":{"619":{"position":[[23,9]]},"621":{"position":[[23,9]]},"623":{"position":[[23,9]]},"625":{"position":[[23,9]]},"627":{"position":[[23,9]]},"629":{"position":[[23,9]]},"631":{"position":[[23,9]]},"774":{"position":[[19,9]]},"776":{"position":[[19,9]]},"778":{"position":[[19,9]]},"780":{"position":[[19,9]]},"782":{"position":[[19,9]]},"784":{"position":[[19,9]]},"786":{"position":[[19,9]]},"788":{"position":[[19,9]]},"790":{"position":[[20,9]]},"792":{"position":[[20,9]]},"794":{"position":[[20,9]]},"796":{"position":[[20,9]]},"808":{"position":[[15,9]]},"809":{"position":[[58,9]]}}}],["advanc",{"_index":28,"t":{"34":{"position":[[0,8]]},"140":{"position":[[0,8]]}}}],["agent",{"_index":70,"t":{"72":{"position":[[31,5]]},"74":{"position":[[4,5]]},"98":{"position":[[27,6]]},"100":{"position":[[4,5]]},"175":{"position":[[0,5]]},"218":{"position":[[18,5]]},"238":{"position":[[46,5]]},"387":{"position":[[13,6]]},"447":{"position":[[26,5]]},"449":{"position":[[4,5]]},"455":{"position":[[11,6]]}}}],["agentless",{"_index":21,"t":{"26":{"position":[[8,9]]}}}],["air",{"_index":162,"t":{"267":{"position":[[21,3]]}}}],["allowprivilegeescal",{"_index":502,"t":{"782":{"position":[[48,24]]}}}],["alwaysadmit",{"_index":354,"t":{"621":{"position":[[48,11]]}}}],["alwaysallow",{"_index":346,"t":{"613":{"position":[[66,11]]},"730":{"position":[[66,11]]}}}],["alwayspullimag",{"_index":356,"t":{"623":{"position":[[48,16]]}}}],["analysi",{"_index":244,"t":{"451":{"position":[[0,8]]}}}],["anonym",{"_index":333,"t":{"601":{"position":[[24,9]]},"728":{"position":[[24,9]]}}}],["api",{"_index":259,"t":{"471":{"position":[[0,3]]},"558":{"position":[[22,3]]},"560":{"position":[[22,3]]},"600":{"position":[[4,3]]},"661":{"position":[[23,3]]}}}],["appli",{"_index":543,"t":{"816":{"position":[[6,5]]}}}],["appropri",{"_index":343,"t":{"609":{"position":[[97,11]]},"611":{"position":[[73,11]]},"639":{"position":[[70,11]]},"641":{"position":[[73,11]]},"643":{"position":[[72,11]]},"647":{"position":[[60,11]]},"649":{"position":[[79,11]]},"651":{"position":[[87,11]]},"653":{"position":[[59,11]]},"655":{"position":[[56,11]]},"657":{"position":[[71,11]]},"659":{"position":[[44,13]]},"664":{"position":[[71,11]]},"670":{"position":[[76,11]]},"672":{"position":[[56,11]]},"684":{"position":[[68,11]]},"690":{"position":[[78,11]]},"732":{"position":[[58,11]]},"744":{"position":[[80,11]]},"746":{"position":[[87,11]]}}}],["architectur",{"_index":208,"t":{"353":{"position":[[0,12]]}}}],["argument",{"_index":262,"t":{"475":{"position":[[28,9]]},"601":{"position":[[39,8]]},"607":{"position":[[38,8]]},"609":{"position":[[76,9]]},"611":{"position":[[54,8]]},"613":{"position":[[43,8]]},"615":{"position":[[43,8]]},"617":{"position":[[43,8]]},"633":{"position":[[37,8]]},"635":{"position":[[35,8]]},"637":{"position":[[40,8]]},"639":{"position":[[42,8]]},"641":{"position":[[45,8]]},"643":{"position":[[43,8]]},"645":{"position":[[48,8]]},"647":{"position":[[41,8]]},"649":{"position":[[58,9]]},"651":{"position":[[66,9]]},"653":{"position":[[40,8]]},"655":{"position":[[37,8]]},"657":{"position":[[52,8]]},"664":{"position":[[52,8]]},"666":{"position":[[34,8]]},"668":{"position":[[56,8]]},"670":{"position":[[57,8]]},"672":{"position":[[37,8]]},"674":{"position":[[53,8]]},"676":{"position":[[37,8]]},"679":{"position":[[34,8]]},"681":{"position":[[37,8]]},"684":{"position":[[47,9]]},"686":{"position":[[39,8]]},"688":{"position":[[31,8]]},"690":{"position":[[57,9]]},"692":{"position":[[44,8]]},"694":{"position":[[36,8]]},"728":{"position":[[39,8]]},"730":{"position":[[43,8]]},"732":{"position":[[39,8]]},"734":{"position":[[39,8]]},"736":{"position":[[58,8]]},"738":{"position":[[48,8]]},"740":{"position":[[50,8]]},"742":{"position":[[42,8]]},"744":{"position":[[34,8]]},"746":{"position":[[66,9]]},"748":{"position":[[45,8]]},"750":{"position":[[54,8]]}}}],["assign",{"_index":509,"t":{"790":{"position":[[62,8]]}}}],["audit",{"_index":260,"t":{"471":{"position":[[11,5]]},"637":{"position":[[25,5]]},"639":{"position":[[25,5]]},"641":{"position":[[25,5]]},"643":{"position":[[25,5]]},"702":{"position":[[28,5]]},"704":{"position":[[22,5]]}}}],["auth",{"_index":334,"t":{"601":{"position":[[34,4]]},"603":{"position":[[30,4]]},"686":{"position":[[34,4]]},"692":{"position":[[39,4]]},"728":{"position":[[34,4]]}}}],["authent",{"_index":423,"t":{"698":{"position":[[4,14]]},"699":{"position":[[25,14]]}}}],["author",{"_index":5,"t":{"10":{"position":[[12,9]]},"107":{"position":[[12,9]]},"611":{"position":[[44,9]]},"613":{"position":[[24,13]]},"615":{"position":[[24,13]]},"617":{"position":[[24,13]]},"696":{"position":[[37,9]]},"698":{"position":[[23,13]]},"719":{"position":[[34,11]]},"721":{"position":[[41,11]]},"730":{"position":[[24,13]]}}}],["auto",{"_index":199,"t":{"321":{"position":[[0,4]]},"688":{"position":[[22,4]]},"694":{"position":[[27,4]]}}}],["autom",{"_index":166,"t":{"272":{"position":[[0,9]]},"558":{"position":[[103,11]]},"560":{"position":[[86,11]]},"562":{"position":[[111,11]]},"564":{"position":[[94,11]]},"566":{"position":[[102,11]]},"568":{"position":[[85,11]]},"570":{"position":[[97,11]]},"572":{"position":[[80,11]]},"578":{"position":[[90,11]]},"580":{"position":[[73,11]]},"582":{"position":[[86,11]]},"584":{"position":[[69,11]]},"586":{"position":[[90,11]]},"588":{"position":[[73,11]]},"590":{"position":[[99,11]]},"592":{"position":[[82,11]]},"594":{"position":[[87,11]]},"603":{"position":[[61,11]]},"605":{"position":[[58,11]]},"607":{"position":[[62,11]]},"609":{"position":[[109,11]]},"611":{"position":[[85,11]]},"613":{"position":[[78,11]]},"615":{"position":[[66,11]]},"617":{"position":[[66,11]]},"621":{"position":[[71,11]]},"627":{"position":[[70,11]]},"629":{"position":[[74,11]]},"631":{"position":[[71,11]]},"633":{"position":[[62,11]]},"635":{"position":[[60,11]]},"637":{"position":[[56,11]]},"639":{"position":[[82,11]]},"641":{"position":[[85,11]]},"643":{"position":[[84,11]]},"645":{"position":[[72,11]]},"647":{"position":[[72,11]]},"649":{"position":[[91,11]]},"651":{"position":[[99,11]]},"653":{"position":[[71,11]]},"655":{"position":[[68,11]]},"666":{"position":[[59,11]]},"668":{"position":[[80,11]]},"670":{"position":[[88,11]]},"672":{"position":[[68,11]]},"674":{"position":[[77,11]]},"676":{"position":[[66,11]]},"679":{"position":[[59,11]]},"681":{"position":[[66,11]]},"684":{"position":[[80,11]]},"686":{"position":[[63,11]]},"688":{"position":[[59,11]]},"690":{"position":[[90,11]]},"692":{"position":[[68,11]]},"694":{"position":[[64,11]]},"707":{"position":[[90,11]]},"709":{"position":[[73,11]]},"715":{"position":[[100,11]]},"717":{"position":[[83,11]]},"723":{"position":[[105,11]]},"725":{"position":[[89,11]]},"728":{"position":[[64,11]]},"730":{"position":[[78,11]]},"732":{"position":[[70,11]]},"738":{"position":[[72,11]]},"740":{"position":[[74,11]]},"748":{"position":[[74,11]]},"774":{"position":[[54,11]]},"776":{"position":[[90,11]]},"778":{"position":[[83,11]]},"780":{"position":[[87,11]]},"782":{"position":[[73,11]]},"784":{"position":[[48,11]]},"786":{"position":[[71,11]]},"788":{"position":[[67,11]]}}}],["avail",{"_index":66,"t":{"70":{"position":[[5,12]]}}}],["avoid",{"_index":478,"t":{"767":{"position":[[6,5]]}}}],["backup",{"_index":117,"t":{"192":{"position":[[0,6]]},"194":{"position":[[0,6]]},"196":{"position":[[0,6]]}}}],["balanc",{"_index":123,"t":{"202":{"position":[[11,8]]},"204":{"position":[[11,8]]},"407":{"position":[[13,8]]}}}],["baselin",{"_index":239,"t":{"437":{"position":[[24,8]]},"443":{"position":[[0,8]]}}}],["bearer",{"_index":175,"t":{"292":{"position":[[11,6]]}}}],["benchmark",{"_index":290,"t":{"554":{"position":[[15,9]]}}}],["between",{"_index":143,"t":{"238":{"position":[[23,7]]},"812":{"position":[[39,7]]}}}],["binari",{"_index":161,"t":{"262":{"position":[[37,6]]},"278":{"position":[[19,6]]},"549":{"position":[[31,6]]}}}],["bind",{"_index":408,"t":{"676":{"position":[[24,4]]},"681":{"position":[[24,4]]},"769":{"position":[[23,5]]}}}],["bootstrap",{"_index":108,"t":{"177":{"position":[[0,9]]}}}],["boundari",{"_index":537,"t":{"812":{"position":[[28,10]]}}}],["build",{"_index":141,"t":{"232":{"position":[[10,5]]}}}],["ca",{"_index":81,"t":{"107":{"position":[[22,4]]},"109":{"position":[[13,2]]},"111":{"position":[[16,2]]},"113":{"position":[[21,2]]},"653":{"position":[[32,2]]},"672":{"position":[[29,2]]},"732":{"position":[[31,2]]}}}],["cafil",{"_index":387,"t":{"655":{"position":[[30,6]]}}}],["capabl",{"_index":506,"t":{"786":{"position":[[60,10]]},"788":{"position":[[54,12]]},"790":{"position":[[49,12]]}}}],["captur",{"_index":460,"t":{"744":{"position":[[98,7]]}}}],["caveat",{"_index":283,"t":{"532":{"position":[[17,7]]}}}],["cento",{"_index":47,"t":{"45":{"position":[[27,6]]}}}],["cert",{"_index":384,"t":{"651":{"position":[[29,4]]},"684":{"position":[[22,4]]},"686":{"position":[[29,4]]},"690":{"position":[[27,4]]},"692":{"position":[[34,4]]},"746":{"position":[[29,4]]}}}],["certfil",{"_index":382,"t":{"649":{"position":[[30,8]]}}}],["certif",{"_index":3,"t":{"9":{"position":[[0,11]]},"10":{"position":[[0,11],[22,12]]},"12":{"position":[[18,12]]},"103":{"position":[[18,12]]},"105":{"position":[[27,12]]},"107":{"position":[[0,11],[27,12]]},"109":{"position":[[16,12]]},"111":{"position":[[19,12]]},"113":{"position":[[24,12]]},"596":{"position":[[38,11]]},"609":{"position":[[39,11]]},"611":{"position":[[32,11]]},"696":{"position":[[25,11]]},"699":{"position":[[13,11]]},"719":{"position":[[22,11]]},"721":{"position":[[29,11]]},"748":{"position":[[32,12]]}}}],["chain",{"_index":454,"t":{"740":{"position":[[43,6]]}}}],["channel",{"_index":287,"t":{"545":{"position":[[8,8]]}}}],["ci",{"_index":289,"t":{"554":{"position":[[0,3]]}}}],["cidr",{"_index":234,"t":{"423":{"position":[[13,4]]}}}],["cipher",{"_index":394,"t":{"661":{"position":[[73,7]]},"752":{"position":[[70,7]]}}}],["class",{"_index":100,"t":{"151":{"position":[[8,5]]}}}],["cli",{"_index":78,"t":{"100":{"position":[[10,3]]},"161":{"position":[[11,3]]}}}],["client",{"_index":6,"t":{"12":{"position":[[0,6]]},"103":{"position":[[0,6]]},"105":{"position":[[9,6]]},"609":{"position":[[32,6],[65,6]]},"653":{"position":[[25,6]]},"686":{"position":[[22,6]]},"692":{"position":[[27,6]]},"699":{"position":[[6,6]]},"721":{"position":[[22,6]]},"732":{"position":[[24,6]]}}}],["cloud",{"_index":231,"t":{"419":{"position":[[22,5]]}}}],["cluster",{"_index":72,"t":{"82":{"position":[[0,7]]},"136":{"position":[[0,7]]},"182":{"position":[[14,7]]},"222":{"position":[[21,8]]},"314":{"position":[[33,7]]},"363":{"position":[[6,8]]},"397":{"position":[[19,8]]},"447":{"position":[[4,7]]},"455":{"position":[[58,7]]},"530":{"position":[[19,7]]},"755":{"position":[[22,7]]},"769":{"position":[[84,7]]},"772":{"position":[[22,7]]}}}],["clusterrol",{"_index":471,"t":{"759":{"position":[[41,12]]}}}],["cni",{"_index":183,"t":{"306":{"position":[[7,3]]},"798":{"position":[[25,3]]},"799":{"position":[[22,3]]}}}],["commonli",{"_index":94,"t":{"133":{"position":[[0,8]]}}}],["compat",{"_index":144,"t":{"240":{"position":[[4,10]]}}}],["compon",{"_index":102,"t":{"153":{"position":[[11,10]]},"248":{"position":[[21,10]]},"323":{"position":[[9,10]]},"437":{"position":[[0,10]]},"473":{"position":[[29,10]]}}}],["concern",{"_index":429,"t":{"704":{"position":[[55,8]]}}}],["conclus",{"_index":277,"t":{"507":{"position":[[0,10]]}}}],["config",{"_index":169,"t":{"282":{"position":[[9,6]]},"341":{"position":[[0,7]]},"657":{"position":[[45,6]]},"723":{"position":[[32,6]]},"725":{"position":[[33,6]]}}}],["configur",{"_index":9,"t":{"16":{"position":[[0,11]]},"22":{"position":[[0,11]]},"34":{"position":[[18,13]]},"60":{"position":[[0,9]]},"131":{"position":[[9,13]]},"186":{"position":[[19,13]]},"216":{"position":[[13,9]]},"276":{"position":[[0,13]]},"278":{"position":[[0,13]]},"280":{"position":[[0,13]]},"290":{"position":[[15,13]]},"298":{"position":[[38,13]]},"308":{"position":[[30,13]]},"337":{"position":[[11,13]]},"381":{"position":[[0,13]]},"471":{"position":[[17,13]]},"473":{"position":[[0,13]]},"539":{"position":[[0,9]]},"557":{"position":[[23,13]]},"659":{"position":[[58,10]]},"683":{"position":[[12,13]]},"706":{"position":[[16,13]]},"723":{"position":[[39,13]]},"725":{"position":[[40,13]]},"809":{"position":[[6,9]]}}}],["connect",{"_index":451,"t":{"736":{"position":[[34,10]]}}}],["consid",{"_index":527,"t":{"806":{"position":[[6,8]]}}}],["contain",{"_index":14,"t":{"18":{"position":[[20,9]]},"24":{"position":[[7,9]]},"574":{"position":[[22,9]]},"576":{"position":[[23,9]]},"774":{"position":[[43,10]]},"776":{"position":[[32,10]]},"778":{"position":[[32,10]]},"780":{"position":[[32,10]]},"782":{"position":[[32,10]]},"784":{"position":[[37,10]]},"786":{"position":[[32,10]]},"788":{"position":[[32,10]]},"790":{"position":[[33,10]]},"792":{"position":[[53,10]]},"796":{"position":[[33,10]]},"816":{"position":[[45,10]]}}}],["containerd",{"_index":17,"t":{"22":{"position":[[12,10]]}}}],["control",{"_index":148,"t":{"246":{"position":[[15,10]]},"308":{"position":[[0,7]]},"377":{"position":[[10,7]]},"403":{"position":[[16,10]]},"405":{"position":[[15,10]]},"413":{"position":[[0,11]]},"419":{"position":[[28,10]]},"475":{"position":[[0,7]]},"479":{"position":[[0,7]]},"481":{"position":[[0,7]]},"483":{"position":[[0,7]]},"485":{"position":[[0,7]]},"487":{"position":[[0,7]]},"489":{"position":[[0,7]]},"491":{"position":[[0,7]]},"493":{"position":[[0,7]]},"495":{"position":[[0,7]]},"497":{"position":[[0,7]]},"499":{"position":[[0,7]]},"501":{"position":[[0,7]]},"503":{"position":[[0,7]]},"505":{"position":[[0,7]]},"537":{"position":[[27,10]]},"556":{"position":[[0,8]]},"557":{"position":[[4,7]]},"562":{"position":[[22,10]]},"564":{"position":[[22,10]]},"590":{"position":[[23,10]]},"592":{"position":[[23,10]]},"619":{"position":[[33,7]]},"621":{"position":[[33,7]]},"623":{"position":[[33,7]]},"625":{"position":[[33,7]]},"627":{"position":[[33,7]]},"629":{"position":[[33,7]]},"631":{"position":[[33,7]]},"663":{"position":[[4,10]]},"772":{"position":[[61,7]]},"808":{"position":[[25,7]]},"809":{"position":[[68,10]]}}}],["coredn",{"_index":226,"t":{"401":{"position":[[0,7]]}}}],["cover",{"_index":428,"t":{"704":{"position":[[35,6]]}}}],["cpu",{"_index":215,"t":{"365":{"position":[[0,3]]}}}],["creat",{"_index":127,"t":{"210":{"position":[[3,6]]},"258":{"position":[[0,6]]},"415":{"position":[[0,8]]},"702":{"position":[[44,7]]},"761":{"position":[[25,6]]},"812":{"position":[[6,6]]}}}],["credenti",{"_index":401,"t":{"668":{"position":[[44,11]]}}}],["critic",{"_index":92,"t":{"131":{"position":[[0,8]]}}}],["cryptograph",{"_index":393,"t":{"661":{"position":[[59,13]]},"752":{"position":[[56,13]]}}}],["custom",{"_index":75,"t":{"92":{"position":[[0,10]]},"109":{"position":[[6,6]]},"111":{"position":[[9,6]]},"155":{"position":[[0,10]]},"248":{"position":[[0,11]]},"306":{"position":[[0,6]]}}}],["dashboard",{"_index":172,"t":{"288":{"position":[[25,9]]},"290":{"position":[[0,9]]},"294":{"position":[[20,9]]},"296":{"position":[[14,9]]},"298":{"position":[[13,9]]}}}],["data",{"_index":74,"t":{"84":{"position":[[0,4]]},"145":{"position":[[0,4]]},"578":{"position":[[28,4]]},"580":{"position":[[28,4]]}}}],["databas",{"_index":95,"t":{"134":{"position":[[0,8]]},"371":{"position":[[0,8]]}}}],["datastor",{"_index":113,"t":{"186":{"position":[[9,9]]},"188":{"position":[[0,9]]},"194":{"position":[[33,9]]},"196":{"position":[[38,9]]},"210":{"position":[[22,9]]},"455":{"position":[[66,9]]}}}],["db",{"_index":64,"t":{"68":{"position":[[37,2]]}}}],["dedic",{"_index":218,"t":{"375":{"position":[[0,9]]},"377":{"position":[[0,9]]}}}],["default",{"_index":255,"t":{"463":{"position":[[22,8]]},"738":{"position":[[39,8]]},"763":{"position":[[18,7]]},"818":{"position":[[10,7]]}}}],["defin",{"_index":520,"t":{"801":{"position":[[54,7]]}}}],["definit",{"_index":541,"t":{"814":{"position":[[75,11]]}}}],["delet",{"_index":177,"t":{"298":{"position":[[0,8]]}}}],["denyserviceexternalip",{"_index":338,"t":{"605":{"position":[[24,22]]}}}],["deploy",{"_index":158,"t":{"260":{"position":[[9,6]]},"288":{"position":[[0,9]]},"321":{"position":[[5,9]]},"419":{"position":[[0,9]]}}}],["deprec",{"_index":77,"t":{"96":{"position":[[0,10]]},"159":{"position":[[0,10]]}}}],["differ",{"_index":142,"t":{"238":{"position":[[12,10]]},"240":{"position":[[19,9]]},"515":{"position":[[7,9]]}}}],["directori",{"_index":160,"t":{"262":{"position":[[19,9]]},"578":{"position":[[33,9]]},"580":{"position":[[33,9]]},"594":{"position":[[38,9]]}}}],["disabl",{"_index":202,"t":{"327":{"position":[[0,9]]},"329":{"position":[[12,7]]},"417":{"position":[[0,9]]}}}],["disable/en",{"_index":90,"t":{"125":{"position":[[19,14]]}}}],["disk",{"_index":217,"t":{"367":{"position":[[0,5]]}}}],["distribut",{"_index":191,"t":{"314":{"position":[[0,11]]}}}],["docker",{"_index":13,"t":{"18":{"position":[[6,6]]},"51":{"position":[[15,6]]},"236":{"position":[[17,7]]},"391":{"position":[[5,6]]}}}],["docker/default",{"_index":540,"t":{"814":{"position":[[48,14]]}}}],["driver",{"_index":247,"t":{"453":{"position":[[29,7]]}}}],["dual",{"_index":187,"t":{"310":{"position":[[0,4]]}}}],["egress",{"_index":185,"t":{"308":{"position":[[14,6]]}}}],["embed",{"_index":63,"t":{"68":{"position":[[28,8]]},"196":{"position":[[24,8]]},"316":{"position":[[0,8]]}}}],["enabl",{"_index":52,"t":{"55":{"position":[[0,8]]},"57":{"position":[[0,8]]}}}],["encrypt",{"_index":88,"t":{"121":{"position":[[8,10]]},"123":{"position":[[0,10]]},"125":{"position":[[8,10]]},"127":{"position":[[8,10]]},"147":{"position":[[8,10]]},"511":{"position":[[8,10]]},"657":{"position":[[25,10]]},"659":{"position":[[19,10]]}}}],["endpoint",{"_index":115,"t":{"188":{"position":[[10,8]]}}}],["enforc",{"_index":53,"t":{"55":{"position":[[17,11]]}}}],["ensur",{"_index":252,"t":{"463":{"position":[[0,6]]},"558":{"position":[[6,6]]},"560":{"position":[[6,6]]},"562":{"position":[[6,6]]},"564":{"position":[[6,6]]},"566":{"position":[[6,6]]},"568":{"position":[[6,6]]},"570":{"position":[[6,6]]},"572":{"position":[[6,6]]},"574":{"position":[[6,6]]},"576":{"position":[[7,6]]},"578":{"position":[[7,6]]},"580":{"position":[[7,6]]},"582":{"position":[[7,6]]},"584":{"position":[[7,6]]},"586":{"position":[[7,6]]},"588":{"position":[[7,6]]},"590":{"position":[[7,6]]},"592":{"position":[[7,6]]},"594":{"position":[[7,6]]},"596":{"position":[[7,6]]},"598":{"position":[[7,6]]},"601":{"position":[[6,6]]},"603":{"position":[[6,6]]},"605":{"position":[[6,6]]},"607":{"position":[[6,6]]},"609":{"position":[[6,6]]},"611":{"position":[[6,6]]},"613":{"position":[[6,6]]},"615":{"position":[[6,6]]},"617":{"position":[[6,6]]},"619":{"position":[[7,6]]},"621":{"position":[[7,6]]},"623":{"position":[[7,6]]},"625":{"position":[[7,6]]},"627":{"position":[[7,6]]},"629":{"position":[[7,6]]},"631":{"position":[[7,6]]},"633":{"position":[[7,6]]},"635":{"position":[[7,6]]},"637":{"position":[[7,6]]},"639":{"position":[[7,6]]},"641":{"position":[[7,6]]},"643":{"position":[[7,6]]},"645":{"position":[[7,6]]},"647":{"position":[[7,6]]},"649":{"position":[[7,6]]},"651":{"position":[[7,6]]},"653":{"position":[[7,6]]},"655":{"position":[[7,6]]},"657":{"position":[[7,6]]},"659":{"position":[[7,6]]},"661":{"position":[[7,6]]},"664":{"position":[[6,6]]},"666":{"position":[[6,6]]},"668":{"position":[[6,6]]},"670":{"position":[[6,6]]},"672":{"position":[[6,6]]},"674":{"position":[[6,6]]},"676":{"position":[[6,6]]},"679":{"position":[[6,6]]},"681":{"position":[[6,6]]},"684":{"position":[[4,6]]},"686":{"position":[[4,6]]},"688":{"position":[[4,6]]},"690":{"position":[[4,6]]},"692":{"position":[[4,6]]},"694":{"position":[[4,6]]},"696":{"position":[[4,6]]},"702":{"position":[[6,6]]},"704":{"position":[[6,6]]},"707":{"position":[[6,6]]},"709":{"position":[[6,6]]},"711":{"position":[[38,6]]},"713":{"position":[[38,6]]},"715":{"position":[[6,6]]},"717":{"position":[[6,6]]},"719":{"position":[[6,6]]},"721":{"position":[[6,6]]},"723":{"position":[[6,6]]},"725":{"position":[[7,6]]},"728":{"position":[[6,6]]},"730":{"position":[[6,6]]},"732":{"position":[[6,6]]},"734":{"position":[[6,6]]},"736":{"position":[[6,6]]},"738":{"position":[[6,6]]},"740":{"position":[[6,6]]},"742":{"position":[[6,6]]},"744":{"position":[[6,6],[72,7]]},"746":{"position":[[7,6]]},"748":{"position":[[7,6]]},"752":{"position":[[7,6]]},"755":{"position":[[6,6]]},"763":{"position":[[6,6]]},"765":{"position":[[6,6]]},"772":{"position":[[6,6]]},"799":{"position":[[6,6]]},"801":{"position":[[6,6]]},"814":{"position":[[6,6]]}}}],["enterpris",{"_index":44,"t":{"45":{"position":[[8,10]]}}}],["environ",{"_index":164,"t":{"267":{"position":[[32,11]]},"441":{"position":[[0,11]]},"804":{"position":[[52,11]]}}}],["escal",{"_index":484,"t":{"769":{"position":[[45,8]]}}}],["estargz",{"_index":56,"t":{"57":{"position":[[25,7]]},"58":{"position":[[24,8]]},"60":{"position":[[34,7]]}}}],["etcd",{"_index":120,"t":{"196":{"position":[[33,4]]},"375":{"position":[[10,4]]},"570":{"position":[[22,4]]},"572":{"position":[[22,4]]},"578":{"position":[[23,4]]},"580":{"position":[[23,4]]},"649":{"position":[[25,4],[45,4]]},"655":{"position":[[25,4]]},"683":{"position":[[2,4]]},"696":{"position":[[59,4]]}}}],["etcd:etcd",{"_index":316,"t":{"580":{"position":[[63,9]]}}}],["etcdctl",{"_index":16,"t":{"20":{"position":[[6,7]]}}}],["event",{"_index":458,"t":{"744":{"position":[[24,5],[92,5]]}}}],["eventratelimit",{"_index":352,"t":{"619":{"position":[[48,14]]}}}],["execut",{"_index":261,"t":{"475":{"position":[[14,9]]}}}],["exist",{"_index":134,"t":{"222":{"position":[[0,8]]},"379":{"position":[[16,8]]},"711":{"position":[[31,6]]},"713":{"position":[[31,6]]}}}],["experiment",{"_index":22,"t":{"26":{"position":[[26,14]]},"28":{"position":[[25,14]]},"57":{"position":[[33,14]]},"94":{"position":[[0,12]]},"157":{"position":[[0,12]]},"318":{"position":[[44,14]]},"423":{"position":[[18,14]]}}}],["extens",{"_index":529,"t":{"808":{"position":[[4,10]]}}}],["extern",{"_index":112,"t":{"186":{"position":[[0,8]]},"194":{"position":[[24,8]]},"210":{"position":[[13,8]]},"419":{"position":[[13,8]]},"806":{"position":[[15,8]]}}}],["fals",{"_index":335,"t":{"601":{"position":[[58,5]]},"635":{"position":[[54,5]]},"666":{"position":[[53,5]]},"679":{"position":[[53,5]]},"728":{"position":[[58,5]]},"748":{"position":[[68,5]]}}}],["file",{"_index":167,"t":{"280":{"position":[[14,4]]},"282":{"position":[[16,5]]},"331":{"position":[[12,5]]},"337":{"position":[[25,4]]},"381":{"position":[[14,4]]},"557":{"position":[[37,5]]},"558":{"position":[[51,4]]},"560":{"position":[[51,4]]},"562":{"position":[[59,4]]},"564":{"position":[[59,4]]},"566":{"position":[[50,4]]},"568":{"position":[[50,4]]},"570":{"position":[[45,4]]},"572":{"position":[[45,4]]},"574":{"position":[[50,4]]},"576":{"position":[[51,4]]},"582":{"position":[[34,4]]},"584":{"position":[[34,4]]},"586":{"position":[[38,4]]},"588":{"position":[[38,4]]},"590":{"position":[[47,4]]},"592":{"position":[[47,4]]},"594":{"position":[[52,4]]},"596":{"position":[[50,4]]},"598":{"position":[[42,4]]},"603":{"position":[[35,4]]},"651":{"position":[[34,4],[61,4]]},"653":{"position":[[35,4]]},"670":{"position":[[52,4]]},"672":{"position":[[32,4]]},"684":{"position":[[27,4],[42,4]]},"690":{"position":[[32,4],[52,4]]},"706":{"position":[[30,5]]},"707":{"position":[[38,4]]},"709":{"position":[[38,4]]},"711":{"position":[[26,4]]},"713":{"position":[[26,4]]},"715":{"position":[[48,4]]},"717":{"position":[[48,4]]},"719":{"position":[[46,4]]},"721":{"position":[[53,4]]},"723":{"position":[[53,4]]},"725":{"position":[[54,4]]},"732":{"position":[[34,4]]},"746":{"position":[[34,4],[61,4]]},"804":{"position":[[30,5]]}}}],["fix",{"_index":67,"t":{"72":{"position":[[0,5]]},"216":{"position":[[25,5]]}}}],["flag",{"_index":76,"t":{"92":{"position":[[11,5]]},"155":{"position":[[11,5]]},"329":{"position":[[20,4]]}}}],["flannel",{"_index":179,"t":{"302":{"position":[[0,7]]}}}],["format",{"_index":104,"t":{"165":{"position":[[6,6]]},"188":{"position":[[19,6]]}}}],["function",{"_index":116,"t":{"188":{"position":[[30,13]]}}}],["gap",{"_index":163,"t":{"267":{"position":[[25,6]]}}}],["gc",{"_index":397,"t":{"664":{"position":[[39,2]]}}}],["gener",{"_index":534,"t":{"811":{"position":[[4,7]]}}}],["group",{"_index":480,"t":{"767":{"position":[[34,5]]}}}],["harden",{"_index":223,"t":{"397":{"position":[[10,8]]}}}],["hardwar",{"_index":211,"t":{"357":{"position":[[0,8]]}}}],["hat",{"_index":43,"t":{"45":{"position":[[4,3]]}}}],["have",{"_index":146,"t":{"242":{"position":[[4,6]]}}}],["helm",{"_index":147,"t":{"246":{"position":[[10,4]]},"250":{"position":[[15,4]]},"333":{"position":[[0,4]]}}}],["helmchartconfig",{"_index":150,"t":{"248":{"position":[[37,15]]}}}],["help",{"_index":79,"t":{"100":{"position":[[14,4]]},"161":{"position":[[15,4]]},"242":{"position":[[37,5]]}}}],["high",{"_index":65,"t":{"70":{"position":[[0,4]]}}}],["host",{"_index":250,"t":{"461":{"position":[[0,4]]},"776":{"position":[[64,4]]},"778":{"position":[[64,4]]},"780":{"position":[[64,4]]}}}],["hostnam",{"_index":232,"t":{"421":{"position":[[16,8]]},"742":{"position":[[24,8]]}}}],["hostpath",{"_index":513,"t":{"794":{"position":[[33,8]]}}}],["hostport",{"_index":516,"t":{"796":{"position":[[54,9]]}}}],["hostprocess",{"_index":511,"t":{"792":{"position":[[41,11]]}}}],["http",{"_index":10,"t":{"16":{"position":[[15,4]]},"607":{"position":[[32,5]]}}}],["hybrid",{"_index":192,"t":{"314":{"position":[[12,6]]}}}],["i'm",{"_index":145,"t":{"242":{"position":[[0,3]]}}}],["id",{"_index":496,"t":{"776":{"position":[[77,2]]}}}],["idl",{"_index":452,"t":{"736":{"position":[[45,4]]}}}],["imag",{"_index":159,"t":{"260":{"position":[[16,6]]},"262":{"position":[[12,6]]},"347":{"position":[[7,6]]},"809":{"position":[[16,5]]}}}],["imagepolicywebhook",{"_index":532,"t":{"809":{"position":[[39,18]]}}}],["imperson",{"_index":483,"t":{"769":{"position":[[29,11]]}}}],["inbound",{"_index":212,"t":{"361":{"position":[[0,7]]}}}],["includ",{"_index":238,"t":{"437":{"position":[[11,8]]},"615":{"position":[[52,8]]},"617":{"position":[[52,8]]}}}],["ingress",{"_index":137,"t":{"228":{"position":[[21,7]]},"403":{"position":[[8,7]]}}}],["instal",{"_index":34,"t":{"40":{"position":[[30,12]]},"208":{"position":[[0,12]]},"264":{"position":[[0,7]]},"267":{"position":[[0,10]]},"270":{"position":[[0,7]]},"276":{"position":[[19,7]]},"427":{"position":[[0,7]]},"537":{"position":[[0,7]]},"547":{"position":[[22,12]]}}}],["instead",{"_index":138,"t":{"228":{"position":[[29,7]]}}}],["integr",{"_index":195,"t":{"318":{"position":[[0,11]]}}}],["interf",{"_index":249,"t":{"455":{"position":[[37,11]]}}}],["interfac",{"_index":311,"t":{"574":{"position":[[40,9]]},"576":{"position":[[41,9]]}}}],["ipc",{"_index":499,"t":{"778":{"position":[[69,3]]}}}],["ipsec",{"_index":181,"t":{"304":{"position":[[28,5]]}}}],["iptabl",{"_index":40,"t":{"43":{"position":[[4,8]]},"393":{"position":[[0,8]]},"740":{"position":[[29,8]]}}}],["ipv4",{"_index":189,"t":{"310":{"position":[[11,5]]}}}],["ipv6",{"_index":190,"t":{"310":{"position":[[19,5]]},"312":{"position":[[13,4]]}}}],["issu",{"_index":25,"t":{"30":{"position":[[6,6]]},"242":{"position":[[14,6]]},"477":{"position":[[6,6]]}}}],["issuer",{"_index":85,"t":{"115":{"position":[[16,6]]}}}],["join",{"_index":131,"t":{"214":{"position":[[13,4]]},"218":{"position":[[13,4]]}}}],["k3",{"_index":0,"t":{"3":{"position":[[8,4]]},"51":{"position":[[8,3]]},"60":{"position":[[10,3]]},"70":{"position":[[18,3]]},"100":{"position":[[0,3]]},"161":{"position":[[0,3]]},"226":{"position":[[3,3]]},"230":{"position":[[5,3]]},"234":{"position":[[14,3]]},"236":{"position":[[10,3]]},"238":{"position":[[31,3]]},"240":{"position":[[41,4]]},"262":{"position":[[33,3]]},"264":{"position":[[8,3]]},"267":{"position":[[11,3]]},"316":{"position":[[9,3]]},"361":{"position":[[18,3]]},"445":{"position":[[0,3]]},"447":{"position":[[0,3]]},"449":{"position":[[0,3]]},"515":{"position":[[23,3]]},"530":{"position":[[15,3]]},"547":{"position":[[8,3]]},"549":{"position":[[17,3]]},"551":{"position":[[11,3]]},"554":{"position":[[33,3]]}}}],["kernel",{"_index":254,"t":{"463":{"position":[[15,6]]},"738":{"position":[[32,6]]}}}],["key",{"_index":86,"t":{"115":{"position":[[23,3]]},"123":{"position":[[11,3]]},"598":{"position":[[38,3]]},"609":{"position":[[72,3]]},"651":{"position":[[57,3]]},"670":{"position":[[48,3]]},"684":{"position":[[38,3]]},"690":{"position":[[48,3]]},"704":{"position":[[42,3]]},"746":{"position":[[57,3]]}}}],["keyfil",{"_index":383,"t":{"649":{"position":[[50,7]]}}}],["known",{"_index":24,"t":{"30":{"position":[[0,5]]},"477":{"position":[[0,5]]}}}],["kubeconfig",{"_index":97,"t":{"138":{"position":[[6,10]]},"711":{"position":[[15,10]]},"713":{"position":[[15,10]]},"715":{"position":[[24,10]]},"717":{"position":[[24,10]]}}}],["kubectl",{"_index":111,"t":{"182":{"position":[[40,7]]}}}],["kubelet",{"_index":340,"t":{"607":{"position":[[24,7]]},"609":{"position":[[24,7],[57,7]]},"611":{"position":[[24,7]]},"707":{"position":[[22,7]]},"709":{"position":[[22,7]]},"723":{"position":[[22,7]]},"725":{"position":[[23,7]]},"727":{"position":[[4,7]]},"752":{"position":[[23,7]]}}}],["kubelet.conf",{"_index":437,"t":{"715":{"position":[[35,12]]},"717":{"position":[[35,12]]}}}],["kubernet",{"_index":101,"t":{"153":{"position":[[0,10]]},"155":{"position":[[21,10]]},"226":{"position":[[34,11]]},"288":{"position":[[14,10]]},"465":{"position":[[0,10]]},"473":{"position":[[18,10]]},"554":{"position":[[4,10],[42,10]]},"594":{"position":[[23,10]]},"596":{"position":[[23,10]]},"598":{"position":[[23,10]]},"769":{"position":[[73,10]]}}}],["label",{"_index":31,"t":{"38":{"position":[[5,6]]},"98":{"position":[[5,6]]}}}],["larg",{"_index":214,"t":{"363":{"position":[[0,5]]}}}],["launch",{"_index":129,"t":{"212":{"position":[[3,6]]}}}],["lazi",{"_index":54,"t":{"57":{"position":[[9,4]]},"58":{"position":[[7,4]]},"60":{"position":[[18,4]]}}}],["level",{"_index":251,"t":{"461":{"position":[[5,5]]},"744":{"position":[[60,5]]}}}],["limit",{"_index":482,"t":{"769":{"position":[[6,5]]}}}],["linux",{"_index":45,"t":{"45":{"position":[[19,5]]}}}],["listen",{"_index":98,"t":{"143":{"position":[[0,9]]}}}],["load",{"_index":122,"t":{"202":{"position":[[6,4]]},"204":{"position":[[6,4]]},"407":{"position":[[8,4]]}}}],["local",{"_index":176,"t":{"294":{"position":[[0,5]]},"517":{"position":[[15,5]]}}}],["log",{"_index":57,"t":{"62":{"position":[[11,7]]},"64":{"position":[[26,7]]},"80":{"position":[[0,7]]},"141":{"position":[[0,7]]},"234":{"position":[[18,5]]},"637":{"position":[[31,3]]},"639":{"position":[[31,3]]},"641":{"position":[[31,3]]},"643":{"position":[[31,3]]},"701":{"position":[[4,7]]}}}],["longhorn",{"_index":281,"t":{"523":{"position":[[11,8]]}}}],["lookup",{"_index":379,"t":{"645":{"position":[[41,6]]}}}],["make",{"_index":391,"t":{"661":{"position":[[39,5]]},"740":{"position":[[24,4]]},"752":{"position":[[36,5]]}}}],["manag",{"_index":4,"t":{"9":{"position":[[12,10]]},"14":{"position":[[6,10]]},"419":{"position":[[39,7]]},"562":{"position":[[33,7]]},"564":{"position":[[33,7]]},"663":{"position":[[15,7]]},"803":{"position":[[12,10]]}}}],["manager.conf",{"_index":325,"t":{"590":{"position":[[34,12]]},"592":{"position":[[34,12]]}}}],["manifest",{"_index":200,"t":{"321":{"position":[[15,9]]},"327":{"position":[[10,9]]}}}],["manual",{"_index":157,"t":{"260":{"position":[[0,8]]},"549":{"position":[[0,8]]},"574":{"position":[[102,8]]},"576":{"position":[[86,8]]},"596":{"position":[[102,8]]},"598":{"position":[[74,8]]},"601":{"position":[[64,8]]},"619":{"position":[[70,8]]},"623":{"position":[[72,8]]},"625":{"position":[[108,8]]},"657":{"position":[[83,8]]},"659":{"position":[[69,8]]},"661":{"position":[[81,8]]},"664":{"position":[[83,8]]},"696":{"position":[[64,8]]},"699":{"position":[[69,8]]},"702":{"position":[[52,8]]},"704":{"position":[[64,8]]},"711":{"position":[[92,8]]},"713":{"position":[[75,8]]},"719":{"position":[[98,8]]},"721":{"position":[[88,8]]},"734":{"position":[[60,8]]},"736":{"position":[[83,8]]},"742":{"position":[[62,8]]},"744":{"position":[[106,8]]},"746":{"position":[[99,8]]},"750":{"position":[[78,8]]},"752":{"position":[[78,8]]},"755":{"position":[[69,8]]},"757":{"position":[[33,8]]},"759":{"position":[[54,8]]},"761":{"position":[[37,8]]},"763":{"position":[[66,8]]},"765":{"position":[[74,8]]},"767":{"position":[[40,8]]},"769":{"position":[[92,8]]},"772":{"position":[[88,8]]},"790":{"position":[[71,8]]},"792":{"position":[[64,8]]},"794":{"position":[[50,8]]},"796":{"position":[[64,8]]},"799":{"position":[[58,8]]},"801":{"position":[[62,8]]},"804":{"position":[[74,8]]},"806":{"position":[[39,8]]},"809":{"position":[[79,8]]},"812":{"position":[[74,8]]},"814":{"position":[[87,8]]},"816":{"position":[[56,8]]},"818":{"position":[[47,8]]}}}],["maxag",{"_index":372,"t":{"639":{"position":[[35,6]]}}}],["maxbackup",{"_index":375,"t":{"641":{"position":[[35,9]]}}}],["maxsiz",{"_index":377,"t":{"643":{"position":[[35,7]]}}}],["measur",{"_index":240,"t":{"437":{"position":[[33,12]]}}}],["mechan",{"_index":489,"t":{"772":{"position":[[69,9]]}}}],["memori",{"_index":216,"t":{"365":{"position":[[8,6]]}}}],["method",{"_index":155,"t":{"256":{"position":[[17,6]]},"260":{"position":[[23,6]]},"270":{"position":[[15,6]]},"272":{"position":[[19,6]]}}}],["methodolog",{"_index":241,"t":{"439":{"position":[[0,11]]}}}],["migrat",{"_index":151,"t":{"250":{"position":[[0,9]]},"304":{"position":[[0,9]]}}}],["minim",{"_index":426,"t":{"702":{"position":[[20,7]]},"757":{"position":[[6,8]]},"759":{"position":[[6,8]]},"761":{"position":[[6,8]]},"774":{"position":[[6,8]]},"776":{"position":[[6,8]]},"778":{"position":[[6,8]]},"780":{"position":[[6,8]]},"782":{"position":[[6,8]]},"784":{"position":[[6,8]]},"786":{"position":[[6,8]]},"788":{"position":[[6,8]]},"790":{"position":[[7,8]]},"792":{"position":[[7,8]]},"794":{"position":[[7,8]]},"796":{"position":[[7,8]]}}}],["mirror",{"_index":204,"t":{"339":{"position":[[0,7]]}}}],["mode",{"_index":26,"t":{"30":{"position":[[27,4]]},"395":{"position":[[9,4]]},"613":{"position":[[38,4]]},"615":{"position":[[38,4]]},"617":{"position":[[38,4]]},"730":{"position":[[38,4]]}}}],["more",{"_index":298,"t":{"558":{"position":[[86,4]]},"562":{"position":[[94,4]]},"566":{"position":[[85,4]]},"570":{"position":[[80,4]]},"574":{"position":[[85,4]]},"578":{"position":[[73,4]]},"582":{"position":[[69,4]]},"586":{"position":[[73,4]]},"590":{"position":[[82,4]]},"596":{"position":[[85,4]]},"707":{"position":[[73,4]]},"711":{"position":[[75,4]]},"715":{"position":[[83,4]]},"719":{"position":[[81,4]]},"723":{"position":[[88,4]]}}}],["mount",{"_index":475,"t":{"765":{"position":[[50,7]]}}}],["multicloud",{"_index":193,"t":{"314":{"position":[[22,10]]},"316":{"position":[[13,10]]}}}],["multiclust",{"_index":233,"t":{"423":{"position":[[0,12]]}}}],["multipl",{"_index":168,"t":{"282":{"position":[[0,8]]}}}],["name",{"_index":2,"t":{"5":{"position":[[16,5]]}}}],["namespac",{"_index":497,"t":{"776":{"position":[[80,9]]},"778":{"position":[[73,9]]},"780":{"position":[[77,9]]},"801":{"position":[[22,10]]},"812":{"position":[[63,10]]},"818":{"position":[[18,9]]}}}],["namespacelifecycl",{"_index":362,"t":{"629":{"position":[[48,18]]}}}],["nativ",{"_index":182,"t":{"304":{"position":[[47,6]]}}}],["necessari",{"_index":476,"t":{"765":{"position":[[64,9]]}}}],["net_raw",{"_index":505,"t":{"786":{"position":[[52,7]]}}}],["network",{"_index":59,"t":{"64":{"position":[[11,7]]},"90":{"position":[[0,10]]},"149":{"position":[[0,10]]},"310":{"position":[[25,10]]},"312":{"position":[[18,10]]},"359":{"position":[[0,10]]},"369":{"position":[[0,7]]},"405":{"position":[[0,7]]},"574":{"position":[[32,7]]},"576":{"position":[[33,7]]},"780":{"position":[[69,7]]},"798":{"position":[[4,7]]}}}],["networkpolici",{"_index":258,"t":{"469":{"position":[[0,15]]},"799":{"position":[[42,15]]},"801":{"position":[[38,15]]}}}],["nginx",{"_index":124,"t":{"204":{"position":[[0,5]]}}}],["node",{"_index":30,"t":{"38":{"position":[[0,4]]},"72":{"position":[[37,5]]},"74":{"position":[[10,4]]},"86":{"position":[[0,4]]},"98":{"position":[[0,4]]},"212":{"position":[[17,5]]},"214":{"position":[[36,5]]},"218":{"position":[[24,5]]},"222":{"position":[[16,4]]},"361":{"position":[[29,5]]},"375":{"position":[[15,5]]},"377":{"position":[[24,5]]},"413":{"position":[[22,4]]},"415":{"position":[[19,4]]},"421":{"position":[[0,5]]},"557":{"position":[[18,4]]},"615":{"position":[[61,4]]},"683":{"position":[[7,4]]},"706":{"position":[[11,4]]}}}],["noderestrict",{"_index":363,"t":{"631":{"position":[[48,15]]}}}],["nvidia",{"_index":18,"t":{"24":{"position":[[0,6]]}}}],["obtain",{"_index":174,"t":{"292":{"position":[[0,6]]}}}],["old",{"_index":39,"t":{"43":{"position":[[0,3]]}}}],["on",{"_index":488,"t":{"772":{"position":[[43,3]]}}}],["oper",{"_index":209,"t":{"355":{"position":[[0,9]]}}}],["option",{"_index":73,"t":{"82":{"position":[[8,7]]},"133":{"position":[[14,7]]},"136":{"position":[[8,7]]},"138":{"position":[[17,7]]},"140":{"position":[[9,7]]},"157":{"position":[[13,7]]},"159":{"position":[[11,7]]},"214":{"position":[[3,9]]},"216":{"position":[[3,9]]},"218":{"position":[[3,9]]},"302":{"position":[[8,7]]}}}],["os",{"_index":37,"t":{"42":{"position":[[11,2]]}}}],["outlin",{"_index":125,"t":{"208":{"position":[[13,7]]}}}],["outsid",{"_index":110,"t":{"182":{"position":[[27,7]]}}}],["over",{"_index":524,"t":{"804":{"position":[[36,4]]}}}],["overrid",{"_index":456,"t":{"742":{"position":[[33,8]]}}}],["overview",{"_index":284,"t":{"535":{"position":[[0,8]]}}}],["ownership",{"_index":301,"t":{"560":{"position":[[56,9]]},"564":{"position":[[64,9]]},"568":{"position":[[55,9]]},"572":{"position":[[50,9]]},"576":{"position":[[56,9]]},"580":{"position":[[43,9]]},"584":{"position":[[39,9]]},"588":{"position":[[43,9]]},"592":{"position":[[52,9]]},"594":{"position":[[57,9]]},"709":{"position":[[43,9]]},"713":{"position":[[45,9]]},"717":{"position":[[53,9]]},"721":{"position":[[58,9]]},"725":{"position":[[59,9]]}}}],["packag",{"_index":149,"t":{"248":{"position":[[12,8]]},"323":{"position":[[0,8]]}}}],["paramet",{"_index":114,"t":{"186":{"position":[[33,10]]},"603":{"position":[[40,9]]}}}],["path",{"_index":370,"t":{"637":{"position":[[35,4]]}}}],["peer",{"_index":417,"t":{"690":{"position":[[22,4],[43,4]]},"692":{"position":[[22,4]]},"694":{"position":[[22,4]]}}}],["permiss",{"_index":296,"t":{"558":{"position":[[56,11]]},"562":{"position":[[64,11]]},"566":{"position":[[55,11]]},"570":{"position":[[50,11]]},"574":{"position":[[55,11]]},"578":{"position":[[43,11]]},"582":{"position":[[39,11]]},"586":{"position":[[43,11]]},"590":{"position":[[52,11]]},"596":{"position":[[55,11]]},"598":{"position":[[47,11]]},"707":{"position":[[43,11]]},"711":{"position":[[45,11]]},"715":{"position":[[53,11]]},"719":{"position":[[51,11]]},"723":{"position":[[62,11]]},"769":{"position":[[54,11]]}}}],["pi",{"_index":50,"t":{"49":{"position":[[10,2]]}}}],["pki",{"_index":328,"t":{"594":{"position":[[34,3]]},"596":{"position":[[34,3]]},"598":{"position":[[34,3]]}}}],["place",{"_index":490,"t":{"772":{"position":[[82,5]]}}}],["plan",{"_index":285,"t":{"539":{"position":[[10,5]]}}}],["plane",{"_index":184,"t":{"308":{"position":[[8,5]]},"377":{"position":[[18,5]]},"475":{"position":[[8,5]]},"557":{"position":[[12,5]]}}}],["plugin",{"_index":351,"t":{"619":{"position":[[41,6]]},"621":{"position":[[41,6]]},"623":{"position":[[41,6]]},"625":{"position":[[41,6]]},"627":{"position":[[41,6]]},"629":{"position":[[41,6]]},"631":{"position":[[41,6]]}}}],["pod",{"_index":257,"t":{"467":{"position":[[0,3]]},"558":{"position":[[33,3]]},"560":{"position":[[33,3]]},"562":{"position":[[41,3]]},"564":{"position":[[41,3]]},"566":{"position":[[32,3]]},"568":{"position":[[32,3]]},"570":{"position":[[27,3]]},"572":{"position":[[27,3]]},"664":{"position":[[35,3]]},"761":{"position":[[32,4]]},"771":{"position":[[4,3]]},"814":{"position":[[71,3]]},"816":{"position":[[36,4]]}}}],["pod.yaml",{"_index":280,"t":{"521":{"position":[[0,8]]},"527":{"position":[[0,8]]}}}],["podsecuritypolici",{"_index":359,"t":{"625":{"position":[[78,17]]}}}],["polici",{"_index":60,"t":{"64":{"position":[[19,6]]},"405":{"position":[[8,6]]},"702":{"position":[[34,6]]},"704":{"position":[[28,6]]},"772":{"position":[[54,6]]},"798":{"position":[[12,8]]},"811":{"position":[[12,8]]}}}],["pool",{"_index":230,"t":{"415":{"position":[[24,5]]}}}],["port",{"_index":365,"t":{"633":{"position":[[32,4]]},"734":{"position":[[34,4]]}}}],["prefer",{"_index":523,"t":{"804":{"position":[[6,6]]}}}],["prepar",{"_index":38,"t":{"42":{"position":[[14,12]]},"262":{"position":[[0,7]]}}}],["prerequisit",{"_index":121,"t":{"200":{"position":[[0,13]]},"265":{"position":[[0,13]]},"351":{"position":[[0,13]]}}}],["prevent",{"_index":248,"t":{"455":{"position":[[0,10]]}}}],["primari",{"_index":245,"t":{"453":{"position":[[0,7]]}}}],["privat",{"_index":153,"t":{"256":{"position":[[0,7]]},"347":{"position":[[21,7]]},"651":{"position":[[49,7]]},"670":{"position":[[40,7]]},"746":{"position":[[49,7]]}}}],["privileg",{"_index":492,"t":{"774":{"position":[[32,10]]}}}],["process",{"_index":103,"t":{"155":{"position":[[32,9]]},"776":{"position":[[69,7]]}}}],["profil",{"_index":368,"t":{"635":{"position":[[25,9]]},"666":{"position":[[24,9]]},"679":{"position":[[24,9]]},"814":{"position":[[30,7]]}}}],["protect",{"_index":253,"t":{"463":{"position":[[7,7]]},"738":{"position":[[24,7]]}}}],["proven",{"_index":531,"t":{"809":{"position":[[22,10]]}}}],["provid",{"_index":198,"t":{"318":{"position":[[35,8]]},"517":{"position":[[29,8]]},"657":{"position":[[36,8]]},"659":{"position":[[30,9]]}}}],["proxi",{"_index":11,"t":{"16":{"position":[[20,5]]},"711":{"position":[[9,5]]},"713":{"position":[[9,5]]}}}],["pull",{"_index":55,"t":{"57":{"position":[[14,7]]},"58":{"position":[[12,7]]},"60":{"position":[[23,7]]}}}],["put",{"_index":170,"t":{"284":{"position":[[0,7]]}}}],["pvc.yaml",{"_index":279,"t":{"519":{"position":[[0,8]]},"525":{"position":[[0,8]]}}}],["qp",{"_index":459,"t":{"744":{"position":[[30,3]]}}}],["raspberri",{"_index":49,"t":{"49":{"position":[[0,9]]}}}],["rbac",{"_index":173,"t":{"290":{"position":[[10,4]]},"617":{"position":[[61,4]]},"754":{"position":[[4,4]]}}}],["read",{"_index":448,"t":{"734":{"position":[[24,4]]}}}],["red",{"_index":42,"t":{"45":{"position":[[0,3]]}}}],["registr",{"_index":68,"t":{"72":{"position":[[6,12]]},"74":{"position":[[15,12]]},"216":{"position":[[31,12]]}}}],["registri",{"_index":154,"t":{"256":{"position":[[8,8]]},"258":{"position":[[11,8]]},"337":{"position":[[0,10]]},"347":{"position":[[29,8]]}}}],["releas",{"_index":286,"t":{"545":{"position":[[0,7]]}}}],["replac",{"_index":136,"t":{"226":{"position":[[18,11]]}}}],["request",{"_index":380,"t":{"647":{"position":[[25,7]]}}}],["requir",{"_index":242,"t":{"443":{"position":[[18,12]]},"461":{"position":[[11,12]]},"465":{"position":[[19,12]]},"755":{"position":[[60,8]]}}}],["resourc",{"_index":236,"t":{"435":{"position":[[9,8]]},"443":{"position":[[9,8]]},"453":{"position":[[8,8]]},"812":{"position":[[47,9]]}}}],["restart",{"_index":288,"t":{"551":{"position":[[0,10]]}}}],["restor",{"_index":118,"t":{"192":{"position":[[11,7]]},"194":{"position":[[11,7]]},"196":{"position":[[11,7]]}}}],["restrict",{"_index":299,"t":{"558":{"position":[[91,11]]},"562":{"position":[[99,11]]},"566":{"position":[[90,11]]},"570":{"position":[[85,11]]},"574":{"position":[[90,11]]},"578":{"position":[[78,11]]},"582":{"position":[[74,11]]},"586":{"position":[[78,11]]},"590":{"position":[[87,11]]},"596":{"position":[[90,11]]},"707":{"position":[[78,11]]},"711":{"position":[[80,11]]},"715":{"position":[[88,11]]},"719":{"position":[[86,11]]},"723":{"position":[[93,11]]}}}],["role",{"_index":219,"t":{"379":{"position":[[7,5]]},"755":{"position":[[36,4]]},"759":{"position":[[31,5]]}}}],["root",{"_index":404,"t":{"672":{"position":[[24,4]]},"784":{"position":[[32,4]]}}}],["root:root",{"_index":302,"t":{"560":{"position":[[76,9]]},"564":{"position":[[84,9]]},"568":{"position":[[75,9]]},"572":{"position":[[70,9]]},"576":{"position":[[76,9]]},"584":{"position":[[59,9]]},"588":{"position":[[63,9]]},"592":{"position":[[72,9]]},"594":{"position":[[77,9]]},"709":{"position":[[63,9]]},"713":{"position":[[65,9]]},"717":{"position":[[73,9]]},"721":{"position":[[78,9]]},"725":{"position":[[79,9]]}}}],["rootless",{"_index":23,"t":{"28":{"position":[[8,8]]},"30":{"position":[[18,8]]},"32":{"position":[[9,8]]},"34":{"position":[[9,8]]},"36":{"position":[[16,8]]},"395":{"position":[[0,8]]}}}],["rotat",{"_index":80,"t":{"105":{"position":[[0,8]]},"111":{"position":[[0,8]]},"113":{"position":[[0,8]]},"115":{"position":[[27,8]]},"123":{"position":[[15,8]]},"748":{"position":[[25,6]]}}}],["rotatekubeletservercertif",{"_index":406,"t":{"674":{"position":[[22,30]]},"750":{"position":[[23,30]]}}}],["rule",{"_index":213,"t":{"361":{"position":[[8,5]]}}}],["run",{"_index":20,"t":{"26":{"position":[[0,7]]},"28":{"position":[[0,7]]},"51":{"position":[[0,7]]},"236":{"position":[[6,3]]}}}],["runtim",{"_index":15,"t":{"18":{"position":[[30,7]]},"24":{"position":[[17,7]]},"88":{"position":[[0,7]]},"465":{"position":[[11,7]]}}}],["schedul",{"_index":306,"t":{"566":{"position":[[22,9]]},"568":{"position":[[22,9]]},"678":{"position":[[4,9]]}}}],["scheduler.conf",{"_index":322,"t":{"586":{"position":[[23,14]]},"588":{"position":[[23,14]]}}}],["scope",{"_index":235,"t":{"435":{"position":[[0,5]]}}}],["script",{"_index":35,"t":{"40":{"position":[[43,6]]},"270":{"position":[[8,6]]},"276":{"position":[[27,6]]},"427":{"position":[[8,6]]},"547":{"position":[[35,6]]}}}],["seccomp",{"_index":539,"t":{"814":{"position":[[22,7]]}}}],["secret",{"_index":87,"t":{"121":{"position":[[0,7]]},"125":{"position":[[0,7]]},"127":{"position":[[0,7]]},"147":{"position":[[0,7]]},"511":{"position":[[0,7]]},"757":{"position":[[25,7]]},"803":{"position":[[4,7]]},"804":{"position":[[19,7],[41,7]]},"806":{"position":[[24,6]]}}}],["secur",{"_index":105,"t":{"167":{"position":[[0,6]]},"467":{"position":[[4,8]]},"633":{"position":[[25,6]]},"704":{"position":[[46,8]]},"771":{"position":[[8,8]]}}}],["securitycontext",{"_index":544,"t":{"816":{"position":[[12,15]]}}}],["securitycontextdeni",{"_index":358,"t":{"625":{"position":[[48,19]]}}}],["select",{"_index":229,"t":{"413":{"position":[[27,9]]}}}],["selector",{"_index":186,"t":{"308":{"position":[[21,8]]}}}],["self",{"_index":82,"t":{"113":{"position":[[9,4]]}}}],["selinux",{"_index":51,"t":{"53":{"position":[[0,7]]},"55":{"position":[[9,7]]}}}],["server",{"_index":7,"t":{"12":{"position":[[11,6]]},"26":{"position":[[18,7]]},"28":{"position":[[17,7]]},"32":{"position":[[18,7]]},"68":{"position":[[7,6]]},"103":{"position":[[11,6]]},"105":{"position":[[20,6]]},"161":{"position":[[4,6]]},"173":{"position":[[0,6]]},"212":{"position":[[10,6]]},"214":{"position":[[29,6]]},"238":{"position":[[35,6]]},"361":{"position":[[22,6]]},"379":{"position":[[25,7]]},"385":{"position":[[13,7]]},"445":{"position":[[4,6]]},"471":{"position":[[4,6]]},"558":{"position":[[26,6]]},"560":{"position":[[26,6]]},"600":{"position":[[8,6]]},"661":{"position":[[27,6]]}}}],["servic",{"_index":33,"t":{"40":{"position":[[13,7]]},"115":{"position":[[0,7]]},"407":{"position":[[0,7]]},"645":{"position":[[25,7]]},"668":{"position":[[28,7]]},"670":{"position":[[24,7]]},"707":{"position":[[30,7]]},"709":{"position":[[30,7]]},"754":{"position":[[13,7]]},"763":{"position":[[26,7]]},"765":{"position":[[18,7]]}}}],["serviceaccount",{"_index":361,"t":{"627":{"position":[[48,14]]}}}],["servicelb",{"_index":227,"t":{"409":{"position":[[4,9]]},"413":{"position":[[12,9]]},"415":{"position":[[9,9]]},"417":{"position":[[10,9]]}}}],["set",{"_index":256,"t":{"463":{"position":[[34,3]]},"517":{"position":[[0,7]]},"523":{"position":[[0,7]]},"558":{"position":[[72,3]]},"560":{"position":[[69,3]]},"562":{"position":[[80,3]]},"564":{"position":[[77,3]]},"566":{"position":[[71,3]]},"568":{"position":[[68,3]]},"570":{"position":[[66,3]]},"572":{"position":[[63,3]]},"574":{"position":[[71,3]]},"576":{"position":[[69,3]]},"578":{"position":[[59,3]]},"580":{"position":[[56,3]]},"582":{"position":[[55,3]]},"584":{"position":[[52,3]]},"586":{"position":[[59,3]]},"588":{"position":[[56,3]]},"590":{"position":[[68,3]]},"592":{"position":[[65,3]]},"594":{"position":[[70,3]]},"596":{"position":[[71,3]]},"598":{"position":[[63,3]]},"601":{"position":[[51,3]]},"603":{"position":[[57,3]]},"605":{"position":[[54,3]]},"607":{"position":[[50,3]]},"609":{"position":[[90,3]]},"611":{"position":[[66,3]]},"613":{"position":[[59,3]]},"619":{"position":[[66,3]]},"621":{"position":[[67,3]]},"623":{"position":[[68,3]]},"625":{"position":[[71,3]]},"627":{"position":[[66,3]]},"629":{"position":[[70,3]]},"631":{"position":[[67,3]]},"633":{"position":[[53,3]]},"635":{"position":[[47,3]]},"637":{"position":[[52,3]]},"639":{"position":[[54,3]]},"641":{"position":[[57,3]]},"643":{"position":[[55,3]]},"645":{"position":[[60,3]]},"647":{"position":[[53,3]]},"649":{"position":[[72,3]]},"651":{"position":[[80,3]]},"653":{"position":[[52,3]]},"655":{"position":[[49,3]]},"657":{"position":[[64,3]]},"664":{"position":[[64,3]]},"666":{"position":[[46,3]]},"668":{"position":[[68,3]]},"670":{"position":[[69,3]]},"672":{"position":[[49,3]]},"674":{"position":[[65,3]]},"676":{"position":[[49,3]]},"679":{"position":[[46,3]]},"681":{"position":[[49,3]]},"684":{"position":[[61,3]]},"686":{"position":[[51,3]]},"688":{"position":[[47,3]]},"690":{"position":[[71,3]]},"692":{"position":[[56,3]]},"694":{"position":[[52,3]]},"707":{"position":[[59,3]]},"709":{"position":[[56,3]]},"711":{"position":[[61,3]]},"713":{"position":[[58,3]]},"715":{"position":[[69,3]]},"717":{"position":[[66,3]]},"719":{"position":[[67,3]]},"721":{"position":[[71,3]]},"723":{"position":[[74,3]]},"725":{"position":[[72,3]]},"728":{"position":[[51,3]]},"730":{"position":[[59,3]]},"732":{"position":[[51,3]]},"734":{"position":[[51,3]]},"736":{"position":[[74,3]]},"738":{"position":[[60,3]]},"740":{"position":[[62,3]]},"742":{"position":[[58,3]]},"744":{"position":[[46,3]]},"746":{"position":[[80,3]]},"748":{"position":[[61,3]]},"750":{"position":[[66,3]]},"814":{"position":[[41,3]]}}}],["setup",{"_index":62,"t":{"68":{"position":[[14,5]]},"202":{"position":[[0,5]]}}}],["share",{"_index":495,"t":{"776":{"position":[[54,5]]},"778":{"position":[[54,5]]},"780":{"position":[[54,5]]}}}],["short",{"_index":106,"t":{"169":{"position":[[0,5]]}}}],["sign",{"_index":83,"t":{"113":{"position":[[14,6]]}}}],["singl",{"_index":61,"t":{"68":{"position":[[0,6]]},"222":{"position":[[9,6]]},"312":{"position":[[0,6]]},"447":{"position":[[19,6]]}}}],["skip",{"_index":203,"t":{"331":{"position":[[6,5]]}}}],["snap",{"_index":222,"t":{"391":{"position":[[0,4]]}}}],["solut",{"_index":194,"t":{"316":{"position":[[24,8]]}}}],["sourc",{"_index":58,"t":{"62":{"position":[[19,7]]},"232":{"position":[[21,7]]}}}],["specif",{"_index":282,"t":{"532":{"position":[[8,8]]},"558":{"position":[[37,13]]},"560":{"position":[[37,13]]},"562":{"position":[[45,13]]},"564":{"position":[[45,13]]},"566":{"position":[[36,13]]},"568":{"position":[[36,13]]},"570":{"position":[[31,13]]},"572":{"position":[[31,13]]}}}],["sqlite",{"_index":119,"t":{"192":{"position":[[24,6]]}}}],["stack",{"_index":188,"t":{"310":{"position":[[5,5]]},"312":{"position":[[7,5]]}}}],["standard",{"_index":486,"t":{"771":{"position":[[17,9]]}}}],["start",{"_index":27,"t":{"32":{"position":[[0,8]]},"40":{"position":[[0,8]]}}}],["statu",{"_index":91,"t":{"127":{"position":[[19,6]]}}}],["storag",{"_index":99,"t":{"151":{"position":[[0,7]]},"515":{"position":[[27,8]]},"517":{"position":[[21,7]]},"806":{"position":[[31,7]]}}}],["stream",{"_index":450,"t":{"736":{"position":[[24,9]]}}}],["strong",{"_index":392,"t":{"661":{"position":[[52,6]]},"752":{"position":[[49,6]]}}}],["suitabl",{"_index":135,"t":{"226":{"position":[[9,8]]}}}],["support",{"_index":19,"t":{"24":{"position":[[25,7]]},"53":{"position":[[8,7]]},"230":{"position":[[9,7]]},"799":{"position":[[33,8]]}}}],["syntax",{"_index":220,"t":{"381":{"position":[[19,6]]}}}],["system",{"_index":210,"t":{"355":{"position":[[10,7]]},"537":{"position":[[12,6]]}}}],["system:mast",{"_index":479,"t":{"767":{"position":[[19,14]]}}}],["tailscal",{"_index":196,"t":{"318":{"position":[[21,9]]}}}],["taint",{"_index":32,"t":{"38":{"position":[[16,6]]},"98":{"position":[[16,6]]}}}],["termin",{"_index":396,"t":{"664":{"position":[[24,10]]}}}],["test",{"_index":237,"t":{"435":{"position":[[18,7]]}}}],["threshold",{"_index":398,"t":{"664":{"position":[[42,9]]}}}],["timeout",{"_index":381,"t":{"647":{"position":[[33,7]]},"736":{"position":[[50,7]]}}}],["tl",{"_index":205,"t":{"343":{"position":[[5,3]]},"345":{"position":[[8,3]]},"651":{"position":[[25,3],[45,3]]},"688":{"position":[[27,3]]},"694":{"position":[[32,3]]},"746":{"position":[[25,3],[45,3]]}}}],["togeth",{"_index":171,"t":{"284":{"position":[[15,8]]}}}],["token",{"_index":8,"t":{"14":{"position":[[0,5]]},"165":{"position":[[0,5]]},"171":{"position":[[0,5]]},"238":{"position":[[52,7]]},"292":{"position":[[18,5]]},"603":{"position":[[24,5]]},"765":{"position":[[34,6]]}}}],["tool",{"_index":89,"t":{"121":{"position":[[19,4]]},"511":{"position":[[19,4]]}}}],["traefik",{"_index":139,"t":{"228":{"position":[[40,8]]},"403":{"position":[[0,7]]}}}],["troubleshoot",{"_index":29,"t":{"36":{"position":[[0,15]]}}}],["true",{"_index":341,"t":{"607":{"position":[[57,4]]},"645":{"position":[[67,4]]},"668":{"position":[[75,4]]},"674":{"position":[[72,4]]},"686":{"position":[[58,4]]},"688":{"position":[[54,4]]},"692":{"position":[[63,4]]},"694":{"position":[[59,4]]},"738":{"position":[[67,4]]},"740":{"position":[[69,4]]},"750":{"position":[[73,4]]}}}],["type",{"_index":107,"t":{"171":{"position":[[6,5]]}}}],["ubuntu",{"_index":48,"t":{"47":{"position":[[0,6]]}}}],["uninstal",{"_index":221,"t":{"385":{"position":[[0,12]]},"387":{"position":[[0,12]]}}}],["uniqu",{"_index":421,"t":{"696":{"position":[[18,6]]}}}],["up",{"_index":278,"t":{"517":{"position":[[8,2]]},"523":{"position":[[8,2]]}}}],["upgrad",{"_index":165,"t":{"269":{"position":[[0,9]]},"272":{"position":[[10,8]]},"296":{"position":[[0,9]]},"397":{"position":[[0,9]]},"530":{"position":[[0,9]]},"537":{"position":[[19,7]]},"547":{"position":[[0,7]]},"549":{"position":[[9,7]]}}}],["us",{"_index":12,"t":{"18":{"position":[[0,5]]},"20":{"position":[[0,5]]},"109":{"position":[[0,5]]},"133":{"position":[[9,4]]},"228":{"position":[[10,3]]},"246":{"position":[[0,5]]},"329":{"position":[[0,5]]},"331":{"position":[[0,5]]},"547":{"position":[[12,5]]},"549":{"position":[[21,5]]},"625":{"position":[[103,4]]},"661":{"position":[[45,3]]},"668":{"position":[[24,3]]},"696":{"position":[[50,4]]},"699":{"position":[[54,4]]},"752":{"position":[[42,3]]},"755":{"position":[[49,4]]},"759":{"position":[[24,3]]},"763":{"position":[[60,5]]},"767":{"position":[[12,3]]},"769":{"position":[[12,3]]},"796":{"position":[[50,3]]},"799":{"position":[[29,3]]},"804":{"position":[[13,5]]},"809":{"position":[[33,5]]},"812":{"position":[[57,5]]},"818":{"position":[[42,4]]}}}],["usag",{"_index":228,"t":{"411":{"position":[[0,5]]}}}],["user",{"_index":178,"t":{"298":{"position":[[33,4]]},"325":{"position":[[0,4]]},"699":{"position":[[63,5]]}}}],["util",{"_index":246,"t":{"453":{"position":[[17,11]]},"740":{"position":[[38,4]]}}}],["v1.22",{"_index":292,"t":{"554":{"position":[[53,5]]}}}],["v1.23",{"_index":291,"t":{"554":{"position":[[25,5]]}}}],["v1.24",{"_index":293,"t":{"554":{"position":[[62,5]]}}}],["v1.24.x",{"_index":224,"t":{"397":{"position":[[33,7]]}}}],["v1.25.x",{"_index":225,"t":{"397":{"position":[[44,7]]}}}],["v2",{"_index":152,"t":{"250":{"position":[[20,2]]}}}],["valu",{"_index":93,"t":{"131":{"position":[[23,6]]}}}],["variabl",{"_index":525,"t":{"804":{"position":[[64,9]]}}}],["verifi",{"_index":464,"t":{"750":{"position":[[7,6]]}}}],["version",{"_index":41,"t":{"43":{"position":[[13,8]]},"240":{"position":[[29,8]]},"532":{"position":[[0,7]]}}}],["volum",{"_index":514,"t":{"794":{"position":[[42,7]]}}}],["vpn",{"_index":197,"t":{"318":{"position":[[31,3]]}}}],["what'",{"_index":1,"t":{"5":{"position":[[0,6]]},"58":{"position":[[0,6]]},"515":{"position":[[0,6]]}}}],["wildcard",{"_index":470,"t":{"759":{"position":[[15,8]]}}}],["window",{"_index":140,"t":{"230":{"position":[[17,8]]},"792":{"position":[[33,7]]}}}],["wireguard",{"_index":180,"t":{"304":{"position":[[15,9],[37,9]]}}}],["wish",{"_index":494,"t":{"776":{"position":[[43,7]]},"778":{"position":[[43,7]]},"780":{"position":[[43,7]]}}}],["without",{"_index":206,"t":{"345":{"position":[[0,7]]},"421":{"position":[[6,7]]}}}],["work",{"_index":71,"t":{"74":{"position":[[28,5]]},"409":{"position":[[14,5]]}}}],["worker",{"_index":431,"t":{"706":{"position":[[4,6]]}}}],["workload",{"_index":243,"t":{"445":{"position":[[18,8]]},"455":{"position":[[22,9]]}}}],["yaml",{"_index":156,"t":{"258":{"position":[[20,4]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":2,"t":"Lightweight Kubernetes. Easy to install, half the memory, all in a binary of less than 100 MB. Great for: Edge IoT CI Development ARM Embedding K8s Situations where a PhD in K8s clusterology is infeasible","s":"K3s - Lightweight Kubernetes","u":"/","h":"","p":1},{"i":4,"t":"K3s is a fully compliant Kubernetes distribution with the following enhancements: Packaged as a single binary. Lightweight storage backend based on sqlite3 as the default storage mechanism. etcd3, MySQL, Postgres are also available. Wrapped in simple launcher that handles a lot of the complexity of TLS and options. Secure by default with reasonable defaults for lightweight environments. Simple but powerful \"batteries-included\" features have been added, such as: local storage provider service load balancer Helm controller Traefik ingress controller. Operation of all Kubernetes control plane components is encapsulated in a single binary and process. This allows K3s to automate and manage complex cluster operations like distributing certificates. External dependencies have been minimized (just a modern kernel and cgroup mounts needed). K3s packages the required dependencies, including: containerd Flannel (CNI) CoreDNS Traefik (Ingress) Klipper-lb (Service LB) Embedded network policy controller Embedded local-path-provisioner Host utilities (iptables, socat, etc)","s":"What is K3s?","u":"/","h":"","p":1},{"i":6,"t":"We wanted an installation of Kubernetes that was half the size in terms of memory footprint. Kubernetes is a 10-letter word stylized as K8s. So something half as big as Kubernetes would be a 5-letter word stylized as K3s. There is no long form of K3s and no official pronunciation.","s":"What's with the name?","u":"/","h":"","p":1},{"i":8,"t":"This section contains advanced information describing the different ways you can run and manage K3s, as well as steps necessary to prepare the host OS for K3s use.","s":"Advanced Options / Configuration","u":"/advanced","h":"","p":7},{"i":11,"t":"K3s generates self-signed Certificate Authority (CA) Certificates during startup of the first server node. These CA certificates are valid for 10 years, and are not automatically renewed. For information on using custom CA certificates, or renewing the self-signed CA certificates, see the k3s certificate rotate-ca command documentation.","s":"Certificate Authority Certificates","u":"/advanced","h":"#certificate-authority-certificates","p":7},{"i":13,"t":"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts. For information on manually rotating client and server certificates, see the k3s certificate rotate command documentation.","s":"Client and Server certificates","u":"/advanced","h":"#client-and-server-certificates","p":7},{"i":15,"t":"By default, K3s uses a single static token for both servers and agents. This token cannot be changed once the cluster has been created. It is possible to enable a second static token that can only be used to join agents, or to create temporary kubeadm style join tokens that expire automatically. For more information, see the k3s token command documentation.","s":"Token Management","u":"/advanced","h":"#token-management","p":7},{"i":17,"t":"If you are running K3s in an environment, which only has external connectivity through an HTTP proxy, you can configure your proxy settings on the K3s systemd service. These proxy settings will then be used in K3s and passed down to the embedded containerd and kubelet. The K3s installation script will automatically take the HTTP_PROXY, HTTPS_PROXY and NO_PROXY, as well as the CONTAINERD_HTTP_PROXY, CONTAINERD_HTTPS_PROXY and CONTAINERD_NO_PROXY variables from the current shell, if they are present, and write them to the environment file of your systemd service, usually: /etc/systemd/system/k3s.service.env /etc/systemd/system/k3s-agent.service.env Of course, you can also configure the proxy by editing these files. K3s will automatically add the cluster internal Pod and Service IP ranges and cluster DNS domain to the list of NO_PROXY entries. You should ensure that the IP address ranges used by the Kubernetes nodes themselves (i.e. the public and private IPs of the nodes) are included in the NO_PROXY list, or that the nodes can be reached through the proxy. HTTP_PROXY=http://your-proxy.example.com:8888 HTTPS_PROXY=http://your-proxy.example.com:8888 NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 If you want to configure the proxy settings for containerd without affecting K3s and the Kubelet, you can prefix the variables with CONTAINERD_: CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888 CONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888 CONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16","s":"Configuring an HTTP proxy","u":"/advanced","h":"#configuring-an-http-proxy","p":7},{"i":19,"t":"K3s includes and defaults to containerd, an industry-standard container runtime. As of Kubernetes 1.24, the Kubelet no longer includes dockershim, the component that allows the kubelet to communicate with dockerd. K3s 1.24 and higher include cri-dockerd, which allows seamless upgrade from prior releases of K3s while continuing to use the Docker container runtime. To use Docker instead of containerd: Install Docker on the K3s node. One of Rancher's Docker installation scripts can be used to install Docker: curl https://releases.rancher.com/install-docker/20.10.sh | sh Install K3s using the --docker option: curl -sfL https://get.k3s.io | sh -s - --docker Confirm that the cluster is available: $ sudo k3s kubectl get pods --all-namespaces NAMESPACE NAME READY STATUS RESTARTS AGE kube-system local-path-provisioner-6d59f47c7-lncxn 1/1 Running 0 51s kube-system metrics-server-7566d596c8-9tnck 1/1 Running 0 51s kube-system helm-install-traefik-mbkn9 0/1 Completed 1 51s kube-system coredns-8655855d6-rtbnb 1/1 Running 0 51s kube-system svclb-traefik-jbmvl 2/2 Running 0 43s kube-system traefik-758cd5fc85-2wz97 1/1 Running 0 43s Confirm that the Docker containers are running: $ sudo docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 3e4d34729602 897ce3c5fc8f \"entry\" About a minute ago Up About a minute k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 bffdc9d7a65f rancher/klipper-lb \"entry\" About a minute ago Up About a minute k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 436b85c5e38d rancher/library-traefik \"/traefik --configfi…\" About a minute ago Up About a minute k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0 de8fded06188 rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 7c6a30aeeb2f rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0 ae6c58cab4a7 9d12f9848b99 \"local-path-provisio…\" About a minute ago Up About a minute k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0 be1450e1a11e 9dd718864ce6 \"/metrics-server\" About a minute ago Up About a minute k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0 4454d14e4d3f c4d3d16fe508 \"/coredns -conf /etc…\" About a minute ago Up About a minute k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0 c3675b87f96c rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0 4b1fddbe6ca6 rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0 64d3517d4a95 rancher/pause:3.1 \"/pause\"","s":"Using Docker as the Container Runtime","u":"/advanced","h":"#using-docker-as-the-container-runtime","p":7},{"i":21,"t":"etcdctl provides a CLI for interacting with etcd servers. K3s does not bundle etcdctl. If you would like to use etcdctl to interact with K3s's embedded etcd, install etcdctl using the official documentation. ETCD_VERSION=\"v3.5.5\" ETCD_URL=\"https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz\" curl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin You may then use etcdctl by configuring it to use the K3s-managed certificates and keys for authentication: sudo etcdctl version \\ --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\ --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\ --key=/var/lib/rancher/k3s/server/tls/etcd/client.key","s":"Using etcdctl","u":"/advanced","h":"#using-etcdctl","p":7},{"i":23,"t":"K3s will generate config.toml for containerd in /var/lib/rancher/k3s/agent/etc/containerd/config.toml. For advanced customization for this file you can create another file called config.toml.tmpl in the same directory, and it will be used instead. The config.toml.tmpl will be treated as a Go template file, and the config.Node structure is being passed to the template. See this folder for Linux and Windows examples on how to use the structure to customize the configuration file. The config.Node golang struct is defined here","s":"Configuring containerd","u":"/advanced","h":"#configuring-containerd","p":7},{"i":25,"t":"K3s will automatically detect and configure the NVIDIA container runtime if it is present when K3s starts. Install the nvidia-container package repository on the node by following the instructions at: https://nvidia.github.io/libnvidia-container/ Install the nvidia container runtime packages. For example: apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server Install K3s, or restart it if already installed: curl -ksL get.k3s.io | sh - Confirm that the nvidia container runtime has been found by k3s: grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml This will automatically add nvidia and/or nvidia-experimental runtimes to the containerd configuration, depending on what runtime executables are found. You must still add a RuntimeClass definition to your cluster, and deploy Pods that explicitly request the appropriate runtime by setting runtimeClassName: nvidia in the Pod spec: apiVersion: node.k8s.io/v1 kind: RuntimeClass metadata: name: nvidia handler: nvidia --- apiVersion: v1 kind: Pod metadata: name: nbody-gpu-benchmark namespace: default spec: restartPolicy: OnFailure runtimeClassName: nvidia containers: - name: cuda-container image: nvcr.io/nvidia/k8s/cuda-sample:nbody args: [\"nbody\", \"-gpu\", \"-benchmark\"] resources: limits: nvidia.com/gpu: 1 env: - name: NVIDIA_VISIBLE_DEVICES value: all - name: NVIDIA_DRIVER_CAPABILITIES value: all Note that the NVIDIA Container Runtime is also frequently used with the NVIDIA Device Plugin and GPU Feature Discovery, which must be installed separately, with modifications to ensure that pod specs include runtimeClassName: nvidia, as mentioned above.","s":"NVIDIA Container Runtime Support","u":"/advanced","h":"#nvidia-container-runtime-support","p":7},{"i":27,"t":"Warning: This feature is experimental. When started with the --disable-agent flag, servers do not run the kubelet, container runtime, or CNI. They do not register a Node resource in the cluster, and will not appear in kubectl get nodes output. Because they do not host a kubelet, they cannot run pods or be managed by operators that rely on enumerating cluster nodes, including the embedded etcd controller and the system upgrade controller. Running agentless servers may be advantageous if you want to obscure your control-plane nodes from discovery by agents and workloads, at the cost of increased administrative overhead caused by lack of cluster operator support.","s":"Running Agentless Servers (Experimental)","u":"/advanced","h":"#running-agentless-servers-experimental","p":7},{"i":29,"t":"Warning: This feature is experimental. Rootless mode allows running K3s servers as an unprivileged user, so as to protect the real root on the host from potential container-breakout attacks. See https://rootlesscontaine.rs/ to learn more about Rootless Kubernetes.","s":"Running Rootless Servers (Experimental)","u":"/advanced","h":"#running-rootless-servers-experimental","p":7},{"i":31,"t":"Ports When running rootless a new network namespace is created. This means that K3s instance is running with networking fairly detached from the host. The only way to access Services run in K3s from the host is to set up port forwards to the K3s network namespace. Rootless K3s includes controller that will automatically bind 6443 and service ports below 1024 to the host with an offset of 10000. For example, a Service on port 80 will become 10080 on the host, but 8080 will become 8080 without any offset. Currently, only LoadBalancer Services are automatically bound. Cgroups Cgroup v1 and Hybrid v1/v2 are not supported; only pure Cgroup v2 is supported. If K3s fails to start due to missing cgroups when running rootless, it is likely that your node is in Hybrid mode, and the \"missing\" cgroups are still bound to a v1 controller. Multi-node/multi-process cluster Multi-node rootless clusters, or multiple rootless k3s processes on the same node, are not currently supported. See #6488 for more details.","s":"Known Issues with Rootless mode","u":"/advanced","h":"#known-issues-with-rootless-mode","p":7},{"i":33,"t":"Enable cgroup v2 delegation, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ . This step is required; the rootless kubelet will fail to start without the proper cgroups delegated. Download k3s-rootless.service from https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service. Make sure to use the same version of k3s-rootless.service and k3s. Install k3s-rootless.service to ~/.config/systemd/user/k3s-rootless.service. Installing this file as a system-wide service (/etc/systemd/...) is not supported. Depending on the path of k3s binary, you might need to modify the ExecStart=/usr/local/bin/k3s ... line of the file. Run systemctl --user daemon-reload Run systemctl --user enable --now k3s-rootless Run KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A, and make sure the pods are running. Note: Don't try to run k3s server --rootless on a terminal, as terminal sessions do not allow cgroup v2 delegation. If you really need to try it on a terminal, use systemd-run --user -p Delegate=yes --tty k3s server --rooless to wrap it in a systemd scope.","s":"Starting Rootless Servers","u":"/advanced","h":"#starting-rootless-servers","p":7},{"i":35,"t":"Rootless K3s uses rootlesskit and slirp4netns to communicate between host and user network namespaces. Some of the configuration used by rootlesskit and slirp4nets can be set by environment variables. The best way to set these is to add them to the Environment field of the k3s-rootless systemd unit. Variable Default Description K3S_ROOTLESS_MTU 1500 Sets the MTU for the slirp4netns virtual interfaces. K3S_ROOTLESS_CIDR 10.41.0.0/16 Sets the CIDR used by slirp4netns virtual interfaces. K3S_ROOTLESS_ENABLE_IPV6 autotedected Enables slirp4netns IPv6 support. If not specified, it is automatically enabled if K3s is configured for dual-stack operation. K3S_ROOTLESS_PORT_DRIVER builtin Selects the rootless port driver; either builtin or slirp4netns. Builtin is faster, but masquerades the original source address of inbound packets. K3S_ROOTLESS_DISABLE_HOST_LOOPBACK true Controls whether or not access to the hosts's loopback address via the gateway interface is enabled. It is recommended that this not be changed, for security reasons.","s":"Advanced Rootless Configuration","u":"/advanced","h":"#advanced-rootless-configuration","p":7},{"i":37,"t":"Run systemctl --user status k3s-rootless to check the daemon status Run journalctl --user -f -u k3s-rootless to see the daemon log See also https://rootlesscontaine.rs/","s":"Troubleshooting Rootless","u":"/advanced","h":"#troubleshooting-rootless","p":7},{"i":39,"t":"K3s agents can be configured with the options --node-label and --node-taint which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be set when the node is first joined to the cluster. All current versions of Kubernetes restrict nodes from registering with most labels with kubernetes.io and k8s.io prefixes, specifically including the kubernetes.io/role label. If you attempt to start a node with a disallowed label, K3s will fail to start. As stated by the Kubernetes authors: Nodes are not permitted to assert their own role labels. Node roles are typically used to identify privileged or control plane types of nodes, and allowing nodes to label themselves into that pool allows a compromised node to trivially attract workloads (like control plane daemonsets) that confer access to higher privilege credentials. See SIG-Auth KEP 279 for more information. If you want to change node labels and taints after node registration, or add reserved labels, you should use kubectl. Refer to the official Kubernetes documentation for details on how to add taints and node labels.","s":"Node Labels and Taints","u":"/advanced","h":"#node-labels-and-taints","p":7},{"i":41,"t":"The installation script will auto-detect if your OS is using systemd or openrc and enable and start the service as part of the installation process. When running with openrc, logs will be created at /var/log/k3s.log. When running with systemd, logs will be created in /var/log/syslog and viewed using journalctl -u k3s (or journalctl -u k3s-agent on agents). An example of disabling auto-starting and service enablement with the install script: curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -","s":"Starting the Service with the Installation Script","u":"/advanced","h":"#starting-the-service-with-the-installation-script","p":7},{"i":44,"t":"Several popular Linux distributions ship a version of iptables that contain a bug which causes the accumulation of duplicate rules, which negatively affects the performance and stability of the node. See Issue #3117 for information on how to determine if you are affected by this problem. K3s includes a working version of iptables (v1.8.8) which functions properly. You can tell K3s to use its bundled version of iptables by starting K3s with the --prefer-bundled-bin option, or by uninstalling the iptables/nftables packages from your operating system. Version Gate The --prefer-bundled-bin flag is available starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1).","s":"Old iptables versions","u":"/advanced","h":"#old-iptables-versions","p":7},{"i":46,"t":"It is recommended to turn off firewalld: systemctl disable firewalld --now If you wish to keep firewalld enabled, by default, the following rules are required: firewall-cmd --permanent --add-port=6443/tcp #apiserver firewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods firewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services firewall-cmd --reload Additional ports may need to be opened depending on your setup. See Inbound Rules for more information. If you change the default CIDR for pods or services, you will need to update the firewall rules accordingly. If enabled, it is required to disable nm-cloud-setup and reboot the node: systemctl disable nm-cloud-setup.service nm-cloud-setup.timer reboot","s":"Red Hat Enterprise Linux / CentOS","u":"/advanced","h":"#red-hat-enterprise-linux--centos","p":7},{"i":48,"t":"It is recommended to turn off ufw (uncomplicated firewall): ufw disable If you wish to keep ufw enabled, by default, the following rules are required: ufw allow 6443/tcp #apiserver ufw allow from 10.42.0.0/16 to any #pods ufw allow from 10.43.0.0/16 to any #services Additional ports may need to be opened depending on your setup. See Inbound Rules for more information. If you change the default CIDR for pods or services, you will need to update the firewall rules accordingly.","s":"Ubuntu","u":"/advanced","h":"#ubuntu","p":7},{"i":50,"t":"Raspberry Pi OS is Debian based, and may suffer from an old iptables version. See workarounds. Standard Raspberry Pi OS installations do not start with cgroups enabled. K3S needs cgroups to start the systemd service. cgroupscan be enabled by appending cgroup_memory=1 cgroup_enable=memory to /boot/cmdline.txt. Example cmdline.txt: console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory Starting with Ubuntu 21.10, vxlan support on Raspberry Pi has been moved into a separate kernel module. sudo apt install linux-modules-extra-raspi","s":"Raspberry Pi","u":"/advanced","h":"#raspberry-pi","p":7},{"i":52,"t":"There are several ways to run K3s in Docker: K3d Docker k3d is a utility designed to easily run multi-node K3s clusters in Docker. k3d makes it very easy to create single- and multi-node k3s clusters in docker, e.g. for local development on Kubernetes. See the Installation documentation for more information on how to install and use k3d. To use Docker, rancher/k3s images are also available to run the K3s server and agent. Using the docker run command: sudo docker run \\ --privileged \\ --name k3s-server-1 \\ --hostname k3s-server-1 \\ -p 6443:6443 \\ -d rancher/k3s:v1.24.10-k3s1 \\ server note You must specify a valid K3s version as the tag; the latest tag is not maintained. Docker images do not allow a + sign in tags, use a - in the tag instead. Once K3s is up and running, you can copy the admin kubeconfig out of the Docker container for use: sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config","s":"Running K3s in Docker","u":"/advanced","h":"#running-k3s-in-docker","p":7},{"i":54,"t":"Version Gate Available as of v1.19.4+k3s1 If you are installing K3s on a system where SELinux is enabled by default (such as CentOS), you must ensure the proper SELinux policies have been installed. Automatic Installation Manual Installation The install script will automatically install the SELinux RPM from the Rancher RPM repository if on a compatible system if not performing an air-gapped install. Automatic installation can be skipped by setting INSTALL_K3S_SKIP_SELINUX_RPM=true. The necessary policies can be installed with the following commands: yum install -y container-selinux selinux-policy-base yum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm To force the install script to log a warning rather than fail, you can set the following environment variable: INSTALL_K3S_SELINUX_WARN=true.","s":"SELinux Support","u":"/advanced","h":"#selinux-support","p":7},{"i":56,"t":"To leverage SELinux, specify the --selinux flag when starting K3s servers and agents. This option can also be specified in the K3s configuration file. selinux: true Using a custom --data-dir under SELinux is not supported. To customize it, you would most likely need to write your own custom policy. For guidance, you could refer to the containers/container-selinux repository, which contains the SELinux policy files for Container Runtimes, and the k3s-io/k3s-selinux repository, which contains the SELinux policy for K3s.","s":"Enabling SELinux Enforcement","u":"/advanced","h":"#enabling-selinux-enforcement","p":7},{"i":59,"t":"Pulling images is known as one of the time-consuming steps in the container lifecycle. According to Harter, et al., pulling packages accounts for 76% of container start time, but only 6.4% of that data is read To address this issue, k3s experimentally supports lazy pulling of image contents. This allows k3s to start a container before the entire image has been pulled. Instead, the necessary chunks of contents (e.g. individual files) are fetched on-demand. Especially for large images, this technique can shorten the container startup latency. To enable lazy pulling, the target image needs to be formatted as eStargz. This is an OCI-alternative but 100% OCI-compatible image format for lazy pulling. Because of the compatibility, eStargz can be pushed to standard container registries (e.g. ghcr.io) as well as this is still runnable even on eStargz-agnostic runtimes. eStargz is developed based on the stargz format proposed by Google CRFS project but comes with practical features including content verification and performance optimization. For more details about lazy pulling and eStargz, please refer to Stargz Snapshotter project repository.","s":"What's lazy pulling and eStargz?","u":"/advanced","h":"#whats-lazy-pulling-and-estargz","p":7},{"i":61,"t":"As shown in the following, --snapshotter=stargz option is needed for k3s server and agent. k3s server --snapshotter=stargz With this configuration, you can perform lazy pulling for eStargz-formatted images. The following example Pod manifest uses eStargz-formatted node:13.13.0 image (ghcr.io/stargz-containers/node:13.13.0-esgz). When the stargz snapshotter is enabled, K3s performs lazy pulling for this image. apiVersion: v1 kind: Pod metadata: name: nodejs spec: containers: - name: nodejs-estargz image: ghcr.io/stargz-containers/node:13.13.0-esgz command: [\"node\"] args: - -e - var http = require('http'); http.createServer(function(req, res) { res.writeHead(200); res.end('Hello World!\\n'); }).listen(80); ports: - containerPort: 80","s":"Configure k3s for lazy pulling of eStargz","u":"/advanced","h":"#configure-k3s-for-lazy-pulling-of-estargz","p":7},{"i":63,"t":"Rancher logging for K3s can be installed without using Rancher. The following instructions should be executed to do so: helm repo add rancher-charts https://charts.rancher.io helm repo update helm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd helm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging","s":"Additional Logging Sources","u":"/advanced","h":"#additional-logging-sources","p":7},{"i":65,"t":"Packets dropped by network policies can be logged. The packet is sent to the iptables NFLOG action, which shows the packet details, including the network policy that blocked it. If there is a lot of traffic, the number of log messages could be very high. To control the log rate on a per-policy basis, set the limit and limit-burst iptables parameters by adding the following annotations to the network policy in question: kube-router.io/netpol-nflog-limit=<LIMIT-VALUE> kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE> Default values are limit=10/minute and limit-burst=10. Check the iptables manual for more information on the format and possible values for these fields. To convert NFLOG packets to log entries, install ulogd2 and configure [log1] to read on group=100. Then, restart the ulogd2 service for the new config to be committed. When a packet is blocked by network policy rules, a log message will appear in /var/log/ulog/syslogemu.log. Packets sent to the NFLOG netlink socket can also be read by using command-line tools like tcpdump or tshark: tcpdump -ni nflog:100 While more readily available, tcpdump will not show the name of the network policy that blocked the packet. Use wireshark's tshark command instead to display the full NFLOG packet header, including the nflog.prefix field that contains the policy name.","s":"Additional Network Policy Logging","u":"/advanced","h":"#additional-network-policy-logging","p":7},{"i":67,"t":"This page describes the architecture of a high-availability K3s server cluster and how it differs from a single-node server cluster. It also describes how agent nodes are registered with K3s servers. A server node is defined as a host running the k3s server command, with control-plane and datastore components managed by K3s. An agent node is defined as a host running the k3s agent command, without any datastore or control-plane components. Both servers and agents run the kubelet, container runtime, and CNI. See the Advanced Options documentation for more information on running agentless servers.","s":"Architecture","u":"/architecture","h":"","p":66},{"i":69,"t":"The following diagram shows an example of a cluster that has a single-node K3s server with an embedded SQLite database. In this configuration, each agent node is registered to the same server node. A K3s user can manipulate Kubernetes resources by calling the K3s API on the server node.","s":"Single-server Setup with an Embedded DB","u":"/architecture","h":"#single-server-setup-with-an-embedded-db","p":66},{"i":71,"t":"Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster comprises: Embedded DB External DB Three or more server nodes that will serve the Kubernetes API and run other control plane services An embedded etcd datastore (as opposed to the embedded SQLite datastore used in single-server setups) Two or more server nodes that will serve the Kubernetes API and run other control plane services An external datastore (such as MySQL, PostgreSQL, or etcd)","s":"High-Availability K3s","u":"/architecture","h":"#high-availability-k3s","p":66},{"i":73,"t":"In the high-availability server configuration, each node can also register with the Kubernetes API by using a fixed registration address, as shown in the diagram below. After registration, the agent nodes establish a connection directly to one of the server nodes.","s":"Fixed Registration Address for Agent Nodes","u":"/architecture","h":"#fixed-registration-address-for-agent-nodes","p":66},{"i":75,"t":"Agent nodes are registered with a websocket connection initiated by the k3s agent process, and the connection is maintained by a client-side load balancer running as part of the agent process. Initially, the agent connects to the supervisor (and kube-apiserver) via the local load-balancer on port 6443. The load-balancer maintains a list of available endpoints to connect to. The default (and initially only) endpoint is seeded by the hostname from the --server address. Once it connects to the cluster, the agent retrieves a list of kube-apiserver addresses from the Kubernetes service endpoint list in the default namespace. Those endpoints are added to the load balancer, which then maintains stable connections to all servers in the cluster, providing a connection to the kube-apiserver that tolerates outages of individual servers. Agents will register with the server using the node cluster secret along with a randomly generated password for the node, stored at /etc/rancher/node/password. The server will store the passwords for individual nodes as Kubernetes secrets, and any subsequent attempts must use the same password. Node password secrets are stored in the kube-system namespace with names using the template <host>.node-password.k3s. This is done to protect the integrity of node IDs. If the /etc/rancher/node directory of an agent is removed, or you wish to rejoin a node using an existing name, the node should be deleted from the cluster. This will clean up both the old node entry, and the node password secret, and allow the node to (re)join the cluster. If you frequently reuse hostnames, but are unable to remove the node password secrets, a unique node ID can be automatically appended to the hostname by launching K3s servers or agents using the --with-node-id flag. When enabled, the node ID is also stored in /etc/rancher/node/.","s":"How Agent Node Registration Works","u":"/architecture","h":"#how-agent-node-registration-works","p":66},{"i":77,"t":"The K3s binary contains a number of additional tools the help you manage your cluster. Command Description k3s server Run a K3s server node, which launches the Kubernetes apiserver, scheduler, controller-manager, and cloud-controller-manager components, in addition a datastore and the agent components. See the k3s server command documentation for more information. k3s agent Run the K3s agent node, which launches containerd, flannel, kube-router network policy controller, and the Kubernetes kubelet and kube-proxy components. See the k3s agent command documentation for more information. k3s kubectl Run the embedded kubectl command. This is a CLI for interacting with the Kubernetes apiserver. If the KUBECONFIG environment variable is not set, this will automatically attempt to use the kubeconfig at /etc/rancher/k3s/k3s.yaml. k3s crictl Run the embedded crictl command. This is a CLI for interacting with Kubernetes's container runtime interface (CRI). Useful for debugging. k3s ctr Run the embedded ctr command. This is a CLI for containerd, the container daemon used by K3s. Useful for debugging. k3s token Manage bootstrap tokens. See the k3s token command documentation for more information. k3s etcd-snapshot Perform on demand backups of the K3s cluster data and upload to S3. See the k3s etcd-snapshot command documentation for more information. k3s secrets-encrypt Configure K3s to encrypt secrets when storing them in the cluster. See the k3s secrets-encrypt command documentation for more information. k3s certificate Manage K3s certificates. See the k3s certificate command documentation for more information. k3s completion Generate shell completion scripts for k3s k3s help Shows a list of commands or help for one command","s":"CLI Tools","u":"/cli","h":"","p":76},{"i":79,"t":"In this section, you'll learn how to configure the K3s agent. Note that servers also run an agent, so all flags listed on this page are also valid for use on servers. Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the Configuration File documentation for more information on using YAML configuration files.","s":"k3s agent","u":"/cli/agent","h":"","p":78},{"i":81,"t":"Flag Default Description -v value 0 Number for the log level verbosity --vmodule value N/A Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value N/A Log to file --alsologtostderr N/A Log to standard error as well as file (if set)","s":"Logging","u":"/cli/agent","h":"#logging","p":78},{"i":83,"t":"Flag Environment Variable Description --token value, -t value K3S_TOKEN Token to use for authentication --token-file value K3S_TOKEN_FILE Token file to use for authentication --server value, -s value K3S_URL Server to connect to","s":"Cluster Options","u":"/cli/agent","h":"#cluster-options","p":78},{"i":85,"t":"Flag Default Description --data-dir value, -d value \"/var/lib/rancher/k3s\" Folder to hold state","s":"Data","u":"/cli/agent","h":"#data","p":78},{"i":87,"t":"Flag Environment Variable Description --node-name value K3S_NODE_NAME Node name --with-node-id N/A Append id to node name --node-label value N/A Registering and starting kubelet with set of labels --node-taint value N/A Registering kubelet with set of taints --protect-kernel-defaults N/A Kernel tuning behavior. If set, error if kernel tunables are different from kubelet defaults. --selinux K3S_SELINUX Enable SELinux in containerd --lb-server-port value K3S_LB_SERVER_PORT Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444)","s":"Node","u":"/cli/agent","h":"#node","p":78},{"i":89,"t":"Flag Default Description --container-runtime-endpoint value N/A Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the cri-docker socket path --pause-image value \"docker.io/rancher/pause:3.1\" Customized pause image for containerd or docker sandbox --private-registry value \"/etc/rancher/k3s/registries.yaml\" Private registry configuration file","s":"Runtime","u":"/cli/agent","h":"#runtime","p":78},{"i":91,"t":"Flag Environment Variable Description --node-ip value, -i value N/A IP address to advertise for node --node-external-ip value N/A External IP address to advertise for node --resolv-conf value K3S_RESOLV_CONF Kubelet resolv.conf file --flannel-iface value N/A Override default flannel interface --flannel-conf value N/A Override default flannel config file --flannel-cni-conf value N/A Override default flannel cni config file","s":"Networking","u":"/cli/agent","h":"#networking","p":78},{"i":93,"t":"Flag Description --kubelet-arg value Customized flag for kubelet process --kube-proxy-arg value Customized flag for kube-proxy process","s":"Customized Flags","u":"/cli/agent","h":"#customized-flags","p":78},{"i":95,"t":"Flag Description --rootless Run rootless --docker Use cri-dockerd instead of containerd --prefer-bundled-bin Prefer bundled userspace binaries over host binaries","s":"Experimental","u":"/cli/agent","h":"#experimental","p":78},{"i":97,"t":"Flag Environment Variable Description --no-flannel N/A Use --flannel-backend=none --cluster-secret value K3S_CLUSTER_SECRET Use --token","s":"Deprecated","u":"/cli/agent","h":"#deprecated","p":78},{"i":99,"t":"K3s agents can be configured with the options --node-label and --node-taint which adds a label and taint to the kubelet. The two options only add labels and/or taints at registration time, so they can only be added once and not changed after that again by running K3s commands. Below is an example showing how to add labels and a taint: --node-label foo=bar \\ --node-label hello=world \\ --node-taint key1=value1:NoExecute If you want to change node labels and taints after node registration you should use kubectl. Refer to the official Kubernetes documentation for details on how to add taints and node labels.","s":"Node Labels and Taints for Agents","u":"/cli/agent","h":"#node-labels-and-taints-for-agents","p":78},{"i":101,"t":"If an option appears in brackets below, for example [$K3S_URL], it means that the option can be passed in as an environment variable of that name. NAME: k3s agent - Run node agent USAGE: k3s agent [OPTIONS] OPTIONS: --config FILE, -c FILE (config) Load configuration from FILE (default: \"/etc/rancher/k3s/config.yaml\") [$K3S_CONFIG_FILE] --debug (logging) Turn on debug logs [$K3S_DEBUG] -v value (logging) Number for the log level verbosity (default: 0) --vmodule value (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value (logging) Log to file --alsologtostderr (logging) Log to standard error as well as file (if set) --token value, -t value (cluster) Token to use for authentication [$K3S_TOKEN] --token-file value (cluster) Token file to use for authentication [$K3S_TOKEN_FILE] --server value, -s value (cluster) Server to connect to [$K3S_URL] --data-dir value, -d value (agent/data) Folder to hold state (default: \"/var/lib/rancher/k3s\") --node-name value (agent/node) Node name [$K3S_NODE_NAME] --with-node-id (agent/node) Append id to node name --node-label value (agent/node) Registering and starting kubelet with set of labels --node-taint value (agent/node) Registering kubelet with set of taints --image-credential-provider-bin-dir value (agent/node) The path to the directory where credential provider plugin binaries are located (default: \"/var/lib/rancher/credentialprovider/bin\") --image-credential-provider-config value (agent/node) The path to the credential provider plugin config file (default: \"/var/lib/rancher/credentialprovider/config.yaml\") --selinux (agent/node) Enable SELinux in containerd [$K3S_SELINUX] --lb-server-port value (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT] --protect-kernel-defaults (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults. --container-runtime-endpoint value (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path --pause-image value (agent/runtime) Customized pause image for containerd or docker sandbox (default: \"rancher/mirrored-pause:3.6\") --snapshotter value (agent/runtime) Override default containerd snapshotter (default: \"overlayfs\") --private-registry value (agent/runtime) Private registry configuration file (default: \"/etc/rancher/k3s/registries.yaml\") --node-ip value, -i value (agent/networking) IPv4/IPv6 addresses to advertise for node --node-external-ip value (agent/networking) IPv4/IPv6 external IP addresses to advertise for node --resolv-conf value (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF] --flannel-iface value (agent/networking) Override default flannel interface --flannel-conf value (agent/networking) Override default flannel config file --flannel-cni-conf value (agent/networking) Override default flannel cni config file --kubelet-arg value (agent/flags) Customized flag for kubelet process --kube-proxy-arg value (agent/flags) Customized flag for kube-proxy process --rootless (experimental) Run rootless --prefer-bundled-bin (experimental) Prefer bundled userspace binaries over host binaries --docker (agent/runtime) (experimental) Use cri-dockerd instead of containerd","s":"K3s Agent CLI Help","u":"/cli/agent","h":"#k3s-agent-cli-help","p":78},{"i":104,"t":"K3s client and server certificates are valid for 365 days from their date of issuance. Any certificates that are expired, or within 90 days of expiring, are automatically renewed every time K3s starts.","s":"Client and Server Certificates","u":"/cli/certificate","h":"#client-and-server-certificates","p":102},{"i":106,"t":"To rotate client and server certificates manually, use the k3s certificate rotate subcommand: # Stop K3s systemctl stop k3s # Rotate certificates k3s certificate rotate # Start K3s systemctl start k3s Individual or lists of certificates can be rotated by specifying the certificate name: k3s certificate rotate --service <SERVICE>,<SERVICE> The following certificates can be rotated: admin, api-server, controller-manager, scheduler, k3s-controller, k3s-server, cloud-controller, etcd, auth-proxy, kubelet, kube-proxy.","s":"Rotating Client and Server Certificates","u":"/cli/certificate","h":"#rotating-client-and-server-certificates","p":102},{"i":108,"t":"Kubernetes requires a number of CA certificates for proper operation. For more information on how Kubernetes uses CA certificates, see the Kubernetes PKI Certificates and Requirements documentation. By default, K3s generates self-signed CA certificates during startup of the first server node. These CA certificates are valid for 10 years from date of issuance, and are not automatically renewed. The authoritative CA certificates and keys are stored within the datastore's bootstrap key, encrypted using the server token as the PBKDF2 passphrase with AES256-GCM and HMAC-SHA1. Copies of the CA certificates and keys are extracted to disk during K3s server startup. Any server may generate leaf certificates for nodes as they join the cluster, and the Kubernetes Certificates API controllers may issue additional certificates at runtime. To rotate CA certificates and keys, use the k3s certificate rotate-ca command. The command performs integrity checks to confirm that the updated certificates and keys are usable. If the updated data is acceptable, the datastore's encrypted bootstrap key is updated, and the new certificates and keys will be used the next time K3s starts. If problems are encountered while validating the certificates and keys, an error is reported to the system log and the operation is cancelled without changes. Version Gate Support for the k3s certificate rotate-ca command and the ability to use CA certificates signed by an external CA is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1).","s":"Certificate Authority (CA) Certificates","u":"/cli/certificate","h":"#certificate-authority-ca-certificates","p":102},{"i":110,"t":"If CA certificates and keys are found the correct location during initial startup of the first server in the cluster, automatic generation of CA certificates will be bypassed. An example script to pre-create the appropriate certificates and keys is available in the K3s repo at contrib/util/generate-custom-ca-certs.sh. This script should be run prior to starting K3s for the first time, and will create a full set of leaf CA certificates signed by common Root and Intermediate CA certificates. If you have an existing Root or Intermediate CA, this script can be used (or used as a starting point) to create the correct CA certificates to provision a K3s cluster with PKI rooted in an existing authority. Custom Certificate Authority files must be placed in /var/lib/rancher/k3s/server/tls. The following files are required: server-ca.crt server-ca.key client-ca.crt client-ca.key request-header-ca.crt request-header-ca.key // note: etcd files are required even if embedded etcd is not in use. etcd/peer-ca.crt etcd/peer-ca.key etcd/server-ca.crt etcd/server-ca.key // note: This is the private key used to sign service-account tokens. It does not have a corresponding certificate. service.key Custom CA Topology​ Custom CA Certificates should observe the following topology: Using the Example Script​ info If you want to sign the cluster CA certificates with an existing root CA using the example script, you must place the root and intermediate files in the target directory prior to running the script. If the files do not exist, the script will create new root and intermediate CA certificates. If you want to use only an existing root CA certificate, provide the following files: root-ca.pem root-ca.key If you want to use existing root and intermediate CA certificates, provide the following files: root-ca.pem intermediate-ca.pem intermediate-ca.key To use the example script to generate custom certs and keys before starting K3s, run the following commands: # Create the target directory for cert generation. mkdir -p /var/lib/rancher/k3s/server/tls # Copy your root CA cert and intermediate CA cert+key into the correct location for the script. # For the purposes of this example, we assume you have existing root and intermediate CA files in /etc/ssl. # If you do not have an existing root and/or intermediate CA, the script will generate them for you. cp /etc/ssl/certs/root-ca.pem /etc/ssl/certs/intermediate-ca.pem /etc/ssl/private/intermediate-ca.key /var/lib/rancher/k3s/server/tls # Generate custom CA certs and keys. curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash - If the command completes successfully, you may install and/or start K3s for the first time. If the script generated root and/or intermediate CA files, you should back up these files so that they can be reused if it is necessary to rotate the CA certificates at a later date.","s":"Using Custom CA Certificates","u":"/cli/certificate","h":"#using-custom-ca-certificates","p":102},{"i":112,"t":"To rotate custom CA certificates, use the k3s certificate rotate-ca subcommand. Updated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates. caution You must not overwrite the currently in-use data in /var/lib/rancher/k3s/server/tls. Stage the updated certificates and keys into a separate directory. A cluster that has been started with custom CA certificates can renew or rotate the CA certificates and keys non-disruptively, as long as the same root CA is used. If a new root CA is required, the rotation will be disruptive. The k3s certificate rotate-ca --force option must be used, all nodes that were joined with a secure token (including servers) will need to be reconfigured to use the new token value, and pods will need to be restarted to trust the new root CA. Using the Example Script​ The example generate-custom-ca-certs.sh script linked above can also be used to generate updated certs in a new temporary directory, by copying files into the correct location and setting the DATA_DIR environment variable. To use the example script to generate updated certs and keys, run the following commands: # Create a temporary directory for cert generation. mkdir -p /opt/k3s/server/tls # Copy your root CA cert and intermediate CA cert+key into the correct location for the script. # Non-disruptive rotation requires the same root CA that was used to generate the original certificates. # If the original files are still in the data directory, you can just run: cp /var/lib/rancher/k3s/server/tls/root-ca.* /var/lib/rancher/k3s/server/tls/intermediate-ca.* /opt/k3s/server/tls # Copy the current service-account signing key, so that existing service-account tokens are not invalidated. cp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls # Generate updated custom CA certs and keys. curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash - # Load the updated CA certs and keys into the datastore. k3s certificate rotate-ca --path=/opt/k3s/server If the rotate-ca command returns an error, check the service log for errors. If the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents. If you used the --force option or changed the root CA, ensure that any nodes that were joined with a secure token are reconfigured to use the new token value, prior to being restarted. The token may be stored in a .env file, systemd unit, or config.yaml, depending on how the node was configured during initial installation.","s":"Rotating Custom CA Certificates","u":"/cli/certificate","h":"#rotating-custom-ca-certificates","p":102},{"i":114,"t":"To rotate the K3s-generated self-signed CA certificates, use the k3s certificate rotate-ca subcommand. Updated files must be staged into a temporary directory, loaded into the datastore, and k3s must be restarted on all nodes to use the updated certificates. caution You must not overwrite the currently in-use data in /var/lib/rancher/k3s/server/tls. Stage the updated certificates and keys into a separate directory. If the cluster has been started with default self-signed CA certificates, rotation will be disruptive. All nodes that were joined with a secure token will need to be reconfigured to trust the new CA hash. If the new CA certificates are not cross-signed by the old CA certificates, you will need to use the --force option to bypass integrity checks, and pods will need to be restarted to trust the new root CA. Default CA Topology​ The default self-signed CA certificates have the following topology: When rotating the default self-signed CAs, a modified certificate topology with intermediate CAs and a new root CA cross-signed by the old CA can be used so that there is a continuous chain of trust between the old and new CAs: Using The Example Script​ An example script to create updated CA certificates and keys cross-signed by the existing CAs is available in the K3s repo at contrib/util/rotate-default-ca-certs.sh. To use the example script to generate updated self-signed certificates that are cross-signed by the existing CAs, run the following commands: # Create updated CA certs and keys, cross-signed by the current CAs. # This script will create a new temporary directory containing the updated certs, and output the new token values. curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash - # Load the updated certs into the datastore; see the script output for the updated token values. k3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca If the rotate-ca command returns an error, check the service log for errors. If the command completes successfully, restart K3s on all nodes in the cluster - servers first, then agents. Ensure that any nodes that were joined with a secure token, including other server nodes, are reconfigured to use the new token value prior to being restarted. The token may be stored in a .env file, systemd unit, or config.yaml, depending on how the node was configured during initial installation.","s":"Rotating Self-Signed CA Certificates","u":"/cli/certificate","h":"#rotating-self-signed-ca-certificates","p":102},{"i":116,"t":"The service-account issuer key is an RSA private key used to sign service-account tokens. When rotating the service-account issuer key, at least one old key should be retained in the file so that existing service-account tokens are not invalidated. It can be rotated independent of the cluster CAs by using the k3s certificate rotate-ca to install only an updated service.key file that includes both the new and old keys. caution You must not overwrite the currently in-use data in /var/lib/rancher/k3s/server/tls. Stage the updated key into a separate directory. For example, to rotate only the service-account issuer key, run the following commands: # Create a temporary directory for cert generation mkdir -p /opt/k3s/server/tls # Check OpenSSL version openssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional # Generate a new key openssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048 # Append the existing key to avoid invalidating current tokens cat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key # Load the updated key into the datastore k3s certificate rotate-ca --path=/opt/k3s/server It is normal to see warnings for files that are not being updated. If the rotate-ca command returns an error, check the service log for errors. If the command completes successfully, restart K3s on all servers in the cluster. It is not necessary to restart agents or restart any pods.","s":"Service-Account Issuer Key Rotation","u":"/cli/certificate","h":"#service-account-issuer-key-rotation","p":102},{"i":118,"t":"Version Gate Available as of v1.19.1+k3s1 In this section, you'll learn how to create backups of the K3s embedded etcd datastore, and to restore the cluster from backup. Creating Snapshots​ Snapshots are enabled by default, at 00:00 and 12:00 system time, with 5 snapshots retained. To configure the snapshot interval or the number of retained snapshots, refer to the options. The snapshot directory defaults to ${data-dir}/server/db/snapshots. The data-dir value defaults to /var/lib/rancher/k3s and can be changed by setting the --data-dir flag. Restoring a Cluster from a Snapshot​ When K3s is restored from backup, the old data directory will be moved to ${data-dir}/server/db/etcd-old/. Then K3s will attempt to restore the snapshot by creating a new data directory, then starting etcd with a new K3s cluster with one etcd member. To restore the cluster from backup: Single Server High Availability Run K3s with the --cluster-reset option, with the --cluster-reset-restore-path also given: k3s server \\ --cluster-reset \\ --cluster-reset-restore-path=<PATH-TO-SNAPSHOT> Result: A message in the logs says that K3s can be restarted without the flags. Start k3s again and should run successfully and be restored from the specified snapshot. In this example there are 3 servers, S1, S2, and S3. The snapshot is located on S1. On S1, start K3s with the --cluster-reset option, with the --cluster-reset-restore-path also given: k3s server \\ --cluster-reset \\ --cluster-reset-restore-path=<PATH-TO-SNAPSHOT> Result: A message in the logs says that K3s can be restarted without the flags. On S2 and S3, stop K3s. Then delete the data directory, /var/lib/rancher/k3s/server/db/: systemctl stop k3s rm -rf /var/lib/rancher/k3s/server/db/ On S1, start K3s again: systemctl start k3s On S2 and S3, start K3s again to join the restored cluster: systemctl start k3s Options​ These options can be passed in with the command line, or in the configuration file, which may be easier to use. Options Description --etcd-disable-snapshots Disable automatic etcd snapshots --etcd-snapshot-schedule-cron value Snapshot interval time in cron spec. eg. every 5 hours 0 */5 * * *(default: 0 */12 * * *) --etcd-snapshot-retention value Number of snapshots to retain (default: 5) --etcd-snapshot-dir value Directory to save db snapshots. (Default location: ${data-dir}/db/snapshots) --cluster-reset Forget all peers and become sole member of a new cluster. This can also be set with the environment variable [$K3S_CLUSTER_RESET]. --cluster-reset-restore-path value Path to snapshot file to be restored S3 Compatible API Support​ K3s supports writing etcd snapshots to and restoring etcd snapshots from systems with S3-compatible APIs. S3 support is available for both on-demand and scheduled snapshots. The arguments below have been added to the server subcommand. These flags exist for the etcd-snapshot subcommand as well however the --etcd-s3 portion is removed to avoid redundancy. Options Description --etcd-s3 Enable backup to S3 --etcd-s3-endpoint S3 endpoint url --etcd-s3-endpoint-ca S3 custom CA cert to connect to S3 endpoint --etcd-s3-skip-ssl-verify Disables S3 SSL certificate validation --etcd-s3-access-key S3 access key --etcd-s3-secret-key S3 secret key --etcd-s3-bucket S3 bucket name --etcd-s3-region S3 region / bucket location (optional). defaults to us-east-1 --etcd-s3-folder S3 folder To perform an on-demand etcd snapshot and save it to S3: k3s etcd-snapshot \\ --s3 \\ --s3-bucket=<S3-BUCKET-NAME> \\ --s3-access-key=<S3-ACCESS-KEY> \\ --s3-secret-key=<S3-SECRET-KEY> To perform an on-demand etcd snapshot restore from S3, first make sure that K3s isn't running. Then run the following commands: k3s server \\ --cluster-init \\ --cluster-reset \\ --etcd-s3 \\ --cluster-reset-restore-path=<SNAPSHOT-NAME> \\ --etcd-s3-bucket=<S3-BUCKET-NAME> \\ --etcd-s3-access-key=<S3-ACCESS-KEY> \\ --etcd-s3-secret-key=<S3-SECRET-KEY> Etcd Snapshot and Restore Subcommands​ k3s supports a set of subcommands for working with your etcd snapshots. Subcommand Description delete Delete given snapshot(s) ls, list, l List snapshots prune Remove snapshots that exceed the configured retention count save Trigger an immediate etcd snapshot note The save subcommand is the same as k3s etcd-snapshot. The latter will eventually be deprecated in favor of the former. These commands will perform as expected whether the etcd snapshots are stored locally or in an S3 compatible object store. For additional information on the etcd snapshot subcommands, run k3s etcd-snapshot. Delete a snapshot from S3. k3s etcd-snapshot delete \\ --s3 \\ --s3-bucket=<S3-BUCKET-NAME> \\ --s3-access-key=<S3-ACCESS-KEY> \\ --s3-secret-key=<S3-SECRET-KEY> \\ <SNAPSHOT-NAME> Prune local snapshots with the default retention policy (5). The prune subcommand takes an additional flag --snapshot-retention that allows for overriding the default retention policy. k3s etcd-snapshot prune k3s etcd-snapshot prune --snapshot-retention 10","s":"k3s etcd-snapshot","u":"/cli/etcd-snapshot","h":"","p":117},{"i":120,"t":"K3s supports enabling secrets encryption at rest. For more information, see Secrets Encryption.","s":"k3s secrets-encrypt","u":"/cli/secrets-encrypt","h":"","p":119},{"i":122,"t":"Version Gate Available as of v1.21.8+k3s1 K3s contains a CLI tool secrets-encrypt, which enables automatic control over the following: Disabling/Enabling secrets encryption Adding new encryption keys Rotating and deleting encryption keys Reencrypting secrets caution Failure to follow proper procedure for rotating encryption keys can leave your cluster permanently corrupted. Proceed with caution.","s":"Secrets Encryption Tool","u":"/cli/secrets-encrypt","h":"#secrets-encryption-tool","p":119},{"i":124,"t":"Single-Server High-Availability To rotate secrets encryption keys on a single-server cluster: Start the K3s server with the flag --secrets-encryption note Starting K3s without encryption and enabling it at a later time is currently not supported. Prepare k3s secrets-encrypt prepare Kill and restart the K3s server with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Rotate k3s secrets-encrypt rotate Kill and restart the K3s server with same arguments Reencrypt info K3s will reencrypt ~5 secrets per second. Clusters with large # of secrets can take several minutes to reencrypt. k3s secrets-encrypt reencrypt The steps are the same for both embedded DB and external DB clusters. To rotate secrets encryption keys on HA setups: Notes Starting K3s without encryption and enabling it at a later time is currently not supported. While not required, it is recommended that you pick one server node from which to run the secrets-encrypt commands. Start up all three K3s servers with the --secrets-encryption flag. For brevity, the servers will be referred to as S1, S2, S3. Prepare on S1 k3s secrets-encrypt prepare Kill and restart S1 with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Once S1 is up, kill and restart the S2 and S3 Rotate on S1 k3s secrets-encrypt rotate Kill and restart S1 with same arguments Once S1 is up, kill and restart the S2 and S3 Reencrypt on S1 info K3s will reencrypt ~5 secrets per second. Clusters with large # of secrets can take several minutes to reencrypt. k3s secrets-encrypt reencrypt Kill and restart S1 with same arguments Once S1 is up, kill and restart the S2 and S3","s":"Encryption Key Rotation","u":"/cli/secrets-encrypt","h":"#encryption-key-rotation","p":119},{"i":126,"t":"Single-Server High-Availability After launching a server with --secrets-encryption flag, secrets encryption can be disabled. To disable secrets encryption on a single-node cluster: Disable k3s secrets-encrypt disable Kill and restart the K3s server with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Reencrypt with flags k3s secrets-encrypt reencrypt --force --skip To re-enable secrets encryption on a single node cluster: Enable k3s secrets-encrypt enable Kill and restart the K3s server with same arguments Reencrypt with flags k3s secrets-encrypt reencrypt --force --skip After launching a HA cluster with --secrets-encryption flags, secrets encryption can be disabled. note While not required, it is recommended that you pick one server node from which to run the secrets-encrypt commands. For brevity, the three servers used in this guide will be referred to as S1, S2, S3. To disable secrets encryption on a HA cluster: Disable on S1 k3s secrets-encrypt disable Kill and restart S1 with same arguments. If running K3s as a service: # If using systemd systemctl restart k3s # If using openrc rc-service k3s restart Once S1 is up, kill and restart the S2 and S3 Reencrypt with flags on S1 k3s secrets-encrypt reencrypt --force --skip To re-enable secrets encryption on a HA cluster: Enable on S1 k3s secrets-encrypt enable Kill and restart S1 with same arguments Once S1 is up, kill and restart the S2 and S3 Reencrypt with flags on S1 k3s secrets-encrypt reencrypt --force --skip","s":"Secrets Encryption Disable/Enable","u":"/cli/secrets-encrypt","h":"#secrets-encryption-disableenable","p":119},{"i":128,"t":"The secrets-encrypt tool includes a status command that displays information about the current status of secrets encryption on the node. An example of the command on a single-server node: $ k3s secrets-encrypt status Encryption Status: Enabled Current Rotation Stage: start Server Encryption Hashes: All hashes match Active Key Type Name ------ -------- ---- * AES-CBC aescbckey Another example on HA cluster, after rotating the keys, but before restarting the servers: $ k3s secrets-encrypt status Encryption Status: Enabled Current Rotation Stage: rotate Server Encryption Hashes: hash does not match between node-1 and node-2 Active Key Type Name ------ -------- ---- * AES-CBC aescbckey-2021-12-10T22:54:38Z AES-CBC aescbckey Details on each section are as follows: Encryption Status: Displayed whether secrets encryption is disabled or enabled on the node Current Rotation Stage: Indicates the current rotation stage on the node. Stages are: start, prepare, rotate, reencrypt_request, reencrypt_active, reencrypt_finished Server Encryption Hashes: Useful for HA clusters, this indicates whether all servers are on the same stage with their local files. This can be used to identify whether a restart of servers is required before proceeding to the next stage. In the HA example above, node-1 and node-2 have different hashes, indicating that they currently do not have the same encryption configuration. Restarting the servers will sync up their configuration. Key Table: Summarizes information about the secrets encryption keys found on the node. Active: The \"*\" indicates which, if any, of the keys are currently used for secrets encryption. An active key is used by Kubernetes to encrypt any new secrets. Key Type: All keys using this tool are AES-CBC type. See more info here. Name: Name of the encryption key.","s":"Secrets Encryption Status","u":"/cli/secrets-encrypt","h":"#secrets-encryption-status","p":119},{"i":130,"t":"In this section, you'll learn how to configure the K3s server. Note that servers also run an agent, so all of the configuration options listed in the k3s agent documentation are also supported on servers. Options are documented on this page as CLI flags, but can also be passed as configuration file options. See the Configuration File documentation for more information on using YAML configuration files.","s":"k3s server","u":"/cli/server","h":"","p":129},{"i":132,"t":"The following options must be set to the same value on all servers in the cluster. Failure to do so will cause new servers to fail to join the cluster when using embedded etcd, or incorrect operation of the cluster when using an external datastore. --agent-token --cluster-cidr --cluster-dns --cluster-domain --disable-cloud-controller --disable-helm-controller --disable-network-policy --disable-servicelb --egress-selector-mode --flannel-backend --flannel-external-ip --flannel-ipv6-masq --secrets-encryption --service-cidr","s":"Critical Configuration Values","u":"/cli/server","h":"#critical-configuration-values","p":129},{"i":135,"t":"Flag Environment Variable Description --datastore-endpoint value K3S_DATASTORE_ENDPOINT Specify etcd, Mysql, Postgres, or Sqlite (default) data source name --datastore-cafile value K3S_DATASTORE_CAFILE TLS Certificate Authority file used to secure datastore backend communication --datastore-certfile value K3S_DATASTORE_CERTFILE TLS certification file used to secure datastore backend communication --datastore-keyfile value K3S_DATASTORE_KEYFILE TLS key file used to secure datastore backend communication --etcd-expose-metrics N/A Expose etcd metrics to client interface (default: false) --etcd-disable-snapshots N/A Disable automatic etcd snapshots --etcd-snapshot-name value N/A Set the base name of etcd snapshots. Default: etcd-snapshot-<unix-timestamp> (default:\"etcd-snapshot\") --etcd-snapshot-schedule-cron value N/A Snapshot interval time in cron spec. eg. every 5 hours '0 /5 * ' (default: \"0 /12 * * *\") --etcd-snapshot-retention value N/A Number of snapshots to retain (default: 5) --etcd-snapshot-dir value N/A Directory to save db snapshots (default: ${data-dir}/db/snapshots) --etcd-s3 N/A Enable backup to S3 --etcd-s3-endpoint value N/A S3 endpoint url (default: \"s3.amazonaws.com\") --etcd-s3-endpoint-ca value N/A S3 custom CA cert to connect to S3 endpoint --etcd-s3-skip-ssl-verify N/A Disables S3 SSL certificate validation --etcd-s3-access-key value AWS_ACCESS_KEY_ID S3 access key --etcd-s3-secret-key value AWS_SECRET_ACCESS_KEY S3 secret key --etcd-s3-bucket value N/A S3 bucket name --etcd-s3-region value N/A S3 region / bucket location (optional) (default: \"us-east-1\") --etcd-s3-folder value N/A S3 folder --etcd-s3-insecure Disables S3 over HTTPS --etcd-s3-timeout value S3 timeout (default: 5m0s)","s":"Database","u":"/cli/server","h":"#database","p":129},{"i":137,"t":"Flag Environment Variable Description --token value, -t value K3S_TOKEN Shared secret used to join a server or agent to a cluster --token-file value K3S_TOKEN_FILE File containing the cluster-secret/token --agent-token value K3S_AGENT_TOKEN Shared secret used to join agents to the cluster, but not servers --agent-token-file value K3S_AGENT_TOKEN_FILE File containing the agent secret --server value K3S_URL Server to connect to, used to join a cluster --cluster-init K3S_CLUSTER_INIT Initialize a new cluster using embedded Etcd --cluster-reset K3S_CLUSTER_RESET Forget all peers and become sole member of a new cluster","s":"Cluster Options","u":"/cli/server","h":"#cluster-options","p":129},{"i":139,"t":"Flag Environment Variable Description --write-kubeconfig value, -o value K3S_KUBECONFIG_OUTPUT Write kubeconfig for admin client to this file --write-kubeconfig-mode value K3S_KUBECONFIG_MODE Write kubeconfig with this mode. The kubeconfig file is owned by root, and written with a default mode of 600. Changing the mode to 644 will allow it to be read by other unprivileged users on the host.","s":"Admin Kubeconfig Options","u":"/cli/server","h":"#admin-kubeconfig-options","p":129},{"i":142,"t":"Flag Default Description --debug N/A Turn on debug logs -v value 0 Number for the log level verbosity --vmodule value N/A Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value N/A Log to file --alsologtostderr N/A Log to standard error as well as file (if set)","s":"Logging","u":"/cli/server","h":"#logging","p":129},{"i":144,"t":"Flag Default Description --bind-address value 0.0.0.0 k3s bind address --https-listen-port value 6443 HTTPS listen port --advertise-address value node-external-ip/node-ip IPv4 address that apiserver uses to advertise to members of the cluster --advertise-port value listen-port/0 Port that apiserver uses to advertise to members of the cluster --tls-san value N/A Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the TLS cert","s":"Listeners","u":"/cli/server","h":"#listeners","p":129},{"i":146,"t":"Flag Default Description --data-dir value, -d value /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root Folder to hold state","s":"Data","u":"/cli/server","h":"#data","p":129},{"i":148,"t":"Flag Default Description --secrets-encryption false Enable Secret encryption at rest","s":"Secrets Encryption","u":"/cli/server","h":"#secrets-encryption","p":129},{"i":150,"t":"Flag Default Description --cluster-cidr value \"10.42.0.0/16\" IPv4/IPv6 network CIDRs to use for pod IPs --service-cidr value \"10.43.0.0/16\" IPv4/IPv6 network CIDRs to use for service IPs --service-node-port-range value \"30000-32767\" Port range to reserve for services with NodePort visibility --cluster-dns value \"10.43.0.10\" IPv4 Cluster IP for coredns service. Should be in your service-cidr range --cluster-domain value \"cluster.local\" Cluster Domain --flannel-backend value \"vxlan\" One of 'none', 'vxlan', 'ipsec'(deprecated), 'host-gw', 'wireguard-native', or 'wireguard'(deprecated) --flannel-ipv6-masq \"N/A\" Enable IPv6 masquerading for pod --flannel-external-ip \"N/A\" Use node external IP addresses for Flannel traffic --servicelb-namespace value \"kube-system\" Namespace of the pods for the servicelb component --egress-selector-mode value \"agent\" Must be one of the following: disabled: The apiserver does not use agent tunnels to communicate with nodes. Requires that servers run agents, and have direct connectivity to the kubelet on agents, or the apiserver will not be able to function access service endpoints or perform kubectl exec and kubectl logs. agent: The apiserver uses agent tunnels to communicate with nodes. Nodes allow the tunnel connection from loopback addresses. Requires that servers also run agents, or the apiserver will not be able to access service endpoints. The historical default for k3s. pod: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Nodes. Nodes allow the tunnel connection from loopback addresses, or a CIDR assigned to their node. cluster: The apiserver uses agent tunnels to communicate with nodes and service endpoints, routing endpoint connections to the correct agent by watching Endpoints. Nodes allow the tunnel connection from loopback addresses, or the configured cluster CIDR range.","s":"Networking","u":"/cli/server","h":"#networking","p":129},{"i":152,"t":"Flag Description --default-local-storage-path value Default local storage path for local provisioner storage class","s":"Storage Class","u":"/cli/server","h":"#storage-class","p":129},{"i":154,"t":"Flag Description --disable value See \"Using the --disable flag\" --disable-scheduler Disable Kubernetes default scheduler --disable-cloud-controller Disable k3s default cloud controller manager --disable-kube-proxy Disable running kube-proxy --disable-network-policy Disable k3s default network policy controller --disable-helm-controller Disable Helm controller","s":"Kubernetes Components","u":"/cli/server","h":"#kubernetes-components","p":129},{"i":156,"t":"Flag Description --etcd-arg value Customized flag for etcd process --kube-apiserver-arg value Customized flag for kube-apiserver process --kube-scheduler-arg value Customized flag for kube-scheduler process --kube-controller-manager-arg value Customized flag for kube-controller-manager process --kube-cloud-controller-manager-arg value Customized flag for kube-cloud-controller-manager process --kubelet-arg value Customized flag for kubelet process --kube-proxy-arg value Customized flag for kube-proxy process","s":"Customized Flags for Kubernetes Processes","u":"/cli/server","h":"#customized-flags-for-kubernetes-processes","p":129},{"i":158,"t":"Flag Description --rootless Run rootless --enable-pprof Enable pprof endpoint on supervisor port --docker Use cri-dockerd instead of containerd --prefer-bundled-bin Prefer bundled userspace binaries over host binaries --disable-agent See \"Running Agentless Servers (Experimental)\"","s":"Experimental Options","u":"/cli/server","h":"#experimental-options","p":129},{"i":160,"t":"Flag Environment Variable Description --no-flannel N/A Use --flannel-backend=none --no-deploy value N/A Use --disable --cluster-secret value K3S_CLUSTER_SECRET Use --token --flannel-backend wireguard N/A Use --flannel-backend=wireguard-native --flannel-backend value=option1=value N/A Use --flannel-conf to specify the flannel config file with the backend config","s":"Deprecated Options","u":"/cli/server","h":"#deprecated-options","p":129},{"i":162,"t":"If an option appears in brackets below, for example [$K3S_TOKEN], it means that the option can be passed in as an environment variable of that name. NAME: k3s server - Run management server USAGE: k3s server [OPTIONS] OPTIONS: --config FILE, -c FILE (config) Load configuration from FILE (default: \"/etc/rancher/k3s/config.yaml\") [$K3S_CONFIG_FILE] --debug (logging) Turn on debug logs [$K3S_DEBUG] -v value (logging) Number for the log level verbosity (default: 0) --vmodule value (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value (logging) Log to file --alsologtostderr (logging) Log to standard error as well as file (if set) --bind-address value (listener) k3s bind address (default: 0.0.0.0) --https-listen-port value (listener) HTTPS listen port (default: 6443) --advertise-address value (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip) --advertise-port value (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0) --tls-san value (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert --data-dir value, -d value (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root) --cluster-cidr value (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16) --service-cidr value (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16) --service-node-port-range value (networking) Port range to reserve for services with NodePort visibility (default: \"30000-32767\") --cluster-dns value (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10) --cluster-domain value (networking) Cluster Domain (default: \"cluster.local\") --flannel-backend value (networking) backend<=option1=val1,option2=val2> where backend is one of 'none', 'vxlan', 'ipsec' (deprecated), 'host-gw', 'wireguard-native', 'wireguard' (deprecated) (default: \"vxlan\") --flannel-ipv6-masq (networking) Enable IPv6 masquerading for pod --flannel-external-ip (networking) Use node external IP addresses for Flannel traffic --egress-selector-mode value (networking) One of 'agent', 'cluster', 'pod', 'disabled' (default: \"agent\") --servicelb-namespace value (networking) Namespace of the pods for the servicelb component (default: \"kube-system\") --write-kubeconfig value, -o value (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT] --write-kubeconfig-mode value (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE] --token value, -t value (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN] --token-file value (cluster) File containing the token [$K3S_TOKEN_FILE] --agent-token value (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN] --agent-token-file value (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE] --server value, -s value (cluster) Server to connect to, used to join a cluster [$K3S_URL] --cluster-init (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT] --cluster-reset (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET] --cluster-reset-restore-path value (db) Path to snapshot file to be restored --kube-apiserver-arg value (flags) Customized flag for kube-apiserver process --etcd-arg value (flags) Customized flag for etcd process --kube-controller-manager-arg value (flags) Customized flag for kube-controller-manager process --kube-scheduler-arg value (flags) Customized flag for kube-scheduler process --kube-cloud-controller-manager-arg value (flags) Customized flag for kube-cloud-controller-manager process --datastore-endpoint value (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT] --datastore-cafile value (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE] --datastore-certfile value (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE] --datastore-keyfile value (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE] --etcd-expose-metrics (db) Expose etcd metrics to client interface. (default: false) --etcd-disable-snapshots (db) Disable automatic etcd snapshots --etcd-snapshot-name value (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: \"etcd-snapshot\") --etcd-snapshot-schedule-cron value (db) Snapshot interval time in cron spec. eg. every 5 hours '* */5 * * *' (default: \"0 */12 * * *\") --etcd-snapshot-retention value (db) Number of snapshots to retain (default: 5) --etcd-snapshot-dir value (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots) --etcd-snapshot-compress (db) Compress etcd snapshot --etcd-s3 (db) Enable backup to S3 --etcd-s3-endpoint value (db) S3 endpoint url (default: \"s3.amazonaws.com\") --etcd-s3-endpoint-ca value (db) S3 custom CA cert to connect to S3 endpoint --etcd-s3-skip-ssl-verify (db) Disables S3 SSL certificate validation --etcd-s3-access-key value (db) S3 access key [$AWS_ACCESS_KEY_ID] --etcd-s3-secret-key value (db) S3 secret key [$AWS_SECRET_ACCESS_KEY] --etcd-s3-bucket value (db) S3 bucket name --etcd-s3-region value (db) S3 region / bucket location (optional) (default: \"us-east-1\") --etcd-s3-folder value (db) S3 folder --etcd-s3-insecure (db) Disables S3 over HTTPS --etcd-s3-timeout value (db) S3 timeout (default: 5m0s) --default-local-storage-path value (storage) Default local storage path for local provisioner storage class --disable value (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server) --disable-scheduler (components) Disable Kubernetes default scheduler --disable-cloud-controller (components) Disable k3s default cloud controller manager --disable-kube-proxy (components) Disable running kube-proxy --disable-network-policy (components) Disable k3s default network policy controller --disable-helm-controller (components) Disable Helm controller --node-name value (agent/node) Node name [$K3S_NODE_NAME] --with-node-id (agent/node) Append id to node name --node-label value (agent/node) Registering and starting kubelet with set of labels --node-taint value (agent/node) Registering kubelet with set of taints --image-credential-provider-bin-dir value (agent/node) The path to the directory where credential provider plugin binaries are located (default: \"/var/lib/rancher/credentialprovider/bin\") --image-credential-provider-config value (agent/node) The path to the credential provider plugin config file (default: \"/var/lib/rancher/credentialprovider/config.yaml\") --docker (agent/runtime) (experimental) Use cri-dockerd instead of containerd --container-runtime-endpoint value (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path --pause-image value (agent/runtime) Customized pause image for containerd or docker sandbox (default: \"rancher/mirrored-pause:3.6\") --snapshotter value (agent/runtime) Override default containerd snapshotter (default: \"overlayfs\") --private-registry value (agent/runtime) Private registry configuration file (default: \"/etc/rancher/k3s/registries.yaml\") --system-default-registry value (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY] --node-ip value, -i value (agent/networking) IPv4/IPv6 addresses to advertise for node --node-external-ip value (agent/networking) IPv4/IPv6 external IP addresses to advertise for node --resolv-conf value (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF] --flannel-iface value (agent/networking) Override default flannel interface --flannel-conf value (agent/networking) Override default flannel config file --flannel-cni-conf value (agent/networking) Override default flannel cni config file --kubelet-arg value (agent/flags) Customized flag for kubelet process --kube-proxy-arg value (agent/flags) Customized flag for kube-proxy process --protect-kernel-defaults (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults. --secrets-encryption Enable secret encryption at rest --enable-pprof (experimental) Enable pprof endpoint on supervisor port --rootless (experimental) Run rootless --prefer-bundled-bin (experimental) Prefer bundled userspace binaries over host binaries --selinux (agent/node) Enable SELinux in containerd [$K3S_SELINUX] --lb-server-port value (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer. (default: 6444) [$K3S_LB_SERVER_PORT]","s":"K3s Server CLI Help","u":"/cli/server","h":"","p":129},{"i":164,"t":"K3s uses tokens to secure the node join process. Tokens authenticate the cluster to the joining node, and the node to the cluster.","s":"k3s token","u":"/cli/token","h":"","p":163},{"i":166,"t":"K3s tokens can be specified in either secure or short format. The secure format is preferred, as it enables the client to authenticate the identity of the cluster it is joining, before sending credentials.","s":"Token Format","u":"/cli/token","h":"#token-format","p":163},{"i":168,"t":"The secure token format (occasionally referred to as a \"full\" token) contains the following parts: <prefix><cluster CA hash>::<credentials> prefix: a fixed K10 prefix that identifies the token format cluster CA hash: The hash of the cluster's server CA certificate, used to authenticate the server to the joining node. For self-signed CA certificates, this is the SHA256 sum of the PEM-formatted certificate, as stored on disk. For custom CA certificates, this is the SHA256 sum of the DER encoding of the root certificate; commonly known as the certificate fingerprint. credentials: The username and password, or bearer token, used to authenticate the joining node to the cluster. TLS Bootstrapping​ When a secure token is specified, the joining node performs the following steps to validate the identity of the server it has connected to, before transmitting credentials: With TLS verification disabled, download the CA bundle from /cacerts on the server it is joining. Calculate the SHA256 hash of the CA certificate, as described above. Compare the calculated SHA256 hash to the hash from the token. If the hash matches, validate that the certificate presented by the server can be validated by the server's CA bundle. If the server certificate is valid, present credentials to join the cluster using either basic or bearer token authentication, depending on the token type.","s":"Secure","u":"/cli/token","h":"#secure","p":163},{"i":170,"t":"The short token format includes only the password or bearer token used to authenticate the joining node to the cluster. If a short token is used, the joining node implicitly trusts the CA bundle presented by the server; steps 2-4 in the TLS Bootstrapping process are skipped. The initial connection may be vulnerable to man-in-the-middle attack.","s":"Short","u":"/cli/token","h":"#short","p":163},{"i":172,"t":"K3s supports three types of tokens. Only the server token is available by default; additional token types must be configured or created by the administrator. Type CLI Option Environment Variable Server --token K3S_TOKEN Agent --agent-token K3S_AGENT_TOKEN Bootstrap n/a n/a","s":"Token Types","u":"/cli/token","h":"#token-types","p":163},{"i":174,"t":"If no token is provided when starting the first server in the cluster, one is created with a random password. The server token is always written to /var/lib/rancher/k3s/server/token, in secure format. The server token can be used to join both server and agent nodes to the cluster. It cannot be changed once the cluster has been created, and anyone with access to the server token essentially has full administrator access to the cluster. This token should be guarded carefully. The server token is also used as the PBKDF2 passphrase for the key used to encrypt confidential information that is persisted to the datastore, such as the secrets-encryption configuration, wireguard keys, and private keys for cluster CA certificates and service-account tokens. For this reason, the token must be backed up alongside the cluster datastore itself. caution Unless custom CA certificates are in use, only the short (password-only) token format can be used when starting the first server in the cluster. This is because the cluster CA hash cannot be known until after the server has generated the self-signed cluster CA certificates. For more information on using custom CA certificates, see the k3s certificate documentation. For more information on backing up your cluster, see the Backup and Restore documentation.","s":"Server","u":"/cli/token","h":"#server","p":163},{"i":176,"t":"By default, the agent token is the same as the server token. The agent token can be set before or after the cluster has been started, by changing the CLI option or environment variable on all servers in the cluster. The agent token is similar to the server token in that is it statically configured, and does not expire. The agent token is written to /var/lib/rancher/k3s/server/agent-token, in secure format. If no agent token is specified, this file is a link to the server token.","s":"Agent","u":"/cli/token","h":"#agent","p":163},{"i":178,"t":"Version Gate Support for the k3s token command and the ability to join nodes with bootstrap tokens is available starting with the 2023-02 releases (v1.26.2+k3s1, v1.25.7+k3s1, v1.24.11+k3s1, v1.23.17+k3s1). K3s supports dynamically generated, automatically expiring agent bootstrap tokens. Bootstrap tokens can only be used to join agents.","s":"Bootstrap","u":"/cli/token","h":"#bootstrap","p":163},{"i":179,"t":"K3s bootstrap tokens use the same generation and validation code as kubeadm token bootstrap tokens, and the k3s token CLI is similar. NAME: k3s token - Manage bootstrap tokens USAGE: k3s token command [command options] [arguments...] COMMANDS: create Create bootstrap tokens on the server delete Delete bootstrap tokens on the server generate Generate and print a bootstrap token, but do not create it on the server list List bootstrap tokens on the server OPTIONS: --help, -h show help k3s token create [token]​ Create a new token. The [token] is the actual token to write, as generated by k3s token generate. If no token is given, a random one will be generated. A token in secure format, including the cluster CA hash, will be written to stdout. The output of this command should be saved, as the secret portion of the token cannot be shown again. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] --description value A human friendly description of how this token is used --groups value Extra groups that this token will authenticate as when used for authentication. (default: Default: \"system:bootstrappers:k3s:default-node-token\") --ttl value The duration before the token is automatically deleted (e.g. 1s, 2m, 3h). If set to '0', the token will never expire (default: 24h0m0s) --usages value Describes the ways in which this token can be used. (default: \"signing,authentication\") k3s token delete​ Delete one or more tokens. The full token can be provided, or just the token ID. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] k3s token generate​ Generate a randomly-generated bootstrap token. You don't have to use this command in order to generate a token. You can do so yourself as long as it is in the format \"[a-z0-9]{6}.[a-z0-9]{16}\", where the first portion is the token ID, and the second portion is the secret. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] k3s token list​ List bootstrap tokens, showing their ID, description, and remaining time-to-live. Flag Description --data-dir value (data) Folder to hold state default /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root --kubeconfig value (cluster) Server to connect to [$KUBECONFIG] --output value Output format. Valid options: text, json (default: \"text\")","s":"k3s token","u":"/cli/token","h":"#k3s-token-1","p":163},{"i":181,"t":"The kubeconfig file stored at /etc/rancher/k3s/k3s.yaml is used to configure access to the Kubernetes cluster. If you have installed upstream Kubernetes command line tools such as kubectl or helm you will need to configure them with the correct kubeconfig path. This can be done by either exporting the KUBECONFIG environment variable or by invoking the --kubeconfig command line flag. Refer to the examples below for details. Leverage the KUBECONFIG environment variable: export KUBECONFIG=/etc/rancher/k3s/k3s.yaml kubectl get pods --all-namespaces helm ls --all-namespaces Or specify the location of the kubeconfig file in the command: kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces helm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces","s":"Cluster Access","u":"/cluster-access","h":"","p":180},{"i":183,"t":"Copy /etc/rancher/k3s/k3s.yaml on your machine located outside the cluster as ~/.kube/config. Then replace the value of the server field with the IP or name of your K3s server. kubectl can now manage your K3s cluster.","s":"Accessing the Cluster from Outside with kubectl","u":"/cluster-access","h":"#accessing-the-cluster-from-outside-with-kubectl","p":180},{"i":185,"t":"The ability to run Kubernetes using a datastore other than etcd sets K3s apart from other Kubernetes distributions. This feature provides flexibility to Kubernetes operators. The available datastore options allow you to select a datastore that best fits your use case. For example: If your team doesn't have expertise in operating etcd, you can choose an enterprise-grade SQL database like MySQL or PostgreSQL If you need to run a simple, short-lived cluster in your CI/CD environment, you can use the embedded SQLite database If you wish to deploy Kubernetes on the edge and require a highly available solution but can't afford the operational overhead of managing a database at the edge, you can use K3s's embedded HA datastore built on top of embedded etcd. K3s supports the following datastore options: Embedded SQLite SQLite cannot be used on clusters with multiple servers. SQLite is the default datastore, and will be used if no other datastore configuration is present, and no embedded etcd database files are present on disk. Embedded etcd See the High Availability Embedded etcd documentation for more information on using embedded etcd with multiple servers. Embedded etcd will be automatically selected if K3s is configured to initialize a new etcd cluster, join an existing etcd cluster, or if etcd database files are present on disk during startup. External Database See the High Availability External DB documentation for more information on using external datastores with multiple servers. The following external datastores are supported: etcd (certified against version 3.5.4) MySQL (certified against versions 5.7 and 8.0) MariaDB (certified against version 10.6.8) PostgreSQL (certified against versions 10.7, 11.5, and 14.2) Prepared Statement Support K3s requires prepared statements support from the DB. This means that connection poolers such as PgBouncer will not work with K3s.","s":"Cluster Datastore","u":"/datastore","h":"","p":184},{"i":187,"t":"If you wish to use an external datastore such as PostgreSQL, MySQL, or etcd you must set the datastore-endpoint parameter so that K3s knows how to connect to it. You may also specify parameters to configure the authentication and encryption of the connection. The below table summarizes these parameters, which can be passed as either CLI flags or environment variables. CLI Flag Environment Variable Description --datastore-endpoint K3S_DATASTORE_ENDPOINT Specify a PostgreSQL, MySQL, or etcd connection string. This is a string used to describe the connection to the datastore. The structure of this string is specific to each backend and is detailed below. --datastore-cafile K3S_DATASTORE_CAFILE TLS Certificate Authority (CA) file used to help secure communication with the datastore. If your datastore serves requests over TLS using a certificate signed by a custom certificate authority, you can specify that CA using this parameter so that the K3s client can properly verify the certificate. --datastore-certfile K3S_DATASTORE_CERTFILE TLS certificate file used for client certificate based authentication to your datastore. To use this feature, your datastore must be configured to support client certificate based authentication. If you specify this parameter, you must also specify the datastore-keyfile parameter. --datastore-keyfile K3S_DATASTORE_KEYFILE TLS key file used for client certificate based authentication to your datastore. See the previous datastore-certfile parameter for more details. As a best practice we recommend setting these parameters as environment variables rather than command line arguments so that your database credentials or other sensitive information aren't exposed as part of the process info.","s":"External Datastore Configuration Parameters","u":"/datastore","h":"#external-datastore-configuration-parameters","p":184},{"i":189,"t":"As mentioned, the format of the value passed to the datastore-endpoint parameter is dependent upon the datastore backend. The following details this format and functionality for each supported external datastore. PostgreSQL MySQL / MariaDB etcd In its most common form, the datastore-endpoint parameter for PostgreSQL has the following format: postgres://username:password@hostname:port/database-name More advanced configuration parameters are available. For more information on these, please see https://godoc.org/github.com/lib/pq. If you specify a database name and it does not exist, the server will attempt to create it. If you only supply postgres:// as the endpoint, K3s will attempt to do the following: Connect to localhost using postgres as the username and password Create a database named kubernetes In its most common form, the datastore-endpoint parameter for MySQL and MariaDB has the following format: mysql://username:password@tcp(hostname:3306)/database-name More advanced configuration parameters are available. For more information on these, please see https://github.com/go-sql-driver/mysql#dsn-data-source-name Note that due to a known issue in K3s, you cannot set the tls parameter. TLS communication is supported, but you cannot, for example, set this parameter to \"skip-verify\" to cause K3s to skip certificate verification. If you specify a database name and it does not exist, the server will attempt to create it. If you only supply mysql:// as the endpoint, K3s will attempt to do the following: Connect to the MySQL socket at /var/run/mysqld/mysqld.sock using the root user and no password Create a database with the name kubernetes In its most common form, the datastore-endpoint parameter for etcd has the following format: https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379 The above assumes a typical three node etcd cluster. The parameter can accept one more comma separated etcd URLs.","s":"Datastore Endpoint Format and Functionality","u":"/datastore","h":"#datastore-endpoint-format-and-functionality","p":184},{"i":191,"t":"The way K3s is backed up and restored depends on which type of datastore is used. caution In addition to backing up the datastore itself, you must also back up the server token file at /var/lib/rancher/k3s/server/token. You must restore this file, or pass its value into the --token option, when restoring from backup. If you do not use the same token value when restoring, the snapshot will be unusable, as the token is used to encrypt confidential data within the datastore itself.","s":"Backup and Restore","u":"/datastore/backup-restore","h":"","p":190},{"i":193,"t":"No special commands are required to back up or restore the SQLite datastore. To back up the SQLite datastore, take a copy of /var/lib/rancher/k3s/server/db/. To restore the SQLite datastore, restore the contents of /var/lib/rancher/k3s/server/db (and the token, as discussed above).","s":"Backup and Restore with SQLite","u":"/datastore/backup-restore","h":"#backup-and-restore-with-sqlite","p":190},{"i":195,"t":"When an external datastore is used, backup and restore operations are handled outside of K3s. The database administrator will need to back up the external database, or restore it from a snapshot or dump. We recommend configuring the database to take recurring snapshots. For details on taking database snapshots and restoring your database from them, refer to the official database documentation: Official MySQL documentation Official PostgreSQL documentation Official etcd documentation","s":"Backup and Restore with External Datastore","u":"/datastore/backup-restore","h":"#backup-and-restore-with-external-datastore","p":190},{"i":197,"t":"See the k3s etcd-snapshot command documentation for information on performing backup and restore operations on the embedded etcd datastore.","s":"Backup and Restore with Embedded etcd Datastore","u":"/datastore/backup-restore","h":"#backup-and-restore-with-embedded-etcd-datastore","p":190},{"i":199,"t":"This section describes how to install an external load balancer in front of a High Availability (HA) K3s cluster's server nodes. Two examples are provided: Nginx and HAProxy. tip External load-balancers should not be confused with the embedded ServiceLB, which is an embedded controller that allows for use of Kubernetes LoadBalancer Services without deploying a third-party load-balancer controller. For more details, see Service Load Balancer. External load-balancers can be used to provide a fixed registration address for registering nodes, or for external access to the Kubernetes API Server. For exposing LoadBalancer Services, external load-balancers can be used alongside or instead of ServiceLB, but in most cases, replacement load-balancer controllers such as MetalLB or Kube-VIP are a better choice.","s":"Cluster Load Balancer","u":"/datastore/cluster-loadbalancer","h":"","p":198},{"i":201,"t":"All nodes in this example are running Ubuntu 20.04. For both examples, assume that a HA K3s cluster with embedded etcd has been installed on 3 nodes. Each k3s server is configured with: # /etc/rancher/k3s/config.yaml token: lb-cluster-gd tls-san: 10.10.10.100 The nodes have hostnames and IPs of: server-1: 10.10.10.50 server-2: 10.10.10.51 server-3: 10.10.10.52 Two additional nodes for load balancing are configured with hostnames and IPs of: lb-1: 10.10.10.98 lb-2: 10.10.10.99 Three additional nodes exist with hostnames and IPs of: agent-1: 10.10.10.101 agent-2: 10.10.10.102 agent-3: 10.10.10.103","s":"Prerequisites","u":"/datastore/cluster-loadbalancer","h":"#prerequisites","p":198},{"i":203,"t":"HAProxy Nginx HAProxy is an open source option that provides a TCP load balancer. It also supports HA for the load balancer itself, ensuring redundancy at all levels. See HAProxy Documentation for more info. Additionally, we will use KeepAlived to generate a virtual IP (VIP) that will be used to access the cluster. See KeepAlived Documentation for more info. 1) Install HAProxy and KeepAlived: sudo apt-get install haproxy keepalived 2) Add the following to /etc/haproxy/haproxy.cfg on lb-1 and lb-2: frontend k3s-frontend bind *:6443 mode tcp option tcplog default_backend k3s-backend backend k3s-backend mode tcp option tcp-check balance roundrobin default-server inter 10s downinter 5s server server-1 10.10.10.50:6443 check server server-2 10.10.10.51:6443 check server server-3 10.10.10.52:6443 check 3) Add the following to /etc/keepalived/keepalived.conf on lb-1 and lb-2: vrrp_script chk_haproxy { script 'killall -0 haproxy' # faster than pidof interval 2 } vrrp_instance haproxy-vip { interface eth1 state <STATE> # MASTER on lb-1, BACKUP on lb-2 priority <PRIORITY> # 200 on lb-1, 100 on lb-2 virtual_router_id 51 virtual_ipaddress { 10.10.10.100/24 } track_script { chk_haproxy } } 6) Restart HAProxy and KeepAlived on lb-1 and lb-2: systemctl restart haproxy systemctl restart keepalived 5) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster: curl -sfL https://get.k3s.io | K3S_TOKEN=lb-cluster-gd sh -s - agent --server https://10.10.10.100:6443 You can now use kubectl from server node to interact with the cluster. root@server-1 $ k3s kubectl get nodes -A NAME STATUS ROLES AGE VERSION agent-1 Ready <none> 32s v1.27.3+k3s1 agent-2 Ready <none> 20s v1.27.3+k3s1 agent-3 Ready <none> 9s v1.27.3+k3s1 server-1 Ready control-plane,etcd,master 4m22s v1.27.3+k3s1 server-2 Ready control-plane,etcd,master 3m58s v1.27.3+k3s1 server-3 Ready control-plane,etcd,master 3m12s v1.27.3+k3s1 Nginx Load Balancer​ danger Nginx does not natively support a High Availability (HA) configuration. If setting up an HA cluster, having a single load balancer in front of K3s will reintroduce a single point of failure. Nginx Open Source provides a TCP load balancer. See Using nginx as HTTP load balancer for more info. 1) Create a nginx.conf file on lb-1 with the following contents: events {} stream { upstream k3s_servers { server 10.10.10.50:6443; server 10.10.10.51:6443; server 10.10.10.52:6443; } server { listen 6443; proxy_pass k3s_servers; } } 2) Run the Nginx load balancer on lb-1: Using docker: docker run -d --restart unless-stopped \\ -v ${PWD}/nginx.conf:/etc/nginx/nginx.conf \\ -p 6443:6443 \\ nginx:stable Or install nginx and then run: cp nginx.conf /etc/nginx/nginx.conf systemctl start nginx 3) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster: curl -sfL https://get.k3s.io | K3S_TOKEN=lb-cluster-gd sh -s - agent --server https://10.10.10.99:6443 You can now use kubectl from server node to interact with the cluster. root@server1 $ k3s kubectl get nodes -A NAME STATUS ROLES AGE VERSION agent-1 Ready <none> 30s v1.27.3+k3s1 agent-2 Ready <none> 22s v1.27.3+k3s1 agent-3 Ready <none> 13s v1.27.3+k3s1 server-1 Ready control-plane,etcd,master 4m49s v1.27.3+k3s1 server-2 Ready control-plane,etcd,master 3m58s v1.27.3+k3s1 server-3 Ready control-plane,etcd,master 3m16s v1.27.3+k3s1","s":"Setup Load Balancer","u":"/datastore/cluster-loadbalancer","h":"#setup-load-balancer","p":198},{"i":205,"t":"danger Nginx does not natively support a High Availability (HA) configuration. If setting up an HA cluster, having a single load balancer in front of K3s will reintroduce a single point of failure. Nginx Open Source provides a TCP load balancer. See Using nginx as HTTP load balancer for more info. 1) Create a nginx.conf file on lb-1 with the following contents: events {} stream { upstream k3s_servers { server 10.10.10.50:6443; server 10.10.10.51:6443; server 10.10.10.52:6443; } server { listen 6443; proxy_pass k3s_servers; } } 2) Run the Nginx load balancer on lb-1: Using docker: docker run -d --restart unless-stopped \\ -v ${PWD}/nginx.conf:/etc/nginx/nginx.conf \\ -p 6443:6443 \\ nginx:stable Or install nginx and then run: cp nginx.conf /etc/nginx/nginx.conf systemctl start nginx 3) On agent-1, agent-2, and agent-3, run the following command to install k3s and join the cluster: curl -sfL https://get.k3s.io | K3S_TOKEN=lb-cluster-gd sh -s - agent --server https://10.10.10.99:6443 You can now use kubectl from server node to interact with the cluster. root@server1 $ k3s kubectl get nodes -A NAME STATUS ROLES AGE VERSION agent-1 Ready <none> 30s v1.27.3+k3s1 agent-2 Ready <none> 22s v1.27.3+k3s1 agent-3 Ready <none> 13s v1.27.3+k3s1 server-1 Ready control-plane,etcd,master 4m49s v1.27.3+k3s1 server-2 Ready control-plane,etcd,master 3m58s v1.27.3+k3s1 server-3 Ready control-plane,etcd,master 3m16s v1.27.3+k3s1","s":"Nginx Load Balancer","u":"/datastore/cluster-loadbalancer","h":"#nginx-load-balancer","p":198},{"i":207,"t":"This section describes how to install a high-availability K3s cluster with an external database. Single server clusters can meet a variety of use cases, but for environments where uptime of the Kubernetes control plane is critical, you can run K3s in an HA configuration. An HA K3s cluster is composed of: Two or more server nodes that will serve the Kubernetes API and run other control plane services An external datastore (as opposed to the embedded SQLite datastore used in single-server setups) Optional: Zero or more agent nodes that are designated to run your apps and services Optional: A fixed registration address for agent nodes to register with the cluster For more details on how these components work together, refer to the architecture section.","s":"High Availability External DB","u":"/datastore/ha","h":"","p":206},{"i":209,"t":"Setting up an HA cluster requires the following steps:","s":"Installation Outline","u":"/datastore/ha","h":"#installation-outline","p":206},{"i":211,"t":"You will first need to create an external datastore for the cluster. See the Cluster Datastore Options documentation for more details.","s":"1. Create an External Datastore","u":"/datastore/ha","h":"#1-create-an-external-datastore","p":206},{"i":213,"t":"K3s requires two or more server nodes for this HA configuration. See the Requirements guide for minimum machine requirements. When running the k3s server command on these nodes, you must set the datastore-endpoint parameter so that K3s knows how to connect to the external datastore. The token parameter can also be used to set a deterministic token when adding nodes. When empty, this token will be generated automatically for further use. For example, a command like the following could be used to install the K3s server with a MySQL database as the external datastore and set a token: curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address The datastore endpoint format differs based on the database type. For details, refer to the section on datastore endpoint formats. To configure TLS certificates when launching server nodes, refer to the datastore configuration guide. note The same installation options available to single-server installs are also available for high-availability installs. For more details, see the Configuration Options documentation. By default, server nodes will be schedulable and thus your workloads can get launched on them. If you wish to have a dedicated control plane where no user workloads will run, you can use taints. The node-taint parameter will allow you to configure nodes with taints, for example --node-taint CriticalAddonsOnly=true:NoExecute. Once you've launched the k3s server process on all server nodes, ensure that the cluster has come up properly with k3s kubectl get nodes. You should see your server nodes in the Ready state.","s":"2. Launch Server Nodes","u":"/datastore/ha","h":"#2-launch-server-nodes","p":206},{"i":215,"t":"The same example command in Step 2 can be used to join additional server nodes, where the token from the first node needs to be used. If the first server node was started without the --token CLI flag or K3S_TOKEN variable, the token value can be retrieved from any server already joined to the cluster: cat /var/lib/rancher/k3s/server/token Additional server nodes can then be added using the token: curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" There are a few config flags that must be the same in all server nodes: Network related flags: --cluster-dns, --cluster-domain, --cluster-cidr, --service-cidr Flags controlling the deployment of certain components: --disable-helm-controller, --disable-kube-proxy, --disable-network-policy and any component passed to --disable Feature related flags: --secrets-encryption note Ensure that you retain a copy of this token as it is required when restoring from backup and adding nodes. Previously, K3s did not enforce the use of a token when using external SQL datastores.","s":"3. Optional: Join Additional Server Nodes","u":"/datastore/ha","h":"#3-optional-join-additional-server-nodes","p":206},{"i":217,"t":"Agent nodes need a URL to register against. This can be the IP or hostname of any server node, but in many cases those may change over time. For example, if running your cluster in a cloud that supports scaling groups, nodes may be created and destroyed over time, changing to different IPs from the initial set of server nodes. It would be best to have a stable endpoint in front of the server nodes that will not change over time. This endpoint can be set up using any number approaches, such as: A layer-4 (TCP) load balancer Round-robin DNS Virtual or elastic IP addresses See Cluster Loadbalancer for example configurations. This endpoint can also be used for accessing the Kubernetes API. So you can, for example, modify your kubeconfig file to point to it instead of a specific node. To avoid certificate errors in such a configuration, you should configure the server with the --tls-san YOUR_IP_OR_HOSTNAME_HERE option. This option adds an additional hostname or IP as a Subject Alternative Name in the TLS cert, and it can be specified multiple times if you would like to access via both the IP and the hostname.","s":"4. Optional: Configure a Fixed Registration Address","u":"/datastore/ha","h":"#4-optional-configure-a-fixed-registration-address","p":206},{"i":219,"t":"Because K3s server nodes are schedulable by default, agent nodes are not required for a HA K3s cluster. However, you may wish to have dedicated agent nodes to run your apps and services. Joining agent nodes in an HA cluster is the same as joining agent nodes in a single server cluster. You just need to specify the URL the agent should register to (either one of the server IPs or a fixed registration address) and the token it should use. K3S_TOKEN=SECRET k3s agent --server https://server-or-fixed-registration-address:6443","s":"5. Optional: Join Agent Nodes","u":"/datastore/ha","h":"#5-optional-join-agent-nodes","p":206},{"i":221,"t":"caution Embedded etcd (HA) may have performance issues on slower disks such as Raspberry Pis running with SD cards. info HA embedded etcd cluster must be comprised of an odd number of server nodes for etcd to maintain quorum. For a cluster with n servers, quorum is (n/2)+1. For any odd-sized cluster, adding one node will always increase the number of nodes necessary for quorum. Although adding a node to an odd-sized cluster appears better since there are more machines, the fault tolerance is worse since exactly the same number of nodes may fail without losing quorum but there are more nodes that can fail. An HA K3s cluster with embedded etcd is composed of: Three or more server nodes that will serve the Kubernetes API and run other control plane services, as well as host the embedded etcd datastore. Optional: Zero or more agent nodes that are designated to run your apps and services Optional: A fixed registration address for agent nodes to register with the cluster To get started, first launch a server node with the cluster-init flag to enable clustering and a token that will be used as a shared secret to join additional servers to the cluster. curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server \\ --cluster-init \\ --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address After launching the first server, join the second and third servers to the cluster using the shared secret: curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server \\ --server https://<ip or hostname of server1>:6443 \\ --tls-san=<FIXED_IP> # Optional, needed if using a fixed registration address Check to see that the second and third servers are now part of the cluster: $ kubectl get nodes NAME STATUS ROLES AGE VERSION server1 Ready control-plane,etcd,master 28m vX.Y.Z server2 Ready control-plane,etcd,master 13m vX.Y.Z server3 Ready control-plane,etcd,master 10m vX.Y.Z Now you have a highly available control plane. Any successfully clustered servers can be used in the --server argument to join additional server and agent nodes. Joining additional agent nodes to the cluster follows the same procedure as servers: curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - agent --server https://<ip or hostname of server>:6443 There are a few config flags that must be the same in all server nodes: Network related flags: --cluster-dns, --cluster-domain, --cluster-cidr, --service-cidr Flags controlling the deployment of certain components: --disable-helm-controller, --disable-kube-proxy, --disable-network-policy and any component passed to --disable Feature related flags: --secrets-encryption","s":"High Availability Embedded etcd","u":"/datastore/ha-embedded","h":"","p":220},{"i":223,"t":"Version Gate Available as of v1.22.2+k3s1 If you have an existing cluster using the default embedded SQLite database, you can convert it to etcd by simply restarting your K3s server with the --cluster-init flag. Once you've done that, you'll be able to add additional instances as described above. If an etcd datastore is found on disk either because that node has either initialized or joined a cluster already, the datastore arguments (--cluster-init, --server, --datastore-endpoint, etc) are ignored.","s":"Existing single-node clusters","u":"/datastore/ha-embedded","h":"#existing-single-node-clusters","p":220},{"i":225,"t":"The FAQ is updated periodically and designed to answer the questions our users most frequently ask about K3s.","s":"FAQ","u":"/faq","h":"","p":224},{"i":227,"t":"K3s is a CNCF-certified Kubernetes distribution, and can do everything required of a standard Kubernetes cluster. It is just a more lightweight version. See the main docs page for more details.","s":"Is K3s a suitable replacement for Kubernetes?","u":"/faq","h":"#is-k3s-a-suitable-replacement-for-kubernetes","p":224},{"i":229,"t":"Simply start K3s server with --disable=traefik and deploy your ingress.","s":"How can I use my own Ingress instead of Traefik?","u":"/faq","h":"#how-can-i-use-my-own-ingress-instead-of-traefik","p":224},{"i":231,"t":"At this time K3s does not natively support Windows, however we are open to the idea in the future.","s":"Does K3s support Windows?","u":"/faq","h":"#does-k3s-support-windows","p":224},{"i":233,"t":"Please reference the K3s BUILDING.md with instructions.","s":"How can I build from source?","u":"/faq","h":"#how-can-i-build-from-source","p":224},{"i":235,"t":"The location of K3s logs will vary depending on how you run K3s and the node's OS. When run from the command line, logs are sent to stdout and stderr. When running under openrc, logs will be created at /var/log/k3s.log. When running under Systemd, logs will be sent to Journald and can be viewed using journalctl -u k3s. Pod logs can be found at /var/log/pods. Containerd logs can be found at /var/lib/rancher/k3s/agent/containerd/containerd.log. You can generate more detailed logs by using the --debug flag when starting K3s (or debug: true in the configuration file). Kubernetes uses a logging framework known as klog, which uses a single logging configuration for all components within a process. Since K3s runs all Kubernetes components within a single process, it is not possible to configure different log levels or destinations for individual Kubernetes components. Use of the -v=<level> or --vmodule=<module>=<level> component args will likely not have the desired effect. See Additional Logging Sources for even more log options.","s":"Where are the K3s logs?","u":"/faq","h":"#where-are-the-k3s-logs","p":224},{"i":237,"t":"Yes, there are multiple ways to run K3s in Docker. See Advanced Options for more details.","s":"Can I run K3s in Docker?","u":"/faq","h":"#can-i-run-k3s-in-docker","p":224},{"i":239,"t":"For more information on managing K3s join tokens, see the k3s token command documentation.","s":"What is the difference between K3s Server and Agent Tokens?","u":"/faq","h":"#what-is-the-difference-between-k3s-server-and-agent-tokens","p":224},{"i":241,"t":"In general, the Kubernetes version skew policy applies. In short, servers can be newer than agents, but agents cannot be newer than servers.","s":"How compatible are different versions of K3s?","u":"/faq","h":"#how-compatible-are-different-versions-of-k3s","p":224},{"i":243,"t":"If you are having an issue with deploying K3s, you should: 1) Check the Known Issues page. 2) Check that you have resolved any Additional OS Preparation. Run k3s check-config and ensure that it passes. 3) Search the K3s Issues and Discussions for one that matches your problem. 4) Join the Rancher Slack K3s channel to get help. 5) Submit a New Issue on the K3s Github describing your setup and the issue you are experiencing.","s":"I'm having an issue, where can I get help?","u":"/faq","h":"#im-having-an-issue-where-can-i-get-help","p":224},{"i":245,"t":"Helm is the package management tool of choice for Kubernetes. Helm charts provide templating syntax for Kubernetes YAML manifest documents. With Helm, developers or cluster administrators can create configurable templates known as Charts, instead of just using static manifests. For more information about creating your own Chart catalog, check out the docs at https://helm.sh/docs/intro/quickstart/. K3s does not require any special configuration to support Helm. Just be sure you have properly set the kubeconfig path as per the cluster access documentation. K3s includes a Helm Controller that manages installing, upgrading/reconfiguring, and uninstalling Helm charts using a HelmChart Custom Resource Definition (CRD). Paired with auto-deploying AddOn manifests, installing a Helm chart on your cluster can be automated by creating a single file on disk.","s":"Helm","u":"/helm","h":"","p":244},{"i":247,"t":"The HelmChart Custom Resource captures most of the options you would normally pass to the helm command-line tool. Here's an example of how you might deploy Apache from the Bitnami chart repository, overriding some of the default chart values. Note that the HelmChart resource itself is in the kube-system namespace, but the chart's resources will be deployed to the web namespace, which is created in the same manifest. This can be useful if you want to keep your HelmChart resources separated from the the resources they deploy. apiVersion: v1 kind: Namespace metadata: name: web --- apiVersion: helm.cattle.io/v1 kind: HelmChart metadata: name: apache namespace: kube-system spec: repo: https://charts.bitnami.com/bitnami chart: apache targetNamespace: web valuesContent: |- service: type: ClusterIP ingress: enabled: true hostname: www.example.com metrics: enabled: true HelmChart Field Definitions​ Field Default Description Helm Argument / Flag Equivalent metadata.name Helm Chart name NAME spec.chart Helm Chart name in repository, or complete HTTPS URL to chart archive (.tgz) CHART spec.targetNamespace default Helm Chart target namespace --namespace spec.version Helm Chart version (when installing from repository) --version spec.repo Helm Chart repository URL --repo spec.repoCA Specify the certificates of HTTPS-enabled servers --ca-file spec.helmVersion v3 Helm version to use (v2 or v3) spec.bootstrap False Set to True if this chart is needed to bootstrap the cluster (Cloud Controller Manager, etc) spec.set Override simple default Chart values. These take precedence over options set via valuesContent. --set / --set-string spec.jobImage Specify the image to use when installing the helm chart. E.g. rancher/klipper-helm:v0.3.0 . spec.timeout 300 Timeout in seconds for Helm operations --timeout spec.failurePolicy reinstall Set to abort which case the Helm operation is aborted, pending manual intervention by the operator. spec.valuesContent Override complex default Chart values via YAML file content --values spec.chartContent Base64-encoded chart archive .tgz - overrides spec.chart CHART Content placed in /var/lib/rancher/k3s/server/static/ can be accessed anonymously via the Kubernetes APIServer from within the cluster. This URL can be templated using the special variable %{KUBERNETES_API}% in the spec.chart field. For example, the packaged Traefik component loads its chart from https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz. note The name field should follow the Helm chart naming conventions. Refer to the Helm Best Practicies documentation to learn more.","s":"Using the Helm Controller","u":"/helm","h":"#using-the-helm-controller","p":244},{"i":249,"t":"Version Gate Available as of v1.19.1+k3s1 To allow overriding values for packaged components that are deployed as HelmCharts (such as Traefik), K3s supports customizing deployments via a HelmChartConfig resources. The HelmChartConfig resource must match the name and namespace of its corresponding HelmChart, and it supports providing additional valuesContent, which is passed to the helm command as an additional value file. note HelmChart spec.set values override HelmChart and HelmChartConfig spec.valuesContent settings. For example, to customize the packaged Traefik ingress configuration, you can create a file named /var/lib/rancher/k3s/server/manifests/traefik-config.yaml and populate it with the following content: apiVersion: helm.cattle.io/v1 kind: HelmChartConfig metadata: name: traefik namespace: kube-system spec: valuesContent: |- image: name: traefik tag: v2.8.5 forwardedHeaders: enabled: true trustedIPs: - 10.0.0.0/8 ssl: enabled: true permanentRedirect: false","s":"Customizing Packaged Components with HelmChartConfig","u":"/helm","h":"#customizing-packaged-components-with-helmchartconfig","p":244},{"i":251,"t":"Version Gate As of v1.17.0+k3s.1 Helm v3 is supported and used by default. K3s can handle either Helm v2 or Helm v3. If you wish to migrate to Helm v3, this blog post by Helm explains how to use a plugin to successfully migrate. Refer to the official Helm 3 documentation here for more information. Just be sure you have properly set your kubeconfig as per the section about cluster access. note Helm 3 no longer requires Tiller and the helm init command. Refer to the official documentation for details.","s":"Migrating from Helm v2","u":"/helm","h":"#migrating-from-helm-v2","p":244},{"i":253,"t":"This section contains instructions for installing K3s in various environments. Please ensure you have met the Requirements before you begin installing K3s. Configuration Options provides guidance on the options available to you when installing K3s. Network Options provides guidance on the networking options available in k3s. Air-Gap Installation details how to set up K3s in environments that do not have direct access to the Internet. Managing Server Roles details how to set up K3s with dedicated control-plane or etcd servers. Managing Packaged Components details how to disable packaged components, or install your own using auto-deploying manifests.","s":"Installation","u":"/installation","h":"","p":252},{"i":255,"t":"You can install K3s in an air-gapped environment using two different methods. An air-gapped environment is any environment that is not directly connected to the Internet. You can either deploy a private registry and mirror docker.io, or you can manually deploy images such as for small clusters.","s":"Air-Gap Install","u":"/installation/airgap","h":"","p":254},{"i":257,"t":"This document assumes you have already created your nodes in your air-gap environment and have a Docker private registry on your bastion host. If you have not yet set up a private Docker registry, refer to the official documentation here.","s":"Private Registry Method","u":"/installation/airgap","h":"#private-registry-method","p":254},{"i":259,"t":"Follow the Private Registry Configuration guide to create and configure the registry.yaml file. Once you have completed this, you may now go to the Install K3s section below.","s":"Create the Registry YAML","u":"/installation/airgap","h":"#create-the-registry-yaml","p":254},{"i":261,"t":"We are assuming you have created your nodes in your air-gap environment and use containerd as container runtime. This method requires you to manually deploy the necessary images to each node and is appropriate for edge deployments where running a private registry is not practical.","s":"Manually Deploy Images Method","u":"/installation/airgap","h":"#manually-deploy-images-method","p":254},{"i":263,"t":"Obtain the images tar file for your architecture from the releases page for the version of K3s you will be running. Place the tar file in the images directory, for example: sudo mkdir -p /var/lib/rancher/k3s/agent/images/ sudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/ Once you have completed this, you may now go to the Install K3s section below.","s":"Prepare the Images Directory and K3s Binary","u":"/installation/airgap","h":"#prepare-the-images-directory-and-k3s-binary","p":254},{"i":266,"t":"Before installing K3s, complete the Private Registry Method or the Manually Deploy Images Method above to prepopulate the images that K3s needs to install. Download the K3s binary from the releases page, matching the same version used to get the airgap images. Place the binary in /usr/local/bin on each air-gapped node and ensure it is executable. Download the K3s install script at get.k3s.io. Place the install script anywhere on each air-gapped node, and name it install.sh. If your nodes do not have an interface with a default route, a default route must be configured; even a black-hole route via a dummy interface will suffice. K3s requires a default route in order to auto-detect the node's primary IP, and for kube-proxy ClusterIP routing to function properly. To add a dummy route, do the following: ip link add dummy0 type dummy ip link set dummy0 up ip addr add 169.254.255.254/31 dev dummy0 ip route add default via 169.254.255.255 dev dummy0 metric 1000 When running the K3s script with the INSTALL_K3S_SKIP_DOWNLOAD environment variable, K3s will use the local version of the script and binary.","s":"Prerequisites","u":"/installation/airgap","h":"#prerequisites","p":254},{"i":268,"t":"You can install K3s on one or more servers as described below. Single Server Configuration High Availability Configuration To install K3s on a single server, simply do the following on the server node: INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh To add additional agents, do the following on each agent node: INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh note The token from the server is typically found at /var/lib/rancher/k3s/server/token. Reference the High Availability with an External DB or High Availability with Embedded DB guides. You will be tweaking install commands so you specify INSTALL_K3S_SKIP_DOWNLOAD=true and run your install script locally instead of via curl. You will also utilize INSTALL_K3S_EXEC='args' to supply any arguments to k3s. For example, step two of the High Availability with an External DB guide mentions the following: curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" Instead, you would modify such examples like below: INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\ K3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\ ./install.sh note K3s additionally provides a --resolv-conf flag for kubelets, which may help with configuring DNS in air-gap networks.","s":"Installing K3s in an Air-Gapped Environment","u":"/installation/airgap","h":"#installing-k3s-in-an-air-gapped-environment","p":254},{"i":271,"t":"Upgrading an air-gap environment can be accomplished in the following manner: Download the new air-gap images (tar file) from the releases page for the version of K3s you will be upgrading to. Place the tar in the /var/lib/rancher/k3s/agent/images/ directory on each node. Delete the old tar file. Copy and replace the old K3s binary in /usr/local/bin on each node. Copy over the install script at https://get.k3s.io (as it is possible it has changed since the last release). Run the script again just as you had done in the past with the same environment variables. Restart the K3s service (if not restarted automatically by installer).","s":"Install Script Method","u":"/installation/airgap","h":"#install-script-method","p":254},{"i":273,"t":"K3s supports automated upgrades. To enable this in air-gapped environments, you must ensure the required images are available in your private registry. You will need the version of rancher/k3s-upgrade that corresponds to the version of K3s you intend to upgrade to. Note, the image tag replaces the + in the K3s release with a - because Docker images do not support +. You will also need the versions of system-upgrade-controller and kubectl that are specified in the system-upgrade-controller manifest YAML that you will deploy. Check for the latest release of the system-upgrade-controller here and download the system-upgrade-controller.yaml to determine the versions you need to push to your private registry. For example, in release v0.4.0 of the system-upgrade-controller, these images are specified in the manifest YAML: rancher/system-upgrade-controller:v0.4.0 rancher/kubectl:v0.17.0 Once you have added the necessary rancher/k3s-upgrade, rancher/system-upgrade-controller, and rancher/kubectl images to your private registry, follow the automated upgrades guide.","s":"Automated Upgrades Method","u":"/installation/airgap","h":"#automated-upgrades-method","p":254},{"i":275,"t":"This page focuses on the options that are commonly used when setting up K3s for the first time. Refer to the documentation on Advanced Options and Configuration and the server and agent command documentation for more in-depth coverage.","s":"Configuration Options","u":"/installation/configuration","h":"","p":274},{"i":277,"t":"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems. You can use a combination of INSTALL_K3S_EXEC, K3S_ environment variables, and command flags to pass configuration to the service configuration. The prefixed environment variables, INSTALL_K3S_EXEC value, and trailing shell arguments are all persisted into the service configuration. After installation, configuration may be altered by editing the environment file, editing the service configuration, or simply re-running the installer with new options. To illustrate this, the following commands all result in the same behavior of registering a server without flannel and with a token: curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"server\" sh -s - --flannel-backend none --token 12345 curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"server --flannel-backend none\" K3S_TOKEN=12345 sh -s - curl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none # server is assumed below because there is no K3S_URL curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"--flannel-backend none --token 12345\" sh -s - curl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345 When registering an agent, the following commands all result in the same behavior: curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"agent --server https://k3s.example.com --token mypassword\" sh -s - curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"agent\" K3S_TOKEN=\"mypassword\" sh -s - --server https://k3s.example.com curl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword curl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL For details on all environment variables, see Environment Variables. Note If you set configuration when running the install script, but do not set it again when re-running the install script, the original values will be lost. The contents of the configuration file are not managed by the install script. If you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.","s":"Configuration with install script","u":"/installation/configuration","h":"#configuration-with-install-script","p":274},{"i":279,"t":"As stated, the installation script is primarily concerned with configuring K3s to run as a service. If you choose to not use the script, you can run K3s simply by downloading the binary from our release page, placing it on your path, and executing it. This is not particularly useful for permanent installations, but may be useful when performing quick tests that do not merit managing K3s as a system service. curl -Lo /usr/local/bin/k3s https://github.com/k3s-io/k3s/releases/download/v1.26.5+k3s1/k3s; chmod a+x /usr/local/bin/k3s You can pass configuration by setting K3S_ environment variables: K3S_KUBECONFIG_MODE=\"644\" k3s server Or command flags: k3s server --write-kubeconfig-mode=644 The k3s agent can also be configured this way: k3s agent --server https://k3s.example.com --token mypassword For details on configuring the K3s server, see the k3s server documentation. For details on configuring the K3s agent, see the k3s agent documentation. You can also use the --help flag to see a list of all available options, and their corresponding environment variables. Matching Flags It is important to match critical flags on your server nodes. For example, if you use the flag --disable servicelb or --cluster-cidr=10.200.0.0/16 on your master node, but don't set it on other server nodes, the nodes will fail to join. They will print errors such as: failed to validate server configuration: critical configuration value mismatch. See the Server Configuration documentation (linked above) for more information on which flags must be set identically on server nodes.","s":"Configuration with binary","u":"/installation/configuration","h":"#configuration-with-binary","p":274},{"i":281,"t":"Version Gate Available as of v1.19.1+k3s1 In addition to configuring K3s with environment variables and CLI arguments, K3s can also use a config file. By default, values present in a YAML file located at /etc/rancher/k3s/config.yaml will be used on install. An example of a basic server config file is below: write-kubeconfig-mode: \"0644\" tls-san: - \"foo.local\" node-label: - \"foo=bar\" - \"something=amazing\" cluster-init: true This is equivalent to the following CLI arguments: k3s server \\ --write-kubeconfig-mode \"0644\" \\ --tls-san \"foo.local\" \\ --node-label \"foo=bar\" \\ --node-label \"something=amazing\" \\ --cluster-init In general, CLI arguments map to their respective YAML key, with repeatable CLI arguments being represented as YAML lists. Boolean flags are represented as true or false in the YAML file. It is also possible to use both a configuration file and CLI arguments. In these situations, values will be loaded from both sources, but CLI arguments will take precedence. For repeatable arguments such as --node-label, the CLI arguments will overwrite all values in the list. Finally, the location of the config file can be changed either through the CLI argument --config FILE, -c FILE, or the environment variable $K3S_CONFIG_FILE.","s":"Configuration File","u":"/installation/configuration","h":"#configuration-file","p":274},{"i":283,"t":"Version Gate Available as of v1.21.0+k3s1 Multiple configuration files are supported. By default, configuration files are read from /etc/rancher/k3s/config.yaml and /etc/rancher/k3s/config.yaml.d/*.yaml in alphabetical order. By default, the last value found for a given key will be used. A + can be appended to the key to append the value to the existing string or slice, instead of replacing it. All occurrences of this key in subsequent files will also require a + to prevent overwriting the accumulated value. An example of multiple config files is below: # config.yaml token: boop node-label: - foo=bar - bar=baz # config.yaml.d/test1.yaml write-kubeconfig-mode: 600 node-taint: - alice=bob:NoExecute # config.yaml.d/test2.yaml write-kubeconfig-mode: 777 node-label: - other=what - foo=three node-taint+: - charlie=delta:NoSchedule This results in a final configuration of: write-kubeconfig-mode: 777 token: boop node-label: - other=what - foo=three node-taint: - alice=bob:NoExecute - charlie=delta:NoSchedule","s":"Multiple Config Files","u":"/installation/configuration","h":"#multiple-config-files","p":274},{"i":285,"t":"All of the above options can be combined into a single example. A config.yaml file is created at /etc/rancher/k3s/config.yaml: token: \"secret\" debug: true Then the installation script is run with a combination of environment variables and flags: curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=\"644\" INSTALL_K3S_EXEC=\"server\" sh -s - --flannel-backend none Or if you have already installed the K3s Binary: K3S_KUBECONFIG_MODE=\"644\" k3s server --flannel-backend none This results in a server with: A kubeconfig file with permissions 644 Flannel backend set to none The token set to secret Debug logging enabled","s":"Putting it all together","u":"/installation/configuration","h":"#putting-it-all-together","p":274},{"i":287,"t":"This installation guide will help you to deploy and configure the Kubernetes Dashboard on K3s.","s":"Kubernetes Dashboard","u":"/installation/kube-dashboard","h":"","p":286},{"i":289,"t":"GITHUB_URL=https://github.com/kubernetes/dashboard/releases VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||') sudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml","s":"Deploying the Kubernetes Dashboard","u":"/installation/kube-dashboard","h":"#deploying-the-kubernetes-dashboard","p":286},{"i":291,"t":"Important: The admin-user created in this guide will have administrative privileges in the Dashboard. Create the following resource manifest files: dashboard.admin-user.yml apiVersion: v1 kind: ServiceAccount metadata: name: admin-user namespace: kubernetes-dashboard dashboard.admin-user-role.yml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: admin-user roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: admin-user namespace: kubernetes-dashboard Deploy the admin-user configuration: sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml","s":"Dashboard RBAC Configuration","u":"/installation/kube-dashboard","h":"#dashboard-rbac-configuration","p":286},{"i":293,"t":"v1.24 and newer v1.23 and older sudo k3s kubectl -n kubernetes-dashboard create token admin-user sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'","s":"Obtain the Bearer Token","u":"/installation/kube-dashboard","h":"#obtain-the-bearer-token","p":286},{"i":295,"t":"To access the Dashboard you must create a secure channel to your K3s cluster: sudo k3s kubectl proxy The Dashboard is now accessible at: http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/ Sign In with the admin-user Bearer Token Advanced: Remote Access to the Dashboard​ Please see the Dashboard documentation: Using Port Forwarding to Access Applications in a Cluster.","s":"Local Access to the Dashboard","u":"/installation/kube-dashboard","h":"#local-access-to-the-dashboard","p":286},{"i":297,"t":"sudo k3s kubectl delete ns kubernetes-dashboard GITHUB_URL=https://github.com/kubernetes/dashboard/releases VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||') sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml","s":"Upgrading the Dashboard","u":"/installation/kube-dashboard","h":"#upgrading-the-dashboard","p":286},{"i":299,"t":"sudo k3s kubectl delete ns kubernetes-dashboard sudo k3s kubectl delete clusterrolebinding kubernetes-dashboard sudo k3s kubectl delete clusterrole kubernetes-dashboard","s":"Deleting the Dashboard and admin-user configuration","u":"/installation/kube-dashboard","h":"#deleting-the-dashboard-and-admin-user-configuration","p":286},{"i":301,"t":"This page describes K3s network configuration options, including configuration or replacement of Flannel, and configuring IPv6. Note: Please reference the Networking page for information about CoreDNS, Traefik, and the Service LB.","s":"Network Options","u":"/installation/network-options","h":"","p":300},{"i":303,"t":"Flannel is a lightweight provider of layer 3 network fabric that implements the Kubernetes Container Network Interface (CNI). It is what is commonly referred to as a CNI Plugin. Flannel options can only be set on server nodes, and must be identical on all servers in the cluster. The default backend for Flannel is vxlan. To enable encryption, use the wireguard-native backend. Using vxlan on Rasperry Pi with recent versions of Ubuntu requires additional preparation. Using wireguard-native as the Flannel backend may require additional modules on some Linux distributions. Please see the WireGuard Install Guide for details. The WireGuard install steps will ensure the appropriate kernel modules are installed for your operating system. You must ensure that WireGuard kernel modules are available on every node, both servers and agents, before attempting to use the WireGuard Flannel backend. CLI Flag and Value Description --flannel-ipv6-masq Apply masquerading rules to IPv6 traffic (default for IPv4). Only applies on dual-stack or IPv6-only clusters. Compatible with any Flannel backend other than none. --flannel-external-ip Use node external IP addresses as the destination for Flannel traffic, instead of internal IPs. Only applies when --node-external-ip is set on a node. --flannel-backend=vxlan Use VXLAN to encapsulate the packets. May require additional kernel modules on Raspberry Pi. --flannel-backend=host-gw Use IP routes to pod subnets via node IPs. Requires direct layer 2 connectivity between all nodes in the cluster. --flannel-backend=wireguard-native Use WireGuard to encapsulate and encrypt network traffic. May require additional kernel modules. --flannel-backend=ipsec Use strongSwan IPSec via the swanctl binary to encrypt network traffic. (Deprecated; will be removed in v1.27.0) --flannel-backend=wireguard Use WireGuard via the wg binary to encrypt network traffic. May require additional kernel modules and configuration. (Deprecated; will be removed in v1.26.0) --flannel-backend=none Disable Flannel entirely. Version Gate K3s no longer includes strongSwan swanctl and charon binaries starting with the 2022-12 releases (v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1). Please install the correct packages on your node before upgrading to or installing these releases if you want to use the ipsec backend.","s":"Flannel Options","u":"/installation/network-options","h":"#flannel-options","p":300},{"i":305,"t":"The legacy wireguard backend requires installation of the wg tool on the host. This backend will be removed in K3s v1.26, in favor of wireguard-native backend, which directly interfaces with the kernel. The legacy ipsec backend requires installation of the swanctl and charon binaries on the host. This backend will be removed in K3s v1.27, in favor of the wireguard-native backend. We recommend that users migrate to the new backend as soon as possible. The migration requires a short period of downtime while nodes come up with the new configuration. You should follow these two steps: Update the K3s config on all server nodes. If using config files, the /etc/rancher/k3s/config.yaml should include flannel-backend: wireguard-native instead of flannel-backend: wireguard or flannel-backend: ipsec. If you are configuring K3s via CLI flags in the systemd unit, the equivalent flags should be changed. Reboot all nodes, starting with the servers.","s":"Migrating from wireguard or ipsec to wireguard-native","u":"/installation/network-options","h":"#migrating-from-wireguard-or-ipsec-to-wireguard-native","p":300},{"i":307,"t":"Start K3s with --flannel-backend=none and install your CNI of choice. Most CNI plugins come with their own network policy engine, so it is recommended to set --disable-network-policy as well to avoid conflicts. Some important information to take into consideration: Canal Calico Cilium Visit the Canal Docs website. Follow the steps to install Canal. Modify the Canal YAML so that IP forwarding is allowed in the container_settings section, for example: \"container_settings\": { \"allow_ip_forwarding\": true } Apply the Canal YAML. Ensure the settings were applied by running the following command on the host: cat /etc/cni/net.d/10-canal.conflist You should see that IP forwarding is set to true. Follow the Calico CNI Plugins Guide. Modify the Calico YAML so that IP forwarding is allowed in the container_settings section, for example: \"container_settings\": { \"allow_ip_forwarding\": true } Apply the Calico YAML. Ensure the settings were applied by running the following command on the host: cat /etc/cni/net.d/10-calico.conflist You should see that IP forwarding is set to true. Before running k3s-killall.sh or k3s-uninstall.sh, you must manually remove cilium_host, cilium_net and cilium_vxlan interfaces. If you fail to do this, you may lose network connectivity to the host when K3s is stopped ip link delete cilium_host ip link delete cilium_net ip link delete cilium_vxlan Additionally, iptables rules for cilium should be removed: iptables-save | grep -iv cilium | iptables-restore ip6tables-save | grep -iv cilium | ip6tables-restore","s":"Custom CNI","u":"/installation/network-options","h":"#custom-cni","p":300},{"i":309,"t":"K3s agents and servers maintain websocket tunnels between nodes that are used to encapsulate bidirectional communication between the control-plane (apiserver) and agent (kubelet and containerd) components. This allows agents to operate without exposing the kubelet and container runtime streaming ports to incoming connections, and for the control-plane to connect to cluster services when operating with the agent disabled. This functionality is equivalent to the Konnectivity service commonly used on other Kubernetes distributions, and is managed via the apiserver's egress selector configuration. The egress selector mode may be configured on servers via the --egress-selector-mode flag, and offers four modes: disabled: The apiserver does not use agent tunnels to communicate with kubelets or cluster endpoints. This mode requires that servers run the kubelet, CNI, and kube-proxy, and have direct connectivity to agents, or the apiserver will not be able to access service endpoints or perform kubectl exec and kubectl logs. agent (default): The apiserver uses agent tunnels to communicate with kubelets. This mode requires that the servers also run the kubelet, CNI, and kube-proxy, or the apiserver will not be able to access service endpoints. pod: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Nodes. NOTE: This will not work when using a CNI that uses its own IPAM and does not respect the node's PodCIDR allocation. cluster or agent should be used with these CNIs instead. cluster: The apiserver uses agent tunnels to communicate with kubelets and service endpoints, routing endpoint connections to the correct agent by watching Endpoints.","s":"Control-Plane Egress Selector configuration","u":"/installation/network-options","h":"#control-plane-egress-selector-configuration","p":300},{"i":311,"t":"Version Gate Experimental support is available as of v1.21.0+k3s1. Stable support is available as of v1.23.7+k3s1. Known Issue Kubernetes Issue #111695 causes the Kubelet to ignore the node IPv6 addresses if you have a dual-stack environment and you are not using the primary network interface for cluster traffic. To avoid this bug, add the following flag to both K3s servers and agents: --kubelet-arg=\"node-ip=0.0.0.0\" # To proritize IPv4 traffic #OR --kubelet-arg=\"node-ip=::\" # To proritize IPv6 traffic Dual-stack networking must be configured when the cluster is first created. It cannot be enabled on an existing cluster once it has been started as IPv4-only. To enable dual-stack in K3s, you must provide valid dual-stack cluster-cidr and service-cidr on all server nodes. This is an example of a valid configuration: --cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112 Note that you may configure any valid cluster-cidr and service-cidr values, but the above masks are recommended. If you change the cluster-cidr mask, you should also change the node-cidr-mask-size-ipv4 and node-cidr-mask-size-ipv6 values to match the planned pods per node and total node count. The largest supported service-cidr mask is /12 for IPv4, and /112 for IPv6. Remember to allow ipv6 traffic if you are deploying in a public cloud. If you are using a custom CNI plugin, i.e. a CNI plugin other than Flannel, the additional configuration may be required. Please consult your plugin's dual-stack documentation and verify if network policies can be enabled.","s":"Dual-stack (IPv4 + IPv6) Networking","u":"/installation/network-options","h":"#dual-stack-ipv4--ipv6-networking","p":300},{"i":313,"t":"Version Gate Available as of v1.22.9+k3s1 Known Issue If your IPv6 default route is set by a router advertisement (RA), you will need to set the sysctl net.ipv6.conf.all.accept_ra=2; otherwise, the node will drop the default route once it expires. Be aware that accepting RAs could increase the risk of man-in-the-middle attacks. Single-stack IPv6 clusters (clusters without IPv4) are supported on K3s using the --cluster-cidr and --service-cidr flags. This is an example of a valid configuration: --cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112","s":"Single-stack IPv6 Networking","u":"/installation/network-options","h":"#single-stack-ipv6-networking","p":300},{"i":315,"t":"A K3s cluster can still be deployed on nodes which do not share a common private network and are not directly connected (e.g. nodes in different public clouds). There are two options to achieve this: the embedded k3s multicloud solution and the integration with the tailscale VPN provider. Warning The latency between nodes will increase as external connectivity requires more hops. This will reduce the network performance and could also impact the health of the cluster if latency is too high. Warning Embedded etcd is not supported in this type of deployment. If using embedded etcd, all server nodes must be reachable to each other via their private IPs. Agents may be distributed over multiple networks, but all servers should be in the same location.","s":"Distributed hybrid or multicloud cluster","u":"/installation/network-options","h":"#distributed-hybrid-or-multicloud-cluster","p":300},{"i":317,"t":"K3s uses wireguard to establish a VPN mesh for cluster traffic. Nodes must each have a unique IP through which they can be reached (usually a public IP). K3s supervisor traffic will use a websocket tunnel, and cluster (CNI) traffic will use a wireguard tunnel. To enable this type of deployment, you must add the following parameters on servers: --node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip and on agents: --node-external-ip=<AGENT_EXTERNAL_IP> where SERVER_EXTERNAL_IP is the IP through which we can reach the server node and AGENT_EXTERNAL_IP is the IP through which we can reach the agent node. Note that the K3S_URL config parameter in the agent should use the SERVER_EXTERNAL_IP to be able to connect to it. Remember to check the Networking Requirements and allow access to the listed ports on both internal and external addresses. Both SERVER_EXTERNAL_IP and AGENT_EXTERNAL_IP must have connectivity between them and are normally public IPs. Dynamic IPs If nodes are assigned dynamic IPs and the IP changes (e.g. in AWS), you must modify the --node-external-ip parameter to reflect the new IP. If running K3s as a service, you must modify /etc/systemd/system/k3s.service then run: systemctl daemon-reload systemctl restart k3s","s":"Embedded k3s multicloud solution","u":"/installation/network-options","h":"#embedded-k3s-multicloud-solution","p":300},{"i":319,"t":"Available in v1.27.3, v1.26.6, v1.25.11 and newer. K3s can integrate with Tailscale so that nodes use the Tailscale VPN service to build a mesh between nodes. There are four steps to be done with Tailscale before deploying K3s: Log in to your Tailscale account In Settings > Keys, generate an auth key ($AUTH-KEY), which may be reusable for all nodes in your cluster Decide on the podCIDR the cluster will use (by default 10.42.0.0/16). Append the CIDR (or CIDRs for dual-stack) in Access controls with the stanza: \"autoApprovers\": { \"routes\": { \"10.42.0.0/16\": [\"your_account@xyz.com\"], \"2001:cafe:42:0::/56\": [\"your_account@xyz.com\"], }, }, Install Tailscale in your nodes: curl -fsSL https://tailscale.com/install.sh | sh To deploy K3s with Tailscale integration enabled, you must add the following parameter on each of your nodes: --vpn-auth=\"name=tailscale,joinKey=$AUTH-KEY or provide that information in a file and use the parameter: --vpn-auth-file=$PATH_TO_FILE Warning If you plan on running several K3s clusters using the same tailscale network, please create appropriate ACLs to avoid IP conflicts or use different podCIDR subnets for each cluster.","s":"Integration with the Tailscale VPN provider (experimental)","u":"/installation/network-options","h":"#integration-with-the-tailscale-vpn-provider-experimental","p":300},{"i":322,"t":"On server nodes, any file found in /var/lib/rancher/k3s/server/manifests will automatically be deployed to Kubernetes in a manner similar to kubectl apply, both on startup and when the file is changed on disk. Deleting files out of this directory will not delete the corresponding resources from the cluster. Manifests are tracked as AddOn custom resources in the kube-system namespace. Any errors or warnings encountered when applying the manifest file may seen by using kubectl describe on the corresponding AddOn, or by using kubectl get event -n kube-system to view all events for that namespace, including those from the deploy controller.","s":"Auto-Deploying Manifests (AddOns)","u":"/installation/packaged-components","h":"#auto-deploying-manifests-addons","p":320},{"i":324,"t":"K3s comes with a number of packaged components that are deployed as AddOns via the manifests directory: coredns, traefik, local-storage, and metrics-server. The embedded servicelb LoadBalancer controller does not have a manifest file, but can be disabled as if it were an AddOn for historical reasons. Manifests for packaged components are managed by K3s, and should not be altered. The files are re-written to disk whenever K3s is started, in order to ensure their integrity.","s":"Packaged Components","u":"/installation/packaged-components","h":"#packaged-components","p":320},{"i":326,"t":"You may place additional files in the manifests directory for deployment as an AddOn. Each file may contain multiple Kubernetes resources, delmited by the --- YAML document separator. For more information on organizing resources in manifests, see the Managing Resources section of the Kubernetes documentation. File Naming Requirements​ The AddOn name for each file in the manifest directory is derived from the file basename. Ensure that all files within the manifests directory (or within any subdirectories) have names that are unique, and adhere to Kubernetes object naming restrictions. Care should also be taken not to conflict with names in use by the default K3s packaged components, even if those components are disabled. Here is en example of an error that would be reported if the file name contains underscores: Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml: Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*') danger If you have multiple server nodes, and place additional AddOn manifests on more than one server, it is your responsibility to ensure that files stay in sync across those nodes. K3s does not sync AddOn content between nodes, and cannot guarantee correct behavior if different servers attempt to deploy conflicting manifests.","s":"User AddOns","u":"/installation/packaged-components","h":"#user-addons","p":320},{"i":328,"t":"There are two ways to disable deployment of specific content from the manifests directory.","s":"Disabling Manifests","u":"/installation/packaged-components","h":"#disabling-manifests","p":320},{"i":330,"t":"The AddOns for packaged components listed above, in addition to AddOns for any additional manifests placed in the manifests directory, can be disabled with the --disable flag. Disabled AddOns are actively uninstalled from the cluster, and the source files deleted from the manifests directory. For example, to disable traefik from being installed on a new cluster, or to uninstall it and remove the manifest from an existing cluster, you can start K3s with --disable=traefik. Multiple items can be disabled by separating their names with commas, or by repeating the flag.","s":"Using the --disable flag","u":"/installation/packaged-components","h":"#using-the---disable-flag","p":320},{"i":332,"t":"For any file under /var/lib/rancher/k3s/server/manifests, you can create a .skip file which will cause K3s to ignore the corresponding manifest. The contents of the .skip file do not matter, only its existence is checked. Note that creating a .skip file after an AddOn has already been created will not remove or otherwise modify it or the resources it created; the file is simply treated as if it did not exist. For example, creating an empty traefik.yaml.skip file in the manifests directory before K3s is started the first time, will cause K3s to skip deploying traefik.yaml: $ ls /var/lib/rancher/k3s/server/manifests ccm.yaml local-storage.yaml rolebindings.yaml traefik.yaml.skip coredns.yaml traefik.yaml $ kubectl get pods -A NAMESPACE NAME READY STATUS RESTARTS AGE kube-system local-path-provisioner-64ffb68fd-xx98j 1/1 Running 0 74s kube-system metrics-server-5489f84d5d-7zwkt 1/1 Running 0 74s kube-system coredns-85cb69466-vcq7j 1/1 Running 0 74s If Traefik had already been deployed prior to creating the traefik.skip file, Traefik would stay as-is, and would not be affected by future updates when K3s is upgraded.","s":"Using .skip files","u":"/installation/packaged-components","h":"#using-skip-files","p":320},{"i":334,"t":"For information about managing Helm charts via auto-deploying manifests, refer to the section about Helm.","s":"Helm AddOns","u":"/installation/packaged-components","h":"#helm-addons","p":320},{"i":336,"t":"Containerd can be configured to connect to private registries and use them to pull private images on the node. Upon startup, K3s will check to see if a registries.yaml file exists at /etc/rancher/k3s/ and instruct containerd to use any registries defined in the file. If you wish to use a private registry, then you will need to create this file as root on each node that will be using the registry. Note that server nodes are schedulable by default. If you have not tainted the server nodes and will be running workloads on them, please ensure you also create the registries.yaml file on each server as well. Configuration in containerd can be used to connect to a private registry with a TLS connection and with registries that enable authentication as well. The following section will explain the registries.yaml file and give different examples of using private registry configuration in K3s.","s":"Private Registry Configuration","u":"/installation/private-registry","h":"","p":335},{"i":338,"t":"The file consists of two main sections: mirrors configs","s":"Registries Configuration File","u":"/installation/private-registry","h":"#registries-configuration-file","p":335},{"i":340,"t":"Mirrors is a directive that defines the names and endpoints of the private registries, for example: mirrors: mycustomreg.com: endpoint: - \"https://mycustomreg.com:5000\" Each mirror must have a name and set of endpoints. When pulling an image from a registry, containerd will try these endpoint URLs one by one, and use the first working one. Redirects​ If a public registry is used as a mirror, such as when configuring a pull through cache, images pulls are transparently redirected. For example, if you have a mirror configured for docker.io: mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" Then pulling docker.io/rancher/coredns-coredns:1.6.3 will transparently pull the image from https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3. Rewrites​ Each mirror can have a set of rewrites. Rewrites can change the tag of an image based on a regular expression. This is useful if the organization/project structure in the mirror registry is different to the upstream one. For example, the following configuration would transparently pull the image docker.io/rancher/coredns-coredns:1.6.3 from registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3: mirrors: docker.io: endpoint: - \"https://registry.example.com:5000\" rewrite: \"^rancher/(.*)\": \"mirrorproject/rancher-images/$1\" The image will still be stored under the original name so that a crictl image ls will show docker.io/rancher/coredns-coredns:1.6.3 as available on the node, even though the image was pulled from the mirrored registry with a different name.","s":"Mirrors","u":"/installation/private-registry","h":"#mirrors","p":335},{"i":342,"t":"The configs section defines the TLS and credential configuration for each mirror. For each mirror you can define auth and/or tls. The tls part consists of: Directive Description cert_file The client certificate path that will be used to authenticate with the registry key_file The client key path that will be used to authenticate with the registry ca_file Defines the CA certificate path to be used to verify the registry's server cert file insecure_skip_verify Boolean that defines if TLS verification should be skipped for the registry The auth part consists of either username/password or authentication token: Directive Description username user name of the private registry basic auth password user password of the private registry basic auth auth authentication token of the private registry basic auth Below are basic examples of using private registries in different modes:","s":"Configs","u":"/installation/private-registry","h":"#configs","p":335},{"i":344,"t":"Below are examples showing how you may configure /etc/rancher/k3s/registries.yaml on each node when using TLS. With Authentication Without Authentication mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": auth: username: xxxxxx # this is the registry username password: xxxxxx # this is the registry password tls: cert_file: # path to the cert file used in the registry key_file: # path to the key file used in the registry ca_file: # path to the ca file used in the registry mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": tls: cert_file: # path to the cert file used in the registry key_file: # path to the key file used in the registry ca_file: # path to the ca file used in the registry","s":"With TLS","u":"/installation/private-registry","h":"#with-tls","p":335},{"i":346,"t":"Below are examples showing how you may configure /etc/rancher/k3s/registries.yaml on each node when not using TLS. With Authentication Without Authentication mirrors: docker.io: endpoint: - \"http://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": auth: username: xxxxxx # this is the registry username password: xxxxxx # this is the registry password mirrors: docker.io: endpoint: - \"http://mycustomreg.com:5000\" In case of no TLS communication, you need to specify http:// for the endpoints, otherwise it will default to https. In order for the registry changes to take effect, you need to restart K3s on each node.","s":"Without TLS","u":"/installation/private-registry","h":"#without-tls","p":335},{"i":348,"t":"First, obtain the k3s-images.txt file from GitHub for the release you are working with. Pull the K3s images listed on the k3s-images.txt file from docker.io Example: docker pull docker.io/rancher/coredns-coredns:1.6.3 Then, retag the images to the private registry. Example: docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns Last, push the images to the private registry. Example: docker push mycustomreg.com:5000/coredns-coredns","s":"Adding Images to the Private Registry","u":"/installation/private-registry","h":"#adding-images-to-the-private-registry","p":335},{"i":350,"t":"K3s is very lightweight, but has some minimum requirements as outlined below. Whether you're configuring K3s to run in a container or as a native Linux service, each node running K3s should meet the following minimum requirements. These requirements are baseline for K3s and its packaged components, and do not include resources consumed by the workload itself.","s":"Requirements","u":"/installation/requirements","h":"","p":349},{"i":352,"t":"Two nodes cannot have the same hostname. If multiple nodes will have the same hostname, or if hostnames may be reused by an automated provisioning system, use the --with-node-id option to append a random suffix for each node, or devise a unique name to pass with --node-name or $K3S_NODE_NAME for each node you add to the cluster.","s":"Prerequisites","u":"/installation/requirements","h":"#prerequisites","p":349},{"i":354,"t":"K3s is available for the following architectures: x86_64 armhf arm64/aarch64 s390x ARM64 Page Size Prior to May 2023 releases (v1.24.14+k3s1, v1.25.10+k3s1, v1.26.5+k3s1, v1.27.2+k3s1), on aarch64/arm64 systems, the OS must use a 4k page size. RHEL9, Ubuntu, Raspberry PI OS, and SLES all meet this requirement.","s":"Architecture","u":"/installation/requirements","h":"#architecture","p":349},{"i":356,"t":"K3s is expected to work on most modern Linux systems. Some OSs have specific requirements: If you are using (Red Hat/CentOS) Enterprise Linux, follow these steps for additional setup. If you are using Raspberry Pi OS, follow these steps to switch to legacy iptables. For more information on which OSs were tested with Rancher managed K3s clusters, refer to the Rancher support and maintenance terms.","s":"Operating Systems","u":"/installation/requirements","h":"#operating-systems","p":349},{"i":358,"t":"Hardware requirements scale based on the size of your deployments. Minimum recommendations are outlined here. Spec Minimum Recommended CPU 1 core 2 cores RAM 512 MB 1 GB Resource Profiling captures the results of tests to determine minimum resource requirements for the K3s agent, the K3s server with a workload, and the K3s server with one agent. It also contains analysis about what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads. Raspberry Pi and embedded etcd If deploying K3s with embedded etcd on a Raspberry Pi, it is recommended that you use an external SSD. etcd is write intensive, and SD cards cannot handle the IO load. Disks​ K3s performance depends on the performance of the database. To ensure optimal speed, we recommend using an SSD when possible. Disk performance will vary on ARM devices utilizing an SD card or eMMC.","s":"Hardware","u":"/installation/requirements","h":"#hardware","p":349},{"i":360,"t":"The K3s server needs port 6443 to be accessible by all nodes. The nodes need to be able to reach other nodes over UDP port 8472 when Flannel VXLAN is used or over UDP ports 51820 and 51821 (when using IPv6) when Flannel Wireguard backend is used. The node should not listen on any other port. K3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel. However, if you do not use Flannel and provide your own custom CNI, then the ports needed by Flannel are not needed by K3s. If you wish to utilize the metrics server, all nodes must be accessible to each other on port 10250. If you plan on achieving high availability with embedded etcd, server nodes must be accessible to each other on ports 2379 and 2380. Important The VXLAN port on nodes should not be exposed to the world as it opens up your cluster network to be accessed by anyone. Run your nodes behind a firewall/security group that disables access to port 8472. danger Flannel relies on the Bridge CNI plugin to create a L2 network that switches traffic. Rogue pods with NET_RAW capabilities can abuse that L2 network to launch attacks such as ARP spoofing. Therefore, as documented in the Kubernetes docs, please set a restricted profile that disables NET_RAW on non-trustable pods.","s":"Networking","u":"/installation/requirements","h":"#networking","p":349},{"i":362,"t":"Protocol Port Source Destination Description TCP 2379-2380 Servers Servers Required only for HA with embedded etcd TCP 6443 Agents Servers K3s supervisor and Kubernetes API Server UDP 8472 All nodes All nodes Required only for Flannel VXLAN TCP 10250 All nodes All nodes Kubelet metrics UDP 51820 All nodes All nodes Required only for Flannel Wireguard with IPv4 UDP 51821 All nodes All nodes Required only for Flannel Wireguard with IPv6 Typically, all outbound traffic is allowed. Additional changes to the firewall may be required depending on the OS used. See Additional OS Preparations.","s":"Inbound Rules for K3s Server Nodes","u":"/installation/requirements","h":"#inbound-rules-for-k3s-server-nodes","p":349},{"i":364,"t":"Hardware requirements are based on the size of your K3s cluster. For production and large clusters, we recommend using a high-availability setup with an external database. The following options are recommended for the external database in production: MySQL PostgreSQL etcd","s":"Large Clusters","u":"/installation/requirements","h":"#large-clusters","p":349},{"i":366,"t":"The following are the minimum CPU and memory requirements for nodes in a high-availability K3s server: Deployment Size Nodes VCPUS RAM Small Up to 10 2 4 GB Medium Up to 100 4 8 GB Large Up to 250 8 16 GB X-Large Up to 500 16 32 GB XX-Large 500+ 32 64 GB","s":"CPU and Memory","u":"/installation/requirements","h":"#cpu-and-memory","p":349},{"i":368,"t":"The cluster performance depends on database performance. To ensure optimal speed, we recommend always using SSD disks to back your K3s cluster. On cloud providers, you will also want to use the minimum size that allows the maximum IOPS.","s":"Disks","u":"/installation/requirements","h":"#disks-1","p":349},{"i":370,"t":"You should consider increasing the subnet size for the cluster CIDR so that you don't run out of IPs for the pods. You can do that by passing the --cluster-cidr option to K3s server upon starting.","s":"Network","u":"/installation/requirements","h":"#network","p":349},{"i":372,"t":"K3s supports different databases including MySQL, PostgreSQL, MariaDB, and etcd. See Cluster Datastore for more info. The following is a sizing guide for the database resources you need to run large clusters: Deployment Size Nodes VCPUS RAM Small Up to 10 1 2 GB Medium Up to 100 2 8 GB Large Up to 250 4 16 GB X-Large Up to 500 8 32 GB XX-Large 500+ 16 64 GB","s":"Database","u":"/installation/requirements","h":"#database","p":349},{"i":374,"t":"Starting the K3s server with --cluster-init will run all control-plane components, including the apiserver, controller-manager, scheduler, and etcd. It is possible to disable specific components in order to split the control-plane and etcd roles on to separate nodes. info This document is only relevant when using embedded etcd. When not using embedded etcd, all servers will have the control-plane role and run control-plane components.","s":"Managing Server Roles","u":"/installation/server-roles","h":"","p":373},{"i":376,"t":"To create a server with only the etcd role, start K3s with all the control-plane components disabled: curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler This first node will start etcd, and wait for additional etcd and/or control-plane nodes to join. The cluster will not be usable until you join an additional server with the control-plane components enabled.","s":"Dedicated etcd Nodes","u":"/installation/server-roles","h":"#dedicated-etcd-nodes","p":373},{"i":378,"t":"note A dedicated control-plane node cannot be the first server in the cluster; there must be an existing node with the etcd role before joining dedicated control-plane nodes. To create a server with only the control-plane role, start k3s with etcd disabled: curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443 After creating dedicated server nodes, the selected roles will be visible in kubectl get node: $ kubectl get nodes NAME STATUS ROLES AGE VERSION k3s-server-1 Ready etcd 5h39m v1.20.4+k3s1 k3s-server-2 Ready control-plane,master 5h39m v1.20.4+k3s1","s":"Dedicated control-plane Nodes","u":"/installation/server-roles","h":"#dedicated-control-plane-nodes","p":373},{"i":380,"t":"Roles can be added to existing dedicated nodes by restarting K3s with the disable flags removed. For example ,if you want to add the control-plane role to a dedicated etcd node, you can remove the --disable-apiserver --disable-controller-manager --disable-scheduler flags from the systemd unit or config file, and restart the service.","s":"Adding Roles To Existing Servers","u":"/installation/server-roles","h":"#adding-roles-to-existing-servers","p":373},{"i":382,"t":"As with all other CLI flags, you can use the Configuration File to disable components, instead of passing the options as CLI flags. For example, to create a dedicated etcd node, you can place the following values in /etc/rancher/k3s/config.yaml: cluster-init: true disable-apiserver: true disable-controller-manager: true disable-scheduler: true","s":"Configuration File Syntax","u":"/installation/server-roles","h":"#configuration-file-syntax","p":373},{"i":384,"t":"caution Uninstalling K3s deletes the local cluster data, configuration, and all of the scripts and CLI tools. It does not remove any data from external datastores, or created by pods using external Kubernetes storage volumes. If you installed K3s using the installation script, a script to uninstall K3s was generated during installation. If you are planning on rejoining a node to an existing cluster after uninstalling and reinstalling, be sure to delete the node from the cluster to ensure that the node password secret is removed. See the Node Registration documentation for more information.","s":"Uninstalling K3s","u":"/installation/uninstall","h":"","p":383},{"i":386,"t":"To uninstall K3s from a server node, run: /usr/local/bin/k3s-uninstall.sh","s":"Uninstalling Servers","u":"/installation/uninstall","h":"#uninstalling-servers","p":383},{"i":388,"t":"To uninstall K3s from an agent node, run: /usr/local/bin/k3s-agent-uninstall.sh","s":"Uninstalling Agents","u":"/installation/uninstall","h":"#uninstalling-agents","p":383},{"i":390,"t":"The Known Issues are updated periodically and designed to inform you about any issues that may not be immediately addressed in the next upcoming release.","s":"Known Issues","u":"/known-issues","h":"","p":389},{"i":392,"t":"If you plan to use K3s with docker, Docker installed via a snap package is not recommended as it has been known to cause issues running K3s.","s":"Snap Docker","u":"/known-issues","h":"#snap-docker","p":389},{"i":394,"t":"If you are running iptables in nftables mode instead of legacy you might encounter issues. We recommend utilizing newer iptables (such as 1.6.1+) to avoid issues. Additionally, versions 1.8.0-1.8.4 have known issues that can cause K3s to fail. See Additional OS Preparations for workarounds.","s":"Iptables","u":"/known-issues","h":"#iptables","p":389},{"i":396,"t":"Running K3s with Rootless mode is experimental and has several known issues.","s":"Rootless Mode","u":"/known-issues","h":"#rootless-mode","p":389},{"i":398,"t":"Kubernetes removed PodSecurityPolicy from v1.25 in favor of Pod Security Standards. You can read more about PSS in the upstream documentation. For K3S, there are some manual steps that must be taken if any PodSecurityPoliciy has been configured on the nodes. On all nodes, update the kube-apiserver-arg value to remove the PodSecurityPolicy admission-plugin. Add the following arg value instead: 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml', but do NOT restart or upgrade K3S yet. Below is an example of what a configuration file might look like after this update for the node to be hardened: protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true' Create the /var/lib/rancher/k3s/server/psa.yaml file with the following contents. You may want to exempt more namespaces as well. The below example exempts kube-system (required), cis-operator-system (optional, but useful for when running security scans through Rancher), and system-upgrade (required if doing Automated Upgrades). apiVersion: apiserver.config.k8s.io/v1 kind: AdmissionConfiguration plugins: - name: PodSecurity configuration: apiVersion: pod-security.admission.config.k8s.io/v1beta1 kind: PodSecurityConfiguration defaults: enforce: \"restricted\" enforce-version: \"latest\" audit: \"restricted\" audit-version: \"latest\" warn: \"restricted\" warn-version: \"latest\" exemptions: usernames: [] runtimeClasses: [] namespaces: [kube-system, cis-operator-system, system-upgrade] Perform the upgrade as normal. If doing Automated Upgrades, ensure that the namespace where the system-upgrade-controller pod is running in is setup to be privileged in accordance with the Pod Security levels: apiVersion: v1 kind: Namespace metadata: name: system-upgrade labels: # This value must be privileged for the controller to run successfully. pod-security.kubernetes.io/enforce: privileged pod-security.kubernetes.io/enforce-version: v1.25 # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options. pod-security.kubernetes.io/audit: privileged pod-security.kubernetes.io/audit-version: v1.25 pod-security.kubernetes.io/warn: privileged pod-security.kubernetes.io/warn-version: v1.25 After the upgrade is complete, remove any remaining PSP resources from the cluster. In many cases, there may be PodSecurityPolicies and associated RBAC resources in custom files used for hardening within /var/lib/rancher/k3s/server/manifests/. Remove those resources and k3s will update automatically. Sometimes, due to timing, some of these may be left in the cluster, in which case you will need to delete them manually. If the Hardening Guide was previously followed, you should be able to delete them via the following: # Get the resources associated with PSPs $ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp # Delete those resources: $ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding","s":"Upgrading Hardened Clusters from v1.24.x to v1.25.x","u":"/known-issues","h":"#hardened-125","p":389},{"i":400,"t":"This page explains how CoreDNS, the Traefik Ingress controller, and Klipper service load balancer work within K3s. Refer to the Installation Network Options page for details on Flannel configuration options and backend selection, or how to set up your own CNI. For information on which ports need to be opened for K3s, refer to the Networking Requirements.","s":"Networking","u":"/networking","h":"","p":399},{"i":402,"t":"CoreDNS is deployed automatically on server startup. To disable it, configure all servers in the cluster with the --disable=coredns option. If you don't install CoreDNS, you will need to install a cluster DNS provider yourself.","s":"CoreDNS","u":"/networking","h":"#coredns","p":399},{"i":404,"t":"Traefik is a modern HTTP reverse proxy and load balancer made to deploy microservices with ease. It simplifies networking complexity while designing, deploying, and running applications. The Traefik ingress controller deploys a LoadBalancer Service that uses ports 80 and 443. By default, ServiceLB will expose these ports on all cluster members, meaning these ports will not be usable for other HostPort or NodePort pods. Traefik is deployed by default when starting the server. For more information see Managing Packaged Components. The default config file is found in /var/lib/rancher/k3s/server/manifests/traefik.yaml. The traefik.yaml file should not be edited manually, as K3s will replace the file with defaults at startup. Instead, you should customize Traefik by creating an additional HelmChartConfig manifest in /var/lib/rancher/k3s/server/manifests. For more details and an example see Customizing Packaged Components with HelmChartConfig. For more information on the possible configuration values, refer to the official Traefik Helm Configuration Parameters.. To remove Traefik from your cluster, start all servers with the --disable=traefik flag. K3s versions 1.20 and earlier include Traefik v1. K3s versions 1.21 and later install Traefik v2, unless an existing installation of Traefik v1 is found, in which case Traefik is not upgraded to v2. For more information on the specific version of Traefik included with K3s, consult the Release Notes for your version. To migrate from an older Traefik v1 instance please refer to the Traefik documentation and migration tool.","s":"Traefik Ingress Controller","u":"/networking","h":"#traefik-ingress-controller","p":399},{"i":406,"t":"K3s includes an embedded network policy controller. The underlying implementation is kube-router's netpol controller library (no other kube-router functionality is present) and can be found here. To disable it, start each server with the --disable-network-policy flag. note Network policy iptables rules are not removed if the K3s configuration is changed to disable the network policy controller. To clean up the configured kube-router network policy rules after disabling the network policy controller, use the k3s-killall.sh script, or clean them using iptables-save and iptables-restore. These steps must be ryn manually on all nodes in the cluster. iptables-save | grep -v KUBE-ROUTER | iptables-restore ip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore","s":"Network Policy Controller","u":"/networking","h":"#network-policy-controller","p":399},{"i":408,"t":"Any LoadBalancer controller can be deployed to your K3s cluster. By default, K3s provides a load balancer known as ServiceLB (formerly Klipper LoadBalancer) that uses available host ports. Upstream Kubernetes allows Services of type LoadBalancer to be created, but doesn't include a default load balancer implementation, so these services will remain pending until one is installed. Many hosted services require a cloud provider such as Amazon EC2 or Microsoft Azure to offer an external load balancer implementation. By contrast, the K3s ServiceLB makes it possible to use LoadBalancer Services without a cloud provider or any additional configuration.","s":"Service Load Balancer","u":"/networking","h":"#service-load-balancer","p":399},{"i":410,"t":"The ServiceLB controller watches Kubernetes Services with the spec.type field set to LoadBalancer. For each LoadBalancer Service, a DaemonSet is created in the kube-system namespace. This DaemonSet in turn creates Pods with a svc- prefix, on each node. These Pods use iptables to forward traffic from the Pod's NodePort, to the Service's ClusterIP address and port. If the ServiceLB Pod runs on a node that has an external IP configured, the node's external IP is populated into the Service's status.loadBalancer.ingress address list. Otherwise, the node's internal IP is used. If multiple LoadBalancer Services are created, a separate DaemonSet is created for each Service. It is possible to expose multiple Services on the same node, as long as they use different ports. If you try to create a LoadBalancer Service that listens on port 80, the ServiceLB will try to find a free host in the cluster for port 80. If no host with that port is available, the LB will remain Pending.","s":"How ServiceLB Works","u":"/networking","h":"#how-servicelb-works","p":399},{"i":412,"t":"Create a Service of type LoadBalancer in K3s.","s":"Usage","u":"/networking","h":"#usage","p":399},{"i":414,"t":"Adding the svccontroller.k3s.cattle.io/enablelb=true label to one or more nodes switches the ServiceLB controller into allow-list mode, where only nodes with the label are eligible to host LoadBalancer pods. Nodes that remain unlabeled will be excluded from use by ServiceLB. note By default, nodes are not labeled. As long as all nodes remain unlabeled, all nodes with ports available will be used by ServiceLB.","s":"Controlling ServiceLB Node Selection","u":"/networking","h":"#controlling-servicelb-node-selection","p":399},{"i":416,"t":"To select a particular subset of nodes to host pods for a LoadBalancer, add the enablelb label to the desired nodes, and set matching lbpool label values on the Nodes and Services. For example: Label Node A and Node B with svccontroller.k3s.cattle.io/lbpool=pool1 and svccontroller.k3s.cattle.io/enablelb=true Label Node C and Node D with svccontroller.k3s.cattle.io/lbpool=pool2 and svccontroller.k3s.cattle.io/enablelb=true Create one LoadBalancer Service on port 443 with label svccontroller.k3s.cattle.io/lbpool=pool1. The DaemonSet for this service only deploy Pods to Node A and Node B. Create another LoadBalancer Service on port 443 with label svccontroller.k3s.cattle.io/lbpool=pool2. The DaemonSet will only deploy Pods to Node C and Node D.","s":"Creating ServiceLB Node Pools","u":"/networking","h":"#creating-servicelb-node-pools","p":399},{"i":418,"t":"To disable ServiceLB, configure all servers in the cluster with the --disable=servicelb flag. This is necessary if you wish to run a different LB, such as MetalLB.","s":"Disabling ServiceLB","u":"/networking","h":"#disabling-servicelb","p":399},{"i":420,"t":"In order to reduce binary size, K3s removes all \"in-tree\" (built-in) cloud providers. Instead, K3s provides an embedded Cloud Controller Manager (CCM) stub that does the following: Sets node InternalIP and ExternalIP address fields based on the --node-ip and --node-external-ip flags. Hosts the ServiceLB LoadBalancer controller. Clears the node.cloudprovider.kubernetes.io/uninitialized taint that is present when the cloud-provider is set to external Before deploying an external CCM, you must start all K3s servers with the --disable-cloud-controller flag to disable to embedded CCM. note If you disable the built-in CCM and do not deploy and properly configure an external substitute, nodes will remain tainted and unschedulable.","s":"Deploying an External Cloud Controller Manager","u":"/networking","h":"#deploying-an-external-cloud-controller-manager","p":399},{"i":422,"t":"Some cloud providers, such as Linode, will create machines with \"localhost\" as the hostname and others may not have a hostname set at all. This can cause problems with domain name resolution. You can run K3s with the --node-name flag or K3S_NODE_NAME environment variable and this will pass the node name to resolve this issue.","s":"Nodes Without a Hostname","u":"/networking","h":"#nodes-without-a-hostname","p":399},{"i":424,"t":"Version Gate Experimental as of v1.26.3+k3s1 Warning The network policy controller could not work properly when this flag is enabled. From v1.26 Kubernetes introduced Multicluster CIDR as an alpha feature. (https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs) This feature can be enabled on K3s server with the --multi-cluster-cidr flag and it gives the possibility to define multiple cluster CIDR used to allocate the podCIDR for each node with also the possibility to extend it on an already running cluster. The clustercidr resources will be visible through the API and kubectl (the CIDR configured with --cluster-cidr is defined as the default one). A new clustercidr can be defined as follow: apiVersion: networking.k8s.io/v1alpha1 kind: ClusterCIDR metadata: name: new-cidr spec: nodeSelector: nodeSelectorTerms: - matchExpressions: - key: kubernetes.io/hostname operator: In values: - \"worker2\" perNodeHostBits: 8 ipv4: 10.247.0.0/16 The nodes that match the nodeSelector will use a podCIDR from the new defined resource. note A node that already has a CIDR cannot get a new one. It has to be removed and restarted. Warning A dualstack CIDR could be defined with both ipv4 and ipv6 configuration but the perNodeHostBits will be the same. When a dualstack configuration is defined with --cluster-cidr the --node-cidr-mask-size-ipv6 flag on the kube-controller should be defined to have the same size of IPv4.","s":"Multicluster CIDR (Experimental)","u":"/networking","h":"#multicluster-cidr-experimental","p":399},{"i":426,"t":"This guide will help you quickly launch a cluster with default options. The installation section covers in greater detail how K3s can be set up. For information on how K3s components work together, refer to the architecture section. info New to Kubernetes? The official Kubernetes docs already have some great tutorials outlining the basics here.","s":"Quick-Start Guide","u":"/quick-start","h":"","p":425},{"i":428,"t":"K3s provides an installation script that is a convenient way to install it as a service on systemd or openrc based systems. This script is available at https://get.k3s.io. To install K3s using this method, just run: curl -sfL https://get.k3s.io | sh - After running this installation: The K3s service will be configured to automatically restart after node reboots or if the process crashes or is killed Additional utilities will be installed, including kubectl, crictl, ctr, k3s-killall.sh, and k3s-uninstall.sh A kubeconfig file will be written to /etc/rancher/k3s/k3s.yaml and the kubectl installed by K3s will automatically use it A single-node server installation is a fully-functional Kubernetes cluster, including all the datastore, control-plane, kubelet, and container runtime components necessary to host workload pods. It is not necessary to add additional server or agents nodes, but you may want to do so to add additional capacity or redundancy to your cluster. To install additional agent nodes and add them to the cluster, run the installation script with the K3S_URL and K3S_TOKEN environment variables. Here is an example showing how to join an agent: curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh - Setting the K3S_URL parameter causes the installer to configure K3s as an agent, instead of a server. The K3s agent will register with the K3s server listening at the supplied URL. The value to use for K3S_TOKEN is stored at /var/lib/rancher/k3s/server/node-token on your server node. note Each machine must have a unique hostname. If your machines do not have unique hostnames, pass the K3S_NODE_NAME environment variable and provide a value with a valid and unique hostname for each node.","s":"Install Script","u":"/quick-start","h":"#install-script","p":425},{"i":430,"t":"This section contains detailed coverage of the K3s install script, server/client configuration options, and instructions for use of additional tools.","s":"Reference","u":"/reference","h":"","p":429},{"i":432,"t":"As mentioned in the Quick-Start Guide, you can use the installation script available at https://get.k3s.io to install K3s as a service on systemd and openrc based systems. The simplest form of this command is as follows: curl -sfL https://get.k3s.io | sh - When using this method to install K3s, the following environment variables can be used to configure the installation: Environment Variable Description INSTALL_K3S_SKIP_DOWNLOAD If set to true will not download K3s hash or binary. INSTALL_K3S_SYMLINK By default will create symlinks for the kubectl, crictl, and ctr binaries if the commands do not already exist in path. If set to 'skip' will not create symlinks and 'force' will overwrite. INSTALL_K3S_SKIP_ENABLE If set to true will not enable or start K3s service. INSTALL_K3S_SKIP_START If set to true will not start K3s service. INSTALL_K3S_VERSION Version of K3s to download from Github. Will attempt to download from the stable channel if not specified. INSTALL_K3S_BIN_DIR Directory to install K3s binary, links, and uninstall script to, or use /usr/local/bin as the default. INSTALL_K3S_BIN_DIR_READ_ONLY If set to true will not write files to INSTALL_K3S_BIN_DIR, forces setting INSTALL_K3S_SKIP_DOWNLOAD=true. INSTALL_K3S_SYSTEMD_DIR Directory to install systemd service and environment files to, or use /etc/systemd/system as the default. INSTALL_K3S_EXEC Command with flags to use for launching K3s in the service. If the command is not specified, and the K3S_URL is set, it will default to \"agent.\" If K3S_URL not set, it will default to \"server.\" For help, refer to this example. INSTALL_K3S_NAME Name of systemd service to create, will default to 'k3s' if running k3s as a server and 'k3s-agent' if running k3s as an agent. If specified the name will be prefixed with 'k3s-'. INSTALL_K3S_TYPE Type of systemd service to create, will default from the K3s exec command if not specified. INSTALL_K3S_SELINUX_WARN If set to true will continue if k3s-selinux policy is not found. INSTALL_K3S_SKIP_SELINUX_RPM If set to true will skip automatic installation of the k3s RPM. INSTALL_K3S_CHANNEL_URL Channel URL for fetching K3s download URL. Defaults to https://update.k3s.io/v1-release/channels. INSTALL_K3S_CHANNEL Channel to use for fetching K3s download URL. Defaults to \"stable\". Options include: stable, latest, testing. This example shows where to place aforementioned environment variables as options (after the pipe): curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh - Environment variables which begin with K3S_ will be preserved for the systemd and openrc services to use. Setting K3S_URL without explicitly setting an exec command will default the command to \"agent\". When running the agent, K3S_TOKEN must also be set.","s":"Environment Variables","u":"/reference/env-variables","h":"","p":431},{"i":434,"t":"This section captures the results of tests to determine minimum resource requirements for K3s. The results are summarized as follows: Components Processor Min CPU Min RAM with Kine/SQLite Min RAM with Embedded etcd K3s server with a workload Intel 8375C CPU, 2.90 GHz 6% of a core 1596 M 1606 M K3s cluster with a single agent Intel 8375C CPU, 2.90 GHz 5% of a core 1428 M 1450 M K3s agent Intel 8375C CPU, 2.90 GHz 3% of a core 275 M 275 M K3s server with a workload Pi4B BCM2711, 1.50 GHz 30% of a core 1588 M 1613 M K3s cluster with a single agent Pi4B BCM2711, 1.50 GHz 25% of a core 1215 M 1413 M K3s agent Pi4B BCM2711, 1.50 GHz 10% of a core 268 M 268 M Scope of Resource Testing Components Included for Baseline Measurements Methodology Environment Baseline Resource Requirements K3s Server with a Workload K3s Cluster with a Single Agent K3s Agent Analysis Primary Resource Utilization Drivers Preventing Agents and Workloads from Interfering with the Cluster Datastore","s":"Resource Profiling","u":"/reference/resource-profiling","h":"","p":433},{"i":436,"t":"The resource tests were intended to address the following problem statements: On a single-node cluster, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside to run the entire K3s stack server stack, assuming that a real workload will be deployed on the cluster. On an agent (worker) node, determine the legitimate minimum amount of CPU, memory, and IOPs that should be set aside for the Kubernetes and K3s control plane components (the kubelet and k3s agent).","s":"Scope of Resource Testing","u":"/reference/resource-profiling","h":"#scope-of-resource-testing","p":433},{"i":438,"t":"The tested components are: K3s v1.26.5 with all packaged components enabled Prometheus + Grafana monitoring stack Kubernetes Example Nginx Deployment These are baseline figures for a stable system using only K3s packaged components (Traefik Ingress, Klipper lb, local-path storage) running a standard monitoring stack (Prometheus and Grafana) and the Guestbook example app. Resource figures including IOPS are for the Kubernetes datastore and control plane only, and do not include overhead for system-level management agents or logging, container image management, or any workload-specific requirements.","s":"Components Included for Baseline Measurements","u":"/reference/resource-profiling","h":"#components-included-for-baseline-measurements","p":433},{"i":440,"t":"A standalone instance of Prometheus v2.43.0 was used to collect host CPU, memory, and disk IO statistics using prometheus-node-exporter installed via apt. systemd-cgtop was used to spot-check systemd cgroup-level CPU and memory utilization. system.slice/k3s.service tracks resource utilization for both K3s and containerd, while individual pods are under the kubepods hierarchy. Additional detailed K3s memory utilization data was collected from kubectl top node using the integrated metrics-server for the server and agent processes. Utilization figures were based on 95th percentile readings from steady state operation on nodes running the described workloads.","s":"Methodology","u":"/reference/resource-profiling","h":"#methodology","p":433},{"i":442,"t":"Arch OS System CPU RAM Disk x86_64 Ubuntu 22.04 AWS c6id.xlarge Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz 8 GB NVME SSD aarch64 Raspberry Pi OS 11 Raspberry Pi 4 Model B BCM2711, 4 Core 1.50 GHz 8 GB UHS-III SDXC","s":"Environment","u":"/reference/resource-profiling","h":"#environment","p":433},{"i":444,"t":"This section captures the results of tests to determine minimum resource requirements for basic K3s operation.","s":"Baseline Resource Requirements","u":"/reference/resource-profiling","h":"#baseline-resource-requirements","p":433},{"i":446,"t":"These are the requirements for a single-node cluster in which the K3s server shares resources with a simple workload. The CPU requirements are: System CPU Core Usage Intel 8375C 6% of a core Pi4B 30% of a core The Memory Requirements are: Tested Datastore System Memory Kine/SQLite Intel 8375C 1596 M Pi4B 1588 M Embedded etcd Intel 8375C 1606 M Pi4B 1613 M The Disk requirements are: Tested Datastore IOPS KiB/sec Latency Kine/SQLite 10 500 < 10 ms Embedded etcd 50 250 < 5 ms","s":"K3s Server with a Workload","u":"/reference/resource-profiling","h":"#k3s-server-with-a-workload","p":433},{"i":448,"t":"These are the baseline requirements for a K3s cluster with a K3s server node and a K3s agent, but no workload. K3s Server​ The CPU requirements are: System CPU Core Usage Intel 8375C 5% of a core Pi4B 25% of a core The Memory Requirements are: Tested Datastore System Memory Kine/SQLite Intel 8375C 1428 M Pi4B 1215 M Embedded etcd Intel 8375C 1450 M Pi4B 1413 M","s":"K3s Cluster with a Single Agent","u":"/reference/resource-profiling","h":"#k3s-cluster-with-a-single-agent","p":433},{"i":450,"t":"The requirements are: System CPU Core Usage RAM Intel 8375C 3% of a core 275 M Pi4B 5% of a core 268 M","s":"K3s Agent","u":"/reference/resource-profiling","h":"#k3s-agent","p":433},{"i":452,"t":"This section captures what has the biggest impact on K3s server and agent utilization, and how the cluster datastore can be protected from interference from agents and workloads.","s":"Analysis","u":"/reference/resource-profiling","h":"#analysis","p":433},{"i":454,"t":"K3s server utilization figures are primarily driven by support of the Kubernetes datastore (kine or etcd), API Server, Controller-Manager, and Scheduler control loops, as well as any management tasks necessary to effect changes to the state of the system. Operations that place additional load on the Kubernetes control plane, such as creating/modifying/deleting resources, will cause temporary spikes in utilization. Using operators or apps that make extensive use of the Kubernetes datastore (such as Rancher or other Operator-type applications) will increase the server's resource requirements. Scaling up the cluster by adding additional nodes or creating many cluster resources will increase the server's resource requirements. K3s agent utilization figures are primarily driven by support of container lifecycle management control loops. Operations that involve managing images, provisioning storage, or creating/destroying containers will cause temporary spikes in utilization. Image pulls in particular are typically highly CPU and IO bound, as they involve decompressing image content to disk. If possible, workload storage (pod ephemeral storage and volumes) should be isolated from the agent components (/var/lib/rancher/k3s/agent) to ensure that there are no resource conflicts.","s":"Primary Resource Utilization Drivers","u":"/reference/resource-profiling","h":"#primary-resource-utilization-drivers","p":433},{"i":456,"t":"When running in an environment where the server is also hosting workload pods, care should be taken to ensure that agent and workload IOPS do not interfere with the datastore. This can be best accomplished by placing the server components (/var/lib/rancher/k3s/server) on a different storage medium than the agent components (/var/lib/rancher/k3s/agent), which include the containerd image store. Workload storage (pod ephemeral storage and volumes) should also be isolated from the datastore. Failure to meet datastore throughput and latency requirements may result in delayed response from the control plane and/or failure of the control plane to maintain system state.","s":"Preventing Agents and Workloads from Interfering with the Cluster Datastore","u":"/reference/resource-profiling","h":"#preventing-agents-and-workloads-from-interfering-with-the-cluster-datastore","p":433},{"i":458,"t":"This section describes the methodology and means of securing a K3s cluster. It's broken into 2 sections. These guides assume k3s is running with embedded etcd. The documents below apply to CIS Kubernetes Benchmark v1.23. Hardening Guide CIS Benchmark Self-Assessment Guide","s":"Security","u":"/security","h":"","p":457},{"i":460,"t":"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS). K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark: K3s will not modify the host operating system. Any host-level modifications will need to be done manually. Certain CIS policy controls for NetworkPolicies and PodSecurityStandards (PodSecurityPolicies on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below. The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary.","s":"CIS Hardening Guide","u":"/security/hardening-guide","h":"","p":459},{"i":462,"t":"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.","s":"Host-level Requirements","u":"/security/hardening-guide","h":"#host-level-requirements","p":459},{"i":464,"t":"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults. Note: protect-kernel-defaults is exposed as a top-level flag for K3s. Set kernel parameters​ Create a file called /etc/sysctl.d/90-kubelet.conf and add the snippet below. Then run sysctl -p /etc/sysctl.d/90-kubelet.conf. vm.panic_on_oom=0 vm.overcommit_memory=1 kernel.panic=10 kernel.panic_on_oops=1 kernel.keys.root_maxbytes=25000000","s":"Ensure protect-kernel-defaults is set","u":"/security/hardening-guide","h":"#ensure-protect-kernel-defaults-is-set","p":459},{"i":466,"t":"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section. By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the PodSecurity and NodeRestriction admission controllers enabled, among others.","s":"Kubernetes Runtime Requirements","u":"/security/hardening-guide","h":"#kubernetes-runtime-requirements","p":459},{"i":468,"t":"v1.25 and Newer v1.24 and Older K3s v1.25 and newer support Pod Security Admissions (PSAs) for controlling pod security. PSAs are enabled by passing the following flag to the K3s server: --kube-apiserver-arg=\"admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml\" The policy should be written to a file named psa.yaml in /var/lib/rancher/k3s/server directory. Here is an example of a compliant PSA: apiVersion: apiserver.config.k8s.io/v1 kind: AdmissionConfiguration plugins: - name: PodSecurity configuration: apiVersion: pod-security.admission.config.k8s.io/v1beta1 kind: PodSecurityConfiguration defaults: enforce: \"restricted\" enforce-version: \"latest\" audit: \"restricted\" audit-version: \"latest\" warn: \"restricted\" warn-version: \"latest\" exemptions: usernames: [] runtimeClasses: [] namespaces: [kube-system, cis-operator-system] K3s v1.24 and older support Pod Security Policies (PSPs) for controlling pod security. PSPs are enabled by passing the following flag to the K3s server: --kube-apiserver-arg=\"enable-admission-plugins=NodeRestriction,PodSecurityPolicy\" This will have the effect of maintaining the NodeRestriction plugin as well as enabling the PodSecurityPolicy. When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark. Here is an example of a compliant PSP: apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: restricted-psp spec: privileged: false # CIS - 5.2.1 allowPrivilegeEscalation: false # CIS - 5.2.5 requiredDropCapabilities: # CIS - 5.2.7/8/9 - ALL volumes: - 'configMap' - 'emptyDir' - 'projected' - 'secret' - 'downwardAPI' - 'csi' - 'persistentVolumeClaim' - 'ephemeral' hostNetwork: false # CIS - 5.2.4 hostIPC: false # CIS - 5.2.3 hostPID: false # CIS - 5.2.2 runAsUser: rule: 'MustRunAsNonRoot' # CIS - 5.2.6 seLinux: rule: 'RunAsAny' supplementalGroups: rule: 'MustRunAs' ranges: - min: 1 max: 65535 fsGroup: rule: 'MustRunAs' ranges: - min: 1 max: 65535 readOnlyRootFilesystem: false For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a \"system unrestricted policy\" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly. Combining the configuration above with the Network Policy described in the next section, a single file can be placed in the /var/lib/rancher/k3s/server/manifests directory. Here is an example of a policy.yaml file: apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: restricted-psp spec: privileged: false allowPrivilegeEscalation: false requiredDropCapabilities: - ALL volumes: - 'configMap' - 'emptyDir' - 'projected' - 'secret' - 'downwardAPI' - 'csi' - 'persistentVolumeClaim' - 'ephemeral' hostNetwork: false hostIPC: false hostPID: false runAsUser: rule: 'MustRunAsNonRoot' seLinux: rule: 'RunAsAny' supplementalGroups: rule: 'MustRunAs' ranges: - min: 1 max: 65535 fsGroup: rule: 'MustRunAs' ranges: - min: 1 max: 65535 readOnlyRootFilesystem: false --- apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: system-unrestricted-psp annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*' spec: allowPrivilegeEscalation: true allowedCapabilities: - '*' fsGroup: rule: RunAsAny hostIPC: true hostNetwork: true hostPID: true hostPorts: - max: 65535 min: 0 privileged: true runAsUser: rule: RunAsAny seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny volumes: - '*' --- apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: svclb-psp annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*' spec: allowPrivilegeEscalation: false allowedCapabilities: - NET_ADMIN allowedUnsafeSysctls: - net.ipv4.ip_forward - net.ipv6.conf.all.forwarding fsGroup: rule: RunAsAny hostPorts: - max: 65535 min: 0 runAsUser: rule: RunAsAny seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:restricted-psp rules: - apiGroups: - policy resources: - podsecuritypolicies verbs: - use resourceNames: - restricted-psp --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:system-unrestricted-psp rules: - apiGroups: - policy resources: - podsecuritypolicies resourceNames: - system-unrestricted-psp verbs: - use --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:svclb-psp rules: - apiGroups: - policy resources: - podsecuritypolicies resourceNames: - svclb-psp verbs: - use --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: default:restricted-psp roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:restricted-psp subjects: - kind: Group name: system:authenticated apiGroup: rbac.authorization.k8s.io --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: system-unrestricted-node-psp-rolebinding roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:system-unrestricted-psp subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:nodes --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: system-unrestricted-svc-acct-psp-rolebinding namespace: kube-system roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:system-unrestricted-psp subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:serviceaccounts --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svclb-psp-rolebinding namespace: kube-system roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:svclb-psp subjects: - kind: ServiceAccount name: svclb --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-system spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-system --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: default spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: default --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-public spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-public Note: The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the kube-system namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.","s":"Pod Security","u":"/security/hardening-guide","h":"#pod-security","p":459},{"i":470,"t":"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods. Network policies should be placed the /var/lib/rancher/k3s/server/manifests directory, where they will automatically be deployed on startup. Here is an example of a compliant network policy. kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-system spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-system With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS. apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: default-network-dns-policy namespace: <NAMESPACE> spec: ingress: - ports: - port: 53 protocol: TCP - port: 53 protocol: UDP podSelector: matchLabels: k8s-app: kube-dns policyTypes: - Ingress The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster. v1.21 and Newer v1.20 and Older apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-metrics-server namespace: kube-system spec: podSelector: matchLabels: k8s-app: metrics-server ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-svclbtraefik-ingress namespace: kube-system spec: podSelector: matchLabels: svccontroller.k3s.cattle.io/svcname: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-traefik-v121-ingress namespace: kube-system spec: podSelector: matchLabels: app.kubernetes.io/name: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-metrics-server namespace: kube-system spec: podSelector: matchLabels: k8s-app: metrics-server ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-svclbtraefik-ingress namespace: kube-system spec: podSelector: matchLabels: svccontroller.k3s.cattle.io/svcname: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-traefik-v120-ingress namespace: kube-system spec: podSelector: matchLabels: app: traefik ingress: - {} policyTypes: - Ingress --- info Operators must manage network policies as normal for additional namespaces that are created.","s":"NetworkPolicies","u":"/security/hardening-guide","h":"#networkpolicies","p":459},{"i":472,"t":"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment. The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information. sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs A starter audit policy to log request metadata is provided below. The policy should be written to a file named audit.yaml in /var/lib/rancher/k3s/server directory. Detailed information about policy configuration for the API server can be found in the Kubernetes documentation. apiVersion: audit.k8s.io/v1 kind: Policy rules: - level: Metadata Both configurations must be passed as arguments to the API Server as: --kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' --kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' If the configurations are created after K3s is installed, they must be added to K3s' systemd service in /etc/systemd/system/k3s.service. ExecStart=/usr/local/bin/k3s \\ server \\ '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\ '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\ K3s must be restarted to load the new configuration. sudo systemctl daemon-reload sudo systemctl restart k3s.service","s":"API Server audit configuration","u":"/security/hardening-guide","h":"#api-server-audit-configuration","p":459},{"i":474,"t":"The configuration below should be placed in the configuration file, and contains all the necessary remediations to harden the Kubernetes components. v1.25 and Newer v1.24 and Older protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true' protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true'","s":"Configuration for Kubernetes Components","u":"/security/hardening-guide","h":"#configuration-for-kubernetes-components","p":459},{"i":476,"t":"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy. kube-apiserver --advertise-port=6443 --allow-privileged=true --anonymous-auth=false # 1.2.1 --api-audiences=unknown --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt # 1.2.31 --enable-admission-plugins=NodeRestriction,PodSecurityPolicy # 1.2.17 --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt # 1.2.32 --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt # 1.2.29 --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key # 1.2.29 --etcd-servers=https://127.0.0.1:2379 --insecure-port=0 # 1.2.19 --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --profiling=false # 1.2.21 --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 # 1.2.20 --service-account-issuer=k3s --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.2.28 --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt # 1.2.30 --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 kube-controller-manager --address=127.0.0.1 --allocate-node-cidrs=true --bind-address=127.0.0.1 # 1.3.7 --cluster-cidr=10.42.0.0/16 --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --port=10252 --profiling=false # 1.3.2 --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt # 1.3.5 --secure-port=0 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 --use-service-account-credentials=true # 1.3.3 kube-scheduler --address=127.0.0.1 --bind-address=127.0.0.1 # 1.4.2 --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --port=10251 --profiling=false # 1.4.1 --secure-port=0 kubelet --address=0.0.0.0 --anonymous-auth=false # 4.2.1 --authentication-token-webhook=true --authorization-mode=Webhook # 4.2.2 --cgroup-driver=cgroupfs --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt # 4.2.3 --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d --container-runtime-endpoint=/run/k3s/containerd/containerd.sock --container-runtime=remote --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=hostname01 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --kubelet-cgroups=/systemd/system.slice --node-labels= --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --protect-kernel-defaults=true # 4.2.6 --read-only-port=0 # 4.2.4 --resolv-conf=/run/systemd/resolve/resolv.conf --runtime-cgroups=/systemd/system.slice --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt # 4.2.10 --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10 Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.","s":"Control Plane Execution and Arguments","u":"/security/hardening-guide","h":"#control-plane-execution-and-arguments","p":459},{"i":478,"t":"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.","s":"Known Issues","u":"/security/hardening-guide","h":"#known-issues","p":459},{"i":480,"t":"Ensure that the admission control plugin NamespaceLifecycle is set. Rationale Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects. This can be remediated by passing this argument as a value to the enable-admission-plugins= and pass that to --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.15","u":"/security/hardening-guide","h":"#control-1215","p":459},{"i":482,"t":"Ensure that the admission control plugin PodSecurityPolicy is set. Rationale A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions. This can be remediated by passing this argument as a value to the enable-admission-plugins= and pass that to --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.16","u":"/security/hardening-guide","h":"#control-1216","p":459},{"i":484,"t":"Ensure that the --audit-log-path argument is set. Rationale Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.22","u":"/security/hardening-guide","h":"#control-1222","p":459},{"i":486,"t":"Ensure that the --audit-log-maxage argument is set to 30 or as appropriate. Rationale Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.23","u":"/security/hardening-guide","h":"#control-1223","p":459},{"i":488,"t":"Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate. Rationale Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.24","u":"/security/hardening-guide","h":"#control-1224","p":459},{"i":490,"t":"Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate. Rationale Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.25","u":"/security/hardening-guide","h":"#control-1225","p":459},{"i":492,"t":"Ensure that the --request-timeout argument is set as appropriate. Rationale Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.26","u":"/security/hardening-guide","h":"#control-1226","p":459},{"i":494,"t":"Ensure that the --service-account-lookup argument is set to true. Rationale If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.27","u":"/security/hardening-guide","h":"#control-1227","p":459},{"i":496,"t":"Ensure that the --encryption-provider-config argument is set as appropriate. Rationale `etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures. Detailed steps on how to configure secrets encryption in K3s are available in Secrets Encryption.","s":"Control 1.2.33","u":"/security/hardening-guide","h":"#control-1233","p":459},{"i":498,"t":"Ensure that encryption providers are appropriately configured. Rationale Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options. This can be remediated by passing a valid configuration to k3s as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in Secrets Encryption.","s":"Control 1.2.34","u":"/security/hardening-guide","h":"#control-1234","p":459},{"i":500,"t":"Ensure that the --terminated-pod-gc-threshold argument is set as appropriate. Rationale Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.3.1","u":"/security/hardening-guide","h":"#control-131","p":459},{"i":502,"t":"Ensure that a minimal audit policy is created. Rationale Logging is an important detective control for all systems, to detect potential unauthorized access. This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.","s":"Control 3.2.1","u":"/security/hardening-guide","h":"#control-321","p":459},{"i":504,"t":"Ensure that the --make-iptables-util-chains argument is set to true. Rationale Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 4.2.7","u":"/security/hardening-guide","h":"#control-427","p":459},{"i":506,"t":"Ensure that default service accounts are not actively used Rationale Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod. Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account. The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments. This can be remediated by updating the automountServiceAccountToken field to false for the default service account in each namespace. For default service accounts in the built-in namespaces (kube-system, kube-public, kube-node-lease, and default), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.","s":"Control 5.1.5","u":"/security/hardening-guide","h":"#control-515","p":459},{"i":508,"t":"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the CIS Benchmark Self-Assessment Guide to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster.","s":"Conclusion","u":"/security/hardening-guide","h":"#conclusion","p":459},{"i":510,"t":"K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically: Generate an AES-CBC key Generate an encryption config file with the generated key Pass the config to the KubeAPI as encryption-provider-config tip Secrets-encryption cannot be enabled on an existing server without restarting it. Use curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption if installing from script, or other methods described in Configuration Options. Example of the encryption config file: { \"kind\": \"EncryptionConfiguration\", \"apiVersion\": \"apiserver.config.k8s.io/v1\", \"resources\": [ { \"resources\": [ \"secrets\" ], \"providers\": [ { \"aescbc\": { \"keys\": [ { \"name\": \"aescbckey\", \"secret\": \"xxxxxxxxxxxxxxxxxxx\" } ] } }, { \"identity\": {} } ] } ] }","s":"Secrets Encryption Config","u":"/security/secrets-encryption","h":"","p":509},{"i":512,"t":"K3s contains a utility tool secrets-encrypt, which enables automatic control over the following: Disabling/Enabling secrets encryption Adding new encryption keys Rotating and deleting encryption keys Reencrypting secrets For more information, see the k3s secrets-encrypt command documentation.","s":"Secrets Encryption Tool","u":"/security/secrets-encryption","h":"#secrets-encryption-tool","p":509},{"i":514,"t":"When deploying an application that needs to retain data, you’ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application’s pod fails. A persistent volume (PV) is a piece of storage in the Kubernetes cluster, while a persistent volume claim (PVC) is a request for storage. For details on how PVs and PVCs work, refer to the official Kubernetes documentation on storage. This page describes how to set up persistent storage with a local storage provider, or with Longhorn.","s":"Volumes and Storage","u":"/storage","h":"","p":513},{"i":516,"t":"K3s removes several optional volume plugins and all built-in (sometimes referred to as \"in-tree\") cloud providers. We do this in order to achieve a smaller binary size and to avoid dependence on third-party cloud or data center technologies and services, which may not be available in many K3s use cases. We are able to do this because their removal affects neither core Kubernetes functionality nor conformance. The following volume plugins have been removed from K3s: cephfs fc flocker git_repo glusterfs portworx quobyte rbd storageos Both components have out-of-tree alternatives that can be used with K3s: The Kubernetes Container Storage Interface (CSI) and Cloud Provider Interface (CPI). Kubernetes maintainers are actively migrating in-tree volume plugins to CSI drivers. For more information on this migration, please refer here.","s":"What's different about K3s storage?","u":"/storage","h":"#whats-different-about-k3s-storage","p":513},{"i":518,"t":"K3s comes with Rancher's Local Path Provisioner and this enables the ability to create persistent volume claims out of the box using local storage on the respective node. Below we cover a simple example. For more information please reference the official documentation here. Create a hostPath backed persistent volume claim and a pod to utilize it:","s":"Setting up the Local Storage Provider","u":"/storage","h":"#setting-up-the-local-storage-provider","p":513},{"i":520,"t":"apiVersion: v1 kind: PersistentVolumeClaim metadata: name: local-path-pvc namespace: default spec: accessModes: - ReadWriteOnce storageClassName: local-path resources: requests: storage: 2Gi","s":"pvc.yaml","u":"/storage","h":"#pvcyaml","p":513},{"i":522,"t":"apiVersion: v1 kind: Pod metadata: name: volume-test namespace: default spec: containers: - name: volume-test image: nginx:stable-alpine imagePullPolicy: IfNotPresent volumeMounts: - name: volv mountPath: /data ports: - containerPort: 80 volumes: - name: volv persistentVolumeClaim: claimName: local-path-pvc Apply the yaml: kubectl create -f pvc.yaml kubectl create -f pod.yaml Confirm the PV and PVC are created: kubectl get pv kubectl get pvc The status should be Bound for each.","s":"pod.yaml","u":"/storage","h":"#podyaml","p":513},{"i":524,"t":"caution Longhorn does not support ARM32. K3s supports Longhorn, an open-source distributed block storage system for Kubernetes. Below we cover a simple example. For more information, refer to the official documentation. Apply the longhorn.yaml to install Longhorn: kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml Longhorn will be installed in the namespace longhorn-system. Apply the yaml to create the PVC and pod: kubectl create -f pvc.yaml kubectl create -f pod.yaml","s":"Setting up Longhorn","u":"/storage","h":"#setting-up-longhorn","p":513},{"i":526,"t":"apiVersion: v1 kind: PersistentVolumeClaim metadata: name: longhorn-volv-pvc spec: accessModes: - ReadWriteOnce storageClassName: longhorn resources: requests: storage: 2Gi","s":"pvc.yaml","u":"/storage","h":"#pvcyaml-1","p":513},{"i":528,"t":"apiVersion: v1 kind: Pod metadata: name: volume-test namespace: default spec: containers: - name: volume-test image: nginx:stable-alpine imagePullPolicy: IfNotPresent volumeMounts: - name: volv mountPath: /data ports: - containerPort: 80 volumes: - name: volv persistentVolumeClaim: claimName: longhorn-volv-pvc Confirm the PV and PVC are created: kubectl get pv kubectl get pvc The status should be Bound for each.","s":"pod.yaml","u":"/storage","h":"#podyaml-1","p":513},{"i":531,"t":"Manual Upgrades describes several techniques for upgrading your cluster manually. It can also be used as a basis for upgrading through third-party Infrastructure-as-Code tools like Terraform. Automated Upgrades describes how to perform Kubernetes-native automated upgrades using Rancher's system-upgrade-controller.","s":"Upgrading your K3s cluster","u":"/upgrades","h":"#upgrading-your-k3s-cluster","p":529},{"i":533,"t":"Traefik: If Traefik is not disabled, K3s versions 1.20 and earlier will install Traefik v1, while K3s versions 1.21 and later will install Traefik v2, if v1 is not already present. To upgrade from the older Traefik v1 to Traefik v2, please refer to the Traefik documentation and use the migration tool. K3s bootstrap data: If you are using K3s in an HA configuration with an external SQL datastore, and your server (control-plane) nodes were not started with the --token CLI flag, you will no longer be able to add additional K3s servers to the cluster without specifying the token. Ensure that you retain a copy of this token, as it is required when restoring from backup. Previously, K3s did not enforce the use of a token when using external SQL datastores. The affected versions are <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; the patched versions are v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1. You may retrieve the token value from any server already joined to the cluster as follows: cat /var/lib/rancher/k3s/server/token Experimental Dqlite: The experimental embedded Dqlite data store was deprecated in K3s v1.19.1. Please note that upgrades from experimental Dqlite to experimental embedded etcd are not supported. If you attempt an upgrade, it will not succeed, and data will be lost.","s":"Version-specific caveats","u":"/upgrades","h":"#version-specific-caveats","p":529},{"i":536,"t":"You can manage K3s cluster upgrades using Rancher's system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a custom resource definition (CRD), a plan, and a controller. The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a label selector. See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the CRD. The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade jobs on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly. note The upgrade job that is launched must be highly privileged. It is configured with the following: Host IPC, NET, and PID namespaces The CAP_SYS_BOOT capability Host root mounted at /host with read and write permissions To automate upgrades in this manner, you must do the following: Install the system-upgrade-controller into your cluster Configure plans danger If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades. If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page. If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page. If the K3s cluster is not managed Rancher, you may follow the steps below. For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories: system-upgrade-controller k3s-upgrade tip When attempting to upgrade to a new version of K3s, the Kubernetes version skew policy applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.","s":"Overview","u":"/upgrades/automated","h":"#overview","p":534},{"i":538,"t":"The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command: kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied.","s":"Install the system-upgrade-controller","u":"/upgrades/automated","h":"#install-the-system-upgrade-controller","p":534},{"i":540,"t":"It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster. The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1: # Server plan apiVersion: upgrade.cattle.io/v1 kind: Plan metadata: name: server-plan namespace: system-upgrade spec: concurrency: 1 cordon: true nodeSelector: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: In values: - \"true\" serviceAccountName: system-upgrade upgrade: image: rancher/k3s-upgrade version: v1.24.6+k3s1 --- # Agent plan apiVersion: upgrade.cattle.io/v1 kind: Plan metadata: name: agent-plan namespace: system-upgrade spec: concurrency: 1 cordon: true nodeSelector: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: DoesNotExist prepare: args: - prepare - server-plan image: rancher/k3s-upgrade serviceAccountName: system-upgrade upgrade: image: rancher/k3s-upgrade version: v1.24.6+k3s1 There are a few important things to call out regarding these plans: 1) The plans must be created in the same namespace where the controller was deployed. 2) The concurrency field indicates how many nodes can be upgraded at the same time. 3) The server-plan targets server nodes by specifying a label selector that selects nodes with the node-role.kubernetes.io/control-plane label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label. 4) The prepare step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute. 5) Both plans have the version field set to v1.24.6+k3s1. Alternatively, you can omit the version field and set the channel field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the release channels. Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s: apiVersion: upgrade.cattle.io/v1 kind: Plan ... spec: ... channel: https://update.k3s.io/v1-release/channels/stable As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed. You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl: kubectl -n system-upgrade get plans -o yaml kubectl -n system-upgrade get jobs -o yaml","s":"Configure plans","u":"/upgrades/automated","h":"#configure-plans","p":534},{"i":542,"t":"To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped. To stop all of the K3s containers and reset the containerd state, the k3s-killall.sh script can be used. The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted. To run the killall script from a server node, run: /usr/local/bin/k3s-killall.sh","s":"Stopping K3s","u":"/upgrades/killall","h":"","p":541},{"i":544,"t":"You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version. note When upgrading, upgrade server nodes first one at a time, then any agent nodes.","s":"Manual Upgrades","u":"/upgrades/manual","h":"","p":543},{"i":546,"t":"Upgrades performed via the installation script or using our automated upgrades feature can be tied to different release channels. The following channels are available: Channel Description stable (Default) Stable is recommended for production environments. These releases have been through a period of community hardening. latest Latest is recommended for trying out the latest features. These releases have not yet been through a period of community hardening. v1.26 (example) There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release. For an exhaustive and up-to-date list of channels, you can visit the k3s channel service API. For more technical details on how channels work, you see the channelserver project. tip When attempting to upgrade to a new version of K3s, the Kubernetes version skew policy applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.","s":"Release Channels","u":"/upgrades/manual","h":"#release-channels","p":543},{"i":548,"t":"To upgrade K3s from an older version you can re-run the installation script using the same configuration options you originally used when running the install script. Note The INSTALL_K3S_EXEC variable, K3S_ variables, and trailing shell arguments are all used by the install script to generate the systemd unit and environment file. If you set configuration when originally running the install script, but do not set it again when re-running the install script, the original values will be lost. The contents of the configuration file are not managed by the install script. If you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script. For example, to upgrade to the current stable release: curl -sfL https://get.k3s.io | <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS> If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel: curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS> If you want to upgrade to a specific version you can run the following command: curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>","s":"Upgrade K3s Using the Installation Script","u":"/upgrades/manual","h":"#upgrade-k3s-using-the-installation-script","p":543},{"i":550,"t":"Or to manually upgrade K3s: Download the desired version of the K3s binary from releases Copy the downloaded binary to /usr/local/bin/k3s (or your desired location) Stop the old k3s binary Launch the new k3s binary","s":"Manually Upgrade K3s Using the Binary","u":"/upgrades/manual","h":"#manually-upgrade-k3s-using-the-binary","p":543},{"i":552,"t":"Restarting K3s is supported by the installation script for systemd and OpenRC. systemd To restart servers manually: sudo systemctl restart k3s To restart agents manually: sudo systemctl restart k3s-agent OpenRC To restart servers manually: sudo service k3s restart To restart agents manually: sudo service k3s-agent restart","s":"Restarting K3s","u":"/upgrades/manual","h":"#restarting-k3s","p":543},{"i":555,"t":"Overview​ This document is a companion to the K3s security hardening guide. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers. This guide is specific to the v1.22, v1.23 and v1.24 release line of K3s and the v1.23 release of the CIS Kubernetes Benchmark. For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in Center for Internet Security (CIS). Testing controls methodology​ Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide. Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing. These are the possible results for each control: Pass - The K3s cluster under test passed the audit outlined in the benchmark. Not Applicable - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so. Warn - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed. This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the \"audit\" commands to fit your scenario. NOTE: Only automated tests (previously called scored) are covered in this guide.","s":"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24","u":"/security/self-assessment","h":"#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124","p":553},{"i":559,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml","s":"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":561,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml","s":"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":563,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml","s":"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":565,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml","s":"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":567,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml","s":"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":569,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml","s":"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":571,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/etcd.yaml","s":"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":573,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/etcd.yaml","s":"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated","p":553},{"i":575,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 <path/to/cni/files>","s":"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":577,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root <path/to/cni/files>","s":"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)","u":"/security/self-assessment","h":"#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual","p":553},{"i":579,"t":"Result: pass Remediation: On the etcd server node, get the etcd data directory, passed as an argument --data-dir, from the command 'ps -ef | grep etcd'. Run the below command (based on the etcd data directory found above). For example, chmod 700 /var/lib/etcd Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 1.1.11 Expected Result: '700' is equal to '700' Returned Value: 700","s":"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated","p":553},{"i":581,"t":"Result: Not Applicable Remediation: On the etcd server node, get the etcd data directory, passed as an argument --data-dir, from the command 'ps -ef | grep etcd'. Run the below command (based on the etcd data directory found above). For example, chown etcd:etcd /var/lib/etcd","s":"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)","u":"/security/self-assessment","h":"#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated","p":553},{"i":583,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig","s":"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated","p":553},{"i":585,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/admin.conf Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi' Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root","s":"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":587,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 scheduler Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi' Expected Result: permissions has permissions 644, expected 644 or more restrictive Returned Value: permissions=644","s":"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":589,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root scheduler Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi' Expected Result: 'root:root' is present Returned Value: root:root","s":"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":591,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 controllermanager Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi' Expected Result: permissions has permissions 644, expected 644 or more restrictive Returned Value: permissions=644","s":"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":593,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root controllermanager Audit: stat -c %U:%G /var/lib/rancher/k3s/server/tls Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root","s":"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":595,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown -R root:root /etc/kubernetes/pki/ Audit: find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G Expected Result: 'root:root' is present Returned Value: root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root","s":"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated","p":553},{"i":597,"t":"Result: warn Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod -R 644 /etc/kubernetes/pki/*.crt Audit: stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt","s":"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":599,"t":"Result: warn Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod -R 600 /etc/kubernetes/pki/*.key Audit: stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key","s":"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)","u":"/security/self-assessment","h":"#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual","p":553},{"i":602,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --anonymous-auth=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'","s":"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)","u":"/security/self-assessment","h":"#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual","p":553},{"i":604,"t":"Result: pass Remediation: Follow the documentation and configure alternate mechanisms for authentication. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the --token-auth-file=<filename> parameter. Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--token-auth-file' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)","u":"/security/self-assessment","h":"#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated","p":553},{"i":606,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the DenyServiceExternalIPs from enabled admission plugins. Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)","u":"/security/self-assessment","h":"#123-ensure-that-the---denyserviceexternalips-is-not-set-automated","p":553},{"i":608,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the --kubelet-https parameter.","s":"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)","u":"/security/self-assessment","h":"#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated","p":553},{"i":610,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and kubelets. Then, edit API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the kubelet client certificate and key parameters as below. --kubelet-client-certificate=<path/to/client-certificate-file> --kubelet-client-key=<path/to/client-key-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority' Expected Result: '--kubelet-client-certificate' is present AND '--kubelet-client-key' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated","p":553},{"i":612,"t":"Result: pass Remediation: Follow the Kubernetes documentation and setup the TLS connection between the apiserver and kubelets. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --kubelet-certificate-authority parameter to the path to the cert file for the certificate authority --kubelet-certificate-authority=<ca-string>. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority' Expected Result: '--kubelet-certificate-authority' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated","p":553},{"i":614,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow. One such example could be as below. --authorization-mode=RBAC Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' does not have 'AlwaysAllow' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/security/self-assessment","h":"#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":553},{"i":616,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to a value that includes Node. --authorization-mode=Node,RBAC Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' has 'Node' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)","u":"/security/self-assessment","h":"#128-ensure-that-the---authorization-mode-argument-includes-node-automated","p":553},{"i":618,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to a value that includes RBAC, for example --authorization-mode=Node,RBAC. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' has 'RBAC' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)","u":"/security/self-assessment","h":"#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated","p":553},{"i":620,"t":"Result: warn Remediation: Follow the Kubernetes documentation and set the desired limits in a configuration file. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml and set the below parameters. --enable-admission-plugins=...,EventRateLimit,... --admission-control-config-file=<path/to/configuration/file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'EventRateLimit' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)","u":"/security/self-assessment","h":"#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual","p":553},{"i":622,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and either remove the --enable-admission-plugins parameter, or set it to a value that does not include AlwaysAdmit. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)","u":"/security/self-assessment","h":"#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated","p":553},{"i":624,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to include AlwaysPullImages. --enable-admission-plugins=...,AlwaysPullImages,... Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--enable-admission-plugins' is present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)","u":"/security/self-assessment","h":"#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual","p":553},{"i":626,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to include SecurityContextDeny, unless PodSecurityPolicy is already in place. --enable-admission-plugins=...,SecurityContextDeny,... Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)","u":"/security/self-assessment","h":"#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual","p":553},{"i":628,"t":"Result: pass Remediation: Follow the documentation and create ServiceAccount objects as per your environment. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and ensure that the --disable-admission-plugins parameter is set to a value that does not include ServiceAccount. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)","u":"/security/self-assessment","h":"#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated","p":553},{"i":630,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --disable-admission-plugins parameter to ensure it does not include NamespaceLifecycle. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)","u":"/security/self-assessment","h":"#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated","p":553},{"i":632,"t":"Result: pass Remediation: Follow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to a value that includes NodeRestriction. --enable-admission-plugins=...,NodeRestriction,... Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'NodeRestriction' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)","u":"/security/self-assessment","h":"#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated","p":553},{"i":634,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and either remove the --secure-port parameter or set it to a different (non-zero) desired port. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port' Expected Result: '--secure-port' is greater than 0 OR '--secure-port' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)","u":"/security/self-assessment","h":"#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated","p":553},{"i":636,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling' Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.18 Ensure that the --profiling argument is set to false (Automated)","u":"/security/self-assessment","h":"#1218-ensure-that-the---profiling-argument-is-set-to-false-automated","p":553},{"i":638,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-path parameter to a suitable path and file where you would like audit logs to be written, for example, --audit-log-path=/var/log/apiserver/audit.log","s":"1.2.19 Ensure that the --audit-log-path argument is set (Automated)","u":"/security/self-assessment","h":"#1219-ensure-that-the---audit-log-path-argument-is-set-automated","p":553},{"i":640,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxage parameter to 30 or as an appropriate number of days, for example, --audit-log-maxage=30","s":"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)","u":"/security/self-assessment","h":"#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated","p":553},{"i":642,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate value. For example, --audit-log-maxbackup=10","s":"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)","u":"/security/self-assessment","h":"#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated","p":553},{"i":644,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB. For example, to set it as 100 MB, --audit-log-maxsize=100","s":"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)","u":"/security/self-assessment","h":"#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated","p":553},{"i":646,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --service-account-lookup=true Alternatively, you can delete the --service-account-lookup parameter from this file so that the default takes effect. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--service-account-lookup' is not present OR '--service-account-lookup' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)","u":"/security/self-assessment","h":"#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated","p":553},{"i":648,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --service-account-key-file parameter to the public key file for service accounts. For example, --service-account-key-file=<filename>.","s":"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated","p":553},{"i":650,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the etcd certificate and key file parameters. --etcd-certfile=<path/to/client-certificate-file> --etcd-keyfile=<path/to/client-key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 1.2.29 Expected Result: '--etcd-certfile' is present AND '--etcd-keyfile' is present Returned Value: --etcd-certfile AND --etcd-keyfile","s":"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated","p":553},{"i":652,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection on the apiserver. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the TLS certificate and private key file parameters. --tls-cert-file=<path/to/tls-certificate-file> --tls-private-key-file=<path/to/tls-key-file> Audit: journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2 Expected Result: '--tls-cert-file' is present AND '--tls-private-key-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated","p":553},{"i":654,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection on the apiserver. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the client certificate authority file. --client-ca-file=<path/to/client-ca-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file' Expected Result: '--client-ca-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":553},{"i":656,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the etcd certificate authority file parameter. --etcd-cafile=<path/to/ca-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile' Expected Result: '--etcd-cafile' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated","p":553},{"i":658,"t":"Result: warn Remediation: Follow the Kubernetes documentation and configure a EncryptionConfig file. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --encryption-provider-config parameter to the path of that file. For example, --encryption-provider-config=</path/to/EncryptionConfig/File> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'","s":"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)","u":"/security/self-assessment","h":"#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual","p":553},{"i":660,"t":"Result: warn Remediation: Follow the Kubernetes documentation and configure a EncryptionConfig file. In this file, choose aescbc, kms or secretbox as the encryption provider. Audit: grep aescbc /path/to/encryption-config.json","s":"1.2.31 Ensure that encryption providers are appropriately configured (Manual)","u":"/security/self-assessment","h":"#1231-ensure-that-encryption-providers-are-appropriately-configured-manual","p":553},{"i":662,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384 Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'","s":"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)","u":"/security/self-assessment","h":"#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual","p":553},{"i":665,"t":"Result: warn Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold, for example, --terminated-pod-gc-threshold=10 Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'","s":"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)","u":"/security/self-assessment","h":"#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual","p":553},{"i":667,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling' Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.2 Ensure that the --profiling argument is set to false (Automated)","u":"/security/self-assessment","h":"#132-ensure-that-the---profiling-argument-is-set-to-false-automated","p":553},{"i":669,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node to set the below parameter. --use-service-account-credentials=true Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials' Expected Result: '--use-service-account-credentials' is not equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)","u":"/security/self-assessment","h":"#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated","p":553},{"i":671,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --service-account-private-key-file parameter to the private key file for service accounts. For example, --service-account-private-key-file=<filename>. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file' Expected Result: '--service-account-private-key-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated","p":553},{"i":673,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --root-ca-file parameter to the certificate bundle file`. --root-ca-file=<path/to/file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file' Expected Result: '--root-ca-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated","p":553},{"i":675,"t":"Result: Not Applicable Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true. --feature-gates=RotateKubeletServerCertificate=true","s":"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)","u":"/security/self-assessment","h":"#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated","p":553},{"i":677,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and ensure the correct value for the --bind-address parameter Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--bind-address' is present OR '--bind-address' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/security/self-assessment","h":"#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":553},{"i":680,"t":"Result: pass Remediation: Edit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.4.1 Ensure that the --profiling argument is set to false (Automated)","u":"/security/self-assessment","h":"#141-ensure-that-the---profiling-argument-is-set-to-false-automated","p":553},{"i":682,"t":"Result: pass Remediation: Edit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml on the control plane node and ensure the correct value for the --bind-address parameter Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address' Expected Result: '--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/security/self-assessment","h":"#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":553},{"i":685,"t":"Result: pass Remediation: Follow the etcd service documentation and configure TLS encryption. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameters. --cert-file=</path/to/ca-file> --key-file=</path/to/key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.1 Expected Result: 'cert-file' is present AND 'key-file' is present Returned Value: cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file","s":"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated","p":553},{"i":687,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --client-cert-auth=\"true\" Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.2 Expected Result: '--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true' Returned Value: --client-cert-auth=true client-cert-auth: true --client-cert-auth=true","s":"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)","u":"/security/self-assessment","h":"#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated","p":553},{"i":689,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and either remove the --auto-tls parameter or set it to false. --auto-tls=false Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.3 Expected Result: 'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present Returned Value: error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory","s":"2.3 Ensure that the --auto-tls argument is not set to true (Automated)","u":"/security/self-assessment","h":"#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated","p":553},{"i":691,"t":"Result: pass Remediation: Follow the etcd service documentation and configure peer TLS encryption as appropriate for your etcd cluster. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameters. --peer-client-file=</path/to/peer-cert-file> --peer-key-file=</path/to/peer-key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.4 Expected Result: 'cert-file' is present AND 'key-file' is present Returned Value: peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file","s":"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)","u":"/security/self-assessment","h":"#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated","p":553},{"i":693,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --peer-client-cert-auth=true Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.5 Expected Result: '--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true' Returned Value: --client-cert-auth=true client-cert-auth: true --client-cert-auth=true","s":"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)","u":"/security/self-assessment","h":"#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated","p":553},{"i":695,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and either remove the --peer-auto-tls parameter or set it to false. --peer-auto-tls=false Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.6 Expected Result: '--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false' Returned Value: --peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false","s":"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)","u":"/security/self-assessment","h":"#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated","p":553},{"i":697,"t":"Result: pass Remediation: [Manual test] Follow the etcd documentation and create a dedicated certificate authority setup for the etcd service. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --trusted-ca-file=</path/to/ca-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.7 Expected Result: 'trusted-ca-file' is present Returned Value: --trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file","s":"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)","u":"/security/self-assessment","h":"#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual","p":553},{"i":700,"t":"Result: warn Remediation: Alternative mechanisms provided by Kubernetes such as the use of OIDC should be implemented in place of client certificates.","s":"3.1.1 Client certificate authentication should not be used for users (Manual)","u":"/security/self-assessment","h":"#311-client-certificate-authentication-should-not-be-used-for-users-manual","p":553},{"i":703,"t":"Result: warn Remediation: Create an audit policy file for your cluster. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'","s":"3.2.1 Ensure that a minimal audit policy is created (Manual)","u":"/security/self-assessment","h":"#321-ensure-that-a-minimal-audit-policy-is-created-manual","p":553},{"i":705,"t":"Result: warn Remediation: Review the audit policy provided for the cluster and ensure that it covers at least the following areas, Access to Secrets managed by the cluster. Care should be taken to only log Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in order to avoid risk of logging sensitive data. Modification of Pod and Deployment objects. Use of pods/exec, pods/portforward, pods/proxy and services/proxy. For most requests, minimally logging at the Metadata level is recommended (the most basic level of logging).","s":"3.2.2 Ensure that the audit policy covers key security concerns (Manual)","u":"/security/self-assessment","h":"#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual","p":553},{"i":708,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf","s":"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":710,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf","s":"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated","p":553},{"i":712,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Audit: stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Expected Result: 'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present Returned Value: 644 644","s":"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":714,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi' Expected Result: 'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present Returned Value: root:root root:root","s":"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)","u":"/security/self-assessment","h":"#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual","p":553},{"i":716,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig Audit: stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig Expected Result: '644' is equal to '644' Returned Value: 644 644","s":"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":553},{"i":718,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig Audit: stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root root:root","s":"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated","p":553},{"i":720,"t":"Result: pass Remediation: Run the following command to modify the file permissions of the --client-ca-file: chmod 644 <filename> Audit: stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt Expected Result: '644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present Returned Value: 644 600","s":"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)","u":"/security/self-assessment","h":"#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual","p":553},{"i":722,"t":"Result: pass Remediation: Run the following command to modify the ownership of the --client-ca-file: chown root:root <filename>. Audit: stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root root:root","s":"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)","u":"/security/self-assessment","h":"#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual","p":553},{"i":724,"t":"Result: Not Applicable Remediation: Run the following command (using the config file location identified in the Audit step) chmod 644 /var/lib/kubelet/config.yaml","s":"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)","u":"/security/self-assessment","h":"#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated","p":553},{"i":726,"t":"Result: Not Applicable Remediation: Run the following command (using the config file location identified in the Audit step) chown root:root /var/lib/kubelet/config.yaml","s":"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)","u":"/security/self-assessment","h":"#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated","p":553},{"i":729,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authentication: anonymous: enabled to false. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --anonymous-auth=false Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"anonymous-auth\" | grep -v grep; else echo \"--anonymous-auth=false\"; fi' Expected Result: '--anonymous-auth' is equal to 'false' Returned Value: --anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)","u":"/security/self-assessment","h":"#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated","p":553},{"i":731,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authorization.mode to Webhook. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_AUTHZ_ARGS variable. --authorization-mode=Webhook Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"authorization-mode\" | grep -v grep; else echo \"--authorization-mode=Webhook\"; fi' Expected Result: '--authorization-mode' does not have 'AlwaysAllow' Returned Value: --authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/security/self-assessment","h":"#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":553},{"i":733,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authentication.x509.clientCAFile to the location of the client CA file. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_AUTHZ_ARGS variable. --client-ca-file=<path/to/client-ca-file> Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"client-ca-file\" | grep -v grep; else echo \"--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt\"; fi' Expected Result: '--client-ca-file' is present Returned Value: --client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/security/self-assessment","h":"#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":553},{"i":735,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set readOnlyPort to 0. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --read-only-port=0 Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port' Expected Result: '--read-only-port' is equal to '0' OR '--read-only-port' is not present Returned Value: Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time=\"2022-09-13T13:26:50Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:44Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\"","s":"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)","u":"/security/self-assessment","h":"#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual","p":553},{"i":737,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set streamingConnectionIdleTimeout to a value other than 0. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --streaming-connection-idle-timeout=5m Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'","s":"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)","u":"/security/self-assessment","h":"#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual","p":553},{"i":739,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to set protectKernelDefaults to true. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --protect-kernel-defaults=true Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)","u":"/security/self-assessment","h":"#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated","p":553},{"i":741,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to set makeIPTablesUtilChains to true. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove the --make-iptables-util-chains argument from the KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)","u":"/security/self-assessment","h":"#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated","p":553},{"i":743,"t":"Result: Not Applicable Remediation: Edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove the --hostname-override argument from the KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.8 Ensure that the --hostname-override argument is not set (Manual)","u":"/security/self-assessment","h":"#428-ensure-that-the---hostname-override-argument-is-not-set-manual","p":553},{"i":745,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set eventRecordQPS to an appropriate level. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/ps -fC containerd","s":"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)","u":"/security/self-assessment","h":"#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual","p":553},{"i":747,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set tlsCertFile to the location of the certificate file to use to identify this Kubelet, and tlsPrivateKeyFile to the location of the corresponding private key file. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameters in KUBELET_CERTIFICATE_ARGS variable. --tls-cert-file=<path/to/tls-certificate-file> --tls-private-key-file=<path/to/tls-key-file> Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 Expected Result: '--tls-cert-file' is present AND '--tls-private-key-file' is present Returned Value: Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time=\"2022-09-13T13:26:50Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:44Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\"","s":"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)","u":"/security/self-assessment","h":"#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual","p":553},{"i":749,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to add the line rotateCertificates to true or remove it altogether to use the default value. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)","u":"/security/self-assessment","h":"#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated","p":553},{"i":751,"t":"Result: Not Applicable Remediation: Edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable. --feature-gates=RotateKubeletServerCertificate=true Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)","u":"/security/self-assessment","h":"#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual","p":553},{"i":753,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set TLSCipherSuites to TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 or to a subset of these values. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the --tls-cipher-suites parameter as follows, or to a subset of these values. --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/ps -fC containerd","s":"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)","u":"/security/self-assessment","h":"#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual","p":553},{"i":756,"t":"Result: warn Remediation: Identify all clusterrolebindings to the cluster-admin role. Check if they are used and if they need this role or if they could use a role with fewer privileges. Where possible, first bind users to a lower privileged role and then remove the clusterrolebinding to the cluster-admin role : kubectl delete clusterrolebinding [name]","s":"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)","u":"/security/self-assessment","h":"#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual","p":553},{"i":758,"t":"Result: warn Remediation: Where possible, remove get, list and watch access to Secret objects in the cluster.","s":"5.1.2 Minimize access to secrets (Manual)","u":"/security/self-assessment","h":"#512-minimize-access-to-secrets-manual","p":553},{"i":760,"t":"Result: warn Remediation: Where possible replace any use of wildcards in clusterroles and roles with specific objects or actions.","s":"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)","u":"/security/self-assessment","h":"#513-minimize-wildcard-use-in-roles-and-clusterroles-manual","p":553},{"i":762,"t":"Result: warn Remediation: Where possible, remove create access to pod objects in the cluster.","s":"5.1.4 Minimize access to create pods (Manual)","u":"/security/self-assessment","h":"#514-minimize-access-to-create-pods-manual","p":553},{"i":764,"t":"Result: warn Remediation: Create explicit service accounts wherever a Kubernetes workload requires specific access to the Kubernetes API server. Modify the configuration of each default service account to include this value automountServiceAccountToken: false","s":"5.1.5 Ensure that default service accounts are not actively used. (Manual)","u":"/security/self-assessment","h":"#515-ensure-that-default-service-accounts-are-not-actively-used-manual","p":553},{"i":766,"t":"Result: warn Remediation: Modify the definition of pods and service accounts which do not need to mount service account tokens to disable it.","s":"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)","u":"/security/self-assessment","h":"#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual","p":553},{"i":768,"t":"Result: warn Remediation: Remove the system:masters group from all users in the cluster.","s":"5.1.7 Avoid use of system:masters group (Manual)","u":"/security/self-assessment","h":"#517-avoid-use-of-systemmasters-group-manual","p":553},{"i":770,"t":"Result: warn Remediation: Where possible, remove the impersonate, bind and escalate rights from subjects.","s":"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)","u":"/security/self-assessment","h":"#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual","p":553},{"i":773,"t":"Result: warn Remediation: Ensure that either Pod Security Admission or an external policy control system is in place for every namespace which contains user workloads.","s":"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)","u":"/security/self-assessment","h":"#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual","p":553},{"i":775,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of privileged containers.","s":"5.2.2 Minimize the admission of privileged containers (Automated)","u":"/security/self-assessment","h":"#522-minimize-the-admission-of-privileged-containers-automated","p":553},{"i":777,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostPID containers.","s":"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)","u":"/security/self-assessment","h":"#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated","p":553},{"i":779,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostIPC containers.","s":"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)","u":"/security/self-assessment","h":"#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated","p":553},{"i":781,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostNetwork containers.","s":"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)","u":"/security/self-assessment","h":"#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated","p":553},{"i":783,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with .spec.allowPrivilegeEscalation set to true.","s":"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)","u":"/security/self-assessment","h":"#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated","p":553},{"i":785,"t":"Result: warn Remediation: Create a policy for each namespace in the cluster, ensuring that either MustRunAsNonRoot or MustRunAs with the range of UIDs not including 0, is set.","s":"5.2.7 Minimize the admission of root containers (Automated)","u":"/security/self-assessment","h":"#527-minimize-the-admission-of-root-containers-automated","p":553},{"i":787,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with the NET_RAW capability.","s":"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)","u":"/security/self-assessment","h":"#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated","p":553},{"i":789,"t":"Result: warn Remediation: Ensure that allowedCapabilities is not present in policies for the cluster unless it is set to an empty array.","s":"5.2.9 Minimize the admission of containers with added capabilities (Automated)","u":"/security/self-assessment","h":"#529-minimize-the-admission-of-containers-with-added-capabilities-automated","p":553},{"i":791,"t":"Result: warn Remediation: Review the use of capabilities in applications running on your cluster. Where a namespace contains applications which do not require any Linux capabilities to operate consider adding a PSP which forbids the admission of containers which do not drop all capabilities.","s":"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)","u":"/security/self-assessment","h":"#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual","p":553},{"i":793,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers that have .securityContext.windowsOptions.hostProcess set to true.","s":"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)","u":"/security/self-assessment","h":"#5211-minimize-the-admission-of-windows-hostprocess-containers-manual","p":553},{"i":795,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with hostPath volumes.","s":"5.2.12 Minimize the admission of HostPath volumes (Manual)","u":"/security/self-assessment","h":"#5212-minimize-the-admission-of-hostpath-volumes-manual","p":553},{"i":797,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers which use hostPort sections.","s":"5.2.13 Minimize the admission of containers which use HostPorts (Manual)","u":"/security/self-assessment","h":"#5213-minimize-the-admission-of-containers-which-use-hostports-manual","p":553},{"i":800,"t":"Result: warn Remediation: If the CNI plugin in use does not support network policies, consideration should be given to making use of a different plugin, or finding an alternate mechanism for restricting traffic in the Kubernetes cluster.","s":"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)","u":"/security/self-assessment","h":"#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual","p":553},{"i":802,"t":"Result: warn Remediation: Follow the documentation and create NetworkPolicy objects as you need them.","s":"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)","u":"/security/self-assessment","h":"#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual","p":553},{"i":805,"t":"Result: warn Remediation: If possible, rewrite application code to read Secrets from mounted secret files, rather than from environment variables.","s":"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)","u":"/security/self-assessment","h":"#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual","p":553},{"i":807,"t":"Result: warn Remediation: Refer to the Secrets management options offered by your cloud provider or a third-party secrets management solution.","s":"5.4.2 Consider external secret storage (Manual)","u":"/security/self-assessment","h":"#542-consider-external-secret-storage-manual","p":553},{"i":810,"t":"Result: warn Remediation: Follow the Kubernetes documentation and setup image provenance.","s":"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)","u":"/security/self-assessment","h":"#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual","p":553},{"i":813,"t":"Result: warn Remediation: Follow the documentation and create namespaces for objects in your deployment as you need them.","s":"5.7.1 Create administrative boundaries between resources using namespaces (Manual)","u":"/security/self-assessment","h":"#571-create-administrative-boundaries-between-resources-using-namespaces-manual","p":553},{"i":815,"t":"Result: warn Remediation: Use securityContext to enable the docker/default seccomp profile in your pod definitions. An example is as below: securityContext: seccompProfile: type: RuntimeDefault","s":"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)","u":"/security/self-assessment","h":"#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual","p":553},{"i":817,"t":"Result: warn Remediation: Follow the Kubernetes documentation and apply SecurityContexts to your Pods. For a suggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker Containers.","s":"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)","u":"/security/self-assessment","h":"#573-apply-securitycontext-to-your-pods-and-containers-manual","p":553},{"i":819,"t":"Result: warn Remediation: Ensure that namespaces are created to allow for appropriate segregation of Kubernetes resources and that all new resources are created in a specific namespace.","s":"5.7.4 The default namespace should not be used (Manual)","u":"/security/self-assessment","h":"#574-the-default-namespace-should-not-be-used-manual","p":553}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/2",[0,6.112,1,2.177,2,7.239,3,2.552,4,7.239,5,5.669,6,4.233,7,6.112,8,5.491,9,6.112,10,7.239,11,6.758,12,7.968,13,3.261,14,6.399,15,7.239,16,3.37,17,8.195,18,7.239,19,7.968,20,7.968,21,7.968]],["t/4",[0,5.493,1,1.956,6,3.804,16,3.029,22,0.698,23,4.287,24,4.287,25,4.934,26,1.301,27,5.055,28,3.868,29,3.475,30,3.558,31,2.939,32,1.735,33,3.292,34,2.474,35,4.06,36,5.055,37,3.209,38,4.06,39,1.72,40,4.592,41,5.279,42,5.055,43,4.06,44,4.592,45,6.073,46,1.851,47,1.72,48,1.69,49,3.878,50,1.943,51,5.055,52,5.055,53,2.725,54,2.114,55,2.829,56,2.356,57,3.804,58,2.025,59,1.776,60,2.642,61,3.064,62,2.939,63,1.829,64,4.249,65,4.791,66,3.575,67,1.457,68,2.138,69,4.287,70,2.731,71,1.833,72,3.383,73,1.751,74,0.755,75,1.887,76,2.24,77,4.083,78,4.287,79,4.287,80,3.064,81,3.483,82,4.06,83,2.091,84,1.492,85,2.453,86,2.686,87,2.882,88,3.292,89,4.06,90,4.439,91,2.296,92,1.983,93,2.562,94,3.726,95,2.356,96,2.779,97,2.999,98,5.055,99,4.06]],["t/6",[1,2.8,3,2.469,4,8.601,5,5.484,17,6.537,22,0.795,100,4.573,101,4.394,102,7.001,103,7.707,104,4.778,105,9.468,106,9.468,107,9.468,108,7.707,109,7.707,110,4.029,111,5.681,112,6.537,113,4.778,114,7.707]],["t/8",[22,0.829,73,2.857,95,3.844,115,3.794,116,2.963,117,5.683,118,3.203,119,4.456,120,4.002,121,5.371,122,1.312,123,4.703,124,4.244,125,4.999,126,5.519,127,5.371,128,1.141]],["t/11",[22,0.767,75,4.11,104,4.512,118,2.826,128,1.007,129,3.804,130,6.501,131,3.909,132,3.114,133,3.806,134,5.015,135,4.739,136,3.688,137,1.173,138,0.938,139,4,140,6.611,141,3.15,142,7.009,143,3.581,144,2.498,145,4.231,146,2.003,147,2.391]],["t/13",[22,0.851,75,3.954,118,2.916,137,1.502,139,4.128,141,3.25,142,5.761,144,2.578,145,5.417,146,2.067,147,2.468,148,3.379,149,6.822,150,7.483,151,5.761,152,6.369,153,6.63,154,5.025,155,6.822,156,3.864,157,2.698,158,3.806]],["t/15",[22,0.767,29,3.531,34,2.165,74,1.087,118,2.826,128,1.264,137,1.173,141,3.15,144,2.498,146,2.003,147,2.391,153,5.178,159,7.749,160,4.027,161,3.866,162,3.028,163,3.391,164,4.149,165,2.74,166,3.866,167,2.183,168,5.365,169,4.258,170,5.583,171,6.611,172,7.278,173,2.498]],["t/17",[1,1.369,3,1.605,16,2.12,22,0.83,50,2.736,53,1.908,59,2.053,74,1.063,76,2.221,85,3.454,100,2.974,122,0.797,123,2.858,128,0.985,138,1.066,141,3.08,174,2.169,175,4.519,176,3.182,177,4.279,178,1.911,179,1.651,180,3.781,181,1.299,182,5.012,183,2.339,184,2.169,185,3.264,186,5.012,187,5.012,188,8.276,189,5.012,190,5.012,191,5.012,192,2.764,193,3.038,194,4.025,195,1.908,196,3.107,197,1.132,198,4.553,199,5.012,200,5.012,201,5.012,202,5.012,203,1.661,204,2.195,205,4.025,206,1.234,207,3.15,208,5.46,209,3.182,210,3.566,211,3.503,212,4.025,213,1.676,214,1.853,215,4.553,216,4.553,217,3.454,218,1.946,219,4.251,220,5.012,221,9.01,222,5.012,223,5.012,224,2.579,225,3.695,226,3.695,227,5.012,228,5.012,229,5.012,230,5.012]],["t/19",[1,0.705,3,2.245,22,0.634,34,0.768,39,0.878,47,0.878,53,2.074,57,2.265,62,1.5,64,4.955,68,1.091,71,1.546,74,0.386,85,2.069,88,2.777,90,1.6,93,3.551,94,4.017,99,2.072,116,2.274,122,1.2,128,0.876,137,0.879,138,0.332,146,0.71,165,0.774,183,1.401,184,1.117,206,0.635,212,3.424,231,2.58,232,1.68,233,2.344,234,4.264,235,2.072,236,2.58,237,1.638,238,3.271,239,2.344,240,1.836,241,2.58,242,1.418,243,1.902,244,1.371,245,2.072,246,5.034,247,1.27,248,1.252,249,2.072,250,2.161,251,2.58,252,2.58,253,1.431,254,2.344,255,1.531,256,1.444,257,1.418,258,3.271,259,2.53,260,1.117,261,1.673,262,1.591,263,1.836,264,2.777,265,1.091,266,1.902,267,2.159,268,2.062,269,5.449,270,2.58,271,5.75,272,3.183,273,5.75,274,2.707,275,4.264,276,2.58,277,2.58,278,2.58,279,1.564,280,1.144,281,5.449,282,2.58,283,2.344,284,2.58,285,2.58,286,4.264,287,5.449,288,2.58,289,1.979,290,1.564,291,1.202,292,2.054,293,2.58,294,2.58,295,9.386,296,8.922,297,3.732,298,4.264,299,2.58,300,5.449,301,5.449,302,5.449,303,5.449,304,5.449,305,5.449,306,2.58,307,2.344,308,2.58,309,2.58,310,2.58,311,2.58,312,2.58,313,4.264,314,4.264,315,4.264,316,4.264,317,4.264,318,4.264,319,2.58,320,7.008,321,5.628,322,2.58,323,2.58,324,2.58,325,2.58,326,2.58,327,2.58,328,2.58,329,2.58,330,4.264,331,4.264,332,4.264,333,4.264,334,4.264,335,4.264,336,2.58,337,2.58,338,2.58,339,2.58,340,2.58,341,2.58,342,2.58,343,2.58,344,2.58,345,2.58,346,2.58,347,2.58,348,1.836,349,2.58,350,4.264,351,4.264,352,4.264,353,4.264,354,4.264,355,4.264,356,2.58,357,2.58,358,2.58,359,2.58,360,2.58]],["t/21",[3,2.086,16,2.754,22,0.715,58,2.608,73,2.255,75,2.43,113,4.037,128,1.39,137,1.05,147,2.139,178,1.503,250,3.3,253,2.272,259,5.048,361,10.696,362,3.713,363,6.833,364,2.573,365,4.357,366,5.915,367,6.512,368,6.512,369,6.512,370,6.512,371,4.487,372,6.512,373,5.229,374,6.512,375,5.523,376,6.512,377,6.512,378,6.512,379,2.818,380,5.229,381,2.177,382,3.16,383,2.503,384,6.512,385,2.921,386,6.512,387,6.512]],["t/23",[22,0.593,85,3.425,117,4.864,128,1.24,129,3.69,143,4.411,144,2.423,165,2.117,178,1.63,181,1.83,197,1.647,247,3.474,371,4.864,388,7.059,389,5.204,390,4.279,391,5.415,392,8.963,393,3.247,394,3.378,395,6.413,396,5.669,397,7.198,398,8.963,399,7.602,400,5.204,401,4.864,402,6.413,403,1.488,404,7.059,405,7.059,406,4.864,407,4.188]],["t/25",[3,2.959,22,0.69,26,1.063,28,3.339,34,1.229,53,1.572,54,1.728,74,0.617,77,2.355,85,2.005,116,3.617,128,0.572,137,0.666,138,0.532,141,2.675,157,1.484,178,1.427,179,0.824,195,1.572,204,2.707,206,2.025,213,1.381,233,5.412,250,2.094,253,1.674,254,2.271,258,3.169,261,1.621,262,3.285,265,1.747,280,1.831,291,1.925,389,3.045,403,0.871,408,3.169,409,10.927,410,3.045,411,3.045,412,4.131,413,3.318,414,3.753,415,6.182,416,3.318,417,4.131,418,6.182,419,4.131,420,2.623,421,4.131,422,3.753,423,3.086,424,1.457,425,2.939,426,2.623,427,2.312,428,3.045,429,5.243,430,3.045,431,1.572,432,3.753,433,2.561,434,2.126,435,7.407,436,4.223,437,3.524,438,4.131,439,3.524,440,3.524,441,4.131,442,2.504,443,6.182,444,7.407,445,4.259,446,4.131,447,4.131,448,4.131,449,4.131,450,2.195,451,1.877,452,3.169,453,4.131,454,3.504,455,4.131,456,1.321,457,4.131,458,1.69,459,3.504,460,3.753,461,2.094,462,3.753,463,2.402,464,3.504,465,2.939,466,2.355]],["t/27",[16,2.709,53,2.438,54,2.679,63,1.901,66,4.203,67,1.846,73,2.218,74,1.405,87,3.652,95,2.985,100,3.8,116,2.301,122,1.495,137,1.357,138,1.286,157,2.301,162,2.79,183,2.766,206,1.577,233,3.521,242,3.521,260,2.772,268,1.75,364,1.937,426,4.066,451,2.909,462,5.819,467,2.218,468,2.566,469,2.052,470,3.652,471,4.913,472,5.432,473,5.819,474,6.405,475,5.432,476,6.405,477,6.405,478,3.024,479,6.405,480,4.721,481,4.557,482,5.432,483,3.882,484,6.405,485,2.679]],["t/29",[1,2.147,22,0.66,54,3.288,71,2.851,95,3.664,116,2.825,122,1.25,137,1.268,144,2.699,173,2.699,426,4.991,467,2.723,486,6.241,487,4.321,488,7.142,489,2.934,490,4.665,491,7.142,492,4.109,493,6.031,494,7.862,495,6.031,496,7.142,497,6.031]],["t/31",[22,0.835,53,1.941,59,2.252,63,1.457,70,3.892,74,1.077,81,6.6,91,3.795,95,4.231,121,3.32,122,1.444,138,1.076,141,3.118,144,1.75,157,1.832,165,1.529,173,1.75,179,1.017,193,4.367,224,2.624,261,2.826,292,3.422,297,2.133,393,2.346,403,1.075,428,3.759,442,4.367,485,3.494,486,6.237,487,2.803,498,2.316,499,3.759,500,4.095,501,5.099,502,5.099,503,2.346,504,4.095,505,2.182,506,3.514,507,1.341,508,5.099,509,7.205,510,5.099,511,3.759,512,5.786,513,5.099,514,7.205,515,3.237,516,5.786,517,7.205,518,5.099,519,5.099,520,3.237,521,2.964,522,4.325,523,7.205,524,6.11,525,5.099,526,3.237,527,5.099,528,2.157]],["t/33",[3,2.315,6,2.721,22,0.878,40,4.652,59,1.27,71,1.857,77,2.92,81,5.771,83,2.99,84,1.512,93,2.595,122,1.583,124,2.635,128,1,137,1.165,144,1.758,157,1.84,167,2.168,180,3.839,183,1.683,197,1.149,206,1.78,224,2.635,253,1.634,260,2.217,268,1.399,383,1.969,393,2.356,458,2.096,485,2.142,486,5.453,489,3.126,520,4.588,521,2.977,529,8.375,530,5.121,531,5.121,532,4.113,533,3.427,534,9.593,535,3.928,536,5.121,537,4.38,538,5.544,539,5.121,540,5.121,541,5.121,542,3.175,543,4.652,544,2.866,545,3.556,546,2.815,547,2.866,548,3.427,549,5.121,550,3.928,551,5.327,552,6.173,553,5.121,554,5.121,555,3.335,556,5.121,557,5.121,558,5.121,559,4.652]],["t/35",[22,0.726,34,1.615,48,1.815,49,4.164,50,2.894,63,1.098,66,2.711,91,2.466,95,2.53,121,3.535,128,1.195,141,2.35,163,2.53,167,2.592,178,1.738,179,1.861,180,2.884,192,2.923,204,2.377,214,2.782,237,3.447,261,2.13,292,2.046,416,4.36,485,2.271,486,5.627,489,2.026,503,2.497,560,7.528,561,9.801,562,3.221,563,5.429,564,4.002,565,3.741,566,3.863,567,2.377,568,5.429,569,5.429,570,5.429,571,6.384,572,5.238,573,5.429,574,5.429,575,3.291,576,5.429,577,5.429,578,3.447,579,2.711,580,4.36,581,3.863,582,5.429,583,8.641,584,3.741,585,4.932,586,4.36,587,4.002,588,3.447,589,4.604,590,4.604,591,5.429,592,2.751,593,4.164,594,5.429,595,4.932,596,2.884,597,5.429,598,2.793]],["t/37",[22,0.818,122,1.549,144,3.344,264,6.344,486,6.344,489,3.636,496,7.338,545,3.975,546,5.355,599,3.866,600,3.105,601,5.747,602,3.105,603,3.538]],["t/39",[1,2.25,22,0.594,47,2.407,53,1.892,63,1.431,67,2.039,71,2.566,74,0.743,100,2.949,113,3.081,118,1.93,128,0.979,132,2.126,136,2.518,138,1.42,144,1.706,147,1.633,156,2.557,157,2.542,162,1.647,163,2.316,169,2.316,173,1.706,178,1.147,179,0.991,183,1.633,193,3.012,204,3.931,215,4.515,226,3.663,239,4.515,260,2.151,383,1.91,425,3.536,470,2.833,478,2.347,503,2.286,521,2.889,528,2.102,604,6.423,605,6.347,606,2.833,607,4.734,608,2.598,609,4.97,610,3.812,611,1.661,612,4.97,613,3.155,614,4.97,615,2.732,616,4.97,617,4.97,618,4.491,619,3.812,620,3.536,621,4.875,622,2.889,623,4.97,624,4.97,625,4.97,626,4.97,627,4.215,628,4.97,629,3.424,630,4.97,631,2.079,632,4.97,633,4.97,634,4.215,635,2.176]],["t/41",[3,3.094,22,0.733,59,2.166,70,3.66,122,1.388,127,4.411,128,1.208,157,3.136,162,2.893,165,2.618,167,2.618,180,4.638,184,3.778,250,3.433,253,1.531,254,3.723,255,4.019,256,3.791,403,1.428,408,5.196,468,2.713,600,3.356,602,3.356,603,3.823,636,5.18,637,6.015,638,4.994,639,6.154,640,6.774,641,5.44,642,6.774,643,6.774]],["t/44",[22,0.777,25,4.274,28,3.351,39,2.11,47,2.11,53,2.361,66,3.097,97,5.49,116,2.228,118,2.408,128,0.858,138,0.799,144,2.129,157,2.961,225,6.074,244,3.295,268,1.694,365,6.192,371,4.274,383,3.79,469,1.987,483,3.759,644,4.413,645,6.202,646,5.634,647,5.634,648,5.634,649,6.202,650,3.938,651,6.202,652,3.191,653,6.202,654,3.68,655,6.202,656,4.274,657,4.758,658,3.68,659,6.202,660,4.039,661,4.15,662,6.202,663,3.998,664,6.074,665,4.413,666,6.202,667,3.536,668,5.634,669,4.413,670,5.634,671,5.634,672,5.634,673,5.634]],["t/46",[26,1.508,34,2.361,59,1.968,77,3.342,83,3.282,84,2.342,118,2.276,138,0.755,144,2.012,163,2.732,167,2.38,173,2.012,204,3.939,206,1.954,292,2.209,468,3.603,545,3.905,547,3.28,548,3.922,575,3.553,589,4.972,598,3.016,650,5.71,674,4.171,675,8.994,676,3.722,677,4.497,678,8.541,679,9.638,680,7.628,681,5.862,682,1.846,683,7.934,684,5.862,685,5.862,686,2.348,687,3.922,688,4.919,689,3.478,690,4.972,691,8.994,692,4.491,693,6.729,694,5.862,695,5.862]],["t/48",[26,1.753,34,2.607,59,2.174,71,3.513,77,3.885,83,3.625,84,2.011,118,2.646,144,2.339,163,3.175,167,2.044,173,2.339,206,2.158,292,2.568,468,2.729,575,4.13,589,5.779,598,3.506,650,6.149,674,4.848,676,4.326,677,5.227,678,7.431,682,2.146,686,2.729,687,4.559,688,4.224,689,4.043,690,5.779,696,10.827,697,6.814,698,6.814,699,5.472,700,5.779]],["t/50",[3,2.677,22,0.532,32,2.175,59,1.572,80,3.84,81,5.759,83,2.621,97,3.759,127,5.442,144,2.175,157,3.36,167,2.507,180,3.366,232,4.126,259,3.759,371,4.366,383,2.436,403,1.336,413,5.088,463,3.684,485,2.65,701,6.654,702,6.654,703,6.336,704,6.336,705,4.24,706,5.756,707,6.336,708,4.24,709,8.357,710,8.357,711,6.336,712,6.336,713,6.336,714,6.336,715,6.336,716,5.374,717,6.336,718,6.336,719,6.336,720,6.336,721,4.86,722,6.336,723,4.671,724,5.756,725,7.592,726,3.211,727,6.336]],["t/52",[1,1.352,2,4.496,3,2.259,14,3.974,22,0.885,29,2.401,39,1.684,57,2.629,71,1.795,74,1.054,96,2.72,116,1.778,118,1.922,121,3.223,122,1.566,128,1.31,131,2.117,137,1.527,138,0.909,139,2.72,144,1.699,146,1.362,147,1.626,162,1.64,164,2.822,165,1.484,173,1.699,246,6.215,247,2.435,253,2.29,259,4.185,262,1.847,280,3.126,291,3.287,297,2.07,383,1.902,458,2.025,524,5.982,537,3,555,3.223,579,2.471,621,3.41,644,3.521,728,8.958,729,3.41,730,4.949,731,4.197,732,3.521,733,4.197,734,2.877,735,4.197,736,1.812,737,4.949,738,4.949,739,6.872,740,3.521,741,3.41,742,3.223,743,3.41,744,2.936,745,3.142,746,3.648,747,4.949,748,4.496]],["t/54",[3,3.614,22,0.502,26,2.069,32,2.053,34,1.78,39,2.035,50,2.299,56,2.787,92,3.565,116,2.149,125,3.625,141,3.933,146,1.646,158,3.031,167,1.794,179,1.604,184,3.481,192,2.323,213,2,268,2.197,383,2.299,410,4.409,414,7.306,467,2.072,521,3.477,532,4.803,603,2.619,652,3.078,667,3.41,749,5.981,750,7.429,751,5.981,752,7.306,753,4.121,754,4.803,755,4.002,756,3.895,757,3.708,758,5.981,759,8.043,760,5.981,761,5.981,762,5.981,763,4.588,764,5.981]],["t/56",[22,0.861,47,2.332,83,2.835,92,3.81,116,3.49,128,0.948,137,1.105,143,4.78,157,2.462,162,2.271,178,1.582,196,4.248,197,1.399,233,3.767,410,6.483,469,2.195,485,2.866,579,4.391,592,3.473,635,3.001,750,7.946,765,5.812,766,3.153,767,4.463,768,5.052,769,5.504,770,6.853,771,6.853]],["t/59",[8,3.354,14,3.908,22,0.585,28,2.629,32,1.671,53,1.852,54,2.036,71,1.765,83,2.013,116,3.381,123,2.775,124,2.504,125,2.95,135,3.169,156,3.586,157,2.504,167,1.46,173,1.671,197,0.774,214,1.799,232,3.169,233,2.675,247,2.395,248,2.361,291,4.562,410,3.588,426,3.09,428,3.588,485,2.036,528,2.059,635,2.131,652,2.504,654,2.888,732,4.959,754,5.597,766,2.239,772,7.431,773,2.888,774,4.421,775,3.588,776,4.128,777,4.867,778,4.867,779,4.867,780,1.991,781,4.867,782,4.867,783,3.09,784,8.076,785,4.935,786,2.361,787,4.128,788,4.867,789,3.588,790,4.421,791,4.128,792,4.867,793,3.588,794,4.421,795,4.867,796,3.908,797,3.908,798,5.169,799,8.547,800,6.97,801,3.169,802,4.128,803,2.775,804,4.867,805,4.867,806,3.256,807,4.867,808,6.332,809,4.867,810,4.867,811,4.867,812,5.911,813,3.588,814,3.908,815,3.908,816,4.128,817,2.775,818,3.908]],["t/61",[22,0.763,26,2.069,47,2.035,83,2.474,116,2.149,128,0.827,137,1.297,138,0.771,146,1.646,162,1.982,167,1.794,176,3.797,178,1.381,206,1.981,253,1.818,262,3.002,291,4.528,292,2.254,403,1.261,436,3.41,437,3.41,439,3.41,440,3.41,442,3.625,450,3.178,511,4.409,652,4.138,772,5.929,784,7.306,798,5.106,799,8.255,808,5.434,818,4.803,819,5.073,820,8.043,821,3.288,822,5.981,823,8.043,824,8.043,825,8.043,826,8.043,827,3.347,828,5.981,829,5.981,830,5.981,831,4.409,832,5.981,833,5.981,834,5.981,835,5.981,836,5.073]],["t/63",[3,3.094,22,0.569,26,1.743,62,5.931,128,0.937,165,2.618,179,1.351,204,2.967,224,3.486,261,3.425,268,2.385,411,4.994,427,3.791,603,4.816,689,4.019,753,7.578,837,7.011,838,5.44,839,6.774,840,6.015,841,8.73,842,7.404,843,8.73,844,6.774]],["t/65",[3,1.451,26,1.165,34,1.348,39,1.541,44,4.114,53,2.518,55,2.535,59,1.124,63,0.916,91,4.154,92,3.87,97,4.638,116,1.627,118,1.759,128,0.915,146,1.821,158,2.295,166,2.406,173,2.271,178,1.046,179,0.903,212,3.637,247,2.229,262,2.469,265,1.916,267,1.893,452,6.595,456,1.838,471,3.474,498,2.057,528,1.916,544,2.535,565,4.559,590,8.576,599,2.168,603,4.005,650,2.875,731,3.841,783,4.201,798,2.875,845,3.841,846,6.011,847,9.551,848,3.841,849,4.309,850,6.63,851,2.875,852,2.582,853,6.011,854,2.447,855,4.529,856,3.223,857,4.114,858,6.617,859,1.488,860,4.114,861,4.114,862,6.617,863,4.529,864,4.529,865,4.529,866,4.529,867,4.114,868,6.617,869,4.529,870,4.529,871,1.597,872,4.529,873,4.529,874,4.529,875,3.474,876,2.687,877,7.818,878,6.617,879,4.529,880,4.529,881,4.529,882,4.529,883,4.114,884,3.474,885,2.295,886,4.529]],["t/67",[22,0.865,29,3.042,39,2.133,47,2.133,63,1.678,67,2.392,68,3.51,73,2.171,74,1.24,87,3.574,95,3.867,116,2.252,117,4.319,118,2.434,119,4.483,120,3.042,122,1.575,137,1.741,138,1.276,144,2.152,146,2.284,147,2.06,161,3.33,162,3.282,173,2.152,183,2.06,224,3.225,233,3.445,406,5.718,470,3.574,475,5.316,854,3.386,887,3.644,888,4.621,889,3.51]],["t/69",[1,2.078,16,3.218,22,0.856,26,1.957,29,3.691,74,1.137,137,1.643,138,1.371,162,2.521,178,1.756,391,5.836,393,3.5,403,1.603,451,3.456,470,4.337,489,2.839,849,4.954,890,6.911,891,5.242,892,3.976,893,2.478,894,7.607,895,2.683]],["t/71",[1,2.534,16,3.924,22,0.694,29,4.012,37,3.959,50,2.397,56,2.906,59,2.051,63,1.876,67,2.675,74,1.236,76,3.665,122,1.475,128,1.144,137,1.593,138,1.065,173,2.839,178,1.44,364,2.5,606,3.555,688,3.865,889,3.924,891,4.296,895,2.917,896,4.783,897,5.664,898,3.208,899,5.664,900,5.007,901,4.715,902,5.288,903,5.883,904,4.436,905,5.698,906,5.664,907,4.436]],["t/73",[1,2.147,39,2.675,128,1.088,137,1.545,138,1.332,162,2.605,174,3.403,178,1.815,214,2.906,248,3.815,470,4.482,507,2.068,607,6.413,819,6.668,854,4.247,890,7.142,893,2.561,895,2.773,908,5.594,909,7.142,910,6.314]],["t/75",[1,1.629,22,0.501,34,1.774,39,1.34,55,2.203,57,2.092,58,1.577,59,0.977,60,4.195,61,4.864,70,3.221,71,1.428,74,1.288,122,0.626,128,1.193,129,2.058,137,1.463,138,1.386,141,1.704,148,1.428,161,2.092,162,3.216,164,2.245,167,1.181,174,4.078,211,3.541,212,3.162,214,2.204,261,2.339,262,2.225,267,2.296,268,1.076,290,4.864,292,1.484,297,1.647,393,1.811,394,1.884,397,3.162,459,3.339,469,1.261,470,3.399,490,2.336,506,2.713,596,2.092,613,2.5,638,2.902,676,2.5,682,2.266,705,2.635,708,2.635,734,4.183,741,4.958,789,4.395,911,3.339,912,3.887,913,3.937,914,2.801,915,4.491,916,3.937,917,3.339,918,3.02,919,2.713,920,3.577,921,3.937,922,3.821,923,3.577,924,3.577,925,6.07,926,4.762,927,3.937,928,3.577,929,3.937,930,3.937,931,2.902,932,2.635,933,5.962,934,2.708,935,3.577,936,1.995,937,2.164,938,3.339,939,3.937,940,3.339,941,3.937,942,3.02,943,2.564]],["t/77",[1,1.915,6,2.004,16,2.965,22,0.945,50,1.45,63,1.417,68,2.965,73,2.93,74,1.047,75,2.616,85,2.801,86,2.004,91,1.714,92,1.48,116,2.518,118,3.465,122,1.345,128,1.086,129,1.972,137,1.13,138,0.744,141,1.633,144,3.063,146,2.844,147,2.932,160,2.616,162,2.602,173,3.063,177,1.633,178,0.871,179,0.753,183,1.24,184,1.633,192,1.465,194,3.03,211,1.857,233,2.074,240,2.685,248,1.831,260,2.498,267,1.651,279,3.498,362,3.996,363,4.635,364,1.745,546,2.074,567,1.652,572,2.287,613,2.395,652,1.941,682,1.818,686,2.312,692,1.884,744,3.424,766,1.736,791,3.2,849,2.457,852,2.151,876,2.239,889,1.596,922,3.107,926,2.239,943,3.758,944,4.345,945,1.941,946,3.2,947,3.03,948,4.635,949,3.773,950,4.255,951,4.895,952,2.525,953,4.107,954,2.395,955,3.773,956,2.781,957,3.401]],["t/79",[22,0.619,47,3.133,115,3.39,118,2.861,122,1.172,128,1.274,137,1.485,139,4.05,144,2.53,147,3.026,162,3.052,173,2.53,178,2.429,181,1.91,197,1.597,211,3.626,362,4.201,458,3.015,469,2.949,497,5.653,887,5.354,958,5.918,959,4.568]],["t/81",[34,2.179,123,4.175,179,1.829,197,1.593,211,3.604,232,4.769,272,3.326,456,2.244,463,4.257,469,2.345,567,3.207,603,4.735,852,4.175,960,3.553,961,4.025,962,5.881,963,5.881,964,6.359,965,5.398,966,5.881,967,5.881,968,3.956,969,5.881,970,4.257]],["t/83",[50,2.982,128,1.315,137,1.533,160,3.999,174,3.358,192,3.013,197,1.512,257,4.264,382,4.613,456,2.35,469,2.485,567,3.397,971,6.23,972,5.346,973,6.23,974,5.346]],["t/85",[34,2.562,401,5.933,456,2.163,469,2.758,567,3.771,615,4.733,736,3.152,766,3.961,767,5.607,975,6.347,976,6.605]],["t/87",[7,4.43,34,2.656,50,2.22,57,3.068,60,4.106,61,4.761,80,5.41,85,2.802,90,3.58,120,2.802,128,0.799,137,0.931,138,1.331,148,2.849,157,2.075,167,1.732,179,1.78,183,2.933,192,2.243,262,3.331,280,2.56,290,4.761,292,3.61,456,2.047,469,1.85,470,4.478,490,3.427,567,2.529,604,4.66,605,5.256,682,2.474,686,2.313,708,3.865,750,5.589,914,5.589,964,6.081,970,3.358,977,4.257,978,4.898,979,4.43,980,4.898,981,4.898,982,4.898,983,4.898,984,4.898]],["t/89",[16,3.004,34,2.113,85,4.366,93,4.559,116,2.552,128,1.245,143,3.495,178,1.64,179,1.416,197,1.129,218,3.494,233,3.903,240,6.401,246,5.741,291,4.193,321,7.225,456,2.111,468,2.845,469,2.275,567,3.11,803,5.13,875,6.902,915,3.974,964,4.509,985,4.893,986,7.102,987,6.023,988,5.448]],["t/91",[34,2.805,50,2.476,76,3.744,86,5.665,87,4.816,138,1.289,183,2.116,192,2.501,197,1.499,207,3.809,214,3.122,348,6.707,456,2.323,469,2.063,567,2.82,572,3.904,871,2.979,964,6.597,989,4.099,990,4.194,991,5.462,992,5.462,993,5.462,994,6.707]],["t/93",[70,5.329,143,4.855,177,4.27,183,3.242,267,2.822,450,5.241,456,2.109,469,3.381,567,3.612]],["t/95",[6,5.176,85,3.92,95,3.764,122,1.285,128,1.117,238,6.197,240,5.747,246,4.696,247,3.975,365,6.519,469,2.587,486,6.344,567,3.538,663,4.727,664,5.955,995,6.487,996,4.896]],["t/97",[50,3.239,74,1.259,86,5.308,128,1.382,160,3.144,192,3.272,456,1.801,469,2.699,567,3.69,922,3.734,964,5.349,997,6.766,998,7.654]],["t/99",[1,1.721,22,0.699,47,2.833,55,3.527,100,3.739,113,3.907,122,1.002,128,0.872,138,1.414,146,1.735,147,2.071,156,3.243,162,2.089,163,3.881,164,3.593,178,1.455,183,2.071,204,4.345,253,1.882,260,2.728,403,1.328,425,4.484,507,1.658,528,2.666,604,6.511,605,7.233,606,3.593,607,5.572,635,2.76,849,4.104,999,4.646,1000,5.345,1001,6.302,1002,6.302]],["t/101",[6,2.738,7,1.831,16,1.009,22,0.336,34,2.861,47,2.051,50,0.917,57,1.268,58,2.415,60,2.694,61,2.422,70,2.159,74,0.77,76,1.771,80,3.124,85,3.257,86,3.857,87,2.278,90,1.479,93,3.055,95,1.112,116,0.857,120,1.158,122,0.635,123,1.361,128,1.004,137,0.831,138,1.149,143,2.537,148,1.449,157,0.857,160,2.25,162,1.708,167,0.716,174,1.033,177,1.729,178,0.923,179,1.448,181,0.619,183,2.385,192,0.927,197,1.48,207,1.962,211,1.174,214,1.477,218,1.552,232,1.554,233,1.312,238,1.831,240,2.843,246,3.505,247,1.174,257,1.312,262,2.505,267,1.143,272,1.084,280,1.058,290,2.422,291,2.809,292,2.272,321,3.209,348,3.668,365,2.674,379,1.033,382,1.939,394,1.142,401,1.644,403,0.503,426,3.273,450,2.123,456,2.305,461,2.025,463,1.387,468,0.956,469,1.28,470,2.278,471,1.831,486,2.602,490,1.416,499,1.759,507,0.628,572,1.446,603,3.904,604,2.371,605,2.674,615,1.312,629,4.154,663,1.939,664,2.946,674,1.698,682,1.259,686,0.956,708,1.597,736,0.874,750,2.843,766,1.098,767,2.602,803,2.278,818,3.209,852,1.361,871,2.561,875,3.065,914,2.843,915,1.335,950,2.946,960,1.158,961,1.312,962,1.916,963,1.916,965,1.759,966,1.916,967,1.916,968,1.289,969,1.916,970,2.323,971,1.916,972,1.644,973,1.916,974,2.753,975,1.759,976,1.831,977,1.759,978,2.024,979,1.831,980,2.024,981,2.024,982,2.024,983,2.024,984,2.024,985,1.644,987,2.024,988,1.831,989,1.939,990,1.554,991,2.024,992,2.024,993,2.024,994,4.289,995,1.916,996,1.446,1003,2.168,1004,1.644,1005,1.644,1006,2.024,1007,2.168,1008,2.386,1009,7.635,1010,0.966,1011,2.168,1012,2.168,1013,6.097,1014,2.168,1015,1.916,1016,2.168,1017,6.595,1018,3.209,1019,3.63]],["t/104",[22,0.822,75,3.651,137,1.311,139,4.471,141,3.52,142,6.239,148,2.95,149,7.389,150,7.857,151,6.239,152,6.898,153,6.961,154,5.442,155,7.389,156,4.185,157,2.922]],["t/106",[22,0.934,26,1.63,59,1.572,63,1.891,73,2.195,75,4.1,128,0.877,137,1.508,145,6.293,148,2.298,157,3.003,158,3.211,177,3.617,183,2.082,211,3.118,253,2.114,262,2.365,267,1.812,364,1.916,545,4.113,579,3.164,631,2.65,692,3.164,743,4.366,789,4.671,895,2.235,945,3.26,1020,5.088,1021,5.946,1022,6.336]],["t/108",[1,2.262,22,0.744,34,1.247,39,1.426,63,0.847,66,3.119,74,0.626,75,4.114,76,1.857,84,1.844,104,2.598,118,1.627,128,1.225,129,3.265,130,2.981,131,2.673,133,3.683,134,4.305,135,4.068,136,2.123,137,1.335,138,0.805,139,3.434,140,3.806,141,1.814,142,3.214,144,1.438,145,4.343,146,2.056,147,1.377,151,3.214,152,3.554,154,2.804,156,2.156,157,2.245,160,1.564,163,1.953,169,1.953,173,1.438,224,2.156,233,2.303,244,2.226,258,3.214,268,1.145,381,3.306,383,1.611,485,1.753,498,1.903,532,3.365,599,2.005,603,1.835,652,2.156,654,2.486,657,3.214,667,2.389,686,1.678,689,4.432,716,3.554,742,2.729,766,1.928,852,2.389,895,1.478,926,2.486,932,2.804,952,4.18,957,3.031,970,2.436,1023,3.806,1024,4.19,1025,6.247,1026,3.806,1027,3.806,1028,4.19,1029,4.19,1030,4.19,1031,4.19,1032,4.19,1033,2.486,1034,3.806,1035,3.554,1036,3.365,1037,3.365,1038,3.554,1039,3.806,1040,4.19,1041,3.214,1042,3.554,1043,3.806,1044,3.806,1045,3.806,1046,3.806]],["t/110",[3,0.902,16,1.191,22,0.616,26,1.889,39,0.958,58,1.834,59,0.698,74,0.865,75,3.694,84,1.352,100,3.435,122,0.921,125,1.706,128,1.236,129,4.112,131,2.477,132,1.959,133,3.755,134,1.94,135,1.833,136,2.934,137,0.933,141,1.218,143,4.081,145,1.637,146,1.261,148,1.661,151,2.159,156,2.357,157,2.397,160,1.051,165,2.202,179,0.561,184,4.069,197,1.461,218,1.093,243,3.376,250,1.427,253,1.954,279,1.706,297,1.177,364,1.385,373,2.261,381,2.454,385,3.293,394,2.192,403,1.547,423,1.406,425,4.119,433,2.839,434,1.449,458,1.874,492,5.241,498,1.279,535,2.159,555,1.833,742,1.833,746,2.075,780,1.152,786,1.366,797,3.678,806,1.884,837,2.261,884,2.159,885,2.321,912,1.521,936,4.38,940,2.388,1010,1.854,1023,2.557,1034,2.557,1047,3.874,1048,2.557,1049,2.815,1050,2.815,1051,3.884,1052,2.388,1053,7.212,1054,2.261,1055,2.261,1056,2.517,1057,4.268,1058,6.371,1059,4.58,1060,4.58,1061,1.884,1062,2.557,1063,4.16,1064,2.815,1065,1.787,1066,7.341,1067,2.489,1068,2.159,1069,2.557,1070,2.557,1071,1.94,1072,2.815,1073,2.815,1074,2.815,1075,2.815,1076,2.557,1077,2.388,1078,1.884,1079,1.94,1080,2.261]],["t/112",[3,0.979,22,0.643,26,0.787,47,1.665,48,1.636,50,1.175,53,1.163,59,1.518,60,2.558,74,0.731,75,3.431,77,1.743,83,2.025,84,1.445,111,2.253,122,0.778,128,1.357,129,4.27,131,1.308,133,3.762,134,2.106,136,1.549,137,0.789,138,0.986,142,2.345,143,3.768,145,5.182,146,1.685,157,1.098,160,3.049,162,1.013,163,1.424,165,0.917,169,2.281,170,4.695,178,0.706,179,0.61,180,1.624,184,3.029,192,1.187,193,2.967,197,1.113,206,0.753,213,1.022,243,2.253,250,1.549,253,2.015,265,2.96,279,1.853,373,2.455,381,2.731,393,2.252,394,3.664,400,2.253,403,1.29,428,2.253,454,2.593,456,1.046,463,1.777,466,1.743,492,4.27,498,3.478,535,2.345,555,1.991,566,2.175,587,3.608,599,1.463,603,1.339,689,5.09,742,3.986,746,3.608,763,3.755,766,2.252,780,2.003,889,2.07,912,1.651,926,1.814,936,1.549,970,2.845,1010,1.981,1020,2.455,1047,3.275,1051,4.151,1053,2.345,1057,2.253,1067,3.049,1068,2.345,1069,2.777,1076,2.777,1077,2.593,1078,2.045,1081,3.931,1082,2.045,1083,2.253,1084,3.931,1085,5.561,1086,4.446,1087,1.895,1088,2.253,1089,3.057,1090,5.561,1091,3.057,1092,3.057,1093,2.593,1094,2.777,1095,3.057,1096,2.777,1097,1.068,1098,1.504]],["t/114",[3,1.013,22,0.696,26,1.294,34,2.468,39,1.076,47,1.076,48,1.682,53,1.204,59,0.785,60,2.63,74,0.752,75,3.694,77,1.804,83,2.591,116,1.137,122,0.503,128,1.248,129,2.63,130,5.541,131,4.077,133,3.865,134,2.18,136,1.603,137,0.811,138,1.068,144,1.086,145,4.821,146,1.724,157,1.137,160,3.095,162,1.049,165,1.878,169,2.344,170,3.859,178,0.73,180,1.681,184,3.371,193,3.049,197,0.8,206,0.779,213,1.058,243,2.332,245,2.541,250,1.603,253,1.613,265,3.018,279,1.918,373,2.541,381,2.094,394,2.997,400,2.332,403,1.32,454,2.683,456,1.338,463,1.839,472,4.267,492,2.63,498,4.099,535,2.427,542,1.961,562,1.877,566,2.251,599,2.408,603,1.386,689,5.517,705,4.19,763,2.427,766,1.455,837,2.541,889,2.128,912,1.709,926,1.877,932,2.117,936,2.549,970,2.925,1020,2.541,1048,2.874,1051,4.267,1053,2.427,1057,2.332,1063,5.689,1067,2.337,1077,2.683,1078,2.117,1081,4.04,1082,2.117,1083,2.332,1085,2.874,1086,4.57,1087,3.882,1097,1.106,1098,1.557,1099,2.332,1100,7.788,1101,2.541,1102,3.164,1103,3.164,1104,3.164]],["t/116",[3,1.381,22,0.638,26,1.11,53,1.642,59,2.328,60,2.255,74,0.954,75,2.382,122,0.686,125,2.614,128,1.051,129,3.336,131,1.845,133,2.962,137,0.695,144,1.481,145,5.457,146,2.091,160,2.836,161,2.291,162,1.429,165,1.294,170,3.309,193,3.869,197,1.208,206,1.062,218,1.675,248,2.093,253,2.302,265,3.214,279,2.614,381,3.464,383,2.454,394,3.055,400,3.179,403,0.909,424,1.521,463,2.508,467,1.494,498,2.899,555,2.809,599,3.055,603,1.889,689,4.983,705,4.271,708,2.886,745,2.738,766,1.984,780,3.668,889,1.824,936,3.235,970,3.711,1057,3.179,1062,3.918,1067,1.61,1068,3.309,1078,2.886,1081,3.464,1082,2.886,1083,3.179,1090,3.918,1093,5.414,1094,3.918,1096,3.918,1097,1.507,1105,7.599,1106,4.313,1107,2.809,1108,3.658,1109,8.398,1110,4.313,1111,2.738,1112,6.383,1113,4.313,1114,4.313,1115,6.383,1116,4.313,1117,2.674,1118,3.179,1119,3.309]],["t/118",[16,0.692,22,0.831,26,0.421,29,0.794,34,2.12,39,1.318,47,2.303,50,0.629,55,0.915,57,1.534,71,0.593,74,1.366,75,0.611,92,1.133,93,2.369,104,1.014,110,2.789,115,0.753,118,0.635,122,0.848,123,0.933,128,0.226,133,1.018,136,0.829,137,0.95,139,0.899,141,0.708,143,0.805,146,1.066,156,1.485,157,2.286,161,0.869,163,0.762,165,1.162,167,0.866,169,0.762,174,0.708,178,0.895,179,0.773,181,0.424,185,1.065,192,0.635,196,1.014,197,0.459,211,1.421,224,1.485,248,0.794,253,2.219,262,2.198,265,1.221,268,0.789,272,1.311,280,0.725,364,3.168,381,2.486,383,0.629,393,0.753,394,2.553,401,1.989,403,0.345,436,0.933,456,1.14,458,0.669,468,1.552,469,1.709,485,1.955,497,1.255,498,1.76,503,3.114,507,0.43,512,1.314,537,0.992,538,1.255,544,0.915,545,1.907,567,1.697,579,0.817,593,1.255,603,1.264,613,1.039,635,0.716,652,1.994,658,0.971,667,0.933,669,1.164,686,1.156,705,1.932,724,1.486,754,3.112,757,1.014,766,3.114,767,2.523,791,3.286,852,1.646,853,2.622,854,0.884,889,0.692,895,1.018,903,1.164,915,2.616,922,3,926,1.713,934,1.311,936,0.829,937,2.932,945,1.485,953,7.629,954,3.387,956,7.834,958,1.314,968,0.884,975,1.206,985,2.67,994,1.164,999,2.856,1010,1.568,1020,5.437,1021,2.054,1067,0.611,1078,1.095,1107,2.523,1111,1.039,1117,1.014,1120,1.387,1121,5.636,1122,1.636,1123,1.636,1124,2.318,1125,1.636,1126,1.636,1127,2.214,1128,6.392,1129,2.887,1130,0.564,1131,3.964,1132,3.286,1133,2.622,1134,1.636,1135,1.636,1136,1.636,1137,2.448,1138,1.387,1139,1.387,1140,4.73,1141,3.446,1142,1.387,1143,1.387,1144,1.014,1145,1.387,1146,1.387,1147,0.677,1148,1.486,1149,1.387,1150,1.039,1151,2.318,1152,1.095,1153,4.995,1154,2.448,1155,1.387,1156,3.875,1157,5.89,1158,1.636,1159,1.065,1160,1.636,1161,1.636,1162,1.314,1163,5.335,1164,1.486,1165,1.486,1166,1.636,1167,1.486,1168,1.636,1169,1.636,1170,1.314,1171,1.387,1172,1.636,1173,0.572,1174,1.014]],["t/120",[22,0.728,118,3.368,144,2.978,167,2.602,173,2.978,485,3.628,922,4.505,957,4.932,1175,6.654]],["t/122",[22,0.593,26,2.306,39,2.402,55,3.95,63,1.427,74,1.055,116,2.536,141,3.055,145,5.211,167,2.117,362,4.025,381,3.292,383,2.714,498,3.207,532,5.669,667,4.025,680,5.987,876,4.188,922,4.365,937,3.88,957,5.189,996,4.279,1082,5.997,1176,7.059,1177,6.413,1178,5.669,1179,5.415,1180,6.413,1181,7.059,1182,7.059,1183,7.059]],["t/124",[16,1.452,22,0.913,29,2.603,39,1.168,59,1.852,74,1.115,76,1.521,84,1.013,110,2.804,122,1.05,124,1.766,126,4.995,128,1.033,137,1.497,138,0.442,145,4.992,146,0.945,156,2.76,157,2.682,161,1.823,164,3.764,167,1.609,168,3.954,180,2.849,185,3.493,193,3.251,224,2.76,248,1.665,253,1.941,265,4.274,295,4.872,297,3.122,381,1.793,393,3.95,458,2.195,469,1.718,485,2.243,545,2.639,598,1.766,635,1.503,637,3.696,644,3.816,688,2.127,793,3.954,854,1.854,856,3.816,901,1.957,903,3.816,904,2.442,922,4.642,956,5.503,957,4.97,1065,3.405,1080,4.307,1131,8.276,1132,6.331,1147,3.35,1178,7.455,1184,7.873,1185,4.872,1186,2.91,1187,3.117]],["t/126",[22,0.902,29,3.388,39,1.276,59,1.941,74,1.261,84,1.107,122,1.11,128,1.167,137,1.435,138,0.899,146,1.032,164,3.275,167,2.669,180,3.051,248,1.819,253,1.769,265,4.23,297,2.402,393,3.6,458,1.534,468,3.828,469,2.851,545,2.827,598,1.929,635,1.642,637,3.958,757,4.851,763,6.003,831,4.234,854,2.025,901,3.981,904,2.667,922,4.798,943,3.74,956,5.147,957,5.252,1131,8.31,1132,5.921,1147,3.237,1178,7.675,1184,7.548,1185,5.218,1186,3.18,1187,3.406,1188,2.098]],["t/128",[1,0.996,22,0.472,26,0.938,29,1.768,53,1.387,57,1.936,74,0.84,84,1.076,115,1.677,118,2.182,120,1.768,126,2.439,128,1.152,137,1.527,138,1.252,144,1.251,145,5.332,146,1.547,157,2.019,167,2.057,173,1.251,178,1.298,193,5.559,197,0.58,253,1.883,262,2.877,264,5.972,265,2.901,280,2.491,297,1.524,381,3.317,390,2.209,393,2.585,403,1.446,407,2.162,423,1.82,466,2.078,468,1.46,498,1.655,528,1.542,562,2.162,593,5.262,620,2.593,622,4.482,669,2.593,786,2.727,876,3.334,883,5.105,893,1.187,901,3.911,922,4.197,957,5.187,1037,2.927,1065,2.314,1081,7.365,1099,6.487,1189,3.76,1190,5.683,1191,7.004,1192,7.004,1193,6.231,1194,3.334,1195,3.644,1196,3.644,1197,7.004,1198,3.644,1199,3.644,1200,3.644,1201,3.644,1202,3.091,1203,3.311,1204,3.091]],["t/130",[22,0.767,47,3.398,115,3.348,118,2.826,122,1.157,128,1.007,137,1.61,144,2.498,147,3.282,162,3.028,173,2.498,178,2.492,181,1.886,197,1.588,211,3.581,362,4.149,458,2.978,469,2.331,485,3.044,497,5.583,887,4.231,958,5.844,959,4.512]],["t/132",[16,2.739,26,1.666,31,3.765,47,2.203,59,1.606,62,3.765,63,1.714,66,3.233,74,1.596,76,3.757,86,5.021,91,2.942,92,2.54,128,1.173,137,1.367,160,2.417,162,2.146,169,3.018,179,1.292,207,2.465,209,4.111,210,4.607,364,1.958,393,2.979,456,1.384,468,4.017,483,3.925,487,3.559,498,2.942,521,3.765,575,5.139,578,4.111,692,3.233,889,2.739,922,2.87,957,3.142,1179,4.967,1205,6.476,1206,3.925,1207,3.233,1208,3.142,1209,5.2]],["t/135",[31,3.7,32,1.113,34,2.789,37,2.058,38,2.604,46,2.33,47,1.103,48,2.128,50,1.246,75,2.375,110,3.327,128,0.88,132,1.387,133,1.809,139,1.782,141,1.403,143,1.596,148,1.176,156,1.668,167,0.972,174,1.403,176,2.058,179,0.647,192,1.259,197,1.012,237,4.04,253,1.895,262,2.7,272,2.33,274,3.257,280,1.437,364,3.294,381,2.635,394,1.552,401,3.534,436,1.849,456,2.234,468,2.898,469,1.038,503,2.36,567,1.42,572,1.965,579,1.619,588,2.058,669,2.307,757,2.01,766,2.36,767,2.111,852,1.849,889,3.714,891,2.234,903,2.307,915,4.411,922,2.273,945,1.668,953,7.087,954,2.058,956,8.07,964,6.417,996,1.965,1010,1.313,1067,1.21,1107,2.111,1124,2.604,1137,4.35,1138,2.75,1139,2.75,1140,2.604,1141,2.39,1142,2.75,1150,2.058,1151,4.119,1152,2.169,1153,5.398,1154,4.35,1155,2.75,1210,2.75,1211,2.604,1212,2.75,1213,2.01,1214,2.75,1215,2.01,1216,2.75,1217,3.432,1218,1.643,1219,2.945,1220,2.945,1221,3.242,1222,2.945,1223,2.945,1224,2.945,1225,2.75,1226,3.935,1227,2.945]],["t/137",[16,2.543,50,2.311,74,1.623,116,2.9,128,1.347,137,1.57,160,3.634,162,3.366,169,4.245,174,2.602,192,2.335,197,1.549,364,1.818,456,2.235,469,1.926,498,3.666,512,4.828,567,2.633,912,3.248,922,4.038,971,4.828,972,4.143,973,4.828,974,4.143,1127,4.612,1128,4.828,1143,5.099,1144,3.727,1145,5.099,1146,5.099,1159,3.915,1228,6.191,1229,6.012,1230,5.099,1231,5.461,1232,5.461]],["t/139",[34,2.139,50,2.763,71,2.607,95,3.35,148,2.607,163,3.35,192,2.791,196,6.465,197,1.442,456,2.123,469,2.302,487,5.732,488,6.53,489,2.683,492,3.758,567,3.148,743,4.953,744,6.379,783,4.564,1233,5.514,1234,6.53,1235,6.53,1236,7.189,1237,4.81,1238,5.514,1239,4.179]],["t/142",[34,2.113,123,4.049,179,1.794,197,1.571,211,3.495,232,4.624,272,3.226,456,2.219,463,4.129,469,2.275,567,3.11,603,4.793,674,5.053,852,4.049,950,6.632,960,3.446,961,3.903,962,5.703,963,5.703,964,6.592,965,5.235,966,5.703,967,5.703,968,3.836,969,5.703,970,4.129]],["t/144",[22,0.544,34,1.927,46,3.104,74,1.267,76,2.87,128,1.173,138,0.834,176,5.382,204,2.836,207,2.465,214,3.847,262,2.417,292,3.779,456,2.225,469,2.074,505,3.627,506,4.462,567,2.836,682,2.67,686,2.594,734,3.765,801,4.217,964,4.111,989,4.866,1018,5.2,1067,2.417,1127,6.503,1240,5.883,1241,6.725,1242,5.883,1243,4.462,1244,6.476,1245,4.967,1246,4.774]],["t/146",[34,2.525,401,5.847,456,2.145,469,2.718,492,4.436,567,3.716,615,4.664,736,3.107,766,3.904,767,5.526,975,6.256,976,6.51,1247,7.197]],["t/148",[34,2.6,167,2.621,469,2.799,567,3.827,922,4.524,957,4.953,1175,6.703,1218,4.428]],["t/150",[22,0.302,26,0.926,31,2.093,34,1.656,59,2.453,68,1.523,71,2.468,74,1.364,76,2.467,84,1.643,86,4.069,88,2.344,91,2.529,95,1.677,122,0.885,128,1.263,137,0.898,138,1.297,162,3.337,167,1.08,174,3.79,178,0.831,183,1.183,206,1.886,207,3.152,208,5.875,209,2.285,210,3.961,214,2.831,237,4.863,248,2.701,260,2.409,261,2.184,267,1.03,268,0.983,292,2.098,456,2.016,468,1.442,469,1.153,487,1.979,503,2.561,567,1.576,575,5.534,578,3.534,586,2.891,595,6.183,603,1.576,634,3.053,652,1.852,660,2.344,682,2.758,699,2.891,700,3.053,723,4.104,851,2.285,915,5.109,964,3.534,1018,4.47,1047,3.725,1206,3.374,1207,1.797,1208,1.747,1209,2.891,1243,2.48,1248,3.27,1249,1.852,1250,2.891,1251,2.891,1252,3.27,1253,3.27,1254,2.561,1255,3.6,1256,3.053,1257,2.409,1258,2.232,1259,3.6,1260,7.332,1261,2.654,1262,3.053,1263,3.27,1264,3.625,1265,4.47,1266,3.053]],["t/152",[30,4.557,34,2.973,57,5.658,93,5.063,94,6.211,456,1.801,469,2.699,567,3.69,1267,7.654]],["t/154",[1,1.894,22,0.744,34,2.906,62,5.152,63,2.15,73,2.402,91,4.025,92,3.476,122,1.103,128,0.959,144,2.38,177,3.835,267,2.535,456,1.482,468,4.619,469,2.838,567,3.037,692,4.424,945,4.56]],["t/156",[63,1.985,70,5.801,73,3.401,143,5.285,177,3.542,183,2.689,267,3.191,364,2.474,450,5.705,456,2.295,469,3.494,567,2.688,682,2.577,692,4.086,945,4.211]],["t/158",[6,4.892,85,3.576,95,3.434,122,1.464,128,1.019,137,1.188,144,2.53,162,2.442,167,2.762,238,5.653,240,5.243,246,4.284,247,3.626,292,2.777,365,6.162,426,4.678,468,2.952,469,2.36,475,6.25,486,5.996,567,3.227,663,4.468,664,5.432,914,5.243,915,4.124,995,5.918,996,4.466,1268,8.365]],["t/160",[31,5.741,50,2.73,74,1.061,86,5.905,128,1.482,160,2.65,192,2.758,197,1.129,348,5.053,431,2.703,456,1.923,468,2.845,469,2.275,567,3.11,579,3.546,871,3.173,922,3.148,964,6.592,997,5.703,998,6.451,1257,4.752,1258,4.403,1269,6.023,1270,7.102]],["t/162",[1,0.275,6,1.38,7,0.774,16,0.788,22,0.319,28,0.545,30,1.624,31,2.206,32,0.346,34,2.912,37,0.64,38,0.81,46,1.389,47,1.291,48,0.869,50,0.388,57,2.016,58,1.296,59,1.064,60,1.358,61,1.13,62,1.084,63,1.107,64,0.598,68,2.316,70,2.554,73,1.485,74,1.234,75,0.97,76,1.682,80,1.575,85,1.841,86,3.08,87,1.063,88,1.214,90,0.625,91,3.101,92,0.731,93,2.595,94,0.743,95,0.868,110,1.358,116,0.934,120,0.489,122,0.413,123,0.575,128,1.025,132,0.431,133,0.657,137,0.935,138,0.85,139,1.024,141,0.436,143,2.695,148,1.555,156,0.519,157,0.362,160,1.416,162,1.567,167,1.286,169,1.211,174,0.807,176,1.65,177,1.401,178,0.43,179,0.943,181,0.261,183,1.409,192,0.392,196,2.006,197,1.252,204,0.442,206,0.797,207,2.084,208,1.993,209,0.64,210,1.326,211,0.496,214,1.893,218,1.009,232,0.657,233,0.554,237,1.65,238,0.774,240,1.326,246,1.881,247,0.496,248,0.904,253,1.158,257,0.554,261,0.731,262,2.164,267,1.888,268,0.71,272,1.18,274,1.65,280,0.826,290,1.13,291,1.768,292,2.395,321,1.497,348,1.849,364,2.652,365,1.247,379,0.436,381,1.269,394,0.892,401,1.79,403,0.213,426,2.054,431,0.709,436,0.575,450,2.512,456,2.275,461,0.944,463,0.586,468,2.967,469,2.036,470,1.063,471,0.774,486,1.214,487,1.428,490,0.598,492,0.527,498,0.847,499,0.743,503,0.857,505,0.797,506,0.695,507,0.265,512,0.81,572,1.13,575,2.3,578,1.183,579,0.504,586,0.81,588,0.64,603,2.667,604,1.106,605,1.247,615,0.554,629,2.23,634,0.855,663,0.904,664,1.374,669,0.717,674,0.717,682,1.351,686,0.747,692,1.616,699,0.81,700,0.855,708,0.675,723,1.374,734,0.586,736,0.369,743,0.695,744,1.92,750,1.326,757,0.625,766,1.489,767,1.692,801,0.657,803,1.845,818,1.497,851,0.64,852,1.063,871,1.513,875,1.43,889,2,891,0.695,903,5.959,912,0.545,914,1.849,915,2.646,922,2.095,937,0.554,945,1.953,950,1.374,953,5.005,954,0.64,956,6.089,957,0.904,960,0.489,961,0.554,962,0.81,963,0.81,965,0.743,966,0.81,967,0.81,968,0.545,969,0.81,970,1.084,971,0.81,972,1.284,973,0.81,974,0.695,975,0.743,976,0.774,977,0.743,978,0.855,979,0.774,980,0.855,981,0.855,982,0.855,983,0.855,984,0.855,985,0.695,987,0.855,988,0.774,989,2.081,990,0.657,991,0.855,992,0.855,993,0.855,994,2.302,995,0.81,996,1.13,1003,0.916,1004,0.695,1005,0.695,1006,0.855,1007,0.916,1009,4.975,1010,0.754,1011,0.916,1012,0.916,1013,3.896,1014,0.916,1015,0.81,1016,0.916,1017,3.896,1018,3.048,1019,1.693,1067,0.696,1107,0.657,1121,1.183,1124,0.81,1127,1.993,1128,1.497,1137,1.581,1138,0.855,1139,0.855,1140,0.81,1141,0.743,1142,0.855,1143,0.855,1144,0.625,1145,0.855,1146,0.855,1150,0.64,1151,1.497,1152,0.675,1153,2.204,1154,1.581,1155,0.855,1159,0.657,1170,1.497,1175,0.774,1206,1.575,1207,0.504,1208,0.489,1209,0.81,1210,0.855,1211,0.81,1212,0.855,1213,0.625,1214,0.855,1215,0.625,1216,0.855,1217,1.247,1218,0.511,1219,0.916,1220,0.916,1222,0.916,1223,0.916,1224,0.916,1225,0.855,1226,1.43,1227,0.916,1228,1.43,1230,0.855,1231,0.916,1232,0.916,1233,0.774,1234,0.916,1235,0.916,1240,0.916,1241,3.644,1242,0.916,1243,1.284,1245,0.774,1246,0.743,1247,0.855,1248,0.916,1249,0.519,1250,0.81,1251,0.81,1252,0.916,1253,0.916,1254,0.717,1256,0.855,1257,1.247,1258,0.625,1267,0.916,1268,1.693,1271,1.008,1272,0.855,1273,1.864,1274,0.916,1275,1.008]],["t/164",[22,0.713,48,2.837,70,4.584,74,1.499,128,1.174,138,1.376,160,3.745,169,4.676,382,4.118]],["t/166",[22,0.693,48,3.298,74,1.232,148,2.991,160,3.078,167,2.474,169,3.844,382,4.002,579,4.118,629,5.683,663,4.002,786,4.002,798,6.263,1276,6.08,1277,6.327,1278,8.248]],["t/168",[26,1.722,46,2.45,48,2.237,74,1.179,75,3.864,77,2.623,116,1.653,119,2.485,124,2.367,128,1.091,130,3.273,131,1.968,133,3.582,137,1.548,138,1.016,139,4.761,143,2.264,160,3.79,169,4.288,174,1.991,195,2.547,226,4.933,365,4.478,382,3.827,466,2.623,468,1.843,492,2.405,533,3.078,579,2.297,620,3.273,622,2.674,629,5.435,635,2.015,638,3.391,652,2.367,773,2.729,786,2.232,798,5.008,815,3.694,884,3.529,908,3.273,925,3.078,926,2.729,952,3.078,1033,2.729,1099,7.079,1189,3.078,1277,3.529,1279,4.6,1280,4.6,1281,4.6,1282,4.6,1283,3.901,1284,8.661,1285,6.692,1286,4.6,1287,4.6,1288,4.179,1289,3.694,1290,4.6,1291,2.172,1292,5.676,1293,4.179,1294,4.6,1295,6.692,1296,4.6,1297,4.179,1298,3.273]],["t/170",[46,2.681,53,2.787,70,3.956,74,1.094,124,3.768,128,1.269,133,2.583,137,1.181,138,1.182,160,3.738,169,4.274,174,3.169,195,2.787,365,4.9,382,3.553,495,5.617,757,4.54,798,4.649,912,3.956,925,4.9,952,4.9,1087,4.54,1194,4.345,1276,6.762,1292,6.211,1299,7.323,1300,5.21,1301,7.323,1302,6.652,1303,6.652]],["t/172",[22,0.639,34,2.263,39,2.588,47,2.588,50,2.924,137,1.514,160,4.08,162,3.113,165,2.282,178,1.756,192,2.954,362,4.337,481,5.413,485,3.182,622,5.924,686,3.047,904,5.413,952,5.09,964,5.963,972,5.242,1230,6.452]],["t/174",[22,0.4,48,1.594,49,3.658,56,2.222,58,1.91,59,1.183,74,1.584,75,3.484,118,3.126,128,1.345,129,2.492,130,3.392,131,2.04,133,3.292,136,3.48,137,1.653,138,0.614,143,3.38,144,2.358,147,2.257,157,2.468,160,3.899,161,2.533,162,1.58,163,2.222,164,2.719,165,2.06,169,2.222,173,2.358,178,1.101,218,1.852,248,2.314,297,2.873,381,2.691,481,3.392,503,3.159,773,2.829,780,1.951,798,4.36,884,3.658,889,2.905,922,2.113,925,4.595,954,3.027,957,3.332,1026,4.331,1027,4.331,1079,4.732,1082,3.19,1099,3.515,1121,3.027,1237,3.19,1257,3.19,1276,3.515,1304,4.044,1305,3.829,1306,3.658,1307,4.331,1308,4.768,1309,4.768,1310,4.768,1311,4.331,1312,3.658,1313,4.331,1314,3.285,1315,3.392,1316,4.044]],["t/176",[34,2.113,47,2.416,48,2.374,50,2.73,74,1.344,137,1.674,153,5.053,157,2.552,159,6.023,160,4.237,162,3.55,163,3.309,178,1.64,179,1.416,192,2.758,197,1.129,362,4.049,393,3.267,579,3.546,786,3.446,798,4.509,1088,5.235,1237,4.752,1317,6.023,1318,7.102]],["t/178",[22,0.776,39,2.523,128,1.026,129,3.876,138,0.955,141,3.209,146,2.041,153,5.276,157,2.664,160,3.936,162,3.064,169,4.308,244,3.939,383,2.851,485,3.867,667,4.228,716,6.289,952,6.74,1041,5.688,1042,6.289,1043,6.736,1044,6.736,1045,6.736,1046,6.736,1319,6.289]],["t/179",[22,0.76,34,2.693,47,2.019,48,0.976,53,1.111,58,1.17,73,1.011,74,1.118,111,2.153,119,1.577,121,1.901,128,1.035,129,4.859,133,1.03,136,1.48,137,1.413,138,0.376,139,2.593,141,1.264,146,2.059,153,2.078,156,1.503,160,4.206,165,2.244,168,2.153,171,2.653,173,1.002,174,2.95,179,0.582,196,1.81,211,3.354,248,2.289,262,1.09,272,1.326,290,3.598,362,1.665,382,2.289,393,1.343,401,4.696,456,2.105,469,2.183,472,5.034,492,3.562,498,1.326,550,2.24,567,3.687,615,3.746,726,1.48,732,2.078,744,5.2,766,4.032,767,4.438,786,1.417,798,3.768,819,2.477,849,3.072,884,2.24,922,2.091,924,2.653,937,4.112,944,2.925,952,6.056,975,5.024,976,5.228,985,2.012,999,2.153,1004,3.251,1099,2.153,1141,2.153,1147,1.208,1148,5.392,1237,1.954,1247,5.78,1304,2.477,1317,2.477,1320,2.477,1321,2.653,1322,2.92,1323,1.854,1324,2.653,1325,2.92,1326,2.92,1327,2.289,1328,2.92,1329,2.92,1330,2.653,1331,2.92,1332,2.92,1333,2.92,1334,2.92,1335,2.92,1336,2.92,1337,1.901,1338,2.653,1339,4.286,1340,2.92,1341,2.92,1342,2.078,1343,2.653,1344,4.001,1345,2.92]],["t/181",[1,2.259,3,1.997,50,3.179,56,2.906,62,5.394,74,0.932,83,2.579,93,3.16,128,0.863,146,2.554,178,1.909,192,3.211,197,1.315,206,2.036,260,4.016,261,3.876,403,1.314,469,1.997,503,2.868,507,1.64,528,2.637,544,4.627,579,3.113,635,2.731,744,6.495,765,5.288,876,3.699,926,3.699,931,4.596,947,7.451,1010,2.524,1047,4.172,1162,6.641,1346,4.596,1347,7.512,1348,6.235,1349,6.235]],["t/183",[22,0.822,73,2.817,74,1.462,137,1.577,207,3.096,260,3.52,262,3.036,456,1.738,548,5.442,565,5.605,742,5.297,748,7.389,947,6.532,1010,3.293,1350,6.239,1351,6.898,1352,5.605]],["t/185",[1,2.12,11,4.812,16,4.125,22,0.703,25,2.543,26,1.46,34,1.098,37,3.602,39,2.64,41,2.72,47,1.931,50,1.419,54,1.543,56,1.72,58,1.478,66,3.452,71,1.338,73,1.278,74,1.16,76,3.439,83,1.527,84,1.675,118,2.203,122,0.902,126,3.797,128,1.315,134,2.543,135,2.403,137,1.115,141,1.597,144,1.948,147,1.864,169,1.72,173,1.948,174,1.597,178,1.31,179,0.736,195,2.631,197,0.902,364,3.108,366,3.352,383,2.983,403,0.778,431,1.405,482,3.13,485,3.246,498,1.676,499,2.72,526,4.389,564,2.72,584,3.91,658,2.189,676,2.343,854,3.065,889,4.125,891,5.347,892,4.623,898,1.899,901,2.104,903,4.037,907,4.037,912,1.993,936,1.87,1033,3.367,1041,2.831,1276,2.72,1343,3.352,1353,3.69,1354,3.69,1355,3.352,1356,3.352,1357,2.831,1358,3.69,1359,2.831,1360,3.352,1361,3.69,1362,2.963,1363,3.69,1364,2.831,1365,3.13,1366,3.69,1367,3.69,1368,2.963,1369,3.13,1370,7.05,1371,5.953,1372,3.69,1373,3.69,1374,3.69,1375,3.13,1376,3.69,1377,3.69,1378,3.69,1379,3.69,1380,5.155,1381,3.69,1382,3.69]],["t/187",[22,0.527,31,2.453,32,2.575,37,3.987,46,3.042,48,1.411,50,2.884,54,1.765,56,1.967,70,2.28,75,3.698,76,1.87,118,1.639,119,2.28,128,1.371,131,1.806,132,2.687,133,2.215,143,2.077,144,1.449,146,1.162,148,3.013,173,1.449,174,3.596,178,1.45,179,1.253,181,1.094,192,2.913,197,1.193,237,2.679,362,3.581,364,1.899,381,1.411,382,4.032,399,3.579,433,2.616,469,2.012,485,1.765,507,1.652,528,2.657,544,2.362,564,3.111,567,1.848,579,4.435,598,2.172,611,1.411,629,2.908,638,3.111,661,2.824,676,2.679,814,3.389,859,3.256,889,4.568,892,2.206,893,1.375,905,2.908,907,4.469,915,3.515,944,2.616,957,2.048,996,2.558,1065,2.679,1147,1.746,1152,2.824,1203,3.834,1204,3.579,1210,3.579,1211,3.389,1212,3.579,1213,3.894,1214,3.579,1215,3.894,1216,3.579,1217,2.824,1383,3.834,1384,6.024,1385,4.22,1386,3.389,1387,4.22]],["t/189",[1,1.65,22,0.68,26,2.349,31,2.328,37,5.139,38,4.849,39,2.055,46,2.211,74,0.598,75,1.495,76,1.775,77,2.283,95,3.388,112,6.165,117,4.161,118,2.345,128,0.835,137,0.974,138,0.516,144,2.073,165,2.428,173,2.982,174,2.614,178,1.394,179,1.204,181,1.038,237,2.542,248,1.943,253,0.905,262,3.537,364,2.447,403,0.844,456,0.856,458,1.639,463,2.328,465,2.849,466,2.283,483,2.427,485,2.526,489,1.495,492,2.093,522,3.396,528,1.694,579,3.015,588,2.542,613,5.139,619,3.072,654,2.376,660,2.608,757,3.744,766,1.842,773,2.376,798,5.514,815,3.216,817,3.443,859,3.28,875,3.072,889,3.862,892,4.231,893,1.305,904,2.849,907,4.296,915,5.11,925,4.041,936,3.06,965,2.952,1036,3.216,1052,6.165,1071,2.759,1150,2.542,1152,2.68,1291,1.891,1362,3.216,1375,5.121,1388,3.396,1389,4.005,1390,4.005,1391,5.121,1392,3.638,1393,4.005,1394,4.005,1395,4.005,1396,4.005,1397,4.005,1398,4.005,1399,4.005,1400,4.005]],["t/191",[22,0.586,47,2.373,77,3.977,121,4.542,128,1.355,137,1.125,154,4.667,160,3.849,181,1.808,197,1.415,297,4.096,393,3.209,456,1.901,622,4.055,686,2.794,766,3.209,889,4.142,953,4.963,954,4.428,957,3.385,1079,6.748,1082,4.667,1121,6.548,1306,5.351,1311,6.337,1314,6.129,1401,6.337]],["t/193",[84,2.336,146,2.178,160,2.954,185,5.154,297,4.025,466,4.513,742,5.154,785,4.797,889,4.386,891,7.145,1079,6.631,1121,6.583,1133,8.742,1402,6.713,1403,7.19]],["t/195",[22,0.586,37,4.428,43,5.602,66,3.483,76,3.942,83,2.885,113,6.394,128,0.965,147,3.389,178,1.611,185,5.792,297,2.918,364,2.109,481,4.963,528,2.95,598,3.589,635,3.055,889,2.95,892,5.694,907,4.963,953,6.968,954,4.428,1079,4.806,1121,6.218,1351,5.916,1404,6.975,1405,6.975]],["t/197",[16,3.59,22,0.713,66,4.237,118,3.295,144,2.913,146,2.336,147,2.788,364,3.034,652,4.367,889,3.59,953,6.038,954,5.388,1121,5.388]],["t/199",[1,2.124,3,1.823,16,3.289,22,0.478,39,1.936,56,2.652,58,3.115,59,2.197,60,5.506,61,6.384,63,1.791,71,2.064,76,4.418,115,2.618,119,3.075,128,1.225,137,1.254,138,1.002,144,1.954,173,1.954,214,2.104,224,2.929,247,2.801,267,1.628,403,1.2,431,2.166,470,3.245,503,2.618,515,4.937,528,2.407,606,3.245,607,3.808,854,3.075,895,2.007,898,2.929,901,3.245,908,4.05,1206,4.714,1217,3.808,1283,4.827,1313,5.171,1352,3.922,1406,4.571,1407,4.571,1408,5.171,1409,4.571,1410,5.692,1411,4.366,1412,4.571,1413,5.171,1414,5.171,1415,5.171,1416,4.827]],["t/201",[3,1.935,16,2.556,22,0.68,46,2.212,60,3.159,61,3.663,74,1.21,90,5.662,122,0.961,137,1.573,138,1.311,160,2.255,161,3.21,162,3.027,178,1.87,207,3.476,253,1.366,280,4.048,364,1.827,403,1.707,606,3.445,686,3.244,721,4.635,734,5.31,893,1.969,901,3.445,904,4.299,936,3.062,1005,4.164,1071,4.164,1111,5.799,1194,5.419,1245,4.635,1417,6.043,1418,5.125,1419,6.043,1420,6.043,1421,6.043,1422,6.043,1423,6.043,1424,6.043,1425,6.043,1426,6.043,1427,6.043]],["t/203",[3,1.997,8,1.447,22,0.642,26,1.604,29,1.741,31,2.729,34,0.625,39,0.715,47,1.597,58,1.437,60,3.792,61,4.634,63,1.373,74,1.142,90,5.421,104,1.302,110,1.098,122,0.991,128,0.94,129,1.098,137,1.608,138,0.715,144,1.612,146,0.987,147,1.179,157,0.755,162,3.022,165,0.63,169,1.672,173,1.612,176,1.334,178,0.485,179,0.419,184,0.909,197,0.334,204,1.571,207,0.8,213,0.702,246,2.086,250,1.818,253,2.324,254,1.972,255,2.128,256,2.007,257,1.972,259,1.246,260,2.403,262,1.339,263,6.221,264,2.336,265,2.348,266,2.644,272,0.954,273,1.908,280,4.233,297,0.879,363,2.881,383,1.379,413,1.687,485,1.5,487,1.972,503,0.966,505,0.899,506,2.472,545,2.31,548,2.4,555,1.368,571,1.782,572,1.273,585,1.908,588,2.277,599,2.657,615,1.972,618,2.277,687,2.4,735,1.782,736,0.769,746,1.549,785,1.273,854,1.135,901,2.677,954,1.334,960,1.019,961,1.155,1021,1.495,1054,1.687,1065,2.981,1111,5.066,1124,1.687,1149,1.782,1179,1.611,1194,5.505,1241,1.495,1254,4.832,1258,1.302,1314,1.447,1315,1.495,1346,1.549,1406,1.687,1407,6.14,1408,7.249,1414,3.259,1418,3.042,1428,4.783,1429,1.687,1430,6.792,1431,2.101,1432,3.587,1433,2.101,1434,2.101,1435,2.101,1436,2.101,1437,2.101,1438,2.101,1439,3.259,1440,3.259,1441,3.259,1442,2.101,1443,2.101,1444,3.587,1445,1.908,1446,2.101,1447,2.101,1448,2.101,1449,1.406,1450,3.587,1451,2.101,1452,2.101,1453,2.101,1454,2.101,1455,2.101,1456,1.495,1457,3.259,1458,2.101,1459,2.101,1460,1.782,1461,7.943,1462,2.101,1463,2.101,1464,5.76,1465,2.101,1466,3.259,1467,2.101,1468,1.611,1469,1.687,1470,1.908,1471,3.259,1472,1.687,1473,1.549,1474,3.259,1475,1.908,1476,1.908,1477,1.687,1478,1.908,1479,1.908,1480,1.908,1481,1.549,1482,1.908,1483,0.966,1484,1.908,1485,1.908]],["t/205",[3,1.876,22,0.596,26,1.507,29,2.842,39,1.309,58,1.541,60,4.145,61,4.807,63,1.434,74,1.185,90,3.632,122,1.261,128,0.981,137,1.591,138,0.755,144,1.321,146,1.059,157,1.382,162,3.098,165,1.154,169,1.793,173,1.321,176,2.442,178,0.888,179,0.767,197,0.612,246,3.406,250,1.95,253,2.346,254,2.115,255,2.283,256,2.153,257,2.115,260,2.535,262,1.436,263,6.397,264,2.505,265,1.627,266,2.836,280,3.985,297,1.609,363,3.09,383,1.479,485,1.609,506,2.651,545,1.893,548,2.574,555,2.505,588,2.442,618,2.442,687,2.574,735,3.263,736,1.409,746,2.836,785,2.332,854,2.078,901,3.34,960,1.867,1021,2.737,1054,3.09,1065,2.442,1111,5.035,1179,2.951,1194,4.705,1241,2.737,1254,5.047,1258,2.385,1315,2.737,1346,2.836,1406,3.09,1407,7.22,1418,3.263,1428,2.951,1439,3.495,1440,3.495,1441,3.495,1457,3.495,1461,8.168,1464,6.017,1466,3.495,1468,2.951,1469,3.09,1470,3.495,1471,5.322,1472,3.09,1473,2.836,1474,5.322,1475,3.495,1476,3.495,1477,3.09,1478,3.495,1479,3.495,1480,3.495,1481,2.836,1482,3.495,1483,1.77,1484,3.495,1485,3.495]],["t/207",[1,2.167,3,1.878,16,2.48,22,0.755,29,3.85,39,1.994,47,2.699,50,2.253,59,1.968,63,1.604,67,2.287,68,2.48,74,1.44,76,3.516,115,3.65,119,3.167,122,1.43,128,1.098,137,1.45,138,1.159,162,2.63,173,3.087,178,1.353,214,2.167,470,3.342,528,2.48,606,3.342,607,3.922,635,2.567,658,3.478,688,3.634,729,4.039,854,3.167,888,4.321,889,3.356,891,4.039,892,3.064,895,2.068,896,4.497,897,5.325,898,3.016,899,5.325,900,4.708,901,4.524,905,4.039,906,5.325,908,4.171,1486,5.325,1487,4.972,1488,4.321,1489,5.325]],["t/209",[26,2.3,74,1.336,84,2.638,124,4.599,179,1.783,297,3.738,901,5.096]],["t/211",[47,2.908,74,1.506,76,3.788,83,3.536,136,4.332,144,2.934,147,2.809,165,2.564,173,2.934,528,3.616,889,4.262]],["t/213",[3,2.606,22,0.77,26,1.041,29,1.963,32,1.389,34,1.204,37,2.569,39,2.489,46,2.228,47,2.489,55,2.264,63,0.818,67,1.166,70,2.186,71,1.467,74,0.605,75,1.51,76,2.697,83,1.674,84,2.159,115,1.861,120,1.963,122,0.968,128,1.207,129,2.115,137,1.644,138,1.334,141,1.751,144,2.511,146,1.675,147,1.329,160,3.037,164,2.307,173,2.089,174,1.751,178,2.014,179,1.459,213,1.353,214,1.495,250,2.05,253,1.839,254,2.224,255,2.4,256,2.264,257,2.224,260,1.751,262,1.51,263,2.879,297,1.692,393,1.861,403,1.283,458,1.656,478,2.873,489,1.51,528,2.574,605,5.444,606,2.307,607,2.707,615,2.224,622,2.352,635,2.665,661,2.707,676,2.569,798,3.864,813,2.982,854,2.186,859,2.403,889,4.023,892,3.181,901,2.307,908,2.879,915,4.093,943,4.763,945,2.082,1188,3.406,1350,3.104,1383,3.675,1490,2.569,1491,4.046,1492,3.431,1493,3.431,1494,3.431,1495,3.431,1496,3.675,1497,3.675,1498,2.879,1499,4.046,1500,3.675]],["t/215",[22,0.419,54,2.087,55,3.971,59,1.238,62,2.901,63,1.435,68,3.001,74,1.344,76,2.212,83,2.065,84,1.473,91,3.223,92,1.958,124,2.568,128,1.314,136,3.596,137,1.592,138,1.272,146,1.374,157,1.793,160,3.684,169,3.307,177,2.16,181,1.294,192,1.938,209,3.169,210,3.551,213,1.668,224,2.568,250,2.529,253,1.866,254,2.743,255,2.961,256,2.793,257,2.743,262,1.863,267,1.428,362,2.846,393,3.264,403,1.052,420,3.169,431,1.9,456,1.067,458,2.042,468,3.602,469,3.043,575,4.301,686,2.842,742,3.25,871,1.76,889,3.001,917,4.233,922,2.212,954,3.169,957,2.422,972,3.439,1107,3.25,1118,3.679,1121,3.169,1194,2.961,1306,3.828,1362,4.008,1494,4.233,1495,4.233,1501,4.233,1502,6.018,1503,4.233,1504,3.828,1505,3.679]],["t/217",[1,1.369,46,2.606,47,2.422,56,3.317,60,2.62,61,3.038,74,1.063,75,1.871,83,2.073,120,2.432,122,0.797,128,0.985,137,1.453,138,1.274,144,1.72,156,4.636,161,2.663,162,1.661,163,3.857,165,1.503,178,1.911,179,1.419,197,0.797,204,2.195,207,3.622,209,3.182,214,1.853,247,2.467,262,1.871,297,2.096,403,1.744,470,2.858,485,2.096,503,3.274,515,3.182,526,3.182,542,3.107,564,3.695,571,4.251,579,2.502,596,2.663,611,1.676,686,2.008,692,2.502,734,4.811,744,2.974,801,3.264,852,2.858,895,1.768,898,2.579,912,2.708,915,4.631,918,3.845,919,3.454,970,2.914,996,5.016,1054,4.025,1067,1.871,1117,3.107,1150,3.182,1245,3.845,1246,3.695,1300,3.566,1327,2.432,1371,3.845,1406,4.025,1428,3.845,1506,3.695,1507,4.251,1508,5.012,1509,4.553,1510,4.553,1511,5.012,1512,5.012,1513,5.012,1514,5.012]],["t/219",[22,0.807,29,3.25,34,1.993,59,1.661,74,1.435,83,2.77,84,1.977,122,1.065,128,0.926,137,1.638,138,1.355,160,2.499,162,3.572,169,4.038,207,2.549,214,2.475,248,3.25,393,3.081,470,3.818,579,3.344,607,5.798,676,4.252,901,4.941,908,6.165,945,3.446,1150,4.252,1488,4.937,1498,4.765,1515,6.084,1516,6.697,1517,6.697]],["t/221",[1,0.775,16,2.834,22,0.238,26,0.73,39,0.965,46,1.687,47,2.279,54,1.186,55,2.578,56,1.321,59,1.443,62,1.648,63,1.682,67,1.328,68,1.949,74,1.534,83,1.906,91,2.093,92,1.112,95,1.321,101,2.627,122,0.925,123,1.617,125,1.719,128,1.019,136,2.335,137,1.655,138,1.277,144,0.973,157,1.019,160,1.058,162,2.442,167,0.85,168,3.396,169,3.122,173,2.3,177,1.227,181,0.735,209,1.8,210,2.017,214,2.151,224,1.459,248,1.376,250,2.948,253,2.081,254,3.198,255,3.452,256,3.256,257,3.198,260,1.227,262,1.058,263,4.14,264,1.846,266,2.09,267,0.811,364,2.228,383,1.09,393,2.676,431,1.079,468,2.683,469,2.36,470,1.617,471,2.175,480,2.09,521,2.678,548,3.082,575,2.792,599,1.357,607,3.893,618,1.8,638,2.09,652,1.459,654,1.682,686,2.33,701,2.017,702,2.017,729,1.954,734,2.678,741,1.954,840,1.954,852,3.317,871,1,889,1.199,895,1,901,3.317,902,2.405,904,2.017,905,1.954,908,4.14,920,2.576,922,2.579,943,3,957,1.376,1033,1.682,1065,1.8,1078,1.897,1082,1.897,1147,1.173,1159,3,1180,2.576,1228,3.534,1305,2.277,1350,2.175,1364,2.175,1411,3.534,1415,2.576,1464,4.934,1486,2.576,1487,2.405,1488,2.09,1496,4.185,1501,2.405,1502,3.907,1503,2.405,1515,5.285,1518,2.576,1519,2.576,1520,2.576,1521,5.818,1522,6.699,1523,2.836,1524,2.836,1525,2.836,1526,2.836,1527,2.836,1528,2.576,1529,4.607,1530,2.836,1531,2.836,1532,2.836,1533,5.818,1534,2.836,1535,2.836,1536,2.836,1537,2.836,1538,2.836]],["t/223",[16,2.882,22,0.572,34,2.027,39,2.318,74,1.528,99,5.472,119,3.681,128,0.943,137,1.413,138,0.878,164,3.885,169,3.175,204,2.984,253,1.54,265,2.882,364,2.649,383,2.619,420,4.326,423,3.402,466,3.885,469,2.182,500,5.472,667,3.885,686,2.729,867,6.19,889,4.097,891,4.695,892,3.561,912,3.681,915,3.813,931,5.023,936,3.453,958,5.472,1033,4.043,1147,2.819,1159,5.706,1500,6.19,1539,6.814,1540,5.023,1541,5.779]],["t/225",[22,0.734,459,7.411,489,3.261,689,5.185,729,6.021,861,7.938,1542,8.739,1543,6.442,1544,8.739,1545,8.739]],["t/227",[0,6.283,1,2.684,22,0.688,25,5.644,74,1.224,84,2.418,144,2.812,173,3.372,232,5.333,383,3.149,528,3.464,887,4.762,1370,7.441,1546,8.191,1547,7.441,1548,7.441,1549,6.283]],["t/229",[22,0.751,65,5.981,137,1.441,157,3.211,431,3.402,1540,6.589,1550,7.58]],["t/231",[22,0.745,156,4.564,402,8.058,485,3.71,687,5.935,1258,5.499,1551,8.87,1552,7.523]],["t/233",[22,0.762,411,6.69,635,3.975,817,5.175,1553,9.076]],["t/235",[1,2.326,22,0.815,29,3.584,47,1.797,68,3.901,70,3.99,77,3.012,85,2.563,120,2.563,122,1.543,127,3.44,128,1.342,129,2.761,144,1.813,146,1.454,154,4.942,157,1.898,165,1.584,166,2.806,173,2.535,178,1.966,180,2.806,197,0.84,206,1.301,423,3.688,450,2.806,469,1.692,528,2.234,544,2.956,588,3.354,592,2.677,600,2.031,602,2.031,603,4.841,637,3.64,639,4.799,641,4.242,686,2.116,768,5.444,773,3.134,789,3.894,806,3.535,846,6.709,950,5.444,961,2.903,1010,2.138,1324,4.799,1554,4.48,1555,4.242,1556,5.282,1557,5.282,1558,5.282,1559,5.282,1560,5.282,1561,5.282,1562,4.48,1563,5.282,1564,5.282,1565,3.894,1566,4.052]],["t/237",[22,0.728,47,2.951,117,5.977,121,5.648,122,1.379,144,2.978,173,2.978,246,5.043,526,5.507,528,3.669,1567,8.674]],["t/239",[22,0.854,73,3.004,118,3.368,144,2.978,146,2.387,147,2.85,160,3.793,169,4.042,173,2.978]],["t/241",[1,2.335,92,3.353,129,4.468,137,1.625,162,3.34,383,3.286,1276,6.301,1568,7.25,1569,4.969,1570,6.743]],["t/243",[22,0.892,110,3.603,119,3.724,122,1.096,126,4.613,127,4.489,169,3.212,181,1.787,213,2.305,248,3.345,280,3.055,431,2.624,498,3.131,599,4.661,654,6.299,657,5.288,686,2.761,688,4.273,753,4.75,773,4.09,871,2.431,887,4.008,944,4.273,990,4.489,1111,4.376,1189,4.613,1194,4.09,1300,4.905,1403,6.262,1469,5.536,1571,6.893,1572,6.893,1573,5.081,1574,6.893,1575,5.846,1576,6.893]],["t/245",[1,2.124,3,2.491,14,4.571,22,0.653,28,3.075,29,2.762,53,2.166,58,2.28,62,6.123,63,1.151,72,3.808,73,2.694,74,1.324,84,1.68,93,2.884,118,2.21,128,1.076,143,2.801,147,2.555,159,4.827,165,2.657,173,1.954,178,1.796,179,1.135,197,0.905,247,2.801,397,6.245,430,4.196,431,2.166,451,2.585,481,4.05,485,2.381,503,2.618,538,4.366,599,2.724,636,3.377,661,3.808,665,4.05,744,3.377,745,3.613,773,3.377,821,4.869,838,8.005,842,4.827,856,4.05,876,3.377,959,3.528,1033,3.377,1402,4.827,1416,4.827,1549,4.366,1577,4.827,1578,5.692,1579,5.692,1580,5.692,1581,4.827,1582,5.692,1583,4.196]],["t/247",[1,0.824,3,1.552,26,0.776,28,1.63,34,2.263,41,2.224,45,2.559,47,1.648,59,0.749,60,1.577,62,5.773,63,0.61,64,1.79,65,2.019,66,3.03,68,1.276,73,1.045,74,0.724,75,1.126,83,1.248,99,2.423,100,1.79,128,0.961,133,1.064,137,0.487,143,1.485,146,0.831,147,0.991,154,2.019,158,1.529,165,0.905,167,1.82,168,2.224,173,1.036,176,3.075,179,1.517,181,0.782,185,1.965,192,1.172,197,0.77,253,1.57,261,3.186,262,3.185,267,1.386,268,1.323,274,1.916,279,1.829,291,1.406,307,2.741,383,2.333,393,1.388,397,2.423,403,1.021,410,5.12,430,2.224,431,2.31,436,1.72,437,2.762,439,2.762,440,2.762,442,1.829,451,3.455,456,1.485,458,1.982,463,1.754,469,0.966,497,2.315,503,1.388,520,1.916,544,1.689,564,2.224,565,4.786,567,1.321,579,2.419,592,3.075,596,3.224,622,1.754,635,1.321,677,2.315,682,0.95,692,1.507,732,2.147,734,1.754,785,2.936,797,2.423,821,1.659,837,3.89,838,8.421,876,1.79,898,1.553,952,2.019,959,1.871,994,4.942,996,1.829,1056,1.659,1119,2.315,1147,1.248,1150,3.853,1218,1.529,1226,3.716,1288,2.741,1314,2.079,1384,2.423,1402,2.559,1581,6.451,1584,2.315,1585,3.018,1586,6.068,1587,3.018,1588,3.018,1589,6.068,1590,2.741,1591,3.018,1592,3.018,1593,4.4,1594,2.559,1595,3.018,1596,2.423,1597,2.741,1598,6.068,1599,4.844,1600,4.844,1601,3.018,1602,3.018,1603,3.018,1604,3.018,1605,3.018,1606,4.4,1607,3.018,1608,2.741,1609,2.741,1610,3.018,1611,3.018,1612,3.018,1613,3.018,1614,3.018,1615,2.741,1616,4.844,1617,2.559,1618,2.559,1619,2.741,1620,3.018,1621,3.018,1622,3.018,1623,1.485,1624,3.018,1625,3.018,1626,3.018,1627,3.018,1628,3.018]],["t/249",[22,0.465,26,1.423,28,4.119,39,1.882,56,2.577,58,2.215,62,3.216,64,5.581,65,3.701,68,2.34,71,2.006,143,3.753,146,1.522,165,1.659,167,2.287,178,1.277,179,1.103,181,1.434,197,1.213,253,1.25,261,2.991,262,3.511,267,1.582,268,1.511,291,2.577,383,2.126,403,1.166,431,2.902,436,3.154,437,3.154,439,3.154,440,3.154,451,3.464,456,1.865,458,2.263,485,3.189,592,3.864,596,2.938,667,3.154,686,3.054,739,4.243,785,3.352,994,5.425,1061,3.701,1098,2.722,1120,4.691,1151,4.442,1189,3.701,1218,2.803,1581,7.978,1590,5.025,1593,6.927,1608,5.025,1619,5.025,1629,8.545,1630,5.531,1631,5.025,1632,5.531,1633,5.531,1634,5.531,1635,5.531,1636,5.531]],["t/251",[22,0.55,34,1.948,43,5.258,62,6.432,74,0.978,84,1.933,113,5.294,115,3.012,118,2.543,128,1.181,146,1.802,147,2.806,173,2.248,179,1.306,235,5.258,383,2.517,407,3.885,458,2.679,461,3.318,485,2.739,503,3.012,520,4.157,528,2.77,538,5.023,635,3.74,661,4.381,667,3.733,676,4.157,744,3.885,856,4.659,1078,4.381,1111,5.421,1159,4.264,1606,8.633,1637,6.548,1638,6.551,1639,6.548,1640,6.548,1641,5.023,1642,6.548]],["t/253",[3,3.282,22,0.885,28,4.436,39,2.794,47,3.348,50,3.157,58,3.289,63,1.248,67,1.779,68,3.473,73,2.844,84,1.821,91,3.73,115,2.838,116,2.217,128,0.854,137,1.324,178,1.425,179,1.638,213,2.063,297,3.435,364,1.865,411,4.548,431,2.348,468,2.471,503,2.838,528,3.904,618,3.917,636,3.661,755,4.128,756,4.018,769,6.594,786,2.994,817,3.518,821,3.391,1261,4.548,1498,4.39,1643,6.17,1644,6.17,1645,5.233,1646,4.955]],["t/255",[3,2.485,22,0.652,50,3.951,56,3.615,74,1.159,120,3.764,128,1.073,158,3.931,174,3.358,218,3.013,291,3.615,431,3.618,606,4.423,755,6.361,756,6.19,803,4.423,910,6.23,1646,6.23,1647,5.719,1648,5.719,1649,5.951,1650,6.58]],["t/257",[50,3.084,95,3.739,113,4.973,138,1.034,147,3.188,165,2.406,179,1.6,218,3.768,246,5.641,297,3.356,407,4.76,420,5.093,635,3.513,755,5.368,756,5.224,803,5.532,1071,5.528,1651,8.023]],["t/259",[3,2.66,22,0.698,26,2.137,115,3.821,164,4.736,165,2.491,178,2.287,197,1.321,218,3.225,279,5.035,396,6.67,507,2.185,548,5.558,803,4.736,1188,4.648,1652,8.306]],["t/261",[11,6.668,50,3.022,84,2.321,85,3.815,116,2.825,122,1.25,125,4.765,128,1.088,138,1.235,158,3.984,165,2.358,218,3.053,233,4.321,291,3.664,431,3.648,434,4.045,755,5.26,756,5.119,803,4.482,814,6.314,893,2.561,1071,5.417,1647,5.795]],["t/263",[3,2.36,22,0.844,115,3.39,122,1.172,164,4.201,197,1.464,244,3.915,259,5.464,279,4.466,291,4.681,375,7.81,383,2.833,394,3.527,396,5.918,403,1.553,507,1.939,548,4.931,555,4.798,746,5.432,887,4.284,888,5.432,1056,4.05,1068,5.653,1653,6.694,1654,8.365,1655,6.694,1656,7.369]],["t/266",[3,2.8,6,4.238,22,0.837,26,1.207,34,2.601,50,1.804,57,2.493,83,1.941,84,1.385,122,0.746,128,0.939,138,1.028,158,2.378,177,2.031,178,1.083,179,0.936,184,3.783,192,1.822,204,3.828,207,3.53,213,1.569,218,1.822,244,2.493,262,1.751,267,1.342,274,2.979,279,2.844,291,3.717,297,1.962,380,3.768,383,2.61,393,2.158,408,3.599,422,4.262,427,2.626,431,1.786,466,2.675,533,4.542,572,4.115,596,3.606,622,2.728,636,2.784,660,3.055,661,3.139,755,4.542,756,4.421,786,2.277,803,2.675,806,3.139,887,2.728,893,2.211,1056,3.731,1088,5.004,1189,3.139,1264,6.493,1337,3.055,1555,3.768,1594,3.979,1647,5.004,1655,4.262,1657,4.692,1658,4.692,1659,4.262,1660,4.692,1661,4.692,1662,7.977,1663,4.692,1664,3.979,1665,8.742,1666,4.692,1667,4.692,1668,6.789,1669,4.692,1670,4.692,1671,4.262]],["t/268",[3,2.848,16,2.059,22,0.747,26,2.095,29,3.382,39,3.025,56,2.268,57,2.585,58,1.949,76,3.089,91,2.211,96,2.675,119,2.629,122,0.774,124,2.504,137,1.578,138,0.898,146,1.34,160,1.816,162,2.31,173,1.671,178,1.88,183,1.599,184,2.106,204,2.131,209,3.09,247,3.43,248,2.361,250,3.532,253,2.127,254,2.675,255,2.888,256,2.723,257,2.675,262,2.601,348,3.463,403,1.469,423,2.43,458,2.852,465,3.463,469,1.559,507,1.834,542,3.017,579,2.43,596,2.585,606,2.775,619,3.733,635,2.131,686,1.949,755,3.256,756,3.169,854,4.803,889,2.059,893,1.585,903,5.793,944,3.017,990,3.169,1147,2.013,1188,3.9,1306,3.733,1391,4.128,1429,3.908,1494,5.911,1495,4.128,1540,3.588,1659,7.397,1672,8.076,1673,4.867,1674,4.867,1675,4.867,1676,4.867,1677,4.867,1678,4.867]],["t/271",[3,2.686,6,3.384,22,0.787,26,1.639,50,3.224,59,1.58,122,1.013,138,1.081,141,2.757,163,2.969,166,3.384,184,3.63,192,2.474,197,1.334,242,4.61,244,4.456,256,3.565,265,3.548,291,2.969,375,7.953,380,5.116,383,2.449,393,2.931,394,3.049,498,2.894,533,4.263,705,5.612,742,5.462,755,5.612,756,5.462,887,3.703,893,2.732,931,4.696,937,3.501,996,3.861,999,4.696,1056,3.501,1352,4.39,1654,5.787,1679,5.787,1680,5.403,1681,5.403,1682,6.37]],["t/273",[22,0.722,26,1.384,39,1.83,50,2.068,55,3.01,63,1.975,72,5.005,83,3.557,84,1.588,125,3.26,164,3.067,167,1.613,213,1.798,218,3.339,242,6.095,244,4.568,246,3.127,253,1.691,260,2.328,268,2.668,291,4.552,383,3.573,403,1.134,407,3.192,431,2.047,458,2.201,485,3.129,533,3.599,579,3.735,599,2.574,656,3.707,733,6.344,739,4.126,740,3.827,755,3.599,756,3.503,802,4.562,803,4.903,821,4.111,959,4.637,1061,3.599,1188,3.01,1352,3.707,1683,4.887,1684,4.887,1685,5.379,1686,7.48,1687,5.379,1688,5.379,1689,5.379]],["t/275",[22,0.674,47,3.301,117,5.528,128,1.11,136,4.066,137,1.294,146,2.208,147,3.188,156,4.128,162,2.659,173,2.754,178,1.852,179,1.6,297,3.356,635,3.513,887,4.664,1289,6.443,1690,8.023,1691,8.023,1692,7.288]],["t/277",[3,3.053,22,0.287,26,1.377,31,4.702,32,1.175,39,1.164,47,1.164,50,3.297,59,1.849,73,1.185,86,4.556,100,2.03,122,1.048,128,0.912,137,1.304,144,1.175,146,1.814,157,1.229,160,3.201,162,2.184,178,2.201,179,1.067,180,1.818,181,1.387,184,3.712,192,3.141,194,2.748,197,1.048,203,1.773,224,1.761,226,2.522,247,1.684,250,4.831,253,2.246,254,5.24,255,5.656,256,5.456,257,5.24,268,0.935,393,2.462,456,1.144,458,1.4,465,2.434,469,1.096,470,3.051,498,1.554,507,0.9,528,1.447,587,2.522,637,2.358,785,2.074,831,3.945,974,3.687,979,4.105,999,2.522,1071,3.687,1108,2.902,1130,1.045,1147,2.214,1188,1.915,1254,5.755,1312,2.625,1540,2.522,1693,2.902,1694,2.902,1695,5.589,1696,2.748,1697,3.108,1698,3.108,1699,3.422,1700,4.861,1701,6.59,1702,5.351,1703,5.351,1704,4.861,1705,4.861,1706,3.422,1707,5.351,1708,3.422,1709,2.902]],["t/279",[3,2.073,6,2.334,22,0.886,39,1.495,47,1.495,50,2.488,56,2.047,59,1.605,73,1.522,74,0.657,93,2.227,118,1.706,121,2.861,122,1.029,128,1.25,137,1.678,138,1.164,139,2.415,144,2.909,146,1.209,147,2.524,160,1.64,162,2.808,169,2.047,173,1.508,178,2.315,179,1.532,181,1.139,184,2.801,192,2.513,196,2.724,211,2.162,244,2.334,250,2.227,268,1.2,403,0.926,427,2.459,456,0.939,466,2.505,468,1.76,469,3.026,521,3.762,528,2.737,533,2.94,535,3.37,550,3.37,615,2.415,652,2.261,680,3.726,744,2.607,887,2.554,900,5.197,944,2.724,970,2.554,1056,2.415,1061,2.94,1088,3.239,1189,4.33,1206,2.663,1277,3.37,1321,3.991,1359,3.37,1449,2.94,1540,3.239,1693,3.726,1696,3.528,1704,3.991,1705,3.991,1710,3.726,1711,3.991,1712,4.394,1713,2.227,1714,4.394,1715,4.394,1716,4.964,1717,4.394,1718,2.459,1719,4.394,1720,3.991,1721,4.394,1722,2.94,1723,4.394,1724,4.394]],["t/281",[3,1.468,18,4.163,22,0.661,26,1.179,34,1.363,39,1.559,46,2.443,50,2.565,56,2.135,60,2.395,74,0.997,128,1.089,129,2.395,137,1.076,138,1.114,161,3.545,163,2.135,166,2.434,175,2.909,178,1.541,185,2.984,192,2.591,195,1.744,196,4.137,197,1.613,211,3.284,253,2.077,362,5.784,379,1.983,381,1.532,383,1.762,400,3.378,403,0.966,456,1.682,469,1.468,487,3.668,507,1.205,588,2.909,592,3.382,604,5.129,667,2.613,686,1.835,744,3.959,871,3.049,959,5.359,1000,5.659,1005,3.157,1006,3.886,1010,2.701,1083,3.378,1120,3.886,1147,4.279,1159,4.345,1218,2.322,1245,5.119,1298,3.26,1596,3.68,1609,4.163,1725,6.673,1726,6.673,1727,6.673,1728,4.582,1729,3.886,1730,6.062,1731,6.673,1732,4.163,1733,4.163]],["t/283",[34,2.218,39,1.822,84,1.581,128,0.741,138,1.301,160,2.783,178,1.981,196,5.318,197,1.475,247,2.635,253,2.205,381,2.868,383,2.058,403,1.129,423,2.673,456,1.833,485,2.24,487,4.715,507,1.409,526,4.734,604,5.09,605,5.74,648,4.864,667,3.053,708,4.989,744,5.09,783,3.399,871,1.889,928,4.864,936,2.713,985,3.69,1000,4.541,1005,3.69,1083,3.947,1098,2.635,1130,1.046,1238,4.107,1337,3.487,1352,3.69,1384,4.3,1681,4.541,1733,4.864,1734,4.864,1735,5.355,1736,5.355,1737,5.355,1738,5.355,1739,4.541,1740,7.456,1741,5.355,1742,5.355,1743,7.456,1744,5.355,1745,7.456,1746,7.456,1747,7.456,1748,7.456]],["t/285",[3,2.715,6,3.44,22,0.712,29,3.142,31,5.495,47,2.203,50,2.489,86,5.021,122,1.03,137,1.367,160,3.164,165,1.942,167,1.942,179,1.691,184,2.803,192,2.515,197,1.348,250,3.282,253,1.464,254,3.559,255,3.842,256,3.624,257,3.559,403,1.365,420,4.111,466,3.692,469,2.074,592,3.282,603,2.836,744,3.842,922,3.757,950,6.249,1005,4.462,1098,3.187,1130,1.265,1239,3.765,1254,6.725,1694,7.19,1700,5.883,1720,7.702,1749,4.333]],["t/287",[1,2.423,3,2.841,22,0.745,178,2.048,431,3.376,944,5.499,1188,4.964,1750,6.539]],["t/289",[22,0.683,165,2.44,253,1.839,257,5.767,259,4.826,260,3.52,601,5.787,827,4.552,968,4.394,1233,6.239,1751,7.389,1752,7.389,1753,7.389,1754,7.389,1755,7.389,1756,7.389,1757,7.389,1758,7.389]],["t/291",[1,2.22,22,0.51,26,1.563,74,0.908,165,2.747,178,1.402,197,0.966,259,3.604,260,2.629,261,3.188,262,3.649,431,2.312,437,4.633,439,5.575,440,4.633,442,3.682,451,2.759,481,4.322,489,3.998,601,5.782,621,4.185,743,7.227,821,3.339,1188,3.399,1246,4.477,1722,4.064,1750,6.75,1759,8.883,1760,7.382,1761,6.892,1762,7.382,1763,5.518,1764,4.659,1765,5.518,1766,5.518,1767,5.518,1768,4.878]],["t/293",[1,2.586,22,0.795,119,4.163,160,3.825,165,2.312,253,1.742,259,5.618,260,4.098,424,2.718,489,3.534,743,6.524,840,6.524,922,3.416,1570,5.157,1750,6.979,1769,5.912,1770,6.537,1771,5.311]],["t/295",[22,0.77,48,2.448,74,1.371,117,5.046,128,1.013,131,3.133,144,2.514,147,2.406,160,2.733,165,2.196,177,3.169,259,4.345,260,3.169,292,2.76,489,2.733,503,4.83,504,5.881,548,4.9,743,5.046,817,4.175,1292,6.211,1573,5.398,1750,7.739,1772,7.323,1773,7.323,1774,7.323,1775,3.768,1776,3.169]],["t/297",[1,2.026,22,0.776,253,1.676,257,5.537,259,5.485,260,4.001,489,2.768,601,7.167,827,4.15,937,4.076,968,4.006,1233,5.688,1569,4.311,1750,5.466,1751,6.736,1752,6.736,1753,6.736,1754,6.736,1755,6.736,1756,6.736,1757,6.736,1758,6.736,1759,8.398,1760,6.736,1762,6.736,1777,6.736]],["t/299",[1,2.858,22,0.879,259,6.207,260,4.528,937,5.75,1750,7.712,1764,6.197,1768,6.487,1777,7.338]],["t/301",[22,0.674,47,2.73,53,3.054,59,1.99,64,4.76,86,4.262,88,5.224,90,4.973,91,4.407,118,3.115,119,4.334,178,2.408,458,3.283,578,5.093,635,3.513,817,4.574,887,5.641,1352,5.528]],["t/303",[0,2.473,1,0.881,3,2.518,6,3.369,22,0.271,25,2.222,28,1.742,31,4.861,34,1.52,39,1.097,47,1.097,53,1.227,58,1.292,66,1.61,69,4.331,74,0.948,76,2.81,80,4.765,84,2.468,86,5.547,87,2.912,91,3.571,100,1.913,116,1.159,124,1.659,126,2.158,128,1.353,137,1.022,138,1.17,144,1.107,157,1.159,161,1.713,162,1.069,167,0.967,174,1.396,178,0.745,179,1.019,205,2.589,206,0.794,207,3.183,213,1.707,214,1.192,235,2.589,242,1.772,244,2.713,247,1.587,268,0.881,362,1.838,371,2.222,383,1.963,434,1.659,456,0.689,461,1.634,468,1.292,469,1.033,528,1.364,562,1.913,567,1.412,572,1.954,578,4.026,580,2.589,581,2.294,586,2.589,590,2.735,596,3.369,613,2.047,635,1.412,650,2.047,667,1.838,668,2.929,669,2.294,670,2.929,671,2.929,672,2.929,673,2.929,686,3.149,701,2.294,702,3.634,721,2.473,723,4.674,725,7.596,754,2.589,786,2.478,787,2.735,817,2.912,851,4.991,934,2.32,957,3.5,997,2.589,1047,2.158,1111,2.047,1170,4.101,1188,1.804,1194,1.913,1209,2.589,1243,2.222,1254,2.294,1256,2.735,1257,6.079,1258,3.931,1261,2.377,1264,2.1,1269,4.331,1272,4.331,1277,2.473,1289,2.589,1510,4.64,1562,2.735,1569,3.687,1778,3.225,1779,2.473,1780,3.225,1781,3.225,1782,3.225,1783,3.225,1784,2.735,1785,3.225,1786,5.107,1787,4.64,1788,3.225,1789,2.929,1790,3.225,1791,2.929]],["t/305",[3,2.419,6,2.897,22,0.785,26,1.403,31,6.342,53,2.076,80,3.306,84,2.557,86,4.602,95,3.519,124,2.806,128,0.755,137,1.218,138,1.116,157,1.96,163,2.542,166,2.897,178,1.744,180,2.897,197,0.867,247,2.684,297,2.281,362,3.11,469,2.419,489,2.036,498,3.43,566,3.88,572,3.306,596,2.897,598,2.806,606,3.11,689,3.236,693,4.626,813,4.02,871,2.664,876,3.236,910,4.38,934,3.43,1005,3.758,1171,6.405,1257,6.569,1258,5.37,1272,6.405,1276,4.02,1543,4.02,1596,4.38,1638,5.793,1787,4.955,1789,4.955,1791,4.955,1792,5.373,1793,4.626,1794,5.454,1795,4.955,1796,5.454]],["t/307",[3,1.985,22,0.692,26,2.119,71,2.248,86,2.202,87,4.232,91,3.372,92,2.431,95,3.459,97,4.404,115,2.851,118,1.61,122,1.18,123,2.364,124,2.133,144,2.128,146,1.706,157,1.49,158,2.101,174,1.794,179,1.758,185,2.7,207,3.649,213,2.072,253,2.228,403,1.306,424,2.186,461,3.141,468,1.661,504,6.614,521,2.41,542,3.842,572,2.513,592,4.174,598,2.133,650,2.632,786,2.012,813,3.056,934,2.815,937,4.08,959,5.106,997,3.329,1021,2.95,1088,5.472,1117,2.57,1118,4.569,1121,3.935,1141,4.569,1188,2.32,1416,3.516,1429,3.329,1528,3.766,1549,3.18,1569,4.788,1722,2.774,1797,4.146,1798,3.329,1799,3.766,1800,8.816,1801,8.236,1802,8.236,1803,3.766,1804,4.146,1805,8.236,1806,6.198,1807,6.198,1808,4.146,1809,4.146,1810,3.329,1811,3.329,1812,6.198,1813,6.198,1814,6.198,1815,6.198,1816,5.63]],["t/309",[1,1.117,22,0.343,25,2.817,34,1.216,59,2.283,63,1.24,66,3.062,67,1.768,68,1.729,69,3.467,71,1.483,73,1.416,74,1.222,84,1.81,85,1.984,87,4.663,116,1.469,122,0.975,128,1.389,137,1.319,138,0.79,162,3.525,174,3.793,177,2.655,178,1.416,183,3.225,206,1.007,224,2.104,233,2.247,237,5.564,247,2.012,260,2.655,267,1.754,292,1.541,458,1.673,468,2.457,469,1.309,487,4.817,503,2.821,562,3.639,596,3.258,603,1.79,652,2.104,658,2.426,660,2.662,682,3.006,741,2.817,911,3.467,915,5.493,1047,4.104,1207,3.675,1208,3.572,1217,2.735,1260,7.038,1261,3.014,1262,3.467,1264,3.994,1265,4.925,1289,3.283,1473,3.014,1555,3.283,1596,3.283,1729,3.467,1817,4.088,1818,4.088,1819,4.088,1820,4.088,1821,3.467,1822,3.714,1823,4.088,1824,3.467,1825,2.909]],["t/311",[1,1.132,22,0.521,26,1.067,39,2.109,50,1.594,58,1.661,59,2.043,71,1.504,74,1.433,84,1.224,86,2.202,87,3.534,91,3.372,92,1.626,101,3.534,128,0.857,136,2.101,137,0.999,138,1.192,139,4.08,143,2.04,147,1.362,157,1.49,161,2.202,162,1.374,163,2.888,164,2.364,165,1.243,167,2.226,178,1.902,183,2.439,204,1.816,206,1.021,207,1.578,214,1.532,216,3.766,217,2.857,253,1.401,383,1.594,403,0.874,426,2.632,431,1.578,456,1.325,458,1.696,461,3.141,466,2.364,469,1.328,483,2.513,485,3.105,572,2.513,575,5.975,578,5.597,580,7.08,581,6.273,598,2.133,647,3.766,654,3.677,667,2.364,669,2.95,686,1.661,692,2.07,773,2.46,817,2.364,851,5.229,856,2.95,919,2.857,936,2.101,1117,2.57,1152,2.774,1165,3.766,1189,2.774,1243,5.675,1541,3.516,1664,3.516,1734,3.766,1826,4.146,1827,4.146,1828,6.198,1829,4.146,1830,6.198,1831,4.146,1832,4.146,1833,8.009,1834,2.857,1835,4.146,1836,4.146,1837,4.146,1838,3.766,1839,3.766,1840,4.146]],["t/313",[22,0.553,29,3.195,34,2.55,39,2.24,59,2.126,74,1.508,83,2.724,128,0.911,138,0.848,139,3.619,153,4.685,164,3.754,178,1.52,179,1.709,224,3.388,383,2.531,403,1.388,469,2.109,480,4.854,485,2.754,495,5.051,575,5.195,578,5.441,581,4.685,654,3.907,667,3.754,773,3.907,845,5.584,946,5.584,989,3.195,1036,5.288,1243,4.537,1264,5.581,1302,5.982,1303,5.982,1841,6.585,1842,8.571,1843,5.584,1844,6.585,1845,5.288,1846,6.585,1847,5.982,1848,6.585,1849,6.585]],["t/315",[16,3.873,22,0.682,25,4.185,47,2.067,58,2.433,74,1.214,76,2.692,84,1.793,91,4.16,120,2.947,128,0.84,137,1.31,138,1.26,162,2.013,173,2.085,174,3.517,207,2.312,217,4.185,218,3.156,364,2.457,393,2.794,428,4.477,431,3.093,467,2.815,480,4.477,485,2.541,526,3.856,562,3.604,596,3.227,606,3.463,622,3.531,652,3.125,692,3.033,732,4.322,796,6.526,854,3.281,893,1.979,910,4.878,932,4.064,996,3.682,1010,2.459,1052,5.152,1228,4.659,1365,5.152,1850,5.152,1851,6.074,1852,5.518,1853,5.152,1854,6.074,1855,5.518,1856,5.152,1857,6.074,1858,6.074]],["t/317",[22,0.744,26,1.242,59,1.197,71,1.751,74,1.035,76,4.157,84,1.425,86,3.681,87,2.752,91,2.193,122,1.102,128,1.225,137,1.117,138,1.296,161,3.681,162,2.686,163,2.249,167,1.448,174,2.999,175,5.146,198,4.385,204,2.114,205,3.876,207,4.097,211,2.375,214,1.784,217,4.774,219,6.874,265,2.042,292,1.819,431,1.837,458,1.975,498,2.193,503,2.22,542,4.295,545,3.41,546,2.653,547,2.701,562,2.864,599,2.31,622,2.806,732,3.434,851,5.146,859,2.663,871,1.702,893,1.572,909,4.385,911,4.094,914,3.434,942,3.703,974,3.326,1119,3.703,1257,4.636,1258,2.992,1260,5.564,1266,4.094,1269,4.094,1319,5.876,1838,4.385,1853,4.094,1859,4.385,1860,4.827,1861,4.827,1862,8.105,1863,6.929,1864,4.385,1865,4.827,1866,4.385]],["t/319",[3,1.578,22,0.751,26,1.268,34,1.466,39,1.677,58,1.974,59,1.222,63,0.996,74,1.336,91,2.239,118,1.914,120,2.391,122,0.784,124,2.536,128,1.308,129,2.576,138,1.218,165,1.478,167,1.478,179,0.983,197,0.784,204,2.158,207,1.876,250,2.497,253,2.222,254,2.709,381,2.989,393,2.267,431,2.677,434,2.536,467,1.707,503,2.267,562,2.924,575,4.262,580,3.958,581,3.506,603,2.158,631,3.429,644,3.506,699,5.647,708,3.297,780,2.016,786,2.391,817,2.81,859,2.311,893,2.291,931,3.633,932,4.705,1117,3.055,1264,3.209,1570,3.297,1784,4.18,1798,3.958,1822,4.477,1824,5.964,1834,3.396,1852,9.192,1853,6.954,1859,4.477,1867,4.928,1868,4.928,1869,4.928,1870,4.928,1871,4.928,1872,4.928,1873,4.928,1874,4.928,1875,7.032,1876,4.928,1877,4.928,1878,4.928,1879,4.928,1880,4.928,1881,4.928]],["t/322",[1,1.759,53,2.451,63,1.302,74,0.962,119,3.479,128,1.169,135,4.194,137,1.038,138,0.83,141,2.787,143,3.169,161,3.421,163,3.001,197,1.591,260,4.08,261,3.314,267,2.416,268,2.307,394,3.082,423,3.216,431,3.215,451,3.837,467,2.231,641,5.172,745,4.089,821,4.643,840,4.438,918,4.94,937,4.643,970,3.744,1033,3.821,1038,5.462,1061,5.652,1317,5.462,1472,6.784,1569,4.911,1583,6.227,1680,5.462,1882,4.747,1883,5.85,1884,6.44]],["t/324",[16,2.986,22,0.827,28,4.842,30,3.02,49,5.415,57,3.75,63,1.427,64,4.188,68,3.791,73,2.445,88,4.597,137,1.138,157,2.536,197,1.425,213,2.36,274,4.482,394,3.378,431,2.687,468,2.827,515,4.482,596,3.75,813,5.204,821,5.413,831,5.204,852,4.025,932,4.723,1033,4.188,1206,4.279,1237,4.723,1263,6.413,1337,4.597,1583,6.607,1698,6.413,1885,7.059]],["t/326",[1,2.045,22,0.526,28,2.272,34,1.251,68,2.65,70,3.384,73,1.456,84,1.241,115,1.934,116,2.251,118,1.633,120,2.04,128,0.867,137,1.207,138,0.964,139,2.311,144,1.443,147,2.058,154,4.191,157,1.511,173,2.15,197,1.574,213,2.094,248,2.04,253,1.692,262,3.471,394,3.582,403,0.886,407,2.495,431,2.384,451,3.4,456,0.899,463,2.445,468,1.684,521,3.642,526,3.977,562,2.495,608,2.198,613,2.67,686,2.509,732,2.992,785,2.549,806,2.814,821,5.111,871,1.483,893,2.041,898,2.164,918,4.805,942,3.226,959,2.607,970,2.445,979,3.226,1039,3.82,1047,2.814,1056,3.443,1093,5.313,1174,2.607,1202,5.313,1339,8.448,1468,3.226,1583,6.114,1597,3.82,1798,5.03,1886,4.205,1887,4.205,1888,4.205,1889,4.205,1890,4.205,1891,4.205,1892,3.566,1893,3.377,1894,4.205,1895,4.205,1896,4.205,1897,4.205,1898,6.264,1899,4.205,1900,4.205,1901,4.205,1902,4.205,1903,3.566,1904,3.82,1905,6.264,1906,6.264,1907,3.82,1908,4.205,1909,4.205,1910,7.486,1911,6.264,1912,4.205,1913,3.82,1914,3.82,1915,4.205]],["t/328",[121,5.776,394,4.245,431,3.376,468,3.553,606,5.058,611,2.965,785,5.377,821,4.876]],["t/330",[3,2.182,22,0.572,28,3.681,64,4.043,68,2.882,74,1.447,157,2.448,197,1.084,211,3.353,262,2.543,394,4.194,400,5.023,403,1.436,463,3.961,466,3.885,468,4.237,469,2.807,498,3.095,526,4.326,588,4.326,665,6.234,686,3.51,821,5.62,934,3.095,936,3.453,937,3.745,965,5.023,1056,3.745,1190,5.023,1274,6.19,1550,5.779,1583,7.14,1730,6.19]],["t/332",[22,0.752,57,3.747,64,4.185,88,3.223,93,2.508,94,3.648,122,1.307,136,2.508,137,0.798,156,2.546,157,1.778,165,2.953,197,1.611,206,1.219,225,3.648,242,2.72,243,3.648,253,1.594,260,2.142,261,1.941,262,1.847,263,3.521,264,3.223,265,2.093,266,3.648,267,2.351,268,2.245,271,7.466,272,3.733,274,3.142,394,2.368,395,4.496,403,1.043,420,4.478,431,2.685,451,2.248,458,2.025,483,4.275,542,3.068,599,2.368,689,2.936,757,5.553,768,3.648,785,3,786,2.401,821,3.877,934,2.248,936,3.574,1061,3.311,1162,3.974,1492,4.197,1540,3.648,1541,4.197,1552,4.197,1583,3.648,1845,3.974,1882,5.199,1914,4.496,1916,4.949,1917,7.053,1918,6.408,1919,4.949,1920,4.949,1921,4.949,1922,4.949,1923,4.949,1924,4.949,1925,8.218,1926,4.949,1927,4.949,1928,4.949,1929,4.949,1930,4.949]],["t/334",[62,5.909,73,3.004,115,3.99,118,3.368,431,3.301,596,4.608,635,3.799,636,5.146,821,4.768,838,6.966]],["t/336",[22,0.657,26,1.479,34,1.71,46,2.104,83,2.378,85,4.32,115,2.644,120,2.789,122,0.914,123,4.463,128,1.428,135,3.743,137,1.435,138,1.232,144,1.973,165,2.348,167,1.724,174,3.853,178,2.056,197,1.591,213,1.921,218,3.884,291,2.678,382,2.789,403,1.211,406,3.96,411,4.237,458,2.352,478,2.714,492,3.004,599,2.751,605,3.846,676,3.649,772,4.237,803,6.021,817,3.277,893,2.55,936,2.913,945,2.957,1388,4.874,1641,4.409,1931,8.903,1932,5.747,1933,5.221]],["t/338",[115,4.112,197,1.421,606,5.096,871,3.152,1548,8.119,1648,6.589,1903,7.58]],["t/340",[26,1.232,32,1.643,39,1.629,56,2.231,85,2.323,120,3.342,128,1.116,136,2.426,138,0.617,163,2.231,175,3.039,178,1.863,179,1.374,217,3.299,218,1.859,248,4.281,262,3.293,291,4.784,399,4.06,403,1.701,406,3.299,428,3.529,551,3.529,587,3.529,658,2.841,739,3.672,753,3.299,768,3.529,772,7.395,803,5.33,806,3.203,849,3.118,893,2.244,915,5.448,926,2.841,948,3.845,1150,3.039,1162,3.845,1261,3.529,1346,3.529,1648,7.824,1649,6.189,1934,4.788,1935,6.257,1936,6.888,1937,4.788,1938,8.068,1939,7.329,1940,8.493,1941,4.788,1942,8.016,1943,4.788,1944,4.788,1945,4.788,1946,4.788,1947,4.788,1948,4.788,1949,4.788,1950,4.788,1951,4.349]],["t/342",[46,3.444,75,2.846,93,4.422,115,2.544,120,2.684,128,1.301,133,1.951,137,0.892,148,2.765,160,2.846,178,1.277,197,0.88,218,3.653,262,2.064,381,1.849,382,4.564,403,1.166,406,6.481,425,3.935,487,3.04,489,2.846,507,1.455,567,3.339,629,3.811,631,4.266,638,5.621,757,3.429,803,5.96,815,4.442,871,1.951,893,2.484,925,5.102,1067,2.064,1152,3.701,1261,5.621,1291,2.612,1298,6.693,1648,5.621,1732,5.025,1903,6.467,1952,5.025,1953,5.025,1954,5.025,1955,5.531,1956,5.531,1957,5.531]],["t/344",[46,3.268,93,5.237,128,1.463,133,2.77,138,0.744,178,1.334,197,1.644,224,2.972,253,2.432,381,2.626,382,3.811,403,1.217,507,1.519,631,2.416,803,6.135,849,3.761,871,2.77,893,1.881,915,4.396,925,5.256,988,4.43,1067,2.931,1291,3.709,1648,5.79,1649,6.025,1935,7.135,1952,7.135,1953,7.135,1954,7.135,1958,7.135,1959,7.135]],["t/346",[22,0.556,34,1.97,46,3.149,83,3.558,128,0.916,138,1.108,163,3.086,176,5.461,178,1.529,185,4.312,224,3.407,237,4.204,253,1.944,265,2.801,382,4.174,403,1.396,507,1.742,579,3.306,631,2.77,803,5.448,849,4.312,871,2.335,893,2.802,898,3.407,915,5.347,925,5.756,988,5.079,1291,4.062,1337,4.312,1566,5.079,1648,6.341,1649,6.599,1845,5.318,1958,6.015,1959,7.814,1960,8.602]],["t/348",[22,0.827,88,5.836,136,3.577,197,1.425,211,3.474,218,3.48,244,3.75,246,5.725,291,4.589,403,2.076,658,4.188,739,5.415,772,6.607,802,7.602,803,5.11,1575,5.987,1649,5.415,1653,6.413,1681,5.987,1939,6.413,1940,8.142,1961,8.963,1962,7.059,1963,7.059,1964,8.963]],["t/350",[0,5.688,22,0.886,26,1.908,28,4.006,53,2.822,59,1.839,68,3.137,84,2.973,116,2.664,122,1.47,138,0.955,178,1.712,371,5.11,451,3.368,478,3.501,507,1.951,593,5.688,731,6.289,774,6.736,893,2.416,896,5.688,1258,4.597,1314,5.11,1490,5.869,1965,5.11,1966,7.415,1967,5.955]],["t/352",[47,2.539,72,4.993,74,1.115,128,1.032,138,1.428,181,1.934,204,3.268,262,3.464,268,2.038,290,4.523,393,4.27,526,4.738,606,4.255,708,4.993,734,5.873,893,3.024,940,6.329,942,5.724,977,5.501,1055,5.993,1304,6.329,1968,7.462,1969,7.462]],["t/354",[22,0.627,26,1.92,39,2.539,84,2.203,101,5.292,127,6.044,128,1.032,243,5.501,244,3.964,268,2.038,701,5.309,702,5.309,721,5.724,887,5.396,888,5.501,896,5.724,1042,6.329,1970,6.779,1971,7.462,1972,7.462,1973,7.462,1974,7.462,1975,7.462,1976,7.462,1977,7.462,1978,7.462,1979,7.462,1980,7.462,1981,7.462,1982,7.462]],["t/356",[22,0.759,26,2.324,73,2.475,74,1.068,79,6.06,84,2.109,97,4.239,102,6.491,118,2.775,124,4.647,127,4.653,128,1.249,173,2.453,268,1.952,371,6.223,485,2.988,611,2.389,635,3.129,658,4.239,686,2.862,688,4.429,701,5.084,702,5.084,753,6.223,1173,2.497,1360,6.491,1713,3.621,1792,5.084,1983,9.032,1984,7.145,1985,7.145,1986,6.06,1987,7.145]],["t/358",[9,4.034,15,4.777,16,3.114,22,0.843,32,1.805,43,4.223,60,2.749,74,0.786,76,2.331,77,2.998,84,2.173,96,4.047,101,2.998,116,1.889,128,1.019,137,1.37,162,3.05,166,2.794,196,3.26,213,1.758,248,2.552,280,3.263,364,2.569,407,3.12,431,2.802,436,2.998,451,3.344,460,4.777,478,3.476,490,3.12,598,4.736,652,4.371,656,3.624,701,5.238,702,5.238,816,4.46,889,2.224,892,2.749,1033,4.368,1130,1.027,1194,3.12,1490,5.394,1507,4.46,1519,6.688,1520,6.688,1554,4.46,1584,4.034,1713,2.665,1856,4.46,1965,3.624,1988,4.777,1989,3.424,1990,5.073,1991,3.876,1992,5.259,1993,3.876,1994,3.876,1995,4.223,1996,4.777,1997,4.46,1998,6.244,1999,5.259,2000,4.46,2001,4.46,2002,5.259]],["t/360",[1,1.232,16,1.908,22,0.655,31,2.623,39,1.535,56,3.075,58,1.807,74,0.674,83,3.55,86,4.851,87,3.762,91,3.543,96,2.48,122,1.049,128,1.263,137,1.384,138,1.327,143,2.22,147,1.482,165,1.353,174,1.953,175,2.864,179,0.9,183,1.482,206,1.625,219,3.827,274,2.864,292,3.883,297,1.887,364,1.364,461,2.286,468,2.643,473,4.099,495,3.461,503,4.201,506,3.109,537,2.735,578,2.864,608,2.358,676,2.864,687,3.019,723,4.864,817,2.572,851,4.189,854,2.437,893,2.149,943,2.938,996,3.999,1084,3.623,1217,3.019,1241,3.21,1257,3.019,1260,5.299,1307,4.099,1327,2.189,1468,3.461,1549,3.461,1722,3.019,1834,3.109,1850,3.827,1986,3.827,1994,3.326,2003,5.596,2004,5.994,2005,4.099,2006,4.099,2007,4.099,2008,4.099,2009,4.099,2010,4.099,2011,4.099,2012,4.099,2013,4.512,2014,4.512,2015,4.512,2016,6.598,2017,4.512,2018,5.994,2019,3.461,2020,4.512,2021,4.512,2022,4.512,2023,4.099,2024,4.512]],["t/362",[1,1.677,16,2.596,22,0.515,71,2.226,77,3.499,84,3.019,86,4.89,126,4.107,127,5.328,128,0.849,137,1.583,138,1.405,144,2.107,162,2.034,163,2.86,183,2.017,274,3.897,292,2.313,364,1.856,506,4.229,567,2.688,578,3.897,588,3.897,619,4.708,678,5.205,686,3.278,723,4.524,851,3.897,895,2.165,901,3.499,914,4.367,1243,4.229,1257,5.475,1428,7.061,1562,5.205,2003,7.807,2004,5.576,2005,5.576,2006,5.576,2008,5.576,2009,5.576,2010,5.576,2011,5.576,2025,5.576]],["t/364",[22,0.66,26,2.023,32,2.699,37,4.991,39,2.675,47,2.675,74,1.432,76,4.248,84,2.321,101,4.482,128,1.088,364,2.377,598,4.932,688,4.874,793,5.795,854,4.247,892,5.01,907,5.594,1988,7.142,2026,7.697]],["t/366",[5,4.905,8,4.75,22,0.579,26,1.774,39,2.345,84,2.035,101,3.93,104,4.273,137,1.111,138,1.137,297,4.295,431,2.624,793,7.179,854,3.724,1194,4.09,1300,6.281,1460,7.487,1490,4.376,1650,5.846,1989,4.489,1991,5.081,1993,7.825,2027,6.262,2028,5.846,2029,7.09,2030,5.846,2031,8.02,2032,6.262,2033,7.487,2034,6.262,2035,6.262]],["t/368",[22,0.66,58,3.149,71,2.851,74,1.432,77,4.482,100,4.665,101,4.482,128,1.326,213,2.628,598,4.045,652,4.932,692,3.925,816,6.668,892,4.109,1033,4.665,1079,5.417,1305,6.314,1490,4.991,1998,6.668,2001,6.668,2036,7.862,2037,6.031]],["t/370",[22,0.688,47,2.787,74,1.468,101,4.67,122,1.303,137,1.321,157,2.943,181,2.123,206,2.017,207,3.117,480,6.038,550,6.283,575,5.955,745,5.2,1388,6.946,1784,6.946,2038,7.441]],["t/372",[8,4.413,22,0.538,26,1.648,37,4.066,53,2.438,74,1.258,83,2.65,101,4.799,104,3.971,120,3.108,122,1.019,138,0.825,144,2.199,173,2.199,280,2.839,297,4.177,364,1.937,431,2.438,451,2.909,485,2.679,793,7.361,889,2.709,892,4.4,907,4.557,1065,4.066,1188,3.584,1194,4.994,1300,4.557,1375,5.432,1460,5.432,1650,5.432,1991,4.721,1993,7.646,2027,5.819,2028,5.432,2029,6.76,2030,5.432,2031,7.646,2032,5.819,2033,7.139,2034,5.819,2035,5.819]],["t/374",[16,3.762,22,0.586,53,2.655,63,2.154,67,2.973,68,4.142,73,2.416,74,1.042,122,1.415,128,1.231,137,1.434,138,0.899,147,2.292,157,2.506,166,3.706,364,3.119,463,4.055,468,2.794,611,2.332,618,5.647,682,2.197,945,3.589,1065,4.428,1159,4.542,1337,4.542,2039,6.975,2040,6.337]],["t/376",[22,0.572,63,2.067,67,2.792,68,3.706,73,2.36,74,1.309,136,3.453,137,1.562,138,1.129,157,3.148,165,2.044,167,2.044,169,4.083,250,3.453,253,1.54,254,3.745,256,3.813,257,3.745,364,2.929,425,4.848,468,4.095,618,4.326,682,2.146,686,3.51,945,3.506,1035,5.779,1159,4.437,1316,5.779,2041,6.19,2042,6.19]],["t/378",[22,0.761,63,1.961,67,2.613,74,0.889,136,3.016,137,1.718,138,1.343,157,2.138,160,2.991,165,2.404,169,2.773,250,3.016,253,1.812,254,3.271,256,3.33,257,3.271,260,3.469,262,2.221,263,5.703,264,3.875,266,4.387,280,2.638,364,2.932,383,2.288,458,2.435,468,3.211,584,4.101,618,6.157,786,2.888,936,3.016,1194,3.531,1251,4.779,1498,6.449,2041,5.406,2043,5.951,2044,5.951,2045,8.015,2046,8.015,2047,5.951]],["t/380",[22,0.623,55,4.15,59,1.839,63,1.869,67,2.138,73,2.568,100,4.4,138,1.191,180,3.939,197,1.179,204,3.247,265,3.91,364,2.242,403,1.563,468,4.224,469,2.961,566,5.276,618,5.869,682,2.336,871,2.615,934,4.199,936,3.758,945,3.816,1498,6.578]],["t/382",[26,1.908,47,2.523,63,1.499,68,3.137,73,2.568,74,1.108,128,1.026,138,0.955,165,2.224,178,1.712,181,1.922,197,1.179,247,3.649,362,5.271,364,2.242,403,1.563,456,1.585,468,4.224,469,2.961,592,5.344,682,2.336,945,3.816,1005,5.11,1056,4.076,1159,4.829,1498,5.276]],["t/384",[1,1.789,3,3.044,22,0.798,30,2.801,57,3.478,74,1.42,76,3.785,118,2.543,128,1.181,129,3.423,134,4.512,138,1.297,144,2.248,147,2.151,165,1.964,173,2.248,178,1.512,184,4.113,206,1.613,213,2.189,362,3.733,538,5.023,607,4.381,665,6.761,766,3.928,876,3.885,889,2.77,922,2.902,925,4.381,934,3.879,935,5.948,936,3.318,937,4.694,1082,4.381,1615,5.948,1834,4.512,2048,4.157]],["t/386",[22,0.751,122,1.421,137,1.441,138,1.151,665,6.359,1716,6.856,1811,7.178]],["t/388",[22,0.745,122,1.411,138,1.143,162,3.413,665,6.311,1716,6.804,1811,7.124]],["t/390",[118,3.344,214,3.183,244,4.574,654,6.005,689,5.109,729,5.933,773,5.109,1037,6.915,1167,7.822,1543,6.347,2049,8.611]],["t/392",[3,2.699,22,0.839,28,4.551,122,1.34,128,1.166,246,5.809,483,5.107,596,4.476,598,4.335,654,4.999,773,4.999,1834,5.806,2050,8.425]],["t/394",[22,0.639,56,3.545,96,4.181,97,5.573,122,1.21,126,5.09,127,4.954,144,2.611,247,3.744,383,2.924,483,4.611,487,4.181,521,4.423,598,3.914,654,6.046,686,3.047,706,6.911,773,4.514,1038,6.452,1117,4.716,1429,6.109,1570,5.09,1792,5.413,2051,7.607,2052,7.607,2053,7.607,2054,7.607]],["t/396",[22,0.745,122,1.411,426,5.632,486,5.776,487,4.876,644,6.311,654,5.263,773,5.263]],["t/398",[1,0.703,13,1.742,22,0.457,26,1.626,34,1.266,39,0.876,47,1.448,48,1.819,59,1.056,63,1.415,66,2.125,72,2.848,73,0.892,74,0.636,80,1.561,83,1.065,84,1.256,92,1.01,96,1.415,97,1.528,100,1.528,122,0.865,123,1.468,124,1.325,128,0.753,138,0.814,141,1.114,143,1.267,147,0.846,154,1.723,156,1.325,158,2.157,165,0.772,173,1.461,174,1.114,175,1.635,178,1.256,179,0.513,183,0.846,197,0.865,204,1.128,206,2.251,213,0.861,232,1.677,242,4.755,247,1.267,253,2.015,260,2.355,261,2.48,262,1.589,265,1.089,267,2.157,268,2.363,279,1.561,383,2.898,403,0.897,424,0.908,429,2.184,433,1.596,437,3.102,439,3.102,440,1.468,442,1.561,450,3.718,451,3.179,456,1.351,458,1.054,461,2.157,467,1.474,490,1.528,507,1.431,522,2.184,537,1.561,552,1.898,592,2.157,596,1.368,603,2.768,604,1.528,608,2.844,621,4.823,652,1.325,682,1.341,688,1.596,689,3.228,740,3.871,753,1.774,776,2.184,780,1.742,783,1.635,785,1.561,840,1.774,871,1.501,898,2.19,918,3.265,922,1.141,934,2.871,937,3.847,957,1.249,961,2.339,1078,1.723,1119,1.975,1171,2.184,1188,1.441,1291,1.216,1342,1.832,1346,1.898,1473,1.898,1504,1.975,1505,4.011,1506,1.898,1882,1.898,1893,2.068,2055,4.174,2056,5.361,2057,2.575,2058,2.575,2059,2.203,2060,3.61,2061,2.575,2062,4.011,2063,2.247,2064,2.184,2065,2.184,2066,2.184,2067,2.184,2068,2.184,2069,2.339,2070,2.184,2071,2.068,2072,2.184,2073,1.832,2074,2.184,2075,2.184,2076,2.339,2077,2.575,2078,4.943,2079,1.677,2080,4.256,2081,2.184,2082,2.339,2083,2.184,2084,2.339,2085,2.339,2086,4.256,2087,2.575,2088,4.256,2089,4.256,2090,7.159,2091,3.61,2092,2.339,2093,2.339,2094,2.575,2095,2.575,2096,2.575,2097,2.575,2098,2.575,2099,4.943,2100,2.575,2101,2.575,2102,4.943,2103,2.575,2104,2.575,2105,2.184,2106,2.339]],["t/400",[3,2.36,22,0.773,31,4.284,47,3.133,59,1.828,60,3.852,61,4.466,63,1.49,64,4.372,65,4.931,83,3.048,84,2.175,86,3.915,87,4.201,88,4.798,89,5.918,91,4.183,118,2.861,154,4.931,178,1.701,179,1.47,292,2.777,297,3.082,528,3.117,584,5.078,635,4.033,658,4.372,687,4.931,887,5.354,1641,5.653]],["t/402",[3,3.134,47,2.767,58,3.258,74,1.462,83,3.365,88,6.371,135,5.297,137,1.577,141,3.52,178,1.878,209,5.164,431,3.096,468,3.258,550,6.239,1338,7.389,2107,8.134]],["t/404",[3,2.061,22,0.709,28,3.476,34,2.512,45,3.699,53,2.449,59,1.082,60,2.28,61,2.643,62,2.535,63,0.882,64,6.39,65,2.918,68,2.722,73,1.511,74,0.962,79,3.699,91,1.981,113,2.704,118,2.97,122,0.694,128,0.603,135,2.84,137,1.038,143,3.167,144,2.209,147,1.433,157,2.312,158,2.21,165,1.308,166,2.317,173,2.898,176,2.769,177,1.888,178,1.486,197,1.216,203,1.445,206,1.074,242,2.397,244,2.317,247,2.146,292,2.882,383,3.246,403,0.919,423,3.213,431,3.214,442,4.636,456,0.932,458,1.785,469,1.397,499,3.215,500,3.502,511,3.215,515,2.769,520,4.086,528,1.845,611,1.458,635,2.818,686,1.747,729,3.005,817,2.487,821,2.397,859,1.433,871,1.538,876,2.588,898,2.244,934,1.981,936,2.21,1035,3.699,1080,3.502,1127,3.345,1206,2.643,1217,2.918,1250,3.502,1315,3.103,1352,3.005,1550,3.699,1629,5.846,1638,4.937,1771,3.005,1776,1.888,1839,3.962,1882,3.215,1918,3.962,2007,3.962,2108,4.361,2109,4.361,2110,4.361,2111,4.361,2112,3.962,2113,3.699,2114,4.361,2115,3.699,2116,3.962,2117,3.962]],["t/406",[16,2.351,22,0.735,53,2.115,63,1.906,74,0.83,91,4.64,92,4.007,97,5.864,124,2.859,128,1.058,137,0.896,138,0.716,157,1.997,158,2.816,163,2.59,178,1.766,184,2.405,195,2.115,253,2.131,267,2.827,297,2.324,407,3.297,423,2.775,424,2.698,458,2.274,468,3.775,469,1.78,650,4.857,660,3.619,893,1.81,934,2.524,938,6.488,946,7.994,960,3.712,1121,5.554,1141,6.449,1779,4.263,1810,4.463,1816,6.95,2118,5.557,2119,5.557,2120,5.557,2121,5.557,2122,5.557]],["t/408",[1,1.677,3,1.966,22,0.773,34,2.435,39,2.088,53,2.336,56,2.86,58,3.687,59,2.436,60,4.812,61,5.58,63,1.241,71,2.226,74,0.917,76,2.72,84,1.812,89,4.929,95,3.813,128,1.132,165,1.841,166,3.261,178,1.417,224,3.158,248,2.978,292,2.313,431,2.336,515,6.234,537,3.72,622,3.568,686,2.458,692,4.086,773,3.641,1206,4.96,1316,5.205,1342,4.367,1346,4.524,1357,4.708,1506,4.524,1617,5.205,1779,6.277,1821,5.205,2123,6.138,2124,6.138,2125,6.138,2126,6.138,2127,6.138,2128,6.138]],["t/410",[1,1.456,39,1.814,59,2.501,63,1.078,74,0.796,76,3.294,90,3.304,95,3.464,97,3.163,111,3.929,120,2.586,122,0.848,128,1.184,138,1.102,165,2.92,166,2.832,178,1.231,179,1.063,205,4.281,206,2.107,207,3.257,211,2.623,214,2.747,226,3.929,261,2.091,267,1.525,268,1.456,292,3.669,393,2.452,463,3.099,504,4.281,511,5.479,515,5.878,526,4.719,551,5.479,565,3.673,627,7.258,674,3.792,851,3.384,893,2.788,1206,5.187,1217,3.567,1241,3.792,1250,4.281,1265,4.281,1342,3.792,1555,5.969,1594,4.521,1617,4.521,1631,4.842,1845,4.281,2105,4.521,2129,5.33,2130,5.33,2131,7.433,2132,5.33,2133,4.521,2134,4.842]],["t/412",[22,0.762,59,2.251,165,2.722,515,5.762,622,5.276]],["t/414",[34,2.165,39,2.476,55,4.073,63,1.472,71,2.639,95,3.391,111,5.365,128,1.264,138,1.419,173,2.498,206,1.792,211,3.581,248,3.531,292,2.743,458,2.978,487,4,515,4.62,604,5.926,1206,6.054,1342,6.501,1986,6.172,2135,6.611,2136,7.278,2137,9.137,2138,7.278]],["t/416",[59,2.456,95,2.921,138,1.454,165,2.489,179,1.25,204,2.745,206,2.291,248,3.042,292,3.127,379,3.592,390,3.799,403,1.321,431,3.158,456,1.34,515,5.906,584,4.319,604,6.279,627,7.038,736,3.038,1189,4.194,1565,4.621,2112,7.539,2135,7.539,2139,5.694,2140,5.694,2141,6.268,2142,6.268,2143,7.539,2144,8.298,2145,8.298]],["t/418",[56,3.955,74,1.268,90,5.261,120,4.118,122,1.35,125,5.144,137,1.368,178,1.959,468,3.399,469,2.718,676,5.388,1206,5.144,1413,7.709,2146,8.486]],["t/420",[6,3.178,16,3.402,22,0.763,26,1.539,32,2.053,58,3.64,63,1.837,73,2.072,76,4.307,95,2.787,101,3.41,137,0.964,138,1.252,157,2.149,178,1.381,179,1.604,195,2.277,207,3.061,214,2.211,247,2.944,431,3.061,458,2.447,468,3.64,469,2.576,515,3.797,565,4.121,605,5.382,661,4.002,692,4.852,786,2.902,934,2.717,1206,3.625,1337,3.895,1342,4.256,1368,6.459,1855,5.434,2147,5.434,2148,9.717,2149,5.981,2150,5.981,2151,5.981,2152,5.981,2153,5.981,2154,5.981,2155,5.981]],["t/422",[22,0.643,50,2.943,56,3.568,58,3.067,122,1.218,138,1.215,165,2.297,179,1.527,181,1.985,192,2.973,210,5.448,262,3.814,469,2.452,483,4.641,654,4.543,657,5.874,692,3.823,734,5.482,977,5.644,990,4.986,1350,5.874,1392,6.956,2156,7.657,2157,6.956,2158,7.657]],["t/424",[1,1.266,22,0.389,26,1.193,34,1.38,54,2.815,63,1.361,66,2.315,74,1.439,91,2.106,92,1.819,101,3.837,122,0.737,128,0.931,137,0.748,138,1.12,161,2.463,166,3.575,167,2.019,175,2.944,178,1.829,248,3.266,260,2.007,262,1.73,265,1.961,267,1.326,381,1.55,383,1.782,393,3.096,406,6.846,420,4.273,426,2.944,436,2.643,437,2.643,439,2.643,440,2.643,451,3.057,456,0.991,458,1.897,467,2.331,469,2.538,498,3.949,524,3.932,526,4.273,575,6.47,578,4.273,658,2.751,661,3.102,667,2.643,893,1.51,895,1.635,934,2.106,1189,3.102,1243,5.459,1251,3.723,1793,3.932,1824,5.708,1825,3.299,1833,4.212,1933,4.212,2029,3.723,2159,4.636,2160,4.636,2161,4.636,2162,4.636,2163,4.636,2164,4.636,2165,4.212,2166,7.923,2167,4.636,2168,6.114,2169,4.636,2170,4.212,2171,4.636,2172,4.636,2173,6.73,2174,4.636,2175,6.73]],["t/426",[1,2.515,3,2.36,10,6.694,22,0.773,34,2.193,47,2.507,68,3.117,74,1.101,113,4.568,115,4.236,118,2.861,179,1.47,297,3.082,407,4.372,420,4.678,498,3.347,528,3.117,635,3.227,658,4.372,888,5.432,943,4.798,944,4.568,1065,4.678,1188,4.124,1298,5.243,1489,6.694,1549,5.653,1965,5.078,2176,7.369,2177,5.653,2178,6.694,2179,7.369]],["t/428",[1,1.132,3,3.287,22,0.846,23,3.516,29,2.012,32,1.423,39,1.411,50,2.383,53,2.359,58,2.483,59,1.537,63,0.838,67,1.195,68,1.754,70,2.24,74,1.109,95,1.932,96,2.279,100,2.46,116,1.49,121,2.7,122,1.18,125,3.757,128,1.027,137,1.421,138,1.192,139,2.279,141,2.683,160,1.547,162,2.922,169,1.932,178,1.431,179,0.827,180,2.202,181,1.075,183,1.362,184,3.213,192,2.407,197,0.659,204,3.251,206,1.021,233,2.279,247,2.04,250,3.141,253,1.401,254,3.407,255,3.677,256,4.154,260,2.683,265,1.754,268,1.132,403,0.874,407,2.46,456,1.325,458,1.696,470,2.364,478,1.958,483,2.513,637,2.857,660,2.7,686,3.299,693,3.516,734,4.315,744,2.46,849,2.7,859,1.362,889,1.754,893,2.019,926,2.46,942,5.694,947,3.329,948,3.329,951,3.516,972,4.271,974,4.271,977,3.056,1149,3.516,1150,2.632,1184,3.516,1237,2.774,1241,2.95,1350,4.754,1391,3.516,1647,3.056,1810,3.329,1811,3.329,2180,4.146,2181,3.766,2182,4.146,2183,4.146,2184,4.146,2185,4.146]],["t/430",[3,2.718,22,0.713,47,2.887,115,3.904,116,3.049,128,1.174,178,1.959,184,3.673,411,6.256,528,3.59,686,3.399,876,5.035,1692,7.709,2186,8.486]],["t/432",[3,2.797,6,3.351,22,0.89,26,1.306,32,1.098,34,2.844,39,1.088,47,1.726,50,3.01,53,1.217,59,2.247,92,1.255,93,1.621,112,2.712,122,1.003,128,1.253,137,0.818,141,1.384,146,2.404,157,2.266,162,2.595,165,2.153,167,0.959,178,0.738,179,2.009,180,4.159,184,2.196,192,2.788,196,1.983,197,0.807,224,1.646,226,2.358,245,2.568,250,2.571,253,1.426,254,2.789,255,3.011,256,3.53,260,1.384,262,1.894,268,0.874,380,2.568,383,1.229,394,2.428,403,1.07,420,2.03,423,1.597,432,2.905,465,2.275,469,1.024,533,5.239,567,1.401,579,3.585,592,4.222,613,2.03,622,1.859,635,1.401,637,3.496,665,2.275,740,2.275,750,2.275,752,2.905,757,3.146,763,3.892,790,4.609,849,2.083,919,4.346,936,1.621,943,2.083,944,1.983,948,2.568,951,2.712,972,2.204,974,4.346,1056,1.758,1083,2.358,1088,2.358,1099,2.358,1150,4.004,1188,1.79,1262,4.303,1573,4.649,1575,2.712,1645,2.712,1647,2.358,1671,2.905,1672,2.905,1693,2.712,1695,2.712,1696,2.568,1713,1.621,2187,3.198,2188,3.198,2189,5.074,2190,3.198,2191,3.198,2192,3.198,2193,5.074,2194,3.198,2195,3.198,2196,3.198,2197,3.198,2198,3.198,2199,3.198,2200,3.198,2201,3.198,2202,2.905,2203,3.198,2204,3.198,2205,3.198,2206,3.198,2207,2.905,2208,3.198]],["t/434",[16,1.908,22,0.879,26,1.161,29,3.785,50,1.734,53,1.717,68,2.791,74,1.282,84,1.948,96,2.48,104,2.797,110,2.358,115,2.076,137,1.258,162,3.265,364,1.364,416,3.623,451,3.898,478,4.052,559,4.099,656,3.109,889,1.908,1111,2.864,1130,1.289,1204,3.827,1456,3.21,1481,3.326,1490,2.864,1584,3.461,1664,3.827,1713,3.344,1739,3.827,1967,5.299,1989,5.588,1990,6.572,1991,4.864,1995,3.623,2209,4.512,2210,7.086,2211,3.827,2212,5.984,2213,5.984,2214,7.086,2215,8.665,2216,4.099,2217,8.234,2218,4.099,2219,4.099,2220,4.099,2221,5.994,2222,6.264,2223,7.086,2224,7.086,2225,4.099,2226,4.099,2227,4.099,2228,4.099,2229,4.099,2230,5.994,2231,4.512,2232,3.827,2233,4.512]],["t/436",[1,1.84,5,6.188,22,0.809,26,1.733,29,3.268,63,1.362,67,1.942,68,2.849,74,1.3,122,1.071,137,1.086,138,1.12,162,2.882,179,1.735,183,2.213,214,2.49,431,2.564,451,3.06,478,3.18,491,6.119,581,6.188,656,5.993,657,5.167,787,5.712,1071,4.641,1380,6.119,1490,5.522,1683,6.119,1713,3.413,1989,5.664,2037,6.672,2234,8.698,2235,8.698,2236,8.698,2237,3.578]],["t/438",[1,2.283,22,0.702,28,4.515,30,2.711,53,3.181,57,3.366,63,1.281,64,3.759,65,4.24,67,1.827,68,3.956,73,2.895,84,1.87,89,5.088,90,3.928,93,3.211,116,2.276,122,1.008,128,0.877,162,2.1,167,1.9,232,4.126,253,1.432,268,2.283,291,2.953,403,1.762,431,2.412,451,2.878,478,2.992,482,5.374,581,5.946,603,2.775,611,2.118,889,2.68,919,4.366,961,3.483,1407,5.088,1488,4.671,1713,3.211,1967,5.088,2037,4.86,2238,6.336,2239,7.592,2240,8.357,2241,7.088,2242,7.088,2243,6.336]],["t/440",[3,1.916,5,6.465,22,0.675,32,2.053,66,2.986,70,3.231,81,4.121,85,2.902,95,2.787,96,5.341,119,3.231,122,0.951,128,1.344,137,1.297,138,1.171,161,3.178,162,1.982,180,4.273,206,1.473,260,2.589,274,3.797,413,4.803,451,2.717,478,2.824,500,4.803,528,2.53,596,3.178,599,2.863,615,3.288,686,2.396,766,2.752,768,4.409,783,3.797,789,4.409,932,4.002,961,3.288,1033,3.549,1347,5.434,1369,5.073,1883,5.434,1989,5.237,2000,5.073,2239,7.306,2242,5.073,2244,5.981,2245,5.981,2246,7.306,2247,5.981,2248,5.981,2249,5.981,2250,5.981,2251,5.981,2252,5.981,2253,5.981,2254,5.981,2255,5.981]],["t/442",[127,5.792,268,1.905,701,6.329,702,6.329,721,5.351,1033,4.139,1300,6.968,1864,6.337,1970,6.337,1989,5.792,1990,6.129,1991,5.142,1993,6.557,1998,5.916,2029,7.143,2143,6.337,2212,5.351,2213,5.351,2214,6.337,2215,8.08,2223,6.337,2224,6.337,2256,6.975,2257,6.975,2258,6.975,2259,6.975,2260,6.975,2261,6.975,2262,6.975,2263,6.975,2264,6.975,2265,6.975,2266,6.975,2267,6.975]],["t/444",[22,0.728,66,4.331,84,2.56,115,3.99,451,3.94,656,5.977,1130,1.695,1298,6.172,1490,5.507,1584,6.654,1713,4.396]],["t/446",[5,5.842,16,3.473,22,0.518,29,2.994,41,4.548,74,0.922,84,2.904,104,5.09,110,3.225,137,0.995,138,0.795,253,1.856,268,2.243,364,2.483,451,2.803,478,2.913,796,4.955,889,3.473,1004,4.251,1033,3.661,1228,4.733,1456,4.39,1481,4.548,1713,4.161,1989,5.347,1990,6.36,2030,5.233,2033,5.233,2037,4.733,2211,6.964,2212,7.08,2213,7.08,2216,5.605,2217,7.548,2218,5.605,2222,7.412,2225,5.605,2226,5.605,2268,6.17,2269,8.211,2270,6.17]],["t/448",[5,6.234,16,2.882,22,0.859,74,1.018,84,2.859,110,3.561,137,1.413,138,0.878,162,2.258,268,2.393,364,2.06,478,3.217,889,2.882,1004,4.695,1713,3.453,1967,5.472,1989,5.706,1990,6.674,2211,5.779,2212,7.43,2213,7.43,2217,7.843,2219,6.19,2220,6.19,2222,7.778,2227,6.19,2228,6.19,2229,6.19]],["t/450",[84,2.452,110,4.342,268,2.269,1004,5.723,1111,5.273,1989,5.409,1990,7.295,1991,6.123,2212,6.372,2213,6.372,2217,7.6,2221,7.546,2222,6.67,2230,7.546]],["t/452",[22,0.713,74,1.268,96,4.664,115,3.904,137,1.368,162,3.325,478,4.007,490,5.035,889,3.59,1584,6.51,1856,7.197,1996,7.709,1997,7.197]],["t/454",[1,2.199,22,0.577,30,3.444,55,2.668,56,3.2,60,2.492,63,1.781,66,4.397,67,1.375,68,2.017,73,3.05,74,1.026,84,2.027,96,4.841,116,2.468,123,2.719,125,2.89,128,0.95,137,1.107,138,0.614,162,2.276,163,2.222,165,1.43,166,2.533,170,5.268,206,1.174,213,1.594,268,1.302,291,3.751,297,1.994,364,1.442,451,4.24,478,2.251,480,5.063,483,4.163,485,2.873,516,3.829,537,2.89,615,2.621,619,3.658,622,2.772,686,2.751,753,3.285,772,3.515,775,3.515,785,2.89,889,2.905,895,1.682,945,2.453,1033,2.829,1055,3.829,1056,2.621,1297,6.239,1364,3.658,1488,3.515,1506,3.515,1507,4.044,1566,3.658,1710,5.825,1776,2.064,1798,3.829,1989,3.105,2000,4.044,2048,3.027,2139,4.331,2242,5.825,2271,6.868,2272,4.768,2273,6.868,2274,4.768,2275,4.768,2276,6.868,2277,4.768,2278,6.868,2279,4.768,2280,4.768,2281,4.044,2282,4.331,2283,4.331]],["t/456",[30,4.055,50,2.503,53,2.478,63,1.721,67,2.453,68,3.599,84,1.922,85,3.16,95,3.034,120,3.16,122,1.036,137,1.372,162,2.82,206,2.095,213,2.177,268,1.779,291,3.034,425,4.633,478,4.475,564,4.8,615,3.579,741,4.487,796,5.229,889,4.009,896,4.995,926,3.863,1056,3.579,1130,1.272,1179,6.527,1679,5.915,1892,5.523,1893,5.229,1913,5.915,1997,5.523,2028,5.523,2037,4.995,2048,4.134,2281,5.523,2282,5.915,2283,5.915,2284,5.523,2285,6.512,2286,6.512]],["t/458",[1,2.065,13,3.828,16,3.197,22,0.786,48,2.527,74,1.129,115,4.304,119,4.083,122,1.202,130,5.378,147,2.483,364,2.285,445,6.446,499,5.572,507,1.988,1071,5.208,1188,5.686,1194,4.485,1569,4.394,1770,6.41,2062,5.572,2232,6.41,2287,7.558,2288,7.558,2289,6.866]],["t/460",[1,1.932,3,1.592,6,2.64,13,3.881,22,0.797,23,4.215,28,2.685,29,2.411,34,1.479,47,1.691,48,2.365,55,2.781,58,1.991,63,1.815,66,2.481,68,2.102,74,0.743,83,2.056,84,2.088,92,2.775,95,3.297,96,2.732,115,3.254,123,2.833,136,2.518,146,1.368,147,1.633,158,4.174,167,1.491,178,1.902,181,1.288,195,1.892,197,0.79,206,1.224,214,1.837,224,2.557,268,1.358,434,3.64,445,5.676,461,2.518,464,6,469,1.592,507,1.307,528,2.102,542,3.081,544,2.781,608,2.598,660,3.236,674,3.536,769,3.991,821,2.732,852,4.034,931,3.663,961,2.732,1314,3.424,1357,3.812,1469,3.991,1493,4.215,1503,4.215,1547,4.515,1569,4.113,1618,4.215,1646,3.991,1710,4.215,1711,4.515,1749,3.325,1769,3.812,1771,3.424,1965,3.424,1990,3.424,2026,3.991,2055,3.812,2059,2.012,2062,3.663,2290,4.515,2291,3.991,2292,4.97,2293,4.97,2294,4.97,2295,4.215,2296,3.991,2297,4.97,2298,4.97,2299,4.97,2300,4.515]],["t/462",[80,5.219,84,2.542,95,4.012,115,3.961,178,1.988,364,2.603,606,4.909,859,2.829,961,4.733,1965,5.933,2301,7.822,2302,8.611]],["t/464",[22,0.586,34,2.647,80,5.936,84,2.059,120,3.385,122,1.109,165,2.092,179,1.774,183,2.923,197,1.109,204,3.055,391,5.351,456,1.491,458,2.854,469,2.849,483,4.228,490,4.139,507,1.835,555,4.542,859,2.923,961,3.834,1217,4.667,1369,5.916,1843,5.916,2303,6.975,2304,6.975,2305,6.975,2306,8.895,2307,8.895,2308,6.975,2309,6.975,2310,6.975,2311,6.975,2312,6.975,2313,6.975]],["t/466",[13,2.664,22,0.844,34,2.82,48,2.844,53,2.478,63,1.721,84,1.922,91,4.305,92,3.943,115,2.995,122,1.036,137,1.05,158,3.3,161,3.459,165,2.552,167,2.552,178,1.503,206,2.095,233,3.579,445,4.487,596,3.459,603,3.726,646,5.915,895,2.297,1357,4.995,1505,4.8,1965,4.487,2059,2.636,2063,2.83,2083,5.523,2090,5.229,2157,5.915,2291,5.229,2295,5.523,2314,6.512,2315,5.915,2316,5.523]],["t/468",[1,0.433,7,1.216,13,2.871,22,0.384,24,2.381,26,0.722,29,0.769,34,1.124,48,1.528,53,0.603,56,0.739,63,0.924,65,3.058,66,0.791,68,0.67,71,0.575,83,1.563,84,0.468,87,0.904,91,0.72,92,2.876,115,1.292,119,1.517,122,0.446,123,0.904,125,1.702,128,0.523,137,0.453,138,0.204,165,0.475,167,1.371,178,0.648,181,0.728,197,0.601,206,1.539,208,3.505,209,1.006,217,1.935,253,1.952,261,2.985,262,3.665,267,2.097,268,2.207,272,1.275,280,2.025,283,4.151,383,1.453,394,1.344,403,0.797,407,2.242,429,1.344,436,3.564,437,4.923,439,5.463,440,4.723,445,1.092,451,1.717,458,0.649,461,1.423,466,1.601,467,0.972,469,0.899,485,1.174,592,2.648,608,3.268,621,3.149,650,5.751,660,1.032,661,1.879,682,0.884,686,1.514,740,2.689,741,1.092,750,3.251,812,2.381,860,2.55,871,0.559,900,1.273,922,1.244,961,0.871,1037,1.273,1056,0.871,1206,0.961,1218,4.095,1237,1.061,1246,3.369,1291,0.748,1327,1.834,1505,2.07,1566,2.154,1569,0.922,1570,1.879,1694,1.344,1761,1.344,1763,5.679,1764,2.899,1765,4.151,1766,6.659,1767,5.679,1768,5.348,1769,2.154,1771,1.935,1843,1.344,1882,1.168,2023,1.44,2048,2.399,2055,5.109,2056,2.381,2059,1.137,2060,1.344,2063,0.791,2078,1.44,2081,1.344,2082,1.44,2083,1.344,2084,1.44,2085,1.44,2090,7.621,2099,6.05,2102,4.747,2105,1.344,2106,1.44,2113,2.381,2210,5.25,2281,2.381,2284,1.344,2296,3.035,2315,3.433,2316,1.344,2317,1.585,2318,1.585,2319,1.585,2320,1.44,2321,1.44,2322,1.585,2323,4.57,2324,1.585,2325,4.57,2326,1.585,2327,2.808,2328,1.585,2329,2.381,2330,2.808,2331,2.808,2332,2.55,2333,2.154,2334,3.433,2335,1.585,2336,3.433,2337,1.585,2338,3.433,2339,1.585,2340,4.57,2341,2.55,2342,1.585,2343,7.33,2344,4.57,2345,4.151,2346,5.779,2347,5.779,2348,4.57,2349,2.808,2350,1.585,2351,2.808,2352,2.55,2353,1.585,2354,1.585,2355,1.585,2356,1.585,2357,2.808,2358,3.779,2359,3.779,2360,3.779,2361,2.808,2362,1.585,2363,1.585,2364,1.585,2365,1.585,2366,3.433,2367,3.433,2368,3.433,2369,3.433,2370,3.433]],["t/470",[13,1.225,17,5.12,22,0.251,24,2.54,28,1.618,34,1.432,49,2.297,63,0.606,64,5.559,65,7.11,66,1.495,71,3.311,73,1.037,74,0.447,84,0.884,91,3.864,92,3.337,120,1.453,128,0.666,135,1.95,137,1.222,141,1.296,165,1.444,195,1.14,206,0.737,209,4.391,213,1.001,253,1.923,261,3.888,262,3.407,267,2.611,268,2.416,274,4.811,292,2.275,383,1.851,394,1.433,403,0.631,407,1.777,431,1.14,436,5.044,437,5.044,439,5.044,440,5.044,442,1.815,452,2.297,503,1.378,507,1.588,520,1.901,604,1.777,608,1.565,686,1.199,850,4.083,851,3.056,936,1.517,959,1.856,1056,1.646,1065,1.901,1070,2.72,1119,2.297,1315,2.131,1428,2.297,1488,5.098,1569,2.799,1570,2.004,1771,2.063,1882,2.207,2003,2.54,2025,4.373,2091,2.54,2115,2.54,2296,7.104,2366,8.036,2367,2.72,2368,8.036,2369,2.72,2370,8.036,2371,4.814,2372,8.507,2373,2.994,2374,2.994,2375,2.994,2376,4.814,2377,4.814,2378,2.994,2379,2.994,2380,2.994]],["t/472",[1,1.242,3,1.456,13,1.86,22,0.769,34,1.353,50,1.748,55,2.544,58,1.821,59,1.128,60,2.377,84,1.959,92,3.971,118,2.577,137,1.389,147,1.494,157,1.634,161,2.415,165,2.35,178,2.115,180,2.415,181,1.179,197,0.723,253,2.162,259,4.649,262,1.697,265,2.807,267,2.464,394,3.75,423,2.27,433,2.819,437,2.592,439,2.592,440,3.783,493,3.488,498,2.065,503,2.092,507,1.196,528,1.923,543,4.13,545,3.265,546,2.499,547,2.544,555,2.961,598,2.34,603,4.188,608,2.377,611,1.52,650,2.887,682,2.713,786,2.206,893,1.481,895,2.763,961,2.499,1068,3.488,1117,2.819,1147,1.881,1237,3.042,1357,3.488,1386,3.651,1502,3.856,1749,3.042,1866,4.13,2063,2.426,2064,5.627,2065,5.627,2217,3.488,2284,3.856,2381,3.856,2382,3.856,2383,4.13,2384,4.547,2385,4.547,2386,2.961,2387,4.547,2388,4.547,2389,4.547,2390,4.547,2391,6.635,2392,6.635,2393,4.547]],["t/474",[1,1.282,34,2.02,59,2.168,63,1.613,68,1.985,73,2.351,80,4.115,92,2.663,96,3.731,97,4.028,116,1.686,125,2.844,128,0.939,167,1.407,174,2.938,178,1.567,183,2.23,197,0.746,206,1.672,267,2.5,433,4.208,450,5.137,490,4.028,507,1.234,537,4.115,552,5.004,592,4.43,603,4.471,682,2.138,780,3.577,871,1.655,922,3.009,957,3.294,1056,2.579,1473,5.004,1570,3.139,1769,3.599,1771,3.233,2056,3.979,2059,2.748,2060,3.979,2062,3.459,2063,2.976,2064,5.757,2065,5.757,2066,5.757,2067,5.757,2068,5.757,2069,6.167,2070,5.757,2071,5.452,2072,5.757,2073,4.83,2074,5.757,2075,5.757,2076,6.167,2394,0.88,2395,4.692]],["t/476",[13,1.771,22,0.221,30,1.124,34,0.781,46,2.59,48,1.845,59,1.888,63,1.116,67,0.757,68,1.111,71,1.569,73,0.91,74,1.138,75,0.98,80,1.592,81,1.81,84,0.775,87,2.467,116,1.555,118,1.02,128,0.363,131,2.361,132,1.851,133,2.257,138,0.557,148,2.919,157,0.944,160,0.98,167,0.788,177,2.388,183,2.325,195,1,206,0.647,207,1,211,1.293,218,2.143,233,2.378,253,2.431,267,2.302,291,1.224,348,1.869,364,1.934,381,2.691,382,1.274,385,3.611,489,0.98,490,1.558,492,1.373,505,2.737,507,1.138,521,1.527,604,1.558,631,1.81,664,1.936,682,0.827,686,1.052,692,1.311,726,2.193,734,1.527,780,2.895,783,1.667,821,2.378,885,2.193,895,0.926,945,1.351,985,1.81,989,1.274,990,1.71,1058,1.936,1067,2.841,1147,1.086,1225,2.228,1291,1.24,1327,2.1,1490,1.667,1623,2.129,1775,2.839,1825,1.869,2059,1.063,2073,1.869,2320,2.386,2321,2.386,2381,2.228,2382,2.228,2396,2.626,2397,2.228,2398,2.626,2399,1.373,2400,1.373,2401,2.16,2402,2.626,2403,2.626,2404,1.373,2405,3.548,2406,1.373,2407,3.482,2408,2.626,2409,2.626,2410,1.373,2411,2.626,2412,1.373,2413,2.818,2414,1.373,2415,1.373,2416,5.426,2417,2.626,2418,1.373,2419,1.373,2420,2.262,2421,1.373,2422,2.262,2423,2.641,2424,2.626,2425,1.373,2426,1.373,2427,3.698,2428,1.373,2429,1.373,2430,1.373,2431,2.262,2432,1.373,2433,2.626,2434,2.626,2435,2.715,2436,2.626,2437,1.293,2438,1.373,2439,2.715,2440,4.327,2441,2.228,2442,2.626,2443,2.015,2444,2.626,2445,2.015,2446,2.015,2447,2.626,2448,2.626,2449,2.626,2450,2.626,2451,2.626,2452,2.626,2453,2.109,2454,2.626,2455,2.626,2456,2.228,2457,2.626,2458,2.228,2459,2.109,2460,2.626,2461,2.626,2462,2.228,2463,2.626,2464,2.228,2465,2.228,2466,2.228,2467,2.626,2468,2.626,2469,2.626,2470,2.626,2471,2.228,2472,3.67,2473,2.228,2474,2.228,2475,2.228,2476,2.228,2477,2.228,2478,2.626,2479,2.228,2480,4.327,2481,2.228,2482,2.386,2483,2.626,2484,2.626,2485,2.228,2486,2.228,2487,2.228,2488,3.67,2489,2.228,2490,4.327,2491,2.228]],["t/478",[22,0.815,26,2.064,34,2.387,63,1.622,66,4.006,158,4.066,175,5.093,181,2.515,193,4.863,214,2.965,244,4.262,458,3.283,593,6.154,756,5.224,893,2.614,923,7.288,1552,6.804,1618,6.804,1641,6.154,2492,8.023]],["t/480",[22,0.562,39,2.279,63,1.752,70,3.618,92,2.627,128,0.926,137,1.08,165,2.599,167,2.009,179,1.728,181,2.246,213,2.897,261,3.769,267,1.916,403,1.412,423,3.344,450,3.558,456,1.431,461,4.391,498,3.042,507,1.762,552,6.388,598,3.446,682,2.109,932,4.481,936,3.394,1084,5.378,1147,3.585,1174,5.955,1505,4.937,1570,4.481,2059,3.889,2394,1.256,2493,7.872,2494,3.973,2495,6.697]],["t/482",[22,0.526,48,3.11,54,2.622,63,2.002,74,0.937,92,3.255,122,0.997,128,0.867,137,1.011,167,1.88,179,1.855,181,2.151,206,2.606,213,2.096,267,1.793,268,1.712,403,1.321,406,4.319,423,3.13,450,3.33,451,2.847,456,1.34,461,4.205,503,4.279,507,1.649,652,3.225,682,1.974,848,5.316,902,5.316,961,3.445,1036,5.034,1041,4.808,1147,3.433,1174,3.886,1337,4.082,1749,4.194,2055,6.366,2059,3.359,2394,1.175,2494,3.719,2496,6.268,2497,6.268,2498,5.694]],["t/484",[1,2.333,22,0.55,48,2.189,58,3.42,68,2.77,93,4.327,137,1.377,147,2.151,167,2.561,179,1.895,181,1.697,193,3.969,213,2.189,225,4.827,267,1.873,268,2.333,403,1.38,423,3.269,434,3.369,450,3.478,456,1.399,481,4.659,489,2.444,507,1.723,603,3.74,682,2.062,789,4.827,806,4.381,895,2.309,1147,3.931,1190,4.827,1298,4.659,1951,5.948,2019,5.023,2040,5.948,2063,2.837,2394,1.228,2494,3.885,2499,6.548,2500,6.548,2501,6.548]],["t/486",[22,0.589,84,2.071,137,1.131,150,7.17,156,3.611,179,1.781,181,1.819,213,2.985,267,2.007,396,5.635,403,1.479,423,3.503,434,3.611,450,3.728,456,1.5,507,1.846,603,4.301,682,2.21,856,4.993,1079,4.835,1107,4.569,1140,5.635,1147,4.063,1472,5.635,1481,7.239,1543,5.173,2063,2.515,2394,1.316,2494,4.163,2502,6.374,2503,5.951,2504,5.951,2505,7.017]],["t/488",[1,1.74,8,4.39,9,4.887,22,0.535,39,2.167,101,3.632,104,5.199,128,0.881,137,1.027,141,2.757,145,3.703,179,1.673,181,1.651,197,1.585,213,2.804,267,1.822,280,2.823,403,1.768,423,3.181,434,3.278,450,3.384,456,1.362,493,4.887,507,1.676,603,4.656,677,4.887,682,2.007,705,5.612,745,4.044,766,3.858,852,3.632,1107,4.148,1147,3.879,1993,4.696,1995,5.116,2063,1.794,2394,1.194,2494,3.78,2503,5.403,2504,5.403,2506,5.787,2507,5.403,2508,5.787,2509,5.787]],["t/490",[1,1.75,8,5.8,9,4.913,22,0.538,39,2.179,101,3.652,104,3.971,128,0.886,137,1.033,141,2.772,145,3.724,179,1.679,181,1.66,197,1.588,213,2.814,267,1.832,280,2.839,403,1.35,423,3.198,434,3.296,450,3.403,456,1.369,493,4.913,507,1.685,603,4.663,677,4.913,682,2.017,705,5.632,745,4.066,766,3.872,852,3.652,1107,4.171,1147,3.889,1993,4.721,1995,5.144,2063,1.804,2394,1.201,2494,3.8,2503,5.432,2504,5.432,2507,5.432,2508,5.819,2509,5.819,2510,5.819]],["t/492",[22,0.485,34,2.337,59,1.433,71,2.095,74,0.863,83,2.389,137,1.439,163,2.691,164,3.293,168,6.58,174,3.4,179,1.998,181,1.497,213,1.931,267,1.652,403,1.217,423,2.884,433,5.938,434,4.593,450,3.068,451,3.568,452,7.348,456,1.234,495,4.43,507,1.519,537,4.761,598,2.972,682,1.819,766,2.657,793,4.257,895,2.77,1147,3.692,1164,5.247,1226,7.348,1293,5.247,1330,5.247,1518,5.247,2001,4.898,2048,3.667,2165,5.247,2383,5.247,2394,1.083,2494,3.427,2498,5.247,2511,5.776,2512,8.926,2513,5.776,2514,5.776,2515,5.247,2516,5.776,2517,5.776]],["t/494",[22,0.544,48,2.165,59,2.582,71,2.349,128,1.173,137,1.044,139,4.66,156,4.362,160,3.528,167,1.942,179,1.292,181,1.679,195,2.465,213,2.165,253,1.464,267,1.852,364,1.958,382,3.142,403,1.787,423,3.233,433,4.014,450,3.44,456,1.384,465,4.607,507,1.704,592,3.282,599,3.099,654,3.842,682,2.67,780,4.259,806,4.333,937,3.559,1061,4.333,1147,3.91,1152,4.333,1323,4.111,2394,1.214,2494,3.842,2518,7.702]],["t/496",[1,1.976,22,0.607,30,3.094,39,3.097,58,2.897,124,3.722,128,1.001,178,1.67,179,1.443,213,2.418,364,2.187,381,2.418,431,2.753,434,3.722,456,1.546,528,3.059,871,2.551,895,2.551,922,4.034,926,4.291,957,5.072,1117,4.484,1147,2.992,1174,5.642,1175,6.982,1312,5.548,1364,5.548,1386,5.808,2494,4.291,2519,7.233,2520,7.233]],["t/498",[22,0.764,39,2.461,47,2.461,58,3.646,124,3.722,128,1.259,139,3.975,178,2.3,179,1.443,181,1.875,193,4.384,213,3.043,364,2.187,434,5.125,466,4.124,528,3.059,922,4.034,957,5.227,1722,4.84,1965,4.984,2394,1.356,2494,4.291,2521,6.134,2522,6.571,2523,6.571]],["t/500",[22,0.529,32,2.163,39,2.833,111,4.646,137,1.016,156,3.243,179,1.661,181,1.634,193,3.82,206,2.051,213,2.784,267,1.803,268,2.548,403,1.328,423,3.147,434,4.285,450,3.348,451,3.783,456,1.78,507,1.658,552,6.139,652,3.243,682,1.985,854,3.404,898,3.243,1117,3.907,1147,3.858,1190,4.646,1359,4.834,1401,5.725,1543,4.646,1713,3.194,1722,4.217,2071,5.061,2181,5.725,2246,8.473,2394,1.182,2494,3.739,2507,5.345,2524,7.565,2525,9.327,2526,6.302,2527,6.302,2528,6.302,2529,6.302]],["t/502",[63,1.962,78,6.804,92,3.147,165,2.406,181,2.08,213,2.682,268,2.191,408,7.443,493,6.154,503,3.691,603,3.513,1152,5.368,1722,5.368,2063,2.26,2381,6.804,2382,6.804,2394,1.504,2494,4.76,2530,8.023,2531,8.023]],["t/504",[22,0.524,32,2.14,47,2.121,73,2.864,84,1.841,91,4.214,96,3.427,97,6.27,137,1.005,141,2.699,158,3.16,163,4.324,178,2.281,179,1.244,181,1.616,183,2.717,206,2.285,213,2.764,237,3.959,267,1.784,403,1.314,423,3.113,450,3.312,456,1.333,507,1.64,537,3.779,562,3.699,592,3.16,598,3.208,608,3.259,650,3.959,682,1.964,687,4.172,1101,5.007,1147,3.838,1202,5.288,1319,5.288,1342,4.436,1351,5.288,1359,4.783,2012,5.664,2394,1.169,2494,3.699,2532,6.235,2533,6.235]],["t/506",[1,2.153,22,0.487,34,3.08,56,2.705,58,3.157,59,2.739,63,1.174,74,0.867,84,1.713,128,1.09,138,0.748,141,2.512,158,2.941,160,2.166,165,1.741,178,1.34,181,1.504,206,2.204,213,1.94,217,3.999,261,3.092,267,2.56,268,1.585,478,2.741,503,2.67,565,5.43,611,2.635,689,4.676,780,4.518,893,1.891,895,2.047,1190,4.278,1218,2.941,1266,6.684,1368,4.661,2394,1.088,2397,6.684,2494,3.444,2534,5.804,2535,5.273,2536,5.273,2537,5.804]],["t/508",[1,2.191,13,3.97,22,0.674,26,2.064,74,1.45,130,5.708,178,1.852,393,3.691,445,6.686,599,3.84,893,2.614,1173,2.804,1188,5.43,2289,7.288,2295,6.804,2538,6.443,2539,8.023,2540,8.023]],["t/510",[3,1.715,22,0.45,26,1.378,47,1.822,58,2.987,119,2.893,128,0.741,129,4.484,136,2.713,137,1.383,141,2.318,157,1.924,167,2.236,178,1.236,181,1.933,184,2.318,197,1.186,224,2.755,250,2.713,253,2.62,254,2.943,255,3.177,256,2.996,257,2.943,262,1.998,265,2.265,381,2.868,403,1.129,437,3.053,439,3.053,451,3.387,469,1.715,485,2.24,871,3.272,922,4.476,936,2.713,957,5.027,1175,4.107,1191,4.864,1192,4.864,1193,4.864,1277,4.107,1409,4.3,1647,3.947,2081,4.541,2521,4.541,2541,5.355,2542,5.355,2543,5.355]],["t/512",[22,0.783,26,1.932,55,4.203,63,1.519,96,4.128,116,2.698,118,2.916,141,3.25,144,2.578,145,4.366,146,2.067,147,2.468,167,2.253,173,2.578,381,3.115,498,3.411,876,4.456,922,4.695,937,4.128,957,5.285,996,4.552,1177,6.822,1178,6.031]],["t/514",[1,2.275,30,4.695,57,3.348,58,2.524,71,3.02,74,0.942,76,2.793,83,3.445,113,3.907,119,3.404,122,1.002,147,2.071,165,1.89,179,1.257,206,2.051,297,2.636,431,2.399,433,3.907,521,3.664,528,2.666,635,2.76,658,3.739,741,4.342,766,4.291,806,4.217,814,5.061,887,3.664,926,3.739,1107,4.104,1312,7.915,1776,4.295,2048,5.287,2544,6.302,2545,6.302,2546,7.063,2547,6.302,2548,5.725,2549,6.139,2550,5.061]],["t/516",[1,2.42,6,3.024,22,0.8,26,1.464,30,2.435,39,1.936,47,1.936,58,3.115,59,1.412,68,2.407,77,3.245,101,3.245,116,2.045,118,2.21,128,1.076,161,3.024,173,1.954,225,4.196,407,3.377,416,4.571,461,4.489,572,4.714,635,3.406,644,4.05,660,3.706,692,4.423,741,3.922,745,3.613,766,2.618,801,3.706,817,3.245,898,2.929,934,4.024,1117,3.528,1190,4.196,1337,3.706,1368,4.571,1411,4.366,1412,4.571,1506,4.196,1638,5.965,1850,4.827,1990,3.922,2048,5.624,2093,5.171,2147,8.047,2291,4.571,2332,7.065,2551,5.692,2552,5.692,2553,5.692,2554,5.692,2555,4.827,2556,5.692,2557,5.692,2558,5.692,2559,5.692,2560,5.692,2561,5.692,2562,5.692,2563,5.692]],["t/518",[22,0.607,30,3.094,41,5.332,57,4.835,93,3.665,94,5.332,96,3.975,113,4.484,118,2.809,128,1.001,138,0.932,147,2.376,165,2.73,167,2.169,173,2.483,206,1.781,249,5.808,403,1.525,407,4.291,507,1.903,635,3.167,745,4.592,813,5.332,817,4.124,1041,5.548,1079,4.984,1312,6.982,1729,6.134,2048,5.778,2177,5.548,2548,8.268,2564,7.233,2565,6.571]],["t/520",[30,3.456,34,2.403,57,5.176,93,4.937,261,3.169,262,3.015,433,5.008,436,4.606,437,4.606,439,4.606,440,4.606,442,4.896,451,3.669,2333,6.197,2549,5.955,2566,7.338,2567,7.338,2568,7.338,2569,7.338]],["t/522",[34,1.927,57,3.44,93,3.282,116,2.327,165,2.835,206,1.595,258,4.967,260,4.34,261,2.54,262,3.743,264,4.217,291,3.018,292,2.441,436,3.692,437,3.692,439,3.692,440,3.692,442,3.925,511,4.774,516,5.2,601,6.032,766,2.979,836,5.492,893,2.11,959,4.014,1477,5.2,1569,3.765,1713,4.296,2048,6.001,2333,4.967,2546,7.19,2549,6.968,2570,5.883,2571,5.883,2572,5.883,2573,5.883,2574,7.19,2575,5.883,2576,5.883,2577,5.883,2578,5.883]],["t/524",[1,1.85,3,2.796,22,0.569,25,4.668,30,2.898,41,4.994,113,4.2,118,2.631,147,2.226,165,2.897,173,2.325,206,1.668,260,4.181,261,2.658,268,2.385,403,1.428,485,3.651,507,1.782,588,4.301,601,6.873,635,2.967,687,4.533,850,5.745,959,4.2,1082,4.533,1569,5.616,2177,5.196,2549,4.994,2550,8.479,2577,6.154,2578,6.154,2579,6.774,2580,6.774,2581,6.774]],["t/526",[30,3.529,262,3.078,433,5.113,436,4.703,437,4.703,439,4.703,440,4.703,442,4.999,451,3.747,2333,6.327,2549,6.08,2550,7.923,2566,7.493,2567,7.493,2568,7.493,2569,7.493,2574,6.995]],["t/528",[34,2.039,116,2.462,165,2.055,206,1.688,258,5.257,260,3.807,261,2.689,262,3.824,264,4.463,291,3.194,292,2.583,436,3.907,437,3.907,439,3.907,440,3.907,442,4.154,511,5.052,516,5.504,766,3.153,836,5.812,893,2.233,1477,5.504,1713,4.457,2048,6.166,2333,5.257,2546,7.459,2549,7.16,2550,5.504,2570,6.226,2571,6.226,2572,6.226,2573,6.226,2574,8.237,2575,6.226,2576,6.226]],["t/531",[1,2.065,63,1.528,72,6.26,74,1.129,119,5.054,128,1.294,158,4.741,175,4.799,242,6.11,249,6.07,268,2.065,644,5.378,652,3.889,794,6.866,857,6.866,876,4.485,1258,4.686,1320,6.41,1411,5.798,1412,6.07,2582,7.558,2583,7.558]],["t/533",[3,2.206,16,2.914,22,0.843,26,1.232,63,0.968,64,5.952,67,1.38,74,1.029,76,3.053,84,1.413,128,1.221,137,1.301,138,0.617,147,1.573,157,1.72,160,3.489,169,2.231,178,1.105,195,1.822,204,2.097,213,1.6,224,2.463,225,3.529,235,3.845,242,4.435,253,1.082,362,2.73,364,1.448,383,3.392,420,4.373,426,5.602,442,4.89,456,1.023,458,1.959,468,1.918,469,1.533,485,2.002,520,4.373,579,2.39,613,3.039,635,2.097,686,1.918,742,3.118,766,3.711,817,3.927,876,2.841,889,2.914,901,2.73,917,4.06,926,2.841,952,3.203,954,3.039,1080,3.845,1107,3.118,1118,3.529,1121,3.039,1170,3.845,1306,3.672,1362,5.532,1504,3.672,1505,3.529,1638,3.672,1709,4.06,1771,3.299,2115,4.06,2116,4.349,2117,4.349,2584,4.788,2585,4.788,2586,4.788,2587,4.349,2588,4.788,2589,4.788,2590,4.788,2591,8.068,2592,4.788,2593,4.788]],["t/536",[1,1.9,3,1.193,22,0.821,26,2.284,34,1.108,47,1.267,63,1.977,72,2.493,73,3.075,74,1.425,82,2.992,84,1.1,92,2.242,95,3.241,117,2.567,122,0.909,124,3.578,128,0.962,138,0.896,143,1.833,144,1.962,162,1.235,163,1.736,173,1.962,175,2.365,178,1.606,196,2.309,213,1.245,242,6.051,249,2.992,261,1.461,268,2.525,279,2.258,383,3.234,406,3.938,410,2.746,430,2.746,431,1.418,434,1.917,451,1.692,458,1.524,490,2.21,492,1.947,498,1.692,507,1.504,528,1.576,584,2.567,604,3.391,613,2.365,621,2.567,690,3.159,729,2.567,753,6.369,757,2.309,765,3.159,783,2.365,817,2.124,842,4.848,887,3.323,888,2.746,932,2.493,943,2.426,945,1.917,1053,2.858,1055,2.992,1078,2.493,1208,1.808,1258,2.309,1314,2.567,1364,2.858,1371,2.858,1409,2.992,1468,2.858,1509,3.384,1568,3.159,1569,2.166,1680,3.159,1722,2.493,1749,2.493,1834,6.572,2019,2.858,2241,3.159,2538,2.992,2594,6.317,2595,3.725,2596,3.725,2597,3.725,2598,3.725,2599,3.725,2600,3.725,2601,3.725,2602,3.384,2603,3.384]],["t/538",[3,2.938,26,1.884,59,1.817,63,2.025,68,3.097,74,1.094,84,2.162,122,1.165,143,3.604,146,2.016,163,3.412,178,1.691,242,5.505,260,3.169,268,2,431,3.491,465,5.21,596,3.89,601,5.21,780,2.996,1504,5.617,1569,5.333,1684,6.652,1764,5.617,2329,7.779,2604,7.323,2605,7.323,2606,7.323]],["t/540",[22,0.495,26,1.204,63,1.696,66,2.337,67,1.953,74,1.012,83,1.936,110,1.511,123,1.649,124,1.488,126,3.945,137,1.352,138,1.221,141,1.251,156,2.408,161,1.536,162,2.64,164,1.649,165,2.232,178,0.668,179,0.933,213,0.967,224,1.488,242,5.912,244,3.6,253,1.532,260,2.552,261,2.313,262,1.747,268,2.176,279,1.753,280,2.613,291,2.747,297,1.209,381,1.565,383,2.605,390,1.753,391,2.218,393,2.153,403,0.609,408,2.218,427,1.618,431,1.1,436,3.362,437,3.362,439,3.362,440,2.668,450,1.536,456,0.618,483,3.574,498,1.313,565,4.669,579,2.337,584,3.225,592,2.988,596,1.536,598,1.488,604,4.02,606,2.668,615,1.589,641,2.322,656,1.992,658,1.715,686,1.158,689,1.715,733,5,745,1.836,786,1.403,797,3.758,801,1.883,831,2.131,840,3.225,919,1.992,959,2.901,990,3.048,1111,1.836,1150,2.971,1186,2.452,1194,1.715,1197,2.627,1208,2.271,1233,3.59,1300,2.057,1305,2.322,1497,2.627,1501,2.452,1506,2.131,1573,4.995,1645,3.969,1722,1.935,1795,2.627,1834,7.578,2042,2.627,2168,4.252,2170,4.252,2202,2.627,2241,3.969,2594,5.356,2607,2.891,2608,6.776,2609,5.896,2610,5.896,2611,4.68,2612,5.896,2613,4.68,2614,2.891,2615,2.891,2616,2.891,2617,2.891,2618,2.891,2619,2.891,2620,2.627,2621,2.891]],["t/542",[22,0.89,39,2.332,59,1.7,68,2.899,71,2.485,74,1.024,85,3.325,91,3.113,97,4.066,116,3.49,122,1.545,128,0.948,134,4.722,137,1.105,138,0.883,184,4.204,242,3.767,245,5.504,297,2.866,394,3.28,615,3.767,650,4.351,766,3.153,854,3.702,934,3.113,937,3.767,938,5.812,1021,6.258,1101,5.504,1128,5.504,1445,7.99,1716,5.257,1810,7.063,2091,5.812]],["t/544",[3,3.134,6,4.321,22,0.683,128,1.125,136,4.122,137,1.311,138,1.26,156,4.185,158,4.122,162,2.696,184,3.52,242,5.767,248,3.947,383,3.127,458,3.328,1565,5.996]],["t/546",[1,2.271,3,1.619,22,0.601,26,1.301,34,1.504,39,2.436,50,1.943,53,1.924,54,2.995,59,1.254,63,1.022,72,3.383,92,1.983,120,2.453,128,0.699,144,1.735,151,3.878,163,2.356,173,1.735,175,4.546,184,2.188,211,2.488,213,1.69,237,4.546,242,5.247,244,5.072,268,1.381,297,2.114,383,3.811,403,1.066,490,2.999,498,2.296,528,2.138,551,3.726,567,2.214,584,3.483,596,2.686,598,3.685,613,3.209,652,2.601,658,2.999,740,6.435,745,3.209,757,3.134,812,4.287,893,1.647,895,1.783,919,5.73,1053,3.878,1314,3.483,1371,3.878,1409,4.06,1543,5.279,1568,4.287,1569,2.939,1573,7.677,1793,4.287,1803,4.592,1834,3.483,1907,4.592,2026,4.06,2062,5.279,2515,4.592,2587,4.592,2602,6.505,2603,4.592,2622,7.161,2623,5.055,2624,5.055,2625,5.055,2626,5.055]],["t/548",[3,3.299,22,0.407,26,1.247,47,1.649,50,2.671,56,2.259,73,1.679,100,4.82,122,1.494,128,1.228,129,2.533,146,1.334,178,2.169,179,1.386,180,2.575,181,1.256,184,4.458,192,3.155,193,2.938,194,3.892,197,1.292,242,4.877,244,2.575,247,2.385,250,4.117,253,1.836,254,4.465,255,4.82,256,4.546,257,4.465,383,3.123,393,2.23,403,1.022,456,1.036,458,1.983,566,3.448,579,2.42,587,5.988,611,2.323,740,3.448,785,2.938,831,5.123,919,3.34,999,3.573,1108,4.111,1147,2.875,1570,3.243,1573,5.123,1695,4.111,1696,3.892,1697,4.403,1709,4.111,1771,3.34,2207,4.403,2627,8.124,2628,8.124,2629,4.847,2630,4.847]],["t/550",[6,5.744,22,0.908,158,4.038,242,4.38,244,4.233,383,3.063,498,3.62,533,6.466,705,5.332,742,5.189,943,5.189,1010,3.226,1021,5.669,1565,7.123,1716,6.112]],["t/552",[3,2.302,22,0.903,59,2.249,137,1.462,158,5.285,162,3.456,180,4.817,184,3.111,259,6.188,265,4.813,485,3.007,545,4.462,637,6.247]],["t/555",[1,2.177,3,1.89,13,3.838,22,0.848,48,2.665,53,1.479,58,2.364,63,2.002,66,3.563,72,2.6,74,1.281,77,2.215,84,1.147,115,2.715,118,1.509,120,1.885,122,0.618,128,0.817,146,1.625,147,1.277,158,1.969,165,1.165,166,2.064,173,1.334,178,1.363,180,2.064,181,1.53,213,1.299,244,3.136,391,2.98,445,6.821,458,1.59,467,1.346,521,2.259,528,1.643,533,2.6,537,2.355,544,2.174,566,2.764,567,1.702,587,2.864,611,1.973,635,1.702,652,1.999,656,2.677,729,2.677,768,4.351,769,3.12,776,3.295,780,1.59,893,2.597,898,1.999,944,2.409,961,2.136,1061,2.6,1130,0.759,1188,5.249,1283,3.295,1355,3.53,1356,3.53,1371,4.528,1493,3.295,1504,2.98,1554,3.295,1641,2.98,1646,3.12,1713,4.574,1739,3.295,1769,2.98,1770,5.006,1776,2.555,1779,2.98,1965,2.677,2026,3.12,2062,6.319,2063,2.414,2134,3.53,2177,2.98,2232,3.295,2290,3.53,2291,3.12,2394,1.107,2620,6.484,2631,3.885,2632,3.885,2633,3.885,2634,3.885,2635,3.885,2636,3.885,2637,3.885,2638,3.885,2639,3.885,2640,3.885,2641,3.885,2642,3.885,2643,3.885,2644,3.885]],["t/559",[32,2.831,63,1.668,67,2.378,122,1.312,138,1.063,146,2.27,197,1.312,268,2.253,403,1.739,507,2.17,1010,3.339,1130,1.611,1239,4.795,1718,4.616,1776,3.57,2394,1.546,2645,3.203,2646,3.7]],["t/561",[32,2.831,63,1.668,67,2.378,122,1.312,138,1.063,146,2.27,197,1.312,268,2.253,403,1.739,507,2.17,1010,3.339,1130,1.611,1776,3.57,2394,1.546,2645,3.203,2646,3.7,2647,4.795,2648,4.894]],["t/563",[32,2.812,63,1.987,67,2.361,122,1.303,138,1.055,146,2.254,197,1.303,268,2.237,403,1.726,507,2.155,1010,3.316,1130,1.6,1239,4.762,1718,4.583,1776,3.545,2394,1.536,2645,3.181,2649,5.48]],["t/565",[32,2.812,63,1.987,67,2.361,122,1.303,138,1.055,146,2.254,197,1.303,268,2.237,403,1.726,507,2.155,1010,3.316,1130,1.6,1776,3.545,2394,1.536,2645,3.181,2647,4.762,2648,4.86,2649,5.48]],["t/567",[32,2.831,63,1.668,67,2.378,122,1.312,138,1.063,146,2.27,197,1.312,268,2.253,403,1.739,507,2.17,1010,3.339,1130,1.611,1239,4.795,1718,4.616,1776,3.57,2394,1.546,2645,3.203,2650,6.624]],["t/569",[32,2.831,63,1.668,67,2.378,122,1.312,138,1.063,146,2.27,197,1.312,268,2.253,403,1.739,507,2.17,1010,3.339,1130,1.611,1776,3.57,2394,1.546,2645,3.203,2647,4.795,2648,4.894,2650,6.624]],["t/571",[32,2.851,63,1.68,67,2.395,122,1.321,138,1.07,146,2.286,197,1.321,268,2.269,403,1.751,507,2.185,1010,3.363,1130,1.623,1239,4.829,1718,4.648,1776,3.595,2394,1.557,2651,5.558]],["t/573",[32,2.851,63,1.68,67,2.395,122,1.321,138,1.07,146,2.286,197,1.321,268,2.269,403,1.751,507,2.185,1010,3.363,1130,1.623,1776,3.595,2394,1.557,2647,4.829,2648,4.928,2651,5.558]],["t/575",[32,2.851,63,1.68,67,2.395,122,1.321,138,1.07,146,2.286,197,1.321,268,2.269,403,1.751,507,2.185,1010,3.363,1130,1.623,1239,4.829,1718,4.648,1776,3.595,2394,1.557,2652,7.546]],["t/577",[32,2.851,63,1.68,67,2.395,122,1.321,138,1.07,146,2.286,197,1.321,268,2.269,403,1.751,507,2.185,1010,3.363,1130,1.623,1776,3.595,2394,1.557,2647,4.829,2648,4.928,2652,7.546]],["t/579",[22,0.515,32,1.052,33,1.996,46,1.796,48,2.343,73,1.062,74,0.458,84,1.448,110,3.663,122,1.115,128,0.424,133,1.73,137,0.494,138,0.395,146,1.35,148,2.966,179,0.611,181,1.589,184,2.123,197,1.419,213,1.025,253,2.466,267,0.877,272,1.392,280,2.174,289,2.351,364,2.782,379,1.326,381,1.64,390,1.858,394,2.347,403,0.646,423,1.53,424,3.679,427,1.715,456,0.655,466,1.747,507,0.806,599,1.467,600,1.885,602,1.885,631,2.051,636,3.638,682,0.965,736,1.796,766,2.821,767,1.996,786,1.487,827,2.745,892,2.564,898,2.524,912,1.656,960,1.487,968,1.656,1067,3.33,1087,3.041,1097,1.714,1130,0.958,1144,5.07,1147,1.268,1173,1.071,1213,1.9,1215,1.9,1218,2.486,1323,1.946,1718,1.715,2063,1.381,2079,1.996,2386,4.992,2394,0.575,2413,3.194,2653,2.259,2654,2.784,2655,3.282,2656,2.051,2657,2.051,2658,3.282,2659,6.569,2660,2.051,2661,2.051,2662,1.944,2663,1.9,2664,1.9,2665,4.103,2666,1.553,2667,2.051,2668,1.215,2669,1.228,2670,3.282,2671,4.689,2672,5.746,2673,3.282,2674,3.282,2675,3.282,2676,3.282,2677,3.282,2678,3.282,2679,3.282,2680,3.282,2681,2.051,2682,3.282,2683,2.051,2684,1.715,2685,1.715]],["t/581",[32,2.578,122,1.194,137,1.211,138,0.968,146,2.565,181,1.947,253,1.698,289,5.761,364,3.203,394,4.459,403,1.583,423,3.75,424,2.649,466,4.282,507,1.976,766,4.661,767,4.89,1130,1.467,1147,3.107,1776,3.25,2394,1.408,2647,4.366,2653,5.536,2654,6.822,2686,7.51]],["t/583",[32,2.851,63,1.68,67,2.395,122,1.321,138,1.07,146,2.286,197,1.321,268,2.269,403,1.751,507,2.185,1010,3.363,1130,1.623,1238,6.372,1718,4.648,1776,3.595,2394,1.557,2687,6.67]],["t/585",[32,2.514,63,1.481,67,2.111,122,1.165,138,0.943,146,2.016,181,1.898,197,1.165,268,2,379,3.97,403,1.544,456,1.565,507,1.927,827,4.098,1010,2.964,1097,2.559,1130,1.792,1173,2.559,1713,3.711,2063,2.062,2394,1.373,2647,4.257,2648,6.229,2666,3.711,2684,4.098,2685,4.098,2687,7.366,2688,7.323,2689,5.046,2690,5.21]],["t/587",[32,2.453,63,1.445,67,2.06,122,1.136,138,0.92,146,1.967,173,2.453,181,1.852,197,1.136,268,1.952,379,3.909,403,1.506,456,1.527,507,1.88,608,3.735,827,3.998,945,3.676,1010,2.892,1097,2.497,1130,1.764,1173,3.157,1239,5.757,1713,3.621,1718,3.998,1749,6.043,2063,2.012,2394,1.34,2666,3.621,2684,3.998,2689,4.923,2691,8.205,2692,6.491,2693,6.491]],["t/589",[32,2.53,63,1.49,67,2.124,122,1.172,138,0.949,146,2.028,181,1.91,195,2.805,197,1.172,268,2.013,379,3.986,403,1.553,456,1.575,507,1.939,827,4.124,945,3.792,1010,2.983,1097,2.575,1130,1.799,1173,2.575,1713,3.734,2063,2.075,2394,1.382,2647,4.284,2648,5.96,2666,3.734,2684,4.124,2689,5.078,2690,5.243,2691,8.365]],["t/591",[32,2.453,63,1.445,67,2.06,122,1.136,138,0.92,146,1.967,173,2.453,181,1.852,197,1.136,268,1.952,379,3.909,403,1.506,456,1.527,507,1.88,608,3.735,827,3.998,1010,2.892,1097,2.497,1130,1.764,1173,3.157,1239,5.757,1713,3.621,1718,3.998,1749,6.043,2063,2.012,2394,1.34,2666,3.621,2684,3.998,2689,4.923,2692,6.491,2693,6.491,2694,6.491,2695,9.032]],["t/593",[32,2.611,63,1.538,67,2.193,122,1.21,138,0.98,146,2.094,181,1.972,197,1.21,268,2.078,379,3.293,403,1.603,456,1.626,507,2.001,1010,3.08,1057,5.608,1097,2.659,1130,1.835,1173,2.659,2063,2.143,2394,1.426,2647,4.423,2648,6.314,2666,3.855,2685,4.257,2690,5.413,2694,6.911]],["t/595",[32,1.926,63,1.134,67,1.617,122,0.892,138,0.723,146,1.544,181,1.454,195,2.135,197,0.892,253,1.268,268,1.532,379,2.428,403,1.183,456,1.199,507,1.476,1010,2.271,1057,4.136,1097,1.961,1130,1.504,1173,1.961,2063,1.58,2133,4.758,2394,1.052,2647,3.262,2648,7.128,2666,2.843,2690,3.992,2696,4.758,2697,5.61,2698,5.61]],["t/597",[32,2.735,63,1.611,67,2.297,122,1.267,138,1.027,146,2.193,197,1.267,268,2.177,379,3.449,403,1.68,467,2.76,507,2.096,840,5.491,1010,3.226,1130,1.557,1239,4.633,1718,4.459,2063,2.244,2394,1.494,2666,4.038,2696,6.758,2699,7.968,2700,7.968]],["t/599",[32,2.735,63,1.611,67,2.297,122,1.267,138,1.027,146,2.193,197,1.267,268,2.177,379,3.449,403,1.68,467,2.76,507,2.096,840,5.491,1010,3.226,1130,1.557,1238,6.112,1718,4.459,2063,2.244,2394,1.494,2666,4.038,2696,6.758,2701,7.968,2702,7.968]],["t/602",[22,0.611,63,1.472,67,2.098,122,1.157,137,1.173,138,0.938,179,1.451,197,1.157,203,2.412,206,1.792,253,2.258,267,2.082,424,3.223,467,2.521,507,1.915,600,2.798,602,2.798,611,2.433,631,3.044,682,2.292,736,2.664,859,2.391,895,2.567,1130,1.422,1623,4.496,2063,2.05,2394,1.364,2401,3.634,2645,2.826,2646,3.265,2662,2.885,2668,2.885,2669,2.915]],["t/604",[26,1,35,3.12,63,0.786,67,1.12,85,2.864,137,0.626,138,0.501,147,1.277,160,2.203,178,0.897,181,1.007,195,1.479,197,0.939,203,1.288,206,0.957,214,3.467,253,2.319,261,3.68,272,4.261,280,4.157,290,5.685,379,1.682,382,1.885,389,2.864,424,2.517,456,0.83,492,5.174,520,5.955,610,7.195,611,1.299,615,2.136,631,2.469,801,2.53,859,1.277,895,1.37,934,1.765,960,1.885,1097,1.358,1130,1.153,1173,1.358,1456,2.764,2063,1.094,2394,0.728,2645,1.509,2646,1.743,2653,2.864,2703,3.295,2704,2.864,2705,3.12,2706,3.12,2707,3.12,2708,3.12,2709,7.761,2710,3.12,2711,3.12,2712,3.12,2713,6.401,2714,7.533,2715,7.533,2716,7.533,2717,7.533,2718,3.12,2719,3.12,2720,3.12,2721,3.12,2722,3.12,2723,3.12,2724,3.12,2725,3.12,2726,4.74,2727,3.12,2728,3.12,2729,3.12,2730,3.12,2731,3.12,2732,3.12]],["t/606",[63,0.788,67,1.124,85,2.871,137,0.629,138,0.502,167,2.145,181,1.01,195,2.252,197,0.62,203,1.292,206,0.96,214,3.471,253,2.353,261,3.684,272,4.266,280,4.162,290,5.692,379,1.687,389,2.874,424,2.522,456,0.833,461,3.624,492,5.179,520,5.962,610,7.204,611,1.303,615,2.143,895,1.375,934,1.771,960,1.892,1097,1.362,1130,1.156,1173,1.362,1456,2.774,2059,2.895,2063,1.098,2394,0.731,2645,1.514,2646,1.749,2653,2.874,2704,2.874,2705,3.131,2706,3.131,2707,3.131,2708,3.131,2709,7.769,2710,3.131,2711,3.131,2712,3.131,2713,6.412,2714,7.541,2715,7.541,2716,7.541,2717,7.541,2718,3.131,2719,3.131,2720,3.131,2721,3.131,2722,3.131,2723,3.131,2724,3.131,2725,3.131,2726,4.752,2727,3.131,2728,3.131,2729,3.131,2730,3.131,2731,3.131,2732,3.131,2733,3.898]],["t/608",[63,1.668,67,2.378,137,1.33,138,1.063,176,5.236,183,2.71,197,1.312,203,2.733,206,2.031,611,2.757,859,2.71,895,2.909,934,3.747,1130,1.611,1776,3.57,2394,1.546,2645,3.203,2646,3.7]],["t/610",[1,0.911,13,1.364,22,0.44,26,0.858,30,1.427,46,2.373,48,1.115,54,1.395,59,1.982,63,0.674,67,0.961,71,1.902,74,0.498,75,2.982,122,0.53,131,1.427,132,2.243,133,1.85,137,0.538,138,0.676,147,1.096,148,3.579,167,1.573,174,1.443,177,2.805,179,1.046,181,0.864,183,3.242,195,1.996,197,1.031,203,1.105,206,0.821,207,1.269,214,1.232,218,1.295,253,1.806,267,2.426,292,1.257,297,1.395,364,2.222,381,2.967,385,3.297,424,1.85,456,0.713,489,1.244,505,1.427,507,0.877,562,1.978,600,1.282,602,1.282,611,1.115,631,2.193,663,1.618,682,2.041,726,2.657,736,1.221,780,2.652,859,1.096,871,1.176,885,2.657,895,1.85,989,2.544,1067,2.742,1097,1.165,1098,1.641,1130,1.024,1173,1.165,1207,1.665,1208,2.544,1249,1.716,1291,1.574,1327,2.544,1483,1.534,1623,1.641,1775,3.335,2059,1.35,2063,0.939,2394,0.625,2399,1.743,2400,1.743,2401,1.665,2404,1.743,2405,1.554,2406,1.743,2407,3.19,2410,1.743,2412,1.743,2414,1.743,2415,1.743,2418,1.743,2419,1.743,2420,2.741,2421,1.743,2422,2.741,2423,1.596,2425,1.743,2426,1.743,2427,4.176,2428,1.743,2429,1.743,2430,1.743,2431,2.741,2432,1.743,2435,2.581,2437,1.641,2438,1.743,2439,2.581,2645,1.295,2646,1.496,2662,1.322,2668,1.322,2669,1.336,2734,3.334,2735,3.334,2736,1.574,2737,1.618,2738,1.574,2739,1.574,2740,1.574,2741,1.574,2742,1.574,2743,1.574,2744,1.574,2745,1.618,2746,1.574,2747,1.574,2748,1.771,2749,1.771,2750,1.771,2751,1.771,2752,1.771,2753,1.771,2754,1.665,2755,1.771,2756,1.771,2757,1.771]],["t/612",[1,0.935,13,1.4,22,0.449,26,0.88,30,1.464,46,2.413,48,1.144,54,1.431,59,2.006,63,0.692,67,0.986,71,1.941,74,0.511,75,3.201,93,1.734,122,0.544,131,1.464,132,3.46,133,1.887,137,0.552,138,0.689,147,1.124,148,3.11,167,1.605,174,1.481,177,2.852,179,0.682,181,0.887,183,3.132,195,1.302,197,0.851,203,1.134,206,0.843,207,1.302,214,1.265,218,1.329,253,1.685,267,2.453,292,1.29,364,2.253,381,2.492,385,3.344,424,1.887,456,0.731,489,1.277,505,1.464,562,2.03,600,1.315,602,1.315,611,1.144,631,2.238,663,1.66,682,2.076,688,2.121,726,2.712,736,1.253,780,2.697,859,1.124,871,1.207,885,2.712,895,1.887,989,2.597,1067,3.019,1097,1.196,1098,1.684,1130,1.045,1173,1.196,1207,1.708,1208,2.597,1249,1.761,1291,1.616,1327,2.597,1384,2.748,1483,1.574,1623,1.684,1775,3.391,2059,1.385,2063,0.964,2394,0.642,2399,1.789,2400,1.789,2401,1.708,2404,1.789,2405,1.594,2406,1.789,2407,3.243,2410,1.789,2412,1.789,2414,1.789,2415,1.789,2418,1.789,2419,1.789,2420,2.797,2421,1.789,2422,2.797,2423,1.638,2425,1.789,2426,1.789,2427,4.228,2428,1.789,2429,1.789,2430,1.789,2431,2.797,2432,1.789,2435,2.633,2437,1.684,2438,1.789,2439,2.633,2645,1.329,2646,1.535,2662,1.356,2668,1.356,2669,1.371,2736,1.616,2737,1.66,2738,1.616,2739,1.616,2740,1.616,2741,1.616,2742,1.616,2743,1.616,2744,1.616,2745,1.66,2746,1.616,2747,1.616,2748,1.818,2749,1.818,2750,1.818,2751,1.818,2752,1.818,2753,1.818,2754,1.708,2755,1.818,2756,1.818,2757,1.818,2758,3.422]],["t/614",[13,1.455,22,0.463,30,1.521,46,2.019,48,1.189,54,1.487,56,1.657,59,2.043,63,0.719,67,1.025,71,2,74,0.531,75,1.327,122,0.566,131,1.521,132,3.523,133,1.945,137,0.573,138,0.71,148,3.16,167,1.654,177,2.923,179,0.709,181,0.922,183,2.5,197,0.566,203,1.179,206,0.876,207,1.354,214,1.314,218,1.381,248,1.726,253,1.72,267,2.492,292,1.34,364,2.301,381,2.544,385,3.414,403,0.75,424,1.945,456,1.179,487,3.712,489,1.327,505,1.521,507,0.936,600,1.367,602,1.367,611,1.189,631,2.307,663,1.726,682,1.737,726,2.795,736,1.302,780,2.764,859,1.168,871,1.254,885,2.795,895,1.945,989,2.676,1067,2.84,1097,1.243,1098,1.75,1130,1.077,1173,1.243,1207,1.776,1208,2.676,1249,1.83,1291,1.679,1327,2.676,1483,1.636,1623,1.75,1775,3.475,2059,1.44,2063,1.002,2394,0.667,2399,1.859,2400,1.859,2401,1.776,2404,1.859,2405,1.657,2406,1.859,2407,3.324,2410,1.859,2412,1.859,2414,1.859,2415,1.859,2418,1.859,2419,1.859,2420,2.882,2421,1.859,2422,2.882,2423,1.702,2425,1.859,2426,1.859,2427,4.305,2428,1.859,2429,1.859,2430,1.859,2431,2.882,2432,1.859,2435,2.714,2437,1.75,2438,1.859,2439,2.714,2645,1.381,2646,1.595,2662,1.41,2668,1.41,2669,1.424,2736,1.679,2737,1.726,2738,1.679,2739,1.679,2740,1.679,2741,1.679,2742,1.679,2743,1.679,2744,1.679,2745,1.726,2746,1.679,2747,1.679,2748,1.889,2749,1.889,2750,1.889,2751,1.889,2752,1.889,2753,1.889,2754,1.776,2755,1.889,2756,1.889,2757,1.889,2759,5.01,2760,3.556]],["t/616",[13,1.468,22,0.466,30,1.535,46,2.033,48,1.2,53,1.366,54,1.501,59,2.052,63,0.726,67,1.035,71,2.014,74,0.536,75,1.339,122,0.571,131,1.535,132,3.538,133,1.959,137,0.579,138,0.985,148,3.172,167,1.666,177,2.94,179,0.716,181,0.93,183,2.513,197,0.571,203,1.189,206,0.884,207,1.366,214,1.327,218,1.394,253,1.729,267,2.502,292,1.353,364,2.312,381,2.556,385,3.431,424,1.959,456,1.187,487,3.734,489,1.339,505,1.535,600,1.38,602,1.38,611,1.2,631,2.323,663,1.741,682,1.749,726,2.814,736,1.314,780,2.78,859,1.179,871,1.266,885,2.814,895,1.959,989,2.695,1067,2.854,1097,1.254,1098,1.766,1130,1.085,1173,1.254,1207,1.792,1208,2.695,1249,1.847,1291,1.695,1327,2.695,1483,1.651,1623,1.766,1775,3.496,2059,1.453,2063,1.011,2394,0.673,2399,1.876,2400,1.876,2401,1.792,2404,2.903,2405,1.672,2406,1.876,2407,3.343,2410,1.876,2412,1.876,2414,1.876,2415,1.876,2418,1.876,2419,1.876,2420,2.903,2421,1.876,2422,2.903,2423,1.718,2425,1.876,2426,1.876,2427,4.323,2428,1.876,2429,1.876,2430,1.876,2431,2.903,2432,1.876,2435,2.733,2437,1.766,2438,1.876,2439,2.733,2645,1.394,2646,1.61,2662,1.423,2668,1.423,2669,1.437,2736,1.695,2737,1.741,2738,1.695,2739,1.695,2740,1.695,2741,1.695,2742,1.695,2743,1.695,2744,1.695,2745,1.741,2746,1.695,2747,1.695,2748,1.907,2749,1.907,2750,1.907,2751,1.907,2752,1.907,2753,1.907,2754,1.792,2755,1.907,2756,1.907,2757,1.907]],["t/618",[13,1.464,22,0.465,30,1.531,46,2.028,48,1.196,53,1.362,54,1.497,59,2.049,63,0.723,67,1.031,71,2.009,74,0.535,75,1.335,122,0.569,131,1.531,132,3.533,133,1.954,137,0.577,138,0.714,148,3.168,167,1.662,177,2.935,179,0.714,181,0.927,183,2.508,197,0.569,203,1.186,206,0.881,207,1.362,214,1.322,218,1.389,253,1.726,267,2.499,292,1.348,364,2.308,381,2.552,385,3.425,403,0.754,424,1.954,456,1.184,487,3.727,489,1.335,505,1.531,600,1.375,602,1.375,611,1.196,631,2.317,663,1.736,682,1.745,726,2.808,736,1.31,780,2.774,859,1.176,871,1.262,885,2.808,895,1.954,989,2.688,1067,2.849,1097,1.25,1098,1.761,1130,1.082,1173,1.25,1207,1.786,1208,2.688,1249,1.841,1291,1.689,1327,2.688,1483,1.646,1623,1.761,1775,3.489,2059,1.448,2063,1.008,2092,5.033,2394,0.671,2399,1.87,2400,1.87,2401,1.786,2404,2.896,2405,1.667,2406,1.87,2407,3.337,2410,1.87,2412,1.87,2414,1.87,2415,1.87,2418,1.87,2419,1.87,2420,2.896,2421,1.87,2422,2.896,2423,1.712,2425,1.87,2426,1.87,2427,4.317,2428,1.87,2429,1.87,2430,1.87,2431,2.896,2432,1.87,2435,2.727,2437,1.761,2438,1.87,2439,2.727,2645,1.389,2646,1.605,2662,1.418,2668,1.418,2669,1.433,2736,1.689,2737,1.736,2738,1.689,2739,1.689,2740,1.689,2741,1.689,2742,1.689,2743,1.689,2744,1.689,2745,1.736,2746,1.689,2747,1.689,2748,1.901,2749,1.901,2750,1.901,2751,1.901,2752,1.901,2753,1.901,2754,1.786,2755,1.901,2756,1.901,2757,1.901]],["t/620",[1,0.957,13,1.433,22,0.458,26,0.901,30,1.499,46,1.996,48,1.171,54,1.465,59,2.029,63,0.708,71,1.977,74,0.523,75,1.307,122,0.557,131,1.499,132,1.499,133,1.922,137,0.565,138,0.451,147,1.151,148,3.141,167,2.453,177,2.896,178,0.809,179,1.087,183,2.48,197,0.867,203,1.161,206,0.863,207,1.333,214,1.295,218,1.36,253,1.706,267,2.477,292,1.32,364,2.282,381,2.524,385,3.387,424,1.922,452,2.687,456,0.749,461,2.762,467,1.213,489,1.307,505,1.499,507,0.922,600,1.347,602,1.347,611,1.171,631,2.28,663,1.7,682,1.717,726,2.762,736,1.283,780,2.738,859,1.151,871,1.922,885,2.762,895,1.922,989,2.645,1067,2.817,1097,1.224,1098,1.724,1130,1.065,1173,1.224,1207,1.749,1208,2.645,1249,1.803,1291,1.654,1327,2.645,1483,1.612,1565,2.582,1623,1.724,1775,3.442,2059,3.311,2063,0.987,2394,0.657,2399,1.831,2400,1.831,2401,1.749,2404,1.831,2405,1.632,2406,1.831,2407,3.292,2410,1.831,2412,1.831,2414,1.831,2415,1.831,2418,1.831,2419,1.831,2420,2.849,2421,1.831,2422,2.849,2423,1.677,2425,1.831,2426,1.831,2427,4.275,2428,1.831,2429,1.831,2430,1.831,2431,2.849,2432,1.831,2435,2.682,2437,1.724,2438,1.831,2439,2.682,2645,1.36,2646,1.572,2662,1.389,2668,1.389,2669,1.403,2736,1.654,2737,1.7,2738,1.654,2739,1.654,2740,1.654,2741,1.654,2742,1.654,2743,1.654,2744,1.654,2745,1.7,2746,1.654,2747,1.654,2748,1.861,2749,1.861,2750,1.861,2751,1.861,2752,1.861,2753,1.861,2754,1.749,2755,1.861,2756,1.861,2757,1.861,2761,3.503,2762,3.503,2763,3.503]],["t/622",[13,1.438,22,0.459,30,1.503,46,2,48,1.175,53,1.337,54,1.47,59,2.031,63,0.71,67,1.013,71,1.981,74,0.525,75,1.311,122,0.559,131,1.503,132,1.503,133,1.927,137,0.567,138,0.704,148,3.144,167,2.6,177,2.901,179,0.701,181,0.911,183,2.484,195,1.337,197,0.559,203,1.164,206,0.865,207,1.337,214,1.299,218,1.364,253,1.851,267,2.48,292,1.324,364,2.286,381,2.528,385,3.392,424,1.927,456,1.168,461,3.831,489,1.311,505,1.503,600,1.351,602,1.351,611,1.175,631,2.285,663,1.705,682,1.721,726,2.769,736,1.286,780,2.743,859,1.154,871,1.239,885,2.769,895,1.927,934,1.596,989,2.651,1067,2.822,1097,1.228,1098,1.729,1130,1.067,1173,1.228,1207,1.754,1208,2.651,1249,1.808,1291,1.659,1327,2.651,1483,1.616,1623,1.729,1775,3.449,2059,3.315,2063,0.99,2394,0.659,2399,1.837,2400,1.837,2401,1.754,2404,1.837,2405,1.637,2406,1.837,2407,3.299,2410,1.837,2412,1.837,2414,1.837,2415,1.837,2418,1.837,2419,1.837,2420,2.856,2421,1.837,2422,2.856,2423,1.682,2425,1.837,2426,1.837,2427,4.281,2428,1.837,2429,1.837,2430,1.837,2431,2.856,2432,1.837,2435,2.689,2437,1.729,2438,1.837,2439,2.689,2645,1.364,2646,1.576,2662,1.393,2668,1.393,2669,1.407,2736,1.659,2737,1.705,2738,1.659,2739,1.659,2740,1.659,2741,1.659,2742,1.659,2743,1.659,2744,1.659,2745,1.705,2746,1.659,2747,1.659,2748,1.867,2749,1.867,2750,1.867,2751,1.867,2752,1.867,2753,1.867,2754,1.754,2755,1.867,2756,1.867,2757,1.867,2764,5.463]],["t/624",[53,1.484,63,0.788,67,1.124,85,2.871,137,0.629,138,0.502,167,2.145,179,0.777,195,1.484,197,0.62,203,1.292,206,0.96,214,3.471,253,2.321,261,3.684,272,4.266,280,4.162,290,5.692,379,1.687,389,2.874,424,2.522,456,0.833,461,2.999,467,1.35,492,5.179,520,5.962,610,7.204,611,1.303,615,2.143,859,1.281,895,1.375,960,1.892,1097,1.362,1130,1.156,1173,1.362,1456,2.774,2059,2.895,2063,1.098,2394,0.731,2645,1.514,2646,1.749,2653,2.874,2704,2.874,2705,3.131,2706,3.131,2707,3.131,2708,3.131,2709,7.769,2710,3.131,2711,3.131,2712,3.131,2713,6.412,2714,7.541,2715,7.541,2716,7.541,2717,7.541,2718,3.131,2719,3.131,2720,3.131,2721,3.131,2722,3.131,2723,3.131,2724,3.131,2725,3.131,2726,4.752,2727,3.131,2728,3.131,2729,3.131,2730,3.131,2731,3.131,2732,3.131,2765,3.898,2766,3.898]],["t/626",[13,1.417,22,0.454,30,1.481,46,1.977,48,1.157,53,1.318,54,1.448,59,2.017,63,0.7,67,0.998,71,1.959,74,0.517,75,1.292,122,0.551,131,1.481,132,1.481,133,1.905,137,0.558,138,0.696,148,3.125,167,2.699,177,2.874,179,0.69,183,2.464,197,0.551,203,1.147,206,0.853,207,1.318,214,1.28,218,1.344,253,1.838,267,2.465,292,1.305,364,2.268,381,2.507,385,3.365,420,2.198,424,1.905,456,0.74,461,3.801,467,1.199,489,1.292,505,1.481,600,1.331,602,1.331,611,1.157,631,2.259,663,1.68,682,1.701,726,2.737,736,1.267,780,2.717,859,1.137,871,1.221,885,2.737,895,1.905,989,2.62,1056,1.903,1067,2.799,1097,1.21,1098,1.704,1130,1.055,1173,1.21,1207,1.729,1208,2.62,1249,1.781,1291,1.635,1315,2.463,1327,2.62,1483,1.593,1623,1.704,1775,3.417,2055,4.143,2059,3.488,2063,0.975,2394,0.649,2399,1.81,2400,1.81,2401,1.729,2404,1.81,2405,1.613,2406,1.81,2407,3.268,2410,1.81,2412,1.81,2414,1.81,2415,1.81,2418,1.81,2419,1.81,2420,2.823,2421,1.81,2422,2.823,2423,1.657,2425,1.81,2426,1.81,2427,4.251,2428,1.81,2429,1.81,2430,1.81,2431,2.823,2432,1.81,2435,2.658,2437,1.704,2438,1.81,2439,2.658,2645,1.344,2646,1.553,2662,1.372,2668,1.372,2669,1.387,2736,1.635,2737,1.68,2738,1.635,2739,1.635,2740,1.635,2741,1.635,2742,1.635,2743,1.635,2744,1.635,2745,1.68,2746,1.635,2747,1.635,2748,1.839,2749,1.839,2750,1.839,2751,1.839,2752,1.839,2753,1.839,2754,1.729,2755,1.839,2756,1.839,2757,1.839,2767,5.401,2768,3.462]],["t/628",[13,1.412,22,0.453,26,0.888,30,1.477,46,1.973,48,1.154,50,1.327,53,1.314,54,1.444,59,2.015,63,0.698,67,0.995,71,1.954,74,0.516,75,1.288,122,0.549,131,1.477,132,1.477,133,1.9,137,0.557,138,0.694,147,1.134,148,3.121,165,1.035,167,1.616,177,2.868,179,0.688,181,0.895,183,2.46,195,2.051,197,0.549,203,1.144,206,0.85,207,1.314,213,1.154,214,1.276,218,1.34,253,1.836,267,2.462,292,1.301,364,2.264,381,2.503,385,3.36,424,2.338,456,1.152,461,3.358,468,2.655,489,1.288,505,1.477,600,1.327,602,1.327,611,1.154,631,2.254,663,1.675,682,1.697,726,2.73,736,1.264,780,2.712,856,2.456,859,1.134,871,1.217,885,2.73,895,1.9,960,1.675,989,2.614,1067,2.795,1097,1.206,1098,1.699,1130,1.053,1173,1.206,1174,2.14,1207,1.723,1208,2.614,1249,1.776,1291,1.63,1327,2.614,1483,1.588,1623,1.699,1761,4.57,1775,3.41,2059,3.031,2063,0.972,2394,0.647,2399,1.804,2400,1.804,2401,1.723,2404,1.804,2405,1.609,2406,1.804,2407,3.261,2410,1.804,2412,1.804,2414,1.804,2415,1.804,2418,1.804,2419,1.804,2420,2.816,2421,1.804,2422,2.816,2423,1.652,2425,1.804,2426,1.804,2427,4.245,2428,1.804,2429,1.804,2430,1.804,2431,2.816,2432,1.804,2435,2.652,2437,1.699,2438,1.804,2439,2.652,2645,1.34,2646,1.549,2662,1.368,2668,1.368,2669,1.383,2736,1.63,2737,1.675,2738,1.63,2739,1.63,2740,1.63,2741,1.63,2742,1.63,2743,1.63,2744,1.63,2745,1.675,2746,1.63,2747,1.63,2748,1.834,2749,1.834,2750,1.834,2751,1.834,2752,1.834,2753,1.834,2754,1.723,2755,1.834,2756,1.834,2757,1.834]],["t/630",[13,1.446,22,0.461,30,1.512,46,2.01,48,1.182,53,1.345,54,1.479,59,2.037,63,0.715,67,1.019,71,1.991,74,0.528,75,1.319,122,0.562,131,1.512,132,1.512,133,1.936,137,0.57,138,0.707,148,3.152,167,1.646,177,2.912,179,0.705,181,0.916,183,2.492,195,2.089,197,0.562,203,1.171,206,0.871,207,1.345,213,1.182,214,1.307,218,1.373,253,1.856,267,2.486,292,1.332,364,2.293,381,2.536,385,3.403,424,2.373,456,0.756,461,3.41,468,2.695,489,1.319,505,1.512,600,1.359,602,1.359,611,1.182,631,2.296,663,1.715,682,1.729,726,2.781,736,1.294,780,2.753,859,1.161,871,1.247,885,2.781,895,1.936,960,1.715,989,2.663,1067,2.831,1097,1.235,1098,1.74,1130,1.072,1173,1.235,1207,1.765,1208,2.663,1249,1.819,1291,1.669,1327,2.663,1483,1.626,1623,1.74,1775,3.462,2059,3.071,2063,0.996,2394,0.663,2399,1.848,2400,1.848,2401,1.765,2404,1.848,2405,1.647,2406,1.848,2407,3.311,2410,1.848,2412,1.848,2414,1.848,2415,1.848,2418,1.848,2419,1.848,2420,2.869,2421,1.848,2422,2.869,2423,1.692,2425,1.848,2426,1.848,2427,4.293,2428,1.848,2429,1.848,2430,1.848,2431,2.869,2432,1.848,2435,2.701,2437,1.74,2438,1.848,2439,2.701,2493,3.211,2645,1.373,2646,1.586,2662,1.401,2668,1.401,2669,1.416,2736,1.669,2737,1.715,2738,1.669,2739,1.669,2740,1.669,2741,1.669,2742,1.669,2743,1.669,2744,1.669,2745,1.715,2746,1.669,2747,1.669,2748,1.878,2749,1.878,2750,1.878,2751,1.878,2752,1.878,2753,1.878,2754,1.765,2755,1.878,2756,1.878,2757,1.878]],["t/632",[1,0.948,13,1.421,22,0.455,26,0.893,30,1.486,46,1.982,48,1.161,53,1.322,54,1.452,59,2.02,63,0.702,67,1.001,71,1.963,74,0.519,75,1.296,122,0.552,131,1.486,132,1.486,133,1.909,137,0.56,138,0.697,147,1.141,148,3.129,167,2.588,177,2.879,178,0.802,179,0.692,181,0.9,183,2.676,197,0.552,203,1.151,206,0.855,207,1.322,214,1.283,218,1.348,253,1.698,267,2.468,292,1.309,364,2.271,381,2.511,385,3.37,424,1.909,456,1.157,461,3.371,489,1.296,505,1.486,600,1.335,602,1.335,611,1.161,631,2.264,663,1.685,682,1.705,726,2.743,736,1.271,780,2.722,859,1.141,871,1.225,885,2.743,895,1.909,989,2.626,1067,2.804,1097,1.214,1098,1.709,1130,1.057,1173,1.214,1207,1.734,1208,2.626,1249,1.787,1291,1.639,1327,2.626,1483,1.597,1623,1.709,1775,3.423,2059,3.297,2063,0.978,2316,5.642,2394,0.651,2399,1.815,2400,1.815,2401,1.734,2404,1.815,2405,1.618,2406,1.815,2407,3.274,2410,1.815,2412,1.815,2414,1.815,2415,1.815,2418,1.815,2419,1.815,2420,2.829,2421,1.815,2422,2.829,2423,1.662,2425,1.815,2426,1.815,2427,4.257,2428,1.815,2429,1.815,2430,1.815,2431,2.829,2432,1.815,2435,2.664,2437,1.709,2438,1.815,2439,2.664,2645,1.348,2646,1.558,2662,1.376,2668,1.376,2669,1.391,2736,1.639,2737,1.685,2738,1.639,2739,1.639,2740,1.639,2741,1.639,2742,1.639,2743,1.639,2744,1.639,2745,1.685,2746,1.639,2747,1.639,2748,1.845,2749,1.845,2750,1.845,2751,1.845,2752,1.845,2753,1.845,2754,1.734,2755,1.845,2756,1.845,2757,1.845,2769,3.472,2770,3.472]],["t/634",[13,1.442,22,0.46,30,1.508,46,2.005,48,2.742,54,1.474,59,2.034,63,0.713,67,1.016,71,1.986,74,0.527,75,1.315,120,1.71,122,0.56,131,1.508,132,1.508,133,1.931,137,0.568,138,0.705,148,3.148,167,1.642,177,2.907,179,0.703,181,0.914,183,2.488,195,1.341,197,0.56,203,1.168,206,0.868,207,1.341,214,1.303,218,1.369,253,1.854,267,2.483,272,1.601,292,3.272,364,2.29,381,2.532,385,3.397,424,1.931,456,0.753,489,1.315,505,1.508,600,1.355,602,1.355,611,1.178,631,2.29,663,1.71,682,1.725,726,2.775,736,1.29,780,2.748,859,1.158,871,1.243,885,2.775,895,1.931,934,1.601,989,2.657,1067,2.826,1084,2.83,1097,1.232,1098,1.734,1130,1.07,1173,1.232,1207,1.76,1208,2.657,1249,1.813,1291,1.664,1327,2.657,1483,1.621,1487,2.989,1565,2.598,1623,1.734,1775,3.456,2059,1.427,2063,0.993,2178,3.202,2394,0.661,2399,1.842,2400,1.842,2401,1.76,2404,1.842,2405,1.642,2406,1.842,2407,3.305,2410,1.842,2412,1.842,2414,1.842,2415,1.842,2418,1.842,2419,1.842,2420,2.862,2421,1.842,2422,2.862,2423,1.687,2425,1.842,2426,1.842,2427,4.287,2428,1.842,2429,1.842,2430,1.842,2431,2.862,2432,1.842,2435,2.695,2437,1.734,2438,1.842,2439,2.695,2645,1.369,2646,1.581,2662,1.397,2668,1.397,2669,1.412,2736,1.664,2737,1.71,2738,1.664,2739,1.664,2740,1.664,2741,1.664,2742,1.664,2743,1.664,2744,1.664,2745,1.71,2746,1.664,2747,1.664,2748,1.872,2749,1.872,2750,1.872,2751,1.872,2752,1.872,2753,1.872,2754,1.76,2755,1.872,2756,1.872,2757,1.872]],["t/636",[13,1.496,22,0.473,30,1.564,46,2.062,48,1.222,54,1.529,59,2.069,63,0.739,67,1.054,71,2.043,74,0.546,75,1.364,122,0.581,131,1.564,132,1.564,133,1.987,137,0.589,138,0.726,148,3.196,167,1.69,177,2.975,179,0.729,181,0.948,183,2.537,197,0.581,203,1.212,206,0.9,207,1.391,214,1.351,218,1.42,253,1.746,267,2.52,292,1.378,364,2.335,381,2.582,385,3.464,424,1.987,456,0.781,489,1.364,505,1.564,507,0.962,600,1.405,602,1.405,611,1.222,631,2.356,663,1.774,682,1.774,726,2.855,736,1.338,780,2.812,859,1.201,871,1.289,885,2.855,895,1.987,989,2.733,1067,2.882,1097,1.278,1098,1.799,1130,1.101,1173,1.278,1207,1.825,1208,2.733,1218,1.853,1249,1.881,1291,1.726,1327,2.733,1483,1.682,1623,1.799,1775,3.536,1994,4.153,2059,1.48,2063,1.03,2394,0.685,2399,1.911,2400,1.911,2401,1.825,2404,1.911,2405,1.704,2406,1.911,2407,3.382,2410,1.911,2412,1.911,2414,1.911,2415,1.911,2418,1.911,2419,1.911,2420,2.945,2421,1.911,2422,2.945,2423,2.696,2425,1.911,2426,1.911,2427,4.36,2428,1.911,2429,1.911,2430,1.911,2431,2.945,2432,1.911,2435,2.772,2437,1.799,2438,1.911,2439,2.772,2645,1.42,2646,1.64,2662,1.449,2668,1.449,2669,1.464,2685,2.046,2736,1.726,2737,1.774,2738,1.726,2739,1.726,2740,1.726,2741,1.726,2742,1.726,2743,1.726,2744,1.726,2745,1.774,2746,1.726,2747,1.726,2748,1.942,2749,1.942,2750,1.942,2751,1.942,2752,1.942,2753,1.942,2754,1.825,2755,1.942,2756,1.942,2757,1.942]],["t/638",[63,1.548,67,2.207,93,4.779,137,1.235,138,0.986,179,1.527,197,1.5,203,2.538,206,1.886,403,1.614,603,4.475,611,2.56,859,2.516,895,2.701,1130,1.496,1237,5.123,1776,3.314,2063,2.878,2394,1.436,2645,2.973,2646,3.435,2771,7.657,2772,7.657]],["t/640",[63,1.569,67,2.237,137,1.251,138,0.999,150,6.23,179,1.547,197,1.234,203,2.571,206,1.911,403,1.635,434,3.992,603,4.163,611,2.594,852,4.423,859,2.549,895,2.736,1130,1.516,1481,5.719,1776,3.358,2063,2.677,2066,6.58,2394,1.455,2502,7.048,2645,3.013,2646,3.481]],["t/642",[63,1.579,67,2.251,104,4.841,137,1.259,138,1.006,179,1.558,197,1.242,203,2.588,206,1.923,403,1.646,434,4.018,456,1.669,603,4.18,611,2.611,859,2.566,895,2.754,1130,1.526,1776,3.38,2063,2.688,2067,6.623,2394,1.464,2506,7.094,2645,3.033,2646,3.504]],["t/644",[8,5.276,9,7.234,63,1.548,67,2.207,101,4.366,137,1.235,138,0.986,179,1.881,197,1.218,203,2.538,206,1.886,403,1.614,434,3.94,603,4.13,611,2.56,859,2.516,895,2.701,1130,1.496,1776,3.314,2063,2.656,2068,6.494,2394,1.436,2510,6.956,2645,2.973,2646,3.435]],["t/646",[13,1.412,22,0.453,30,1.477,34,1.027,46,1.973,48,1.154,54,1.444,59,2.371,63,0.698,67,0.995,71,1.954,74,0.516,75,1.288,122,0.549,131,1.477,132,1.477,133,1.9,137,0.557,138,0.694,148,3.121,167,1.616,177,2.868,179,0.688,181,0.895,183,2.46,185,2.248,195,2.051,197,0.857,203,1.144,206,0.85,207,1.314,214,1.276,218,1.34,253,1.836,267,2.462,292,1.301,364,2.264,381,2.503,385,3.36,424,2.338,456,0.738,489,1.288,505,1.477,507,0.908,600,1.327,602,1.327,611,1.154,631,2.254,663,1.675,682,1.697,726,2.73,736,1.264,780,3.679,801,2.248,859,1.77,871,1.217,885,2.73,895,1.9,937,1.897,960,1.675,989,2.614,1067,2.795,1097,1.206,1098,1.699,1130,1.053,1173,1.206,1207,1.723,1208,2.614,1249,1.776,1291,1.63,1327,2.614,1483,1.588,1566,2.648,1623,1.699,1775,3.41,2059,1.397,2063,0.972,2070,2.928,2394,0.647,2399,1.804,2400,1.804,2401,1.723,2404,1.804,2405,1.609,2406,1.804,2407,3.261,2410,1.804,2412,1.804,2414,1.804,2415,1.804,2418,1.804,2419,1.804,2420,2.816,2421,1.804,2422,2.816,2423,1.652,2425,1.804,2426,1.804,2427,4.245,2428,1.804,2429,1.804,2430,1.804,2431,2.816,2432,1.804,2435,2.652,2437,1.699,2438,1.804,2439,2.652,2518,6.02,2645,1.34,2646,1.549,2662,1.368,2668,1.368,2669,1.383,2736,1.63,2737,1.675,2738,1.63,2739,1.63,2740,1.63,2741,1.63,2742,1.63,2743,1.63,2744,1.63,2745,1.675,2746,1.63,2747,1.63,2748,1.834,2749,1.834,2750,1.834,2751,1.834,2752,1.834,2753,1.834,2754,1.723,2755,1.834,2756,1.834,2757,1.834]],["t/648",[59,2.528,63,1.538,67,2.193,137,1.227,138,0.98,179,1.517,197,1.62,203,2.521,206,1.873,217,5.242,381,3.406,403,1.603,611,2.543,780,4.169,859,2.5,895,2.683,1130,1.486,1776,3.293,2394,1.426,2645,2.954,2646,3.413,2703,6.452]],["t/650",[1,0.808,22,0.503,26,0.761,33,1.925,46,2.192,48,2.295,63,0.598,67,0.852,73,1.024,74,0.442,75,1.779,84,1.407,110,3.588,122,0.952,128,0.409,133,1.681,137,0.477,138,0.381,147,0.972,148,2.918,174,1.28,179,1.194,181,1.235,184,2.063,195,1.814,197,1.546,203,0.98,206,0.728,213,0.988,253,2.464,267,0.846,272,1.343,280,2.112,297,1.237,364,2.987,379,1.28,381,2.295,390,1.792,424,3.616,427,1.655,456,0.632,562,1.754,599,1.415,600,1.832,602,1.832,611,0.988,631,1.993,636,3.552,682,1.501,736,1.745,786,1.435,827,2.667,859,0.972,892,2.491,895,1.043,898,2.452,912,1.597,960,1.435,968,1.597,1067,3.286,1087,2.954,1097,1.666,1130,0.931,1144,4.989,1173,1.033,1213,3.711,1215,3.711,1218,2.415,1323,1.877,2063,1.342,2079,1.925,2386,1.925,2394,0.554,2413,3.898,2645,1.148,2646,1.327,2655,3.189,2656,1.978,2657,1.978,2658,3.189,2659,6.526,2660,1.978,2661,1.978,2662,1.889,2663,1.833,2664,1.833,2665,3.189,2666,1.498,2667,1.978,2668,1.172,2669,1.184,2670,3.189,2671,4.594,2672,5.663,2673,3.189,2674,3.189,2675,3.189,2676,3.189,2677,3.189,2678,3.189,2679,3.189,2680,3.189,2681,1.978,2682,3.189,2683,1.978,2684,1.655,2773,2.957,2774,2.957]],["t/652",[1,0.848,13,2.028,22,0.519,26,0.799,30,1.329,46,3.282,48,1.657,54,1.299,59,1.914,63,0.628,67,0.895,71,1.798,74,0.464,75,2.309,122,0.494,131,1.329,132,2.12,133,1.748,137,0.501,138,0.639,147,1.02,148,2.983,167,1.487,174,1.344,177,2.677,179,0.989,181,0.805,183,2.32,195,1.886,197,1.308,203,1.029,206,0.765,207,1.182,214,1.148,218,2.742,253,1.596,267,2.469,292,1.17,297,1.299,364,2.135,381,2.997,382,1.507,385,3.168,424,1.095,456,0.664,489,1.159,505,2.12,600,1.194,602,1.194,611,1.038,631,2.073,663,1.507,682,1.948,726,2.512,736,1.137,780,2.531,859,1.02,871,1.095,885,2.512,895,1.748,945,2.55,989,2.405,1067,3.222,1097,1.085,1098,1.528,1130,0.968,1173,1.085,1207,1.55,1208,2.405,1249,1.598,1291,1.466,1327,2.405,1483,2.28,1623,1.528,1775,3.183,2059,1.257,2063,0.875,2394,0.582,2399,1.623,2400,1.623,2401,1.55,2404,1.623,2405,2.31,2406,1.623,2407,3.044,2410,1.623,2412,1.623,2414,1.623,2415,1.623,2418,1.623,2419,1.623,2420,2.591,2421,1.623,2422,2.591,2423,2.372,2425,1.623,2426,1.623,2427,4.033,2428,1.623,2429,1.623,2430,1.623,2431,2.591,2432,1.623,2435,2.439,2437,1.528,2438,1.623,2439,2.439,2453,4.967,2645,1.206,2646,1.393,2662,1.231,2668,1.231,2736,2.34,2737,2.405,2738,2.34,2739,2.34,2740,2.34,2741,2.34,2742,2.34,2743,2.34,2744,2.34,2745,2.405,2746,2.34,2747,2.34,2748,1.65,2749,1.65,2750,1.65,2751,1.65,2752,1.65,2753,1.65,2754,1.55,2755,1.65,2756,1.65,2757,1.65,2775,4.503,2776,3.105,2777,3.105,2778,2.209,2779,2.634]],["t/654",[1,0.948,13,1.421,22,0.455,26,0.893,30,1.486,46,2.436,48,1.161,54,1.452,59,2.02,63,0.702,67,1.001,71,1.963,74,0.519,75,2.02,122,0.552,131,1.486,132,2.316,133,3.043,137,0.56,138,0.697,147,1.141,148,3.551,167,1.623,174,1.503,177,2.879,179,1.08,181,0.9,183,2.468,195,1.322,197,1.295,203,1.151,206,0.855,207,1.322,214,1.283,218,1.348,253,1.698,267,2.468,292,1.309,297,1.452,364,2.271,381,2.511,385,3.37,424,1.909,456,0.742,489,1.296,505,1.486,600,1.335,602,1.335,611,1.161,631,2.264,663,1.685,682,2.095,726,2.743,736,1.271,780,2.722,871,1.225,885,2.743,895,1.909,989,2.626,1067,2.804,1097,1.214,1098,1.709,1130,1.057,1173,1.214,1207,1.734,1208,2.626,1249,1.787,1291,1.639,1327,2.626,1483,1.597,1623,1.709,1775,3.423,2059,1.406,2063,0.978,2394,0.651,2399,1.815,2400,1.815,2401,1.734,2404,1.815,2405,1.618,2406,1.815,2407,3.274,2410,1.815,2412,1.815,2414,1.815,2415,1.815,2418,1.815,2419,1.815,2420,2.829,2421,1.815,2422,2.829,2423,1.662,2425,1.815,2426,1.815,2427,4.257,2428,1.815,2429,1.815,2430,1.815,2431,2.829,2432,1.815,2435,2.664,2437,1.709,2438,1.815,2439,2.664,2645,1.348,2646,1.558,2662,1.376,2668,1.376,2669,1.391,2736,1.639,2737,1.685,2738,1.639,2739,1.639,2740,1.639,2741,1.639,2742,1.639,2743,1.639,2744,1.639,2745,1.685,2746,1.639,2747,1.639,2748,1.845,2749,1.845,2750,1.845,2751,1.845,2752,1.845,2753,1.845,2754,1.734,2755,1.845,2756,1.845,2757,1.845,2780,3.154]],["t/656",[1,0.951,13,1.425,22,0.456,26,0.896,30,1.49,46,2.44,48,1.164,54,1.457,59,2.023,63,0.704,67,1.004,71,1.968,74,0.52,75,2.025,122,0.554,131,1.49,132,2.321,133,1.914,137,0.561,138,0.699,147,1.144,148,3.133,167,1.627,174,1.507,177,2.885,179,1.082,181,0.903,183,2.472,195,1.325,197,1.06,203,1.154,206,0.858,207,1.325,214,1.287,218,1.352,253,1.701,267,2.471,292,1.312,297,1.457,364,2.898,381,2.515,385,3.376,424,1.914,456,0.744,489,1.3,505,1.49,562,2.066,600,1.339,602,1.339,611,1.164,631,2.269,663,1.69,682,2.099,726,2.749,736,1.275,780,2.727,859,1.144,871,1.228,885,2.749,895,1.914,989,2.633,1067,2.808,1097,1.217,1098,1.714,1130,1.06,1173,1.217,1207,1.739,1208,2.633,1211,4.357,1249,1.792,1291,1.644,1327,2.633,1483,1.602,1623,1.714,1775,3.429,2059,1.41,2063,0.981,2394,0.653,2399,1.82,2400,1.82,2401,1.739,2404,1.82,2405,1.623,2406,1.82,2407,3.28,2410,1.82,2412,1.82,2414,1.82,2415,1.82,2418,1.82,2419,1.82,2420,2.836,2421,1.82,2422,2.836,2423,1.667,2425,1.82,2426,1.82,2427,4.263,2428,1.82,2429,1.82,2430,1.82,2431,2.836,2432,1.82,2435,2.67,2437,1.714,2438,1.82,2439,2.67,2645,1.352,2646,1.562,2662,1.38,2668,1.38,2669,1.395,2736,1.644,2737,1.69,2738,1.644,2739,1.644,2740,1.644,2741,1.644,2742,1.644,2743,1.644,2744,1.644,2745,1.69,2746,1.644,2747,1.644,2748,1.85,2749,1.85,2750,1.85,2751,1.85,2752,1.85,2753,1.85,2754,1.739,2755,1.85,2756,1.85,2757,1.85,2781,3.482]],["t/658",[1,1.84,22,0.566,26,1.733,58,3.858,63,1.362,67,1.942,93,3.413,122,1.071,137,1.086,138,0.868,147,2.213,178,1.555,179,1.343,197,1.532,203,2.232,206,1.659,253,2.177,267,1.927,403,1.42,424,3.068,467,2.333,600,2.589,602,2.589,611,2.252,682,2.122,736,2.466,859,2.213,871,3.068,895,2.376,957,4.674,1130,1.316,2063,1.897,2394,1.263,2645,2.616,2646,3.022,2662,2.67,2668,2.67,2669,2.698,2782,6.119,2783,6.735]],["t/660",[1,2.207,26,2.078,58,3.236,147,2.654,178,1.865,197,1.549,424,2.849,467,2.798,957,3.92,1130,1.578,1359,6.197,2063,2.275,2394,1.514,2521,8.263,2522,7.338,2523,7.338,2782,7.338,2784,8.078,2785,8.078]],["t/662",[22,0.579,46,3.232,63,1.394,67,1.987,122,1.096,137,1.111,138,0.888,179,1.375,197,1.096,203,2.285,206,1.698,253,2.202,267,1.972,424,3.114,467,2.388,507,1.814,600,2.65,602,2.65,611,2.305,682,2.171,736,2.524,859,2.265,895,2.431,1130,1.347,2063,1.942,2394,1.292,2441,7.487,2645,2.677,2646,3.093,2662,2.732,2668,2.732,2669,2.761,2786,6.893,2787,6.893,2788,6.893,2789,6.893,2790,6.893,2791,6.893,2792,6.893,2793,6.893,2794,6.262]],["t/665",[22,0.572,63,2.067,67,1.964,73,3.035,122,1.084,138,0.878,179,1.359,197,1.084,203,2.258,206,2.518,253,2.189,267,1.949,403,1.436,424,3.091,434,3.506,467,2.36,552,7.14,600,2.619,602,2.619,611,2.278,736,2.495,1130,1.331,2063,1.919,2071,7.778,2072,5.779,2394,1.277,2524,8.799,2645,2.646,2649,4.559,2662,2.701,2668,2.701,2669,2.729]],["t/667",[13,1.644,22,0.508,48,1.343,54,1.681,59,2.011,63,1.919,67,1.158,73,2.808,74,1.521,122,0.639,128,0.556,131,4.178,132,1.719,133,1.417,138,0.938,148,2.941,178,0.928,179,0.801,181,1.042,183,2.664,197,0.639,203,1.332,206,0.99,207,1.529,218,1.56,253,1.833,267,2.319,381,2.908,382,1.95,385,3.903,424,2.135,456,0.859,492,2.1,505,1.719,507,1.057,600,1.545,602,1.545,611,1.343,682,1.907,692,3.023,736,1.471,775,2.962,780,2.477,859,1.32,905,4.172,1058,5.977,1067,3.247,1097,1.404,1130,1.183,1173,1.404,1218,2.036,1264,2.617,1483,1.848,1792,4.308,1825,2.859,1994,4.463,2063,1.132,2073,2.859,2394,0.753,2405,1.872,2407,3.99,2423,2.897,2435,1.977,2437,1.977,2439,4.281,2443,3.082,2445,3.082,2446,5.588,2645,1.56,2649,2.689,2662,1.593,2668,1.593,2669,1.609,2685,2.249,2736,1.897,2737,1.95,2738,1.897,2739,1.897,2740,1.897,2741,1.897,2742,1.897,2743,1.897,2744,1.897,2745,1.95,2746,1.897,2747,1.897,2754,2.006,2778,2.859,2795,4.862,2796,3.227,2797,3.227]],["t/669",[13,1.595,22,0.497,48,1.303,54,1.631,59,2.329,63,1.899,67,1.124,73,2.766,74,1.51,122,0.62,128,1.105,131,4.139,132,1.668,133,1.375,138,0.921,148,2.896,178,0.9,179,0.777,181,1.01,183,2.623,197,0.62,203,1.292,206,0.96,207,1.484,218,1.514,253,1.805,267,2.284,381,2.87,382,1.892,385,3.851,424,2.087,456,0.833,492,2.038,505,1.668,507,1.026,600,1.499,602,1.499,611,1.303,629,4.077,682,1.864,692,2.954,736,1.427,775,2.874,780,3.513,859,1.281,905,4.077,1058,5.886,1067,3.204,1097,1.362,1130,1.156,1173,1.362,1218,1.975,1264,2.538,1483,1.793,1792,4.21,1825,2.774,2063,1.098,2073,4.21,2394,0.731,2405,1.817,2407,3.929,2423,1.866,2435,1.918,2437,1.918,2439,4.225,2443,2.99,2445,2.99,2446,5.486,2645,1.514,2649,2.608,2662,1.545,2668,1.545,2669,1.561,2685,2.182,2736,1.841,2737,1.892,2738,1.841,2739,1.841,2740,1.841,2741,1.841,2742,1.841,2743,1.841,2744,1.841,2745,1.892,2746,1.841,2747,1.841,2754,1.946,2778,2.774,2795,4.752,2796,3.131,2797,3.131]],["t/671",[13,1.534,22,0.482,48,1.253,54,1.568,59,2.43,63,1.873,67,1.081,73,2.71,74,1.494,122,0.596,128,0.519,131,4.089,132,1.604,133,1.322,138,0.899,148,2.838,178,0.866,179,0.748,181,0.972,183,2.571,195,1.427,197,1.342,203,1.242,206,0.923,207,1.427,218,3.456,253,1.769,267,2.238,381,3.343,382,1.819,385,3.785,403,0.79,424,2.026,456,0.801,492,1.96,505,1.604,600,1.441,602,1.441,611,1.253,682,1.809,692,2.868,736,1.373,775,2.764,780,3.791,859,1.232,905,3.958,1058,5.768,1067,3.149,1097,1.31,1130,1.122,1173,1.31,1264,2.441,1483,1.725,1792,4.087,1825,2.667,2063,1.056,2073,2.667,2394,0.703,2405,1.747,2407,3.851,2423,1.794,2435,1.845,2437,1.845,2439,4.152,2443,2.876,2445,2.876,2446,5.356,2645,1.456,2649,2.509,2662,1.486,2668,1.486,2669,1.502,2703,3.18,2736,1.77,2737,1.819,2738,1.77,2739,1.77,2740,1.77,2741,1.77,2742,1.77,2743,1.77,2744,1.77,2745,1.819,2746,1.77,2747,1.77,2754,1.872,2778,2.667,2795,4.612,2796,3.011,2797,3.011]],["t/673",[13,1.59,22,0.496,48,1.299,54,1.625,59,1.977,63,1.897,67,1.12,73,2.761,74,1.508,75,1.45,122,0.618,128,0.538,131,4.135,132,1.662,133,3.023,138,0.919,148,2.891,178,0.897,179,0.775,181,1.007,183,2.619,195,1.479,197,1.363,203,1.288,206,0.957,207,1.479,218,1.509,253,1.802,267,2.28,365,2.6,381,2.866,382,1.885,385,3.846,424,2.082,456,0.83,492,4.481,505,1.662,600,1.494,602,1.494,611,1.299,682,1.859,692,2.947,736,1.423,775,2.864,780,2.415,859,1.277,905,4.067,1058,5.876,1067,3.199,1097,1.358,1130,1.153,1173,1.358,1264,2.53,1483,1.787,1792,4.199,1825,2.764,2063,1.094,2073,2.764,2394,0.728,2405,1.811,2407,3.923,2423,1.859,2435,1.912,2437,1.912,2439,4.218,2443,2.98,2445,2.98,2446,5.475,2645,1.509,2649,2.6,2662,1.54,2668,1.54,2669,1.556,2736,1.835,2737,1.885,2738,1.835,2739,1.835,2740,1.835,2741,1.835,2742,1.835,2743,1.835,2744,1.835,2745,1.885,2746,1.835,2747,1.835,2754,1.94,2778,2.764,2795,4.74,2796,3.12,2797,3.12,2798,3.885]],["t/675",[53,3.033,54,4.042,63,2.103,67,2.297,73,2.76,138,1.027,179,1.589,197,1.267,203,2.641,206,1.962,611,2.664,667,4.543,859,2.618,1130,1.557,1776,3.449,2394,1.494,2645,3.094,2649,5.332,2799,7.968,2800,7.239]],["t/677",[63,1.446,67,1.124,73,1.35,85,2.871,138,0.502,181,1.01,195,2.252,197,0.62,203,1.292,206,0.96,213,1.303,214,3.734,253,2.353,261,3.684,272,4.266,280,4.162,290,5.692,379,1.687,389,2.874,424,2.522,456,1.265,492,5.179,505,3.06,520,5.962,610,7.204,611,1.303,615,2.143,859,1.281,960,1.892,1047,2.608,1097,1.362,1130,1.156,1173,1.362,1456,2.774,2063,1.098,2394,0.731,2645,1.514,2649,2.608,2653,2.874,2704,2.874,2705,3.131,2706,3.131,2707,3.131,2708,3.131,2709,7.769,2710,3.131,2711,3.131,2712,3.131,2713,6.412,2714,7.541,2715,7.541,2716,7.541,2717,7.541,2718,3.131,2719,3.131,2720,3.131,2721,3.131,2722,3.131,2723,3.131,2724,3.131,2725,3.131,2726,4.752,2727,3.131,2728,3.131,2729,3.131,2730,3.131,2731,3.131,2732,3.131]],["t/680",[13,2.473,22,0.68,48,2.02,63,1.222,67,1.742,122,0.961,132,2.585,138,0.778,179,1.205,181,1.566,197,1.288,203,2.003,206,1.488,253,2.065,267,2.316,382,2.932,424,2.131,456,1.292,505,2.585,507,1.59,600,2.323,602,2.323,611,2.02,736,2.212,859,1.985,945,5.021,1067,2.255,1097,2.112,1130,1.582,1173,2.112,1218,3.062,1483,2.78,1994,4.454,2063,1.702,2394,1.133,2405,2.816,2423,3.876,2453,7.335,2645,2.347,2650,4.853,2662,2.395,2668,2.395,2669,2.42,2685,3.382,2736,2.853,2737,2.932,2738,2.853,2739,2.853,2740,2.853,2741,2.853,2742,2.853,2743,2.853,2744,2.853,2745,2.932,2746,2.853,2747,2.853,2778,4.299,2779,5.125]],["t/682",[13,2.352,22,0.657,48,1.921,63,1.162,67,1.657,122,0.914,132,2.459,138,0.74,181,1.49,195,2.187,197,0.914,203,1.905,206,1.415,213,1.921,214,3.533,253,2.261,267,2.239,382,2.789,424,2.761,456,1.673,505,4.279,600,2.209,602,2.209,611,1.921,736,2.104,859,1.888,945,4.919,1047,3.846,1067,2.145,1097,2.009,1130,1.529,1173,2.009,1483,2.644,2063,1.619,2394,1.078,2405,2.678,2423,2.751,2453,7.15,2645,2.232,2650,4.616,2662,2.278,2668,2.278,2669,2.302,2685,3.216,2736,2.714,2737,2.789,2738,2.714,2739,2.714,2740,2.714,2741,2.714,2742,2.714,2743,2.714,2744,2.714,2745,2.789,2746,2.714,2747,2.714,2778,4.089,2779,4.874,2801,5.747]],["t/685",[22,0.504,26,0.763,33,1.93,46,2.195,48,2.298,59,0.735,73,1.027,74,0.443,84,1.41,110,3.594,122,0.954,128,0.41,133,1.684,138,0.382,147,0.974,148,2.922,178,0.684,179,0.952,181,1.238,184,2.067,195,1.817,197,1.675,203,0.982,206,0.73,213,0.991,253,2.441,267,0.848,272,1.346,280,2.116,364,2.562,379,1.283,381,2.832,390,1.797,424,3.618,427,1.659,456,0.634,507,0.78,599,1.419,600,1.836,602,1.836,611,0.991,631,1.997,636,3.558,682,0.934,736,1.748,786,1.438,827,2.672,859,0.974,892,2.496,898,2.457,912,1.601,957,1.438,960,1.438,968,1.601,1067,3.689,1087,2.96,1097,1.669,1130,0.933,1144,4.994,1173,1.036,1213,1.838,1215,1.838,1218,2.42,1323,1.882,1449,1.983,2063,1.345,2079,1.93,2386,1.93,2394,0.556,2413,3.109,2651,1.983,2655,3.195,2656,1.983,2657,1.983,2658,3.195,2659,6.529,2660,1.983,2661,1.983,2662,1.893,2663,1.838,2664,1.838,2665,3.195,2666,1.502,2667,1.983,2668,1.175,2669,1.187,2670,4.012,2671,4.6,2672,5.669,2673,3.195,2674,3.195,2675,3.195,2676,3.195,2677,3.195,2678,3.195,2679,3.195,2680,3.195,2681,1.983,2682,3.195,2683,1.983,2684,1.659,2802,2.693,2803,2.964,2804,4.338,2805,2.693,2806,2.693]],["t/687",[22,0.514,33,1.991,46,1.792,48,2.339,73,1.059,74,0.457,84,1.445,110,3.658,122,0.973,128,0.423,133,1.726,138,0.394,148,3.557,179,0.976,181,1.269,184,2.118,195,1.163,197,1.462,203,1.013,206,0.753,213,1.022,253,2.465,267,0.874,272,1.389,280,2.169,364,2.47,379,1.323,381,1.636,390,1.853,424,3.642,427,1.711,456,0.653,507,0.804,592,2.48,599,1.463,600,1.882,602,1.882,611,1.022,631,3.202,636,3.632,682,0.963,736,1.792,786,1.483,827,2.739,859,1.004,892,2.558,898,2.518,912,1.651,960,1.483,968,1.651,1067,3.769,1087,3.034,1097,1.711,1130,0.956,1144,5.064,1173,1.068,1213,1.895,1215,1.895,1218,2.48,1323,1.941,1449,2.045,2063,1.379,2079,1.991,2386,1.991,2394,0.573,2413,3.187,2651,2.045,2655,3.275,2656,2.045,2657,2.045,2658,3.275,2659,6.566,2660,2.045,2661,2.045,2662,1.94,2663,1.895,2664,1.895,2665,3.275,2666,1.549,2667,2.045,2668,1.212,2669,1.224,2670,3.275,2671,4.683,2672,5.74,2673,3.275,2674,4.096,2675,3.275,2676,3.275,2677,3.275,2678,3.275,2679,3.275,2680,3.275,2681,2.045,2682,4.683,2683,2.045,2684,1.711,2685,1.711,2807,3.057]],["t/689",[22,0.458,33,1.684,46,1.998,47,1.857,48,2.119,56,2.543,70,2.948,73,0.896,74,0.386,84,1.261,110,3.313,122,0.868,128,0.358,133,1.507,138,0.333,144,1.874,148,2.74,173,1.874,179,0.852,181,1.107,184,1.849,195,1.626,197,1.487,203,0.857,206,0.637,211,2.686,213,0.865,253,2.386,267,0.74,272,1.175,280,1.893,289,6.648,290,3.308,364,2.284,379,1.119,381,1.428,390,1.567,394,2.612,424,3.507,427,1.447,456,0.553,528,2.309,551,4.023,599,1.238,600,1.642,602,1.642,611,0.865,631,1.787,636,4.163,682,0.815,686,2.186,736,1.564,786,1.255,827,2.391,859,0.85,892,2.233,898,2.198,912,1.397,934,1.175,944,5.372,960,1.255,968,1.397,970,4.393,1004,3.761,1067,3.12,1087,2.648,1097,1.493,1118,4.023,1130,0.835,1144,4.684,1173,0.904,1213,1.603,1215,1.603,1218,2.766,1323,1.642,1344,4.629,1449,1.73,1577,4.629,2063,1.203,2079,1.684,2386,1.684,2394,0.485,2413,2.782,2651,1.73,2655,2.858,2656,1.73,2657,1.73,2658,2.858,2659,6.355,2660,1.73,2661,1.73,2662,1.693,2663,1.603,2664,1.603,2665,2.858,2666,1.31,2667,1.73,2668,1.025,2669,1.036,2670,2.858,2671,4.241,2672,5.349,2673,2.858,2674,2.858,2675,3.652,2676,2.858,2677,2.858,2678,2.858,2679,2.858,2680,2.858,2681,1.73,2682,2.858,2683,2.858,2684,1.447,2808,4.272,2809,4.958,2810,4.958,2811,4.958,2812,4.958]],["t/691",[22,0.492,26,0.737,33,1.864,46,2.144,48,2.252,59,0.71,73,0.992,74,0.694,84,1.371,110,3.522,122,0.931,128,0.396,133,1.638,137,0.749,138,0.369,147,0.941,148,3.029,178,0.661,179,0.926,181,1.204,184,2.01,195,1.767,197,1.664,203,0.949,206,0.705,213,0.957,253,2.427,267,0.819,272,1.301,280,2.058,364,2.63,379,1.239,381,2.908,390,1.735,424,3.591,427,1.602,434,1.473,456,0.612,507,0.753,599,1.37,600,1.785,602,1.785,611,0.957,631,1.942,636,3.475,682,0.902,736,1.7,786,1.389,827,2.598,859,0.941,892,2.427,898,2.389,912,1.547,957,1.389,960,1.389,968,1.547,1067,3.656,1087,2.878,1097,1.623,1130,0.907,1144,6.073,1173,1.001,1213,1.775,1215,1.775,1218,2.353,1323,1.818,1449,1.916,2063,1.308,2079,1.864,2386,1.864,2394,0.537,2413,3.023,2651,1.916,2655,3.107,2656,1.916,2657,1.916,2658,3.107,2659,6.486,2660,1.916,2661,1.916,2662,1.84,2663,1.775,2664,1.775,2665,3.107,2666,1.451,2667,1.916,2668,1.135,2669,1.147,2670,3.107,2671,4.508,2672,5.588,2673,3.107,2674,3.107,2675,3.107,2676,3.919,2677,3.107,2678,3.107,2679,3.107,2680,3.107,2681,1.916,2682,3.107,2683,1.916,2684,1.602,2805,2.601,2806,2.601,2813,4.643,2814,4.218]],["t/693",[22,0.513,33,1.985,46,1.788,48,2.336,73,1.056,74,0.456,84,1.442,110,3.652,122,0.972,128,0.422,133,1.723,138,0.393,148,3.555,179,0.974,181,1.266,184,2.114,195,1.16,197,1.461,203,1.01,206,0.751,213,1.019,253,2.464,267,0.872,272,1.385,280,2.165,364,2.467,379,1.32,381,1.633,390,1.848,424,3.64,427,1.706,456,0.652,507,0.802,592,2.475,599,1.459,600,1.878,602,1.878,611,1.019,631,3.198,636,3.625,682,0.96,736,1.788,786,1.479,827,2.733,859,1.002,892,2.553,898,2.513,912,1.647,960,1.479,968,1.647,1067,3.766,1087,3.028,1097,1.707,1130,0.954,1144,5.312,1173,1.066,1213,1.89,1215,1.89,1218,2.475,1323,1.936,1449,2.04,2063,1.376,2079,1.985,2386,1.985,2394,0.572,2413,3.181,2651,2.04,2655,3.268,2656,2.04,2657,2.04,2658,3.268,2659,6.563,2660,2.04,2661,2.04,2662,1.936,2663,1.89,2664,1.89,2665,3.268,2666,1.545,2667,2.04,2668,1.208,2669,1.221,2670,3.268,2671,4.676,2672,5.734,2673,3.268,2674,3.268,2675,3.268,2676,3.268,2677,4.089,2678,3.268,2679,3.268,2680,3.268,2681,2.04,2682,5.116,2683,2.04,2684,1.706,2685,1.706]],["t/695",[22,0.489,33,1.851,46,2.701,47,0.967,48,2.243,56,1.325,70,1.535,73,0.984,74,0.425,84,1.362,110,3.507,122,0.927,128,0.393,133,1.628,138,0.366,144,0.976,148,2.866,173,0.976,179,0.921,181,1.196,184,1.998,195,1.082,197,1.465,203,0.942,206,0.7,211,1.399,213,0.95,253,2.449,267,0.813,272,1.291,280,2.046,289,4.47,290,1.723,364,2.389,379,1.23,381,1.543,390,1.723,394,1.36,424,3.585,427,1.591,456,0.608,528,1.202,551,2.095,599,1.36,600,1.774,602,1.774,611,0.95,631,1.931,636,5.32,682,0.895,686,1.139,736,1.69,786,1.379,827,2.583,859,0.934,892,2.413,898,2.375,912,1.535,934,1.291,944,3.613,960,1.379,968,1.535,970,2.683,1004,1.959,1067,3.238,1087,2.861,1097,1.613,1118,2.095,1130,0.902,1144,5.96,1173,0.993,1213,1.762,1215,1.762,1218,3.4,1323,1.805,1344,2.411,1449,1.902,1577,2.411,2063,1.3,2079,1.851,2386,1.851,2394,0.533,2413,3.006,2651,1.902,2655,3.088,2656,1.902,2657,1.902,2658,3.088,2659,6.477,2660,1.902,2661,1.902,2662,1.83,2663,1.762,2664,1.762,2665,3.088,2666,1.44,2667,1.902,2668,1.127,2669,1.139,2670,3.088,2671,4.489,2672,5.571,2673,3.088,2674,3.088,2675,3.088,2676,3.088,2677,3.088,2678,3.899,2679,3.088,2680,3.088,2681,1.902,2682,3.088,2683,4.489,2684,1.591,2685,1.591,2809,2.582,2810,2.582,2811,2.582,2812,2.582]],["t/697",[22,0.503,26,0.761,33,1.925,46,1.745,48,2.295,59,0.733,73,1.024,74,0.442,75,1.104,84,1.407,110,3.588,122,0.952,128,0.409,132,1.265,133,3.106,138,0.381,147,0.972,148,2.918,158,1.498,165,0.887,179,0.95,181,1.235,184,2.063,195,1.125,197,1.613,203,0.98,206,0.728,213,0.988,253,2.44,267,0.846,272,1.343,280,2.112,364,2.662,379,1.28,381,1.593,385,2.138,390,1.792,424,3.616,427,1.655,456,0.632,507,0.778,599,1.415,600,1.832,602,1.832,611,0.988,631,1.993,636,3.552,682,0.931,688,1.833,736,1.745,786,1.435,827,2.667,859,0.972,892,2.491,898,2.452,912,1.597,960,1.435,968,1.597,1067,3.286,1087,5.458,1097,1.666,1130,0.931,1144,4.989,1173,1.033,1213,1.833,1215,1.833,1218,2.415,1323,1.877,1449,1.978,1498,2.104,1713,1.498,2063,1.342,2079,1.925,2386,1.925,2394,0.554,2413,3.103,2651,1.978,2655,3.189,2656,1.978,2657,1.978,2658,3.189,2659,6.526,2660,1.978,2661,1.978,2662,1.889,2663,1.833,2664,1.833,2665,3.189,2666,1.498,2667,1.978,2668,1.172,2669,1.184,2670,3.189,2671,4.594,2672,5.663,2673,3.189,2674,3.189,2675,3.189,2676,3.189,2677,3.189,2678,3.189,2679,4.005,2680,3.189,2681,1.978,2682,3.189,2683,1.978,2684,1.655,2802,2.686,2804,2.686,2814,2.686]],["t/700",[1,2.318,35,6.815,56,3.955,58,3.399,75,3.167,128,1.174,148,3.078,467,2.939,801,5.526,1056,4.664,1130,1.658,1779,6.51,2394,1.591,2815,8.486]],["t/703",[22,0.652,74,1.159,92,3.729,122,1.234,165,2.327,197,1.512,253,2.323,267,2.219,424,3.353,467,2.687,600,2.982,602,2.982,682,2.444,736,2.84,1130,1.516,2063,2.895,2394,1.455,2662,3.075,2668,3.075,2669,3.107]],["t/705",[26,1.753,58,2.729,73,2.36,74,1.309,78,5.779,92,2.673,128,0.943,206,1.678,213,2.278,431,2.593,433,5.432,440,4.996,464,5.779,467,2.36,503,3.134,598,3.506,603,4.478,766,3.134,922,3.884,961,4.816,1117,4.224,1130,1.331,1174,4.224,1298,4.848,1337,4.437,1386,5.472,1847,6.19,1892,5.779,1893,5.472,2063,1.919,2177,5.227,2301,6.19,2329,5.779,2394,1.277,2538,5.472,2816,6.814,2817,6.814,2818,6.814,2819,6.814,2820,6.814]],["t/708",[32,2.831,122,1.312,138,1.063,146,2.27,197,1.312,268,2.253,403,1.739,507,2.17,893,2.687,1010,3.339,1130,1.611,1239,4.795,1718,4.616,1776,3.57,2237,4.382,2394,1.546,2821,4.795,2822,4.795]],["t/710",[32,2.831,122,1.312,138,1.063,146,2.27,197,1.312,268,2.253,403,1.739,507,2.17,893,2.687,1010,3.339,1130,1.611,1776,3.57,2237,4.382,2394,1.546,2647,4.795,2648,4.894,2821,4.795,2822,4.795]],["t/712",[32,2.595,122,1.202,138,0.974,146,2.08,181,1.959,195,3.561,197,1.202,268,2.065,379,3.271,403,1.593,456,1.615,507,1.988,893,2.462,1010,3.06,1097,2.642,1130,1.828,1173,2.642,1239,5.907,1718,4.23,1749,5.057,2063,2.129,2237,4.015,2394,1.417,2666,3.83,2823,9.23]],["t/714",[32,2.483,122,1.15,138,0.932,146,1.991,181,1.875,195,3.464,197,1.15,268,1.976,379,3.939,403,1.525,456,1.546,507,1.903,827,4.048,893,2.356,1010,2.928,1097,2.528,1130,1.778,1173,2.528,1713,3.665,2063,2.037,2237,3.842,2394,1.356,2647,4.205,2648,6.201,2666,3.665,2684,4.048,2689,4.984,2690,5.146,2823,9.495]],["t/716",[32,2.611,122,1.21,138,0.98,146,2.094,181,1.972,197,1.21,268,2.078,379,3.293,403,1.603,456,1.626,507,2.001,893,2.478,1010,3.08,1097,2.659,1130,1.835,1173,2.659,1239,6.355,1718,4.257,2063,2.143,2237,4.041,2394,1.426,2666,3.855,2685,4.257,2687,6.109,2824,6.911]],["t/718",[32,2.595,122,1.202,138,0.974,146,2.08,181,1.959,197,1.202,268,2.065,379,3.271,403,1.593,456,1.615,507,1.988,893,2.462,1010,3.06,1097,2.642,1130,1.828,1173,2.642,2063,2.129,2237,4.015,2394,1.417,2647,4.394,2648,6.474,2666,3.83,2685,4.23,2687,6.07,2690,5.378,2824,6.866]],["t/720",[26,1.827,122,1.129,133,2.505,146,1.955,148,2.576,181,1.841,195,4.166,197,1.431,379,3.074,385,3.186,456,1.518,542,4.403,1097,2.482,1130,1.758,1173,2.482,1238,7.576,1239,5.741,1718,3.974,1749,4.752,2063,2,2394,1.331,2666,3.599,2685,3.974,2825,6.451,2826,7.102,2827,7.102,2828,7.102,2829,7.102,2830,7.102,2831,7.102]],["t/722",[26,1.97,122,1.218,133,2.701,146,2.107,148,2.777,181,1.985,197,1.218,379,3.314,385,3.435,456,1.637,542,4.747,1097,2.676,1130,1.842,1173,2.676,2063,2.157,2300,6.956,2394,1.436,2647,4.451,2648,6.498,2666,3.88,2685,4.285,2690,5.448,2825,6.956,2832,7.657]],["t/724",[26,2.152,122,1.33,124,4.304,128,1.157,146,2.302,197,1.33,620,5.952,871,2.951,1010,3.386,1130,1.634,1239,4.863,1718,4.681,1776,3.621,2063,2.356,2394,1.568,2833,7.599]],["t/726",[26,2.152,122,1.33,124,4.304,128,1.157,146,2.302,197,1.33,620,5.952,871,2.951,1010,3.386,1130,1.634,1776,3.621,2063,2.356,2394,1.568,2647,4.863,2648,4.963,2833,7.599]],["t/729",[13,1.267,22,0.519,30,1.325,32,1.063,46,1.811,48,1.035,54,1.295,59,2.139,71,1.794,74,0.463,75,1.156,122,0.787,128,0.684,131,1.325,132,1.325,133,1.744,138,0.637,148,2.98,167,1.852,177,2.672,179,0.986,181,0.803,183,2.833,192,1.203,197,0.982,203,1.639,207,1.179,214,1.145,218,1.203,253,2.024,265,2.092,267,2.467,268,0.846,272,1.407,292,1.167,364,2.132,379,1.34,381,2.357,382,1.503,385,3.163,403,0.653,424,2.718,427,1.733,456,0.662,489,1.156,505,1.325,507,0.815,545,2.434,546,1.702,547,1.733,600,1.901,602,1.901,631,2.949,663,1.503,682,1.945,726,2.506,736,1.811,780,2.527,859,1.018,871,1.744,885,2.506,893,1.009,895,1.092,960,1.503,968,1.673,989,2.4,1067,2.631,1097,1.082,1098,1.524,1130,0.966,1147,1.281,1173,1.082,1207,1.546,1208,2.4,1218,2.506,1249,1.594,1291,1.462,1327,2.4,1483,1.425,1623,4.244,1713,1.569,1775,3.177,2059,1.254,2063,0.872,2237,1.645,2394,0.581,2399,1.619,2400,1.619,2401,3.52,2404,1.619,2405,1.443,2406,1.619,2407,3.039,2410,1.619,2412,1.619,2414,1.619,2415,1.619,2418,1.619,2419,1.619,2420,2.585,2421,1.619,2422,2.585,2423,1.482,2425,1.619,2426,1.619,2427,4.028,2428,1.619,2429,1.619,2430,1.619,2431,2.585,2432,1.619,2435,2.434,2437,1.524,2438,1.619,2439,2.434,2659,1.92,2662,1.96,2663,1.92,2664,1.92,2668,1.228,2669,1.241,2684,1.733,2685,1.733,2689,2.134,2736,1.462,2737,1.503,2738,1.462,2739,1.462,2740,1.462,2741,1.462,2742,1.462,2743,1.462,2744,1.462,2745,1.503,2746,1.462,2747,1.462,2748,1.645,2749,1.645,2750,1.645,2751,1.645,2752,1.645,2753,1.645,2754,1.546,2755,1.645,2756,1.645,2757,1.645,2821,1.801,2822,1.801,2834,2.204,2835,1.877]],["t/731",[13,1.277,22,0.521,30,1.336,32,1.072,46,1.822,48,1.044,54,1.306,59,2.146,71,1.805,74,0.466,75,1.165,122,0.792,128,0.689,131,1.336,132,3.527,133,1.756,138,0.641,148,2.99,167,1.493,177,2.687,179,0.993,181,0.809,183,2.842,192,1.212,197,0.987,203,1.65,207,1.188,214,1.154,218,1.212,253,2.03,265,2.105,267,2.474,268,0.853,272,1.418,292,1.177,364,2.141,379,1.351,381,2.368,385,3.177,403,0.658,424,2.729,427,1.747,456,0.667,487,2.736,489,1.165,505,1.336,507,0.821,545,2.449,546,1.716,547,1.747,600,1.913,602,1.913,631,2.082,663,1.515,682,1.955,726,2.522,736,1.822,780,2.54,859,1.026,871,1.756,885,2.522,893,1.017,895,1.101,960,1.515,968,1.686,989,2.415,1067,2.643,1097,1.091,1098,1.536,1130,0.972,1147,1.291,1173,1.091,1207,1.559,1208,2.415,1249,1.606,1291,1.474,1327,2.415,1483,1.436,1623,1.536,1713,1.582,1775,3.194,2059,1.264,2063,0.879,2237,1.658,2394,0.585,2399,1.632,2400,1.632,2401,1.559,2404,1.632,2405,1.455,2406,1.632,2407,3.055,2410,1.632,2412,1.632,2414,1.632,2415,1.632,2418,1.632,2419,1.632,2420,2.602,2421,1.632,2422,2.602,2423,1.494,2425,1.632,2426,1.632,2427,4.044,2428,1.632,2429,1.632,2430,1.632,2431,2.602,2432,1.632,2435,2.449,2437,1.536,2438,1.632,2439,2.449,2459,4.985,2659,1.935,2662,1.973,2663,1.935,2664,1.935,2668,1.237,2669,1.25,2684,1.747,2689,2.151,2736,1.474,2737,1.515,2738,1.474,2739,1.474,2740,1.474,2741,1.474,2742,1.474,2743,1.474,2744,1.474,2745,1.515,2746,1.474,2747,1.474,2748,1.658,2749,1.658,2750,1.658,2751,1.658,2752,1.658,2753,1.658,2754,1.559,2755,1.658,2756,1.658,2757,1.658,2759,2.836,2821,1.815,2822,1.815,2835,1.892,2836,3.122,2837,3.122,2838,2.836]],["t/733",[13,1.228,22,0.508,30,1.284,32,1.031,46,1.766,48,1.004,54,1.256,59,2.112,71,1.75,74,0.449,75,1.12,122,0.767,128,0.667,131,1.284,132,1.284,133,3.223,138,0.621,146,0.826,148,3.54,167,1.447,177,2.617,179,0.962,181,0.778,183,2.798,192,1.166,195,1.143,197,1.354,203,1.599,207,1.143,214,1.11,218,1.166,253,2.002,265,2.041,267,2.436,268,0.82,272,1.364,292,1.131,364,2.094,379,1.299,381,2.315,385,3.635,403,0.633,424,2.676,456,0.642,489,1.12,505,1.284,507,0.79,544,1.68,545,2.374,546,1.65,547,1.68,600,1.855,602,1.855,631,2.018,663,1.457,682,1.905,726,2.445,736,1.766,780,2.475,859,0.986,871,1.702,885,3.51,893,0.978,895,1.059,960,1.457,968,1.622,989,2.341,1010,1.215,1067,2.585,1097,1.049,1098,1.477,1130,0.942,1147,1.242,1173,1.049,1207,1.499,1208,2.341,1249,1.545,1291,1.418,1327,2.341,1483,1.381,1623,1.477,1713,1.521,1775,3.112,2059,1.215,2063,0.846,2237,1.595,2394,0.563,2399,1.569,2400,1.569,2401,1.499,2404,1.569,2405,1.399,2406,1.569,2407,2.976,2410,1.569,2412,1.569,2414,1.569,2415,1.569,2418,1.569,2419,1.569,2420,2.522,2421,1.569,2422,2.522,2423,1.437,2425,1.569,2426,1.569,2427,3.966,2428,1.569,2429,3.161,2430,1.569,2431,2.522,2432,1.569,2435,2.374,2437,1.477,2438,1.569,2439,2.374,2659,1.861,2662,1.912,2663,1.861,2664,1.861,2668,1.19,2669,1.202,2684,1.68,2689,2.069,2736,1.418,2737,1.457,2738,1.418,2739,1.418,2740,1.418,2741,1.418,2742,1.418,2743,1.418,2744,1.418,2745,1.457,2746,1.418,2747,1.418,2748,1.595,2749,1.595,2750,1.595,2751,1.595,2752,1.595,2753,1.595,2754,1.499,2755,1.595,2756,1.595,2757,1.595,2780,2.727,2821,1.745,2822,1.745,2835,1.82,2838,2.727,2839,3.002]],["t/735",[13,2.889,22,0.519,32,1.066,46,2.585,59,1.229,74,1.055,81,3.415,116,2.537,122,0.494,128,0.686,132,2.12,133,1.748,138,0.797,146,0.855,148,1.798,160,1.85,179,0.989,181,0.805,183,2.703,192,1.206,195,1.182,197,0.984,203,1.643,206,1.739,218,1.925,233,2.724,253,1.744,265,2.096,268,0.848,272,2.251,291,2.31,292,2.331,381,1.657,382,2.405,385,2.224,403,0.655,424,1.748,456,0.664,505,2.12,507,0.817,521,2.881,544,1.738,545,2.439,546,1.707,547,1.738,600,1.194,602,1.194,692,2.475,734,2.881,736,1.137,783,5.222,821,3.881,859,1.02,871,1.095,893,1.012,990,3.227,1015,3.98,1067,1.85,1097,1.085,1130,0.968,1147,1.285,1173,1.085,1483,2.28,1490,3.147,1623,2.439,2063,0.875,2237,1.65,2394,0.582,2401,2.475,2405,2.31,2416,5.246,2456,4.204,2458,4.204,2459,3.98,2462,4.204,2464,4.204,2465,4.204,2466,4.204,2471,4.204,2472,5.989,2473,4.204,2474,4.204,2475,4.204,2476,4.204,2477,4.204,2479,4.204,2481,4.204,2485,4.204,2486,4.204,2487,4.204,2488,5.989,2489,4.204,2491,4.204,2662,1.231,2668,1.231,2669,1.244,2685,1.738,2736,2.34,2738,3.334,2739,2.34,2740,2.34,2741,2.34,2742,1.466,2743,2.34,2744,2.34,2746,2.34,2747,2.34,2821,1.805,2822,1.805,2834,2.209,2835,1.882,2840,3.105,2841,2.821,2842,4.503,2843,4.503,2844,4.503,2845,2.821,2846,2.821,2847,4.503,2848,4.503,2849,4.503,2850,2.821,2851,2.821,2852,2.821,2853,2.821,2854,2.821,2855,4.503,2856,4.503,2857,2.821,2858,2.821,2859,2.821,2860,2.821,2861,2.821,2862,2.821,2863,2.821]],["t/737",[22,0.518,32,2.118,59,2.037,122,0.981,128,1.136,138,0.795,146,1.698,174,3.554,179,1.638,183,3.233,192,2.396,197,1.468,203,2.721,253,2.086,265,3.473,268,1.685,272,2.803,403,1.3,424,2.896,456,1.319,467,2.137,507,1.623,544,3.453,545,4.041,546,3.391,547,3.453,600,2.372,602,2.372,736,2.259,859,2.027,871,2.176,893,2.01,1130,1.205,1147,2.552,1226,4.733,1473,6.053,2063,1.738,2074,6.964,2075,5.233,2237,3.278,2394,1.157,2662,2.446,2668,2.446,2669,2.471,2821,3.587,2822,3.587,2834,4.39,2835,3.74,2864,6.17]],["t/739",[32,2.38,59,2.198,80,4.203,128,1.226,138,0.893,146,1.909,179,1.767,183,3.209,192,2.693,197,1.553,203,2.937,265,3.748,268,1.894,403,1.462,490,4.114,507,1.824,544,3.88,545,4.361,546,3.811,547,3.88,592,3.514,859,2.278,871,2.446,893,2.259,1130,1.355,1147,2.868,1776,3.001,2237,3.684,2394,1.3,2482,6.299,2821,4.031,2822,4.031,2834,4.934,2835,4.203,2865,6.934]],["t/741",[32,2.38,59,2.198,96,3.811,97,4.114,128,1.226,138,0.893,146,1.909,179,1.383,183,3.209,192,2.693,197,1.553,203,2.937,265,3.748,268,1.894,403,1.462,537,4.203,544,3.88,545,4.361,546,3.811,547,3.88,592,3.514,871,2.446,893,2.259,934,3.15,1101,5.569,1130,1.355,1147,3.666,1776,3.001,2237,3.684,2394,1.3,2821,4.031,2822,4.031,2834,4.934,2835,4.203,2866,6.934]],["t/743",[32,2.611,59,2.33,138,0.98,183,3.086,192,2.954,197,1.21,203,2.521,265,3.973,268,2.078,403,1.603,545,4.622,546,4.181,547,4.257,734,4.423,893,2.478,934,3.456,994,5.413,1130,1.486,1147,3.147,1776,3.293,2237,4.041,2394,1.426,2821,4.423,2822,4.423,2834,5.413,2835,4.611]],["t/745",[32,2.353,59,2.182,85,3.325,128,1.217,138,0.883,146,1.886,179,1.754,183,3.191,192,2.661,197,1.545,203,2.915,265,3.72,268,1.872,403,1.445,434,3.526,467,2.374,507,1.803,544,3.835,545,4.328,546,3.767,547,3.835,859,2.252,871,2.417,893,2.233,961,3.767,1130,1.339,1147,2.835,2063,1.93,2237,3.641,2394,1.285,2555,5.812,2704,5.052,2821,3.984,2822,3.984,2834,4.876,2835,4.154,2867,6.853]],["t/747",[13,2.813,22,0.504,32,1.018,46,3.227,59,1.185,74,1.027,75,1.782,81,3.29,116,2.47,122,0.471,128,0.83,132,2.043,133,1.684,138,0.772,146,0.816,148,1.732,160,1.782,179,0.952,181,0.768,183,2.784,192,1.151,195,1.817,197,1.447,203,1.583,206,1.693,218,2.927,233,2.625,253,1.554,265,2.02,268,0.81,291,2.225,381,2.693,382,2.317,385,2.142,403,0.625,424,1.046,456,0.634,505,2.043,507,0.78,521,2.776,544,1.659,545,2.35,546,1.629,547,1.659,600,1.14,602,1.14,620,2.109,692,2.384,734,2.776,736,1.085,783,3.032,821,3.779,859,0.974,871,1.046,893,0.966,990,3.109,1010,1.933,1015,3.835,1061,1.983,1067,2.566,1097,1.036,1130,0.933,1147,1.226,1173,1.036,1483,2.197,1490,3.032,1623,2.35,2063,0.835,2237,1.575,2394,0.556,2401,2.384,2405,2.225,2416,4.05,2456,4.05,2458,4.05,2459,3.835,2462,4.05,2464,4.05,2465,4.05,2466,4.05,2471,4.05,2472,5.831,2473,4.05,2474,4.05,2475,4.05,2476,4.05,2477,4.05,2479,4.05,2481,4.05,2485,4.05,2486,4.05,2487,4.05,2488,5.831,2489,4.05,2491,4.05,2662,1.175,2668,1.175,2669,1.187,2736,2.255,2738,3.246,2739,2.255,2740,2.255,2741,2.255,2742,1.4,2743,2.255,2744,2.255,2746,2.255,2747,2.255,2775,4.338,2821,1.723,2822,1.723,2835,1.797,2841,2.693,2842,4.338,2843,4.338,2844,4.338,2845,2.693,2846,2.693,2847,4.338,2848,4.338,2849,4.338,2850,2.693,2851,2.693,2852,2.693,2853,2.693,2854,2.693,2855,4.338,2856,4.338,2857,2.693,2858,2.693,2859,2.693,2860,2.693,2861,2.693,2862,2.693,2863,2.693,2868,2.964,2869,2.964,2870,2.514]],["t/749",[32,2.325,34,2.016,59,2.166,128,1.336,138,0.873,145,3.938,146,1.865,183,3.174,192,2.631,197,1.536,203,2.893,204,2.967,265,3.693,268,1.85,403,1.428,456,1.448,544,4.885,545,4.296,546,3.723,547,3.791,592,3.433,871,2.389,893,2.207,934,3.965,1130,1.323,1147,3.611,1776,2.932,2237,3.599,2394,1.27,2821,3.938,2822,3.938,2835,4.106,2870,5.745,2871,6.774,2872,6.774,2873,6.774]],["t/751",[32,2.595,54,3.161,59,2.321,138,0.974,179,1.507,183,3.074,192,2.935,197,1.202,203,2.505,265,3.957,268,2.065,403,1.593,507,1.988,545,4.604,546,4.154,547,4.23,859,2.483,893,2.462,1130,1.477,1776,3.271,2237,4.015,2394,1.417,2800,6.866,2821,4.394,2822,4.394,2835,4.581,2870,6.41]],["t/753",[26,1.704,32,2.273,46,3.149,59,2.134,85,3.213,128,1.19,138,0.853,179,1.716,183,3.139,197,1.519,203,2.851,265,3.639,268,1.809,403,1.396,427,3.705,456,1.839,467,2.293,545,4.233,546,3.64,547,3.705,859,2.176,871,2.335,893,2.157,1130,1.294,1147,2.739,2063,1.865,2140,7.814,2237,3.518,2394,1.241,2441,7.296,2555,5.616,2704,4.881,2794,6.015,2821,3.85,2822,3.85,2835,4.014,2874,6.622,2875,6.622,2876,6.622]],["t/756",[74,1.387,83,3.087,128,1.284,136,3.782,166,3.964,253,1.687,260,3.23,262,2.785,467,2.585,489,2.785,505,3.193,599,3.571,618,6.902,620,5.309,621,6.395,743,6.395,934,3.39,937,4.102,1130,1.458,1764,7.749,1904,6.779,2394,1.399,2877,7.462]],["t/758",[74,1.296,166,4.608,211,4.269,467,3.004,503,3.99,922,3.844,934,3.94,1130,1.695,1174,5.377,1265,6.966,2394,1.626]],["t/760",[128,1.191,166,4.574,467,2.982,611,2.879,618,5.467,848,7.303,1130,1.682,1174,5.338,1352,5.933,1768,6.915,2394,1.614,2878,8.611]],["t/762",[74,1.306,165,2.621,166,4.642,206,2.152,467,3.027,503,4.02,934,3.969,1130,1.707,1174,5.417,2394,1.638]],["t/764",[1,2.607,34,2.324,53,2.972,59,2.368,84,2.305,137,1.259,165,2.342,178,1.803,456,1.669,467,2.705,478,3.688,503,3.593,542,4.841,611,2.611,780,3.906,893,2.544,895,2.754,1130,1.526,1218,3.958,2394,1.464,2535,7.094,2536,7.094,2879,7.81]],["t/766",[59,2.489,82,6.815,83,3.51,160,3.167,206,2.09,430,6.256,467,2.939,468,3.399,542,5.261,780,4.106,1130,1.658,2394,1.591]],["t/768",[74,1.325,467,3.072,489,3.311,934,4.029,1130,1.733,1327,4.304,2394,1.663,2880,8.87]],["t/770",[166,4.642,467,3.027,505,3.739,934,3.969,1130,1.707,1246,6.442,2394,1.638,2397,7.411,2881,8.739,2882,8.739]],["t/773",[48,2.797,63,1.692,76,3.708,92,3.282,116,3.006,206,2.06,213,2.797,261,3.282,268,2.285,467,2.897,478,3.95,489,3.122,1056,4.598,1130,1.634,2059,3.386,2394,1.568]],["t/775",[74,1.268,92,3.329,116,3.049,204,3.716,261,3.329,467,2.939,478,4.007,489,3.167,608,4.436,621,5.847,893,2.765,1130,1.658,2059,3.435,2394,1.591]],["t/777",[74,1.268,92,3.329,116,3.049,204,3.716,261,3.329,467,2.939,478,4.007,489,3.167,608,4.436,893,2.765,1130,1.658,2059,3.435,2338,7.709,2394,1.591]],["t/779",[74,1.268,92,3.329,116,3.049,204,3.716,261,3.329,467,2.939,478,4.007,489,3.167,608,4.436,893,2.765,1130,1.658,2059,3.435,2336,7.709,2394,1.591]],["t/781",[74,1.268,92,3.329,116,3.049,204,3.716,261,3.329,467,2.939,478,4.007,489,3.167,608,4.436,893,2.765,1130,1.658,2059,3.435,2334,7.709,2394,1.591]],["t/783",[74,1.25,92,3.282,116,3.006,179,1.668,204,3.663,261,3.282,467,2.897,478,3.95,489,3.122,592,4.239,608,4.373,893,2.725,1130,1.634,2059,3.386,2394,1.568,2883,8.365]],["t/785",[53,3.184,74,1.25,92,3.282,165,2.509,179,1.668,208,6.417,213,2.797,261,3.282,272,3.8,467,2.897,893,2.725,1130,1.634,2341,7.599,2345,7.599,2394,1.568,2884,8.365]],["t/787",[74,1.259,92,3.305,116,3.027,204,3.69,261,3.305,467,2.918,478,3.978,489,3.144,608,4.404,893,2.745,1130,1.646,2018,7.654,2019,6.463,2059,3.411,2394,1.58]],["t/789",[74,1.287,92,3.378,179,1.717,195,3.277,213,2.879,467,2.982,1130,1.682,1315,6.126,1492,7.303,2352,7.822,2394,1.614,2885,8.611]],["t/791",[55,4.429,66,3.952,74,1.183,84,2.336,116,3.458,122,1.259,128,1.095,261,3.105,371,5.454,467,2.741,845,6.713,1130,1.546,1776,4.165,2019,7.954,2038,7.19,2059,3.204,2090,6.356,2394,1.484,2538,6.356,2886,7.915]],["t/793",[74,1.25,92,3.282,116,3.006,179,1.668,204,3.663,261,3.282,467,2.897,478,3.95,489,3.122,592,4.239,608,4.373,893,2.725,1130,1.634,2059,3.386,2394,1.568,2887,8.365]],["t/795",[74,1.259,92,3.305,116,3.027,204,3.69,261,3.305,467,2.918,478,3.978,489,3.144,608,4.404,893,2.745,1130,1.646,2048,5.349,2059,3.411,2394,1.58,2565,7.654]],["t/797",[74,1.25,92,3.282,115,3.848,116,3.006,128,1.157,204,3.663,261,3.282,467,2.897,478,3.95,489,3.122,608,4.373,893,2.725,1130,1.634,2059,3.386,2113,7.095,2394,1.568]],["t/800",[1,2.191,35,6.443,74,1.199,87,4.574,91,3.644,92,3.147,120,3.893,128,1.342,461,4.917,467,2.779,485,3.356,537,4.863,608,4.194,801,5.224,851,5.093,985,5.528,1130,1.567,1799,7.288,2133,6.804,2394,1.504]],["t/802",[26,2.265,83,3.642,147,2.893,165,2.641,467,3.049,1130,1.72,1174,5.458,2296,7.07,2394,1.651]],["t/805",[50,3.262,82,6.815,166,4.508,192,3.295,197,1.35,467,2.939,783,5.388,922,4.447,1130,1.658,1320,7.197,1776,3.673,1942,7.709,2394,1.591]],["t/807",[47,2.867,58,3.375,73,3.461,467,2.918,635,3.69,692,4.207,922,4.428,1130,1.646,1365,7.146,1411,6.463,1412,6.766,1821,7.146,2394,1.58]],["t/810",[1,2.405,26,2.265,147,2.893,291,4.103,467,3.049,688,5.458,1130,1.72,2394,1.651,2888,8.804]],["t/813",[26,2.248,83,3.615,147,2.871,165,2.621,261,3.428,431,3.326,467,3.027,1130,1.707,1174,5.417,2394,1.638]],["t/815",[128,1.149,167,2.491,206,2.046,403,1.751,430,6.123,467,2.877,507,2.185,622,4.829,1130,1.623,1994,6.123,2394,1.557,2889,9,2890,8.306,2891,8.306,2892,8.306,2893,8.306]],["t/817",[1,2.253,13,3.375,26,2.122,48,2.757,116,2.963,147,2.71,206,2.031,211,4.059,246,4.795,445,5.683,467,2.857,635,3.612,1130,1.611,1569,4.795,2394,1.546,2889,8.962,2894,8.248]],["t/819",[1,2.285,71,3.034,165,2.984,213,2.797,261,3.903,434,4.304,451,4.519,467,2.897,498,3.8,611,2.797,1130,1.634,2394,1.568,2895,8.365]]],"invertedIndex":[["",{"_index":253,"t":{"19":{"position":[[569,1],[642,1],[700,1],[1183,1]]},"21":{"position":[[368,1],[552,1],[614,1],[671,1]]},"25":{"position":[[475,1],[1265,1],[1273,1]]},"33":{"position":[[93,1],[620,3]]},"41":{"position":[[474,1]]},"52":{"position":[[472,1],[487,1],[509,1],[535,1],[550,1],[581,1],[707,1]]},"61":{"position":[[593,1],[649,1]]},"99":{"position":[[358,1],[385,1]]},"106":{"position":[[94,1],[124,1],[169,1]]},"110":{"position":[[925,2],[1067,2],[1967,1],[2059,1],[2155,1],[2263,1],[2498,1],[2626,1]]},"112":{"position":[[1206,1],[1287,1],[1383,1],[1488,1],[1678,1],[1854,1],[1990,1],[2017,1]]},"114":{"position":[[1482,1],[1551,1],[1756,1],[1765,1]]},"116":{"position":[[652,1],[732,1],[772,1],[795,2],[832,1],[892,1],[936,1],[1047,2],[1082,1]]},"118":{"position":[[1006,1],[1024,1],[1438,1],[1456,1],[2153,1],[2155,1],[2175,1],[2177,1],[2179,2],[3308,1],[3462,1],[3469,1],[3500,1],[3534,1],[3707,1],[3724,1],[3742,1],[3754,1],[3801,1],[3837,1],[3876,1],[4597,1],[4604,1],[4635,1],[4669,1],[4703,1]]},"124":{"position":[[365,1],[406,1],[610,1],[1263,1],[1304,1],[1600,1]]},"126":{"position":[[299,1],[340,1],[1120,1],[1161,1]]},"128":{"position":[[188,1],[359,1],[470,1],[671,1],[1565,3]]},"135":{"position":[[888,1],[890,1],[909,1],[911,1],[913,3],[1548,1]]},"162":{"position":[[4747,2],[4754,1],[4756,1],[4758,2],[4779,1],[4781,1],[4783,3],[5496,1]]},"189":{"position":[[230,1]]},"201":{"position":[[186,1]]},"203":{"position":[[906,1],[936,1],[967,1],[995,1],[1026,1],[1079,1],[1145,1],[1163,1],[1178,1],[1192,1],[1194,1],[1432,1],[1592,1],[2334,2],[2344,1],[2367,1],[2444,1],[2453,1],[2492,1],[2494,1],[2589,1],[2634,1],[2649,1],[2882,1],[3040,1]]},"205":{"position":[[371,2],[381,1],[404,1],[481,1],[490,1],[529,1],[531,1],[626,1],[671,1],[686,1],[919,1],[1077,1]]},"213":{"position":[[617,1],[634,1],[651,1],[756,1]]},"215":{"position":[[429,1],[446,1],[463,1]]},"221":{"position":[[1192,1],[1226,1],[1243,1],[1266,1],[1460,1],[1494,1],[1546,1],[1569,1],[1702,1],[2181,1]]},"223":{"position":[[437,1]]},"247":{"position":[[774,1],[943,1],[1626,1],[1745,1]]},"249":{"position":[[845,1]]},"268":{"position":[[940,1],[957,1],[974,1],[1182,1],[1268,1]]},"273":{"position":[[299,1],[366,2]]},"277":{"position":[[788,1],[890,1],[994,1],[1050,1],[1133,1],[1228,1],[1387,1],[1503,1],[1623,1],[1719,1],[1782,1]]},"281":{"position":[[489,1],[522,1],[546,1],[571,1],[606,1]]},"283":{"position":[[291,1],[466,1],[560,1],[618,1],[706,1]]},"285":{"position":[[275,1]]},"289":{"position":[[158,1]]},"293":{"position":[[171,1]]},"297":{"position":[[206,1]]},"307":{"position":[[476,1],[506,1],[859,1],[889,1],[1454,1],[1472,1],[1506,1],[1524,1]]},"311":{"position":[[421,1],[480,1]]},"319":{"position":[[273,1],[532,1],[544,1],[637,2],[640,2],[720,1]]},"326":{"position":[[1113,1],[1115,1],[1120,4]]},"332":{"position":[[579,1],[712,1]]},"344":{"position":[[269,1],[318,1],[366,1],[421,1],[474,1],[625,1],[680,1],[733,1]]},"346":{"position":[[272,1],[321,1]]},"376":{"position":[[130,1]]},"378":{"position":[[286,1],[468,1]]},"398":{"position":[[1912,2],[1931,2],[2277,1],[2446,1],[3281,1],[3322,1],[3391,1],[3405,1],[3431,1],[3777,2]]},"406":{"position":[[668,1],[690,1],[724,1],[746,1]]},"428":{"position":[[245,1],[1198,1]]},"432":{"position":[[250,1],[1795,2],[2471,1]]},"438":{"position":[[87,1]]},"446":{"position":[[442,1],[471,1]]},"468":{"position":[[779,2],[798,2],[1467,1],[1513,1],[1553,1],[1721,1],[1750,1],[1779,1],[1829,1],[3271,3],[3335,3],[3553,3],[3709,3],[5925,2],[6124,2],[6323,2]]},"470":{"position":[[438,2],[1476,2],[1717,2],[1945,2],[2159,2],[2400,2],[2609,2]]},"472":{"position":[[1193,1],[1202,1],[1204,1],[1285,1],[1287,1],[1367,1]]},"476":{"position":[[256,1],[466,1],[536,1],[610,1],[683,1],[755,1],[820,1],[1091,1],[1554,1],[1663,1],[1890,1],[1981,1],[2338,1],[2620,1],[2689,1],[2792,1],[2839,1],[2907,1],[3013,1],[3086,1],[3159,1],[3250,1],[4064,1],[4091,1],[4279,1],[4358,1]]},"494":{"position":[[79,1]]},"510":{"position":[[419,1],[576,1],[670,1],[672,1],[687,1],[699,2],[715,1],[717,1],[729,1],[739,1],[741,1],[796,1],[798,1],[800,1],[802,2],[805,1],[819,2],[822,1],[824,1],[826,1],[828,1],[830,1]]},"533":{"position":[[787,2]]},"540":{"position":[[406,1],[756,1],[2312,3],[2322,3]]},"548":{"position":[[845,1],[1033,1],[1218,1]]},"579":{"position":[[139,1],[308,1],[413,1],[471,1],[486,1],[515,2],[559,1],[602,1],[617,1],[633,3],[775,1],[807,1],[818,1],[831,4],[931,1],[1060,1],[1258,1],[1385,1],[1588,1],[1716,1],[1806,1],[1917,1],[1957,1],[1995,1]]},"581":{"position":[[149,1]]},"595":{"position":[[216,1]]},"602":{"position":[[238,1],[270,1],[281,1]]},"604":{"position":[[301,1],[319,1],[351,1],[425,1],[636,1],[918,1],[1200,1],[1482,1],[1764,1],[2046,1],[2328,1]]},"606":{"position":[[230,1],[248,1],[280,1],[323,1],[406,1],[617,1],[899,1],[1181,1],[1463,1],[1745,1],[2027,1],[2309,1]]},"610":{"position":[[468,1],[500,1],[511,1],[567,1],[613,1]]},"612":{"position":[[451,1],[483,1],[494,1],[550,1]]},"614":{"position":[[325,1],[357,1],[368,1],[413,1]]},"616":{"position":[[291,1],[323,1],[334,1],[379,1]]},"618":{"position":[[304,1],[336,1],[347,1],[392,1]]},"620":{"position":[[395,1],[427,1],[438,1],[489,1]]},"622":{"position":[[302,1],[334,1],[345,1],[396,1],[456,1]]},"624":{"position":[[290,1],[308,1],[340,1],[419,1],[630,1],[912,1],[1194,1],[1476,1],[1758,1],[2040,1],[2322,1]]},"626":{"position":[[368,1],[400,1],[411,1],[462,1],[520,1]]},"628":{"position":[[390,1],[422,1],[433,1],[465,1],[509,1]]},"630":{"position":[[286,1],[318,1],[329,1],[361,1],[405,1]]},"632":{"position":[[421,1],[453,1],[464,1],[515,1]]},"634":{"position":[[282,1],[314,1],[325,1],[363,1],[400,1]]},"636":{"position":[[233,1],[265,1],[276,1],[312,1]]},"646":{"position":[[363,1],[395,1],[406,1],[438,1],[483,1]]},"650":{"position":[[438,1],[543,1],[601,1],[616,1],[645,2],[689,1],[732,1],[747,1],[763,3],[905,1],[937,1],[948,1],[961,4],[1061,1],[1190,1],[1388,1],[1515,1],[1718,1],[1846,1],[1936,1],[2047,1],[2087,1],[2125,1],[2220,1],[2253,1]]},"652":{"position":[[430,1],[466,1],[494,1],[527,1]]},"654":{"position":[[365,1],[397,1],[408,1],[449,1]]},"656":{"position":[[377,1],[409,1],[420,1],[458,1]]},"658":{"position":[[419,1],[451,1],[462,1]]},"662":{"position":[[971,1],[1003,1],[1014,1]]},"665":{"position":[[320,1],[361,1],[372,1]]},"667":{"position":[[250,1],[291,1],[302,1],[338,1]]},"669":{"position":[[270,1],[311,1],[322,1],[380,1]]},"671":{"position":[[366,1],[407,1],[418,1],[477,1]]},"673":{"position":[[303,1],[344,1],[355,1],[394,1]]},"677":{"position":[[239,1],[257,1],[289,1],[320,1],[391,1],[602,1],[884,1],[1166,1],[1448,1],[1730,1],[2012,1],[2294,1]]},"680":{"position":[[237,1],[269,1],[297,1]]},"682":{"position":[[247,1],[279,1],[290,1],[329,1],[373,1]]},"685":{"position":[[332,1],[437,1],[495,1],[510,1],[539,2],[583,1],[626,1],[641,1],[657,3],[799,1],[831,1],[842,1],[855,4],[955,1],[1084,1],[1282,1],[1409,1],[1612,1],[1740,1],[1830,1],[1941,1],[1981,1],[2019,1]]},"687":{"position":[[221,1],[326,1],[384,1],[399,1],[428,2],[472,1],[515,1],[530,1],[546,3],[688,1],[720,1],[731,1],[744,4],[844,1],[973,1],[1171,1],[1298,1],[1501,1],[1629,1],[1719,1],[1830,1],[1870,1],[1908,1],[2000,1]]},"689":{"position":[[246,1],[351,1],[409,1],[424,1],[453,2],[497,1],[540,1],[555,1],[571,3],[713,1],[745,1],[756,1],[769,4],[869,1],[998,1],[1196,1],[1323,1],[1526,1],[1654,1],[1744,1],[1855,1],[1895,1],[1933,1]]},"691":{"position":[[398,1],[503,1],[561,1],[576,1],[605,2],[649,1],[692,1],[707,1],[723,3],[865,1],[897,1],[908,1],[921,4],[1021,1],[1150,1],[1348,1],[1475,1],[1678,1],[1806,1],[1896,1],[2007,1],[2047,1],[2085,1]]},"693":{"position":[[224,1],[329,1],[387,1],[402,1],[431,2],[475,1],[518,1],[533,1],[549,3],[691,1],[723,1],[734,1],[747,4],[847,1],[976,1],[1174,1],[1301,1],[1504,1],[1632,1],[1722,1],[1833,1],[1873,1],[1911,1],[2003,1]]},"695":{"position":[[256,1],[361,1],[419,1],[434,1],[463,2],[507,1],[550,1],[565,1],[581,3],[723,1],[755,1],[766,1],[779,4],[879,1],[1008,1],[1206,1],[1333,1],[1536,1],[1664,1],[1754,1],[1865,1],[1905,1],[1943,1],[2035,1],[2071,1]]},"697":{"position":[[355,1],[460,1],[518,1],[533,1],[562,2],[606,1],[649,1],[664,1],[680,3],[822,1],[854,1],[865,1],[878,4],[978,1],[1107,1],[1305,1],[1432,1],[1635,1],[1763,1],[1853,1],[1964,1],[2004,1],[2042,1]]},"703":{"position":[[117,1],[149,1],[160,1]]},"729":{"position":[[537,1],[569,1],[628,1],[660,1],[671,1],[695,1],[721,1],[768,1]]},"731":{"position":[[523,1],[555,1],[614,1],[646,1],[657,1],[685,1],[711,1],[764,1]]},"733":{"position":[[579,1],[611,1],[670,1],[702,1],[713,1],[737,1],[763,1],[858,1]]},"735":{"position":[[487,1],[512,1],[523,1],[564,1],[602,1]]},"737":{"position":[[544,1],[569,1],[580,1]]},"747":{"position":[[705,1],[730,1],[758,1],[791,1]]},"756":{"position":[[312,1]]}}}],["0",{"_index":272,"t":{"19":{"position":[[849,1],[911,1],[1024,1],[1074,1],[1129,1]]},"81":{"position":[[34,1]]},"101":{"position":[[452,2]]},"118":{"position":[[2147,1],[2168,1]]},"135":{"position":[[882,2],[902,2]]},"142":{"position":[[65,1]]},"162":{"position":[[463,2],[1108,2],[4771,2]]},"179":{"position":[[1374,4]]},"203":{"position":[[925,1]]},"332":{"position":[[838,1],[900,1],[954,1]]},"468":{"position":[[3438,1],[3912,1]]},"579":{"position":[[631,1]]},"604":{"position":[[628,1],[910,1],[1192,1],[1474,1],[1756,1],[2038,1],[2320,1]]},"606":{"position":[[609,1],[891,1],[1173,1],[1455,1],[1737,1],[2019,1],[2301,1]]},"624":{"position":[[622,1],[904,1],[1186,1],[1468,1],[1750,1],[2032,1],[2314,1]]},"634":{"position":[[395,1]]},"650":{"position":[[761,1]]},"677":{"position":[[594,1],[876,1],[1158,1],[1440,1],[1722,1],[2004,1],[2286,1]]},"685":{"position":[[655,1]]},"687":{"position":[[544,1]]},"689":{"position":[[569,1]]},"691":{"position":[[721,1]]},"693":{"position":[[547,1]]},"695":{"position":[[579,1]]},"697":{"position":[[678,1]]},"729":{"position":[[582,2]]},"731":{"position":[[568,2]]},"733":{"position":[[624,2]]},"735":{"position":[[95,2],[595,3]]},"737":{"position":[[132,2]]},"785":{"position":[[165,2]]}}}],["0.0.0.0",{"_index":1240,"t":{"144":{"position":[[46,7]]},"162":{"position":[[752,8]]}}}],["0.2",{"_index":761,"t":{"54":{"position":[[693,3]]}}}],["0/1",{"_index":278,"t":{"19":{"position":[[956,3]]}}}],["000",{"_index":2831,"t":{"720":{"position":[[337,5]]}}}],["00:00",{"_index":1122,"t":{"118":{"position":[[227,5]]}}}],["00:00:00",{"_index":2714,"t":{"604":{"position":[[638,8],[920,8],[1202,8],[1484,8],[1766,8],[2048,8],[2330,8]]},"606":{"position":[[619,8],[901,8],[1183,8],[1465,8],[1747,8],[2029,8],[2311,8]]},"624":{"position":[[632,8],[914,8],[1196,8],[1478,8],[1760,8],[2042,8],[2324,8]]},"677":{"position":[[604,8],[886,8],[1168,8],[1450,8],[1732,8],[2014,8],[2296,8]]}}}],["00:01:28",{"_index":2708,"t":{"604":{"position":[[427,8]]},"606":{"position":[[408,8]]},"624":{"position":[[421,8]]},"677":{"position":[[393,8]]}}}],["02",{"_index":716,"t":{"50":{"position":[[391,2]]},"108":{"position":[[1499,2]]},"178":{"position":[[135,2]]}}}],["04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c",{"_index":2727,"t":{"604":{"position":[[1916,64]]},"606":{"position":[[1897,64]]},"624":{"position":[[1910,64]]},"677":{"position":[[1882,64]]}}}],["0644",{"_index":1725,"t":{"281":{"position":[[332,6],[515,6]]}}}],["073f",{"_index":302,"t":{"19":{"position":[[1382,4],[1545,4],[1886,4]]}}}],["09",{"_index":2744,"t":{"610":{"position":[[734,2]]},"612":{"position":[[682,2]]},"614":{"position":[[551,2]]},"616":{"position":[[500,2]]},"618":{"position":[[513,2]]},"620":{"position":[[626,2]]},"622":{"position":[[587,2]]},"626":{"position":[[660,2]]},"628":{"position":[[641,2]]},"630":{"position":[[537,2]]},"632":{"position":[[653,2]]},"634":{"position":[[518,2]]},"636":{"position":[[433,2]]},"646":{"position":[[608,2]]},"652":{"position":[[650,2],[2826,2]]},"654":{"position":[[566,2]]},"656":{"position":[[572,2]]},"667":{"position":[[459,2]]},"669":{"position":[[527,2]]},"671":{"position":[[612,2]]},"673":{"position":[[509,2]]},"680":{"position":[[418,2]]},"682":{"position":[[492,2]]},"729":{"position":[[917,2]]},"731":{"position":[[931,2]]},"733":{"position":[[1046,2]]},"735":{"position":[[723,2],[1946,2]]},"747":{"position":[[914,2],[2137,2]]}}}],["0b836757eae8",{"_index":2854,"t":{"735":{"position":[[1516,12]]},"747":{"position":[[1707,12]]}}}],["1",{"_index":280,"t":{"19":{"position":[[970,1]]},"25":{"position":[[1322,1]]},"52":{"position":[[507,1],[533,1]]},"87":{"position":[[593,1]]},"101":{"position":[[1849,1]]},"118":{"position":[[3358,1]]},"128":{"position":[[616,1],[1295,1]]},"135":{"position":[[1596,3]]},"162":{"position":[[5544,3],[8951,1]]},"201":{"position":[[304,2],[448,2],[543,2]]},"203":{"position":[[361,2],[491,1],[705,1],[870,1],[1041,2],[1091,2],[1236,1],[1315,2],[1590,1],[1655,1],[1769,1],[2262,2],[2296,1],[2533,2],[2765,2],[3103,1],[3218,1]]},"205":{"position":[[299,2],[333,1],[570,2],[802,2],[1140,1],[1255,1]]},"243":{"position":[[59,2]]},"358":{"position":[[139,1],[165,1]]},"372":{"position":[[256,1]]},"378":{"position":[[529,1]]},"468":{"position":[[1922,1],[1977,1],[3007,1],[3062,1]]},"488":{"position":[[393,1]]},"490":{"position":[[379,1]]},"540":{"position":[[537,1],[885,1],[1227,2]]},"579":{"position":[[647,2],[1672,2]]},"604":{"position":[[626,1],[908,1],[1190,1],[1472,1],[1754,1],[2036,1],[2318,1]]},"606":{"position":[[607,1],[889,1],[1171,1],[1453,1],[1735,1],[2017,1],[2299,1]]},"624":{"position":[[620,1],[902,1],[1184,1],[1466,1],[1748,1],[2030,1],[2312,1]]},"650":{"position":[[777,2],[1802,2]]},"677":{"position":[[592,1],[874,1],[1156,1],[1438,1],[1720,1],[2002,1],[2284,1]]},"685":{"position":[[671,2],[1696,2]]},"687":{"position":[[560,2],[1585,2]]},"689":{"position":[[585,2],[1610,2]]},"691":{"position":[[737,2],[1762,2]]},"693":{"position":[[563,2],[1588,2]]},"695":{"position":[[595,2],[1620,2]]},"697":{"position":[[694,2],[1719,2]]}}}],["1.1",{"_index":2299,"t":{"460":{"position":[[1048,5]]}}}],["1.1.11",{"_index":2665,"t":{"579":{"position":[[653,9],[1678,9],[2066,6]]},"650":{"position":[[783,9],[1808,9]]},"685":{"position":[[677,9],[1702,9]]},"687":{"position":[[566,9],[1591,9]]},"689":{"position":[[591,9],[1616,9]]},"691":{"position":[[743,9],[1768,9]]},"693":{"position":[[569,9],[1594,9]]},"695":{"position":[[601,9],[1626,9]]},"697":{"position":[[700,9],[1725,9]]}}}],["1.2.1",{"_index":2402,"t":{"476":{"position":[[258,5]]}}}],["1.2.17",{"_index":2409,"t":{"476":{"position":[[538,6]]}}}],["1.2.19",{"_index":2417,"t":{"476":{"position":[[822,6]]}}}],["1.2.20",{"_index":2433,"t":{"476":{"position":[[1556,6]]}}}],["1.2.21",{"_index":2424,"t":{"476":{"position":[[1093,6]]}}}],["1.2.22",{"_index":2381,"t":{"472":{"position":[[17,6]]},"476":{"position":[[4413,6]]},"502":{"position":[[200,6]]}}}],["1.2.25",{"_index":2382,"t":{"472":{"position":[[27,6]]},"476":{"position":[[4423,6]]},"502":{"position":[[209,6]]}}}],["1.2.28",{"_index":2436,"t":{"476":{"position":[[1665,6]]}}}],["1.2.29",{"_index":2413,"t":{"476":{"position":[[685,6],[757,6]]},"579":{"position":[[720,9],[1701,9]]},"650":{"position":[[850,9],[1831,9],[2196,6]]},"685":{"position":[[744,9],[1725,9]]},"687":{"position":[[633,9],[1614,9]]},"689":{"position":[[658,9],[1639,9]]},"691":{"position":[[810,9],[1791,9]]},"693":{"position":[[636,9],[1617,9]]},"695":{"position":[[668,9],[1649,9]]},"697":{"position":[[767,9],[1748,9]]}}}],["1.2.30",{"_index":2440,"t":{"476":{"position":[[1892,6],[1983,6]]}}}],["1.2.31",{"_index":2408,"t":{"476":{"position":[[468,6]]}}}],["1.2.32",{"_index":2411,"t":{"476":{"position":[[612,6]]}}}],["1.20",{"_index":2115,"t":{"404":{"position":[[1174,4]]},"470":{"position":[[1087,4]]},"533":{"position":[[50,4]]}}}],["1.21",{"_index":2117,"t":{"404":{"position":[[1224,4]]},"533":{"position":[[111,4]]}}}],["1.24",{"_index":234,"t":{"19":{"position":[[98,5],[218,4]]}}}],["1.3.2",{"_index":2448,"t":{"476":{"position":[[2622,5]]}}}],["1.3.3",{"_index":2451,"t":{"476":{"position":[[2841,5]]}}}],["1.3.4",{"_index":2450,"t":{"476":{"position":[[2794,5]]}}}],["1.3.5",{"_index":2449,"t":{"476":{"position":[[2691,5]]}}}],["1.3.7",{"_index":2444,"t":{"476":{"position":[[2340,5]]}}}],["1.4.1",{"_index":2455,"t":{"476":{"position":[[3015,5]]}}}],["1.4.2",{"_index":2452,"t":{"476":{"position":[[2909,5]]}}}],["1.50",{"_index":2224,"t":{"434":{"position":[[482,4],[565,4],[626,4]]},"442":{"position":[[191,4]]}}}],["1.6",{"_index":2398,"t":{"476":{"position":[[141,3]]}}}],["1.6.1",{"_index":2052,"t":{"394":{"position":[[138,7]]}}}],["1.8.0",{"_index":2053,"t":{"394":{"position":[[186,5]]}}}],["1.8.4",{"_index":2054,"t":{"394":{"position":[[192,5]]}}}],["1.el7_8.noarch.rpm",{"_index":762,"t":{"54":{"position":[[697,18]]}}}],["1/1",{"_index":271,"t":{"19":{"position":[[837,3],[899,3],[1012,3],[1117,3]]},"332":{"position":[[826,3],[888,3],[942,3]]}}}],["10",{"_index":104,"t":{"6":{"position":[[109,2]]},"11":{"position":[[143,2]]},"108":{"position":[[330,2]]},"118":{"position":[[4975,2]]},"203":{"position":[[674,3]]},"366":{"position":[[147,2]]},"372":{"position":[[253,2]]},"434":{"position":[[635,3]]},"446":{"position":[[435,2],[444,2]]},"488":{"position":[[57,2],[362,3]]},"490":{"position":[[348,3]]},"642":{"position":[[198,2]]}}}],["10.0.0.0/8",{"_index":1635,"t":{"249":{"position":[[927,10]]}}}],["10.10.10.100",{"_index":1419,"t":{"201":{"position":[[247,12]]}}}],["10.10.10.100/24",{"_index":1454,"t":{"203":{"position":[[1147,15]]}}}],["10.10.10.101",{"_index":1425,"t":{"201":{"position":[[546,12]]}}}],["10.10.10.102",{"_index":1426,"t":{"201":{"position":[[568,12]]}}}],["10.10.10.103",{"_index":1427,"t":{"201":{"position":[[590,12]]}}}],["10.10.10.50",{"_index":1420,"t":{"201":{"position":[[307,11]]}}}],["10.10.10.50:6443",{"_index":1439,"t":{"203":{"position":[[707,16],[2376,17]]},"205":{"position":[[413,17]]}}}],["10.10.10.51",{"_index":1421,"t":{"201":{"position":[[329,11]]}}}],["10.10.10.51:6443",{"_index":1440,"t":{"203":{"position":[[746,16],[2401,17]]},"205":{"position":[[438,17]]}}}],["10.10.10.52",{"_index":1422,"t":{"201":{"position":[[351,11]]}}}],["10.10.10.52:6443",{"_index":1441,"t":{"203":{"position":[[785,16],[2426,17]]},"205":{"position":[[463,17]]}}}],["10.10.10.98",{"_index":1423,"t":{"201":{"position":[[451,11]]}}}],["10.10.10.99",{"_index":1424,"t":{"201":{"position":[[469,11]]}}}],["10.247.0.0/16",{"_index":2174,"t":{"424":{"position":[[975,13]]}}}],["10.41.0.0/16",{"_index":574,"t":{"35":{"position":[[423,12]]}}}],["10.42.0.0/16",{"_index":699,"t":{"48":{"position":[[196,12]]},"150":{"position":[[46,14]]},"162":{"position":[[1448,13]]},"319":{"position":[[422,14],[546,15]]}}}],["10.43.0.0/16",{"_index":700,"t":{"48":{"position":[[237,12]]},"150":{"position":[[125,14]]},"162":{"position":[[1553,13]]}}}],["10.43.0.10",{"_index":1252,"t":{"150":{"position":[[313,12]]},"162":{"position":[[1814,11]]}}}],["10.6.8",{"_index":1376,"t":{"185":{"position":[[1676,7]]}}}],["10.7",{"_index":1377,"t":{"185":{"position":[[1723,5]]}}}],["100",{"_index":8,"t":{"2":{"position":[[87,3]]},"59":{"position":[[653,4]]},"203":{"position":[[1094,3]]},"366":{"position":[[170,3]]},"372":{"position":[[276,3]]},"488":{"position":[[312,3]]},"490":{"position":[[55,3],[298,3]]},"644":{"position":[[249,3]]}}}],["1000",{"_index":1670,"t":{"266":{"position":[[964,4]]}}}],["10000",{"_index":510,"t":{"31":{"position":[[391,6]]}}}],["10080",{"_index":513,"t":{"31":{"position":[[444,5]]}}}],["1024",{"_index":508,"t":{"31":{"position":[[356,4]]}}}],["10250",{"_index":2009,"t":{"360":{"position":[[648,6]]},"362":{"position":[[245,5]]}}}],["10m",{"_index":1537,"t":{"221":{"position":[[1894,3]]}}}],["10t22:54:38z",{"_index":1196,"t":{"128":{"position":[[699,12]]}}}],["11",{"_index":2263,"t":{"442":{"position":[[149,2]]}}}],["11.5",{"_index":1378,"t":{"185":{"position":[[1729,5]]}}}],["111695",{"_index":1827,"t":{"311":{"position":[[144,7]]}}}],["112",{"_index":1837,"t":{"311":{"position":[[1279,4]]}}}],["1123",{"_index":1901,"t":{"326":{"position":[[1046,4]]}}}],["12",{"_index":669,"t":{"44":{"position":[[634,2]]},"118":{"position":[[2170,4]]},"128":{"position":[[696,2]]},"135":{"position":[[905,3]]},"162":{"position":[[4774,4]]},"303":{"position":[[2142,2]]},"311":{"position":[[1261,3]]}}}],["12,500",{"_index":2528,"t":{"500":{"position":[[350,6]]}}}],["12.0.000.tgz",{"_index":1626,"t":{"247":{"position":[[2458,13]]}}}],["1215",{"_index":2228,"t":{"434":{"position":[[588,4]]},"448":{"position":[[311,4]]}}}],["123",{"_index":2738,"t":{"610":{"position":[[683,3]]},"612":{"position":[[631,3]]},"614":{"position":[[500,3]]},"616":{"position":[[449,3]]},"618":{"position":[[462,3]]},"620":{"position":[[575,3]]},"622":{"position":[[536,3]]},"626":{"position":[[609,3]]},"628":{"position":[[590,3]]},"630":{"position":[[486,3]]},"632":{"position":[[602,3]]},"634":{"position":[[467,3]]},"636":{"position":[[382,3]]},"646":{"position":[[557,3]]},"652":{"position":[[599,3],[2775,3]]},"654":{"position":[[515,3]]},"656":{"position":[[521,3]]},"667":{"position":[[408,3]]},"669":{"position":[[476,3]]},"671":{"position":[[561,3]]},"673":{"position":[[458,3]]},"680":{"position":[[367,3]]},"682":{"position":[[441,3]]},"729":{"position":[[866,3]]},"731":{"position":[[880,3]]},"733":{"position":[[995,3]]},"735":{"position":[[672,3],[1368,3],[1895,3],[2591,3]]},"747":{"position":[[863,3],[1559,3],[2086,3],[2782,3]]}}}],["12345",{"_index":1701,"t":{"277":{"position":[[855,5],[1184,6],[1269,5]]}}}],["127.0.0.1",{"_index":2801,"t":{"682":{"position":[[358,11]]}}}],["12:00",{"_index":1123,"t":{"118":{"position":[[237,5]]}}}],["13",{"_index":1483,"t":{"203":{"position":[[3194,3]]},"205":{"position":[[1231,3]]},"610":{"position":[[667,2]]},"612":{"position":[[615,2]]},"614":{"position":[[484,2]]},"616":{"position":[[433,2]]},"618":{"position":[[446,2]]},"620":{"position":[[559,2]]},"622":{"position":[[520,2]]},"626":{"position":[[593,2]]},"628":{"position":[[574,2]]},"630":{"position":[[470,2]]},"632":{"position":[[586,2]]},"634":{"position":[[451,2]]},"636":{"position":[[366,2]]},"646":{"position":[[541,2]]},"652":{"position":[[583,2],[2759,2]]},"654":{"position":[[499,2]]},"656":{"position":[[505,2]]},"667":{"position":[[392,2]]},"669":{"position":[[460,2]]},"671":{"position":[[545,2]]},"673":{"position":[[442,2]]},"680":{"position":[[351,2]]},"682":{"position":[[425,2]]},"729":{"position":[[850,2]]},"731":{"position":[[864,2]]},"733":{"position":[[979,2]]},"735":{"position":[[656,2],[1879,2]]},"747":{"position":[[847,2],[2070,2]]}}}],["13:26",{"_index":2707,"t":{"604":{"position":[[419,5]]},"606":{"position":[[400,5]]},"624":{"position":[[413,5]]},"677":{"position":[[385,5]]}}}],["13:26:40",{"_index":2737,"t":{"610":{"position":[[670,8]]},"612":{"position":[[618,8]]},"614":{"position":[[487,8]]},"616":{"position":[[436,8]]},"618":{"position":[[449,8]]},"620":{"position":[[562,8]]},"622":{"position":[[523,8]]},"626":{"position":[[596,8]]},"628":{"position":[[577,8]]},"630":{"position":[[473,8]]},"632":{"position":[[589,8]]},"634":{"position":[[454,8]]},"636":{"position":[[369,8]]},"646":{"position":[[544,8]]},"652":{"position":[[586,8],[2762,8]]},"654":{"position":[[502,8]]},"656":{"position":[[508,8]]},"667":{"position":[[395,8]]},"669":{"position":[[463,8]]},"671":{"position":[[548,8]]},"673":{"position":[[445,8]]},"680":{"position":[[354,8]]},"682":{"position":[[428,8]]},"729":{"position":[[853,8]]},"731":{"position":[[867,8]]},"733":{"position":[[982,8]]}}}],["13:26:44",{"_index":2857,"t":{"735":{"position":[[1882,8]]},"747":{"position":[[2073,8]]}}}],["13:26:50",{"_index":2841,"t":{"735":{"position":[[659,8]]},"747":{"position":[[850,8]]}}}],["13:27",{"_index":2713,"t":{"604":{"position":[[630,5],[912,5],[1194,5],[1476,5]]},"606":{"position":[[611,5],[893,5],[1175,5],[1457,5]]},"624":{"position":[[624,5],[906,5],[1188,5],[1470,5]]},"677":{"position":[[596,5],[878,5],[1160,5],[1442,5]]}}}],["13:28",{"_index":2726,"t":{"604":{"position":[[1758,5],[2040,5]]},"606":{"position":[[1739,5],[2021,5]]},"624":{"position":[[1752,5],[2034,5]]},"677":{"position":[[1724,5],[2006,5]]}}}],["13:47",{"_index":2731,"t":{"604":{"position":[[2322,5]]},"606":{"position":[[2303,5]]},"624":{"position":[[2316,5]]},"677":{"position":[[2288,5]]}}}],["13m",{"_index":1535,"t":{"221":{"position":[[1843,3]]}}}],["13t13:26:40z",{"_index":2745,"t":{"610":{"position":[[737,13]]},"612":{"position":[[685,13]]},"614":{"position":[[554,13]]},"616":{"position":[[503,13]]},"618":{"position":[[516,13]]},"620":{"position":[[629,13]]},"622":{"position":[[590,13]]},"626":{"position":[[663,13]]},"628":{"position":[[644,13]]},"630":{"position":[[540,13]]},"632":{"position":[[656,13]]},"634":{"position":[[521,13]]},"636":{"position":[[436,13]]},"646":{"position":[[611,13]]},"652":{"position":[[653,13],[2829,13]]},"654":{"position":[[569,13]]},"656":{"position":[[575,13]]},"667":{"position":[[462,13]]},"669":{"position":[[530,13]]},"671":{"position":[[615,13]]},"673":{"position":[[512,13]]},"680":{"position":[[421,13]]},"682":{"position":[[495,13]]},"729":{"position":[[920,13]]},"731":{"position":[[934,13]]},"733":{"position":[[1049,13]]}}}],["13t13:26:44z",{"_index":2858,"t":{"735":{"position":[[1949,13]]},"747":{"position":[[2140,13]]}}}],["13t13:26:50z",{"_index":2846,"t":{"735":{"position":[[726,13]]},"747":{"position":[[917,13]]}}}],["14.2",{"_index":1379,"t":{"185":{"position":[[1739,5]]}}}],["1413",{"_index":2229,"t":{"434":{"position":[[595,4]]},"448":{"position":[[356,4]]}}}],["1428",{"_index":2219,"t":{"434":{"position":[[366,4]]},"448":{"position":[[299,4]]}}}],["1450",{"_index":2220,"t":{"434":{"position":[[373,4]]},"448":{"position":[[344,4]]}}}],["1500",{"_index":569,"t":{"35":{"position":[[347,4]]}}}],["1588",{"_index":2225,"t":{"434":{"position":[[505,4]]},"446":{"position":[[306,4]]}}}],["1596",{"_index":2216,"t":{"434":{"position":[[281,4]]},"446":{"position":[[294,4]]}}}],["16",{"_index":2031,"t":{"366":{"position":[[199,2],[223,2]]},"372":{"position":[[305,2],[351,2]]}}}],["1600",{"_index":2706,"t":{"604":{"position":[[412,4]]},"606":{"position":[[393,4]]},"624":{"position":[[406,4]]},"677":{"position":[[378,4]]}}}],["1606",{"_index":2218,"t":{"434":{"position":[[288,4]]},"446":{"position":[[339,4]]}}}],["1613",{"_index":2226,"t":{"434":{"position":[[512,4]]},"446":{"position":[[351,4]]}}}],["1616",{"_index":2705,"t":{"604":{"position":[[407,4]]},"606":{"position":[[388,4]]},"624":{"position":[[401,4]]},"677":{"position":[[373,4]]}}}],["169.254.255.254/31",{"_index":1667,"t":{"266":{"position":[[875,18]]}}}],["169.254.255.255",{"_index":1669,"t":{"266":{"position":[[930,15]]}}}],["1:/etc/rancher/k3s/k3s.yaml",{"_index":747,"t":{"52":{"position":[[876,27]]}}}],["1:2379,https://etcd",{"_index":1398,"t":{"189":{"position":[[1774,19]]}}}],["1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d",{"_index":2732,"t":{"604":{"position":[[2480,64]]},"606":{"position":[[2461,64]]},"624":{"position":[[2474,64]]},"677":{"position":[[2446,64]]}}}],["1s",{"_index":1331,"t":{"179":{"position":[[1351,3]]}}}],["2",{"_index":1194,"t":{"128":{"position":[[627,1],[1306,1]]},"170":{"position":[[226,1]]},"201":{"position":[[326,2],[466,2],[565,2]]},"203":{"position":[[436,2],[500,2],[744,1],[879,2],[965,1],[1057,1],[1104,1],[1245,2],[1324,2],[1693,1],[1829,1],[2496,2],[2774,2],[3141,1],[3278,1]]},"205":{"position":[[533,2],[811,2],[1178,1],[1315,1]]},"215":{"position":[[33,1]]},"243":{"position":[[91,2]]},"303":{"position":[[1491,1]]},"358":{"position":[[146,1]]},"366":{"position":[[150,1]]},"372":{"position":[[258,1],[280,1]]},"378":{"position":[[572,1]]},"458":{"position":[[93,1]]},"540":{"position":[[1313,2]]}}}],["2.1",{"_index":2670,"t":{"579":{"position":[[836,6],[1755,6]]},"650":{"position":[[966,6],[1885,6]]},"685":{"position":[[860,6],[1779,6],[2090,3]]},"687":{"position":[[749,6],[1668,6]]},"689":{"position":[[774,6],[1693,6]]},"691":{"position":[[926,6],[1845,6]]},"693":{"position":[[752,6],[1671,6]]},"695":{"position":[[784,6],[1703,6]]},"697":{"position":[[883,6],[1802,6]]}}}],["2.2",{"_index":2674,"t":{"579":{"position":[[965,6],[1794,6]]},"650":{"position":[[1095,6],[1924,6]]},"685":{"position":[[989,6],[1818,6]]},"687":{"position":[[878,6],[1707,6],[1979,3]]},"689":{"position":[[903,6],[1732,6]]},"691":{"position":[[1055,6],[1884,6]]},"693":{"position":[[881,6],[1710,6]]},"695":{"position":[[913,6],[1742,6]]},"697":{"position":[[1012,6],[1841,6]]}}}],["2.3",{"_index":2675,"t":{"579":{"position":[[1089,6],[1834,6]]},"650":{"position":[[1219,6],[1964,6]]},"685":{"position":[[1113,6],[1858,6]]},"687":{"position":[[1002,6],[1747,6]]},"689":{"position":[[1027,6],[1772,6],[2004,3]]},"691":{"position":[[1179,6],[1924,6]]},"693":{"position":[[1005,6],[1750,6]]},"695":{"position":[[1037,6],[1782,6]]},"697":{"position":[[1136,6],[1881,6]]}}}],["2.4",{"_index":2676,"t":{"579":{"position":[[1165,6],[1856,6]]},"650":{"position":[[1295,6],[1986,6]]},"685":{"position":[[1189,6],[1880,6]]},"687":{"position":[[1078,6],[1769,6]]},"689":{"position":[[1103,6],[1794,6]]},"691":{"position":[[1255,6],[1946,6],[2156,3]]},"693":{"position":[[1081,6],[1772,6]]},"695":{"position":[[1113,6],[1804,6]]},"697":{"position":[[1212,6],[1903,6]]}}}],["2.5",{"_index":2677,"t":{"579":{"position":[[1292,6],[1905,6]]},"650":{"position":[[1422,6],[2035,6]]},"685":{"position":[[1316,6],[1929,6]]},"687":{"position":[[1205,6],[1818,6]]},"689":{"position":[[1230,6],[1843,6]]},"691":{"position":[[1382,6],[1995,6]]},"693":{"position":[[1208,6],[1821,6],[1982,3]]},"695":{"position":[[1240,6],[1853,6]]},"697":{"position":[[1339,6],[1952,6]]}}}],["2.6",{"_index":2678,"t":{"579":{"position":[[1414,6],[1945,6]]},"650":{"position":[[1544,6],[2075,6]]},"685":{"position":[[1438,6],[1969,6]]},"687":{"position":[[1327,6],[1858,6]]},"689":{"position":[[1352,6],[1883,6]]},"691":{"position":[[1504,6],[2035,6]]},"693":{"position":[[1330,6],[1861,6]]},"695":{"position":[[1362,6],[1893,6],[2014,3]]},"697":{"position":[[1461,6],[1992,6]]}}}],["2.7",{"_index":2679,"t":{"579":{"position":[[1495,6],[1983,6]]},"650":{"position":[[1625,6],[2113,6]]},"685":{"position":[[1519,6],[2007,6]]},"687":{"position":[[1408,6],[1896,6]]},"689":{"position":[[1433,6],[1921,6]]},"691":{"position":[[1585,6],[2073,6]]},"693":{"position":[[1411,6],[1899,6]]},"695":{"position":[[1443,6],[1931,6]]},"697":{"position":[[1542,6],[2030,6],[2113,3]]}}}],["2.90",{"_index":2214,"t":{"434":{"position":[[259,4],[344,4],[407,4]]},"442":{"position":[[102,4]]}}}],["2/2",{"_index":285,"t":{"19":{"position":[[1062,3]]}}}],["20",{"_index":1462,"t":{"203":{"position":[[1708,3]]}}}],["20.04",{"_index":1417,"t":{"201":{"position":[[45,6]]}}}],["200",{"_index":1451,"t":{"203":{"position":[[1081,3]]}}}],["2001:cafe:42:0::/56",{"_index":1876,"t":{"319":{"position":[[588,22]]}}}],["2021",{"_index":1195,"t":{"128":{"position":[[691,4]]}}}],["2022",{"_index":668,"t":{"44":{"position":[[629,4]]},"303":{"position":[[2137,4]]}}}],["2023",{"_index":1042,"t":{"108":{"position":[[1494,4]]},"178":{"position":[[130,4]]},"354":{"position":[[112,4]]}}}],["2048",{"_index":1116,"t":{"116":{"position":[[931,4]]}}}],["21.10",{"_index":722,"t":{"50":{"position":[[511,6]]}}}],["22",{"_index":1482,"t":{"203":{"position":[[3156,3]]},"205":{"position":[[1193,3]]}}}],["22.04",{"_index":2257,"t":{"442":{"position":[[42,5]]}}}],["2318",{"_index":2712,"t":{"604":{"position":[[621,4]]},"606":{"position":[[602,4]]},"624":{"position":[[615,4]]},"677":{"position":[[587,4]]}}}],["2341",{"_index":2719,"t":{"604":{"position":[[903,4]]},"606":{"position":[[884,4]]},"624":{"position":[[897,4]]},"677":{"position":[[869,4]]}}}],["2379",{"_index":2010,"t":{"360":{"position":[[773,4]]},"362":{"position":[[49,4]]}}}],["2380",{"_index":2011,"t":{"360":{"position":[[782,5]]},"362":{"position":[[54,4]]}}}],["24h0m0",{"_index":1335,"t":{"179":{"position":[[1417,8]]}}}],["25",{"_index":2227,"t":{"434":{"position":[[574,3]]},"448":{"position":[[201,3]]}}}],["250",{"_index":2030,"t":{"366":{"position":[[193,3]]},"372":{"position":[[299,3]]},"446":{"position":[[467,3]]}}}],["268",{"_index":2230,"t":{"434":{"position":[[649,3],[655,3]]},"450":{"position":[[97,3]]}}}],["275",{"_index":2221,"t":{"434":{"position":[[429,3],[435,3]]},"450":{"position":[[73,3]]}}}],["279",{"_index":633,"t":{"39":{"position":[[908,3]]}}}],["28m",{"_index":1532,"t":{"221":{"position":[[1792,3]]}}}],["2:2379,https://etcd",{"_index":1399,"t":{"189":{"position":[[1799,19]]}}}],["2b1c8278a6a1_0",{"_index":355,"t":{"19":{"position":[[2621,14],[2781,14]]}}}],["2gi",{"_index":2569,"t":{"520":{"position":[[187,3]]},"526":{"position":[[169,3]]}}}],["2m",{"_index":1332,"t":{"179":{"position":[[1355,3]]}}}],["2wz97",{"_index":288,"t":{"19":{"position":[[1111,5]]}}}],["2wz97_kube",{"_index":313,"t":{"19":{"position":[[1703,10],[2020,10]]}}}],["3",{"_index":1111,"t":{"116":{"position":[[792,2]]},"118":{"position":[[1269,1]]},"201":{"position":[[141,1],[348,2],[587,2]]},"203":{"position":[[783,1],[808,2],[1337,2],[1731,1],[1889,1],[2753,2],[2787,2],[3179,1],[3338,1]]},"205":{"position":[[790,2],[824,2],[1216,1],[1375,1]]},"243":{"position":[[202,2]]},"251":{"position":[[256,1],[401,1]]},"303":{"position":[[43,1]]},"434":{"position":[[416,2]]},"450":{"position":[[60,2]]},"540":{"position":[[1397,2]]}}}],["3.5.4",{"_index":1372,"t":{"185":{"position":[[1587,6]]}}}],["30",{"_index":1481,"t":{"203":{"position":[[3118,3]]},"205":{"position":[[1155,3]]},"434":{"position":[[491,3]]},"446":{"position":[[196,3]]},"486":{"position":[[54,2],[114,2],[239,2]]},"640":{"position":[[195,2]]}}}],["300",{"_index":1613,"t":{"247":{"position":[[1760,3]]}}}],["30000",{"_index":1248,"t":{"150":{"position":[[219,6]]},"162":{"position":[[1682,6]]}}}],["3117",{"_index":655,"t":{"44":{"position":[[210,5]]}}}],["3199",{"_index":2721,"t":{"604":{"position":[[1185,4]]},"606":{"position":[[1166,4]]},"624":{"position":[[1179,4]]},"677":{"position":[[1151,4]]}}}],["32",{"_index":1460,"t":{"203":{"position":[[1670,3]]},"366":{"position":[[226,2],[246,2]]},"372":{"position":[[331,2]]}}}],["32767",{"_index":1249,"t":{"150":{"position":[[226,6]]},"162":{"position":[[1689,7]]},"610":{"position":[[2651,5]]},"612":{"position":[[2599,5]]},"614":{"position":[[2468,5]]},"616":{"position":[[2417,5]]},"618":{"position":[[2430,5]]},"620":{"position":[[2543,5]]},"622":{"position":[[2504,5]]},"626":{"position":[[2577,5]]},"628":{"position":[[2558,5]]},"630":{"position":[[2454,5]]},"632":{"position":[[2570,5]]},"634":{"position":[[2435,5]]},"636":{"position":[[2350,5]]},"646":{"position":[[2525,5]]},"652":{"position":[[2567,5]]},"654":{"position":[[2483,5]]},"656":{"position":[[2489,5]]},"729":{"position":[[2834,5]]},"731":{"position":[[2848,5]]},"733":{"position":[[2963,5]]}}}],["365",{"_index":149,"t":{"13":{"position":[[49,3]]},"104":{"position":[[49,3]]}}}],["3923",{"_index":2723,"t":{"604":{"position":[[1467,4]]},"606":{"position":[[1448,4]]},"624":{"position":[[1461,4]]},"677":{"position":[[1433,4]]}}}],["3:2379",{"_index":1400,"t":{"189":{"position":[[1824,6]]}}}],["3e4d34729602",{"_index":293,"t":{"19":{"position":[[1254,12]]}}}],["3h",{"_index":1333,"t":{"179":{"position":[[1359,4]]}}}],["3m12",{"_index":1467,"t":{"203":{"position":[[1923,5]]}}}],["3m16",{"_index":1485,"t":{"203":{"position":[[3372,5]]},"205":{"position":[[1409,5]]}}}],["3m58",{"_index":1466,"t":{"203":{"position":[[1863,5],[3312,5]]},"205":{"position":[[1349,5]]}}}],["4",{"_index":1300,"t":{"170":{"position":[[228,1]]},"217":{"position":[[507,1]]},"243":{"position":[[278,2]]},"366":{"position":[[152,1],[174,1]]},"372":{"position":[[303,1]]},"442":{"position":[[95,1],[165,1],[184,1]]},"540":{"position":[[1645,2]]}}}],["4.2.1",{"_index":2457,"t":{"476":{"position":[[3088,5]]}}}],["4.2.10",{"_index":2490,"t":{"476":{"position":[[4281,6],[4360,6]]}}}],["4.2.2",{"_index":2460,"t":{"476":{"position":[[3161,5]]}}}],["4.2.3",{"_index":2463,"t":{"476":{"position":[[3252,5]]}}}],["4.2.4",{"_index":2484,"t":{"476":{"position":[[4093,5]]}}}],["4.2.6",{"_index":2483,"t":{"476":{"position":[[4066,5]]}}}],["400",{"_index":2830,"t":{"720":{"position":[[317,5]]}}}],["410a",{"_index":353,"t":{"19":{"position":[[2611,4],[2771,4]]}}}],["4206",{"_index":316,"t":{"19":{"position":[[1735,4],[2052,4]]}}}],["43",{"_index":286,"t":{"19":{"position":[[1076,3],[1131,3]]}}}],["4367",{"_index":2852,"t":{"735":{"position":[[1506,4]]},"747":{"position":[[1697,4]]}}}],["436b85c5e38d",{"_index":309,"t":{"19":{"position":[[1575,12]]}}}],["440",{"_index":2829,"t":{"720":{"position":[[297,5]]}}}],["443",{"_index":2112,"t":{"404":{"position":[[272,4]]},"416":{"position":[[466,3],[637,3]]}}}],["443_svclb",{"_index":299,"t":{"19":{"position":[[1337,9]]}}}],["444",{"_index":2828,"t":{"720":{"position":[[277,5]]}}}],["4454d14e4d3f",{"_index":346,"t":{"19":{"position":[[2463,12]]}}}],["4559",{"_index":2725,"t":{"604":{"position":[[1749,4]]},"606":{"position":[[1730,4]]},"624":{"position":[[1743,4]]},"677":{"position":[[1715,4]]}}}],["4647",{"_index":2728,"t":{"604":{"position":[[2031,4]]},"606":{"position":[[2012,4]]},"624":{"position":[[2025,4]]},"677":{"position":[[1997,4]]}}}],["47ef",{"_index":343,"t":{"19":{"position":[[2438,4]]}}}],["48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9",{"_index":2729,"t":{"604":{"position":[[2198,64]]},"606":{"position":[[2179,64]]},"624":{"position":[[2192,64]]},"677":{"position":[[2164,64]]}}}],["4b1fddbe6ca6",{"_index":358,"t":{"19":{"position":[[2796,12]]}}}],["4bea",{"_index":333,"t":{"19":{"position":[[2255,4],[2946,4]]}}}],["4c10",{"_index":2861,"t":{"735":{"position":[[2729,4]]},"747":{"position":[[2920,4]]}}}],["4c7e",{"_index":303,"t":{"19":{"position":[[1387,4],[1550,4],[1891,4]]}}}],["4fb1",{"_index":352,"t":{"19":{"position":[[2606,4],[2766,4]]}}}],["4k",{"_index":1980,"t":{"354":{"position":[[230,2]]}}}],["4m22",{"_index":1465,"t":{"203":{"position":[[1803,5]]}}}],["4m49",{"_index":1484,"t":{"203":{"position":[[3252,5]]},"205":{"position":[[1289,5]]}}}],["5",{"_index":110,"t":{"6":{"position":[[191,1]]},"118":{"position":[[261,1],[2139,1],[2149,3],[2254,2],[4777,4]]},"124":{"position":[[567,2],[1557,2]]},"135":{"position":[[874,1],[885,2],[993,2]]},"162":{"position":[[4739,1],[4750,3],[4864,2]]},"203":{"position":[[1303,2]]},"243":{"position":[[329,2]]},"434":{"position":[[353,2]]},"446":{"position":[[473,1]]},"448":{"position":[[183,2]]},"450":{"position":[[84,2]]},"540":{"position":[[1782,2]]},"579":{"position":[[858,1],[987,1],[1187,1],[1314,1]]},"650":{"position":[[988,1],[1117,1],[1317,1],[1444,1]]},"685":{"position":[[882,1],[1011,1],[1211,1],[1338,1]]},"687":{"position":[[771,1],[900,1],[1100,1],[1227,1]]},"689":{"position":[[796,1],[925,1],[1125,1],[1252,1]]},"691":{"position":[[948,1],[1077,1],[1277,1],[1404,1]]},"693":{"position":[[774,1],[903,1],[1103,1],[1230,1]]},"695":{"position":[[806,1],[935,1],[1135,1],[1262,1]]},"697":{"position":[[905,1],[1034,1],[1234,1],[1361,1]]}}}],["5.2",{"_index":2322,"t":{"468":{"position":[[1296,3]]}}}],["5.2.1",{"_index":2324,"t":{"468":{"position":[[1475,5]]}}}],["5.2.2",{"_index":2339,"t":{"468":{"position":[[1787,5]]}}}],["5.2.3",{"_index":2337,"t":{"468":{"position":[[1758,5]]}}}],["5.2.4",{"_index":2335,"t":{"468":{"position":[[1729,5]]}}}],["5.2.5",{"_index":2326,"t":{"468":{"position":[[1521,5]]}}}],["5.2.6",{"_index":2342,"t":{"468":{"position":[[1837,5]]}}}],["5.2.7/8/9",{"_index":2328,"t":{"468":{"position":[[1561,9]]}}}],["5.7",{"_index":1373,"t":{"185":{"position":[[1628,3]]}}}],["50",{"_index":2270,"t":{"446":{"position":[[464,2]]}}}],["500",{"_index":2033,"t":{"366":{"position":[[219,3],[241,4]]},"372":{"position":[[325,3],[346,4]]},"446":{"position":[[438,3]]}}}],["51",{"_index":273,"t":{"19":{"position":[[851,3],[913,3],[972,3],[1026,3]]},"203":{"position":[[1124,2]]}}}],["512",{"_index":1992,"t":{"358":{"position":[[158,3]]}}}],["515",{"_index":418,"t":{"25":{"position":[[374,3],[394,3]]}}}],["51820",{"_index":2005,"t":{"360":{"position":[[173,5]]},"362":{"position":[[291,5]]}}}],["51821",{"_index":2006,"t":{"360":{"position":[[183,5]]},"362":{"position":[[367,5]]}}}],["53",{"_index":2371,"t":{"470":{"position":[[810,2],[835,2]]}}}],["5489f84d5d",{"_index":1926,"t":{"332":{"position":[[871,10]]}}}],["5497",{"_index":2851,"t":{"735":{"position":[[1501,4]]},"747":{"position":[[1692,4]]}}}],["5h39m",{"_index":2045,"t":{"378":{"position":[[542,5],[601,5]]}}}],["5m0",{"_index":1227,"t":{"135":{"position":[[1724,5]]},"162":{"position":[[5683,5]]}}}],["5s",{"_index":1438,"t":{"203":{"position":[[688,2]]}}}],["6",{"_index":1456,"t":{"203":{"position":[[1196,2]]},"434":{"position":[[268,2]]},"446":{"position":[[178,2]]},"604":{"position":[[417,1]]},"606":{"position":[[398,1]]},"624":{"position":[[411,1]]},"677":{"position":[[383,1]]}}}],["6.4",{"_index":782,"t":{"59":{"position":[[184,4]]}}}],["60",{"_index":2512,"t":{"492":{"position":[[244,2],[411,2],[643,2]]}}}],["600",{"_index":1238,"t":{"139":{"position":[[298,4]]},"283":{"position":[[668,3]]},"583":{"position":[[148,3]]},"599":{"position":[[141,3]]},"720":{"position":[[250,5],[268,5],[374,3]]}}}],["620c90a6c1c1_0",{"_index":335,"t":{"19":{"position":[[2265,14],[2956,14]]}}}],["64",{"_index":2035,"t":{"366":{"position":[[249,2]]},"372":{"position":[[354,2]]}}}],["640",{"_index":2827,"t":{"720":{"position":[[230,5]]}}}],["644",{"_index":1239,"t":{"139":{"position":[[324,3]]},"285":{"position":[[535,3]]},"559":{"position":[[148,3]]},"563":{"position":[[148,3]]},"567":{"position":[[148,3]]},"571":{"position":[[148,3]]},"575":{"position":[[148,3]]},"587":{"position":[[138,3],[369,4],[383,3]]},"591":{"position":[[138,3],[379,4],[393,3]]},"597":{"position":[[141,3]]},"708":{"position":[[146,3]]},"712":{"position":[[136,3],[380,3],[384,3]]},"716":{"position":[[136,3],[271,5],[289,5],[311,3],[315,3]]},"720":{"position":[[114,3],[210,5],[370,3]]},"724":{"position":[[130,3]]}}}],["6443",{"_index":506,"t":{"31":{"position":[[327,4]]},"75":{"position":[[298,5]]},"144":{"position":[[97,4]]},"162":{"position":[[826,5]]},"203":{"position":[[530,6],[2462,5]]},"205":{"position":[[499,5]]},"360":{"position":[[26,4]]},"362":{"position":[[119,4]]}}}],["6443/tcp",{"_index":698,"t":{"48":{"position":[[161,8]]}}}],["6443:6443",{"_index":735,"t":{"52":{"position":[[540,9]]},"203":{"position":[[2639,9]]},"205":{"position":[[676,9]]}}}],["6444",{"_index":984,"t":{"87":{"position":[[683,5]]},"101":{"position":[[1939,5]]},"162":{"position":[[9041,5]]}}}],["6488",{"_index":527,"t":{"31":{"position":[[986,5]]}}}],["64d3517d4a95",{"_index":360,"t":{"19":{"position":[[2971,12]]}}}],["64ffb68fd",{"_index":1923,"t":{"332":{"position":[[810,9]]}}}],["65535",{"_index":2347,"t":{"468":{"position":[[1929,5],[1984,5],[3014,5],[3069,5],[3427,5],[3901,5]]}}}],["6610",{"_index":2730,"t":{"604":{"position":[[2313,4]]},"606":{"position":[[2294,4]]},"624":{"position":[[2307,4]]},"677":{"position":[[2279,4]]}}}],["6ad9",{"_index":332,"t":{"19":{"position":[[2250,4],[2941,4]]}}}],["6b82a38edd8f",{"_index":2863,"t":{"735":{"position":[[2739,12]]},"747":{"position":[[2930,12]]}}}],["6d59f47c7",{"_index":269,"t":{"19":{"position":[[821,9],[2213,9],[2904,9]]}}}],["700",{"_index":2386,"t":{"472":{"position":[[416,3]]},"579":{"position":[[242,3],[1693,7],[2090,5],[2108,5],[2130,3]]},"650":{"position":[[1823,7]]},"685":{"position":[[1717,7]]},"687":{"position":[[1606,7]]},"689":{"position":[[1631,7]]},"691":{"position":[[1783,7]]},"693":{"position":[[1609,7]]},"695":{"position":[[1641,7]]},"697":{"position":[[1740,7]]}}}],["74",{"_index":1925,"t":{"332":{"position":[[840,3],[902,3],[956,3]]}}}],["7566d596c8",{"_index":275,"t":{"19":{"position":[[882,10],[2395,10]]}}}],["758cd5fc85",{"_index":287,"t":{"19":{"position":[[1100,10],[1692,10],[2009,10]]}}}],["76",{"_index":781,"t":{"59":{"position":[[146,3]]}}}],["777",{"_index":1745,"t":{"283":{"position":[[756,3],[902,3]]}}}],["7c6a30aeeb2f",{"_index":323,"t":{"19":{"position":[[1916,12]]}}}],["7c9ca4fb39e7_0",{"_index":318,"t":{"19":{"position":[[1745,14],[2062,14]]}}}],["7zwkt",{"_index":1927,"t":{"332":{"position":[[882,5]]}}}],["8",{"_index":2029,"t":{"366":{"position":[[176,1],[197,1]]},"372":{"position":[[282,1],[329,1]]},"424":{"position":[[967,1]]},"442":{"position":[[111,1],[200,1]]}}}],["8.0",{"_index":1374,"t":{"185":{"position":[[1636,4]]}}}],["80",{"_index":511,"t":{"31":{"position":[[429,2]]},"61":{"position":[[737,2]]},"404":{"position":[[265,2]]},"410":{"position":[[838,3],[909,3]]},"522":{"position":[[235,2]]},"528":{"position":[[235,2]]}}}],["8080",{"_index":514,"t":{"31":{"position":[[467,4],[484,4]]}}}],["80_svclb",{"_index":308,"t":{"19":{"position":[[1501,8]]}}}],["8375c",{"_index":2213,"t":{"434":{"position":[[248,5],[333,5],[396,5]]},"442":{"position":[[84,5]]},"446":{"position":[[172,5],[288,5],[333,5]]},"448":{"position":[[177,5],[293,5],[338,5]]},"450":{"position":[[54,5]]}}}],["8472",{"_index":2004,"t":{"360":{"position":[[123,4],[996,5]]},"362":{"position":[[184,4]]}}}],["85cb69466",{"_index":1928,"t":{"332":{"position":[[926,9]]}}}],["8655855d6",{"_index":281,"t":{"19":{"position":[[996,9],[2569,9],[2729,9]]}}}],["897ce3c5fc8f",{"_index":294,"t":{"19":{"position":[[1267,12]]}}}],["89f5",{"_index":2860,"t":{"735":{"position":[[2724,4]]},"747":{"position":[[2915,4]]}}}],["8c7f",{"_index":2862,"t":{"735":{"position":[[2734,4]]},"747":{"position":[[2925,4]]}}}],["8d7a",{"_index":304,"t":{"19":{"position":[[1392,4],[1555,4],[1896,4]]}}}],["8e7ac18f9cb0_0",{"_index":305,"t":{"19":{"position":[[1397,14],[1560,14],[1901,14]]}}}],["8e82",{"_index":354,"t":{"19":{"position":[[2616,4],[2776,4]]}}}],["9",{"_index":1910,"t":{"326":{"position":[[1236,4],[1269,4],[1288,8]]}}}],["90",{"_index":155,"t":{"13":{"position":[[132,2]]},"104":{"position":[[132,2]]}}}],["90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528",{"_index":2722,"t":{"604":{"position":[[1352,64]]},"606":{"position":[[1333,64]]},"624":{"position":[[1346,64]]},"677":{"position":[[1318,64]]}}}],["95th",{"_index":2253,"t":{"440":{"position":[[569,4]]}}}],["98604672",{"_index":2843,"t":{"735":{"position":[[686,8],[1382,8]]},"747":{"position":[[877,8],[1573,8]]}}}],["9])?(\\\\.[a",{"_index":1912,"t":{"326":{"position":[[1255,10]]}}}],["9]*[a",{"_index":1911,"t":{"326":{"position":[[1246,5],[1279,5]]}}}],["9]{16",{"_index":1341,"t":{"179":{"position":[[2024,8]]}}}],["9]{6}.[a",{"_index":1340,"t":{"179":{"position":[[2012,8]]}}}],["9d12f9848b99",{"_index":326,"t":{"19":{"position":[[2090,12]]}}}],["9dd718864ce6",{"_index":337,"t":{"19":{"position":[[2293,12]]}}}],["9s",{"_index":1463,"t":{"203":{"position":[[1746,2]]}}}],["9tnck",{"_index":276,"t":{"19":{"position":[[893,5]]}}}],["9tnck_kube",{"_index":340,"t":{"19":{"position":[[2406,10]]}}}],["_desired_",{"_index":2087,"t":{"398":{"position":[[2476,9]]}}}],["a+x",{"_index":1719,"t":{"279":{"position":[[511,3]]}}}],["a1",{"_index":2776,"t":{"652":{"position":[[438,2]]}}}],["a70c",{"_index":2853,"t":{"735":{"position":[[1511,4]]},"747":{"position":[[1702,4]]}}}],["a73d",{"_index":334,"t":{"19":{"position":[[2260,4],[2951,4]]}}}],["a88d",{"_index":344,"t":{"19":{"position":[[2443,4]]}}}],["aarch64",{"_index":2262,"t":{"442":{"position":[[125,7]]}}}],["aarch64/arm64",{"_index":1979,"t":{"354":{"position":[[189,13]]}}}],["abil",{"_index":1041,"t":{"108":{"position":[[1407,7]]},"178":{"position":[[55,7]]},"185":{"position":[[4,7]]},"482":{"position":[[196,7]]},"518":{"position":[[69,7]]}}}],["abort",{"_index":1616,"t":{"247":{"position":[[1849,5],[1888,8]]}}}],["abov",{"_index":466,"t":{"25":{"position":[[1664,6]]},"112":{"position":[[947,5]]},"128":{"position":[[1283,6]]},"168":{"position":[[1034,6]]},"189":{"position":[[1835,5]]},"193":{"position":[[275,7]]},"223":{"position":[[291,6]]},"266":{"position":[[97,5]]},"279":{"position":[[1490,6]]},"285":{"position":[[11,5]]},"311":{"position":[[1007,5]]},"330":{"position":[[42,6]]},"468":{"position":[[2028,5],[2361,5]]},"498":{"position":[[350,6]]},"579":{"position":[[215,7]]},"581":{"position":[[225,7]]}}}],["abus",{"_index":2020,"t":{"360":{"position":[[1136,5]]}}}],["accept",{"_index":1036,"t":{"108":{"position":[[1040,11]]},"189":{"position":[[1902,6]]},"313":{"position":[[262,9]]},"482":{"position":[[314,8]]}}}],["access",{"_index":503,"t":{"31":{"position":[[167,6]]},"35":{"position":[[900,6]]},"39":{"position":[[851,6]]},"118":{"position":[[3189,6],[3203,6],[3507,6],[3522,6],[3849,6],[3864,6],[4642,6],[4657,6]]},"135":{"position":[[1357,6],[1395,6]]},"150":{"position":[[1099,6],[1368,6]]},"162":{"position":[[5287,6],[5312,6]]},"174":{"position":[[354,6],[416,6]]},"181":{"position":[[77,6]]},"199":{"position":[[561,6]]},"203":{"position":[[297,6]]},"217":{"position":[[665,9],[1081,6]]},"245":{"position":[[539,6]]},"247":{"position":[[2172,8]]},"251":{"position":[[383,7]]},"253":{"position":[[414,6]]},"295":{"position":[[3,6],[122,10],[300,6],[390,6]]},"309":{"position":[[964,6],[1227,6]]},"317":{"position":[[821,6]]},"319":{"position":[[482,6]]},"360":{"position":[[37,10],[615,10],[739,10],[899,8],[981,6]]},"470":{"position":[[1041,7]]},"472":{"position":[[316,6]]},"482":{"position":[[207,7],[448,6],[501,6]]},"502":{"position":[[149,7]]},"506":{"position":[[216,6]]},"705":{"position":[[131,6]]},"758":{"position":[[69,6]]},"762":{"position":[[56,6]]},"764":{"position":[[108,6]]}}}],["accessmod",{"_index":2566,"t":{"520":{"position":[[99,12]]},"526":{"position":[[83,12]]}}}],["accompani",{"_index":2639,"t":{"555":{"position":[[980,12]]}}}],["accomplish",{"_index":1679,"t":{"271":{"position":[[40,12]]},"456":{"position":[[193,12]]}}}],["accord",{"_index":776,"t":{"59":{"position":[[87,9]]},"398":{"position":[[2166,10]]},"555":{"position":[[963,9]]}}}],["accordingli",{"_index":690,"t":{"46":{"position":[[586,12]]},"48":{"position":[[467,12]]},"536":{"position":[[677,12]]}}}],["account",{"_index":780,"t":{"59":{"position":[[133,8]]},"110":{"position":[[1121,7]]},"112":{"position":[[1705,7],[1751,7]]},"116":{"position":[[12,7],[74,7],[116,7],[213,7],[604,7]]},"174":{"position":[[742,7]]},"319":{"position":[[253,7]]},"398":{"position":[[999,7],[1099,7]]},"474":{"position":[[563,7],[663,7],[1186,7],[1286,7]]},"476":{"position":[[1573,7],[1602,7],[1682,7],[2723,7],[2814,7]]},"494":{"position":[[26,7],[90,7],[229,7],[325,7],[376,7]]},"506":{"position":[[28,8],[109,7],[178,7],[288,7],[363,8],[392,7],[461,7],[633,7],[680,8],[862,8]]},"538":{"position":[[116,8]]},"555":{"position":[[784,8]]},"610":{"position":[[2369,7],[2439,7],[2510,7]]},"612":{"position":[[2317,7],[2387,7],[2458,7]]},"614":{"position":[[2186,7],[2256,7],[2327,7]]},"616":{"position":[[2135,7],[2205,7],[2276,7]]},"618":{"position":[[2148,7],[2218,7],[2289,7]]},"620":{"position":[[2261,7],[2331,7],[2402,7]]},"622":{"position":[[2222,7],[2292,7],[2363,7]]},"626":{"position":[[2295,7],[2365,7],[2436,7]]},"628":{"position":[[2276,7],[2346,7],[2417,7]]},"630":{"position":[[2172,7],[2242,7],[2313,7]]},"632":{"position":[[2288,7],[2358,7],[2429,7]]},"634":{"position":[[2153,7],[2223,7],[2294,7]]},"636":{"position":[[2068,7],[2138,7],[2209,7]]},"646":{"position":[[180,7],[244,7],[449,7],[494,7],[2243,7],[2313,7],[2384,7]]},"648":{"position":[[173,7],[235,9],[268,7]]},"652":{"position":[[2285,7],[2355,7],[2426,7]]},"654":{"position":[[2201,7],[2271,7],[2342,7]]},"656":{"position":[[2207,7],[2277,7],[2348,7]]},"667":{"position":[[1869,7],[1992,7]]},"669":{"position":[[200,7],[342,7],[395,7],[1937,7],[2060,7]]},"671":{"position":[[180,7],[251,9],[284,7],[434,7],[488,7],[2022,7],[2145,7]]},"673":{"position":[[1919,7],[2042,7]]},"729":{"position":[[2552,7],[2622,7],[2693,7]]},"731":{"position":[[2566,7],[2636,7],[2707,7]]},"733":{"position":[[2681,7],[2751,7],[2822,7]]},"764":{"position":[[50,8],[194,7]]},"766":{"position":[[68,8],[112,7]]}}}],["acct",{"_index":2106,"t":{"398":{"position":[[3932,4]]},"468":{"position":[[5312,4]]}}}],["accumul",{"_index":648,"t":{"44":{"position":[[99,12]]},"283":{"position":[[495,11]]}}}],["achiev",{"_index":1850,"t":{"315":{"position":[[186,7]]},"360":{"position":[[670,9]]},"516":{"position":[[138,7]]}}}],["acl",{"_index":1881,"t":{"319":{"position":[[1083,4]]}}}],["action",{"_index":848,"t":{"65":{"position":[[92,7]]},"482":{"position":[[145,7]]},"760":{"position":[[121,8]]}}}],["activ",{"_index":1190,"t":{"128":{"position":[[317,6],[629,6],[1553,7],[1652,6]]},"330":{"position":[[196,8]]},"484":{"position":[[181,10]]},"500":{"position":[[508,8]]},"506":{"position":[[45,8]]},"516":{"position":[[723,8]]}}}],["actual",{"_index":1323,"t":{"179":{"position":[[552,6]]},"494":{"position":[[271,8]]},"579":{"position":[[352,8]]},"650":{"position":[[482,8]]},"685":{"position":[[376,8]]},"687":{"position":[[265,8]]},"689":{"position":[[290,8]]},"691":{"position":[[442,8]]},"693":{"position":[[268,8]]},"695":{"position":[[300,8]]},"697":{"position":[[399,8]]}}}],["ad",{"_index":55,"t":{"4":{"position":[[450,6]]},"65":{"position":[[355,6]]},"75":{"position":[[648,5]]},"99":{"position":[[209,5]]},"118":{"position":[[2810,5]]},"122":{"position":[[173,6]]},"213":{"position":[[355,6]]},"215":{"position":[[377,5],[1016,6]]},"221":{"position":[[302,6],[390,6]]},"273":{"position":[[907,5]]},"380":{"position":[[13,5]]},"414":{"position":[[0,6]]},"454":{"position":[[624,6]]},"460":{"position":[[814,6]]},"472":{"position":[[1098,5]]},"512":{"position":[[135,6]]},"791":{"position":[[202,6]]}}}],["add",{"_index":204,"t":{"17":{"position":[[746,3]]},"25":{"position":[[637,3],[781,3]]},"35":{"position":[[233,3]]},"39":{"position":[[82,4],[142,3],[1007,3],[1121,3]]},"46":{"position":[[187,3],[258,3],[330,3]]},"63":{"position":[[130,3]]},"99":{"position":[[82,4],[142,3],[313,3],[584,3]]},"144":{"position":[[364,3]]},"162":{"position":[[1138,3]]},"203":{"position":[[439,3],[811,3]]},"217":{"position":[[940,4]]},"223":{"position":[[253,3]]},"266":{"position":[[774,3],[819,3],[871,3],[914,3]]},"268":{"position":[[249,3]]},"311":{"position":[[334,3]]},"317":{"position":[[305,3]]},"319":{"position":[[784,3]]},"352":{"position":[[311,3]]},"380":{"position":[[125,3]]},"398":{"position":[[359,3]]},"416":{"position":[[72,3]]},"428":{"position":[[852,3],[920,3],[1013,3]]},"464":{"position":[[320,3]]},"533":{"position":[[511,3]]},"749":{"position":[[85,3]]},"775":{"position":[[26,3]]},"777":{"position":[[26,3]]},"779":{"position":[[26,3]]},"781":{"position":[[26,3]]},"783":{"position":[[26,3]]},"787":{"position":[[26,3]]},"793":{"position":[[26,3]]},"795":{"position":[[26,3]]},"797":{"position":[[26,3]]}}}],["addit",{"_index":686,"t":{"46":{"position":[[386,10]]},"48":{"position":[[267,10]]},"77":{"position":[[36,10],[257,8]]},"87":{"position":[[577,10]]},"101":{"position":[[1833,10]]},"108":{"position":[[802,10]]},"118":{"position":[[4465,10],[4812,10]]},"144":{"position":[[368,10]]},"162":{"position":[[1142,10],[8935,10]]},"172":{"position":[[83,10]]},"191":{"position":[[93,8]]},"201":{"position":[[367,10],[487,10]]},"215":{"position":[[55,10],[341,10]]},"217":{"position":[[948,10]]},"221":{"position":[[1128,10],[2032,10],[2075,10]]},"223":{"position":[[257,10]]},"235":{"position":[[986,10]]},"243":{"position":[[127,10]]},"249":{"position":[[335,10],[403,10]]},"268":{"position":[[253,10]]},"281":{"position":[[45,8]]},"303":{"position":[[445,10],[527,10],[1357,10],[1645,10],[1909,10]]},"311":{"position":[[1445,10]]},"326":{"position":[[14,10],[1349,10]]},"330":{"position":[[52,8],[79,10]]},"356":{"position":[[166,10]]},"362":{"position":[[483,10],[564,10]]},"376":{"position":[[277,10],[378,10]]},"394":{"position":[[248,10]]},"404":{"position":[[784,10]]},"408":{"position":[[628,10]]},"428":{"position":[[403,10],[856,10],[924,10],[986,10]]},"430":{"position":[[132,10]]},"440":{"position":[[379,10]]},"454":{"position":[[278,10],[631,10]]},"468":{"position":[[2219,10],[2249,10],[6425,9]]},"470":{"position":[[2697,10]]},"476":{"position":[[4367,10]]},"533":{"position":[[515,10]]},"540":{"position":[[152,10]]},"689":{"position":[[2245,10],[2485,10],[2725,10]]},"695":{"position":[[2290,10]]}}}],["addition",{"_index":1429,"t":{"203":{"position":[[208,13]]},"268":{"position":[[1292,12]]},"307":{"position":[[1381,13]]},"394":{"position":[[163,13]]}}}],["additionalloggingsources.k3s.enabled=tru",{"_index":844,"t":{"63":{"position":[[383,41]]}}}],["addon",{"_index":1583,"t":{"245":{"position":[[750,5]]},"322":{"position":[[334,5],[510,6]]},"324":{"position":[[68,6],[272,5]]},"326":{"position":[[79,6],[341,5],[1360,5],[1499,5]]},"330":{"position":[[4,6],[64,6],[185,6]]},"332":{"position":[[263,5]]}}}],["addon.k3s.cattle.io",{"_index":1897,"t":{"326":{"position":[[929,19]]}}}],["addr",{"_index":1666,"t":{"266":{"position":[[866,4]]}}}],["address",{"_index":214,"t":{"17":{"position":[[883,7]]},"35":{"position":[[808,7],[931,7]]},"59":{"position":[[213,7]]},"73":{"position":[[129,8]]},"75":{"position":[[463,8],[550,9]]},"91":{"position":[[71,7],[142,7]]},"101":{"position":[[2687,9],[2785,9]]},"144":{"position":[[32,7],[63,7],[132,7],[176,7],[402,9]]},"150":{"position":[[697,9],[1281,10],[1630,10],[1887,10]]},"162":{"position":[[700,7],[734,7],[844,7],[874,7],[1176,9],[2237,9],[7748,9],[7846,9]]},"199":{"position":[[514,7]]},"207":{"position":[[616,7]]},"213":{"position":[[805,7]]},"217":{"position":[[567,9]]},"219":{"position":[[403,8]]},"221":{"position":[[927,7],[1315,7],[1618,7]]},"303":{"position":[[1153,9]]},"311":{"position":[[195,9]]},"317":{"position":[[878,10]]},"390":{"position":[[114,9]]},"410":{"position":[[348,7],[521,7]]},"420":{"position":[[217,7]]},"436":{"position":[[36,7]]},"460":{"position":[[149,7]]},"478":{"position":[[209,9]]},"604":{"position":[[854,7],[1136,7],[1418,7],[1700,7],[1982,7],[2264,7],[2546,7]]},"606":{"position":[[835,7],[1117,7],[1399,7],[1681,7],[1963,7],[2245,7],[2527,7]]},"610":{"position":[[1842,7]]},"612":{"position":[[1790,7]]},"614":{"position":[[1659,7]]},"616":{"position":[[1608,7]]},"618":{"position":[[1621,7]]},"620":{"position":[[1734,7]]},"622":{"position":[[1695,7]]},"624":{"position":[[848,7],[1130,7],[1412,7],[1694,7],[1976,7],[2258,7],[2540,7]]},"626":{"position":[[1768,7]]},"628":{"position":[[1749,7]]},"630":{"position":[[1645,7]]},"632":{"position":[[1761,7]]},"634":{"position":[[1626,7]]},"636":{"position":[[1541,7]]},"646":{"position":[[1716,7]]},"652":{"position":[[1758,7]]},"654":{"position":[[1674,7]]},"656":{"position":[[1680,7]]},"677":{"position":[[202,7],[297,8],[328,8],[820,7],[1102,7],[1384,7],[1666,7],[1948,7],[2230,7],[2512,7]]},"682":{"position":[[184,7],[303,8],[337,8],[381,8]]},"729":{"position":[[2025,7]]},"731":{"position":[[2039,7]]},"733":{"position":[[2154,7]]}}}],["address:6443",{"_index":1517,"t":{"219":{"position":[[514,12]]}}}],["address=0.0.0.0",{"_index":2456,"t":{"476":{"position":[[3047,15]]},"735":{"position":[[774,15],[1997,15]]},"747":{"position":[[965,15],[2188,15]]}}}],["address=127.0.0.1",{"_index":2405,"t":{"476":{"position":[[326,17],[2268,17],[2320,17],[2864,17],[2889,17],[3809,17]]},"610":{"position":[[995,17]]},"612":{"position":[[943,17]]},"614":{"position":[[812,17]]},"616":{"position":[[761,17]]},"618":{"position":[[774,17]]},"620":{"position":[[887,17]]},"622":{"position":[[848,17]]},"626":{"position":[[921,17]]},"628":{"position":[[902,17]]},"630":{"position":[[798,17]]},"632":{"position":[[914,17]]},"634":{"position":[[779,17]]},"636":{"position":[[694,17]]},"646":{"position":[[869,17]]},"652":{"position":[[911,17],[3052,17]]},"654":{"position":[[827,17]]},"656":{"position":[[833,17]]},"667":{"position":[[723,17]]},"669":{"position":[[791,17]]},"671":{"position":[[876,17]]},"673":{"position":[[773,17]]},"680":{"position":[[644,17]]},"682":{"position":[[718,17]]},"729":{"position":[[1178,17]]},"731":{"position":[[1192,17]]},"733":{"position":[[1307,17]]},"735":{"position":[[1326,17],[2549,17]]},"747":{"position":[[1517,17],[2740,17]]}}}],["address=172.31.0.140",{"_index":2748,"t":{"610":{"position":[[802,20]]},"612":{"position":[[750,20]]},"614":{"position":[[619,20]]},"616":{"position":[[568,20]]},"618":{"position":[[581,20]]},"620":{"position":[[694,20]]},"622":{"position":[[655,20]]},"626":{"position":[[728,20]]},"628":{"position":[[709,20]]},"630":{"position":[[605,20]]},"632":{"position":[[721,20]]},"634":{"position":[[586,20]]},"636":{"position":[[501,20]]},"646":{"position":[[676,20]]},"652":{"position":[[718,20]]},"654":{"position":[[634,20]]},"656":{"position":[[640,20]]},"729":{"position":[[985,20]]},"731":{"position":[[999,20]]},"733":{"position":[[1114,20]]}}}],["adher",{"_index":1891,"t":{"326":{"position":[[543,6]]}}}],["adjust",{"_index":2642,"t":{"555":{"position":[[1866,6]]}}}],["admin",{"_index":743,"t":{"52":{"position":[[796,5]]},"106":{"position":[[384,6]]},"139":{"position":[[116,5]]},"162":{"position":[[2554,5]]},"291":{"position":[[15,5],[225,5],[380,5],[468,5],[513,5],[567,5]]},"293":{"position":[[86,5],[154,5]]},"295":{"position":[[259,5]]},"756":{"position":[[74,5],[301,5]]}}}],["administr",{"_index":481,"t":{"27":{"position":[[601,14]]},"172":{"position":[[143,14]]},"174":{"position":[[402,13]]},"195":{"position":[[107,13]]},"245":{"position":[[173,14]]},"291":{"position":[[58,14]]},"484":{"position":[[239,14]]}}}],["admiss",{"_index":2059,"t":{"398":{"position":[[341,9],[396,10],[694,10]]},"460":{"position":[[858,9]]},"466":{"position":[[537,9]]},"468":{"position":[[73,10],[1030,9]]},"474":{"position":[[258,10],[863,9]]},"476":{"position":[[484,9]]},"480":{"position":[[16,9],[86,9],[495,9]]},"482":{"position":[[16,9],[594,9]]},"606":{"position":[[192,9],[290,9],[333,9]]},"610":{"position":[[1234,9]]},"612":{"position":[[1182,9]]},"614":{"position":[[1051,9]]},"616":{"position":[[1000,9]]},"618":{"position":[[1013,9]]},"620":{"position":[[248,9],[291,9],[453,9],[499,9],[1126,9]]},"622":{"position":[[172,9],[360,9],[406,9],[466,9],[1087,9]]},"624":{"position":[[162,9],[228,9],[350,9]]},"626":{"position":[[162,9],[277,9],[426,9],[472,9],[530,9],[1160,9]]},"628":{"position":[[261,9],[476,9],[520,9],[1141,9]]},"630":{"position":[[163,9],[372,9],[416,9],[1037,9]]},"632":{"position":[[255,9],[334,9],[479,9],[525,9],[1153,9]]},"634":{"position":[[1018,9]]},"636":{"position":[[933,9]]},"646":{"position":[[1108,9]]},"652":{"position":[[1150,9]]},"654":{"position":[[1066,9]]},"656":{"position":[[1072,9]]},"729":{"position":[[1417,9]]},"731":{"position":[[1431,9]]},"733":{"position":[[1546,9]]},"773":{"position":[[58,9]]},"775":{"position":[[113,9]]},"777":{"position":[[113,9]]},"779":{"position":[[113,9]]},"781":{"position":[[113,9]]},"783":{"position":[[113,9]]},"787":{"position":[[113,9]]},"791":{"position":[[233,9]]},"793":{"position":[[113,9]]},"795":{"position":[[113,9]]},"797":{"position":[[113,9]]}}}],["admissionconfigur",{"_index":2082,"t":{"398":{"position":[[1590,22]]},"468":{"position":[[457,22]]}}}],["advanc",{"_index":117,"t":{"8":{"position":[[22,8]]},"23":{"position":[[107,8]]},"67":{"position":[[521,8]]},"189":{"position":[[406,8],[982,8]]},"237":{"position":[[55,8]]},"275":{"position":[[126,8]]},"295":{"position":[[283,9]]},"536":{"position":[[421,8]]}}}],["advantag",{"_index":476,"t":{"27":{"position":[[475,12]]}}}],["advertis",{"_index":989,"t":{"91":{"position":[[82,9],[153,9]]},"101":{"position":[[2700,9],[2798,9]]},"144":{"position":[[122,9],[207,9],[245,9],[308,9]]},"162":{"position":[[834,9],[905,9],[979,9],[1039,9],[7761,9],[7859,9]]},"313":{"position":[[100,13]]},"476":{"position":[[189,9]]},"610":{"position":[[792,9],[825,9]]},"612":{"position":[[740,9],[773,9]]},"614":{"position":[[609,9],[642,9]]},"616":{"position":[[558,9],[591,9]]},"618":{"position":[[571,9],[604,9]]},"620":{"position":[[684,9],[717,9]]},"622":{"position":[[645,9],[678,9]]},"626":{"position":[[718,9],[751,9]]},"628":{"position":[[699,9],[732,9]]},"630":{"position":[[595,9],[628,9]]},"632":{"position":[[711,9],[744,9]]},"634":{"position":[[576,9],[609,9]]},"636":{"position":[[491,9],[524,9]]},"646":{"position":[[666,9],[699,9]]},"652":{"position":[[708,9],[741,9]]},"654":{"position":[[624,9],[657,9]]},"656":{"position":[[630,9],[663,9]]},"729":{"position":[[975,9],[1008,9]]},"731":{"position":[[989,9],[1022,9]]},"733":{"position":[[1104,9],[1137,9]]}}}],["ae",{"_index":1191,"t":{"128":{"position":[[361,3],[673,3],[712,3],[1752,3]]},"510":{"position":[[169,3]]}}}],["ae6c58cab4a7",{"_index":325,"t":{"19":{"position":[[2077,12]]}}}],["aes256",{"_index":1028,"t":{"108":{"position":[[552,6]]}}}],["aescbc",{"_index":2521,"t":{"498":{"position":[[205,9]]},"510":{"position":[[719,9]]},"660":{"position":[[122,7],[187,6]]}}}],["aescbckey",{"_index":1193,"t":{"128":{"position":[[369,9],[681,9],[720,9]]},"510":{"position":[[751,12]]}}}],["affect",{"_index":225,"t":{"17":{"position":[[1293,9]]},"44":{"position":[[149,7],[263,8]]},"332":{"position":[[1081,8]]},"484":{"position":[[202,8]]},"516":{"position":[[350,7]]},"533":{"position":[[765,8]]}}}],["afford",{"_index":1367,"t":{"185":{"position":[[622,6]]}}}],["aforement",{"_index":2205,"t":{"432":{"position":[[2376,14]]}}}],["ag",{"_index":266,"t":{"19":{"position":[[782,3]]},"203":{"position":[[1637,3],[3085,3]]},"205":{"position":[[1122,3]]},"221":{"position":[[1740,3]]},"332":{"position":[[771,3]]},"378":{"position":[[506,3]]}}}],["again",{"_index":999,"t":{"99":{"position":[[247,5]]},"118":{"position":[[1164,5],[1750,6],[1801,5]]},"179":{"position":[[844,6]]},"271":{"position":[[491,5]]},"277":{"position":[[1970,5]]},"548":{"position":[[420,5]]}}}],["against",{"_index":1371,"t":{"185":{"position":[[1571,7],[1611,7],[1660,7],[1706,7]]},"217":{"position":[[35,8]]},"536":{"position":[[1940,7]]},"546":{"position":[[1085,7]]},"555":{"position":[[276,7],[921,7]]}}}],["agent",{"_index":162,"t":{"15":{"position":[[64,7],[213,7]]},"27":{"position":[[71,5],[554,6]]},"39":{"position":[[4,6]]},"41":{"position":[[341,5],[350,8]]},"52":{"position":[[419,6]]},"56":{"position":[[78,7]]},"61":{"position":[[84,6]]},"67":{"position":[[155,5],[330,5],[378,5],[461,6]]},"69":{"position":[[148,5]]},"73":{"position":[[193,5]]},"75":{"position":[[0,5],[76,5],[178,5],[208,5],[509,5],[838,6],[1344,5],[1756,6]]},"77":{"position":[[286,5],[371,5],[389,5],[542,5]]},"79":{"position":[[55,6],[92,6]]},"99":{"position":[[4,6]]},"101":{"position":[[157,5],[174,5],[191,5]]},"112":{"position":[[2301,7]]},"114":{"position":[[2111,7]]},"116":{"position":[[1430,6]]},"130":{"position":[[93,6],[154,5]]},"132":{"position":[[251,5]]},"137":{"position":[[111,5],[207,5],[268,6],[309,5],[373,5]]},"150":{"position":[[848,7],[923,5],[990,7],[1045,7],[1166,6],[1192,5],[1323,7],[1450,5],[1557,5],[1703,5],[1810,5]]},"158":{"position":[[228,5]]},"162":{"position":[[2316,8],[2364,8],[2772,5],[2879,5],[2934,6],[2994,5],[3047,5]]},"172":{"position":[[220,5],[228,5]]},"174":{"position":[[254,5]]},"176":{"position":[[16,5],[65,5],[220,5],[325,5],[416,5]]},"178":{"position":[[266,5],[332,7]]},"201":{"position":[[537,5],[559,5],[581,5]]},"203":{"position":[[1309,5],[1318,5],[1331,5],[1466,5],[1649,5],[1687,5],[1725,5],[2759,5],[2768,5],[2781,5],[2916,5],[3097,5],[3135,5],[3173,5]]},"205":{"position":[[796,5],[805,5],[818,5],[953,5],[1134,5],[1172,5],[1210,5]]},"207":{"position":[[523,5],[628,5]]},"217":{"position":[[0,5]]},"219":{"position":[[53,5],[144,5],[195,5],[247,5],[324,5],[462,5]]},"221":{"position":[[834,5],[939,5],[2054,5],[2086,5],[2208,5]]},"241":{"position":[[92,7],[104,6]]},"268":{"position":[[264,7],[297,5]]},"275":{"position":[[180,5]]},"277":{"position":[[1295,6],[1665,5],[1784,5]]},"279":{"position":[[702,5],[745,5],[915,6],[934,5]]},"303":{"position":[[831,7]]},"309":{"position":[[4,6],[163,5],[218,6],[409,5],[752,5],[919,7],[1031,5],[1067,5],[1277,5],[1387,5],[1540,5],[1614,5],[1724,5]]},"311":{"position":[[381,7]]},"315":{"position":[[659,6]]},"317":{"position":[[450,7],[638,5],[696,5]]},"358":{"position":[[274,6],[341,6],[426,5],[515,6]]},"362":{"position":[[124,6]]},"388":{"position":[[25,5],[61,5]]},"428":{"position":[[877,6],[997,5],[1162,6],[1331,6],[1367,5]]},"432":{"position":[[1510,8],[1711,6],[1739,6],[2698,8],[2724,6]]},"434":{"position":[[321,5],[384,5],[545,5],[606,5],[841,5],[851,5],[914,6]]},"436":{"position":[[305,5],[489,7]]},"438":{"position":[[519,6]]},"440":{"position":[[518,5]]},"448":{"position":[[87,6]]},"452":{"position":[[68,5],[157,6]]},"454":{"position":[[737,5],[1197,5]]},"456":{"position":[[115,5],[308,5]]},"536":{"position":[[1375,5]]},"540":{"position":[[124,5],[758,5],[829,5],[1545,5],[1564,5],[1672,5]]},"544":{"position":[[187,5]]},"552":{"position":[[154,6],[198,5],[276,6],[310,5]]}}}],["agent.service.env",{"_index":201,"t":{"17":{"position":[[637,17]]}}}],["agent/data",{"_index":1008,"t":{"101":{"position":[[939,12]]}}}],["agent/flag",{"_index":1019,"t":{"101":{"position":[[3158,13],[3231,13]]},"162":{"position":[[8219,13],[8292,13]]}}}],["agent/network",{"_index":1017,"t":{"101":{"position":[[2658,18],[2744,18],[2837,18],[2922,18],[2997,18],[3078,18]]},"162":{"position":[[7719,18],[7805,18],[7898,18],[7983,18],[8058,18],[8139,18]]}}}],["agent/nod",{"_index":1009,"t":{"101":{"position":[[1025,12],[1080,12],[1135,12],[1219,12],[1313,12],[1500,12],[1639,12],[1719,12],[1993,12]]},"162":{"position":[[6350,12],[6405,12],[6460,12],[6544,12],[6638,12],[6825,12],[8371,12],[8741,12],[8821,12]]}}}],["agent/runtim",{"_index":1013,"t":{"101":{"position":[[2135,15],[2298,15],[2430,15],[2534,15],[3421,15]]},"162":{"position":[[6963,15],[7067,15],[7230,15],[7362,15],[7466,15],[7596,15]]}}}],["agent_external_ip",{"_index":1863,"t":{"317":{"position":[[579,17],[917,17]]}}}],["agentless",{"_index":475,"t":{"27":{"position":[[450,9]]},"67":{"position":[[584,9]]},"158":{"position":[[247,9]]}}}],["aggreg",{"_index":2752,"t":{"610":{"position":[[1277,10]]},"612":{"position":[[1225,10]]},"614":{"position":[[1094,10]]},"616":{"position":[[1043,10]]},"618":{"position":[[1056,10]]},"620":{"position":[[1169,10]]},"622":{"position":[[1130,10]]},"626":{"position":[[1203,10]]},"628":{"position":[[1184,10]]},"630":{"position":[[1080,10]]},"632":{"position":[[1196,10]]},"634":{"position":[[1061,10]]},"636":{"position":[[976,10]]},"646":{"position":[[1151,10]]},"652":{"position":[[1193,10]]},"654":{"position":[[1109,10]]},"656":{"position":[[1115,10]]},"729":{"position":[[1460,10]]},"731":{"position":[[1474,10]]},"733":{"position":[[1589,10]]}}}],["agnost",{"_index":807,"t":{"59":{"position":[[854,8]]}}}],["ago",{"_index":296,"t":{"19":{"position":[[1303,3],[1467,3],[1650,3],[1815,3],[1971,3],[2141,3],[2339,3],[2527,3],[2691,3],[2851,3]]}}}],["air",{"_index":755,"t":{"54":{"position":[[383,3]]},"253":{"position":[[327,3]]},"255":{"position":[[26,3],[81,3]]},"257":{"position":[[66,3]]},"261":{"position":[[52,3]]},"266":{"position":[[304,3],[438,3]]},"268":{"position":[[1388,3]]},"271":{"position":[[13,3],[95,3]]},"273":{"position":[[51,3]]}}}],["airgap",{"_index":1655,"t":{"263":{"position":[[236,6]]},"266":{"position":[[246,6]]}}}],["al",{"_index":779,"t":{"59":{"position":[[111,4]]}}}],["alice=bob:noexecut",{"_index":1743,"t":{"283":{"position":[[686,19],[969,19]]}}}],["alloc",{"_index":1825,"t":{"309":{"position":[[1517,11]]},"424":{"position":[[454,8]]},"476":{"position":[[2288,8]]},"667":{"position":[[526,8]]},"669":{"position":[[594,8]]},"671":{"position":[[679,8]]},"673":{"position":[[576,8]]}}}],["allow",{"_index":71,"t":{"4":{"position":[[661,6]]},"19":{"position":[[166,6],[261,6]]},"29":{"position":[[53,6]]},"33":{"position":[[901,5]]},"39":{"position":[[700,8],[750,6]]},"48":{"position":[[155,5],[185,5],[226,5]]},"52":{"position":[[699,5]]},"59":{"position":[[298,6]]},"75":{"position":[[1538,5]]},"118":{"position":[[4854,6]]},"139":{"position":[[333,5]]},"150":{"position":[[1239,5],[1588,5],[1845,5]]},"185":{"position":[[207,5]]},"199":{"position":[[292,6]]},"213":{"position":[[1457,5]]},"249":{"position":[[45,5]]},"307":{"position":[[398,7],[781,7]]},"309":{"position":[[211,6]]},"311":{"position":[[1306,5]]},"317":{"position":[[815,5]]},"362":{"position":[[474,8]]},"368":{"position":[[212,6]]},"408":{"position":[[209,6]]},"414":{"position":[[119,5]]},"468":{"position":[[2272,6]]},"470":{"position":[[578,8],[623,5],[1035,5],[1361,5],[1575,5],[1816,5],[2044,5],[2258,5],[2499,5]]},"476":{"position":[[211,5],[1273,7]]},"492":{"position":[[107,6]]},"494":{"position":[[302,6]]},"514":{"position":[[118,6],[225,6]]},"542":{"position":[[3,5]]},"610":{"position":[[847,5],[2078,7]]},"612":{"position":[[795,5],[2026,7]]},"614":{"position":[[664,5],[1895,7]]},"616":{"position":[[613,5],[1844,7]]},"618":{"position":[[626,5],[1857,7]]},"620":{"position":[[739,5],[1970,7]]},"622":{"position":[[700,5],[1931,7]]},"626":{"position":[[773,5],[2004,7]]},"628":{"position":[[754,5],[1985,7]]},"630":{"position":[[650,5],[1881,7]]},"632":{"position":[[766,5],[1997,7]]},"634":{"position":[[631,5],[1862,7]]},"636":{"position":[[546,5],[1777,7]]},"646":{"position":[[721,5],[1952,7]]},"652":{"position":[[763,5],[1994,7]]},"654":{"position":[[679,5],[1910,7]]},"656":{"position":[[685,5],[1916,7]]},"729":{"position":[[1030,5],[2261,7]]},"731":{"position":[[1044,5],[2275,7]]},"733":{"position":[[1159,5],[2390,7]]},"819":{"position":[[64,5]]}}}],["allow_ip_forward",{"_index":1806,"t":{"307":{"position":[[478,22],[861,22]]}}}],["allowedcap",{"_index":2352,"t":{"468":{"position":[[3312,20],[3751,20]]},"789":{"position":[[38,19]]}}}],["allowedunsafesysctl",{"_index":2354,"t":{"468":{"position":[[3784,21]]}}}],["allowprivilegeescal",{"_index":2325,"t":{"468":{"position":[[1481,25],[2654,25],[3281,25],[3719,25]]}}}],["along",{"_index":923,"t":{"75":{"position":[[905,5]]},"478":{"position":[[100,5]]}}}],["alongsid",{"_index":1313,"t":{"174":{"position":[[803,9]]},"199":{"position":[[670,9]]}}}],["alpha",{"_index":2162,"t":{"424":{"position":[[191,5]]}}}],["alphabet",{"_index":1736,"t":{"283":{"position":[[206,12]]}}}],["alphanumer",{"_index":1905,"t":{"326":{"position":[[1088,12],[1156,12]]}}}],["alpin",{"_index":2570,"t":{"522":{"position":[[130,6]]},"528":{"position":[[130,6]]}}}],["alreadi",{"_index":420,"t":{"25":{"position":[[435,7]]},"215":{"position":[[272,7]]},"223":{"position":[[404,8]]},"257":{"position":[[31,7]]},"285":{"position":[[375,7]]},"332":{"position":[[273,7],[975,7]]},"424":{"position":[[534,7],[1094,7]]},"426":{"position":[[286,7]]},"432":{"position":[[604,7]]},"533":{"position":[[164,7],[950,7]]},"626":{"position":[[250,7]]}}}],["alsologtostderr",{"_index":969,"t":{"81":{"position":[[213,15]]},"101":{"position":[[609,15]]},"142":{"position":[[244,15]]},"162":{"position":[[620,15]]}}}],["alter",{"_index":1698,"t":{"277":{"position":[[497,7]]},"324":{"position":[[374,8]]}}}],["altern",{"_index":801,"t":{"59":{"position":[[637,11]]},"144":{"position":[[423,11]]},"162":{"position":[[1197,11]]},"217":{"position":[[987,11]]},"516":{"position":[[571,12]]},"540":{"position":[[1840,14]]},"604":{"position":[[65,9]]},"646":{"position":[[200,14]]},"700":{"position":[[26,11]]},"800":{"position":[[167,9]]}}}],["although",{"_index":1524,"t":{"221":{"position":[[381,8]]}}}],["altogeth",{"_index":2872,"t":{"749":{"position":[[138,10]]}}}],["alway",{"_index":1305,"t":{"174":{"position":[[130,6]]},"221":{"position":[[323,6]]},"368":{"position":[[95,6]]},"540":{"position":[[2201,6]]}}}],["alwaysadmit",{"_index":2764,"t":{"622":{"position":[[244,12],[439,13]]}}}],["alwaysallow",{"_index":2759,"t":{"614":{"position":[[205,12],[450,13]]},"731":{"position":[[801,13]]}}}],["alwayspullimag",{"_index":2765,"t":{"624":{"position":[[201,17]]}}}],["amazon",{"_index":2124,"t":{"408":{"position":[[437,6]]}}}],["amd64.tar.gz",{"_index":372,"t":{"21":{"position":[[333,13]]}}}],["amount",{"_index":2235,"t":{"436":{"position":[[137,6],[359,6]]}}}],["analysi",{"_index":1995,"t":{"358":{"position":[[365,8]]},"434":{"position":[[857,8]]},"488":{"position":[[450,9]]},"490":{"position":[[436,9]]}}}],["and/or",{"_index":425,"t":{"25":{"position":[[648,6]]},"39":{"position":[[153,6]]},"99":{"position":[[153,6]]},"110":{"position":[[2301,6],[2690,6],[2756,6]]},"342":{"position":[[118,6]]},"376":{"position":[[293,6]]},"456":{"position":[[610,6]]}}}],["annot",{"_index":860,"t":{"65":{"position":[[376,11]]},"468":{"position":[[3200,12],[3638,12]]}}}],["anonym",{"_index":1623,"t":{"247":{"position":[[2181,11]]},"476":{"position":[[235,9],[3065,9]]},"602":{"position":[[172,9],[288,10]]},"610":{"position":[[871,9]]},"612":{"position":[[819,9]]},"614":{"position":[[688,9]]},"616":{"position":[[637,9]]},"618":{"position":[[650,9]]},"620":{"position":[[763,9]]},"622":{"position":[[724,9]]},"626":{"position":[[797,9]]},"628":{"position":[[778,9]]},"630":{"position":[[674,9]]},"632":{"position":[[790,9]]},"634":{"position":[[655,9]]},"636":{"position":[[570,9]]},"646":{"position":[[745,9]]},"652":{"position":[[787,9]]},"654":{"position":[[703,9]]},"656":{"position":[[709,9]]},"729":{"position":[[95,10],[327,9],[678,10],[724,9],[771,9],[825,9],[1054,9]]},"731":{"position":[[1068,9]]},"733":{"position":[[1183,9]]},"735":{"position":[[792,9],[2015,9]]},"747":{"position":[[983,9],[2206,9]]}}}],["anoth",{"_index":390,"t":{"23":{"position":[[159,7]]},"128":{"position":[[379,7]]},"416":{"position":[[600,7]]},"540":{"position":[[2560,7]]},"579":{"position":[[1593,7]]},"650":{"position":[[1723,7]]},"685":{"position":[[1617,7]]},"687":{"position":[[1506,7]]},"689":{"position":[[1531,7]]},"691":{"position":[[1683,7]]},"693":{"position":[[1509,7]]},"695":{"position":[[1541,7]]},"697":{"position":[[1640,7]]}}}],["answer",{"_index":1544,"t":{"225":{"position":[[48,6]]}}}],["anyon",{"_index":1307,"t":{"174":{"position":[[342,6]]},"360":{"position":[[911,7]]}}}],["anywher",{"_index":1658,"t":{"266":{"position":[[421,8]]}}}],["apach",{"_index":1586,"t":{"247":{"position":[[156,6],[647,6],[731,6]]}}}],["apart",{"_index":1353,"t":{"185":{"position":[[73,5]]}}}],["api",{"_index":895,"t":{"69":{"position":[[264,3]]},"71":{"position":[[286,3],[485,3]]},"73":{"position":[[95,3]]},"106":{"position":[[391,3]]},"108":{"position":[[776,3]]},"118":{"position":[[2593,3],[2706,5]]},"199":{"position":[[586,3]]},"207":{"position":[[362,3]]},"217":{"position":[[690,4]]},"221":{"position":[[724,3]]},"362":{"position":[[169,3]]},"424":{"position":[[613,3]]},"454":{"position":[[107,3]]},"466":{"position":[[130,3]]},"472":{"position":[[80,3],[673,3],[851,3]]},"476":{"position":[[266,3]]},"484":{"position":[[84,3]]},"492":{"position":[[128,3],[487,3]]},"496":{"position":[[205,3]]},"506":{"position":[[241,3]]},"546":{"position":[[762,4]]},"602":{"position":[[35,3]]},"604":{"position":[[121,3]]},"606":{"position":[[35,3]]},"608":{"position":[[45,3]]},"610":{"position":[[139,3],[894,3]]},"612":{"position":[[142,3],[842,3]]},"614":{"position":[[35,3],[711,3]]},"616":{"position":[[35,3],[660,3]]},"618":{"position":[[35,3],[673,3]]},"620":{"position":[[129,3],[786,3]]},"622":{"position":[[35,3],[747,3]]},"624":{"position":[[35,3]]},"626":{"position":[[35,3],[820,3]]},"628":{"position":[[125,3],[801,3]]},"630":{"position":[[35,3],[697,3]]},"632":{"position":[[128,3],[813,3]]},"634":{"position":[[35,3],[678,3]]},"636":{"position":[[35,3],[593,3]]},"638":{"position":[[45,3]]},"640":{"position":[[45,3]]},"642":{"position":[[45,3]]},"644":{"position":[[45,3]]},"646":{"position":[[35,3],[768,3]]},"648":{"position":[[45,3]]},"650":{"position":[[139,3]]},"652":{"position":[[125,3],[810,3]]},"654":{"position":[[125,3],[726,3]]},"656":{"position":[[139,3],[732,3]]},"658":{"position":[[116,3]]},"662":{"position":[[35,3]]},"729":{"position":[[1077,3]]},"731":{"position":[[1091,3]]},"733":{"position":[[1206,3]]},"764":{"position":[[133,3]]}}}],["apigroup",{"_index":1766,"t":{"291":{"position":[[400,9]]},"468":{"position":[[4106,10],[4320,10],[4529,10],[4740,9],[4870,9],[5042,9],[5142,9],[5365,9],[5465,9],[5675,9]]}}}],["apiserv",{"_index":682,"t":{"46":{"position":[[205,10]]},"48":{"position":[[170,10]]},"75":{"position":[[251,10],[540,9],[782,9]]},"77":{"position":[[171,10],[688,10]]},"87":{"position":[[546,9],[641,9]]},"101":{"position":[[1802,9],[1897,9]]},"144":{"position":[[189,9],[290,9]]},"150":{"position":[[900,9],[1060,9],[1177,9],[1338,9],[1435,9],[1688,9]]},"156":{"position":[[74,9],[119,9]]},"162":{"position":[[887,9],[1021,9],[3453,9],[3506,9],[8904,9],[8999,9]]},"247":{"position":[[2212,9]]},"309":{"position":[[147,11],[729,9],[934,9],[1052,9],[1197,9],[1262,9],[1599,9]]},"374":{"position":[[97,10]]},"376":{"position":[[172,9]]},"380":{"position":[[207,9]]},"382":{"position":[[273,10]]},"398":{"position":[[289,9],[677,9]]},"468":{"position":[[194,9],[1008,9]]},"472":{"position":[[873,9],[954,9],[1212,9],[1295,9]]},"474":{"position":[[241,9],[838,9]]},"476":{"position":[[177,9]]},"480":{"position":[[538,9]]},"482":{"position":[[637,9]]},"484":{"position":[[518,9]]},"486":{"position":[[358,9]]},"488":{"position":[[533,9]]},"490":{"position":[[519,9]]},"492":{"position":[[743,9]]},"494":{"position":[[126,9],[536,9]]},"500":{"position":[[610,9]]},"504":{"position":[[661,9]]},"579":{"position":[[796,10]]},"602":{"position":[[259,10]]},"610":{"position":[[104,9],[489,10],[780,9]]},"612":{"position":[[103,9],[472,10],[728,9]]},"614":{"position":[[346,10],[597,9]]},"616":{"position":[[312,10],[546,9]]},"618":{"position":[[325,10],[559,9]]},"620":{"position":[[416,10],[672,9]]},"622":{"position":[[323,10],[633,9]]},"626":{"position":[[389,10],[706,9]]},"628":{"position":[[411,10],[687,9]]},"630":{"position":[[307,10],[583,9]]},"632":{"position":[[442,10],[699,9]]},"634":{"position":[[303,10],[564,9]]},"636":{"position":[[254,10],[479,9]]},"646":{"position":[[384,10],[654,9]]},"650":{"position":[[104,9],[926,10]]},"652":{"position":[[99,10],[455,10],[696,9]]},"654":{"position":[[99,10],[386,10],[612,9]]},"656":{"position":[[104,9],[398,10],[618,9]]},"658":{"position":[[440,10]]},"662":{"position":[[992,10]]},"667":{"position":[[859,9],[955,9]]},"669":{"position":[[927,9],[1023,9]]},"671":{"position":[[1012,9],[1108,9]]},"673":{"position":[[909,9],[1005,9]]},"685":{"position":[[820,10]]},"687":{"position":[[709,10]]},"689":{"position":[[734,10]]},"691":{"position":[[886,10]]},"693":{"position":[[712,10]]},"695":{"position":[[744,10]]},"697":{"position":[[843,10]]},"703":{"position":[[138,10]]},"729":{"position":[[558,10],[649,10],[963,9]]},"731":{"position":[[544,10],[635,10],[977,9]]},"733":{"position":[[600,10],[691,10],[1092,9]]}}}],["apiserver'",{"_index":1820,"t":{"309":{"position":[[558,11]]}}}],["apiserver.config.k8s.io/v1",{"_index":2081,"t":{"398":{"position":[[1557,26]]},"468":{"position":[[424,26]]},"510":{"position":[[627,29]]}}}],["apiserver.crt",{"_index":2420,"t":{"476":{"position":[[980,13],[1876,13]]},"610":{"position":[[1729,13],[2742,13]]},"612":{"position":[[1677,13],[2690,13]]},"614":{"position":[[1546,13],[2559,13]]},"616":{"position":[[1495,13],[2508,13]]},"618":{"position":[[1508,13],[2521,13]]},"620":{"position":[[1621,13],[2634,13]]},"622":{"position":[[1582,13],[2595,13]]},"626":{"position":[[1655,13],[2668,13]]},"628":{"position":[[1636,13],[2649,13]]},"630":{"position":[[1532,13],[2545,13]]},"632":{"position":[[1648,13],[2661,13]]},"634":{"position":[[1513,13],[2526,13]]},"636":{"position":[[1428,13],[2441,13]]},"646":{"position":[[1603,13],[2616,13]]},"652":{"position":[[1645,13],[2658,13]]},"654":{"position":[[1561,13],[2574,13]]},"656":{"position":[[1567,13],[2580,13]]},"729":{"position":[[1912,13],[2925,13]]},"731":{"position":[[1926,13],[2939,13]]},"733":{"position":[[2041,13],[3054,13]]}}}],["apiserver.key",{"_index":2422,"t":{"476":{"position":[[1059,13],[1967,13]]},"610":{"position":[[1808,13],[2824,14]]},"612":{"position":[[1756,13],[2772,14]]},"614":{"position":[[1625,13],[2641,14]]},"616":{"position":[[1574,13],[2590,14]]},"618":{"position":[[1587,13],[2603,14]]},"620":{"position":[[1700,13],[2716,14]]},"622":{"position":[[1661,13],[2677,14]]},"626":{"position":[[1734,13],[2750,14]]},"628":{"position":[[1715,13],[2731,14]]},"630":{"position":[[1611,13],[2627,14]]},"632":{"position":[[1727,13],[2743,14]]},"634":{"position":[[1592,13],[2608,14]]},"636":{"position":[[1507,13],[2523,14]]},"646":{"position":[[1682,13],[2698,14]]},"652":{"position":[[1724,13],[2740,14]]},"654":{"position":[[1640,13],[2656,14]]},"656":{"position":[[1646,13],[2662,14]]},"729":{"position":[[1991,13],[3007,14]]},"731":{"position":[[2005,13],[3021,14]]},"733":{"position":[[2120,13],[3136,14]]}}}],["apiserver.yaml",{"_index":2646,"t":{"559":{"position":[[183,14]]},"561":{"position":[[189,14]]},"602":{"position":[[100,14]]},"604":{"position":[[186,14]]},"606":{"position":[[100,14]]},"608":{"position":[[110,14]]},"610":{"position":[[204,14]]},"612":{"position":[[207,14]]},"614":{"position":[[100,14]]},"616":{"position":[[100,14]]},"618":{"position":[[100,14]]},"620":{"position":[[194,14]]},"622":{"position":[[100,14]]},"624":{"position":[[100,14]]},"626":{"position":[[100,14]]},"628":{"position":[[190,14]]},"630":{"position":[[100,14]]},"632":{"position":[[193,14]]},"634":{"position":[[100,14]]},"636":{"position":[[100,14]]},"638":{"position":[[110,14]]},"640":{"position":[[110,14]]},"642":{"position":[[110,14]]},"644":{"position":[[110,14]]},"646":{"position":[[100,14]]},"648":{"position":[[110,14]]},"650":{"position":[[204,14]]},"652":{"position":[[190,14]]},"654":{"position":[[190,14]]},"656":{"position":[[204,14]]},"658":{"position":[[181,14]]},"662":{"position":[[100,14]]}}}],["apivers",{"_index":437,"t":{"25":{"position":[[945,11],[1034,11]]},"61":{"position":[[413,11]]},"247":{"position":[[530,11],[585,11]]},"249":{"position":[[725,11]]},"291":{"position":[[173,11],[298,11]]},"398":{"position":[[1545,11],[1657,11],[2207,11]]},"424":{"position":[[746,11]]},"468":{"position":[[412,11],[524,11],[1361,11],[2548,11],[3109,11],[3561,11],[4003,11],[4208,11],[4431,11],[4626,11],[4910,11],[5213,11],[5546,11],[5818,11],[6021,11],[6216,11]]},"470":{"position":[[331,11],[659,11],[1292,11],[1506,11],[1747,11],[1975,11],[2189,11],[2430,11]]},"472":{"position":[[730,11]]},"510":{"position":[[613,13]]},"520":{"position":[[0,11]]},"522":{"position":[[0,11]]},"526":{"position":[[0,11]]},"528":{"position":[[0,11]]},"540":{"position":[[420,11],[769,11],[2268,11]]}}}],["app",{"_index":1488,"t":{"207":{"position":[[567,4]]},"219":{"position":[[168,4]]},"221":{"position":[[878,4]]},"438":{"position":[[369,4]]},"454":{"position":[[437,4]]},"470":{"position":[[882,4],[1445,4],[2128,4],[2585,4]]}}}],["app.kubernetes.io/nam",{"_index":2379,"t":{"470":{"position":[[1902,23]]}}}],["appear",{"_index":471,"t":{"27":{"position":[[208,6]]},"65":{"position":[[922,6]]},"101":{"position":[[13,7]]},"162":{"position":[[13,7]]},"221":{"position":[[428,7]]}}}],["append",{"_index":708,"t":{"50":{"position":[[242,9]]},"75":{"position":[[1703,8]]},"87":{"position":[[99,6]]},"101":{"position":[[1093,6]]},"116":{"position":[[938,6]]},"162":{"position":[[6418,6]]},"283":{"position":[[300,8],[323,6]]},"319":{"position":[[437,6]]},"352":{"position":[[188,6]]}}}],["appli",{"_index":1569,"t":{"241":{"position":[[47,8]]},"297":{"position":[[243,5]]},"303":{"position":[[946,5],[1012,7],[1233,7]]},"307":{"position":[[508,5],[555,7],[891,5],[939,7]]},"322":{"position":[[149,6],[427,8]]},"458":{"position":[[180,5]]},"460":{"position":[[273,7],[946,8]]},"468":{"position":[[1233,7]]},"470":{"position":[[55,7],[519,7]]},"522":{"position":[[309,5]]},"524":{"position":[[220,5],[273,5],[423,5]]},"536":{"position":[[1797,8]]},"538":{"position":[[226,5],[492,8]]},"546":{"position":[[942,8]]},"817":{"position":[[66,5]]}}}],["applic",{"_index":1776,"t":{"295":{"position":[[397,12]]},"404":{"position":[[173,13]]},"454":{"position":[[534,13]]},"514":{"position":[[18,11],[138,11],[190,12],[248,11]]},"555":{"position":[[1263,10],[1295,10]]},"559":{"position":[[12,10]]},"561":{"position":[[12,10]]},"563":{"position":[[12,10]]},"565":{"position":[[12,10]]},"567":{"position":[[12,10]]},"569":{"position":[[12,10]]},"571":{"position":[[12,10]]},"573":{"position":[[12,10]]},"575":{"position":[[12,10]]},"577":{"position":[[12,10]]},"581":{"position":[[12,10]]},"583":{"position":[[12,10]]},"608":{"position":[[12,10]]},"638":{"position":[[12,10]]},"640":{"position":[[12,10]]},"642":{"position":[[12,10]]},"644":{"position":[[12,10]]},"648":{"position":[[12,10]]},"675":{"position":[[12,10]]},"708":{"position":[[12,10]]},"710":{"position":[[12,10]]},"724":{"position":[[12,10]]},"726":{"position":[[12,10]]},"739":{"position":[[12,10]]},"741":{"position":[[12,10]]},"743":{"position":[[12,10]]},"749":{"position":[[12,10]]},"751":{"position":[[12,10]]},"791":{"position":[[60,12],[125,12]]},"805":{"position":[[47,11]]}}}],["application’",{"_index":2545,"t":{"514":{"position":[[278,13]]}}}],["approach",{"_index":1509,"t":{"217":{"position":[[478,11]]},"536":{"position":[[107,8]]}}}],["appropri",{"_index":434,"t":{"25":{"position":[[872,11]]},"110":{"position":[[212,11]]},"261":{"position":[[198,11]]},"303":{"position":[[671,11]]},"319":{"position":[[1071,11]]},"460":{"position":[[825,11],[955,11]]},"484":{"position":[[417,11]]},"486":{"position":[[63,12]]},"488":{"position":[[66,12]]},"490":{"position":[[65,12]]},"492":{"position":[[53,12],[175,11],[599,11]]},"496":{"position":[[64,12]]},"498":{"position":[[37,13],[141,11],[254,11]]},"500":{"position":[[65,12],[477,11]]},"536":{"position":[[371,11]]},"640":{"position":[[207,11]]},"642":{"position":[[210,11]]},"644":{"position":[[199,11]]},"665":{"position":[[206,11]]},"691":{"position":[[101,11]]},"745":{"position":[[100,11]]},"819":{"position":[[74,11]]}}}],["approxim",{"_index":2509,"t":{"488":{"position":[[376,11]]},"490":{"position":[[362,11]]}}}],["apt",{"_index":413,"t":{"25":{"position":[[307,3]]},"50":{"position":[[599,3]]},"203":{"position":[[401,3]]},"440":{"position":[[150,4]]}}}],["arch",{"_index":2256,"t":{"442":{"position":[[0,4]]}}}],["arch.tar",{"_index":1656,"t":{"263":{"position":[[250,9]]}}}],["architectur",{"_index":888,"t":{"67":{"position":[[24,12]]},"207":{"position":[[738,12]]},"263":{"position":[[36,12]]},"354":{"position":[[35,14]]},"426":{"position":[[211,12]]},"536":{"position":[[1557,12]]}}}],["archiv",{"_index":1599,"t":{"247":{"position":[[1069,7],[2069,7]]}}}],["area",{"_index":2301,"t":{"462":{"position":[[14,5]]},"705":{"position":[[124,6]]}}}],["aren't",{"_index":1387,"t":{"187":{"position":[[1695,6]]}}}],["arg",{"_index":450,"t":{"25":{"position":[[1249,5]]},"61":{"position":[[571,5]]},"93":{"position":[[27,3],[86,3]]},"101":{"position":[[3148,3],[3221,3]]},"156":{"position":[[24,3],[84,3],[154,3],[233,3],[327,3],[405,3],[464,3]]},"162":{"position":[[3463,3],[3531,3],[3608,3],[3695,3],[3788,3],[8209,3],[8282,3]]},"235":{"position":[[936,4]]},"398":{"position":[[299,3],[377,3],[687,4],[1044,4],[1133,4]]},"474":{"position":[[251,4],[608,4],[697,4],[848,4],[1231,4],[1320,4]]},"480":{"position":[[548,4]]},"482":{"position":[[647,4]]},"484":{"position":[[528,4]]},"486":{"position":[[368,4]]},"488":{"position":[[543,4]]},"490":{"position":[[529,4]]},"492":{"position":[[753,4]]},"494":{"position":[[546,4]]},"500":{"position":[[620,4]]},"504":{"position":[[671,4]]},"540":{"position":[[1009,5]]}}}],["arg=\"admiss",{"_index":2317,"t":{"468":{"position":[[204,14]]}}}],["arg=\"en",{"_index":2319,"t":{"468":{"position":[[1018,11]]}}}],["arg=\"nod",{"_index":1828,"t":{"311":{"position":[[399,9],[463,9]]}}}],["arg='audit",{"_index":2391,"t":{"472":{"position":[[883,10],[964,10]]}}}],["arg=audit",{"_index":2392,"t":{"472":{"position":[[1222,9],[1305,9]]}}}],["argument",{"_index":1147,"t":{"118":{"position":[[2784,9]]},"124":{"position":[[325,10],[523,9],[1223,10],[1461,9],[1712,9]]},"126":{"position":[[259,10],[581,9],[1080,10],[1439,9]]},"179":{"position":[[219,14]]},"187":{"position":[[1620,9]]},"221":{"position":[[2015,8]]},"223":{"position":[[427,9]]},"247":{"position":[[934,8]]},"268":{"position":[[796,9]]},"277":{"position":[[396,9],[2278,9]]},"281":{"position":[[108,10],[467,10],[639,9],[703,9],[872,10],[953,9],[1000,9],[1040,9],[1168,8]]},"472":{"position":[[834,9]]},"476":{"position":[[58,9]]},"480":{"position":[[461,8],[553,8]]},"482":{"position":[[560,8],[652,8]]},"484":{"position":[[33,8],[484,8],[533,8]]},"486":{"position":[[35,8],[324,8],[373,8]]},"488":{"position":[[38,8],[499,8],[548,8]]},"490":{"position":[[36,8],[485,8],[534,8]]},"492":{"position":[[34,8],[709,8],[758,8]]},"494":{"position":[[41,8],[502,8],[551,8]]},"496":{"position":[[45,8]]},"500":{"position":[[46,8],[576,8],[625,8]]},"504":{"position":[[44,8],[627,8],[676,8]]},"548":{"position":[[237,9],[728,9]]},"579":{"position":[[93,8]]},"581":{"position":[[103,8]]},"729":{"position":[[144,10]]},"731":{"position":[[130,10]]},"733":{"position":[[173,10]]},"735":{"position":[[120,10]]},"737":{"position":[[157,10]]},"739":{"position":[[142,10]]},"741":{"position":[[143,10],[301,8]]},"743":{"position":[[175,8]]},"745":{"position":[[141,10]]},"747":{"position":[[263,10]]},"749":{"position":[[197,10],[351,8]]},"753":{"position":[[446,10]]}}}],["arm",{"_index":15,"t":{"2":{"position":[[130,3]]},"358":{"position":[[899,3]]}}}],["arm32",{"_index":2579,"t":{"524":{"position":[[34,6]]}}}],["arm64",{"_index":1974,"t":{"354":{"position":[[83,5]]}}}],["arm64/aarch64",{"_index":1972,"t":{"354":{"position":[[63,13]]}}}],["armhf",{"_index":1971,"t":{"354":{"position":[[57,5]]}}}],["around",{"_index":2314,"t":{"466":{"position":[[71,6]]}}}],["arp",{"_index":2021,"t":{"360":{"position":[[1184,3]]}}}],["array",{"_index":2885,"t":{"789":{"position":[[130,6]]}}}],["asid",{"_index":2236,"t":{"436":{"position":[[188,5],[410,5]]}}}],["ask",{"_index":1545,"t":{"225":{"position":[[95,3]]}}}],["assert",{"_index":617,"t":{"39":{"position":[[580,6]]}}}],["assess",{"_index":2289,"t":{"458":{"position":[[256,10]]},"508":{"position":[[152,10]]}}}],["assign",{"_index":1266,"t":{"150":{"position":[[1651,8]]},"317":{"position":[[1025,8]]},"506":{"position":[[189,8],[513,12]]}}}],["associ",{"_index":2091,"t":{"398":{"position":[[2893,10],[3301,10]]},"470":{"position":[[1196,10]]},"542":{"position":[[354,10]]}}}],["assum",{"_index":1071,"t":{"110":{"position":[[2194,6]]},"189":{"position":[[1841,7]]},"201":{"position":[[71,6]]},"257":{"position":[[14,7]]},"261":{"position":[[7,8]]},"277":{"position":[[1062,7],[1793,7]]},"436":{"position":[[236,8]]},"458":{"position":[[118,6]]}}}],["assumpt",{"_index":2641,"t":{"555":{"position":[[1765,10]]}}}],["attack",{"_index":495,"t":{"29":{"position":[[182,8]]},"170":{"position":[[338,7]]},"313":{"position":[[321,8]]},"360":{"position":[[1168,7]]},"492":{"position":[[545,7]]}}}],["attempt",{"_index":613,"t":{"39":{"position":[[443,7]]},"75":{"position":[[1097,8]]},"77":{"position":[[774,7]]},"118":{"position":[[706,7]]},"189":{"position":[[604,7],[683,7],[1420,7],[1496,7]]},"303":{"position":[[846,10]]},"326":{"position":[[1587,7]]},"432":{"position":[[905,7]]},"533":{"position":[[1233,7]]},"536":{"position":[[1715,10]]},"546":{"position":[[860,10]]}}}],["attract",{"_index":626,"t":{"39":{"position":[[789,7]]}}}],["audiences=https://kubernetes.default.svc.cluster.local,k3",{"_index":2749,"t":{"610":{"position":[[898,58]]},"612":{"position":[[846,58]]},"614":{"position":[[715,58]]},"616":{"position":[[664,58]]},"618":{"position":[[677,58]]},"620":{"position":[[790,58]]},"622":{"position":[[751,58]]},"626":{"position":[[824,58]]},"628":{"position":[[805,58]]},"630":{"position":[[701,58]]},"632":{"position":[[817,58]]},"634":{"position":[[682,58]]},"636":{"position":[[597,58]]},"646":{"position":[[772,58]]},"652":{"position":[[814,58]]},"654":{"position":[[730,58]]},"656":{"position":[[736,58]]},"729":{"position":[[1081,58]]},"731":{"position":[[1095,58]]},"733":{"position":[[1210,58]]}}}],["audiences=unknown",{"_index":2403,"t":{"476":{"position":[[270,17]]}}}],["audit",{"_index":2063,"t":{"398":{"position":[[765,6],[827,6],[888,6],[912,6],[939,6],[1803,6],[1823,5]]},"466":{"position":[[141,8],[375,8],[399,5],[427,5]]},"468":{"position":[[670,6],[690,5]]},"472":{"position":[[61,5],[144,5],[161,8],[463,5]]},"474":{"position":[[329,6],[391,6],[452,6],[476,6],[503,6],[952,6],[1014,6],[1075,6],[1099,6],[1126,6]]},"484":{"position":[[18,5],[60,8],[343,5],[429,5]]},"486":{"position":[[18,5],[209,5]]},"488":{"position":[[18,5]]},"490":{"position":[[18,5]]},"502":{"position":[[22,5]]},"555":{"position":[[1024,6],[1075,5],[1226,5],[1689,8],[1877,7]]},"579":{"position":[[260,5],[2025,5]]},"585":{"position":[[175,6]]},"587":{"position":[[152,6]]},"589":{"position":[[158,6]]},"591":{"position":[[160,6]]},"593":{"position":[[166,6]]},"595":{"position":[[172,6]]},"597":{"position":[[171,6]]},"599":{"position":[[171,6]]},"602":{"position":[[193,6]]},"604":{"position":[[282,6]]},"606":{"position":[[211,6]]},"610":{"position":[[423,6]]},"612":{"position":[[406,6]]},"614":{"position":[[280,6]]},"616":{"position":[[246,6]]},"618":{"position":[[259,6]]},"620":{"position":[[350,6]]},"622":{"position":[[257,6]]},"624":{"position":[[271,6]]},"626":{"position":[[323,6]]},"628":{"position":[[345,6]]},"630":{"position":[[241,6]]},"632":{"position":[[376,6]]},"634":{"position":[[237,6]]},"636":{"position":[[188,6]]},"638":{"position":[[165,5],[239,5],[280,5]]},"640":{"position":[[165,5],[250,5]]},"642":{"position":[[165,5],[244,5]]},"644":{"position":[[165,5],[259,5]]},"646":{"position":[[318,6]]},"650":{"position":[[390,5],[2155,5]]},"652":{"position":[[385,6]]},"654":{"position":[[320,6]]},"656":{"position":[[332,6]]},"658":{"position":[[374,6]]},"660":{"position":[[175,6]]},"662":{"position":[[926,6]]},"665":{"position":[[275,6]]},"667":{"position":[[205,6]]},"669":{"position":[[225,6]]},"671":{"position":[[321,6]]},"673":{"position":[[258,6]]},"677":{"position":[[220,6]]},"680":{"position":[[192,6]]},"682":{"position":[[202,6]]},"685":{"position":[[284,5],[2049,5]]},"687":{"position":[[173,5],[1938,5]]},"689":{"position":[[198,5],[1963,5]]},"691":{"position":[[350,5],[2115,5]]},"693":{"position":[[176,5],[1941,5]]},"695":{"position":[[208,5],[1973,5]]},"697":{"position":[[307,5],[2072,5]]},"703":{"position":[[36,5],[72,6],[167,6]]},"705":{"position":[[37,5]]},"712":{"position":[[188,6]]},"714":{"position":[[194,6]]},"716":{"position":[[190,6]]},"718":{"position":[[196,6]]},"720":{"position":[[129,6]]},"722":{"position":[[129,6]]},"724":{"position":[[112,5]]},"726":{"position":[[112,5]]},"729":{"position":[[470,6]]},"731":{"position":[[456,6]]},"733":{"position":[[512,6]]},"735":{"position":[[442,6]]},"737":{"position":[[499,6]]},"745":{"position":[[444,6]]},"747":{"position":[[660,6]]},"753":{"position":[[1085,6]]}}}],["audit.k8s.io/v1",{"_index":2390,"t":{"472":{"position":[[742,15]]}}}],["audit.yaml",{"_index":2389,"t":{"472":{"position":[[564,10]]}}}],["auditor",{"_index":2634,"t":{"555":{"position":[[381,9]]}}}],["auth",{"_index":631,"t":{"39":{"position":[[899,4]]},"106":{"position":[[486,4]]},"319":{"position":[[293,4],[302,6],[947,4]]},"342":{"position":[[113,4],[543,4],[686,4],[744,4],[749,4],[805,4]]},"344":{"position":[[246,5]]},"346":{"position":[[249,5]]},"476":{"position":[[1164,4],[1242,4]]},"579":{"position":[[1080,8],[1405,8]]},"602":{"position":[[299,5]]},"604":{"position":[[250,4],[360,4]]},"610":{"position":[[1969,4],[2047,4]]},"612":{"position":[[1917,4],[1995,4]]},"614":{"position":[[1786,4],[1864,4]]},"616":{"position":[[1735,4],[1813,4]]},"618":{"position":[[1748,4],[1826,4]]},"620":{"position":[[1861,4],[1939,4]]},"622":{"position":[[1822,4],[1900,4]]},"626":{"position":[[1895,4],[1973,4]]},"628":{"position":[[1876,4],[1954,4]]},"630":{"position":[[1772,4],[1850,4]]},"632":{"position":[[1888,4],[1966,4]]},"634":{"position":[[1753,4],[1831,4]]},"636":{"position":[[1668,4],[1746,4]]},"646":{"position":[[1843,4],[1921,4]]},"650":{"position":[[1210,8],[1535,8]]},"652":{"position":[[1885,4],[1963,4]]},"654":{"position":[[1801,4],[1879,4]]},"656":{"position":[[1807,4],[1885,4]]},"685":{"position":[[1104,8],[1429,8]]},"687":{"position":[[993,8],[1318,8],[2015,5],[2048,5],[2125,5]]},"689":{"position":[[1018,8],[1343,8]]},"691":{"position":[[1170,8],[1495,8]]},"693":{"position":[[996,8],[1321,8],[2018,5],[2051,5],[2128,5]]},"695":{"position":[[1028,8],[1353,8]]},"697":{"position":[[1127,8],[1452,8]]},"729":{"position":[[689,5],[781,5],[2152,4],[2230,4]]},"731":{"position":[[2166,4],[2244,4]]},"733":{"position":[[2281,4],[2359,4]]}}}],["auth=\"name=tailscale,joinkey=$auth",{"_index":1879,"t":{"319":{"position":[[841,34]]}}}],["auth=\"tru",{"_index":2807,"t":{"687":{"position":[[161,11]]}}}],["auth=fals",{"_index":2401,"t":{"476":{"position":[[245,10],[3075,10]]},"602":{"position":[[182,10]]},"610":{"position":[[881,10]]},"612":{"position":[[829,10]]},"614":{"position":[[698,10]]},"616":{"position":[[647,10]]},"618":{"position":[[660,10]]},"620":{"position":[[773,10]]},"622":{"position":[[734,10]]},"626":{"position":[[807,10]]},"628":{"position":[[788,10]]},"630":{"position":[[684,10]]},"632":{"position":[[800,10]]},"634":{"position":[[665,10]]},"636":{"position":[[580,10]]},"646":{"position":[[755,10]]},"652":{"position":[[797,10]]},"654":{"position":[[713,10]]},"656":{"position":[[719,10]]},"729":{"position":[[337,10],[734,12],[835,10],[1064,10]]},"731":{"position":[[1078,10]]},"733":{"position":[[1193,10]]},"735":{"position":[[802,10],[2025,10]]},"747":{"position":[[993,10],[2216,10]]}}}],["auth=tru",{"_index":2682,"t":{"579":{"position":[[1821,12],[1932,12]]},"650":{"position":[[1951,12],[2062,12]]},"685":{"position":[[1845,12],[1956,12]]},"687":{"position":[[1734,12],[1845,12],[2103,9],[2150,9]]},"689":{"position":[[1759,12],[1870,12]]},"691":{"position":[[1911,12],[2022,12]]},"693":{"position":[[166,9],[1737,12],[1848,12],[2106,9],[2153,9]]},"695":{"position":[[1769,12],[1880,12]]},"697":{"position":[[1868,12],[1979,12]]}}}],["authent",{"_index":382,"t":{"21":{"position":[[515,15]]},"83":{"position":[[89,14],[160,14]]},"101":{"position":[[733,14],[812,14]]},"164":{"position":[[56,12]]},"166":{"position":[[122,12]]},"168":{"position":[[274,12],[636,12],[1334,15]]},"170":{"position":[[74,12]]},"179":{"position":[[1166,12],[1196,15]]},"187":{"position":[[211,14],[1099,14],[1224,15],[1415,14]]},"336":{"position":[[737,14]]},"342":{"position":[[237,12],[318,12],[593,14],[754,14]]},"344":{"position":[[116,14],[139,14]]},"346":{"position":[[120,14],[143,14]]},"476":{"position":[[3096,14]]},"494":{"position":[[159,14]]},"604":{"position":[[90,15]]},"652":{"position":[[2884,14]]},"667":{"position":[[553,14]]},"669":{"position":[[621,14]]},"671":{"position":[[706,14]]},"673":{"position":[[603,14]]},"680":{"position":[[476,14]]},"682":{"position":[[550,14]]},"729":{"position":[[79,15]]},"735":{"position":[[815,14],[2038,14]]},"747":{"position":[[1006,14],[2229,14]]}}}],["authentication.x509.clientcafil",{"_index":2839,"t":{"733":{"position":[[79,32]]}}}],["author",{"_index":132,"t":{"11":{"position":[[38,9]]},"39":{"position":[[544,8]]},"110":{"position":[[694,10],[724,9]]},"135":{"position":[[218,9]]},"162":{"position":[[4036,9]]},"187":{"position":[[716,9],[884,10]]},"476":{"position":[[290,13],[3132,13]]},"610":{"position":[[539,10],[959,13]]},"612":{"position":[[282,9],[351,9],[522,10],[573,10],[907,13]]},"614":{"position":[[155,13],[256,13],[375,14],[416,13],[776,13]]},"616":{"position":[[155,13],[217,13],[341,14],[382,13],[725,13]]},"618":{"position":[[155,13],[229,13],[354,14],[395,13],[738,13]]},"620":{"position":[[851,13]]},"622":{"position":[[812,13]]},"626":{"position":[[885,13]]},"628":{"position":[[866,13]]},"630":{"position":[[762,13]]},"632":{"position":[[878,13]]},"634":{"position":[[743,13]]},"636":{"position":[[658,13]]},"646":{"position":[[833,13]]},"652":{"position":[[875,13],[2966,13]]},"654":{"position":[[262,9],[791,13]]},"656":{"position":[[274,9],[797,13]]},"667":{"position":[[636,13]]},"669":{"position":[[704,13]]},"671":{"position":[[789,13]]},"673":{"position":[[686,13]]},"680":{"position":[[558,13]]},"682":{"position":[[632,13]]},"697":{"position":[[105,9]]},"729":{"position":[[1142,13]]},"731":{"position":[[307,13],[664,14],[714,13],[767,13],[833,13],[1156,13]]},"733":{"position":[[1271,13]]},"735":{"position":[[851,13],[2074,13]]},"747":{"position":[[1042,13],[2265,13]]}}}],["authorit",{"_index":1024,"t":{"108":{"position":[[401,13]]}}}],["authority=/var/lib/rancher/k3s/server/tls/serv",{"_index":2418,"t":{"476":{"position":[[851,48]]},"610":{"position":[[1600,48]]},"612":{"position":[[1548,48]]},"614":{"position":[[1417,48]]},"616":{"position":[[1366,48]]},"618":{"position":[[1379,48]]},"620":{"position":[[1492,48]]},"622":{"position":[[1453,48]]},"626":{"position":[[1526,48]]},"628":{"position":[[1507,48]]},"630":{"position":[[1403,48]]},"632":{"position":[[1519,48]]},"634":{"position":[[1384,48]]},"636":{"position":[[1299,48]]},"646":{"position":[[1474,48]]},"652":{"position":[[1516,48]]},"654":{"position":[[1432,48]]},"656":{"position":[[1438,48]]},"729":{"position":[[1783,48]]},"731":{"position":[[1797,48]]},"733":{"position":[[1912,48]]}}}],["authority=<ca",{"_index":2758,"t":{"612":{"position":[[383,13]]}}}],["authorization.mod",{"_index":2836,"t":{"731":{"position":[[79,18]]}}}],["auto",{"_index":636,"t":{"41":{"position":[[29,4],[383,4]]},"245":{"position":[[735,4]]},"253":{"position":[[631,4]]},"266":{"position":[[677,4]]},"334":{"position":[[47,4]]},"579":{"position":[[1108,5],[1439,4],[1965,4]]},"650":{"position":[[1238,5],[1569,4],[2095,4]]},"685":{"position":[[1132,5],[1463,4],[1989,4]]},"687":{"position":[[1021,5],[1352,4],[1878,4]]},"689":{"position":[[142,4],[183,4],[1046,5],[1377,4],[1903,4]]},"691":{"position":[[1198,5],[1529,4],[2055,4]]},"693":{"position":[[1024,5],[1355,4],[1881,4]]},"695":{"position":[[147,4],[193,4],[1056,5],[1387,4],[1913,4],[2043,4],[2079,4],[2132,4],[2394,4]]},"697":{"position":[[1155,5],[1486,4],[2012,4]]}}}],["autoapprov",{"_index":1874,"t":{"319":{"position":[[515,16]]}}}],["autom",{"_index":72,"t":{"4":{"position":[[675,8]]},"245":{"position":[[814,9]]},"273":{"position":[[13,9],[1047,9]]},"352":{"position":[[124,9]]},"398":{"position":[[1524,9],[2037,9]]},"531":{"position":[[192,9],[254,9]]},"536":{"position":[[916,8]]},"546":{"position":[[60,9]]},"555":{"position":[[1927,9]]}}}],["automat",{"_index":141,"t":{"11":{"position":[[165,13]]},"13":{"position":[[157,13]]},"15":{"position":[[282,14]]},"17":{"position":[[303,13],[732,13]]},"25":{"position":[[9,13],[623,13]]},"31":{"position":[[308,13],[551,13]]},"35":{"position":[[586,13]]},"54":{"position":[[199,9],[266,13],[403,9]]},"75":{"position":[[1689,13]]},"77":{"position":[[760,13]]},"104":{"position":[[157,13]]},"108":{"position":[[374,13]]},"110":{"position":[[118,9]]},"118":{"position":[[2031,9]]},"122":{"position":[[97,9]]},"135":{"position":[[628,9]]},"162":{"position":[[4489,9]]},"178":{"position":[[243,13]]},"179":{"position":[[1323,13]]},"185":{"position":[[1192,13]]},"213":{"position":[[410,13]]},"271":{"position":[[609,13]]},"322":{"position":[[78,13]]},"398":{"position":[[3044,14]]},"402":{"position":[[20,13]]},"428":{"position":[[323,13],[613,13]]},"432":{"position":[[2051,9]]},"470":{"position":[[223,13]]},"488":{"position":[[100,13]]},"490":{"position":[[99,13]]},"504":{"position":[[92,13]]},"506":{"position":[[787,13]]},"510":{"position":[[142,14]]},"512":{"position":[[59,9]]},"540":{"position":[[2208,13]]}}}],["automountserviceaccounttoken",{"_index":2536,"t":{"506":{"position":[[565,28]]},"764":{"position":[[224,29]]}}}],["autotedect",{"_index":577,"t":{"35":{"position":[[515,12]]}}}],["avail",{"_index":39,"t":{"4":{"position":[[222,10]]},"19":{"position":[[689,10]]},"44":{"position":[[601,9]]},"52":{"position":[[383,9]]},"54":{"position":[[13,9]]},"65":{"position":[[1112,10]]},"67":{"position":[[47,12]]},"73":{"position":[[12,12]]},"75":{"position":[[342,9]]},"108":{"position":[[1466,9]]},"110":{"position":[[249,9]]},"114":{"position":[[1270,9]]},"118":{"position":[[13,9],[891,12],[2726,9]]},"122":{"position":[[13,9]]},"124":{"position":[[19,12]]},"126":{"position":[[19,12]]},"172":{"position":[[61,9]]},"178":{"position":[[102,9]]},"185":{"position":[[179,9],[593,9],[1062,12],[1394,12]]},"189":{"position":[[444,10],[1020,10]]},"199":{"position":[[83,12]]},"203":{"position":[[2009,12]]},"205":{"position":[[46,12]]},"207":{"position":[[45,12]]},"213":{"position":[[1082,9],[1127,9],[1146,12]]},"221":{"position":[[1927,9]]},"223":{"position":[[13,9]]},"249":{"position":[[13,9]]},"253":{"position":[[211,9],[309,9]]},"268":{"position":[[96,12],[516,12],[557,12],[848,12]]},"273":{"position":[[116,9]]},"277":{"position":[[75,9]]},"279":{"position":[[1009,9]]},"281":{"position":[[13,9]]},"283":{"position":[[13,9]]},"303":{"position":[[789,9]]},"311":{"position":[[37,9],[85,9]]},"313":{"position":[[13,9]]},"319":{"position":[[0,9]]},"340":{"position":[[1452,9]]},"354":{"position":[[7,9]]},"360":{"position":[[685,12]]},"364":{"position":[[126,12]]},"366":{"position":[[78,12]]},"398":{"position":[[2554,9]]},"408":{"position":[[167,9]]},"410":{"position":[[942,10]]},"414":{"position":[[376,9]]},"428":{"position":[[139,9]]},"432":{"position":[[75,9]]},"480":{"position":[[387,12]]},"488":{"position":[[209,9]]},"490":{"position":[[208,9]]},"496":{"position":[[106,9],[379,9]]},"498":{"position":[[422,9]]},"500":{"position":[[150,12],[201,13]]},"516":{"position":[[272,9]]},"542":{"position":[[14,12]]},"546":{"position":[[157,10],[628,10]]}}}],["avoid",{"_index":1117,"t":{"116":{"position":[[965,5]]},"118":{"position":[[2945,5]]},"217":{"position":[[794,5]]},"307":{"position":[[194,5]]},"311":{"position":[[318,5]]},"319":{"position":[[1091,5]]},"394":{"position":[[149,5]]},"472":{"position":[[352,5]]},"496":{"position":[[291,5]]},"500":{"position":[[167,8]]},"516":{"position":[[175,5]]},"705":{"position":[[282,5]]}}}],["aw",{"_index":1864,"t":{"317":{"position":[[1074,5]]},"442":{"position":[[48,3]]}}}],["awar",{"_index":1846,"t":{"313":{"position":[[251,5]]}}}],["aws_access_key_id",{"_index":1223,"t":{"135":{"position":[[1374,17]]},"162":{"position":[[5323,20]]}}}],["aws_secret_access_key",{"_index":1224,"t":{"135":{"position":[[1433,21]]},"162":{"position":[[5390,24]]}}}],["azur",{"_index":2127,"t":{"408":{"position":[[461,5]]}}}],["b",{"_index":2143,"t":{"416":{"position":[[216,1],[590,2]]},"442":{"position":[[173,1]]}}}],["b403f678",{"_index":2740,"t":{"610":{"position":[[697,8]]},"612":{"position":[[645,8]]},"614":{"position":[[514,8]]},"616":{"position":[[463,8]]},"618":{"position":[[476,8]]},"620":{"position":[[589,8]]},"622":{"position":[[550,8]]},"626":{"position":[[623,8]]},"628":{"position":[[604,8]]},"630":{"position":[[500,8]]},"632":{"position":[[616,8]]},"634":{"position":[[481,8]]},"636":{"position":[[396,8]]},"646":{"position":[[571,8]]},"652":{"position":[[613,8],[2789,8]]},"654":{"position":[[529,8]]},"656":{"position":[[535,8]]},"667":{"position":[[422,8]]},"669":{"position":[[490,8]]},"671":{"position":[[575,8]]},"673":{"position":[[472,8]]},"680":{"position":[[381,8]]},"682":{"position":[[455,8]]},"729":{"position":[[880,8]]},"731":{"position":[[894,8]]},"733":{"position":[[1009,8]]},"735":{"position":[[1909,8],[2605,8]]},"747":{"position":[[2100,8],[2796,8]]}}}],["b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7",{"_index":2718,"t":{"604":{"position":[[788,64]]},"606":{"position":[[769,64]]},"624":{"position":[[782,64]]},"677":{"position":[[754,64]]}}}],["back",{"_index":1079,"t":{"110":{"position":[[2797,4]]},"174":{"position":[[793,6],[1243,7]]},"191":{"position":[[15,6],[105,7],[152,4]]},"193":{"position":[[36,4],[80,4]]},"195":{"position":[[134,4]]},"368":{"position":[[121,4]]},"486":{"position":[[146,4]]},"518":{"position":[[293,6]]}}}],["backend",{"_index":31,"t":{"4":{"position":[[131,7]]},"132":{"position":[[440,7]]},"135":{"position":[[258,7],[378,7],[486,7]]},"150":{"position":[[464,7]]},"160":{"position":[[182,7],[253,7],[348,7]]},"162":{"position":[[1914,7],[1983,7],[4076,7],[4202,7],[4319,7]]},"187":{"position":[[629,7]]},"189":{"position":[[113,8]]},"203":{"position":[[580,7],[588,7],[600,7]]},"277":{"position":[[834,7],[927,7],[1037,7],[1163,7],[1248,7]]},"285":{"position":[[347,7],[456,7],[547,7]]},"303":{"position":[[292,7],[369,8],[507,7],[886,8],[1085,7],[2340,8]]},"305":{"position":[[21,7],[84,7],[151,8],[220,7],[303,7],[374,8],[426,7],[710,8],[755,8],[785,8]]},"360":{"position":[[230,7]]},"400":{"position":[[211,7]]}}}],["backend<=option1=val1,option2=val2",{"_index":1271,"t":{"162":{"position":[[1941,35]]}}}],["backend=etcd3",{"_index":2438,"t":{"476":{"position":[[1801,13]]},"610":{"position":[[2667,13]]},"612":{"position":[[2615,13]]},"614":{"position":[[2484,13]]},"616":{"position":[[2433,13]]},"618":{"position":[[2446,13]]},"620":{"position":[[2559,13]]},"622":{"position":[[2520,13]]},"626":{"position":[[2593,13]]},"628":{"position":[[2574,13]]},"630":{"position":[[2470,13]]},"632":{"position":[[2586,13]]},"634":{"position":[[2451,13]]},"636":{"position":[[2366,13]]},"646":{"position":[[2541,13]]},"652":{"position":[[2583,13]]},"654":{"position":[[2499,13]]},"656":{"position":[[2505,13]]},"729":{"position":[[2850,13]]},"731":{"position":[[2864,13]]},"733":{"position":[[2979,13]]}}}],["backend=host",{"_index":1783,"t":{"303":{"position":[[1410,12]]}}}],["backend=ipsec",{"_index":1785,"t":{"303":{"position":[[1682,13]]}}}],["backend=non",{"_index":997,"t":{"97":{"position":[[69,12]]},"160":{"position":[[69,12]]},"303":{"position":[[2005,12]]},"307":{"position":[[25,12]]}}}],["backend=vxlan",{"_index":1782,"t":{"303":{"position":[[1293,13]]}}}],["backend=wireguard",{"_index":1269,"t":{"160":{"position":[[218,17]]},"303":{"position":[[1550,17],[1819,17]]},"317":{"position":[[396,17]]}}}],["backup",{"_index":954,"t":{"77":{"position":[[1240,7]]},"118":{"position":[[86,7],[162,7],[611,7],[864,7],[3000,6]]},"135":{"position":[[1114,6]]},"162":{"position":[[5041,6]]},"174":{"position":[[1276,6]]},"191":{"position":[[311,7]]},"195":{"position":[[36,6]]},"197":{"position":[[78,6]]},"203":{"position":[[1044,6]]},"215":{"position":[[1005,6]]},"533":{"position":[[666,7]]}}}],["balanc",{"_index":61,"t":{"4":{"position":[[502,8]]},"75":{"position":[[146,8],[281,8],[313,8],[666,9]]},"87":{"position":[[514,9],[663,9]]},"101":{"position":[[1770,9],[1919,9]]},"162":{"position":[[8872,9],[9021,9]]},"199":{"position":[[55,8],[193,9],[380,8],[436,9],[460,9],[648,9],[741,8]]},"201":{"position":[[393,9]]},"203":{"position":[[72,9],[115,8],[634,7],[1953,9],[2092,8],[2199,9],[2238,8],[2518,8]]},"205":{"position":[[129,8],[236,9],[275,8],[555,8]]},"217":{"position":[[520,8]]},"400":{"position":[[89,8]]},"404":{"position":[[48,8]]},"408":{"position":[[97,8],[296,8],[493,8]]}}}],["bar=baz",{"_index":1741,"t":{"283":{"position":[[610,7]]}}}],["base",{"_index":32,"t":{"4":{"position":[[139,5]]},"50":{"position":[[26,6]]},"54":{"position":[[604,4]]},"59":{"position":[[894,5]]},"135":{"position":[[692,4]]},"162":{"position":[[4554,4]]},"187":{"position":[[1093,5],[1218,5],[1409,5]]},"213":{"position":[[851,5]]},"277":{"position":[[157,5]]},"340":{"position":[[850,5]]},"358":{"position":[[28,5]]},"364":{"position":[[26,5]]},"420":{"position":[[232,5]]},"428":{"position":[[109,5]]},"432":{"position":[[157,5]]},"440":{"position":[[560,5]]},"500":{"position":[[425,5]]},"504":{"position":[[146,5]]},"559":{"position":[[58,6]]},"561":{"position":[[58,6]]},"563":{"position":[[58,6]]},"565":{"position":[[58,6]]},"567":{"position":[[58,6]]},"569":{"position":[[58,6]]},"571":{"position":[[58,6]]},"573":{"position":[[58,6]]},"575":{"position":[[58,6]]},"577":{"position":[[58,6]]},"579":{"position":[[175,6]]},"581":{"position":[[185,6]]},"583":{"position":[[58,6]]},"585":{"position":[[48,6]]},"587":{"position":[[48,6]]},"589":{"position":[[48,6]]},"591":{"position":[[48,6]]},"593":{"position":[[48,6]]},"595":{"position":[[48,6]]},"597":{"position":[[48,6]]},"599":{"position":[[48,6]]},"708":{"position":[[58,6]]},"710":{"position":[[58,6]]},"712":{"position":[[48,6]]},"714":{"position":[[48,6]]},"716":{"position":[[48,6]]},"718":{"position":[[48,6]]},"729":{"position":[[348,5]]},"731":{"position":[[334,5]]},"733":{"position":[[390,5]]},"735":{"position":[[320,5]]},"737":{"position":[[377,5]]},"739":{"position":[[354,5]]},"741":{"position":[[354,5]]},"743":{"position":[[228,5]]},"745":{"position":[[322,5]]},"747":{"position":[[538,5]]},"749":{"position":[[404,5]]},"751":{"position":[[258,5]]},"753":{"position":[[963,5]]}}}],["base64",{"_index":1621,"t":{"247":{"position":[[2048,6]]}}}],["baselin",{"_index":1967,"t":{"350":{"position":[[254,8]]},"434":{"position":[[711,8],[757,8]]},"438":{"position":[[160,8]]},"448":{"position":[[14,8]]}}}],["basenam",{"_index":1889,"t":{"326":{"position":[[417,9]]}}}],["bash",{"_index":1077,"t":{"110":{"position":[[2628,4]]},"112":{"position":[[2010,4]]},"114":{"position":[[1758,4]]}}}],["basi",{"_index":857,"t":{"65":{"position":[[295,6]]},"531":{"position":[[107,5]]}}}],["basic",{"_index":1298,"t":{"168":{"position":[[1312,5]]},"281":{"position":[[274,5]]},"342":{"position":[[680,5],[738,5],[799,5],[820,5]]},"426":{"position":[[334,6]]},"444":{"position":[[90,5]]},"484":{"position":[[337,5]]},"705":{"position":[[515,5]]}}}],["bastion",{"_index":1651,"t":{"257":{"position":[[129,7]]}}}],["batteri",{"_index":52,"t":{"4":{"position":[[410,10]]}}}],["bcm2711",{"_index":2223,"t":{"434":{"position":[[473,8],[556,8],[617,8]]},"442":{"position":[[175,8]]}}}],["be",{"_index":400,"t":{"23":{"position":[[341,5]]},"112":{"position":[[2477,5]]},"114":{"position":[[2262,5]]},"116":{"position":[[1225,5]]},"281":{"position":[[713,5]]},"330":{"position":[[331,5]]}}}],["be1450e1a11",{"_index":336,"t":{"19":{"position":[[2280,12]]}}}],["be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9",{"_index":2724,"t":{"604":{"position":[[1634,64]]},"606":{"position":[[1615,64]]},"624":{"position":[[1628,64]]},"677":{"position":[[1600,64]]}}}],["bearer",{"_index":1292,"t":{"168":{"position":[[614,6],[1321,6]]},"170":{"position":[[53,6]]},"295":{"position":[[270,6]]}}}],["becom",{"_index":512,"t":{"31":{"position":[[437,6],[477,6]]},"118":{"position":[[2397,6]]},"137":{"position":[[586,6]]},"162":{"position":[[3312,6]]}}}],["befor",{"_index":786,"t":{"59":{"position":[[330,6]]},"110":{"position":[[1918,6]]},"128":{"position":[[439,6],[1228,6]]},"166":{"position":[[178,6]]},"168":{"position":[[841,6]]},"176":{"position":[[88,6]]},"179":{"position":[[1303,6]]},"253":{"position":[[123,6]]},"266":{"position":[[0,6]]},"303":{"position":[[839,6],[2262,6]]},"307":{"position":[[1081,6]]},"319":{"position":[[206,6]]},"332":{"position":[[494,6]]},"378":{"position":[[129,6]]},"420":{"position":[[453,6]]},"472":{"position":[[281,6]]},"540":{"position":[[1761,6]]},"579":{"position":[[415,6]]},"650":{"position":[[545,6]]},"685":{"position":[[439,6]]},"687":{"position":[[328,6]]},"689":{"position":[[353,6]]},"691":{"position":[[505,6]]},"693":{"position":[[331,6]]},"695":{"position":[[363,6]]},"697":{"position":[[462,6]]}}}],["begin",{"_index":1645,"t":{"253":{"position":[[134,5]]},"432":{"position":[[2533,5]]},"540":{"position":[[296,5],[2412,5]]}}}],["behavior",{"_index":979,"t":{"87":{"position":[[303,9]]},"101":{"position":[[2020,9]]},"162":{"position":[[8398,9]]},"277":{"position":[[692,8],[1348,9]]},"326":{"position":[[1557,8]]}}}],["behind",{"_index":2013,"t":{"360":{"position":[[934,6]]}}}],["below",{"_index":507,"t":{"31":{"position":[[350,5]]},"73":{"position":[[162,6]]},"99":{"position":[[278,5]]},"101":{"position":[[33,6]]},"118":{"position":[[2794,5]]},"162":{"position":[[33,6]]},"181":{"position":[[408,5]]},"187":{"position":[[264,5],[653,6]]},"259":{"position":[[168,6]]},"263":{"position":[[367,6]]},"268":{"position":[[56,6],[1103,6]]},"277":{"position":[[1070,5]]},"281":{"position":[[302,6]]},"283":{"position":[[553,6]]},"342":{"position":[[810,5]]},"344":{"position":[[0,5]]},"346":{"position":[[0,5]]},"350":{"position":[[71,6]]},"398":{"position":[[505,5],[1348,5],[2523,5]]},"458":{"position":[[174,5]]},"460":{"position":[[1023,6]]},"464":{"position":[[336,6]]},"470":{"position":[[587,5],[1096,5],[1182,5]]},"472":{"position":[[512,6]]},"474":{"position":[[18,5]]},"476":{"position":[[7,5],[4443,6]]},"480":{"position":[[601,6]]},"482":{"position":[[700,6]]},"484":{"position":[[581,6]]},"486":{"position":[[421,6]]},"488":{"position":[[596,6]]},"490":{"position":[[582,6]]},"492":{"position":[[806,6]]},"494":{"position":[[599,6]]},"500":{"position":[[673,6]]},"504":{"position":[[724,6]]},"518":{"position":[[171,5]]},"524":{"position":[[128,5]]},"536":{"position":[[341,5],[1515,6]]},"559":{"position":[[44,5]]},"561":{"position":[[44,5]]},"563":{"position":[[44,5]]},"565":{"position":[[44,5]]},"567":{"position":[[44,5]]},"569":{"position":[[44,5]]},"571":{"position":[[44,5]]},"573":{"position":[[44,5]]},"575":{"position":[[44,5]]},"577":{"position":[[44,5]]},"579":{"position":[[161,5]]},"581":{"position":[[171,5]]},"583":{"position":[[44,5]]},"585":{"position":[[34,5]]},"587":{"position":[[34,5]]},"589":{"position":[[34,5]]},"591":{"position":[[34,5]]},"593":{"position":[[34,5]]},"595":{"position":[[34,5]]},"597":{"position":[[34,5]]},"599":{"position":[[34,5]]},"602":{"position":[[153,5]]},"610":{"position":[[306,6]]},"614":{"position":[[247,6]]},"620":{"position":[[221,5]]},"636":{"position":[[153,5]]},"646":{"position":[[153,5]]},"662":{"position":[[153,5]]},"667":{"position":[[170,5]]},"669":{"position":[[169,5]]},"680":{"position":[[157,5]]},"685":{"position":[[204,5]]},"687":{"position":[[130,5]]},"691":{"position":[[246,5]]},"693":{"position":[[130,5]]},"697":{"position":[[253,5]]},"708":{"position":[[44,5]]},"710":{"position":[[44,5]]},"712":{"position":[[34,5]]},"714":{"position":[[34,5]]},"716":{"position":[[34,5]]},"718":{"position":[[34,5]]},"729":{"position":[[271,5]]},"731":{"position":[[257,5]]},"733":{"position":[[300,5]]},"735":{"position":[[247,5]]},"737":{"position":[[284,5]]},"739":{"position":[[269,5]]},"745":{"position":[[268,5]]},"747":{"position":[[390,5]]},"751":{"position":[[152,5]]},"815":{"position":[[133,6]]}}}],["benchmark",{"_index":445,"t":{"25":{"position":[[1085,9],[1275,11]]},"458":{"position":[[204,9],[241,9]]},"460":{"position":[[168,9],[486,10],[1065,9]]},"466":{"position":[[48,9]]},"468":{"position":[[1311,10]]},"508":{"position":[[103,10],[137,9]]},"555":{"position":[[184,9],[319,10],[529,10],[714,9],[751,10],[897,9],[1060,10],[1248,10],[1448,9]]},"817":{"position":[[179,9]]}}}],["benchmark'",{"_index":2540,"t":{"508":{"position":[[215,11]]}}}],["best",{"_index":564,"t":{"35":{"position":[[205,4]]},"185":{"position":[[244,4]]},"187":{"position":[[1518,4]]},"217":{"position":[[341,4]]},"247":{"position":[[2559,4]]},"456":{"position":[[188,4]]}}}],["better",{"_index":1415,"t":{"199":{"position":[[796,6]]},"221":{"position":[[436,6]]}}}],["between",{"_index":562,"t":{"35":{"position":[[61,7]]},"114":{"position":[[1118,7]]},"128":{"position":[[603,7]]},"303":{"position":[[1506,7]]},"309":{"position":[[50,7],[121,7]]},"315":{"position":[[310,7]]},"317":{"position":[[958,7]]},"319":{"position":[[144,7]]},"326":{"position":[[1513,7]]},"504":{"position":[[479,7]]},"610":{"position":[[92,7]]},"612":{"position":[[91,7]]},"650":{"position":[[92,7]]},"656":{"position":[[92,7]]}}}],["bfa1",{"_index":317,"t":{"19":{"position":[[1740,4],[2057,4]]}}}],["bffdc9d7a65f",{"_index":306,"t":{"19":{"position":[[1412,12]]}}}],["bidirect",{"_index":1817,"t":{"309":{"position":[[93,13]]}}}],["big",{"_index":109,"t":{"6":{"position":[[162,3]]}}}],["biggest",{"_index":1996,"t":{"358":{"position":[[393,7]]},"452":{"position":[[35,7]]}}}],["bin",{"_index":664,"t":{"44":{"position":[[465,3],[589,3]]},"95":{"position":[[105,3]]},"101":{"position":[[1299,3],[3340,3]]},"158":{"position":[[161,3]]},"162":{"position":[[6624,3],[8659,3]]},"476":{"position":[[3346,3]]}}}],["bin/bash",{"_index":2656,"t":{"579":{"position":[[296,11]]},"650":{"position":[[426,11]]},"685":{"position":[[320,11]]},"687":{"position":[[209,11]]},"689":{"position":[[234,11]]},"691":{"position":[[386,11]]},"693":{"position":[[212,11]]},"695":{"position":[[244,11]]},"697":{"position":[[343,11]]}}}],["bin/p",{"_index":2704,"t":{"604":{"position":[[289,7]]},"606":{"position":[[218,7]]},"624":{"position":[[278,7]]},"677":{"position":[[227,7]]},"745":{"position":[[451,7]]},"753":{"position":[[1092,7]]}}}],["bin/sh",{"_index":2689,"t":{"585":{"position":[[182,7]]},"587":{"position":[[159,7]]},"589":{"position":[[165,7]]},"591":{"position":[[167,7]]},"714":{"position":[[201,7]]},"729":{"position":[[477,7]]},"731":{"position":[[463,7]]},"733":{"position":[[519,7]]}}}],["binari",{"_index":6,"t":{"2":{"position":[[67,6]]},"4":{"position":[[103,7],[636,6]]},"33":{"position":[[554,7]]},"77":{"position":[[8,6]]},"95":{"position":[[134,8],[153,8]]},"101":{"position":[[1385,8],[3384,8],[3403,8]]},"158":{"position":[[190,8],[209,8]]},"162":{"position":[[6710,8],[8703,8],[8722,8]]},"266":{"position":[[173,6],[271,6],[1103,7]]},"271":{"position":[[327,6]]},"279":{"position":[[179,6]]},"285":{"position":[[401,7]]},"303":{"position":[[1733,6],[1862,6],[2110,8]]},"305":{"position":[[276,8]]},"420":{"position":[[19,6]]},"432":{"position":[[479,7],[572,8],[1012,7]]},"460":{"position":[[1239,7]]},"516":{"position":[[156,6]]},"544":{"position":[[84,6]]},"550":{"position":[[68,6],[109,6],[182,6],[208,6]]}}}],["bind",{"_index":505,"t":{"31":{"position":[[322,4]]},"144":{"position":[[27,4],[58,4]]},"162":{"position":[[695,4],[729,4]]},"203":{"position":[[525,4]]},"476":{"position":[[321,4],[2315,4],[2884,4],[3804,4]]},"610":{"position":[[990,4]]},"612":{"position":[[938,4]]},"614":{"position":[[807,4]]},"616":{"position":[[756,4]]},"618":{"position":[[769,4]]},"620":{"position":[[882,4]]},"622":{"position":[[843,4]]},"626":{"position":[[916,4]]},"628":{"position":[[897,4]]},"630":{"position":[[793,4]]},"632":{"position":[[909,4]]},"634":{"position":[[774,4]]},"636":{"position":[[689,4]]},"646":{"position":[[864,4]]},"652":{"position":[[906,4],[3047,4]]},"654":{"position":[[822,4]]},"656":{"position":[[828,4]]},"667":{"position":[[718,4]]},"669":{"position":[[786,4]]},"671":{"position":[[871,4]]},"673":{"position":[[768,4]]},"677":{"position":[[197,4],[292,4],[323,4]]},"680":{"position":[[639,4]]},"682":{"position":[[179,4],[297,5],[332,4],[376,4],[713,4]]},"729":{"position":[[1173,4]]},"731":{"position":[[1187,4]]},"733":{"position":[[1302,4]]},"735":{"position":[[1321,4],[2544,4]]},"747":{"position":[[1512,4],[2735,4]]},"756":{"position":[[209,4]]},"770":{"position":[[66,4]]}}}],["bitnami",{"_index":1587,"t":{"247":{"position":[[172,7]]}}}],["black",{"_index":1660,"t":{"266":{"position":[[583,5]]}}}],["block",{"_index":850,"t":{"65":{"position":[[166,7],[870,7],[1181,7]]},"470":{"position":[[553,7],[977,7]]},"524":{"position":[[91,5]]}}}],["blog",{"_index":1639,"t":{"251":{"position":[[157,4]]}}}],["boolean",{"_index":1732,"t":{"281":{"position":[[746,7]]},"342":{"position":[[463,7]]}}}],["boop",{"_index":1740,"t":{"283":{"position":[[581,4],[913,4]]}}}],["boot/cmdline.txt",{"_index":711,"t":{"50":{"position":[[292,18]]}}}],["bootstrap",{"_index":952,"t":{"77":{"position":[[1124,9]]},"108":{"position":[[474,9],[1078,9]]},"168":{"position":[[686,14]]},"170":{"position":[[241,13]]},"172":{"position":[[256,9]]},"178":{"position":[[82,9],[272,9],[290,9]]},"179":{"position":[[4,9],[82,9],[159,9],[258,9],[303,9],[364,9],[426,9],[1869,9],[2324,9]]},"247":{"position":[[1461,9]]},"533":{"position":[[307,9]]}}}],["both",{"_index":161,"t":{"15":{"position":[[47,4]]},"67":{"position":[[444,4]]},"75":{"position":[[1479,4]]},"116":{"position":[[395,4]]},"118":{"position":[[2740,4]]},"124":{"position":[[719,4]]},"174":{"position":[[238,4]]},"201":{"position":[[56,4]]},"217":{"position":[[1092,4]]},"281":{"position":[[838,4],[931,4]]},"303":{"position":[[814,4]]},"311":{"position":[[360,4]]},"317":{"position":[[851,4],[889,4]]},"322":{"position":[[156,4]]},"424":{"position":[[1218,4]]},"440":{"position":[[298,4]]},"466":{"position":[[496,4]]},"472":{"position":[[796,4]]},"516":{"position":[[538,4]]},"540":{"position":[[1785,4]]}}}],["bound",{"_index":516,"t":{"31":{"position":[[565,6],[811,5]]},"454":{"position":[[1043,6]]},"522":{"position":[[467,5]]},"528":{"position":[[400,5]]}}}],["box",{"_index":2564,"t":{"518":{"position":[[123,3]]}}}],["bracket",{"_index":1003,"t":{"101":{"position":[[24,8]]},"162":{"position":[[24,8]]}}}],["breakout",{"_index":494,"t":{"29":{"position":[[173,8]]}}}],["breviti",{"_index":1187,"t":{"124":{"position":[[1095,8]]},"126":{"position":[[880,8]]}}}],["bridg",{"_index":2015,"t":{"360":{"position":[[1031,6]]}}}],["broken",{"_index":2288,"t":{"458":{"position":[[81,6]]}}}],["bucket",{"_index":1153,"t":{"118":{"position":[[3259,6],[3269,6],[3310,6],[3487,6],[3824,6],[4622,6]]},"135":{"position":[[1479,6],[1499,6],[1550,6]]},"162":{"position":[[5425,6],[5446,6],[5498,6]]}}}],["bucket=<s3",{"_index":1156,"t":{"118":{"position":[[3476,10],[3813,10],[4611,10]]}}}],["bug",{"_index":647,"t":{"44":{"position":[[78,3]]},"311":{"position":[[329,4]]}}}],["build",{"_index":1870,"t":{"319":{"position":[[131,5]]}}}],["building.md",{"_index":1553,"t":{"233":{"position":[[25,11]]}}}],["built",{"_index":1368,"t":{"185":{"position":[[730,5]]},"420":{"position":[[58,6],[611,5]]},"506":{"position":[[696,5]]},"516":{"position":[[52,5]]}}}],["builtin",{"_index":583,"t":{"35":{"position":[[680,7],[729,7],[753,7]]}}}],["bundl",{"_index":365,"t":{"21":{"position":[[71,6]]},"44":{"position":[[395,7],[457,7],[581,7]]},"95":{"position":[[97,7],[116,7]]},"101":{"position":[[3332,7],[3366,7]]},"158":{"position":[[153,7],[172,7]]},"162":{"position":[[8651,7],[8685,7]]},"168":{"position":[[922,6],[1215,7]]},"170":{"position":[[188,6]]},"673":{"position":[[214,6]]}}}],["burst",{"_index":858,"t":{"65":{"position":[[326,5],[518,5]]}}}],["burst=10",{"_index":866,"t":{"65":{"position":[[576,9]]}}}],["burst=<limit",{"_index":864,"t":{"65":{"position":[[505,12]]}}}],["busi",{"_index":2505,"t":{"486":{"position":[[262,8]]}}}],["bypass",{"_index":1048,"t":{"110":{"position":[[166,9]]},"114":{"position":[[743,6]]}}}],["bzdg5",{"_index":2741,"t":{"610":{"position":[[706,5]]},"612":{"position":[[654,5]]},"614":{"position":[[523,5]]},"616":{"position":[[472,5]]},"618":{"position":[[485,5]]},"620":{"position":[[598,5]]},"622":{"position":[[559,5]]},"626":{"position":[[632,5]]},"628":{"position":[[613,5]]},"630":{"position":[[509,5]]},"632":{"position":[[625,5]]},"634":{"position":[[490,5]]},"636":{"position":[[405,5]]},"646":{"position":[[580,5]]},"652":{"position":[[622,5],[2798,5]]},"654":{"position":[[538,5]]},"656":{"position":[[544,5]]},"667":{"position":[[431,5]]},"669":{"position":[[499,5]]},"671":{"position":[[584,5]]},"673":{"position":[[481,5]]},"680":{"position":[[390,5]]},"682":{"position":[[464,5]]},"729":{"position":[[889,5]]},"731":{"position":[[903,5]]},"733":{"position":[[1018,5]]},"735":{"position":[[1918,5],[2614,5]]},"747":{"position":[[2109,5],[2805,5]]}}}],["c",{"_index":379,"t":{"21":{"position":[[406,1]]},"101":{"position":[[232,1]]},"162":{"position":[[243,1]]},"281":{"position":[[1193,1]]},"416":{"position":[[321,1],[738,1]]},"579":{"position":[[676,1]]},"585":{"position":[[191,1],[267,1]]},"587":{"position":[[168,1],[248,1]]},"589":{"position":[[174,1],[254,1]]},"591":{"position":[[176,1],[257,1]]},"593":{"position":[[179,1]]},"595":{"position":[[230,1]]},"597":{"position":[[184,1]]},"599":{"position":[[184,1]]},"604":{"position":[[448,1]]},"606":{"position":[[429,1]]},"624":{"position":[[442,1]]},"650":{"position":[[806,1]]},"677":{"position":[[414,1]]},"685":{"position":[[700,1]]},"687":{"position":[[589,1]]},"689":{"position":[[614,1]]},"691":{"position":[[766,1]]},"693":{"position":[[592,1]]},"695":{"position":[[624,1]]},"697":{"position":[[723,1]]},"712":{"position":[[201,1]]},"714":{"position":[[210,1],[284,1]]},"716":{"position":[[203,1]]},"718":{"position":[[209,1]]},"720":{"position":[[142,1]]},"722":{"position":[[142,1]]},"729":{"position":[[486,1]]},"731":{"position":[[472,1]]},"733":{"position":[[528,1]]}}}],["c3675b87f96c",{"_index":356,"t":{"19":{"position":[[2636,12]]}}}],["c4d3d16fe508",{"_index":347,"t":{"19":{"position":[[2476,12]]}}}],["c6id.xlarg",{"_index":2258,"t":{"442":{"position":[[52,11]]}}}],["ca",{"_index":133,"t":{"11":{"position":[[48,4],[113,2],[220,2],[265,2],[313,2]]},"108":{"position":[[32,2],[114,2],[237,2],[300,2],[415,2],[592,2],[848,2],[905,2],[1388,2],[1422,2],[1460,2]]},"110":{"position":[[3,2],[142,2],[307,2],[423,2],[478,2],[540,3],[620,2],[1202,2],[1222,2],[1340,2],[1378,2],[1583,2],[1641,2],[1760,2],[2076,2],[2101,2],[2241,2],[2321,3],[2516,2],[2614,2],[2776,2],[2877,2]]},"112":{"position":[[17,2],[65,2],[440,2],[480,2],[548,2],[574,2],[650,2],[863,3],[921,2],[1304,2],[1329,2],[1432,2],[1603,4],[1653,4],[1880,2],[1978,2],[2036,2],[2097,2],[2137,2],[2360,3]]},"114":{"position":[[40,2],[88,2],[476,2],[615,2],[635,2],[683,2],[825,3],[837,2],[874,2],[957,4],[1012,3],[1031,2],[1058,2],[1142,4],[1209,2],[1263,3],[1327,2],[1449,4],[1499,2],[1546,4],[1744,2],[1885,2],[1930,2],[1947,2]]},"116":{"position":[[294,3],[334,2],[1147,2],[1254,2]]},"118":{"position":[[3067,2],[3080,2]]},"135":{"position":[[1221,2],[1244,2]]},"162":{"position":[[5149,2],[5173,2]]},"168":{"position":[[116,2],[208,2],[250,2],[335,2],[439,2],[919,2],[1005,2],[1212,2]]},"170":{"position":[[185,2]]},"174":{"position":[[714,2],[865,2],[1024,2],[1109,2],[1163,2]]},"179":{"position":[[713,2]]},"187":{"position":[[726,4],[916,2]]},"247":{"position":[[1342,2]]},"342":{"position":[[369,2]]},"344":{"position":[[488,2],[747,2]]},"476":{"position":[[412,2],[1328,2],[2635,2],[3201,2]]},"579":{"position":[[1523,2],[2006,2]]},"610":{"position":[[1081,2],[2133,2]]},"612":{"position":[[1029,2],[2081,2]]},"614":{"position":[[898,2],[1950,2]]},"616":{"position":[[847,2],[1899,2]]},"618":{"position":[[860,2],[1912,2]]},"620":{"position":[[973,2],[2025,2]]},"622":{"position":[[934,2],[1986,2]]},"626":{"position":[[1007,2],[2059,2]]},"628":{"position":[[988,2],[2040,2]]},"630":{"position":[[884,2],[1936,2]]},"632":{"position":[[1000,2],[2052,2]]},"634":{"position":[[865,2],[1917,2]]},"636":{"position":[[780,2],[1832,2]]},"646":{"position":[[955,2],[2007,2]]},"650":{"position":[[1653,2],[2136,2]]},"652":{"position":[[997,2],[2049,2]]},"654":{"position":[[287,2],[311,2],[423,2],[459,2],[913,2],[1965,2]]},"656":{"position":[[919,2],[1971,2]]},"667":{"position":[[1785,2]]},"669":{"position":[[1853,2]]},"671":{"position":[[1938,2]]},"673":{"position":[[177,2],[235,2],[368,2],[402,2],[1835,2]]},"685":{"position":[[1547,2],[2030,2]]},"687":{"position":[[1436,2],[1919,2]]},"689":{"position":[[1461,2],[1944,2]]},"691":{"position":[[1613,2],[2096,2]]},"693":{"position":[[1439,2],[1922,2]]},"695":{"position":[[1471,2],[1954,2]]},"697":{"position":[[280,2],[1570,2],[2053,2],[2143,2],[2189,2],[2205,2],[2273,2],[2341,2]]},"720":{"position":[[99,2]]},"722":{"position":[[92,2]]},"729":{"position":[[1264,2],[2316,2]]},"731":{"position":[[1278,2],[2330,2]]},"733":{"position":[[142,2],[357,2],[381,2],[728,2],[773,2],[868,2],[913,2],[1393,2],[2445,2]]},"735":{"position":[[911,2],[2134,2]]},"747":{"position":[[1102,2],[2325,2]]}}}],["ca.crt",{"_index":385,"t":{"21":{"position":[[607,6]]},"110":{"position":[[832,6],[860,6],[896,6],[1005,6],[1041,6]]},"476":{"position":[[459,6],[603,6],[900,6],[1383,6],[2441,6],[2682,6],[3243,6]]},"610":{"position":[[1128,6],[1359,6],[1649,6],[2188,6]]},"612":{"position":[[1076,6],[1307,6],[1597,6],[2136,6]]},"614":{"position":[[945,6],[1176,6],[1466,6],[2005,6]]},"616":{"position":[[894,6],[1125,6],[1415,6],[1954,6]]},"618":{"position":[[907,6],[1138,6],[1428,6],[1967,6]]},"620":{"position":[[1020,6],[1251,6],[1541,6],[2080,6]]},"622":{"position":[[981,6],[1212,6],[1502,6],[2041,6]]},"626":{"position":[[1054,6],[1285,6],[1575,6],[2114,6]]},"628":{"position":[[1035,6],[1266,6],[1556,6],[2095,6]]},"630":{"position":[[931,6],[1162,6],[1452,6],[1991,6]]},"632":{"position":[[1047,6],[1278,6],[1568,6],[2107,6]]},"634":{"position":[[912,6],[1143,6],[1433,6],[1972,6]]},"636":{"position":[[827,6],[1058,6],[1348,6],[1887,6]]},"646":{"position":[[1002,6],[1233,6],[1523,6],[2062,6]]},"652":{"position":[[1044,6],[1275,6],[1565,6],[2104,6]]},"654":{"position":[[960,6],[1191,6],[1481,6],[2020,6]]},"656":{"position":[[966,6],[1197,6],[1487,6],[2026,6]]},"667":{"position":[[925,6],[1109,6],[1287,6],[1465,6],[1832,6]]},"669":{"position":[[993,6],[1177,6],[1355,6],[1533,6],[1900,6]]},"671":{"position":[[1078,6],[1262,6],[1440,6],[1618,6],[1985,6]]},"673":{"position":[[975,6],[1159,6],[1337,6],[1515,6],[1882,6]]},"697":{"position":[[2258,6],[2324,6]]},"720":{"position":[[186,6]]},"722":{"position":[[189,6]]},"729":{"position":[[1311,6],[1542,6],[1832,6],[2371,6]]},"731":{"position":[[1325,6],[1556,6],[1846,6],[2385,6]]},"733":{"position":[[828,8],[968,6],[1440,6],[1671,6],[1961,6],[2500,6]]},"735":{"position":[[953,6],[2176,6]]},"747":{"position":[[1144,6],[2367,6]]}}}],["ca.key",{"_index":1058,"t":{"110":{"position":[[846,6],[874,6],[918,6],[1022,6],[1060,6],[1703,6],[1851,6],[2459,6]]},"476":{"position":[[2514,6]]},"667":{"position":[[1020,6],[1197,6],[1376,6],[1553,6]]},"669":{"position":[[1088,6],[1265,6],[1444,6],[1621,6]]},"671":{"position":[[1173,6],[1350,6],[1529,6],[1706,6]]},"673":{"position":[[1070,6],[1247,6],[1426,6],[1603,6]]}}}],["ca.pem",{"_index":1066,"t":{"110":{"position":[[1691,6],[1811,6],[1831,6],[2387,6],[2422,6]]}}}],["ca_fil",{"_index":1954,"t":{"342":{"position":[[349,7]]},"344":{"position":[[465,8],[724,8]]}}}],["cacert",{"_index":1294,"t":{"168":{"position":[[934,8]]}}}],["cacert=/var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":384,"t":{"21":{"position":[[556,50]]}}}],["cach",{"_index":1937,"t":{"340":{"position":[[435,6]]}}}],["cafil",{"_index":1211,"t":{"135":{"position":[[168,6]]},"162":{"position":[[4002,6]]},"187":{"position":[[672,6]]},"656":{"position":[[433,7],[466,7]]}}}],["cafile=/var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":2410,"t":{"476":{"position":[[552,50]]},"610":{"position":[[1308,50]]},"612":{"position":[[1256,50]]},"614":{"position":[[1125,50]]},"616":{"position":[[1074,50]]},"618":{"position":[[1087,50]]},"620":{"position":[[1200,50]]},"622":{"position":[[1161,50]]},"626":{"position":[[1234,50]]},"628":{"position":[[1215,50]]},"630":{"position":[[1111,50]]},"632":{"position":[[1227,50]]},"634":{"position":[[1092,50]]},"636":{"position":[[1007,50]]},"646":{"position":[[1182,50]]},"652":{"position":[[1224,50]]},"654":{"position":[[1140,50]]},"656":{"position":[[1146,50]]},"729":{"position":[[1491,50]]},"731":{"position":[[1505,50]]},"733":{"position":[[1620,50]]}}}],["cafile=<path/to/ca",{"_index":2781,"t":{"656":{"position":[[307,18]]}}}],["calcul",{"_index":1295,"t":{"168":{"position":[[972,9],[1053,10]]}}}],["calico",{"_index":1801,"t":{"307":{"position":[[272,6],[707,6],[744,6],[901,6]]}}}],["calico.conflist",{"_index":1809,"t":{"307":{"position":[[1015,15]]}}}],["call",{"_index":391,"t":{"23":{"position":[[172,6]]},"69":{"position":[[248,7]]},"464":{"position":[[279,6]]},"540":{"position":[[1195,4]]},"555":{"position":[[1955,6]]}}}],["can't",{"_index":1366,"t":{"185":{"position":[[616,5]]}}}],["canal",{"_index":1800,"t":{"307":{"position":[[266,5],[296,5],[344,6],[362,5],[518,5]]}}}],["canal.conflist",{"_index":1808,"t":{"307":{"position":[[631,14]]}}}],["cancel",{"_index":1040,"t":{"108":{"position":[[1309,9]]}}}],["cap_sys_boot",{"_index":2599,"t":{"536":{"position":[[830,12]]}}}],["capabl",{"_index":2019,"t":{"360":{"position":[[1119,12]]},"484":{"position":[[349,13]]},"536":{"position":[[843,10]]},"787":{"position":[[154,11]]},"791":{"position":[[44,12],[169,12],[279,13]]}}}],["capac",{"_index":2182,"t":{"428":{"position":[[935,8]]}}}],["captur",{"_index":1584,"t":{"247":{"position":[[30,8]]},"358":{"position":[[189,8]]},"434":{"position":[[13,8]]},"444":{"position":[[13,8]]},"452":{"position":[[13,8]]}}}],["card",{"_index":1520,"t":{"221":{"position":[[109,6]]},"358":{"position":[[703,5],[927,4]]}}}],["care",{"_index":1892,"t":{"326":{"position":[[592,4]]},"456":{"position":[[79,4]]},"705":{"position":[[173,4]]}}}],["carefulli",{"_index":1310,"t":{"174":{"position":[[468,10]]}}}],["carri",{"_index":2508,"t":{"488":{"position":[[223,8]]},"490":{"position":[[222,8]]}}}],["case",{"_index":898,"t":{"71":{"position":[[49,6]]},"185":{"position":[[263,5]]},"199":{"position":[[717,6]]},"207":{"position":[[146,6]]},"217":{"position":[[107,5]]},"247":{"position":[[1861,4]]},"326":{"position":[[1083,4]]},"346":{"position":[[418,4]]},"398":{"position":[[2849,6],[3136,4]]},"404":{"position":[[1324,4]]},"500":{"position":[[228,5]]},"516":{"position":[[298,6]]},"555":{"position":[[1494,4]]},"579":{"position":[[642,4],[1667,4]]},"650":{"position":[[772,4],[1797,4]]},"685":{"position":[[666,4],[1691,4]]},"687":{"position":[[555,4],[1580,4]]},"689":{"position":[[580,4],[1605,4]]},"691":{"position":[[732,4],[1757,4]]},"693":{"position":[[558,4],[1583,4]]},"695":{"position":[[590,4],[1615,4]]},"697":{"position":[[689,4],[1714,4]]}}}],["cat",{"_index":1118,"t":{"116":{"position":[[999,3]]},"215":{"position":[[303,3]]},"307":{"position":[[609,3],[993,3]]},"533":{"position":[[992,3]]},"689":{"position":[[2295,4],[2535,4],[2775,4]]},"695":{"position":[[2340,4]]}}}],["catalog",{"_index":1578,"t":{"245":{"position":[[330,8]]}}}],["cattl",{"_index":841,"t":{"63":{"position":[[227,6],[339,6]]}}}],["caus",{"_index":483,"t":{"27":{"position":[[625,6]]},"44":{"position":[[88,6]]},"132":{"position":[[105,5]]},"189":{"position":[[1306,5]]},"311":{"position":[[152,6]]},"332":{"position":[[97,5],[537,5]]},"392":{"position":[[115,5]]},"394":{"position":[[225,5]]},"422":{"position":[[148,5]]},"428":{"position":[[1287,6]]},"454":{"position":[[379,5],[946,5]]},"464":{"position":[[33,5]]},"540":{"position":[[1688,5],[1966,5],[2498,5]]}}}],["caution",{"_index":1082,"t":{"112":{"position":[[236,7]]},"114":{"position":[[259,7]]},"116":{"position":[[422,7]]},"122":{"position":[[259,7],[390,8]]},"174":{"position":[[843,7]]},"191":{"position":[[82,7]]},"221":{"position":[[0,7]]},"384":{"position":[[0,7]]},"524":{"position":[[0,7]]}}}],["cbc",{"_index":1192,"t":{"128":{"position":[[365,3],[677,3],[716,3],[1756,3]]},"510":{"position":[[173,3]]}}}],["ccm",{"_index":2148,"t":{"420":{"position":[[145,5],[482,4],[582,4],[620,3]]}}}],["ccm.yaml",{"_index":1919,"t":{"332":{"position":[[622,8]]}}}],["center",{"_index":2291,"t":{"460":{"position":[[196,6]]},"466":{"position":[[62,8]]},"516":{"position":[[221,6]]},"555":{"position":[[796,6]]}}}],["cento",{"_index":751,"t":{"54":{"position":[[125,8]]}}}],["cephf",{"_index":2554,"t":{"516":{"position":[[470,6]]}}}],["cert",{"_index":1067,"t":{"110":{"position":[[1903,5],[2001,4],[2079,4],[2519,5]]},"112":{"position":[[990,5],[1162,5],[1241,4],[1307,4],[1883,5],[2039,5]]},"114":{"position":[[1502,5],[1626,6],[1784,5]]},"116":{"position":[[687,4]]},"118":{"position":[[3083,4]]},"135":{"position":[[1247,4]]},"144":{"position":[[452,4]]},"162":{"position":[[1233,4],[5176,4]]},"217":{"position":[[1015,5]]},"342":{"position":[[432,4]]},"344":{"position":[[380,4],[639,4]]},"476":{"position":[[346,4],[397,5],[1115,4],[1821,4],[2392,4],[4222,4]]},"579":{"position":[[941,5],[1075,4],[1268,5],[1400,4],[1767,5],[1816,4],[1874,4],[1927,4]]},"610":{"position":[[1015,4],[1066,5],[1920,4],[2687,4]]},"612":{"position":[[321,4],[963,4],[1014,5],[1868,4],[2635,4]]},"614":{"position":[[832,4],[883,5],[1737,4],[2504,4]]},"616":{"position":[[781,4],[832,5],[1686,4],[2453,4]]},"618":{"position":[[794,4],[845,5],[1699,4],[2466,4]]},"620":{"position":[[907,4],[958,5],[1812,4],[2579,4]]},"622":{"position":[[868,4],[919,5],[1773,4],[2540,4]]},"626":{"position":[[941,4],[992,5],[1846,4],[2613,4]]},"628":{"position":[[922,4],[973,5],[1827,4],[2594,4]]},"630":{"position":[[818,4],[869,5],[1723,4],[2490,4]]},"632":{"position":[[934,4],[985,5],[1839,4],[2606,4]]},"634":{"position":[[799,4],[850,5],[1704,4],[2471,4]]},"636":{"position":[[714,4],[765,5],[1619,4],[2386,4]]},"646":{"position":[[889,4],[940,5],[1794,4],[2561,4]]},"650":{"position":[[1071,5],[1205,4],[1398,5],[1530,4],[1897,5],[1946,4],[2004,4],[2057,4]]},"652":{"position":[[298,4],[501,4],[931,4],[982,5],[1836,4],[2603,4],[3072,4]]},"654":{"position":[[847,4],[898,5],[1752,4],[2519,4]]},"656":{"position":[[853,4],[904,5],[1758,4],[2525,4]]},"667":{"position":[[743,4],[876,4],[1060,4],[1238,4],[1416,4]]},"669":{"position":[[811,4],[944,4],[1128,4],[1306,4],[1484,4]]},"671":{"position":[[896,4],[1029,4],[1213,4],[1391,4],[1569,4]]},"673":{"position":[[793,4],[926,4],[1110,4],[1288,4],[1466,4]]},"680":{"position":[[664,4]]},"682":{"position":[[738,4]]},"685":{"position":[[224,4],[965,5],[1099,4],[1292,5],[1424,4],[1791,5],[1840,4],[1898,4],[1951,4],[2111,5],[2176,4],[2199,4],[2330,4]]},"687":{"position":[[156,4],[854,5],[988,4],[1181,5],[1313,4],[1680,5],[1729,4],[1787,4],[1840,4],[2010,4],[2043,4],[2098,4],[2120,4],[2145,4]]},"689":{"position":[[879,5],[1013,4],[1206,5],[1338,4],[1705,5],[1754,4],[1812,4],[1865,4]]},"691":{"position":[[298,4],[1031,5],[1165,4],[1358,5],[1490,4],[1857,5],[1906,4],[1964,4],[2017,4],[2177,5],[2247,4],[2275,4],[2421,4]]},"693":{"position":[[161,4],[857,5],[991,4],[1184,5],[1316,4],[1683,5],[1732,4],[1790,4],[1843,4],[2013,4],[2046,4],[2101,4],[2123,4],[2148,4]]},"695":{"position":[[889,5],[1023,4],[1216,5],[1348,4],[1715,5],[1764,4],[1822,4],[1875,4]]},"697":{"position":[[988,5],[1122,4],[1315,5],[1447,4],[1814,5],[1863,4],[1921,4],[1974,4]]},"729":{"position":[[1198,4],[1249,5],[2103,4],[2870,4]]},"731":{"position":[[1212,4],[1263,5],[2117,4],[2884,4]]},"733":{"position":[[1327,4],[1378,5],[2232,4],[2999,4]]},"735":{"position":[[1747,4],[2970,4]]},"747":{"position":[[451,4],[765,4],[1938,4],[3161,4]]}}}],["cert+key",{"_index":1069,"t":{"110":{"position":[[2104,8]]},"112":{"position":[[1332,8]]}}}],["cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt",{"_index":386,"t":{"21":{"position":[[618,52]]}}}],["cert_fil",{"_index":1952,"t":{"342":{"position":[[178,9]]},"344":{"position":[[355,10],[614,10]]}}}],["certain",{"_index":1503,"t":{"215":{"position":[[742,7]]},"221":{"position":[[2458,7]]},"460":{"position":[[604,7]]}}}],["certfil",{"_index":1213,"t":{"135":{"position":[[292,8]]},"162":{"position":[[4134,8]]},"187":{"position":[[1012,8],[1476,8]]},"579":{"position":[[1724,8]]},"650":{"position":[[1854,8],[2228,9],[2304,8]]},"685":{"position":[[1748,8]]},"687":{"position":[[1637,8]]},"689":{"position":[[1662,8]]},"691":{"position":[[1814,8]]},"693":{"position":[[1640,8]]},"695":{"position":[[1672,8]]},"697":{"position":[[1771,8]]}}}],["certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt",{"_index":2412,"t":{"476":{"position":[[626,56]]},"610":{"position":[[1373,56]]},"612":{"position":[[1321,56]]},"614":{"position":[[1190,56]]},"616":{"position":[[1139,56]]},"618":{"position":[[1152,56]]},"620":{"position":[[1265,56]]},"622":{"position":[[1226,56]]},"626":{"position":[[1299,56]]},"628":{"position":[[1280,56]]},"630":{"position":[[1176,56]]},"632":{"position":[[1292,56]]},"634":{"position":[[1157,56]]},"636":{"position":[[1072,56]]},"646":{"position":[[1247,56]]},"652":{"position":[[1289,56]]},"654":{"position":[[1205,56]]},"656":{"position":[[1211,56]]},"729":{"position":[[1556,56]]},"731":{"position":[[1570,56]]},"733":{"position":[[1685,56]]}}}],["certfile=<path/to/cli",{"_index":2773,"t":{"650":{"position":[[306,24]]}}}],["certif",{"_index":75,"t":{"4":{"position":[[740,13]]},"11":{"position":[[26,11],[53,12],[116,12],[223,13],[268,13],[294,11]]},"13":{"position":[[22,12],[91,12],[257,13],[283,11]]},"21":{"position":[[489,12]]},"77":{"position":[[1523,11],[1546,13],[1572,11]]},"104":{"position":[[22,12],[91,12]]},"106":{"position":[[28,12],[63,11],[133,12],[150,11],[224,12],[270,11],[292,11],[355,12]]},"108":{"position":[[35,12],[117,13],[154,12],[240,12],[303,12],[418,12],[595,12],[695,12],[763,12],[813,12],[851,12],[886,11],[983,12],[1116,12],[1226,12],[1369,11],[1425,12]]},"110":{"position":[[6,12],[145,12],[224,12],[426,12],[481,13],[623,12],[712,11],[1170,12],[1225,12],[1343,12],[1586,13],[1644,12],[1763,13],[2880,12]]},"112":{"position":[[20,13],[46,11],[222,13],[347,12],[443,12],[483,12],[631,11],[1474,13],[2078,11]]},"114":{"position":[[43,13],[69,11],[245,13],[370,12],[479,13],[638,12],[686,13],[877,12],[973,11],[1212,12],[1398,12],[1866,11]]},"116":{"position":[[315,11],[1128,11]]},"118":{"position":[[3156,11]]},"135":{"position":[[206,11],[334,13],[1324,11]]},"162":{"position":[[4024,11],[4158,13],[5254,11]]},"168":{"position":[[253,12],[338,13],[396,12],[442,13],[511,12],[546,11],[1008,12],[1143,11],[1237,11]]},"174":{"position":[[717,12],[868,12],[1112,13],[1166,13],[1192,11]]},"187":{"position":[[704,11],[841,11],[872,11],[987,12],[1048,11],[1081,11],[1206,11],[1397,11]]},"189":{"position":[[1324,11]]},"213":{"position":[[961,12]]},"217":{"position":[[800,11]]},"247":{"position":[[1302,12]]},"342":{"position":[[199,11],[372,11]]},"476":{"position":[[839,11]]},"610":{"position":[[272,11],[358,11],[527,11],[585,12],[1588,11]]},"612":{"position":[[270,11],[339,11],[371,11],[510,11],[561,11],[1536,11]]},"614":{"position":[[1405,11]]},"616":{"position":[[1354,11]]},"618":{"position":[[1367,11]]},"620":{"position":[[1480,11]]},"622":{"position":[[1441,11]]},"626":{"position":[[1514,11]]},"628":{"position":[[1495,11]]},"630":{"position":[[1391,11]]},"632":{"position":[[1507,11]]},"634":{"position":[[1372,11]]},"636":{"position":[[1287,11]]},"646":{"position":[[1462,11]]},"650":{"position":[[262,11],[331,11]]},"652":{"position":[[247,11],[321,11],[1504,11]]},"654":{"position":[[250,11],[1420,11]]},"656":{"position":[[262,11],[1426,11]]},"673":{"position":[[202,11]]},"697":{"position":[[93,11]]},"700":{"position":[[137,13]]},"729":{"position":[[1771,11]]},"731":{"position":[[1785,11]]},"733":{"position":[[1900,11]]},"747":{"position":[[114,11],[474,11]]}}}],["certifi",{"_index":1370,"t":{"185":{"position":[[1560,10],[1600,10],[1649,10],[1695,10]]},"227":{"position":[[14,9]]}}}],["certificate=/var/lib/rancher/k3s/server/tls/cli",{"_index":2419,"t":{"476":{"position":[[924,50]]},"610":{"position":[[1673,50]]},"612":{"position":[[1621,50]]},"614":{"position":[[1490,50]]},"616":{"position":[[1439,50]]},"618":{"position":[[1452,50]]},"620":{"position":[[1565,50]]},"622":{"position":[[1526,50]]},"626":{"position":[[1599,50]]},"628":{"position":[[1580,50]]},"630":{"position":[[1476,50]]},"632":{"position":[[1592,50]]},"634":{"position":[[1457,50]]},"636":{"position":[[1372,50]]},"646":{"position":[[1547,50]]},"652":{"position":[[1589,50]]},"654":{"position":[[1505,50]]},"656":{"position":[[1511,50]]},"729":{"position":[[1856,50]]},"731":{"position":[[1870,50]]},"733":{"position":[[1985,50]]}}}],["certificate=<path/to/cli",{"_index":2734,"t":{"610":{"position":[[330,27]]}}}],["certificates=fals",{"_index":2873,"t":{"749":{"position":[[332,18]]}}}],["certs.sh",{"_index":1051,"t":{"110":{"position":[[310,9],[2617,8]]},"112":{"position":[[924,8],[1981,8]]},"114":{"position":[[1330,9],[1747,8]]}}}],["cgroup",{"_index":81,"t":{"4":{"position":[[822,6]]},"31":{"position":[[572,7],[580,6],[636,6],[697,7],[793,7]]},"33":{"position":[[7,6],[177,7],[907,6]]},"50":{"position":[[152,7],[179,7]]},"440":{"position":[[200,6]]},"476":{"position":[[3169,6]]},"735":{"position":[[880,6],[2103,6]]},"747":{"position":[[1071,6],[2294,6]]}}}],["cgroup_enable=memori",{"_index":710,"t":{"50":{"position":[[268,20],[469,20]]}}}],["cgroup_memory=1",{"_index":709,"t":{"50":{"position":[[252,15],[453,15]]}}}],["cgroups=/systemd/system.slic",{"_index":2480,"t":{"476":{"position":[[3927,29],[4156,29]]}}}],["cgroupscan",{"_index":707,"t":{"50":{"position":[[217,10]]}}}],["cgtop",{"_index":2248,"t":{"440":{"position":[[163,5]]}}}],["chain",{"_index":1101,"t":{"114":{"position":[[1103,5]]},"504":{"position":[[37,6]]},"542":{"position":[[335,5]]},"741":{"position":[[294,6]]}}}],["chains=tru",{"_index":2076,"t":{"398":{"position":[[1201,12]]},"474":{"position":[[765,12],[1388,12]]}}}],["chang",{"_index":163,"t":{"15":{"position":[[93,7]]},"35":{"position":[[1012,8]]},"39":{"position":[[949,6]]},"46":{"position":[[497,6]]},"48":{"position":[[378,6]]},"99":{"position":[[228,7],[437,6]]},"108":{"position":[[1327,8]]},"112":{"position":[[2343,7]]},"118":{"position":[[508,7]]},"139":{"position":[[303,8]]},"174":{"position":[[295,7]]},"176":{"position":[[137,8]]},"217":{"position":[[123,6],[265,8],[415,6]]},"271":{"position":[[443,7]]},"281":{"position":[[1137,7]]},"305":{"position":[[894,8]]},"311":{"position":[[1043,6],[1089,6]]},"317":{"position":[[1057,7]]},"322":{"position":[[193,7]]},"340":{"position":[[823,6]]},"346":{"position":[[557,7]]},"362":{"position":[[494,7]]},"406":{"position":[[348,7]]},"454":{"position":[[220,7]]},"492":{"position":[[615,6]]},"504":{"position":[[126,7],[253,7],[440,7]]},"536":{"position":[[1960,7]]},"538":{"position":[[478,7]]},"546":{"position":[[1105,7]]}}}],["channel",{"_index":1573,"t":{"243":{"position":[[308,7]]},"295":{"position":[[49,7]]},"432":{"position":[[941,7],[2114,7],[2232,7]]},"540":{"position":[[1898,7],[2103,9],[2167,7],[2326,8]]},"546":{"position":[[120,9],[144,8],[168,7],[496,7],[590,8],[714,9],[746,7],[801,8]]},"548":{"position":[[950,7],[995,8]]}}}],["channelserv",{"_index":2626,"t":{"546":{"position":[[828,13]]}}}],["charact",{"_index":1906,"t":{"326":{"position":[[1101,11],[1169,9]]}}}],["charlie=delta:noschedul",{"_index":1748,"t":{"283":{"position":[[812,24],[991,24]]}}}],["charon",{"_index":1791,"t":{"303":{"position":[[2103,6]]},"305":{"position":[[269,6]]}}}],["chart",{"_index":838,"t":{"63":{"position":[[142,6]]},"245":{"position":[[67,6],[231,7],[324,5],[664,6],[785,5]]},"247":{"position":[[180,5],[229,5],[724,6],[980,5],[1012,5],[1063,5],[1084,5],[1124,5],[1177,5],[1250,5],[1442,5],[1548,5],[1705,6],[1986,5],[2063,5],[2105,5],[2398,5],[2515,5]]},"334":{"position":[[36,6]]}}}],["chart'",{"_index":1588,"t":{"247":{"position":[[324,7]]}}}],["charts/ranch",{"_index":843,"t":{"63":{"position":[[277,14],[433,14]]}}}],["check",{"_index":599,"t":{"37":{"position":[[44,5]]},"65":{"position":[[586,5]]},"108":{"position":[[948,6]]},"112":{"position":[[2166,5]]},"114":{"position":[[760,7],[1976,5]]},"116":{"position":[[734,5],[1283,5]]},"203":{"position":[[628,5],[724,5],[763,5],[802,5]]},"221":{"position":[[1626,5]]},"243":{"position":[[62,5],[94,5],[162,5]]},"245":{"position":[[339,5]]},"273":{"position":[[530,5]]},"317":{"position":[[777,5]]},"332":{"position":[[213,8]]},"336":{"position":[[134,5]]},"440":{"position":[[186,5]]},"494":{"position":[[426,5]]},"508":{"position":[[227,6]]},"579":{"position":[[425,6]]},"650":{"position":[[555,6]]},"685":{"position":[[449,6]]},"687":{"position":[[338,6]]},"689":{"position":[[363,6]]},"691":{"position":[[515,6]]},"693":{"position":[[341,6]]},"695":{"position":[[373,6]]},"697":{"position":[[472,6]]},"756":{"position":[[86,5]]}}}],["check_for_k3s_etcd.sh",{"_index":2655,"t":{"579":{"position":[[274,21],[2042,23]]},"650":{"position":[[404,21],[2172,23]]},"685":{"position":[[298,21],[2066,23]]},"687":{"position":[[187,21],[1955,23]]},"689":{"position":[[212,21],[1980,23]]},"691":{"position":[[364,21],[2132,23]]},"693":{"position":[[190,21],[1958,23]]},"695":{"position":[[222,21],[1990,23]]},"697":{"position":[[321,21],[2089,23]]}}}],["chk_haproxi",{"_index":1444,"t":{"203":{"position":[[894,11],[1180,11]]}}}],["chmod",{"_index":1718,"t":{"279":{"position":[[505,5]]},"559":{"position":[[142,5]]},"563":{"position":[[142,5]]},"567":{"position":[[142,5]]},"571":{"position":[[142,5]]},"575":{"position":[[142,5]]},"579":{"position":[[236,5]]},"583":{"position":[[142,5]]},"587":{"position":[[132,5]]},"591":{"position":[[132,5]]},"597":{"position":[[132,5]]},"599":{"position":[[132,5]]},"708":{"position":[[140,5]]},"712":{"position":[[130,5]]},"716":{"position":[[130,5]]},"720":{"position":[[108,5]]},"724":{"position":[[124,5]]}}}],["choic",{"_index":1416,"t":{"199":{"position":[[803,7]]},"245":{"position":[[39,6]]},"307":{"position":[[62,7]]}}}],["choos",{"_index":1359,"t":{"185":{"position":[[345,6]]},"279":{"position":[[107,6]]},"500":{"position":[[467,6]]},"504":{"position":[[163,6]]},"660":{"position":[[115,6]]}}}],["chown",{"_index":2647,"t":{"561":{"position":[[142,5]]},"565":{"position":[[142,5]]},"569":{"position":[[142,5]]},"573":{"position":[[142,5]]},"577":{"position":[[142,5]]},"581":{"position":[[246,5]]},"585":{"position":[[132,5]]},"589":{"position":[[132,5]]},"593":{"position":[[132,5]]},"595":{"position":[[132,5]]},"710":{"position":[[140,5]]},"714":{"position":[[130,5]]},"718":{"position":[[130,5]]},"722":{"position":[[101,5]]},"726":{"position":[[124,5]]}}}],["chronolog",{"_index":2499,"t":{"484":{"position":[[124,13]]}}}],["chunk",{"_index":788,"t":{"59":{"position":[[394,6]]}}}],["ci",{"_index":13,"t":{"2":{"position":[[115,2]]},"398":{"position":[[1394,3],[1960,3]]},"458":{"position":[[189,3],[237,3]]},"460":{"position":[[225,6],[347,3],[482,3],[612,3],[1061,3]]},"466":{"position":[[44,3]]},"468":{"position":[[827,3],[1307,3],[1469,3],[1515,3],[1555,3],[1723,3],[1752,3],[1781,3],[1831,3]]},"470":{"position":[[0,3]]},"472":{"position":[[0,3]]},"476":{"position":[[137,3],[4396,3]]},"508":{"position":[[88,3],[133,3]]},"555":{"position":[[304,3],[514,3],[699,3],[825,6],[882,3],[1056,3],[1444,3]]},"610":{"position":[[687,3]]},"612":{"position":[[635,3]]},"614":{"position":[[504,3]]},"616":{"position":[[453,3]]},"618":{"position":[[466,3]]},"620":{"position":[[579,3]]},"622":{"position":[[540,3]]},"626":{"position":[[613,3]]},"628":{"position":[[594,3]]},"630":{"position":[[490,3]]},"632":{"position":[[606,3]]},"634":{"position":[[471,3]]},"636":{"position":[[386,3]]},"646":{"position":[[561,3]]},"652":{"position":[[603,3],[2779,3]]},"654":{"position":[[519,3]]},"656":{"position":[[525,3]]},"667":{"position":[[412,3]]},"669":{"position":[[480,3]]},"671":{"position":[[565,3]]},"673":{"position":[[462,3]]},"680":{"position":[[371,3]]},"682":{"position":[[445,3]]},"729":{"position":[[870,3]]},"731":{"position":[[884,3]]},"733":{"position":[[999,3]]},"735":{"position":[[676,3],[1372,3],[1899,3],[2595,3]]},"747":{"position":[[867,3],[1563,3],[2090,3],[2786,3]]},"817":{"position":[[166,3]]}}}],["ci/cd",{"_index":1363,"t":{"185":{"position":[[467,5]]}}}],["cidr",{"_index":575,"t":{"35":{"position":[[445,4]]},"46":{"position":[[516,4]]},"48":{"position":[[397,4]]},"132":{"position":[[273,4],[521,4]]},"150":{"position":[[35,4],[79,5],[114,4],[158,5],[389,4],[1646,4],[1924,4]]},"162":{"position":[[1371,4],[1413,5],[1472,4],[1514,5],[1793,4]]},"215":{"position":[[685,5],[701,4]]},"221":{"position":[[2401,5],[2417,4]]},"311":{"position":[[738,4],[755,4],[969,4],[986,4],[1062,4],[1105,4],[1134,4],[1248,4]]},"313":{"position":[[422,4],[441,4]]},"319":{"position":[[448,4],[457,5]]},"370":{"position":[[63,4],[156,4]]},"424":{"position":[[180,4],[301,6],[375,4],[441,4],[634,4],[665,4],[823,4],[1108,4],[1191,4],[1350,4],[1366,4]]}}}],["cidr=10.200.0.0/16",{"_index":1723,"t":{"279":{"position":[[1218,18]]}}}],["cidr=10.42.0.0/16",{"_index":2445,"t":{"476":{"position":[[2356,17]]},"667":{"position":[[818,17]]},"669":{"position":[[886,17]]},"671":{"position":[[971,17]]},"673":{"position":[[868,17]]}}}],["cidr=10.42.0.0/16,2001:cafe:42:0::/56",{"_index":1831,"t":{"311":{"position":[[836,37]]}}}],["cidr=10.43.0.0/16,2001:cafe:42:1::/112",{"_index":1832,"t":{"311":{"position":[[884,38]]}}}],["cidr=2001:cafe:42:0::/56",{"_index":1848,"t":{"313":{"position":[[508,24]]}}}],["cidr=2001:cafe:42:1::/112",{"_index":1849,"t":{"313":{"position":[[543,25]]}}}],["cidrs=tru",{"_index":2443,"t":{"476":{"position":[[2302,10]]},"667":{"position":[[540,10]]},"669":{"position":[[608,10]]},"671":{"position":[[693,10]]},"673":{"position":[[590,10]]}}}],["cilium",{"_index":1802,"t":{"307":{"position":[[279,6],[1414,6],[1465,6],[1517,6]]}}}],["cilium_host",{"_index":1812,"t":{"307":{"position":[[1157,12],[1315,11]]}}}],["cilium_net",{"_index":1813,"t":{"307":{"position":[[1170,10],[1342,10]]}}}],["cilium_vxlan",{"_index":1814,"t":{"307":{"position":[[1185,12],[1368,12]]}}}],["cipher",{"_index":2441,"t":{"476":{"position":[[1996,6]]},"662":{"position":[[176,6],[1026,6]]},"753":{"position":[[579,6],[653,6]]}}}],["claim",{"_index":2548,"t":{"514":{"position":[[403,5]]},"518":{"position":[[105,6],[318,5]]}}}],["claimnam",{"_index":2576,"t":{"522":{"position":[[283,10]]},"528":{"position":[[283,10]]}}}],["clarifi",{"_index":2492,"t":{"478":{"position":[[118,10]]}}}],["class",{"_index":1267,"t":{"152":{"position":[[109,5]]},"162":{"position":[[5791,5]]}}}],["clean",{"_index":938,"t":{"75":{"position":[[1470,5]]},"406":{"position":[[401,5],[539,5]]},"542":{"position":[[237,6]]}}}],["clear",{"_index":2152,"t":{"420":{"position":[[330,6]]}}}],["cli",{"_index":362,"t":{"21":{"position":[[19,3]]},"77":{"position":[[648,3],[888,3],[1031,3]]},"79":{"position":[[206,3]]},"122":{"position":[[57,3]]},"130":{"position":[[244,3]]},"172":{"position":[[163,3]]},"176":{"position":[[150,3]]},"179":{"position":[[118,3]]},"187":{"position":[[335,3],[371,3]]},"215":{"position":[[191,3]]},"281":{"position":[[104,3],[463,3],[635,3],[699,3],[868,3],[949,3],[1036,3],[1164,3]]},"303":{"position":[[895,3]]},"305":{"position":[[832,3]]},"382":{"position":[[18,3],[121,3]]},"384":{"position":[[99,3]]},"533":{"position":[[471,3]]}}}],["client",{"_index":148,"t":{"13":{"position":[[4,6],[239,6]]},"75":{"position":[[129,6]]},"87":{"position":[[502,6],[651,6]]},"101":{"position":[[1758,6],[1907,6]]},"104":{"position":[[4,6]]},"106":{"position":[[10,6]]},"110":{"position":[[853,6],[867,6]]},"135":{"position":[[557,6]]},"139":{"position":[[122,6]]},"162":{"position":[[2524,8],[2560,6],[2635,8],[4416,6],[8860,6],[9009,6]]},"166":{"position":[[112,6]]},"187":{"position":[[956,6],[1074,6],[1199,6],[1390,6]]},"342":{"position":[[192,6],[281,6]]},"476":{"position":[[405,6],[917,6],[1004,6],[1108,6],[1187,6],[1321,6],[3194,6]]},"579":{"position":[[860,7],[989,7],[1067,7],[1392,7],[1809,6],[1920,6]]},"610":{"position":[[265,6],[323,6],[386,6],[578,6],[624,6],[1074,6],[1666,6],[1753,6],[1913,6],[1992,6],[2126,6]]},"612":{"position":[[1022,6],[1614,6],[1701,6],[1861,6],[1940,6],[2074,6]]},"614":{"position":[[891,6],[1483,6],[1570,6],[1730,6],[1809,6],[1943,6]]},"616":{"position":[[840,6],[1432,6],[1519,6],[1679,6],[1758,6],[1892,6]]},"618":{"position":[[853,6],[1445,6],[1532,6],[1692,6],[1771,6],[1905,6]]},"620":{"position":[[966,6],[1558,6],[1645,6],[1805,6],[1884,6],[2018,6]]},"622":{"position":[[927,6],[1519,6],[1606,6],[1766,6],[1845,6],[1979,6]]},"626":{"position":[[1000,6],[1592,6],[1679,6],[1839,6],[1918,6],[2052,6]]},"628":{"position":[[981,6],[1573,6],[1660,6],[1820,6],[1899,6],[2033,6]]},"630":{"position":[[877,6],[1469,6],[1556,6],[1716,6],[1795,6],[1929,6]]},"632":{"position":[[993,6],[1585,6],[1672,6],[1832,6],[1911,6],[2045,6]]},"634":{"position":[[858,6],[1450,6],[1537,6],[1697,6],[1776,6],[1910,6]]},"636":{"position":[[773,6],[1365,6],[1452,6],[1612,6],[1691,6],[1825,6]]},"646":{"position":[[948,6],[1540,6],[1627,6],[1787,6],[1866,6],[2000,6]]},"650":{"position":[[990,7],[1119,7],[1197,7],[1522,7],[1939,6],[2050,6]]},"652":{"position":[[990,6],[1582,6],[1669,6],[1829,6],[1908,6],[2042,6]]},"654":{"position":[[243,6],[280,6],[415,7],[452,6],[906,6],[1498,6],[1585,6],[1745,6],[1824,6],[1958,6]]},"656":{"position":[[912,6],[1504,6],[1591,6],[1751,6],[1830,6],[1964,6]]},"667":{"position":[[869,6],[965,6],[1053,6],[1142,6]]},"669":{"position":[[937,6],[1033,6],[1121,6],[1210,6]]},"671":{"position":[[1022,6],[1118,6],[1206,6],[1295,6]]},"673":{"position":[[919,6],[1015,6],[1103,6],[1192,6]]},"685":{"position":[[884,7],[1013,7],[1091,7],[1416,7],[1833,6],[1944,6]]},"687":{"position":[[149,6],[773,7],[902,7],[980,7],[1305,7],[1722,6],[1833,6],[2003,6],[2035,7],[2091,6],[2113,6],[2138,6]]},"689":{"position":[[798,7],[927,7],[1005,7],[1330,7],[1747,6],[1858,6]]},"691":{"position":[[271,6],[950,7],[1079,7],[1157,7],[1482,7],[1899,6],[2010,6]]},"693":{"position":[[154,6],[776,7],[905,7],[983,7],[1308,7],[1725,6],[1836,6],[2006,6],[2038,7],[2094,6],[2116,6],[2141,6]]},"695":{"position":[[808,7],[937,7],[1015,7],[1340,7],[1757,6],[1868,6]]},"697":{"position":[[907,7],[1036,7],[1114,7],[1439,7],[1856,6],[1967,6]]},"700":{"position":[[130,6]]},"720":{"position":[[92,6]]},"722":{"position":[[85,6]]},"729":{"position":[[1257,6],[1849,6],[1936,6],[2096,6],[2175,6],[2309,6]]},"731":{"position":[[1271,6],[1863,6],[1950,6],[2110,6],[2189,6],[2323,6]]},"733":{"position":[[135,6],[350,6],[720,7],[766,6],[861,6],[906,6],[1386,6],[1978,6],[2065,6],[2225,6],[2304,6],[2438,6]]},"735":{"position":[[904,6],[2127,6]]},"747":{"position":[[1095,6],[2318,6]]}}}],["client.crt",{"_index":2805,"t":{"685":{"position":[[2254,10]]},"691":{"position":[[2335,10]]}}}],["client.key",{"_index":2806,"t":{"685":{"position":[[2319,10]]},"691":{"position":[[2405,10]]}}}],["cloud",{"_index":692,"t":{"46":{"position":[[640,5],[694,5],[717,5]]},"77":{"position":[[217,5]]},"106":{"position":[[462,5]]},"132":{"position":[[319,5]]},"154":{"position":[[131,5],[168,5]]},"156":{"position":[[302,5],[362,5]]},"162":{"position":[[3763,5],[3831,5],[6049,5],[6099,5]]},"217":{"position":[[183,5]]},"247":{"position":[[1483,6]]},"311":{"position":[[1358,6]]},"315":{"position":[[152,8]]},"368":{"position":[[147,5]]},"408":{"position":[[414,5],[606,5]]},"420":{"position":[[69,5],[120,5],[419,5],[537,5]]},"422":{"position":[[5,5]]},"476":{"position":[[3260,5]]},"516":{"position":[[98,5],[207,5],[664,5]]},"667":{"position":[[1572,5],[1624,5]]},"669":{"position":[[1640,5],[1692,5]]},"671":{"position":[[1725,5],[1777,5]]},"673":{"position":[[1622,5],[1674,5]]},"735":{"position":[[962,5],[2185,5]]},"747":{"position":[[1153,5],[2376,5]]},"807":{"position":[[82,5]]}}}],["cluster",{"_index":74,"t":{"4":{"position":[[703,7]]},"15":{"position":[[110,7]]},"17":{"position":[[754,7],[801,7]]},"19":{"position":[[678,7]]},"25":{"position":[[819,8]]},"27":{"position":[[186,8],[353,7],[643,7]]},"31":{"position":[[862,7],[890,9]]},"39":{"position":[[250,8]]},"52":{"position":[[111,8],[191,8]]},"67":{"position":[[71,7],[124,8]]},"69":{"position":[[44,7]]},"71":{"position":[[14,8],[185,7]]},"75":{"position":[[496,8],[738,8],[890,7],[1451,8],[1569,8]]},"77":{"position":[[78,8],[1259,7],[1438,8]]},"97":{"position":[[84,7]]},"101":{"position":[[706,9],[780,9],[870,9]]},"108":{"position":[[735,8]]},"110":{"position":[[109,8],[655,7],[1332,7]]},"112":{"position":[[398,7],[2271,7]]},"114":{"position":[[426,7],[2081,7]]},"116":{"position":[[286,7],[1390,8]]},"118":{"position":[[149,7],[560,7],[806,7],[851,7],[923,7],[956,7],[1010,7],[1028,7],[1355,7],[1388,7],[1442,7],[1460,7],[1828,8],[2362,7],[2425,8],[2509,7],[3711,7],[3728,7],[3758,7]]},"122":{"position":[[346,7]]},"124":{"position":[[85,8],[590,8],[752,9],[1580,8]]},"126":{"position":[[172,8],[496,8],[678,7],[999,8],[1360,8]]},"128":{"position":[[401,8],[1067,9]]},"132":{"position":[[74,8],[143,7],[207,7],[265,7],[280,7],[294,7]]},"137":{"position":[[122,7],[184,7],[282,8],[446,7],[456,7],[503,7],[533,7],[614,7]]},"144":{"position":[[235,7],[336,7]]},"150":{"position":[[27,7],[295,7],[331,7],[402,7],[439,7],[1675,8],[1916,7]]},"160":{"position":[[120,7]]},"162":{"position":[[933,7],[1067,7],[1363,7],[1699,7],[1735,7],[1828,7],[1862,7],[2325,10],[2723,9],[2783,7],[2823,9],[2897,9],[2948,8],[3017,9],[3109,9],[3156,7],[3177,7],[3190,9],[3217,7],[3267,7],[3281,9],[3340,7],[3371,7]]},"164":{"position":[[73,7],[122,8]]},"166":{"position":[[155,7]]},"168":{"position":[[200,7],[673,8],[1291,7]]},"170":{"position":[[111,8]]},"174":{"position":[[62,8],[273,8],[312,7],[430,8],[706,7],[817,7],[987,8],[1016,7],[1101,7],[1259,8]]},"176":{"position":[[108,7],[207,8]]},"179":{"position":[[705,7],[997,9],[1774,9],[2258,9],[2547,9]]},"181":{"position":[[102,8]]},"183":{"position":[[67,7],[209,8]]},"185":{"position":[[451,7],[848,8],[1261,8],[1292,8]]},"189":{"position":[[1875,8]]},"201":{"position":[[92,7],[227,7]]},"203":{"position":[[308,8],[1394,8],[1447,7],[1569,8],[2062,8],[2844,8],[2897,7],[3018,8]]},"205":{"position":[[99,8],[881,8],[934,7],[1055,8]]},"207":{"position":[[62,7],[111,8],[282,7],[661,7]]},"209":{"position":[[17,7]]},"211":{"position":[[60,8],[77,7]]},"213":{"position":[[1640,7]]},"215":{"position":[[294,8],[644,7],[659,7],[677,7]]},"217":{"position":[[170,7],[581,7]]},"219":{"position":[[95,8],[216,7],[278,8]]},"221":{"position":[[138,7],[232,7],[293,8],[420,7],[623,7],[972,7],[1032,7],[1060,10],[1154,8],[1230,7],[1398,7],[1693,8],[1969,9],[2105,7],[2360,7],[2375,7],[2393,7]]},"223":{"position":[[66,7],[193,7],[396,7],[440,7]]},"227":{"position":[[105,8]]},"245":{"position":[[165,7],[531,7],[799,7]]},"247":{"position":[[1475,7],[2238,8]]},"251":{"position":[[375,7]]},"255":{"position":[[286,9]]},"279":{"position":[[1210,7]]},"281":{"position":[[408,7],[610,7]]},"291":{"position":[[460,7]]},"295":{"position":[[69,8],[415,8]]},"303":{"position":[[271,8],[1047,9],[1531,8]]},"309":{"position":[[368,7],[798,7],[1529,7],[1586,8]]},"311":{"position":[[298,7],[558,7],[620,7],[730,7],[828,7],[961,7],[1054,7]]},"313":{"position":[[348,8],[357,9],[414,7],[500,7]]},"315":{"position":[[6,7],[464,7]]},"317":{"position":[[47,7],[210,7]]},"319":{"position":[[359,7],[393,7],[1014,8],[1152,8]]},"322":{"position":[[300,8]]},"330":{"position":[[226,8],[356,8],[425,8]]},"352":{"position":[[322,8]]},"356":{"position":[[338,9]]},"358":{"position":[[457,7]]},"360":{"position":[[877,7]]},"364":{"position":[[56,8],[90,9]]},"368":{"position":[[4,7],[135,8]]},"370":{"position":[[55,7],[148,7]]},"372":{"position":[[85,7],[199,9]]},"374":{"position":[[31,7]]},"376":{"position":[[149,7],[333,7]]},"378":{"position":[[70,8]]},"382":{"position":[[246,7]]},"384":{"position":[[43,7],[394,7],[475,7]]},"398":{"position":[[2832,8],[3118,8]]},"402":{"position":[[97,7],[197,7]]},"404":{"position":[[330,7],[1101,8]]},"406":{"position":[[645,8]]},"408":{"position":[[56,8]]},"410":{"position":[[892,7]]},"418":{"position":[[51,7]]},"424":{"position":[[293,7],[367,7],[433,7],[550,8],[657,7],[1342,7]]},"426":{"position":[[42,7]]},"428":{"position":[[701,8],[966,8],[1029,8]]},"434":{"position":[[299,7],[523,7],[819,7],[961,7]]},"436":{"position":[[95,8],[290,8]]},"446":{"position":[[45,7]]},"448":{"position":[[46,7]]},"452":{"position":[[99,7]]},"454":{"position":[[613,7],[665,7]]},"458":{"position":[[67,8]]},"460":{"position":[[757,8]]},"470":{"position":[[1251,8]]},"476":{"position":[[1761,7],[2348,7],[2376,7],[2450,7],[3286,7],[3311,7]]},"482":{"position":[[104,7]]},"492":{"position":[[311,7]]},"506":{"position":[[134,7]]},"508":{"position":[[42,7],[270,8]]},"514":{"position":[[368,8]]},"531":{"position":[[64,7]]},"533":{"position":[[545,7],[972,7]]},"536":{"position":[[19,7],[119,7],[403,8],[1025,7],[1067,7],[1159,7],[1315,7],[1458,7]]},"538":{"position":[[73,8]]},"540":{"position":[[318,8],[377,7],[2023,7],[2190,7]]},"542":{"position":[[376,7]]},"555":{"position":[[268,7],[935,7],[1196,7],[1551,7],[1705,7]]},"579":{"position":[[580,7]]},"610":{"position":[[2589,7]]},"612":{"position":[[2537,7]]},"614":{"position":[[2406,7]]},"616":{"position":[[2355,7]]},"618":{"position":[[2368,7]]},"620":{"position":[[2481,7]]},"622":{"position":[[2442,7]]},"626":{"position":[[2515,7]]},"628":{"position":[[2496,7]]},"630":{"position":[[2392,7]]},"632":{"position":[[2508,7]]},"634":{"position":[[2373,7]]},"636":{"position":[[2288,7]]},"646":{"position":[[2463,7]]},"650":{"position":[[710,7]]},"652":{"position":[[2505,7]]},"654":{"position":[[2421,7]]},"656":{"position":[[2427,7]]},"667":{"position":[[810,7],[838,7],[934,7],[1029,7],[1118,7],[1206,7],[1296,7],[1385,7],[1474,7],[1948,7]]},"669":{"position":[[878,7],[906,7],[1002,7],[1097,7],[1186,7],[1274,7],[1364,7],[1453,7],[1542,7],[2016,7]]},"671":{"position":[[963,7],[991,7],[1087,7],[1182,7],[1271,7],[1359,7],[1449,7],[1538,7],[1627,7],[2101,7]]},"673":{"position":[[860,7],[888,7],[984,7],[1079,7],[1168,7],[1256,7],[1346,7],[1435,7],[1524,7],[1998,7]]},"685":{"position":[[604,7]]},"687":{"position":[[493,7]]},"689":{"position":[[518,7]]},"691":{"position":[[127,8],[670,7]]},"693":{"position":[[496,7]]},"695":{"position":[[528,7]]},"697":{"position":[[627,7]]},"703":{"position":[[63,8]]},"705":{"position":[[67,7],[164,8]]},"729":{"position":[[2772,7]]},"731":{"position":[[2786,7]]},"733":{"position":[[2901,7]]},"735":{"position":[[988,7],[1013,7],[2211,7],[2236,7]]},"747":{"position":[[1179,7],[1204,7],[2402,7],[2427,7]]},"756":{"position":[[66,7],[293,7]]},"758":{"position":[[101,8]]},"762":{"position":[[85,8]]},"768":{"position":[[80,8]]},"775":{"position":[[64,7]]},"777":{"position":[[64,7]]},"779":{"position":[[64,7]]},"781":{"position":[[64,7]]},"783":{"position":[[64,7]]},"785":{"position":[[68,8]]},"787":{"position":[[64,7]]},"789":{"position":[[93,7]]},"791":{"position":[[89,8]]},"793":{"position":[[64,7]]},"795":{"position":[[64,7]]},"797":{"position":[[64,7]]},"800":{"position":[[229,8]]}}}],["cluster'",{"_index":1283,"t":{"168":{"position":[[233,9]]},"199":{"position":[[105,9]]},"555":{"position":[[1480,9]]}}}],["cluster.loc",{"_index":1253,"t":{"150":{"position":[[423,15]]},"162":{"position":[[1887,16]]}}}],["clustercidr",{"_index":2166,"t":{"424":{"position":[[563,11],[708,11],[791,11]]}}}],["clusterip",{"_index":1594,"t":{"247":{"position":[[792,9]]},"266":{"position":[[731,9]]},"410":{"position":[[338,9]]}}}],["clusterolog",{"_index":20,"t":{"2":{"position":[[178,12]]}}}],["clusterrol",{"_index":1768,"t":{"291":{"position":[[442,11]]},"299":{"position":[[136,11]]},"468":{"position":[[2075,11],[4050,11],[4255,11],[4478,11],[4782,11],[5084,11],[5407,11],[5717,11]]},"760":{"position":[[73,12]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:restrict",{"_index":2096,"t":{"398":{"position":[[3448,52]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:svclb",{"_index":2097,"t":{"398":{"position":[[3505,47]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:system",{"_index":2098,"t":{"398":{"position":[[3557,48]]}}}],["clusterrolebind",{"_index":1764,"t":{"291":{"position":[[345,18]]},"299":{"position":[[72,18]]},"468":{"position":[[2093,19],[4673,18],[4957,18]]},"538":{"position":[[125,19]]},"756":{"position":[[39,19],[267,18],[329,18]]}}}],["clusterrolebinding.rbac.authorization.k8s.io/default:restrict",{"_index":2100,"t":{"398":{"position":[[3623,63]]}}}],["clusterrolebinding.rbac.authorization.k8s.io/system",{"_index":2101,"t":{"398":{"position":[[3691,51]]}}}],["cmd",{"_index":679,"t":{"46":{"position":[[169,3],[225,3],[297,3],[373,3]]}}}],["cmdline.txt",{"_index":712,"t":{"50":{"position":[[319,12]]}}}],["cncf",{"_index":1546,"t":{"227":{"position":[[9,4]]}}}],["cni",{"_index":87,"t":{"4":{"position":[[915,5]]},"27":{"position":[[137,4]]},"67":{"position":[[508,4]]},"91":{"position":[[366,3],[410,3]]},"101":{"position":[[3063,3],[3122,3]]},"162":{"position":[[8124,3],[8183,3]]},"303":{"position":[[119,6],[166,3]]},"307":{"position":[[55,3],[75,3],[714,3]]},"309":{"position":[[866,4],[1169,4],[1450,3],[1572,4]]},"311":{"position":[[1391,3],[1410,3]]},"317":{"position":[[218,5]]},"360":{"position":[[493,4],[1038,3]]},"400":{"position":[[256,4]]},"468":{"position":[[6443,4]]},"476":{"position":[[3342,3],[3451,3]]},"800":{"position":[[33,3]]}}}],["code",{"_index":1320,"t":{"179":{"position":[[60,4]]},"531":{"position":[[165,4]]},"805":{"position":[[59,4]]}}}],["collect",{"_index":2246,"t":{"440":{"position":[[56,7],[431,9]]},"500":{"position":[[96,10],[336,10],[525,11]]}}}],["coloc",{"_index":983,"t":{"87":{"position":[[564,9]]},"101":{"position":[[1820,9]]},"162":{"position":[[8922,9]]}}}],["combin",{"_index":1694,"t":{"277":{"position":[[186,11]]},"285":{"position":[[32,8],[198,11]]},"468":{"position":[[2333,9]]}}}],["come",{"_index":813,"t":{"59":{"position":[[957,5]]},"213":{"position":[[1652,4]]},"305":{"position":[[517,4]]},"307":{"position":[[87,4]]},"324":{"position":[[4,5]]},"518":{"position":[[4,5]]}}}],["comma",{"_index":965,"t":{"81":{"position":[[91,5]]},"101":{"position":[[481,5]]},"142":{"position":[[122,5]]},"162":{"position":[[492,5]]},"189":{"position":[[1918,5]]},"330":{"position":[[538,7]]}}}],["command",{"_index":146,"t":{"11":{"position":[[316,7]]},"13":{"position":[[302,7]]},"15":{"position":[[337,7]]},"19":{"position":[[1219,7]]},"52":{"position":[[447,8]]},"54":{"position":[[546,9]]},"61":{"position":[[553,8]]},"65":{"position":[[1028,7],[1224,7]]},"67":{"position":[[258,8],[384,8]]},"77":{"position":[[87,7],[323,7],[548,7],[629,8],[869,8],[1012,8],[1160,7],[1316,7],[1475,7],[1584,7],[1710,8],[1735,7]]},"99":{"position":[[268,9]]},"108":{"position":[[908,8],[921,7],[1391,7]]},"110":{"position":[[1957,9],[2642,7]]},"112":{"position":[[1196,9],[2140,7],[2207,7]]},"114":{"position":[[1472,9],[1950,7],[2017,7]]},"116":{"position":[[642,9],[1257,7],[1324,7]]},"118":{"position":[[1906,7],[3686,9],[4344,8]]},"124":{"position":[[1014,9]]},"126":{"position":[[866,9]]},"128":{"position":[[43,7],[155,7]]},"178":{"position":[[39,7]]},"179":{"position":[[193,7],[201,8],[234,9],[768,7],[1913,7]]},"181":{"position":[[153,7],[367,7],[630,8]]},"187":{"position":[[1607,7]]},"193":{"position":[[11,8]]},"197":{"position":[[26,7]]},"203":{"position":[[1358,7],[2808,7]]},"205":{"position":[[845,7]]},"213":{"position":[[154,7],[456,7]]},"215":{"position":[[17,7]]},"235":{"position":[[101,7]]},"239":{"position":[[68,7]]},"247":{"position":[[95,7]]},"249":{"position":[[389,7]]},"251":{"position":[[447,8]]},"268":{"position":[[624,8]]},"275":{"position":[[186,7]]},"277":{"position":[[251,7],[660,8],[1316,8]]},"279":{"position":[[640,7]]},"307":{"position":[[588,7],[972,7]]},"432":{"position":[[198,7],[588,8],[1374,7],[1441,7],[1881,7],[2662,7],[2687,7]]},"460":{"position":[[885,7]]},"512":{"position":[[271,7]]},"538":{"position":[[209,8]]},"548":{"position":[[1180,8]]},"555":{"position":[[1081,8],[1885,8]]},"559":{"position":[[50,7]]},"561":{"position":[[50,7]]},"563":{"position":[[50,7]]},"565":{"position":[[50,7]]},"567":{"position":[[50,7]]},"569":{"position":[[50,7]]},"571":{"position":[[50,7]]},"573":{"position":[[50,7]]},"575":{"position":[[50,7]]},"577":{"position":[[50,7]]},"579":{"position":[[123,7],[167,7]]},"581":{"position":[[133,7],[177,7]]},"583":{"position":[[50,7]]},"585":{"position":[[40,7]]},"587":{"position":[[40,7]]},"589":{"position":[[40,7]]},"591":{"position":[[40,7]]},"593":{"position":[[40,7]]},"595":{"position":[[40,7]]},"597":{"position":[[40,7]]},"599":{"position":[[40,7]]},"708":{"position":[[50,7]]},"710":{"position":[[50,7]]},"712":{"position":[[40,7]]},"714":{"position":[[40,7]]},"716":{"position":[[40,7]]},"718":{"position":[[40,7]]},"720":{"position":[[44,7]]},"722":{"position":[[44,7]]},"724":{"position":[[54,7]]},"726":{"position":[[54,7]]},"733":{"position":[[160,7]]},"735":{"position":[[107,7]]},"737":{"position":[[144,7]]},"739":{"position":[[129,7]]},"741":{"position":[[130,7]]},"745":{"position":[[128,7]]},"747":{"position":[[250,7]]},"749":{"position":[[184,7]]}}}],["comment",{"_index":2396,"t":{"476":{"position":[[105,9]]}}}],["commit",{"_index":872,"t":{"65":{"position":[[842,10]]}}}],["common",{"_index":1052,"t":{"110":{"position":[[449,6]]},"189":{"position":[[257,6],[824,6],[1675,6]]},"315":{"position":[[66,6]]}}}],["commonli",{"_index":1289,"t":{"168":{"position":[[524,8]]},"275":{"position":[[42,8]]},"303":{"position":[[140,8]]},"309":{"position":[[486,8]]}}}],["commun",{"_index":237,"t":{"19":{"position":[[188,11]]},"35":{"position":[[49,11]]},"135":{"position":[[266,13],[386,13],[494,13]]},"150":{"position":[[940,11],[1209,11],[1467,11],[1720,11]]},"162":{"position":[[4084,13],[4210,13],[4327,13]]},"187":{"position":[[756,13]]},"189":{"position":[[1210,13]]},"309":{"position":[[107,13],[769,11],[1084,11],[1294,11],[1631,11]]},"346":{"position":[[433,14]]},"504":{"position":[[465,13]]},"546":{"position":[[301,9],[440,9]]}}}],["companion",{"_index":2632,"t":{"555":{"position":[[29,9]]}}}],["compar",{"_index":1296,"t":{"168":{"position":[[1041,7]]}}}],["compat",{"_index":754,"t":{"54":{"position":[[344,10]]},"59":{"position":[[662,10],[719,14]]},"118":{"position":[[2582,10],[2695,10],[4436,10]]},"303":{"position":[[1057,10]]}}}],["complet",{"_index":279,"t":{"19":{"position":[[960,9]]},"77":{"position":[[1632,10],[1658,10]]},"110":{"position":[[2650,9]]},"112":{"position":[[2215,9]]},"114":{"position":[[2025,9]]},"116":{"position":[[1332,9]]},"247":{"position":[[1041,8]]},"259":{"position":[[110,9]]},"263":{"position":[[309,9]]},"266":{"position":[[23,8]]},"398":{"position":[[2778,9]]},"536":{"position":[[601,10]]},"540":{"position":[[1752,8]]}}}],["complex",{"_index":45,"t":{"4":{"position":[[286,10],[695,7]]},"247":{"position":[[1970,7]]},"404":{"position":[[122,10]]}}}],["compli",{"_index":2295,"t":{"460":{"position":[[466,6]]},"466":{"position":[[28,6]]},"508":{"position":[[72,6]]}}}],["compliant",{"_index":24,"t":{"4":{"position":[[15,9]]},"468":{"position":[[397,9],[1346,9]]},"470":{"position":[[285,9]]}}}],["compon",{"_index":68,"t":{"4":{"position":[[597,10]]},"19":{"position":[[151,9]]},"67":{"position":[[300,10],[432,11]]},"77":{"position":[[242,11],[292,11],[518,11]]},"150":{"position":[[809,9]]},"162":{"position":[[2454,9],[5813,12],[5849,10],[5884,10],[5989,12],[6066,12],[6145,12],[6210,12],[6295,12]]},"207":{"position":[[699,10]]},"215":{"position":[[750,11],[844,9]]},"221":{"position":[[2466,11],[2560,9]]},"235":{"position":[[672,10],[731,10],[862,11],[926,9]]},"247":{"position":[[2378,9]]},"249":{"position":[[82,10]]},"253":{"position":[[550,10],[593,11]]},"309":{"position":[[194,11]]},"324":{"position":[[36,10],[325,10]]},"326":{"position":[[680,11],[706,10]]},"330":{"position":[[24,10]]},"350":{"position":[[288,11]]},"374":{"position":[[71,11],[184,10],[427,11]]},"376":{"position":[[81,10],[419,10]]},"382":{"position":[[75,11]]},"404":{"position":[[523,11],[919,10]]},"426":{"position":[[172,10]]},"428":{"position":[[785,10]]},"434":{"position":[[134,10],[687,10]]},"436":{"position":[[457,10]]},"438":{"position":[[11,10],[57,10],[221,10]]},"454":{"position":[[1203,10]]},"456":{"position":[[228,10],[314,10]]},"460":{"position":[[1185,10]]},"468":{"position":[[6595,10]]},"474":{"position":[[137,11]]},"476":{"position":[[39,10]]},"484":{"position":[[263,10]]},"516":{"position":[[543,10]]},"538":{"position":[[179,11]]},"542":{"position":[[291,10]]}}}],["components=1",{"_index":378,"t":{"21":{"position":[[392,12]]}}}],["compos",{"_index":1486,"t":{"207":{"position":[[293,8]]},"221":{"position":[[653,8]]}}}],["compress",{"_index":1273,"t":{"162":{"position":[[4982,8],[4996,8]]}}}],["compris",{"_index":902,"t":{"71":{"position":[[193,10]]},"221":{"position":[[154,9]]},"482":{"position":[[366,9]]}}}],["compromis",{"_index":624,"t":{"39":{"position":[[759,11]]}}}],["concern",{"_index":1711,"t":{"279":{"position":[[48,9]]},"460":{"position":[[1075,8]]}}}],["concurr",{"_index":2610,"t":{"540":{"position":[[524,12],[872,12],[1320,11]]}}}],["condit",{"_index":2496,"t":{"482":{"position":[[263,10]]}}}],["conf",{"_index":348,"t":{"19":{"position":[[2500,4]]},"91":{"position":[[181,4],[304,4],[370,4]]},"101":{"position":[[2826,4],[2986,4],[3067,4]]},"160":{"position":[[299,4]]},"162":{"position":[[7887,4],[8047,4],[8128,4]]},"268":{"position":[[1325,4]]},"476":{"position":[[3455,4]]}}}],["conf=/run/systemd/resolve/resolv.conf",{"_index":2485,"t":{"476":{"position":[[4108,37]]},"735":{"position":[[1673,37],[2896,37]]},"747":{"position":[[1864,37],[3087,37]]}}}],["confer",{"_index":628,"t":{"39":{"position":[[844,6]]}}}],["confidenti",{"_index":1311,"t":{"174":{"position":[[562,12]]},"191":{"position":[[437,12]]}}}],["config",{"_index":871,"t":{"65":{"position":[[829,6]]},"91":{"position":[[344,6],[414,6]]},"101":{"position":[[218,6],[239,8],[1487,6],[1556,6],[3041,6],[3126,6]]},"160":{"position":[[327,6],[356,6]]},"162":{"position":[[229,6],[250,8],[6812,6],[6881,6],[8102,6],[8187,6]]},"215":{"position":[[563,6]]},"221":{"position":[[2279,6]]},"243":{"position":[[168,6]]},"281":{"position":[[138,6],[287,6],[1118,6],[1179,6]]},"283":{"position":[[537,6]]},"305":{"position":[[603,6],[640,6]]},"317":{"position":[[672,6]]},"326":{"position":[[842,7]]},"338":{"position":[[48,7]]},"342":{"position":[[4,7]]},"344":{"position":[[217,8],[580,8]]},"346":{"position":[[220,8]]},"380":{"position":[[297,6]]},"398":{"position":[[415,6],[713,6]]},"404":{"position":[[547,6]]},"468":{"position":[[227,6]]},"474":{"position":[[277,6]]},"496":{"position":[[38,6]]},"510":{"position":[[204,6],[248,6],[293,6],[563,6]]},"610":{"position":[[1153,6]]},"612":{"position":[[1101,6]]},"614":{"position":[[970,6]]},"616":{"position":[[919,6]]},"618":{"position":[[932,6]]},"620":{"position":[[309,6],[1045,6]]},"622":{"position":[[1006,6]]},"626":{"position":[[1079,6]]},"628":{"position":[[1060,6]]},"630":{"position":[[956,6]]},"632":{"position":[[1072,6]]},"634":{"position":[[937,6]]},"636":{"position":[[852,6]]},"646":{"position":[[1027,6]]},"652":{"position":[[1069,6]]},"654":{"position":[[985,6]]},"656":{"position":[[991,6]]},"658":{"position":[[256,6],[490,7]]},"724":{"position":[[73,6]]},"726":{"position":[[73,6]]},"729":{"position":[[45,6],[1336,6]]},"731":{"position":[[45,6],[1350,6]]},"733":{"position":[[45,6],[1465,6]]},"735":{"position":[[45,6]]},"737":{"position":[[45,6]]},"739":{"position":[[55,6]]},"741":{"position":[[55,6]]},"745":{"position":[[45,6]]},"747":{"position":[[45,6]]},"749":{"position":[[55,6]]},"753":{"position":[[45,6]]}}}],["config.json",{"_index":2785,"t":{"660":{"position":[[214,11]]}}}],["config.nod",{"_index":398,"t":{"23":{"position":[[316,11],[487,11]]}}}],["config.toml",{"_index":388,"t":{"23":{"position":[[18,11]]}}}],["config.toml.tmpl",{"_index":392,"t":{"23":{"position":[[179,16],[252,16]]}}}],["config.yaml",{"_index":1098,"t":{"112":{"position":[[2551,12]]},"114":{"position":[[2336,12]]},"249":{"position":[[669,11]]},"283":{"position":[[562,11]]},"285":{"position":[[66,11]]},"610":{"position":[[1213,11]]},"612":{"position":[[1161,11]]},"614":{"position":[[1030,11]]},"616":{"position":[[979,11]]},"618":{"position":[[992,11]]},"620":{"position":[[1105,11]]},"622":{"position":[[1066,11]]},"626":{"position":[[1139,11]]},"628":{"position":[[1120,11]]},"630":{"position":[[1016,11]]},"632":{"position":[[1132,11]]},"634":{"position":[[997,11]]},"636":{"position":[[912,11]]},"646":{"position":[[1087,11]]},"652":{"position":[[1129,11]]},"654":{"position":[[1045,11]]},"656":{"position":[[1051,11]]},"729":{"position":[[1396,11]]},"731":{"position":[[1410,11]]},"733":{"position":[[1525,11]]}}}],["config.yaml.d/test1.yaml",{"_index":1742,"t":{"283":{"position":[[620,24]]}}}],["config.yaml.d/test2.yaml",{"_index":1744,"t":{"283":{"position":[[708,24]]}}}],["config/systemd/user/k3",{"_index":539,"t":{"33":{"position":[[397,26]]}}}],["config=</path/to/encryptionconfig/fil",{"_index":2783,"t":{"658":{"position":[[334,39]]}}}],["configfi",{"_index":311,"t":{"19":{"position":[[1624,10]]}}}],["configmap",{"_index":2329,"t":{"468":{"position":[[1588,11],[2729,11]]},"538":{"position":[[151,10],[421,10]]},"705":{"position":[[240,11]]}}}],["configur",{"_index":178,"t":{"17":{"position":[[110,9],[679,9],[1241,9]]},"21":{"position":[[451,11]]},"23":{"position":[[463,13]]},"25":{"position":[[34,9],[702,14]]},"35":{"position":[[115,13],[618,10]]},"39":{"position":[[18,10]]},"56":{"position":[[131,13]]},"61":{"position":[[133,14]]},"65":{"position":[[745,9]]},"69":{"position":[[128,14]]},"71":{"position":[[160,14]]},"73":{"position":[[32,14]]},"77":{"position":[[1380,9]]},"79":{"position":[[37,9],[243,13],[279,13],[347,13]]},"89":{"position":[[378,13]]},"99":{"position":[[18,10]]},"101":{"position":[[253,13],[2567,13]]},"112":{"position":[[2594,10]]},"114":{"position":[[2379,10]]},"118":{"position":[[286,9],[1930,13],[4147,10]]},"128":{"position":[[1394,14],[1451,14]]},"130":{"position":[[37,9],[114,13],[281,13],[317,13],[385,13]]},"150":{"position":[[1905,10]]},"162":{"position":[[264,13],[7499,13]]},"172":{"position":[[114,10]]},"174":{"position":[[654,14]]},"176":{"position":[[288,11]]},"181":{"position":[[67,9],[213,9]]},"185":{"position":[[952,13],[1225,10]]},"187":{"position":[[197,9],[1177,10]]},"189":{"position":[[415,13],[991,13]]},"195":{"position":[[217,11]]},"201":{"position":[[169,10],[407,10]]},"203":{"position":[[2027,14]]},"205":{"position":[[64,14]]},"207":{"position":[[257,14]]},"213":{"position":[[50,14],[947,9],[1026,13],[1195,13],[1470,9]]},"217":{"position":[[614,15],[829,14],[855,9]]},"235":{"position":[[550,13],[650,13],[789,9]]},"245":{"position":[[199,12],[434,13]]},"249":{"position":[[580,14]]},"253":{"position":[[156,13]]},"259":{"position":[[28,13],[62,9]]},"266":{"position":[[564,11]]},"268":{"position":[[77,13],[109,13],[1369,11]]},"275":{"position":[[147,13]]},"277":{"position":[[273,13],[302,14],[441,14],[476,13],[558,14],[1905,13],[2066,13],[2141,13],[2215,13]]},"279":{"position":[[63,11],[547,13],[720,10],[818,11],[895,11],[1385,14],[1409,13],[1454,13]]},"281":{"position":[[57,11],[845,13]]},"283":{"position":[[51,13],[98,13],[861,13]]},"287":{"position":[[52,9]]},"291":{"position":[[578,14]]},"301":{"position":[[32,13],[65,13],[110,11]]},"303":{"position":[[1939,14]]},"305":{"position":[[538,14],[812,11]]},"309":{"position":[[586,14],[633,10]]},"311":{"position":[[538,10],[811,14],[941,9],[1456,13]]},"313":{"position":[[483,14]]},"336":{"position":[[18,10],[610,13],[875,13]]},"340":{"position":[[408,11],[519,10],[1018,13]]},"342":{"position":[[51,13]]},"344":{"position":[[39,9]]},"346":{"position":[[39,9]]},"350":{"position":[[93,11]]},"382":{"position":[[45,13]]},"384":{"position":[[57,14]]},"398":{"position":[[234,10],[535,13],[1642,14]]},"400":{"position":[[185,13]]},"402":{"position":[[68,9]]},"404":{"position":[[989,13],[1046,13]]},"406":{"position":[[331,13],[414,10]]},"408":{"position":[[639,14]]},"410":{"position":[[426,11]]},"418":{"position":[[22,9]]},"420":{"position":[[655,9]]},"424":{"position":[[639,10],[1237,13],[1310,13]]},"428":{"position":[[309,10],[1311,9]]},"430":{"position":[[81,13]]},"432":{"position":[[347,9]]},"460":{"position":[[109,14],[795,9],[907,13]]},"462":{"position":[[93,14]]},"466":{"position":[[409,13]]},"468":{"position":[[509,14],[2347,13]]},"472":{"position":[[49,11],[651,13],[801,14],[1034,14],[1407,14]]},"474":{"position":[[4,13],[48,13]]},"496":{"position":[[339,9]]},"498":{"position":[[51,11],[317,13],[382,9]]},"504":{"position":[[305,13],[356,14],[380,11],[426,13]]},"506":{"position":[[410,10]]},"508":{"position":[[58,10]]},"510":{"position":[[514,13]]},"533":{"position":[[353,13]]},"536":{"position":[[435,13],[761,10],[1033,9]]},"538":{"position":[[366,10]]},"540":{"position":[[2127,9]]},"548":{"position":[[91,13],[344,13],[516,13],[591,13],[665,13]]},"555":{"position":[[952,10],[1672,13]]},"604":{"position":[[55,9]]},"620":{"position":[[94,13]]},"632":{"position":[[66,9]]},"658":{"position":[[66,9]]},"660":{"position":[[66,9]]},"667":{"position":[[1562,9]]},"669":{"position":[[1630,9]]},"671":{"position":[[1715,9]]},"673":{"position":[[1612,9]]},"685":{"position":[[68,9]]},"691":{"position":[[68,9]]},"764":{"position":[[156,13]]}}}],["confirm",{"_index":258,"t":{"19":{"position":[[661,7],[1135,7]]},"25":{"position":[[482,7]]},"108":{"position":[[958,7]]},"522":{"position":[[379,7]]},"528":{"position":[[312,7]]}}}],["conflict",{"_index":1798,"t":{"307":{"position":[[200,10]]},"319":{"position":[[1100,9]]},"326":{"position":[[625,8],[1605,11]]},"454":{"position":[[1280,10]]}}}],["conform",{"_index":2553,"t":{"516":{"position":[[400,12]]}}}],["confus",{"_index":1410,"t":{"199":{"position":[[217,8]]}}}],["connect",{"_index":174,"t":{"17":{"position":[[66,12]]},"73":{"position":[[217,10]]},"75":{"position":[[44,10],[99,10],[214,8],[365,7],[480,8],[704,11],[759,10]]},"83":{"position":[[218,7]]},"101":{"position":[[890,7]]},"118":{"position":[[3091,7]]},"135":{"position":[[1255,7]]},"137":{"position":[[419,7]]},"150":{"position":[[1014,12],[1256,10],[1530,11],[1605,10],[1783,11],[1862,10]]},"162":{"position":[[3129,7],[5184,7]]},"168":{"position":[[827,9]]},"170":{"position":[[288,10]]},"179":{"position":[[1017,7],[1794,7],[2278,7],[2567,7]]},"185":{"position":[[1842,10]]},"187":{"position":[[147,7],[248,11],[494,10],[551,10]]},"189":{"position":[[712,7],[1525,7]]},"213":{"position":[[249,7]]},"255":{"position":[[144,9]]},"303":{"position":[[1493,12]]},"307":{"position":[[1255,12]]},"309":{"position":[[315,12],[357,7],[903,12],[1360,11],[1697,11]]},"315":{"position":[[110,9],[350,12]]},"317":{"position":[[750,7],[945,12]]},"336":{"position":[[32,7],[653,7],[694,10]]},"360":{"position":[[354,11]]},"398":{"position":[[1151,10]]},"474":{"position":[[715,10],[1338,10]]},"492":{"position":[[201,10],[292,11]]},"610":{"position":[[81,10]]},"612":{"position":[[80,10]]},"650":{"position":[[81,10]]},"652":{"position":[[81,10]]},"654":{"position":[[81,10]]},"656":{"position":[[81,10]]},"737":{"position":[[350,10],[598,10]]}}}],["consid",{"_index":2038,"t":{"370":{"position":[[11,8]]},"791":{"position":[[193,8]]}}}],["consider",{"_index":1799,"t":{"307":{"position":[[251,14]]},"800":{"position":[[86,13]]}}}],["consist",{"_index":1903,"t":{"326":{"position":[[1066,7]]},"338":{"position":[[9,8]]},"342":{"position":[[143,8],[553,8]]}}}],["console=serial0,115200",{"_index":713,"t":{"50":{"position":[[332,22]]}}}],["console=tty1",{"_index":714,"t":{"50":{"position":[[355,12]]}}}],["consult",{"_index":1839,"t":{"311":{"position":[[1494,7]]},"404":{"position":[[1435,7]]}}}],["consum",{"_index":774,"t":{"59":{"position":[[43,9]]},"350":{"position":[[329,8]]}}}],["contain",{"_index":116,"t":{"8":{"position":[[13,8]]},"19":{"position":[[62,9],[347,9],[1159,10],[1200,9]]},"25":{"position":[[55,9],[126,9],[236,10],[266,9],[329,9],[506,9],[1170,11],[1195,9],[1438,9]]},"27":{"position":[[115,9]]},"29":{"position":[[163,9]]},"44":{"position":[[68,7]]},"52":{"position":[[831,9]]},"54":{"position":[[571,9]]},"56":{"position":[[384,8],[422,9],[487,8]]},"59":{"position":[[66,9],[153,9],[320,9],[520,9],[768,9]]},"61":{"position":[[467,11]]},"65":{"position":[[1319,8]]},"67":{"position":[[485,9]]},"77":{"position":[[15,8],[926,9],[1055,9]]},"89":{"position":[[27,9]]},"101":{"position":[[2102,9]]},"114":{"position":[[1603,10]]},"122":{"position":[[46,8]]},"137":{"position":[[169,10],[358,10]]},"162":{"position":[[2838,10],[3032,10],[7034,9]]},"168":{"position":[[69,8]]},"253":{"position":[[13,8]]},"261":{"position":[[94,9]]},"303":{"position":[[91,9]]},"309":{"position":[[269,9]]},"326":{"position":[[100,7],[802,8]]},"350":{"position":[[121,9]]},"358":{"position":[[356,8]]},"428":{"position":[[767,9]]},"430":{"position":[[13,8]]},"438":{"position":[[538,9]]},"454":{"position":[[798,9],[930,10]]},"474":{"position":[[72,8]]},"476":{"position":[[3507,9],[3572,9]]},"512":{"position":[[4,8]]},"516":{"position":[[626,9]]},"522":{"position":[[78,11]]},"528":{"position":[[78,11]]},"542":{"position":[[52,10],[136,10],[247,11]]},"735":{"position":[[1044,9],[1541,9],[2267,9],[2764,9]]},"747":{"position":[[1235,9],[1732,9],[2458,9],[2955,9]]},"773":{"position":[[143,8]]},"775":{"position":[[137,11]]},"777":{"position":[[134,11]]},"779":{"position":[[134,11]]},"781":{"position":[[138,11]]},"783":{"position":[[126,10]]},"787":{"position":[[126,10]]},"791":{"position":[[116,8],[246,10]]},"793":{"position":[[126,10]]},"795":{"position":[[126,10]]},"797":{"position":[[126,10]]},"817":{"position":[[200,11]]}}}],["container_set",{"_index":1805,"t":{"307":{"position":[[413,18],[454,21],[796,18],[837,21]]}}}],["containerd",{"_index":85,"t":{"4":{"position":[[896,10]]},"17":{"position":[[246,10],[1274,10]]},"19":{"position":[[29,11],[391,11]]},"23":{"position":[[34,10]]},"25":{"position":[[691,10]]},"77":{"position":[[416,11],[1039,11]]},"87":{"position":[[423,10]]},"89":{"position":[[81,10],[272,10]]},"95":{"position":[[77,10]]},"101":{"position":[[1670,10],[2168,10],[2341,10],[2463,10],[3479,10]]},"158":{"position":[[133,10]]},"162":{"position":[[7021,10],[7100,10],[7273,10],[7395,10],[8772,10]]},"235":{"position":[[361,10]]},"261":{"position":[[80,10]]},"309":{"position":[[182,11]]},"336":{"position":[[0,10],[214,10],[627,10]]},"340":{"position":[[259,10]]},"440":{"position":[[311,11]]},"456":{"position":[[373,10]]},"542":{"position":[[161,10]]},"604":{"position":[[308,10],[436,10]]},"606":{"position":[[237,10],[417,10]]},"624":{"position":[[297,10],[430,10]]},"677":{"position":[[246,10],[402,10]]},"745":{"position":[[463,10]]},"753":{"position":[[1104,10]]}}}],["containerd=/run/k3s/containerd/containerd.sock",{"_index":2471,"t":{"476":{"position":[[3599,46]]},"735":{"position":[[1116,46],[2339,46]]},"747":{"position":[[1307,46],[2530,46]]}}}],["containerd_",{"_index":227,"t":{"17":{"position":[[1358,12]]}}}],["containerd_http_proxi",{"_index":189,"t":{"17":{"position":[[379,22]]}}}],["containerd_http_proxy=http://your",{"_index":228,"t":{"17":{"position":[[1371,33]]}}}],["containerd_https_proxi",{"_index":190,"t":{"17":{"position":[[402,22]]}}}],["containerd_https_proxy=http://your",{"_index":229,"t":{"17":{"position":[[1428,34]]}}}],["containerd_no_proxi",{"_index":191,"t":{"17":{"position":[[429,19]]}}}],["containerd_no_proxy=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16",{"_index":230,"t":{"17":{"position":[[1486,71]]}}}],["containerport",{"_index":836,"t":{"61":{"position":[[722,14]]},"522":{"position":[[220,14]]},"528":{"position":[[220,14]]}}}],["containers/contain",{"_index":770,"t":{"56":{"position":[[337,20]]}}}],["containers/node:13.13.0",{"_index":824,"t":{"61":{"position":[[300,23],[524,23]]}}}],["content",{"_index":785,"t":{"59":{"position":[[283,9],[404,8],[997,7]]},"193":{"position":[[203,8]]},"203":{"position":[[2317,9]]},"205":{"position":[[354,9]]},"247":{"position":[[2013,7],[2111,7]]},"249":{"position":[[716,8]]},"277":{"position":[[2050,8]]},"326":{"position":[[1505,7]]},"328":{"position":[[53,7]]},"332":{"position":[[149,8]]},"398":{"position":[[1286,9]]},"454":{"position":[[1086,7]]},"548":{"position":[[500,8]]}}}],["continu",{"_index":245,"t":{"19":{"position":[[318,10]]},"114":{"position":[[1092,10]]},"432":{"position":[[1952,8]]},"542":{"position":[[63,8]]}}}],["contrast",{"_index":2128,"t":{"408":{"position":[[521,9]]}}}],["contrib/util/gener",{"_index":1050,"t":{"110":{"position":[[278,21]]}}}],["contrib/util/rot",{"_index":1102,"t":{"114":{"position":[[1299,19]]}}}],["control",{"_index":63,"t":{"4":{"position":[[516,10],[543,11],[583,7],[995,10]]},"27":{"position":[[396,10],[430,11],[516,7]]},"31":{"position":[[287,10],[825,11]]},"35":{"position":[[876,8]]},"39":{"position":[[666,7],[813,7]]},"65":{"position":[[258,7]]},"67":{"position":[[272,7],[418,7]]},"71":{"position":[[108,7],[304,7],[503,7]]},"77":{"position":[[193,10],[223,10],[464,11]]},"106":{"position":[[403,10],[438,11],[468,11]]},"108":{"position":[[780,11]]},"122":{"position":[[107,7]]},"132":{"position":[[325,10],[351,10]]},"154":{"position":[[137,10],[174,10],[301,10],[327,10],[351,10]]},"156":{"position":[[214,10],[268,10],[308,10],[368,10]]},"162":{"position":[[3589,10],[3651,10],[3769,10],[3837,10],[6055,10],[6105,10],[6258,10],[6284,10],[6321,10]]},"199":{"position":[[276,10],[389,11],[750,11]]},"203":{"position":[[1777,7],[1837,7],[1897,7],[3226,7],[3286,7],[3346,7]]},"205":{"position":[[1263,7],[1323,7],[1383,7]]},"207":{"position":[[205,7],[380,7]]},"213":{"position":[[1359,7]]},"215":{"position":[[712,11],[777,11]]},"221":{"position":[[742,7],[1766,7],[1817,7],[1868,7],[1937,7],[2428,11],[2493,11]]},"245":{"position":[[581,10]]},"247":{"position":[[1490,10]]},"253":{"position":[[501,7]]},"273":{"position":[[419,10],[483,10],[581,10],[767,11],[971,11]]},"309":{"position":[[133,7],[340,7]]},"319":{"position":[[489,8]]},"322":{"position":[[633,11]]},"324":{"position":[[193,10]]},"374":{"position":[[57,7],[108,10],[217,7],[386,7],[413,7]]},"376":{"position":[[67,7],[192,10],[300,7],[405,7]]},"378":{"position":[[17,7],[154,7],[208,7],[580,7]]},"380":{"position":[[133,7],[227,10]]},"382":{"position":[[297,10]]},"398":{"position":[[407,7],[705,7],[1025,10],[2108,10],[2317,10]]},"400":{"position":[[52,11]]},"404":{"position":[[207,10]]},"406":{"position":[[40,11],[106,10],[386,11],[493,11]]},"408":{"position":[[17,10]]},"410":{"position":[[14,10]]},"414":{"position":[[103,10]]},"420":{"position":[[126,10],[318,11],[543,10]]},"424":{"position":[[72,10],[1403,10]]},"428":{"position":[[739,7]]},"436":{"position":[[443,7]]},"438":{"position":[[443,7]]},"454":{"position":[[119,10],[153,7],[312,7],[829,7]]},"456":{"position":[[596,7],[632,7]]},"460":{"position":[[128,8],[178,8],[351,8],[623,8]]},"466":{"position":[[289,10],[547,11]]},"468":{"position":[[95,11],[219,7],[909,11],[1266,8]]},"470":{"position":[[958,10]]},"474":{"position":[[269,7],[589,10],[1212,10]]},"476":{"position":[[25,7],[145,7],[2247,10]]},"478":{"position":[[18,8]]},"480":{"position":[[26,7],[96,7]]},"482":{"position":[[26,7],[132,8],[408,7],[489,7]]},"502":{"position":[[91,7],[191,8]]},"506":{"position":[[883,8]]},"512":{"position":[[69,7]]},"531":{"position":[[304,11]]},"533":{"position":[[415,8]]},"536":{"position":[[67,11],[200,11],[485,10],[630,10],[1004,10],[1233,10],[1592,10],[1683,10],[1905,10]]},"538":{"position":[[19,10],[348,10],[440,10]]},"540":{"position":[[77,8],[182,7],[263,10],[1288,10],[1976,10],[2433,10],[2508,10]]},"546":{"position":[[1050,10]]},"555":{"position":[[289,7],[572,8],[840,8],[867,7],[1016,7],[1172,8],[1280,7],[1419,7],[1575,8]]},"559":{"position":[[109,7]]},"561":{"position":[[109,7]]},"563":{"position":[[109,7],[183,10]]},"565":{"position":[[109,7],[189,10]]},"567":{"position":[[109,7]]},"569":{"position":[[109,7]]},"571":{"position":[[109,7]]},"573":{"position":[[109,7]]},"575":{"position":[[109,7]]},"577":{"position":[[109,7]]},"583":{"position":[[109,7]]},"585":{"position":[[99,7]]},"587":{"position":[[99,7]]},"589":{"position":[[99,7]]},"591":{"position":[[99,7]]},"593":{"position":[[99,7]]},"595":{"position":[[99,7]]},"597":{"position":[[99,7]]},"599":{"position":[[99,7]]},"602":{"position":[[122,7]]},"604":{"position":[[208,7]]},"606":{"position":[[122,7]]},"608":{"position":[[132,7]]},"610":{"position":[[226,7]]},"612":{"position":[[229,7]]},"614":{"position":[[122,7]]},"616":{"position":[[122,7]]},"618":{"position":[[122,7]]},"620":{"position":[[301,7]]},"622":{"position":[[122,7]]},"624":{"position":[[122,7]]},"626":{"position":[[122,7]]},"628":{"position":[[212,7]]},"630":{"position":[[122,7]]},"632":{"position":[[215,7]]},"634":{"position":[[122,7]]},"636":{"position":[[122,7]]},"638":{"position":[[132,7]]},"640":{"position":[[132,7]]},"642":{"position":[[132,7]]},"644":{"position":[[132,7]]},"646":{"position":[[122,7]]},"648":{"position":[[132,7]]},"650":{"position":[[226,7]]},"652":{"position":[[212,7]]},"654":{"position":[[212,7]]},"656":{"position":[[226,7]]},"658":{"position":[[203,7]]},"662":{"position":[[122,7]]},"665":{"position":[[35,10],[108,10],[139,7],[341,10]]},"667":{"position":[[35,10],[108,10],[139,7],[271,10],[505,10],[789,10],[1593,14]]},"669":{"position":[[35,10],[108,10],[139,7],[291,10],[573,10],[857,10],[1661,14]]},"671":{"position":[[35,10],[108,10],[139,7],[387,10],[658,10],[942,10],[1746,14]]},"673":{"position":[[35,10],[108,10],[139,7],[324,10],[555,10],[839,10],[1643,14]]},"675":{"position":[[45,10],[118,10],[149,7]]},"677":{"position":[[35,10],[108,10],[139,7]]},"680":{"position":[[126,7]]},"682":{"position":[[121,7]]},"773":{"position":[[90,7]]}}}],["controller.yaml",{"_index":1684,"t":{"273":{"position":[[629,15]]},"538":{"position":[[328,15]]}}}],["controller/releases/latest/download/system",{"_index":2605,"t":{"538":{"position":[[277,42]]}}}],["controller:v0.4.0",{"_index":1687,"t":{"273":{"position":[[851,17]]}}}],["controllermanag",{"_index":2694,"t":{"591":{"position":[[142,17]]},"593":{"position":[[148,17]]}}}],["conveni",{"_index":2180,"t":{"428":{"position":[[46,10]]}}}],["convent",{"_index":1627,"t":{"247":{"position":[[2528,12]]}}}],["convert",{"_index":867,"t":{"65":{"position":[[688,7]]},"223":{"position":[[126,7]]}}}],["copi",{"_index":742,"t":{"52":{"position":[[787,4]]},"108":{"position":[[578,6]]},"110":{"position":[[2061,4]]},"112":{"position":[[1029,7],[1289,4],[1680,4]]},"183":{"position":[[0,4]]},"193":{"position":[[117,4]]},"215":{"position":[[948,4]]},"271":{"position":[[298,4],[366,4]]},"533":{"position":[[608,4]]},"550":{"position":[[89,4]]}}}],["cordon",{"_index":2611,"t":{"540":{"position":[[539,7],[887,7]]}}}],["core",{"_index":1990,"t":{"358":{"position":[[141,4],[148,5]]},"434":{"position":[[276,4],[361,4],[424,4],[500,4],[583,4],[644,4]]},"442":{"position":[[97,4],[186,4]]},"446":{"position":[[155,4],[186,4],[205,4]]},"448":{"position":[[160,4],[191,4],[210,4]]},"450":{"position":[[33,4],[68,4],[92,4]]},"460":{"position":[[1180,4]]},"516":{"position":[[366,4]]}}}],["coredn",{"_index":88,"t":{"4":{"position":[[921,7]]},"19":{"position":[[988,7],[2489,9]]},"150":{"position":[[346,7]]},"162":{"position":[[1750,7],[5909,8]]},"301":{"position":[[193,8]]},"324":{"position":[[104,8]]},"332":{"position":[[918,7]]},"348":{"position":[[345,7],[450,7]]},"400":{"position":[[23,8]]},"402":{"position":[[0,7],[161,8]]}}}],["coredns.yaml",{"_index":1922,"t":{"332":{"position":[[686,12]]}}}],["coredns:1.6.3",{"_index":1940,"t":{"340":{"position":[[647,13],[745,14],[1093,13],[1175,14],[1435,13]]},"348":{"position":[[204,13],[302,13]]}}}],["correct",{"_index":1047,"t":{"110":{"position":[[42,7],[612,7],[2122,7]]},"112":{"position":[[1052,7],[1350,7]]},"150":{"position":[[1549,7],[1802,7]]},"181":{"position":[[237,7]]},"303":{"position":[[2232,7]]},"309":{"position":[[1379,7],[1716,7]]},"326":{"position":[[1549,7]]},"677":{"position":[[173,7]]},"682":{"position":[[155,7]]}}}],["correl",{"_index":2504,"t":{"486":{"position":[[178,9]]},"488":{"position":[[257,12]]},"490":{"position":[[256,12]]}}}],["correspond",{"_index":1061,"t":{"110":{"position":[[1156,13]]},"249":{"position":[[284,13]]},"273":{"position":[[206,11]]},"279":{"position":[[1038,13]]},"322":{"position":[[267,13],[496,13]]},"332":{"position":[[121,13]]},"494":{"position":[[354,13]]},"555":{"position":[[670,13]]},"747":{"position":[[209,13]]}}}],["corrupt",{"_index":1182,"t":{"122":{"position":[[366,10]]}}}],["cost",{"_index":479,"t":{"27":{"position":[[583,4]]}}}],["count",{"_index":1165,"t":{"118":{"position":[[4168,5]]},"311":{"position":[[1211,6]]}}}],["cours",{"_index":202,"t":{"17":{"position":[[658,7]]}}}],["cover",{"_index":2177,"t":{"426":{"position":[[97,6]]},"518":{"position":[[180,5]]},"524":{"position":[[137,5]]},"555":{"position":[[1974,7]]},"705":{"position":[[94,6]]}}}],["coverag",{"_index":1692,"t":{"275":{"position":[[226,9]]},"430":{"position":[[31,8]]}}}],["cp",{"_index":746,"t":{"52":{"position":[[862,2]]},"110":{"position":[[2364,2]]},"112":{"position":[[1563,2],[1787,2]]},"203":{"position":[[2695,2]]},"205":{"position":[[732,2]]},"263":{"position":[[227,2]]}}}],["cpi",{"_index":2563,"t":{"516":{"position":[[689,6]]}}}],["cpu",{"_index":1989,"t":{"358":{"position":[[135,3]]},"366":{"position":[[30,3]]},"434":{"position":[[159,3],[254,4],[339,4],[402,4]]},"436":{"position":[[147,4],[369,4]]},"440":{"position":[[69,4],[213,3]]},"442":{"position":[[15,3],[90,4]]},"446":{"position":[[122,3],[151,3]]},"448":{"position":[[127,3],[156,3]]},"450":{"position":[[29,3]]},"454":{"position":[[1032,3]]}}}],["crash",{"_index":2181,"t":{"428":{"position":[[382,7]]},"500":{"position":[[251,5]]}}}],["crd",{"_index":842,"t":{"63":{"position":[[265,3],[300,3]]},"245":{"position":[[716,6]]},"536":{"position":[[179,6],[476,4]]}}}],["creat",{"_index":165,"t":{"15":{"position":[[127,8],[227,6]]},"19":{"position":[[1227,7]]},"23":{"position":[[152,6]]},"31":{"position":[[55,8]]},"41":{"position":[[188,7],[257,7]]},"52":{"position":[[157,6]]},"63":{"position":[[207,6],[319,6]]},"110":{"position":[[201,6],[397,6],[601,6],[1550,6],[1969,6]]},"112":{"position":[[1208,6]]},"114":{"position":[[1194,6],[1484,6],[1570,6]]},"116":{"position":[[654,6]]},"118":{"position":[[79,6],[170,8],[741,8]]},"172":{"position":[[128,7]]},"174":{"position":[[78,7],[329,8]]},"179":{"position":[[244,6],[251,6],[392,6],[497,6],[513,6]]},"189":{"position":[[615,6],[777,6],[1431,6],[1620,6]]},"203":{"position":[[2265,6]]},"205":{"position":[[302,6]]},"211":{"position":[[23,6]]},"217":{"position":[[232,7]]},"235":{"position":[[191,7]]},"245":{"position":[[192,6],[306,8],[827,8]]},"247":{"position":[[390,7]]},"249":{"position":[[603,6]]},"257":{"position":[[39,7]]},"259":{"position":[[51,6]]},"261":{"position":[[25,7]]},"285":{"position":[[86,7]]},"289":{"position":[[195,6]]},"291":{"position":[[26,7],[102,6],[610,6]]},"293":{"position":[[73,6]]},"295":{"position":[[33,6]]},"311":{"position":[[575,8]]},"319":{"position":[[1064,6]]},"332":{"position":[[66,6],[232,8],[286,7],[353,8],[426,8],[1006,8]]},"336":{"position":[[329,6],[554,6]]},"360":{"position":[[1052,6]]},"376":{"position":[[3,6]]},"378":{"position":[[178,6],[379,8]]},"382":{"position":[[148,6]]},"384":{"position":[[167,7]]},"398":{"position":[[1214,6]]},"404":{"position":[[772,8]]},"408":{"position":[[252,8]]},"410":{"position":[[145,7],[206,7],[616,8],[649,7],[787,6]]},"412":{"position":[[0,6]]},"416":{"position":[[426,6],[593,6]]},"422":{"position":[[43,6]]},"432":{"position":[[523,6],[653,6],[1645,7],[1842,7]]},"454":{"position":[[651,8]]},"464":{"position":[[265,6]]},"466":{"position":[[347,8],[448,7]]},"468":{"position":[[2066,6]]},"470":{"position":[[1024,7],[2728,8]]},"472":{"position":[[104,6],[273,7],[1053,7]]},"480":{"position":[[166,7],[262,8]]},"502":{"position":[[38,8]]},"506":{"position":[[306,7]]},"514":{"position":[[72,6]]},"518":{"position":[[80,6],[275,6]]},"522":{"position":[[333,6],[360,6],[406,8]]},"524":{"position":[[441,6],[473,6],[500,6]]},"528":{"position":[[339,8]]},"540":{"position":[[22,6],[145,6],[250,8],[1248,7],[2468,8]]},"555":{"position":[[768,8]]},"628":{"position":[[55,6]]},"697":{"position":[[74,6]]},"703":{"position":[[26,6]]},"762":{"position":[[49,6]]},"764":{"position":[[26,6]]},"785":{"position":[[26,6]]},"802":{"position":[[55,6]]},"813":{"position":[[55,6]]},"819":{"position":[[53,7],[153,7]]}}}],["creating/destroy",{"_index":2279,"t":{"454":{"position":[[910,19]]}}}],["creating/modifying/delet",{"_index":2275,"t":{"454":{"position":[[335,27]]}}}],["credenti",{"_index":629,"t":{"39":{"position":[[878,12]]},"101":{"position":[[1279,10],[1358,10],[1467,10],[1529,10]]},"162":{"position":[[6604,10],[6683,10],[6792,10],[6854,10]]},"166":{"position":[[193,12]]},"168":{"position":[[571,12],[861,12],[1267,11]]},"187":{"position":[[1652,11]]},"342":{"position":[[40,10]]},"669":{"position":[[350,12],[403,12]]}}}],["credentials=tru",{"_index":2073,"t":{"398":{"position":[[1107,17]]},"474":{"position":[[671,17],[1294,17]]},"476":{"position":[[2822,16]]},"667":{"position":[[2000,17]]},"669":{"position":[[208,16],[2068,17]]},"671":{"position":[[2153,17]]},"673":{"position":[[2050,17]]}}}],["crf",{"_index":811,"t":{"59":{"position":[[940,4]]}}}],["cri",{"_index":240,"t":{"19":{"position":[[242,3]]},"77":{"position":[[954,6]]},"89":{"position":[[104,3],[172,3]]},"95":{"position":[[54,3]]},"101":{"position":[[2191,3],[3456,3]]},"158":{"position":[[110,3]]},"162":{"position":[[6998,3],[7123,3]]}}}],["crictl",{"_index":948,"t":{"77":{"position":[[838,6],[862,6]]},"340":{"position":[[1383,6]]},"428":{"position":[[462,7]]},"432":{"position":[[556,7]]}}}],["critic",{"_index":900,"t":{"71":{"position":[[125,9]]},"207":{"position":[[222,9]]},"279":{"position":[[1115,8],[1400,8]]},"468":{"position":[[6416,8]]}}}],["criticaladdonsonly=true:noexecut",{"_index":1499,"t":{"213":{"position":[[1524,34]]}}}],["cron",{"_index":1137,"t":{"118":{"position":[[2081,4],[2118,4]]},"135":{"position":[[812,4],[853,4]]},"162":{"position":[[4676,4],[4718,4]]}}}],["cross",{"_index":1100,"t":{"114":{"position":[[659,5],[1034,5],[1234,5],[1420,5],[1518,5]]}}}],["csi",{"_index":2332,"t":{"468":{"position":[[1656,5],[2797,5]]},"516":{"position":[[654,5],[768,3]]}}}],["ctr",{"_index":951,"t":{"77":{"position":[[987,3],[1008,3]]},"428":{"position":[[470,4]]},"432":{"position":[[568,3]]}}}],["cuda",{"_index":415,"t":{"25":{"position":[[347,4],[1190,4]]}}}],["curl",{"_index":250,"t":{"19":{"position":[[511,4],[613,4]]},"21":{"position":[[347,4]]},"25":{"position":[[454,4]]},"41":{"position":[[445,4]]},"110":{"position":[[2535,4]]},"112":{"position":[[1899,4]]},"114":{"position":[[1666,4]]},"203":{"position":[[1403,4],[2853,4]]},"205":{"position":[[890,4]]},"213":{"position":[[588,4]]},"215":{"position":[[400,4]]},"221":{"position":[[1163,4],[1431,4],[2152,4]]},"268":{"position":[[730,5],[911,4]]},"277":{"position":[[759,4],[861,4],[965,4],[1104,4],[1199,4],[1358,4],[1474,4],[1594,4],[1690,4]]},"279":{"position":[[411,4]]},"285":{"position":[[246,4]]},"319":{"position":[[676,4]]},"376":{"position":[[102,4]]},"378":{"position":[[258,4]]},"428":{"position":[[216,4],[1169,4]]},"432":{"position":[[221,4],[2442,4]]},"510":{"position":[[390,4]]},"548":{"position":[[816,4],[1004,4],[1189,4]]}}}],["current",{"_index":193,"t":{"17":{"position":[[468,7]]},"31":{"position":[[509,10],[961,9]]},"39":{"position":[[263,7]]},"112":{"position":[[271,9],[1689,7]]},"114":{"position":[[294,9],[1538,7]]},"116":{"position":[[457,9],[984,7]]},"124":{"position":[[222,9],[883,9]]},"128":{"position":[[87,7],[244,7],[526,7],[861,7],[899,7],[1352,9],[1610,9]]},"478":{"position":[[36,9]]},"484":{"position":[[301,10]]},"498":{"position":[[190,10]]},"500":{"position":[[308,7]]},"548":{"position":[[792,7]]}}}],["custom",{"_index":143,"t":{"11":{"position":[[213,6]]},"23":{"position":[[116,13],[449,9]]},"56":{"position":[[173,6],[226,9],[285,6]]},"89":{"position":[[245,10]]},"93":{"position":[[37,10],[96,10]]},"101":{"position":[[2314,10],[3172,10],[3245,10]]},"110":{"position":[[300,6],[705,6],[1195,6],[1215,6],[1896,6],[2509,6],[2607,6]]},"112":{"position":[[10,6],[433,6],[914,6],[1873,6],[1971,6]]},"118":{"position":[[3073,6]]},"135":{"position":[[1237,6]]},"156":{"position":[[34,10],[94,10],[164,10],[243,10],[337,10],[415,10],[474,10]]},"162":{"position":[[3481,10],[3549,10],[3626,10],[3713,10],[3806,10],[5166,6],[7246,10],[8233,10],[8306,10]]},"168":{"position":[[432,6]]},"174":{"position":[[858,6],[1156,6]]},"187":{"position":[[865,6]]},"245":{"position":[[689,6]]},"247":{"position":[[14,6]]},"249":{"position":[[157,11],[541,9]]},"311":{"position":[[1384,6]]},"322":{"position":[[340,6]]},"360":{"position":[[486,6]]},"398":{"position":[[2922,6]]},"404":{"position":[[751,9],[898,11]]},"536":{"position":[[152,6]]},"538":{"position":[[381,10]]}}}],["d",{"_index":736,"t":{"52":{"position":[[553,1]]},"85":{"position":[[44,1]]},"101":{"position":[[931,1]]},"146":{"position":[[44,1]]},"162":{"position":[[1257,1]]},"203":{"position":[[2562,1]]},"205":{"position":[[599,1]]},"416":{"position":[[332,1],[749,2]]},"579":{"position":[[533,1],[749,1]]},"602":{"position":[[212,1]]},"610":{"position":[[442,1]]},"612":{"position":[[425,1]]},"614":{"position":[[299,1]]},"616":{"position":[[265,1]]},"618":{"position":[[278,1]]},"620":{"position":[[369,1]]},"622":{"position":[[276,1]]},"626":{"position":[[342,1]]},"628":{"position":[[364,1]]},"630":{"position":[[260,1]]},"632":{"position":[[395,1]]},"634":{"position":[[256,1]]},"636":{"position":[[207,1]]},"646":{"position":[[337,1]]},"650":{"position":[[663,1],[879,1]]},"652":{"position":[[404,1]]},"654":{"position":[[339,1]]},"656":{"position":[[351,1]]},"658":{"position":[[393,1]]},"662":{"position":[[945,1]]},"665":{"position":[[294,1]]},"667":{"position":[[224,1]]},"669":{"position":[[244,1]]},"671":{"position":[[340,1]]},"673":{"position":[[277,1]]},"680":{"position":[[211,1]]},"682":{"position":[[221,1]]},"685":{"position":[[557,1],[773,1]]},"687":{"position":[[446,1],[662,1]]},"689":{"position":[[471,1],[687,1]]},"691":{"position":[[623,1],[839,1]]},"693":{"position":[[449,1],[665,1]]},"695":{"position":[[481,1],[697,1]]},"697":{"position":[[580,1],[796,1]]},"703":{"position":[[91,1]]},"729":{"position":[[511,1],[602,1]]},"731":{"position":[[497,1],[588,1]]},"733":{"position":[[553,1],[644,1]]},"735":{"position":[[461,1]]},"737":{"position":[[518,1]]},"747":{"position":[[679,1]]}}}],["daemon",{"_index":546,"t":{"33":{"position":[[663,6]]},"37":{"position":[[54,6],[120,6]]},"77":{"position":[[1065,6]]},"317":{"position":[[1249,6]]},"472":{"position":[[1437,6]]},"729":{"position":[[422,6]]},"731":{"position":[[408,6]]},"733":{"position":[[464,6]]},"735":{"position":[[394,6]]},"737":{"position":[[451,6]]},"739":{"position":[[428,6]]},"741":{"position":[[428,6]]},"743":{"position":[[302,6]]},"745":{"position":[[396,6]]},"747":{"position":[[612,6]]},"749":{"position":[[478,6]]},"751":{"position":[[332,6]]},"753":{"position":[[1037,6]]}}}],["daemonset",{"_index":627,"t":{"39":{"position":[[827,11]]},"410":{"position":[[132,9],[188,9],[636,9]]},"416":{"position":[[527,9],[698,9]]}}}],["danger",{"_index":1468,"t":{"203":{"position":[[1963,6]]},"205":{"position":[[0,6]]},"326":{"position":[[1297,6]]},"360":{"position":[[1002,6]]},"536":{"position":[[1049,6]]}}}],["dashboard",{"_index":1750,"t":{"287":{"position":[[77,9]]},"291":{"position":[[91,10],[258,9],[546,9]]},"293":{"position":[[63,9],[128,9]]},"295":{"position":[[14,9],[105,9],[314,10],[340,9]]},"297":{"position":[[38,9]]},"299":{"position":[[38,9],[102,9],[159,9]]}}}],["dashboard.admin",{"_index":1759,"t":{"291":{"position":[[148,15],[268,15],[620,15],[648,15]]},"297":{"position":[[364,15],[392,15]]}}}],["dashboard/services/https:kubernet",{"_index":1773,"t":{"295":{"position":[[188,35]]}}}],["dashboard:/proxi",{"_index":1774,"t":{"295":{"position":[[224,17]]}}}],["data",{"_index":766,"t":{"56":{"position":[[182,4]]},"59":{"position":[[197,4]]},"77":{"position":[[1267,4]]},"85":{"position":[[27,4]]},"101":{"position":[[914,4]]},"108":{"position":[[1032,4]]},"112":{"position":[[288,4],[1529,4]]},"114":{"position":[[311,4]]},"116":{"position":[[474,4]]},"118":{"position":[[412,6],[449,4],[533,4],[627,4],[659,6],[756,4],[1626,4],[2334,6]]},"135":{"position":[[139,4],[1067,6]]},"146":{"position":[[27,4]]},"162":{"position":[[1240,4],[1265,6],[3947,4],[4940,6]]},"179":{"position":[[870,4],[885,6],[1647,4],[1662,6],[2131,4],[2146,6],[2420,4],[2435,6]]},"189":{"position":[[1116,4]]},"191":{"position":[[450,4]]},"384":{"position":[[51,5],[133,4]]},"440":{"position":[[422,4]]},"488":{"position":[[204,4],[405,4]]},"490":{"position":[[203,4],[391,4]]},"492":{"position":[[351,4]]},"514":{"position":[[51,5],[150,4],[260,5]]},"516":{"position":[[216,4]]},"522":{"position":[[205,5]]},"528":{"position":[[205,5]]},"533":{"position":[[317,5],[1084,4],[1278,4]]},"542":{"position":[[384,4]]},"579":{"position":[[64,4],[104,4],[194,4]]},"581":{"position":[[74,4],[114,4],[204,4]]},"705":{"position":[[314,5]]}}}],["data_dir",{"_index":1089,"t":{"112":{"position":[[1085,8]]}}}],["data_dir=/opt/k3",{"_index":1095,"t":{"112":{"position":[[1992,17]]}}}],["databas",{"_index":892,"t":{"69":{"position":[[110,9]]},"185":{"position":[[376,8],[518,8],[668,8],[999,8],[1312,8],[1372,8]]},"187":{"position":[[1643,8]]},"189":{"position":[[551,8],[786,8],[1367,8],[1629,8]]},"195":{"position":[[98,8],[155,9],[233,8],[293,8],[331,8],[373,8]]},"207":{"position":[[87,9]]},"213":{"position":[[536,8],[864,8]]},"223":{"position":[[108,9]]},"358":{"position":[[793,9]]},"364":{"position":[[162,9],[227,8]]},"368":{"position":[[35,8]]},"372":{"position":[[23,9],[158,8]]},"579":{"position":[[389,9],[1601,8]]},"650":{"position":[[519,9],[1731,8]]},"685":{"position":[[413,9],[1625,8]]},"687":{"position":[[302,9],[1514,8]]},"689":{"position":[[327,9],[1539,8]]},"691":{"position":[[479,9],[1691,8]]},"693":{"position":[[305,9],[1517,8]]},"695":{"position":[[337,9],[1549,8]]},"697":{"position":[[436,9],[1648,8]]}}}],["datastor",{"_index":889,"t":{"67":{"position":[[290,9],[405,9]]},"71":{"position":[[344,9],[389,9],[538,9]]},"77":{"position":[[268,9]]},"112":{"position":[[153,10],[2063,10]]},"114":{"position":[[176,10],[1799,10]]},"116":{"position":[[1114,9]]},"118":{"position":[[119,10]]},"132":{"position":[[238,10]]},"135":{"position":[[40,9],[158,9],[248,9],[282,9],[368,9],[402,9],[476,9]]},"162":{"position":[[3866,9],[3992,9],[4066,9],[4124,9],[4192,9],[4252,9],[4309,9]]},"174":{"position":[[612,10],[825,9]]},"185":{"position":[[38,9],[189,9],[229,9],[720,9],[788,9],[902,10],[942,9],[1472,10],[1529,10]]},"187":{"position":[[31,9],[93,9],[415,9],[569,10],[662,9],[779,10],[798,9],[1002,9],[1122,10],[1159,9],[1297,9],[1328,9],[1438,10],[1466,9]]},"189":{"position":[[52,9],[103,9],[202,10],[274,9],[841,9],[1692,9]]},"191":{"position":[[63,9],[120,9],[466,9]]},"193":{"position":[[66,10],[99,10],[180,10]]},"195":{"position":[[17,9]]},"197":{"position":[[129,10]]},"207":{"position":[[415,9],[460,9]]},"211":{"position":[[42,9],[85,9]]},"213":{"position":[[195,9],[273,10],[561,9],[655,9],[817,9],[916,9],[1016,9]]},"215":{"position":[[467,9],[1105,11]]},"221":{"position":[[800,10]]},"223":{"position":[[309,9],[417,9],[466,9]]},"268":{"position":[[978,9]]},"358":{"position":[[465,9]]},"372":{"position":[[93,9]]},"384":{"position":[[152,11]]},"428":{"position":[[728,10]]},"434":{"position":[[969,9]]},"438":{"position":[[429,9]]},"446":{"position":[[246,9],[392,9]]},"448":{"position":[[251,9]]},"452":{"position":[[107,9]]},"454":{"position":[[81,9],[484,9]]},"456":{"position":[[165,10],[483,10],[510,9]]},"533":{"position":[[388,10],[749,11]]}}}],["datastore'",{"_index":1025,"t":{"108":{"position":[[462,11],[1056,11]]}}}],["date",{"_index":151,"t":{"13":{"position":[[69,4]]},"104":{"position":[[69,4]]},"108":{"position":[[344,4]]},"110":{"position":[[2904,5]]},"546":{"position":[[701,4]]}}}],["day",{"_index":150,"t":{"13":{"position":[[53,4],[135,4]]},"104":{"position":[[53,4],[135,4]]},"486":{"position":[[117,4],[242,4]]},"640":{"position":[[229,5]]}}}],["db",{"_index":903,"t":{"71":{"position":[[213,2],[225,2]]},"118":{"position":[[2301,2]]},"124":{"position":[[733,2],[749,2]]},"135":{"position":[[1044,2]]},"162":{"position":[[3404,4],[3891,4],[4015,4],[4149,4],[4276,4],[4388,4],[4476,4],[4541,4],[4687,4],[4819,4],[4893,4],[4916,2],[4991,4],[5029,4],[5079,4],[5158,4],[5233,4],[5304,4],[5371,4],[5438,4],[5481,4],[5571,4],[5605,4],[5657,4]]},"185":{"position":[[1416,2],[1822,3]]},"268":{"position":[[546,2],[584,2],[878,2]]}}}],["de8fded06188",{"_index":319,"t":{"19":{"position":[[1760,12]]}}}],["debian",{"_index":703,"t":{"50":{"position":[[19,6]]}}}],["debug",{"_index":950,"t":{"77":{"position":[[972,10],[1096,10]]},"101":{"position":[[340,5],[364,5]]},"142":{"position":[[27,5],[45,5]]},"162":{"position":[[351,5],[375,5]]},"235":{"position":[[498,5],[531,6]]},"285":{"position":[[143,6],[591,5]]}}}],["decid",{"_index":1872,"t":{"319":{"position":[[367,6]]}}}],["decis",{"_index":2635,"t":{"555":{"position":[[395,8]]}}}],["decompress",{"_index":2280,"t":{"454":{"position":[[1066,13]]}}}],["dedic",{"_index":1498,"t":{"213":{"position":[[1349,9]]},"219":{"position":[[134,9]]},"253":{"position":[[491,9]]},"378":{"position":[[7,9],[144,9],[388,9]]},"380":{"position":[[31,9],[157,9]]},"382":{"position":[[157,9]]},"697":{"position":[[83,9]]}}}],["default",{"_index":34,"t":{"4":{"position":[[163,7],[327,7],[351,8]]},"15":{"position":[[3,8]]},"19":{"position":[[17,8]]},"25":{"position":[[1106,7]]},"35":{"position":[[310,7]]},"46":{"position":[[117,8],[508,7]]},"48":{"position":[[108,8],[389,7]]},"54":{"position":[[108,7]]},"65":{"position":[[531,7]]},"75":{"position":[[381,7],[609,7]]},"81":{"position":[[5,7]]},"85":{"position":[[5,7]]},"87":{"position":[[276,8],[373,9],[673,9]]},"89":{"position":[[5,7]]},"91":{"position":[[268,7],[328,7],[394,7]]},"101":{"position":[[277,9],[442,9],[973,9],[1406,9],[1568,9],[1929,9],[1984,8],[2090,9],[2370,9],[2455,7],[2486,9],[2586,9],[2950,7],[3025,7],[3106,7]]},"108":{"position":[[202,8]]},"114":{"position":[[456,7],[829,7],[854,7],[937,7],[1319,7],[1736,7]]},"118":{"position":[[215,8],[400,8],[464,8],[2157,10],[2244,9],[2315,8],[3338,8],[4752,7],[4880,7]]},"135":{"position":[[129,9],[574,9],[721,8],[892,9],[983,9],[1057,9],[1172,9],[1577,9],[1714,9]]},"139":{"position":[[282,7]]},"142":{"position":[[5,7]]},"144":{"position":[[5,7]]},"146":{"position":[[5,7]]},"148":{"position":[[5,7]]},"150":{"position":[[5,7],[1409,7]]},"152":{"position":[[19,7],[52,7]]},"154":{"position":[[103,7],[160,7],[278,7]]},"162":{"position":[[288,9],[453,9],[742,9],[816,9],[941,9],[1075,9],[1098,9],[1293,9],[1438,9],[1543,9],[1672,9],[1804,9],[1877,9],[2096,9],[2354,9],[2464,9],[3937,9],[4434,9],[4582,9],[4624,9],[4761,9],[4854,9],[4930,9],[5100,9],[5525,9],[5673,9],[5691,7],[5734,7],[6021,7],[6091,7],[6235,7],[6731,9],[6893,9],[7302,9],[7387,7],[7418,9],[7518,9],[7573,7],[8011,7],[8086,7],[8167,7],[8362,8],[8468,9],[9031,9]]},"172":{"position":[[74,8]]},"176":{"position":[[3,8]]},"179":{"position":[[913,7],[1212,9],[1222,8],[1407,9],[1493,9],[1690,7],[2174,7],[2463,7],[2648,9]]},"185":{"position":[[894,7]]},"203":{"position":[[653,7]]},"213":{"position":[[1235,8]]},"219":{"position":[[44,8]]},"223":{"position":[[84,7]]},"247":{"position":[[221,7],[909,7],[1111,7],[1540,7],[1978,7]]},"251":{"position":[[66,8]]},"266":{"position":[[525,7],[542,7],[651,7],[918,7]]},"281":{"position":[[154,8]]},"283":{"position":[[89,8],[229,8]]},"303":{"position":[[284,7],[987,8]]},"309":{"position":[[1037,10]]},"313":{"position":[[67,7],[217,7]]},"319":{"position":[[414,7]]},"326":{"position":[[659,7]]},"336":{"position":[[442,8]]},"346":{"position":[[513,7]]},"398":{"position":[[632,9],[1745,9]]},"404":{"position":[[280,8],[446,7],[539,7],[710,8]]},"408":{"position":[[68,8],[283,7]]},"414":{"position":[[284,8]]},"424":{"position":[[688,7]]},"426":{"position":[[55,7]]},"432":{"position":[[510,7],[1081,8],[1348,8],[1499,7],[1547,7],[1658,7],[1855,7],[2157,8],[2278,8],[2675,7]]},"460":{"position":[[298,7]]},"464":{"position":[[162,9],[193,8]]},"466":{"position":[[195,8],[387,8],[469,8]]},"468":{"position":[[612,9],[6097,7],[6184,7]]},"470":{"position":[[728,7],[988,7]]},"472":{"position":[[114,7]]},"474":{"position":[[196,9],[793,9]]},"476":{"position":[[96,8]]},"478":{"position":[[63,8]]},"492":{"position":[[222,8],[626,7]]},"506":{"position":[[12,7],[91,9],[376,7],[617,7],[664,7],[764,9]]},"520":{"position":[[85,7]]},"522":{"position":[[64,7]]},"528":{"position":[[64,7]]},"536":{"position":[[362,8]]},"546":{"position":[[195,9]]},"646":{"position":[[296,7]]},"749":{"position":[[160,7]]},"764":{"position":[[178,7]]}}}],["default:\"etcd",{"_index":1221,"t":{"135":{"position":[[761,14]]}}}],["default:restrict",{"_index":2362,"t":{"468":{"position":[[4708,18]]}}}],["default_backend",{"_index":1434,"t":{"203":{"position":[[560,15]]}}}],["defaults=tru",{"_index":2482,"t":{"476":{"position":[[4050,13]]},"739":{"position":[[340,13]]}}}],["defin",{"_index":406,"t":{"23":{"position":[[516,7]]},"67":{"position":[[217,7],[344,7]]},"336":{"position":[[247,7]]},"340":{"position":[[28,7]]},"342":{"position":[[20,7],[106,6],[357,7],[476,7]]},"424":{"position":[[417,6],[673,7],[727,7],[1059,7],[1205,7],[1327,7],[1424,7]]},"482":{"position":[[247,6]]},"536":{"position":[[221,7],[272,7]]}}}],["definit",{"_index":430,"t":{"25":{"position":[[800,10]]},"245":{"position":[[705,10]]},"247":{"position":[[890,12]]},"536":{"position":[[168,10]]},"766":{"position":[[37,10]]},"815":{"position":[[103,12]]}}}],["degrad",{"_index":2526,"t":{"500":{"position":[[176,8]]}}}],["delay",{"_index":2286,"t":{"456":{"position":[[570,7]]}}}],["deleg",{"_index":529,"t":{"33":{"position":[[17,11],[185,10],[917,11]]}}}],["delegate=y",{"_index":556,"t":{"33":{"position":[[999,12]]}}}],["delet",{"_index":937,"t":{"75":{"position":[[1434,7]]},"118":{"position":[[1615,6],[4049,6],[4056,6],[4545,6],[4590,6]]},"122":{"position":[[213,8]]},"162":{"position":[[5864,6]]},"179":{"position":[[289,6],[296,6],[1337,7],[1539,7],[1547,6]]},"271":{"position":[[273,6]]},"297":{"position":[[17,6]]},"299":{"position":[[17,6],[65,6],[129,6]]},"307":{"position":[[1308,6],[1335,6],[1361,6]]},"322":{"position":[[210,8],[256,6]]},"330":{"position":[[256,7]]},"384":{"position":[[25,7],[450,6]]},"398":{"position":[[3158,6],[3250,6],[3407,6],[3441,6],[3788,6]]},"494":{"position":[[387,8]]},"512":{"position":[[175,8]]},"542":{"position":[[401,8]]},"646":{"position":[[223,6]]},"756":{"position":[[322,6]]}}}],["delmit",{"_index":1886,"t":{"326":{"position":[[139,8]]}}}],["demand",{"_index":791,"t":{"59":{"position":[[452,7]]},"77":{"position":[[1233,6]]},"118":{"position":[[2748,6],[3404,6],[3585,6]]}}}],["denial",{"_index":2517,"t":{"492":{"position":[[527,6]]}}}],["denyserviceexternalip",{"_index":2733,"t":{"606":{"position":[[156,22]]}}}],["depend",{"_index":77,"t":{"4":{"position":[[763,12],[871,13]]},"25":{"position":[[717,9]]},"33":{"position":[[525,9]]},"46":{"position":[[425,9]]},"48":{"position":[[306,9]]},"112":{"position":[[2564,9]]},"114":{"position":[[2349,9]]},"168":{"position":[[1350,9]]},"189":{"position":[[84,9]]},"191":{"position":[[38,7]]},"235":{"position":[[35,9]]},"358":{"position":[[759,7]]},"362":{"position":[[534,9]]},"368":{"position":[[24,7]]},"516":{"position":[[181,10]]},"555":{"position":[[1465,7]]}}}],["deploy",{"_index":431,"t":{"25":{"position":[[832,6]]},"160":{"position":[[87,6]]},"162":{"position":[[5833,6],[5875,8]]},"185":{"position":[[542,6]]},"199":{"position":[[351,9]]},"215":{"position":[[728,10]]},"221":{"position":[[2444,10]]},"229":{"position":[[51,6]]},"243":{"position":[[32,9]]},"245":{"position":[[740,9]]},"247":{"position":[[149,6],[350,8],[522,7]]},"249":{"position":[[102,8],[169,11]]},"253":{"position":[[636,9]]},"255":{"position":[[186,6],[254,6]]},"261":{"position":[[150,6],[219,11]]},"266":{"position":[[76,6]]},"273":{"position":[[522,7]]},"287":{"position":[[41,6]]},"291":{"position":[[556,6]]},"311":{"position":[[1336,9]]},"315":{"position":[[27,8],[551,11]]},"317":{"position":[[284,11]]},"319":{"position":[[213,9],[728,6]]},"322":{"position":[[95,8],[626,6]]},"324":{"position":[[56,8]]},"326":{"position":[[62,10],[1598,6]]},"328":{"position":[[30,10]]},"332":{"position":[[555,9],[988,8]]},"334":{"position":[[52,9]]},"358":{"position":[[54,12],[571,9]]},"366":{"position":[[103,10]]},"372":{"position":[[209,10]]},"402":{"position":[[11,8]]},"404":{"position":[[65,6],[150,10],[218,7],[434,8]]},"408":{"position":[[35,8]]},"416":{"position":[[559,6],[718,6]]},"420":{"position":[[460,9],[635,6]]},"436":{"position":[[274,8]]},"438":{"position":[[139,10]]},"470":{"position":[[240,8]]},"496":{"position":[[151,11]]},"514":{"position":[[5,9]]},"536":{"position":[[1244,10]]},"538":{"position":[[52,10],[86,10]]},"540":{"position":[[1303,9]]},"705":{"position":[[344,10]]},"813":{"position":[[93,10]]}}}],["deprec",{"_index":1170,"t":{"118":{"position":[[4303,10]]},"162":{"position":[[2026,13],[2083,12]]},"303":{"position":[[1768,12],[1954,12]]},"533":{"position":[[1099,10]]}}}],["depth",{"_index":1691,"t":{"275":{"position":[[220,5]]}}}],["der",{"_index":1287,"t":{"168":{"position":[[486,3]]}}}],["deriv",{"_index":1888,"t":{"326":{"position":[[395,7]]}}}],["describ",{"_index":119,"t":{"8":{"position":[[43,10]]},"67":{"position":[[10,9],[141,9]]},"168":{"position":[[1024,9]]},"179":{"position":[[1441,9]]},"187":{"position":[[538,8]]},"199":{"position":[[13,9]]},"207":{"position":[[13,9]]},"223":{"position":[[281,9]]},"243":{"position":[[369,10]]},"268":{"position":[[46,9]]},"293":{"position":[[138,8]]},"301":{"position":[[10,9]]},"322":{"position":[[480,8]]},"440":{"position":[[643,9]]},"458":{"position":[[13,9]]},"468":{"position":[[1275,9],[2391,9]]},"510":{"position":[[501,9]]},"514":{"position":[[548,9]]},"531":{"position":[[16,9],[211,9]]}}}],["descript",{"_index":567,"t":{"35":{"position":[[318,11]]},"77":{"position":[[95,11]]},"81":{"position":[[13,11]]},"83":{"position":[[26,11]]},"85":{"position":[[13,11]]},"87":{"position":[[26,11]]},"89":{"position":[[13,11]]},"91":{"position":[[26,11]]},"93":{"position":[[5,11]]},"95":{"position":[[5,11]]},"97":{"position":[[26,11]]},"118":{"position":[[1986,11],[2971,11],[4037,11]]},"135":{"position":[[26,11]]},"137":{"position":[[26,11]]},"139":{"position":[[26,11]]},"142":{"position":[[13,11]]},"144":{"position":[[13,11]]},"146":{"position":[[13,11]]},"148":{"position":[[13,11]]},"150":{"position":[[13,11]]},"152":{"position":[[5,11]]},"154":{"position":[[5,11]]},"156":{"position":[[5,11]]},"158":{"position":[[5,11]]},"160":{"position":[[26,11]]},"179":{"position":[[856,11],[1044,11],[1079,11],[1633,11],[2117,11],[2360,12],[2406,11]]},"187":{"position":[[401,11]]},"247":{"position":[[917,11]]},"303":{"position":[[914,11]]},"342":{"position":[[166,11],[625,11]]},"362":{"position":[[33,11]]},"432":{"position":[[396,11]]},"546":{"position":[[176,11]]},"555":{"position":[[600,12]]}}}],["design",{"_index":729,"t":{"52":{"position":[[73,8]]},"207":{"position":[[544,10]]},"221":{"position":[[855,10]]},"225":{"position":[[36,8]]},"390":{"position":[[46,8]]},"404":{"position":[[139,10]]},"536":{"position":[[1546,6]]},"555":{"position":[[1334,8]]}}}],["desir",{"_index":1565,"t":{"235":{"position":[[966,7]]},"416":{"position":[[102,7]]},"544":{"position":[[98,7]]},"550":{"position":[[41,7],[147,7]]},"620":{"position":[[74,7]]},"634":{"position":[[223,7]]}}}],["destin",{"_index":1562,"t":{"235":{"position":[[823,12]]},"303":{"position":[[1170,11]]},"362":{"position":[[21,11]]}}}],["destroy",{"_index":1508,"t":{"217":{"position":[[244,9]]}}}],["detach",{"_index":502,"t":{"31":{"position":[[127,8]]}}}],["detail",{"_index":528,"t":{"31":{"position":[[1001,8]]},"39":{"position":[[1103,7]]},"59":{"position":[[1057,7]]},"65":{"position":[[123,8]]},"99":{"position":[[566,7]]},"128":{"position":[[730,7]]},"181":{"position":[[418,8]]},"187":{"position":[[644,8],[1504,8]]},"189":{"position":[[136,7]]},"195":{"position":[[275,7]]},"199":{"position":[[410,8]]},"207":{"position":[[678,7]]},"211":{"position":[[126,8]]},"213":{"position":[[883,8],[1178,8]]},"227":{"position":[[185,8]]},"235":{"position":[[469,8]]},"237":{"position":[[81,8]]},"251":{"position":[[496,8]]},"253":{"position":[[348,7],[460,7],[561,7]]},"277":{"position":[[1824,7]]},"279":{"position":[[807,7],[884,7]]},"303":{"position":[[618,8]]},"400":{"position":[[166,7]]},"404":{"position":[[871,7]]},"426":{"position":[[115,6]]},"430":{"position":[[22,8]]},"440":{"position":[[390,8]]},"460":{"position":[[985,7]]},"472":{"position":[[617,8]]},"496":{"position":[[314,8]]},"498":{"position":[[357,8]]},"514":{"position":[[445,7]]},"536":{"position":[[1531,7]]},"546":{"position":[[786,7]]},"555":{"position":[[591,8]]},"689":{"position":[[2276,7],[2516,7],[2756,7]]},"695":{"position":[[2321,7]]}}}],["detect",{"_index":408,"t":{"25":{"position":[[23,6]]},"41":{"position":[[34,6]]},"266":{"position":[[682,6]]},"502":{"position":[[81,9],[119,6]]},"540":{"position":[[2444,7]]}}}],["determin",{"_index":656,"t":{"44":{"position":[[242,9]]},"273":{"position":[[648,9]]},"358":{"position":[[222,9]]},"434":{"position":[[46,9]]},"436":{"position":[[104,9],[326,9]]},"444":{"position":[[46,9]]},"540":{"position":[[2547,9]]},"555":{"position":[[1533,10]]}}}],["determinist",{"_index":1491,"t":{"213":{"position":[[330,13]]}}}],["dev",{"_index":1668,"t":{"266":{"position":[[894,3],[946,3]]}}}],["dev/nul",{"_index":1756,"t":{"289":{"position":[[148,9]]},"297":{"position":[[196,9]]}}}],["develop",{"_index":14,"t":{"2":{"position":[[118,11]]},"52":{"position":[[226,11]]},"59":{"position":[[884,9]]},"245":{"position":[[151,10]]}}}],["devic",{"_index":460,"t":{"25":{"position":[[1496,6]]},"358":{"position":[[903,7]]}}}],["devis",{"_index":1969,"t":{"352":{"position":[[229,6]]}}}],["diagram",{"_index":890,"t":{"69":{"position":[[14,7]]},"73":{"position":[[154,7]]}}}],["differ",{"_index":120,"t":{"8":{"position":[[58,9]]},"67":{"position":[[90,7]]},"87":{"position":[[350,9]]},"101":{"position":[[2067,9]]},"128":{"position":[[1313,9]]},"162":{"position":[[8445,9]]},"213":{"position":[[843,7]]},"217":{"position":[[277,9]]},"235":{"position":[[799,9]]},"255":{"position":[[59,9]]},"315":{"position":[[135,9]]},"319":{"position":[[1117,9]]},"326":{"position":[[1569,9]]},"336":{"position":[[830,9]]},"340":{"position":[[960,9],[1542,9]]},"342":{"position":[[866,9]]},"372":{"position":[[13,9]]},"410":{"position":[[756,9]]},"418":{"position":[[133,9]]},"456":{"position":[[274,9]]},"464":{"position":[[133,9]]},"470":{"position":[[1107,9]]},"546":{"position":[[102,9]]},"555":{"position":[[1031,6]]},"634":{"position":[[202,9]]},"800":{"position":[[135,9]]}}}],["dir",{"_index":767,"t":{"56":{"position":[[187,3]]},"85":{"position":[[32,3]]},"101":{"position":[[919,3],[1303,3]]},"118":{"position":[[454,3],[538,3],[2273,3]]},"135":{"position":[[1012,3]]},"146":{"position":[[32,3]]},"162":{"position":[[1245,3],[4883,3],[6628,3]]},"179":{"position":[[875,3],[1652,3],[2136,3],[2425,3]]},"579":{"position":[[109,4]]},"581":{"position":[[119,4]]}}}],["dir=/var/lib/rancher/k3s/agent/etc/cni/net.d",{"_index":2468,"t":{"476":{"position":[[3460,44]]}}}],["dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin",{"_index":2467,"t":{"476":{"position":[[3350,98]]}}}],["dir=/var/lib/rancher/k3s/server/tls/kub",{"_index":2778,"t":{"652":{"position":[[3077,40]]},"667":{"position":[[748,40]]},"669":{"position":[[816,40]]},"671":{"position":[[901,40]]},"673":{"position":[[798,40]]},"680":{"position":[[669,40]]},"682":{"position":[[743,40]]}}}],["dir=/var/lib/rancher/k3s/server/tls/temporari",{"_index":2406,"t":{"476":{"position":[[351,45]]},"610":{"position":[[1020,45]]},"612":{"position":[[968,45]]},"614":{"position":[[837,45]]},"616":{"position":[[786,45]]},"618":{"position":[[799,45]]},"620":{"position":[[912,45]]},"622":{"position":[[873,45]]},"626":{"position":[[946,45]]},"628":{"position":[[927,45]]},"630":{"position":[[823,45]]},"632":{"position":[[939,45]]},"634":{"position":[[804,45]]},"636":{"position":[[719,45]]},"646":{"position":[[894,45]]},"652":{"position":[[936,45]]},"654":{"position":[[852,45]]},"656":{"position":[[858,45]]},"729":{"position":[[1203,45]]},"731":{"position":[[1217,45]]},"733":{"position":[[1332,45]]}}}],["direct",{"_index":1261,"t":{"150":{"position":[[1007,6]]},"253":{"position":[[407,6]]},"303":{"position":[[1478,6]]},"309":{"position":[[896,6]]},"340":{"position":[[13,9]]},"342":{"position":[[156,9],[615,9]]}}}],["directli",{"_index":910,"t":{"73":{"position":[[228,8]]},"255":{"position":[[135,8]]},"305":{"position":[[166,8]]},"315":{"position":[[101,8]]}}}],["directori",{"_index":394,"t":{"23":{"position":[[208,10]]},"75":{"position":[[1328,9]]},"101":{"position":[[1342,9]]},"110":{"position":[[1468,9],[1987,9]]},"112":{"position":[[126,10],[385,10],[1015,10],[1227,9],[1534,10]]},"114":{"position":[[149,10],[408,10],[1593,9]]},"116":{"position":[[553,10],[673,9]]},"118":{"position":[[390,9],[632,9],[761,10],[1631,10],[2283,9]]},"135":{"position":[[1026,9]]},"162":{"position":[[4898,9],[6667,9]]},"263":{"position":[[149,10]]},"271":{"position":[[249,9]]},"322":{"position":[[237,9]]},"324":{"position":[[93,10]]},"326":{"position":[[48,9],[382,9],[470,9]]},"328":{"position":[[80,10]]},"330":{"position":[[124,10],[283,10]]},"332":{"position":[[484,9]]},"432":{"position":[[987,9],[1251,9]]},"468":{"position":[[362,10],[2495,10]]},"470":{"position":[[196,10]]},"472":{"position":[[130,9],[245,10],[606,10]]},"542":{"position":[[263,12]]},"579":{"position":[[69,10],[199,9]]},"581":{"position":[[79,10],[209,9]]},"689":{"position":[[2332,9],[2572,9],[2812,9]]},"695":{"position":[[2377,9]]}}}],["dir}/db/snapshot",{"_index":1142,"t":{"118":{"position":[[2341,18]]},"135":{"position":[[1074,18]]},"162":{"position":[[4947,18]]}}}],["dir}/server/db/etcd",{"_index":1126,"t":{"118":{"position":[[666,19]]}}}],["dir}/server/db/snapshot",{"_index":1125,"t":{"118":{"position":[[419,25]]}}}],["disabl",{"_index":468,"t":{"27":{"position":[[63,7]]},"41":{"position":[[373,9]]},"46":{"position":[[51,7],[629,7],[683,7]]},"48":{"position":[[64,7]]},"89":{"position":[[64,7]]},"101":{"position":[[2151,7]]},"118":{"position":[[2005,7],[2023,7],[3140,8]]},"126":{"position":[[115,9],[128,7],[181,7],[209,7],[745,9],[964,7],[1008,7],[1042,7]]},"128":{"position":[[829,8]]},"132":{"position":[[311,7],[338,7],[364,7],[389,7]]},"135":{"position":[[598,7],[620,7],[1308,8],[1656,8]]},"150":{"position":[[886,9]]},"154":{"position":[[19,7],[50,7],[66,7],[84,7],[123,7],[148,7],[195,7],[214,7],[243,7],[266,7],[314,7],[338,7]]},"158":{"position":[[220,7]]},"160":{"position":[[110,7]]},"162":{"position":[[2343,10],[4458,7],[4481,7],[5238,8],[5610,8],[5799,7],[5971,7],[6002,7],[6041,7],[6079,7],[6126,7],[6158,7],[6187,7],[6223,7],[6271,7],[6308,7],[7083,7]]},"168":{"position":[[896,9]]},"215":{"position":[[764,7],[791,7],[813,7],[866,7]]},"221":{"position":[[2480,7],[2507,7],[2529,7],[2582,7]]},"253":{"position":[[576,7]]},"279":{"position":[[1187,7]]},"303":{"position":[[2018,7]]},"307":{"position":[[160,7]]},"309":{"position":[[415,9],[715,9]]},"324":{"position":[[246,8]]},"326":{"position":[[721,9]]},"328":{"position":[[22,7]]},"330":{"position":[[142,8],[162,7],[176,8],[310,7],[498,8]]},"360":{"position":[[972,8],[1284,8]]},"374":{"position":[[167,7]]},"376":{"position":[[92,9],[164,7],[184,7],[213,7]]},"378":{"position":[[248,9],[321,7]]},"380":{"position":[[74,7],[199,7],[219,7],[248,7]]},"382":{"position":[[67,7],[265,7],[289,7],[322,7]]},"402":{"position":[[56,7]]},"406":{"position":[[199,7],[240,7],[359,7],[464,9]]},"418":{"position":[[3,7]]},"420":{"position":[[529,7],[562,7],[599,7]]},"533":{"position":[[27,9]]},"628":{"position":[[253,7],[468,7],[512,7]]},"630":{"position":[[155,7],[364,7],[408,7]]},"766":{"position":[[130,7]]}}}],["disable=coredn",{"_index":2107,"t":{"402":{"position":[[116,15]]}}}],["disable=servicelb",{"_index":2146,"t":{"418":{"position":[[70,17]]}}}],["disable=traefik",{"_index":1550,"t":{"229":{"position":[[31,15]]},"330":{"position":[[459,16]]},"404":{"position":[[1139,15]]}}}],["disabling/en",{"_index":1177,"t":{"122":{"position":[[135,18]]},"512":{"position":[[97,18]]}}}],["disallow",{"_index":614,"t":{"39":{"position":[[474,10]]}}}],["disclosur",{"_index":2520,"t":{"496":{"position":[[301,12]]}}}],["discoveri",{"_index":462,"t":{"25":{"position":[[1526,10]]},"27":{"position":[[541,9]]}}}],["discuss",{"_index":1403,"t":{"193":{"position":[[265,9]]},"243":{"position":[[231,11]]}}}],["disk",{"_index":1033,"t":{"108":{"position":[[634,4]]},"168":{"position":[[422,5]]},"185":{"position":[[1029,5],[1342,4]]},"221":{"position":[[65,5]]},"223":{"position":[[331,4]]},"245":{"position":[[853,5]]},"322":{"position":[[204,5]]},"324":{"position":[[411,4]]},"358":{"position":[[736,6],[869,4]]},"368":{"position":[[112,5]]},"440":{"position":[[86,4]]},"442":{"position":[[23,4]]},"446":{"position":[[362,4]]},"454":{"position":[[1097,5]]}}}],["display",{"_index":883,"t":{"65":{"position":[[1243,7]]},"128":{"position":[[56,8],[789,9]]}}}],["disrupt",{"_index":1085,"t":{"112":{"position":[[509,13],[611,11],[1389,10]]},"114":{"position":[[510,11]]}}}],["distribut",{"_index":25,"t":{"4":{"position":[[36,12],[727,12]]},"44":{"position":[[22,13]]},"185":{"position":[[101,14]]},"227":{"position":[[35,13]]},"303":{"position":[[560,14]]},"309":{"position":[[520,14]]},"315":{"position":[[673,11]]},"524":{"position":[[79,11]]}}}],["dn",{"_index":209,"t":{"17":{"position":[[809,3]]},"132":{"position":[[288,3]]},"150":{"position":[[303,3]]},"162":{"position":[[1707,3]]},"215":{"position":[[652,4]]},"217":{"position":[[541,3]]},"221":{"position":[[2368,4]]},"268":{"position":[[1381,3]]},"402":{"position":[[205,3]]},"468":{"position":[[6448,4]]},"470":{"position":[[541,3],[654,4],[744,3],[892,3]]}}}],["dns=10.43.0.10",{"_index":2465,"t":{"476":{"position":[[3294,14]]},"735":{"position":[[996,14],[2219,14]]},"747":{"position":[[1187,14],[2410,14]]}}}],["do",{"_index":2080,"t":{"398":{"position":[[1518,5],[2031,5]]}}}],["doc",{"_index":1549,"t":{"227":{"position":[[166,4]]},"245":{"position":[[353,4]]},"307":{"position":[[302,4]]},"360":{"position":[[1241,5]]},"426":{"position":[[281,4]]}}}],["docker",{"_index":246,"t":{"19":{"position":[[340,6],[373,6],[411,6],[452,6],[503,7],[598,6],[654,6],[1152,6],[1190,6]]},"52":{"position":[[37,7],[49,6],[123,7],[203,7],[347,7],[436,6],[461,6],[678,6],[824,6],[855,6]]},"89":{"position":[[151,6],[176,6],[286,6]]},"95":{"position":[[43,6]]},"101":{"position":[[2238,6],[2259,6],[2355,6],[3414,6]]},"158":{"position":[[99,6]]},"162":{"position":[[6956,6],[7170,6],[7191,6],[7287,6]]},"203":{"position":[[2542,7],[2550,6]]},"205":{"position":[[579,7],[587,6]]},"237":{"position":[[43,7]]},"257":{"position":[[97,6],[180,6]]},"273":{"position":[[337,6]]},"348":{"position":[[166,6],[275,6],[409,6]]},"392":{"position":[[28,7],[36,6]]},"817":{"position":[[193,6]]}}}],["docker.io",{"_index":1649,"t":{"255":{"position":[[223,10]]},"340":{"position":[[534,10],[554,10],[1199,10]]},"344":{"position":[[163,10],[526,10]]},"346":{"position":[[167,10],[362,10]]},"348":{"position":[[147,9]]}}}],["docker.io/rancher/coredn",{"_index":1939,"t":{"340":{"position":[[621,25],[1067,25],[1409,25]]},"348":{"position":[[178,25]]}}}],["docker.io/rancher/pause:3.1",{"_index":986,"t":{"89":{"position":[[215,29]]}}}],["docker/20.10.sh",{"_index":252,"t":{"19":{"position":[[553,15]]}}}],["docker/default",{"_index":2890,"t":{"815":{"position":[[60,14]]}}}],["dockerd",{"_index":238,"t":{"19":{"position":[[205,8],[246,8]]},"95":{"position":[[58,7]]},"101":{"position":[[3460,7]]},"158":{"position":[[114,7]]},"162":{"position":[[7002,7]]}}}],["dockershim",{"_index":236,"t":{"19":{"position":[[135,11]]}}}],["document",{"_index":147,"t":{"11":{"position":[[324,14]]},"13":{"position":[[310,14]]},"15":{"position":[[345,14]]},"21":{"position":[[193,14]]},"39":{"position":[[1085,13]]},"52":{"position":[[274,13]]},"67":{"position":[[538,13]]},"77":{"position":[[331,13],[556,13],[1168,13],[1324,13],[1483,13],[1592,13]]},"79":{"position":[[179,10],[298,13]]},"99":{"position":[[548,13]]},"108":{"position":[[184,14]]},"130":{"position":[[160,13],[217,10],[336,13]]},"174":{"position":[[1204,14],[1295,14]]},"185":{"position":[[1089,13],[1419,13]]},"195":{"position":[[382,14],[412,13],[446,13],[474,13]]},"197":{"position":[[34,13]]},"203":{"position":[[179,13],[332,13]]},"211":{"position":[[103,13]]},"213":{"position":[[1217,14]]},"239":{"position":[[76,14]]},"245":{"position":[[129,10],[546,14]]},"247":{"position":[[2575,13]]},"251":{"position":[[258,13],[478,13]]},"257":{"position":[[5,8],[219,13]]},"275":{"position":[[109,13],[194,13]]},"279":{"position":[[865,14],[940,14],[1468,13]]},"295":{"position":[[350,14]]},"311":{"position":[[1527,13]]},"326":{"position":[[164,8],[296,14]]},"360":{"position":[[1212,10]]},"374":{"position":[[278,8]]},"384":{"position":[[561,13]]},"398":{"position":[[128,14]]},"404":{"position":[[1552,13]]},"458":{"position":[[164,9]]},"460":{"position":[[5,8]]},"472":{"position":[[715,14]]},"484":{"position":[[153,11]]},"512":{"position":[[279,14]]},"514":{"position":[[512,13]]},"518":{"position":[[255,13]]},"524":{"position":[[205,14]]},"533":{"position":[[261,13]]},"555":{"position":[[15,8]]},"604":{"position":[[37,13]]},"610":{"position":[[48,13]]},"612":{"position":[[48,13]]},"620":{"position":[[48,13]]},"628":{"position":[[37,13]]},"632":{"position":[[48,13]]},"650":{"position":[[48,13]]},"652":{"position":[[48,13]]},"654":{"position":[[48,13]]},"656":{"position":[[48,13]]},"658":{"position":[[48,13]]},"660":{"position":[[48,13]]},"685":{"position":[[50,13]]},"691":{"position":[[50,13]]},"697":{"position":[[56,13]]},"802":{"position":[[37,13]]},"810":{"position":[[48,13]]},"813":{"position":[[37,13]]},"817":{"position":[[48,13]]}}}],["doesn't",{"_index":1357,"t":{"185":{"position":[[295,7]]},"408":{"position":[[265,7]]},"460":{"position":[[1150,7]]},"466":{"position":[[360,7]]},"472":{"position":[[96,7]]}}}],["doesnotexist",{"_index":2614,"t":{"540":{"position":[[987,12]]}}}],["domain",{"_index":210,"t":{"17":{"position":[[813,6]]},"132":{"position":[[302,6]]},"150":{"position":[[410,6],[447,6]]},"162":{"position":[[1836,6],[1870,6]]},"215":{"position":[[667,7]]},"221":{"position":[[2383,7]]},"422":{"position":[[168,6]]}}}],["domain=cluster.loc",{"_index":2466,"t":{"476":{"position":[[3319,20]]},"735":{"position":[[1021,20],[2244,20]]},"747":{"position":[[1212,20],[2435,20]]}}}],["don't",{"_index":550,"t":{"33":{"position":[[819,5]]},"179":{"position":[[1890,5]]},"279":{"position":[[1262,5]]},"370":{"position":[[80,5]]},"402":{"position":[[147,5]]}}}],["done",{"_index":931,"t":{"75":{"position":[[1260,4]]},"181":{"position":[[274,4]]},"223":{"position":[[224,4]]},"271":{"position":[[513,4]]},"319":{"position":[[186,4]]},"460":{"position":[[589,4]]}}}],["down",{"_index":182,"t":{"17":{"position":[[225,4]]}}}],["downint",{"_index":1437,"t":{"203":{"position":[[678,9]]}}}],["download",{"_index":533,"t":{"33":{"position":[[196,8]]},"168":{"position":[[906,8]]},"266":{"position":[[156,8],[349,8]]},"271":{"position":[[78,8]]},"273":{"position":[[601,8]]},"279":{"position":[[163,11]]},"432":{"position":[[458,8],[878,8],[916,8],[2143,8],[2264,8]]},"550":{"position":[[28,8],[98,10]]},"555":{"position":[[738,8]]}}}],["downtim",{"_index":1796,"t":{"305":{"position":[[496,8]]}}}],["downwardapi",{"_index":2331,"t":{"468":{"position":[[1640,13],[2781,13]]}}}],["dqlite",{"_index":2591,"t":{"533":{"position":[[1043,7],[1077,6],[1170,6]]}}}],["driven",{"_index":2271,"t":{"454":{"position":[[45,6],[777,6]]}}}],["driver",{"_index":416,"t":{"25":{"position":[[352,7]]},"35":{"position":[[714,7]]},"434":{"position":[[895,7]]},"516":{"position":[[772,8]]}}}],["driver/mysql#dsn",{"_index":1395,"t":{"189":{"position":[[1099,16]]}}}],["driver=cgroupf",{"_index":2461,"t":{"476":{"position":[[3176,15]]}}}],["driver=systemd",{"_index":2847,"t":{"735":{"position":[[887,14],[2110,14]]},"747":{"position":[[1078,14],[2301,14]]}}}],["drop",{"_index":845,"t":{"65":{"position":[[8,7]]},"313":{"position":[[208,4]]},"791":{"position":[[270,4]]}}}],["dual",{"_index":580,"t":{"35":{"position":[[633,4]]},"303":{"position":[[1023,4]]},"311":{"position":[[219,4],[508,4],[677,4],[719,4],[1516,4]]},"319":{"position":[[467,4]]}}}],["dualstack",{"_index":2175,"t":{"424":{"position":[[1181,9],[1300,9]]}}}],["due",{"_index":522,"t":{"31":{"position":[[682,3]]},"189":{"position":[[1143,3]]},"398":{"position":[[3070,3]]}}}],["dummi",{"_index":1662,"t":{"266":{"position":[[606,5],[780,5],[835,5]]}}}],["dummy0",{"_index":1665,"t":{"266":{"position":[[823,6],[853,6],[898,6],[950,6]]}}}],["dump",{"_index":1404,"t":{"195":{"position":[[198,5]]}}}],["duplic",{"_index":649,"t":{"44":{"position":[[115,9]]}}}],["durat",{"_index":1330,"t":{"179":{"position":[[1294,8]]},"492":{"position":[[166,8]]}}}],["dure",{"_index":134,"t":{"11":{"position":[[66,6]]},"108":{"position":[[253,6],[639,6]]},"110":{"position":[[59,6]]},"112":{"position":[[2605,6]]},"114":{"position":[[2390,6]]},"185":{"position":[[1347,6]]},"384":{"position":[[318,6]]},"542":{"position":[[27,6]]}}}],["dynam",{"_index":1319,"t":{"178":{"position":[[220,11]]},"317":{"position":[[1000,7],[1034,7]]},"504":{"position":[[406,7]]}}}],["e",{"_index":827,"t":{"61":{"position":[[580,1]]},"289":{"position":[[165,1]]},"297":{"position":[[213,1]]},"579":{"position":[[939,1],[1266,1]]},"585":{"position":[[203,1]]},"587":{"position":[[180,1]]},"589":{"position":[[186,1]]},"591":{"position":[[188,1]]},"650":{"position":[[1069,1],[1396,1]]},"685":{"position":[[963,1],[1290,1]]},"687":{"position":[[852,1],[1179,1]]},"689":{"position":[[877,1],[1204,1]]},"691":{"position":[[1029,1],[1356,1]]},"693":{"position":[[855,1],[1182,1]]},"695":{"position":[[887,1],[1214,1]]},"697":{"position":[[986,1],[1313,1]]},"714":{"position":[[222,1]]}}}],["e.g",{"_index":732,"t":{"52":{"position":[[211,4]]},"59":{"position":[[413,5],[789,5]]},"179":{"position":[[1345,5]]},"247":{"position":[[1712,4]]},"315":{"position":[[120,5]]},"317":{"position":[[1065,5]]},"326":{"position":[[1179,5]]}}}],["e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1",{"_index":2720,"t":{"604":{"position":[[1070,64]]},"606":{"position":[[1051,64]]},"624":{"position":[[1064,64]]},"677":{"position":[[1036,64]]}}}],["e9ef",{"_index":342,"t":{"19":{"position":[[2433,4]]}}}],["each",{"_index":893,"t":{"69":{"position":[[143,4]]},"73":{"position":[[47,4]]},"128":{"position":[[741,4]]},"187":{"position":[[624,4]]},"189":{"position":[[178,4]]},"201":{"position":[[150,4]]},"261":{"position":[[181,4]]},"266":{"position":[[299,4],[433,4]]},"268":{"position":[[292,4]]},"271":{"position":[[262,4],[355,4]]},"315":{"position":[[625,4]]},"317":{"position":[[75,4]]},"319":{"position":[[815,4],[1147,4]]},"326":{"position":[[86,4],[356,4]]},"336":{"position":[[357,4],[589,4]]},"340":{"position":[[169,4],[770,4]]},"342":{"position":[[69,4],[86,4]]},"344":{"position":[[85,4]]},"346":{"position":[[85,4],[608,4]]},"350":{"position":[[161,4]]},"352":{"position":[[215,4],[297,4]]},"360":{"position":[[629,4],[753,4]]},"406":{"position":[[217,4]]},"410":{"position":[[103,4],[242,4],[661,4]]},"424":{"position":[[479,4]]},"428":{"position":[[1547,4],[1737,4]]},"472":{"position":[[199,4]]},"478":{"position":[[72,4]]},"506":{"position":[[644,4]]},"508":{"position":[[203,4]]},"522":{"position":[[477,5]]},"528":{"position":[[410,5]]},"546":{"position":[[512,4]]},"555":{"position":[[284,4],[567,4],[862,4],[1167,4]]},"708":{"position":[[109,4]]},"710":{"position":[[109,4]]},"712":{"position":[[99,4]]},"714":{"position":[[99,4]]},"716":{"position":[[99,4]]},"718":{"position":[[99,4]]},"729":{"position":[[242,4]]},"731":{"position":[[228,4]]},"733":{"position":[[271,4]]},"735":{"position":[[218,4]]},"737":{"position":[[255,4]]},"739":{"position":[[240,4]]},"741":{"position":[[241,4]]},"743":{"position":[[123,4]]},"745":{"position":[[239,4]]},"747":{"position":[[361,4]]},"749":{"position":[[295,4]]},"751":{"position":[[123,4]]},"753":{"position":[[544,4]]},"764":{"position":[[173,4]]},"775":{"position":[[42,4]]},"777":{"position":[[42,4]]},"779":{"position":[[42,4]]},"781":{"position":[[42,4]]},"783":{"position":[[42,4]]},"785":{"position":[[46,4]]},"787":{"position":[[42,4]]},"793":{"position":[[42,4]]},"795":{"position":[[42,4]]},"797":{"position":[[42,4]]}}}],["earlier",{"_index":2116,"t":{"404":{"position":[[1183,7]]},"533":{"position":[[59,7]]}}}],["eas",{"_index":2110,"t":{"404":{"position":[[91,5]]}}}],["easi",{"_index":2,"t":{"2":{"position":[[24,4]]},"52":{"position":[[149,4]]}}}],["easier",{"_index":1136,"t":{"118":{"position":[[1963,6]]}}}],["easili",{"_index":730,"t":{"52":{"position":[[85,6]]}}}],["east",{"_index":1155,"t":{"118":{"position":[[3353,4]]},"135":{"position":[[1591,4]]},"162":{"position":[[5539,4]]}}}],["ec2",{"_index":2125,"t":{"408":{"position":[[444,3]]}}}],["echo",{"_index":2659,"t":{"579":{"position":[[473,4],[663,4],[730,4],[843,4],[972,4],[1096,4],[1172,4],[1299,4],[1421,4],[1502,4],[1688,4],[1711,4],[1762,4],[1801,4],[1841,4],[1863,4],[1912,4],[1952,4],[1990,4]]},"650":{"position":[[603,4],[793,4],[860,4],[973,4],[1102,4],[1226,4],[1302,4],[1429,4],[1551,4],[1632,4],[1818,4],[1841,4],[1892,4],[1931,4],[1971,4],[1993,4],[2042,4],[2082,4],[2120,4]]},"685":{"position":[[497,4],[687,4],[754,4],[867,4],[996,4],[1120,4],[1196,4],[1323,4],[1445,4],[1526,4],[1712,4],[1735,4],[1786,4],[1825,4],[1865,4],[1887,4],[1936,4],[1976,4],[2014,4]]},"687":{"position":[[386,4],[576,4],[643,4],[756,4],[885,4],[1009,4],[1085,4],[1212,4],[1334,4],[1415,4],[1601,4],[1624,4],[1675,4],[1714,4],[1754,4],[1776,4],[1825,4],[1865,4],[1903,4]]},"689":{"position":[[411,4],[601,4],[668,4],[781,4],[910,4],[1034,4],[1110,4],[1237,4],[1359,4],[1440,4],[1626,4],[1649,4],[1700,4],[1739,4],[1779,4],[1801,4],[1850,4],[1890,4],[1928,4]]},"691":{"position":[[563,4],[753,4],[820,4],[933,4],[1062,4],[1186,4],[1262,4],[1389,4],[1511,4],[1592,4],[1778,4],[1801,4],[1852,4],[1891,4],[1931,4],[1953,4],[2002,4],[2042,4],[2080,4]]},"693":{"position":[[389,4],[579,4],[646,4],[759,4],[888,4],[1012,4],[1088,4],[1215,4],[1337,4],[1418,4],[1604,4],[1627,4],[1678,4],[1717,4],[1757,4],[1779,4],[1828,4],[1868,4],[1906,4]]},"695":{"position":[[421,4],[611,4],[678,4],[791,4],[920,4],[1044,4],[1120,4],[1247,4],[1369,4],[1450,4],[1636,4],[1659,4],[1710,4],[1749,4],[1789,4],[1811,4],[1860,4],[1900,4],[1938,4]]},"697":{"position":[[520,4],[710,4],[777,4],[890,4],[1019,4],[1143,4],[1219,4],[1346,4],[1468,4],[1549,4],[1735,4],[1758,4],[1809,4],[1848,4],[1888,4],[1910,4],[1959,4],[1999,4],[2037,4]]},"729":{"position":[[716,4]]},"731":{"position":[[706,4]]},"733":{"position":[[758,4]]}}}],["edg",{"_index":11,"t":{"2":{"position":[[106,4]]},"185":{"position":[[567,4],[684,5]]},"261":{"position":[[214,4]]}}}],["edit",{"_index":203,"t":{"17":{"position":[[702,7]]},"277":{"position":[[508,7],[538,7]]},"404":{"position":[[659,6]]},"602":{"position":[[26,4]]},"604":{"position":[[112,4]]},"606":{"position":[[26,4]]},"608":{"position":[[36,4]]},"610":{"position":[[134,4]]},"612":{"position":[[133,4]]},"614":{"position":[[26,4]]},"616":{"position":[[26,4]]},"618":{"position":[[26,4]]},"620":{"position":[[120,4]]},"622":{"position":[[26,4]]},"624":{"position":[[26,4]]},"626":{"position":[[26,4]]},"628":{"position":[[116,4]]},"630":{"position":[[26,4]]},"632":{"position":[[119,4]]},"634":{"position":[[26,4]]},"636":{"position":[[26,4]]},"638":{"position":[[36,4]]},"640":{"position":[[36,4]]},"642":{"position":[[36,4]]},"644":{"position":[[36,4]]},"646":{"position":[[26,4]]},"648":{"position":[[36,4]]},"650":{"position":[[130,4]]},"652":{"position":[[116,4]]},"654":{"position":[[116,4]]},"656":{"position":[[130,4]]},"658":{"position":[[107,4]]},"662":{"position":[[26,4]]},"665":{"position":[[26,4]]},"667":{"position":[[26,4]]},"669":{"position":[[26,4]]},"671":{"position":[[26,4]]},"673":{"position":[[26,4]]},"675":{"position":[[36,4]]},"677":{"position":[[26,4]]},"680":{"position":[[26,4]]},"682":{"position":[[26,4]]},"685":{"position":[[100,4]]},"687":{"position":[[26,4]]},"689":{"position":[[26,4]]},"691":{"position":[[142,4]]},"693":{"position":[[26,4]]},"695":{"position":[[26,4]]},"697":{"position":[[149,4]]},"729":{"position":[[58,4],[155,4]]},"731":{"position":[[58,4],[141,4]]},"733":{"position":[[58,4],[184,4]]},"735":{"position":[[58,4],[131,4]]},"737":{"position":[[58,4],[168,4]]},"739":{"position":[[68,4],[153,4]]},"741":{"position":[[68,4],[154,4]]},"743":{"position":[[36,4]]},"745":{"position":[[58,4],[152,4]]},"747":{"position":[[58,4],[274,4]]},"749":{"position":[[68,4],[208,4]]},"751":{"position":[[36,4]]},"753":{"position":[[58,4],[457,4]]}}}],["ee",{"_index":2657,"t":{"579":{"position":[[453,2]]},"650":{"position":[[583,2]]},"685":{"position":[[477,2]]},"687":{"position":[[366,2]]},"689":{"position":[[391,2]]},"691":{"position":[[543,2]]},"693":{"position":[[369,2]]},"695":{"position":[[401,2]]},"697":{"position":[[500,2]]}}}],["ef",{"_index":2653,"t":{"579":{"position":[[136,2]]},"581":{"position":[[146,2]]},"604":{"position":[[298,2]]},"606":{"position":[[227,2]]},"624":{"position":[[287,2]]},"677":{"position":[[236,2]]}}}],["effect",{"_index":1566,"t":{"235":{"position":[[974,7]]},"346":{"position":[[573,7]]},"454":{"position":[[213,6]]},"468":{"position":[[1102,6],[2044,10]]},"646":{"position":[[310,7]]}}}],["efficaci",{"_index":2531,"t":{"502":{"position":[[236,9]]}}}],["eg",{"_index":1138,"t":{"118":{"position":[[2129,3]]},"135":{"position":[[864,3]]},"162":{"position":[[4729,3]]}}}],["egress",{"_index":1207,"t":{"132":{"position":[[409,6]]},"150":{"position":[[821,6]]},"162":{"position":[[2269,6]]},"309":{"position":[[570,6],[605,6],[665,6]]},"610":{"position":[[1137,6]]},"612":{"position":[[1085,6]]},"614":{"position":[[954,6]]},"616":{"position":[[903,6]]},"618":{"position":[[916,6]]},"620":{"position":[[1029,6]]},"622":{"position":[[990,6]]},"626":{"position":[[1063,6]]},"628":{"position":[[1044,6]]},"630":{"position":[[940,6]]},"632":{"position":[[1056,6]]},"634":{"position":[[921,6]]},"636":{"position":[[836,6]]},"646":{"position":[[1011,6]]},"652":{"position":[[1053,6]]},"654":{"position":[[969,6]]},"656":{"position":[[975,6]]},"729":{"position":[[1320,6]]},"731":{"position":[[1334,6]]},"733":{"position":[[1449,6]]}}}],["elast",{"_index":1513,"t":{"217":{"position":[[556,7]]}}}],["elevator=deadlin",{"_index":718,"t":{"50":{"position":[[410,17]]}}}],["elig",{"_index":2136,"t":{"414":{"position":[[172,8]]}}}],["embed",{"_index":16,"t":{"2":{"position":[[134,9]]},"4":{"position":[[971,8],[1006,8]]},"17":{"position":[[237,8]]},"21":{"position":[[143,8]]},"27":{"position":[[382,8]]},"69":{"position":[[94,8]]},"71":{"position":[[204,8],[330,8],[373,8]]},"77":{"position":[[612,8],[853,8],[999,8]]},"89":{"position":[[72,8]]},"101":{"position":[[2159,8]]},"110":{"position":[[966,8]]},"118":{"position":[[105,8]]},"124":{"position":[[724,8]]},"132":{"position":[[162,8]]},"137":{"position":[[517,8]]},"162":{"position":[[3231,8],[7091,8]]},"185":{"position":[[502,8],[708,8],[746,8],[807,8],[985,8],[1035,8],[1075,8],[1133,8],[1170,8]]},"197":{"position":[[115,8]]},"199":{"position":[[235,8],[267,8]]},"201":{"position":[[105,8]]},"207":{"position":[[444,8]]},"221":{"position":[[8,8],[124,8],[636,8],[786,8]]},"223":{"position":[[92,8]]},"268":{"position":[[575,8]]},"315":{"position":[[204,8],[504,8],[572,8]]},"324":{"position":[[161,8]]},"358":{"position":[[554,8],[590,8]]},"360":{"position":[[703,8]]},"362":{"position":[[101,8]]},"374":{"position":[[315,8],[345,8]]},"406":{"position":[[16,8]]},"420":{"position":[[111,8],[573,8]]},"434":{"position":[[201,8]]},"446":{"position":[[313,8],[450,8]]},"448":{"position":[[318,8]]},"458":{"position":[[145,8]]},"533":{"position":[[1068,8],[1193,8]]}}}],["emmc",{"_index":2002,"t":{"358":{"position":[[935,5]]}}}],["empti",{"_index":1492,"t":{"213":{"position":[[374,6]]},"332":{"position":[[438,5]]},"789":{"position":[[124,5]]}}}],["emptydir",{"_index":2330,"t":{"468":{"position":[[1602,10],[2743,10]]}}}],["en",{"_index":1894,"t":{"326":{"position":[[739,2]]}}}],["enabl",{"_index":167,"t":{"15":{"position":[[154,6]]},"33":{"position":[[0,6],[698,6]]},"35":{"position":[[528,7],[600,7],[968,8]]},"41":{"position":[[83,6],[409,10]]},"46":{"position":[[105,8],[602,8]]},"48":{"position":[[96,8]]},"50":{"position":[[160,8],[231,7]]},"54":{"position":[[97,7]]},"59":{"position":[[550,6]]},"61":{"position":[[362,8]]},"75":{"position":[[1799,8]]},"87":{"position":[[405,6]]},"101":{"position":[[1652,6]]},"118":{"position":[[204,7],[2993,6]]},"120":{"position":[[13,8]]},"122":{"position":[[89,7]]},"124":{"position":[[191,8],[852,8]]},"126":{"position":[[453,6],[505,6],[532,6],[1326,6],[1369,6],[1402,6]]},"128":{"position":[[236,7],[518,7],[841,7]]},"135":{"position":[[1107,6]]},"148":{"position":[[52,6]]},"150":{"position":[[615,6]]},"158":{"position":[[43,6],[56,6]]},"162":{"position":[[2148,6],[5034,6],[8499,6],[8534,6],[8562,6],[8754,6]]},"166":{"position":[[100,7]]},"221":{"position":[[1053,6]]},"247":{"position":[[811,8],[860,8],[1324,7]]},"249":{"position":[[899,8],[943,8]]},"273":{"position":[[36,6]]},"285":{"position":[[605,7]]},"303":{"position":[[325,6]]},"311":{"position":[[597,7],[670,6],[1579,8]]},"317":{"position":[[264,6]]},"319":{"position":[[766,8]]},"336":{"position":[[730,6]]},"376":{"position":[[430,8]]},"424":{"position":[[125,8],[328,7]]},"432":{"position":[[745,6]]},"438":{"position":[[68,7]]},"460":{"position":[[845,9]]},"466":{"position":[[368,6],[559,8]]},"468":{"position":[[130,7],[944,7],[1162,8],[1208,8]]},"474":{"position":[[855,7]]},"476":{"position":[[477,6]]},"480":{"position":[[488,6]]},"482":{"position":[[587,6]]},"484":{"position":[[376,8],[393,6]]},"494":{"position":[[113,8]]},"510":{"position":[[13,8],[333,7]]},"512":{"position":[[51,7]]},"518":{"position":[[57,7]]},"606":{"position":[[184,7],[283,6],[326,6]]},"610":{"position":[[1227,6],[1270,6]]},"612":{"position":[[1175,6],[1218,6]]},"614":{"position":[[1044,6],[1087,6]]},"616":{"position":[[993,6],[1036,6]]},"618":{"position":[[1006,6],[1049,6]]},"620":{"position":[[241,6],[445,7],[492,6],[1119,6],[1162,6]]},"622":{"position":[[165,6],[352,7],[399,6],[459,6],[1080,6],[1123,6]]},"624":{"position":[[155,6],[221,6],[343,6]]},"626":{"position":[[155,6],[270,6],[418,7],[465,6],[523,6],[1153,6],[1196,6]]},"628":{"position":[[1134,6],[1177,6]]},"630":{"position":[[1030,6],[1073,6]]},"632":{"position":[[248,6],[327,6],[471,7],[518,6],[1146,6],[1189,6]]},"634":{"position":[[1011,6],[1054,6]]},"636":{"position":[[926,6],[969,6]]},"646":{"position":[[1101,6],[1144,6]]},"652":{"position":[[1143,6],[1186,6]]},"654":{"position":[[1059,6],[1102,6]]},"656":{"position":[[1065,6],[1108,6]]},"729":{"position":[[106,7],[1410,6],[1453,6]]},"731":{"position":[[1424,6],[1467,6]]},"733":{"position":[[1539,6],[1582,6]]},"815":{"position":[[49,6]]}}}],["enablelb",{"_index":2141,"t":{"416":{"position":[[80,8]]}}}],["encapsul",{"_index":69,"t":{"4":{"position":[[611,12]]},"303":{"position":[[1320,11],[1592,11]]},"309":{"position":[[81,11]]}}}],["encod",{"_index":1288,"t":{"168":{"position":[[490,8]]},"247":{"position":[[2055,7]]}}}],["encount",{"_index":1038,"t":{"108":{"position":[[1193,11]]},"322":{"position":[[410,11]]},"394":{"position":[[73,9]]}}}],["encrypt",{"_index":957,"t":{"77":{"position":[[1372,7],[1397,7],[1467,7]]},"108":{"position":[[489,9],[1068,9]]},"120":{"position":[[30,10],[84,11]]},"122":{"position":[[74,8],[162,10],[184,10],[222,10],[315,10]]},"124":{"position":[[50,10],[139,10],[176,10],[267,7],[466,7],[674,7],[780,10],[837,10],[1006,7],[1074,10],[1177,7],[1416,7],[1664,7]]},"126":{"position":[[72,10],[97,10],[144,10],[201,7],[414,7],[468,10],[524,7],[624,7],[701,10],[727,10],[858,7],[980,10],[1034,7],[1287,7],[1341,10],[1394,7],[1534,7]]},"128":{"position":[[12,7],[113,10],[202,7],[217,10],[281,10],[484,7],[499,10],[564,10],[770,10],[815,10],[1034,10],[1383,10],[1518,10],[1637,11],[1688,7],[1804,10]]},"132":{"position":[[500,10]]},"148":{"position":[[35,10],[66,10]]},"162":{"position":[[8488,10],[8513,10]]},"174":{"position":[[554,7],[643,10]]},"187":{"position":[[230,10]]},"191":{"position":[[429,7]]},"215":{"position":[[907,10]]},"221":{"position":[[2623,10]]},"303":{"position":[[332,11],[1608,7],[1743,7],[1872,7]]},"398":{"position":[[655,11]]},"474":{"position":[[219,11],[816,11]]},"496":{"position":[[18,10],[270,9],[357,10],[400,11]]},"498":{"position":[[12,10],[86,10],[160,10],[400,10],[443,11]]},"510":{"position":[[30,10],[109,10],[193,10],[273,10],[312,10],[446,10],[552,10]]},"512":{"position":[[36,8],[124,10],[146,10],[184,10],[263,7]]},"658":{"position":[[236,10],[314,10],[469,11]]},"660":{"position":[[154,10]]},"685":{"position":[[82,11]]},"691":{"position":[[87,10]]}}}],["encryptionconfig",{"_index":2782,"t":{"658":{"position":[[78,16]]},"660":{"position":[[78,16]]}}}],["encryptionconfigur",{"_index":2542,"t":{"510":{"position":[[586,26]]}}}],["end",{"_index":1907,"t":{"326":{"position":[[1144,3]]},"546":{"position":[[571,3]]}}}],["endpoint",{"_index":915,"t":{"75":{"position":[[352,9],[410,8],[588,8],[634,9]]},"89":{"position":[[45,8]]},"101":{"position":[[2120,8]]},"118":{"position":[[3023,8],[3035,8],[3058,8],[3105,8]]},"135":{"position":[[50,8],[1137,8],[1159,8],[1212,8],[1269,8]]},"150":{"position":[[1114,9],[1383,10],[1502,10],[1521,8],[1755,10],[1774,8],[1828,10]]},"158":{"position":[[69,8]]},"162":{"position":[[3876,8],[5064,8],[5087,8],[5140,8],[5198,8],[7052,8],[8575,8]]},"187":{"position":[[103,8],[425,8]]},"189":{"position":[[62,8],[284,8],[664,9],[851,8],[1477,9],[1702,8]]},"213":{"position":[[205,8],[827,8],[926,8]]},"217":{"position":[[363,8],[438,8],[635,8]]},"223":{"position":[[476,9]]},"309":{"position":[[806,10],[979,9],[1242,10],[1332,10],[1351,8],[1669,10],[1688,8],[1742,10]]},"340":{"position":[[50,9],[126,9],[209,10],[285,8],[565,9],[1210,9]]},"344":{"position":[[174,9],[537,9]]},"346":{"position":[[178,9],[373,9],[484,10]]}}}],["endpoint=\"mysql://username:password@tcp(hostname:3306)/databas",{"_index":1495,"t":{"213":{"position":[[665,63]]},"215":{"position":[[477,63]]},"268":{"position":[[988,63]]}}}],["endpoint=/run/k3s/containerd/containerd.sock",{"_index":2469,"t":{"476":{"position":[[3525,44]]}}}],["endpoint=unix:///run/k3s/containerd/containerd.sock",{"_index":2848,"t":{"735":{"position":[[1062,51],[2285,51]]},"747":{"position":[[1253,51],[2476,51]]}}}],["enforc",{"_index":1505,"t":{"215":{"position":[[1054,7]]},"398":{"position":[[1755,8],[1777,7],[2486,9]]},"466":{"position":[[310,7]]},"468":{"position":[[622,8],[644,7]]},"480":{"position":[[311,7]]},"533":{"position":[[698,7]]}}}],["engin",{"_index":1797,"t":{"307":{"position":[[122,7]]}}}],["enhanc",{"_index":27,"t":{"4":{"position":[[68,13]]}}}],["ensur",{"_index":213,"t":{"17":{"position":[[864,6]]},"25":{"position":[[1595,6]]},"54":{"position":[[143,6]]},"112":{"position":[[2364,6]]},"114":{"position":[[2119,6]]},"203":{"position":[[132,8]]},"213":{"position":[[1624,6]]},"215":{"position":[[923,6]]},"243":{"position":[[179,6]]},"253":{"position":[[86,6]]},"266":{"position":[[324,6]]},"273":{"position":[[85,6]]},"303":{"position":[[660,6],[748,6]]},"307":{"position":[[530,6],[914,6]]},"324":{"position":[[453,6]]},"326":{"position":[[427,6],[1430,6]]},"336":{"position":[[538,6]]},"358":{"position":[[806,6]]},"368":{"position":[[60,6]]},"384":{"position":[[486,6]]},"398":{"position":[[2057,6]]},"454":{"position":[[1246,6]]},"456":{"position":[[103,6]]},"470":{"position":[[1141,6]]},"480":{"position":[[0,6],[135,7]]},"482":{"position":[[0,6]]},"484":{"position":[[0,6]]},"486":{"position":[[0,6],[122,7]]},"488":{"position":[[0,6],[161,7]]},"490":{"position":[[0,6],[160,7]]},"492":{"position":[[0,6]]},"494":{"position":[[0,6]]},"496":{"position":[[0,6]]},"498":{"position":[[0,6],[125,6]]},"500":{"position":[[0,6],[123,6]]},"502":{"position":[[0,6]]},"504":{"position":[[0,6],[279,7]]},"506":{"position":[[0,6]]},"533":{"position":[[583,6]]},"536":{"position":[[1806,6]]},"540":{"position":[[2178,6]]},"546":{"position":[[951,6]]},"555":{"position":[[1607,6]]},"579":{"position":[[333,6]]},"628":{"position":[[235,6]]},"630":{"position":[[194,6]]},"650":{"position":[[463,6]]},"677":{"position":[[162,6]]},"682":{"position":[[144,6]]},"685":{"position":[[357,6]]},"687":{"position":[[246,6]]},"689":{"position":[[271,6]]},"691":{"position":[[423,6]]},"693":{"position":[[249,6]]},"695":{"position":[[281,6]]},"697":{"position":[[380,6]]},"705":{"position":[[79,6]]},"773":{"position":[[26,6]]},"785":{"position":[[77,8]]},"789":{"position":[[26,6]]},"819":{"position":[[26,6]]}}}],["enterpris",{"_index":1360,"t":{"185":{"position":[[355,10]]},"356":{"position":[[125,10]]}}}],["entir",{"_index":787,"t":{"59":{"position":[[341,6]]},"303":{"position":[[2034,9]]},"436":{"position":[[205,6]]}}}],["entri",{"_index":212,"t":{"17":{"position":[[844,8]]},"19":{"position":[[1280,7],[1444,7]]},"65":{"position":[[717,8]]},"75":{"position":[[1497,6]]}}}],["enumer",{"_index":474,"t":{"27":{"position":[[341,11]]}}}],["env",{"_index":454,"t":{"25":{"position":[[1324,4]]},"112":{"position":[[2523,4]]},"114":{"position":[[2308,4]]}}}],["environ",{"_index":50,"t":{"4":{"position":[[376,13]]},"17":{"position":[[29,12],[526,11]]},"35":{"position":[[178,11],[249,11]]},"54":{"position":[[805,11]]},"71":{"position":[[64,12]]},"77":{"position":[[717,11]]},"83":{"position":[[5,11]]},"87":{"position":[[5,11]]},"91":{"position":[[5,11]]},"97":{"position":[[5,11]]},"101":{"position":[[112,11]]},"112":{"position":[[1094,11]]},"118":{"position":[[2464,11]]},"135":{"position":[[5,11]]},"137":{"position":[[5,11]]},"139":{"position":[[5,11]]},"160":{"position":[[5,11]]},"162":{"position":[[114,11]]},"172":{"position":[[174,11]]},"176":{"position":[[164,11]]},"181":{"position":[[314,11],[451,11]]},"185":{"position":[[473,12]]},"187":{"position":[[348,11],[380,11],[1573,11]]},"207":{"position":[[161,12]]},"253":{"position":[[65,13],[377,12]]},"255":{"position":[[37,11],[92,11],[111,11]]},"257":{"position":[[74,11]]},"261":{"position":[[60,11]]},"266":{"position":[[1032,11]]},"271":{"position":[[21,11],[544,11]]},"273":{"position":[[62,13]]},"277":{"position":[[224,11],[330,11],[520,11],[1839,11],[1866,11],[2253,11]]},"279":{"position":[[577,11],[1052,11]]},"281":{"position":[[78,11],[1208,11]]},"285":{"position":[[213,11]]},"311":{"position":[[230,11]]},"422":{"position":[[251,11]]},"428":{"position":[[1097,11],[1659,11]]},"432":{"position":[[310,11],[375,11],[1292,11],[2391,11],[2505,11]]},"434":{"position":[[745,11]]},"456":{"position":[[19,11]]},"472":{"position":[[224,12]]},"546":{"position":[[242,13]]},"548":{"position":[[315,11],[703,11]]},"628":{"position":[[97,12]]},"805":{"position":[[124,11]]}}}],["ephemer",{"_index":2281,"t":{"454":{"position":[[1138,9]]},"456":{"position":[[419,9]]},"468":{"position":[[1690,11],[2831,11]]}}}],["equal",{"_index":2685,"t":{"579":{"position":[[2099,5]]},"585":{"position":[[362,5]]},"593":{"position":[[251,5]]},"636":{"position":[[329,5]]},"667":{"position":[[355,5]]},"669":{"position":[[423,5]]},"680":{"position":[[314,5]]},"682":{"position":[[349,5]]},"687":{"position":[[2057,5]]},"693":{"position":[[2060,5]]},"695":{"position":[[2092,5]]},"716":{"position":[[280,5]]},"718":{"position":[[295,5]]},"720":{"position":[[259,5]]},"722":{"position":[[228,5]]},"729":{"position":[[790,5]]},"735":{"position":[[586,5]]}}}],["equival",{"_index":1596,"t":{"247":{"position":[[950,10]]},"281":{"position":[[435,10]]},"305":{"position":[[867,10]]},"309":{"position":[[447,10]]}}}],["err",{"_index":2661,"t":{"579":{"position":[[508,3]]},"650":{"position":[[638,3]]},"685":{"position":[[532,3]]},"687":{"position":[[421,3]]},"689":{"position":[[446,3]]},"691":{"position":[[598,3]]},"693":{"position":[[424,3]]},"695":{"position":[[456,3]]},"697":{"position":[[555,3]]}}}],["error",{"_index":970,"t":{"81":{"position":[[249,5]]},"87":{"position":[[321,5]]},"101":{"position":[[651,5],[2038,5]]},"108":{"position":[[1252,5]]},"112":{"position":[[2159,6],[2192,7]]},"114":{"position":[[1969,6],[2002,7]]},"116":{"position":[[1276,6],[1309,7]]},"142":{"position":[[280,5]]},"162":{"position":[[662,5],[8416,5]]},"217":{"position":[[812,6]]},"279":{"position":[[1343,6]]},"322":{"position":[[391,6]]},"326":{"position":[[756,5]]},"689":{"position":[[2102,6],[2132,5],[2342,6],[2372,5],[2582,6],[2612,5]]},"695":{"position":[[2147,6],[2177,5]]}}}],["esac",{"_index":2680,"t":{"579":{"position":[[1578,4],[2017,4]]},"650":{"position":[[1708,4],[2147,4]]},"685":{"position":[[1602,4],[2041,4]]},"687":{"position":[[1491,4],[1930,4]]},"689":{"position":[[1516,4],[1955,4]]},"691":{"position":[[1668,4],[2107,4]]},"693":{"position":[[1494,4],[1933,4]]},"695":{"position":[[1526,4],[1965,4]]},"697":{"position":[[1625,4],[2064,4]]}}}],["escal",{"_index":2882,"t":{"770":{"position":[[75,8]]}}}],["esgz",{"_index":825,"t":{"61":{"position":[[324,6],[548,4]]}}}],["especi",{"_index":792,"t":{"59":{"position":[[460,10]]}}}],["essenti",{"_index":1308,"t":{"174":{"position":[[381,11]]}}}],["establish",{"_index":909,"t":{"73":{"position":[[205,9]]},"317":{"position":[[22,9]]}}}],["estargz",{"_index":799,"t":{"59":{"position":[[613,8],[734,7],[846,7],[873,7],[1088,8]]},"61":{"position":[[181,7],[247,7],[494,7]]}}}],["et",{"_index":778,"t":{"59":{"position":[[108,2]]}}}],["etc",{"_index":99,"t":{"4":{"position":[[1071,4]]},"19":{"position":[[2505,6]]},"223":{"position":[[486,4]]},"247":{"position":[[1510,4]]}}}],["etc/cni/net.d/10",{"_index":1807,"t":{"307":{"position":[[613,17],[997,17]]}}}],["etc/haproxy/haproxy.cfg",{"_index":1431,"t":{"203":{"position":[[460,24]]}}}],["etc/keepalived/keepalived.conf",{"_index":1442,"t":{"203":{"position":[[832,31]]}}}],["etc/kubernetes/admin.conf",{"_index":2688,"t":{"585":{"position":[[148,26]]}}}],["etc/kubernetes/manifests/etcd.yaml",{"_index":2651,"t":{"571":{"position":[[152,35]]},"573":{"position":[[158,35]]},"685":{"position":[[137,35]]},"687":{"position":[[63,35]]},"689":{"position":[[63,35]]},"691":{"position":[[179,35]]},"693":{"position":[[63,35]]},"695":{"position":[[63,35]]},"697":{"position":[[186,35]]}}}],["etc/kubernetes/manifests/kub",{"_index":2645,"t":{"559":{"position":[[152,30]]},"561":{"position":[[158,30]]},"563":{"position":[[152,30]]},"565":{"position":[[158,30]]},"567":{"position":[[152,30]]},"569":{"position":[[158,30]]},"602":{"position":[[69,30]]},"604":{"position":[[155,30]]},"606":{"position":[[69,30]]},"608":{"position":[[79,30]]},"610":{"position":[[173,30]]},"612":{"position":[[176,30]]},"614":{"position":[[69,30]]},"616":{"position":[[69,30]]},"618":{"position":[[69,30]]},"620":{"position":[[163,30]]},"622":{"position":[[69,30]]},"624":{"position":[[69,30]]},"626":{"position":[[69,30]]},"628":{"position":[[159,30]]},"630":{"position":[[69,30]]},"632":{"position":[[162,30]]},"634":{"position":[[69,30]]},"636":{"position":[[69,30]]},"638":{"position":[[79,30]]},"640":{"position":[[79,30]]},"642":{"position":[[79,30]]},"644":{"position":[[79,30]]},"646":{"position":[[69,30]]},"648":{"position":[[79,30]]},"650":{"position":[[173,30]]},"652":{"position":[[159,30]]},"654":{"position":[[159,30]]},"656":{"position":[[173,30]]},"658":{"position":[[150,30]]},"662":{"position":[[69,30]]},"665":{"position":[[77,30]]},"667":{"position":[[77,30]]},"669":{"position":[[77,30]]},"671":{"position":[[77,30]]},"673":{"position":[[77,30]]},"675":{"position":[[87,30]]},"677":{"position":[[77,30]]},"680":{"position":[[68,30]]},"682":{"position":[[68,30]]}}}],["etc/kubernetes/pki",{"_index":2697,"t":{"595":{"position":[[151,20]]}}}],["etc/kubernetes/pki/*.crt",{"_index":2699,"t":{"597":{"position":[[145,25]]}}}],["etc/kubernetes/pki/*.key",{"_index":2701,"t":{"599":{"position":[[145,25]]}}}],["etc/nginx/nginx.conf",{"_index":1478,"t":{"203":{"position":[[2709,21]]},"205":{"position":[[746,21]]}}}],["etc/rancher/k3",{"_index":1932,"t":{"336":{"position":[[183,17]]}}}],["etc/rancher/k3s/config.yaml",{"_index":1005,"t":{"101":{"position":[[287,31]]},"162":{"position":[[298,31]]},"201":{"position":[[188,28]]},"281":{"position":[[204,28]]},"283":{"position":[[132,28]]},"285":{"position":[[97,29]]},"305":{"position":[[658,28]]},"382":{"position":[[216,29]]}}}],["etc/rancher/k3s/config.yaml.d/*.yaml",{"_index":1735,"t":{"283":{"position":[[165,37]]}}}],["etc/rancher/k3s/k3s.yaml",{"_index":947,"t":{"77":{"position":[[807,26]]},"181":{"position":[[30,25],[660,25],[730,25]]},"183":{"position":[[5,25]]},"428":{"position":[[549,25]]}}}],["etc/rancher/k3s/registries.yaml",{"_index":988,"t":{"89":{"position":[[326,34]]},"101":{"position":[[2596,35]]},"162":{"position":[[7528,35]]},"344":{"position":[[49,32]]},"346":{"position":[[49,32]]}}}],["etc/rancher/nod",{"_index":933,"t":{"75":{"position":[[1310,17],[1838,19]]}}}],["etc/rancher/node/password",{"_index":927,"t":{"75":{"position":[[970,27]]}}}],["etc/ssl",{"_index":1072,"t":{"110":{"position":[[2253,9]]}}}],["etc/ssl/certs/intermedi",{"_index":1074,"t":{"110":{"position":[[2394,27]]}}}],["etc/ssl/certs/root",{"_index":1073,"t":{"110":{"position":[[2367,19]]}}}],["etc/ssl/private/intermedi",{"_index":1075,"t":{"110":{"position":[[2429,29]]}}}],["etc/sysctl.d/90",{"_index":2306,"t":{"464":{"position":[[286,16],[362,16]]}}}],["etc/systemd",{"_index":541,"t":{"33":{"position":[[488,18]]}}}],["etc/systemd/system",{"_index":2196,"t":{"432":{"position":[[1321,19]]}}}],["etc/systemd/system/k3",{"_index":200,"t":{"17":{"position":[[613,23]]}}}],["etc/systemd/system/k3s.servic",{"_index":1866,"t":{"317":{"position":[[1197,31]]},"472":{"position":[[1131,32]]}}}],["etc/systemd/system/k3s.service.env",{"_index":199,"t":{"17":{"position":[[577,35]]}}}],["etc/systemd/system/kubelet.service.d/10",{"_index":2821,"t":{"708":{"position":[[150,40]]},"710":{"position":[[156,40]]},"729":{"position":[[185,40]]},"731":{"position":[[171,40]]},"733":{"position":[[214,40]]},"735":{"position":[[161,40]]},"737":{"position":[[198,40]]},"739":{"position":[[183,40]]},"741":{"position":[[184,40]]},"743":{"position":[[66,40]]},"745":{"position":[[182,40]]},"747":{"position":[[304,40]]},"749":{"position":[[238,40]]},"751":{"position":[[66,40]]},"753":{"position":[[487,40]]}}}],["etcd",{"_index":364,"t":{"21":{"position":[[44,4],[152,5]]},"27":{"position":[[391,4]]},"71":{"position":[[339,4],[579,5]]},"77":{"position":[[1208,4],[1302,4]]},"106":{"position":[[480,5]]},"110":{"position":[[934,4],[975,4]]},"118":{"position":[[114,4],[786,4],[823,4],[2000,4],[2041,4],[2058,4],[2184,4],[2259,4],[2627,4],[2659,4],[2868,4],[2915,4],[2985,4],[3015,4],[3050,4],[3116,4],[3181,4],[3216,4],[3251,4],[3283,4],[3362,4],[3411,4],[3448,4],[3592,4],[3746,4],[3805,4],[3841,4],[3880,4],[3915,4],[4010,4],[4200,4],[4258,4],[4390,4],[4495,4],[4530,4],[4576,4],[4910,4],[4934,4]]},"132":{"position":[[171,5]]},"135":{"position":[[96,5],[510,4],[541,4],[593,4],[638,4],[655,4],[705,4],[730,4],[789,4],[919,4],[998,4],[1095,4],[1129,4],[1204,4],[1280,4],[1349,4],[1408,4],[1471,4],[1513,4],[1602,4],[1639,4],[1681,4]]},"137":{"position":[[526,4]]},"156":{"position":[[19,4],[54,4]]},"162":{"position":[[3240,4],[3526,4],[3569,4],[3904,5],[4368,4],[4400,4],[4453,4],[4499,4],[4516,4],[4567,4],[4592,4],[4634,5],[4653,4],[4789,4],[4869,4],[4968,4],[5005,4],[5021,4],[5056,4],[5132,4],[5209,4],[5279,4],[5346,4],[5417,4],[5460,4],[5550,4],[5588,4],[5635,4]]},"185":{"position":[[59,4],[331,5],[755,5],[994,4],[1044,4],[1084,4],[1142,4],[1179,4],[1256,4],[1287,4],[1307,4],[1555,4]]},"187":{"position":[[71,4],[489,4]]},"189":{"position":[[240,4],[1725,4],[1870,4],[1934,4]]},"195":{"position":[[469,4]]},"197":{"position":[[12,4],[124,4]]},"201":{"position":[[114,4]]},"221":{"position":[[17,4],[133,4],[201,4],[645,4],[795,4]]},"223":{"position":[[140,4],[304,4]]},"253":{"position":[[518,4]]},"315":{"position":[[513,4],[581,5]]},"358":{"position":[[563,4],[599,4],[671,4]]},"360":{"position":[[712,5]]},"362":{"position":[[110,4]]},"364":{"position":[[268,4]]},"372":{"position":[[75,5]]},"374":{"position":[[143,5],[235,4],[324,5],[354,5]]},"376":{"position":[[33,4],[258,5],[288,4]]},"378":{"position":[[119,4],[243,4],[329,4],[537,4]]},"380":{"position":[[167,4]]},"382":{"position":[[167,4]]},"434":{"position":[[210,4]]},"446":{"position":[[322,4],[459,4]]},"448":{"position":[[327,4]]},"454":{"position":[[100,6]]},"458":{"position":[[154,5]]},"462":{"position":[[70,4]]},"476":{"position":[[547,4],[621,4],[694,4],[766,4]]},"494":{"position":[[291,5]]},"496":{"position":[[87,6]]},"498":{"position":[[79,6]]},"533":{"position":[[1202,4]]},"579":{"position":[[33,4],[59,4],[146,6],[189,4],[369,4],[575,4],[825,5],[1719,4],[1739,4]]},"581":{"position":[[43,4],[69,4],[156,6],[199,4]]},"610":{"position":[[1303,4],[1368,4],[1432,4],[1495,4]]},"612":{"position":[[1251,4],[1316,4],[1380,4],[1443,4]]},"614":{"position":[[1120,4],[1185,4],[1249,4],[1312,4]]},"616":{"position":[[1069,4],[1134,4],[1198,4],[1261,4]]},"618":{"position":[[1082,4],[1147,4],[1211,4],[1274,4]]},"620":{"position":[[1195,4],[1260,4],[1324,4],[1387,4]]},"622":{"position":[[1156,4],[1221,4],[1285,4],[1348,4]]},"626":{"position":[[1229,4],[1294,4],[1358,4],[1421,4]]},"628":{"position":[[1210,4],[1275,4],[1339,4],[1402,4]]},"630":{"position":[[1106,4],[1171,4],[1235,4],[1298,4]]},"632":{"position":[[1222,4],[1287,4],[1351,4],[1414,4]]},"634":{"position":[[1087,4],[1152,4],[1216,4],[1279,4]]},"636":{"position":[[1002,4],[1067,4],[1131,4],[1194,4]]},"646":{"position":[[1177,4],[1242,4],[1306,4],[1369,4]]},"650":{"position":[[118,5],[257,4],[301,4],[351,4],[499,4],[705,4],[955,5],[1849,4],[1869,4],[2223,4],[2256,4],[2299,4],[2319,4]]},"652":{"position":[[1219,4],[1284,4],[1348,4],[1411,4]]},"654":{"position":[[1135,4],[1200,4],[1264,4],[1327,4]]},"656":{"position":[[118,5],[257,4],[302,4],[427,5],[461,4],[1141,4],[1206,4],[1270,4],[1333,4]]},"685":{"position":[[37,4],[109,4],[393,4],[599,4],[849,5],[1743,4],[1763,4]]},"687":{"position":[[35,4],[282,4],[488,4],[738,5],[1632,4],[1652,4]]},"689":{"position":[[35,4],[307,4],[513,4],[763,5],[1657,4],[1677,4]]},"691":{"position":[[37,4],[122,4],[151,4],[459,4],[665,4],[915,5],[1809,4],[1829,4]]},"693":{"position":[[35,4],[285,4],[491,4],[741,5],[1635,4],[1655,4]]},"695":{"position":[[35,4],[317,4],[523,4],[773,5],[1667,4],[1687,4]]},"697":{"position":[[51,4],[129,4],[158,4],[416,4],[622,4],[872,5],[1766,4],[1786,4]]},"729":{"position":[[1486,4],[1551,4],[1615,4],[1678,4]]},"731":{"position":[[1500,4],[1565,4],[1629,4],[1692,4]]},"733":{"position":[[1615,4],[1680,4],[1744,4],[1807,4]]}}}],["etcd/peer",{"_index":1059,"t":{"110":{"position":[[995,9],[1012,9]]}}}],["etcd/serv",{"_index":1060,"t":{"110":{"position":[[1029,11],[1048,11]]}}}],["etcd3",{"_index":36,"t":{"4":{"position":[[190,6]]}}}],["etcd:etcd",{"_index":2686,"t":{"581":{"position":[[252,9]]}}}],["etcd_auto_tl",{"_index":2808,"t":{"689":{"position":[[2025,15],[2059,15]]}}}],["etcd_url",{"_index":374,"t":{"21":{"position":[[356,11]]}}}],["etcd_url=\"https://github.com/etcd",{"_index":368,"t":{"21":{"position":[[230,33]]}}}],["etcd_vers",{"_index":370,"t":{"21":{"position":[[311,15]]}}}],["etcd_version=\"v3.5.5",{"_index":367,"t":{"21":{"position":[[208,21]]}}}],["etcdctl",{"_index":361,"t":{"21":{"position":[[0,7],[78,8],[112,7],[166,7],[440,7],[536,7]]}}}],["eth1",{"_index":1448,"t":{"203":{"position":[[1007,4]]}}}],["evalu",{"_index":2620,"t":{"540":{"position":[[2525,8]]},"555":{"position":[[221,8],[911,9],[1594,9]]}}}],["even",{"_index":806,"t":{"59":{"position":[[838,4]]},"110":{"position":[[958,4]]},"235":{"position":[[1017,4]]},"266":{"position":[[576,4]]},"326":{"position":[[692,4]]},"340":{"position":[[1475,4]]},"484":{"position":[[289,4]]},"494":{"position":[[339,4]]},"514":{"position":[[266,4]]}}}],["event",{"_index":1472,"t":{"203":{"position":[[2327,6]]},"205":{"position":[[364,6]]},"322":{"position":[[541,5],[574,6]]},"486":{"position":[[192,7]]}}}],["eventratelimit",{"_index":2763,"t":{"620":{"position":[[522,16]]}}}],["eventrecordqp",{"_index":2867,"t":{"745":{"position":[[79,14]]}}}],["eventu",{"_index":1169,"t":{"118":{"position":[[4289,10]]}}}],["everyth",{"_index":1547,"t":{"227":{"position":[[60,10]]},"460":{"position":[[1202,10]]}}}],["evict",{"_index":2472,"t":{"476":{"position":[[3648,8],[3705,8]]},"735":{"position":[[1165,8],[1222,8],[2388,8],[2445,8]]},"747":{"position":[[1356,8],[1413,8],[2579,8],[2636,8]]}}}],["exactli",{"_index":1527,"t":{"221":{"position":[[509,7]]}}}],["exampl",{"_index":403,"t":{"23":{"position":[[409,8]]},"25":{"position":[[298,8]]},"31":{"position":[[402,8]]},"41":{"position":[[362,7]]},"50":{"position":[[311,7]]},"61":{"position":[[221,7]]},"69":{"position":[[31,7]]},"99":{"position":[[290,7]]},"101":{"position":[[44,7]]},"110":{"position":[[179,7],[1287,7],[1391,7],[1869,7],[2182,8]]},"112":{"position":[[877,7],[897,7],[1127,7]]},"114":{"position":[[1157,7],[1176,7],[1351,7]]},"116":{"position":[[568,8]]},"118":{"position":[[1251,7]]},"128":{"position":[[140,7],[387,7],[1275,7]]},"162":{"position":[[44,7]]},"181":{"position":[[399,8]]},"185":{"position":[[273,8]]},"189":{"position":[[1258,8]]},"199":{"position":[[133,8]]},"201":{"position":[[18,7],[61,9]]},"213":{"position":[[445,8],[1503,7]]},"215":{"position":[[9,7]]},"217":{"position":[[145,8],[606,7],[711,8]]},"247":{"position":[[124,7],[2348,8]]},"249":{"position":[[529,8]]},"263":{"position":[[164,8]]},"268":{"position":[[818,8],[1089,8]]},"273":{"position":[[718,8]]},"279":{"position":[[1156,8]]},"281":{"position":[[261,7]]},"283":{"position":[[517,7]]},"285":{"position":[[55,8]]},"307":{"position":[[445,8],[828,8]]},"311":{"position":[[792,7]]},"313":{"position":[[464,7]]},"326":{"position":[[742,7]]},"330":{"position":[[298,8]]},"332":{"position":[[417,8]]},"336":{"position":[[840,8]]},"340":{"position":[[91,8],[489,8],[995,8]]},"342":{"position":[[826,8]]},"344":{"position":[[10,8]]},"346":{"position":[[10,8]]},"348":{"position":[[157,8],[266,8],[400,8]]},"380":{"position":[[101,7]]},"382":{"position":[[136,8]]},"398":{"position":[[517,7],[1354,7]]},"404":{"position":[[886,7]]},"416":{"position":[[185,8]]},"428":{"position":[[1131,7]]},"432":{"position":[[1592,8],[2347,7]]},"438":{"position":[[125,7],[361,7]]},"468":{"position":[[384,7],[1333,7],[2517,7]]},"470":{"position":[[272,7]]},"480":{"position":[[580,7]]},"482":{"position":[[679,7]]},"484":{"position":[[560,7]]},"486":{"position":[[400,7]]},"488":{"position":[[274,8],[575,7]]},"490":{"position":[[561,7]]},"492":{"position":[[785,7]]},"494":{"position":[[407,7],[578,7]]},"500":{"position":[[652,7]]},"504":{"position":[[703,7]]},"510":{"position":[[537,7]]},"518":{"position":[[195,8]]},"524":{"position":[[152,8]]},"540":{"position":[[345,7]]},"546":{"position":[[467,9]]},"548":{"position":[[765,8]]},"559":{"position":[[133,8]]},"561":{"position":[[133,8]]},"563":{"position":[[133,8]]},"565":{"position":[[133,8]]},"567":{"position":[[133,8]]},"569":{"position":[[133,8]]},"571":{"position":[[133,8]]},"573":{"position":[[133,8]]},"575":{"position":[[133,8]]},"577":{"position":[[133,8]]},"579":{"position":[[227,8]]},"581":{"position":[[237,8]]},"583":{"position":[[133,8]]},"585":{"position":[[123,8]]},"587":{"position":[[123,8]]},"589":{"position":[[123,8]]},"591":{"position":[[123,8]]},"593":{"position":[[123,8]]},"595":{"position":[[123,8]]},"597":{"position":[[123,8]]},"599":{"position":[[123,8]]},"614":{"position":[[227,7]]},"618":{"position":[[219,7]]},"638":{"position":[[269,8]]},"640":{"position":[[239,8]]},"642":{"position":[[233,8]]},"644":{"position":[[227,8]]},"648":{"position":[[249,8]]},"658":{"position":[[303,8]]},"665":{"position":[[233,8]]},"671":{"position":[[265,8]]},"708":{"position":[[131,8]]},"710":{"position":[[131,8]]},"712":{"position":[[121,8]]},"714":{"position":[[121,8]]},"716":{"position":[[121,8]]},"718":{"position":[[121,8]]},"729":{"position":[[403,8]]},"731":{"position":[[389,8]]},"733":{"position":[[445,8]]},"735":{"position":[[375,8]]},"737":{"position":[[432,8]]},"739":{"position":[[409,8]]},"741":{"position":[[409,8]]},"743":{"position":[[283,8]]},"745":{"position":[[377,8]]},"747":{"position":[[593,8]]},"749":{"position":[[459,8]]},"751":{"position":[[313,8]]},"753":{"position":[[1018,8]]},"815":{"position":[[119,7]]}}}],["example.com",{"_index":1908,"t":{"326":{"position":[[1185,14]]}}}],["example_manifest",{"_index":1898,"t":{"326":{"position":[[949,18],[1010,19]]}}}],["exce",{"_index":1164,"t":{"118":{"position":[[4136,6]]},"492":{"position":[[376,7]]}}}],["except",{"_index":2294,"t":{"460":{"position":[[405,10]]}}}],["exclud",{"_index":2138,"t":{"414":{"position":[[244,8]]}}}],["exec",{"_index":1262,"t":{"150":{"position":[[1143,4]]},"309":{"position":[[1008,4]]},"432":{"position":[[1876,4],[2657,4]]}}}],["execstart=/usr/local/bin/k3",{"_index":543,"t":{"33":{"position":[[591,28]]},"472":{"position":[[1164,28]]}}}],["execut",{"_index":427,"t":{"25":{"position":[[743,11]]},"63":{"position":[[101,8]]},"266":{"position":[[337,11]]},"279":{"position":[[238,9]]},"540":{"position":[[1773,8]]},"579":{"position":[[2031,10]]},"650":{"position":[[2161,10]]},"685":{"position":[[2055,10]]},"687":{"position":[[1944,10]]},"689":{"position":[[1969,10]]},"691":{"position":[[2121,10]]},"693":{"position":[[1947,10]]},"695":{"position":[[1979,10]]},"697":{"position":[[2078,10]]},"729":{"position":[[133,10]]},"731":{"position":[[119,10]]},"753":{"position":[[435,10]]}}}],["exempt",{"_index":2078,"t":{"398":{"position":[[1312,6],[1362,7],[1889,11]]},"468":{"position":[[756,11]]}}}],["exhaust",{"_index":2515,"t":{"492":{"position":[[475,7]]},"546":{"position":[[680,10]]}}}],["exist",{"_index":936,"t":{"75":{"position":[[1400,8]]},"110":{"position":[[510,8],[685,8],[1364,8],[1527,6],[1627,8],[1729,8],[2210,8],[2287,8]]},"112":{"position":[[1734,8]]},"114":{"position":[[1254,8],[1440,8]]},"116":{"position":[[196,8],[949,8]]},"118":{"position":[[2854,5]]},"185":{"position":[[1278,8]]},"189":{"position":[[581,6],[1397,6]]},"201":{"position":[[504,5]]},"223":{"position":[[57,8]]},"283":{"position":[[347,8]]},"311":{"position":[[611,8]]},"330":{"position":[[416,8]]},"332":{"position":[[200,9],[406,6]]},"336":{"position":[[173,6]]},"378":{"position":[[96,8]]},"380":{"position":[[22,8]]},"384":{"position":[[385,8]]},"404":{"position":[[1269,8]]},"432":{"position":[[612,5]]},"470":{"position":[[644,5]]},"480":{"position":[[181,8]]},"510":{"position":[[347,8]]}}}],["existing_k3s_arg",{"_index":2628,"t":{"548":{"position":[[874,19],[1089,19],[1278,19]]}}}],["existing_k3s_env",{"_index":2627,"t":{"548":{"position":[[847,18],[1062,18],[1251,18]]}}}],["exit",{"_index":2303,"t":{"464":{"position":[[54,4]]}}}],["expect",{"_index":1173,"t":{"118":{"position":[[4369,8]]},"356":{"position":[[7,8]]},"508":{"position":[[187,12]]},"579":{"position":[[2073,8]]},"585":{"position":[[330,8]]},"587":{"position":[[324,8],[374,8]]},"589":{"position":[[321,8]]},"591":{"position":[[334,8],[384,8]]},"593":{"position":[[219,8]]},"595":{"position":[[238,8]]},"604":{"position":[[334,8]]},"606":{"position":[[263,8]]},"610":{"position":[[550,8]]},"612":{"position":[[533,8]]},"614":{"position":[[396,8]]},"616":{"position":[[362,8]]},"618":{"position":[[375,8]]},"620":{"position":[[472,8]]},"622":{"position":[[379,8]]},"624":{"position":[[323,8]]},"626":{"position":[[445,8]]},"628":{"position":[[448,8]]},"630":{"position":[[344,8]]},"632":{"position":[[498,8]]},"634":{"position":[[346,8]]},"636":{"position":[[295,8]]},"646":{"position":[[421,8]]},"650":{"position":[[2203,8]]},"652":{"position":[[477,8]]},"654":{"position":[[432,8]]},"656":{"position":[[441,8]]},"667":{"position":[[321,8]]},"669":{"position":[[363,8]]},"671":{"position":[[460,8]]},"673":{"position":[[377,8]]},"677":{"position":[[272,8]]},"680":{"position":[[280,8]]},"682":{"position":[[312,8]]},"685":{"position":[[2094,8]]},"687":{"position":[[1983,8]]},"689":{"position":[[2008,8]]},"691":{"position":[[2160,8]]},"693":{"position":[[1986,8]]},"695":{"position":[[2018,8]]},"697":{"position":[[2117,8]]},"712":{"position":[[254,8]]},"714":{"position":[[345,8]]},"716":{"position":[[254,8]]},"718":{"position":[[263,8]]},"720":{"position":[[193,8]]},"722":{"position":[[196,8]]},"729":{"position":[[751,8]]},"731":{"position":[[747,8]]},"733":{"position":[[841,8]]},"735":{"position":[[547,8]]},"747":{"position":[[741,8]]}}}],["experienc",{"_index":1576,"t":{"243":{"position":[[413,13]]}}}],["experiment",{"_index":426,"t":{"25":{"position":[[662,12]]},"27":{"position":[[25,13]]},"29":{"position":[[25,13]]},"59":{"position":[[237,14]]},"101":{"position":[[3295,14],[3344,14],[3437,14]]},"158":{"position":[[265,15]]},"162":{"position":[[6979,14],[8547,14],[8614,14],[8663,14]]},"311":{"position":[[13,12]]},"396":{"position":[[34,12]]},"424":{"position":[[13,12]]},"533":{"position":[[1030,12],[1055,12],[1157,12],[1180,12]]}}}],["expertis",{"_index":1358,"t":{"185":{"position":[[308,9]]}}}],["expir",{"_index":153,"t":{"13":{"position":[[113,8],[143,9]]},"15":{"position":[[275,6]]},"104":{"position":[[113,8],[143,9]]},"176":{"position":[[313,7]]},"178":{"position":[[257,8]]},"179":{"position":[[1400,6]]},"313":{"position":[[239,8]]}}}],["explain",{"_index":1641,"t":{"251":{"position":[[175,8]]},"336":{"position":[[788,7]]},"400":{"position":[[10,8]]},"478":{"position":[[89,10]]},"555":{"position":[[1384,7]]}}}],["explicit",{"_index":2535,"t":{"506":{"position":[[497,8]]},"764":{"position":[[33,8]]}}}],["explicitli",{"_index":432,"t":{"25":{"position":[[849,10]]},"432":{"position":[[2635,10]]}}}],["export",{"_index":1347,"t":{"181":{"position":[[289,9],[473,6]]},"440":{"position":[[127,8]]}}}],["expos",{"_index":1217,"t":{"135":{"position":[[515,6],[534,6]]},"162":{"position":[[4373,6],[4393,6]]},"187":{"position":[[1702,7]]},"199":{"position":[[602,8]]},"309":{"position":[[244,8]]},"360":{"position":[[836,7]]},"404":{"position":[[304,6]]},"410":{"position":[[693,6]]},"464":{"position":[[205,7]]}}}],["express",{"_index":1944,"t":{"340":{"position":[[869,11]]}}}],["extend",{"_index":2165,"t":{"424":{"position":[[518,6]]},"492":{"position":[[114,9]]}}}],["extens",{"_index":2277,"t":{"454":{"position":[[452,9]]}}}],["extern",{"_index":76,"t":{"4":{"position":[[754,8]]},"17":{"position":[[57,8]]},"71":{"position":[[216,8],[529,8]]},"91":{"position":[[108,8],[130,8]]},"101":{"position":[[2726,8],[2773,8]]},"108":{"position":[[1451,8]]},"124":{"position":[[740,8]]},"132":{"position":[[229,8],[458,8]]},"144":{"position":[[151,8]]},"150":{"position":[[658,8],[685,8]]},"162":{"position":[[956,8],[2191,8],[2225,8],[7787,8],[7834,8]]},"185":{"position":[[1363,8],[1407,8],[1463,8],[1520,8]]},"187":{"position":[[22,8]]},"189":{"position":[[193,8]]},"195":{"position":[[8,8],[146,8]]},"199":{"position":[[41,8],[179,8],[446,8],[552,8],[634,8]]},"207":{"position":[[78,8],[406,8]]},"211":{"position":[[33,8]]},"213":{"position":[[264,8],[552,8]]},"215":{"position":[[1092,8]]},"268":{"position":[[537,8],[869,8]]},"303":{"position":[[1120,8],[1141,8],[1253,8]]},"315":{"position":[[341,8]]},"317":{"position":[[353,8],[431,8],[465,8],[869,8],[1107,8]]},"358":{"position":[[657,8]]},"364":{"position":[[153,8],[218,8]]},"384":{"position":[[143,8],[189,8]]},"408":{"position":[[479,8]]},"410":{"position":[[414,8],[449,8]]},"420":{"position":[[266,8],[444,8],[473,8],[668,8]]},"514":{"position":[[155,8]]},"533":{"position":[[375,8],[736,8]]},"773":{"position":[[74,8]]}}}],["externalip",{"_index":2151,"t":{"420":{"position":[[206,10]]}}}],["extra",{"_index":726,"t":{"50":{"position":[[625,5]]},"179":{"position":[[1132,5]]},"476":{"position":[[1406,5],[1436,5]]},"610":{"position":[[2211,5],[2241,5]]},"612":{"position":[[2159,5],[2189,5]]},"614":{"position":[[2028,5],[2058,5]]},"616":{"position":[[1977,5],[2007,5]]},"618":{"position":[[1990,5],[2020,5]]},"620":{"position":[[2103,5],[2133,5]]},"622":{"position":[[2064,5],[2094,5]]},"626":{"position":[[2137,5],[2167,5]]},"628":{"position":[[2118,5],[2148,5]]},"630":{"position":[[2014,5],[2044,5]]},"632":{"position":[[2130,5],[2160,5]]},"634":{"position":[[1995,5],[2025,5]]},"636":{"position":[[1910,5],[1940,5]]},"646":{"position":[[2085,5],[2115,5]]},"652":{"position":[[2127,5],[2157,5]]},"654":{"position":[[2043,5],[2073,5]]},"656":{"position":[[2049,5],[2079,5]]},"729":{"position":[[2394,5],[2424,5]]},"731":{"position":[[2408,5],[2438,5]]},"733":{"position":[[2523,5],[2553,5]]}}}],["extract",{"_index":1032,"t":{"108":{"position":[[621,9]]}}}],["f",{"_index":601,"t":{"37":{"position":[[91,1]]},"289":{"position":[[203,1]]},"291":{"position":[[618,1],[646,1]]},"297":{"position":[[250,1],[362,1],[390,1]]},"522":{"position":[[341,1],[368,1]]},"524":{"position":[[280,1],[481,1],[508,1]]},"538":{"position":[[233,1]]}}}],["fabric",{"_index":1778,"t":{"303":{"position":[[53,6]]}}}],["fabricmanag",{"_index":417,"t":{"25":{"position":[[360,13]]}}}],["factor",{"_index":2640,"t":{"555":{"position":[[1513,6]]}}}],["fail",{"_index":521,"t":{"31":{"position":[[667,5]]},"33":{"position":[[144,4]]},"39":{"position":[[501,4]]},"54":{"position":[[773,5]]},"132":{"position":[[126,4]]},"221":{"position":[[546,4],[607,5]]},"279":{"position":[[1313,4],[1359,6]]},"307":{"position":[[1217,4]]},"326":{"position":[[824,6],[850,6]]},"394":{"position":[[238,5]]},"476":{"position":[[3775,4]]},"514":{"position":[[296,6]]},"555":{"position":[[634,7]]},"735":{"position":[[1292,4],[2515,4]]},"747":{"position":[[1483,4],[2706,4]]}}}],["failur",{"_index":1179,"t":{"122":{"position":[[267,7]]},"132":{"position":[[83,7]]},"203":{"position":[[2152,8]]},"205":{"position":[[189,8]]},"456":{"position":[[494,7],[617,7]]}}}],["fairli",{"_index":501,"t":{"31":{"position":[[120,6]]}}}],["fals",{"_index":1218,"t":{"135":{"position":[[584,6]]},"148":{"position":[[46,5]]},"162":{"position":[[4444,6]]},"247":{"position":[[1416,5]]},"249":{"position":[[976,5]]},"281":{"position":[[787,5]]},"468":{"position":[[1461,5],[1507,5],[1715,5],[1744,5],[1773,5],[2014,5],[2648,5],[2680,5],[2856,5],[2871,5],[2886,5],[3099,5],[3745,5]]},"506":{"position":[[603,5]]},"579":{"position":[[478,7],[1846,9]]},"636":{"position":[[338,7]]},"650":{"position":[[608,7],[1976,9]]},"667":{"position":[[364,7]]},"669":{"position":[[432,7]]},"680":{"position":[[323,7]]},"685":{"position":[[502,7],[1870,9]]},"687":{"position":[[391,7],[1759,9]]},"689":{"position":[[174,6],[416,7],[1784,9]]},"691":{"position":[[568,7],[1936,9]]},"693":{"position":[[394,7],[1762,9]]},"695":{"position":[[179,6],[426,7],[1794,9],[2101,7]]},"697":{"position":[[525,7],[1893,9]]},"729":{"position":[[117,6],[799,7]]},"764":{"position":[[254,5]]}}}],["faq",{"_index":1542,"t":{"225":{"position":[[4,3]]}}}],["faster",{"_index":585,"t":{"35":{"position":[[764,7]]},"203":{"position":[[938,6]]}}}],["fault",{"_index":1525,"t":{"221":{"position":[[478,5]]}}}],["favor",{"_index":1171,"t":{"118":{"position":[[4317,5]]},"305":{"position":[[125,5],[344,5]]},"398":{"position":[[51,5]]}}}],["fbf3f726cbc6_0",{"_index":345,"t":{"19":{"position":[[2448,14]]}}}],["fc",{"_index":2555,"t":{"516":{"position":[[477,2]]},"745":{"position":[[460,2]]},"753":{"position":[[1101,2]]}}}],["featur",{"_index":54,"t":{"4":{"position":[[431,8]]},"25":{"position":[[1518,7]]},"27":{"position":[[14,7]]},"29":{"position":[[14,7]]},"59":{"position":[[978,8]]},"185":{"position":[[121,7]]},"187":{"position":[[1145,8]]},"215":{"position":[[874,7]]},"221":{"position":[[2590,7]]},"424":{"position":[[197,8],[313,7]]},"482":{"position":[[429,8]]},"546":{"position":[[79,7],[377,9]]},"610":{"position":[[1533,7]]},"612":{"position":[[1481,7]]},"614":{"position":[[1350,7]]},"616":{"position":[[1299,7]]},"618":{"position":[[1312,7]]},"620":{"position":[[1425,7]]},"622":{"position":[[1386,7]]},"626":{"position":[[1459,7]]},"628":{"position":[[1440,7]]},"630":{"position":[[1336,7]]},"632":{"position":[[1452,7]]},"634":{"position":[[1317,7]]},"636":{"position":[[1232,7]]},"646":{"position":[[1407,7]]},"652":{"position":[[1449,7]]},"654":{"position":[[1365,7]]},"656":{"position":[[1371,7]]},"667":{"position":[[1647,7]]},"669":{"position":[[1715,7]]},"671":{"position":[[1800,7]]},"673":{"position":[[1697,7]]},"675":{"position":[[182,7],[256,7]]},"729":{"position":[[1716,7]]},"731":{"position":[[1730,7]]},"733":{"position":[[1845,7]]},"751":{"position":[[208,7]]}}}],["fetch",{"_index":790,"t":{"59":{"position":[[441,7]]},"432":{"position":[[2130,8],[2251,8]]}}}],["few",{"_index":1501,"t":{"215":{"position":[[559,3]]},"221":{"position":[[2275,3]]},"540":{"position":[[1171,3]]}}}],["fewer",{"_index":2877,"t":{"756":{"position":[[169,5]]}}}],["ffd6",{"_index":315,"t":{"19":{"position":[[1730,4],[2047,4]]}}}],["fi",{"_index":2684,"t":{"579":{"position":[[2022,2]]},"585":{"position":[[326,3]]},"587":{"position":[[320,3]]},"589":{"position":[[317,3]]},"591":{"position":[[330,3]]},"650":{"position":[[2152,2]]},"685":{"position":[[2046,2]]},"687":{"position":[[1935,2]]},"689":{"position":[[1960,2]]},"691":{"position":[[2112,2]]},"693":{"position":[[1938,2]]},"695":{"position":[[1970,2]]},"697":{"position":[[2069,2]]},"714":{"position":[[341,3]]},"729":{"position":[[747,3]]},"731":{"position":[[743,3]]},"733":{"position":[[837,3]]}}}],["field",{"_index":565,"t":{"35":{"position":[[261,5]]},"65":{"position":[[677,7],[1308,5]]},"183":{"position":[[131,5]]},"247":{"position":[[884,5],[903,5],[2337,6],[2486,5]]},"410":{"position":[[72,5]]},"420":{"position":[[225,6]]},"506":{"position":[[594,5],[839,5]]},"540":{"position":[[1332,5],[1813,5],[1880,5],[1906,5]]}}}],["figur",{"_index":2242,"t":{"438":{"position":[[169,7],[383,7]]},"440":{"position":[[547,7]]},"454":{"position":[[23,7],[755,7]]}}}],["file",{"_index":197,"t":{"17":{"position":[[538,4],[716,6]]},"23":{"position":[[139,4],[167,4],[302,5],[477,5]]},"33":{"position":[[458,4],[636,5]]},"56":{"position":[[145,5],[412,5]]},"59":{"position":[[430,6]]},"79":{"position":[[257,4],[293,4],[361,6]]},"81":{"position":[[151,4],[206,4],[266,4]]},"83":{"position":[[112,4],[144,4]]},"89":{"position":[[392,4]]},"91":{"position":[[228,4],[351,4],[421,4]]},"101":{"position":[[225,5],[234,4],[272,4],[541,4],[602,4],[668,4],[769,4],[796,4],[1563,4],[2581,4],[2876,4],[3048,4],[3133,4]]},"110":{"position":[[734,5],[805,5],[939,5],[1448,5],[1514,5],[1679,6],[1799,6],[2244,5],[2779,6],[2811,5]]},"112":{"position":[[88,5],[1037,5],[1506,5],[2528,5]]},"114":{"position":[[111,5],[2313,5]]},"116":{"position":[[183,4],[376,4],[1206,5]]},"118":{"position":[[1944,5],[2559,4]]},"128":{"position":[[1151,6]]},"130":{"position":[[295,4],[331,4],[399,6]]},"135":{"position":[[228,4],[348,4],[456,4]]},"137":{"position":[[138,4],[164,4],[321,4],[353,4]]},"139":{"position":[[137,4],[240,4]]},"142":{"position":[[182,4],[237,4],[297,4]]},"160":{"position":[[334,4]]},"162":{"position":[[236,5],[245,4],[283,4],[552,4],[613,4],[679,4],[2575,4],[2812,4],[2833,4],[3006,4],[3027,4],[3426,4],[4046,4],[4172,4],[4289,4],[6888,4],[7513,4],[7937,4],[8109,4],[8194,4]]},"176":{"position":[[447,4]]},"181":{"position":[[15,4],[618,4]]},"185":{"position":[[1008,5],[1321,5]]},"187":{"position":[[731,4],[1060,4],[1376,4]]},"191":{"position":[[177,4],[242,5]]},"203":{"position":[[2285,4]]},"205":{"position":[[322,4]]},"217":{"position":[[743,4]]},"235":{"position":[[564,6]]},"245":{"position":[[845,4]]},"247":{"position":[[1345,4],[2008,4]]},"249":{"position":[[420,5],[612,4]]},"259":{"position":[[90,5]]},"263":{"position":[[22,4],[130,4]]},"271":{"position":[[115,5],[292,5]]},"277":{"position":[[532,5],[2080,4],[2229,4]]},"281":{"position":[[145,5],[188,4],[294,4],[805,5],[859,4],[1125,4],[1186,5],[1195,5]]},"283":{"position":[[65,5],[112,5],[440,5],[544,5]]},"285":{"position":[[78,4],[513,4]]},"291":{"position":[[141,6]]},"305":{"position":[[647,6]]},"319":{"position":[[913,4]]},"322":{"position":[[21,4],[185,4],[219,5],[449,4]]},"324":{"position":[[229,5],[387,5]]},"326":{"position":[[25,5],[91,4],[311,4],[361,4],[412,4],[443,5],[792,4],[1442,5]]},"330":{"position":[[250,5]]},"332":{"position":[[8,4],[81,4],[171,4],[249,4],[366,4],[462,4],[1032,5]]},"336":{"position":[[168,4],[262,5],[341,4],[581,4],[816,4]]},"338":{"position":[[4,4]]},"342":{"position":[[437,4]]},"344":{"position":[[385,4],[439,4],[491,4],[644,4],[698,4],[750,4]]},"348":{"position":[[33,4],[137,4]]},"380":{"position":[[304,5]]},"382":{"position":[[59,4]]},"398":{"position":[[549,4],[1262,4],[2929,5]]},"404":{"position":[[554,4],[640,4],[700,4]]},"428":{"position":[[525,4]]},"432":{"position":[[1150,5],[1304,5]]},"460":{"position":[[921,4]]},"464":{"position":[[274,4]]},"468":{"position":[[311,4],[2431,4],[2542,5]]},"472":{"position":[[553,4]]},"474":{"position":[[62,5]]},"488":{"position":[[130,6],[155,5],[299,4],[345,5]]},"490":{"position":[[129,6],[154,5],[285,4],[331,5]]},"510":{"position":[[211,4],[570,5]]},"548":{"position":[[327,5],[530,4],[679,4]]},"559":{"position":[[72,4]]},"561":{"position":[[72,4]]},"563":{"position":[[72,4]]},"565":{"position":[[72,4]]},"567":{"position":[[72,4]]},"569":{"position":[[72,4]]},"571":{"position":[[72,4]]},"573":{"position":[[72,4]]},"575":{"position":[[72,4]]},"577":{"position":[[72,4]]},"579":{"position":[[956,8],[1283,8],[1526,5],[1773,4],[1786,7],[1879,4],[1897,7],[2009,7]]},"583":{"position":[[72,4]]},"585":{"position":[[62,4]]},"587":{"position":[[62,4]]},"589":{"position":[[62,4]]},"591":{"position":[[62,4]]},"593":{"position":[[62,4]]},"595":{"position":[[62,4]]},"597":{"position":[[62,4]]},"599":{"position":[[62,4]]},"602":{"position":[[64,4]]},"604":{"position":[[150,4],[365,5]]},"606":{"position":[[64,4]]},"608":{"position":[[74,4]]},"610":{"position":[[168,4],[370,5],[417,5]]},"612":{"position":[[171,4],[326,4]]},"614":{"position":[[64,4]]},"616":{"position":[[64,4]]},"618":{"position":[[64,4]]},"620":{"position":[[108,5],[158,4]]},"622":{"position":[[64,4]]},"624":{"position":[[64,4]]},"626":{"position":[[64,4]]},"628":{"position":[[154,4]]},"630":{"position":[[64,4]]},"632":{"position":[[157,4]]},"634":{"position":[[64,4]]},"636":{"position":[[64,4]]},"638":{"position":[[74,4],[213,4]]},"640":{"position":[[74,4]]},"642":{"position":[[74,4]]},"644":{"position":[[74,4]]},"646":{"position":[[64,4],[279,4]]},"648":{"position":[[74,4],[185,4],[218,4]]},"650":{"position":[[168,4],[282,4],[343,5],[384,5],[1086,8],[1413,8],[1656,5],[1903,4],[1916,7],[2009,4],[2027,7],[2139,7]]},"652":{"position":[[154,4],[275,4],[333,5],[379,5],[506,5],[546,5]]},"654":{"position":[[154,4],[272,5],[314,5],[426,5],[462,5]]},"656":{"position":[[168,4],[284,4],[326,5]]},"658":{"position":[[95,5],[145,4],[293,5]]},"660":{"position":[[95,5],[109,5]]},"662":{"position":[[64,4]]},"665":{"position":[[72,4]]},"667":{"position":[[72,4]]},"669":{"position":[[72,4]]},"671":{"position":[[72,4],[200,4],[234,4],[454,5],[508,5]]},"673":{"position":[[72,4],[180,4],[221,6],[371,5],[405,5]]},"675":{"position":[[82,4]]},"677":{"position":[[72,4]]},"680":{"position":[[63,4],[114,4]]},"682":{"position":[[63,4]]},"685":{"position":[[132,4],[247,5],[278,5],[980,8],[1307,8],[1550,5],[1797,4],[1810,7],[1903,4],[1921,7],[2033,7],[2117,5],[2143,5],[2181,4],[2194,4],[2204,5],[2269,5],[2335,4],[2348,4]]},"687":{"position":[[58,4],[869,8],[1196,8],[1439,5],[1686,4],[1699,7],[1792,4],[1810,7],[1922,7]]},"689":{"position":[[58,4],[894,8],[1221,8],[1464,5],[1711,4],[1724,7],[1817,4],[1835,7],[1947,7],[2324,4],[2564,4],[2804,4]]},"691":{"position":[[174,4],[303,5],[344,5],[1046,8],[1373,8],[1616,5],[1863,4],[1876,7],[1969,4],[1987,7],[2099,7],[2183,5],[2209,5],[2252,4],[2270,4],[2280,5],[2350,5],[2426,4],[2444,4]]},"693":{"position":[[58,4],[872,8],[1199,8],[1442,5],[1689,4],[1702,7],[1795,4],[1813,7],[1925,7]]},"695":{"position":[[58,4],[904,8],[1231,8],[1474,5],[1721,4],[1734,7],[1827,4],[1845,7],[1957,7],[2369,4]]},"697":{"position":[[181,4],[301,5],[1003,8],[1330,8],[1573,5],[1820,4],[1833,7],[1926,4],[1944,7],[2056,7],[2146,5],[2192,4],[2208,5],[2276,5],[2344,4]]},"703":{"position":[[49,4],[181,5]]},"708":{"position":[[72,4]]},"710":{"position":[[72,4]]},"712":{"position":[[62,4]]},"714":{"position":[[62,4]]},"716":{"position":[[62,4]]},"718":{"position":[[62,4]]},"720":{"position":[[66,4],[102,5]]},"722":{"position":[[95,5]]},"724":{"position":[[80,4]]},"726":{"position":[[80,4]]},"729":{"position":[[52,5],[67,4],[180,4]]},"731":{"position":[[52,5],[67,4],[166,4]]},"733":{"position":[[52,5],[67,4],[145,5],[209,4],[384,5],[731,5],[871,5]]},"735":{"position":[[52,5],[67,4],[156,4]]},"737":{"position":[[52,5],[67,4],[193,4]]},"739":{"position":[[62,5],[77,4],[178,4]]},"741":{"position":[[62,5],[77,4],[179,4]]},"743":{"position":[[61,4]]},"745":{"position":[[52,5],[67,4],[177,4]]},"747":{"position":[[52,5],[67,4],[126,4],[235,5],[299,4],[486,5],[532,5],[770,5],[810,5]]},"749":{"position":[[62,5],[77,4],[233,4]]},"751":{"position":[[61,4]]},"753":{"position":[[52,5],[67,4],[482,4]]},"805":{"position":[[100,6]]}}}],["file=$path_to_fil",{"_index":1880,"t":{"319":{"position":[[952,18]]}}}],["file=/var/lib/rancher/k3s/agent/cli",{"_index":2462,"t":{"476":{"position":[[3204,38]]},"735":{"position":[[914,38],[2137,38]]},"747":{"position":[[1105,38],[2328,38]]}}}],["file=/var/lib/rancher/k3s/agent/serv",{"_index":2488,"t":{"476":{"position":[[4227,39],[4306,39]]},"735":{"position":[[1752,39],[1822,39],[2975,39],[3045,39]]},"747":{"position":[[1943,39],[2013,39],[3166,39],[3236,39]]}}}],["file=/var/lib/rancher/k3s/server/audit.yaml",{"_index":2065,"t":{"398":{"position":[[841,44]]},"472":{"position":[[982,44],[1322,44]]},"474":{"position":[[405,44],[1028,44]]}}}],["file=/var/lib/rancher/k3s/server/etc/egress",{"_index":2750,"t":{"610":{"position":[[1160,43]]},"612":{"position":[[1108,43]]},"614":{"position":[[977,43]]},"616":{"position":[[926,43]]},"618":{"position":[[939,43]]},"620":{"position":[[1052,43]]},"622":{"position":[[1013,43]]},"626":{"position":[[1086,43]]},"628":{"position":[[1067,43]]},"630":{"position":[[963,43]]},"632":{"position":[[1079,43]]},"634":{"position":[[944,43]]},"636":{"position":[[859,43]]},"646":{"position":[[1034,43]]},"652":{"position":[[1076,43]]},"654":{"position":[[992,43]]},"656":{"position":[[998,43]]},"729":{"position":[[1343,43]]},"731":{"position":[[1357,43]]},"733":{"position":[[1472,43]]}}}],["file=/var/lib/rancher/k3s/server/psa.yaml",{"_index":2060,"t":{"398":{"position":[[422,43],[720,42]]},"468":{"position":[[234,42]]},"474":{"position":[[284,42]]}}}],["file=/var/lib/rancher/k3s/server/tls/cli",{"_index":2407,"t":{"476":{"position":[[415,43],[1120,43],[1198,43],[2397,43],[2470,43]]},"610":{"position":[[1084,43],[1925,43],[2003,43]]},"612":{"position":[[1032,43],[1873,43],[1951,43]]},"614":{"position":[[901,43],[1742,43],[1820,43]]},"616":{"position":[[850,43],[1691,43],[1769,43]]},"618":{"position":[[863,43],[1704,43],[1782,43]]},"620":{"position":[[976,43],[1817,43],[1895,43]]},"622":{"position":[[937,43],[1778,43],[1856,43]]},"626":{"position":[[1010,43],[1851,43],[1929,43]]},"628":{"position":[[991,43],[1832,43],[1910,43]]},"630":{"position":[[887,43],[1728,43],[1806,43]]},"632":{"position":[[1003,43],[1844,43],[1922,43]]},"634":{"position":[[868,43],[1709,43],[1787,43]]},"636":{"position":[[783,43],[1624,43],[1702,43]]},"646":{"position":[[958,43],[1799,43],[1877,43]]},"652":{"position":[[1000,43],[1841,43],[1919,43]]},"654":{"position":[[916,43],[1757,43],[1835,43]]},"656":{"position":[[922,43],[1763,43],[1841,43]]},"667":{"position":[[881,43],[976,43],[1065,43],[1153,43]]},"669":{"position":[[949,43],[1044,43],[1133,43],[1221,43]]},"671":{"position":[[1034,43],[1129,43],[1218,43],[1306,43]]},"673":{"position":[[931,43],[1026,43],[1115,43],[1203,43]]},"729":{"position":[[1267,43],[2108,43],[2186,43]]},"731":{"position":[[1281,43],[2122,43],[2200,43]]},"733":{"position":[[1396,43],[2237,43],[2315,43]]}}}],["file=/var/lib/rancher/k3s/server/tls/request",{"_index":2429,"t":{"476":{"position":[[1331,44]]},"610":{"position":[[2136,44]]},"612":{"position":[[2084,44]]},"614":{"position":[[1953,44]]},"616":{"position":[[1902,44]]},"618":{"position":[[1915,44]]},"620":{"position":[[2028,44]]},"622":{"position":[[1989,44]]},"626":{"position":[[2062,44]]},"628":{"position":[[2043,44]]},"630":{"position":[[1939,44]]},"632":{"position":[[2055,44]]},"634":{"position":[[1920,44]]},"636":{"position":[[1835,44]]},"646":{"position":[[2010,44]]},"652":{"position":[[2052,44]]},"654":{"position":[[1968,44]]},"656":{"position":[[1974,44]]},"729":{"position":[[2319,44]]},"731":{"position":[[2333,44]]},"733":{"position":[[776,44],[916,44],[2448,44]]}}}],["file=/var/lib/rancher/k3s/server/tls/serv",{"_index":2439,"t":{"476":{"position":[[1826,44],[1917,44],[2638,43]]},"610":{"position":[[2692,44],[2774,44]]},"612":{"position":[[2640,44],[2722,44]]},"614":{"position":[[2509,44],[2591,44]]},"616":{"position":[[2458,44],[2540,44]]},"618":{"position":[[2471,44],[2553,44]]},"620":{"position":[[2584,44],[2666,44]]},"622":{"position":[[2545,44],[2627,44]]},"626":{"position":[[2618,44],[2700,44]]},"628":{"position":[[2599,44],[2681,44]]},"630":{"position":[[2495,44],[2577,44]]},"632":{"position":[[2611,44],[2693,44]]},"634":{"position":[[2476,44],[2558,44]]},"636":{"position":[[2391,44],[2473,44]]},"646":{"position":[[2566,44],[2648,44]]},"652":{"position":[[2608,44],[2690,44]]},"654":{"position":[[2524,44],[2606,44]]},"656":{"position":[[2530,44],[2612,44]]},"667":{"position":[[1243,43],[1332,43],[1421,43],[1509,43],[1788,43]]},"669":{"position":[[1311,43],[1400,43],[1489,43],[1577,43],[1856,43]]},"671":{"position":[[1396,43],[1485,43],[1574,43],[1662,43],[1941,43]]},"673":{"position":[[1293,43],[1382,43],[1471,43],[1559,43],[1838,43]]},"729":{"position":[[2875,44],[2957,44]]},"731":{"position":[[2889,44],[2971,44]]},"733":{"position":[[3004,44],[3086,44]]}}}],["file=/var/lib/rancher/k3s/server/tls/service.key",{"_index":2435,"t":{"476":{"position":[[1614,48],[1702,48],[2743,48]]},"610":{"position":[[2451,48],[2530,48]]},"612":{"position":[[2399,48],[2478,48]]},"614":{"position":[[2268,48],[2347,48]]},"616":{"position":[[2217,48],[2296,48]]},"618":{"position":[[2230,48],[2309,48]]},"620":{"position":[[2343,48],[2422,48]]},"622":{"position":[[2304,48],[2383,48]]},"626":{"position":[[2377,48],[2456,48]]},"628":{"position":[[2358,48],[2437,48]]},"630":{"position":[[2254,48],[2333,48]]},"632":{"position":[[2370,48],[2449,48]]},"634":{"position":[[2235,48],[2314,48]]},"636":{"position":[[2150,48],[2229,48]]},"646":{"position":[[2325,48],[2404,48]]},"652":{"position":[[2367,48],[2446,48]]},"654":{"position":[[2283,48],[2362,48]]},"656":{"position":[[2289,48],[2368,48]]},"667":{"position":[[1889,48]]},"669":{"position":[[1957,48]]},"671":{"position":[[2042,48]]},"673":{"position":[[1939,48]]},"729":{"position":[[2634,48],[2713,48]]},"731":{"position":[[2648,48],[2727,48]]},"733":{"position":[[2763,48],[2842,48]]}}}],["file=</path/to/ca",{"_index":2802,"t":{"685":{"position":[[229,17]]},"697":{"position":[[283,17]]}}}],["file=</path/to/key",{"_index":2803,"t":{"685":{"position":[[259,18]]}}}],["file=</path/to/p",{"_index":2813,"t":{"691":{"position":[[278,19],[320,19]]}}}],["file=<filenam",{"_index":2703,"t":{"604":{"position":[[255,15]]},"648":{"position":[[280,16]]},"671":{"position":[[304,16]]}}}],["file=<path/to/cli",{"_index":2780,"t":{"654":{"position":[[290,20]]},"733":{"position":[[360,20]]}}}],["file=<path/to/configuration/fil",{"_index":2762,"t":{"620":{"position":[[316,33]]}}}],["file=<path/to/fil",{"_index":2798,"t":{"673":{"position":[[238,19]]}}}],["file=<path/to/tl",{"_index":2775,"t":{"652":{"position":[[303,17],[357,17]]},"747":{"position":[[456,17],[510,17]]}}}],["file_pattern=log_level",{"_index":966,"t":{"81":{"position":[[115,22]]},"101":{"position":[[505,22]]},"142":{"position":[[146,22]]},"162":{"position":[[516,22]]}}}],["filenam",{"_index":2825,"t":{"720":{"position":[[118,10]]},"722":{"position":[[117,11]]}}}],["file|key",{"_index":2673,"t":{"579":{"position":[[947,8],[1274,8]]},"650":{"position":[[1077,8],[1404,8]]},"685":{"position":[[971,8],[1298,8]]},"687":{"position":[[860,8],[1187,8]]},"689":{"position":[[885,8],[1212,8]]},"691":{"position":[[1037,8],[1364,8]]},"693":{"position":[[863,8],[1190,8]]},"695":{"position":[[895,8],[1222,8]]},"697":{"position":[[994,8],[1321,8]]}}}],["filter",{"_index":967,"t":{"81":{"position":[[156,8]]},"101":{"position":[[546,8]]},"142":{"position":[[187,8]]},"162":{"position":[[557,8]]}}}],["final",{"_index":1733,"t":{"281":{"position":[[1089,8]]},"283":{"position":[[855,5]]}}}],["find",{"_index":2133,"t":{"410":{"position":[[868,4]]},"595":{"position":[[179,4]]},"800":{"position":[[156,7]]}}}],["fingerprint",{"_index":1290,"t":{"168":{"position":[[558,12]]}}}],["firewal",{"_index":678,"t":{"46":{"position":[[160,8],[216,8],[288,8],[364,8],[571,8]]},"48":{"position":[[49,10],[452,8]]},"362":{"position":[[509,8]]}}}],["firewall/secur",{"_index":2014,"t":{"360":{"position":[[943,17]]}}}],["firewalld",{"_index":675,"t":{"46":{"position":[[30,10],[59,9],[95,9]]}}}],["first",{"_index":136,"t":{"11":{"position":[[88,5]]},"39":{"position":[[230,5]]},"108":{"position":[[275,5]]},"110":{"position":[[89,5],[376,5],[2715,5]]},"112":{"position":[[2289,6]]},"114":{"position":[[2099,6]]},"118":{"position":[[3623,5]]},"174":{"position":[[42,5],[967,5]]},"179":{"position":[[2043,5]]},"211":{"position":[[9,5]]},"215":{"position":[[105,5],[141,5]]},"221":{"position":[[996,5],[1343,5]]},"275":{"position":[[84,5]]},"311":{"position":[[569,5]]},"332":{"position":[[520,5]]},"340":{"position":[[323,5]]},"348":{"position":[[0,6]]},"376":{"position":[[236,5]]},"378":{"position":[[50,5]]},"460":{"position":[[1034,5]]},"510":{"position":[[55,5]]},"544":{"position":[[157,5]]},"756":{"position":[[203,5]]}}}],["fit",{"_index":1355,"t":{"185":{"position":[[249,4]]},"555":{"position":[[1897,3]]}}}],["fix",{"_index":908,"t":{"73":{"position":[[110,5]]},"168":{"position":[[150,5]]},"199":{"position":[[495,5]]},"207":{"position":[[597,5]]},"213":{"position":[[786,5]]},"219":{"position":[[384,5],[495,5]]},"221":{"position":[[908,5],[1296,5],[1599,5]]}}}],["fl",{"_index":2041,"t":{"376":{"position":[[108,2]]},"378":{"position":[[264,2]]}}}],["flag",{"_index":469,"t":{"27":{"position":[[77,5]]},"44":{"position":[[593,4]]},"56":{"position":[[43,4]]},"75":{"position":[[1788,5]]},"79":{"position":[[106,5],[210,6]]},"81":{"position":[[0,4]]},"83":{"position":[[0,4]]},"85":{"position":[[0,4]]},"87":{"position":[[0,4]]},"89":{"position":[[0,4]]},"91":{"position":[[0,4]]},"93":{"position":[[0,4],[48,4],[107,4]]},"95":{"position":[[0,4]]},"97":{"position":[[0,4]]},"101":{"position":[[3183,4],[3256,4]]},"118":{"position":[[542,5],[1147,6],[1579,6],[2848,5],[4823,4]]},"124":{"position":[[124,4],[1085,5]]},"126":{"position":[[83,5],[396,5],[606,5],[712,6],[1263,5],[1510,5]]},"130":{"position":[[248,6]]},"135":{"position":[[0,4]]},"137":{"position":[[0,4]]},"139":{"position":[[0,4]]},"142":{"position":[[0,4]]},"144":{"position":[[0,4]]},"146":{"position":[[0,4]]},"148":{"position":[[0,4]]},"150":{"position":[[0,4]]},"152":{"position":[[0,4]]},"154":{"position":[[0,4],[58,5]]},"156":{"position":[[0,4],[45,4],[105,4],[175,4],[254,4],[348,4],[426,4],[485,4]]},"158":{"position":[[0,4]]},"160":{"position":[[0,4]]},"162":{"position":[[3473,7],[3492,4],[3541,7],[3560,4],[3618,7],[3637,4],[3705,7],[3724,4],[3798,7],[3817,4],[8244,4],[8317,4]]},"179":{"position":[[851,4],[1628,4],[2112,4],[2401,4]]},"181":{"position":[[380,5]]},"187":{"position":[[339,5],[375,4]]},"215":{"position":[[195,4],[570,5],[635,6],[706,5],[890,6]]},"221":{"position":[[1045,4],[2286,5],[2351,6],[2422,5],[2606,6]]},"223":{"position":[[206,5]]},"235":{"position":[[504,4]]},"247":{"position":[[945,4]]},"268":{"position":[[1330,4]]},"277":{"position":[[259,5]]},"279":{"position":[[648,6],[983,4],[1084,5],[1124,5],[1180,4],[1527,5]]},"281":{"position":[[754,5]]},"285":{"position":[[239,6]]},"303":{"position":[[899,4]]},"305":{"position":[[836,5],[878,5]]},"309":{"position":[[686,5]]},"311":{"position":[[352,4]]},"313":{"position":[[446,6]]},"330":{"position":[[170,5],[566,5]]},"380":{"position":[[82,5],[266,5]]},"382":{"position":[[22,6],[125,6]]},"404":{"position":[[1155,5]]},"406":{"position":[[263,5]]},"418":{"position":[[88,5]]},"420":{"position":[[278,6],[554,4]]},"422":{"position":[[229,4]]},"424":{"position":[[117,4],[380,4],[1386,4]]},"432":{"position":[[1387,5]]},"460":{"position":[[898,5]]},"464":{"position":[[18,4],[228,4]]},"468":{"position":[[163,4],[977,4]]},"510":{"position":[[94,4]]},"533":{"position":[[475,5]]}}}],["flannel",{"_index":86,"t":{"4":{"position":[[907,7]]},"77":{"position":[[428,8]]},"91":{"position":[[235,7],[276,7],[296,7],[336,7],[358,7],[402,7]]},"97":{"position":[[43,7],[61,7]]},"101":{"position":[[2902,7],[2958,7],[2978,7],[3033,7],[3055,7],[3114,7]]},"132":{"position":[[432,7],[450,7],[472,7]]},"150":{"position":[[456,7],[591,7],[650,7],[711,7]]},"160":{"position":[[43,7],[61,7],[174,7],[210,7],[245,7],[291,7],[319,7]]},"162":{"position":[[1906,7],[2117,7],[2183,7],[2251,7],[7963,7],[8019,7],[8039,7],[8094,7],[8116,7],[8175,7]]},"277":{"position":[[733,7],[826,7],[919,7],[1029,7],[1155,7],[1240,7]]},"285":{"position":[[339,7],[448,7],[539,7]]},"301":{"position":[[97,8]]},"303":{"position":[[0,7],[178,7],[304,7],[499,7],[878,7],[928,7],[1077,7],[1112,7],[1186,7],[1285,7],[1402,7],[1542,7],[1674,7],[1811,7],[1997,7],[2026,7]]},"305":{"position":[[702,7],[747,7],[777,7]]},"307":{"position":[[17,7]]},"311":{"position":[[1432,8]]},"317":{"position":[[388,7],[423,7]]},"360":{"position":[[133,7],[212,7],[457,7],[523,7],[1009,7]]},"362":{"position":[[227,7],[335,7],[411,7]]},"400":{"position":[[177,7]]}}}],["flexibl",{"_index":1354,"t":{"185":{"position":[[138,11]]}}}],["flocker",{"_index":2556,"t":{"516":{"position":[[480,7]]}}}],["focus",{"_index":1690,"t":{"275":{"position":[[10,7]]}}}],["folder",{"_index":401,"t":{"23":{"position":[[380,6]]},"85":{"position":[[75,6]]},"101":{"position":[[952,6]]},"118":{"position":[[3370,6],[3380,6]]},"135":{"position":[[1610,6],[1630,6]]},"146":{"position":[[109,6]]},"162":{"position":[[1272,6],[5558,6],[5579,6]]},"179":{"position":[[892,6],[1669,6],[2153,6],[2442,6]]}}}],["follow",{"_index":26,"t":{"4":{"position":[[58,9]]},"25":{"position":[[170,9]]},"46":{"position":[[130,9]]},"48":{"position":[[121,9]]},"54":{"position":[[536,9],[795,9]]},"61":{"position":[[16,10],[211,9]]},"63":{"position":[[68,9]]},"65":{"position":[[366,9]]},"69":{"position":[[4,9]]},"106":{"position":[[345,9]]},"110":{"position":[[795,9],[1257,9],[1669,9],[1789,9],[1947,9]]},"112":{"position":[[1186,9]]},"114":{"position":[[899,9],[1462,9]]},"116":{"position":[[632,9]]},"118":{"position":[[3676,9]]},"122":{"position":[[124,10],[278,6]]},"128":{"position":[[761,8]]},"132":{"position":[[4,9]]},"150":{"position":[[875,10]]},"168":{"position":[[82,9],[765,9]]},"185":{"position":[[778,9],[1510,9]]},"189":{"position":[[126,9],[326,9],[701,10],[900,9],[1514,10],[1738,9]]},"203":{"position":[[447,9],[819,9],[1348,9],[2307,9],[2798,9]]},"205":{"position":[[344,9],[835,9]]},"209":{"position":[[38,9]]},"213":{"position":[[473,9]]},"221":{"position":[[2113,7]]},"247":{"position":[[2499,6]]},"249":{"position":[[706,9]]},"259":{"position":[[0,6]]},"266":{"position":[[800,10]]},"268":{"position":[[172,9],[279,9],[900,10]]},"271":{"position":[[60,9]]},"273":{"position":[[1036,6]]},"277":{"position":[[650,9],[1306,9]]},"281":{"position":[[453,9]]},"291":{"position":[[113,9]]},"305":{"position":[[564,6]]},"307":{"position":[[316,6],[578,9],[696,6],[962,9]]},"311":{"position":[[342,9]]},"317":{"position":[[313,9]]},"319":{"position":[[792,9]]},"336":{"position":[[765,9]]},"340":{"position":[[1008,9]]},"350":{"position":[[199,9]]},"354":{"position":[[25,9]]},"356":{"position":[[143,6],[218,6]]},"364":{"position":[[176,9]]},"366":{"position":[[4,9]]},"372":{"position":[[122,9]]},"382":{"position":[[196,9]]},"398":{"position":[[367,9],[1276,9],[3218,9],[3270,10]]},"420":{"position":[[170,10]]},"424":{"position":[[738,7]]},"432":{"position":[[212,8],[300,9]]},"434":{"position":[[125,8]]},"436":{"position":[[48,9]]},"468":{"position":[[153,9],[967,9]]},"478":{"position":[[4,9]]},"508":{"position":[[12,8]]},"510":{"position":[[132,9]]},"512":{"position":[[86,10]]},"516":{"position":[[417,9]]},"533":{"position":[[983,8]]},"536":{"position":[[781,10],[966,10],[1273,6],[1416,6],[1498,6],[1640,9]]},"538":{"position":[[199,9]]},"540":{"position":[[331,9],[2157,9]]},"546":{"position":[[134,9]]},"548":{"position":[[1170,9]]},"604":{"position":[[26,6]]},"610":{"position":[[26,6]]},"612":{"position":[[26,6]]},"620":{"position":[[26,6]]},"628":{"position":[[26,6]]},"632":{"position":[[26,6]]},"650":{"position":[[26,6]]},"652":{"position":[[26,6]]},"654":{"position":[[26,6]]},"656":{"position":[[26,6]]},"658":{"position":[[26,6]]},"660":{"position":[[26,6]]},"685":{"position":[[26,6]]},"691":{"position":[[26,6]]},"697":{"position":[[40,6]]},"705":{"position":[[114,9]]},"720":{"position":[[34,9]]},"722":{"position":[[34,9]]},"724":{"position":[[44,9]]},"726":{"position":[[44,9]]},"753":{"position":[[606,8]]},"802":{"position":[[26,6]]},"810":{"position":[[26,6]]},"813":{"position":[[26,6]]},"817":{"position":[[26,6]]}}}],["foo.loc",{"_index":1726,"t":{"281":{"position":[[350,11],[534,11]]}}}],["foo=bar",{"_index":1000,"t":{"99":{"position":[[350,7]]},"281":{"position":[[376,9],[561,9]]},"283":{"position":[[600,7]]}}}],["foo=thre",{"_index":1747,"t":{"283":{"position":[[787,9],[945,9]]}}}],["footprint",{"_index":103,"t":{"6":{"position":[[82,10]]}}}],["forbid",{"_index":2886,"t":{"791":{"position":[[221,7]]}}}],["forc",{"_index":763,"t":{"54":{"position":[[719,5]]},"112":{"position":[[655,5],[2327,5]]},"114":{"position":[[727,5]]},"126":{"position":[[434,5],[644,5],[1307,5],[1554,5]]},"432":{"position":[[673,7],[1180,6]]}}}],["forget",{"_index":1143,"t":{"118":{"position":[[2376,6]]},"137":{"position":[[565,6]]},"162":{"position":[[3291,6]]}}}],["form",{"_index":112,"t":{"6":{"position":[[239,4]]},"189":{"position":[[264,5],[831,5],[1682,5]]},"432":{"position":[[185,4]]}}}],["format",{"_index":798,"t":{"59":{"position":[[600,9],[679,6],[914,6]]},"61":{"position":[[189,9],[255,9]]},"65":{"position":[[640,6]]},"166":{"position":[[54,7],[73,6]]},"168":{"position":[[17,6],[193,6],[386,9]]},"170":{"position":[[16,6]]},"174":{"position":[[193,7],[930,6]]},"176":{"position":[[402,7]]},"179":{"position":[[683,7],[1998,6],[2614,7]]},"189":{"position":[[18,6],[149,6],[336,7],[910,7],[1748,7]]},"213":{"position":[[836,6],[935,8]]}}}],["former",{"_index":1172,"t":{"118":{"position":[[4330,7]]}}}],["formerli",{"_index":2123,"t":{"408":{"position":[[125,9]]}}}],["forward",{"_index":504,"t":{"31":{"position":[[226,8]]},"295":{"position":[[376,10]]},"307":{"position":[[384,10],[669,10],[767,10],[1054,10]]},"410":{"position":[[280,7]]}}}],["forwardedhead",{"_index":1633,"t":{"249":{"position":[[881,17]]}}}],["found",{"_index":423,"t":{"25":{"position":[[533,5],[759,6]]},"110":{"position":[[32,5]]},"128":{"position":[[1534,5]]},"223":{"position":[[322,5]]},"235":{"position":[[337,5],[384,5]]},"268":{"position":[[453,5]]},"283":{"position":[[253,5]]},"322":{"position":[[26,5]]},"404":{"position":[[562,5],[1308,6]]},"406":{"position":[[184,5]]},"432":{"position":[[1990,6]]},"472":{"position":[[691,5]]},"480":{"position":[[595,5]]},"482":{"position":[[694,5]]},"484":{"position":[[575,5]]},"486":{"position":[[415,5]]},"488":{"position":[[590,5]]},"490":{"position":[[576,5]]},"492":{"position":[[800,5]]},"494":{"position":[[593,5]]},"500":{"position":[[667,5]]},"504":{"position":[[718,5]]},"579":{"position":[[209,5]]},"581":{"position":[[219,5]]}}}],["four",{"_index":1822,"t":{"309":{"position":[[703,4]]},"319":{"position":[[169,4]]}}}],["framework",{"_index":1560,"t":{"235":{"position":[[597,9]]}}}],["free",{"_index":2134,"t":{"410":{"position":[[875,4]]},"555":{"position":[[779,4]]}}}],["frequent",{"_index":459,"t":{"25":{"position":[[1464,10]]},"75":{"position":[[1585,10]]},"225":{"position":[[84,10]]}}}],["friendli",{"_index":1326,"t":{"179":{"position":[[1070,8]]}}}],["front",{"_index":1406,"t":{"199":{"position":[[67,5]]},"203":{"position":[[2104,5]]},"205":{"position":[[141,5]]},"217":{"position":[[375,5]]}}}],["frontend",{"_index":1432,"t":{"203":{"position":[[503,8],[516,8]]}}}],["fsck.repair=y",{"_index":719,"t":{"50":{"position":[[428,15]]}}}],["fsgroup",{"_index":2348,"t":{"468":{"position":[[1935,8],[3020,8],[3339,8],[3859,8]]}}}],["fssl",{"_index":1877,"t":{"319":{"position":[[682,4]]}}}],["full",{"_index":884,"t":{"65":{"position":[[1255,4]]},"110":{"position":[[406,4]]},"168":{"position":[[55,6]]},"174":{"position":[[397,4]]},"179":{"position":[[1578,4]]}}}],["fulli",{"_index":23,"t":{"4":{"position":[[9,5]]},"428":{"position":[[673,5]]},"460":{"position":[[460,5]]}}}],["function",{"_index":660,"t":{"44":{"position":[[347,9]]},"150":{"position":[[1090,8]]},"189":{"position":[[160,13]]},"266":{"position":[[752,8]]},"309":{"position":[[430,13]]},"406":{"position":[[147,13]]},"428":{"position":[[679,10]]},"460":{"position":[[736,13]]},"468":{"position":[[2314,8]]},"516":{"position":[[382,13]]}}}],["further",{"_index":1493,"t":{"213":{"position":[[428,7]]},"460":{"position":[[977,7]]},"555":{"position":[[1664,7]]}}}],["futur",{"_index":1552,"t":{"231":{"position":[[91,7]]},"332":{"position":[[1093,6]]},"478":{"position":[[224,6]]}}}],["gap",{"_index":756,"t":{"54":{"position":[[387,6]]},"253":{"position":[[331,3]]},"255":{"position":[[30,6],[85,6]]},"257":{"position":[[70,3]]},"261":{"position":[[56,3]]},"266":{"position":[[308,6],[442,6]]},"268":{"position":[[1392,3]]},"271":{"position":[[17,3],[99,3]]},"273":{"position":[[55,6]]},"478":{"position":[[77,3]]}}}],["garbag",{"_index":2525,"t":{"500":{"position":[[88,7],[328,7],[517,7]]}}}],["gate",{"_index":667,"t":{"44":{"position":[[563,4]]},"54":{"position":[[8,4]]},"108":{"position":[[1344,4]]},"118":{"position":[[8,4]]},"122":{"position":[[8,4]]},"178":{"position":[[8,4]]},"223":{"position":[[8,4]]},"249":{"position":[[8,4]]},"251":{"position":[[8,4]]},"281":{"position":[[8,4]]},"283":{"position":[[8,4]]},"303":{"position":[[2052,4]]},"311":{"position":[[8,4]]},"313":{"position":[[8,4]]},"424":{"position":[[8,4]]},"675":{"position":[[190,5]]}}}],["gates=jobtrackingwithfinalizers=tru",{"_index":2754,"t":{"610":{"position":[[1541,36]]},"612":{"position":[[1489,36]]},"614":{"position":[[1358,36]]},"616":{"position":[[1307,36]]},"618":{"position":[[1320,36]]},"620":{"position":[[1433,36]]},"622":{"position":[[1394,36]]},"626":{"position":[[1467,36]]},"628":{"position":[[1448,36]]},"630":{"position":[[1344,36]]},"632":{"position":[[1460,36]]},"634":{"position":[[1325,36]]},"636":{"position":[[1240,36]]},"646":{"position":[[1415,36]]},"652":{"position":[[1457,36]]},"654":{"position":[[1373,36]]},"656":{"position":[[1379,36]]},"667":{"position":[[1655,36]]},"669":{"position":[[1723,36]]},"671":{"position":[[1808,36]]},"673":{"position":[[1705,36]]},"729":{"position":[[1724,36]]},"731":{"position":[[1738,36]]},"733":{"position":[[1853,36]]}}}],["gates=rotatekubeletservercertificate=tru",{"_index":2800,"t":{"675":{"position":[[264,41]]},"751":{"position":[[216,41]]}}}],["gateway",{"_index":597,"t":{"35":{"position":[[947,7]]}}}],["gb",{"_index":1993,"t":{"358":{"position":[[167,2]]},"366":{"position":[[154,2],[178,2],[202,2],[229,2],[252,2]]},"372":{"position":[[260,2],[284,2],[308,2],[334,2],[357,2]]},"442":{"position":[[113,2],[202,2]]},"488":{"position":[[395,2]]},"490":{"position":[[381,2]]}}}],["gc",{"_index":2071,"t":{"398":{"position":[[1067,2]]},"474":{"position":[[631,2],[1254,2]]},"500":{"position":[[33,2]]},"665":{"position":[[187,2],[259,2],[395,2]]}}}],["gcm",{"_index":1029,"t":{"108":{"position":[[559,3]]}}}],["gd",{"_index":1418,"t":{"201":{"position":[[235,2]]},"203":{"position":[[1455,2],[2905,2]]},"205":{"position":[[942,2]]}}}],["gener",{"_index":129,"t":{"11":{"position":[[4,9]]},"23":{"position":[[9,8]]},"75":{"position":[[927,9]]},"77":{"position":[[1643,8]]},"108":{"position":[[215,9],[681,8]]},"110":{"position":[[128,10],[1887,8],[2006,11],[2341,8],[2500,8],[2741,9]]},"112":{"position":[[905,8],[973,8],[1145,8],[1246,11],[1452,8],[1856,8]]},"114":{"position":[[18,9],[1369,8]]},"116":{"position":[[692,10],[834,8]]},"174":{"position":[[1075,9]]},"178":{"position":[[232,10]]},"179":{"position":[[34,10],[334,8],[343,8],[578,9],[601,9],[654,10],[1829,9],[1839,8],[1859,9],[1933,8]]},"203":{"position":[[248,8]]},"213":{"position":[[400,9]]},"235":{"position":[[455,8]]},"241":{"position":[[3,8]]},"281":{"position":[[626,8]]},"319":{"position":[[281,8]]},"384":{"position":[[308,9]]},"510":{"position":[[157,8],[181,8],[225,9]]},"548":{"position":[[285,8]]}}}],["genrsa",{"_index":1114,"t":{"116":{"position":[[861,6]]}}}],["get.k3s.io",{"_index":422,"t":{"25":{"position":[[464,10]]},"266":{"position":[[384,11]]}}}],["ghcr.io",{"_index":804,"t":{"59":{"position":[[795,8]]}}}],["ghcr.io/stargz",{"_index":823,"t":{"61":{"position":[[284,15],[509,14]]}}}],["ghz",{"_index":2215,"t":{"434":{"position":[[264,3],[349,3],[412,3],[487,3],[570,3],[631,3]]},"442":{"position":[[107,3],[196,3]]}}}],["git",{"_index":2601,"t":{"536":{"position":[[1650,3]]}}}],["git_repo",{"_index":2557,"t":{"516":{"position":[[488,8]]}}}],["github",{"_index":1575,"t":{"243":{"position":[[362,6]]},"348":{"position":[[43,6]]},"432":{"position":[[892,7]]}}}],["github_url=https://github.com/kubernetes/dashboard/releas",{"_index":1751,"t":{"289":{"position":[[0,59]]},"297":{"position":[[48,59]]}}}],["github_url}/latest",{"_index":1755,"t":{"289":{"position":[[124,20]]},"297":{"position":[[172,20]]}}}],["give",{"_index":1933,"t":{"336":{"position":[[825,4]]},"424":{"position":[[392,5]]}}}],["given",{"_index":985,"t":{"89":{"position":[[122,5]]},"101":{"position":[[2209,5]]},"118":{"position":[[988,6],[1420,6],[4063,5]]},"162":{"position":[[7141,5]]},"179":{"position":[[626,6]]},"283":{"position":[[265,5]]},"476":{"position":[[77,5]]},"800":{"position":[[110,5]]}}}],["global",{"_index":2511,"t":{"492":{"position":[[84,6]]}}}],["glusterf",{"_index":2558,"t":{"516":{"position":[[497,9]]}}}],["go",{"_index":396,"t":{"23":{"position":[[290,2]]},"259":{"position":[[138,2]]},"263":{"position":[[337,2]]},"486":{"position":[[143,2]]}}}],["golang",{"_index":404,"t":{"23":{"position":[[499,6]]}}}],["googl",{"_index":810,"t":{"59":{"position":[[933,6]]}}}],["gpu",{"_index":444,"t":{"25":{"position":[[1081,3],[1267,5],[1514,3]]}}}],["grade",{"_index":1361,"t":{"185":{"position":[[366,5]]}}}],["grafana",{"_index":2240,"t":{"438":{"position":[[89,7],[334,8]]}}}],["grant",{"_index":2534,"t":{"506":{"position":[[339,7]]}}}],["great",{"_index":10,"t":{"2":{"position":[[95,5]]},"426":{"position":[[304,5]]}}}],["greater",{"_index":2178,"t":{"426":{"position":[[107,7]]},"634":{"position":[[382,7]]}}}],["grep",{"_index":424,"t":{"25":{"position":[[547,4]]},"116":{"position":[[774,4]]},"293":{"position":[[173,4]]},"307":{"position":[[1456,4],[1508,4]]},"398":{"position":[[3393,4]]},"406":{"position":[[670,4],[726,4]]},"579":{"position":[[141,4],[561,4],[604,4],[612,4],[777,4],[820,4],[848,6],[933,4],[977,6],[1062,4],[1101,6],[1177,6],[1260,4],[1304,6],[1387,4],[1426,6],[1507,6]]},"581":{"position":[[151,4]]},"602":{"position":[[240,4],[283,4]]},"604":{"position":[[303,4],[321,4],[329,4]]},"606":{"position":[[232,4],[250,4],[258,4]]},"610":{"position":[[470,4],[513,4]]},"612":{"position":[[453,4],[496,4]]},"614":{"position":[[327,4],[370,4]]},"616":{"position":[[293,4],[336,4]]},"618":{"position":[[306,4],[349,4]]},"620":{"position":[[397,4],[440,4]]},"622":{"position":[[304,4],[347,4]]},"624":{"position":[[292,4],[310,4],[318,4]]},"626":{"position":[[370,4],[413,4]]},"628":{"position":[[392,4],[435,4],[443,4]]},"630":{"position":[[288,4],[331,4],[339,4]]},"632":{"position":[[423,4],[466,4]]},"634":{"position":[[284,4],[327,4]]},"636":{"position":[[235,4],[278,4]]},"646":{"position":[[365,4],[408,4],[416,4]]},"650":{"position":[[691,4],[734,4],[742,4],[907,4],[950,4],[978,6],[1063,4],[1107,6],[1192,4],[1231,6],[1307,6],[1390,4],[1434,6],[1517,4],[1556,6],[1637,6]]},"652":{"position":[[432,4]]},"654":{"position":[[367,4],[410,4]]},"656":{"position":[[379,4],[422,4]]},"658":{"position":[[421,4],[464,4]]},"660":{"position":[[182,4]]},"662":{"position":[[973,4],[1016,4]]},"665":{"position":[[322,4],[374,4]]},"667":{"position":[[252,4],[304,4]]},"669":{"position":[[272,4],[324,4]]},"671":{"position":[[368,4],[420,4]]},"673":{"position":[[305,4],[357,4]]},"677":{"position":[[241,4],[259,4],[267,4]]},"680":{"position":[[239,4]]},"682":{"position":[[249,4],[292,4]]},"685":{"position":[[585,4],[628,4],[636,4],[801,4],[844,4],[872,6],[957,4],[1001,6],[1086,4],[1125,6],[1201,6],[1284,4],[1328,6],[1411,4],[1450,6],[1531,6]]},"687":{"position":[[474,4],[517,4],[525,4],[690,4],[733,4],[761,6],[846,4],[890,6],[975,4],[1014,6],[1090,6],[1173,4],[1217,6],[1300,4],[1339,6],[1420,6]]},"689":{"position":[[499,4],[542,4],[550,4],[715,4],[758,4],[786,6],[871,4],[915,6],[1000,4],[1039,6],[1115,6],[1198,4],[1242,6],[1325,4],[1364,6],[1445,6]]},"691":{"position":[[651,4],[694,4],[702,4],[867,4],[910,4],[938,6],[1023,4],[1067,6],[1152,4],[1191,6],[1267,6],[1350,4],[1394,6],[1477,4],[1516,6],[1597,6]]},"693":{"position":[[477,4],[520,4],[528,4],[693,4],[736,4],[764,6],[849,4],[893,6],[978,4],[1017,6],[1093,6],[1176,4],[1220,6],[1303,4],[1342,6],[1423,6]]},"695":{"position":[[509,4],[552,4],[560,4],[725,4],[768,4],[796,6],[881,4],[925,6],[1010,4],[1049,6],[1125,6],[1208,4],[1252,6],[1335,4],[1374,6],[1455,6]]},"697":{"position":[[608,4],[651,4],[659,4],[824,4],[867,4],[895,6],[980,4],[1024,6],[1109,4],[1148,6],[1224,6],[1307,4],[1351,6],[1434,4],[1473,6],[1554,6]]},"703":{"position":[[119,4],[162,4]]},"729":{"position":[[539,4],[630,4],[673,4],[697,4],[705,5]]},"731":{"position":[[525,4],[616,4],[659,4],[687,4],[695,5]]},"733":{"position":[[581,4],[672,4],[715,4],[739,4],[747,5]]},"735":{"position":[[489,4],[525,4]]},"737":{"position":[[546,4],[582,4]]},"747":{"position":[[707,4]]}}}],["group",{"_index":1327,"t":{"179":{"position":[[1119,6],[1138,6]]},"217":{"position":[[211,7]]},"360":{"position":[[961,5]]},"468":{"position":[[4837,5],[5184,5],[5507,5]]},"476":{"position":[[1459,5],[1482,5]]},"610":{"position":[[2264,5],[2287,5]]},"612":{"position":[[2212,5],[2235,5]]},"614":{"position":[[2081,5],[2104,5]]},"616":{"position":[[2030,5],[2053,5]]},"618":{"position":[[2043,5],[2066,5]]},"620":{"position":[[2156,5],[2179,5]]},"622":{"position":[[2117,5],[2140,5]]},"626":{"position":[[2190,5],[2213,5]]},"628":{"position":[[2171,5],[2194,5]]},"630":{"position":[[2067,5],[2090,5]]},"632":{"position":[[2183,5],[2206,5]]},"634":{"position":[[2048,5],[2071,5]]},"636":{"position":[[1963,5],[1986,5]]},"646":{"position":[[2138,5],[2161,5]]},"652":{"position":[[2180,5],[2203,5]]},"654":{"position":[[2096,5],[2119,5]]},"656":{"position":[[2102,5],[2125,5]]},"729":{"position":[[2447,5],[2470,5]]},"731":{"position":[[2461,5],[2484,5]]},"733":{"position":[[2576,5],[2599,5]]},"768":{"position":[[52,5]]}}}],["group=100",{"_index":870,"t":{"65":{"position":[[773,10]]}}}],["gt",{"_index":2664,"t":{"579":{"position":[[628,2]]},"650":{"position":[[758,2]]},"685":{"position":[[652,2]]},"687":{"position":[[541,2]]},"689":{"position":[[566,2]]},"691":{"position":[[718,2]]},"693":{"position":[[544,2]]},"695":{"position":[[576,2]]},"697":{"position":[[675,2]]},"729":{"position":[[579,2]]},"731":{"position":[[565,2]]},"733":{"position":[[621,2]]}}}],["guarante",{"_index":1915,"t":{"326":{"position":[[1539,9]]}}}],["guard",{"_index":1309,"t":{"174":{"position":[[460,7]]}}}],["guestbook",{"_index":2243,"t":{"438":{"position":[[351,9]]}}}],["guid",{"_index":1188,"t":{"126":{"position":[[920,5]]},"213":{"position":[[86,5],[1040,6]]},"259":{"position":[[42,5]]},"268":{"position":[[587,7],[881,5]]},"273":{"position":[[1066,6]]},"277":{"position":[[32,6]]},"287":{"position":[[18,5]]},"291":{"position":[[42,5]]},"303":{"position":[[608,5]]},"307":{"position":[[726,6]]},"372":{"position":[[144,5]]},"398":{"position":[[3197,5]]},"426":{"position":[[5,5]]},"432":{"position":[[32,6]]},"458":{"position":[[111,6],[231,5],[267,5]]},"508":{"position":[[26,6],[163,5]]},"555":{"position":[[69,6],[90,5],[194,5],[417,5],[1003,6],[1749,5],[1990,6]]}}}],["guidanc",{"_index":769,"t":{"56":{"position":[[304,9]]},"253":{"position":[[187,8],[274,8]]},"460":{"position":[[36,8]]},"555":{"position":[[118,8]]}}}],["gw",{"_index":1256,"t":{"150":{"position":[[537,4]]},"162":{"position":[[2046,4]]},"303":{"position":[[1423,2]]}}}],["h",{"_index":1322,"t":{"179":{"position":[[475,1]]}}}],["ha",{"_index":901,"t":{"71":{"position":[[157,2],[178,2]]},"124":{"position":[[799,2]]},"126":{"position":[[675,2],[996,2],[1357,2]]},"128":{"position":[[398,2],[1064,2],[1272,2]]},"185":{"position":[[717,2]]},"199":{"position":[[96,4]]},"201":{"position":[[85,2]]},"203":{"position":[[99,2],[2022,4],[2059,2]]},"205":{"position":[[59,4],[96,2]]},"207":{"position":[[254,2],[275,2]]},"209":{"position":[[14,2]]},"213":{"position":[[47,2]]},"219":{"position":[[88,2],[213,2]]},"221":{"position":[[22,4],[121,2],[616,2]]},"362":{"position":[[93,2]]},"533":{"position":[[350,2]]}}}],["half",{"_index":4,"t":{"2":{"position":[[41,4]]},"6":{"position":[[49,4],[154,4]]}}}],["hamper",{"_index":2532,"t":{"504":{"position":[[454,6]]}}}],["handl",{"_index":43,"t":{"4":{"position":[[265,7]]},"195":{"position":[[70,7]]},"251":{"position":[[83,6]]},"358":{"position":[[716,6]]}}}],["handle_error",{"_index":2658,"t":{"579":{"position":[[456,14],[493,14]]},"650":{"position":[[586,14],[623,14]]},"685":{"position":[[480,14],[517,14]]},"687":{"position":[[369,14],[406,14]]},"689":{"position":[[394,14],[431,14]]},"691":{"position":[[546,14],[583,14]]},"693":{"position":[[372,14],[409,14]]},"695":{"position":[[404,14],[441,14]]},"697":{"position":[[503,14],[540,14]]}}}],["handler",{"_index":441,"t":{"25":{"position":[[1014,8]]}}}],["haproxi",{"_index":1408,"t":{"199":{"position":[[166,8]]},"203":{"position":[[0,7],[14,7],[171,7],[372,7],[417,7],[927,8],[983,7],[1207,7],[1266,7]]}}}],["hard=imagefs.available<5%,nodefs.available<5",{"_index":2473,"t":{"476":{"position":[[3657,45]]},"735":{"position":[[1174,45],[2397,45]]},"747":{"position":[[1365,45],[2588,45]]}}}],["harden",{"_index":2062,"t":{"398":{"position":[[607,9],[2944,9],[3187,9]]},"458":{"position":[[221,9]]},"460":{"position":[[49,9]]},"474":{"position":[[115,6]]},"546":{"position":[[311,10],[450,10]]},"555":{"position":[[59,9],[80,9],[131,9],[259,8],[993,9]]}}}],["hardwar",{"_index":1988,"t":{"358":{"position":[[0,8]]},"364":{"position":[[0,8]]}}}],["harter",{"_index":777,"t":{"59":{"position":[[100,7]]}}}],["hash",{"_index":1099,"t":{"114":{"position":[[618,5]]},"128":{"position":[[292,7],[304,6],[575,7],[583,4],[1045,7],[1323,7]]},"168":{"position":[[211,5],[221,4],[993,4],[1071,4],[1083,4],[1111,4]]},"174":{"position":[[1027,4]]},"179":{"position":[[716,5]]},"432":{"position":[[471,4]]}}}],["hash>::<credenti",{"_index":1281,"t":{"168":{"position":[[119,20]]}}}],["hat/cento",{"_index":1985,"t":{"356":{"position":[[113,11]]}}}],["have",{"_index":1469,"t":{"203":{"position":[[2071,6]]},"205":{"position":[[108,6]]},"243":{"position":[[11,6]]},"460":{"position":[[784,6]]}}}],["header",{"_index":885,"t":{"65":{"position":[[1273,7]]},"110":{"position":[[889,6],[911,6]]},"476":{"position":[[1376,6],[1412,7]]},"610":{"position":[[2181,6],[2217,7]]},"612":{"position":[[2129,6],[2165,7]]},"614":{"position":[[1998,6],[2034,7]]},"616":{"position":[[1947,6],[1983,7]]},"618":{"position":[[1960,6],[1996,7]]},"620":{"position":[[2073,6],[2109,7]]},"622":{"position":[[2034,6],[2070,7]]},"626":{"position":[[2107,6],[2143,7]]},"628":{"position":[[2088,6],[2124,7]]},"630":{"position":[[1984,6],[2020,7]]},"632":{"position":[[2100,6],[2136,7]]},"634":{"position":[[1965,6],[2001,7]]},"636":{"position":[[1880,6],[1916,7]]},"646":{"position":[[2055,6],[2091,7]]},"652":{"position":[[2097,6],[2133,7]]},"654":{"position":[[2013,6],[2049,7]]},"656":{"position":[[2019,6],[2055,7]]},"729":{"position":[[2364,6],[2400,7]]},"731":{"position":[[2378,6],[2414,7]]},"733":{"position":[[821,6],[961,6],[2493,6],[2529,7]]}}}],["headers=x",{"_index":2431,"t":{"476":{"position":[[1465,9],[1513,9]]},"610":{"position":[[2270,9],[2318,9]]},"612":{"position":[[2218,9],[2266,9]]},"614":{"position":[[2087,9],[2135,9]]},"616":{"position":[[2036,9],[2084,9]]},"618":{"position":[[2049,9],[2097,9]]},"620":{"position":[[2162,9],[2210,9]]},"622":{"position":[[2123,9],[2171,9]]},"626":{"position":[[2196,9],[2244,9]]},"628":{"position":[[2177,9],[2225,9]]},"630":{"position":[[2073,9],[2121,9]]},"632":{"position":[[2189,9],[2237,9]]},"634":{"position":[[2054,9],[2102,9]]},"636":{"position":[[1969,9],[2017,9]]},"646":{"position":[[2144,9],[2192,9]]},"652":{"position":[[2186,9],[2234,9]]},"654":{"position":[[2102,9],[2150,9]]},"656":{"position":[[2108,9],[2156,9]]},"729":{"position":[[2453,9],[2501,9]]},"731":{"position":[[2467,9],[2515,9]]},"733":{"position":[[2582,9],[2630,9]]}}}],["headless",{"_index":419,"t":{"25":{"position":[[385,8]]}}}],["health",{"_index":1857,"t":{"315":{"position":[[450,6]]}}}],["healthz",{"_index":2477,"t":{"476":{"position":[[3796,7]]},"735":{"position":[[1313,7],[2536,7]]},"747":{"position":[[1504,7],[2727,7]]}}}],["hello=world",{"_index":1001,"t":{"99":{"position":[[373,11]]}}}],["helm",{"_index":62,"t":{"4":{"position":[[511,4]]},"19":{"position":[[929,4]]},"63":{"position":[[120,4],[175,4],[192,4],[304,4]]},"132":{"position":[[346,4]]},"154":{"position":[[322,4],[346,4]]},"162":{"position":[[6279,4],[6316,4]]},"181":{"position":[[191,4],[551,4],[712,4]]},"215":{"position":[[772,4]]},"221":{"position":[[2488,4]]},"245":{"position":[[0,4],[62,4],[145,5],[459,5],[576,4],[659,4],[780,4]]},"247":{"position":[[90,4],[929,4],[975,4],[1007,4],[1119,4],[1172,4],[1245,4],[1370,4],[1700,4],[1787,4],[1870,4],[2510,4],[2554,4]]},"249":{"position":[[384,4]]},"251":{"position":[[33,4],[97,4],[108,4],[143,4],[170,4],[251,4],[396,4],[437,4]]},"334":{"position":[[31,4],[100,5]]},"404":{"position":[[1041,4]]}}}],["helm.cattle.io/v1",{"_index":1590,"t":{"247":{"position":[[597,17]]},"249":{"position":[[737,17]]}}}],["helm:v0.3.0",{"_index":1611,"t":{"247":{"position":[[1733,11]]}}}],["helmchart",{"_index":1581,"t":{"245":{"position":[[679,9]]},"247":{"position":[[4,9],[257,9],[464,9],[621,9],[874,9]]},"249":{"position":[[114,10],[298,10],[431,9],[466,9]]}}}],["helmchartconfig",{"_index":1629,"t":{"249":{"position":[[187,15],[218,15],[480,15],[761,15]]},"404":{"position":[[795,15],[935,16]]}}}],["help",{"_index":944,"t":{"77":{"position":[[57,4],[1689,4],[1722,4]]},"179":{"position":[[468,5],[482,4]]},"187":{"position":[[744,4]]},"243":{"position":[[323,5]]},"268":{"position":[[1359,4]]},"279":{"position":[[978,4]]},"287":{"position":[[29,4]]},"426":{"position":[[16,4]]},"432":{"position":[[1572,5]]},"555":{"position":[[212,4]]},"689":{"position":[[2168,4],[2221,4],[2256,4],[2408,4],[2461,4],[2496,4],[2648,4],[2701,4],[2736,4]]},"695":{"position":[[2213,4],[2266,4],[2301,4]]}}}],["henc",{"_index":2498,"t":{"482":{"position":[[462,5]]},"492":{"position":[[553,6]]}}}],["here",{"_index":407,"t":{"23":{"position":[[524,4]]},"128":{"position":[[1780,5]]},"251":{"position":[[272,4]]},"257":{"position":[[233,5]]},"273":{"position":[[592,4]]},"326":{"position":[[731,4]]},"358":{"position":[[104,5]]},"406":{"position":[[190,5]]},"426":{"position":[[341,5]]},"428":{"position":[[1120,4]]},"468":{"position":[[373,4],[1322,4],[2506,4]]},"470":{"position":[[261,4]]},"516":{"position":[[834,5]]},"518":{"position":[[269,5]]}}}],["here'",{"_index":1585,"t":{"247":{"position":[[114,6]]}}}],["hierarchi",{"_index":2252,"t":{"440":{"position":[[368,10]]}}}],["high",{"_index":854,"t":{"65":{"position":[[249,5]]},"67":{"position":[[42,4]]},"73":{"position":[[7,4]]},"118":{"position":[[886,4]]},"124":{"position":[[14,4]]},"126":{"position":[[14,4]]},"185":{"position":[[1057,4],[1389,4]]},"199":{"position":[[78,4]]},"203":{"position":[[2004,4]]},"205":{"position":[[41,4]]},"207":{"position":[[40,4]]},"213":{"position":[[1141,4]]},"268":{"position":[[91,4],[511,4],[552,4],[843,4]]},"315":{"position":[[490,5]]},"360":{"position":[[680,4]]},"364":{"position":[[121,4]]},"366":{"position":[[73,4]]},"500":{"position":[[392,4]]},"542":{"position":[[9,4]]}}}],["higher",{"_index":239,"t":{"19":{"position":[[227,6]]},"39":{"position":[[861,6]]}}}],["highli",{"_index":1364,"t":{"185":{"position":[[586,6]]},"221":{"position":[[1920,6]]},"454":{"position":[[1025,6]]},"496":{"position":[[99,6]]},"536":{"position":[[736,6]]}}}],["histor",{"_index":1263,"t":{"150":{"position":[[1398,10]]},"324":{"position":[[282,10]]}}}],["hmac",{"_index":1030,"t":{"108":{"position":[[567,4]]}}}],["hold",{"_index":976,"t":{"85":{"position":[[85,4]]},"101":{"position":[[962,4]]},"146":{"position":[[119,4]]},"162":{"position":[[1282,4]]},"179":{"position":[[902,4],[1679,4],[2163,4],[2452,4]]}}}],["hole",{"_index":1661,"t":{"266":{"position":[[589,4]]}}}],["home}/.rancher/k3",{"_index":1247,"t":{"146":{"position":[[76,20]]},"162":{"position":[[1327,20]]},"179":{"position":[[945,20],[1722,20],[2206,20],[2495,20]]}}}],["hop",{"_index":1854,"t":{"315":{"position":[[377,5]]}}}],["host",{"_index":95,"t":{"4":{"position":[[1038,4]]},"8":{"position":[[143,4]]},"27":{"position":[[264,4]]},"29":{"position":[[143,4]]},"31":{"position":[[145,5],[203,4],[368,4],[457,5]]},"35":{"position":[[69,4]]},"67":{"position":[[230,4],[357,4]]},"95":{"position":[[148,4]]},"101":{"position":[[3398,4]]},"139":{"position":[[388,5]]},"150":{"position":[[531,5]]},"158":{"position":[[204,4]]},"162":{"position":[[2040,5],[8717,4]]},"189":{"position":[[1769,4],[1794,4],[1819,4]]},"221":{"position":[[777,4]]},"257":{"position":[[137,5]]},"305":{"position":[[73,5],[292,5]]},"307":{"position":[[603,5],[987,5],[1275,4]]},"408":{"position":[[177,4],[388,6]]},"410":{"position":[[880,4],[919,4]]},"414":{"position":[[184,4]]},"416":{"position":[[42,4]]},"420":{"position":[[285,5]]},"428":{"position":[[809,4]]},"440":{"position":[[64,4]]},"456":{"position":[[56,7]]},"460":{"position":[[521,4],[548,4]]},"462":{"position":[[23,4]]},"536":{"position":[[792,4],[854,4],[875,5]]}}}],["host>.nod",{"_index":929,"t":{"75":{"position":[[1226,11]]}}}],["hostipc",{"_index":2336,"t":{"468":{"position":[[1735,8],[2862,8],[3363,8]]},"779":{"position":[[126,7]]}}}],["hostnam",{"_index":734,"t":{"52":{"position":[[513,8]]},"75":{"position":[[436,8],[1602,10],[1719,8]]},"144":{"position":[[379,9]]},"162":{"position":[[1153,9]]},"201":{"position":[[275,9],[423,9],[515,9]]},"217":{"position":[[66,8],[959,8],[1112,9]]},"221":{"position":[[1520,8],[2238,8]]},"247":{"position":[[825,9]]},"352":{"position":[[31,9],[78,9],[94,9]]},"422":{"position":[[83,8],[118,8]]},"428":{"position":[[1579,9],[1625,10],[1724,8]]},"476":{"position":[[3829,8]]},"735":{"position":[[1346,8],[2569,8]]},"743":{"position":[[157,8]]},"747":{"position":[[1537,8],[2760,8]]}}}],["hostnetwork",{"_index":2334,"t":{"468":{"position":[[1702,12],[2843,12],[3377,12]]},"781":{"position":[[126,11]]}}}],["hostpath",{"_index":2565,"t":{"518":{"position":[[284,8]]},"795":{"position":[[142,8]]}}}],["hostpid",{"_index":2338,"t":{"468":{"position":[[1764,8],[2877,8],[3395,8]]},"777":{"position":[[126,7]]}}}],["hostport",{"_index":2113,"t":{"404":{"position":[[396,8]]},"468":{"position":[[3409,10],[3883,10]]},"797":{"position":[[147,8]]}}}],["hosts'",{"_index":594,"t":{"35":{"position":[[914,7]]}}}],["hour",{"_index":1139,"t":{"118":{"position":[[2141,5]]},"135":{"position":[[876,5]]},"162":{"position":[[4741,5]]}}}],["hr9p5",{"_index":2844,"t":{"735":{"position":[[695,5],[1391,5]]},"747":{"position":[[886,5],[1582,5]]}}}],["http",{"_index":176,"t":{"17":{"position":[[90,4]]},"61":{"position":[[588,4]]},"135":{"position":[[1673,5]]},"144":{"position":[[73,5],[102,5]]},"162":{"position":[[763,5],[798,5],[5627,5]]},"203":{"position":[[2228,4]]},"205":{"position":[[265,4]]},"247":{"position":[[1050,5],[1318,5]]},"346":{"position":[[468,7],[524,6]]},"404":{"position":[[20,4]]},"608":{"position":[[176,5]]}}}],["http.createserver(function(req",{"_index":830,"t":{"61":{"position":[[612,31]]}}}],["http://localhost:8001/api/v1/namespaces/kubernet",{"_index":1772,"t":{"295":{"position":[[137,50]]}}}],["http://mycustomreg.com:5000",{"_index":1960,"t":{"346":{"position":[[190,29],[385,29]]}}}],["http_proxi",{"_index":186,"t":{"17":{"position":[[326,11]]}}}],["http_proxy=http://your",{"_index":220,"t":{"17":{"position":[[1072,22]]}}}],["https://%{kubernetes_api}%/static/charts/traefik",{"_index":1625,"t":{"247":{"position":[[2409,48]]}}}],["https://10.10.10.100:6443",{"_index":1458,"t":{"203":{"position":[[1481,25]]}}}],["https://10.10.10.99:6443",{"_index":1479,"t":{"203":{"position":[[2931,24]]},"205":{"position":[[968,24]]}}}],["https://<etcd",{"_index":2043,"t":{"378":{"position":[[343,13]]}}}],["https://<ip",{"_index":1529,"t":{"221":{"position":[[1505,11],[2223,11]]}}}],["https://charts.bitnami.com/bitnami",{"_index":1591,"t":{"247":{"position":[[689,34]]}}}],["https://charts.rancher.io",{"_index":839,"t":{"63":{"position":[[149,25]]}}}],["https://etcd",{"_index":1397,"t":{"189":{"position":[[1756,12]]}}}],["https://get.k3s.io",{"_index":256,"t":{"19":{"position":[[623,18]]},"41":{"position":[[455,18]]},"203":{"position":[[1413,18],[2863,18]]},"205":{"position":[[900,18]]},"213":{"position":[[598,18]]},"215":{"position":[[410,18]]},"221":{"position":[[1173,18],[1441,18],[2162,18]]},"268":{"position":[[921,18]]},"271":{"position":[[398,18]]},"277":{"position":[[88,18],[769,18],[871,18],[975,18],[1114,18],[1209,18],[1368,18],[1484,18],[1604,18],[1700,18]]},"285":{"position":[[256,18]]},"376":{"position":[[111,18]]},"378":{"position":[[267,18]]},"428":{"position":[[152,19],[226,18],[1179,18]]},"432":{"position":[[88,18],[231,18],[2452,18]]},"510":{"position":[[400,18]]},"548":{"position":[[826,18],[1014,18],[1199,18]]}}}],["https://github.com/go",{"_index":1394,"t":{"189":{"position":[[1073,21]]}}}],["https://github.com/k3",{"_index":535,"t":{"33":{"position":[[231,22]]},"110":{"position":[[2544,22]]},"112":{"position":[[1908,22]]},"114":{"position":[[1675,22]]},"279":{"position":[[439,22]]}}}],["https://github.com/kubernetes/enhancements/tree/master/keps/sig",{"_index":2163,"t":{"424":{"position":[[206,64]]}}}],["https://github.com/rancher/system",{"_index":2604,"t":{"538":{"position":[[235,33]]}}}],["https://godoc.org/github.com/lib/pq",{"_index":1390,"t":{"189":{"position":[[497,36]]}}}],["https://helm.sh/docs/intro/quickstart",{"_index":1579,"t":{"245":{"position":[[361,39]]}}}],["https://k3s.example.com",{"_index":1704,"t":{"277":{"position":[[1422,23],[1570,23]]},"279":{"position":[[760,23]]}}}],["https://mycustomreg.com:5000",{"_index":1935,"t":{"340":{"position":[[138,30],[577,30]]},"344":{"position":[[186,30],[549,30]]}}}],["https://mycustomreg.com:5000/rancher/coredn",{"_index":1941,"t":{"340":{"position":[[700,44]]}}}],["https://nvidia.github.io/libnvidia",{"_index":412,"t":{"25":{"position":[[201,34]]}}}],["https://raw.githubusercontent.com/kubernetes/dashboard/${version_kube_dashboard}/aio/deploy/recommended.yaml",{"_index":1758,"t":{"289":{"position":[[205,108]]},"297":{"position":[[252,108]]}}}],["https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml",{"_index":2581,"t":{"524":{"position":[[282,79]]}}}],["https://registry.example.com:5000",{"_index":1948,"t":{"340":{"position":[[1222,35]]}}}],["https://releases.rancher.com/instal",{"_index":251,"t":{"19":{"position":[[516,36]]}}}],["https://rootlesscontaine.r",{"_index":496,"t":{"29":{"position":[[195,28]]},"37":{"position":[[140,28]]}}}],["https://rootlesscontaine.rs/get",{"_index":530,"t":{"33":{"position":[[33,35]]}}}],["https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3",{"_index":760,"t":{"54":{"position":[[624,60]]}}}],["https://server",{"_index":1516,"t":{"219":{"position":[[477,14]]}}}],["https://tailscale.com/install.sh",{"_index":1878,"t":{"319":{"position":[[687,32]]}}}],["https://update.k3s.io/v1",{"_index":2202,"t":{"432":{"position":[[2169,24]]},"540":{"position":[[2335,24]]}}}],["https_proxi",{"_index":187,"t":{"17":{"position":[[338,11]]}}}],["https_proxy=http://your",{"_index":222,"t":{"17":{"position":[[1118,23]]}}}],["human",{"_index":1325,"t":{"179":{"position":[[1064,5]]}}}],["hybrid",{"_index":517,"t":{"31":{"position":[[594,6],[762,6]]}}}],["i.",{"_index":216,"t":{"17":{"position":[[938,5]]},"311":{"position":[[1403,4]]}}}],["id",{"_index":290,"t":{"19":{"position":[[1210,2]]},"75":{"position":[[1298,4],[1679,2],[1785,2],[1817,2]]},"87":{"position":[[92,2],[106,2]]},"101":{"position":[[1077,2],[1100,2]]},"162":{"position":[[6402,2],[6425,2]]},"179":{"position":[[1624,3],[2070,3],[2356,3]]},"352":{"position":[[175,2]]},"604":{"position":[[785,2],[1067,2],[1349,2],[1631,2],[1913,2],[2195,2],[2477,2]]},"606":{"position":[[766,2],[1048,2],[1330,2],[1612,2],[1894,2],[2176,2],[2458,2]]},"624":{"position":[[779,2],[1061,2],[1343,2],[1625,2],[1907,2],[2189,2],[2471,2]]},"677":{"position":[[751,2],[1033,2],[1315,2],[1597,2],[1879,2],[2161,2],[2443,2]]},"689":{"position":[[2117,2],[2357,2],[2597,2]]},"695":{"position":[[2162,2]]}}}],["idea",{"_index":1551,"t":{"231":{"position":[[79,4]]}}}],["ideal",{"_index":2384,"t":{"472":{"position":[[256,8]]}}}],["ident",{"_index":1277,"t":{"166":{"position":[[139,8]]},"168":{"position":[[797,8]]},"279":{"position":[[1545,11]]},"303":{"position":[[239,9]]},"510":{"position":[[807,11]]}}}],["identifi",{"_index":620,"t":{"39":{"position":[[643,8]]},"128":{"position":[[1178,8]]},"168":{"position":[[172,10]]},"724":{"position":[[94,10]]},"726":{"position":[[94,10]]},"747":{"position":[[141,8]]},"756":{"position":[[26,8]]}}}],["idl",{"_index":2074,"t":{"398":{"position":[[1162,4]]},"474":{"position":[[726,4],[1349,4]]},"737":{"position":[[361,4],[609,4]]}}}],["ifac",{"_index":993,"t":{"91":{"position":[[243,5]]},"101":{"position":[[2910,5]]},"162":{"position":[[7971,5]]}}}],["ifnotpres",{"_index":2572,"t":{"522":{"position":[[154,12]]},"528":{"position":[[154,12]]}}}],["ignor",{"_index":1541,"t":{"223":{"position":[[495,8]]},"311":{"position":[[174,6]]},"332":{"position":[[110,6]]}}}],["iii",{"_index":2266,"t":{"442":{"position":[[209,3]]}}}],["illustr",{"_index":1699,"t":{"277":{"position":[[629,10]]}}}],["imag",{"_index":291,"t":{"19":{"position":[[1213,5]]},"25":{"position":[[1205,6]]},"52":{"position":[[367,6],[685,6]]},"59":{"position":[[8,6],[277,5],[348,5],[481,7],[582,5],[673,5]]},"61":{"position":[[199,7],[278,5],[406,6],[502,6]]},"89":{"position":[[203,5],[262,5]]},"101":{"position":[[1273,5],[1461,5],[2286,5],[2331,5]]},"162":{"position":[[6598,5],[6786,5],[7218,5],[7263,5],[7655,6]]},"247":{"position":[[1667,5]]},"249":{"position":[[848,6]]},"255":{"position":[[261,6]]},"261":{"position":[[171,6]]},"263":{"position":[[11,6],[142,6],[243,6]]},"266":{"position":[[83,6],[122,6],[253,7]]},"271":{"position":[[103,6]]},"273":{"position":[[105,6],[276,5],[344,6],[785,6],[1003,6]]},"336":{"position":[[91,6]]},"340":{"position":[[236,5],[442,6],[689,5],[844,5],[1061,5],[1322,5],[1390,5],[1491,5]]},"348":{"position":[[101,6],[234,6],[368,6]]},"438":{"position":[[548,5]]},"454":{"position":[[877,7],[985,5],[1080,5]]},"456":{"position":[[384,5]]},"476":{"position":[[4198,5]]},"522":{"position":[[110,6]]},"528":{"position":[[110,6]]},"540":{"position":[[703,6],[1039,6],[1110,6]]},"735":{"position":[[1723,5],[2946,5]]},"747":{"position":[[1914,5],[3137,5]]},"810":{"position":[[72,5]]}}}],["image=rancher/mirror",{"_index":2856,"t":{"735":{"position":[[1551,22],[2774,22]]},"747":{"position":[[1742,22],[2965,22]]}}}],["imagepullpolici",{"_index":2571,"t":{"522":{"position":[[137,16]]},"528":{"position":[[137,16]]}}}],["images.txt",{"_index":1961,"t":{"348":{"position":[[22,10],[126,10]]}}}],["images/$1",{"_index":1950,"t":{"340":{"position":[[1307,10]]}}}],["images/coredn",{"_index":1947,"t":{"340":{"position":[[1160,14]]}}}],["immedi",{"_index":1167,"t":{"118":{"position":[[4190,9]]},"390":{"position":[[102,11]]}}}],["impact",{"_index":1856,"t":{"315":{"position":[[439,6]]},"358":{"position":[[401,6]]},"452":{"position":[[43,6]]}}}],["imperson",{"_index":2881,"t":{"770":{"position":[[53,12]]}}}],["implement",{"_index":1779,"t":{"303":{"position":[[65,10]]},"406":{"position":[[67,14]]},"408":{"position":[[305,15],[502,15]]},"555":{"position":[[1641,15]]},"700":{"position":[[106,11]]}}}],["implicitli",{"_index":1299,"t":{"170":{"position":[[163,10]]}}}],["import",{"_index":1722,"t":{"279":{"position":[[1096,9]]},"291":{"position":[[0,10]]},"307":{"position":[[216,9]]},"360":{"position":[[788,9]]},"498":{"position":[[112,9]]},"500":{"position":[[110,9]]},"502":{"position":[[71,9]]},"536":{"position":[[1171,8]]},"540":{"position":[[1175,9]]}}}],["inaccess",{"_index":2514,"t":{"492":{"position":[[329,12]]}}}],["inbound",{"_index":589,"t":{"35":{"position":[[819,7]]},"46":{"position":[[454,7]]},"48":{"position":[[335,7]]}}}],["includ",{"_index":53,"t":{"4":{"position":[[421,9],[885,10]]},"17":{"position":[[989,8]]},"19":{"position":[[4,8],[126,8],[234,7]]},"25":{"position":[[1617,7]]},"27":{"position":[[368,9]]},"31":{"position":[[278,8]]},"39":{"position":[[396,9]]},"44":{"position":[[293,8]]},"59":{"position":[[987,9]]},"65":{"position":[[132,9],[1281,9]]},"112":{"position":[[729,10]]},"114":{"position":[[2179,9]]},"116":{"position":[[386,8]]},"128":{"position":[[25,8]]},"170":{"position":[[23,8]]},"179":{"position":[[691,9]]},"245":{"position":[[565,8]]},"301":{"position":[[55,9]]},"303":{"position":[[2071,8]]},"305":{"position":[[694,7]]},"322":{"position":[[601,9]]},"350":{"position":[[311,7]]},"372":{"position":[[33,9]]},"374":{"position":[[83,9]]},"404":{"position":[[1191,7],[1416,8]]},"406":{"position":[[4,8]]},"408":{"position":[[273,7]]},"428":{"position":[[443,9],[710,9]]},"432":{"position":[[2308,8]]},"434":{"position":[[698,8]]},"438":{"position":[[391,9],[474,7]]},"456":{"position":[[361,7]]},"466":{"position":[[217,7]]},"468":{"position":[[2129,7]]},"546":{"position":[[543,9]]},"555":{"position":[[581,9]]},"616":{"position":[[200,8]]},"618":{"position":[[200,8]]},"622":{"position":[[236,7]]},"624":{"position":[[193,7]]},"626":{"position":[[193,7]]},"628":{"position":[[321,7]]},"630":{"position":[[213,7]]},"632":{"position":[[299,8]]},"675":{"position":[[209,7]]},"764":{"position":[[205,7]]},"785":{"position":[[155,9]]}}}],["incom",{"_index":1818,"t":{"309":{"position":[[306,8]]}}}],["incorrect",{"_index":1205,"t":{"132":{"position":[[180,9]]}}}],["increas",{"_index":480,"t":{"27":{"position":[[591,9]]},"221":{"position":[[330,8]]},"313":{"position":[[282,8]]},"315":{"position":[[329,8]]},"370":{"position":[[20,10]]},"454":{"position":[[553,8],[688,8]]}}}],["independ",{"_index":1108,"t":{"116":{"position":[[267,11]]},"277":{"position":[[2161,11]]},"548":{"position":[[611,11]]}}}],["indic",{"_index":1197,"t":{"128":{"position":[[885,9],[1082,9],[1331,10],[1569,9]]},"540":{"position":[[1338,9]]}}}],["individu",{"_index":789,"t":{"59":{"position":[[419,10]]},"75":{"position":[[818,10],[1038,10]]},"106":{"position":[[201,10]]},"235":{"position":[[840,10]]},"440":{"position":[[329,10]]},"484":{"position":[[221,10]]}}}],["industri",{"_index":231,"t":{"19":{"position":[[44,8]]}}}],["infeas",{"_index":21,"t":{"2":{"position":[[194,10]]}}}],["info",{"_index":1065,"t":{"110":{"position":[[1303,4]]},"124":{"position":[[543,4],[1533,4]]},"128":{"position":[[1775,4]]},"187":{"position":[[1733,5]]},"203":{"position":[[202,5],[355,5],[2256,5]]},"205":{"position":[[293,5]]},"221":{"position":[[116,4]]},"372":{"position":[[112,5]]},"374":{"position":[[268,4]]},"426":{"position":[[233,4]]},"470":{"position":[[2639,4]]}}}],["inform",{"_index":118,"t":{"8":{"position":[[31,11]]},"11":{"position":[[192,11]]},"13":{"position":[[206,11]]},"15":{"position":[[306,12]]},"39":{"position":[[921,12]]},"44":{"position":[[220,11]]},"46":{"position":[[477,12]]},"48":{"position":[[358,12]]},"52":{"position":[[297,11]]},"65":{"position":[[621,11]]},"67":{"position":[[561,11]]},"77":{"position":[[354,12],[579,12],[1191,12],[1347,12],[1506,12],[1615,12]]},"79":{"position":[[321,11]]},"108":{"position":[[79,11]]},"118":{"position":[[4476,11]]},"120":{"position":[[59,12]]},"128":{"position":[[65,11],[1488,11]]},"130":{"position":[[359,11]]},"174":{"position":[[575,11],[1135,11],[1228,11]]},"185":{"position":[[1112,11],[1442,11]]},"187":{"position":[[1683,11]]},"189":{"position":[[464,11],[1040,11]]},"197":{"position":[[52,11]]},"239":{"position":[[9,11]]},"245":{"position":[[288,11]]},"251":{"position":[[286,12]]},"279":{"position":[[1506,11]]},"301":{"position":[[175,11]]},"307":{"position":[[226,11]]},"319":{"position":[[896,11]]},"326":{"position":[[193,11]]},"334":{"position":[[4,11]]},"356":{"position":[[276,11]]},"384":{"position":[[584,12]]},"390":{"position":[[58,6]]},"400":{"position":[[265,11]]},"404":{"position":[[489,11],[961,11],[1369,11]]},"426":{"position":[[149,11]]},"472":{"position":[[386,12],[626,11]]},"476":{"position":[[4378,11]]},"512":{"position":[[230,12]]},"516":{"position":[[790,11]]},"518":{"position":[[213,11]]},"524":{"position":[[170,12]]},"555":{"position":[[549,11]]}}}],["infra",{"_index":2855,"t":{"735":{"position":[[1535,5],[2758,5]]},"747":{"position":[[1726,5],[2949,5]]}}}],["infrastructur",{"_index":2582,"t":{"531":{"position":[[147,14]]}}}],["ingress",{"_index":65,"t":{"4":{"position":[[535,7],[937,9]]},"229":{"position":[[63,8]]},"247":{"position":[[802,8]]},"249":{"position":[[572,7]]},"400":{"position":[[44,7]]},"404":{"position":[[199,7]]},"438":{"position":[[241,8]]},"468":{"position":[[5928,8],[6127,8],[6326,8],[6457,7]]},"470":{"position":[[441,8],[784,8],[911,7],[950,7],[1465,8],[1494,7],[1598,7],[1706,8],[1735,7],[1839,7],[1934,8],[1963,7],[2148,8],[2177,7],[2281,7],[2389,8],[2418,7],[2522,7],[2598,8],[2627,7]]}}}],["init",{"_index":1159,"t":{"118":{"position":[[3719,4]]},"137":{"position":[[464,4]]},"162":{"position":[[3185,4]]},"221":{"position":[[1040,4],[1238,4]]},"223":{"position":[[201,4],[448,5]]},"251":{"position":[[442,4]]},"281":{"position":[[416,5],[618,4]]},"374":{"position":[[39,4]]},"376":{"position":[[157,4]]},"382":{"position":[[254,5]]}}}],["initi",{"_index":912,"t":{"75":{"position":[[55,9],[193,10],[394,9]]},"110":{"position":[[66,7]]},"112":{"position":[[2612,7]]},"114":{"position":[[2397,7]]},"137":{"position":[[486,10]]},"162":{"position":[[3200,10]]},"170":{"position":[[280,7]]},"185":{"position":[[1239,10]]},"217":{"position":[[300,7]]},"223":{"position":[[372,11]]},"579":{"position":[[588,13]]},"650":{"position":[[718,13]]},"685":{"position":[[612,13]]},"687":{"position":[[501,13]]},"689":{"position":[[526,13]]},"691":{"position":[[678,13]]},"693":{"position":[[504,13]]},"695":{"position":[[536,13]]},"697":{"position":[[635,13]]}}}],["insecur",{"_index":1225,"t":{"135":{"position":[[1647,8]]},"162":{"position":[[5596,8]]},"476":{"position":[[804,8]]}}}],["insecure_skip_verifi",{"_index":1956,"t":{"342":{"position":[[442,20]]}}}],["instal",{"_index":3,"t":{"2":{"position":[[32,8]]},"6":{"position":[[13,12]]},"17":{"position":[[278,12]]},"19":{"position":[[403,7],[459,12],[495,7],[574,7],[934,7]]},"21":{"position":[[158,7]]},"25":{"position":[[107,7],[247,7],[311,7],[405,7],[443,10],[1551,9]]},"33":{"position":[[365,7],[442,10]]},"41":{"position":[[4,12],[127,12],[429,7]]},"50":{"position":[[120,13],[603,7]]},"52":{"position":[[261,12],[319,7]]},"54":{"position":[[53,10],[188,10],[209,12],[229,12],[246,7],[280,7],[394,8],[413,12],[517,9],[560,7],[613,7],[729,7]]},"63":{"position":[[31,9],[197,7],[309,7]]},"65":{"position":[[726,7]]},"110":{"position":[[2682,7]]},"112":{"position":[[2620,13]]},"114":{"position":[[2405,13]]},"116":{"position":[[340,7]]},"181":{"position":[[123,9]]},"199":{"position":[[30,7]]},"201":{"position":[[128,9]]},"203":{"position":[[364,7],[409,7],[1369,7],[2667,7],[2819,7]]},"205":{"position":[[704,7],[856,7]]},"207":{"position":[[30,7]]},"213":{"position":[[500,7],[1061,12],[1109,8],[1159,9]]},"245":{"position":[[605,11],[767,10]]},"247":{"position":[[1197,10],[1685,10]]},"253":{"position":[[39,10],[140,10],[233,10],[335,12],[608,7]]},"255":{"position":[[8,7]]},"259":{"position":[[148,7]]},"263":{"position":[[347,7]]},"266":{"position":[[7,10],[147,8],[366,7],[406,7]]},"268":{"position":[[8,7],[126,7],[616,7],[692,7]]},"271":{"position":[[380,7],[626,11]]},"277":{"position":[[55,12],[110,7],[462,13],[598,9],[1936,7],[1996,7],[2108,7],[2182,7],[2295,7]]},"279":{"position":[[15,12],[298,14]]},"281":{"position":[[249,8]]},"285":{"position":[[164,12],[383,9]]},"287":{"position":[[5,12]]},"303":{"position":[[600,7],[641,7],[702,9],[2220,7],[2285,10]]},"305":{"position":[[38,12],[237,12]]},"307":{"position":[[42,7],[336,7]]},"319":{"position":[[643,7]]},"330":{"position":[[337,9]]},"384":{"position":[[233,9],[257,12],[325,13]]},"392":{"position":[[43,9]]},"400":{"position":[[128,12]]},"402":{"position":[[153,7],[187,7]]},"404":{"position":[[1239,7],[1278,12]]},"408":{"position":[[372,10]]},"426":{"position":[[76,12]]},"428":{"position":[[16,12],[64,7],[175,7],[271,13],[432,10],[591,9],[655,12],[978,7],[1046,12],[1298,9]]},"430":{"position":[[51,7]]},"432":{"position":[[55,12],[110,7],[283,7],[361,13],[1000,7],[1264,7],[2061,12]]},"440":{"position":[[136,9]]},"460":{"position":[[72,12]]},"472":{"position":[[1074,10]]},"510":{"position":[[460,10]]},"524":{"position":[[247,7],[379,9]]},"533":{"position":[[72,7],[131,7]]},"536":{"position":[[977,7]]},"538":{"position":[[37,9],[165,7]]},"544":{"position":[[33,12],[69,10]]},"546":{"position":[[27,12]]},"548":{"position":[[56,12],[150,7],[267,7],[386,7],[446,7],[558,7],[632,7],[745,7]]},"552":{"position":[[35,12]]},"555":{"position":[[154,12],[1820,12]]}}}],["install.sh",{"_index":1659,"t":{"266":{"position":[[467,11]]},"268":{"position":[[233,12],[396,12],[1270,12]]}}}],["install_k3s_bin_dir",{"_index":2193,"t":{"432":{"position":[[967,19],[1159,20]]}}}],["install_k3s_bin_dir_read_onli",{"_index":2194,"t":{"432":{"position":[[1090,29]]}}}],["install_k3s_channel",{"_index":2204,"t":{"432":{"position":[[2212,19]]}}}],["install_k3s_channel=latest",{"_index":2207,"t":{"432":{"position":[[2473,26]]},"548":{"position":[[1035,26]]}}}],["install_k3s_channel_url",{"_index":2201,"t":{"432":{"position":[[2090,23]]}}}],["install_k3s_exec",{"_index":1695,"t":{"277":{"position":[[201,17],[353,16],[1135,18]]},"432":{"position":[[1357,16]]},"548":{"position":[[175,16]]}}}],["install_k3s_exec=\"ag",{"_index":1703,"t":{"277":{"position":[[1389,23],[1505,24]]}}}],["install_k3s_exec=\"serv",{"_index":1700,"t":{"277":{"position":[[790,25],[892,24]]},"285":{"position":[[303,25]]}}}],["install_k3s_exec='arg",{"_index":1676,"t":{"268":{"position":[[758,23]]}}}],["install_k3s_exec='serv",{"_index":1677,"t":{"268":{"position":[[1141,24]]}}}],["install_k3s_nam",{"_index":2197,"t":{"432":{"position":[[1601,16]]}}}],["install_k3s_selinux_warn",{"_index":2199,"t":{"432":{"position":[[1907,24]]}}}],["install_k3s_selinux_warn=tru",{"_index":764,"t":{"54":{"position":[[827,30]]}}}],["install_k3s_skip_download",{"_index":1671,"t":{"266":{"position":[[1006,25]]},"432":{"position":[[408,25]]}}}],["install_k3s_skip_download=tru",{"_index":1672,"t":{"268":{"position":[[202,30],[309,30],[648,30],[1110,30]]},"432":{"position":[[1195,31]]}}}],["install_k3s_skip_en",{"_index":2190,"t":{"432":{"position":[[697,23]]}}}],["install_k3s_skip_enable=tru",{"_index":643,"t":{"41":{"position":[[504,28]]}}}],["install_k3s_skip_selinux_rpm",{"_index":2200,"t":{"432":{"position":[[1997,28]]}}}],["install_k3s_skip_selinux_rpm=tru",{"_index":758,"t":{"54":{"position":[[452,34]]}}}],["install_k3s_skip_start",{"_index":2191,"t":{"432":{"position":[[774,22]]}}}],["install_k3s_skip_start=tru",{"_index":642,"t":{"41":{"position":[[476,27]]}}}],["install_k3s_symlink",{"_index":2188,"t":{"432":{"position":[[487,19]]}}}],["install_k3s_systemd_dir",{"_index":2195,"t":{"432":{"position":[[1227,23]]}}}],["install_k3s_typ",{"_index":2198,"t":{"432":{"position":[[1798,16]]}}}],["install_k3s_vers",{"_index":2192,"t":{"432":{"position":[[840,19]]}}}],["install_k3s_version=vx.y.z",{"_index":2629,"t":{"548":{"position":[[1220,26]]}}}],["instanc",{"_index":500,"t":{"31":{"position":[[84,8]]},"223":{"position":[[268,9]]},"404":{"position":[[1515,8]]},"440":{"position":[[13,8]]}}}],["instead",{"_index":247,"t":{"19":{"position":[[380,7]]},"23":{"position":[[239,8]]},"52":{"position":[[742,8]]},"59":{"position":[[371,8]]},"65":{"position":[[1232,7]]},"95":{"position":[[66,7]]},"101":{"position":[[3468,7]]},"158":{"position":[[122,7]]},"162":{"position":[[7010,7]]},"199":{"position":[[683,7]]},"217":{"position":[[763,7]]},"245":{"position":[[239,7]]},"268":{"position":[[715,7],[1058,8]]},"277":{"position":[[2234,7]]},"283":{"position":[[373,7]]},"303":{"position":[[1203,7]]},"305":{"position":[[736,7]]},"309":{"position":[[1577,8]]},"382":{"position":[[87,7]]},"394":{"position":[[45,7]]},"398":{"position":[[387,8]]},"404":{"position":[[731,8]]},"420":{"position":[[86,8]]},"428":{"position":[[1338,7]]},"548":{"position":[[684,7]]}}}],["instruct",{"_index":411,"t":{"25":{"position":[[184,12]]},"63":{"position":[[78,12]]},"233":{"position":[[42,13]]},"253":{"position":[[22,12]]},"336":{"position":[[205,8]]},"430":{"position":[[108,12]]}}}],["integr",{"_index":932,"t":{"75":{"position":[[1280,9]]},"108":{"position":[[938,9]]},"114":{"position":[[750,9]]},"315":{"position":[[245,11]]},"319":{"position":[[59,9],[754,11]]},"324":{"position":[[466,10]]},"440":{"position":[[473,10]]},"480":{"position":[[323,9]]},"536":{"position":[[1610,11]]}}}],["intel",{"_index":2212,"t":{"434":{"position":[[242,5],[327,5],[390,5]]},"442":{"position":[[64,5]]},"446":{"position":[[166,5],[282,5],[327,5]]},"448":{"position":[[171,5],[287,5],[332,5]]},"450":{"position":[[48,5]]}}}],["intend",{"_index":1683,"t":{"273":{"position":[[244,6]]},"436":{"position":[[24,8]]}}}],["intens",{"_index":1999,"t":{"358":{"position":[[685,10]]}}}],["inter",{"_index":1436,"t":{"203":{"position":[[668,5]]}}}],["interact",{"_index":363,"t":{"21":{"position":[[27,11],[123,8]]},"77":{"position":[[656,11],[896,11]]},"203":{"position":[[1551,8],[3000,8]]},"205":{"position":[[1037,8]]}}}],["interf",{"_index":2233,"t":{"434":{"position":[[940,11]]}}}],["interfac",{"_index":572,"t":{"35":{"position":[[393,11],[478,11],[955,9]]},"77":{"position":[[944,9]]},"91":{"position":[[284,9]]},"101":{"position":[[2966,9]]},"135":{"position":[[564,9]]},"162":{"position":[[4423,10],[8027,9]]},"203":{"position":[[997,9]]},"266":{"position":[[508,9],[612,9]]},"303":{"position":[[109,9]]},"305":{"position":[[175,10]]},"307":{"position":[[1198,11]]},"311":{"position":[[284,9]]},"516":{"position":[[644,9],[679,9]]}}}],["interfer",{"_index":1997,"t":{"358":{"position":[[497,12]]},"452":{"position":[[139,12]]},"456":{"position":[[146,9]]}}}],["intermedi",{"_index":1053,"t":{"110":{"position":[[465,12],[527,12],[1435,12],[1570,12],[1747,12],[1818,12],[1838,12],[2088,12],[2228,12],[2308,12],[2763,12]]},"112":{"position":[[1316,12]]},"114":{"position":[[999,12]]},"536":{"position":[[1842,12]]},"546":{"position":[[987,12]]}}}],["intern",{"_index":205,"t":{"17":{"position":[[762,8]]},"303":{"position":[[1214,8]]},"317":{"position":[[856,8]]},"410":{"position":[[557,8]]}}}],["internalip",{"_index":2150,"t":{"420":{"position":[[191,10]]}}}],["internet",{"_index":1646,"t":{"253":{"position":[[428,9]]},"255":{"position":[[161,9]]},"460":{"position":[[207,8]]},"555":{"position":[[807,8]]}}}],["interv",{"_index":1124,"t":{"118":{"position":[[309,8],[2101,8]]},"135":{"position":[[836,8]]},"162":{"position":[[4701,8]]},"203":{"position":[[956,8]]}}}],["intervent",{"_index":1618,"t":{"247":{"position":[[1912,12]]},"460":{"position":[[444,12]]},"478":{"position":[[178,13]]}}}],["intra",{"_index":2367,"t":{"468":{"position":[[5867,5],[6070,5],[6265,5]]},"470":{"position":[[380,5]]}}}],["introduc",{"_index":2160,"t":{"424":{"position":[[156,10]]}}}],["invalid",{"_index":1093,"t":{"112":{"position":[[1774,12]]},"116":{"position":[[236,12],[971,12]]},"326":{"position":[[971,8],[995,7]]}}}],["investig",{"_index":2503,"t":{"486":{"position":[[163,11]]},"488":{"position":[[240,13]]},"490":{"position":[[239,13]]}}}],["invok",{"_index":1348,"t":{"181":{"position":[[341,8]]}}}],["involv",{"_index":2278,"t":{"454":{"position":[[860,7],[1058,7]]}}}],["io",{"_index":2000,"t":{"358":{"position":[[727,2]]},"440":{"position":[[91,2]]},"454":{"position":[[1040,2]]}}}],["io/etcd/releases/download/${etcd_version}/etcd",{"_index":369,"t":{"21":{"position":[[264,46]]}}}],["io/k3",{"_index":771,"t":{"56":{"position":[[454,6]]}}}],["io/k3s/blob/<version>/k3",{"_index":536,"t":{"33":{"position":[[254,25]]}}}],["io/k3s/raw/master/contrib/util/gener",{"_index":1076,"t":{"110":{"position":[[2567,39]]},"112":{"position":[[1931,39]]}}}],["io/k3s/raw/master/contrib/util/rot",{"_index":1103,"t":{"114":{"position":[[1698,37]]}}}],["io/k3s/releases/download/v1.26.5+k3s1/k3",{"_index":1717,"t":{"279":{"position":[[462,42]]}}}],["iop",{"_index":2037,"t":{"368":{"position":[[231,5]]},"436":{"position":[[164,4],[386,4]]},"438":{"position":[[401,4]]},"446":{"position":[[402,4]]},"456":{"position":[[134,4]]}}}],["iot",{"_index":12,"t":{"2":{"position":[[111,3]]}}}],["ip",{"_index":207,"t":{"17":{"position":[[787,2],[880,2],[967,3]]},"91":{"position":[[45,2],[68,2],[117,2],[139,2]]},"101":{"position":[[2639,2],[2735,2],[2782,2]]},"132":{"position":[[467,2]]},"144":{"position":[[168,2]]},"150":{"position":[[100,3],[183,3],[339,2],[667,2],[694,2]]},"162":{"position":[[973,3],[1434,3],[1539,3],[1743,2],[2200,2],[2234,2],[7700,2],[7796,2],[7843,2]]},"183":{"position":[[146,2]]},"201":{"position":[[289,3],[437,3],[529,3]]},"203":{"position":[[267,2]]},"217":{"position":[[60,2],[287,3],[564,2],[971,2],[1101,2]]},"219":{"position":[[375,3]]},"266":{"position":[[708,3],[811,2],[841,2],[863,2],[905,2]]},"303":{"position":[[1129,2],[1150,2],[1223,4],[1262,2],[1430,2],[1464,4]]},"307":{"position":[[381,2],[666,2],[764,2],[1051,2],[1300,2],[1327,2],[1353,2]]},"311":{"position":[[473,6]]},"315":{"position":[[654,4]]},"317":{"position":[[94,2],[149,4],[440,2],[529,2],[604,2],[995,4],[1008,3],[1042,3],[1054,2],[1116,2],[1148,3]]},"319":{"position":[[1097,2]]},"370":{"position":[[97,3]]},"410":{"position":[[423,2],[458,2],[566,2]]},"420":{"position":[[252,2],[275,2]]},"476":{"position":[[1769,2]]},"610":{"position":[[2597,2]]},"612":{"position":[[2545,2]]},"614":{"position":[[2414,2]]},"616":{"position":[[2363,2]]},"618":{"position":[[2376,2]]},"620":{"position":[[2489,2]]},"622":{"position":[[2450,2]]},"626":{"position":[[2523,2]]},"628":{"position":[[2504,2]]},"630":{"position":[[2400,2]]},"632":{"position":[[2516,2]]},"634":{"position":[[2381,2]]},"636":{"position":[[2296,2]]},"646":{"position":[[2471,2]]},"652":{"position":[[2513,2]]},"654":{"position":[[2429,2]]},"656":{"position":[[2435,2]]},"667":{"position":[[1956,2]]},"669":{"position":[[2024,2]]},"671":{"position":[[2109,2]]},"673":{"position":[[2006,2]]},"729":{"position":[[2780,2]]},"731":{"position":[[2794,2]]},"733":{"position":[[2909,2]]}}}],["ip/nod",{"_index":1242,"t":{"144":{"position":[[160,7]]},"162":{"position":[[965,7]]}}}],["ip6tabl",{"_index":1816,"t":{"307":{"position":[[1491,9],[1526,9]]},"406":{"position":[[709,9],[748,9]]}}}],["ip=0.0.0.0",{"_index":1829,"t":{"311":{"position":[[409,11]]}}}],["ip=<agent_external_ip",{"_index":1861,"t":{"317":{"position":[[474,22]]}}}],["ip=<server_external_ip",{"_index":1860,"t":{"317":{"position":[[362,23]]}}}],["ipam",{"_index":1823,"t":{"309":{"position":[[1472,4]]}}}],["ipc",{"_index":2596,"t":{"536":{"position":[[797,4]]}}}],["ipsec",{"_index":1272,"t":{"162":{"position":[[2018,7]]},"303":{"position":[[1711,5],[2334,5]]},"305":{"position":[[214,5],[794,6]]}}}],["ipsec'(deprec",{"_index":1255,"t":{"150":{"position":[[510,20]]}}}],["iptabl",{"_index":97,"t":{"4":{"position":[[1053,10]]},"44":{"position":[[54,8],[323,8],[414,8]]},"50":{"position":[[60,8]]},"65":{"position":[[77,8],[332,8],[596,8]]},"307":{"position":[[1395,8],[1440,8],[1474,8]]},"356":{"position":[[257,9]]},"394":{"position":[[19,8],[120,8]]},"398":{"position":[[1187,8]]},"406":{"position":[[289,8],[556,8],[574,8],[654,8],[692,8]]},"410":{"position":[[268,8]]},"474":{"position":[[751,8],[1374,8]]},"504":{"position":[[23,8],[137,8],[264,9],[296,8],[392,8],[544,8]]},"542":{"position":[[326,8]]},"741":{"position":[[280,8]]}}}],["iptables/nft",{"_index":666,"t":{"44":{"position":[[500,17]]}}}],["ipv4",{"_index":1243,"t":{"144":{"position":[[171,4]]},"150":{"position":[[326,4]]},"162":{"position":[[869,4],[1730,4]]},"303":{"position":[[1000,6]]},"311":{"position":[[436,4],[656,4],[1120,4],[1269,5]]},"313":{"position":[[375,5]]},"362":{"position":[[358,4]]},"424":{"position":[[969,5],[1223,4],[1457,5]]}}}],["ipv4/ipv6",{"_index":1018,"t":{"101":{"position":[[2677,9],[2763,9]]},"144":{"position":[[392,9]]},"150":{"position":[[61,9],[140,9]]},"162":{"position":[[1166,9],[1395,9],[1496,9],[7738,9],[7824,9]]}}}],["ipv6",{"_index":578,"t":{"35":{"position":[[548,4]]},"132":{"position":[[480,4]]},"150":{"position":[[599,4],[622,4]]},"162":{"position":[[2125,4],[2155,4]]},"301":{"position":[[122,5]]},"303":{"position":[[936,4],[974,4],[1037,4]]},"311":{"position":[[190,4],[495,4],[1149,4],[1288,5],[1312,4]]},"313":{"position":[[62,4],[343,4]]},"360":{"position":[[201,5]]},"362":{"position":[[434,4]]},"424":{"position":[[1232,4],[1381,4]]}}}],["isn't",{"_index":1158,"t":{"118":{"position":[[3648,5]]}}}],["isol",{"_index":2282,"t":{"454":{"position":[[1179,8]]},"456":{"position":[[465,8]]}}}],["issu",{"_index":654,"t":{"44":{"position":[[204,5]]},"59":{"position":[[226,6]]},"108":{"position":[[796,5]]},"189":{"position":[[1158,5]]},"221":{"position":[[48,6]]},"243":{"position":[[21,5],[78,6],[220,6],[345,5],[399,5]]},"311":{"position":[[121,5],[138,5]]},"313":{"position":[[48,5]]},"390":{"position":[[10,6],[79,6]]},"392":{"position":[[121,6]]},"394":{"position":[[83,7],[155,7],[209,6]]},"396":{"position":[[69,7]]},"422":{"position":[[321,6]]},"494":{"position":[[456,6]]}}}],["issuanc",{"_index":152,"t":{"13":{"position":[[77,9]]},"104":{"position":[[77,9]]},"108":{"position":[[352,9]]}}}],["issuer",{"_index":1105,"t":{"116":{"position":[[20,6],[124,6],[612,6]]}}}],["issuer=https://kubernetes.default.svc.cluster.loc",{"_index":2756,"t":{"610":{"position":[[2377,51]]},"612":{"position":[[2325,51]]},"614":{"position":[[2194,51]]},"616":{"position":[[2143,51]]},"618":{"position":[[2156,51]]},"620":{"position":[[2269,51]]},"622":{"position":[[2230,51]]},"626":{"position":[[2303,51]]},"628":{"position":[[2284,51]]},"630":{"position":[[2180,51]]},"632":{"position":[[2296,51]]},"634":{"position":[[2161,51]]},"636":{"position":[[2076,51]]},"646":{"position":[[2251,51]]},"652":{"position":[[2293,51]]},"654":{"position":[[2209,51]]},"656":{"position":[[2215,51]]},"729":{"position":[[2560,51]]},"731":{"position":[[2574,51]]},"733":{"position":[[2689,51]]}}}],["issuer=k3",{"_index":2434,"t":{"476":{"position":[[1581,10]]}}}],["it'",{"_index":2287,"t":{"458":{"position":[[76,4]]}}}],["item",{"_index":1274,"t":{"162":{"position":[[5902,6]]},"330":{"position":[[485,5]]}}}],["itself",{"_index":1314,"t":{"174":{"position":[[835,7]]},"191":{"position":[[130,7],[476,7]]},"203":{"position":[[124,7]]},"247":{"position":[[276,6]]},"350":{"position":[[354,7]]},"460":{"position":[[1084,6]]},"536":{"position":[[1916,6]]},"546":{"position":[[1061,6]]}}}],["iv",{"_index":1815,"t":{"307":{"position":[[1462,2],[1514,2]]}}}],["jbmvl",{"_index":284,"t":{"19":{"position":[[1056,5]]}}}],["jbmvl_kube",{"_index":300,"t":{"19":{"position":[[1355,10],[1518,10],[1859,10]]}}}],["job",{"_index":2594,"t":{"536":{"position":[[570,4],[586,3],[707,3]]},"540":{"position":[[1702,4],[2654,4],[2746,4]]}}}],["join",{"_index":169,"t":{"15":{"position":[[208,4],[258,4]]},"39":{"position":[[236,6]]},"108":{"position":[[726,4]]},"112":{"position":[[702,6],[2396,6]]},"114":{"position":[[542,6],[2151,6]]},"118":{"position":[[1810,4]]},"132":{"position":[[134,4]]},"137":{"position":[[94,4],[263,4],[439,4]]},"162":{"position":[[2755,4],[2929,4],[3149,4]]},"164":{"position":[[35,4],[88,7]]},"166":{"position":[[169,8]]},"168":{"position":[[305,7],[653,7],[739,7],[963,8],[1282,4]]},"170":{"position":[[91,7],[150,7]]},"174":{"position":[[233,4]]},"178":{"position":[[66,4],[327,4]]},"185":{"position":[[1270,4]]},"203":{"position":[[1385,4],[2835,4]]},"205":{"position":[[872,4]]},"215":{"position":[[50,4],[280,6]]},"219":{"position":[[187,7],[239,7]]},"221":{"position":[[1123,4],[1357,4],[2027,4],[2067,7]]},"223":{"position":[[387,6]]},"239":{"position":[[37,4]]},"243":{"position":[[281,4]]},"279":{"position":[[1321,5]]},"376":{"position":[[323,5],[370,4]]},"378":{"position":[[136,7]]},"428":{"position":[[1154,4]]},"533":{"position":[[958,6]]}}}],["journalctl",{"_index":600,"t":{"37":{"position":[[72,10]]},"41":{"position":[[301,10],[323,10]]},"235":{"position":[[302,10]]},"579":{"position":[[518,13],[735,12]]},"602":{"position":[[200,10]]},"610":{"position":[[430,10]]},"612":{"position":[[413,10]]},"614":{"position":[[287,10]]},"616":{"position":[[253,10]]},"618":{"position":[[266,10]]},"620":{"position":[[357,10]]},"622":{"position":[[264,10]]},"626":{"position":[[330,10]]},"628":{"position":[[352,10]]},"630":{"position":[[248,10]]},"632":{"position":[[383,10]]},"634":{"position":[[244,10]]},"636":{"position":[[195,10]]},"646":{"position":[[325,10]]},"650":{"position":[[648,13],[865,12]]},"652":{"position":[[392,10]]},"654":{"position":[[327,10]]},"656":{"position":[[339,10]]},"658":{"position":[[381,10]]},"662":{"position":[[933,10]]},"665":{"position":[[282,10]]},"667":{"position":[[212,10]]},"669":{"position":[[232,10]]},"671":{"position":[[328,10]]},"673":{"position":[[265,10]]},"680":{"position":[[199,10]]},"682":{"position":[[209,10]]},"685":{"position":[[542,13],[759,12]]},"687":{"position":[[431,13],[648,12]]},"689":{"position":[[456,13],[673,12]]},"691":{"position":[[608,13],[825,12]]},"693":{"position":[[434,13],[651,12]]},"695":{"position":[[466,13],[683,12]]},"697":{"position":[[565,13],[782,12]]},"703":{"position":[[79,10]]},"729":{"position":[[497,12],[590,10]]},"731":{"position":[[483,12],[576,10]]},"733":{"position":[[539,12],[632,10]]},"735":{"position":[[449,10]]},"737":{"position":[[506,10]]},"747":{"position":[[667,10]]}}}],["journald",{"_index":1557,"t":{"235":{"position":[[269,8]]}}}],["json",{"_index":1345,"t":{"179":{"position":[[2643,4]]}}}],["k10",{"_index":1282,"t":{"168":{"position":[[156,3]]}}}],["k3",{"_index":22,"t":{"4":{"position":[[0,3],[668,3],[845,3]]},"6":{"position":[[217,4],[247,3]]},"8":{"position":[[96,4],[155,3]]},"11":{"position":[[0,3],[290,3]]},"13":{"position":[[0,3],[190,3],[279,3]]},"15":{"position":[[12,3],[327,3]]},"17":{"position":[[19,3],[147,3],[210,3],[274,3],[723,3],[1303,3]]},"19":{"position":[[0,3],[214,3],[308,3],[425,3],[582,3],[707,3]]},"21":{"position":[[58,3],[477,3]]},"23":{"position":[[0,3]]},"25":{"position":[[0,3],[95,3],[413,4],[542,4]]},"29":{"position":[[68,3]]},"31":{"position":[[80,3],[190,3],[242,3],[274,3],[663,3],[921,3]]},"33":{"position":[[205,3],[335,3],[360,4],[373,3],[550,3],[711,3],[836,3],[1018,3]]},"35":{"position":[[9,3],[274,3],[611,3]]},"37":{"position":[[28,3],[96,3]]},"39":{"position":[[0,3],[492,3]]},"41":{"position":[[315,3],[337,3]]},"44":{"position":[[289,3],[380,3],[435,3]]},"50":{"position":[[169,3]]},"52":{"position":[[30,3],[107,3],[187,3],[404,3],[496,3],[522,3],[620,3],[756,3],[865,3]]},"54":{"position":[[64,3]]},"56":{"position":[[62,3],[127,3],[450,3],[519,4]]},"59":{"position":[[233,3],[305,3]]},"61":{"position":[[69,3],[91,3],[371,3]]},"63":{"position":[[20,3]]},"67":{"position":[[60,3],[187,3],[247,3],[322,4],[374,3]]},"69":{"position":[[75,3],[200,3],[260,3]]},"71":{"position":[[147,3],[181,3]]},"75":{"position":[[72,3],[1741,3]]},"77":{"position":[[4,3],[107,3],[124,3],[312,3],[367,3],[385,3],[538,3],[592,3],[834,3],[983,3],[1080,4],[1107,3],[1150,3],[1204,3],[1255,3],[1298,3],[1360,3],[1390,3],[1455,3],[1519,3],[1542,3],[1568,3],[1628,3],[1681,3],[1685,3]]},"79":{"position":[[51,3]]},"99":{"position":[[0,3],[264,3]]},"101":{"position":[[153,3],[187,3]]},"104":{"position":[[0,3],[190,3]]},"106":{"position":[[59,3],[101,3],[120,3],[146,3],[177,3],[197,3],[288,3],[434,3],[450,3]]},"108":{"position":[[211,3],[646,3],[882,3],[1165,3],[1365,3]]},"110":{"position":[[266,3],[364,3],[651,3],[1934,4],[2703,3]]},"112":{"position":[[42,3],[168,3],[627,3],[2074,3],[2247,3]]},"114":{"position":[[14,3],[65,3],[191,3],[1287,3],[1862,3],[2057,3]]},"116":{"position":[[311,3],[1124,3],[1364,3]]},"118":{"position":[[101,3],[590,3],[697,3],[802,3],[908,3],[995,3],[1114,3],[1160,3],[1340,3],[1427,3],[1546,3],[1605,4],[1690,3],[1746,3],[1773,3],[1797,3],[1853,3],[2606,3],[3444,3],[3644,3],[3696,3],[3954,3],[4254,3],[4526,3],[4572,3],[4906,3],[4930,3]]},"120":{"position":[[0,3]]},"122":{"position":[[42,3]]},"124":{"position":[[104,3],[164,3],[255,3],[304,3],[347,3],[402,3],[435,3],[454,3],[502,3],[548,3],[662,3],[825,3],[1043,3],[1165,3],[1245,3],[1300,3],[1333,3],[1404,3],[1538,3],[1652,3]]},"126":{"position":[[189,3],[238,3],[281,3],[336,3],[369,3],[402,3],[512,3],[560,3],[612,3],[1022,3],[1102,3],[1157,3],[1190,3],[1275,3],[1382,3],[1522,3]]},"128":{"position":[[190,3],[472,3]]},"130":{"position":[[51,3],[150,3]]},"144":{"position":[[54,3]]},"150":{"position":[[1421,4]]},"154":{"position":[[156,3],[274,3]]},"162":{"position":[[155,3],[197,3],[725,3],[6087,3],[6231,3]]},"164":{"position":[[0,3]]},"166":{"position":[[0,3]]},"172":{"position":[[0,3]]},"174":{"position":[[1188,3]]},"178":{"position":[[29,3],[207,3]]},"179":{"position":[[0,3],[108,3],[140,3],[183,3],[487,3],[591,3],[1529,3],[1819,3],[2303,3]]},"183":{"position":[[165,3],[205,3]]},"185":{"position":[[69,3],[761,3],[1218,3],[1772,3],[1898,4]]},"187":{"position":[[130,3],[952,3]]},"189":{"position":[[674,3],[1167,4],[1312,3],[1487,3]]},"191":{"position":[[8,3]]},"195":{"position":[[89,4]]},"197":{"position":[[8,3]]},"199":{"position":[[101,3]]},"201":{"position":[[88,3],[155,3]]},"203":{"position":[[512,3],[576,3],[596,3],[1377,3],[1594,3],[2113,3],[2827,3],[3042,3]]},"205":{"position":[[150,3],[864,3],[1079,3]]},"207":{"position":[[58,3],[244,3],[278,3]]},"213":{"position":[[0,3],[143,3],[232,3],[512,3],[1584,3],[1674,3]]},"215":{"position":[[1042,3]]},"219":{"position":[[8,3],[91,3],[458,3]]},"221":{"position":[[619,3]]},"223":{"position":[[171,3]]},"225":{"position":[[105,4]]},"227":{"position":[[0,3]]},"229":{"position":[[13,3]]},"231":{"position":[[13,3]]},"233":{"position":[[21,3]]},"235":{"position":[[16,3],[60,3],[316,4],[523,3],[707,3]]},"237":{"position":[[36,3]]},"239":{"position":[[33,3],[58,3]]},"243":{"position":[[42,4],[158,3],[216,3],[304,3],[358,3]]},"245":{"position":[[401,3],[561,3]]},"249":{"position":[[144,3]]},"251":{"position":[[75,3]]},"253":{"position":[[50,3],[151,4],[244,4],[322,4],[370,3],[482,3]]},"255":{"position":[[16,3]]},"259":{"position":[[156,3]]},"263":{"position":[[91,3],[230,5],[355,3]]},"266":{"position":[[18,4],[134,3],[169,3],[362,3],[636,3],[986,3],[1054,3]]},"268":{"position":[[16,3],[134,3],[809,4],[1288,3]]},"271":{"position":[[163,3],[323,3],[579,3]]},"273":{"position":[[0,3],[236,3],[308,3]]},"275":{"position":[[72,3]]},"277":{"position":[[118,3]]},"279":{"position":[[75,3],[149,3],[386,3],[626,3],[655,3],[698,3],[741,3],[834,3],[854,3],[911,3],[930,3]]},"281":{"position":[[69,3],[119,3],[478,3]]},"285":{"position":[[397,3],[435,3]]},"287":{"position":[[90,4]]},"289":{"position":[[183,3]]},"291":{"position":[[598,3]]},"293":{"position":[[37,3],[102,3]]},"295":{"position":[[65,3],[83,3]]},"297":{"position":[[5,3],[231,3]]},"299":{"position":[[5,3],[53,3],[117,3]]},"301":{"position":[[20,3]]},"303":{"position":[[2057,3]]},"305":{"position":[[111,3],[330,3],[599,3],[824,3]]},"307":{"position":[[6,3],[1096,3],[1114,3],[1285,3]]},"309":{"position":[[0,3]]},"311":{"position":[[365,3],[691,4]]},"313":{"position":[[398,3]]},"315":{"position":[[2,3],[213,3]]},"317":{"position":[[0,3],[154,3],[1163,3],[1281,3]]},"319":{"position":[[51,3],[223,4],[735,3],[1010,3]]},"324":{"position":[[0,3],[351,4],[425,3]]},"326":{"position":[[667,3],[1481,3]]},"330":{"position":[[448,3]]},"332":{"position":[[103,3],[501,3],[543,3],[1113,3]]},"336":{"position":[[125,3],[892,4]]},"346":{"position":[[601,3]]},"348":{"position":[[18,3],[97,3],[122,3]]},"350":{"position":[[0,3],[105,3],[179,3],[267,3]]},"354":{"position":[[0,3]]},"356":{"position":[[0,3],[334,3]]},"358":{"position":[[270,3],[285,3],[321,3],[411,3],[581,3],[743,3]]},"360":{"position":[[4,3],[293,3],[549,4]]},"362":{"position":[[139,3]]},"364":{"position":[[52,3]]},"366":{"position":[[91,3]]},"368":{"position":[[131,3]]},"370":{"position":[[171,3]]},"372":{"position":[[0,3]]},"374":{"position":[[13,3]]},"376":{"position":[[50,3]]},"378":{"position":[[234,3],[518,3],[561,3]]},"380":{"position":[[61,3]]},"384":{"position":[[21,3],[243,3],[300,3]]},"386":{"position":[[13,3]]},"388":{"position":[[13,3]]},"392":{"position":[[19,3],[136,4]]},"394":{"position":[[231,3]]},"396":{"position":[[8,3]]},"398":{"position":[[147,4],[496,3],[3028,3]]},"400":{"position":[[110,4],[314,4]]},"404":{"position":[[679,3],[1161,3],[1211,3],[1430,4]]},"406":{"position":[[0,3],[327,3],[513,3]]},"408":{"position":[[52,3],[77,3],[535,3]]},"412":{"position":[[41,4]]},"420":{"position":[[32,3],[95,3],[506,3]]},"422":{"position":[[204,3]]},"424":{"position":[[339,3]]},"426":{"position":[[126,3],[168,3]]},"428":{"position":[[0,3],[183,3],[289,3],[475,3],[495,3],[604,3],[1321,3],[1363,3],[1396,3]]},"430":{"position":[[47,3]]},"432":{"position":[[118,3],[291,4],[467,3],[761,3],[827,3],[871,3],[1008,3],[1414,3],[1669,5],[1686,3],[1706,4],[1729,3],[1790,4],[1872,3],[1964,3],[2081,3],[2139,3],[2260,3]]},"434":{"position":[[90,4],[215,3],[295,3],[380,3],[441,3],[519,3],[602,3],[788,3],[815,3],[847,3]]},"436":{"position":[[212,3],[439,3],[485,3]]},"438":{"position":[[27,3],[208,3]]},"440":{"position":[[303,3],[399,3]]},"444":{"position":[[96,3]]},"446":{"position":[[66,3]]},"448":{"position":[[42,3],[61,3],[83,3],[111,3]]},"452":{"position":[[53,3]]},"454":{"position":[[0,3],[733,3]]},"458":{"position":[[63,3],[125,3]]},"460":{"position":[[88,4],[232,3],[497,3],[791,3],[1146,3]]},"464":{"position":[[237,4]]},"466":{"position":[[204,3],[272,3],[356,3],[478,3]]},"468":{"position":[[32,3],[175,3],[848,3],[989,3]]},"470":{"position":[[1075,3]]},"472":{"position":[[92,3],[297,4],[1067,3],[1107,4],[1369,3]]},"476":{"position":[[21,3]]},"478":{"position":[[32,3],[242,4]]},"480":{"position":[[565,3]]},"482":{"position":[[664,3]]},"484":{"position":[[545,3]]},"486":{"position":[[385,3]]},"488":{"position":[[560,3]]},"490":{"position":[[546,3]]},"492":{"position":[[770,3]]},"494":{"position":[[563,3]]},"496":{"position":[[371,3]]},"498":{"position":[[334,3],[414,3]]},"500":{"position":[[637,3]]},"504":{"position":[[688,3]]},"506":{"position":[[774,3]]},"508":{"position":[[38,3]]},"510":{"position":[[0,3]]},"512":{"position":[[0,3],[251,3]]},"516":{"position":[[0,3],[290,3],[465,4],[606,4]]},"518":{"position":[[0,3]]},"524":{"position":[[41,3]]},"533":{"position":[[37,3],[98,3],[303,3],[340,3],[526,3],[686,3],[1113,3]]},"536":{"position":[[15,3],[399,3],[1063,3],[1155,3],[1311,3],[1454,3],[1627,4],[1694,3],[1757,4]]},"540":{"position":[[388,3],[1951,4],[2263,4]]},"542":{"position":[[48,3],[89,3],[132,3],[183,3],[259,3]]},"544":{"position":[[16,3]]},"546":{"position":[[742,3],[902,4]]},"548":{"position":[[11,3]]},"550":{"position":[[23,4],[64,3],[178,3],[204,3]]},"552":{"position":[[11,3],[139,3],[194,3],[253,3],[306,3]]},"555":{"position":[[46,3],[170,4],[350,3],[481,3],[931,3],[1102,3],[1192,3],[1309,3],[1614,3],[1781,3]]},"579":{"position":[[345,3],[555,3],[771,3]]},"602":{"position":[[234,3]]},"610":{"position":[[464,3],[679,3]]},"612":{"position":[[447,3],[627,3]]},"614":{"position":[[321,3],[496,3]]},"616":{"position":[[287,3],[445,3]]},"618":{"position":[[300,3],[458,3]]},"620":{"position":[[391,3],[571,3]]},"622":{"position":[[298,3],[532,3]]},"626":{"position":[[364,3],[605,3]]},"628":{"position":[[386,3],[586,3]]},"630":{"position":[[282,3],[482,3]]},"632":{"position":[[417,3],[598,3]]},"634":{"position":[[278,3],[463,3]]},"636":{"position":[[229,3],[378,3]]},"646":{"position":[[359,3],[553,3]]},"650":{"position":[[475,3],[685,3],[901,3]]},"652":{"position":[[426,3],[595,3],[2771,3]]},"654":{"position":[[361,3],[511,3]]},"656":{"position":[[373,3],[517,3]]},"658":{"position":[[415,3]]},"662":{"position":[[967,3]]},"665":{"position":[[316,3]]},"667":{"position":[[246,3],[404,3]]},"669":{"position":[[266,3],[472,3]]},"671":{"position":[[362,3],[557,3]]},"673":{"position":[[299,3],[454,3]]},"680":{"position":[[233,3],[363,3]]},"682":{"position":[[243,3],[437,3]]},"685":{"position":[[369,3],[579,3],[795,3]]},"687":{"position":[[258,3],[468,3],[684,3]]},"689":{"position":[[283,3],[493,3],[709,3]]},"691":{"position":[[435,3],[645,3],[861,3]]},"693":{"position":[[261,3],[471,3],[687,3]]},"695":{"position":[[293,3],[503,3],[719,3]]},"697":{"position":[[392,3],[602,3],[818,3]]},"703":{"position":[[113,3]]},"729":{"position":[[533,3],[624,3],[862,3]]},"731":{"position":[[519,3],[610,3],[876,3]]},"733":{"position":[[575,3],[666,3],[991,3]]},"735":{"position":[[483,3],[668,3],[1891,3]]},"737":{"position":[[540,3]]},"747":{"position":[[701,3],[859,3],[2082,3]]}}}],["k3d",{"_index":728,"t":{"52":{"position":[[45,3],[56,3],[131,3],[335,4]]}}}],["k3s'",{"_index":366,"t":{"21":{"position":[[137,5]]},"185":{"position":[[702,5]]}}}],["k3s.servic",{"_index":2393,"t":{"472":{"position":[[1474,11]]}}}],["k3s1",{"_index":738,"t":{"52":{"position":[[576,4]]}}}],["k3s[1592",{"_index":2845,"t":{"735":{"position":[[701,10]]},"747":{"position":[[892,10]]}}}],["k3s[1600",{"_index":2742,"t":{"610":{"position":[[712,10]]},"612":{"position":[[660,10]]},"614":{"position":[[529,10]]},"616":{"position":[[478,10]]},"618":{"position":[[491,10]]},"620":{"position":[[604,10]]},"622":{"position":[[565,10]]},"626":{"position":[[638,10]]},"628":{"position":[[619,10]]},"630":{"position":[[515,10]]},"632":{"position":[[631,10]]},"634":{"position":[[496,10]]},"636":{"position":[[411,10]]},"646":{"position":[[586,10]]},"652":{"position":[[628,10],[2804,10]]},"654":{"position":[[544,10]]},"656":{"position":[[550,10]]},"667":{"position":[[437,10]]},"669":{"position":[[505,10]]},"671":{"position":[[590,10]]},"673":{"position":[[487,10]]},"680":{"position":[[396,10]]},"682":{"position":[[470,10]]},"729":{"position":[[895,10]]},"731":{"position":[[909,10]]},"733":{"position":[[1024,10]]},"735":{"position":[[1924,10]]},"747":{"position":[[2115,10]]}}}],["k3s_",{"_index":1696,"t":{"277":{"position":[[219,4]]},"279":{"position":[[572,4]]},"432":{"position":[[2544,4]]},"548":{"position":[[202,4]]}}}],["k3s_agent_token",{"_index":1230,"t":{"137":{"position":[[225,15]]},"162":{"position":[[2973,18]]},"172":{"position":[[240,15]]}}}],["k3s_agent_token_fil",{"_index":1231,"t":{"137":{"position":[[332,20]]},"162":{"position":[[3060,23]]}}}],["k3s_cluster_init",{"_index":1232,"t":{"137":{"position":[[469,16]]},"162":{"position":[[3245,19]]}}}],["k3s_cluster_reset",{"_index":1146,"t":{"118":{"position":[[2485,21]]},"137":{"position":[[547,17]]},"162":{"position":[[3348,20]]}}}],["k3s_cluster_secret",{"_index":998,"t":{"97":{"position":[[105,18]]},"160":{"position":[[141,18]]}}}],["k3s_config_fil",{"_index":1006,"t":{"101":{"position":[[319,18]]},"162":{"position":[[330,18]]},"281":{"position":[[1229,17]]}}}],["k3s_datastore_cafil",{"_index":1212,"t":{"135":{"position":[[181,20]]},"162":{"position":[[4098,23]]},"187":{"position":[[679,20]]}}}],["k3s_datastore_certfil",{"_index":1214,"t":{"135":{"position":[[307,22]]},"162":{"position":[[4224,25]]},"187":{"position":[[1021,22]]}}}],["k3s_datastore_endpoint",{"_index":1210,"t":{"135":{"position":[[65,22]]},"162":{"position":[[3964,25]]},"187":{"position":[[434,22]]}}}],["k3s_datastore_endpoint='mysql://username:password@tcp(hostname:3306)/databas",{"_index":1678,"t":{"268":{"position":[[1184,77]]}}}],["k3s_datastore_keyfil",{"_index":1216,"t":{"135":{"position":[[426,21]]},"162":{"position":[[4341,24]]},"187":{"position":[[1346,21]]}}}],["k3s_debug",{"_index":1007,"t":{"101":{"position":[[375,12]]},"162":{"position":[[386,12]]}}}],["k3s_kubeconfig_mod",{"_index":1235,"t":{"139":{"position":[[172,19]]},"162":{"position":[[2676,22]]}}}],["k3s_kubeconfig_mode=\"644",{"_index":1720,"t":{"279":{"position":[[600,25]]},"285":{"position":[[277,25],[409,25]]}}}],["k3s_kubeconfig_output",{"_index":1234,"t":{"139":{"position":[[73,21]]},"162":{"position":[[2580,24]]}}}],["k3s_lb_server_port",{"_index":982,"t":{"87":{"position":[[457,18]]},"101":{"position":[[1945,21]]},"162":{"position":[[9047,21]]}}}],["k3s_node_nam",{"_index":977,"t":{"87":{"position":[[56,13]]},"101":{"position":[[1048,16]]},"162":{"position":[[6373,16]]},"352":{"position":[[278,14]]},"422":{"position":[[237,13]]},"428":{"position":[[1645,13]]}}}],["k3s_resolv_conf",{"_index":991,"t":{"91":{"position":[[192,15]]},"101":{"position":[[2881,18]]},"162":{"position":[[7942,18]]}}}],["k3s_rootless_cidr",{"_index":573,"t":{"35":{"position":[[405,17]]}}}],["k3s_rootless_disable_host_loopback",{"_index":591,"t":{"35":{"position":[[836,34]]}}}],["k3s_rootless_enable_ipv6",{"_index":576,"t":{"35":{"position":[[490,24]]}}}],["k3s_rootless_mtu",{"_index":568,"t":{"35":{"position":[[330,16]]}}}],["k3s_rootless_port_driv",{"_index":582,"t":{"35":{"position":[[655,24]]}}}],["k3s_selinux",{"_index":981,"t":{"87":{"position":[[393,11]]},"101":{"position":[[1681,14]]},"162":{"position":[[8783,14]]}}}],["k3s_server",{"_index":1474,"t":{"203":{"position":[[2355,11],[2479,12]]},"205":{"position":[[392,11],[516,12]]}}}],["k3s_system_default_registri",{"_index":1275,"t":{"162":{"position":[[7662,30]]}}}],["k3s_token",{"_index":972,"t":{"83":{"position":[[62,9]]},"101":{"position":[[748,12]]},"137":{"position":[[62,9]]},"162":{"position":[[52,13],[2791,12]]},"172":{"position":[[210,9]]},"215":{"position":[[203,9]]},"428":{"position":[[1087,9],[1459,9]]},"432":{"position":[[2731,9]]}}}],["k3s_token=\"mypassword",{"_index":1706,"t":{"277":{"position":[[1530,22]]}}}],["k3s_token=12345",{"_index":1702,"t":{"277":{"position":[[941,15],[996,15]]}}}],["k3s_token=<your_token",{"_index":1674,"t":{"268":{"position":[[373,22]]}}}],["k3s_token=lb",{"_index":1457,"t":{"203":{"position":[[1434,12],[2884,12]]},"205":{"position":[[921,12]]}}}],["k3s_token=mynodetoken",{"_index":2184,"t":{"428":{"position":[[1230,21]]}}}],["k3s_token=mypassword",{"_index":1708,"t":{"277":{"position":[[1753,20]]}}}],["k3s_token=secret",{"_index":1515,"t":{"219":{"position":[[441,16]]},"221":{"position":[[1194,16],[1462,16],[2183,16]]}}}],["k3s_token_fil",{"_index":973,"t":{"83":{"position":[[123,14]]},"101":{"position":[[827,17]]},"137":{"position":[[149,14]]},"162":{"position":[[2859,17]]}}}],["k3s_url",{"_index":974,"t":{"83":{"position":[[200,7]]},"101":{"position":[[52,11],[901,10]]},"137":{"position":[[401,7]]},"162":{"position":[[3164,10]]},"277":{"position":[[1096,7],[1812,7]]},"317":{"position":[[664,7]]},"428":{"position":[[1075,7],[1269,7]]},"432":{"position":[[1475,7],[1522,7],[2619,7]]}}}],["k3s_url=https://<server_ip>:6443",{"_index":1673,"t":{"268":{"position":[[340,32]]}}}],["k3s_url=https://k3s.example.com",{"_index":1707,"t":{"277":{"position":[[1625,31],[1721,31]]}}}],["k3s_url=https://myserver:6443",{"_index":2183,"t":{"428":{"position":[[1200,29]]}}}],["k8",{"_index":17,"t":{"2":{"position":[[144,3],[174,3]]},"6":{"position":[[136,4]]},"470":{"position":[[878,3],[1441,3],[2124,3]]}}}],["k8s.io",{"_index":610,"t":{"39":{"position":[[366,6]]},"604":{"position":[[777,6],[1059,6],[1341,6],[1623,6],[1905,6],[2187,6],[2469,6]]},"606":{"position":[[758,6],[1040,6],[1322,6],[1604,6],[1886,6],[2168,6],[2450,6]]},"624":{"position":[[771,6],[1053,6],[1335,6],[1617,6],[1899,6],[2181,6],[2463,6]]},"677":{"position":[[743,6],[1025,6],[1307,6],[1589,6],[1871,6],[2153,6],[2435,6]]}}}],["k8s_coredns_coredn",{"_index":349,"t":{"19":{"position":[[2549,19]]}}}],["k8s_lb",{"_index":298,"t":{"19":{"position":[[1325,6],[1489,6]]}}}],["k8s_local",{"_index":328,"t":{"19":{"position":[[2163,9]]}}}],["k8s_metric",{"_index":338,"t":{"19":{"position":[[2361,11]]}}}],["k8s_pod_coredn",{"_index":357,"t":{"19":{"position":[[2713,15]]}}}],["k8s_pod_loc",{"_index":359,"t":{"19":{"position":[[2873,13]]}}}],["k8s_pod_svclb",{"_index":322,"t":{"19":{"position":[[1837,13]]}}}],["k8s_pod_traefik",{"_index":324,"t":{"19":{"position":[[1993,15]]}}}],["k8s_traefik_traefik",{"_index":312,"t":{"19":{"position":[[1672,19]]}}}],["keep",{"_index":677,"t":{"46":{"position":[[90,4]]},"48":{"position":[[87,4]]},"247":{"position":[[454,4]]},"488":{"position":[[354,4]]},"490":{"position":[[340,4]]}}}],["keepaliv",{"_index":1430,"t":{"203":{"position":[[234,10],[321,10],[384,11],[425,10],[1219,10],[1292,10]]}}}],["kep",{"_index":632,"t":{"39":{"position":[[904,3]]}}}],["kernel",{"_index":80,"t":{"4":{"position":[[811,6]]},"50":{"position":[[579,6]]},"87":{"position":[[269,6],[289,6],[330,6]]},"101":{"position":[[1977,6],[2006,6],[2047,6]]},"162":{"position":[[8355,6],[8384,6],[8425,6]]},"303":{"position":[[683,6],[770,6],[1368,6],[1656,6],[1920,6]]},"305":{"position":[[195,7]]},"398":{"position":[[625,6]]},"462":{"position":[[48,6]]},"464":{"position":[[75,6],[186,6],[246,6]]},"474":{"position":[[189,6],[786,6]]},"476":{"position":[[4043,6]]},"739":{"position":[[333,6]]}}}],["kernel.keys.root_maxbytes=25000000",{"_index":2313,"t":{"464":{"position":[[473,34]]}}}],["kernel.panic=10",{"_index":2311,"t":{"464":{"position":[[434,15]]}}}],["kernel.panic_on_oops=1",{"_index":2312,"t":{"464":{"position":[[450,22]]}}}],["key",{"_index":381,"t":{"21":{"position":[[506,4]]},"108":{"position":[[435,4],[484,4],[612,4],[868,5],[1000,4],[1088,3],[1133,4],[1243,5]]},"110":{"position":[[23,4],[241,4],[1096,3],[1913,4],[2529,5]]},"112":{"position":[[364,4],[500,4],[1172,5],[1721,4],[1893,5],[2049,4]]},"114":{"position":[[387,4],[1229,4],[1512,5]]},"116":{"position":[[27,3],[49,3],[131,4],[153,3],[416,5],[533,3],[619,4],[849,3],[958,3],[1101,3]]},"118":{"position":[[3196,3],[3210,3],[3231,3],[3245,3],[3529,4],[3563,4],[3871,4],[3910,4],[4664,4],[4698,4]]},"122":{"position":[[195,4],[233,4],[326,4]]},"124":{"position":[[61,4],[791,4]]},"128":{"position":[[324,3],[429,5],[636,3],[1466,3],[1529,4],[1601,4],[1659,3],[1713,3],[1727,4],[1815,4]]},"135":{"position":[[452,3],[1364,3],[1402,3],[1423,3],[1465,3]]},"162":{"position":[[4285,3],[5294,3],[5319,3],[5361,3],[5386,3]]},"174":{"position":[[542,3],[679,5],[697,4]]},"187":{"position":[[1372,3]]},"281":{"position":[[678,4]]},"283":{"position":[[271,3],[316,3],[422,3]]},"319":{"position":[[275,5],[298,3],[309,5],[876,3]]},"342":{"position":[[288,3]]},"344":{"position":[[435,3],[694,3]]},"424":{"position":[[889,4]]},"476":{"position":[[1194,3],[1610,3],[1698,3],[1913,3],[2466,3],[2739,3],[4302,3]]},"496":{"position":[[116,3]]},"510":{"position":[[177,3],[235,3],[731,7]]},"512":{"position":[[157,4],[195,4]]},"540":{"position":[[586,4],[934,4]]},"579":{"position":[[1782,3],[1893,3]]},"610":{"position":[[288,3],[413,3],[631,4],[1999,3],[2447,3],[2526,3],[2770,3]]},"612":{"position":[[1947,3],[2395,3],[2474,3],[2718,3]]},"614":{"position":[[1816,3],[2264,3],[2343,3],[2587,3]]},"616":{"position":[[1765,3],[2213,3],[2292,3],[2536,3]]},"618":{"position":[[1778,3],[2226,3],[2305,3],[2549,3]]},"620":{"position":[[1891,3],[2339,3],[2418,3],[2662,3]]},"622":{"position":[[1852,3],[2300,3],[2379,3],[2623,3]]},"626":{"position":[[1925,3],[2373,3],[2452,3],[2696,3]]},"628":{"position":[[1906,3],[2354,3],[2433,3],[2677,3]]},"630":{"position":[[1802,3],[2250,3],[2329,3],[2573,3]]},"632":{"position":[[1918,3],[2366,3],[2445,3],[2689,3]]},"634":{"position":[[1783,3],[2231,3],[2310,3],[2554,3]]},"636":{"position":[[1698,3],[2146,3],[2225,3],[2469,3]]},"646":{"position":[[1873,3],[2321,3],[2400,3],[2644,3]]},"648":{"position":[[181,3],[214,3],[276,3]]},"650":{"position":[[278,3],[380,3],[1912,3],[2023,3]]},"652":{"position":[[271,3],[353,3],[375,3],[542,3],[1915,3],[2363,3],[2442,3],[2686,3]]},"654":{"position":[[1831,3],[2279,3],[2358,3],[2602,3]]},"656":{"position":[[1837,3],[2285,3],[2364,3],[2608,3]]},"667":{"position":[[972,3],[1149,3],[1328,3],[1505,3],[1885,3]]},"669":{"position":[[1040,3],[1217,3],[1396,3],[1573,3],[1953,3]]},"671":{"position":[[196,3],[230,3],[300,3],[450,3],[504,3],[1125,3],[1302,3],[1481,3],[1658,3],[2038,3]]},"673":{"position":[[1022,3],[1199,3],[1378,3],[1555,3],[1935,3]]},"685":{"position":[[255,3],[1806,3],[1917,3],[2138,4],[2190,3],[2265,3],[2344,3]]},"687":{"position":[[1695,3],[1806,3]]},"689":{"position":[[1720,3],[1831,3]]},"691":{"position":[[316,3],[340,3],[1872,3],[1983,3],[2204,4],[2266,3],[2346,3],[2440,3]]},"693":{"position":[[1698,3],[1809,3]]},"695":{"position":[[1730,3],[1841,3]]},"697":{"position":[[1829,3],[1940,3]]},"729":{"position":[[2182,3],[2630,3],[2709,3],[2953,3]]},"731":{"position":[[2196,3],[2644,3],[2723,3],[2967,3]]},"733":{"position":[[2311,3],[2759,3],[2838,3],[3082,3]]},"735":{"position":[[1818,3],[3041,3]]},"747":{"position":[[231,3],[506,3],[528,3],[806,3],[2009,3],[3232,3]]}}}],["key1=value1:noexecut",{"_index":1002,"t":{"99":{"position":[[400,21]]}}}],["key=/var/lib/rancher/k3s/server/tls/cli",{"_index":2421,"t":{"476":{"position":[[1011,42]]},"610":{"position":[[1760,42]]},"612":{"position":[[1708,42]]},"614":{"position":[[1577,42]]},"616":{"position":[[1526,42]]},"618":{"position":[[1539,42]]},"620":{"position":[[1652,42]]},"622":{"position":[[1613,42]]},"626":{"position":[[1686,42]]},"628":{"position":[[1667,42]]},"630":{"position":[[1563,42]]},"632":{"position":[[1679,42]]},"634":{"position":[[1544,42]]},"636":{"position":[[1459,42]]},"646":{"position":[[1634,42]]},"652":{"position":[[1676,42]]},"654":{"position":[[1592,42]]},"656":{"position":[[1598,42]]},"729":{"position":[[1943,42]]},"731":{"position":[[1957,42]]},"733":{"position":[[2072,42]]}}}],["key=/var/lib/rancher/k3s/server/tls/etcd/client.key",{"_index":387,"t":{"21":{"position":[[675,51]]}}}],["key=<path/to/cli",{"_index":2735,"t":{"610":{"position":[[393,19]]}}}],["key=<s3",{"_index":1157,"t":{"118":{"position":[[3514,7],[3548,7],[3856,7],[3895,7],[4649,7],[4683,7]]}}}],["key_fil",{"_index":1953,"t":{"342":{"position":[[268,8]]},"344":{"position":[[411,9],[670,9]]}}}],["keyfil",{"_index":1215,"t":{"135":{"position":[[412,7]]},"162":{"position":[[4262,7]]},"187":{"position":[[1307,7],[1338,7]]},"579":{"position":[[1744,10]]},"650":{"position":[[1874,10],[2261,8],[2324,7]]},"685":{"position":[[1768,10]]},"687":{"position":[[1657,10]]},"689":{"position":[[1682,10]]},"691":{"position":[[1834,10]]},"693":{"position":[[1660,10]]},"695":{"position":[[1692,10]]},"697":{"position":[[1791,10]]}}}],["keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key",{"_index":2414,"t":{"476":{"position":[[699,55]]},"610":{"position":[[1437,55]]},"612":{"position":[[1385,55]]},"614":{"position":[[1254,55]]},"616":{"position":[[1203,55]]},"618":{"position":[[1216,55]]},"620":{"position":[[1329,55]]},"622":{"position":[[1290,55]]},"626":{"position":[[1363,55]]},"628":{"position":[[1344,55]]},"630":{"position":[[1240,55]]},"632":{"position":[[1356,55]]},"634":{"position":[[1221,55]]},"636":{"position":[[1136,55]]},"646":{"position":[[1311,55]]},"652":{"position":[[1353,55]]},"654":{"position":[[1269,55]]},"656":{"position":[[1275,55]]},"729":{"position":[[1620,55]]},"731":{"position":[[1634,55]]},"733":{"position":[[1749,55]]}}}],["keyfile=<path/to/cli",{"_index":2774,"t":{"650":{"position":[[356,23]]}}}],["kib/sec",{"_index":2268,"t":{"446":{"position":[[407,7]]}}}],["kill",{"_index":1184,"t":{"124":{"position":[[283,4],[481,4],[1193,4],[1360,4],[1431,4],[1486,4],[1682,4],[1737,4]]},"126":{"position":[[217,4],[539,4],[1050,4],[1217,4],[1409,4],[1464,4]]},"428":{"position":[[396,6]]}}}],["killal",{"_index":1445,"t":{"203":{"position":[[915,8]]},"542":{"position":[[222,7],[421,7]]}}}],["killall.sh",{"_index":1810,"t":{"307":{"position":[[1100,10]]},"406":{"position":[[517,10]]},"428":{"position":[[479,11]]},"542":{"position":[[187,10],[480,10]]}}}],["kind",{"_index":439,"t":{"25":{"position":[[972,5],[1049,5]]},"61":{"position":[[428,5]]},"247":{"position":[[545,5],[615,5]]},"249":{"position":[[755,5]]},"291":{"position":[[188,5],[339,5],[436,5],[486,5]]},"398":{"position":[[1584,5],[1714,5],[2222,5]]},"424":{"position":[[785,5]]},"468":{"position":[[451,5],[581,5],[1388,5],[2575,5],[3136,5],[3588,5],[4044,5],[4249,5],[4472,5],[4667,5],[4776,5],[4831,5],[4951,5],[5078,5],[5178,5],[5254,5],[5401,5],[5501,5],[5587,5],[5711,5],[5761,5],[5798,5],[6001,5],[6196,5]]},"470":{"position":[[311,5],[692,5],[1325,5],[1539,5],[1780,5],[2008,5],[2222,5],[2463,5]]},"472":{"position":[[758,5]]},"510":{"position":[[578,7]]},"520":{"position":[[15,5]]},"522":{"position":[[15,5]]},"526":{"position":[[15,5]]},"528":{"position":[[15,5]]},"540":{"position":[[453,5],[802,5],[2301,5]]}}}],["kine",{"_index":2272,"t":{"454":{"position":[[91,5]]}}}],["kine/sqlit",{"_index":2211,"t":{"434":{"position":[[176,11]]},"446":{"position":[[270,11],[423,11]]},"448":{"position":[[275,11]]}}}],["klipper",{"_index":89,"t":{"4":{"position":[[947,7]]},"400":{"position":[[68,7]]},"408":{"position":[[135,7]]},"438":{"position":[[250,7]]}}}],["klog",{"_index":1561,"t":{"235":{"position":[[616,5]]}}}],["km",{"_index":2522,"t":{"498":{"position":[[215,5]]},"660":{"position":[[130,3]]}}}],["know",{"_index":1383,"t":{"187":{"position":[[134,5]]},"213":{"position":[[236,5]]}}}],["known",{"_index":773,"t":{"59":{"position":[[18,5]]},"168":{"position":[[533,5]]},"174":{"position":[[1042,5]]},"189":{"position":[[1152,5]]},"235":{"position":[[607,5]]},"243":{"position":[[72,5]]},"245":{"position":[[222,5]]},"311":{"position":[[115,5]]},"313":{"position":[[42,5]]},"390":{"position":[[4,5]]},"392":{"position":[[106,5]]},"394":{"position":[[203,5]]},"396":{"position":[[63,5]]},"408":{"position":[[106,5]]}}}],["konnect",{"_index":1819,"t":{"309":{"position":[[465,12]]}}}],["ksl",{"_index":421,"t":{"25":{"position":[[460,3]]}}}],["kube",{"_index":267,"t":{"19":{"position":[[786,4],[855,4],[917,4],[976,4],[1030,4],[1080,4]]},"65":{"position":[[423,4],[471,4]]},"75":{"position":[[246,4],[535,4],[777,4],[1174,4]]},"77":{"position":[[437,4],[507,4]]},"93":{"position":[[75,4],[116,4]]},"101":{"position":[[3210,4],[3265,4]]},"106":{"position":[[507,4]]},"150":{"position":[[755,5]]},"154":{"position":[[203,4],[230,4]]},"156":{"position":[[69,4],[114,4],[139,4],[184,4],[209,4],[263,4],[297,4],[357,4],[453,4],[494,4]]},"162":{"position":[[2474,5],[3448,4],[3501,4],[3584,4],[3646,4],[3680,4],[3733,4],[3758,4],[3826,4],[6134,4],[6174,4],[8271,4],[8326,4]]},"199":{"position":[[781,4]]},"215":{"position":[[799,4]]},"221":{"position":[[2515,4]]},"247":{"position":[[293,4],[665,4]]},"249":{"position":[[812,4]]},"266":{"position":[[720,4]]},"309":{"position":[[875,4],[1178,4]]},"322":{"position":[[364,4],[550,4]]},"332":{"position":[[775,4],[844,4],[906,4]]},"398":{"position":[[284,4],[672,4],[1020,4],[1370,4],[1946,5],[3798,4]]},"406":{"position":[[85,4],[135,4],[425,4],[678,4],[734,4]]},"410":{"position":[[160,4]]},"424":{"position":[[1398,4]]},"468":{"position":[[189,4],[813,5],[1003,4],[5344,4],[5654,4],[5894,4],[5985,4],[6292,4],[6383,4],[6488,4]]},"470":{"position":[[407,4],[498,4],[887,4],[1397,4],[1617,4],[1858,4],[2080,4],[2300,4],[2541,4]]},"472":{"position":[[868,4],[949,4],[1207,4],[1290,4]]},"474":{"position":[[236,4],[584,4],[833,4],[1207,4]]},"476":{"position":[[172,4],[975,4],[1054,4],[1871,4],[1962,4],[2242,4],[2847,4]]},"480":{"position":[[533,4]]},"482":{"position":[[632,4]]},"484":{"position":[[513,4]]},"486":{"position":[[353,4]]},"488":{"position":[[528,4]]},"490":{"position":[[514,4]]},"492":{"position":[[738,4]]},"494":{"position":[[531,4]]},"500":{"position":[[605,4]]},"504":{"position":[[656,4]]},"506":{"position":[[716,5],[730,4],[743,4]]},"579":{"position":[[791,4]]},"602":{"position":[[254,4]]},"610":{"position":[[484,4],[775,4],[1724,4],[1803,4],[2737,4],[2819,4]]},"612":{"position":[[467,4],[723,4],[1672,4],[1751,4],[2685,4],[2767,4]]},"614":{"position":[[341,4],[592,4],[1541,4],[1620,4],[2554,4],[2636,4]]},"616":{"position":[[307,4],[541,4],[1490,4],[1569,4],[2503,4],[2585,4]]},"618":{"position":[[320,4],[554,4],[1503,4],[1582,4],[2516,4],[2598,4]]},"620":{"position":[[411,4],[667,4],[1616,4],[1695,4],[2629,4],[2711,4]]},"622":{"position":[[318,4],[628,4],[1577,4],[1656,4],[2590,4],[2672,4]]},"626":{"position":[[384,4],[701,4],[1650,4],[1729,4],[2663,4],[2745,4]]},"628":{"position":[[406,4],[682,4],[1631,4],[1710,4],[2644,4],[2726,4]]},"630":{"position":[[302,4],[578,4],[1527,4],[1606,4],[2540,4],[2622,4]]},"632":{"position":[[437,4],[694,4],[1643,4],[1722,4],[2656,4],[2738,4]]},"634":{"position":[[298,4],[559,4],[1508,4],[1587,4],[2521,4],[2603,4]]},"636":{"position":[[249,4],[474,4],[1423,4],[1502,4],[2436,4],[2518,4]]},"646":{"position":[[379,4],[649,4],[1598,4],[1677,4],[2611,4],[2693,4]]},"650":{"position":[[921,4]]},"652":{"position":[[450,4],[691,4],[1640,4],[1719,4],[2653,4],[2735,4],[2867,4]]},"654":{"position":[[381,4],[607,4],[1556,4],[1635,4],[2569,4],[2651,4]]},"656":{"position":[[393,4],[613,4],[1562,4],[1641,4],[2575,4],[2657,4]]},"658":{"position":[[435,4]]},"662":{"position":[[987,4]]},"665":{"position":[[336,4]]},"667":{"position":[[266,4],[500,4],[854,4],[950,4]]},"669":{"position":[[286,4],[568,4],[922,4],[1018,4]]},"671":{"position":[[382,4],[653,4],[1007,4],[1103,4]]},"673":{"position":[[319,4],[550,4],[904,4],[1000,4]]},"680":{"position":[[253,4],[459,4]]},"682":{"position":[[263,4],[533,4]]},"685":{"position":[[815,4]]},"687":{"position":[[704,4]]},"689":{"position":[[729,4]]},"691":{"position":[[881,4]]},"693":{"position":[[707,4]]},"695":{"position":[[739,4]]},"697":{"position":[[838,4]]},"703":{"position":[[133,4]]},"729":{"position":[[553,4],[644,4],[958,4],[1907,4],[1986,4],[2920,4],[3002,4]]},"731":{"position":[[539,4],[630,4],[972,4],[1921,4],[2000,4],[2934,4],[3016,4]]},"733":{"position":[[595,4],[686,4],[1087,4],[2036,4],[2115,4],[3049,4],[3131,4]]}}}],["kube/config",{"_index":748,"t":{"52":{"position":[[904,14]]},"183":{"position":[[78,15]]}}}],["kubeadm",{"_index":171,"t":{"15":{"position":[[244,7]]},"179":{"position":[[68,7]]}}}],["kubeadm.conf",{"_index":2822,"t":{"708":{"position":[[191,12]]},"710":{"position":[[197,12]]},"729":{"position":[[226,12]]},"731":{"position":[[212,12]]},"733":{"position":[[255,12]]},"735":{"position":[[202,12]]},"737":{"position":[[239,12]]},"739":{"position":[[224,12]]},"741":{"position":[[225,12]]},"743":{"position":[[107,12]]},"745":{"position":[[223,12]]},"747":{"position":[[345,12]]},"749":{"position":[[279,12]]},"751":{"position":[[107,12]]},"753":{"position":[[528,12]]}}}],["kubeapi",{"_index":2541,"t":{"510":{"position":[[262,7]]}}}],["kubeconfig",{"_index":744,"t":{"52":{"position":[[802,10]]},"77":{"position":[[706,10],[793,10]]},"139":{"position":[[46,10],[101,10],[150,10],[198,10],[229,10]]},"162":{"position":[[2497,10],[2539,10],[2613,10],[2650,10]]},"179":{"position":[[980,10],[1028,13],[1757,10],[1805,13],[2241,10],[2289,13],[2530,10],[2578,13]]},"181":{"position":[[4,10],[245,10],[303,10],[356,10],[440,10],[607,10],[649,10],[719,10]]},"217":{"position":[[732,10]]},"245":{"position":[[504,10]]},"251":{"position":[[339,10]]},"279":{"position":[[674,10]]},"281":{"position":[[315,10],[499,10]]},"283":{"position":[[651,10],[739,10],[885,10]]},"285":{"position":[[502,10]]},"428":{"position":[[514,10]]}}}],["kubeconfig=/etc/rancher/k3s/k3s.yaml",{"_index":1349,"t":{"181":{"position":[[480,36]]}}}],["kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig",{"_index":2479,"t":{"476":{"position":[[3860,56]]},"735":{"position":[[1399,56],[2622,56]]},"747":{"position":[[1590,56],[2813,56]]}}}],["kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig",{"_index":2446,"t":{"476":{"position":[[2523,65]]},"667":{"position":[[568,65],[650,65],[1694,65]]},"669":{"position":[[636,65],[718,65],[1762,65]]},"671":{"position":[[721,65],[803,65],[1847,65]]},"673":{"position":[[618,65],[700,65],[1744,65]]}}}],["kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig",{"_index":2453,"t":{"476":{"position":[[2917,64]]},"652":{"position":[[2899,64],[2980,64],[3130,64]]},"680":{"position":[[491,64],[572,64],[722,64]]},"682":{"position":[[565,64],[646,64],[796,64]]}}}],["kubeconfig=~/.kube/k3s.yaml",{"_index":549,"t":{"33":{"position":[[728,27]]}}}],["kubectl",{"_index":260,"t":{"19":{"position":[[711,7]]},"27":{"position":[[218,7]]},"33":{"position":[[756,7]]},"39":{"position":[[1043,8]]},"77":{"position":[[596,7],[621,7]]},"99":{"position":[[506,8]]},"150":{"position":[[1135,7],[1152,7]]},"181":{"position":[[180,7],[517,7],[639,7]]},"183":{"position":[[177,7]]},"203":{"position":[[1523,7],[1598,7],[2972,7],[3046,7]]},"205":{"position":[[1009,7],[1083,7]]},"213":{"position":[[1678,7]]},"221":{"position":[[1704,7]]},"273":{"position":[[434,7]]},"289":{"position":[[187,7]]},"291":{"position":[[602,7]]},"293":{"position":[[41,7],[106,7]]},"295":{"position":[[87,7]]},"297":{"position":[[9,7],[235,7]]},"299":{"position":[[9,7],[57,7],[121,7]]},"309":{"position":[[1000,7],[1017,7]]},"322":{"position":[[141,7],[472,7],[529,7]]},"332":{"position":[[714,7]]},"378":{"position":[[450,7],[470,7]]},"398":{"position":[[3324,7],[3433,7],[3780,7]]},"424":{"position":[[621,7]]},"428":{"position":[[453,8],[583,7]]},"432":{"position":[[547,8]]},"440":{"position":[[446,7]]},"522":{"position":[[325,7],[352,7],[415,7],[430,7]]},"524":{"position":[[265,7],[465,7],[492,7]]},"528":{"position":[[348,7],[363,7]]},"538":{"position":[[218,7]]},"540":{"position":[[2663,8],[2672,7],[2716,7]]},"756":{"position":[[314,7]]}}}],["kubelet",{"_index":183,"t":{"17":{"position":[[261,8],[1315,8]]},"19":{"position":[[108,7],[177,7]]},"27":{"position":[[106,8],[271,8]]},"33":{"position":[[131,7]]},"39":{"position":[[112,8]]},"67":{"position":[[476,8]]},"77":{"position":[[495,7]]},"87":{"position":[[170,7],[232,7],[365,7]]},"91":{"position":[[208,7]]},"93":{"position":[[19,7],[57,7]]},"99":{"position":[[112,8]]},"101":{"position":[[1173,7],[1244,7],[2082,7],[2856,7],[3140,7],[3192,7]]},"106":{"position":[[498,8]]},"150":{"position":[[1034,7]]},"156":{"position":[[397,7],[435,7]]},"162":{"position":[[6498,7],[6569,7],[7917,7],[8201,7],[8253,7],[8460,7]]},"268":{"position":[[1339,9]]},"309":{"position":[[169,8],[257,7],[786,8],[857,8],[1101,9],[1160,8],[1311,8],[1648,8]]},"311":{"position":[[163,7],[391,7],[455,7]]},"360":{"position":[[388,7]]},"362":{"position":[[271,7]]},"398":{"position":[[1125,7]]},"428":{"position":[[754,8]]},"436":{"position":[[473,7]]},"464":{"position":[[10,7],[43,7]]},"474":{"position":[[689,7],[1312,7]]},"476":{"position":[[831,7],[909,7],[996,7],[3037,7],[3919,7]]},"504":{"position":[[79,8],[233,8]]},"608":{"position":[[168,7]]},"610":{"position":[[118,9],[257,7],[315,7],[378,7],[518,8],[570,7],[616,7],[1580,7],[1658,7],[1745,7],[1824,7]]},"612":{"position":[[117,9],[262,7],[363,7],[501,8],[553,7],[1528,7],[1606,7],[1693,7],[1772,7]]},"614":{"position":[[1397,7],[1475,7],[1562,7],[1641,7]]},"616":{"position":[[1346,7],[1424,7],[1511,7],[1590,7]]},"618":{"position":[[1359,7],[1437,7],[1524,7],[1603,7]]},"620":{"position":[[1472,7],[1550,7],[1637,7],[1716,7]]},"622":{"position":[[1433,7],[1511,7],[1598,7],[1677,7]]},"626":{"position":[[1506,7],[1584,7],[1671,7],[1750,7]]},"628":{"position":[[1487,7],[1565,7],[1652,7],[1731,7]]},"630":{"position":[[1383,7],[1461,7],[1548,7],[1627,7]]},"632":{"position":[[103,9],[1499,7],[1577,7],[1664,7],[1743,7]]},"634":{"position":[[1364,7],[1442,7],[1529,7],[1608,7]]},"636":{"position":[[1279,7],[1357,7],[1444,7],[1523,7]]},"646":{"position":[[1454,7],[1532,7],[1619,7],[1698,7]]},"652":{"position":[[1496,7],[1574,7],[1661,7],[1740,7]]},"654":{"position":[[1412,7],[1490,7],[1577,7],[1656,7]]},"656":{"position":[[1418,7],[1496,7],[1583,7],[1662,7]]},"667":{"position":[[1045,7],[1134,7],[1222,7],[1312,7]]},"669":{"position":[[1113,7],[1202,7],[1290,7],[1380,7]]},"671":{"position":[[1198,7],[1287,7],[1375,7],[1465,7]]},"673":{"position":[[1095,7],[1184,7],[1272,7],[1362,7]]},"729":{"position":[[37,7],[164,7],[382,7],[1763,7],[1841,7],[1928,7],[2007,7]]},"731":{"position":[[37,7],[150,7],[368,7],[1777,7],[1855,7],[1942,7],[2021,7]]},"733":{"position":[[37,7],[193,7],[424,7],[1892,7],[1970,7],[2057,7],[2136,7]]},"735":{"position":[[37,7],[140,7],[354,7],[503,8],[764,7],[1987,7]]},"737":{"position":[[37,7],[177,7],[411,7],[560,8]]},"739":{"position":[[47,7],[162,7],[388,7]]},"741":{"position":[[47,7],[163,7],[388,7]]},"743":{"position":[[45,7],[262,7]]},"745":{"position":[[37,7],[161,7],[356,7]]},"747":{"position":[[37,7],[155,8],[283,7],[572,7],[721,8],[955,7],[2178,7]]},"749":{"position":[[47,7],[217,7],[438,7]]},"751":{"position":[[45,7],[292,7]]},"753":{"position":[[37,7],[466,7],[997,7]]}}}],["kubelet'",{"_index":2305,"t":{"464":{"position":[[152,9]]}}}],["kubelet.conf",{"_index":2307,"t":{"464":{"position":[[303,12],[379,13]]}}}],["kubelet.crt",{"_index":2489,"t":{"476":{"position":[[4267,11]]},"735":{"position":[[1792,11],[3015,11]]},"747":{"position":[[1983,11],[3206,11]]}}}],["kubelet.key",{"_index":2491,"t":{"476":{"position":[[4346,11]]},"735":{"position":[[1862,12],[3085,12]]},"747":{"position":[[2053,12],[3276,12]]}}}],["kubelet.servic",{"_index":2835,"t":{"729":{"position":[[454,15]]},"731":{"position":[[440,15]]},"733":{"position":[[496,15]]},"735":{"position":[[426,15]]},"737":{"position":[[483,15]]},"739":{"position":[[460,15]]},"741":{"position":[[460,15]]},"743":{"position":[[334,15]]},"745":{"position":[[428,15]]},"747":{"position":[[644,15]]},"749":{"position":[[510,15]]},"751":{"position":[[364,15]]},"753":{"position":[[1069,15]]}}}],["kubelet_authz_arg",{"_index":2838,"t":{"731":{"position":[[276,18]]},"733":{"position":[[319,18]]}}}],["kubelet_certificate_arg",{"_index":2870,"t":{"747":{"position":[[410,24]]},"749":{"position":[[369,24]]},"751":{"position":[[171,24]]}}}],["kubelet_system_pods_arg",{"_index":2834,"t":{"729":{"position":[[290,24]]},"735":{"position":[[266,24]]},"737":{"position":[[303,24]]},"739":{"position":[[288,24]]},"741":{"position":[[319,24]]},"743":{"position":[[193,24]]},"745":{"position":[[287,24]]}}}],["kubepod",{"_index":2251,"t":{"440":{"position":[[359,8]]}}}],["kubernet",{"_index":1,"t":{"2":{"position":[[12,11]]},"4":{"position":[[25,10],[572,10]]},"6":{"position":[[29,10],[93,10],[169,10]]},"17":{"position":[[910,10]]},"19":{"position":[[87,10]]},"29":{"position":[[253,11]]},"39":{"position":[[283,10],[533,10],[1074,10]]},"52":{"position":[[241,11]]},"69":{"position":[[224,10]]},"71":{"position":[[97,10],[275,10],[474,10]]},"73":{"position":[[84,10]]},"75":{"position":[[569,10],[1058,10]]},"77":{"position":[[160,10],[484,10],[677,10]]},"99":{"position":[[537,10]]},"108":{"position":[[0,10],[98,10],[139,10],[752,10]]},"128":{"position":[[1674,10]]},"154":{"position":[[92,10]]},"162":{"position":[[6010,10]]},"181":{"position":[[91,10],[142,10]]},"185":{"position":[[19,10],[90,10],[153,10],[549,10]]},"189":{"position":[[801,10],[1652,10]]},"199":{"position":[[310,10],[575,10]]},"207":{"position":[[194,10],[351,10]]},"217":{"position":[[679,10]]},"221":{"position":[[713,10]]},"227":{"position":[[24,10],[94,10]]},"235":{"position":[[571,10],[720,10],[851,10]]},"241":{"position":[[16,10]]},"245":{"position":[[50,11],[104,10]]},"247":{"position":[[2201,10]]},"287":{"position":[[66,10]]},"291":{"position":[[247,10],[535,10]]},"293":{"position":[[52,10],[117,10]]},"297":{"position":[[27,10]]},"299":{"position":[[27,10],[91,10],[148,10]]},"303":{"position":[[80,10]]},"309":{"position":[[509,10]]},"311":{"position":[[127,10]]},"322":{"position":[[107,10]]},"326":{"position":[[117,10],[285,10],[553,10]]},"360":{"position":[[1230,10]]},"362":{"position":[[158,10]]},"384":{"position":[[198,10]]},"398":{"position":[[0,10]]},"408":{"position":[[198,10]]},"410":{"position":[[33,10]]},"424":{"position":[[145,10]]},"426":{"position":[[245,11],[270,10]]},"428":{"position":[[690,10]]},"436":{"position":[[424,10]]},"438":{"position":[[114,10],[418,10]]},"454":{"position":[[70,10],[301,10],[473,10]]},"458":{"position":[[193,10]]},"460":{"position":[[157,10],[336,10]]},"468":{"position":[[6405,10]]},"472":{"position":[[704,10]]},"474":{"position":[[126,10]]},"484":{"position":[[73,10],[312,10]]},"488":{"position":[[89,10]]},"490":{"position":[[88,10]]},"496":{"position":[[140,10]]},"506":{"position":[[69,10],[230,10]]},"508":{"position":[[92,10]]},"514":{"position":[[357,10],[501,10]]},"516":{"position":[[371,10],[615,10],[696,10]]},"524":{"position":[[116,11]]},"531":{"position":[[236,10]]},"536":{"position":[[89,10],[1766,10],[1975,10]]},"546":{"position":[[517,10],[911,10],[1120,10]]},"555":{"position":[[308,10],[518,10],[703,10],[886,10]]},"610":{"position":[[37,10]]},"612":{"position":[[37,10]]},"620":{"position":[[37,10]]},"632":{"position":[[37,10]]},"650":{"position":[[37,10]]},"652":{"position":[[37,10]]},"654":{"position":[[37,10]]},"656":{"position":[[37,10]]},"658":{"position":[[37,10]]},"660":{"position":[[37,10]]},"700":{"position":[[61,10]]},"764":{"position":[[70,10],[122,10]]},"800":{"position":[[218,10]]},"810":{"position":[[37,10]]},"817":{"position":[[37,10]]},"819":{"position":[[101,10]]}}}],["kubernetes'",{"_index":949,"t":{"77":{"position":[[913,12]]}}}],["kubernetes.io",{"_index":609,"t":{"39":{"position":[[348,13]]}}}],["kubernetes.io/hostnam",{"_index":2171,"t":{"424":{"position":[[894,22]]}}}],["kubernetes.io/rol",{"_index":612,"t":{"39":{"position":[[410,18]]}}}],["kubernetes_api",{"_index":1624,"t":{"247":{"position":[[2300,18]]}}}],["l",{"_index":968,"t":{"81":{"position":[[187,1]]},"101":{"position":[[577,1]]},"118":{"position":[[4091,1]]},"142":{"position":[[218,1]]},"162":{"position":[[588,1]]},"289":{"position":[[116,1]]},"297":{"position":[[164,1]]},"579":{"position":[[623,3]]},"650":{"position":[[753,3]]},"685":{"position":[[647,3]]},"687":{"position":[[536,3]]},"689":{"position":[[561,3]]},"691":{"position":[[713,3]]},"693":{"position":[[539,3]]},"695":{"position":[[571,3]]},"697":{"position":[[670,3]]},"729":{"position":[[575,2]]},"731":{"position":[[561,2]]},"733":{"position":[[617,2]]}}}],["l2",{"_index":2016,"t":{"360":{"position":[[1061,2],[1147,2]]}}}],["label",{"_index":604,"t":{"39":{"position":[[53,5],[89,5],[146,6],[336,6],[429,6],[485,6],[602,7],[718,5],[961,6],[1020,7],[1141,7]]},"87":{"position":[[129,5],[190,6]]},"99":{"position":[[53,5],[89,5],[146,6],[317,6],[344,5],[367,5],[449,6],[604,7]]},"101":{"position":[[1123,5],[1193,6]]},"162":{"position":[[6448,5],[6518,6]]},"281":{"position":[[367,6],[555,5],[580,5],[1025,6]]},"283":{"position":[[591,6],[765,6],[923,6]]},"398":{"position":[[2269,7]]},"414":{"position":[[53,5],[162,5],[307,8]]},"416":{"position":[[89,5],[141,5],[194,5],[310,5],[475,5],[646,5]]},"470":{"position":[[1117,6]]},"476":{"position":[[3964,7]]},"536":{"position":[[321,5],[646,5]]},"540":{"position":[[1453,5],[1534,6],[1592,5],[1638,6]]}}}],["labels=rke.cattle.io/machine=00c4e7a0",{"_index":2850,"t":{"735":{"position":[[1463,37]]},"747":{"position":[[1654,37]]}}}],["labels=rke.cattle.io/machine=109d596c",{"_index":2859,"t":{"735":{"position":[[2686,37]]},"747":{"position":[[2877,37]]}}}],["lack",{"_index":484,"t":{"27":{"position":[[635,4]]}}}],["larg",{"_index":793,"t":{"59":{"position":[[475,5]]},"124":{"position":[[604,5],[1594,5]]},"364":{"position":[[84,5]]},"366":{"position":[[181,5],[207,5],[235,5]]},"372":{"position":[[193,5],[287,5],[313,5],[340,5]]},"492":{"position":[[465,5]]}}}],["largest",{"_index":1836,"t":{"311":{"position":[[1222,7]]}}}],["last",{"_index":1681,"t":{"271":{"position":[[461,4]]},"283":{"position":[[242,4]]},"348":{"position":[[353,5]]}}}],["latenc",{"_index":796,"t":{"59":{"position":[[538,8]]},"315":{"position":[[302,7],[475,7]]},"446":{"position":[[415,7]]},"456":{"position":[[535,7]]}}}],["later",{"_index":1080,"t":{"110":{"position":[[2898,5]]},"124":{"position":[[208,5],[869,5]]},"404":{"position":[[1233,5]]},"533":{"position":[[120,5]]}}}],["latest",{"_index":740,"t":{"52":{"position":[[648,6]]},"273":{"position":[[544,6]]},"398":{"position":[[1794,8],[1838,8],[1880,8]]},"432":{"position":[[2325,7]]},"468":{"position":[[661,8],[705,8],[747,8]]},"546":{"position":[[322,6],[329,6],[370,6],[615,6]]},"548":{"position":[[967,7]]}}}],["latter",{"_index":1168,"t":{"118":{"position":[[4277,6]]}}}],["launch",{"_index":943,"t":{"75":{"position":[[1731,9]]},"77":{"position":[[147,8],[407,8]]},"126":{"position":[[38,9],[663,9]]},"213":{"position":[[979,9],[1309,8],[1571,8]]},"221":{"position":[[1002,6],[1329,9]]},"360":{"position":[[1161,6]]},"426":{"position":[[33,6]]},"432":{"position":[[1404,9]]},"536":{"position":[[719,8]]},"550":{"position":[[189,6]]}}}],["launcher",{"_index":42,"t":{"4":{"position":[[251,8]]}}}],["layer",{"_index":1510,"t":{"217":{"position":[[501,5]]},"303":{"position":[[37,5],[1485,5]]}}}],["lazi",{"_index":784,"t":{"59":{"position":[[261,4],[557,4],[690,4],[1071,4]]},"61":{"position":[[164,4],[384,4]]}}}],["lb",{"_index":90,"t":{"4":{"position":[[955,2],[967,3]]},"19":{"position":[[1441,2]]},"87":{"position":[[436,2]]},"101":{"position":[[1698,2]]},"162":{"position":[[8800,2]]},"201":{"position":[[224,2],[445,2],[463,2]]},"203":{"position":[[488,2],[497,2],[867,2],[876,2],[1038,2],[1054,2],[1088,2],[1101,2],[1233,2],[1242,2],[2293,2],[2530,2]]},"205":{"position":[[330,2],[567,2]]},"301":{"position":[[227,3]]},"410":{"position":[[957,2]]},"418":{"position":[[143,3]]},"438":{"position":[[258,3]]}}}],["lbpool",{"_index":2142,"t":{"416":{"position":[[134,6]]}}}],["leaf",{"_index":1034,"t":{"108":{"position":[[690,4]]},"110":{"position":[[418,4]]}}}],["leak",{"_index":2385,"t":{"472":{"position":[[358,7]]}}}],["learn",{"_index":497,"t":{"29":{"position":[[227,5]]},"79":{"position":[[24,5]]},"118":{"position":[[66,5]]},"130":{"position":[[24,5]]},"247":{"position":[[2592,5]]}}}],["leas",{"_index":2537,"t":{"506":{"position":[[753,6]]}}}],["leav",{"_index":1181,"t":{"122":{"position":[[335,5]]}}}],["left",{"_index":2094,"t":{"398":{"position":[[3106,4]]}}}],["legaci",{"_index":1792,"t":{"305":{"position":[[4,6],[207,6]]},"356":{"position":[[250,6]]},"394":{"position":[[56,6]]},"667":{"position":[[1401,6],[1490,6]]},"669":{"position":[[1469,6],[1558,6]]},"671":{"position":[[1554,6],[1643,6]]},"673":{"position":[[1451,6],[1540,6]]}}}],["legitim",{"_index":2234,"t":{"436":{"position":[[118,10],[340,10]]}}}],["less",{"_index":7,"t":{"2":{"position":[[77,4]]},"87":{"position":[[595,4]]},"101":{"position":[[1851,4]]},"162":{"position":[[8953,4]]},"468":{"position":[[6564,4]]}}}],["letter",{"_index":105,"t":{"6":{"position":[[112,6],[193,6]]}}}],["level",{"_index":961,"t":{"81":{"position":[[55,5]]},"101":{"position":[[426,5]]},"142":{"position":[[86,5]]},"162":{"position":[[437,5]]},"203":{"position":[[159,7]]},"235":{"position":[[813,6]]},"398":{"position":[[2199,7],[2496,6]]},"438":{"position":[[502,5]]},"440":{"position":[[207,5]]},"460":{"position":[[553,5]]},"462":{"position":[[28,5]]},"464":{"position":[[222,5]]},"468":{"position":[[2195,5]]},"472":{"position":[[780,6]]},"482":{"position":[[112,5]]},"555":{"position":[[234,5]]},"705":{"position":[[484,5],[521,5]]},"745":{"position":[[112,6]]}}}],["level=info",{"_index":2746,"t":{"610":{"position":[[751,10]]},"612":{"position":[[699,10]]},"614":{"position":[[568,10]]},"616":{"position":[[517,10]]},"618":{"position":[[530,10]]},"620":{"position":[[643,10]]},"622":{"position":[[604,10]]},"626":{"position":[[677,10]]},"628":{"position":[[658,10]]},"630":{"position":[[554,10]]},"632":{"position":[[670,10]]},"634":{"position":[[535,10]]},"636":{"position":[[450,10]]},"646":{"position":[[625,10]]},"652":{"position":[[667,10],[2843,10]]},"654":{"position":[[583,10]]},"656":{"position":[[589,10]]},"667":{"position":[[476,10]]},"669":{"position":[[544,10]]},"671":{"position":[[629,10]]},"673":{"position":[[526,10]]},"680":{"position":[[435,10]]},"682":{"position":[[509,10]]},"729":{"position":[[934,10]]},"731":{"position":[[948,10]]},"733":{"position":[[1063,10]]},"735":{"position":[[740,10],[1963,10]]},"747":{"position":[[931,10],[2154,10]]}}}],["leverag",{"_index":765,"t":{"56":{"position":[[3,8]]},"181":{"position":[[427,8]]},"536":{"position":[[140,9]]}}}],["librari",{"_index":2121,"t":{"406":{"position":[[117,7]]}}}],["life",{"_index":2623,"t":{"546":{"position":[[578,5]]}}}],["lifecycl",{"_index":775,"t":{"59":{"position":[[76,10]]},"454":{"position":[[808,9]]},"667":{"position":[[1635,9]]},"669":{"position":[[1703,9]]},"671":{"position":[[1788,9]]},"673":{"position":[[1685,9]]}}}],["lightweight",{"_index":0,"t":{"2":{"position":[[0,11]]},"4":{"position":[[111,11],[364,11]]},"227":{"position":[[132,11]]},"303":{"position":[[13,11]]},"350":{"position":[[12,12]]}}}],["limit",{"_index":452,"t":{"25":{"position":[[1298,7]]},"65":{"position":[[310,5],[320,5],[499,5],[570,5]]},"470":{"position":[[79,6]]},"492":{"position":[[155,5],[449,5],[590,5],[634,5]]},"620":{"position":[[82,6]]}}}],["limit=10/minut",{"_index":865,"t":{"65":{"position":[[550,15]]}}}],["limit=<limit",{"_index":863,"t":{"65":{"position":[[451,12]]}}}],["line",{"_index":544,"t":{"33":{"position":[[624,4]]},"65":{"position":[[1036,4]]},"118":{"position":[[1914,5]]},"181":{"position":[[161,4],[375,4]]},"187":{"position":[[1615,4]]},"235":{"position":[[109,5]]},"247":{"position":[[103,4]]},"460":{"position":[[893,4]]},"555":{"position":[[473,4]]},"733":{"position":[[168,4]]},"735":{"position":[[115,4]]},"737":{"position":[[152,4]]},"739":{"position":[[137,4]]},"741":{"position":[[138,4]]},"745":{"position":[[136,4]]},"747":{"position":[[258,4]]},"749":{"position":[[93,4],[192,4]]}}}],["link",{"_index":1088,"t":{"112":{"position":[[940,6]]},"176":{"position":[[457,4]]},"266":{"position":[[814,4],[844,4]]},"279":{"position":[[1482,7]]},"307":{"position":[[1303,4],[1330,4],[1356,4]]},"432":{"position":[[1020,6]]}}}],["linod",{"_index":2156,"t":{"422":{"position":[[30,7]]}}}],["linux",{"_index":371,"t":{"21":{"position":[[327,5]]},"23":{"position":[[391,5]]},"44":{"position":[[16,5]]},"50":{"position":[[611,5]]},"303":{"position":[[554,5]]},"350":{"position":[[146,5]]},"356":{"position":[[39,5],[136,6]]},"791":{"position":[[163,5]]}}}],["list",{"_index":211,"t":{"17":{"position":[[827,4],[1014,5]]},"75":{"position":[[334,4],[527,4],[597,4]]},"77":{"position":[[1702,4]]},"79":{"position":[[112,6]]},"81":{"position":[[107,4]]},"101":{"position":[[497,4]]},"106":{"position":[[215,5]]},"118":{"position":[[4085,5],[4093,4]]},"130":{"position":[[136,6]]},"142":{"position":[[138,4]]},"162":{"position":[[508,4]]},"179":{"position":[[416,4],[421,4],[2313,5],[2319,4]]},"279":{"position":[[997,4]]},"281":{"position":[[739,6],[1083,5]]},"317":{"position":[[835,6]]},"330":{"position":[[35,6]]},"348":{"position":[[108,6]]},"410":{"position":[[529,5]]},"414":{"position":[[125,4]]},"476":{"position":[[0,6]]},"546":{"position":[[706,4]]},"689":{"position":[[2120,4],[2360,4],[2600,4]]},"695":{"position":[[2165,4]]},"758":{"position":[[54,4]]},"817":{"position":[[119,4]]}}}],["listen",{"_index":1241,"t":{"144":{"position":[[79,6],[108,6],[266,6]]},"162":{"position":[[714,10],[769,6],[787,10],[804,6],[858,10],[1000,10],[1085,6],[1127,10]]},"203":{"position":[[2455,6]]},"205":{"position":[[492,6]]},"360":{"position":[[267,6]]},"410":{"position":[[822,7]]},"428":{"position":[[1407,9]]}}}],["listen(80",{"_index":835,"t":{"61":{"position":[[698,14]]}}}],["live",{"_index":1343,"t":{"179":{"position":[[2395,5]]},"185":{"position":[[445,5]]}}}],["lncxn",{"_index":270,"t":{"19":{"position":[[831,5]]}}}],["lncxn_kube",{"_index":330,"t":{"19":{"position":[[2223,10],[2914,10]]}}}],["lo",{"_index":1715,"t":{"279":{"position":[[417,2]]}}}],["load",{"_index":60,"t":{"4":{"position":[[497,4]]},"75":{"position":[[141,4],[276,4],[308,4],[661,4]]},"87":{"position":[[509,4],[658,4]]},"101":{"position":[[248,4],[1765,4],[1914,4]]},"112":{"position":[[137,6],[2019,4]]},"114":{"position":[[160,6],[1767,4]]},"116":{"position":[[1084,4]]},"162":{"position":[[259,4],[8867,4],[9016,4]]},"199":{"position":[[50,4],[188,4],[375,4],[431,4],[455,4],[643,4],[736,4]]},"201":{"position":[[388,4]]},"203":{"position":[[67,4],[110,4],[1948,4],[2087,4],[2194,4],[2233,4],[2513,4]]},"205":{"position":[[124,4],[231,4],[270,4],[550,4]]},"217":{"position":[[515,4]]},"247":{"position":[[2388,5]]},"281":{"position":[[919,6]]},"358":{"position":[[730,5]]},"400":{"position":[[84,4]]},"404":{"position":[[43,4]]},"408":{"position":[[92,4],[291,4],[488,4]]},"454":{"position":[[289,4]]},"472":{"position":[[1394,4]]}}}],["loadbalanc",{"_index":515,"t":{"31":{"position":[[525,12]]},"199":{"position":[[321,12],[611,12]]},"217":{"position":[[589,12]]},"324":{"position":[[180,12]]},"404":{"position":[[228,12]]},"408":{"position":[[4,12],[143,13],[233,12],[574,12]]},"410":{"position":[[85,13],[108,12],[590,12],[796,12]]},"412":{"position":[[25,12]]},"414":{"position":[[189,12]]},"416":{"position":[[58,13],[437,12],[608,12]]},"420":{"position":[[305,12]]}}}],["local",{"_index":57,"t":{"4":{"position":[[466,5],[1015,5]]},"19":{"position":[[798,5],[2103,6]]},"52":{"position":[[220,5]]},"75":{"position":[[270,5]]},"87":{"position":[[476,5]]},"101":{"position":[[1732,5]]},"118":{"position":[[4416,7],[4727,5]]},"128":{"position":[[1145,5]]},"152":{"position":[[27,5],[60,5],[83,5]]},"162":{"position":[[5699,5],[5742,5],[5765,5],[5938,5],[8834,5]]},"266":{"position":[[1071,5]]},"268":{"position":[[707,7]]},"324":{"position":[[122,5]]},"332":{"position":[[631,5],[787,5]]},"384":{"position":[[37,5]]},"438":{"position":[[262,5]]},"514":{"position":[[598,5]]},"518":{"position":[[25,5],[133,5]]},"520":{"position":[[59,5],[146,5]]},"522":{"position":[[294,5]]}}}],["localhost",{"_index":1392,"t":{"189":{"position":[[723,9]]},"422":{"position":[[64,11]]}}}],["locat",{"_index":1010,"t":{"101":{"position":[[1398,7]]},"110":{"position":[[50,8],[2130,8]]},"112":{"position":[[1060,8],[1358,8]]},"118":{"position":[[1312,7],[2324,9],[3317,8]]},"135":{"position":[[1557,8]]},"162":{"position":[[5505,8],[6723,7]]},"181":{"position":[[591,8]]},"183":{"position":[[47,7]]},"235":{"position":[[4,8]]},"281":{"position":[[193,7],[1102,8]]},"315":{"position":[[747,9]]},"550":{"position":[[155,9]]},"559":{"position":[[77,8]]},"561":{"position":[[77,8]]},"563":{"position":[[77,8]]},"565":{"position":[[77,8]]},"567":{"position":[[77,8]]},"569":{"position":[[77,8]]},"571":{"position":[[77,8]]},"573":{"position":[[77,8]]},"575":{"position":[[77,8]]},"577":{"position":[[77,8]]},"583":{"position":[[77,8]]},"585":{"position":[[67,8]]},"587":{"position":[[67,8]]},"589":{"position":[[67,8]]},"591":{"position":[[67,8]]},"593":{"position":[[67,8]]},"595":{"position":[[67,8]]},"597":{"position":[[67,8]]},"599":{"position":[[67,8]]},"708":{"position":[[77,8]]},"710":{"position":[[77,8]]},"712":{"position":[[67,8]]},"714":{"position":[[67,8]]},"716":{"position":[[67,8]]},"718":{"position":[[67,8]]},"724":{"position":[[85,8]]},"726":{"position":[[85,8]]},"733":{"position":[[119,8]]},"747":{"position":[[98,8],[193,8]]}}}],["log",{"_index":603,"t":{"37":{"position":[[127,3]]},"41":{"position":[[175,4],[244,4]]},"54":{"position":[[747,3]]},"63":{"position":[[8,7],[234,7],[257,7],[292,7],[346,7],[369,7],[448,7]]},"65":{"position":[[43,7],[222,3],[270,3],[713,3],[905,3]]},"81":{"position":[[51,3],[165,7],[175,3],[199,3],[233,3]]},"101":{"position":[[346,9],[370,4],[397,9],[422,3],[471,9],[555,7],[565,3],[585,9],[595,3],[625,9],[635,3]]},"108":{"position":[[1284,3]]},"112":{"position":[[2184,3]]},"114":{"position":[[1994,3]]},"116":{"position":[[1301,3]]},"118":{"position":[[1099,4],[1531,4]]},"142":{"position":[[51,4],[82,3],[196,7],[206,3],[230,3],[264,3]]},"150":{"position":[[1160,5]]},"162":{"position":[[357,9],[381,4],[408,9],[433,3],[482,9],[566,7],[576,3],[596,9],[606,3],[636,9],[646,3]]},"235":{"position":[[20,4],[115,4],[178,4],[248,4],[325,4],[372,4],[478,4],[589,7],[642,7],[809,3],[997,7],[1027,3]]},"285":{"position":[[597,7]]},"309":{"position":[[1025,5]]},"319":{"position":[[228,3]]},"398":{"position":[[772,3],[895,3],[919,3],[946,3]]},"438":{"position":[[529,8]]},"466":{"position":[[150,5],[405,3]]},"472":{"position":[[67,4],[126,3],[241,3],[479,3],[894,3],[1232,3]]},"474":{"position":[[336,3],[459,3],[483,3],[510,3],[959,3],[1082,3],[1106,3],[1133,3]]},"484":{"position":[[24,3],[435,3]]},"486":{"position":[[24,3],[96,4],[215,3]]},"488":{"position":[[24,3],[126,3],[151,3],[200,3],[341,3],[401,3]]},"490":{"position":[[24,3],[125,3],[150,3],[199,3],[327,3],[387,3]]},"502":{"position":[[57,7]]},"638":{"position":[[171,3],[245,4],[286,3]]},"640":{"position":[[171,3],[256,3]]},"642":{"position":[[171,3],[250,3]]},"644":{"position":[[171,3],[265,3]]},"705":{"position":[[202,3],[296,7],[460,7],[530,9]]}}}],["log1",{"_index":869,"t":{"65":{"position":[[755,6]]}}}],["long",{"_index":111,"t":{"6":{"position":[[234,4]]},"112":{"position":[[526,4]]},"179":{"position":[[1977,4]]},"410":{"position":[[739,4]]},"414":{"position":[[319,4]]},"500":{"position":[[283,4]]}}}],["longer",{"_index":235,"t":{"19":{"position":[[119,6]]},"251":{"position":[[406,6]]},"303":{"position":[[2064,6]]},"533":{"position":[[493,6]]}}}],["longhorn",{"_index":2550,"t":{"514":{"position":[[630,9]]},"524":{"position":[[8,8],[54,9],[255,9],[362,8],[406,8]]},"526":{"position":[[59,8],[130,8]]},"528":{"position":[[294,8]]}}}],["longhorn.yaml",{"_index":2580,"t":{"524":{"position":[[230,13]]}}}],["look",{"_index":2061,"t":{"398":{"position":[[560,4]]}}}],["lookup",{"_index":2518,"t":{"494":{"position":[[34,6],[98,7]]},"646":{"position":[[252,6],[457,7],[502,7]]}}}],["lookup=tru",{"_index":2070,"t":{"398":{"position":[[1007,12]]},"474":{"position":[[571,12],[1194,12]]},"646":{"position":[[188,11]]}}}],["loop",{"_index":2273,"t":{"454":{"position":[[161,6],[837,6]]}}}],["loopback",{"_index":595,"t":{"35":{"position":[[922,8]]},"150":{"position":[[1272,8],[1621,8],[1878,8]]}}}],["lose",{"_index":1528,"t":{"221":{"position":[[559,6]]},"307":{"position":[[1242,4]]}}}],["lost",{"_index":1709,"t":{"277":{"position":[[2040,5]]},"533":{"position":[[1291,5]]},"548":{"position":[[490,5]]}}}],["lot",{"_index":44,"t":{"4":{"position":[[275,3]]},"65":{"position":[[192,3]]}}}],["lower",{"_index":1904,"t":{"326":{"position":[[1077,5]]},"756":{"position":[[225,5]]}}}],["lowercas",{"_index":1899,"t":{"326":{"position":[[1032,9]]}}}],["ls",{"_index":1162,"t":{"118":{"position":[[4081,3]]},"181":{"position":[[556,2],[756,2]]},"332":{"position":[[581,2]]},"340":{"position":[[1396,2]]}}}],["m",{"_index":2217,"t":{"434":{"position":[[286,1],[293,1],[371,1],[378,1],[433,1],[439,1],[510,1],[517,1],[593,1],[600,1],[653,1],[659,1]]},"446":{"position":[[299,1],[311,1],[344,1],[356,1]]},"448":{"position":[[304,1],[316,1],[349,1],[361,1]]},"450":{"position":[[77,1],[101,1]]},"472":{"position":[[414,1]]}}}],["machin",{"_index":1350,"t":{"183":{"position":[[39,7]]},"213":{"position":[[104,7]]},"221":{"position":[[464,9]]},"422":{"position":[[50,8]]},"428":{"position":[[1552,7],[1597,8]]}}}],["made",{"_index":2108,"t":{"404":{"position":[[57,4]]}}}],["main",{"_index":1548,"t":{"227":{"position":[[161,4]]},"338":{"position":[[25,4]]}}}],["maintain",{"_index":741,"t":{"52":{"position":[[666,11]]},"75":{"position":[[113,10],[322,9],[687,9]]},"221":{"position":[[209,8]]},"309":{"position":[[23,8]]},"456":{"position":[[649,8]]},"468":{"position":[[1112,11]]},"514":{"position":[[239,8]]},"516":{"position":[[707,11]]}}}],["mainten",{"_index":1987,"t":{"356":{"position":[[381,11]]}}}],["make",{"_index":537,"t":{"33":{"position":[[298,4],[781,4]]},"52":{"position":[[135,5]]},"118":{"position":[[3629,4]]},"360":{"position":[[340,4]]},"398":{"position":[[1181,5]]},"408":{"position":[[549,5]]},"454":{"position":[[447,4]]},"474":{"position":[[745,5],[1368,5]]},"492":{"position":[[304,6],[508,6]]},"504":{"position":[[18,4]]},"555":{"position":[[1755,5]]},"741":{"position":[[275,4]]},"800":{"position":[[119,6]]}}}],["makeiptablesutilchain",{"_index":2866,"t":{"741":{"position":[[89,22]]}}}],["maker",{"_index":2636,"t":{"555":{"position":[[404,7]]}}}],["man",{"_index":1302,"t":{"170":{"position":[[320,3]]},"313":{"position":[[303,3]]}}}],["manag",{"_index":73,"t":{"4":{"position":[[688,6]]},"8":{"position":[[89,6]]},"21":{"position":[[481,7]]},"27":{"position":[[307,7]]},"67":{"position":[[311,7]]},"77":{"position":[[66,6],[204,8],[234,7],[1117,6],[1535,6]]},"106":{"position":[[414,8]]},"154":{"position":[[185,7]]},"156":{"position":[[225,7],[279,7],[319,7],[379,7]]},"162":{"position":[[172,10],[3600,7],[3662,7],[3780,7],[3848,7],[6116,7]]},"179":{"position":[[152,6]]},"183":{"position":[[193,6]]},"185":{"position":[[657,8]]},"239":{"position":[[24,8]]},"245":{"position":[[20,10],[597,7]]},"247":{"position":[[1501,8]]},"253":{"position":[[438,8],[532,8]]},"277":{"position":[[2093,7]]},"279":{"position":[[377,8]]},"309":{"position":[[542,7]]},"324":{"position":[[340,7]]},"326":{"position":[[251,8]]},"334":{"position":[[22,8]]},"356":{"position":[[326,7]]},"374":{"position":[[119,8]]},"376":{"position":[[203,7]]},"380":{"position":[[238,7]]},"382":{"position":[[308,8]]},"398":{"position":[[1036,7]]},"404":{"position":[[505,8]]},"420":{"position":[[137,7]]},"438":{"position":[[508,10],[554,11]]},"454":{"position":[[130,8],[183,10],[818,10],[868,8]]},"470":{"position":[[2659,6]]},"474":{"position":[[600,7],[1223,7]]},"476":{"position":[[2258,7]]},"504":{"position":[[106,6],[242,6]]},"536":{"position":[[8,6],[1078,7],[1131,6],[1207,6],[1384,6],[1473,7]]},"548":{"position":[[543,7]]},"579":{"position":[[566,8]]},"650":{"position":[[696,8]]},"665":{"position":[[46,7],[352,8]]},"667":{"position":[[46,7],[282,8],[516,7],[800,7]]},"669":{"position":[[46,7],[302,8],[584,7],[868,7]]},"671":{"position":[[46,7],[398,8],[669,7],[953,7]]},"673":{"position":[[46,7],[335,8],[566,7],[850,7]]},"675":{"position":[[56,7]]},"677":{"position":[[46,7]]},"685":{"position":[[590,8]]},"687":{"position":[[479,8]]},"689":{"position":[[504,8]]},"691":{"position":[[656,8]]},"693":{"position":[[482,8]]},"695":{"position":[[514,8]]},"697":{"position":[[613,8]]},"705":{"position":[[149,7]]},"807":{"position":[[47,10],[122,10]]}}}],["manager.yaml",{"_index":2649,"t":{"563":{"position":[[194,12]]},"565":{"position":[[200,12]]},"665":{"position":[[119,12]]},"667":{"position":[[119,12]]},"669":{"position":[[119,12]]},"671":{"position":[[119,12]]},"673":{"position":[[119,12]]},"675":{"position":[[129,12]]},"677":{"position":[[119,12]]}}}],["mani",{"_index":1506,"t":{"217":{"position":[[102,4]]},"398":{"position":[[2844,4]]},"408":{"position":[[383,4]]},"454":{"position":[[660,4]]},"516":{"position":[[285,4]]},"540":{"position":[[1352,4]]}}}],["manifest",{"_index":821,"t":{"61":{"position":[[233,8]]},"245":{"position":[[120,8],[268,10],[756,10]]},"247":{"position":[[410,9]]},"253":{"position":[[646,10]]},"273":{"position":[[494,8],[813,8]]},"291":{"position":[[132,8]]},"322":{"position":[[309,9],[440,8]]},"324":{"position":[[83,9],[220,8],[302,9]]},"326":{"position":[[38,9],[232,10],[373,8],[460,9],[1366,9],[1617,10]]},"328":{"position":[[70,9]]},"330":{"position":[[90,9],[114,9],[273,9],[399,8]]},"332":{"position":[[135,9],[474,9]]},"334":{"position":[[62,10]]},"404":{"position":[[811,8]]},"460":{"position":[[1110,8]]},"476":{"position":[[3978,8],[4023,9]]},"735":{"position":[[1590,8],[1635,9],[2813,8],[2858,9]]},"747":{"position":[[1781,8],[1826,9],[3004,8],[3049,9]]}}}],["manipul",{"_index":894,"t":{"69":{"position":[[213,10]]}}}],["manner",{"_index":1680,"t":{"271":{"position":[[70,7]]},"322":{"position":[[123,6]]},"536":{"position":[[942,7]]}}}],["manual",{"_index":158,"t":{"13":{"position":[[221,8]]},"54":{"position":[[222,6]]},"65":{"position":[[605,6]]},"106":{"position":[[41,9]]},"247":{"position":[[1905,6]]},"255":{"position":[[245,8]]},"261":{"position":[[141,8]]},"266":{"position":[[67,8]]},"307":{"position":[[1141,8]]},"398":{"position":[[167,6],[3170,9]]},"404":{"position":[[666,9]]},"406":{"position":[[616,8]]},"460":{"position":[[437,6],[594,9],[937,8]]},"466":{"position":[[456,9]]},"478":{"position":[[162,6]]},"504":{"position":[[371,8]]},"506":{"position":[[818,8]]},"531":{"position":[[0,6],[72,9]]},"544":{"position":[[60,8]]},"550":{"position":[[6,8]]},"552":{"position":[[106,9],[161,9],[230,9],[283,9]]},"555":{"position":[[1430,6]]},"697":{"position":[[26,7]]}}}],["map",{"_index":1728,"t":{"281":{"position":[[649,3]]}}}],["mariadb",{"_index":1375,"t":{"185":{"position":[[1641,7]]},"189":{"position":[[232,7],[884,7]]},"372":{"position":[[62,8]]}}}],["mask",{"_index":1833,"t":{"311":{"position":[[1013,5],[1067,5],[1110,4],[1139,4],[1253,4]]},"424":{"position":[[1371,4]]}}}],["masq",{"_index":1209,"t":{"132":{"position":[[485,4]]},"150":{"position":[[604,4]]},"162":{"position":[[2130,4]]},"303":{"position":[[941,4]]}}}],["masquerad",{"_index":586,"t":{"35":{"position":[[776,11]]},"150":{"position":[[627,12]]},"162":{"position":[[2160,12]]},"303":{"position":[[952,12]]}}}],["master",{"_index":1449,"t":{"203":{"position":[[1028,6]]},"279":{"position":[[1245,6]]},"685":{"position":[[180,6]]},"687":{"position":[[106,6]]},"689":{"position":[[106,6]]},"691":{"position":[[222,6]]},"693":{"position":[[106,6]]},"695":{"position":[[106,6]]},"697":{"position":[[229,6]]}}}],["match",{"_index":1189,"t":{"128":{"position":[[311,5],[597,5]]},"168":{"position":[[1116,8]]},"243":{"position":[[256,7]]},"249":{"position":[[248,5]]},"266":{"position":[[204,8]]},"279":{"position":[[1075,8],[1109,5]]},"311":{"position":[[1164,5]]},"416":{"position":[[125,8]]},"424":{"position":[[1004,5]]}}}],["matchexpress",{"_index":2170,"t":{"424":{"position":[[869,17]]},"540":{"position":[[566,17],[914,17]]}}}],["matchlabel",{"_index":2370,"t":{"468":{"position":[[5966,12],[6165,12],[6364,12]]},"470":{"position":[[479,12],[865,12],[1428,12],[1648,12],[1889,12],[2111,12],[2331,12],[2572,12]]}}}],["matter",{"_index":1916,"t":{"332":{"position":[[183,7]]}}}],["max",{"_index":2346,"t":{"468":{"position":[[1924,4],[1979,4],[3009,4],[3064,4],[3422,4],[3896,4]]}}}],["maxag",{"_index":2502,"t":{"486":{"position":[[28,6]]},"640":{"position":[[175,6]]}}}],["maxage=30",{"_index":2066,"t":{"398":{"position":[[899,10]]},"474":{"position":[[463,10],[1086,10]]},"640":{"position":[[260,9]]}}}],["maxbackup",{"_index":2506,"t":{"488":{"position":[[28,9]]},"642":{"position":[[175,9]]}}}],["maxbackup=10",{"_index":2067,"t":{"398":{"position":[[923,13]]},"474":{"position":[[487,13],[1110,13]]},"642":{"position":[[254,12]]}}}],["maximum",{"_index":2036,"t":{"368":{"position":[[223,7]]}}}],["maxsiz",{"_index":2510,"t":{"490":{"position":[[28,7]]},"644":{"position":[[175,7]]}}}],["maxsize=100",{"_index":2068,"t":{"398":{"position":[[950,12]]},"474":{"position":[[514,12],[1137,12]]},"644":{"position":[[269,11]]}}}],["mb",{"_index":9,"t":{"2":{"position":[[91,3]]},"358":{"position":[[162,2]]},"488":{"position":[[316,2]]},"490":{"position":[[302,2]]},"644":{"position":[[219,3],[253,3]]}}}],["mbkn9",{"_index":277,"t":{"19":{"position":[[950,5]]}}}],["mean",{"_index":499,"t":{"31":{"position":[[69,5]]},"101":{"position":[[67,5]]},"162":{"position":[[69,5]]},"185":{"position":[[1831,5]]},"404":{"position":[[347,7]]},"458":{"position":[[43,5]]}}}],["meant",{"_index":2633,"t":{"555":{"position":[[203,5]]}}}],["measur",{"_index":2231,"t":{"434":{"position":[[720,12]]}}}],["mechan",{"_index":35,"t":{"4":{"position":[[179,10]]},"604":{"position":[[75,10]]},"700":{"position":[[38,10]]},"800":{"position":[[177,9]]}}}],["medium",{"_index":2028,"t":{"366":{"position":[[157,6]]},"372":{"position":[[263,6]]},"456":{"position":[[292,6]]}}}],["meet",{"_index":896,"t":{"71":{"position":[[27,4]]},"207":{"position":[[124,4]]},"350":{"position":[[190,4]]},"354":{"position":[[289,4]]},"456":{"position":[[505,4]]}}}],["member",{"_index":1127,"t":{"118":{"position":[[828,7],[2409,6]]},"137":{"position":[[598,6]]},"144":{"position":[[220,7],[321,7]]},"162":{"position":[[918,7],[1052,7],[3324,6]]},"404":{"position":[[338,8]]}}}],["memori",{"_index":5,"t":{"2":{"position":[[50,7]]},"6":{"position":[[75,6]]},"366":{"position":[[38,6]]},"436":{"position":[[152,7],[374,7]]},"440":{"position":[[74,7],[221,6],[403,6]]},"446":{"position":[[214,6],[263,6]]},"448":{"position":[[219,6],[268,6]]}}}],["mention",{"_index":465,"t":{"25":{"position":[[1654,9]]},"189":{"position":[[3,10]]},"268":{"position":[[887,8]]},"277":{"position":[[3,9]]},"432":{"position":[[3,9]]},"494":{"position":[[243,9]]},"538":{"position":[[411,9]]}}}],["merit",{"_index":1714,"t":{"279":{"position":[[371,5]]}}}],["mesh",{"_index":1859,"t":{"317":{"position":[[38,4]]},"319":{"position":[[139,4]]}}}],["messag",{"_index":853,"t":{"65":{"position":[[226,8],[909,7]]},"118":{"position":[[1084,7],[1516,7]]}}}],["met",{"_index":1644,"t":{"253":{"position":[[102,3]]}}}],["metadata",{"_index":440,"t":{"25":{"position":[[991,9],[1059,9]]},"61":{"position":[[438,9]]},"247":{"position":[[561,9],[631,9]]},"249":{"position":[[777,9]]},"291":{"position":[[209,9],[364,9]]},"398":{"position":[[2238,9]]},"424":{"position":[[803,9]]},"468":{"position":[[1412,9],[2599,9],[3160,9],[3612,9],[4062,9],[4267,9],[4490,9],[4692,9],[4976,9],[5272,9],[5605,9],[5851,9],[6054,9],[6249,9]]},"470":{"position":[[364,9],[712,9],[1345,9],[1559,9],[1800,9],[2028,9],[2242,9],[2483,9]]},"472":{"position":[[491,8],[787,8]]},"520":{"position":[[43,9]]},"522":{"position":[[25,9]]},"526":{"position":[[43,9]]},"528":{"position":[[25,9]]},"540":{"position":[[464,9],[813,9]]},"705":{"position":[[206,8],[475,8]]}}}],["metadata.nam",{"_index":1597,"t":{"247":{"position":[[961,13]]},"326":{"position":[[980,14]]}}}],["metallb",{"_index":1413,"t":{"199":{"position":[[770,7]]},"418":{"position":[[155,8]]}}}],["method",{"_index":1647,"t":{"255":{"position":[[69,8]]},"261":{"position":[[118,6]]},"266":{"position":[[53,6],[90,6]]},"428":{"position":[[198,7]]},"432":{"position":[[273,6]]},"510":{"position":[[493,7]]}}}],["methodolog",{"_index":2232,"t":{"434":{"position":[[733,11]]},"458":{"position":[[27,11]]},"555":{"position":[[849,12]]}}}],["metric",{"_index":274,"t":{"19":{"position":[[867,7],[2306,9]]},"135":{"position":[[522,7],[546,7]]},"162":{"position":[[4380,7],[4405,7],[5953,7]]},"247":{"position":[[851,8]]},"266":{"position":[[957,6]]},"324":{"position":[[141,7]]},"332":{"position":[[856,7]]},"360":{"position":[[581,7]]},"362":{"position":[[279,7]]},"440":{"position":[[484,7]]},"470":{"position":[[923,7],[1371,7],[1450,7],[2054,7],[2133,7]]}}}],["microservic",{"_index":2109,"t":{"404":{"position":[[72,13]]}}}],["microsoft",{"_index":2126,"t":{"408":{"position":[[451,9]]}}}],["middl",{"_index":1303,"t":{"170":{"position":[[331,6]]},"313":{"position":[[314,6]]}}}],["migrat",{"_index":1638,"t":{"251":{"position":[[132,7],[220,8]]},"305":{"position":[[407,7],[459,9]]},"404":{"position":[[1482,7],[1570,9]]},"516":{"position":[[732,9],[810,10]]},"533":{"position":[[287,9]]}}}],["min",{"_index":2210,"t":{"434":{"position":[[155,3],[163,3],[188,3]]},"468":{"position":[[1917,4],[1972,4],[3002,4],[3057,4],[3433,4],[3907,4]]}}}],["minim",{"_index":78,"t":{"4":{"position":[[786,9]]},"502":{"position":[[14,7]]},"705":{"position":[[450,9]]}}}],["minimum",{"_index":1490,"t":{"213":{"position":[[96,7]]},"350":{"position":[[38,7],[209,7]]},"358":{"position":[[67,7],[115,7],[232,7]]},"366":{"position":[[22,7]]},"368":{"position":[[194,7]]},"434":{"position":[[56,7]]},"436":{"position":[[129,7],[351,7]]},"444":{"position":[[56,7]]},"476":{"position":[[3714,7]]},"735":{"position":[[1231,7],[2454,7]]},"747":{"position":[[1422,7],[2645,7]]}}}],["minor",{"_index":2602,"t":{"536":{"position":[[1855,5]]},"546":{"position":[[528,5],[1000,5]]}}}],["minut",{"_index":295,"t":{"19":{"position":[[1296,6],[1318,6],[1460,6],[1482,6],[1643,6],[1665,6],[1808,6],[1830,6],[1964,6],[1986,6],[2134,6],[2156,6],[2332,6],[2354,6],[2520,6],[2542,6],[2684,6],[2706,6],[2844,6],[2866,6]]},"124":{"position":[[640,7],[1630,7]]}}}],["mirror",{"_index":1648,"t":{"255":{"position":[[216,6]]},"338":{"position":[[40,7]]},"340":{"position":[[0,7],[100,8],[174,6],[387,7],[512,6],[545,8],[775,6],[941,6],[1190,8],[1517,8]]},"342":{"position":[[74,7],[91,6]]},"344":{"position":[[154,8],[517,8]]},"346":{"position":[[158,8],[353,8]]}}}],["mirrorproject/ranch",{"_index":1949,"t":{"340":{"position":[[1284,22]]}}}],["mismatch",{"_index":1724,"t":{"279":{"position":[[1429,9]]}}}],["miss",{"_index":523,"t":{"31":{"position":[[689,7],[783,9]]}}}],["mitig",{"_index":2292,"t":{"460":{"position":[[261,11]]}}}],["mkdir",{"_index":1068,"t":{"110":{"position":[[2018,5]]},"112":{"position":[[1258,5]]},"116":{"position":[[703,5]]},"263":{"position":[[178,5]]},"472":{"position":[[404,5]]}}}],["mode",{"_index":487,"t":{"29":{"position":[[48,4]]},"31":{"position":[[769,5]]},"132":{"position":[[425,4]]},"139":{"position":[[161,4],[219,5],[290,4],[316,4]]},"150":{"position":[[837,4]]},"162":{"position":[[2285,4],[2624,4],[2671,4]]},"203":{"position":[[537,4],[608,4]]},"281":{"position":[[326,5],[510,4]]},"283":{"position":[[662,5],[750,5],[896,5]]},"309":{"position":[[621,4],[681,4],[708,6],[822,4],[1116,4]]},"342":{"position":[[876,6]]},"394":{"position":[[40,4]]},"396":{"position":[[26,4]]},"414":{"position":[[130,5]]},"614":{"position":[[169,4],[390,5],[430,5]]},"616":{"position":[[169,4],[356,5],[396,5]]},"618":{"position":[[169,4],[369,5],[409,5]]},"731":{"position":[[679,5],[781,5]]}}}],["mode=644",{"_index":1721,"t":{"279":{"position":[[685,8]]}}}],["mode=node,rbac",{"_index":2404,"t":{"476":{"position":[[304,14]]},"610":{"position":[[973,14]]},"612":{"position":[[921,14]]},"614":{"position":[[790,14]]},"616":{"position":[[231,14],[739,14]]},"618":{"position":[[243,15],[752,14]]},"620":{"position":[[865,14]]},"622":{"position":[[826,14]]},"626":{"position":[[899,14]]},"628":{"position":[[880,14]]},"630":{"position":[[776,14]]},"632":{"position":[[892,14]]},"634":{"position":[[757,14]]},"636":{"position":[[672,14]]},"646":{"position":[[847,14]]},"652":{"position":[[889,14]]},"654":{"position":[[805,14]]},"656":{"position":[[811,14]]},"729":{"position":[[1156,14]]},"731":{"position":[[1170,14]]},"733":{"position":[[1285,14]]}}}],["mode=rbac",{"_index":2760,"t":{"614":{"position":[[270,9]]}}}],["mode=webhook",{"_index":2459,"t":{"476":{"position":[[3146,12]]},"731":{"position":[[321,12],[728,14],[847,12]]},"735":{"position":[[865,12],[2088,12]]},"747":{"position":[[1056,12],[2279,12]]}}}],["model",{"_index":2264,"t":{"442":{"position":[[167,5]]}}}],["modern",{"_index":79,"t":{"4":{"position":[[804,6]]},"356":{"position":[[32,6]]},"404":{"position":[[13,6]]}}}],["modif",{"_index":464,"t":{"25":{"position":[[1578,13]]},"460":{"position":[[368,13],[559,13]]},"705":{"position":[[320,12]]}}}],["modifi",{"_index":542,"t":{"33":{"position":[[580,6]]},"114":{"position":[[964,8]]},"217":{"position":[[720,6]]},"268":{"position":[[1077,6]]},"307":{"position":[[351,6],[733,6]]},"317":{"position":[[1089,6],[1190,6]]},"332":{"position":[[323,6]]},"460":{"position":[[510,6]]},"720":{"position":[[55,6]]},"722":{"position":[[55,6]]},"764":{"position":[[145,6]]},"766":{"position":[[26,6]]}}}],["modul",{"_index":725,"t":{"50":{"position":[[586,7],[617,7]]},"303":{"position":[[538,7],[690,7],[777,7],[1375,7],[1663,8],[1927,7]]}}}],["monitor",{"_index":2241,"t":{"438":{"position":[[97,10],[301,10]]},"536":{"position":[[518,10]]},"540":{"position":[[1990,7],[2595,7]]}}}],["more",{"_index":173,"t":{"15":{"position":[[301,4]]},"29":{"position":[[233,4]]},"31":{"position":[[996,4]]},"39":{"position":[[916,4]]},"46":{"position":[[472,4]]},"48":{"position":[[353,4]]},"52":{"position":[[292,4]]},"59":{"position":[[1052,4]]},"65":{"position":[[616,4],[1099,4]]},"67":{"position":[[556,4]]},"71":{"position":[[237,4],[436,4]]},"77":{"position":[[349,4],[574,4],[1186,4],[1342,4],[1501,4],[1610,4]]},"79":{"position":[[316,4]]},"108":{"position":[[74,4]]},"120":{"position":[[54,4]]},"128":{"position":[[1770,4]]},"130":{"position":[[354,4]]},"174":{"position":[[1130,4],[1223,4]]},"179":{"position":[[1561,4]]},"185":{"position":[[1107,4],[1437,4]]},"187":{"position":[[1499,4]]},"189":{"position":[[401,4],[459,4],[977,4],[1035,4],[1913,4]]},"199":{"position":[[405,4]]},"203":{"position":[[197,4],[350,4],[2251,4]]},"205":{"position":[[288,4]]},"207":{"position":[[313,4],[518,4],[673,4]]},"211":{"position":[[121,4]]},"213":{"position":[[20,4],[1173,4]]},"221":{"position":[[459,4],[587,4],[675,4],[829,4]]},"227":{"position":[[127,4],[180,4]]},"235":{"position":[[464,4],[1022,4]]},"237":{"position":[[76,4]]},"239":{"position":[[4,4]]},"245":{"position":[[283,4]]},"247":{"position":[[2598,5]]},"251":{"position":[[281,4]]},"268":{"position":[[30,4]]},"275":{"position":[[212,4]]},"279":{"position":[[1501,4]]},"315":{"position":[[372,4]]},"326":{"position":[[188,4],[1379,4]]},"356":{"position":[[271,4]]},"372":{"position":[[107,4]]},"384":{"position":[[579,4]]},"398":{"position":[[97,4],[1319,4]]},"404":{"position":[[484,4],[866,4],[956,4],[1364,4]]},"414":{"position":[[69,4]]},"512":{"position":[[225,4]]},"516":{"position":[[785,4]]},"518":{"position":[[208,4]]},"524":{"position":[[165,4]]},"536":{"position":[[416,4],[1526,4]]},"546":{"position":[[771,4]]},"555":{"position":[[544,4]]},"587":{"position":[[390,4]]},"591":{"position":[[400,4]]},"689":{"position":[[2271,4],[2511,4],[2751,4]]},"695":{"position":[[2316,4]]}}}],["mount",{"_index":82,"t":{"4":{"position":[[829,6]]},"536":{"position":[[864,7]]},"766":{"position":[[98,5]]},"805":{"position":[[85,7]]}}}],["mountpath",{"_index":2575,"t":{"522":{"position":[[194,10]]},"528":{"position":[[194,10]]}}}],["move",{"_index":724,"t":{"50":{"position":[[557,5]]},"118":{"position":[[650,5]]}}}],["ms",{"_index":2269,"t":{"446":{"position":[[447,2],[475,2]]}}}],["msg=\"run",{"_index":2747,"t":{"610":{"position":[[762,12]]},"612":{"position":[[710,12]]},"614":{"position":[[579,12]]},"616":{"position":[[528,12]]},"618":{"position":[[541,12]]},"620":{"position":[[654,12]]},"622":{"position":[[615,12]]},"626":{"position":[[688,12]]},"628":{"position":[[669,12]]},"630":{"position":[[565,12]]},"632":{"position":[[681,12]]},"634":{"position":[[546,12]]},"636":{"position":[[461,12]]},"646":{"position":[[636,12]]},"652":{"position":[[678,12],[2854,12]]},"654":{"position":[[594,12]]},"656":{"position":[[600,12]]},"667":{"position":[[487,12]]},"669":{"position":[[555,12]]},"671":{"position":[[640,12]]},"673":{"position":[[537,12]]},"680":{"position":[[446,12]]},"682":{"position":[[520,12]]},"729":{"position":[[945,12]]},"731":{"position":[[959,12]]},"733":{"position":[[1074,12]]},"735":{"position":[[751,12],[1974,12]]},"747":{"position":[[942,12],[2165,12]]}}}],["mtu",{"_index":570,"t":{"35":{"position":[[361,3]]}}}],["multi",{"_index":524,"t":{"31":{"position":[[837,5],[870,5]]},"52":{"position":[[96,5],[176,5]]},"424":{"position":[[361,5]]}}}],["multicloud",{"_index":1851,"t":{"315":{"position":[[217,10]]}}}],["multiclust",{"_index":2161,"t":{"424":{"position":[[167,12]]}}}],["multipl",{"_index":526,"t":{"31":{"position":[[903,8]]},"185":{"position":[[862,8],[1152,8],[1488,8]]},"217":{"position":[[1045,8]]},"237":{"position":[[15,8]]},"283":{"position":[[42,8],[528,8]]},"315":{"position":[[690,8]]},"326":{"position":[[108,8],[1316,8]]},"330":{"position":[[476,8]]},"352":{"position":[[44,8]]},"410":{"position":[[581,8],[700,8]]},"424":{"position":[[284,8],[424,8]]}}}],["mustruna",{"_index":2345,"t":{"468":{"position":[[1895,11],[1950,11],[2980,11],[3035,11]]},"785":{"position":[[118,9]]}}}],["mustrunasnonroot",{"_index":2341,"t":{"468":{"position":[[1810,18],[2909,18]]},"785":{"position":[[98,16]]}}}],["mycustomreg.com",{"_index":1934,"t":{"340":{"position":[[109,16]]}}}],["mycustomreg.com:5000/coredn",{"_index":1964,"t":{"348":{"position":[[316,28],[421,28]]}}}],["mycustomreg:5000",{"_index":1958,"t":{"344":{"position":[[226,19],[589,19]]},"346":{"position":[[229,19]]}}}],["mypassword",{"_index":1705,"t":{"277":{"position":[[1454,11],[1679,10]]},"279":{"position":[[792,10]]}}}],["mysql",{"_index":37,"t":{"4":{"position":[[197,6]]},"71":{"position":[[557,6]]},"135":{"position":[[102,6]]},"162":{"position":[[3910,6]]},"185":{"position":[[390,5],[1594,5]]},"187":{"position":[[61,6],[479,6]]},"189":{"position":[[224,5],[874,5],[1461,8],[1540,5]]},"195":{"position":[[406,5]]},"213":{"position":[[530,5]]},"364":{"position":[[251,5]]},"372":{"position":[[43,6]]}}}],["mysql://username:password@tcp(hostname:3306)/databas",{"_index":1393,"t":{"189":{"position":[[918,53]]}}}],["n",{"_index":840,"t":{"63":{"position":[[225,1],[337,1]]},"221":{"position":[[245,1]]},"293":{"position":[[50,1],[115,1]]},"322":{"position":[[548,1]]},"398":{"position":[[3796,1]]},"540":{"position":[[2681,1],[2725,1]]},"597":{"position":[[186,2]]},"599":{"position":[[186,2]]}}}],["n/2)+1",{"_index":1523,"t":{"221":{"position":[[266,8]]}}}],["n/a",{"_index":964,"t":{"81":{"position":[[87,3],[195,3],[229,3]]},"87":{"position":[[95,3],[141,3],[216,3],[285,3]]},"89":{"position":[[60,3]]},"91":{"position":[[64,3],[126,3],[255,3],[315,3],[381,3]]},"97":{"position":[[51,3]]},"135":{"position":[[530,3],[616,3],[680,3],[823,3],[949,3],[1022,3],[1103,3],[1152,3],[1230,3],[1304,3],[1492,3],[1534,3],[1623,3]]},"142":{"position":[[33,3],[118,3],[226,3],[260,3]]},"144":{"position":[[360,3]]},"150":{"position":[[609,5],[670,5]]},"160":{"position":[[51,3],[100,3],[200,3],[281,3]]},"172":{"position":[[266,3],[270,3]]}}}],["n1",{"_index":2669,"t":{"579":{"position":[[815,2]]},"602":{"position":[[278,2]]},"610":{"position":[[508,2]]},"612":{"position":[[491,2]]},"614":{"position":[[365,2]]},"616":{"position":[[331,2]]},"618":{"position":[[344,2]]},"620":{"position":[[435,2]]},"622":{"position":[[342,2]]},"626":{"position":[[408,2]]},"628":{"position":[[430,2]]},"630":{"position":[[326,2]]},"632":{"position":[[461,2]]},"634":{"position":[[322,2]]},"636":{"position":[[273,2]]},"646":{"position":[[403,2]]},"650":{"position":[[945,2]]},"654":{"position":[[405,2]]},"656":{"position":[[417,2]]},"658":{"position":[[459,2]]},"662":{"position":[[1011,2]]},"665":{"position":[[369,2]]},"667":{"position":[[299,2]]},"669":{"position":[[319,2]]},"671":{"position":[[415,2]]},"673":{"position":[[352,2]]},"680":{"position":[[277,2]]},"682":{"position":[[287,2]]},"685":{"position":[[839,2]]},"687":{"position":[[728,2]]},"689":{"position":[[753,2]]},"691":{"position":[[905,2]]},"693":{"position":[[731,2]]},"695":{"position":[[763,2]]},"697":{"position":[[862,2]]},"703":{"position":[[157,2]]},"729":{"position":[[668,2]]},"731":{"position":[[654,2]]},"733":{"position":[[710,2]]},"735":{"position":[[520,2]]},"737":{"position":[[577,2]]},"747":{"position":[[738,2]]}}}],["n2",{"_index":2777,"t":{"652":{"position":[[474,2]]}}}],["name",{"_index":262,"t":{"19":{"position":[[755,4],[1248,5]]},"25":{"position":[[1001,5],[1069,5],[1184,5],[1331,5],[1373,5]]},"52":{"position":[[491,4]]},"61":{"position":[[448,5],[481,5]]},"65":{"position":[[1149,4],[1339,5]]},"75":{"position":[[1201,5],[1409,5]]},"87":{"position":[[45,4],[75,4],[117,4]]},"101":{"position":[[141,5],[147,5],[1014,4],[1043,4],[1111,4]]},"106":{"position":[[282,5]]},"118":{"position":[[3276,4],[3494,5],[3795,5],[3831,5],[4629,5],[4715,5]]},"128":{"position":[[333,4],[645,4],[1786,5],[1792,4]]},"135":{"position":[[151,4],[669,4],[697,4],[1506,4]]},"144":{"position":[[435,5]]},"162":{"position":[[143,5],[149,5],[1209,5],[3959,4],[4530,4],[4559,4],[5453,4],[6339,4],[6368,4],[6436,4]]},"179":{"position":[[134,5]]},"183":{"position":[[152,4]]},"189":{"position":[[396,4],[560,4],[795,5],[972,4],[1128,4],[1376,4],[1647,4]]},"203":{"position":[[1619,4],[3067,4]]},"205":{"position":[[1104,4]]},"213":{"position":[[729,5]]},"215":{"position":[[541,5]]},"217":{"position":[[999,4]]},"221":{"position":[[1722,4]]},"247":{"position":[[571,5],[641,5],[986,4],[991,4],[1018,4],[2481,4],[2521,6]]},"249":{"position":[[258,4],[617,5],[787,5],[855,5]]},"266":{"position":[[459,4]]},"268":{"position":[[1052,5],[1262,5]]},"291":{"position":[[219,5],[374,5],[454,5],[507,5]]},"326":{"position":[[316,6],[347,4],[516,5],[571,6],[639,5],[797,4]]},"330":{"position":[[527,5]]},"332":{"position":[[744,4]]},"340":{"position":[[40,5],[193,4],[1368,4],[1552,5]]},"342":{"position":[[651,4]]},"352":{"position":[[245,4],[270,4]]},"378":{"position":[[488,4]]},"398":{"position":[[1624,5],[2248,5]]},"422":{"position":[[175,4],[224,4],[300,4]]},"424":{"position":[[813,5]]},"432":{"position":[[1618,4],[1763,4]]},"468":{"position":[[316,5],[491,5],[1422,5],[2609,5],[3170,5],[3622,5],[4072,5],[4277,5],[4500,5],[4702,5],[4794,5],[4843,5],[4986,5],[5096,5],[5190,5],[5282,5],[5419,5],[5513,5],[5615,5],[5729,5],[5782,5],[5861,5],[5979,5],[6064,5],[6178,5],[6259,5],[6377,5]]},"470":{"position":[[374,5],[492,5],[722,5],[1355,5],[1569,5],[1810,5],[2038,5],[2252,5],[2493,5]]},"472":{"position":[[558,5]]},"510":{"position":[[743,7]]},"520":{"position":[[53,5]]},"522":{"position":[[35,5],[92,5],[183,5],[249,5]]},"526":{"position":[[53,5]]},"528":{"position":[[35,5],[92,5],[183,5],[249,5]]},"540":{"position":[[474,5],[823,5]]},"756":{"position":[[348,6]]}}}],["names=system:auth",{"_index":2428,"t":{"476":{"position":[[1281,17]]},"610":{"position":[[2086,17]]},"612":{"position":[[2034,17]]},"614":{"position":[[1903,17]]},"616":{"position":[[1852,17]]},"618":{"position":[[1865,17]]},"620":{"position":[[1978,17]]},"622":{"position":[[1939,17]]},"626":{"position":[[2012,17]]},"628":{"position":[[1993,17]]},"630":{"position":[[1889,17]]},"632":{"position":[[2005,17]]},"634":{"position":[[1870,17]]},"636":{"position":[[1785,17]]},"646":{"position":[[1960,17]]},"652":{"position":[[2002,17]]},"654":{"position":[[1918,17]]},"656":{"position":[[1924,17]]},"729":{"position":[[2269,17]]},"731":{"position":[[2283,17]]},"733":{"position":[[2398,17]]}}}],["namespac",{"_index":261,"t":{"19":{"position":[[734,10],[745,9]]},"25":{"position":[[1095,10]]},"31":{"position":[[42,9],[254,10]]},"35":{"position":[[91,11]]},"63":{"position":[[214,9],[326,9]]},"75":{"position":[[617,10],[1186,9]]},"150":{"position":[[739,9],[769,9]]},"162":{"position":[[2385,9],[2414,9]]},"181":{"position":[[540,10],[565,10],[701,10],[765,10]]},"247":{"position":[[305,10],[370,10],[551,9],[654,10],[1137,9],[1149,9]]},"249":{"position":[[267,9],[801,10]]},"291":{"position":[[236,10],[524,10]]},"322":{"position":[[376,10],[590,10]]},"332":{"position":[[734,9]]},"398":{"position":[[1324,10],[1934,11],[2073,9],[2228,9]]},"410":{"position":[[172,10]]},"468":{"position":[[801,11],[5333,10],[5643,10],[5873,9],[5883,10],[6076,9],[6086,10],[6271,9],[6281,10],[6500,10],[6527,9]]},"470":{"position":[[22,10],[99,10],[386,9],[396,10],[755,10],[766,11],[1386,10],[1606,10],[1847,10],[2069,10],[2289,10],[2530,10],[2708,10]]},"480":{"position":[[190,11],[211,10],[340,9]]},"506":{"position":[[649,10],[705,10]]},"520":{"position":[[74,10]]},"522":{"position":[[53,10]]},"524":{"position":[[396,9]]},"528":{"position":[[53,10]]},"536":{"position":[[815,10]]},"540":{"position":[[492,10],[840,10],[1268,9]]},"604":{"position":[[767,9],[1049,9],[1331,9],[1613,9],[1895,9],[2177,9],[2459,9]]},"606":{"position":[[748,9],[1030,9],[1312,9],[1594,9],[1876,9],[2158,9],[2440,9]]},"624":{"position":[[761,9],[1043,9],[1325,9],[1607,9],[1889,9],[2171,9],[2453,9]]},"677":{"position":[[733,9],[1015,9],[1297,9],[1579,9],[1861,9],[2143,9],[2425,9]]},"773":{"position":[[127,9]]},"775":{"position":[[47,9]]},"777":{"position":[[47,9]]},"779":{"position":[[47,9]]},"781":{"position":[[47,9]]},"783":{"position":[[47,9]]},"785":{"position":[[51,9]]},"787":{"position":[[47,9]]},"791":{"position":[[106,9]]},"793":{"position":[[47,9]]},"795":{"position":[[47,9]]},"797":{"position":[[47,9]]},"813":{"position":[[62,10]]},"819":{"position":[[38,10],[175,10]]}}}],["namespacelifecycl",{"_index":2493,"t":{"480":{"position":[[41,18],[114,20]]},"630":{"position":[[221,19]]}}}],["namespaceselector",{"_index":2369,"t":{"468":{"position":[[5947,18],[6146,18],[6345,18]]},"470":{"position":[[460,18]]}}}],["nativ",{"_index":1258,"t":{"150":{"position":[[553,8]]},"160":{"position":[[236,6]]},"162":{"position":[[2062,8]]},"203":{"position":[[1985,8]]},"205":{"position":[[22,8]]},"231":{"position":[[26,8]]},"303":{"position":[[362,6],[485,6],[1568,6]]},"305":{"position":[[144,6],[367,6],[729,6]]},"317":{"position":[[414,6]]},"350":{"position":[[139,6]]},"531":{"position":[[247,6]]},"536":{"position":[[100,6]]}}}],["natur",{"_index":2519,"t":{"496":{"position":[[249,6]]}}}],["nbodi",{"_index":443,"t":{"25":{"position":[[1075,5],[1255,9]]}}}],["necessari",{"_index":125,"t":{"8":{"position":[[118,9]]},"54":{"position":[[491,9]]},"59":{"position":[[384,9]]},"110":{"position":[[2853,9]]},"116":{"position":[[1409,9]]},"221":{"position":[[359,9]]},"261":{"position":[[161,9]]},"273":{"position":[[917,9]]},"418":{"position":[[102,9]]},"428":{"position":[[796,9],[839,9]]},"454":{"position":[[200,9]]},"468":{"position":[[1256,9],[2287,9]]},"474":{"position":[[89,9]]}}}],["necessarili",{"_index":2624,"t":{"546":{"position":[[643,11]]}}}],["need",{"_index":83,"t":{"4":{"position":[[836,8]]},"33":{"position":[[572,4],[943,4]]},"46":{"position":[[407,4],[552,4]]},"48":{"position":[[288,4],[433,4]]},"50":{"position":[[173,5]]},"56":{"position":[[262,4]]},"59":{"position":[[588,5]]},"61":{"position":[[58,6]]},"112":{"position":[[754,4],[820,4]]},"114":{"position":[[574,4],[709,4],[782,4]]},"181":{"position":[[205,4]]},"185":{"position":[[417,4]]},"195":{"position":[[126,4]]},"211":{"position":[[15,4]]},"213":{"position":[[768,6]]},"215":{"position":[[116,5]]},"217":{"position":[[12,4]]},"219":{"position":[[296,4]]},"221":{"position":[[1278,6],[1581,6]]},"247":{"position":[[1451,6]]},"266":{"position":[[138,5]]},"273":{"position":[[161,4],[383,4],[675,4]]},"313":{"position":[[129,4]]},"336":{"position":[[321,4]]},"346":{"position":[[452,4],[585,4]]},"360":{"position":[[15,5],[72,4],[513,6],[539,6]]},"372":{"position":[[181,4]]},"398":{"position":[[3150,4]]},"400":{"position":[[292,4]]},"402":{"position":[[179,4]]},"460":{"position":[[578,4]]},"468":{"position":[[2058,4],[2121,4],[2177,6]]},"492":{"position":[[662,7]]},"514":{"position":[[35,5],[64,4]]},"540":{"position":[[172,6],[2579,7]]},"756":{"position":[[121,4]]},"766":{"position":[[90,4]]},"802":{"position":[[91,4]]},"813":{"position":[[111,4]]}}}],["neg",{"_index":651,"t":{"44":{"position":[[138,10]]}}}],["net",{"_index":2597,"t":{"536":{"position":[[802,4]]}}}],["net.ipv4.ip_forward",{"_index":2355,"t":{"468":{"position":[[3808,19]]}}}],["net.ipv6.conf.all.accept_ra=2",{"_index":1844,"t":{"313":{"position":[[152,30]]}}}],["net.ipv6.conf.all.forward",{"_index":2356,"t":{"468":{"position":[[3830,28]]}}}],["net_admin",{"_index":2353,"t":{"468":{"position":[[3774,9]]}}}],["net_raw",{"_index":2018,"t":{"360":{"position":[[1111,7],[1293,7]]},"787":{"position":[[146,7]]}}}],["netlink",{"_index":874,"t":{"65":{"position":[[987,7]]}}}],["netpol",{"_index":2120,"t":{"406":{"position":[[99,6]]}}}],["network",{"_index":91,"t":{"4":{"position":[[980,7]]},"31":{"position":[[34,7],[109,10],[246,7]]},"35":{"position":[[83,7]]},"65":{"position":[[19,7],[146,7],[395,7],[881,7],[1161,7]]},"77":{"position":[[449,7]]},"132":{"position":[[372,7]]},"150":{"position":[[71,7],[150,7]]},"154":{"position":[[251,7],[286,7]]},"162":{"position":[[1382,12],[1405,7],[1483,12],[1506,7],[1599,12],[1717,12],[1849,12],[1928,12],[2135,12],[2203,12],[2296,12],[2401,12],[6195,7],[6243,7]]},"215":{"position":[[619,7],[821,7]]},"221":{"position":[[2335,7],[2537,7]]},"253":{"position":[[249,7],[290,10]]},"268":{"position":[[1396,9]]},"301":{"position":[[24,7],[155,10]]},"303":{"position":[[45,7],[101,7],[1616,7],[1751,7],[1880,7]]},"307":{"position":[[107,7],[168,7],[1247,7]]},"311":{"position":[[276,7],[519,10],[1555,7]]},"315":{"position":[[81,7],[404,7],[699,9]]},"317":{"position":[[787,10]]},"319":{"position":[[1048,8]]},"360":{"position":[[885,7],[1064,7],[1150,7]]},"400":{"position":[[141,7],[332,10]]},"404":{"position":[[111,10]]},"406":{"position":[[25,7],[248,7],[274,7],[371,7],[437,7],[478,7]]},"424":{"position":[[57,7]]},"466":{"position":[[109,7],[245,7],[318,7]]},"468":{"position":[[2376,7]]},"470":{"position":[[40,7],[120,7],[295,7],[598,7],[736,7],[999,7],[2666,7]]},"504":{"position":[[175,10],[345,10],[418,7]]},"542":{"position":[[280,10]]},"800":{"position":[[68,7]]}}}],["network/2593",{"_index":2164,"t":{"424":{"position":[[271,12]]}}}],["networking.k8s.io/v1",{"_index":2366,"t":{"468":{"position":[[5830,20],[6033,20],[6228,20]]},"470":{"position":[[343,20],[671,20],[1304,20],[1518,20],[1759,20],[1987,20],[2201,20],[2442,20]]}}}],["networking.k8s.io/v1alpha1",{"_index":2167,"t":{"424":{"position":[[758,26]]}}}],["networkpolici",{"_index":2296,"t":{"460":{"position":[[636,15]]},"468":{"position":[[5804,13],[6007,13],[6202,13]]},"470":{"position":[[317,13],[698,13],[1331,13],[1545,13],[1786,13],[2014,13],[2228,13],[2469,13]]},"802":{"position":[[62,13]]}}}],["never",{"_index":1334,"t":{"179":{"position":[[1394,5]]}}}],["new",{"_index":498,"t":{"31":{"position":[[30,3]]},"65":{"position":[[825,3]]},"108":{"position":[[1112,3]]},"110":{"position":[[1557,3]]},"112":{"position":[[565,3],[789,3],[854,3],[1001,3],[2451,3]]},"114":{"position":[[611,3],[631,3],[816,3],[1022,3],[1138,3],[1579,3],[1648,3],[2237,3]]},"116":{"position":[[404,3],[845,3]]},"118":{"position":[[752,3],[798,3],[2421,3]]},"122":{"position":[[180,3]]},"128":{"position":[[1700,3]]},"132":{"position":[[111,3]]},"137":{"position":[[499,3],[610,3]]},"162":{"position":[[3213,3],[3336,3]]},"179":{"position":[[522,3]]},"185":{"position":[[1252,3]]},"243":{"position":[[341,3]]},"271":{"position":[[91,3]]},"277":{"position":[[613,3]]},"305":{"position":[[422,3],[534,3]]},"317":{"position":[[1144,3]]},"330":{"position":[[352,3]]},"424":{"position":[[704,3],[819,3],[1055,3],[1126,3]]},"426":{"position":[[238,3]]},"472":{"position":[[1403,3]]},"480":{"position":[[275,3]]},"512":{"position":[[142,3]]},"536":{"position":[[1742,3]]},"540":{"position":[[2057,3]]},"546":{"position":[[887,3]]},"550":{"position":[[200,3]]},"819":{"position":[[135,3]]}}}],["newer",{"_index":1570,"t":{"241":{"position":[[81,5],[121,5]]},"293":{"position":[[10,5]]},"319":{"position":[[44,6]]},"394":{"position":[[114,5]]},"468":{"position":[[10,5],[46,5]]},"470":{"position":[[1270,5]]},"474":{"position":[[159,5]]},"480":{"position":[[407,5]]},"548":{"position":[[922,5]]}}}],["newest",{"_index":2618,"t":{"540":{"position":[[2238,6]]}}}],["next",{"_index":1037,"t":{"108":{"position":[[1155,4]]},"128":{"position":[[1253,4]]},"390":{"position":[[131,4]]},"468":{"position":[[2408,4]]}}}],["nflog",{"_index":847,"t":{"65":{"position":[[86,5],[445,5],[493,5],[696,5],[981,5],[1260,5]]}}}],["nflog.prefix",{"_index":886,"t":{"65":{"position":[[1295,12]]}}}],["nflog:100",{"_index":880,"t":{"65":{"position":[[1083,9]]}}}],["nftabl",{"_index":2051,"t":{"394":{"position":[[31,8]]}}}],["nginx",{"_index":1407,"t":{"199":{"position":[[156,5]]},"203":{"position":[[8,5],[1942,5],[1970,5],[2161,5],[2219,5],[2507,5],[2675,5],[2747,5]]},"205":{"position":[[7,5],[198,5],[256,5],[544,5],[712,5],[784,5]]},"438":{"position":[[133,5]]}}}],["nginx.conf",{"_index":1471,"t":{"203":{"position":[[2274,10],[2698,10]]},"205":{"position":[[311,10],[735,10]]}}}],["nginx:stabl",{"_index":1477,"t":{"203":{"position":[[2651,12]]},"205":{"position":[[688,12]]},"522":{"position":[[117,12]]},"528":{"position":[[117,12]]}}}],["ni",{"_index":879,"t":{"65":{"position":[[1080,2]]}}}],["nm",{"_index":691,"t":{"46":{"position":[[637,2],[691,2],[714,2]]}}}],["no_proxi",{"_index":188,"t":{"17":{"position":[[354,9],[835,8],[1005,8]]}}}],["no_proxy=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16",{"_index":223,"t":{"17":{"position":[[1165,60]]}}}],["node",{"_index":138,"t":{"11":{"position":[[101,5]]},"17":{"position":[[921,5],[978,6],[1032,5]]},"19":{"position":[[429,5]]},"25":{"position":[[162,4]]},"27":{"position":[[165,4],[230,5],[361,6],[530,5]]},"31":{"position":[[751,4],[876,4],[947,5]]},"39":{"position":[[48,4],[65,4],[222,4],[303,5],[462,4],[553,5],[610,4],[689,6],[709,5],[771,4],[956,4],[985,4],[1136,4]]},"44":{"position":[[194,5]]},"46":{"position":[[667,5]]},"52":{"position":[[102,4],[182,4]]},"61":{"position":[[562,8]]},"67":{"position":[[112,4],[161,5],[209,4],[336,4]]},"69":{"position":[[70,4],[154,4],[192,5],[282,5]]},"71":{"position":[[249,5],[448,5]]},"73":{"position":[[52,4],[199,5],[258,6]]},"75":{"position":[[6,5],[885,4],[954,5],[1049,5],[1134,4],[1293,4],[1386,4],[1419,4],[1492,4],[1512,4],[1548,4],[1642,4],[1674,4],[1780,4],[1812,4]]},"77":{"position":[[135,5],[395,5]]},"87":{"position":[[40,4],[70,4],[87,4],[112,4],[124,4],[199,4]]},"91":{"position":[[40,4],[96,4],[103,4],[167,4]]},"99":{"position":[[48,4],[65,4],[339,4],[362,4],[389,4],[444,4],[473,4],[599,4]]},"101":{"position":[[169,4],[1009,4],[1038,4],[1072,4],[1106,4],[1118,4],[1202,4],[2634,4],[2714,4],[2721,4],[2812,4]]},"108":{"position":[[288,5],[712,5]]},"112":{"position":[[197,5],[686,5],[2258,5],[2380,5],[2585,4]]},"114":{"position":[[220,5],[526,5],[2068,5],[2135,5],[2202,6],[2370,4]]},"124":{"position":[[971,4]]},"126":{"position":[[167,4],[491,4],[823,4]]},"128":{"position":[[131,5],[182,5],[611,4],[622,4],[856,4],[929,5],[1290,4],[1301,4],[1547,5]]},"144":{"position":[[146,4]]},"150":{"position":[[197,4],[680,4],[957,6],[1226,6],[1233,5],[1484,5],[1575,6],[1582,5],[1669,5],[1737,5],[1839,5]]},"162":{"position":[[951,4],[1577,4],[2220,4],[6334,4],[6363,4],[6397,4],[6431,4],[6443,4],[6527,4],[7695,4],[7775,4],[7782,4],[7873,4]]},"164":{"position":[[30,4],[96,5],[110,4]]},"168":{"position":[[313,5],[661,4],[747,4]]},"170":{"position":[[99,4],[158,4]]},"174":{"position":[[260,5]]},"178":{"position":[[71,5]]},"179":{"position":[[1265,4]]},"189":{"position":[[1865,4]]},"199":{"position":[[122,6],[538,6]]},"201":{"position":[[4,5],[143,6],[264,5],[378,5],[498,5]]},"203":{"position":[[1543,4],[1610,5],[2992,4],[3058,5]]},"205":{"position":[[1029,4],[1095,5]]},"207":{"position":[[325,5],[529,5],[634,5]]},"213":{"position":[[32,5],[171,6],[362,6],[996,6],[1251,5],[1431,4],[1480,5],[1513,4],[1617,6],[1690,6],[1724,5]]},"215":{"position":[[73,6],[111,4],[154,4],[359,5],[612,6],[1023,6]]},"217":{"position":[[6,5],[89,5],[219,5],[322,6],[395,5],[785,5]]},"219":{"position":[[19,5],[59,5],[150,5],[201,5],[253,5]]},"221":{"position":[[191,5],[313,4],[353,5],[399,4],[536,5],[592,5],[687,5],[840,5],[945,5],[1018,4],[1716,5],[2060,6],[2092,5],[2328,6]]},"223":{"position":[[356,4]]},"257":{"position":[[52,5]]},"261":{"position":[[38,5],[186,4]]},"266":{"position":[[315,4],[449,5],[487,5]]},"268":{"position":[[196,5],[303,5]]},"271":{"position":[[267,5],[360,5]]},"279":{"position":[[1145,6],[1252,5],[1291,6],[1302,5],[1567,6]]},"281":{"position":[[362,4],[550,4],[575,4],[1020,4]]},"283":{"position":[[586,4],[672,4],[760,4],[797,4],[918,4],[955,4]]},"303":{"position":[[220,6],[808,5],[1136,4],[1248,4],[1277,5],[1459,4],[1518,5],[2257,4]]},"305":{"position":[[511,5],[624,6],[914,6]]},"309":{"position":[[58,5],[1405,6]]},"311":{"position":[[185,4],[774,6],[1100,4],[1129,4],[1191,4],[1206,4]]},"313":{"position":[[198,4]]},"315":{"position":[[39,5],[126,5],[318,5],[598,5]]},"317":{"position":[[64,5],[348,4],[460,4],[570,4],[644,5],[1015,5],[1102,4]]},"319":{"position":[[92,5],[152,6],[345,5],[669,6],[828,6]]},"322":{"position":[[10,6]]},"326":{"position":[[1332,6],[1474,6],[1521,6]]},"336":{"position":[[105,5],[362,4],[417,5],[486,5]]},"340":{"position":[[1469,5]]},"344":{"position":[[90,4]]},"346":{"position":[[90,4],[613,5]]},"350":{"position":[[166,4]]},"352":{"position":[[4,5],[53,5],[170,4],[220,5],[265,4],[302,4]]},"360":{"position":[[55,6],[66,5],[103,5],[251,4],[334,5],[601,5],[725,5],[816,5],[928,5]]},"362":{"position":[[193,5],[203,5],[255,5],[265,5],[301,5],[311,5],[377,5],[387,5]]},"366":{"position":[[62,5],[119,5]]},"372":{"position":[[225,5]]},"374":{"position":[[261,6]]},"376":{"position":[[242,4],[314,5]]},"378":{"position":[[31,4],[105,4],[168,6],[405,6],[462,5],[482,5]]},"380":{"position":[[41,5],[172,5]]},"382":{"position":[[172,5]]},"384":{"position":[[374,4],[461,4],[502,4],[543,4]]},"386":{"position":[[31,5]]},"388":{"position":[[31,5]]},"398":{"position":[[252,6],[266,6],[596,4],[3756,4]]},"406":{"position":[[632,5]]},"410":{"position":[[247,5],[397,4],[730,5]]},"414":{"position":[[74,5],[147,5],[208,5],[293,5],[331,5],[359,5]]},"416":{"position":[[33,5],[110,6],[161,5],[200,4],[211,4],[316,4],[327,4],[574,4],[585,4],[733,4],[744,4]]},"420":{"position":[[186,4],[247,4],[261,4],[689,5]]},"422":{"position":[[219,4],[295,4]]},"424":{"position":[[484,4],[993,5],[1084,4],[1361,4]]},"428":{"position":[[351,4],[643,4],[884,6],[1003,5],[1536,5],[1742,5]]},"436":{"position":[[90,4],[320,5]]},"440":{"position":[[122,4],[458,4],[625,5]]},"446":{"position":[[40,4]]},"448":{"position":[[72,4]]},"454":{"position":[[642,5]]},"468":{"position":[[5012,4]]},"476":{"position":[[2297,4],[3959,4]]},"506":{"position":[[748,4]]},"518":{"position":[[165,5]]},"533":{"position":[[431,5]]},"536":{"position":[[286,5],[549,5],[656,4]]},"540":{"position":[[93,5],[130,6],[224,6],[591,4],[939,4],[1357,5],[1431,5],[1481,5],[1496,4],[1570,5],[1619,5]]},"542":{"position":[[450,5]]},"544":{"position":[[151,5],[193,6]]},"559":{"position":[[123,5]]},"561":{"position":[[123,5]]},"563":{"position":[[123,5]]},"565":{"position":[[123,5]]},"567":{"position":[[123,5]]},"569":{"position":[[123,5]]},"571":{"position":[[123,5]]},"573":{"position":[[123,5]]},"575":{"position":[[123,5]]},"577":{"position":[[123,5]]},"579":{"position":[[45,5]]},"581":{"position":[[55,5]]},"583":{"position":[[123,5]]},"585":{"position":[[113,5]]},"587":{"position":[[113,5]]},"589":{"position":[[113,5]]},"591":{"position":[[113,5]]},"593":{"position":[[113,5]]},"595":{"position":[[113,5]]},"597":{"position":[[113,5]]},"599":{"position":[[113,5]]},"602":{"position":[[136,4]]},"604":{"position":[[222,4]]},"606":{"position":[[136,4]]},"608":{"position":[[146,4]]},"610":{"position":[[240,4],[2629,4]]},"612":{"position":[[243,4],[2577,4]]},"614":{"position":[[136,4],[2446,4]]},"616":{"position":[[136,4],[209,5],[406,6],[2395,4]]},"618":{"position":[[136,4],[2408,4]]},"620":{"position":[[2521,4]]},"622":{"position":[[136,4],[2482,4]]},"624":{"position":[[136,4]]},"626":{"position":[[136,4],[2555,4]]},"628":{"position":[[226,4],[2536,4]]},"630":{"position":[[136,4],[2432,4]]},"632":{"position":[[229,4],[2548,4]]},"634":{"position":[[136,4],[2413,4]]},"636":{"position":[[136,4],[2328,4]]},"638":{"position":[[146,4]]},"640":{"position":[[146,4]]},"642":{"position":[[146,4]]},"644":{"position":[[146,4]]},"646":{"position":[[136,4],[2503,4]]},"648":{"position":[[146,4]]},"650":{"position":[[240,4]]},"652":{"position":[[226,4],[2545,4]]},"654":{"position":[[226,4],[2461,4]]},"656":{"position":[[240,4],[2467,4]]},"658":{"position":[[217,4]]},"662":{"position":[[136,4]]},"665":{"position":[[153,4]]},"667":{"position":[[153,4],[535,4],[1630,4]]},"669":{"position":[[153,4],[603,4],[1698,4]]},"671":{"position":[[153,4],[688,4],[1783,4]]},"673":{"position":[[153,4],[585,4],[1680,4]]},"675":{"position":[[163,4]]},"677":{"position":[[153,4]]},"680":{"position":[[140,4]]},"682":{"position":[[135,4]]},"685":{"position":[[187,4]]},"687":{"position":[[113,4]]},"689":{"position":[[113,4]]},"691":{"position":[[229,4]]},"693":{"position":[[113,4]]},"695":{"position":[[113,4]]},"697":{"position":[[236,4]]},"708":{"position":[[121,5]]},"710":{"position":[[121,5]]},"712":{"position":[[111,5]]},"714":{"position":[[111,5]]},"716":{"position":[[111,5]]},"718":{"position":[[111,5]]},"729":{"position":[[254,4],[2812,4]]},"731":{"position":[[240,4],[2826,4]]},"733":{"position":[[283,4],[2941,4]]},"735":{"position":[[230,4],[1458,4],[2681,4]]},"737":{"position":[[267,4]]},"739":{"position":[[252,4]]},"741":{"position":[[253,4]]},"743":{"position":[[135,4]]},"745":{"position":[[251,4]]},"747":{"position":[[373,4],[1649,4],[2872,4]]},"749":{"position":[[307,4]]},"751":{"position":[[135,4]]},"753":{"position":[[556,4]]}}}],["node'",{"_index":1555,"t":{"235":{"position":[[72,6]]},"266":{"position":[[693,6]]},"309":{"position":[[1502,6]]},"410":{"position":[[442,6],[550,6]]}}}],["node.cloudprovider.kubernetes.io/uniniti",{"_index":2153,"t":{"420":{"position":[[341,46]]}}}],["node.k8s.io/v1",{"_index":438,"t":{"25":{"position":[[957,14]]}}}],["node/multi",{"_index":525,"t":{"31":{"position":[[843,10]]}}}],["node:13.13.0",{"_index":822,"t":{"61":{"position":[[265,12]]}}}],["node>:6443",{"_index":2044,"t":{"378":{"position":[[362,10]]}}}],["nodej",{"_index":826,"t":{"61":{"position":[[454,6],[487,6]]}}}],["nodeport",{"_index":1250,"t":{"150":{"position":[[273,8]]},"162":{"position":[[1652,8]]},"404":{"position":[[408,8]]},"410":{"position":[[311,9]]}}}],["noderestrict",{"_index":2316,"t":{"466":{"position":[[521,15]]},"468":{"position":[[1128,15]]},"632":{"position":[[76,15],[308,16],[548,17]]}}}],["nodeselector",{"_index":2168,"t":{"424":{"position":[[834,13],[1014,12]]},"540":{"position":[[552,13],[900,13]]}}}],["nodeselectorterm",{"_index":2169,"t":{"424":{"position":[[848,18]]}}}],["non",{"_index":1084,"t":{"112":{"position":[[505,3],[1385,3]]},"360":{"position":[[1304,3]]},"480":{"position":[[177,3]]},"634":{"position":[[212,4]]}}}],["none",{"_index":1254,"t":{"150":{"position":[[493,7]]},"162":{"position":[[2001,7]]},"203":{"position":[[1663,6],[1701,6],[1739,6],[3111,6],[3149,6],[3187,6]]},"205":{"position":[[1148,6],[1186,6],[1224,6]]},"277":{"position":[[842,4],[935,5],[1045,4],[1171,4],[1256,4]]},"285":{"position":[[355,4],[464,4],[562,4]]},"303":{"position":[[1104,5]]}}}],["normal",{"_index":1119,"t":{"116":{"position":[[1179,6]]},"247":{"position":[[69,8]]},"317":{"position":[[979,8]]},"398":{"position":[[2020,7]]},"470":{"position":[[2686,6]]}}}],["notabl",{"_index":2293,"t":{"460":{"position":[[397,7]]}}}],["note",{"_index":458,"t":{"25":{"position":[[1417,4]]},"33":{"position":[[813,5]]},"52":{"position":[[590,4]]},"79":{"position":[[62,4]]},"110":{"position":[[928,5],[1070,5]]},"118":{"position":[[4214,4]]},"124":{"position":[[150,4],[810,5]]},"126":{"position":[[755,4]]},"130":{"position":[[63,4]]},"189":{"position":[[1133,4]]},"213":{"position":[[1047,4]]},"215":{"position":[[918,4]]},"247":{"position":[[243,4],[2472,4]]},"249":{"position":[[426,4]]},"251":{"position":[[391,4]]},"268":{"position":[[409,4],[1283,4]]},"273":{"position":[[266,5]]},"277":{"position":[[1889,4]]},"301":{"position":[[128,5]]},"309":{"position":[[1412,5]]},"311":{"position":[[923,4]]},"317":{"position":[[650,4]]},"332":{"position":[[222,4]]},"336":{"position":[[400,4]]},"378":{"position":[[0,4]]},"398":{"position":[[2507,4]]},"404":{"position":[[1455,5]]},"406":{"position":[[269,4]]},"414":{"position":[[276,4]]},"420":{"position":[[587,4]]},"424":{"position":[[1077,4]]},"428":{"position":[[1542,4]]},"464":{"position":[[172,5]]},"468":{"position":[[6395,5]]},"478":{"position":[[113,4]]},"533":{"position":[[1133,4]]},"536":{"position":[[690,4]]},"544":{"position":[[115,4]]},"548":{"position":[[166,4]]},"555":{"position":[[1916,5]]}}}],["now",{"_index":548,"t":{"33":{"position":[[707,3]]},"46":{"position":[[71,3]]},"183":{"position":[[189,3]]},"203":{"position":[[1515,3],[2964,3]]},"205":{"position":[[1001,3]]},"221":{"position":[[1677,3],[1905,3]]},"259":{"position":[[134,3]]},"263":{"position":[[333,3]]},"295":{"position":[[118,3]]}}}],["ns",{"_index":1777,"t":{"297":{"position":[[24,2]]},"299":{"position":[[24,2]]}}}],["number",{"_index":852,"t":{"65":{"position":[[212,6]]},"77":{"position":[[26,6]]},"81":{"position":[[36,6]]},"101":{"position":[[407,6]]},"108":{"position":[[22,6]]},"118":{"position":[[325,6],[2214,6]]},"135":{"position":[[953,6]]},"142":{"position":[[67,6]]},"162":{"position":[[418,6],[4824,6]]},"217":{"position":[[471,6]]},"221":{"position":[[174,6],[343,6],[526,6]]},"324":{"position":[[17,6]]},"460":{"position":[[242,6],[322,6]]},"488":{"position":[[327,6]]},"490":{"position":[[313,6]]},"640":{"position":[[219,6]]}}}],["nvcr.io/nvidia/k8s/cuda",{"_index":448,"t":{"25":{"position":[[1212,23]]}}}],["nvidia",{"_index":409,"t":{"25":{"position":[[48,6],[119,6],[259,6],[322,6],[378,6],[499,6],[552,6],[641,6],[655,6],[921,6],[1007,6],[1023,6],[1163,6],[1431,6],[1489,6],[1643,7]]}}}],["nvidia.com/gpu",{"_index":453,"t":{"25":{"position":[[1306,15]]}}}],["nvidia_driver_cap",{"_index":457,"t":{"25":{"position":[[1379,26]]}}}],["nvidia_visible_devic",{"_index":455,"t":{"25":{"position":[[1337,22]]}}}],["nvme",{"_index":2261,"t":{"442":{"position":[[116,4]]}}}],["o",{"_index":1233,"t":{"139":{"position":[[65,1]]},"162":{"position":[[2516,1]]},"289":{"position":[[146,1]]},"297":{"position":[[194,1]]},"540":{"position":[[2709,1],[2752,1]]}}}],["object",{"_index":1174,"t":{"118":{"position":[[4447,6]]},"326":{"position":[[564,6]]},"480":{"position":[[148,7],[279,8],[413,8]]},"482":{"position":[[239,7]]},"496":{"position":[[209,8],[224,7]]},"628":{"position":[[77,7]]},"705":{"position":[[355,8]]},"758":{"position":[[86,7]]},"760":{"position":[[110,7]]},"762":{"position":[[70,7]]},"802":{"position":[[76,7]]},"813":{"position":[[77,7]]}}}],["obscur",{"_index":477,"t":{"27":{"position":[[503,7]]}}}],["observ",{"_index":1064,"t":{"110":{"position":[[1245,7]]}}}],["obtain",{"_index":1653,"t":{"263":{"position":[[0,6]]},"348":{"position":[[7,6]]}}}],["occasion",{"_index":1279,"t":{"168":{"position":[[24,13]]}}}],["occurr",{"_index":1738,"t":{"283":{"position":[[402,11]]}}}],["oci",{"_index":800,"t":{"59":{"position":[[633,3],[658,3]]}}}],["odd",{"_index":1521,"t":{"221":{"position":[[170,3],[283,3],[410,3]]}}}],["offer",{"_index":1821,"t":{"309":{"position":[[696,6]]},"408":{"position":[[470,5]]},"807":{"position":[[66,7]]}}}],["offici",{"_index":113,"t":{"6":{"position":[[258,8]]},"21":{"position":[[184,8]]},"39":{"position":[[1065,8]]},"99":{"position":[[528,8]]},"195":{"position":[[364,8],[397,8],[426,8],[460,8]]},"251":{"position":[[242,8],[469,8]]},"257":{"position":[[210,8]]},"404":{"position":[[1024,8]]},"426":{"position":[[261,8]]},"514":{"position":[[492,8]]},"518":{"position":[[246,8]]},"524":{"position":[[196,8]]}}}],["offset",{"_index":509,"t":{"31":{"position":[[381,6],[501,7]]}}}],["oidc",{"_index":2815,"t":{"700":{"position":[[91,4]]}}}],["old",{"_index":705,"t":{"50":{"position":[[56,3]]},"75":{"position":[[1488,3]]},"114":{"position":[[679,3],[1054,3],[1130,3]]},"116":{"position":[[149,3],[412,3]]},"118":{"position":[[623,3],[686,5]]},"271":{"position":[[284,3],[319,3]]},"488":{"position":[[147,3],[337,3]]},"490":{"position":[[146,3],[323,3]]},"550":{"position":[[174,3]]}}}],["older",{"_index":1771,"t":{"293":{"position":[[26,5]]},"404":{"position":[[1498,5]]},"460":{"position":[[711,6]]},"468":{"position":[[26,5],[862,5]]},"470":{"position":[[1286,5]]},"474":{"position":[[175,5]]},"533":{"position":[[201,5]]},"548":{"position":[[23,5]]}}}],["omit",{"_index":2617,"t":{"540":{"position":[[1863,4]]}}}],["on",{"_index":248,"t":{"19":{"position":[[435,3]]},"59":{"position":[[27,3]]},"73":{"position":[[240,3]]},"77":{"position":[[1731,3]]},"116":{"position":[[145,3]]},"118":{"position":[[819,3]]},"124":{"position":[[960,3]]},"126":{"position":[[812,3]]},"150":{"position":[[486,3],[864,3]]},"162":{"position":[[1994,3],[2309,3]]},"174":{"position":[[71,3]]},"179":{"position":[[642,3],[1554,3]]},"189":{"position":[[1909,3]]},"219":{"position":[[357,3]]},"221":{"position":[[309,3]]},"243":{"position":[[247,3]]},"268":{"position":[[23,3]]},"326":{"position":[[1389,3]]},"340":{"position":[[299,3],[306,4],[337,4],[986,4]]},"358":{"position":[[337,3]]},"408":{"position":[[365,3]]},"414":{"position":[[62,3]]},"416":{"position":[[433,3]]},"424":{"position":[[696,5],[1130,4]]},"544":{"position":[[163,3]]},"614":{"position":[[218,3]]}}}],["on=fals",{"_index":2476,"t":{"476":{"position":[[3785,8]]},"735":{"position":[[1302,8],[2525,8]]},"747":{"position":[[1493,8],[2716,8]]}}}],["onc",{"_index":164,"t":{"15":{"position":[[101,4]]},"52":{"position":[[751,4]]},"75":{"position":[[472,4]]},"99":{"position":[[215,4]]},"124":{"position":[[1345,4],[1471,4],[1722,4]]},"126":{"position":[[1202,4],[1449,4]]},"174":{"position":[[303,4]]},"213":{"position":[[1559,4]]},"223":{"position":[[212,4]]},"259":{"position":[[96,4]]},"263":{"position":[[295,4]]},"273":{"position":[[893,4]]},"311":{"position":[[628,4]]},"313":{"position":[[231,4]]},"492":{"position":[[342,4]]},"540":{"position":[[231,4]]}}}],["onfailur",{"_index":447,"t":{"25":{"position":[[1135,9]]}}}],["open",{"_index":687,"t":{"46":{"position":[[418,6]]},"48":{"position":[[299,6]]},"203":{"position":[[28,4],[2167,4]]},"205":{"position":[[204,4]]},"231":{"position":[[67,4]]},"360":{"position":[[863,5]]},"400":{"position":[[303,6]]},"504":{"position":[[582,5]]},"524":{"position":[[67,4]]}}}],["openrc",{"_index":637,"t":{"41":{"position":[[72,6],[167,7]]},"124":{"position":[[417,6],[1315,6]]},"126":{"position":[[351,6],[1172,6]]},"235":{"position":[[170,7]]},"277":{"position":[[150,6]]},"428":{"position":[[102,6]]},"432":{"position":[[150,6],[2587,6]]},"552":{"position":[[71,7],[204,6]]}}}],["openssl",{"_index":1109,"t":{"116":{"position":[[740,7],[756,7],[783,8],[853,7]]}}}],["openssl_genrsa_flag",{"_index":1112,"t":{"116":{"position":[[798,21],[868,23]]}}}],["oper",{"_index":66,"t":{"4":{"position":[[555,9],[711,10]]},"27":{"position":[[318,9],[651,8]]},"35":{"position":[[644,10]]},"44":{"position":[[537,9]]},"108":{"position":[[59,10],[1296,9]]},"132":{"position":[[190,9]]},"185":{"position":[[164,10],[321,9],[633,11]]},"195":{"position":[[55,10]]},"197":{"position":[[97,10]]},"247":{"position":[[1792,10],[1875,9],[1932,9]]},"303":{"position":[[721,9]]},"309":{"position":[[228,7],[390,9]]},"398":{"position":[[1398,8],[1964,8]]},"424":{"position":[[917,9]]},"440":{"position":[[612,9]]},"444":{"position":[[100,10]]},"454":{"position":[[256,10],[424,9],[520,8],[844,10]]},"460":{"position":[[526,9]]},"468":{"position":[[831,8]]},"470":{"position":[[2644,9]]},"478":{"position":[[169,8]]},"540":{"position":[[629,9],[977,9]]},"555":{"position":[[354,10],[1346,8],[1559,9]]},"791":{"position":[[185,7]]}}}],["oppos",{"_index":906,"t":{"71":{"position":[[358,7]]},"207":{"position":[[429,7]]}}}],["opt",{"_index":2298,"t":{"460":{"position":[[775,3]]}}}],["opt/k3s/server/tl",{"_index":1090,"t":{"112":{"position":[[1267,19],[1658,19],[1834,19]]},"116":{"position":[[712,19]]}}}],["opt/k3s/server/tls/service.key",{"_index":1115,"t":{"116":{"position":[[899,31],[1050,31]]}}}],["optim",{"_index":816,"t":{"59":{"position":[[1034,13]]},"358":{"position":[[813,7]]},"368":{"position":[[67,7]]}}}],["option",{"_index":47,"t":{"4":{"position":[[308,8]]},"19":{"position":[[605,7]]},"39":{"position":[[38,7],[129,7]]},"44":{"position":[[469,7]]},"56":{"position":[[91,6]]},"61":{"position":[[48,6]]},"67":{"position":[[530,7]]},"79":{"position":[[167,7],[262,8]]},"99":{"position":[[38,7],[129,7]]},"101":{"position":[[6,6],[82,6],[197,9],[207,8]]},"112":{"position":[[661,6],[2333,6]]},"114":{"position":[[733,6]]},"118":{"position":[[368,8],[937,7],[1369,7],[1857,8],[1872,7],[1978,7],[2963,7],[3326,11]]},"130":{"position":[[128,7],[205,7],[300,8]]},"132":{"position":[[14,7]]},"135":{"position":[[1566,10]]},"162":{"position":[[6,6],[84,6],[208,9],[218,8],[5514,10]]},"172":{"position":[[167,6]]},"176":{"position":[[154,6]]},"179":{"position":[[210,8],[457,8],[2628,8]]},"185":{"position":[[199,7],[798,8]]},"191":{"position":[[283,7]]},"203":{"position":[[40,6],[546,6],[617,6]]},"207":{"position":[[500,9],[585,9]]},"211":{"position":[[95,7]]},"213":{"position":[[758,9],[1074,7],[1209,7]]},"217":{"position":[[920,7],[933,6]]},"221":{"position":[[811,9],[896,9],[1268,9],[1571,9]]},"235":{"position":[[1031,8]]},"237":{"position":[[64,7]]},"247":{"position":[[51,7],[1589,7]]},"253":{"position":[[170,7],[203,7],[257,7],[301,7]]},"275":{"position":[[25,7],[135,7]]},"277":{"position":[[617,8]]},"279":{"position":[[1019,8]]},"285":{"position":[[17,7]]},"301":{"position":[[46,8]]},"303":{"position":[[186,7]]},"315":{"position":[[175,7]]},"352":{"position":[[178,6]]},"364":{"position":[[186,7]]},"370":{"position":[[161,6]]},"382":{"position":[[110,7]]},"398":{"position":[[1414,10],[2564,8]]},"400":{"position":[[149,7],[199,7]]},"402":{"position":[[132,7]]},"426":{"position":[[63,8]]},"430":{"position":[[95,8]]},"432":{"position":[[2300,7],[2416,7]]},"460":{"position":[[837,7]]},"498":{"position":[[266,8]]},"504":{"position":[[186,7]]},"510":{"position":[[528,8]]},"516":{"position":[[20,8]]},"536":{"position":[[449,8]]},"548":{"position":[[105,7]]},"689":{"position":[[2148,9],[2388,9],[2628,9]]},"695":{"position":[[2193,9]]},"807":{"position":[[58,7]]}}}],["order",{"_index":1337,"t":{"179":{"position":[[1924,5]]},"266":{"position":[[668,5]]},"283":{"position":[[219,6]]},"324":{"position":[[444,5]]},"346":{"position":[[534,5]]},"374":{"position":[[198,5]]},"420":{"position":[[3,5]]},"482":{"position":[[302,5]]},"516":{"position":[[129,5]]},"705":{"position":[[273,5]]}}}],["organ",{"_index":1887,"t":{"326":{"position":[[208,10]]}}}],["organization/project",{"_index":1945,"t":{"340":{"position":[[903,20]]}}}],["origin",{"_index":587,"t":{"35":{"position":[[792,8]]},"112":{"position":[[1465,8],[1497,8]]},"277":{"position":[[2016,8]]},"340":{"position":[[1359,8]]},"548":{"position":[[117,10],[363,10],[466,8]]},"555":{"position":[[1047,8]]}}}],["os",{"_index":127,"t":{"8":{"position":[[148,2]]},"41":{"position":[[49,2]]},"50":{"position":[[13,2],[117,2]]},"235":{"position":[[79,3]]},"243":{"position":[[138,2]]},"354":{"position":[[216,2],[272,3]]},"356":{"position":[[214,3]]},"362":{"position":[[551,2],[575,2]]},"394":{"position":[[259,2]]},"442":{"position":[[5,2],[146,2]]}}}],["oss",{"_index":1983,"t":{"356":{"position":[[59,3],[297,3]]}}}],["other",{"_index":2157,"t":{"422":{"position":[[96,6]]},"466":{"position":[[574,7]]}}}],["other=what",{"_index":1746,"t":{"283":{"position":[[774,10],[932,10]]}}}],["otherwis",{"_index":1845,"t":{"313":{"position":[[183,10]]},"332":{"position":[[313,9]]},"346":{"position":[[495,9]]},"410":{"position":[[535,10]]}}}],["out",{"_index":745,"t":{"52":{"position":[[813,3]]},"116":{"position":[[895,3]]},"245":{"position":[[345,3]]},"322":{"position":[[225,3]]},"370":{"position":[[90,3]]},"488":{"position":[[232,3]]},"490":{"position":[[231,3]]},"516":{"position":[[559,3]]},"518":{"position":[[112,3]]},"540":{"position":[[1200,3]]},"546":{"position":[[362,3]]}}}],["outag",{"_index":921,"t":{"75":{"position":[[807,7]]}}}],["outbound",{"_index":2008,"t":{"360":{"position":[[345,8]]},"362":{"position":[[454,8]]}}}],["outlin",{"_index":1965,"t":{"350":{"position":[[62,8]]},"358":{"position":[[95,8]]},"426":{"position":[[320,9]]},"460":{"position":[[96,8]]},"462":{"position":[[118,8]]},"466":{"position":[[166,8]]},"498":{"position":[[341,8]]},"555":{"position":[[1232,8]]}}}],["output",{"_index":472,"t":{"27":{"position":[[236,7]]},"114":{"position":[[1637,6],[1825,6]]},"179":{"position":[[753,6],[2594,6],[2607,6]]}}}],["outsid",{"_index":1351,"t":{"183":{"position":[[55,7]]},"195":{"position":[[78,7]]},"504":{"position":[[514,7]]}}}],["over",{"_index":996,"t":{"95":{"position":[[143,4]]},"101":{"position":[[3393,4]]},"122":{"position":[[115,4]]},"135":{"position":[[1668,4]]},"158":{"position":[[199,4]]},"162":{"position":[[5622,4],[8712,4]]},"187":{"position":[[824,4]]},"217":{"position":[[130,4],[254,4],[422,4]]},"247":{"position":[[1584,4]]},"271":{"position":[[371,4]]},"315":{"position":[[685,4]]},"360":{"position":[[109,4],[158,4]]},"512":{"position":[[77,4]]}}}],["overhead",{"_index":482,"t":{"27":{"position":[[616,8]]},"185":{"position":[[645,8]]},"438":{"position":[[482,8]]}}}],["overlayf",{"_index":1016,"t":{"101":{"position":[[2496,12]]},"162":{"position":[[7428,12]]}}}],["overrid",{"_index":994,"t":{"91":{"position":[[259,8],[319,8],[385,8]]},"101":{"position":[[2446,8],[2941,8],[3016,8],[3097,8]]},"118":{"position":[[4865,10]]},"162":{"position":[[7378,8],[8002,8],[8077,8],[8158,8]]},"247":{"position":[[198,10],[1524,8],[1961,8],[2084,9]]},"249":{"position":[[51,10],[457,8]]},"743":{"position":[[166,8]]}}}],["override=hostname01",{"_index":2478,"t":{"476":{"position":[[3838,19]]}}}],["override=k3",{"_index":2849,"t":{"735":{"position":[[1355,12],[2578,12]]},"747":{"position":[[1546,12],[2769,12]]}}}],["overview",{"_index":2631,"t":{"555":{"position":[[0,9]]}}}],["overwrit",{"_index":1083,"t":{"112":{"position":[[257,9]]},"114":{"position":[[280,9]]},"116":{"position":[[443,9]]},"281":{"position":[[1055,9]]},"283":{"position":[[479,11]]},"432":{"position":[[686,10]]}}}],["own",{"_index":1236,"t":{"139":{"position":[[248,5]]}}}],["ownership",{"_index":2300,"t":{"460":{"position":[[1135,10]]},"722":{"position":[[66,9]]}}}],["p",{"_index":555,"t":{"33":{"position":[[997,1]]},"52":{"position":[[538,1]]},"110":{"position":[[2025,1]]},"112":{"position":[[1265,1]]},"116":{"position":[[710,1]]},"203":{"position":[[2637,1]]},"205":{"position":[[674,1]]},"263":{"position":[[185,1]]},"464":{"position":[[360,1]]},"472":{"position":[[411,1]]}}}],["packag",{"_index":28,"t":{"4":{"position":[[82,8],[849,8]]},"25":{"position":[[136,7],[284,9]]},"44":{"position":[[518,8]]},"59":{"position":[[124,8]]},"162":{"position":[[5840,8]]},"245":{"position":[[12,7]]},"247":{"position":[[2361,8]]},"249":{"position":[[73,8],[555,8]]},"253":{"position":[[541,8],[584,8]]},"303":{"position":[[2240,8]]},"324":{"position":[[27,8],[316,8]]},"326":{"position":[[671,8]]},"330":{"position":[[15,8]]},"350":{"position":[[279,8]]},"392":{"position":[[64,7]]},"404":{"position":[[514,8],[910,8]]},"438":{"position":[[48,8],[212,8]]},"460":{"position":[[1216,8]]},"470":{"position":[[1063,8]]}}}],["packet",{"_index":590,"t":{"35":{"position":[[827,8]]},"65":{"position":[[0,7],[55,6],[116,6],[702,7],[860,6],[961,7],[1193,7],[1266,6]]},"303":{"position":[[1336,8]]}}}],["page",{"_index":887,"t":{"67":{"position":[[5,4]]},"79":{"position":[[127,4],[198,4]]},"130":{"position":[[236,4]]},"227":{"position":[[171,4]]},"243":{"position":[[85,5]]},"263":{"position":[[67,4]]},"266":{"position":[[198,5]]},"271":{"position":[[139,4]]},"275":{"position":[[5,4]]},"279":{"position":[[203,5]]},"301":{"position":[[5,4],[166,4]]},"354":{"position":[[89,4],[233,4]]},"400":{"position":[[5,4],[157,4]]},"514":{"position":[[543,4]]},"536":{"position":[[1298,5],[1441,5]]}}}],["pair",{"_index":1582,"t":{"245":{"position":[[723,6]]}}}],["paramet",{"_index":859,"t":{"65":{"position":[[341,10]]},"187":{"position":[[112,9],[183,10],[293,11],[930,9],[1260,10],[1315,10],[1485,9],[1559,10]]},"189":{"position":[[71,9],[293,9],[429,10],[860,9],[1005,10],[1195,10],[1276,9],[1711,9],[1888,9]]},"213":{"position":[[214,9],[294,9],[1442,9]]},"317":{"position":[[323,10],[679,9],[1119,9]]},"319":{"position":[[802,9],[930,10]]},"404":{"position":[[1060,12]]},"428":{"position":[[1277,9]]},"462":{"position":[[55,10]]},"464":{"position":[[82,10],[253,11]]},"602":{"position":[[159,10]]},"604":{"position":[[271,10]]},"608":{"position":[[182,10]]},"610":{"position":[[292,10]]},"612":{"position":[[292,9]]},"614":{"position":[[174,9]]},"616":{"position":[[174,9]]},"618":{"position":[[174,9]]},"620":{"position":[[227,11]]},"622":{"position":[[190,10]]},"624":{"position":[[180,9]]},"626":{"position":[[180,9]]},"628":{"position":[[279,9]]},"630":{"position":[[181,9]]},"632":{"position":[[273,9]]},"634":{"position":[[177,9]]},"636":{"position":[[159,10]]},"638":{"position":[[180,9]]},"640":{"position":[[182,9]]},"642":{"position":[[185,9]]},"644":{"position":[[183,9]]},"646":{"position":[[159,10],[259,9]]},"648":{"position":[[190,9]]},"650":{"position":[[287,11]]},"652":{"position":[[280,11]]},"656":{"position":[[289,10]]},"658":{"position":[[263,9]]},"662":{"position":[[159,10]]},"667":{"position":[[176,10]]},"669":{"position":[[175,10]]},"671":{"position":[[205,9]]},"673":{"position":[[185,9]]},"675":{"position":[[196,9]]},"677":{"position":[[210,9]]},"680":{"position":[[163,10]]},"682":{"position":[[192,9]]},"685":{"position":[[210,11]]},"687":{"position":[[136,10]]},"689":{"position":[[151,9]]},"691":{"position":[[252,11]]},"693":{"position":[[136,10]]},"695":{"position":[[156,9]]},"697":{"position":[[259,10]]},"729":{"position":[[277,9]]},"731":{"position":[[263,9]]},"733":{"position":[[306,9]]},"735":{"position":[[253,9]]},"737":{"position":[[290,9]]},"739":{"position":[[275,9]]},"745":{"position":[[274,9]]},"747":{"position":[[396,10]]},"751":{"position":[[158,9]]},"753":{"position":[[593,9]]}}}],["part",{"_index":638,"t":{"41":{"position":[[115,4]]},"75":{"position":[[166,4]]},"168":{"position":[[92,6]]},"187":{"position":[[1713,4]]},"221":{"position":[[1681,4]]},"342":{"position":[[138,4],[548,4]]}}}],["parti",{"_index":1412,"t":{"199":{"position":[[369,5]]},"516":{"position":[[201,5]]},"531":{"position":[[141,5]]},"807":{"position":[[108,5]]}}}],["particular",{"_index":2139,"t":{"416":{"position":[[12,10]]},"454":{"position":[[1000,10]]}}}],["particularli",{"_index":1712,"t":{"279":{"position":[[264,12]]}}}],["pass",{"_index":181,"t":{"17":{"position":[[218,6]]},"23":{"position":[[347,6]]},"79":{"position":[[233,6]]},"101":{"position":[[96,6]]},"118":{"position":[[1887,6]]},"130":{"position":[[271,6]]},"162":{"position":[[98,6]]},"187":{"position":[[318,6]]},"189":{"position":[[38,6]]},"191":{"position":[[251,4]]},"215":{"position":[[854,6]]},"221":{"position":[[2570,6]]},"243":{"position":[[194,7]]},"247":{"position":[[78,4]]},"249":{"position":[[370,6]]},"277":{"position":[[268,4],[2245,7]]},"279":{"position":[[542,4]]},"352":{"position":[[253,4]]},"370":{"position":[[134,7]]},"382":{"position":[[98,7]]},"422":{"position":[[286,4]]},"428":{"position":[[1636,4]]},"460":{"position":[[315,4]]},"468":{"position":[[141,7],[955,7]]},"472":{"position":[[824,6]]},"478":{"position":[[55,4],[147,6]]},"480":{"position":[[448,7],[518,4]]},"482":{"position":[[547,7],[617,4]]},"484":{"position":[[471,7]]},"486":{"position":[[311,7]]},"488":{"position":[[486,7]]},"490":{"position":[[472,7]]},"492":{"position":[[696,7]]},"494":{"position":[[489,7]]},"498":{"position":[[301,7]]},"500":{"position":[[563,7]]},"502":{"position":[[183,7]]},"504":{"position":[[614,7]]},"506":{"position":[[874,4]]},"510":{"position":[[82,7],[239,4]]},"548":{"position":[[695,7]]},"555":{"position":[[1181,4],[1215,6]]},"579":{"position":[[8,4],[80,6],[1653,4]]},"581":{"position":[[90,6]]},"585":{"position":[[8,4]]},"587":{"position":[[8,4]]},"589":{"position":[[8,4]]},"591":{"position":[[8,4]]},"593":{"position":[[8,4]]},"595":{"position":[[8,4]]},"604":{"position":[[8,4]]},"606":{"position":[[8,4]]},"610":{"position":[[8,4]]},"612":{"position":[[8,4]]},"614":{"position":[[8,4]]},"616":{"position":[[8,4]]},"618":{"position":[[8,4]]},"622":{"position":[[8,4]]},"628":{"position":[[8,4]]},"630":{"position":[[8,4]]},"632":{"position":[[8,4]]},"634":{"position":[[8,4]]},"636":{"position":[[8,4]]},"646":{"position":[[8,4]]},"650":{"position":[[8,4],[1783,4]]},"652":{"position":[[8,4]]},"654":{"position":[[8,4]]},"656":{"position":[[8,4]]},"667":{"position":[[8,4]]},"669":{"position":[[8,4]]},"671":{"position":[[8,4]]},"673":{"position":[[8,4]]},"677":{"position":[[8,4]]},"680":{"position":[[8,4]]},"682":{"position":[[8,4]]},"685":{"position":[[8,4],[1677,4]]},"687":{"position":[[8,4],[1566,4]]},"689":{"position":[[8,4],[1591,4]]},"691":{"position":[[8,4],[1743,4]]},"693":{"position":[[8,4],[1569,4]]},"695":{"position":[[8,4],[1601,4]]},"697":{"position":[[8,4],[1700,4]]},"712":{"position":[[8,4]]},"714":{"position":[[8,4]]},"716":{"position":[[8,4]]},"718":{"position":[[8,4]]},"720":{"position":[[8,4]]},"722":{"position":[[8,4]]},"729":{"position":[[8,4]]},"731":{"position":[[8,4]]},"733":{"position":[[8,4]]},"735":{"position":[[8,4]]},"747":{"position":[[8,4]]}}}],["passphras",{"_index":1027,"t":{"108":{"position":[[536,10]]},"174":{"position":[[523,10]]}}}],["password",{"_index":925,"t":{"75":{"position":[[937,8],[1024,9],[1124,9],[1139,8],[1517,8],[1647,8]]},"168":{"position":[[601,9]]},"170":{"position":[[41,8]]},"174":{"position":[[100,9],[908,9]]},"189":{"position":[[768,8],[1611,8]]},"342":{"position":[[691,8],[705,8]]},"344":{"position":[[301,9],[341,8]]},"346":{"position":[[304,9],[344,8]]},"384":{"position":[[507,8]]}}}],["password.k3",{"_index":930,"t":{"75":{"position":[[1238,13]]}}}],["past",{"_index":1682,"t":{"271":{"position":[[525,4]]}}}],["patch",{"_index":2587,"t":{"533":{"position":[[837,7]]},"546":{"position":[[622,5]]}}}],["path",{"_index":93,"t":{"4":{"position":[[1021,4]]},"19":{"position":[[804,4],[2110,4],[2173,4],[2196,4],[2887,4]]},"33":{"position":[[542,4]]},"89":{"position":[[128,5],[190,4]]},"101":{"position":[[1330,4],[1517,4],[2215,5],[2273,4]]},"118":{"position":[[978,4],[1410,4],[2531,4],[2542,4]]},"152":{"position":[[41,4],[74,4]]},"162":{"position":[[3393,4],[3409,4],[5713,4],[5756,4],[6655,4],[6842,4],[7147,5],[7205,4]]},"181":{"position":[[256,5]]},"245":{"position":[[515,4]]},"279":{"position":[[228,5]]},"332":{"position":[[793,4]]},"342":{"position":[[211,4],[292,4],[384,4]]},"344":{"position":[[368,4],[423,4],[476,4],[627,4],[682,4],[735,4]]},"432":{"position":[[621,5]]},"438":{"position":[[268,4]]},"484":{"position":[[28,4],[439,5]]},"518":{"position":[[31,4]]},"520":{"position":[[65,4],[152,4]]},"522":{"position":[[300,4]]},"612":{"position":[[309,4]]},"638":{"position":[[175,4],[204,4]]},"658":{"position":[[280,4]]}}}],["path/to/cni/fil",{"_index":2652,"t":{"575":{"position":[[152,19]]},"577":{"position":[[158,19]]}}}],["path/to/encrypt",{"_index":2784,"t":{"660":{"position":[[194,19]]}}}],["path=/opt/k3s/serv",{"_index":1096,"t":{"112":{"position":[[2102,20]]},"116":{"position":[[1152,20]]}}}],["path=/var/lib/rancher/k3s/agent/pod",{"_index":2481,"t":{"476":{"position":[[3987,35]]},"735":{"position":[[1599,35],[2822,35]]},"747":{"position":[[1790,35],[3013,35]]}}}],["path=/var/lib/rancher/k3s/server/logs/audit.log",{"_index":2064,"t":{"398":{"position":[[776,48]]},"472":{"position":[[898,48],[1236,48]]},"474":{"position":[[340,48],[963,48]]}}}],["path=/var/lib/rancher/k3s/server/rot",{"_index":1104,"t":{"114":{"position":[[1890,39]]}}}],["path=/var/log/apiserver/audit.log",{"_index":2772,"t":{"638":{"position":[[290,33]]}}}],["path=<path",{"_index":1129,"t":{"118":{"position":[[1050,10],[1482,10]]}}}],["path=<snapshot",{"_index":1160,"t":{"118":{"position":[[3780,14]]}}}],["paus",{"_index":321,"t":{"19":{"position":[[1791,8],[1947,8],[2667,8],[2827,8],[3002,8]]},"89":{"position":[[197,5],[256,5]]},"101":{"position":[[2280,5],[2325,5]]},"162":{"position":[[7212,5],[7257,5]]}}}],["pause:3.6",{"_index":1015,"t":{"101":{"position":[[2398,11]]},"162":{"position":[[7330,11]]},"735":{"position":[[1574,9],[2797,9]]},"747":{"position":[[1765,9],[2988,9]]}}}],["pbkdf2",{"_index":1026,"t":{"108":{"position":[[529,6]]},"174":{"position":[[516,6]]}}}],["peer",{"_index":1144,"t":{"118":{"position":[[2387,5]]},"137":{"position":[[576,5]]},"162":{"position":[[3302,5]]},"579":{"position":[[1189,5],[1316,5],[1433,5],[1868,5],[1888,4],[1960,4]]},"650":{"position":[[1319,5],[1446,5],[1563,5],[1998,5],[2018,4],[2090,4]]},"685":{"position":[[1213,5],[1340,5],[1457,5],[1892,5],[1912,4],[1984,4]]},"687":{"position":[[1102,5],[1229,5],[1346,5],[1781,5],[1801,4],[1873,4]]},"689":{"position":[[1127,5],[1254,5],[1371,5],[1806,5],[1826,4],[1898,4]]},"691":{"position":[[78,4],[266,4],[311,4],[1279,5],[1406,5],[1523,5],[1958,5],[1978,4],[2050,4],[2242,4],[2261,4],[2416,4],[2435,4]]},"693":{"position":[[149,4],[1105,5],[1232,5],[1349,5],[1784,5],[1804,4],[1876,4]]},"695":{"position":[[142,4],[188,4],[1137,5],[1264,5],[1381,5],[1816,5],[1836,4],[1908,4],[2038,4],[2074,4],[2127,4],[2389,4]]},"697":{"position":[[1236,5],[1363,5],[1480,5],[1915,5],[1935,4],[2007,4]]}}}],["pem",{"_index":1286,"t":{"168":{"position":[[382,3]]}}}],["pend",{"_index":1617,"t":{"247":{"position":[[1897,7]]},"408":{"position":[[351,7]]},"410":{"position":[[972,8]]}}}],["per",{"_index":856,"t":{"65":{"position":[[284,3]]},"124":{"position":[[578,3],[1568,3]]},"245":{"position":[[523,3]]},"251":{"position":[[353,3]]},"311":{"position":[[1187,3]]},"486":{"position":[[253,3]]},"628":{"position":[[88,3]]}}}],["percentil",{"_index":2254,"t":{"440":{"position":[[574,10]]}}}],["perform",{"_index":652,"t":{"44":{"position":[[161,11]]},"54":{"position":[[369,10]]},"59":{"position":[[1022,11]]},"61":{"position":[[156,7],[375,8]]},"77":{"position":[[1222,7]]},"108":{"position":[[929,8]]},"118":{"position":[[3390,7],[3571,7],[4358,7]]},"150":{"position":[[1127,7]]},"168":{"position":[[752,8]]},"197":{"position":[[67,10]]},"221":{"position":[[36,11]]},"279":{"position":[[336,10]]},"309":{"position":[[992,7]]},"315":{"position":[[412,11]]},"358":{"position":[[747,11],[774,11],[874,11]]},"368":{"position":[[12,11],[44,12]]},"398":{"position":[[1997,7]]},"482":{"position":[[168,7]]},"500":{"position":[[185,11]]},"531":{"position":[[228,7]]},"546":{"position":[[9,9]]},"555":{"position":[[1733,10]]}}}],["period",{"_index":1543,"t":{"225":{"position":[[19,12]]},"305":{"position":[[486,6]]},"390":{"position":[[29,12]]},"486":{"position":[[229,6]]},"500":{"position":[[288,6]]},"546":{"position":[[291,6],[430,6]]}}}],["perman",{"_index":680,"t":{"46":{"position":[[175,9],[231,9],[303,9]]},"122":{"position":[[354,11]]},"279":{"position":[[288,9]]}}}],["permanentredirect",{"_index":1636,"t":{"249":{"position":[[957,18]]}}}],["permiss",{"_index":1749,"t":{"285":{"position":[[523,11]]},"460":{"position":[[1119,11]]},"472":{"position":[[323,10]]},"482":{"position":[[508,12]]},"536":{"position":[[901,11]]},"587":{"position":[[341,11],[357,11]]},"591":{"position":[[351,11],[367,11]]},"712":{"position":[[271,13]]},"720":{"position":[[71,11]]}}}],["permissions=%a",{"_index":2692,"t":{"587":{"position":[[250,14]]},"591":{"position":[[259,14]]}}}],["permissions=644",{"_index":2693,"t":{"587":{"position":[[423,15]]},"591":{"position":[[433,15]]}}}],["permit",{"_index":616,"t":{"39":{"position":[[567,9]]}}}],["pernodehostbit",{"_index":2173,"t":{"424":{"position":[[950,16],[1259,15]]}}}],["persist",{"_index":1312,"t":{"174":{"position":[[595,9]]},"277":{"position":[[414,9]]},"496":{"position":[[167,10]]},"514":{"position":[[79,10],[99,10],[305,10],[385,10],[572,10]]},"518":{"position":[[87,10],[300,10]]}}}],["persistentvolumeclaim",{"_index":2333,"t":{"468":{"position":[[1664,23],[2805,23]]},"520":{"position":[[21,21]]},"522":{"position":[[260,22]]},"526":{"position":[[21,21]]},"528":{"position":[[260,22]]}}}],["pgbouncer",{"_index":1382,"t":{"185":{"position":[[1869,9]]}}}],["phd",{"_index":19,"t":{"2":{"position":[[167,3]]}}}],["pi",{"_index":702,"t":{"50":{"position":[[10,2],[114,2],[545,2]]},"221":{"position":[[89,3]]},"303":{"position":[[402,2],[1396,3]]},"354":{"position":[[269,2]]},"356":{"position":[[211,2]]},"358":{"position":[[547,2],[619,3]]},"442":{"position":[[143,2],[162,2]]}}}],["pi4b",{"_index":2222,"t":{"434":{"position":[[468,4],[551,4],[612,4]]},"446":{"position":[[191,4],[301,4],[346,4]]},"448":{"position":[[196,4],[306,4],[351,4]]},"450":{"position":[[79,4]]}}}],["pick",{"_index":1186,"t":{"124":{"position":[[955,4]]},"126":{"position":[[807,4]]},"540":{"position":[[279,4]]}}}],["pid",{"_index":2598,"t":{"536":{"position":[[811,3]]}}}],["pidof",{"_index":1446,"t":{"203":{"position":[[950,5]]}}}],["piec",{"_index":2547,"t":{"514":{"position":[[333,5]]}}}],["pipe",{"_index":2206,"t":{"432":{"position":[[2435,6]]}}}],["pki",{"_index":1023,"t":{"108":{"position":[[150,3]]},"110":{"position":[[668,3]]}}}],["place",{"_index":1056,"t":{"110":{"position":[[748,6],[1416,5]]},"247":{"position":[[2119,6]]},"263":{"position":[[116,5]]},"266":{"position":[[261,5],[396,5]]},"271":{"position":[[193,5]]},"279":{"position":[[209,7]]},"326":{"position":[[8,5],[1343,5]]},"330":{"position":[[100,6]]},"382":{"position":[[186,5]]},"432":{"position":[[2370,5]]},"454":{"position":[[272,5]]},"456":{"position":[[209,7]]},"468":{"position":[[2443,6]]},"470":{"position":[[147,6]]},"474":{"position":[[34,6]]},"626":{"position":[[261,6]]},"700":{"position":[[121,5]]},"773":{"position":[[111,5]]}}}],["plan",{"_index":1834,"t":{"311":{"position":[[1174,7]]},"319":{"position":[[986,4]]},"360":{"position":[[662,4]]},"384":{"position":[[350,8]]},"392":{"position":[[7,4]]},"536":{"position":[[188,5],[216,4],[351,5],[430,4],[529,5],[1043,5],[1259,6],[1823,4]]},"540":{"position":[[42,6],[51,4],[105,4],[163,5],[240,5],[353,5],[415,4],[459,4],[487,4],[764,4],[808,4],[835,4],[1034,4],[1220,6],[1234,5],[1411,4],[1551,4],[1678,4],[1716,4],[1744,4],[1790,5],[2142,5],[2307,4],[2459,4],[2488,4],[2538,4],[2645,4],[2702,5]]},"546":{"position":[[968,4]]}}}],["plane",{"_index":67,"t":{"4":{"position":[[591,5]]},"27":{"position":[[524,5]]},"39":{"position":[[674,5],[821,5]]},"67":{"position":[[280,5],[426,5]]},"71":{"position":[[116,5],[312,5],[511,5]]},"207":{"position":[[213,5],[388,5]]},"213":{"position":[[1367,5]]},"221":{"position":[[750,5],[1945,6]]},"253":{"position":[[509,5]]},"309":{"position":[[141,5],[348,5]]},"374":{"position":[[65,5],[225,5],[394,5],[421,5]]},"376":{"position":[[75,5],[308,5],[413,5]]},"378":{"position":[[25,5],[162,5],[216,5]]},"380":{"position":[[141,5]]},"428":{"position":[[747,6]]},"436":{"position":[[451,5]]},"438":{"position":[[451,5]]},"454":{"position":[[320,6]]},"456":{"position":[[604,5],[640,5]]},"476":{"position":[[33,5]]},"533":{"position":[[424,6]]},"540":{"position":[[86,6],[623,5],[971,5],[1528,5]]},"559":{"position":[[117,5]]},"561":{"position":[[117,5]]},"563":{"position":[[117,5]]},"565":{"position":[[117,5]]},"567":{"position":[[117,5]]},"569":{"position":[[117,5]]},"571":{"position":[[117,5]]},"573":{"position":[[117,5]]},"575":{"position":[[117,5]]},"577":{"position":[[117,5]]},"583":{"position":[[117,5]]},"585":{"position":[[107,5]]},"587":{"position":[[107,5]]},"589":{"position":[[107,5]]},"591":{"position":[[107,5]]},"593":{"position":[[107,5]]},"595":{"position":[[107,5]]},"597":{"position":[[107,5]]},"599":{"position":[[107,5]]},"602":{"position":[[130,5]]},"604":{"position":[[216,5]]},"606":{"position":[[130,5]]},"608":{"position":[[140,5]]},"610":{"position":[[234,5]]},"612":{"position":[[237,5]]},"614":{"position":[[130,5]]},"616":{"position":[[130,5]]},"618":{"position":[[130,5]]},"622":{"position":[[130,5]]},"624":{"position":[[130,5]]},"626":{"position":[[130,5]]},"628":{"position":[[220,5]]},"630":{"position":[[130,5]]},"632":{"position":[[223,5]]},"634":{"position":[[130,5]]},"636":{"position":[[130,5]]},"638":{"position":[[140,5]]},"640":{"position":[[140,5]]},"642":{"position":[[140,5]]},"644":{"position":[[140,5]]},"646":{"position":[[130,5]]},"648":{"position":[[140,5]]},"650":{"position":[[234,5]]},"652":{"position":[[220,5]]},"654":{"position":[[220,5]]},"656":{"position":[[234,5]]},"658":{"position":[[211,5]]},"662":{"position":[[130,5]]},"665":{"position":[[147,5]]},"667":{"position":[[147,5]]},"669":{"position":[[147,5]]},"671":{"position":[[147,5]]},"673":{"position":[[147,5]]},"675":{"position":[[157,5]]},"677":{"position":[[147,5]]},"680":{"position":[[134,5]]},"682":{"position":[[129,5]]}}}],["plane,etcd,mast",{"_index":1464,"t":{"203":{"position":[[1785,17],[1845,17],[1905,17],[3234,17],[3294,17],[3354,17]]},"205":{"position":[[1271,17],[1331,17],[1391,17]]},"221":{"position":[[1774,17],[1825,17],[1876,17]]}}}],["plane,mast",{"_index":2047,"t":{"378":{"position":[[588,12]]}}}],["platinum",{"_index":2260,"t":{"442":{"position":[[75,8]]}}}],["pleas",{"_index":817,"t":{"59":{"position":[[1097,6]]},"189":{"position":[[486,6],[1062,6]]},"233":{"position":[[0,6]]},"253":{"position":[[79,6]]},"295":{"position":[[325,6]]},"301":{"position":[[134,6]]},"303":{"position":[[575,6],[2213,6]]},"311":{"position":[[1487,6]]},"319":{"position":[[1057,6]]},"336":{"position":[[531,6]]},"360":{"position":[[1247,6]]},"404":{"position":[[1524,6]]},"516":{"position":[[821,6]]},"518":{"position":[[225,6]]},"533":{"position":[[233,6],[1126,6]]},"536":{"position":[[458,6]]}}}],["plug",{"_index":2769,"t":{"632":{"position":[[92,4]]}}}],["plugin",{"_index":461,"t":{"25":{"position":[[1503,6]]},"101":{"position":[[1378,6],[1549,6]]},"162":{"position":[[6703,6],[6874,6]]},"251":{"position":[[197,6]]},"303":{"position":[[170,7]]},"307":{"position":[[79,7],[718,7]]},"311":{"position":[[1395,7],[1414,6]]},"360":{"position":[[1042,6]]},"398":{"position":[[351,7],[1613,8]]},"460":{"position":[[868,8]]},"468":{"position":[[480,8],[1144,6]]},"480":{"position":[[34,6],[505,8]]},"482":{"position":[[34,6],[604,8]]},"516":{"position":[[36,7],[434,7],[757,7]]},"606":{"position":[[202,8],[300,8],[343,8]]},"620":{"position":[[463,8],[509,8]]},"622":{"position":[[182,7],[370,8],[416,8],[476,8]]},"624":{"position":[[172,7],[360,8]]},"626":{"position":[[172,7],[436,8],[482,8],[540,8]]},"628":{"position":[[271,7],[486,8],[530,8]]},"630":{"position":[[173,7],[382,8],[426,8]]},"632":{"position":[[265,7],[489,8],[535,8]]},"800":{"position":[[37,6],[145,7]]}}}],["plugin'",{"_index":1840,"t":{"311":{"position":[[1507,8]]}}}],["plugins=...,alwayspullimag",{"_index":2766,"t":{"624":{"position":[[238,32]]}}}],["plugins=...,eventratelimit",{"_index":2761,"t":{"620":{"position":[[258,30]]}}}],["plugins=...,noderestrict",{"_index":2770,"t":{"632":{"position":[[344,31]]}}}],["plugins=...,securitycontextdeni",{"_index":2768,"t":{"626":{"position":[[287,35]]}}}],["plugins=noderestrict",{"_index":2751,"t":{"610":{"position":[[1244,23]]},"612":{"position":[[1192,23]]},"614":{"position":[[1061,23]]},"616":{"position":[[1010,23]]},"618":{"position":[[1023,23]]},"620":{"position":[[1136,23]]},"622":{"position":[[1097,23]]},"626":{"position":[[1170,23]]},"628":{"position":[[1151,23]]},"630":{"position":[[1047,23]]},"632":{"position":[[1163,23]]},"634":{"position":[[1028,23]]},"636":{"position":[[943,23]]},"646":{"position":[[1118,23]]},"652":{"position":[[1160,23]]},"654":{"position":[[1076,23]]},"656":{"position":[[1082,23]]},"729":{"position":[[1427,23]]},"731":{"position":[[1441,23]]},"733":{"position":[[1556,23]]}}}],["plugins=noderestriction,podsecuritypolici",{"_index":2320,"t":{"468":{"position":[[1040,42]]},"476":{"position":[[494,41]]}}}],["plugins=noderestriction,podsecuritypolicy,namespacelifecycle,serviceaccount",{"_index":2395,"t":{"474":{"position":[[873,76]]}}}],["pod",{"_index":206,"t":{"17":{"position":[[771,3]]},"19":{"position":[[723,4]]},"25":{"position":[[839,4],[935,3],[1055,3],[1607,3]]},"27":{"position":[[296,4]]},"33":{"position":[[768,4],[795,4]]},"46":{"position":[[282,5],[525,4]]},"48":{"position":[[216,5],[406,4]]},"61":{"position":[[229,3],[434,3]]},"112":{"position":[[810,4]]},"114":{"position":[[772,4]]},"116":{"position":[[1452,5]]},"150":{"position":[[96,3],[644,3],[786,4],[1426,4]]},"162":{"position":[[1430,3],[2177,3],[2336,6],[2431,4]]},"181":{"position":[[529,4],[690,4]]},"235":{"position":[[321,3]]},"303":{"position":[[1443,3]]},"309":{"position":[[1253,4]]},"311":{"position":[[1182,4]]},"332":{"position":[[726,4]]},"360":{"position":[[1101,4],[1318,5]]},"370":{"position":[[109,5]]},"384":{"position":[[178,4]]},"398":{"position":[[60,3],[1063,3],[1669,3],[2119,3],[2186,3],[2349,3],[2396,3],[2573,3],[2618,3],[2666,3],[2710,3]]},"404":{"position":[[417,5]]},"410":{"position":[[214,4],[259,4],[383,3]]},"414":{"position":[[202,5]]},"416":{"position":[[47,4],[566,4],[725,4]]},"428":{"position":[[823,5]]},"440":{"position":[[340,4]]},"454":{"position":[[1133,4]]},"456":{"position":[[73,5],[414,4]]},"460":{"position":[[1106,3]]},"466":{"position":[[78,3],[229,3]]},"468":{"position":[[60,3],[107,3],[536,3],[876,3],[921,3],[2201,4],[6476,4]]},"470":{"position":[[114,5]]},"474":{"position":[[627,3],[1250,3]]},"476":{"position":[[3974,3]]},"482":{"position":[[79,3],[160,3],[281,3],[340,3],[440,3],[497,3]]},"500":{"position":[[29,3],[368,4]]},"504":{"position":[[202,5],[340,4],[414,3]]},"506":{"position":[[205,4],[252,3],[323,4]]},"514":{"position":[[173,3],[292,3]]},"518":{"position":[[330,3]]},"522":{"position":[[21,3]]},"524":{"position":[[460,4]]},"528":{"position":[[21,3]]},"602":{"position":[[46,3]]},"604":{"position":[[132,3]]},"606":{"position":[[46,3]]},"608":{"position":[[56,3]]},"610":{"position":[[150,3]]},"612":{"position":[[153,3]]},"614":{"position":[[46,3]]},"616":{"position":[[46,3]]},"618":{"position":[[46,3]]},"620":{"position":[[140,3]]},"622":{"position":[[46,3]]},"624":{"position":[[46,3]]},"626":{"position":[[46,3]]},"628":{"position":[[136,3]]},"630":{"position":[[46,3]]},"632":{"position":[[139,3]]},"634":{"position":[[46,3]]},"636":{"position":[[46,3]]},"638":{"position":[[56,3]]},"640":{"position":[[56,3]]},"642":{"position":[[56,3]]},"644":{"position":[[56,3]]},"646":{"position":[[46,3]]},"648":{"position":[[56,3]]},"650":{"position":[[150,3]]},"652":{"position":[[136,3]]},"654":{"position":[[136,3]]},"656":{"position":[[150,3]]},"658":{"position":[[127,3]]},"662":{"position":[[46,3]]},"665":{"position":[[54,3],[183,3],[255,3],[391,3]]},"667":{"position":[[54,3]]},"669":{"position":[[54,3]]},"671":{"position":[[54,3]]},"673":{"position":[[54,3]]},"675":{"position":[[64,3]]},"677":{"position":[[54,3]]},"680":{"position":[[45,3]]},"682":{"position":[[45,3]]},"685":{"position":[[114,3]]},"687":{"position":[[40,3]]},"689":{"position":[[40,3]]},"691":{"position":[[156,3]]},"693":{"position":[[40,3]]},"695":{"position":[[40,3]]},"697":{"position":[[163,3]]},"705":{"position":[[336,3]]},"735":{"position":[[1531,3],[1586,3],[2754,3],[2809,3]]},"747":{"position":[[1722,3],[1777,3],[2945,3],[3000,3]]},"762":{"position":[[66,3]]},"766":{"position":[[51,4]]},"773":{"position":[[45,3]]},"815":{"position":[[99,3]]},"817":{"position":[[97,5]]}}}],["pod'",{"_index":2130,"t":{"410":{"position":[[305,5]]}}}],["pod.yaml",{"_index":2578,"t":{"522":{"position":[[370,8]]},"524":{"position":[[510,8]]}}}],["podcidr",{"_index":1824,"t":{"309":{"position":[[1509,7]]},"319":{"position":[[381,7],[1127,7]]},"424":{"position":[[467,7],[1038,7]]}}}],["pods/contain",{"_index":2533,"t":{"504":{"position":[[487,15]]}}}],["pods/exec",{"_index":2817,"t":{"705":{"position":[[371,10]]}}}],["pods/portforward",{"_index":2818,"t":{"705":{"position":[[382,17]]}}}],["pods/proxi",{"_index":2819,"t":{"705":{"position":[[400,10]]}}}],["podsecur",{"_index":2083,"t":{"398":{"position":[[1630,11]]},"466":{"position":[[505,11]]},"468":{"position":[[497,11]]}}}],["podsecurityconfigur",{"_index":2085,"t":{"398":{"position":[[1720,24]]},"468":{"position":[[587,24]]}}}],["podsecuritypolici",{"_index":2055,"t":{"398":{"position":[[19,17],[323,17],[2869,19]]},"460":{"position":[[677,20]]},"468":{"position":[[1175,18],[1394,17],[2581,17],[3142,17],[3594,17],[4139,19],[4353,19],[4562,19]]},"482":{"position":[[41,17],[219,19]]},"626":{"position":[[229,17],[553,19]]}}}],["podsecuritypoliciy",{"_index":2058,"t":{"398":{"position":[[206,18]]}}}],["podsecuritystandard",{"_index":2297,"t":{"460":{"position":[[656,20]]}}}],["podselector",{"_index":2368,"t":{"468":{"position":[[5912,12],[6111,12],[6310,12]]},"470":{"position":[[425,12],[852,12],[1415,12],[1635,12],[1876,12],[2098,12],[2318,12],[2559,12]]}}}],["point",{"_index":1054,"t":{"110":{"position":[[591,6]]},"203":{"position":[[2143,5]]},"205":{"position":[[180,5]]},"217":{"position":[[751,5]]}}}],["polici",{"_index":92,"t":{"4":{"position":[[988,6]]},"54":{"position":[[169,8],[501,8],[597,6]]},"56":{"position":[[292,7],[405,6],[508,6]]},"65":{"position":[[27,8],[154,6],[288,6],[403,6],[889,6],[1169,6],[1332,6]]},"77":{"position":[[457,6]]},"118":{"position":[[4770,6],[4898,7]]},"132":{"position":[[380,6]]},"154":{"position":[[259,6],[294,6]]},"162":{"position":[[6203,6],[6251,6]]},"215":{"position":[[829,6]]},"221":{"position":[[2545,6]]},"241":{"position":[[40,6]]},"307":{"position":[[115,6],[176,6]]},"311":{"position":[[1563,8]]},"398":{"position":[[834,6]]},"406":{"position":[[33,6],[256,6],[282,6],[379,6],[445,6],[486,6]]},"424":{"position":[[65,6]]},"432":{"position":[[1976,6]]},"460":{"position":[[616,6],[967,9]]},"466":{"position":[[117,8],[253,9],[326,9],[433,6]]},"468":{"position":[[281,6],[889,8],[1219,6],[2160,7],[2260,6],[2384,6],[4119,6],[4333,6],[4542,6],[6549,6]]},"470":{"position":[[48,6],[128,8],[303,7],[606,6],[748,6],[1007,8],[2674,8]]},"472":{"position":[[150,7],[211,8],[469,6],[523,6],[644,6],[764,6],[975,6],[1315,6]]},"474":{"position":[[398,6],[1021,6]]},"480":{"position":[[104,6]]},"482":{"position":[[92,6],[353,8]]},"502":{"position":[[28,6]]},"536":{"position":[[237,8],[1790,6]]},"546":{"position":[[935,6]]},"703":{"position":[[42,6],[174,6]]},"705":{"position":[[43,6]]},"773":{"position":[[83,6]]},"775":{"position":[[30,8]]},"777":{"position":[[30,8]]},"779":{"position":[[30,8]]},"781":{"position":[[30,8]]},"783":{"position":[[30,8]]},"785":{"position":[[35,6]]},"787":{"position":[[30,8]]},"789":{"position":[[76,8]]},"793":{"position":[[30,8]]},"795":{"position":[[30,8]]},"797":{"position":[[30,8]]},"800":{"position":[[76,9]]}}}],["policy.yaml",{"_index":2350,"t":{"468":{"position":[[2530,11]]}}}],["policy/v1beta1",{"_index":2323,"t":{"468":{"position":[[1373,14],[2560,14],[3121,14],[3573,14]]}}}],["policytyp",{"_index":2372,"t":{"470":{"position":[[896,12],[1479,12],[1720,12],[1948,12],[2162,12],[2403,12],[2612,12]]}}}],["pool",{"_index":623,"t":{"39":{"position":[[745,4]]}}}],["pool2",{"_index":2842,"t":{"735":{"position":[[680,5],[1376,5]]},"747":{"position":[[871,5],[1567,5]]}}}],["pool3",{"_index":2739,"t":{"610":{"position":[[691,5]]},"612":{"position":[[639,5]]},"614":{"position":[[508,5]]},"616":{"position":[[457,5]]},"618":{"position":[[470,5]]},"620":{"position":[[583,5]]},"622":{"position":[[544,5]]},"626":{"position":[[617,5]]},"628":{"position":[[598,5]]},"630":{"position":[[494,5]]},"632":{"position":[[610,5]]},"634":{"position":[[475,5]]},"636":{"position":[[390,5]]},"646":{"position":[[565,5]]},"652":{"position":[[607,5],[2783,5]]},"654":{"position":[[523,5]]},"656":{"position":[[529,5]]},"667":{"position":[[416,5]]},"669":{"position":[[484,5]]},"671":{"position":[[569,5]]},"673":{"position":[[466,5]]},"680":{"position":[[375,5]]},"682":{"position":[[449,5]]},"729":{"position":[[874,5]]},"731":{"position":[[888,5]]},"733":{"position":[[1003,5]]},"735":{"position":[[1903,5],[2599,5]]},"747":{"position":[[2094,5],[2790,5]]}}}],["pooler",{"_index":1381,"t":{"185":{"position":[[1853,7]]}}}],["popul",{"_index":1631,"t":{"249":{"position":[[685,8]]},"410":{"position":[[464,9]]}}}],["popular",{"_index":645,"t":{"44":{"position":[[8,7]]}}}],["port",{"_index":292,"t":{"19":{"position":[[1242,5],[1332,4],[1496,4]]},"31":{"position":[[0,5],[221,4],[344,5],[424,4]]},"35":{"position":[[709,4]]},"46":{"position":[[397,5]]},"48":{"position":[[278,5]]},"61":{"position":[[713,6]]},"75":{"position":[[293,4]]},"87":{"position":[[446,4],[482,4],[588,4],[610,4]]},"101":{"position":[[1708,4],[1738,4],[1844,4],[1866,4]]},"144":{"position":[[86,4],[115,4],[255,4],[280,4]]},"150":{"position":[[202,4],[233,4]]},"158":{"position":[[92,4]]},"162":{"position":[[776,4],[811,4],[989,4],[1011,4],[1092,5],[1582,4],[1612,4],[8598,4],[8810,4],[8840,4],[8946,4],[8968,4]]},"295":{"position":[[371,4]]},"309":{"position":[[297,5]]},"317":{"position":[[842,5]]},"360":{"position":[[21,4],[118,4],[167,5],[287,5],[507,5],[643,4],[767,5],[808,4],[991,4]]},"362":{"position":[[9,4]]},"400":{"position":[[286,5]]},"404":{"position":[[259,5],[317,5],[361,5]]},"408":{"position":[[182,6]]},"410":{"position":[[360,5],[766,6],[833,4],[904,4],[934,4]]},"414":{"position":[[370,5]]},"416":{"position":[[461,4],[632,4]]},"470":{"position":[[795,6],[804,5],[829,5]]},"522":{"position":[[211,6]]},"528":{"position":[[211,6]]},"610":{"position":[[2634,4]]},"612":{"position":[[2582,4]]},"614":{"position":[[2451,4]]},"616":{"position":[[2400,4]]},"618":{"position":[[2413,4]]},"620":{"position":[[2526,4]]},"622":{"position":[[2487,4]]},"626":{"position":[[2560,4]]},"628":{"position":[[2541,4]]},"630":{"position":[[2437,4]]},"632":{"position":[[2553,4]]},"634":{"position":[[172,4],[231,5],[340,5],[373,5],[410,5],[2418,4]]},"636":{"position":[[2333,4]]},"646":{"position":[[2508,4]]},"652":{"position":[[2550,4]]},"654":{"position":[[2466,4]]},"656":{"position":[[2472,4]]},"729":{"position":[[2817,4]]},"731":{"position":[[2831,4]]},"733":{"position":[[2946,4]]},"735":{"position":[[541,5],[577,5],[615,5]]}}}],["port/0",{"_index":1244,"t":{"144":{"position":[[273,6]]}}}],["port=0",{"_index":2416,"t":{"476":{"position":[[813,6],[2706,6],[3030,6],[4084,6]]},"735":{"position":[[313,6],[1657,6],[2880,6]]},"747":{"position":[[1848,6],[3071,6]]}}}],["port=10251",{"_index":2454,"t":{"476":{"position":[[2984,10]]}}}],["port=10252",{"_index":2447,"t":{"476":{"position":[[2591,10]]}}}],["port=10257",{"_index":2797,"t":{"667":{"position":[[1848,10]]},"669":{"position":[[1916,10]]},"671":{"position":[[2001,10]]},"673":{"position":[[1898,10]]}}}],["port=10259",{"_index":2779,"t":{"652":{"position":[[3222,11]]},"680":{"position":[[814,11]]},"682":{"position":[[888,11]]}}}],["port=6443",{"_index":2399,"t":{"476":{"position":[[199,9]]},"610":{"position":[[835,9]]},"612":{"position":[[783,9]]},"614":{"position":[[652,9]]},"616":{"position":[[601,9]]},"618":{"position":[[614,9]]},"620":{"position":[[727,9]]},"622":{"position":[[688,9]]},"626":{"position":[[761,9]]},"628":{"position":[[742,9]]},"630":{"position":[[638,9]]},"632":{"position":[[754,9]]},"634":{"position":[[619,9]]},"636":{"position":[[534,9]]},"646":{"position":[[709,9]]},"652":{"position":[[751,9]]},"654":{"position":[[667,9]]},"656":{"position":[[673,9]]},"729":{"position":[[1018,9]]},"731":{"position":[[1032,9]]},"733":{"position":[[1147,9]]}}}],["port=6443/tcp",{"_index":681,"t":{"46":{"position":[[191,13]]}}}],["port=6444",{"_index":2432,"t":{"476":{"position":[[1544,9]]},"610":{"position":[[2349,9]]},"612":{"position":[[2297,9]]},"614":{"position":[[2166,9]]},"616":{"position":[[2115,9]]},"618":{"position":[[2128,9]]},"620":{"position":[[2241,9]]},"622":{"position":[[2202,9]]},"626":{"position":[[2275,9]]},"628":{"position":[[2256,9]]},"630":{"position":[[2152,9]]},"632":{"position":[[2268,9]]},"634":{"position":[[2133,9]]},"636":{"position":[[2048,9]]},"646":{"position":[[2223,9]]},"652":{"position":[[2265,9]]},"654":{"position":[[2181,9]]},"656":{"position":[[2187,9]]},"729":{"position":[[2532,9]]},"731":{"position":[[2546,9]]},"733":{"position":[[2661,9]]}}}],["portion",{"_index":1148,"t":{"118":{"position":[[2923,7]]},"179":{"position":[[807,7],[2049,7],[2089,7]]}}}],["portworx",{"_index":2559,"t":{"516":{"position":[[507,8]]}}}],["possibl",{"_index":166,"t":{"15":{"position":[[142,8]]},"65":{"position":[[651,8]]},"235":{"position":[[777,8]]},"271":{"position":[[427,8]]},"281":{"position":[[822,8]]},"305":{"position":[[445,9]]},"358":{"position":[[859,9]]},"374":{"position":[[155,8]]},"404":{"position":[[980,8]]},"408":{"position":[[558,8]]},"410":{"position":[[681,8]]},"424":{"position":[[402,11],[503,11]]},"454":{"position":[[1106,9]]},"555":{"position":[[1146,8]]},"756":{"position":[[193,9]]},"758":{"position":[[32,9]]},"760":{"position":[[32,8]]},"762":{"position":[[32,9]]},"770":{"position":[[32,9]]},"805":{"position":[[29,9]]}}}],["post",{"_index":1640,"t":{"251":{"position":[[162,4]]}}}],["postgr",{"_index":38,"t":{"4":{"position":[[204,8]]},"135":{"position":[[109,9]]},"162":{"position":[[3917,9]]},"189":{"position":[[645,11],[739,8]]}}}],["postgres://username:password@hostname:port/databas",{"_index":1389,"t":{"189":{"position":[[344,51]]}}}],["postgresql",{"_index":907,"t":{"71":{"position":[[564,11]]},"185":{"position":[[399,10],[1684,10]]},"187":{"position":[[49,11],[467,11]]},"189":{"position":[[213,10],[307,10]]},"195":{"position":[[435,10]]},"364":{"position":[[257,10]]},"372":{"position":[[50,11]]}}}],["potenti",{"_index":493,"t":{"29":{"position":[[153,9]]},"472":{"position":[[366,9]]},"488":{"position":[[425,11]]},"490":{"position":[[411,11]]},"502":{"position":[[126,9]]}}}],["power",{"_index":51,"t":{"4":{"position":[[401,8]]}}}],["pprof",{"_index":1268,"t":{"158":{"position":[[50,5],[63,5]]},"162":{"position":[[8541,5],[8569,5]]}}}],["practic",{"_index":814,"t":{"59":{"position":[[968,9]]},"187":{"position":[[1523,8]]},"261":{"position":[[271,10]]},"514":{"position":[[216,8]]}}}],["practici",{"_index":1628,"t":{"247":{"position":[[2564,10]]}}}],["pre",{"_index":1049,"t":{"110":{"position":[[197,3]]}}}],["preced",{"_index":1609,"t":{"247":{"position":[[1573,10]]},"281":{"position":[[973,11]]}}}],["prefer",{"_index":663,"t":{"44":{"position":[[450,6],[574,6]]},"95":{"position":[[90,6],[109,6]]},"101":{"position":[[3325,6],[3359,6]]},"158":{"position":[[146,6],[165,6]]},"162":{"position":[[8644,6],[8678,6]]},"166":{"position":[[83,10]]},"610":{"position":[[1832,9]]},"612":{"position":[[1780,9]]},"614":{"position":[[1649,9]]},"616":{"position":[[1598,9]]},"618":{"position":[[1611,9]]},"620":{"position":[[1724,9]]},"622":{"position":[[1685,9]]},"626":{"position":[[1758,9]]},"628":{"position":[[1739,9]]},"630":{"position":[[1635,9]]},"632":{"position":[[1751,9]]},"634":{"position":[[1616,9]]},"636":{"position":[[1531,9]]},"646":{"position":[[1706,9]]},"652":{"position":[[1748,9]]},"654":{"position":[[1664,9]]},"656":{"position":[[1670,9]]},"729":{"position":[[2015,9]]},"731":{"position":[[2029,9]]},"733":{"position":[[2144,9]]}}}],["prefix",{"_index":226,"t":{"17":{"position":[[1332,6]]},"39":{"position":[[373,9]]},"168":{"position":[[140,7],[160,6]]},"277":{"position":[[321,8]]},"410":{"position":[[231,7]]},"432":{"position":[[1776,8]]}}}],["prefix=x",{"_index":2430,"t":{"476":{"position":[[1420,8]]},"610":{"position":[[2225,8]]},"612":{"position":[[2173,8]]},"614":{"position":[[2042,8]]},"616":{"position":[[1991,8]]},"618":{"position":[[2004,8]]},"620":{"position":[[2117,8]]},"622":{"position":[[2078,8]]},"626":{"position":[[2151,8]]},"628":{"position":[[2132,8]]},"630":{"position":[[2028,8]]},"632":{"position":[[2144,8]]},"634":{"position":[[2009,8]]},"636":{"position":[[1924,8]]},"646":{"position":[[2099,8]]},"652":{"position":[[2141,8]]},"654":{"position":[[2057,8]]},"656":{"position":[[2063,8]]},"729":{"position":[[2408,8]]},"731":{"position":[[2422,8]]},"733":{"position":[[2537,8]]}}}],["prefix><clust",{"_index":1280,"t":{"168":{"position":[[99,16]]}}}],["prepar",{"_index":126,"t":{"8":{"position":[[131,7]]},"124":{"position":[[247,7],[275,7],[1151,7],[1185,7]]},"128":{"position":[[954,8]]},"185":{"position":[[1745,8],[1785,8]]},"243":{"position":[[141,12]]},"303":{"position":[[456,12]]},"362":{"position":[[578,13]]},"394":{"position":[[262,12]]},"540":{"position":[[1000,8],[1017,7],[1652,7]]}}}],["prepopul",{"_index":1657,"t":{"266":{"position":[[106,11]]}}}],["prescript",{"_index":2290,"t":{"460":{"position":[[23,12]]},"555":{"position":[[105,12]]}}}],["present",{"_index":195,"t":{"17":{"position":[[495,8]]},"25":{"position":[[82,7]]},"168":{"position":[[1155,9],[1259,7]]},"170":{"position":[[195,9]]},"185":{"position":[[969,8],[1018,7],[1331,7]]},"281":{"position":[[170,7]]},"406":{"position":[[164,8]]},"420":{"position":[[402,7]]},"460":{"position":[[997,9]]},"470":{"position":[[1235,7]]},"476":{"position":[[4433,9]]},"494":{"position":[[280,7]]},"533":{"position":[[172,8]]},"589":{"position":[[353,7]]},"595":{"position":[[270,7]]},"604":{"position":[[378,7]]},"606":{"position":[[312,7],[359,7]]},"610":{"position":[[601,7],[639,7]]},"612":{"position":[[587,7]]},"622":{"position":[[492,7]]},"624":{"position":[[372,7]]},"628":{"position":[[498,7],[546,7]]},"630":{"position":[[394,7],[442,7]]},"634":{"position":[[423,7]]},"646":{"position":[[472,7],[513,7]]},"650":{"position":[[2241,7],[2273,7]]},"652":{"position":[[515,7],[555,7]]},"654":{"position":[[471,7]]},"656":{"position":[[477,7]]},"671":{"position":[[517,7]]},"673":{"position":[[414,7]]},"677":{"position":[[309,7],[344,7]]},"682":{"position":[[397,7]]},"685":{"position":[[2126,7],[2152,7]]},"687":{"position":[[2024,7]]},"689":{"position":[[2048,7],[2078,7]]},"691":{"position":[[2192,7],[2218,7]]},"693":{"position":[[2027,7]]},"695":{"position":[[2060,7]]},"697":{"position":[[2155,7]]},"712":{"position":[[288,7],[356,7]]},"714":{"position":[[377,7],[445,7]]},"720":{"position":[[219,7],[239,7],[286,7],[306,7],[326,7],[346,7]]},"733":{"position":[[880,7]]},"735":{"position":[[628,7]]},"747":{"position":[[779,7],[819,7]]},"789":{"position":[[65,7]]}}}],["preserv",{"_index":2208,"t":{"432":{"position":[[2557,9]]}}}],["prevent",{"_index":1739,"t":{"283":{"position":[[471,7]]},"434":{"position":[[903,10]]},"555":{"position":[[1627,7]]}}}],["previou",{"_index":1385,"t":{"187":{"position":[[1457,8]]}}}],["previous",{"_index":1504,"t":{"215":{"position":[[1030,11]]},"398":{"position":[[3207,10]]},"533":{"position":[[674,11]]},"538":{"position":[[400,10]]},"555":{"position":[[1943,11]]}}}],["primari",{"_index":1664,"t":{"266":{"position":[[700,7]]},"311":{"position":[[268,7]]},"434":{"position":[[866,7]]}}}],["primarili",{"_index":1710,"t":{"279":{"position":[[38,9]]},"454":{"position":[[35,9],[767,9]]},"460":{"position":[[1091,9]]}}}],["print",{"_index":1321,"t":{"179":{"position":[[356,5]]},"279":{"position":[[1337,5]]}}}],["prior",{"_index":243,"t":{"19":{"position":[[290,5]]},"110":{"position":[[346,5],[1478,5]]},"112":{"position":[[2468,5]]},"114":{"position":[[2253,5]]},"332":{"position":[[997,5]]},"354":{"position":[[99,5]]}}}],["prioriti",{"_index":1450,"t":{"203":{"position":[[1059,8],[1068,10]]}}}],["privat",{"_index":218,"t":{"17":{"position":[[959,7]]},"89":{"position":[[303,7],[361,7]]},"101":{"position":[[2511,7],[2550,7]]},"110":{"position":[[1088,7]]},"116":{"position":[[41,7]]},"162":{"position":[[7443,7],[7482,7],[7612,7]]},"174":{"position":[[689,7]]},"255":{"position":[[195,7]]},"257":{"position":[[104,7],[172,7]]},"259":{"position":[[11,7]]},"261":{"position":[[247,7]]},"266":{"position":[[36,7]]},"273":{"position":[[134,7],[696,7],[1018,7]]},"315":{"position":[[73,7],[646,7]]},"336":{"position":[[43,7],[83,7],[289,7],[666,7],[858,7]]},"340":{"position":[[67,7]]},"342":{"position":[[663,7],[721,7],[782,7],[844,7]]},"348":{"position":[[248,7],[382,7]]},"476":{"position":[[1905,7],[2731,7],[4294,7]]},"610":{"position":[[2762,7]]},"612":{"position":[[2710,7]]},"614":{"position":[[2579,7]]},"616":{"position":[[2528,7]]},"618":{"position":[[2541,7]]},"620":{"position":[[2654,7]]},"622":{"position":[[2615,7]]},"626":{"position":[[2688,7]]},"628":{"position":[[2669,7]]},"630":{"position":[[2565,7]]},"632":{"position":[[2681,7]]},"634":{"position":[[2546,7]]},"636":{"position":[[2461,7]]},"646":{"position":[[2636,7]]},"652":{"position":[[263,7],[345,7],[534,7],[2678,7]]},"654":{"position":[[2594,7]]},"656":{"position":[[2600,7]]},"667":{"position":[[1877,7]]},"669":{"position":[[1945,7]]},"671":{"position":[[188,7],[222,7],[292,7],[442,7],[496,7],[2030,7]]},"673":{"position":[[1927,7]]},"729":{"position":[[2945,7]]},"731":{"position":[[2959,7]]},"733":{"position":[[3074,7]]},"735":{"position":[[1810,7],[3033,7]]},"747":{"position":[[223,7],[498,7],[798,7],[2001,7],[3224,7]]}}}],["privileg",{"_index":621,"t":{"39":{"position":[[652,10],[868,9]]},"52":{"position":[[476,10]]},"291":{"position":[[73,10]]},"398":{"position":[[2152,10],[2298,10],[2385,10],[2607,10],[2699,10]]},"468":{"position":[[1449,11],[2230,11],[2636,11],[3440,11]]},"536":{"position":[[743,11]]},"756":{"position":[[175,11],[231,10]]},"775":{"position":[[126,10]]}}}],["privileged=tru",{"_index":2400,"t":{"476":{"position":[[217,15]]},"610":{"position":[[853,15]]},"612":{"position":[[801,15]]},"614":{"position":[[670,15]]},"616":{"position":[[619,15]]},"618":{"position":[[632,15]]},"620":{"position":[[745,15]]},"622":{"position":[[706,15]]},"626":{"position":[[779,15]]},"628":{"position":[[760,15]]},"630":{"position":[[656,15]]},"632":{"position":[[772,15]]},"634":{"position":[[637,15]]},"636":{"position":[[552,15]]},"646":{"position":[[727,15]]},"652":{"position":[[769,15]]},"654":{"position":[[685,15]]},"656":{"position":[[691,15]]},"729":{"position":[[1036,15]]},"731":{"position":[[1050,15]]},"733":{"position":[[1165,15]]}}}],["problem",{"_index":657,"t":{"44":{"position":[[280,8]]},"108":{"position":[[1180,8]]},"243":{"position":[[269,8]]},"422":{"position":[[154,8]]},"436":{"position":[[58,7]]}}}],["problemat",{"_index":2513,"t":{"492":{"position":[[270,11]]}}}],["proc//environ",{"_index":2812,"t":{"689":{"position":[[2300,15],[2540,15],[2780,15]]},"695":{"position":[[2345,15]]}}}],["proce",{"_index":1183,"t":{"122":{"position":[[377,7]]}}}],["procedur",{"_index":1180,"t":{"122":{"position":[[292,9]]},"221":{"position":[[2130,9]]}}}],["proceed",{"_index":1201,"t":{"128":{"position":[[1235,10]]}}}],["process",{"_index":70,"t":{"4":{"position":[[647,8]]},"31":{"position":[[854,7],[925,9]]},"41":{"position":[[140,8]]},"75":{"position":[[82,8],[184,8]]},"93":{"position":[[65,7],[127,7]]},"101":{"position":[[3200,7],[3276,7]]},"156":{"position":[[59,7],[129,7],[199,7],[287,7],[387,7],[443,7],[505,7]]},"162":{"position":[[3516,7],[3574,7],[3670,7],[3748,7],[3856,7],[8261,7],[8337,7]]},"164":{"position":[[40,8]]},"170":{"position":[[255,7]]},"187":{"position":[[1725,7]]},"213":{"position":[[1595,7]]},"235":{"position":[[692,8],[758,8]]},"326":{"position":[[834,7],[860,7]]},"428":{"position":[[374,7]]},"440":{"position":[[524,10]]},"480":{"position":[[362,7]]},"689":{"position":[[2109,7],[2349,7],[2589,7]]},"695":{"position":[[2154,7]]}}}],["process/directori",{"_index":2302,"t":{"462":{"position":[[75,17]]}}}],["processor",{"_index":2209,"t":{"434":{"position":[[145,9]]}}}],["product",{"_index":2026,"t":{"364":{"position":[[69,10],[239,11]]},"460":{"position":[[61,10]]},"546":{"position":[[231,10]]},"555":{"position":[[143,10]]}}}],["profil",{"_index":1994,"t":{"358":{"position":[[179,9]]},"360":{"position":[[1271,7]]},"636":{"position":[[283,11],[315,10]]},"667":{"position":[[309,11],[341,10]]},"680":{"position":[[300,10]]},"815":{"position":[[83,7]]}}}],["profiling=fals",{"_index":2423,"t":{"476":{"position":[[1075,15],[2604,15],[2997,15]]},"610":{"position":[[1889,15]]},"612":{"position":[[1837,15]]},"614":{"position":[[1706,15]]},"616":{"position":[[1655,15]]},"618":{"position":[[1668,15]]},"620":{"position":[[1781,15]]},"622":{"position":[[1742,15]]},"626":{"position":[[1815,15]]},"628":{"position":[[1796,15]]},"630":{"position":[[1692,15]]},"632":{"position":[[1808,15]]},"634":{"position":[[1673,15]]},"636":{"position":[[172,15],[1588,15]]},"646":{"position":[[1763,15]]},"652":{"position":[[1805,15],[3197,15]]},"654":{"position":[[1721,15]]},"656":{"position":[[1727,15]]},"667":{"position":[[189,15],[1762,15]]},"669":{"position":[[1830,15]]},"671":{"position":[[1915,15]]},"673":{"position":[[1812,15]]},"680":{"position":[[176,15],[789,15]]},"682":{"position":[[863,15]]},"729":{"position":[[2072,15]]},"731":{"position":[[2086,15]]},"733":{"position":[[2201,15]]}}}],["progress",{"_index":2621,"t":{"540":{"position":[[2607,8]]}}}],["project",{"_index":812,"t":{"59":{"position":[[945,7],[1132,7]]},"468":{"position":[[1615,11],[2756,11]]},"546":{"position":[[842,8]]}}}],["prometheu",{"_index":2239,"t":{"438":{"position":[[76,10],[318,11]]},"440":{"position":[[25,10],[111,10]]}}}],["prone",{"_index":2516,"t":{"492":{"position":[[518,5]]}}}],["pronunci",{"_index":114,"t":{"6":{"position":[[267,14]]}}}],["proper",{"_index":532,"t":{"33":{"position":[[170,6]]},"54":{"position":[[154,6]]},"108":{"position":[[52,6]]},"122":{"position":[[285,6]]}}}],["properli",{"_index":661,"t":{"44":{"position":[[357,9]]},"187":{"position":[[967,8]]},"213":{"position":[[1660,8]]},"245":{"position":[[487,8]]},"251":{"position":[[321,8]]},"266":{"position":[[761,9]]},"420":{"position":[[646,8]]},"424":{"position":[[98,8]]},"468":{"position":[[2323,9],[6614,9]]}}}],["propos",{"_index":809,"t":{"59":{"position":[[921,8]]}}}],["prorit",{"_index":1830,"t":{"311":{"position":[[426,9],[485,9]]}}}],["protect",{"_index":490,"t":{"29":{"position":[[114,7]]},"75":{"position":[[1268,7]]},"87":{"position":[[261,7]]},"101":{"position":[[1969,7]]},"162":{"position":[[8347,7]]},"358":{"position":[[482,9]]},"398":{"position":[[617,7]]},"452":{"position":[[124,9]]},"464":{"position":[[178,7]]},"474":{"position":[[181,7],[778,7]]},"476":{"position":[[4035,7]]},"536":{"position":[[1932,7]]},"546":{"position":[[1077,7]]},"739":{"position":[[325,7]]}}}],["protectkerneldefault",{"_index":2865,"t":{"739":{"position":[[89,21]]}}}],["protocol",{"_index":2025,"t":{"362":{"position":[[0,8]]},"470":{"position":[[813,9],[838,9]]}}}],["proven",{"_index":2888,"t":{"810":{"position":[[78,11]]}}}],["provid",{"_index":58,"t":{"4":{"position":[[480,8]]},"21":{"position":[[8,8]]},"75":{"position":[[747,9]]},"101":{"position":[[1290,8],[1369,8],[1478,8],[1540,8]]},"110":{"position":[[1657,7],[1777,7]]},"162":{"position":[[6615,8],[6694,8],[6803,8],[6865,8]]},"174":{"position":[[15,8]]},"179":{"position":[[1596,9]]},"185":{"position":[[129,8]]},"199":{"position":[[146,9],[485,7]]},"203":{"position":[[52,8],[2179,8]]},"205":{"position":[[216,8]]},"245":{"position":[[74,7]]},"249":{"position":[[325,9]]},"253":{"position":[[178,8],[265,8]]},"268":{"position":[[1305,8]]},"303":{"position":[[25,8]]},"311":{"position":[[705,7]]},"315":{"position":[[280,9]]},"319":{"position":[[883,7]]},"360":{"position":[[469,7]]},"368":{"position":[[153,10]]},"402":{"position":[[209,8]]},"408":{"position":[[81,8],[420,8],[612,8]]},"420":{"position":[[75,10],[99,8],[425,8]]},"422":{"position":[[11,10]]},"428":{"position":[[4,8],[1684,7]]},"460":{"position":[[14,8]]},"472":{"position":[[503,8]]},"484":{"position":[[95,8],[323,8]]},"496":{"position":[[29,8]]},"498":{"position":[[23,9],[171,9]]},"506":{"position":[[80,8],[443,7]]},"510":{"position":[[284,8],[702,12]]},"514":{"position":[[612,9]]},"516":{"position":[[104,10],[670,8]]},"555":{"position":[[96,8],[1110,8]]},"658":{"position":[[247,8],[325,8],[481,8]]},"660":{"position":[[165,9]]},"700":{"position":[[49,8]]},"705":{"position":[[50,8]]},"807":{"position":[[88,8]]}}}],["provider=extern",{"_index":2464,"t":{"476":{"position":[[3266,17]]},"735":{"position":[[968,17],[2191,17]]},"747":{"position":[[1159,17],[2382,17]]}}}],["provis",{"_index":1055,"t":{"110":{"position":[[639,9]]},"352":{"position":[[134,12]]},"454":{"position":[[885,12]]},"536":{"position":[[1327,11]]}}}],["provisio",{"_index":327,"t":{"19":{"position":[[2115,10]]}}}],["provision",{"_index":94,"t":{"4":{"position":[[1026,11]]},"19":{"position":[[809,11],[2201,11],[2892,11]]},"152":{"position":[[89,11]]},"162":{"position":[[5771,11]]},"332":{"position":[[798,11]]},"518":{"position":[[36,11]]}}}],["provisioner_loc",{"_index":329,"t":{"19":{"position":[[2178,17]]}}}],["proxi",{"_index":177,"t":{"17":{"position":[[95,6],[125,5],[174,5],[693,5],[1065,6],[1255,5]]},"77":{"position":[[512,5]]},"93":{"position":[[80,5],[121,5]]},"101":{"position":[[3215,5],[3270,5]]},"106":{"position":[[491,6],[512,6]]},"154":{"position":[[208,5],[235,5]]},"156":{"position":[[458,5],[499,5]]},"162":{"position":[[6139,5],[6179,5],[8276,5],[8331,5]]},"215":{"position":[[804,6]]},"221":{"position":[[2520,6]]},"266":{"position":[[725,5]]},"295":{"position":[[95,5]]},"309":{"position":[[880,6],[1183,6]]},"404":{"position":[[33,5]]},"476":{"position":[[1102,5],[1181,5],[1299,5]]},"610":{"position":[[1907,5],[1986,5],[2104,5]]},"612":{"position":[[1855,5],[1934,5],[2052,5]]},"614":{"position":[[1724,5],[1803,5],[1921,5]]},"616":{"position":[[1673,5],[1752,5],[1870,5]]},"618":{"position":[[1686,5],[1765,5],[1883,5]]},"620":{"position":[[1799,5],[1878,5],[1996,5]]},"622":{"position":[[1760,5],[1839,5],[1957,5]]},"626":{"position":[[1833,5],[1912,5],[2030,5]]},"628":{"position":[[1814,5],[1893,5],[2011,5]]},"630":{"position":[[1710,5],[1789,5],[1907,5]]},"632":{"position":[[1826,5],[1905,5],[2023,5]]},"634":{"position":[[1691,5],[1770,5],[1888,5]]},"636":{"position":[[1606,5],[1685,5],[1803,5]]},"646":{"position":[[1781,5],[1860,5],[1978,5]]},"652":{"position":[[1823,5],[1902,5],[2020,5]]},"654":{"position":[[1739,5],[1818,5],[1936,5]]},"656":{"position":[[1745,5],[1824,5],[1942,5]]},"729":{"position":[[2090,5],[2169,5],[2287,5]]},"731":{"position":[[2104,5],[2183,5],[2301,5]]},"733":{"position":[[2219,5],[2298,5],[2416,5]]}}}],["proxy.crt",{"_index":2425,"t":{"476":{"position":[[1169,9]]},"610":{"position":[[1974,9]]},"612":{"position":[[1922,9]]},"614":{"position":[[1791,9]]},"616":{"position":[[1740,9]]},"618":{"position":[[1753,9]]},"620":{"position":[[1866,9]]},"622":{"position":[[1827,9]]},"626":{"position":[[1900,9]]},"628":{"position":[[1881,9]]},"630":{"position":[[1777,9]]},"632":{"position":[[1893,9]]},"634":{"position":[[1758,9]]},"636":{"position":[[1673,9]]},"646":{"position":[[1848,9]]},"652":{"position":[[1890,9]]},"654":{"position":[[1806,9]]},"656":{"position":[[1812,9]]},"729":{"position":[[2157,9]]},"731":{"position":[[2171,9]]},"733":{"position":[[2286,9]]}}}],["proxy.example.com:8888",{"_index":221,"t":{"17":{"position":[[1095,22],[1142,22],[1405,22],[1463,22]]}}}],["proxy.key",{"_index":2426,"t":{"476":{"position":[[1247,9]]},"610":{"position":[[2052,9]]},"612":{"position":[[2000,9]]},"614":{"position":[[1869,9]]},"616":{"position":[[1818,9]]},"618":{"position":[[1831,9]]},"620":{"position":[[1944,9]]},"622":{"position":[[1905,9]]},"626":{"position":[[1978,9]]},"628":{"position":[[1959,9]]},"630":{"position":[[1855,9]]},"632":{"position":[[1971,9]]},"634":{"position":[[1836,9]]},"636":{"position":[[1751,9]]},"646":{"position":[[1926,9]]},"652":{"position":[[1968,9]]},"654":{"position":[[1884,9]]},"656":{"position":[[1890,9]]},"729":{"position":[[2235,9]]},"731":{"position":[[2249,9]]},"733":{"position":[[2364,9]]}}}],["proxy_pass",{"_index":1475,"t":{"203":{"position":[[2468,10]]},"205":{"position":[[505,10]]}}}],["prune",{"_index":1163,"t":{"118":{"position":[[4108,5],[4721,5],[4786,5],[4924,5],[4948,5]]}}}],["ps",{"_index":289,"t":{"19":{"position":[[1197,2]]},"579":{"position":[[131,3]]},"581":{"position":[[141,3]]},"689":{"position":[[2145,2],[2162,3],[2215,3],[2385,2],[2402,3],[2455,3],[2625,2],[2642,3],[2695,3]]},"695":{"position":[[2190,2],[2207,3],[2260,3]]}}}],["ps(1",{"_index":2811,"t":{"689":{"position":[[2288,6],[2528,6],[2768,6]]},"695":{"position":[[2333,6]]}}}],["psa",{"_index":2315,"t":{"466":{"position":[[103,5]]},"468":{"position":[[84,6],[121,4],[407,4]]}}}],["psa.yaml",{"_index":2318,"t":{"468":{"position":[[322,8]]}}}],["psp",{"_index":2090,"t":{"398":{"position":[[2809,3],[3317,4],[3401,3],[3501,3],[3553,3],[3619,3],[3687,3],[3761,3],[3854,3],[3937,3]]},"466":{"position":[[96,3]]},"468":{"position":[[898,6],[935,4],[1199,4],[1356,4],[1439,3],[2034,3],[2626,3],[3196,3],[3634,3],[4093,3],[4200,3],[4307,3],[4410,3],[4516,3],[4605,3],[4727,3],[4815,3],[5017,3],[5126,3],[5317,3],[5449,3],[5627,3],[5745,3]]},"791":{"position":[[211,3]]}}}],["psp:restrict",{"_index":2357,"t":{"468":{"position":[[4078,14],[4800,14]]}}}],["psp:svclb",{"_index":2361,"t":{"468":{"position":[[4506,9],[5735,9]]}}}],["psp:system",{"_index":2360,"t":{"468":{"position":[[4283,10],[5102,10],[5425,10]]}}}],["pss",{"_index":2057,"t":{"398":{"position":[[108,3]]}}}],["public",{"_index":217,"t":{"17":{"position":[[948,6]]},"311":{"position":[[1351,6]]},"315":{"position":[[145,6]]},"317":{"position":[[142,6],[988,6]]},"340":{"position":[[358,6]]},"468":{"position":[[6297,6],[6388,6]]},"506":{"position":[[735,7]]},"648":{"position":[[207,6]]}}}],["pull",{"_index":772,"t":{"59":{"position":[[0,7],[116,7],[266,7],[363,7],[562,8],[695,8],[1076,7]]},"61":{"position":[[169,7],[389,7]]},"336":{"position":[[78,4]]},"340":{"position":[[225,7],[422,4],[449,5],[613,7],[680,4],[1052,4],[1501,6]]},"348":{"position":[[88,4],[173,4]]},"454":{"position":[[991,5]]}}}],["pulls=fals",{"_index":2487,"t":{"476":{"position":[[4204,11]]},"735":{"position":[[1729,11],[2952,11]]},"747":{"position":[[1920,11],[3143,11]]}}}],["pure",{"_index":519,"t":{"31":{"position":[[631,4]]}}}],["purpos",{"_index":1070,"t":{"110":{"position":[[2165,8]]},"470":{"position":[[568,9]]}}}],["push",{"_index":802,"t":{"59":{"position":[[749,6]]},"273":{"position":[[683,4]]},"348":{"position":[[359,4],[416,4]]}}}],["pv",{"_index":2546,"t":{"514":{"position":[[323,4],[460,3]]},"522":{"position":[[391,2],[427,2]]},"528":{"position":[[324,2],[360,2]]}}}],["pvc",{"_index":2549,"t":{"514":{"position":[[409,5],[468,4]]},"520":{"position":[[70,3]]},"522":{"position":[[305,3],[398,3],[442,3]]},"524":{"position":[[452,3]]},"526":{"position":[[73,3]]},"528":{"position":[[308,3],[331,3],[375,3]]}}}],["pvc.yaml",{"_index":2577,"t":{"522":{"position":[[343,8]]},"524":{"position":[[483,8]]}}}],["pwd}/nginx.conf:/etc/nginx/nginx.conf",{"_index":1476,"t":{"203":{"position":[[2594,39]]},"205":{"position":[[631,39]]}}}],["qf",{"_index":1110,"t":{"116":{"position":[[780,2]]}}}],["question",{"_index":861,"t":{"65":{"position":[[413,9]]},"225":{"position":[[59,9]]}}}],["quick",{"_index":1693,"t":{"277":{"position":[[20,5]]},"279":{"position":[[347,5]]},"432":{"position":[[20,5]]}}}],["quickli",{"_index":2176,"t":{"426":{"position":[[25,7]]}}}],["quobyt",{"_index":2560,"t":{"516":{"position":[[516,7]]}}}],["quorum",{"_index":1522,"t":{"221":{"position":[[218,7],[256,6],[373,7],[566,6]]}}}],["r",{"_index":2696,"t":{"595":{"position":[[139,1]]},"597":{"position":[[139,1]]},"599":{"position":[[139,1]]}}}],["ra",{"_index":1842,"t":{"313":{"position":[[114,5],[272,3]]}}}],["ram",{"_index":1991,"t":{"358":{"position":[[154,3]]},"366":{"position":[[131,3]]},"372":{"position":[[237,3]]},"434":{"position":[[167,3],[192,3]]},"442":{"position":[[19,3]]},"450":{"position":[[44,3]]}}}],["ran",{"_index":2595,"t":{"536":{"position":[[673,3]]}}}],["rancher",{"_index":753,"t":{"54":{"position":[[313,7]]},"63":{"position":[[0,7],[55,8],[134,7],[249,7],[269,7],[361,7],[425,7]]},"243":{"position":[[290,7]]},"340":{"position":[[1267,16]]},"356":{"position":[[318,7],[361,7]]},"398":{"position":[[1476,9]]},"454":{"position":[[503,7]]},"536":{"position":[[1089,8],[1117,7],[1185,8],[1194,7],[1342,8],[1351,7],[1481,8]]}}}],["rancher'",{"_index":249,"t":{"19":{"position":[[442,9]]},"518":{"position":[[15,9]]},"531":{"position":[[279,9]]},"536":{"position":[[42,9]]}}}],["rancher/coredn",{"_index":1963,"t":{"348":{"position":[[286,15]]}}}],["rancher/k3",{"_index":733,"t":{"52":{"position":[[355,11]]},"273":{"position":[[181,11],[927,11]]},"540":{"position":[[710,11],[1046,11],[1117,11]]}}}],["rancher/k3s:v1.24.10",{"_index":737,"t":{"52":{"position":[[555,20]]}}}],["rancher/klipp",{"_index":307,"t":{"19":{"position":[[1425,15]]},"247":{"position":[[1717,15]]}}}],["rancher/kubectl",{"_index":1689,"t":{"273":{"position":[[987,15]]}}}],["rancher/kubectl:v0.17.0",{"_index":1688,"t":{"273":{"position":[[869,23]]}}}],["rancher/librari",{"_index":310,"t":{"19":{"position":[[1588,15]]}}}],["rancher/mirror",{"_index":1014,"t":{"101":{"position":[[2380,17]]},"162":{"position":[[7312,17]]}}}],["rancher/pause:3.1",{"_index":320,"t":{"19":{"position":[[1773,17],[1929,17],[2649,17],[2809,17],[2984,17]]}}}],["rancher/system",{"_index":1686,"t":{"273":{"position":[[828,14],[948,14]]}}}],["random",{"_index":1304,"t":{"174":{"position":[[93,6]]},"179":{"position":[[635,6]]},"352":{"position":[[197,6]]}}}],["randomli",{"_index":924,"t":{"75":{"position":[[918,8]]},"179":{"position":[[1850,8]]}}}],["rang",{"_index":208,"t":{"17":{"position":[[790,6],[891,6]]},"150":{"position":[[207,5],[238,5],[394,5],[1929,6]]},"162":{"position":[[1587,5],[1617,5],[1798,5]]},"468":{"position":[[1907,7],[1962,7],[2992,7],[3047,7]]},"785":{"position":[[137,5]]}}}],["range=10.43.0.0/16",{"_index":2437,"t":{"476":{"position":[[1772,18]]},"610":{"position":[[2600,18]]},"612":{"position":[[2548,18]]},"614":{"position":[[2417,18]]},"616":{"position":[[2366,18]]},"618":{"position":[[2379,18]]},"620":{"position":[[2492,18]]},"622":{"position":[[2453,18]]},"626":{"position":[[2526,18]]},"628":{"position":[[2507,18]]},"630":{"position":[[2403,18]]},"632":{"position":[[2519,18]]},"634":{"position":[[2384,18]]},"636":{"position":[[2299,18]]},"646":{"position":[[2474,18]]},"652":{"position":[[2516,18]]},"654":{"position":[[2432,18]]},"656":{"position":[[2438,18]]},"667":{"position":[[1959,18]]},"669":{"position":[[2027,18]]},"671":{"position":[[2112,18]]},"673":{"position":[[2009,18]]},"729":{"position":[[2783,18]]},"731":{"position":[[2797,18]]},"733":{"position":[[2912,18]]}}}],["range=30000",{"_index":2757,"t":{"610":{"position":[[2639,11]]},"612":{"position":[[2587,11]]},"614":{"position":[[2456,11]]},"616":{"position":[[2405,11]]},"618":{"position":[[2418,11]]},"620":{"position":[[2531,11]]},"622":{"position":[[2492,11]]},"626":{"position":[[2565,11]]},"628":{"position":[[2546,11]]},"630":{"position":[[2442,11]]},"632":{"position":[[2558,11]]},"634":{"position":[[2423,11]]},"636":{"position":[[2338,11]]},"646":{"position":[[2513,11]]},"652":{"position":[[2555,11]]},"654":{"position":[[2471,11]]},"656":{"position":[[2477,11]]},"729":{"position":[[2822,11]]},"731":{"position":[[2836,11]]},"733":{"position":[[2951,11]]}}}],["raspberri",{"_index":701,"t":{"50":{"position":[[0,9],[104,9],[535,9]]},"221":{"position":[[79,9]]},"303":{"position":[[1386,9]]},"354":{"position":[[259,9]]},"356":{"position":[[201,9]]},"358":{"position":[[537,9],[609,9]]},"442":{"position":[[133,9],[152,9]]}}}],["rasperri",{"_index":1780,"t":{"303":{"position":[[393,8]]}}}],["raspi",{"_index":727,"t":{"50":{"position":[[631,5]]}}}],["rate",{"_index":855,"t":{"65":{"position":[[274,4]]}}}],["rational",{"_index":2494,"t":{"480":{"position":[[68,9]]},"482":{"position":[[67,9]]},"484":{"position":[[50,9]]},"486":{"position":[[76,9]]},"488":{"position":[[79,9]]},"490":{"position":[[78,9]]},"492":{"position":[[66,9]]},"494":{"position":[[66,9]]},"496":{"position":[[77,9]]},"498":{"position":[[63,9]]},"500":{"position":[[78,9]]},"502":{"position":[[47,9]]},"504":{"position":[[69,9]]},"506":{"position":[[59,9]]}}}],["rbac",{"_index":2092,"t":{"398":{"position":[[2904,4]]},"618":{"position":[[209,5],[419,6]]}}}],["rbac.authorization.k8s.io",{"_index":1767,"t":{"291":{"position":[[410,25]]},"468":{"position":[[4750,25],[4880,25],[5052,25],[5152,25],[5375,25],[5475,25],[5685,25]]}}}],["rbac.authorization.k8s.io/v1",{"_index":1763,"t":{"291":{"position":[[310,28]]},"468":{"position":[[4015,28],[4220,28],[4443,28],[4638,28],[4922,28],[5225,28],[5558,28]]}}}],["rbd",{"_index":2561,"t":{"516":{"position":[[524,3]]}}}],["rc",{"_index":1185,"t":{"124":{"position":[[424,2],[1322,2]]},"126":{"position":[[358,2],[1179,2]]}}}],["rc1",{"_index":2630,"t":{"548":{"position":[[1247,3]]}}}],["re",{"_index":831,"t":{"61":{"position":[[644,4]]},"126":{"position":[[450,2],[1323,2]]},"277":{"position":[[583,2],[1981,2]]},"324":{"position":[[397,2]]},"540":{"position":[[2522,2]]},"548":{"position":[[45,2],[431,2]]}}}],["re)join",{"_index":939,"t":{"75":{"position":[[1556,8]]}}}],["reach",{"_index":219,"t":{"17":{"position":[[1045,7]]},"317":{"position":[[123,7],[553,5],[628,5]]},"360":{"position":[[91,5]]}}}],["reachabl",{"_index":1858,"t":{"315":{"position":[[612,9]]}}}],["read",{"_index":783,"t":{"59":{"position":[[205,4]]},"65":{"position":[[765,4],[1014,4]]},"139":{"position":[[348,4]]},"283":{"position":[[122,4]]},"398":{"position":[[92,4]]},"440":{"position":[[585,8]]},"476":{"position":[[4074,4]]},"536":{"position":[[886,4]]},"735":{"position":[[303,4],[530,5],[567,4],[605,4],[1647,4],[2870,4]]},"747":{"position":[[1838,4],[3061,4]]},"805":{"position":[[67,4]]}}}],["readi",{"_index":263,"t":{"19":{"position":[[760,5]]},"203":{"position":[[1657,5],[1695,5],[1733,5],[1771,5],[1831,5],[1891,5],[3105,5],[3143,5],[3181,5],[3220,5],[3280,5],[3340,5]]},"205":{"position":[[1142,5],[1180,5],[1218,5],[1257,5],[1317,5],[1377,5]]},"213":{"position":[[1737,5]]},"221":{"position":[[1760,5],[1811,5],[1862,5]]},"332":{"position":[[749,5]]},"378":{"position":[[531,5],[574,5]]}}}],["readili",{"_index":881,"t":{"65":{"position":[[1104,7]]}}}],["readonlyport",{"_index":2840,"t":{"735":{"position":[[79,12]]}}}],["readonlyrootfilesystem",{"_index":2349,"t":{"468":{"position":[[1990,23],[3075,23]]}}}],["readwriteonc",{"_index":2567,"t":{"520":{"position":[[114,13]]},"526":{"position":[[98,13]]}}}],["real",{"_index":491,"t":{"29":{"position":[[126,4]]},"436":{"position":[[252,4]]}}}],["realli",{"_index":554,"t":{"33":{"position":[[936,6]]}}}],["reason",{"_index":49,"t":{"4":{"position":[[340,10]]},"35":{"position":[[1034,8]]},"174":{"position":[[767,7]]},"324":{"position":[[293,8]]},"470":{"position":[[68,10]]}}}],["reboot",{"_index":693,"t":{"46":{"position":[[656,6],[735,6]]},"305":{"position":[[903,6]]},"428":{"position":[[356,7]]}}}],["recent",{"_index":1781,"t":{"303":{"position":[[410,6]]}}}],["reclaim=imagefs.available=10%,nodefs.available=10",{"_index":2474,"t":{"476":{"position":[[3722,50]]},"735":{"position":[[1239,50],[2462,50]]},"747":{"position":[[1430,50],[2653,50]]}}}],["recommend",{"_index":598,"t":{"35":{"position":[[983,11]]},"46":{"position":[[6,11]]},"48":{"position":[[6,11]]},"124":{"position":[[934,11]]},"126":{"position":[[786,11]]},"187":{"position":[[1535,9]]},"195":{"position":[[207,9]]},"305":{"position":[[386,9]]},"307":{"position":[[139,11]]},"311":{"position":[[1023,12]]},"358":{"position":[[75,15],[123,11],[629,11],[831,9]]},"364":{"position":[[103,9],[198,11]]},"368":{"position":[[85,9]]},"392":{"position":[[79,11]]},"394":{"position":[[94,9]]},"472":{"position":[[337,11]]},"480":{"position":[[296,11]]},"492":{"position":[[566,11]]},"504":{"position":[[214,11]]},"540":{"position":[[6,11]]},"546":{"position":[[215,11],[339,11]]},"705":{"position":[[493,11]]}}}],["reconfigur",{"_index":1086,"t":{"112":{"position":[[765,12],[2427,12]]},"114":{"position":[[585,12],[2213,12]]}}}],["record",{"_index":2500,"t":{"484":{"position":[[145,7]]}}}],["recur",{"_index":1405,"t":{"195":{"position":[[250,9]]}}}],["red",{"_index":1984,"t":{"356":{"position":[[108,4]]}}}],["redeploy",{"_index":2606,"t":{"538":{"position":[[459,10]]}}}],["redirect",{"_index":1936,"t":{"340":{"position":[[342,10],[473,11]]}}}],["reduc",{"_index":1855,"t":{"315":{"position":[[393,6]]},"420":{"position":[[12,6]]}}}],["redund",{"_index":1149,"t":{"118":{"position":[[2951,11]]},"203":{"position":[[141,10]]},"428":{"position":[[947,10]]}}}],["reencrypt",{"_index":1178,"t":{"122":{"position":[[238,12]]},"124":{"position":[[533,9],[557,9],[651,10],[682,9],[1517,9],[1547,9],[1641,10],[1672,9]]},"126":{"position":[[381,9],[422,9],[591,9],[632,9],[1248,9],[1295,9],[1495,9],[1542,9]]},"512":{"position":[[200,12]]}}}],["reencrypt_act",{"_index":1199,"t":{"128":{"position":[[990,17]]}}}],["reencrypt_finish",{"_index":1200,"t":{"128":{"position":[[1008,18]]}}}],["reencrypt_request",{"_index":1198,"t":{"128":{"position":[[971,18]]}}}],["refer",{"_index":635,"t":{"39":{"position":[[1052,5]]},"56":{"position":[[324,5]]},"59":{"position":[[1104,5]]},"99":{"position":[[515,5]]},"118":{"position":[[355,5]]},"124":{"position":[[1124,8]]},"126":{"position":[[934,8]]},"168":{"position":[[38,8]]},"181":{"position":[[386,5]]},"195":{"position":[[351,5]]},"207":{"position":[[725,5]]},"213":{"position":[[892,5],[1003,5]]},"233":{"position":[[7,9]]},"247":{"position":[[2541,5]]},"251":{"position":[[229,5],[456,5]]},"257":{"position":[[197,5]]},"268":{"position":[[497,9]]},"275":{"position":[[96,5]]},"301":{"position":[[141,9]]},"303":{"position":[[149,8]]},"334":{"position":[[73,5]]},"356":{"position":[[348,5]]},"400":{"position":[[115,5],[319,5]]},"404":{"position":[[1011,5],[1531,5]]},"426":{"position":[[198,5]]},"432":{"position":[[1578,5]]},"514":{"position":[[479,5]]},"516":{"position":[[72,8],[828,5]]},"518":{"position":[[232,9]]},"524":{"position":[[183,5]]},"533":{"position":[[240,5]]},"555":{"position":[[657,5]]},"807":{"position":[[26,5]]},"817":{"position":[[153,5]]}}}],["reflect",{"_index":1865,"t":{"317":{"position":[[1132,7]]}}}],["regard",{"_index":2616,"t":{"540":{"position":[[1204,9]]}}}],["regex",{"_index":1909,"t":{"326":{"position":[[1200,5]]}}}],["region",{"_index":1154,"t":{"118":{"position":[[3291,6],[3301,6]]},"135":{"position":[[1521,6],[1541,6]]},"162":{"position":[[5468,6],[5489,6]]}}}],["regist",{"_index":470,"t":{"27":{"position":[[154,8]]},"39":{"position":[[314,11]]},"67":{"position":[[171,10]]},"69":{"position":[[162,10]]},"73":{"position":[[66,8]]},"75":{"position":[[16,10],[850,8]]},"87":{"position":[[145,11],[220,11]]},"101":{"position":[[1148,11],[1232,11]]},"162":{"position":[[6473,11],[6557,11]]},"199":{"position":[[526,11]]},"207":{"position":[[643,8]]},"217":{"position":[[26,8]]},"219":{"position":[[337,8]]},"221":{"position":[[954,8]]},"277":{"position":[[704,11],[1280,11]]},"428":{"position":[[1378,8]]}}}],["registr",{"_index":607,"t":{"39":{"position":[[170,12],[990,13]]},"73":{"position":[[116,12],[175,13]]},"99":{"position":[[170,12],[478,12]]},"199":{"position":[[501,12]]},"207":{"position":[[603,12]]},"213":{"position":[[792,12]]},"219":{"position":[[390,12],[501,12]]},"221":{"position":[[914,12],[1302,12],[1605,12]]},"384":{"position":[[548,12]]}}}],["registri",{"_index":803,"t":{"59":{"position":[[778,10]]},"89":{"position":[[311,8],[369,8]]},"101":{"position":[[2519,8],[2558,8]]},"162":{"position":[[7451,8],[7490,8],[7581,8],[7620,8]]},"255":{"position":[[203,8]]},"257":{"position":[[112,8],[187,9]]},"259":{"position":[[19,8]]},"261":{"position":[[255,8]]},"266":{"position":[[44,8]]},"273":{"position":[[142,9],[704,9],[1026,9]]},"336":{"position":[[51,10],[236,10],[297,9],[390,9],[674,8],[714,10],[866,8]]},"340":{"position":[[75,11],[249,9],[365,8],[948,8],[1526,8]]},"342":{"position":[[259,8],[340,8],[530,8],[671,8],[729,8],[790,8],[852,10]]},"344":{"position":[[283,8],[332,8],[402,8],[456,8],[508,8],[661,8],[715,8],[767,8]]},"346":{"position":[[286,8],[335,8],[548,8]]},"348":{"position":[[256,9],[390,9]]}}}],["registries.yaml",{"_index":1931,"t":{"336":{"position":[[152,15],[565,15],[800,15]]}}}],["registry'",{"_index":1955,"t":{"342":{"position":[[414,10]]}}}],["registry.example.com:5000/mirrorproject/ranch",{"_index":1946,"t":{"340":{"position":[[1112,47]]}}}],["registry.yaml",{"_index":1652,"t":{"259":{"position":[[76,13]]}}}],["regular",{"_index":1943,"t":{"340":{"position":[[861,7]]}}}],["reinstal",{"_index":1615,"t":{"247":{"position":[[1832,9]]},"384":{"position":[[425,13]]}}}],["reintroduc",{"_index":1470,"t":{"203":{"position":[[2122,11]]},"205":{"position":[[159,11]]}}}],["rejoin",{"_index":935,"t":{"75":{"position":[[1377,6]]},"384":{"position":[[362,9]]}}}],["relat",{"_index":1502,"t":{"215":{"position":[[627,7],[882,7]]},"221":{"position":[[2343,7],[2598,7]]},"472":{"position":[[38,7]]}}}],["releas",{"_index":244,"t":{"19":{"position":[[296,8]]},"44":{"position":[[637,8]]},"108":{"position":[[1502,8]]},"178":{"position":[[138,8]]},"263":{"position":[[58,8]]},"266":{"position":[[189,8]]},"271":{"position":[[130,8],[466,9]]},"273":{"position":[[312,7],[551,7],[730,7]]},"279":{"position":[[195,7]]},"303":{"position":[[2145,8],[2302,8]]},"348":{"position":[[58,7]]},"354":{"position":[[117,8]]},"390":{"position":[[145,8]]},"404":{"position":[[1447,7]]},"478":{"position":[[231,7]]},"540":{"position":[[1940,7],[2061,8],[2095,7],[2252,7]]},"546":{"position":[[112,7],[262,8],[393,8],[488,7],[664,8]]},"548":{"position":[[807,8]]},"550":{"position":[[80,8]]},"555":{"position":[[465,7],[499,7]]}}}],["release/channel",{"_index":2203,"t":{"432":{"position":[[2194,17]]}}}],["release/channels/st",{"_index":2619,"t":{"540":{"position":[[2360,23]]}}}],["relev",{"_index":2040,"t":{"374":{"position":[[295,8]]},"484":{"position":[[115,8]]}}}],["reli",{"_index":473,"t":{"27":{"position":[[333,4]]},"360":{"position":[[1017,6]]}}}],["reload",{"_index":547,"t":{"33":{"position":[[670,6]]},"46":{"position":[[379,6]]},"317":{"position":[[1256,6]]},"472":{"position":[[1444,6]]},"729":{"position":[[429,6]]},"731":{"position":[[415,6]]},"733":{"position":[[471,6]]},"735":{"position":[[401,6]]},"737":{"position":[[458,6]]},"739":{"position":[[435,6]]},"741":{"position":[[435,6]]},"743":{"position":[[309,6]]},"745":{"position":[[403,6]]},"747":{"position":[[619,6]]},"749":{"position":[[485,6]]},"751":{"position":[[339,6]]},"753":{"position":[[1044,6]]}}}],["remain",{"_index":1342,"t":{"179":{"position":[[2377,9]]},"398":{"position":[[2799,9]]},"408":{"position":[[344,6]]},"410":{"position":[[965,6]]},"414":{"position":[[219,6],[337,6]]},"420":{"position":[[700,6]]},"504":{"position":[[319,7]]}}}],["remedi",{"_index":2394,"t":{"474":{"position":[[99,12]]},"480":{"position":[[434,10]]},"482":{"position":[[533,10]]},"484":{"position":[[457,10]]},"486":{"position":[[297,10]]},"488":{"position":[[472,10]]},"490":{"position":[[458,10]]},"492":{"position":[[682,10]]},"494":{"position":[[475,10]]},"498":{"position":[[287,10]]},"500":{"position":[[549,10]]},"502":{"position":[[169,10]]},"504":{"position":[[600,10]]},"506":{"position":[[538,10]]},"555":{"position":[[617,12],[1359,11]]},"559":{"position":[[23,12]]},"561":{"position":[[23,12]]},"563":{"position":[[23,12]]},"565":{"position":[[23,12]]},"567":{"position":[[23,12]]},"569":{"position":[[23,12]]},"571":{"position":[[23,12]]},"573":{"position":[[23,12]]},"575":{"position":[[23,12]]},"577":{"position":[[23,12]]},"579":{"position":[[13,12]]},"581":{"position":[[23,12]]},"583":{"position":[[23,12]]},"585":{"position":[[13,12]]},"587":{"position":[[13,12]]},"589":{"position":[[13,12]]},"591":{"position":[[13,12]]},"593":{"position":[[13,12]]},"595":{"position":[[13,12]]},"597":{"position":[[13,12]]},"599":{"position":[[13,12]]},"602":{"position":[[13,12]]},"604":{"position":[[13,12]]},"606":{"position":[[13,12]]},"608":{"position":[[23,12]]},"610":{"position":[[13,12]]},"612":{"position":[[13,12]]},"614":{"position":[[13,12]]},"616":{"position":[[13,12]]},"618":{"position":[[13,12]]},"620":{"position":[[13,12]]},"622":{"position":[[13,12]]},"624":{"position":[[13,12]]},"626":{"position":[[13,12]]},"628":{"position":[[13,12]]},"630":{"position":[[13,12]]},"632":{"position":[[13,12]]},"634":{"position":[[13,12]]},"636":{"position":[[13,12]]},"638":{"position":[[23,12]]},"640":{"position":[[23,12]]},"642":{"position":[[23,12]]},"644":{"position":[[23,12]]},"646":{"position":[[13,12]]},"648":{"position":[[23,12]]},"650":{"position":[[13,12]]},"652":{"position":[[13,12]]},"654":{"position":[[13,12]]},"656":{"position":[[13,12]]},"658":{"position":[[13,12]]},"660":{"position":[[13,12]]},"662":{"position":[[13,12]]},"665":{"position":[[13,12]]},"667":{"position":[[13,12]]},"669":{"position":[[13,12]]},"671":{"position":[[13,12]]},"673":{"position":[[13,12]]},"675":{"position":[[23,12]]},"677":{"position":[[13,12]]},"680":{"position":[[13,12]]},"682":{"position":[[13,12]]},"685":{"position":[[13,12]]},"687":{"position":[[13,12]]},"689":{"position":[[13,12]]},"691":{"position":[[13,12]]},"693":{"position":[[13,12]]},"695":{"position":[[13,12]]},"697":{"position":[[13,12]]},"700":{"position":[[13,12]]},"703":{"position":[[13,12]]},"705":{"position":[[13,12]]},"708":{"position":[[23,12]]},"710":{"position":[[23,12]]},"712":{"position":[[13,12]]},"714":{"position":[[13,12]]},"716":{"position":[[13,12]]},"718":{"position":[[13,12]]},"720":{"position":[[13,12]]},"722":{"position":[[13,12]]},"724":{"position":[[23,12]]},"726":{"position":[[23,12]]},"729":{"position":[[13,12]]},"731":{"position":[[13,12]]},"733":{"position":[[13,12]]},"735":{"position":[[13,12]]},"737":{"position":[[13,12]]},"739":{"position":[[23,12]]},"741":{"position":[[23,12]]},"743":{"position":[[23,12]]},"745":{"position":[[13,12]]},"747":{"position":[[13,12]]},"749":{"position":[[23,12]]},"751":{"position":[[23,12]]},"753":{"position":[[13,12]]},"756":{"position":[[13,12]]},"758":{"position":[[13,12]]},"760":{"position":[[13,12]]},"762":{"position":[[13,12]]},"764":{"position":[[13,12]]},"766":{"position":[[13,12]]},"768":{"position":[[13,12]]},"770":{"position":[[13,12]]},"773":{"position":[[13,12]]},"775":{"position":[[13,12]]},"777":{"position":[[13,12]]},"779":{"position":[[13,12]]},"781":{"position":[[13,12]]},"783":{"position":[[13,12]]},"785":{"position":[[13,12]]},"787":{"position":[[13,12]]},"789":{"position":[[13,12]]},"791":{"position":[[13,12]]},"793":{"position":[[13,12]]},"795":{"position":[[13,12]]},"797":{"position":[[13,12]]},"800":{"position":[[13,12]]},"802":{"position":[[13,12]]},"805":{"position":[[13,12]]},"807":{"position":[[13,12]]},"810":{"position":[[13,12]]},"813":{"position":[[13,12]]},"815":{"position":[[13,12]]},"817":{"position":[[13,12]]},"819":{"position":[[13,12]]}}}],["rememb",{"_index":1838,"t":{"311":{"position":[[1294,8]]},"317":{"position":[[765,8]]}}}],["remot",{"_index":1775,"t":{"295":{"position":[[293,6]]},"476":{"position":[[1429,6],[1475,6],[1523,6]]},"610":{"position":[[2234,6],[2280,6],[2328,6]]},"612":{"position":[[2182,6],[2228,6],[2276,6]]},"614":{"position":[[2051,6],[2097,6],[2145,6]]},"616":{"position":[[2000,6],[2046,6],[2094,6]]},"618":{"position":[[2013,6],[2059,6],[2107,6]]},"620":{"position":[[2126,6],[2172,6],[2220,6]]},"622":{"position":[[2087,6],[2133,6],[2181,6]]},"626":{"position":[[2160,6],[2206,6],[2254,6]]},"628":{"position":[[2141,6],[2187,6],[2235,6]]},"630":{"position":[[2037,6],[2083,6],[2131,6]]},"632":{"position":[[2153,6],[2199,6],[2247,6]]},"634":{"position":[[2018,6],[2064,6],[2112,6]]},"636":{"position":[[1933,6],[1979,6],[2027,6]]},"646":{"position":[[2108,6],[2154,6],[2202,6]]},"652":{"position":[[2150,6],[2196,6],[2244,6]]},"654":{"position":[[2066,6],[2112,6],[2160,6]]},"656":{"position":[[2072,6],[2118,6],[2166,6]]},"729":{"position":[[2417,6],[2463,6],[2511,6]]},"731":{"position":[[2431,6],[2477,6],[2525,6]]},"733":{"position":[[2546,6],[2592,6],[2640,6]]}}}],["remov",{"_index":934,"t":{"75":{"position":[[1353,8],[1631,6]]},"118":{"position":[[2934,7],[4114,6]]},"303":{"position":[[1789,7],[1975,7]]},"305":{"position":[[100,7],[319,7]]},"307":{"position":[[1150,6],[1431,8]]},"330":{"position":[[388,6]]},"332":{"position":[[303,6]]},"380":{"position":[[88,8],[186,6]]},"384":{"position":[[122,6],[526,8]]},"398":{"position":[[11,7],[312,6],[2788,6],[3001,6]]},"404":{"position":[[1076,6]]},"406":{"position":[[312,7]]},"420":{"position":[[36,7]]},"424":{"position":[[1148,7]]},"516":{"position":[[4,7],[342,7],[452,7]]},"542":{"position":[[313,8]]},"604":{"position":[[231,6]]},"606":{"position":[[145,6]]},"608":{"position":[[155,6]]},"622":{"position":[[152,6]]},"634":{"position":[[152,6]]},"689":{"position":[[129,6]]},"695":{"position":[[129,6]]},"741":{"position":[[262,6]]},"743":{"position":[[144,6]]},"749":{"position":[[128,6],[316,6]]},"756":{"position":[[256,6]]},"758":{"position":[[42,6]]},"762":{"position":[[42,6]]},"768":{"position":[[26,6]]},"770":{"position":[[42,6]]}}}],["renew",{"_index":142,"t":{"11":{"position":[[179,8],[240,8]]},"13":{"position":[[171,7]]},"104":{"position":[[171,7]]},"108":{"position":[[388,8]]},"112":{"position":[[460,5]]}}}],["repeat",{"_index":1730,"t":{"281":{"position":[[688,10],[989,10]]},"330":{"position":[[552,9]]}}}],["replac",{"_index":1352,"t":{"183":{"position":[[99,7]]},"199":{"position":[[724,11]]},"271":{"position":[[307,7]]},"273":{"position":[[286,8]]},"283":{"position":[[384,9]]},"301":{"position":[[82,11]]},"404":{"position":[[688,7]]},"760":{"position":[[41,7]]}}}],["repo",{"_index":837,"t":{"63":{"position":[[125,4],[180,4]]},"110":{"position":[[270,4]]},"114":{"position":[[1291,4]]},"247":{"position":[[683,5],[1273,4]]}}}],["report",{"_index":1039,"t":{"108":{"position":[[1261,8]]},"326":{"position":[[776,8]]}}}],["repositori",{"_index":410,"t":{"25":{"position":[[144,10]]},"54":{"position":[[325,10]]},"56":{"position":[[366,11],[469,11]]},"59":{"position":[[1140,11]]},"247":{"position":[[186,11],[1026,11],[1213,11],[1256,10]]},"536":{"position":[[1654,13]]}}}],["repres",{"_index":1731,"t":{"281":{"position":[[719,11],[764,11]]}}}],["request",{"_index":433,"t":{"25":{"position":[[860,7]]},"110":{"position":[[881,7],[903,7]]},"187":{"position":[[815,8]]},"398":{"position":[[965,8]]},"472":{"position":[[483,7]]},"474":{"position":[[529,8],[1152,8]]},"492":{"position":[[18,7],[91,7],[139,7],[367,8]]},"494":{"position":[[260,7]]},"514":{"position":[[420,7]]},"520":{"position":[[168,9]]},"526":{"position":[[150,9]]},"705":{"position":[[219,8],[440,9]]}}}],["requesthead",{"_index":2427,"t":{"476":{"position":[[1259,13],[1307,13],[1392,13],[1445,13],[1490,13]]},"610":{"position":[[2064,13],[2112,13],[2197,13],[2250,13],[2295,13]]},"612":{"position":[[2012,13],[2060,13],[2145,13],[2198,13],[2243,13]]},"614":{"position":[[1881,13],[1929,13],[2014,13],[2067,13],[2112,13]]},"616":{"position":[[1830,13],[1878,13],[1963,13],[2016,13],[2061,13]]},"618":{"position":[[1843,13],[1891,13],[1976,13],[2029,13],[2074,13]]},"620":{"position":[[1956,13],[2004,13],[2089,13],[2142,13],[2187,13]]},"622":{"position":[[1917,13],[1965,13],[2050,13],[2103,13],[2148,13]]},"626":{"position":[[1990,13],[2038,13],[2123,13],[2176,13],[2221,13]]},"628":{"position":[[1971,13],[2019,13],[2104,13],[2157,13],[2202,13]]},"630":{"position":[[1867,13],[1915,13],[2000,13],[2053,13],[2098,13]]},"632":{"position":[[1983,13],[2031,13],[2116,13],[2169,13],[2214,13]]},"634":{"position":[[1848,13],[1896,13],[1981,13],[2034,13],[2079,13]]},"636":{"position":[[1763,13],[1811,13],[1896,13],[1949,13],[1994,13]]},"646":{"position":[[1938,13],[1986,13],[2071,13],[2124,13],[2169,13]]},"652":{"position":[[1980,13],[2028,13],[2113,13],[2166,13],[2211,13]]},"654":{"position":[[1896,13],[1944,13],[2029,13],[2082,13],[2127,13]]},"656":{"position":[[1902,13],[1950,13],[2035,13],[2088,13],[2133,13]]},"729":{"position":[[2247,13],[2295,13],[2380,13],[2433,13],[2478,13]]},"731":{"position":[[2261,13],[2309,13],[2394,13],[2447,13],[2492,13]]},"733":{"position":[[2376,13],[2424,13],[2509,13],[2562,13],[2607,13]]}}}],["requir",{"_index":84,"t":{"4":{"position":[[862,8]]},"33":{"position":[[108,9]]},"46":{"position":[[150,9],[617,8]]},"48":{"position":[[141,9]]},"108":{"position":[[11,8],[171,12]]},"110":{"position":[[815,9],[949,8]]},"112":{"position":[[580,9],[1409,8]]},"124":{"position":[[918,9]]},"126":{"position":[[770,9]]},"128":{"position":[[1219,8]]},"150":{"position":[[964,8],[1292,8]]},"185":{"position":[[576,7],[1776,8]]},"193":{"position":[[24,8]]},"209":{"position":[[25,8]]},"213":{"position":[[4,8],[73,12],[112,13]]},"215":{"position":[[976,8]]},"219":{"position":[[73,8]]},"227":{"position":[[71,8]]},"245":{"position":[[414,7]]},"251":{"position":[[413,8]]},"253":{"position":[[110,12]]},"261":{"position":[[125,8]]},"266":{"position":[[640,8]]},"273":{"position":[[96,8]]},"283":{"position":[[456,7]]},"303":{"position":[[436,8],[519,7],[1349,7],[1469,8],[1637,7],[1901,7]]},"305":{"position":[[29,8],[228,8],[469,8]]},"309":{"position":[[827,8],[1121,8]]},"311":{"position":[[1477,9]]},"315":{"position":[[363,8]]},"317":{"position":[[798,12]]},"326":{"position":[[323,13]]},"350":{"position":[[46,12],[217,13],[237,12]]},"354":{"position":[[299,12]]},"356":{"position":[[77,13]]},"358":{"position":[[9,12],[249,12]]},"362":{"position":[[75,8],[209,8],[317,8],[393,8],[525,8]]},"364":{"position":[[9,12]]},"366":{"position":[[45,12]]},"398":{"position":[[1382,11],[1505,9]]},"400":{"position":[[343,13]]},"408":{"position":[[404,7]]},"434":{"position":[[73,12],[775,12]]},"438":{"position":[[591,13]]},"444":{"position":[[73,12]]},"446":{"position":[[14,12],[126,12],[221,12],[367,12]]},"448":{"position":[[23,12],[131,12],[226,12]]},"450":{"position":[[4,12]]},"454":{"position":[[584,13],[719,13]]},"456":{"position":[[543,12]]},"460":{"position":[[137,8],[429,7]]},"462":{"position":[[34,13]]},"464":{"position":[[66,8]]},"466":{"position":[[12,12]]},"468":{"position":[[2211,7]]},"470":{"position":[[4,8]]},"472":{"position":[[4,12],[170,12]]},"476":{"position":[[4400,12]]},"486":{"position":[[271,13]]},"504":{"position":[[117,8]]},"506":{"position":[[259,9]]},"533":{"position":[[637,8]]},"536":{"position":[[250,13]]},"538":{"position":[[97,8]]},"555":{"position":[[1851,7]]},"579":{"position":[[436,11],[1641,8]]},"650":{"position":[[566,11],[1771,8]]},"685":{"position":[[460,11],[1665,8]]},"687":{"position":[[349,11],[1554,8]]},"689":{"position":[[374,11],[1579,8]]},"691":{"position":[[526,11],[1731,8]]},"693":{"position":[[352,11],[1557,8]]},"695":{"position":[[384,11],[1589,8]]},"697":{"position":[[483,11],[1688,8]]},"764":{"position":[[90,8]]},"791":{"position":[[151,7]]}}}],["require('http",{"_index":829,"t":{"61":{"position":[[595,16]]}}}],["requireddropcap",{"_index":2327,"t":{"468":{"position":[[1527,25],[2686,25]]}}}],["res.end('hello",{"_index":833,"t":{"61":{"position":[[671,14]]}}}],["res.writehead(200",{"_index":832,"t":{"61":{"position":[[651,19]]}}}],["reserv",{"_index":634,"t":{"39":{"position":[[1011,8]]},"150":{"position":[[247,7]]},"162":{"position":[[1626,7]]}}}],["reset",{"_index":1128,"t":{"118":{"position":[[931,5],[964,5],[1018,5],[1036,5],[1363,5],[1396,5],[1450,5],[1468,5],[2370,5],[2517,5],[3736,5],[3766,5]]},"137":{"position":[[541,5]]},"162":{"position":[[3275,5],[3379,5]]},"542":{"position":[[151,5]]}}}],["resolut",{"_index":2158,"t":{"422":{"position":[[180,11]]}}}],["resolv",{"_index":990,"t":{"91":{"position":[[174,6]]},"101":{"position":[[2819,6]]},"162":{"position":[[7880,6]]},"243":{"position":[[114,8]]},"268":{"position":[[1318,6]]},"422":{"position":[[308,7]]},"476":{"position":[[4101,6]]},"540":{"position":[[1926,8],[2043,8]]},"735":{"position":[[1666,6],[2889,6]]},"747":{"position":[[1857,6],[3080,6]]}}}],["resolv.conf",{"_index":992,"t":{"91":{"position":[[216,11]]},"101":{"position":[[2864,11]]},"162":{"position":[[7925,11]]}}}],["resourc",{"_index":451,"t":{"25":{"position":[[1287,10]]},"27":{"position":[[170,8]]},"69":{"position":[[235,9]]},"245":{"position":[[696,8]]},"247":{"position":[[21,8],[267,8],[332,9],[474,9],[507,9]]},"249":{"position":[[203,10],[234,8]]},"291":{"position":[[123,8]]},"322":{"position":[[281,9],[347,9]]},"326":{"position":[[128,10],[219,9],[260,9]]},"332":{"position":[[340,9]]},"350":{"position":[[319,9]]},"358":{"position":[[170,8],[240,8]]},"372":{"position":[[167,9]]},"398":{"position":[[2813,9],[2909,9],[3014,9],[3291,9],[3420,10]]},"424":{"position":[[575,9],[1067,9]]},"434":{"position":[[64,8],[670,8],[766,8],[874,8]]},"436":{"position":[[4,8]]},"438":{"position":[[374,8]]},"440":{"position":[[273,8]]},"444":{"position":[[64,8]]},"446":{"position":[[84,9]]},"454":{"position":[[363,10],[575,8],[673,9],[710,8],[1271,8]]},"468":{"position":[[4126,10],[4340,10],[4549,10]]},"482":{"position":[[118,8]]},"492":{"position":[[319,9],[498,9]]},"500":{"position":[[141,8],[446,9]]},"510":{"position":[[657,12],[674,12]]},"520":{"position":[[157,10]]},"526":{"position":[[139,10]]},"536":{"position":[[159,8]]},"819":{"position":[[112,9],[139,9]]}}}],["resourcenam",{"_index":2359,"t":{"468":{"position":[[4172,14],[4373,14],[4582,14]]}}}],["respect",{"_index":1729,"t":{"281":{"position":[[662,10]]},"309":{"position":[[1490,7]]},"518":{"position":[[154,10]]}}}],["respons",{"_index":1913,"t":{"326":{"position":[[1412,14]]},"456":{"position":[[578,8]]}}}],["rest",{"_index":1175,"t":{"120":{"position":[[44,5]]},"148":{"position":[[80,4]]},"162":{"position":[[8527,4]]},"496":{"position":[[200,4],[283,4]]},"510":{"position":[[44,5]]}}}],["restart",{"_index":265,"t":{"19":{"position":[[773,8]]},"25":{"position":[[421,7]]},"65":{"position":[[790,7]]},"112":{"position":[[180,9],[831,9],[2239,7],[2483,10]]},"114":{"position":[[203,9],[793,9],[2049,7],[2268,10]]},"116":{"position":[[1356,7],[1422,7],[1440,7]]},"118":{"position":[[1125,9],[1557,9]]},"124":{"position":[[292,7],[394,7],[439,7],[490,7],[1202,7],[1292,7],[1337,7],[1369,7],[1440,7],[1495,7],[1691,7],[1746,7]]},"126":{"position":[[226,7],[328,7],[373,7],[548,7],[1059,7],[1149,7],[1194,7],[1226,7],[1418,7],[1473,7]]},"128":{"position":[[446,10],[1197,7],[1409,10]]},"203":{"position":[[1199,7],[1258,7],[1284,7],[2566,7]]},"205":{"position":[[603,7]]},"223":{"position":[[155,10]]},"271":{"position":[[567,7],[599,9]]},"317":{"position":[[1273,7]]},"332":{"position":[[762,8]]},"346":{"position":[[593,7]]},"380":{"position":[[50,10],[314,7]]},"398":{"position":[[477,7]]},"424":{"position":[[1160,10]]},"428":{"position":[[337,7]]},"472":{"position":[[1381,9],[1466,7]]},"510":{"position":[[371,10]]},"552":{"position":[[0,10],[90,7],[131,7],[146,7],[186,7],[214,7],[257,7],[268,7],[316,7]]},"729":{"position":[[370,7],[446,7]]},"731":{"position":[[356,7],[432,7]]},"733":{"position":[[412,7],[488,7]]},"735":{"position":[[342,7],[418,7]]},"737":{"position":[[399,7],[475,7]]},"739":{"position":[[376,7],[452,7]]},"741":{"position":[[376,7],[452,7]]},"743":{"position":[[250,7],[326,7]]},"745":{"position":[[344,7],[420,7]]},"747":{"position":[[560,7],[636,7]]},"749":{"position":[[426,7],[502,7]]},"751":{"position":[[280,7],[356,7]]},"753":{"position":[[985,7],[1061,7]]}}}],["restartpolici",{"_index":446,"t":{"25":{"position":[[1120,14]]}}}],["restor",{"_index":1121,"t":{"118":{"position":[[137,7],[548,9],[597,8],[717,7],[839,7],[970,7],[1042,7],[1205,8],[1402,7],[1474,7],[1819,8],[2523,7],[2570,8],[2649,9],[3606,7],[3772,7],[3933,7]]},"162":{"position":[[3385,7],[3437,8]]},"174":{"position":[[1287,7]]},"191":{"position":[[29,8],[229,7],[296,9],[363,10]]},"193":{"position":[[47,7],[161,7],[191,7]]},"195":{"position":[[47,7],[168,7],[316,9]]},"197":{"position":[[89,7]]},"215":{"position":[[990,9]]},"307":{"position":[[1483,7],[1536,7]]},"406":{"position":[[583,8],[701,7],[758,7]]},"533":{"position":[[651,9]]}}}],["restrict",{"_index":608,"t":{"39":{"position":[[294,8]]},"326":{"position":[[578,13]]},"360":{"position":[[1260,10]]},"398":{"position":[[1764,12],[1810,12],[1853,12]]},"460":{"position":[[723,8]]},"468":{"position":[[631,12],[677,12],[720,12],[1428,10],[2615,10],[4189,10],[6569,11]]},"470":{"position":[[527,13]]},"472":{"position":[[304,11]]},"504":{"position":[[563,11]]},"587":{"position":[[395,11]]},"591":{"position":[[405,11]]},"775":{"position":[[100,8]]},"777":{"position":[[100,8]]},"779":{"position":[[100,8]]},"781":{"position":[[100,8]]},"783":{"position":[[100,8]]},"787":{"position":[[100,8]]},"793":{"position":[[100,8]]},"795":{"position":[[100,8]]},"797":{"position":[[100,8]]},"800":{"position":[[191,11]]}}}],["result",{"_index":1130,"t":{"118":{"position":[[1074,7],[1506,7]]},"277":{"position":[[673,6],[1329,6]]},"283":{"position":[[842,7]]},"285":{"position":[[474,7]]},"358":{"position":[[202,7]]},"434":{"position":[[26,7],[99,7]]},"444":{"position":[[26,7]]},"456":{"position":[[560,6]]},"555":{"position":[[1155,7]]},"559":{"position":[[0,7]]},"561":{"position":[[0,7]]},"563":{"position":[[0,7]]},"565":{"position":[[0,7]]},"567":{"position":[[0,7]]},"569":{"position":[[0,7]]},"571":{"position":[[0,7]]},"573":{"position":[[0,7]]},"575":{"position":[[0,7]]},"577":{"position":[[0,7]]},"579":{"position":[[0,7],[2082,7]]},"581":{"position":[[0,7]]},"583":{"position":[[0,7]]},"585":{"position":[[0,7],[339,7]]},"587":{"position":[[0,7],[333,7]]},"589":{"position":[[0,7],[330,7]]},"591":{"position":[[0,7],[343,7]]},"593":{"position":[[0,7],[228,7]]},"595":{"position":[[0,7],[247,7]]},"597":{"position":[[0,7]]},"599":{"position":[[0,7]]},"602":{"position":[[0,7]]},"604":{"position":[[0,7],[343,7]]},"606":{"position":[[0,7],[272,7]]},"608":{"position":[[0,7]]},"610":{"position":[[0,7],[559,7]]},"612":{"position":[[0,7],[542,7]]},"614":{"position":[[0,7],[405,7]]},"616":{"position":[[0,7],[371,7]]},"618":{"position":[[0,7],[384,7]]},"620":{"position":[[0,7],[481,7]]},"622":{"position":[[0,7],[388,7]]},"624":{"position":[[0,7],[332,7]]},"626":{"position":[[0,7],[454,7]]},"628":{"position":[[0,7],[457,7]]},"630":{"position":[[0,7],[353,7]]},"632":{"position":[[0,7],[507,7]]},"634":{"position":[[0,7],[355,7]]},"636":{"position":[[0,7],[304,7]]},"638":{"position":[[0,7]]},"640":{"position":[[0,7]]},"642":{"position":[[0,7]]},"644":{"position":[[0,7]]},"646":{"position":[[0,7],[430,7]]},"648":{"position":[[0,7]]},"650":{"position":[[0,7],[2212,7]]},"652":{"position":[[0,7],[486,7]]},"654":{"position":[[0,7],[441,7]]},"656":{"position":[[0,7],[450,7]]},"658":{"position":[[0,7]]},"660":{"position":[[0,7]]},"662":{"position":[[0,7]]},"665":{"position":[[0,7]]},"667":{"position":[[0,7],[330,7]]},"669":{"position":[[0,7],[372,7]]},"671":{"position":[[0,7],[469,7]]},"673":{"position":[[0,7],[386,7]]},"675":{"position":[[0,7]]},"677":{"position":[[0,7],[281,7]]},"680":{"position":[[0,7],[289,7]]},"682":{"position":[[0,7],[321,7]]},"685":{"position":[[0,7],[2103,7]]},"687":{"position":[[0,7],[1992,7]]},"689":{"position":[[0,7],[2017,7]]},"691":{"position":[[0,7],[2169,7]]},"693":{"position":[[0,7],[1995,7]]},"695":{"position":[[0,7],[2027,7]]},"697":{"position":[[0,7],[2126,7]]},"700":{"position":[[0,7]]},"703":{"position":[[0,7]]},"705":{"position":[[0,7]]},"708":{"position":[[0,7]]},"710":{"position":[[0,7]]},"712":{"position":[[0,7],[263,7]]},"714":{"position":[[0,7],[354,7]]},"716":{"position":[[0,7],[263,7]]},"718":{"position":[[0,7],[272,7]]},"720":{"position":[[0,7],[202,7]]},"722":{"position":[[0,7],[205,7]]},"724":{"position":[[0,7]]},"726":{"position":[[0,7]]},"729":{"position":[[0,7],[760,7]]},"731":{"position":[[0,7],[756,7]]},"733":{"position":[[0,7],[850,7]]},"735":{"position":[[0,7],[556,7]]},"737":{"position":[[0,7]]},"739":{"position":[[0,7]]},"741":{"position":[[0,7]]},"743":{"position":[[0,7]]},"745":{"position":[[0,7]]},"747":{"position":[[0,7],[750,7]]},"749":{"position":[[0,7]]},"751":{"position":[[0,7]]},"753":{"position":[[0,7]]},"756":{"position":[[0,7]]},"758":{"position":[[0,7]]},"760":{"position":[[0,7]]},"762":{"position":[[0,7]]},"764":{"position":[[0,7]]},"766":{"position":[[0,7]]},"768":{"position":[[0,7]]},"770":{"position":[[0,7]]},"773":{"position":[[0,7]]},"775":{"position":[[0,7]]},"777":{"position":[[0,7]]},"779":{"position":[[0,7]]},"781":{"position":[[0,7]]},"783":{"position":[[0,7]]},"785":{"position":[[0,7]]},"787":{"position":[[0,7]]},"789":{"position":[[0,7]]},"791":{"position":[[0,7]]},"793":{"position":[[0,7]]},"795":{"position":[[0,7]]},"797":{"position":[[0,7]]},"800":{"position":[[0,7]]},"802":{"position":[[0,7]]},"805":{"position":[[0,7]]},"807":{"position":[[0,7]]},"810":{"position":[[0,7]]},"813":{"position":[[0,7]]},"815":{"position":[[0,7]]},"817":{"position":[[0,7]]},"819":{"position":[[0,7]]}}}],["retag",{"_index":1962,"t":{"348":{"position":[[224,5]]}}}],["retain",{"_index":1107,"t":{"116":{"position":[[167,8]]},"118":{"position":[[273,9],[335,8],[2237,6]]},"135":{"position":[[976,6]]},"162":{"position":[[4847,6]]},"215":{"position":[[939,6]]},"486":{"position":[[86,9]]},"488":{"position":[[137,9]]},"490":{"position":[[136,9]]},"514":{"position":[[44,6]]},"533":{"position":[[599,6]]}}}],["retent",{"_index":1140,"t":{"118":{"position":[[2198,9],[4158,9],[4760,9],[4839,9],[4888,9],[4965,9]]},"135":{"position":[[933,9]]},"162":{"position":[[4803,9]]},"486":{"position":[[219,9]]}}}],["retriev",{"_index":917,"t":{"75":{"position":[[515,9]]},"215":{"position":[[246,9]]},"533":{"position":[[909,8]]}}}],["return",{"_index":1097,"t":{"112":{"position":[[2148,7]]},"114":{"position":[[1958,7]]},"116":{"position":[[1265,7]]},"579":{"position":[[1622,6],[2114,8]]},"585":{"position":[[383,8]]},"587":{"position":[[407,8]]},"589":{"position":[[361,8]]},"591":{"position":[[417,8]]},"593":{"position":[[272,8]]},"595":{"position":[[278,8]]},"604":{"position":[[386,8]]},"606":{"position":[[367,8]]},"610":{"position":[[647,8]]},"612":{"position":[[595,8]]},"614":{"position":[[464,8]]},"616":{"position":[[413,8]]},"618":{"position":[[426,8]]},"620":{"position":[[539,8]]},"622":{"position":[[500,8]]},"624":{"position":[[380,8]]},"626":{"position":[[573,8]]},"628":{"position":[[554,8]]},"630":{"position":[[450,8]]},"632":{"position":[[566,8]]},"634":{"position":[[431,8]]},"636":{"position":[[346,8]]},"646":{"position":[[521,8]]},"650":{"position":[[1752,6],[2281,8]]},"652":{"position":[[563,8]]},"654":{"position":[[479,8]]},"656":{"position":[[485,8]]},"667":{"position":[[372,8]]},"669":{"position":[[440,8]]},"671":{"position":[[525,8]]},"673":{"position":[[422,8]]},"677":{"position":[[352,8]]},"680":{"position":[[331,8]]},"682":{"position":[[405,8]]},"685":{"position":[[1646,6],[2160,8]]},"687":{"position":[[1535,6],[2073,8]]},"689":{"position":[[1560,6],[2086,8]]},"691":{"position":[[1712,6],[2226,8]]},"693":{"position":[[1538,6],[2076,8]]},"695":{"position":[[1570,6],[2109,8]]},"697":{"position":[[1669,6],[2163,8]]},"712":{"position":[[364,8]]},"714":{"position":[[453,8]]},"716":{"position":[[295,8]]},"718":{"position":[[316,8]]},"720":{"position":[[354,8]]},"722":{"position":[[249,8]]},"729":{"position":[[807,8]]},"731":{"position":[[815,8]]},"733":{"position":[[888,8]]},"735":{"position":[[636,8]]},"747":{"position":[[827,8]]}}}],["reus",{"_index":940,"t":{"75":{"position":[[1596,5]]},"110":{"position":[[2837,6]]},"352":{"position":[[111,6]]}}}],["reusabl",{"_index":1871,"t":{"319":{"position":[[328,8]]}}}],["revers",{"_index":2007,"t":{"360":{"position":[[302,7]]},"404":{"position":[[25,7]]}}}],["review",{"_index":2538,"t":{"508":{"position":[[122,6]]},"536":{"position":[[465,6]]},"705":{"position":[[26,6]]},"791":{"position":[[26,6]]}}}],["rewrit",{"_index":1942,"t":{"340":{"position":[[760,9],[800,9],[810,8],[1258,8]]},"805":{"position":[[39,7]]}}}],["rf",{"_index":1135,"t":{"118":{"position":[[1698,2]]}}}],["rfc",{"_index":1900,"t":{"326":{"position":[[1042,3]]}}}],["rhel9",{"_index":1981,"t":{"354":{"position":[[244,6]]}}}],["right",{"_index":2397,"t":{"476":{"position":[[124,5]]},"506":{"position":[[332,6],[506,6]]},"770":{"position":[[84,6]]}}}],["risk",{"_index":1847,"t":{"313":{"position":[[295,4]]},"705":{"position":[[288,4]]}}}],["rm",{"_index":1134,"t":{"118":{"position":[[1694,2]]}}}],["robin",{"_index":1512,"t":{"217":{"position":[[535,5]]}}}],["rogu",{"_index":2017,"t":{"360":{"position":[[1095,5]]}}}],["role",{"_index":618,"t":{"39":{"position":[[597,4],[615,5]]},"203":{"position":[[1631,5],[3079,5]]},"205":{"position":[[1116,5]]},"221":{"position":[[1734,5]]},"253":{"position":[[454,5]]},"374":{"position":[[240,5],[400,4]]},"376":{"position":[[38,5]]},"378":{"position":[[124,4],[222,5],[425,5],[500,5]]},"380":{"position":[[0,5],[147,4]]},"756":{"position":[[80,5],[131,4],[159,4],[242,4],[307,4]]},"760":{"position":[[90,5]]}}}],["role.kubernetes.io/control",{"_index":2612,"t":{"540":{"position":[[596,26],[944,26],[1501,26]]}}}],["role.yml",{"_index":1762,"t":{"291":{"position":[[289,8],[669,8]]},"297":{"position":[[413,8]]}}}],["rolebind",{"_index":2102,"t":{"398":{"position":[[3765,11],[3858,11],[3941,11]]},"468":{"position":[[5021,11],[5260,11],[5321,11],[5593,11],[5631,11]]}}}],["rolebinding.rbac.authorization.k8s.io/svclb",{"_index":2103,"t":{"398":{"position":[[3810,43]]}}}],["rolebinding.rbac.authorization.k8s.io/system",{"_index":2104,"t":{"398":{"position":[[3870,44]]}}}],["rolebindings.yaml",{"_index":1921,"t":{"332":{"position":[[650,17]]}}}],["roleref",{"_index":1765,"t":{"291":{"position":[[391,8]]},"468":{"position":[[4731,8],[5033,8],[5356,8],[5666,8]]}}}],["roles,clusterroles,rolebindings,clusterrolebind",{"_index":2095,"t":{"398":{"position":[[3336,51]]}}}],["rollout",{"_index":2607,"t":{"540":{"position":[[194,7]]}}}],["rooless",{"_index":558,"t":{"33":{"position":[[1031,7]]}}}],["root",{"_index":492,"t":{"29":{"position":[[131,4]]},"110":{"position":[[456,4],[519,4],[672,6],[1373,4],[1426,4],[1561,4],[1636,4],[1686,4],[1698,4],[1738,4],[1806,4],[2071,4],[2219,4],[2296,4],[2751,4]]},"112":{"position":[[543,4],[569,4],[858,4],[1299,4],[1427,4],[2355,4]]},"114":{"position":[[820,4],[1026,4]]},"139":{"position":[[257,5]]},"146":{"position":[[104,4]]},"162":{"position":[[1355,5]]},"168":{"position":[[506,4]]},"179":{"position":[[973,4],[1750,4],[2234,4],[2523,4]]},"189":{"position":[[1594,4]]},"336":{"position":[[349,4]]},"476":{"position":[[2630,4]]},"536":{"position":[[859,4]]},"604":{"position":[[402,4],[573,4],[616,4],[898,4],[1180,4],[1462,4],[1744,4],[2026,4],[2308,4]]},"606":{"position":[[383,4],[554,4],[597,4],[879,4],[1161,4],[1443,4],[1725,4],[2007,4],[2289,4]]},"624":{"position":[[396,4],[567,4],[610,4],[892,4],[1174,4],[1456,4],[1738,4],[2020,4],[2302,4]]},"667":{"position":[[1780,4]]},"669":{"position":[[1848,4]]},"671":{"position":[[1933,4]]},"673":{"position":[[172,4],[230,4],[362,5],[397,4],[1830,4]]},"677":{"position":[[368,4],[539,4],[582,4],[864,4],[1146,4],[1428,4],[1710,4],[1992,4],[2274,4]]}}}],["root:root",{"_index":2648,"t":{"561":{"position":[[148,9]]},"565":{"position":[[148,9]]},"569":{"position":[[148,9]]},"573":{"position":[[148,9]]},"577":{"position":[[148,9]]},"585":{"position":[[138,9],[347,11],[371,11],[399,9]]},"589":{"position":[[138,9],[338,11],[377,9]]},"593":{"position":[[138,9],[236,11],[260,11],[288,9]]},"595":{"position":[[141,9],[255,11],[294,9],[304,9],[314,9],[324,9],[334,9],[344,9],[354,9],[364,9],[374,9],[384,9],[394,9],[404,9],[414,9],[424,9],[434,9],[444,9],[454,9],[464,9],[474,9],[484,9],[494,9],[504,9],[514,9],[524,9],[534,9],[544,9],[554,9],[564,9],[574,9],[584,9],[594,9],[604,9],[614,9],[624,9],[634,9],[644,9],[654,9],[664,9],[674,9],[684,9],[694,9],[704,9],[714,9],[724,9],[734,9],[744,9],[754,9],[764,9],[774,9],[784,9],[794,9],[804,9],[814,9]]},"710":{"position":[[146,9]]},"714":{"position":[[136,9],[362,11],[469,9],[479,9]]},"718":{"position":[[136,9],[280,11],[304,11],[332,9],[342,9]]},"722":{"position":[[107,9],[213,11],[237,11],[265,9],[275,9]]},"726":{"position":[[130,9]]}}}],["root=partuuid=58b06195",{"_index":715,"t":{"50":{"position":[[368,22]]}}}],["root@serv",{"_index":1459,"t":{"203":{"position":[[1578,11]]}}}],["root@server1",{"_index":1480,"t":{"203":{"position":[[3027,12]]},"205":{"position":[[1064,12]]}}}],["rootfstype=ext4",{"_index":717,"t":{"50":{"position":[[394,15]]}}}],["rootless",{"_index":486,"t":{"29":{"position":[[39,8],[244,8]]},"31":{"position":[[19,8],[265,8],[718,9],[881,8],[912,8]]},"33":{"position":[[122,8],[715,8],[849,8]]},"35":{"position":[[0,8],[278,8],[700,8]]},"37":{"position":[[32,8],[100,8]]},"95":{"position":[[19,8],[32,8]]},"101":{"position":[[3286,8],[3314,8]]},"158":{"position":[[19,8],[32,8]]},"162":{"position":[[8605,8],[8633,8]]},"396":{"position":[[17,8]]}}}],["rootless.servic",{"_index":534,"t":{"33":{"position":[[209,16],[280,17],[339,16],[377,16],[424,17]]}}}],["rootlesskit",{"_index":560,"t":{"35":{"position":[[18,11],[137,11]]}}}],["rootwait",{"_index":720,"t":{"50":{"position":[[444,8]]}}}],["rotat",{"_index":145,"t":{"11":{"position":[[306,6]]},"13":{"position":[[230,8],[295,6]]},"106":{"position":[[3,6],[75,6],[126,6],[162,6],[244,7],[304,6],[375,8]]},"108":{"position":[[841,6],[898,6],[1381,6]]},"110":{"position":[[2866,6]]},"112":{"position":[[3,6],[58,6],[469,6],[594,8],[643,6],[1400,8],[2090,6],[2130,6]]},"114":{"position":[[3,6],[81,6],[493,8],[924,8],[1878,6],[1940,6]]},"116":{"position":[[95,8],[259,7],[327,6],[580,6],[1140,6],[1247,6]]},"122":{"position":[[200,8],[306,8]]},"124":{"position":[[35,6],[447,6],[474,6],[765,6],[1391,6],[1424,6]]},"128":{"position":[[252,8],[416,8],[534,8],[550,6],[869,8],[907,8],[963,7]]},"488":{"position":[[114,7]]},"490":{"position":[[113,7]]},"512":{"position":[[162,8]]},"749":{"position":[[325,6]]}}}],["rotatecertif",{"_index":2871,"t":{"749":{"position":[[98,18]]}}}],["rotatekubeletservercertificate=tru",{"_index":2799,"t":{"675":{"position":[[217,36]]}}}],["round",{"_index":1511,"t":{"217":{"position":[[529,5]]}}}],["roundrobin",{"_index":1435,"t":{"203":{"position":[[642,10]]}}}],["rout",{"_index":1264,"t":{"150":{"position":[[1513,7],[1766,7]]},"266":{"position":[[533,6],[550,5],[594,5],[659,5],[741,7],[786,6],[908,5]]},"303":{"position":[[1433,6]]},"309":{"position":[[1343,7],[1680,7]]},"313":{"position":[[75,5],[225,5]]},"319":{"position":[[534,9]]},"667":{"position":[[1617,6]]},"669":{"position":[[1685,6]]},"671":{"position":[[1770,6]]},"673":{"position":[[1667,6]]}}}],["router",{"_index":946,"t":{"77":{"position":[[442,6]]},"313":{"position":[[93,6]]},"406":{"position":[[140,6],[430,6],[683,6],[739,6]]}}}],["router'",{"_index":2119,"t":{"406":{"position":[[90,8]]}}}],["router.io/netpol",{"_index":862,"t":{"65":{"position":[[428,16],[476,16]]}}}],["routes=fals",{"_index":2796,"t":{"667":{"position":[[1578,12]]},"669":{"position":[[1646,12]]},"671":{"position":[[1731,12]]},"673":{"position":[[1628,12]]}}}],["routing=tru",{"_index":2753,"t":{"610":{"position":[[1288,12]]},"612":{"position":[[1236,12]]},"614":{"position":[[1105,12]]},"616":{"position":[[1054,12]]},"618":{"position":[[1067,12]]},"620":{"position":[[1180,12]]},"622":{"position":[[1141,12]]},"626":{"position":[[1214,12]]},"628":{"position":[[1195,12]]},"630":{"position":[[1091,12]]},"632":{"position":[[1207,12]]},"634":{"position":[[1072,12]]},"636":{"position":[[987,12]]},"646":{"position":[[1162,12]]},"652":{"position":[[1204,12]]},"654":{"position":[[1120,12]]},"656":{"position":[[1126,12]]},"729":{"position":[[1471,12]]},"731":{"position":[[1485,12]]},"733":{"position":[[1600,12]]}}}],["rpm",{"_index":752,"t":{"54":{"position":[[300,3],[321,3]]},"432":{"position":[[2085,4]]}}}],["rsa",{"_index":1106,"t":{"116":{"position":[[37,3]]}}}],["rtbnb",{"_index":282,"t":{"19":{"position":[[1006,5]]}}}],["rtbnb_kube",{"_index":350,"t":{"19":{"position":[[2579,10],[2739,10]]}}}],["rule",{"_index":650,"t":{"44":{"position":[[125,6]]},"46":{"position":[[140,5],[462,5],[580,5]]},"48":{"position":[[131,5],[343,5],[461,5]]},"65":{"position":[[896,6]]},"303":{"position":[[965,5]]},"307":{"position":[[1404,5]]},"406":{"position":[[298,5],[452,5]]},"468":{"position":[[1804,5],[1852,5],[1889,5],[1944,5],[2903,5],[2937,5],[2974,5],[3029,5],[3348,5],[3468,5],[3492,5],[3527,5],[3868,5],[3925,5],[3949,5],[3984,5],[4097,6],[4311,6],[4520,6]]},"472":{"position":[[771,6]]},"504":{"position":[[553,5]]},"542":{"position":[[365,6]]}}}],["run",{"_index":122,"t":{"8":{"position":[[81,3]]},"17":{"position":[[11,7]]},"19":{"position":[[841,7],[903,7],[1016,7],[1066,7],[1121,7],[1174,8]]},"27":{"position":[[98,3],[292,3],[442,7]]},"29":{"position":[[60,7]]},"31":{"position":[[11,7],[96,7],[183,3],[710,7]]},"33":{"position":[[642,3],[677,3],[724,3],[804,8],[832,3],[985,3]]},"37":{"position":[[0,3],[68,3]]},"41":{"position":[[154,7],[222,7]]},"52":{"position":[[26,3],[92,3],[396,3],[443,3],[468,3],[770,8]]},"67":{"position":[[235,7],[362,7],[468,3],[576,7]]},"71":{"position":[[143,3],[294,3],[493,3]]},"75":{"position":[[155,7]]},"77":{"position":[[118,3],[377,3],[604,3],[845,3],[991,3]]},"79":{"position":[[85,3]]},"95":{"position":[[28,3]]},"99":{"position":[[256,7]]},"101":{"position":[[165,3],[3310,3]]},"110":{"position":[[342,3],[1487,7],[1939,3]]},"112":{"position":[[1178,3],[1558,4]]},"114":{"position":[[1454,3]]},"116":{"position":[[624,3]]},"118":{"position":[[904,3],[1181,3],[3654,8],[3668,3],[4522,3]]},"124":{"position":[[339,7],[990,3],[1237,7]]},"126":{"position":[[273,7],[842,3],[1094,7]]},"130":{"position":[[86,3]]},"150":{"position":[[986,3],[1319,3]]},"154":{"position":[[222,7]]},"158":{"position":[[28,3],[238,8]]},"162":{"position":[[168,3],[6166,7],[8629,3]]},"185":{"position":[[15,3],[425,3]]},"201":{"position":[[30,7]]},"203":{"position":[[1340,3],[2499,3],[2557,3],[2690,4],[2790,3]]},"205":{"position":[[536,3],[594,3],[727,4],[827,3]]},"207":{"position":[[240,3],[370,3],[558,3]]},"213":{"position":[[131,7],[1402,4]]},"217":{"position":[[157,7]]},"219":{"position":[[159,3]]},"221":{"position":[[93,7],[732,3],[869,3]]},"235":{"position":[[56,3],[88,3],[156,7],[225,7],[711,4]]},"237":{"position":[[32,3]]},"243":{"position":[[154,3]]},"261":{"position":[[237,7]]},"263":{"position":[[107,8]]},"266":{"position":[[974,7]]},"268":{"position":[[683,3]]},"271":{"position":[[476,3]]},"277":{"position":[[586,7],[1924,7],[1984,7]]},"279":{"position":[[82,3],[145,3]]},"285":{"position":[[187,3]]},"307":{"position":[[566,7],[950,7],[1088,7]]},"309":{"position":[[849,3],[1152,3]]},"317":{"position":[[1155,7],[1234,4]]},"319":{"position":[[994,7]]},"332":{"position":[[830,7],[892,7],[946,7]]},"336":{"position":[[504,7]]},"350":{"position":[[112,3],[171,7]]},"360":{"position":[[404,4],[919,3]]},"370":{"position":[[86,3]]},"372":{"position":[[189,3]]},"374":{"position":[[49,3],[409,3]]},"386":{"position":[[37,4]]},"388":{"position":[[37,4]]},"392":{"position":[[128,7]]},"394":{"position":[[11,7]]},"396":{"position":[[0,7]]},"398":{"position":[[1445,7],[2126,7],[2331,3]]},"404":{"position":[[165,7]]},"410":{"position":[[387,4]]},"418":{"position":[[127,3]]},"422":{"position":[[200,3]]},"424":{"position":[[542,7]]},"428":{"position":[[211,4],[258,7],[1038,3]]},"432":{"position":[[1678,7],[1721,7],[2712,7]]},"436":{"position":[[197,3]]},"438":{"position":[[282,7]]},"440":{"position":[[631,7]]},"456":{"position":[[5,7]]},"458":{"position":[[132,7]]},"464":{"position":[[348,3]]},"466":{"position":[[482,4]]},"468":{"position":[[6469,3],[6610,3]]},"482":{"position":[[290,3]]},"514":{"position":[[177,7]]},"536":{"position":[[558,3],[594,3]]},"538":{"position":[[191,3]]},"542":{"position":[[72,7],[413,3],[456,4]]},"548":{"position":[[48,3],[138,7],[374,7],[434,7],[1162,3]]},"555":{"position":[[1788,7]]},"559":{"position":[[36,3]]},"561":{"position":[[36,3]]},"563":{"position":[[36,3]]},"565":{"position":[[36,3]]},"567":{"position":[[36,3]]},"569":{"position":[[36,3]]},"571":{"position":[[36,3]]},"573":{"position":[[36,3]]},"575":{"position":[[36,3]]},"577":{"position":[[36,3]]},"579":{"position":[[153,3],[361,7],[782,8],[1613,8]]},"581":{"position":[[163,3]]},"583":{"position":[[36,3]]},"585":{"position":[[26,3]]},"587":{"position":[[26,3]]},"589":{"position":[[26,3]]},"591":{"position":[[26,3]]},"593":{"position":[[26,3]]},"595":{"position":[[26,3]]},"597":{"position":[[26,3]]},"599":{"position":[[26,3]]},"602":{"position":[[245,8]]},"610":{"position":[[475,8]]},"612":{"position":[[458,8]]},"614":{"position":[[332,8]]},"616":{"position":[[298,8]]},"618":{"position":[[311,8]]},"620":{"position":[[402,8]]},"622":{"position":[[309,8]]},"626":{"position":[[375,8]]},"628":{"position":[[397,8]]},"630":{"position":[[293,8]]},"632":{"position":[[428,8]]},"634":{"position":[[289,8]]},"636":{"position":[[240,8]]},"646":{"position":[[370,8]]},"650":{"position":[[491,7],[912,8],[1743,8]]},"652":{"position":[[441,8]]},"654":{"position":[[372,8]]},"656":{"position":[[384,8]]},"658":{"position":[[426,8]]},"662":{"position":[[978,8]]},"665":{"position":[[327,8]]},"667":{"position":[[257,8]]},"669":{"position":[[277,8]]},"671":{"position":[[373,8]]},"673":{"position":[[310,8]]},"680":{"position":[[244,8]]},"682":{"position":[[254,8]]},"685":{"position":[[385,7],[806,8],[1637,8]]},"687":{"position":[[274,7],[695,8],[1526,8]]},"689":{"position":[[299,7],[720,8],[1551,8]]},"691":{"position":[[451,7],[872,8],[1703,8]]},"693":{"position":[[277,7],[698,8],[1529,8]]},"695":{"position":[[309,7],[730,8],[1561,8]]},"697":{"position":[[408,7],[829,8],[1660,8]]},"703":{"position":[[124,8]]},"708":{"position":[[36,3]]},"710":{"position":[[36,3]]},"712":{"position":[[26,3]]},"714":{"position":[[26,3]]},"716":{"position":[[26,3]]},"718":{"position":[[26,3]]},"720":{"position":[[26,3]]},"722":{"position":[[26,3]]},"724":{"position":[[36,3]]},"726":{"position":[[36,3]]},"729":{"position":[[544,8],[635,8]]},"731":{"position":[[530,8],[621,8]]},"733":{"position":[[586,8],[677,8]]},"735":{"position":[[494,8]]},"737":{"position":[[551,8]]},"747":{"position":[[712,8]]},"791":{"position":[[73,7]]}}}],["run/k3s/containerd",{"_index":2710,"t":{"604":{"position":[[551,19]]},"606":{"position":[[532,19]]},"624":{"position":[[545,19]]},"677":{"position":[[517,19]]}}}],["run/k3s/containerd/containerd.sock",{"_index":2709,"t":{"604":{"position":[[507,35],[862,35],[1144,35],[1426,35],[1708,35],[1990,35],[2272,35],[2554,35]]},"606":{"position":[[488,35],[843,35],[1125,35],[1407,35],[1689,35],[1971,35],[2253,35],[2535,35]]},"624":{"position":[[501,35],[856,35],[1138,35],[1420,35],[1702,35],[1984,35],[2266,35],[2548,35]]},"677":{"position":[[473,35],[828,35],[1110,35],[1392,35],[1674,35],[1956,35],[2238,35],[2520,35]]}}}],["runasani",{"_index":2343,"t":{"468":{"position":[[1858,10],[2943,10],[3354,8],[3474,8],[3498,8],[3533,8],[3874,8],[3931,8],[3955,8],[3990,8]]}}}],["runasus",{"_index":2340,"t":{"468":{"position":[[1793,10],[2892,10],[3457,10],[3914,10]]}}}],["runc",{"_index":2717,"t":{"604":{"position":[[758,4],[1040,4],[1322,4],[1604,4],[1886,4],[2168,4],[2450,4]]},"606":{"position":[[739,4],[1021,4],[1303,4],[1585,4],[1867,4],[2149,4],[2431,4]]},"624":{"position":[[752,4],[1034,4],[1316,4],[1598,4],[1880,4],[2162,4],[2444,4]]},"677":{"position":[[724,4],[1006,4],[1288,4],[1570,4],[1852,4],[2134,4],[2416,4]]}}}],["runnabl",{"_index":805,"t":{"59":{"position":[[829,8]]}}}],["runtim",{"_index":233,"t":{"19":{"position":[[72,8],[357,8]]},"25":{"position":[[65,7],[276,7],[339,7],[516,7],[675,8],[735,7],[884,7],[1448,7]]},"27":{"position":[[125,8]]},"56":{"position":[[432,9]]},"59":{"position":[[863,9]]},"67":{"position":[[495,8]]},"77":{"position":[[936,7]]},"89":{"position":[[37,7]]},"101":{"position":[[2112,7]]},"108":{"position":[[829,8]]},"162":{"position":[[7044,7]]},"261":{"position":[[104,8]]},"309":{"position":[[279,7]]},"428":{"position":[[777,7]]},"466":{"position":[[4,7]]},"476":{"position":[[3517,7],[4148,7]]},"735":{"position":[[1054,7],[2277,7]]},"747":{"position":[[1245,7],[2468,7]]}}}],["runtime=remot",{"_index":2470,"t":{"476":{"position":[[3582,14]]}}}],["runtimeclass",{"_index":429,"t":{"25":{"position":[[787,12],[978,12]]},"398":{"position":[[1915,15]]},"468":{"position":[[782,15]]}}}],["runtimeclassnam",{"_index":435,"t":{"25":{"position":[[903,17],[1145,17],[1625,17]]}}}],["runtimedefault",{"_index":2893,"t":{"815":{"position":[[179,14]]}}}],["ryn",{"_index":2122,"t":{"406":{"position":[[612,3]]}}}],["s",{"_index":257,"t":{"19":{"position":[[648,1]]},"83":{"position":[[192,1]]},"101":{"position":[[862,1]]},"162":{"position":[[3101,1]]},"203":{"position":[[1462,1],[2912,1]]},"205":{"position":[[949,1]]},"213":{"position":[[623,1]]},"215":{"position":[[435,1]]},"221":{"position":[[1215,1],[1483,1],[2204,1]]},"268":{"position":[[946,1]]},"277":{"position":[[820,1],[961,1],[1016,1],[1195,1],[1234,1],[1470,1],[1557,1],[1661,1],[1778,1]]},"285":{"position":[[333,1]]},"289":{"position":[[119,1],[122,1],[167,10]]},"297":{"position":[[167,1],[170,1],[215,10]]},"376":{"position":[[136,1]]},"378":{"position":[[292,1]]},"510":{"position":[[425,1]]},"548":{"position":[[870,1],[1085,1],[1274,1]]}}}],["s1",{"_index":1131,"t":{"118":{"position":[[1280,3],[1323,3],[1330,3],[1736,3]]},"124":{"position":[[1139,3],[1162,2],[1210,2],[1350,2],[1401,2],[1448,2],[1476,2],[1530,2],[1699,2],[1727,2]]},"126":{"position":[[949,3],[1019,2],[1067,2],[1207,2],[1272,2],[1379,2],[1426,2],[1454,2],[1519,2]]}}}],["s2",{"_index":1132,"t":{"118":{"position":[[1284,3],[1589,2],[1780,2]]},"124":{"position":[[1143,3],[1381,2],[1507,2],[1758,2]]},"126":{"position":[[953,3],[1238,2],[1485,2]]}}}],["s3",{"_index":956,"t":{"77":{"position":[[1286,3]]},"118":{"position":[[1292,3],[1596,3],[1787,3],[2579,2],[2692,2],[2712,2],[2920,2],[2990,2],[3010,2],[3020,2],[3032,2],[3055,2],[3070,2],[3102,2],[3121,2],[3149,2],[3186,2],[3200,2],[3221,2],[3235,2],[3256,2],[3266,2],[3288,2],[3298,2],[3367,2],[3377,2],[3440,3],[3466,2],[3473,2],[3504,2],[3538,2],[3619,3],[3751,2],[3810,2],[3846,2],[3885,2],[4433,2],[4568,3],[4601,2],[4608,2],[4639,2],[4673,2]]},"124":{"position":[[1147,3],[1388,2],[1514,2],[1765,2]]},"126":{"position":[[957,3],[1245,2],[1492,2]]},"135":{"position":[[1100,2],[1124,2],[1134,2],[1156,2],[1209,2],[1234,2],[1266,2],[1285,2],[1317,2],[1354,2],[1392,2],[1413,2],[1455,2],[1476,2],[1496,2],[1518,2],[1538,2],[1607,2],[1627,2],[1644,2],[1665,2],[1686,2],[1703,2]]},"162":{"position":[[5026,2],[5051,2],[5061,2],[5084,2],[5137,2],[5163,2],[5195,2],[5214,2],[5247,2],[5284,2],[5309,2],[5351,2],[5376,2],[5422,2],[5443,2],[5465,2],[5486,2],[5555,2],[5576,2],[5593,2],[5619,2],[5640,2],[5662,2]]}}}],["s3.amazonaws.com",{"_index":1222,"t":{"135":{"position":[[1182,19]]},"162":{"position":[[5110,19]]}}}],["s390x",{"_index":1973,"t":{"354":{"position":[[77,5]]}}}],["same",{"_index":393,"t":{"23":{"position":[[203,4]]},"31":{"position":[[942,4]]},"33":{"position":[[319,4]]},"69":{"position":[[180,4]]},"75":{"position":[[1119,4]]},"112":{"position":[[538,4],[1422,4]]},"118":{"position":[[4246,4]]},"124":{"position":[[320,4],[518,4],[710,4],[1218,4],[1456,4],[1707,4]]},"126":{"position":[[254,4],[576,4],[1075,4],[1434,4]]},"128":{"position":[[1123,4],[1378,4]]},"132":{"position":[[41,4]]},"176":{"position":[[35,4]]},"179":{"position":[[29,4]]},"191":{"position":[[341,4]]},"213":{"position":[[1056,4]]},"215":{"position":[[4,4],[593,4]]},"219":{"position":[[231,4]]},"221":{"position":[[521,4],[2125,4],[2309,4]]},"247":{"position":[[405,4]]},"266":{"position":[[217,4]]},"271":{"position":[[539,4]]},"277":{"position":[[687,4],[1343,4]]},"315":{"position":[[742,4]]},"319":{"position":[[1033,4]]},"352":{"position":[[26,4],[73,4]]},"410":{"position":[[725,4]]},"424":{"position":[[1287,5],[1444,4]]},"508":{"position":[[257,4]]},"540":{"position":[[1263,4],[1386,4]]},"548":{"position":[[86,4]]}}}],["sampl",{"_index":2373,"t":{"470":{"position":[[1170,6]]}}}],["sample:nbodi",{"_index":449,"t":{"25":{"position":[[1236,12]]}}}],["san",{"_index":1245,"t":{"144":{"position":[[350,3]]},"162":{"position":[[1117,3]]},"201":{"position":[[242,4]]},"217":{"position":[[891,3]]},"281":{"position":[[343,4],[530,3]]}}}],["san=<fixed_ip",{"_index":1496,"t":{"213":{"position":[[741,14]]},"221":{"position":[[1251,14],[1554,14]]}}}],["sandbox",{"_index":987,"t":{"89":{"position":[[293,7]]},"101":{"position":[[2362,7]]},"162":{"position":[[7294,7]]}}}],["satisfi",{"_index":2321,"t":{"468":{"position":[[1244,7]]},"476":{"position":[[163,8]]}}}],["save",{"_index":1141,"t":{"118":{"position":[[2296,4],[3429,4],[4174,4],[4223,4]]},"135":{"position":[[1039,4]]},"162":{"position":[[4911,4]]},"179":{"position":[[786,6]]},"307":{"position":[[1449,4],[1501,4]]},"406":{"position":[[565,4],[663,4],[719,4]]}}}],["scale",{"_index":1507,"t":{"217":{"position":[[203,7]]},"358":{"position":[[22,5]]},"454":{"position":[[598,7]]}}}],["scan",{"_index":2079,"t":{"398":{"position":[[1462,5]]},"579":{"position":[[1662,4]]},"650":{"position":[[1792,4]]},"685":{"position":[[1686,4]]},"687":{"position":[[1575,4]]},"689":{"position":[[1600,4]]},"691":{"position":[[1752,4]]},"693":{"position":[[1578,4]]},"695":{"position":[[1610,4]]},"697":{"position":[[1709,4]]}}}],["scenario",{"_index":2643,"t":{"555":{"position":[[1906,9]]}}}],["schedul",{"_index":945,"t":{"77":{"position":[[182,10]]},"106":{"position":[[423,10]]},"118":{"position":[[2072,8],[2759,9]]},"135":{"position":[[803,8]]},"154":{"position":[[74,9],[111,9]]},"156":{"position":[[144,9],[189,9]]},"162":{"position":[[3685,9],[3738,9],[4667,8],[5979,9],[6029,9]]},"213":{"position":[[1265,11]]},"219":{"position":[[29,11]]},"336":{"position":[[427,11]]},"374":{"position":[[128,10]]},"376":{"position":[[221,9]]},"380":{"position":[[256,9]]},"382":{"position":[[330,10]]},"454":{"position":[[143,9]]},"476":{"position":[[2852,9]]},"536":{"position":[[496,9]]},"587":{"position":[[142,9]]},"589":{"position":[[148,9]]},"652":{"position":[[2872,9],[3118,9]]},"680":{"position":[[35,9],[258,10],[464,9],[710,9]]},"682":{"position":[[35,9],[268,10],[538,9],[784,9]]}}}],["scheduler.yaml",{"_index":2650,"t":{"567":{"position":[[183,14]]},"569":{"position":[[189,14]]},"680":{"position":[[99,14]]},"682":{"position":[[99,14]]}}}],["scope",{"_index":559,"t":{"33":{"position":[[1063,6]]},"434":{"position":[[661,5]]}}}],["score",{"_index":2644,"t":{"555":{"position":[[1962,7]]}}}],["script",{"_index":184,"t":{"17":{"position":[[291,6]]},"19":{"position":[[472,7]]},"41":{"position":[[17,6],[437,7]]},"54":{"position":[[254,6],[737,6]]},"77":{"position":[[1669,7]]},"110":{"position":[[187,6],[325,6],[549,6],[1295,7],[1399,7],[1499,7],[1538,6],[1877,6],[2147,7],[2329,6],[2734,6]]},"112":{"position":[[885,7],[933,6],[1135,6],[1375,7]]},"114":{"position":[[1165,7],[1184,6],[1359,6],[1558,6],[1818,6]]},"203":{"position":[[908,6]]},"266":{"position":[[374,6],[414,6],[990,6],[1092,6]]},"268":{"position":[[700,6]]},"271":{"position":[[388,6],[484,6]]},"277":{"position":[[68,6],[1944,7],[2004,7],[2116,7],[2190,7],[2303,7]]},"279":{"position":[[28,6],[129,7]]},"285":{"position":[[177,6]]},"384":{"position":[[87,7],[270,7],[280,6]]},"406":{"position":[[528,7]]},"428":{"position":[[29,6],[129,6],[1059,6]]},"430":{"position":[[59,7]]},"432":{"position":[[68,6],[1041,6]]},"510":{"position":[[476,7]]},"542":{"position":[[198,6],[230,6],[429,6]]},"544":{"position":[[46,7]]},"546":{"position":[[40,6]]},"548":{"position":[[69,6],[158,7],[275,6],[394,7],[454,7],[566,7],[640,7],[753,7]]},"552":{"position":[[48,6]]},"579":{"position":[[266,7],[315,6]]},"650":{"position":[[396,7],[445,6]]},"685":{"position":[[290,7],[339,6]]},"687":{"position":[[179,7],[228,6]]},"689":{"position":[[204,7],[253,6]]},"691":{"position":[[356,7],[405,6]]},"693":{"position":[[182,7],[231,6]]},"695":{"position":[[214,7],[263,6]]},"697":{"position":[[313,7],[362,6]]}}}],["sd",{"_index":1519,"t":{"221":{"position":[[106,2]]},"358":{"position":[[700,2],[924,2]]}}}],["sdxc",{"_index":2267,"t":{"442":{"position":[[213,4]]}}}],["seamless",{"_index":241,"t":{"19":{"position":[[268,8]]}}}],["search",{"_index":1571,"t":{"243":{"position":[[205,6]]}}}],["seccomp",{"_index":2891,"t":{"815":{"position":[[75,7]]}}}],["seccomp.security.alpha.kubernetes.io/allowedprofilenam",{"_index":2351,"t":{"468":{"position":[[3213,57],[3651,57]]}}}],["seccompprofil",{"_index":2892,"t":{"815":{"position":[[157,15]]}}}],["second",{"_index":168,"t":{"15":{"position":[[163,6]]},"124":{"position":[[582,7],[1572,7]]},"179":{"position":[[2082,6]]},"221":{"position":[[1366,6],[1648,6]]},"247":{"position":[[1775,7]]},"492":{"position":[[247,7],[414,8],[646,7]]}}}],["secret",{"_index":922,"t":{"75":{"position":[[898,6],[1069,8],[1148,7],[1526,7],[1656,8]]},"77":{"position":[[1364,7],[1405,7],[1459,7]]},"97":{"position":[[92,6]]},"118":{"position":[[3224,6],[3238,6],[3541,6],[3556,6],[3888,6],[3903,6],[4676,6],[4691,6]]},"120":{"position":[[22,7],[76,7]]},"122":{"position":[[66,7],[154,7],[251,7]]},"124":{"position":[[42,7],[131,7],[259,7],[458,7],[570,7],[615,7],[666,7],[772,7],[998,7],[1066,7],[1169,7],[1408,7],[1560,7],[1605,7],[1656,7]]},"126":{"position":[[64,7],[89,7],[136,7],[193,7],[406,7],[460,7],[516,7],[616,7],[693,7],[719,7],[850,7],[972,7],[1026,7],[1279,7],[1333,7],[1386,7],[1526,7]]},"128":{"position":[[4,7],[105,7],[194,7],[476,7],[807,7],[1510,7],[1629,7],[1704,8]]},"132":{"position":[[492,7]]},"135":{"position":[[1416,6],[1458,6]]},"137":{"position":[[79,6],[248,6],[379,6]]},"148":{"position":[[27,7],[59,6]]},"160":{"position":[[128,6]]},"162":{"position":[[2740,6],[2914,6],[3053,6],[5354,6],[5379,6],[8480,7],[8506,6]]},"174":{"position":[[635,7]]},"179":{"position":[[800,6],[2104,7]]},"215":{"position":[[899,7]]},"221":{"position":[[1113,6],[1423,7],[2615,7]]},"285":{"position":[[134,8],[584,6]]},"293":{"position":[[147,6]]},"384":{"position":[[516,6]]},"398":{"position":[[647,7]]},"468":{"position":[[1629,8],[2770,8]]},"474":{"position":[[211,7],[808,7]]},"496":{"position":[[349,7],[392,7]]},"498":{"position":[[392,7],[435,7]]},"510":{"position":[[22,7],[101,7],[304,7],[438,7],[689,9],[764,9]]},"512":{"position":[[28,7],[116,7],[213,7],[255,7]]},"705":{"position":[[141,7],[231,8]]},"758":{"position":[[79,6]]},"805":{"position":[[72,7],[93,6]]},"807":{"position":[[39,7],[114,7]]}}}],["secret/token",{"_index":1229,"t":{"137":{"position":[[192,12]]}}}],["secretbox",{"_index":2523,"t":{"498":{"position":[[225,11]]},"660":{"position":[[137,9]]}}}],["section",{"_index":115,"t":{"8":{"position":[[5,7]]},"79":{"position":[[8,8]]},"118":{"position":[[50,8]]},"128":{"position":[[746,7]]},"130":{"position":[[8,8]]},"199":{"position":[[5,7]]},"207":{"position":[[5,7],[751,8]]},"213":{"position":[[905,7]]},"251":{"position":[[361,7]]},"253":{"position":[[5,7]]},"259":{"position":[[160,7]]},"263":{"position":[[359,7]]},"307":{"position":[[432,8],[815,8]]},"326":{"position":[[270,7]]},"334":{"position":[[86,7]]},"336":{"position":[[775,7]]},"338":{"position":[[30,9]]},"342":{"position":[[12,7]]},"426":{"position":[[89,7],[224,8]]},"430":{"position":[[5,7]]},"434":{"position":[[5,7]]},"444":{"position":[[5,7]]},"452":{"position":[[5,7]]},"458":{"position":[[5,7],[95,9]]},"460":{"position":[[1014,8],[1040,7]]},"462":{"position":[[135,8]]},"466":{"position":[[183,8]]},"468":{"position":[[1288,7],[2413,8]]},"555":{"position":[[684,7],[1371,7]]},"797":{"position":[[156,9]]}}}],["secur",{"_index":48,"t":{"4":{"position":[[317,6]]},"35":{"position":[[1025,8]]},"112":{"position":[[716,6],[2410,6]]},"114":{"position":[[556,6],[2165,6]]},"135":{"position":[[241,6],[361,6],[469,6]]},"162":{"position":[[4059,6],[4185,6],[4302,6]]},"164":{"position":[[19,6]]},"166":{"position":[[38,6],[66,6]]},"168":{"position":[[4,6],[708,6]]},"174":{"position":[[186,6]]},"176":{"position":[[395,6]]},"179":{"position":[[676,6]]},"187":{"position":[[749,6]]},"295":{"position":[[42,6]]},"398":{"position":[[64,8],[1453,8],[2190,8]]},"458":{"position":[[52,8]]},"460":{"position":[[216,8],[252,8]]},"466":{"position":[[82,8],[233,8]]},"468":{"position":[[64,8],[111,9],[880,8],[925,9]]},"476":{"position":[[1537,6],[2699,6],[3023,6]]},"482":{"position":[[83,8],[344,8],[420,8]]},"484":{"position":[[106,8]]},"494":{"position":[[447,8]]},"555":{"position":[[50,8],[243,8],[365,8],[816,8]]},"579":{"position":[[878,9],[1007,9],[1205,9],[1332,9]]},"610":{"position":[[2342,6]]},"612":{"position":[[2290,6]]},"614":{"position":[[2159,6]]},"616":{"position":[[2108,6]]},"618":{"position":[[2121,6]]},"620":{"position":[[2234,6]]},"622":{"position":[[2195,6]]},"626":{"position":[[2268,6]]},"628":{"position":[[2249,6]]},"630":{"position":[[2145,6]]},"632":{"position":[[2261,6]]},"634":{"position":[[165,6],[332,7],[366,6],[403,6],[2126,6]]},"636":{"position":[[2041,6]]},"646":{"position":[[2216,6]]},"650":{"position":[[1008,9],[1137,9],[1335,9],[1462,9]]},"652":{"position":[[2258,6],[3215,6]]},"654":{"position":[[2174,6]]},"656":{"position":[[2180,6]]},"667":{"position":[[1841,6]]},"669":{"position":[[1909,6]]},"671":{"position":[[1994,6]]},"673":{"position":[[1891,6]]},"680":{"position":[[807,6]]},"682":{"position":[[881,6]]},"685":{"position":[[902,9],[1031,9],[1229,9],[1356,9]]},"687":{"position":[[791,9],[920,9],[1118,9],[1245,9]]},"689":{"position":[[816,9],[945,9],[1143,9],[1270,9]]},"691":{"position":[[968,9],[1097,9],[1295,9],[1422,9]]},"693":{"position":[[794,9],[923,9],[1121,9],[1248,9]]},"695":{"position":[[826,9],[955,9],[1153,9],[1280,9]]},"697":{"position":[[925,9],[1054,9],[1252,9],[1379,9]]},"729":{"position":[[2525,6]]},"731":{"position":[[2539,6]]},"733":{"position":[[2654,6]]},"773":{"position":[[49,8]]},"817":{"position":[[170,8]]}}}],["security.admission.config.k8s.io/v1beta1",{"_index":2084,"t":{"398":{"position":[[1673,40]]},"468":{"position":[[540,40]]}}}],["security.kubernetes.io/audit",{"_index":2088,"t":{"398":{"position":[[2577,29],[2622,28]]}}}],["security.kubernetes.io/enforc",{"_index":2086,"t":{"398":{"position":[[2353,31],[2400,30]]}}}],["security.kubernetes.io/warn",{"_index":2089,"t":{"398":{"position":[[2670,28],[2714,27]]}}}],["securitycontext",{"_index":2889,"t":{"815":{"position":[[30,15],[140,16]]},"817":{"position":[[72,16],[127,17]]}}}],["securitycontext.windowsoptions.hostprocess",{"_index":2887,"t":{"793":{"position":[[147,43]]}}}],["securitycontextdeni",{"_index":2767,"t":{"626":{"position":[[201,20],[495,21]]}}}],["sed",{"_index":1757,"t":{"289":{"position":[[160,3]]},"297":{"position":[[208,3]]}}}],["see",{"_index":144,"t":{"11":{"position":[[282,3]]},"13":{"position":[[271,3]]},"15":{"position":[[319,3]]},"23":{"position":[[371,3]]},"29":{"position":[[191,3]]},"31":{"position":[[982,3]]},"33":{"position":[[29,3]]},"37":{"position":[[112,3],[131,3]]},"39":{"position":[[891,3]]},"44":{"position":[[200,3]]},"46":{"position":[[450,3]]},"48":{"position":[[331,3]]},"50":{"position":[[78,3]]},"52":{"position":[[253,3]]},"67":{"position":[[513,3]]},"77":{"position":[[304,3],[530,3],[1142,3],[1290,3],[1447,3],[1560,3]]},"79":{"position":[[271,3]]},"108":{"position":[[131,3]]},"114":{"position":[[1810,3]]},"116":{"position":[[1189,3]]},"120":{"position":[[72,3]]},"128":{"position":[[1766,3]]},"130":{"position":[[309,3]]},"154":{"position":[[33,3]]},"158":{"position":[[234,3]]},"174":{"position":[[1180,3],[1268,3]]},"185":{"position":[[1049,3],[1381,3]]},"187":{"position":[[1449,3]]},"189":{"position":[[493,3],[1069,3]]},"197":{"position":[[0,3]]},"199":{"position":[[419,3]]},"203":{"position":[[167,3],[317,3],[2209,3]]},"205":{"position":[[246,3]]},"211":{"position":[[69,3]]},"213":{"position":[[65,3],[1187,3],[1708,3]]},"217":{"position":[[577,3]]},"221":{"position":[[1635,3]]},"227":{"position":[[153,3]]},"235":{"position":[[982,3]]},"237":{"position":[[51,3]]},"239":{"position":[[50,3]]},"277":{"position":[[1862,3]]},"279":{"position":[[846,3],[922,3],[991,3],[1439,3]]},"295":{"position":[[332,3]]},"303":{"position":[[582,3]]},"307":{"position":[[657,3],[1042,3]]},"326":{"position":[[243,3]]},"336":{"position":[[143,3]]},"362":{"position":[[560,3]]},"372":{"position":[[81,3]]},"384":{"position":[[535,3]]},"394":{"position":[[244,3]]},"404":{"position":[[501,3],[894,3]]},"512":{"position":[[243,3]]},"536":{"position":[[337,3],[1632,3]]},"546":{"position":[[820,3]]},"689":{"position":[[2284,3],[2524,3],[2764,3]]},"695":{"position":[[2329,3]]}}}],["seed",{"_index":916,"t":{"75":{"position":[[422,6]]}}}],["seen",{"_index":1884,"t":{"322":{"position":[[458,4]]}}}],["segreg",{"_index":2895,"t":{"819":{"position":[[86,11]]}}}],["select",{"_index":584,"t":{"35":{"position":[[688,7]]},"185":{"position":[[220,6],[1206,8]]},"378":{"position":[[416,8]]},"400":{"position":[[219,10]]},"416":{"position":[[3,6]]},"536":{"position":[[539,9]]},"540":{"position":[[1473,7],[1612,6]]},"546":{"position":[[604,6]]}}}],["selector",{"_index":1208,"t":{"132":{"position":[[416,8]]},"150":{"position":[[828,8]]},"162":{"position":[[2276,8]]},"309":{"position":[[577,8],[612,8],[672,8]]},"536":{"position":[[327,9]]},"540":{"position":[[1459,8],[1598,8]]},"610":{"position":[[1144,8],[1204,8]]},"612":{"position":[[1092,8],[1152,8]]},"614":{"position":[[961,8],[1021,8]]},"616":{"position":[[910,8],[970,8]]},"618":{"position":[[923,8],[983,8]]},"620":{"position":[[1036,8],[1096,8]]},"622":{"position":[[997,8],[1057,8]]},"626":{"position":[[1070,8],[1130,8]]},"628":{"position":[[1051,8],[1111,8]]},"630":{"position":[[947,8],[1007,8]]},"632":{"position":[[1063,8],[1123,8]]},"634":{"position":[[928,8],[988,8]]},"636":{"position":[[843,8],[903,8]]},"646":{"position":[[1018,8],[1078,8]]},"652":{"position":[[1060,8],[1120,8]]},"654":{"position":[[976,8],[1036,8]]},"656":{"position":[[982,8],[1042,8]]},"729":{"position":[[1327,8],[1387,8]]},"731":{"position":[[1341,8],[1401,8]]},"733":{"position":[[1456,8],[1516,8]]}}}],["self",{"_index":130,"t":{"11":{"position":[[14,4],[253,4]]},"108":{"position":[[225,4]]},"114":{"position":[[28,4],[464,4],[862,4],[945,4],[1386,4]]},"168":{"position":[[323,4]]},"174":{"position":[[1089,4]]},"458":{"position":[[251,4]]},"508":{"position":[[147,4]]}}}],["selinux",{"_index":750,"t":{"54":{"position":[[86,7],[161,7],[292,7],[581,7],[589,7],[685,7]]},"56":{"position":[[12,8],[35,7],[151,8],[197,7],[358,7],[397,7],[461,7],[500,7]]},"87":{"position":[[385,7],[412,7]]},"101":{"position":[[1631,7],[1659,7]]},"162":{"position":[[8733,7],[8761,7]]},"432":{"position":[[1968,7]]},"468":{"position":[[1843,8],[2928,8],[3483,8],[3940,8]]}}}],["send",{"_index":1278,"t":{"166":{"position":[[185,7]]}}}],["sensit",{"_index":1386,"t":{"187":{"position":[[1673,9]]},"472":{"position":[[376,9]]},"496":{"position":[[236,9]]},"705":{"position":[[304,9]]}}}],["sent",{"_index":846,"t":{"65":{"position":[[65,4],[969,4]]},"235":{"position":[[124,4],[261,4]]}}}],["sep",{"_index":2736,"t":{"610":{"position":[[663,3]]},"612":{"position":[[611,3]]},"614":{"position":[[480,3]]},"616":{"position":[[429,3]]},"618":{"position":[[442,3]]},"620":{"position":[[555,3]]},"622":{"position":[[516,3]]},"626":{"position":[[589,3]]},"628":{"position":[[570,3]]},"630":{"position":[[466,3]]},"632":{"position":[[582,3]]},"634":{"position":[[447,3]]},"636":{"position":[[362,3]]},"646":{"position":[[537,3]]},"652":{"position":[[579,3],[2755,3]]},"654":{"position":[[495,3]]},"656":{"position":[[501,3]]},"667":{"position":[[388,3]]},"669":{"position":[[456,3]]},"671":{"position":[[541,3]]},"673":{"position":[[438,3]]},"680":{"position":[[347,3]]},"682":{"position":[[421,3]]},"729":{"position":[[846,3]]},"731":{"position":[[860,3]]},"733":{"position":[[975,3]]},"735":{"position":[[652,3],[1875,3]]},"747":{"position":[[843,3],[2066,3]]}}}],["separ",{"_index":463,"t":{"25":{"position":[[1561,11]]},"50":{"position":[[570,8]]},"81":{"position":[[97,9]]},"101":{"position":[[487,9]]},"112":{"position":[[376,8]]},"114":{"position":[[399,8]]},"116":{"position":[[544,8]]},"142":{"position":[[128,9]]},"162":{"position":[[498,9]]},"189":{"position":[[1924,9]]},"247":{"position":[[484,9]]},"326":{"position":[[173,10]]},"330":{"position":[[510,10]]},"374":{"position":[[252,8]]},"410":{"position":[[627,8]]}}}],["sequenc",{"_index":2501,"t":{"484":{"position":[[169,8]]}}}],["serial",{"_index":2486,"t":{"476":{"position":[[4188,9]]},"735":{"position":[[1713,9],[2936,9]]},"747":{"position":[[1904,9],[3127,9]]}}}],["serv",{"_index":905,"t":{"71":{"position":[[265,5],[464,5]]},"187":{"position":[[808,6]]},"207":{"position":[[341,5]]},"221":{"position":[[703,5]]},"667":{"position":[[1230,7],[1320,7]]},"669":{"position":[[1298,7],[1388,7]]},"671":{"position":[[1383,7],[1473,7]]},"673":{"position":[[1280,7],[1370,7]]}}}],["server",{"_index":137,"t":{"11":{"position":[[94,6]]},"13":{"position":[[15,6],[250,6]]},"15":{"position":[[52,7]]},"19":{"position":[[875,6],[2316,7],[2388,6]]},"21":{"position":[[49,8]]},"25":{"position":[[398,6]]},"27":{"position":[[83,7],[460,7]]},"29":{"position":[[72,7]]},"33":{"position":[[840,6],[1022,6]]},"52":{"position":[[408,6],[500,6],[526,6],[583,6],[869,6]]},"56":{"position":[[66,7]]},"61":{"position":[[73,6],[95,6]]},"67":{"position":[[64,6],[117,6],[191,8],[202,6],[251,6],[449,7],[594,8]]},"69":{"position":[[79,6],[185,6],[275,6]]},"71":{"position":[[7,6],[242,6],[414,6],[441,6]]},"73":{"position":[[25,6],[251,6]]},"75":{"position":[[456,6],[723,7],[829,8],[868,6],[1002,6],[1745,7]]},"77":{"position":[[111,6],[128,6],[316,6]]},"79":{"position":[[72,7],[158,8]]},"83":{"position":[[177,6],[208,6]]},"87":{"position":[[439,6]]},"101":{"position":[[847,6],[880,6],[1701,6]]},"104":{"position":[[15,6]]},"106":{"position":[[21,6],[395,7],[454,7]]},"108":{"position":[[281,6],[509,6],[650,6],[670,6]]},"110":{"position":[[95,6],[825,6],[839,6]]},"112":{"position":[[740,8],[2281,7]]},"114":{"position":[[2091,7],[2195,6]]},"116":{"position":[[1375,7]]},"118":{"position":[[879,6],[999,6],[1271,8],[1431,6],[2823,6],[3700,6]]},"124":{"position":[[7,6],[78,6],[108,6],[308,6],[506,6],[964,6],[1047,7],[1108,7]]},"126":{"position":[[7,6],[50,6],[242,6],[564,6],[816,6],[899,7]]},"128":{"position":[[175,6],[274,6],[461,8],[557,6],[1027,6],[1104,7],[1208,7],[1424,7]]},"130":{"position":[[55,7],[73,7],[196,8]]},"132":{"position":[[59,7],[115,7]]},"137":{"position":[[101,6],[299,7],[388,6],[409,6]]},"150":{"position":[[978,7],[1306,7]]},"158":{"position":[[257,7]]},"162":{"position":[[159,6],[183,6],[201,6],[1222,6],[2762,6],[2965,7],[3086,6],[3119,6],[5961,7],[8803,6]]},"168":{"position":[[243,6],[291,6],[813,6],[950,6],[1172,6],[1230,6]]},"170":{"position":[[212,7]]},"172":{"position":[[45,6],[195,6]]},"174":{"position":[[48,6],[114,6],[205,6],[243,6],[368,6],[483,6],[973,6],[1064,6]]},"176":{"position":[[47,6],[192,7],[250,6],[469,6]]},"179":{"position":[[282,6],[327,6],[409,6],[450,6],[1007,6],[1784,6],[2268,6],[2557,6]]},"183":{"position":[[124,6],[169,7]]},"185":{"position":[[871,8],[1161,8],[1497,8]]},"189":{"position":[[592,6],[1408,6]]},"191":{"position":[[164,6]]},"199":{"position":[[115,6],[590,7]]},"201":{"position":[[159,6],[297,6],[319,6],[341,6]]},"203":{"position":[[661,6],[691,6],[698,6],[730,6],[737,6],[769,6],[776,6],[1474,6],[1536,6],[1762,6],[1822,6],[1882,6],[2369,6],[2394,6],[2419,6],[2446,6],[2924,6],[2985,6],[3211,6],[3271,6],[3331,6]]},"205":{"position":[[406,6],[431,6],[456,6],[483,6],[961,6],[1022,6],[1248,6],[1308,6],[1368,6]]},"207":{"position":[[104,6],[318,6],[485,6]]},"213":{"position":[[25,6],[147,6],[516,6],[627,6],[989,6],[1102,6],[1244,6],[1588,6],[1610,6],[1717,6]]},"215":{"position":[[66,6],[147,6],[265,6],[352,6],[439,6],[605,6]]},"217":{"position":[[82,6],[315,6],[388,6],[869,6]]},"219":{"position":[[12,6],[271,6],[368,6],[470,6]]},"221":{"position":[[184,6],[247,8],[680,6],[1011,6],[1139,7],[1219,6],[1349,7],[1383,7],[1487,6],[1498,6],[1665,7],[1979,7],[2008,6],[2043,6],[2143,8],[2216,6],[2321,6]]},"223":{"position":[[175,6],[456,7]]},"229":{"position":[[17,6]]},"241":{"position":[[66,7],[132,8]]},"247":{"position":[[1332,7]]},"253":{"position":[[447,6],[523,8]]},"268":{"position":[[35,7],[70,6],[150,7],[189,6],[433,6],[950,6]]},"275":{"position":[[169,6]]},"277":{"position":[[718,6],[1020,6],[1052,6],[1415,6],[1563,6]]},"279":{"position":[[630,6],[659,6],[753,6],[838,7],[858,6],[1138,6],[1284,6],[1378,6],[1447,6],[1560,6]]},"281":{"position":[[280,6],[482,6]]},"285":{"position":[[439,6],[487,6]]},"303":{"position":[[213,6],[256,7],[819,7]]},"305":{"position":[[617,6],[939,8]]},"309":{"position":[[15,7],[647,7],[841,7],[1139,7]]},"311":{"position":[[369,7],[767,6]]},"315":{"position":[[591,6],[717,7]]},"317":{"position":[[337,8],[563,6]]},"322":{"position":[[3,6]]},"324":{"position":[[149,7]]},"326":{"position":[[1325,6],[1393,7],[1579,7]]},"332":{"position":[[864,6]]},"336":{"position":[[410,6],[479,6],[594,6]]},"342":{"position":[[425,6]]},"358":{"position":[[289,6],[325,6],[415,6]]},"360":{"position":[[8,6],[373,6],[589,7],[718,6]]},"362":{"position":[[59,7],[67,7],[131,7],[173,6]]},"366":{"position":[[95,7]]},"370":{"position":[[175,6]]},"374":{"position":[[17,6],[364,7]]},"376":{"position":[[12,6],[140,6],[389,6]]},"378":{"position":[[56,6],[187,6],[296,6],[336,6],[398,6],[522,6],[565,6]]},"386":{"position":[[24,6]]},"402":{"position":[[37,6],[82,7]]},"404":{"position":[[472,7],[1120,7]]},"406":{"position":[[222,6]]},"418":{"position":[[36,7]]},"420":{"position":[[510,7]]},"424":{"position":[[343,6]]},"428":{"position":[[648,6],[867,6],[1351,7],[1400,6],[1529,6]]},"432":{"position":[[1558,9],[1695,6]]},"434":{"position":[[219,6],[445,6],[792,6]]},"436":{"position":[[222,6]]},"440":{"position":[[492,6],[507,6]]},"446":{"position":[[70,6]]},"448":{"position":[[65,6],[115,7]]},"452":{"position":[[57,6]]},"454":{"position":[[4,6],[111,7]]},"456":{"position":[[41,6],[221,6]]},"466":{"position":[[134,6]]},"468":{"position":[[179,7],[993,7]]},"470":{"position":[[931,6],[1379,6],[1458,6],[2062,6],[2141,6]]},"472":{"position":[[84,7],[677,6],[855,6],[1195,6]]},"480":{"position":[[569,7]]},"482":{"position":[[668,7]]},"484":{"position":[[88,6],[549,7]]},"486":{"position":[[389,7]]},"488":{"position":[[564,7]]},"490":{"position":[[550,7]]},"492":{"position":[[132,6],[491,6],[774,7]]},"494":{"position":[[567,7]]},"500":{"position":[[641,7]]},"504":{"position":[[692,7]]},"510":{"position":[[74,7],[356,6],[429,6]]},"533":{"position":[[408,6],[530,7],[943,6]]},"540":{"position":[[70,6],[408,6],[480,6],[1027,6],[1404,6],[1424,6],[1737,6]]},"542":{"position":[[443,6]]},"544":{"position":[[144,6]]},"552":{"position":[[98,7],[222,7]]},"579":{"position":[[38,6]]},"581":{"position":[[48,6]]},"602":{"position":[[39,6]]},"604":{"position":[[125,6]]},"606":{"position":[[39,6]]},"608":{"position":[[49,6]]},"610":{"position":[[143,6]]},"612":{"position":[[146,6]]},"614":{"position":[[39,6]]},"616":{"position":[[39,6]]},"618":{"position":[[39,6]]},"620":{"position":[[133,6]]},"622":{"position":[[39,6]]},"624":{"position":[[39,6]]},"626":{"position":[[39,6]]},"628":{"position":[[129,6]]},"630":{"position":[[39,6]]},"632":{"position":[[132,6]]},"634":{"position":[[39,6]]},"636":{"position":[[39,6]]},"638":{"position":[[49,6]]},"640":{"position":[[49,6]]},"642":{"position":[[49,6]]},"644":{"position":[[49,6]]},"646":{"position":[[39,6]]},"648":{"position":[[49,6]]},"650":{"position":[[143,6]]},"652":{"position":[[129,6]]},"654":{"position":[[129,6]]},"656":{"position":[[143,6]]},"658":{"position":[[120,6]]},"662":{"position":[[39,6]]},"691":{"position":[[2328,6],[2398,6]]},"764":{"position":[[137,7]]}}}],["server'",{"_index":1297,"t":{"168":{"position":[[1203,8]]},"454":{"position":[[566,8],[701,8]]}}}],["server/cli",{"_index":2186,"t":{"430":{"position":[[67,13]]}}}],["server1",{"_index":1531,"t":{"221":{"position":[[1752,7]]}}}],["server1>:6443",{"_index":1530,"t":{"221":{"position":[[1532,13]]}}}],["server2",{"_index":1534,"t":{"221":{"position":[[1803,7]]}}}],["server3",{"_index":1536,"t":{"221":{"position":[[1854,7]]}}}],["server>:6443",{"_index":1538,"t":{"221":{"position":[[2250,12]]}}}],["server_external_ip",{"_index":1862,"t":{"317":{"position":[[503,18],[717,18],[894,18]]}}}],["server_metr",{"_index":339,"t":{"19":{"position":[[2373,14]]}}}],["servers=https://127.0.0.1:2379",{"_index":2415,"t":{"476":{"position":[[771,30]]},"610":{"position":[[1500,30]]},"612":{"position":[[1448,30]]},"614":{"position":[[1317,30]]},"616":{"position":[[1266,30]]},"618":{"position":[[1279,30]]},"620":{"position":[[1392,30]]},"622":{"position":[[1353,30]]},"626":{"position":[[1426,30]]},"628":{"position":[[1407,30]]},"630":{"position":[[1303,30]]},"632":{"position":[[1419,30]]},"634":{"position":[[1284,30]]},"636":{"position":[[1199,30]]},"646":{"position":[[1374,30]]},"652":{"position":[[1416,30]]},"654":{"position":[[1332,30]]},"656":{"position":[[1338,30]]},"729":{"position":[[1683,30]]},"731":{"position":[[1697,30]]},"733":{"position":[[1812,30]]}}}],["servic",{"_index":59,"t":{"4":{"position":[[489,7],[958,8]]},"17":{"position":[[159,8],[559,8],[779,7]]},"31":{"position":[[174,8],[336,7],[413,7],[538,8]]},"33":{"position":[[480,7]]},"41":{"position":[[104,7],[401,7]]},"46":{"position":[[354,9],[533,9]]},"48":{"position":[[257,9],[414,9]]},"50":{"position":[[208,8]]},"65":{"position":[[809,7]]},"71":{"position":[[318,8],[517,8]]},"75":{"position":[[580,7]]},"106":{"position":[[313,7]]},"110":{"position":[[1113,7]]},"112":{"position":[[1697,7],[1743,7],[2176,7]]},"114":{"position":[[1986,7]]},"116":{"position":[[4,7],[66,7],[108,7],[205,7],[596,7],[1293,7]]},"124":{"position":[[356,8],[427,7],[1254,8],[1325,7]]},"126":{"position":[[290,8],[361,7],[1111,8],[1182,7]]},"132":{"position":[[513,7]]},"150":{"position":[[106,7],[175,7],[189,7],[259,8],[354,8],[381,7],[1106,7],[1375,7],[1494,7],[1747,7]]},"162":{"position":[[1464,7],[1531,7],[1569,7],[1638,8],[1758,8],[1785,7]]},"174":{"position":[[734,7]]},"199":{"position":[[334,8],[423,7],[624,9]]},"207":{"position":[[394,8],[576,8]]},"215":{"position":[[693,7]]},"219":{"position":[[177,9]]},"221":{"position":[[756,9],[887,8],[2409,7]]},"247":{"position":[[777,8]]},"271":{"position":[[583,7]]},"277":{"position":[[127,7],[294,7],[433,7],[550,7]]},"279":{"position":[[91,8],[402,8]]},"301":{"position":[[219,7]]},"309":{"position":[[376,8],[478,7],[971,7],[1234,7],[1324,7],[1661,7]]},"311":{"position":[[747,7],[876,7],[978,7],[1240,7]]},"313":{"position":[[433,7],[535,7]]},"317":{"position":[[1172,8]]},"319":{"position":[[120,7]]},"350":{"position":[[152,8]]},"380":{"position":[[326,8]]},"398":{"position":[[990,8],[1091,7]]},"400":{"position":[[76,7]]},"404":{"position":[[241,7]]},"408":{"position":[[216,8],[330,8],[395,8],[587,8]]},"410":{"position":[[44,8],[121,8],[603,8],[666,8],[709,8],[809,7]]},"412":{"position":[[9,7]]},"416":{"position":[[171,9],[450,7],[546,7],[621,7]]},"428":{"position":[[80,7],[293,7]]},"432":{"position":[[127,7],[765,8],[831,8],[1280,7],[1425,8],[1634,7],[1831,7],[2594,8]]},"472":{"position":[[1120,7]]},"474":{"position":[[554,8],[655,7],[1177,8],[1278,7]]},"476":{"position":[[1565,7],[1594,7],[1674,7],[1753,7],[2715,7],[2806,7]]},"492":{"position":[[537,7]]},"494":{"position":[[18,7],[82,7],[221,7],[317,7],[368,7]]},"506":{"position":[[20,7],[101,7],[170,7],[280,7],[355,7],[384,7],[453,7],[625,7],[672,7],[854,7]]},"516":{"position":[[245,9]]},"538":{"position":[[108,7]]},"542":{"position":[[93,7]]},"546":{"position":[[754,7]]},"552":{"position":[[245,7],[298,7]]},"610":{"position":[[2361,7],[2431,7],[2502,7],[2581,7],[2621,7]]},"612":{"position":[[2309,7],[2379,7],[2450,7],[2529,7],[2569,7]]},"614":{"position":[[2178,7],[2248,7],[2319,7],[2398,7],[2438,7]]},"616":{"position":[[2127,7],[2197,7],[2268,7],[2347,7],[2387,7]]},"618":{"position":[[2140,7],[2210,7],[2281,7],[2360,7],[2400,7]]},"620":{"position":[[2253,7],[2323,7],[2394,7],[2473,7],[2513,7]]},"622":{"position":[[2214,7],[2284,7],[2355,7],[2434,7],[2474,7]]},"626":{"position":[[2287,7],[2357,7],[2428,7],[2507,7],[2547,7]]},"628":{"position":[[2268,7],[2338,7],[2409,7],[2488,7],[2528,7]]},"630":{"position":[[2164,7],[2234,7],[2305,7],[2384,7],[2424,7]]},"632":{"position":[[2280,7],[2350,7],[2421,7],[2500,7],[2540,7]]},"634":{"position":[[2145,7],[2215,7],[2286,7],[2365,7],[2405,7]]},"636":{"position":[[2060,7],[2130,7],[2201,7],[2280,7],[2320,7]]},"646":{"position":[[172,7],[236,7],[441,7],[486,7],[2235,7],[2305,7],[2376,7],[2455,7],[2495,7]]},"648":{"position":[[165,7],[227,7],[260,7]]},"652":{"position":[[2277,7],[2347,7],[2418,7],[2497,7],[2537,7]]},"654":{"position":[[2193,7],[2263,7],[2334,7],[2413,7],[2453,7]]},"656":{"position":[[2199,7],[2269,7],[2340,7],[2419,7],[2459,7]]},"667":{"position":[[1608,8],[1861,7],[1940,7],[1984,7]]},"669":{"position":[[192,7],[334,7],[387,7],[1676,8],[1929,7],[2008,7],[2052,7]]},"671":{"position":[[172,7],[243,7],[276,7],[425,8],[480,7],[1761,8],[2014,7],[2093,7],[2137,7]]},"673":{"position":[[1658,8],[1911,7],[1990,7],[2034,7]]},"685":{"position":[[42,7]]},"691":{"position":[[42,7]]},"697":{"position":[[134,8]]},"729":{"position":[[172,7],[390,8],[2544,7],[2614,7],[2685,7],[2764,7],[2804,7]]},"731":{"position":[[158,7],[376,8],[2558,7],[2628,7],[2699,7],[2778,7],[2818,7]]},"733":{"position":[[201,7],[432,8],[2673,7],[2743,7],[2814,7],[2893,7],[2933,7]]},"735":{"position":[[148,7],[362,8]]},"737":{"position":[[185,7],[419,8]]},"739":{"position":[[170,7],[396,8]]},"741":{"position":[[171,7],[396,8]]},"743":{"position":[[53,7],[270,8]]},"745":{"position":[[169,7],[364,8]]},"747":{"position":[[291,7],[580,8]]},"749":{"position":[[225,7],[446,8]]},"751":{"position":[[53,7],[300,8]]},"753":{"position":[[474,7],[1005,8]]},"764":{"position":[[42,7],[186,7]]},"766":{"position":[[60,7],[104,7]]}}}],["service'",{"_index":2131,"t":{"410":{"position":[[328,9],[483,9]]}}}],["service.key",{"_index":1062,"t":{"110":{"position":[[1183,11]]},"116":{"position":[[364,11]]}}}],["service>,<servic",{"_index":1022,"t":{"106":{"position":[[321,19]]}}}],["serviceaccount",{"_index":1761,"t":{"291":{"position":[[194,14],[492,14]]},"468":{"position":[[5767,14]]},"628":{"position":[[62,14],[329,15]]}}}],["serviceaccountnam",{"_index":2613,"t":{"540":{"position":[[659,19],[1066,19]]}}}],["servicelb",{"_index":1206,"t":{"132":{"position":[[397,9]]},"150":{"position":[[729,9],[799,9]]},"162":{"position":[[2375,9],[2444,9],[5918,10]]},"199":{"position":[[244,10],[694,10]]},"279":{"position":[[1195,9]]},"324":{"position":[[170,9]]},"404":{"position":[[289,9]]},"408":{"position":[[115,9],[539,9]]},"410":{"position":[[4,9],[373,9],[846,9]]},"414":{"position":[[93,9],[265,10],[402,10]]},"418":{"position":[[11,10]]},"420":{"position":[[295,9]]},"468":{"position":[[2301,9]]}}}],["services/proxi",{"_index":2820,"t":{"705":{"position":[[415,15]]}}}],["session",{"_index":553,"t":{"33":{"position":[[885,8]]}}}],["set",{"_index":179,"t":{"17":{"position":[[131,8],[180,8],[1261,8]]},"25":{"position":[[895,7]]},"31":{"position":[[214,3]]},"35":{"position":[[171,3],[217,3],[352,4],[436,4]]},"39":{"position":[[209,3]]},"54":{"position":[[444,7],[787,3]]},"63":{"position":[[379,3]]},"65":{"position":[[302,3]]},"77":{"position":[[745,4]]},"81":{"position":[[138,8],[275,4]]},"87":{"position":[[183,3],[245,3],[316,4]]},"89":{"position":[[163,4]]},"101":{"position":[[528,8],[677,4],[1186,3],[1257,3],[2033,4],[2250,4]]},"110":{"position":[[411,3]]},"112":{"position":[[1073,7]]},"118":{"position":[[519,7],[2451,3],[3969,3]]},"132":{"position":[[30,3]]},"135":{"position":[[684,3]]},"142":{"position":[[169,8],[306,4]]},"162":{"position":[[539,8],[688,4],[4546,3],[6511,3],[6582,3],[7182,4],[8411,4]]},"176":{"position":[[84,3]]},"179":{"position":[[1367,3]]},"185":{"position":[[64,4]]},"187":{"position":[[85,3],[1545,7]]},"189":{"position":[[1183,3],[1267,3]]},"203":{"position":[[2045,7]]},"205":{"position":[[82,7]]},"209":{"position":[[0,7]]},"213":{"position":[[187,3],[324,3],[575,3]]},"217":{"position":[[308,3],[454,3]]},"245":{"position":[[496,3]]},"247":{"position":[[1422,3],[1597,3],[1622,3],[1630,3],[1842,3]]},"249":{"position":[[515,9]]},"251":{"position":[[330,3]]},"253":{"position":[[363,3],[475,3]]},"257":{"position":[[163,3]]},"266":{"position":[[849,3]]},"275":{"position":[[61,7]]},"277":{"position":[[1901,3],[1963,3]]},"279":{"position":[[564,7],[1268,3],[1541,3]]},"285":{"position":[[555,3],[577,3]]},"303":{"position":[[206,3],[1268,3]]},"307":{"position":[[154,3],[541,8],[683,3],[925,8],[1068,3]]},"313":{"position":[[84,3],[137,3]]},"319":{"position":[[264,8]]},"340":{"position":[[202,3],[793,3]]},"360":{"position":[[1254,3]]},"398":{"position":[[2455,7]]},"400":{"position":[[240,3]]},"410":{"position":[[78,3]]},"416":{"position":[[121,3]]},"420":{"position":[[181,4],[437,3]]},"422":{"position":[[127,3]]},"426":{"position":[[137,3]]},"428":{"position":[[1257,7]]},"432":{"position":[[437,3],[630,3],[724,3],[800,3],[1123,3],[1187,7],[1486,4],[1534,4],[1935,3],[2029,3],[2611,7],[2646,7],[2754,4]]},"436":{"position":[[184,3],[406,3]]},"464":{"position":[[110,3],[242,3]]},"480":{"position":[[63,4],[78,7]]},"482":{"position":[[62,4],[256,3],[379,8]]},"484":{"position":[[45,4],[138,3],[406,7]]},"486":{"position":[[47,3],[200,3]]},"488":{"position":[[50,3],[295,3]]},"490":{"position":[[48,3],[281,3]]},"492":{"position":[[46,3],[76,7],[237,3],[428,7],[581,3]]},"494":{"position":[[53,3]]},"496":{"position":[[57,3]]},"498":{"position":[[153,3]]},"500":{"position":[[58,3],[316,7]]},"504":{"position":[[56,3]]},"514":{"position":[[565,3]]},"540":{"position":[[1819,3],[1890,3]]},"548":{"position":[[340,3],[413,3]]},"579":{"position":[[448,3]]},"602":{"position":[[145,3]]},"610":{"position":[[66,3],[249,3]]},"612":{"position":[[252,3]]},"614":{"position":[[145,3]]},"616":{"position":[[145,3]]},"618":{"position":[[145,3]]},"620":{"position":[[66,3],[213,3]]},"622":{"position":[[204,3]]},"624":{"position":[[145,3]]},"626":{"position":[[145,3]]},"628":{"position":[[292,3]]},"630":{"position":[[145,3]]},"632":{"position":[[238,3]]},"634":{"position":[[190,3]]},"636":{"position":[[145,3]]},"638":{"position":[[155,3]]},"640":{"position":[[155,3]]},"642":{"position":[[155,3]]},"644":{"position":[[155,3],[239,3]]},"646":{"position":[[145,3]]},"648":{"position":[[155,3]]},"650":{"position":[[66,3],[249,3],[578,3]]},"652":{"position":[[66,3],[235,3]]},"654":{"position":[[66,3],[235,3]]},"656":{"position":[[66,3],[249,3]]},"658":{"position":[[226,3]]},"662":{"position":[[145,3]]},"665":{"position":[[162,3]]},"667":{"position":[[162,3]]},"669":{"position":[[161,3]]},"671":{"position":[[162,3]]},"673":{"position":[[162,3]]},"675":{"position":[[172,3]]},"680":{"position":[[149,3]]},"685":{"position":[[196,3],[472,3]]},"687":{"position":[[122,3],[361,3]]},"689":{"position":[[164,3],[386,3]]},"691":{"position":[[238,3],[538,3]]},"693":{"position":[[122,3],[364,3]]},"695":{"position":[[169,3],[396,3]]},"697":{"position":[[245,3],[495,3]]},"729":{"position":[[75,3],[263,3]]},"731":{"position":[[75,3],[249,3]]},"733":{"position":[[75,3],[292,3]]},"735":{"position":[[75,3],[239,3]]},"737":{"position":[[75,3],[276,3]]},"739":{"position":[[85,3],[261,3]]},"741":{"position":[[85,3]]},"745":{"position":[[75,3],[260,3]]},"747":{"position":[[75,3],[382,3]]},"751":{"position":[[144,3]]},"753":{"position":[[75,3],[565,3]]},"783":{"position":[[173,3]]},"785":{"position":[[171,4]]},"789":{"position":[[114,3]]},"793":{"position":[[191,3]]}}}],["setup",{"_index":688,"t":{"46":{"position":[[443,6],[646,5]]},"48":{"position":[[324,6]]},"71":{"position":[[421,7]]},"124":{"position":[[802,7]]},"207":{"position":[[492,7]]},"243":{"position":[[385,5]]},"356":{"position":[[177,6]]},"364":{"position":[[139,5]]},"398":{"position":[[2140,5]]},"612":{"position":[[66,5]]},"697":{"position":[[115,5]]},"810":{"position":[[66,5]]}}}],["setup.servic",{"_index":694,"t":{"46":{"position":[[700,13]]}}}],["setup.tim",{"_index":695,"t":{"46":{"position":[[723,11]]}}}],["sever",{"_index":644,"t":{"44":{"position":[[0,7]]},"52":{"position":[[10,7]]},"124":{"position":[[632,7],[1622,7]]},"319":{"position":[[1002,7]]},"396":{"position":[[55,7]]},"516":{"position":[[12,7]]},"531":{"position":[[26,7]]}}}],["sfl",{"_index":255,"t":{"19":{"position":[[619,3]]},"41":{"position":[[451,3]]},"203":{"position":[[1409,3],[2859,3]]},"205":{"position":[[896,3]]},"213":{"position":[[594,3]]},"215":{"position":[[406,3]]},"221":{"position":[[1169,3],[1437,3],[2158,3]]},"268":{"position":[[917,3]]},"277":{"position":[[765,3],[867,3],[971,3],[1110,3],[1205,3],[1364,3],[1480,3],[1600,3],[1696,3]]},"285":{"position":[[252,3]]},"428":{"position":[[222,3],[1175,3]]},"432":{"position":[[227,3],[2448,3]]},"510":{"position":[[396,3]]},"548":{"position":[[822,3],[1010,3],[1195,3]]}}}],["sh",{"_index":254,"t":{"19":{"position":[[571,2],[644,2]]},"25":{"position":[[477,2]]},"41":{"position":[[533,2]]},"203":{"position":[[1458,2],[2908,2]]},"205":{"position":[[945,2]]},"213":{"position":[[619,2]]},"215":{"position":[[431,2]]},"221":{"position":[[1211,2],[1479,2],[2200,2]]},"268":{"position":[[942,2]]},"277":{"position":[[816,2],[957,2],[1012,2],[1191,2],[1230,2],[1466,2],[1553,2],[1657,2],[1774,2]]},"285":{"position":[[329,2]]},"319":{"position":[[722,2]]},"376":{"position":[[132,2]]},"378":{"position":[[288,2]]},"428":{"position":[[247,2],[1252,2]]},"432":{"position":[[252,2],[2500,2]]},"510":{"position":[[421,2]]},"548":{"position":[[866,2],[1081,2],[1270,2]]}}}],["sha1",{"_index":1031,"t":{"108":{"position":[[572,5]]}}}],["sha256",{"_index":1284,"t":{"168":{"position":[[364,6],[468,6],[986,6],[1064,6]]}}}],["share",{"_index":1228,"t":{"137":{"position":[[72,6],[241,6]]},"162":{"position":[[2733,6],[2907,6]]},"221":{"position":[[1106,6],[1416,6]]},"315":{"position":[[58,5]]},"446":{"position":[[77,6]]}}}],["shell",{"_index":194,"t":{"17":{"position":[[476,6]]},"77":{"position":[[1652,5]]},"277":{"position":[[390,5]]},"548":{"position":[[231,5]]}}}],["shim",{"_index":2716,"t":{"604":{"position":[[753,4],[1035,4],[1317,4],[1599,4],[1881,4],[2163,4],[2445,4]]},"606":{"position":[[734,4],[1016,4],[1298,4],[1580,4],[1862,4],[2144,4],[2426,4]]},"624":{"position":[[747,4],[1029,4],[1311,4],[1593,4],[1875,4],[2157,4],[2439,4]]},"677":{"position":[[719,4],[1001,4],[1283,4],[1565,4],[1847,4],[2129,4],[2411,4]]}}}],["ship",{"_index":646,"t":{"44":{"position":[[36,4]]},"466":{"position":[[276,5]]}}}],["short",{"_index":1276,"t":{"166":{"position":[[48,5]]},"170":{"position":[[4,5],[125,5]]},"174":{"position":[[902,5]]},"185":{"position":[[439,5]]},"241":{"position":[[59,6]]},"305":{"position":[[480,5]]}}}],["shorten",{"_index":795,"t":{"59":{"position":[[508,7]]}}}],["show",{"_index":849,"t":{"65":{"position":[[106,5],[1140,4]]},"69":{"position":[[22,5]]},"77":{"position":[[1694,5]]},"99":{"position":[[298,7]]},"179":{"position":[[477,4],[2342,7]]},"340":{"position":[[1404,4]]},"344":{"position":[[19,7]]},"346":{"position":[[19,7]]},"428":{"position":[[1139,7]]},"432":{"position":[[2355,5]]}}}],["shown",{"_index":819,"t":{"61":{"position":[[3,5]]},"73":{"position":[[141,5]]},"179":{"position":[[838,5]]}}}],["side",{"_index":913,"t":{"75":{"position":[[136,4]]}}}],["sig",{"_index":630,"t":{"39":{"position":[[895,3]]}}}],["sign",{"_index":131,"t":{"11":{"position":[[19,6],[258,6]]},"52":{"position":[[709,4]]},"108":{"position":[[230,6],[1438,6]]},"110":{"position":[[439,6],[1108,4],[1323,4]]},"112":{"position":[[1713,7]]},"114":{"position":[[33,6],[469,6],[665,6],[867,6],[950,6],[1040,6],[1240,6],[1391,6],[1426,6],[1524,6]]},"116":{"position":[[61,4]]},"168":{"position":[[328,6]]},"174":{"position":[[1094,6]]},"187":{"position":[[853,6]]},"295":{"position":[[242,4]]},"476":{"position":[[1690,7],[2384,7],[2458,7]]},"610":{"position":[[2518,7]]},"612":{"position":[[2466,7]]},"614":{"position":[[2335,7]]},"616":{"position":[[2284,7]]},"618":{"position":[[2297,7]]},"620":{"position":[[2410,7]]},"622":{"position":[[2371,7]]},"626":{"position":[[2444,7]]},"628":{"position":[[2425,7]]},"630":{"position":[[2321,7]]},"632":{"position":[[2437,7]]},"634":{"position":[[2302,7]]},"636":{"position":[[2217,7]]},"646":{"position":[[2392,7]]},"652":{"position":[[2434,7]]},"654":{"position":[[2350,7]]},"656":{"position":[[2356,7]]},"667":{"position":[[846,7],[942,7],[1037,7],[1126,7],[1214,7],[1304,7],[1393,7],[1482,7]]},"669":{"position":[[914,7],[1010,7],[1105,7],[1194,7],[1282,7],[1372,7],[1461,7],[1550,7]]},"671":{"position":[[999,7],[1095,7],[1190,7],[1279,7],[1367,7],[1457,7],[1546,7],[1635,7]]},"673":{"position":[[896,7],[992,7],[1087,7],[1176,7],[1264,7],[1354,7],[1443,7],[1532,7]]},"729":{"position":[[2701,7]]},"731":{"position":[[2715,7]]},"733":{"position":[[2830,7]]}}}],["signing,authent",{"_index":1336,"t":{"179":{"position":[[1503,25]]}}}],["similar",{"_index":1317,"t":{"176":{"position":[[235,7]]},"179":{"position":[[125,8]]},"322":{"position":[[130,7]]}}}],["simpl",{"_index":41,"t":{"4":{"position":[[244,6],[390,6]]},"185":{"position":[[431,7]]},"247":{"position":[[1533,6]]},"446":{"position":[[101,6]]},"518":{"position":[[188,6]]},"524":{"position":[[145,6]]}}}],["simplest",{"_index":2187,"t":{"432":{"position":[[176,8]]}}}],["simple|list|output|threads|misc|al",{"_index":2809,"t":{"689":{"position":[[2173,38],[2413,38],[2653,38]]},"695":{"position":[[2218,38]]}}}],["simpli",{"_index":1540,"t":{"223":{"position":[[148,6]]},"229":{"position":[[0,6]]},"268":{"position":[[158,6]]},"277":{"position":[[576,6]]},"279":{"position":[[153,6]]},"332":{"position":[[374,6]]}}}],["simplifi",{"_index":2111,"t":{"404":{"position":[[100,10]]}}}],["singl",{"_index":29,"t":{"4":{"position":[[96,6],[629,6]]},"15":{"position":[[23,6]]},"52":{"position":[[164,6]]},"67":{"position":[[105,6]]},"69":{"position":[[63,6]]},"71":{"position":[[0,6],[407,6]]},"118":{"position":[[872,6]]},"124":{"position":[[0,6],[71,6]]},"126":{"position":[[0,6],[160,6],[484,6]]},"128":{"position":[[168,6]]},"203":{"position":[[2080,6],[2136,6]]},"205":{"position":[[117,6],[173,6]]},"207":{"position":[[97,6],[478,6]]},"213":{"position":[[1095,6]]},"219":{"position":[[264,6]]},"235":{"position":[[635,6],[751,6]]},"245":{"position":[[838,6]]},"268":{"position":[[63,6],[143,6]]},"285":{"position":[[48,6]]},"313":{"position":[[330,6]]},"428":{"position":[[636,6]]},"434":{"position":[[314,6],[538,6],[834,6]]},"436":{"position":[[83,6]]},"446":{"position":[[33,6]]},"460":{"position":[[1232,6]]},"468":{"position":[[2424,6]]}}}],["situat",{"_index":18,"t":{"2":{"position":[[148,10]]},"281":{"position":[[892,11]]}}}],["size",{"_index":101,"t":{"6":{"position":[[58,4]]},"221":{"position":[[287,5],[414,5]]},"311":{"position":[[1115,4],[1144,4]]},"354":{"position":[[94,4],[238,5]]},"358":{"position":[[41,4]]},"364":{"position":[[39,4]]},"366":{"position":[[114,4]]},"368":{"position":[[202,4]]},"370":{"position":[[42,4]]},"372":{"position":[[137,6],[220,4]]},"420":{"position":[[26,5]]},"424":{"position":[[1376,4],[1449,4]]},"488":{"position":[[304,4]]},"490":{"position":[[290,4]]},"516":{"position":[[163,4]]},"644":{"position":[[211,4]]}}}],["skew",{"_index":1568,"t":{"241":{"position":[[35,4]]},"536":{"position":[[1785,4]]},"546":{"position":[[930,4]]}}}],["skip",{"_index":757,"t":{"54":{"position":[[433,7]]},"118":{"position":[[3124,4]]},"126":{"position":[[442,4],[652,4],[1315,4],[1562,4]]},"135":{"position":[[1288,4]]},"162":{"position":[[5217,4]]},"170":{"position":[[267,8]]},"189":{"position":[[1289,5],[1319,4]]},"332":{"position":[[75,5],[165,5],[243,5],[550,4]]},"342":{"position":[[514,7]]},"432":{"position":[[637,6],[2046,4]]},"536":{"position":[[1837,4]]},"546":{"position":[[982,4]]}}}],["sl",{"_index":373,"t":{"21":{"position":[[353,2]]},"110":{"position":[[2541,2]]},"112":{"position":[[1905,2]]},"114":{"position":[[1672,2]]}}}],["slack",{"_index":1572,"t":{"243":{"position":[[298,5]]}}}],["sle",{"_index":1982,"t":{"354":{"position":[[280,4]]}}}],["slice",{"_index":1737,"t":{"283":{"position":[[366,6]]}}}],["slirp4net",{"_index":563,"t":{"35":{"position":[[153,10]]}}}],["slirp4netn",{"_index":561,"t":{"35":{"position":[[34,11],[373,11],[458,11],[536,11],[740,12]]}}}],["slower",{"_index":1518,"t":{"221":{"position":[[58,6]]},"492":{"position":[[285,6]]}}}],["small",{"_index":1650,"t":{"255":{"position":[[280,5]]},"366":{"position":[[135,5]]},"372":{"position":[[241,5]]}}}],["smaller",{"_index":2551,"t":{"516":{"position":[[148,7]]}}}],["snap",{"_index":2050,"t":{"392":{"position":[[59,4]]}}}],["snapshot",{"_index":953,"t":{"77":{"position":[[1213,8],[1307,8]]},"118":{"position":[[179,10],[190,9],[263,9],[300,8],[344,10],[381,8],[575,9],[729,8],[1064,9],[1233,9],[1300,8],[1496,9],[2013,9],[2046,9],[2063,8],[2092,8],[2189,8],[2224,9],[2264,8],[2304,10],[2550,8],[2632,9],[2664,9],[2769,10],[2873,8],[3416,8],[3453,8],[3597,8],[3920,8],[4015,10],[4098,9],[4121,9],[4205,8],[4263,9],[4395,9],[4500,8],[4535,9],[4554,8],[4581,8],[4705,9],[4733,9],[4830,8],[4915,8],[4939,8],[4956,8]]},"135":{"position":[[606,9],[643,9],[660,8],[710,10],[735,8],[776,10],[794,8],[827,8],[924,8],[963,9],[1003,8],[1047,9]]},"162":{"position":[[3417,8],[4466,9],[4504,9],[4521,8],[4572,9],[4597,8],[4640,10],[4658,8],[4692,8],[4794,8],[4834,9],[4874,8],[4919,10],[4973,8],[5010,8]]},"191":{"position":[[378,8]]},"195":{"position":[[186,8],[260,10],[302,9]]},"197":{"position":[[17,8]]}}}],["snapshot(",{"_index":1161,"t":{"118":{"position":[[4069,11]]}}}],["snapshott",{"_index":818,"t":{"59":{"position":[[1120,11]]},"61":{"position":[[347,11]]},"101":{"position":[[2412,11],[2474,11]]},"162":{"position":[[7344,11],[7406,11]]}}}],["snapshotter=stargz",{"_index":820,"t":{"61":{"position":[[29,18],[104,18]]}}}],["snippet",{"_index":2308,"t":{"464":{"position":[[328,7]]}}}],["socat",{"_index":98,"t":{"4":{"position":[[1064,6]]}}}],["socket",{"_index":875,"t":{"65":{"position":[[995,6]]},"89":{"position":[[108,6],[183,6]]},"101":{"position":[[2195,6],[2266,6]]},"162":{"position":[[7127,6],[7198,6]]},"189":{"position":[[1546,6]]}}}],["sole",{"_index":1145,"t":{"118":{"position":[[2404,4]]},"137":{"position":[[593,4]]},"162":{"position":[[3319,4]]}}}],["solut",{"_index":1365,"t":{"185":{"position":[[603,8]]},"315":{"position":[[228,8]]},"807":{"position":[[133,9]]}}}],["someth",{"_index":108,"t":{"6":{"position":[[144,9]]}}}],["something=amaz",{"_index":1727,"t":{"281":{"position":[[388,19],[586,19]]}}}],["sometim",{"_index":2093,"t":{"398":{"position":[[3059,10]]},"516":{"position":[[61,10]]}}}],["soon",{"_index":1795,"t":{"305":{"position":[[437,4]]},"540":{"position":[[2421,4]]}}}],["sourc",{"_index":588,"t":{"35":{"position":[[801,6]]},"135":{"position":[[144,6]]},"162":{"position":[[3952,6]]},"189":{"position":[[1121,6]]},"203":{"position":[[33,6],[2172,6]]},"205":{"position":[[209,6]]},"235":{"position":[[1005,7]]},"281":{"position":[[936,8]]},"330":{"position":[[243,6]]},"362":{"position":[[14,6]]},"524":{"position":[[72,6]]}}}],["source=10.42.0.0/16",{"_index":684,"t":{"46":{"position":[[262,19]]}}}],["source=10.43.0.0/16",{"_index":685,"t":{"46":{"position":[[334,19]]}}}],["spec",{"_index":436,"t":{"25":{"position":[[939,5],[1114,5],[1611,5]]},"61":{"position":[[461,5]]},"118":{"position":[[2123,5]]},"135":{"position":[[858,5]]},"162":{"position":[[4723,5]]},"247":{"position":[[677,5]]},"249":{"position":[[824,5]]},"358":{"position":[[110,4]]},"424":{"position":[[828,5]]},"468":{"position":[[1443,5],[2630,5],[3275,5],[3713,5],[5906,5],[6105,5],[6304,5]]},"470":{"position":[[419,5],[778,5],[1409,5],[1629,5],[1870,5],[2092,5],[2312,5],[2553,5]]},"520":{"position":[[93,5]]},"522":{"position":[[72,5]]},"526":{"position":[[77,5]]},"528":{"position":[[72,5]]},"540":{"position":[[518,5],[866,5],[2316,5]]}}}],["spec.allowprivilegeescal",{"_index":2883,"t":{"783":{"position":[[142,30]]}}}],["spec.bootstrap",{"_index":1607,"t":{"247":{"position":[[1401,14]]}}}],["spec.chart",{"_index":1598,"t":{"247":{"position":[[996,10],[2094,10],[2326,10]]}}}],["spec.chartcont",{"_index":1620,"t":{"247":{"position":[[2030,17]]}}}],["spec.failurepolici",{"_index":1614,"t":{"247":{"position":[[1813,18]]}}}],["spec.helmvers",{"_index":1605,"t":{"247":{"position":[[1350,16]]}}}],["spec.jobimag",{"_index":1610,"t":{"247":{"position":[[1641,13]]}}}],["spec.repo",{"_index":1603,"t":{"247":{"position":[[1235,9]]}}}],["spec.repoca",{"_index":1604,"t":{"247":{"position":[[1278,11]]}}}],["spec.set",{"_index":1608,"t":{"247":{"position":[[1515,8]]},"249":{"position":[[441,8]]}}}],["spec.targetnamespac",{"_index":1601,"t":{"247":{"position":[[1090,20]]}}}],["spec.timeout",{"_index":1612,"t":{"247":{"position":[[1747,12]]}}}],["spec.typ",{"_index":2129,"t":{"410":{"position":[[62,9]]}}}],["spec.valuescont",{"_index":1619,"t":{"247":{"position":[[1942,18]]},"249":{"position":[[496,18]]}}}],["spec.vers",{"_index":1602,"t":{"247":{"position":[[1159,12]]}}}],["special",{"_index":1402,"t":{"193":{"position":[[3,7]]},"245":{"position":[[426,7]]},"247":{"position":[[2283,7]]}}}],["specif",{"_index":611,"t":{"39":{"position":[[383,12]]},"187":{"position":[[612,8]]},"217":{"position":[[776,8]]},"328":{"position":[[44,8]]},"356":{"position":[[68,8]]},"374":{"position":[[175,8]]},"404":{"position":[[1388,8]]},"438":{"position":[[582,8]]},"472":{"position":[[187,8]]},"506":{"position":[[161,8],[271,8]]},"548":{"position":[[941,8],[1137,8]]},"555":{"position":[[426,8],[1090,8]]},"602":{"position":[[50,13]]},"604":{"position":[[136,13]]},"606":{"position":[[50,13]]},"608":{"position":[[60,13]]},"610":{"position":[[154,13]]},"612":{"position":[[157,13]]},"614":{"position":[[50,13]]},"616":{"position":[[50,13]]},"618":{"position":[[50,13]]},"620":{"position":[[144,13]]},"622":{"position":[[50,13]]},"624":{"position":[[50,13]]},"626":{"position":[[50,13]]},"628":{"position":[[140,13]]},"630":{"position":[[50,13]]},"632":{"position":[[143,13]]},"634":{"position":[[50,13]]},"636":{"position":[[50,13]]},"638":{"position":[[60,13]]},"640":{"position":[[60,13]]},"642":{"position":[[60,13]]},"644":{"position":[[60,13]]},"646":{"position":[[50,13]]},"648":{"position":[[60,13]]},"650":{"position":[[154,13]]},"652":{"position":[[140,13]]},"654":{"position":[[140,13]]},"656":{"position":[[154,13]]},"658":{"position":[[131,13]]},"662":{"position":[[50,13]]},"665":{"position":[[58,13]]},"667":{"position":[[58,13]]},"669":{"position":[[58,13]]},"671":{"position":[[58,13]]},"673":{"position":[[58,13]]},"675":{"position":[[68,13]]},"677":{"position":[[58,13]]},"680":{"position":[[49,13]]},"682":{"position":[[49,13]]},"685":{"position":[[118,13]]},"687":{"position":[[44,13]]},"689":{"position":[[44,13]]},"691":{"position":[[160,13]]},"693":{"position":[[44,13]]},"695":{"position":[[44,13]]},"697":{"position":[[167,13]]},"760":{"position":[[101,8]]},"764":{"position":[[99,8]]},"819":{"position":[[166,8]]}}}],["specifi",{"_index":579,"t":{"35":{"position":[[569,10]]},"52":{"position":[[604,7]]},"56":{"position":[[21,7],[110,9]]},"106":{"position":[[255,10]]},"118":{"position":[[1223,9]]},"135":{"position":[[88,7]]},"160":{"position":[[307,7]]},"162":{"position":[[3896,7]]},"166":{"position":[[18,9]]},"168":{"position":[[724,10]]},"176":{"position":[[431,10]]},"181":{"position":[[579,7]]},"187":{"position":[[175,7],[457,7],[903,7],[1247,7],[1285,7]]},"189":{"position":[[541,7],[1357,7]]},"217":{"position":[[1035,9]]},"219":{"position":[[304,7]]},"247":{"position":[[1290,7],[1655,7]]},"268":{"position":[[640,7]]},"273":{"position":[[451,9],[796,9]]},"346":{"position":[[460,7]]},"432":{"position":[[956,10],[1456,10],[1749,9],[1896,10]]},"533":{"position":[[561,10]]},"540":{"position":[[1440,10],[1579,10]]},"548":{"position":[[983,7]]}}}],["speed",{"_index":2001,"t":{"358":{"position":[[821,6]]},"368":{"position":[[75,6]]},"492":{"position":[[212,6]]}}}],["spike",{"_index":2276,"t":{"454":{"position":[[395,6],[962,6]]}}}],["split",{"_index":2039,"t":{"374":{"position":[[207,5]]}}}],["spoof",{"_index":2022,"t":{"360":{"position":[[1188,9]]}}}],["spot",{"_index":2249,"t":{"440":{"position":[[181,4]]}}}],["sql",{"_index":1362,"t":{"185":{"position":[[372,3]]},"189":{"position":[[1095,3]]},"215":{"position":[[1101,3]]},"533":{"position":[[384,3],[745,3]]}}}],["sqlite",{"_index":891,"t":{"69":{"position":[[103,6]]},"71":{"position":[[382,6]]},"135":{"position":[[122,6]]},"162":{"position":[[3930,6]]},"185":{"position":[[511,6],[816,6],[823,6],[880,6]]},"193":{"position":[[59,6],[92,6],[173,6]]},"207":{"position":[[453,6]]},"223":{"position":[[101,6]]}}}],["sqlite3",{"_index":33,"t":{"4":{"position":[[148,7]]},"579":{"position":[[404,8]]},"650":{"position":[[534,8]]},"685":{"position":[[428,8]]},"687":{"position":[[317,8]]},"689":{"position":[[342,8]]},"691":{"position":[[494,8]]},"693":{"position":[[320,8]]},"695":{"position":[[352,8]]},"697":{"position":[[451,8]]}}}],["ssd",{"_index":1998,"t":{"358":{"position":[[666,4],[850,3]]},"368":{"position":[[108,3]]},"442":{"position":[[121,3]]}}}],["ssl",{"_index":1151,"t":{"118":{"position":[[3129,3],[3152,3]]},"135":{"position":[[1293,3],[1320,3]]},"162":{"position":[[5222,3],[5250,3]]},"249":{"position":[[938,4]]}}}],["stabil",{"_index":653,"t":{"44":{"position":[[177,9]]}}}],["stabl",{"_index":919,"t":{"75":{"position":[[697,6]]},"217":{"position":[[356,6]]},"311":{"position":[[67,6]]},"432":{"position":[[934,6],[2290,9],[2317,7]]},"438":{"position":[[183,6]]},"540":{"position":[[2245,6]]},"546":{"position":[[188,6],[205,6],[657,6]]},"548":{"position":[[800,6]]}}}],["stack",{"_index":581,"t":{"35":{"position":[[638,5]]},"303":{"position":[[1028,5]]},"311":{"position":[[224,5],[513,5],[682,5],[724,5],[1521,5]]},"313":{"position":[[337,5]]},"319":{"position":[[472,6]]},"436":{"position":[[216,5],[229,6]]},"438":{"position":[[108,5],[312,5]]}}}],["stage",{"_index":1081,"t":{"112":{"position":[[102,6],[329,5]]},"114":{"position":[[125,6],[352,5]]},"116":{"position":[[515,5]]},"128":{"position":[[261,6],[543,6],[878,6],[916,5],[935,6],[1128,5],[1258,6]]}}}],["standalon",{"_index":2244,"t":{"440":{"position":[[2,10]]}}}],["standard",{"_index":232,"t":{"19":{"position":[[53,8]]},"50":{"position":[[95,8]]},"59":{"position":[[759,8]]},"81":{"position":[[240,8]]},"101":{"position":[[642,8]]},"142":{"position":[[271,8]]},"162":{"position":[[653,8]]},"227":{"position":[[85,8]]},"398":{"position":[[73,10]]},"438":{"position":[[292,8]]}}}],["stanza",{"_index":1873,"t":{"319":{"position":[[507,7]]}}}],["stargz",{"_index":808,"t":{"59":{"position":[[907,6],[1113,6]]},"61":{"position":[[340,6]]}}}],["start",{"_index":157,"t":{"13":{"position":[[194,7]]},"25":{"position":[[99,7]]},"27":{"position":[[44,7]]},"31":{"position":[[676,5]]},"33":{"position":[[152,5]]},"39":{"position":[[454,5],[509,6]]},"41":{"position":[[94,5],[388,8]]},"44":{"position":[[426,8],[611,8]]},"50":{"position":[[141,5],[190,5],[490,8]]},"56":{"position":[[53,8]]},"59":{"position":[[163,5],[312,5]]},"87":{"position":[[161,8]]},"101":{"position":[[1164,8]]},"104":{"position":[[194,7]]},"106":{"position":[[171,5],[191,5]]},"108":{"position":[[1169,7],[1476,8]]},"110":{"position":[[355,8],[582,8],[1925,8],[2697,5]]},"112":{"position":[[420,7]]},"114":{"position":[[443,7]]},"118":{"position":[[777,8],[1154,5],[1334,5],[1740,5],[1767,5],[1791,5],[1847,5]]},"124":{"position":[[94,5],[155,8],[816,8],[1024,5]]},"128":{"position":[[268,5],[947,6]]},"162":{"position":[[6489,8]]},"174":{"position":[[29,8],[954,8]]},"176":{"position":[[125,8]]},"178":{"position":[[112,8]]},"203":{"position":[[2741,5]]},"205":{"position":[[778,5]]},"215":{"position":[[163,7]]},"221":{"position":[[987,8]]},"229":{"position":[[7,5]]},"235":{"position":[[514,8]]},"277":{"position":[[26,5]]},"303":{"position":[[2119,8]]},"305":{"position":[[921,8]]},"307":{"position":[[0,5]]},"311":{"position":[[645,7]]},"324":{"position":[[432,8]]},"326":{"position":[[1134,5]]},"330":{"position":[[442,5]]},"332":{"position":[[508,7]]},"370":{"position":[[187,9]]},"374":{"position":[[0,8]]},"376":{"position":[[44,5],[252,5]]},"378":{"position":[[228,5]]},"404":{"position":[[459,8],[1110,5]]},"406":{"position":[[211,5]]},"420":{"position":[[496,5]]},"432":{"position":[[26,5],[755,5],[821,5]]},"472":{"position":[[288,8]]},"476":{"position":[[86,6]]},"510":{"position":[[61,8]]},"533":{"position":[[446,7]]}}}],["started/common/cgroup2",{"_index":531,"t":{"33":{"position":[[69,23]]}}}],["starter",{"_index":2388,"t":{"472":{"position":[[455,7]]}}}],["startup",{"_index":135,"t":{"11":{"position":[[73,7]]},"59":{"position":[[530,7]]},"108":{"position":[[260,7],[657,8]]},"110":{"position":[[74,7]]},"185":{"position":[[1354,8]]},"322":{"position":[[164,7]]},"336":{"position":[[116,8]]},"402":{"position":[[44,8]]},"404":{"position":[[722,8]]},"470":{"position":[[252,8]]}}}],["stat",{"_index":2666,"t":{"579":{"position":[[668,6]]},"585":{"position":[[261,4]]},"587":{"position":[[242,4]]},"589":{"position":[[248,4]]},"591":{"position":[[251,4]]},"593":{"position":[[173,4]]},"595":{"position":[[224,4]]},"597":{"position":[[178,4]]},"599":{"position":[[178,4]]},"650":{"position":[[798,6]]},"685":{"position":[[692,6]]},"687":{"position":[[581,6]]},"689":{"position":[[606,6]]},"691":{"position":[[758,6]]},"693":{"position":[[584,6]]},"695":{"position":[[616,6]]},"697":{"position":[[715,6]]},"712":{"position":[[195,4]]},"714":{"position":[[278,4]]},"716":{"position":[[197,4]]},"718":{"position":[[203,4]]},"720":{"position":[[136,4]]},"722":{"position":[[136,4]]}}}],["state",{"_index":615,"t":{"39":{"position":[[519,6]]},"85":{"position":[[90,5]]},"101":{"position":[[967,5]]},"146":{"position":[[124,5]]},"162":{"position":[[1287,5]]},"179":{"position":[[907,5],[1684,5],[2168,5],[2457,5]]},"203":{"position":[[1012,5],[1018,7]]},"213":{"position":[[1743,6]]},"279":{"position":[[3,7]]},"440":{"position":[[606,5]]},"454":{"position":[[235,5]]},"456":{"position":[[665,6]]},"540":{"position":[[2387,7]]},"542":{"position":[[172,6]]},"604":{"position":[[545,5]]},"606":{"position":[[526,5]]},"624":{"position":[[539,5]]},"677":{"position":[[511,5]]}}}],["statement",{"_index":1380,"t":{"185":{"position":[[1754,9],[1794,10]]},"436":{"position":[[66,11]]}}}],["static",{"_index":159,"t":{"15":{"position":[[30,6],[170,6]]},"176":{"position":[[277,10]]},"245":{"position":[[261,6]]}}}],["statist",{"_index":2247,"t":{"440":{"position":[[94,10]]}}}],["statu",{"_index":264,"t":{"19":{"position":[[766,6],[1235,6]]},"37":{"position":[[21,6],[61,6]]},"128":{"position":[[36,6],[95,6],[210,6],[228,7],[492,6],[510,7],[781,7]]},"203":{"position":[[1624,6],[3072,6]]},"205":{"position":[[1109,6]]},"221":{"position":[[1727,6]]},"332":{"position":[[755,6]]},"378":{"position":[[493,6]]},"522":{"position":[[450,6]]},"528":{"position":[[383,6]]}}}],["status.loadbalancer.ingress",{"_index":2132,"t":{"410":{"position":[[493,27]]}}}],["stay",{"_index":1914,"t":{"326":{"position":[[1448,4]]},"332":{"position":[[1052,4]]}}}],["stderr",{"_index":1556,"t":{"235":{"position":[[143,7]]}}}],["stdout",{"_index":1324,"t":{"179":{"position":[[741,7]]},"235":{"position":[[132,6]]}}}],["steadi",{"_index":2255,"t":{"440":{"position":[[599,6]]}}}],["step",{"_index":124,"t":{"8":{"position":[[112,5]]},"33":{"position":[[100,4]]},"59":{"position":[[53,5]]},"124":{"position":[[696,5]]},"168":{"position":[[775,5]]},"170":{"position":[[220,5]]},"209":{"position":[[48,6]]},"215":{"position":[[28,4]]},"268":{"position":[[827,4]]},"303":{"position":[[649,5]]},"305":{"position":[[581,6]]},"307":{"position":[[327,5]]},"319":{"position":[[174,5]]},"356":{"position":[[156,5],[231,5]]},"398":{"position":[[174,5]]},"406":{"position":[[598,5]]},"496":{"position":[[323,5]]},"498":{"position":[[366,5]]},"536":{"position":[[1284,5],[1427,5],[1509,5]]},"540":{"position":[[1660,4]]},"724":{"position":[[118,5]]},"726":{"position":[[118,5]]}}}],["still",{"_index":428,"t":{"25":{"position":[[775,5]]},"31":{"position":[[805,5]]},"59":{"position":[[823,5]]},"112":{"position":[[1516,5]]},"315":{"position":[[18,5]]},"340":{"position":[[1333,5]]}}}],["stop",{"_index":1021,"t":{"106":{"position":[[96,4],[115,4]]},"118":{"position":[[1600,4],[1685,4]]},"203":{"position":[[2581,7]]},"205":{"position":[[618,7]]},"307":{"position":[[1292,7]]},"542":{"position":[[104,8],[116,4]]},"550":{"position":[[165,4]]}}}],["storag",{"_index":30,"t":{"4":{"position":[[123,7],[171,7],[472,7]]},"152":{"position":[[33,7],[66,7],[101,7]]},"162":{"position":[[5705,7],[5724,9],[5748,7],[5783,7],[5944,8]]},"324":{"position":[[128,8]]},"384":{"position":[[209,7]]},"438":{"position":[[273,8]]},"454":{"position":[[898,8],[1125,7],[1148,7]]},"456":{"position":[[284,7],[406,7],[429,7]]},"476":{"position":[[1793,7]]},"496":{"position":[[178,7]]},"514":{"position":[[90,8],[110,7],[208,7],[342,7],[432,8],[529,8],[583,7],[604,7]]},"516":{"position":[[636,7]]},"518":{"position":[[139,7]]},"520":{"position":[[178,8]]},"524":{"position":[[97,7]]},"526":{"position":[[160,8]]},"610":{"position":[[2659,7]]},"612":{"position":[[2607,7]]},"614":{"position":[[2476,7]]},"616":{"position":[[2425,7]]},"618":{"position":[[2438,7]]},"620":{"position":[[2551,7]]},"622":{"position":[[2512,7]]},"626":{"position":[[2585,7]]},"628":{"position":[[2566,7]]},"630":{"position":[[2462,7]]},"632":{"position":[[2578,7]]},"634":{"position":[[2443,7]]},"636":{"position":[[2358,7]]},"646":{"position":[[2533,7]]},"652":{"position":[[2575,7]]},"654":{"position":[[2491,7]]},"656":{"position":[[2497,7]]},"729":{"position":[[2842,7]]},"731":{"position":[[2856,7]]},"733":{"position":[[2971,7]]}}}],["storage.yaml",{"_index":1920,"t":{"332":{"position":[[637,12]]}}}],["storageclassnam",{"_index":2568,"t":{"520":{"position":[[128,17]]},"526":{"position":[[112,17]]}}}],["storageo",{"_index":2562,"t":{"516":{"position":[[528,9]]}}}],["store",{"_index":926,"t":{"75":{"position":[[960,6],[1014,5],[1160,6],[1828,6]]},"77":{"position":[[1418,7]]},"108":{"position":[[444,6]]},"112":{"position":[[2511,6]]},"114":{"position":[[2296,6]]},"118":{"position":[[4409,6],[4454,6]]},"168":{"position":[[412,6]]},"181":{"position":[[20,6]]},"340":{"position":[[1342,6]]},"428":{"position":[[1472,6]]},"456":{"position":[[390,6]]},"496":{"position":[[126,5]]},"514":{"position":[[132,5]]},"533":{"position":[[1089,5]]}}}],["strategi",{"_index":2497,"t":{"482":{"position":[[392,10]]}}}],["stream",{"_index":1473,"t":{"203":{"position":[[2337,6]]},"205":{"position":[[374,6]]},"309":{"position":[[287,9]]},"398":{"position":[[1140,10]]},"474":{"position":[[704,10],[1327,10]]},"737":{"position":[[340,9],[587,10]]}}}],["streamingconnectionidletimeout",{"_index":2864,"t":{"737":{"position":[[79,30]]}}}],["string",{"_index":1384,"t":{"187":{"position":[[505,7],[523,6],[602,6]]},"247":{"position":[[1634,6]]},"283":{"position":[[356,6]]},"612":{"position":[[397,8]]}}}],["strip",{"_index":377,"t":{"21":{"position":[[386,5]]}}}],["strongswan",{"_index":1786,"t":{"303":{"position":[[1700,10],[2080,10]]}}}],["struct",{"_index":405,"t":{"23":{"position":[[506,6]]}}}],["structur",{"_index":399,"t":{"23":{"position":[[328,9],[436,9]]},"187":{"position":[[584,9]]},"340":{"position":[[924,9]]}}}],["stub",{"_index":2149,"t":{"420":{"position":[[151,4]]}}}],["style",{"_index":172,"t":{"15":{"position":[[252,5]]}}}],["styliz",{"_index":107,"t":{"6":{"position":[[124,8],[205,8]]}}}],["subcommand",{"_index":1020,"t":{"106":{"position":[[82,11]]},"112":{"position":[[68,11]]},"114":{"position":[[91,11]]},"118":{"position":[[2830,11],[2882,10],[3941,12],[3976,11],[4026,10],[4228,10],[4509,12],[4792,10]]}}}],["subdirectori",{"_index":1890,"t":{"326":{"position":[[495,15]]}}}],["subdomain",{"_index":1902,"t":{"326":{"position":[[1051,9]]}}}],["subject",{"_index":1246,"t":{"144":{"position":[[415,7]]},"162":{"position":[[1189,7]]},"217":{"position":[[979,7]]},"291":{"position":[[474,9]]},"468":{"position":[[4819,9],[5130,9],[5453,9],[5749,9]]},"770":{"position":[[96,9]]}}}],["submit",{"_index":1574,"t":{"243":{"position":[[332,6]]}}}],["subnet",{"_index":1784,"t":{"303":{"position":[[1447,7]]},"319":{"position":[[1135,7]]},"370":{"position":[[35,6]]}}}],["subsequ",{"_index":928,"t":{"75":{"position":[[1086,10]]},"283":{"position":[[429,10]]}}}],["subset",{"_index":2140,"t":{"416":{"position":[[23,6]]},"753":{"position":[[402,6],[623,6]]}}}],["substitut",{"_index":2154,"t":{"420":{"position":[[677,11]]}}}],["succe",{"_index":2593,"t":{"533":{"position":[[1265,8]]}}}],["successfulli",{"_index":1078,"t":{"110":{"position":[[2660,13]]},"112":{"position":[[2225,13]]},"114":{"position":[[2035,13]]},"116":{"position":[[1342,13]]},"118":{"position":[[1185,12]]},"221":{"position":[[1956,12]]},"251":{"position":[[207,12]]},"398":{"position":[[2335,13]]},"536":{"position":[[612,13]]}}}],["such",{"_index":56,"t":{"4":{"position":[[457,4]]},"54":{"position":[[116,5]]},"71":{"position":[[548,5]]},"174":{"position":[[623,4]]},"181":{"position":[[172,4]]},"185":{"position":[[1861,4]]},"187":{"position":[[41,4]]},"199":{"position":[[762,4]]},"217":{"position":[[490,4],[822,4]]},"221":{"position":[[71,4]]},"249":{"position":[[125,5]]},"255":{"position":[[268,4]]},"268":{"position":[[1084,4]]},"279":{"position":[[1350,4]]},"281":{"position":[[1010,4]]},"340":{"position":[[395,4]]},"360":{"position":[[320,4],[1176,4]]},"394":{"position":[[129,5]]},"408":{"position":[[429,4]]},"418":{"position":[[147,4]]},"422":{"position":[[22,4]]},"454":{"position":[[327,4],[494,5]]},"468":{"position":[[6435,4]]},"506":{"position":[[421,4]]},"548":{"position":[[958,5]]},"614":{"position":[[222,4]]},"689":{"position":[[2319,4],[2559,4],[2799,4]]},"695":{"position":[[2364,4]]},"700":{"position":[[72,4]]}}}],["sudo",{"_index":259,"t":{"19":{"position":[[702,4],[1185,4]]},"21":{"position":[[370,4],[531,4]]},"50":{"position":[[594,4]]},"52":{"position":[[456,4],[850,4]]},"203":{"position":[[396,4]]},"263":{"position":[[173,4],[222,4]]},"289":{"position":[[178,4]]},"291":{"position":[[593,4]]},"293":{"position":[[32,4],[97,4]]},"295":{"position":[[78,4]]},"297":{"position":[[0,4],[226,4]]},"299":{"position":[[0,4],[48,4],[112,4]]},"472":{"position":[[399,4],[1422,4],[1451,4]]},"552":{"position":[[116,4],[171,4],[240,4],[293,4]]}}}],["suffer",{"_index":704,"t":{"50":{"position":[[41,6]]}}}],["suffic",{"_index":1663,"t":{"266":{"position":[[627,8]]}}}],["suffici",{"_index":2507,"t":{"488":{"position":[[189,10]]},"490":{"position":[[188,10]]},"500":{"position":[[130,10]]}}}],["suffix",{"_index":1968,"t":{"352":{"position":[[204,6]]}}}],["suggest",{"_index":2894,"t":{"817":{"position":[[109,9]]}}}],["suit",{"_index":2794,"t":{"662":{"position":[[1033,7]]},"753":{"position":[[586,6]]}}}],["suitabl",{"_index":2771,"t":{"638":{"position":[[195,8]]}}}],["suites=tls_aes_128_gcm_sha256,tls_aes_256_gcm_sha384,tls_chacha20_poly1305_sha256",{"_index":2786,"t":{"662":{"position":[[183,82]]}}}],["suites=tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_gcm_sha256",{"_index":2876,"t":{"753":{"position":[[660,302]]}}}],["suites=tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_chacha20_poly1305",{"_index":2442,"t":{"476":{"position":[[2003,238]]}}}],["sum",{"_index":1285,"t":{"168":{"position":[[371,3],[475,3]]}}}],["summar",{"_index":1204,"t":{"128":{"position":[[1477,10]]},"187":{"position":[[276,10]]},"434":{"position":[[111,10]]}}}],["supervisor",{"_index":914,"t":{"75":{"position":[[230,10]]},"87":{"position":[[491,10],[531,10]]},"101":{"position":[[1747,10],[1787,10]]},"158":{"position":[[81,10]]},"162":{"position":[[8587,10],[8849,10],[8889,10]]},"317":{"position":[[158,10]]},"362":{"position":[[143,10]]}}}],["supplementalgroup",{"_index":2344,"t":{"468":{"position":[[1869,19],[2954,19],[3507,19],[3964,19]]}}}],["suppli",{"_index":1391,"t":{"189":{"position":[[638,6],[1454,6]]},"268":{"position":[[785,6]]},"428":{"position":[[1424,8]]}}}],["support",{"_index":485,"t":{"27":{"position":[[660,8]]},"31":{"position":[[615,10],[649,10],[971,10]]},"33":{"position":[[514,10]]},"35":{"position":[[553,8]]},"50":{"position":[[524,7]]},"56":{"position":[[212,10]]},"59":{"position":[[252,8]]},"108":{"position":[[1349,7]]},"118":{"position":[[2597,8],[2610,8],[2715,7],[3958,8]]},"120":{"position":[[4,8]]},"124":{"position":[[236,10],[897,10]]},"130":{"position":[[183,9]]},"172":{"position":[[4,8]]},"178":{"position":[[13,7],[211,8]]},"185":{"position":[[765,8],[1544,10],[1764,7],[1805,7]]},"187":{"position":[[1191,7]]},"189":{"position":[[183,9],[1227,10]]},"203":{"position":[[90,8],[1994,7]]},"205":{"position":[[31,7]]},"217":{"position":[[194,8]]},"231":{"position":[[35,7]]},"245":{"position":[[451,7]]},"249":{"position":[[148,8],[316,8]]},"251":{"position":[[44,9]]},"273":{"position":[[4,8],[358,7]]},"283":{"position":[[75,10]]},"311":{"position":[[26,7],[74,7],[1230,9]]},"313":{"position":[[385,9]]},"315":{"position":[[525,9]]},"356":{"position":[[369,7]]},"372":{"position":[[4,8]]},"454":{"position":[[55,7],[787,7]]},"468":{"position":[[52,7],[868,7]]},"510":{"position":[[4,8]]},"524":{"position":[[26,7],[45,8]]},"533":{"position":[[1215,10]]},"552":{"position":[[18,9]]},"800":{"position":[[60,7]]}}}],["sure",{"_index":538,"t":{"33":{"position":[[303,4],[786,4]]},"118":{"position":[[3634,4]]},"245":{"position":[[473,4]]},"251":{"position":[[307,4]]},"384":{"position":[[442,4]]}}}],["sustain",{"_index":2529,"t":{"500":{"position":[[416,8]]}}}],["svc",{"_index":2105,"t":{"398":{"position":[[3928,3]]},"410":{"position":[[226,3]]},"468":{"position":[[5308,3]]}}}],["svccontroller.k3s.cattle.io/enablelb=tru",{"_index":2135,"t":{"414":{"position":[[11,41]]},"416":{"position":[[268,41],[384,41]]}}}],["svccontroller.k3s.cattle.io/lbpool=pool1",{"_index":2144,"t":{"416":{"position":[[223,40],[481,41]]}}}],["svccontroller.k3s.cattle.io/lbpool=pool2",{"_index":2145,"t":{"416":{"position":[[339,40],[652,41]]}}}],["svccontroller.k3s.cattle.io/svcnam",{"_index":2377,"t":{"470":{"position":[[1661,36],[2344,36]]}}}],["svclb",{"_index":283,"t":{"19":{"position":[[1042,5]]},"468":{"position":[[3628,5],[4599,5],[5621,5],[5788,5]]}}}],["svclbtraefik",{"_index":2376,"t":{"470":{"position":[[1585,12],[2268,12]]}}}],["swanctl",{"_index":1787,"t":{"303":{"position":[[1725,7],[2091,7]]},"305":{"position":[[257,7]]}}}],["swap",{"_index":2475,"t":{"476":{"position":[[3780,4]]},"735":{"position":[[1297,4],[2520,4]]},"747":{"position":[[1488,4],[2711,4]]}}}],["switch",{"_index":1986,"t":{"356":{"position":[[240,6]]},"360":{"position":[[1077,8]]},"414":{"position":[[80,8]]}}}],["symlink",{"_index":2189,"t":{"432":{"position":[[530,8],[660,8]]}}}],["sync",{"_index":1202,"t":{"128":{"position":[[1437,4]]},"326":{"position":[[1456,4],[1494,4]]},"504":{"position":[[330,4]]}}}],["syntax",{"_index":1577,"t":{"245":{"position":[[93,6]]},"689":{"position":[[2125,6],[2365,6],[2605,6]]},"695":{"position":[[2170,6]]}}}],["sysctl",{"_index":1843,"t":{"313":{"position":[[145,6]]},"464":{"position":[[352,6]]},"468":{"position":[[2279,7]]}}}],["system",{"_index":268,"t":{"19":{"position":[[791,6],[860,6],[922,6],[981,6],[1035,6],[1085,6]]},"27":{"position":[[415,6]]},"33":{"position":[[468,6]]},"44":{"position":[[547,7]]},"54":{"position":[[73,6],[355,6]]},"63":{"position":[[242,6],[354,6]]},"75":{"position":[[1179,6]]},"108":{"position":[[1277,6]]},"118":{"position":[[243,6],[2679,7]]},"150":{"position":[[761,7]]},"162":{"position":[[2480,8],[7566,6],[7648,6]]},"247":{"position":[[298,6],[670,6]]},"249":{"position":[[817,6]]},"273":{"position":[[404,6],[468,6],[566,6],[614,6],[752,6]]},"277":{"position":[[163,8]]},"279":{"position":[[395,6]]},"303":{"position":[[731,7]]},"322":{"position":[[369,6],[555,6]]},"332":{"position":[[780,6],[849,6],[911,6]]},"352":{"position":[[147,7]]},"354":{"position":[[203,8]]},"356":{"position":[[45,8]]},"398":{"position":[[1375,6],[1407,6],[1490,6],[1952,7],[1973,7],[1981,6],[2093,6],[2254,6],[3803,6]]},"410":{"position":[[165,6]]},"428":{"position":[[115,8]]},"432":{"position":[[163,8]]},"438":{"position":[[190,6],[495,6]]},"442":{"position":[[8,6]]},"446":{"position":[[144,6],[256,6]]},"448":{"position":[[149,6],[261,6]]},"450":{"position":[[22,6]]},"454":{"position":[[248,7]]},"456":{"position":[[658,6]]},"460":{"position":[[536,7]]},"468":{"position":[[819,7],[840,7],[2139,7],[2188,6],[3176,6],[4390,6],[4992,6],[5288,6],[5349,6],[5659,6],[5899,6],[5990,6],[6493,6]]},"470":{"position":[[412,6],[503,6],[1402,6],[1622,6],[1863,6],[2085,6],[2305,6],[2546,6]]},"482":{"position":[[332,7]]},"484":{"position":[[211,6],[281,7]]},"500":{"position":[[238,6],[406,6],[439,6]]},"502":{"position":[[107,8]]},"506":{"position":[[722,7]]},"524":{"position":[[105,6],[415,7]]},"531":{"position":[[289,6]]},"536":{"position":[[52,6],[989,6],[1218,6],[1368,6],[1577,6],[1668,6],[1890,6]]},"538":{"position":[[4,6]]},"540":{"position":[[503,6],[679,6],[851,6],[1086,6],[2683,6],[2727,6]]},"546":{"position":[[1035,6]]},"559":{"position":[[94,7]]},"561":{"position":[[94,7]]},"563":{"position":[[94,7]]},"565":{"position":[[94,7]]},"567":{"position":[[94,7]]},"569":{"position":[[94,7]]},"571":{"position":[[94,7]]},"573":{"position":[[94,7]]},"575":{"position":[[94,7]]},"577":{"position":[[94,7]]},"583":{"position":[[94,7]]},"585":{"position":[[84,7]]},"587":{"position":[[84,7]]},"589":{"position":[[84,7]]},"591":{"position":[[84,7]]},"593":{"position":[[84,7]]},"595":{"position":[[84,7]]},"597":{"position":[[84,7]]},"599":{"position":[[84,7]]},"708":{"position":[[94,7]]},"710":{"position":[[94,7]]},"712":{"position":[[84,7]]},"714":{"position":[[84,7]]},"716":{"position":[[84,7]]},"718":{"position":[[84,7]]},"729":{"position":[[362,7]]},"731":{"position":[[348,7]]},"733":{"position":[[404,7]]},"735":{"position":[[334,7]]},"737":{"position":[[391,7]]},"739":{"position":[[368,7]]},"741":{"position":[[368,7]]},"743":{"position":[[242,7]]},"745":{"position":[[336,7]]},"747":{"position":[[552,7]]},"749":{"position":[[418,7]]},"751":{"position":[[272,7]]},"753":{"position":[[977,7]]},"773":{"position":[[98,6]]}}}],["system.slice/k3s.servic",{"_index":2250,"t":{"440":{"position":[[241,24]]}}}],["system:authent",{"_index":2363,"t":{"468":{"position":[[4849,20]]}}}],["system:bootstrappers:k3s:default",{"_index":1328,"t":{"179":{"position":[[1231,33]]}}}],["system:mast",{"_index":2880,"t":{"768":{"position":[[37,14]]}}}],["system:nod",{"_index":2364,"t":{"468":{"position":[[5196,12]]}}}],["system:serviceaccount",{"_index":2365,"t":{"468":{"position":[[5519,22]]}}}],["system_031e74b5",{"_index":341,"t":{"19":{"position":[[2417,15]]}}}],["system_07abe831",{"_index":314,"t":{"19":{"position":[[1714,15],[2031,15]]}}}],["system_2dbd22bf",{"_index":331,"t":{"19":{"position":[[2234,15],[2925,15]]}}}],["system_d05725df",{"_index":351,"t":{"19":{"position":[[2590,15],[2750,15]]}}}],["system_d46f10c6",{"_index":301,"t":{"19":{"position":[[1366,15],[1529,15],[1870,15]]}}}],["systemctl",{"_index":545,"t":{"33":{"position":[[646,9],[681,9]]},"37":{"position":[[4,9]]},"46":{"position":[[41,9],[673,9]]},"106":{"position":[[105,9],[181,9]]},"118":{"position":[[1675,9],[1757,9],[1837,9]]},"124":{"position":[[384,9],[1282,9]]},"126":{"position":[[318,9],[1139,9]]},"203":{"position":[[1248,9],[1274,9],[2731,9]]},"205":{"position":[[768,9]]},"317":{"position":[[1239,9],[1263,9]]},"472":{"position":[[1427,9],[1456,9]]},"552":{"position":[[121,9],[176,9]]},"729":{"position":[[412,9],[436,9]]},"731":{"position":[[398,9],[422,9]]},"733":{"position":[[454,9],[478,9]]},"735":{"position":[[384,9],[408,9]]},"737":{"position":[[441,9],[465,9]]},"739":{"position":[[418,9],[442,9]]},"741":{"position":[[418,9],[442,9]]},"743":{"position":[[292,9],[316,9]]},"745":{"position":[[386,9],[410,9]]},"747":{"position":[[602,9],[626,9]]},"749":{"position":[[468,9],[492,9]]},"751":{"position":[[322,9],[346,9]]},"753":{"position":[[1027,9],[1051,9]]}}}],["systemd",{"_index":180,"t":{"17":{"position":[[151,7],[551,7]]},"33":{"position":[[977,7],[1055,7]]},"35":{"position":[[287,7]]},"41":{"position":[[61,7],[235,8]]},"50":{"position":[[200,7]]},"112":{"position":[[2534,7]]},"114":{"position":[[2319,7]]},"124":{"position":[[376,7],[1274,7]]},"126":{"position":[[310,7],[1131,7]]},"235":{"position":[[239,8]]},"277":{"position":[[138,7]]},"305":{"position":[[849,7]]},"380":{"position":[[281,7]]},"428":{"position":[[91,7]]},"432":{"position":[[138,7],[1272,7],[1626,7],[1823,7],[2575,7]]},"440":{"position":[[155,7],[192,7]]},"472":{"position":[[1112,7]]},"548":{"position":[[298,7]]},"552":{"position":[[59,7],[79,7]]},"555":{"position":[[1801,7]]}}}],["s|l|o|t|m|a",{"_index":2810,"t":{"689":{"position":[[2226,14],[2466,14],[2706,14]]},"695":{"position":[[2271,14]]}}}],["t",{"_index":971,"t":{"83":{"position":[[54,1]]},"101":{"position":[[698,1]]},"137":{"position":[[54,1]]},"162":{"position":[[2715,1]]}}}],["tabl",{"_index":1203,"t":{"128":{"position":[[1470,6]]},"187":{"position":[[270,5]]}}}],["tag",{"_index":739,"t":{"52":{"position":[[639,4],[655,3],[717,5],[738,3]]},"249":{"position":[[869,4]]},"273":{"position":[[282,3]]},"340":{"position":[[834,3]]},"348":{"position":[[282,3]]}}}],["tail",{"_index":2668,"t":{"579":{"position":[[809,4]]},"602":{"position":[[272,4]]},"610":{"position":[[502,4]]},"612":{"position":[[485,4]]},"614":{"position":[[359,4]]},"616":{"position":[[325,4]]},"618":{"position":[[338,4]]},"620":{"position":[[429,4]]},"622":{"position":[[336,4]]},"626":{"position":[[402,4]]},"628":{"position":[[424,4]]},"630":{"position":[[320,4]]},"632":{"position":[[455,4]]},"634":{"position":[[316,4]]},"636":{"position":[[267,4]]},"646":{"position":[[397,4]]},"650":{"position":[[939,4]]},"652":{"position":[[468,4]]},"654":{"position":[[399,4]]},"656":{"position":[[411,4]]},"658":{"position":[[453,4]]},"662":{"position":[[1005,4]]},"665":{"position":[[363,4]]},"667":{"position":[[293,4]]},"669":{"position":[[313,4]]},"671":{"position":[[409,4]]},"673":{"position":[[346,4]]},"680":{"position":[[271,4]]},"682":{"position":[[281,4]]},"685":{"position":[[833,4]]},"687":{"position":[[722,4]]},"689":{"position":[[747,4]]},"691":{"position":[[899,4]]},"693":{"position":[[725,4]]},"695":{"position":[[757,4]]},"697":{"position":[[856,4]]},"703":{"position":[[151,4]]},"729":{"position":[[662,4]]},"731":{"position":[[648,4]]},"733":{"position":[[704,4]]},"735":{"position":[[514,4]]},"737":{"position":[[571,4]]},"747":{"position":[[732,4]]}}}],["tailscal",{"_index":1852,"t":{"315":{"position":[[266,9]]},"319":{"position":[[74,9],[106,9],[196,9],[243,9],[651,9],[744,9],[1038,9]]}}}],["taint",{"_index":605,"t":{"39":{"position":[[70,5],[99,5],[160,6],[972,6],[1125,6]]},"87":{"position":[[204,5],[252,6]]},"99":{"position":[[70,5],[99,5],[160,6],[330,6],[394,5],[460,6],[588,6]]},"101":{"position":[[1207,5],[1264,6]]},"162":{"position":[[6532,5],[6589,6]]},"213":{"position":[[1419,7],[1436,5],[1491,7],[1518,5]]},"283":{"position":[[677,6],[802,7],[960,6]]},"336":{"position":[[467,7]]},"420":{"position":[[388,5],[707,7]]}}}],["take",{"_index":185,"t":{"17":{"position":[[317,4]]},"118":{"position":[[4803,5]]},"124":{"position":[[627,4],[1617,4]]},"193":{"position":[[110,4]]},"195":{"position":[[245,4],[286,6]]},"247":{"position":[[1568,4]]},"281":{"position":[[968,4]]},"307":{"position":[[241,4]]},"346":{"position":[[568,4]]},"646":{"position":[[304,5]]}}}],["taken",{"_index":1893,"t":{"326":{"position":[[612,5]]},"398":{"position":[[193,5]]},"456":{"position":[[94,5]]},"705":{"position":[[188,5]]}}}],["tar",{"_index":375,"t":{"21":{"position":[[375,3]]},"263":{"position":[[18,3],[126,3]]},"271":{"position":[[110,4],[203,3],[288,3]]}}}],["target",{"_index":797,"t":{"59":{"position":[[575,6]]},"110":{"position":[[1461,6],[1980,6]]},"247":{"position":[[1130,6]]},"540":{"position":[[1416,7],[1556,7]]}}}],["targetnamespac",{"_index":1592,"t":{"247":{"position":[[738,16]]}}}],["task",{"_index":2274,"t":{"454":{"position":[[194,5]]}}}],["tcp",{"_index":1428,"t":{"203":{"position":[[63,3],[542,3],[613,3],[624,3],[2190,3]]},"205":{"position":[[227,3]]},"217":{"position":[[509,5]]},"362":{"position":[[45,3],[115,3],[241,3]]},"470":{"position":[[823,3]]}}}],["tcpdump",{"_index":877,"t":{"65":{"position":[[1052,7],[1071,7],[1123,7]]}}}],["tcplog",{"_index":1433,"t":{"203":{"position":[[553,6]]}}}],["team",{"_index":1356,"t":{"185":{"position":[[290,4]]},"555":{"position":[[374,6]]}}}],["technic",{"_index":2625,"t":{"546":{"position":[[776,9]]}}}],["techniqu",{"_index":794,"t":{"59":{"position":[[494,9]]},"531":{"position":[[34,10]]}}}],["technolog",{"_index":2552,"t":{"516":{"position":[[228,12]]}}}],["tell",{"_index":662,"t":{"44":{"position":[[375,4]]}}}],["templat",{"_index":397,"t":{"23":{"position":[[293,8],[361,9]]},"75":{"position":[[1217,8]]},"245":{"position":[[82,10],[212,9]]},"247":{"position":[[2263,9]]}}}],["temporari",{"_index":170,"t":{"15":{"position":[[234,9]]},"112":{"position":[[116,9],[1005,9],[1217,9]]},"114":{"position":[[139,9],[1583,9]]},"116":{"position":[[663,9]]},"454":{"position":[[385,9],[952,9]]}}}],["term",{"_index":102,"t":{"6":{"position":[[66,5]]},"356":{"position":[[393,6]]}}}],["termin",{"_index":552,"t":{"33":{"position":[[863,9],[876,8],[963,9]]},"398":{"position":[[1051,11]]},"474":{"position":[[615,11],[1238,11]]},"480":{"position":[[233,11],[350,11]]},"500":{"position":[[18,10],[357,10]]},"665":{"position":[[172,10],[244,10],[379,11]]}}}],["terraform",{"_index":2583,"t":{"531":{"position":[[181,10]]}}}],["test",{"_index":1713,"t":{"279":{"position":[[353,5]]},"356":{"position":[[306,6]]},"358":{"position":[[213,5]]},"432":{"position":[[2333,8]]},"434":{"position":[[37,5],[679,7]]},"436":{"position":[[13,5]]},"438":{"position":[[4,6]]},"444":{"position":[[37,5]]},"446":{"position":[[239,6],[385,6]]},"448":{"position":[[244,6]]},"500":{"position":[[460,6]]},"522":{"position":[[48,4],[105,4]]},"528":{"position":[[48,4],[105,4]]},"555":{"position":[[642,6],[832,7],[1123,8],[1210,4],[1719,4],[1937,5]]},"585":{"position":[[197,4]]},"587":{"position":[[174,4]]},"589":{"position":[[180,4]]},"591":{"position":[[182,4]]},"697":{"position":[[34,5]]},"714":{"position":[[216,4]]},"729":{"position":[[492,4]]},"731":{"position":[[478,4]]},"733":{"position":[[534,4]]}}}],["text",{"_index":1344,"t":{"179":{"position":[[2637,5],[2658,7]]},"689":{"position":[[2261,5],[2501,5],[2741,5]]},"695":{"position":[[2306,5]]}}}],["tgz",{"_index":1600,"t":{"247":{"position":[[1077,6],[2077,4]]}}}],["themselv",{"_index":215,"t":{"17":{"position":[[927,10]]},"39":{"position":[[724,10]]}}}],["therefor",{"_index":2023,"t":{"360":{"position":[[1198,10]]},"468":{"position":[[6511,10]]}}}],["thing",{"_index":2615,"t":{"540":{"position":[[1185,6]]}}}],["third",{"_index":1411,"t":{"199":{"position":[[363,5]]},"221":{"position":[[1377,5],[1659,5]]},"516":{"position":[[195,5]]},"531":{"position":[[135,5]]},"807":{"position":[[102,5]]}}}],["those",{"_index":918,"t":{"75":{"position":[[628,5]]},"217":{"position":[[113,5]]},"322":{"position":[[611,5]]},"326":{"position":[[700,5],[1468,5]]},"398":{"position":[[3008,5],[3414,5]]}}}],["though",{"_index":1951,"t":{"340":{"position":[[1480,6]]},"484":{"position":[[294,6]]}}}],["three",{"_index":904,"t":{"71":{"position":[[228,5]]},"124":{"position":[[1037,5]]},"126":{"position":[[893,5]]},"172":{"position":[[13,5]]},"189":{"position":[[1859,5]]},"201":{"position":[[481,5]]},"221":{"position":[[666,5]]}}}],["threshold",{"_index":2524,"t":{"500":{"position":[[36,9],[489,9]]},"665":{"position":[[190,9],[218,10],[398,10]]}}}],["threshold=10",{"_index":2072,"t":{"398":{"position":[[1070,13]]},"474":{"position":[[634,13],[1257,13]]},"665":{"position":[[262,12]]}}}],["through",{"_index":175,"t":{"17":{"position":[[79,7],[1053,7]]},"281":{"position":[[1152,7]]},"317":{"position":[[97,7],[532,7],[607,7]]},"340":{"position":[[427,7]]},"360":{"position":[[409,7]]},"398":{"position":[[1468,7]]},"424":{"position":[[601,7]]},"478":{"position":[[154,7]]},"531":{"position":[[127,7]]},"536":{"position":[[311,7]]},"546":{"position":[[281,7],[420,7]]}}}],["throughput",{"_index":2285,"t":{"456":{"position":[[520,10]]}}}],["thu",{"_index":1497,"t":{"213":{"position":[[1281,4]]},"540":{"position":[[2113,5]]}}}],["ti",{"_index":2622,"t":{"546":{"position":[[94,4],[504,4]]}}}],["tiller",{"_index":1642,"t":{"251":{"position":[[422,6]]}}}],["time",{"_index":156,"t":{"13":{"position":[[185,4]]},"39":{"position":[[183,5]]},"59":{"position":[[38,4],[169,5]]},"99":{"position":[[183,5]]},"104":{"position":[[185,4]]},"108":{"position":[[1160,4]]},"110":{"position":[[382,5],[2721,5]]},"118":{"position":[[250,5],[2110,4]]},"124":{"position":[[214,4],[875,4]]},"135":{"position":[[845,4]]},"162":{"position":[[4710,4]]},"179":{"position":[[2387,4]]},"217":{"position":[[135,5],[259,5],[427,5],[1054,5]]},"231":{"position":[[8,4]]},"275":{"position":[[90,5]]},"332":{"position":[[526,5]]},"398":{"position":[[3077,7]]},"486":{"position":[[154,4]]},"494":{"position":[[418,4],[435,4]]},"500":{"position":[[298,5]]},"540":{"position":[[1391,5],[2035,4]]},"544":{"position":[[172,5]]}}}],["time=\"2022",{"_index":2743,"t":{"610":{"position":[[723,10]]},"612":{"position":[[671,10]]},"614":{"position":[[540,10]]},"616":{"position":[[489,10]]},"618":{"position":[[502,10]]},"620":{"position":[[615,10]]},"622":{"position":[[576,10]]},"626":{"position":[[649,10]]},"628":{"position":[[630,10]]},"630":{"position":[[526,10]]},"632":{"position":[[642,10]]},"634":{"position":[[507,10]]},"636":{"position":[[422,10]]},"646":{"position":[[597,10]]},"652":{"position":[[639,10],[2815,10]]},"654":{"position":[[555,10]]},"656":{"position":[[561,10]]},"667":{"position":[[448,10]]},"669":{"position":[[516,10]]},"671":{"position":[[601,10]]},"673":{"position":[[498,10]]},"680":{"position":[[407,10]]},"682":{"position":[[481,10]]},"729":{"position":[[906,10]]},"731":{"position":[[920,10]]},"733":{"position":[[1035,10]]},"735":{"position":[[712,10],[1935,10]]},"747":{"position":[[903,10],[2126,10]]}}}],["timeout",{"_index":1226,"t":{"135":{"position":[[1689,7],[1706,7]]},"162":{"position":[[5643,7],[5665,7]]},"247":{"position":[[1764,7],[1805,7]]},"492":{"position":[[26,7],[99,7],[147,7],[441,7]]},"737":{"position":[[614,8]]}}}],["timeout=300",{"_index":2069,"t":{"398":{"position":[[974,13]]},"474":{"position":[[538,13],[1161,13]]}}}],["timeout=5m",{"_index":2075,"t":{"398":{"position":[[1167,11]]},"474":{"position":[[731,11],[1354,11]]},"737":{"position":[[366,10]]}}}],["timestamp",{"_index":1220,"t":{"135":{"position":[[750,10]]},"162":{"position":[[4612,11]]}}}],["tip",{"_index":1409,"t":{"199":{"position":[[175,3]]},"510":{"position":[[300,3]]},"536":{"position":[[1706,3]]},"546":{"position":[[851,3]]}}}],["tl",{"_index":46,"t":{"4":{"position":[[300,3]]},"135":{"position":[[202,3],[330,3],[448,3]]},"144":{"position":[[346,3],[448,3]]},"162":{"position":[[1113,3],[1229,3],[4020,3],[4154,3],[4281,3]]},"168":{"position":[[682,3],[879,3]]},"170":{"position":[[237,3]]},"187":{"position":[[700,3],[829,3],[1044,3],[1368,3]]},"189":{"position":[[1191,3],[1206,3]]},"201":{"position":[[238,3]]},"213":{"position":[[737,3],[957,3]]},"217":{"position":[[887,3],[1011,3]]},"221":{"position":[[1247,3],[1550,3]]},"281":{"position":[[339,3],[526,3]]},"336":{"position":[[690,3]]},"342":{"position":[[32,3],[125,4],[134,3],[487,3]]},"344":{"position":[[106,4],[350,4],[609,4]]},"346":{"position":[[110,4],[429,3]]},"476":{"position":[[1817,3],[1901,3],[1992,3],[4218,3],[4290,3]]},"579":{"position":[[1114,4],[1444,4]]},"610":{"position":[[77,3],[2683,3],[2758,3]]},"612":{"position":[[76,3],[2631,3],[2706,3]]},"614":{"position":[[2500,3],[2575,3]]},"616":{"position":[[2449,3],[2524,3]]},"618":{"position":[[2462,3],[2537,3]]},"620":{"position":[[2575,3],[2650,3]]},"622":{"position":[[2536,3],[2611,3]]},"626":{"position":[[2609,3],[2684,3]]},"628":{"position":[[2590,3],[2665,3]]},"630":{"position":[[2486,3],[2561,3]]},"632":{"position":[[2602,3],[2677,3]]},"634":{"position":[[2467,3],[2542,3]]},"636":{"position":[[2382,3],[2457,3]]},"646":{"position":[[2557,3],[2632,3]]},"650":{"position":[[77,3],[1244,4],[1574,4]]},"652":{"position":[[77,3],[243,3],[294,3],[341,3],[497,3],[530,3],[2599,3],[2674,3]]},"654":{"position":[[77,3],[2515,3],[2590,3]]},"656":{"position":[[77,3],[2521,3],[2596,3]]},"662":{"position":[[172,3],[1021,4]]},"685":{"position":[[78,3],[1138,4],[1468,4]]},"687":{"position":[[1027,4],[1357,4]]},"689":{"position":[[147,3],[1052,4],[1382,4]]},"691":{"position":[[83,3],[1204,4],[1534,4]]},"693":{"position":[[1030,4],[1360,4]]},"695":{"position":[[152,3],[1062,4],[1392,4],[2048,4],[2084,4]]},"697":{"position":[[1161,4],[1491,4]]},"729":{"position":[[2866,3],[2941,3]]},"731":{"position":[[2880,3],[2955,3]]},"733":{"position":[[2995,3],[3070,3]]},"735":{"position":[[1743,3],[1806,3],[2966,3],[3029,3]]},"747":{"position":[[447,3],[494,3],[761,3],[794,3],[1934,3],[1997,3],[3157,3],[3220,3]]},"753":{"position":[[575,3],[649,3]]}}}],["tls=fals",{"_index":2683,"t":{"579":{"position":[[1970,12]]},"650":{"position":[[2100,12]]},"685":{"position":[[1994,12]]},"687":{"position":[[1883,12]]},"689":{"position":[[188,9],[1908,12]]},"691":{"position":[[2060,12]]},"693":{"position":[[1886,12]]},"695":{"position":[[198,9],[1918,12],[2137,9],[2399,9]]},"697":{"position":[[2017,12]]}}}],["tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_128_gcm_sha256",{"_index":2787,"t":{"662":{"position":[[266,77]]}}}],["tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_gcm_sha256",{"_index":2875,"t":{"753":{"position":[[98,295]]}}}],["tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384",{"_index":2788,"t":{"662":{"position":[[344,77]]}}}],["tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_chacha20_poly1305_sha256",{"_index":2789,"t":{"662":{"position":[[422,85]]}}}],["tls_ecdhe_rsa_with_3des_ede_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_128_gcm_sha256",{"_index":2790,"t":{"662":{"position":[[508,109]]}}}],["tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305",{"_index":2791,"t":{"662":{"position":[[618,110]]}}}],["tls_ecdhe_rsa_with_chacha20_poly1305_sha256,tls_rsa_with_3des_ede_cbc_sha,tls_rsa_with_aes_128_cbc_sha",{"_index":2792,"t":{"662":{"position":[[729,103]]}}}],["tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_256_gcm_sha384",{"_index":2793,"t":{"662":{"position":[[833,92]]}}}],["tlscertfil",{"_index":2868,"t":{"747":{"position":[[79,11]]}}}],["tlsciphersuit",{"_index":2874,"t":{"753":{"position":[[79,15]]}}}],["tlsprivatekeyfil",{"_index":2869,"t":{"747":{"position":[[168,17]]}}}],["togeth",{"_index":1489,"t":{"207":{"position":[[715,9]]},"426":{"position":[[188,9]]}}}],["token",{"_index":160,"t":{"15":{"position":[[37,5],[77,5],[177,5],[263,6],[331,5]]},"77":{"position":[[1111,5],[1134,7],[1154,5]]},"83":{"position":[[40,5],[72,5],[106,5],[138,5]]},"97":{"position":[[130,5]]},"101":{"position":[[684,5],[716,5],[763,5],[790,5]]},"108":{"position":[[516,5]]},"110":{"position":[[1129,7]]},"112":{"position":[[723,5],[793,5],[1759,6],[2417,5],[2455,5],[2498,5]]},"114":{"position":[[563,5],[1652,5],[1848,5],[2172,6],[2241,5],[2283,5]]},"116":{"position":[[82,7],[221,6],[992,6]]},"132":{"position":[[257,5]]},"137":{"position":[[40,5],[132,5],[213,5],[315,5]]},"160":{"position":[[166,5]]},"162":{"position":[[2701,5],[2806,5],[2853,5],[2885,5],[3000,5]]},"164":{"position":[[9,6],[49,6]]},"166":{"position":[[4,6]]},"168":{"position":[[11,5],[62,6],[187,5],[621,6],[715,5],[1097,6],[1328,5],[1367,5]]},"170":{"position":[[10,5],[60,5],[131,5]]},"172":{"position":[[28,7],[52,5],[94,5],[204,5],[234,5]]},"174":{"position":[[6,5],[121,5],[212,5],[375,5],[444,5],[490,5],[750,7],[779,5],[924,5]]},"176":{"position":[[22,5],[54,6],[71,5],[226,5],[257,5],[331,5],[385,6],[422,5],[476,6]]},"178":{"position":[[33,5],[92,6],[282,7],[300,6]]},"179":{"position":[[14,6],[76,5],[92,7],[112,5],[144,5],[169,6],[187,5],[268,6],[313,6],[374,6],[436,6],[491,5],[504,8],[526,6],[537,7],[559,5],[595,5],[617,5],[667,5],[822,5],[1103,5],[1155,5],[1270,7],[1314,5],[1383,5],[1474,5],[1533,5],[1566,7],[1583,5],[1618,5],[1823,5],[1879,6],[1944,6],[2064,5],[2307,5],[2334,7]]},"191":{"position":[[171,5],[277,5],[346,5],[412,5]]},"193":{"position":[[255,6]]},"201":{"position":[[217,6]]},"213":{"position":[[288,5],[344,5],[386,5],[581,6]]},"215":{"position":[[90,5],[185,5],[227,5],[393,6],[961,5],[1075,5]]},"219":{"position":[[420,5]]},"221":{"position":[[1077,5]]},"239":{"position":[[42,7],[62,5]]},"268":{"position":[[418,5]]},"277":{"position":[[752,6],[849,5],[1178,5],[1263,5],[1448,5],[1673,5]]},"279":{"position":[[786,5]]},"283":{"position":[[574,6],[906,6]]},"285":{"position":[[127,6],[571,5]]},"293":{"position":[[80,5],[165,5],[178,8]]},"295":{"position":[[277,5]]},"342":{"position":[[608,6],[769,5]]},"378":{"position":[[305,5],[311,7]]},"428":{"position":[[1515,5]]},"476":{"position":[[3111,5]]},"494":{"position":[[174,5],[237,5],[333,5]]},"506":{"position":[[469,5]]},"533":{"position":[[465,5],[576,6],[621,6],[719,5],[922,5]]},"604":{"position":[[244,5],[354,5]]},"735":{"position":[[830,5],[2053,5]]},"747":{"position":[[1021,5],[2244,5]]},"766":{"position":[[120,6]]}}}],["token=secret",{"_index":1494,"t":{"213":{"position":[[638,12]]},"215":{"position":[[450,12]]},"268":{"position":[[961,12],[1168,13]]}}}],["tokenreview",{"_index":2816,"t":{"705":{"position":[[256,13]]}}}],["toler",{"_index":920,"t":{"75":{"position":[[797,9]]},"221":{"position":[[484,9]]}}}],["tool",{"_index":876,"t":{"65":{"position":[[1041,5]]},"77":{"position":[[47,5]]},"122":{"position":[[61,4]]},"128":{"position":[[20,4],[1743,4]]},"181":{"position":[[166,5]]},"245":{"position":[[31,4]]},"247":{"position":[[108,5]]},"305":{"position":[[61,4]]},"384":{"position":[[103,6]]},"404":{"position":[[1580,5]]},"430":{"position":[[143,6]]},"512":{"position":[[23,4]]},"531":{"position":[[170,5]]},"533":{"position":[[297,5]]}}}],["top",{"_index":1369,"t":{"185":{"position":[[739,3]]},"440":{"position":[[454,3]]},"464":{"position":[[218,3]]}}}],["topolog",{"_index":1063,"t":{"110":{"position":[[1205,9],[1267,9]]},"114":{"position":[[840,9],[909,9],[985,8]]}}}],["total",{"_index":1835,"t":{"311":{"position":[[1200,5]]}}}],["track",{"_index":1883,"t":{"322":{"position":[[323,7]]},"440":{"position":[[266,6]]}}}],["track_script",{"_index":1455,"t":{"203":{"position":[[1165,12]]}}}],["tradit",{"_index":1113,"t":{"116":{"position":[[820,11]]}}}],["traefik",{"_index":64,"t":{"4":{"position":[[527,7],[929,7]]},"19":{"position":[[942,7],[1048,7],[1092,7],[1347,7],[1510,7],[1604,7],[1612,9],[1851,7]]},"162":{"position":[[5929,8]]},"247":{"position":[[2370,7]]},"249":{"position":[[134,9],[564,7],[793,7],[861,7]]},"301":{"position":[[202,8]]},"324":{"position":[[113,8]]},"330":{"position":[[318,7]]},"332":{"position":[[963,7],[1038,7]]},"400":{"position":[[36,7]]},"404":{"position":[[0,7],[191,7],[423,7],[761,7],[1033,7],[1083,7],[1199,7],[1247,7],[1294,7],[1329,7],[1408,7],[1504,7],[1544,7]]},"438":{"position":[[232,8]]},"470":{"position":[[942,7],[1049,7],[1129,7],[1227,7],[1698,7],[1826,7],[1926,7],[2381,7],[2509,7],[2590,7]]},"533":{"position":[[0,8],[12,7],[80,7],[139,7],[207,7],[221,7],[253,7]]}}}],["traefik.skip",{"_index":1930,"t":{"332":{"position":[[1019,12]]}}}],["traefik.yaml",{"_index":1918,"t":{"332":{"position":[[565,13],[699,12]]},"404":{"position":[[627,12]]}}}],["traefik.yaml.skip",{"_index":1917,"t":{"332":{"position":[[444,17],[668,17]]}}}],["traffic",{"_index":851,"t":{"65":{"position":[[199,8]]},"150":{"position":[[719,7]]},"162":{"position":[[2259,7]]},"303":{"position":[[979,7],[1194,8],[1624,8],[1759,8],[1888,8]]},"311":{"position":[[306,8],[441,7],[500,7],[1317,7]]},"317":{"position":[[55,8],[169,7],[224,7]]},"360":{"position":[[396,7],[1086,8]]},"362":{"position":[[463,7]]},"410":{"position":[[288,7]]},"470":{"position":[[86,7],[633,7]]},"800":{"position":[[203,7]]}}}],["trail",{"_index":1697,"t":{"277":{"position":[[381,8]]},"548":{"position":[[222,8]]}}}],["transmit",{"_index":1293,"t":{"168":{"position":[[848,12]]},"492":{"position":[[396,11]]}}}],["transpar",{"_index":1938,"t":{"340":{"position":[[459,13],[666,13],[1038,13]]}}}],["transport",{"_index":2671,"t":{"579":{"position":[[868,9],[997,9],[1195,9],[1322,9]]},"650":{"position":[[998,9],[1127,9],[1325,9],[1452,9]]},"685":{"position":[[892,9],[1021,9],[1219,9],[1346,9]]},"687":{"position":[[781,9],[910,9],[1108,9],[1235,9]]},"689":{"position":[[806,9],[935,9],[1133,9],[1260,9]]},"691":{"position":[[958,9],[1087,9],[1285,9],[1412,9]]},"693":{"position":[[784,9],[913,9],[1111,9],[1238,9]]},"695":{"position":[[816,9],[945,9],[1143,9],[1270,9]]},"697":{"position":[[915,9],[1044,9],[1242,9],[1369,9]]}}}],["trap",{"_index":2660,"t":{"579":{"position":[[488,4]]},"650":{"position":[[618,4]]},"685":{"position":[[512,4]]},"687":{"position":[[401,4]]},"689":{"position":[[426,4]]},"691":{"position":[[578,4]]},"693":{"position":[[404,4]]},"695":{"position":[[436,4]]},"697":{"position":[[535,4]]}}}],["treat",{"_index":395,"t":{"23":{"position":[[277,7]]},"332":{"position":[[381,7]]}}}],["tree",{"_index":2147,"t":{"420":{"position":[[52,5]]},"516":{"position":[[91,6],[566,4],[745,4]]}}}],["tri",{"_index":551,"t":{"33":{"position":[[825,3],[951,3]]},"340":{"position":[[275,3]]},"410":{"position":[[780,3],[861,3]]},"546":{"position":[[355,6]]},"689":{"position":[[2158,3],[2398,3],[2638,3]]},"695":{"position":[[2203,3]]}}}],["trigger",{"_index":1166,"t":{"118":{"position":[[4179,7]]}}}],["trivial",{"_index":625,"t":{"39":{"position":[[779,9]]}}}],["true",{"_index":592,"t":{"35":{"position":[[871,4]]},"56":{"position":[[160,4]]},"235":{"position":[[538,4]]},"247":{"position":[[820,4],[869,4],[1429,4]]},"249":{"position":[[908,4],[952,4]]},"281":{"position":[[422,4],[779,4]]},"285":{"position":[[150,4]]},"307":{"position":[[501,4],[690,5],[884,4],[1075,5]]},"382":{"position":[[260,4],[284,4],[317,4],[341,4]]},"398":{"position":[[642,4],[667,4]]},"432":{"position":[[444,4],[731,4],[807,4],[1130,4],[1942,4],[2036,4]]},"468":{"position":[[3307,4],[3372,4],[3390,4],[3404,4],[3452,4]]},"474":{"position":[[206,4],[231,4],[803,4],[828,4]]},"494":{"position":[[60,5]]},"504":{"position":[[63,5]]},"540":{"position":[[547,4],[652,6],[895,4]]},"687":{"position":[[2066,6],[2131,4]]},"693":{"position":[[2069,6],[2134,4]]},"739":{"position":[[114,5]]},"741":{"position":[[115,5]]},"749":{"position":[[120,4]]},"783":{"position":[[180,5]]},"793":{"position":[[198,5]]}}}],["trust",{"_index":1087,"t":{"112":{"position":[[844,5]]},"114":{"position":[[601,5],[806,5],[1112,5]]},"170":{"position":[[174,6]]},"579":{"position":[[1514,8],[1998,7]]},"650":{"position":[[1644,8],[2128,7]]},"685":{"position":[[1538,8],[2022,7]]},"687":{"position":[[1427,8],[1911,7]]},"689":{"position":[[1452,8],[1936,7]]},"691":{"position":[[1604,8],[2088,7]]},"693":{"position":[[1430,8],[1914,7]]},"695":{"position":[[1462,8],[1946,7]]},"697":{"position":[[272,7],[1561,8],[2045,7],[2134,8],[2181,7],[2197,7],[2265,7],[2333,7]]}}}],["trustabl",{"_index":2024,"t":{"360":{"position":[[1308,9]]}}}],["trustedip",{"_index":1634,"t":{"249":{"position":[[913,11]]}}}],["tshark",{"_index":878,"t":{"65":{"position":[[1063,7],[1217,6]]}}}],["tti",{"_index":557,"t":{"33":{"position":[[1014,3]]}}}],["ttl",{"_index":1329,"t":{"179":{"position":[[1280,3]]}}}],["tunabl",{"_index":980,"t":{"87":{"position":[[337,8]]},"101":{"position":[[2054,8]]},"162":{"position":[[8432,8]]}}}],["tune",{"_index":978,"t":{"87":{"position":[[296,6]]},"101":{"position":[[2013,6]]},"162":{"position":[[8391,6]]}}}],["tunnel",{"_index":1260,"t":{"150":{"position":[[929,7],[1198,7],[1249,6],[1456,7],[1598,6],[1709,7],[1855,6]]},"309":{"position":[[42,7],[758,7],[1073,7],[1283,7],[1620,7]]},"317":{"position":[[198,7],[253,7]]},"360":{"position":[[310,9],[422,7]]}}}],["turn",{"_index":674,"t":{"46":{"position":[[21,4]]},"48":{"position":[[21,4]]},"101":{"position":[[356,4]]},"142":{"position":[[37,4]]},"162":{"position":[[367,4]]},"410":{"position":[[201,4]]},"460":{"position":[[285,6]]}}}],["tutori",{"_index":2179,"t":{"426":{"position":[[310,9]]}}}],["tweak",{"_index":1675,"t":{"268":{"position":[[607,8]]}}}],["two",{"_index":606,"t":{"39":{"position":[[125,3]]},"71":{"position":[[429,3]]},"99":{"position":[[125,3]]},"199":{"position":[[129,3]]},"201":{"position":[[363,3]]},"207":{"position":[[306,3]]},"213":{"position":[[13,3]]},"255":{"position":[[55,3]]},"268":{"position":[[832,3]]},"305":{"position":[[577,3]]},"315":{"position":[[171,3]]},"328":{"position":[[10,3]]},"338":{"position":[[21,3]]},"352":{"position":[[0,3]]},"462":{"position":[[10,3]]},"540":{"position":[[38,3],[341,3]]}}}],["type",{"_index":622,"t":{"39":{"position":[[680,5]]},"128":{"position":[[328,4],[640,4],[1717,5],[1760,5]]},"168":{"position":[[1373,5]]},"172":{"position":[[19,5],[100,5],[158,4]]},"191":{"position":[[55,4]]},"213":{"position":[[873,5]]},"247":{"position":[[786,5]]},"266":{"position":[[830,4]]},"315":{"position":[[543,4]]},"317":{"position":[[276,4]]},"408":{"position":[[228,4]]},"412":{"position":[[20,4]]},"432":{"position":[[1815,4]]},"454":{"position":[[529,4]]},"815":{"position":[[173,5]]}}}],["types=internalip,externalip,hostnam",{"_index":2755,"t":{"610":{"position":[[1850,36]]},"612":{"position":[[1798,36]]},"614":{"position":[[1667,36]]},"616":{"position":[[1616,36]]},"618":{"position":[[1629,36]]},"620":{"position":[[1742,36]]},"622":{"position":[[1703,36]]},"626":{"position":[[1776,36]]},"628":{"position":[[1757,36]]},"630":{"position":[[1653,36]]},"632":{"position":[[1769,36]]},"634":{"position":[[1634,36]]},"636":{"position":[[1549,36]]},"646":{"position":[[1724,36]]},"652":{"position":[[1766,36]]},"654":{"position":[[1682,36]]},"656":{"position":[[1688,36]]},"729":{"position":[[2033,36]]},"731":{"position":[[2047,36]]},"733":{"position":[[2162,36]]}}}],["typic",{"_index":619,"t":{"39":{"position":[[625,9]]},"189":{"position":[[1851,7]]},"268":{"position":[[443,9]]},"362":{"position":[[439,10]]},"454":{"position":[[1015,9]]}}}],["u",{"_index":602,"t":{"37":{"position":[[94,1]]},"41":{"position":[[313,1],[335,1]]},"235":{"position":[[314,1]]},"579":{"position":[[553,1],[769,1]]},"602":{"position":[[232,1]]},"610":{"position":[[462,1]]},"612":{"position":[[445,1]]},"614":{"position":[[319,1]]},"616":{"position":[[285,1]]},"618":{"position":[[298,1]]},"620":{"position":[[389,1]]},"622":{"position":[[296,1]]},"626":{"position":[[362,1]]},"628":{"position":[[384,1]]},"630":{"position":[[280,1]]},"632":{"position":[[415,1]]},"634":{"position":[[276,1]]},"636":{"position":[[227,1]]},"646":{"position":[[357,1]]},"650":{"position":[[683,1],[899,1]]},"652":{"position":[[424,1]]},"654":{"position":[[359,1]]},"656":{"position":[[371,1]]},"658":{"position":[[413,1]]},"662":{"position":[[965,1]]},"665":{"position":[[314,1]]},"667":{"position":[[244,1]]},"669":{"position":[[264,1]]},"671":{"position":[[360,1]]},"673":{"position":[[297,1]]},"680":{"position":[[231,1]]},"682":{"position":[[241,1]]},"685":{"position":[[577,1],[793,1]]},"687":{"position":[[466,1],[682,1]]},"689":{"position":[[491,1],[707,1]]},"691":{"position":[[643,1],[859,1]]},"693":{"position":[[469,1],[685,1]]},"695":{"position":[[501,1],[717,1]]},"697":{"position":[[600,1],[816,1]]},"703":{"position":[[111,1]]},"729":{"position":[[531,1],[622,1]]},"731":{"position":[[517,1],[608,1]]},"733":{"position":[[573,1],[664,1]]},"735":{"position":[[481,1]]},"737":{"position":[[538,1]]},"747":{"position":[[699,1]]}}}],["u:%g",{"_index":2690,"t":{"585":{"position":[[269,5]]},"589":{"position":[[256,5]]},"593":{"position":[[181,5]]},"595":{"position":[[232,5]]},"714":{"position":[[286,5]]},"718":{"position":[[211,5]]},"722":{"position":[[144,5]]}}}],["ubuntu",{"_index":721,"t":{"50":{"position":[[504,6]]},"201":{"position":[[38,6]]},"303":{"position":[[429,6]]},"354":{"position":[[251,7]]},"442":{"position":[[35,6]]}}}],["udp",{"_index":2003,"t":{"360":{"position":[[114,3],[163,3]]},"362":{"position":[[180,3],[287,3],[363,3]]},"470":{"position":[[848,3]]}}}],["ufw",{"_index":696,"t":{"48":{"position":[[30,3],[60,3],[92,3],[151,3],[181,3],[222,3]]}}}],["uh",{"_index":2265,"t":{"442":{"position":[[205,3]]}}}],["ui",{"_index":2600,"t":{"536":{"position":[[1125,2]]}}}],["uid",{"_index":2884,"t":{"785":{"position":[[146,4]]}}}],["ulogd2",{"_index":868,"t":{"65":{"position":[[734,6],[802,6]]}}}],["unabl",{"_index":941,"t":{"75":{"position":[[1621,6]]}}}],["unauthor",{"_index":2530,"t":{"502":{"position":[[136,12]]}}}],["uncompl",{"_index":697,"t":{"48":{"position":[[34,14]]}}}],["under",{"_index":768,"t":{"56":{"position":[[191,5]]},"235":{"position":[[164,5],[233,5]]},"332":{"position":[[13,5]]},"340":{"position":[[1349,5]]},"440":{"position":[[349,5]]},"555":{"position":[[1204,5],[1713,5]]}}}],["undergo",{"_index":2495,"t":{"480":{"position":[[222,10]]}}}],["underli",{"_index":2118,"t":{"406":{"position":[[56,10]]}}}],["underscor",{"_index":1895,"t":{"326":{"position":[[811,12]]}}}],["understand",{"_index":2539,"t":{"508":{"position":[[172,10]]}}}],["uninstal",{"_index":665,"t":{"44":{"position":[[483,12]]},"245":{"position":[[646,12]]},"330":{"position":[[205,11],[371,9]]},"384":{"position":[[8,12],[290,9],[408,12]]},"386":{"position":[[3,9]]},"388":{"position":[[3,9]]},"432":{"position":[[1031,9]]}}}],["uninstall.sh",{"_index":1811,"t":{"307":{"position":[[1118,13]]},"386":{"position":[[61,12]]},"388":{"position":[[67,12]]},"428":{"position":[[499,12]]}}}],["uniqu",{"_index":942,"t":{"75":{"position":[[1667,6]]},"317":{"position":[[87,6]]},"326":{"position":[[531,7]]},"352":{"position":[[238,6]]},"428":{"position":[[1572,6],[1618,6],[1717,6]]}}}],["unit",{"_index":566,"t":{"35":{"position":[[295,5]]},"112":{"position":[[2542,5]]},"114":{"position":[[2327,5]]},"305":{"position":[[857,5]]},"380":{"position":[[289,4]]},"548":{"position":[[306,4]]},"555":{"position":[[1809,5]]}}}],["unix",{"_index":1219,"t":{"135":{"position":[[744,5]]},"162":{"position":[[4606,5]]}}}],["unknown",{"_index":2795,"t":{"667":{"position":[[1408,7],[1497,7]]},"669":{"position":[[1476,7],[1565,7]]},"671":{"position":[[1561,7],[1650,7]]},"673":{"position":[[1458,7],[1547,7]]}}}],["unlabel",{"_index":2137,"t":{"414":{"position":[[226,9],[344,10]]}}}],["unless",{"_index":1315,"t":{"174":{"position":[[851,6]]},"203":{"position":[[2574,6]]},"205":{"position":[[611,6]]},"404":{"position":[[1259,6]]},"470":{"position":[[561,6]]},"626":{"position":[[222,6]]},"789":{"position":[[101,6]]}}}],["unprivileg",{"_index":488,"t":{"29":{"position":[[86,12]]},"139":{"position":[[362,12]]}}}],["unrestrict",{"_index":2099,"t":{"398":{"position":[[3606,12],[3743,12],[3915,12]]},"468":{"position":[[2147,12],[3183,12],[4294,12],[4397,12],[4999,12],[5113,12],[5295,12],[5436,12]]}}}],["unschedul",{"_index":2155,"t":{"420":{"position":[[719,14]]}}}],["unset",{"_index":2304,"t":{"464":{"position":[[97,5]]}}}],["unsupport",{"_index":2603,"t":{"536":{"position":[[1948,11]]},"546":{"position":[[1093,11]]}}}],["until",{"_index":1316,"t":{"174":{"position":[[1048,5]]},"376":{"position":[[360,5]]},"408":{"position":[[359,5]]}}}],["unus",{"_index":1401,"t":{"191":{"position":[[395,9]]},"500":{"position":[[268,8]]}}}],["up",{"_index":297,"t":{"19":{"position":[[1307,2],[1471,2],[1654,2],[1819,2],[1975,2],[2145,2],[2343,2],[2531,2],[2695,2],[2855,2]]},"31":{"position":[[218,2]]},"52":{"position":[[763,2]]},"75":{"position":[[1476,2]]},"110":{"position":[[2802,2]]},"124":{"position":[[1030,2],[1356,3],[1482,3],[1733,3]]},"126":{"position":[[1213,3],[1460,3]]},"128":{"position":[[1442,2]]},"174":{"position":[[800,2],[1251,2]]},"191":{"position":[[22,2],[113,2],[157,2]]},"193":{"position":[[41,2],[85,2]]},"195":{"position":[[139,2]]},"203":{"position":[[2053,2]]},"205":{"position":[[90,2]]},"209":{"position":[[8,2]]},"213":{"position":[[1657,2]]},"217":{"position":[[458,2]]},"253":{"position":[[367,2],[479,2]]},"257":{"position":[[167,2]]},"266":{"position":[[860,2]]},"275":{"position":[[69,2]]},"305":{"position":[[522,2]]},"360":{"position":[[869,2]]},"366":{"position":[[141,2],[164,2],[187,2],[213,2]]},"372":{"position":[[247,2],[270,2],[293,2],[319,2]]},"400":{"position":[[244,2]]},"406":{"position":[[407,2]]},"426":{"position":[[141,3]]},"454":{"position":[[606,2]]},"514":{"position":[[569,2]]},"540":{"position":[[289,2]]},"542":{"position":[[244,2]]},"546":{"position":[[695,2]]},"610":{"position":[[70,2]]},"650":{"position":[[70,2]]},"652":{"position":[[70,2]]},"654":{"position":[[70,2]]},"656":{"position":[[70,2]]}}}],["upcom",{"_index":2049,"t":{"390":{"position":[[136,8]]}}}],["updat",{"_index":689,"t":{"46":{"position":[[560,6]]},"48":{"position":[[441,6]]},"63":{"position":[[185,6]]},"108":{"position":[[975,7],[1024,7],[1095,8]]},"112":{"position":[[80,7],[214,7],[339,7],[982,7],[1154,7],[1865,7],[2028,7]]},"114":{"position":[[103,7],[237,7],[362,7],[1201,7],[1378,7],[1491,7],[1618,7],[1776,7],[1840,7]]},"116":{"position":[[356,7],[525,7],[1093,7],[1231,8]]},"225":{"position":[[11,7]]},"305":{"position":[[588,6]]},"332":{"position":[[1100,7]]},"390":{"position":[[21,7]]},"398":{"position":[[273,6],[581,6],[3037,6]]},"506":{"position":[[552,8],[827,6]]},"540":{"position":[[2477,8]]}}}],["upgrad",{"_index":242,"t":{"19":{"position":[[277,7]]},"27":{"position":[[422,7]]},"271":{"position":[[0,9],[179,9]]},"273":{"position":[[23,9],[193,7],[254,7],[411,7],[475,7],[573,7],[621,7],[759,7],[843,7],[939,8],[963,7],[1057,8]]},"303":{"position":[[2269,9]]},"332":{"position":[[1120,9]]},"398":{"position":[[488,7],[1497,7],[1534,10],[1988,8],[2009,7],[2047,9],[2100,7],[2261,7],[2767,7]]},"404":{"position":[[1344,8]]},"531":{"position":[[7,8],[49,9],[117,9],[202,8],[264,8],[296,7]]},"533":{"position":[[184,7],[1143,8],[1244,8]]},"536":{"position":[[27,8],[59,7],[127,9],[229,7],[302,8],[387,9],[506,8],[562,7],[699,7],[925,8],[996,7],[1138,9],[1225,7],[1399,9],[1584,7],[1675,7],[1698,7],[1729,7],[1875,10],[1897,7]]},"538":{"position":[[11,7],[269,7],[320,7]]},"540":{"position":[[60,9],[114,9],[209,7],[305,7],[364,7],[510,7],[686,7],[694,8],[722,7],[858,7],[1058,7],[1093,7],[1101,8],[1129,7],[1370,8],[1694,7],[2011,7],[2222,8],[2399,7],[2568,7],[2622,7],[2690,7],[2734,7]]},"542":{"position":[[34,9]]},"544":{"position":[[8,7],[125,10],[136,7]]},"546":{"position":[[0,8],[70,8],[874,7],[1020,10],[1042,7]]},"548":{"position":[[3,7],[777,7],[909,7],[1124,7]]},"550":{"position":[[15,7]]}}}],["upgrade.cattle.io/v1",{"_index":2609,"t":{"540":{"position":[[432,20],[781,20],[2280,20]]}}}],["upgrading/reconfigur",{"_index":1580,"t":{"245":{"position":[[617,24]]}}}],["upload",{"_index":955,"t":{"77":{"position":[[1276,6]]}}}],["upon",{"_index":1388,"t":{"189":{"position":[[94,4]]},"336":{"position":[[111,4]]},"370":{"position":[[182,4]]}}}],["upstream",{"_index":1346,"t":{"181":{"position":[[133,8]]},"203":{"position":[[2346,8]]},"205":{"position":[[383,8]]},"340":{"position":[[977,8]]},"398":{"position":[[119,8]]},"408":{"position":[[189,8]]}}}],["uptim",{"_index":899,"t":{"71":{"position":[[83,6]]},"207":{"position":[[180,6]]}}}],["url",{"_index":1150,"t":{"118":{"position":[[3044,3]]},"135":{"position":[[1168,3]]},"162":{"position":[[5096,3]]},"189":{"position":[[1939,5]]},"217":{"position":[[19,3]]},"219":{"position":[[316,3]]},"247":{"position":[[1056,3],[1267,3],[2252,3]]},"340":{"position":[[294,4]]},"428":{"position":[[1433,4]]},"432":{"position":[[2122,3],[2152,4],[2273,4]]},"540":{"position":[[1917,3],[2003,3]]}}}],["url_effect",{"_index":1754,"t":{"289":{"position":[[93,18]]},"297":{"position":[[141,18]]}}}],["us",{"_index":128,"t":{"8":{"position":[[159,4]]},"11":{"position":[[207,5]]},"15":{"position":[[16,4],[200,4]]},"17":{"position":[[202,4],[898,4]]},"19":{"position":[[332,3],[369,3],[487,4],[586,5]]},"21":{"position":[[108,3],[174,5],[436,3],[469,3]]},"23":{"position":[[234,4],[428,3]]},"25":{"position":[[1475,4]]},"33":{"position":[[311,3],[973,3]]},"35":{"position":[[13,4],[129,4],[450,4]]},"39":{"position":[[635,4],[1039,3]]},"41":{"position":[[55,5],[295,5]]},"44":{"position":[[387,3]]},"52":{"position":[[331,3],[343,3],[426,5],[723,3],[845,4]]},"56":{"position":[[165,5]]},"61":{"position":[[242,4]]},"63":{"position":[[49,5]]},"65":{"position":[[1022,5],[1201,3]]},"71":{"position":[[45,3],[399,4]]},"73":{"position":[[102,5]]},"75":{"position":[[875,5],[1111,3],[1207,5],[1391,5],[1763,5]]},"77":{"position":[[785,3],[961,6],[1072,4],[1085,6]]},"79":{"position":[[151,3],[336,5]]},"83":{"position":[[81,3],[152,3]]},"87":{"position":[[628,4]]},"89":{"position":[[96,3],[139,4]]},"95":{"position":[[50,3]]},"97":{"position":[[55,3],[124,3]]},"99":{"position":[[502,3]]},"101":{"position":[[725,3],[804,3],[1884,4],[2183,3],[2226,4],[3452,3]]},"106":{"position":[[51,3]]},"108":{"position":[[109,4],[499,5],[874,3],[1146,4],[1418,3]]},"110":{"position":[[563,4],[572,4],[990,4],[1100,4],[1277,5],[1381,5],[1615,3],[1725,3],[1861,3]]},"112":{"position":[[34,3],[206,3],[284,3],[554,5],[676,5],[781,3],[867,5],[965,4],[1119,3],[1444,4],[2316,4],[2443,3]]},"114":{"position":[[57,3],[229,3],[307,3],[717,3],[1068,4],[1147,5],[1343,3],[2229,3]]},"116":{"position":[[53,4],[301,5],[470,3]]},"118":{"position":[[1973,4]]},"124":{"position":[[370,5],[411,5],[1268,5],[1309,5]]},"126":{"position":[[304,5],[345,5],[907,4],[1125,5],[1166,5]]},"128":{"position":[[1053,6],[1170,4],[1620,4],[1666,4],[1732,5]]},"130":{"position":[[374,5]]},"132":{"position":[[156,5],[220,5]]},"135":{"position":[[233,4],[353,4],[461,4]]},"137":{"position":[[86,4],[255,4],[431,4],[511,5]]},"144":{"position":[[199,4],[300,4]]},"150":{"position":[[88,3],[167,3],[676,3],[919,3],[1187,4],[1445,4],[1698,4]]},"154":{"position":[[37,6]]},"158":{"position":[[106,3]]},"160":{"position":[[55,3],[104,3],[160,3],[204,3],[285,3]]},"162":{"position":[[897,4],[1031,4],[1422,3],[1523,3],[2216,3],[2747,4],[2921,4],[3141,4],[3225,5],[4051,4],[4177,4],[4294,4],[6994,3],[7115,3],[7158,4],[7635,4],[8986,4]]},"164":{"position":[[4,4]]},"168":{"position":[[266,4],[628,4],[1299,5]]},"170":{"position":[[66,4],[140,5]]},"174":{"position":[[225,4],[504,4],[546,4],[888,4],[944,4],[1150,5]]},"178":{"position":[[319,4]]},"179":{"position":[[21,3],[1112,4],[1187,4],[1487,5],[1904,3]]},"181":{"position":[[59,4]]},"185":{"position":[[30,5],[259,3],[494,3],[698,3],[840,4],[925,4],[1127,5],[1457,5]]},"187":{"position":[[15,3],[530,4],[736,4],[833,5],[919,5],[1065,4],[1136,3],[1381,4]]},"189":{"position":[[733,5],[1584,5]]},"191":{"position":[[76,5],[333,3],[421,4]]},"195":{"position":[[30,5]]},"199":{"position":[[303,3],[477,4],[665,4]]},"203":{"position":[[230,3],[289,4],[1519,3],[2213,5],[2536,5],[2968,3]]},"205":{"position":[[250,5],[573,5],[1005,3]]},"207":{"position":[[142,3],[470,4]]},"213":{"position":[[316,4],[436,4],[492,4],[778,5],[1415,3]]},"215":{"position":[[42,4],[128,5],[383,5],[1066,3],[1086,5]]},"217":{"position":[[461,5],[656,4]]},"219":{"position":[[436,4]]},"221":{"position":[[1096,4],[1288,5],[1406,5],[1591,5],[1994,4]]},"223":{"position":[[74,5]]},"235":{"position":[[296,5],[486,5],[582,4],[628,4],[874,3]]},"245":{"position":[[255,5],[671,5]]},"247":{"position":[[432,6],[1386,3],[1676,3],[2273,5]]},"251":{"position":[[58,4],[191,3]]},"253":{"position":[[625,5]]},"255":{"position":[[49,5]]},"261":{"position":[[76,3]]},"266":{"position":[[230,4],[1063,3]]},"275":{"position":[[51,4]]},"277":{"position":[[47,3],[180,3],[2209,3]]},"279":{"position":[[121,3],[277,6],[324,6],[968,3],[1172,3]]},"281":{"position":[[132,3],[241,4],[834,3]]},"283":{"position":[[283,5]]},"295":{"position":[[365,5]]},"303":{"position":[[344,3],[378,5],[469,5],[860,3],[1132,3],[1307,3],[1426,3],[1575,3],[1696,3],[1837,3],[2326,3]]},"305":{"position":[[634,5]]},"309":{"position":[[73,4],[495,4],[748,3],[1062,4],[1272,4],[1442,5],[1459,4],[1556,4],[1609,4]]},"311":{"position":[[258,5],[1376,5]]},"313":{"position":[[402,5]]},"315":{"position":[[566,5]]},"317":{"position":[[4,4],[182,3],[237,3],[709,3]]},"319":{"position":[[98,3],[406,3],[922,3],[1023,5],[1113,3]]},"322":{"position":[[466,5],[523,5]]},"326":{"position":[[648,3],[1206,4]]},"336":{"position":[[66,3],[228,3],[283,3],[380,5],[645,4],[852,5]]},"340":{"position":[[315,3],[377,4],[889,6]]},"342":{"position":[[229,4],[310,4],[395,4],[838,5]]},"344":{"position":[[100,5],[390,4],[444,4],[496,4],[649,4],[703,4],[755,4]]},"346":{"position":[[104,5]]},"352":{"position":[[155,3]]},"354":{"position":[[224,3]]},"356":{"position":[[102,5],[195,5]]},"358":{"position":[[650,3],[841,5]]},"360":{"position":[[150,4],[195,5],[241,5],[297,4],[453,3]]},"362":{"position":[[554,5]]},"364":{"position":[[113,5]]},"368":{"position":[[102,5],[186,3]]},"374":{"position":[[309,5],[339,5]]},"382":{"position":[[37,3]]},"384":{"position":[[183,5],[247,5]]},"392":{"position":[[15,3]]},"398":{"position":[[1086,4],[1429,6],[2935,4]]},"404":{"position":[[254,4]]},"406":{"position":[[505,3],[550,5]]},"408":{"position":[[162,4],[570,3]]},"410":{"position":[[264,3],[572,5],[752,3]]},"414":{"position":[[258,3],[394,4]]},"424":{"position":[[446,4],[1032,3]]},"428":{"position":[[187,5],[627,3],[1451,3]]},"430":{"position":[[125,3]]},"432":{"position":[[47,3],[262,5],[339,4],[1055,3],[1317,3],[1396,3],[2243,3],[2606,4]]},"438":{"position":[[197,5]]},"440":{"position":[[48,4],[105,5],[173,4],[463,5]]},"454":{"position":[[418,5],[462,3]]},"468":{"position":[[4168,3],[4423,3],[4618,3]]},"470":{"position":[[1102,4],[1162,3]]},"474":{"position":[[650,4],[1273,4]]},"476":{"position":[[2802,3]]},"480":{"position":[[253,4]]},"482":{"position":[[481,4]]},"488":{"position":[[437,3]]},"490":{"position":[[423,3]]},"494":{"position":[[309,5],[443,3]]},"496":{"position":[[132,4]]},"498":{"position":[[100,5],[184,5]]},"506":{"position":[[54,4],[126,4]]},"510":{"position":[[386,3]]},"516":{"position":[[294,3],[596,4]]},"518":{"position":[[127,5]]},"531":{"position":[[97,4],[273,5]]},"533":{"position":[[279,3],[334,5],[710,3],[730,5]]},"536":{"position":[[36,5],[1109,3],[1364,3]]},"542":{"position":[[212,5]]},"544":{"position":[[23,5]]},"546":{"position":[[50,5]]},"548":{"position":[[76,5],[128,4],[255,4],[659,3]]},"555":{"position":[[342,4],[1490,3]]},"579":{"position":[[325,4]]},"650":{"position":[[455,4]]},"667":{"position":[[1980,3]]},"669":{"position":[[188,3],[329,4],[383,3],[2048,3]]},"671":{"position":[[2133,3]]},"673":{"position":[[2030,3]]},"685":{"position":[[349,4]]},"687":{"position":[[238,4]]},"689":{"position":[[263,4]]},"691":{"position":[[415,4]]},"693":{"position":[[241,4]]},"695":{"position":[[273,4]]},"697":{"position":[[372,4]]},"700":{"position":[[84,3]]},"705":{"position":[[364,3]]},"724":{"position":[[62,6]]},"726":{"position":[[62,6]]},"729":{"position":[[29,5],[127,5]]},"731":{"position":[[29,5],[113,5]]},"733":{"position":[[29,5],[154,5]]},"735":{"position":[[29,5],[101,5]]},"737":{"position":[[29,5],[138,5]]},"739":{"position":[[39,5],[123,5]]},"741":{"position":[[39,5],[124,5]]},"745":{"position":[[29,5],[122,5]]},"747":{"position":[[29,5],[134,3],[244,5]]},"749":{"position":[[39,5],[152,3],[178,5]]},"753":{"position":[[29,5],[429,5]]},"756":{"position":[[104,4],[153,3]]},"760":{"position":[[53,3]]},"791":{"position":[[37,3]]},"797":{"position":[[143,3]]},"800":{"position":[[47,3],[126,3]]},"815":{"position":[[26,3]]}}}],["usabl",{"_index":1035,"t":{"108":{"position":[[1009,7]]},"376":{"position":[[353,6]]},"404":{"position":[[379,6]]}}}],["usag",{"_index":1004,"t":{"101":{"position":[[180,6]]},"162":{"position":[[190,6]]},"179":{"position":[[176,6],[1428,6]]},"446":{"position":[[160,5]]},"448":{"position":[[165,5]]},"450":{"position":[[38,5]]},"689":{"position":[[2138,6],[2378,6],[2618,6]]},"695":{"position":[[2183,6]]}}}],["user",{"_index":489,"t":{"29":{"position":[[99,5]]},"33":{"position":[[658,4],[693,4],[991,4]]},"35":{"position":[[78,4]]},"37":{"position":[[16,4],[85,4]]},"69":{"position":[[204,4]]},"139":{"position":[[375,5]]},"189":{"position":[[1599,4]]},"213":{"position":[[1382,4]]},"225":{"position":[[73,5]]},"291":{"position":[[21,4],[231,4],[284,4],[386,4],[519,4],[573,4],[664,4]]},"293":{"position":[[92,4],[160,4]]},"295":{"position":[[265,4]]},"297":{"position":[[408,4]]},"305":{"position":[[401,5]]},"342":{"position":[[646,4],[700,4]]},"476":{"position":[[1530,4]]},"484":{"position":[[232,6]]},"610":{"position":[[2335,4]]},"612":{"position":[[2283,4]]},"614":{"position":[[2152,4]]},"616":{"position":[[2101,4]]},"618":{"position":[[2114,4]]},"620":{"position":[[2227,4]]},"622":{"position":[[2188,4]]},"626":{"position":[[2261,4]]},"628":{"position":[[2242,4]]},"630":{"position":[[2138,4]]},"632":{"position":[[2254,4]]},"634":{"position":[[2119,4]]},"636":{"position":[[2034,4]]},"646":{"position":[[2209,4]]},"652":{"position":[[2251,4]]},"654":{"position":[[2167,4]]},"656":{"position":[[2173,4]]},"729":{"position":[[2518,4]]},"731":{"position":[[2532,4]]},"733":{"position":[[2647,4]]},"756":{"position":[[214,5]]},"768":{"position":[[67,5]]},"773":{"position":[[152,4]]},"775":{"position":[[82,4]]},"777":{"position":[[82,4]]},"779":{"position":[[82,4]]},"781":{"position":[[82,4]]},"783":{"position":[[82,4]]},"787":{"position":[[82,4]]},"793":{"position":[[82,4]]},"795":{"position":[[82,4]]},"797":{"position":[[82,4]]}}}],["user'",{"_index":2383,"t":{"472":{"position":[[204,6]]},"492":{"position":[[194,6]]}}}],["user.yml",{"_index":1760,"t":{"291":{"position":[[164,8],[636,8]]},"297":{"position":[[380,8]]}}}],["usernam",{"_index":1291,"t":{"168":{"position":[[588,8]]},"189":{"position":[[755,8]]},"342":{"position":[[637,8]]},"344":{"position":[[252,9],[292,8]]},"346":{"position":[[255,9],[295,8]]},"398":{"position":[[1901,10]]},"468":{"position":[[768,10]]},"476":{"position":[[1504,8]]},"610":{"position":[[2309,8]]},"612":{"position":[[2257,8]]},"614":{"position":[[2126,8]]},"616":{"position":[[2075,8]]},"618":{"position":[[2088,8]]},"620":{"position":[[2201,8]]},"622":{"position":[[2162,8]]},"626":{"position":[[2235,8]]},"628":{"position":[[2216,8]]},"630":{"position":[[2112,8]]},"632":{"position":[[2228,8]]},"634":{"position":[[2093,8]]},"636":{"position":[[2008,8]]},"646":{"position":[[2183,8]]},"652":{"position":[[2225,8]]},"654":{"position":[[2141,8]]},"656":{"position":[[2147,8]]},"729":{"position":[[2492,8]]},"731":{"position":[[2506,8]]},"733":{"position":[[2621,8]]}}}],["username/password",{"_index":1957,"t":{"342":{"position":[[572,17]]}}}],["userspac",{"_index":995,"t":{"95":{"position":[[124,9]]},"101":{"position":[[3374,9]]},"158":{"position":[[180,9]]},"162":{"position":[[8693,9]]}}}],["usr/local/bin",{"_index":380,"t":{"21":{"position":[[408,14]]},"266":{"position":[[281,14]]},"271":{"position":[[337,14]]},"432":{"position":[[1059,14]]}}}],["usr/local/bin/k3",{"_index":1716,"t":{"279":{"position":[[420,18],[515,18]]},"386":{"position":[[42,18]]},"388":{"position":[[42,18]]},"542":{"position":[[461,18]]},"550":{"position":[[119,18]]}}}],["usual",{"_index":198,"t":{"17":{"position":[[568,8]]},"317":{"position":[[131,8]]}}}],["util",{"_index":96,"t":{"4":{"position":[[1043,9]]},"52":{"position":[[65,7]]},"268":{"position":[[750,7]]},"358":{"position":[[432,12],[911,9]]},"360":{"position":[[569,7]]},"394":{"position":[[104,9]]},"398":{"position":[[1196,4]]},"428":{"position":[[414,9]]},"434":{"position":[[883,11]]},"440":{"position":[[228,12],[282,11],[410,11],[535,11]]},"452":{"position":[[74,12]]},"454":{"position":[[11,11],[405,12],[743,11],[972,12]]},"460":{"position":[[1158,7]]},"474":{"position":[[760,4],[1383,4]]},"504":{"position":[[32,4]]},"512":{"position":[[15,7]]},"518":{"position":[[337,7]]},"741":{"position":[[289,4]]}}}],["v",{"_index":960,"t":{"81":{"position":[[26,1]]},"101":{"position":[[389,1]]},"142":{"position":[[57,1]]},"162":{"position":[[400,1]]},"203":{"position":[[2592,1]]},"205":{"position":[[629,1]]},"406":{"position":[[676,1],[732,1]]},"579":{"position":[[610,1]]},"604":{"position":[[327,1]]},"606":{"position":[[256,1]]},"624":{"position":[[316,1]]},"628":{"position":[[441,1]]},"630":{"position":[[337,1]]},"646":{"position":[[414,1]]},"650":{"position":[[740,1]]},"677":{"position":[[265,1]]},"685":{"position":[[634,1]]},"687":{"position":[[523,1]]},"689":{"position":[[548,1]]},"691":{"position":[[700,1]]},"693":{"position":[[526,1]]},"695":{"position":[[558,1]]},"697":{"position":[[657,1]]},"729":{"position":[[703,1]]},"731":{"position":[[693,1]]},"733":{"position":[[745,1]]}}}],["v0.4.0",{"_index":1685,"t":{"273":{"position":[[738,6]]}}}],["v1",{"_index":442,"t":{"25":{"position":[[1046,2]]},"31":{"position":[[587,2],[822,2]]},"61":{"position":[[425,2]]},"247":{"position":[[542,2]]},"291":{"position":[[185,2]]},"398":{"position":[[2219,2]]},"404":{"position":[[1207,3],[1302,2],[1512,2]]},"470":{"position":[[1057,2]]},"520":{"position":[[12,2]]},"522":{"position":[[12,2]]},"526":{"position":[[12,2]]},"528":{"position":[[12,2]]},"533":{"position":[[88,3],[154,2],[215,2]]}}}],["v1.17.0+k3s.1",{"_index":1637,"t":{"251":{"position":[[19,13]]}}}],["v1.19.1",{"_index":2592,"t":{"533":{"position":[[1117,8]]}}}],["v1.19.1+k3s1",{"_index":1120,"t":{"118":{"position":[[29,12]]},"249":{"position":[[29,12]]},"281":{"position":[[29,12]]}}}],["v1.19.12+k3s1",{"_index":2584,"t":{"533":{"position":[[790,14]]}}}],["v1.19.13+k3s1",{"_index":2588,"t":{"533":{"position":[[858,14]]}}}],["v1.19.4+k3s1",{"_index":749,"t":{"54":{"position":[[29,12]]}}}],["v1.20",{"_index":2375,"t":{"470":{"position":[[1276,5]]}}}],["v1.20.4+k3s1",{"_index":2046,"t":{"378":{"position":[[548,12],[607,12]]}}}],["v1.20.8+k3s1",{"_index":2585,"t":{"533":{"position":[[805,13]]}}}],["v1.20.9+k3s1",{"_index":2589,"t":{"533":{"position":[[873,13]]}}}],["v1.21",{"_index":2374,"t":{"470":{"position":[[1260,5]]}}}],["v1.21.0+k3s1",{"_index":1734,"t":{"283":{"position":[[29,12]]},"311":{"position":[[53,13]]}}}],["v1.21.2+k3s1",{"_index":2586,"t":{"533":{"position":[[819,13]]}}}],["v1.21.3+k3s1",{"_index":2590,"t":{"533":{"position":[[887,13]]}}}],["v1.21.8+k3s1",{"_index":1176,"t":{"122":{"position":[[29,12]]}}}],["v1.22",{"_index":2637,"t":{"555":{"position":[[442,6]]}}}],["v1.22.2+k3s1",{"_index":1539,"t":{"223":{"position":[[29,12]]}}}],["v1.22.9+k3s1",{"_index":1841,"t":{"313":{"position":[[29,12]]}}}],["v1.23",{"_index":1770,"t":{"293":{"position":[[16,5]]},"458":{"position":[[214,6]]},"555":{"position":[[449,5],[493,5]]}}}],["v1.23.15+k3s1",{"_index":673,"t":{"44":{"position":[[689,15]]},"303":{"position":[[2197,15]]}}}],["v1.23.17+k3s1",{"_index":1046,"t":{"108":{"position":[[1555,15]]},"178":{"position":[[191,15]]}}}],["v1.23.7+k3s1",{"_index":1826,"t":{"311":{"position":[[101,13]]}}}],["v1.24",{"_index":1769,"t":{"293":{"position":[[0,5]]},"460":{"position":[[701,5]]},"468":{"position":[[16,5],[852,5]]},"474":{"position":[[165,5]]},"555":{"position":[[459,5]]}}}],["v1.24.11+k3s1",{"_index":1045,"t":{"108":{"position":[[1540,14]]},"178":{"position":[[176,14]]}}}],["v1.24.14+k3s1",{"_index":1975,"t":{"354":{"position":[[126,15]]}}}],["v1.24.6+k3s1",{"_index":2608,"t":{"540":{"position":[[392,13],[739,12],[1146,12],[1826,13]]}}}],["v1.24.9+k3s1",{"_index":672,"t":{"44":{"position":[[675,13]]},"303":{"position":[[2183,13]]}}}],["v1.25",{"_index":2056,"t":{"398":{"position":[[42,5],[2440,5],[2660,5],[2751,5]]},"468":{"position":[[0,5],[36,5]]},"474":{"position":[[149,5]]}}}],["v1.25.10+k3s1",{"_index":1976,"t":{"354":{"position":[[142,14]]}}}],["v1.25.11",{"_index":1869,"t":{"319":{"position":[[31,8]]}}}],["v1.25.5+k3s1",{"_index":671,"t":{"44":{"position":[[661,13]]},"303":{"position":[[2169,13]]}}}],["v1.25.7+k3s1",{"_index":1044,"t":{"108":{"position":[[1526,13]]},"178":{"position":[[162,13]]}}}],["v1.26",{"_index":1793,"t":{"305":{"position":[[115,6]]},"424":{"position":[[139,5]]},"546":{"position":[[461,5]]}}}],["v1.26.0",{"_index":1790,"t":{"303":{"position":[[1986,8]]}}}],["v1.26.0+k3s1",{"_index":670,"t":{"44":{"position":[[646,14]]},"303":{"position":[[2154,14]]}}}],["v1.26.2+k3s1",{"_index":1043,"t":{"108":{"position":[[1511,14]]},"178":{"position":[[147,14]]}}}],["v1.26.3+k3s1",{"_index":2159,"t":{"424":{"position":[[32,12]]}}}],["v1.26.5",{"_index":2238,"t":{"438":{"position":[[31,7]]}}}],["v1.26.5+k3s1",{"_index":1977,"t":{"354":{"position":[[157,13]]}}}],["v1.26.6",{"_index":1868,"t":{"319":{"position":[[22,8]]}}}],["v1.27",{"_index":1794,"t":{"305":{"position":[[334,6]]}}}],["v1.27.0",{"_index":1788,"t":{"303":{"position":[[1800,8]]}}}],["v1.27.2+k3s1",{"_index":1978,"t":{"354":{"position":[[171,14]]}}}],["v1.27.3",{"_index":1867,"t":{"319":{"position":[[13,8]]}}}],["v1.27.3+k3s1",{"_index":1461,"t":{"203":{"position":[[1674,12],[1712,12],[1749,12],[1809,12],[1869,12],[1929,12],[3122,12],[3160,12],[3198,12],[3258,12],[3318,12],[3378,12]]},"205":{"position":[[1159,12],[1197,12],[1235,12],[1295,12],[1355,12],[1415,12]]}}}],["v1.6",{"_index":2638,"t":{"555":{"position":[[724,5]]}}}],["v1.8.8",{"_index":659,"t":{"44":{"position":[[332,8]]}}}],["v1/v2",{"_index":518,"t":{"31":{"position":[[601,5]]}}}],["v120",{"_index":2380,"t":{"470":{"position":[[2517,4]]}}}],["v121",{"_index":2378,"t":{"470":{"position":[[1834,4]]}}}],["v2",{"_index":520,"t":{"31":{"position":[[643,2]]},"33":{"position":[[14,2],[914,2]]},"247":{"position":[[1390,3]]},"251":{"position":[[102,2]]},"404":{"position":[[1255,3],[1356,3]]},"470":{"position":[[1137,3]]},"533":{"position":[[147,3],[229,3]]},"604":{"position":[[763,2],[1045,2],[1327,2],[1609,2],[1891,2],[2173,2],[2455,2]]},"606":{"position":[[744,2],[1026,2],[1308,2],[1590,2],[1872,2],[2154,2],[2436,2]]},"624":{"position":[[757,2],[1039,2],[1321,2],[1603,2],[1885,2],[2167,2],[2449,2]]},"677":{"position":[[729,2],[1011,2],[1293,2],[1575,2],[1857,2],[2139,2],[2421,2]]}}}],["v2.43.0",{"_index":2245,"t":{"440":{"position":[[36,7]]}}}],["v2.8.5",{"_index":1632,"t":{"249":{"position":[[874,6]]}}}],["v3",{"_index":1606,"t":{"247":{"position":[[1367,2],[1397,3]]},"251":{"position":[[38,2],[113,3],[148,3]]}}}],["v=<level",{"_index":1563,"t":{"235":{"position":[[886,9]]}}}],["valid",{"_index":139,"t":{"11":{"position":[[133,5]]},"13":{"position":[[39,5]]},"52":{"position":[[614,5]]},"79":{"position":[[141,5]]},"104":{"position":[[39,5]]},"108":{"position":[[320,5],[1211,10]]},"118":{"position":[[3168,10]]},"135":{"position":[[1336,10]]},"162":{"position":[[5266,10],[5895,6]]},"168":{"position":[[784,8],[1125,8],[1186,9],[1252,6]]},"179":{"position":[[49,10],[2622,5]]},"279":{"position":[[1369,8]]},"311":{"position":[[713,5],[805,5],[955,5]]},"313":{"position":[[477,5]]},"326":{"position":[[1215,10]]},"428":{"position":[[1707,5]]},"494":{"position":[[183,6],[203,8]]},"498":{"position":[[311,5]]}}}],["valu",{"_index":456,"t":{"25":{"position":[[1360,6],[1406,6]]},"65":{"position":[[464,6],[524,6],[539,6],[660,6]]},"81":{"position":[[28,5],[81,5],[179,6],[189,5]]},"83":{"position":[[46,6],[56,5],[117,5],[184,6],[194,5]]},"85":{"position":[[36,6],[46,5]]},"87":{"position":[[50,5],[135,5],[210,5],[451,5]]},"89":{"position":[[54,5],[209,5],[320,5]]},"91":{"position":[[48,6],[58,5],[120,5],[186,5],[249,5],[309,5],[375,5]]},"93":{"position":[[31,5],[90,5]]},"97":{"position":[[99,5]]},"101":{"position":[[391,5],[465,5],[569,6],[579,5],[690,6],[700,5],[774,5],[854,6],[864,5],[923,6],[933,5],[1019,5],[1129,5],[1213,5],[1307,5],[1494,5],[1713,5],[2129,5],[2292,5],[2424,5],[2528,5],[2642,6],[2652,5],[2738,5],[2831,5],[2916,5],[2991,5],[3072,5],[3152,5],[3225,5]]},"112":{"position":[[799,6],[2461,6]]},"114":{"position":[[1658,7],[1854,7],[2247,5]]},"118":{"position":[[458,5],[2086,5],[2208,5],[2277,5],[2536,5]]},"132":{"position":[[46,5]]},"135":{"position":[[59,5],[175,5],[301,5],[420,5],[674,5],[817,5],[943,5],[1016,5],[1146,5],[1224,5],[1368,5],[1427,5],[1486,5],[1528,5],[1617,5],[1697,5]]},"137":{"position":[[46,6],[56,5],[143,5],[219,5],[326,5],[395,5]]},"139":{"position":[[57,6],[67,5],[166,5]]},"142":{"position":[[59,5],[112,5],[210,6],[220,5]]},"144":{"position":[[40,5],[91,5],[140,5],[260,5],[354,5]]},"146":{"position":[[36,6],[46,5]]},"150":{"position":[[40,5],[119,5],[213,5],[307,5],[417,5],[472,5],[749,5],[842,5]]},"152":{"position":[[46,5]]},"154":{"position":[[27,5]]},"156":{"position":[[28,5],[88,5],[158,5],[237,5],[331,5],[409,5],[468,5]]},"160":{"position":[[94,5],[135,5]]},"162":{"position":[[402,5],[476,5],[580,6],[590,5],[708,5],[781,5],[852,5],[994,5],[1121,5],[1249,6],[1259,5],[1376,5],[1477,5],[1593,5],[1711,5],[1843,5],[1922,5],[2290,5],[2395,5],[2508,6],[2518,5],[2629,5],[2707,6],[2717,5],[2817,5],[2891,5],[3011,5],[3093,6],[3103,5],[3398,5],[3467,5],[3535,5],[3612,5],[3699,5],[3792,5],[3885,5],[4009,5],[4143,5],[4270,5],[4535,5],[4681,5],[4813,5],[4887,5],[5073,5],[5152,5],[5298,5],[5365,5],[5432,5],[5475,5],[5565,5],[5651,5],[5718,5],[5807,5],[6344,5],[6454,5],[6538,5],[6632,5],[6819,5],[7061,5],[7224,5],[7356,5],[7460,5],[7590,5],[7703,6],[7713,5],[7799,5],[7892,5],[7977,5],[8052,5],[8133,5],[8213,5],[8286,5],[8815,5]]},"179":{"position":[[879,5],[991,5],[1056,5],[1126,5],[1284,5],[1435,5],[1656,5],[1768,5],[2140,5],[2252,5],[2429,5],[2541,5],[2601,5]]},"183":{"position":[[111,5]]},"189":{"position":[[32,5]]},"191":{"position":[[260,5],[352,5]]},"215":{"position":[[233,5]]},"247":{"position":[[235,7],[1554,7],[1992,6],[2023,6]]},"249":{"position":[[62,6],[414,5],[450,6]]},"277":{"position":[[370,6],[2025,6]]},"279":{"position":[[1423,5]]},"281":{"position":[[163,6],[904,6],[1069,6]]},"283":{"position":[[247,5],[334,5],[507,6]]},"303":{"position":[[908,5]]},"311":{"position":[[991,7],[1154,6]]},"326":{"position":[[1003,6]]},"382":{"position":[[206,6]]},"398":{"position":[[303,5],[381,5],[2284,5],[2529,6]]},"404":{"position":[[1003,7]]},"416":{"position":[[147,6]]},"424":{"position":[[930,7]]},"428":{"position":[[1442,5],[1694,5]]},"464":{"position":[[117,6]]},"480":{"position":[[475,5]]},"482":{"position":[[574,5]]},"484":{"position":[[498,5]]},"486":{"position":[[338,5]]},"488":{"position":[[513,5]]},"490":{"position":[[499,5]]},"492":{"position":[[723,5]]},"494":{"position":[[516,5]]},"496":{"position":[[120,5]]},"500":{"position":[[499,5],[590,5]]},"504":{"position":[[641,5]]},"533":{"position":[[928,5]]},"540":{"position":[[642,7]]},"548":{"position":[[475,6]]},"579":{"position":[[2123,6]]},"585":{"position":[[392,6]]},"587":{"position":[[416,6]]},"589":{"position":[[370,6]]},"591":{"position":[[426,6]]},"593":{"position":[[281,6]]},"595":{"position":[[287,6]]},"604":{"position":[[395,6]]},"606":{"position":[[376,6]]},"610":{"position":[[656,6]]},"612":{"position":[[604,6]]},"614":{"position":[[187,6],[473,6]]},"616":{"position":[[189,5],[422,6]]},"618":{"position":[[189,5],[435,6]]},"620":{"position":[[548,6]]},"622":{"position":[[216,5],[509,6]]},"624":{"position":[[389,6]]},"626":{"position":[[582,6]]},"628":{"position":[[301,5],[563,6]]},"630":{"position":[[459,6]]},"632":{"position":[[288,5],[575,6]]},"634":{"position":[[440,6]]},"636":{"position":[[355,6]]},"642":{"position":[[222,6]]},"646":{"position":[[530,6]]},"650":{"position":[[2290,6]]},"652":{"position":[[572,6]]},"654":{"position":[[488,6]]},"656":{"position":[[494,6]]},"667":{"position":[[381,6]]},"669":{"position":[[449,6]]},"671":{"position":[[534,6]]},"673":{"position":[[431,6]]},"677":{"position":[[181,5],[361,6]]},"680":{"position":[[340,6]]},"682":{"position":[[163,5],[414,6]]},"685":{"position":[[2169,6]]},"687":{"position":[[2082,6]]},"689":{"position":[[2095,6]]},"691":{"position":[[2235,6]]},"693":{"position":[[2085,6]]},"695":{"position":[[2118,6]]},"697":{"position":[[2172,6]]},"712":{"position":[[373,6]]},"714":{"position":[[462,6]]},"716":{"position":[[304,6]]},"718":{"position":[[325,6]]},"720":{"position":[[363,6]]},"722":{"position":[[258,6]]},"729":{"position":[[816,6]]},"731":{"position":[[824,6]]},"733":{"position":[[897,6]]},"735":{"position":[[645,6]]},"737":{"position":[[115,5]]},"747":{"position":[[836,6]]},"749":{"position":[[168,6]]},"753":{"position":[[418,7],[639,7]]},"764":{"position":[[218,5]]}}}],["value=option1=valu",{"_index":1270,"t":{"160":{"position":[[261,19]]}}}],["valuescont",{"_index":1593,"t":{"247":{"position":[[759,14],[1605,14]]},"249":{"position":[[346,14],[830,14]]}}}],["var",{"_index":828,"t":{"61":{"position":[[584,3]]}}}],["var/lib/etcd",{"_index":2654,"t":{"579":{"position":[[246,13]]},"581":{"position":[[262,13]]}}}],["var/lib/kubelet/config.yaml",{"_index":2833,"t":{"724":{"position":[[134,28]]},"726":{"position":[[140,28]]}}}],["var/lib/rancher/credentialprovider/bin",{"_index":1011,"t":{"101":{"position":[[1416,42]]},"162":{"position":[[6741,42]]}}}],["var/lib/rancher/credentialprovider/config.yaml",{"_index":1012,"t":{"101":{"position":[[1578,50]]},"162":{"position":[[6903,50]]}}}],["var/lib/rancher/k3",{"_index":975,"t":{"85":{"position":[[52,22]]},"101":{"position":[[983,23]]},"118":{"position":[[476,20]]},"146":{"position":[[52,20]]},"162":{"position":[[1303,20]]},"179":{"position":[[921,20],[1698,20],[2182,20],[2471,20]]}}}],["var/lib/rancher/k3s/ag",{"_index":2283,"t":{"454":{"position":[[1214,28]]},"456":{"position":[[325,29]]}}}],["var/lib/rancher/k3s/agent/containerd",{"_index":2711,"t":{"604":{"position":[[578,37]]},"606":{"position":[[559,37]]},"624":{"position":[[572,37]]},"677":{"position":[[544,37]]}}}],["var/lib/rancher/k3s/agent/containerd/containerd.log",{"_index":1559,"t":{"235":{"position":[[393,53]]}}}],["var/lib/rancher/k3s/agent/etc/containerd/config.toml",{"_index":389,"t":{"23":{"position":[[48,54]]},"25":{"position":[[559,53]]},"604":{"position":[[450,53]]},"606":{"position":[[431,53]]},"624":{"position":[[444,53]]},"677":{"position":[[416,53]]}}}],["var/lib/rancher/k3s/agent/imag",{"_index":1654,"t":{"263":{"position":[[187,34],[260,34]]},"271":{"position":[[214,34]]}}}],["var/lib/rancher/k3s/agent/kubelet.kubeconfig",{"_index":2824,"t":{"716":{"position":[[208,45]]},"718":{"position":[[217,45]]}}}],["var/lib/rancher/k3s/agent/kubeproxy.kubeconfig",{"_index":2823,"t":{"712":{"position":[[140,47],[206,47],[299,49]]},"714":{"position":[[146,47],[224,48],[292,48],[388,49]]}}}],["var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd",{"_index":2715,"t":{"604":{"position":[[647,105],[929,105],[1211,105],[1493,105],[1775,105],[2057,105],[2339,105]]},"606":{"position":[[628,105],[910,105],[1192,105],[1474,105],[1756,105],[2038,105],[2320,105]]},"624":{"position":[[641,105],[923,105],[1205,105],[1487,105],[1769,105],[2051,105],[2333,105]]},"677":{"position":[[613,105],[895,105],[1177,105],[1459,105],[1741,105],[2023,105],[2305,105]]}}}],["var/lib/rancher/k3s/serv",{"_index":2284,"t":{"456":{"position":[[239,29]]},"468":{"position":[[334,27]]},"472":{"position":[[578,27]]}}}],["var/lib/rancher/k3s/server/ag",{"_index":1318,"t":{"176":{"position":[[351,33]]}}}],["var/lib/rancher/k3s/server/cred/admin.kubeconfig",{"_index":2687,"t":{"583":{"position":[[152,49]]},"585":{"position":[[205,50],[275,50]]},"716":{"position":[[140,49]]},"718":{"position":[[146,49]]}}}],["var/lib/rancher/k3s/server/cred/controller.kubeconfig",{"_index":2695,"t":{"591":{"position":[[190,55],[274,55]]}}}],["var/lib/rancher/k3s/server/cred/scheduler.kubeconfig",{"_index":2691,"t":{"587":{"position":[[182,54],[265,54]]},"589":{"position":[[188,54],[262,54]]}}}],["var/lib/rancher/k3s/server/db",{"_index":1133,"t":{"118":{"position":[[1642,32],[1701,31]]},"193":{"position":[[125,32],[215,30]]}}}],["var/lib/rancher/k3s/server/db/etcd",{"_index":2667,"t":{"579":{"position":[[681,38]]},"650":{"position":[[811,38]]},"685":{"position":[[705,38]]},"687":{"position":[[594,38]]},"689":{"position":[[619,38]]},"691":{"position":[[771,38]]},"693":{"position":[[597,38]]},"695":{"position":[[629,38]]},"697":{"position":[[728,38]]}}}],["var/lib/rancher/k3s/server/db/etcd/config",{"_index":2672,"t":{"579":{"position":[[888,42],[1017,42],[1119,45],[1215,42],[1342,42],[1449,45],[1532,45]]},"650":{"position":[[1018,42],[1147,42],[1249,45],[1345,42],[1472,42],[1579,45],[1662,45]]},"685":{"position":[[912,42],[1041,42],[1143,45],[1239,42],[1366,42],[1473,45],[1556,45]]},"687":{"position":[[801,42],[930,42],[1032,45],[1128,42],[1255,42],[1362,45],[1445,45]]},"689":{"position":[[826,42],[955,42],[1057,45],[1153,42],[1280,42],[1387,45],[1470,45]]},"691":{"position":[[978,42],[1107,42],[1209,45],[1305,42],[1432,42],[1539,45],[1622,45]]},"693":{"position":[[804,42],[933,42],[1035,45],[1131,42],[1258,42],[1365,45],[1448,45]]},"695":{"position":[[836,42],[965,42],[1067,45],[1163,42],[1290,42],[1397,45],[1480,45]]},"697":{"position":[[935,42],[1064,42],[1166,45],[1262,42],[1389,42],[1496,45],[1579,45]]}}}],["var/lib/rancher/k3s/server/log",{"_index":2387,"t":{"472":{"position":[[420,32]]}}}],["var/lib/rancher/k3s/server/manifest",{"_index":1882,"t":{"322":{"position":[[35,37]]},"332":{"position":[[19,38],[584,37]]},"398":{"position":[[2961,39]]},"404":{"position":[[823,38]]},"468":{"position":[[2457,37]]},"470":{"position":[[158,37]]}}}],["var/lib/rancher/k3s/server/manifests/example_manifest.yaml",{"_index":1896,"t":{"326":{"position":[[868,60]]}}}],["var/lib/rancher/k3s/server/manifests/traefik",{"_index":1630,"t":{"249":{"position":[[623,45]]}}}],["var/lib/rancher/k3s/server/manifests/traefik.yaml",{"_index":2114,"t":{"404":{"position":[[571,51]]}}}],["var/lib/rancher/k3s/server/nod",{"_index":2185,"t":{"428":{"position":[[1482,32]]}}}],["var/lib/rancher/k3s/server/psa.yaml",{"_index":2077,"t":{"398":{"position":[[1225,36]]}}}],["var/lib/rancher/k3s/server/stat",{"_index":1622,"t":{"247":{"position":[[2129,35]]}}}],["var/lib/rancher/k3s/server/tl",{"_index":1057,"t":{"110":{"position":[[758,32],[2027,31],[2466,31]]},"112":{"position":[[296,32]]},"114":{"position":[[319,32]]},"116":{"position":[[482,32]]},"593":{"position":[[187,31]]},"595":{"position":[[184,31]]}}}],["var/lib/rancher/k3s/server/tls/*.crt",{"_index":2700,"t":{"597":{"position":[[192,37]]}}}],["var/lib/rancher/k3s/server/tls/*.key",{"_index":2702,"t":{"599":{"position":[[192,37]]}}}],["var/lib/rancher/k3s/server/tls/cli",{"_index":2832,"t":{"722":{"position":[[150,38]]}}}],["var/lib/rancher/k3s/server/tls/etcd/p",{"_index":2814,"t":{"691":{"position":[[2286,41],[2356,41]]},"697":{"position":[[2282,41]]}}}],["var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":2804,"t":{"685":{"position":[[2210,43],[2275,43]]},"697":{"position":[[2214,43]]}}}],["var/lib/rancher/k3s/server/tls/intermedi",{"_index":1092,"t":{"112":{"position":[[1608,44]]}}}],["var/lib/rancher/k3s/server/tls/root",{"_index":1091,"t":{"112":{"position":[[1566,36]]}}}],["var/lib/rancher/k3s/server/tls/serv",{"_index":2826,"t":{"720":{"position":[[147,38]]}}}],["var/lib/rancher/k3s/server/tls/service.key",{"_index":1094,"t":{"112":{"position":[[1790,43]]},"116":{"position":[[1003,43]]}}}],["var/lib/rancher/k3s/server/token",{"_index":1306,"t":{"174":{"position":[[148,34]]},"191":{"position":[[185,34]]},"215":{"position":[[307,33]]},"268":{"position":[[462,34]]},"533":{"position":[[996,33]]}}}],["var/log/journ",{"_index":2662,"t":{"579":{"position":[[535,16],[751,16]]},"602":{"position":[[214,16]]},"610":{"position":[[444,16]]},"612":{"position":[[427,16]]},"614":{"position":[[301,16]]},"616":{"position":[[267,16]]},"618":{"position":[[280,16]]},"620":{"position":[[371,16]]},"622":{"position":[[278,16]]},"626":{"position":[[344,16]]},"628":{"position":[[366,16]]},"630":{"position":[[262,16]]},"632":{"position":[[397,16]]},"634":{"position":[[258,16]]},"636":{"position":[[209,16]]},"646":{"position":[[339,16]]},"650":{"position":[[665,16],[881,16]]},"652":{"position":[[406,16]]},"654":{"position":[[341,16]]},"656":{"position":[[353,16]]},"658":{"position":[[395,16]]},"662":{"position":[[947,16]]},"665":{"position":[[296,16]]},"667":{"position":[[226,16]]},"669":{"position":[[246,16]]},"671":{"position":[[342,16]]},"673":{"position":[[279,16]]},"680":{"position":[[213,16]]},"682":{"position":[[223,16]]},"685":{"position":[[559,16],[775,16]]},"687":{"position":[[448,16],[664,16]]},"689":{"position":[[473,16],[689,16]]},"691":{"position":[[625,16],[841,16]]},"693":{"position":[[451,16],[667,16]]},"695":{"position":[[483,16],[699,16]]},"697":{"position":[[582,16],[798,16]]},"703":{"position":[[93,16]]},"729":{"position":[[513,16],[604,16]]},"731":{"position":[[499,16],[590,16]]},"733":{"position":[[555,16],[646,16]]},"735":{"position":[[463,16]]},"737":{"position":[[520,16]]},"747":{"position":[[681,16]]}}}],["var/log/k3s.log",{"_index":639,"t":{"41":{"position":[[199,17]]},"235":{"position":[[202,17]]}}}],["var/log/pod",{"_index":1558,"t":{"235":{"position":[[346,14]]}}}],["var/log/syslog",{"_index":640,"t":{"41":{"position":[[268,15]]}}}],["var/log/ulog/syslogemu.log",{"_index":873,"t":{"65":{"position":[[932,28]]}}}],["var/run/mysqld/mysqld.sock",{"_index":1396,"t":{"189":{"position":[[1556,27]]}}}],["vari",{"_index":1554,"t":{"235":{"position":[[30,4]]},"358":{"position":[[891,4]]},"555":{"position":[[1837,4]]}}}],["variabl",{"_index":192,"t":{"17":{"position":[[449,9],[1343,9]]},"35":{"position":[[190,10],[301,8]]},"54":{"position":[[817,9]]},"77":{"position":[[729,8]]},"83":{"position":[[17,8]]},"87":{"position":[[17,8]]},"91":{"position":[[17,8]]},"97":{"position":[[17,8]]},"101":{"position":[[124,8]]},"112":{"position":[[1106,9]]},"118":{"position":[[2476,8]]},"135":{"position":[[17,8]]},"137":{"position":[[17,8]]},"139":{"position":[[17,8]]},"160":{"position":[[17,8]]},"162":{"position":[[126,8]]},"172":{"position":[[186,8]]},"176":{"position":[[176,8]]},"181":{"position":[[326,8],[463,9]]},"187":{"position":[[360,10],[392,8],[1585,9]]},"215":{"position":[[213,9]]},"247":{"position":[[2291,8]]},"266":{"position":[[1044,9]]},"271":{"position":[[556,10]]},"277":{"position":[[236,10],[342,10],[1851,10],[1878,10],[2265,9]]},"279":{"position":[[589,10],[1064,10]]},"281":{"position":[[90,9],[1220,8]]},"285":{"position":[[225,9]]},"422":{"position":[[263,8]]},"428":{"position":[[1109,10],[1671,8]]},"432":{"position":[[322,9],[387,8],[2403,9],[2517,9]]},"548":{"position":[[192,9],[207,10],[715,9]]},"729":{"position":[[315,9]]},"731":{"position":[[295,9]]},"733":{"position":[[338,9]]},"735":{"position":[[291,9]]},"737":{"position":[[328,9]]},"739":{"position":[[313,9]]},"741":{"position":[[344,9]]},"743":{"position":[[218,9]]},"745":{"position":[[312,9]]},"747":{"position":[[435,9]]},"749":{"position":[[394,9]]},"751":{"position":[[196,9]]},"805":{"position":[[136,10]]}}}],["varieti",{"_index":897,"t":{"71":{"position":[[34,7]]},"207":{"position":[[131,7]]}}}],["variou",{"_index":1643,"t":{"253":{"position":[[57,7]]}}}],["vcpu",{"_index":2027,"t":{"366":{"position":[[125,5]]},"372":{"position":[[231,5]]}}}],["vcq7j",{"_index":1929,"t":{"332":{"position":[[936,5]]}}}],["verb",{"_index":2358,"t":{"468":{"position":[[4159,6],[4414,6],[4609,6]]}}}],["verbos",{"_index":962,"t":{"81":{"position":[[61,9]]},"101":{"position":[[432,9]]},"142":{"position":[[92,9]]},"162":{"position":[[443,9]]}}}],["veri",{"_index":731,"t":{"52":{"position":[[144,4]]},"65":{"position":[[244,4]]},"350":{"position":[[7,4]]}}}],["verif",{"_index":815,"t":{"59":{"position":[[1005,12]]},"168":{"position":[[883,12]]},"189":{"position":[[1336,13]]},"342":{"position":[[491,12]]}}}],["verifi",{"_index":1152,"t":{"118":{"position":[[3133,6]]},"135":{"position":[[1297,6]]},"162":{"position":[[5226,6]]},"187":{"position":[[976,6]]},"189":{"position":[[1295,7]]},"311":{"position":[[1545,6]]},"342":{"position":[[403,6]]},"494":{"position":[[141,8]]},"502":{"position":[[220,9]]}}}],["version",{"_index":383,"t":{"21":{"position":[[544,7]]},"33":{"position":[[324,7]]},"39":{"position":[[271,8]]},"44":{"position":[[43,7],[312,7],[403,7],[555,7]]},"50":{"position":[[69,8]]},"52":{"position":[[624,7]]},"54":{"position":[[0,7]]},"108":{"position":[[1336,7]]},"116":{"position":[[748,7],[764,7]]},"118":{"position":[[0,7]]},"122":{"position":[[0,7]]},"178":{"position":[[0,7]]},"185":{"position":[[1579,7],[1619,8],[1668,7],[1714,8]]},"203":{"position":[[1641,7],[3089,7]]},"205":{"position":[[1126,7]]},"221":{"position":[[1744,7]]},"223":{"position":[[0,7]]},"227":{"position":[[144,8]]},"241":{"position":[[27,7]]},"247":{"position":[[1183,7],[1227,7],[1375,7]]},"249":{"position":[[0,7]]},"251":{"position":[[0,7]]},"263":{"position":[[80,7]]},"266":{"position":[[222,7],[1077,7]]},"271":{"position":[[152,7]]},"273":{"position":[[170,7],[225,7],[392,8],[662,8]]},"281":{"position":[[0,7]]},"283":{"position":[[0,7]]},"303":{"position":[[417,8],[2044,7]]},"311":{"position":[[0,7]]},"313":{"position":[[0,7]]},"378":{"position":[[510,7]]},"394":{"position":[[177,8]]},"398":{"position":[[1785,8],[1829,8],[1871,8],[2431,8],[2651,8],[2742,8]]},"404":{"position":[[1165,8],[1215,8],[1397,7],[1470,8]]},"424":{"position":[[0,7]]},"432":{"position":[[860,7]]},"468":{"position":[[652,8],[696,8],[738,8]]},"470":{"position":[[1079,7],[1216,7]]},"533":{"position":[[41,8],[102,8],[774,8],[845,8]]},"536":{"position":[[1391,7],[1746,7],[1777,7],[1861,8],[1986,8]]},"540":{"position":[[730,8],[1137,8],[1805,7],[1872,7]]},"544":{"position":[[106,8]]},"546":{"position":[[534,8],[553,8],[891,7],[922,7],[1006,8],[1131,8]]},"548":{"position":[[29,7],[928,7],[1146,7]]},"550":{"position":[[49,7]]}}}],["version_kube_dashboard=$(curl",{"_index":1752,"t":{"289":{"position":[[60,29]]},"297":{"position":[[108,29]]}}}],["via",{"_index":596,"t":{"35":{"position":[[939,3]]},"75":{"position":[[262,3]]},"217":{"position":[[1088,3]]},"247":{"position":[[1601,3],[1999,3],[2193,3]]},"249":{"position":[[181,3]]},"266":{"position":[[600,3],[926,3]]},"268":{"position":[[726,3]]},"303":{"position":[[1455,3],[1717,3],[1851,3]]},"305":{"position":[[828,3]]},"309":{"position":[[550,3],[655,3]]},"315":{"position":[[636,3]]},"324":{"position":[[75,3]]},"334":{"position":[[43,3]]},"392":{"position":[[53,3]]},"398":{"position":[[3262,3]]},"440":{"position":[[146,3]]},"466":{"position":[[91,4]]},"538":{"position":[[392,3]]},"540":{"position":[[2659,3]]},"546":{"position":[[19,3]]}}}],["view",{"_index":641,"t":{"41":{"position":[[288,6]]},"235":{"position":[[289,6]]},"322":{"position":[[565,4]]},"540":{"position":[[2633,7]]}}}],["vip",{"_index":1414,"t":{"199":{"position":[[786,3]]},"203":{"position":[[270,5],[991,3]]}}}],["virtual",{"_index":571,"t":{"35":{"position":[[385,7],[470,7]]},"203":{"position":[[259,7]]},"217":{"position":[[545,7]]}}}],["virtual_ipaddress",{"_index":1453,"t":{"203":{"position":[[1127,17]]}}}],["virtual_router_id",{"_index":1452,"t":{"203":{"position":[[1106,17]]}}}],["visibl",{"_index":1251,"t":{"150":{"position":[[282,10]]},"162":{"position":[[1661,10]]},"378":{"position":[[439,7]]},"424":{"position":[[593,7]]}}}],["visit",{"_index":1803,"t":{"307":{"position":[[286,5]]},"546":{"position":[[732,5]]}}}],["vm.overcommit_memory=1",{"_index":2310,"t":{"464":{"position":[[411,22]]}}}],["vm.panic_on_oom=0",{"_index":2309,"t":{"464":{"position":[[393,17]]}}}],["vmodul",{"_index":963,"t":{"81":{"position":[[73,7]]},"101":{"position":[[457,7]]},"142":{"position":[[104,7]]},"162":{"position":[[468,7]]}}}],["vmodule=<module>=<level",{"_index":1564,"t":{"235":{"position":[[901,24]]}}}],["volum",{"_index":2048,"t":{"384":{"position":[[217,8]]},"454":{"position":[[1160,8]]},"456":{"position":[[441,8]]},"468":{"position":[[1577,8],[2718,8],[3542,8]]},"492":{"position":[[356,6]]},"514":{"position":[[316,6],[396,6]]},"516":{"position":[[29,6],[427,6],[750,6]]},"518":{"position":[[98,6],[311,6]]},"522":{"position":[[41,6],[98,6],[238,8]]},"528":{"position":[[41,6],[98,6],[238,8]]},"795":{"position":[[151,8]]}}}],["volumemount",{"_index":2573,"t":{"522":{"position":[[167,13]]},"528":{"position":[[167,13]]}}}],["volv",{"_index":2574,"t":{"522":{"position":[[189,4],[255,4]]},"526":{"position":[[68,4]]},"528":{"position":[[189,4],[255,4],[303,4]]}}}],["vpn",{"_index":1853,"t":{"315":{"position":[[276,3]]},"317":{"position":[[34,3]]},"319":{"position":[[116,3],[837,3],[943,3]]}}}],["vrrp_instanc",{"_index":1447,"t":{"203":{"position":[[969,13]]}}}],["vrrp_script",{"_index":1443,"t":{"203":{"position":[[882,11]]}}}],["vulner",{"_index":1301,"t":{"170":{"position":[[306,10]]}}}],["vx.y.z",{"_index":1533,"t":{"221":{"position":[[1796,6],[1847,6],[1898,6]]}}}],["vxlan",{"_index":723,"t":{"50":{"position":[[518,5]]},"150":{"position":[[478,7],[501,8]]},"162":{"position":[[2009,8],[2106,8]]},"303":{"position":[[315,6],[384,5],[1311,5]]},"360":{"position":[[141,5],[802,5]]},"362":{"position":[[235,5]]}}}],["w",{"_index":1753,"t":{"289":{"position":[[91,1]]},"297":{"position":[[139,1]]}}}],["wait",{"_index":2042,"t":{"376":{"position":[[268,4]]},"540":{"position":[[1724,4]]}}}],["want",{"_index":100,"t":{"6":{"position":[[3,6]]},"17":{"position":[[1233,4]]},"27":{"position":[[495,4]]},"39":{"position":[[941,4]]},"99":{"position":[[429,4]]},"110":{"position":[[1315,4],[1607,4],[1717,4]]},"247":{"position":[[446,4]]},"277":{"position":[[2131,4]]},"303":{"position":[[2318,4]]},"368":{"position":[[178,4]]},"380":{"position":[[117,4]]},"398":{"position":[[1304,4]]},"428":{"position":[[903,4]]},"548":{"position":[[581,4],[901,4],[1116,4]]}}}],["warn",{"_index":467,"t":{"27":{"position":[[0,8]]},"29":{"position":[[0,8]]},"54":{"position":[[753,7]]},"116":{"position":[[1193,8]]},"315":{"position":[[290,7],[496,7]]},"319":{"position":[[971,7]]},"322":{"position":[[401,8]]},"398":{"position":[[1847,5],[1866,4]]},"424":{"position":[[45,7],[1171,7]]},"468":{"position":[[714,5],[733,4]]},"555":{"position":[[1408,4]]},"597":{"position":[[8,4]]},"599":{"position":[[8,4]]},"602":{"position":[[8,4]]},"620":{"position":[[8,4]]},"624":{"position":[[8,4]]},"626":{"position":[[8,4]]},"658":{"position":[[8,4]]},"660":{"position":[[8,4]]},"662":{"position":[[8,4]]},"665":{"position":[[8,4]]},"700":{"position":[[8,4]]},"703":{"position":[[8,4]]},"705":{"position":[[8,4]]},"737":{"position":[[8,4]]},"745":{"position":[[8,4]]},"753":{"position":[[8,4]]},"756":{"position":[[8,4]]},"758":{"position":[[8,4]]},"760":{"position":[[8,4]]},"762":{"position":[[8,4]]},"764":{"position":[[8,4]]},"766":{"position":[[8,4]]},"768":{"position":[[8,4]]},"770":{"position":[[8,4]]},"773":{"position":[[8,4]]},"775":{"position":[[8,4]]},"777":{"position":[[8,4]]},"779":{"position":[[8,4]]},"781":{"position":[[8,4]]},"783":{"position":[[8,4]]},"785":{"position":[[8,4]]},"787":{"position":[[8,4]]},"789":{"position":[[8,4]]},"791":{"position":[[8,4]]},"793":{"position":[[8,4]]},"795":{"position":[[8,4]]},"797":{"position":[[8,4]]},"800":{"position":[[8,4]]},"802":{"position":[[8,4]]},"805":{"position":[[8,4]]},"807":{"position":[[8,4]]},"810":{"position":[[8,4]]},"813":{"position":[[8,4]]},"815":{"position":[[8,4]]},"817":{"position":[[8,4]]},"819":{"position":[[8,4]]}}}],["watch",{"_index":1265,"t":{"150":{"position":[[1566,8],[1819,8]]},"309":{"position":[[1396,8],[1733,8]]},"410":{"position":[[25,7]]},"758":{"position":[[63,5]]}}}],["way",{"_index":121,"t":{"8":{"position":[[68,4]]},"31":{"position":[[160,3]]},"35":{"position":[[210,3]]},"52":{"position":[[18,4]]},"179":{"position":[[1455,4]]},"191":{"position":[[4,3]]},"237":{"position":[[24,4]]},"279":{"position":[[736,4]]},"328":{"position":[[14,4]]},"428":{"position":[[57,3]]}}}],["wc",{"_index":2663,"t":{"579":{"position":[[619,2]]},"650":{"position":[[749,2]]},"685":{"position":[[643,2]]},"687":{"position":[[532,2]]},"689":{"position":[[557,2]]},"691":{"position":[[709,2]]},"693":{"position":[[535,2]]},"695":{"position":[[567,2]]},"697":{"position":[[666,2]]},"729":{"position":[[571,2]]},"731":{"position":[[557,2]]},"733":{"position":[[613,2]]}}}],["web",{"_index":1589,"t":{"247":{"position":[[366,3],[577,3],[755,3]]}}}],["webhook",{"_index":2837,"t":{"731":{"position":[[101,8]]}}}],["webhook=tru",{"_index":2458,"t":{"476":{"position":[[3117,12]]},"735":{"position":[[836,12],[2059,12]]},"747":{"position":[[1027,12],[2250,12]]}}}],["websit",{"_index":1804,"t":{"307":{"position":[[307,8]]}}}],["websocket",{"_index":911,"t":{"75":{"position":[[34,9]]},"309":{"position":[[32,9]]},"317":{"position":[[188,9]]}}}],["well",{"_index":123,"t":{"8":{"position":[[104,4]]},"17":{"position":[[367,4]]},"59":{"position":[[807,4]]},"81":{"position":[[258,4]]},"101":{"position":[[660,4]]},"118":{"position":[[2896,4]]},"142":{"position":[[289,4]]},"162":{"position":[[671,4]]},"221":{"position":[[769,4]]},"307":{"position":[[186,4]]},"336":{"position":[[604,5],[755,5]]},"398":{"position":[[1338,5]]},"454":{"position":[[171,4]]},"460":{"position":[[929,4]]},"468":{"position":[[1154,4]]},"540":{"position":[[2081,4]]}}}],["wg",{"_index":1789,"t":{"303":{"position":[[1859,2]]},"305":{"position":[[58,2]]}}}],["whatev",{"_index":2681,"t":{"579":{"position":[[1629,8]]},"650":{"position":[[1759,8]]},"685":{"position":[[1653,8]]},"687":{"position":[[1542,8]]},"689":{"position":[[1567,8]]},"691":{"position":[[1719,8]]},"693":{"position":[[1545,8]]},"695":{"position":[[1577,8]]},"697":{"position":[[1676,8]]}}}],["whenev",{"_index":1885,"t":{"324":{"position":[[416,8]]}}}],["wherev",{"_index":2879,"t":{"764":{"position":[[59,8]]}}}],["whether",{"_index":593,"t":{"35":{"position":[[885,7]]},"118":{"position":[[4378,7]]},"128":{"position":[[799,7],[1092,7],[1187,7]]},"350":{"position":[[78,7]]},"478":{"position":[[129,7]]}}}],["wide",{"_index":540,"t":{"33":{"position":[[475,4]]}}}],["wildcard",{"_index":2878,"t":{"760":{"position":[[60,9]]}}}],["window",{"_index":402,"t":{"23":{"position":[[401,7]]},"231":{"position":[[43,8]]}}}],["wireguard",{"_index":1257,"t":{"150":{"position":[[542,10]]},"160":{"position":[[190,9]]},"162":{"position":[[2051,10],[2071,11]]},"174":{"position":[[669,9]]},"303":{"position":[[352,9],[475,9],[590,9],[631,9],[760,9],[868,9],[1579,9],[1841,9]]},"305":{"position":[[11,9],[134,9],[357,9],[719,9],[764,9]]},"317":{"position":[[9,9],[243,9]]},"360":{"position":[[220,9]]},"362":{"position":[[343,9],[419,9]]}}}],["wireguard'(deprec",{"_index":1259,"t":{"150":{"position":[[565,23]]}}}],["wireshark'",{"_index":882,"t":{"65":{"position":[[1205,11]]}}}],["wish",{"_index":676,"t":{"46":{"position":[[82,4]]},"48":{"position":[[79,4]]},"75":{"position":[[1369,4]]},"185":{"position":[[534,4]]},"187":{"position":[[7,4]]},"213":{"position":[[1334,4]]},"219":{"position":[[121,4]]},"251":{"position":[[124,4]]},"336":{"position":[[275,4]]},"360":{"position":[[561,4]]},"418":{"position":[[119,4]]}}}],["within",{"_index":154,"t":{"13":{"position":[[125,6]]},"104":{"position":[[125,6]]},"108":{"position":[[451,6]]},"191":{"position":[[455,6]]},"235":{"position":[[683,6],[742,6]]},"247":{"position":[[2227,6]]},"326":{"position":[[449,6],[484,6]]},"398":{"position":[[2954,6]]},"400":{"position":[[103,6]]}}}],["without",{"_index":224,"t":{"17":{"position":[[1285,7]]},"31":{"position":[[489,7]]},"33":{"position":[[158,7]]},"63":{"position":[[41,7]]},"67":{"position":[[393,7]]},"108":{"position":[[1319,7]]},"118":{"position":[[1135,7],[1567,7]]},"124":{"position":[[168,7],[829,7]]},"199":{"position":[[343,7]]},"215":{"position":[[171,7]]},"221":{"position":[[551,7]]},"277":{"position":[[725,7]]},"309":{"position":[[236,7]]},"313":{"position":[[367,7]]},"344":{"position":[[131,7]]},"346":{"position":[[135,7]]},"408":{"position":[[596,7]]},"432":{"position":[[2627,7]]},"460":{"position":[[360,7]]},"510":{"position":[[363,7]]},"533":{"position":[[553,7]]},"540":{"position":[[1625,7]]}}}],["word",{"_index":106,"t":{"6":{"position":[[119,4],[200,4]]}}}],["work",{"_index":658,"t":{"44":{"position":[[304,7]]},"118":{"position":[[3992,7]]},"185":{"position":[[1888,4]]},"207":{"position":[[710,4]]},"309":{"position":[[1432,4]]},"340":{"position":[[329,7]]},"348":{"position":[[74,7]]},"356":{"position":[[19,4]]},"400":{"position":[[98,4]]},"424":{"position":[[93,4]]},"426":{"position":[[183,4]]},"514":{"position":[[473,5]]},"540":{"position":[[2075,5]]},"546":{"position":[[810,5]]}}}],["workaround",{"_index":706,"t":{"50":{"position":[[82,12]]},"394":{"position":[[279,12]]}}}],["worker",{"_index":2237,"t":{"436":{"position":[[311,8]]},"708":{"position":[[114,6]]},"710":{"position":[[114,6]]},"712":{"position":[[104,6]]},"714":{"position":[[104,6]]},"716":{"position":[[104,6]]},"718":{"position":[[104,6]]},"729":{"position":[[247,6]]},"731":{"position":[[233,6]]},"733":{"position":[[276,6]]},"735":{"position":[[223,6]]},"737":{"position":[[260,6]]},"739":{"position":[[245,6]]},"741":{"position":[[246,6]]},"743":{"position":[[128,6]]},"745":{"position":[[244,6]]},"747":{"position":[[366,6]]},"749":{"position":[[300,6]]},"751":{"position":[[128,6]]},"753":{"position":[[549,6]]}}}],["worker2",{"_index":2172,"t":{"424":{"position":[[940,9]]}}}],["workload",{"_index":478,"t":{"27":{"position":[[565,10]]},"39":{"position":[[797,9]]},"213":{"position":[[1291,9],[1387,9]]},"336":{"position":[[512,9]]},"350":{"position":[[345,8]]},"358":{"position":[[303,9],[526,10]]},"428":{"position":[[814,8]]},"434":{"position":[[233,8],[459,8],[806,8],[925,9]]},"436":{"position":[[257,8]]},"438":{"position":[[573,8]]},"440":{"position":[[653,10]]},"446":{"position":[[108,9]]},"448":{"position":[[101,9]]},"452":{"position":[[168,10]]},"454":{"position":[[1116,8]]},"456":{"position":[[64,8],[125,8],[397,8]]},"506":{"position":[[142,9]]},"764":{"position":[[81,8]]},"773":{"position":[[157,10]]},"775":{"position":[[87,9]]},"777":{"position":[[87,9]]},"779":{"position":[[87,9]]},"781":{"position":[[87,9]]},"783":{"position":[[87,9]]},"787":{"position":[[87,9]]},"793":{"position":[[87,9]]},"795":{"position":[[87,9]]},"797":{"position":[[87,9]]}}}],["world",{"_index":2012,"t":{"360":{"position":[[851,5]]},"504":{"position":[[522,6]]}}}],["world!\\n",{"_index":834,"t":{"61":{"position":[[686,11]]}}}],["wors",{"_index":1526,"t":{"221":{"position":[[497,5]]}}}],["worst",{"_index":2527,"t":{"500":{"position":[[222,5]]}}}],["wrap",{"_index":40,"t":{"4":{"position":[[233,7]]},"33":{"position":[[1042,4]]}}}],["write",{"_index":196,"t":{"17":{"position":[[508,5]]},"56":{"position":[[270,5]]},"118":{"position":[[2619,7]]},"139":{"position":[[40,5],[95,5],[144,5],[192,5]]},"162":{"position":[[2491,5],[2533,5],[2607,5],[2644,5]]},"179":{"position":[[568,6]]},"279":{"position":[[668,5]]},"281":{"position":[[309,5],[493,5]]},"283":{"position":[[645,5],[733,5],[879,5]]},"358":{"position":[[679,5]]},"432":{"position":[[1144,5]]},"536":{"position":[[895,5]]}}}],["written",{"_index":1237,"t":{"139":{"position":[[267,7]]},"174":{"position":[[137,7]]},"176":{"position":[[340,7]]},"179":{"position":[[730,7]]},"324":{"position":[[400,7]]},"428":{"position":[[538,7]]},"468":{"position":[[298,7]]},"472":{"position":[[540,7]]},"638":{"position":[[256,8]]}}}],["www.example.com",{"_index":1595,"t":{"247":{"position":[[835,15]]}}}],["x",{"_index":2032,"t":{"366":{"position":[[205,1]]},"372":{"position":[[311,1]]}}}],["x86_64",{"_index":1970,"t":{"354":{"position":[[50,6]]},"442":{"position":[[28,6]]}}}],["xarg",{"_index":2698,"t":{"595":{"position":[[218,5]]}}}],["xeon",{"_index":2259,"t":{"442":{"position":[[70,4]]}}}],["xx",{"_index":2034,"t":{"366":{"position":[[232,2]]},"372":{"position":[[337,2]]}}}],["xx98j",{"_index":1924,"t":{"332":{"position":[[820,5]]}}}],["xxxxxx",{"_index":1959,"t":{"344":{"position":[[262,6],[311,6]]},"346":{"position":[[265,6],[314,6]]}}}],["xxxxxxxxxxxxxxxxxxx",{"_index":2543,"t":{"510":{"position":[[774,21]]}}}],["y",{"_index":414,"t":{"25":{"position":[[320,1]]},"54":{"position":[[569,1],[622,1]]}}}],["yaml",{"_index":959,"t":{"79":{"position":[[342,4]]},"130":{"position":[[380,4]]},"245":{"position":[[115,4]]},"247":{"position":[[2003,4]]},"273":{"position":[[503,4],[822,5]]},"281":{"position":[[183,4],[673,4],[734,4],[800,4]]},"307":{"position":[[368,4],[524,5],[751,4],[908,5]]},"326":{"position":[[159,4]]},"470":{"position":[[1177,4]]},"522":{"position":[[319,5]]},"524":{"position":[[433,4]]},"540":{"position":[[2711,4],[2754,4]]}}}],["ye",{"_index":1567,"t":{"237":{"position":[[0,4]]}}}],["year",{"_index":140,"t":{"11":{"position":[[146,6]]},"108":{"position":[[333,5]]}}}],["you'll",{"_index":958,"t":{"79":{"position":[[17,6]]},"118":{"position":[[59,6]]},"130":{"position":[[17,6]]},"223":{"position":[[235,6]]}}}],["you'r",{"_index":1966,"t":{"350":{"position":[[86,6]]}}}],["you'v",{"_index":1500,"t":{"213":{"position":[[1564,6]]},"223":{"position":[[217,6]]}}}],["your_account@xyz.com",{"_index":1875,"t":{"319":{"position":[[562,25],[611,25]]}}}],["your_ip_or_hostname_her",{"_index":1514,"t":{"217":{"position":[[895,24]]}}}],["yourself",{"_index":1338,"t":{"179":{"position":[[1965,8]]},"402":{"position":[[218,9]]}}}],["you’ll",{"_index":2544,"t":{"514":{"position":[[57,6]]}}}],["yum",{"_index":759,"t":{"54":{"position":[[556,3],[609,3]]}}}],["z0",{"_index":1339,"t":{"179":{"position":[[2009,2],[2021,2]]},"326":{"position":[[1233,2],[1243,2],[1252,2],[1266,2],[1276,2],[1285,2]]}}}],["zero",{"_index":1487,"t":{"207":{"position":[[510,4]]},"221":{"position":[[821,4]]},"634":{"position":[[217,5]]}}}],["zone=trust",{"_index":683,"t":{"46":{"position":[[243,12],[315,12]]}}}],["zxv",{"_index":376,"t":{"21":{"position":[[380,3]]}}}]],"pipeline":["stemmer"]}}]
\ No newline at end of file
diff --git a/search.html b/search.html
index e71253fba..0dc6d6acf 100644
--- a/search.html
+++ b/search.html
@@ -1,18 +1,18 @@
 <!doctype html>
-<html lang="en" dir="ltr" class="search-page-wrapper plugin-search-algolia plugin-id-default">
+<html lang="en" dir="ltr" class="plugin-@easyops-cn/docusaurus-search-local plugin-id-default">
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Search the documentation | K3s</title><meta data-rh="true" property="og:title" content="K3s"><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/search"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="robots" content="noindex, follow"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/search"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/search" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/search" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Search the documentation</title><meta data-rh="true" property="og:title" content="K3s"><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/search"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="robots" content="noindex, follow"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/search"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/search" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/search" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/search" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><div class="container margin-vert--lg"><h1>Search the documentation</h1><form class="row"><div class="col searchQueryColumn_RTkw col--12"><input type="search" name="q" class="searchQueryInput_u2C7" placeholder="Type your search here" aria-label="Search" autocomplete="off" autofocus=""></div></form><div class="row"><div class="col col--8 searchResultsColumn_JPFH"></div><div class="col col--4 text--right searchLogoColumn_rJIA"><a target="_blank" rel="noopener noreferrer" href="https://www.algolia.com/" aria-label="Search by Algolia"><svg viewBox="0 0 168 24" class="algoliaLogo_rT1R"><g fill="none"><path class="algoliaLogoPathFill_WdUC" d="M120.925 18.804c-4.386.02-4.386-3.54-4.386-4.106l-.007-13.336 2.675-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-10.846-2.18c.821 0 1.43-.047 1.855-.129v-2.719a6.334 6.334 0 0 0-1.574-.199 5.7 5.7 0 0 0-.897.069 2.699 2.699 0 0 0-.814.24c-.24.116-.439.28-.582.491-.15.212-.219.335-.219.656 0 .628.219.991.616 1.23s.938.362 1.615.362zm-.233-9.7c.883 0 1.629.109 2.231.328.602.218 1.088.525 1.444.915.363.396.609.922.76 1.483.157.56.232 1.175.232 1.85v6.874a32.5 32.5 0 0 1-1.868.314c-.834.123-1.772.185-2.813.185-.69 0-1.327-.069-1.895-.198a4.001 4.001 0 0 1-1.471-.636 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.803 0-.656.13-1.073.384-1.525a3.24 3.24 0 0 1 1.047-1.106c.445-.287.95-.492 1.532-.615a8.8 8.8 0 0 1 1.82-.185 8.404 8.404 0 0 1 1.972.24v-.438c0-.307-.035-.6-.11-.874a1.88 1.88 0 0 0-.384-.73 1.784 1.784 0 0 0-.724-.493 3.164 3.164 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.735 7.735 0 0 0-1.26.307l-.321-2.192c.335-.117.834-.233 1.478-.349a10.98 10.98 0 0 1 2.073-.178zm52.842 9.626c.822 0 1.43-.048 1.854-.13V13.7a6.347 6.347 0 0 0-1.574-.199c-.294 0-.595.021-.896.069a2.7 2.7 0 0 0-.814.24 1.46 1.46 0 0 0-.582.491c-.15.212-.218.335-.218.656 0 .628.218.991.615 1.23.404.245.938.362 1.615.362zm-.226-9.694c.883 0 1.629.108 2.231.327.602.219 1.088.526 1.444.915.355.39.609.923.759 1.483a6.8 6.8 0 0 1 .233 1.852v6.873c-.41.088-1.034.19-1.868.314-.834.123-1.772.184-2.813.184-.69 0-1.327-.068-1.895-.198a4.001 4.001 0 0 1-1.471-.635 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.804 0-.656.13-1.073.384-1.524.26-.45.608-.82 1.047-1.107.445-.286.95-.491 1.532-.614a8.803 8.803 0 0 1 2.751-.13c.329.034.671.096 1.04.185v-.437a3.3 3.3 0 0 0-.109-.875 1.873 1.873 0 0 0-.384-.731 1.784 1.784 0 0 0-.724-.492 3.165 3.165 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.75 7.75 0 0 0-1.26.307l-.321-2.193c.335-.116.834-.232 1.478-.348a11.633 11.633 0 0 1 2.073-.177zm-8.034-1.271a1.626 1.626 0 0 1-1.628-1.62c0-.895.725-1.62 1.628-1.62.904 0 1.63.725 1.63 1.62 0 .895-.733 1.62-1.63 1.62zm1.348 13.22h-2.689V7.27l2.69-.423v11.956zm-4.714 0c-4.386.02-4.386-3.54-4.386-4.107l-.008-13.336 2.676-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-8.698-5.903c0-1.156-.253-2.119-.746-2.788-.493-.677-1.183-1.01-2.067-1.01-.882 0-1.574.333-2.065 1.01-.493.676-.733 1.632-.733 2.788 0 1.168.246 1.953.74 2.63.492.683 1.183 1.018 2.066 1.018.882 0 1.574-.342 2.067-1.019.492-.683.738-1.46.738-2.63zm2.737-.007c0 .902-.13 1.584-.397 2.33a5.52 5.52 0 0 1-1.128 1.906 4.986 4.986 0 0 1-1.752 1.223c-.685.286-1.739.45-2.265.45-.528-.006-1.574-.157-2.252-.45a5.096 5.096 0 0 1-1.744-1.223c-.487-.527-.863-1.162-1.137-1.906a6.345 6.345 0 0 1-.41-2.33c0-.902.123-1.77.397-2.508a5.554 5.554 0 0 1 1.15-1.892 5.133 5.133 0 0 1 1.75-1.216c.679-.287 1.425-.423 2.232-.423.808 0 1.553.142 2.237.423a4.88 4.88 0 0 1 1.753 1.216 5.644 5.644 0 0 1 1.135 1.892c.287.738.431 1.606.431 2.508zm-20.138 0c0 1.12.246 2.363.738 2.882.493.52 1.13.78 1.91.78.424 0 .828-.062 1.204-.178.377-.116.677-.253.917-.417V9.33a10.476 10.476 0 0 0-1.766-.226c-.971-.028-1.71.37-2.23 1.004-.513.636-.773 1.75-.773 2.788zm7.438 5.274c0 1.824-.466 3.156-1.404 4.004-.936.846-2.367 1.27-4.296 1.27-.705 0-2.17-.137-3.34-.396l.431-2.118c.98.205 2.272.26 2.95.26 1.074 0 1.84-.219 2.299-.656.459-.437.684-1.086.684-1.948v-.437a8.07 8.07 0 0 1-1.047.397c-.43.13-.93.198-1.492.198-.739 0-1.41-.116-2.018-.349a4.206 4.206 0 0 1-1.567-1.025c-.431-.45-.774-1.017-1.013-1.694-.24-.677-.363-1.885-.363-2.773 0-.834.13-1.88.384-2.577.26-.696.629-1.298 1.129-1.796.493-.498 1.095-.881 1.8-1.162a6.605 6.605 0 0 1 2.428-.457c.87 0 1.67.109 2.45.24.78.129 1.444.265 1.985.415V18.17zM6.972 6.677v1.627c-.712-.446-1.52-.67-2.425-.67-.585 0-1.045.13-1.38.391a1.24 1.24 0 0 0-.502 1.03c0 .425.164.765.494 1.02.33.256.835.532 1.516.83.447.192.795.356 1.045.495.25.138.537.332.862.582.324.25.563.548.718.894.154.345.23.741.23 1.188 0 .947-.334 1.691-1.004 2.234-.67.542-1.537.814-2.601.814-1.18 0-2.16-.229-2.936-.686v-1.708c.84.628 1.814.942 2.92.942.585 0 1.048-.136 1.388-.407.34-.271.51-.646.51-1.125 0-.287-.1-.55-.302-.79-.203-.24-.42-.42-.655-.542-.234-.123-.585-.29-1.053-.503a61.27 61.27 0 0 1-.582-.271 13.67 13.67 0 0 1-.55-.287 4.275 4.275 0 0 1-.567-.351 6.92 6.92 0 0 1-.455-.4c-.18-.17-.31-.34-.39-.51-.08-.17-.155-.37-.224-.598a2.553 2.553 0 0 1-.104-.742c0-.915.333-1.638.998-2.17.664-.532 1.523-.798 2.576-.798.968 0 1.793.17 2.473.51zm7.468 5.696v-.287c-.022-.607-.187-1.088-.495-1.444-.309-.357-.75-.535-1.324-.535-.532 0-.99.194-1.373.583-.382.388-.622.949-.717 1.683h3.909zm1.005 2.792v1.404c-.596.34-1.383.51-2.362.51-1.255 0-2.255-.377-3-1.132-.744-.755-1.116-1.744-1.116-2.968 0-1.297.34-2.316 1.021-3.055.68-.74 1.548-1.11 2.6-1.11 1.033 0 1.852.323 2.458.966.606.644.91 1.572.91 2.784 0 .33-.033.676-.096 1.038h-5.314c.107.702.405 1.239.894 1.611.49.372 1.106.558 1.85.558.862 0 1.58-.202 2.155-.606zm6.605-1.77h-1.212c-.596 0-1.045.116-1.349.35-.303.234-.454.532-.454.894 0 .372.117.664.35.877.235.213.575.32 1.022.32.51 0 .912-.142 1.204-.424.293-.281.44-.651.44-1.108v-.91zm-4.068-2.554V9.325c.627-.361 1.457-.542 2.489-.542 2.116 0 3.175 1.026 3.175 3.08V17h-1.548v-.957c-.415.68-1.143 1.02-2.186 1.02-.766 0-1.38-.22-1.843-.661-.462-.442-.694-1.003-.694-1.684 0-.776.293-1.38.878-1.81.585-.431 1.404-.647 2.457-.647h1.34V11.8c0-.554-.133-.971-.399-1.253-.266-.282-.707-.423-1.324-.423a4.07 4.07 0 0 0-2.345.718zm9.333-1.93v1.42c.394-1 1.101-1.5 2.123-1.5.148 0 .313.016.494.048v1.531a1.885 1.885 0 0 0-.75-.143c-.542 0-.989.24-1.34.718-.351.479-.527 1.048-.527 1.707V17h-1.563V8.91h1.563zm5.01 4.084c.022.82.272 1.492.75 2.019.479.526 1.15.79 2.01.79.639 0 1.235-.176 1.788-.527v1.404c-.521.319-1.186.479-1.995.479-1.265 0-2.276-.4-3.031-1.197-.755-.798-1.133-1.792-1.133-2.984 0-1.16.38-2.151 1.14-2.975.761-.825 1.79-1.237 3.088-1.237.702 0 1.346.149 1.93.447v1.436a3.242 3.242 0 0 0-1.77-.495c-.84 0-1.513.266-2.019.798-.505.532-.758 1.213-.758 2.042zM40.24 5.72v4.579c.458-1 1.293-1.5 2.505-1.5.787 0 1.42.245 1.899.734.479.49.718 1.17.718 2.042V17h-1.564v-5.106c0-.553-.14-.98-.422-1.284-.282-.303-.652-.455-1.11-.455-.531 0-1.002.202-1.411.606-.41.405-.615 1.022-.615 1.851V17h-1.563V5.72h1.563zm14.966 10.02c.596 0 1.096-.253 1.5-.758.404-.506.606-1.157.606-1.955 0-.915-.202-1.62-.606-2.114-.404-.495-.92-.742-1.548-.742-.553 0-1.05.224-1.491.67-.442.447-.662 1.133-.662 2.058 0 .958.212 1.67.638 2.138.425.469.946.703 1.563.703zM53.004 5.72v4.42c.574-.894 1.388-1.341 2.44-1.341 1.022 0 1.857.383 2.506 1.149.649.766.973 1.781.973 3.047 0 1.138-.309 2.109-.925 2.912-.617.803-1.463 1.205-2.537 1.205-1.075 0-1.894-.447-2.457-1.34V17h-1.58V5.72h1.58zm9.908 11.104l-3.223-7.913h1.739l1.005 2.632 1.26 3.415c.096-.32.48-1.458 1.15-3.415l.909-2.632h1.66l-2.92 7.866c-.777 2.074-1.963 3.11-3.559 3.11a2.92 2.92 0 0 1-.734-.079v-1.34c.17.042.351.064.543.064 1.032 0 1.755-.57 2.17-1.708z"></path><path fill="#5468FF" d="M78.988.938h16.594a2.968 2.968 0 0 1 2.966 2.966V20.5a2.967 2.967 0 0 1-2.966 2.964H78.988a2.967 2.967 0 0 1-2.966-2.964V3.897A2.961 2.961 0 0 1 78.988.938z"></path><path fill="white" d="M89.632 5.967v-.772a.978.978 0 0 0-.978-.977h-2.28a.978.978 0 0 0-.978.977v.793c0 .088.082.15.171.13a7.127 7.127 0 0 1 1.984-.28c.65 0 1.295.088 1.917.259.082.02.164-.04.164-.13m-6.248 1.01l-.39-.389a.977.977 0 0 0-1.382 0l-.465.465a.973.973 0 0 0 0 1.38l.383.383c.062.061.15.047.205-.014.226-.307.472-.601.746-.874.281-.28.568-.526.883-.751.068-.042.075-.137.02-.2m4.16 2.453v3.341c0 .096.104.165.192.117l2.97-1.537c.068-.034.089-.117.055-.184a3.695 3.695 0 0 0-3.08-1.866c-.068 0-.136.054-.136.13m0 8.048a4.489 4.489 0 0 1-4.49-4.482 4.488 4.488 0 0 1 4.49-4.482 4.488 4.488 0 0 1 4.489 4.482 4.484 4.484 0 0 1-4.49 4.482m0-10.85a6.363 6.363 0 1 0 0 12.729 6.37 6.37 0 0 0 6.372-6.368 6.358 6.358 0 0 0-6.371-6.36"></path></g></svg></a></div></div></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/search" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><div class="container margin-vert--lg"><h1>Search the documentation</h1><div class="row"><div class="col col--12"><input type="search" name="q" class="searchQueryInput_CFBF" aria-label="Search" autocomplete="off" autofocus=""></div></div><section></section></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/security.html b/security.html
index 2d6d33837..2a3632e89 100644
--- a/security.html
+++ b/security.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Security | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Security | K3s"><meta data-rh="true" name="description" content="This section describes the methodology and means of securing a K3s cluster. It&#x27;s broken into 2 sections. These guides assume k3s is running with embedded etcd."><meta data-rh="true" property="og:description" content="This section describes the methodology and means of securing a K3s cluster. It&#x27;s broken into 2 sections. These guides assume k3s is running with embedded etcd."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Security | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Security | K3s"><meta data-rh="true" name="description" content="This section describes the methodology and means of securing a K3s cluster. It&#x27;s broken into 2 sections. These guides assume k3s is running with embedded etcd."><meta data-rh="true" property="og:description" content="This section describes the methodology and means of securing a K3s cluster. It&#x27;s broken into 2 sections. These guides assume k3s is running with embedded etcd."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Security</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Security</h1></header><p>This section describes the methodology and means of securing a K3s cluster. It&#x27;s broken into 2 sections. These guides assume k3s is running with embedded etcd.</p><p>The documents below apply to CIS Kubernetes Benchmark v1.23.</p><ul><li><a href="/security/hardening-guide">Hardening Guide</a></li><li><a href="/security/self-assessment">CIS Benchmark Self-Assessment Guide</a></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/security.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/known-issues"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Known Issues</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security/secrets-encryption"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Secrets Encryption</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Security</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Security</h1></header><p>This section describes the methodology and means of securing a K3s cluster. It&#x27;s broken into 2 sections. These guides assume k3s is running with embedded etcd.</p><p>The documents below apply to CIS Kubernetes Benchmark v1.23.</p><ul><li><a href="/security/hardening-guide">Hardening Guide</a></li><li><a href="/security/self-assessment">CIS Benchmark Self-Assessment Guide</a></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/security.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/known-issues"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Known Issues</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security/secrets-encryption"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Secrets Encryption</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/security/hardening-guide.html b/security/hardening-guide.html
index a15c980e6..437d23657 100644
--- a/security/hardening-guide.html
+++ b/security/hardening-guide.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CIS Hardening Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security/hardening-guide"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Hardening Guide | K3s"><meta data-rh="true" name="description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><meta data-rh="true" property="og:description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security/hardening-guide"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/hardening-guide" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/hardening-guide" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">CIS Hardening Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security/hardening-guide"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Hardening Guide | K3s"><meta data-rh="true" name="description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><meta data-rh="true" property="og:description" content="This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security/hardening-guide"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/hardening-guide" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/hardening-guide" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/security"><span itemprop="name">Security</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Hardening Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Hardening Guide</h1></header><p>This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).</p><p>K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:</p><ol><li>K3s will not modify the host operating system. Any host-level modifications will need to be done manually.</li><li>Certain CIS policy controls for <code>NetworkPolicies</code> and <code>PodSecurityStandards</code> (<code>PodSecurityPolicies</code> on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.</li></ol><p>The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn&#x27;t utilize these for the core components since everything is packaged into a single binary.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="host-level-requirements">Host-level Requirements<a href="#host-level-requirements" class="hash-link" aria-label="Direct link to Host-level Requirements" title="Direct link to Host-level Requirements">​</a></h2><p>There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ensure-protect-kernel-defaults-is-set">Ensure <code>protect-kernel-defaults</code> is set<a href="#ensure-protect-kernel-defaults-is-set" class="hash-link" aria-label="Direct link to ensure-protect-kernel-defaults-is-set" title="Direct link to ensure-protect-kernel-defaults-is-set">​</a></h3><p>This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet&#x27;s defaults.</p><blockquote><p><strong>Note:</strong> <code>protect-kernel-defaults</code> is exposed as a top-level flag for K3s.</p></blockquote><h4 class="anchor anchorWithStickyNavbar_LWe7" id="set-kernel-parameters">Set kernel parameters<a href="#set-kernel-parameters" class="hash-link" aria-label="Direct link to Set kernel parameters" title="Direct link to Set kernel parameters">​</a></h4><p>Create a file called <code>/etc/sysctl.d/90-kubelet.conf</code> and add the snippet below. Then run <code>sysctl -p /etc/sysctl.d/90-kubelet.conf</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.panic_on_oom</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.overcommit_memory</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic_on_oops</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.keys.root_maxbytes</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">25000000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-runtime-requirements">Kubernetes Runtime Requirements<a href="#kubernetes-runtime-requirements" class="hash-link" aria-label="Direct link to Kubernetes Runtime Requirements" title="Direct link to Kubernetes Runtime Requirements">​</a></h2><p>The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section.</p><p>By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn&#x27;t enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the <code>PodSecurity</code> and <code>NodeRestriction</code> admission controllers enabled, among others.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pod-security">Pod Security<a href="#pod-security" class="hash-link" aria-label="Direct link to Pod Security" title="Direct link to Pod Security">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>K3s v1.25 and newer support <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/" target="_blank" rel="noopener noreferrer">Pod Security Admissions (PSAs)</a> for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The policy should be written to a file named <code>psa.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. </p><p>Here is an example of a compliant PSA:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>K3s v1.24 and older support <a href="https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/" target="_blank" rel="noopener noreferrer">Pod Security Policies (PSPs)</a> for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;enable-admission-plugins=NodeRestriction,PodSecurityPolicy&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will have the effect of maintaining the <code>NodeRestriction</code> plugin as well as enabling the <code>PodSecurityPolicy</code>. </p><p>When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark.</p><p>Here is an example of a compliant PSP:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.7/8/9</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">               </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain">       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a &quot;system unrestricted policy&quot; which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.</p><p>Combining the configuration above with the <a href="#networkpolicies">Network Policy</a> described in the next section, a single file can be placed in the <code>/var/lib/rancher/k3s/server/manifests</code> directory. Here is an example of a <code>policy.yaml</code> file: </p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> NET_ADMIN</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedUnsafeSysctls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv4.ip_forward</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv6.conf.all.forwarding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">authenticated</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svc</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">acct</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">serviceaccounts</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p><strong>Note:</strong> The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the <code>kube-system</code> namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networkpolicies">NetworkPolicies<a href="#networkpolicies" class="hash-link" aria-label="Direct link to NetworkPolicies" title="Direct link to NetworkPolicies">​</a></h3><p>CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods.</p><p>Network policies should be placed the <code>/var/lib/rancher/k3s/server/manifests</code> directory, where they will automatically be deployed on startup.</p><p>Here is an example of a compliant network policy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">network</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> &lt;NAMESPACE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">&gt;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> TCP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> UDP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.21 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.20 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v121</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app.kubernetes.io/name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v120</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>Operators must manage network policies as normal for additional namespaces that are created.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="api-server-audit-configuration">API Server audit configuration<a href="#api-server-audit-configuration" class="hash-link" aria-label="Direct link to API Server audit configuration" title="Direct link to API Server audit configuration">​</a></h3><p>CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn&#x27;t create by default the log directory and audit policy, as auditing requirements are specific to each user&#x27;s policies and environment.</p><p>The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p -m </span><span class="token number" style="color:rgb(247, 140, 108)">700</span><span class="token plain"> /var/lib/rancher/k3s/server/logs</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>A starter audit policy to log request metadata is provided below. The policy should be written to a file named <code>audit.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. Detailed information about policy configuration for the API server can be found in the Kubernetes <a href="https://kubernetes.io/docs/tasks/debug-application-cluster/audit/" target="_blank" rel="noopener noreferrer">documentation</a>.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> audit.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">level</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Metadata</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Both configurations must be passed as arguments to the API Server as:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If the configurations are created after K3s is installed, they must be added to K3s&#x27; systemd service in <code>/etc/systemd/system/k3s.service</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">ExecStart</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/usr/local/bin/k3s </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s must be restarted to load the new configuration.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl restart k3s.service</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-for-kubernetes-components">Configuration for Kubernetes Components<a href="#configuration-for-kubernetes-components" class="hash-link" aria-label="Direct link to Configuration for Kubernetes Components" title="Direct link to Configuration for Kubernetes Components">​</a></h2><p>The configuration below should be placed in the <a href="/installation/configuration#configuration-file">configuration file</a>, and contains all the necessary remediations to harden the Kubernetes components.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-execution-and-arguments">Control Plane Execution and Arguments<a href="#control-plane-execution-and-arguments" class="hash-link" aria-label="Direct link to Control Plane Execution and Arguments" title="Direct link to Control Plane Execution and Arguments">​</a></h2><p>Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-apiserver </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --advertise-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allow-privileged</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --api-audiences</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">unknown </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Node,RBAC </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cert-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/temporary-certs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.31</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --enable-admission-plugins</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">NodeRestriction,PodSecurityPolicy                      </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.17</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-cafile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.32</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-certfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-keyfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.key                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-servers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://127.0.0.1:2379 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --insecure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.19</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-certificate-authority</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-certificate</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.21</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-allowed-names</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">system:auth-proxy </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/request-header-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-extra-headers-prefix</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Extra- </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-group-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Group </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-username-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-User </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token plain">                                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.20</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-issuer</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">k3s </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.28</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-cluster-ip-range</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --storage-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">etcd3 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cipher-suites</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-controller-manager </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allocate-node-cidrs</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                                       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.7</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/controller.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10252</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --root-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.4 </span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --use-service-account-credentials</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                         </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.3</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-scheduler </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10251</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                     </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubelet </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authentication-token-webhook</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Webhook                                          </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cgroup-driver</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cgroupfs </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/client-ca.crt             </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cloud-provider</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">external </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-dns</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-domain</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cluster.local </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-bin-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-conf-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/etc/cni/net.d </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">remote </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --containerd</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-hard</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-minimum-reclaim</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --fail-swap-on</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --healthz-bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --hostname-override</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">hostname01 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/kubelet.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --node-labels</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --pod-manifest-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/pod-manifests </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --protect-kernel-defaults</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --read-only-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --resolv-conf</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/systemd/resolve/resolv.conf </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --runtime-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --serialize-image-pulls</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="known-issues">Known Issues<a href="#known-issues" class="hash-link" aria-label="Direct link to Known Issues" title="Direct link to Known Issues">​</a></h2><p>The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1215">Control 1.2.15<a href="#control-1215" class="hash-link" aria-label="Direct link to Control 1.2.15" title="Direct link to Control 1.2.15">​</a></h3><p>Ensure that the admission control plugin <code>NamespaceLifecycle</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1216">Control 1.2.16<a href="#control-1216" class="hash-link" aria-label="Direct link to Control 1.2.16" title="Direct link to Control 1.2.16">​</a></h3><p>Ensure that the admission control plugin <code>PodSecurityPolicy</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1222">Control 1.2.22<a href="#control-1222" class="hash-link" aria-label="Direct link to Control 1.2.22" title="Direct link to Control 1.2.22">​</a></h3><p>Ensure that the <code>--audit-log-path</code> argument is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1223">Control 1.2.23<a href="#control-1223" class="hash-link" aria-label="Direct link to Control 1.2.23" title="Direct link to Control 1.2.23">​</a></h3><p>Ensure that the <code>--audit-log-maxage</code> argument is set to 30 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1224">Control 1.2.24<a href="#control-1224" class="hash-link" aria-label="Direct link to Control 1.2.24" title="Direct link to Control 1.2.24">​</a></h3><p>Ensure that the <code>--audit-log-maxbackup</code> argument is set to 10 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1225">Control 1.2.25<a href="#control-1225" class="hash-link" aria-label="Direct link to Control 1.2.25" title="Direct link to Control 1.2.25">​</a></h3><p>Ensure that the <code>--audit-log-maxsize</code> argument is set to 100 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1226">Control 1.2.26<a href="#control-1226" class="hash-link" aria-label="Direct link to Control 1.2.26" title="Direct link to Control 1.2.26">​</a></h3><p>Ensure that the <code>--request-timeout</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user&#x27;s connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1227">Control 1.2.27<a href="#control-1227" class="hash-link" aria-label="Direct link to Control 1.2.27" title="Direct link to Control 1.2.27">​</a></h3><p>Ensure that the <code>--service-account-lookup</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1233">Control 1.2.33<a href="#control-1233" class="hash-link" aria-label="Direct link to Control 1.2.33" title="Direct link to Control 1.2.33">​</a></h3><p>Ensure that the <code>--encryption-provider-config</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.<p>Detailed steps on how to configure secrets encryption in K3s are available in <a href="/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1234">Control 1.2.34<a href="#control-1234" class="hash-link" aria-label="Direct link to Control 1.2.34" title="Direct link to Control 1.2.34">​</a></h3><p>Ensure that encryption providers are appropriately configured.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.<p>This can be remediated by passing a valid configuration to <code>k3s</code> as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in <a href="/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-131">Control 1.3.1<a href="#control-131" class="hash-link" aria-label="Direct link to Control 1.3.1" title="Direct link to Control 1.3.1">​</a></h3><p>Ensure that the <code>--terminated-pod-gc-threshold</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-321">Control 3.2.1<a href="#control-321" class="hash-link" aria-label="Direct link to Control 3.2.1" title="Direct link to Control 3.2.1">​</a></h3><p>Ensure that a minimal audit policy is created.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Logging is an important detective control for all systems, to detect potential unauthorized access.<p>This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-427">Control 4.2.7<a href="#control-427" class="hash-link" aria-label="Direct link to Control 4.2.7" title="Direct link to Control 4.2.7">​</a></h3><p>Ensure that the <code>--make-iptables-util-chains</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-515">Control 5.1.5<a href="#control-515" class="hash-link" aria-label="Direct link to Control 5.1.5" title="Direct link to Control 5.1.5">​</a></h3><p>Ensure that default service accounts are not actively used</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.<p>Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account.</p><p>The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments.</p><p>This can be remediated by updating the <code>automountServiceAccountToken</code> field to <code>false</code> for the <code>default</code> service account in each namespace.</p><p>For <code>default</code> service accounts in the built-in namespaces (<code>kube-system</code>, <code>kube-public</code>, <code>kube-node-lease</code>, and <code>default</code>), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.</p></div></div></details><h2 class="anchor anchorWithStickyNavbar_LWe7" id="conclusion">Conclusion<a href="#conclusion" class="hash-link" aria-label="Direct link to Conclusion" title="Direct link to Conclusion">​</a></h2><p>If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the <a href="/security/self-assessment">CIS Benchmark Self-Assessment Guide</a> to understand the expectations of each of the benchmark&#x27;s checks and how you can do the same on your cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/security/secrets-encryption"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Secrets Encryption</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security/self-assessment"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">CIS Self Assessment Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#host-level-requirements" class="table-of-contents__link toc-highlight">Host-level Requirements</a><ul><li><a href="#ensure-protect-kernel-defaults-is-set" class="table-of-contents__link toc-highlight">Ensure <code>protect-kernel-defaults</code> is set</a></li></ul></li><li><a href="#kubernetes-runtime-requirements" class="table-of-contents__link toc-highlight">Kubernetes Runtime Requirements</a><ul><li><a href="#pod-security" class="table-of-contents__link toc-highlight">Pod Security</a></li><li><a href="#networkpolicies" class="table-of-contents__link toc-highlight">NetworkPolicies</a></li><li><a href="#api-server-audit-configuration" class="table-of-contents__link toc-highlight">API Server audit configuration</a></li></ul></li><li><a href="#configuration-for-kubernetes-components" class="table-of-contents__link toc-highlight">Configuration for Kubernetes Components</a></li><li><a href="#control-plane-execution-and-arguments" class="table-of-contents__link toc-highlight">Control Plane Execution and Arguments</a></li><li><a href="#known-issues" class="table-of-contents__link toc-highlight">Known Issues</a><ul><li><a href="#control-1215" class="table-of-contents__link toc-highlight">Control 1.2.15</a></li><li><a href="#control-1216" class="table-of-contents__link toc-highlight">Control 1.2.16</a></li><li><a href="#control-1222" class="table-of-contents__link toc-highlight">Control 1.2.22</a></li><li><a href="#control-1223" class="table-of-contents__link toc-highlight">Control 1.2.23</a></li><li><a href="#control-1224" class="table-of-contents__link toc-highlight">Control 1.2.24</a></li><li><a href="#control-1225" class="table-of-contents__link toc-highlight">Control 1.2.25</a></li><li><a href="#control-1226" class="table-of-contents__link toc-highlight">Control 1.2.26</a></li><li><a href="#control-1227" class="table-of-contents__link toc-highlight">Control 1.2.27</a></li><li><a href="#control-1233" class="table-of-contents__link toc-highlight">Control 1.2.33</a></li><li><a href="#control-1234" class="table-of-contents__link toc-highlight">Control 1.2.34</a></li><li><a href="#control-131" class="table-of-contents__link toc-highlight">Control 1.3.1</a></li><li><a href="#control-321" class="table-of-contents__link toc-highlight">Control 3.2.1</a></li><li><a href="#control-427" class="table-of-contents__link toc-highlight">Control 4.2.7</a></li><li><a href="#control-515" class="table-of-contents__link toc-highlight">Control 5.1.5</a></li></ul></li><li><a href="#conclusion" class="table-of-contents__link toc-highlight">Conclusion</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/security"><span itemprop="name">Security</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Hardening Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Hardening Guide</h1></header><p>This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).</p><p>K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:</p><ol><li>K3s will not modify the host operating system. Any host-level modifications will need to be done manually.</li><li>Certain CIS policy controls for <code>NetworkPolicies</code> and <code>PodSecurityStandards</code> (<code>PodSecurityPolicies</code> on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.</li></ol><p>The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn&#x27;t utilize these for the core components since everything is packaged into a single binary.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="host-level-requirements">Host-level Requirements<a href="#host-level-requirements" class="hash-link" aria-label="Direct link to Host-level Requirements" title="Direct link to Host-level Requirements">​</a></h2><p>There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ensure-protect-kernel-defaults-is-set">Ensure <code>protect-kernel-defaults</code> is set<a href="#ensure-protect-kernel-defaults-is-set" class="hash-link" aria-label="Direct link to ensure-protect-kernel-defaults-is-set" title="Direct link to ensure-protect-kernel-defaults-is-set">​</a></h3><p>This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet&#x27;s defaults.</p><blockquote><p><strong>Note:</strong> <code>protect-kernel-defaults</code> is exposed as a top-level flag for K3s.</p></blockquote><h4 class="anchor anchorWithStickyNavbar_LWe7" id="set-kernel-parameters">Set kernel parameters<a href="#set-kernel-parameters" class="hash-link" aria-label="Direct link to Set kernel parameters" title="Direct link to Set kernel parameters">​</a></h4><p>Create a file called <code>/etc/sysctl.d/90-kubelet.conf</code> and add the snippet below. Then run <code>sysctl -p /etc/sysctl.d/90-kubelet.conf</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.panic_on_oom</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.overcommit_memory</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic_on_oops</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.keys.root_maxbytes</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">25000000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-runtime-requirements">Kubernetes Runtime Requirements<a href="#kubernetes-runtime-requirements" class="hash-link" aria-label="Direct link to Kubernetes Runtime Requirements" title="Direct link to Kubernetes Runtime Requirements">​</a></h2><p>The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section.</p><p>By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn&#x27;t enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the <code>PodSecurity</code> and <code>NodeRestriction</code> admission controllers enabled, among others.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pod-security">Pod Security<a href="#pod-security" class="hash-link" aria-label="Direct link to Pod Security" title="Direct link to Pod Security">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>K3s v1.25 and newer support <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/" target="_blank" rel="noopener noreferrer">Pod Security Admissions (PSAs)</a> for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The policy should be written to a file named <code>psa.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. </p><p>Here is an example of a compliant PSA:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>K3s v1.24 and older support <a href="https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/" target="_blank" rel="noopener noreferrer">Pod Security Policies (PSPs)</a> for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;enable-admission-plugins=NodeRestriction,PodSecurityPolicy&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will have the effect of maintaining the <code>NodeRestriction</code> plugin as well as enabling the <code>PodSecurityPolicy</code>. </p><p>When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark.</p><p>Here is an example of a compliant PSP:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.7/8/9</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">               </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain">       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a &quot;system unrestricted policy&quot; which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.</p><p>Combining the configuration above with the <a href="#networkpolicies">Network Policy</a> described in the next section, a single file can be placed in the <code>/var/lib/rancher/k3s/server/manifests</code> directory. Here is an example of a <code>policy.yaml</code> file: </p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> NET_ADMIN</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedUnsafeSysctls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv4.ip_forward</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv6.conf.all.forwarding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">authenticated</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svc</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">acct</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">serviceaccounts</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p><strong>Note:</strong> The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the <code>kube-system</code> namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networkpolicies">NetworkPolicies<a href="#networkpolicies" class="hash-link" aria-label="Direct link to NetworkPolicies" title="Direct link to NetworkPolicies">​</a></h3><p>CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods.</p><p>Network policies should be placed the <code>/var/lib/rancher/k3s/server/manifests</code> directory, where they will automatically be deployed on startup.</p><p>Here is an example of a compliant network policy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">network</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> &lt;NAMESPACE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">&gt;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> TCP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> UDP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.21 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.20 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v121</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app.kubernetes.io/name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v120</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>info</div><div class="admonitionContent_S0QG"><p>Operators must manage network policies as normal for additional namespaces that are created.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="api-server-audit-configuration">API Server audit configuration<a href="#api-server-audit-configuration" class="hash-link" aria-label="Direct link to API Server audit configuration" title="Direct link to API Server audit configuration">​</a></h3><p>CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn&#x27;t create by default the log directory and audit policy, as auditing requirements are specific to each user&#x27;s policies and environment.</p><p>The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p -m </span><span class="token number" style="color:rgb(247, 140, 108)">700</span><span class="token plain"> /var/lib/rancher/k3s/server/logs</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>A starter audit policy to log request metadata is provided below. The policy should be written to a file named <code>audit.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. Detailed information about policy configuration for the API server can be found in the Kubernetes <a href="https://kubernetes.io/docs/tasks/debug-application-cluster/audit/" target="_blank" rel="noopener noreferrer">documentation</a>.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> audit.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">level</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Metadata</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Both configurations must be passed as arguments to the API Server as:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If the configurations are created after K3s is installed, they must be added to K3s&#x27; systemd service in <code>/etc/systemd/system/k3s.service</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">ExecStart</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/usr/local/bin/k3s </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s must be restarted to load the new configuration.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl restart k3s.service</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-for-kubernetes-components">Configuration for Kubernetes Components<a href="#configuration-for-kubernetes-components" class="hash-link" aria-label="Direct link to Configuration for Kubernetes Components" title="Direct link to Configuration for Kubernetes Components">​</a></h2><p>The configuration below should be placed in the <a href="/installation/configuration#configuration-file">configuration file</a>, and contains all the necessary remediations to harden the Kubernetes components.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-execution-and-arguments">Control Plane Execution and Arguments<a href="#control-plane-execution-and-arguments" class="hash-link" aria-label="Direct link to Control Plane Execution and Arguments" title="Direct link to Control Plane Execution and Arguments">​</a></h2><p>Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-apiserver </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --advertise-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allow-privileged</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --api-audiences</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">unknown </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Node,RBAC </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cert-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/temporary-certs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.31</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --enable-admission-plugins</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">NodeRestriction,PodSecurityPolicy                      </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.17</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-cafile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.32</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-certfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-keyfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.key                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-servers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://127.0.0.1:2379 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --insecure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.19</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-certificate-authority</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-certificate</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.21</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-allowed-names</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">system:auth-proxy </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/request-header-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-extra-headers-prefix</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Extra- </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-group-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Group </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-username-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-User </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token plain">                                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.20</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-issuer</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">k3s </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.28</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-cluster-ip-range</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --storage-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">etcd3 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cipher-suites</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-controller-manager </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allocate-node-cidrs</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                                       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.7</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/controller.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10252</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --root-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.4 </span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --use-service-account-credentials</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                         </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.3</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-scheduler </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10251</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                     </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubelet </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authentication-token-webhook</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Webhook                                          </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cgroup-driver</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cgroupfs </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/client-ca.crt             </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cloud-provider</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">external </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-dns</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-domain</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cluster.local </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-bin-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-conf-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/etc/cni/net.d </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">remote </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --containerd</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-hard</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-minimum-reclaim</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --fail-swap-on</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --healthz-bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --hostname-override</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">hostname01 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/kubelet.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --node-labels</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --pod-manifest-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/pod-manifests </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --protect-kernel-defaults</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --read-only-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --resolv-conf</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/systemd/resolve/resolv.conf </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --runtime-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --serialize-image-pulls</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="known-issues">Known Issues<a href="#known-issues" class="hash-link" aria-label="Direct link to Known Issues" title="Direct link to Known Issues">​</a></h2><p>The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1215">Control 1.2.15<a href="#control-1215" class="hash-link" aria-label="Direct link to Control 1.2.15" title="Direct link to Control 1.2.15">​</a></h3><p>Ensure that the admission control plugin <code>NamespaceLifecycle</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1216">Control 1.2.16<a href="#control-1216" class="hash-link" aria-label="Direct link to Control 1.2.16" title="Direct link to Control 1.2.16">​</a></h3><p>Ensure that the admission control plugin <code>PodSecurityPolicy</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1222">Control 1.2.22<a href="#control-1222" class="hash-link" aria-label="Direct link to Control 1.2.22" title="Direct link to Control 1.2.22">​</a></h3><p>Ensure that the <code>--audit-log-path</code> argument is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1223">Control 1.2.23<a href="#control-1223" class="hash-link" aria-label="Direct link to Control 1.2.23" title="Direct link to Control 1.2.23">​</a></h3><p>Ensure that the <code>--audit-log-maxage</code> argument is set to 30 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1224">Control 1.2.24<a href="#control-1224" class="hash-link" aria-label="Direct link to Control 1.2.24" title="Direct link to Control 1.2.24">​</a></h3><p>Ensure that the <code>--audit-log-maxbackup</code> argument is set to 10 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1225">Control 1.2.25<a href="#control-1225" class="hash-link" aria-label="Direct link to Control 1.2.25" title="Direct link to Control 1.2.25">​</a></h3><p>Ensure that the <code>--audit-log-maxsize</code> argument is set to 100 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1226">Control 1.2.26<a href="#control-1226" class="hash-link" aria-label="Direct link to Control 1.2.26" title="Direct link to Control 1.2.26">​</a></h3><p>Ensure that the <code>--request-timeout</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user&#x27;s connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1227">Control 1.2.27<a href="#control-1227" class="hash-link" aria-label="Direct link to Control 1.2.27" title="Direct link to Control 1.2.27">​</a></h3><p>Ensure that the <code>--service-account-lookup</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1233">Control 1.2.33<a href="#control-1233" class="hash-link" aria-label="Direct link to Control 1.2.33" title="Direct link to Control 1.2.33">​</a></h3><p>Ensure that the <code>--encryption-provider-config</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.<p>Detailed steps on how to configure secrets encryption in K3s are available in <a href="/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1234">Control 1.2.34<a href="#control-1234" class="hash-link" aria-label="Direct link to Control 1.2.34" title="Direct link to Control 1.2.34">​</a></h3><p>Ensure that encryption providers are appropriately configured.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.<p>This can be remediated by passing a valid configuration to <code>k3s</code> as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in <a href="/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-131">Control 1.3.1<a href="#control-131" class="hash-link" aria-label="Direct link to Control 1.3.1" title="Direct link to Control 1.3.1">​</a></h3><p>Ensure that the <code>--terminated-pod-gc-threshold</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-321">Control 3.2.1<a href="#control-321" class="hash-link" aria-label="Direct link to Control 3.2.1" title="Direct link to Control 3.2.1">​</a></h3><p>Ensure that a minimal audit policy is created.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Logging is an important detective control for all systems, to detect potential unauthorized access.<p>This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-427">Control 4.2.7<a href="#control-427" class="hash-link" aria-label="Direct link to Control 4.2.7" title="Direct link to Control 4.2.7">​</a></h3><p>Ensure that the <code>--make-iptables-util-chains</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-515">Control 5.1.5<a href="#control-515" class="hash-link" aria-label="Direct link to Control 5.1.5" title="Direct link to Control 5.1.5">​</a></h3><p>Ensure that default service accounts are not actively used</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.<p>Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account.</p><p>The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments.</p><p>This can be remediated by updating the <code>automountServiceAccountToken</code> field to <code>false</code> for the <code>default</code> service account in each namespace.</p><p>For <code>default</code> service accounts in the built-in namespaces (<code>kube-system</code>, <code>kube-public</code>, <code>kube-node-lease</code>, and <code>default</code>), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.</p></div></div></details><h2 class="anchor anchorWithStickyNavbar_LWe7" id="conclusion">Conclusion<a href="#conclusion" class="hash-link" aria-label="Direct link to Conclusion" title="Direct link to Conclusion">​</a></h2><p>If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the <a href="/security/self-assessment">CIS Benchmark Self-Assessment Guide</a> to understand the expectations of each of the benchmark&#x27;s checks and how you can do the same on your cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/security/secrets-encryption"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Secrets Encryption</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security/self-assessment"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">CIS Self Assessment Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#host-level-requirements" class="table-of-contents__link toc-highlight">Host-level Requirements</a><ul><li><a href="#ensure-protect-kernel-defaults-is-set" class="table-of-contents__link toc-highlight">Ensure <code>protect-kernel-defaults</code> is set</a></li></ul></li><li><a href="#kubernetes-runtime-requirements" class="table-of-contents__link toc-highlight">Kubernetes Runtime Requirements</a><ul><li><a href="#pod-security" class="table-of-contents__link toc-highlight">Pod Security</a></li><li><a href="#networkpolicies" class="table-of-contents__link toc-highlight">NetworkPolicies</a></li><li><a href="#api-server-audit-configuration" class="table-of-contents__link toc-highlight">API Server audit configuration</a></li></ul></li><li><a href="#configuration-for-kubernetes-components" class="table-of-contents__link toc-highlight">Configuration for Kubernetes Components</a></li><li><a href="#control-plane-execution-and-arguments" class="table-of-contents__link toc-highlight">Control Plane Execution and Arguments</a></li><li><a href="#known-issues" class="table-of-contents__link toc-highlight">Known Issues</a><ul><li><a href="#control-1215" class="table-of-contents__link toc-highlight">Control 1.2.15</a></li><li><a href="#control-1216" class="table-of-contents__link toc-highlight">Control 1.2.16</a></li><li><a href="#control-1222" class="table-of-contents__link toc-highlight">Control 1.2.22</a></li><li><a href="#control-1223" class="table-of-contents__link toc-highlight">Control 1.2.23</a></li><li><a href="#control-1224" class="table-of-contents__link toc-highlight">Control 1.2.24</a></li><li><a href="#control-1225" class="table-of-contents__link toc-highlight">Control 1.2.25</a></li><li><a href="#control-1226" class="table-of-contents__link toc-highlight">Control 1.2.26</a></li><li><a href="#control-1227" class="table-of-contents__link toc-highlight">Control 1.2.27</a></li><li><a href="#control-1233" class="table-of-contents__link toc-highlight">Control 1.2.33</a></li><li><a href="#control-1234" class="table-of-contents__link toc-highlight">Control 1.2.34</a></li><li><a href="#control-131" class="table-of-contents__link toc-highlight">Control 1.3.1</a></li><li><a href="#control-321" class="table-of-contents__link toc-highlight">Control 3.2.1</a></li><li><a href="#control-427" class="table-of-contents__link toc-highlight">Control 4.2.7</a></li><li><a href="#control-515" class="table-of-contents__link toc-highlight">Control 5.1.5</a></li></ul></li><li><a href="#conclusion" class="table-of-contents__link toc-highlight">Conclusion</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/security/secrets-encryption.html b/security/secrets-encryption.html
index 800894e8b..8dcd26a0f 100644
--- a/security/secrets-encryption.html
+++ b/security/secrets-encryption.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Secrets Encryption | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security/secrets-encryption"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Secrets Encryption | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security/secrets-encryption"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/secrets-encryption" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/secrets-encryption" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Secrets Encryption | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security/secrets-encryption"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Secrets Encryption | K3s"><meta data-rh="true" name="description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><meta data-rh="true" property="og:description" content="K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag --secrets-encryption will do the following automatically:"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security/secrets-encryption"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/secrets-encryption" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/secrets-encryption" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/security"><span itemprop="name">Security</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Secrets Encryption</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>Secrets Encryption Config</h1><p>K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag <code>--secrets-encryption</code> will do the following automatically:</p><ul><li>Generate an AES-CBC key</li><li>Generate an encryption config file with the generated key</li><li>Pass the config to the KubeAPI as encryption-provider-config</li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>Secrets-encryption cannot be enabled on an existing server without restarting it.<br>
-<!-- -->Use <code>curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption</code> if installing from script, or other methods described in <a href="/installation/configuration#configuration-with-install-script">Configuration Options</a>.</p></div></div><p>Example of the encryption config file:</p><div class="language-json codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-json codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;kind&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;EncryptionConfiguration&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;apiVersion&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;apiserver.config.k8s.io/v1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secrets&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;providers&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;aescbc&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token property">&quot;keys&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;name&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;aescbckey&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;secret&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;xxxxxxxxxxxxxxxxxxx&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;identity&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="Direct link to Secrets Encryption Tool" title="Direct link to Secrets Encryption Tool">​</a></h2><p>K3s contains a utility tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><p>For more information, see the <a href="/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> command documentation</a>.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/security"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Security</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security/hardening-guide"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/security"><span itemprop="name">Security</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Secrets Encryption</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><h1>Secrets Encryption Config</h1><p>K3s supports enabling secrets encryption at rest. When first starting the server, passing the flag <code>--secrets-encryption</code> will do the following automatically:</p><ul><li>Generate an AES-CBC key</li><li>Generate an encryption config file with the generated key</li><li>Pass the config to the KubeAPI as encryption-provider-config</li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>Secrets-encryption cannot be enabled on an existing server without restarting it.<br>
+<!-- -->Use <code>curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption</code> if installing from script, or other methods described in <a href="/installation/configuration#configuration-with-install-script">Configuration Options</a>.</p></div></div><p>Example of the encryption config file:</p><div class="language-json codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-json codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;kind&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;EncryptionConfiguration&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;apiVersion&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;apiserver.config.k8s.io/v1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secrets&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;providers&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;aescbc&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token property">&quot;keys&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;name&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;aescbckey&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;secret&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;xxxxxxxxxxxxxxxxxxx&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;identity&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secrets-encryption-tool">Secrets Encryption Tool<a href="#secrets-encryption-tool" class="hash-link" aria-label="Direct link to Secrets Encryption Tool" title="Direct link to Secrets Encryption Tool">​</a></h2><p>K3s contains a utility tool <code>secrets-encrypt</code>, which enables automatic control over the following:</p><ul><li>Disabling/Enabling secrets encryption</li><li>Adding new encryption keys</li><li>Rotating and deleting encryption keys</li><li>Reencrypting secrets</li></ul><p>For more information, see the <a href="/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> command documentation</a>.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/security"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Security</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/security/hardening-guide"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secrets-encryption-tool" class="table-of-contents__link toc-highlight">Secrets Encryption Tool</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/security/self-assessment.html b/security/self-assessment.html
index 02a86511d..58785d7e6 100644
--- a/security/self-assessment.html
+++ b/security/self-assessment.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CIS Self Assessment Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security/self-assessment"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Self Assessment Guide | K3s"><meta data-rh="true" name="description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><meta data-rh="true" property="og:description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security/self-assessment"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/self-assessment" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/self-assessment" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">CIS Self Assessment Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/security/self-assessment"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Self Assessment Guide | K3s"><meta data-rh="true" name="description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><meta data-rh="true" property="og:description" content="CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/security/self-assessment"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/self-assessment" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/self-assessment" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/security"><span itemprop="name">Security</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Self Assessment Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Self Assessment Guide</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24<a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="hash-link" aria-label="Direct link to CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24" title="Direct link to CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24">​</a></h3><h4 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="Direct link to Overview" title="Direct link to Overview">​</a></h4><p>This document is a companion to the <a href="/security/hardening-guide">K3s security hardening guide</a>. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers.</p><p>This guide is specific to the <strong>v1.22</strong>, <strong>v1.23</strong> and <strong>v1.24</strong> release line of K3s and the <strong>v1.23</strong> release of the CIS Kubernetes Benchmark.</p><p>For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in <a href="https://www.cisecurity.org/benchmark/kubernetes/" target="_blank" rel="noopener noreferrer">Center for Internet Security (CIS)</a>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="testing-controls-methodology">Testing controls methodology<a href="#testing-controls-methodology" class="hash-link" aria-label="Direct link to Testing controls methodology" title="Direct link to Testing controls methodology">​</a></h4><p>Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide.</p><p>Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing.</p><p>These are the possible results for each control:</p><ul><li><strong>Pass</strong> - The K3s cluster under test passed the audit outlined in the benchmark.</li><li><strong>Not Applicable</strong> - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so.</li><li><strong>Warn</strong> - The control is manual in the CIS benchmark and it depends on the cluster&#x27;s use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.</li></ul><p>This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the &quot;audit&quot; commands to fit your scenario.</p><blockquote><p>NOTE: Only <code>automated</code> tests (previously called <code>scored</code>) are covered in this guide.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controls">Controls<a href="#controls" class="hash-link" aria-label="Direct link to Controls" title="Direct link to Controls">​</a></h3><hr><h2 class="anchor anchorWithStickyNavbar_LWe7" id="11-control-plane-node-configuration-files">1.1 Control Plane Node Configuration Files<a href="#11-control-plane-node-configuration-files" class="hash-link" aria-label="Direct link to 1.1 Control Plane Node Configuration Files" title="Direct link to 1.1 Control Plane Node Configuration Files">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)<a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="hash-link" aria-label="Direct link to 1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)" title="Direct link to 1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/secrets-encryption">Secrets Encryption</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/security"><span itemprop="name">Security</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Self Assessment Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Self Assessment Guide</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24<a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="hash-link" aria-label="Direct link to CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24" title="Direct link to CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24">​</a></h3><h4 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="Direct link to Overview" title="Direct link to Overview">​</a></h4><p>This document is a companion to the <a href="/security/hardening-guide">K3s security hardening guide</a>. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers.</p><p>This guide is specific to the <strong>v1.22</strong>, <strong>v1.23</strong> and <strong>v1.24</strong> release line of K3s and the <strong>v1.23</strong> release of the CIS Kubernetes Benchmark.</p><p>For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in <a href="https://www.cisecurity.org/benchmark/kubernetes/" target="_blank" rel="noopener noreferrer">Center for Internet Security (CIS)</a>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="testing-controls-methodology">Testing controls methodology<a href="#testing-controls-methodology" class="hash-link" aria-label="Direct link to Testing controls methodology" title="Direct link to Testing controls methodology">​</a></h4><p>Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide.</p><p>Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing.</p><p>These are the possible results for each control:</p><ul><li><strong>Pass</strong> - The K3s cluster under test passed the audit outlined in the benchmark.</li><li><strong>Not Applicable</strong> - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so.</li><li><strong>Warn</strong> - The control is manual in the CIS benchmark and it depends on the cluster&#x27;s use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.</li></ul><p>This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the &quot;audit&quot; commands to fit your scenario.</p><blockquote><p>NOTE: Only <code>automated</code> tests (previously called <code>scored</code>) are covered in this guide.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controls">Controls<a href="#controls" class="hash-link" aria-label="Direct link to Controls" title="Direct link to Controls">​</a></h3><hr><h2 class="anchor anchorWithStickyNavbar_LWe7" id="11-control-plane-node-configuration-files">1.1 Control Plane Node Configuration Files<a href="#11-control-plane-node-configuration-files" class="hash-link" aria-label="Direct link to 1.1 Control Plane Node Configuration Files" title="Direct link to 1.1 Control Plane Node Configuration Files">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)<a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="hash-link" aria-label="Direct link to 1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)" title="Direct link to 1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
 Run the below command (based on the file location on your system) on the
 control plane node.
 For example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)<a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="hash-link" aria-label="Direct link to 1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)" title="Direct link to 1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
@@ -451,10 +451,10 @@
 suggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker
 Containers.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="574-the-default-namespace-should-not-be-used-manual">5.7.4 The default namespace should not be used (Manual)<a href="#574-the-default-namespace-should-not-be-used-manual" class="hash-link" aria-label="Direct link to 5.7.4 The default namespace should not be used (Manual)" title="Direct link to 5.7.4 The default namespace should not be used (Manual)">​</a></h3><p><strong>Result:</strong> warn</p><p><strong>Remediation:</strong>
 Ensure that namespaces are created to allow for appropriate segregation of Kubernetes
-resources and that all new resources are created in a specific namespace.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/security/hardening-guide"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="table-of-contents__link toc-highlight">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24</a></li><li><a href="#controls" class="table-of-contents__link toc-highlight">Controls</a></li><li><a href="#11-control-plane-node-configuration-files" class="table-of-contents__link toc-highlight">1.1 Control Plane Node Configuration Files</a><ul><li><a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)</a></li><li><a href="#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)</a></li><li><a href="#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated" class="table-of-contents__link toc-highlight">1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)</a></li><li><a href="#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)</a></li><li><a href="#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)</a></li><li><a href="#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual" class="table-of-contents__link toc-highlight">1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)</a></li></ul></li><li><a href="#12-api-server" class="table-of-contents__link toc-highlight">1.2 API Server</a><ul><li><a href="#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual" class="table-of-contents__link toc-highlight">1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)</a></li><li><a href="#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)</a></li><li><a href="#123-ensure-that-the---denyserviceexternalips-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)</a></li><li><a href="#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)</a></li><li><a href="#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)</a></li><li><a href="#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)</a></li><li><a href="#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#128-ensure-that-the---authorization-mode-argument-includes-node-automated" class="table-of-contents__link toc-highlight">1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)</a></li><li><a href="#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated" class="table-of-contents__link toc-highlight">1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)</a></li><li><a href="#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual" class="table-of-contents__link toc-highlight">1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)</a></li><li><a href="#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)</a></li><li><a href="#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual" class="table-of-contents__link toc-highlight">1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)</a></li><li><a href="#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual" class="table-of-contents__link toc-highlight">1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)</a></li><li><a href="#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated" class="table-of-contents__link toc-highlight">1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)</a></li><li><a href="#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated" class="table-of-contents__link toc-highlight">1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)</a></li><li><a href="#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated" class="table-of-contents__link toc-highlight">1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)</a></li><li><a href="#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated" class="table-of-contents__link toc-highlight">1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)</a></li><li><a href="#1218-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.2.18 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#1219-ensure-that-the---audit-log-path-argument-is-set-automated" class="table-of-contents__link toc-highlight">1.2.19 Ensure that the --audit-log-path argument is set (Automated)</a></li><li><a href="#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)</a></li><li><a href="#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)</a></li><li><a href="#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)</a></li><li><a href="#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)</a></li><li><a href="#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)</a></li><li><a href="#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)</a></li><li><a href="#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)</a></li><li><a href="#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)</a></li><li><a href="#1231-ensure-that-encryption-providers-are-appropriately-configured-manual" class="table-of-contents__link toc-highlight">1.2.31 Ensure that encryption providers are appropriately configured (Manual)</a></li><li><a href="#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#13-controller-manager" class="table-of-contents__link toc-highlight">1.3 Controller Manager</a><ul><li><a href="#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)</a></li><li><a href="#132-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.3.2 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)</a></li><li><a href="#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)</a></li><li><a href="#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)</a></li><li><a href="#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#14-scheduler" class="table-of-contents__link toc-highlight">1.4 Scheduler</a><ul><li><a href="#141-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.4.1 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#2-etcd-node-configuration" class="table-of-contents__link toc-highlight">2 Etcd Node Configuration</a><ul><li><a href="#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)</a></li><li><a href="#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.2 Ensure that the --client-cert-auth argument is set to true (Automated)</a></li><li><a href="#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.3 Ensure that the --auto-tls argument is not set to true (Automated)</a></li><li><a href="#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)</a></li><li><a href="#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)</a></li><li><a href="#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual" class="table-of-contents__link toc-highlight">2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)</a></li></ul></li><li><a href="#31-authentication-and-authorization" class="table-of-contents__link toc-highlight">3.1 Authentication and Authorization</a><ul><li><a href="#311-client-certificate-authentication-should-not-be-used-for-users-manual" class="table-of-contents__link toc-highlight">3.1.1 Client certificate authentication should not be used for users (Manual)</a></li></ul></li><li><a href="#32-logging" class="table-of-contents__link toc-highlight">3.2 Logging</a><ul><li><a href="#321-ensure-that-a-minimal-audit-policy-is-created-manual" class="table-of-contents__link toc-highlight">3.2.1 Ensure that a minimal audit policy is created (Manual)</a></li><li><a href="#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual" class="table-of-contents__link toc-highlight">3.2.2 Ensure that the audit policy covers key security concerns (Manual)</a></li></ul></li><li><a href="#41-worker-node-configuration-files" class="table-of-contents__link toc-highlight">4.1 Worker Node Configuration Files</a><ul><li><a href="#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)</a></li><li><a href="#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)</a></li><li><a href="#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)</a></li><li><a href="#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)</a></li><li><a href="#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)</a></li><li><a href="#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)</a></li></ul></li><li><a href="#42-kubelet" class="table-of-contents__link toc-highlight">4.2 Kubelet</a><ul><li><a href="#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)</a></li><li><a href="#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)</a></li><li><a href="#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)</a></li><li><a href="#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)</a></li><li><a href="#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)</a></li><li><a href="#428-ensure-that-the---hostname-override-argument-is-not-set-manual" class="table-of-contents__link toc-highlight">4.2.8 Ensure that the --hostname-override argument is not set (Manual)</a></li><li><a href="#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual" class="table-of-contents__link toc-highlight">4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)</a></li><li><a href="#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)</a></li><li><a href="#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)</a></li><li><a href="#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual" class="table-of-contents__link toc-highlight">4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)</a></li><li><a href="#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#51-rbac-and-service-accounts" class="table-of-contents__link toc-highlight">5.1 RBAC and Service Accounts</a><ul><li><a href="#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual" class="table-of-contents__link toc-highlight">5.1.1 Ensure that the cluster-admin role is only used where required (Manual)</a></li><li><a href="#512-minimize-access-to-secrets-manual" class="table-of-contents__link toc-highlight">5.1.2 Minimize access to secrets (Manual)</a></li><li><a href="#513-minimize-wildcard-use-in-roles-and-clusterroles-manual" class="table-of-contents__link toc-highlight">5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)</a></li><li><a href="#514-minimize-access-to-create-pods-manual" class="table-of-contents__link toc-highlight">5.1.4 Minimize access to create pods (Manual)</a></li><li><a href="#515-ensure-that-default-service-accounts-are-not-actively-used-manual" class="table-of-contents__link toc-highlight">5.1.5 Ensure that default service accounts are not actively used. (Manual)</a></li><li><a href="#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual" class="table-of-contents__link toc-highlight">5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)</a></li><li><a href="#517-avoid-use-of-systemmasters-group-manual" class="table-of-contents__link toc-highlight">5.1.7 Avoid use of system:masters group (Manual)</a></li><li><a href="#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual" class="table-of-contents__link toc-highlight">5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)</a></li></ul></li><li><a href="#52-pod-security-standards" class="table-of-contents__link toc-highlight">5.2 Pod Security Standards</a><ul><li><a href="#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual" class="table-of-contents__link toc-highlight">5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)</a></li><li><a href="#522-minimize-the-admission-of-privileged-containers-automated" class="table-of-contents__link toc-highlight">5.2.2 Minimize the admission of privileged containers (Automated)</a></li><li><a href="#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated" class="table-of-contents__link toc-highlight">5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)</a></li><li><a href="#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated" class="table-of-contents__link toc-highlight">5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)</a></li><li><a href="#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated" class="table-of-contents__link toc-highlight">5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)</a></li><li><a href="#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated" class="table-of-contents__link toc-highlight">5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)</a></li><li><a href="#527-minimize-the-admission-of-root-containers-automated" class="table-of-contents__link toc-highlight">5.2.7 Minimize the admission of root containers (Automated)</a></li><li><a href="#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated" class="table-of-contents__link toc-highlight">5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)</a></li><li><a href="#529-minimize-the-admission-of-containers-with-added-capabilities-automated" class="table-of-contents__link toc-highlight">5.2.9 Minimize the admission of containers with added capabilities (Automated)</a></li><li><a href="#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual" class="table-of-contents__link toc-highlight">5.2.10 Minimize the admission of containers with capabilities assigned (Manual)</a></li><li><a href="#5211-minimize-the-admission-of-windows-hostprocess-containers-manual" class="table-of-contents__link toc-highlight">5.2.11 Minimize the admission of Windows HostProcess containers (Manual)</a></li><li><a href="#5212-minimize-the-admission-of-hostpath-volumes-manual" class="table-of-contents__link toc-highlight">5.2.12 Minimize the admission of HostPath volumes (Manual)</a></li><li><a href="#5213-minimize-the-admission-of-containers-which-use-hostports-manual" class="table-of-contents__link toc-highlight">5.2.13 Minimize the admission of containers which use HostPorts (Manual)</a></li></ul></li><li><a href="#53-network-policies-and-cni" class="table-of-contents__link toc-highlight">5.3 Network Policies and CNI</a><ul><li><a href="#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual" class="table-of-contents__link toc-highlight">5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)</a></li><li><a href="#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual" class="table-of-contents__link toc-highlight">5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)</a></li></ul></li><li><a href="#54-secrets-management" class="table-of-contents__link toc-highlight">5.4 Secrets Management</a><ul><li><a href="#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual" class="table-of-contents__link toc-highlight">5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)</a></li><li><a href="#542-consider-external-secret-storage-manual" class="table-of-contents__link toc-highlight">5.4.2 Consider external secret storage (Manual)</a></li></ul></li><li><a href="#55-extensible-admission-control" class="table-of-contents__link toc-highlight">5.5 Extensible Admission Control</a><ul><li><a href="#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual" class="table-of-contents__link toc-highlight">5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)</a></li></ul></li><li><a href="#57-general-policies" class="table-of-contents__link toc-highlight">5.7 General Policies</a><ul><li><a href="#571-create-administrative-boundaries-between-resources-using-namespaces-manual" class="table-of-contents__link toc-highlight">5.7.1 Create administrative boundaries between resources using namespaces (Manual)</a></li><li><a href="#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual" class="table-of-contents__link toc-highlight">5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)</a></li><li><a href="#573-apply-securitycontext-to-your-pods-and-containers-manual" class="table-of-contents__link toc-highlight">5.7.3 Apply SecurityContext to your Pods and Containers (Manual)</a></li><li><a href="#574-the-default-namespace-should-not-be-used-manual" class="table-of-contents__link toc-highlight">5.7.4 The default namespace should not be used (Manual)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+resources and that all new resources are created in a specific namespace.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/security/hardening-guide"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="table-of-contents__link toc-highlight">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24</a></li><li><a href="#controls" class="table-of-contents__link toc-highlight">Controls</a></li><li><a href="#11-control-plane-node-configuration-files" class="table-of-contents__link toc-highlight">1.1 Control Plane Node Configuration Files</a><ul><li><a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)</a></li><li><a href="#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)</a></li><li><a href="#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated" class="table-of-contents__link toc-highlight">1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)</a></li><li><a href="#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)</a></li><li><a href="#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)</a></li><li><a href="#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual" class="table-of-contents__link toc-highlight">1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)</a></li></ul></li><li><a href="#12-api-server" class="table-of-contents__link toc-highlight">1.2 API Server</a><ul><li><a href="#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual" class="table-of-contents__link toc-highlight">1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)</a></li><li><a href="#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)</a></li><li><a href="#123-ensure-that-the---denyserviceexternalips-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)</a></li><li><a href="#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)</a></li><li><a href="#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)</a></li><li><a href="#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)</a></li><li><a href="#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#128-ensure-that-the---authorization-mode-argument-includes-node-automated" class="table-of-contents__link toc-highlight">1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)</a></li><li><a href="#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated" class="table-of-contents__link toc-highlight">1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)</a></li><li><a href="#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual" class="table-of-contents__link toc-highlight">1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)</a></li><li><a href="#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)</a></li><li><a href="#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual" class="table-of-contents__link toc-highlight">1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)</a></li><li><a href="#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual" class="table-of-contents__link toc-highlight">1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)</a></li><li><a href="#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated" class="table-of-contents__link toc-highlight">1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)</a></li><li><a href="#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated" class="table-of-contents__link toc-highlight">1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)</a></li><li><a href="#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated" class="table-of-contents__link toc-highlight">1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)</a></li><li><a href="#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated" class="table-of-contents__link toc-highlight">1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)</a></li><li><a href="#1218-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.2.18 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#1219-ensure-that-the---audit-log-path-argument-is-set-automated" class="table-of-contents__link toc-highlight">1.2.19 Ensure that the --audit-log-path argument is set (Automated)</a></li><li><a href="#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)</a></li><li><a href="#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)</a></li><li><a href="#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)</a></li><li><a href="#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)</a></li><li><a href="#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)</a></li><li><a href="#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)</a></li><li><a href="#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)</a></li><li><a href="#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)</a></li><li><a href="#1231-ensure-that-encryption-providers-are-appropriately-configured-manual" class="table-of-contents__link toc-highlight">1.2.31 Ensure that encryption providers are appropriately configured (Manual)</a></li><li><a href="#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#13-controller-manager" class="table-of-contents__link toc-highlight">1.3 Controller Manager</a><ul><li><a href="#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)</a></li><li><a href="#132-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.3.2 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)</a></li><li><a href="#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)</a></li><li><a href="#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)</a></li><li><a href="#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#14-scheduler" class="table-of-contents__link toc-highlight">1.4 Scheduler</a><ul><li><a href="#141-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.4.1 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#2-etcd-node-configuration" class="table-of-contents__link toc-highlight">2 Etcd Node Configuration</a><ul><li><a href="#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)</a></li><li><a href="#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.2 Ensure that the --client-cert-auth argument is set to true (Automated)</a></li><li><a href="#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.3 Ensure that the --auto-tls argument is not set to true (Automated)</a></li><li><a href="#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)</a></li><li><a href="#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)</a></li><li><a href="#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual" class="table-of-contents__link toc-highlight">2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)</a></li></ul></li><li><a href="#31-authentication-and-authorization" class="table-of-contents__link toc-highlight">3.1 Authentication and Authorization</a><ul><li><a href="#311-client-certificate-authentication-should-not-be-used-for-users-manual" class="table-of-contents__link toc-highlight">3.1.1 Client certificate authentication should not be used for users (Manual)</a></li></ul></li><li><a href="#32-logging" class="table-of-contents__link toc-highlight">3.2 Logging</a><ul><li><a href="#321-ensure-that-a-minimal-audit-policy-is-created-manual" class="table-of-contents__link toc-highlight">3.2.1 Ensure that a minimal audit policy is created (Manual)</a></li><li><a href="#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual" class="table-of-contents__link toc-highlight">3.2.2 Ensure that the audit policy covers key security concerns (Manual)</a></li></ul></li><li><a href="#41-worker-node-configuration-files" class="table-of-contents__link toc-highlight">4.1 Worker Node Configuration Files</a><ul><li><a href="#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)</a></li><li><a href="#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)</a></li><li><a href="#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)</a></li><li><a href="#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)</a></li><li><a href="#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)</a></li><li><a href="#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)</a></li></ul></li><li><a href="#42-kubelet" class="table-of-contents__link toc-highlight">4.2 Kubelet</a><ul><li><a href="#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)</a></li><li><a href="#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)</a></li><li><a href="#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)</a></li><li><a href="#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)</a></li><li><a href="#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)</a></li><li><a href="#428-ensure-that-the---hostname-override-argument-is-not-set-manual" class="table-of-contents__link toc-highlight">4.2.8 Ensure that the --hostname-override argument is not set (Manual)</a></li><li><a href="#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual" class="table-of-contents__link toc-highlight">4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)</a></li><li><a href="#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)</a></li><li><a href="#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)</a></li><li><a href="#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual" class="table-of-contents__link toc-highlight">4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)</a></li><li><a href="#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#51-rbac-and-service-accounts" class="table-of-contents__link toc-highlight">5.1 RBAC and Service Accounts</a><ul><li><a href="#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual" class="table-of-contents__link toc-highlight">5.1.1 Ensure that the cluster-admin role is only used where required (Manual)</a></li><li><a href="#512-minimize-access-to-secrets-manual" class="table-of-contents__link toc-highlight">5.1.2 Minimize access to secrets (Manual)</a></li><li><a href="#513-minimize-wildcard-use-in-roles-and-clusterroles-manual" class="table-of-contents__link toc-highlight">5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)</a></li><li><a href="#514-minimize-access-to-create-pods-manual" class="table-of-contents__link toc-highlight">5.1.4 Minimize access to create pods (Manual)</a></li><li><a href="#515-ensure-that-default-service-accounts-are-not-actively-used-manual" class="table-of-contents__link toc-highlight">5.1.5 Ensure that default service accounts are not actively used. (Manual)</a></li><li><a href="#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual" class="table-of-contents__link toc-highlight">5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)</a></li><li><a href="#517-avoid-use-of-systemmasters-group-manual" class="table-of-contents__link toc-highlight">5.1.7 Avoid use of system:masters group (Manual)</a></li><li><a href="#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual" class="table-of-contents__link toc-highlight">5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)</a></li></ul></li><li><a href="#52-pod-security-standards" class="table-of-contents__link toc-highlight">5.2 Pod Security Standards</a><ul><li><a href="#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual" class="table-of-contents__link toc-highlight">5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)</a></li><li><a href="#522-minimize-the-admission-of-privileged-containers-automated" class="table-of-contents__link toc-highlight">5.2.2 Minimize the admission of privileged containers (Automated)</a></li><li><a href="#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated" class="table-of-contents__link toc-highlight">5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)</a></li><li><a href="#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated" class="table-of-contents__link toc-highlight">5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)</a></li><li><a href="#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated" class="table-of-contents__link toc-highlight">5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)</a></li><li><a href="#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated" class="table-of-contents__link toc-highlight">5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)</a></li><li><a href="#527-minimize-the-admission-of-root-containers-automated" class="table-of-contents__link toc-highlight">5.2.7 Minimize the admission of root containers (Automated)</a></li><li><a href="#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated" class="table-of-contents__link toc-highlight">5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)</a></li><li><a href="#529-minimize-the-admission-of-containers-with-added-capabilities-automated" class="table-of-contents__link toc-highlight">5.2.9 Minimize the admission of containers with added capabilities (Automated)</a></li><li><a href="#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual" class="table-of-contents__link toc-highlight">5.2.10 Minimize the admission of containers with capabilities assigned (Manual)</a></li><li><a href="#5211-minimize-the-admission-of-windows-hostprocess-containers-manual" class="table-of-contents__link toc-highlight">5.2.11 Minimize the admission of Windows HostProcess containers (Manual)</a></li><li><a href="#5212-minimize-the-admission-of-hostpath-volumes-manual" class="table-of-contents__link toc-highlight">5.2.12 Minimize the admission of HostPath volumes (Manual)</a></li><li><a href="#5213-minimize-the-admission-of-containers-which-use-hostports-manual" class="table-of-contents__link toc-highlight">5.2.13 Minimize the admission of containers which use HostPorts (Manual)</a></li></ul></li><li><a href="#53-network-policies-and-cni" class="table-of-contents__link toc-highlight">5.3 Network Policies and CNI</a><ul><li><a href="#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual" class="table-of-contents__link toc-highlight">5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)</a></li><li><a href="#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual" class="table-of-contents__link toc-highlight">5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)</a></li></ul></li><li><a href="#54-secrets-management" class="table-of-contents__link toc-highlight">5.4 Secrets Management</a><ul><li><a href="#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual" class="table-of-contents__link toc-highlight">5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)</a></li><li><a href="#542-consider-external-secret-storage-manual" class="table-of-contents__link toc-highlight">5.4.2 Consider external secret storage (Manual)</a></li></ul></li><li><a href="#55-extensible-admission-control" class="table-of-contents__link toc-highlight">5.5 Extensible Admission Control</a><ul><li><a href="#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual" class="table-of-contents__link toc-highlight">5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)</a></li></ul></li><li><a href="#57-general-policies" class="table-of-contents__link toc-highlight">5.7 General Policies</a><ul><li><a href="#571-create-administrative-boundaries-between-resources-using-namespaces-manual" class="table-of-contents__link toc-highlight">5.7.1 Create administrative boundaries between resources using namespaces (Manual)</a></li><li><a href="#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual" class="table-of-contents__link toc-highlight">5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)</a></li><li><a href="#573-apply-securitycontext-to-your-pods-and-containers-manual" class="table-of-contents__link toc-highlight">5.7.3 Apply SecurityContext to your Pods and Containers (Manual)</a></li><li><a href="#574-the-default-namespace-should-not-be-used-manual" class="table-of-contents__link toc-highlight">5.7.4 The default namespace should not be used (Manual)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/storage.html b/storage.html
index 74d5a49f3..a249e786d 100644
--- a/storage.html
+++ b/storage.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Volumes and Storage | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/storage"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Volumes and Storage | K3s"><meta data-rh="true" name="description" content="When deploying an application that needs to retain data, you’ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application’s pod fails."><meta data-rh="true" property="og:description" content="When deploying an application that needs to retain data, you’ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application’s pod fails."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/storage"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/storage" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/storage" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Volumes and Storage | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/storage"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Volumes and Storage | K3s"><meta data-rh="true" name="description" content="When deploying an application that needs to retain data, you’ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application’s pod fails."><meta data-rh="true" property="og:description" content="When deploying an application that needs to retain data, you’ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application’s pod fails."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/storage"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/storage" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/storage" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/storage" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Volumes and Storage</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Volumes and Storage</h1></header><p>When deploying an application that needs to retain data, you’ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application’s pod fails.</p><p>A persistent volume (PV) is a piece of storage in the Kubernetes cluster, while a persistent volume claim (PVC) is a request for storage. For details on how PVs and PVCs work, refer to the official Kubernetes documentation on <a href="https://kubernetes.io/docs/concepts/storage/volumes/" target="_blank" rel="noopener noreferrer">storage.</a></p><p>This page describes how to set up persistent storage with a local storage provider, or with <a href="#setting-up-longhorn">Longhorn.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="whats-different-about-k3s-storage">What&#x27;s different about K3s storage?<a href="#whats-different-about-k3s-storage" class="hash-link" aria-label="Direct link to What&#x27;s different about K3s storage?" title="Direct link to What&#x27;s different about K3s storage?">​</a></h2><p>K3s removes several optional volume plugins and all built-in (sometimes referred to as &quot;in-tree&quot;) cloud providers. We do this in order to achieve a smaller binary size and to avoid dependence on third-party cloud or data center technologies and services, which may not be available in many K3s use cases. We are able to do this because their removal affects neither core Kubernetes functionality nor conformance.</p><p>The following volume plugins have been removed from K3s:</p><ul><li>cephfs</li><li>fc</li><li>flocker</li><li>git_repo</li><li>glusterfs</li><li>portworx</li><li>quobyte</li><li>rbd</li><li>storageos</li></ul><p>Both components have out-of-tree alternatives that can be used with K3s: The Kubernetes <a href="https://github.com/container-storage-interface/spec/blob/master/spec.md" target="_blank" rel="noopener noreferrer">Container Storage Interface (CSI)</a> and <a href="https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/" target="_blank" rel="noopener noreferrer">Cloud Provider Interface (CPI)</a>.</p><p>Kubernetes maintainers are actively migrating in-tree volume plugins to CSI drivers. For more information on this migration, please refer <a href="https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/" target="_blank" rel="noopener noreferrer">here</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="setting-up-the-local-storage-provider">Setting up the Local Storage Provider<a href="#setting-up-the-local-storage-provider" class="hash-link" aria-label="Direct link to Setting up the Local Storage Provider" title="Direct link to Setting up the Local Storage Provider">​</a></h2><p>K3s comes with Rancher&#x27;s Local Path Provisioner and this enables the ability to create persistent volume claims out of the box using local storage on the respective node. Below we cover a simple example. For more information please reference the official documentation <a href="https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage" target="_blank" rel="noopener noreferrer">here</a>.</p><p>Create a hostPath backed persistent volume claim and a pod to utilize it:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml">pvc.yaml<a href="#pvcyaml" class="hash-link" aria-label="Direct link to pvc.yaml" title="Direct link to pvc.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml">pod.yaml<a href="#podyaml" class="hash-link" aria-label="Direct link to pod.yaml" title="Direct link to pod.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Apply the yaml:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Confirm the PV and PVC are created:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The status should be Bound for each.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="setting-up-longhorn">Setting up Longhorn<a href="#setting-up-longhorn" class="hash-link" aria-label="Direct link to Setting up Longhorn" title="Direct link to Setting up Longhorn">​</a></h2><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Longhorn does not support ARM32.</p></div></div><p>K3s supports <a href="https://github.com/longhorn/longhorn" target="_blank" rel="noopener noreferrer">Longhorn</a>, an open-source distributed block storage system for Kubernetes.</p><p>Below we cover a simple example. For more information, refer to the <a href="https://longhorn.io/docs/latest/" target="_blank" rel="noopener noreferrer">official documentation</a>.</p><p>Apply the longhorn.yaml to install Longhorn:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Longhorn will be installed in the namespace <code>longhorn-system</code>.</p><p>Apply the yaml to create the PVC and pod:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml-1">pvc.yaml<a href="#pvcyaml-1" class="hash-link" aria-label="Direct link to pvc.yaml" title="Direct link to pvc.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml-1">pod.yaml<a href="#podyaml-1" class="hash-link" aria-label="Direct link to pod.yaml" title="Direct link to pod.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Confirm the PV and PVC are created:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The status should be Bound for each.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades/automated"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Automated Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/networking"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Networking</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#whats-different-about-k3s-storage" class="table-of-contents__link toc-highlight">What&#39;s different about K3s storage?</a></li><li><a href="#setting-up-the-local-storage-provider" class="table-of-contents__link toc-highlight">Setting up the Local Storage Provider</a><ul><li><a href="#pvcyaml" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li><li><a href="#setting-up-longhorn" class="table-of-contents__link toc-highlight">Setting up Longhorn</a><ul><li><a href="#pvcyaml-1" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml-1" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/storage" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Volumes and Storage</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Volumes and Storage</h1></header><p>When deploying an application that needs to retain data, you’ll need to create persistent storage. Persistent storage allows you to store application data external from the pod running your application. This storage practice allows you to maintain application data, even if the application’s pod fails.</p><p>A persistent volume (PV) is a piece of storage in the Kubernetes cluster, while a persistent volume claim (PVC) is a request for storage. For details on how PVs and PVCs work, refer to the official Kubernetes documentation on <a href="https://kubernetes.io/docs/concepts/storage/volumes/" target="_blank" rel="noopener noreferrer">storage.</a></p><p>This page describes how to set up persistent storage with a local storage provider, or with <a href="#setting-up-longhorn">Longhorn.</a></p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="whats-different-about-k3s-storage">What&#x27;s different about K3s storage?<a href="#whats-different-about-k3s-storage" class="hash-link" aria-label="Direct link to What&#x27;s different about K3s storage?" title="Direct link to What&#x27;s different about K3s storage?">​</a></h2><p>K3s removes several optional volume plugins and all built-in (sometimes referred to as &quot;in-tree&quot;) cloud providers. We do this in order to achieve a smaller binary size and to avoid dependence on third-party cloud or data center technologies and services, which may not be available in many K3s use cases. We are able to do this because their removal affects neither core Kubernetes functionality nor conformance.</p><p>The following volume plugins have been removed from K3s:</p><ul><li>cephfs</li><li>fc</li><li>flocker</li><li>git_repo</li><li>glusterfs</li><li>portworx</li><li>quobyte</li><li>rbd</li><li>storageos</li></ul><p>Both components have out-of-tree alternatives that can be used with K3s: The Kubernetes <a href="https://github.com/container-storage-interface/spec/blob/master/spec.md" target="_blank" rel="noopener noreferrer">Container Storage Interface (CSI)</a> and <a href="https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/" target="_blank" rel="noopener noreferrer">Cloud Provider Interface (CPI)</a>.</p><p>Kubernetes maintainers are actively migrating in-tree volume plugins to CSI drivers. For more information on this migration, please refer <a href="https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/" target="_blank" rel="noopener noreferrer">here</a>.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="setting-up-the-local-storage-provider">Setting up the Local Storage Provider<a href="#setting-up-the-local-storage-provider" class="hash-link" aria-label="Direct link to Setting up the Local Storage Provider" title="Direct link to Setting up the Local Storage Provider">​</a></h2><p>K3s comes with Rancher&#x27;s Local Path Provisioner and this enables the ability to create persistent volume claims out of the box using local storage on the respective node. Below we cover a simple example. For more information please reference the official documentation <a href="https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage" target="_blank" rel="noopener noreferrer">here</a>.</p><p>Create a hostPath backed persistent volume claim and a pod to utilize it:</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml">pvc.yaml<a href="#pvcyaml" class="hash-link" aria-label="Direct link to pvc.yaml" title="Direct link to pvc.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml">pod.yaml<a href="#podyaml" class="hash-link" aria-label="Direct link to pod.yaml" title="Direct link to pod.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Apply the yaml:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Confirm the PV and PVC are created:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The status should be Bound for each.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="setting-up-longhorn">Setting up Longhorn<a href="#setting-up-longhorn" class="hash-link" aria-label="Direct link to Setting up Longhorn" title="Direct link to Setting up Longhorn">​</a></h2><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>caution</div><div class="admonitionContent_S0QG"><p>Longhorn does not support ARM32.</p></div></div><p>K3s supports <a href="https://github.com/longhorn/longhorn" target="_blank" rel="noopener noreferrer">Longhorn</a>, an open-source distributed block storage system for Kubernetes.</p><p>Below we cover a simple example. For more information, refer to the <a href="https://longhorn.io/docs/latest/" target="_blank" rel="noopener noreferrer">official documentation</a>.</p><p>Apply the longhorn.yaml to install Longhorn:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Longhorn will be installed in the namespace <code>longhorn-system</code>.</p><p>Apply the yaml to create the PVC and pod:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml-1">pvc.yaml<a href="#pvcyaml-1" class="hash-link" aria-label="Direct link to pvc.yaml" title="Direct link to pvc.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml-1">pod.yaml<a href="#podyaml-1" class="hash-link" aria-label="Direct link to pod.yaml" title="Direct link to pod.yaml">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Confirm the PV and PVC are created:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The status should be Bound for each.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades/automated"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Automated Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/networking"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Networking</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#whats-different-about-k3s-storage" class="table-of-contents__link toc-highlight">What&#39;s different about K3s storage?</a></li><li><a href="#setting-up-the-local-storage-provider" class="table-of-contents__link toc-highlight">Setting up the Local Storage Provider</a><ul><li><a href="#pvcyaml" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li><li><a href="#setting-up-longhorn" class="table-of-contents__link toc-highlight">Setting up Longhorn</a><ul><li><a href="#pvcyaml-1" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml-1" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/upgrades.html b/upgrades.html
index 9320187a0..30a300744 100644
--- a/upgrades.html
+++ b/upgrades.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Upgrades | K3s"><meta data-rh="true" name="description" content="Upgrading your K3s cluster"><meta data-rh="true" property="og:description" content="Upgrading your K3s cluster"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Upgrades | K3s"><meta data-rh="true" name="description" content="Upgrading your K3s cluster"><meta data-rh="true" property="og:description" content="Upgrading your K3s cluster"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Upgrades</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Upgrades</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading-your-k3s-cluster">Upgrading your K3s cluster<a href="#upgrading-your-k3s-cluster" class="hash-link" aria-label="Direct link to Upgrading your K3s cluster" title="Direct link to Upgrading your K3s cluster">​</a></h3><p><a href="/upgrades/manual">Manual Upgrades</a> describes several techniques for upgrading your cluster manually. It can also be used as a basis for upgrading through third-party Infrastructure-as-Code tools like <a href="https://www.terraform.io/" target="_blank" rel="noopener noreferrer">Terraform</a>.</p><p><a href="/upgrades/automated">Automated Upgrades</a> describes how to perform Kubernetes-native automated upgrades using Rancher&#x27;s <a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="version-specific-caveats">Version-specific caveats<a href="#version-specific-caveats" class="hash-link" aria-label="Direct link to Version-specific caveats" title="Direct link to Version-specific caveats">​</a></h3><ul><li><p><strong>Traefik:</strong> If Traefik is not disabled, K3s versions 1.20 and earlier will install Traefik v1, while K3s versions 1.21 and later will install Traefik v2, if v1 is not already present. To upgrade from the older Traefik v1 to Traefik v2, please refer to the <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik documentation</a> and use the <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">migration tool</a>.</p></li><li><p><strong>K3s bootstrap data:</strong> If you are using K3s in an HA configuration with an external SQL datastore, and your server (control-plane) nodes were not started with the <code>--token</code> CLI flag, you will no longer be able to add additional K3s servers to the cluster without specifying the token. Ensure that you retain a copy of this token, as it is required when restoring from backup. Previously, K3s did not enforce the use of a token when using external SQL datastores. </p><ul><li><p>The affected versions are &lt;= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; the patched versions are v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1.</p></li><li><p>You may retrieve the token value from any server already joined to the cluster as follows:</p></li></ul></li></ul><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ul><li><strong>Experimental Dqlite:</strong> The experimental embedded Dqlite data store was deprecated in K3s v1.19.1. Please note that upgrades from experimental Dqlite to experimental embedded etcd are not supported. If you attempt an upgrade, it will not succeed, and data will be lost.</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cluster-access"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Cluster Access</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades/killall"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Stopping K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#upgrading-your-k3s-cluster" class="table-of-contents__link toc-highlight">Upgrading your K3s cluster</a></li><li><a href="#version-specific-caveats" class="table-of-contents__link toc-highlight">Version-specific caveats</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Upgrades</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Upgrades</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrading-your-k3s-cluster">Upgrading your K3s cluster<a href="#upgrading-your-k3s-cluster" class="hash-link" aria-label="Direct link to Upgrading your K3s cluster" title="Direct link to Upgrading your K3s cluster">​</a></h3><p><a href="/upgrades/manual">Manual Upgrades</a> describes several techniques for upgrading your cluster manually. It can also be used as a basis for upgrading through third-party Infrastructure-as-Code tools like <a href="https://www.terraform.io/" target="_blank" rel="noopener noreferrer">Terraform</a>.</p><p><a href="/upgrades/automated">Automated Upgrades</a> describes how to perform Kubernetes-native automated upgrades using Rancher&#x27;s <a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a>.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="version-specific-caveats">Version-specific caveats<a href="#version-specific-caveats" class="hash-link" aria-label="Direct link to Version-specific caveats" title="Direct link to Version-specific caveats">​</a></h3><ul><li><p><strong>Traefik:</strong> If Traefik is not disabled, K3s versions 1.20 and earlier will install Traefik v1, while K3s versions 1.21 and later will install Traefik v2, if v1 is not already present. To upgrade from the older Traefik v1 to Traefik v2, please refer to the <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik documentation</a> and use the <a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">migration tool</a>.</p></li><li><p><strong>K3s bootstrap data:</strong> If you are using K3s in an HA configuration with an external SQL datastore, and your server (control-plane) nodes were not started with the <code>--token</code> CLI flag, you will no longer be able to add additional K3s servers to the cluster without specifying the token. Ensure that you retain a copy of this token, as it is required when restoring from backup. Previously, K3s did not enforce the use of a token when using external SQL datastores. </p><ul><li><p>The affected versions are &lt;= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1; the patched versions are v1.19.13+k3s1, v1.20.9+k3s1, v1.21.3+k3s1.</p></li><li><p>You may retrieve the token value from any server already joined to the cluster as follows:</p></li></ul></li></ul><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ul><li><strong>Experimental Dqlite:</strong> The experimental embedded Dqlite data store was deprecated in K3s v1.19.1. Please note that upgrades from experimental Dqlite to experimental embedded etcd are not supported. If you attempt an upgrade, it will not succeed, and data will be lost.</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/cluster-access"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Cluster Access</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades/killall"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Stopping K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#upgrading-your-k3s-cluster" class="table-of-contents__link toc-highlight">Upgrading your K3s cluster</a></li><li><a href="#version-specific-caveats" class="table-of-contents__link toc-highlight">Version-specific caveats</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/upgrades/automated.html b/upgrades/automated.html
index 2a80e9472..a63ded376 100644
--- a/upgrades/automated.html
+++ b/upgrades/automated.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Automated Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades/automated"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Automated Upgrades | K3s"><meta data-rh="true" name="description" content="Overview"><meta data-rh="true" property="og:description" content="Overview"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades/automated"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/automated" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/automated" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Automated Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades/automated"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Automated Upgrades | K3s"><meta data-rh="true" name="description" content="Overview"><meta data-rh="true" property="og:description" content="Overview"><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades/automated"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/automated" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/automated" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/upgrades"><span itemprop="name">Upgrades</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Automated Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Automated Upgrades</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="Direct link to Overview" title="Direct link to Overview">​</a></h3><p>You can manage K3s cluster upgrades using Rancher&#x27;s system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a <a href="https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources" target="_blank" rel="noopener noreferrer">custom resource definition (CRD)</a>, a <code>plan</code>, and a <a href="https://kubernetes.io/docs/concepts/architecture/controller/" target="_blank" rel="noopener noreferrer">controller</a>.</p><p>The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/" target="_blank" rel="noopener noreferrer">label selector</a>. See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the <a href="https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go" target="_blank" rel="noopener noreferrer">CRD</a>.</p><p>The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade <a href="https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/" target="_blank" rel="noopener noreferrer">jobs</a> on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The upgrade job that is launched must be highly privileged. It is configured with the following:</p><ul><li>Host <code>IPC</code>, <code>NET</code>, and <code>PID</code> namespaces</li><li>The <code>CAP_SYS_BOOT</code> capability</li><li>Host root mounted at <code>/host</code> with read and write permissions</li></ul></div></div><p>To automate upgrades in this manner, you must do the following:</p><ol><li>Install the system-upgrade-controller into your cluster</li><li>Configure plans</li></ol><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades.</p><ul><li>If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page.</li><li>If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page.</li><li>If the K3s cluster is <em>not</em> managed Rancher, you may follow the steps below.</li></ul></div></div><p>For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:</p><ul><li><a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a></li><li><a href="https://github.com/k3s-io/k3s-upgrade" target="_blank" rel="noopener noreferrer">k3s-upgrade</a></li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="install-the-system-upgrade-controller">Install the system-upgrade-controller<a href="#install-the-system-upgrade-controller" class="hash-link" aria-label="Direct link to Install the system-upgrade-controller" title="Direct link to Install the system-upgrade-controller">​</a></h3><p> The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configure-plans">Configure plans<a href="#configure-plans" class="hash-link" aria-label="Direct link to Configure plans" title="Direct link to Configure plans">​</a></h3><p>It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  </p><p>The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Server plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">values</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Agent plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> agent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> DoesNotExist</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">prepare</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> prepare</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few important things to call out regarding these plans:</p><p>1) The plans must be created in the same namespace where the controller was deployed.</p><p>2) The <code>concurrency</code> field indicates how many nodes can be upgraded at the same time. </p><p>3) The server-plan targets server nodes by specifying a label selector that selects nodes with the <code>node-role.kubernetes.io/control-plane</code> label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label.</p><p>4) The <code>prepare</code> step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute.</p><p>5) Both plans have the <code>version</code> field set to v1.24.6+k3s1. Alternatively, you can omit the <code>version</code> field and set the <code>channel</code> field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the <a href="/upgrades/manual#release-channels">release channels</a>. Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">channel</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//update.k3s.io/v1</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">release/channels/stable</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed.</p><p>You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get plans -o yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get </span><span class="token function" style="color:rgb(130, 170, 255)">jobs</span><span class="token plain"> -o yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades/manual"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Manual Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/storage"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Volumes and Storage</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#overview" class="table-of-contents__link toc-highlight">Overview</a></li><li><a href="#install-the-system-upgrade-controller" class="table-of-contents__link toc-highlight">Install the system-upgrade-controller</a></li><li><a href="#configure-plans" class="table-of-contents__link toc-highlight">Configure plans</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/upgrades"><span itemprop="name">Upgrades</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Automated Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Automated Upgrades</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="Direct link to Overview" title="Direct link to Overview">​</a></h3><p>You can manage K3s cluster upgrades using Rancher&#x27;s system-upgrade-controller. This is a Kubernetes-native approach to cluster upgrades. It leverages a <a href="https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources" target="_blank" rel="noopener noreferrer">custom resource definition (CRD)</a>, a <code>plan</code>, and a <a href="https://kubernetes.io/docs/concepts/architecture/controller/" target="_blank" rel="noopener noreferrer">controller</a>.</p><p>The plan defines upgrade policies and requirements. It also defines which nodes should be upgraded through a <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/" target="_blank" rel="noopener noreferrer">label selector</a>. See below for plans with defaults appropriate for upgrading a K3s cluster. For more advanced plan configuration options, please review the <a href="https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go" target="_blank" rel="noopener noreferrer">CRD</a>.</p><p>The controller schedules upgrades by monitoring plans and selecting nodes to run upgrade <a href="https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/" target="_blank" rel="noopener noreferrer">jobs</a> on. When a job has run to completion successfully, the controller will label the node on which it ran accordingly.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>The upgrade job that is launched must be highly privileged. It is configured with the following:</p><ul><li>Host <code>IPC</code>, <code>NET</code>, and <code>PID</code> namespaces</li><li>The <code>CAP_SYS_BOOT</code> capability</li><li>Host root mounted at <code>/host</code> with read and write permissions</li></ul></div></div><p>To automate upgrades in this manner, you must do the following:</p><ol><li>Install the system-upgrade-controller into your cluster</li><li>Configure plans</li></ol><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>danger</div><div class="admonitionContent_S0QG"><p>If the K3s cluster is managed by Rancher, you should use the Rancher UI to manage upgrades.</p><ul><li>If the K3s cluster was imported into Rancher, Rancher will manage the system-upgrade-controller deployment and plans. Do not follow the steps on this page.</li><li>If the K3s cluster was provisioned by Rancher, Rancher will use system agent to manage version upgrades. Do not follow the steps on this page.</li><li>If the K3s cluster is <em>not</em> managed Rancher, you may follow the steps below.</li></ul></div></div><p>For more details on the design and architecture of the system-upgrade-controller or its integration with K3s, see the following Git repositories:</p><ul><li><a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a></li><li><a href="https://github.com/k3s-io/k3s-upgrade" target="_blank" rel="noopener noreferrer">k3s-upgrade</a></li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="install-the-system-upgrade-controller">Install the system-upgrade-controller<a href="#install-the-system-upgrade-controller" class="hash-link" aria-label="Direct link to Install the system-upgrade-controller" title="Direct link to Install the system-upgrade-controller">​</a></h3><p> The system-upgrade-controller can be installed as a deployment into your cluster. The deployment requires a service-account, clusterRoleBinding, and a configmap. To install these components, run the following command:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The controller can be configured and customized via the previously mentioned configmap, but the controller must be redeployed for the changes to be applied.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configure-plans">Configure plans<a href="#configure-plans" class="hash-link" aria-label="Direct link to Configure plans" title="Direct link to Configure plans">​</a></h3><p>It is recommended you create at least two plans: a plan for upgrading server (control-plane) nodes and a plan for upgrading agent nodes. You can create additional plans as needed to control the rollout of the upgrade across nodes. Once the plans are created, the controller will pick them up and begin to upgrade your cluster.  </p><p>The following two example plans will upgrade your cluster to K3s v1.24.6+k3s1:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Server plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">values</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Agent plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> agent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> DoesNotExist</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">prepare</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> prepare</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>There are a few important things to call out regarding these plans:</p><p>1) The plans must be created in the same namespace where the controller was deployed.</p><p>2) The <code>concurrency</code> field indicates how many nodes can be upgraded at the same time. </p><p>3) The server-plan targets server nodes by specifying a label selector that selects nodes with the <code>node-role.kubernetes.io/control-plane</code> label. The agent-plan targets agent nodes by specifying a label selector that select nodes without that label.</p><p>4) The <code>prepare</code> step in the agent-plan will cause upgrade jobs for that plan to wait for the server-plan to complete before they execute.</p><p>5) Both plans have the <code>version</code> field set to v1.24.6+k3s1. Alternatively, you can omit the <code>version</code> field and set the <code>channel</code> field to a URL that resolves to a release of K3s. This will cause the controller to monitor that URL and upgrade the cluster any time it resolves to a new release. This works well with the <a href="/upgrades/manual#release-channels">release channels</a>. Thus, you can configure your plans with the following channel to ensure your cluster is always automatically upgraded to the newest stable release of K3s:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">channel</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//update.k3s.io/v1</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">release/channels/stable</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>As stated, the upgrade will begin as soon as the controller detects that a plan was created. Updating a plan will cause the controller to re-evaluate the plan and determine if another upgrade is needed.</p><p>You can monitor the progress of an upgrade by viewing the plan and jobs via kubectl:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get plans -o yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get </span><span class="token function" style="color:rgb(130, 170, 255)">jobs</span><span class="token plain"> -o yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades/manual"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Manual Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/storage"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Volumes and Storage</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#overview" class="table-of-contents__link toc-highlight">Overview</a></li><li><a href="#install-the-system-upgrade-controller" class="table-of-contents__link toc-highlight">Install the system-upgrade-controller</a></li><li><a href="#configure-plans" class="table-of-contents__link toc-highlight">Configure plans</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/upgrades/killall.html b/upgrades/killall.html
index 1fe4fc904..feb47ca8f 100644
--- a/upgrades/killall.html
+++ b/upgrades/killall.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Stopping K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades/killall"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Stopping K3s | K3s"><meta data-rh="true" name="description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><meta data-rh="true" property="og:description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades/killall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/killall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/killall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Stopping K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades/killall"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Stopping K3s | K3s"><meta data-rh="true" name="description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><meta data-rh="true" property="og:description" content="To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades/killall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/killall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/killall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/upgrades"><span itemprop="name">Upgrades</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Stopping K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Stopping K3s</h1></header><p>To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.</p><p>To stop all of the K3s containers and reset the containerd state, the <code>k3s-killall.sh</code> script can be used.</p><p>The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted.</p><p>To run the killall script from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-killall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades/manual"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Manual Upgrades</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/upgrades"><span itemprop="name">Upgrades</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Stopping K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>Stopping K3s</h1></header><p>To allow high availability during upgrades, the K3s containers continue running when the K3s service is stopped.</p><p>To stop all of the K3s containers and reset the containerd state, the <code>k3s-killall.sh</code> script can be used.</p><p>The killall script cleans up containers, K3s directories, and networking components while also removing the iptables chain with all the associated rules. The cluster data will not be deleted.</p><p>To run the killall script from a server node, run:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-killall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Upgrades</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades/manual"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Manual Upgrades</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/upgrades/manual.html b/upgrades/manual.html
index d354b918b..daaf9aa0a 100644
--- a/upgrades/manual.html
+++ b/upgrades/manual.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Manual Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades/manual"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Manual Upgrades | K3s"><meta data-rh="true" name="description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><meta data-rh="true" property="og:description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades/manual"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/manual" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/manual" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/opensearch.xml"><link rel="stylesheet" href="/assets/css/styles.a02ebd50.css">
-<link rel="preload" href="/assets/js/runtime~main.46c6e34e.js" as="script">
-<link rel="preload" href="/assets/js/main.f7fa7f61.js" as="script">
+<title data-rh="true">Manual Upgrades | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/upgrades/manual"><meta data-rh="true" name="docusaurus_locale" content="en"><meta data-rh="true" name="docsearch:language" content="en"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Manual Upgrades | K3s"><meta data-rh="true" name="description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><meta data-rh="true" property="og:description" content="You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version."><link data-rh="true" rel="icon" href="/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/upgrades/manual"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/manual" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/manual" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="x-default"><link rel="stylesheet" href="/assets/css/styles.5f767eab.css">
+<link rel="preload" href="/assets/js/runtime~main.7d956e78.js" as="script">
+<link rel="preload" href="/assets/js/main.09cd452e.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="Search"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">Search</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/upgrades"><span itemprop="name">Upgrades</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Manual Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Manual Upgrades</h1></header><p>You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>When upgrading, upgrade server nodes first one at a time, then any agent nodes.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="release-channels">Release Channels<a href="#release-channels" class="hash-link" aria-label="Direct link to Release Channels" title="Direct link to Release Channels">​</a></h3><p>Upgrades performed via the installation script or using our <a href="/upgrades/automated">automated upgrades</a> feature can be tied to different release channels. The following channels are available:</p><table><thead><tr><th>Channel</th><th>Description</th></tr></thead><tbody><tr><td>stable</td><td>(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.</td></tr><tr><td>latest</td><td>Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.</td></tr><tr><td>v1.26 (example)</td><td>There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.</td></tr></tbody></table><p>For an exhaustive and up-to-date list of channels, you can visit the <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">k3s channel service API</a>. For more technical details on how channels work, you see the <a href="https://github.com/rancher/channelserver" target="_blank" rel="noopener noreferrer">channelserver project</a>.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrade-k3s-using-the-installation-script">Upgrade K3s Using the Installation Script<a href="#upgrade-k3s-using-the-installation-script" class="hash-link" aria-label="Direct link to Upgrade K3s Using the Installation Script" title="Direct link to Upgrade K3s Using the Installation Script">​</a></h3><p>To upgrade K3s from an older version you can re-run the installation script using the same configuration options you originally used when running the install script.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Note</div><div class="admonitionContent_S0QG"><p>The <code>INSTALL_K3S_EXEC</code> variable, <code>K3S_</code> variables, and trailing shell arguments are all used by the install script to generate the systemd unit and environment file.
+<div role="region" aria-label="Skip to main content"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">Skip to main content</a></div><nav aria-label="Main" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/"><div class="navbar__logo"><img src="/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="Search" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>English</a><ul class="dropdown__menu"><li><a href="/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="en">English</a></li><li><a href="/zh/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="Switch between dark and light mode (currently light mode)" aria-label="Switch between dark and light mode (currently light mode)" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="Scroll back to top" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="Docs sidebar" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/">K3s - Lightweight Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/architecture">Architecture</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/quick-start">Quick-Start Guide</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/installation">Installation</a><button aria-label="Toggle the collapsible sidebar category &#x27;Installation&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/datastore">Cluster Datastore</a><button aria-label="Toggle the collapsible sidebar category &#x27;Cluster Datastore&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/cluster-access">Cluster Access</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/upgrades">Upgrades</a><button aria-label="Toggle the collapsible sidebar category &#x27;Upgrades&#x27;" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/killall">Stopping K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/upgrades/manual">Manual Upgrades</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/upgrades/automated">Automated Upgrades</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/storage">Volumes and Storage</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/networking">Networking</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/advanced">Advanced Options / Configuration</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/faq">FAQ</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/cli">CLI Tools</a><button aria-label="Toggle the collapsible sidebar category &#x27;CLI Tools&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/reference">Reference</a><button aria-label="Toggle the collapsible sidebar category &#x27;Reference&#x27;" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/known-issues">Known Issues</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/security">Security</a><button aria-label="Toggle the collapsible sidebar category &#x27;Security&#x27;" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="Breadcrumbs"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="Home page" class="breadcrumbs__link" href="/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/upgrades"><span itemprop="name">Upgrades</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Manual Upgrades</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">On this page</button></div><div class="theme-doc-markdown markdown"><header><h1>Manual Upgrades</h1></header><p>You can upgrade K3s by using the installation script, or by manually installing the binary of the desired version.</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>note</div><div class="admonitionContent_S0QG"><p>When upgrading, upgrade server nodes first one at a time, then any agent nodes.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="release-channels">Release Channels<a href="#release-channels" class="hash-link" aria-label="Direct link to Release Channels" title="Direct link to Release Channels">​</a></h3><p>Upgrades performed via the installation script or using our <a href="/upgrades/automated">automated upgrades</a> feature can be tied to different release channels. The following channels are available:</p><table><thead><tr><th>Channel</th><th>Description</th></tr></thead><tbody><tr><td>stable</td><td>(Default) Stable is recommended for production environments. These releases have been through a period of community hardening.</td></tr><tr><td>latest</td><td>Latest is recommended for trying out the latest features.  These releases have not yet been through a period of community hardening.</td></tr><tr><td>v1.26 (example)</td><td>There is a release channel tied to each Kubernetes minor version, including versions that are end-of-life. These channels will select the latest patch available, not necessarily a stable release.</td></tr></tbody></table><p>For an exhaustive and up-to-date list of channels, you can visit the <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">k3s channel service API</a>. For more technical details on how channels work, you see the <a href="https://github.com/rancher/channelserver" target="_blank" rel="noopener noreferrer">channelserver project</a>.</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>tip</div><div class="admonitionContent_S0QG"><p>When attempting to upgrade to a new version of K3s, the <a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes version skew policy</a> applies. Ensure that your plan does not skip intermediate minor versions when upgrading. The system-upgrade-controller itself will not protect against unsupported changes to the Kubernetes version.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="upgrade-k3s-using-the-installation-script">Upgrade K3s Using the Installation Script<a href="#upgrade-k3s-using-the-installation-script" class="hash-link" aria-label="Direct link to Upgrade K3s Using the Installation Script" title="Direct link to Upgrade K3s Using the Installation Script">​</a></h3><p>To upgrade K3s from an older version you can re-run the installation script using the same configuration options you originally used when running the install script.</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Note</div><div class="admonitionContent_S0QG"><p>The <code>INSTALL_K3S_EXEC</code> variable, <code>K3S_</code> variables, and trailing shell arguments are all used by the install script to generate the systemd unit and environment file.
 If you set configuration when originally running the install script, but do not set it again when re-running the install script, the original values will be lost.</p><p>The contents of the <a href="/installation/configuration#configuration-file">configuration file</a> are not managed by the install script.
-If you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.</p></div></div><p>For example, to upgrade to the current stable release:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to upgrade to a specific version you can run the following command:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="manually-upgrade-k3s-using-the-binary">Manually Upgrade K3s Using the Binary<a href="#manually-upgrade-k3s-using-the-binary" class="hash-link" aria-label="Direct link to Manually Upgrade K3s Using the Binary" title="Direct link to Manually Upgrade K3s Using the Binary">​</a></h3><p>Or to manually upgrade K3s:</p><ol><li>Download the desired version of the K3s binary from <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a></li><li>Copy the downloaded binary to <code>/usr/local/bin/k3s</code> (or your desired location)</li><li>Stop the old k3s binary</li><li>Launch the new k3s binary</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="restarting-k3s">Restarting K3s<a href="#restarting-k3s" class="hash-link" aria-label="Direct link to Restarting K3s" title="Direct link to Restarting K3s">​</a></h3><p>Restarting K3s is supported by the installation script for systemd and OpenRC.</p><p><strong>systemd</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s-agent</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>OpenRC</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s-agent restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-01T16:10:53.000Z">Aug 1, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades/killall"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Stopping K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades/automated"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Automated Upgrades</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#release-channels" class="table-of-contents__link toc-highlight">Release Channels</a></li><li><a href="#upgrade-k3s-using-the-installation-script" class="table-of-contents__link toc-highlight">Upgrade K3s Using the Installation Script</a></li><li><a href="#manually-upgrade-k3s-using-the-binary" class="table-of-contents__link toc-highlight">Manually Upgrade K3s Using the Binary</a></li><li><a href="#restarting-k3s" class="table-of-contents__link toc-highlight">Restarting K3s</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+If you want your configuration to be independent from the install script, you should use a configuration file instead of passing environment variables or arguments to the install script.</p></div></div><p>For example, to upgrade to the current stable release:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to upgrade to a newer version in a specific channel (such as latest) you can specify the channel:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If you want to upgrade to a specific version you can run the following command:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="manually-upgrade-k3s-using-the-binary">Manually Upgrade K3s Using the Binary<a href="#manually-upgrade-k3s-using-the-binary" class="hash-link" aria-label="Direct link to Manually Upgrade K3s Using the Binary" title="Direct link to Manually Upgrade K3s Using the Binary">​</a></h3><p>Or to manually upgrade K3s:</p><ol><li>Download the desired version of the K3s binary from <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a></li><li>Copy the downloaded binary to <code>/usr/local/bin/k3s</code> (or your desired location)</li><li>Stop the old k3s binary</li><li>Launch the new k3s binary</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="restarting-k3s">Restarting K3s<a href="#restarting-k3s" class="hash-link" aria-label="Direct link to Restarting K3s" title="Direct link to Restarting K3s">​</a></h3><p>Restarting K3s is supported by the installation script for systemd and OpenRC.</p><p><strong>systemd</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s-agent</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>OpenRC</strong></p><p>To restart servers manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>To restart agents manually:</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s-agent restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="Copy code to clipboard" title="Copy" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>Edit this page</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">Last updated<!-- --> on <b><time datetime="2023-08-03T21:03:22.000Z">Aug 3, 2023</time></b></span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="Docs pages"><a class="pagination-nav__link pagination-nav__link--prev" href="/upgrades/killall"><div class="pagination-nav__sublabel">Previous</div><div class="pagination-nav__label">Stopping K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/upgrades/automated"><div class="pagination-nav__sublabel">Next</div><div class="pagination-nav__label">Automated Upgrades</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#release-channels" class="table-of-contents__link toc-highlight">Release Channels</a></li><li><a href="#upgrade-k3s-using-the-installation-script" class="table-of-contents__link toc-highlight">Upgrade K3s Using the Installation Script</a></li><li><a href="#manually-upgrade-k3s-using-the-binary" class="table-of-contents__link toc-highlight">Manually Upgrade K3s Using the Binary</a></li><li><a href="#restarting-k3s" class="table-of-contents__link toc-highlight">Restarting K3s</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2023 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/assets/js/runtime~main.46c6e34e.js"></script>
-<script src="/assets/js/main.f7fa7f61.js"></script>
+<script src="/assets/js/runtime~main.7d956e78.js"></script>
+<script src="/assets/js/main.09cd452e.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/404.html b/zh/404.html
index 96730d086..819280df8 100644
--- a/zh/404.html
+++ b/zh/404.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">找不到页面 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/404.html"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="og:title" content="找不到页面 | K3s"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/404.html"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/404.html" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/404.html" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">找不到页面 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/404.html"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="og:title" content="找不到页面 | K3s"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/404.html"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/404.html" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/404.html" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/404.html" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/404" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><main class="container margin-vert--xl"><div class="row"><div class="col col--6 col--offset-3"><h1 class="hero__title">找不到页面</h1><p>我们找不到您要找的页面。</p><p>请联系原始链接来源网站的所有者，并告知他们链接已损坏。</p></div></div></main></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/404" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/404" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><main class="container margin-vert--xl"><div class="row"><div class="col col--6 col--offset-3"><h1 class="hero__title">找不到页面</h1><p>我们找不到您要找的页面。</p><p>请联系原始链接来源网站的所有者，并告知他们链接已损坏。</p></div></div></main></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/advanced.html b/zh/advanced.html
index 2cfe4d0e8..f0444c59e 100644
--- a/zh/advanced.html
+++ b/zh/advanced.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">高级选项和配置 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/advanced"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="高级选项和配置 | K3s"><meta data-rh="true" name="description" content="本文描述了用于运行和管理 K3s 的高级设置，以及为 K3s 准备主机操作系统所需的步骤。"><meta data-rh="true" property="og:description" content="本文描述了用于运行和管理 K3s 的高级设置，以及为 K3s 准备主机操作系统所需的步骤。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/advanced"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/advanced" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/advanced" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">高级选项和配置 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/advanced"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="高级选项和配置 | K3s"><meta data-rh="true" name="description" content="本文描述了用于运行和管理 K3s 的高级设置，以及为 K3s 准备主机操作系统所需的步骤。"><meta data-rh="true" property="og:description" content="本文描述了用于运行和管理 K3s 的高级设置，以及为 K3s 准备主机操作系统所需的步骤。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/advanced"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/advanced" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/advanced" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/advanced" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">高级选项和配置</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>高级选项和配置</h1></header><p>本文描述了用于运行和管理 K3s 的高级设置，以及为 K3s 准备主机操作系统所需的步骤。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="证书管理">证书管理<a href="#证书管理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ca-证书">CA 证书<a href="#ca-证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 在第一个 Server 节点启动时生成自签名 CA 证书。这些 CA 证书的有效期为 10 年，不会自动更新。</p><p>有关使用自定义 CA 证书或更新自签名 CA 证书的信息，请参阅 <a href="/zh/cli/certificate#certificate-authority-ca-certificates"><code>k3s certificate rotate-ca</code> 命令文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="客户端和服务器证书">客户端和服务器证书<a href="#客户端和服务器证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 客户端和服务器证书自颁发日起 365 天内有效。每次启动 K3s 时，已过期或 90 天内过期的证书都会自动更新。</p><p>有关手动轮换客户端和服务器证书的信息，请参阅 <a href="/zh/cli/certificate#client-and-server-certificates"><code>k3s certificate rotate</code> 命令文档</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-管理">Token 管理<a href="#token-管理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>默认情况下，K3s 为 Server 和 Agent 使用单个静态 Token。创建集群后不能更改此 Token。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/advanced" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">高级选项和配置</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>高级选项和配置</h1></header><p>本文描述了用于运行和管理 K3s 的高级设置，以及为 K3s 准备主机操作系统所需的步骤。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="证书管理">证书管理<a href="#证书管理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ca-证书">CA 证书<a href="#ca-证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 在第一个 Server 节点启动时生成自签名 CA 证书。这些 CA 证书的有效期为 10 年，不会自动更新。</p><p>有关使用自定义 CA 证书或更新自签名 CA 证书的信息，请参阅 <a href="/zh/cli/certificate#certificate-authority-ca-certificates"><code>k3s certificate rotate-ca</code> 命令文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="客户端和服务器证书">客户端和服务器证书<a href="#客户端和服务器证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 客户端和服务器证书自颁发日起 365 天内有效。每次启动 K3s 时，已过期或 90 天内过期的证书都会自动更新。</p><p>有关手动轮换客户端和服务器证书的信息，请参阅 <a href="/zh/cli/certificate#client-and-server-certificates"><code>k3s certificate rotate</code> 命令文档</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-管理">Token 管理<a href="#token-管理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>默认情况下，K3s 为 Server 和 Agent 使用单个静态 Token。创建集群后不能更改此 Token。
 你可以启用只能用于加入 Agent 的第二个静态 Token，或创建自动过期的临时 <code>kubeadm</code> 联接样式 Token。
 有关详细信息，请参阅 <a href="/zh/cli/token"><code>k3s token</code> 命令文档</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="配置-http-代理">配置 HTTP 代理<a href="#配置-http-代理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如果你运行 K3s 的环境中只通过 HTTP 代理进行外部连接，你可以在 K3s 的 systemd 服务上配置代理。K3s 将使用这些代理设置，并向下传递到嵌入式 containerd 和 kubelet。</p><p>K3s 安装脚本会自动使用当前 shell 中的 <code>HTTP_PROXY</code>、<code>HTTPS_PROXY</code> 和 <code>NO_PROXY</code>，以及 <code>CONTAINERD_HTTP_PROXY</code>、<code>CONTAINERD_HTTPS_PROXY</code> 和 <code>CONTAINERD_NO_PROXY</code> 变量（如果存在），并将它们写入 systemd 服务的环境文件，通常是：</p><ul><li><code>/etc/systemd/system/k3s.service.env</code></li><li><code>/etc/systemd/system/k3s-agent.service.env</code></li></ul><p>你也可以通过编辑这些文件来配置代理。</p><p>K3s 会自动将集群内部 Pod 和 Service IP 范围以及集群 DNS 域添加到 <code>NO_PROXY</code> 条目列表中。你需要确保 Kubernetes 节点本身使用的 IP 地址范围（即节点的公共和私有 IP）包含在 <code>NO_PROXY</code> 列表中，或者可以通过代理访问节点。</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">HTTP_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">HTTPS_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果你想在不影响 K3s 和 Kubelet 的情况下为 containerd 配置代理，你可以在变量前加上 <code>CONTAINERD_</code>：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">CONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用-docker-作为容器运行时">使用 Docker 作为容器运行时<a href="#使用-docker-作为容器运行时" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 包含并默认为 <a href="https://containerd.io/" target="_blank" rel="noopener noreferrer">containerd</a>，它是一个行业标准的容器运行时。
 从 Kubernetes 1.24 开始，Kubelet 不再包含 dockershim，该组件允许 kubelet 与 dockerd 通信。
@@ -40,10 +40,10 @@
 有关 Lazy Pulling 和 eStargz 的更多信息，请参阅 <a href="https://github.com/containerd/stargz-snapshotter" target="_blank" rel="noopener noreferrer">Stargz Snapshotter 项目仓库</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="配置-k3s-进行-estargz-的-lazy-pulling">配置 K3s 进行 eStargz 的 Lazy Pulling<a href="#配置-k3s-进行-estargz-的-lazy-pulling" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如下所示，K3s Server 和 Agent 需要 <code>--snapshotter=stargz</code> 选项。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server --snapshotter</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">stargz</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>使用此配置，你可以对 eStargz 格式的镜像进行 Lazy Pulling。
 以下 Pod 清单示例使用 eStargz 格式的 <code>node:13.13.0</code> 镜像 (<code>ghcr.io/stargz-containers/node:13.13.0-esgz</code>)。
 当启用 stargz snapshotter 时，K3s 会对该镜像进行 lazy pulling。</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nodejs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nodejs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">estargz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ghcr.io/stargz</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">containers/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">13.13.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">esgz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">command</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;node&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">e</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> var http = require(&#x27;http&#x27;);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      http.createServer(function(req</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> res) </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        res.writeHead(200);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        res.end(&#x27;Hello World</span><span class="token tag" style="color:rgb(255, 85, 114)">!</span><span class="token plain">\n&#x27;);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain">).listen(80);</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="其他日志来源">其他日志来源<a href="#其他日志来源" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>你可以在不使用 Rancher 的情况下为 K3s 安装 <a href="https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/" target="_blank" rel="noopener noreferrer">Rancher Logging</a>。为此，你可以执行以下命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm repo </span><span class="token function" style="color:rgb(130, 170, 255)">add</span><span class="token plain"> rancher-charts https://charts.rancher.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm repo update</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">install</span><span class="token plain"> --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true rancher-charts/rancher-logging</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="其他网络策略日志">其他网络策略日志<a href="#其他网络策略日志" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>支持记录网络策略丢弃的数据包。数据包被发送到 iptables NFLOG 操作，它显示了数据包的详细信息，包括阻止它的网络策略。</p><p>如果流量很大，日志消息的数量可能会非常多。要在每个策略上控制日志速率，你可以在 question 的网络策略中添加以下注释，从而设置 <code>limit</code> 和 <code>limit-burst</code> iptables 参数：</p><ul><li><code>kube-router.io/netpol-nflog-limit=&lt;LIMIT-VALUE&gt;</code></li><li><code>kube-router.io/netpol-nflog-limit-burst=&lt;LIMIT-BURST-VALUE&gt;</code></li></ul><p>默认值为 <code>limit=10/minute</code> 和 <code>limit-burst=10</code>。你可以查看 <a href="https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches" target="_blank" rel="noopener noreferrer">iptables 手册</a>以进一步了解这些字段的格式和可选值。</p><p>要将 NFLOG 数据包转换为日志条目，请安装 ulogd2 并将 <code>[log1]</code> 配置为在 <code>group=100</code> 上读取。然后，重启 ulogd2 服务以提交新配置。
-当数据包被网络策略规则阻止时，日志消息将出现在 <code>/var/log/ulog/syslogemu.log</code> 中。</p><p>发送到 NFLOG netlink 套接字的数据包也可以使用 tcpdump 或 tshark 等命令行工具读取：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">tcpdump -ni nflog:100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>虽然更容易获得，但 tcpdump 不会显示阻止数据包的网络策略的名称。你可以使用 wireshark 的 tshark 命令来显示完整的 NFLOG 数据包标头，其中包括包含了策略名称的 <code>nflog.prefix</code> 字段。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/helm"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">Helm</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/faq"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">常见问题</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#证书管理" class="table-of-contents__link toc-highlight">证书管理</a><ul><li><a href="#ca-证书" class="table-of-contents__link toc-highlight">CA 证书</a></li><li><a href="#客户端和服务器证书" class="table-of-contents__link toc-highlight">客户端和服务器证书</a></li></ul></li><li><a href="#token-管理" class="table-of-contents__link toc-highlight">Token 管理</a></li><li><a href="#配置-http-代理" class="table-of-contents__link toc-highlight">配置 HTTP 代理</a></li><li><a href="#使用-docker-作为容器运行时" class="table-of-contents__link toc-highlight">使用 Docker 作为容器运行时</a></li><li><a href="#使用-etcdctl" class="table-of-contents__link toc-highlight">使用 etcdctl</a></li><li><a href="#配置-containerd" class="table-of-contents__link toc-highlight">配置 Containerd</a></li><li><a href="#nvidia-容器运行时支持" class="table-of-contents__link toc-highlight">NVIDIA 容器运行时支持</a></li><li><a href="#运行无-agent-的-server实验性" class="table-of-contents__link toc-highlight">运行无 Agent 的 Server（实验性）</a></li><li><a href="#使用-rootless-模式运行-server实验性" class="table-of-contents__link toc-highlight">使用 Rootless 模式运行 Server（实验性）</a><ul><li><a href="#rootless-模式的已知问题" class="table-of-contents__link toc-highlight">Rootless 模式的已知问题</a></li><li><a href="#启动-rootless-server" class="table-of-contents__link toc-highlight">启动 Rootless Server</a></li><li><a href="#高级无根配置" class="table-of-contents__link toc-highlight">高级无根配置</a></li><li><a href="#rootless-模式故障排除" class="table-of-contents__link toc-highlight">Rootless 模式故障排除</a></li></ul></li><li><a href="#节点标签和污点" class="table-of-contents__link toc-highlight">节点标签和污点</a></li><li><a href="#使用安装脚本启动服务" class="table-of-contents__link toc-highlight">使用安装脚本启动服务</a></li><li><a href="#其他操作系统准备" class="table-of-contents__link toc-highlight">其他操作系统准备</a><ul><li><a href="#旧的-iptables-版本" class="table-of-contents__link toc-highlight">旧的 iptables 版本</a></li><li><a href="#red-hat-enterprise-linux--centos" class="table-of-contents__link toc-highlight">Red Hat Enterprise Linux / CentOS</a></li><li><a href="#ubuntu" class="table-of-contents__link toc-highlight">Ubuntu</a></li><li><a href="#raspberry-pi" class="table-of-contents__link toc-highlight">Raspberry Pi</a></li></ul></li><li><a href="#在-docker-中运行-k3s" class="table-of-contents__link toc-highlight">在 Docker 中运行 K3s</a></li><li><a href="#selinux-支持" class="table-of-contents__link toc-highlight">SELinux 支持</a><ul><li><a href="#启用-selinux-强制执行" class="table-of-contents__link toc-highlight">启用 SELinux 强制执行</a></li></ul></li><li><a href="#启用-estargz-的-lazy-pulling实验性" class="table-of-contents__link toc-highlight">启用 eStargz 的 Lazy Pulling（实验性）</a><ul><li><a href="#什么是-lazy-pulling-和-estargz" class="table-of-contents__link toc-highlight">什么是 Lazy Pulling 和 eStargz？</a></li><li><a href="#配置-k3s-进行-estargz-的-lazy-pulling" class="table-of-contents__link toc-highlight">配置 K3s 进行 eStargz 的 Lazy Pulling</a></li></ul></li><li><a href="#其他日志来源" class="table-of-contents__link toc-highlight">其他日志来源</a></li><li><a href="#其他网络策略日志" class="table-of-contents__link toc-highlight">其他网络策略日志</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+当数据包被网络策略规则阻止时，日志消息将出现在 <code>/var/log/ulog/syslogemu.log</code> 中。</p><p>发送到 NFLOG netlink 套接字的数据包也可以使用 tcpdump 或 tshark 等命令行工具读取：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">tcpdump -ni nflog:100</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>虽然更容易获得，但 tcpdump 不会显示阻止数据包的网络策略的名称。你可以使用 wireshark 的 tshark 命令来显示完整的 NFLOG 数据包标头，其中包括包含了策略名称的 <code>nflog.prefix</code> 字段。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/helm"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">Helm</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/faq"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">常见问题</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#证书管理" class="table-of-contents__link toc-highlight">证书管理</a><ul><li><a href="#ca-证书" class="table-of-contents__link toc-highlight">CA 证书</a></li><li><a href="#客户端和服务器证书" class="table-of-contents__link toc-highlight">客户端和服务器证书</a></li></ul></li><li><a href="#token-管理" class="table-of-contents__link toc-highlight">Token 管理</a></li><li><a href="#配置-http-代理" class="table-of-contents__link toc-highlight">配置 HTTP 代理</a></li><li><a href="#使用-docker-作为容器运行时" class="table-of-contents__link toc-highlight">使用 Docker 作为容器运行时</a></li><li><a href="#使用-etcdctl" class="table-of-contents__link toc-highlight">使用 etcdctl</a></li><li><a href="#配置-containerd" class="table-of-contents__link toc-highlight">配置 Containerd</a></li><li><a href="#nvidia-容器运行时支持" class="table-of-contents__link toc-highlight">NVIDIA 容器运行时支持</a></li><li><a href="#运行无-agent-的-server实验性" class="table-of-contents__link toc-highlight">运行无 Agent 的 Server（实验性）</a></li><li><a href="#使用-rootless-模式运行-server实验性" class="table-of-contents__link toc-highlight">使用 Rootless 模式运行 Server（实验性）</a><ul><li><a href="#rootless-模式的已知问题" class="table-of-contents__link toc-highlight">Rootless 模式的已知问题</a></li><li><a href="#启动-rootless-server" class="table-of-contents__link toc-highlight">启动 Rootless Server</a></li><li><a href="#高级无根配置" class="table-of-contents__link toc-highlight">高级无根配置</a></li><li><a href="#rootless-模式故障排除" class="table-of-contents__link toc-highlight">Rootless 模式故障排除</a></li></ul></li><li><a href="#节点标签和污点" class="table-of-contents__link toc-highlight">节点标签和污点</a></li><li><a href="#使用安装脚本启动服务" class="table-of-contents__link toc-highlight">使用安装脚本启动服务</a></li><li><a href="#其他操作系统准备" class="table-of-contents__link toc-highlight">其他操作系统准备</a><ul><li><a href="#旧的-iptables-版本" class="table-of-contents__link toc-highlight">旧的 iptables 版本</a></li><li><a href="#red-hat-enterprise-linux--centos" class="table-of-contents__link toc-highlight">Red Hat Enterprise Linux / CentOS</a></li><li><a href="#ubuntu" class="table-of-contents__link toc-highlight">Ubuntu</a></li><li><a href="#raspberry-pi" class="table-of-contents__link toc-highlight">Raspberry Pi</a></li></ul></li><li><a href="#在-docker-中运行-k3s" class="table-of-contents__link toc-highlight">在 Docker 中运行 K3s</a></li><li><a href="#selinux-支持" class="table-of-contents__link toc-highlight">SELinux 支持</a><ul><li><a href="#启用-selinux-强制执行" class="table-of-contents__link toc-highlight">启用 SELinux 强制执行</a></li></ul></li><li><a href="#启用-estargz-的-lazy-pulling实验性" class="table-of-contents__link toc-highlight">启用 eStargz 的 Lazy Pulling（实验性）</a><ul><li><a href="#什么是-lazy-pulling-和-estargz" class="table-of-contents__link toc-highlight">什么是 Lazy Pulling 和 eStargz？</a></li><li><a href="#配置-k3s-进行-estargz-的-lazy-pulling" class="table-of-contents__link toc-highlight">配置 K3s 进行 eStargz 的 Lazy Pulling</a></li></ul></li><li><a href="#其他日志来源" class="table-of-contents__link toc-highlight">其他日志来源</a></li><li><a href="#其他网络策略日志" class="table-of-contents__link toc-highlight">其他网络策略日志</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/architecture.html b/zh/architecture.html
index 89d3345fd..83127be6b 100644
--- a/zh/architecture.html
+++ b/zh/architecture.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">架构 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/architecture"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="架构 | K3s"><meta data-rh="true" name="description" content="本文介绍了高可用（HA）K3s 服务器集群的架构，以及 K3s 与单节点服务器集群的区别。"><meta data-rh="true" property="og:description" content="本文介绍了高可用（HA）K3s 服务器集群的架构，以及 K3s 与单节点服务器集群的区别。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/architecture"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/architecture" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/architecture" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">架构 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/architecture"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="架构 | K3s"><meta data-rh="true" name="description" content="本文介绍了高可用（HA）K3s 服务器集群的架构，以及 K3s 与单节点服务器集群的区别。"><meta data-rh="true" property="og:description" content="本文介绍了高可用（HA）K3s 服务器集群的架构，以及 K3s 与单节点服务器集群的区别。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/architecture"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/architecture" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/architecture" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/architecture" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">架构</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>架构</h1></header><p>本文介绍了高可用（HA）K3s 服务器集群的架构，以及 K3s 与单节点服务器集群的区别。</p><p>本文还描述了 Agent 节点是如何注册到 K3s Server 的。</p><ul><li>Server 节点指的是运行 <code>k3s server</code> 命令的主机，control plane 和数据存储组件由 K3s 管理。</li><li>Agent 节点指的是运行 <code>k3s agent</code> 命令的主机，不具有任何数据存储或 control plane 组件。</li><li>Server 和 Agent 都运行 kubelet、容器运行时和 CNI。有关运行无 Agent 的 Server 的更多信息，请参阅<a href="/zh/advanced#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7">高级选项</a>。</li></ul><p><img loading="lazy" src="/zh/assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg" width="1562" height="898" class="img_ev3q"></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="带有嵌入式数据库的单服务器设置">带有嵌入式数据库的单服务器设置<a href="#带有嵌入式数据库的单服务器设置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>下图显示了具有嵌入式 SQLite 数据库的单节点 K3s Server 集群示例。</p><p>在此配置中，每个 Agent 节点都注册到同一个 Server 节点。K3s 用户可以通过调用 Server 节点上的 K3s API 来操作 Kubernetes 资源。</p><img src="/zh/img/k3s-architecture-single-server.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-architecture-single-server-dark.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="高可用-k3s">高可用 K3s<a href="#高可用-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>单服务器集群可以满足各种用例，但如果你的环境对 Kubernetes control plane 的正常运行时间有要求，你可以在 HA 配置中运行 K3s。一个高可用 K3s 集群包括：</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">嵌入式数据库</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">外部数据库</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><ul><li>三个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务</li><li><strong>嵌入式 etcd 数据存储</strong>（与单节点设置中使用的嵌入式 SQLite 数据存储相反）</li></ul><img src="/zh/img/k3s-architecture-ha-embedded.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-architecture-ha-embedded-dark.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--dark_i4oU"></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><ul><li>两个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务</li><li><strong>外部数据存储</strong>（例如 MySQL、PostgreSQL 或 etcd）</li></ul><img src="/zh/img/k3s-architecture-ha-external.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-architecture-ha-external-dark.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--dark_i4oU"></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent-节点的固定注册地址">Agent 节点的固定注册地址<a href="#agent-节点的固定注册地址" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>在 HA 服务器配置中，每个节点都能使用固定的注册地址向 Kubernetes API 注册，如下图所示。</p><p>注册后，Agent 节点直接与其中一个 Server 节点建立连接。</p><img src="/zh/img/k3s-production-setup.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-production-setup-dark.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent-节点注册的工作原理">Agent 节点注册的工作原理<a href="#agent-节点注册的工作原理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Agent 节点通过 <code>k3s agent</code> 进程发起的 WebSocket 连接进行注册，连接由作为 agent 进程一部分运行的客户端负载均衡器维护。最初，Agent 通过本地负载均衡器端口 6443 连接到 supervisor（和 kube-apiserver）。负载均衡器维护了一个要连接的可用端点列表。默认（也是最初唯一的）端点由 <code>--server</code> 地址中的主机名播种。连接到集群后，Agent 会从默认命名空间中的 Kubernetes Service 端点列表中检索 kube-apiserver 地址列表。这些端点添加到负载均衡器，然后负载均衡器将保持与集群中所有 Server 稳定连接，提供与 kube-apiserver 的连接，从而容忍单个 Server 的中断。</p><p>Agent 将使用节点集群 Secret 以及随机生成的节点密码注册到 Server，密码存储在 <code>/etc/rancher/node/password</code> 中。Server 会将各个节点的密码存储为 Kubernetes Secret，后续的任何尝试都必须使用相同的密码。节点密码 Secret 存储在 <code>kube-system</code> 命名空间中，名称使用 <code>&lt;host&gt;.node-password.k3s</code> 模板。这样做是为了保护节点 ID 的完整性。</p><p>如果 Agent 的 <code>/etc/rancher/node</code> 目录被删除，或者你希望使用现有名称重新加入节点，那么你需要从集群中删除该节点。这将清除旧节点条目和节点密码 Secret，并允许节点（重新）加入集群。</p><p>如果你经常重复使用主机名，但无法删除节点密码 Secret，你可以使用 <code>--with-node-id</code> 标志启动 K3s Server 或 Agent，从而将唯一的节点 ID 自动附加到主机名。启用后，节点 ID 也存储在 <code>/etc/rancher/node/</code> 中。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">K3s - 轻量级 Kubernetes</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/quick-start"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">快速入门指南</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#带有嵌入式数据库的单服务器设置" class="table-of-contents__link toc-highlight">带有嵌入式数据库的单服务器设置</a></li><li><a href="#高可用-k3s" class="table-of-contents__link toc-highlight">高可用 K3s</a></li><li><a href="#agent-节点的固定注册地址" class="table-of-contents__link toc-highlight">Agent 节点的固定注册地址</a></li><li><a href="#agent-节点注册的工作原理" class="table-of-contents__link toc-highlight">Agent 节点注册的工作原理</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/architecture" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">架构</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>架构</h1></header><p>本文介绍了高可用（HA）K3s 服务器集群的架构，以及 K3s 与单节点服务器集群的区别。</p><p>本文还描述了 Agent 节点是如何注册到 K3s Server 的。</p><ul><li>Server 节点指的是运行 <code>k3s server</code> 命令的主机，control plane 和数据存储组件由 K3s 管理。</li><li>Agent 节点指的是运行 <code>k3s agent</code> 命令的主机，不具有任何数据存储或 control plane 组件。</li><li>Server 和 Agent 都运行 kubelet、容器运行时和 CNI。有关运行无 Agent 的 Server 的更多信息，请参阅<a href="/zh/advanced#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7">高级选项</a>。</li></ul><p><img loading="lazy" src="/zh/assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg" width="1562" height="898" class="img_ev3q"></p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="带有嵌入式数据库的单服务器设置">带有嵌入式数据库的单服务器设置<a href="#带有嵌入式数据库的单服务器设置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>下图显示了具有嵌入式 SQLite 数据库的单节点 K3s Server 集群示例。</p><p>在此配置中，每个 Agent 节点都注册到同一个 Server 节点。K3s 用户可以通过调用 Server 节点上的 K3s API 来操作 Kubernetes 资源。</p><img src="/zh/img/k3s-architecture-single-server.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-architecture-single-server-dark.svg" alt="K3s Architecture with a Single Server" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="高可用-k3s">高可用 K3s<a href="#高可用-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>单服务器集群可以满足各种用例，但如果你的环境对 Kubernetes control plane 的正常运行时间有要求，你可以在 HA 配置中运行 K3s。一个高可用 K3s 集群包括：</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">嵌入式数据库</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">外部数据库</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><ul><li>三个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务</li><li><strong>嵌入式 etcd 数据存储</strong>（与单节点设置中使用的嵌入式 SQLite 数据存储相反）</li></ul><img src="/zh/img/k3s-architecture-ha-embedded.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-architecture-ha-embedded-dark.svg" alt="K3s Architecture with High-availability Servers" class="themedImage_ToTc themedImage--dark_i4oU"></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><ul><li>两个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务</li><li><strong>外部数据存储</strong>（例如 MySQL、PostgreSQL 或 etcd）</li></ul><img src="/zh/img/k3s-architecture-ha-external.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-architecture-ha-external-dark.svg" alt="K3s Architecture with High-availability Servers and an External DB" class="themedImage_ToTc themedImage--dark_i4oU"></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent-节点的固定注册地址">Agent 节点的固定注册地址<a href="#agent-节点的固定注册地址" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>在 HA 服务器配置中，每个节点都能使用固定的注册地址向 Kubernetes API 注册，如下图所示。</p><p>注册后，Agent 节点直接与其中一个 Server 节点建立连接。</p><img src="/zh/img/k3s-production-setup.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-production-setup-dark.svg" alt="Agent Registration HA" class="themedImage_ToTc themedImage--dark_i4oU"><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent-节点注册的工作原理">Agent 节点注册的工作原理<a href="#agent-节点注册的工作原理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Agent 节点通过 <code>k3s agent</code> 进程发起的 WebSocket 连接进行注册，连接由作为 agent 进程一部分运行的客户端负载均衡器维护。最初，Agent 通过本地负载均衡器端口 6443 连接到 supervisor（和 kube-apiserver）。负载均衡器维护了一个要连接的可用端点列表。默认（也是最初唯一的）端点由 <code>--server</code> 地址中的主机名播种。连接到集群后，Agent 会从默认命名空间中的 Kubernetes Service 端点列表中检索 kube-apiserver 地址列表。这些端点添加到负载均衡器，然后负载均衡器将保持与集群中所有 Server 稳定连接，提供与 kube-apiserver 的连接，从而容忍单个 Server 的中断。</p><p>Agent 将使用节点集群 Secret 以及随机生成的节点密码注册到 Server，密码存储在 <code>/etc/rancher/node/password</code> 中。Server 会将各个节点的密码存储为 Kubernetes Secret，后续的任何尝试都必须使用相同的密码。节点密码 Secret 存储在 <code>kube-system</code> 命名空间中，名称使用 <code>&lt;host&gt;.node-password.k3s</code> 模板。这样做是为了保护节点 ID 的完整性。</p><p>如果 Agent 的 <code>/etc/rancher/node</code> 目录被删除，或者你希望使用现有名称重新加入节点，那么你需要从集群中删除该节点。这将清除旧节点条目和节点密码 Secret，并允许节点（重新）加入集群。</p><p>如果你经常重复使用主机名，但无法删除节点密码 Secret，你可以使用 <code>--with-node-id</code> 标志启动 K3s Server 或 Agent，从而将唯一的节点 ID 自动附加到主机名。启用后，节点 ID 也存储在 <code>/etc/rancher/node/</code> 中。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">K3s - 轻量级 Kubernetes</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/quick-start"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">快速入门指南</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#带有嵌入式数据库的单服务器设置" class="table-of-contents__link toc-highlight">带有嵌入式数据库的单服务器设置</a></li><li><a href="#高可用-k3s" class="table-of-contents__link toc-highlight">高可用 K3s</a></li><li><a href="#agent-节点的固定注册地址" class="table-of-contents__link toc-highlight">Agent 节点的固定注册地址</a></li><li><a href="#agent-节点注册的工作原理" class="table-of-contents__link toc-highlight">Agent 节点注册的工作原理</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/assets/css/styles.45a60ef8.css b/zh/assets/css/styles.45a60ef8.css
new file mode 100644
index 000000000..74039d258
--- /dev/null
+++ b/zh/assets/css/styles.45a60ef8.css
@@ -0,0 +1 @@
+.col,.container{padding:0 var(--ifm-spacing-horizontal);width:100%}.markdown>h2,.markdown>h3,.markdown>h4,.markdown>h5,.markdown>h6{margin-bottom:calc(var(--ifm-heading-vertical-rhythm-bottom)*var(--ifm-leading))}pre,table{overflow:auto}blockquote,pre{margin:0 0 var(--ifm-spacing-vertical)}.breadcrumbs__link,.button{transition-timing-function:var(--ifm-transition-timing-default)}.button,code{vertical-align:middle}.button--outline.button--active,.button--outline:active,.button--outline:hover,:root{--ifm-button-color:var(--ifm-font-color-base-inverse)}.menu__link:hover,a{transition:color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.navbar--dark,:root{--ifm-navbar-link-hover-color:var(--ifm-color-primary)}.menu,.navbar-sidebar{overflow-x:hidden}:root,html[data-theme=dark]{--ifm-color-emphasis-500:var(--ifm-color-gray-500)}.markdown li,body{word-wrap:break-word}.toggleButton_gllP,html{-webkit-tap-highlight-color:transparent}*,.loadingRing_RJI3 div{box-sizing:border-box}.clean-list,.containsTaskList_mC6p,.details_lb9f>summary,.dropdown__menu,.menu__list{list-style:none}:root{--ifm-color-scheme:light;--ifm-dark-value:10%;--ifm-darker-value:15%;--ifm-darkest-value:30%;--ifm-light-value:15%;--ifm-lighter-value:30%;--ifm-lightest-value:50%;--ifm-contrast-background-value:90%;--ifm-contrast-foreground-value:70%;--ifm-contrast-background-dark-value:70%;--ifm-contrast-foreground-dark-value:90%;--ifm-color-primary:#3578e5;--ifm-color-secondary:#ebedf0;--ifm-color-success:#00a400;--ifm-color-info:#54c7ec;--ifm-color-warning:#ffba00;--ifm-color-danger:#fa383e;--ifm-color-primary-dark:#306cce;--ifm-color-primary-darker:#2d66c3;--ifm-color-primary-darkest:#2554a0;--ifm-color-primary-light:#538ce9;--ifm-color-primary-lighter:#72a1ed;--ifm-color-primary-lightest:#9abcf2;--ifm-color-primary-contrast-background:#ebf2fc;--ifm-color-primary-contrast-foreground:#102445;--ifm-color-secondary-dark:#d4d5d8;--ifm-color-secondary-darker:#c8c9cc;--ifm-color-secondary-darkest:#a4a6a8;--ifm-color-secondary-light:#eef0f2;--ifm-color-secondary-lighter:#f1f2f5;--ifm-color-secondary-lightest:#f5f6f8;--ifm-color-secondary-contrast-background:#fdfdfe;--ifm-color-secondary-contrast-foreground:#474748;--ifm-color-success-dark:#009400;--ifm-color-success-darker:#008b00;--ifm-color-success-darkest:#007300;--ifm-color-success-light:#26b226;--ifm-color-success-lighter:#4dbf4d;--ifm-color-success-lightest:#80d280;--ifm-color-success-contrast-background:#e6f6e6;--ifm-color-success-contrast-foreground:#003100;--ifm-color-info-dark:#4cb3d4;--ifm-color-info-darker:#47a9c9;--ifm-color-info-darkest:#3b8ba5;--ifm-color-info-light:#6ecfef;--ifm-color-info-lighter:#87d8f2;--ifm-color-info-lightest:#aae3f6;--ifm-color-info-contrast-background:#eef9fd;--ifm-color-info-contrast-foreground:#193c47;--ifm-color-warning-dark:#e6a700;--ifm-color-warning-darker:#d99e00;--ifm-color-warning-darkest:#b38200;--ifm-color-warning-light:#ffc426;--ifm-color-warning-lighter:#ffcf4d;--ifm-color-warning-lightest:#ffdd80;--ifm-color-warning-contrast-background:#fff8e6;--ifm-color-warning-contrast-foreground:#4d3800;--ifm-color-danger-dark:#e13238;--ifm-color-danger-darker:#d53035;--ifm-color-danger-darkest:#af272b;--ifm-color-danger-light:#fb565b;--ifm-color-danger-lighter:#fb7478;--ifm-color-danger-lightest:#fd9c9f;--ifm-color-danger-contrast-background:#ffebec;--ifm-color-danger-contrast-foreground:#4b1113;--ifm-color-white:#fff;--ifm-color-black:#000;--ifm-color-gray-0:var(--ifm-color-white);--ifm-color-gray-100:#f5f6f7;--ifm-color-gray-200:#ebedf0;--ifm-color-gray-300:#dadde1;--ifm-color-gray-400:#ccd0d5;--ifm-color-gray-500:#bec3c9;--ifm-color-gray-600:#8d949e;--ifm-color-gray-700:#606770;--ifm-color-gray-800:#444950;--ifm-color-gray-900:#1c1e21;--ifm-color-gray-1000:var(--ifm-color-black);--ifm-color-emphasis-0:var(--ifm-color-gray-0);--ifm-color-emphasis-100:var(--ifm-color-gray-100);--ifm-color-emphasis-200:var(--ifm-color-gray-200);--ifm-color-emphasis-300:var(--ifm-color-gray-300);--ifm-color-emphasis-400:var(--ifm-color-gray-400);--ifm-color-emphasis-600:var(--ifm-color-gray-600);--ifm-color-emphasis-700:var(--ifm-color-gray-700);--ifm-color-emphasis-800:var(--ifm-color-gray-800);--ifm-color-emphasis-900:var(--ifm-color-gray-900);--ifm-color-emphasis-1000:var(--ifm-color-gray-1000);--ifm-color-content:var(--ifm-color-emphasis-900);--ifm-color-content-inverse:var(--ifm-color-emphasis-0);--ifm-color-content-secondary:#525860;--ifm-background-color:#0000;--ifm-background-surface-color:var(--ifm-color-content-inverse);--ifm-global-border-width:1px;--ifm-global-radius:0.4rem;--ifm-hover-overlay:#0000000d;--ifm-font-color-base:var(--ifm-color-content);--ifm-font-color-base-inverse:var(--ifm-color-content-inverse);--ifm-font-color-secondary:var(--ifm-color-content-secondary);--ifm-font-family-base:system-ui,-apple-system,Segoe UI,Roboto,Ubuntu,Cantarell,Noto Sans,sans-serif,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--ifm-font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--ifm-font-size-base:100%;--ifm-font-weight-light:300;--ifm-font-weight-normal:400;--ifm-font-weight-semibold:500;--ifm-font-weight-bold:700;--ifm-font-weight-base:var(--ifm-font-weight-normal);--ifm-line-height-base:1.65;--ifm-global-spacing:1rem;--ifm-spacing-vertical:var(--ifm-global-spacing);--ifm-spacing-horizontal:var(--ifm-global-spacing);--ifm-transition-fast:200ms;--ifm-transition-slow:400ms;--ifm-transition-timing-default:cubic-bezier(0.08,0.52,0.52,1);--ifm-global-shadow-lw:0 1px 2px 0 #0000001a;--ifm-global-shadow-md:0 5px 40px #0003;--ifm-global-shadow-tl:0 12px 28px 0 #0003,0 2px 4px 0 #0000001a;--ifm-z-index-dropdown:100;--ifm-z-index-fixed:200;--ifm-z-index-overlay:400;--ifm-container-width:1140px;--ifm-container-width-xl:1320px;--ifm-code-background:#f6f7f8;--ifm-code-border-radius:var(--ifm-global-radius);--ifm-code-font-size:90%;--ifm-code-padding-horizontal:0.1rem;--ifm-code-padding-vertical:0.1rem;--ifm-pre-background:var(--ifm-code-background);--ifm-pre-border-radius:var(--ifm-code-border-radius);--ifm-pre-color:inherit;--ifm-pre-line-height:1.45;--ifm-pre-padding:1rem;--ifm-heading-color:inherit;--ifm-heading-margin-top:0;--ifm-heading-margin-bottom:var(--ifm-spacing-vertical);--ifm-heading-font-family:var(--ifm-font-family-base);--ifm-heading-font-weight:var(--ifm-font-weight-bold);--ifm-heading-line-height:1.25;--ifm-h1-font-size:2rem;--ifm-h2-font-size:1.5rem;--ifm-h3-font-size:1.25rem;--ifm-h4-font-size:1rem;--ifm-h5-font-size:0.875rem;--ifm-h6-font-size:0.85rem;--ifm-image-alignment-padding:1.25rem;--ifm-leading-desktop:1.25;--ifm-leading:calc(var(--ifm-leading-desktop)*1rem);--ifm-list-left-padding:2rem;--ifm-list-margin:1rem;--ifm-list-item-margin:0.25rem;--ifm-list-paragraph-margin:1rem;--ifm-table-cell-padding:0.75rem;--ifm-table-background:#0000;--ifm-table-stripe-background:#00000008;--ifm-table-border-width:1px;--ifm-table-border-color:var(--ifm-color-emphasis-300);--ifm-table-head-background:inherit;--ifm-table-head-color:inherit;--ifm-table-head-font-weight:var(--ifm-font-weight-bold);--ifm-table-cell-color:inherit;--ifm-link-color:var(--ifm-color-primary);--ifm-link-decoration:none;--ifm-link-hover-color:var(--ifm-link-color);--ifm-link-hover-decoration:underline;--ifm-paragraph-margin-bottom:var(--ifm-leading);--ifm-blockquote-font-size:var(--ifm-font-size-base);--ifm-blockquote-border-left-width:2px;--ifm-blockquote-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-blockquote-padding-vertical:0;--ifm-blockquote-shadow:none;--ifm-blockquote-color:var(--ifm-color-emphasis-800);--ifm-blockquote-border-color:var(--ifm-color-emphasis-300);--ifm-hr-background-color:var(--ifm-color-emphasis-500);--ifm-hr-height:1px;--ifm-hr-margin-vertical:1.5rem;--ifm-scrollbar-size:7px;--ifm-scrollbar-track-background-color:#f1f1f1;--ifm-scrollbar-thumb-background-color:silver;--ifm-scrollbar-thumb-hover-background-color:#a7a7a7;--ifm-alert-background-color:inherit;--ifm-alert-border-color:inherit;--ifm-alert-border-radius:var(--ifm-global-radius);--ifm-alert-border-width:0px;--ifm-alert-border-left-width:5px;--ifm-alert-color:var(--ifm-font-color-base);--ifm-alert-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-alert-padding-vertical:var(--ifm-spacing-vertical);--ifm-alert-shadow:var(--ifm-global-shadow-lw);--ifm-avatar-intro-margin:1rem;--ifm-avatar-intro-alignment:inherit;--ifm-avatar-photo-size:3rem;--ifm-badge-background-color:inherit;--ifm-badge-border-color:inherit;--ifm-badge-border-radius:var(--ifm-global-radius);--ifm-badge-border-width:var(--ifm-global-border-width);--ifm-badge-color:var(--ifm-color-white);--ifm-badge-padding-horizontal:calc(var(--ifm-spacing-horizontal)*0.5);--ifm-badge-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-breadcrumb-border-radius:1.5rem;--ifm-breadcrumb-spacing:0.5rem;--ifm-breadcrumb-color-active:var(--ifm-color-primary);--ifm-breadcrumb-item-background-active:var(--ifm-hover-overlay);--ifm-breadcrumb-padding-horizontal:0.8rem;--ifm-breadcrumb-padding-vertical:0.4rem;--ifm-breadcrumb-size-multiplier:1;--ifm-breadcrumb-separator:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="0 0 256 256"><g><g><polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128"/></g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g></svg>');--ifm-breadcrumb-separator-filter:none;--ifm-breadcrumb-separator-size:0.5rem;--ifm-breadcrumb-separator-size-multiplier:1.25;--ifm-button-background-color:inherit;--ifm-button-border-color:var(--ifm-button-background-color);--ifm-button-border-width:var(--ifm-global-border-width);--ifm-button-font-weight:var(--ifm-font-weight-bold);--ifm-button-padding-horizontal:1.5rem;--ifm-button-padding-vertical:0.375rem;--ifm-button-size-multiplier:1;--ifm-button-transition-duration:var(--ifm-transition-fast);--ifm-button-border-radius:calc(var(--ifm-global-radius)*var(--ifm-button-size-multiplier));--ifm-button-group-spacing:2px;--ifm-card-background-color:var(--ifm-background-surface-color);--ifm-card-border-radius:calc(var(--ifm-global-radius)*2);--ifm-card-horizontal-spacing:var(--ifm-global-spacing);--ifm-card-vertical-spacing:var(--ifm-global-spacing);--ifm-toc-border-color:var(--ifm-color-emphasis-300);--ifm-toc-link-color:var(--ifm-color-content-secondary);--ifm-toc-padding-vertical:0.5rem;--ifm-toc-padding-horizontal:0.5rem;--ifm-dropdown-background-color:var(--ifm-background-surface-color);--ifm-dropdown-font-weight:var(--ifm-font-weight-semibold);--ifm-dropdown-link-color:var(--ifm-font-color-base);--ifm-dropdown-hover-background-color:var(--ifm-hover-overlay);--ifm-footer-background-color:var(--ifm-color-emphasis-100);--ifm-footer-color:inherit;--ifm-footer-link-color:var(--ifm-color-emphasis-700);--ifm-footer-link-hover-color:var(--ifm-color-primary);--ifm-footer-link-horizontal-spacing:0.5rem;--ifm-footer-padding-horizontal:calc(var(--ifm-spacing-horizontal)*2);--ifm-footer-padding-vertical:calc(var(--ifm-spacing-vertical)*2);--ifm-footer-title-color:inherit;--ifm-footer-logo-max-width:min(30rem,90vw);--ifm-hero-background-color:var(--ifm-background-surface-color);--ifm-hero-text-color:var(--ifm-color-emphasis-800);--ifm-menu-color:var(--ifm-color-emphasis-700);--ifm-menu-color-active:var(--ifm-color-primary);--ifm-menu-color-background-active:var(--ifm-hover-overlay);--ifm-menu-color-background-hover:var(--ifm-hover-overlay);--ifm-menu-link-padding-horizontal:0.75rem;--ifm-menu-link-padding-vertical:0.375rem;--ifm-menu-link-sublist-icon:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" width="16px" height="16px" viewBox="0 0 24 24"><path fill="rgba(0,0,0,0.5)" d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>');--ifm-menu-link-sublist-icon-filter:none;--ifm-navbar-background-color:var(--ifm-background-surface-color);--ifm-navbar-height:3.75rem;--ifm-navbar-item-padding-horizontal:0.75rem;--ifm-navbar-item-padding-vertical:0.25rem;--ifm-navbar-link-color:var(--ifm-font-color-base);--ifm-navbar-link-active-color:var(--ifm-link-color);--ifm-navbar-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-navbar-padding-vertical:calc(var(--ifm-spacing-vertical)*0.5);--ifm-navbar-shadow:var(--ifm-global-shadow-lw);--ifm-navbar-search-input-background-color:var(--ifm-color-emphasis-200);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-800);--ifm-navbar-search-input-placeholder-color:var(--ifm-color-emphasis-500);--ifm-navbar-search-input-icon:url('data:image/svg+xml;utf8,<svg fill="currentColor" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" height="16px" width="16px"><path d="M6.02945,10.20327a4.17382,4.17382,0,1,1,4.17382-4.17382A4.15609,4.15609,0,0,1,6.02945,10.20327Zm9.69195,4.2199L10.8989,9.59979A5.88021,5.88021,0,0,0,12.058,6.02856,6.00467,6.00467,0,1,0,9.59979,10.8989l4.82338,4.82338a.89729.89729,0,0,0,1.29912,0,.89749.89749,0,0,0-.00087-1.29909Z" /></svg>');--ifm-navbar-sidebar-width:83vw;--ifm-pagination-border-radius:var(--ifm-global-radius);--ifm-pagination-color-active:var(--ifm-color-primary);--ifm-pagination-font-size:1rem;--ifm-pagination-item-active-background:var(--ifm-hover-overlay);--ifm-pagination-page-spacing:0.2em;--ifm-pagination-padding-horizontal:calc(var(--ifm-spacing-horizontal)*1);--ifm-pagination-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-pagination-nav-border-radius:var(--ifm-global-radius);--ifm-pagination-nav-color-hover:var(--ifm-color-primary);--ifm-pills-color-active:var(--ifm-color-primary);--ifm-pills-color-background-active:var(--ifm-hover-overlay);--ifm-pills-spacing:0.125rem;--ifm-tabs-color:var(--ifm-font-color-secondary);--ifm-tabs-color-active:var(--ifm-color-primary);--ifm-tabs-color-active-border:var(--ifm-tabs-color-active);--ifm-tabs-padding-horizontal:1rem;--ifm-tabs-padding-vertical:1rem;--docusaurus-progress-bar-color:var(--ifm-color-primary);--ifm-color-primary:#06527a;--ifm-color-primary-dark:#054a6e;--ifm-color-primary-darker:#054668;--ifm-color-primary-darkest:#043955;--ifm-color-primary-light:#075a86;--ifm-color-primary-lighter:#075e8c;--ifm-color-primary-lightest:#086b9f;--ifm-color-secondary:#ffc61c;--ifm-color-secondary-light:#ffcd38;--dark:#33313b;--light:#f3f3f3;--docusaurus-announcement-bar-height:auto;--docusaurus-tag-list-border:var(--ifm-color-emphasis-300);--docusaurus-collapse-button-bg:#0000;--docusaurus-collapse-button-bg-hover:#0000001a;--doc-sidebar-width:300px;--doc-sidebar-hidden-width:30px}.badge--danger,.badge--info,.badge--primary,.badge--secondary,.badge--success,.badge--warning{--ifm-badge-border-color:var(--ifm-badge-background-color)}.button--link,.button--outline{--ifm-button-background-color:#0000}html{-webkit-font-smoothing:antialiased;-webkit-text-size-adjust:100%;text-size-adjust:100%;background-color:var(--ifm-background-color);color:var(--ifm-font-color-base);color-scheme:var(--ifm-color-scheme);font:var(--ifm-font-size-base)/var(--ifm-line-height-base) var(--ifm-font-family-base);text-rendering:optimizelegibility}iframe{border:0;color-scheme:auto}.container{margin:0 auto;max-width:var(--ifm-container-width)}.container--fluid{max-width:inherit}.row{display:flex;flex-wrap:wrap;margin:0 calc(var(--ifm-spacing-horizontal)*-1)}.margin-bottom--none,.margin-vert--none,.markdown>:last-child{margin-bottom:0!important}.margin-top--none,.margin-vert--none,.tabItem_LNqP{margin-top:0!important}.row--no-gutters{margin-left:0;margin-right:0}.margin-horiz--none,.margin-right--none{margin-right:0!important}.row--no-gutters>.col{padding-left:0;padding-right:0}.row--align-top{align-items:flex-start}.row--align-bottom{align-items:flex-end}.menuExternalLink_NmtK,.row--align-center{align-items:center}.row--align-stretch{align-items:stretch}.row--align-baseline{align-items:baseline}.col{--ifm-col-width:100%;flex:1 0;margin-left:0;max-width:var(--ifm-col-width)}.padding-bottom--none,.padding-vert--none{padding-bottom:0!important}.padding-top--none,.padding-vert--none{padding-top:0!important}.padding-horiz--none,.padding-left--none{padding-left:0!important}.padding-horiz--none,.padding-right--none{padding-right:0!important}.col[class*=col--]{flex:0 0 var(--ifm-col-width)}.col--1{--ifm-col-width:8.33333%}.col--offset-1{margin-left:8.33333%}.col--2{--ifm-col-width:16.66667%}.col--offset-2{margin-left:16.66667%}.col--3{--ifm-col-width:25%}.col--offset-3{margin-left:25%}.col--4{--ifm-col-width:33.33333%}.col--offset-4{margin-left:33.33333%}.col--5{--ifm-col-width:41.66667%}.col--offset-5{margin-left:41.66667%}.col--6{--ifm-col-width:50%}.col--offset-6{margin-left:50%}.col--7{--ifm-col-width:58.33333%}.col--offset-7{margin-left:58.33333%}.col--8{--ifm-col-width:66.66667%}.col--offset-8{margin-left:66.66667%}.col--9{--ifm-col-width:75%}.col--offset-9{margin-left:75%}.col--10{--ifm-col-width:83.33333%}.col--offset-10{margin-left:83.33333%}.col--11{--ifm-col-width:91.66667%}.col--offset-11{margin-left:91.66667%}.col--12{--ifm-col-width:100%}.col--offset-12{margin-left:100%}.margin-horiz--none,.margin-left--none{margin-left:0!important}.margin--none{margin:0!important}.margin-bottom--xs,.margin-vert--xs{margin-bottom:.25rem!important}.margin-top--xs,.margin-vert--xs{margin-top:.25rem!important}.margin-horiz--xs,.margin-left--xs{margin-left:.25rem!important}.margin-horiz--xs,.margin-right--xs{margin-right:.25rem!important}.margin--xs{margin:.25rem!important}.margin-bottom--sm,.margin-vert--sm{margin-bottom:.5rem!important}.margin-top--sm,.margin-vert--sm{margin-top:.5rem!important}.margin-horiz--sm,.margin-left--sm{margin-left:.5rem!important}.margin-horiz--sm,.margin-right--sm{margin-right:.5rem!important}.margin--sm{margin:.5rem!important}.margin-bottom--md,.margin-vert--md{margin-bottom:1rem!important}.margin-top--md,.margin-vert--md{margin-top:1rem!important}.margin-horiz--md,.margin-left--md{margin-left:1rem!important}.margin-horiz--md,.margin-right--md{margin-right:1rem!important}.margin--md{margin:1rem!important}.margin-bottom--lg,.margin-vert--lg{margin-bottom:2rem!important}.margin-top--lg,.margin-vert--lg{margin-top:2rem!important}.margin-horiz--lg,.margin-left--lg{margin-left:2rem!important}.margin-horiz--lg,.margin-right--lg{margin-right:2rem!important}.margin--lg{margin:2rem!important}.margin-bottom--xl,.margin-vert--xl{margin-bottom:5rem!important}.margin-top--xl,.margin-vert--xl{margin-top:5rem!important}.margin-horiz--xl,.margin-left--xl{margin-left:5rem!important}.margin-horiz--xl,.margin-right--xl{margin-right:5rem!important}.margin--xl{margin:5rem!important}.padding--none{padding:0!important}.padding-bottom--xs,.padding-vert--xs{padding-bottom:.25rem!important}.padding-top--xs,.padding-vert--xs{padding-top:.25rem!important}.padding-horiz--xs,.padding-left--xs{padding-left:.25rem!important}.padding-horiz--xs,.padding-right--xs{padding-right:.25rem!important}.padding--xs{padding:.25rem!important}.padding-bottom--sm,.padding-vert--sm{padding-bottom:.5rem!important}.padding-top--sm,.padding-vert--sm{padding-top:.5rem!important}.padding-horiz--sm,.padding-left--sm{padding-left:.5rem!important}.padding-horiz--sm,.padding-right--sm{padding-right:.5rem!important}.padding--sm{padding:.5rem!important}.padding-bottom--md,.padding-vert--md{padding-bottom:1rem!important}.padding-top--md,.padding-vert--md{padding-top:1rem!important}.padding-horiz--md,.padding-left--md{padding-left:1rem!important}.padding-horiz--md,.padding-right--md{padding-right:1rem!important}.padding--md{padding:1rem!important}.padding-bottom--lg,.padding-vert--lg{padding-bottom:2rem!important}.padding-top--lg,.padding-vert--lg{padding-top:2rem!important}.padding-horiz--lg,.padding-left--lg{padding-left:2rem!important}.padding-horiz--lg,.padding-right--lg{padding-right:2rem!important}.padding--lg{padding:2rem!important}.padding-bottom--xl,.padding-vert--xl{padding-bottom:5rem!important}.padding-top--xl,.padding-vert--xl{padding-top:5rem!important}.padding-horiz--xl,.padding-left--xl{padding-left:5rem!important}.padding-horiz--xl,.padding-right--xl{padding-right:5rem!important}.padding--xl{padding:5rem!important}code{background-color:var(--ifm-code-background);border:.1rem solid #0000001a;border-radius:var(--ifm-code-border-radius);font-family:var(--ifm-font-family-monospace);font-size:var(--ifm-code-font-size);padding:var(--ifm-code-padding-vertical) var(--ifm-code-padding-horizontal)}a code{color:inherit}pre{background-color:var(--ifm-pre-background);border-radius:var(--ifm-pre-border-radius);color:var(--ifm-pre-color);font:var(--ifm-code-font-size)/var(--ifm-pre-line-height) var(--ifm-font-family-monospace);padding:var(--ifm-pre-padding)}pre code{background-color:initial;border:none;font-size:100%;line-height:inherit;padding:0}kbd{background-color:var(--ifm-color-emphasis-0);border:1px solid var(--ifm-color-emphasis-400);border-radius:.2rem;box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-400);color:var(--ifm-color-emphasis-800);font:80% var(--ifm-font-family-monospace);padding:.15rem .3rem}h1,h2,h3,h4,h5,h6{color:var(--ifm-heading-color);font-family:var(--ifm-heading-font-family);font-weight:var(--ifm-heading-font-weight);line-height:var(--ifm-heading-line-height);margin:var(--ifm-heading-margin-top) 0 var(--ifm-heading-margin-bottom) 0}h1{font-size:var(--ifm-h1-font-size)}h2{font-size:var(--ifm-h2-font-size)}h3{font-size:var(--ifm-h3-font-size)}h4{font-size:var(--ifm-h4-font-size)}h5{font-size:var(--ifm-h5-font-size)}h6{font-size:var(--ifm-h6-font-size)}.container_lyt7,.container_lyt7>svg,img{max-width:100%}img[align=right]{padding-left:var(--image-alignment-padding)}img[align=left]{padding-right:var(--image-alignment-padding)}.markdown{--ifm-h1-vertical-rhythm-top:3;--ifm-h2-vertical-rhythm-top:2;--ifm-h3-vertical-rhythm-top:1.5;--ifm-heading-vertical-rhythm-top:1.25;--ifm-h1-vertical-rhythm-bottom:1.25;--ifm-heading-vertical-rhythm-bottom:1}.markdown:after,.markdown:before{content:"";display:table}.markdown:after{clear:both}.markdown h1:first-child{--ifm-h1-font-size:3rem;margin-bottom:calc(var(--ifm-h1-vertical-rhythm-bottom)*var(--ifm-leading))}.markdown>h2{--ifm-h2-font-size:2rem;margin-top:calc(var(--ifm-h2-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h3{--ifm-h3-font-size:1.5rem;margin-top:calc(var(--ifm-h3-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h4,.markdown>h5,.markdown>h6{margin-top:calc(var(--ifm-heading-vertical-rhythm-top)*var(--ifm-leading))}.markdown>p,.markdown>pre,.markdown>ul,.tabList__CuJ{margin-bottom:var(--ifm-leading)}.markdown li>p{margin-top:var(--ifm-list-paragraph-margin)}.markdown li+li{margin-top:var(--ifm-list-item-margin)}ol,ul{margin:0 0 var(--ifm-list-margin);padding-left:var(--ifm-list-left-padding)}ol ol,ul ol{list-style-type:lower-roman}ol ol,ol ul,ul ol,ul ul{margin:0}ol ol ol,ol ul ol,ul ol ol,ul ul ol{list-style-type:lower-alpha}table{border-collapse:collapse;display:block;margin-bottom:var(--ifm-spacing-vertical)}table thead tr{border-bottom:2px solid var(--ifm-table-border-color)}table thead,table tr:nth-child(2n){background-color:var(--ifm-table-stripe-background)}table tr{background-color:var(--ifm-table-background);border-top:var(--ifm-table-border-width) solid var(--ifm-table-border-color)}table td,table th{border:var(--ifm-table-border-width) solid var(--ifm-table-border-color);padding:var(--ifm-table-cell-padding)}table th{background-color:var(--ifm-table-head-background);color:var(--ifm-table-head-color);font-weight:var(--ifm-table-head-font-weight)}table td{color:var(--ifm-table-cell-color)}strong{font-weight:var(--ifm-font-weight-bold)}a{color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}a:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button:hover,.text--no-decoration,.text--no-decoration:hover,a:not([href]){text-decoration:none}p{margin:0 0 var(--ifm-paragraph-margin-bottom)}blockquote{border-left:var(--ifm-blockquote-border-left-width) solid var(--ifm-blockquote-border-color);box-shadow:var(--ifm-blockquote-shadow);color:var(--ifm-blockquote-color);font-size:var(--ifm-blockquote-font-size);padding:var(--ifm-blockquote-padding-vertical) var(--ifm-blockquote-padding-horizontal)}blockquote>:first-child{margin-top:0}blockquote>:last-child{margin-bottom:0}hr{background-color:var(--ifm-hr-background-color);border:0;height:var(--ifm-hr-height);margin:var(--ifm-hr-margin-vertical) 0;background-image:-webkit-linear-gradient(left,#f3f3f3,#adadb1,#f3f3f3);margin:0 auto}.shadow--lw{box-shadow:var(--ifm-global-shadow-lw)!important}.shadow--md{box-shadow:var(--ifm-global-shadow-md)!important}.shadow--tl{box-shadow:var(--ifm-global-shadow-tl)!important}.text--primary,.wordWrapButtonEnabled_EoeP .wordWrapButtonIcon_Bwma{color:var(--ifm-color-primary)}.text--secondary{color:var(--ifm-color-secondary)}.text--success{color:var(--ifm-color-success)}.text--info{color:var(--ifm-color-info)}.text--warning{color:var(--ifm-color-warning)}.text--danger{color:var(--ifm-color-danger)}.text--center{text-align:center}.text--left{text-align:left}.text--justify{text-align:justify}.text--right{text-align:right}.text--capitalize{text-transform:capitalize}.text--lowercase{text-transform:lowercase}.admonitionHeading_tbUL,.alert__heading,.text--uppercase{text-transform:uppercase}.text--light{font-weight:var(--ifm-font-weight-light)}.text--normal{font-weight:var(--ifm-font-weight-normal)}.text--semibold{font-weight:var(--ifm-font-weight-semibold)}.text--bold{font-weight:var(--ifm-font-weight-bold)}.text--italic{font-style:italic}.text--truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.text--break{word-wrap:break-word!important;word-break:break-word!important}.clean-btn{background:none;border:none;color:inherit;cursor:pointer;font-family:inherit;padding:0}.alert,.alert .close{color:var(--ifm-alert-foreground-color)}.clean-list{padding-left:0}.alert--primary{--ifm-alert-background-color:var(--ifm-color-primary-contrast-background);--ifm-alert-background-color-highlight:#3578e526;--ifm-alert-foreground-color:var(--ifm-color-primary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-primary-dark)}.alert--secondary{--ifm-alert-background-color:var(--ifm-color-secondary-contrast-background);--ifm-alert-background-color-highlight:#ebedf026;--ifm-alert-foreground-color:var(--ifm-color-secondary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-secondary-dark)}.alert--success{--ifm-alert-background-color:var(--ifm-color-success-contrast-background);--ifm-alert-background-color-highlight:#00a40026;--ifm-alert-foreground-color:var(--ifm-color-success-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-success-dark)}.alert--info{--ifm-alert-background-color:var(--ifm-color-info-contrast-background);--ifm-alert-background-color-highlight:#54c7ec26;--ifm-alert-foreground-color:var(--ifm-color-info-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-info-dark)}.alert--warning{--ifm-alert-background-color:var(--ifm-color-warning-contrast-background);--ifm-alert-background-color-highlight:#ffba0026;--ifm-alert-foreground-color:var(--ifm-color-warning-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-warning-dark)}.alert--danger{--ifm-alert-background-color:var(--ifm-color-danger-contrast-background);--ifm-alert-background-color-highlight:#fa383e26;--ifm-alert-foreground-color:var(--ifm-color-danger-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-danger-dark)}.alert{--ifm-code-background:var(--ifm-alert-background-color-highlight);--ifm-link-color:var(--ifm-alert-foreground-color);--ifm-link-hover-color:var(--ifm-alert-foreground-color);--ifm-link-decoration:underline;--ifm-tabs-color:var(--ifm-alert-foreground-color);--ifm-tabs-color-active:var(--ifm-alert-foreground-color);--ifm-tabs-color-active-border:var(--ifm-alert-border-color);background-color:var(--ifm-alert-background-color);border:var(--ifm-alert-border-width) solid var(--ifm-alert-border-color);border-left-width:var(--ifm-alert-border-left-width);border-radius:var(--ifm-alert-border-radius);box-shadow:var(--ifm-alert-shadow);padding:var(--ifm-alert-padding-vertical) var(--ifm-alert-padding-horizontal)}.alert__heading{align-items:center;display:flex;font:700 var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.5rem}.alert__icon{display:inline-flex;margin-right:.4em}.alert__icon svg{fill:var(--ifm-alert-foreground-color);stroke:var(--ifm-alert-foreground-color);stroke-width:0}.alert .close{margin:calc(var(--ifm-alert-padding-vertical)*-1) calc(var(--ifm-alert-padding-horizontal)*-1) 0 0;opacity:.75}.alert .close:focus,.alert .close:hover{opacity:1}.alert a{text-decoration-color:var(--ifm-alert-border-color)}.alert a:hover{text-decoration-thickness:2px}.avatar{column-gap:var(--ifm-avatar-intro-margin);display:flex}.avatar__photo{border-radius:50%;display:block;height:var(--ifm-avatar-photo-size);overflow:hidden;width:var(--ifm-avatar-photo-size)}.card--full-height,.navbar__logo img,body,html{height:100%}.avatar__photo--sm{--ifm-avatar-photo-size:2rem}.avatar__photo--lg{--ifm-avatar-photo-size:4rem}.avatar__photo--xl{--ifm-avatar-photo-size:6rem}.avatar__intro{display:flex;flex:1 1;flex-direction:column;justify-content:center;text-align:var(--ifm-avatar-intro-alignment)}.badge,.breadcrumbs__item,.breadcrumbs__link,.button,.dropdown>.navbar__link:after,.searchBarContainer_NW3z.searchIndexLoading_EJ1f .searchBarLoadingRing_YnHq{display:inline-block}.avatar__name{font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base)}.avatar__subtitle{margin-top:.25rem}.avatar--vertical{--ifm-avatar-intro-alignment:center;--ifm-avatar-intro-margin:0.5rem;align-items:center;flex-direction:column}.badge{background-color:var(--ifm-badge-background-color);border:var(--ifm-badge-border-width) solid var(--ifm-badge-border-color);border-radius:var(--ifm-badge-border-radius);color:var(--ifm-badge-color);font-size:75%;font-weight:var(--ifm-font-weight-bold);line-height:1;padding:var(--ifm-badge-padding-vertical) var(--ifm-badge-padding-horizontal)}.badge--primary{--ifm-badge-background-color:var(--ifm-color-primary)}.badge--secondary{--ifm-badge-background-color:var(--ifm-color-secondary);color:var(--ifm-color-black)}.breadcrumbs__link,.button.button--secondary.button--outline:not(.button--active):not(:hover){color:var(--ifm-font-color-base)}.badge--success{--ifm-badge-background-color:var(--ifm-color-success)}.badge--info{--ifm-badge-background-color:var(--ifm-color-info)}.badge--warning{--ifm-badge-background-color:var(--ifm-color-warning)}.badge--danger{--ifm-badge-background-color:var(--ifm-color-danger)}.breadcrumbs{margin-bottom:0;padding-left:0}.breadcrumbs__item:not(:last-child):after{background:var(--ifm-breadcrumb-separator) center;content:" ";display:inline-block;filter:var(--ifm-breadcrumb-separator-filter);height:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier));margin:0 var(--ifm-breadcrumb-spacing);opacity:.5;width:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier))}.breadcrumbs__item--active .breadcrumbs__link{background:var(--ifm-breadcrumb-item-background-active);color:var(--ifm-breadcrumb-color-active)}.breadcrumbs__link{border-radius:var(--ifm-breadcrumb-border-radius);font-size:calc(1rem*var(--ifm-breadcrumb-size-multiplier));padding:calc(var(--ifm-breadcrumb-padding-vertical)*var(--ifm-breadcrumb-size-multiplier)) calc(var(--ifm-breadcrumb-padding-horizontal)*var(--ifm-breadcrumb-size-multiplier));transition-duration:var(--ifm-transition-fast);transition-property:background,color}.breadcrumbs__link:any-link:hover,.breadcrumbs__link:link:hover,.breadcrumbs__link:visited:hover,area[href].breadcrumbs__link:hover{background:var(--ifm-breadcrumb-item-background-active);text-decoration:none}.breadcrumbs--sm{--ifm-breadcrumb-size-multiplier:0.8}.breadcrumbs--lg{--ifm-breadcrumb-size-multiplier:1.2}.button{background-color:var(--ifm-button-background-color);border:var(--ifm-button-border-width) solid var(--ifm-button-border-color);border-radius:var(--ifm-button-border-radius);cursor:pointer;font-size:calc(.875rem*var(--ifm-button-size-multiplier));font-weight:var(--ifm-button-font-weight);line-height:1.5;padding:calc(var(--ifm-button-padding-vertical)*var(--ifm-button-size-multiplier)) calc(var(--ifm-button-padding-horizontal)*var(--ifm-button-size-multiplier));text-align:center;transition-duration:var(--ifm-button-transition-duration);transition-property:color,background,border-color;-webkit-user-select:none;user-select:none;white-space:nowrap}.button,.button:hover{color:var(--ifm-button-color)}.button--outline{--ifm-button-color:var(--ifm-button-border-color)}.button--outline:hover{--ifm-button-background-color:var(--ifm-button-border-color)}.button--link{--ifm-button-border-color:#0000;color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}.button--link.button--active,.button--link:active,.button--link:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button.disabled,.button:disabled,.button[disabled]{opacity:.65;pointer-events:none}.button--sm{--ifm-button-size-multiplier:0.8}.button--lg{--ifm-button-size-multiplier:1.35}.button--block{display:block;width:100%}.button.button--secondary{color:var(--ifm-color-gray-900)}:where(.button--primary){--ifm-button-background-color:var(--ifm-color-primary);--ifm-button-border-color:var(--ifm-color-primary)}:where(.button--primary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-primary-dark);--ifm-button-border-color:var(--ifm-color-primary-dark)}.button--primary.button--active,.button--primary:active{--ifm-button-background-color:var(--ifm-color-primary-darker);--ifm-button-border-color:var(--ifm-color-primary-darker)}:where(.button--secondary){--ifm-button-background-color:var(--ifm-color-secondary);--ifm-button-border-color:var(--ifm-color-secondary)}:where(.button--secondary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-secondary-dark);--ifm-button-border-color:var(--ifm-color-secondary-dark)}.button--secondary.button--active,.button--secondary:active{--ifm-button-background-color:var(--ifm-color-secondary-darker);--ifm-button-border-color:var(--ifm-color-secondary-darker)}:where(.button--success){--ifm-button-background-color:var(--ifm-color-success);--ifm-button-border-color:var(--ifm-color-success)}:where(.button--success):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-success-dark);--ifm-button-border-color:var(--ifm-color-success-dark)}.button--success.button--active,.button--success:active{--ifm-button-background-color:var(--ifm-color-success-darker);--ifm-button-border-color:var(--ifm-color-success-darker)}:where(.button--info){--ifm-button-background-color:var(--ifm-color-info);--ifm-button-border-color:var(--ifm-color-info)}:where(.button--info):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-info-dark);--ifm-button-border-color:var(--ifm-color-info-dark)}.button--info.button--active,.button--info:active{--ifm-button-background-color:var(--ifm-color-info-darker);--ifm-button-border-color:var(--ifm-color-info-darker)}:where(.button--warning){--ifm-button-background-color:var(--ifm-color-warning);--ifm-button-border-color:var(--ifm-color-warning)}:where(.button--warning):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-warning-dark);--ifm-button-border-color:var(--ifm-color-warning-dark)}.button--warning.button--active,.button--warning:active{--ifm-button-background-color:var(--ifm-color-warning-darker);--ifm-button-border-color:var(--ifm-color-warning-darker)}:where(.button--danger){--ifm-button-background-color:var(--ifm-color-danger);--ifm-button-border-color:var(--ifm-color-danger)}:where(.button--danger):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-danger-dark);--ifm-button-border-color:var(--ifm-color-danger-dark)}.button--danger.button--active,.button--danger:active{--ifm-button-background-color:var(--ifm-color-danger-darker);--ifm-button-border-color:var(--ifm-color-danger-darker)}.button-group{display:inline-flex;gap:var(--ifm-button-group-spacing)}.button-group>.button:not(:first-child){border-bottom-left-radius:0;border-top-left-radius:0}.button-group>.button:not(:last-child){border-bottom-right-radius:0;border-top-right-radius:0}.button-group--block{display:flex;justify-content:stretch}.button-group--block>.button{flex-grow:1}.card{background-color:var(--ifm-card-background-color);border-radius:var(--ifm-card-border-radius);box-shadow:var(--ifm-global-shadow-lw);display:flex;flex-direction:column;overflow:hidden}.card__image{padding-top:var(--ifm-card-vertical-spacing)}.card__image:first-child{padding-top:0}.card__body,.card__footer,.card__header{padding:var(--ifm-card-vertical-spacing) var(--ifm-card-horizontal-spacing)}.card__body:not(:last-child),.card__footer:not(:last-child),.card__header:not(:last-child){padding-bottom:0}.card__body>:last-child,.card__footer>:last-child,.card__header>:last-child{margin-bottom:0}.card__footer{margin-top:auto}.table-of-contents{font-size:.8rem;margin-bottom:0;padding:var(--ifm-toc-padding-vertical) 0}.table-of-contents,.table-of-contents ul{list-style:none;padding-left:var(--ifm-toc-padding-horizontal)}.table-of-contents li{margin:var(--ifm-toc-padding-vertical) var(--ifm-toc-padding-horizontal)}.table-of-contents__left-border{border-left:1px solid var(--ifm-toc-border-color)}.table-of-contents__link{color:var(--ifm-toc-link-color);display:block}.table-of-contents__link--active,.table-of-contents__link--active code,.table-of-contents__link:hover,.table-of-contents__link:hover code{color:var(--ifm-color-primary);text-decoration:none}.content_knG7 a,.hitFooter_E9YW a,.suggestion_fB_2.cursor_eG29 mark{text-decoration:underline}.close{color:var(--ifm-color-black);float:right;font-size:1.5rem;font-weight:var(--ifm-font-weight-bold);line-height:1;opacity:.5;padding:1rem;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.close:hover{opacity:.7}.close:focus,.theme-code-block-highlighted-line .codeLineNumber_Tfdd:before{opacity:.8}.dropdown{display:inline-flex;font-weight:var(--ifm-dropdown-font-weight);position:relative;vertical-align:top}.dropdown--hoverable:hover .dropdown__menu,.dropdown--show .dropdown__menu{opacity:1;pointer-events:all;transform:translateY(-1px);visibility:visible}.dropdown--right .dropdown__menu{left:inherit;right:0}.dropdown--nocaret .navbar__link:after{content:none!important}.dropdown__menu{background-color:var(--ifm-dropdown-background-color);border-radius:var(--ifm-global-radius);box-shadow:var(--ifm-global-shadow-md);left:0;max-height:80vh;min-width:10rem;opacity:0;overflow-y:auto;padding:.5rem;pointer-events:none;position:absolute;top:calc(100% - var(--ifm-navbar-item-padding-vertical) + .3rem);transform:translateY(-.625rem);transition-duration:var(--ifm-transition-fast);transition-property:opacity,transform,visibility;transition-timing-function:var(--ifm-transition-timing-default);visibility:hidden;z-index:var(--ifm-z-index-dropdown)}.menu__caret,.menu__link,.menu__list-item-collapsible{border-radius:.25rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.dropdown__link{border-radius:.25rem;color:var(--ifm-dropdown-link-color);display:block;font-size:.875rem;margin-top:.2rem;padding:.25rem .5rem;white-space:nowrap}.dropdown__link--active,.dropdown__link:hover{background-color:var(--ifm-dropdown-hover-background-color);color:var(--ifm-dropdown-link-color);text-decoration:none}.dropdown__link--active,.dropdown__link--active:hover{--ifm-dropdown-link-color:var(--ifm-link-color)}.dropdown>.navbar__link:after{border-color:currentcolor #0000;border-style:solid;border-width:.4em .4em 0;content:"";margin-left:.3em;position:relative;top:2px;transform:translateY(-50%)}.footer{background-color:var(--ifm-footer-background-color);color:var(--ifm-footer-color);padding:var(--ifm-footer-padding-vertical) var(--ifm-footer-padding-horizontal)}.footer--dark{--ifm-footer-background-color:#303846;--ifm-footer-color:var(--ifm-footer-link-color);--ifm-footer-link-color:var(--ifm-color-secondary);--ifm-footer-title-color:var(--ifm-color-white)}.footer__links{margin-bottom:1rem}.footer__link-item{color:var(--ifm-footer-link-color);line-height:2}.footer__link-item:hover{color:var(--ifm-footer-link-hover-color)}.footer__link-separator{margin:0 var(--ifm-footer-link-horizontal-spacing)}.footer__logo{margin-top:1rem;max-width:var(--ifm-footer-logo-max-width)}.footer__title{color:var(--ifm-footer-title-color);font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base);margin-bottom:var(--ifm-heading-margin-bottom)}.menu,.navbar__link{font-weight:var(--ifm-font-weight-semibold)}.docItemContainer_Djhp article>:first-child,.docItemContainer_Djhp header+*,.footer__item{margin-top:0}.admonitionContent_S0QG>:last-child,.collapsibleContent_i85q>:last-child,.footer__items,.searchResultItem_U687>h2,.tabItem_Ymn6>:last-child{margin-bottom:0}.codeBlockStandalone_MEMb,[type=checkbox]{padding:0}.hero{align-items:center;background-color:var(--ifm-hero-background-color);color:var(--ifm-hero-text-color);display:flex;padding:4rem 2rem}.hero--primary{--ifm-hero-background-color:var(--ifm-color-primary);--ifm-hero-text-color:var(--ifm-font-color-base-inverse)}.hero--dark{--ifm-hero-background-color:#303846;--ifm-hero-text-color:var(--ifm-color-white)}.hero__title{font-size:3rem}.hero__subtitle{font-size:1.5rem}.menu__list{margin:0;padding-left:0}.menu__caret,.menu__link{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu__list .menu__list{flex:0 0 100%;margin-top:.25rem;padding-left:var(--ifm-menu-link-padding-horizontal)}.menu__list-item:not(:first-child){margin-top:.25rem}.menu__list-item--collapsed .menu__list{height:0;overflow:hidden}.details_lb9f[data-collapsed=false].isBrowser_bmU9>summary:before,.details_lb9f[open]:not(.isBrowser_bmU9)>summary:before,.menu__list-item--collapsed .menu__caret:before,.menu__list-item--collapsed .menu__link--sublist:after{transform:rotate(90deg)}.menu__list-item-collapsible{display:flex;flex-wrap:wrap;position:relative}.menu__caret:hover,.menu__link:hover,.menu__list-item-collapsible--active,.menu__list-item-collapsible:hover{background:var(--ifm-menu-color-background-hover)}.menu__list-item-collapsible .menu__link--active,.menu__list-item-collapsible .menu__link:hover{background:none!important}.menu__caret,.menu__link{align-items:center;display:flex}.menu__link{color:var(--ifm-menu-color);flex:1;line-height:1.25}.menu__link:hover{color:var(--ifm-menu-color);text-decoration:none}.menu__caret:before,.menu__link--sublist-caret:after{height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast) linear;width:1.25rem;filter:var(--ifm-menu-link-sublist-icon-filter);content:""}.menu__link--sublist-caret:after{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem;margin-left:auto;min-width:1.25rem}.navbar__items--center .navbar__brand,body{margin:0}.menu__link--active,.menu__link--active:hover{color:var(--ifm-menu-color-active)}.navbar__brand,.navbar__link{color:var(--ifm-navbar-link-color)}.menu__link--active:not(.menu__link--sublist){background-color:var(--ifm-menu-color-background-active)}.menu__caret:before{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem}.navbar--dark,html[data-theme=dark]{--ifm-menu-link-sublist-icon-filter:invert(100%) sepia(94%) saturate(17%) hue-rotate(223deg) brightness(104%) contrast(98%)}.navbar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-navbar-shadow);height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar,.navbar>.container,.navbar>.container-fluid{display:flex}.navbar--fixed-top{position:sticky;top:0;z-index:var(--ifm-z-index-fixed)}.navbar-sidebar,.navbar-sidebar__backdrop{bottom:0;opacity:0;position:fixed;transition-duration:var(--ifm-transition-fast);transition-timing-function:ease-in-out;left:0;top:0;visibility:hidden}.navbar__inner{display:flex;flex-wrap:wrap;justify-content:space-between;width:100%}.navbar__brand{align-items:center;display:flex;margin-right:1rem;min-width:0}.navbar__brand:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.announcementBarContent_xLdY,.navbar__title{flex:1 1 auto}.navbar__toggle{display:none;margin-right:.5rem}.navbar__logo{flex:0 0 auto;height:2rem;margin-right:.5rem}.navbar__items{align-items:center;display:flex;flex:1;min-width:0}.navbar__items--center{flex:0 0 auto}.navbar__items--center+.navbar__items--right{flex:1}.navbar__items--right{flex:0 0 auto;justify-content:flex-end}.navbar__items--right>:last-child{padding-right:0}.navbar__item{display:inline-block;padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}#nprogress,.navbar__item.dropdown .navbar__link:not([href]){pointer-events:none}.navbar__link--active,.navbar__link:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.navbar--dark,.navbar--primary{--ifm-menu-color:var(--ifm-color-gray-300);--ifm-navbar-link-color:var(--ifm-color-gray-100);--ifm-navbar-search-input-background-color:#ffffff1a;--ifm-navbar-search-input-placeholder-color:#ffffff80;color:var(--ifm-color-white)}.navbar--dark{--ifm-navbar-background-color:#242526;--ifm-menu-color-background-active:#ffffff0d;--ifm-navbar-search-input-color:var(--ifm-color-white)}.navbar--primary{--ifm-navbar-background-color:var(--ifm-color-primary);--ifm-navbar-link-hover-color:var(--ifm-color-white);--ifm-menu-color-active:var(--ifm-color-white);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-500)}.navbar__search-input{-webkit-appearance:none;appearance:none;background:var(--ifm-navbar-search-input-background-color) var(--ifm-navbar-search-input-icon) no-repeat .75rem center/1rem 1rem;border:none;border-radius:2rem;color:var(--ifm-navbar-search-input-color);cursor:text;display:inline-block;font-size:.9rem;height:2rem;padding:0 .5rem 0 2.25rem;width:12.5rem}.navbar__search-input::placeholder{color:var(--ifm-navbar-search-input-placeholder-color)}.navbar-sidebar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-global-shadow-md);transform:translate3d(-100%,0,0);transition-property:opacity,visibility,transform;width:var(--ifm-navbar-sidebar-width)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar__items{transform:translateZ(0)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar--show .navbar-sidebar__backdrop{opacity:1;visibility:visible}.navbar-sidebar__backdrop{background-color:#0009;right:0;transition-property:opacity,visibility}.navbar-sidebar__brand{align-items:center;box-shadow:var(--ifm-navbar-shadow);display:flex;flex:1;height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar-sidebar__items{display:flex;height:calc(100% - var(--ifm-navbar-height));transition:transform var(--ifm-transition-fast) ease-in-out}.navbar-sidebar__items--show-secondary{transform:translate3d(calc((var(--ifm-navbar-sidebar-width))*-1),0,0)}.navbar-sidebar__item{flex-shrink:0;padding:.5rem;width:calc(var(--ifm-navbar-sidebar-width))}.navbar-sidebar__back{background:var(--ifm-menu-color-background-active);font-size:15px;font-weight:var(--ifm-button-font-weight);margin:0 0 .2rem -.5rem;padding:.6rem 1.5rem;position:relative;text-align:left;top:-.5rem;width:calc(100% + 1rem)}.navbar-sidebar__close{display:flex;margin-left:auto}.pagination{column-gap:var(--ifm-pagination-page-spacing);display:flex;font-size:var(--ifm-pagination-font-size);padding-left:0}.pagination--sm{--ifm-pagination-font-size:0.8rem;--ifm-pagination-padding-horizontal:0.8rem;--ifm-pagination-padding-vertical:0.2rem}.pagination--lg{--ifm-pagination-font-size:1.2rem;--ifm-pagination-padding-horizontal:1.2rem;--ifm-pagination-padding-vertical:0.3rem}.pagination__item{display:inline-flex}.pagination__item>span{padding:var(--ifm-pagination-padding-vertical)}.pagination__item--active .pagination__link{color:var(--ifm-pagination-color-active)}.pagination__item--active .pagination__link,.pagination__item:not(.pagination__item--active):hover .pagination__link{background:var(--ifm-pagination-item-active-background)}.pagination__item--disabled,.pagination__item[disabled]{opacity:.25;pointer-events:none}.pagination__link{border-radius:var(--ifm-pagination-border-radius);color:var(--ifm-font-color-base);display:inline-block;padding:var(--ifm-pagination-padding-vertical) var(--ifm-pagination-padding-horizontal);transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination__link:hover{text-decoration:none}.pagination-nav{grid-gap:var(--ifm-spacing-horizontal);display:grid;gap:var(--ifm-spacing-horizontal);grid-template-columns:repeat(2,1fr)}.pagination-nav__link{border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-pagination-nav-border-radius);display:block;height:100%;line-height:var(--ifm-heading-line-height);padding:var(--ifm-global-spacing);transition:border-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination-nav__link:hover{border-color:var(--ifm-pagination-nav-color-hover);text-decoration:none}.pagination-nav__link--next{grid-column:2/3;text-align:right}.pagination-nav__label{font-size:var(--ifm-h4-font-size);font-weight:var(--ifm-heading-font-weight);word-break:break-word}.pagination-nav__link--prev .pagination-nav__label:before{content:"« "}.pagination-nav__link--next .pagination-nav__label:after{content:" »"}.pagination-nav__sublabel{color:var(--ifm-color-content-secondary);font-size:var(--ifm-h5-font-size);font-weight:var(--ifm-font-weight-semibold);margin-bottom:.25rem}.pills__item,.tabs{font-weight:var(--ifm-font-weight-bold)}.pills{display:flex;gap:var(--ifm-pills-spacing);padding-left:0}.pills__item{border-radius:.5rem;cursor:pointer;display:inline-block;padding:.25rem 1rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs,:not(.containsTaskList_mC6p>li)>.containsTaskList_mC6p{padding-left:0}.pills__item--active{color:var(--ifm-pills-color-active)}.pills__item--active,.pills__item:not(.pills__item--active):hover{background:var(--ifm-pills-color-background-active)}.pills--block{justify-content:stretch}.pills--block .pills__item{flex-grow:1;text-align:center}.tabs{color:var(--ifm-tabs-color);display:flex;margin-bottom:0;overflow-x:auto}.tabs__item{border-bottom:3px solid #0000;border-radius:var(--ifm-global-radius);cursor:pointer;display:inline-flex;padding:var(--ifm-tabs-padding-vertical) var(--ifm-tabs-padding-horizontal);transition:background-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs__item--active{border-bottom-color:var(--ifm-tabs-color-active-border);border-bottom-left-radius:0;border-bottom-right-radius:0;color:var(--ifm-tabs-color-active)}.tabs__item:hover{background-color:var(--ifm-hover-overlay)}.tabs--block{justify-content:stretch}.tabs--block .tabs__item{flex-grow:1;justify-content:center}html[data-theme=dark]{--ifm-color-scheme:dark;--ifm-color-emphasis-0:var(--ifm-color-gray-1000);--ifm-color-emphasis-100:var(--ifm-color-gray-900);--ifm-color-emphasis-200:var(--ifm-color-gray-800);--ifm-color-emphasis-300:var(--ifm-color-gray-700);--ifm-color-emphasis-400:var(--ifm-color-gray-600);--ifm-color-emphasis-600:var(--ifm-color-gray-400);--ifm-color-emphasis-700:var(--ifm-color-gray-300);--ifm-color-emphasis-800:var(--ifm-color-gray-200);--ifm-color-emphasis-900:var(--ifm-color-gray-100);--ifm-color-emphasis-1000:var(--ifm-color-gray-0);--ifm-background-color:#1b1b1d;--ifm-background-surface-color:#242526;--ifm-hover-overlay:#ffffff0d;--ifm-color-content:#e3e3e3;--ifm-color-content-secondary:#fff;--ifm-breadcrumb-separator-filter:invert(64%) sepia(11%) saturate(0%) hue-rotate(149deg) brightness(99%) contrast(95%);--ifm-code-background:#ffffff1a;--ifm-scrollbar-track-background-color:#444;--ifm-scrollbar-thumb-background-color:#686868;--ifm-scrollbar-thumb-hover-background-color:#7a7a7a;--ifm-table-stripe-background:#ffffff12;--ifm-toc-border-color:var(--ifm-color-emphasis-200);--ifm-color-primary-contrast-background:#102445;--ifm-color-primary-contrast-foreground:#ebf2fc;--ifm-color-secondary-contrast-background:#474748;--ifm-color-secondary-contrast-foreground:#fdfdfe;--ifm-color-success-contrast-background:#003100;--ifm-color-success-contrast-foreground:#e6f6e6;--ifm-color-info-contrast-background:#193c47;--ifm-color-info-contrast-foreground:#eef9fd;--ifm-color-warning-contrast-background:#4d3800;--ifm-color-warning-contrast-foreground:#fff8e6;--ifm-color-danger-contrast-background:#4b1113;--ifm-color-danger-contrast-foreground:#ffebec}#nprogress .bar{background:var(--docusaurus-progress-bar-color);height:2px;left:0;position:fixed;top:0;width:100%;z-index:1031}#nprogress .peg{box-shadow:0 0 10px var(--docusaurus-progress-bar-color),0 0 5px var(--docusaurus-progress-bar-color);height:100%;opacity:1;position:absolute;right:0;transform:rotate(3deg) translateY(-4px);width:100px}@font-face{font-family:Poppins;font-style:normal;font-weight:400;src:local(""),url(/zh/assets/fonts/poppins-regular-f61407da33b59324fbefe468ce6917ab.woff) format("woff2"),url(data:font/woff2;base64,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) format("woff"),}@font-face{font-family:Roboto;font-style:normal;font-weight:400;src:local(""),url(/zh/assets/fonts/roboto-mono-regular-498042b7fe9cd07b4fd11a0965093e55.woff) format("woff2"),url(/zh/assets/fonts/roboto-mono-regular-535bc89d4af715503b01afd761501e58.woff2) format("woff"),}@font-face{font-family:Lato;font-style:normal;font-weight:400;src:local(""),url(/zh/assets/fonts/lato-regular-292725486219768e62259f7286dc73cc.woff) format("woff2"),url(/zh/assets/fonts/lato-regular-be36596da218e1eec01c5c600b1c13ef.woff2) format("woff"),}[data-theme=dark]{--ifm-color-primary:#ffc61c;--ifm-color-primary-dark:#ffbf00;--ifm-color-primary-darker:#f1b400;--ifm-color-primary-darkest:#c69400;--ifm-color-primary-light:#ffcd38;--ifm-color-primary-lighter:#ffd146;--ifm-color-primary-lightest:#ffdb71;--ifm-color-secondary-dark:#054a6e;--ifm-color-secondary:#06527a;--ifm-color-secondary-light:#075a86;--light:#33313b;--dark:#f3f3f3}[data-theme=dark] .footer--dark{background-color:var(--light);color:var(--ifm-color-primary)}body{font-family:Lato,sans-serif}h1,h2,h3,h4,h5,h6{font-family:Poppins,sans-serif}code{font-family:Roboto Mono,monospace}.navbar__brand{height:40px}.btn.navbar__github{background-color:#384745;border:2px solid #384745;border-radius:3px;box-shadow:inset 0 1px #ffffff26,0 1px 1px #00000014;color:#fff!important;font-family:poppins,sans-serif;font-size:1rem;font-weight:400;line-height:1.66;padding:8px 20px 7px 47px;position:relative;text-align:center;text-decoration:none;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-user-select:none;user-select:none}.clear-btn{padding:100px}a.btn.navbar__github:hover{background-color:#273230;border-color:#222a29;color:#fff}a.btn.navbar__github:before{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20.5 20'%3E%3Cpath fill='%23fff' d='M10.3 0C4.6 0 0 4.6 0 10.3c0 4.4 2.8 8.3 7 9.7.5.1.7-.2.7-.5v-1.9c-2.6.5-3.2-.6-3.4-1.2-.2-.6-.6-1.1-1-1.5-.4-.2-.9-.7 0-.7.7.1 1.3.5 1.6 1 .6 1.1 1.9 1.4 3 .8 0-.5.3-1 .7-1.4-2.3-.3-4.7-1.1-4.7-5.1 0-1 .4-2 1.1-2.8-.5-.6-.5-1.6-.1-2.5 0 0 .9-.3 2.8 1.1 1.7-.5 3.4-.5 5.1 0 2-1.3 2.8-1.1 2.8-1.1.4.9.5 1.9.2 2.8.7.7 1.1 1.7 1.1 2.8 0 3.9-2.4 4.8-4.7 5.1.5.5.7 1.2.7 1.9v2.8c0 .3.2.6.7.5 5.4-1.8 8.3-7.6 6.5-13C18.6 2.8 14.7 0 10.3 0z'/%3E%3C/svg%3E");content:"";height:20px;left:15px;position:absolute;top:10px;width:20px}.header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat;content:"";display:flex;height:24px;width:24px}[data-theme=dark] .header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath fill='%23fff' d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat}.docusaurus-highlight-code-line{background-color:#484d5b;display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}body:not(.navigation-with-keyboard) :not(input):focus{outline:0}#__docusaurus-base-url-issue-banner-container,.hideAction_vcyE>svg,.themedImage_ToTc,[data-theme=dark] .lightToggleIcon_pyhR,[data-theme=light] .darkToggleIcon_wfgR,html[data-announcement-bar-initially-dismissed=true] .announcementBar_mb4j{display:none}.skipToContent_fXgn{background-color:var(--ifm-background-surface-color);color:var(--ifm-color-emphasis-900);left:100%;padding:calc(var(--ifm-global-spacing)/2) var(--ifm-global-spacing);position:fixed;top:1rem;z-index:calc(var(--ifm-z-index-fixed) + 1)}.skipToContent_fXgn:focus{box-shadow:var(--ifm-global-shadow-md);left:1rem}.closeButton_CVFx{line-height:0;padding:0}.content_knG7{font-size:85%;padding:5px 0;text-align:center}.content_knG7 a{color:inherit}.announcementBar_mb4j{align-items:center;background-color:var(--ifm-color-white);border-bottom:1px solid var(--ifm-color-emphasis-100);color:var(--ifm-color-black);display:flex;height:var(--docusaurus-announcement-bar-height)}.announcementBarPlaceholder_vyr4{flex:0 0 10px}.announcementBarClose_gvF7{align-self:stretch;flex:0 0 30px}.toggle_vylO{height:2rem;width:2rem}.toggleButton_gllP{align-items:center;border-radius:50%;display:flex;height:100%;justify-content:center;transition:background var(--ifm-transition-fast);width:100%}.toggleButton_gllP:hover{background:var(--ifm-color-emphasis-200)}.toggleButtonDisabled_aARS{cursor:not-allowed}.darkNavbarColorModeToggle_X3D1:hover{background:var(--ifm-color-gray-800)}[data-theme=dark] .themedImage--dark_i4oU,[data-theme=light] .themedImage--light_HNdA{display:initial}.iconExternalLink_nPIU{margin-left:.3rem}.iconLanguage_nlXk{margin-right:5px;vertical-align:text-bottom}.searchBar_RVTs .dropdownMenu_qbY6{background:var(--search-local-modal-background,#f5f6f7);border-radius:6px;box-shadow:var(--search-local-modal-shadow,inset 1px 1px 0 0 #ffffff80,0 3px 8px 0 #555a64);left:auto!important;margin-top:8px;padding:var(--search-local-spacing,12px);position:relative;right:0!important;width:var(--search-local-modal-width,560px)}html[data-theme=dark] .searchBar_RVTs .dropdownMenu_qbY6{background:var(--search-local-modal-background,var(--ifm-background-color));box-shadow:var(--search-local-modal-shadow,inset 1px 1px 0 0 #2c2e40,0 3px 8px 0 #000309)}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2{align-items:center;background:var(--search-local-hit-background,#fff);border-radius:4px;box-shadow:var(--search-local-hit-shadow,0 1px 3px 0 #d4d9e1);color:var(--search-local-hit-color,#444950);cursor:pointer;display:flex;flex-direction:row;height:var(--search-local-hit-height,56px);padding:0 var(--search-local-spacing,12px);width:100%}.hitTree_kk6K,.noResults_l6Q3{align-items:center;display:flex}html[data-theme=dark] .dropdownMenu_qbY6 .suggestion_fB_2{background:var(--search-local-hit-background,var(--ifm-color-emphasis-100));box-shadow:var(--search-local-hit-shadow,none);color:var(--search-local-hit-color,var(--ifm-font-color-base))}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2:not(:last-child){margin-bottom:4px}.searchBar_RVTs .dropdownMenu_qbY6 .suggestion_fB_2.cursor_eG29{background-color:var(--search-local-highlight-color,var(--ifm-color-primary))}.hitFooter_E9YW a,.hitIcon_a7Zy,.hitPath_ieM4,.hitTree_kk6K,.noResultsIcon_EBY5{color:var(--search-local-muted-color,#969faf)}html[data-theme=dark] .hitIcon_a7Zy,html[data-theme=dark] .hitPath_ieM4,html[data-theme=dark] .hitTree_kk6K,html[data-theme=dark] .noResultsIcon_EBY5{color:var(--search-local-muted-color,var(--ifm-color-secondary-darkest))}.hitTree_kk6K>svg{height:var(--search-local-hit-height,56px);opacity:.5;width:24px}.hitIcon_a7Zy,.hitTree_kk6K>svg{stroke-width:var(--search-local-icon-stroke-width,1.4)}.hitAction_NqkB,.hitIcon_a7Zy{height:20px;width:20px}.hitWrapper_sAK8{display:flex;flex:1 1 auto;flex-direction:column;font-weight:500;justify-content:center;margin:0 8px;overflow-x:hidden;width:80%}.hitWrapper_sAK8 mark{background:none;color:var(--search-local-highlight-color,var(--ifm-color-primary))}.hitTitle_vyVt{font-size:.9em}.hitPath_ieM4{font-size:.75em}.hitPath_ieM4,.hitTitle_vyVt{overflow-x:hidden;text-overflow:ellipsis;white-space:nowrap}.noResults_l6Q3{flex-direction:column;justify-content:center;padding:var(--search-local-spacing,12px) 0}.noResultsIcon_EBY5{margin-bottom:var(--search-local-spacing,12px)}.hitFooter_E9YW{font-size:.85em;margin-top:var(--search-local-spacing,12px);text-align:center}.cursor_eG29 .hideAction_vcyE>svg,.tocCollapsibleContent_vkbj a{display:block}.suggestion_fB_2.cursor_eG29,.suggestion_fB_2.cursor_eG29 .hitIcon_a7Zy,.suggestion_fB_2.cursor_eG29 .hitPath_ieM4,.suggestion_fB_2.cursor_eG29 .hitTree_kk6K,.suggestion_fB_2.cursor_eG29 mark{color:var(--search-local-hit-active-color,var(--ifm-color-white))!important}.searchBarContainer_NW3z{margin-left:16px}.searchBarContainer_NW3z .searchBarLoadingRing_YnHq{display:none;left:10px;position:absolute;top:6px}.searchBarContainer_NW3z .searchClearButton_qk4g{background:none;border:none;line-height:1rem;padding:0;position:absolute;right:.8rem;top:50%;transform:translateY(-50%)}.navbar__search{position:relative}.searchIndexLoading_EJ1f .navbar__search-input{background-image:none}.searchHintContainer_Pkmr{align-items:center;display:flex;gap:4px;height:100%;justify-content:center;pointer-events:none;position:absolute;right:10px;top:0}.searchHint_iIMx{background-color:var(--ifm-navbar-search-input-background-color);border:1px solid var(--ifm-color-emphasis-500);box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-500);color:var(--ifm-navbar-search-input-placeholder-color)}.loadingRing_RJI3{display:inline-block;height:20px;opacity:var(--search-local-loading-icon-opacity,.5);position:relative;width:20px}.loadingRing_RJI3 div{animation:1.2s cubic-bezier(.5,0,.5,1) infinite a;border:2px solid var(--search-load-loading-icon-color,var(--ifm-navbar-search-input-color));border-color:var(--search-load-loading-icon-color,var(--ifm-navbar-search-input-color)) #0000 #0000 #0000;border-radius:50%;display:block;height:16px;margin:2px;position:absolute;width:16px}.loadingRing_RJI3 div:first-child{animation-delay:-.45s}.loadingRing_RJI3 div:nth-child(2){animation-delay:-.3s}.loadingRing_RJI3 div:nth-child(3){animation-delay:-.15s}@keyframes a{0%{transform:rotate(0)}to{transform:rotate(1turn)}}.navbarHideable_m1mJ{transition:transform var(--ifm-transition-fast) ease}.navbarHidden_jGov{transform:translate3d(0,calc(-100% - 2px),0)}.errorBoundaryError_a6uf{color:red;white-space:pre-wrap}.footerLogoLink_BH7S{opacity:.5;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.footerLogoLink_BH7S:hover,.hash-link:focus,:hover>.hash-link{opacity:1}.mainWrapper_z2l0{display:flex;flex:1 0 auto;flex-direction:column}.docusaurus-mt-lg{margin-top:3rem}#__docusaurus{display:flex;flex-direction:column;min-height:100%}.iconEdit_Z9Sw{margin-right:.3em;vertical-align:sub}.tag_zVej{border:1px solid var(--docusaurus-tag-list-border);transition:border var(--ifm-transition-fast)}.tag_zVej:hover{--docusaurus-tag-list-border:var(--ifm-link-color);text-decoration:none}.tagRegular_sFm0{border-radius:var(--ifm-global-radius);font-size:90%;padding:.2rem .5rem .3rem}.tagWithCount_h2kH{align-items:center;border-left:0;display:flex;padding:0 .5rem 0 1rem;position:relative}.tagWithCount_h2kH:after,.tagWithCount_h2kH:before{border:1px solid var(--docusaurus-tag-list-border);content:"";position:absolute;top:50%;transition:inherit}.tagWithCount_h2kH:before{border-bottom:0;border-right:0;height:1.18rem;right:100%;transform:translate(50%,-50%) rotate(-45deg);width:1.18rem}.tagWithCount_h2kH:after{border-radius:50%;height:.5rem;left:0;transform:translateY(-50%);width:.5rem}.tagWithCount_h2kH span{background:var(--ifm-color-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-color-black);font-size:.7rem;line-height:1.2;margin-left:.3rem;padding:.1rem .4rem}.tags_jXut{display:inline}.tag_QGVx{display:inline-block;margin:0 .4rem .5rem 0}.lastUpdated_vwxv{font-size:smaller;font-style:italic;margin-top:.2rem}.tocCollapsibleButton_TO0P{align-items:center;display:flex;font-size:inherit;justify-content:space-between;padding:.4rem .8rem;width:100%}.tocCollapsibleButton_TO0P:after{background:var(--ifm-menu-link-sublist-icon) 50% 50%/2rem 2rem no-repeat;content:"";filter:var(--ifm-menu-link-sublist-icon-filter);height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast);width:1.25rem}.tocCollapsibleButtonExpanded_MG3E:after,.tocCollapsibleExpanded_sAul{transform:none}.tocCollapsible_ETCw{background-color:var(--ifm-menu-color-background-active);border-radius:var(--ifm-global-radius);margin:1rem 0}.buttonGroup__atx button,.codeBlockContainer_Ckt0{background:var(--prism-background-color);color:var(--prism-color)}.tocCollapsibleContent_vkbj>ul{border-left:none;border-top:1px solid var(--ifm-color-emphasis-300);font-size:15px;padding:.2rem 0}.tocCollapsibleContent_vkbj ul li{margin:.4rem .8rem}.tableOfContents_bqdL{max-height:calc(100vh - var(--ifm-navbar-height) - 2rem);overflow-y:auto;position:sticky;top:calc(var(--ifm-navbar-height) + 1rem)}.anchorWithStickyNavbar_LWe7{scroll-margin-top:calc(var(--ifm-navbar-height) + .5rem)}.anchorWithHideOnScrollNavbar_WYt5{scroll-margin-top:.5rem}.hash-link{opacity:0;padding-left:.5rem;transition:opacity var(--ifm-transition-fast);-webkit-user-select:none;user-select:none}.hash-link:before{content:"#"}.codeBlockContainer_Ckt0{border-radius:var(--ifm-code-border-radius);box-shadow:var(--ifm-global-shadow-lw);margin-bottom:var(--ifm-leading)}.codeBlockContent_biex{border-radius:inherit;direction:ltr;position:relative}.codeBlockTitle_Ktv7{border-bottom:1px solid var(--ifm-color-emphasis-300);border-top-left-radius:inherit;border-top-right-radius:inherit;font-size:var(--ifm-code-font-size);font-weight:500;padding:.75rem var(--ifm-pre-padding)}.codeBlock_bY9V{--ifm-pre-background:var(--prism-background-color);margin:0;padding:0}.codeBlockTitle_Ktv7+.codeBlockContent_biex .codeBlock_bY9V{border-top-left-radius:0;border-top-right-radius:0}.codeBlockLines_e6Vv{float:left;font:inherit;min-width:100%;padding:var(--ifm-pre-padding)}.codeBlockLinesWithNumbering_o6Pm{display:table;padding:var(--ifm-pre-padding) 0}.buttonGroup__atx{column-gap:.2rem;display:flex;position:absolute;right:calc(var(--ifm-pre-padding)/2);top:calc(var(--ifm-pre-padding)/2)}.buttonGroup__atx button{align-items:center;border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-global-radius);display:flex;line-height:0;opacity:0;padding:.4rem;transition:opacity var(--ifm-transition-fast) ease-in-out}.buttonGroup__atx button:focus-visible,.buttonGroup__atx button:hover{opacity:1!important}.theme-code-block:hover .buttonGroup__atx button{opacity:.4}:where(:root){--docusaurus-highlighted-code-line-bg:#484d5b}:where([data-theme=dark]){--docusaurus-highlighted-code-line-bg:#646464}.theme-code-block-highlighted-line{background-color:var(--docusaurus-highlighted-code-line-bg);display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}.codeLine_lJS_{counter-increment:a;display:table-row}.codeLineNumber_Tfdd{background:var(--ifm-pre-background);display:table-cell;left:0;overflow-wrap:normal;padding:0 var(--ifm-pre-padding);position:sticky;text-align:right;width:1%}.codeLineNumber_Tfdd:before{content:counter(a);opacity:.4}.codeLineContent_feaV{padding-right:var(--ifm-pre-padding)}.theme-code-block:hover .copyButtonCopied_obH4{opacity:1!important}.copyButtonIcons_eSgA{height:1.125rem;position:relative;width:1.125rem}.copyButtonIcon_y97N,.copyButtonSuccessIcon_LjdS{fill:currentColor;height:inherit;left:0;opacity:inherit;position:absolute;top:0;transition:all var(--ifm-transition-fast) ease;width:inherit}.copyButtonSuccessIcon_LjdS{color:#00d600;left:50%;opacity:0;top:50%;transform:translate(-50%,-50%) scale(.33)}.copyButtonCopied_obH4 .copyButtonIcon_y97N{opacity:0;transform:scale(.33)}.copyButtonCopied_obH4 .copyButtonSuccessIcon_LjdS{opacity:1;transform:translate(-50%,-50%) scale(1);transition-delay:75ms}.wordWrapButtonIcon_Bwma{height:1.2rem;width:1.2rem}.details_lb9f{--docusaurus-details-summary-arrow-size:0.38rem;--docusaurus-details-transition:transform 200ms ease;--docusaurus-details-decoration-color:grey}.details_lb9f>summary{cursor:pointer;padding-left:1rem;position:relative}.details_lb9f>summary::-webkit-details-marker{display:none}.details_lb9f>summary:before{border-color:#0000 #0000 #0000 var(--docusaurus-details-decoration-color);border-style:solid;border-width:var(--docusaurus-details-summary-arrow-size);content:"";left:0;position:absolute;top:.45rem;transform:rotate(0);transform-origin:calc(var(--docusaurus-details-summary-arrow-size)/2) 50%;transition:var(--docusaurus-details-transition)}.collapsibleContent_i85q{border-top:1px solid var(--docusaurus-details-decoration-color);margin-top:1rem;padding-top:1rem}.details_b_Ee{--docusaurus-details-decoration-color:var(--ifm-alert-border-color);--docusaurus-details-transition:transform var(--ifm-transition-fast) ease;border:1px solid var(--ifm-alert-border-color);margin:0 0 var(--ifm-spacing-vertical)}.img_ev3q{height:auto}.admonition_LlT9{margin-bottom:1em}.admonitionHeading_tbUL{font:var(--ifm-heading-font-weight) var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.3rem}.admonitionHeading_tbUL code{text-transform:none}.admonitionIcon_kALy{display:inline-block;margin-right:.4em;vertical-align:middle}.admonitionIcon_kALy svg{fill:var(--ifm-alert-foreground-color);display:inline-block;height:1.6em;width:1.6em}.breadcrumbHomeIcon_YNFT{height:1.1rem;position:relative;top:1px;vertical-align:top;width:1.1rem}.breadcrumbsContainer_Z_bl{--ifm-breadcrumb-size-multiplier:0.8;margin-bottom:.8rem}.searchContextInput_mXoe,.searchQueryInput_CFBF{background:var(--ifm-background-color);border:var(--ifm-global-border-width) solid var(--ifm-color-content-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-font-color-base);font-size:var(--ifm-font-size-base);margin-bottom:1rem;padding:.5rem;width:100%}.searchResultItem_U687{border-bottom:1px solid #dfe3e8;padding:1rem 0}.searchResultItemPath_uIbk{color:var(--ifm-color-content-secondary);font-size:.8rem;margin:.5rem 0 0}.searchResultItemSummary_oZHr{font-style:italic;margin:.5rem 0 0}.backToTopButton_sjWU{background-color:var(--ifm-color-emphasis-200);border-radius:50%;bottom:1.3rem;box-shadow:var(--ifm-global-shadow-lw);height:3rem;opacity:0;position:fixed;right:1.3rem;transform:scale(0);transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default);visibility:hidden;width:3rem;z-index:calc(var(--ifm-z-index-fixed) - 1)}.backToTopButton_sjWU:after{background-color:var(--ifm-color-emphasis-1000);content:" ";display:inline-block;height:100%;-webkit-mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;width:100%}.backToTopButtonShow_xfvO{opacity:1;transform:scale(1);visibility:visible}[data-theme=dark]:root{--docusaurus-collapse-button-bg:#ffffff0d;--docusaurus-collapse-button-bg-hover:#ffffff1a}.collapseSidebarButton_PEFL{display:none;margin:0}.docSidebarContainer_b6E3,.sidebarLogo_isFc{display:none}.docMainContainer_gTbr,.docPage__5DB{display:flex;width:100%}.docPage__5DB{flex:1 0}.docsWrapper_BCFX{display:flex;flex:1 0 auto}@media (min-width:997px){.collapseSidebarButton_PEFL,.expandButton_m80_{background-color:var(--docusaurus-collapse-button-bg)}:root{--docusaurus-announcement-bar-height:30px}.announcementBarClose_gvF7,.announcementBarPlaceholder_vyr4{flex-basis:50px}.searchBox_ZlJk{padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.lastUpdated_vwxv{text-align:right}.tocMobile_ITEo{display:none}.docItemCol_VOVn{max-width:75%!important}.collapseSidebarButton_PEFL{border:1px solid var(--ifm-toc-border-color);border-radius:0;bottom:0;display:block!important;height:40px;position:sticky}.collapseSidebarButtonIcon_kv0_{margin-top:4px;transform:rotate(180deg)}.expandButtonIcon_BlDH,[dir=rtl] .collapseSidebarButtonIcon_kv0_{transform:rotate(0)}.collapseSidebarButton_PEFL:focus,.collapseSidebarButton_PEFL:hover,.expandButton_m80_:focus,.expandButton_m80_:hover{background-color:var(--docusaurus-collapse-button-bg-hover)}.menuHtmlItem_M9Kj{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu_SIkG{flex-grow:1;padding:.5rem}@supports (scrollbar-gutter:stable){.menu_SIkG{padding:.5rem 0 .5rem .5rem;scrollbar-gutter:stable}}.menuWithAnnouncementBar_GW3s{margin-bottom:var(--docusaurus-announcement-bar-height)}.sidebar_njMd{display:flex;flex-direction:column;height:100%;padding-top:var(--ifm-navbar-height);width:var(--doc-sidebar-width)}.sidebarWithHideableNavbar_wUlq{padding-top:0}.sidebarHidden_VK0M{opacity:0;visibility:hidden}.sidebarLogo_isFc{align-items:center;color:inherit!important;display:flex!important;margin:0 var(--ifm-navbar-padding-horizontal);max-height:var(--ifm-navbar-height);min-height:var(--ifm-navbar-height);text-decoration:none!important}.sidebarLogo_isFc img{height:2rem;margin-right:.5rem}.expandButton_m80_{align-items:center;display:flex;height:100%;justify-content:center;position:absolute;right:0;top:0;transition:background-color var(--ifm-transition-fast) ease;width:100%}[dir=rtl] .expandButtonIcon_BlDH{transform:rotate(180deg)}.docSidebarContainer_b6E3{border-right:1px solid var(--ifm-toc-border-color);-webkit-clip-path:inset(0);clip-path:inset(0);display:block;margin-top:calc(var(--ifm-navbar-height)*-1);transition:width var(--ifm-transition-fast) ease;width:var(--doc-sidebar-width);will-change:width}.docSidebarContainerHidden_b3ry{cursor:pointer;width:var(--doc-sidebar-hidden-width)}.sidebarViewport_Xe31{height:100%;max-height:100vh;position:sticky;top:0}.docMainContainer_gTbr{flex-grow:1;max-width:calc(100% - var(--doc-sidebar-width))}.docMainContainerEnhanced_Uz_u{max-width:calc(100% - var(--doc-sidebar-hidden-width))}.docItemWrapperEnhanced_czyv{max-width:calc(var(--ifm-container-width) + var(--doc-sidebar-width))!important}}@media (min-width:1440px){.container{max-width:var(--ifm-container-width-xl)}}@media (max-width:996px){.col{--ifm-col-width:100%;flex-basis:var(--ifm-col-width);margin-left:0}.footer{--ifm-footer-padding-horizontal:0}.colorModeToggle_DEke,.footer__link-separator,.navbar-sidebar__back,.navbar__item,.tableOfContents_bqdL{display:none}.footer__col{margin-bottom:calc(var(--ifm-spacing-vertical)*3)}.footer__link-item{display:block}.hero{padding-left:0;padding-right:0}.navbar>.container,.navbar>.container-fluid{padding:0}.navbar__toggle{display:inherit}.navbar__search-input{width:9rem}.pills--block,.tabs--block{flex-direction:column}.searchBox_ZlJk{position:absolute;right:var(--ifm-navbar-padding-horizontal)}.docItemContainer_F8PC{padding:0 .3rem}}@media not (max-width:996px){.searchBar_RVTs.searchBarLeft_MXDe .dropdownMenu_qbY6{left:0!important;right:auto!important}}@media only screen and (max-width:996px){.searchQueryColumn_q7nx{max-width:60%!important}.searchContextColumn_oWAF{max-width:40%!important}}@media (max-width:768px){#theme-main h1{font-size:50px!important;font-weight:700;line-height:3rem!important}#theme-main .header-docs{margin-bottom:20px}}@media (max-width:576px){.markdown h1:first-child{--ifm-h1-font-size:2rem}.markdown>h2{--ifm-h2-font-size:1.5rem}.markdown>h3{--ifm-h3-font-size:1.25rem}.navbar__search-input:not(:focus){width:2rem}.searchBar_RVTs .dropdownMenu_qbY6{max-width:calc(100vw - var(--ifm-navbar-padding-horizontal)*2);width:var(--search-local-modal-width-sm,340px)}.searchBarContainer_NW3z:not(.focused_OWtg) .searchClearButton_qk4g,.searchHintContainer_Pkmr{display:none}}@media screen and (max-width:576px){.searchQueryColumn_q7nx{max-width:100%!important}.searchContextColumn_oWAF{max-width:100%!important;padding-left:var(--ifm-spacing-horizontal)!important}}@media (hover:hover){.backToTopButton_sjWU:hover{background-color:var(--ifm-color-emphasis-300)}}@media (pointer:fine){.thin-scrollbar{scrollbar-width:thin}.thin-scrollbar::-webkit-scrollbar{height:var(--ifm-scrollbar-size);width:var(--ifm-scrollbar-size)}.thin-scrollbar::-webkit-scrollbar-track{background:var(--ifm-scrollbar-track-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb{background:var(--ifm-scrollbar-thumb-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb:hover{background:var(--ifm-scrollbar-thumb-hover-background-color)}}@media (prefers-reduced-motion:reduce){:root{--ifm-transition-fast:0ms;--ifm-transition-slow:0ms}}@media print{.announcementBar_mb4j,.footer,.menu,.navbar,.pagination-nav,.table-of-contents,.tocMobile_ITEo{display:none}.tabs{page-break-inside:avoid}.codeBlockLines_e6Vv{white-space:pre-wrap}}
\ No newline at end of file
diff --git a/zh/assets/css/styles.dc1e3afe.css b/zh/assets/css/styles.dc1e3afe.css
deleted file mode 100644
index d8ed1e334..000000000
--- a/zh/assets/css/styles.dc1e3afe.css
+++ /dev/null
@@ -1 +0,0 @@
-.col,.container{padding:0 var(--ifm-spacing-horizontal);width:100%}.markdown>h2,.markdown>h3,.markdown>h4,.markdown>h5,.markdown>h6{margin-bottom:calc(var(--ifm-heading-vertical-rhythm-bottom)*var(--ifm-leading))}pre,table{overflow:auto}blockquote,pre{margin:0 0 var(--ifm-spacing-vertical)}.breadcrumbs__link,.button{transition-timing-function:var(--ifm-transition-timing-default)}.button,code{vertical-align:middle}.button--outline.button--active,.button--outline:active,.button--outline:hover,:root{--ifm-button-color:var(--ifm-font-color-base-inverse)}.menu__link:hover,a{transition:color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.navbar--dark,:root{--ifm-navbar-link-hover-color:var(--ifm-color-primary)}.menu,.navbar-sidebar{overflow-x:hidden}:root,html[data-theme=dark]{--ifm-color-emphasis-500:var(--ifm-color-gray-500)}.markdown li,body{word-wrap:break-word}.toggleButton_gllP,html{-webkit-tap-highlight-color:transparent}*,.DocSearch-Container,.DocSearch-Container *{box-sizing:border-box}:root{--ifm-color-scheme:light;--ifm-dark-value:10%;--ifm-darker-value:15%;--ifm-darkest-value:30%;--ifm-light-value:15%;--ifm-lighter-value:30%;--ifm-lightest-value:50%;--ifm-contrast-background-value:90%;--ifm-contrast-foreground-value:70%;--ifm-contrast-background-dark-value:70%;--ifm-contrast-foreground-dark-value:90%;--ifm-color-primary:#3578e5;--ifm-color-secondary:#ebedf0;--ifm-color-success:#00a400;--ifm-color-info:#54c7ec;--ifm-color-warning:#ffba00;--ifm-color-danger:#fa383e;--ifm-color-primary-dark:#306cce;--ifm-color-primary-darker:#2d66c3;--ifm-color-primary-darkest:#2554a0;--ifm-color-primary-light:#538ce9;--ifm-color-primary-lighter:#72a1ed;--ifm-color-primary-lightest:#9abcf2;--ifm-color-primary-contrast-background:#ebf2fc;--ifm-color-primary-contrast-foreground:#102445;--ifm-color-secondary-dark:#d4d5d8;--ifm-color-secondary-darker:#c8c9cc;--ifm-color-secondary-darkest:#a4a6a8;--ifm-color-secondary-light:#eef0f2;--ifm-color-secondary-lighter:#f1f2f5;--ifm-color-secondary-lightest:#f5f6f8;--ifm-color-secondary-contrast-background:#fdfdfe;--ifm-color-secondary-contrast-foreground:#474748;--ifm-color-success-dark:#009400;--ifm-color-success-darker:#008b00;--ifm-color-success-darkest:#007300;--ifm-color-success-light:#26b226;--ifm-color-success-lighter:#4dbf4d;--ifm-color-success-lightest:#80d280;--ifm-color-success-contrast-background:#e6f6e6;--ifm-color-success-contrast-foreground:#003100;--ifm-color-info-dark:#4cb3d4;--ifm-color-info-darker:#47a9c9;--ifm-color-info-darkest:#3b8ba5;--ifm-color-info-light:#6ecfef;--ifm-color-info-lighter:#87d8f2;--ifm-color-info-lightest:#aae3f6;--ifm-color-info-contrast-background:#eef9fd;--ifm-color-info-contrast-foreground:#193c47;--ifm-color-warning-dark:#e6a700;--ifm-color-warning-darker:#d99e00;--ifm-color-warning-darkest:#b38200;--ifm-color-warning-light:#ffc426;--ifm-color-warning-lighter:#ffcf4d;--ifm-color-warning-lightest:#ffdd80;--ifm-color-warning-contrast-background:#fff8e6;--ifm-color-warning-contrast-foreground:#4d3800;--ifm-color-danger-dark:#e13238;--ifm-color-danger-darker:#d53035;--ifm-color-danger-darkest:#af272b;--ifm-color-danger-light:#fb565b;--ifm-color-danger-lighter:#fb7478;--ifm-color-danger-lightest:#fd9c9f;--ifm-color-danger-contrast-background:#ffebec;--ifm-color-danger-contrast-foreground:#4b1113;--ifm-color-white:#fff;--ifm-color-black:#000;--ifm-color-gray-0:var(--ifm-color-white);--ifm-color-gray-100:#f5f6f7;--ifm-color-gray-200:#ebedf0;--ifm-color-gray-300:#dadde1;--ifm-color-gray-400:#ccd0d5;--ifm-color-gray-500:#bec3c9;--ifm-color-gray-600:#8d949e;--ifm-color-gray-700:#606770;--ifm-color-gray-800:#444950;--ifm-color-gray-900:#1c1e21;--ifm-color-gray-1000:var(--ifm-color-black);--ifm-color-emphasis-0:var(--ifm-color-gray-0);--ifm-color-emphasis-100:var(--ifm-color-gray-100);--ifm-color-emphasis-200:var(--ifm-color-gray-200);--ifm-color-emphasis-300:var(--ifm-color-gray-300);--ifm-color-emphasis-400:var(--ifm-color-gray-400);--ifm-color-emphasis-600:var(--ifm-color-gray-600);--ifm-color-emphasis-700:var(--ifm-color-gray-700);--ifm-color-emphasis-800:var(--ifm-color-gray-800);--ifm-color-emphasis-900:var(--ifm-color-gray-900);--ifm-color-emphasis-1000:var(--ifm-color-gray-1000);--ifm-color-content:var(--ifm-color-emphasis-900);--ifm-color-content-inverse:var(--ifm-color-emphasis-0);--ifm-color-content-secondary:#525860;--ifm-background-color:#0000;--ifm-background-surface-color:var(--ifm-color-content-inverse);--ifm-global-border-width:1px;--ifm-global-radius:0.4rem;--ifm-hover-overlay:#0000000d;--ifm-font-color-base:var(--ifm-color-content);--ifm-font-color-base-inverse:var(--ifm-color-content-inverse);--ifm-font-color-secondary:var(--ifm-color-content-secondary);--ifm-font-family-base:system-ui,-apple-system,Segoe UI,Roboto,Ubuntu,Cantarell,Noto Sans,sans-serif,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";--ifm-font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--ifm-font-size-base:100%;--ifm-font-weight-light:300;--ifm-font-weight-normal:400;--ifm-font-weight-semibold:500;--ifm-font-weight-bold:700;--ifm-font-weight-base:var(--ifm-font-weight-normal);--ifm-line-height-base:1.65;--ifm-global-spacing:1rem;--ifm-spacing-vertical:var(--ifm-global-spacing);--ifm-spacing-horizontal:var(--ifm-global-spacing);--ifm-transition-fast:200ms;--ifm-transition-slow:400ms;--ifm-transition-timing-default:cubic-bezier(0.08,0.52,0.52,1);--ifm-global-shadow-lw:0 1px 2px 0 #0000001a;--ifm-global-shadow-md:0 5px 40px #0003;--ifm-global-shadow-tl:0 12px 28px 0 #0003,0 2px 4px 0 #0000001a;--ifm-z-index-dropdown:100;--ifm-z-index-fixed:200;--ifm-z-index-overlay:400;--ifm-container-width:1140px;--ifm-container-width-xl:1320px;--ifm-code-background:#f6f7f8;--ifm-code-border-radius:var(--ifm-global-radius);--ifm-code-font-size:90%;--ifm-code-padding-horizontal:0.1rem;--ifm-code-padding-vertical:0.1rem;--ifm-pre-background:var(--ifm-code-background);--ifm-pre-border-radius:var(--ifm-code-border-radius);--ifm-pre-color:inherit;--ifm-pre-line-height:1.45;--ifm-pre-padding:1rem;--ifm-heading-color:inherit;--ifm-heading-margin-top:0;--ifm-heading-margin-bottom:var(--ifm-spacing-vertical);--ifm-heading-font-family:var(--ifm-font-family-base);--ifm-heading-font-weight:var(--ifm-font-weight-bold);--ifm-heading-line-height:1.25;--ifm-h1-font-size:2rem;--ifm-h2-font-size:1.5rem;--ifm-h3-font-size:1.25rem;--ifm-h4-font-size:1rem;--ifm-h5-font-size:0.875rem;--ifm-h6-font-size:0.85rem;--ifm-image-alignment-padding:1.25rem;--ifm-leading-desktop:1.25;--ifm-leading:calc(var(--ifm-leading-desktop)*1rem);--ifm-list-left-padding:2rem;--ifm-list-margin:1rem;--ifm-list-item-margin:0.25rem;--ifm-list-paragraph-margin:1rem;--ifm-table-cell-padding:0.75rem;--ifm-table-background:#0000;--ifm-table-stripe-background:#00000008;--ifm-table-border-width:1px;--ifm-table-border-color:var(--ifm-color-emphasis-300);--ifm-table-head-background:inherit;--ifm-table-head-color:inherit;--ifm-table-head-font-weight:var(--ifm-font-weight-bold);--ifm-table-cell-color:inherit;--ifm-link-color:var(--ifm-color-primary);--ifm-link-decoration:none;--ifm-link-hover-color:var(--ifm-link-color);--ifm-link-hover-decoration:underline;--ifm-paragraph-margin-bottom:var(--ifm-leading);--ifm-blockquote-font-size:var(--ifm-font-size-base);--ifm-blockquote-border-left-width:2px;--ifm-blockquote-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-blockquote-padding-vertical:0;--ifm-blockquote-shadow:none;--ifm-blockquote-color:var(--ifm-color-emphasis-800);--ifm-blockquote-border-color:var(--ifm-color-emphasis-300);--ifm-hr-background-color:var(--ifm-color-emphasis-500);--ifm-hr-height:1px;--ifm-hr-margin-vertical:1.5rem;--ifm-scrollbar-size:7px;--ifm-scrollbar-track-background-color:#f1f1f1;--ifm-scrollbar-thumb-background-color:silver;--ifm-scrollbar-thumb-hover-background-color:#a7a7a7;--ifm-alert-background-color:inherit;--ifm-alert-border-color:inherit;--ifm-alert-border-radius:var(--ifm-global-radius);--ifm-alert-border-width:0px;--ifm-alert-border-left-width:5px;--ifm-alert-color:var(--ifm-font-color-base);--ifm-alert-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-alert-padding-vertical:var(--ifm-spacing-vertical);--ifm-alert-shadow:var(--ifm-global-shadow-lw);--ifm-avatar-intro-margin:1rem;--ifm-avatar-intro-alignment:inherit;--ifm-avatar-photo-size:3rem;--ifm-badge-background-color:inherit;--ifm-badge-border-color:inherit;--ifm-badge-border-radius:var(--ifm-global-radius);--ifm-badge-border-width:var(--ifm-global-border-width);--ifm-badge-color:var(--ifm-color-white);--ifm-badge-padding-horizontal:calc(var(--ifm-spacing-horizontal)*0.5);--ifm-badge-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-breadcrumb-border-radius:1.5rem;--ifm-breadcrumb-spacing:0.5rem;--ifm-breadcrumb-color-active:var(--ifm-color-primary);--ifm-breadcrumb-item-background-active:var(--ifm-hover-overlay);--ifm-breadcrumb-padding-horizontal:0.8rem;--ifm-breadcrumb-padding-vertical:0.4rem;--ifm-breadcrumb-size-multiplier:1;--ifm-breadcrumb-separator:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" x="0px" y="0px" viewBox="0 0 256 256"><g><g><polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128"/></g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g><g></g></svg>');--ifm-breadcrumb-separator-filter:none;--ifm-breadcrumb-separator-size:0.5rem;--ifm-breadcrumb-separator-size-multiplier:1.25;--ifm-button-background-color:inherit;--ifm-button-border-color:var(--ifm-button-background-color);--ifm-button-border-width:var(--ifm-global-border-width);--ifm-button-font-weight:var(--ifm-font-weight-bold);--ifm-button-padding-horizontal:1.5rem;--ifm-button-padding-vertical:0.375rem;--ifm-button-size-multiplier:1;--ifm-button-transition-duration:var(--ifm-transition-fast);--ifm-button-border-radius:calc(var(--ifm-global-radius)*var(--ifm-button-size-multiplier));--ifm-button-group-spacing:2px;--ifm-card-background-color:var(--ifm-background-surface-color);--ifm-card-border-radius:calc(var(--ifm-global-radius)*2);--ifm-card-horizontal-spacing:var(--ifm-global-spacing);--ifm-card-vertical-spacing:var(--ifm-global-spacing);--ifm-toc-border-color:var(--ifm-color-emphasis-300);--ifm-toc-link-color:var(--ifm-color-content-secondary);--ifm-toc-padding-vertical:0.5rem;--ifm-toc-padding-horizontal:0.5rem;--ifm-dropdown-background-color:var(--ifm-background-surface-color);--ifm-dropdown-font-weight:var(--ifm-font-weight-semibold);--ifm-dropdown-link-color:var(--ifm-font-color-base);--ifm-dropdown-hover-background-color:var(--ifm-hover-overlay);--ifm-footer-background-color:var(--ifm-color-emphasis-100);--ifm-footer-color:inherit;--ifm-footer-link-color:var(--ifm-color-emphasis-700);--ifm-footer-link-hover-color:var(--ifm-color-primary);--ifm-footer-link-horizontal-spacing:0.5rem;--ifm-footer-padding-horizontal:calc(var(--ifm-spacing-horizontal)*2);--ifm-footer-padding-vertical:calc(var(--ifm-spacing-vertical)*2);--ifm-footer-title-color:inherit;--ifm-footer-logo-max-width:min(30rem,90vw);--ifm-hero-background-color:var(--ifm-background-surface-color);--ifm-hero-text-color:var(--ifm-color-emphasis-800);--ifm-menu-color:var(--ifm-color-emphasis-700);--ifm-menu-color-active:var(--ifm-color-primary);--ifm-menu-color-background-active:var(--ifm-hover-overlay);--ifm-menu-color-background-hover:var(--ifm-hover-overlay);--ifm-menu-link-padding-horizontal:0.75rem;--ifm-menu-link-padding-vertical:0.375rem;--ifm-menu-link-sublist-icon:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" width="16px" height="16px" viewBox="0 0 24 24"><path fill="rgba(0,0,0,0.5)" d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>');--ifm-menu-link-sublist-icon-filter:none;--ifm-navbar-background-color:var(--ifm-background-surface-color);--ifm-navbar-height:3.75rem;--ifm-navbar-item-padding-horizontal:0.75rem;--ifm-navbar-item-padding-vertical:0.25rem;--ifm-navbar-link-color:var(--ifm-font-color-base);--ifm-navbar-link-active-color:var(--ifm-link-color);--ifm-navbar-padding-horizontal:var(--ifm-spacing-horizontal);--ifm-navbar-padding-vertical:calc(var(--ifm-spacing-vertical)*0.5);--ifm-navbar-shadow:var(--ifm-global-shadow-lw);--ifm-navbar-search-input-background-color:var(--ifm-color-emphasis-200);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-800);--ifm-navbar-search-input-placeholder-color:var(--ifm-color-emphasis-500);--ifm-navbar-search-input-icon:url('data:image/svg+xml;utf8,<svg fill="currentColor" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16" height="16px" width="16px"><path d="M6.02945,10.20327a4.17382,4.17382,0,1,1,4.17382-4.17382A4.15609,4.15609,0,0,1,6.02945,10.20327Zm9.69195,4.2199L10.8989,9.59979A5.88021,5.88021,0,0,0,12.058,6.02856,6.00467,6.00467,0,1,0,9.59979,10.8989l4.82338,4.82338a.89729.89729,0,0,0,1.29912,0,.89749.89749,0,0,0-.00087-1.29909Z" /></svg>');--ifm-navbar-sidebar-width:83vw;--ifm-pagination-border-radius:var(--ifm-global-radius);--ifm-pagination-color-active:var(--ifm-color-primary);--ifm-pagination-font-size:1rem;--ifm-pagination-item-active-background:var(--ifm-hover-overlay);--ifm-pagination-page-spacing:0.2em;--ifm-pagination-padding-horizontal:calc(var(--ifm-spacing-horizontal)*1);--ifm-pagination-padding-vertical:calc(var(--ifm-spacing-vertical)*0.25);--ifm-pagination-nav-border-radius:var(--ifm-global-radius);--ifm-pagination-nav-color-hover:var(--ifm-color-primary);--ifm-pills-color-active:var(--ifm-color-primary);--ifm-pills-color-background-active:var(--ifm-hover-overlay);--ifm-pills-spacing:0.125rem;--ifm-tabs-color:var(--ifm-font-color-secondary);--ifm-tabs-color-active:var(--ifm-color-primary);--ifm-tabs-color-active-border:var(--ifm-tabs-color-active);--ifm-tabs-padding-horizontal:1rem;--ifm-tabs-padding-vertical:1rem;--docusaurus-progress-bar-color:var(--ifm-color-primary);--ifm-color-primary:#06527a;--ifm-color-primary-dark:#054a6e;--ifm-color-primary-darker:#054668;--ifm-color-primary-darkest:#043955;--ifm-color-primary-light:#075a86;--ifm-color-primary-lighter:#075e8c;--ifm-color-primary-lightest:#086b9f;--ifm-color-secondary:#ffc61c;--ifm-color-secondary-light:#ffcd38;--dark:#33313b;--light:#f3f3f3;--docusaurus-announcement-bar-height:auto;--docusaurus-tag-list-border:var(--ifm-color-emphasis-300);--docusaurus-collapse-button-bg:#0000;--docusaurus-collapse-button-bg-hover:#0000001a;--doc-sidebar-width:300px;--doc-sidebar-hidden-width:30px;--docsearch-primary-color:#5468ff;--docsearch-text-color:#1c1e21;--docsearch-spacing:12px;--docsearch-icon-stroke-width:1.4;--docsearch-highlight-color:var(--docsearch-primary-color);--docsearch-muted-color:#969faf;--docsearch-container-background:#656c85cc;--docsearch-logo-color:#5468ff;--docsearch-modal-width:560px;--docsearch-modal-height:600px;--docsearch-modal-background:#f5f6f7;--docsearch-modal-shadow:inset 1px 1px 0 0 #ffffff80,0 3px 8px 0 #555a64;--docsearch-searchbox-height:56px;--docsearch-searchbox-background:#ebedf0;--docsearch-searchbox-focus-background:#fff;--docsearch-searchbox-shadow:inset 0 0 0 2px var(--docsearch-primary-color);--docsearch-hit-height:56px;--docsearch-hit-color:#444950;--docsearch-hit-active-color:#fff;--docsearch-hit-background:#fff;--docsearch-hit-shadow:0 1px 3px 0 #d4d9e1;--docsearch-key-gradient:linear-gradient(-225deg,#d5dbe4,#f8f8f8);--docsearch-key-shadow:inset 0 -2px 0 0 #cdcde6,inset 0 0 1px 1px #fff,0 1px 2px 1px #1e235a66;--docsearch-footer-height:44px;--docsearch-footer-background:#fff;--docsearch-footer-shadow:0 -1px 0 0 #e0e3e8,0 -3px 6px 0 #45629b1f;--docsearch-primary-color:var(--ifm-color-primary);--docsearch-text-color:var(--ifm-font-color-base)}.badge--danger,.badge--info,.badge--primary,.badge--secondary,.badge--success,.badge--warning{--ifm-badge-border-color:var(--ifm-badge-background-color)}.button--link,.button--outline{--ifm-button-background-color:#0000}html{-webkit-font-smoothing:antialiased;-webkit-text-size-adjust:100%;text-size-adjust:100%;background-color:var(--ifm-background-color);color:var(--ifm-font-color-base);color-scheme:var(--ifm-color-scheme);font:var(--ifm-font-size-base)/var(--ifm-line-height-base) var(--ifm-font-family-base);text-rendering:optimizelegibility}iframe{border:0;color-scheme:auto}.container{margin:0 auto;max-width:var(--ifm-container-width)}.container--fluid{max-width:inherit}.row{display:flex;flex-wrap:wrap;margin:0 calc(var(--ifm-spacing-horizontal)*-1)}.margin-bottom--none,.margin-vert--none,.markdown>:last-child{margin-bottom:0!important}.margin-top--none,.margin-vert--none,.tabItem_LNqP{margin-top:0!important}.row--no-gutters{margin-left:0;margin-right:0}.margin-horiz--none,.margin-right--none{margin-right:0!important}.row--no-gutters>.col{padding-left:0;padding-right:0}.row--align-top{align-items:flex-start}.row--align-bottom{align-items:flex-end}.menuExternalLink_NmtK,.row--align-center{align-items:center}.row--align-stretch{align-items:stretch}.row--align-baseline{align-items:baseline}.col{--ifm-col-width:100%;flex:1 0;margin-left:0;max-width:var(--ifm-col-width)}.padding-bottom--none,.padding-vert--none{padding-bottom:0!important}.padding-top--none,.padding-vert--none{padding-top:0!important}.padding-horiz--none,.padding-left--none{padding-left:0!important}.padding-horiz--none,.padding-right--none{padding-right:0!important}.col[class*=col--]{flex:0 0 var(--ifm-col-width)}.col--1{--ifm-col-width:8.33333%}.col--offset-1{margin-left:8.33333%}.col--2{--ifm-col-width:16.66667%}.col--offset-2{margin-left:16.66667%}.col--3{--ifm-col-width:25%}.col--offset-3{margin-left:25%}.col--4{--ifm-col-width:33.33333%}.col--offset-4{margin-left:33.33333%}.col--5{--ifm-col-width:41.66667%}.col--offset-5{margin-left:41.66667%}.col--6{--ifm-col-width:50%}.col--offset-6{margin-left:50%}.col--7{--ifm-col-width:58.33333%}.col--offset-7{margin-left:58.33333%}.col--8{--ifm-col-width:66.66667%}.col--offset-8{margin-left:66.66667%}.col--9{--ifm-col-width:75%}.col--offset-9{margin-left:75%}.col--10{--ifm-col-width:83.33333%}.col--offset-10{margin-left:83.33333%}.col--11{--ifm-col-width:91.66667%}.col--offset-11{margin-left:91.66667%}.col--12{--ifm-col-width:100%}.col--offset-12{margin-left:100%}.margin-horiz--none,.margin-left--none{margin-left:0!important}.margin--none{margin:0!important}.margin-bottom--xs,.margin-vert--xs{margin-bottom:.25rem!important}.margin-top--xs,.margin-vert--xs{margin-top:.25rem!important}.margin-horiz--xs,.margin-left--xs{margin-left:.25rem!important}.margin-horiz--xs,.margin-right--xs{margin-right:.25rem!important}.margin--xs{margin:.25rem!important}.margin-bottom--sm,.margin-vert--sm{margin-bottom:.5rem!important}.margin-top--sm,.margin-vert--sm{margin-top:.5rem!important}.margin-horiz--sm,.margin-left--sm{margin-left:.5rem!important}.margin-horiz--sm,.margin-right--sm{margin-right:.5rem!important}.margin--sm{margin:.5rem!important}.margin-bottom--md,.margin-vert--md{margin-bottom:1rem!important}.margin-top--md,.margin-vert--md{margin-top:1rem!important}.margin-horiz--md,.margin-left--md{margin-left:1rem!important}.margin-horiz--md,.margin-right--md{margin-right:1rem!important}.margin--md{margin:1rem!important}.margin-bottom--lg,.margin-vert--lg{margin-bottom:2rem!important}.margin-top--lg,.margin-vert--lg{margin-top:2rem!important}.margin-horiz--lg,.margin-left--lg{margin-left:2rem!important}.margin-horiz--lg,.margin-right--lg{margin-right:2rem!important}.margin--lg{margin:2rem!important}.margin-bottom--xl,.margin-vert--xl{margin-bottom:5rem!important}.margin-top--xl,.margin-vert--xl{margin-top:5rem!important}.margin-horiz--xl,.margin-left--xl{margin-left:5rem!important}.margin-horiz--xl,.margin-right--xl{margin-right:5rem!important}.margin--xl{margin:5rem!important}.padding--none{padding:0!important}.padding-bottom--xs,.padding-vert--xs{padding-bottom:.25rem!important}.padding-top--xs,.padding-vert--xs{padding-top:.25rem!important}.padding-horiz--xs,.padding-left--xs{padding-left:.25rem!important}.padding-horiz--xs,.padding-right--xs{padding-right:.25rem!important}.padding--xs{padding:.25rem!important}.padding-bottom--sm,.padding-vert--sm{padding-bottom:.5rem!important}.padding-top--sm,.padding-vert--sm{padding-top:.5rem!important}.padding-horiz--sm,.padding-left--sm{padding-left:.5rem!important}.padding-horiz--sm,.padding-right--sm{padding-right:.5rem!important}.padding--sm{padding:.5rem!important}.padding-bottom--md,.padding-vert--md{padding-bottom:1rem!important}.padding-top--md,.padding-vert--md{padding-top:1rem!important}.padding-horiz--md,.padding-left--md{padding-left:1rem!important}.padding-horiz--md,.padding-right--md{padding-right:1rem!important}.padding--md{padding:1rem!important}.padding-bottom--lg,.padding-vert--lg{padding-bottom:2rem!important}.padding-top--lg,.padding-vert--lg{padding-top:2rem!important}.padding-horiz--lg,.padding-left--lg{padding-left:2rem!important}.padding-horiz--lg,.padding-right--lg{padding-right:2rem!important}.padding--lg{padding:2rem!important}.padding-bottom--xl,.padding-vert--xl{padding-bottom:5rem!important}.padding-top--xl,.padding-vert--xl{padding-top:5rem!important}.padding-horiz--xl,.padding-left--xl{padding-left:5rem!important}.padding-horiz--xl,.padding-right--xl{padding-right:5rem!important}.padding--xl{padding:5rem!important}code{background-color:var(--ifm-code-background);border:.1rem solid #0000001a;border-radius:var(--ifm-code-border-radius);font-family:var(--ifm-font-family-monospace);font-size:var(--ifm-code-font-size);padding:var(--ifm-code-padding-vertical) var(--ifm-code-padding-horizontal)}a code{color:inherit}pre{background-color:var(--ifm-pre-background);border-radius:var(--ifm-pre-border-radius);color:var(--ifm-pre-color);font:var(--ifm-code-font-size)/var(--ifm-pre-line-height) var(--ifm-font-family-monospace);padding:var(--ifm-pre-padding)}pre code{background-color:initial;border:none;font-size:100%;line-height:inherit;padding:0}kbd{background-color:var(--ifm-color-emphasis-0);border:1px solid var(--ifm-color-emphasis-400);border-radius:.2rem;box-shadow:inset 0 -1px 0 var(--ifm-color-emphasis-400);color:var(--ifm-color-emphasis-800);font:80% var(--ifm-font-family-monospace);padding:.15rem .3rem}h1,h2,h3,h4,h5,h6{color:var(--ifm-heading-color);font-family:var(--ifm-heading-font-family);font-weight:var(--ifm-heading-font-weight);line-height:var(--ifm-heading-line-height);margin:var(--ifm-heading-margin-top) 0 var(--ifm-heading-margin-bottom) 0}h1{font-size:var(--ifm-h1-font-size)}h2{font-size:var(--ifm-h2-font-size)}h3{font-size:var(--ifm-h3-font-size)}h4{font-size:var(--ifm-h4-font-size)}h5{font-size:var(--ifm-h5-font-size)}h6{font-size:var(--ifm-h6-font-size)}.container_lyt7,.container_lyt7>svg,img{max-width:100%}img[align=right]{padding-left:var(--image-alignment-padding)}img[align=left]{padding-right:var(--image-alignment-padding)}.markdown{--ifm-h1-vertical-rhythm-top:3;--ifm-h2-vertical-rhythm-top:2;--ifm-h3-vertical-rhythm-top:1.5;--ifm-heading-vertical-rhythm-top:1.25;--ifm-h1-vertical-rhythm-bottom:1.25;--ifm-heading-vertical-rhythm-bottom:1}.markdown:after,.markdown:before{content:"";display:table}.markdown:after{clear:both}.markdown h1:first-child{--ifm-h1-font-size:3rem;margin-bottom:calc(var(--ifm-h1-vertical-rhythm-bottom)*var(--ifm-leading))}.markdown>h2{--ifm-h2-font-size:2rem;margin-top:calc(var(--ifm-h2-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h3{--ifm-h3-font-size:1.5rem;margin-top:calc(var(--ifm-h3-vertical-rhythm-top)*var(--ifm-leading))}.markdown>h4,.markdown>h5,.markdown>h6{margin-top:calc(var(--ifm-heading-vertical-rhythm-top)*var(--ifm-leading))}.markdown>p,.markdown>pre,.markdown>ul,.tabList__CuJ{margin-bottom:var(--ifm-leading)}.markdown li>p{margin-top:var(--ifm-list-paragraph-margin)}.markdown li+li{margin-top:var(--ifm-list-item-margin)}ol,ul{margin:0 0 var(--ifm-list-margin);padding-left:var(--ifm-list-left-padding)}ol ol,ul ol{list-style-type:lower-roman}ol ol,ol ul,ul ol,ul ul{margin:0}ol ol ol,ol ul ol,ul ol ol,ul ul ol{list-style-type:lower-alpha}table{border-collapse:collapse;display:block;margin-bottom:var(--ifm-spacing-vertical)}table thead tr{border-bottom:2px solid var(--ifm-table-border-color)}table thead,table tr:nth-child(2n){background-color:var(--ifm-table-stripe-background)}table tr{background-color:var(--ifm-table-background);border-top:var(--ifm-table-border-width) solid var(--ifm-table-border-color)}table td,table th{border:var(--ifm-table-border-width) solid var(--ifm-table-border-color);padding:var(--ifm-table-cell-padding)}table th{background-color:var(--ifm-table-head-background);color:var(--ifm-table-head-color);font-weight:var(--ifm-table-head-font-weight)}table td{color:var(--ifm-table-cell-color)}strong{font-weight:var(--ifm-font-weight-bold)}a{color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}a:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button:hover,.text--no-decoration,.text--no-decoration:hover,a:not([href]){text-decoration:none}p{margin:0 0 var(--ifm-paragraph-margin-bottom)}blockquote{border-left:var(--ifm-blockquote-border-left-width) solid var(--ifm-blockquote-border-color);box-shadow:var(--ifm-blockquote-shadow);color:var(--ifm-blockquote-color);font-size:var(--ifm-blockquote-font-size);padding:var(--ifm-blockquote-padding-vertical) var(--ifm-blockquote-padding-horizontal)}blockquote>:first-child{margin-top:0}blockquote>:last-child{margin-bottom:0}hr{background-color:var(--ifm-hr-background-color);border:0;height:var(--ifm-hr-height);margin:var(--ifm-hr-margin-vertical) 0;background-image:-webkit-linear-gradient(left,#f3f3f3,#adadb1,#f3f3f3);margin:0 auto}.shadow--lw{box-shadow:var(--ifm-global-shadow-lw)!important}.shadow--md{box-shadow:var(--ifm-global-shadow-md)!important}.shadow--tl{box-shadow:var(--ifm-global-shadow-tl)!important}.text--primary,.wordWrapButtonEnabled_EoeP .wordWrapButtonIcon_Bwma{color:var(--ifm-color-primary)}.text--secondary{color:var(--ifm-color-secondary)}.text--success{color:var(--ifm-color-success)}.text--info{color:var(--ifm-color-info)}.text--warning{color:var(--ifm-color-warning)}.text--danger{color:var(--ifm-color-danger)}.text--center{text-align:center}.text--left{text-align:left}.text--justify{text-align:justify}.text--right{text-align:right}.text--capitalize{text-transform:capitalize}.text--lowercase{text-transform:lowercase}.admonitionHeading_tbUL,.alert__heading,.text--uppercase{text-transform:uppercase}.text--light{font-weight:var(--ifm-font-weight-light)}.text--normal{font-weight:var(--ifm-font-weight-normal)}.text--semibold{font-weight:var(--ifm-font-weight-semibold)}.text--bold{font-weight:var(--ifm-font-weight-bold)}.text--italic{font-style:italic}.text--truncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.text--break{word-wrap:break-word!important;word-break:break-word!important}.clean-btn{background:none;border:none;color:inherit;cursor:pointer;font-family:inherit;padding:0}.alert,.alert .close{color:var(--ifm-alert-foreground-color)}.clean-list{list-style:none;padding-left:0}.alert--primary{--ifm-alert-background-color:var(--ifm-color-primary-contrast-background);--ifm-alert-background-color-highlight:#3578e526;--ifm-alert-foreground-color:var(--ifm-color-primary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-primary-dark)}.alert--secondary{--ifm-alert-background-color:var(--ifm-color-secondary-contrast-background);--ifm-alert-background-color-highlight:#ebedf026;--ifm-alert-foreground-color:var(--ifm-color-secondary-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-secondary-dark)}.alert--success{--ifm-alert-background-color:var(--ifm-color-success-contrast-background);--ifm-alert-background-color-highlight:#00a40026;--ifm-alert-foreground-color:var(--ifm-color-success-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-success-dark)}.alert--info{--ifm-alert-background-color:var(--ifm-color-info-contrast-background);--ifm-alert-background-color-highlight:#54c7ec26;--ifm-alert-foreground-color:var(--ifm-color-info-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-info-dark)}.alert--warning{--ifm-alert-background-color:var(--ifm-color-warning-contrast-background);--ifm-alert-background-color-highlight:#ffba0026;--ifm-alert-foreground-color:var(--ifm-color-warning-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-warning-dark)}.alert--danger{--ifm-alert-background-color:var(--ifm-color-danger-contrast-background);--ifm-alert-background-color-highlight:#fa383e26;--ifm-alert-foreground-color:var(--ifm-color-danger-contrast-foreground);--ifm-alert-border-color:var(--ifm-color-danger-dark)}.alert{--ifm-code-background:var(--ifm-alert-background-color-highlight);--ifm-link-color:var(--ifm-alert-foreground-color);--ifm-link-hover-color:var(--ifm-alert-foreground-color);--ifm-link-decoration:underline;--ifm-tabs-color:var(--ifm-alert-foreground-color);--ifm-tabs-color-active:var(--ifm-alert-foreground-color);--ifm-tabs-color-active-border:var(--ifm-alert-border-color);background-color:var(--ifm-alert-background-color);border:var(--ifm-alert-border-width) solid var(--ifm-alert-border-color);border-left-width:var(--ifm-alert-border-left-width);border-radius:var(--ifm-alert-border-radius);box-shadow:var(--ifm-alert-shadow);padding:var(--ifm-alert-padding-vertical) var(--ifm-alert-padding-horizontal)}.alert__heading{align-items:center;display:flex;font:700 var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.5rem}.alert__icon{display:inline-flex;margin-right:.4em}.alert__icon svg{fill:var(--ifm-alert-foreground-color);stroke:var(--ifm-alert-foreground-color);stroke-width:0}.alert .close{margin:calc(var(--ifm-alert-padding-vertical)*-1) calc(var(--ifm-alert-padding-horizontal)*-1) 0 0;opacity:.75}.alert .close:focus,.alert .close:hover{opacity:1}.alert a{text-decoration-color:var(--ifm-alert-border-color)}.alert a:hover{text-decoration-thickness:2px}.avatar{column-gap:var(--ifm-avatar-intro-margin);display:flex}.avatar__photo{border-radius:50%;display:block;height:var(--ifm-avatar-photo-size);overflow:hidden;width:var(--ifm-avatar-photo-size)}.card--full-height,.navbar__logo img,body,html{height:100%}.avatar__photo--sm{--ifm-avatar-photo-size:2rem}.avatar__photo--lg{--ifm-avatar-photo-size:4rem}.avatar__photo--xl{--ifm-avatar-photo-size:6rem}.avatar__intro{display:flex;flex:1 1;flex-direction:column;justify-content:center;text-align:var(--ifm-avatar-intro-alignment)}.badge,.breadcrumbs__item,.breadcrumbs__link,.button,.dropdown>.navbar__link:after{display:inline-block}.avatar__name{font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base)}.avatar__subtitle{margin-top:.25rem}.avatar--vertical{--ifm-avatar-intro-alignment:center;--ifm-avatar-intro-margin:0.5rem;align-items:center;flex-direction:column}.badge{background-color:var(--ifm-badge-background-color);border:var(--ifm-badge-border-width) solid var(--ifm-badge-border-color);border-radius:var(--ifm-badge-border-radius);color:var(--ifm-badge-color);font-size:75%;font-weight:var(--ifm-font-weight-bold);line-height:1;padding:var(--ifm-badge-padding-vertical) var(--ifm-badge-padding-horizontal)}.badge--primary{--ifm-badge-background-color:var(--ifm-color-primary)}.badge--secondary{--ifm-badge-background-color:var(--ifm-color-secondary);color:var(--ifm-color-black)}.breadcrumbs__link,.button.button--secondary.button--outline:not(.button--active):not(:hover){color:var(--ifm-font-color-base)}.badge--success{--ifm-badge-background-color:var(--ifm-color-success)}.badge--info{--ifm-badge-background-color:var(--ifm-color-info)}.badge--warning{--ifm-badge-background-color:var(--ifm-color-warning)}.badge--danger{--ifm-badge-background-color:var(--ifm-color-danger)}.breadcrumbs{margin-bottom:0;padding-left:0}.breadcrumbs__item:not(:last-child):after{background:var(--ifm-breadcrumb-separator) center;content:" ";display:inline-block;filter:var(--ifm-breadcrumb-separator-filter);height:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier));margin:0 var(--ifm-breadcrumb-spacing);opacity:.5;width:calc(var(--ifm-breadcrumb-separator-size)*var(--ifm-breadcrumb-size-multiplier)*var(--ifm-breadcrumb-separator-size-multiplier))}.breadcrumbs__item--active .breadcrumbs__link{background:var(--ifm-breadcrumb-item-background-active);color:var(--ifm-breadcrumb-color-active)}.breadcrumbs__link{border-radius:var(--ifm-breadcrumb-border-radius);font-size:calc(1rem*var(--ifm-breadcrumb-size-multiplier));padding:calc(var(--ifm-breadcrumb-padding-vertical)*var(--ifm-breadcrumb-size-multiplier)) calc(var(--ifm-breadcrumb-padding-horizontal)*var(--ifm-breadcrumb-size-multiplier));transition-duration:var(--ifm-transition-fast);transition-property:background,color}.breadcrumbs__link:any-link:hover,.breadcrumbs__link:link:hover,.breadcrumbs__link:visited:hover,area[href].breadcrumbs__link:hover{background:var(--ifm-breadcrumb-item-background-active);text-decoration:none}.breadcrumbs--sm{--ifm-breadcrumb-size-multiplier:0.8}.breadcrumbs--lg{--ifm-breadcrumb-size-multiplier:1.2}.button{background-color:var(--ifm-button-background-color);border:var(--ifm-button-border-width) solid var(--ifm-button-border-color);border-radius:var(--ifm-button-border-radius);cursor:pointer;font-size:calc(.875rem*var(--ifm-button-size-multiplier));font-weight:var(--ifm-button-font-weight);line-height:1.5;padding:calc(var(--ifm-button-padding-vertical)*var(--ifm-button-size-multiplier)) calc(var(--ifm-button-padding-horizontal)*var(--ifm-button-size-multiplier));text-align:center;transition-duration:var(--ifm-button-transition-duration);transition-property:color,background,border-color;-webkit-user-select:none;user-select:none;white-space:nowrap}.button,.button:hover{color:var(--ifm-button-color)}.button--outline{--ifm-button-color:var(--ifm-button-border-color)}.button--outline:hover{--ifm-button-background-color:var(--ifm-button-border-color)}.button--link{--ifm-button-border-color:#0000;color:var(--ifm-link-color);text-decoration:var(--ifm-link-decoration)}.button--link.button--active,.button--link:active,.button--link:hover{color:var(--ifm-link-hover-color);text-decoration:var(--ifm-link-hover-decoration)}.button.disabled,.button:disabled,.button[disabled]{opacity:.65;pointer-events:none}.button--sm{--ifm-button-size-multiplier:0.8}.button--lg{--ifm-button-size-multiplier:1.35}.button--block{display:block;width:100%}.button.button--secondary{color:var(--ifm-color-gray-900)}:where(.button--primary){--ifm-button-background-color:var(--ifm-color-primary);--ifm-button-border-color:var(--ifm-color-primary)}:where(.button--primary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-primary-dark);--ifm-button-border-color:var(--ifm-color-primary-dark)}.button--primary.button--active,.button--primary:active{--ifm-button-background-color:var(--ifm-color-primary-darker);--ifm-button-border-color:var(--ifm-color-primary-darker)}:where(.button--secondary){--ifm-button-background-color:var(--ifm-color-secondary);--ifm-button-border-color:var(--ifm-color-secondary)}:where(.button--secondary):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-secondary-dark);--ifm-button-border-color:var(--ifm-color-secondary-dark)}.button--secondary.button--active,.button--secondary:active{--ifm-button-background-color:var(--ifm-color-secondary-darker);--ifm-button-border-color:var(--ifm-color-secondary-darker)}:where(.button--success){--ifm-button-background-color:var(--ifm-color-success);--ifm-button-border-color:var(--ifm-color-success)}:where(.button--success):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-success-dark);--ifm-button-border-color:var(--ifm-color-success-dark)}.button--success.button--active,.button--success:active{--ifm-button-background-color:var(--ifm-color-success-darker);--ifm-button-border-color:var(--ifm-color-success-darker)}:where(.button--info){--ifm-button-background-color:var(--ifm-color-info);--ifm-button-border-color:var(--ifm-color-info)}:where(.button--info):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-info-dark);--ifm-button-border-color:var(--ifm-color-info-dark)}.button--info.button--active,.button--info:active{--ifm-button-background-color:var(--ifm-color-info-darker);--ifm-button-border-color:var(--ifm-color-info-darker)}:where(.button--warning){--ifm-button-background-color:var(--ifm-color-warning);--ifm-button-border-color:var(--ifm-color-warning)}:where(.button--warning):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-warning-dark);--ifm-button-border-color:var(--ifm-color-warning-dark)}.button--warning.button--active,.button--warning:active{--ifm-button-background-color:var(--ifm-color-warning-darker);--ifm-button-border-color:var(--ifm-color-warning-darker)}:where(.button--danger){--ifm-button-background-color:var(--ifm-color-danger);--ifm-button-border-color:var(--ifm-color-danger)}:where(.button--danger):not(.button--outline):hover{--ifm-button-background-color:var(--ifm-color-danger-dark);--ifm-button-border-color:var(--ifm-color-danger-dark)}.button--danger.button--active,.button--danger:active{--ifm-button-background-color:var(--ifm-color-danger-darker);--ifm-button-border-color:var(--ifm-color-danger-darker)}.button-group{display:inline-flex;gap:var(--ifm-button-group-spacing)}.button-group>.button:not(:first-child){border-bottom-left-radius:0;border-top-left-radius:0}.button-group>.button:not(:last-child){border-bottom-right-radius:0;border-top-right-radius:0}.button-group--block{display:flex;justify-content:stretch}.button-group--block>.button{flex-grow:1}.card{background-color:var(--ifm-card-background-color);border-radius:var(--ifm-card-border-radius);box-shadow:var(--ifm-global-shadow-lw);display:flex;flex-direction:column;overflow:hidden}.card__image{padding-top:var(--ifm-card-vertical-spacing)}.card__image:first-child{padding-top:0}.card__body,.card__footer,.card__header{padding:var(--ifm-card-vertical-spacing) var(--ifm-card-horizontal-spacing)}.card__body:not(:last-child),.card__footer:not(:last-child),.card__header:not(:last-child){padding-bottom:0}.card__body>:last-child,.card__footer>:last-child,.card__header>:last-child{margin-bottom:0}.card__footer{margin-top:auto}.table-of-contents{font-size:.8rem;margin-bottom:0;padding:var(--ifm-toc-padding-vertical) 0}.table-of-contents,.table-of-contents ul{list-style:none;padding-left:var(--ifm-toc-padding-horizontal)}.table-of-contents li{margin:var(--ifm-toc-padding-vertical) var(--ifm-toc-padding-horizontal)}.table-of-contents__left-border{border-left:1px solid var(--ifm-toc-border-color)}.table-of-contents__link{color:var(--ifm-toc-link-color);display:block}.table-of-contents__link--active,.table-of-contents__link--active code,.table-of-contents__link:hover,.table-of-contents__link:hover code{color:var(--ifm-color-primary);text-decoration:none}.close{color:var(--ifm-color-black);float:right;font-size:1.5rem;font-weight:var(--ifm-font-weight-bold);line-height:1;opacity:.5;padding:1rem;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.close:hover{opacity:.7}.close:focus,.theme-code-block-highlighted-line .codeLineNumber_Tfdd:before{opacity:.8}.dropdown{display:inline-flex;font-weight:var(--ifm-dropdown-font-weight);position:relative;vertical-align:top}.dropdown--hoverable:hover .dropdown__menu,.dropdown--show .dropdown__menu{opacity:1;pointer-events:all;transform:translateY(-1px);visibility:visible}#nprogress,.dropdown__menu,.navbar__item.dropdown .navbar__link:not([href]){pointer-events:none}.dropdown--right .dropdown__menu{left:inherit;right:0}.dropdown--nocaret .navbar__link:after{content:none!important}.dropdown__menu{background-color:var(--ifm-dropdown-background-color);border-radius:var(--ifm-global-radius);box-shadow:var(--ifm-global-shadow-md);left:0;list-style:none;max-height:80vh;min-width:10rem;opacity:0;overflow-y:auto;padding:.5rem;position:absolute;top:calc(100% - var(--ifm-navbar-item-padding-vertical) + .3rem);transform:translateY(-.625rem);transition-duration:var(--ifm-transition-fast);transition-property:opacity,transform,visibility;transition-timing-function:var(--ifm-transition-timing-default);visibility:hidden;z-index:var(--ifm-z-index-dropdown)}.menu__caret,.menu__link,.menu__list-item-collapsible{border-radius:.25rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.dropdown__link{border-radius:.25rem;color:var(--ifm-dropdown-link-color);display:block;font-size:.875rem;margin-top:.2rem;padding:.25rem .5rem;white-space:nowrap}.dropdown__link--active,.dropdown__link:hover{background-color:var(--ifm-dropdown-hover-background-color);color:var(--ifm-dropdown-link-color);text-decoration:none}.dropdown__link--active,.dropdown__link--active:hover{--ifm-dropdown-link-color:var(--ifm-link-color)}.dropdown>.navbar__link:after{border-color:currentcolor #0000;border-style:solid;border-width:.4em .4em 0;content:"";margin-left:.3em;position:relative;top:2px;transform:translateY(-50%)}.footer{background-color:var(--ifm-footer-background-color);color:var(--ifm-footer-color);padding:var(--ifm-footer-padding-vertical) var(--ifm-footer-padding-horizontal)}.footer--dark{--ifm-footer-background-color:#303846;--ifm-footer-color:var(--ifm-footer-link-color);--ifm-footer-link-color:var(--ifm-color-secondary);--ifm-footer-title-color:var(--ifm-color-white)}.footer__links{margin-bottom:1rem}.footer__link-item{color:var(--ifm-footer-link-color);line-height:2}.footer__link-item:hover{color:var(--ifm-footer-link-hover-color)}.footer__link-separator{margin:0 var(--ifm-footer-link-horizontal-spacing)}.footer__logo{margin-top:1rem;max-width:var(--ifm-footer-logo-max-width)}.footer__title{color:var(--ifm-footer-title-color);font:700 var(--ifm-h4-font-size)/var(--ifm-heading-line-height) var(--ifm-font-family-base);margin-bottom:var(--ifm-heading-margin-bottom)}.menu,.navbar__link{font-weight:var(--ifm-font-weight-semibold)}.docItemContainer_Djhp article>:first-child,.docItemContainer_Djhp header+*,.footer__item{margin-top:0}.admonitionContent_S0QG>:last-child,.collapsibleContent_i85q>:last-child,.footer__items,.tabItem_Ymn6>:last-child{margin-bottom:0}.codeBlockStandalone_MEMb,[type=checkbox]{padding:0}.hero{align-items:center;background-color:var(--ifm-hero-background-color);color:var(--ifm-hero-text-color);display:flex;padding:4rem 2rem}.hero--primary{--ifm-hero-background-color:var(--ifm-color-primary);--ifm-hero-text-color:var(--ifm-font-color-base-inverse)}.hero--dark{--ifm-hero-background-color:#303846;--ifm-hero-text-color:var(--ifm-color-white)}.hero__title{font-size:3rem}.hero__subtitle{font-size:1.5rem}.menu__list{list-style:none;margin:0;padding-left:0}.menu__caret,.menu__link{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu__list .menu__list{flex:0 0 100%;margin-top:.25rem;padding-left:var(--ifm-menu-link-padding-horizontal)}.menu__list-item:not(:first-child){margin-top:.25rem}.menu__list-item--collapsed .menu__list{height:0;overflow:hidden}.details_lb9f[data-collapsed=false].isBrowser_bmU9>summary:before,.details_lb9f[open]:not(.isBrowser_bmU9)>summary:before,.menu__list-item--collapsed .menu__caret:before,.menu__list-item--collapsed .menu__link--sublist:after{transform:rotate(90deg)}.menu__list-item-collapsible{display:flex;flex-wrap:wrap;position:relative}.menu__caret:hover,.menu__link:hover,.menu__list-item-collapsible--active,.menu__list-item-collapsible:hover{background:var(--ifm-menu-color-background-hover)}.menu__list-item-collapsible .menu__link--active,.menu__list-item-collapsible .menu__link:hover{background:none!important}.menu__caret,.menu__link{align-items:center;display:flex}.menu__link{color:var(--ifm-menu-color);flex:1;line-height:1.25}.menu__link:hover{color:var(--ifm-menu-color);text-decoration:none}.menu__caret:before,.menu__link--sublist-caret:after{height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast) linear;width:1.25rem;filter:var(--ifm-menu-link-sublist-icon-filter);content:""}.menu__link--sublist-caret:after{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem;margin-left:auto;min-width:1.25rem}.navbar__items--center .navbar__brand,body{margin:0}.menu__link--active,.menu__link--active:hover{color:var(--ifm-menu-color-active)}.navbar__brand,.navbar__link{color:var(--ifm-navbar-link-color)}.menu__link--active:not(.menu__link--sublist){background-color:var(--ifm-menu-color-background-active)}.menu__caret:before{background:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem}.navbar--dark,html[data-theme=dark]{--ifm-menu-link-sublist-icon-filter:invert(100%) sepia(94%) saturate(17%) hue-rotate(223deg) brightness(104%) contrast(98%)}.navbar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-navbar-shadow);height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar,.navbar>.container,.navbar>.container-fluid{display:flex}.navbar--fixed-top{position:sticky;top:0;z-index:var(--ifm-z-index-fixed)}.navbar-sidebar,.navbar-sidebar__backdrop{bottom:0;opacity:0;position:fixed;transition-duration:var(--ifm-transition-fast);transition-timing-function:ease-in-out;left:0;top:0;visibility:hidden}.navbar__inner{display:flex;flex-wrap:wrap;justify-content:space-between;width:100%}.navbar__brand{align-items:center;display:flex;margin-right:1rem;min-width:0}.navbar__brand:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.announcementBarContent_xLdY,.navbar__title{flex:1 1 auto}.navbar__toggle{display:none;margin-right:.5rem}.navbar__logo{flex:0 0 auto;height:2rem;margin-right:.5rem}.navbar__items{align-items:center;display:flex;flex:1;min-width:0}.navbar__items--center{flex:0 0 auto}.navbar__items--center+.navbar__items--right{flex:1}.navbar__items--right{flex:0 0 auto;justify-content:flex-end}.navbar__items--right>:last-child{padding-right:0}.navbar__item{display:inline-block;padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.navbar__link--active,.navbar__link:hover{color:var(--ifm-navbar-link-hover-color);text-decoration:none}.navbar--dark,.navbar--primary{--ifm-menu-color:var(--ifm-color-gray-300);--ifm-navbar-link-color:var(--ifm-color-gray-100);--ifm-navbar-search-input-background-color:#ffffff1a;--ifm-navbar-search-input-placeholder-color:#ffffff80;color:var(--ifm-color-white)}.navbar--dark{--ifm-navbar-background-color:#242526;--ifm-menu-color-background-active:#ffffff0d;--ifm-navbar-search-input-color:var(--ifm-color-white)}.navbar--primary{--ifm-navbar-background-color:var(--ifm-color-primary);--ifm-navbar-link-hover-color:var(--ifm-color-white);--ifm-menu-color-active:var(--ifm-color-white);--ifm-navbar-search-input-color:var(--ifm-color-emphasis-500)}.navbar__search-input{-webkit-appearance:none;appearance:none;background:var(--ifm-navbar-search-input-background-color) var(--ifm-navbar-search-input-icon) no-repeat .75rem center/1rem 1rem;border:none;border-radius:2rem;color:var(--ifm-navbar-search-input-color);cursor:text;display:inline-block;font-size:.9rem;height:2rem;padding:0 .5rem 0 2.25rem;width:12.5rem}.navbar__search-input::placeholder{color:var(--ifm-navbar-search-input-placeholder-color)}.navbar-sidebar{background-color:var(--ifm-navbar-background-color);box-shadow:var(--ifm-global-shadow-md);transform:translate3d(-100%,0,0);transition-property:opacity,visibility,transform;width:var(--ifm-navbar-sidebar-width)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar__items{transform:translateZ(0)}.navbar-sidebar--show .navbar-sidebar,.navbar-sidebar--show .navbar-sidebar__backdrop{opacity:1;visibility:visible}.navbar-sidebar__backdrop{background-color:#0009;right:0;transition-property:opacity,visibility}.navbar-sidebar__brand{align-items:center;box-shadow:var(--ifm-navbar-shadow);display:flex;flex:1;height:var(--ifm-navbar-height);padding:var(--ifm-navbar-padding-vertical) var(--ifm-navbar-padding-horizontal)}.navbar-sidebar__items{display:flex;height:calc(100% - var(--ifm-navbar-height));transition:transform var(--ifm-transition-fast) ease-in-out}.navbar-sidebar__items--show-secondary{transform:translate3d(calc((var(--ifm-navbar-sidebar-width))*-1),0,0)}.navbar-sidebar__item{flex-shrink:0;padding:.5rem;width:calc(var(--ifm-navbar-sidebar-width))}.navbar-sidebar__back{background:var(--ifm-menu-color-background-active);font-size:15px;font-weight:var(--ifm-button-font-weight);margin:0 0 .2rem -.5rem;padding:.6rem 1.5rem;position:relative;text-align:left;top:-.5rem;width:calc(100% + 1rem)}.navbar-sidebar__close{display:flex;margin-left:auto}.pagination{column-gap:var(--ifm-pagination-page-spacing);display:flex;font-size:var(--ifm-pagination-font-size);padding-left:0}.pagination--sm{--ifm-pagination-font-size:0.8rem;--ifm-pagination-padding-horizontal:0.8rem;--ifm-pagination-padding-vertical:0.2rem}.pagination--lg{--ifm-pagination-font-size:1.2rem;--ifm-pagination-padding-horizontal:1.2rem;--ifm-pagination-padding-vertical:0.3rem}.pagination__item{display:inline-flex}.pagination__item>span{padding:var(--ifm-pagination-padding-vertical)}.pagination__item--active .pagination__link{color:var(--ifm-pagination-color-active)}.pagination__item--active .pagination__link,.pagination__item:not(.pagination__item--active):hover .pagination__link{background:var(--ifm-pagination-item-active-background)}.pagination__item--disabled,.pagination__item[disabled]{opacity:.25;pointer-events:none}.pagination__link{border-radius:var(--ifm-pagination-border-radius);color:var(--ifm-font-color-base);display:inline-block;padding:var(--ifm-pagination-padding-vertical) var(--ifm-pagination-padding-horizontal);transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination__link:hover{text-decoration:none}.pagination-nav{grid-gap:var(--ifm-spacing-horizontal);display:grid;gap:var(--ifm-spacing-horizontal);grid-template-columns:repeat(2,1fr)}.pagination-nav__link{border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-pagination-nav-border-radius);display:block;height:100%;line-height:var(--ifm-heading-line-height);padding:var(--ifm-global-spacing);transition:border-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.pagination-nav__link:hover{border-color:var(--ifm-pagination-nav-color-hover);text-decoration:none}.pagination-nav__link--next{grid-column:2/3;text-align:right}.pagination-nav__label{font-size:var(--ifm-h4-font-size);font-weight:var(--ifm-heading-font-weight);word-break:break-word}.pagination-nav__link--prev .pagination-nav__label:before{content:"« "}.pagination-nav__link--next .pagination-nav__label:after{content:" »"}.pagination-nav__sublabel{color:var(--ifm-color-content-secondary);font-size:var(--ifm-h5-font-size);font-weight:var(--ifm-font-weight-semibold);margin-bottom:.25rem}.pills__item,.tabs{font-weight:var(--ifm-font-weight-bold)}.pills{display:flex;gap:var(--ifm-pills-spacing);padding-left:0}.pills__item{border-radius:.5rem;cursor:pointer;display:inline-block;padding:.25rem 1rem;transition:background var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs,:not(.containsTaskList_mC6p>li)>.containsTaskList_mC6p{padding-left:0}.pills__item--active{color:var(--ifm-pills-color-active)}.pills__item--active,.pills__item:not(.pills__item--active):hover{background:var(--ifm-pills-color-background-active)}.pills--block{justify-content:stretch}.pills--block .pills__item{flex-grow:1;text-align:center}.tabs{color:var(--ifm-tabs-color);display:flex;margin-bottom:0;overflow-x:auto}.tabs__item{border-bottom:3px solid #0000;border-radius:var(--ifm-global-radius);cursor:pointer;display:inline-flex;padding:var(--ifm-tabs-padding-vertical) var(--ifm-tabs-padding-horizontal);transition:background-color var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.tabs__item--active{border-bottom-color:var(--ifm-tabs-color-active-border);border-bottom-left-radius:0;border-bottom-right-radius:0;color:var(--ifm-tabs-color-active)}.tabs__item:hover{background-color:var(--ifm-hover-overlay)}.tabs--block{justify-content:stretch}.tabs--block .tabs__item{flex-grow:1;justify-content:center}html[data-theme=dark]{--ifm-color-scheme:dark;--ifm-color-emphasis-0:var(--ifm-color-gray-1000);--ifm-color-emphasis-100:var(--ifm-color-gray-900);--ifm-color-emphasis-200:var(--ifm-color-gray-800);--ifm-color-emphasis-300:var(--ifm-color-gray-700);--ifm-color-emphasis-400:var(--ifm-color-gray-600);--ifm-color-emphasis-600:var(--ifm-color-gray-400);--ifm-color-emphasis-700:var(--ifm-color-gray-300);--ifm-color-emphasis-800:var(--ifm-color-gray-200);--ifm-color-emphasis-900:var(--ifm-color-gray-100);--ifm-color-emphasis-1000:var(--ifm-color-gray-0);--ifm-background-color:#1b1b1d;--ifm-background-surface-color:#242526;--ifm-hover-overlay:#ffffff0d;--ifm-color-content:#e3e3e3;--ifm-color-content-secondary:#fff;--ifm-breadcrumb-separator-filter:invert(64%) sepia(11%) saturate(0%) hue-rotate(149deg) brightness(99%) contrast(95%);--ifm-code-background:#ffffff1a;--ifm-scrollbar-track-background-color:#444;--ifm-scrollbar-thumb-background-color:#686868;--ifm-scrollbar-thumb-hover-background-color:#7a7a7a;--ifm-table-stripe-background:#ffffff12;--ifm-toc-border-color:var(--ifm-color-emphasis-200);--ifm-color-primary-contrast-background:#102445;--ifm-color-primary-contrast-foreground:#ebf2fc;--ifm-color-secondary-contrast-background:#474748;--ifm-color-secondary-contrast-foreground:#fdfdfe;--ifm-color-success-contrast-background:#003100;--ifm-color-success-contrast-foreground:#e6f6e6;--ifm-color-info-contrast-background:#193c47;--ifm-color-info-contrast-foreground:#eef9fd;--ifm-color-warning-contrast-background:#4d3800;--ifm-color-warning-contrast-foreground:#fff8e6;--ifm-color-danger-contrast-background:#4b1113;--ifm-color-danger-contrast-foreground:#ffebec;--docsearch-text-color:#f5f6f7;--docsearch-container-background:#090a11cc;--docsearch-modal-background:#15172a;--docsearch-modal-shadow:inset 1px 1px 0 0 #2c2e40,0 3px 8px 0 #000309;--docsearch-searchbox-background:#090a11;--docsearch-searchbox-focus-background:#000;--docsearch-hit-color:#bec3c9;--docsearch-hit-shadow:none;--docsearch-hit-background:#090a11;--docsearch-key-gradient:linear-gradient(-26.5deg,#565872,#31355b);--docsearch-key-shadow:inset 0 -2px 0 0 #282d55,inset 0 0 1px 1px #51577d,0 2px 2px 0 #0304094d;--docsearch-footer-background:#1e2136;--docsearch-footer-shadow:inset 0 1px 0 0 #494c6a80,0 -4px 8px 0 #0003;--docsearch-logo-color:#fff;--docsearch-muted-color:#7f8497}#nprogress .bar{background:var(--docusaurus-progress-bar-color);height:2px;left:0;position:fixed;top:0;width:100%;z-index:1031}#nprogress .peg{box-shadow:0 0 10px var(--docusaurus-progress-bar-color),0 0 5px var(--docusaurus-progress-bar-color);height:100%;opacity:1;position:absolute;right:0;transform:rotate(3deg) translateY(-4px);width:100px}@font-face{font-family:Poppins;font-style:normal;font-weight:400;src:local(""),url(/zh/assets/fonts/poppins-regular-f61407da33b59324fbefe468ce6917ab.woff) format("woff2"),url(data:font/woff2;base64,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) format("woff"),}@font-face{font-family:Roboto;font-style:normal;font-weight:400;src:local(""),url(/zh/assets/fonts/roboto-mono-regular-498042b7fe9cd07b4fd11a0965093e55.woff) format("woff2"),url(/zh/assets/fonts/roboto-mono-regular-535bc89d4af715503b01afd761501e58.woff2) format("woff"),}@font-face{font-family:Lato;font-style:normal;font-weight:400;src:local(""),url(/zh/assets/fonts/lato-regular-292725486219768e62259f7286dc73cc.woff) format("woff2"),url(/zh/assets/fonts/lato-regular-be36596da218e1eec01c5c600b1c13ef.woff2) format("woff"),}[data-theme=dark]{--ifm-color-primary:#ffc61c;--ifm-color-primary-dark:#ffbf00;--ifm-color-primary-darker:#f1b400;--ifm-color-primary-darkest:#c69400;--ifm-color-primary-light:#ffcd38;--ifm-color-primary-lighter:#ffd146;--ifm-color-primary-lightest:#ffdb71;--ifm-color-secondary-dark:#054a6e;--ifm-color-secondary:#06527a;--ifm-color-secondary-light:#075a86;--light:#33313b;--dark:#f3f3f3}[data-theme=dark] .footer--dark{background-color:var(--light);color:var(--ifm-color-primary)}body{font-family:Lato,sans-serif}h1,h2,h3,h4,h5,h6{font-family:Poppins,sans-serif}code{font-family:Roboto Mono,monospace}.navbar__brand{height:40px}.btn.navbar__github{background-color:#384745;border:2px solid #384745;border-radius:3px;box-shadow:inset 0 1px #ffffff26,0 1px 1px #00000014;color:#fff!important;font-family:poppins,sans-serif;font-size:1rem;font-weight:400;line-height:1.66;padding:8px 20px 7px 47px;position:relative;text-align:center;text-decoration:none;transition:color .15s ease-in-out,background-color .15s ease-in-out,border-color .15s ease-in-out,box-shadow .15s ease-in-out;-webkit-user-select:none;user-select:none}.clear-btn{padding:100px}a.btn.navbar__github:hover{background-color:#273230;border-color:#222a29;color:#fff}a.btn.navbar__github:before{background-image:url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 20.5 20'%3E%3Cpath fill='%23fff' d='M10.3 0C4.6 0 0 4.6 0 10.3c0 4.4 2.8 8.3 7 9.7.5.1.7-.2.7-.5v-1.9c-2.6.5-3.2-.6-3.4-1.2-.2-.6-.6-1.1-1-1.5-.4-.2-.9-.7 0-.7.7.1 1.3.5 1.6 1 .6 1.1 1.9 1.4 3 .8 0-.5.3-1 .7-1.4-2.3-.3-4.7-1.1-4.7-5.1 0-1 .4-2 1.1-2.8-.5-.6-.5-1.6-.1-2.5 0 0 .9-.3 2.8 1.1 1.7-.5 3.4-.5 5.1 0 2-1.3 2.8-1.1 2.8-1.1.4.9.5 1.9.2 2.8.7.7 1.1 1.7 1.1 2.8 0 3.9-2.4 4.8-4.7 5.1.5.5.7 1.2.7 1.9v2.8c0 .3.2.6.7.5 5.4-1.8 8.3-7.6 6.5-13C18.6 2.8 14.7 0 10.3 0z'/%3E%3C/svg%3E");content:"";height:20px;left:15px;position:absolute;top:10px;width:20px}.header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat;content:"";display:flex;height:24px;width:24px}[data-theme=dark] .header-github-link:before{background:url("data:image/svg+xml;charset=utf-8,%3Csvg viewBox='0 0 24 24' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath fill='%23fff' d='M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12'/%3E%3C/svg%3E") no-repeat}.docusaurus-highlight-code-line{background-color:#484d5b;display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}body:not(.navigation-with-keyboard) :not(input):focus{outline:0}#__docusaurus-base-url-issue-banner-container,.themedImage_ToTc,[data-theme=dark] .lightToggleIcon_pyhR,[data-theme=light] .darkToggleIcon_wfgR,html[data-announcement-bar-initially-dismissed=true] .announcementBar_mb4j{display:none}.skipToContent_fXgn{background-color:var(--ifm-background-surface-color);color:var(--ifm-color-emphasis-900);left:100%;padding:calc(var(--ifm-global-spacing)/2) var(--ifm-global-spacing);position:fixed;top:1rem;z-index:calc(var(--ifm-z-index-fixed) + 1)}.skipToContent_fXgn:focus{box-shadow:var(--ifm-global-shadow-md);left:1rem}.closeButton_CVFx{line-height:0;padding:0}.content_knG7{font-size:85%;padding:5px 0;text-align:center}.content_knG7 a{color:inherit;text-decoration:underline}.DocSearch-Container a,.tag_zVej:hover{text-decoration:none}.announcementBar_mb4j{align-items:center;background-color:var(--ifm-color-white);border-bottom:1px solid var(--ifm-color-emphasis-100);color:var(--ifm-color-black);display:flex;height:var(--docusaurus-announcement-bar-height)}.announcementBarPlaceholder_vyr4{flex:0 0 10px}.announcementBarClose_gvF7{align-self:stretch;flex:0 0 30px}.toggle_vylO{height:2rem;width:2rem}.toggleButton_gllP{align-items:center;border-radius:50%;display:flex;height:100%;justify-content:center;transition:background var(--ifm-transition-fast);width:100%}.toggleButton_gllP:hover{background:var(--ifm-color-emphasis-200)}.toggleButtonDisabled_aARS{cursor:not-allowed}.darkNavbarColorModeToggle_X3D1:hover{background:var(--ifm-color-gray-800)}[data-theme=dark] .themedImage--dark_i4oU,[data-theme=light] .themedImage--light_HNdA{display:initial}.iconExternalLink_nPIU{margin-left:.3rem}.iconLanguage_nlXk{margin-right:5px;vertical-align:text-bottom}.navbarHideable_m1mJ{transition:transform var(--ifm-transition-fast) ease}.navbarHidden_jGov{transform:translate3d(0,calc(-100% - 2px),0)}.errorBoundaryError_a6uf{color:red;white-space:pre-wrap}.footerLogoLink_BH7S{opacity:.5;transition:opacity var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.footerLogoLink_BH7S:hover,.hash-link:focus,:hover>.hash-link{opacity:1}.mainWrapper_z2l0{display:flex;flex:1 0 auto;flex-direction:column}.docusaurus-mt-lg{margin-top:3rem}#__docusaurus{display:flex;flex-direction:column;min-height:100%}.iconEdit_Z9Sw{margin-right:.3em;vertical-align:sub}.tag_zVej{border:1px solid var(--docusaurus-tag-list-border);transition:border var(--ifm-transition-fast)}.tag_zVej:hover{--docusaurus-tag-list-border:var(--ifm-link-color)}.tagRegular_sFm0{border-radius:var(--ifm-global-radius);font-size:90%;padding:.2rem .5rem .3rem}.tagWithCount_h2kH{align-items:center;border-left:0;display:flex;padding:0 .5rem 0 1rem;position:relative}.tagWithCount_h2kH:after,.tagWithCount_h2kH:before{border:1px solid var(--docusaurus-tag-list-border);content:"";position:absolute;top:50%;transition:inherit}.tagWithCount_h2kH:before{border-bottom:0;border-right:0;height:1.18rem;right:100%;transform:translate(50%,-50%) rotate(-45deg);width:1.18rem}.tagWithCount_h2kH:after{border-radius:50%;height:.5rem;left:0;transform:translateY(-50%);width:.5rem}.tagWithCount_h2kH span{background:var(--ifm-color-secondary);border-radius:var(--ifm-global-radius);color:var(--ifm-color-black);font-size:.7rem;line-height:1.2;margin-left:.3rem;padding:.1rem .4rem}.tags_jXut{display:inline}.tag_QGVx{display:inline-block;margin:0 .4rem .5rem 0}.lastUpdated_vwxv{font-size:smaller;font-style:italic;margin-top:.2rem}.tocCollapsibleButton_TO0P{align-items:center;display:flex;font-size:inherit;justify-content:space-between;padding:.4rem .8rem;width:100%}.tocCollapsibleButton_TO0P:after{background:var(--ifm-menu-link-sublist-icon) 50% 50%/2rem 2rem no-repeat;content:"";filter:var(--ifm-menu-link-sublist-icon-filter);height:1.25rem;transform:rotate(180deg);transition:transform var(--ifm-transition-fast);width:1.25rem}.tocCollapsibleButtonExpanded_MG3E:after,.tocCollapsibleExpanded_sAul{transform:none}.tocCollapsible_ETCw{background-color:var(--ifm-menu-color-background-active);border-radius:var(--ifm-global-radius);margin:1rem 0}.buttonGroup__atx button,.codeBlockContainer_Ckt0{background:var(--prism-background-color);color:var(--prism-color)}.tocCollapsibleContent_vkbj>ul{border-left:none;border-top:1px solid var(--ifm-color-emphasis-300);font-size:15px;padding:.2rem 0}.tocCollapsibleContent_vkbj ul li{margin:.4rem .8rem}.tocCollapsibleContent_vkbj a{display:block}.tableOfContents_bqdL{max-height:calc(100vh - var(--ifm-navbar-height) - 2rem);overflow-y:auto;position:sticky;top:calc(var(--ifm-navbar-height) + 1rem)}.anchorWithStickyNavbar_LWe7{scroll-margin-top:calc(var(--ifm-navbar-height) + .5rem)}.anchorWithHideOnScrollNavbar_WYt5{scroll-margin-top:.5rem}.hash-link{opacity:0;padding-left:.5rem;transition:opacity var(--ifm-transition-fast);-webkit-user-select:none;user-select:none}.hash-link:before{content:"#"}.codeBlockContainer_Ckt0{border-radius:var(--ifm-code-border-radius);box-shadow:var(--ifm-global-shadow-lw);margin-bottom:var(--ifm-leading)}.codeBlockContent_biex{border-radius:inherit;direction:ltr;position:relative}.codeBlockTitle_Ktv7{border-bottom:1px solid var(--ifm-color-emphasis-300);border-top-left-radius:inherit;border-top-right-radius:inherit;font-size:var(--ifm-code-font-size);font-weight:500;padding:.75rem var(--ifm-pre-padding)}.codeBlock_bY9V{--ifm-pre-background:var(--prism-background-color);margin:0;padding:0}.codeBlockTitle_Ktv7+.codeBlockContent_biex .codeBlock_bY9V{border-top-left-radius:0;border-top-right-radius:0}.codeBlockLines_e6Vv{float:left;font:inherit;min-width:100%;padding:var(--ifm-pre-padding)}.codeBlockLinesWithNumbering_o6Pm{display:table;padding:var(--ifm-pre-padding) 0}.buttonGroup__atx{column-gap:.2rem;display:flex;position:absolute;right:calc(var(--ifm-pre-padding)/2);top:calc(var(--ifm-pre-padding)/2)}.buttonGroup__atx button{align-items:center;border:1px solid var(--ifm-color-emphasis-300);border-radius:var(--ifm-global-radius);display:flex;line-height:0;opacity:0;padding:.4rem;transition:opacity var(--ifm-transition-fast) ease-in-out}.buttonGroup__atx button:focus-visible,.buttonGroup__atx button:hover{opacity:1!important}.theme-code-block:hover .buttonGroup__atx button{opacity:.4}:where(:root){--docusaurus-highlighted-code-line-bg:#484d5b}:where([data-theme=dark]){--docusaurus-highlighted-code-line-bg:#646464}.theme-code-block-highlighted-line{background-color:var(--docusaurus-highlighted-code-line-bg);display:block;margin:0 calc(var(--ifm-pre-padding)*-1);padding:0 var(--ifm-pre-padding)}.codeLine_lJS_{counter-increment:a;display:table-row}.codeLineNumber_Tfdd{background:var(--ifm-pre-background);display:table-cell;left:0;overflow-wrap:normal;padding:0 var(--ifm-pre-padding);position:sticky;text-align:right;width:1%}.codeLineNumber_Tfdd:before{content:counter(a);opacity:.4}.codeLineContent_feaV{padding-right:var(--ifm-pre-padding)}.theme-code-block:hover .copyButtonCopied_obH4{opacity:1!important}.copyButtonIcons_eSgA{height:1.125rem;position:relative;width:1.125rem}.copyButtonIcon_y97N,.copyButtonSuccessIcon_LjdS{fill:currentColor;height:inherit;left:0;opacity:inherit;position:absolute;top:0;transition:all var(--ifm-transition-fast) ease;width:inherit}.copyButtonSuccessIcon_LjdS{color:#00d600;left:50%;opacity:0;top:50%;transform:translate(-50%,-50%) scale(.33)}.copyButtonCopied_obH4 .copyButtonIcon_y97N{opacity:0;transform:scale(.33)}.copyButtonCopied_obH4 .copyButtonSuccessIcon_LjdS{opacity:1;transform:translate(-50%,-50%) scale(1);transition-delay:75ms}.wordWrapButtonIcon_Bwma{height:1.2rem;width:1.2rem}.details_lb9f{--docusaurus-details-summary-arrow-size:0.38rem;--docusaurus-details-transition:transform 200ms ease;--docusaurus-details-decoration-color:grey}.details_lb9f>summary{cursor:pointer;list-style:none;padding-left:1rem;position:relative}.details_lb9f>summary::-webkit-details-marker{display:none}.details_lb9f>summary:before{border-color:#0000 #0000 #0000 var(--docusaurus-details-decoration-color);border-style:solid;border-width:var(--docusaurus-details-summary-arrow-size);content:"";left:0;position:absolute;top:.45rem;transform:rotate(0);transform-origin:calc(var(--docusaurus-details-summary-arrow-size)/2) 50%;transition:var(--docusaurus-details-transition)}.collapsibleContent_i85q{border-top:1px solid var(--docusaurus-details-decoration-color);margin-top:1rem;padding-top:1rem}.details_b_Ee{--docusaurus-details-decoration-color:var(--ifm-alert-border-color);--docusaurus-details-transition:transform var(--ifm-transition-fast) ease;border:1px solid var(--ifm-alert-border-color);margin:0 0 var(--ifm-spacing-vertical)}.containsTaskList_mC6p{list-style:none}.img_ev3q{height:auto}.admonition_LlT9{margin-bottom:1em}.admonitionHeading_tbUL{font:var(--ifm-heading-font-weight) var(--ifm-h5-font-size)/var(--ifm-heading-line-height) var(--ifm-heading-font-family);margin-bottom:.3rem}.admonitionHeading_tbUL code{text-transform:none}.admonitionIcon_kALy{display:inline-block;margin-right:.4em;vertical-align:middle}.admonitionIcon_kALy svg{fill:var(--ifm-alert-foreground-color);display:inline-block;height:1.6em;width:1.6em}.breadcrumbHomeIcon_YNFT{height:1.1rem;position:relative;top:1px;vertical-align:top;width:1.1rem}.breadcrumbsContainer_Z_bl{--ifm-breadcrumb-size-multiplier:0.8;margin-bottom:.8rem}.searchQueryInput_u2C7,.searchVersionInput_m0Ui{background:var(--docsearch-searchbox-focus-background);border:2px solid var(--ifm-toc-border-color);border-radius:var(--ifm-global-radius);color:var(--docsearch-text-color);font:var(--ifm-font-size-base) var(--ifm-font-family-base);margin-bottom:.5rem;padding:.8rem;transition:border var(--ifm-transition-fast) ease;width:100%}.searchQueryInput_u2C7:focus,.searchVersionInput_m0Ui:focus{border-color:var(--docsearch-primary-color);outline:0}.searchQueryInput_u2C7::placeholder{color:var(--docsearch-muted-color)}.searchResultsColumn_JPFH{font-size:.9rem;font-weight:700}.algoliaLogo_rT1R{max-width:150px}.algoliaLogoPathFill_WdUC{fill:var(--ifm-font-color-base)}.searchResultItem_Tv2o{border-bottom:1px solid var(--ifm-toc-border-color);padding:1rem 0}.searchResultItemHeading_KbCB{font-weight:400;margin-bottom:0}.searchResultItemPath_lhe1{--ifm-breadcrumb-separator-size-multiplier:1;color:var(--ifm-color-content-secondary);font-size:.8rem}.searchResultItemSummary_AEaO{font-style:italic;margin:.5rem 0 0}.loadingSpinner_XVxU{animation:1s linear infinite a;border:.4em solid #eee;border-radius:50%;border-top:.4em solid var(--ifm-color-primary);height:3rem;margin:0 auto;width:3rem}@keyframes a{to{transform:rotate(1turn)}}.loader_vvXV{margin-top:2rem}.search-result-match{background:#ffd78e40;color:var(--docsearch-hit-color);padding:.09em 0}.backToTopButton_sjWU{background-color:var(--ifm-color-emphasis-200);border-radius:50%;bottom:1.3rem;box-shadow:var(--ifm-global-shadow-lw);height:3rem;opacity:0;position:fixed;right:1.3rem;transform:scale(0);transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default);visibility:hidden;width:3rem;z-index:calc(var(--ifm-z-index-fixed) - 1)}.backToTopButton_sjWU:after{background-color:var(--ifm-color-emphasis-1000);content:" ";display:inline-block;height:100%;-webkit-mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;mask:var(--ifm-menu-link-sublist-icon) 50%/2rem 2rem no-repeat;width:100%}.backToTopButtonShow_xfvO{opacity:1;transform:scale(1);visibility:visible}[data-theme=dark]:root{--docusaurus-collapse-button-bg:#ffffff0d;--docusaurus-collapse-button-bg-hover:#ffffff1a}.collapseSidebarButton_PEFL{display:none;margin:0}.docSidebarContainer_b6E3,.sidebarLogo_isFc{display:none}.docMainContainer_gTbr,.docPage__5DB{display:flex;width:100%}.docPage__5DB{flex:1 0}.docsWrapper_BCFX{display:flex;flex:1 0 auto}.DocSearch-Button,.DocSearch-Button-Container{align-items:center;display:flex}.DocSearch-Button{background:var(--docsearch-searchbox-background);border:0;border-radius:40px;color:var(--docsearch-muted-color);cursor:pointer;font-weight:500;height:36px;justify-content:space-between;padding:0 8px;-webkit-user-select:none;user-select:none}.DocSearch-Button:active,.DocSearch-Button:focus,.DocSearch-Button:hover{background:var(--docsearch-searchbox-focus-background);box-shadow:var(--docsearch-searchbox-shadow);color:var(--docsearch-text-color);outline:0}.DocSearch-Search-Icon{stroke-width:1.6}.DocSearch-Hit-Tree,.DocSearch-Hit-action,.DocSearch-Hit-icon,.DocSearch-Reset{stroke-width:var(--docsearch-icon-stroke-width)}.DocSearch-Button .DocSearch-Search-Icon{color:var(--docsearch-text-color)}.DocSearch-Button-Placeholder{font-size:1rem;padding:0 12px 0 6px}.DocSearch-Input,.DocSearch-Link{-webkit-appearance:none;font:inherit}.DocSearch-Button-Keys{display:flex;min-width:calc(40px + .8em)}.DocSearch-Button-Key{align-items:center;background:var(--docsearch-key-gradient);border:0;border-radius:3px;box-shadow:var(--docsearch-key-shadow);color:var(--docsearch-muted-color);display:flex;height:18px;justify-content:center;margin-right:.4em;padding:0 0 2px;position:relative;top:-1px;width:20px}.DocSearch--active{overflow:hidden!important}.DocSearch-Container{background-color:var(--docsearch-container-background);height:100vh;left:0;position:fixed;top:0;width:100vw;z-index:200}.DocSearch-Link{appearance:none;background:none;border:0;color:var(--docsearch-highlight-color);cursor:pointer;margin:0;padding:0}.DocSearch-Modal{background:var(--docsearch-modal-background);border-radius:6px;box-shadow:var(--docsearch-modal-shadow);flex-direction:column;margin:60px auto auto;max-width:var(--docsearch-modal-width);position:relative}.DocSearch-SearchBar{display:flex;padding:var(--docsearch-spacing) var(--docsearch-spacing) 0}.DocSearch-Form{align-items:center;background:var(--docsearch-searchbox-focus-background);border-radius:4px;box-shadow:var(--docsearch-searchbox-shadow);display:flex;height:var(--docsearch-searchbox-height);margin:0;padding:0 var(--docsearch-spacing);position:relative;width:100%}.DocSearch-Input{appearance:none;background:#0000;border:0;color:var(--docsearch-text-color);flex:1;font-size:1.2em;height:100%;outline:0;padding:0 0 0 8px;width:80%}.DocSearch-Hit-action-button,.DocSearch-Reset{-webkit-appearance:none;border:0;cursor:pointer}.DocSearch-Input::placeholder{color:var(--docsearch-muted-color);opacity:1}.DocSearch-Input::-webkit-search-cancel-button,.DocSearch-Input::-webkit-search-decoration,.DocSearch-Input::-webkit-search-results-button,.DocSearch-Input::-webkit-search-results-decoration{display:none}.DocSearch-LoadingIndicator,.DocSearch-MagnifierLabel,.DocSearch-Reset{margin:0;padding:0}.DocSearch-Container--Stalled .DocSearch-LoadingIndicator,.DocSearch-MagnifierLabel,.DocSearch-Reset{align-items:center;color:var(--docsearch-highlight-color);display:flex;justify-content:center}.DocSearch-Cancel,.DocSearch-Container--Stalled .DocSearch-MagnifierLabel,.DocSearch-LoadingIndicator,.DocSearch-Reset[hidden]{display:none}.DocSearch-Reset{animation:.1s ease-in forwards b;appearance:none;background:none;border-radius:50%;color:var(--docsearch-icon-color);padding:2px;right:0}.DocSearch-Help,.DocSearch-HitsFooter,.DocSearch-Label{color:var(--docsearch-muted-color)}.DocSearch-Reset:hover{color:var(--docsearch-highlight-color)}.DocSearch-LoadingIndicator svg,.DocSearch-MagnifierLabel svg{height:24px;width:24px}.DocSearch-Dropdown{max-height:calc(var(--docsearch-modal-height) - var(--docsearch-searchbox-height) - var(--docsearch-spacing) - var(--docsearch-footer-height));min-height:var(--docsearch-spacing);overflow-y:auto;overflow-y:overlay;padding:0 var(--docsearch-spacing);scrollbar-color:var(--docsearch-muted-color) var(--docsearch-modal-background);scrollbar-width:thin}.DocSearch-Dropdown::-webkit-scrollbar{width:12px}.DocSearch-Dropdown::-webkit-scrollbar-track{background:#0000}.DocSearch-Dropdown::-webkit-scrollbar-thumb{background-color:var(--docsearch-muted-color);border:3px solid var(--docsearch-modal-background);border-radius:20px}.DocSearch-Dropdown ul{list-style:none;margin:0;padding:0}.DocSearch-Label{font-size:.75em;line-height:1.6em}.DocSearch-Help{font-size:.9em;margin:0;-webkit-user-select:none;user-select:none}.DocSearch-Title{font-size:1.2em}.DocSearch-Logo a{display:flex}.DocSearch-Logo svg{color:var(--docsearch-logo-color);margin-left:8px}.DocSearch-Hits:last-of-type{margin-bottom:24px}.DocSearch-Hits mark{background:none;color:var(--docsearch-highlight-color)}.DocSearch-HitsFooter{display:flex;font-size:.85em;justify-content:center;margin-bottom:var(--docsearch-spacing);padding:var(--docsearch-spacing)}.DocSearch-HitsFooter a{border-bottom:1px solid;color:inherit}.DocSearch-Hit{border-radius:4px;display:flex;padding-bottom:4px;position:relative}.DocSearch-Hit--deleting{opacity:0;transition:.25s linear}.DocSearch-Hit--favoriting{transform:scale(0);transform-origin:top center;transition:.25s linear .25s}.DocSearch-Hit a{background:var(--docsearch-hit-background);border-radius:4px;box-shadow:var(--docsearch-hit-shadow);display:block;padding-left:var(--docsearch-spacing);width:100%}.DocSearch-Hit-source{background:var(--docsearch-modal-background);color:var(--docsearch-highlight-color);font-size:.85em;font-weight:600;line-height:32px;margin:0 -4px;padding:8px 4px 0;position:sticky;top:0;z-index:10}.DocSearch-Hit-Tree{color:var(--docsearch-muted-color);height:var(--docsearch-hit-height);opacity:.5;width:24px}.DocSearch-Hit[aria-selected=true] a{background-color:var(--docsearch-highlight-color)}.DocSearch-Hit[aria-selected=true] mark{text-decoration:underline}.DocSearch-Hit-Container{align-items:center;color:var(--docsearch-hit-color);display:flex;flex-direction:row;height:var(--docsearch-hit-height);padding:0 var(--docsearch-spacing) 0 0}.DocSearch-Hit-icon{height:20px;width:20px}.DocSearch-Hit-action,.DocSearch-Hit-icon{color:var(--docsearch-muted-color)}.DocSearch-Hit-action{align-items:center;display:flex;height:22px;width:22px}.DocSearch-Hit-action svg{display:block;height:18px;width:18px}.DocSearch-Hit-action+.DocSearch-Hit-action{margin-left:6px}.DocSearch-Hit-action-button{appearance:none;background:none;border-radius:50%;color:inherit;padding:2px}svg.DocSearch-Hit-Select-Icon{display:none}.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-Select-Icon{display:block}.DocSearch-Hit-action-button:focus,.DocSearch-Hit-action-button:hover{background:#0003;transition:background-color .1s ease-in}.DocSearch-Hit-action-button:focus path,.DocSearch-Hit-action-button:hover path{fill:#fff}.DocSearch-Hit-content-wrapper{display:flex;flex:1 1 auto;flex-direction:column;font-weight:500;justify-content:center;line-height:1.2em;margin:0 8px;overflow-x:hidden;position:relative;text-overflow:ellipsis;white-space:nowrap;width:80%}.DocSearch-Hit-title{font-size:.9em}.DocSearch-Hit-path{color:var(--docsearch-muted-color);font-size:.75em}.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-Tree,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-action,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-icon,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-path,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-text,.DocSearch-Hit[aria-selected=true] .DocSearch-Hit-title,.DocSearch-Hit[aria-selected=true] mark{color:var(--docsearch-hit-active-color)!important}.DocSearch-ErrorScreen,.DocSearch-NoResults,.DocSearch-StartScreen{font-size:.9em;margin:0 auto;padding:36px 0;text-align:center;width:80%}.DocSearch-Screen-Icon{color:var(--docsearch-muted-color);padding-bottom:12px}.DocSearch-NoResults-Prefill-List{display:inline-block;padding-bottom:24px;text-align:left}.DocSearch-NoResults-Prefill-List ul{display:inline-block;padding:8px 0 0}.DocSearch-NoResults-Prefill-List li{list-style-position:inside;list-style-type:"» "}.DocSearch-Prefill{-webkit-appearance:none;appearance:none;background:none;border:0;border-radius:1em;color:var(--docsearch-highlight-color);cursor:pointer;display:inline-block;font-size:1em;font-weight:700;padding:0}.DocSearch-Prefill:focus,.DocSearch-Prefill:hover{outline:0;text-decoration:underline}.DocSearch-Footer{align-items:center;background:var(--docsearch-footer-background);border-radius:0 0 8px 8px;box-shadow:var(--docsearch-footer-shadow);display:flex;flex-direction:row-reverse;flex-shrink:0;height:var(--docsearch-footer-height);justify-content:space-between;padding:0 var(--docsearch-spacing);position:relative;-webkit-user-select:none;user-select:none;width:100%;z-index:300}.DocSearch-Commands{color:var(--docsearch-muted-color);display:flex;list-style:none;margin:0;padding:0}.DocSearch-Commands li{align-items:center;display:flex}.DocSearch-Commands li:not(:last-of-type){margin-right:.8em}.DocSearch-Commands-Key{align-items:center;background:var(--docsearch-key-gradient);border:0;border-radius:2px;box-shadow:var(--docsearch-key-shadow);color:var(--docsearch-muted-color);display:flex;height:18px;justify-content:center;margin-right:.4em;padding:0 0 1px;width:20px}@keyframes b{0%{opacity:0}to{opacity:1}}.DocSearch-Button{margin:0;transition:all var(--ifm-transition-fast) var(--ifm-transition-timing-default)}.DocSearch-Container{z-index:calc(var(--ifm-z-index-fixed) + 1)}@media (min-width:997px){.collapseSidebarButton_PEFL,.expandButton_m80_{background-color:var(--docusaurus-collapse-button-bg)}:root{--docusaurus-announcement-bar-height:30px}.announcementBarClose_gvF7,.announcementBarPlaceholder_vyr4{flex-basis:50px}.searchBox_ZlJk{padding:var(--ifm-navbar-item-padding-vertical) var(--ifm-navbar-item-padding-horizontal)}.lastUpdated_vwxv{text-align:right}.tocMobile_ITEo{display:none}.docItemCol_VOVn{max-width:75%!important}.collapseSidebarButton_PEFL{border:1px solid var(--ifm-toc-border-color);border-radius:0;bottom:0;display:block!important;height:40px;position:sticky}.collapseSidebarButtonIcon_kv0_{margin-top:4px;transform:rotate(180deg)}.expandButtonIcon_BlDH,[dir=rtl] .collapseSidebarButtonIcon_kv0_{transform:rotate(0)}.collapseSidebarButton_PEFL:focus,.collapseSidebarButton_PEFL:hover,.expandButton_m80_:focus,.expandButton_m80_:hover{background-color:var(--docusaurus-collapse-button-bg-hover)}.menuHtmlItem_M9Kj{padding:var(--ifm-menu-link-padding-vertical) var(--ifm-menu-link-padding-horizontal)}.menu_SIkG{flex-grow:1;padding:.5rem}@supports (scrollbar-gutter:stable){.menu_SIkG{padding:.5rem 0 .5rem .5rem;scrollbar-gutter:stable}}.menuWithAnnouncementBar_GW3s{margin-bottom:var(--docusaurus-announcement-bar-height)}.sidebar_njMd{display:flex;flex-direction:column;height:100%;padding-top:var(--ifm-navbar-height);width:var(--doc-sidebar-width)}.sidebarWithHideableNavbar_wUlq{padding-top:0}.sidebarHidden_VK0M{opacity:0;visibility:hidden}.sidebarLogo_isFc{align-items:center;color:inherit!important;display:flex!important;margin:0 var(--ifm-navbar-padding-horizontal);max-height:var(--ifm-navbar-height);min-height:var(--ifm-navbar-height);text-decoration:none!important}.sidebarLogo_isFc img{height:2rem;margin-right:.5rem}.expandButton_m80_{align-items:center;display:flex;height:100%;justify-content:center;position:absolute;right:0;top:0;transition:background-color var(--ifm-transition-fast) ease;width:100%}[dir=rtl] .expandButtonIcon_BlDH{transform:rotate(180deg)}.docSidebarContainer_b6E3{border-right:1px solid var(--ifm-toc-border-color);-webkit-clip-path:inset(0);clip-path:inset(0);display:block;margin-top:calc(var(--ifm-navbar-height)*-1);transition:width var(--ifm-transition-fast) ease;width:var(--doc-sidebar-width);will-change:width}.docSidebarContainerHidden_b3ry{cursor:pointer;width:var(--doc-sidebar-hidden-width)}.sidebarViewport_Xe31{height:100%;max-height:100vh;position:sticky;top:0}.docMainContainer_gTbr{flex-grow:1;max-width:calc(100% - var(--doc-sidebar-width))}.docMainContainerEnhanced_Uz_u{max-width:calc(100% - var(--doc-sidebar-hidden-width))}.docItemWrapperEnhanced_czyv{max-width:calc(var(--ifm-container-width) + var(--doc-sidebar-width))!important}}@media (min-width:1440px){.container{max-width:var(--ifm-container-width-xl)}}@media (max-width:996px){.col{--ifm-col-width:100%;flex-basis:var(--ifm-col-width);margin-left:0}.footer{--ifm-footer-padding-horizontal:0}.colorModeToggle_DEke,.footer__link-separator,.navbar-sidebar__back,.navbar__item,.tableOfContents_bqdL{display:none}.footer__col{margin-bottom:calc(var(--ifm-spacing-vertical)*3)}.footer__link-item{display:block}.hero{padding-left:0;padding-right:0}.navbar>.container,.navbar>.container-fluid{padding:0}.navbar__toggle{display:inherit}.navbar__search-input{width:9rem}.pills--block,.tabs--block{flex-direction:column}.searchBox_ZlJk{position:absolute;right:var(--ifm-navbar-padding-horizontal)}.docItemContainer_F8PC{padding:0 .3rem}}@media only screen and (max-width:996px){.searchQueryColumn_RTkw,.searchResultsColumn_JPFH{max-width:60%!important}.searchLogoColumn_rJIA,.searchVersionColumn_ypXd{max-width:40%!important}.searchLogoColumn_rJIA{padding-left:0!important}}@media (max-width:768px){#theme-main h1{font-size:50px!important;font-weight:700;line-height:3rem!important}#theme-main .header-docs{margin-bottom:20px}.DocSearch-Button-Keys,.DocSearch-Button-Placeholder,.DocSearch-Commands,.DocSearch-Hit-Tree{display:none}:root{--docsearch-spacing:10px;--docsearch-footer-height:40px}.DocSearch-Dropdown{height:100%;max-height:calc(var(--docsearch-vh,1vh)*100 - var(--docsearch-searchbox-height) - var(--docsearch-spacing) - var(--docsearch-footer-height))}.DocSearch-Container{height:100vh;height:-webkit-fill-available;height:calc(var(--docsearch-vh,1vh)*100);position:absolute}.DocSearch-Footer{border-radius:0;bottom:0;position:absolute}.DocSearch-Hit-content-wrapper{display:flex;position:relative;width:80%}.DocSearch-Modal{border-radius:0;box-shadow:none;height:100vh;height:-webkit-fill-available;height:calc(var(--docsearch-vh,1vh)*100);margin:0;max-width:100%;width:100%}.DocSearch-Cancel{-webkit-appearance:none;appearance:none;background:none;border:0;color:var(--docsearch-highlight-color);cursor:pointer;display:inline-block;flex:none;font:inherit;font-size:1em;font-weight:500;margin-left:var(--docsearch-spacing);outline:0;overflow:hidden;padding:0;-webkit-user-select:none;user-select:none;white-space:nowrap}}@media (max-width:576px){.markdown h1:first-child{--ifm-h1-font-size:2rem}.markdown>h2{--ifm-h2-font-size:1.5rem}.markdown>h3{--ifm-h3-font-size:1.25rem}}@media screen and (max-width:576px){.searchQueryColumn_RTkw{max-width:100%!important}.searchVersionColumn_ypXd{max-width:100%!important;padding-left:var(--ifm-spacing-horizontal)!important}}@media (hover:hover){.backToTopButton_sjWU:hover{background-color:var(--ifm-color-emphasis-300)}}@media (pointer:fine){.thin-scrollbar{scrollbar-width:thin}.thin-scrollbar::-webkit-scrollbar{height:var(--ifm-scrollbar-size);width:var(--ifm-scrollbar-size)}.thin-scrollbar::-webkit-scrollbar-track{background:var(--ifm-scrollbar-track-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb{background:var(--ifm-scrollbar-thumb-background-color);border-radius:10px}.thin-scrollbar::-webkit-scrollbar-thumb:hover{background:var(--ifm-scrollbar-thumb-hover-background-color)}}@media (prefers-reduced-motion:reduce){:root{--ifm-transition-fast:0ms;--ifm-transition-slow:0ms}}@media screen and (prefers-reduced-motion:reduce){.DocSearch-Reset{stroke-width:var(--docsearch-icon-stroke-width);animation:none;-webkit-appearance:none;appearance:none;background:none;border:0;border-radius:50%;color:var(--docsearch-icon-color);cursor:pointer;right:0}.DocSearch-Hit--deleting,.DocSearch-Hit--favoriting{transition:none}.DocSearch-Hit-action-button:focus,.DocSearch-Hit-action-button:hover{background:#0003;transition:none}}@media print{.announcementBar_mb4j,.footer,.menu,.navbar,.pagination-nav,.table-of-contents,.tocMobile_ITEo{display:none}.tabs{page-break-inside:avoid}.codeBlockLines_e6Vv{white-space:pre-wrap}}
\ No newline at end of file
diff --git a/zh/assets/js/03f6c9e9.ee268660.js b/zh/assets/js/03f6c9e9.8afa5250.js
similarity index 98%
rename from zh/assets/js/03f6c9e9.ee268660.js
rename to zh/assets/js/03f6c9e9.8afa5250.js
index 10fc59214..330278515 100644
--- a/zh/assets/js/03f6c9e9.ee268660.js
+++ b/zh/assets/js/03f6c9e9.8afa5250.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[843],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>d});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},l=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},y=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,c=e.originalType,s=e.parentName,l=o(e,["components","mdxType","originalType","parentName"]),y=p(r),d=i,m=y["".concat(s,".").concat(d)]||y[d]||u[d]||c;return r?n.createElement(m,a(a({ref:t},l),{},{components:r})):n.createElement(m,a({ref:t},l))}));function d(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var c=r.length,a=new Array(c);a[0]=y;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:i,a[1]=o;for(var p=2;p<c;p++)a[p]=r[p];return n.createElement.apply(null,a)}return n.createElement.apply(null,r)}y.displayName="MDXCreateElement"},9943:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>a,default:()=>u,frontMatter:()=>c,metadata:()=>o,toc:()=>p});var n=r(3117),i=(r(7294),r(3905));const c={title:"Secret \u52a0\u5bc6",weight:26},a="Secret \u52a0\u5bc6\u914d\u7f6e",o={unversionedId:"security/secrets-encryption",id:"security/secrets-encryption",title:"Secret \u52a0\u5bc6",description:"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u9996\u6b21\u542f\u52a8 server \u65f6\uff0c\u4f20\u9012\u6807\u5fd7 --secrets-encryption \u5c06\u81ea\u52a8\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",sourceDirName:"security",slug:"/security/secrets-encryption",permalink:"/zh/security/secrets-encryption",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"Secret \u52a0\u5bc6",weight:26},sidebar:"mySidebar",previous:{title:"\u5b89\u5168",permalink:"/zh/security/"},next:{title:"CIS Hardening Guide",permalink:"/zh/security/hardening-guide"}},s={},p=[{value:"Secret \u52a0\u5bc6\u5de5\u5177",id:"secret-\u52a0\u5bc6\u5de5\u5177",level:2}],l={toc:p};function u(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("h1",{id:"secret-\u52a0\u5bc6\u914d\u7f6e"},"Secret \u52a0\u5bc6\u914d\u7f6e"),(0,i.kt)("p",null,"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u9996\u6b21\u542f\u52a8 server \u65f6\uff0c\u4f20\u9012\u6807\u5fd7 ",(0,i.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u5c06\u81ea\u52a8\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"\u751f\u6210 AES-CBC \u5bc6\u94a5"),(0,i.kt)("li",{parentName:"ul"},"\u4f7f\u7528\u5bc6\u94a5\u751f\u6210\u52a0\u5bc6\u914d\u7f6e\u6587\u4ef6"),(0,i.kt)("li",{parentName:"ul"},"\u5c06\u914d\u7f6e\u4f5c\u4e3a encryption-provider-config \u4f20\u9012\u7ed9 KubeAPI")),(0,i.kt)("admonition",{type:"tip"},(0,i.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4e0d\u91cd\u65b0\u542f\u52a8\u73b0\u6709 server\uff0c\u5219\u65e0\u6cd5\u5728\u5176\u4e0a\u542f\u7528 Secret \u52a0\u5bc6\u3002",(0,i.kt)("br",{parentName:"p"}),"\n","\u5982\u679c\u4f7f\u7528\u811a\u672c\u6216",(0,i.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9"},"\u914d\u7f6e\u9009\u9879"),"\u4e2d\u63cf\u8ff0\u7684\u5176\u4ed6\u65b9\u6cd5\u8fdb\u884c\u5b89\u88c5\uff0c\u8bf7\u4f7f\u7528 ",(0,i.kt)("inlineCode",{parentName:"p"},"curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption"),"\u3002")),(0,i.kt)("p",null,"\u52a0\u5bc6\u914d\u7f6e\u6587\u4ef6\u793a\u4f8b\uff1a"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-json"},'{\n  "kind": "EncryptionConfiguration",\n  "apiVersion": "apiserver.config.k8s.io/v1",\n  "resources": [\n    {\n      "resources": [\n        "secrets"\n      ],\n      "providers": [\n        {\n          "aescbc": {\n            "keys": [\n              {\n                "name": "aescbckey",\n                "secret": "xxxxxxxxxxxxxxxxxxx"\n              }\n            ]\n          }\n        },\n        {\n          "identity": {}\n        }\n      ]\n    }\n  ]\n}\n')),(0,i.kt)("h2",{id:"secret-\u52a0\u5bc6\u5de5\u5177"},"Secret \u52a0\u5bc6\u5de5\u5177"),(0,i.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a\u5b9e\u7528\u5de5\u5177 ",(0,i.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),"\uff0c\u53ef\u4ee5\u81ea\u52a8\u63a7\u5236\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6"),(0,i.kt)("li",{parentName:"ul"},"\u6dfb\u52a0\u65b0\u7684\u52a0\u5bc6\u5bc6\u94a5"),(0,i.kt)("li",{parentName:"ul"},"\u8f6e\u6362\u548c\u5220\u9664\u52a0\u5bc6\u5bc6\u94a5"),(0,i.kt)("li",{parentName:"ul"},"\u91cd\u65b0\u52a0\u5bc6 Secret")),(0,i.kt)("p",null,"\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,i.kt)("a",{parentName:"p",href:"/zh/cli/secrets-encrypt"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," \u547d\u4ee4\u6587\u6863"),"\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[843],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>d});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function a(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):a(a({},t),e)),r},l=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},y=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,c=e.originalType,s=e.parentName,l=o(e,["components","mdxType","originalType","parentName"]),y=p(r),d=i,m=y["".concat(s,".").concat(d)]||y[d]||u[d]||c;return r?n.createElement(m,a(a({ref:t},l),{},{components:r})):n.createElement(m,a({ref:t},l))}));function d(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var c=r.length,a=new Array(c);a[0]=y;var o={};for(var s in t)hasOwnProperty.call(t,s)&&(o[s]=t[s]);o.originalType=e,o.mdxType="string"==typeof e?e:i,a[1]=o;for(var p=2;p<c;p++)a[p]=r[p];return n.createElement.apply(null,a)}return n.createElement.apply(null,r)}y.displayName="MDXCreateElement"},9943:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>a,default:()=>u,frontMatter:()=>c,metadata:()=>o,toc:()=>p});var n=r(3117),i=(r(7294),r(3905));const c={title:"Secret \u52a0\u5bc6",weight:26},a="Secret \u52a0\u5bc6\u914d\u7f6e",o={unversionedId:"security/secrets-encryption",id:"security/secrets-encryption",title:"Secret \u52a0\u5bc6",description:"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u9996\u6b21\u542f\u52a8 server \u65f6\uff0c\u4f20\u9012\u6807\u5fd7 --secrets-encryption \u5c06\u81ea\u52a8\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",sourceDirName:"security",slug:"/security/secrets-encryption",permalink:"/zh/security/secrets-encryption",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"Secret \u52a0\u5bc6",weight:26},sidebar:"mySidebar",previous:{title:"\u5b89\u5168",permalink:"/zh/security/"},next:{title:"CIS Hardening Guide",permalink:"/zh/security/hardening-guide"}},s={},p=[{value:"Secret \u52a0\u5bc6\u5de5\u5177",id:"secret-\u52a0\u5bc6\u5de5\u5177",level:2}],l={toc:p};function u(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("h1",{id:"secret-\u52a0\u5bc6\u914d\u7f6e"},"Secret \u52a0\u5bc6\u914d\u7f6e"),(0,i.kt)("p",null,"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u9996\u6b21\u542f\u52a8 server \u65f6\uff0c\u4f20\u9012\u6807\u5fd7 ",(0,i.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u5c06\u81ea\u52a8\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"\u751f\u6210 AES-CBC \u5bc6\u94a5"),(0,i.kt)("li",{parentName:"ul"},"\u4f7f\u7528\u5bc6\u94a5\u751f\u6210\u52a0\u5bc6\u914d\u7f6e\u6587\u4ef6"),(0,i.kt)("li",{parentName:"ul"},"\u5c06\u914d\u7f6e\u4f5c\u4e3a encryption-provider-config \u4f20\u9012\u7ed9 KubeAPI")),(0,i.kt)("admonition",{type:"tip"},(0,i.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4e0d\u91cd\u65b0\u542f\u52a8\u73b0\u6709 server\uff0c\u5219\u65e0\u6cd5\u5728\u5176\u4e0a\u542f\u7528 Secret \u52a0\u5bc6\u3002",(0,i.kt)("br",{parentName:"p"}),"\n","\u5982\u679c\u4f7f\u7528\u811a\u672c\u6216",(0,i.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9"},"\u914d\u7f6e\u9009\u9879"),"\u4e2d\u63cf\u8ff0\u7684\u5176\u4ed6\u65b9\u6cd5\u8fdb\u884c\u5b89\u88c5\uff0c\u8bf7\u4f7f\u7528 ",(0,i.kt)("inlineCode",{parentName:"p"},"curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption"),"\u3002")),(0,i.kt)("p",null,"\u52a0\u5bc6\u914d\u7f6e\u6587\u4ef6\u793a\u4f8b\uff1a"),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-json"},'{\n  "kind": "EncryptionConfiguration",\n  "apiVersion": "apiserver.config.k8s.io/v1",\n  "resources": [\n    {\n      "resources": [\n        "secrets"\n      ],\n      "providers": [\n        {\n          "aescbc": {\n            "keys": [\n              {\n                "name": "aescbckey",\n                "secret": "xxxxxxxxxxxxxxxxxxx"\n              }\n            ]\n          }\n        },\n        {\n          "identity": {}\n        }\n      ]\n    }\n  ]\n}\n')),(0,i.kt)("h2",{id:"secret-\u52a0\u5bc6\u5de5\u5177"},"Secret \u52a0\u5bc6\u5de5\u5177"),(0,i.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a\u5b9e\u7528\u5de5\u5177 ",(0,i.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),"\uff0c\u53ef\u4ee5\u81ea\u52a8\u63a7\u5236\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6"),(0,i.kt)("li",{parentName:"ul"},"\u6dfb\u52a0\u65b0\u7684\u52a0\u5bc6\u5bc6\u94a5"),(0,i.kt)("li",{parentName:"ul"},"\u8f6e\u6362\u548c\u5220\u9664\u52a0\u5bc6\u5bc6\u94a5"),(0,i.kt)("li",{parentName:"ul"},"\u91cd\u65b0\u52a0\u5bc6 Secret")),(0,i.kt)("p",null,"\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,i.kt)("a",{parentName:"p",href:"/zh/cli/secrets-encrypt"},(0,i.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," \u547d\u4ee4\u6587\u6863"),"\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/0a0e4894.0e5966dc.js b/zh/assets/js/0a0e4894.d5e9d95c.js
similarity index 98%
rename from zh/assets/js/0a0e4894.0e5966dc.js
rename to zh/assets/js/0a0e4894.d5e9d95c.js
index e9ad1dd31..8899211a3 100644
--- a/zh/assets/js/0a0e4894.0e5966dc.js
+++ b/zh/assets/js/0a0e4894.d5e9d95c.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3572],{3905:(e,t,r)=>{r.d(t,{Zo:()=>i,kt:()=>d});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),u=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},i=function(e){var t=u(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,c=e.originalType,o=e.parentName,i=s(e,["components","mdxType","originalType","parentName"]),m=u(r),d=a,k=m["".concat(o,".").concat(d)]||m[d]||p[d]||c;return r?n.createElement(k,l(l({ref:t},i),{},{components:r})):n.createElement(k,l({ref:t},i))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var c=r.length,l=new Array(c);l[0]=m;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,l[1]=s;for(var u=2;u<c;u++)l[u]=r[u];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},5020:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>l,default:()=>p,frontMatter:()=>c,metadata:()=>s,toc:()=>u});var n=r(3117),a=(r(7294),r(3905));const c={title:"\u96c6\u7fa4\u8bbf\u95ee",weight:21},l=void 0,s={unversionedId:"cluster-access/cluster-access",id:"cluster-access/cluster-access",title:"\u96c6\u7fa4\u8bbf\u95ee",description:"/etc/rancher/k3s/k3s.yaml \u4e2d\u5b58\u50a8\u7684 kubeconfig \u6587\u4ef6\u7528\u4e8e\u914d\u7f6e\u5bf9 Kubernetes \u96c6\u7fa4\u7684\u8bbf\u95ee\u3002\u5982\u679c\u4f60\u5df2\u7ecf\u5b89\u88c5\u4e86\u4e0a\u6e38\u7684 Kubernetes \u547d\u4ee4\u884c\u5de5\u5177\uff08\u5982 kubectl \u6216 helm)\uff0c\u4f60\u9700\u8981\u7528\u6b63\u786e\u7684 kubeconfig \u8def\u5f84\u914d\u7f6e\u5b83\u4eec\u3002\u8fd9\u53ef\u4ee5\u901a\u8fc7\u5bfc\u51fa KUBECONFIG \u73af\u5883\u53d8\u91cf\u6216\u8c03\u7528 --kubeconfig \u547d\u4ee4\u884c\u6807\u5fd7\u6765\u5b8c\u6210\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u793a\u4f8b\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",sourceDirName:"cluster-access",slug:"/cluster-access/",permalink:"/zh/cluster-access/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u96c6\u7fa4\u8bbf\u95ee",weight:21},sidebar:"mySidebar",previous:{title:"cluster-loadbalancer",permalink:"/zh/datastore/cluster-loadbalancer"},next:{title:"\u5347\u7ea7",permalink:"/zh/upgrades/"}},o={},u=[{value:"\u4f7f\u7528 kubectl \u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4",id:"\u4f7f\u7528-kubectl-\u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4",level:3}],i={toc:u};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},i,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," \u4e2d\u5b58\u50a8\u7684 kubeconfig \u6587\u4ef6\u7528\u4e8e\u914d\u7f6e\u5bf9 Kubernetes \u96c6\u7fa4\u7684\u8bbf\u95ee\u3002\u5982\u679c\u4f60\u5df2\u7ecf\u5b89\u88c5\u4e86\u4e0a\u6e38\u7684 Kubernetes \u547d\u4ee4\u884c\u5de5\u5177\uff08\u5982 kubectl \u6216 helm)\uff0c\u4f60\u9700\u8981\u7528\u6b63\u786e\u7684 kubeconfig \u8def\u5f84\u914d\u7f6e\u5b83\u4eec\u3002\u8fd9\u53ef\u4ee5\u901a\u8fc7\u5bfc\u51fa ",(0,a.kt)("inlineCode",{parentName:"p"},"KUBECONFIG")," \u73af\u5883\u53d8\u91cf\u6216\u8c03\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--kubeconfig")," \u547d\u4ee4\u884c\u6807\u5fd7\u6765\u5b8c\u6210\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u793a\u4f8b\u3002"),(0,a.kt)("p",null,"\u4f7f\u7528 KUBECONFIG \u73af\u5883\u53d8\u91cf\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\nkubectl get pods --all-namespaces\nhelm ls --all-namespaces\n")),(0,a.kt)("p",null,"\u6216\u8005\u5728\u547d\u4ee4\u4e2d\u6307\u5b9a kubeconfig \u6587\u4ef6\u7684\u4f4d\u7f6e\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces\nhelm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces\n")),(0,a.kt)("h3",{id:"\u4f7f\u7528-kubectl-\u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4"},"\u4f7f\u7528 kubectl \u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4"),(0,a.kt)("p",null,"\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," \u590d\u5236\u5230\u4f4d\u4e8e\u96c6\u7fa4\u5916\u90e8\u7684\u4e3b\u673a\u4e0a\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"~/.kube/config"),"\u3002\u7136\u540e\uff0c\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"server")," \u5b57\u6bb5\u7684\u503c\u66ff\u6362\u4e3a\u4f60 K3s Server \u7684 IP \u6216\u540d\u79f0\u3002\u73b0\u5728\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl")," \u6765\u7ba1\u7406 K3s \u96c6\u7fa4\u3002"))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3572],{3905:(e,t,r)=>{r.d(t,{Zo:()=>i,kt:()=>d});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),u=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},i=function(e){var t=u(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,c=e.originalType,o=e.parentName,i=s(e,["components","mdxType","originalType","parentName"]),m=u(r),d=a,k=m["".concat(o,".").concat(d)]||m[d]||p[d]||c;return r?n.createElement(k,l(l({ref:t},i),{},{components:r})):n.createElement(k,l({ref:t},i))}));function d(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var c=r.length,l=new Array(c);l[0]=m;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,l[1]=s;for(var u=2;u<c;u++)l[u]=r[u];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},5020:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>l,default:()=>p,frontMatter:()=>c,metadata:()=>s,toc:()=>u});var n=r(3117),a=(r(7294),r(3905));const c={title:"\u96c6\u7fa4\u8bbf\u95ee",weight:21},l=void 0,s={unversionedId:"cluster-access/cluster-access",id:"cluster-access/cluster-access",title:"\u96c6\u7fa4\u8bbf\u95ee",description:"/etc/rancher/k3s/k3s.yaml \u4e2d\u5b58\u50a8\u7684 kubeconfig \u6587\u4ef6\u7528\u4e8e\u914d\u7f6e\u5bf9 Kubernetes \u96c6\u7fa4\u7684\u8bbf\u95ee\u3002\u5982\u679c\u4f60\u5df2\u7ecf\u5b89\u88c5\u4e86\u4e0a\u6e38\u7684 Kubernetes \u547d\u4ee4\u884c\u5de5\u5177\uff08\u5982 kubectl \u6216 helm)\uff0c\u4f60\u9700\u8981\u7528\u6b63\u786e\u7684 kubeconfig \u8def\u5f84\u914d\u7f6e\u5b83\u4eec\u3002\u8fd9\u53ef\u4ee5\u901a\u8fc7\u5bfc\u51fa KUBECONFIG \u73af\u5883\u53d8\u91cf\u6216\u8c03\u7528 --kubeconfig \u547d\u4ee4\u884c\u6807\u5fd7\u6765\u5b8c\u6210\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u793a\u4f8b\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",sourceDirName:"cluster-access",slug:"/cluster-access/",permalink:"/zh/cluster-access/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u96c6\u7fa4\u8bbf\u95ee",weight:21},sidebar:"mySidebar",previous:{title:"cluster-loadbalancer",permalink:"/zh/datastore/cluster-loadbalancer"},next:{title:"\u5347\u7ea7",permalink:"/zh/upgrades/"}},o={},u=[{value:"\u4f7f\u7528 kubectl \u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4",id:"\u4f7f\u7528-kubectl-\u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4",level:3}],i={toc:u};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},i,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," \u4e2d\u5b58\u50a8\u7684 kubeconfig \u6587\u4ef6\u7528\u4e8e\u914d\u7f6e\u5bf9 Kubernetes \u96c6\u7fa4\u7684\u8bbf\u95ee\u3002\u5982\u679c\u4f60\u5df2\u7ecf\u5b89\u88c5\u4e86\u4e0a\u6e38\u7684 Kubernetes \u547d\u4ee4\u884c\u5de5\u5177\uff08\u5982 kubectl \u6216 helm)\uff0c\u4f60\u9700\u8981\u7528\u6b63\u786e\u7684 kubeconfig \u8def\u5f84\u914d\u7f6e\u5b83\u4eec\u3002\u8fd9\u53ef\u4ee5\u901a\u8fc7\u5bfc\u51fa ",(0,a.kt)("inlineCode",{parentName:"p"},"KUBECONFIG")," \u73af\u5883\u53d8\u91cf\u6216\u8c03\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--kubeconfig")," \u547d\u4ee4\u884c\u6807\u5fd7\u6765\u5b8c\u6210\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b\u793a\u4f8b\u3002"),(0,a.kt)("p",null,"\u4f7f\u7528 KUBECONFIG \u73af\u5883\u53d8\u91cf\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"export KUBECONFIG=/etc/rancher/k3s/k3s.yaml\nkubectl get pods --all-namespaces\nhelm ls --all-namespaces\n")),(0,a.kt)("p",null,"\u6216\u8005\u5728\u547d\u4ee4\u4e2d\u6307\u5b9a kubeconfig \u6587\u4ef6\u7684\u4f4d\u7f6e\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces\nhelm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces\n")),(0,a.kt)("h3",{id:"\u4f7f\u7528-kubectl-\u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4"},"\u4f7f\u7528 kubectl \u4ece\u5916\u90e8\u8bbf\u95ee\u96c6\u7fa4"),(0,a.kt)("p",null,"\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/k3s.yaml")," \u590d\u5236\u5230\u4f4d\u4e8e\u96c6\u7fa4\u5916\u90e8\u7684\u4e3b\u673a\u4e0a\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"~/.kube/config"),"\u3002\u7136\u540e\uff0c\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"server")," \u5b57\u6bb5\u7684\u503c\u66ff\u6362\u4e3a\u4f60 K3s Server \u7684 IP \u6216\u540d\u79f0\u3002\u73b0\u5728\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl")," \u6765\u7ba1\u7406 K3s \u96c6\u7fa4\u3002"))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/0a743094.11832e2e.js b/zh/assets/js/0a743094.ab104edb.js
similarity index 99%
rename from zh/assets/js/0a743094.11832e2e.js
rename to zh/assets/js/0a743094.ab104edb.js
index 753884c78..0b4b46882 100644
--- a/zh/assets/js/0a743094.11832e2e.js
+++ b/zh/assets/js/0a743094.ab104edb.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2170],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>s});var n=a(7294);function l(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function r(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?r(Object(a),!0).forEach((function(t){l(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):r(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function d(e,t){if(null==e)return{};var a,n,l=function(e,t){if(null==e)return{};var a,n,l={},r=Object.keys(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||(l[a]=e[a]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(l[a]=e[a])}return l}var o=n.createContext({}),p=function(e){var t=n.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=p(e.components);return n.createElement(o.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,l=e.mdxType,r=e.originalType,o=e.parentName,u=d(e,["components","mdxType","originalType","parentName"]),m=p(a),s=l,N=m["".concat(o,".").concat(s)]||m[s]||k[s]||r;return a?n.createElement(N,i(i({ref:t},u),{},{components:a})):n.createElement(N,i({ref:t},u))}));function s(e,t){var a=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=a.length,i=new Array(r);i[0]=m;var d={};for(var o in t)hasOwnProperty.call(t,o)&&(d[o]=t[o]);d.originalType=e,d.mdxType="string"==typeof e?e:l,i[1]=d;for(var p=2;p<r;p++)i[p]=a[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},5578:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>k,frontMatter:()=>r,metadata:()=>d,toc:()=>p});var n=a(3117),l=(a(7294),a(3905));const r={title:"server",weight:1},i="k3s server",d={unversionedId:"cli/server",id:"cli/server",title:"server",description:"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Server\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/server.md",sourceDirName:"cli",slug:"/cli/server",permalink:"/zh/cli/server",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/server.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"server",weight:1},sidebar:"mySidebar",previous:{title:"CLI \u5de5\u5177",permalink:"/zh/cli/"},next:{title:"agent",permalink:"/zh/cli/agent"}},o={},p=[{value:"\u5173\u952e\u914d\u7f6e\u503c",id:"\u5173\u952e\u914d\u7f6e\u503c",level:2},{value:"\u5e38\u7528\u9009\u9879",id:"\u5e38\u7528\u9009\u9879",level:2},{value:"\u6570\u636e\u5e93",id:"\u6570\u636e\u5e93",level:3},{value:"\u96c6\u7fa4\u9009\u9879",id:"\u96c6\u7fa4\u9009\u9879",level:3},{value:"\u7ba1\u7406 Kubeconfig \u9009\u9879",id:"\u7ba1\u7406-kubeconfig-\u9009\u9879",level:3},{value:"\u9ad8\u7ea7\u9009\u9879",id:"\u9ad8\u7ea7\u9009\u9879",level:2},{value:"Logging",id:"logging",level:3},{value:"Listeners",id:"listeners",level:3},{value:"\u6570\u636e",id:"\u6570\u636e",level:3},{value:"Secret \u52a0\u5bc6",id:"secret-\u52a0\u5bc6",level:3},{value:"\u7f51\u7edc",id:"\u7f51\u7edc",level:3},{value:"\u5b58\u50a8\u7c7b",id:"\u5b58\u50a8\u7c7b",level:3},{value:"Kubernetes \u7ec4\u4ef6",id:"kubernetes-\u7ec4\u4ef6",level:3},{value:"Kubernetes \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7",id:"kubernetes-\u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7",level:3},{value:"\u5b9e\u9a8c\u9009\u9879",id:"\u5b9e\u9a8c\u9009\u9879",level:3},{value:"\u5df2\u5f03\u7528\u9009\u9879",id:"\u5df2\u5f03\u7528\u9009\u9879",level:3}],u={toc:p};function k(e){let{components:t,...a}=e;return(0,l.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("h1",{id:"k3s-server"},"k3s server"),(0,l.kt)("p",null,"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Server\u3002"),(0,l.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cServer \u4e5f\u8fd0\u884c Agent\uff0c\u56e0\u6b64 Server \u4e5f\u652f\u6301 ",(0,l.kt)("a",{parentName:"p",href:"/zh/cli/agent"},(0,l.kt)("inlineCode",{parentName:"a"},"k3s agent")," \u6587\u6863"),"\u4e2d\u5217\u51fa\u7684\u6240\u6709\u914d\u7f6e\u9009\u9879\u3002"),(0,l.kt)("p",null,"\u5728\u672c\u6587\u4e2d\uff0c\u9009\u9879\u4f5c\u4e3a CLI \u6807\u5fd7\u4f20\u9012\uff0c\u4f46\u662f\u4e5f\u53ef\u4ee5\u4f5c\u4e3a\u914d\u7f6e\u6587\u4ef6\u9009\u9879\u4f20\u9012\u3002\u6709\u5173\u4f7f\u7528 YAML \u914d\u7f6e\u6587\u4ef6\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\u6587\u6863\u3002"),(0,l.kt)("h2",{id:"\u5173\u952e\u914d\u7f6e\u503c"},"\u5173\u952e\u914d\u7f6e\u503c"),(0,l.kt)("p",null,"\u4ee5\u4e0b\u9009\u9879\u5fc5\u987b\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server \u4e0a\u8bbe\u7f6e\u4e3a\u76f8\u540c\u7684\u503c\u3002\u5982\u679c\u4e0d\u8fd9\u6837\u505a\uff0c\u65b0 Server \u5c06\u65e0\u6cd5\u52a0\u5165\u96c6\u7fa4\uff08\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u65f6\uff09\uff0c\u6216\u96c6\u7fa4\u5c06\u65e0\u6cd5\u6b63\u786e\u8fd0\u884c\uff08\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u65f6\uff09\u3002"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--agent-token")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--cluster-cidr")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--cluster-dns")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--cluster-domain")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-cloud-controller")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-servicelb")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--egress-selector-mode")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--flannel-backend")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--flannel-external-ip")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--flannel-ipv6-masq")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--service-cidr"))),(0,l.kt)("h2",{id:"\u5e38\u7528\u9009\u9879"},"\u5e38\u7528\u9009\u9879"),(0,l.kt)("h3",{id:"\u6570\u636e\u5e93"},"\u6570\u636e\u5e93"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,l.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a etcd\u3001Mysql\u3001Postgres \u6216 Sqlite\uff08\u9ed8\u8ba4\uff09\u6570\u636e\u6e90\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u4fdd\u62a4\u6570\u636e\u5b58\u50a8\u540e\u7aef\u901a\u4fe1\u7684 TLS CA \u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u4fdd\u62a4\u6570\u636e\u5b58\u50a8\u540e\u7aef\u901a\u4fe1\u7684 TLS \u8bc1\u4e66\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u4fdd\u62a4\u6570\u636e\u5b58\u50a8\u540e\u7aef\u901a\u4fe1\u7684 TLS \u5bc6\u94a5\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-expose-metrics")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5411\u5ba2\u6237\u7aef\u63a5\u53e3\u516c\u5f00 etcd \u6307\u6807\uff08\u9ed8\u8ba4\u503c\uff1afalse\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u81ea\u52a8 etcd \u5feb\u7167")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-name")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bbe\u7f6e etcd \u5feb\u7167\u7684\u57fa\u672c\u540d\u79f0\u3002\u9ed8\u8ba4\u503c\uff1aetcd-snapshot-",(0,l.kt)("inlineCode",{parentName:"td"},"<unix-timestamp>"),"\uff08\u9ed8\u8ba4\u503c\uff1a\u201cetcd-snapshot\u201d\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"cron \u89c4\u8303\u4e2d\u7684\u5feb\u7167\u95f4\u9694\u65f6\u95f4\u3002eg. \u6bcf 5 \u5c0f\u65f6 '0 ",(0,l.kt)("em",{parentName:"td"},"/5 ",(0,l.kt)("em",{parentName:"em"}," ","*"," "),"'\uff08\u9ed8\u8ba4\u503c\uff1a\"0 "),"/12 ","*"," ","*"," ","*",'"\uff09')),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8981\u4fdd\u7559\u7684\u5feb\u7167\u6570\u91cf\uff08\u9ed8\u8ba4\u503c\uff1a5\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u6570\u636e\u5e93\u5feb\u7167\u7684\u76ee\u5f55\uff08\u9ed8\u8ba4\u503c\uff1a${data-dir}/db/snapshots\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u542f\u7528\u5907\u4efd\u5230 S3")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u7aef\u70b9 URL\uff08\u9ed8\u8ba4\u503c\uff1a\u201cs3.amazonaws.com\u201d\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u7528\u4e8e\u8fde\u63a5\u5230 S3 \u7aef\u70b9")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 S3 SSL \u8bc1\u4e66\u9a8c\u8bc1")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"AWS_ACCESS_KEY_ID")),(0,l.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"AWS_SECRET_ACCESS_KEY")),(0,l.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u5b58\u50a8\u6876\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u533a\u57df/\u5b58\u50a8\u6876\u4f4d\u7f6e\uff08\u53ef\u9009\uff09\uff08\u9ed8\u8ba4\u503c\uff1a\u201cus-east-1\u201d\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u6587\u4ef6\u5939")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-insecure")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 HTTPS \u7981\u7528 S3"),(0,l.kt)("td",{parentName:"tr",align:null})),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-timeout")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u8d85\u65f6\uff08\u9ed8\u8ba4\u503c\uff1a5m0s\uff09"),(0,l.kt)("td",{parentName:"tr",align:null})))),(0,l.kt)("h3",{id:"\u96c6\u7fa4\u9009\u9879"},"\u96c6\u7fa4\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token")," value, ",(0,l.kt)("inlineCode",{parentName:"td"},"-t")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5171\u4eab\u5bc6\u94a5\uff0c\u7528\u4e8e\u5c06 server \u6216 agent \u52a0\u5165\u96c6\u7fa4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5305\u542b cluster-secret/token \u7684\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--agent-token")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5171\u4eab\u5bc6\u94a5\uff0c\u7528\u4e8e\u5c06 agent \u52a0\u5165\u96c6\u7fa4\uff0c\u4f46\u4e0d\u80fd\u7528\u4e8e server")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--agent-token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5305\u542b agent secret \u7684\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--server")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u7684 server\uff0c\u7528\u4e8e\u52a0\u5165\u96c6\u7fa4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-init")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_INIT")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u5d4c\u5165\u5f0f Etcd \u521d\u59cb\u5316\u65b0\u96c6\u7fa4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_RESET")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5fd8\u8bb0\u6240\u6709\u5bf9\u7b49\u70b9\uff0c\u6210\u4e3a\u65b0\u96c6\u7fa4\u7684\u552f\u4e00\u6210\u5458")))),(0,l.kt)("h3",{id:"\u7ba1\u7406-kubeconfig-\u9009\u9879"},"\u7ba1\u7406 Kubeconfig \u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig value, -o")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_OUTPUT")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06 admin \u5ba2\u6237\u7aef\u7684 kubeconfig \u5199\u5165\u6b64\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig-mode")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_MODE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u6b64",(0,l.kt)("a",{parentName:"td",href:"https://en.wikipedia.org/wiki/Chmod"},"\u6a21\u5f0f"),"\u5199\u5165 kubeconfig\u3002kubeconfig \u6587\u4ef6\u5f52 root \u6240\u6709\uff0c\u5e76\u9ed8\u8ba4\u4f7f\u7528 600 \u6a21\u5f0f\u5199\u5165\u3002\u5982\u679c\u5c06\u6a21\u5f0f\u6539\u4e3a 644\uff0c\u4e3b\u673a\u4e0a\u7684\u5176\u4ed6\u975e\u7279\u6743\u7528\u6237\u5c06\u80fd\u8bfb\u53d6\u5b83\u3002")))),(0,l.kt)("h2",{id:"\u9ad8\u7ea7\u9009\u9879"},"\u9ad8\u7ea7\u9009\u9879"),(0,l.kt)("h3",{id:"logging"},"Logging"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--debug")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u6253\u5f00 debug \u65e5\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8868\u793a\u65e5\u5fd7\u7ea7\u522b\u8be6\u7ec6\u7a0b\u5ea6\u7684\u6570\u5b57")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"FILE_PATTERN=LOG_LEVEL \u683c\u5f0f\uff0c\u7528\u9017\u53f7\u5206\u9694\u7684\u5217\u8868\uff0c\u7528\u4e8e\u6587\u4ef6\u8fc7\u6ee4\u65e5\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6807\u51c6\u9519\u8bef\u4ee5\u53ca\u6587\u4ef6\uff08\u5982\u679c\u8bbe\u7f6e\uff09")))),(0,l.kt)("h3",{id:"listeners"},"Listeners"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--bind-address")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0.0.0.0"),(0,l.kt)("td",{parentName:"tr",align:null},"K3s \u7ed1\u5b9a\u5730\u5740")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--https-listen-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"6443"),(0,l.kt)("td",{parentName:"tr",align:null},"HTTPS \u76d1\u542c\u7aef\u53e3")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--advertise-address")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"node-external-ip/node-ip"),(0,l.kt)("td",{parentName:"tr",align:null},"IPv4 \u5730\u5740\uff0capiserver \u4f7f\u7528\u8be5\u5730\u5740\u5411\u96c6\u7fa4\u6210\u5458\u901a\u544a")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--advertise-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"listen-port/0"),(0,l.kt)("td",{parentName:"tr",align:null},"apiserver \u7528\u4e8e\u5411\u96c6\u7fa4\u6210\u5458\u901a\u544a\u7684\u7aef\u53e3")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--tls-san")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5728 TLS \u8bc1\u4e66\u4e0a\u6dfb\u52a0\u5176\u4ed6\u4e3b\u673a\u540d\u6216 IPv4/IPv6 \u5730\u5740\u4f5c\u4e3a Subject Alternative Name")))),(0,l.kt)("h3",{id:"\u6570\u636e"},"\u6570\u636e"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s"),"\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u4e3a ",(0,l.kt)("inlineCode",{parentName:"td"},"${HOME}/.rancher/k3s")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\u6587\u4ef6\u5939")))),(0,l.kt)("h3",{id:"secret-\u52a0\u5bc6"},"Secret \u52a0\u5bc6"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--secrets-encryption")),(0,l.kt)("td",{parentName:"tr",align:null},"false"),(0,l.kt)("td",{parentName:"tr",align:null},"\u542f\u7528 secret \u9759\u6001\u52a0\u5bc6")))),(0,l.kt)("h3",{id:"\u7f51\u7edc"},"\u7f51\u7edc"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-cidr")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"10.42.0.0/16"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e pod IP \u7684 IPv4/IPv6 \u7f51\u7edc CIDR")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--service-cidr")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"10.43.0.0/16"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u670d\u52a1 IP \u7684 IPv4/IPv6 \u7f51\u7edc CIDR")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--service-node-port-range")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"30000-32767"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4e3a\u5177\u6709 NodePort \u53ef\u89c1\u6027\u7684\u670d\u52a1\u4fdd\u7559\u7684\u7aef\u53e3\u8303\u56f4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-dns")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"10.43.0.10"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e coredns \u670d\u52a1\u7684 IPv4 \u96c6\u7fa4 IP\u3002\u9700\u8981\u5728 service-cidr \u8303\u56f4\u5185")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-domain")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"cluster.local"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u96c6\u7fa4\u57df\u540d")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"vxlan"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u201cnone\u201d\u3001\u201cvxlan\u201d\u3001\u201cipsec\u201d\uff08\u5df2\u5f03\u7528\uff09\u3001\u201chost-gw\u201d\u3001\u201cwireguard-native\u201d \u6216 \u201cwireguard\u201d\uff08\u5df2\u5f03\u7528\uff09\u4e2d\u7684\u5176\u4e2d\u4e00\u4e2a")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,l.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4e3a pod \u542f\u7528 IPv6 \u4f2a\u88c5")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,l.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06\u8282\u70b9\u5916\u90e8 IP \u5730\u5740\u7528\u4e8e Flannel \u6d41\u91cf")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--servicelb-namespace")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"kube-system"'),(0,l.kt)("td",{parentName:"tr",align:null},"servicelb \u7ec4\u4ef6\u7684 pod \u547d\u540d\u7a7a\u95f4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--egress-selector-mode")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"agent"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4ec5\u652f\u6301\uff1a ",(0,l.kt)("ul",null,(0,l.kt)("li",null,"disabled\uff1aapiserver \u4e0d\u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u901a\u4fe1\u3002\u8981\u6c42 server \u8fd0\u884c agent\uff0c\u5e76\u76f4\u63a5\u8fde\u63a5\u5230 agent \u4e0a\u7684 kubelet\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee service \u7aef\u70b9\u6216\u6267\u884c kubectl exec \u548c kubectl \u65e5\u5fd7\u3002"),(0,l.kt)("li",null,"agent\uff1aapiserver \u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u901a\u4fe1\u3002\u8282\u70b9\u5141\u8bb8\u73af\u56de\u5730\u5740\u7684\u96a7\u9053\u8fde\u63a5\u3002\u8981\u6c42 server \u4e5f\u8fd0\u884c agent\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee service \u7aef\u70b9\u3002K3s \u7684\u5386\u53f2\u9ed8\u8ba4\u503c\u3002"),(0,l.kt)("li",null," pod\uff1aapiserver \u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u548c service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u8282\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 agent\u3002\u8282\u70b9\u5141\u8bb8\u73af\u56de\u5730\u5740\u6216\u5206\u914d\u7ed9\u8282\u70b9\u7684 CIDR \u7684\u96a7\u9053\u8fde\u63a5\u3002"),(0,l.kt)("li",null,"  cluster\uff1aapiserver \u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u548c service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u7aef\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 agent\u3002\u8282\u70b9\u5141\u8bb8\u73af\u56de\u5730\u5740\u6216\u914d\u7f6e\u7684\u96c6\u7fa4 CIDR \u8303\u56f4\u7684\u96a7\u9053\u8fde\u63a5\u3002")))))),(0,l.kt)("h3",{id:"\u5b58\u50a8\u7c7b"},"\u5b58\u50a8\u7c7b"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--default-local-storage-path")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"\u672c\u5730\u5236\u5907\u5668\u5b58\u50a8\u7c7b\u7684\u9ed8\u8ba4\u672c\u5730\u5b58\u50a8\u8def\u5f84")))),(0,l.kt)("h3",{id:"kubernetes-\u7ec4\u4ef6"},"Kubernetes \u7ec4\u4ef6"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"td",href:"/zh/installation/packaged-components#%E4%BD%BF%E7%94%A8---disable-%E6%A0%87%E5%BF%97"},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"a"},"--disable")," \u6807\u5fd7"),"\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-scheduler")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 Kubernetes \u9ed8\u8ba4\u8c03\u5ea6\u7a0b\u5e8f")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-cloud-controller")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 k3s \u9ed8\u8ba4\u4e91 Controller Manager")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-kube-proxy")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u8fd0\u884c kube-proxy")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-network-policy")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 K3s \u9ed8\u8ba4\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-helm-controller")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 Helm \u63a7\u5236\u5668")))),(0,l.kt)("h3",{id:"kubernetes-\u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7"},"Kubernetes \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"etcd \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-apiserver-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-apiserver \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-scheduler-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-scheduler \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-controller-manager-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-controller-manager \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-cloud-controller-manager-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-cloud-controller-manager \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kubelet \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-proxy \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")))),(0,l.kt)("h3",{id:"\u5b9e\u9a8c\u9009\u9879"},"\u5b9e\u9a8c\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,l.kt)("td",{parentName:"tr",align:null},"\u65e0\u6839\u8fd0\u884c")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--enable-pprof")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5728 supervisor \u7aef\u53e3\u4e0a\u542f\u7528 pprof \u7aef\u70b9")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--docker")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 cri-dockerd \u800c\u4e0d\u662f containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,l.kt)("td",{parentName:"tr",align:null},"\u504f\u5411\u6253\u5305\u7684\u7528\u6237\u7a7a\u95f4\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u800c\u4e0d\u662f\u4e3b\u673a\u4e8c\u8fdb\u5236\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-agent")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"td",href:"/zh/advanced/#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7"},"\u8fd0\u884c\u65e0 Agent \u7684 Server\uff08\u5b9e\u9a8c\u6027\uff09"))))),(0,l.kt)("h3",{id:"\u5df2\u5f03\u7528\u9009\u9879"},"\u5df2\u5f03\u7528\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-deploy")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--disable"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--token"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," wireguard"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value=option1=value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," \u6307\u5b9a\u5e26\u6709\u540e\u7aef\u914d\u7f6e\u7684 Flannel \u914d\u7f6e\u6587\u4ef6")))),(0,l.kt)("h1",{id:"k3s-server-cli-\u5e2e\u52a9"},"K3s Server CLI \u5e2e\u52a9"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},"\u5982\u679c\u67d0\u4e2a\u9009\u9879\u51fa\u73b0\u5728\u62ec\u53f7\u4e2d\uff08\u4f8b\u5982 ",(0,l.kt)("inlineCode",{parentName:"p"},"[$K3S_TOKEN]"),"\uff09\uff0c\u8be5\u9009\u9879\u53ef\u4ee5\u4f5c\u4e3a\u8be5\u540d\u79f0\u7684\u73af\u5883\u53d8\u91cf\u4f20\u5165\u3002")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s server - Run management server\n\nUSAGE:\n   k3s server [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --bind-address value                       (listener) k3s bind address (default: 0.0.0.0)\n   --https-listen-port value                  (listener) HTTPS listen port (default: 6443)\n   --advertise-address value                  (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip)\n   --advertise-port value                     (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0)\n   --tls-san value                            (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert\n   --data-dir value, -d value                 (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root)\n   --cluster-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16)\n   --service-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16)\n   --service-node-port-range value            (networking) Port range to reserve for services with NodePort visibility (default: "30000-32767")\n   --cluster-dns value                        (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10)\n   --cluster-domain value                     (networking) Cluster Domain (default: "cluster.local")\n   --flannel-backend value                    (networking) backend<=option1=val1,option2=val2> where backend is one of \'none\', \'vxlan\', \'ipsec\' (deprecated), \'host-gw\', \'wireguard-native\', \'wireguard\' (deprecated) (default: "vxlan")\n   --flannel-ipv6-masq                        (networking) Enable IPv6 masquerading for pod\n   --flannel-external-ip                      (networking) Use node external IP addresses for Flannel traffic\n   --egress-selector-mode value               (networking) One of \'agent\', \'cluster\', \'pod\', \'disabled\' (default: "agent")\n   --servicelb-namespace value                (networking) Namespace of the pods for the servicelb component (default: "kube-system")\n   --write-kubeconfig value, -o value         (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT]\n   --write-kubeconfig-mode value              (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE]\n   --token value, -t value                    (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN]\n   --token-file value                         (cluster) File containing the token [$K3S_TOKEN_FILE]\n   --agent-token value                        (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN]\n   --agent-token-file value                   (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to, used to join a cluster [$K3S_URL]\n   --cluster-init                             (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT]\n   --cluster-reset                            (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET]\n   --cluster-reset-restore-path value         (db) Path to snapshot file to be restored\n   --kube-apiserver-arg value                 (flags) Customized flag for kube-apiserver process\n   --etcd-arg value                           (flags) Customized flag for etcd process\n   --kube-controller-manager-arg value        (flags) Customized flag for kube-controller-manager process\n   --kube-scheduler-arg value                 (flags) Customized flag for kube-scheduler process\n   --kube-cloud-controller-manager-arg value  (flags) Customized flag for kube-cloud-controller-manager process\n   --datastore-endpoint value                 (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT]\n   --datastore-cafile value                   (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE]\n   --datastore-certfile value                 (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE]\n   --datastore-keyfile value                  (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE]\n   --etcd-expose-metrics                      (db) Expose etcd metrics to client interface. (default: false)\n   --etcd-disable-snapshots                   (db) Disable automatic etcd snapshots\n   --etcd-snapshot-name value                 (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: "etcd-snapshot")\n   --etcd-snapshot-schedule-cron value        (db) Snapshot interval time in cron spec. eg. every 5 hours \'* */5 * * *\' (default: "0 */12 * * *")\n   --etcd-snapshot-retention value            (db) Number of snapshots to retain (default: 5)\n   --etcd-snapshot-dir value                  (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots)\n   --etcd-snapshot-compress                   (db) Compress etcd snapshot\n   --etcd-s3                                  (db) Enable backup to S3\n   --etcd-s3-endpoint value                   (db) S3 endpoint url (default: "s3.amazonaws.com")\n   --etcd-s3-endpoint-ca value                (db) S3 custom CA cert to connect to S3 endpoint\n   --etcd-s3-skip-ssl-verify                  (db) Disables S3 SSL certificate validation\n   --etcd-s3-access-key value                 (db) S3 access key [$AWS_ACCESS_KEY_ID]\n   --etcd-s3-secret-key value                 (db) S3 secret key [$AWS_SECRET_ACCESS_KEY]\n   --etcd-s3-bucket value                     (db) S3 bucket name\n   --etcd-s3-region value                     (db) S3 region / bucket location (optional) (default: "us-east-1")\n   --etcd-s3-folder value                     (db) S3 folder\n   --etcd-s3-insecure                         (db) Disables S3 over HTTPS\n   --etcd-s3-timeout value                    (db) S3 timeout (default: 5m0s)\n   --default-local-storage-path value         (storage) Default local storage path for local provisioner storage class\n   --disable value                            (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server)\n   --disable-scheduler                        (components) Disable Kubernetes default scheduler\n   --disable-cloud-controller                 (components) Disable k3s default cloud controller manager\n   --disable-kube-proxy                       (components) Disable running kube-proxy\n   --disable-network-policy                   (components) Disable k3s default network policy controller\n   --disable-helm-controller                  (components) Disable Helm controller\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --system-default-registry value            (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY]\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --secrets-encryption                       Enable secret encryption at rest\n   --enable-pprof                             (experimental) Enable pprof endpoint on supervisor port\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer.(default: 6444) [$K3S_LB_SERVER_PORT]\n')))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2170],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>s});var n=a(7294);function l(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function r(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,n)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?r(Object(a),!0).forEach((function(t){l(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):r(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function d(e,t){if(null==e)return{};var a,n,l=function(e,t){if(null==e)return{};var a,n,l={},r=Object.keys(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||(l[a]=e[a]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(n=0;n<r.length;n++)a=r[n],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(l[a]=e[a])}return l}var o=n.createContext({}),p=function(e){var t=n.useContext(o),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=p(e.components);return n.createElement(o.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var a=e.components,l=e.mdxType,r=e.originalType,o=e.parentName,u=d(e,["components","mdxType","originalType","parentName"]),m=p(a),s=l,N=m["".concat(o,".").concat(s)]||m[s]||k[s]||r;return a?n.createElement(N,i(i({ref:t},u),{},{components:a})):n.createElement(N,i({ref:t},u))}));function s(e,t){var a=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=a.length,i=new Array(r);i[0]=m;var d={};for(var o in t)hasOwnProperty.call(t,o)&&(d[o]=t[o]);d.originalType=e,d.mdxType="string"==typeof e?e:l,i[1]=d;for(var p=2;p<r;p++)i[p]=a[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}m.displayName="MDXCreateElement"},5578:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>k,frontMatter:()=>r,metadata:()=>d,toc:()=>p});var n=a(3117),l=(a(7294),a(3905));const r={title:"server",weight:1},i="k3s server",d={unversionedId:"cli/server",id:"cli/server",title:"server",description:"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Server\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/server.md",sourceDirName:"cli",slug:"/cli/server",permalink:"/zh/cli/server",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/server.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"server",weight:1},sidebar:"mySidebar",previous:{title:"CLI \u5de5\u5177",permalink:"/zh/cli/"},next:{title:"agent",permalink:"/zh/cli/agent"}},o={},p=[{value:"\u5173\u952e\u914d\u7f6e\u503c",id:"\u5173\u952e\u914d\u7f6e\u503c",level:2},{value:"\u5e38\u7528\u9009\u9879",id:"\u5e38\u7528\u9009\u9879",level:2},{value:"\u6570\u636e\u5e93",id:"\u6570\u636e\u5e93",level:3},{value:"\u96c6\u7fa4\u9009\u9879",id:"\u96c6\u7fa4\u9009\u9879",level:3},{value:"\u7ba1\u7406 Kubeconfig \u9009\u9879",id:"\u7ba1\u7406-kubeconfig-\u9009\u9879",level:3},{value:"\u9ad8\u7ea7\u9009\u9879",id:"\u9ad8\u7ea7\u9009\u9879",level:2},{value:"Logging",id:"logging",level:3},{value:"Listeners",id:"listeners",level:3},{value:"\u6570\u636e",id:"\u6570\u636e",level:3},{value:"Secret \u52a0\u5bc6",id:"secret-\u52a0\u5bc6",level:3},{value:"\u7f51\u7edc",id:"\u7f51\u7edc",level:3},{value:"\u5b58\u50a8\u7c7b",id:"\u5b58\u50a8\u7c7b",level:3},{value:"Kubernetes \u7ec4\u4ef6",id:"kubernetes-\u7ec4\u4ef6",level:3},{value:"Kubernetes \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7",id:"kubernetes-\u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7",level:3},{value:"\u5b9e\u9a8c\u9009\u9879",id:"\u5b9e\u9a8c\u9009\u9879",level:3},{value:"\u5df2\u5f03\u7528\u9009\u9879",id:"\u5df2\u5f03\u7528\u9009\u9879",level:3}],u={toc:p};function k(e){let{components:t,...a}=e;return(0,l.kt)("wrapper",(0,n.Z)({},u,a,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("h1",{id:"k3s-server"},"k3s server"),(0,l.kt)("p",null,"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Server\u3002"),(0,l.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cServer \u4e5f\u8fd0\u884c Agent\uff0c\u56e0\u6b64 Server \u4e5f\u652f\u6301 ",(0,l.kt)("a",{parentName:"p",href:"/zh/cli/agent"},(0,l.kt)("inlineCode",{parentName:"a"},"k3s agent")," \u6587\u6863"),"\u4e2d\u5217\u51fa\u7684\u6240\u6709\u914d\u7f6e\u9009\u9879\u3002"),(0,l.kt)("p",null,"\u5728\u672c\u6587\u4e2d\uff0c\u9009\u9879\u4f5c\u4e3a CLI \u6807\u5fd7\u4f20\u9012\uff0c\u4f46\u662f\u4e5f\u53ef\u4ee5\u4f5c\u4e3a\u914d\u7f6e\u6587\u4ef6\u9009\u9879\u4f20\u9012\u3002\u6709\u5173\u4f7f\u7528 YAML \u914d\u7f6e\u6587\u4ef6\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\u6587\u6863\u3002"),(0,l.kt)("h2",{id:"\u5173\u952e\u914d\u7f6e\u503c"},"\u5173\u952e\u914d\u7f6e\u503c"),(0,l.kt)("p",null,"\u4ee5\u4e0b\u9009\u9879\u5fc5\u987b\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server \u4e0a\u8bbe\u7f6e\u4e3a\u76f8\u540c\u7684\u503c\u3002\u5982\u679c\u4e0d\u8fd9\u6837\u505a\uff0c\u65b0 Server \u5c06\u65e0\u6cd5\u52a0\u5165\u96c6\u7fa4\uff08\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u65f6\uff09\uff0c\u6216\u96c6\u7fa4\u5c06\u65e0\u6cd5\u6b63\u786e\u8fd0\u884c\uff08\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u65f6\uff09\u3002"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--agent-token")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--cluster-cidr")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--cluster-dns")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--cluster-domain")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-cloud-controller")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--disable-servicelb")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--egress-selector-mode")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--flannel-backend")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--flannel-external-ip")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--flannel-ipv6-masq")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"--service-cidr"))),(0,l.kt)("h2",{id:"\u5e38\u7528\u9009\u9879"},"\u5e38\u7528\u9009\u9879"),(0,l.kt)("h3",{id:"\u6570\u636e\u5e93"},"\u6570\u636e\u5e93"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,l.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a etcd\u3001Mysql\u3001Postgres \u6216 Sqlite\uff08\u9ed8\u8ba4\uff09\u6570\u636e\u6e90\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u4fdd\u62a4\u6570\u636e\u5b58\u50a8\u540e\u7aef\u901a\u4fe1\u7684 TLS CA \u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u4fdd\u62a4\u6570\u636e\u5b58\u50a8\u540e\u7aef\u901a\u4fe1\u7684 TLS \u8bc1\u4e66\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u4fdd\u62a4\u6570\u636e\u5b58\u50a8\u540e\u7aef\u901a\u4fe1\u7684 TLS \u5bc6\u94a5\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-expose-metrics")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5411\u5ba2\u6237\u7aef\u63a5\u53e3\u516c\u5f00 etcd \u6307\u6807\uff08\u9ed8\u8ba4\u503c\uff1afalse\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u81ea\u52a8 etcd \u5feb\u7167")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-name")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bbe\u7f6e etcd \u5feb\u7167\u7684\u57fa\u672c\u540d\u79f0\u3002\u9ed8\u8ba4\u503c\uff1aetcd-snapshot-",(0,l.kt)("inlineCode",{parentName:"td"},"<unix-timestamp>"),"\uff08\u9ed8\u8ba4\u503c\uff1a\u201cetcd-snapshot\u201d\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"cron \u89c4\u8303\u4e2d\u7684\u5feb\u7167\u95f4\u9694\u65f6\u95f4\u3002eg. \u6bcf 5 \u5c0f\u65f6 '0 ",(0,l.kt)("em",{parentName:"td"},"/5 ",(0,l.kt)("em",{parentName:"em"}," ","*"," "),"'\uff08\u9ed8\u8ba4\u503c\uff1a\"0 "),"/12 ","*"," ","*"," ","*",'"\uff09')),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8981\u4fdd\u7559\u7684\u5feb\u7167\u6570\u91cf\uff08\u9ed8\u8ba4\u503c\uff1a5\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u6570\u636e\u5e93\u5feb\u7167\u7684\u76ee\u5f55\uff08\u9ed8\u8ba4\u503c\uff1a${data-dir}/db/snapshots\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u542f\u7528\u5907\u4efd\u5230 S3")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u7aef\u70b9 URL\uff08\u9ed8\u8ba4\u503c\uff1a\u201cs3.amazonaws.com\u201d\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u7528\u4e8e\u8fde\u63a5\u5230 S3 \u7aef\u70b9")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 S3 SSL \u8bc1\u4e66\u9a8c\u8bc1")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"AWS_ACCESS_KEY_ID")),(0,l.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"AWS_SECRET_ACCESS_KEY")),(0,l.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u5b58\u50a8\u6876\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u533a\u57df/\u5b58\u50a8\u6876\u4f4d\u7f6e\uff08\u53ef\u9009\uff09\uff08\u9ed8\u8ba4\u503c\uff1a\u201cus-east-1\u201d\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u6587\u4ef6\u5939")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-insecure")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 HTTPS \u7981\u7528 S3"),(0,l.kt)("td",{parentName:"tr",align:null})),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-s3-timeout")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"S3 \u8d85\u65f6\uff08\u9ed8\u8ba4\u503c\uff1a5m0s\uff09"),(0,l.kt)("td",{parentName:"tr",align:null})))),(0,l.kt)("h3",{id:"\u96c6\u7fa4\u9009\u9879"},"\u96c6\u7fa4\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token")," value, ",(0,l.kt)("inlineCode",{parentName:"td"},"-t")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5171\u4eab\u5bc6\u94a5\uff0c\u7528\u4e8e\u5c06 server \u6216 agent \u52a0\u5165\u96c6\u7fa4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5305\u542b cluster-secret/token \u7684\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--agent-token")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5171\u4eab\u5bc6\u94a5\uff0c\u7528\u4e8e\u5c06 agent \u52a0\u5165\u96c6\u7fa4\uff0c\u4f46\u4e0d\u80fd\u7528\u4e8e server")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--agent-token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5305\u542b agent secret \u7684\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--server")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u7684 server\uff0c\u7528\u4e8e\u52a0\u5165\u96c6\u7fa4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-init")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_INIT")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u5d4c\u5165\u5f0f Etcd \u521d\u59cb\u5316\u65b0\u96c6\u7fa4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_RESET")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5fd8\u8bb0\u6240\u6709\u5bf9\u7b49\u70b9\uff0c\u6210\u4e3a\u65b0\u96c6\u7fa4\u7684\u552f\u4e00\u6210\u5458")))),(0,l.kt)("h3",{id:"\u7ba1\u7406-kubeconfig-\u9009\u9879"},"\u7ba1\u7406 Kubeconfig \u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig value, -o")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_OUTPUT")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06 admin \u5ba2\u6237\u7aef\u7684 kubeconfig \u5199\u5165\u6b64\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--write-kubeconfig-mode")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_KUBECONFIG_MODE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u6b64",(0,l.kt)("a",{parentName:"td",href:"https://en.wikipedia.org/wiki/Chmod"},"\u6a21\u5f0f"),"\u5199\u5165 kubeconfig\u3002kubeconfig \u6587\u4ef6\u5f52 root \u6240\u6709\uff0c\u5e76\u9ed8\u8ba4\u4f7f\u7528 600 \u6a21\u5f0f\u5199\u5165\u3002\u5982\u679c\u5c06\u6a21\u5f0f\u6539\u4e3a 644\uff0c\u4e3b\u673a\u4e0a\u7684\u5176\u4ed6\u975e\u7279\u6743\u7528\u6237\u5c06\u80fd\u8bfb\u53d6\u5b83\u3002")))),(0,l.kt)("h2",{id:"\u9ad8\u7ea7\u9009\u9879"},"\u9ad8\u7ea7\u9009\u9879"),(0,l.kt)("h3",{id:"logging"},"Logging"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--debug")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u6253\u5f00 debug \u65e5\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8868\u793a\u65e5\u5fd7\u7ea7\u522b\u8be6\u7ec6\u7a0b\u5ea6\u7684\u6570\u5b57")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"FILE_PATTERN=LOG_LEVEL \u683c\u5f0f\uff0c\u7528\u9017\u53f7\u5206\u9694\u7684\u5217\u8868\uff0c\u7528\u4e8e\u6587\u4ef6\u8fc7\u6ee4\u65e5\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6807\u51c6\u9519\u8bef\u4ee5\u53ca\u6587\u4ef6\uff08\u5982\u679c\u8bbe\u7f6e\uff09")))),(0,l.kt)("h3",{id:"listeners"},"Listeners"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--bind-address")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0.0.0.0"),(0,l.kt)("td",{parentName:"tr",align:null},"K3s \u7ed1\u5b9a\u5730\u5740")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--https-listen-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"6443"),(0,l.kt)("td",{parentName:"tr",align:null},"HTTPS \u76d1\u542c\u7aef\u53e3")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--advertise-address")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"node-external-ip/node-ip"),(0,l.kt)("td",{parentName:"tr",align:null},"IPv4 \u5730\u5740\uff0capiserver \u4f7f\u7528\u8be5\u5730\u5740\u5411\u96c6\u7fa4\u6210\u5458\u901a\u544a")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--advertise-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"listen-port/0"),(0,l.kt)("td",{parentName:"tr",align:null},"apiserver \u7528\u4e8e\u5411\u96c6\u7fa4\u6210\u5458\u901a\u544a\u7684\u7aef\u53e3")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--tls-san")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5728 TLS \u8bc1\u4e66\u4e0a\u6dfb\u52a0\u5176\u4ed6\u4e3b\u673a\u540d\u6216 IPv4/IPv6 \u5730\u5740\u4f5c\u4e3a Subject Alternative Name")))),(0,l.kt)("h3",{id:"\u6570\u636e"},"\u6570\u636e"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s"),"\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u4e3a ",(0,l.kt)("inlineCode",{parentName:"td"},"${HOME}/.rancher/k3s")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\u6587\u4ef6\u5939")))),(0,l.kt)("h3",{id:"secret-\u52a0\u5bc6"},"Secret \u52a0\u5bc6"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--secrets-encryption")),(0,l.kt)("td",{parentName:"tr",align:null},"false"),(0,l.kt)("td",{parentName:"tr",align:null},"\u542f\u7528 secret \u9759\u6001\u52a0\u5bc6")))),(0,l.kt)("h3",{id:"\u7f51\u7edc"},"\u7f51\u7edc"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-cidr")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"10.42.0.0/16"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e pod IP \u7684 IPv4/IPv6 \u7f51\u7edc CIDR")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--service-cidr")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"10.43.0.0/16"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u670d\u52a1 IP \u7684 IPv4/IPv6 \u7f51\u7edc CIDR")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--service-node-port-range")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"30000-32767"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4e3a\u5177\u6709 NodePort \u53ef\u89c1\u6027\u7684\u670d\u52a1\u4fdd\u7559\u7684\u7aef\u53e3\u8303\u56f4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-dns")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"10.43.0.10"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e coredns \u670d\u52a1\u7684 IPv4 \u96c6\u7fa4 IP\u3002\u9700\u8981\u5728 service-cidr \u8303\u56f4\u5185")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-domain")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"cluster.local"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u96c6\u7fa4\u57df\u540d")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"vxlan"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u201cnone\u201d\u3001\u201cvxlan\u201d\u3001\u201cipsec\u201d\uff08\u5df2\u5f03\u7528\uff09\u3001\u201chost-gw\u201d\u3001\u201cwireguard-native\u201d \u6216 \u201cwireguard\u201d\uff08\u5df2\u5f03\u7528\uff09\u4e2d\u7684\u5176\u4e2d\u4e00\u4e2a")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,l.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4e3a pod \u542f\u7528 IPv6 \u4f2a\u88c5")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,l.kt)("td",{parentName:"tr",align:null},'"N/A"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06\u8282\u70b9\u5916\u90e8 IP \u5730\u5740\u7528\u4e8e Flannel \u6d41\u91cf")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--servicelb-namespace")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"kube-system"'),(0,l.kt)("td",{parentName:"tr",align:null},"servicelb \u7ec4\u4ef6\u7684 pod \u547d\u540d\u7a7a\u95f4")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--egress-selector-mode")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"agent"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4ec5\u652f\u6301\uff1a ",(0,l.kt)("ul",null,(0,l.kt)("li",null,"disabled\uff1aapiserver \u4e0d\u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u901a\u4fe1\u3002\u8981\u6c42 server \u8fd0\u884c agent\uff0c\u5e76\u76f4\u63a5\u8fde\u63a5\u5230 agent \u4e0a\u7684 kubelet\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee service \u7aef\u70b9\u6216\u6267\u884c kubectl exec \u548c kubectl \u65e5\u5fd7\u3002"),(0,l.kt)("li",null,"agent\uff1aapiserver \u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u901a\u4fe1\u3002\u8282\u70b9\u5141\u8bb8\u73af\u56de\u5730\u5740\u7684\u96a7\u9053\u8fde\u63a5\u3002\u8981\u6c42 server \u4e5f\u8fd0\u884c agent\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee service \u7aef\u70b9\u3002K3s \u7684\u5386\u53f2\u9ed8\u8ba4\u503c\u3002"),(0,l.kt)("li",null," pod\uff1aapiserver \u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u548c service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u8282\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 agent\u3002\u8282\u70b9\u5141\u8bb8\u73af\u56de\u5730\u5740\u6216\u5206\u914d\u7ed9\u8282\u70b9\u7684 CIDR \u7684\u96a7\u9053\u8fde\u63a5\u3002"),(0,l.kt)("li",null,"  cluster\uff1aapiserver \u4f7f\u7528 agent \u96a7\u9053\u4e0e\u8282\u70b9\u548c service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u7aef\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 agent\u3002\u8282\u70b9\u5141\u8bb8\u73af\u56de\u5730\u5740\u6216\u914d\u7f6e\u7684\u96c6\u7fa4 CIDR \u8303\u56f4\u7684\u96a7\u9053\u8fde\u63a5\u3002")))))),(0,l.kt)("h3",{id:"\u5b58\u50a8\u7c7b"},"\u5b58\u50a8\u7c7b"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--default-local-storage-path")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"\u672c\u5730\u5236\u5907\u5668\u5b58\u50a8\u7c7b\u7684\u9ed8\u8ba4\u672c\u5730\u5b58\u50a8\u8def\u5f84")))),(0,l.kt)("h3",{id:"kubernetes-\u7ec4\u4ef6"},"Kubernetes \u7ec4\u4ef6"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"td",href:"/zh/installation/packaged-components#%E4%BD%BF%E7%94%A8---disable-%E6%A0%87%E5%BF%97"},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"a"},"--disable")," \u6807\u5fd7"),"\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-scheduler")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 Kubernetes \u9ed8\u8ba4\u8c03\u5ea6\u7a0b\u5e8f")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-cloud-controller")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 k3s \u9ed8\u8ba4\u4e91 Controller Manager")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-kube-proxy")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u8fd0\u884c kube-proxy")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-network-policy")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 K3s \u9ed8\u8ba4\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-helm-controller")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 Helm \u63a7\u5236\u5668")))),(0,l.kt)("h3",{id:"kubernetes-\u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7"},"Kubernetes \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--etcd-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"etcd \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-apiserver-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-apiserver \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-scheduler-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-scheduler \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-controller-manager-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-controller-manager \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-cloud-controller-manager-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-cloud-controller-manager \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kubelet \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-proxy \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")))),(0,l.kt)("h3",{id:"\u5b9e\u9a8c\u9009\u9879"},"\u5b9e\u9a8c\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,l.kt)("td",{parentName:"tr",align:null},"\u65e0\u6839\u8fd0\u884c")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--enable-pprof")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5728 supervisor \u7aef\u53e3\u4e0a\u542f\u7528 pprof \u7aef\u70b9")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--docker")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 cri-dockerd \u800c\u4e0d\u662f containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,l.kt)("td",{parentName:"tr",align:null},"\u504f\u5411\u6253\u5305\u7684\u7528\u6237\u7a7a\u95f4\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u800c\u4e0d\u662f\u4e3b\u673a\u4e8c\u8fdb\u5236\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--disable-agent")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"td",href:"/zh/advanced/#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7"},"\u8fd0\u884c\u65e0 Agent \u7684 Server\uff08\u5b9e\u9a8c\u6027\uff09"))))),(0,l.kt)("h3",{id:"\u5df2\u5f03\u7528\u9009\u9879"},"\u5df2\u5f03\u7528\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-deploy")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--disable"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--token"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," wireguard"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend")," value=option1=value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," \u6307\u5b9a\u5e26\u6709\u540e\u7aef\u914d\u7f6e\u7684 Flannel \u914d\u7f6e\u6587\u4ef6")))),(0,l.kt)("h1",{id:"k3s-server-cli-\u5e2e\u52a9"},"K3s Server CLI \u5e2e\u52a9"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},"\u5982\u679c\u67d0\u4e2a\u9009\u9879\u51fa\u73b0\u5728\u62ec\u53f7\u4e2d\uff08\u4f8b\u5982 ",(0,l.kt)("inlineCode",{parentName:"p"},"[$K3S_TOKEN]"),"\uff09\uff0c\u8be5\u9009\u9879\u53ef\u4ee5\u4f5c\u4e3a\u8be5\u540d\u79f0\u7684\u73af\u5883\u53d8\u91cf\u4f20\u5165\u3002")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s server - Run management server\n\nUSAGE:\n   k3s server [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --bind-address value                       (listener) k3s bind address (default: 0.0.0.0)\n   --https-listen-port value                  (listener) HTTPS listen port (default: 6443)\n   --advertise-address value                  (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip)\n   --advertise-port value                     (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0)\n   --tls-san value                            (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert\n   --data-dir value, -d value                 (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root)\n   --cluster-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16)\n   --service-cidr value                       (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16)\n   --service-node-port-range value            (networking) Port range to reserve for services with NodePort visibility (default: "30000-32767")\n   --cluster-dns value                        (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10)\n   --cluster-domain value                     (networking) Cluster Domain (default: "cluster.local")\n   --flannel-backend value                    (networking) backend<=option1=val1,option2=val2> where backend is one of \'none\', \'vxlan\', \'ipsec\' (deprecated), \'host-gw\', \'wireguard-native\', \'wireguard\' (deprecated) (default: "vxlan")\n   --flannel-ipv6-masq                        (networking) Enable IPv6 masquerading for pod\n   --flannel-external-ip                      (networking) Use node external IP addresses for Flannel traffic\n   --egress-selector-mode value               (networking) One of \'agent\', \'cluster\', \'pod\', \'disabled\' (default: "agent")\n   --servicelb-namespace value                (networking) Namespace of the pods for the servicelb component (default: "kube-system")\n   --write-kubeconfig value, -o value         (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT]\n   --write-kubeconfig-mode value              (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE]\n   --token value, -t value                    (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN]\n   --token-file value                         (cluster) File containing the token [$K3S_TOKEN_FILE]\n   --agent-token value                        (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN]\n   --agent-token-file value                   (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to, used to join a cluster [$K3S_URL]\n   --cluster-init                             (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT]\n   --cluster-reset                            (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET]\n   --cluster-reset-restore-path value         (db) Path to snapshot file to be restored\n   --kube-apiserver-arg value                 (flags) Customized flag for kube-apiserver process\n   --etcd-arg value                           (flags) Customized flag for etcd process\n   --kube-controller-manager-arg value        (flags) Customized flag for kube-controller-manager process\n   --kube-scheduler-arg value                 (flags) Customized flag for kube-scheduler process\n   --kube-cloud-controller-manager-arg value  (flags) Customized flag for kube-cloud-controller-manager process\n   --datastore-endpoint value                 (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT]\n   --datastore-cafile value                   (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE]\n   --datastore-certfile value                 (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE]\n   --datastore-keyfile value                  (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE]\n   --etcd-expose-metrics                      (db) Expose etcd metrics to client interface. (default: false)\n   --etcd-disable-snapshots                   (db) Disable automatic etcd snapshots\n   --etcd-snapshot-name value                 (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: "etcd-snapshot")\n   --etcd-snapshot-schedule-cron value        (db) Snapshot interval time in cron spec. eg. every 5 hours \'* */5 * * *\' (default: "0 */12 * * *")\n   --etcd-snapshot-retention value            (db) Number of snapshots to retain (default: 5)\n   --etcd-snapshot-dir value                  (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots)\n   --etcd-snapshot-compress                   (db) Compress etcd snapshot\n   --etcd-s3                                  (db) Enable backup to S3\n   --etcd-s3-endpoint value                   (db) S3 endpoint url (default: "s3.amazonaws.com")\n   --etcd-s3-endpoint-ca value                (db) S3 custom CA cert to connect to S3 endpoint\n   --etcd-s3-skip-ssl-verify                  (db) Disables S3 SSL certificate validation\n   --etcd-s3-access-key value                 (db) S3 access key [$AWS_ACCESS_KEY_ID]\n   --etcd-s3-secret-key value                 (db) S3 secret key [$AWS_SECRET_ACCESS_KEY]\n   --etcd-s3-bucket value                     (db) S3 bucket name\n   --etcd-s3-region value                     (db) S3 region / bucket location (optional) (default: "us-east-1")\n   --etcd-s3-folder value                     (db) S3 folder\n   --etcd-s3-insecure                         (db) Disables S3 over HTTPS\n   --etcd-s3-timeout value                    (db) S3 timeout (default: 5m0s)\n   --default-local-storage-path value         (storage) Default local storage path for local provisioner storage class\n   --disable value                            (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server)\n   --disable-scheduler                        (components) Disable Kubernetes default scheduler\n   --disable-cloud-controller                 (components) Disable k3s default cloud controller manager\n   --disable-kube-proxy                       (components) Disable running kube-proxy\n   --disable-network-policy                   (components) Disable k3s default network policy controller\n   --disable-helm-controller                  (components) Disable Helm controller\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --system-default-registry value            (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY]\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --secrets-encryption                       Enable secret encryption at rest\n   --enable-pprof                             (experimental) Enable pprof endpoint on supervisor port\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer.(default: 6444) [$K3S_LB_SERVER_PORT]\n')))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/11f121d5.0d39bb93.js b/zh/assets/js/11f121d5.be91d4d2.js
similarity index 99%
rename from zh/assets/js/11f121d5.0d39bb93.js
rename to zh/assets/js/11f121d5.be91d4d2.js
index 156f68b15..e7050e856 100644
--- a/zh/assets/js/11f121d5.0d39bb93.js
+++ b/zh/assets/js/11f121d5.be91d4d2.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3155],{3905:(e,t,n)=>{n.d(t,{Zo:()=>s,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),c=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},s=function(e){var t=c(e.components);return r.createElement(p.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,p=e.parentName,s=o(e,["components","mdxType","originalType","parentName"]),d=c(n),m=a,u=d["".concat(p,".").concat(m)]||d[m]||k[m]||i;return n?r.createElement(u,l(l({ref:t},s),{},{components:n})):r.createElement(u,l({ref:t},s))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,l=new Array(i);l[0]=d;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,l[1]=o;for(var c=2;c<i;c++)l[c]=n[c];return r.createElement.apply(null,l)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},1083:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>l,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var r=n(3117),a=(n(7294),n(3905));const i={title:"\u7f51\u7edc",weight:35},l=void 0,o={unversionedId:"networking/networking",id:"networking/networking",title:"\u7f51\u7edc",description:"\u672c\u6587\u4ecb\u7ecd\u4e86 CoreDNS\u3001Traefik Ingress controller \u548c Klipper service load balancer \u662f\u5982\u4f55\u5728 K3s \u4e2d\u5de5\u4f5c\u7684\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/networking/networking.md",sourceDirName:"networking",slug:"/networking/",permalink:"/zh/networking/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u7f51\u7edc",weight:35},sidebar:"mySidebar",previous:{title:"\u5377\u548c\u5b58\u50a8",permalink:"/zh/storage/"},next:{title:"Helm",permalink:"/zh/helm/"}},p={},c=[{value:"CoreDNS",id:"coredns",level:2},{value:"Traefik Ingress Controller",id:"traefik-ingress-controller",level:2},{value:"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668",id:"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668",level:2},{value:"Service Load Balancer",id:"service-load-balancer",level:2},{value:"ServiceLB \u7684\u5de5\u4f5c\u539f\u7406",id:"servicelb-\u7684\u5de5\u4f5c\u539f\u7406",level:3},{value:"\u7528\u6cd5",id:"\u7528\u6cd5",level:3},{value:"\u63a7\u5236 ServiceLB \u8282\u70b9\u9009\u62e9",id:"\u63a7\u5236-servicelb-\u8282\u70b9\u9009\u62e9",level:3},{value:"\u521b\u5efa ServiceLB \u8282\u70b9\u6c60",id:"\u521b\u5efa-servicelb-\u8282\u70b9\u6c60",level:3},{value:"\u7981\u7528 ServiceLB",id:"\u7981\u7528-servicelb",level:3},{value:"\u90e8\u7f72\u5916\u90e8 Cloud Controller Manager",id:"\u90e8\u7f72\u5916\u90e8-cloud-controller-manager",level:2},{value:"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9",id:"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9",level:2},{value:"\u591a\u96c6\u7fa4 CIDR\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u591a\u96c6\u7fa4-cidr\u5b9e\u9a8c\u6027",level:2}],s={toc:c};function k(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},s,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86 CoreDNS\u3001Traefik Ingress controller \u548c Klipper service load balancer \u662f\u5982\u4f55\u5728 K3s \u4e2d\u5de5\u4f5c\u7684\u3002"),(0,a.kt)("p",null,"\u6709\u5173 Flannel \u914d\u7f6e\u9009\u9879\u548c\u540e\u7aef\u9009\u62e9\uff0c\u4ee5\u53ca\u5982\u4f55\u8bbe\u7f6e\u81ea\u5df1\u7684 CNI\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/network-options"},"\u5b89\u88c5\u7f51\u7edc\u9009\u9879"),"\u9875\u9762\u3002"),(0,a.kt)("p",null,"\u6709\u5173 K3s \u9700\u8981\u5f00\u653e\u54ea\u4e9b\u7aef\u53e3\uff0c\u8bf7\u53c2\u8003",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/requirements#%E7%BD%91%E7%BB%9C"},"\u7f51\u7edc\u8981\u6c42"),"\u3002"),(0,a.kt)("h2",{id:"coredns"},"CoreDNS"),(0,a.kt)("p",null,"CoreDNS \u5728 Server \u542f\u52a8\u65f6\u81ea\u52a8\u90e8\u7f72\u3002\u8981\u7981\u7528\u5b83\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=coredns")," \u9009\u9879\u6765\u914d\u7f6e\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u4e0d\u5b89\u88c5 CoreDNS\uff0c\u5219\u9700\u8981\u81ea\u5df1\u5b89\u88c5\u96c6\u7fa4 DNS \u63d0\u4f9b\u7a0b\u5e8f\u3002"),(0,a.kt)("h2",{id:"traefik-ingress-controller"},"Traefik Ingress Controller"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"https://traefik.io/"},"Traefik")," \u662f\u4e00\u79cd\u73b0\u4ee3\u7684 HTTP \u53cd\u5411\u4ee3\u7406\u548c\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u53ef\u4ee5\u8f7b\u677e\u90e8\u7f72\u5fae\u670d\u52a1\u3002\u5b83\u5728\u8bbe\u8ba1\u3001\u90e8\u7f72\u548c\u8fd0\u884c\u5e94\u7528\u7a0b\u5e8f\u65b9\u9762\u7b80\u5316\u4e86\u7f51\u7edc\u590d\u6742\u6027\u3002"),(0,a.kt)("p",null,"Traefik Ingress Controller \u90e8\u7f72\u4e86\u4e00\u4e2a\u4f7f\u7528\u7aef\u53e3 80 \u548c 443 \u7684 LoadBalancer Service\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cServiceLB \u5c06\u5728\u6240\u6709\u96c6\u7fa4\u6210\u5458\u4e0a\u516c\u5f00\u8fd9\u4e9b\u7aef\u53e3\uff0c\u6362\u8a00\u4e4b\uff0c\u8fd9\u4e9b\u7aef\u53e3\u65e0\u6cd5\u7528\u4e8e\u5176\u4ed6 HostPort \u6216 NodePort pod\u3002"),(0,a.kt)("p",null,"Traefik \u5728\u542f\u52a8\u670d\u52a1\u5668\u65f6\u9ed8\u8ba4\u90e8\u7f72\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/packaged-components"},"\u7ba1\u7406\u6253\u5305\u7ec4\u4ef6"),"\u3002\u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6\u4f4d\u4e8e ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik.yaml"),"\u3002"),(0,a.kt)("p",null,"\u4e0d\u8981\u624b\u52a8\u7f16\u8f91 ",(0,a.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," \u6587\u4ef6\uff0c\u56e0\u4e3a K3s \u4f1a\u5728\u542f\u52a8\u65f6\u4f7f\u7528\u9ed8\u8ba4\u503c\u66ff\u6362\u8be5\u6587\u4ef6\u3002\u76f8\u53cd\uff0c\u4f60\u9700\u8981\u901a\u8fc7\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," \u4e2d\u521b\u5efa\u5176\u4ed6 ",(0,a.kt)("inlineCode",{parentName:"p"},"HelmChartConfig")," \u6e05\u5355\u6765\u81ea\u5b9a\u4e49 Traefik\u3002\u6709\u5173\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\u548c\u793a\u4f8b\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/helm/#%E4%BD%BF%E7%94%A8-helmchartconfig-%E8%87%AA%E5%AE%9A%E4%B9%89%E6%89%93%E5%8C%85%E7%BB%84%E4%BB%B6"},"\u4f7f\u7528 HelmChartConfig \u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6"),"\u3002\u6709\u5173\u914d\u7f6e\u503c\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-helm-chart/tree/master/traefik"},"\u5b98\u65b9 Traefik Helm \u914d\u7f6e\u53c2\u6570"),"\u3002"),(0,a.kt)("p",null,"\u8981\u4ece\u96c6\u7fa4\u4e2d\u5220\u9664 Traefik\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \u6807\u5fd7\u6765\u542f\u52a8\u6240\u6709 Server\u3002"),(0,a.kt)("p",null,"K3s 1.20 \u53ca\u66f4\u65e9\u7248\u672c\u5305\u62ec\u4e86 Traefik v1\u3002\u9664\u975e\u627e\u5230\u73b0\u6709\u7684 Traefik v1\uff08\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0cTraefik \u4e0d\u4f1a\u5347\u7ea7\u5230 v2\uff09\uff0c\u5426\u5219 K3s 1.21 \u53ca\u66f4\u9ad8\u7248\u672c\u5c06\u5b89\u88c5 Traefik v2\u3002\u6709\u5173 K3s \u4e2d\u5305\u542b\u7684 Traefik \u7248\u672c\uff0c\u8bf7\u53c2\u9605\u7248\u672c\u7684\u53d1\u884c\u8bf4\u660e\u3002"),(0,a.kt)("p",null,"\u8981\u4ece\u8f83\u65e7\u7684 Traefik v1 \u5b9e\u4f8b\u8fc1\u79fb\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \u6587\u6863"),"\u548c",(0,a.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\u8fc1\u79fb\u5de5\u5177"),"\u3002"),(0,a.kt)("h2",{id:"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668"},"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668"),(0,a.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a\u5d4c\u5165\u5f0f\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u3002\u5e95\u5c42\u5b9e\u73b0\u662f ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/cloudnativelabs/kube-router"},"kube-router")," \u7684 netpol \u63a7\u5236\u5668\u5e93\uff08\u6ca1\u6709\u5176\u4ed6 kube-router \u529f\u80fd\uff09\uff0c\u4f60\u53ef\u4ee5\u5728",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol"},"\u6b64\u5904"),"\u627e\u5230 netpol\u3002"),(0,a.kt)("p",null,"\u8981\u7981\u7528\u5b83\uff0c\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," \u6807\u5fd7\u6765\u542f\u52a8\u6bcf\u4e2a server\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c K3s \u914d\u7f6e\u4e3a\u7981\u7528\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\uff0c\u5219\u4e0d\u4f1a\u5220\u9664\u7f51\u7edc\u7b56\u7565 iptables \u89c4\u5219\u3002\u8981\u5728\u7981\u7528\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u540e\u6e05\u7406\u914d\u7f6e\u7684 kube-router \u7f51\u7edc\u7b56\u7565\u89c4\u5219\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," \u811a\u672c\uff0c\u6216\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"iptables-save")," \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"iptables-restore"),"\u3002\u8fd9\u4e9b\u6b65\u9aa4\u5fc5\u987b\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u4e0a\u624b\u52a8\u6267\u884c\u3002"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"iptables-save | grep -v KUBE-ROUTER | iptables-restore\nip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore\n"))),(0,a.kt)("h2",{id:"service-load-balancer"},"Service Load Balancer"),(0,a.kt)("p",null,"\u4efb\u4f55 LoadBalancer \u63a7\u5236\u5668\u90fd\u53ef\u4ee5\u90e8\u7f72\u5230\u4f60\u7684 K3s \u96c6\u7fa4\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cK3s \u63d0\u4f9b\u4e00\u4e2a\u79f0\u4e3a ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/klipper-lb"},"ServiceLB"),"\uff08\u4ee5\u524d\u79f0\u4e3a Klipper LoadBalancer\uff09\u7684\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u5b83\u4f1a\u4f7f\u7528\u53ef\u7528\u7684\u4e3b\u673a\u7aef\u53e3\u3002"),(0,a.kt)("p",null,"\u4e0a\u6e38 Kubernetes \u5141\u8bb8\u521b\u5efa LoadBalancer \u7c7b\u578b\u7684 Service\uff0c\u4f46\u4e0d\u5305\u62ec\u9ed8\u8ba4\u7684\u8d1f\u8f7d\u5747\u8861\u5668\u5b9e\u73b0\uff0c\u56e0\u6b64\u8fd9\u4e9b Service \u5728\u5b89\u88c5\u4e4b\u524d\u4f1a\u4fdd\u6301 ",(0,a.kt)("inlineCode",{parentName:"p"},"pending")," \u72b6\u6001\u3002\u8bb8\u591a\u6258\u7ba1\u670d\u52a1\u9700\u8981 Amazon EC2 \u6216 Microsoft Azure \u7b49\u4e91\u5382\u5546\u6765\u63d0\u4f9b\u5916\u90e8\u8d1f\u8f7d\u5747\u8861\u5668\u5b9e\u73b0\u3002\u76f8\u6bd4\u4e4b\u4e0b\uff0cK3s ServiceLB \u53ef\u4ee5\u5728\u6ca1\u6709\u4e91\u5382\u5546\u6216\u4efb\u4f55\u989d\u5916\u914d\u7f6e\u7684\u60c5\u51b5\u4e0b\u4f7f\u7528 LoadBalancer Service\u3002"),(0,a.kt)("h3",{id:"servicelb-\u7684\u5de5\u4f5c\u539f\u7406"},"ServiceLB \u7684\u5de5\u4f5c\u539f\u7406"),(0,a.kt)("p",null,"ServiceLB \u63a7\u5236\u5668\u4f1a\u76d1\u89c6 Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/"},"Service"),"\uff0c\u5176\u4e2d ",(0,a.kt)("inlineCode",{parentName:"p"},"spec.type")," \u5b57\u6bb5\u8bbe\u7f6e\u4e3a ",(0,a.kt)("inlineCode",{parentName:"p"},"LoadBalancer"),"\u3002"),(0,a.kt)("p",null,"\u5bf9\u4e8e\u6bcf\u4e2a LoadBalancer Service\uff0c\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\u4f1a\u521b\u5efa\u4e00\u4e2a ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/"},"DaemonSet"),"\u3002\u8fd9\u4e2a DaemonSet \u4f9d\u6b21\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u521b\u5efa\u5e26\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"svc-")," \u524d\u7f00\u7684 Pod\u3002\u8fd9\u4e9b Pod \u4f7f\u7528 iptables \u5c06\u6d41\u91cf\u4ece Pod \u7684 NodePort \u8f6c\u53d1\u5230 Service \u7684 ClusterIP \u5730\u5740\u548c\u7aef\u53e3\u3002"),(0,a.kt)("p",null,"\u5982\u679c ServiceLB Pod \u5728\u914d\u7f6e\u4e86\u5916\u90e8 IP \u7684\u8282\u70b9\u4e0a\u8fd0\u884c\uff0c\u5219\u8be5\u8282\u70b9\u7684\u5916\u90e8 IP \u5c06\u586b\u5145\u5230 Service \u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"status.loadBalancer.ingress")," \u5730\u5740\u5217\u8868\u4e2d\u3002\u5426\u5219\u5c06\u4f7f\u7528\u8282\u70b9\u7684\u5185\u90e8 IP\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u521b\u5efa\u4e86\u591a\u4e2a LoadBalancer Service\uff0c\u5219\u4f1a\u4e3a\u6bcf\u4e2a Service \u521b\u5efa\u4e00\u4e2a\u5355\u72ec\u7684 DaemonSet\u3002"),(0,a.kt)("p",null,"\u53ea\u8981\u5b83\u4eec\u4f7f\u7528\u4e0d\u540c\u7684\u7aef\u53e3\uff0c\u5c31\u53ef\u4ee5\u5728\u540c\u4e00\u4e2a\u8282\u70b9\u4e0a\u516c\u5f00\u591a\u4e2a Service\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u521b\u5efa\u4e00\u4e2a\u4fa6\u542c\u7aef\u53e3 80 \u7684 LoadBalancer Service\uff0cServiceLB \u5c06\u5c1d\u8bd5\u5728\u96c6\u7fa4\u4e2d\u4e3a\u7aef\u53e3 80 \u5bfb\u627e\u7a7a\u95f2\u4e3b\u673a\u3002\u5982\u679c\u6ca1\u6709\u8be5\u7aef\u53e3\u53ef\u7528\u7684\u4e3b\u673a\uff0c\u5219 LB \u5c06\u505c\u7559\u5728 Pending \u72b6\u6001\u3002"),(0,a.kt)("h3",{id:"\u7528\u6cd5"},"\u7528\u6cd5"),(0,a.kt)("p",null,"\u5728 K3s \u4e2d\u521b\u5efa\u4e00\u4e2a ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer"},"LoadBalancer \u7c7b\u578b\u7684 Service"),"\u3002"),(0,a.kt)("h3",{id:"\u63a7\u5236-servicelb-\u8282\u70b9\u9009\u62e9"},"\u63a7\u5236 ServiceLB \u8282\u70b9\u9009\u62e9"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"svccontroller.k3s.cattle.io/enablelb=true")," \u6807\u7b7e\u6dfb\u52a0\u5230\u4e00\u4e2a\u6216\u591a\u4e2a\u8282\u70b9\uff0cServiceLB \u63a7\u5236\u5668\u4f1a\u5207\u6362\u5230 allow-list \u6a21\u5f0f\uff0c\u53ea\u6709\u5177\u6709\u8be5\u6807\u7b7e\u7684\u8282\u70b9\u624d\u6709\u8d44\u683c\u6258\u7ba1 LoadBalancer Pod\u3002\u672a\u6807\u8bb0\u7684\u8282\u70b9\u5c06\u88ab ServiceLB \u6392\u9664\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u8282\u70b9\u6ca1\u6709\u6807\u7b7e\u3002\u53ea\u8981\u6240\u6709\u8282\u70b9\u4fdd\u6301\u672a\u6807\u8bb0\u72b6\u6001\uff0c\u6240\u6709\u5177\u6709\u53ef\u7528\u7aef\u53e3\u7684\u8282\u70b9\u90fd\u5c06\u88ab ServiceLB \u4f7f\u7528\u3002")),(0,a.kt)("h3",{id:"\u521b\u5efa-servicelb-\u8282\u70b9\u6c60"},"\u521b\u5efa ServiceLB \u8282\u70b9\u6c60"),(0,a.kt)("p",null,"\u8981\u9009\u62e9\u7279\u5b9a\u7684\u8282\u70b9\u5b50\u96c6\u6765\u6258\u7ba1 LoadBalancer \u7684 pod\uff0c\u8bf7\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"enablelb")," \u6807\u7b7e\u6dfb\u52a0\u5230\u6240\u9700\u7684\u8282\u70b9\uff0c\u5e76\u5728\u8282\u70b9\u548c\u670d\u52a1\u4e0a\u8bbe\u7f6e\u5339\u914d\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"lbpool")," \u6807\u7b7e\u503c\u3002\u4f8b\u5982\uff1a"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")," \u6807\u8bb0\u8282\u70b9 A \u548c\u8282\u70b9 B"),(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")," \u6807\u8bb0\u8282\u70b9 C \u548c\u8282\u70b9 D"),(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528\u6807\u7b7e ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \u5728\u7aef\u53e3 443 \u4e0a\u521b\u5efa\u4e00\u4e2a LoadBalancer Service\u3002\u8be5 Service \u7684 DaemonSet \u4ec5\u5c06 Pod \u90e8\u7f72\u5230\u8282\u70b9 A \u548c\u8282\u70b9 B\u3002"),(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528\u6807\u7b7e ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \u5728\u7aef\u53e3 443 \u4e0a\u521b\u5efa\u53e6\u4e00\u4e2a LoadBalancer Service\u3002DaemonSet \u53ea\u4f1a\u5c06 Pod \u90e8\u7f72\u5230\u8282\u70b9 C \u548c\u8282\u70b9 D\u3002")),(0,a.kt)("h3",{id:"\u7981\u7528-servicelb"},"\u7981\u7528 ServiceLB"),(0,a.kt)("p",null,"\u8981\u7981\u7528 ServiceLB\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=servicelb")," \u6807\u8bb0\u6765\u914d\u7f6e\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u5e0c\u671b\u8fd0\u884c\u4e0d\u540c\u7684 LB\uff0c\u4f8b\u5982 MetalLB\uff0c\u8fd9\u662f\u5fc5\u8981\u7684\u3002"),(0,a.kt)("h2",{id:"\u90e8\u7f72\u5916\u90e8-cloud-controller-manager"},"\u90e8\u7f72\u5916\u90e8 Cloud Controller Manager"),(0,a.kt)("p",null,"\u4e3a\u4e86\u51cf\u5c11\u4e8c\u8fdb\u5236\u6587\u4ef6\u7684\u5927\u5c0f\uff0cK3s \u5220\u9664\u4e86\u6240\u6709\u201c\u6811\u5185\u201d\uff08\u5185\u7f6e\uff09\u4e91\u63d0\u4f9b\u7a0b\u5e8f\u3002\u76f8\u53cd\uff0cK3s \u63d0\u4f9b\u4e86\u4e00\u4e2a\u5d4c\u5165\u5f0f Cloud Controller Manager (CCM) \u5b58\u6839\uff0c\u5b83\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u6839\u636e ",(0,a.kt)("inlineCode",{parentName:"li"},"--node-ip")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"--node-external-ip")," \u6807\u5fd7\u8bbe\u7f6e\u8282\u70b9 InternalIP \u548c ExternalIP \u5730\u5740\u5b57\u6bb5\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u6258\u7ba1 ServiceLB LoadBalancer \u63a7\u5236\u5668\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u6e05\u9664\u4e91\u63d0\u4f9b\u5546\u8bbe\u7f6e\u4e3a ",(0,a.kt)("inlineCode",{parentName:"li"},"external")," \u65f6\u51fa\u73b0\u7684 ",(0,a.kt)("inlineCode",{parentName:"li"},"node.cloudprovider.kubernetes.io/uninitialized")," \u6c61\u70b9\u3002")),(0,a.kt)("p",null,"\u5728\u90e8\u7f72\u5916\u90e8 CCM \u4e4b\u524d\uff0c\u4f60\u5fc5\u987b\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-cloud-controller")," \u6807\u5fd7\u542f\u52a8\u6240\u6709 K3s Server \u4ee5\u7981\u7528\u5d4c\u5165\u5f0f CCM\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u7981\u7528\u4e86\u5185\u7f6e CCM \u5e76\u4e14\u6ca1\u6709\u6b63\u786e\u90e8\u7f72\u548c\u914d\u7f6e\u5916\u90e8\u66ff\u4ee3\u54c1\uff0c\u8282\u70b9\u5c06\u4ecd\u7136\u5177\u6709\u6c61\u70b9\u800c\u4e14\u65e0\u6cd5\u8c03\u5ea6\u3002")),(0,a.kt)("h2",{id:"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9"},"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9"),(0,a.kt)("p",null,"\u4e00\u4e9b\u4e91\u63d0\u4f9b\u5546\uff08\u4f8b\u5982 Linode\uff09\u5c06\u521b\u5efa\u4ee5 \u201clocalhost\u201d \u4f5c\u4e3a\u4e3b\u673a\u540d\u7684\u4e3b\u673a\uff0c\u800c\u5176\u4ed6\u4e91\u63d0\u4f9b\u5546\u53ef\u80fd\u6839\u672c\u6ca1\u6709\u8bbe\u7f6e\u4e3b\u673a\u540d\u3002\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u57df\u540d\u89e3\u6790\u51fa\u73b0\u95ee\u9898\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-name")," \u6807\u5fd7\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \u73af\u5883\u53d8\u91cf\u8fd0\u884c K3s\uff0c\u8fd9\u4f1a\u901a\u8fc7\u4f20\u9012\u8282\u70b9\u540d\u79f0\u6765\u89e3\u51b3\u6b64\u95ee\u9898\u3002"),(0,a.kt)("h2",{id:"\u591a\u96c6\u7fa4-cidr\u5b9e\u9a8c\u6027"},"\u591a\u96c6\u7fa4 CIDR\uff08\u5b9e\u9a8c\u6027\uff09"),(0,a.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"\u4ece v1.26.3+k3s1 \u5f00\u59cb\u4f5c\u4e3a\u5b9e\u9a8c\u529f\u80fd")),(0,a.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u542f\u7528\u6b64\u6807\u5fd7\u540e\uff0c\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u5c06\u65e0\u6cd5\u6b63\u5e38\u5de5\u4f5c\u3002")),(0,a.kt)("p",null,"\u4ece ",(0,a.kt)("inlineCode",{parentName:"p"},"v1.26")," \u5f00\u59cb\uff0cKubernetes \u5f15\u5165\u4e86\u591a\u96c6\u7fa4 CIDR \u4f5c\u4e3a alpha \u529f\u80fd\u3002(",(0,a.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"},"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"),")"),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--multi-cluster-cidr")," \u6807\u5fd7\u5728 K3s Server \u4e0a\u542f\u7528\u6b64\u529f\u80fd\uff0c\u5b83\u53ef\u7528\u4e8e\u5b9a\u4e49\u591a\u4e2a\u96c6\u7fa4 CIDR\uff0c\u4e3a\u6bcf\u4e2a\u8282\u70b9\u5206\u914d podCIDR\uff0c\u4f60\u8fd8\u53ef\u4ee5\u5728\u5df2\u8fd0\u884c\u7684\u96c6\u7fa4\u4e0a\u8fdb\u884c\u6269\u5c55\u3002\n\u4f60\u53ef\u4ee5\u4f7f\u7528 API \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl")," \u67e5\u770b ",(0,a.kt)("inlineCode",{parentName:"p"},"clustercidr")," \u8d44\u6e90\uff08\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u914d\u7f6e\u7684 CIDR \u5b9a\u4e49\u4e3a\u9ed8\u8ba4\u503c\uff09\u3002"),(0,a.kt)("p",null,"\u65b0\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"clustercidr")," \u53ef\u4ee5\u5982\u4e0b\u5b9a\u4e49\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},'apiVersion: networking.k8s.io/v1alpha1\nkind: ClusterCIDR\nmetadata:\n  name: new-cidr\nspec:\n  nodeSelector:\n    nodeSelectorTerms:\n      - matchExpressions:\n        - key: kubernetes.io/hostname\n          operator: In\n          values:\n          -  "worker2"\n  perNodeHostBits: 8\n  ipv4: 10.247.0.0/16\n')),(0,a.kt)("p",null,"\u4e0e ",(0,a.kt)("inlineCode",{parentName:"p"},"nodeSelector")," \u5339\u914d\u7684\u8282\u70b9\u5c06\u4f7f\u7528\u65b0\u5b9a\u4e49\u8d44\u6e90\u7684 podCIDR\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5df2\u62e5\u6709 CIDR \u7684\u8282\u70b9\u65e0\u6cd5\u83b7\u5f97\u65b0\u7684 CIDR\u3002\u4f60\u5fc5\u987b\u79fb\u9664\u6216\u91cd\u542f\u5b83\u3002")),(0,a.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"ipv4")," \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"ipv6")," \u6765\u5b9a\u4e49\u53cc\u6808 CIDR\uff0c\u4f46 ",(0,a.kt)("inlineCode",{parentName:"p"},"perNodeHostBits")," \u662f\u76f8\u540c\u7684\u3002\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u6765\u5b9a\u4e49\u53cc\u6808\u914d\u7f6e\u65f6\uff0c",(0,a.kt)("inlineCode",{parentName:"p"},"kube-controller")," \u4e0a\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-cidr-mask-size-ipv6")," \u6807\u5fd7\u9700\u8981\u5177\u6709\u4e0e IPv4 \u76f8\u540c\u7684\u5927\u5c0f\u3002")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3155],{3905:(e,t,n)=>{n.d(t,{Zo:()=>s,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),c=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},s=function(e){var t=c(e.components);return r.createElement(p.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,p=e.parentName,s=o(e,["components","mdxType","originalType","parentName"]),d=c(n),m=a,u=d["".concat(p,".").concat(m)]||d[m]||k[m]||i;return n?r.createElement(u,l(l({ref:t},s),{},{components:n})):r.createElement(u,l({ref:t},s))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,l=new Array(i);l[0]=d;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,l[1]=o;for(var c=2;c<i;c++)l[c]=n[c];return r.createElement.apply(null,l)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},1083:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>l,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var r=n(3117),a=(n(7294),n(3905));const i={title:"\u7f51\u7edc",weight:35},l=void 0,o={unversionedId:"networking/networking",id:"networking/networking",title:"\u7f51\u7edc",description:"\u672c\u6587\u4ecb\u7ecd\u4e86 CoreDNS\u3001Traefik Ingress controller \u548c Klipper service load balancer \u662f\u5982\u4f55\u5728 K3s \u4e2d\u5de5\u4f5c\u7684\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/networking/networking.md",sourceDirName:"networking",slug:"/networking/",permalink:"/zh/networking/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u7f51\u7edc",weight:35},sidebar:"mySidebar",previous:{title:"\u5377\u548c\u5b58\u50a8",permalink:"/zh/storage/"},next:{title:"Helm",permalink:"/zh/helm/"}},p={},c=[{value:"CoreDNS",id:"coredns",level:2},{value:"Traefik Ingress Controller",id:"traefik-ingress-controller",level:2},{value:"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668",id:"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668",level:2},{value:"Service Load Balancer",id:"service-load-balancer",level:2},{value:"ServiceLB \u7684\u5de5\u4f5c\u539f\u7406",id:"servicelb-\u7684\u5de5\u4f5c\u539f\u7406",level:3},{value:"\u7528\u6cd5",id:"\u7528\u6cd5",level:3},{value:"\u63a7\u5236 ServiceLB \u8282\u70b9\u9009\u62e9",id:"\u63a7\u5236-servicelb-\u8282\u70b9\u9009\u62e9",level:3},{value:"\u521b\u5efa ServiceLB \u8282\u70b9\u6c60",id:"\u521b\u5efa-servicelb-\u8282\u70b9\u6c60",level:3},{value:"\u7981\u7528 ServiceLB",id:"\u7981\u7528-servicelb",level:3},{value:"\u90e8\u7f72\u5916\u90e8 Cloud Controller Manager",id:"\u90e8\u7f72\u5916\u90e8-cloud-controller-manager",level:2},{value:"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9",id:"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9",level:2},{value:"\u591a\u96c6\u7fa4 CIDR\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u591a\u96c6\u7fa4-cidr\u5b9e\u9a8c\u6027",level:2}],s={toc:c};function k(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},s,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86 CoreDNS\u3001Traefik Ingress controller \u548c Klipper service load balancer \u662f\u5982\u4f55\u5728 K3s \u4e2d\u5de5\u4f5c\u7684\u3002"),(0,a.kt)("p",null,"\u6709\u5173 Flannel \u914d\u7f6e\u9009\u9879\u548c\u540e\u7aef\u9009\u62e9\uff0c\u4ee5\u53ca\u5982\u4f55\u8bbe\u7f6e\u81ea\u5df1\u7684 CNI\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/network-options"},"\u5b89\u88c5\u7f51\u7edc\u9009\u9879"),"\u9875\u9762\u3002"),(0,a.kt)("p",null,"\u6709\u5173 K3s \u9700\u8981\u5f00\u653e\u54ea\u4e9b\u7aef\u53e3\uff0c\u8bf7\u53c2\u8003",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/requirements#%E7%BD%91%E7%BB%9C"},"\u7f51\u7edc\u8981\u6c42"),"\u3002"),(0,a.kt)("h2",{id:"coredns"},"CoreDNS"),(0,a.kt)("p",null,"CoreDNS \u5728 Server \u542f\u52a8\u65f6\u81ea\u52a8\u90e8\u7f72\u3002\u8981\u7981\u7528\u5b83\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=coredns")," \u9009\u9879\u6765\u914d\u7f6e\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u4e0d\u5b89\u88c5 CoreDNS\uff0c\u5219\u9700\u8981\u81ea\u5df1\u5b89\u88c5\u96c6\u7fa4 DNS \u63d0\u4f9b\u7a0b\u5e8f\u3002"),(0,a.kt)("h2",{id:"traefik-ingress-controller"},"Traefik Ingress Controller"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"https://traefik.io/"},"Traefik")," \u662f\u4e00\u79cd\u73b0\u4ee3\u7684 HTTP \u53cd\u5411\u4ee3\u7406\u548c\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u53ef\u4ee5\u8f7b\u677e\u90e8\u7f72\u5fae\u670d\u52a1\u3002\u5b83\u5728\u8bbe\u8ba1\u3001\u90e8\u7f72\u548c\u8fd0\u884c\u5e94\u7528\u7a0b\u5e8f\u65b9\u9762\u7b80\u5316\u4e86\u7f51\u7edc\u590d\u6742\u6027\u3002"),(0,a.kt)("p",null,"Traefik Ingress Controller \u90e8\u7f72\u4e86\u4e00\u4e2a\u4f7f\u7528\u7aef\u53e3 80 \u548c 443 \u7684 LoadBalancer Service\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cServiceLB \u5c06\u5728\u6240\u6709\u96c6\u7fa4\u6210\u5458\u4e0a\u516c\u5f00\u8fd9\u4e9b\u7aef\u53e3\uff0c\u6362\u8a00\u4e4b\uff0c\u8fd9\u4e9b\u7aef\u53e3\u65e0\u6cd5\u7528\u4e8e\u5176\u4ed6 HostPort \u6216 NodePort pod\u3002"),(0,a.kt)("p",null,"Traefik \u5728\u542f\u52a8\u670d\u52a1\u5668\u65f6\u9ed8\u8ba4\u90e8\u7f72\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/packaged-components"},"\u7ba1\u7406\u6253\u5305\u7ec4\u4ef6"),"\u3002\u9ed8\u8ba4\u914d\u7f6e\u6587\u4ef6\u4f4d\u4e8e ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik.yaml"),"\u3002"),(0,a.kt)("p",null,"\u4e0d\u8981\u624b\u52a8\u7f16\u8f91 ",(0,a.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," \u6587\u4ef6\uff0c\u56e0\u4e3a K3s \u4f1a\u5728\u542f\u52a8\u65f6\u4f7f\u7528\u9ed8\u8ba4\u503c\u66ff\u6362\u8be5\u6587\u4ef6\u3002\u76f8\u53cd\uff0c\u4f60\u9700\u8981\u901a\u8fc7\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," \u4e2d\u521b\u5efa\u5176\u4ed6 ",(0,a.kt)("inlineCode",{parentName:"p"},"HelmChartConfig")," \u6e05\u5355\u6765\u81ea\u5b9a\u4e49 Traefik\u3002\u6709\u5173\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\u548c\u793a\u4f8b\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/helm/#%E4%BD%BF%E7%94%A8-helmchartconfig-%E8%87%AA%E5%AE%9A%E4%B9%89%E6%89%93%E5%8C%85%E7%BB%84%E4%BB%B6"},"\u4f7f\u7528 HelmChartConfig \u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6"),"\u3002\u6709\u5173\u914d\u7f6e\u503c\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-helm-chart/tree/master/traefik"},"\u5b98\u65b9 Traefik Helm \u914d\u7f6e\u53c2\u6570"),"\u3002"),(0,a.kt)("p",null,"\u8981\u4ece\u96c6\u7fa4\u4e2d\u5220\u9664 Traefik\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \u6807\u5fd7\u6765\u542f\u52a8\u6240\u6709 Server\u3002"),(0,a.kt)("p",null,"K3s 1.20 \u53ca\u66f4\u65e9\u7248\u672c\u5305\u62ec\u4e86 Traefik v1\u3002\u9664\u975e\u627e\u5230\u73b0\u6709\u7684 Traefik v1\uff08\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0cTraefik \u4e0d\u4f1a\u5347\u7ea7\u5230 v2\uff09\uff0c\u5426\u5219 K3s 1.21 \u53ca\u66f4\u9ad8\u7248\u672c\u5c06\u5b89\u88c5 Traefik v2\u3002\u6709\u5173 K3s \u4e2d\u5305\u542b\u7684 Traefik \u7248\u672c\uff0c\u8bf7\u53c2\u9605\u7248\u672c\u7684\u53d1\u884c\u8bf4\u660e\u3002"),(0,a.kt)("p",null,"\u8981\u4ece\u8f83\u65e7\u7684 Traefik v1 \u5b9e\u4f8b\u8fc1\u79fb\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \u6587\u6863"),"\u548c",(0,a.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\u8fc1\u79fb\u5de5\u5177"),"\u3002"),(0,a.kt)("h2",{id:"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668"},"\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668"),(0,a.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a\u5d4c\u5165\u5f0f\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u3002\u5e95\u5c42\u5b9e\u73b0\u662f ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/cloudnativelabs/kube-router"},"kube-router")," \u7684 netpol \u63a7\u5236\u5668\u5e93\uff08\u6ca1\u6709\u5176\u4ed6 kube-router \u529f\u80fd\uff09\uff0c\u4f60\u53ef\u4ee5\u5728",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol"},"\u6b64\u5904"),"\u627e\u5230 netpol\u3002"),(0,a.kt)("p",null,"\u8981\u7981\u7528\u5b83\uff0c\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," \u6807\u5fd7\u6765\u542f\u52a8\u6bcf\u4e2a server\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c K3s \u914d\u7f6e\u4e3a\u7981\u7528\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\uff0c\u5219\u4e0d\u4f1a\u5220\u9664\u7f51\u7edc\u7b56\u7565 iptables \u89c4\u5219\u3002\u8981\u5728\u7981\u7528\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u540e\u6e05\u7406\u914d\u7f6e\u7684 kube-router \u7f51\u7edc\u7b56\u7565\u89c4\u5219\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," \u811a\u672c\uff0c\u6216\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"iptables-save")," \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"iptables-restore"),"\u3002\u8fd9\u4e9b\u6b65\u9aa4\u5fc5\u987b\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u4e0a\u624b\u52a8\u6267\u884c\u3002"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"iptables-save | grep -v KUBE-ROUTER | iptables-restore\nip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore\n"))),(0,a.kt)("h2",{id:"service-load-balancer"},"Service Load Balancer"),(0,a.kt)("p",null,"\u4efb\u4f55 LoadBalancer \u63a7\u5236\u5668\u90fd\u53ef\u4ee5\u90e8\u7f72\u5230\u4f60\u7684 K3s \u96c6\u7fa4\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cK3s \u63d0\u4f9b\u4e00\u4e2a\u79f0\u4e3a ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/klipper-lb"},"ServiceLB"),"\uff08\u4ee5\u524d\u79f0\u4e3a Klipper LoadBalancer\uff09\u7684\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u5b83\u4f1a\u4f7f\u7528\u53ef\u7528\u7684\u4e3b\u673a\u7aef\u53e3\u3002"),(0,a.kt)("p",null,"\u4e0a\u6e38 Kubernetes \u5141\u8bb8\u521b\u5efa LoadBalancer \u7c7b\u578b\u7684 Service\uff0c\u4f46\u4e0d\u5305\u62ec\u9ed8\u8ba4\u7684\u8d1f\u8f7d\u5747\u8861\u5668\u5b9e\u73b0\uff0c\u56e0\u6b64\u8fd9\u4e9b Service \u5728\u5b89\u88c5\u4e4b\u524d\u4f1a\u4fdd\u6301 ",(0,a.kt)("inlineCode",{parentName:"p"},"pending")," \u72b6\u6001\u3002\u8bb8\u591a\u6258\u7ba1\u670d\u52a1\u9700\u8981 Amazon EC2 \u6216 Microsoft Azure \u7b49\u4e91\u5382\u5546\u6765\u63d0\u4f9b\u5916\u90e8\u8d1f\u8f7d\u5747\u8861\u5668\u5b9e\u73b0\u3002\u76f8\u6bd4\u4e4b\u4e0b\uff0cK3s ServiceLB \u53ef\u4ee5\u5728\u6ca1\u6709\u4e91\u5382\u5546\u6216\u4efb\u4f55\u989d\u5916\u914d\u7f6e\u7684\u60c5\u51b5\u4e0b\u4f7f\u7528 LoadBalancer Service\u3002"),(0,a.kt)("h3",{id:"servicelb-\u7684\u5de5\u4f5c\u539f\u7406"},"ServiceLB \u7684\u5de5\u4f5c\u539f\u7406"),(0,a.kt)("p",null,"ServiceLB \u63a7\u5236\u5668\u4f1a\u76d1\u89c6 Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/"},"Service"),"\uff0c\u5176\u4e2d ",(0,a.kt)("inlineCode",{parentName:"p"},"spec.type")," \u5b57\u6bb5\u8bbe\u7f6e\u4e3a ",(0,a.kt)("inlineCode",{parentName:"p"},"LoadBalancer"),"\u3002"),(0,a.kt)("p",null,"\u5bf9\u4e8e\u6bcf\u4e2a LoadBalancer Service\uff0c\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\u4f1a\u521b\u5efa\u4e00\u4e2a ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/"},"DaemonSet"),"\u3002\u8fd9\u4e2a DaemonSet \u4f9d\u6b21\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u521b\u5efa\u5e26\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"svc-")," \u524d\u7f00\u7684 Pod\u3002\u8fd9\u4e9b Pod \u4f7f\u7528 iptables \u5c06\u6d41\u91cf\u4ece Pod \u7684 NodePort \u8f6c\u53d1\u5230 Service \u7684 ClusterIP \u5730\u5740\u548c\u7aef\u53e3\u3002"),(0,a.kt)("p",null,"\u5982\u679c ServiceLB Pod \u5728\u914d\u7f6e\u4e86\u5916\u90e8 IP \u7684\u8282\u70b9\u4e0a\u8fd0\u884c\uff0c\u5219\u8be5\u8282\u70b9\u7684\u5916\u90e8 IP \u5c06\u586b\u5145\u5230 Service \u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"status.loadBalancer.ingress")," \u5730\u5740\u5217\u8868\u4e2d\u3002\u5426\u5219\u5c06\u4f7f\u7528\u8282\u70b9\u7684\u5185\u90e8 IP\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u521b\u5efa\u4e86\u591a\u4e2a LoadBalancer Service\uff0c\u5219\u4f1a\u4e3a\u6bcf\u4e2a Service \u521b\u5efa\u4e00\u4e2a\u5355\u72ec\u7684 DaemonSet\u3002"),(0,a.kt)("p",null,"\u53ea\u8981\u5b83\u4eec\u4f7f\u7528\u4e0d\u540c\u7684\u7aef\u53e3\uff0c\u5c31\u53ef\u4ee5\u5728\u540c\u4e00\u4e2a\u8282\u70b9\u4e0a\u516c\u5f00\u591a\u4e2a Service\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u521b\u5efa\u4e00\u4e2a\u4fa6\u542c\u7aef\u53e3 80 \u7684 LoadBalancer Service\uff0cServiceLB \u5c06\u5c1d\u8bd5\u5728\u96c6\u7fa4\u4e2d\u4e3a\u7aef\u53e3 80 \u5bfb\u627e\u7a7a\u95f2\u4e3b\u673a\u3002\u5982\u679c\u6ca1\u6709\u8be5\u7aef\u53e3\u53ef\u7528\u7684\u4e3b\u673a\uff0c\u5219 LB \u5c06\u505c\u7559\u5728 Pending \u72b6\u6001\u3002"),(0,a.kt)("h3",{id:"\u7528\u6cd5"},"\u7528\u6cd5"),(0,a.kt)("p",null,"\u5728 K3s \u4e2d\u521b\u5efa\u4e00\u4e2a ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer"},"LoadBalancer \u7c7b\u578b\u7684 Service"),"\u3002"),(0,a.kt)("h3",{id:"\u63a7\u5236-servicelb-\u8282\u70b9\u9009\u62e9"},"\u63a7\u5236 ServiceLB \u8282\u70b9\u9009\u62e9"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"svccontroller.k3s.cattle.io/enablelb=true")," \u6807\u7b7e\u6dfb\u52a0\u5230\u4e00\u4e2a\u6216\u591a\u4e2a\u8282\u70b9\uff0cServiceLB \u63a7\u5236\u5668\u4f1a\u5207\u6362\u5230 allow-list \u6a21\u5f0f\uff0c\u53ea\u6709\u5177\u6709\u8be5\u6807\u7b7e\u7684\u8282\u70b9\u624d\u6709\u8d44\u683c\u6258\u7ba1 LoadBalancer Pod\u3002\u672a\u6807\u8bb0\u7684\u8282\u70b9\u5c06\u88ab ServiceLB \u6392\u9664\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u8282\u70b9\u6ca1\u6709\u6807\u7b7e\u3002\u53ea\u8981\u6240\u6709\u8282\u70b9\u4fdd\u6301\u672a\u6807\u8bb0\u72b6\u6001\uff0c\u6240\u6709\u5177\u6709\u53ef\u7528\u7aef\u53e3\u7684\u8282\u70b9\u90fd\u5c06\u88ab ServiceLB \u4f7f\u7528\u3002")),(0,a.kt)("h3",{id:"\u521b\u5efa-servicelb-\u8282\u70b9\u6c60"},"\u521b\u5efa ServiceLB \u8282\u70b9\u6c60"),(0,a.kt)("p",null,"\u8981\u9009\u62e9\u7279\u5b9a\u7684\u8282\u70b9\u5b50\u96c6\u6765\u6258\u7ba1 LoadBalancer \u7684 pod\uff0c\u8bf7\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"enablelb")," \u6807\u7b7e\u6dfb\u52a0\u5230\u6240\u9700\u7684\u8282\u70b9\uff0c\u5e76\u5728\u8282\u70b9\u548c\u670d\u52a1\u4e0a\u8bbe\u7f6e\u5339\u914d\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"lbpool")," \u6807\u7b7e\u503c\u3002\u4f8b\u5982\uff1a"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")," \u6807\u8bb0\u8282\u70b9 A \u548c\u8282\u70b9 B"),(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/enablelb=true")," \u6807\u8bb0\u8282\u70b9 C \u548c\u8282\u70b9 D"),(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528\u6807\u7b7e ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool1")," \u5728\u7aef\u53e3 443 \u4e0a\u521b\u5efa\u4e00\u4e2a LoadBalancer Service\u3002\u8be5 Service \u7684 DaemonSet \u4ec5\u5c06 Pod \u90e8\u7f72\u5230\u8282\u70b9 A \u548c\u8282\u70b9 B\u3002"),(0,a.kt)("li",{parentName:"ol"},"\u4f7f\u7528\u6807\u7b7e ",(0,a.kt)("inlineCode",{parentName:"li"},"svccontroller.k3s.cattle.io/lbpool=pool2")," \u5728\u7aef\u53e3 443 \u4e0a\u521b\u5efa\u53e6\u4e00\u4e2a LoadBalancer Service\u3002DaemonSet \u53ea\u4f1a\u5c06 Pod \u90e8\u7f72\u5230\u8282\u70b9 C \u548c\u8282\u70b9 D\u3002")),(0,a.kt)("h3",{id:"\u7981\u7528-servicelb"},"\u7981\u7528 ServiceLB"),(0,a.kt)("p",null,"\u8981\u7981\u7528 ServiceLB\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=servicelb")," \u6807\u8bb0\u6765\u914d\u7f6e\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u5e0c\u671b\u8fd0\u884c\u4e0d\u540c\u7684 LB\uff0c\u4f8b\u5982 MetalLB\uff0c\u8fd9\u662f\u5fc5\u8981\u7684\u3002"),(0,a.kt)("h2",{id:"\u90e8\u7f72\u5916\u90e8-cloud-controller-manager"},"\u90e8\u7f72\u5916\u90e8 Cloud Controller Manager"),(0,a.kt)("p",null,"\u4e3a\u4e86\u51cf\u5c11\u4e8c\u8fdb\u5236\u6587\u4ef6\u7684\u5927\u5c0f\uff0cK3s \u5220\u9664\u4e86\u6240\u6709\u201c\u6811\u5185\u201d\uff08\u5185\u7f6e\uff09\u4e91\u63d0\u4f9b\u7a0b\u5e8f\u3002\u76f8\u53cd\uff0cK3s \u63d0\u4f9b\u4e86\u4e00\u4e2a\u5d4c\u5165\u5f0f Cloud Controller Manager (CCM) \u5b58\u6839\uff0c\u5b83\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u6839\u636e ",(0,a.kt)("inlineCode",{parentName:"li"},"--node-ip")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"--node-external-ip")," \u6807\u5fd7\u8bbe\u7f6e\u8282\u70b9 InternalIP \u548c ExternalIP \u5730\u5740\u5b57\u6bb5\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u6258\u7ba1 ServiceLB LoadBalancer \u63a7\u5236\u5668\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u6e05\u9664\u4e91\u63d0\u4f9b\u5546\u8bbe\u7f6e\u4e3a ",(0,a.kt)("inlineCode",{parentName:"li"},"external")," \u65f6\u51fa\u73b0\u7684 ",(0,a.kt)("inlineCode",{parentName:"li"},"node.cloudprovider.kubernetes.io/uninitialized")," \u6c61\u70b9\u3002")),(0,a.kt)("p",null,"\u5728\u90e8\u7f72\u5916\u90e8 CCM \u4e4b\u524d\uff0c\u4f60\u5fc5\u987b\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-cloud-controller")," \u6807\u5fd7\u542f\u52a8\u6240\u6709 K3s Server \u4ee5\u7981\u7528\u5d4c\u5165\u5f0f CCM\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u7981\u7528\u4e86\u5185\u7f6e CCM \u5e76\u4e14\u6ca1\u6709\u6b63\u786e\u90e8\u7f72\u548c\u914d\u7f6e\u5916\u90e8\u66ff\u4ee3\u54c1\uff0c\u8282\u70b9\u5c06\u4ecd\u7136\u5177\u6709\u6c61\u70b9\u800c\u4e14\u65e0\u6cd5\u8c03\u5ea6\u3002")),(0,a.kt)("h2",{id:"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9"},"\u6ca1\u6709\u4e3b\u673a\u540d\u7684\u8282\u70b9"),(0,a.kt)("p",null,"\u4e00\u4e9b\u4e91\u63d0\u4f9b\u5546\uff08\u4f8b\u5982 Linode\uff09\u5c06\u521b\u5efa\u4ee5 \u201clocalhost\u201d \u4f5c\u4e3a\u4e3b\u673a\u540d\u7684\u4e3b\u673a\uff0c\u800c\u5176\u4ed6\u4e91\u63d0\u4f9b\u5546\u53ef\u80fd\u6839\u672c\u6ca1\u6709\u8bbe\u7f6e\u4e3b\u673a\u540d\u3002\u8fd9\u53ef\u80fd\u4f1a\u5bfc\u81f4\u57df\u540d\u89e3\u6790\u51fa\u73b0\u95ee\u9898\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-name")," \u6807\u5fd7\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \u73af\u5883\u53d8\u91cf\u8fd0\u884c K3s\uff0c\u8fd9\u4f1a\u901a\u8fc7\u4f20\u9012\u8282\u70b9\u540d\u79f0\u6765\u89e3\u51b3\u6b64\u95ee\u9898\u3002"),(0,a.kt)("h2",{id:"\u591a\u96c6\u7fa4-cidr\u5b9e\u9a8c\u6027"},"\u591a\u96c6\u7fa4 CIDR\uff08\u5b9e\u9a8c\u6027\uff09"),(0,a.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"\u4ece v1.26.3+k3s1 \u5f00\u59cb\u4f5c\u4e3a\u5b9e\u9a8c\u529f\u80fd")),(0,a.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u542f\u7528\u6b64\u6807\u5fd7\u540e\uff0c\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u5c06\u65e0\u6cd5\u6b63\u5e38\u5de5\u4f5c\u3002")),(0,a.kt)("p",null,"\u4ece ",(0,a.kt)("inlineCode",{parentName:"p"},"v1.26")," \u5f00\u59cb\uff0cKubernetes \u5f15\u5165\u4e86\u591a\u96c6\u7fa4 CIDR \u4f5c\u4e3a alpha \u529f\u80fd\u3002(",(0,a.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"},"https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs"),")"),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--multi-cluster-cidr")," \u6807\u5fd7\u5728 K3s Server \u4e0a\u542f\u7528\u6b64\u529f\u80fd\uff0c\u5b83\u53ef\u7528\u4e8e\u5b9a\u4e49\u591a\u4e2a\u96c6\u7fa4 CIDR\uff0c\u4e3a\u6bcf\u4e2a\u8282\u70b9\u5206\u914d podCIDR\uff0c\u4f60\u8fd8\u53ef\u4ee5\u5728\u5df2\u8fd0\u884c\u7684\u96c6\u7fa4\u4e0a\u8fdb\u884c\u6269\u5c55\u3002\n\u4f60\u53ef\u4ee5\u4f7f\u7528 API \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl")," \u67e5\u770b ",(0,a.kt)("inlineCode",{parentName:"p"},"clustercidr")," \u8d44\u6e90\uff08\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u914d\u7f6e\u7684 CIDR \u5b9a\u4e49\u4e3a\u9ed8\u8ba4\u503c\uff09\u3002"),(0,a.kt)("p",null,"\u65b0\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"clustercidr")," \u53ef\u4ee5\u5982\u4e0b\u5b9a\u4e49\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},'apiVersion: networking.k8s.io/v1alpha1\nkind: ClusterCIDR\nmetadata:\n  name: new-cidr\nspec:\n  nodeSelector:\n    nodeSelectorTerms:\n      - matchExpressions:\n        - key: kubernetes.io/hostname\n          operator: In\n          values:\n          -  "worker2"\n  perNodeHostBits: 8\n  ipv4: 10.247.0.0/16\n')),(0,a.kt)("p",null,"\u4e0e ",(0,a.kt)("inlineCode",{parentName:"p"},"nodeSelector")," \u5339\u914d\u7684\u8282\u70b9\u5c06\u4f7f\u7528\u65b0\u5b9a\u4e49\u8d44\u6e90\u7684 podCIDR\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5df2\u62e5\u6709 CIDR \u7684\u8282\u70b9\u65e0\u6cd5\u83b7\u5f97\u65b0\u7684 CIDR\u3002\u4f60\u5fc5\u987b\u79fb\u9664\u6216\u91cd\u542f\u5b83\u3002")),(0,a.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"ipv4")," \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"ipv6")," \u6765\u5b9a\u4e49\u53cc\u6808 CIDR\uff0c\u4f46 ",(0,a.kt)("inlineCode",{parentName:"p"},"perNodeHostBits")," \u662f\u76f8\u540c\u7684\u3002\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u6765\u5b9a\u4e49\u53cc\u6808\u914d\u7f6e\u65f6\uff0c",(0,a.kt)("inlineCode",{parentName:"p"},"kube-controller")," \u4e0a\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-cidr-mask-size-ipv6")," \u6807\u5fd7\u9700\u8981\u5177\u6709\u4e0e IPv4 \u76f8\u540c\u7684\u5927\u5c0f\u3002")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/13055719.161d12d4.js b/zh/assets/js/13055719.12041d80.js
similarity index 98%
rename from zh/assets/js/13055719.161d12d4.js
rename to zh/assets/js/13055719.12041d80.js
index 336d03cc8..de70d8a5b 100644
--- a/zh/assets/js/13055719.161d12d4.js
+++ b/zh/assets/js/13055719.12041d80.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9185],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>d});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var u=n.createContext({}),s=function(e){var t=n.useContext(u),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},p=function(e){var t=s(e.components);return n.createElement(u.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,u=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=s(r),d=l,k=m["".concat(u,".").concat(d)]||m[d]||c[d]||a;return r?n.createElement(k,i(i({ref:t},p),{},{components:r})):n.createElement(k,i({ref:t},p))}));function d(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,i=new Array(a);i[0]=m;var o={};for(var u in t)hasOwnProperty.call(t,u)&&(o[u]=t[u]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var s=2;s<a;s++)i[s]=r[s];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},6291:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>i,default:()=>c,frontMatter:()=>a,metadata:()=>o,toc:()=>s});var n=r(3117),l=(r(7294),r(3905));const a={slug:"/",title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes"},i=void 0,o={unversionedId:"introduction",id:"introduction",title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes",description:"K3s \u662f\u8f7b\u91cf\u7ea7\u7684 Kubernetes\u3002K3s \u6613\u4e8e\u5b89\u88c5\uff0c\u4ec5\u9700\u8981 Kubernetes \u5185\u5b58\u7684\u4e00\u534a\uff0c\u6240\u6709\u7ec4\u4ef6\u90fd\u5728\u4e00\u4e2a\u5c0f\u4e8e 100 MB \u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e2d\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/introduction.md",sourceDirName:".",slug:"/",permalink:"/zh/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/introduction.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{slug:"/",title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes"},sidebar:"mySidebar",next:{title:"\u67b6\u6784",permalink:"/zh/architecture/"}},u={},s=[],p={toc:s};function c(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"K3s \u662f\u8f7b\u91cf\u7ea7\u7684 Kubernetes\u3002K3s \u6613\u4e8e\u5b89\u88c5\uff0c\u4ec5\u9700\u8981 Kubernetes \u5185\u5b58\u7684\u4e00\u534a\uff0c\u6240\u6709\u7ec4\u4ef6\u90fd\u5728\u4e00\u4e2a\u5c0f\u4e8e 100 MB \u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e2d\u3002"),(0,l.kt)("p",null,"\u5b83\u9002\u7528\u4e8e\uff1a"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"Edge"),(0,l.kt)("li",{parentName:"ul"},"IoT"),(0,l.kt)("li",{parentName:"ul"},"CI"),(0,l.kt)("li",{parentName:"ul"},"Development"),(0,l.kt)("li",{parentName:"ul"},"ARM"),(0,l.kt)("li",{parentName:"ul"},"\u5d4c\u5165 K8s"),(0,l.kt)("li",{parentName:"ul"},"\u4e0d\u53bb\u5b66\u4e60\u90a3\u4e48\u591a\u7684 Kubernetes \u9ad8\u6df1\u77e5\u8bc6\u4e5f\u80fd\u4e0a\u624b\u4f7f\u7528")),(0,l.kt)("h1",{id:"\u4ec0\u4e48\u662f-k3s"},"\u4ec0\u4e48\u662f K3s\uff1f"),(0,l.kt)("p",null,"K3s \u662f\u4e00\u4e2a\u5b8c\u5168\u517c\u5bb9\u7684 Kubernetes \u53d1\u884c\u7248\uff0c\u5177\u6709\u4ee5\u4e0b\u589e\u5f3a\u529f\u80fd\uff1a"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\u6253\u5305\u4e3a\u5355\u4e2a\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u4f7f\u7528\u57fa\u4e8e sqlite3 \u4f5c\u4e3a\u9ed8\u8ba4\u5b58\u50a8\u673a\u5236\u7684\u8f7b\u91cf\u7ea7\u5b58\u50a8\u540e\u7aef\u3002\u540c\u65f6\u652f\u6301\u4f7f\u7528 etcd3\u3001MySQL \u548c Postgres\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u5c01\u88c5\u5728\u7b80\u5355\u7684\u542f\u52a8\u7a0b\u5e8f\u4e2d\uff0c\u53ef\u4ee5\u5904\u7406\u5f88\u591a\u590d\u6742\u7684 TLS \u548c\u9009\u9879\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u662f\u5b89\u5168\u7684\uff0c\u5bf9\u8f7b\u91cf\u7ea7\u73af\u5883\u6709\u5408\u7406\u7684\u9ed8\u8ba4\u503c\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u6dfb\u52a0\u4e86\u7b80\u5355\u4f46\u5f3a\u5927\u7684 ",(0,l.kt)("inlineCode",{parentName:"li"},"batteries-included")," \u529f\u80fd\uff0c\u4f8b\u5982\uff1a",(0,l.kt)("ul",{parentName:"li"},(0,l.kt)("li",{parentName:"ul"},"\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f"),(0,l.kt)("li",{parentName:"ul"},"service load balancer"),(0,l.kt)("li",{parentName:"ul"},"Helm controller"),(0,l.kt)("li",{parentName:"ul"},"Traefik ingress controller"))),(0,l.kt)("li",{parentName:"ul"},"\u6240\u6709 Kubernetes control plane \u7ec4\u4ef6\u7684\u64cd\u4f5c\u90fd\u5c01\u88c5\u5728\u5355\u4e2a\u4e8c\u8fdb\u5236\u6587\u4ef6\u548c\u8fdb\u7a0b\u4e2d\u3002\u56e0\u6b64\uff0cK3s \u652f\u6301\u81ea\u52a8\u5316\u548c\u7ba1\u7406\u590d\u6742\u7684\u96c6\u7fa4\u64cd\u4f5c\uff08\u4f8b\u5982\u8bc1\u4e66\u5206\u53d1\u7b49\uff09\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u6700\u5927\u7a0b\u5ea6\u51cf\u8f7b\u4e86\u5916\u90e8\u4f9d\u8d56\u6027\uff0cK3s \u4ec5\u9700\u8981\u73b0\u4ee3\u5185\u6838\u548c cgroup \u6302\u8f7d\u3002K3s \u6253\u5305\u4e86\u6240\u9700\u7684\u4f9d\u8d56\uff0c\u5305\u62ec\uff1a",(0,l.kt)("ul",{parentName:"li"},(0,l.kt)("li",{parentName:"ul"},"containerd"),(0,l.kt)("li",{parentName:"ul"},"Flannel (CNI)"),(0,l.kt)("li",{parentName:"ul"},"CoreDNS"),(0,l.kt)("li",{parentName:"ul"},"Traefik (Ingress)"),(0,l.kt)("li",{parentName:"ul"},"Klipper-lb (Service LB)"),(0,l.kt)("li",{parentName:"ul"},"\u5d4c\u5165\u5f0f\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668"),(0,l.kt)("li",{parentName:"ul"},"\u5d4c\u5165\u5f0f local-path-provisioner"),(0,l.kt)("li",{parentName:"ul"},"\u4e3b\u673a\u5b9e\u7528\u7a0b\u5e8f\uff08iptables\u3001socat \u7b49\uff09")))),(0,l.kt)("h1",{id:"\u4e3a\u4ec0\u4e48\u53eb-k3s"},"\u4e3a\u4ec0\u4e48\u53eb K3s?"),(0,l.kt)("p",null,"\u6211\u4eec\u5e0c\u671b\u5b89\u88c5\u7684 Kubernetes \u53ea\u5360\u7528\u4e00\u534a\u7684\u5185\u5b58\u3002Kubernetes \u662f\u4e00\u4e2a 10 \u4e2a\u5b57\u6bcd\u7684\u5355\u8bcd\uff0c\u7b80\u5199\u4e3a K8s\u3002Kubernetes \u7684\u4e00\u534a\u5c31\u662f\u4e00\u4e2a 5 \u4e2a\u5b57\u6bcd\u7684\u5355\u8bcd\uff0c\u56e0\u6b64\u7b80\u5199\u4e3a K3s\u3002K3s \u6ca1\u6709\u5168\u79f0\uff0c\u4e5f\u6ca1\u6709\u5b98\u65b9\u7684\u53d1\u97f3\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9185],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>d});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var u=n.createContext({}),s=function(e){var t=n.useContext(u),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},p=function(e){var t=s(e.components);return n.createElement(u.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},m=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,u=e.parentName,p=o(e,["components","mdxType","originalType","parentName"]),m=s(r),d=l,k=m["".concat(u,".").concat(d)]||m[d]||c[d]||a;return r?n.createElement(k,i(i({ref:t},p),{},{components:r})):n.createElement(k,i({ref:t},p))}));function d(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,i=new Array(a);i[0]=m;var o={};for(var u in t)hasOwnProperty.call(t,u)&&(o[u]=t[u]);o.originalType=e,o.mdxType="string"==typeof e?e:l,i[1]=o;for(var s=2;s<a;s++)i[s]=r[s];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}m.displayName="MDXCreateElement"},6291:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>i,default:()=>c,frontMatter:()=>a,metadata:()=>o,toc:()=>s});var n=r(3117),l=(r(7294),r(3905));const a={slug:"/",title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes"},i=void 0,o={unversionedId:"introduction",id:"introduction",title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes",description:"K3s \u662f\u8f7b\u91cf\u7ea7\u7684 Kubernetes\u3002K3s \u6613\u4e8e\u5b89\u88c5\uff0c\u4ec5\u9700\u8981 Kubernetes \u5185\u5b58\u7684\u4e00\u534a\uff0c\u6240\u6709\u7ec4\u4ef6\u90fd\u5728\u4e00\u4e2a\u5c0f\u4e8e 100 MB \u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e2d\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/introduction.md",sourceDirName:".",slug:"/",permalink:"/zh/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/introduction.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{slug:"/",title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes"},sidebar:"mySidebar",next:{title:"\u67b6\u6784",permalink:"/zh/architecture/"}},u={},s=[],p={toc:s};function c(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"K3s \u662f\u8f7b\u91cf\u7ea7\u7684 Kubernetes\u3002K3s \u6613\u4e8e\u5b89\u88c5\uff0c\u4ec5\u9700\u8981 Kubernetes \u5185\u5b58\u7684\u4e00\u534a\uff0c\u6240\u6709\u7ec4\u4ef6\u90fd\u5728\u4e00\u4e2a\u5c0f\u4e8e 100 MB \u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u4e2d\u3002"),(0,l.kt)("p",null,"\u5b83\u9002\u7528\u4e8e\uff1a"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"Edge"),(0,l.kt)("li",{parentName:"ul"},"IoT"),(0,l.kt)("li",{parentName:"ul"},"CI"),(0,l.kt)("li",{parentName:"ul"},"Development"),(0,l.kt)("li",{parentName:"ul"},"ARM"),(0,l.kt)("li",{parentName:"ul"},"\u5d4c\u5165 K8s"),(0,l.kt)("li",{parentName:"ul"},"\u4e0d\u53bb\u5b66\u4e60\u90a3\u4e48\u591a\u7684 Kubernetes \u9ad8\u6df1\u77e5\u8bc6\u4e5f\u80fd\u4e0a\u624b\u4f7f\u7528")),(0,l.kt)("h1",{id:"\u4ec0\u4e48\u662f-k3s"},"\u4ec0\u4e48\u662f K3s\uff1f"),(0,l.kt)("p",null,"K3s \u662f\u4e00\u4e2a\u5b8c\u5168\u517c\u5bb9\u7684 Kubernetes \u53d1\u884c\u7248\uff0c\u5177\u6709\u4ee5\u4e0b\u589e\u5f3a\u529f\u80fd\uff1a"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"\u6253\u5305\u4e3a\u5355\u4e2a\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u4f7f\u7528\u57fa\u4e8e sqlite3 \u4f5c\u4e3a\u9ed8\u8ba4\u5b58\u50a8\u673a\u5236\u7684\u8f7b\u91cf\u7ea7\u5b58\u50a8\u540e\u7aef\u3002\u540c\u65f6\u652f\u6301\u4f7f\u7528 etcd3\u3001MySQL \u548c Postgres\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u5c01\u88c5\u5728\u7b80\u5355\u7684\u542f\u52a8\u7a0b\u5e8f\u4e2d\uff0c\u53ef\u4ee5\u5904\u7406\u5f88\u591a\u590d\u6742\u7684 TLS \u548c\u9009\u9879\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u662f\u5b89\u5168\u7684\uff0c\u5bf9\u8f7b\u91cf\u7ea7\u73af\u5883\u6709\u5408\u7406\u7684\u9ed8\u8ba4\u503c\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u6dfb\u52a0\u4e86\u7b80\u5355\u4f46\u5f3a\u5927\u7684 ",(0,l.kt)("inlineCode",{parentName:"li"},"batteries-included")," \u529f\u80fd\uff0c\u4f8b\u5982\uff1a",(0,l.kt)("ul",{parentName:"li"},(0,l.kt)("li",{parentName:"ul"},"\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f"),(0,l.kt)("li",{parentName:"ul"},"service load balancer"),(0,l.kt)("li",{parentName:"ul"},"Helm controller"),(0,l.kt)("li",{parentName:"ul"},"Traefik ingress controller"))),(0,l.kt)("li",{parentName:"ul"},"\u6240\u6709 Kubernetes control plane \u7ec4\u4ef6\u7684\u64cd\u4f5c\u90fd\u5c01\u88c5\u5728\u5355\u4e2a\u4e8c\u8fdb\u5236\u6587\u4ef6\u548c\u8fdb\u7a0b\u4e2d\u3002\u56e0\u6b64\uff0cK3s \u652f\u6301\u81ea\u52a8\u5316\u548c\u7ba1\u7406\u590d\u6742\u7684\u96c6\u7fa4\u64cd\u4f5c\uff08\u4f8b\u5982\u8bc1\u4e66\u5206\u53d1\u7b49\uff09\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u6700\u5927\u7a0b\u5ea6\u51cf\u8f7b\u4e86\u5916\u90e8\u4f9d\u8d56\u6027\uff0cK3s \u4ec5\u9700\u8981\u73b0\u4ee3\u5185\u6838\u548c cgroup \u6302\u8f7d\u3002K3s \u6253\u5305\u4e86\u6240\u9700\u7684\u4f9d\u8d56\uff0c\u5305\u62ec\uff1a",(0,l.kt)("ul",{parentName:"li"},(0,l.kt)("li",{parentName:"ul"},"containerd"),(0,l.kt)("li",{parentName:"ul"},"Flannel (CNI)"),(0,l.kt)("li",{parentName:"ul"},"CoreDNS"),(0,l.kt)("li",{parentName:"ul"},"Traefik (Ingress)"),(0,l.kt)("li",{parentName:"ul"},"Klipper-lb (Service LB)"),(0,l.kt)("li",{parentName:"ul"},"\u5d4c\u5165\u5f0f\u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668"),(0,l.kt)("li",{parentName:"ul"},"\u5d4c\u5165\u5f0f local-path-provisioner"),(0,l.kt)("li",{parentName:"ul"},"\u4e3b\u673a\u5b9e\u7528\u7a0b\u5e8f\uff08iptables\u3001socat \u7b49\uff09")))),(0,l.kt)("h1",{id:"\u4e3a\u4ec0\u4e48\u53eb-k3s"},"\u4e3a\u4ec0\u4e48\u53eb K3s?"),(0,l.kt)("p",null,"\u6211\u4eec\u5e0c\u671b\u5b89\u88c5\u7684 Kubernetes \u53ea\u5360\u7528\u4e00\u534a\u7684\u5185\u5b58\u3002Kubernetes \u662f\u4e00\u4e2a 10 \u4e2a\u5b57\u6bcd\u7684\u5355\u8bcd\uff0c\u7b80\u5199\u4e3a K8s\u3002Kubernetes \u7684\u4e00\u534a\u5c31\u662f\u4e00\u4e2a 5 \u4e2a\u5b57\u6bcd\u7684\u5355\u8bcd\uff0c\u56e0\u6b64\u7b80\u5199\u4e3a K3s\u3002K3s \u6ca1\u6709\u5168\u79f0\uff0c\u4e5f\u6ca1\u6709\u5b98\u65b9\u7684\u53d1\u97f3\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/15ed8710.fbaee31c.js b/zh/assets/js/15ed8710.e4499216.js
similarity index 99%
rename from zh/assets/js/15ed8710.fbaee31c.js
rename to zh/assets/js/15ed8710.e4499216.js
index 71b89a046..5876db26b 100644
--- a/zh/assets/js/15ed8710.fbaee31c.js
+++ b/zh/assets/js/15ed8710.e4499216.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9513],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>g});var a=n(7294);function l(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){l(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function d(e,t){if(null==e)return{};var n,a,l=function(e,t){if(null==e)return{};var n,a,l={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(l[n]=e[n]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(l[n]=e[n])}return l}var o=a.createContext({}),p=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(o.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,l=e.mdxType,r=e.originalType,o=e.parentName,u=d(e,["components","mdxType","originalType","parentName"]),m=p(n),g=l,N=m["".concat(o,".").concat(g)]||m[g]||k[g]||r;return n?a.createElement(N,i(i({ref:t},u),{},{components:n})):a.createElement(N,i({ref:t},u))}));function g(e,t){var n=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=n.length,i=new Array(r);i[0]=m;var d={};for(var o in t)hasOwnProperty.call(t,o)&&(d[o]=t[o]);d.originalType=e,d.mdxType="string"==typeof e?e:l,i[1]=d;for(var p=2;p<r;p++)i[p]=n[p];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8201:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>k,frontMatter:()=>r,metadata:()=>d,toc:()=>p});var a=n(3117),l=(n(7294),n(3905));const r={title:"agent",weight:2},i="k3s agent",d={unversionedId:"cli/agent",id:"cli/agent",title:"agent",description:"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Agent\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/agent.md",sourceDirName:"cli",slug:"/cli/agent",permalink:"/zh/cli/agent",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"agent",weight:2},sidebar:"mySidebar",previous:{title:"server",permalink:"/zh/cli/server"},next:{title:"certificate",permalink:"/zh/cli/certificate"}},o={},p=[{value:"Logging",id:"logging",level:3},{value:"\u96c6\u7fa4\u9009\u9879",id:"\u96c6\u7fa4\u9009\u9879",level:3},{value:"\u6570\u636e",id:"\u6570\u636e",level:3},{value:"\u8282\u70b9",id:"\u8282\u70b9",level:3},{value:"\u8fd0\u884c\u65f6",id:"\u8fd0\u884c\u65f6",level:3},{value:"\u7f51\u7edc",id:"\u7f51\u7edc",level:3},{value:"\u81ea\u5b9a\u4e49\u6807\u5fd7",id:"\u81ea\u5b9a\u4e49\u6807\u5fd7",level:3},{value:"\u5b9e\u9a8c\u529f\u80fd",id:"\u5b9e\u9a8c\u529f\u80fd",level:3},{value:"\u5df2\u5f03\u7528",id:"\u5df2\u5f03\u7528",level:3},{value:"Agent \u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",id:"agent-\u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",level:3},{value:"K3s Agent CLI \u5e2e\u52a9",id:"k3s-agent-cli-\u5e2e\u52a9",level:3}],u={toc:p};function k(e){let{components:t,...n}=e;return(0,l.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("h1",{id:"k3s-agent"},"k3s agent"),(0,l.kt)("p",null,"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Agent\u3002"),(0,l.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cServer \u4e5f\u8fd0\u884c Agent\uff0c\u56e0\u6b64\u672c\u6587\u5217\u51fa\u7684\u6240\u6709\u6807\u5fd7\u4e5f\u53ef\u7528\u4e8e Server\u3002"),(0,l.kt)("p",null,"\u5728\u672c\u6587\u4e2d\uff0c\u9009\u9879\u4f5c\u4e3a CLI \u6807\u5fd7\u4f20\u9012\uff0c\u4f46\u662f\u4e5f\u53ef\u4ee5\u4f5c\u4e3a\u914d\u7f6e\u6587\u4ef6\u9009\u9879\u4f20\u9012\u3002\u6709\u5173\u4f7f\u7528 YAML \u914d\u7f6e\u6587\u4ef6\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\u6587\u6863\u3002"),(0,l.kt)("h3",{id:"logging"},"Logging"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8868\u793a\u65e5\u5fd7\u7ea7\u522b\u8be6\u7ec6\u7a0b\u5ea6\u7684\u6570\u5b57")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"FILE_PATTERN=LOG_LEVEL \u683c\u5f0f\uff0c\u7528\u9017\u53f7\u5206\u9694\u7684\u5217\u8868\uff0c\u7528\u4e8e\u6587\u4ef6\u8fc7\u6ee4\u65e5\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6807\u51c6\u9519\u8bef\u4ee5\u53ca\u6587\u4ef6\uff08\u5982\u679c\u8bbe\u7f6e\uff09")))),(0,l.kt)("h3",{id:"\u96c6\u7fa4\u9009\u9879"},"\u96c6\u7fa4\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token value, -t")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u8eab\u4efd\u9a8c\u8bc1\u7684\u4ee4\u724c")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u8eab\u4efd\u9a8c\u8bc1\u7684\u4ee4\u724c\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--server value, -s")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u7684 server")))),(0,l.kt)("h3",{id:"\u6570\u636e"},"\u6570\u636e"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/var/lib/rancher/k3s"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\u6587\u4ef6\u5939")))),(0,l.kt)("h3",{id:"\u8282\u70b9"},"\u8282\u70b9"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-name")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_NODE_NAME")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8282\u70b9\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--with-node-id")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06 ID \u5c3e\u9644\u5230\u8282\u70b9\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-label")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u4e00\u7ec4\u6807\u7b7e\u6ce8\u518c\u548c\u542f\u52a8 kubelet")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-taint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u4e00\u7ec4\u6c61\u70b9\u6ce8\u518c kubelet")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--protect-kernel-defaults")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5185\u6838\u8c03\u4f18\u884c\u4e3a\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\uff0c\u5f53\u5185\u6838\u53ef\u8c03\u9879\u4e0e kubelet \u9ed8\u8ba4\u503c\u4e0d\u540c\u65f6\u4f1a\u51fa\u9519\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--selinux")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_SELINUX")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5728 containerd \u4e2d\u542f\u7528 SELinux")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--lb-server-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_LB_SERVER_PORT")),(0,l.kt)("td",{parentName:"tr",align:null},"Supervisor \u5ba2\u6237\u7aef\u8d1f\u8f7d\u5747\u8861\u5668\u7684\u672c\u5730\u7aef\u53e3\u3002\u5982\u679c supervisor \u548c apiserver \u6ca1\u6709\u4f4d\u4e8e\u540c\u4e00\u4f4d\u7f6e\uff0c\u5219\u6bd4\u8be5\u7aef\u53e3\u5c0f 1 \u7684\u7aef\u53e3\u4e5f\u5c06\u7528\u4e8e apiserver \u5ba2\u6237\u7aef\u8d1f\u8f7d\u5747\u8861\u5668\uff08\u9ed8\u8ba4\u503c\uff1a6444\uff09")))),(0,l.kt)("h3",{id:"\u8fd0\u884c\u65f6"},"\u8fd0\u884c\u65f6"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--container-runtime-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u5d4c\u5165\u5f0f containerd \u5e76\u5728\u7ed9\u5b9a\u8def\u5f84\u4f7f\u7528 CRI \u5957\u63a5\u5b57\u3002\u5f53\u4e0e --docker \u4e00\u8d77\u4f7f\u7528\u65f6\uff0c\u8fd9\u4f1a\u8bbe\u7f6e cri-docker \u5957\u63a5\u5b57\u8def\u5f84")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--pause-image")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"docker.io/rancher/pause:3.1"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4e3a containerd \u6216 Docker \u6c99\u7bb1\u5b9a\u5236\u7684 pause \u955c\u50cf")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--private-registry")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/etc/rancher/k3s/registries.yaml"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6")))),(0,l.kt)("h3",{id:"\u7f51\u7edc"},"\u7f51\u7edc"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-ip value, -i")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8282\u70b9\u7684 IP \u5730\u5740")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8282\u70b9\u7684\u5916\u90e8 IP \u5730\u5740")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--resolv-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_RESOLV_CONF")),(0,l.kt)("td",{parentName:"tr",align:null},"Kubelet resolv.conf \u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-iface")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u9ed8\u8ba4\u7684 Flannel interface")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u9ed8\u8ba4\u7684 Flannel \u914d\u7f6e\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-cni-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u9ed8\u8ba4\u7684 Flannel CNI \u914d\u7f6e\u6587\u4ef6")))),(0,l.kt)("h3",{id:"\u81ea\u5b9a\u4e49\u6807\u5fd7"},"\u81ea\u5b9a\u4e49\u6807\u5fd7"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kubelet \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-proxy \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")))),(0,l.kt)("h3",{id:"\u5b9e\u9a8c\u529f\u80fd"},"\u5b9e\u9a8c\u529f\u80fd"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,l.kt)("td",{parentName:"tr",align:null},"\u65e0\u6839\u8fd0\u884c")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--docker")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 cri-dockerd \u800c\u4e0d\u662f containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,l.kt)("td",{parentName:"tr",align:null},"\u504f\u5411\u6253\u5305\u7684\u7528\u6237\u7a7a\u95f4\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u800c\u4e0d\u662f\u4e3b\u673a\u4e8c\u8fdb\u5236\u6587\u4ef6")))),(0,l.kt)("h3",{id:"\u5df2\u5f03\u7528"},"\u5df2\u5f03\u7528"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--token"))))),(0,l.kt)("h3",{id:"agent-\u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"},"Agent \u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"),(0,l.kt)("p",null,"K3s Agent \u53ef\u4ee5\u901a\u8fc7 ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-label")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-taint")," \u9009\u9879\u6765\u914d\u7f6e\uff0c\u5b83\u4eec\u4f1a\u4e3a kubelet \u6dfb\u52a0\u6807\u7b7e\u548c\u6c61\u70b9\u3002\u8fd9\u4e24\u4e2a\u9009\u9879\u53ea\u80fd\u5728\u6ce8\u518c\u65f6\u6dfb\u52a0\u6807\u7b7e\u548c/\u6216\u6c61\u70b9\uff0c\u56e0\u6b64\u5b83\u4eec\u53ea\u80fd\u88ab\u6dfb\u52a0\u4e00\u6b21\uff0c\u4e4b\u540e\u4e0d\u80fd\u518d\u901a\u8fc7\u8fd0\u884c K3s \u547d\u4ee4\u6765\u6539\u53d8\u3002"),(0,l.kt)("p",null,"\u4e0b\u9762\u662f\u663e\u793a\u5982\u4f55\u6dfb\u52a0\u6807\u7b7e\u548c\u6c61\u70b9\u7684\u793a\u4f8b\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"     --node-label foo=bar \\\n     --node-label hello=world \\\n     --node-taint key1=value1:NoExecute\n")),(0,l.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u8282\u70b9\u6ce8\u518c\u540e\u66f4\u6539\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9\uff0c\u4f60\u9700\u8981\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"kubectl"),"\u3002\u5173\u4e8e\u5982\u4f55\u6dfb\u52a0",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"\u6c61\u70b9"),"\u548c",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"\u8282\u70b9\u6807\u7b7e"),"\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u5b98\u65b9 Kubernetes \u6587\u6863\u3002"),(0,l.kt)("h3",{id:"k3s-agent-cli-\u5e2e\u52a9"},"K3s Agent CLI \u5e2e\u52a9"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},"\u5982\u679c\u67d0\u4e2a\u9009\u9879\u51fa\u73b0\u5728\u62ec\u53f7\u4e2d\uff08\u4f8b\u5982 ",(0,l.kt)("inlineCode",{parentName:"p"},"[$K3S_URL]"),"\uff09\uff0c\u8be5\u9009\u9879\u53ef\u4ee5\u4f5c\u4e3a\u8be5\u540d\u79f0\u7684\u73af\u5883\u53d8\u91cf\u4f20\u5165\u3002")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s agent - Run node agent\n\nUSAGE:\n   k3s agent [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --token value, -t value                    (cluster) Token to use for authentication [$K3S_TOKEN]\n   --token-file value                         (cluster) Token file to use for authentication [$K3S_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to [$K3S_URL]\n   --data-dir value, -d value                 (agent/data) Folder to hold state (default: "/var/lib/rancher/k3s")\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer.(default: 6444) [$K3S_LB_SERVER_PORT]\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n')))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9513],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>g});var a=n(7294);function l(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){l(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function d(e,t){if(null==e)return{};var n,a,l=function(e,t){if(null==e)return{};var n,a,l={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(l[n]=e[n]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(l[n]=e[n])}return l}var o=a.createContext({}),p=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},u=function(e){var t=p(e.components);return a.createElement(o.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,l=e.mdxType,r=e.originalType,o=e.parentName,u=d(e,["components","mdxType","originalType","parentName"]),m=p(n),g=l,N=m["".concat(o,".").concat(g)]||m[g]||k[g]||r;return n?a.createElement(N,i(i({ref:t},u),{},{components:n})):a.createElement(N,i({ref:t},u))}));function g(e,t){var n=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=n.length,i=new Array(r);i[0]=m;var d={};for(var o in t)hasOwnProperty.call(t,o)&&(d[o]=t[o]);d.originalType=e,d.mdxType="string"==typeof e?e:l,i[1]=d;for(var p=2;p<r;p++)i[p]=n[p];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8201:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>k,frontMatter:()=>r,metadata:()=>d,toc:()=>p});var a=n(3117),l=(n(7294),n(3905));const r={title:"agent",weight:2},i="k3s agent",d={unversionedId:"cli/agent",id:"cli/agent",title:"agent",description:"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Agent\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/agent.md",sourceDirName:"cli",slug:"/cli/agent",permalink:"/zh/cli/agent",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"agent",weight:2},sidebar:"mySidebar",previous:{title:"server",permalink:"/zh/cli/server"},next:{title:"certificate",permalink:"/zh/cli/certificate"}},o={},p=[{value:"Logging",id:"logging",level:3},{value:"\u96c6\u7fa4\u9009\u9879",id:"\u96c6\u7fa4\u9009\u9879",level:3},{value:"\u6570\u636e",id:"\u6570\u636e",level:3},{value:"\u8282\u70b9",id:"\u8282\u70b9",level:3},{value:"\u8fd0\u884c\u65f6",id:"\u8fd0\u884c\u65f6",level:3},{value:"\u7f51\u7edc",id:"\u7f51\u7edc",level:3},{value:"\u81ea\u5b9a\u4e49\u6807\u5fd7",id:"\u81ea\u5b9a\u4e49\u6807\u5fd7",level:3},{value:"\u5b9e\u9a8c\u529f\u80fd",id:"\u5b9e\u9a8c\u529f\u80fd",level:3},{value:"\u5df2\u5f03\u7528",id:"\u5df2\u5f03\u7528",level:3},{value:"Agent \u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",id:"agent-\u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",level:3},{value:"K3s Agent CLI \u5e2e\u52a9",id:"k3s-agent-cli-\u5e2e\u52a9",level:3}],u={toc:p};function k(e){let{components:t,...n}=e;return(0,l.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("h1",{id:"k3s-agent"},"k3s agent"),(0,l.kt)("p",null,"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u914d\u7f6e K3s Agent\u3002"),(0,l.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cServer \u4e5f\u8fd0\u884c Agent\uff0c\u56e0\u6b64\u672c\u6587\u5217\u51fa\u7684\u6240\u6709\u6807\u5fd7\u4e5f\u53ef\u7528\u4e8e Server\u3002"),(0,l.kt)("p",null,"\u5728\u672c\u6587\u4e2d\uff0c\u9009\u9879\u4f5c\u4e3a CLI \u6807\u5fd7\u4f20\u9012\uff0c\u4f46\u662f\u4e5f\u53ef\u4ee5\u4f5c\u4e3a\u914d\u7f6e\u6587\u4ef6\u9009\u9879\u4f20\u9012\u3002\u6709\u5173\u4f7f\u7528 YAML \u914d\u7f6e\u6587\u4ef6\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\u6587\u6863\u3002"),(0,l.kt)("h3",{id:"logging"},"Logging"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"-v")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"0"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8868\u793a\u65e5\u5fd7\u7ea7\u522b\u8be6\u7ec6\u7a0b\u5ea6\u7684\u6570\u5b57")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--vmodule")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"FILE_PATTERN=LOG_LEVEL \u683c\u5f0f\uff0c\u7528\u9017\u53f7\u5206\u9694\u7684\u5217\u8868\uff0c\u7528\u4e8e\u6587\u4ef6\u8fc7\u6ee4\u65e5\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--log value, -l")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--alsologtostderr")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8bb0\u5f55\u5230\u6807\u51c6\u9519\u8bef\u4ee5\u53ca\u6587\u4ef6\uff08\u5982\u679c\u8bbe\u7f6e\uff09")))),(0,l.kt)("h3",{id:"\u96c6\u7fa4\u9009\u9879"},"\u96c6\u7fa4\u9009\u9879"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token value, -t")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u8eab\u4efd\u9a8c\u8bc1\u7684\u4ee4\u724c")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--token-file")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN_FILE")),(0,l.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u8eab\u4efd\u9a8c\u8bc1\u7684\u4ee4\u724c\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--server value, -s")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_URL")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u7684 server")))),(0,l.kt)("h3",{id:"\u6570\u636e"},"\u6570\u636e"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--data-dir value, -d")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/var/lib/rancher/k3s"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\u6587\u4ef6\u5939")))),(0,l.kt)("h3",{id:"\u8282\u70b9"},"\u8282\u70b9"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-name")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_NODE_NAME")),(0,l.kt)("td",{parentName:"tr",align:null},"\u8282\u70b9\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--with-node-id")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06 ID \u5c3e\u9644\u5230\u8282\u70b9\u540d\u79f0")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-label")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u4e00\u7ec4\u6807\u7b7e\u6ce8\u518c\u548c\u542f\u52a8 kubelet")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-taint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u4e00\u7ec4\u6c61\u70b9\u6ce8\u518c kubelet")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--protect-kernel-defaults")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u5185\u6838\u8c03\u4f18\u884c\u4e3a\u3002\u5982\u679c\u8bbe\u7f6e\u4e86\uff0c\u5f53\u5185\u6838\u53ef\u8c03\u9879\u4e0e kubelet \u9ed8\u8ba4\u503c\u4e0d\u540c\u65f6\u4f1a\u51fa\u9519\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--selinux")),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_SELINUX")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5728 containerd \u4e2d\u542f\u7528 SELinux")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--lb-server-port")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_LB_SERVER_PORT")),(0,l.kt)("td",{parentName:"tr",align:null},"Supervisor \u5ba2\u6237\u7aef\u8d1f\u8f7d\u5747\u8861\u5668\u7684\u672c\u5730\u7aef\u53e3\u3002\u5982\u679c supervisor \u548c apiserver \u6ca1\u6709\u4f4d\u4e8e\u540c\u4e00\u4f4d\u7f6e\uff0c\u5219\u6bd4\u8be5\u7aef\u53e3\u5c0f 1 \u7684\u7aef\u53e3\u4e5f\u5c06\u7528\u4e8e apiserver \u5ba2\u6237\u7aef\u8d1f\u8f7d\u5747\u8861\u5668\uff08\u9ed8\u8ba4\u503c\uff1a6444\uff09")))),(0,l.kt)("h3",{id:"\u8fd0\u884c\u65f6"},"\u8fd0\u884c\u65f6"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--container-runtime-endpoint")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u5d4c\u5165\u5f0f containerd \u5e76\u5728\u7ed9\u5b9a\u8def\u5f84\u4f7f\u7528 CRI \u5957\u63a5\u5b57\u3002\u5f53\u4e0e --docker \u4e00\u8d77\u4f7f\u7528\u65f6\uff0c\u8fd9\u4f1a\u8bbe\u7f6e cri-docker \u5957\u63a5\u5b57\u8def\u5f84")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--pause-image")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"docker.io/rancher/pause:3.1"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u4e3a containerd \u6216 Docker \u6c99\u7bb1\u5b9a\u5236\u7684 pause \u955c\u50cf")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--private-registry")," value"),(0,l.kt)("td",{parentName:"tr",align:null},'"/etc/rancher/k3s/registries.yaml"'),(0,l.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6")))),(0,l.kt)("h3",{id:"\u7f51\u7edc"},"\u7f51\u7edc"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-ip value, -i")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8282\u70b9\u7684 IP \u5730\u5740")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8282\u70b9\u7684\u5916\u90e8 IP \u5730\u5740")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--resolv-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_RESOLV_CONF")),(0,l.kt)("td",{parentName:"tr",align:null},"Kubelet resolv.conf \u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-iface")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u9ed8\u8ba4\u7684 Flannel interface")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u9ed8\u8ba4\u7684 Flannel \u914d\u7f6e\u6587\u4ef6")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-cni-conf")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u9ed8\u8ba4\u7684 Flannel CNI \u914d\u7f6e\u6587\u4ef6")))),(0,l.kt)("h3",{id:"\u81ea\u5b9a\u4e49\u6807\u5fd7"},"\u81ea\u5b9a\u4e49\u6807\u5fd7"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kubelet-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kubelet \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--kube-proxy-arg")," value"),(0,l.kt)("td",{parentName:"tr",align:null},"kube-proxy \u8fdb\u7a0b\u7684\u81ea\u5b9a\u4e49\u6807\u5fd7")))),(0,l.kt)("h3",{id:"\u5b9e\u9a8c\u529f\u80fd"},"\u5b9e\u9a8c\u529f\u80fd"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--rootless")),(0,l.kt)("td",{parentName:"tr",align:null},"\u65e0\u6839\u8fd0\u884c")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--docker")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 cri-dockerd \u800c\u4e0d\u662f containerd")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--prefer-bundled-bin")),(0,l.kt)("td",{parentName:"tr",align:null},"\u504f\u5411\u6253\u5305\u7684\u7528\u6237\u7a7a\u95f4\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u800c\u4e0d\u662f\u4e3b\u673a\u4e8c\u8fdb\u5236\u6587\u4ef6")))),(0,l.kt)("h3",{id:"\u5df2\u5f03\u7528"},"\u5df2\u5f03\u7528"),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,l.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--no-flannel")),(0,l.kt)("td",{parentName:"tr",align:null},"N/A"),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none"))),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--cluster-secret")," value"),(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"K3S_CLUSTER_SECRET")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"td"},"--token"))))),(0,l.kt)("h3",{id:"agent-\u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"},"Agent \u7684\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"),(0,l.kt)("p",null,"K3s Agent \u53ef\u4ee5\u901a\u8fc7 ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-label")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-taint")," \u9009\u9879\u6765\u914d\u7f6e\uff0c\u5b83\u4eec\u4f1a\u4e3a kubelet \u6dfb\u52a0\u6807\u7b7e\u548c\u6c61\u70b9\u3002\u8fd9\u4e24\u4e2a\u9009\u9879\u53ea\u80fd\u5728\u6ce8\u518c\u65f6\u6dfb\u52a0\u6807\u7b7e\u548c/\u6216\u6c61\u70b9\uff0c\u56e0\u6b64\u5b83\u4eec\u53ea\u80fd\u88ab\u6dfb\u52a0\u4e00\u6b21\uff0c\u4e4b\u540e\u4e0d\u80fd\u518d\u901a\u8fc7\u8fd0\u884c K3s \u547d\u4ee4\u6765\u6539\u53d8\u3002"),(0,l.kt)("p",null,"\u4e0b\u9762\u662f\u663e\u793a\u5982\u4f55\u6dfb\u52a0\u6807\u7b7e\u548c\u6c61\u70b9\u7684\u793a\u4f8b\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"     --node-label foo=bar \\\n     --node-label hello=world \\\n     --node-taint key1=value1:NoExecute\n")),(0,l.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u8282\u70b9\u6ce8\u518c\u540e\u66f4\u6539\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9\uff0c\u4f60\u9700\u8981\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"kubectl"),"\u3002\u5173\u4e8e\u5982\u4f55\u6dfb\u52a0",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"\u6c61\u70b9"),"\u548c",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"\u8282\u70b9\u6807\u7b7e"),"\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u5b98\u65b9 Kubernetes \u6587\u6863\u3002"),(0,l.kt)("h3",{id:"k3s-agent-cli-\u5e2e\u52a9"},"K3s Agent CLI \u5e2e\u52a9"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},"\u5982\u679c\u67d0\u4e2a\u9009\u9879\u51fa\u73b0\u5728\u62ec\u53f7\u4e2d\uff08\u4f8b\u5982 ",(0,l.kt)("inlineCode",{parentName:"p"},"[$K3S_URL]"),"\uff09\uff0c\u8be5\u9009\u9879\u53ef\u4ee5\u4f5c\u4e3a\u8be5\u540d\u79f0\u7684\u73af\u5883\u53d8\u91cf\u4f20\u5165\u3002")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'NAME:\n   k3s agent - Run node agent\n\nUSAGE:\n   k3s agent [OPTIONS]\n\nOPTIONS:\n   --config FILE, -c FILE                     (config) Load configuration from FILE (default: "/etc/rancher/k3s/config.yaml") [$K3S_CONFIG_FILE]\n   --debug                                    (logging) Turn on debug logs [$K3S_DEBUG]\n   -v value                                   (logging) Number for the log level verbosity (default: 0)\n   --vmodule value                            (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging\n   --log value, -l value                      (logging) Log to file\n   --alsologtostderr                          (logging) Log to standard error as well as file (if set)\n   --token value, -t value                    (cluster) Token to use for authentication [$K3S_TOKEN]\n   --token-file value                         (cluster) Token file to use for authentication [$K3S_TOKEN_FILE]\n   --server value, -s value                   (cluster) Server to connect to [$K3S_URL]\n   --data-dir value, -d value                 (agent/data) Folder to hold state (default: "/var/lib/rancher/k3s")\n   --node-name value                          (agent/node) Node name [$K3S_NODE_NAME]\n   --with-node-id                             (agent/node) Append id to node name\n   --node-label value                         (agent/node) Registering and starting kubelet with set of labels\n   --node-taint value                         (agent/node) Registering kubelet with set of taints\n   --image-credential-provider-bin-dir value  (agent/node) The path to the directory where credential provider plugin binaries are located (default: "/var/lib/rancher/credentialprovider/bin")\n   --image-credential-provider-config value   (agent/node) The path to the credential provider plugin config file (default: "/var/lib/rancher/credentialprovider/config.yaml")\n   --selinux                                  (agent/node) Enable SELinux in containerd [$K3S_SELINUX]\n   --lb-server-port value                     (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer.(default: 6444) [$K3S_LB_SERVER_PORT]\n   --protect-kernel-defaults                  (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults.\n   --container-runtime-endpoint value         (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path\n   --pause-image value                        (agent/runtime) Customized pause image for containerd or docker sandbox (default: "rancher/mirrored-pause:3.6")\n   --snapshotter value                        (agent/runtime) Override default containerd snapshotter (default: "overlayfs")\n   --private-registry value                   (agent/runtime) Private registry configuration file (default: "/etc/rancher/k3s/registries.yaml")\n   --node-ip value, -i value                  (agent/networking) IPv4/IPv6 addresses to advertise for node\n   --node-external-ip value                   (agent/networking) IPv4/IPv6 external IP addresses to advertise for node\n   --resolv-conf value                        (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF]\n   --flannel-iface value                      (agent/networking) Override default flannel interface\n   --flannel-conf value                       (agent/networking) Override default flannel config file\n   --flannel-cni-conf value                   (agent/networking) Override default flannel cni config file\n   --kubelet-arg value                        (agent/flags) Customized flag for kubelet process\n   --kube-proxy-arg value                     (agent/flags) Customized flag for kube-proxy process\n   --rootless                                 (experimental) Run rootless\n   --prefer-bundled-bin                       (experimental) Prefer bundled userspace binaries over host binaries\n   --docker                                   (agent/runtime) (experimental) Use cri-dockerd instead of containerd\n')))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/1a4e3797.8b5db6d2.js b/zh/assets/js/1a4e3797.8b5db6d2.js
new file mode 100644
index 000000000..a1c4e7927
--- /dev/null
+++ b/zh/assets/js/1a4e3797.8b5db6d2.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7920],{2027:(e,t,a)=>{a.r(t),a.d(t,{default:()=>A});var r=a(7294),n=a(2263),l=a(1573),s=a(5742),c=a(9960),o=a(5999);const u=["zero","one","two","few","many","other"];function m(e){return u.filter((t=>e.includes(t)))}const h={locale:"en",pluralForms:m(["one","other"]),select:e=>1===e?"one":"other"};function i(){const{i18n:{currentLocale:e}}=(0,n.Z)();return(0,r.useMemo)((()=>{try{return function(e){const t=new Intl.PluralRules(e);return{locale:e,pluralForms:m(t.resolvedOptions().pluralCategories),select:e=>t.select(e)}}(e)}catch(t){return console.error(`Failed to use Intl.PluralRules for locale "${e}".\nDocusaurus will fallback to the default (English) implementation.\nError: ${t.message}\n`),h}}),[e])}function p(){const e=i();return{selectMessage:(t,a)=>function(e,t,a){const r=e.split("|");if(1===r.length)return r[0];r.length>a.pluralForms.length&&console.error(`For locale=${a.locale}, a maximum of ${a.pluralForms.length} plural forms are expected (${a.pluralForms.join(",")}), but the message contains ${r.length}: ${e}`);const n=a.select(t),l=a.pluralForms.indexOf(n);return r[Math.min(l,r.length-1)]}(a,t,e)}}var g=a(6010),d=a(6775),f=a(412);const y=function(){const e=(0,d.k6)(),t=(0,d.TH)(),{siteConfig:{baseUrl:a}}=(0,n.Z)(),r=f.Z.canUseDOM?new URLSearchParams(t.search):null,l=r?.get("q")||"",s=r?.get("ctx")||"",c=r?.get("version")||"",o=e=>{const a=new URLSearchParams(t.search);return e?a.set("q",e):a.delete("q"),a};return{searchValue:l,searchContext:s,searchVersion:c,updateSearchPath:t=>{const a=o(t);e.replace({search:a.toString()})},updateSearchContext:a=>{const r=new URLSearchParams(t.search);r.set("ctx",a),e.replace({search:r.toString()})},generateSearchPageLink:e=>{const t=o(e);return`${a}search?${t.toString()}`}}};var E=a(22),S=a(8202),v=a(2539),w=a(726),x=a(1073),C=a(311),_=a(3926),I=a(1029);const P="searchContextInput_mXoe",b="searchQueryInput_CFBF",k="searchResultItem_U687",F="searchResultItemPath_uIbk",R="searchResultItemSummary_oZHr",$="searchQueryColumn_q7nx",Z="searchContextColumn_oWAF";function N(){const{siteConfig:{baseUrl:e}}=(0,n.Z)(),{selectMessage:t}=p(),{searchValue:a,searchContext:l,searchVersion:c,updateSearchPath:u,updateSearchContext:m}=y(),[h,i]=(0,r.useState)(a),[d,f]=(0,r.useState)(),[v,w]=(0,r.useState)(),x=`${e}${c}`,_=(0,r.useMemo)((()=>h?(0,o.I)({id:"theme.SearchPage.existingResultsTitle",message:'Search results for "{query}"',description:"The search page title for non-empty query"},{query:h}):(0,o.I)({id:"theme.SearchPage.emptyResultsTitle",message:"Search the documentation",description:"The search page title for empty query"})),[h]);(0,r.useEffect)((()=>{u(h),d&&(h?d(h,(e=>{w(e)})):w(void 0))}),[h,d]);const k=(0,r.useCallback)((e=>{i(e.target.value)}),[]);return(0,r.useEffect)((()=>{a&&a!==h&&i(a)}),[a]),(0,r.useEffect)((()=>{!async function(){const{wrappedIndexes:e,zhDictionary:t}=await(0,E.w)(x,l);f((()=>(0,S.v)(e,t,100)))}()}),[l,x]),r.createElement(r.Fragment,null,r.createElement(s.Z,null,r.createElement("meta",{property:"robots",content:"noindex, follow"}),r.createElement("title",null,_)),r.createElement("div",{className:"container margin-vert--lg"},r.createElement("h1",null,_),r.createElement("div",{className:"row"},r.createElement("div",{className:(0,g.Z)("col",{[$]:Array.isArray(I.Kc),"col--9":Array.isArray(I.Kc),"col--12":!Array.isArray(I.Kc)})},r.createElement("input",{type:"search",name:"q",className:b,"aria-label":"Search",onChange:k,value:h,autoComplete:"off",autoFocus:!0})),Array.isArray(I.Kc)?r.createElement("div",{className:(0,g.Z)("col","col--3","padding-left--none",Z)},r.createElement("select",{name:"search-context",className:P,id:"context-selector",value:l,onChange:e=>m(e.target.value)},r.createElement("option",{value:""},I.pQ?(0,o.I)({id:"theme.SearchPage.searchContext.everywhere",message:"everywhere"}):""),I.Kc.map((e=>r.createElement("option",{key:e,value:e},e))))):null),!d&&h&&r.createElement("div",null,r.createElement(C.Z,null)),v&&(v.length>0?r.createElement("p",null,t(v.length,(0,o.I)({id:"theme.SearchPage.documentsFound.plurals",message:"1 document found|{count} documents found",description:'Pluralized label for "{count} documents found". Use as much plural forms (separated by "|") as your language support (see https://www.unicode.org/cldr/cldr-aux/charts/34/supplemental/language_plural_rules.html)'},{count:v.length}))):r.createElement("p",null,(0,o.I)({id:"theme.SearchPage.noResultsText",message:"No documents were found",description:"The paragraph for empty search result"}))),r.createElement("section",null,v&&v.map((e=>r.createElement(q,{key:e.document.i,searchResult:e}))))))}function q(e){let{searchResult:{document:t,type:a,page:n,tokens:l,metadata:s}}=e;const o=0===a,u=2===a,m=(o?t.b:n.b).slice(),h=u?t.s:t.t;o||m.push(n.t);let i="";if(I.vc&&l.length>0){const e=new URLSearchParams;for(const t of l)e.append("_highlight",t);i=`?${e.toString()}`}return r.createElement("article",{className:k},r.createElement("h2",null,r.createElement(c.Z,{to:t.u+i+(t.h||""),dangerouslySetInnerHTML:{__html:u?(0,v.C)(h,l):(0,w.o)(h,(0,x.m)(s,"t"),l,100)}})),m.length>0&&r.createElement("p",{className:F},(0,_.e)(m)),u&&r.createElement("p",{className:R,dangerouslySetInnerHTML:{__html:(0,w.o)(t.t,(0,x.m)(s,"t"),l,100)}}))}const A=function(){return r.createElement(l.Z,null,r.createElement(N,null))}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/1a4e3797.ac674e56.js b/zh/assets/js/1a4e3797.ac674e56.js
deleted file mode 100644
index cafabe255..000000000
--- a/zh/assets/js/1a4e3797.ac674e56.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see 1a4e3797.ac674e56.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7920],{7331:e=>{function t(){this._events=this._events||{},this._maxListeners=this._maxListeners||void 0}function r(e){return"function"==typeof e}function n(e){return"object"==typeof e&&null!==e}function i(e){return void 0===e}e.exports=t,t.prototype._events=void 0,t.prototype._maxListeners=void 0,t.defaultMaxListeners=10,t.prototype.setMaxListeners=function(e){if("number"!=typeof e||e<0||isNaN(e))throw TypeError("n must be a positive number");return this._maxListeners=e,this},t.prototype.emit=function(e){var t,a,s,c,u,o;if(this._events||(this._events={}),"error"===e&&(!this._events.error||n(this._events.error)&&!this._events.error.length)){if((t=arguments[1])instanceof Error)throw t;var h=new Error('Uncaught, unspecified "error" event. ('+t+")");throw h.context=t,h}if(i(a=this._events[e]))return!1;if(r(a))switch(arguments.length){case 1:a.call(this);break;case 2:a.call(this,arguments[1]);break;case 3:a.call(this,arguments[1],arguments[2]);break;default:c=Array.prototype.slice.call(arguments,1),a.apply(this,c)}else if(n(a))for(c=Array.prototype.slice.call(arguments,1),s=(o=a.slice()).length,u=0;u<s;u++)o[u].apply(this,c);return!0},t.prototype.addListener=function(e,a){var s;if(!r(a))throw TypeError("listener must be a function");return this._events||(this._events={}),this._events.newListener&&this.emit("newListener",e,r(a.listener)?a.listener:a),this._events[e]?n(this._events[e])?this._events[e].push(a):this._events[e]=[this._events[e],a]:this._events[e]=a,n(this._events[e])&&!this._events[e].warned&&(s=i(this._maxListeners)?t.defaultMaxListeners:this._maxListeners)&&s>0&&this._events[e].length>s&&(this._events[e].warned=!0,console.error("(node) warning: possible EventEmitter memory leak detected. %d listeners added. Use emitter.setMaxListeners() to increase limit.",this._events[e].length),"function"==typeof console.trace&&console.trace()),this},t.prototype.on=t.prototype.addListener,t.prototype.once=function(e,t){if(!r(t))throw TypeError("listener must be a function");var n=!1;function i(){this.removeListener(e,i),n||(n=!0,t.apply(this,arguments))}return i.listener=t,this.on(e,i),this},t.prototype.removeListener=function(e,t){var i,a,s,c;if(!r(t))throw TypeError("listener must be a function");if(!this._events||!this._events[e])return this;if(s=(i=this._events[e]).length,a=-1,i===t||r(i.listener)&&i.listener===t)delete this._events[e],this._events.removeListener&&this.emit("removeListener",e,t);else if(n(i)){for(c=s;c-- >0;)if(i[c]===t||i[c].listener&&i[c].listener===t){a=c;break}if(a<0)return this;1===i.length?(i.length=0,delete this._events[e]):i.splice(a,1),this._events.removeListener&&this.emit("removeListener",e,t)}return this},t.prototype.removeAllListeners=function(e){var t,n;if(!this._events)return this;if(!this._events.removeListener)return 0===arguments.length?this._events={}:this._events[e]&&delete this._events[e],this;if(0===arguments.length){for(t in this._events)"removeListener"!==t&&this.removeAllListeners(t);return this.removeAllListeners("removeListener"),this._events={},this}if(r(n=this._events[e]))this.removeListener(e,n);else if(n)for(;n.length;)this.removeListener(e,n[n.length-1]);return delete this._events[e],this},t.prototype.listeners=function(e){return this._events&&this._events[e]?r(this._events[e])?[this._events[e]]:this._events[e].slice():[]},t.prototype.listenerCount=function(e){if(this._events){var t=this._events[e];if(r(t))return 1;if(t)return t.length}return 0},t.listenerCount=function(e,t){return e.listenerCount(t)}},8131:(e,t,r)=>{"use strict";var n=r(9374),i=r(7775),a=r(3076);function s(e,t,r){return new n(e,t,r)}s.version=r(4336),s.AlgoliaSearchHelper=n,s.SearchParameters=i,s.SearchResults=a,e.exports=s},8078:(e,t,r)=>{"use strict";var n=r(7331);function i(e,t){this.main=e,this.fn=t,this.lastResults=null}r(4853)(i,n),i.prototype.detach=function(){this.removeAllListeners(),this.main.detachDerivedHelper(this)},i.prototype.getModifiedState=function(e){return this.fn(e)},e.exports=i},2437:(e,t,r)=>{"use strict";var n=r(3336),i=r(9803),a=r(116),s={addRefinement:function(e,t,r){if(s.isRefined(e,t,r))return e;var i=""+r,a=e[t]?e[t].concat(i):[i],c={};return c[t]=a,n({},c,e)},removeRefinement:function(e,t,r){if(void 0===r)return s.clearRefinement(e,(function(e,r){return t===r}));var n=""+r;return s.clearRefinement(e,(function(e,r){return t===r&&n===e}))},toggleRefinement:function(e,t,r){if(void 0===r)throw new Error("toggleRefinement should be used with a value");return s.isRefined(e,t,r)?s.removeRefinement(e,t,r):s.addRefinement(e,t,r)},clearRefinement:function(e,t,r){if(void 0===t)return a(e)?{}:e;if("string"==typeof t)return i(e,[t]);if("function"==typeof t){var n=!1,s=Object.keys(e).reduce((function(i,a){var s=e[a]||[],c=s.filter((function(e){return!t(e,a,r)}));return c.length!==s.length&&(n=!0),i[a]=c,i}),{});return n?s:e}},isRefined:function(e,t,r){var n=!!e[t]&&e[t].length>0;if(void 0===r||!n)return n;var i=""+r;return-1!==e[t].indexOf(i)}};e.exports=s},7775:(e,t,r)=>{"use strict";var n=r(185),i=r(3336),a=r(2686),s=r(7888),c=r(8023),u=r(9803),o=r(116),h=r(6801),f=r(2437);function l(e,t){return Array.isArray(e)&&Array.isArray(t)?e.length===t.length&&e.every((function(e,r){return l(t[r],e)})):e===t}function m(e){var t=e?m._parseNumbers(e):{};void 0===t.userToken||h(t.userToken)||console.warn("[algoliasearch-helper] The `userToken` parameter is invalid. This can lead to wrong analytics.\n  - Format: [a-zA-Z0-9_-]{1,64}"),this.facets=t.facets||[],this.disjunctiveFacets=t.disjunctiveFacets||[],this.hierarchicalFacets=t.hierarchicalFacets||[],this.facetsRefinements=t.facetsRefinements||{},this.facetsExcludes=t.facetsExcludes||{},this.disjunctiveFacetsRefinements=t.disjunctiveFacetsRefinements||{},this.numericRefinements=t.numericRefinements||{},this.tagRefinements=t.tagRefinements||[],this.hierarchicalFacetsRefinements=t.hierarchicalFacetsRefinements||{};var r=this;Object.keys(t).forEach((function(e){var n=-1!==m.PARAMETERS.indexOf(e),i=void 0!==t[e];!n&&i&&(r[e]=t[e])}))}m.PARAMETERS=Object.keys(new m),m._parseNumbers=function(e){if(e instanceof m)return e;var t={};if(["aroundPrecision","aroundRadius","getRankingInfo","minWordSizefor2Typos","minWordSizefor1Typo","page","maxValuesPerFacet","distinct","minimumAroundRadius","hitsPerPage","minProximity"].forEach((function(r){var n=e[r];if("string"==typeof n){var i=parseFloat(n);t[r]=isNaN(i)?n:i}})),Array.isArray(e.insideBoundingBox)&&(t.insideBoundingBox=e.insideBoundingBox.map((function(e){return Array.isArray(e)?e.map((function(e){return parseFloat(e)})):e}))),e.numericRefinements){var r={};Object.keys(e.numericRefinements).forEach((function(t){var n=e.numericRefinements[t]||{};r[t]={},Object.keys(n).forEach((function(e){var i=n[e].map((function(e){return Array.isArray(e)?e.map((function(e){return"string"==typeof e?parseFloat(e):e})):"string"==typeof e?parseFloat(e):e}));r[t][e]=i}))})),t.numericRefinements=r}return n({},e,t)},m.make=function(e){var t=new m(e);return(e.hierarchicalFacets||[]).forEach((function(e){if(e.rootPath){var r=t.getHierarchicalRefinement(e.name);r.length>0&&0!==r[0].indexOf(e.rootPath)&&(t=t.clearRefinements(e.name)),0===(r=t.getHierarchicalRefinement(e.name)).length&&(t=t.toggleHierarchicalFacetRefinement(e.name,e.rootPath))}})),t},m.validate=function(e,t){var r=t||{};return e.tagFilters&&r.tagRefinements&&r.tagRefinements.length>0?new Error("[Tags] Cannot switch from the managed tag API to the advanced API. It is probably an error, if it is really what you want, you should first clear the tags with clearTags method."):e.tagRefinements.length>0&&r.tagFilters?new Error("[Tags] Cannot switch from the advanced tag API to the managed API. It is probably an error, if it is not, you should first clear the tags with clearTags method."):e.numericFilters&&r.numericRefinements&&o(r.numericRefinements)?new Error("[Numeric filters] Can't switch from the advanced to the managed API. It is probably an error, if this is really what you want, you have to first clear the numeric filters."):o(e.numericRefinements)&&r.numericFilters?new Error("[Numeric filters] Can't switch from the managed API to the advanced. It is probably an error, if this is really what you want, you have to first clear the numeric filters."):null},m.prototype={constructor:m,clearRefinements:function(e){var t={numericRefinements:this._clearNumericRefinements(e),facetsRefinements:f.clearRefinement(this.facetsRefinements,e,"conjunctiveFacet"),facetsExcludes:f.clearRefinement(this.facetsExcludes,e,"exclude"),disjunctiveFacetsRefinements:f.clearRefinement(this.disjunctiveFacetsRefinements,e,"disjunctiveFacet"),hierarchicalFacetsRefinements:f.clearRefinement(this.hierarchicalFacetsRefinements,e,"hierarchicalFacet")};return t.numericRefinements===this.numericRefinements&&t.facetsRefinements===this.facetsRefinements&&t.facetsExcludes===this.facetsExcludes&&t.disjunctiveFacetsRefinements===this.disjunctiveFacetsRefinements&&t.hierarchicalFacetsRefinements===this.hierarchicalFacetsRefinements?this:this.setQueryParameters(t)},clearTags:function(){return void 0===this.tagFilters&&0===this.tagRefinements.length?this:this.setQueryParameters({tagFilters:void 0,tagRefinements:[]})},setIndex:function(e){return e===this.index?this:this.setQueryParameters({index:e})},setQuery:function(e){return e===this.query?this:this.setQueryParameters({query:e})},setPage:function(e){return e===this.page?this:this.setQueryParameters({page:e})},setFacets:function(e){return this.setQueryParameters({facets:e})},setDisjunctiveFacets:function(e){return this.setQueryParameters({disjunctiveFacets:e})},setHitsPerPage:function(e){return this.hitsPerPage===e?this:this.setQueryParameters({hitsPerPage:e})},setTypoTolerance:function(e){return this.typoTolerance===e?this:this.setQueryParameters({typoTolerance:e})},addNumericRefinement:function(e,t,r){var i=c(r);if(this.isNumericRefined(e,t,i))return this;var a=n({},this.numericRefinements);return a[e]=n({},a[e]),a[e][t]?(a[e][t]=a[e][t].slice(),a[e][t].push(i)):a[e][t]=[i],this.setQueryParameters({numericRefinements:a})},getConjunctiveRefinements:function(e){return this.isConjunctiveFacet(e)&&this.facetsRefinements[e]||[]},getDisjunctiveRefinements:function(e){return this.isDisjunctiveFacet(e)&&this.disjunctiveFacetsRefinements[e]||[]},getHierarchicalRefinement:function(e){return this.hierarchicalFacetsRefinements[e]||[]},getExcludeRefinements:function(e){return this.isConjunctiveFacet(e)&&this.facetsExcludes[e]||[]},removeNumericRefinement:function(e,t,r){return void 0!==r?this.isNumericRefined(e,t,r)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(n,i){return i===e&&n.op===t&&l(n.val,c(r))}))}):this:void 0!==t?this.isNumericRefined(e,t)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(r,n){return n===e&&r.op===t}))}):this:this.isNumericRefined(e)?this.setQueryParameters({numericRefinements:this._clearNumericRefinements((function(t,r){return r===e}))}):this},getNumericRefinements:function(e){return this.numericRefinements[e]||{}},getNumericRefinement:function(e,t){return this.numericRefinements[e]&&this.numericRefinements[e][t]},_clearNumericRefinements:function(e){if(void 0===e)return o(this.numericRefinements)?{}:this.numericRefinements;if("string"==typeof e)return u(this.numericRefinements,[e]);if("function"==typeof e){var t=!1,r=this.numericRefinements,n=Object.keys(r).reduce((function(n,i){var a=r[i],s={};return a=a||{},Object.keys(a).forEach((function(r){var n=a[r]||[],c=[];n.forEach((function(t){e({val:t,op:r},i,"numeric")||c.push(t)})),c.length!==n.length&&(t=!0),s[r]=c})),n[i]=s,n}),{});return t?n:this.numericRefinements}},addFacet:function(e){return this.isConjunctiveFacet(e)?this:this.setQueryParameters({facets:this.facets.concat([e])})},addDisjunctiveFacet:function(e){return this.isDisjunctiveFacet(e)?this:this.setQueryParameters({disjunctiveFacets:this.disjunctiveFacets.concat([e])})},addHierarchicalFacet:function(e){if(this.isHierarchicalFacet(e.name))throw new Error("Cannot declare two hierarchical facets with the same name: `"+e.name+"`");return this.setQueryParameters({hierarchicalFacets:this.hierarchicalFacets.concat([e])})},addFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsRefinements,e,t)?this:this.setQueryParameters({facetsRefinements:f.addRefinement(this.facetsRefinements,e,t)})},addExcludeRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsExcludes,e,t)?this:this.setQueryParameters({facetsExcludes:f.addRefinement(this.facetsExcludes,e,t)})},addDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return f.isRefined(this.disjunctiveFacetsRefinements,e,t)?this:this.setQueryParameters({disjunctiveFacetsRefinements:f.addRefinement(this.disjunctiveFacetsRefinements,e,t)})},addTagRefinement:function(e){if(this.isTagRefined(e))return this;var t={tagRefinements:this.tagRefinements.concat(e)};return this.setQueryParameters(t)},removeFacet:function(e){return this.isConjunctiveFacet(e)?this.clearRefinements(e).setQueryParameters({facets:this.facets.filter((function(t){return t!==e}))}):this},removeDisjunctiveFacet:function(e){return this.isDisjunctiveFacet(e)?this.clearRefinements(e).setQueryParameters({disjunctiveFacets:this.disjunctiveFacets.filter((function(t){return t!==e}))}):this},removeHierarchicalFacet:function(e){return this.isHierarchicalFacet(e)?this.clearRefinements(e).setQueryParameters({hierarchicalFacets:this.hierarchicalFacets.filter((function(t){return t.name!==e}))}):this},removeFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsRefinements,e,t)?this.setQueryParameters({facetsRefinements:f.removeRefinement(this.facetsRefinements,e,t)}):this},removeExcludeRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return f.isRefined(this.facetsExcludes,e,t)?this.setQueryParameters({facetsExcludes:f.removeRefinement(this.facetsExcludes,e,t)}):this},removeDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return f.isRefined(this.disjunctiveFacetsRefinements,e,t)?this.setQueryParameters({disjunctiveFacetsRefinements:f.removeRefinement(this.disjunctiveFacetsRefinements,e,t)}):this},removeTagRefinement:function(e){if(!this.isTagRefined(e))return this;var t={tagRefinements:this.tagRefinements.filter((function(t){return t!==e}))};return this.setQueryParameters(t)},toggleRefinement:function(e,t){return this.toggleFacetRefinement(e,t)},toggleFacetRefinement:function(e,t){if(this.isHierarchicalFacet(e))return this.toggleHierarchicalFacetRefinement(e,t);if(this.isConjunctiveFacet(e))return this.toggleConjunctiveFacetRefinement(e,t);if(this.isDisjunctiveFacet(e))return this.toggleDisjunctiveFacetRefinement(e,t);throw new Error("Cannot refine the undeclared facet "+e+"; it should be added to the helper options facets, disjunctiveFacets or hierarchicalFacets")},toggleConjunctiveFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return this.setQueryParameters({facetsRefinements:f.toggleRefinement(this.facetsRefinements,e,t)})},toggleExcludeFacetRefinement:function(e,t){if(!this.isConjunctiveFacet(e))throw new Error(e+" is not defined in the facets attribute of the helper configuration");return this.setQueryParameters({facetsExcludes:f.toggleRefinement(this.facetsExcludes,e,t)})},toggleDisjunctiveFacetRefinement:function(e,t){if(!this.isDisjunctiveFacet(e))throw new Error(e+" is not defined in the disjunctiveFacets attribute of the helper configuration");return this.setQueryParameters({disjunctiveFacetsRefinements:f.toggleRefinement(this.disjunctiveFacetsRefinements,e,t)})},toggleHierarchicalFacetRefinement:function(e,t){if(!this.isHierarchicalFacet(e))throw new Error(e+" is not defined in the hierarchicalFacets attribute of the helper configuration");var r=this._getHierarchicalFacetSeparator(this.getHierarchicalFacetByName(e)),n={};return void 0!==this.hierarchicalFacetsRefinements[e]&&this.hierarchicalFacetsRefinements[e].length>0&&(this.hierarchicalFacetsRefinements[e][0]===t||0===this.hierarchicalFacetsRefinements[e][0].indexOf(t+r))?-1===t.indexOf(r)?n[e]=[]:n[e]=[t.slice(0,t.lastIndexOf(r))]:n[e]=[t],this.setQueryParameters({hierarchicalFacetsRefinements:i({},n,this.hierarchicalFacetsRefinements)})},addHierarchicalFacetRefinement:function(e,t){if(this.isHierarchicalFacetRefined(e))throw new Error(e+" is already refined.");if(!this.isHierarchicalFacet(e))throw new Error(e+" is not defined in the hierarchicalFacets attribute of the helper configuration.");var r={};return r[e]=[t],this.setQueryParameters({hierarchicalFacetsRefinements:i({},r,this.hierarchicalFacetsRefinements)})},removeHierarchicalFacetRefinement:function(e){if(!this.isHierarchicalFacetRefined(e))return this;var t={};return t[e]=[],this.setQueryParameters({hierarchicalFacetsRefinements:i({},t,this.hierarchicalFacetsRefinements)})},toggleTagRefinement:function(e){return this.isTagRefined(e)?this.removeTagRefinement(e):this.addTagRefinement(e)},isDisjunctiveFacet:function(e){return this.disjunctiveFacets.indexOf(e)>-1},isHierarchicalFacet:function(e){return void 0!==this.getHierarchicalFacetByName(e)},isConjunctiveFacet:function(e){return this.facets.indexOf(e)>-1},isFacetRefined:function(e,t){return!!this.isConjunctiveFacet(e)&&f.isRefined(this.facetsRefinements,e,t)},isExcludeRefined:function(e,t){return!!this.isConjunctiveFacet(e)&&f.isRefined(this.facetsExcludes,e,t)},isDisjunctiveFacetRefined:function(e,t){return!!this.isDisjunctiveFacet(e)&&f.isRefined(this.disjunctiveFacetsRefinements,e,t)},isHierarchicalFacetRefined:function(e,t){if(!this.isHierarchicalFacet(e))return!1;var r=this.getHierarchicalRefinement(e);return t?-1!==r.indexOf(t):r.length>0},isNumericRefined:function(e,t,r){if(void 0===r&&void 0===t)return!!this.numericRefinements[e];var n=this.numericRefinements[e]&&void 0!==this.numericRefinements[e][t];if(void 0===r||!n)return n;var i,a,u=c(r),o=void 0!==(i=this.numericRefinements[e][t],a=u,s(i,(function(e){return l(e,a)})));return n&&o},isTagRefined:function(e){return-1!==this.tagRefinements.indexOf(e)},getRefinedDisjunctiveFacets:function(){var e=this,t=a(Object.keys(this.numericRefinements).filter((function(t){return Object.keys(e.numericRefinements[t]).length>0})),this.disjunctiveFacets);return Object.keys(this.disjunctiveFacetsRefinements).filter((function(t){return e.disjunctiveFacetsRefinements[t].length>0})).concat(t).concat(this.getRefinedHierarchicalFacets())},getRefinedHierarchicalFacets:function(){var e=this;return a(this.hierarchicalFacets.map((function(e){return e.name})),Object.keys(this.hierarchicalFacetsRefinements).filter((function(t){return e.hierarchicalFacetsRefinements[t].length>0})))},getUnrefinedDisjunctiveFacets:function(){var e=this.getRefinedDisjunctiveFacets();return this.disjunctiveFacets.filter((function(t){return-1===e.indexOf(t)}))},managedParameters:["index","facets","disjunctiveFacets","facetsRefinements","hierarchicalFacets","facetsExcludes","disjunctiveFacetsRefinements","numericRefinements","tagRefinements","hierarchicalFacetsRefinements"],getQueryParams:function(){var e=this.managedParameters,t={},r=this;return Object.keys(this).forEach((function(n){var i=r[n];-1===e.indexOf(n)&&void 0!==i&&(t[n]=i)})),t},setQueryParameter:function(e,t){if(this[e]===t)return this;var r={};return r[e]=t,this.setQueryParameters(r)},setQueryParameters:function(e){if(!e)return this;var t=m.validate(this,e);if(t)throw t;var r=this,n=m._parseNumbers(e),i=Object.keys(this).reduce((function(e,t){return e[t]=r[t],e}),{}),a=Object.keys(n).reduce((function(e,t){var r=void 0!==e[t],i=void 0!==n[t];return r&&!i?u(e,[t]):(i&&(e[t]=n[t]),e)}),i);return new this.constructor(a)},resetPage:function(){return void 0===this.page?this:this.setPage(0)},_getHierarchicalFacetSortBy:function(e){return e.sortBy||["isRefined:desc","name:asc"]},_getHierarchicalFacetSeparator:function(e){return e.separator||" > "},_getHierarchicalRootPath:function(e){return e.rootPath||null},_getHierarchicalShowParentLevel:function(e){return"boolean"!=typeof e.showParentLevel||e.showParentLevel},getHierarchicalFacetByName:function(e){return s(this.hierarchicalFacets,(function(t){return t.name===e}))},getHierarchicalFacetBreadcrumb:function(e){if(!this.isHierarchicalFacet(e))return[];var t=this.getHierarchicalRefinement(e)[0];if(!t)return[];var r=this._getHierarchicalFacetSeparator(this.getHierarchicalFacetByName(e));return t.split(r).map((function(e){return e.trim()}))},toString:function(){return JSON.stringify(this,null,2)}},e.exports=m},210:(e,t,r)=>{"use strict";e.exports=function(e){return function(t,r){var s=e.hierarchicalFacets[r],o=e.hierarchicalFacetsRefinements[s.name]&&e.hierarchicalFacetsRefinements[s.name][0]||"",h=e._getHierarchicalFacetSeparator(s),f=e._getHierarchicalRootPath(s),l=e._getHierarchicalShowParentLevel(s),m=a(e._getHierarchicalFacetSortBy(s)),d=t.every((function(e){return e.exhaustive})),p=function(e,t,r,a,s){return function(o,h,f){var l=o;if(f>0){var m=0;for(l=o;m<f;){var d=l&&Array.isArray(l.data)?l.data:[];l=i(d,(function(e){return e.isRefined})),m++}}if(l){var p=Object.keys(h.data).map((function(e){return[e,h.data[e]]})).filter((function(e){return function(e,t,r,n,i,a){if(i&&(0!==e.indexOf(i)||i===e))return!1;return!i&&-1===e.indexOf(n)||i&&e.split(n).length-i.split(n).length==1||-1===e.indexOf(n)&&-1===r.indexOf(n)||0===r.indexOf(e)||0===e.indexOf(t+n)&&(a||0===e.indexOf(r))}(e[0],l.path||r,s,t,r,a)}));l.data=n(p.map((function(e){var r=e[0];return function(e,t,r,n,i){var a=t.split(r);return{name:a[a.length-1].trim(),path:t,escapedValue:c(t),count:e,isRefined:n===t||0===n.indexOf(t+r),exhaustive:i,data:null}}(e[1],r,t,u(s),h.exhaustive)})),e[0],e[1])}return o}}(m,h,f,l,o),v=t;return f&&(v=t.slice(f.split(h).length)),v.reduce(p,{name:e.hierarchicalFacets[r].name,count:null,isRefined:!0,path:null,escapedValue:null,exhaustive:d,data:null})}};var n=r(2148),i=r(7888),a=r(2293),s=r(4039),c=s.escapeFacetValue,u=s.unescapeFacetValue},3076:(e,t,r)=>{"use strict";var n=r(185),i=r(3336),a=r(2148),s=r(4587),c=r(7888),u=r(9725),o=r(2293),h=r(4039),f=h.escapeFacetValue,l=h.unescapeFacetValue,m=r(210);function d(e){var t={};return e.forEach((function(e,r){t[e]=r})),t}function p(e,t,r){t&&t[r]&&(e.stats=t[r])}function v(e,t,r){var a=t[0];this._rawResults=t;var o=this;Object.keys(a).forEach((function(e){o[e]=a[e]})),Object.keys(r||{}).forEach((function(e){o[e]=r[e]})),this.processingTimeMS=t.reduce((function(e,t){return void 0===t.processingTimeMS?e:e+t.processingTimeMS}),0),this.disjunctiveFacets=[],this.hierarchicalFacets=e.hierarchicalFacets.map((function(){return[]})),this.facets=[];var h=e.getRefinedDisjunctiveFacets(),f=d(e.facets),v=d(e.disjunctiveFacets),g=1,y=a.facets||{};Object.keys(y).forEach((function(t){var r,n,i=y[t],s=(r=e.hierarchicalFacets,n=t,c(r,(function(e){return(e.attributes||[]).indexOf(n)>-1})));if(s){var h=s.attributes.indexOf(t),l=u(e.hierarchicalFacets,(function(e){return e.name===s.name}));o.hierarchicalFacets[l][h]={attribute:t,data:i,exhaustive:a.exhaustiveFacetsCount}}else{var m,d=-1!==e.disjunctiveFacets.indexOf(t),g=-1!==e.facets.indexOf(t);d&&(m=v[t],o.disjunctiveFacets[m]={name:t,data:i,exhaustive:a.exhaustiveFacetsCount},p(o.disjunctiveFacets[m],a.facets_stats,t)),g&&(m=f[t],o.facets[m]={name:t,data:i,exhaustive:a.exhaustiveFacetsCount},p(o.facets[m],a.facets_stats,t))}})),this.hierarchicalFacets=s(this.hierarchicalFacets),h.forEach((function(r){var s=t[g],c=s&&s.facets?s.facets:{},h=e.getHierarchicalFacetByName(r);Object.keys(c).forEach((function(t){var r,f=c[t];if(h){r=u(e.hierarchicalFacets,(function(e){return e.name===h.name}));var m=u(o.hierarchicalFacets[r],(function(e){return e.attribute===t}));if(-1===m)return;o.hierarchicalFacets[r][m].data=n({},o.hierarchicalFacets[r][m].data,f)}else{r=v[t];var d=a.facets&&a.facets[t]||{};o.disjunctiveFacets[r]={name:t,data:i({},f,d),exhaustive:s.exhaustiveFacetsCount},p(o.disjunctiveFacets[r],s.facets_stats,t),e.disjunctiveFacetsRefinements[t]&&e.disjunctiveFacetsRefinements[t].forEach((function(n){!o.disjunctiveFacets[r].data[n]&&e.disjunctiveFacetsRefinements[t].indexOf(l(n))>-1&&(o.disjunctiveFacets[r].data[n]=0)}))}})),g++})),e.getRefinedHierarchicalFacets().forEach((function(r){var n=e.getHierarchicalFacetByName(r),a=e._getHierarchicalFacetSeparator(n),s=e.getHierarchicalRefinement(r);0===s.length||s[0].split(a).length<2||t.slice(g).forEach((function(t){var r=t&&t.facets?t.facets:{};Object.keys(r).forEach((function(t){var c=r[t],h=u(e.hierarchicalFacets,(function(e){return e.name===n.name})),f=u(o.hierarchicalFacets[h],(function(e){return e.attribute===t}));if(-1!==f){var l={};if(s.length>0){var m=s[0].split(a)[0];l[m]=o.hierarchicalFacets[h][f].data[m]}o.hierarchicalFacets[h][f].data=i(l,c,o.hierarchicalFacets[h][f].data)}})),g++}))})),Object.keys(e.facetsExcludes).forEach((function(t){var r=e.facetsExcludes[t],n=f[t];o.facets[n]={name:t,data:a.facets[t],exhaustive:a.exhaustiveFacetsCount},r.forEach((function(e){o.facets[n]=o.facets[n]||{name:t},o.facets[n].data=o.facets[n].data||{},o.facets[n].data[e]=0}))})),this.hierarchicalFacets=this.hierarchicalFacets.map(m(e)),this.facets=s(this.facets),this.disjunctiveFacets=s(this.disjunctiveFacets),this._state=e}function g(e,t){function r(e){return e.name===t}if(e._state.isConjunctiveFacet(t)){var n=c(e.facets,r);return n?Object.keys(n.data).map((function(r){var i=f(r);return{name:r,escapedValue:i,count:n.data[r],isRefined:e._state.isFacetRefined(t,i),isExcluded:e._state.isExcludeRefined(t,r)}})):[]}if(e._state.isDisjunctiveFacet(t)){var i=c(e.disjunctiveFacets,r);return i?Object.keys(i.data).map((function(r){var n=f(r);return{name:r,escapedValue:n,count:i.data[r],isRefined:e._state.isDisjunctiveFacetRefined(t,n)}})):[]}if(e._state.isHierarchicalFacet(t)){var a=c(e.hierarchicalFacets,r);if(!a)return a;var s=e._state.getHierarchicalFacetByName(t),u=l(e._state.getHierarchicalRefinement(t)[0]||"").split(e._state._getHierarchicalFacetSeparator(s));return u.unshift(t),y(a,u,0),a}}function y(e,t,r){e.isRefined=e.name===t[r],e.data&&e.data.forEach((function(e){y(e,t,r+1)}))}function R(e,t,r,n){if(n=n||0,Array.isArray(t))return e(t,r[n]);if(!t.data||0===t.data.length)return t;var a=t.data.map((function(t){return R(e,t,r,n+1)})),s=e(a,r[n]);return i({data:s},t)}function F(e,t){var r=c(e,(function(e){return e.name===t}));return r&&r.stats}function b(e,t,r,n,i){var a=c(i,(function(e){return e.name===r})),s=a&&a.data&&a.data[n]?a.data[n]:0,u=a&&a.exhaustive||!1;return{type:t,attributeName:r,name:n,count:s,exhaustive:u}}v.prototype.getFacetByName=function(e){function t(t){return t.name===e}return c(this.facets,t)||c(this.disjunctiveFacets,t)||c(this.hierarchicalFacets,t)},v.DEFAULT_SORT=["isRefined:desc","count:desc","name:asc"],v.prototype.getFacetValues=function(e,t){var r=g(this,e);if(r){var n,s=i({},t,{sortBy:v.DEFAULT_SORT,facetOrdering:!(t&&t.sortBy)}),c=this;if(Array.isArray(r))n=[e];else n=c._state.getHierarchicalFacetByName(r.name).attributes;return R((function(e,t){if(s.facetOrdering){var r=function(e,t){return e.renderingContent&&e.renderingContent.facetOrdering&&e.renderingContent.facetOrdering.values&&e.renderingContent.facetOrdering.values[t]}(c,t);if(Boolean(r))return function(e,t){var r=[],n=[],i=(t.order||[]).reduce((function(e,t,r){return e[t]=r,e}),{});e.forEach((function(e){var t=e.path||e.name;void 0!==i[t]?r[i[t]]=e:n.push(e)})),r=r.filter((function(e){return e}));var s,c=t.sortRemainingBy;return"hidden"===c?r:(s="alpha"===c?[["path","name"],["asc","asc"]]:[["count"],["desc"]],r.concat(a(n,s[0],s[1])))}(e,r)}if(Array.isArray(s.sortBy)){var n=o(s.sortBy,v.DEFAULT_SORT);return a(e,n[0],n[1])}if("function"==typeof s.sortBy)return function(e,t){return t.sort(e)}(s.sortBy,e);throw new Error("options.sortBy is optional but if defined it must be either an array of string (predicates) or a sorting function")}),r,n)}},v.prototype.getFacetStats=function(e){return this._state.isConjunctiveFacet(e)?F(this.facets,e):this._state.isDisjunctiveFacet(e)?F(this.disjunctiveFacets,e):void 0},v.prototype.getRefinements=function(){var e=this._state,t=this,r=[];return Object.keys(e.facetsRefinements).forEach((function(n){e.facetsRefinements[n].forEach((function(i){r.push(b(e,"facet",n,i,t.facets))}))})),Object.keys(e.facetsExcludes).forEach((function(n){e.facetsExcludes[n].forEach((function(i){r.push(b(e,"exclude",n,i,t.facets))}))})),Object.keys(e.disjunctiveFacetsRefinements).forEach((function(n){e.disjunctiveFacetsRefinements[n].forEach((function(i){r.push(b(e,"disjunctive",n,i,t.disjunctiveFacets))}))})),Object.keys(e.hierarchicalFacetsRefinements).forEach((function(n){e.hierarchicalFacetsRefinements[n].forEach((function(i){r.push(function(e,t,r,n){var i=e.getHierarchicalFacetByName(t),a=e._getHierarchicalFacetSeparator(i),s=r.split(a),u=c(n,(function(e){return e.name===t})),o=s.reduce((function(e,t){var r=e&&c(e.data,(function(e){return e.name===t}));return void 0!==r?r:e}),u),h=o&&o.count||0,f=o&&o.exhaustive||!1,l=o&&o.path||"";return{type:"hierarchical",attributeName:t,name:l,count:h,exhaustive:f}}(e,n,i,t.hierarchicalFacets))}))})),Object.keys(e.numericRefinements).forEach((function(t){var n=e.numericRefinements[t];Object.keys(n).forEach((function(e){n[e].forEach((function(n){r.push({type:"numeric",attributeName:t,name:n,numericValue:n,operator:e})}))}))})),e.tagRefinements.forEach((function(e){r.push({type:"tag",attributeName:"_tags",name:e})})),r},e.exports=v},9374:(e,t,r)=>{"use strict";var n=r(7775),i=r(3076),a=r(8078),s=r(6394),c=r(7331),u=r(4853),o=r(116),h=r(9803),f=r(185),l=r(4336),m=r(4039).escapeFacetValue;function d(e,t,r){"function"==typeof e.addAlgoliaAgent&&e.addAlgoliaAgent("JS Helper ("+l+")"),this.setClient(e);var i=r||{};i.index=t,this.state=n.make(i),this.lastResults=null,this._queryId=0,this._lastQueryIdReceived=-1,this.derivedHelpers=[],this._currentNbQueries=0}function p(e){if(e<0)throw new Error("Page requested below 0.");return this._change({state:this.state.setPage(e),isPageReset:!1}),this}function v(){return this.state.page}u(d,c),d.prototype.search=function(){return this._search({onlyWithDerivedHelpers:!1}),this},d.prototype.searchOnlyWithDerivedHelpers=function(){return this._search({onlyWithDerivedHelpers:!0}),this},d.prototype.getQuery=function(){var e=this.state;return s._getHitsSearchParams(e)},d.prototype.searchOnce=function(e,t){var r=e?this.state.setQueryParameters(e):this.state,n=s._getQueries(r.index,r),a=this;if(this._currentNbQueries++,this.emit("searchOnce",{state:r}),!t)return this.client.search(n).then((function(e){return a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),{content:new i(r,e.results),state:r,_originalResponse:e}}),(function(e){throw a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),e}));this.client.search(n).then((function(e){a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),t(null,new i(r,e.results),r)})).catch((function(e){a._currentNbQueries--,0===a._currentNbQueries&&a.emit("searchQueueEmpty"),t(e,null,r)}))},d.prototype.findAnswers=function(e){console.warn("[algoliasearch-helper] answers is no longer supported");var t=this.state,r=this.derivedHelpers[0];if(!r)return Promise.resolve([]);var n=r.getModifiedState(t),i=f({attributesForPrediction:e.attributesForPrediction,nbHits:e.nbHits},{params:h(s._getHitsSearchParams(n),["attributesToSnippet","hitsPerPage","restrictSearchableAttributes","snippetEllipsisText"])}),a="search for answers was called, but this client does not have a function client.initIndex(index).findAnswers";if("function"!=typeof this.client.initIndex)throw new Error(a);var c=this.client.initIndex(n.index);if("function"!=typeof c.findAnswers)throw new Error(a);return c.findAnswers(n.query,e.queryLanguages,i)},d.prototype.searchForFacetValues=function(e,t,r,n){var i="function"==typeof this.client.searchForFacetValues,a="function"==typeof this.client.initIndex;if(!i&&!a&&"function"!=typeof this.client.search)throw new Error("search for facet values (searchable) was called, but this client does not have a function client.searchForFacetValues or client.initIndex(index).searchForFacetValues");var c=this.state.setQueryParameters(n||{}),u=c.isDisjunctiveFacet(e),o=s.getSearchForFacetQuery(e,t,r,c);this._currentNbQueries++;var h,f=this;return i?h=this.client.searchForFacetValues([{indexName:c.index,params:o}]):a?h=this.client.initIndex(c.index).searchForFacetValues(o):(delete o.facetName,h=this.client.search([{type:"facet",facet:e,indexName:c.index,params:o}]).then((function(e){return e.results[0]}))),this.emit("searchForFacetValues",{state:c,facet:e,query:t}),h.then((function(t){return f._currentNbQueries--,0===f._currentNbQueries&&f.emit("searchQueueEmpty"),(t=Array.isArray(t)?t[0]:t).facetHits.forEach((function(t){t.escapedValue=m(t.value),t.isRefined=u?c.isDisjunctiveFacetRefined(e,t.escapedValue):c.isFacetRefined(e,t.escapedValue)})),t}),(function(e){throw f._currentNbQueries--,0===f._currentNbQueries&&f.emit("searchQueueEmpty"),e}))},d.prototype.setQuery=function(e){return this._change({state:this.state.resetPage().setQuery(e),isPageReset:!0}),this},d.prototype.clearRefinements=function(e){return this._change({state:this.state.resetPage().clearRefinements(e),isPageReset:!0}),this},d.prototype.clearTags=function(){return this._change({state:this.state.resetPage().clearTags(),isPageReset:!0}),this},d.prototype.addDisjunctiveFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addDisjunctiveFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addDisjunctiveRefine=function(){return this.addDisjunctiveFacetRefinement.apply(this,arguments)},d.prototype.addHierarchicalFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addHierarchicalFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addNumericRefinement=function(e,t,r){return this._change({state:this.state.resetPage().addNumericRefinement(e,t,r),isPageReset:!0}),this},d.prototype.addFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().addFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.addRefine=function(){return this.addFacetRefinement.apply(this,arguments)},d.prototype.addFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().addExcludeRefinement(e,t),isPageReset:!0}),this},d.prototype.addExclude=function(){return this.addFacetExclusion.apply(this,arguments)},d.prototype.addTag=function(e){return this._change({state:this.state.resetPage().addTagRefinement(e),isPageReset:!0}),this},d.prototype.removeNumericRefinement=function(e,t,r){return this._change({state:this.state.resetPage().removeNumericRefinement(e,t,r),isPageReset:!0}),this},d.prototype.removeDisjunctiveFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().removeDisjunctiveFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.removeDisjunctiveRefine=function(){return this.removeDisjunctiveFacetRefinement.apply(this,arguments)},d.prototype.removeHierarchicalFacetRefinement=function(e){return this._change({state:this.state.resetPage().removeHierarchicalFacetRefinement(e),isPageReset:!0}),this},d.prototype.removeFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().removeFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.removeRefine=function(){return this.removeFacetRefinement.apply(this,arguments)},d.prototype.removeFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().removeExcludeRefinement(e,t),isPageReset:!0}),this},d.prototype.removeExclude=function(){return this.removeFacetExclusion.apply(this,arguments)},d.prototype.removeTag=function(e){return this._change({state:this.state.resetPage().removeTagRefinement(e),isPageReset:!0}),this},d.prototype.toggleFacetExclusion=function(e,t){return this._change({state:this.state.resetPage().toggleExcludeFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.toggleExclude=function(){return this.toggleFacetExclusion.apply(this,arguments)},d.prototype.toggleRefinement=function(e,t){return this.toggleFacetRefinement(e,t)},d.prototype.toggleFacetRefinement=function(e,t){return this._change({state:this.state.resetPage().toggleFacetRefinement(e,t),isPageReset:!0}),this},d.prototype.toggleRefine=function(){return this.toggleFacetRefinement.apply(this,arguments)},d.prototype.toggleTag=function(e){return this._change({state:this.state.resetPage().toggleTagRefinement(e),isPageReset:!0}),this},d.prototype.nextPage=function(){var e=this.state.page||0;return this.setPage(e+1)},d.prototype.previousPage=function(){var e=this.state.page||0;return this.setPage(e-1)},d.prototype.setCurrentPage=p,d.prototype.setPage=p,d.prototype.setIndex=function(e){return this._change({state:this.state.resetPage().setIndex(e),isPageReset:!0}),this},d.prototype.setQueryParameter=function(e,t){return this._change({state:this.state.resetPage().setQueryParameter(e,t),isPageReset:!0}),this},d.prototype.setState=function(e){return this._change({state:n.make(e),isPageReset:!1}),this},d.prototype.overrideStateWithoutTriggeringChangeEvent=function(e){return this.state=new n(e),this},d.prototype.hasRefinements=function(e){return!!o(this.state.getNumericRefinements(e))||(this.state.isConjunctiveFacet(e)?this.state.isFacetRefined(e):this.state.isDisjunctiveFacet(e)?this.state.isDisjunctiveFacetRefined(e):!!this.state.isHierarchicalFacet(e)&&this.state.isHierarchicalFacetRefined(e))},d.prototype.isExcluded=function(e,t){return this.state.isExcludeRefined(e,t)},d.prototype.isDisjunctiveRefined=function(e,t){return this.state.isDisjunctiveFacetRefined(e,t)},d.prototype.hasTag=function(e){return this.state.isTagRefined(e)},d.prototype.isTagRefined=function(){return this.hasTagRefinements.apply(this,arguments)},d.prototype.getIndex=function(){return this.state.index},d.prototype.getCurrentPage=v,d.prototype.getPage=v,d.prototype.getTags=function(){return this.state.tagRefinements},d.prototype.getRefinements=function(e){var t=[];if(this.state.isConjunctiveFacet(e))this.state.getConjunctiveRefinements(e).forEach((function(e){t.push({value:e,type:"conjunctive"})})),this.state.getExcludeRefinements(e).forEach((function(e){t.push({value:e,type:"exclude"})}));else if(this.state.isDisjunctiveFacet(e)){this.state.getDisjunctiveRefinements(e).forEach((function(e){t.push({value:e,type:"disjunctive"})}))}var r=this.state.getNumericRefinements(e);return Object.keys(r).forEach((function(e){var n=r[e];t.push({value:n,operator:e,type:"numeric"})})),t},d.prototype.getNumericRefinement=function(e,t){return this.state.getNumericRefinement(e,t)},d.prototype.getHierarchicalFacetBreadcrumb=function(e){return this.state.getHierarchicalFacetBreadcrumb(e)},d.prototype._search=function(e){var t=this.state,r=[],n=[];e.onlyWithDerivedHelpers||(n=s._getQueries(t.index,t),r.push({state:t,queriesCount:n.length,helper:this}),this.emit("search",{state:t,results:this.lastResults}));var i=this.derivedHelpers.map((function(e){var n=e.getModifiedState(t),i=s._getQueries(n.index,n);return r.push({state:n,queriesCount:i.length,helper:e}),e.emit("search",{state:n,results:e.lastResults}),i})),a=Array.prototype.concat.apply(n,i),c=this._queryId++;this._currentNbQueries++;try{this.client.search(a).then(this._dispatchAlgoliaResponse.bind(this,r,c)).catch(this._dispatchAlgoliaError.bind(this,c))}catch(u){this.emit("error",{error:u})}},d.prototype._dispatchAlgoliaResponse=function(e,t,r){if(!(t<this._lastQueryIdReceived)){this._currentNbQueries-=t-this._lastQueryIdReceived,this._lastQueryIdReceived=t,0===this._currentNbQueries&&this.emit("searchQueueEmpty");var n=r.results.slice();e.forEach((function(e){var t=e.state,r=e.queriesCount,a=e.helper,s=n.splice(0,r),c=a.lastResults=new i(t,s);a.emit("result",{results:c,state:t})}))}},d.prototype._dispatchAlgoliaError=function(e,t){e<this._lastQueryIdReceived||(this._currentNbQueries-=e-this._lastQueryIdReceived,this._lastQueryIdReceived=e,this.emit("error",{error:t}),0===this._currentNbQueries&&this.emit("searchQueueEmpty"))},d.prototype.containsRefinement=function(e,t,r,n){return e||0!==t.length||0!==r.length||0!==n.length},d.prototype._hasDisjunctiveRefinements=function(e){return this.state.disjunctiveRefinements[e]&&this.state.disjunctiveRefinements[e].length>0},d.prototype._change=function(e){var t=e.state,r=e.isPageReset;t!==this.state&&(this.state=t,this.emit("change",{state:this.state,results:this.lastResults,isPageReset:r}))},d.prototype.clearCache=function(){return this.client.clearCache&&this.client.clearCache(),this},d.prototype.setClient=function(e){return this.client===e||("function"==typeof e.addAlgoliaAgent&&e.addAlgoliaAgent("JS Helper ("+l+")"),this.client=e),this},d.prototype.getClient=function(){return this.client},d.prototype.derive=function(e){var t=new a(this,e);return this.derivedHelpers.push(t),t},d.prototype.detachDerivedHelper=function(e){var t=this.derivedHelpers.indexOf(e);if(-1===t)throw new Error("Derived helper already detached");this.derivedHelpers.splice(t,1)},d.prototype.hasPendingRequests=function(){return this._currentNbQueries>0},e.exports=d},4587:e=>{"use strict";e.exports=function(e){return Array.isArray(e)?e.filter(Boolean):[]}},3336:e=>{"use strict";e.exports=function(){var e=Array.prototype.slice.call(arguments);return e.reduceRight((function(e,t){return Object.keys(Object(t)).forEach((function(r){void 0!==t[r]&&(void 0!==e[r]&&delete e[r],e[r]=t[r])})),e}),{})}},4039:e=>{"use strict";e.exports={escapeFacetValue:function(e){return"string"!=typeof e?e:String(e).replace(/^-/,"\\-")},unescapeFacetValue:function(e){return"string"!=typeof e?e:e.replace(/^\\-/,"-")}}},7888:e=>{"use strict";e.exports=function(e,t){if(Array.isArray(e))for(var r=0;r<e.length;r++)if(t(e[r]))return e[r]}},9725:e=>{"use strict";e.exports=function(e,t){if(!Array.isArray(e))return-1;for(var r=0;r<e.length;r++)if(t(e[r]))return r;return-1}},2293:(e,t,r)=>{"use strict";var n=r(7888);e.exports=function(e,t){var r=(t||[]).map((function(e){return e.split(":")}));return e.reduce((function(e,t){var i=t.split(":"),a=n(r,(function(e){return e[0]===i[0]}));return i.length>1||!a?(e[0].push(i[0]),e[1].push(i[1]),e):(e[0].push(a[0]),e[1].push(a[1]),e)}),[[],[]])}},4853:e=>{"use strict";e.exports=function(e,t){e.prototype=Object.create(t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}})}},2686:e=>{"use strict";e.exports=function(e,t){return e.filter((function(r,n){return t.indexOf(r)>-1&&e.indexOf(r)===n}))}},185:e=>{"use strict";function t(e){return"function"==typeof e||Array.isArray(e)||"[object Object]"===Object.prototype.toString.call(e)}function r(e,n){if(e===n)return e;for(var i in n)if(Object.prototype.hasOwnProperty.call(n,i)&&"__proto__"!==i&&"constructor"!==i){var a=n[i],s=e[i];void 0!==s&&void 0===a||(t(s)&&t(a)?e[i]=r(s,a):e[i]="object"==typeof(c=a)&&null!==c?r(Array.isArray(c)?[]:{},c):c)}var c;return e}e.exports=function(e){t(e)||(e={});for(var n=1,i=arguments.length;n<i;n++){var a=arguments[n];t(a)&&r(e,a)}return e}},116:e=>{"use strict";e.exports=function(e){return e&&Object.keys(e).length>0}},9803:e=>{"use strict";e.exports=function(e,t){if(null===e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}},2148:e=>{"use strict";function t(e,t){if(e!==t){var r=void 0!==e,n=null===e,i=void 0!==t,a=null===t;if(!a&&e>t||n&&i||!r)return 1;if(!n&&e<t||a&&r||!i)return-1}return 0}e.exports=function(e,r,n){if(!Array.isArray(e))return[];Array.isArray(n)||(n=[]);var i=e.map((function(e,t){return{criteria:r.map((function(t){return e[t]})),index:t,value:e}}));return i.sort((function(e,r){for(var i=-1;++i<e.criteria.length;){var a=t(e.criteria[i],r.criteria[i]);if(a)return i>=n.length?a:"desc"===n[i]?-a:a}return e.index-r.index})),i.map((function(e){return e.value}))}},8023:e=>{"use strict";e.exports=function e(t){if("number"==typeof t)return t;if("string"==typeof t)return parseFloat(t);if(Array.isArray(t))return t.map(e);throw new Error("The value should be a number, a parsable string or an array of those.")}},6394:(e,t,r)=>{"use strict";var n=r(185);function i(e){return Object.keys(e).sort((function(e,t){return e.localeCompare(t)})).reduce((function(t,r){return t[r]=e[r],t}),{})}var a={_getQueries:function(e,t){var r=[];return r.push({indexName:e,params:a._getHitsSearchParams(t)}),t.getRefinedDisjunctiveFacets().forEach((function(n){r.push({indexName:e,params:a._getDisjunctiveFacetSearchParams(t,n)})})),t.getRefinedHierarchicalFacets().forEach((function(n){var i=t.getHierarchicalFacetByName(n),s=t.getHierarchicalRefinement(n),c=t._getHierarchicalFacetSeparator(i);if(s.length>0&&s[0].split(c).length>1){var u=s[0].split(c).slice(0,-1).reduce((function(e,t,r){return e.concat({attribute:i.attributes[r],value:0===r?t:[e[e.length-1].value,t].join(c)})}),[]);u.forEach((function(n,s){var c=a._getDisjunctiveFacetSearchParams(t,n.attribute,0===s);function o(e){return i.attributes.some((function(t){return t===e.split(":")[0]}))}var h=(c.facetFilters||[]).reduce((function(e,t){if(Array.isArray(t)){var r=t.filter((function(e){return!o(e)}));r.length>0&&e.push(r)}return"string"!=typeof t||o(t)||e.push(t),e}),[]),f=u[s-1];c.facetFilters=s>0?h.concat(f.attribute+":"+f.value):h.length>0?h:void 0,r.push({indexName:e,params:c})}))}})),r},_getHitsSearchParams:function(e){var t=e.facets.concat(e.disjunctiveFacets).concat(a._getHitsHierarchicalFacetsAttributes(e)),r=a._getFacetFilters(e),s=a._getNumericFilters(e),c=a._getTagFilters(e),u={facets:t.indexOf("*")>-1?["*"]:t,tagFilters:c};return r.length>0&&(u.facetFilters=r),s.length>0&&(u.numericFilters=s),i(n({},e.getQueryParams(),u))},_getDisjunctiveFacetSearchParams:function(e,t,r){var s=a._getFacetFilters(e,t,r),c=a._getNumericFilters(e,t),u=a._getTagFilters(e),o={hitsPerPage:0,page:0,analytics:!1,clickAnalytics:!1};u.length>0&&(o.tagFilters=u);var h=e.getHierarchicalFacetByName(t);return o.facets=h?a._getDisjunctiveHierarchicalFacetAttribute(e,h,r):t,c.length>0&&(o.numericFilters=c),s.length>0&&(o.facetFilters=s),i(n({},e.getQueryParams(),o))},_getNumericFilters:function(e,t){if(e.numericFilters)return e.numericFilters;var r=[];return Object.keys(e.numericRefinements).forEach((function(n){var i=e.numericRefinements[n]||{};Object.keys(i).forEach((function(e){var a=i[e]||[];t!==n&&a.forEach((function(t){if(Array.isArray(t)){var i=t.map((function(t){return n+e+t}));r.push(i)}else r.push(n+e+t)}))}))})),r},_getTagFilters:function(e){return e.tagFilters?e.tagFilters:e.tagRefinements.join(",")},_getFacetFilters:function(e,t,r){var n=[],i=e.facetsRefinements||{};Object.keys(i).forEach((function(e){(i[e]||[]).forEach((function(t){n.push(e+":"+t)}))}));var a=e.facetsExcludes||{};Object.keys(a).forEach((function(e){(a[e]||[]).forEach((function(t){n.push(e+":-"+t)}))}));var s=e.disjunctiveFacetsRefinements||{};Object.keys(s).forEach((function(e){var r=s[e]||[];if(e!==t&&r&&0!==r.length){var i=[];r.forEach((function(t){i.push(e+":"+t)})),n.push(i)}}));var c=e.hierarchicalFacetsRefinements||{};return Object.keys(c).forEach((function(i){var a=(c[i]||[])[0];if(void 0!==a){var s,u,o=e.getHierarchicalFacetByName(i),h=e._getHierarchicalFacetSeparator(o),f=e._getHierarchicalRootPath(o);if(t===i){if(-1===a.indexOf(h)||!f&&!0===r||f&&f.split(h).length===a.split(h).length)return;f?(u=f.split(h).length-1,a=f):(u=a.split(h).length-2,a=a.slice(0,a.lastIndexOf(h))),s=o.attributes[u]}else u=a.split(h).length-1,s=o.attributes[u];s&&n.push([s+":"+a])}})),n},_getHitsHierarchicalFacetsAttributes:function(e){return e.hierarchicalFacets.reduce((function(t,r){var n=e.getHierarchicalRefinement(r.name)[0];if(!n)return t.push(r.attributes[0]),t;var i=e._getHierarchicalFacetSeparator(r),a=n.split(i).length,s=r.attributes.slice(0,a+1);return t.concat(s)}),[])},_getDisjunctiveHierarchicalFacetAttribute:function(e,t,r){var n=e._getHierarchicalFacetSeparator(t);if(!0===r){var i=e._getHierarchicalRootPath(t),a=0;return i&&(a=i.split(n).length),[t.attributes[a]]}var s=(e.getHierarchicalRefinement(t.name)[0]||"").split(n).length-1;return t.attributes.slice(0,s+1)},getSearchForFacetQuery:function(e,t,r,s){var c=s.isDisjunctiveFacet(e)?s.clearRefinements(e):s,u={facetQuery:t,facetName:e};return"number"==typeof r&&(u.maxFacetHits=r),i(n({},a._getHitsSearchParams(c),u))}};e.exports=a},6801:e=>{"use strict";e.exports=function(e){return null!==e&&/^[a-zA-Z0-9_-]{1,64}$/.test(e)}},4336:e=>{"use strict";e.exports="3.12.0"},290:function(e){e.exports=function(){"use strict";function e(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function t(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function r(r){for(var n=1;n<arguments.length;n++){var i=null!=arguments[n]?arguments[n]:{};n%2?t(Object(i),!0).forEach((function(t){e(r,t,i[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(r,Object.getOwnPropertyDescriptors(i)):t(Object(i)).forEach((function(e){Object.defineProperty(r,e,Object.getOwnPropertyDescriptor(i,e))}))}return r}function n(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}function i(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){if(Symbol.iterator in Object(e)||"[object Arguments]"===Object.prototype.toString.call(e)){var r=[],n=!0,i=!1,a=void 0;try{for(var s,c=e[Symbol.iterator]();!(n=(s=c.next()).done)&&(r.push(s.value),!t||r.length!==t);n=!0);}catch(e){i=!0,a=e}finally{try{n||null==c.return||c.return()}finally{if(i)throw a}}return r}}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance")}()}function a(e){return function(e){if(Array.isArray(e)){for(var t=0,r=new Array(e.length);t<e.length;t++)r[t]=e[t];return r}}(e)||function(e){if(Symbol.iterator in Object(e)||"[object Arguments]"===Object.prototype.toString.call(e))return Array.from(e)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance")}()}function s(e){var t,r="algoliasearch-client-js-".concat(e.key),n=function(){return void 0===t&&(t=e.localStorage||window.localStorage),t},a=function(){return JSON.parse(n().getItem(r)||"{}")};return{get:function(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return Promise.resolve().then((function(){var r=JSON.stringify(e),n=a()[r];return Promise.all([n||t(),void 0!==n])})).then((function(e){var t=i(e,2),n=t[0],a=t[1];return Promise.all([n,a||r.miss(n)])})).then((function(e){return i(e,1)[0]}))},set:function(e,t){return Promise.resolve().then((function(){var i=a();return i[JSON.stringify(e)]=t,n().setItem(r,JSON.stringify(i)),t}))},delete:function(e){return Promise.resolve().then((function(){var t=a();delete t[JSON.stringify(e)],n().setItem(r,JSON.stringify(t))}))},clear:function(){return Promise.resolve().then((function(){n().removeItem(r)}))}}}function c(e){var t=a(e.caches),r=t.shift();return void 0===r?{get:function(e,t){var r=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return t().then((function(e){return Promise.all([e,r.miss(e)])})).then((function(e){return i(e,1)[0]}))},set:function(e,t){return Promise.resolve(t)},delete:function(e){return Promise.resolve()},clear:function(){return Promise.resolve()}}:{get:function(e,n){var i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}};return r.get(e,n,i).catch((function(){return c({caches:t}).get(e,n,i)}))},set:function(e,n){return r.set(e,n).catch((function(){return c({caches:t}).set(e,n)}))},delete:function(e){return r.delete(e).catch((function(){return c({caches:t}).delete(e)}))},clear:function(){return r.clear().catch((function(){return c({caches:t}).clear()}))}}}function u(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{serializable:!0},t={};return{get:function(r,n){var i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{miss:function(){return Promise.resolve()}},a=JSON.stringify(r);if(a in t)return Promise.resolve(e.serializable?JSON.parse(t[a]):t[a]);var s=n(),c=i&&i.miss||function(){return Promise.resolve()};return s.then((function(e){return c(e)})).then((function(){return s}))},set:function(r,n){return t[JSON.stringify(r)]=e.serializable?JSON.stringify(n):n,Promise.resolve(n)},delete:function(e){return delete t[JSON.stringify(e)],Promise.resolve()},clear:function(){return t={},Promise.resolve()}}}function o(e){for(var t=e.length-1;t>0;t--){var r=Math.floor(Math.random()*(t+1)),n=e[t];e[t]=e[r],e[r]=n}return e}function h(e,t){return t?(Object.keys(t).forEach((function(r){e[r]=t[r](e)})),e):e}function f(e){for(var t=arguments.length,r=new Array(t>1?t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];var i=0;return e.replace(/%s/g,(function(){return encodeURIComponent(r[i++])}))}var l={WithinQueryParameters:0,WithinHeaders:1};function m(e,t){var r=e||{},n=r.data||{};return Object.keys(r).forEach((function(e){-1===["timeout","headers","queryParameters","data","cacheable"].indexOf(e)&&(n[e]=r[e])})),{data:Object.entries(n).length>0?n:void 0,timeout:r.timeout||t,headers:r.headers||{},queryParameters:r.queryParameters||{},cacheable:r.cacheable}}var d={Read:1,Write:2,Any:3},p=1,v=2,g=3;function y(e){var t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:p;return r(r({},e),{},{status:t,lastUpdate:Date.now()})}function R(e){return"string"==typeof e?{protocol:"https",url:e,accept:d.Any}:{protocol:e.protocol||"https",url:e.url,accept:e.accept||d.Any}}var F="GET",b="POST";function P(e,t){return Promise.all(t.map((function(t){return e.get(t,(function(){return Promise.resolve(y(t))}))}))).then((function(e){var r=e.filter((function(e){return function(e){return e.status===p||Date.now()-e.lastUpdate>12e4}(e)})),n=e.filter((function(e){return function(e){return e.status===g&&Date.now()-e.lastUpdate<=12e4}(e)})),i=[].concat(a(r),a(n));return{getTimeout:function(e,t){return(0===n.length&&0===e?1:n.length+3+e)*t},statelessHosts:i.length>0?i.map((function(e){return R(e)})):t}}))}function _(e,t,n,i){var s=[],c=function(e,t){if(e.method!==F&&(void 0!==e.data||void 0!==t.data)){var n=Array.isArray(e.data)?e.data:r(r({},e.data),t.data);return JSON.stringify(n)}}(n,i),u=function(e,t){var n=r(r({},e.headers),t.headers),i={};return Object.keys(n).forEach((function(e){var t=n[e];i[e.toLowerCase()]=t})),i}(e,i),o=n.method,h=n.method!==F?{}:r(r({},n.data),i.data),f=r(r(r({"x-algolia-agent":e.userAgent.value},e.queryParameters),h),i.queryParameters),l=0,m=function t(r,a){var h=r.pop();if(void 0===h)throw{name:"RetryError",message:"Unreachable hosts - your application id may be incorrect. If the error persists, contact support@algolia.com.",transporterStackTrace:w(s)};var m={data:c,headers:u,method:o,url:E(h,n.path,f),connectTimeout:a(l,e.timeouts.connect),responseTimeout:a(l,i.timeout)},d=function(e){var t={request:m,response:e,host:h,triesLeft:r.length};return s.push(t),t},p={onSuccess:function(e){return function(e){try{return JSON.parse(e.content)}catch(t){throw function(e,t){return{name:"DeserializationError",message:e,response:t}}(t.message,e)}}(e)},onRetry:function(n){var i=d(n);return n.isTimedOut&&l++,Promise.all([e.logger.info("Retryable failure",O(i)),e.hostsCache.set(h,y(h,n.isTimedOut?g:v))]).then((function(){return t(r,a)}))},onFail:function(e){throw d(e),function(e,t){var r=e.content,n=e.status,i=r;try{i=JSON.parse(r).message}catch(e){}return function(e,t,r){return{name:"ApiError",message:e,status:t,transporterStackTrace:r}}(i,n,t)}(e,w(s))}};return e.requester.send(m).then((function(e){return function(e,t){return function(e){var t=e.status;return e.isTimedOut||function(e){var t=e.isTimedOut,r=e.status;return!t&&0==~~r}(e)||2!=~~(t/100)&&4!=~~(t/100)}(e)?t.onRetry(e):2==~~(e.status/100)?t.onSuccess(e):t.onFail(e)}(e,p)}))};return P(e.hostsCache,t).then((function(e){return m(a(e.statelessHosts).reverse(),e.getTimeout)}))}function j(e){var t={value:"Algolia for JavaScript (".concat(e,")"),add:function(e){var r="; ".concat(e.segment).concat(void 0!==e.version?" (".concat(e.version,")"):"");return-1===t.value.indexOf(r)&&(t.value="".concat(t.value).concat(r)),t}};return t}function E(e,t,r){var n=x(r),i="".concat(e.protocol,"://").concat(e.url,"/").concat("/"===t.charAt(0)?t.substr(1):t);return n.length&&(i+="?".concat(n)),i}function x(e){return Object.keys(e).map((function(t){return f("%s=%s",t,(r=e[t],"[object Object]"===Object.prototype.toString.call(r)||"[object Array]"===Object.prototype.toString.call(r)?JSON.stringify(e[t]):e[t]));var r})).join("&")}function w(e){return e.map((function(e){return O(e)}))}function O(e){var t=e.request.headers["x-algolia-api-key"]?{"x-algolia-api-key":"*****"}:{};return r(r({},e),{},{request:r(r({},e.request),{},{headers:r(r({},e.request.headers),t)})})}var N=function(e){var t=e.appId,n=function(e,t,r){var n={"x-algolia-api-key":r,"x-algolia-application-id":t};return{headers:function(){return e===l.WithinHeaders?n:{}},queryParameters:function(){return e===l.WithinQueryParameters?n:{}}}}(void 0!==e.authMode?e.authMode:l.WithinHeaders,t,e.apiKey),a=function(e){var t=e.hostsCache,r=e.logger,n=e.requester,a=e.requestsCache,s=e.responsesCache,c=e.timeouts,u=e.userAgent,o=e.hosts,h=e.queryParameters,f={hostsCache:t,logger:r,requester:n,requestsCache:a,responsesCache:s,timeouts:c,userAgent:u,headers:e.headers,queryParameters:h,hosts:o.map((function(e){return R(e)})),read:function(e,t){var r=m(t,f.timeouts.read),n=function(){return _(f,f.hosts.filter((function(e){return 0!=(e.accept&d.Read)})),e,r)};if(!0!==(void 0!==r.cacheable?r.cacheable:e.cacheable))return n();var a={request:e,mappedRequestOptions:r,transporter:{queryParameters:f.queryParameters,headers:f.headers}};return f.responsesCache.get(a,(function(){return f.requestsCache.get(a,(function(){return f.requestsCache.set(a,n()).then((function(e){return Promise.all([f.requestsCache.delete(a),e])}),(function(e){return Promise.all([f.requestsCache.delete(a),Promise.reject(e)])})).then((function(e){var t=i(e,2);return t[0],t[1]}))}))}),{miss:function(e){return f.responsesCache.set(a,e)}})},write:function(e,t){return _(f,f.hosts.filter((function(e){return 0!=(e.accept&d.Write)})),e,m(t,f.timeouts.write))}};return f}(r(r({hosts:[{url:"".concat(t,"-dsn.algolia.net"),accept:d.Read},{url:"".concat(t,".algolia.net"),accept:d.Write}].concat(o([{url:"".concat(t,"-1.algolianet.com")},{url:"".concat(t,"-2.algolianet.com")},{url:"".concat(t,"-3.algolianet.com")}]))},e),{},{headers:r(r(r({},n.headers()),{"content-type":"application/x-www-form-urlencoded"}),e.headers),queryParameters:r(r({},n.queryParameters()),e.queryParameters)}));return h({transporter:a,appId:t,addAlgoliaAgent:function(e,t){a.userAgent.add({segment:e,version:t})},clearCache:function(){return Promise.all([a.requestsCache.clear(),a.responsesCache.clear()]).then((function(){}))}},e.methods)},A=function(e){return function(t,r){return t.method===F?e.transporter.read(t,r):e.transporter.write(t,r)}},H=function(e){return function(t){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return h({transporter:e.transporter,appId:e.appId,indexName:t},r.methods)}},S=function(e){return function(t,n){var i=t.map((function(e){return r(r({},e),{},{params:x(e.params||{})})}));return e.transporter.read({method:b,path:"1/indexes/*/queries",data:{requests:i},cacheable:!0},n)}},T=function(e){return function(t,i){return Promise.all(t.map((function(t){var a=t.params,s=a.facetName,c=a.facetQuery,u=n(a,["facetName","facetQuery"]);return H(e)(t.indexName,{methods:{searchForFacetValues:k}}).searchForFacetValues(s,c,r(r({},i),u))})))}},Q=function(e){return function(t,r,n){return e.transporter.read({method:b,path:f("1/answers/%s/prediction",e.indexName),data:{query:t,queryLanguages:r},cacheable:!0},n)}},C=function(e){return function(t,r){return e.transporter.read({method:b,path:f("1/indexes/%s/query",e.indexName),data:{query:t},cacheable:!0},r)}},k=function(e){return function(t,r,n){return e.transporter.read({method:b,path:f("1/indexes/%s/facets/%s/query",e.indexName,t),data:{facetQuery:r},cacheable:!0},n)}},D=1,I=2,q=3;function V(e,t,n){var i,a={appId:e,apiKey:t,timeouts:{connect:1,read:2,write:30},requester:{send:function(e){return new Promise((function(t){var r=new XMLHttpRequest;r.open(e.method,e.url,!0),Object.keys(e.headers).forEach((function(t){return r.setRequestHeader(t,e.headers[t])}));var n,i=function(e,n){return setTimeout((function(){r.abort(),t({status:0,content:n,isTimedOut:!0})}),1e3*e)},a=i(e.connectTimeout,"Connection timeout");r.onreadystatechange=function(){r.readyState>r.OPENED&&void 0===n&&(clearTimeout(a),n=i(e.responseTimeout,"Socket timeout"))},r.onerror=function(){0===r.status&&(clearTimeout(a),clearTimeout(n),t({content:r.responseText||"Network request failed",status:r.status,isTimedOut:!1}))},r.onload=function(){clearTimeout(a),clearTimeout(n),t({content:r.responseText,status:r.status,isTimedOut:!1})},r.send(e.data)}))}},logger:(i=q,{debug:function(e,t){return D>=i&&console.debug(e,t),Promise.resolve()},info:function(e,t){return I>=i&&console.info(e,t),Promise.resolve()},error:function(e,t){return console.error(e,t),Promise.resolve()}}),responsesCache:u(),requestsCache:u({serializable:!1}),hostsCache:c({caches:[s({key:"".concat("4.15.0","-").concat(e)}),u()]}),userAgent:j("4.15.0").add({segment:"Browser",version:"lite"}),authMode:l.WithinQueryParameters};return N(r(r(r({},a),n),{},{methods:{search:S,searchForFacetValues:T,multipleQueries:S,multipleSearchForFacetValues:T,customRequest:A,initIndex:function(e){return function(t){return H(e)(t,{methods:{search:C,searchForFacetValues:k,findAnswers:Q}})}}}}))}return V.version="4.15.0",V}()},6675:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>z});var n=r(7294),i=r(6010),a=r(8131),s=r.n(a),c=r(290),u=r.n(c),o=r(412),h=r(5742),f=r(9960),l=r(143),m=r(2263);const d=["zero","one","two","few","many","other"];function p(e){return d.filter((t=>e.includes(t)))}const v={locale:"en",pluralForms:p(["one","other"]),select:e=>1===e?"one":"other"};function g(){const{i18n:{currentLocale:e}}=(0,m.Z)();return(0,n.useMemo)((()=>{try{return function(e){const t=new Intl.PluralRules(e);return{locale:e,pluralForms:p(t.resolvedOptions().pluralCategories),select:e=>t.select(e)}}(e)}catch(t){return console.error(`Failed to use Intl.PluralRules for locale "${e}".\nDocusaurus will fallback to the default (English) implementation.\nError: ${t.message}\n`),v}}),[e])}function y(){const e=g();return{selectMessage:(t,r)=>function(e,t,r){const n=e.split("|");if(1===n.length)return n[0];n.length>r.pluralForms.length&&console.error(`For locale=${r.locale}, a maximum of ${r.pluralForms.length} plural forms are expected (${r.pluralForms.join(",")}), but the message contains ${n.length}: ${e}`);const i=r.select(t),a=r.pluralForms.indexOf(i);return n[Math.min(a,n.length-1)]}(r,t,e)}}var R=r(6177),F=r(902),b=r(833),P=r(2128),_=r(5999),j=r(6278),E=r(239),x=r(6999);const w="searchQueryInput_u2C7",O="searchVersionInput_m0Ui",N="searchResultsColumn_JPFH",A="algoliaLogo_rT1R",H="algoliaLogoPathFill_WdUC",S="searchResultItem_Tv2o",T="searchResultItemHeading_KbCB",Q="searchResultItemPath_lhe1",C="searchResultItemSummary_AEaO",k="searchQueryColumn_RTkw",D="searchVersionColumn_ypXd",I="searchLogoColumn_rJIA",q="loadingSpinner_XVxU",V="loader_vvXV";function L(e){let{docsSearchVersionsHelpers:t}=e;const r=Object.entries(t.allDocsData).filter((e=>{let[,t]=e;return t.versions.length>1}));return n.createElement("div",{className:(0,i.Z)("col","col--3","padding-left--none",D)},r.map((e=>{let[i,a]=e;const s=r.length>1?`${i}: `:"";return n.createElement("select",{key:i,onChange:e=>t.setSearchVersion(i,e.target.value),defaultValue:t.searchVersions[i],className:O},a.versions.map(((e,t)=>n.createElement("option",{key:t,label:`${s}${e.label}`,value:e.name}))))})))}function B(){const{i18n:{currentLocale:e}}=(0,m.Z)(),{algolia:{appId:t,apiKey:r,indexName:a}}=(0,j.L)(),c=(0,E.l)(),d=function(){const{selectMessage:e}=y();return t=>e(t,(0,_.I)({id:"theme.SearchPage.documentsFound.plurals",description:'Pluralized label for "{count} documents found". Use as much plural forms (separated by "|") as your language support (see https://www.unicode.org/cldr/cldr-aux/charts/34/supplemental/language_plural_rules.html)',message:"One document found|{count} documents found"},{count:t}))}(),p=function(){const e=(0,l._r)(),[t,r]=(0,n.useState)((()=>Object.entries(e).reduce(((e,t)=>{let[r,n]=t;return{...e,[r]:n.versions[0].name}}),{}))),i=Object.values(e).some((e=>e.versions.length>1));return{allDocsData:e,versioningEnabled:i,searchVersions:t,setSearchVersion:(e,t)=>r((r=>({...r,[e]:t})))}}(),[v,g]=(0,R.K)(),b={items:[],query:null,totalResults:null,totalPages:null,lastPage:null,hasMore:null,loading:null},[O,D]=(0,n.useReducer)(((e,t)=>{switch(t.type){case"reset":return b;case"loading":return{...e,loading:!0};case"update":return v!==t.value.query?e:{...t.value,items:0===t.value.lastPage?t.value.items:e.items.concat(t.value.items)};case"advance":{const t=e.totalPages>e.lastPage+1;return{...e,lastPage:t?e.lastPage+1:e.lastPage,hasMore:t}}default:return e}}),b),B=u()(t,r),z=s()(B,a,{hitsPerPage:15,advancedSyntax:!0,disjunctiveFacets:["language","docusaurus_tag"]});z.on("result",(e=>{let{results:{query:t,hits:r,page:n,nbHits:i,nbPages:a}}=e;if(""===t||!Array.isArray(r))return void D({type:"reset"});const s=e=>e.replace(/algolia-docsearch-suggestion--highlight/g,"search-result-match"),u=r.map((e=>{let{url:t,_highlightResult:{hierarchy:r},_snippetResult:n={}}=e;const i=Object.keys(r).map((e=>s(r[e].value)));return{title:i.pop(),url:c(t),summary:n.content?`${s(n.content.value)}...`:"",breadcrumbs:i}}));D({type:"update",value:{items:u,query:t,totalResults:i,totalPages:a,lastPage:n,hasMore:a>n+1,loading:!1}})}));const[M,J]=(0,n.useState)(null),W=(0,n.useRef)(0),U=(0,n.useRef)(o.Z.canUseIntersectionObserver&&new IntersectionObserver((e=>{const{isIntersecting:t,boundingClientRect:{y:r}}=e[0];t&&W.current>r&&D({type:"advance"}),W.current=r}),{threshold:1})),Z=()=>v?(0,_.I)({id:"theme.SearchPage.existingResultsTitle",message:'Search results for "{query}"',description:"The search page title for non-empty query"},{query:v}):(0,_.I)({id:"theme.SearchPage.emptyResultsTitle",message:"Search the documentation",description:"The search page title for empty query"}),$=(0,F.zX)((function(t){void 0===t&&(t=0),z.addDisjunctiveFacetRefinement("docusaurus_tag","default"),z.addDisjunctiveFacetRefinement("language",e),Object.entries(p.searchVersions).forEach((e=>{let[t,r]=e;z.addDisjunctiveFacetRefinement("docusaurus_tag",`docs-${t}-${r}`)})),z.setQuery(v).setPage(t).search()}));return(0,n.useEffect)((()=>{if(!M)return;const e=U.current;return e?(e.observe(M),()=>e.unobserve(M)):()=>!0}),[M]),(0,n.useEffect)((()=>{D({type:"reset"}),v&&(D({type:"loading"}),setTimeout((()=>{$()}),300))}),[v,p.searchVersions,$]),(0,n.useEffect)((()=>{O.lastPage&&0!==O.lastPage&&$(O.lastPage)}),[$,O.lastPage]),n.createElement(x.Z,null,n.createElement(h.Z,null,n.createElement("title",null,(0,P.p)(Z())),n.createElement("meta",{property:"robots",content:"noindex, follow"})),n.createElement("div",{className:"container margin-vert--lg"},n.createElement("h1",null,Z()),n.createElement("form",{className:"row",onSubmit:e=>e.preventDefault()},n.createElement("div",{className:(0,i.Z)("col",k,{"col--9":p.versioningEnabled,"col--12":!p.versioningEnabled})},n.createElement("input",{type:"search",name:"q",className:w,placeholder:(0,_.I)({id:"theme.SearchPage.inputPlaceholder",message:"Type your search here",description:"The placeholder for search page input"}),"aria-label":(0,_.I)({id:"theme.SearchPage.inputLabel",message:"Search",description:"The ARIA label for search page input"}),onChange:e=>g(e.target.value),value:v,autoComplete:"off",autoFocus:!0})),p.versioningEnabled&&n.createElement(L,{docsSearchVersionsHelpers:p})),n.createElement("div",{className:"row"},n.createElement("div",{className:(0,i.Z)("col","col--8",N)},!!O.totalResults&&d(O.totalResults)),n.createElement("div",{className:(0,i.Z)("col","col--4","text--right",I)},n.createElement("a",{target:"_blank",rel:"noopener noreferrer",href:"https://www.algolia.com/","aria-label":(0,_.I)({id:"theme.SearchPage.algoliaLabel",message:"Search by Algolia",description:"The ARIA label for Algolia mention"})},n.createElement("svg",{viewBox:"0 0 168 24",className:A},n.createElement("g",{fill:"none"},n.createElement("path",{className:H,d:"M120.925 18.804c-4.386.02-4.386-3.54-4.386-4.106l-.007-13.336 2.675-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-10.846-2.18c.821 0 1.43-.047 1.855-.129v-2.719a6.334 6.334 0 0 0-1.574-.199 5.7 5.7 0 0 0-.897.069 2.699 2.699 0 0 0-.814.24c-.24.116-.439.28-.582.491-.15.212-.219.335-.219.656 0 .628.219.991.616 1.23s.938.362 1.615.362zm-.233-9.7c.883 0 1.629.109 2.231.328.602.218 1.088.525 1.444.915.363.396.609.922.76 1.483.157.56.232 1.175.232 1.85v6.874a32.5 32.5 0 0 1-1.868.314c-.834.123-1.772.185-2.813.185-.69 0-1.327-.069-1.895-.198a4.001 4.001 0 0 1-1.471-.636 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.803 0-.656.13-1.073.384-1.525a3.24 3.24 0 0 1 1.047-1.106c.445-.287.95-.492 1.532-.615a8.8 8.8 0 0 1 1.82-.185 8.404 8.404 0 0 1 1.972.24v-.438c0-.307-.035-.6-.11-.874a1.88 1.88 0 0 0-.384-.73 1.784 1.784 0 0 0-.724-.493 3.164 3.164 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.735 7.735 0 0 0-1.26.307l-.321-2.192c.335-.117.834-.233 1.478-.349a10.98 10.98 0 0 1 2.073-.178zm52.842 9.626c.822 0 1.43-.048 1.854-.13V13.7a6.347 6.347 0 0 0-1.574-.199c-.294 0-.595.021-.896.069a2.7 2.7 0 0 0-.814.24 1.46 1.46 0 0 0-.582.491c-.15.212-.218.335-.218.656 0 .628.218.991.615 1.23.404.245.938.362 1.615.362zm-.226-9.694c.883 0 1.629.108 2.231.327.602.219 1.088.526 1.444.915.355.39.609.923.759 1.483a6.8 6.8 0 0 1 .233 1.852v6.873c-.41.088-1.034.19-1.868.314-.834.123-1.772.184-2.813.184-.69 0-1.327-.068-1.895-.198a4.001 4.001 0 0 1-1.471-.635 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.804 0-.656.13-1.073.384-1.524.26-.45.608-.82 1.047-1.107.445-.286.95-.491 1.532-.614a8.803 8.803 0 0 1 2.751-.13c.329.034.671.096 1.04.185v-.437a3.3 3.3 0 0 0-.109-.875 1.873 1.873 0 0 0-.384-.731 1.784 1.784 0 0 0-.724-.492 3.165 3.165 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.75 7.75 0 0 0-1.26.307l-.321-2.193c.335-.116.834-.232 1.478-.348a11.633 11.633 0 0 1 2.073-.177zm-8.034-1.271a1.626 1.626 0 0 1-1.628-1.62c0-.895.725-1.62 1.628-1.62.904 0 1.63.725 1.63 1.62 0 .895-.733 1.62-1.63 1.62zm1.348 13.22h-2.689V7.27l2.69-.423v11.956zm-4.714 0c-4.386.02-4.386-3.54-4.386-4.107l-.008-13.336 2.676-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-8.698-5.903c0-1.156-.253-2.119-.746-2.788-.493-.677-1.183-1.01-2.067-1.01-.882 0-1.574.333-2.065 1.01-.493.676-.733 1.632-.733 2.788 0 1.168.246 1.953.74 2.63.492.683 1.183 1.018 2.066 1.018.882 0 1.574-.342 2.067-1.019.492-.683.738-1.46.738-2.63zm2.737-.007c0 .902-.13 1.584-.397 2.33a5.52 5.52 0 0 1-1.128 1.906 4.986 4.986 0 0 1-1.752 1.223c-.685.286-1.739.45-2.265.45-.528-.006-1.574-.157-2.252-.45a5.096 5.096 0 0 1-1.744-1.223c-.487-.527-.863-1.162-1.137-1.906a6.345 6.345 0 0 1-.41-2.33c0-.902.123-1.77.397-2.508a5.554 5.554 0 0 1 1.15-1.892 5.133 5.133 0 0 1 1.75-1.216c.679-.287 1.425-.423 2.232-.423.808 0 1.553.142 2.237.423a4.88 4.88 0 0 1 1.753 1.216 5.644 5.644 0 0 1 1.135 1.892c.287.738.431 1.606.431 2.508zm-20.138 0c0 1.12.246 2.363.738 2.882.493.52 1.13.78 1.91.78.424 0 .828-.062 1.204-.178.377-.116.677-.253.917-.417V9.33a10.476 10.476 0 0 0-1.766-.226c-.971-.028-1.71.37-2.23 1.004-.513.636-.773 1.75-.773 2.788zm7.438 5.274c0 1.824-.466 3.156-1.404 4.004-.936.846-2.367 1.27-4.296 1.27-.705 0-2.17-.137-3.34-.396l.431-2.118c.98.205 2.272.26 2.95.26 1.074 0 1.84-.219 2.299-.656.459-.437.684-1.086.684-1.948v-.437a8.07 8.07 0 0 1-1.047.397c-.43.13-.93.198-1.492.198-.739 0-1.41-.116-2.018-.349a4.206 4.206 0 0 1-1.567-1.025c-.431-.45-.774-1.017-1.013-1.694-.24-.677-.363-1.885-.363-2.773 0-.834.13-1.88.384-2.577.26-.696.629-1.298 1.129-1.796.493-.498 1.095-.881 1.8-1.162a6.605 6.605 0 0 1 2.428-.457c.87 0 1.67.109 2.45.24.78.129 1.444.265 1.985.415V18.17zM6.972 6.677v1.627c-.712-.446-1.52-.67-2.425-.67-.585 0-1.045.13-1.38.391a1.24 1.24 0 0 0-.502 1.03c0 .425.164.765.494 1.02.33.256.835.532 1.516.83.447.192.795.356 1.045.495.25.138.537.332.862.582.324.25.563.548.718.894.154.345.23.741.23 1.188 0 .947-.334 1.691-1.004 2.234-.67.542-1.537.814-2.601.814-1.18 0-2.16-.229-2.936-.686v-1.708c.84.628 1.814.942 2.92.942.585 0 1.048-.136 1.388-.407.34-.271.51-.646.51-1.125 0-.287-.1-.55-.302-.79-.203-.24-.42-.42-.655-.542-.234-.123-.585-.29-1.053-.503a61.27 61.27 0 0 1-.582-.271 13.67 13.67 0 0 1-.55-.287 4.275 4.275 0 0 1-.567-.351 6.92 6.92 0 0 1-.455-.4c-.18-.17-.31-.34-.39-.51-.08-.17-.155-.37-.224-.598a2.553 2.553 0 0 1-.104-.742c0-.915.333-1.638.998-2.17.664-.532 1.523-.798 2.576-.798.968 0 1.793.17 2.473.51zm7.468 5.696v-.287c-.022-.607-.187-1.088-.495-1.444-.309-.357-.75-.535-1.324-.535-.532 0-.99.194-1.373.583-.382.388-.622.949-.717 1.683h3.909zm1.005 2.792v1.404c-.596.34-1.383.51-2.362.51-1.255 0-2.255-.377-3-1.132-.744-.755-1.116-1.744-1.116-2.968 0-1.297.34-2.316 1.021-3.055.68-.74 1.548-1.11 2.6-1.11 1.033 0 1.852.323 2.458.966.606.644.91 1.572.91 2.784 0 .33-.033.676-.096 1.038h-5.314c.107.702.405 1.239.894 1.611.49.372 1.106.558 1.85.558.862 0 1.58-.202 2.155-.606zm6.605-1.77h-1.212c-.596 0-1.045.116-1.349.35-.303.234-.454.532-.454.894 0 .372.117.664.35.877.235.213.575.32 1.022.32.51 0 .912-.142 1.204-.424.293-.281.44-.651.44-1.108v-.91zm-4.068-2.554V9.325c.627-.361 1.457-.542 2.489-.542 2.116 0 3.175 1.026 3.175 3.08V17h-1.548v-.957c-.415.68-1.143 1.02-2.186 1.02-.766 0-1.38-.22-1.843-.661-.462-.442-.694-1.003-.694-1.684 0-.776.293-1.38.878-1.81.585-.431 1.404-.647 2.457-.647h1.34V11.8c0-.554-.133-.971-.399-1.253-.266-.282-.707-.423-1.324-.423a4.07 4.07 0 0 0-2.345.718zm9.333-1.93v1.42c.394-1 1.101-1.5 2.123-1.5.148 0 .313.016.494.048v1.531a1.885 1.885 0 0 0-.75-.143c-.542 0-.989.24-1.34.718-.351.479-.527 1.048-.527 1.707V17h-1.563V8.91h1.563zm5.01 4.084c.022.82.272 1.492.75 2.019.479.526 1.15.79 2.01.79.639 0 1.235-.176 1.788-.527v1.404c-.521.319-1.186.479-1.995.479-1.265 0-2.276-.4-3.031-1.197-.755-.798-1.133-1.792-1.133-2.984 0-1.16.38-2.151 1.14-2.975.761-.825 1.79-1.237 3.088-1.237.702 0 1.346.149 1.93.447v1.436a3.242 3.242 0 0 0-1.77-.495c-.84 0-1.513.266-2.019.798-.505.532-.758 1.213-.758 2.042zM40.24 5.72v4.579c.458-1 1.293-1.5 2.505-1.5.787 0 1.42.245 1.899.734.479.49.718 1.17.718 2.042V17h-1.564v-5.106c0-.553-.14-.98-.422-1.284-.282-.303-.652-.455-1.11-.455-.531 0-1.002.202-1.411.606-.41.405-.615 1.022-.615 1.851V17h-1.563V5.72h1.563zm14.966 10.02c.596 0 1.096-.253 1.5-.758.404-.506.606-1.157.606-1.955 0-.915-.202-1.62-.606-2.114-.404-.495-.92-.742-1.548-.742-.553 0-1.05.224-1.491.67-.442.447-.662 1.133-.662 2.058 0 .958.212 1.67.638 2.138.425.469.946.703 1.563.703zM53.004 5.72v4.42c.574-.894 1.388-1.341 2.44-1.341 1.022 0 1.857.383 2.506 1.149.649.766.973 1.781.973 3.047 0 1.138-.309 2.109-.925 2.912-.617.803-1.463 1.205-2.537 1.205-1.075 0-1.894-.447-2.457-1.34V17h-1.58V5.72h1.58zm9.908 11.104l-3.223-7.913h1.739l1.005 2.632 1.26 3.415c.096-.32.48-1.458 1.15-3.415l.909-2.632h1.66l-2.92 7.866c-.777 2.074-1.963 3.11-3.559 3.11a2.92 2.92 0 0 1-.734-.079v-1.34c.17.042.351.064.543.064 1.032 0 1.755-.57 2.17-1.708z"}),n.createElement("path",{fill:"#5468FF",d:"M78.988.938h16.594a2.968 2.968 0 0 1 2.966 2.966V20.5a2.967 2.967 0 0 1-2.966 2.964H78.988a2.967 2.967 0 0 1-2.966-2.964V3.897A2.961 2.961 0 0 1 78.988.938z"}),n.createElement("path",{fill:"white",d:"M89.632 5.967v-.772a.978.978 0 0 0-.978-.977h-2.28a.978.978 0 0 0-.978.977v.793c0 .088.082.15.171.13a7.127 7.127 0 0 1 1.984-.28c.65 0 1.295.088 1.917.259.082.02.164-.04.164-.13m-6.248 1.01l-.39-.389a.977.977 0 0 0-1.382 0l-.465.465a.973.973 0 0 0 0 1.38l.383.383c.062.061.15.047.205-.014.226-.307.472-.601.746-.874.281-.28.568-.526.883-.751.068-.042.075-.137.02-.2m4.16 2.453v3.341c0 .096.104.165.192.117l2.97-1.537c.068-.034.089-.117.055-.184a3.695 3.695 0 0 0-3.08-1.866c-.068 0-.136.054-.136.13m0 8.048a4.489 4.489 0 0 1-4.49-4.482 4.488 4.488 0 0 1 4.49-4.482 4.488 4.488 0 0 1 4.489 4.482 4.484 4.484 0 0 1-4.49 4.482m0-10.85a6.363 6.363 0 1 0 0 12.729 6.37 6.37 0 0 0 6.372-6.368 6.358 6.358 0 0 0-6.371-6.36"})))))),O.items.length>0?n.createElement("main",null,O.items.map(((e,t)=>{let{title:r,url:a,summary:s,breadcrumbs:c}=e;return n.createElement("article",{key:t,className:S},n.createElement("h2",{className:T},n.createElement(f.Z,{to:a,dangerouslySetInnerHTML:{__html:r}})),c.length>0&&n.createElement("nav",{"aria-label":"breadcrumbs"},n.createElement("ul",{className:(0,i.Z)("breadcrumbs",Q)},c.map(((e,t)=>n.createElement("li",{key:t,className:"breadcrumbs__item",dangerouslySetInnerHTML:{__html:e}}))))),s&&n.createElement("p",{className:C,dangerouslySetInnerHTML:{__html:s}}))}))):[v&&!O.loading&&n.createElement("p",{key:"no-results"},n.createElement(_.Z,{id:"theme.SearchPage.noResultsText",description:"The paragraph for empty search result"},"No results were found")),!!O.loading&&n.createElement("div",{key:"spinner",className:q})],O.hasMore&&n.createElement("div",{className:V,ref:J},n.createElement(_.Z,{id:"theme.SearchPage.fetchingNewResults",description:"The paragraph for fetching new search results"},"Fetching new results..."))))}function z(){return n.createElement(b.FG,{className:"search-page-wrapper"},n.createElement(B,null))}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/1a4e3797.ac674e56.js.LICENSE.txt b/zh/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
deleted file mode 100644
index 698902548..000000000
--- a/zh/assets/js/1a4e3797.ac674e56.js.LICENSE.txt
+++ /dev/null
@@ -1 +0,0 @@
-/*! algoliasearch-lite.umd.js | 4.15.0 | © Algolia, inc. | https://github.com/algolia/algoliasearch-client-javascript */
diff --git a/zh/assets/js/1ac3de50.39b2e9d3.js b/zh/assets/js/1ac3de50.694f6c59.js
similarity index 99%
rename from zh/assets/js/1ac3de50.39b2e9d3.js
rename to zh/assets/js/1ac3de50.694f6c59.js
index 802ea5853..af69a5c21 100644
--- a/zh/assets/js/1ac3de50.39b2e9d3.js
+++ b/zh/assets/js/1ac3de50.694f6c59.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9768],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),p=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,l=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),k=p(n),m=a,d=k["".concat(l,".").concat(m)]||k[m]||u[m]||i;return n?r.createElement(d,o(o({ref:t},c),{},{components:n})):r.createElement(d,o({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,o=new Array(i);o[0]=k;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,o[1]=s;for(var p=2;p<i;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},1163:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>s,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const i={title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",weight:10},o=void 0,s={unversionedId:"quick-start/quick-start",id:"quick-start/quick-start",title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",description:"\u672c\u6307\u5357\u5e2e\u52a9\u4f60\u4f7f\u7528\u9ed8\u8ba4\u9009\u9879\u5feb\u901f\u542f\u52a8\u96c6\u7fa4\u3002\u5b89\u88c5\u90e8\u5206\u66f4\u8be6\u7ec6\u5730\u4ecb\u7ecd\u4e86\u5982\u4f55\u8bbe\u7f6e K3s\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",sourceDirName:"quick-start",slug:"/quick-start/",permalink:"/zh/quick-start/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",weight:10},sidebar:"mySidebar",previous:{title:"\u67b6\u6784",permalink:"/zh/architecture/"},next:{title:"\u5b89\u88c5",permalink:"/zh/installation/"}},l={},p=[{value:"\u5b89\u88c5\u811a\u672c",id:"\u5b89\u88c5\u811a\u672c",level:2}],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6307\u5357\u5e2e\u52a9\u4f60\u4f7f\u7528\u9ed8\u8ba4\u9009\u9879\u5feb\u901f\u542f\u52a8\u96c6\u7fa4\u3002",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/"},"\u5b89\u88c5\u90e8\u5206"),"\u66f4\u8be6\u7ec6\u5730\u4ecb\u7ecd\u4e86\u5982\u4f55\u8bbe\u7f6e K3s\u3002"),(0,a.kt)("p",null,"\u6709\u5173 K3s \u7ec4\u4ef6\u5982\u4f55\u534f\u540c\u5de5\u4f5c\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/architecture/"},"\u67b6\u6784"),"\u3002"),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Kubernetes \u65b0\u624b\uff1fKubernetes \u5b98\u65b9\u6587\u6863\u4ecb\u7ecd\u4e86\u4e00\u4e9b\u5f88\u597d\u7684",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tutorials/kubernetes-basics/"},"\u57fa\u7840\u77e5\u8bc6\u6559\u7a0b"),"\u3002")),(0,a.kt)("h2",{id:"\u5b89\u88c5\u811a\u672c"},"\u5b89\u88c5\u811a\u672c"),(0,a.kt)("p",null,"K3s \u63d0\u4f9b\u4e86\u4e00\u4e2a\u5b89\u88c5\u811a\u672c\uff0c\u53ef\u4ee5\u65b9\u4fbf\u5730\u5c06\u5176\u4f5c\u4e3a\u670d\u52a1\u5b89\u88c5\u5728\u57fa\u4e8e systemd \u6216 openrc \u7684\u7cfb\u7edf\u4e0a\u3002\u8be5\u811a\u672c\u53ef\u5728 ",(0,a.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \u83b7\u5f97\u3002\u8981\u4f7f\u7528\u8fd9\u79cd\u65b9\u6cd5\u5b89\u88c5 K3s\uff0c\u53ea\u9700\u8fd0\u884c\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -\n"))),(0,a.kt)("p",null,"\u8fd0\u884c\u6b64\u5b89\u88c5\u540e\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"K3s \u670d\u52a1\u5c06\u88ab\u914d\u7f6e\u4e3a\u5728\u8282\u70b9\u91cd\u542f\u540e\u6216\u8fdb\u7a0b\u5d29\u6e83\u6216\u88ab\u6740\u6b7b\u65f6\u81ea\u52a8\u91cd\u542f\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u5c06\u5b89\u88c5\u5176\u4ed6\u5b9e\u7528\u7a0b\u5e8f\uff0c\u5305\u62ec ",(0,a.kt)("inlineCode",{parentName:"li"},"kubectl"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"crictl"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"ctr"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-killall.sh")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-uninstall.sh"),"\u3002"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," \u6587\u4ef6\u5c06\u5199\u5165\u5230 ",(0,a.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/k3s.yaml"),"\uff0c\u7531 K3s \u5b89\u88c5\u7684 kubectl \u5c06\u81ea\u52a8\u4f7f\u7528\u8be5\u6587\u4ef6\u3002")),(0,a.kt)("p",null,"\u5355\u8282\u70b9 Server \u5b89\u88c5\u662f\u4e00\u4e2a\u529f\u80fd\u9f50\u5168\u7684 Kubernetes \u96c6\u7fa4\uff0c\u5b83\u5305\u62ec\u4e86\u6258\u7ba1\u5de5\u4f5c\u8d1f\u8f7d pod \u6240\u9700\u7684\u6240\u6709\u6570\u636e\u5b58\u50a8\u3001control plane\u3001kubelet \u548c\u5bb9\u5668\u8fd0\u884c\u65f6\u7ec4\u4ef6\u3002\u9664\u975e\u4f60\u5e0c\u671b\u5411\u96c6\u7fa4\u6dfb\u52a0\u5bb9\u91cf\u6216\u5197\u4f59\uff0c\u5426\u5219\u6ca1\u6709\u5fc5\u8981\u6dfb\u52a0\u989d\u5916\u7684 Server \u6216 Agent \u8282\u70b9\u3002"),(0,a.kt)("p",null,"\u8981\u5b89\u88c5\u5176\u4ed6 Agent \u8282\u70b9\u5e76\u5c06\u5b83\u4eec\u6dfb\u52a0\u5230\u96c6\u7fa4\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \u73af\u5883\u53d8\u91cf\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u3002\u4ee5\u4e0b\u793a\u4f8b\u6f14\u793a\u4e86\u5982\u4f55\u6dfb\u52a0 Agent \u8282\u70b9\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n"))),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u53c2\u6570\u4f1a\u5bfc\u81f4\u5b89\u88c5\u7a0b\u5e8f\u5c06 K3s \u914d\u7f6e\u4e3a Agent \u800c\u4e0d\u662f Server\u3002K3s Agent \u5c06\u6ce8\u518c\u5230\u5728 URL \u4e0a\u76d1\u542c\u7684 K3s Server\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \u4f7f\u7528\u7684\u503c\u5b58\u50a8\u5728 Server \u8282\u70b9\u4e0a\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/node-token")," \u4e2d\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u6bcf\u53f0\u4e3b\u673a\u5fc5\u987b\u5177\u6709\u552f\u4e00\u7684\u4e3b\u673a\u540d\u3002\u5982\u679c\u4f60\u7684\u8ba1\u7b97\u673a\u6ca1\u6709\u552f\u4e00\u7684\u4e3b\u673a\u540d\uff0c\u8bf7\u4f20\u9012 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \u73af\u5883\u53d8\u91cf\uff0c\u5e76\u4e3a\u6bcf\u4e2a\u8282\u70b9\u63d0\u4f9b\u4e00\u4e2a\u6709\u6548\u4e14\u552f\u4e00\u7684\u4e3b\u673a\u540d\u3002")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9768],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?i(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):i(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},i=Object.keys(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r<i.length;r++)n=i[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var l=r.createContext({}),p=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(l.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,i=e.originalType,l=e.parentName,c=s(e,["components","mdxType","originalType","parentName"]),k=p(n),m=a,d=k["".concat(l,".").concat(m)]||k[m]||u[m]||i;return n?r.createElement(d,o(o({ref:t},c),{},{components:n})):r.createElement(d,o({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=n.length,o=new Array(i);o[0]=k;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,o[1]=s;for(var p=2;p<i;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},1163:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>l,contentTitle:()=>o,default:()=>u,frontMatter:()=>i,metadata:()=>s,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const i={title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",weight:10},o=void 0,s={unversionedId:"quick-start/quick-start",id:"quick-start/quick-start",title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",description:"\u672c\u6307\u5357\u5e2e\u52a9\u4f60\u4f7f\u7528\u9ed8\u8ba4\u9009\u9879\u5feb\u901f\u542f\u52a8\u96c6\u7fa4\u3002\u5b89\u88c5\u90e8\u5206\u66f4\u8be6\u7ec6\u5730\u4ecb\u7ecd\u4e86\u5982\u4f55\u8bbe\u7f6e K3s\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",sourceDirName:"quick-start",slug:"/quick-start/",permalink:"/zh/quick-start/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",weight:10},sidebar:"mySidebar",previous:{title:"\u67b6\u6784",permalink:"/zh/architecture/"},next:{title:"\u5b89\u88c5",permalink:"/zh/installation/"}},l={},p=[{value:"\u5b89\u88c5\u811a\u672c",id:"\u5b89\u88c5\u811a\u672c",level:2}],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6307\u5357\u5e2e\u52a9\u4f60\u4f7f\u7528\u9ed8\u8ba4\u9009\u9879\u5feb\u901f\u542f\u52a8\u96c6\u7fa4\u3002",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/"},"\u5b89\u88c5\u90e8\u5206"),"\u66f4\u8be6\u7ec6\u5730\u4ecb\u7ecd\u4e86\u5982\u4f55\u8bbe\u7f6e K3s\u3002"),(0,a.kt)("p",null,"\u6709\u5173 K3s \u7ec4\u4ef6\u5982\u4f55\u534f\u540c\u5de5\u4f5c\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/architecture/"},"\u67b6\u6784"),"\u3002"),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"Kubernetes \u65b0\u624b\uff1fKubernetes \u5b98\u65b9\u6587\u6863\u4ecb\u7ecd\u4e86\u4e00\u4e9b\u5f88\u597d\u7684",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tutorials/kubernetes-basics/"},"\u57fa\u7840\u77e5\u8bc6\u6559\u7a0b"),"\u3002")),(0,a.kt)("h2",{id:"\u5b89\u88c5\u811a\u672c"},"\u5b89\u88c5\u811a\u672c"),(0,a.kt)("p",null,"K3s \u63d0\u4f9b\u4e86\u4e00\u4e2a\u5b89\u88c5\u811a\u672c\uff0c\u53ef\u4ee5\u65b9\u4fbf\u5730\u5c06\u5176\u4f5c\u4e3a\u670d\u52a1\u5b89\u88c5\u5728\u57fa\u4e8e systemd \u6216 openrc \u7684\u7cfb\u7edf\u4e0a\u3002\u8be5\u811a\u672c\u53ef\u5728 ",(0,a.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \u83b7\u5f97\u3002\u8981\u4f7f\u7528\u8fd9\u79cd\u65b9\u6cd5\u5b89\u88c5 K3s\uff0c\u53ea\u9700\u8fd0\u884c\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -\n"))),(0,a.kt)("p",null,"\u8fd0\u884c\u6b64\u5b89\u88c5\u540e\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"K3s \u670d\u52a1\u5c06\u88ab\u914d\u7f6e\u4e3a\u5728\u8282\u70b9\u91cd\u542f\u540e\u6216\u8fdb\u7a0b\u5d29\u6e83\u6216\u88ab\u6740\u6b7b\u65f6\u81ea\u52a8\u91cd\u542f\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u5c06\u5b89\u88c5\u5176\u4ed6\u5b9e\u7528\u7a0b\u5e8f\uff0c\u5305\u62ec ",(0,a.kt)("inlineCode",{parentName:"li"},"kubectl"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"crictl"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"ctr"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-killall.sh")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s-uninstall.sh"),"\u3002"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," \u6587\u4ef6\u5c06\u5199\u5165\u5230 ",(0,a.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/k3s.yaml"),"\uff0c\u7531 K3s \u5b89\u88c5\u7684 kubectl \u5c06\u81ea\u52a8\u4f7f\u7528\u8be5\u6587\u4ef6\u3002")),(0,a.kt)("p",null,"\u5355\u8282\u70b9 Server \u5b89\u88c5\u662f\u4e00\u4e2a\u529f\u80fd\u9f50\u5168\u7684 Kubernetes \u96c6\u7fa4\uff0c\u5b83\u5305\u62ec\u4e86\u6258\u7ba1\u5de5\u4f5c\u8d1f\u8f7d pod \u6240\u9700\u7684\u6240\u6709\u6570\u636e\u5b58\u50a8\u3001control plane\u3001kubelet \u548c\u5bb9\u5668\u8fd0\u884c\u65f6\u7ec4\u4ef6\u3002\u9664\u975e\u4f60\u5e0c\u671b\u5411\u96c6\u7fa4\u6dfb\u52a0\u5bb9\u91cf\u6216\u5197\u4f59\uff0c\u5426\u5219\u6ca1\u6709\u5fc5\u8981\u6dfb\u52a0\u989d\u5916\u7684 Server \u6216 Agent \u8282\u70b9\u3002"),(0,a.kt)("p",null,"\u8981\u5b89\u88c5\u5176\u4ed6 Agent \u8282\u70b9\u5e76\u5c06\u5b83\u4eec\u6dfb\u52a0\u5230\u96c6\u7fa4\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u548c ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \u73af\u5883\u53d8\u91cf\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u3002\u4ee5\u4e0b\u793a\u4f8b\u6f14\u793a\u4e86\u5982\u4f55\u6dfb\u52a0 Agent \u8282\u70b9\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -\n"))),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u53c2\u6570\u4f1a\u5bfc\u81f4\u5b89\u88c5\u7a0b\u5e8f\u5c06 K3s \u914d\u7f6e\u4e3a Agent \u800c\u4e0d\u662f Server\u3002K3s Agent \u5c06\u6ce8\u518c\u5230\u5728 URL \u4e0a\u76d1\u542c\u7684 K3s Server\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \u4f7f\u7528\u7684\u503c\u5b58\u50a8\u5728 Server \u8282\u70b9\u4e0a\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/node-token")," \u4e2d\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u6bcf\u53f0\u4e3b\u673a\u5fc5\u987b\u5177\u6709\u552f\u4e00\u7684\u4e3b\u673a\u540d\u3002\u5982\u679c\u4f60\u7684\u8ba1\u7b97\u673a\u6ca1\u6709\u552f\u4e00\u7684\u4e3b\u673a\u540d\uff0c\u8bf7\u4f20\u9012 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_NODE_NAME")," \u73af\u5883\u53d8\u91cf\uff0c\u5e76\u4e3a\u6bcf\u4e2a\u8282\u70b9\u63d0\u4f9b\u4e00\u4e2a\u6709\u6548\u4e14\u552f\u4e00\u7684\u4e3b\u673a\u540d\u3002")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/1be78505.1ff28fb4.js b/zh/assets/js/1be78505.1ff28fb4.js
deleted file mode 100644
index a7b31c93a..000000000
--- a/zh/assets/js/1be78505.1ff28fb4.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9514,4972],{9963:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Se});var a=n(7294),l=n(6010),o=n(833),r=n(5281),c=n(3320),i=n(3438),s=n(4477),d=n(1116),m=n(6999),u=n(5999),b=n(2466),p=n(5936);const h="backToTopButton_sjWU",E="backToTopButtonShow_xfvO";function f(){const{shown:e,scrollToTop:t}=function(e){let{threshold:t}=e;const[n,l]=(0,a.useState)(!1),o=(0,a.useRef)(!1),{startScroll:r,cancelScroll:c}=(0,b.Ct)();return(0,b.RF)(((e,n)=>{let{scrollY:a}=e;const r=n?.scrollY;r&&(o.current?o.current=!1:a>=r?(c(),l(!1)):a<t?l(!1):a+window.innerHeight<document.documentElement.scrollHeight&&l(!0))})),(0,p.S)((e=>{e.location.hash&&(o.current=!0,l(!1))})),{shown:n,scrollToTop:()=>r(0)}}({threshold:300});return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.BackToTopButton.buttonAriaLabel",message:"Scroll back to top",description:"The ARIA label for the back to top button"}),className:(0,l.Z)("clean-btn",r.k.common.backToTopButton,h,e&&E),type:"button",onClick:t})}var v=n(1442),_=n(6775),g=n(7524),k=n(6668),C=n(1327),S=n(3117);function I(e){return a.createElement("svg",(0,S.Z)({width:"20",height:"20","aria-hidden":"true"},e),a.createElement("g",{fill:"#7a7a7a"},a.createElement("path",{d:"M9.992 10.023c0 .2-.062.399-.172.547l-4.996 7.492a.982.982 0 01-.828.454H1c-.55 0-1-.453-1-1 0-.2.059-.403.168-.551l4.629-6.942L.168 3.078A.939.939 0 010 2.528c0-.548.45-.997 1-.997h2.996c.352 0 .649.18.828.45L9.82 9.472c.11.148.172.347.172.55zm0 0"}),a.createElement("path",{d:"M19.98 10.023c0 .2-.058.399-.168.547l-4.996 7.492a.987.987 0 01-.828.454h-3c-.547 0-.996-.453-.996-1 0-.2.059-.403.168-.551l4.625-6.942-4.625-6.945a.939.939 0 01-.168-.55 1 1 0 01.996-.997h3c.348 0 .649.18.828.45l4.996 7.492c.11.148.168.347.168.55zm0 0"})))}const N="collapseSidebarButton_PEFL",Z="collapseSidebarButtonIcon_kv0_";function x(e){let{onClick:t}=e;return a.createElement("button",{type:"button",title:(0,u.I)({id:"theme.docs.sidebar.collapseButtonTitle",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.collapseButtonAriaLabel",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),className:(0,l.Z)("button button--secondary button--outline",N),onClick:t},a.createElement(I,{className:Z}))}var T=n(9689),y=n(902);const w=Symbol("EmptyContext"),L=a.createContext(w);function A(e){let{children:t}=e;const[n,l]=(0,a.useState)(null),o=(0,a.useMemo)((()=>({expandedItem:n,setExpandedItem:l})),[n]);return a.createElement(L.Provider,{value:o},t)}var M=n(6043),B=n(8596),F=n(9960),H=n(2389);function P(e){let{categoryLabel:t,onClick:n}=e;return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel",message:"Toggle the collapsible sidebar category '{label}'",description:"The ARIA label to toggle the collapsible sidebar category"},{label:t}),type:"button",className:"clean-btn menu__caret",onClick:n})}function D(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{items:m,label:u,collapsible:b,className:p,href:h}=t,{docs:{sidebar:{autoCollapseCategories:E}}}=(0,k.L)(),f=function(e){const t=(0,H.Z)();return(0,a.useMemo)((()=>e.href?e.href:!t&&e.collapsible?(0,i.Wl)(e):void 0),[e,t])}(t),v=(0,i._F)(t,o),_=(0,B.Mg)(h,o),{collapsed:g,setCollapsed:C}=(0,M.u)({initialState:()=>!!b&&(!v&&t.collapsed)}),{expandedItem:I,setExpandedItem:N}=function(){const e=(0,a.useContext)(L);if(e===w)throw new y.i6("DocSidebarItemsExpandedStateProvider");return e}(),Z=function(e){void 0===e&&(e=!g),N(e?null:s),C(e)};return function(e){let{isActive:t,collapsed:n,updateCollapsed:l}=e;const o=(0,y.D9)(t);(0,a.useEffect)((()=>{t&&!o&&n&&l(!1)}),[t,o,n,l])}({isActive:v,collapsed:g,updateCollapsed:Z}),(0,a.useEffect)((()=>{b&&null!=I&&I!==s&&E&&C(!0)}),[b,I,s,C,E]),a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemCategory,r.k.docs.docSidebarItemCategoryLevel(c),"menu__list-item",{"menu__list-item--collapsed":g},p)},a.createElement("div",{className:(0,l.Z)("menu__list-item-collapsible",{"menu__list-item-collapsible--active":_})},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",{"menu__link--sublist":b,"menu__link--sublist-caret":!h&&b,"menu__link--active":v}),onClick:b?e=>{n?.(t),h?Z(!1):(e.preventDefault(),Z())}:()=>{n?.(t)},"aria-current":_?"page":void 0,"aria-expanded":b?!g:void 0,href:b?f??"#":f},d),u),h&&b&&a.createElement(P,{categoryLabel:u,onClick:e=>{e.preventDefault(),Z()}})),a.createElement(M.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:g},a.createElement(G,{items:m,tabIndex:g?-1:0,onItemClick:n,activePath:o,level:c+1})))}var W=n(3919),R=n(9471);const V="menuExternalLink_NmtK";function z(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{href:m,label:u,className:b,autoAddBaseUrl:p}=t,h=(0,i._F)(t,o),E=(0,W.Z)(m);return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(c),"menu__list-item",b),key:u},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",!E&&V,{"menu__link--active":h}),autoAddBaseUrl:p,"aria-current":h?"page":void 0,to:m},E&&{onClick:n?()=>n(t):void 0},d),u,!E&&a.createElement(R.Z,null)))}const U="menuHtmlItem_M9Kj";function K(e){let{item:t,level:n,index:o}=e;const{value:c,defaultStyle:i,className:s}=t;return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(n),i&&[U,"menu__list-item"],s),key:o,dangerouslySetInnerHTML:{__html:c}})}function j(e){let{item:t,...n}=e;switch(t.type){case"category":return a.createElement(D,(0,S.Z)({item:t},n));case"html":return a.createElement(K,(0,S.Z)({item:t},n));default:return a.createElement(z,(0,S.Z)({item:t},n))}}function q(e){let{items:t,...n}=e;return a.createElement(A,null,t.map(((e,t)=>a.createElement(j,(0,S.Z)({key:t,item:e,index:t},n)))))}const G=(0,a.memo)(q),Y="menu_SIkG",O="menuWithAnnouncementBar_GW3s";function X(e){let{path:t,sidebar:n,className:o}=e;const c=function(){const{isActive:e}=(0,T.nT)(),[t,n]=(0,a.useState)(e);return(0,b.RF)((t=>{let{scrollY:a}=t;e&&n(0===a)}),[e]),e&&t}();return a.createElement("nav",{"aria-label":(0,u.I)({id:"theme.docs.sidebar.navAriaLabel",message:"Docs sidebar",description:"The ARIA label for the sidebar navigation"}),className:(0,l.Z)("menu thin-scrollbar",Y,c&&O,o)},a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:n,activePath:t,level:1})))}const J="sidebar_njMd",Q="sidebarWithHideableNavbar_wUlq",$="sidebarHidden_VK0M",ee="sidebarLogo_isFc";function te(e){let{path:t,sidebar:n,onCollapse:o,isHidden:r}=e;const{navbar:{hideOnScroll:c},docs:{sidebar:{hideable:i}}}=(0,k.L)();return a.createElement("div",{className:(0,l.Z)(J,c&&Q,r&&$)},c&&a.createElement(C.Z,{tabIndex:-1,className:ee}),a.createElement(X,{path:t,sidebar:n}),i&&a.createElement(x,{onClick:o}))}const ne=a.memo(te);var ae=n(3102),le=n(3163);const oe=e=>{let{sidebar:t,path:n}=e;const o=(0,le.e)();return a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:t,activePath:n,onItemClick:e=>{"category"===e.type&&e.href&&o.toggle(),"link"===e.type&&o.toggle()},level:1}))};function re(e){return a.createElement(ae.Zo,{component:oe,props:e})}const ce=a.memo(re);function ie(e){const t=(0,g.i)(),n="desktop"===t||"ssr"===t,l="mobile"===t;return a.createElement(a.Fragment,null,n&&a.createElement(ne,e),l&&a.createElement(ce,e))}const se="expandButton_m80_",de="expandButtonIcon_BlDH";function me(e){let{toggleSidebar:t}=e;return a.createElement("div",{className:se,title:(0,u.I)({id:"theme.docs.sidebar.expandButtonTitle",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.expandButtonAriaLabel",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),tabIndex:0,role:"button",onKeyDown:t,onClick:t},a.createElement(I,{className:de}))}const ue={docSidebarContainer:"docSidebarContainer_b6E3",docSidebarContainerHidden:"docSidebarContainerHidden_b3ry",sidebarViewport:"sidebarViewport_Xe31"};function be(e){let{children:t}=e;const n=(0,d.V)();return a.createElement(a.Fragment,{key:n?.name??"noSidebar"},t)}function pe(e){let{sidebar:t,hiddenSidebarContainer:n,setHiddenSidebarContainer:o}=e;const{pathname:c}=(0,_.TH)(),[i,s]=(0,a.useState)(!1),d=(0,a.useCallback)((()=>{i&&s(!1),!i&&(0,v.n)()&&s(!0),o((e=>!e))}),[o,i]);return a.createElement("aside",{className:(0,l.Z)(r.k.docs.docSidebarContainer,ue.docSidebarContainer,n&&ue.docSidebarContainerHidden),onTransitionEnd:e=>{e.currentTarget.classList.contains(ue.docSidebarContainer)&&n&&s(!0)}},a.createElement(be,null,a.createElement("div",{className:(0,l.Z)(ue.sidebarViewport,i&&ue.sidebarViewportHidden)},a.createElement(ie,{sidebar:t,path:c,onCollapse:d,isHidden:i}),i&&a.createElement(me,{toggleSidebar:d}))))}const he={docMainContainer:"docMainContainer_gTbr",docMainContainerEnhanced:"docMainContainerEnhanced_Uz_u",docItemWrapperEnhanced:"docItemWrapperEnhanced_czyv"};function Ee(e){let{hiddenSidebarContainer:t,children:n}=e;const o=(0,d.V)();return a.createElement("main",{className:(0,l.Z)(he.docMainContainer,(t||!o)&&he.docMainContainerEnhanced)},a.createElement("div",{className:(0,l.Z)("container padding-top--md padding-bottom--lg",he.docItemWrapper,t&&he.docItemWrapperEnhanced)},n))}const fe="docPage__5DB",ve="docsWrapper_BCFX";function _e(e){let{children:t}=e;const n=(0,d.V)(),[l,o]=(0,a.useState)(!1);return a.createElement(m.Z,{wrapperClassName:ve},a.createElement(f,null),a.createElement("div",{className:fe},n&&a.createElement(pe,{sidebar:n.items,hiddenSidebarContainer:l,setHiddenSidebarContainer:o}),a.createElement(Ee,{hiddenSidebarContainer:l},t)))}var ge=n(4972),ke=n(197);function Ce(e){const{versionMetadata:t}=e;return a.createElement(a.Fragment,null,a.createElement(ke.Z,{version:t.version,tag:(0,c.os)(t.pluginId,t.version)}),a.createElement(o.d,null,t.noIndex&&a.createElement("meta",{name:"robots",content:"noindex, nofollow"})))}function Se(e){const{versionMetadata:t}=e,n=(0,i.hI)(e);if(!n)return a.createElement(ge.default,null);const{docElement:c,sidebarName:m,sidebarItems:u}=n;return a.createElement(a.Fragment,null,a.createElement(Ce,e),a.createElement(o.FG,{className:(0,l.Z)(r.k.wrapper.docsPages,r.k.page.docsDocPage,e.versionMetadata.className)},a.createElement(s.q,{version:t},a.createElement(d.b,{name:m,items:u},a.createElement(_e,null,c)))))}},4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(833),r=n(6999);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}},4477:(e,t,n)=>{n.d(t,{E:()=>c,q:()=>r});var a=n(7294),l=n(902);const o=a.createContext(null);function r(e){let{children:t,version:n}=e;return a.createElement(o.Provider,{value:n},t)}function c(){const e=(0,a.useContext)(o);if(null===e)throw new l.i6("DocsVersionProvider");return e}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/1be78505.3b555d49.js b/zh/assets/js/1be78505.3b555d49.js
new file mode 100644
index 000000000..d0dd4f40c
--- /dev/null
+++ b/zh/assets/js/1be78505.3b555d49.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9514,4972],{9963:(e,t,n)=>{n.r(t),n.d(t,{default:()=>Se});var a=n(7294),l=n(6010),o=n(1944),r=n(5281),c=n(3320),i=n(3438),s=n(4477),d=n(1116),m=n(1573),u=n(5999),b=n(2466),p=n(5936);const h="backToTopButton_sjWU",E="backToTopButtonShow_xfvO";function f(){const{shown:e,scrollToTop:t}=function(e){let{threshold:t}=e;const[n,l]=(0,a.useState)(!1),o=(0,a.useRef)(!1),{startScroll:r,cancelScroll:c}=(0,b.Ct)();return(0,b.RF)(((e,n)=>{let{scrollY:a}=e;const r=n?.scrollY;r&&(o.current?o.current=!1:a>=r?(c(),l(!1)):a<t?l(!1):a+window.innerHeight<document.documentElement.scrollHeight&&l(!0))})),(0,p.S)((e=>{e.location.hash&&(o.current=!0,l(!1))})),{shown:n,scrollToTop:()=>r(0)}}({threshold:300});return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.BackToTopButton.buttonAriaLabel",message:"Scroll back to top",description:"The ARIA label for the back to top button"}),className:(0,l.Z)("clean-btn",r.k.common.backToTopButton,h,e&&E),type:"button",onClick:t})}var v=n(1442),_=n(6775),g=n(7524),k=n(6668),C=n(1327),S=n(3117);function I(e){return a.createElement("svg",(0,S.Z)({width:"20",height:"20","aria-hidden":"true"},e),a.createElement("g",{fill:"#7a7a7a"},a.createElement("path",{d:"M9.992 10.023c0 .2-.062.399-.172.547l-4.996 7.492a.982.982 0 01-.828.454H1c-.55 0-1-.453-1-1 0-.2.059-.403.168-.551l4.629-6.942L.168 3.078A.939.939 0 010 2.528c0-.548.45-.997 1-.997h2.996c.352 0 .649.18.828.45L9.82 9.472c.11.148.172.347.172.55zm0 0"}),a.createElement("path",{d:"M19.98 10.023c0 .2-.058.399-.168.547l-4.996 7.492a.987.987 0 01-.828.454h-3c-.547 0-.996-.453-.996-1 0-.2.059-.403.168-.551l4.625-6.942-4.625-6.945a.939.939 0 01-.168-.55 1 1 0 01.996-.997h3c.348 0 .649.18.828.45l4.996 7.492c.11.148.168.347.168.55zm0 0"})))}const N="collapseSidebarButton_PEFL",Z="collapseSidebarButtonIcon_kv0_";function x(e){let{onClick:t}=e;return a.createElement("button",{type:"button",title:(0,u.I)({id:"theme.docs.sidebar.collapseButtonTitle",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.collapseButtonAriaLabel",message:"Collapse sidebar",description:"The title attribute for collapse button of doc sidebar"}),className:(0,l.Z)("button button--secondary button--outline",N),onClick:t},a.createElement(I,{className:Z}))}var T=n(9689),y=n(902);const w=Symbol("EmptyContext"),L=a.createContext(w);function A(e){let{children:t}=e;const[n,l]=(0,a.useState)(null),o=(0,a.useMemo)((()=>({expandedItem:n,setExpandedItem:l})),[n]);return a.createElement(L.Provider,{value:o},t)}var M=n(6043),B=n(8596),F=n(9960),H=n(2389);function P(e){let{categoryLabel:t,onClick:n}=e;return a.createElement("button",{"aria-label":(0,u.I)({id:"theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel",message:"Toggle the collapsible sidebar category '{label}'",description:"The ARIA label to toggle the collapsible sidebar category"},{label:t}),type:"button",className:"clean-btn menu__caret",onClick:n})}function D(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{items:m,label:u,collapsible:b,className:p,href:h}=t,{docs:{sidebar:{autoCollapseCategories:E}}}=(0,k.L)(),f=function(e){const t=(0,H.Z)();return(0,a.useMemo)((()=>e.href?e.href:!t&&e.collapsible?(0,i.Wl)(e):void 0),[e,t])}(t),v=(0,i._F)(t,o),_=(0,B.Mg)(h,o),{collapsed:g,setCollapsed:C}=(0,M.u)({initialState:()=>!!b&&(!v&&t.collapsed)}),{expandedItem:I,setExpandedItem:N}=function(){const e=(0,a.useContext)(L);if(e===w)throw new y.i6("DocSidebarItemsExpandedStateProvider");return e}(),Z=function(e){void 0===e&&(e=!g),N(e?null:s),C(e)};return function(e){let{isActive:t,collapsed:n,updateCollapsed:l}=e;const o=(0,y.D9)(t);(0,a.useEffect)((()=>{t&&!o&&n&&l(!1)}),[t,o,n,l])}({isActive:v,collapsed:g,updateCollapsed:Z}),(0,a.useEffect)((()=>{b&&null!=I&&I!==s&&E&&C(!0)}),[b,I,s,C,E]),a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemCategory,r.k.docs.docSidebarItemCategoryLevel(c),"menu__list-item",{"menu__list-item--collapsed":g},p)},a.createElement("div",{className:(0,l.Z)("menu__list-item-collapsible",{"menu__list-item-collapsible--active":_})},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",{"menu__link--sublist":b,"menu__link--sublist-caret":!h&&b,"menu__link--active":v}),onClick:b?e=>{n?.(t),h?Z(!1):(e.preventDefault(),Z())}:()=>{n?.(t)},"aria-current":_?"page":void 0,"aria-expanded":b?!g:void 0,href:b?f??"#":f},d),u),h&&b&&a.createElement(P,{categoryLabel:u,onClick:e=>{e.preventDefault(),Z()}})),a.createElement(M.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:g},a.createElement(G,{items:m,tabIndex:g?-1:0,onItemClick:n,activePath:o,level:c+1})))}var W=n(3919),R=n(9471);const V="menuExternalLink_NmtK";function z(e){let{item:t,onItemClick:n,activePath:o,level:c,index:s,...d}=e;const{href:m,label:u,className:b,autoAddBaseUrl:p}=t,h=(0,i._F)(t,o),E=(0,W.Z)(m);return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(c),"menu__list-item",b),key:u},a.createElement(F.Z,(0,S.Z)({className:(0,l.Z)("menu__link",!E&&V,{"menu__link--active":h}),autoAddBaseUrl:p,"aria-current":h?"page":void 0,to:m},E&&{onClick:n?()=>n(t):void 0},d),u,!E&&a.createElement(R.Z,null)))}const U="menuHtmlItem_M9Kj";function K(e){let{item:t,level:n,index:o}=e;const{value:c,defaultStyle:i,className:s}=t;return a.createElement("li",{className:(0,l.Z)(r.k.docs.docSidebarItemLink,r.k.docs.docSidebarItemLinkLevel(n),i&&[U,"menu__list-item"],s),key:o,dangerouslySetInnerHTML:{__html:c}})}function j(e){let{item:t,...n}=e;switch(t.type){case"category":return a.createElement(D,(0,S.Z)({item:t},n));case"html":return a.createElement(K,(0,S.Z)({item:t},n));default:return a.createElement(z,(0,S.Z)({item:t},n))}}function q(e){let{items:t,...n}=e;return a.createElement(A,null,t.map(((e,t)=>a.createElement(j,(0,S.Z)({key:t,item:e,index:t},n)))))}const G=(0,a.memo)(q),Y="menu_SIkG",O="menuWithAnnouncementBar_GW3s";function X(e){let{path:t,sidebar:n,className:o}=e;const c=function(){const{isActive:e}=(0,T.nT)(),[t,n]=(0,a.useState)(e);return(0,b.RF)((t=>{let{scrollY:a}=t;e&&n(0===a)}),[e]),e&&t}();return a.createElement("nav",{"aria-label":(0,u.I)({id:"theme.docs.sidebar.navAriaLabel",message:"Docs sidebar",description:"The ARIA label for the sidebar navigation"}),className:(0,l.Z)("menu thin-scrollbar",Y,c&&O,o)},a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:n,activePath:t,level:1})))}const J="sidebar_njMd",Q="sidebarWithHideableNavbar_wUlq",$="sidebarHidden_VK0M",ee="sidebarLogo_isFc";function te(e){let{path:t,sidebar:n,onCollapse:o,isHidden:r}=e;const{navbar:{hideOnScroll:c},docs:{sidebar:{hideable:i}}}=(0,k.L)();return a.createElement("div",{className:(0,l.Z)(J,c&&Q,r&&$)},c&&a.createElement(C.Z,{tabIndex:-1,className:ee}),a.createElement(X,{path:t,sidebar:n}),i&&a.createElement(x,{onClick:o}))}const ne=a.memo(te);var ae=n(3102),le=n(3163);const oe=e=>{let{sidebar:t,path:n}=e;const o=(0,le.e)();return a.createElement("ul",{className:(0,l.Z)(r.k.docs.docSidebarMenu,"menu__list")},a.createElement(G,{items:t,activePath:n,onItemClick:e=>{"category"===e.type&&e.href&&o.toggle(),"link"===e.type&&o.toggle()},level:1}))};function re(e){return a.createElement(ae.Zo,{component:oe,props:e})}const ce=a.memo(re);function ie(e){const t=(0,g.i)(),n="desktop"===t||"ssr"===t,l="mobile"===t;return a.createElement(a.Fragment,null,n&&a.createElement(ne,e),l&&a.createElement(ce,e))}const se="expandButton_m80_",de="expandButtonIcon_BlDH";function me(e){let{toggleSidebar:t}=e;return a.createElement("div",{className:se,title:(0,u.I)({id:"theme.docs.sidebar.expandButtonTitle",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),"aria-label":(0,u.I)({id:"theme.docs.sidebar.expandButtonAriaLabel",message:"Expand sidebar",description:"The ARIA label and title attribute for expand button of doc sidebar"}),tabIndex:0,role:"button",onKeyDown:t,onClick:t},a.createElement(I,{className:de}))}const ue={docSidebarContainer:"docSidebarContainer_b6E3",docSidebarContainerHidden:"docSidebarContainerHidden_b3ry",sidebarViewport:"sidebarViewport_Xe31"};function be(e){let{children:t}=e;const n=(0,d.V)();return a.createElement(a.Fragment,{key:n?.name??"noSidebar"},t)}function pe(e){let{sidebar:t,hiddenSidebarContainer:n,setHiddenSidebarContainer:o}=e;const{pathname:c}=(0,_.TH)(),[i,s]=(0,a.useState)(!1),d=(0,a.useCallback)((()=>{i&&s(!1),!i&&(0,v.n)()&&s(!0),o((e=>!e))}),[o,i]);return a.createElement("aside",{className:(0,l.Z)(r.k.docs.docSidebarContainer,ue.docSidebarContainer,n&&ue.docSidebarContainerHidden),onTransitionEnd:e=>{e.currentTarget.classList.contains(ue.docSidebarContainer)&&n&&s(!0)}},a.createElement(be,null,a.createElement("div",{className:(0,l.Z)(ue.sidebarViewport,i&&ue.sidebarViewportHidden)},a.createElement(ie,{sidebar:t,path:c,onCollapse:d,isHidden:i}),i&&a.createElement(me,{toggleSidebar:d}))))}const he={docMainContainer:"docMainContainer_gTbr",docMainContainerEnhanced:"docMainContainerEnhanced_Uz_u",docItemWrapperEnhanced:"docItemWrapperEnhanced_czyv"};function Ee(e){let{hiddenSidebarContainer:t,children:n}=e;const o=(0,d.V)();return a.createElement("main",{className:(0,l.Z)(he.docMainContainer,(t||!o)&&he.docMainContainerEnhanced)},a.createElement("div",{className:(0,l.Z)("container padding-top--md padding-bottom--lg",he.docItemWrapper,t&&he.docItemWrapperEnhanced)},n))}const fe="docPage__5DB",ve="docsWrapper_BCFX";function _e(e){let{children:t}=e;const n=(0,d.V)(),[l,o]=(0,a.useState)(!1);return a.createElement(m.Z,{wrapperClassName:ve},a.createElement(f,null),a.createElement("div",{className:fe},n&&a.createElement(pe,{sidebar:n.items,hiddenSidebarContainer:l,setHiddenSidebarContainer:o}),a.createElement(Ee,{hiddenSidebarContainer:l},t)))}var ge=n(4972),ke=n(197);function Ce(e){const{versionMetadata:t}=e;return a.createElement(a.Fragment,null,a.createElement(ke.Z,{version:t.version,tag:(0,c.os)(t.pluginId,t.version)}),a.createElement(o.d,null,t.noIndex&&a.createElement("meta",{name:"robots",content:"noindex, nofollow"})))}function Se(e){const{versionMetadata:t}=e,n=(0,i.hI)(e);if(!n)return a.createElement(ge.default,null);const{docElement:c,sidebarName:m,sidebarItems:u}=n;return a.createElement(a.Fragment,null,a.createElement(Ce,e),a.createElement(o.FG,{className:(0,l.Z)(r.k.wrapper.docsPages,r.k.page.docsDocPage,e.versionMetadata.className)},a.createElement(s.q,{version:t},a.createElement(d.b,{name:m,items:u},a.createElement(_e,null,c)))))}},4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(1944),r=n(1573);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}},4477:(e,t,n)=>{n.d(t,{E:()=>c,q:()=>r});var a=n(7294),l=n(902);const o=a.createContext(null);function r(e){let{children:t,version:n}=e;return a.createElement(o.Provider,{value:n},t)}function c(){const e=(0,a.useContext)(o);if(null===e)throw new l.i6("DocsVersionProvider");return e}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/1f6c7e37.860a7f31.js b/zh/assets/js/1f6c7e37.f84efbf9.js
similarity index 99%
rename from zh/assets/js/1f6c7e37.860a7f31.js
rename to zh/assets/js/1f6c7e37.f84efbf9.js
index 72ea68a2d..4481da546 100644
--- a/zh/assets/js/1f6c7e37.860a7f31.js
+++ b/zh/assets/js/1f6c7e37.f84efbf9.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5394],{3905:(e,t,r)=>{r.d(t,{Zo:()=>m,kt:()=>u});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var p=n.createContext({}),s=function(e){var t=n.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},m=function(e){var t=s(e.components);return n.createElement(p.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},c=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,p=e.parentName,m=o(e,["components","mdxType","originalType","parentName"]),c=s(r),u=a,k=c["".concat(p,".").concat(u)]||c[u]||d[u]||i;return r?n.createElement(k,l(l({ref:t},m),{},{components:r})):n.createElement(k,l({ref:t},m))}));function u(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,l=new Array(i);l[0]=c;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,l[1]=o;for(var s=2;s<i;s++)l[s]=r[s];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}c.displayName="MDXCreateElement"},1665:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>l,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>s});var n=r(3117),a=(r(7294),r(3905));const i={title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",weight:55},l=void 0,o={unversionedId:"installation/private-registry",id:"installation/private-registry",title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",description:"\u4f60\u53ef\u4ee5\u5c06 Containerd \u914d\u7f6e\u4e3a\u8fde\u63a5\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\uff0c\u5e76\u5728\u8282\u70b9\u4e0a\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u62c9\u53d6\u79c1\u6709\u955c\u50cf\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/private-registry.md",sourceDirName:"installation",slug:"/installation/private-registry",permalink:"/zh/installation/private-registry",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",weight:55},sidebar:"mySidebar",previous:{title:"\u7f51\u7edc\u9009\u9879",permalink:"/zh/installation/network-options"},next:{title:"\u79bb\u7ebf\u5b89\u88c5",permalink:"/zh/installation/airgap"}},p={},s=[{value:"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6",id:"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6",level:2},{value:"Mirrors",id:"mirrors",level:3},{value:"\u91cd\u5b9a\u5411",id:"\u91cd\u5b9a\u5411",level:4},{value:"Rewrites",id:"rewrites",level:4},{value:"Configs",id:"configs",level:3},{value:"\u4f7f\u7528 TLS",id:"\u4f7f\u7528-tls",level:3},{value:"\u6ca1\u6709 TLS",id:"\u6ca1\u6709-tls",level:3},{value:"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",id:"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",level:2}],m=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},d=m("Tabs"),c=m("TabItem"),u={toc:s};function k(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u5c06 Containerd \u914d\u7f6e\u4e3a\u8fde\u63a5\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\uff0c\u5e76\u5728\u8282\u70b9\u4e0a\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u62c9\u53d6\u79c1\u6709\u955c\u50cf\u3002"),(0,a.kt)("p",null,"\u542f\u52a8\u65f6\uff0cK3s \u4f1a\u68c0\u67e5 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/")," \u4e2d\u662f\u5426\u5b58\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"registries.yaml")," \u6587\u4ef6\uff0c\u5e76\u6307\u793a containerd \u4f7f\u7528\u8be5\u6587\u4ef6\u4e2d\u5b9a\u4e49\u7684\u955c\u50cf\u4ed3\u5e93\u3002\u5982\u679c\u4f60\u60f3\u4f7f\u7528\u79c1\u6709\u7684\u955c\u50cf\u4ed3\u5e93\uff0c\u4f60\u9700\u8981\u5728\u6bcf\u4e2a\u4f7f\u7528\u955c\u50cf\u4ed3\u5e93\u7684\u8282\u70b9\u4e0a\u4ee5 root \u8eab\u4efd\u521b\u5efa\u8fd9\u4e2a\u6587\u4ef6\u3002"),(0,a.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cserver \u8282\u70b9\u9ed8\u8ba4\u662f\u53ef\u4ee5\u8c03\u5ea6\u7684\u3002\u5982\u679c\u4f60\u6ca1\u6709\u5728 server \u8282\u70b9\u4e0a\u8bbe\u7f6e\u6c61\u70b9\uff0c\u800c\u4e14\u5e0c\u671b\u5728 server \u8282\u70b9\u4e0a\u8fd0\u884c\u5de5\u4f5c\u8d1f\u8f7d\uff0c\u8bf7\u786e\u4fdd\u5728\u6bcf\u4e2a server \u8282\u70b9\u4e0a\u521b\u5efa ",(0,a.kt)("inlineCode",{parentName:"p"},"registries.yaml")," \u6587\u4ef6\u3002"),(0,a.kt)("p",null,"Containerd \u4e2d\u7684\u914d\u7f6e\u53ef\u4ee5\u7528\u4e8e\u901a\u8fc7 TLS \u8fde\u63a5\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\uff0c\u4e5f\u53ef\u4ee5\u4e0e\u542f\u7528\u9a8c\u8bc1\u7684\u955c\u50cf\u4ed3\u5e93\u8fde\u63a5\u3002\u4e0b\u4e00\u8282\u5c06\u89e3\u91ca ",(0,a.kt)("inlineCode",{parentName:"p"},"registries.yaml")," \u6587\u4ef6\uff0c\u5e76\u7ed9\u51fa\u5728 K3s \u4e2d\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u7684\u4e0d\u540c\u4f8b\u5b50\u3002"),(0,a.kt)("h2",{id:"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6"},"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6"),(0,a.kt)("p",null,"\u8be5\u6587\u4ef6\u7531\u4e24\u4e2a\u4e3b\u8981\u90e8\u5206\u7ec4\u6210\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"mirrors"),(0,a.kt)("li",{parentName:"ul"},"configs")),(0,a.kt)("h3",{id:"mirrors"},"Mirrors"),(0,a.kt)("p",null,"Mirrors \u662f\u7528\u4e8e\u5b9a\u4e49\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u540d\u79f0\u548c\u7aef\u70b9\u7684\u6307\u4ee4\uff0c\u4f8b\u5982\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},'mirrors:\n  mycustomreg.com:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,a.kt)("p",null,"\u6bcf\u4e2a mirror \u90fd\u5fc5\u987b\u6709\u4e00\u4e2a\u540d\u79f0\u548c\u4e00\u7ec4\u7aef\u70b9\u3002\u4ece\u955c\u50cf\u4ed3\u5e93\u4e2d\u62c9\u53d6\u955c\u50cf\u65f6\uff0ccontainerd \u4f1a\u9010\u4e2a\u5c1d\u8bd5\u8fd9\u4e9b\u7aef\u70b9 URL\uff0c\u5e76\u4f7f\u7528\u7b2c\u4e00\u4e2a\u6709\u6548\u7684 URL\u3002"),(0,a.kt)("h4",{id:"\u91cd\u5b9a\u5411"},"\u91cd\u5b9a\u5411"),(0,a.kt)("p",null,"\u5982\u679c\u5c06\u516c\u5171\u955c\u50cf\u4ed3\u5e93\u7528\u4f5c Mirror\uff0c\u4f8b\u5982\u5728\u914d\u7f6e",(0,a.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/recipes/mirror/"},"\u901a\u8fc7\u7f13\u5b58\u62c9\u53d6"),"\u65f6\uff0c\u955c\u50cf\u62c9\u53d6\u5c06\u88ab\u900f\u660e\u5730\u91cd\u5b9a\u5411\u3002"),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u5982\u679c\u4f60\u4e3a ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io")," \u914d\u7f6e\u4e86\u4e00\u4e2a Mirror\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,a.kt)("p",null,"\u7136\u540e\uff0c\u62c9\u53d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," \u5c06\u900f\u660e\u5730\u4ece ",(0,a.kt)("inlineCode",{parentName:"p"},"https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3")," \u62c9\u53d6\u955c\u50cf\u3002"),(0,a.kt)("h4",{id:"rewrites"},"Rewrites"),(0,a.kt)("p",null,"\u6bcf\u4e2a Mirror \u90fd\u53ef\u4ee5\u6709\u4e00\u7ec4 rewrites\u3002Rewrites \u53ef\u4ee5\u6839\u636e\u6b63\u5219\u8868\u8fbe\u5f0f\u6765\u6539\u53d8\u955c\u50cf\u7684\u6807\u7b7e\u3002\u5982\u679c mirror \u4ed3\u5e93\u4e2d\u7684\u7ec4\u7ec7/\u9879\u76ee\u7ed3\u6784\u4e0e\u4e0a\u6e38\u4e0d\u540c\uff0c\u8fd9\u5c06\u5f88\u6709\u7528\u3002"),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u4ee5\u4e0b\u914d\u7f6e\u5c06\u900f\u660e\u5730\u4ece ",(0,a.kt)("inlineCode",{parentName:"p"},"registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3")," \u4e2d\u62c9\u53d6\u955c\u50cf ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3"),"\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://registry.example.com:5000"\n    rewrite:\n      "^rancher/(.*)": "mirrorproject/rancher-images/$1"\n')),(0,a.kt)("p",null,"\u955c\u50cf\u4ecd\u5c06\u4ee5\u539f\u59cb\u540d\u79f0\u5b58\u50a8\uff0c\u56e0\u6b64\uff0c\u5373\u4f7f\u955c\u50cf\u4ee5\u4e0d\u540c\u7684\u540d\u5b57\u4ece\u955c\u50cf\u4ed3\u5e93\u4e2d\u62c9\u53d6\uff0c",(0,a.kt)("inlineCode",{parentName:"p"},"crictl image ls")," \u4e5f\u5c06\u663e\u793a ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," \u5728\u8282\u70b9\u4e0a\u662f\u53ef\u7528\u7684\u3002"),(0,a.kt)("h3",{id:"configs"},"Configs"),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"configs")," \u90e8\u5206\u5b9a\u4e49\u4e86\u6bcf\u4e2a mirror \u7684 TLS \u548c\u51ed\u8bc1\u914d\u7f6e\u3002\u5bf9\u4e8e\u6bcf\u4e2a mirror\uff0c\u4f60\u53ef\u4ee5\u5b9a\u4e49 ",(0,a.kt)("inlineCode",{parentName:"p"},"auth")," \u548c/\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"tls"),"\u3002"),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"tls")," \u90e8\u5206\u5305\u62ec\uff1a"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"\u6307\u4ee4"),(0,a.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"cert_file")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5ba2\u6237\u7aef\u8bc1\u4e66\u8def\u5f84\uff0c\u7528\u4e8e\u5411\u955c\u50cf\u4ed3\u5e93\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"key_file")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5ba2\u6237\u7aef\u5bc6\u94a5\u8def\u5f84\uff0c\u7528\u4e8e\u5411\u955c\u50cf\u4ed3\u5e93\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"ca_file")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5b9a\u4e49\u7528\u4e8e\u9a8c\u8bc1\u955c\u50cf\u4ed3\u5e93\u670d\u52a1\u5668\u8bc1\u4e66\u6587\u4ef6\u7684 CA \u8bc1\u4e66\u8def\u5f84")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"insecure_skip_verify")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5b9a\u4e49\u662f\u5426\u5e94\u8df3\u8fc7\u955c\u50cf\u4ed3\u5e93\u7684 TLS \u9a8c\u8bc1\u7684\u5e03\u5c14\u503c")))),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"auth")," \u90e8\u5206\u7531\u7528\u6237\u540d/\u5bc6\u7801\u6216\u8eab\u4efd\u9a8c\u8bc1\u4ee4\u724c\u7ec4\u6210\uff1a"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"\u6307\u4ee4"),(0,a.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"username")),(0,a.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u57fa\u672c\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u540d")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"password")),(0,a.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u57fa\u672c\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u5bc6\u7801")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"auth")),(0,a.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u57fa\u672c\u8eab\u4efd\u9a8c\u8bc1\u7684\u8eab\u4efd\u9a8c\u8bc1\u4ee4\u724c")))),(0,a.kt)("p",null,"\u4ee5\u4e0b\u662f\u5728\u4e0d\u540c\u6a21\u5f0f\u4e0b\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u7684\u57fa\u672c\u4f8b\u5b50\uff1a"),(0,a.kt)("h3",{id:"\u4f7f\u7528-tls"},"\u4f7f\u7528 TLS"),(0,a.kt)("p",null,"\u4e0b\u9762\u7684\u4f8b\u5b50\u5c55\u793a\u4e86\u4f7f\u7528 TLS \u65f6\uff0c\u5982\u4f55\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u914d\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml"),"\u3002"),(0,a.kt)(d,{mdxType:"Tabs"},(0,a.kt)(c,{value:"\u6709\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n'))),(0,a.kt)(c,{value:"\u65e0\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n')))),(0,a.kt)("h3",{id:"\u6ca1\u6709-tls"},"\u6ca1\u6709 TLS"),(0,a.kt)("p",null,"\u4ee5\u4e0b\u793a\u4f8b\u5c55\u793a\u4e86",(0,a.kt)("em",{parentName:"p"},"\u4e0d"),"\u4f7f\u7528 TLS \u65f6\uff0c\u5982\u4f55\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u914d\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml"),"\u3002"),(0,a.kt)(d,{mdxType:"Tabs"},(0,a.kt)(c,{value:"\u6709\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n'))),(0,a.kt)(c,{value:"\u65e0\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\n')))),(0,a.kt)("blockquote",null,(0,a.kt)("p",{parentName:"blockquote"},"\u5982\u679c\u6ca1\u6709 TLS \u901a\u4fe1\uff0c\u4f60\u9700\u8981\u4e3a\u7aef\u70b9\u6307\u5b9a ",(0,a.kt)("inlineCode",{parentName:"p"},"http://"),"\uff0c\u5426\u5219\u5c06\u9ed8\u8ba4\u4e3a https\u3002")),(0,a.kt)("p",null,"\u4e3a\u4e86\u4f7f\u955c\u50cf\u4ed3\u5e93\u66f4\u6539\u751f\u6548\uff0c\u4f60\u9700\u8981\u91cd\u65b0\u542f\u52a8\u6bcf\u4e2a\u8282\u70b9\u4e0a\u7684 K3s\u3002"),(0,a.kt)("h2",{id:"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"},"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"),(0,a.kt)("p",null,"\u9996\u5148\uff0c\u4ece GitHub \u4e0a\u83b7\u53d6\u4f60\u6b63\u5728\u4f7f\u7528\u7684\u7248\u672c\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," \u6587\u4ef6\u3002\n\u4ece docker.io \u62c9\u53d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," \u6587\u4ef6\u4e2d\u5217\u51fa\u7684 K3s \u955c\u50cf"),(0,a.kt)("p",null,"\u793a\u4f8b\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"docker pull docker.io/rancher/coredns-coredns:1.6.3")),(0,a.kt)("p",null,"\u7136\u540e\uff0c\u5c06\u955c\u50cf\u91cd\u65b0\u6807\u8bb0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u3002"),(0,a.kt)("p",null,"\u793a\u4f8b\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns")),(0,a.kt)("p",null,"\u6700\u540e\uff0c\u5c06\u955c\u50cf\u63a8\u9001\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u3002"),(0,a.kt)("p",null,"\u793a\u4f8b\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"docker push mycustomreg.com:5000/coredns-coredns")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5394],{3905:(e,t,r)=>{r.d(t,{Zo:()=>m,kt:()=>u});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var p=n.createContext({}),s=function(e){var t=n.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},m=function(e){var t=s(e.components);return n.createElement(p.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},c=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,p=e.parentName,m=o(e,["components","mdxType","originalType","parentName"]),c=s(r),u=a,k=c["".concat(p,".").concat(u)]||c[u]||d[u]||i;return r?n.createElement(k,l(l({ref:t},m),{},{components:r})):n.createElement(k,l({ref:t},m))}));function u(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,l=new Array(i);l[0]=c;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,l[1]=o;for(var s=2;s<i;s++)l[s]=r[s];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}c.displayName="MDXCreateElement"},1665:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>l,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>s});var n=r(3117),a=(r(7294),r(3905));const i={title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",weight:55},l=void 0,o={unversionedId:"installation/private-registry",id:"installation/private-registry",title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",description:"\u4f60\u53ef\u4ee5\u5c06 Containerd \u914d\u7f6e\u4e3a\u8fde\u63a5\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\uff0c\u5e76\u5728\u8282\u70b9\u4e0a\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u62c9\u53d6\u79c1\u6709\u955c\u50cf\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/private-registry.md",sourceDirName:"installation",slug:"/installation/private-registry",permalink:"/zh/installation/private-registry",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",weight:55},sidebar:"mySidebar",previous:{title:"\u7f51\u7edc\u9009\u9879",permalink:"/zh/installation/network-options"},next:{title:"\u79bb\u7ebf\u5b89\u88c5",permalink:"/zh/installation/airgap"}},p={},s=[{value:"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6",id:"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6",level:2},{value:"Mirrors",id:"mirrors",level:3},{value:"\u91cd\u5b9a\u5411",id:"\u91cd\u5b9a\u5411",level:4},{value:"Rewrites",id:"rewrites",level:4},{value:"Configs",id:"configs",level:3},{value:"\u4f7f\u7528 TLS",id:"\u4f7f\u7528-tls",level:3},{value:"\u6ca1\u6709 TLS",id:"\u6ca1\u6709-tls",level:3},{value:"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",id:"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",level:2}],m=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},d=m("Tabs"),c=m("TabItem"),u={toc:s};function k(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u5c06 Containerd \u914d\u7f6e\u4e3a\u8fde\u63a5\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\uff0c\u5e76\u5728\u8282\u70b9\u4e0a\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u62c9\u53d6\u79c1\u6709\u955c\u50cf\u3002"),(0,a.kt)("p",null,"\u542f\u52a8\u65f6\uff0cK3s \u4f1a\u68c0\u67e5 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/")," \u4e2d\u662f\u5426\u5b58\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"registries.yaml")," \u6587\u4ef6\uff0c\u5e76\u6307\u793a containerd \u4f7f\u7528\u8be5\u6587\u4ef6\u4e2d\u5b9a\u4e49\u7684\u955c\u50cf\u4ed3\u5e93\u3002\u5982\u679c\u4f60\u60f3\u4f7f\u7528\u79c1\u6709\u7684\u955c\u50cf\u4ed3\u5e93\uff0c\u4f60\u9700\u8981\u5728\u6bcf\u4e2a\u4f7f\u7528\u955c\u50cf\u4ed3\u5e93\u7684\u8282\u70b9\u4e0a\u4ee5 root \u8eab\u4efd\u521b\u5efa\u8fd9\u4e2a\u6587\u4ef6\u3002"),(0,a.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cserver \u8282\u70b9\u9ed8\u8ba4\u662f\u53ef\u4ee5\u8c03\u5ea6\u7684\u3002\u5982\u679c\u4f60\u6ca1\u6709\u5728 server \u8282\u70b9\u4e0a\u8bbe\u7f6e\u6c61\u70b9\uff0c\u800c\u4e14\u5e0c\u671b\u5728 server \u8282\u70b9\u4e0a\u8fd0\u884c\u5de5\u4f5c\u8d1f\u8f7d\uff0c\u8bf7\u786e\u4fdd\u5728\u6bcf\u4e2a server \u8282\u70b9\u4e0a\u521b\u5efa ",(0,a.kt)("inlineCode",{parentName:"p"},"registries.yaml")," \u6587\u4ef6\u3002"),(0,a.kt)("p",null,"Containerd \u4e2d\u7684\u914d\u7f6e\u53ef\u4ee5\u7528\u4e8e\u901a\u8fc7 TLS \u8fde\u63a5\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\uff0c\u4e5f\u53ef\u4ee5\u4e0e\u542f\u7528\u9a8c\u8bc1\u7684\u955c\u50cf\u4ed3\u5e93\u8fde\u63a5\u3002\u4e0b\u4e00\u8282\u5c06\u89e3\u91ca ",(0,a.kt)("inlineCode",{parentName:"p"},"registries.yaml")," \u6587\u4ef6\uff0c\u5e76\u7ed9\u51fa\u5728 K3s \u4e2d\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u7684\u4e0d\u540c\u4f8b\u5b50\u3002"),(0,a.kt)("h2",{id:"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6"},"\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e\u6587\u4ef6"),(0,a.kt)("p",null,"\u8be5\u6587\u4ef6\u7531\u4e24\u4e2a\u4e3b\u8981\u90e8\u5206\u7ec4\u6210\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"mirrors"),(0,a.kt)("li",{parentName:"ul"},"configs")),(0,a.kt)("h3",{id:"mirrors"},"Mirrors"),(0,a.kt)("p",null,"Mirrors \u662f\u7528\u4e8e\u5b9a\u4e49\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u540d\u79f0\u548c\u7aef\u70b9\u7684\u6307\u4ee4\uff0c\u4f8b\u5982\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},'mirrors:\n  mycustomreg.com:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,a.kt)("p",null,"\u6bcf\u4e2a mirror \u90fd\u5fc5\u987b\u6709\u4e00\u4e2a\u540d\u79f0\u548c\u4e00\u7ec4\u7aef\u70b9\u3002\u4ece\u955c\u50cf\u4ed3\u5e93\u4e2d\u62c9\u53d6\u955c\u50cf\u65f6\uff0ccontainerd \u4f1a\u9010\u4e2a\u5c1d\u8bd5\u8fd9\u4e9b\u7aef\u70b9 URL\uff0c\u5e76\u4f7f\u7528\u7b2c\u4e00\u4e2a\u6709\u6548\u7684 URL\u3002"),(0,a.kt)("h4",{id:"\u91cd\u5b9a\u5411"},"\u91cd\u5b9a\u5411"),(0,a.kt)("p",null,"\u5982\u679c\u5c06\u516c\u5171\u955c\u50cf\u4ed3\u5e93\u7528\u4f5c Mirror\uff0c\u4f8b\u5982\u5728\u914d\u7f6e",(0,a.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/recipes/mirror/"},"\u901a\u8fc7\u7f13\u5b58\u62c9\u53d6"),"\u65f6\uff0c\u955c\u50cf\u62c9\u53d6\u5c06\u88ab\u900f\u660e\u5730\u91cd\u5b9a\u5411\u3002"),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u5982\u679c\u4f60\u4e3a ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io")," \u914d\u7f6e\u4e86\u4e00\u4e2a Mirror\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\n')),(0,a.kt)("p",null,"\u7136\u540e\uff0c\u62c9\u53d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," \u5c06\u900f\u660e\u5730\u4ece ",(0,a.kt)("inlineCode",{parentName:"p"},"https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3")," \u62c9\u53d6\u955c\u50cf\u3002"),(0,a.kt)("h4",{id:"rewrites"},"Rewrites"),(0,a.kt)("p",null,"\u6bcf\u4e2a Mirror \u90fd\u53ef\u4ee5\u6709\u4e00\u7ec4 rewrites\u3002Rewrites \u53ef\u4ee5\u6839\u636e\u6b63\u5219\u8868\u8fbe\u5f0f\u6765\u6539\u53d8\u955c\u50cf\u7684\u6807\u7b7e\u3002\u5982\u679c mirror \u4ed3\u5e93\u4e2d\u7684\u7ec4\u7ec7/\u9879\u76ee\u7ed3\u6784\u4e0e\u4e0a\u6e38\u4e0d\u540c\uff0c\u8fd9\u5c06\u5f88\u6709\u7528\u3002"),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u4ee5\u4e0b\u914d\u7f6e\u5c06\u900f\u660e\u5730\u4ece ",(0,a.kt)("inlineCode",{parentName:"p"},"registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3")," \u4e2d\u62c9\u53d6\u955c\u50cf ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3"),"\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://registry.example.com:5000"\n    rewrite:\n      "^rancher/(.*)": "mirrorproject/rancher-images/$1"\n')),(0,a.kt)("p",null,"\u955c\u50cf\u4ecd\u5c06\u4ee5\u539f\u59cb\u540d\u79f0\u5b58\u50a8\uff0c\u56e0\u6b64\uff0c\u5373\u4f7f\u955c\u50cf\u4ee5\u4e0d\u540c\u7684\u540d\u5b57\u4ece\u955c\u50cf\u4ed3\u5e93\u4e2d\u62c9\u53d6\uff0c",(0,a.kt)("inlineCode",{parentName:"p"},"crictl image ls")," \u4e5f\u5c06\u663e\u793a ",(0,a.kt)("inlineCode",{parentName:"p"},"docker.io/rancher/coredns-coredns:1.6.3")," \u5728\u8282\u70b9\u4e0a\u662f\u53ef\u7528\u7684\u3002"),(0,a.kt)("h3",{id:"configs"},"Configs"),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"configs")," \u90e8\u5206\u5b9a\u4e49\u4e86\u6bcf\u4e2a mirror \u7684 TLS \u548c\u51ed\u8bc1\u914d\u7f6e\u3002\u5bf9\u4e8e\u6bcf\u4e2a mirror\uff0c\u4f60\u53ef\u4ee5\u5b9a\u4e49 ",(0,a.kt)("inlineCode",{parentName:"p"},"auth")," \u548c/\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"tls"),"\u3002"),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"tls")," \u90e8\u5206\u5305\u62ec\uff1a"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"\u6307\u4ee4"),(0,a.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"cert_file")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5ba2\u6237\u7aef\u8bc1\u4e66\u8def\u5f84\uff0c\u7528\u4e8e\u5411\u955c\u50cf\u4ed3\u5e93\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"key_file")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5ba2\u6237\u7aef\u5bc6\u94a5\u8def\u5f84\uff0c\u7528\u4e8e\u5411\u955c\u50cf\u4ed3\u5e93\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"ca_file")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5b9a\u4e49\u7528\u4e8e\u9a8c\u8bc1\u955c\u50cf\u4ed3\u5e93\u670d\u52a1\u5668\u8bc1\u4e66\u6587\u4ef6\u7684 CA \u8bc1\u4e66\u8def\u5f84")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"insecure_skip_verify")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5b9a\u4e49\u662f\u5426\u5e94\u8df3\u8fc7\u955c\u50cf\u4ed3\u5e93\u7684 TLS \u9a8c\u8bc1\u7684\u5e03\u5c14\u503c")))),(0,a.kt)("p",null,(0,a.kt)("inlineCode",{parentName:"p"},"auth")," \u90e8\u5206\u7531\u7528\u6237\u540d/\u5bc6\u7801\u6216\u8eab\u4efd\u9a8c\u8bc1\u4ee4\u724c\u7ec4\u6210\uff1a"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"\u6307\u4ee4"),(0,a.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"username")),(0,a.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u57fa\u672c\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u540d")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"password")),(0,a.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u57fa\u672c\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u5bc6\u7801")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"auth")),(0,a.kt)("td",{parentName:"tr",align:null},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u57fa\u672c\u8eab\u4efd\u9a8c\u8bc1\u7684\u8eab\u4efd\u9a8c\u8bc1\u4ee4\u724c")))),(0,a.kt)("p",null,"\u4ee5\u4e0b\u662f\u5728\u4e0d\u540c\u6a21\u5f0f\u4e0b\u4f7f\u7528\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u7684\u57fa\u672c\u4f8b\u5b50\uff1a"),(0,a.kt)("h3",{id:"\u4f7f\u7528-tls"},"\u4f7f\u7528 TLS"),(0,a.kt)("p",null,"\u4e0b\u9762\u7684\u4f8b\u5b50\u5c55\u793a\u4e86\u4f7f\u7528 TLS \u65f6\uff0c\u5982\u4f55\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u914d\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml"),"\u3002"),(0,a.kt)(d,{mdxType:"Tabs"},(0,a.kt)(c,{value:"\u6709\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n'))),(0,a.kt)(c,{value:"\u65e0\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "https://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    tls:\n      cert_file: # path to the cert file used in the registry\n      key_file:  # path to the key file used in the registry\n      ca_file:   # path to the ca file used in the registry\n')))),(0,a.kt)("h3",{id:"\u6ca1\u6709-tls"},"\u6ca1\u6709 TLS"),(0,a.kt)("p",null,"\u4ee5\u4e0b\u793a\u4f8b\u5c55\u793a\u4e86",(0,a.kt)("em",{parentName:"p"},"\u4e0d"),"\u4f7f\u7528 TLS \u65f6\uff0c\u5982\u4f55\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u914d\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/registries.yaml"),"\u3002"),(0,a.kt)(d,{mdxType:"Tabs"},(0,a.kt)(c,{value:"\u6709\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\nconfigs:\n  "mycustomreg:5000":\n    auth:\n      username: xxxxxx # this is the registry username\n      password: xxxxxx # this is the registry password\n'))),(0,a.kt)(c,{value:"\u65e0\u8ba4\u8bc1",mdxType:"TabItem"},(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'mirrors:\n  docker.io:\n    endpoint:\n      - "http://mycustomreg.com:5000"\n')))),(0,a.kt)("blockquote",null,(0,a.kt)("p",{parentName:"blockquote"},"\u5982\u679c\u6ca1\u6709 TLS \u901a\u4fe1\uff0c\u4f60\u9700\u8981\u4e3a\u7aef\u70b9\u6307\u5b9a ",(0,a.kt)("inlineCode",{parentName:"p"},"http://"),"\uff0c\u5426\u5219\u5c06\u9ed8\u8ba4\u4e3a https\u3002")),(0,a.kt)("p",null,"\u4e3a\u4e86\u4f7f\u955c\u50cf\u4ed3\u5e93\u66f4\u6539\u751f\u6548\uff0c\u4f60\u9700\u8981\u91cd\u65b0\u542f\u52a8\u6bcf\u4e2a\u8282\u70b9\u4e0a\u7684 K3s\u3002"),(0,a.kt)("h2",{id:"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"},"\u5c06\u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"),(0,a.kt)("p",null,"\u9996\u5148\uff0c\u4ece GitHub \u4e0a\u83b7\u53d6\u4f60\u6b63\u5728\u4f7f\u7528\u7684\u7248\u672c\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," \u6587\u4ef6\u3002\n\u4ece docker.io \u62c9\u53d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-images.txt")," \u6587\u4ef6\u4e2d\u5217\u51fa\u7684 K3s \u955c\u50cf"),(0,a.kt)("p",null,"\u793a\u4f8b\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"docker pull docker.io/rancher/coredns-coredns:1.6.3")),(0,a.kt)("p",null,"\u7136\u540e\uff0c\u5c06\u955c\u50cf\u91cd\u65b0\u6807\u8bb0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u3002"),(0,a.kt)("p",null,"\u793a\u4f8b\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns")),(0,a.kt)("p",null,"\u6700\u540e\uff0c\u5c06\u955c\u50cf\u63a8\u9001\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u3002"),(0,a.kt)("p",null,"\u793a\u4f8b\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"docker push mycustomreg.com:5000/coredns-coredns")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/2af2f480.4a048f47.js b/zh/assets/js/2af2f480.7d5e062c.js
similarity index 97%
rename from zh/assets/js/2af2f480.4a048f47.js
rename to zh/assets/js/2af2f480.7d5e062c.js
index edf531412..a3697537b 100644
--- a/zh/assets/js/2af2f480.4a048f47.js
+++ b/zh/assets/js/2af2f480.7d5e062c.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5292],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),c=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=c(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),d=c(n),m=a,f=d["".concat(s,".").concat(m)]||d[m]||p[m]||l;return n?r.createElement(f,o(o({ref:t},u),{},{components:n})):r.createElement(f,o({ref:t},u))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var c=2;c<l;c++)o[c]=n[c];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},7085:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>p,frontMatter:()=>l,metadata:()=>i,toc:()=>c});var r=n(3117),a=(n(7294),n(3905));const l={title:"\u5378\u8f7d K3s",weight:61},o=void 0,i={unversionedId:"installation/uninstall",id:"installation/uninstall",title:"\u5378\u8f7d K3s",description:"\u5378\u8f7d K3s \u4f1a\u5220\u9664 local \u96c6\u7fa4\u6570\u636e\u3001\u914d\u7f6e\u4ee5\u53ca\u6240\u6709\u811a\u672c\u548c CLI \u5de5\u5177\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/uninstall.md",sourceDirName:"installation",slug:"/installation/uninstall",permalink:"/zh/installation/uninstall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5378\u8f7d K3s",weight:61},sidebar:"mySidebar",previous:{title:"Kubernetes \u4eea\u8868\u677f",permalink:"/zh/installation/kube-dashboard"},next:{title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",permalink:"/zh/datastore/"}},s={},c=[{value:"\u5378\u8f7d Server",id:"\u5378\u8f7d-server",level:3},{value:"\u5378\u8f7d Agent",id:"\u5378\u8f7d-agent",level:3}],u={toc:c};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u5378\u8f7d K3s \u4f1a\u5220\u9664 local \u96c6\u7fa4\u6570\u636e\u3001\u914d\u7f6e\u4ee5\u53ca\u6240\u6709\u811a\u672c\u548c CLI \u5de5\u5177\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u4e0d\u4f1a\u5220\u9664\u5916\u90e8\u6570\u636e\u5b58\u50a8\u4e2d\u7684\u4efb\u4f55\u6570\u636e\uff0c\u4e5f\u4e0d\u4f1a\u5220\u9664\u4f7f\u7528\u5916\u90e8 Kubernetes \u5b58\u50a8\u5377\u7684 Pod \u521b\u5efa\u7684\u6570\u636e\u3002")),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5b89\u88c5\u4e86 K3s\uff0c\u5b89\u88c5\u8fc7\u7a0b\u4e2d\u4f1a\u751f\u6210\u4e00\u4e2a\u5378\u8f7d K3s \u7684\u811a\u672c\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u5378\u8f7d\u548c\u91cd\u65b0\u5b89\u88c5\u540e\u5c06\u8282\u70b9\u91cd\u65b0\u52a0\u5165\u73b0\u6709\u96c6\u7fa4\uff0c\u8bf7\u52a1\u5fc5\u4ece\u96c6\u7fa4\u4e2d\u5220\u9664\u8282\u70b9\uff0c\u786e\u4fdd\u5220\u9664\u4e86\u8282\u70b9\u5bc6\u7801 Secret\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/architecture/#how-agent-node-registration-works"},"\u8282\u70b9\u6ce8\u518c"),"\u6587\u6863\u3002"),(0,a.kt)("h3",{id:"\u5378\u8f7d-server"},"\u5378\u8f7d Server"),(0,a.kt)("p",null,"\u8981\u4ece Server \u8282\u70b9\u5378\u8f7d K3s\uff0c\u8bf7\u8fd0\u884c\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-uninstall.sh\n")),(0,a.kt)("h3",{id:"\u5378\u8f7d-agent"},"\u5378\u8f7d Agent"),(0,a.kt)("p",null,"\u8981\u4ece Agent \u8282\u70b9\u5378\u8f7d K3s\uff0c\u8bf7\u8fd0\u884c\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-agent-uninstall.sh\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5292],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),c=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=c(e.components);return r.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),d=c(n),m=a,f=d["".concat(s,".").concat(m)]||d[m]||p[m]||l;return n?r.createElement(f,o(o({ref:t},u),{},{components:n})):r.createElement(f,o({ref:t},u))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var c=2;c<l;c++)o[c]=n[c];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},7085:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>p,frontMatter:()=>l,metadata:()=>i,toc:()=>c});var r=n(3117),a=(n(7294),n(3905));const l={title:"\u5378\u8f7d K3s",weight:61},o=void 0,i={unversionedId:"installation/uninstall",id:"installation/uninstall",title:"\u5378\u8f7d K3s",description:"\u5378\u8f7d K3s \u4f1a\u5220\u9664 local \u96c6\u7fa4\u6570\u636e\u3001\u914d\u7f6e\u4ee5\u53ca\u6240\u6709\u811a\u672c\u548c CLI \u5de5\u5177\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/uninstall.md",sourceDirName:"installation",slug:"/installation/uninstall",permalink:"/zh/installation/uninstall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5378\u8f7d K3s",weight:61},sidebar:"mySidebar",previous:{title:"Kubernetes \u4eea\u8868\u677f",permalink:"/zh/installation/kube-dashboard"},next:{title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",permalink:"/zh/datastore/"}},s={},c=[{value:"\u5378\u8f7d Server",id:"\u5378\u8f7d-server",level:3},{value:"\u5378\u8f7d Agent",id:"\u5378\u8f7d-agent",level:3}],u={toc:c};function p(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u5378\u8f7d K3s \u4f1a\u5220\u9664 local \u96c6\u7fa4\u6570\u636e\u3001\u914d\u7f6e\u4ee5\u53ca\u6240\u6709\u811a\u672c\u548c CLI \u5de5\u5177\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u4e0d\u4f1a\u5220\u9664\u5916\u90e8\u6570\u636e\u5b58\u50a8\u4e2d\u7684\u4efb\u4f55\u6570\u636e\uff0c\u4e5f\u4e0d\u4f1a\u5220\u9664\u4f7f\u7528\u5916\u90e8 Kubernetes \u5b58\u50a8\u5377\u7684 Pod \u521b\u5efa\u7684\u6570\u636e\u3002")),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5b89\u88c5\u4e86 K3s\uff0c\u5b89\u88c5\u8fc7\u7a0b\u4e2d\u4f1a\u751f\u6210\u4e00\u4e2a\u5378\u8f7d K3s \u7684\u811a\u672c\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u5378\u8f7d\u548c\u91cd\u65b0\u5b89\u88c5\u540e\u5c06\u8282\u70b9\u91cd\u65b0\u52a0\u5165\u73b0\u6709\u96c6\u7fa4\uff0c\u8bf7\u52a1\u5fc5\u4ece\u96c6\u7fa4\u4e2d\u5220\u9664\u8282\u70b9\uff0c\u786e\u4fdd\u5220\u9664\u4e86\u8282\u70b9\u5bc6\u7801 Secret\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/architecture/#how-agent-node-registration-works"},"\u8282\u70b9\u6ce8\u518c"),"\u6587\u6863\u3002"),(0,a.kt)("h3",{id:"\u5378\u8f7d-server"},"\u5378\u8f7d Server"),(0,a.kt)("p",null,"\u8981\u4ece Server \u8282\u70b9\u5378\u8f7d K3s\uff0c\u8bf7\u8fd0\u884c\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-uninstall.sh\n")),(0,a.kt)("h3",{id:"\u5378\u8f7d-agent"},"\u5378\u8f7d Agent"),(0,a.kt)("p",null,"\u8981\u4ece Agent \u8282\u70b9\u5378\u8f7d K3s\uff0c\u8bf7\u8fd0\u884c\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-agent-uninstall.sh\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/2d65ef92.ba420146.js b/zh/assets/js/2d65ef92.d41ae572.js
similarity index 99%
rename from zh/assets/js/2d65ef92.ba420146.js
rename to zh/assets/js/2d65ef92.d41ae572.js
index b0dbc9dfb..7ce6c7352 100644
--- a/zh/assets/js/2d65ef92.ba420146.js
+++ b/zh/assets/js/2d65ef92.d41ae572.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2282],{3905:(t,e,n)=>{n.d(e,{Zo:()=>m,kt:()=>o});var a=n(7294);function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);e&&(a=a.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,a)}return n}function p(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?l(Object(n),!0).forEach((function(e){r(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function i(t,e){if(null==t)return{};var n,a,r=function(t,e){if(null==t)return{};var n,a,r={},l=Object.keys(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||(r[n]=t[n]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(r[n]=t[n])}return r}var k=a.createContext({}),u=function(t){var e=a.useContext(k),n=e;return t&&(n="function"==typeof t?t(e):p(p({},e),t)),n},m=function(t){var e=u(t.components);return a.createElement(k.Provider,{value:e},t.children)},d={inlineCode:"code",wrapper:function(t){var e=t.children;return a.createElement(a.Fragment,{},e)}},N=a.forwardRef((function(t,e){var n=t.components,r=t.mdxType,l=t.originalType,k=t.parentName,m=i(t,["components","mdxType","originalType","parentName"]),N=u(n),o=r,g=N["".concat(k,".").concat(o)]||N[o]||d[o]||l;return n?a.createElement(g,p(p({ref:e},m),{},{components:n})):a.createElement(g,p({ref:e},m))}));function o(t,e){var n=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=n.length,p=new Array(l);p[0]=N;var i={};for(var k in e)hasOwnProperty.call(e,k)&&(i[k]=e[k]);i.originalType=t,i.mdxType="string"==typeof t?t:r,p[1]=i;for(var u=2;u<l;u++)p[u]=n[u];return a.createElement.apply(null,p)}return a.createElement.apply(null,n)}N.displayName="MDXCreateElement"},1793:(t,e,n)=>{n.r(e),n.d(e,{assets:()=>k,contentTitle:()=>p,default:()=>d,frontMatter:()=>l,metadata:()=>i,toc:()=>u});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u8d44\u6e90\u5206\u6790",weight:1},p=void 0,i={unversionedId:"reference/resource-profiling",id:"reference/resource-profiling",title:"\u8d44\u6e90\u5206\u6790",description:"\u672c\u6587\u4ecb\u7ecd\u4e86\u6d4b\u8bd5\u7ed3\u679c\uff0c\u7528\u4e8e\u786e\u5b9a K3s \u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",sourceDirName:"reference",slug:"/reference/resource-profiling",permalink:"/zh/reference/resource-profiling",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u8d44\u6e90\u5206\u6790",weight:1},sidebar:"mySidebar",previous:{title:"\u73af\u5883\u53d8\u91cf",permalink:"/zh/reference/env-variables"},next:{title:"\u5df2\u77e5\u95ee\u9898",permalink:"/zh/known-issues/"}},k={},u=[{value:"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4",id:"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4",level:2},{value:"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6",id:"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6",level:2},{value:"\u65b9\u6cd5",id:"\u65b9\u6cd5",level:2},{value:"\u73af\u5883",id:"\u73af\u5883",level:2},{value:"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42",id:"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42",level:2},{value:"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server",id:"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684-k3s-server",level:3},{value:"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4",id:"\u5177\u6709\u5355\u4e2a-agent-\u7684-k3s-\u96c6\u7fa4",level:3},{value:"K3s Server",id:"k3s-server",level:4},{value:"K3s Agent",id:"k3s-agent",level:3},{value:"\u5206\u6790",id:"\u5206\u6790",level:2},{value:"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20",id:"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20",level:3},{value:"\u9632\u6b62 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",id:"\u9632\u6b62-agent-\u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",level:3}],m={toc:u};function d(t){let{components:e,...n}=t;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u6d4b\u8bd5\u7ed3\u679c\uff0c\u7528\u4e8e\u786e\u5b9a K3s \u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002"),(0,r.kt)("p",null,"\u7ed3\u679c\u603b\u7ed3\u5982\u4e0b\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7ec4\u4ef6"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5904\u7406\u5668"),(0,r.kt)("th",{parentName:"tr",align:null},"\u6700\u5c0f CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"Kine/SQLite \u7684\u6700\u5c0f RAM"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd \u7684\u6700\u5c0f RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 6%"),(0,r.kt)("td",{parentName:"tr",align:null},"1596M"),(0,r.kt)("td",{parentName:"tr",align:null},"1606M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 5%"),(0,r.kt)("td",{parentName:"tr",align:null},"1428M"),(0,r.kt)("td",{parentName:"tr",align:null},"1450M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 3%"),(0,r.kt)("td",{parentName:"tr",align:null},"275M"),(0,r.kt)("td",{parentName:"tr",align:null},"275M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 30%"),(0,r.kt)("td",{parentName:"tr",align:null},"1588M"),(0,r.kt)("td",{parentName:"tr",align:null},"1613M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 25%"),(0,r.kt)("td",{parentName:"tr",align:null},"1215M"),(0,r.kt)("td",{parentName:"tr",align:null},"1413M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 10%"),(0,r.kt)("td",{parentName:"tr",align:null},"268M"),(0,r.kt)("td",{parentName:"tr",align:null},"268M")))),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E8%B5%84%E6%BA%90%E6%B5%8B%E8%AF%95%E8%8C%83%E5%9B%B4"},"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E7%94%A8%E4%BA%8E%E5%9F%BA%E7%BA%BF%E6%B5%8B%E9%87%8F%E7%9A%84%E7%BB%84%E4%BB%B6"},"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E6%96%B9%E6%B3%95"},"\u65b9\u6cd5")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E7%8E%AF%E5%A2%83"},"\u73af\u5883")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%9F%BA%E5%87%86%E8%B5%84%E6%BA%90%E8%A6%81%E6%B1%82"},"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%85%B7%E6%9C%89%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E7%9A%84-k3s-server"},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%85%B7%E6%9C%89%E5%8D%95%E4%B8%AA-agent-%E7%9A%84-k3s-%E9%9B%86%E7%BE%A4"},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-agent"},"K3s Agent")))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%88%86%E6%9E%90"},"\u5206\u6790"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E4%B8%BB%E8%A6%81%E8%B5%84%E6%BA%90%E4%BD%BF%E7%94%A8%E7%8E%87%E5%86%B3%E5%AE%9A%E5%9B%A0%E7%B4%A0"},"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E9%98%B2%E6%AD%A2-agent-%E5%92%8C%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E5%B9%B2%E6%89%B0%E9%9B%86%E7%BE%A4%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8"},"\u9632\u6b62 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"))))),(0,r.kt)("h2",{id:"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4"},"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4"),(0,r.kt)("p",null,"\u8d44\u6e90\u6d4b\u8bd5\u65e8\u5728\u89e3\u51b3\u4ee5\u4e0b\u95ee\u9898\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u5728\u5355\u8282\u70b9\u96c6\u7fa4\u4e0a\uff0c\u786e\u5b9a\u8981\u4e3a\u6574\u4e2a K3s \u670d\u52a1\u5668\u5806\u6808\u9884\u7559\u7684\u6700\u5c0f CPU\u3001\u5185\u5b58\u548c IOP \u6570\u91cf\uff08\u5047\u8bbe\u96c6\u7fa4\u4e0a\u5c06\u90e8\u7f72\u771f\u5b9e\u7684\u5de5\u4f5c\u8d1f\u8f7d\uff09\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5728 Agent\uff08Worker\uff09\u8282\u70b9\u4e0a\uff0c\u786e\u5b9a\u8981\u4e3a Kubernetes \u548c K3s control plane \u7ec4\u4ef6\uff08kubelet \u548c k3s agent\uff09\u9884\u7559\u7684\u6700\u5c0f CPU\u3001\u5185\u5b58\u548c IOP \u6570\u91cf\u3002")),(0,r.kt)("h2",{id:"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6"},"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6"),(0,r.kt)("p",null,"\u6d4b\u8bd5\u7684\u7ec4\u4ef6\u5305\u62ec\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u542f\u7528\u6240\u6709\u6253\u5305\u7ec4\u4ef6\u7684 K3s 1.26.5"),(0,r.kt)("li",{parentName:"ul"},"Prometheus + Grafana \u76d1\u63a7\u6808"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"Kubernetes \u793a\u4f8b Nginx \u90e8\u7f72"))),(0,r.kt)("p",null,"\u8fd9\u4e9b\u662f\u4e00\u4e2a\u7a33\u5b9a\u7cfb\u7edf\u7684\u57fa\u7ebf\u6570\u636e\uff0c\u53ea\u4f7f\u7528 K3s \u6253\u5305\u7684\u7ec4\u4ef6\uff08Traefik Ingress\u3001Klipper lb\u3001\u672c\u5730\u8def\u5f84\u5b58\u50a8\uff09\uff0c\u8fd0\u884c\u6807\u51c6\u7684\u76d1\u63a7\u5806\u6808\uff08Prometheus \u548c Grafana\uff09\u548c Guestbook \u793a\u4f8b\u5e94\u7528\u7a0b\u5e8f\u3002"),(0,r.kt)("p",null,"\u5305\u62ec IOPS \u5728\u5185\u7684\u8d44\u6e90\u6570\u636e\u4ec5\u7528\u4e8e Kubernetes \u6570\u636e\u5b58\u50a8\u548c control plane\uff0c\u4e0d\u5305\u62ec\u7cfb\u7edf\u7ea7 management agent \u6216 logging\u3001\u5bb9\u5668\u955c\u50cf\u7ba1\u7406\u6216\u4efb\u4f55\u5de5\u4f5c\u8d1f\u8f7d\u8981\u6c42\u7684\u5f00\u9500\u3002"),(0,r.kt)("h2",{id:"\u65b9\u6cd5"},"\u65b9\u6cd5"),(0,r.kt)("p",null,"Prometheus v2.43.0 \u7684\u72ec\u7acb\u5b9e\u4f8b\u53ef\u4ee5\u901a\u8fc7 apt \u5b89\u88c5\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"prometheus-node-exporter")," \u6536\u96c6\u4e3b\u673a CPU\u3001\u5185\u5b58\u548c\u78c1\u76d8 IO \u7edf\u8ba1\u4fe1\u606f\u3002"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"systemd-cgtop")," \u7528\u4e8e\u62bd\u67e5 systemd cgroup \u7ea7\u522b\u7684 CPU \u548c\u5185\u5b58\u5229\u7528\u7387\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"system.slice/k3s.service")," \u8ddf\u8e2a K3s \u548c containerd \u7684\u8d44\u6e90\u5229\u7528\u7387\uff0c\u800c\u5355\u4e2a pod \u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"kubepods")," \u5c42\u7ea7\u4e0b\u3002"),(0,r.kt)("p",null,"\u5176\u4ed6\u8be6\u7ec6\u7684 K3s \u5185\u5b58\u5229\u7528\u7387\u6570\u636e\u662f\u4f7f\u7528 server \u548c agent \u8fdb\u7a0b\u7684\u96c6\u6210 metrics-server \u4ece ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl top node")," \u6536\u96c6\u7684\u3002"),(0,r.kt)("p",null,"\u5229\u7528\u7387\u6570\u636e\u6765\u81ea\u4e8e\u8fd0\u884c\u6240\u8ff0\u5de5\u4f5c\u8d1f\u8f7d\u7684\u8282\u70b9\u4e0a\u7a33\u6001\u8fd0\u884c\u7684\u7b2c 95 \u4e2a\u767e\u5206\u4f4d\u8bfb\u6570\u3002"),(0,r.kt)("h2",{id:"\u73af\u5883"},"\u73af\u5883"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Arch"),(0,r.kt)("th",{parentName:"tr",align:null},"OS"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"),(0,r.kt)("th",{parentName:"tr",align:null},"Disk"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"x86_64"),(0,r.kt)("td",{parentName:"tr",align:null},"Ubuntu 22.04"),(0,r.kt)("td",{parentName:"tr",align:null},"AWS c6id.xlarge"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"NVME SSD")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"aarch64"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi OS 11"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi 4 Model B"),(0,r.kt)("td",{parentName:"tr",align:null},"BCM2711, 4 Core 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"UHS-III SDXC")))),(0,r.kt)("h2",{id:"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42"},"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42"),(0,r.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u6d4b\u8bd5\u7ed3\u679c\uff0c\u7528\u4e8e\u786e\u5b9a\u57fa\u672c K3s \u64cd\u4f5c\u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002"),(0,r.kt)("h3",{id:"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684-k3s-server"},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server"),(0,r.kt)("p",null,"\u8fd9\u4e9b\u662f\u5355\u8282\u70b9\u96c6\u7fa4\u7684\u8981\u6c42\uff0c\u5176\u4e2d K3s Server \u4e0e",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"\u7b80\u5355\u5de5\u4f5c\u8d1f\u8f7d"),"\u5171\u4eab\u8d44\u6e90\u3002"),(0,r.kt)("p",null,"CPU \u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU \u6838\u7528\u91cf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 6%")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 30%")))),(0,r.kt)("p",null,"\u5185\u5b58\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6d4b\u8bd5\u7684\u6570\u636e\u5b58\u50a8"),(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5185\u5b58"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1596M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1588M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1606M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1613M")))),(0,r.kt)("p",null,"\u78c1\u76d8\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6d4b\u8bd5\u7684\u6570\u636e\u5b58\u50a8"),(0,r.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,r.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5ef6\u8fdf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"10"),(0,r.kt)("td",{parentName:"tr",align:null},"500"),(0,r.kt)("td",{parentName:"tr",align:null},"< 10 ms")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"50"),(0,r.kt)("td",{parentName:"tr",align:null},"250"),(0,r.kt)("td",{parentName:"tr",align:null},"< 5 ms")))),(0,r.kt)("h3",{id:"\u5177\u6709\u5355\u4e2a-agent-\u7684-k3s-\u96c6\u7fa4"},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u4ecb\u7ecd\u5177\u6709 K3s Server \u8282\u70b9\u548c K3s Agent\uff0c\u4f46\u6ca1\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s \u96c6\u7fa4\u7684\u57fa\u7ebf\u8981\u6c42\u3002"),(0,r.kt)("h4",{id:"k3s-server"},"K3s Server"),(0,r.kt)("p",null,"CPU \u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU \u6838\u7528\u91cf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 5%")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 25%")))),(0,r.kt)("p",null,"\u5185\u5b58\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6d4b\u8bd5\u7684\u6570\u636e\u5b58\u50a8"),(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5185\u5b58"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1428M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1215M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1450M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1413M")))),(0,r.kt)("h3",{id:"k3s-agent"},"K3s Agent"),(0,r.kt)("p",null,"\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU \u6838\u7528\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 3%"),(0,r.kt)("td",{parentName:"tr",align:null},"275M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 5%"),(0,r.kt)("td",{parentName:"tr",align:null},"268M")))),(0,r.kt)("h2",{id:"\u5206\u6790"},"\u5206\u6790"),(0,r.kt)("p",null,"\u672c\u8282\u5305\u62ec\u4e86\u5bf9 K3s Server \u548c Agent \u5229\u7528\u7387\u4ea7\u751f\u6700\u5927\u5f71\u54cd\u7684\u5206\u6790\uff0c\u4ee5\u53ca\u5982\u4f55\u4fdd\u62a4\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u514d\u53d7 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u7684\u5e72\u6270\u3002"),(0,r.kt)("h3",{id:"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20"},"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20"),(0,r.kt)("p",null,"K3s Server \u5229\u7528\u7387\u6570\u636e\u4e3b\u8981\u53d6\u51b3\u4e8e Kubernetes \u6570\u636e\u5b58\u50a8\uff08kine \u6216 etcd\uff09\u3001API Server\u3001Controller-Manager \u548c Scheduler \u63a7\u5236\u5faa\u73af\u7684\u652f\u6301\uff0c\u4ee5\u53ca\u5f71\u54cd\u7cfb\u7edf\u72b6\u6001\u66f4\u6539\u7684\u4efb\u4f55\u7ba1\u7406\u4efb\u52a1\u3002\u5982\u679c\u5bf9 Kubernetes control plane \u6dfb\u52a0\u989d\u5916\u8d1f\u8f7d\uff08\u4f8b\u5982\u521b\u5efa/\u4fee\u6539/\u5220\u9664\u8d44\u6e90\uff09\uff0c\u5229\u7528\u7387\u4f1a\u51fa\u73b0\u4e34\u65f6\u5cf0\u503c\u3002\u5982\u679c\u4f7f\u7528\u5927\u91cf\u4f7f\u7528 Kubernetes \u6570\u636e\u5b58\u50a8\u7684 Operator \u6216\u5e94\u7528\u7a0b\u5e8f\uff08\u4f8b\u5982 Rancher \u6216\u5176\u4ed6 Operator \u7c7b\u578b\u7684\u5e94\u7528\u7a0b\u5e8f\uff09\uff0cserver \u7684\u8d44\u6e90\u9700\u6c42\u5c06\u589e\u52a0\u3002\u5982\u679c\u901a\u8fc7\u6dfb\u52a0\u989d\u5916\u7684\u8282\u70b9\u6216\u521b\u5efa\u5927\u91cf\u96c6\u7fa4\u8d44\u6e90\u6765\u6269\u5c55\u96c6\u7fa4\uff0cserver \u7684\u8d44\u6e90\u9700\u6c42\u5c06\u589e\u52a0\u3002"),(0,r.kt)("p",null,"K3s Agent \u5229\u7528\u7387\u6570\u636e\u4e3b\u8981\u53d6\u51b3\u4e8e\u5bb9\u5668\u751f\u547d\u5468\u671f\u7ba1\u7406\u63a7\u5236\u5faa\u73af\u7684\u652f\u6301\u3002\u5982\u679c\u5b58\u5728\u6d89\u53ca\u7ba1\u7406\u955c\u50cf\u3001\u914d\u7f6e\u5b58\u50a8\u6216\u521b\u5efa/\u9500\u6bc1\u5bb9\u5668\u7684\u64cd\u4f5c\uff0c\u5229\u7528\u7387\u4f1a\u51fa\u73b0\u4e34\u65f6\u5cf0\u503c\u3002\u5c24\u5176\u662f\u955c\u50cf\u62c9\u53d6\uff08\u901a\u5e38\u4e0e CPU \u548c IO \u9ad8\u5ea6\u7ed1\u5b9a\uff09\uff0c\u56e0\u4e3a\u6d89\u53ca\u5c06\u955c\u50cf\u5185\u5bb9\u89e3\u538b\u7f29\u5230\u78c1\u76d8\u3002\u5982\u679c\u53ef\u80fd\uff0c\u4f60\u53ef\u4ee5\u5c06\u5de5\u4f5c\u8d1f\u8f7d\u5b58\u50a8\uff08pod \u4e34\u65f6\u5b58\u50a8\u548c\u5377\uff09\u4e0e Agent \u7ec4\u4ef6\uff08/var/lib/rancher/k3s/agent\uff09\u9694\u79bb\uff0c\u4ece\u800c\u786e\u4fdd\u6ca1\u6709\u8d44\u6e90\u51b2\u7a81\u3002"),(0,r.kt)("h3",{id:"\u9632\u6b62-agent-\u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"},"\u9632\u6b62 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"),(0,r.kt)("p",null,"\u5982\u679c\u5728 server \u8fd8\u6258\u7ba1\u4e86\u5de5\u4f5c\u8d1f\u8f7d pod \u7684\u73af\u5883\u4e2d\u8fd0\u884c\uff0c\u4f60\u9700\u8981\u786e\u4fdd agent \u548c\u5de5\u4f5c\u8d1f\u8f7d IOPS \u4e0d\u4f1a\u5e72\u6270\u6570\u636e\u5b58\u50a8\u3002"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u5c06 server \u7ec4\u4ef6 (/var/lib/rancher/k3s/server) \u653e\u7f6e\u5728\u4e0e agent \u7ec4\u4ef6 (/var/lib/rancher/k3s/agent) \u4e0d\u540c\u7684\u5b58\u50a8\u4ecb\u8d28\uff0c\u5176\u4e2d\u5305\u62ec containerd \u955c\u50cf\u5b58\u50a8\u533a\u3002"),(0,r.kt)("p",null,"\u5de5\u4f5c\u8d1f\u8f7d\u5b58\u50a8\uff08pod \u4e34\u65f6\u5b58\u50a8\u548c\u5377\uff09\u4e5f\u5e94\u8be5\u4e0e\u6570\u636e\u5b58\u50a8\u533a\u9694\u79bb\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u672a\u80fd\u6ee1\u8db3\u6570\u636e\u5b58\u50a8\u541e\u5410\u91cf\u548c\u5ef6\u8fdf\u8981\u6c42\uff0ccontrol plane \u7684\u54cd\u5e94\u53ef\u80fd\u4f1a\u5ef6\u8fdf\uff0ccontrol plane \u4e5f\u53ef\u80fd\u65e0\u6cd5\u7ef4\u6301\u7cfb\u7edf\u72b6\u6001\u3002"))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2282],{3905:(t,e,n)=>{n.d(e,{Zo:()=>m,kt:()=>o});var a=n(7294);function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);e&&(a=a.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,a)}return n}function p(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?l(Object(n),!0).forEach((function(e){r(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function i(t,e){if(null==t)return{};var n,a,r=function(t,e){if(null==t)return{};var n,a,r={},l=Object.keys(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||(r[n]=t[n]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(r[n]=t[n])}return r}var k=a.createContext({}),u=function(t){var e=a.useContext(k),n=e;return t&&(n="function"==typeof t?t(e):p(p({},e),t)),n},m=function(t){var e=u(t.components);return a.createElement(k.Provider,{value:e},t.children)},d={inlineCode:"code",wrapper:function(t){var e=t.children;return a.createElement(a.Fragment,{},e)}},N=a.forwardRef((function(t,e){var n=t.components,r=t.mdxType,l=t.originalType,k=t.parentName,m=i(t,["components","mdxType","originalType","parentName"]),N=u(n),o=r,g=N["".concat(k,".").concat(o)]||N[o]||d[o]||l;return n?a.createElement(g,p(p({ref:e},m),{},{components:n})):a.createElement(g,p({ref:e},m))}));function o(t,e){var n=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=n.length,p=new Array(l);p[0]=N;var i={};for(var k in e)hasOwnProperty.call(e,k)&&(i[k]=e[k]);i.originalType=t,i.mdxType="string"==typeof t?t:r,p[1]=i;for(var u=2;u<l;u++)p[u]=n[u];return a.createElement.apply(null,p)}return a.createElement.apply(null,n)}N.displayName="MDXCreateElement"},1793:(t,e,n)=>{n.r(e),n.d(e,{assets:()=>k,contentTitle:()=>p,default:()=>d,frontMatter:()=>l,metadata:()=>i,toc:()=>u});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u8d44\u6e90\u5206\u6790",weight:1},p=void 0,i={unversionedId:"reference/resource-profiling",id:"reference/resource-profiling",title:"\u8d44\u6e90\u5206\u6790",description:"\u672c\u6587\u4ecb\u7ecd\u4e86\u6d4b\u8bd5\u7ed3\u679c\uff0c\u7528\u4e8e\u786e\u5b9a K3s \u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",sourceDirName:"reference",slug:"/reference/resource-profiling",permalink:"/zh/reference/resource-profiling",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u8d44\u6e90\u5206\u6790",weight:1},sidebar:"mySidebar",previous:{title:"\u73af\u5883\u53d8\u91cf",permalink:"/zh/reference/env-variables"},next:{title:"\u5df2\u77e5\u95ee\u9898",permalink:"/zh/known-issues/"}},k={},u=[{value:"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4",id:"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4",level:2},{value:"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6",id:"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6",level:2},{value:"\u65b9\u6cd5",id:"\u65b9\u6cd5",level:2},{value:"\u73af\u5883",id:"\u73af\u5883",level:2},{value:"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42",id:"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42",level:2},{value:"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server",id:"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684-k3s-server",level:3},{value:"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4",id:"\u5177\u6709\u5355\u4e2a-agent-\u7684-k3s-\u96c6\u7fa4",level:3},{value:"K3s Server",id:"k3s-server",level:4},{value:"K3s Agent",id:"k3s-agent",level:3},{value:"\u5206\u6790",id:"\u5206\u6790",level:2},{value:"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20",id:"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20",level:3},{value:"\u9632\u6b62 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",id:"\u9632\u6b62-agent-\u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",level:3}],m={toc:u};function d(t){let{components:e,...n}=t;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u6d4b\u8bd5\u7ed3\u679c\uff0c\u7528\u4e8e\u786e\u5b9a K3s \u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002"),(0,r.kt)("p",null,"\u7ed3\u679c\u603b\u7ed3\u5982\u4e0b\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7ec4\u4ef6"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5904\u7406\u5668"),(0,r.kt)("th",{parentName:"tr",align:null},"\u6700\u5c0f CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"Kine/SQLite \u7684\u6700\u5c0f RAM"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd \u7684\u6700\u5c0f RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 6%"),(0,r.kt)("td",{parentName:"tr",align:null},"1596M"),(0,r.kt)("td",{parentName:"tr",align:null},"1606M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 5%"),(0,r.kt)("td",{parentName:"tr",align:null},"1428M"),(0,r.kt)("td",{parentName:"tr",align:null},"1450M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C CPU, 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 3%"),(0,r.kt)("td",{parentName:"tr",align:null},"275M"),(0,r.kt)("td",{parentName:"tr",align:null},"275M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 30%"),(0,r.kt)("td",{parentName:"tr",align:null},"1588M"),(0,r.kt)("td",{parentName:"tr",align:null},"1613M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 25%"),(0,r.kt)("td",{parentName:"tr",align:null},"1215M"),(0,r.kt)("td",{parentName:"tr",align:null},"1413M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"K3s agent"),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B BCM2711, 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 10%"),(0,r.kt)("td",{parentName:"tr",align:null},"268M"),(0,r.kt)("td",{parentName:"tr",align:null},"268M")))),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E8%B5%84%E6%BA%90%E6%B5%8B%E8%AF%95%E8%8C%83%E5%9B%B4"},"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E7%94%A8%E4%BA%8E%E5%9F%BA%E7%BA%BF%E6%B5%8B%E9%87%8F%E7%9A%84%E7%BB%84%E4%BB%B6"},"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E6%96%B9%E6%B3%95"},"\u65b9\u6cd5")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E7%8E%AF%E5%A2%83"},"\u73af\u5883")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%9F%BA%E5%87%86%E8%B5%84%E6%BA%90%E8%A6%81%E6%B1%82"},"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%85%B7%E6%9C%89%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E7%9A%84-k3s-server"},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%85%B7%E6%9C%89%E5%8D%95%E4%B8%AA-agent-%E7%9A%84-k3s-%E9%9B%86%E7%BE%A4"},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#k3s-agent"},"K3s Agent")))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E5%88%86%E6%9E%90"},"\u5206\u6790"),(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E4%B8%BB%E8%A6%81%E8%B5%84%E6%BA%90%E4%BD%BF%E7%94%A8%E7%8E%87%E5%86%B3%E5%AE%9A%E5%9B%A0%E7%B4%A0"},"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"#%E9%98%B2%E6%AD%A2-agent-%E5%92%8C%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E5%B9%B2%E6%89%B0%E9%9B%86%E7%BE%A4%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8"},"\u9632\u6b62 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"))))),(0,r.kt)("h2",{id:"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4"},"\u8d44\u6e90\u6d4b\u8bd5\u8303\u56f4"),(0,r.kt)("p",null,"\u8d44\u6e90\u6d4b\u8bd5\u65e8\u5728\u89e3\u51b3\u4ee5\u4e0b\u95ee\u9898\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u5728\u5355\u8282\u70b9\u96c6\u7fa4\u4e0a\uff0c\u786e\u5b9a\u8981\u4e3a\u6574\u4e2a K3s \u670d\u52a1\u5668\u5806\u6808\u9884\u7559\u7684\u6700\u5c0f CPU\u3001\u5185\u5b58\u548c IOP \u6570\u91cf\uff08\u5047\u8bbe\u96c6\u7fa4\u4e0a\u5c06\u90e8\u7f72\u771f\u5b9e\u7684\u5de5\u4f5c\u8d1f\u8f7d\uff09\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5728 Agent\uff08Worker\uff09\u8282\u70b9\u4e0a\uff0c\u786e\u5b9a\u8981\u4e3a Kubernetes \u548c K3s control plane \u7ec4\u4ef6\uff08kubelet \u548c k3s agent\uff09\u9884\u7559\u7684\u6700\u5c0f CPU\u3001\u5185\u5b58\u548c IOP \u6570\u91cf\u3002")),(0,r.kt)("h2",{id:"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6"},"\u7528\u4e8e\u57fa\u7ebf\u6d4b\u91cf\u7684\u7ec4\u4ef6"),(0,r.kt)("p",null,"\u6d4b\u8bd5\u7684\u7ec4\u4ef6\u5305\u62ec\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u542f\u7528\u6240\u6709\u6253\u5305\u7ec4\u4ef6\u7684 K3s 1.26.5"),(0,r.kt)("li",{parentName:"ul"},"Prometheus + Grafana \u76d1\u63a7\u6808"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"Kubernetes \u793a\u4f8b Nginx \u90e8\u7f72"))),(0,r.kt)("p",null,"\u8fd9\u4e9b\u662f\u4e00\u4e2a\u7a33\u5b9a\u7cfb\u7edf\u7684\u57fa\u7ebf\u6570\u636e\uff0c\u53ea\u4f7f\u7528 K3s \u6253\u5305\u7684\u7ec4\u4ef6\uff08Traefik Ingress\u3001Klipper lb\u3001\u672c\u5730\u8def\u5f84\u5b58\u50a8\uff09\uff0c\u8fd0\u884c\u6807\u51c6\u7684\u76d1\u63a7\u5806\u6808\uff08Prometheus \u548c Grafana\uff09\u548c Guestbook \u793a\u4f8b\u5e94\u7528\u7a0b\u5e8f\u3002"),(0,r.kt)("p",null,"\u5305\u62ec IOPS \u5728\u5185\u7684\u8d44\u6e90\u6570\u636e\u4ec5\u7528\u4e8e Kubernetes \u6570\u636e\u5b58\u50a8\u548c control plane\uff0c\u4e0d\u5305\u62ec\u7cfb\u7edf\u7ea7 management agent \u6216 logging\u3001\u5bb9\u5668\u955c\u50cf\u7ba1\u7406\u6216\u4efb\u4f55\u5de5\u4f5c\u8d1f\u8f7d\u8981\u6c42\u7684\u5f00\u9500\u3002"),(0,r.kt)("h2",{id:"\u65b9\u6cd5"},"\u65b9\u6cd5"),(0,r.kt)("p",null,"Prometheus v2.43.0 \u7684\u72ec\u7acb\u5b9e\u4f8b\u53ef\u4ee5\u901a\u8fc7 apt \u5b89\u88c5\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"prometheus-node-exporter")," \u6536\u96c6\u4e3b\u673a CPU\u3001\u5185\u5b58\u548c\u78c1\u76d8 IO \u7edf\u8ba1\u4fe1\u606f\u3002"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"systemd-cgtop")," \u7528\u4e8e\u62bd\u67e5 systemd cgroup \u7ea7\u522b\u7684 CPU \u548c\u5185\u5b58\u5229\u7528\u7387\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"system.slice/k3s.service")," \u8ddf\u8e2a K3s \u548c containerd \u7684\u8d44\u6e90\u5229\u7528\u7387\uff0c\u800c\u5355\u4e2a pod \u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"kubepods")," \u5c42\u7ea7\u4e0b\u3002"),(0,r.kt)("p",null,"\u5176\u4ed6\u8be6\u7ec6\u7684 K3s \u5185\u5b58\u5229\u7528\u7387\u6570\u636e\u662f\u4f7f\u7528 server \u548c agent \u8fdb\u7a0b\u7684\u96c6\u6210 metrics-server \u4ece ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl top node")," \u6536\u96c6\u7684\u3002"),(0,r.kt)("p",null,"\u5229\u7528\u7387\u6570\u636e\u6765\u81ea\u4e8e\u8fd0\u884c\u6240\u8ff0\u5de5\u4f5c\u8d1f\u8f7d\u7684\u8282\u70b9\u4e0a\u7a33\u6001\u8fd0\u884c\u7684\u7b2c 95 \u4e2a\u767e\u5206\u4f4d\u8bfb\u6570\u3002"),(0,r.kt)("h2",{id:"\u73af\u5883"},"\u73af\u5883"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Arch"),(0,r.kt)("th",{parentName:"tr",align:null},"OS"),(0,r.kt)("th",{parentName:"tr",align:null},"System"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"),(0,r.kt)("th",{parentName:"tr",align:null},"Disk"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"x86_64"),(0,r.kt)("td",{parentName:"tr",align:null},"Ubuntu 22.04"),(0,r.kt)("td",{parentName:"tr",align:null},"AWS c6id.xlarge"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"NVME SSD")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"aarch64"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi OS 11"),(0,r.kt)("td",{parentName:"tr",align:null},"Raspberry Pi 4 Model B"),(0,r.kt)("td",{parentName:"tr",align:null},"BCM2711, 4 Core 1.50 GHz"),(0,r.kt)("td",{parentName:"tr",align:null},"8 GB"),(0,r.kt)("td",{parentName:"tr",align:null},"UHS-III SDXC")))),(0,r.kt)("h2",{id:"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42"},"\u57fa\u51c6\u8d44\u6e90\u8981\u6c42"),(0,r.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u6d4b\u8bd5\u7ed3\u679c\uff0c\u7528\u4e8e\u786e\u5b9a\u57fa\u672c K3s \u64cd\u4f5c\u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002"),(0,r.kt)("h3",{id:"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684-k3s-server"},"\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server"),(0,r.kt)("p",null,"\u8fd9\u4e9b\u662f\u5355\u8282\u70b9\u96c6\u7fa4\u7684\u8981\u6c42\uff0c\u5176\u4e2d K3s Server \u4e0e",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/"},"\u7b80\u5355\u5de5\u4f5c\u8d1f\u8f7d"),"\u5171\u4eab\u8d44\u6e90\u3002"),(0,r.kt)("p",null,"CPU \u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU \u6838\u7528\u91cf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 6%")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 30%")))),(0,r.kt)("p",null,"\u5185\u5b58\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6d4b\u8bd5\u7684\u6570\u636e\u5b58\u50a8"),(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5185\u5b58"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1596M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1588M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1606M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1613M")))),(0,r.kt)("p",null,"\u78c1\u76d8\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6d4b\u8bd5\u7684\u6570\u636e\u5b58\u50a8"),(0,r.kt)("th",{parentName:"tr",align:null},"IOPS"),(0,r.kt)("th",{parentName:"tr",align:null},"KiB/sec"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5ef6\u8fdf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"10"),(0,r.kt)("td",{parentName:"tr",align:null},"500"),(0,r.kt)("td",{parentName:"tr",align:null},"< 10 ms")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"50"),(0,r.kt)("td",{parentName:"tr",align:null},"250"),(0,r.kt)("td",{parentName:"tr",align:null},"< 5 ms")))),(0,r.kt)("h3",{id:"\u5177\u6709\u5355\u4e2a-agent-\u7684-k3s-\u96c6\u7fa4"},"\u5177\u6709\u5355\u4e2a Agent \u7684 K3s \u96c6\u7fa4"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u4ecb\u7ecd\u5177\u6709 K3s Server \u8282\u70b9\u548c K3s Agent\uff0c\u4f46\u6ca1\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s \u96c6\u7fa4\u7684\u57fa\u7ebf\u8981\u6c42\u3002"),(0,r.kt)("h4",{id:"k3s-server"},"K3s Server"),(0,r.kt)("p",null,"CPU \u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU \u6838\u7528\u91cf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 5%")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 25%")))),(0,r.kt)("p",null,"\u5185\u5b58\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6d4b\u8bd5\u7684\u6570\u636e\u5b58\u50a8"),(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u5185\u5b58"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Kine/SQLite"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1428M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1215M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"1450M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"1413M")))),(0,r.kt)("h3",{id:"k3s-agent"},"K3s Agent"),(0,r.kt)("p",null,"\u8981\u6c42\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7cfb\u7edf"),(0,r.kt)("th",{parentName:"tr",align:null},"CPU \u6838\u7528\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Intel 8375C"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 3%"),(0,r.kt)("td",{parentName:"tr",align:null},"275M")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Pi4B"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6838\u7684 5%"),(0,r.kt)("td",{parentName:"tr",align:null},"268M")))),(0,r.kt)("h2",{id:"\u5206\u6790"},"\u5206\u6790"),(0,r.kt)("p",null,"\u672c\u8282\u5305\u62ec\u4e86\u5bf9 K3s Server \u548c Agent \u5229\u7528\u7387\u4ea7\u751f\u6700\u5927\u5f71\u54cd\u7684\u5206\u6790\uff0c\u4ee5\u53ca\u5982\u4f55\u4fdd\u62a4\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u514d\u53d7 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u7684\u5e72\u6270\u3002"),(0,r.kt)("h3",{id:"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20"},"\u4e3b\u8981\u8d44\u6e90\u4f7f\u7528\u7387\u51b3\u5b9a\u56e0\u7d20"),(0,r.kt)("p",null,"K3s Server \u5229\u7528\u7387\u6570\u636e\u4e3b\u8981\u53d6\u51b3\u4e8e Kubernetes \u6570\u636e\u5b58\u50a8\uff08kine \u6216 etcd\uff09\u3001API Server\u3001Controller-Manager \u548c Scheduler \u63a7\u5236\u5faa\u73af\u7684\u652f\u6301\uff0c\u4ee5\u53ca\u5f71\u54cd\u7cfb\u7edf\u72b6\u6001\u66f4\u6539\u7684\u4efb\u4f55\u7ba1\u7406\u4efb\u52a1\u3002\u5982\u679c\u5bf9 Kubernetes control plane \u6dfb\u52a0\u989d\u5916\u8d1f\u8f7d\uff08\u4f8b\u5982\u521b\u5efa/\u4fee\u6539/\u5220\u9664\u8d44\u6e90\uff09\uff0c\u5229\u7528\u7387\u4f1a\u51fa\u73b0\u4e34\u65f6\u5cf0\u503c\u3002\u5982\u679c\u4f7f\u7528\u5927\u91cf\u4f7f\u7528 Kubernetes \u6570\u636e\u5b58\u50a8\u7684 Operator \u6216\u5e94\u7528\u7a0b\u5e8f\uff08\u4f8b\u5982 Rancher \u6216\u5176\u4ed6 Operator \u7c7b\u578b\u7684\u5e94\u7528\u7a0b\u5e8f\uff09\uff0cserver \u7684\u8d44\u6e90\u9700\u6c42\u5c06\u589e\u52a0\u3002\u5982\u679c\u901a\u8fc7\u6dfb\u52a0\u989d\u5916\u7684\u8282\u70b9\u6216\u521b\u5efa\u5927\u91cf\u96c6\u7fa4\u8d44\u6e90\u6765\u6269\u5c55\u96c6\u7fa4\uff0cserver \u7684\u8d44\u6e90\u9700\u6c42\u5c06\u589e\u52a0\u3002"),(0,r.kt)("p",null,"K3s Agent \u5229\u7528\u7387\u6570\u636e\u4e3b\u8981\u53d6\u51b3\u4e8e\u5bb9\u5668\u751f\u547d\u5468\u671f\u7ba1\u7406\u63a7\u5236\u5faa\u73af\u7684\u652f\u6301\u3002\u5982\u679c\u5b58\u5728\u6d89\u53ca\u7ba1\u7406\u955c\u50cf\u3001\u914d\u7f6e\u5b58\u50a8\u6216\u521b\u5efa/\u9500\u6bc1\u5bb9\u5668\u7684\u64cd\u4f5c\uff0c\u5229\u7528\u7387\u4f1a\u51fa\u73b0\u4e34\u65f6\u5cf0\u503c\u3002\u5c24\u5176\u662f\u955c\u50cf\u62c9\u53d6\uff08\u901a\u5e38\u4e0e CPU \u548c IO \u9ad8\u5ea6\u7ed1\u5b9a\uff09\uff0c\u56e0\u4e3a\u6d89\u53ca\u5c06\u955c\u50cf\u5185\u5bb9\u89e3\u538b\u7f29\u5230\u78c1\u76d8\u3002\u5982\u679c\u53ef\u80fd\uff0c\u4f60\u53ef\u4ee5\u5c06\u5de5\u4f5c\u8d1f\u8f7d\u5b58\u50a8\uff08pod \u4e34\u65f6\u5b58\u50a8\u548c\u5377\uff09\u4e0e Agent \u7ec4\u4ef6\uff08/var/lib/rancher/k3s/agent\uff09\u9694\u79bb\uff0c\u4ece\u800c\u786e\u4fdd\u6ca1\u6709\u8d44\u6e90\u51b2\u7a81\u3002"),(0,r.kt)("h3",{id:"\u9632\u6b62-agent-\u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"},"\u9632\u6b62 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u5e72\u6270\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"),(0,r.kt)("p",null,"\u5982\u679c\u5728 server \u8fd8\u6258\u7ba1\u4e86\u5de5\u4f5c\u8d1f\u8f7d pod \u7684\u73af\u5883\u4e2d\u8fd0\u884c\uff0c\u4f60\u9700\u8981\u786e\u4fdd agent \u548c\u5de5\u4f5c\u8d1f\u8f7d IOPS \u4e0d\u4f1a\u5e72\u6270\u6570\u636e\u5b58\u50a8\u3002"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u5c06 server \u7ec4\u4ef6 (/var/lib/rancher/k3s/server) \u653e\u7f6e\u5728\u4e0e agent \u7ec4\u4ef6 (/var/lib/rancher/k3s/agent) \u4e0d\u540c\u7684\u5b58\u50a8\u4ecb\u8d28\uff0c\u5176\u4e2d\u5305\u62ec containerd \u955c\u50cf\u5b58\u50a8\u533a\u3002"),(0,r.kt)("p",null,"\u5de5\u4f5c\u8d1f\u8f7d\u5b58\u50a8\uff08pod \u4e34\u65f6\u5b58\u50a8\u548c\u5377\uff09\u4e5f\u5e94\u8be5\u4e0e\u6570\u636e\u5b58\u50a8\u533a\u9694\u79bb\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u672a\u80fd\u6ee1\u8db3\u6570\u636e\u5b58\u50a8\u541e\u5410\u91cf\u548c\u5ef6\u8fdf\u8981\u6c42\uff0ccontrol plane \u7684\u54cd\u5e94\u53ef\u80fd\u4f1a\u5ef6\u8fdf\uff0ccontrol plane \u4e5f\u53ef\u80fd\u65e0\u6cd5\u7ef4\u6301\u7cfb\u7edf\u72b6\u6001\u3002"))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/330f05fd.b120c92f.js b/zh/assets/js/330f05fd.3465fb42.js
similarity index 96%
rename from zh/assets/js/330f05fd.b120c92f.js
rename to zh/assets/js/330f05fd.3465fb42.js
index 54d7540fd..02974370b 100644
--- a/zh/assets/js/330f05fd.b120c92f.js
+++ b/zh/assets/js/330f05fd.3465fb42.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2290],{3905:(e,r,t)=>{t.d(r,{Zo:()=>s,kt:()=>d});var n=t(7294);function o(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function c(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function a(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?c(Object(t),!0).forEach((function(r){o(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):c(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function i(e,r){if(null==e)return{};var t,n,o=function(e,r){if(null==e)return{};var t,n,o={},c=Object.keys(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||(o[t]=e[t]);return o}(e,r);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(o[t]=e[t])}return o}var l=n.createContext({}),p=function(e){var r=n.useContext(l),t=r;return e&&(t="function"==typeof e?e(r):a(a({},r),e)),t},s=function(e){var r=p(e.components);return n.createElement(l.Provider,{value:r},e.children)},u={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},f=n.forwardRef((function(e,r){var t=e.components,o=e.mdxType,c=e.originalType,l=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),f=p(t),d=o,m=f["".concat(l,".").concat(d)]||f[d]||u[d]||c;return t?n.createElement(m,a(a({ref:r},s),{},{components:t})):n.createElement(m,a({ref:r},s))}));function d(e,r){var t=arguments,o=r&&r.mdxType;if("string"==typeof e||o){var c=t.length,a=new Array(c);a[0]=f;var i={};for(var l in r)hasOwnProperty.call(r,l)&&(i[l]=r[l]);i.originalType=e,i.mdxType="string"==typeof e?e:o,a[1]=i;for(var p=2;p<c;p++)a[p]=t[p];return n.createElement.apply(null,a)}return n.createElement.apply(null,t)}f.displayName="MDXCreateElement"},8086:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>l,contentTitle:()=>a,default:()=>u,frontMatter:()=>c,metadata:()=>i,toc:()=>p});var n=t(3117),o=(t(7294),t(3905));const c={title:"\u53c2\u8003"},a=void 0,i={unversionedId:"reference/reference",id:"reference/reference",title:"\u53c2\u8003",description:"\u672c\u8282\u8be6\u7ec6\u4ecb\u7ecd\u4e86 K3s \u5b89\u88c5\u811a\u672c\u3001\u670d\u52a1\u5668/\u5ba2\u6237\u7aef\u914d\u7f6e\u9009\u9879\u4ee5\u53ca\u5176\u4ed6\u5de5\u5177\u7684\u4f7f\u7528\u8bf4\u660e\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/reference.md",sourceDirName:"reference",slug:"/reference/",permalink:"/zh/reference/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u53c2\u8003"},sidebar:"mySidebar",previous:{title:"token",permalink:"/zh/cli/token"},next:{title:"\u73af\u5883\u53d8\u91cf",permalink:"/zh/reference/env-variables"}},l={},p=[],s={toc:p};function u(e){let{components:r,...t}=e;return(0,o.kt)("wrapper",(0,n.Z)({},s,t,{components:r,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"\u672c\u8282\u8be6\u7ec6\u4ecb\u7ecd\u4e86 K3s \u5b89\u88c5\u811a\u672c\u3001\u670d\u52a1\u5668/\u5ba2\u6237\u7aef\u914d\u7f6e\u9009\u9879\u4ee5\u53ca\u5176\u4ed6\u5de5\u5177\u7684\u4f7f\u7528\u8bf4\u660e\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2290],{3905:(e,r,t)=>{t.d(r,{Zo:()=>s,kt:()=>d});var n=t(7294);function o(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function c(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter((function(r){return Object.getOwnPropertyDescriptor(e,r).enumerable}))),t.push.apply(t,n)}return t}function a(e){for(var r=1;r<arguments.length;r++){var t=null!=arguments[r]?arguments[r]:{};r%2?c(Object(t),!0).forEach((function(r){o(e,r,t[r])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):c(Object(t)).forEach((function(r){Object.defineProperty(e,r,Object.getOwnPropertyDescriptor(t,r))}))}return e}function i(e,r){if(null==e)return{};var t,n,o=function(e,r){if(null==e)return{};var t,n,o={},c=Object.keys(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||(o[t]=e[t]);return o}(e,r);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)t=c[n],r.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(o[t]=e[t])}return o}var l=n.createContext({}),p=function(e){var r=n.useContext(l),t=r;return e&&(t="function"==typeof e?e(r):a(a({},r),e)),t},s=function(e){var r=p(e.components);return n.createElement(l.Provider,{value:r},e.children)},u={inlineCode:"code",wrapper:function(e){var r=e.children;return n.createElement(n.Fragment,{},r)}},f=n.forwardRef((function(e,r){var t=e.components,o=e.mdxType,c=e.originalType,l=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),f=p(t),d=o,m=f["".concat(l,".").concat(d)]||f[d]||u[d]||c;return t?n.createElement(m,a(a({ref:r},s),{},{components:t})):n.createElement(m,a({ref:r},s))}));function d(e,r){var t=arguments,o=r&&r.mdxType;if("string"==typeof e||o){var c=t.length,a=new Array(c);a[0]=f;var i={};for(var l in r)hasOwnProperty.call(r,l)&&(i[l]=r[l]);i.originalType=e,i.mdxType="string"==typeof e?e:o,a[1]=i;for(var p=2;p<c;p++)a[p]=t[p];return n.createElement.apply(null,a)}return n.createElement.apply(null,t)}f.displayName="MDXCreateElement"},8086:(e,r,t)=>{t.r(r),t.d(r,{assets:()=>l,contentTitle:()=>a,default:()=>u,frontMatter:()=>c,metadata:()=>i,toc:()=>p});var n=t(3117),o=(t(7294),t(3905));const c={title:"\u53c2\u8003"},a=void 0,i={unversionedId:"reference/reference",id:"reference/reference",title:"\u53c2\u8003",description:"\u672c\u8282\u8be6\u7ec6\u4ecb\u7ecd\u4e86 K3s \u5b89\u88c5\u811a\u672c\u3001\u670d\u52a1\u5668/\u5ba2\u6237\u7aef\u914d\u7f6e\u9009\u9879\u4ee5\u53ca\u5176\u4ed6\u5de5\u5177\u7684\u4f7f\u7528\u8bf4\u660e\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/reference.md",sourceDirName:"reference",slug:"/reference/",permalink:"/zh/reference/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u53c2\u8003"},sidebar:"mySidebar",previous:{title:"token",permalink:"/zh/cli/token"},next:{title:"\u73af\u5883\u53d8\u91cf",permalink:"/zh/reference/env-variables"}},l={},p=[],s={toc:p};function u(e){let{components:r,...t}=e;return(0,o.kt)("wrapper",(0,n.Z)({},s,t,{components:r,mdxType:"MDXLayout"}),(0,o.kt)("p",null,"\u672c\u8282\u8be6\u7ec6\u4ecb\u7ecd\u4e86 K3s \u5b89\u88c5\u811a\u672c\u3001\u670d\u52a1\u5668/\u5ba2\u6237\u7aef\u914d\u7f6e\u9009\u9879\u4ee5\u53ca\u5176\u4ed6\u5de5\u5177\u7684\u4f7f\u7528\u8bf4\u660e\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/34c95e47.809a6150.js b/zh/assets/js/34c95e47.8f7e4168.js
similarity index 99%
rename from zh/assets/js/34c95e47.809a6150.js
rename to zh/assets/js/34c95e47.8f7e4168.js
index f14ac98de..414c942ce 100644
--- a/zh/assets/js/34c95e47.809a6150.js
+++ b/zh/assets/js/34c95e47.8f7e4168.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4951],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var l=n.createContext({}),c=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,a=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(r),m=i,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||a;return r?n.createElement(k,s(s({ref:t},u),{},{components:r})):n.createElement(k,s({ref:t},u))}));function m(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var a=r.length,s=new Array(a);s[0]=d;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:i,s[1]=o;for(var c=2;c<a;c++)s[c]=r[c];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},396:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>s,default:()=>p,frontMatter:()=>a,metadata:()=>o,toc:()=>c});var n=r(3117),i=(r(7294),r(3905));const a={title:"\u5df2\u77e5\u95ee\u9898",weight:70},s=void 0,o={unversionedId:"known-issues/known-issues",id:"known-issues/known-issues",title:"\u5df2\u77e5\u95ee\u9898",description:"\u6211\u4eec\u4f1a\u5b9a\u671f\u66f4\u65b0\u5df2\u77e5\u95ee\u9898\u6587\u6863\uff0c\u8bf4\u660e\u4e0b\u4e00\u4e2a\u5373\u5c06\u53d1\u5e03\u7684\u7248\u672c\u4e2d\u53ef\u80fd\u65e0\u6cd5\u7acb\u5373\u89e3\u51b3\u7684\u95ee\u9898\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",sourceDirName:"known-issues",slug:"/known-issues/",permalink:"/zh/known-issues/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5df2\u77e5\u95ee\u9898",weight:70},sidebar:"mySidebar",previous:{title:"\u8d44\u6e90\u5206\u6790",permalink:"/zh/reference/resource-profiling"},next:{title:"\u5b89\u5168",permalink:"/zh/security/"}},l={},c=[{value:"Snap Docker",id:"snap-docker",level:3},{value:"Iptables",id:"iptables",level:3},{value:"Rootless \u6a21\u5f0f",id:"rootless-\u6a21\u5f0f",level:3},{value:"\u5c06\u5f3a\u5316\u96c6\u7fa4\u4ece v1.24.x \u5347\u7ea7\u5230 v1.25.x",id:"hardened-125",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"\u6211\u4eec\u4f1a\u5b9a\u671f\u66f4\u65b0\u5df2\u77e5\u95ee\u9898\u6587\u6863\uff0c\u8bf4\u660e\u4e0b\u4e00\u4e2a\u5373\u5c06\u53d1\u5e03\u7684\u7248\u672c\u4e2d\u53ef\u80fd\u65e0\u6cd5\u7acb\u5373\u89e3\u51b3\u7684\u95ee\u9898\u3002"),(0,i.kt)("h3",{id:"snap-docker"},"Snap Docker"),(0,i.kt)("p",null,"\u5982\u679c\u4f60\u8ba1\u5212\u540c\u65f6\u4f7f\u7528 K3s \u4e0e Docker\uff0c\u5219\u4e0d\u5efa\u8bae\u901a\u8fc7 snap \u5305\u5b89\u88c5 Docker\uff0c\u56e0\u4e3a\u5b83\u4f1a\u5bfc\u81f4\u8fd0\u884c K3s \u65f6\u51fa\u73b0\u95ee\u9898\u3002"),(0,i.kt)("h3",{id:"iptables"},"Iptables"),(0,i.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528 nftables \u6a21\u5f0f\u800c\u4e0d\u662f\u4f20\u7edf\u6a21\u5f0f\u6765\u8fd0\u884c iptables\uff0c\u5219\u53ef\u80fd\u4f1a\u9047\u5230\u95ee\u9898\u3002\u6211\u4eec\u5efa\u8bae\u4f7f\u7528\u8f83\u65b0\u7684 iptables\uff08\u4f8b\u5982 1.6.1+\uff09\u6765\u907f\u514d\u51fa\u73b0\u95ee\u9898\u3002"),(0,i.kt)("p",null,"\u6b64\u5916\uff0c\u7248\u672c 1.8.0-1.8.4 \u5b58\u5728\u53ef\u80fd\u5bfc\u81f4 K3s \u5931\u8d25\u7684\u95ee\u9898\u3002\u6709\u5173\u89e3\u51b3\u65b9\u6cd5\uff0c\u8bf7\u53c2\u9605",(0,i.kt)("a",{parentName:"p",href:"/zh/advanced/#%E6%97%A7%E7%9A%84-iptables-%E7%89%88%E6%9C%AC"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),"\u3002"),(0,i.kt)("h3",{id:"rootless-\u6a21\u5f0f"},"Rootless \u6a21\u5f0f"),(0,i.kt)("p",null,"\u4f7f\u7528 Rootless \u6a21\u5f0f\u8fd0\u884c K3s \u662f\u5b9e\u9a8c\u6027\u7684\uff0c\u5b58\u5728\u51e0\u4e2a",(0,i.kt)("a",{parentName:"p",href:"/zh/advanced/#rootless-%E6%A8%A1%E5%BC%8F%E7%9A%84%E5%B7%B2%E7%9F%A5%E9%97%AE%E9%A2%98"},"\u5df2\u77e5\u95ee\u9898"),"\u3002"),(0,i.kt)("h3",{id:"hardened-125"},"\u5c06\u5f3a\u5316\u96c6\u7fa4\u4ece v1.24.x \u5347\u7ea7\u5230 v1.25.x"),(0,i.kt)("p",null,"Kubernetes v1.25 \u5220\u9664\u4e86 PodSecurityPolicy\uff0c\u652f\u6301 Pod Security Standard\uff08PSS\uff09\u3002\u4f60\u53ef\u4ee5\u5728",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"\u4e0a\u6e38\u6587\u6863"),"\u4e2d\u9605\u8bfb\u6709\u5173 PSS \u7684\u66f4\u591a\u4fe1\u606f\u3002\u5bf9\u4e8e K3s\uff0c\u5982\u679c\u5728\u8282\u70b9\u4e0a\u914d\u7f6e\u4e86\u4efb\u4f55 ",(0,i.kt)("inlineCode",{parentName:"p"},"PodSecurityPoliciy"),"\uff0c\u5219\u5fc5\u987b\u6267\u884c\u4e00\u4e9b\u624b\u52a8\u6b65\u9aa4\u3002"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},"\u5728\u6240\u6709\u8282\u70b9\u4e0a\uff0c\u66f4\u65b0 ",(0,i.kt)("inlineCode",{parentName:"li"},"kube-apiserver-arg")," \u503c\u4ee5\u5220\u9664 ",(0,i.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicy")," admission-plugin\u3002\u6dfb\u52a0\u4ee5\u4e0b\u53c2\u6570\u503c\uff1a",(0,i.kt)("inlineCode",{parentName:"li"},"'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'"),"\uff0c\u4f46\u4e0d\u8981\u91cd\u542f\u6216\u5347\u7ea7 K3s\u3002\u4ee5\u4e0b\u662f\u8282\u70b9\u52a0\u56fa\u66f4\u65b0\u540e\u914d\u7f6e\u6587\u4ef6\u7684\u793a\u4f8b\uff1a")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")),(0,i.kt)("ol",{start:2},(0,i.kt)("li",{parentName:"ol"},"\u4f7f\u7528\u4ee5\u4e0b\u5185\u5bb9\u521b\u5efa ",(0,i.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/psa.yaml")," \u6587\u4ef6\u3002\u4f60\u53ef\u80fd\u8fd8\u60f3\u8c41\u514d\u66f4\u591a\u547d\u540d\u7a7a\u95f4\u3002\u4e0b\u9762\u7684\u793a\u4f8b\u8c41\u514d\u4e86 ",(0,i.kt)("inlineCode",{parentName:"li"},"kube-system"),"\uff08\u5fc5\u9700\uff09\u3001",(0,i.kt)("inlineCode",{parentName:"li"},"cis-operator-system"),"\uff08\u53ef\u9009\uff0c\u4f46\u5728\u901a\u8fc7 Rancher \u8fd0\u884c\u5b89\u5168\u626b\u63cf\u65f6\u5f88\u6709\u7528\uff09\u548c ",(0,i.kt)("inlineCode",{parentName:"li"},"system- upgrade"),"\uff08\u5982\u679c\u6267\u884c",(0,i.kt)("a",{parentName:"li",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u5219\u9700\u8981\uff09\u3002")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system, system-upgrade]\n')),(0,i.kt)("ol",{start:3},(0,i.kt)("li",{parentName:"ol"},"\u6b63\u5e38\u6267\u884c\u5347\u7ea7\u3002\u5982\u679c\u4f7f\u7528",(0,i.kt)("a",{parentName:"li",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\uff0c\u8bf7\u786e\u4fdd\u8fd0\u884c ",(0,i.kt)("inlineCode",{parentName:"li"},"system-upgrade-controller")," pod \u7684\u547d\u540d\u7a7a\u95f4\u6309\u7167 ",(0,i.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels"},"Pod \u5b89\u5168\u7ea7\u522b"),"\u7684\u8981\u6c42\u8bbe\u7f6e\u4e3a privileged\u3002")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: system-upgrade\n  labels:\n    # This value must be privileged for the controller to run successfully.\n    pod-security.kubernetes.io/enforce: privileged\n    pod-security.kubernetes.io/enforce-version: v1.25\n    # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.\n    pod-security.kubernetes.io/audit: privileged\n    pod-security.kubernetes.io/audit-version: v1.25\n    pod-security.kubernetes.io/warn: privileged\n    pod-security.kubernetes.io/warn-version: v1.25\n")),(0,i.kt)("ol",{start:4},(0,i.kt)("li",{parentName:"ol"},"\u5347\u7ea7\u5b8c\u6210\u540e\uff0c\u4ece\u96c6\u7fa4\u4e2d\u79fb\u9664\u5269\u4f59\u7684 PSP \u8d44\u6e90\u3002\u5728\u8bb8\u591a\u60c5\u51b5\u4e0b\uff0c\u5728 ",(0,i.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/manifests/")," \u4e2d\u7528\u4e8e\u52a0\u56fa\u7684\u81ea\u5b9a\u4e49\u6587\u4ef6\u4e2d\u53ef\u80fd\u5b58\u5728 PodSecurityPolicies \u548c\u5173\u8054\u7684 RBAC \u8d44\u6e90\u3002\u5220\u9664\u8fd9\u4e9b\u8d44\u6e90\uff0c\u7136\u540e K3s \u5c06\u81ea\u52a8\u66f4\u65b0\u3002\u7531\u4e8e\u65f6\u95f4\u539f\u56e0\uff0c\u4e00\u4e9b\u8d44\u6e90\u53ef\u80fd\u4f1a\u7559\u5728\u96c6\u7fa4\u4e2d\uff0c\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u4f60\u9700\u8981\u624b\u52a8\u5220\u9664\u5b83\u4eec\u3002\u5982\u679c\u4e4b\u524d\u9075\u5faa\u4e86",(0,i.kt)("a",{parentName:"li",href:"/zh/security/hardening-guide"},"\u5f3a\u5316\u6307\u5357"),"\uff0c\u4f60\u5e94\u8be5\u80fd\u591f\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u5220\u9664\u5b83\u4eec\uff1a")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-sh"},"# \u83b7\u53d6\u4e0e PSP \u5173\u8054\u7684\u8d44\u6e90\n$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp\n\n# \u5220\u9664\u8fd9\u4e9b\u8d44\u6e90\n$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4951],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function s(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function o(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var l=n.createContext({}),c=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):s(s({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(l.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,a=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(r),m=i,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||a;return r?n.createElement(k,s(s({ref:t},u),{},{components:r})):n.createElement(k,s({ref:t},u))}));function m(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var a=r.length,s=new Array(a);s[0]=d;var o={};for(var l in t)hasOwnProperty.call(t,l)&&(o[l]=t[l]);o.originalType=e,o.mdxType="string"==typeof e?e:i,s[1]=o;for(var c=2;c<a;c++)s[c]=r[c];return n.createElement.apply(null,s)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},396:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>s,default:()=>p,frontMatter:()=>a,metadata:()=>o,toc:()=>c});var n=r(3117),i=(r(7294),r(3905));const a={title:"\u5df2\u77e5\u95ee\u9898",weight:70},s=void 0,o={unversionedId:"known-issues/known-issues",id:"known-issues/known-issues",title:"\u5df2\u77e5\u95ee\u9898",description:"\u6211\u4eec\u4f1a\u5b9a\u671f\u66f4\u65b0\u5df2\u77e5\u95ee\u9898\u6587\u6863\uff0c\u8bf4\u660e\u4e0b\u4e00\u4e2a\u5373\u5c06\u53d1\u5e03\u7684\u7248\u672c\u4e2d\u53ef\u80fd\u65e0\u6cd5\u7acb\u5373\u89e3\u51b3\u7684\u95ee\u9898\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",sourceDirName:"known-issues",slug:"/known-issues/",permalink:"/zh/known-issues/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5df2\u77e5\u95ee\u9898",weight:70},sidebar:"mySidebar",previous:{title:"\u8d44\u6e90\u5206\u6790",permalink:"/zh/reference/resource-profiling"},next:{title:"\u5b89\u5168",permalink:"/zh/security/"}},l={},c=[{value:"Snap Docker",id:"snap-docker",level:3},{value:"Iptables",id:"iptables",level:3},{value:"Rootless \u6a21\u5f0f",id:"rootless-\u6a21\u5f0f",level:3},{value:"\u5c06\u5f3a\u5316\u96c6\u7fa4\u4ece v1.24.x \u5347\u7ea7\u5230 v1.25.x",id:"hardened-125",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"\u6211\u4eec\u4f1a\u5b9a\u671f\u66f4\u65b0\u5df2\u77e5\u95ee\u9898\u6587\u6863\uff0c\u8bf4\u660e\u4e0b\u4e00\u4e2a\u5373\u5c06\u53d1\u5e03\u7684\u7248\u672c\u4e2d\u53ef\u80fd\u65e0\u6cd5\u7acb\u5373\u89e3\u51b3\u7684\u95ee\u9898\u3002"),(0,i.kt)("h3",{id:"snap-docker"},"Snap Docker"),(0,i.kt)("p",null,"\u5982\u679c\u4f60\u8ba1\u5212\u540c\u65f6\u4f7f\u7528 K3s \u4e0e Docker\uff0c\u5219\u4e0d\u5efa\u8bae\u901a\u8fc7 snap \u5305\u5b89\u88c5 Docker\uff0c\u56e0\u4e3a\u5b83\u4f1a\u5bfc\u81f4\u8fd0\u884c K3s \u65f6\u51fa\u73b0\u95ee\u9898\u3002"),(0,i.kt)("h3",{id:"iptables"},"Iptables"),(0,i.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528 nftables \u6a21\u5f0f\u800c\u4e0d\u662f\u4f20\u7edf\u6a21\u5f0f\u6765\u8fd0\u884c iptables\uff0c\u5219\u53ef\u80fd\u4f1a\u9047\u5230\u95ee\u9898\u3002\u6211\u4eec\u5efa\u8bae\u4f7f\u7528\u8f83\u65b0\u7684 iptables\uff08\u4f8b\u5982 1.6.1+\uff09\u6765\u907f\u514d\u51fa\u73b0\u95ee\u9898\u3002"),(0,i.kt)("p",null,"\u6b64\u5916\uff0c\u7248\u672c 1.8.0-1.8.4 \u5b58\u5728\u53ef\u80fd\u5bfc\u81f4 K3s \u5931\u8d25\u7684\u95ee\u9898\u3002\u6709\u5173\u89e3\u51b3\u65b9\u6cd5\uff0c\u8bf7\u53c2\u9605",(0,i.kt)("a",{parentName:"p",href:"/zh/advanced/#%E6%97%A7%E7%9A%84-iptables-%E7%89%88%E6%9C%AC"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),"\u3002"),(0,i.kt)("h3",{id:"rootless-\u6a21\u5f0f"},"Rootless \u6a21\u5f0f"),(0,i.kt)("p",null,"\u4f7f\u7528 Rootless \u6a21\u5f0f\u8fd0\u884c K3s \u662f\u5b9e\u9a8c\u6027\u7684\uff0c\u5b58\u5728\u51e0\u4e2a",(0,i.kt)("a",{parentName:"p",href:"/zh/advanced/#rootless-%E6%A8%A1%E5%BC%8F%E7%9A%84%E5%B7%B2%E7%9F%A5%E9%97%AE%E9%A2%98"},"\u5df2\u77e5\u95ee\u9898"),"\u3002"),(0,i.kt)("h3",{id:"hardened-125"},"\u5c06\u5f3a\u5316\u96c6\u7fa4\u4ece v1.24.x \u5347\u7ea7\u5230 v1.25.x"),(0,i.kt)("p",null,"Kubernetes v1.25 \u5220\u9664\u4e86 PodSecurityPolicy\uff0c\u652f\u6301 Pod Security Standard\uff08PSS\uff09\u3002\u4f60\u53ef\u4ee5\u5728",(0,i.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"\u4e0a\u6e38\u6587\u6863"),"\u4e2d\u9605\u8bfb\u6709\u5173 PSS \u7684\u66f4\u591a\u4fe1\u606f\u3002\u5bf9\u4e8e K3s\uff0c\u5982\u679c\u5728\u8282\u70b9\u4e0a\u914d\u7f6e\u4e86\u4efb\u4f55 ",(0,i.kt)("inlineCode",{parentName:"p"},"PodSecurityPoliciy"),"\uff0c\u5219\u5fc5\u987b\u6267\u884c\u4e00\u4e9b\u624b\u52a8\u6b65\u9aa4\u3002"),(0,i.kt)("ol",null,(0,i.kt)("li",{parentName:"ol"},"\u5728\u6240\u6709\u8282\u70b9\u4e0a\uff0c\u66f4\u65b0 ",(0,i.kt)("inlineCode",{parentName:"li"},"kube-apiserver-arg")," \u503c\u4ee5\u5220\u9664 ",(0,i.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicy")," admission-plugin\u3002\u6dfb\u52a0\u4ee5\u4e0b\u53c2\u6570\u503c\uff1a",(0,i.kt)("inlineCode",{parentName:"li"},"'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'"),"\uff0c\u4f46\u4e0d\u8981\u91cd\u542f\u6216\u5347\u7ea7 K3s\u3002\u4ee5\u4e0b\u662f\u8282\u70b9\u52a0\u56fa\u66f4\u65b0\u540e\u914d\u7f6e\u6587\u4ef6\u7684\u793a\u4f8b\uff1a")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")),(0,i.kt)("ol",{start:2},(0,i.kt)("li",{parentName:"ol"},"\u4f7f\u7528\u4ee5\u4e0b\u5185\u5bb9\u521b\u5efa ",(0,i.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/psa.yaml")," \u6587\u4ef6\u3002\u4f60\u53ef\u80fd\u8fd8\u60f3\u8c41\u514d\u66f4\u591a\u547d\u540d\u7a7a\u95f4\u3002\u4e0b\u9762\u7684\u793a\u4f8b\u8c41\u514d\u4e86 ",(0,i.kt)("inlineCode",{parentName:"li"},"kube-system"),"\uff08\u5fc5\u9700\uff09\u3001",(0,i.kt)("inlineCode",{parentName:"li"},"cis-operator-system"),"\uff08\u53ef\u9009\uff0c\u4f46\u5728\u901a\u8fc7 Rancher \u8fd0\u884c\u5b89\u5168\u626b\u63cf\u65f6\u5f88\u6709\u7528\uff09\u548c ",(0,i.kt)("inlineCode",{parentName:"li"},"system- upgrade"),"\uff08\u5982\u679c\u6267\u884c",(0,i.kt)("a",{parentName:"li",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u5219\u9700\u8981\uff09\u3002")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system, system-upgrade]\n')),(0,i.kt)("ol",{start:3},(0,i.kt)("li",{parentName:"ol"},"\u6b63\u5e38\u6267\u884c\u5347\u7ea7\u3002\u5982\u679c\u4f7f\u7528",(0,i.kt)("a",{parentName:"li",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\uff0c\u8bf7\u786e\u4fdd\u8fd0\u884c ",(0,i.kt)("inlineCode",{parentName:"li"},"system-upgrade-controller")," pod \u7684\u547d\u540d\u7a7a\u95f4\u6309\u7167 ",(0,i.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels"},"Pod \u5b89\u5168\u7ea7\u522b"),"\u7684\u8981\u6c42\u8bbe\u7f6e\u4e3a privileged\u3002")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: system-upgrade\n  labels:\n    # This value must be privileged for the controller to run successfully.\n    pod-security.kubernetes.io/enforce: privileged\n    pod-security.kubernetes.io/enforce-version: v1.25\n    # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.\n    pod-security.kubernetes.io/audit: privileged\n    pod-security.kubernetes.io/audit-version: v1.25\n    pod-security.kubernetes.io/warn: privileged\n    pod-security.kubernetes.io/warn-version: v1.25\n")),(0,i.kt)("ol",{start:4},(0,i.kt)("li",{parentName:"ol"},"\u5347\u7ea7\u5b8c\u6210\u540e\uff0c\u4ece\u96c6\u7fa4\u4e2d\u79fb\u9664\u5269\u4f59\u7684 PSP \u8d44\u6e90\u3002\u5728\u8bb8\u591a\u60c5\u51b5\u4e0b\uff0c\u5728 ",(0,i.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/manifests/")," \u4e2d\u7528\u4e8e\u52a0\u56fa\u7684\u81ea\u5b9a\u4e49\u6587\u4ef6\u4e2d\u53ef\u80fd\u5b58\u5728 PodSecurityPolicies \u548c\u5173\u8054\u7684 RBAC \u8d44\u6e90\u3002\u5220\u9664\u8fd9\u4e9b\u8d44\u6e90\uff0c\u7136\u540e K3s \u5c06\u81ea\u52a8\u66f4\u65b0\u3002\u7531\u4e8e\u65f6\u95f4\u539f\u56e0\uff0c\u4e00\u4e9b\u8d44\u6e90\u53ef\u80fd\u4f1a\u7559\u5728\u96c6\u7fa4\u4e2d\uff0c\u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u4f60\u9700\u8981\u624b\u52a8\u5220\u9664\u5b83\u4eec\u3002\u5982\u679c\u4e4b\u524d\u9075\u5faa\u4e86",(0,i.kt)("a",{parentName:"li",href:"/zh/security/hardening-guide"},"\u5f3a\u5316\u6307\u5357"),"\uff0c\u4f60\u5e94\u8be5\u80fd\u591f\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u5220\u9664\u5b83\u4eec\uff1a")),(0,i.kt)("pre",null,(0,i.kt)("code",{parentName:"pre",className:"language-sh"},"# \u83b7\u53d6\u4e0e PSP \u5173\u8054\u7684\u8d44\u6e90\n$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp\n\n# \u5220\u9664\u8fd9\u4e9b\u8d44\u6e90\n$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding\n")))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/3551cc1a.24849c10.js b/zh/assets/js/3551cc1a.12bdce1a.js
similarity index 99%
rename from zh/assets/js/3551cc1a.24849c10.js
rename to zh/assets/js/3551cc1a.12bdce1a.js
index 35fb06083..9d99fb9f5 100644
--- a/zh/assets/js/3551cc1a.24849c10.js
+++ b/zh/assets/js/3551cc1a.12bdce1a.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9534],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>d});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),c=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=c(e.components);return a.createElement(s.Provider,{value:t},e.children)},i={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,u=p(e,["components","mdxType","originalType","parentName"]),m=c(n),d=r,g=m["".concat(s,".").concat(d)]||m[d]||i[d]||l;return n?a.createElement(g,o(o({ref:t},u),{},{components:n})):a.createElement(g,o({ref:t},u))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=m;var p={};for(var s in t)hasOwnProperty.call(t,s)&&(p[s]=t[s]);p.originalType=e,p.mdxType="string"==typeof e?e:r,o[1]=p;for(var c=2;c<l;c++)o[c]=n[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8513:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>i,frontMatter:()=>l,metadata:()=>p,toc:()=>c});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u5377\u548c\u5b58\u50a8",weight:30},o=void 0,p={unversionedId:"storage/storage",id:"storage/storage",title:"\u5377\u548c\u5b58\u50a8",description:"\u5728\u90e8\u7f72\u9700\u8981\u4fdd\u200b\u200b\u7559\u6570\u636e\u7684\u5e94\u7528\u65f6\uff0c\u4f60\u9700\u8981\u521b\u5efa\u6301\u4e45\u5b58\u50a8\u3002\u6301\u4e45\u5b58\u50a8\u5141\u8bb8\u4f60\u5728\u8fd0\u884c\u5e94\u7528\u7684 pod \u4e4b\u5916\u5b58\u50a8\u5e94\u7528\u6570\u636e\u3002\u5373\u4f7f\u8fd0\u884c\u5e94\u7528\u7684 pod \u53d1\u751f\u6545\u969c\uff0c\u8fd9\u79cd\u5b58\u50a8\u65b9\u5f0f\u4e5f\u80fd\u8ba9\u4f60\u4fdd\u7559\u5e94\u7528\u6570\u636e\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/storage/storage.md",sourceDirName:"storage",slug:"/storage/",permalink:"/zh/storage/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5377\u548c\u5b58\u50a8",weight:30},sidebar:"mySidebar",previous:{title:"\u81ea\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/automated"},next:{title:"\u7f51\u7edc",permalink:"/zh/networking/"}},s={},c=[{value:"K3s \u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c\uff1f",id:"k3s-\u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c",level:2},{value:"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f",id:"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f",level:2},{value:"pvc.yaml",id:"pvcyaml",level:3},{value:"pod.yaml",id:"podyaml",level:3},{value:"\u8bbe\u7f6e Longhorn",id:"\u8bbe\u7f6e-longhorn",level:2},{value:"pvc.yaml",id:"pvcyaml-1",level:3},{value:"pod.yaml",id:"podyaml-1",level:3}],u={toc:c};function i(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u5728\u90e8\u7f72\u9700\u8981\u4fdd\u200b\u200b\u7559\u6570\u636e\u7684\u5e94\u7528\u65f6\uff0c\u4f60\u9700\u8981\u521b\u5efa\u6301\u4e45\u5b58\u50a8\u3002\u6301\u4e45\u5b58\u50a8\u5141\u8bb8\u4f60\u5728\u8fd0\u884c\u5e94\u7528\u7684 pod \u4e4b\u5916\u5b58\u50a8\u5e94\u7528\u6570\u636e\u3002\u5373\u4f7f\u8fd0\u884c\u5e94\u7528\u7684 pod \u53d1\u751f\u6545\u969c\uff0c\u8fd9\u79cd\u5b58\u50a8\u65b9\u5f0f\u4e5f\u80fd\u8ba9\u4f60\u4fdd\u7559\u5e94\u7528\u6570\u636e\u3002"),(0,r.kt)("p",null,"\u6301\u4e45\u5377 (PV) \u662f Kubernetes \u96c6\u7fa4\u4e2d\u7684\u4e00\u5757\u5b58\u50a8\uff0c\u800c\u6301\u4e45\u5377\u58f0\u660e (PVC) \u662f\u5bf9\u5b58\u50a8\u7684\u8bf7\u6c42\u3002\u6709\u5173 PV \u548c PVC \u5de5\u4f5c\u539f\u7406\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/storage/volumes/"},"Kubernetes \u5b58\u50a8\u76f8\u5173\u7684\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,r.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u5982\u4f55\u4f7f\u7528\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f\u6216 ",(0,r.kt)("a",{parentName:"p",href:"#%E8%AE%BE%E7%BD%AE-longhorn"},"Longhorn")," \u8bbe\u7f6e\u6301\u4e45\u5b58\u50a8\u3002"),(0,r.kt)("h2",{id:"k3s-\u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c"},"K3s \u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c\uff1f"),(0,r.kt)("p",null,"K3s \u5220\u9664\u4e86\u51e0\u4e2a\u53ef\u9009\u7684\u5377\u63d2\u4ef6\u548c\u6240\u6709\u5185\u7f6e\u7684\uff08\u6709\u65f6\u79f0\u4e3a\u201cin-tree\u201d\uff09\u4e91\u63d0\u4f9b\u5546\u3002\u6211\u4eec\u8fd9\u6837\u505a\u662f\u4e3a\u4e86\u8ba9\u4e8c\u8fdb\u5236\u6587\u4ef6\u66f4\u5c0f\uff0c\u5e76\u907f\u514d\u5bf9\u7b2c\u4e09\u65b9\u4e91\u6216\u6570\u636e\u4e2d\u5fc3\u6280\u672f\u548c\u670d\u52a1\u7684\u4f9d\u8d56\uff0c\u56e0\u4e3a\u8fd9\u4e9b\u4f9d\u8d56\u5728\u8bb8\u591a K3s \u7528\u4f8b\u4e2d\u53ef\u80fd\u4e0d\u53ef\u7528\u3002\u6211\u4eec\u4e4b\u6240\u4ee5\u80fd\u591f\u8fd9\u6837\u505a\uff0c\u662f\u56e0\u4e3a\u5b83\u4eec\u7684\u79fb\u9664\u65e2\u4e0d\u4f1a\u5f71\u54cd\u6838\u5fc3 Kubernetes \u529f\u80fd\uff0c\u4e5f\u4e0d\u4f1a\u5f71\u54cd\u4e00\u81f4\u6027\u3002"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u5377\u63d2\u4ef6\u5df2\u4ece K3s \u4e2d\u5220\u9664\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"cephfs"),(0,r.kt)("li",{parentName:"ul"},"fc"),(0,r.kt)("li",{parentName:"ul"},"flocker"),(0,r.kt)("li",{parentName:"ul"},"git_repo"),(0,r.kt)("li",{parentName:"ul"},"glusterfs"),(0,r.kt)("li",{parentName:"ul"},"portworx"),(0,r.kt)("li",{parentName:"ul"},"quobyte"),(0,r.kt)("li",{parentName:"ul"},"rbd"),(0,r.kt)("li",{parentName:"ul"},"storageos")),(0,r.kt)("p",null,"\u8fd9\u4e24\u4e2a\u7ec4\u4ef6\u90fd\u6709\u53ef\u4ee5\u4e0e K3s \u4e00\u8d77\u4f7f\u7528\u7684\u6811\u5916\u66ff\u4ee3\u65b9\u6848\uff1aKubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/container-storage-interface/spec/blob/master/spec.md"},"Container Storage Interface (CSI)")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/"},"Cloud Provider Interface (CPI)"),"\u3002"),(0,r.kt)("p",null,"Kubernetes \u7ef4\u62a4\u4eba\u5458\u6b63\u5728\u79ef\u6781\u5730\u5c06\u6811\u5185\u5377\u63d2\u4ef6\u8fc1\u79fb\u5230 CSI \u9a71\u52a8\u7a0b\u5e8f\u3002\u6709\u5173\u6b64\u8fc1\u79fb\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/"},"\u6b64\u5904"),"\u3002"),(0,r.kt)("h2",{id:"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f"},"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f"),(0,r.kt)("p",null,"K3s \u81ea\u5e26 Rancher \u7684 Local Path Provisioner\uff0c\u8fd9\u4f7f\u5f97\u80fd\u591f\u4f7f\u7528\u5404\u81ea\u8282\u70b9\u4e0a\u7684\u672c\u5730\u5b58\u50a8\u6765\u5f00\u7bb1\u5373\u7528\u5730\u521b\u5efa\u6301\u4e45\u5377\u58f0\u660e\u3002\u4e0b\u9762\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u4f8b\u5b50\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage"},"\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,r.kt)("p",null,"\u521b\u5efa\u4e00\u4e2a hostPath \u652f\u6301\u7684\u6301\u4e45\u5377\u58f0\u660e\u548c\u4e00\u4e2a\u4f7f\u7528\u5b83\u7684 Pod\uff1a"),(0,r.kt)("h3",{id:"pvcyaml"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: local-path-pvc\n  namespace: default\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: local-path\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: local-path-pvc\n")),(0,r.kt)("p",null,"\u5e94\u7528 yaml\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("p",null,"\u786e\u8ba4\u521b\u5efa\u4e86 PV \u548c PVC\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\u72b6\u6001\u90fd\u5e94\u8be5\u662f Bound\u3002"),(0,r.kt)("h2",{id:"\u8bbe\u7f6e-longhorn"},"\u8bbe\u7f6e Longhorn"),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Longhorn \u4e0d\u652f\u6301 ARM32\u3002")),(0,r.kt)("p",null,"K3s \u652f\u6301 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/longhorn/longhorn"},"Longhorn"),"\uff0c\u8fd9\u662f\u7528\u4e8e Kubernetes \u7684\u5f00\u6e90\u5206\u5e03\u5f0f\u5757\u5b58\u50a8\u7cfb\u7edf\u3002"),(0,r.kt)("p",null,"\u4e0b\u9762\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u4f8b\u5b50\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://longhorn.io/docs/latest/"},"\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,r.kt)("p",null,"\u5e94\u7528 longhorn.yaml \u6765\u5b89\u88c5 Longhorn\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml\n")),(0,r.kt)("p",null,"Longhorn \u5c06\u5b89\u88c5\u5728\u547d\u540d\u7a7a\u95f4 ",(0,r.kt)("inlineCode",{parentName:"p"},"longhorn-system")," \u4e2d\u3002"),(0,r.kt)("p",null,"\u5e94\u7528 yaml \u6765\u521b\u5efa PVC \u548c Pod\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("h3",{id:"pvcyaml-1"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: longhorn-volv-pvc\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: longhorn\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml-1"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: longhorn-volv-pvc\n")),(0,r.kt)("p",null,"\u786e\u8ba4\u521b\u5efa\u4e86 PV \u548c PVC\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\u72b6\u6001\u90fd\u5e94\u8be5\u662f Bound\u3002"))}i.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9534],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>d});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var s=a.createContext({}),c=function(e){var t=a.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},u=function(e){var t=c(e.components);return a.createElement(s.Provider,{value:t},e.children)},i={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,u=p(e,["components","mdxType","originalType","parentName"]),m=c(n),d=r,g=m["".concat(s,".").concat(d)]||m[d]||i[d]||l;return n?a.createElement(g,o(o({ref:t},u),{},{components:n})):a.createElement(g,o({ref:t},u))}));function d(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=m;var p={};for(var s in t)hasOwnProperty.call(t,s)&&(p[s]=t[s]);p.originalType=e,p.mdxType="string"==typeof e?e:r,o[1]=p;for(var c=2;c<l;c++)o[c]=n[c];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8513:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>i,frontMatter:()=>l,metadata:()=>p,toc:()=>c});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u5377\u548c\u5b58\u50a8",weight:30},o=void 0,p={unversionedId:"storage/storage",id:"storage/storage",title:"\u5377\u548c\u5b58\u50a8",description:"\u5728\u90e8\u7f72\u9700\u8981\u4fdd\u200b\u200b\u7559\u6570\u636e\u7684\u5e94\u7528\u65f6\uff0c\u4f60\u9700\u8981\u521b\u5efa\u6301\u4e45\u5b58\u50a8\u3002\u6301\u4e45\u5b58\u50a8\u5141\u8bb8\u4f60\u5728\u8fd0\u884c\u5e94\u7528\u7684 pod \u4e4b\u5916\u5b58\u50a8\u5e94\u7528\u6570\u636e\u3002\u5373\u4f7f\u8fd0\u884c\u5e94\u7528\u7684 pod \u53d1\u751f\u6545\u969c\uff0c\u8fd9\u79cd\u5b58\u50a8\u65b9\u5f0f\u4e5f\u80fd\u8ba9\u4f60\u4fdd\u7559\u5e94\u7528\u6570\u636e\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/storage/storage.md",sourceDirName:"storage",slug:"/storage/",permalink:"/zh/storage/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5377\u548c\u5b58\u50a8",weight:30},sidebar:"mySidebar",previous:{title:"\u81ea\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/automated"},next:{title:"\u7f51\u7edc",permalink:"/zh/networking/"}},s={},c=[{value:"K3s \u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c\uff1f",id:"k3s-\u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c",level:2},{value:"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f",id:"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f",level:2},{value:"pvc.yaml",id:"pvcyaml",level:3},{value:"pod.yaml",id:"podyaml",level:3},{value:"\u8bbe\u7f6e Longhorn",id:"\u8bbe\u7f6e-longhorn",level:2},{value:"pvc.yaml",id:"pvcyaml-1",level:3},{value:"pod.yaml",id:"podyaml-1",level:3}],u={toc:c};function i(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u5728\u90e8\u7f72\u9700\u8981\u4fdd\u200b\u200b\u7559\u6570\u636e\u7684\u5e94\u7528\u65f6\uff0c\u4f60\u9700\u8981\u521b\u5efa\u6301\u4e45\u5b58\u50a8\u3002\u6301\u4e45\u5b58\u50a8\u5141\u8bb8\u4f60\u5728\u8fd0\u884c\u5e94\u7528\u7684 pod \u4e4b\u5916\u5b58\u50a8\u5e94\u7528\u6570\u636e\u3002\u5373\u4f7f\u8fd0\u884c\u5e94\u7528\u7684 pod \u53d1\u751f\u6545\u969c\uff0c\u8fd9\u79cd\u5b58\u50a8\u65b9\u5f0f\u4e5f\u80fd\u8ba9\u4f60\u4fdd\u7559\u5e94\u7528\u6570\u636e\u3002"),(0,r.kt)("p",null,"\u6301\u4e45\u5377 (PV) \u662f Kubernetes \u96c6\u7fa4\u4e2d\u7684\u4e00\u5757\u5b58\u50a8\uff0c\u800c\u6301\u4e45\u5377\u58f0\u660e (PVC) \u662f\u5bf9\u5b58\u50a8\u7684\u8bf7\u6c42\u3002\u6709\u5173 PV \u548c PVC \u5de5\u4f5c\u539f\u7406\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/storage/volumes/"},"Kubernetes \u5b58\u50a8\u76f8\u5173\u7684\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,r.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u5982\u4f55\u4f7f\u7528\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f\u6216 ",(0,r.kt)("a",{parentName:"p",href:"#%E8%AE%BE%E7%BD%AE-longhorn"},"Longhorn")," \u8bbe\u7f6e\u6301\u4e45\u5b58\u50a8\u3002"),(0,r.kt)("h2",{id:"k3s-\u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c"},"K3s \u5b58\u50a8\u6709\u4ec0\u4e48\u4e0d\u540c\uff1f"),(0,r.kt)("p",null,"K3s \u5220\u9664\u4e86\u51e0\u4e2a\u53ef\u9009\u7684\u5377\u63d2\u4ef6\u548c\u6240\u6709\u5185\u7f6e\u7684\uff08\u6709\u65f6\u79f0\u4e3a\u201cin-tree\u201d\uff09\u4e91\u63d0\u4f9b\u5546\u3002\u6211\u4eec\u8fd9\u6837\u505a\u662f\u4e3a\u4e86\u8ba9\u4e8c\u8fdb\u5236\u6587\u4ef6\u66f4\u5c0f\uff0c\u5e76\u907f\u514d\u5bf9\u7b2c\u4e09\u65b9\u4e91\u6216\u6570\u636e\u4e2d\u5fc3\u6280\u672f\u548c\u670d\u52a1\u7684\u4f9d\u8d56\uff0c\u56e0\u4e3a\u8fd9\u4e9b\u4f9d\u8d56\u5728\u8bb8\u591a K3s \u7528\u4f8b\u4e2d\u53ef\u80fd\u4e0d\u53ef\u7528\u3002\u6211\u4eec\u4e4b\u6240\u4ee5\u80fd\u591f\u8fd9\u6837\u505a\uff0c\u662f\u56e0\u4e3a\u5b83\u4eec\u7684\u79fb\u9664\u65e2\u4e0d\u4f1a\u5f71\u54cd\u6838\u5fc3 Kubernetes \u529f\u80fd\uff0c\u4e5f\u4e0d\u4f1a\u5f71\u54cd\u4e00\u81f4\u6027\u3002"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u5377\u63d2\u4ef6\u5df2\u4ece K3s \u4e2d\u5220\u9664\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"cephfs"),(0,r.kt)("li",{parentName:"ul"},"fc"),(0,r.kt)("li",{parentName:"ul"},"flocker"),(0,r.kt)("li",{parentName:"ul"},"git_repo"),(0,r.kt)("li",{parentName:"ul"},"glusterfs"),(0,r.kt)("li",{parentName:"ul"},"portworx"),(0,r.kt)("li",{parentName:"ul"},"quobyte"),(0,r.kt)("li",{parentName:"ul"},"rbd"),(0,r.kt)("li",{parentName:"ul"},"storageos")),(0,r.kt)("p",null,"\u8fd9\u4e24\u4e2a\u7ec4\u4ef6\u90fd\u6709\u53ef\u4ee5\u4e0e K3s \u4e00\u8d77\u4f7f\u7528\u7684\u6811\u5916\u66ff\u4ee3\u65b9\u6848\uff1aKubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/container-storage-interface/spec/blob/master/spec.md"},"Container Storage Interface (CSI)")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/"},"Cloud Provider Interface (CPI)"),"\u3002"),(0,r.kt)("p",null,"Kubernetes \u7ef4\u62a4\u4eba\u5458\u6b63\u5728\u79ef\u6781\u5730\u5c06\u6811\u5185\u5377\u63d2\u4ef6\u8fc1\u79fb\u5230 CSI \u9a71\u52a8\u7a0b\u5e8f\u3002\u6709\u5173\u6b64\u8fc1\u79fb\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/"},"\u6b64\u5904"),"\u3002"),(0,r.kt)("h2",{id:"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f"},"\u8bbe\u7f6e\u672c\u5730\u5b58\u50a8\u63d0\u4f9b\u7a0b\u5e8f"),(0,r.kt)("p",null,"K3s \u81ea\u5e26 Rancher \u7684 Local Path Provisioner\uff0c\u8fd9\u4f7f\u5f97\u80fd\u591f\u4f7f\u7528\u5404\u81ea\u8282\u70b9\u4e0a\u7684\u672c\u5730\u5b58\u50a8\u6765\u5f00\u7bb1\u5373\u7528\u5730\u521b\u5efa\u6301\u4e45\u5377\u58f0\u660e\u3002\u4e0b\u9762\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u4f8b\u5b50\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage"},"\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,r.kt)("p",null,"\u521b\u5efa\u4e00\u4e2a hostPath \u652f\u6301\u7684\u6301\u4e45\u5377\u58f0\u660e\u548c\u4e00\u4e2a\u4f7f\u7528\u5b83\u7684 Pod\uff1a"),(0,r.kt)("h3",{id:"pvcyaml"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: local-path-pvc\n  namespace: default\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: local-path\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: local-path-pvc\n")),(0,r.kt)("p",null,"\u5e94\u7528 yaml\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("p",null,"\u786e\u8ba4\u521b\u5efa\u4e86 PV \u548c PVC\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\u72b6\u6001\u90fd\u5e94\u8be5\u662f Bound\u3002"),(0,r.kt)("h2",{id:"\u8bbe\u7f6e-longhorn"},"\u8bbe\u7f6e Longhorn"),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"Longhorn \u4e0d\u652f\u6301 ARM32\u3002")),(0,r.kt)("p",null,"K3s \u652f\u6301 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/longhorn/longhorn"},"Longhorn"),"\uff0c\u8fd9\u662f\u7528\u4e8e Kubernetes \u7684\u5f00\u6e90\u5206\u5e03\u5f0f\u5757\u5b58\u50a8\u7cfb\u7edf\u3002"),(0,r.kt)("p",null,"\u4e0b\u9762\u662f\u4e00\u4e2a\u7b80\u5355\u7684\u4f8b\u5b50\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://longhorn.io/docs/latest/"},"\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,r.kt)("p",null,"\u5e94\u7528 longhorn.yaml \u6765\u5b89\u88c5 Longhorn\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml\n")),(0,r.kt)("p",null,"Longhorn \u5c06\u5b89\u88c5\u5728\u547d\u540d\u7a7a\u95f4 ",(0,r.kt)("inlineCode",{parentName:"p"},"longhorn-system")," \u4e2d\u3002"),(0,r.kt)("p",null,"\u5e94\u7528 yaml \u6765\u521b\u5efa PVC \u548c Pod\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl create -f pvc.yaml\nkubectl create -f pod.yaml\n")),(0,r.kt)("h3",{id:"pvcyaml-1"},"pvc.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: PersistentVolumeClaim\nmetadata:\n  name: longhorn-volv-pvc\nspec:\n  accessModes:\n    - ReadWriteOnce\n  storageClassName: longhorn\n  resources:\n    requests:\n      storage: 2Gi\n")),(0,r.kt)("h3",{id:"podyaml-1"},"pod.yaml"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: volume-test\n  namespace: default\nspec:\n  containers:\n  - name: volume-test\n    image: nginx:stable-alpine\n    imagePullPolicy: IfNotPresent\n    volumeMounts:\n    - name: volv\n      mountPath: /data\n    ports:\n    - containerPort: 80\n  volumes:\n  - name: volv\n    persistentVolumeClaim:\n      claimName: longhorn-volv-pvc\n")),(0,r.kt)("p",null,"\u786e\u8ba4\u521b\u5efa\u4e86 PV \u548c PVC\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl get pv\nkubectl get pvc\n")),(0,r.kt)("p",null,"\u72b6\u6001\u90fd\u5e94\u8be5\u662f Bound\u3002"))}i.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/357d395b.eb6852e5.js b/zh/assets/js/357d395b.d7434d40.js
similarity index 98%
rename from zh/assets/js/357d395b.eb6852e5.js
rename to zh/assets/js/357d395b.d7434d40.js
index 852da0848..032127d14 100644
--- a/zh/assets/js/357d395b.eb6852e5.js
+++ b/zh/assets/js/357d395b.d7434d40.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5251],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>d});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),s=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):p(p({},t),e)),r},u=function(e){var t=s(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),m=s(r),d=n,f=m["".concat(l,".").concat(d)]||m[d]||c[d]||o;return r?a.createElement(f,p(p({ref:t},u),{},{components:r})):a.createElement(f,p({ref:t},u))}));function d(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,p=new Array(o);p[0]=m;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:n,p[1]=i;for(var s=2;s<o;s++)p[s]=r[s];return a.createElement.apply(null,p)}return a.createElement.apply(null,r)}m.displayName="MDXCreateElement"},9049:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>p,default:()=>c,frontMatter:()=>o,metadata:()=>i,toc:()=>s});var a=r(3117),n=(r(7294),r(3905));const o={title:"\u5347\u7ea7",weight:25},p=void 0,i={unversionedId:"upgrades/upgrades",id:"upgrades/upgrades",title:"\u5347\u7ea7",description:"\u5347\u7ea7 K3s \u96c6\u7fa4",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",sourceDirName:"upgrades",slug:"/upgrades/",permalink:"/zh/upgrades/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5347\u7ea7",weight:25},sidebar:"mySidebar",previous:{title:"\u96c6\u7fa4\u8bbf\u95ee",permalink:"/zh/cluster-access/"},next:{title:"\u505c\u6b62 K3s",permalink:"/zh/upgrades/killall"}},l={},s=[{value:"\u5347\u7ea7 K3s \u96c6\u7fa4",id:"\u5347\u7ea7-k3s-\u96c6\u7fa4",level:3},{value:"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879",id:"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879",level:3}],u={toc:s};function c(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"\u5347\u7ea7-k3s-\u96c6\u7fa4"},"\u5347\u7ea7 K3s \u96c6\u7fa4"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/manual"},"\u624b\u52a8\u5347\u7ea7"),"\u63cf\u8ff0\u4e86\u624b\u52a8\u5347\u7ea7\u96c6\u7fa4\u7684\u51e0\u79cd\u65b9\u6cd5\u3002\u5b83\u4e5f\u53ef\u4ee5\u4f5c\u4e3a\u901a\u8fc7\u7b2c\u4e09\u65b9\u57fa\u7840\u8bbe\u65bd\u5373\u4ee3\u7801\u5de5\u5177\uff08\u5982 ",(0,n.kt)("a",{parentName:"p",href:"https://www.terraform.io/"},"Terraform"),"\uff09\u8fdb\u884c\u5347\u7ea7\u7684\u57fa\u7840\u3002"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u63cf\u8ff0\u4e86\u5982\u4f55\u4f7f\u7528 Rancher \u7684 ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")," \u6267\u884c Kubernetes \u539f\u751f\u7684\u81ea\u52a8\u5347\u7ea7\u3002"),(0,n.kt)("h3",{id:"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879"},"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"Traefik"),"\uff1a\u5982\u679c\u6ca1\u6709\u7981\u7528 Traefik\uff0cK3s 1.20 \u53ca\u4ee5\u524d\u7684\u7248\u672c\u5c06\u5b89\u88c5 Traefik v1\uff0c\u800c K3s 1.21 \u53ca\u4ee5\u540e\u7684\u7248\u672c\u5c06\u5b89\u88c5 Traefik v2\u3002\u8981\u5c06\u65e7\u7248 Traefik v1 \u5347\u7ea7\u5230 Traefik v2\uff0c\u8bf7\u53c2\u9605 ",(0,n.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \u6587\u6863"),"\u5e76\u4f7f\u7528",(0,n.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\u8fc1\u79fb\u5de5\u5177"),"\u3002")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"K3s \u5f15\u5bfc\u6570\u636e"),"\uff1a\u5982\u679c\u4f60\u5728 HA \u914d\u7f6e\u4e2d\u4f7f\u7528 K3s \u548c\u5916\u90e8 SQL \u6570\u636e\u5b58\u50a8\uff0c\u5e76\u4e14\u4f60\u7684 Server\uff08control plane\uff09\u8282\u70b9\u6ca1\u6709\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," CLI \u6807\u5fd7\u542f\u52a8\uff0c\u4f60\u5c06\u4e0d\u518d\u80fd\u591f\u5728\u4e0d\u6307\u5b9a\u4ee4\u724c\u7684\u60c5\u51b5\u4e0b\u5c06\u5176\u4ed6 K3s Server \u6dfb\u52a0\u5230\u96c6\u7fa4\u4e2d\u3002\u8bf7\u4fdd\u7559\u6b64\u4ee4\u724c\u7684\u526f\u672c\uff0c\u56e0\u4e3a\u6062\u590d\u5907\u4efd\u65f6\u9700\u8981\u5b83\u3002\u4ee5\u524d\uff0cK3s \u5728\u4f7f\u7528\u5916\u90e8 SQL \u6570\u636e\u5b58\u50a8\u65f6\u4e0d\u5f3a\u5236\u4f7f\u7528 token\u3002"),(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\u53d7\u5f71\u54cd\u7684\u7248\u672c\u662f <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1\uff1b\u4fee\u8865\u540e\u7684\u7248\u672c\u4e3a v1.19.13+k3s1\u3001v1.20.9+k3s1\u3001v1.21.3+k3s1\u3002")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\u4f60\u53ef\u4ee5\u4ece\u5df2\u52a0\u5165\u96c6\u7fa4\u7684\u4efb\u4f55 server \u4e2d\u68c0\u7d22\u4ee4\u724c\u503c\uff0c\u5982\u4e0b\u6240\u793a\uff1a"))))),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"\u5b9e\u9a8c\u6027 Dqlite"),"\uff1a\u5b9e\u9a8c\u6027\u5d4c\u5165\u5f0f Dqlite \u6570\u636e\u5b58\u50a8\u5728 K3s v1.19.1 \u4e2d\u5df2\u88ab\u5f03\u7528\u3002\u8bf7\u6ce8\u610f\uff0c\u4e0d\u652f\u6301\u4ece\u5b9e\u9a8c\u6027 Dqlite \u5347\u7ea7\u5230\u5b9e\u9a8c\u6027\u5d4c\u5165\u5f0f etcd\u3002\u5982\u679c\u4f60\u5c1d\u8bd5\u5347\u7ea7\uff0c\u5347\u7ea7\u5c06\u4e0d\u4f1a\u6210\u529f\uff0c\u5e76\u4e14\u6570\u636e\u5c06\u4f1a\u4e22\u5931\u3002")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5251],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>d});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},o=Object.keys(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(a=0;a<o.length;a++)r=o[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var l=a.createContext({}),s=function(e){var t=a.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):p(p({},t),e)),r},u=function(e){var t=s(e.components);return a.createElement(l.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,o=e.originalType,l=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),m=s(r),d=n,f=m["".concat(l,".").concat(d)]||m[d]||c[d]||o;return r?a.createElement(f,p(p({ref:t},u),{},{components:r})):a.createElement(f,p({ref:t},u))}));function d(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var o=r.length,p=new Array(o);p[0]=m;var i={};for(var l in t)hasOwnProperty.call(t,l)&&(i[l]=t[l]);i.originalType=e,i.mdxType="string"==typeof e?e:n,p[1]=i;for(var s=2;s<o;s++)p[s]=r[s];return a.createElement.apply(null,p)}return a.createElement.apply(null,r)}m.displayName="MDXCreateElement"},9049:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>p,default:()=>c,frontMatter:()=>o,metadata:()=>i,toc:()=>s});var a=r(3117),n=(r(7294),r(3905));const o={title:"\u5347\u7ea7",weight:25},p=void 0,i={unversionedId:"upgrades/upgrades",id:"upgrades/upgrades",title:"\u5347\u7ea7",description:"\u5347\u7ea7 K3s \u96c6\u7fa4",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",sourceDirName:"upgrades",slug:"/upgrades/",permalink:"/zh/upgrades/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5347\u7ea7",weight:25},sidebar:"mySidebar",previous:{title:"\u96c6\u7fa4\u8bbf\u95ee",permalink:"/zh/cluster-access/"},next:{title:"\u505c\u6b62 K3s",permalink:"/zh/upgrades/killall"}},l={},s=[{value:"\u5347\u7ea7 K3s \u96c6\u7fa4",id:"\u5347\u7ea7-k3s-\u96c6\u7fa4",level:3},{value:"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879",id:"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879",level:3}],u={toc:s};function c(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h3",{id:"\u5347\u7ea7-k3s-\u96c6\u7fa4"},"\u5347\u7ea7 K3s \u96c6\u7fa4"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/manual"},"\u624b\u52a8\u5347\u7ea7"),"\u63cf\u8ff0\u4e86\u624b\u52a8\u5347\u7ea7\u96c6\u7fa4\u7684\u51e0\u79cd\u65b9\u6cd5\u3002\u5b83\u4e5f\u53ef\u4ee5\u4f5c\u4e3a\u901a\u8fc7\u7b2c\u4e09\u65b9\u57fa\u7840\u8bbe\u65bd\u5373\u4ee3\u7801\u5de5\u5177\uff08\u5982 ",(0,n.kt)("a",{parentName:"p",href:"https://www.terraform.io/"},"Terraform"),"\uff09\u8fdb\u884c\u5347\u7ea7\u7684\u57fa\u7840\u3002"),(0,n.kt)("p",null,(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u63cf\u8ff0\u4e86\u5982\u4f55\u4f7f\u7528 Rancher \u7684 ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")," \u6267\u884c Kubernetes \u539f\u751f\u7684\u81ea\u52a8\u5347\u7ea7\u3002"),(0,n.kt)("h3",{id:"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879"},"\u7279\u5b9a\u7248\u672c\u7684\u6ce8\u610f\u4e8b\u9879"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"Traefik"),"\uff1a\u5982\u679c\u6ca1\u6709\u7981\u7528 Traefik\uff0cK3s 1.20 \u53ca\u4ee5\u524d\u7684\u7248\u672c\u5c06\u5b89\u88c5 Traefik v1\uff0c\u800c K3s 1.21 \u53ca\u4ee5\u540e\u7684\u7248\u672c\u5c06\u5b89\u88c5 Traefik v2\u3002\u8981\u5c06\u65e7\u7248 Traefik v1 \u5347\u7ea7\u5230 Traefik v2\uff0c\u8bf7\u53c2\u9605 ",(0,n.kt)("a",{parentName:"p",href:"https://doc.traefik.io/traefik/migration/v1-to-v2/"},"Traefik \u6587\u6863"),"\u5e76\u4f7f\u7528",(0,n.kt)("a",{parentName:"p",href:"https://github.com/traefik/traefik-migration-tool"},"\u8fc1\u79fb\u5de5\u5177"),"\u3002")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},(0,n.kt)("strong",{parentName:"p"},"K3s \u5f15\u5bfc\u6570\u636e"),"\uff1a\u5982\u679c\u4f60\u5728 HA \u914d\u7f6e\u4e2d\u4f7f\u7528 K3s \u548c\u5916\u90e8 SQL \u6570\u636e\u5b58\u50a8\uff0c\u5e76\u4e14\u4f60\u7684 Server\uff08control plane\uff09\u8282\u70b9\u6ca1\u6709\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--token")," CLI \u6807\u5fd7\u542f\u52a8\uff0c\u4f60\u5c06\u4e0d\u518d\u80fd\u591f\u5728\u4e0d\u6307\u5b9a\u4ee4\u724c\u7684\u60c5\u51b5\u4e0b\u5c06\u5176\u4ed6 K3s Server \u6dfb\u52a0\u5230\u96c6\u7fa4\u4e2d\u3002\u8bf7\u4fdd\u7559\u6b64\u4ee4\u724c\u7684\u526f\u672c\uff0c\u56e0\u4e3a\u6062\u590d\u5907\u4efd\u65f6\u9700\u8981\u5b83\u3002\u4ee5\u524d\uff0cK3s \u5728\u4f7f\u7528\u5916\u90e8 SQL \u6570\u636e\u5b58\u50a8\u65f6\u4e0d\u5f3a\u5236\u4f7f\u7528 token\u3002"),(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\u53d7\u5f71\u54cd\u7684\u7248\u672c\u662f <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1\uff1b\u4fee\u8865\u540e\u7684\u7248\u672c\u4e3a v1.19.13+k3s1\u3001v1.20.9+k3s1\u3001v1.21.3+k3s1\u3002")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("p",{parentName:"li"},"\u4f60\u53ef\u4ee5\u4ece\u5df2\u52a0\u5165\u96c6\u7fa4\u7684\u4efb\u4f55 server \u4e2d\u68c0\u7d22\u4ee4\u724c\u503c\uff0c\u5982\u4e0b\u6240\u793a\uff1a"))))),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"\u5b9e\u9a8c\u6027 Dqlite"),"\uff1a\u5b9e\u9a8c\u6027\u5d4c\u5165\u5f0f Dqlite \u6570\u636e\u5b58\u50a8\u5728 K3s v1.19.1 \u4e2d\u5df2\u88ab\u5f03\u7528\u3002\u8bf7\u6ce8\u610f\uff0c\u4e0d\u652f\u6301\u4ece\u5b9e\u9a8c\u6027 Dqlite \u5347\u7ea7\u5230\u5b9e\u9a8c\u6027\u5d4c\u5165\u5f0f etcd\u3002\u5982\u679c\u4f60\u5c1d\u8bd5\u5347\u7ea7\uff0c\u5347\u7ea7\u5c06\u4e0d\u4f1a\u6210\u529f\uff0c\u5e76\u4e14\u6570\u636e\u5c06\u4f1a\u4e22\u5931\u3002")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/37dfe6f0.7d77db40.js b/zh/assets/js/37dfe6f0.07695ebc.js
similarity index 99%
rename from zh/assets/js/37dfe6f0.7d77db40.js
rename to zh/assets/js/37dfe6f0.07695ebc.js
index 6a86b6da5..700d17d48 100644
--- a/zh/assets/js/37dfe6f0.7d77db40.js
+++ b/zh/assets/js/37dfe6f0.07695ebc.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3412],{3905:(e,t,n)=>{n.d(t,{Zo:()=>o,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function p(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),d=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):p(p({},t),e)),n},o=function(e){var t=d(e.components);return a.createElement(i.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,o=s(e,["components","mdxType","originalType","parentName"]),c=d(n),m=r,u=c["".concat(i,".").concat(m)]||c[m]||k[m]||l;return n?a.createElement(u,p(p({ref:t},o),{},{components:n})):a.createElement(u,p({ref:t},o))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,p=new Array(l);p[0]=c;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,p[1]=s;for(var d=2;d<l;d++)p[d]=n[d];return a.createElement.apply(null,p)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},178:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>p,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"etcd-snapshot"},p="k3s etcd-snapshot",s={unversionedId:"cli/etcd-snapshot",id:"cli/etcd-snapshot",title:"etcd-snapshot",description:"\u4ece v1.19.1+k3s1 \u8d77\u53ef\u7528",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",sourceDirName:"cli",slug:"/cli/etcd-snapshot",permalink:"/zh/cli/etcd-snapshot",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"etcd-snapshot"},sidebar:"mySidebar",previous:{title:"certificate",permalink:"/zh/cli/certificate"},next:{title:"secrets-encrypt",permalink:"/zh/cli/secrets-encrypt"}},i={},d=[{value:"\u521b\u5efa\u5feb\u7167",id:"\u521b\u5efa\u5feb\u7167",level:4},{value:"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4",id:"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4",level:4},{value:"\u9009\u9879",id:"\u9009\u9879",level:4},{value:"S3 \u517c\u5bb9 API \u652f\u6301",id:"s3-\u517c\u5bb9-api-\u652f\u6301",level:4},{value:"Etcd \u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4",id:"etcd-\u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4",level:4}],o=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},k=o("Tabs"),c=o("TabItem"),m={toc:d};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-etcd-snapshot"},"k3s etcd-snapshot"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u521b\u5efa K3s \u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u7684\u5907\u4efd\uff0c\u4ee5\u53ca\u5982\u4f55\u4f7f\u7528\u5907\u4efd\u6062\u590d\u96c6\u7fa4\u3002"),(0,r.kt)("h4",{id:"\u521b\u5efa\u5feb\u7167"},"\u521b\u5efa\u5feb\u7167"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5feb\u7167\u5728\u7cfb\u7edf\u65f6\u95f4 00:00 \u548c 12:00 \u542f\u7528\uff0c\u4f1a\u4fdd\u7559 5 \u4e2a\u5feb\u7167\u3002\u8981\u914d\u7f6e\u5feb\u7167\u95f4\u9694\u6216\u4fdd\u7559\u5feb\u7167\u7684\u6570\u91cf\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"#%E9%80%89%E9%A1%B9"},"\u9009\u9879"),"\u3002"),(0,r.kt)("p",null,"\u5feb\u7167\u76ee\u5f55\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/snapshots"),"\u3002data-dir \u7684\u9ed8\u8ba4\u503c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s"),"\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," \u6807\u5fd7\u6765\u66f4\u6539\u5b83\u3002"),(0,r.kt)("h4",{id:"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4"},"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4"),(0,r.kt)("p",null,"\u4f7f\u7528\u5907\u4efd\u6062\u590d K3s \u65f6\uff0c\u65e7\u7684\u6570\u636e\u76ee\u5f55\u5c06\u88ab\u79fb\u52a8\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/etcd-old/"),"\u3002\u7136\u540e K3s \u5c06\u5c1d\u8bd5\u901a\u8fc7\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u6570\u636e\u76ee\u5f55\u6765\u6062\u590d\u5feb\u7167\uff0c\u7136\u540e\u4f7f\u7528\u5177\u6709\u4e00\u4e2a etcd \u6210\u5458\u7684\u65b0 K3s \u96c6\u7fa4\u542f\u52a8 etcd\u3002"),(0,r.kt)("p",null,"\u4f7f\u7528\u5907\u4efd\u6062\u590d\u96c6\u7fa4\uff1a"),(0,r.kt)(k,{mdxType:"Tabs"},(0,r.kt)(c,{value:"\u5355\u670d\u52a1\u5668",mdxType:"TabItem"},(0,r.kt)("p",null,"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," \u9009\u9879\u8fd0\u884c K3s\uff0c\u540c\u65f6\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path"),"\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"\u7ed3\u679c"),"\uff1a\u65e5\u5fd7\u4e2d\u7684\u4e00\u6761\u6d88\u606f\u8868\u793a K3s \u53ef\u4ee5\u5728\u6ca1\u6709\u6807\u5fd7\u7684\u60c5\u51b5\u4e0b\u91cd\u65b0\u542f\u52a8\u3002\u518d\u6b21\u542f\u52a8 K3s\uff0cK3s \u5e94\u8be5\u4f1a\u6210\u529f\u8fd0\u884c\u5e76\u901a\u8fc7\u6307\u5b9a\u7684\u5feb\u7167\u6062\u590d\u3002")),(0,r.kt)(c,{value:"\u9ad8\u53ef\u7528",mdxType:"TabItem"},(0,r.kt)("p",null,"\u5728\u6b64\u793a\u4f8b\u4e2d\u6709 3 \u4e2a Server\uff0c\u5206\u522b\u662f ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"S2"),"\u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"S3"),"\u3002\u5feb\u7167\u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"S1")," \u4e0a\u3002"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\uff0c\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," \u9009\u9879\u8fd0\u884c K3s\uff0c\u540c\u65f6\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path"),"\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\u7ed3\u679c"),"\uff1a\u65e5\u5fd7\u4e2d\u7684\u4e00\u6761\u6d88\u606f\u8868\u793a K3s \u53ef\u4ee5\u5728\u6ca1\u6709\u6807\u5fd7\u7684\u60c5\u51b5\u4e0b\u91cd\u65b0\u542f\u52a8\u3002")),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S2 \u548c S3 \u4e0a\uff0c\u505c\u6b62 K3s\u3002\u7136\u540e\u5220\u9664\u6570\u636e\u76ee\u5f55 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/db/"),"\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl stop k3s\nrm -rf /var/lib/rancher/k3s/server/db/\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\uff0c\u518d\u6b21\u542f\u52a8 K3s\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S2 \u548c S3 \u4e0a\uff0c\u518d\u6b21\u542f\u52a8 K3s \u4ee5\u52a0\u5165\u6062\u590d\u540e\u7684\u96c6\u7fa4\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n")))))),(0,r.kt)("h4",{id:"\u9009\u9879"},"\u9009\u9879"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u547d\u4ee4\u884c\u6216\u8005",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\uff08\u53ef\u80fd\u66f4\u5bb9\u6613\u4f7f\u7528\uff09\u4f20\u5165\u8fd9\u4e9b\u9009\u9879\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u9009\u9879"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u81ea\u52a8 etcd \u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"cron \u89c4\u8303\u4e2d\u7684\u5feb\u7167\u95f4\u9694\u65f6\u95f4\u3002eg. \u6bcf 5 \u5c0f\u65f6 ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */5 * * *"),"\uff08\u9ed8\u8ba4\u503c\uff1a",(0,r.kt)("inlineCode",{parentName:"td"},"0 */12 * * *"),"\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u4fdd\u7559\u7684\u5feb\u7167\u6570\u91cf\uff08\u9ed8\u8ba4\u503c\uff1a5\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u6570\u636e\u5e93\u5feb\u7167\u7684\u76ee\u5f55\u3002\uff08\u9ed8\u8ba4\u4f4d\u7f6e\uff1a",(0,r.kt)("inlineCode",{parentName:"td"},"${data-dir}/db/snapshots"),"\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5fd8\u8bb0\u6240\u6709\u5bf9\u7b49\u70b9\uff0c\u6210\u4e3a\u65b0\u96c6\u7fa4\u7684\u552f\u4e00\u6210\u5458\u3002\u4e5f\u53ef\u4ee5\u4f7f\u7528\u73af\u5883\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"td"},"[$K3S_CLUSTER_RESET]")," \u8fdb\u884c\u8bbe\u7f6e\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset-restore-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u6062\u590d\u7684\u5feb\u7167\u6587\u4ef6\u8def\u5f84")))),(0,r.kt)("h4",{id:"s3-\u517c\u5bb9-api-\u652f\u6301"},"S3 \u517c\u5bb9 API \u652f\u6301"),(0,r.kt)("p",null,"K3s \u652f\u6301\u5411\u5177\u6709 S3 \u517c\u5bb9 API \u7684\u7cfb\u7edf\u5199\u5165 etcd \u5feb\u7167\u548c\u4ece\u7cfb\u7edf\u4e2d\u6062\u590d etcd \u5feb\u7167\u3002S3 \u652f\u6301\u6309\u9700\u548c\u8ba1\u5212\u5feb\u7167\u3002"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u53c2\u6570\u5df2\u6dfb\u52a0\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," \u5b50\u547d\u4ee4\u4e2d\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"etcd-snapshot")," \u5b50\u547d\u4ee4\u4e5f\u5b58\u5728\u8fd9\u4e9b\u6807\u5fd7\uff0c\u4f46\u662f\u5220\u9664\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"--etcd-s3")," \u90e8\u5206\u4ee5\u907f\u514d\u5197\u4f59\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u9009\u9879"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"\u542f\u7528\u5907\u4efd\u5230 S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u7aef\u70b9\u7f51\u5740")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u7528\u4e8e\u8fde\u63a5\u5230 S3 \u7aef\u70b9")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 S3 SSL \u8bc1\u4e66\u9a8c\u8bc1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u5b58\u50a8\u6876\u540d\u79f0")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u533a\u57df/\u5b58\u50a8\u6876\u4f4d\u7f6e\uff08\u53ef\u9009\uff09\u3002\u9ed8\u8ba4\u4e3a us-east-1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u6587\u4ef6\u5939")))),(0,r.kt)("p",null,"\u6267\u884c\u6309\u9700\u7684 etcd \u5feb\u7167\u5e76\u5c06\u5176\u4fdd\u5b58\u5230 S3\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot \\\n  --s3 \\\n  --s3-bucket=<S3-BUCKET-NAME> \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("p",null,"\u8981\u4ece S3 \u4e2d\u6267\u884c\u6309\u9700\u7684 etcd \u5feb\u7167\u8fd8\u539f\uff0c\u9996\u5148\u786e\u4fdd K3s \u6ca1\u6709\u8fd0\u884c\u3002\u7136\u540e\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-init \\\n  --cluster-reset \\\n  --etcd-s3 \\\n  --cluster-reset-restore-path=<SNAPSHOT-NAME> \\\n  --etcd-s3-bucket=<S3-BUCKET-NAME> \\\n  --etcd-s3-access-key=<S3-ACCESS-KEY> \\\n  --etcd-s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("h4",{id:"etcd-\u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4"},"Etcd \u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4"),(0,r.kt)("p",null,"K3s \u652f\u6301\u7528\u4e8e\u5904\u7406 etcd \u5feb\u7167\u7684\u4e00\u7ec4\u5b50\u547d\u4ee4\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u5b50\u547d\u4ee4"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"delete"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5220\u9664\u7ed9\u5b9a\u7684\u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"ls, list, l"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5217\u51fa\u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"prune"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5220\u9664\u8d85\u8fc7\u914d\u7f6e\u7684\u4fdd\u7559\u6570\u91cf\u7684\u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"save"),(0,r.kt)("td",{parentName:"tr",align:null},"\u89e6\u53d1\u5373\u65f6 etcd \u5feb\u7167")))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"save")," \u5b50\u547d\u4ee4\u4e0e ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot")," \u76f8\u540c\u3002\u540e\u8005\u6700\u7ec8\u5c06\u88ab\u524d\u8005\u53d6\u4ee3\u3002")),(0,r.kt)("p",null,"\u65e0\u8bba etcd \u5feb\u7167\u662f\u5b58\u50a8\u5728\u672c\u5730\u8fd8\u662f\u5b58\u50a8\u5728 S3 \u517c\u5bb9\u7684\u5bf9\u8c61\u5b58\u50a8\u4e2d\uff0c\u8fd9\u4e9b\u547d\u4ee4\u90fd\u5c06\u6309\u9884\u671f\u6267\u884c\u3002"),(0,r.kt)("p",null,"\u6709\u5173 etcd \u5feb\u7167\u5b50\u547d\u4ee4\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),"\u3002"),(0,r.kt)("p",null,"\u4ece S3 \u4e2d\u5220\u9664\u5feb\u7167\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot delete          \\\n  --s3                            \\\n  --s3-bucket=<S3-BUCKET-NAME>    \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY> \\\n  <SNAPSHOT-NAME>\n")),(0,r.kt)("p",null,"\u4f7f\u7528\u9ed8\u8ba4\u4fdd\u7559\u7b56\u7565 (5) \u4fee\u526a\u672c\u5730\u5feb\u7167\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"prune")," \u5b50\u547d\u4ee4\u63a5\u53d7\u989d\u5916\u7684\u6807\u5fd7 ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshot-retention"),"\uff0c\u5141\u8bb8\u8986\u76d6\u9ed8\u8ba4\u4fdd\u7559\u7b56\u7565\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune --snapshot-retention 10\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3412],{3905:(e,t,n)=>{n.d(t,{Zo:()=>o,kt:()=>m});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function p(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),d=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):p(p({},t),e)),n},o=function(e){var t=d(e.components);return a.createElement(i.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,o=s(e,["components","mdxType","originalType","parentName"]),c=d(n),m=r,u=c["".concat(i,".").concat(m)]||c[m]||k[m]||l;return n?a.createElement(u,p(p({ref:t},o),{},{components:n})):a.createElement(u,p({ref:t},o))}));function m(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,p=new Array(l);p[0]=c;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:r,p[1]=s;for(var d=2;d<l;d++)p[d]=n[d];return a.createElement.apply(null,p)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},178:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>p,default:()=>u,frontMatter:()=>l,metadata:()=>s,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"etcd-snapshot"},p="k3s etcd-snapshot",s={unversionedId:"cli/etcd-snapshot",id:"cli/etcd-snapshot",title:"etcd-snapshot",description:"\u4ece v1.19.1+k3s1 \u8d77\u53ef\u7528",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",sourceDirName:"cli",slug:"/cli/etcd-snapshot",permalink:"/zh/cli/etcd-snapshot",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"etcd-snapshot"},sidebar:"mySidebar",previous:{title:"certificate",permalink:"/zh/cli/certificate"},next:{title:"secrets-encrypt",permalink:"/zh/cli/secrets-encrypt"}},i={},d=[{value:"\u521b\u5efa\u5feb\u7167",id:"\u521b\u5efa\u5feb\u7167",level:4},{value:"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4",id:"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4",level:4},{value:"\u9009\u9879",id:"\u9009\u9879",level:4},{value:"S3 \u517c\u5bb9 API \u652f\u6301",id:"s3-\u517c\u5bb9-api-\u652f\u6301",level:4},{value:"Etcd \u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4",id:"etcd-\u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4",level:4}],o=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},k=o("Tabs"),c=o("TabItem"),m={toc:d};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-etcd-snapshot"},"k3s etcd-snapshot"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u5728\u672c\u8282\u4e2d\uff0c\u4f60\u5c06\u5b66\u4e60\u5982\u4f55\u521b\u5efa K3s \u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u7684\u5907\u4efd\uff0c\u4ee5\u53ca\u5982\u4f55\u4f7f\u7528\u5907\u4efd\u6062\u590d\u96c6\u7fa4\u3002"),(0,r.kt)("h4",{id:"\u521b\u5efa\u5feb\u7167"},"\u521b\u5efa\u5feb\u7167"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5feb\u7167\u5728\u7cfb\u7edf\u65f6\u95f4 00:00 \u548c 12:00 \u542f\u7528\uff0c\u4f1a\u4fdd\u7559 5 \u4e2a\u5feb\u7167\u3002\u8981\u914d\u7f6e\u5feb\u7167\u95f4\u9694\u6216\u4fdd\u7559\u5feb\u7167\u7684\u6570\u91cf\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"#%E9%80%89%E9%A1%B9"},"\u9009\u9879"),"\u3002"),(0,r.kt)("p",null,"\u5feb\u7167\u76ee\u5f55\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/snapshots"),"\u3002data-dir \u7684\u9ed8\u8ba4\u503c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s"),"\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir")," \u6807\u5fd7\u6765\u66f4\u6539\u5b83\u3002"),(0,r.kt)("h4",{id:"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4"},"\u4f7f\u7528\u5feb\u7167\u6062\u590d\u96c6\u7fa4"),(0,r.kt)("p",null,"\u4f7f\u7528\u5907\u4efd\u6062\u590d K3s \u65f6\uff0c\u65e7\u7684\u6570\u636e\u76ee\u5f55\u5c06\u88ab\u79fb\u52a8\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"${data-dir}/server/db/etcd-old/"),"\u3002\u7136\u540e K3s \u5c06\u5c1d\u8bd5\u901a\u8fc7\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u6570\u636e\u76ee\u5f55\u6765\u6062\u590d\u5feb\u7167\uff0c\u7136\u540e\u4f7f\u7528\u5177\u6709\u4e00\u4e2a etcd \u6210\u5458\u7684\u65b0 K3s \u96c6\u7fa4\u542f\u52a8 etcd\u3002"),(0,r.kt)("p",null,"\u4f7f\u7528\u5907\u4efd\u6062\u590d\u96c6\u7fa4\uff1a"),(0,r.kt)(k,{mdxType:"Tabs"},(0,r.kt)(c,{value:"\u5355\u670d\u52a1\u5668",mdxType:"TabItem"},(0,r.kt)("p",null,"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," \u9009\u9879\u8fd0\u884c K3s\uff0c\u540c\u65f6\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path"),"\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"\u7ed3\u679c"),"\uff1a\u65e5\u5fd7\u4e2d\u7684\u4e00\u6761\u6d88\u606f\u8868\u793a K3s \u53ef\u4ee5\u5728\u6ca1\u6709\u6807\u5fd7\u7684\u60c5\u51b5\u4e0b\u91cd\u65b0\u542f\u52a8\u3002\u518d\u6b21\u542f\u52a8 K3s\uff0cK3s \u5e94\u8be5\u4f1a\u6210\u529f\u8fd0\u884c\u5e76\u901a\u8fc7\u6307\u5b9a\u7684\u5feb\u7167\u6062\u590d\u3002")),(0,r.kt)(c,{value:"\u9ad8\u53ef\u7528",mdxType:"TabItem"},(0,r.kt)("p",null,"\u5728\u6b64\u793a\u4f8b\u4e2d\u6709 3 \u4e2a Server\uff0c\u5206\u522b\u662f ",(0,r.kt)("inlineCode",{parentName:"p"},"S1"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"S2"),"\u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"S3"),"\u3002\u5feb\u7167\u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"S1")," \u4e0a\u3002"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\uff0c\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset")," \u9009\u9879\u8fd0\u884c K3s\uff0c\u540c\u65f6\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-reset-restore-path"),"\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-reset \\\n  --cluster-reset-restore-path=<PATH-TO-SNAPSHOT>\n")),(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\u7ed3\u679c"),"\uff1a\u65e5\u5fd7\u4e2d\u7684\u4e00\u6761\u6d88\u606f\u8868\u793a K3s \u53ef\u4ee5\u5728\u6ca1\u6709\u6807\u5fd7\u7684\u60c5\u51b5\u4e0b\u91cd\u65b0\u542f\u52a8\u3002")),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S2 \u548c S3 \u4e0a\uff0c\u505c\u6b62 K3s\u3002\u7136\u540e\u5220\u9664\u6570\u636e\u76ee\u5f55 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/db/"),"\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl stop k3s\nrm -rf /var/lib/rancher/k3s/server/db/\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\uff0c\u518d\u6b21\u542f\u52a8 K3s\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 S2 \u548c S3 \u4e0a\uff0c\u518d\u6b21\u542f\u52a8 K3s \u4ee5\u52a0\u5165\u6062\u590d\u540e\u7684\u96c6\u7fa4\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl start k3s\n")))))),(0,r.kt)("h4",{id:"\u9009\u9879"},"\u9009\u9879"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u547d\u4ee4\u884c\u6216\u8005",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\uff08\u53ef\u80fd\u66f4\u5bb9\u6613\u4f7f\u7528\uff09\u4f20\u5165\u8fd9\u4e9b\u9009\u9879\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u9009\u9879"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-disable-snapshots")),(0,r.kt)("td",{parentName:"tr",align:null},"\u7981\u7528\u81ea\u52a8 etcd \u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-schedule-cron")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"cron \u89c4\u8303\u4e2d\u7684\u5feb\u7167\u95f4\u9694\u65f6\u95f4\u3002eg. \u6bcf 5 \u5c0f\u65f6 ",(0,r.kt)("inlineCode",{parentName:"td"},"0 */5 * * *"),"\uff08\u9ed8\u8ba4\u503c\uff1a",(0,r.kt)("inlineCode",{parentName:"td"},"0 */12 * * *"),"\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-retention")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u4fdd\u7559\u7684\u5feb\u7167\u6570\u91cf\uff08\u9ed8\u8ba4\u503c\uff1a5\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-snapshot-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u6570\u636e\u5e93\u5feb\u7167\u7684\u76ee\u5f55\u3002\uff08\u9ed8\u8ba4\u4f4d\u7f6e\uff1a",(0,r.kt)("inlineCode",{parentName:"td"},"${data-dir}/db/snapshots"),"\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5fd8\u8bb0\u6240\u6709\u5bf9\u7b49\u70b9\uff0c\u6210\u4e3a\u65b0\u96c6\u7fa4\u7684\u552f\u4e00\u6210\u5458\u3002\u4e5f\u53ef\u4ee5\u4f7f\u7528\u73af\u5883\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"td"},"[$K3S_CLUSTER_RESET]")," \u8fdb\u884c\u8bbe\u7f6e\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--cluster-reset-restore-path")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u6062\u590d\u7684\u5feb\u7167\u6587\u4ef6\u8def\u5f84")))),(0,r.kt)("h4",{id:"s3-\u517c\u5bb9-api-\u652f\u6301"},"S3 \u517c\u5bb9 API \u652f\u6301"),(0,r.kt)("p",null,"K3s \u652f\u6301\u5411\u5177\u6709 S3 \u517c\u5bb9 API \u7684\u7cfb\u7edf\u5199\u5165 etcd \u5feb\u7167\u548c\u4ece\u7cfb\u7edf\u4e2d\u6062\u590d etcd \u5feb\u7167\u3002S3 \u652f\u6301\u6309\u9700\u548c\u8ba1\u5212\u5feb\u7167\u3002"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u53c2\u6570\u5df2\u6dfb\u52a0\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," \u5b50\u547d\u4ee4\u4e2d\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"etcd-snapshot")," \u5b50\u547d\u4ee4\u4e5f\u5b58\u5728\u8fd9\u4e9b\u6807\u5fd7\uff0c\u4f46\u662f\u5220\u9664\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"--etcd-s3")," \u90e8\u5206\u4ee5\u907f\u514d\u5197\u4f59\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u9009\u9879"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3")),(0,r.kt)("td",{parentName:"tr",align:null},"\u542f\u7528\u5907\u4efd\u5230 S3")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u7aef\u70b9\u7f51\u5740")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-endpoint-ca")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u7528\u4e8e\u8fde\u63a5\u5230 S3 \u7aef\u70b9")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-skip-ssl-verify")),(0,r.kt)("td",{parentName:"tr",align:null},"\u7981\u7528 S3 SSL \u8bc1\u4e66\u9a8c\u8bc1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-access-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 access key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-secret-key")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 secret key")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-bucket")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u5b58\u50a8\u6876\u540d\u79f0")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-region")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u533a\u57df/\u5b58\u50a8\u6876\u4f4d\u7f6e\uff08\u53ef\u9009\uff09\u3002\u9ed8\u8ba4\u4e3a us-east-1")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--etcd-s3-folder")),(0,r.kt)("td",{parentName:"tr",align:null},"S3 \u6587\u4ef6\u5939")))),(0,r.kt)("p",null,"\u6267\u884c\u6309\u9700\u7684 etcd \u5feb\u7167\u5e76\u5c06\u5176\u4fdd\u5b58\u5230 S3\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot \\\n  --s3 \\\n  --s3-bucket=<S3-BUCKET-NAME> \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("p",null,"\u8981\u4ece S3 \u4e2d\u6267\u884c\u6309\u9700\u7684 etcd \u5feb\u7167\u8fd8\u539f\uff0c\u9996\u5148\u786e\u4fdd K3s \u6ca1\u6709\u8fd0\u884c\u3002\u7136\u540e\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server \\\n  --cluster-init \\\n  --cluster-reset \\\n  --etcd-s3 \\\n  --cluster-reset-restore-path=<SNAPSHOT-NAME> \\\n  --etcd-s3-bucket=<S3-BUCKET-NAME> \\\n  --etcd-s3-access-key=<S3-ACCESS-KEY> \\\n  --etcd-s3-secret-key=<S3-SECRET-KEY>\n")),(0,r.kt)("h4",{id:"etcd-\u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4"},"Etcd \u5feb\u7167\u548c\u6062\u590d\u5b50\u547d\u4ee4"),(0,r.kt)("p",null,"K3s \u652f\u6301\u7528\u4e8e\u5904\u7406 etcd \u5feb\u7167\u7684\u4e00\u7ec4\u5b50\u547d\u4ee4\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u5b50\u547d\u4ee4"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"delete"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5220\u9664\u7ed9\u5b9a\u7684\u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"ls, list, l"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5217\u51fa\u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"prune"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5220\u9664\u8d85\u8fc7\u914d\u7f6e\u7684\u4fdd\u7559\u6570\u91cf\u7684\u5feb\u7167")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"save"),(0,r.kt)("td",{parentName:"tr",align:null},"\u89e6\u53d1\u5373\u65f6 etcd \u5feb\u7167")))),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"save")," \u5b50\u547d\u4ee4\u4e0e ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot")," \u76f8\u540c\u3002\u540e\u8005\u6700\u7ec8\u5c06\u88ab\u524d\u8005\u53d6\u4ee3\u3002")),(0,r.kt)("p",null,"\u65e0\u8bba etcd \u5feb\u7167\u662f\u5b58\u50a8\u5728\u672c\u5730\u8fd8\u662f\u5b58\u50a8\u5728 S3 \u517c\u5bb9\u7684\u5bf9\u8c61\u5b58\u50a8\u4e2d\uff0c\u8fd9\u4e9b\u547d\u4ee4\u90fd\u5c06\u6309\u9884\u671f\u6267\u884c\u3002"),(0,r.kt)("p",null,"\u6709\u5173 etcd \u5feb\u7167\u5b50\u547d\u4ee4\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s etcd-snapshot"),"\u3002"),(0,r.kt)("p",null,"\u4ece S3 \u4e2d\u5220\u9664\u5feb\u7167\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot delete          \\\n  --s3                            \\\n  --s3-bucket=<S3-BUCKET-NAME>    \\\n  --s3-access-key=<S3-ACCESS-KEY> \\\n  --s3-secret-key=<S3-SECRET-KEY> \\\n  <SNAPSHOT-NAME>\n")),(0,r.kt)("p",null,"\u4f7f\u7528\u9ed8\u8ba4\u4fdd\u7559\u7b56\u7565 (5) \u4fee\u526a\u672c\u5730\u5feb\u7167\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"prune")," \u5b50\u547d\u4ee4\u63a5\u53d7\u989d\u5916\u7684\u6807\u5fd7 ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshot-retention"),"\uff0c\u5141\u8bb8\u8986\u76d6\u9ed8\u8ba4\u4fdd\u7559\u7b56\u7565\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s etcd-snapshot prune --snapshot-retention 10\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/4129286c.c7656db7.js b/zh/assets/js/4129286c.c7656db7.js
new file mode 100644
index 000000000..2a9750376
--- /dev/null
+++ b/zh/assets/js/4129286c.c7656db7.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5156],{2776:s=>{s.exports=JSON.parse('{"name":"@easyops-cn/docusaurus-search-local","id":"default"}')}}]);
\ No newline at end of file
diff --git a/zh/assets/js/46fd080e.3f897055.js b/zh/assets/js/46fd080e.5d4341a8.js
similarity index 99%
rename from zh/assets/js/46fd080e.3f897055.js
rename to zh/assets/js/46fd080e.5d4341a8.js
index 90ae7d08d..378227c33 100644
--- a/zh/assets/js/46fd080e.3f897055.js
+++ b/zh/assets/js/46fd080e.5d4341a8.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8885],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),i=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},c=function(e){var t=i(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=p(e,["components","mdxType","originalType","parentName"]),m=i(n),d=a,k=m["".concat(s,".").concat(d)]||m[d]||u[d]||o;return n?r.createElement(k,l(l({ref:t},c),{},{components:n})):r.createElement(k,l({ref:t},c))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,l=new Array(o);l[0]=m;var p={};for(var s in t)hasOwnProperty.call(t,s)&&(p[s]=t[s]);p.originalType=e,p.mdxType="string"==typeof e?e:a,l[1]=p;for(var i=2;i<o;i++)l[i]=n[i];return r.createElement.apply(null,l)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2478:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>u,frontMatter:()=>o,metadata:()=>p,toc:()=>i});var r=n(3117),a=(n(7294),n(3905));const o={title:"\u81ea\u52a8\u5347\u7ea7",weight:20},l=void 0,p={unversionedId:"upgrades/automated",id:"upgrades/automated",title:"\u81ea\u52a8\u5347\u7ea7",description:"Overview",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/automated.md",sourceDirName:"upgrades",slug:"/upgrades/automated",permalink:"/zh/upgrades/automated",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u81ea\u52a8\u5347\u7ea7",weight:20},sidebar:"mySidebar",previous:{title:"\u624b\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/manual"},next:{title:"\u5377\u548c\u5b58\u50a8",permalink:"/zh/storage/"}},s={},i=[{value:"Overview",id:"overview",level:3},{value:"\u5b89\u88c5 system-upgrade-controller",id:"\u5b89\u88c5-system-upgrade-controller",level:3},{value:"\u914d\u7f6e\u8ba1\u5212",id:"\u914d\u7f6e\u8ba1\u5212",level:3}],c={toc:i};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h3",{id:"overview"},"Overview"),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 Rancher \u7684 system-upgrade-controller \u7ba1\u7406 K3s \u96c6\u7fa4\u5347\u7ea7\u3002\u8fd9\u662f\u4e00\u79cd Kubernetes \u539f\u751f\u7684\u96c6\u7fa4\u5347\u7ea7\u65b9\u6cd5\u3002\u5b83\u4f7f\u7528\u4e86",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources"},"\u81ea\u5b9a\u4e49\u8d44\u6e90\u5b9a\u4e49 (CRD)"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"\u8ba1\u5212"),"\u548c",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/architecture/controller/"},"\u63a7\u5236\u5668"),"\u3002"),(0,a.kt)("p",null,"\u8ba1\u5212\u5b9a\u4e49\u4e86\u5347\u7ea7\u7684\u7b56\u7565\u548c\u8981\u6c42\u3002\u5b83\u8fd8\u901a\u8fc7",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/"},"\u6807\u7b7e\u9009\u62e9\u5668"),"\u6765\u5b9a\u4e49\u5e94\u8be5\u5347\u7ea7\u7684\u8282\u70b9\u3002\u8bf7\u53c2\u9605\u4e0b\u6587\uff0c\u4e86\u89e3\u9002\u7528\u4e8e\u5347\u7ea7 K3s \u96c6\u7fa4\u7684\u9ed8\u8ba4\u8ba1\u5212\u3002\u6709\u5173\u66f4\u9ad8\u7ea7\u7684\u8ba1\u5212\u914d\u7f6e\u9009\u9879\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go"},"CRD"),"\u3002"),(0,a.kt)("p",null,"\u63a7\u5236\u5668\u901a\u8fc7\u76d1\u63a7\u8ba1\u5212\u548c\u9009\u62e9\u8981\u8fd0\u884c\u5347\u7ea7 ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/"},"job")," \u7684\u8282\u70b9\u6765\u5b89\u6392\u5347\u7ea7\u3002job \u6210\u529f\u8fd0\u884c\u5b8c\u6210\u65f6\uff0c\u63a7\u5236\u5668\u5c06\u76f8\u5e94\u5730\u6807\u8bb0\u5b83\u8fd0\u884c\u7684\u8282\u70b9\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u542f\u52a8\u7684\u5347\u7ea7 job \u5fc5\u987b\u5177\u6709\u9ad8\u6743\u9650\u3002\u5b83\u914d\u7f6e\u4e86\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"\u4e3b\u673a ",(0,a.kt)("inlineCode",{parentName:"li"},"IPC"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"NET")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"PID")," \u547d\u540d\u7a7a\u95f4"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"CAP_SYS_BOOT")," \u80fd\u529b"),(0,a.kt)("li",{parentName:"ul"},"\u6302\u8f7d\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/host")," \u7684\u4e3b\u673a\u6839\u76ee\u5f55\uff0c\u5177\u6709\u8bfb\u5199\u6743\u9650"))),(0,a.kt)("p",null,"\u8981\u4ee5\u8fd9\u79cd\u65b9\u5f0f\u81ea\u52a8\u5347\u7ea7\uff0c\u4f60\u5fc5\u987b\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"\u5c06 system-upgrade-controller \u5b89\u88c5\u5230\u96c6\u7fa4\u4e2d"),(0,a.kt)("li",{parentName:"ol"},"\u914d\u7f6e\u8ba1\u5212")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c K3s \u96c6\u7fa4\u7531 Rancher \u7ba1\u7406\uff0c\u4f60\u9700\u8981\u4f7f\u7528 Rancher UI \u6765\u7ba1\u7406\u5347\u7ea7\u3002"),(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"\u5982\u679c K3s \u96c6\u7fa4\u662f\u5bfc\u5165\u5230 Rancher \u7684\uff0cRancher \u5c06\u7ba1\u7406 system-upgrade-controller \u90e8\u7f72\u548c\u8ba1\u5212\u3002\u4e0d\u8981\u6309\u7167\u6b64\u9875\u9762\u4e0a\u7684\u6b65\u9aa4\u64cd\u4f5c\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u5982\u679c K3s \u96c6\u7fa4\u662f\u7531 Rancher \u9884\u914d\u7684\uff0cRancher \u5c06\u4f7f\u7528\u7cfb\u7edf Agent \u6765\u7ba1\u7406\u7248\u672c\u5347\u7ea7\u3002\u4e0d\u8981\u6309\u7167\u6b64\u9875\u9762\u4e0a\u7684\u6b65\u9aa4\u64cd\u4f5c\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u5982\u679c K3s \u96c6\u7fa4",(0,a.kt)("em",{parentName:"li"},"\u4e0d\u662f"),"\u7531 Rancher \u7ba1\u7406\u7684\uff0c\u4f60\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\u3002"))),(0,a.kt)("p",null,"\u6709\u5173 system-upgrade-controller \u7684\u8bbe\u8ba1\u548c\u67b6\u6784\uff0c\u4ee5\u53ca\u5b83\u4e0e K3s \u96c6\u6210\u7684\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b Git \u4ed3\u5e93\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s-upgrade"},"k3s-upgrade"))),(0,a.kt)("admonition",{type:"tip"},(0,a.kt)("p",{parentName:"admonition"},"\u5c1d\u8bd5\u5347\u7ea7\u5230 K3s \u65b0\u7248\u672c\u65f6\uff0c",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes \u7248\u672c\u503e\u659c\u7b56\u7565"),"\u9002\u7528\u3002\u786e\u4fdd\u4f60\u7684\u8ba1\u5212\u5728\u5347\u7ea7\u65f6\u4e0d\u4f1a\u8df3\u8fc7\u4e2d\u95f4\u6b21\u8981\u7248\u672c\u3002system-upgrade-controller \u672c\u8eab\u4e0d\u4f1a\u9632\u6b62\u66f4\u6539\u5230\u4e0d\u652f\u6301\u7684 Kubernetes \u7248\u672c\u3002")),(0,a.kt)("h3",{id:"\u5b89\u88c5-system-upgrade-controller"},"\u5b89\u88c5 system-upgrade-controller"),(0,a.kt)("p",null,"system-upgrade-controller \u53ef\u4ee5\u4f5c\u4e3a Deployment \u5b89\u88c5\u5230\u4f60\u7684\u96c6\u7fa4\u4e2d\u3002Deployment \u9700\u8981 ServiceAccount\u3001clusterRoleBinding \u548c configmap\u3002\u8981\u5b89\u88c5\u8fd9\u4e9b\u7ec4\u4ef6\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml\n")),(0,a.kt)("p",null,"\u63a7\u5236\u5668\u53ef\u4ee5\u901a\u8fc7\u524d\u9762\u63d0\u5230\u7684 configmap \u8fdb\u884c\u914d\u7f6e\u548c\u81ea\u5b9a\u4e49\uff0c\u4f46\u63a7\u5236\u5668\u5fc5\u987b\u91cd\u65b0\u90e8\u7f72\u624d\u80fd\u5e94\u7528\u66f4\u6539\u3002"),(0,a.kt)("h3",{id:"\u914d\u7f6e\u8ba1\u5212"},"\u914d\u7f6e\u8ba1\u5212"),(0,a.kt)("p",null,"\u5efa\u8bae\u4f60\u81f3\u5c11\u521b\u5efa\u4e24\u4e2a\u8ba1\u5212\uff1a\u5347\u7ea7 server\uff08control-plane\uff09\u8282\u70b9\u7684\u8ba1\u5212\u548c\u5347\u7ea7 agent \u8282\u70b9\u7684\u8ba1\u5212\u3002\u4f60\u53ef\u4ee5\u6839\u636e\u9700\u8981\u521b\u5efa\u5176\u4ed6\u8ba1\u5212\u6765\u63a7\u5236\u8de8\u8282\u70b9\u7684\u5347\u7ea7\u3002\u521b\u5efa\u8ba1\u5212\u540e\uff0c\u63a7\u5236\u5668\u5c06\u9009\u62e9\u5b83\u4eec\u5e76\u5f00\u59cb\u5347\u7ea7\u4f60\u7684\u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u4ee5\u4e0b\u4e24\u4e2a\u793a\u4f8b\u8ba1\u5212\u4f1a\u5c06\u4f60\u7684\u96c6\u7fa4\u5347\u7ea7\u5230 K3s v1.24.6+k3s1\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'# Server plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: server-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: In\n      values:\n      - "true"\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n---\n# Agent plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: agent-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: DoesNotExist\n  prepare:\n    args:\n    - prepare\n    - server-plan\n    image: rancher/k3s-upgrade\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n')),(0,a.kt)("p",null,"\u5173\u4e8e\u8fd9\u4e9b\u8ba1\u5212\uff0c\u6709\u51e0\u4e2a\u91cd\u8981\u7684\u4e8b\u60c5\u9700\u8981\u6ce8\u610f\uff1a"),(0,a.kt)("p",null,"1) \u8ba1\u5212\u5fc5\u987b\u5728\u90e8\u7f72\u63a7\u5236\u5668\u7684\u540c\u4e00\u547d\u540d\u7a7a\u95f4\u4e2d\u521b\u5efa\u3002"),(0,a.kt)("p",null,"2) ",(0,a.kt)("inlineCode",{parentName:"p"},"concurrency")," \u5b57\u6bb5\u8868\u793a\u53ef\u4ee5\u540c\u65f6\u5347\u7ea7\u591a\u5c11\u4e2a\u8282\u70b9\u3002"),(0,a.kt)("p",null,"3) ",(0,a.kt)("inlineCode",{parentName:"p"},"server-plan")," \u901a\u8fc7\u6307\u5b9a\u4e00\u4e2a\u6807\u7b7e\u9009\u62e9\u5668\u6765\u9009\u62e9\u5e26\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"node-role.kubernetes.io/control-plane")," \u6807\u7b7e\u7684\u8282\u70b9\uff0c\u4ece\u800c\u9501\u5b9a server \u8282\u70b9\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"agent-plan")," \u901a\u8fc7\u6307\u5b9a\u4e00\u4e2a\u6807\u7b7e\u9009\u62e9\u5668\u6765\u9009\u62e9\u6ca1\u6709\u8be5\u6807\u7b7e\u7684\u8282\u70b9\uff0c\u4ece\u800c\u9501\u5b9a agent \u8282\u70b9\u3002"),(0,a.kt)("p",null,"4) ",(0,a.kt)("inlineCode",{parentName:"p"},"agent-plan")," \u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"prepare")," \u6b65\u9aa4\u4f1a\u4f7f\u8be5\u8ba1\u5212\u7b49\u5f85 ",(0,a.kt)("inlineCode",{parentName:"p"},"server-plan")," \u5b8c\u6210\u540e\u518d\u6267\u884c\u5347\u7ea7 job\u3002"),(0,a.kt)("p",null,"5) \u4e24\u4e2a\u8ba1\u5212\u90fd\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"version")," \u5b57\u6bb5\u8bbe\u7f6e\u4e3a v1.24.6+k3s1\u3002\u6216\u8005\uff0c\u4f60\u53ef\u4ee5\u7701\u7565 ",(0,a.kt)("inlineCode",{parentName:"p"},"version")," \u5b57\u6bb5\u5e76\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"channel")," \u5b57\u6bb5\u8bbe\u7f6e\u4e3a\u89e3\u6790\u5230 K3s \u7248\u672c\u7684 URL\u3002\u8fd9\u5c06\u5bfc\u81f4\u63a7\u5236\u5668\u76d1\u63a7\u8be5 URL\uff0c\u5e76\u5728\u5b83\u89e3\u6790\u5230\u65b0\u7248\u672c\u65f6\u968f\u65f6\u5347\u7ea7\u96c6\u7fa4\u3002\u8fd9\u9002\u7528\u4e8e",(0,a.kt)("a",{parentName:"p",href:"/zh/upgrades/manual#%E7%89%88%E6%9C%AC-channels"},"\u7248\u672c channels"),"\u3002\u56e0\u6b64\uff0c\u4f60\u53ef\u4ee5\u7528\u4e0b\u9762\u7684 channel \u914d\u7f6e\u8ba1\u5212\uff0c\u4ece\u800c\u786e\u4fdd\u4f60\u7684\u96c6\u7fa4\u603b\u662f\u81ea\u52a8\u5347\u7ea7\u5230 K3s \u7684\u6700\u65b0\u7a33\u5b9a\u7248\u672c\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: upgrade.cattle.io/v1\nkind: Plan\n...\nspec:\n  ...\n  channel: https://update.k3s.io/v1-release/channels/stable\n\n")),(0,a.kt)("p",null,"\u5982\u524d\u6240\u8ff0\uff0c\u4e00\u65e6\u63a7\u5236\u5668\u68c0\u6d4b\u5230\u5df2\u521b\u5efa\u8ba1\u5212\uff0c\u5347\u7ea7\u5c31\u4f1a\u7acb\u5373\u5f00\u59cb\u3002\u66f4\u65b0\u8ba1\u5212\u5c06\u5bfc\u81f4\u63a7\u5236\u5668\u91cd\u65b0\u8bc4\u4f30\u8ba1\u5212\u5e76\u786e\u5b9a\u662f\u5426\u9700\u8981\u518d\u6b21\u5347\u7ea7\u3002"),(0,a.kt)("p",null,"\u8981\u76d1\u63a7\u5347\u7ea7\u8fdb\u5ea6\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 kubectl \u6765\u67e5\u770b plan \u548c job\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl -n system-upgrade get plans -o yaml\nkubectl -n system-upgrade get jobs -o yaml\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8885],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),i=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},c=function(e){var t=i(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},m=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=p(e,["components","mdxType","originalType","parentName"]),m=i(n),d=a,k=m["".concat(s,".").concat(d)]||m[d]||u[d]||o;return n?r.createElement(k,l(l({ref:t},c),{},{components:n})):r.createElement(k,l({ref:t},c))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,l=new Array(o);l[0]=m;var p={};for(var s in t)hasOwnProperty.call(t,s)&&(p[s]=t[s]);p.originalType=e,p.mdxType="string"==typeof e?e:a,l[1]=p;for(var i=2;i<o;i++)l[i]=n[i];return r.createElement.apply(null,l)}return r.createElement.apply(null,n)}m.displayName="MDXCreateElement"},2478:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>l,default:()=>u,frontMatter:()=>o,metadata:()=>p,toc:()=>i});var r=n(3117),a=(n(7294),n(3905));const o={title:"\u81ea\u52a8\u5347\u7ea7",weight:20},l=void 0,p={unversionedId:"upgrades/automated",id:"upgrades/automated",title:"\u81ea\u52a8\u5347\u7ea7",description:"Overview",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/automated.md",sourceDirName:"upgrades",slug:"/upgrades/automated",permalink:"/zh/upgrades/automated",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u81ea\u52a8\u5347\u7ea7",weight:20},sidebar:"mySidebar",previous:{title:"\u624b\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/manual"},next:{title:"\u5377\u548c\u5b58\u50a8",permalink:"/zh/storage/"}},s={},i=[{value:"Overview",id:"overview",level:3},{value:"\u5b89\u88c5 system-upgrade-controller",id:"\u5b89\u88c5-system-upgrade-controller",level:3},{value:"\u914d\u7f6e\u8ba1\u5212",id:"\u914d\u7f6e\u8ba1\u5212",level:3}],c={toc:i};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h3",{id:"overview"},"Overview"),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 Rancher \u7684 system-upgrade-controller \u7ba1\u7406 K3s \u96c6\u7fa4\u5347\u7ea7\u3002\u8fd9\u662f\u4e00\u79cd Kubernetes \u539f\u751f\u7684\u96c6\u7fa4\u5347\u7ea7\u65b9\u6cd5\u3002\u5b83\u4f7f\u7528\u4e86",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources"},"\u81ea\u5b9a\u4e49\u8d44\u6e90\u5b9a\u4e49 (CRD)"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"\u8ba1\u5212"),"\u548c",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/architecture/controller/"},"\u63a7\u5236\u5668"),"\u3002"),(0,a.kt)("p",null,"\u8ba1\u5212\u5b9a\u4e49\u4e86\u5347\u7ea7\u7684\u7b56\u7565\u548c\u8981\u6c42\u3002\u5b83\u8fd8\u901a\u8fc7",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/"},"\u6807\u7b7e\u9009\u62e9\u5668"),"\u6765\u5b9a\u4e49\u5e94\u8be5\u5347\u7ea7\u7684\u8282\u70b9\u3002\u8bf7\u53c2\u9605\u4e0b\u6587\uff0c\u4e86\u89e3\u9002\u7528\u4e8e\u5347\u7ea7 K3s \u96c6\u7fa4\u7684\u9ed8\u8ba4\u8ba1\u5212\u3002\u6709\u5173\u66f4\u9ad8\u7ea7\u7684\u8ba1\u5212\u914d\u7f6e\u9009\u9879\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go"},"CRD"),"\u3002"),(0,a.kt)("p",null,"\u63a7\u5236\u5668\u901a\u8fc7\u76d1\u63a7\u8ba1\u5212\u548c\u9009\u62e9\u8981\u8fd0\u884c\u5347\u7ea7 ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/"},"job")," \u7684\u8282\u70b9\u6765\u5b89\u6392\u5347\u7ea7\u3002job \u6210\u529f\u8fd0\u884c\u5b8c\u6210\u65f6\uff0c\u63a7\u5236\u5668\u5c06\u76f8\u5e94\u5730\u6807\u8bb0\u5b83\u8fd0\u884c\u7684\u8282\u70b9\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u542f\u52a8\u7684\u5347\u7ea7 job \u5fc5\u987b\u5177\u6709\u9ad8\u6743\u9650\u3002\u5b83\u914d\u7f6e\u4e86\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"\u4e3b\u673a ",(0,a.kt)("inlineCode",{parentName:"li"},"IPC"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"NET")," \u548c ",(0,a.kt)("inlineCode",{parentName:"li"},"PID")," \u547d\u540d\u7a7a\u95f4"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"CAP_SYS_BOOT")," \u80fd\u529b"),(0,a.kt)("li",{parentName:"ul"},"\u6302\u8f7d\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/host")," \u7684\u4e3b\u673a\u6839\u76ee\u5f55\uff0c\u5177\u6709\u8bfb\u5199\u6743\u9650"))),(0,a.kt)("p",null,"\u8981\u4ee5\u8fd9\u79cd\u65b9\u5f0f\u81ea\u52a8\u5347\u7ea7\uff0c\u4f60\u5fc5\u987b\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,a.kt)("ol",null,(0,a.kt)("li",{parentName:"ol"},"\u5c06 system-upgrade-controller \u5b89\u88c5\u5230\u96c6\u7fa4\u4e2d"),(0,a.kt)("li",{parentName:"ol"},"\u914d\u7f6e\u8ba1\u5212")),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c K3s \u96c6\u7fa4\u7531 Rancher \u7ba1\u7406\uff0c\u4f60\u9700\u8981\u4f7f\u7528 Rancher UI \u6765\u7ba1\u7406\u5347\u7ea7\u3002"),(0,a.kt)("ul",{parentName:"admonition"},(0,a.kt)("li",{parentName:"ul"},"\u5982\u679c K3s \u96c6\u7fa4\u662f\u5bfc\u5165\u5230 Rancher \u7684\uff0cRancher \u5c06\u7ba1\u7406 system-upgrade-controller \u90e8\u7f72\u548c\u8ba1\u5212\u3002\u4e0d\u8981\u6309\u7167\u6b64\u9875\u9762\u4e0a\u7684\u6b65\u9aa4\u64cd\u4f5c\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u5982\u679c K3s \u96c6\u7fa4\u662f\u7531 Rancher \u9884\u914d\u7684\uff0cRancher \u5c06\u4f7f\u7528\u7cfb\u7edf Agent \u6765\u7ba1\u7406\u7248\u672c\u5347\u7ea7\u3002\u4e0d\u8981\u6309\u7167\u6b64\u9875\u9762\u4e0a\u7684\u6b65\u9aa4\u64cd\u4f5c\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u5982\u679c K3s \u96c6\u7fa4",(0,a.kt)("em",{parentName:"li"},"\u4e0d\u662f"),"\u7531 Rancher \u7ba1\u7406\u7684\uff0c\u4f60\u53ef\u4ee5\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u64cd\u4f5c\u3002"))),(0,a.kt)("p",null,"\u6709\u5173 system-upgrade-controller \u7684\u8bbe\u8ba1\u548c\u67b6\u6784\uff0c\u4ee5\u53ca\u5b83\u4e0e K3s \u96c6\u6210\u7684\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u4ee5\u4e0b Git \u4ed3\u5e93\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://github.com/rancher/system-upgrade-controller"},"system-upgrade-controller")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s-upgrade"},"k3s-upgrade"))),(0,a.kt)("admonition",{type:"tip"},(0,a.kt)("p",{parentName:"admonition"},"\u5c1d\u8bd5\u5347\u7ea7\u5230 K3s \u65b0\u7248\u672c\u65f6\uff0c",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes \u7248\u672c\u503e\u659c\u7b56\u7565"),"\u9002\u7528\u3002\u786e\u4fdd\u4f60\u7684\u8ba1\u5212\u5728\u5347\u7ea7\u65f6\u4e0d\u4f1a\u8df3\u8fc7\u4e2d\u95f4\u6b21\u8981\u7248\u672c\u3002system-upgrade-controller \u672c\u8eab\u4e0d\u4f1a\u9632\u6b62\u66f4\u6539\u5230\u4e0d\u652f\u6301\u7684 Kubernetes \u7248\u672c\u3002")),(0,a.kt)("h3",{id:"\u5b89\u88c5-system-upgrade-controller"},"\u5b89\u88c5 system-upgrade-controller"),(0,a.kt)("p",null,"system-upgrade-controller \u53ef\u4ee5\u4f5c\u4e3a Deployment \u5b89\u88c5\u5230\u4f60\u7684\u96c6\u7fa4\u4e2d\u3002Deployment \u9700\u8981 ServiceAccount\u3001clusterRoleBinding \u548c configmap\u3002\u8981\u5b89\u88c5\u8fd9\u4e9b\u7ec4\u4ef6\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml\n")),(0,a.kt)("p",null,"\u63a7\u5236\u5668\u53ef\u4ee5\u901a\u8fc7\u524d\u9762\u63d0\u5230\u7684 configmap \u8fdb\u884c\u914d\u7f6e\u548c\u81ea\u5b9a\u4e49\uff0c\u4f46\u63a7\u5236\u5668\u5fc5\u987b\u91cd\u65b0\u90e8\u7f72\u624d\u80fd\u5e94\u7528\u66f4\u6539\u3002"),(0,a.kt)("h3",{id:"\u914d\u7f6e\u8ba1\u5212"},"\u914d\u7f6e\u8ba1\u5212"),(0,a.kt)("p",null,"\u5efa\u8bae\u4f60\u81f3\u5c11\u521b\u5efa\u4e24\u4e2a\u8ba1\u5212\uff1a\u5347\u7ea7 server\uff08control-plane\uff09\u8282\u70b9\u7684\u8ba1\u5212\u548c\u5347\u7ea7 agent \u8282\u70b9\u7684\u8ba1\u5212\u3002\u4f60\u53ef\u4ee5\u6839\u636e\u9700\u8981\u521b\u5efa\u5176\u4ed6\u8ba1\u5212\u6765\u63a7\u5236\u8de8\u8282\u70b9\u7684\u5347\u7ea7\u3002\u521b\u5efa\u8ba1\u5212\u540e\uff0c\u63a7\u5236\u5668\u5c06\u9009\u62e9\u5b83\u4eec\u5e76\u5f00\u59cb\u5347\u7ea7\u4f60\u7684\u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u4ee5\u4e0b\u4e24\u4e2a\u793a\u4f8b\u8ba1\u5212\u4f1a\u5c06\u4f60\u7684\u96c6\u7fa4\u5347\u7ea7\u5230 K3s v1.24.6+k3s1\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},'# Server plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: server-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: In\n      values:\n      - "true"\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n---\n# Agent plan\napiVersion: upgrade.cattle.io/v1\nkind: Plan\nmetadata:\n  name: agent-plan\n  namespace: system-upgrade\nspec:\n  concurrency: 1\n  cordon: true\n  nodeSelector:\n    matchExpressions:\n    - key: node-role.kubernetes.io/control-plane\n      operator: DoesNotExist\n  prepare:\n    args:\n    - prepare\n    - server-plan\n    image: rancher/k3s-upgrade\n  serviceAccountName: system-upgrade\n  upgrade:\n    image: rancher/k3s-upgrade\n  version: v1.24.6+k3s1\n')),(0,a.kt)("p",null,"\u5173\u4e8e\u8fd9\u4e9b\u8ba1\u5212\uff0c\u6709\u51e0\u4e2a\u91cd\u8981\u7684\u4e8b\u60c5\u9700\u8981\u6ce8\u610f\uff1a"),(0,a.kt)("p",null,"1) \u8ba1\u5212\u5fc5\u987b\u5728\u90e8\u7f72\u63a7\u5236\u5668\u7684\u540c\u4e00\u547d\u540d\u7a7a\u95f4\u4e2d\u521b\u5efa\u3002"),(0,a.kt)("p",null,"2) ",(0,a.kt)("inlineCode",{parentName:"p"},"concurrency")," \u5b57\u6bb5\u8868\u793a\u53ef\u4ee5\u540c\u65f6\u5347\u7ea7\u591a\u5c11\u4e2a\u8282\u70b9\u3002"),(0,a.kt)("p",null,"3) ",(0,a.kt)("inlineCode",{parentName:"p"},"server-plan")," \u901a\u8fc7\u6307\u5b9a\u4e00\u4e2a\u6807\u7b7e\u9009\u62e9\u5668\u6765\u9009\u62e9\u5e26\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"node-role.kubernetes.io/control-plane")," \u6807\u7b7e\u7684\u8282\u70b9\uff0c\u4ece\u800c\u9501\u5b9a server \u8282\u70b9\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"agent-plan")," \u901a\u8fc7\u6307\u5b9a\u4e00\u4e2a\u6807\u7b7e\u9009\u62e9\u5668\u6765\u9009\u62e9\u6ca1\u6709\u8be5\u6807\u7b7e\u7684\u8282\u70b9\uff0c\u4ece\u800c\u9501\u5b9a agent \u8282\u70b9\u3002"),(0,a.kt)("p",null,"4) ",(0,a.kt)("inlineCode",{parentName:"p"},"agent-plan")," \u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"prepare")," \u6b65\u9aa4\u4f1a\u4f7f\u8be5\u8ba1\u5212\u7b49\u5f85 ",(0,a.kt)("inlineCode",{parentName:"p"},"server-plan")," \u5b8c\u6210\u540e\u518d\u6267\u884c\u5347\u7ea7 job\u3002"),(0,a.kt)("p",null,"5) \u4e24\u4e2a\u8ba1\u5212\u90fd\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"version")," \u5b57\u6bb5\u8bbe\u7f6e\u4e3a v1.24.6+k3s1\u3002\u6216\u8005\uff0c\u4f60\u53ef\u4ee5\u7701\u7565 ",(0,a.kt)("inlineCode",{parentName:"p"},"version")," \u5b57\u6bb5\u5e76\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"channel")," \u5b57\u6bb5\u8bbe\u7f6e\u4e3a\u89e3\u6790\u5230 K3s \u7248\u672c\u7684 URL\u3002\u8fd9\u5c06\u5bfc\u81f4\u63a7\u5236\u5668\u76d1\u63a7\u8be5 URL\uff0c\u5e76\u5728\u5b83\u89e3\u6790\u5230\u65b0\u7248\u672c\u65f6\u968f\u65f6\u5347\u7ea7\u96c6\u7fa4\u3002\u8fd9\u9002\u7528\u4e8e",(0,a.kt)("a",{parentName:"p",href:"/zh/upgrades/manual#%E7%89%88%E6%9C%AC-channels"},"\u7248\u672c channels"),"\u3002\u56e0\u6b64\uff0c\u4f60\u53ef\u4ee5\u7528\u4e0b\u9762\u7684 channel \u914d\u7f6e\u8ba1\u5212\uff0c\u4ece\u800c\u786e\u4fdd\u4f60\u7684\u96c6\u7fa4\u603b\u662f\u81ea\u52a8\u5347\u7ea7\u5230 K3s \u7684\u6700\u65b0\u7a33\u5b9a\u7248\u672c\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: upgrade.cattle.io/v1\nkind: Plan\n...\nspec:\n  ...\n  channel: https://update.k3s.io/v1-release/channels/stable\n\n")),(0,a.kt)("p",null,"\u5982\u524d\u6240\u8ff0\uff0c\u4e00\u65e6\u63a7\u5236\u5668\u68c0\u6d4b\u5230\u5df2\u521b\u5efa\u8ba1\u5212\uff0c\u5347\u7ea7\u5c31\u4f1a\u7acb\u5373\u5f00\u59cb\u3002\u66f4\u65b0\u8ba1\u5212\u5c06\u5bfc\u81f4\u63a7\u5236\u5668\u91cd\u65b0\u8bc4\u4f30\u8ba1\u5212\u5e76\u786e\u5b9a\u662f\u5426\u9700\u8981\u518d\u6b21\u5347\u7ea7\u3002"),(0,a.kt)("p",null,"\u8981\u76d1\u63a7\u5347\u7ea7\u8fdb\u5ea6\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 kubectl \u6765\u67e5\u770b plan \u548c job\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"kubectl -n system-upgrade get plans -o yaml\nkubectl -n system-upgrade get jobs -o yaml\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/4835.071674c5.js b/zh/assets/js/4835.071674c5.js
new file mode 100644
index 000000000..4157a52ea
--- /dev/null
+++ b/zh/assets/js/4835.071674c5.js
@@ -0,0 +1,2 @@
+/*! For license information please see 4835.071674c5.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4835],{7967:(t,e)=>{"use strict";e.N=void 0;var n=/^([^\w]*)(javascript|data|vbscript)/im,r=/&#(\w+)(^\w|;)?/g,i=/&(newline|tab);/gi,a=/[\u0000-\u001F\u007F-\u009F\u2000-\u200D\uFEFF]/gim,s=/^.+(:|&colon;)/gim,o=[".","/"];e.N=function(t){var e,c=(e=t||"",e.replace(r,(function(t,e){return String.fromCharCode(e)}))).replace(i,"").replace(a,"").trim();if(!c)return"about:blank";if(function(t){return o.indexOf(t[0])>-1}(c))return c;var l=c.match(s);if(!l)return c;var h=l[0];return n.test(h)?"about:blank":c}},3905:(t,e,n)=>{"use strict";n.d(e,{Zo:()=>h,kt:()=>p});var r=n(7294);function i(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function a(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function s(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?a(Object(n),!0).forEach((function(e){i(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,e){if(null==t)return{};var n,r,i=function(t,e){if(null==t)return{};var n,r,i={},a=Object.keys(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||(i[n]=t[n]);return i}(t,e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(i[n]=t[n])}return i}var c=r.createContext({}),l=function(t){var e=r.useContext(c),n=e;return t&&(n="function"==typeof t?t(e):s(s({},e),t)),n},h=function(t){var e=l(t.components);return r.createElement(c.Provider,{value:e},t.children)},u={inlineCode:"code",wrapper:function(t){var e=t.children;return r.createElement(r.Fragment,{},e)}},d=r.forwardRef((function(t,e){var n=t.components,i=t.mdxType,a=t.originalType,c=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),d=l(n),p=i,f=d["".concat(c,".").concat(p)]||d[p]||u[p]||a;return n?r.createElement(f,s(s({ref:e},h),{},{components:n})):r.createElement(f,s({ref:e},h))}));function p(t,e){var n=arguments,i=e&&e.mdxType;if("string"==typeof t||i){var a=n.length,s=new Array(a);s[0]=d;var o={};for(var c in e)hasOwnProperty.call(e,c)&&(o[c]=e[c]);o.originalType=t,o.mdxType="string"==typeof t?t:i,s[1]=o;for(var l=2;l<a;l++)s[l]=n[l];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},2839:(t,e,n)=>{"use strict";n.r(e),n.d(e,{default:()=>Ot});var r=n(7294),i=n(1944),a=n(902);const s=r.createContext(null);function o(t){let{children:e,content:n}=t;const i=function(t){return(0,r.useMemo)((()=>({metadata:t.metadata,frontMatter:t.frontMatter,assets:t.assets,contentTitle:t.contentTitle,toc:t.toc})),[t])}(n);return r.createElement(s.Provider,{value:i},e)}function c(){const t=(0,r.useContext)(s);if(null===t)throw new a.i6("DocProvider");return t}function l(){const{metadata:t,frontMatter:e,assets:n}=c();return r.createElement(i.d,{title:t.title,description:t.description,keywords:e.keywords,image:n.image??e.image})}var h=n(6010),u=n(7524),d=n(3117),p=n(5999),f=n(9960);function g(t){const{permalink:e,title:n,subLabel:i,isNext:a}=t;return r.createElement(f.Z,{className:(0,h.Z)("pagination-nav__link",a?"pagination-nav__link--next":"pagination-nav__link--prev"),to:e},i&&r.createElement("div",{className:"pagination-nav__sublabel"},i),r.createElement("div",{className:"pagination-nav__label"},n))}function y(t){const{previous:e,next:n}=t;return r.createElement("nav",{className:"pagination-nav docusaurus-mt-lg","aria-label":(0,p.I)({id:"theme.docs.paginator.navAriaLabel",message:"Docs pages",description:"The ARIA label for the docs pagination"})},e&&r.createElement(g,(0,d.Z)({},e,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.previous",description:"The label used to navigate to the previous doc"},"Previous")})),n&&r.createElement(g,(0,d.Z)({},n,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.next",description:"The label used to navigate to the next doc"},"Next"),isNext:!0})))}function m(){const{metadata:t}=c();return r.createElement(y,{previous:t.previous,next:t.next})}var b=n(2263),_=n(143),x=n(5281),v=n(373),k=n(4477);const w={unreleased:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unreleasedVersionLabel",description:"The label used to tell the user that he's browsing an unreleased doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is unreleased documentation for {siteTitle} {versionLabel} version.")},unmaintained:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unmaintainedVersionLabel",description:"The label used to tell the user that he's browsing an unmaintained doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is documentation for {siteTitle} {versionLabel}, which is no longer actively maintained.")}};function E(t){const e=w[t.versionMetadata.banner];return r.createElement(e,t)}function C(t){let{versionLabel:e,to:n,onClick:i}=t;return r.createElement(p.Z,{id:"theme.docs.versions.latestVersionSuggestionLabel",description:"The label used to tell the user to check the latest version",values:{versionLabel:e,latestVersionLink:r.createElement("b",null,r.createElement(f.Z,{to:n,onClick:i},r.createElement(p.Z,{id:"theme.docs.versions.latestVersionLinkLabel",description:"The label used for the latest version suggestion link label"},"latest version")))}},"For up-to-date documentation, see the {latestVersionLink} ({versionLabel}).")}function T(t){let{className:e,versionMetadata:n}=t;const{siteConfig:{title:i}}=(0,b.Z)(),{pluginId:a}=(0,_.gA)({failfast:!0}),{savePreferredVersionName:s}=(0,v.J)(a),{latestDocSuggestion:o,latestVersionSuggestion:c}=(0,_.Jo)(a),l=o??(u=c).docs.find((t=>t.id===u.mainDocId));var u;return r.createElement("div",{className:(0,h.Z)(e,x.k.docs.docVersionBanner,"alert alert--warning margin-bottom--md"),role:"alert"},r.createElement("div",null,r.createElement(E,{siteTitle:i,versionMetadata:n})),r.createElement("div",{className:"margin-top--md"},r.createElement(C,{versionLabel:c.label,to:l.path,onClick:()=>s(c.name)})))}function S(t){let{className:e}=t;const n=(0,k.E)();return n.banner?r.createElement(T,{className:e,versionMetadata:n}):null}function A(t){let{className:e}=t;const n=(0,k.E)();return n.badge?r.createElement("span",{className:(0,h.Z)(e,x.k.docs.docVersionBadge,"badge badge--secondary")},r.createElement(p.Z,{id:"theme.docs.versionBadge.label",values:{versionLabel:n.label}},"Version: {versionLabel}")):null}function L(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.atDate",description:"The words used to describe on which date a page has been last updated",values:{date:r.createElement("b",null,r.createElement("time",{dateTime:new Date(1e3*e).toISOString()},n))}}," on {date}")}function B(t){let{lastUpdatedBy:e}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.byUser",description:"The words used to describe by who the page has been last updated",values:{user:r.createElement("b",null,e)}}," by {user}")}function N(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n,lastUpdatedBy:i}=t;return r.createElement("span",{className:x.k.common.lastUpdated},r.createElement(p.Z,{id:"theme.lastUpdated.lastUpdatedAtBy",description:"The sentence used to display when a page has been last updated, and by who",values:{atDate:e&&n?r.createElement(L,{lastUpdatedAt:e,formattedLastUpdatedAt:n}):"",byUser:i?r.createElement(B,{lastUpdatedBy:i}):""}},"Last updated{atDate}{byUser}"),!1)}const D="iconEdit_Z9Sw";function O(t){let{className:e,...n}=t;return r.createElement("svg",(0,d.Z)({fill:"currentColor",height:"20",width:"20",viewBox:"0 0 40 40",className:(0,h.Z)(D,e),"aria-hidden":"true"},n),r.createElement("g",null,r.createElement("path",{d:"m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"})))}function M(t){let{editUrl:e}=t;return r.createElement("a",{href:e,target:"_blank",rel:"noreferrer noopener",className:x.k.common.editThisPage},r.createElement(O,null),r.createElement(p.Z,{id:"theme.common.editThisPage",description:"The link label to edit the current page"},"Edit this page"))}const I="tag_zVej",F="tagRegular_sFm0",$="tagWithCount_h2kH";function R(t){let{permalink:e,label:n,count:i}=t;return r.createElement(f.Z,{href:e,className:(0,h.Z)(I,i?$:F)},n,i&&r.createElement("span",null,i))}const Z="tags_jXut",P="tag_QGVx";function j(t){let{tags:e}=t;return r.createElement(r.Fragment,null,r.createElement("b",null,r.createElement(p.Z,{id:"theme.tags.tagsListLabel",description:"The label alongside a tag list"},"Tags:")),r.createElement("ul",{className:(0,h.Z)(Z,"padding--none","margin-left--sm")},e.map((t=>{let{label:e,permalink:n}=t;return r.createElement("li",{key:n,className:P},r.createElement(R,{label:e,permalink:n}))}))))}const Y="lastUpdated_vwxv";function z(t){return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterTagsRow,"row margin-bottom--sm")},r.createElement("div",{className:"col"},r.createElement(j,t)))}function U(t){let{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:i,formattedLastUpdatedAt:a}=t;return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterEditMetaRow,"row")},r.createElement("div",{className:"col"},e&&r.createElement(M,{editUrl:e})),r.createElement("div",{className:(0,h.Z)("col",Y)},(n||i)&&r.createElement(N,{lastUpdatedAt:n,formattedLastUpdatedAt:a,lastUpdatedBy:i})))}function W(){const{metadata:t}=c(),{editUrl:e,lastUpdatedAt:n,formattedLastUpdatedAt:i,lastUpdatedBy:a,tags:s}=t,o=s.length>0,l=!!(e||n||a);return o||l?r.createElement("footer",{className:(0,h.Z)(x.k.docs.docFooter,"docusaurus-mt-lg")},o&&r.createElement(z,{tags:s}),l&&r.createElement(U,{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:a,formattedLastUpdatedAt:i})):null}var q=n(6043),H=n(6668);function V(t){const e=t.map((t=>({...t,parentIndex:-1,children:[]}))),n=Array(7).fill(-1);e.forEach(((t,e)=>{const r=n.slice(2,t.level);t.parentIndex=Math.max(...r),n[t.level]=e}));const r=[];return e.forEach((t=>{const{parentIndex:n,...i}=t;n>=0?e[n].children.push(i):r.push(i)})),r}function G(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:r}=t;return e.flatMap((t=>{const e=G({toc:t.children,minHeadingLevel:n,maxHeadingLevel:r});return function(t){return t.level>=n&&t.level<=r}(t)?[{...t,children:e}]:e}))}function X(t){const e=t.getBoundingClientRect();return e.top===e.bottom?X(t.parentNode):e}function K(t,e){let{anchorTopOffset:n}=e;const r=t.find((t=>X(t).top>=n));if(r){return function(t){return t.top>0&&t.bottom<window.innerHeight/2}(X(r))?r:t[t.indexOf(r)-1]??null}return t[t.length-1]??null}function Q(){const t=(0,r.useRef)(0),{navbar:{hideOnScroll:e}}=(0,H.L)();return(0,r.useEffect)((()=>{t.current=e?0:document.querySelector(".navbar").clientHeight}),[e]),t}function J(t){const e=(0,r.useRef)(void 0),n=Q();(0,r.useEffect)((()=>{if(!t)return()=>{};const{linkClassName:r,linkActiveClassName:i,minHeadingLevel:a,maxHeadingLevel:s}=t;function o(){const t=function(t){return Array.from(document.getElementsByClassName(t))}(r),o=function(t){let{minHeadingLevel:e,maxHeadingLevel:n}=t;const r=[];for(let i=e;i<=n;i+=1)r.push(`h${i}.anchor`);return Array.from(document.querySelectorAll(r.join()))}({minHeadingLevel:a,maxHeadingLevel:s}),c=K(o,{anchorTopOffset:n.current}),l=t.find((t=>c&&c.id===function(t){return decodeURIComponent(t.href.substring(t.href.indexOf("#")+1))}(t)));t.forEach((t=>{!function(t,n){n?(e.current&&e.current!==t&&e.current.classList.remove(i),t.classList.add(i),e.current=t):t.classList.remove(i)}(t,t===l)}))}return document.addEventListener("scroll",o),document.addEventListener("resize",o),o(),()=>{document.removeEventListener("scroll",o),document.removeEventListener("resize",o)}}),[t,n])}function tt(t){let{toc:e,className:n,linkClassName:i,isChild:a}=t;return e.length?r.createElement("ul",{className:a?void 0:n},e.map((t=>r.createElement("li",{key:t.id},r.createElement("a",{href:`#${t.id}`,className:i??void 0,dangerouslySetInnerHTML:{__html:t.value}}),r.createElement(tt,{isChild:!0,toc:t.children,className:n,linkClassName:i}))))):null}const et=r.memo(tt);function nt(t){let{toc:e,className:n="table-of-contents table-of-contents__left-border",linkClassName:i="table-of-contents__link",linkActiveClassName:a,minHeadingLevel:s,maxHeadingLevel:o,...c}=t;const l=(0,H.L)(),h=s??l.tableOfContents.minHeadingLevel,u=o??l.tableOfContents.maxHeadingLevel,p=function(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:i}=t;return(0,r.useMemo)((()=>G({toc:V(e),minHeadingLevel:n,maxHeadingLevel:i})),[e,n,i])}({toc:e,minHeadingLevel:h,maxHeadingLevel:u});return J((0,r.useMemo)((()=>{if(i&&a)return{linkClassName:i,linkActiveClassName:a,minHeadingLevel:h,maxHeadingLevel:u}}),[i,a,h,u])),r.createElement(et,(0,d.Z)({toc:p,className:n,linkClassName:i},c))}const rt="tocCollapsibleButton_TO0P",it="tocCollapsibleButtonExpanded_MG3E";function at(t){let{collapsed:e,...n}=t;return r.createElement("button",(0,d.Z)({type:"button"},n,{className:(0,h.Z)("clean-btn",rt,!e&&it,n.className)}),r.createElement(p.Z,{id:"theme.TOCCollapsible.toggleButtonLabel",description:"The label used by the button on the collapsible TOC component"},"On this page"))}const st="tocCollapsible_ETCw",ot="tocCollapsibleContent_vkbj",ct="tocCollapsibleExpanded_sAul";function lt(t){let{toc:e,className:n,minHeadingLevel:i,maxHeadingLevel:a}=t;const{collapsed:s,toggleCollapsed:o}=(0,q.u)({initialState:!0});return r.createElement("div",{className:(0,h.Z)(st,!s&&ct,n)},r.createElement(at,{collapsed:s,onClick:o}),r.createElement(q.z,{lazy:!0,className:ot,collapsed:s},r.createElement(nt,{toc:e,minHeadingLevel:i,maxHeadingLevel:a})))}const ht="tocMobile_ITEo";function ut(){const{toc:t,frontMatter:e}=c();return r.createElement(lt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:(0,h.Z)(x.k.docs.docTocMobile,ht)})}const dt="tableOfContents_bqdL";function pt(t){let{className:e,...n}=t;return r.createElement("div",{className:(0,h.Z)(dt,"thin-scrollbar",e)},r.createElement(nt,(0,d.Z)({},n,{linkClassName:"table-of-contents__link toc-highlight",linkActiveClassName:"table-of-contents__link--active"})))}function ft(){const{toc:t,frontMatter:e}=c();return r.createElement(pt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:x.k.docs.docTocDesktop})}var gt=n(2503),yt=n(3905),mt=n(1769);function bt(t){let{children:e}=t;return r.createElement(yt.Zo,{components:mt.Z},e)}function _t(t){let{children:e}=t;const n=function(){const{metadata:t,frontMatter:e,contentTitle:n}=c();return e.hide_title||void 0!==n?null:t.title}();return r.createElement("div",{className:(0,h.Z)(x.k.docs.docMarkdown,"markdown")},n&&r.createElement("header",null,r.createElement(gt.Z,{as:"h1"},n)),r.createElement(bt,null,e))}var xt=n(3438),vt=n(8596),kt=n(4996);function wt(t){return r.createElement("svg",(0,d.Z)({viewBox:"0 0 24 24"},t),r.createElement("path",{d:"M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z",fill:"currentColor"}))}const Et="breadcrumbHomeIcon_YNFT";function Ct(){const t=(0,kt.Z)("/");return r.createElement("li",{className:"breadcrumbs__item"},r.createElement(f.Z,{"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.home",message:"Home page",description:"The ARIA label for the home page in the breadcrumbs"}),className:"breadcrumbs__link",href:t},r.createElement(wt,{className:Et})))}const Tt="breadcrumbsContainer_Z_bl";function St(t){let{children:e,href:n,isLast:i}=t;const a="breadcrumbs__link";return i?r.createElement("span",{className:a,itemProp:"name"},e):n?r.createElement(f.Z,{className:a,href:n,itemProp:"item"},r.createElement("span",{itemProp:"name"},e)):r.createElement("span",{className:a},e)}function At(t){let{children:e,active:n,index:i,addMicrodata:a}=t;return r.createElement("li",(0,d.Z)({},a&&{itemScope:!0,itemProp:"itemListElement",itemType:"https://schema.org/ListItem"},{className:(0,h.Z)("breadcrumbs__item",{"breadcrumbs__item--active":n})}),e,r.createElement("meta",{itemProp:"position",content:String(i+1)}))}function Lt(){const t=(0,xt.s1)(),e=(0,vt.Ns)();return t?r.createElement("nav",{className:(0,h.Z)(x.k.docs.docBreadcrumbs,Tt),"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.navAriaLabel",message:"Breadcrumbs",description:"The ARIA label for the breadcrumbs"})},r.createElement("ul",{className:"breadcrumbs",itemScope:!0,itemType:"https://schema.org/BreadcrumbList"},e&&r.createElement(Ct,null),t.map(((e,n)=>{const i=n===t.length-1;return r.createElement(At,{key:n,active:i,index:n,addMicrodata:!!e.href},r.createElement(St,{href:e.href,isLast:i},e.label))})))):null}const Bt="docItemContainer_Djhp",Nt="docItemCol_VOVn";function Dt(t){let{children:e}=t;const n=function(){const{frontMatter:t,toc:e}=c(),n=(0,u.i)(),i=t.hide_table_of_contents,a=!i&&e.length>0;return{hidden:i,mobile:a?r.createElement(ut,null):void 0,desktop:!a||"desktop"!==n&&"ssr"!==n?void 0:r.createElement(ft,null)}}();return r.createElement("div",{className:"row"},r.createElement("div",{className:(0,h.Z)("col",!n.hidden&&Nt)},r.createElement(S,null),r.createElement("div",{className:Bt},r.createElement("article",null,r.createElement(Lt,null),r.createElement(A,null),n.mobile,r.createElement(_t,null,e),r.createElement(W,null)),r.createElement(m,null))),n.desktop&&r.createElement("div",{className:"col col--3"},n.desktop))}function Ot(t){const e=`docs-doc-id-${t.content.metadata.unversionedId}`,n=t.content;return r.createElement(o,{content:t.content},r.createElement(i.FG,{className:e},r.createElement(l,null),r.createElement(Dt,null,r.createElement(n,null))))}},2503:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3117),i=n(7294),a=n(6010),s=n(5999),o=n(6668),c=n(9960);const l="anchorWithStickyNavbar_LWe7",h="anchorWithHideOnScrollNavbar_WYt5";function u(t){let{as:e,id:n,...u}=t;const{navbar:{hideOnScroll:d}}=(0,o.L)();if("h1"===e||!n)return i.createElement(e,(0,r.Z)({},u,{id:void 0}));const p=(0,s.I)({id:"theme.common.headingLinkTitle",message:"Direct link to {heading}",description:"Title for link to heading"},{heading:"string"==typeof u.children?u.children:n});return i.createElement(e,(0,r.Z)({},u,{className:(0,a.Z)("anchor",d?h:l,u.className),id:n}),u.children,i.createElement(c.Z,{className:"hash-link",to:`#${n}`,"aria-label":p,title:p},"\u200b"))}},6566:(t,e,n)=>{"use strict";n.d(e,{Z:()=>wt});var r=n(3117),i=n(7294),a=n(5742);var s=n(2389),o=n(6010),c=n(2949),l=n(6668);function h(){const{prism:t}=(0,l.L)(),{colorMode:e}=(0,c.I)(),n=t.theme,r=t.darkTheme||n;return"dark"===e?r:n}var u=n(5281),d=n(7594),p=n.n(d);const f=/title=(?<quote>["'])(?<title>.*?)\1/,g=/\{(?<range>[\d,-]+)\}/,y={js:{start:"\\/\\/",end:""},jsBlock:{start:"\\/\\*",end:"\\*\\/"},jsx:{start:"\\{\\s*\\/\\*",end:"\\*\\/\\s*\\}"},bash:{start:"#",end:""},html:{start:"\x3c!--",end:"--\x3e"}};function m(t,e){const n=t.map((t=>{const{start:n,end:r}=y[t];return`(?:${n}\\s*(${e.flatMap((t=>[t.line,t.block?.start,t.block?.end].filter(Boolean))).join("|")})\\s*${r})`})).join("|");return new RegExp(`^\\s*(?:${n})\\s*$`)}function b(t,e){let n=t.replace(/\n$/,"");const{language:r,magicComments:i,metastring:a}=e;if(a&&g.test(a)){const t=a.match(g).groups.range;if(0===i.length)throw new Error(`A highlight range has been given in code block's metastring (\`\`\` ${a}), but no magic comment config is available. Docusaurus applies the first magic comment entry's className for metastring ranges.`);const e=i[0].className,r=p()(t).filter((t=>t>0)).map((t=>[t-1,[e]]));return{lineClassNames:Object.fromEntries(r),code:n}}if(void 0===r)return{lineClassNames:{},code:n};const s=function(t,e){switch(t){case"js":case"javascript":case"ts":case"typescript":return m(["js","jsBlock"],e);case"jsx":case"tsx":return m(["js","jsBlock","jsx"],e);case"html":return m(["js","jsBlock","html"],e);case"python":case"py":case"bash":return m(["bash"],e);case"markdown":case"md":return m(["html","jsx","bash"],e);default:return m(Object.keys(y),e)}}(r,i),o=n.split("\n"),c=Object.fromEntries(i.map((t=>[t.className,{start:0,range:""}]))),l=Object.fromEntries(i.filter((t=>t.line)).map((t=>{let{className:e,line:n}=t;return[n,e]}))),h=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.start,e]}))),u=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.end,e]})));for(let p=0;p<o.length;){const t=o[p].match(s);if(!t){p+=1;continue}const e=t.slice(1).find((t=>void 0!==t));l[e]?c[l[e]].range+=`${p},`:h[e]?c[h[e]].start=p:u[e]&&(c[u[e]].range+=`${c[u[e]].start}-${p-1},`),o.splice(p,1)}n=o.join("\n");const d={};return Object.entries(c).forEach((t=>{let[e,{range:n}]=t;p()(n).forEach((t=>{d[t]??=[],d[t].push(e)}))})),{lineClassNames:d,code:n}}const _="codeBlockContainer_Ckt0";function x(t){let{as:e,...n}=t;const a=function(t){const e={color:"--prism-color",backgroundColor:"--prism-background-color"},n={};return Object.entries(t.plain).forEach((t=>{let[r,i]=t;const a=e[r];a&&"string"==typeof i&&(n[a]=i)})),n}(h());return i.createElement(e,(0,r.Z)({},n,{style:a,className:(0,o.Z)(n.className,_,u.k.common.codeBlock)}))}const v={codeBlockContent:"codeBlockContent_biex",codeBlockTitle:"codeBlockTitle_Ktv7",codeBlock:"codeBlock_bY9V",codeBlockStandalone:"codeBlockStandalone_MEMb",codeBlockLines:"codeBlockLines_e6Vv",codeBlockLinesWithNumbering:"codeBlockLinesWithNumbering_o6Pm",buttonGroup:"buttonGroup__atx"};function k(t){let{children:e,className:n}=t;return i.createElement(x,{as:"pre",tabIndex:0,className:(0,o.Z)(v.codeBlockStandalone,"thin-scrollbar",n)},i.createElement("code",{className:v.codeBlockLines},e))}var w=n(902);const E={attributes:!0,characterData:!0,childList:!0,subtree:!0};function C(t,e){const[n,r]=(0,i.useState)(),a=(0,i.useCallback)((()=>{r(t.current?.closest("[role=tabpanel][hidden]"))}),[t,r]);(0,i.useEffect)((()=>{a()}),[a]),function(t,e,n){void 0===n&&(n=E);const r=(0,w.zX)(e),a=(0,w.Ql)(n);(0,i.useEffect)((()=>{const e=new MutationObserver(r);return t&&e.observe(t,a),()=>e.disconnect()}),[t,r,a])}(n,(t=>{t.forEach((t=>{"attributes"===t.type&&"hidden"===t.attributeName&&(e(),a())}))}),{attributes:!0,characterData:!1,childList:!1,subtree:!1})}const T={plain:{backgroundColor:"#2a2734",color:"#9a86fd"},styles:[{types:["comment","prolog","doctype","cdata","punctuation"],style:{color:"#6c6783"}},{types:["namespace"],style:{opacity:.7}},{types:["tag","operator","number"],style:{color:"#e09142"}},{types:["property","function"],style:{color:"#9a86fd"}},{types:["tag-id","selector","atrule-id"],style:{color:"#eeebff"}},{types:["attr-name"],style:{color:"#c4b9fe"}},{types:["boolean","string","entity","url","attr-value","keyword","control","directive","unit","statement","regex","atrule","placeholder","variable"],style:{color:"#ffcc99"}},{types:["deleted"],style:{textDecorationLine:"line-through"}},{types:["inserted"],style:{textDecorationLine:"underline"}},{types:["italic"],style:{fontStyle:"italic"}},{types:["important","bold"],style:{fontWeight:"bold"}},{types:["important"],style:{color:"#c4b9fe"}}]};var S={Prism:n(7410).Z,theme:T};function A(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function L(){return L=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t},L.apply(this,arguments)}var B=/\r\n|\r|\n/,N=function(t){0===t.length?t.push({types:["plain"],content:"\n",empty:!0}):1===t.length&&""===t[0].content&&(t[0].content="\n",t[0].empty=!0)},D=function(t,e){var n=t.length;return n>0&&t[n-1]===e?t:t.concat(e)},O=function(t,e){var n=t.plain,r=Object.create(null),i=t.styles.reduce((function(t,n){var r=n.languages,i=n.style;return r&&!r.includes(e)||n.types.forEach((function(e){var n=L({},t[e],i);t[e]=n})),t}),r);return i.root=n,i.plain=L({},n,{backgroundColor:null}),i};function M(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&-1===e.indexOf(r)&&(n[r]=t[r]);return n}const I=function(t){function e(){for(var e=this,n=[],r=arguments.length;r--;)n[r]=arguments[r];t.apply(this,n),A(this,"getThemeDict",(function(t){if(void 0!==e.themeDict&&t.theme===e.prevTheme&&t.language===e.prevLanguage)return e.themeDict;e.prevTheme=t.theme,e.prevLanguage=t.language;var n=t.theme?O(t.theme,t.language):void 0;return e.themeDict=n})),A(this,"getLineProps",(function(t){var n=t.key,r=t.className,i=t.style,a=L({},M(t,["key","className","style","line"]),{className:"token-line",style:void 0,key:void 0}),s=e.getThemeDict(e.props);return void 0!==s&&(a.style=s.plain),void 0!==i&&(a.style=void 0!==a.style?L({},a.style,i):i),void 0!==n&&(a.key=n),r&&(a.className+=" "+r),a})),A(this,"getStyleForToken",(function(t){var n=t.types,r=t.empty,i=n.length,a=e.getThemeDict(e.props);if(void 0!==a){if(1===i&&"plain"===n[0])return r?{display:"inline-block"}:void 0;if(1===i&&!r)return a[n[0]];var s=r?{display:"inline-block"}:{},o=n.map((function(t){return a[t]}));return Object.assign.apply(Object,[s].concat(o))}})),A(this,"getTokenProps",(function(t){var n=t.key,r=t.className,i=t.style,a=t.token,s=L({},M(t,["key","className","style","token"]),{className:"token "+a.types.join(" "),children:a.content,style:e.getStyleForToken(a),key:void 0});return void 0!==i&&(s.style=void 0!==s.style?L({},s.style,i):i),void 0!==n&&(s.key=n),r&&(s.className+=" "+r),s})),A(this,"tokenize",(function(t,e,n,r){var i={code:e,grammar:n,language:r,tokens:[]};t.hooks.run("before-tokenize",i);var a=i.tokens=t.tokenize(i.code,i.grammar,i.language);return t.hooks.run("after-tokenize",i),a}))}return t&&(e.__proto__=t),e.prototype=Object.create(t&&t.prototype),e.prototype.constructor=e,e.prototype.render=function(){var t=this.props,e=t.Prism,n=t.language,r=t.code,i=t.children,a=this.getThemeDict(this.props),s=e.languages[n];return i({tokens:function(t){for(var e=[[]],n=[t],r=[0],i=[t.length],a=0,s=0,o=[],c=[o];s>-1;){for(;(a=r[s]++)<i[s];){var l=void 0,h=e[s],u=n[s][a];if("string"==typeof u?(h=s>0?h:["plain"],l=u):(h=D(h,u.type),u.alias&&(h=D(h,u.alias)),l=u.content),"string"==typeof l){var d=l.split(B),p=d.length;o.push({types:h,content:d[0]});for(var f=1;f<p;f++)N(o),c.push(o=[]),o.push({types:h,content:d[f]})}else s++,e.push(h),n.push(l),r.push(0),i.push(l.length)}s--,e.pop(),n.pop(),r.pop(),i.pop()}return N(o),c}(void 0!==s?this.tokenize(e,r,s,n):[r]),className:"prism-code language-"+n,style:void 0!==a?a.root:{},getLineProps:this.getLineProps,getTokenProps:this.getTokenProps})},e}(i.Component),F="codeLine_lJS_",$="codeLineNumber_Tfdd",R="codeLineContent_feaV";function Z(t){let{line:e,classNames:n,showLineNumbers:a,getLineProps:s,getTokenProps:c}=t;1===e.length&&"\n"===e[0].content&&(e[0].content="");const l=s({line:e,className:(0,o.Z)(n,a&&F)}),h=e.map(((t,e)=>i.createElement("span",(0,r.Z)({key:e},c({token:t,key:e})))));return i.createElement("span",l,a?i.createElement(i.Fragment,null,i.createElement("span",{className:$}),i.createElement("span",{className:R},h)):h,i.createElement("br",null))}var P=n(5999);function j(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"}))}function Y(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"}))}const z={copyButtonCopied:"copyButtonCopied_obH4",copyButtonIcons:"copyButtonIcons_eSgA",copyButtonIcon:"copyButtonIcon_y97N",copyButtonSuccessIcon:"copyButtonSuccessIcon_LjdS"};function U(t){let{code:e,className:n}=t;const[r,a]=(0,i.useState)(!1),s=(0,i.useRef)(void 0),c=(0,i.useCallback)((()=>{!function(t,e){let{target:n=document.body}=void 0===e?{}:e;if("string"!=typeof t)throw new TypeError(`Expected parameter \`text\` to be a \`string\`, got \`${typeof t}\`.`);const r=document.createElement("textarea"),i=document.activeElement;r.value=t,r.setAttribute("readonly",""),r.style.contain="strict",r.style.position="absolute",r.style.left="-9999px",r.style.fontSize="12pt";const a=document.getSelection(),s=a.rangeCount>0&&a.getRangeAt(0);n.append(r),r.select(),r.selectionStart=0,r.selectionEnd=t.length;let o=!1;try{o=document.execCommand("copy")}catch{}r.remove(),s&&(a.removeAllRanges(),a.addRange(s)),i&&i.focus()}(e),a(!0),s.current=window.setTimeout((()=>{a(!1)}),1e3)}),[e]);return(0,i.useEffect)((()=>()=>window.clearTimeout(s.current)),[]),i.createElement("button",{type:"button","aria-label":r?(0,P.I)({id:"theme.CodeBlock.copied",message:"Copied",description:"The copied button label on code blocks"}):(0,P.I)({id:"theme.CodeBlock.copyButtonAriaLabel",message:"Copy code to clipboard",description:"The ARIA label for copy code blocks button"}),title:(0,P.I)({id:"theme.CodeBlock.copy",message:"Copy",description:"The copy button label on code blocks"}),className:(0,o.Z)("clean-btn",n,z.copyButton,r&&z.copyButtonCopied),onClick:c},i.createElement("span",{className:z.copyButtonIcons,"aria-hidden":"true"},i.createElement(j,{className:z.copyButtonIcon}),i.createElement(Y,{className:z.copyButtonSuccessIcon})))}function W(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M4 19h6v-2H4v2zM20 5H4v2h16V5zm-3 6H4v2h13.25c1.1 0 2 .9 2 2s-.9 2-2 2H15v-2l-3 3l3 3v-2h2c2.21 0 4-1.79 4-4s-1.79-4-4-4z"}))}const q="wordWrapButtonIcon_Bwma",H="wordWrapButtonEnabled_EoeP";function V(t){let{className:e,onClick:n,isEnabled:r}=t;const a=(0,P.I)({id:"theme.CodeBlock.wordWrapToggle",message:"Toggle word wrap",description:"The title attribute for toggle word wrapping button of code block lines"});return i.createElement("button",{type:"button",onClick:n,className:(0,o.Z)("clean-btn",e,r&&H),"aria-label":a,title:a},i.createElement(W,{className:q,"aria-hidden":"true"}))}function G(t){let{children:e,className:n="",metastring:a,title:s,showLineNumbers:c,language:u}=t;const{prism:{defaultLanguage:d,magicComments:p}}=(0,l.L)(),g=u??n.split(" ").find((t=>t.startsWith("language-")))?.replace(/language-/,"")??d;const y=h(),m=function(){const[t,e]=(0,i.useState)(!1),[n,r]=(0,i.useState)(!1),a=(0,i.useRef)(null),s=(0,i.useCallback)((()=>{const n=a.current.querySelector("code");t?n.removeAttribute("style"):(n.style.whiteSpace="pre-wrap",n.style.overflowWrap="anywhere"),e((t=>!t))}),[a,t]),o=(0,i.useCallback)((()=>{const{scrollWidth:t,clientWidth:e}=a.current,n=t>e||a.current.querySelector("code").hasAttribute("style");r(n)}),[a]);return C(a,o),(0,i.useEffect)((()=>{o()}),[t,o]),(0,i.useEffect)((()=>(window.addEventListener("resize",o,{passive:!0}),()=>{window.removeEventListener("resize",o)})),[o]),{codeBlockRef:a,isEnabled:t,isCodeScrollable:n,toggle:s}}(),_=function(t){return t?.match(f)?.groups.title??""}(a)||s,{lineClassNames:k,code:w}=b(e,{metastring:a,language:g,magicComments:p}),E=c??function(t){return Boolean(t?.includes("showLineNumbers"))}(a);return i.createElement(x,{as:"div",className:(0,o.Z)(n,g&&!n.includes(`language-${g}`)&&`language-${g}`)},_&&i.createElement("div",{className:v.codeBlockTitle},_),i.createElement("div",{className:v.codeBlockContent},i.createElement(I,(0,r.Z)({},S,{theme:y,code:w,language:g??"text"}),(t=>{let{className:e,tokens:n,getLineProps:r,getTokenProps:a}=t;return i.createElement("pre",{tabIndex:0,ref:m.codeBlockRef,className:(0,o.Z)(e,v.codeBlock,"thin-scrollbar")},i.createElement("code",{className:(0,o.Z)(v.codeBlockLines,E&&v.codeBlockLinesWithNumbering)},n.map(((t,e)=>i.createElement(Z,{key:e,line:t,getLineProps:r,getTokenProps:a,classNames:k[e],showLineNumbers:E})))))})),i.createElement("div",{className:v.buttonGroup},(m.isEnabled||m.isCodeScrollable)&&i.createElement(V,{className:v.codeButton,onClick:()=>m.toggle(),isEnabled:m.isEnabled}),i.createElement(U,{className:v.codeButton,code:w}))))}function X(t){let{children:e,...n}=t;const a=(0,s.Z)(),o=function(t){return i.Children.toArray(t).some((t=>(0,i.isValidElement)(t)))?t:Array.isArray(t)?t.join(""):t}(e),c="string"==typeof o?G:k;return i.createElement(c,(0,r.Z)({key:String(a)},n),o)}var K=n(9960);var Q=n(6043);const J="details_lb9f",tt="isBrowser_bmU9",et="collapsibleContent_i85q";function nt(t){return!!t&&("SUMMARY"===t.tagName||nt(t.parentElement))}function rt(t,e){return!!t&&(t===e||rt(t.parentElement,e))}function it(t){let{summary:e,children:n,...a}=t;const c=(0,s.Z)(),l=(0,i.useRef)(null),{collapsed:h,setCollapsed:u}=(0,Q.u)({initialState:!a.open}),[d,p]=(0,i.useState)(a.open),f=i.isValidElement(e)?e:i.createElement("summary",null,e??"Details");return i.createElement("details",(0,r.Z)({},a,{ref:l,open:d,"data-collapsed":h,className:(0,o.Z)(J,c&&tt,a.className),onMouseDown:t=>{nt(t.target)&&t.detail>1&&t.preventDefault()},onClick:t=>{t.stopPropagation();const e=t.target;nt(e)&&rt(e,l.current)&&(t.preventDefault(),h?(u(!1),p(!0)):u(!0))}}),f,i.createElement(Q.z,{lazy:!1,collapsed:h,disableSSRStyle:!0,onCollapseTransitionEnd:t=>{u(t),p(!t)}},i.createElement("div",{className:et},n)))}const at="details_b_Ee";function st(t){let{...e}=t;return i.createElement(it,(0,r.Z)({},e,{className:(0,o.Z)("alert alert--info",at,e.className)}))}var ot=n(2503);function ct(t){return i.createElement(ot.Z,t)}const lt="containsTaskList_mC6p";const ht="img_ev3q";const ut="admonition_LlT9",dt="admonitionHeading_tbUL",pt="admonitionIcon_kALy",ft="admonitionContent_S0QG";const gt={note:{infimaClassName:"secondary",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"}))},label:i.createElement(P.Z,{id:"theme.admonition.note",description:"The default label used for the Note admonition (:::note)"},"note")},tip:{infimaClassName:"success",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.tip",description:"The default label used for the Tip admonition (:::tip)"},"tip")},danger:{infimaClassName:"danger",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"}))},label:i.createElement(P.Z,{id:"theme.admonition.danger",description:"The default label used for the Danger admonition (:::danger)"},"danger")},info:{infimaClassName:"info",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.info",description:"The default label used for the Info admonition (:::info)"},"info")},caution:{infimaClassName:"warning",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 16 16"},i.createElement("path",{fillRule:"evenodd",d:"M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"}))},label:i.createElement(P.Z,{id:"theme.admonition.caution",description:"The default label used for the Caution admonition (:::caution)"},"caution")}},yt={secondary:"note",important:"info",success:"tip",warning:"danger"};function mt(t){const{mdxAdmonitionTitle:e,rest:n}=function(t){const e=i.Children.toArray(t),n=e.find((t=>i.isValidElement(t)&&"mdxAdmonitionTitle"===t.props?.mdxType)),r=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return{mdxAdmonitionTitle:n,rest:r}}(t.children);return{...t,title:t.title??e,children:n}}function bt(t){let{children:e,fallback:n}=t;return(0,s.Z)()?i.createElement(i.Fragment,null,e?.()):n??null}var _t=n(6432);function xt(){const{colorMode:t}=(0,c.I)(),e=(0,l.L)().mermaid,n=e.theme[t],{options:r}=e;return(0,i.useMemo)((()=>({startOnLoad:!1,...r,theme:n})),[n,r])}const vt="container_lyt7";function kt(t){let{value:e}=t;const n=function(t,e){const n=xt(),r=e??n;return(0,i.useMemo)((()=>{_t.o.mermaidAPI.initialize(r);const e=`mermaid-svg-${Math.round(1e7*Math.random())}`;return _t.o.render(e,t)}),[t,r])}(e);return i.createElement("div",{className:`docusaurus-mermaid-container ${vt}`,dangerouslySetInnerHTML:{__html:n}})}const wt={head:function(t){const e=i.Children.map(t.children,(t=>i.isValidElement(t)?function(t){if(t.props?.mdxType&&t.props.originalType){const{mdxType:e,originalType:n,...r}=t.props;return i.createElement(t.props.originalType,r)}return t}(t):t));return i.createElement(a.Z,t,e)},code:function(t){const e=["a","abbr","b","br","button","cite","code","del","dfn","em","i","img","input","ins","kbd","label","object","output","q","ruby","s","small","span","strong","sub","sup","time","u","var","wbr"];return i.Children.toArray(t.children).every((t=>"string"==typeof t&&!t.includes("\n")||(0,i.isValidElement)(t)&&e.includes(t.props?.mdxType)))?i.createElement("code",t):i.createElement(X,t)},a:function(t){return i.createElement(K.Z,t)},pre:function(t){return i.createElement(X,(0,i.isValidElement)(t.children)&&"code"===t.children.props?.originalType?t.children.props:{...t})},details:function(t){const e=i.Children.toArray(t.children),n=e.find((t=>i.isValidElement(t)&&"summary"===t.props?.mdxType)),a=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return i.createElement(st,(0,r.Z)({},t,{summary:n}),a)},ul:function(t){return i.createElement("ul",(0,r.Z)({},t,{className:(e=t.className,(0,o.Z)(e,e?.includes("contains-task-list")&&lt))}));var e},img:function(t){return i.createElement("img",(0,r.Z)({loading:"lazy"},t,{className:(e=t.className,(0,o.Z)(e,ht))}));var e},h1:t=>i.createElement(ct,(0,r.Z)({as:"h1"},t)),h2:t=>i.createElement(ct,(0,r.Z)({as:"h2"},t)),h3:t=>i.createElement(ct,(0,r.Z)({as:"h3"},t)),h4:t=>i.createElement(ct,(0,r.Z)({as:"h4"},t)),h5:t=>i.createElement(ct,(0,r.Z)({as:"h5"},t)),h6:t=>i.createElement(ct,(0,r.Z)({as:"h6"},t)),admonition:function(t){const{children:e,type:n,title:r,icon:a}=mt(t),s=function(t){const e=yt[t]??t;return gt[e]||(console.warn(`No admonition config found for admonition type "${e}". Using Info as fallback.`),gt.info)}(n),c=r??s.label,{iconComponent:l}=s,h=a??i.createElement(l,null);return i.createElement("div",{className:(0,o.Z)(u.k.common.admonition,u.k.common.admonitionType(t.type),"alert",`alert--${s.infimaClassName}`,ut)},i.createElement("div",{className:dt},i.createElement("span",{className:pt},h),c),i.createElement("div",{className:ft},e))},mermaid:function(t){return i.createElement(bt,null,(()=>i.createElement(kt,t)))}}},5162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7294),i=n(6010);const a="tabItem_Ymn6";function s(t){let{children:e,hidden:n,className:s}=t;return r.createElement("div",{role:"tabpanel",className:(0,i.Z)(a,s),hidden:n},e)}},4866:(t,e,n)=>{"use strict";n.d(e,{Z:()=>k});var r=n(3117),i=n(7294),a=n(6010),s=n(2466),o=n(6775),c=n(1980),l=n(7392),h=n(12);function u(t){return function(t){return i.Children.map(t,(t=>{if(!t||(0,i.isValidElement)(t)&&function(t){const{props:e}=t;return!!e&&"object"==typeof e&&"value"in e}(t))return t;throw new Error(`Docusaurus error: Bad <Tabs> child <${"string"==typeof t.type?t.type:t.type.name}>: all children of the <Tabs> component should be <TabItem>, and every <TabItem> should have a unique "value" prop.`)}))?.filter(Boolean)??[]}(t).map((t=>{let{props:{value:e,label:n,attributes:r,default:i}}=t;return{value:e,label:n,attributes:r,default:i}}))}function d(t){const{values:e,children:n}=t;return(0,i.useMemo)((()=>{const t=e??u(n);return function(t){const e=(0,l.l)(t,((t,e)=>t.value===e.value));if(e.length>0)throw new Error(`Docusaurus error: Duplicate values "${e.map((t=>t.value)).join(", ")}" found in <Tabs>. Every value needs to be unique.`)}(t),t}),[e,n])}function p(t){let{value:e,tabValues:n}=t;return n.some((t=>t.value===e))}function f(t){let{queryString:e=!1,groupId:n}=t;const r=(0,o.k6)(),a=function(t){let{queryString:e=!1,groupId:n}=t;if("string"==typeof e)return e;if(!1===e)return null;if(!0===e&&!n)throw new Error('Docusaurus error: The <Tabs> component groupId prop is required if queryString=true, because this value is used as the search param name. You can also provide an explicit value such as queryString="my-search-param".');return n??null}({queryString:e,groupId:n});return[(0,c._X)(a),(0,i.useCallback)((t=>{if(!a)return;const e=new URLSearchParams(r.location.search);e.set(a,t),r.replace({...r.location,search:e.toString()})}),[a,r])]}function g(t){const{defaultValue:e,queryString:n=!1,groupId:r}=t,a=d(t),[s,o]=(0,i.useState)((()=>function(t){let{defaultValue:e,tabValues:n}=t;if(0===n.length)throw new Error("Docusaurus error: the <Tabs> component requires at least one <TabItem> children component");if(e){if(!p({value:e,tabValues:n}))throw new Error(`Docusaurus error: The <Tabs> has a defaultValue "${e}" but none of its children has the corresponding value. Available values are: ${n.map((t=>t.value)).join(", ")}. If you intend to show no default tab, use defaultValue={null} instead.`);return e}const r=n.find((t=>t.default))??n[0];if(!r)throw new Error("Unexpected error: 0 tabValues");return r.value}({defaultValue:e,tabValues:a}))),[c,l]=f({queryString:n,groupId:r}),[u,g]=function(t){let{groupId:e}=t;const n=function(t){return t?`docusaurus.tab.${t}`:null}(e),[r,a]=(0,h.Nk)(n);return[r,(0,i.useCallback)((t=>{n&&a.set(t)}),[n,a])]}({groupId:r}),y=(()=>{const t=c??u;return p({value:t,tabValues:a})?t:null})();(0,i.useLayoutEffect)((()=>{y&&o(y)}),[y]);return{selectedValue:s,selectValue:(0,i.useCallback)((t=>{if(!p({value:t,tabValues:a}))throw new Error(`Can't select invalid tab value=${t}`);o(t),l(t),g(t)}),[l,g,a]),tabValues:a}}var y=n(2389);const m="tabList__CuJ",b="tabItem_LNqP";function _(t){let{className:e,block:n,selectedValue:o,selectValue:c,tabValues:l}=t;const h=[],{blockElementScrollPositionUntilNextRender:u}=(0,s.o5)(),d=t=>{const e=t.currentTarget,n=h.indexOf(e),r=l[n].value;r!==o&&(u(e),c(r))},p=t=>{let e=null;switch(t.key){case"Enter":d(t);break;case"ArrowRight":{const n=h.indexOf(t.currentTarget)+1;e=h[n]??h[0];break}case"ArrowLeft":{const n=h.indexOf(t.currentTarget)-1;e=h[n]??h[h.length-1];break}}e?.focus()};return i.createElement("ul",{role:"tablist","aria-orientation":"horizontal",className:(0,a.Z)("tabs",{"tabs--block":n},e)},l.map((t=>{let{value:e,label:n,attributes:s}=t;return i.createElement("li",(0,r.Z)({role:"tab",tabIndex:o===e?0:-1,"aria-selected":o===e,key:e,ref:t=>h.push(t),onKeyDown:p,onClick:d},s,{className:(0,a.Z)("tabs__item",b,s?.className,{"tabs__item--active":o===e})}),n??e)})))}function x(t){let{lazy:e,children:n,selectedValue:r}=t;const a=(Array.isArray(n)?n:[n]).filter(Boolean);if(e){const t=a.find((t=>t.props.value===r));return t?(0,i.cloneElement)(t,{className:"margin-top--md"}):null}return i.createElement("div",{className:"margin-top--md"},a.map(((t,e)=>(0,i.cloneElement)(t,{key:e,hidden:t.props.value!==r}))))}function v(t){const e=g(t);return i.createElement("div",{className:(0,a.Z)("tabs-container",m)},i.createElement(_,(0,r.Z)({},t,e)),i.createElement(x,(0,r.Z)({},t,e)))}function k(t){const e=(0,y.Z)();return i.createElement(v,(0,r.Z)({key:String(e)},t))}},4477:(t,e,n)=>{"use strict";n.d(e,{E:()=>o,q:()=>s});var r=n(7294),i=n(902);const a=r.createContext(null);function s(t){let{children:e,version:n}=t;return r.createElement(a.Provider,{value:n},e)}function o(){const t=(0,r.useContext)(a);if(null===t)throw new i.i6("DocsVersionProvider");return t}},7484:function(t){t.exports=function(){"use strict";var t=1e3,e=6e4,n=36e5,r="millisecond",i="second",a="minute",s="hour",o="day",c="week",l="month",h="quarter",u="year",d="date",p="Invalid Date",f=/^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{1,2})?[.:]?(\d+)?$/,g=/\[([^\]]+)]|Y{1,4}|M{1,4}|D{1,2}|d{1,4}|H{1,2}|h{1,2}|a|A|m{1,2}|s{1,2}|Z{1,2}|SSS/g,y={name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),ordinal:function(t){var e=["th","st","nd","rd"],n=t%100;return"["+t+(e[(n-20)%10]||e[n]||e[0])+"]"}},m=function(t,e,n){var r=String(t);return!r||r.length>=e?t:""+Array(e+1-r.length).join(n)+t},b={s:m,z:function(t){var e=-t.utcOffset(),n=Math.abs(e),r=Math.floor(n/60),i=n%60;return(e<=0?"+":"-")+m(r,2,"0")+":"+m(i,2,"0")},m:function t(e,n){if(e.date()<n.date())return-t(n,e);var r=12*(n.year()-e.year())+(n.month()-e.month()),i=e.clone().add(r,l),a=n-i<0,s=e.clone().add(r+(a?-1:1),l);return+(-(r+(n-i)/(a?i-s:s-i))||0)},a:function(t){return t<0?Math.ceil(t)||0:Math.floor(t)},p:function(t){return{M:l,y:u,w:c,d:o,D:d,h:s,m:a,s:i,ms:r,Q:h}[t]||String(t||"").toLowerCase().replace(/s$/,"")},u:function(t){return void 0===t}},_="en",x={};x[_]=y;var v=function(t){return t instanceof C},k=function t(e,n,r){var i;if(!e)return _;if("string"==typeof e){var a=e.toLowerCase();x[a]&&(i=a),n&&(x[a]=n,i=a);var s=e.split("-");if(!i&&s.length>1)return t(s[0])}else{var o=e.name;x[o]=e,i=o}return!r&&i&&(_=i),i||!r&&_},w=function(t,e){if(v(t))return t.clone();var n="object"==typeof e?e:{};return n.date=t,n.args=arguments,new C(n)},E=b;E.l=k,E.i=v,E.w=function(t,e){return w(t,{locale:e.$L,utc:e.$u,x:e.$x,$offset:e.$offset})};var C=function(){function y(t){this.$L=k(t.locale,null,!0),this.parse(t)}var m=y.prototype;return m.parse=function(t){this.$d=function(t){var e=t.date,n=t.utc;if(null===e)return new Date(NaN);if(E.u(e))return new Date;if(e instanceof Date)return new Date(e);if("string"==typeof e&&!/Z$/i.test(e)){var r=e.match(f);if(r){var i=r[2]-1||0,a=(r[7]||"0").substring(0,3);return n?new Date(Date.UTC(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)):new Date(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)}}return new Date(e)}(t),this.$x=t.x||{},this.init()},m.init=function(){var t=this.$d;this.$y=t.getFullYear(),this.$M=t.getMonth(),this.$D=t.getDate(),this.$W=t.getDay(),this.$H=t.getHours(),this.$m=t.getMinutes(),this.$s=t.getSeconds(),this.$ms=t.getMilliseconds()},m.$utils=function(){return E},m.isValid=function(){return!(this.$d.toString()===p)},m.isSame=function(t,e){var n=w(t);return this.startOf(e)<=n&&n<=this.endOf(e)},m.isAfter=function(t,e){return w(t)<this.startOf(e)},m.isBefore=function(t,e){return this.endOf(e)<w(t)},m.$g=function(t,e,n){return E.u(t)?this[e]:this.set(n,t)},m.unix=function(){return Math.floor(this.valueOf()/1e3)},m.valueOf=function(){return this.$d.getTime()},m.startOf=function(t,e){var n=this,r=!!E.u(e)||e,h=E.p(t),p=function(t,e){var i=E.w(n.$u?Date.UTC(n.$y,e,t):new Date(n.$y,e,t),n);return r?i:i.endOf(o)},f=function(t,e){return E.w(n.toDate()[t].apply(n.toDate("s"),(r?[0,0,0,0]:[23,59,59,999]).slice(e)),n)},g=this.$W,y=this.$M,m=this.$D,b="set"+(this.$u?"UTC":"");switch(h){case u:return r?p(1,0):p(31,11);case l:return r?p(1,y):p(0,y+1);case c:var _=this.$locale().weekStart||0,x=(g<_?g+7:g)-_;return p(r?m-x:m+(6-x),y);case o:case d:return f(b+"Hours",0);case s:return f(b+"Minutes",1);case a:return f(b+"Seconds",2);case i:return f(b+"Milliseconds",3);default:return this.clone()}},m.endOf=function(t){return this.startOf(t,!1)},m.$set=function(t,e){var n,c=E.p(t),h="set"+(this.$u?"UTC":""),p=(n={},n[o]=h+"Date",n[d]=h+"Date",n[l]=h+"Month",n[u]=h+"FullYear",n[s]=h+"Hours",n[a]=h+"Minutes",n[i]=h+"Seconds",n[r]=h+"Milliseconds",n)[c],f=c===o?this.$D+(e-this.$W):e;if(c===l||c===u){var g=this.clone().set(d,1);g.$d[p](f),g.init(),this.$d=g.set(d,Math.min(this.$D,g.daysInMonth())).$d}else p&&this.$d[p](f);return this.init(),this},m.set=function(t,e){return this.clone().$set(t,e)},m.get=function(t){return this[E.p(t)]()},m.add=function(r,h){var d,p=this;r=Number(r);var f=E.p(h),g=function(t){var e=w(p);return E.w(e.date(e.date()+Math.round(t*r)),p)};if(f===l)return this.set(l,this.$M+r);if(f===u)return this.set(u,this.$y+r);if(f===o)return g(1);if(f===c)return g(7);var y=(d={},d[a]=e,d[s]=n,d[i]=t,d)[f]||1,m=this.$d.getTime()+r*y;return E.w(m,this)},m.subtract=function(t,e){return this.add(-1*t,e)},m.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return n.invalidDate||p;var r=t||"YYYY-MM-DDTHH:mm:ssZ",i=E.z(this),a=this.$H,s=this.$m,o=this.$M,c=n.weekdays,l=n.months,h=function(t,n,i,a){return t&&(t[n]||t(e,r))||i[n].slice(0,a)},u=function(t){return E.s(a%12||12,t,"0")},d=n.meridiem||function(t,e,n){var r=t<12?"AM":"PM";return n?r.toLowerCase():r},f={YY:String(this.$y).slice(-2),YYYY:this.$y,M:o+1,MM:E.s(o+1,2,"0"),MMM:h(n.monthsShort,o,l,3),MMMM:h(l,o),D:this.$D,DD:E.s(this.$D,2,"0"),d:String(this.$W),dd:h(n.weekdaysMin,this.$W,c,2),ddd:h(n.weekdaysShort,this.$W,c,3),dddd:c[this.$W],H:String(a),HH:E.s(a,2,"0"),h:u(1),hh:u(2),a:d(a,s,!0),A:d(a,s,!1),m:String(s),mm:E.s(s,2,"0"),s:String(this.$s),ss:E.s(this.$s,2,"0"),SSS:E.s(this.$ms,3,"0"),Z:i};return r.replace(g,(function(t,e){return e||f[t]||i.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(r,d,p){var f,g=E.p(d),y=w(r),m=(y.utcOffset()-this.utcOffset())*e,b=this-y,_=E.m(this,y);return _=(f={},f[u]=_/12,f[l]=_,f[h]=_/3,f[c]=(b-m)/6048e5,f[o]=(b-m)/864e5,f[s]=b/n,f[a]=b/e,f[i]=b/t,f)[g]||b,p?_:E.a(_)},m.daysInMonth=function(){return this.endOf(l).$D},m.$locale=function(){return x[this.$L]},m.locale=function(t,e){if(!t)return this.$L;var n=this.clone(),r=k(t,e,!0);return r&&(n.$L=r),n},m.clone=function(){return E.w(this.$d,this)},m.toDate=function(){return new Date(this.valueOf())},m.toJSON=function(){return this.isValid()?this.toISOString():null},m.toISOString=function(){return this.$d.toISOString()},m.toString=function(){return this.$d.toUTCString()},y}(),T=C.prototype;return w.prototype=T,[["$ms",r],["$s",i],["$m",a],["$H",s],["$W",o],["$M",l],["$y",u],["$D",d]].forEach((function(t){T[t[1]]=function(e){return this.$g(e,t[0],t[1])}})),w.extend=function(t,e){return t.$i||(t(e,C,w),t.$i=!0),w},w.locale=k,w.isDayjs=v,w.unix=function(t){return w(1e3*t)},w.en=x[_],w.Ls=x,w.p={},w}()},8734:function(t){t.exports=function(){"use strict";return function(t,e){var n=e.prototype,r=n.format;n.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return r.bind(this)(t);var i=this.$utils(),a=(t||"YYYY-MM-DDTHH:mm:ssZ").replace(/\[([^\]]+)]|Q|wo|ww|w|WW|W|zzz|z|gggg|GGGG|Do|X|x|k{1,2}|S/g,(function(t){switch(t){case"Q":return Math.ceil((e.$M+1)/3);case"Do":return n.ordinal(e.$D);case"gggg":return e.weekYear();case"GGGG":return e.isoWeekYear();case"wo":return n.ordinal(e.week(),"W");case"w":case"ww":return i.s(e.week(),"w"===t?1:2,"0");case"W":case"WW":return i.s(e.isoWeek(),"W"===t?1:2,"0");case"k":case"kk":return i.s(String(0===e.$H?24:e.$H),"k"===t?1:2,"0");case"X":return Math.floor(e.$d.getTime()/1e3);case"x":return e.$d.getTime();case"z":return"["+e.offsetName()+"]";case"zzz":return"["+e.offsetName("long")+"]";default:return t}}));return r.bind(this)(a)}}}()},285:function(t){t.exports=function(){"use strict";var t={LTS:"h:mm:ss A",LT:"h:mm A",L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},e=/(\[[^[]*\])|([-_:/.,()\s]+)|(A|a|YYYY|YY?|MM?M?M?|Do|DD?|hh?|HH?|mm?|ss?|S{1,3}|z|ZZ?)/g,n=/\d\d/,r=/\d\d?/,i=/\d*[^-_:/,()\s\d]+/,a={},s=function(t){return(t=+t)+(t>68?1900:2e3)},o=function(t){return function(e){this[t]=+e}},c=[/[+-]\d\d:?(\d\d)?|Z/,function(t){(this.zone||(this.zone={})).offset=function(t){if(!t)return 0;if("Z"===t)return 0;var e=t.match(/([+-]|\d\d)/g),n=60*e[1]+(+e[2]||0);return 0===n?0:"+"===e[0]?-n:n}(t)}],l=function(t){var e=a[t];return e&&(e.indexOf?e:e.s.concat(e.f))},h=function(t,e){var n,r=a.meridiem;if(r){for(var i=1;i<=24;i+=1)if(t.indexOf(r(i,0,e))>-1){n=i>12;break}}else n=t===(e?"pm":"PM");return n},u={A:[i,function(t){this.afternoon=h(t,!1)}],a:[i,function(t){this.afternoon=h(t,!0)}],S:[/\d/,function(t){this.milliseconds=100*+t}],SS:[n,function(t){this.milliseconds=10*+t}],SSS:[/\d{3}/,function(t){this.milliseconds=+t}],s:[r,o("seconds")],ss:[r,o("seconds")],m:[r,o("minutes")],mm:[r,o("minutes")],H:[r,o("hours")],h:[r,o("hours")],HH:[r,o("hours")],hh:[r,o("hours")],D:[r,o("day")],DD:[n,o("day")],Do:[i,function(t){var e=a.ordinal,n=t.match(/\d+/);if(this.day=n[0],e)for(var r=1;r<=31;r+=1)e(r).replace(/\[|\]/g,"")===t&&(this.day=r)}],M:[r,o("month")],MM:[n,o("month")],MMM:[i,function(t){var e=l("months"),n=(l("monthsShort")||e.map((function(t){return t.slice(0,3)}))).indexOf(t)+1;if(n<1)throw new Error;this.month=n%12||n}],MMMM:[i,function(t){var e=l("months").indexOf(t)+1;if(e<1)throw new Error;this.month=e%12||e}],Y:[/[+-]?\d+/,o("year")],YY:[n,function(t){this.year=s(t)}],YYYY:[/\d{4}/,o("year")],Z:c,ZZ:c};function d(n){var r,i;r=n,i=a&&a.formats;for(var s=(n=r.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(function(e,n,r){var a=r&&r.toUpperCase();return n||i[r]||t[r]||i[a].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(function(t,e,n){return e||n.slice(1)}))}))).match(e),o=s.length,c=0;c<o;c+=1){var l=s[c],h=u[l],d=h&&h[0],p=h&&h[1];s[c]=p?{regex:d,parser:p}:l.replace(/^\[|\]$/g,"")}return function(t){for(var e={},n=0,r=0;n<o;n+=1){var i=s[n];if("string"==typeof i)r+=i.length;else{var a=i.regex,c=i.parser,l=t.slice(r),h=a.exec(l)[0];c.call(e,h),t=t.replace(h,"")}}return function(t){var e=t.afternoon;if(void 0!==e){var n=t.hours;e?n<12&&(t.hours+=12):12===n&&(t.hours=0),delete t.afternoon}}(e),e}}return function(t,e,n){n.p.customParseFormat=!0,t&&t.parseTwoDigitYear&&(s=t.parseTwoDigitYear);var r=e.prototype,i=r.parse;r.parse=function(t){var e=t.date,r=t.utc,s=t.args;this.$u=r;var o=s[1];if("string"==typeof o){var c=!0===s[2],l=!0===s[3],h=c||l,u=s[2];l&&(u=s[2]),a=this.$locale(),!c&&u&&(a=n.Ls[u]),this.$d=function(t,e,n){try{if(["x","X"].indexOf(e)>-1)return new Date(("X"===e?1e3:1)*t);var r=d(e)(t),i=r.year,a=r.month,s=r.day,o=r.hours,c=r.minutes,l=r.seconds,h=r.milliseconds,u=r.zone,p=new Date,f=s||(i||a?1:p.getDate()),g=i||p.getFullYear(),y=0;i&&!a||(y=a>0?a-1:p.getMonth());var m=o||0,b=c||0,_=l||0,x=h||0;return u?new Date(Date.UTC(g,y,f,m,b,_,x+60*u.offset*1e3)):n?new Date(Date.UTC(g,y,f,m,b,_,x)):new Date(g,y,f,m,b,_,x)}catch(t){return new Date("")}}(e,o,r),this.init(),u&&!0!==u&&(this.$L=this.locale(u).$L),h&&e!=this.format(o)&&(this.$d=new Date("")),a={}}else if(o instanceof Array)for(var p=o.length,f=1;f<=p;f+=1){s[1]=o[f-1];var g=n.apply(this,s);if(g.isValid()){this.$d=g.$d,this.$L=g.$L,this.init();break}f===p&&(this.$d=new Date(""))}else i.call(this,t)}}}()},9542:function(t){t.exports=function(){"use strict";var t="day";return function(e,n,r){var i=function(e){return e.add(4-e.isoWeekday(),t)},a=n.prototype;a.isoWeekYear=function(){return i(this).year()},a.isoWeek=function(e){if(!this.$utils().u(e))return this.add(7*(e-this.isoWeek()),t);var n,a,s,o=i(this),c=(n=this.isoWeekYear(),s=4-(a=(this.$u?r.utc:r)().year(n).startOf("year")).isoWeekday(),a.isoWeekday()>4&&(s+=7),a.add(s,t));return o.diff(c,"week")+1},a.isoWeekday=function(t){return this.$utils().u(t)?this.day()||7:this.day(this.day()%7?t:t-7)};var s=a.startOf;a.startOf=function(t,e){var n=this.$utils(),r=!!n.u(e)||e;return"isoweek"===n.p(t)?r?this.date(this.date()-(this.isoWeekday()-1)).startOf("day"):this.date(this.date()-1-(this.isoWeekday()-1)+7).endOf("day"):s.bind(this)(t,e)}}}()},7856:function(t){t.exports=function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,n){return e=Object.setPrototypeOf||function(t,e){return t.__proto__=e,t},e(t,n)}function n(){if("undefined"==typeof Reflect||!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}function r(t,i,a){return r=n()?Reflect.construct:function(t,n,r){var i=[null];i.push.apply(i,n);var a=new(Function.bind.apply(t,i));return r&&e(a,r.prototype),a},r.apply(null,arguments)}function i(t){return a(t)||s(t)||o(t)||l()}function a(t){if(Array.isArray(t))return c(t)}function s(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]||null!=t["@@iterator"])return Array.from(t)}function o(t,e){if(t){if("string"==typeof t)return c(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n||"Set"===n?Array.from(t):"Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?c(t,e):void 0}}function c(t,e){(null==e||e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function l(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var h=Object.hasOwnProperty,u=Object.setPrototypeOf,d=Object.isFrozen,p=Object.getPrototypeOf,f=Object.getOwnPropertyDescriptor,g=Object.freeze,y=Object.seal,m=Object.create,b="undefined"!=typeof Reflect&&Reflect,_=b.apply,x=b.construct;_||(_=function(t,e,n){return t.apply(e,n)}),g||(g=function(t){return t}),y||(y=function(t){return t}),x||(x=function(t,e){return r(t,i(e))});var v=D(Array.prototype.forEach),k=D(Array.prototype.pop),w=D(Array.prototype.push),E=D(String.prototype.toLowerCase),C=D(String.prototype.toString),T=D(String.prototype.match),S=D(String.prototype.replace),A=D(String.prototype.indexOf),L=D(String.prototype.trim),B=D(RegExp.prototype.test),N=O(TypeError);function D(t){return function(e){for(var n=arguments.length,r=new Array(n>1?n-1:0),i=1;i<n;i++)r[i-1]=arguments[i];return _(t,e,r)}}function O(t){return function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];return x(t,n)}}function M(t,e,n){n=n||E,u&&u(t,null);for(var r=e.length;r--;){var i=e[r];if("string"==typeof i){var a=n(i);a!==i&&(d(e)||(e[r]=a),i=a)}t[i]=!0}return t}function I(t){var e,n=m(null);for(e in t)!0===_(h,t,[e])&&(n[e]=t[e]);return n}function F(t,e){for(;null!==t;){var n=f(t,e);if(n){if(n.get)return D(n.get);if("function"==typeof n.value)return D(n.value)}t=p(t)}function r(t){return console.warn("fallback value for",t),null}return r}var $=g(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","section","select","shadow","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),R=g(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Z=g(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),P=g(["animate","color-profile","cursor","discard","fedropshadow","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),j=g(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover"]),Y=g(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),z=g(["#text"]),U=g(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","face","for","headers","height","hidden","high","href","hreflang","id","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","xmlns","slot"]),W=g(["accent-height","accumulate","additive","alignment-baseline","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),q=g(["accent","accentunder","align","bevelled","close","columnsalign","columnlines","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lspace","lquote","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),H=g(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),V=y(/\{\{[\w\W]*|[\w\W]*\}\}/gm),G=y(/<%[\w\W]*|[\w\W]*%>/gm),X=y(/\${[\w\W]*}/gm),K=y(/^data-[\-\w.\u00B7-\uFFFF]/),Q=y(/^aria-[\-\w]+$/),J=y(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),tt=y(/^(?:\w+script|data):/i),et=y(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),nt=y(/^html$/i),rt=function(){return"undefined"==typeof window?null:window},it=function(e,n){if("object"!==t(e)||"function"!=typeof e.createPolicy)return null;var r=null,i="data-tt-policy-suffix";n.currentScript&&n.currentScript.hasAttribute(i)&&(r=n.currentScript.getAttribute(i));var a="dompurify"+(r?"#"+r:"");try{return e.createPolicy(a,{createHTML:function(t){return t},createScriptURL:function(t){return t}})}catch(s){return console.warn("TrustedTypes policy "+a+" could not be created."),null}};function at(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:rt(),n=function(t){return at(t)};if(n.version="2.4.3",n.removed=[],!e||!e.document||9!==e.document.nodeType)return n.isSupported=!1,n;var r=e.document,a=e.document,s=e.DocumentFragment,o=e.HTMLTemplateElement,c=e.Node,l=e.Element,h=e.NodeFilter,u=e.NamedNodeMap,d=void 0===u?e.NamedNodeMap||e.MozNamedAttrMap:u,p=e.HTMLFormElement,f=e.DOMParser,y=e.trustedTypes,m=l.prototype,b=F(m,"cloneNode"),_=F(m,"nextSibling"),x=F(m,"childNodes"),D=F(m,"parentNode");if("function"==typeof o){var O=a.createElement("template");O.content&&O.content.ownerDocument&&(a=O.content.ownerDocument)}var st=it(y,r),ot=st?st.createHTML(""):"",ct=a,lt=ct.implementation,ht=ct.createNodeIterator,ut=ct.createDocumentFragment,dt=ct.getElementsByTagName,pt=r.importNode,ft={};try{ft=I(a).documentMode?a.documentMode:{}}catch(De){}var gt={};n.isSupported="function"==typeof D&&lt&&void 0!==lt.createHTMLDocument&&9!==ft;var yt,mt,bt=V,_t=G,xt=X,vt=K,kt=Q,wt=tt,Et=et,Ct=J,Tt=null,St=M({},[].concat(i($),i(R),i(Z),i(j),i(z))),At=null,Lt=M({},[].concat(i(U),i(W),i(q),i(H))),Bt=Object.seal(Object.create(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),Nt=null,Dt=null,Ot=!0,Mt=!0,It=!1,Ft=!1,$t=!1,Rt=!1,Zt=!1,Pt=!1,jt=!1,Yt=!1,zt=!0,Ut=!1,Wt="user-content-",qt=!0,Ht=!1,Vt={},Gt=null,Xt=M({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","style","svg","template","thead","title","video","xmp"]),Kt=null,Qt=M({},["audio","video","img","source","image","track"]),Jt=null,te=M({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),ee="http://www.w3.org/1998/Math/MathML",ne="http://www.w3.org/2000/svg",re="http://www.w3.org/1999/xhtml",ie=re,ae=!1,se=null,oe=M({},[ee,ne,re],C),ce=["application/xhtml+xml","text/html"],le="text/html",he=null,ue=a.createElement("form"),de=function(t){return t instanceof RegExp||t instanceof Function},pe=function(e){he&&he===e||(e&&"object"===t(e)||(e={}),e=I(e),yt=yt=-1===ce.indexOf(e.PARSER_MEDIA_TYPE)?le:e.PARSER_MEDIA_TYPE,mt="application/xhtml+xml"===yt?C:E,Tt="ALLOWED_TAGS"in e?M({},e.ALLOWED_TAGS,mt):St,At="ALLOWED_ATTR"in e?M({},e.ALLOWED_ATTR,mt):Lt,se="ALLOWED_NAMESPACES"in e?M({},e.ALLOWED_NAMESPACES,C):oe,Jt="ADD_URI_SAFE_ATTR"in e?M(I(te),e.ADD_URI_SAFE_ATTR,mt):te,Kt="ADD_DATA_URI_TAGS"in e?M(I(Qt),e.ADD_DATA_URI_TAGS,mt):Qt,Gt="FORBID_CONTENTS"in e?M({},e.FORBID_CONTENTS,mt):Xt,Nt="FORBID_TAGS"in e?M({},e.FORBID_TAGS,mt):{},Dt="FORBID_ATTR"in e?M({},e.FORBID_ATTR,mt):{},Vt="USE_PROFILES"in e&&e.USE_PROFILES,Ot=!1!==e.ALLOW_ARIA_ATTR,Mt=!1!==e.ALLOW_DATA_ATTR,It=e.ALLOW_UNKNOWN_PROTOCOLS||!1,Ft=e.SAFE_FOR_TEMPLATES||!1,$t=e.WHOLE_DOCUMENT||!1,Pt=e.RETURN_DOM||!1,jt=e.RETURN_DOM_FRAGMENT||!1,Yt=e.RETURN_TRUSTED_TYPE||!1,Zt=e.FORCE_BODY||!1,zt=!1!==e.SANITIZE_DOM,Ut=e.SANITIZE_NAMED_PROPS||!1,qt=!1!==e.KEEP_CONTENT,Ht=e.IN_PLACE||!1,Ct=e.ALLOWED_URI_REGEXP||Ct,ie=e.NAMESPACE||re,e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck)&&(Bt.tagNameCheck=e.CUSTOM_ELEMENT_HANDLING.tagNameCheck),e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)&&(Bt.attributeNameCheck=e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck),e.CUSTOM_ELEMENT_HANDLING&&"boolean"==typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements&&(Bt.allowCustomizedBuiltInElements=e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements),Ft&&(Mt=!1),jt&&(Pt=!0),Vt&&(Tt=M({},i(z)),At=[],!0===Vt.html&&(M(Tt,$),M(At,U)),!0===Vt.svg&&(M(Tt,R),M(At,W),M(At,H)),!0===Vt.svgFilters&&(M(Tt,Z),M(At,W),M(At,H)),!0===Vt.mathMl&&(M(Tt,j),M(At,q),M(At,H))),e.ADD_TAGS&&(Tt===St&&(Tt=I(Tt)),M(Tt,e.ADD_TAGS,mt)),e.ADD_ATTR&&(At===Lt&&(At=I(At)),M(At,e.ADD_ATTR,mt)),e.ADD_URI_SAFE_ATTR&&M(Jt,e.ADD_URI_SAFE_ATTR,mt),e.FORBID_CONTENTS&&(Gt===Xt&&(Gt=I(Gt)),M(Gt,e.FORBID_CONTENTS,mt)),qt&&(Tt["#text"]=!0),$t&&M(Tt,["html","head","body"]),Tt.table&&(M(Tt,["tbody"]),delete Nt.tbody),g&&g(e),he=e)},fe=M({},["mi","mo","mn","ms","mtext"]),ge=M({},["foreignobject","desc","title","annotation-xml"]),ye=M({},["title","style","font","a","script"]),me=M({},R);M(me,Z),M(me,P);var be=M({},j);M(be,Y);var _e=function(t){var e=D(t);e&&e.tagName||(e={namespaceURI:ie,tagName:"template"});var n=E(t.tagName),r=E(e.tagName);return!!se[t.namespaceURI]&&(t.namespaceURI===ne?e.namespaceURI===re?"svg"===n:e.namespaceURI===ee?"svg"===n&&("annotation-xml"===r||fe[r]):Boolean(me[n]):t.namespaceURI===ee?e.namespaceURI===re?"math"===n:e.namespaceURI===ne?"math"===n&&ge[r]:Boolean(be[n]):t.namespaceURI===re?!(e.namespaceURI===ne&&!ge[r])&&!(e.namespaceURI===ee&&!fe[r])&&!be[n]&&(ye[n]||!me[n]):!("application/xhtml+xml"!==yt||!se[t.namespaceURI]))},xe=function(t){w(n.removed,{element:t});try{t.parentNode.removeChild(t)}catch(De){try{t.outerHTML=ot}catch(De){t.remove()}}},ve=function(t,e){try{w(n.removed,{attribute:e.getAttributeNode(t),from:e})}catch(De){w(n.removed,{attribute:null,from:e})}if(e.removeAttribute(t),"is"===t&&!At[t])if(Pt||jt)try{xe(e)}catch(De){}else try{e.setAttribute(t,"")}catch(De){}},ke=function(t){var e,n;if(Zt)t="<remove></remove>"+t;else{var r=T(t,/^[\r\n\t ]+/);n=r&&r[0]}"application/xhtml+xml"===yt&&ie===re&&(t='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+t+"</body></html>");var i=st?st.createHTML(t):t;if(ie===re)try{e=(new f).parseFromString(i,yt)}catch(De){}if(!e||!e.documentElement){e=lt.createDocument(ie,"template",null);try{e.documentElement.innerHTML=ae?ot:i}catch(De){}}var s=e.body||e.documentElement;return t&&n&&s.insertBefore(a.createTextNode(n),s.childNodes[0]||null),ie===re?dt.call(e,$t?"html":"body")[0]:$t?e.documentElement:s},we=function(t){return ht.call(t.ownerDocument||t,t,h.SHOW_ELEMENT|h.SHOW_COMMENT|h.SHOW_TEXT,null,!1)},Ee=function(t){return t instanceof p&&("string"!=typeof t.nodeName||"string"!=typeof t.textContent||"function"!=typeof t.removeChild||!(t.attributes instanceof d)||"function"!=typeof t.removeAttribute||"function"!=typeof t.setAttribute||"string"!=typeof t.namespaceURI||"function"!=typeof t.insertBefore||"function"!=typeof t.hasChildNodes)},Ce=function(e){return"object"===t(c)?e instanceof c:e&&"object"===t(e)&&"number"==typeof e.nodeType&&"string"==typeof e.nodeName},Te=function(t,e,r){gt[t]&&v(gt[t],(function(t){t.call(n,e,r,he)}))},Se=function(t){var e;if(Te("beforeSanitizeElements",t,null),Ee(t))return xe(t),!0;if(B(/[\u0080-\uFFFF]/,t.nodeName))return xe(t),!0;var r=mt(t.nodeName);if(Te("uponSanitizeElement",t,{tagName:r,allowedTags:Tt}),t.hasChildNodes()&&!Ce(t.firstElementChild)&&(!Ce(t.content)||!Ce(t.content.firstElementChild))&&B(/<[/\w]/g,t.innerHTML)&&B(/<[/\w]/g,t.textContent))return xe(t),!0;if("select"===r&&B(/<template/i,t.innerHTML))return xe(t),!0;if(!Tt[r]||Nt[r]){if(!Nt[r]&&Le(r)){if(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,r))return!1;if(Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(r))return!1}if(qt&&!Gt[r]){var i=D(t)||t.parentNode,a=x(t)||t.childNodes;if(a&&i)for(var s=a.length-1;s>=0;--s)i.insertBefore(b(a[s],!0),_(t))}return xe(t),!0}return t instanceof l&&!_e(t)?(xe(t),!0):"noscript"!==r&&"noembed"!==r||!B(/<\/no(script|embed)/i,t.innerHTML)?(Ft&&3===t.nodeType&&(e=t.textContent,e=S(e,bt," "),e=S(e,_t," "),e=S(e,xt," "),t.textContent!==e&&(w(n.removed,{element:t.cloneNode()}),t.textContent=e)),Te("afterSanitizeElements",t,null),!1):(xe(t),!0)},Ae=function(t,e,n){if(zt&&("id"===e||"name"===e)&&(n in a||n in ue))return!1;if(Mt&&!Dt[e]&&B(vt,e));else if(Ot&&B(kt,e));else if(!At[e]||Dt[e]){if(!(Le(t)&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,t)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(t))&&(Bt.attributeNameCheck instanceof RegExp&&B(Bt.attributeNameCheck,e)||Bt.attributeNameCheck instanceof Function&&Bt.attributeNameCheck(e))||"is"===e&&Bt.allowCustomizedBuiltInElements&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,n)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(n))))return!1}else if(Jt[e]);else if(B(Ct,S(n,Et,"")));else if("src"!==e&&"xlink:href"!==e&&"href"!==e||"script"===t||0!==A(n,"data:")||!Kt[t])if(It&&!B(wt,S(n,Et,"")));else if(n)return!1;return!0},Le=function(t){return t.indexOf("-")>0},Be=function(e){var r,i,a,s;Te("beforeSanitizeAttributes",e,null);var o=e.attributes;if(o){var c={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:At};for(s=o.length;s--;){var l=r=o[s],h=l.name,u=l.namespaceURI;if(i="value"===h?r.value:L(r.value),a=mt(h),c.attrName=a,c.attrValue=i,c.keepAttr=!0,c.forceKeepAttr=void 0,Te("uponSanitizeAttribute",e,c),i=c.attrValue,!c.forceKeepAttr&&(ve(h,e),c.keepAttr))if(B(/\/>/i,i))ve(h,e);else{Ft&&(i=S(i,bt," "),i=S(i,_t," "),i=S(i,xt," "));var d=mt(e.nodeName);if(Ae(d,a,i)){if(!Ut||"id"!==a&&"name"!==a||(ve(h,e),i=Wt+i),st&&"object"===t(y)&&"function"==typeof y.getAttributeType)if(u);else switch(y.getAttributeType(d,a)){case"TrustedHTML":i=st.createHTML(i);break;case"TrustedScriptURL":i=st.createScriptURL(i)}try{u?e.setAttributeNS(u,h,i):e.setAttribute(h,i),k(n.removed)}catch(De){}}}}Te("afterSanitizeAttributes",e,null)}},Ne=function t(e){var n,r=we(e);for(Te("beforeSanitizeShadowDOM",e,null);n=r.nextNode();)Te("uponSanitizeShadowNode",n,null),Se(n)||(n.content instanceof s&&t(n.content),Be(n));Te("afterSanitizeShadowDOM",e,null)};return n.sanitize=function(i){var a,o,l,h,u,d=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};if((ae=!i)&&(i="\x3c!--\x3e"),"string"!=typeof i&&!Ce(i)){if("function"!=typeof i.toString)throw N("toString is not a function");if("string"!=typeof(i=i.toString()))throw N("dirty is not a string, aborting")}if(!n.isSupported){if("object"===t(e.toStaticHTML)||"function"==typeof e.toStaticHTML){if("string"==typeof i)return e.toStaticHTML(i);if(Ce(i))return e.toStaticHTML(i.outerHTML)}return i}if(Rt||pe(d),n.removed=[],"string"==typeof i&&(Ht=!1),Ht){if(i.nodeName){var p=mt(i.nodeName);if(!Tt[p]||Nt[p])throw N("root node is forbidden and cannot be sanitized in-place")}}else if(i instanceof c)1===(o=(a=ke("\x3c!----\x3e")).ownerDocument.importNode(i,!0)).nodeType&&"BODY"===o.nodeName||"HTML"===o.nodeName?a=o:a.appendChild(o);else{if(!Pt&&!Ft&&!$t&&-1===i.indexOf("<"))return st&&Yt?st.createHTML(i):i;if(!(a=ke(i)))return Pt?null:Yt?ot:""}a&&Zt&&xe(a.firstChild);for(var f=we(Ht?i:a);l=f.nextNode();)3===l.nodeType&&l===h||Se(l)||(l.content instanceof s&&Ne(l.content),Be(l),h=l);if(h=null,Ht)return i;if(Pt){if(jt)for(u=ut.call(a.ownerDocument);a.firstChild;)u.appendChild(a.firstChild);else u=a;return At.shadowroot&&(u=pt.call(r,u,!0)),u}var g=$t?a.outerHTML:a.innerHTML;return $t&&Tt["!doctype"]&&a.ownerDocument&&a.ownerDocument.doctype&&a.ownerDocument.doctype.name&&B(nt,a.ownerDocument.doctype.name)&&(g="<!DOCTYPE "+a.ownerDocument.doctype.name+">\n"+g),Ft&&(g=S(g,bt," "),g=S(g,_t," "),g=S(g,xt," ")),st&&Yt?st.createHTML(g):g},n.setConfig=function(t){pe(t),Rt=!0},n.clearConfig=function(){he=null,Rt=!1},n.isValidAttribute=function(t,e,n){he||pe({});var r=mt(t),i=mt(e);return Ae(r,i,n)},n.addHook=function(t,e){"function"==typeof e&&(gt[t]=gt[t]||[],w(gt[t],e))},n.removeHook=function(t){if(gt[t])return k(gt[t])},n.removeHooks=function(t){gt[t]&&(gt[t]=[])},n.removeAllHooks=function(){gt={}},n}return at()}()},6432:(t,e,n)=>{"use strict";n.d(e,{a:()=>Mn,b:()=>Fs,c:()=>Yt,d:()=>Dn,e:()=>Pt,f:()=>Ys,g:()=>ar,h:()=>mc,i:()=>hs,j:()=>Pr,k:()=>Yr,l:()=>Nt,m:()=>Dr,n:()=>Ft,o:()=>dp,p:()=>bo,s:()=>pr});const r=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];var r=Array.from("string"==typeof t?[t]:t);r[r.length-1]=r[r.length-1].replace(/\r?\n([\t ]*)$/,"");var i=r.reduce((function(t,e){var n=e.match(/\n([\t ]+|(?!\s).)/g);return n?t.concat(n.map((function(t){var e,n;return null!==(n=null===(e=t.match(/[\t ]/g))||void 0===e?void 0:e.length)&&void 0!==n?n:0}))):t}),[]);if(i.length){var a=new RegExp("\n[\t ]{"+Math.min.apply(Math,i)+"}","g");r=r.map((function(t){return t.replace(a,"\n")}))}r[0]=r[0].replace(/^\r?\n/,"");var s=r[0];return e.forEach((function(t,e){var n=s.match(/(?:^|\n)( *)$/),i=n?n[1]:"",a=t;"string"==typeof t&&t.includes("\n")&&(a=String(t).split("\n").map((function(t,e){return 0===e?t:""+i+t})).join("\n")),s+=a+r[e+1]})),s};var i=n(7484),a=n.n(i),s=n(7967),o=n(9373),l=n(7856),h=n.n(l),u=n(1610),d=n(1691);const p=(t,e)=>{const n=u.Z.parse(t);for(const r in e)n[r]=d.Z.channel.clamp[r](e[r]);return u.Z.stringify(n)},f=(t,e)=>{const n=u.Z.parse(t),r={};for(const i in e)e[i]&&(r[i]=n[i]+e[i]);return p(t,r)};var g=n(1883);const y=(t,e,n=0,r=1)=>{if("number"!=typeof t)return p(t,{a:e});const i=g.Z.set({r:d.Z.channel.clamp.r(t),g:d.Z.channel.clamp.g(e),b:d.Z.channel.clamp.b(n),a:d.Z.channel.clamp.a(r)});return u.Z.stringify(i)},m=(t,e,n=50)=>{const{r:r,g:i,b:a,a:s}=u.Z.parse(t),{r:o,g:c,b:l,a:h}=u.Z.parse(e),d=n/100,p=2*d-1,f=s-h,g=((p*f==-1?p:(p+f)/(1+p*f))+1)/2,m=1-g;return y(r*g+o*m,i*g+c*m,a*g+l*m,s*d+h*(1-d))},b=(t,e=100)=>{const n=u.Z.parse(t);return n.r=255-n.r,n.g=255-n.g,n.b=255-n.b,m(n,t,e)};var _=n(7201),x=n(5920),v=n(2454),k="comm",w="rule",E="decl",C=Math.abs,T=String.fromCharCode;Object.assign;function S(t){return t.trim()}function A(t,e,n){return t.replace(e,n)}function L(t,e){return t.indexOf(e)}function B(t,e){return 0|t.charCodeAt(e)}function N(t,e,n){return t.slice(e,n)}function D(t){return t.length}function O(t){return t.length}function M(t,e){return e.push(t),t}function I(t,e){for(var n="",r=O(t),i=0;i<r;i++)n+=e(t[i],i,t,e)||"";return n}function F(t,e,n,r){switch(t.type){case"@import":case E:return t.return=t.return||t.value;case k:return"";case"@keyframes":return t.return=t.value+"{"+I(t.children,r)+"}";case w:t.value=t.props.join(",")}return D(n=I(t.children,r))?t.return=t.value+"{"+n+"}":""}var $=1,R=1,Z=0,P=0,j=0,Y="";function z(t,e,n,r,i,a,s){return{value:t,root:e,parent:n,type:r,props:i,children:a,line:$,column:R,length:s,return:""}}function U(){return j=P>0?B(Y,--P):0,R--,10===j&&(R=1,$--),j}function W(){return j=P<Z?B(Y,P++):0,R++,10===j&&(R=1,$++),j}function q(){return B(Y,P)}function H(){return P}function V(t,e){return N(Y,t,e)}function G(t){switch(t){case 0:case 9:case 10:case 13:case 32:return 5;case 33:case 43:case 44:case 47:case 62:case 64:case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function X(t){return $=R=1,Z=D(Y=t),P=0,[]}function K(t){return Y="",t}function Q(t){return S(V(P-1,et(91===t?t+2:40===t?t+1:t)))}function J(t){for(;(j=q())&&j<33;)W();return G(t)>2||G(j)>3?"":" "}function tt(t,e){for(;--e&&W()&&!(j<48||j>102||j>57&&j<65||j>70&&j<97););return V(t,H()+(e<6&&32==q()&&32==W()))}function et(t){for(;W();)switch(j){case t:return P;case 34:case 39:34!==t&&39!==t&&et(j);break;case 40:41===t&&et(t);break;case 92:W()}return P}function nt(t,e){for(;W()&&t+j!==57&&(t+j!==84||47!==q()););return"/*"+V(e,P-1)+"*"+T(47===t?t:W())}function rt(t){for(;!G(q());)W();return V(t,P)}function it(t){return K(at("",null,null,null,[""],t=X(t),0,[0],t))}function at(t,e,n,r,i,a,s,o,c){for(var l=0,h=0,u=s,d=0,p=0,f=0,g=1,y=1,m=1,b=0,_="",x=i,v=a,k=r,w=_;y;)switch(f=b,b=W()){case 40:if(108!=f&&58==B(w,u-1)){-1!=L(w+=A(Q(b),"&","&\f"),"&\f")&&(m=-1);break}case 34:case 39:case 91:w+=Q(b);break;case 9:case 10:case 13:case 32:w+=J(f);break;case 92:w+=tt(H()-1,7);continue;case 47:switch(q()){case 42:case 47:M(ot(nt(W(),H()),e,n),c);break;default:w+="/"}break;case 123*g:o[l++]=D(w)*m;case 125*g:case 59:case 0:switch(b){case 0:case 125:y=0;case 59+h:p>0&&D(w)-u&&M(p>32?ct(w+";",r,n,u-1):ct(A(w," ","")+";",r,n,u-2),c);break;case 59:w+=";";default:if(M(k=st(w,e,n,l,h,i,o,_,x=[],v=[],u),a),123===b)if(0===h)at(w,e,k,k,x,a,u,o,v);else switch(99===d&&110===B(w,3)?100:d){case 100:case 109:case 115:at(t,k,k,r&&M(st(t,k,k,0,0,i,o,_,i,x=[],u),v),i,v,u,o,r?x:v);break;default:at(w,k,k,k,[""],v,0,o,v)}}l=h=p=0,g=m=1,_=w="",u=s;break;case 58:u=1+D(w),p=f;default:if(g<1)if(123==b)--g;else if(125==b&&0==g++&&125==U())continue;switch(w+=T(b),b*g){case 38:m=h>0?1:(w+="\f",-1);break;case 44:o[l++]=(D(w)-1)*m,m=1;break;case 64:45===q()&&(w+=Q(W())),d=q(),h=u=D(_=w+=rt(H())),b++;break;case 45:45===f&&2==D(w)&&(g=0)}}return a}function st(t,e,n,r,i,a,s,o,c,l,h){for(var u=i-1,d=0===i?a:[""],p=O(d),f=0,g=0,y=0;f<r;++f)for(var m=0,b=N(t,u+1,u=C(g=s[f])),_=t;m<p;++m)(_=S(g>0?d[m]+" "+b:A(b,/&\f/g,d[m])))&&(c[y++]=_);return z(t,e,n,0===i?w:o,c,l,h)}function ot(t,e,n){return z(t,e,n,k,T(j),N(t,2,-2),0)}function ct(t,e,n,r){return z(t,e,n,E,N(t,0,r),N(t,r+1,-1),r)}var lt=n(277),ht=n(5625),ut=n(9354);const dt=[];for(let c=0;c<256;++c)dt.push((c+256).toString(16).slice(1));function pt(t,e=0){return(dt[t[e+0]]+dt[t[e+1]]+dt[t[e+2]]+dt[t[e+3]]+"-"+dt[t[e+4]]+dt[t[e+5]]+"-"+dt[t[e+6]]+dt[t[e+7]]+"-"+dt[t[e+8]]+dt[t[e+9]]+"-"+dt[t[e+10]]+dt[t[e+11]]+dt[t[e+12]]+dt[t[e+13]]+dt[t[e+14]]+dt[t[e+15]]).toLowerCase()}const ft=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000)$/i;const gt=function(t){return"string"==typeof t&&ft.test(t)};const yt=function(t){if(!gt(t))throw TypeError("Invalid UUID");let e;const n=new Uint8Array(16);return n[0]=(e=parseInt(t.slice(0,8),16))>>>24,n[1]=e>>>16&255,n[2]=e>>>8&255,n[3]=255&e,n[4]=(e=parseInt(t.slice(9,13),16))>>>8,n[5]=255&e,n[6]=(e=parseInt(t.slice(14,18),16))>>>8,n[7]=255&e,n[8]=(e=parseInt(t.slice(19,23),16))>>>8,n[9]=255&e,n[10]=(e=parseInt(t.slice(24,36),16))/1099511627776&255,n[11]=e/4294967296&255,n[12]=e>>>24&255,n[13]=e>>>16&255,n[14]=e>>>8&255,n[15]=255&e,n};function mt(t,e,n,r){switch(t){case 0:return e&n^~e&r;case 1:case 3:return e^n^r;case 2:return e&n^e&r^n&r}}function bt(t,e){return t<<e|t>>>32-e}const _t=function(t){const e=[1518500249,1859775393,2400959708,3395469782],n=[1732584193,4023233417,2562383102,271733878,3285377520];if("string"==typeof t){const e=unescape(encodeURIComponent(t));t=[];for(let n=0;n<e.length;++n)t.push(e.charCodeAt(n))}else Array.isArray(t)||(t=Array.prototype.slice.call(t));t.push(128);const r=t.length/4+2,i=Math.ceil(r/16),a=new Array(i);for(let s=0;s<i;++s){const e=new Uint32Array(16);for(let n=0;n<16;++n)e[n]=t[64*s+4*n]<<24|t[64*s+4*n+1]<<16|t[64*s+4*n+2]<<8|t[64*s+4*n+3];a[s]=e}a[i-1][14]=8*(t.length-1)/Math.pow(2,32),a[i-1][14]=Math.floor(a[i-1][14]),a[i-1][15]=8*(t.length-1)&4294967295;for(let s=0;s<i;++s){const t=new Uint32Array(80);for(let e=0;e<16;++e)t[e]=a[s][e];for(let e=16;e<80;++e)t[e]=bt(t[e-3]^t[e-8]^t[e-14]^t[e-16],1);let r=n[0],i=n[1],o=n[2],c=n[3],l=n[4];for(let n=0;n<80;++n){const a=Math.floor(n/20),s=bt(r,5)+mt(a,i,o,c)+l+e[a]+t[n]>>>0;l=c,c=o,o=bt(i,30)>>>0,i=r,r=s}n[0]=n[0]+r>>>0,n[1]=n[1]+i>>>0,n[2]=n[2]+o>>>0,n[3]=n[3]+c>>>0,n[4]=n[4]+l>>>0}return[n[0]>>24&255,n[0]>>16&255,n[0]>>8&255,255&n[0],n[1]>>24&255,n[1]>>16&255,n[1]>>8&255,255&n[1],n[2]>>24&255,n[2]>>16&255,n[2]>>8&255,255&n[2],n[3]>>24&255,n[3]>>16&255,n[3]>>8&255,255&n[3],n[4]>>24&255,n[4]>>16&255,n[4]>>8&255,255&n[4]]},xt=function(t,e,n){function r(t,r,i,a){var s;if("string"==typeof t&&(t=function(t){t=unescape(encodeURIComponent(t));const e=[];for(let n=0;n<t.length;++n)e.push(t.charCodeAt(n));return e}(t)),"string"==typeof r&&(r=yt(r)),16!==(null===(s=r)||void 0===s?void 0:s.length))throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");let o=new Uint8Array(16+t.length);if(o.set(r),o.set(t,r.length),o=n(o),o[6]=15&o[6]|e,o[8]=63&o[8]|128,i){a=a||0;for(let t=0;t<16;++t)i[a+t]=o[t];return i}return pt(o)}try{r.name=t}catch(i){}return r.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",r.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8",r}("v5",80,_t),vt=xt;n(1518),n(6225);var kt=n(3349),wt=(n(3352),n(2930),n(9542)),Et=n.n(wt),Ct=n(285),Tt=n.n(Ct),St=n(8734),At=n.n(St),Lt=n(9697);const Bt={trace:0,debug:1,info:2,warn:3,error:4,fatal:5},Nt={trace:(...t)=>{},debug:(...t)=>{},info:(...t)=>{},warn:(...t)=>{},error:(...t)=>{},fatal:(...t)=>{}},Dt=function(t="fatal"){let e=Bt.fatal;"string"==typeof t?(t=t.toLowerCase())in Bt&&(e=Bt[t]):"number"==typeof t&&(e=t),Nt.trace=()=>{},Nt.debug=()=>{},Nt.info=()=>{},Nt.warn=()=>{},Nt.error=()=>{},Nt.fatal=()=>{},e<=Bt.fatal&&(Nt.fatal=console.error?console.error.bind(console,Ot("FATAL"),"color: orange"):console.log.bind(console,"\x1b[35m",Ot("FATAL"))),e<=Bt.error&&(Nt.error=console.error?console.error.bind(console,Ot("ERROR"),"color: orange"):console.log.bind(console,"\x1b[31m",Ot("ERROR"))),e<=Bt.warn&&(Nt.warn=console.warn?console.warn.bind(console,Ot("WARN"),"color: orange"):console.log.bind(console,"\x1b[33m",Ot("WARN"))),e<=Bt.info&&(Nt.info=console.info?console.info.bind(console,Ot("INFO"),"color: lightblue"):console.log.bind(console,"\x1b[34m",Ot("INFO"))),e<=Bt.debug&&(Nt.debug=console.debug?console.debug.bind(console,Ot("DEBUG"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("DEBUG"))),e<=Bt.trace&&(Nt.trace=console.debug?console.debug.bind(console,Ot("TRACE"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("TRACE")))},Ot=t=>`%c${a()().format("ss.SSS")} : ${t} : `,Mt=t=>h().sanitize(t),It=(t,e)=>{var n;if(!1!==(null==(n=e.flowchart)?void 0:n.htmlLabels)){const n=e.securityLevel;"antiscript"===n||"strict"===n?t=Mt(t):"loose"!==n&&(t=(t=(t=Zt(t)).replace(/</g,"&lt;").replace(/>/g,"&gt;")).replace(/=/g,"&equals;"),t=Rt(t))}return t},Ft=(t,e)=>t?t=e.dompurifyConfig?h().sanitize(It(t,e),e.dompurifyConfig).toString():h().sanitize(It(t,e),{FORBID_TAGS:["style"]}).toString():t,$t=/<br\s*\/?>/gi,Rt=t=>t.replace(/#br#/g,"<br/>"),Zt=t=>t.replace($t,"#br#"),Pt=t=>!1!==t&&!["false","null","0"].includes(String(t).trim().toLowerCase()),jt=function(t){let e=t;if(t.split("~").length-1>=2){let t=e;do{e=t,t=e.replace(/~([^\s,:;]+)~/,"<$1>")}while(t!=e);return jt(t)}return e},Yt={getRows:t=>{if(!t)return[""];return Zt(t).replace(/\\n/g,"#br#").split("#br#")},sanitizeText:Ft,sanitizeTextOrArray:(t,e)=>"string"==typeof t?Ft(t,e):t.flat().map((t=>Ft(t,e))),hasBreaks:t=>$t.test(t),splitBreaks:t=>t.split($t),lineBreakRegex:$t,removeScript:Mt,getUrl:t=>{let e="";return t&&(e=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,e=e.replaceAll(/\(/g,"\\("),e=e.replaceAll(/\)/g,"\\)")),e},evaluate:Pt},zt=(t,e)=>f(t,e?{s:-40,l:10}:{s:-40,l:-10}),Ut="#ffffff",Wt="#f2f2f2";class qt{constructor(){this.primaryColor="#eee",this.contrast="#707070",this.secondaryColor=(0,x.Z)(this.contrast,55),this.background="#ffffff",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#eee",this.secondBkg="calculated",this.lineColor="#666",this.border1="#999",this.border2="calculated",this.note="#ffa",this.text="#333",this.critical="#d42",this.done="#bbb",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="white",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="calculated",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="white",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBkgColor="calculated",this.critBorderColor="calculated",this.todayLineColor="calculated",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.secondBkg=(0,x.Z)(this.contrast,55),this.border2=this.contrast,this.cScale0=this.cScale0||"#555",this.cScale1=this.cScale1||"#F4F4F4",this.cScale2=this.cScale2||"#555",this.cScale3=this.cScale3||"#BBB",this.cScale4=this.cScale4||"#777",this.cScale5=this.cScale5||"#999",this.cScale6=this.cScale6||"#DDD",this.cScale7=this.cScale7||"#FFF",this.cScale8=this.cScale8||"#DDD",this.cScale9=this.cScale9||"#BBB",this.cScale10=this.cScale10||"#999",this.cScale11=this.cScale11||"#777";for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this.darkMode?this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10):this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],10);this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor),this.cScaleLabel0=this.cScaleLabel0||this.cScale1,this.cScaleLabel2=this.cScaleLabel2||this.cScale1;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.text,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.actorTextColor=this.text,this.actorLineColor=this.lineColor,this.signalColor=this.text,this.signalTextColor=this.text,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.text,this.loopTextColor=this.text,this.noteBorderColor="#999",this.noteBkgColor="#666",this.noteTextColor="#fff",this.sectionBkgColor=(0,x.Z)(this.contrast,30),this.sectionBkgColor2=(0,x.Z)(this.contrast,30),this.taskBorderColor=(0,_.Z)(this.contrast,10),this.taskBkgColor=this.contrast,this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor=this.text,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.gridColor=(0,x.Z)(this.border1,30),this.doneTaskBkgColor=this.done,this.doneTaskBorderColor=this.lineColor,this.critBkgColor=this.critical,this.critBorderColor=(0,_.Z)(this.critBkgColor,10),this.todayLineColor=this.critBkgColor,this.transitionColor=this.transitionColor||"#000",this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f4f4f4",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.stateBorder=this.stateBorder||"#000",this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#222",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pie12=this.pie0,this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,_.Z)(this.pie1,25)||this.primaryColor,this.git1=this.pie2||this.secondaryColor,this.git2=this.pie3||this.tertiaryColor,this.git3=this.pie4||f(this.primaryColor,{h:-30}),this.git4=this.pie5||f(this.primaryColor,{h:-60}),this.git5=this.pie6||f(this.primaryColor,{h:-90}),this.git6=this.pie7||f(this.primaryColor,{h:60}),this.git7=this.pie8||f(this.primaryColor,{h:120}),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||this.labelTextColor,this.gitBranchLabel0=this.branchLabelColor,this.gitBranchLabel1="white",this.gitBranchLabel2=this.branchLabelColor,this.gitBranchLabel3="white",this.gitBranchLabel4=this.branchLabelColor,this.gitBranchLabel5=this.branchLabelColor,this.gitBranchLabel6=this.branchLabelColor,this.gitBranchLabel7=this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}}const Ht={base:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#fff4dd",this.noteBkgColor="#fff5ad",this.noteTextColor="#333",this.THEME_COLOR_LIMIT=12,this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px"}updateColors(){if(this.primaryTextColor=this.primaryTextColor||(this.darkMode?"#eee":"#333"),this.secondaryColor=this.secondaryColor||f(this.primaryColor,{h:-120}),this.tertiaryColor=this.tertiaryColor||f(this.primaryColor,{h:180,l:5}),this.primaryBorderColor=this.primaryBorderColor||zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=this.secondaryBorderColor||zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=this.tertiaryBorderColor||zt(this.tertiaryColor,this.darkMode),this.noteBorderColor=this.noteBorderColor||zt(this.noteBkgColor,this.darkMode),this.noteBkgColor=this.noteBkgColor||"#fff5ad",this.noteTextColor=this.noteTextColor||"#333",this.secondaryTextColor=this.secondaryTextColor||b(this.secondaryColor),this.tertiaryTextColor=this.tertiaryTextColor||b(this.tertiaryColor),this.lineColor=this.lineColor||b(this.background),this.textColor=this.textColor||this.primaryTextColor,this.nodeBkg=this.nodeBkg||this.primaryColor,this.mainBkg=this.mainBkg||this.primaryColor,this.nodeBorder=this.nodeBorder||this.primaryBorderColor,this.clusterBkg=this.clusterBkg||this.tertiaryColor,this.clusterBorder=this.clusterBorder||this.tertiaryBorderColor,this.defaultLinkColor=this.defaultLinkColor||this.lineColor,this.titleColor=this.titleColor||this.tertiaryTextColor,this.edgeLabelBackground=this.edgeLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.nodeTextColor=this.nodeTextColor||this.primaryTextColor,this.actorBorder=this.actorBorder||this.primaryBorderColor,this.actorBkg=this.actorBkg||this.mainBkg,this.actorTextColor=this.actorTextColor||this.primaryTextColor,this.actorLineColor=this.actorLineColor||"grey",this.labelBoxBkgColor=this.labelBoxBkgColor||this.actorBkg,this.signalColor=this.signalColor||this.textColor,this.signalTextColor=this.signalTextColor||this.textColor,this.labelBoxBorderColor=this.labelBoxBorderColor||this.actorBorder,this.labelTextColor=this.labelTextColor||this.actorTextColor,this.loopTextColor=this.loopTextColor||this.actorTextColor,this.activationBorderColor=this.activationBorderColor||(0,_.Z)(this.secondaryColor,10),this.activationBkgColor=this.activationBkgColor||this.secondaryColor,this.sequenceNumberColor=this.sequenceNumberColor||b(this.lineColor),this.sectionBkgColor=this.sectionBkgColor||this.tertiaryColor,this.altSectionBkgColor=this.altSectionBkgColor||"white",this.sectionBkgColor=this.sectionBkgColor||this.secondaryColor,this.sectionBkgColor2=this.sectionBkgColor2||this.primaryColor,this.excludeBkgColor=this.excludeBkgColor||"#eeeeee",this.taskBorderColor=this.taskBorderColor||this.primaryBorderColor,this.taskBkgColor=this.taskBkgColor||this.primaryColor,this.activeTaskBorderColor=this.activeTaskBorderColor||this.primaryColor,this.activeTaskBkgColor=this.activeTaskBkgColor||(0,x.Z)(this.primaryColor,23),this.gridColor=this.gridColor||"lightgrey",this.doneTaskBkgColor=this.doneTaskBkgColor||"lightgrey",this.doneTaskBorderColor=this.doneTaskBorderColor||"grey",this.critBorderColor=this.critBorderColor||"#ff8888",this.critBkgColor=this.critBkgColor||"red",this.todayLineColor=this.todayLineColor||"red",this.taskTextColor=this.taskTextColor||this.textColor,this.taskTextOutsideColor=this.taskTextOutsideColor||this.textColor,this.taskTextLightColor=this.taskTextLightColor||this.textColor,this.taskTextColor=this.taskTextColor||this.primaryTextColor,this.taskTextDarkColor=this.taskTextDarkColor||this.textColor,this.taskTextClickableColor=this.taskTextClickableColor||"#003163",this.personBorder=this.personBorder||this.primaryBorderColor,this.personBkg=this.personBkg||this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||this.tertiaryColor,this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.specialStateColor=this.lineColor,this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210,l:150}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.darkMode)for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],75);else for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],25);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleInv"+e]=this["cScaleInv"+e]||b(this["cScale"+e]);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this.darkMode?this["cScalePeer"+e]=this["cScalePeer"+e]||(0,x.Z)(this["cScale"+e],10):this["cScalePeer"+e]=this["cScalePeer"+e]||(0,_.Z)(this["cScale"+e],10);this.scaleLabelColor=this.scaleLabelColor||this.labelTextColor;for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleLabel"+e]=this["cScaleLabel"+e]||this.scaleLabelColor;const t=this.darkMode?-4:-1;for(let e=0;e<5;e++)this["surface"+e]=this["surface"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(5+3*e)}),this["surfacePeer"+e]=this["surfacePeer"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(8+3*e)});this.classText=this.classText||this.textColor,this.fillType0=this.fillType0||this.primaryColor,this.fillType1=this.fillType1||this.secondaryColor,this.fillType2=this.fillType2||f(this.primaryColor,{h:64}),this.fillType3=this.fillType3||f(this.secondaryColor,{h:64}),this.fillType4=this.fillType4||f(this.primaryColor,{h:-64}),this.fillType5=this.fillType5||f(this.secondaryColor,{h:-64}),this.fillType6=this.fillType6||f(this.primaryColor,{h:128}),this.fillType7=this.fillType7||f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-10}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-10}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-20}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-20}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-10}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||(this.darkMode?"black":this.labelTextColor),this.gitBranchLabel0=this.gitBranchLabel0||this.branchLabelColor,this.gitBranchLabel1=this.gitBranchLabel1||this.branchLabelColor,this.gitBranchLabel2=this.gitBranchLabel2||this.branchLabelColor,this.gitBranchLabel3=this.gitBranchLabel3||this.branchLabelColor,this.gitBranchLabel4=this.gitBranchLabel4||this.branchLabelColor,this.gitBranchLabel5=this.gitBranchLabel5||this.branchLabelColor,this.gitBranchLabel6=this.gitBranchLabel6||this.branchLabelColor,this.gitBranchLabel7=this.gitBranchLabel7||this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},dark:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#333",this.primaryColor="#1f2020",this.secondaryColor=(0,x.Z)(this.primaryColor,16),this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=b(this.background),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#1f2020",this.secondBkg="calculated",this.mainContrastColor="lightgrey",this.darkTextColor=(0,x.Z)(b("#323D47"),10),this.lineColor="calculated",this.border1="#81B1DB",this.border2=y(255,255,255,.25),this.arrowheadColor="calculated",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#181818",this.textColor="#ccc",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#F9FFFE",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="calculated",this.activationBkgColor="calculated",this.sequenceNumberColor="black",this.sectionBkgColor=(0,_.Z)("#EAE8D9",30),this.altSectionBkgColor="calculated",this.sectionBkgColor2="#EAE8D9",this.taskBorderColor=y(255,255,255,70),this.taskBkgColor="calculated",this.taskTextColor="calculated",this.taskTextLightColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor=y(255,255,255,50),this.activeTaskBkgColor="#81B1DB",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="grey",this.critBorderColor="#E83737",this.critBkgColor="#E83737",this.taskTextDarkColor="calculated",this.todayLineColor="#DB5757",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="calculated",this.errorBkgColor="#a44141",this.errorTextColor="#ddd"}updateColors(){this.secondBkg=(0,x.Z)(this.mainBkg,16),this.lineColor=this.mainContrastColor,this.arrowheadColor=this.mainContrastColor,this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.edgeLabelBackground=(0,x.Z)(this.labelBackground,25),this.actorBorder=this.border1,this.actorBkg=this.mainBkg,this.actorTextColor=this.mainContrastColor,this.actorLineColor=this.mainContrastColor,this.signalColor=this.mainContrastColor,this.signalTextColor=this.mainContrastColor,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.mainContrastColor,this.loopTextColor=this.mainContrastColor,this.noteBorderColor=this.secondaryBorderColor,this.noteBkgColor=this.secondBkg,this.noteTextColor=this.secondaryTextColor,this.activationBorderColor=this.border1,this.activationBkgColor=this.secondBkg,this.altSectionBkgColor=this.background,this.taskBkgColor=(0,x.Z)(this.mainBkg,23),this.taskTextColor=this.darkTextColor,this.taskTextLightColor=this.mainContrastColor,this.taskTextOutsideColor=this.taskTextLightColor,this.gridColor=this.mainContrastColor,this.doneTaskBkgColor=this.mainContrastColor,this.taskTextDarkColor=this.darkTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#555",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#f4f4f4",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.cScale1=this.cScale1||"#0b0000",this.cScale2=this.cScale2||"#4d1037",this.cScale3=this.cScale3||"#3f5258",this.cScale4=this.cScale4||"#4f2f1b",this.cScale5=this.cScale5||"#6e0a0a",this.cScale6=this.cScale6||"#3b0048",this.cScale7=this.cScale7||"#995a01",this.cScale8=this.cScale8||"#154706",this.cScale9=this.cScale9||"#161722",this.cScale10=this.cScale10||"#00296f",this.cScale11=this.cScale11||"#01629c",this.cScale12=this.cScale12||"#010029",this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10);for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-10)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-7)});this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.classText=this.primaryTextColor,this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,x.Z)(this.secondaryColor,20),this.git1=(0,x.Z)(this.pie2||this.secondaryColor,20),this.git2=(0,x.Z)(this.pie3||this.tertiaryColor,20),this.git3=(0,x.Z)(this.pie4||f(this.primaryColor,{h:-30}),20),this.git4=(0,x.Z)(this.pie5||f(this.primaryColor,{h:-60}),20),this.git5=(0,x.Z)(this.pie6||f(this.primaryColor,{h:-90}),10),this.git6=(0,x.Z)(this.pie7||f(this.primaryColor,{h:60}),10),this.git7=(0,x.Z)(this.pie8||f(this.primaryColor,{h:120}),20),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||(0,x.Z)(this.background,12),this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||(0,x.Z)(this.background,2)}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},default:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#ECECFF",this.secondaryColor=f(this.primaryColor,{h:120}),this.secondaryColor="#ffffde",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.background="white",this.mainBkg="#ECECFF",this.secondBkg="#ffffde",this.lineColor="#333333",this.border1="#9370DB",this.border2="#aaaa33",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#e8e8e8",this.textColor="#333",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="calculated",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="calculated",this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor="calculated",this.taskTextOutsideColor=this.taskTextDarkColor,this.taskTextClickableColor="calculated",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBorderColor="calculated",this.critBkgColor="calculated",this.todayLineColor="calculated",this.sectionBkgColor=y(102,102,255,.49),this.altSectionBkgColor="white",this.sectionBkgColor2="#fff400",this.taskBorderColor="#534fbc",this.taskBkgColor="#8a90dd",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="#534fbc",this.activeTaskBkgColor="#bfc7ff",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222",this.updateColors()}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,l:-(7+5*t)});if(this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor,"calculated"!==this.labelTextColor){this.cScaleLabel0=this.cScaleLabel0||b(this.labelTextColor),this.cScaleLabel3=this.cScaleLabel3||b(this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.labelTextColor}this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.textColor,this.edgeLabelBackground=this.labelBackground,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.signalColor=this.textColor,this.signalTextColor=this.textColor,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||f(this.tertiaryColor,{l:-40}),this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-20}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-20}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-40}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:-40}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-40}),this.pie11=this.pie11||f(this.primaryColor,{h:-90,l:-40}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-30}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.labelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||(0,_.Z)(b(this.git0),25),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.gitBranchLabel0=this.gitBranchLabel0||b(this.labelTextColor),this.gitBranchLabel1=this.gitBranchLabel1||this.labelTextColor,this.gitBranchLabel2=this.gitBranchLabel2||this.labelTextColor,this.gitBranchLabel3=this.gitBranchLabel3||b(this.labelTextColor),this.gitBranchLabel4=this.gitBranchLabel4||this.labelTextColor,this.gitBranchLabel5=this.gitBranchLabel5||this.labelTextColor,this.gitBranchLabel6=this.gitBranchLabel6||this.labelTextColor,this.gitBranchLabel7=this.gitBranchLabel7||this.labelTextColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},forest:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#cde498",this.secondaryColor="#cdffb2",this.background="white",this.mainBkg="#cde498",this.secondBkg="#cdffb2",this.lineColor="green",this.border1="#13540c",this.border2="#6eaa49",this.arrowheadColor="green",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.tertiaryColor=(0,x.Z)("#cde498",10),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.primaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#333",this.edgeLabelBackground="#e8e8e8",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="#333",this.signalTextColor="#333",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="#326932",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="#6eaa49",this.altSectionBkgColor="white",this.sectionBkgColor2="#6eaa49",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="#487e3a",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.actorBorder=(0,_.Z)(this.mainBkg,20),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskBorderColor=this.border1,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-30}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{h:40,l:-40}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-50}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-50}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-50}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},neutral:{getThemeVariables:t=>{const e=new qt;return e.calculate(t),e}}},Vt={theme:"default",themeVariables:Ht.default.getThemeVariables(),themeCSS:void 0,maxTextSize:5e4,darkMode:!1,fontFamily:'"trebuchet ms", verdana, arial, sans-serif;',logLevel:5,securityLevel:"strict",startOnLoad:!0,arrowMarkerAbsolute:!1,secure:["secure","securityLevel","startOnLoad","maxTextSize"],deterministicIds:!1,deterministicIDSeed:void 0,flowchart:{titleTopMargin:25,diagramPadding:8,htmlLabels:!0,nodeSpacing:50,rankSpacing:50,curve:"basis",padding:15,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},sequence:{hideUnusedParticipants:!1,activationWidth:10,diagramMarginX:50,diagramMarginY:10,actorMargin:50,width:150,height:65,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",mirrorActors:!0,forceMenus:!1,bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,showSequenceNumbers:!1,actorFontSize:14,actorFontFamily:'"Open Sans", sans-serif',actorFontWeight:400,noteFontSize:14,noteFontFamily:'"trebuchet ms", verdana, arial, sans-serif',noteFontWeight:400,noteAlign:"center",messageFontSize:16,messageFontFamily:'"trebuchet ms", verdana, arial, sans-serif',messageFontWeight:400,wrap:!1,wrapPadding:10,labelBoxWidth:50,labelBoxHeight:20,messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},noteFont:function(){return{fontFamily:this.noteFontFamily,fontSize:this.noteFontSize,fontWeight:this.noteFontWeight}},actorFont:function(){return{fontFamily:this.actorFontFamily,fontSize:this.actorFontSize,fontWeight:this.actorFontWeight}}},gantt:{titleTopMargin:25,barHeight:20,barGap:4,topPadding:50,rightPadding:75,leftPadding:75,gridLineStartPadding:35,fontSize:11,sectionFontSize:11,numberSectionStyles:4,axisFormat:"%Y-%m-%d",tickInterval:void 0,useMaxWidth:!0,topAxis:!1,useWidth:void 0},journey:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"]},timeline:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"],disableMulticolor:!1},class:{titleTopMargin:25,arrowMarkerAbsolute:!1,dividerMargin:10,padding:5,textHeight:10,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},state:{titleTopMargin:25,dividerMargin:10,sizeUnit:5,padding:8,textHeight:10,titleShift:-15,noteMargin:10,forkWidth:70,forkHeight:7,miniPadding:2,fontSizeFactor:5.02,fontSize:24,labelHeight:16,edgeLengthFactor:"20",compositTitleSize:35,radius:5,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},er:{titleTopMargin:25,diagramPadding:20,layoutDirection:"TB",minEntityWidth:100,minEntityHeight:75,entityPadding:15,stroke:"gray",fill:"honeydew",fontSize:12,useMaxWidth:!0},pie:{useWidth:void 0,useMaxWidth:!0},requirement:{useWidth:void 0,useMaxWidth:!0,rect_fill:"#f9f9f9",text_color:"#333",rect_border_size:"0.5px",rect_border_color:"#bbb",rect_min_width:200,rect_min_height:200,fontSize:14,rect_padding:10,line_height:20},gitGraph:{titleTopMargin:25,diagramPadding:8,nodeLabel:{width:75,height:100,x:-25,y:0},mainBranchName:"main",mainBranchOrder:0,showCommitLabel:!0,showBranches:!0,rotateCommitLabel:!0},c4:{useWidth:void 0,diagramMarginX:50,diagramMarginY:10,c4ShapeMargin:50,c4ShapePadding:20,width:216,height:60,boxMargin:10,useMaxWidth:!0,c4ShapeInRow:4,nextLinePaddingX:0,c4BoundaryInRow:2,personFontSize:14,personFontFamily:'"Open Sans", sans-serif',personFontWeight:"normal",external_personFontSize:14,external_personFontFamily:'"Open Sans", sans-serif',external_personFontWeight:"normal",systemFontSize:14,systemFontFamily:'"Open Sans", sans-serif',systemFontWeight:"normal",external_systemFontSize:14,external_systemFontFamily:'"Open Sans", sans-serif',external_systemFontWeight:"normal",system_dbFontSize:14,system_dbFontFamily:'"Open Sans", sans-serif',system_dbFontWeight:"normal",external_system_dbFontSize:14,external_system_dbFontFamily:'"Open Sans", sans-serif',external_system_dbFontWeight:"normal",system_queueFontSize:14,system_queueFontFamily:'"Open Sans", sans-serif',system_queueFontWeight:"normal",external_system_queueFontSize:14,external_system_queueFontFamily:'"Open Sans", sans-serif',external_system_queueFontWeight:"normal",boundaryFontSize:14,boundaryFontFamily:'"Open Sans", sans-serif',boundaryFontWeight:"normal",messageFontSize:12,messageFontFamily:'"Open Sans", sans-serif',messageFontWeight:"normal",containerFontSize:14,containerFontFamily:'"Open Sans", sans-serif',containerFontWeight:"normal",external_containerFontSize:14,external_containerFontFamily:'"Open Sans", sans-serif',external_containerFontWeight:"normal",container_dbFontSize:14,container_dbFontFamily:'"Open Sans", sans-serif',container_dbFontWeight:"normal",external_container_dbFontSize:14,external_container_dbFontFamily:'"Open Sans", sans-serif',external_container_dbFontWeight:"normal",container_queueFontSize:14,container_queueFontFamily:'"Open Sans", sans-serif',container_queueFontWeight:"normal",external_container_queueFontSize:14,external_container_queueFontFamily:'"Open Sans", sans-serif',external_container_queueFontWeight:"normal",componentFontSize:14,componentFontFamily:'"Open Sans", sans-serif',componentFontWeight:"normal",external_componentFontSize:14,external_componentFontFamily:'"Open Sans", sans-serif',external_componentFontWeight:"normal",component_dbFontSize:14,component_dbFontFamily:'"Open Sans", sans-serif',component_dbFontWeight:"normal",external_component_dbFontSize:14,external_component_dbFontFamily:'"Open Sans", sans-serif',external_component_dbFontWeight:"normal",component_queueFontSize:14,component_queueFontFamily:'"Open Sans", sans-serif',component_queueFontWeight:"normal",external_component_queueFontSize:14,external_component_queueFontFamily:'"Open Sans", sans-serif',external_component_queueFontWeight:"normal",wrap:!0,wrapPadding:10,personFont:function(){return{fontFamily:this.personFontFamily,fontSize:this.personFontSize,fontWeight:this.personFontWeight}},external_personFont:function(){return{fontFamily:this.external_personFontFamily,fontSize:this.external_personFontSize,fontWeight:this.external_personFontWeight}},systemFont:function(){return{fontFamily:this.systemFontFamily,fontSize:this.systemFontSize,fontWeight:this.systemFontWeight}},external_systemFont:function(){return{fontFamily:this.external_systemFontFamily,fontSize:this.external_systemFontSize,fontWeight:this.external_systemFontWeight}},system_dbFont:function(){return{fontFamily:this.system_dbFontFamily,fontSize:this.system_dbFontSize,fontWeight:this.system_dbFontWeight}},external_system_dbFont:function(){return{fontFamily:this.external_system_dbFontFamily,fontSize:this.external_system_dbFontSize,fontWeight:this.external_system_dbFontWeight}},system_queueFont:function(){return{fontFamily:this.system_queueFontFamily,fontSize:this.system_queueFontSize,fontWeight:this.system_queueFontWeight}},external_system_queueFont:function(){return{fontFamily:this.external_system_queueFontFamily,fontSize:this.external_system_queueFontSize,fontWeight:this.external_system_queueFontWeight}},containerFont:function(){return{fontFamily:this.containerFontFamily,fontSize:this.containerFontSize,fontWeight:this.containerFontWeight}},external_containerFont:function(){return{fontFamily:this.external_containerFontFamily,fontSize:this.external_containerFontSize,fontWeight:this.external_containerFontWeight}},container_dbFont:function(){return{fontFamily:this.container_dbFontFamily,fontSize:this.container_dbFontSize,fontWeight:this.container_dbFontWeight}},external_container_dbFont:function(){return{fontFamily:this.external_container_dbFontFamily,fontSize:this.external_container_dbFontSize,fontWeight:this.external_container_dbFontWeight}},container_queueFont:function(){return{fontFamily:this.container_queueFontFamily,fontSize:this.container_queueFontSize,fontWeight:this.container_queueFontWeight}},external_container_queueFont:function(){return{fontFamily:this.external_container_queueFontFamily,fontSize:this.external_container_queueFontSize,fontWeight:this.external_container_queueFontWeight}},componentFont:function(){return{fontFamily:this.componentFontFamily,fontSize:this.componentFontSize,fontWeight:this.componentFontWeight}},external_componentFont:function(){return{fontFamily:this.external_componentFontFamily,fontSize:this.external_componentFontSize,fontWeight:this.external_componentFontWeight}},component_dbFont:function(){return{fontFamily:this.component_dbFontFamily,fontSize:this.component_dbFontSize,fontWeight:this.component_dbFontWeight}},external_component_dbFont:function(){return{fontFamily:this.external_component_dbFontFamily,fontSize:this.external_component_dbFontSize,fontWeight:this.external_component_dbFontWeight}},component_queueFont:function(){return{fontFamily:this.component_queueFontFamily,fontSize:this.component_queueFontSize,fontWeight:this.component_queueFontWeight}},external_component_queueFont:function(){return{fontFamily:this.external_component_queueFontFamily,fontSize:this.external_component_queueFontSize,fontWeight:this.external_component_queueFontWeight}},boundaryFont:function(){return{fontFamily:this.boundaryFontFamily,fontSize:this.boundaryFontSize,fontWeight:this.boundaryFontWeight}},messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},person_bg_color:"#08427B",person_border_color:"#073B6F",external_person_bg_color:"#686868",external_person_border_color:"#8A8A8A",system_bg_color:"#1168BD",system_border_color:"#3C7FC0",system_db_bg_color:"#1168BD",system_db_border_color:"#3C7FC0",system_queue_bg_color:"#1168BD",system_queue_border_color:"#3C7FC0",external_system_bg_color:"#999999",external_system_border_color:"#8A8A8A",external_system_db_bg_color:"#999999",external_system_db_border_color:"#8A8A8A",external_system_queue_bg_color:"#999999",external_system_queue_border_color:"#8A8A8A",container_bg_color:"#438DD5",container_border_color:"#3C7FC0",container_db_bg_color:"#438DD5",container_db_border_color:"#3C7FC0",container_queue_bg_color:"#438DD5",container_queue_border_color:"#3C7FC0",external_container_bg_color:"#B3B3B3",external_container_border_color:"#A6A6A6",external_container_db_bg_color:"#B3B3B3",external_container_db_border_color:"#A6A6A6",external_container_queue_bg_color:"#B3B3B3",external_container_queue_border_color:"#A6A6A6",component_bg_color:"#85BBF0",component_border_color:"#78A8D8",component_db_bg_color:"#85BBF0",component_db_border_color:"#78A8D8",component_queue_bg_color:"#85BBF0",component_queue_border_color:"#78A8D8",external_component_bg_color:"#CCCCCC",external_component_border_color:"#BFBFBF",external_component_db_bg_color:"#CCCCCC",external_component_db_border_color:"#BFBFBF",external_component_queue_bg_color:"#CCCCCC",external_component_queue_border_color:"#BFBFBF"},mindmap:{useMaxWidth:!0,padding:10,maxNodeWidth:200},fontSize:16};Vt.class&&(Vt.class.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute),Vt.gitGraph&&(Vt.gitGraph.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute);const Gt=(t,e="")=>Object.keys(t).reduce(((n,r)=>Array.isArray(t[r])?n:"object"==typeof t[r]&&null!==t[r]?[...n,e+r,...Gt(t[r],"")]:[...n,e+r]),[]),Xt=Gt(Vt,""),Kt=Vt;function Qt(t){return null==t}var Jt={isNothing:Qt,isObject:function(t){return"object"==typeof t&&null!==t},toArray:function(t){return Array.isArray(t)?t:Qt(t)?[]:[t]},repeat:function(t,e){var n,r="";for(n=0;n<e;n+=1)r+=t;return r},isNegativeZero:function(t){return 0===t&&Number.NEGATIVE_INFINITY===1/t},extend:function(t,e){var n,r,i,a;if(e)for(n=0,r=(a=Object.keys(e)).length;n<r;n+=1)t[i=a[n]]=e[i];return t}};function te(t,e){var n="",r=t.reason||"(unknown reason)";return t.mark?(t.mark.name&&(n+='in "'+t.mark.name+'" '),n+="("+(t.mark.line+1)+":"+(t.mark.column+1)+")",!e&&t.mark.snippet&&(n+="\n\n"+t.mark.snippet),r+" "+n):r}function ee(t,e){Error.call(this),this.name="YAMLException",this.reason=t,this.mark=e,this.message=te(this,!1),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=(new Error).stack||""}ee.prototype=Object.create(Error.prototype),ee.prototype.constructor=ee,ee.prototype.toString=function(t){return this.name+": "+te(this,t)};var ne=ee;function re(t,e,n,r,i){var a="",s="",o=Math.floor(i/2)-1;return r-e>o&&(e=r-o+(a=" ... ").length),n-r>o&&(n=r+o-(s=" ...").length),{str:a+t.slice(e,n).replace(/\t/g,"\u2192")+s,pos:r-e+a.length}}function ie(t,e){return Jt.repeat(" ",e-t.length)+t}var ae=function(t,e){if(e=Object.create(e||null),!t.buffer)return null;e.maxLength||(e.maxLength=79),"number"!=typeof e.indent&&(e.indent=1),"number"!=typeof e.linesBefore&&(e.linesBefore=3),"number"!=typeof e.linesAfter&&(e.linesAfter=2);for(var n,r=/\r?\n|\r|\0/g,i=[0],a=[],s=-1;n=r.exec(t.buffer);)a.push(n.index),i.push(n.index+n[0].length),t.position<=n.index&&s<0&&(s=i.length-2);s<0&&(s=i.length-1);var o,c,l="",h=Math.min(t.line+e.linesAfter,a.length).toString().length,u=e.maxLength-(e.indent+h+3);for(o=1;o<=e.linesBefore&&!(s-o<0);o++)c=re(t.buffer,i[s-o],a[s-o],t.position-(i[s]-i[s-o]),u),l=Jt.repeat(" ",e.indent)+ie((t.line-o+1).toString(),h)+" | "+c.str+"\n"+l;for(c=re(t.buffer,i[s],a[s],t.position,u),l+=Jt.repeat(" ",e.indent)+ie((t.line+1).toString(),h)+" | "+c.str+"\n",l+=Jt.repeat("-",e.indent+h+3+c.pos)+"^\n",o=1;o<=e.linesAfter&&!(s+o>=a.length);o++)c=re(t.buffer,i[s+o],a[s+o],t.position-(i[s]-i[s+o]),u),l+=Jt.repeat(" ",e.indent)+ie((t.line+o+1).toString(),h)+" | "+c.str+"\n";return l.replace(/\n$/,"")},se=["kind","multi","resolve","construct","instanceOf","predicate","represent","representName","defaultStyle","styleAliases"],oe=["scalar","sequence","mapping"];var ce=function(t,e){var n,r;if(e=e||{},Object.keys(e).forEach((function(e){if(-1===se.indexOf(e))throw new ne('Unknown option "'+e+'" is met in definition of "'+t+'" YAML type.')})),this.options=e,this.tag=t,this.kind=e.kind||null,this.resolve=e.resolve||function(){return!0},this.construct=e.construct||function(t){return t},this.instanceOf=e.instanceOf||null,this.predicate=e.predicate||null,this.represent=e.represent||null,this.representName=e.representName||null,this.defaultStyle=e.defaultStyle||null,this.multi=e.multi||!1,this.styleAliases=(n=e.styleAliases||null,r={},null!==n&&Object.keys(n).forEach((function(t){n[t].forEach((function(e){r[String(e)]=t}))})),r),-1===oe.indexOf(this.kind))throw new ne('Unknown kind "'+this.kind+'" is specified for "'+t+'" YAML type.')};function le(t,e){var n=[];return t[e].forEach((function(t){var e=n.length;n.forEach((function(n,r){n.tag===t.tag&&n.kind===t.kind&&n.multi===t.multi&&(e=r)})),n[e]=t})),n}function he(t){return this.extend(t)}he.prototype.extend=function(t){var e=[],n=[];if(t instanceof ce)n.push(t);else if(Array.isArray(t))n=n.concat(t);else{if(!t||!Array.isArray(t.implicit)&&!Array.isArray(t.explicit))throw new ne("Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })");t.implicit&&(e=e.concat(t.implicit)),t.explicit&&(n=n.concat(t.explicit))}e.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.");if(t.loadKind&&"scalar"!==t.loadKind)throw new ne("There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.");if(t.multi)throw new ne("There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.")})),n.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.")}));var r=Object.create(he.prototype);return r.implicit=(this.implicit||[]).concat(e),r.explicit=(this.explicit||[]).concat(n),r.compiledImplicit=le(r,"implicit"),r.compiledExplicit=le(r,"explicit"),r.compiledTypeMap=function(){var t,e,n={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}};function r(t){t.multi?(n.multi[t.kind].push(t),n.multi.fallback.push(t)):n[t.kind][t.tag]=n.fallback[t.tag]=t}for(t=0,e=arguments.length;t<e;t+=1)arguments[t].forEach(r);return n}(r.compiledImplicit,r.compiledExplicit),r};var ue=new he({explicit:[new ce("tag:yaml.org,2002:str",{kind:"scalar",construct:function(t){return null!==t?t:""}}),new ce("tag:yaml.org,2002:seq",{kind:"sequence",construct:function(t){return null!==t?t:[]}}),new ce("tag:yaml.org,2002:map",{kind:"mapping",construct:function(t){return null!==t?t:{}}})]});var de=new ce("tag:yaml.org,2002:null",{kind:"scalar",resolve:function(t){if(null===t)return!0;var e=t.length;return 1===e&&"~"===t||4===e&&("null"===t||"Null"===t||"NULL"===t)},construct:function(){return null},predicate:function(t){return null===t},represent:{canonical:function(){return"~"},lowercase:function(){return"null"},uppercase:function(){return"NULL"},camelcase:function(){return"Null"},empty:function(){return""}},defaultStyle:"lowercase"});var pe=new ce("tag:yaml.org,2002:bool",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e=t.length;return 4===e&&("true"===t||"True"===t||"TRUE"===t)||5===e&&("false"===t||"False"===t||"FALSE"===t)},construct:function(t){return"true"===t||"True"===t||"TRUE"===t},predicate:function(t){return"[object Boolean]"===Object.prototype.toString.call(t)},represent:{lowercase:function(t){return t?"true":"false"},uppercase:function(t){return t?"TRUE":"FALSE"},camelcase:function(t){return t?"True":"False"}},defaultStyle:"lowercase"});function fe(t){return 48<=t&&t<=55}function ge(t){return 48<=t&&t<=57}var ye=new ce("tag:yaml.org,2002:int",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=t.length,i=0,a=!1;if(!r)return!1;if("-"!==(e=t[i])&&"+"!==e||(e=t[++i]),"0"===e){if(i+1===r)return!0;if("b"===(e=t[++i])){for(i++;i<r;i++)if("_"!==(e=t[i])){if("0"!==e&&"1"!==e)return!1;a=!0}return a&&"_"!==e}if("x"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!(48<=(n=t.charCodeAt(i))&&n<=57||65<=n&&n<=70||97<=n&&n<=102))return!1;a=!0}return a&&"_"!==e}if("o"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!fe(t.charCodeAt(i)))return!1;a=!0}return a&&"_"!==e}}if("_"===e)return!1;for(;i<r;i++)if("_"!==(e=t[i])){if(!ge(t.charCodeAt(i)))return!1;a=!0}return!(!a||"_"===e)},construct:function(t){var e,n=t,r=1;if(-1!==n.indexOf("_")&&(n=n.replace(/_/g,"")),"-"!==(e=n[0])&&"+"!==e||("-"===e&&(r=-1),e=(n=n.slice(1))[0]),"0"===n)return 0;if("0"===e){if("b"===n[1])return r*parseInt(n.slice(2),2);if("x"===n[1])return r*parseInt(n.slice(2),16);if("o"===n[1])return r*parseInt(n.slice(2),8)}return r*parseInt(n,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&t%1==0&&!Jt.isNegativeZero(t)},represent:{binary:function(t){return t>=0?"0b"+t.toString(2):"-0b"+t.toString(2).slice(1)},octal:function(t){return t>=0?"0o"+t.toString(8):"-0o"+t.toString(8).slice(1)},decimal:function(t){return t.toString(10)},hexadecimal:function(t){return t>=0?"0x"+t.toString(16).toUpperCase():"-0x"+t.toString(16).toUpperCase().slice(1)}},defaultStyle:"decimal",styleAliases:{binary:[2,"bin"],octal:[8,"oct"],decimal:[10,"dec"],hexadecimal:[16,"hex"]}}),me=new RegExp("^(?:[-+]?(?:[0-9][0-9_]*)(?:\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\.(?:inf|Inf|INF)|\\.(?:nan|NaN|NAN))$");var be=/^[-+]?[0-9]+e/;var _e=new ce("tag:yaml.org,2002:float",{kind:"scalar",resolve:function(t){return null!==t&&!(!me.test(t)||"_"===t[t.length-1])},construct:function(t){var e,n;return n="-"===(e=t.replace(/_/g,"").toLowerCase())[0]?-1:1,"+-".indexOf(e[0])>=0&&(e=e.slice(1)),".inf"===e?1===n?Number.POSITIVE_INFINITY:Number.NEGATIVE_INFINITY:".nan"===e?NaN:n*parseFloat(e,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&(t%1!=0||Jt.isNegativeZero(t))},represent:function(t,e){var n;if(isNaN(t))switch(e){case"lowercase":return".nan";case"uppercase":return".NAN";case"camelcase":return".NaN"}else if(Number.POSITIVE_INFINITY===t)switch(e){case"lowercase":return".inf";case"uppercase":return".INF";case"camelcase":return".Inf"}else if(Number.NEGATIVE_INFINITY===t)switch(e){case"lowercase":return"-.inf";case"uppercase":return"-.INF";case"camelcase":return"-.Inf"}else if(Jt.isNegativeZero(t))return"-0.0";return n=t.toString(10),be.test(n)?n.replace("e",".e"):n},defaultStyle:"lowercase"}),xe=ue.extend({implicit:[de,pe,ye,_e]}),ve=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$"),ke=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\.([0-9]*))?(?:[ \\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$");var we=new ce("tag:yaml.org,2002:timestamp",{kind:"scalar",resolve:function(t){return null!==t&&(null!==ve.exec(t)||null!==ke.exec(t))},construct:function(t){var e,n,r,i,a,s,o,c,l=0,h=null;if(null===(e=ve.exec(t))&&(e=ke.exec(t)),null===e)throw new Error("Date resolve error");if(n=+e[1],r=+e[2]-1,i=+e[3],!e[4])return new Date(Date.UTC(n,r,i));if(a=+e[4],s=+e[5],o=+e[6],e[7]){for(l=e[7].slice(0,3);l.length<3;)l+="0";l=+l}return e[9]&&(h=6e4*(60*+e[10]+ +(e[11]||0)),"-"===e[9]&&(h=-h)),c=new Date(Date.UTC(n,r,i,a,s,o,l)),h&&c.setTime(c.getTime()-h),c},instanceOf:Date,represent:function(t){return t.toISOString()}});var Ee=new ce("tag:yaml.org,2002:merge",{kind:"scalar",resolve:function(t){return"<<"===t||null===t}}),Ce="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\n\r";var Te=new ce("tag:yaml.org,2002:binary",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=0,i=t.length,a=Ce;for(n=0;n<i;n++)if(!((e=a.indexOf(t.charAt(n)))>64)){if(e<0)return!1;r+=6}return r%8==0},construct:function(t){var e,n,r=t.replace(/[\r\n=]/g,""),i=r.length,a=Ce,s=0,o=[];for(e=0;e<i;e++)e%4==0&&e&&(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)),s=s<<6|a.indexOf(r.charAt(e));return 0===(n=i%4*6)?(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)):18===n?(o.push(s>>10&255),o.push(s>>2&255)):12===n&&o.push(s>>4&255),new Uint8Array(o)},predicate:function(t){return"[object Uint8Array]"===Object.prototype.toString.call(t)},represent:function(t){var e,n,r="",i=0,a=t.length,s=Ce;for(e=0;e<a;e++)e%3==0&&e&&(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]),i=(i<<8)+t[e];return 0===(n=a%3)?(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]):2===n?(r+=s[i>>10&63],r+=s[i>>4&63],r+=s[i<<2&63],r+=s[64]):1===n&&(r+=s[i>>2&63],r+=s[i<<4&63],r+=s[64],r+=s[64]),r}}),Se=Object.prototype.hasOwnProperty,Ae=Object.prototype.toString;var Le=new ce("tag:yaml.org,2002:omap",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=[],o=t;for(e=0,n=o.length;e<n;e+=1){if(r=o[e],a=!1,"[object Object]"!==Ae.call(r))return!1;for(i in r)if(Se.call(r,i)){if(a)return!1;a=!0}if(!a)return!1;if(-1!==s.indexOf(i))return!1;s.push(i)}return!0},construct:function(t){return null!==t?t:[]}}),Be=Object.prototype.toString;var Ne=new ce("tag:yaml.org,2002:pairs",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1){if(r=s[e],"[object Object]"!==Be.call(r))return!1;if(1!==(i=Object.keys(r)).length)return!1;a[e]=[i[0],r[i[0]]]}return!0},construct:function(t){if(null===t)return[];var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1)r=s[e],i=Object.keys(r),a[e]=[i[0],r[i[0]]];return a}}),De=Object.prototype.hasOwnProperty;var Oe=new ce("tag:yaml.org,2002:set",{kind:"mapping",resolve:function(t){if(null===t)return!0;var e,n=t;for(e in n)if(De.call(n,e)&&null!==n[e])return!1;return!0},construct:function(t){return null!==t?t:{}}}),Me=xe.extend({implicit:[we,Ee],explicit:[Te,Le,Ne,Oe]}),Ie=Object.prototype.hasOwnProperty,Fe=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x84\x86-\x9F\uFFFE\uFFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/,$e=/[\x85\u2028\u2029]/,Re=/[,\[\]\{\}]/,Ze=/^(?:!|!!|![a-z\-]+!)$/i,Pe=/^(?:!|[^,\[\]\{\}])(?:%[0-9a-f]{2}|[0-9a-z\-#;\/\?:@&=\+\$,_\.!~\*'\(\)\[\]])*$/i;function je(t){return Object.prototype.toString.call(t)}function Ye(t){return 10===t||13===t}function ze(t){return 9===t||32===t}function Ue(t){return 9===t||32===t||10===t||13===t}function We(t){return 44===t||91===t||93===t||123===t||125===t}function qe(t){var e;return 48<=t&&t<=57?t-48:97<=(e=32|t)&&e<=102?e-97+10:-1}function He(t){return 48===t?"\0":97===t?"\x07":98===t?"\b":116===t||9===t?"\t":110===t?"\n":118===t?"\v":102===t?"\f":114===t?"\r":101===t?"\x1b":32===t?" ":34===t?'"':47===t?"/":92===t?"\\":78===t?"\x85":95===t?"\xa0":76===t?"\u2028":80===t?"\u2029":""}function Ve(t){return t<=65535?String.fromCharCode(t):String.fromCharCode(55296+(t-65536>>10),56320+(t-65536&1023))}for(var Ge=new Array(256),Xe=new Array(256),Ke=0;Ke<256;Ke++)Ge[Ke]=He(Ke)?1:0,Xe[Ke]=He(Ke);function Qe(t,e){this.input=t,this.filename=e.filename||null,this.schema=e.schema||Me,this.onWarning=e.onWarning||null,this.legacy=e.legacy||!1,this.json=e.json||!1,this.listener=e.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=t.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Je(t,e){var n={name:t.filename,buffer:t.input.slice(0,-1),position:t.position,line:t.line,column:t.position-t.lineStart};return n.snippet=ae(n),new ne(e,n)}function tn(t,e){throw Je(t,e)}function en(t,e){t.onWarning&&t.onWarning.call(null,Je(t,e))}var nn={YAML:function(t,e,n){var r,i,a;null!==t.version&&tn(t,"duplication of %YAML directive"),1!==n.length&&tn(t,"YAML directive accepts exactly one argument"),null===(r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]))&&tn(t,"ill-formed argument of the YAML directive"),i=parseInt(r[1],10),a=parseInt(r[2],10),1!==i&&tn(t,"unacceptable YAML version of the document"),t.version=n[0],t.checkLineBreaks=a<2,1!==a&&2!==a&&en(t,"unsupported YAML version of the document")},TAG:function(t,e,n){var r,i;2!==n.length&&tn(t,"TAG directive accepts exactly two arguments"),r=n[0],i=n[1],Ze.test(r)||tn(t,"ill-formed tag handle (first argument) of the TAG directive"),Ie.call(t.tagMap,r)&&tn(t,'there is a previously declared suffix for "'+r+'" tag handle'),Pe.test(i)||tn(t,"ill-formed tag prefix (second argument) of the TAG directive");try{i=decodeURIComponent(i)}catch(a){tn(t,"tag prefix is malformed: "+i)}t.tagMap[r]=i}};function rn(t,e,n,r){var i,a,s,o;if(e<n){if(o=t.input.slice(e,n),r)for(i=0,a=o.length;i<a;i+=1)9===(s=o.charCodeAt(i))||32<=s&&s<=1114111||tn(t,"expected valid JSON character");else Fe.test(o)&&tn(t,"the stream contains non-printable characters");t.result+=o}}function an(t,e,n,r){var i,a,s,o;for(Jt.isObject(n)||tn(t,"cannot merge mappings; the provided source object is unacceptable"),s=0,o=(i=Object.keys(n)).length;s<o;s+=1)a=i[s],Ie.call(e,a)||(e[a]=n[a],r[a]=!0)}function sn(t,e,n,r,i,a,s,o,c){var l,h;if(Array.isArray(i))for(l=0,h=(i=Array.prototype.slice.call(i)).length;l<h;l+=1)Array.isArray(i[l])&&tn(t,"nested arrays are not supported inside keys"),"object"==typeof i&&"[object Object]"===je(i[l])&&(i[l]="[object Object]");if("object"==typeof i&&"[object Object]"===je(i)&&(i="[object Object]"),i=String(i),null===e&&(e={}),"tag:yaml.org,2002:merge"===r)if(Array.isArray(a))for(l=0,h=a.length;l<h;l+=1)an(t,e,a[l],n);else an(t,e,a,n);else t.json||Ie.call(n,i)||!Ie.call(e,i)||(t.line=s||t.line,t.lineStart=o||t.lineStart,t.position=c||t.position,tn(t,"duplicated mapping key")),"__proto__"===i?Object.defineProperty(e,i,{configurable:!0,enumerable:!0,writable:!0,value:a}):e[i]=a,delete n[i];return e}function on(t){var e;10===(e=t.input.charCodeAt(t.position))?t.position++:13===e?(t.position++,10===t.input.charCodeAt(t.position)&&t.position++):tn(t,"a line break is expected"),t.line+=1,t.lineStart=t.position,t.firstTabInLine=-1}function cn(t,e,n){for(var r=0,i=t.input.charCodeAt(t.position);0!==i;){for(;ze(i);)9===i&&-1===t.firstTabInLine&&(t.firstTabInLine=t.position),i=t.input.charCodeAt(++t.position);if(e&&35===i)do{i=t.input.charCodeAt(++t.position)}while(10!==i&&13!==i&&0!==i);if(!Ye(i))break;for(on(t),i=t.input.charCodeAt(t.position),r++,t.lineIndent=0;32===i;)t.lineIndent++,i=t.input.charCodeAt(++t.position)}return-1!==n&&0!==r&&t.lineIndent<n&&en(t,"deficient indentation"),r}function ln(t){var e,n=t.position;return!(45!==(e=t.input.charCodeAt(n))&&46!==e||e!==t.input.charCodeAt(n+1)||e!==t.input.charCodeAt(n+2)||(n+=3,0!==(e=t.input.charCodeAt(n))&&!Ue(e)))}function hn(t,e){1===e?t.result+=" ":e>1&&(t.result+=Jt.repeat("\n",e-1))}function un(t,e){var n,r,i=t.tag,a=t.anchor,s=[],o=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=s),r=t.input.charCodeAt(t.position);0!==r&&(-1!==t.firstTabInLine&&(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),45===r)&&Ue(t.input.charCodeAt(t.position+1));)if(o=!0,t.position++,cn(t,!0,-1)&&t.lineIndent<=e)s.push(null),r=t.input.charCodeAt(t.position);else if(n=t.line,fn(t,e,3,!1,!0),s.push(t.result),cn(t,!0,-1),r=t.input.charCodeAt(t.position),(t.line===n||t.lineIndent>e)&&0!==r)tn(t,"bad indentation of a sequence entry");else if(t.lineIndent<e)break;return!!o&&(t.tag=i,t.anchor=a,t.kind="sequence",t.result=s,!0)}function dn(t){var e,n,r,i,a=!1,s=!1;if(33!==(i=t.input.charCodeAt(t.position)))return!1;if(null!==t.tag&&tn(t,"duplication of a tag property"),60===(i=t.input.charCodeAt(++t.position))?(a=!0,i=t.input.charCodeAt(++t.position)):33===i?(s=!0,n="!!",i=t.input.charCodeAt(++t.position)):n="!",e=t.position,a){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&62!==i);t.position<t.length?(r=t.input.slice(e,t.position),i=t.input.charCodeAt(++t.position)):tn(t,"unexpected end of the stream within a verbatim tag")}else{for(;0!==i&&!Ue(i);)33===i&&(s?tn(t,"tag suffix cannot contain exclamation marks"):(n=t.input.slice(e-1,t.position+1),Ze.test(n)||tn(t,"named tag handle cannot contain such characters"),s=!0,e=t.position+1)),i=t.input.charCodeAt(++t.position);r=t.input.slice(e,t.position),Re.test(r)&&tn(t,"tag suffix cannot contain flow indicator characters")}r&&!Pe.test(r)&&tn(t,"tag name cannot contain such characters: "+r);try{r=decodeURIComponent(r)}catch(o){tn(t,"tag name is malformed: "+r)}return a?t.tag=r:Ie.call(t.tagMap,n)?t.tag=t.tagMap[n]+r:"!"===n?t.tag="!"+r:"!!"===n?t.tag="tag:yaml.org,2002:"+r:tn(t,'undeclared tag handle "'+n+'"'),!0}function pn(t){var e,n;if(38!==(n=t.input.charCodeAt(t.position)))return!1;for(null!==t.anchor&&tn(t,"duplication of an anchor property"),n=t.input.charCodeAt(++t.position),e=t.position;0!==n&&!Ue(n)&&!We(n);)n=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an anchor node must contain at least one character"),t.anchor=t.input.slice(e,t.position),!0}function fn(t,e,n,r,i){var a,s,o,c,l,h,u,d,p,f=1,g=!1,y=!1;if(null!==t.listener&&t.listener("open",t),t.tag=null,t.anchor=null,t.kind=null,t.result=null,a=s=o=4===n||3===n,r&&cn(t,!0,-1)&&(g=!0,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)),1===f)for(;dn(t)||pn(t);)cn(t,!0,-1)?(g=!0,o=a,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)):o=!1;if(o&&(o=g||i),1!==f&&4!==n||(d=1===n||2===n?e:e+1,p=t.position-t.lineStart,1===f?o&&(un(t,p)||function(t,e,n){var r,i,a,s,o,c,l,h=t.tag,u=t.anchor,d={},p=Object.create(null),f=null,g=null,y=null,m=!1,b=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=d),l=t.input.charCodeAt(t.position);0!==l;){if(m||-1===t.firstTabInLine||(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),r=t.input.charCodeAt(t.position+1),a=t.line,63!==l&&58!==l||!Ue(r)){if(s=t.line,o=t.lineStart,c=t.position,!fn(t,n,2,!1,!0))break;if(t.line===a){for(l=t.input.charCodeAt(t.position);ze(l);)l=t.input.charCodeAt(++t.position);if(58===l)Ue(l=t.input.charCodeAt(++t.position))||tn(t,"a whitespace character is expected after the key-value separator within a block mapping"),m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!1,i=!1,f=t.tag,g=t.result;else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read an implicit mapping pair; a colon is missed")}}else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read a block mapping entry; a multiline key may not be an implicit key")}}else 63===l?(m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!0,i=!0):m?(m=!1,i=!0):tn(t,"incomplete explicit mapping pair; a key node is missed; or followed by a non-tabulated empty line"),t.position+=1,l=r;if((t.line===a||t.lineIndent>e)&&(m&&(s=t.line,o=t.lineStart,c=t.position),fn(t,e,4,!0,i)&&(m?g=t.result:y=t.result),m||(sn(t,d,p,f,g,y,s,o,c),f=g=y=null),cn(t,!0,-1),l=t.input.charCodeAt(t.position)),(t.line===a||t.lineIndent>e)&&0!==l)tn(t,"bad indentation of a mapping entry");else if(t.lineIndent<e)break}return m&&sn(t,d,p,f,g,null,s,o,c),b&&(t.tag=h,t.anchor=u,t.kind="mapping",t.result=d),b}(t,p,d))||function(t,e){var n,r,i,a,s,o,c,l,h,u,d,p,f=!0,g=t.tag,y=t.anchor,m=Object.create(null);if(91===(p=t.input.charCodeAt(t.position)))s=93,l=!1,a=[];else{if(123!==p)return!1;s=125,l=!0,a={}}for(null!==t.anchor&&(t.anchorMap[t.anchor]=a),p=t.input.charCodeAt(++t.position);0!==p;){if(cn(t,!0,e),(p=t.input.charCodeAt(t.position))===s)return t.position++,t.tag=g,t.anchor=y,t.kind=l?"mapping":"sequence",t.result=a,!0;f?44===p&&tn(t,"expected the node content, but found ','"):tn(t,"missed comma between flow collection entries"),d=null,o=c=!1,63===p&&Ue(t.input.charCodeAt(t.position+1))&&(o=c=!0,t.position++,cn(t,!0,e)),n=t.line,r=t.lineStart,i=t.position,fn(t,e,1,!1,!0),u=t.tag,h=t.result,cn(t,!0,e),p=t.input.charCodeAt(t.position),!c&&t.line!==n||58!==p||(o=!0,p=t.input.charCodeAt(++t.position),cn(t,!0,e),fn(t,e,1,!1,!0),d=t.result),l?sn(t,a,m,u,h,d,n,r,i):o?a.push(sn(t,null,m,u,h,d,n,r,i)):a.push(h),cn(t,!0,e),44===(p=t.input.charCodeAt(t.position))?(f=!0,p=t.input.charCodeAt(++t.position)):f=!1}tn(t,"unexpected end of the stream within a flow collection")}(t,d)?y=!0:(s&&function(t,e){var n,r,i,a,s,o=1,c=!1,l=!1,h=e,u=0,d=!1;if(124===(a=t.input.charCodeAt(t.position)))r=!1;else{if(62!==a)return!1;r=!0}for(t.kind="scalar",t.result="";0!==a;)if(43===(a=t.input.charCodeAt(++t.position))||45===a)1===o?o=43===a?3:2:tn(t,"repeat of a chomping mode identifier");else{if(!((i=48<=(s=a)&&s<=57?s-48:-1)>=0))break;0===i?tn(t,"bad explicit indentation width of a block scalar; it cannot be less than one"):l?tn(t,"repeat of an indentation width identifier"):(h=e+i-1,l=!0)}if(ze(a)){do{a=t.input.charCodeAt(++t.position)}while(ze(a));if(35===a)do{a=t.input.charCodeAt(++t.position)}while(!Ye(a)&&0!==a)}for(;0!==a;){for(on(t),t.lineIndent=0,a=t.input.charCodeAt(t.position);(!l||t.lineIndent<h)&&32===a;)t.lineIndent++,a=t.input.charCodeAt(++t.position);if(!l&&t.lineIndent>h&&(h=t.lineIndent),Ye(a))u++;else{if(t.lineIndent<h){3===o?t.result+=Jt.repeat("\n",c?1+u:u):1===o&&c&&(t.result+="\n");break}for(r?ze(a)?(d=!0,t.result+=Jt.repeat("\n",c?1+u:u)):d?(d=!1,t.result+=Jt.repeat("\n",u+1)):0===u?c&&(t.result+=" "):t.result+=Jt.repeat("\n",u):t.result+=Jt.repeat("\n",c?1+u:u),c=!0,l=!0,u=0,n=t.position;!Ye(a)&&0!==a;)a=t.input.charCodeAt(++t.position);rn(t,n,t.position,!1)}}return!0}(t,d)||function(t,e){var n,r,i;if(39!==(n=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,r=i=t.position;0!==(n=t.input.charCodeAt(t.position));)if(39===n){if(rn(t,r,t.position,!0),39!==(n=t.input.charCodeAt(++t.position)))return!0;r=t.position,t.position++,i=t.position}else Ye(n)?(rn(t,r,i,!0),hn(t,cn(t,!1,e)),r=i=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a single quoted scalar"):(t.position++,i=t.position);tn(t,"unexpected end of the stream within a single quoted scalar")}(t,d)||function(t,e){var n,r,i,a,s,o,c;if(34!==(o=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,n=r=t.position;0!==(o=t.input.charCodeAt(t.position));){if(34===o)return rn(t,n,t.position,!0),t.position++,!0;if(92===o){if(rn(t,n,t.position,!0),Ye(o=t.input.charCodeAt(++t.position)))cn(t,!1,e);else if(o<256&&Ge[o])t.result+=Xe[o],t.position++;else if((s=120===(c=o)?2:117===c?4:85===c?8:0)>0){for(i=s,a=0;i>0;i--)(s=qe(o=t.input.charCodeAt(++t.position)))>=0?a=(a<<4)+s:tn(t,"expected hexadecimal character");t.result+=Ve(a),t.position++}else tn(t,"unknown escape sequence");n=r=t.position}else Ye(o)?(rn(t,n,r,!0),hn(t,cn(t,!1,e)),n=r=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a double quoted scalar"):(t.position++,r=t.position)}tn(t,"unexpected end of the stream within a double quoted scalar")}(t,d)?y=!0:!function(t){var e,n,r;if(42!==(r=t.input.charCodeAt(t.position)))return!1;for(r=t.input.charCodeAt(++t.position),e=t.position;0!==r&&!Ue(r)&&!We(r);)r=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an alias node must contain at least one character"),n=t.input.slice(e,t.position),Ie.call(t.anchorMap,n)||tn(t,'unidentified alias "'+n+'"'),t.result=t.anchorMap[n],cn(t,!0,-1),!0}(t)?function(t,e,n){var r,i,a,s,o,c,l,h,u=t.kind,d=t.result;if(Ue(h=t.input.charCodeAt(t.position))||We(h)||35===h||38===h||42===h||33===h||124===h||62===h||39===h||34===h||37===h||64===h||96===h)return!1;if((63===h||45===h)&&(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r)))return!1;for(t.kind="scalar",t.result="",i=a=t.position,s=!1;0!==h;){if(58===h){if(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r))break}else if(35===h){if(Ue(t.input.charCodeAt(t.position-1)))break}else{if(t.position===t.lineStart&&ln(t)||n&&We(h))break;if(Ye(h)){if(o=t.line,c=t.lineStart,l=t.lineIndent,cn(t,!1,-1),t.lineIndent>=e){s=!0,h=t.input.charCodeAt(t.position);continue}t.position=a,t.line=o,t.lineStart=c,t.lineIndent=l;break}}s&&(rn(t,i,a,!1),hn(t,t.line-o),i=a=t.position,s=!1),ze(h)||(a=t.position+1),h=t.input.charCodeAt(++t.position)}return rn(t,i,a,!1),!!t.result||(t.kind=u,t.result=d,!1)}(t,d,1===n)&&(y=!0,null===t.tag&&(t.tag="?")):(y=!0,null===t.tag&&null===t.anchor||tn(t,"alias node should not have any properties")),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):0===f&&(y=o&&un(t,p))),null===t.tag)null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);else if("?"===t.tag){for(null!==t.result&&"scalar"!==t.kind&&tn(t,'unacceptable node kind for !<?> tag; it should be "scalar", not "'+t.kind+'"'),c=0,l=t.implicitTypes.length;c<l;c+=1)if((u=t.implicitTypes[c]).resolve(t.result)){t.result=u.construct(t.result),t.tag=u.tag,null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);break}}else if("!"!==t.tag){if(Ie.call(t.typeMap[t.kind||"fallback"],t.tag))u=t.typeMap[t.kind||"fallback"][t.tag];else for(u=null,c=0,l=(h=t.typeMap.multi[t.kind||"fallback"]).length;c<l;c+=1)if(t.tag.slice(0,h[c].tag.length)===h[c].tag){u=h[c];break}u||tn(t,"unknown tag !<"+t.tag+">"),null!==t.result&&u.kind!==t.kind&&tn(t,"unacceptable node kind for !<"+t.tag+'> tag; it should be "'+u.kind+'", not "'+t.kind+'"'),u.resolve(t.result,t.tag)?(t.result=u.construct(t.result,t.tag),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):tn(t,"cannot resolve a node with !<"+t.tag+"> explicit tag")}return null!==t.listener&&t.listener("close",t),null!==t.tag||null!==t.anchor||y}function gn(t){var e,n,r,i,a=t.position,s=!1;for(t.version=null,t.checkLineBreaks=t.legacy,t.tagMap=Object.create(null),t.anchorMap=Object.create(null);0!==(i=t.input.charCodeAt(t.position))&&(cn(t,!0,-1),i=t.input.charCodeAt(t.position),!(t.lineIndent>0||37!==i));){for(s=!0,i=t.input.charCodeAt(++t.position),e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);for(r=[],(n=t.input.slice(e,t.position)).length<1&&tn(t,"directive name must not be less than one character in length");0!==i;){for(;ze(i);)i=t.input.charCodeAt(++t.position);if(35===i){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&!Ye(i));break}if(Ye(i))break;for(e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);r.push(t.input.slice(e,t.position))}0!==i&&on(t),Ie.call(nn,n)?nn[n](t,n,r):en(t,'unknown document directive "'+n+'"')}cn(t,!0,-1),0===t.lineIndent&&45===t.input.charCodeAt(t.position)&&45===t.input.charCodeAt(t.position+1)&&45===t.input.charCodeAt(t.position+2)?(t.position+=3,cn(t,!0,-1)):s&&tn(t,"directives end mark is expected"),fn(t,t.lineIndent-1,4,!1,!0),cn(t,!0,-1),t.checkLineBreaks&&$e.test(t.input.slice(a,t.position))&&en(t,"non-ASCII line breaks are interpreted as content"),t.documents.push(t.result),t.position===t.lineStart&&ln(t)?46===t.input.charCodeAt(t.position)&&(t.position+=3,cn(t,!0,-1)):t.position<t.length-1&&tn(t,"end of the stream or a document separator is expected")}function yn(t,e){e=e||{},0!==(t=String(t)).length&&(10!==t.charCodeAt(t.length-1)&&13!==t.charCodeAt(t.length-1)&&(t+="\n"),65279===t.charCodeAt(0)&&(t=t.slice(1)));var n=new Qe(t,e),r=t.indexOf("\0");for(-1!==r&&(n.position=r,tn(n,"null byte is not allowed in input")),n.input+="\0";32===n.input.charCodeAt(n.position);)n.lineIndent+=1,n.position+=1;for(;n.position<n.length-1;)gn(n);return n.documents}var mn=ue,bn={loadAll:function(t,e,n){null!==e&&"object"==typeof e&&void 0===n&&(n=e,e=null);var r=yn(t,n);if("function"!=typeof e)return r;for(var i=0,a=r.length;i<a;i+=1)e(r[i])},load:function(t,e){var n=yn(t,e);if(0!==n.length){if(1===n.length)return n[0];throw new ne("expected a single document in the stream, but found more")}}}.load;const _n=/^-{3}\s*[\n\r](.*?)[\n\r]-{3}\s*[\n\r]+/s;const xn=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,vn=/\s*%%.*\n/gm,kn={},wn=function(t,e){t=t.replace(_n,"").replace(xn,"").replace(vn,"\n");for(const[n,{detector:r}]of Object.entries(kn)){if(r(t,e))return n}throw new Error(`No diagram type detected for text: ${t}`)},En=(...t)=>{for(const{id:e,detector:n,loader:r}of t)Cn(e,n,r)},Cn=(t,e,n)=>{kn[t]?Nt.error(`Detector with key ${t} already exists`):kn[t]={detector:e,loader:n},Nt.debug(`Detector with key ${t} added${n?" with loader":""}`)},Tn=function(t,e,n){const{depth:r,clobber:i}=Object.assign({depth:2,clobber:!1},n);return Array.isArray(e)&&!Array.isArray(t)?(e.forEach((e=>Tn(t,e,n))),t):Array.isArray(e)&&Array.isArray(t)?(e.forEach((e=>{t.includes(e)||t.push(e)})),t):void 0===t||r<=0?null!=t&&"object"==typeof t&&"object"==typeof e?Object.assign(t,e):e:(void 0!==e&&"object"==typeof t&&"object"==typeof e&&Object.keys(e).forEach((n=>{"object"!=typeof e[n]||void 0!==t[n]&&"object"!=typeof t[n]?(i||"object"!=typeof t[n]&&"object"!=typeof e[n])&&(t[n]=e[n]):(void 0===t[n]&&(t[n]=Array.isArray(e[n])?[]:{}),t[n]=Tn(t[n],e[n],{depth:r-1,clobber:i}))})),t)},Sn=Tn,An={curveBasis:o.$0Z,curveBasisClosed:o.Dts,curveBasisOpen:o.WQY,curveBumpX:o.qpX,curveBumpY:o.u93,curveBundle:o.tFB,curveCardinalClosed:o.OvA,curveCardinalOpen:o.dCK,curveCardinal:o.YY7,curveCatmullRomClosed:o.fGX,curveCatmullRomOpen:o.$m7,curveCatmullRom:o.zgE,curveLinear:o.c_6,curveLinearClosed:o.fxm,curveMonotoneX:o.FdL,curveMonotoneY:o.ak_,curveNatural:o.SxZ,curveStep:o.eA_,curveStepAfter:o.jsv,curveStepBefore:o.iJ},Ln=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Bn=/\s*(?:(\w+)(?=:):|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Nn=function(t,e=null){try{const n=new RegExp(`[%]{2}(?![{]${Bn.source})(?=[}][%]{2}).*\n`,"ig");let r;t=t.trim().replace(n,"").replace(/'/gm,'"'),Nt.debug(`Detecting diagram directive${null!==e?" type:"+e:""} based on the text:${t}`);const i=[];for(;null!==(r=Ln.exec(t));)if(r.index===Ln.lastIndex&&Ln.lastIndex++,r&&!e||e&&r[1]&&r[1].match(e)||e&&r[2]&&r[2].match(e)){const t=r[1]?r[1]:r[2],e=r[3]?r[3].trim():r[4]?JSON.parse(r[4].trim()):null;i.push({type:t,args:e})}return 0===i.length&&i.push({type:t,args:null}),1===i.length?i[0]:i}catch(n){return Nt.error(`ERROR: ${n.message} - Unable to parse directive\n      ${null!==e?" type:"+e:""} based on the text:${t}`),{type:null,args:null}}};function Dn(t,e){if(!t)return e;const n=`curve${t.charAt(0).toUpperCase()+t.slice(1)}`;return An[n]||e}function On(t,e){return t&&e?Math.sqrt(Math.pow(e.x-t.x,2)+Math.pow(e.y-t.y,2)):0}function Mn(t){let e="",n="";for(const r of t)void 0!==r&&(r.startsWith("color:")||r.startsWith("text-align:")?n=n+r+";":e=e+r+";");return{style:e,labelStyle:n}}let In=0;const Fn=()=>(In++,"id-"+Math.random().toString(36).substr(2,12)+"-"+In);const $n=t=>function(t){let e="";const n="0123456789abcdef",r=n.length;for(let i=0;i<t;i++)e+=n.charAt(Math.floor(Math.random()*r));return e}(t.length),Rn=function(t,e){const n=e.text.replace(Yt.lineBreakRegex," "),[,r]=Vn(e.fontSize),i=t.append("text");i.attr("x",e.x),i.attr("y",e.y),i.style("text-anchor",e.anchor),i.style("font-family",e.fontFamily),i.style("font-size",r),i.style("font-weight",e.fontWeight),i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class);const a=i.append("tspan");return a.attr("x",e.x+2*e.textMargin),a.attr("fill",e.fill),a.text(n),i},Zn=(0,v.Z)(((t,e,n)=>{if(!t)return t;if(n=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",joinWith:"<br/>"},n),Yt.lineBreakRegex.test(t))return t;const r=t.split(" "),i=[];let a="";return r.forEach(((t,s)=>{const o=Yn(`${t} `,n),c=Yn(a,n);if(o>e){const{hyphenatedStrings:r,remainingWord:s}=Pn(t,e,"-",n);i.push(a,...r),a=s}else c+o>=e?(i.push(a),a=t):a=[a,t].filter(Boolean).join(" ");s+1===r.length&&i.push(a)})),i.filter((t=>""!==t)).join(n.joinWith)}),((t,e,n)=>`${t}${e}${n.fontSize}${n.fontWeight}${n.fontFamily}${n.joinWith}`)),Pn=(0,v.Z)(((t,e,n="-",r)=>{r=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:0},r);const i=[...t],a=[];let s="";return i.forEach(((t,o)=>{const c=`${s}${t}`;if(Yn(c,r)>=e){const t=o+1,e=i.length===t,r=`${c}${n}`;a.push(e?c:r),s=""}else s=c})),{hyphenatedStrings:a,remainingWord:s}}),((t,e,n="-",r)=>`${t}${e}${n}${r.fontSize}${r.fontWeight}${r.fontFamily}`));function jn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:15},e),zn(t,e).height}function Yn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e),zn(t,e).width}const zn=(0,v.Z)(((t,e)=>{e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e);const{fontSize:n,fontFamily:r,fontWeight:i}=e;if(!t)return{width:0,height:0};const[,a]=Vn(n),s=["sans-serif",r],c=t.split(Yt.lineBreakRegex),l=[],h=(0,o.Ys)("body");if(!h.remove)return{width:0,height:0,lineHeight:0};const u=h.append("svg");for(const o of s){let t=0;const e={width:0,height:0,lineHeight:0};for(const n of c){const r={x:0,y:0,fill:void 0,anchor:"start",style:"#666",width:100,height:100,textMargin:0,rx:0,ry:0,valign:void 0};r.text=n;const s=Rn(u,r).style("font-size",a).style("font-weight",i).style("font-family",o),c=(s._groups||s)[0][0].getBBox();e.width=Math.round(Math.max(e.width,c.width)),t=Math.round(c.height),e.height+=t,e.lineHeight=Math.round(Math.max(e.lineHeight,t))}l.push(e)}u.remove();return l[isNaN(l[1].height)||isNaN(l[1].width)||isNaN(l[1].lineHeight)||l[0].height>l[1].height&&l[0].width>l[1].width&&l[0].lineHeight>l[1].lineHeight?0:1]}),((t,e)=>`${t}${e.fontSize}${e.fontWeight}${e.fontFamily}`));let Un;const Wn=t=>{if(Nt.debug("directiveSanitizer called with",t),"object"==typeof t&&(t.length?t.forEach((t=>Wn(t))):Object.keys(t).forEach((e=>{Nt.debug("Checking key",e),e.startsWith("__")&&(Nt.debug("sanitize deleting __ option",e),delete t[e]),e.includes("proto")&&(Nt.debug("sanitize deleting proto option",e),delete t[e]),e.includes("constr")&&(Nt.debug("sanitize deleting constr option",e),delete t[e]),e.includes("themeCSS")&&(Nt.debug("sanitizing themeCss option"),t[e]=qn(t[e])),e.includes("fontFamily")&&(Nt.debug("sanitizing fontFamily option"),t[e]=qn(t[e])),e.includes("altFontFamily")&&(Nt.debug("sanitizing altFontFamily option"),t[e]=qn(t[e])),Xt.includes(e)?"object"==typeof t[e]&&(Nt.debug("sanitize deleting object",e),Wn(t[e])):(Nt.debug("sanitize deleting option",e),delete t[e])}))),t.themeVariables){const e=Object.keys(t.themeVariables);for(const n of e){const e=t.themeVariables[n];e&&e.match&&!e.match(/^[\d "#%(),.;A-Za-z]+$/)&&(t.themeVariables[n]="")}}Nt.debug("After sanitization",t)},qn=t=>{let e=0,n=0;for(const r of t){if(e<n)return"{ /* ERROR: Unbalanced CSS */ }";"{"===r?e++:"}"===r&&n++}return e!==n?"{ /* ERROR: Unbalanced CSS */ }":t};function Hn(t){return"str"in t}const Vn=t=>{if("number"==typeof t)return[t,t+"px"];const e=parseInt(t,10);return Number.isNaN(e)?[void 0,void 0]:t===String(e)?[e,t+"px"]:[e,t]},Gn={assignWithDepth:Sn,wrapLabel:Zn,calculateTextHeight:jn,calculateTextWidth:Yn,calculateTextDimensions:zn,detectInit:function(t,e){const n=Nn(t,/(?:init\b)|(?:initialize\b)/);let r={};if(Array.isArray(n)){const t=n.map((t=>t.args));Wn(t),r=Sn(r,[...t])}else r=n.args;if(r){let n=wn(t,e);["config"].forEach((t=>{void 0!==r[t]&&("flowchart-v2"===n&&(n="flowchart"),r[n]=r[t],delete r[t])}))}return r},detectDirective:Nn,isSubstringInArray:function(t,e){for(const[n,r]of e.entries())if(r.match(t))return n;return-1},interpolateToCurve:Dn,calcLabelPosition:function(t){return 1===t.length?t[0]:function(t){let e,n=0;t.forEach((t=>{n+=On(t,e),e=t}));let r,i=n/2;return e=void 0,t.forEach((t=>{if(e&&!r){const n=On(t,e);if(n<i)i-=n;else{const a=i/n;a<=0&&(r=e),a>=1&&(r={x:t.x,y:t.y}),a>0&&a<1&&(r={x:(1-a)*e.x+a*t.x,y:(1-a)*e.y+a*t.y})}}e=t})),r}(t)},calcCardinalityPosition:(t,e,n)=>{let r;Nt.info(`our points ${JSON.stringify(e)}`),e[0]!==n&&(e=e.reverse());let i,a=25;r=void 0,e.forEach((t=>{if(r&&!i){const e=On(t,r);if(e<a)a-=e;else{const n=a/e;n<=0&&(i=r),n>=1&&(i={x:t.x,y:t.y}),n>0&&n<1&&(i={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const s=t?10:5,o=Math.atan2(e[0].y-i.y,e[0].x-i.x),c={x:0,y:0};return c.x=Math.sin(o)*s+(e[0].x+i.x)/2,c.y=-Math.cos(o)*s+(e[0].y+i.y)/2,c},calcTerminalLabelPosition:function(t,e,n){let r,i=JSON.parse(JSON.stringify(n));Nt.info("our points",i),"start_left"!==e&&"start_right"!==e&&(i=i.reverse()),i.forEach((t=>{r=t}));let a,s=25+t;r=void 0,i.forEach((t=>{if(r&&!a){const e=On(t,r);if(e<s)s-=e;else{const n=s/e;n<=0&&(a=r),n>=1&&(a={x:t.x,y:t.y}),n>0&&n<1&&(a={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const o=10+.5*t,c=Math.atan2(i[0].y-a.y,i[0].x-a.x),l={x:0,y:0};return l.x=Math.sin(c)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2,"start_left"===e&&(l.x=Math.sin(c+Math.PI)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c+Math.PI)*o+(i[0].y+a.y)/2),"end_right"===e&&(l.x=Math.sin(c-Math.PI)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c-Math.PI)*o+(i[0].y+a.y)/2-5),"end_left"===e&&(l.x=Math.sin(c)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2-5),l},formatUrl:function(t,e){const n=t.trim();if(n)return"loose"!==e.securityLevel?(0,s.N)(n):n},getStylesFromArray:Mn,generateId:Fn,random:$n,runFunc:(t,...e)=>{const n=t.split("."),r=n.length-1,i=n[r];let a=window;for(let s=0;s<r;s++)if(a=a[n[s]],!a)return;a[i](...e)},entityDecode:function(t){return Un=Un||document.createElement("div"),t=escape(t).replace(/%26/g,"&").replace(/%23/g,"#").replace(/%3B/g,";"),Un.innerHTML=t,unescape(Un.textContent)},initIdGenerator:class{constructor(t,e){this.deterministic=t,this.seed=e,this.count=e?e.length:0}next(){return this.deterministic?this.count++:Date.now()}},directiveSanitizer:Wn,sanitizeCss:qn,insertTitle:(t,e,n,r)=>{if(!r)return;const i=t.node().getBBox();t.append("text").text(r).attr("x",i.x+i.width/2).attr("y",-n).attr("class",e)},parseFontSize:Vn},Xn="9.4.3",Kn=Object.freeze(Kt);let Qn,Jn=Sn({},Kn),tr=[],er=Sn({},Kn);const nr=(t,e)=>{let n=Sn({},t),r={};for(const i of e)sr(i),r=Sn(r,i);if(n=Sn(n,r),r.theme&&r.theme in Ht){const t=Sn({},Qn),e=Sn(t.themeVariables||{},r.themeVariables);n.theme&&n.theme in Ht&&(n.themeVariables=Ht[n.theme].getThemeVariables(e))}return er=n,ur(er),er},rr=()=>Sn({},Jn),ir=t=>(ur(t),Sn(er,t),ar()),ar=()=>Sn({},er),sr=t=>{["secure",...Jn.secure??[]].forEach((e=>{void 0!==t[e]&&(Nt.debug(`Denied attempt to modify a secure key ${e}`,t[e]),delete t[e])})),Object.keys(t).forEach((e=>{0===e.indexOf("__")&&delete t[e]})),Object.keys(t).forEach((e=>{"string"==typeof t[e]&&(t[e].includes("<")||t[e].includes(">")||t[e].includes("url(data:"))&&delete t[e],"object"==typeof t[e]&&sr(t[e])}))},or=t=>{t.fontFamily&&(t.themeVariables&&t.themeVariables.fontFamily||(t.themeVariables={fontFamily:t.fontFamily})),tr.push(t),nr(Jn,tr)},cr=(t=Jn)=>{tr=[],nr(t,tr)};var lr=(t=>(t.LAZY_LOAD_DEPRECATED="The configuration options lazyLoadedDiagrams and loadExternalDiagramsAtStartup are deprecated. Please use registerExternalDiagrams instead.",t))(lr||{});const hr={},ur=t=>{var e;t&&((t.lazyLoadedDiagrams||t.loadExternalDiagramsAtStartup)&&(hr[e="LAZY_LOAD_DEPRECATED"]||(Nt.warn(lr[e]),hr[e]=!0)))},dr=function(t,e,n,r){const i=function(t,e,n){let r=new Map;return n?(r.set("width","100%"),r.set("style",`max-width: ${e}px;`)):(r.set("height",t),r.set("width",e)),r}(e,n,r);!function(t,e){for(let n of e)t.attr(n[0],n[1])}(t,i)},pr=function(t,e,n,r){const i=e.node().getBBox(),a=i.width,s=i.height;Nt.info(`SVG bounds: ${a}x${s}`,i);let o=0,c=0;Nt.info(`Graph bounds: ${o}x${c}`,t),o=a+2*n,c=s+2*n,Nt.info(`Calculated bounds: ${o}x${c}`),dr(e,c,o,r);const l=`${i.x-n} ${i.y-n} ${i.width+2*n} ${i.height+2*n}`;e.attr("viewBox",l)},fr=t=>`g.classGroup text {\n  fill: ${t.nodeBorder};\n  fill: ${t.classText};\n  stroke: none;\n  font-family: ${t.fontFamily};\n  font-size: 10px;\n\n  .title {\n    font-weight: bolder;\n  }\n\n}\n\n.nodeLabel, .edgeLabel {\n  color: ${t.classText};\n}\n.edgeLabel .label rect {\n  fill: ${t.mainBkg};\n}\n.label text {\n  fill: ${t.classText};\n}\n.edgeLabel .label span {\n  background: ${t.mainBkg};\n}\n\n.classTitle {\n  font-weight: bolder;\n}\n.node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n\n.divider {\n  stroke: ${t.nodeBorder};\n  stroke: 1;\n}\n\ng.clickable {\n  cursor: pointer;\n}\n\ng.classGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.classGroup line {\n  stroke: ${t.nodeBorder};\n  stroke-width: 1;\n}\n\n.classLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.classLabel .label {\n  fill: ${t.nodeBorder};\n  font-size: 10px;\n}\n\n.relation {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.dashed-line{\n  stroke-dasharray: 3;\n}\n\n.dotted-line{\n  stroke-dasharray: 1 2;\n}\n\n#compositionStart, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#compositionEnd, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionStart, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionEnd, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationStart, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationEnd, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopStart, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopEnd, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n.edgeTerminals {\n  font-size: 11px;\n}\n\n.classTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,gr=t=>`\n  .entityBox {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxOdd {\n    fill: ${t.attributeBackgroundColorOdd};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxEven {\n    fill:  ${t.attributeBackgroundColorEven};\n    stroke: ${t.nodeBorder};\n  }\n\n  .relationshipLabelBox {\n    fill: ${t.tertiaryColor};\n    opacity: 0.7;\n    background-color: ${t.tertiaryColor};\n      rect {\n        opacity: 0.5;\n      }\n  }\n\n    .relationshipLine {\n      stroke: ${t.lineColor};\n    }\n\n  .entityTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }    \n`,yr=()=>"",mr=t=>`.label {\n    font-family: ${t.fontFamily};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n  .cluster-label text {\n    fill: ${t.titleColor};\n  }\n  .cluster-label span {\n    color: ${t.titleColor};\n  }\n\n  .label text,span {\n    fill: ${t.nodeTextColor||t.textColor};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 2.0px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n      background-color: ${t.edgeLabelBackground};\n      fill: ${t.edgeLabelBackground};\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n    fill: ${t.clusterBkg};\n    stroke: ${t.clusterBorder};\n    stroke-width: 1px;\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  .cluster span {\n    color: ${t.titleColor};\n  }\n  /* .cluster div {\n    color: ${t.titleColor};\n  } */\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: ${t.fontFamily};\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .flowchartTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n`,br=t=>`\n  .mermaid-main-font {\n    font-family: "trebuchet ms", verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  .exclude-range {\n    fill: ${t.excludeBkgColor};\n  }\n\n  .section {\n    stroke: none;\n    opacity: 0.2;\n  }\n\n  .section0 {\n    fill: ${t.sectionBkgColor};\n  }\n\n  .section2 {\n    fill: ${t.sectionBkgColor2};\n  }\n\n  .section1,\n  .section3 {\n    fill: ${t.altSectionBkgColor};\n    opacity: 0.2;\n  }\n\n  .sectionTitle0 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle1 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle2 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle3 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle {\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    // text-height: 14px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n\n  /* Grid and axis */\n\n  .grid .tick {\n    stroke: ${t.gridColor};\n    opacity: 0.8;\n    shape-rendering: crispEdges;\n    text {\n      font-family: ${t.fontFamily};\n      fill: ${t.textColor};\n    }\n  }\n\n  .grid path {\n    stroke-width: 0;\n  }\n\n\n  /* Today line */\n\n  .today {\n    fill: none;\n    stroke: ${t.todayLineColor};\n    stroke-width: 2px;\n  }\n\n\n  /* Task styling */\n\n  /* Default task */\n\n  .task {\n    stroke-width: 2;\n  }\n\n  .taskText {\n    text-anchor: middle;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n\n  // .taskText:not([font-size]) {\n  //   font-size: ${t.ganttFontSize};\n  // }\n\n  .taskTextOutsideRight {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n  .taskTextOutsideLeft {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: end;\n    // font-size: ${t.ganttFontSize};\n  }\n\n  /* Special case clickable */\n  .task.clickable {\n    cursor: pointer;\n  }\n  .taskText.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideLeft.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideRight.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  /* Specific task settings for the sections*/\n\n  .taskText0,\n  .taskText1,\n  .taskText2,\n  .taskText3 {\n    fill: ${t.taskTextColor};\n  }\n\n  .task0,\n  .task1,\n  .task2,\n  .task3 {\n    fill: ${t.taskBkgColor};\n    stroke: ${t.taskBorderColor};\n  }\n\n  .taskTextOutside0,\n  .taskTextOutside2\n  {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n  .taskTextOutside1,\n  .taskTextOutside3 {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n\n  /* Active task */\n\n  .active0,\n  .active1,\n  .active2,\n  .active3 {\n    fill: ${t.activeTaskBkgColor};\n    stroke: ${t.activeTaskBorderColor};\n  }\n\n  .activeText0,\n  .activeText1,\n  .activeText2,\n  .activeText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Completed task */\n\n  .done0,\n  .done1,\n  .done2,\n  .done3 {\n    stroke: ${t.doneTaskBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneText0,\n  .doneText1,\n  .doneText2,\n  .doneText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Tasks on the critical line */\n\n  .crit0,\n  .crit1,\n  .crit2,\n  .crit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.critBkgColor};\n    stroke-width: 2;\n  }\n\n  .activeCrit0,\n  .activeCrit1,\n  .activeCrit2,\n  .activeCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.activeTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneCrit0,\n  .doneCrit1,\n  .doneCrit2,\n  .doneCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n    cursor: pointer;\n    shape-rendering: crispEdges;\n  }\n\n  .milestone {\n    transform: rotate(45deg) scale(0.8,0.8);\n  }\n\n  .milestoneText {\n    font-style: italic;\n  }\n  .doneCritText0,\n  .doneCritText1,\n  .doneCritText2,\n  .doneCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .activeCritText0,\n  .activeCritText1,\n  .activeCritText2,\n  .activeCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .titleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor}    ;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n`,_r=()=>"",xr=t=>`\n  .pieCircle{\n    stroke: ${t.pieStrokeColor};\n    stroke-width : ${t.pieStrokeWidth};\n    opacity : ${t.pieOpacity};\n  }\n  .pieTitleText {\n    text-anchor: middle;\n    font-size: ${t.pieTitleTextSize};\n    fill: ${t.pieTitleTextColor};\n    font-family: ${t.fontFamily};\n  }\n  .slice {\n    font-family: ${t.fontFamily};\n    fill: ${t.pieSectionTextColor};\n    font-size:${t.pieSectionTextSize};\n    // fill: white;\n  }\n  .legend text {\n    fill: ${t.pieLegendTextColor};\n    font-family: ${t.fontFamily};\n    font-size: ${t.pieLegendTextSize};\n  }\n`,vr=t=>`\n\n  marker {\n    fill: ${t.relationColor};\n    stroke: ${t.relationColor};\n  }\n\n  marker.cross {\n    stroke: ${t.lineColor};\n  }\n\n  svg {\n    font-family: ${t.fontFamily};\n    font-size: ${t.fontSize};\n  }\n\n  .reqBox {\n    fill: ${t.requirementBackground};\n    fill-opacity: 100%;\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  \n  .reqTitle, .reqLabel{\n    fill:  ${t.requirementTextColor};\n  }\n  .reqLabelBox {\n    fill: ${t.relationLabelBackground};\n    fill-opacity: 100%;\n  }\n\n  .req-title-line {\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  .relationshipLine {\n    stroke: ${t.relationColor};\n    stroke-width: 1;\n  }\n  .relationshipLabel {\n    fill: ${t.relationLabelColor};\n  }\n\n`,kr=t=>`.actor {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n\n  text.actor > tspan {\n    fill: ${t.actorTextColor};\n    stroke: none;\n  }\n\n  .actor-line {\n    stroke: ${t.actorLineColor};\n  }\n\n  .messageLine0 {\n    stroke-width: 1.5;\n    stroke-dasharray: none;\n    stroke: ${t.signalColor};\n  }\n\n  .messageLine1 {\n    stroke-width: 1.5;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.signalColor};\n  }\n\n  #arrowhead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .sequenceNumber {\n    fill: ${t.sequenceNumberColor};\n  }\n\n  #sequencenumber {\n    fill: ${t.signalColor};\n  }\n\n  #crosshead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .messageText {\n    fill: ${t.signalTextColor};\n    stroke: none;\n  }\n\n  .labelBox {\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBkgColor};\n  }\n\n  .labelText, .labelText > tspan {\n    fill: ${t.labelTextColor};\n    stroke: none;\n  }\n\n  .loopText, .loopText > tspan {\n    fill: ${t.loopTextColor};\n    stroke: none;\n  }\n\n  .loopLine {\n    stroke-width: 2px;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBorderColor};\n  }\n\n  .note {\n    //stroke: #decc93;\n    stroke: ${t.noteBorderColor};\n    fill: ${t.noteBkgColor};\n  }\n\n  .noteText, .noteText > tspan {\n    fill: ${t.noteTextColor};\n    stroke: none;\n  }\n\n  .activation0 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation1 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation2 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .actorPopupMenu {\n    position: absolute;\n  }\n\n  .actorPopupMenuPanel {\n    position: absolute;\n    fill: ${t.actorBkg};\n    box-shadow: 0px 8px 16px 0px rgba(0,0,0,0.2);\n    filter: drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));\n}\n  .actor-man line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n  .actor-man circle, line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n    stroke-width: 2px;\n  }\n`,wr=t=>`\ndefs #statediagram-barbEnd {\n    fill: ${t.transitionColor};\n    stroke: ${t.transitionColor};\n  }\ng.stateGroup text {\n  fill: ${t.nodeBorder};\n  stroke: none;\n  font-size: 10px;\n}\ng.stateGroup text {\n  fill: ${t.textColor};\n  stroke: none;\n  font-size: 10px;\n\n}\ng.stateGroup .state-title {\n  font-weight: bolder;\n  fill: ${t.stateLabelColor};\n}\n\ng.stateGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.stateGroup line {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.transition {\n  stroke: ${t.transitionColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.stateGroup .composit {\n  fill: ${t.background};\n  border-bottom: 1px\n}\n\n.stateGroup .alt-composit {\n  fill: #e0e0e0;\n  border-bottom: 1px\n}\n\n.state-note {\n  stroke: ${t.noteBorderColor};\n  fill: ${t.noteBkgColor};\n\n  text {\n    fill: ${t.noteTextColor};\n    stroke: none;\n    font-size: 10px;\n  }\n}\n\n.stateLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.edgeLabel .label rect {\n  fill: ${t.labelBackgroundColor};\n  opacity: 0.5;\n}\n.edgeLabel .label text {\n  fill: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n.label div .edgeLabel {\n  color: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n\n.stateLabel text {\n  fill: ${t.stateLabelColor};\n  font-size: 10px;\n  font-weight: bold;\n}\n\n.node circle.state-start {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node .fork-join {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node circle.state-end {\n  fill: ${t.innerEndBackground};\n  stroke: ${t.background};\n  stroke-width: 1.5\n}\n.end-state-inner {\n  fill: ${t.compositeBackground||t.background};\n  // stroke: ${t.background};\n  stroke-width: 1.5\n}\n\n.node rect {\n  fill: ${t.stateBkg||t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n.node polygon {\n  fill: ${t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};;\n  stroke-width: 1px;\n}\n#statediagram-barbEnd {\n  fill: ${t.lineColor};\n}\n\n.statediagram-cluster rect {\n  fill: ${t.compositeTitleBackground};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n\n.cluster-label, .nodeLabel {\n  color: ${t.stateLabelColor};\n}\n\n.statediagram-cluster rect.outer {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state .divider {\n  stroke: ${t.stateBorder||t.nodeBorder};\n}\n\n.statediagram-state .title-state {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-cluster.statediagram-cluster .inner {\n  fill: ${t.compositeBackground||t.background};\n}\n.statediagram-cluster.statediagram-cluster-alt .inner {\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.statediagram-cluster .inner {\n  rx:0;\n  ry:0;\n}\n\n.statediagram-state rect.basic {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state rect.divider {\n  stroke-dasharray: 10,10;\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.note-edge {\n  stroke-dasharray: 5;\n}\n\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n\n.statediagram-note text {\n  fill: ${t.noteTextColor};\n}\n\n.statediagram-note .nodeLabel {\n  color: ${t.noteTextColor};\n}\n.statediagram .edgeLabel {\n  color: red; // ${t.noteTextColor};\n}\n\n#dependencyStart, #dependencyEnd {\n  fill: ${t.lineColor};\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.statediagramTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,Er=t=>`.label {\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    color: ${t.textColor};\n  }\n  .mouth {\n    stroke: #666;\n  }\n\n  line {\n    stroke: ${t.textColor}\n  }\n\n  .legend {\n    fill: ${t.textColor};\n  }\n\n  .label text {\n    fill: #333;\n  }\n  .label {\n    color: ${t.textColor}\n  }\n\n  .face {\n    ${t.faceColor?`fill: ${t.faceColor}`:"fill: #FFF8DC"};\n    stroke: #999;\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 1.5px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .task-type-0, .section-type-0  {\n    ${t.fillType0?`fill: ${t.fillType0}`:""};\n  }\n  .task-type-1, .section-type-1  {\n    ${t.fillType0?`fill: ${t.fillType1}`:""};\n  }\n  .task-type-2, .section-type-2  {\n    ${t.fillType0?`fill: ${t.fillType2}`:""};\n  }\n  .task-type-3, .section-type-3  {\n    ${t.fillType0?`fill: ${t.fillType3}`:""};\n  }\n  .task-type-4, .section-type-4  {\n    ${t.fillType0?`fill: ${t.fillType4}`:""};\n  }\n  .task-type-5, .section-type-5  {\n    ${t.fillType0?`fill: ${t.fillType5}`:""};\n  }\n  .task-type-6, .section-type-6  {\n    ${t.fillType0?`fill: ${t.fillType6}`:""};\n  }\n  .task-type-7, .section-type-7  {\n    ${t.fillType0?`fill: ${t.fillType7}`:""};\n  }\n\n  .actor-0 {\n    ${t.actor0?`fill: ${t.actor0}`:""};\n  }\n  .actor-1 {\n    ${t.actor1?`fill: ${t.actor1}`:""};\n  }\n  .actor-2 {\n    ${t.actor2?`fill: ${t.actor2}`:""};\n  }\n  .actor-3 {\n    ${t.actor3?`fill: ${t.actor3}`:""};\n  }\n  .actor-4 {\n    ${t.actor4?`fill: ${t.actor4}`:""};\n  }\n  .actor-5 {\n    ${t.actor5?`fill: ${t.actor5}`:""};\n  }\n`,Cr=t=>`.person {\n    stroke: ${t.personBorder};\n    fill: ${t.personBkg};\n  }\n`,Tr={flowchart:mr,"flowchart-v2":mr,sequence:kr,gantt:br,classDiagram:fr,"classDiagram-v2":fr,class:fr,stateDiagram:wr,state:wr,info:_r,pie:xr,er:gr,error:yr,journey:Er,requirement:vr,c4:Cr},Sr=(t,e,n)=>{let r="";return t in Tr&&Tr[t]?r=Tr[t](n):Nt.warn(`No theme found for ${t}`),` & {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n    fill: ${n.textColor}\n  }\n\n  /* Classes common for multiple diagrams */\n\n  & .error-icon {\n    fill: ${n.errorBkgColor};\n  }\n  & .error-text {\n    fill: ${n.errorTextColor};\n    stroke: ${n.errorTextColor};\n  }\n\n  & .edge-thickness-normal {\n    stroke-width: 2px;\n  }\n  & .edge-thickness-thick {\n    stroke-width: 3.5px\n  }\n  & .edge-pattern-solid {\n    stroke-dasharray: 0;\n  }\n\n  & .edge-pattern-dashed{\n    stroke-dasharray: 3;\n  }\n  .edge-pattern-dotted {\n    stroke-dasharray: 2;\n  }\n\n  & .marker {\n    fill: ${n.lineColor};\n    stroke: ${n.lineColor};\n  }\n  & .marker.cross {\n    stroke: ${n.lineColor};\n  }\n\n  & svg {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n  }\n\n  ${r}\n\n  ${e}\n`};let Ar="",Lr="",Br="";const Nr=t=>Ft(t,ar()),Dr=function(){Ar="",Br="",Lr=""},Or=function(t){Ar=Nr(t).replace(/^\s+/g,"")},Mr=function(){return Ar||Lr},Ir=function(t){Br=Nr(t).replace(/\n\s+/g,"\n")},Fr=function(){return Br},$r=function(t){Lr=Nr(t)},Rr=function(){return Lr},Zr={setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,getAccDescription:Fr,setAccDescription:Ir,clear:Dr},Pr=Object.freeze(Object.defineProperty({__proto__:null,clear:Dr,default:Zr,getAccDescription:Fr,getAccTitle:Mr,getDiagramTitle:Rr,setAccDescription:Ir,setAccTitle:Or,setDiagramTitle:$r},Symbol.toStringTag,{value:"Module"}));let jr={};const Yr=function(t,e,n,r){Nt.debug("parseDirective is being called",e,n,r);try{if(void 0!==e)switch(e=e.trim(),n){case"open_directive":jr={};break;case"type_directive":if(!jr)throw new Error("currentDirective is undefined");jr.type=e.toLowerCase();break;case"arg_directive":if(!jr)throw new Error("currentDirective is undefined");jr.args=JSON.parse(e);break;case"close_directive":zr(t,jr,r),jr=void 0}}catch(i){Nt.error(`Error while rendering sequenceDiagram directive: ${e} jison context: ${n}`),Nt.error(i.message)}},zr=function(t,e,n){switch(Nt.info(`Directive type=${e.type} with args:`,e.args),e.type){case"init":case"initialize":["config"].forEach((t=>{void 0!==e.args[t]&&("flowchart-v2"===n&&(n="flowchart"),e.args[n]=e.args[t],delete e.args[t])})),Nt.info("sanitize in handleDirective",e.args),Wn(e.args),Nt.info("sanitize in handleDirective (done)",e.args),or(e.args);break;case"wrap":case"nowrap":t&&t.setWrap&&t.setWrap("wrap"===e.type);break;case"themeCss":Nt.warn("themeCss encountered");break;default:Nt.warn(`Unhandled directive: source: '%%{${e.type}: ${JSON.stringify(e.args?e.args:{})}}%%`,e)}},Ur=Nt,Wr=Dt,qr=ar,Hr=t=>Ft(t,qr()),Vr=pr,Gr=(t,e,n,r)=>Yr(t,e,n,r),Xr={},Kr=(t,e,n)=>{if(Xr[t])throw new Error(`Diagram ${t} already registered.`);var r,i;Xr[t]=e,n&&Cn(t,n),r=t,i=e.styles,Tr[r]=i,e.injectUtils&&e.injectUtils(Ur,Wr,qr,Hr,Vr,Pr,Gr)},Qr=t=>{if(t in Xr)return Xr[t];throw new Error(`Diagram ${t} not found.`)};var Jr=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,7],i=[1,5],a=[1,9],s=[1,6],o=[2,6],c=[1,16],l=[6,8,14,20,22,24,25,27,29,32,37,40,50,55],h=[8,14,20,22,24,25,27,29,32,37,40],u=[8,13,14,20,22,24,25,27,29,32,37,40],d=[1,26],p=[6,8,14,50,55],f=[8,14,55],g=[1,53],y=[1,52],m=[8,14,30,33,35,38,55],b=[1,67],_=[1,68],x=[1,69],v=[8,14,33,35,42,55],k={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,GG:6,document:7,EOF:8,":":9,DIR:10,options:11,body:12,OPT:13,NL:14,line:15,statement:16,commitStatement:17,mergeStatement:18,cherryPickStatement:19,acc_title:20,acc_title_value:21,acc_descr:22,acc_descr_value:23,acc_descr_multiline_value:24,section:25,branchStatement:26,CHECKOUT:27,ref:28,BRANCH:29,ORDER:30,NUM:31,CHERRY_PICK:32,COMMIT_ID:33,STR:34,COMMIT_TAG:35,EMPTYSTR:36,MERGE:37,COMMIT_TYPE:38,commitType:39,COMMIT:40,commit_arg:41,COMMIT_MSG:42,NORMAL:43,REVERSE:44,HIGHLIGHT:45,openDirective:46,typeDirective:47,closeDirective:48,argDirective:49,open_directive:50,type_directive:51,arg_directive:52,close_directive:53,ID:54,";":55,$accept:0,$end:1},terminals_:{2:"error",6:"GG",8:"EOF",9:":",10:"DIR",13:"OPT",14:"NL",20:"acc_title",21:"acc_title_value",22:"acc_descr",23:"acc_descr_value",24:"acc_descr_multiline_value",25:"section",27:"CHECKOUT",29:"BRANCH",30:"ORDER",31:"NUM",32:"CHERRY_PICK",33:"COMMIT_ID",34:"STR",35:"COMMIT_TAG",36:"EMPTYSTR",37:"MERGE",38:"COMMIT_TYPE",40:"COMMIT",42:"COMMIT_MSG",43:"NORMAL",44:"REVERSE",45:"HIGHLIGHT",50:"open_directive",51:"type_directive",52:"arg_directive",53:"close_directive",54:"ID",55:";"},productions_:[0,[3,2],[3,2],[3,3],[3,4],[3,5],[7,0],[7,2],[11,2],[11,1],[12,0],[12,2],[15,2],[15,1],[16,1],[16,1],[16,1],[16,2],[16,2],[16,1],[16,1],[16,1],[16,2],[26,2],[26,4],[19,3],[19,5],[19,5],[19,5],[19,5],[18,2],[18,4],[18,4],[18,4],[18,6],[18,6],[18,6],[18,6],[18,6],[18,6],[18,8],[18,8],[18,8],[18,8],[18,8],[18,8],[17,2],[17,3],[17,3],[17,5],[17,5],[17,3],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,3],[17,5],[17,5],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[41,0],[41,1],[39,1],[39,1],[39,1],[5,3],[5,5],[46,1],[47,1],[49,1],[48,1],[28,1],[28,1],[4,1],[4,1],[4,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 3:return a[o];case 4:return a[o-1];case 5:return r.setDirection(a[o-3]),a[o-1];case 7:r.setOptions(a[o-1]),this.$=a[o];break;case 8:a[o-1]+=a[o],this.$=a[o-1];break;case 10:this.$=[];break;case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 12:this.$=a[o-1];break;case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 20:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 22:r.checkout(a[o]);break;case 23:r.branch(a[o]);break;case 24:r.branch(a[o-2],a[o]);break;case 25:r.cherryPick(a[o],"",void 0);break;case 26:r.cherryPick(a[o-2],"",a[o]);break;case 27:case 29:r.cherryPick(a[o-2],"","");break;case 28:r.cherryPick(a[o],"",a[o-2]);break;case 30:r.merge(a[o],"","","");break;case 31:r.merge(a[o-2],a[o],"","");break;case 32:r.merge(a[o-2],"",a[o],"");break;case 33:r.merge(a[o-2],"","",a[o]);break;case 34:r.merge(a[o-4],a[o],"",a[o-2]);break;case 35:r.merge(a[o-4],"",a[o],a[o-2]);break;case 36:r.merge(a[o-4],"",a[o-2],a[o]);break;case 37:r.merge(a[o-4],a[o-2],a[o],"");break;case 38:r.merge(a[o-4],a[o-2],"",a[o]);break;case 39:r.merge(a[o-4],a[o],a[o-2],"");break;case 40:r.merge(a[o-6],a[o-4],a[o-2],a[o]);break;case 41:r.merge(a[o-6],a[o],a[o-4],a[o-2]);break;case 42:r.merge(a[o-6],a[o-4],a[o],a[o-2]);break;case 43:r.merge(a[o-6],a[o-2],a[o-4],a[o]);break;case 44:r.merge(a[o-6],a[o],a[o-2],a[o-4]);break;case 45:r.merge(a[o-6],a[o-2],a[o],a[o-4]);break;case 46:r.commit(a[o]);break;case 47:r.commit("","",r.commitType.NORMAL,a[o]);break;case 48:r.commit("","",a[o],"");break;case 49:r.commit("","",a[o],a[o-2]);break;case 50:r.commit("","",a[o-2],a[o]);break;case 51:r.commit("",a[o],r.commitType.NORMAL,"");break;case 52:r.commit("",a[o-2],r.commitType.NORMAL,a[o]);break;case 53:r.commit("",a[o],r.commitType.NORMAL,a[o-2]);break;case 54:r.commit("",a[o-2],a[o],"");break;case 55:r.commit("",a[o],a[o-2],"");break;case 56:r.commit("",a[o-4],a[o-2],a[o]);break;case 57:r.commit("",a[o-4],a[o],a[o-2]);break;case 58:r.commit("",a[o-2],a[o-4],a[o]);break;case 59:r.commit("",a[o],a[o-4],a[o-2]);break;case 60:r.commit("",a[o],a[o-2],a[o-4]);break;case 61:r.commit("",a[o-2],a[o],a[o-4]);break;case 62:r.commit(a[o],"",r.commitType.NORMAL,"");break;case 63:r.commit(a[o],"",r.commitType.NORMAL,a[o-2]);break;case 64:r.commit(a[o-2],"",r.commitType.NORMAL,a[o]);break;case 65:r.commit(a[o-2],"",a[o],"");break;case 66:r.commit(a[o],"",a[o-2],"");break;case 67:r.commit(a[o],a[o-2],r.commitType.NORMAL,"");break;case 68:r.commit(a[o-2],a[o],r.commitType.NORMAL,"");break;case 69:r.commit(a[o-4],"",a[o-2],a[o]);break;case 70:r.commit(a[o-4],"",a[o],a[o-2]);break;case 71:r.commit(a[o-2],"",a[o-4],a[o]);break;case 72:r.commit(a[o],"",a[o-4],a[o-2]);break;case 73:r.commit(a[o],"",a[o-2],a[o-4]);break;case 74:r.commit(a[o-2],"",a[o],a[o-4]);break;case 75:r.commit(a[o-4],a[o],a[o-2],"");break;case 76:r.commit(a[o-4],a[o-2],a[o],"");break;case 77:r.commit(a[o-2],a[o],a[o-4],"");break;case 78:r.commit(a[o],a[o-2],a[o-4],"");break;case 79:r.commit(a[o],a[o-4],a[o-2],"");break;case 80:r.commit(a[o-2],a[o-4],a[o],"");break;case 81:r.commit(a[o-4],a[o],r.commitType.NORMAL,a[o-2]);break;case 82:r.commit(a[o-4],a[o-2],r.commitType.NORMAL,a[o]);break;case 83:r.commit(a[o-2],a[o],r.commitType.NORMAL,a[o-4]);break;case 84:r.commit(a[o],a[o-2],r.commitType.NORMAL,a[o-4]);break;case 85:r.commit(a[o],a[o-4],r.commitType.NORMAL,a[o-2]);break;case 86:r.commit(a[o-2],a[o-4],r.commitType.NORMAL,a[o]);break;case 87:r.commit(a[o-6],a[o-4],a[o-2],a[o]);break;case 88:r.commit(a[o-6],a[o-4],a[o],a[o-2]);break;case 89:r.commit(a[o-6],a[o-2],a[o-4],a[o]);break;case 90:r.commit(a[o-6],a[o],a[o-4],a[o-2]);break;case 91:r.commit(a[o-6],a[o-2],a[o],a[o-4]);break;case 92:r.commit(a[o-6],a[o],a[o-2],a[o-4]);break;case 93:r.commit(a[o-4],a[o-6],a[o-2],a[o]);break;case 94:r.commit(a[o-4],a[o-6],a[o],a[o-2]);break;case 95:r.commit(a[o-2],a[o-6],a[o-4],a[o]);break;case 96:r.commit(a[o],a[o-6],a[o-4],a[o-2]);break;case 97:r.commit(a[o-2],a[o-6],a[o],a[o-4]);break;case 98:r.commit(a[o],a[o-6],a[o-2],a[o-4]);break;case 99:r.commit(a[o],a[o-4],a[o-2],a[o-6]);break;case 100:r.commit(a[o-2],a[o-4],a[o],a[o-6]);break;case 101:r.commit(a[o],a[o-2],a[o-4],a[o-6]);break;case 102:r.commit(a[o-2],a[o],a[o-4],a[o-6]);break;case 103:r.commit(a[o-4],a[o-2],a[o],a[o-6]);break;case 104:r.commit(a[o-4],a[o],a[o-2],a[o-6]);break;case 105:r.commit(a[o-2],a[o-4],a[o-6],a[o]);break;case 106:r.commit(a[o],a[o-4],a[o-6],a[o-2]);break;case 107:r.commit(a[o-2],a[o],a[o-6],a[o-4]);break;case 108:r.commit(a[o],a[o-2],a[o-6],a[o-4]);break;case 109:r.commit(a[o-4],a[o-2],a[o-6],a[o]);break;case 110:r.commit(a[o-4],a[o],a[o-6],a[o-2]);break;case 111:this.$="";break;case 112:this.$=a[o];break;case 113:this.$=r.commitType.NORMAL;break;case 114:this.$=r.commitType.REVERSE;break;case 115:this.$=r.commitType.HIGHLIGHT;break;case 118:r.parseDirective("%%{","open_directive");break;case 119:r.parseDirective(a[o],"type_directive");break;case 120:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 121:r.parseDirective("}%%","close_directive","gitGraph")}},table:[{3:1,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{1:[3]},{3:10,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{3:11,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{7:12,8:o,9:[1,13],10:[1,14],11:15,14:c},e(l,[2,124]),e(l,[2,125]),e(l,[2,126]),{47:17,51:[1,18]},{51:[2,118]},{1:[2,1]},{1:[2,2]},{8:[1,19]},{7:20,8:o,11:15,14:c},{9:[1,21]},e(h,[2,10],{12:22,13:[1,23]}),e(u,[2,9]),{9:[1,25],48:24,53:d},e([9,53],[2,119]),{1:[2,3]},{8:[1,27]},{7:28,8:o,11:15,14:c},{8:[2,7],14:[1,31],15:29,16:30,17:32,18:33,19:34,20:[1,35],22:[1,36],24:[1,37],25:[1,38],26:39,27:[1,40],29:[1,44],32:[1,43],37:[1,42],40:[1,41]},e(u,[2,8]),e(p,[2,116]),{49:45,52:[1,46]},e(p,[2,121]),{1:[2,4]},{8:[1,47]},e(h,[2,11]),{4:48,8:r,14:i,55:s},e(h,[2,13]),e(f,[2,14]),e(f,[2,15]),e(f,[2,16]),{21:[1,49]},{23:[1,50]},e(f,[2,19]),e(f,[2,20]),e(f,[2,21]),{28:51,34:g,54:y},e(f,[2,111],{41:54,33:[1,57],34:[1,59],35:[1,55],38:[1,56],42:[1,58]}),{28:60,34:g,54:y},{33:[1,61],35:[1,62]},{28:63,34:g,54:y},{48:64,53:d},{53:[2,120]},{1:[2,5]},e(h,[2,12]),e(f,[2,17]),e(f,[2,18]),e(f,[2,22]),e(m,[2,122]),e(m,[2,123]),e(f,[2,46]),{34:[1,65]},{39:66,43:b,44:_,45:x},{34:[1,70]},{34:[1,71]},e(f,[2,112]),e(f,[2,30],{33:[1,72],35:[1,74],38:[1,73]}),{34:[1,75]},{34:[1,76],36:[1,77]},e(f,[2,23],{30:[1,78]}),e(p,[2,117]),e(f,[2,47],{33:[1,80],38:[1,79],42:[1,81]}),e(f,[2,48],{33:[1,83],35:[1,82],42:[1,84]}),e(v,[2,113]),e(v,[2,114]),e(v,[2,115]),e(f,[2,51],{35:[1,85],38:[1,86],42:[1,87]}),e(f,[2,62],{33:[1,90],35:[1,88],38:[1,89]}),{34:[1,91]},{39:92,43:b,44:_,45:x},{34:[1,93]},e(f,[2,25],{35:[1,94]}),{33:[1,95]},{33:[1,96]},{31:[1,97]},{39:98,43:b,44:_,45:x},{34:[1,99]},{34:[1,100]},{34:[1,101]},{34:[1,102]},{34:[1,103]},{34:[1,104]},{39:105,43:b,44:_,45:x},{34:[1,106]},{34:[1,107]},{39:108,43:b,44:_,45:x},{34:[1,109]},e(f,[2,31],{35:[1,111],38:[1,110]}),e(f,[2,32],{33:[1,113],35:[1,112]}),e(f,[2,33],{33:[1,114],38:[1,115]}),{34:[1,116],36:[1,117]},{34:[1,118]},{34:[1,119]},e(f,[2,24]),e(f,[2,49],{33:[1,120],42:[1,121]}),e(f,[2,53],{38:[1,122],42:[1,123]}),e(f,[2,63],{33:[1,125],38:[1,124]}),e(f,[2,50],{33:[1,126],42:[1,127]}),e(f,[2,55],{35:[1,128],42:[1,129]}),e(f,[2,66],{33:[1,131],35:[1,130]}),e(f,[2,52],{38:[1,132],42:[1,133]}),e(f,[2,54],{35:[1,134],42:[1,135]}),e(f,[2,67],{35:[1,137],38:[1,136]}),e(f,[2,64],{33:[1,139],38:[1,138]}),e(f,[2,65],{33:[1,141],35:[1,140]}),e(f,[2,68],{35:[1,143],38:[1,142]}),{39:144,43:b,44:_,45:x},{34:[1,145]},{34:[1,146]},{34:[1,147]},{34:[1,148]},{39:149,43:b,44:_,45:x},e(f,[2,26]),e(f,[2,27]),e(f,[2,28]),e(f,[2,29]),{34:[1,150]},{34:[1,151]},{39:152,43:b,44:_,45:x},{34:[1,153]},{39:154,43:b,44:_,45:x},{34:[1,155]},{34:[1,156]},{34:[1,157]},{34:[1,158]},{34:[1,159]},{34:[1,160]},{34:[1,161]},{39:162,43:b,44:_,45:x},{34:[1,163]},{34:[1,164]},{34:[1,165]},{39:166,43:b,44:_,45:x},{34:[1,167]},{39:168,43:b,44:_,45:x},{34:[1,169]},{34:[1,170]},{34:[1,171]},{39:172,43:b,44:_,45:x},{34:[1,173]},e(f,[2,37],{35:[1,174]}),e(f,[2,38],{38:[1,175]}),e(f,[2,36],{33:[1,176]}),e(f,[2,39],{35:[1,177]}),e(f,[2,34],{38:[1,178]}),e(f,[2,35],{33:[1,179]}),e(f,[2,60],{42:[1,180]}),e(f,[2,73],{33:[1,181]}),e(f,[2,61],{42:[1,182]}),e(f,[2,84],{38:[1,183]}),e(f,[2,74],{33:[1,184]}),e(f,[2,83],{38:[1,185]}),e(f,[2,59],{42:[1,186]}),e(f,[2,72],{33:[1,187]}),e(f,[2,58],{42:[1,188]}),e(f,[2,78],{35:[1,189]}),e(f,[2,71],{33:[1,190]}),e(f,[2,77],{35:[1,191]}),e(f,[2,57],{42:[1,192]}),e(f,[2,85],{38:[1,193]}),e(f,[2,56],{42:[1,194]}),e(f,[2,79],{35:[1,195]}),e(f,[2,80],{35:[1,196]}),e(f,[2,86],{38:[1,197]}),e(f,[2,70],{33:[1,198]}),e(f,[2,81],{38:[1,199]}),e(f,[2,69],{33:[1,200]}),e(f,[2,75],{35:[1,201]}),e(f,[2,76],{35:[1,202]}),e(f,[2,82],{38:[1,203]}),{34:[1,204]},{39:205,43:b,44:_,45:x},{34:[1,206]},{34:[1,207]},{39:208,43:b,44:_,45:x},{34:[1,209]},{34:[1,210]},{34:[1,211]},{34:[1,212]},{39:213,43:b,44:_,45:x},{34:[1,214]},{39:215,43:b,44:_,45:x},{34:[1,216]},{34:[1,217]},{34:[1,218]},{34:[1,219]},{34:[1,220]},{34:[1,221]},{34:[1,222]},{39:223,43:b,44:_,45:x},{34:[1,224]},{34:[1,225]},{34:[1,226]},{39:227,43:b,44:_,45:x},{34:[1,228]},{39:229,43:b,44:_,45:x},{34:[1,230]},{34:[1,231]},{34:[1,232]},{39:233,43:b,44:_,45:x},e(f,[2,40]),e(f,[2,42]),e(f,[2,41]),e(f,[2,43]),e(f,[2,45]),e(f,[2,44]),e(f,[2,101]),e(f,[2,102]),e(f,[2,99]),e(f,[2,100]),e(f,[2,104]),e(f,[2,103]),e(f,[2,108]),e(f,[2,107]),e(f,[2,106]),e(f,[2,105]),e(f,[2,110]),e(f,[2,109]),e(f,[2,98]),e(f,[2,97]),e(f,[2,96]),e(f,[2,95]),e(f,[2,93]),e(f,[2,94]),e(f,[2,92]),e(f,[2,91]),e(f,[2,90]),e(f,[2,89]),e(f,[2,87]),e(f,[2,88])],defaultActions:{9:[2,118],10:[2,1],11:[2,2],19:[2,3],27:[2,4],46:[2,120],47:[2,5]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),50;case 1:return this.begin("type_directive"),51;case 2:return this.popState(),this.begin("arg_directive"),9;case 3:return this.popState(),this.popState(),53;case 4:return 52;case 5:return this.begin("acc_title"),20;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),22;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 34:case 38:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:return 14;case 13:case 14:break;case 15:return 6;case 16:return 40;case 17:return 33;case 18:return 38;case 19:return 42;case 20:return 43;case 21:return 44;case 22:return 45;case 23:return 35;case 24:return 29;case 25:return 30;case 26:return 37;case 27:return 32;case 28:return 27;case 29:case 30:return 10;case 31:return 9;case 32:return"CARET";case 33:this.begin("options");break;case 35:return 13;case 36:return 36;case 37:this.begin("string");break;case 39:return 34;case 40:return 31;case 41:return 54;case 42:return 8}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:gitGraph\b)/i,/^(?:commit(?=\s|$))/i,/^(?:id:)/i,/^(?:type:)/i,/^(?:msg:)/i,/^(?:NORMAL\b)/i,/^(?:REVERSE\b)/i,/^(?:HIGHLIGHT\b)/i,/^(?:tag:)/i,/^(?:branch(?=\s|$))/i,/^(?:order:)/i,/^(?:merge(?=\s|$))/i,/^(?:cherry-pick(?=\s|$))/i,/^(?:checkout(?=\s|$))/i,/^(?:LR\b)/i,/^(?:BT\b)/i,/^(?::)/i,/^(?:\^)/i,/^(?:options\r?\n)/i,/^(?:[ \r\n\t]+end\b)/i,/^(?:[\s\S]+(?=[ \r\n\t]+end))/i,/^(?:["]["])/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[0-9]+(?=\s|$))/i,/^(?:\w([-\./\w]*[-\w])?)/i,/^(?:$)/i,/^(?:\s+)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},options:{rules:[34,35],inclusive:!1},string:{rules:[38,39],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,36,37,40,41,42,43],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Jr.parser=Jr;const ti=Jr,ei=t=>null!==t.match(/^\s*gitGraph/);let ni=ar().gitGraph.mainBranchName,ri=ar().gitGraph.mainBranchOrder,ii={},ai=null,si={};si[ni]={name:ni,order:ri};let oi={};oi[ni]=ai;let ci=ni,li="LR",hi=0;function ui(){return $n({length:7})}let di={};const pi=function(t){if(t=Yt.sanitizeText(t,ar()),void 0===oi[t]){let e=new Error('Trying to checkout branch which is not yet created. (Help try using "branch '+t+'")');throw e.hash={text:"checkout "+t,token:"checkout "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"branch '+t+'"']},e}{ci=t;const e=oi[ci];ai=ii[e]}};function fi(t,e,n){const r=t.indexOf(e);-1===r?t.push(n):t.splice(r,1,n)}function gi(t){const e=t.reduce(((t,e)=>t.seq>e.seq?t:e),t[0]);let n="";t.forEach((function(t){n+=t===e?"\t*":"\t|"}));const r=[n,e.id,e.seq];for(let i in oi)oi[i]===e.id&&r.push(i);if(Nt.debug(r.join(" ")),e.parents&&2==e.parents.length){const n=ii[e.parents[0]];fi(t,e,n),t.push(ii[e.parents[1]])}else{if(0==e.parents.length)return;{const n=ii[e.parents];fi(t,e,n)}}gi(t=function(t,e){const n=Object.create(null);return t.reduce(((t,r)=>{const i=e(r);return n[i]||(n[i]=!0,t.push(r)),t}),[])}(t,(t=>t.id)))}const yi=function(){const t=Object.keys(ii).map((function(t){return ii[t]}));return t.forEach((function(t){Nt.debug(t.id)})),t.sort(((t,e)=>t.seq-e.seq)),t},mi={NORMAL:0,REVERSE:1,HIGHLIGHT:2,MERGE:3,CHERRY_PICK:4},bi={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gitGraph,setDirection:function(t){li=t},setOptions:function(t){Nt.debug("options str",t),t=(t=t&&t.trim())||"{}";try{di=JSON.parse(t)}catch(e){Nt.error("error while parsing gitGraph options",e.message)}},getOptions:function(){return di},commit:function(t,e,n,r){Nt.debug("Entering commit:",t,e,n,r),e=Yt.sanitizeText(e,ar()),t=Yt.sanitizeText(t,ar()),r=Yt.sanitizeText(r,ar());const i={id:e||hi+"-"+ui(),message:t,seq:hi++,type:n||mi.NORMAL,tag:r||"",parents:null==ai?[]:[ai.id],branch:ci};ai=i,ii[i.id]=i,oi[ci]=i.id,Nt.debug("in pushCommit "+i.id)},branch:function(t,e){if(t=Yt.sanitizeText(t,ar()),void 0!==oi[t]){let e=new Error('Trying to create an existing branch. (Help: Either use a new name if you want create a new branch or try using "checkout '+t+'")');throw e.hash={text:"branch "+t,token:"branch "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"checkout '+t+'"']},e}oi[t]=null!=ai?ai.id:null,si[t]={name:t,order:e?parseInt(e,10):null},pi(t),Nt.debug("in createBranch")},merge:function(t,e,n,r){t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar());const i=ii[oi[ci]],a=ii[oi[t]];if(ci===t){let e=new Error('Incorrect usage of "merge". Cannot merge a branch to itself');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(void 0===i||!i){let e=new Error('Incorrect usage of "merge". Current branch ('+ci+")has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["commit"]},e}if(void 0===oi[t]){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") does not exist");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch "+t]},e}if(void 0===a||!a){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"commit"']},e}if(i===a){let e=new Error('Incorrect usage of "merge". Both branches have same head');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(e&&void 0!==ii[e]){let i=new Error('Incorrect usage of "merge". Commit with id:'+e+" already exists, use different custom Id");throw i.hash={text:"merge "+t+e+n+r,token:"merge "+t+e+n+r,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["merge "+t+" "+e+"_UNIQUE "+n+" "+r]},i}const s={id:e||hi+"-"+ui(),message:"merged branch "+t+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,oi[t]],branch:ci,type:mi.MERGE,customType:n,customId:!!e,tag:r||""};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in mergeBranch")},cherryPick:function(t,e,n){if(Nt.debug("Entering cherryPick:",t,e,n),t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar()),n=Yt.sanitizeText(n,ar()),!t||void 0===ii[t]){let n=new Error('Incorrect usage of "cherryPick". Source commit id should exist and provided');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}let r=ii[t],i=r.branch;if(r.type===mi.MERGE){let n=new Error('Incorrect usage of "cherryPick". Source commit should not be a merge commit');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}if(!e||void 0===ii[e]){if(i===ci){let n=new Error('Incorrect usage of "cherryPick". Source commit is already on current branch');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const a=ii[oi[ci]];if(void 0===a||!a){let n=new Error('Incorrect usage of "cherry-pick". Current branch ('+ci+")has no commits");throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const s={id:hi+"-"+ui(),message:"cherry-picked "+r+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,r.id],branch:ci,type:mi.CHERRY_PICK,tag:n??"cherry-pick:"+r.id};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in cherryPick")}},checkout:pi,prettyPrint:function(){Nt.debug(ii);gi([yi()[0]])},clear:function(){ii={},ai=null;let t=ar().gitGraph.mainBranchName,e=ar().gitGraph.mainBranchOrder;oi={},oi[t]=null,si={},si[t]={name:t,order:e},ci=t,hi=0,Dr()},getBranchesAsObjArray:function(){const t=Object.values(si).map(((t,e)=>null!==t.order?t:{...t,order:parseFloat(`0.${e}`,10)})).sort(((t,e)=>t.order-e.order)).map((({name:t})=>({name:t})));return t},getBranches:function(){return oi},getCommits:function(){return ii},getCommitsArray:yi,getCurrentBranch:function(){return ci},getDirection:function(){return li},getHead:function(){return ai},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,setDiagramTitle:$r,getDiagramTitle:Rr,commitType:mi};let _i={};const xi=0,vi=1,ki=2,wi=3,Ei=4;let Ci={},Ti={},Si=[],Ai=0;const Li=(t,e,n)=>{const r=qr().gitGraph,i=t.append("g").attr("class","commit-bullets"),a=t.append("g").attr("class","commit-labels");let s=0;Object.keys(e).sort(((t,n)=>e[t].seq-e[n].seq)).forEach((t=>{const o=e[t],c=Ci[o.branch].pos,l=s+10;if(n){let t,e=void 0!==o.customType&&""!==o.customType?o.customType:o.type;switch(e){case xi:t="commit-normal";break;case vi:t="commit-reverse";break;case ki:t="commit-highlight";break;case wi:t="commit-merge";break;case Ei:t="commit-cherry-pick";break;default:t="commit-normal"}if(e===ki){const e=i.append("rect");e.attr("x",l-10),e.attr("y",c-10),e.attr("height",20),e.attr("width",20),e.attr("class",`commit ${o.id} commit-highlight${Ci[o.branch].index%8} ${t}-outer`),i.append("rect").attr("x",l-6).attr("y",c-6).attr("height",12).attr("width",12).attr("class",`commit ${o.id} commit${Ci[o.branch].index%8} ${t}-inner`)}else if(e===Ei)i.append("circle").attr("cx",l).attr("cy",c).attr("r",10).attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l-3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l+3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l+3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l-3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`);else{const n=i.append("circle");if(n.attr("cx",l),n.attr("cy",c),n.attr("r",o.type===wi?9:10),n.attr("class",`commit ${o.id} commit${Ci[o.branch].index%8}`),e===wi){const e=i.append("circle");e.attr("cx",l),e.attr("cy",c),e.attr("r",6),e.attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}if(e===vi){i.append("path").attr("d",`M ${l-5},${c-5}L${l+5},${c+5}M${l-5},${c+5}L${l+5},${c-5}`).attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}}}if(Ti[o.id]={x:s+10,y:c},n){const t=4,e=2;if(o.type!==Ei&&(o.customId&&o.type===wi||o.type!==wi)&&r.showCommitLabel){const t=a.append("g"),n=t.insert("rect").attr("class","commit-label-bkg"),i=t.append("text").attr("x",s).attr("y",c+25).attr("class","commit-label").text(o.id);let l=i.node().getBBox();if(n.attr("x",s+10-l.width/2-e).attr("y",c+13.5).attr("width",l.width+2*e).attr("height",l.height+2*e),i.attr("x",s+10-l.width/2),r.rotateCommitLabel){let e=-7.5-(l.width+10)/25*9.5,n=10+l.width/25*8.5;t.attr("transform","translate("+e+", "+n+") rotate("+"-45, "+s+", "+c+")")}}if(o.tag){const n=a.insert("polygon"),r=a.append("circle"),i=a.append("text").attr("y",c-16).attr("class","tag-label").text(o.tag);let l=i.node().getBBox();i.attr("x",s+10-l.width/2);const h=l.height/2,u=c-19.2;n.attr("class","tag-label-bkg").attr("points",`\n          ${s-l.width/2-t/2},${u+e}\n          ${s-l.width/2-t/2},${u-e}\n          ${s+10-l.width/2-t},${u-h-e}\n          ${s+10+l.width/2+t},${u-h-e}\n          ${s+10+l.width/2+t},${u+h+e}\n          ${s+10-l.width/2-t},${u+h+e}`),r.attr("cx",s-l.width/2+t/2).attr("cy",u).attr("r",1.5).attr("class","tag-hole")}}s+=50,s>Ai&&(Ai=s)}))},Bi=(t,e,n=0)=>{const r=t+Math.abs(t-e)/2;if(n>5)return r;if(Si.every((t=>Math.abs(t-r)>=10)))return Si.push(r),r;const i=Math.abs(t-e);return Bi(t,e-i/5,n+1)},Ni=(t,e,n,r)=>{const i=Ti[e.id],a=Ti[n.id],s=((t,e,n)=>Object.keys(n).filter((r=>n[r].branch===e.branch&&n[r].seq>t.seq&&n[r].seq<e.seq)).length>0)(e,n,r);let o,c="",l="",h=0,u=0,d=Ci[n.branch].index;if(s){c="A 10 10, 0, 0, 0,",l="A 10 10, 0, 0, 1,",h=10,u=10,d=Ci[n.branch].index;const t=i.y<a.y?Bi(i.y,a.y):Bi(a.y,i.y);o=i.y<a.y?`M ${i.x} ${i.y} L ${i.x} ${t-h} ${c} ${i.x+u} ${t} L ${a.x-h} ${t} ${l} ${a.x} ${t+u} L ${a.x} ${a.y}`:`M ${i.x} ${i.y} L ${i.x} ${t+h} ${l} ${i.x+u} ${t} L ${a.x-h} ${t} ${c} ${a.x} ${t-u} L ${a.x} ${a.y}`}else i.y<a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[n.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`),i.y>a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${a.x-h} ${i.y} ${c} ${a.x} ${i.y-u} L ${a.x} ${a.y}`),i.y===a.y&&(d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`);t.append("path").attr("d",o).attr("class","arrow arrow"+d%8)},Di=(t,e)=>{const n=qr().gitGraph,r=t.append("g");e.forEach(((t,e)=>{const i=e%8,a=Ci[t.name].pos,s=r.append("line");s.attr("x1",0),s.attr("y1",a),s.attr("x2",Ai),s.attr("y2",a),s.attr("class","branch branch"+i),Si.push(a);const o=(t=>{const e=document.createElementNS("http://www.w3.org/2000/svg","text");let n=[];n="string"==typeof t?t.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(t)?t:[];for(const r of n){const t=document.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),t.setAttribute("dy","1em"),t.setAttribute("x","0"),t.setAttribute("class","row"),t.textContent=r.trim(),e.appendChild(t)}return e})(t.name),c=r.insert("rect"),l=r.insert("g").attr("class","branchLabel").insert("g").attr("class","label branch-label"+i);l.node().appendChild(o);let h=o.getBBox();c.attr("class","branchLabelBkg label"+i).attr("rx",4).attr("ry",4).attr("x",-h.width-4-(!0===n.rotateCommitLabel?30:0)).attr("y",-h.height/2+8).attr("width",h.width+18).attr("height",h.height+4),l.attr("transform","translate("+(-h.width-14-(!0===n.rotateCommitLabel?30:0))+", "+(a-h.height/2-1)+")"),c.attr("transform","translate(-19, "+(a-h.height/2)+")")}))},Oi={draw:function(t,e,n,r){Ci={},Ti={},_i={},Ai=0,Si=[];const i=qr(),a=i.gitGraph;Nt.debug("in gitgraph renderer",t+"\n","id:",e,n),_i=r.db.getCommits();const s=r.db.getBranchesAsObjArray();let c=0;s.forEach(((t,e)=>{Ci[t.name]={pos:c,index:e},c+=50+(a.rotateCommitLabel?40:0)}));const l=(0,o.Ys)(`[id="${e}"]`);Li(l,_i,!1),a.showBranches&&Di(l,s),((t,e)=>{const n=t.append("g").attr("class","commit-arrows");Object.keys(e).forEach((t=>{const r=e[t];r.parents&&r.parents.length>0&&r.parents.forEach((t=>{Ni(n,e[t],r,e)}))}))})(l,_i),Li(l,_i,!0),Gn.insertTitle(l,"gitTitleText",a.titleTopMargin,r.db.getDiagramTitle()),Vr(void 0,l,a.diagramPadding,a.useMaxWidth??i.useMaxWidth)}},Mi=t=>`\n  .commit-id,\n  .commit-msg,\n  .branch-label {\n    fill: lightgrey;\n    color: lightgrey;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  ${[0,1,2,3,4,5,6,7].map((e=>`\n        .branch-label${e} { fill: ${t["gitBranchLabel"+e]}; }\n        .commit${e} { stroke: ${t["git"+e]}; fill: ${t["git"+e]}; }\n        .commit-highlight${e} { stroke: ${t["gitInv"+e]}; fill: ${t["gitInv"+e]}; }\n        .label${e}  { fill: ${t["git"+e]}; }\n        .arrow${e} { stroke: ${t["git"+e]}; }\n        `)).join("\n")}\n\n  .branch {\n    stroke-width: 1;\n    stroke: ${t.lineColor};\n    stroke-dasharray: 2;\n  }\n  .commit-label { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelColor};}\n  .commit-label-bkg { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelBackground}; opacity: 0.5; }\n  .tag-label { font-size: ${t.tagLabelFontSize}; fill: ${t.tagLabelColor};}\n  .tag-label-bkg { fill: ${t.tagLabelBackground}; stroke: ${t.tagLabelBorder}; }\n  .tag-hole { fill: ${t.textColor}; }\n\n  .commit-merge {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n  .commit-reverse {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n    stroke-width: 3;\n  }\n  .commit-highlight-outer {\n  }\n  .commit-highlight-inner {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n\n  .arrow { stroke-width: 8; stroke-linecap: round; fill: none}\n  .gitTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n  }\n`;var Ii=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,6],r=[1,7],i=[1,8],a=[1,9],s=[1,16],o=[1,11],l=[1,12],h=[1,13],u=[1,14],d=[1,15],p=[1,27],f=[1,33],g=[1,34],y=[1,35],m=[1,36],b=[1,37],_=[1,72],x=[1,73],v=[1,74],k=[1,75],w=[1,76],E=[1,77],C=[1,78],T=[1,38],S=[1,39],A=[1,40],L=[1,41],B=[1,42],N=[1,43],D=[1,44],O=[1,45],M=[1,46],I=[1,47],F=[1,48],$=[1,49],R=[1,50],Z=[1,51],P=[1,52],j=[1,53],Y=[1,54],z=[1,55],U=[1,56],W=[1,57],q=[1,59],H=[1,60],V=[1,61],G=[1,62],X=[1,63],K=[1,64],Q=[1,65],J=[1,66],tt=[1,67],et=[1,68],nt=[1,69],rt=[24,52],it=[24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],at=[15,24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],st=[1,94],ot=[1,95],ct=[1,96],lt=[1,97],ht=[15,24,52],ut=[7,8,9,10,18,22,25,26,27,28],dt=[15,24,43,52],pt=[15,24,43,52,86,87,89,90],ft=[15,43],gt=[44,46,47,48,49,50,51,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],yt={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,direction:5,directive:6,direction_tb:7,direction_bt:8,direction_rl:9,direction_lr:10,graphConfig:11,openDirective:12,typeDirective:13,closeDirective:14,NEWLINE:15,":":16,argDirective:17,open_directive:18,type_directive:19,arg_directive:20,close_directive:21,C4_CONTEXT:22,statements:23,EOF:24,C4_CONTAINER:25,C4_COMPONENT:26,C4_DYNAMIC:27,C4_DEPLOYMENT:28,otherStatements:29,diagramStatements:30,otherStatement:31,title:32,accDescription:33,acc_title:34,acc_title_value:35,acc_descr:36,acc_descr_value:37,acc_descr_multiline_value:38,boundaryStatement:39,boundaryStartStatement:40,boundaryStopStatement:41,boundaryStart:42,LBRACE:43,ENTERPRISE_BOUNDARY:44,attributes:45,SYSTEM_BOUNDARY:46,BOUNDARY:47,CONTAINER_BOUNDARY:48,NODE:49,NODE_L:50,NODE_R:51,RBRACE:52,diagramStatement:53,PERSON:54,PERSON_EXT:55,SYSTEM:56,SYSTEM_DB:57,SYSTEM_QUEUE:58,SYSTEM_EXT:59,SYSTEM_EXT_DB:60,SYSTEM_EXT_QUEUE:61,CONTAINER:62,CONTAINER_DB:63,CONTAINER_QUEUE:64,CONTAINER_EXT:65,CONTAINER_EXT_DB:66,CONTAINER_EXT_QUEUE:67,COMPONENT:68,COMPONENT_DB:69,COMPONENT_QUEUE:70,COMPONENT_EXT:71,COMPONENT_EXT_DB:72,COMPONENT_EXT_QUEUE:73,REL:74,BIREL:75,REL_U:76,REL_D:77,REL_L:78,REL_R:79,REL_B:80,REL_INDEX:81,UPDATE_EL_STYLE:82,UPDATE_REL_STYLE:83,UPDATE_LAYOUT_CONFIG:84,attribute:85,STR:86,STR_KEY:87,STR_VALUE:88,ATTRIBUTE:89,ATTRIBUTE_EMPTY:90,$accept:0,$end:1},terminals_:{2:"error",7:"direction_tb",8:"direction_bt",9:"direction_rl",10:"direction_lr",15:"NEWLINE",16:":",18:"open_directive",19:"type_directive",20:"arg_directive",21:"close_directive",22:"C4_CONTEXT",24:"EOF",25:"C4_CONTAINER",26:"C4_COMPONENT",27:"C4_DYNAMIC",28:"C4_DEPLOYMENT",32:"title",33:"accDescription",34:"acc_title",35:"acc_title_value",36:"acc_descr",37:"acc_descr_value",38:"acc_descr_multiline_value",43:"LBRACE",44:"ENTERPRISE_BOUNDARY",46:"SYSTEM_BOUNDARY",47:"BOUNDARY",48:"CONTAINER_BOUNDARY",49:"NODE",50:"NODE_L",51:"NODE_R",52:"RBRACE",54:"PERSON",55:"PERSON_EXT",56:"SYSTEM",57:"SYSTEM_DB",58:"SYSTEM_QUEUE",59:"SYSTEM_EXT",60:"SYSTEM_EXT_DB",61:"SYSTEM_EXT_QUEUE",62:"CONTAINER",63:"CONTAINER_DB",64:"CONTAINER_QUEUE",65:"CONTAINER_EXT",66:"CONTAINER_EXT_DB",67:"CONTAINER_EXT_QUEUE",68:"COMPONENT",69:"COMPONENT_DB",70:"COMPONENT_QUEUE",71:"COMPONENT_EXT",72:"COMPONENT_EXT_DB",73:"COMPONENT_EXT_QUEUE",74:"REL",75:"BIREL",76:"REL_U",77:"REL_D",78:"REL_L",79:"REL_R",80:"REL_B",81:"REL_INDEX",82:"UPDATE_EL_STYLE",83:"UPDATE_REL_STYLE",84:"UPDATE_LAYOUT_CONFIG",86:"STR",87:"STR_KEY",88:"STR_VALUE",89:"ATTRIBUTE",90:"ATTRIBUTE_EMPTY"},productions_:[0,[3,1],[3,1],[3,2],[5,1],[5,1],[5,1],[5,1],[4,1],[6,4],[6,6],[12,1],[13,1],[17,1],[14,1],[11,4],[11,4],[11,4],[11,4],[11,4],[23,1],[23,1],[23,2],[29,1],[29,2],[29,3],[31,1],[31,1],[31,2],[31,2],[31,1],[39,3],[40,3],[40,3],[40,4],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[41,1],[30,1],[30,2],[30,3],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,1],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[45,1],[45,2],[85,1],[85,2],[85,1],[85,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setDirection("TB");break;case 5:r.setDirection("BT");break;case 6:r.setDirection("RL");break;case 7:r.setDirection("LR");break;case 11:r.parseDirective("%%{","open_directive");break;case 12:break;case 13:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 14:r.parseDirective("}%%","close_directive","c4Context");break;case 15:case 16:case 17:case 18:case 19:r.setC4Type(a[o-3]);break;case 26:r.setTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 27:r.setAccDescription(a[o].substring(15)),this.$=a[o].substring(15);break;case 28:this.$=a[o].trim(),r.setTitle(this.$);break;case 29:case 30:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 35:case 36:a[o].splice(2,0,"ENTERPRISE"),r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 37:r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 38:a[o].splice(2,0,"CONTAINER"),r.addContainerBoundary(...a[o]),this.$=a[o];break;case 39:r.addDeploymentNode("node",...a[o]),this.$=a[o];break;case 40:r.addDeploymentNode("nodeL",...a[o]),this.$=a[o];break;case 41:r.addDeploymentNode("nodeR",...a[o]),this.$=a[o];break;case 42:r.popBoundaryParseStack();break;case 46:r.addPersonOrSystem("person",...a[o]),this.$=a[o];break;case 47:r.addPersonOrSystem("external_person",...a[o]),this.$=a[o];break;case 48:r.addPersonOrSystem("system",...a[o]),this.$=a[o];break;case 49:r.addPersonOrSystem("system_db",...a[o]),this.$=a[o];break;case 50:r.addPersonOrSystem("system_queue",...a[o]),this.$=a[o];break;case 51:r.addPersonOrSystem("external_system",...a[o]),this.$=a[o];break;case 52:r.addPersonOrSystem("external_system_db",...a[o]),this.$=a[o];break;case 53:r.addPersonOrSystem("external_system_queue",...a[o]),this.$=a[o];break;case 54:r.addContainer("container",...a[o]),this.$=a[o];break;case 55:r.addContainer("container_db",...a[o]),this.$=a[o];break;case 56:r.addContainer("container_queue",...a[o]),this.$=a[o];break;case 57:r.addContainer("external_container",...a[o]),this.$=a[o];break;case 58:r.addContainer("external_container_db",...a[o]),this.$=a[o];break;case 59:r.addContainer("external_container_queue",...a[o]),this.$=a[o];break;case 60:r.addComponent("component",...a[o]),this.$=a[o];break;case 61:r.addComponent("component_db",...a[o]),this.$=a[o];break;case 62:r.addComponent("component_queue",...a[o]),this.$=a[o];break;case 63:r.addComponent("external_component",...a[o]),this.$=a[o];break;case 64:r.addComponent("external_component_db",...a[o]),this.$=a[o];break;case 65:r.addComponent("external_component_queue",...a[o]),this.$=a[o];break;case 67:r.addRel("rel",...a[o]),this.$=a[o];break;case 68:r.addRel("birel",...a[o]),this.$=a[o];break;case 69:r.addRel("rel_u",...a[o]),this.$=a[o];break;case 70:r.addRel("rel_d",...a[o]),this.$=a[o];break;case 71:r.addRel("rel_l",...a[o]),this.$=a[o];break;case 72:r.addRel("rel_r",...a[o]),this.$=a[o];break;case 73:r.addRel("rel_b",...a[o]),this.$=a[o];break;case 74:a[o].splice(0,1),r.addRel("rel",...a[o]),this.$=a[o];break;case 75:r.updateElStyle("update_el_style",...a[o]),this.$=a[o];break;case 76:r.updateRelStyle("update_rel_style",...a[o]),this.$=a[o];break;case 77:r.updateLayoutConfig("update_layout_config",...a[o]),this.$=a[o];break;case 78:this.$=[a[o]];break;case 79:a[o].unshift(a[o-1]),this.$=a[o];break;case 80:case 82:this.$=a[o].trim();break;case 81:let t={};t[a[o-1].trim()]=a[o].trim(),this.$=t;break;case 83:this.$=""}},table:[{3:1,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[3]},{1:[2,1]},{1:[2,2]},{3:17,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[2,8]},{1:[2,4]},{1:[2,5]},{1:[2,6]},{1:[2,7]},{13:18,19:[1,19]},{15:[1,20]},{15:[1,21]},{15:[1,22]},{15:[1,23]},{15:[1,24]},{19:[2,11]},{1:[2,3]},{14:25,16:[1,26],21:p},e([16,21],[2,12]),{23:28,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:79,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:80,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:81,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:82,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,83]},{17:84,20:[1,85]},{15:[2,14]},{24:[1,86]},e(rt,[2,20],{53:32,39:58,40:70,42:71,30:87,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(rt,[2,21]),e(it,[2,23],{15:[1,88]}),e(rt,[2,43],{15:[1,89]}),e(at,[2,26]),e(at,[2,27]),{35:[1,90]},{37:[1,91]},e(at,[2,30]),{45:92,85:93,86:st,87:ot,89:ct,90:lt},{45:98,85:93,86:st,87:ot,89:ct,90:lt},{45:99,85:93,86:st,87:ot,89:ct,90:lt},{45:100,85:93,86:st,87:ot,89:ct,90:lt},{45:101,85:93,86:st,87:ot,89:ct,90:lt},{45:102,85:93,86:st,87:ot,89:ct,90:lt},{45:103,85:93,86:st,87:ot,89:ct,90:lt},{45:104,85:93,86:st,87:ot,89:ct,90:lt},{45:105,85:93,86:st,87:ot,89:ct,90:lt},{45:106,85:93,86:st,87:ot,89:ct,90:lt},{45:107,85:93,86:st,87:ot,89:ct,90:lt},{45:108,85:93,86:st,87:ot,89:ct,90:lt},{45:109,85:93,86:st,87:ot,89:ct,90:lt},{45:110,85:93,86:st,87:ot,89:ct,90:lt},{45:111,85:93,86:st,87:ot,89:ct,90:lt},{45:112,85:93,86:st,87:ot,89:ct,90:lt},{45:113,85:93,86:st,87:ot,89:ct,90:lt},{45:114,85:93,86:st,87:ot,89:ct,90:lt},{45:115,85:93,86:st,87:ot,89:ct,90:lt},{45:116,85:93,86:st,87:ot,89:ct,90:lt},e(ht,[2,66]),{45:117,85:93,86:st,87:ot,89:ct,90:lt},{45:118,85:93,86:st,87:ot,89:ct,90:lt},{45:119,85:93,86:st,87:ot,89:ct,90:lt},{45:120,85:93,86:st,87:ot,89:ct,90:lt},{45:121,85:93,86:st,87:ot,89:ct,90:lt},{45:122,85:93,86:st,87:ot,89:ct,90:lt},{45:123,85:93,86:st,87:ot,89:ct,90:lt},{45:124,85:93,86:st,87:ot,89:ct,90:lt},{45:125,85:93,86:st,87:ot,89:ct,90:lt},{45:126,85:93,86:st,87:ot,89:ct,90:lt},{45:127,85:93,86:st,87:ot,89:ct,90:lt},{30:128,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,130],43:[1,129]},{45:131,85:93,86:st,87:ot,89:ct,90:lt},{45:132,85:93,86:st,87:ot,89:ct,90:lt},{45:133,85:93,86:st,87:ot,89:ct,90:lt},{45:134,85:93,86:st,87:ot,89:ct,90:lt},{45:135,85:93,86:st,87:ot,89:ct,90:lt},{45:136,85:93,86:st,87:ot,89:ct,90:lt},{45:137,85:93,86:st,87:ot,89:ct,90:lt},{24:[1,138]},{24:[1,139]},{24:[1,140]},{24:[1,141]},e(ut,[2,9]),{14:142,21:p},{21:[2,13]},{1:[2,15]},e(rt,[2,22]),e(it,[2,24],{31:31,29:143,32:f,33:g,34:y,36:m,38:b}),e(rt,[2,44],{29:29,30:30,31:31,53:32,39:58,40:70,42:71,23:144,32:f,33:g,34:y,36:m,38:b,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(at,[2,28]),e(at,[2,29]),e(ht,[2,46]),e(dt,[2,78],{85:93,45:145,86:st,87:ot,89:ct,90:lt}),e(pt,[2,80]),{88:[1,146]},e(pt,[2,82]),e(pt,[2,83]),e(ht,[2,47]),e(ht,[2,48]),e(ht,[2,49]),e(ht,[2,50]),e(ht,[2,51]),e(ht,[2,52]),e(ht,[2,53]),e(ht,[2,54]),e(ht,[2,55]),e(ht,[2,56]),e(ht,[2,57]),e(ht,[2,58]),e(ht,[2,59]),e(ht,[2,60]),e(ht,[2,61]),e(ht,[2,62]),e(ht,[2,63]),e(ht,[2,64]),e(ht,[2,65]),e(ht,[2,67]),e(ht,[2,68]),e(ht,[2,69]),e(ht,[2,70]),e(ht,[2,71]),e(ht,[2,72]),e(ht,[2,73]),e(ht,[2,74]),e(ht,[2,75]),e(ht,[2,76]),e(ht,[2,77]),{41:147,52:[1,148]},{15:[1,149]},{43:[1,150]},e(ft,[2,35]),e(ft,[2,36]),e(ft,[2,37]),e(ft,[2,38]),e(ft,[2,39]),e(ft,[2,40]),e(ft,[2,41]),{1:[2,16]},{1:[2,17]},{1:[2,18]},{1:[2,19]},{15:[1,151]},e(it,[2,25]),e(rt,[2,45]),e(dt,[2,79]),e(pt,[2,81]),e(ht,[2,31]),e(ht,[2,42]),e(gt,[2,32]),e(gt,[2,33],{15:[1,152]}),e(ut,[2,10]),e(gt,[2,34])],defaultActions:{2:[2,1],3:[2,2],5:[2,8],6:[2,4],7:[2,5],8:[2,6],9:[2,7],16:[2,11],17:[2,3],27:[2,14],85:[2,13],86:[2,15],138:[2,16],139:[2,17],140:[2,18],141:[2,19]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},mt=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),18;case 1:return 7;case 2:return 8;case 3:return 9;case 4:return 10;case 5:return this.begin("type_directive"),19;case 6:return this.popState(),this.begin("arg_directive"),16;case 7:return this.popState(),this.popState(),21;case 8:return 20;case 9:return 32;case 10:return 33;case 11:return this.begin("acc_title"),34;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),36;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 78:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:case 21:case 75:break;case 19:c;break;case 20:return 15;case 22:return 22;case 23:return 25;case 24:return 26;case 25:return 27;case 26:return 28;case 27:return this.begin("person_ext"),55;case 28:return this.begin("person"),54;case 29:return this.begin("system_ext_queue"),61;case 30:return this.begin("system_ext_db"),60;case 31:return this.begin("system_ext"),59;case 32:return this.begin("system_queue"),58;case 33:return this.begin("system_db"),57;case 34:return this.begin("system"),56;case 35:return this.begin("boundary"),47;case 36:return this.begin("enterprise_boundary"),44;case 37:return this.begin("system_boundary"),46;case 38:return this.begin("container_ext_queue"),67;case 39:return this.begin("container_ext_db"),66;case 40:return this.begin("container_ext"),65;case 41:return this.begin("container_queue"),64;case 42:return this.begin("container_db"),63;case 43:return this.begin("container"),62;case 44:return this.begin("container_boundary"),48;case 45:return this.begin("component_ext_queue"),73;case 46:return this.begin("component_ext_db"),72;case 47:return this.begin("component_ext"),71;case 48:return this.begin("component_queue"),70;case 49:return this.begin("component_db"),69;case 50:return this.begin("component"),68;case 51:case 52:return this.begin("node"),49;case 53:return this.begin("node_l"),50;case 54:return this.begin("node_r"),51;case 55:return this.begin("rel"),74;case 56:return this.begin("birel"),75;case 57:case 58:return this.begin("rel_u"),76;case 59:case 60:return this.begin("rel_d"),77;case 61:case 62:return this.begin("rel_l"),78;case 63:case 64:return this.begin("rel_r"),79;case 65:return this.begin("rel_b"),80;case 66:return this.begin("rel_index"),81;case 67:return this.begin("update_el_style"),82;case 68:return this.begin("update_rel_style"),83;case 69:return this.begin("update_layout_config"),84;case 70:return"EOF_IN_STRUCT";case 71:return this.begin("attribute"),"ATTRIBUTE_EMPTY";case 72:this.begin("attribute");break;case 73:case 84:this.popState(),this.popState();break;case 74:case 76:return 90;case 77:this.begin("string");break;case 79:case 85:return"STR";case 80:this.begin("string_kv");break;case 81:return this.begin("string_kv_key"),"STR_KEY";case 82:this.popState(),this.begin("string_kv_value");break;case 83:return"STR_VALUE";case 86:return"LBRACE";case 87:return"RBRACE";case 88:return"SPACE";case 89:return"EOL";case 90:return 24}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:title\s[^#\n;]+)/,/^(?:accDescription\s[^#\n;]+)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:C4Context\b)/,/^(?:C4Container\b)/,/^(?:C4Component\b)/,/^(?:C4Dynamic\b)/,/^(?:C4Deployment\b)/,/^(?:Person_Ext\b)/,/^(?:Person\b)/,/^(?:SystemQueue_Ext\b)/,/^(?:SystemDb_Ext\b)/,/^(?:System_Ext\b)/,/^(?:SystemQueue\b)/,/^(?:SystemDb\b)/,/^(?:System\b)/,/^(?:Boundary\b)/,/^(?:Enterprise_Boundary\b)/,/^(?:System_Boundary\b)/,/^(?:ContainerQueue_Ext\b)/,/^(?:ContainerDb_Ext\b)/,/^(?:Container_Ext\b)/,/^(?:ContainerQueue\b)/,/^(?:ContainerDb\b)/,/^(?:Container\b)/,/^(?:Container_Boundary\b)/,/^(?:ComponentQueue_Ext\b)/,/^(?:ComponentDb_Ext\b)/,/^(?:Component_Ext\b)/,/^(?:ComponentQueue\b)/,/^(?:ComponentDb\b)/,/^(?:Component\b)/,/^(?:Deployment_Node\b)/,/^(?:Node\b)/,/^(?:Node_L\b)/,/^(?:Node_R\b)/,/^(?:Rel\b)/,/^(?:BiRel\b)/,/^(?:Rel_Up\b)/,/^(?:Rel_U\b)/,/^(?:Rel_Down\b)/,/^(?:Rel_D\b)/,/^(?:Rel_Left\b)/,/^(?:Rel_L\b)/,/^(?:Rel_Right\b)/,/^(?:Rel_R\b)/,/^(?:Rel_Back\b)/,/^(?:RelIndex\b)/,/^(?:UpdateElementStyle\b)/,/^(?:UpdateRelStyle\b)/,/^(?:UpdateLayoutConfig\b)/,/^(?:$)/,/^(?:[(][ ]*[,])/,/^(?:[(])/,/^(?:[)])/,/^(?:,,)/,/^(?:,)/,/^(?:[ ]*["]["])/,/^(?:[ ]*["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[ ]*[\$])/,/^(?:[^=]*)/,/^(?:[=][ ]*["])/,/^(?:[^"]+)/,/^(?:["])/,/^(?:[^,]+)/,/^(?:\{)/,/^(?:\})/,/^(?:[\s]+)/,/^(?:[\n\r]+)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},string_kv_value:{rules:[83,84],inclusive:!1},string_kv_key:{rules:[82],inclusive:!1},string_kv:{rules:[81],inclusive:!1},string:{rules:[78,79],inclusive:!1},attribute:{rules:[73,74,75,76,77,80,85],inclusive:!1},update_layout_config:{rules:[70,71,72,73],inclusive:!1},update_rel_style:{rules:[70,71,72,73],inclusive:!1},update_el_style:{rules:[70,71,72,73],inclusive:!1},rel_b:{rules:[70,71,72,73],inclusive:!1},rel_r:{rules:[70,71,72,73],inclusive:!1},rel_l:{rules:[70,71,72,73],inclusive:!1},rel_d:{rules:[70,71,72,73],inclusive:!1},rel_u:{rules:[70,71,72,73],inclusive:!1},rel_bi:{rules:[],inclusive:!1},rel:{rules:[70,71,72,73],inclusive:!1},node_r:{rules:[70,71,72,73],inclusive:!1},node_l:{rules:[70,71,72,73],inclusive:!1},node:{rules:[70,71,72,73],inclusive:!1},index:{rules:[],inclusive:!1},rel_index:{rules:[70,71,72,73],inclusive:!1},component_ext_queue:{rules:[],inclusive:!1},component_ext_db:{rules:[70,71,72,73],inclusive:!1},component_ext:{rules:[70,71,72,73],inclusive:!1},component_queue:{rules:[70,71,72,73],inclusive:!1},component_db:{rules:[70,71,72,73],inclusive:!1},component:{rules:[70,71,72,73],inclusive:!1},container_boundary:{rules:[70,71,72,73],inclusive:!1},container_ext_queue:{rules:[],inclusive:!1},container_ext_db:{rules:[70,71,72,73],inclusive:!1},container_ext:{rules:[70,71,72,73],inclusive:!1},container_queue:{rules:[70,71,72,73],inclusive:!1},container_db:{rules:[70,71,72,73],inclusive:!1},container:{rules:[70,71,72,73],inclusive:!1},birel:{rules:[70,71,72,73],inclusive:!1},system_boundary:{rules:[70,71,72,73],inclusive:!1},enterprise_boundary:{rules:[70,71,72,73],inclusive:!1},boundary:{rules:[70,71,72,73],inclusive:!1},system_ext_queue:{rules:[70,71,72,73],inclusive:!1},system_ext_db:{rules:[70,71,72,73],inclusive:!1},system_ext:{rules:[70,71,72,73],inclusive:!1},system_queue:{rules:[70,71,72,73],inclusive:!1},system_db:{rules:[70,71,72,73],inclusive:!1},system:{rules:[70,71,72,73],inclusive:!1},person_ext:{rules:[70,71,72,73],inclusive:!1},person:{rules:[70,71,72,73],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,86,87,88,89,90],inclusive:!0}}},t);function bt(){this.yy={}}return yt.lexer=mt,bt.prototype=yt,yt.Parser=bt,new bt}();Ii.parser=Ii;const Fi=Ii,$i=t=>null!==t.match(/^\s*C4Context|C4Container|C4Component|C4Dynamic|C4Deployment/);let Ri=[],Zi=[""],Pi="global",ji="",Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],zi=[],Ui="",Wi=!1,qi=4,Hi=2;var Vi;const Gi=function(t){return null==t?Ri:Ri.filter((e=>e.parentBoundary===t))},Xi=function(){return Wi},Ki={addPersonOrSystem:function(t,e,n,r,i,a,s){if(null===e||null===n)return;let o={};const c=Ri.find((t=>t.alias===e));if(c&&e===c.alias?o=c:(o.alias=e,Ri.push(o)),o.label=null==n?{text:""}:{text:n},null==r)o.descr={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]={text:e}}else o.descr={text:r};if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.sprite=i;if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=e}else o.tags=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=e}else o.link=s;o.typeC4Shape={text:t},o.parentBoundary=Pi,o.wrap=Xi()},addPersonOrSystemBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"system"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addContainer:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addContainerBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"container"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addComponent:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addDeploymentNode:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Yi.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Yi.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.type={text:"node"};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.type={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.nodeType=t,c.parentBoundary=Pi,c.wrap=Xi(),ji=Pi,Pi=e,Zi.push(ji)},popBoundaryParseStack:function(){Pi=ji,Zi.pop(),ji=Zi.pop(),Zi.push(ji)},addRel:function(t,e,n,r,i,a,s,o,c){if(null==t||null==e||null==n||null==r)return;let l={};const h=zi.find((t=>t.from===e&&t.to===n));if(h?l=h:zi.push(l),l.type=t,l.from=e,l.to=n,l.label={text:r},null==i)l.techn={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];l[t]={text:e}}else l.techn={text:i};if(null==a)l.descr={text:""};else if("object"==typeof a){let[t,e]=Object.entries(a)[0];l[t]={text:e}}else l.descr={text:a};if("object"==typeof s){let[t,e]=Object.entries(s)[0];l[t]=e}else l.sprite=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];l[t]=e}else l.tags=o;if("object"==typeof c){let[t,e]=Object.entries(c)[0];l[t]=e}else l.link=c;l.wrap=Xi()},updateElStyle:function(t,e,n,r,i,a,s,o,c,l,h){let u=Ri.find((t=>t.alias===e));if(void 0!==u||(u=Yi.find((t=>t.alias===e)),void 0!==u)){if(null!=n)if("object"==typeof n){let[t,e]=Object.entries(n)[0];u[t]=e}else u.bgColor=n;if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];u[t]=e}else u.fontColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];u[t]=e}else u.borderColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];u[t]=e}else u.shadowing=a;if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];u[t]=e}else u.shape=s;if(null!=o)if("object"==typeof o){let[t,e]=Object.entries(o)[0];u[t]=e}else u.sprite=o;if(null!=c)if("object"==typeof c){let[t,e]=Object.entries(c)[0];u[t]=e}else u.techn=c;if(null!=l)if("object"==typeof l){let[t,e]=Object.entries(l)[0];u[t]=e}else u.legendText=l;if(null!=h)if("object"==typeof h){let[t,e]=Object.entries(h)[0];u[t]=e}else u.legendSprite=h}},updateRelStyle:function(t,e,n,r,i,a,s){const o=zi.find((t=>t.from===e&&t.to===n));if(void 0!==o){if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]=e}else o.textColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.lineColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=parseInt(e)}else o.offsetX=parseInt(a);if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=parseInt(e)}else o.offsetY=parseInt(s)}},updateLayoutConfig:function(t,e,n){let r=qi,i=Hi;if("object"==typeof e){const t=Object.values(e)[0];r=parseInt(t)}else r=parseInt(e);if("object"==typeof n){const t=Object.values(n)[0];i=parseInt(t)}else i=parseInt(n);r>=1&&(qi=r),i>=1&&(Hi=i)},autoWrap:Xi,setWrap:function(t){Wi=t},getC4ShapeArray:Gi,getC4Shape:function(t){return Ri.find((e=>e.alias===t))},getC4ShapeKeys:function(t){return Object.keys(Gi(t))},getBoundarys:function(t){return null==t?Yi:Yi.filter((e=>e.parentBoundary===t))},getCurrentBoundaryParse:function(){return Pi},getParentBoundaryParse:function(){return ji},getRels:function(){return zi},getTitle:function(){return Ui},getC4Type:function(){return Vi},getC4ShapeInRow:function(){return qi},getC4BoundaryInRow:function(){return Hi},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().c4,clear:function(){Ri=[],Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],ji="",Pi="global",Zi=[""],zi=[],Zi=[""],Ui="",Wi=!1,qi=4,Hi=2},LINETYPE:{SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25},ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},setTitle:function(t){let e=Ft(t,ar());Ui=e},setC4Type:function(t){let e=Ft(t,ar());Vi=e}},Qi=function(t,e){const n=t.append("rect");if(n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),"undefined"!==e.attrs&&null!==e.attrs)for(let r in e.attrs)n.attr(r,e.attrs[r]);return"undefined"!==e.class&&n.attr("class",e.class),n},Ji=function(t,e,n,r,i,a){const o=t.append("image");o.attr("width",e),o.attr("height",n),o.attr("x",r),o.attr("y",i);let c=a.startsWith("data:image/png;base64")?a:(0,s.N)(a);o.attr("xlink:href",c)},ta=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},ea=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),na=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{fontSize:l,fontFamily:h,fontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,s=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").attr("dominant-baseline","middle").style("font-size",l).style("font-weight",u).style("font-family",h);s.append("tspan").attr("dy",t).text(d[p]).attr("alignment-baseline","mathematical"),r(s,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,0,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),ra=function(t,e,n){const r=t.append("g");let i=e.bgColor?e.bgColor:"none",a=e.borderColor?e.borderColor:"#444444",s=e.fontColor?e.fontColor:"black",o={"stroke-width":1,"stroke-dasharray":"7.0,7.0"};e.nodeType&&(o={"stroke-width":1});let c={x:e.x,y:e.y,fill:i,stroke:a,width:e.width,height:e.height,rx:2.5,ry:2.5,attrs:o};Qi(r,c);let l=n.boundaryFont();l.fontWeight="bold",l.fontSize=l.fontSize+2,l.fontColor=s,na(n)(e.label.text,r,e.x,e.y+e.label.Y,e.width,e.height,{fill:"#444444"},l),e.type&&""!==e.type.text&&(l=n.boundaryFont(),l.fontColor=s,na(n)(e.type.text,r,e.x,e.y+e.type.Y,e.width,e.height,{fill:"#444444"},l)),e.descr&&""!==e.descr.text&&(l=n.boundaryFont(),l.fontSize=l.fontSize-2,l.fontColor=s,na(n)(e.descr.text,r,e.x,e.y+e.descr.Y,e.width,e.height,{fill:"#444444"},l))},ia=function(t,e,n){var r;let i=e.bgColor?e.bgColor:n[e.typeC4Shape.text+"_bg_color"],a=e.borderColor?e.borderColor:n[e.typeC4Shape.text+"_border_color"],s=e.fontColor?e.fontColor:"#FFFFFF",o="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAADAAAAAwCAIAAADYYG7QAAACD0lEQVR4Xu2YoU4EMRCGT+4j8Ai8AhaH4QHgAUjQuFMECUgMIUgwJAgMhgQsAYUiJCiQIBBY+EITsjfTdme6V24v4c8vyGbb+ZjOtN0bNcvjQXmkH83WvYBWto6PLm6v7p7uH1/w2fXD+PBycX1Pv2l3IdDm/vn7x+dXQiAubRzoURa7gRZWd0iGRIiJbOnhnfYBQZNJjNbuyY2eJG8fkDE3bbG4ep6MHUAsgYxmE3nVs6VsBWJSGccsOlFPmLIViMzLOB7pCVO2AtHJMohH7Fh6zqitQK7m0rJvAVYgGcEpe//PLdDz65sM4pF9N7ICcXDKIB5Nv6j7tD0NoSdM2QrU9Gg0ewE1LqBhHR3BBdvj2vapnidjHxD/q6vd7Pvhr31AwcY8eXMTXAKECZZJFXuEq27aLgQK5uLMohCenGGuGewOxSjBvYBqeG6B+Nqiblggdjnc+ZXDy+FNFpFzw76O3UBAROuXh6FoiAcf5g9eTvUgzy0nWg6I8cXHRUpg5bOVBCo+KDpFajOf23GgPme7RSQ+lacIENUgJ6gg1k6HjgOlqnLqip4tEuhv0hNEMXUD0clyXE3p6pZA0S2nnvTlXwLJEZWlb7cTQH1+USgTN4VhAenm/wea1OCAOmqo6fE1WCb9WSKBah+rbUWPWAmE2Rvk0ApiB45eOyNAzU8xcTvj8KvkKEoOaIYeHNA3ZuygAvFMUO0AAAAASUVORK5CYII=";switch(e.typeC4Shape.text){case"person":o="data:image/png;base64,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";break;case"external_person":o="data:image/png;base64,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"}const c=t.append("g");c.attr("class","person-man");const l=ta();switch(e.typeC4Shape.text){case"person":case"external_person":case"system":case"external_system":case"container":case"external_container":case"component":case"external_component":l.x=e.x,l.y=e.y,l.fill=i,l.width=e.width,l.height=e.height,l.stroke=a,l.rx=2.5,l.ry=2.5,l.attrs={"stroke-width":.5},Qi(c,l);break;case"system_db":case"external_system_db":case"container_db":case"external_container_db":case"component_db":case"external_component_db":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,-10 half,-10 half,-10c0,0 half,0 half,10l0,heightc0,10 -half,10 -half,10c0,0 -half,0 -half,-10l0,-height".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2).replaceAll("height",e.height)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,10 half,10 half,10c0,0 half,0 half,-10".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2));break;case"system_queue":case"external_system_queue":case"container_queue":case"external_container_queue":case"component_queue":case"external_component_queue":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startylwidth,0c5,0 5,half 5,halfc0,0 0,half -5,halfl-width,0c-5,0 -5,-half -5,-halfc0,0 0,-half 5,-half".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("width",e.width).replaceAll("half",e.height/2)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc-5,0 -5,half -5,halfc0,half 5,half 5,half".replaceAll("startx",e.x+e.width).replaceAll("starty",e.y).replaceAll("half",e.height/2))}let h=ea(n,e.typeC4Shape.text);switch(c.append("text").attr("fill",s).attr("font-family",h.fontFamily).attr("font-size",h.fontSize-2).attr("font-style","italic").attr("lengthAdjust","spacing").attr("textLength",e.typeC4Shape.width).attr("x",e.x+e.width/2-e.typeC4Shape.width/2).attr("y",e.y+e.typeC4Shape.Y).text("<<"+e.typeC4Shape.text+">>"),e.typeC4Shape.text){case"person":case"external_person":Ji(c,48,48,e.x+e.width/2-24,e.y+e.image.Y,o)}let u=n[e.typeC4Shape.text+"Font"]();return u.fontWeight="bold",u.fontSize=u.fontSize+2,u.fontColor=s,na(n)(e.label.text,c,e.x,e.y+e.label.Y,e.width,e.height,{fill:s},u),u=n[e.typeC4Shape.text+"Font"](),u.fontColor=s,e.techn&&""!==(null==(r=e.techn)?void 0:r.text)?na(n)(e.techn.text,c,e.x,e.y+e.techn.Y,e.width,e.height,{fill:s,"font-style":"italic"},u):e.type&&""!==e.type.text&&na(n)(e.type.text,c,e.x,e.y+e.type.Y,e.width,e.height,{fill:s,"font-style":"italic"},u),e.descr&&""!==e.descr.text&&(u=n.personFont(),u.fontColor=s,na(n)(e.descr.text,c,e.x,e.y+e.descr.Y,e.width,e.height,{fill:s},u)),e.height},aa=(t,e,n)=>{const r=t.append("g");let i=0;for(let a of e){let t=a.textColor?a.textColor:"#444444",e=a.lineColor?a.lineColor:"#444444",s=a.offsetX?parseInt(a.offsetX):0,o=a.offsetY?parseInt(a.offsetY):0,c="";if(0===i){let t=r.append("line");t.attr("x1",a.startPoint.x),t.attr("y1",a.startPoint.y),t.attr("x2",a.endPoint.x),t.attr("y2",a.endPoint.y),t.attr("stroke-width","1"),t.attr("stroke",e),t.style("fill","none"),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)"),i=-1}else{let t=r.append("path");t.attr("fill","none").attr("stroke-width","1").attr("stroke",e).attr("d","Mstartx,starty Qcontrolx,controly stopx,stopy ".replaceAll("startx",a.startPoint.x).replaceAll("starty",a.startPoint.y).replaceAll("controlx",a.startPoint.x+(a.endPoint.x-a.startPoint.x)/2-(a.endPoint.x-a.startPoint.x)/4).replaceAll("controly",a.startPoint.y+(a.endPoint.y-a.startPoint.y)/2).replaceAll("stopx",a.endPoint.x).replaceAll("stopy",a.endPoint.y)),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)")}let l=n.messageFont();na(n)(a.label.text,r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+o,a.label.width,a.label.height,{fill:t},l),a.techn&&""!==a.techn.text&&(l=n.messageFont(),na(n)("["+a.techn.text+"]",r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+n.messageFontSize+5+o,Math.max(a.label.width,a.techn.width),a.techn.height,{fill:t,"font-style":"italic"},l))}},sa=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},oa=function(t){t.append("defs").append("marker").attr("id","arrowend").attr("refX",1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 10 0 L 0 5 L 10 10 z")},ca=function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},la=function(t){const e=t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",16).attr("refY",4);e.append("path").attr("fill","black").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 9,2 V 6 L16,4 Z"),e.append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 0,1 L 6,7 M 6,1 L 0,7")},ha=function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},ua=function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},da=function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")};s.N;let pa=0,fa=0,ga=4,ya=2;Ii.yy=Ki;let ma={};class ba{constructor(t){this.name="",this.data={},this.data.startx=void 0,this.data.stopx=void 0,this.data.starty=void 0,this.data.stopy=void 0,this.data.widthLimit=void 0,this.nextData={},this.nextData.startx=void 0,this.nextData.stopx=void 0,this.nextData.starty=void 0,this.nextData.stopy=void 0,this.nextData.cnt=0,_a(t.db.getConfig())}setData(t,e,n,r){this.nextData.startx=this.data.startx=t,this.nextData.stopx=this.data.stopx=e,this.nextData.starty=this.data.starty=n,this.nextData.stopy=this.data.stopy=r}updateVal(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])}insert(t){this.nextData.cnt=this.nextData.cnt+1;let e=this.nextData.startx===this.nextData.stopx?this.nextData.stopx+t.margin:this.nextData.stopx+2*t.margin,n=e+t.width,r=this.nextData.starty+2*t.margin,i=r+t.height;(e>=this.data.widthLimit||n>=this.data.widthLimit||this.nextData.cnt>ga)&&(e=this.nextData.startx+t.margin+ma.nextLinePaddingX,r=this.nextData.stopy+2*t.margin,this.nextData.stopx=n=e+t.width,this.nextData.starty=this.nextData.stopy,this.nextData.stopy=i=r+t.height,this.nextData.cnt=1),t.x=e,t.y=r,this.updateVal(this.data,"startx",e,Math.min),this.updateVal(this.data,"starty",r,Math.min),this.updateVal(this.data,"stopx",n,Math.max),this.updateVal(this.data,"stopy",i,Math.max),this.updateVal(this.nextData,"startx",e,Math.min),this.updateVal(this.nextData,"starty",r,Math.min),this.updateVal(this.nextData,"stopx",n,Math.max),this.updateVal(this.nextData,"stopy",i,Math.max)}init(t){this.name="",this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,widthLimit:void 0},this.nextData={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,cnt:0},_a(t.db.getConfig())}bumpLastMargin(t){this.data.stopx+=t,this.data.stopy+=t}}const _a=function(t){Sn(ma,t),t.fontFamily&&(ma.personFontFamily=ma.systemFontFamily=ma.messageFontFamily=t.fontFamily),t.fontSize&&(ma.personFontSize=ma.systemFontSize=ma.messageFontSize=t.fontSize),t.fontWeight&&(ma.personFontWeight=ma.systemFontWeight=ma.messageFontWeight=t.fontWeight)},xa=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),va=t=>({fontFamily:t.boundaryFontFamily,fontSize:t.boundaryFontSize,fontWeight:t.boundaryFontWeight});function ka(t,e,n,r,i){if(!e[t].width)if(n)e[t].text=Zn(e[t].text,i,r),e[t].textLines=e[t].text.split(Yt.lineBreakRegex).length,e[t].width=i,e[t].height=jn(e[t].text,r);else{let n=e[t].text.split(Yt.lineBreakRegex);e[t].textLines=n.length;let i=0;e[t].height=0,e[t].width=0;for(const a of n)e[t].width=Math.max(Yn(a,r),e[t].width),i=jn(a,r),e[t].height=e[t].height+i}}const wa=function(t,e,n){e.x=n.data.startx,e.y=n.data.starty,e.width=n.data.stopx-n.data.startx,e.height=n.data.stopy-n.data.starty,e.label.y=ma.c4ShapeMargin-35;let r=e.wrap&&ma.wrap,i=va(ma);i.fontSize=i.fontSize+2,i.fontWeight="bold",ka("label",e,r,i,Yn(e.label.text,i)),ra(t,e,ma)},Ea=function(t,e,n,r){let i=0;for(const a of r){i=0;const r=n[a];let s=xa(ma,r.typeC4Shape.text);switch(s.fontSize=s.fontSize-2,r.typeC4Shape.width=Yn("<<"+r.typeC4Shape.text+">>",s),r.typeC4Shape.height=s.fontSize+2,r.typeC4Shape.Y=ma.c4ShapePadding,i=r.typeC4Shape.Y+r.typeC4Shape.height-4,r.image={width:0,height:0,Y:0},r.typeC4Shape.text){case"person":case"external_person":r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height}r.sprite&&(r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height);let o=r.wrap&&ma.wrap,c=ma.width-2*ma.c4ShapePadding,l=xa(ma,r.typeC4Shape.text);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",r,o,l,c),r.label.Y=i+8,i=r.label.Y+r.label.height,r.type&&""!==r.type.text){r.type.text="["+r.type.text+"]",ka("type",r,o,xa(ma,r.typeC4Shape.text),c),r.type.Y=i+5,i=r.type.Y+r.type.height}else if(r.techn&&""!==r.techn.text){r.techn.text="["+r.techn.text+"]",ka("techn",r,o,xa(ma,r.techn.text),c),r.techn.Y=i+5,i=r.techn.Y+r.techn.height}let h=i,u=r.label.width;if(r.descr&&""!==r.descr.text){ka("descr",r,o,xa(ma,r.typeC4Shape.text),c),r.descr.Y=i+20,i=r.descr.Y+r.descr.height,u=Math.max(r.label.width,r.descr.width),h=i-5*r.descr.textLines}u+=ma.c4ShapePadding,r.width=Math.max(r.width||ma.width,u,ma.width),r.height=Math.max(r.height||ma.height,h,ma.height),r.margin=r.margin||ma.c4ShapeMargin,t.insert(r),ia(e,r,ma)}t.bumpLastMargin(ma.c4ShapeMargin)};class Ca{constructor(t,e){this.x=t,this.y=e}}let Ta=function(t,e){let n=t.x,r=t.y,i=e.x,a=e.y,s=n+t.width/2,o=r+t.height/2,c=Math.abs(n-i),l=Math.abs(r-a),h=l/c,u=t.height/t.width,d=null;return r==a&&n<i?d=new Ca(n+t.width,o):r==a&&n>i?d=new Ca(n,o):n==i&&r<a?d=new Ca(s,r+t.height):n==i&&r>a&&(d=new Ca(s,r)),n>i&&r<a?d=u>=h?new Ca(n,o+h*t.width/2):new Ca(s-c/l*t.height/2,r+t.height):n<i&&r<a?d=u>=h?new Ca(n+t.width,o+h*t.width/2):new Ca(s+c/l*t.height/2,r+t.height):n<i&&r>a?d=u>=h?new Ca(n+t.width,o-h*t.width/2):new Ca(s+t.height/2*c/l,r):n>i&&r>a&&(d=u>=h?new Ca(n,o-t.width/2*h):new Ca(s-t.height/2*c/l,r)),d},Sa=function(t,e){let n={x:0,y:0};n.x=e.x+e.width/2,n.y=e.y+e.height/2;let r=Ta(t,n);return n.x=t.x+t.width/2,n.y=t.y+t.height/2,{startPoint:r,endPoint:Ta(e,n)}};function Aa(t,e,n,r,i){let a=new ba(i);a.data.widthLimit=n.data.widthLimit/Math.min(ya,r.length);for(let[s,o]of r.entries()){let r=0;o.image={width:0,height:0,Y:0},o.sprite&&(o.image.width=48,o.image.height=48,o.image.Y=r,r=o.image.Y+o.image.height);let c=o.wrap&&ma.wrap,l=va(ma);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",o,c,l,a.data.widthLimit),o.label.Y=r+8,r=o.label.Y+o.label.height,o.type&&""!==o.type.text){o.type.text="["+o.type.text+"]",ka("type",o,c,va(ma),a.data.widthLimit),o.type.Y=r+5,r=o.type.Y+o.type.height}if(o.descr&&""!==o.descr.text){let t=va(ma);t.fontSize=t.fontSize-2,ka("descr",o,c,t,a.data.widthLimit),o.descr.Y=r+20,r=o.descr.Y+o.descr.height}if(0==s||s%ya==0){let t=n.data.startx+ma.diagramMarginX,e=n.data.stopy+ma.diagramMarginY+r;a.setData(t,t,e,e)}else{let t=a.data.stopx!==a.data.startx?a.data.stopx+ma.diagramMarginX:a.data.startx,e=a.data.starty;a.setData(t,t,e,e)}a.name=o.alias;let h=i.db.getC4ShapeArray(o.alias),u=i.db.getC4ShapeKeys(o.alias);u.length>0&&Ea(a,t,h,u),e=o.alias;let d=i.db.getBoundarys(e);d.length>0&&Aa(t,e,a,d,i),"global"!==o.alias&&wa(t,o,a),n.data.stopy=Math.max(a.data.stopy+ma.c4ShapeMargin,n.data.stopy),n.data.stopx=Math.max(a.data.stopx+ma.c4ShapeMargin,n.data.stopx),pa=Math.max(pa,n.data.stopx),fa=Math.max(fa,n.data.stopy)}}const La={drawPersonOrSystemArray:Ea,drawBoundary:wa,setConf:_a,draw:function(t,e,n,r){ma=ar().c4;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body");let c=r.db;r.db.setWrap(ma.wrap),ga=c.getC4ShapeInRow(),ya=c.getC4BoundaryInRow(),Nt.debug(`C:${JSON.stringify(ma,null,2)}`);const l="sandbox"===i?s.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`);ua(l),ha(l),da(l);let h=new ba(r);h.setData(ma.diagramMarginX,ma.diagramMarginX,ma.diagramMarginY,ma.diagramMarginY),h.data.widthLimit=screen.availWidth,pa=ma.diagramMarginX,fa=ma.diagramMarginY;const u=r.db.getTitle();Aa(l,"",h,r.db.getBoundarys(""),r),sa(l),oa(l),la(l),ca(l),function(t,e,n,r){let i=0;for(let s of e){i+=1;let t=s.wrap&&ma.wrap,e={fontFamily:(a=ma).messageFontFamily,fontSize:a.messageFontSize,fontWeight:a.messageFontWeight};"C4Dynamic"===r.db.getC4Type()&&(s.label.text=i+": "+s.label.text);let o=Yn(s.label.text,e);ka("label",s,t,e,o),s.techn&&""!==s.techn.text&&(o=Yn(s.techn.text,e),ka("techn",s,t,e,o)),s.descr&&""!==s.descr.text&&(o=Yn(s.descr.text,e),ka("descr",s,t,e,o));let c=n(s.from),l=n(s.to),h=Sa(c,l);s.startPoint=h.startPoint,s.endPoint=h.endPoint}var a;aa(t,e,ma)}(l,r.db.getRels(),r.db.getC4Shape,r),h.data.stopx=pa,h.data.stopy=fa;const d=h.data;let p=d.stopy-d.starty+2*ma.diagramMarginY;const f=d.stopx-d.startx+2*ma.diagramMarginX;u&&l.append("text").text(u).attr("x",(d.stopx-d.startx)/2-4*ma.diagramMarginX).attr("y",d.starty+ma.diagramMarginY),dr(l,p,f,ma.useMaxWidth);const g=u?60:0;l.attr("viewBox",d.startx-ma.diagramMarginX+" -"+(ma.diagramMarginY+g)+" "+f+" "+(p+g)),Nt.debug("models:",d)}};var Ba=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,7],i=[1,8],a=[1,9],s=[1,10],o=[1,13],c=[1,12],l=[1,16,25],h=[1,20],u=[1,32],d=[1,33],p=[1,34],f=[1,36],g=[1,39],y=[1,37],m=[1,38],b=[1,44],_=[1,45],x=[1,40],v=[1,41],k=[1,42],w=[1,43],E=[1,48],C=[1,49],T=[1,50],S=[1,51],A=[16,25],L=[1,65],B=[1,66],N=[1,67],D=[1,68],O=[1,69],M=[1,70],I=[1,71],F=[1,80],$=[16,25,32,45,46,54,60,61,62,63,64,65,66,71,73],R=[16,25,30,32,45,46,50,54,60,61,62,63,64,65,66,71,73,88,89,90,91],Z=[5,8,9,10,11,16,19,23,25],P=[54,88,89,90,91],j=[54,65,66,88,89,90,91],Y=[54,60,61,62,63,64,88,89,90,91],z=[16,25,32],U=[1,107],W={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,statments:5,direction:6,directive:7,direction_tb:8,direction_bt:9,direction_rl:10,direction_lr:11,graphConfig:12,openDirective:13,typeDirective:14,closeDirective:15,NEWLINE:16,":":17,argDirective:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,CLASS_DIAGRAM:23,statements:24,EOF:25,statement:26,className:27,alphaNumToken:28,classLiteralName:29,GENERICTYPE:30,relationStatement:31,LABEL:32,classStatement:33,methodStatement:34,annotationStatement:35,clickStatement:36,cssClassStatement:37,noteStatement:38,acc_title:39,acc_title_value:40,acc_descr:41,acc_descr_value:42,acc_descr_multiline_value:43,CLASS:44,STYLE_SEPARATOR:45,STRUCT_START:46,members:47,STRUCT_STOP:48,ANNOTATION_START:49,ANNOTATION_END:50,MEMBER:51,SEPARATOR:52,relation:53,STR:54,NOTE_FOR:55,noteText:56,NOTE:57,relationType:58,lineType:59,AGGREGATION:60,EXTENSION:61,COMPOSITION:62,DEPENDENCY:63,LOLLIPOP:64,LINE:65,DOTTED_LINE:66,CALLBACK:67,LINK:68,LINK_TARGET:69,CLICK:70,CALLBACK_NAME:71,CALLBACK_ARGS:72,HREF:73,CSSCLASS:74,commentToken:75,textToken:76,graphCodeTokens:77,textNoTagsToken:78,TAGSTART:79,TAGEND:80,"==":81,"--":82,PCT:83,DEFAULT:84,SPACE:85,MINUS:86,keywords:87,UNICODE_TEXT:88,NUM:89,ALPHA:90,BQUOTE_STR:91,$accept:0,$end:1},terminals_:{2:"error",5:"statments",8:"direction_tb",9:"direction_bt",10:"direction_rl",11:"direction_lr",16:"NEWLINE",17:":",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",23:"CLASS_DIAGRAM",25:"EOF",30:"GENERICTYPE",32:"LABEL",39:"acc_title",40:"acc_title_value",41:"acc_descr",42:"acc_descr_value",43:"acc_descr_multiline_value",44:"CLASS",45:"STYLE_SEPARATOR",46:"STRUCT_START",48:"STRUCT_STOP",49:"ANNOTATION_START",50:"ANNOTATION_END",51:"MEMBER",52:"SEPARATOR",54:"STR",55:"NOTE_FOR",57:"NOTE",60:"AGGREGATION",61:"EXTENSION",62:"COMPOSITION",63:"DEPENDENCY",64:"LOLLIPOP",65:"LINE",66:"DOTTED_LINE",67:"CALLBACK",68:"LINK",69:"LINK_TARGET",70:"CLICK",71:"CALLBACK_NAME",72:"CALLBACK_ARGS",73:"HREF",74:"CSSCLASS",77:"graphCodeTokens",79:"TAGSTART",80:"TAGEND",81:"==",82:"--",83:"PCT",84:"DEFAULT",85:"SPACE",86:"MINUS",87:"keywords",88:"UNICODE_TEXT",89:"NUM",90:"ALPHA",91:"BQUOTE_STR"},productions_:[0,[3,1],[3,1],[3,1],[3,2],[6,1],[6,1],[6,1],[6,1],[4,1],[7,4],[7,6],[13,1],[14,1],[18,1],[15,1],[12,4],[24,1],[24,2],[24,3],[27,1],[27,1],[27,2],[27,2],[27,2],[26,1],[26,2],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,2],[26,2],[26,1],[33,2],[33,4],[33,5],[33,7],[35,4],[47,1],[47,2],[34,1],[34,2],[34,1],[34,1],[31,3],[31,4],[31,4],[31,5],[38,3],[38,2],[53,3],[53,2],[53,2],[53,1],[58,1],[58,1],[58,1],[58,1],[58,1],[59,1],[59,1],[36,3],[36,4],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[37,3],[75,1],[75,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[78,1],[78,1],[78,1],[78,1],[28,1],[28,1],[28,1],[29,1],[56,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.setDirection("TB");break;case 6:r.setDirection("BT");break;case 7:r.setDirection("RL");break;case 8:r.setDirection("LR");break;case 12:r.parseDirective("%%{","open_directive");break;case 13:r.parseDirective(a[o],"type_directive");break;case 14:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 15:r.parseDirective("}%%","close_directive","class");break;case 20:case 21:this.$=a[o];break;case 22:this.$=a[o-1]+a[o];break;case 23:case 24:this.$=a[o-1]+"~"+a[o];break;case 25:r.addRelation(a[o]);break;case 26:a[o-1].title=r.cleanupLabel(a[o]),r.addRelation(a[o-1]);break;case 35:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 36:case 37:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 38:r.addClass(a[o]);break;case 39:r.addClass(a[o-2]),r.setCssClass(a[o-2],a[o]);break;case 40:r.addClass(a[o-3]),r.addMembers(a[o-3],a[o-1]);break;case 41:r.addClass(a[o-5]),r.setCssClass(a[o-5],a[o-3]),r.addMembers(a[o-5],a[o-1]);break;case 42:r.addAnnotation(a[o],a[o-2]);break;case 43:this.$=[a[o]];break;case 44:a[o].push(a[o-1]),this.$=a[o];break;case 45:case 47:case 48:break;case 46:r.addMember(a[o-1],r.cleanupLabel(a[o]));break;case 49:this.$={id1:a[o-2],id2:a[o],relation:a[o-1],relationTitle1:"none",relationTitle2:"none"};break;case 50:this.$={id1:a[o-3],id2:a[o],relation:a[o-1],relationTitle1:a[o-2],relationTitle2:"none"};break;case 51:this.$={id1:a[o-3],id2:a[o],relation:a[o-2],relationTitle1:"none",relationTitle2:a[o-1]};break;case 52:this.$={id1:a[o-4],id2:a[o],relation:a[o-2],relationTitle1:a[o-3],relationTitle2:a[o-1]};break;case 53:r.addNote(a[o],a[o-1]);break;case 54:r.addNote(a[o]);break;case 55:this.$={type1:a[o-2],type2:a[o],lineType:a[o-1]};break;case 56:this.$={type1:"none",type2:a[o],lineType:a[o-1]};break;case 57:this.$={type1:a[o-1],type2:"none",lineType:a[o]};break;case 58:this.$={type1:"none",type2:"none",lineType:a[o]};break;case 59:this.$=r.relationType.AGGREGATION;break;case 60:this.$=r.relationType.EXTENSION;break;case 61:this.$=r.relationType.COMPOSITION;break;case 62:this.$=r.relationType.DEPENDENCY;break;case 63:this.$=r.relationType.LOLLIPOP;break;case 64:this.$=r.lineType.LINE;break;case 65:this.$=r.lineType.DOTTED_LINE;break;case 66:case 72:this.$=a[o-2],r.setClickEvent(a[o-1],a[o]);break;case 67:case 73:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 68:case 76:this.$=a[o-2],r.setLink(a[o-1],a[o]);break;case 69:case 77:this.$=a[o-3],r.setLink(a[o-2],a[o-1],a[o]);break;case 70:case 78:this.$=a[o-3],r.setLink(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 71:case 79:this.$=a[o-4],r.setLink(a[o-3],a[o-2],a[o]),r.setTooltip(a[o-3],a[o-1]);break;case 74:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 75:this.$=a[o-4],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setTooltip(a[o-3],a[o]);break;case 80:r.setCssClass(a[o-1],a[o])}},table:[{3:1,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[3]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{3:14,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[2,9]},e(l,[2,5]),e(l,[2,6]),e(l,[2,7]),e(l,[2,8]),{14:15,20:[1,16]},{16:[1,17]},{20:[2,12]},{1:[2,4]},{15:18,17:[1,19],22:h},e([17,22],[2,13]),{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:21,26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},{16:[1,52]},{18:53,21:[1,54]},{16:[2,15]},{25:[1,55]},{16:[1,56],25:[2,17]},e(A,[2,25],{32:[1,57]}),e(A,[2,27]),e(A,[2,28]),e(A,[2,29]),e(A,[2,30]),e(A,[2,31]),e(A,[2,32]),e(A,[2,33]),e(A,[2,34]),{40:[1,58]},{42:[1,59]},e(A,[2,37]),e(A,[2,45],{53:60,58:63,59:64,32:[1,62],54:[1,61],60:L,61:B,62:N,63:D,64:O,65:M,66:I}),{27:72,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,47]),e(A,[2,48]),{28:73,88:E,89:C,90:T},{27:74,28:46,29:47,88:E,89:C,90:T,91:S},{27:75,28:46,29:47,88:E,89:C,90:T,91:S},{27:76,28:46,29:47,88:E,89:C,90:T,91:S},{54:[1,77]},{27:78,28:46,29:47,88:E,89:C,90:T,91:S},{54:F,56:79},e($,[2,20],{28:46,29:47,27:81,30:[1,82],88:E,89:C,90:T,91:S}),e($,[2,21],{30:[1,83]}),e(R,[2,94]),e(R,[2,95]),e(R,[2,96]),e([16,25,30,32,45,46,54,60,61,62,63,64,65,66,71,73],[2,97]),e(Z,[2,10]),{15:84,22:h},{22:[2,14]},{1:[2,16]},{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:85,25:[2,18],26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},e(A,[2,26]),e(A,[2,35]),e(A,[2,36]),{27:86,28:46,29:47,54:[1,87],88:E,89:C,90:T,91:S},{53:88,58:63,59:64,60:L,61:B,62:N,63:D,64:O,65:M,66:I},e(A,[2,46]),{59:89,65:M,66:I},e(P,[2,58],{58:90,60:L,61:B,62:N,63:D,64:O}),e(j,[2,59]),e(j,[2,60]),e(j,[2,61]),e(j,[2,62]),e(j,[2,63]),e(Y,[2,64]),e(Y,[2,65]),e(A,[2,38],{45:[1,91],46:[1,92]}),{50:[1,93]},{54:[1,94]},{54:[1,95]},{71:[1,96],73:[1,97]},{28:98,88:E,89:C,90:T},{54:F,56:99},e(A,[2,54]),e(A,[2,98]),e($,[2,22]),e($,[2,23]),e($,[2,24]),{16:[1,100]},{25:[2,19]},e(z,[2,49]),{27:101,28:46,29:47,88:E,89:C,90:T,91:S},{27:102,28:46,29:47,54:[1,103],88:E,89:C,90:T,91:S},e(P,[2,57],{58:104,60:L,61:B,62:N,63:D,64:O}),e(P,[2,56]),{28:105,88:E,89:C,90:T},{47:106,51:U},{27:108,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,66],{54:[1,109]}),e(A,[2,68],{54:[1,111],69:[1,110]}),e(A,[2,72],{54:[1,112],72:[1,113]}),e(A,[2,76],{54:[1,115],69:[1,114]}),e(A,[2,80]),e(A,[2,53]),e(Z,[2,11]),e(z,[2,51]),e(z,[2,50]),{27:116,28:46,29:47,88:E,89:C,90:T,91:S},e(P,[2,55]),e(A,[2,39],{46:[1,117]}),{48:[1,118]},{47:119,48:[2,43],51:U},e(A,[2,42]),e(A,[2,67]),e(A,[2,69]),e(A,[2,70],{69:[1,120]}),e(A,[2,73]),e(A,[2,74],{54:[1,121]}),e(A,[2,77]),e(A,[2,78],{69:[1,122]}),e(z,[2,52]),{47:123,51:U},e(A,[2,40]),{48:[2,44]},e(A,[2,71]),e(A,[2,75]),e(A,[2,79]),{48:[1,124]},e(A,[2,41])],defaultActions:{2:[2,1],3:[2,2],4:[2,3],6:[2,9],13:[2,12],14:[2,4],20:[2,15],54:[2,14],55:[2,16],85:[2,19],119:[2,44]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},q=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return 8;case 2:return 9;case 3:return 10;case 4:return 11;case 5:return this.begin("type_directive"),20;case 6:return this.popState(),this.begin("arg_directive"),17;case 7:return this.popState(),this.popState(),22;case 8:return 21;case 9:case 10:case 19:case 27:break;case 11:return this.begin("acc_title"),39;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),41;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 39:case 42:case 45:case 48:case 51:case 54:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:return 16;case 20:case 21:return 23;case 22:return this.begin("struct"),46;case 23:return"EDGE_STATE";case 24:return"EOF_IN_STRUCT";case 25:return"OPEN_IN_STRUCT";case 26:return this.popState(),48;case 28:return"MEMBER";case 29:return 44;case 30:return 74;case 31:return 67;case 32:return 68;case 33:return 70;case 34:return 55;case 35:return 57;case 36:return 49;case 37:return 50;case 38:this.begin("generic");break;case 40:return"GENERICTYPE";case 41:this.begin("string");break;case 43:return"STR";case 44:this.begin("bqstring");break;case 46:return"BQUOTE_STR";case 47:this.begin("href");break;case 49:return 73;case 50:this.begin("callback_name");break;case 52:this.popState(),this.begin("callback_args");break;case 53:return 71;case 55:return 72;case 56:case 57:case 58:case 59:return 69;case 60:case 61:return 61;case 62:case 63:return 63;case 64:return 62;case 65:return 60;case 66:return 64;case 67:return 65;case 68:return 66;case 69:return 32;case 70:return 45;case 71:return 86;case 72:return"DOT";case 73:return"PLUS";case 74:return 83;case 75:case 76:return"EQUALS";case 77:return 90;case 78:return"PUNCTUATION";case 79:return 89;case 80:return 88;case 81:return 85;case 82:return 25}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:classDiagram-v2\b)/,/^(?:classDiagram\b)/,/^(?:[{])/,/^(?:\[\*\])/,/^(?:$)/,/^(?:[{])/,/^(?:[}])/,/^(?:[\n])/,/^(?:[^{}\n]*)/,/^(?:class\b)/,/^(?:cssClass\b)/,/^(?:callback\b)/,/^(?:link\b)/,/^(?:click\b)/,/^(?:note for\b)/,/^(?:note\b)/,/^(?:<<)/,/^(?:>>)/,/^(?:[~])/,/^(?:[~])/,/^(?:[^~]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[`])/,/^(?:[`])/,/^(?:[^`]+)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:\s*<\|)/,/^(?:\s*\|>)/,/^(?:\s*>)/,/^(?:\s*<)/,/^(?:\s*\*)/,/^(?:\s*o\b)/,/^(?:\s*\(\))/,/^(?:--)/,/^(?:\.\.)/,/^(?::{1}[^:\n;]+)/,/^(?::{3})/,/^(?:-)/,/^(?:\.)/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:\w+)/,/^(?:[!"#$%&'*+,-.`?\\/])/,/^(?:[0-9]+)/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\s)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},callback_args:{rules:[54,55],inclusive:!1},callback_name:{rules:[51,52,53],inclusive:!1},href:{rules:[48,49],inclusive:!1},struct:{rules:[23,24,25,26,27,28],inclusive:!1},generic:{rules:[39,40],inclusive:!1},bqstring:{rules:[45,46],inclusive:!1},string:{rules:[42,43],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,29,30,31,32,33,34,35,36,37,38,41,44,47,50,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],inclusive:!0}}},t);function H(){this.yy={}}return W.lexer=q,H.prototype=W,W.Parser=H,new H}();Ba.parser=Ba;const Na=Ba,Da=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*classDiagram/)},Oa=(t,e)=>{var n;return null!==t.match(/^\s*classDiagram/)&&"dagre-wrapper"===(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)||null!==t.match(/^\s*classDiagram-v2/)},Ma="classid-";let Ia=[],Fa={},$a=[],Ra=0,Za=[];const Pa=t=>Yt.sanitizeText(t,ar()),ja=function(t){let e="",n=t;if(t.indexOf("~")>0){let r=t.split("~");n=r[0],e=Yt.sanitizeText(r[1],ar())}return{className:n,type:e}},Ya=function(t){let e=ja(t);void 0===Fa[e.className]&&(Fa[e.className]={id:e.className,type:e.type,cssClasses:[],methods:[],members:[],annotations:[],domId:Ma+e.className+"-"+Ra},Ra++)},za=function(t){const e=Object.keys(Fa);for(const n of e)if(Fa[n].id===t)return Fa[n].domId},Ua=function(t,e){const n=ja(t).className,r=Fa[n];if("string"==typeof e){const t=e.trim();t.startsWith("<<")&&t.endsWith(">>")?r.annotations.push(Pa(t.substring(2,t.length-2))):t.indexOf(")")>0?r.methods.push(Pa(t)):t&&r.members.push(Pa(t))}},Wa=function(t,e){t.split(",").forEach((function(t){let n=t;t[0].match(/\d/)&&(n=Ma+n),void 0!==Fa[n]&&Fa[n].cssClasses.push(e)}))},qa=function(t,e,n){const r=ar();let i=t,a=za(i);if("loose"===r.securityLevel&&void 0!==e&&void 0!==Fa[i]){let t=[];if("string"==typeof n){t=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let e=0;e<t.length;e++){let n=t[e].trim();'"'===n.charAt(0)&&'"'===n.charAt(n.length-1)&&(n=n.substr(1,n.length-2)),t[e]=n}}0===t.length&&t.push(a),Za.push((function(){const n=document.querySelector(`[id="${a}"]`);null!==n&&n.addEventListener("click",(function(){Gn.runFunc(e,...t)}),!1)}))}},Ha=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Za.push(Ha);let Va="TB";const Ga={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,getConfig:()=>ar().class,addClass:Ya,bindFunctions:function(t){Za.forEach((function(e){e(t)}))},clear:function(){Ia=[],Fa={},$a=[],Za=[],Za.push(Ha),Dr()},getClass:function(t){return Fa[t]},getClasses:function(){return Fa},getNotes:function(){return $a},addAnnotation:function(t,e){const n=ja(t).className;Fa[n].annotations.push(e)},addNote:function(t,e){const n={id:`note${$a.length}`,class:e,text:t};$a.push(n)},getRelations:function(){return Ia},addRelation:function(t){Nt.debug("Adding relation: "+JSON.stringify(t)),Ya(t.id1),Ya(t.id2),t.id1=ja(t.id1).className,t.id2=ja(t.id2).className,t.relationTitle1=Yt.sanitizeText(t.relationTitle1.trim(),ar()),t.relationTitle2=Yt.sanitizeText(t.relationTitle2.trim(),ar()),Ia.push(t)},getDirection:()=>Va,setDirection:t=>{Va=t},addMember:Ua,addMembers:function(t,e){Array.isArray(e)&&(e.reverse(),e.forEach((e=>Ua(t,e))))},cleanupLabel:function(t){return":"===t.substring(0,1)?Yt.sanitizeText(t.substr(1).trim(),ar()):Pa(t.trim())},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3,LOLLIPOP:4},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){qa(t,e,n),Fa[t].haveCallback=!0})),Wa(t,"clickable")},setCssClass:Wa,setLink:function(t,e,n){const r=ar();t.split(",").forEach((function(t){let i=t;t[0].match(/\d/)&&(i=Ma+i),void 0!==Fa[i]&&(Fa[i].link=Gn.formatUrl(e,r),"sandbox"===r.securityLevel?Fa[i].linkTarget="_top":Fa[i].linkTarget="string"==typeof n?Pa(n):"_blank")})),Wa(t,"clickable")},getTooltip:function(t){return Fa[t].tooltip},setTooltip:function(t,e){const n=ar();t.split(",").forEach((function(t){void 0!==e&&(Fa[t].tooltip=Yt.sanitizeText(e,n))}))},lookUpDomId:za,setDiagramTitle:$r,getDiagramTitle:Rr};let Xa=0;const Ka=function(t){let e=t.match(/^([#+~-])?(\w+)(~\w+~|\[])?\s+(\w+) *([$*])?$/),n=t.match(/^([#+|~-])?(\w+) *\( *(.*)\) *([$*])? *(\w*[[\]|~]*\s*\w*~?)$/);return e&&!n?Qa(e):n?Ja(n):ts(t)},Qa=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"",o=t[5]?t[5].trim():"";n=r+i+a+" "+s,e=ns(o)}catch(r){n=t}return{displayText:n,cssStyle:e}},Ja=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"";n=r+i+"("+a+")"+(t[5]?" : "+jt(t[5]).trim():""),e=ns(s)}catch(r){n=t}return{displayText:n,cssStyle:e}},ts=function(t){let e="",n="",r="",i=t.indexOf("("),a=t.indexOf(")");if(i>1&&a>i&&a<=t.length){let s="",o="",c=t.substring(0,1);c.match(/\w/)?o=t.substring(0,i).trim():(c.match(/[#+~-]/)&&(s=c),o=t.substring(1,i).trim());const l=t.substring(i+1,a);t.substring(a+1,1),n=ns(t.substring(a+1,a+2)),e=s+o+"("+jt(l.trim())+")",a<t.length&&(r=t.substring(a+2).trim(),""!==r&&(r=" : "+jt(r),e+=r))}else e=jt(t);return{displayText:e,cssStyle:n}},es=function(t,e,n,r){let i=Ka(e);const a=t.append("tspan").attr("x",r.padding).text(i.displayText);""!==i.cssStyle&&a.attr("style",i.cssStyle),n||a.attr("dy",r.textHeight)},ns=function(t){switch(t){case"*":return"font-style:italic;";case"$":return"text-decoration:underline;";default:return""}},rs=function(t,e,n,r){Nt.debug("Rendering class ",e,n);const i=e.id,a={id:i,label:e.id,width:0,height:0},s=t.append("g").attr("id",r.db.lookUpDomId(i)).attr("class","classGroup");let o;o=e.link?s.append("svg:a").attr("xlink:href",e.link).attr("target",e.linkTarget).append("text").attr("y",n.textHeight+n.padding).attr("x",0):s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);let c=!0;e.annotations.forEach((function(t){const e=o.append("tspan").text("\xab"+t+"\xbb");c||e.attr("dy",n.textHeight),c=!1}));let l=e.id;void 0!==e.type&&""!==e.type&&(l+="<"+e.type+">");const h=o.append("tspan").text(l).attr("class","title");c||h.attr("dy",n.textHeight);const u=o.node().getBBox().height,d=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin/2).attr("y2",n.padding+u+n.dividerMargin/2),p=s.append("text").attr("x",n.padding).attr("y",u+n.dividerMargin+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.members.forEach((function(t){es(p,t,c,n),c=!1}));const f=p.node().getBBox(),g=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin+f.height).attr("y2",n.padding+u+n.dividerMargin+f.height),y=s.append("text").attr("x",n.padding).attr("y",u+2*n.dividerMargin+f.height+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.methods.forEach((function(t){es(y,t,c,n),c=!1}));const m=s.node().getBBox();var b=" ";e.cssClasses.length>0&&(b+=e.cssClasses.join(" "));const _=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",m.width+2*n.padding).attr("height",m.height+n.padding+.5*n.dividerMargin).attr("class",b).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(_-t.getBBox().width)/2)})),e.tooltip&&o.insert("title").text(e.tooltip),d.attr("x2",_),g.attr("x2",_),a.width=_,a.height=m.height+n.padding+.5*n.dividerMargin,a},is=function(t,e,n,r,i){const a=function(t){switch(t){case i.db.relationType.AGGREGATION:return"aggregation";case i.db.relationType.EXTENSION:return"extension";case i.db.relationType.COMPOSITION:return"composition";case i.db.relationType.DEPENDENCY:return"dependency";case i.db.relationType.LOLLIPOP:return"lollipop"}};e.points=e.points.filter((t=>!Number.isNaN(t.y)));const s=e.points,c=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),l=t.append("path").attr("d",c(s)).attr("id","edge"+Xa).attr("class","relation");let h,u,d="";r.arrowMarkerAbsolute&&(d=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,d=d.replace(/\(/g,"\\("),d=d.replace(/\)/g,"\\)")),1==n.relation.lineType&&l.attr("class","relation dashed-line"),10==n.relation.lineType&&l.attr("class","relation dotted-line"),"none"!==n.relation.type1&&l.attr("marker-start","url("+d+"#"+a(n.relation.type1)+"Start)"),"none"!==n.relation.type2&&l.attr("marker-end","url("+d+"#"+a(n.relation.type2)+"End)");const p=e.points.length;let f,g,y,m,b=Gn.calcLabelPosition(e.points);if(h=b.x,u=b.y,p%2!=0&&p>1){let t=Gn.calcCardinalityPosition("none"!==n.relation.type1,e.points,e.points[0]),r=Gn.calcCardinalityPosition("none"!==n.relation.type2,e.points,e.points[p-1]);Nt.debug("cardinality_1_point "+JSON.stringify(t)),Nt.debug("cardinality_2_point "+JSON.stringify(r)),f=t.x,g=t.y,y=r.x,m=r.y}if(void 0!==n.title){const e=t.append("g").attr("class","classLabel"),i=e.append("text").attr("class","label").attr("x",h).attr("y",u).attr("fill","red").attr("text-anchor","middle").text(n.title);window.label=i;const a=i.node().getBBox();e.insert("rect",":first-child").attr("class","box").attr("x",a.x-r.padding/2).attr("y",a.y-r.padding/2).attr("width",a.width+r.padding).attr("height",a.height+r.padding)}if(Nt.info("Rendering relation "+JSON.stringify(n)),void 0!==n.relationTitle1&&"none"!==n.relationTitle1){t.append("g").attr("class","cardinality").append("text").attr("class","type1").attr("x",f).attr("y",g).attr("fill","black").attr("font-size","6").text(n.relationTitle1)}if(void 0!==n.relationTitle2&&"none"!==n.relationTitle2){t.append("g").attr("class","cardinality").append("text").attr("class","type2").attr("x",y).attr("y",m).attr("fill","black").attr("font-size","6").text(n.relationTitle2)}Xa++},as=function(t,e,n,r){Nt.debug("Rendering note ",e,n);const i=e.id,a={id:i,text:e.text,width:0,height:0},s=t.append("g").attr("id",i).attr("class","classGroup");let o=s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);const c=JSON.parse(`"${e.text}"`).split("\n");c.forEach((function(t){Nt.debug(`Adding line: ${t}`),o.append("tspan").text(t).attr("class","title").attr("dy",n.textHeight)}));const l=s.node().getBBox(),h=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",l.width+2*n.padding).attr("height",l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(h-t.getBBox().width)/2)})),a.width=h,a.height=l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin,a};let ss={};const os=function(t){const e=Object.entries(ss).find((e=>e[1].label===t));if(e)return e[0]},cs={draw:function(t,e,n,r){const i=ar().class;ss={},Nt.info("Rendering diagram "+t);const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l=c.select(`[id='${e}']`);var h;(h=l).append("defs").append("marker").attr("id","extensionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),h.append("defs").append("marker").attr("id","extensionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z"),h.append("defs").append("marker").attr("id","compositionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","compositionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z");const u=new ht.k({multigraph:!0});u.setGraph({isMultiGraph:!0}),u.setDefaultEdgeLabel((function(){return{}}));const d=r.db.getClasses(),p=Object.keys(d);for(const o of p){const t=d[o],e=rs(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),Nt.info("Org height: "+e.height)}r.db.getRelations().forEach((function(t){Nt.info("tjoho"+os(t.id1)+os(t.id2)+JSON.stringify(t)),u.setEdge(os(t.id1),os(t.id2),{relation:t},t.title||"DEFAULT")}));r.db.getNotes().forEach((function(t){Nt.debug(`Adding note: ${JSON.stringify(t)}`);const e=as(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),t.class&&t.class in d&&u.setEdge(t.id,os(t.class),{relation:{id1:t.id,id2:t.class,relation:{type1:"none",type2:"none",lineType:10}}},"DEFAULT")})),(0,lt.bK)(u),u.nodes().forEach((function(t){void 0!==t&&void 0!==u.node(t)&&(Nt.debug("Node "+t+": "+JSON.stringify(u.node(t))),c.select("#"+(r.db.lookUpDomId(t)||t)).attr("transform","translate("+(u.node(t).x-u.node(t).width/2)+","+(u.node(t).y-u.node(t).height/2)+" )"))})),u.edges().forEach((function(t){void 0!==t&&void 0!==u.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(u.edge(t))),is(l,u.edge(t),u.edge(t).relation,i,r))}));const f=l.node().getBBox(),g=f.width+40,y=f.height+40;dr(l,y,g,i.useMaxWidth);const m=`${f.x-20} ${f.y-20} ${g} ${y}`;Nt.debug(`viewBox ${m}`),l.attr("viewBox",m)}},ls={extension:(t,e,n)=>{Nt.trace("Making markers for ",n),t.append("defs").append("marker").attr("id",e+"-extensionStart").attr("class","marker extension "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),t.append("defs").append("marker").attr("id",e+"-extensionEnd").attr("class","marker extension "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z")},composition:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-compositionStart").attr("class","marker composition "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-compositionEnd").attr("class","marker composition "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},aggregation:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-aggregationStart").attr("class","marker aggregation "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-aggregationEnd").attr("class","marker aggregation "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},dependency:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-dependencyStart").attr("class","marker dependency "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-dependencyEnd").attr("class","marker dependency "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},lollipop:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-lollipopStart").attr("class","marker lollipop "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("circle").attr("stroke","black").attr("fill","white").attr("cx",6).attr("cy",7).attr("r",6)},point:(t,e)=>{t.append("marker").attr("id",e+"-pointEnd").attr("class","marker "+e).attr("viewBox","0 0 12 20").attr("refX",10).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-pointStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",0).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 5 L 10 10 L 10 0 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},circle:(t,e)=>{t.append("marker").attr("id",e+"-circleEnd").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",11).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-circleStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",-1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},cross:(t,e)=>{t.append("marker").attr("id",e+"-crossEnd").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",12).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-crossStart").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",-1).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0")},barb:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-barbEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",14).attr("markerUnits","strokeWidth").attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z")}},hs=(t,e,n,r)=>{e.forEach((e=>{ls[e](t,n,r)}))};const us=(t,e,n,r)=>{let i=t||"";if("object"==typeof i&&(i=i[0]),Pt(ar().flowchart.htmlLabels)){i=i.replace(/\\n|\n/g,"<br />"),Nt.info("vertexText"+i);let t=function(t){const e=(0,o.Ys)(document.createElementNS("http://www.w3.org/2000/svg","foreignObject")),n=e.append("xhtml:div"),r=t.label,i=t.isNode?"nodeLabel":"edgeLabel";var a,s;return n.html('<span class="'+i+'" '+(t.labelStyle?'style="'+t.labelStyle+'"':"")+">"+r+"</span>"),a=n,(s=t.labelStyle)&&a.attr("style",s),n.style("display","inline-block"),n.style("white-space","nowrap"),n.attr("xmlns","http://www.w3.org/1999/xhtml"),e.node()}({isNode:r,label:Xd(i).replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`)),labelStyle:e.replace("fill:","color:")});return t}{const t=document.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",e.replace("color:","fill:"));let r=[];r="string"==typeof i?i.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(i)?i:[];for(const e of r){const r=document.createElementNS("http://www.w3.org/2000/svg","tspan");r.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),r.setAttribute("dy","1em"),r.setAttribute("x","0"),n?r.setAttribute("class","title-row"):r.setAttribute("class","row"),r.textContent=e.trim(),t.appendChild(r)}return t}},ds=(t,e,n,r)=>{let i;i=n||"node default";const a=t.insert("g").attr("class",i).attr("id",e.domId||e.id),s=a.insert("g").attr("class","label").attr("style",e.labelStyle);let c;c=void 0===e.labelText?"":"string"==typeof e.labelText?e.labelText:e.labelText[0];const l=s.node().appendChild(us(Ft(Xd(c),ar()),e.labelStyle,!1,r));let h=l.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=l.children[0],e=(0,o.Ys)(l);h=t.getBoundingClientRect(),e.attr("width",h.width),e.attr("height",h.height)}const u=e.padding/2;return s.attr("transform","translate("+-h.width/2+", "+-h.height/2+")"),{shapeSvg:a,bbox:h,halfPadding:u,label:s}},ps=(t,e)=>{const n=e.node().getBBox();t.width=n.width,t.height=n.height};function fs(t,e,n,r){return t.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","label-container").attr("transform","translate("+-e/2+","+n/2+")")}let gs={},ys={},ms={};const bs=(t,e)=>(Nt.trace("In isDecendant",e," ",t," = ",ys[e].includes(t)),!!ys[e].includes(t)),_s=(t,e,n,r)=>{Nt.warn("Copying children of ",t,"root",r,"data",e.node(t),r);const i=e.children(t)||[];t!==r&&i.push(t),Nt.warn("Copying (nodes) clusterId",t,"nodes",i),i.forEach((i=>{if(e.children(i).length>0)_s(i,e,n,r);else{const a=e.node(i);Nt.info("cp ",i," to ",r," with parent ",t),n.setNode(i,a),r!==e.parent(i)&&(Nt.warn("Setting parent",i,e.parent(i)),n.setParent(i,e.parent(i))),t!==r&&i!==t?(Nt.debug("Setting parent",i,t),n.setParent(i,t)):(Nt.info("In copy ",t,"root",r,"data",e.node(t),r),Nt.debug("Not Setting parent for node=",i,"cluster!==rootId",t!==r,"node!==clusterId",i!==t));const s=e.edges(i);Nt.debug("Copying Edges",s),s.forEach((i=>{Nt.info("Edge",i);const a=e.edge(i.v,i.w,i.name);Nt.info("Edge data",a,r);try{((t,e)=>(Nt.info("Decendants of ",e," is ",ys[e]),Nt.info("Edge is ",t),t.v!==e&&t.w!==e&&(ys[e]?ys[e].includes(t.v)||bs(t.v,e)||bs(t.w,e)||ys[e].includes(t.w):(Nt.debug("Tilt, ",e,",not in decendants"),!1))))(i,r)?(Nt.info("Copying as ",i.v,i.w,a,i.name),n.setEdge(i.v,i.w,a,i.name),Nt.info("newGraph edges ",n.edges(),n.edge(n.edges()[0]))):Nt.info("Skipping copy of edge ",i.v,"--\x3e",i.w," rootId: ",r," clusterId:",t)}catch(s){Nt.error(s)}}))}Nt.debug("Removing node",i),e.removeNode(i)}))},xs=(t,e)=>{const n=e.children(t);let r=[...n];for(const i of n)ms[i]=t,r=[...r,...xs(i,e)];return r},vs=(t,e)=>{Nt.trace("Searching",t);const n=e.children(t);if(Nt.trace("Searching children of id ",t,n),n.length<1)return Nt.trace("This is a valid node",t),t;for(const r of n){const n=vs(r,e);if(n)return Nt.trace("Found replacement for",t," => ",n),n}},ks=t=>gs[t]&&gs[t].externalConnections&&gs[t]?gs[t].id:t,ws=(t,e)=>{if(Nt.warn("extractor - ",e,ut.c(t),t.children("D")),e>10)return void Nt.error("Bailing out");let n=t.nodes(),r=!1;for(const i of n){const e=t.children(i);r=r||e.length>0}if(r){Nt.debug("Nodes = ",n,e);for(const r of n)if(Nt.debug("Extracting node",r,gs,gs[r]&&!gs[r].externalConnections,!t.parent(r),t.node(r),t.children("D")," Depth ",e),gs[r])if(!gs[r].externalConnections&&t.children(r)&&t.children(r).length>0){Nt.warn("Cluster without external connections, without a parent and with children",r,e);let n="TB"===t.graph().rankdir?"LR":"TB";gs[r]&&gs[r].clusterData&&gs[r].clusterData.dir&&(n=gs[r].clusterData.dir,Nt.warn("Fixing dir",gs[r].clusterData.dir,n));const i=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:n,nodesep:50,ranksep:50,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));Nt.warn("Old graph before copy",ut.c(t)),_s(r,t,i,r),t.setNode(r,{clusterNode:!0,id:r,clusterData:gs[r].clusterData,labelText:gs[r].labelText,graph:i}),Nt.warn("New graph after copy node: (",r,")",ut.c(i)),Nt.debug("Old graph after copy",ut.c(t))}else Nt.warn("Cluster ** ",r," **not meeting the criteria !externalConnections:",!gs[r].externalConnections," no parent: ",!t.parent(r)," children ",t.children(r)&&t.children(r).length>0,t.children("D"),e),Nt.debug(gs);else Nt.debug("Not a cluster",r,e);n=t.nodes(),Nt.warn("New list of nodes",n);for(const r of n){const n=t.node(r);Nt.warn(" Now next level",r,n),n.clusterNode&&ws(n.graph,e+1)}}else Nt.debug("Done, no node has children",t.nodes())},Es=(t,e)=>{if(0===e.length)return[];let n=Object.assign(e);return e.forEach((e=>{const r=t.children(e),i=Es(t,r);n=[...n,...i]})),n};function Cs(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}function Ts(t,e,n,r){var i,a,s,o,c,l,h,u,d,p,f,g,y;if(i=e.y-t.y,s=t.x-e.x,c=e.x*t.y-t.x*e.y,d=i*n.x+s*n.y+c,p=i*r.x+s*r.y+c,!(0!==d&&0!==p&&Ss(d,p)||(a=r.y-n.y,o=n.x-r.x,l=r.x*n.y-n.x*r.y,h=a*t.x+o*t.y+l,u=a*e.x+o*e.y+l,0!==h&&0!==u&&Ss(h,u)||0==(f=i*o-a*s))))return g=Math.abs(f/2),{x:(y=s*l-o*c)<0?(y-g)/f:(y+g)/f,y:(y=a*c-i*l)<0?(y-g)/f:(y+g)/f}}function Ss(t,e){return t*e>0}const As=(t,e)=>{var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}},Ls={node:function(t,e){return t.intersect(e)},circle:function(t,e,n){return Cs(t,e,e,n)},ellipse:Cs,polygon:function(t,e,n){var r=t.x,i=t.y,a=[],s=Number.POSITIVE_INFINITY,o=Number.POSITIVE_INFINITY;"function"==typeof e.forEach?e.forEach((function(t){s=Math.min(s,t.x),o=Math.min(o,t.y)})):(s=Math.min(s,e.x),o=Math.min(o,e.y));for(var c=r-t.width/2-s,l=i-t.height/2-o,h=0;h<e.length;h++){var u=e[h],d=e[h<e.length-1?h+1:0],p=Ts(t,n,{x:c+u.x,y:l+u.y},{x:c+d.x,y:l+d.y});p&&a.push(p)}return a.length?(a.length>1&&a.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),a[0]):t},rect:As},Bs=(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.info("Classes = ",e.classes);const a=n.insert("rect",":first-child");return a.attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},Ns=(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding+(r.height+e.padding),a=[{x:i/2,y:0},{x:i,y:-i/2},{x:i/2,y:-i},{x:0,y:-i/2}];Nt.info("Question main (Circle)");const s=fs(n,i,i,a);return s.attr("style",e.style),ps(e,s),e.intersect=function(t){return Nt.warn("Intersect called"),Ls.polygon(e,a,t)},n};function Ds(t,e,n,r){const i=[],a=t=>{i.push(t,0)},s=t=>{i.push(0,t)};e.includes("t")?(Nt.debug("add top border"),a(n)):s(n),e.includes("r")?(Nt.debug("add right border"),a(r)):s(r),e.includes("b")?(Nt.debug("add bottom border"),a(n)):s(n),e.includes("l")?(Nt.debug("add left border"),a(r)):s(r),t.attr("stroke-dasharray",i.join(" "))}const Os=(t,e,n)=>{const r=t.insert("g").attr("class","node default").attr("id",e.domId||e.id);let i=70,a=10;"LR"===n&&(i=10,a=70);const s=r.append("rect").attr("x",-1*i/2).attr("y",-1*a/2).attr("width",i).attr("height",a).attr("class","fork-join");return ps(e,s),e.height=e.height+e.padding/2,e.width=e.width+e.padding/2,e.intersect=function(t){return Ls.rect(e,t)},r},Ms={rhombus:Ns,question:Ns,rect:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.trace("Classes = ",e.classes);const a=n.insert("rect",":first-child"),s=r.width+e.padding,o=r.height+e.padding;if(a.attr("class","basic label-container").attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",s).attr("height",o),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(a,e.props.borders,s,o),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},labelRect:(t,e)=>{const{shapeSvg:n}=ds(t,e,"label",!0);Nt.trace("Classes = ",e.classes);const r=n.insert("rect",":first-child");if(r.attr("width",0).attr("height",0),n.attr("class","label edgeLabel"),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(r,e.props.borders,0,0),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,r),e.intersect=function(t){return Ls.rect(e,t)},n},rectWithTitle:(t,e)=>{let n;n=e.classes?"node "+e.classes:"node default";const r=t.insert("g").attr("class",n).attr("id",e.domId||e.id),i=r.insert("rect",":first-child"),a=r.insert("line"),s=r.insert("g").attr("class","label"),c=e.labelText.flat?e.labelText.flat():e.labelText;let l="";l="object"==typeof c?c[0]:c,Nt.info("Label text abc79",l,c,"object"==typeof c);const h=s.node().appendChild(us(l,e.labelStyle,!0,!0));let u={width:0,height:0};if(Pt(ar().flowchart.htmlLabels)){const t=h.children[0],e=(0,o.Ys)(h);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}Nt.info("Text 2",c);const d=c.slice(1,c.length);let p=h.getBBox();const f=s.node().appendChild(us(d.join?d.join("<br/>"):d,e.labelStyle,!0,!0));if(Pt(ar().flowchart.htmlLabels)){const t=f.children[0],e=(0,o.Ys)(f);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}const g=e.padding/2;return(0,o.Ys)(f).attr("transform","translate( "+(u.width>p.width?0:(p.width-u.width)/2)+", "+(p.height+g+5)+")"),(0,o.Ys)(h).attr("transform","translate( "+(u.width<p.width?0:-(p.width-u.width)/2)+", 0)"),u=s.node().getBBox(),s.attr("transform","translate("+-u.width/2+", "+(-u.height/2-g+3)+")"),i.attr("class","outer title-state").attr("x",-u.width/2-g).attr("y",-u.height/2-g).attr("width",u.width+e.padding).attr("height",u.height+e.padding),a.attr("class","divider").attr("x1",-u.width/2-g).attr("x2",u.width/2+g).attr("y1",-u.height/2-g+p.height+g).attr("y2",-u.height/2-g+p.height+g),ps(e,i),e.intersect=function(t){return Ls.rect(e,t)},r},choice:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=[{x:0,y:14},{x:14,y:0},{x:0,y:-14},{x:-14,y:0}];return n.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","state-start").attr("r",7).attr("width",28).attr("height",28),e.width=28,e.height=28,e.intersect=function(t){return Ls.circle(e,14,t)},n},circle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("circle",":first-child");return a.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("Circle main"),ps(e,a),e.intersect=function(t){return Nt.info("Circle intersect",e,r.width/2+i,t),Ls.circle(e,r.width/2+i,t)},n},doublecircle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("g",":first-child"),s=a.insert("circle"),o=a.insert("circle");return s.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i+5).attr("width",r.width+e.padding+10).attr("height",r.height+e.padding+10),o.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("DoubleCircle main"),ps(e,s),e.intersect=function(t){return Nt.info("DoubleCircle intersect",e,r.width/2+i+5,t),Ls.circle(e,r.width/2+i+5,t)},n},stadium:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=r.width+i/4+e.padding,s=n.insert("rect",":first-child").attr("style",e.style).attr("rx",i/2).attr("ry",i/2).attr("x",-a/2).attr("y",-i/2).attr("width",a).attr("height",i);return ps(e,s),e.intersect=function(t){return Ls.rect(e,t)},n},hexagon:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=i/4,s=r.width+2*a+e.padding,o=[{x:a,y:0},{x:s-a,y:0},{x:s,y:-i/2},{x:s-a,y:-i},{x:a,y:-i},{x:0,y:-i/2}],c=fs(n,s,i,o);return c.attr("style",e.style),ps(e,c),e.intersect=function(t){return Ls.polygon(e,o,t)},n},rect_left_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-a/2,y:0},{x:i,y:0},{x:i,y:-a},{x:-a/2,y:-a},{x:0,y:-a/2}];return fs(n,i,a,s).attr("style",e.style),e.width=i+a,e.height=a,e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_right:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_left:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:2*a/6,y:0},{x:i+a/6,y:0},{x:i-2*a/6,y:-a},{x:-a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i+2*a/6,y:0},{x:i-a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},inv_trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:-2*a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},rect_right_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i+a/2,y:0},{x:i,y:-a/2},{x:i+a/2,y:-a},{x:0,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},cylinder:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=i/2,s=a/(2.5+i/50),o=r.height+s+e.padding,c="M 0,"+s+" a "+a+","+s+" 0,0,0 "+i+" 0 a "+a+","+s+" 0,0,0 "+-i+" 0 l 0,"+o+" a "+a+","+s+" 0,0,0 "+i+" 0 l 0,"+-o,l=n.attr("label-offset-y",s).insert("path",":first-child").attr("style",e.style).attr("d",c).attr("transform","translate("+-i/2+","+-(o/2+s)+")");return ps(e,l),e.intersect=function(t){const n=Ls.rect(e,t),r=n.x-e.x;if(0!=a&&(Math.abs(r)<e.width/2||Math.abs(r)==e.width/2&&Math.abs(n.y-e.y)>e.height/2-s)){let i=s*s*(1-r*r/(a*a));0!=i&&(i=Math.sqrt(i)),i=s-i,t.y-e.y>0&&(i=-i),n.y+=i}return n},n},start:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child");return r.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),ps(e,r),e.intersect=function(t){return Ls.circle(e,7,t)},n},end:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child"),i=n.insert("circle",":first-child");return i.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),r.attr("class","state-end").attr("r",5).attr("width",10).attr("height",10),ps(e,i),e.intersect=function(t){return Ls.circle(e,7,t)},n},note:Bs,subroutine:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i,y:0},{x:i,y:-a},{x:0,y:-a},{x:0,y:0},{x:-8,y:0},{x:i+8,y:0},{x:i+8,y:-a},{x:-8,y:-a},{x:-8,y:0}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},fork:Os,join:Os,class_box:(t,e)=>{const n=e.padding/2;let r;r=e.classes?"node "+e.classes:"node default";const i=t.insert("g").attr("class",r).attr("id",e.domId||e.id),a=i.insert("rect",":first-child"),s=i.insert("line"),c=i.insert("line");let l=0,h=4;const u=i.insert("g").attr("class","label");let d=0;const p=e.classData.annotations&&e.classData.annotations[0],f=e.classData.annotations[0]?"\xab"+e.classData.annotations[0]+"\xbb":"",g=u.node().appendChild(us(f,e.labelStyle,!0,!0));let y=g.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=g.children[0],e=(0,o.Ys)(g);y=t.getBoundingClientRect(),e.attr("width",y.width),e.attr("height",y.height)}e.classData.annotations[0]&&(h+=y.height+4,l+=y.width);let m=e.classData.id;void 0!==e.classData.type&&""!==e.classData.type&&(ar().flowchart.htmlLabels?m+="&lt;"+e.classData.type+"&gt;":m+="<"+e.classData.type+">");const b=u.node().appendChild(us(m,e.labelStyle,!0,!0));(0,o.Ys)(b).attr("class","classTitle");let _=b.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=b.children[0],e=(0,o.Ys)(b);_=t.getBoundingClientRect(),e.attr("width",_.width),e.attr("height",_.height)}h+=_.height+4,_.width>l&&(l=_.width);const x=[];e.classData.members.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,x.push(i)})),h+=8;const v=[];if(e.classData.methods.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,v.push(i)})),h+=8,p){let t=(l-y.width)/2;(0,o.Ys)(g).attr("transform","translate( "+(-1*l/2+t)+", "+-1*h/2+")"),d=y.height+4}let k=(l-_.width)/2;return(0,o.Ys)(b).attr("transform","translate( "+(-1*l/2+k)+", "+(-1*h/2+d)+")"),d+=_.height+4,s.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,x.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d+4)+")"),d+=_.height+4})),d+=8,c.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,v.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d)+")"),d+=_.height+4})),a.attr("class","outer title-state").attr("x",-l/2-n).attr("y",-h/2-n).attr("width",l+e.padding).attr("height",h+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},i}};let Is={};const Fs=(t,e,n)=>{let r,i;if(e.link){let a;"sandbox"===ar().securityLevel?a="_top":e.linkTarget&&(a=e.linkTarget||"_blank"),r=t.insert("svg:a").attr("xlink:href",e.link).attr("target",a),i=Ms[e.shape](r,e,n)}else i=Ms[e.shape](t,e,n),r=i;return e.tooltip&&i.attr("title",e.tooltip),e.class&&i.attr("class","node default "+e.class),Is[e.id]=r,e.haveCallback&&Is[e.id].attr("class",Is[e.id].attr("class")+" clickable"),r},$s=t=>{const e=Is[t.id];Nt.trace("Transforming node",t.diff,t,"translate("+(t.x-t.width/2-5)+", "+t.width/2+")");const n=t.diff||0;return t.clusterNode?e.attr("transform","translate("+(t.x+n-t.width/2)+", "+(t.y-t.height/2-8)+")"):e.attr("transform","translate("+t.x+", "+t.y+")"),n},Rs={rect:(t,e)=>{Nt.trace("Creating subgraph rect for ",e.id,e);const n=t.insert("g").attr("class","cluster"+(e.class?" "+e.class:"")).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let s=a.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=a.children[0],e=(0,o.Ys)(a);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}const c=0*e.padding,l=c/2,h=e.width<=s.width+c?s.width+c:e.width;e.width<=s.width+c?e.diff=(s.width-e.width)/2-e.padding/2:e.diff=-e.padding/2,Nt.trace("Data ",e,JSON.stringify(e)),r.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-h/2).attr("y",e.y-e.height/2-l).attr("width",h).attr("height",e.height+c),i.attr("transform","translate("+(e.x-s.width/2)+", "+(e.y-e.height/2)+")");const u=r.node().getBBox();return e.width=u.width,e.height=u.height,e.intersect=function(t){return As(e,t)},n},roundedWithTitle:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=n.append("rect"),s=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let c=s.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=s.children[0],e=(0,o.Ys)(s);c=t.getBoundingClientRect(),e.attr("width",c.width),e.attr("height",c.height)}c=s.getBBox();const l=0*e.padding,h=l/2,u=e.width<=c.width+e.padding?c.width+e.padding:e.width;e.width<=c.width+e.padding?e.diff=(c.width+0*e.padding-e.width)/2:e.diff=-e.padding/2,r.attr("class","outer").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h).attr("width",u+l).attr("height",e.height+l),a.attr("class","inner").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h+c.height-1).attr("width",u+l).attr("height",e.height+l-c.height-3),i.attr("transform","translate("+(e.x-c.width/2)+", "+(e.y-e.height/2-e.padding/3+(Pt(ar().flowchart.htmlLabels)?5:3))+")");const d=r.node().getBBox();return e.height=d.height,e.intersect=function(t){return As(e,t)},n},noteGroup:(t,e)=>{const n=t.insert("g").attr("class","note-cluster").attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2-a).attr("width",e.width+i).attr("height",e.height+i).attr("fill","none");const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.intersect=function(t){return As(e,t)},n},divider:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("class","divider").attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2).attr("width",e.width+i).attr("height",e.height+i);const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.diff=-e.padding/2,e.intersect=function(t){return As(e,t)},n}};let Zs={};let Ps={},js={};const Ys=(t,e)=>{const n=us(e.label,e.labelStyle),r=t.insert("g").attr("class","edgeLabel"),i=r.insert("g").attr("class","label");i.node().appendChild(n);let a,s=n.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=n.children[0],e=(0,o.Ys)(n);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}if(i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),Ps[e.id]=r,e.width=s.width,e.height=s.height,e.startLabelLeft){const n=us(e.startLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startLeft=r,zs(a,e.startLabelLeft)}if(e.startLabelRight){const n=us(e.startLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=r.node().appendChild(n),i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startRight=r,zs(a,e.startLabelRight)}if(e.endLabelLeft){const n=us(e.endLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endLeft=r,zs(a,e.endLabelLeft)}if(e.endLabelRight){const n=us(e.endLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endRight=r,zs(a,e.endLabelRight)}return n};function zs(t,e){ar().flowchart.htmlLabels&&t&&(t.style.width=9*e.length+"px",t.style.height="12px")}const Us=(t,e)=>{Nt.warn("abc88 cutPathAtIntersect",t,e);let n=[],r=t[0],i=!1;return t.forEach((t=>{if(Nt.info("abc88 checking point",t,e),((t,e)=>{const n=t.x,r=t.y,i=Math.abs(e.x-n),a=Math.abs(e.y-r),s=t.width/2,o=t.height/2;return i>=s||a>=o})(e,t)||i)Nt.warn("abc88 outside",t,r),r=t,i||n.push(t);else{const a=((t,e,n)=>{Nt.warn(`intersection calc abc89:\n  outsidePoint: ${JSON.stringify(e)}\n  insidePoint : ${JSON.stringify(n)}\n  node        : x:${t.x} y:${t.y} w:${t.width} h:${t.height}`);const r=t.x,i=t.y,a=Math.abs(r-n.x),s=t.width/2;let o=n.x<e.x?s-a:s+a;const c=t.height/2,l=Math.abs(e.y-n.y),h=Math.abs(e.x-n.x);if(Math.abs(i-e.y)*s>Math.abs(r-e.x)*c){let t=n.y<e.y?e.y-c-i:i-c-e.y;o=h*t/l;const r={x:n.x<e.x?n.x+o:n.x-h+o,y:n.y<e.y?n.y+l-t:n.y-l+t};return 0===o&&(r.x=e.x,r.y=e.y),0===h&&(r.x=e.x),0===l&&(r.y=e.y),Nt.warn(`abc89 topp/bott calc, Q ${l}, q ${t}, R ${h}, r ${o}`,r),r}{o=n.x<e.x?e.x-s-r:r-s-e.x;let t=l*o/h,i=n.x<e.x?n.x+h-o:n.x-h+o,a=n.y<e.y?n.y+t:n.y-t;return Nt.warn(`sides calc abc89, Q ${l}, q ${t}, R ${h}, r ${o}`,{_x:i,_y:a}),0===o&&(i=e.x,a=e.y),0===h&&(i=e.x),0===l&&(a=e.y),{x:i,y:a}}})(e,r,t);Nt.warn("abc88 inside",t,r,a),Nt.warn("abc88 intersection",a);let s=!1;n.forEach((t=>{s=s||t.x===a.x&&t.y===a.y})),n.some((t=>t.x===a.x&&t.y===a.y))?Nt.warn("abc88 no intersect",a,n):n.push(a),i=!0}})),Nt.warn("abc88 returning points",n),n},Ws=(t,e,n,r)=>{Nt.info("Graph in recursive render: XXX",ut.c(e),r);const i=e.graph().rankdir;Nt.trace("Dir in recursive render - dir:",i);const a=t.insert("g").attr("class","root");e.nodes()?Nt.info("Recursive render XXX",e.nodes()):Nt.info("No nodes found for",e),e.edges().length>0&&Nt.trace("Recursive edges",e.edge(e.edges()[0]));const s=a.insert("g").attr("class","clusters"),c=a.insert("g").attr("class","edgePaths"),l=a.insert("g").attr("class","edgeLabels"),h=a.insert("g").attr("class","nodes");e.nodes().forEach((function(t){const a=e.node(t);if(void 0!==r){const n=JSON.parse(JSON.stringify(r.clusterData));Nt.info("Setting data for cluster XXX (",t,") ",n,r),e.setNode(r.id,n),e.parent(t)||(Nt.trace("Setting parent",t,r.id),e.setParent(t,r.id,n))}if(Nt.info("(Insert) Node XXX"+t+": "+JSON.stringify(e.node(t))),a&&a.clusterNode){Nt.info("Cluster identified",t,a.width,e.node(t));const r=Ws(h,a.graph,n,e.node(t)),i=r.elem;ps(a,i),a.diff=r.diff||0,Nt.info("Node bounds (abc123)",t,a,a.width,a.x,a.y),((t,e)=>{Is[e.id]=t})(i,a),Nt.warn("Recursive render complete ",i,a)}else e.children(t).length>0?(Nt.info("Cluster - the non recursive path XXX",t,a.id,a,e),Nt.info(vs(a.id,e)),gs[a.id]={id:vs(a.id,e),node:a}):(Nt.info("Node - the non recursive path",t,a.id,a),Fs(h,e.node(t),i))})),e.edges().forEach((function(t){const n=e.edge(t.v,t.w,t.name);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t)),Nt.info("Edge "+t.v+" -> "+t.w+": ",t," ",JSON.stringify(e.edge(t))),Nt.info("Fix",gs,"ids:",t.v,t.w,"Translateing: ",gs[t.v],gs[t.w]),Ys(l,n)})),e.edges().forEach((function(t){Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t))})),Nt.info("#############################################"),Nt.info("###                Layout                 ###"),Nt.info("#############################################"),Nt.info(e),(0,lt.bK)(e),Nt.info("Graph after layout:",ut.c(e));let u=0;return(t=>Es(t,t.children()))(e).forEach((function(t){const n=e.node(t);Nt.info("Position "+t+": "+JSON.stringify(e.node(t))),Nt.info("Position "+t+": ("+n.x,","+n.y,") width: ",n.width," height: ",n.height),n&&n.clusterNode?$s(n):e.children(t).length>0?(((t,e)=>{Nt.trace("Inserting cluster");const n=e.shape||"rect";Zs[e.id]=Rs[n](t,e)})(s,n),gs[n.id].node=n):$s(n)})),e.edges().forEach((function(t){const r=e.edge(t);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(r),r);const i=function(t,e,n,r,i,a){let s=n.points,c=!1;const l=a.node(e.v);var h=a.node(e.w);Nt.info("abc88 InsertEdge: ",n),h.intersect&&l.intersect&&(s=s.slice(1,n.points.length-1),s.unshift(l.intersect(s[0])),Nt.info("Last point",s[s.length-1],h,h.intersect(s[s.length-1])),s.push(h.intersect(s[s.length-1]))),n.toCluster&&(Nt.info("to cluster abc88",r[n.toCluster]),s=Us(n.points,r[n.toCluster].node),c=!0),n.fromCluster&&(Nt.info("from cluster abc88",r[n.fromCluster]),s=Us(s.reverse(),r[n.fromCluster].node).reverse(),c=!0);const u=s.filter((t=>!Number.isNaN(t.y)));let d;d=("graph"===i||"flowchart"===i)&&n.curve||o.$0Z;const p=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(d);let f;switch(n.thickness){case"normal":f="edge-thickness-normal";break;case"thick":f="edge-thickness-thick";break;default:f=""}switch(n.pattern){case"solid":f+=" edge-pattern-solid";break;case"dotted":f+=" edge-pattern-dotted";break;case"dashed":f+=" edge-pattern-dashed"}const g=t.append("path").attr("d",p(u)).attr("id",n.id).attr("class"," "+f+(n.classes?" "+n.classes:"")).attr("style",n.style);let y="";switch((ar().flowchart.arrowMarkerAbsolute||ar().state.arrowMarkerAbsolute)&&(y=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,y=y.replace(/\(/g,"\\("),y=y.replace(/\)/g,"\\)")),Nt.info("arrowTypeStart",n.arrowTypeStart),Nt.info("arrowTypeEnd",n.arrowTypeEnd),n.arrowTypeStart){case"arrow_cross":g.attr("marker-start","url("+y+"#"+i+"-crossStart)");break;case"arrow_point":g.attr("marker-start","url("+y+"#"+i+"-pointStart)");break;case"arrow_barb":g.attr("marker-start","url("+y+"#"+i+"-barbStart)");break;case"arrow_circle":g.attr("marker-start","url("+y+"#"+i+"-circleStart)");break;case"aggregation":g.attr("marker-start","url("+y+"#"+i+"-aggregationStart)");break;case"extension":g.attr("marker-start","url("+y+"#"+i+"-extensionStart)");break;case"composition":g.attr("marker-start","url("+y+"#"+i+"-compositionStart)");break;case"dependency":g.attr("marker-start","url("+y+"#"+i+"-dependencyStart)");break;case"lollipop":g.attr("marker-start","url("+y+"#"+i+"-lollipopStart)")}switch(n.arrowTypeEnd){case"arrow_cross":g.attr("marker-end","url("+y+"#"+i+"-crossEnd)");break;case"arrow_point":g.attr("marker-end","url("+y+"#"+i+"-pointEnd)");break;case"arrow_barb":g.attr("marker-end","url("+y+"#"+i+"-barbEnd)");break;case"arrow_circle":g.attr("marker-end","url("+y+"#"+i+"-circleEnd)");break;case"aggregation":g.attr("marker-end","url("+y+"#"+i+"-aggregationEnd)");break;case"extension":g.attr("marker-end","url("+y+"#"+i+"-extensionEnd)");break;case"composition":g.attr("marker-end","url("+y+"#"+i+"-compositionEnd)");break;case"dependency":g.attr("marker-end","url("+y+"#"+i+"-dependencyEnd)");break;case"lollipop":g.attr("marker-end","url("+y+"#"+i+"-lollipopEnd)")}let m={};return c&&(m.updatedPath=s),m.originalPath=n.points,m}(c,t,r,gs,n,e);((t,e)=>{Nt.info("Moving label abc78 ",t.id,t.label,Ps[t.id]);let n=e.updatedPath?e.updatedPath:e.originalPath;if(t.label){const r=Ps[t.id];let i=t.x,a=t.y;if(n){const r=Gn.calcLabelPosition(n);Nt.info("Moving label "+t.label+" from (",i,",",a,") to (",r.x,",",r.y,") abc78"),e.updatedPath&&(i=r.x,a=r.y)}r.attr("transform","translate("+i+", "+a+")")}if(t.startLabelLeft){const e=js[t.id].startLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.startLabelRight){const e=js[t.id].startRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelLeft){const e=js[t.id].endLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelRight){const e=js[t.id].endRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}})(r,i)})),e.nodes().forEach((function(t){const n=e.node(t);Nt.info(t,n.type,n.diff),"group"===n.type&&(u=n.diff)})),{elem:a,diff:u}},qs=(t,e,n,r,i)=>{hs(t,n,r,i),Is={},Ps={},js={},Zs={},ys={},ms={},gs={},Nt.warn("Graph at first:",ut.c(e)),((t,e)=>{!t||e>10?Nt.debug("Opting out, no graph "):(Nt.debug("Opting in, graph "),t.nodes().forEach((function(e){t.children(e).length>0&&(Nt.warn("Cluster identified",e," Replacement id in edges: ",vs(e,t)),ys[e]=xs(e,t),gs[e]={id:vs(e,t),clusterData:t.node(e)})})),t.nodes().forEach((function(e){const n=t.children(e),r=t.edges();n.length>0?(Nt.debug("Cluster identified",e,ys),r.forEach((t=>{t.v!==e&&t.w!==e&&bs(t.v,e)^bs(t.w,e)&&(Nt.warn("Edge: ",t," leaves cluster ",e),Nt.warn("Decendants of XXX ",e,": ",ys[e]),gs[e].externalConnections=!0)}))):Nt.debug("Not a cluster ",e,ys)})),t.edges().forEach((function(e){const n=t.edge(e);Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(e)),Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(t.edge(e)));let r=e.v,i=e.w;if(Nt.warn("Fix XXX",gs,"ids:",e.v,e.w,"Translating: ",gs[e.v]," --- ",gs[e.w]),gs[e.v]&&gs[e.w]&&gs[e.v]===gs[e.w]){Nt.warn("Fixing and trixing link to self - removing XXX",e.v,e.w,e.name),Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name);const a=e.w+"---"+e.v;t.setNode(a,{domId:a,id:a,labelStyle:"",labelText:n.label,padding:0,shape:"labelRect",style:""});const s=JSON.parse(JSON.stringify(n)),o=JSON.parse(JSON.stringify(n));s.label="",s.arrowTypeEnd="none",o.label="",s.fromCluster=e.v,o.toCluster=e.v,t.setEdge(r,a,s,e.name+"-cyclic-special"),t.setEdge(a,i,o,e.name+"-cyclic-special")}else(gs[e.v]||gs[e.w])&&(Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name),r!==e.v&&(n.fromCluster=e.v),i!==e.w&&(n.toCluster=e.w),Nt.warn("Fix Replacing with XXX",r,i,e.name),t.setEdge(r,i,n,e.name))})),Nt.warn("Adjusted Graph",ut.c(t)),ws(t,0),Nt.trace(gs))})(e),Nt.warn("Graph after:",ut.c(e)),Ws(t,e,r)},Hs=t=>Yt.sanitizeText(t,ar());let Vs={dividerMargin:10,padding:5,textHeight:10};function Gs(t){let e;switch(t){case 0:e="aggregation";break;case 1:e="extension";break;case 2:e="composition";break;case 3:e="dependency";break;case 4:e="lollipop";break;default:e="none"}return e}const Xs={setConf:function(t){Object.keys(t).forEach((function(e){Vs[e]=t[e]}))},draw:function(t,e,n,r){Nt.info("Drawing class - ",e);const i=ar().flowchart,a=ar().securityLevel;Nt.info("config:",i);const s=i.nodeSpacing||50,c=i.rankSpacing||50,l=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:r.db.getDirection(),nodesep:s,ranksep:c,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}})),h=r.db.getClasses(),u=r.db.getRelations(),d=r.db.getNotes();let p;Nt.info(u),function(t,e,n,r){const i=Object.keys(t);Nt.info("keys:",i),Nt.info(t),i.forEach((function(n){const i=t[n];let a="";i.cssClasses.length>0&&(a=a+" "+i.cssClasses.join(" "));const s={labelStyle:""};let o=void 0!==i.text?i.text:i.id,c="";i.type,c="class_box",e.setNode(i.id,{labelStyle:s.labelStyle,shape:c,labelText:Hs(o),classData:i,rx:0,ry:0,class:a,style:s.style,id:i.id,domId:i.domId,tooltip:r.db.getTooltip(i.id)||"",haveCallback:i.haveCallback,link:i.link,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s.labelStyle,shape:c,labelText:o,rx:0,ry:0,class:a,style:s.style,id:i.id,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding})}))}(h,l,0,r),function(t,e){const n=ar().flowchart;let r=0;t.forEach((function(i){r++;const a={classes:"relation"};a.pattern=1==i.relation.lineType?"dashed":"solid",a.id="id"+r,"arrow_open"===i.type?a.arrowhead="none":a.arrowhead="normal",Nt.info(a,i),a.startLabelRight="none"===i.relationTitle1?"":i.relationTitle1,a.endLabelLeft="none"===i.relationTitle2?"":i.relationTitle2,a.arrowTypeStart=Gs(i.relation.type1),a.arrowTypeEnd=Gs(i.relation.type2);let s="",c="";if(void 0!==i.style){const t=Mn(i.style);s=t.style,c=t.labelStyle}else s="fill:none";a.style=s,a.labelStyle=c,void 0!==i.interpolate?a.curve=Dn(i.interpolate,o.c_6):void 0!==t.defaultInterpolate?a.curve=Dn(t.defaultInterpolate,o.c_6):a.curve=Dn(n.curve,o.c_6),i.text=i.title,void 0===i.text?void 0!==i.style&&(a.arrowheadStyle="fill: #333"):(a.arrowheadStyle="fill: #333",a.labelpos="c",ar().flowchart.htmlLabels?(a.labelType="html",a.label='<span class="edgeLabel">'+i.text+"</span>"):(a.labelType="text",a.label=i.text.replace(Yt.lineBreakRegex,"\n"),void 0===i.style&&(a.style=a.style||"stroke: #333; stroke-width: 1.5px;fill:none"),a.labelStyle=a.labelStyle.replace("color:","fill:"))),e.setEdge(i.id1,i.id2,a,r)}))}(u,l),function(t,e,n,r){Nt.info(t),t.forEach((function(t,i){const a=t,s="",c="";let l=a.text,h="note";if(e.setNode(a.id,{labelStyle:s,shape:h,labelText:Hs(l),noteData:a,rx:0,ry:0,class:"",style:c,id:a.id,domId:a.id,tooltip:"",type:"note",padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s,shape:h,labelText:l,rx:0,ry:0,style:c,id:a.id,type:"note",padding:ar().flowchart.padding}),!a.class||!(a.class in r))return;const u=n+i,d={classes:"relation",pattern:"dotted"};d.id=`edgeNote${u}`,d.arrowhead="none",Nt.info(`Note edge: ${JSON.stringify(d)}, ${JSON.stringify(a)}`),d.startLabelRight="",d.endLabelLeft="",d.arrowTypeStart="none",d.arrowTypeEnd="none",d.style="fill:none",d.labelStyle="",d.curve=Dn(Vs.curve,o.c_6),e.setEdge(a.id,a.class,d,u)}))}(d,l,u.length+1,h),"sandbox"===a&&(p=(0,o.Ys)("#i"+e));const f="sandbox"===a?(0,o.Ys)(p.nodes()[0].contentDocument.body):(0,o.Ys)("body"),g=f.select(`[id="${e}"]`),y=f.select("#"+e+" g");if(qs(y,l,["aggregation","extension","composition","dependency","lollipop"],"classDiagram",e),Gn.insertTitle(g,"classTitleText",i.titleTopMargin,r.db.getDiagramTitle()),pr(l,g,i.diagramPadding,i.useMaxWidth),!i.htmlLabels){const t="sandbox"===a?p.nodes()[0].contentDocument:document,n=t.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of n){const n=e.getBBox(),r=t.createElementNS("http://www.w3.org/2000/svg","rect");r.setAttribute("rx",0),r.setAttribute("ry",0),r.setAttribute("width",n.width),r.setAttribute("height",n.height),e.insertBefore(r,e.firstChild)}}}};var Ks=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,23,25,27,29,30,31,51],a=[1,17],s=[1,18],o=[1,19],c=[1,20],l=[1,21],h=[1,22],u=[1,25],d=[1,30],p=[1,31],f=[1,32],g=[1,33],y=[6,9,11,15,20,23,25,27,29,30,31,44,45,46,47,51],m=[1,45],b=[30,31,48,49],_=[4,6,9,11,23,25,27,29,30,31,51],x=[44,45,46,47],v=[22,37],k=[1,65],w=[1,64],E=[22,37,39,41],C={trace:function(){},yy:{},symbols_:{error:2,start:3,ER_DIAGRAM:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,entityName:17,relSpec:18,role:19,BLOCK_START:20,attributes:21,BLOCK_STOP:22,title:23,title_value:24,acc_title:25,acc_title_value:26,acc_descr:27,acc_descr_value:28,acc_descr_multiline_value:29,ALPHANUM:30,ENTITY_NAME:31,attribute:32,attributeType:33,attributeName:34,attributeKeyTypeList:35,attributeComment:36,ATTRIBUTE_WORD:37,attributeKeyType:38,COMMA:39,ATTRIBUTE_KEY:40,COMMENT:41,cardinality:42,relType:43,ZERO_OR_ONE:44,ZERO_OR_MORE:45,ONE_OR_MORE:46,ONLY_ONE:47,NON_IDENTIFYING:48,IDENTIFYING:49,WORD:50,open_directive:51,type_directive:52,arg_directive:53,close_directive:54,$accept:0,$end:1},terminals_:{2:"error",4:"ER_DIAGRAM",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",20:"BLOCK_START",22:"BLOCK_STOP",23:"title",24:"title_value",25:"acc_title",26:"acc_title_value",27:"acc_descr",28:"acc_descr_value",29:"acc_descr_multiline_value",30:"ALPHANUM",31:"ENTITY_NAME",37:"ATTRIBUTE_WORD",39:"COMMA",40:"ATTRIBUTE_KEY",41:"COMMENT",44:"ZERO_OR_ONE",45:"ZERO_OR_MORE",46:"ONE_OR_MORE",47:"ONLY_ONE",48:"NON_IDENTIFYING",49:"IDENTIFYING",50:"WORD",51:"open_directive",52:"type_directive",53:"arg_directive",54:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,5],[10,4],[10,3],[10,1],[10,2],[10,2],[10,2],[10,1],[17,1],[17,1],[21,1],[21,2],[32,2],[32,3],[32,3],[32,4],[33,1],[34,1],[35,1],[35,3],[38,1],[36,1],[18,3],[42,1],[42,1],[42,1],[42,1],[43,1],[43,1],[19,1],[19,1],[19,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:break;case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:case 20:case 43:case 28:case 29:case 32:this.$=a[o];break;case 12:r.addEntity(a[o-4]),r.addEntity(a[o-2]),r.addRelationship(a[o-4],a[o],a[o-2],a[o-3]);break;case 13:r.addEntity(a[o-3]),r.addAttributes(a[o-3],a[o-1]);break;case 14:r.addEntity(a[o-2]);break;case 15:r.addEntity(a[o]);break;case 16:case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:case 41:case 42:case 33:this.$=a[o].replace(/"/g,"");break;case 22:case 30:this.$=[a[o]];break;case 23:a[o].push(a[o-1]),this.$=a[o];break;case 24:this.$={attributeType:a[o-1],attributeName:a[o]};break;case 25:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeKeyTypeList:a[o]};break;case 26:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeComment:a[o]};break;case 27:this.$={attributeType:a[o-3],attributeName:a[o-2],attributeKeyTypeList:a[o-1],attributeComment:a[o]};break;case 31:a[o-2].push(a[o]),this.$=a[o-2];break;case 34:this.$={cardA:a[o],relType:a[o-1],cardB:a[o-2]};break;case 35:this.$=r.Cardinality.ZERO_OR_ONE;break;case 36:this.$=r.Cardinality.ZERO_OR_MORE;break;case 37:this.$=r.Cardinality.ONE_OR_MORE;break;case 38:this.$=r.Cardinality.ONLY_ONE;break;case 39:this.$=r.Identification.NON_IDENTIFYING;break;case 40:this.$=r.Identification.IDENTIFYING;break;case 44:r.parseDirective("%%{","open_directive");break;case 45:r.parseDirective(a[o],"type_directive");break;case 46:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 47:r.parseDirective("}%%","close_directive","er")}},table:[{3:1,4:n,7:3,12:4,51:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,51:r},{13:8,52:[1,9]},{52:[2,44]},{6:[1,10],7:15,8:11,9:[1,12],10:13,11:[1,14],12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},{1:[2,2]},{14:23,15:[1,24],54:u},e([15,54],[2,45]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:15,10:26,12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),e(i,[2,15],{18:27,42:29,20:[1,28],44:d,45:p,46:f,47:g}),{24:[1,34]},{26:[1,35]},{28:[1,36]},e(i,[2,19]),e(y,[2,20]),e(y,[2,21]),{11:[1,37]},{16:38,53:[1,39]},{11:[2,47]},e(i,[2,5]),{17:40,30:l,31:h},{21:41,22:[1,42],32:43,33:44,37:m},{43:46,48:[1,47],49:[1,48]},e(b,[2,35]),e(b,[2,36]),e(b,[2,37]),e(b,[2,38]),e(i,[2,16]),e(i,[2,17]),e(i,[2,18]),e(_,[2,9]),{14:49,54:u},{54:[2,46]},{15:[1,50]},{22:[1,51]},e(i,[2,14]),{21:52,22:[2,22],32:43,33:44,37:m},{34:53,37:[1,54]},{37:[2,28]},{42:55,44:d,45:p,46:f,47:g},e(x,[2,39]),e(x,[2,40]),{11:[1,56]},{19:57,30:[1,60],31:[1,59],50:[1,58]},e(i,[2,13]),{22:[2,23]},e(v,[2,24],{35:61,36:62,38:63,40:k,41:w}),e([22,37,40,41],[2,29]),e([30,31],[2,34]),e(_,[2,10]),e(i,[2,12]),e(i,[2,41]),e(i,[2,42]),e(i,[2,43]),e(v,[2,25],{36:66,39:[1,67],41:w}),e(v,[2,26]),e(E,[2,30]),e(v,[2,33]),e(E,[2,32]),e(v,[2,27]),{38:68,40:k},e(E,[2,31])],defaultActions:{5:[2,44],7:[2,2],25:[2,47],39:[2,46],45:[2,28],52:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},T=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("acc_title"),25;case 1:return this.popState(),"acc_title_value";case 2:return this.begin("acc_descr"),27;case 3:return this.popState(),"acc_descr_value";case 4:this.begin("acc_descr_multiline");break;case 5:this.popState();break;case 6:return"acc_descr_multiline_value";case 7:return this.begin("open_directive"),51;case 8:return this.begin("type_directive"),52;case 9:return this.popState(),this.begin("arg_directive"),15;case 10:return this.popState(),this.popState(),54;case 11:return 53;case 12:case 13:case 15:case 22:case 27:break;case 14:return 11;case 16:return 9;case 17:return 31;case 18:return 50;case 19:return 4;case 20:return this.begin("block"),20;case 21:return 39;case 23:return 40;case 24:case 25:return 37;case 26:return 41;case 28:return this.popState(),22;case 29:case 58:return e.yytext[0];case 30:case 34:case 35:case 48:return 44;case 31:case 32:case 33:case 41:case 43:case 50:return 46;case 36:case 37:case 38:case 39:case 40:case 42:case 49:return 45;case 44:case 45:case 46:case 47:return 47;case 51:case 54:case 55:case 56:return 48;case 52:case 53:return 49;case 57:return 30;case 59:return 6}},rules:[/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:[\s]+)/i,/^(?:"[^"%\r\n\v\b\\]+")/i,/^(?:"[^"]*")/i,/^(?:erDiagram\b)/i,/^(?:\{)/i,/^(?:,)/i,/^(?:\s+)/i,/^(?:\b((?:PK)|(?:FK)|(?:UK))\b)/i,/^(?:(.*?)[~](.*?)*[~])/i,/^(?:[A-Za-z_][A-Za-z0-9\-_\[\]\(\)]*)/i,/^(?:"[^"]*")/i,/^(?:[\n]+)/i,/^(?:\})/i,/^(?:.)/i,/^(?:one or zero\b)/i,/^(?:one or more\b)/i,/^(?:one or many\b)/i,/^(?:1\+)/i,/^(?:\|o\b)/i,/^(?:zero or one\b)/i,/^(?:zero or more\b)/i,/^(?:zero or many\b)/i,/^(?:0\+)/i,/^(?:\}o\b)/i,/^(?:many\(0\))/i,/^(?:many\(1\))/i,/^(?:many\b)/i,/^(?:\}\|)/i,/^(?:one\b)/i,/^(?:only one\b)/i,/^(?:1\b)/i,/^(?:\|\|)/i,/^(?:o\|)/i,/^(?:o\{)/i,/^(?:\|\{)/i,/^(?:\.\.)/i,/^(?:--)/i,/^(?:to\b)/i,/^(?:optionally to\b)/i,/^(?:\.-)/i,/^(?:-\.)/i,/^(?:[A-Za-z][A-Za-z0-9\-_]*)/i,/^(?:.)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[5,6],inclusive:!1},acc_descr:{rules:[3],inclusive:!1},acc_title:{rules:[1],inclusive:!1},open_directive:{rules:[8],inclusive:!1},type_directive:{rules:[9,10],inclusive:!1},arg_directive:{rules:[10,11],inclusive:!1},block:{rules:[21,22,23,24,25,26,27,28,29],inclusive:!1},INITIAL:{rules:[0,2,4,7,12,13,14,15,16,17,18,19,20,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],inclusive:!0}}},t);function S(){this.yy={}}return C.lexer=T,S.prototype=C,C.Parser=S,new S}();Ks.parser=Ks;const Qs=Ks,Js=t=>null!==t.match(/^\s*erDiagram/);let to={},eo=[];const no=function(t){return void 0===to[t]&&(to[t]={attributes:[]},Nt.info("Added new entity :",t)),to[t]},ro={Cardinality:{ZERO_OR_ONE:"ZERO_OR_ONE",ZERO_OR_MORE:"ZERO_OR_MORE",ONE_OR_MORE:"ONE_OR_MORE",ONLY_ONE:"ONLY_ONE"},Identification:{NON_IDENTIFYING:"NON_IDENTIFYING",IDENTIFYING:"IDENTIFYING"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().er,addEntity:no,addAttributes:function(t,e){let n,r=no(t);for(n=e.length-1;n>=0;n--)r.attributes.push(e[n]),Nt.debug("Added attribute ",e[n].attributeName)},getEntities:()=>to,addRelationship:function(t,e,n,r){let i={entityA:t,roleA:e,entityB:n,relSpec:r};eo.push(i),Nt.debug("Added new relationship :",i)},getRelationships:()=>eo,clear:function(){to={},eo=[],Dr()},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,setDiagramTitle:$r,getDiagramTitle:Rr},io={ONLY_ONE_START:"ONLY_ONE_START",ONLY_ONE_END:"ONLY_ONE_END",ZERO_OR_ONE_START:"ZERO_OR_ONE_START",ZERO_OR_ONE_END:"ZERO_OR_ONE_END",ONE_OR_MORE_START:"ONE_OR_MORE_START",ONE_OR_MORE_END:"ONE_OR_MORE_END",ZERO_OR_MORE_START:"ZERO_OR_MORE_START",ZERO_OR_MORE_END:"ZERO_OR_MORE_END"},ao=io,so=function(t,e){let n;t.append("defs").append("marker").attr("id",io.ONLY_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18 M15,0 L15,18"),t.append("defs").append("marker").attr("id",io.ONLY_ONE_END).attr("refX",18).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,0 L3,18 M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",21).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_END).attr("refX",30).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,0 L21,18"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q 18,0 36,18 Q 18,36 0,18 M42,9 L42,27"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_END).attr("refX",27).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,9 L3,27 M9,18 Q27,0 45,18 Q27,36 9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",48).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q18,0 36,18 Q18,36 0,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_END).attr("refX",39).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,18 Q39,0 57,18 Q39,36 21,18")},oo=/[^\dA-Za-z](\W)*/g;let co={},lo=new Map;const ho=function(t,e,n){let r;return Object.keys(e).forEach((function(i){const a=function(t="",e=""){const n=t.replace(oo,"");return`${go(e)}${go(n)}${vt(t,fo)}`}(i,"entity");lo.set(i,a);const s=t.append("g").attr("id",a);r=void 0===r?a:r;const o="text-"+a,c=s.append("text").classed("er entityLabel",!0).attr("id",o).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(i),{width:l,height:h}=((t,e,n)=>{const r=co.entityPadding/3,i=co.entityPadding/3,a=.85*co.fontSize,s=e.node().getBBox(),o=[];let c=!1,l=!1,h=0,u=0,d=0,p=0,f=s.height+2*r,g=1;n.forEach((t=>{void 0!==t.attributeKeyTypeList&&t.attributeKeyTypeList.length>0&&(c=!0),void 0!==t.attributeComment&&(l=!0)})),n.forEach((n=>{const i=`${e.node().id}-attr-${g}`;let s=0;const y=jt(n.attributeType),m=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-type`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(y),b=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-name`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeName),_={};_.tn=m,_.nn=b;const x=m.node().getBBox(),v=b.node().getBBox();if(h=Math.max(h,x.width),u=Math.max(u,v.width),s=Math.max(x.height,v.height),c){const e=void 0!==n.attributeKeyTypeList?n.attributeKeyTypeList.join(","):"",r=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-key`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(e);_.kn=r;const o=r.node().getBBox();d=Math.max(d,o.width),s=Math.max(s,o.height)}if(l){const e=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-comment`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeComment||"");_.cn=e;const r=e.node().getBBox();p=Math.max(p,r.width),s=Math.max(s,r.height)}_.height=s,o.push(_),f+=s+2*r,g+=1}));let y=4;c&&(y+=2),l&&(y+=2);const m=h+u+d+p,b={width:Math.max(co.minEntityWidth,Math.max(s.width+2*co.entityPadding,m+i*y)),height:n.length>0?f:Math.max(co.minEntityHeight,s.height+2*co.entityPadding)};if(n.length>0){const n=Math.max(0,(b.width-m-i*y)/(y/2));e.attr("transform","translate("+b.width/2+","+(r+s.height/2)+")");let a=s.height+2*r,f="attributeBoxOdd";o.forEach((e=>{const s=a+r+e.height/2;e.tn.attr("transform","translate("+i+","+s+")");const o=t.insert("rect","#"+e.tn.node().id).classed(`er ${f}`,!0).attr("x",0).attr("y",a).attr("width",h+2*i+n).attr("height",e.height+2*r),g=parseFloat(o.attr("x"))+parseFloat(o.attr("width"));e.nn.attr("transform","translate("+(g+i)+","+s+")");const y=t.insert("rect","#"+e.nn.node().id).classed(`er ${f}`,!0).attr("x",g).attr("y",a).attr("width",u+2*i+n).attr("height",e.height+2*r);let m=parseFloat(y.attr("x"))+parseFloat(y.attr("width"));if(c){e.kn.attr("transform","translate("+(m+i)+","+s+")");const o=t.insert("rect","#"+e.kn.node().id).classed(`er ${f}`,!0).attr("x",m).attr("y",a).attr("width",d+2*i+n).attr("height",e.height+2*r);m=parseFloat(o.attr("x"))+parseFloat(o.attr("width"))}l&&(e.cn.attr("transform","translate("+(m+i)+","+s+")"),t.insert("rect","#"+e.cn.node().id).classed(`er ${f}`,"true").attr("x",m).attr("y",a).attr("width",p+2*i+n).attr("height",e.height+2*r)),a+=e.height+2*r,f="attributeBoxOdd"===f?"attributeBoxEven":"attributeBoxOdd"}))}else b.height=Math.max(co.minEntityHeight,f),e.attr("transform","translate("+b.width/2+","+b.height/2+")");return b})(s,c,e[i].attributes),u=s.insert("rect","#"+o).classed("er entityBox",!0).attr("x",0).attr("y",0).attr("width",l).attr("height",h).node().getBBox();n.setNode(a,{width:u.width,height:u.height,shape:"rect",id:a})})),r},uo=function(t){return(t.entityA+t.roleA+t.entityB).replace(/\s/g,"")};let po=0;const fo="28e9f9db-3c8d-5aa5-9faf-44286ae5937c";function go(t=""){return t.length>0?`${t}-`:""}const yo={setConf:function(t){const e=Object.keys(t);for(const n of e)co[n]=t[n]},draw:function(t,e,n,r){co=ar().er,Nt.info("Drawing ER diagram");const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);let c;so(s,co),c=new ht.k({multigraph:!0,directed:!0,compound:!1}).setGraph({rankdir:co.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));const l=ho(s,r.db.getEntities(),c),h=function(t,e){return t.forEach((function(t){e.setEdge(lo.get(t.entityA),lo.get(t.entityB),{relationship:t},uo(t))})),t}(r.db.getRelationships(),c);var u,d;(0,lt.bK)(c),u=s,(d=c).nodes().forEach((function(t){void 0!==t&&void 0!==d.node(t)&&u.select("#"+t).attr("transform","translate("+(d.node(t).x-d.node(t).width/2)+","+(d.node(t).y-d.node(t).height/2)+" )")})),h.forEach((function(t){!function(t,e,n,r,i){po++;const a=n.edge(lo.get(e.entityA),lo.get(e.entityB),uo(e)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),c=t.insert("path","#"+r).classed("er relationshipLine",!0).attr("d",s(a.points)).style("stroke",co.stroke).style("fill","none");e.relSpec.relType===i.db.Identification.NON_IDENTIFYING&&c.attr("stroke-dasharray","8,8");let l="";switch(co.arrowMarkerAbsolute&&(l=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,l=l.replace(/\(/g,"\\("),l=l.replace(/\)/g,"\\)")),e.relSpec.cardA){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_ONE_END+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_MORE_END+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ONE_OR_MORE_END+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-end","url("+l+"#"+ao.ONLY_ONE_END+")")}switch(e.relSpec.cardB){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_ONE_START+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_MORE_START+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ONE_OR_MORE_START+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-start","url("+l+"#"+ao.ONLY_ONE_START+")")}const h=c.node().getTotalLength(),u=c.node().getPointAtLength(.5*h),d="rel"+po,p=t.append("text").classed("er relationshipLabel",!0).attr("id",d).attr("x",u.x).attr("y",u.y).style("text-anchor","middle").style("dominant-baseline","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(e.roleA).node().getBBox();t.insert("rect","#"+d).classed("er relationshipLabelBox",!0).attr("x",u.x-p.width/2).attr("y",u.y-p.height/2).attr("width",p.width).attr("height",p.height)}(s,t,c,l,r)}));const p=co.diagramPadding;Gn.insertTitle(s,"entityTitleText",co.titleTopMargin,r.db.getDiagramTitle());const f=s.node().getBBox(),g=f.width+2*p,y=f.height+2*p;dr(s,y,g,co.useMaxWidth),s.attr("viewBox",`${f.x-p} ${f.y-p} ${g} ${y}`)}};var mo=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,9],r=[1,7],i=[1,6],a=[1,8],s=[1,20,21,22,23,38,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],o=[2,10],c=[1,20],l=[1,21],h=[1,22],u=[1,23],d=[1,30],p=[1,32],f=[1,33],g=[1,34],y=[1,62],m=[1,48],b=[1,52],_=[1,36],x=[1,37],v=[1,38],k=[1,39],w=[1,40],E=[1,56],C=[1,63],T=[1,51],S=[1,53],A=[1,55],L=[1,59],B=[1,60],N=[1,41],D=[1,42],O=[1,43],M=[1,44],I=[1,61],F=[1,50],$=[1,54],R=[1,57],Z=[1,58],P=[1,49],j=[1,66],Y=[1,71],z=[1,20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],U=[1,75],W=[1,74],q=[1,76],H=[20,21,23,81,82],V=[1,99],G=[1,104],X=[1,107],K=[1,108],Q=[1,101],J=[1,106],tt=[1,109],et=[1,102],nt=[1,114],rt=[1,113],it=[1,103],at=[1,105],st=[1,110],ot=[1,111],ct=[1,112],lt=[1,115],ht=[20,21,22,23,81,82],ut=[20,21,22,23,53,81,82],dt=[20,21,22,23,40,52,53,55,57,59,61,63,65,66,67,69,71,73,74,76,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],pt=[20,21,23],ft=[20,21,23,52,66,67,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],gt=[1,12,20,21,22,23,24,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],yt=[52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],mt=[1,149],bt=[1,157],_t=[1,158],xt=[1,159],vt=[1,160],kt=[1,144],wt=[1,145],Et=[1,141],Ct=[1,152],Tt=[1,153],St=[1,154],At=[1,155],Lt=[1,156],Bt=[1,161],Nt=[1,162],Dt=[1,147],Ot=[1,150],Mt=[1,146],It=[1,143],Ft=[20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],$t=[1,165],Rt=[20,21,22,23,26,52,66,67,91,105,106,109,111,112,122,123,124,125,126,127],Zt=[20,21,22,23,24,26,38,40,41,42,52,56,58,60,62,64,66,67,68,70,72,73,75,77,81,82,86,87,88,89,90,91,92,95,105,106,109,111,112,113,114,122,123,124,125,126,127],Pt=[12,21,22,24],jt=[22,106],Yt=[1,250],zt=[1,245],Ut=[1,246],Wt=[1,254],qt=[1,251],Ht=[1,248],Vt=[1,247],Gt=[1,249],Xt=[1,252],Kt=[1,253],Qt=[1,255],Jt=[1,273],te=[20,21,23,106],ee=[20,21,22,23,66,67,86,102,105,106,109,110,111,112,113],ne={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,directive:5,openDirective:6,typeDirective:7,closeDirective:8,separator:9,":":10,argDirective:11,open_directive:12,type_directive:13,arg_directive:14,close_directive:15,graphConfig:16,document:17,line:18,statement:19,SEMI:20,NEWLINE:21,SPACE:22,EOF:23,GRAPH:24,NODIR:25,DIR:26,FirstStmtSeperator:27,ending:28,endToken:29,spaceList:30,spaceListNewline:31,verticeStatement:32,styleStatement:33,linkStyleStatement:34,classDefStatement:35,classStatement:36,clickStatement:37,subgraph:38,text:39,SQS:40,SQE:41,end:42,direction:43,acc_title:44,acc_title_value:45,acc_descr:46,acc_descr_value:47,acc_descr_multiline_value:48,link:49,node:50,vertex:51,AMP:52,STYLE_SEPARATOR:53,idString:54,DOUBLECIRCLESTART:55,DOUBLECIRCLEEND:56,PS:57,PE:58,"(-":59,"-)":60,STADIUMSTART:61,STADIUMEND:62,SUBROUTINESTART:63,SUBROUTINEEND:64,VERTEX_WITH_PROPS_START:65,ALPHA:66,COLON:67,PIPE:68,CYLINDERSTART:69,CYLINDEREND:70,DIAMOND_START:71,DIAMOND_STOP:72,TAGEND:73,TRAPSTART:74,TRAPEND:75,INVTRAPSTART:76,INVTRAPEND:77,linkStatement:78,arrowText:79,TESTSTR:80,START_LINK:81,LINK:82,textToken:83,STR:84,keywords:85,STYLE:86,LINKSTYLE:87,CLASSDEF:88,CLASS:89,CLICK:90,DOWN:91,UP:92,textNoTags:93,textNoTagsToken:94,DEFAULT:95,stylesOpt:96,alphaNum:97,CALLBACKNAME:98,CALLBACKARGS:99,HREF:100,LINK_TARGET:101,HEX:102,numList:103,INTERPOLATE:104,NUM:105,COMMA:106,style:107,styleComponent:108,MINUS:109,UNIT:110,BRKT:111,DOT:112,PCT:113,TAGSTART:114,alphaNumToken:115,idStringToken:116,alphaNumStatement:117,direction_tb:118,direction_bt:119,direction_rl:120,direction_lr:121,PUNCTUATION:122,UNICODE_TEXT:123,PLUS:124,EQUALS:125,MULT:126,UNDERSCORE:127,graphCodeTokens:128,ARROW_CROSS:129,ARROW_POINT:130,ARROW_CIRCLE:131,ARROW_OPEN:132,QUOTE:133,$accept:0,$end:1},terminals_:{2:"error",10:":",12:"open_directive",13:"type_directive",14:"arg_directive",15:"close_directive",20:"SEMI",21:"NEWLINE",22:"SPACE",23:"EOF",24:"GRAPH",25:"NODIR",26:"DIR",38:"subgraph",40:"SQS",41:"SQE",42:"end",44:"acc_title",45:"acc_title_value",46:"acc_descr",47:"acc_descr_value",48:"acc_descr_multiline_value",52:"AMP",53:"STYLE_SEPARATOR",55:"DOUBLECIRCLESTART",56:"DOUBLECIRCLEEND",57:"PS",58:"PE",59:"(-",60:"-)",61:"STADIUMSTART",62:"STADIUMEND",63:"SUBROUTINESTART",64:"SUBROUTINEEND",65:"VERTEX_WITH_PROPS_START",66:"ALPHA",67:"COLON",68:"PIPE",69:"CYLINDERSTART",70:"CYLINDEREND",71:"DIAMOND_START",72:"DIAMOND_STOP",73:"TAGEND",74:"TRAPSTART",75:"TRAPEND",76:"INVTRAPSTART",77:"INVTRAPEND",80:"TESTSTR",81:"START_LINK",82:"LINK",84:"STR",86:"STYLE",87:"LINKSTYLE",88:"CLASSDEF",89:"CLASS",90:"CLICK",91:"DOWN",92:"UP",95:"DEFAULT",98:"CALLBACKNAME",99:"CALLBACKARGS",100:"HREF",101:"LINK_TARGET",102:"HEX",104:"INTERPOLATE",105:"NUM",106:"COMMA",109:"MINUS",110:"UNIT",111:"BRKT",112:"DOT",113:"PCT",114:"TAGSTART",118:"direction_tb",119:"direction_bt",120:"direction_rl",121:"direction_lr",122:"PUNCTUATION",123:"UNICODE_TEXT",124:"PLUS",125:"EQUALS",126:"MULT",127:"UNDERSCORE",129:"ARROW_CROSS",130:"ARROW_POINT",131:"ARROW_CIRCLE",132:"ARROW_OPEN",133:"QUOTE"},productions_:[0,[3,1],[3,2],[5,4],[5,6],[6,1],[7,1],[11,1],[8,1],[4,2],[17,0],[17,2],[18,1],[18,1],[18,1],[18,1],[18,1],[16,2],[16,2],[16,2],[16,3],[28,2],[28,1],[29,1],[29,1],[29,1],[27,1],[27,1],[27,2],[31,2],[31,2],[31,1],[31,1],[30,2],[30,1],[19,2],[19,2],[19,2],[19,2],[19,2],[19,2],[19,9],[19,6],[19,4],[19,1],[19,2],[19,2],[19,1],[9,1],[9,1],[9,1],[32,3],[32,4],[32,2],[32,1],[50,1],[50,5],[50,3],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,8],[51,4],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,4],[51,4],[51,1],[49,2],[49,3],[49,3],[49,1],[49,3],[78,1],[79,3],[39,1],[39,2],[39,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[93,1],[93,2],[35,5],[35,5],[36,5],[37,2],[37,4],[37,3],[37,5],[37,2],[37,4],[37,4],[37,6],[37,2],[37,4],[37,2],[37,4],[37,4],[37,6],[33,5],[33,5],[34,5],[34,5],[34,9],[34,9],[34,7],[34,7],[103,1],[103,3],[96,1],[96,3],[107,1],[107,2],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[83,1],[83,1],[83,1],[83,1],[83,1],[83,1],[94,1],[94,1],[94,1],[94,1],[54,1],[54,2],[97,1],[97,2],[117,1],[117,1],[117,1],[117,1],[43,1],[43,1],[43,1],[43,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.parseDirective("%%{","open_directive");break;case 6:r.parseDirective(a[o],"type_directive");break;case 7:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 8:r.parseDirective("}%%","close_directive","flowchart");break;case 10:case 36:case 37:case 38:case 39:case 40:this.$=[];break;case 11:(!Array.isArray(a[o])||a[o].length>0)&&a[o-1].push(a[o]),this.$=a[o-1];break;case 12:case 82:case 84:case 96:case 152:case 154:case 155:case 78:case 150:this.$=a[o];break;case 19:r.setDirection("TB"),this.$="TB";break;case 20:r.setDirection(a[o-1]),this.$=a[o-1];break;case 35:this.$=a[o-1].nodes;break;case 41:this.$=r.addSubGraph(a[o-6],a[o-1],a[o-4]);break;case 42:this.$=r.addSubGraph(a[o-3],a[o-1],a[o-3]);break;case 43:this.$=r.addSubGraph(void 0,a[o-1],void 0);break;case 45:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 46:case 47:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 51:r.addLink(a[o-2].stmt,a[o],a[o-1]),this.$={stmt:a[o],nodes:a[o].concat(a[o-2].nodes)};break;case 52:r.addLink(a[o-3].stmt,a[o-1],a[o-2]),this.$={stmt:a[o-1],nodes:a[o-1].concat(a[o-3].nodes)};break;case 53:this.$={stmt:a[o-1],nodes:a[o-1]};break;case 54:this.$={stmt:a[o],nodes:a[o]};break;case 55:case 123:case 125:this.$=[a[o]];break;case 56:this.$=a[o-4].concat(a[o]);break;case 57:this.$=[a[o-2]],r.setClass(a[o-2],a[o]);break;case 58:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"square");break;case 59:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"doublecircle");break;case 60:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"circle");break;case 61:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"ellipse");break;case 62:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"stadium");break;case 63:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"subroutine");break;case 64:this.$=a[o-7],r.addVertex(a[o-7],a[o-1],"rect",void 0,void 0,void 0,Object.fromEntries([[a[o-5],a[o-3]]]));break;case 65:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"cylinder");break;case 66:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"round");break;case 67:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"diamond");break;case 68:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"hexagon");break;case 69:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"odd");break;case 70:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"trapezoid");break;case 71:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"inv_trapezoid");break;case 72:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_right");break;case 73:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_left");break;case 74:this.$=a[o],r.addVertex(a[o]);break;case 75:a[o-1].text=a[o],this.$=a[o-1];break;case 76:case 77:a[o-2].text=a[o-1],this.$=a[o-2];break;case 79:var c=r.destructLink(a[o],a[o-2]);this.$={type:c.type,stroke:c.stroke,length:c.length,text:a[o-1]};break;case 80:c=r.destructLink(a[o]);this.$={type:c.type,stroke:c.stroke,length:c.length};break;case 81:this.$=a[o-1];break;case 83:case 97:case 153:case 151:this.$=a[o-1]+""+a[o];break;case 98:case 99:this.$=a[o-4],r.addClass(a[o-2],a[o]);break;case 100:this.$=a[o-4],r.setClass(a[o-2],a[o]);break;case 101:case 109:this.$=a[o-1],r.setClickEvent(a[o-1],a[o]);break;case 102:case 110:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 103:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 104:this.$=a[o-4],r.setClickEvent(a[o-4],a[o-3],a[o-2]),r.setTooltip(a[o-4],a[o]);break;case 105:case 111:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 106:case 112:this.$=a[o-3],r.setLink(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 107:case 113:this.$=a[o-3],r.setLink(a[o-3],a[o-2],a[o]);break;case 108:case 114:this.$=a[o-5],r.setLink(a[o-5],a[o-4],a[o]),r.setTooltip(a[o-5],a[o-2]);break;case 115:this.$=a[o-4],r.addVertex(a[o-2],void 0,void 0,a[o]);break;case 116:case 118:this.$=a[o-4],r.updateLink(a[o-2],a[o]);break;case 117:this.$=a[o-4],r.updateLink([a[o-2]],a[o]);break;case 119:this.$=a[o-8],r.updateLinkInterpolate([a[o-6]],a[o-2]),r.updateLink([a[o-6]],a[o]);break;case 120:this.$=a[o-8],r.updateLinkInterpolate(a[o-6],a[o-2]),r.updateLink(a[o-6],a[o]);break;case 121:this.$=a[o-6],r.updateLinkInterpolate([a[o-4]],a[o]);break;case 122:this.$=a[o-6],r.updateLinkInterpolate(a[o-4],a[o]);break;case 124:case 126:a[o-2].push(a[o]),this.$=a[o-2];break;case 128:this.$=a[o-1]+a[o];break;case 156:this.$="v";break;case 157:this.$="-";break;case 158:this.$={stmt:"dir",value:"TB"};break;case 159:this.$={stmt:"dir",value:"BT"};break;case 160:this.$={stmt:"dir",value:"RL"};break;case 161:this.$={stmt:"dir",value:"LR"}}},table:[{3:1,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},{1:[3]},{1:[2,1]},{3:10,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},e(s,o,{17:11}),{7:12,13:[1,13]},{16:14,21:r,22:i,24:a},{16:15,21:r,22:i,24:a},{25:[1,16],26:[1,17]},{13:[2,5]},{1:[2,2]},{1:[2,9],18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{8:64,10:[1,65],15:j},e([10,15],[2,6]),e(s,[2,17]),e(s,[2,18]),e(s,[2,19]),{20:[1,68],21:[1,69],22:Y,27:67,30:70},e(z,[2,11]),e(z,[2,12]),e(z,[2,13]),e(z,[2,14]),e(z,[2,15]),e(z,[2,16]),{9:72,20:U,21:W,23:q,49:73,78:77,81:[1,78],82:[1,79]},{9:80,20:U,21:W,23:q},{9:81,20:U,21:W,23:q},{9:82,20:U,21:W,23:q},{9:83,20:U,21:W,23:q},{9:84,20:U,21:W,23:q},{9:86,20:U,21:W,22:[1,85],23:q},e(z,[2,44]),{45:[1,87]},{47:[1,88]},e(z,[2,47]),e(H,[2,54],{30:89,22:Y}),{22:[1,90]},{22:[1,91]},{22:[1,92]},{22:[1,93]},{26:V,52:G,66:X,67:K,84:[1,97],91:Q,97:96,98:[1,94],100:[1,95],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(z,[2,158]),e(z,[2,159]),e(z,[2,160]),e(z,[2,161]),e(ht,[2,55],{53:[1,116]}),e(ut,[2,74],{116:129,40:[1,117],52:y,55:[1,118],57:[1,119],59:[1,120],61:[1,121],63:[1,122],65:[1,123],66:m,67:b,69:[1,124],71:[1,125],73:[1,126],74:[1,127],76:[1,128],91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),e(dt,[2,150]),e(dt,[2,175]),e(dt,[2,176]),e(dt,[2,177]),e(dt,[2,178]),e(dt,[2,179]),e(dt,[2,180]),e(dt,[2,181]),e(dt,[2,182]),e(dt,[2,183]),e(dt,[2,184]),e(dt,[2,185]),e(dt,[2,186]),e(dt,[2,187]),e(dt,[2,188]),e(dt,[2,189]),e(dt,[2,190]),{9:130,20:U,21:W,23:q},{11:131,14:[1,132]},e(pt,[2,8]),e(s,[2,20]),e(s,[2,26]),e(s,[2,27]),{21:[1,133]},e(ft,[2,34],{30:134,22:Y}),e(z,[2,35]),{50:135,51:45,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},e(gt,[2,48]),e(gt,[2,49]),e(gt,[2,50]),e(yt,[2,78],{79:136,68:[1,138],80:[1,137]}),{22:mt,24:bt,26:_t,38:xt,39:139,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e([52,66,67,68,80,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,80]),e(z,[2,36]),e(z,[2,37]),e(z,[2,38]),e(z,[2,39]),e(z,[2,40]),{22:mt,24:bt,26:_t,38:xt,39:163,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:164}),e(z,[2,45]),e(z,[2,46]),e(H,[2,53],{52:$t}),{26:V,52:G,66:X,67:K,91:Q,97:166,102:[1,167],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{95:[1,168],103:169,105:[1,170]},{26:V,52:G,66:X,67:K,91:Q,95:[1,171],97:172,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:173,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,101],{22:[1,174],99:[1,175]}),e(pt,[2,105],{22:[1,176]}),e(pt,[2,109],{115:100,117:178,22:[1,177],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,111],{22:[1,179]}),e(Rt,[2,152]),e(Rt,[2,154]),e(Rt,[2,155]),e(Rt,[2,156]),e(Rt,[2,157]),e(Zt,[2,162]),e(Zt,[2,163]),e(Zt,[2,164]),e(Zt,[2,165]),e(Zt,[2,166]),e(Zt,[2,167]),e(Zt,[2,168]),e(Zt,[2,169]),e(Zt,[2,170]),e(Zt,[2,171]),e(Zt,[2,172]),e(Zt,[2,173]),e(Zt,[2,174]),{52:y,54:180,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:mt,24:bt,26:_t,38:xt,39:181,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:182,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:184,42:vt,52:G,57:[1,183],66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:185,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:186,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:187,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{66:[1,188]},{22:mt,24:bt,26:_t,38:xt,39:189,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:190,42:vt,52:G,66:X,67:K,71:[1,191],73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:192,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:193,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:194,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(dt,[2,151]),e(Pt,[2,3]),{8:195,15:j},{15:[2,7]},e(s,[2,28]),e(ft,[2,33]),e(H,[2,51],{30:196,22:Y}),e(yt,[2,75],{22:[1,197]}),{22:[1,198]},{22:mt,24:bt,26:_t,38:xt,39:199,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,81:wt,82:[1,200],83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Zt,[2,82]),e(Zt,[2,84]),e(Zt,[2,140]),e(Zt,[2,141]),e(Zt,[2,142]),e(Zt,[2,143]),e(Zt,[2,144]),e(Zt,[2,145]),e(Zt,[2,146]),e(Zt,[2,147]),e(Zt,[2,148]),e(Zt,[2,149]),e(Zt,[2,85]),e(Zt,[2,86]),e(Zt,[2,87]),e(Zt,[2,88]),e(Zt,[2,89]),e(Zt,[2,90]),e(Zt,[2,91]),e(Zt,[2,92]),e(Zt,[2,93]),e(Zt,[2,94]),e(Zt,[2,95]),{9:203,20:U,21:W,22:mt,23:q,24:bt,26:_t,38:xt,40:[1,202],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,204],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Y,30:205},{22:[1,206],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,207]},{22:[1,208]},{22:[1,209],106:[1,210]},e(jt,[2,123]),{22:[1,211]},{22:[1,212],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,213],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{84:[1,214]},e(pt,[2,103],{22:[1,215]}),{84:[1,216],101:[1,217]},{84:[1,218]},e(Rt,[2,153]),{84:[1,219],101:[1,220]},e(ht,[2,57],{116:129,52:y,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),{22:mt,24:bt,26:_t,38:xt,41:[1,221],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,56:[1,222],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:223,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,224],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,60:[1,225],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,62:[1,226],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,64:[1,227],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{67:[1,228]},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,70:[1,229],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,230],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:231,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,41:[1,232],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,233],77:[1,234],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,236],77:[1,235],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{9:237,20:U,21:W,23:q},e(H,[2,52],{52:$t}),e(yt,[2,77]),e(yt,[2,76]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,68:[1,238],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(yt,[2,79]),e(Zt,[2,83]),{22:mt,24:bt,26:_t,38:xt,39:239,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:240}),e(z,[2,43]),{51:241,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:242,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:256,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:257,102:qt,104:[1,258],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:259,102:qt,104:[1,260],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{105:[1,261]},{22:Yt,66:zt,67:Ut,86:Wt,96:262,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:263,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{26:V,52:G,66:X,67:K,91:Q,97:264,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,102]),{84:[1,265]},e(pt,[2,106],{22:[1,266]}),e(pt,[2,107]),e(pt,[2,110]),e(pt,[2,112],{22:[1,267]}),e(pt,[2,113]),e(ut,[2,58]),e(ut,[2,59]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,268],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,66]),e(ut,[2,61]),e(ut,[2,62]),e(ut,[2,63]),{66:[1,269]},e(ut,[2,65]),e(ut,[2,67]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,270],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,69]),e(ut,[2,70]),e(ut,[2,72]),e(ut,[2,71]),e(ut,[2,73]),e(Pt,[2,4]),e([22,52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,81]),{22:mt,24:bt,26:_t,38:xt,41:[1,271],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,272],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},e(ht,[2,56]),e(pt,[2,115],{106:Jt}),e(te,[2,125],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(ee,[2,127]),e(ee,[2,129]),e(ee,[2,130]),e(ee,[2,131]),e(ee,[2,132]),e(ee,[2,133]),e(ee,[2,134]),e(ee,[2,135]),e(ee,[2,136]),e(ee,[2,137]),e(ee,[2,138]),e(ee,[2,139]),e(pt,[2,116],{106:Jt}),e(pt,[2,117],{106:Jt}),{22:[1,275]},e(pt,[2,118],{106:Jt}),{22:[1,276]},e(jt,[2,124]),e(pt,[2,98],{106:Jt}),e(pt,[2,99],{106:Jt}),e(pt,[2,100],{115:100,117:178,26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,104]),{101:[1,277]},{101:[1,278]},{58:[1,279]},{68:[1,280]},{72:[1,281]},{9:282,20:U,21:W,23:q},e(z,[2,42]),{22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,107:283,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ee,[2,128]),{26:V,52:G,66:X,67:K,91:Q,97:284,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:285,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,108]),e(pt,[2,114]),e(ut,[2,60]),{22:mt,24:bt,26:_t,38:xt,39:286,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,68]),e(Ft,o,{17:287}),e(te,[2,126],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(pt,[2,121],{115:100,117:178,22:[1,288],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,122],{115:100,117:178,22:[1,289],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),{22:mt,24:bt,26:_t,38:xt,41:[1,290],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,291],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:292,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:293,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ut,[2,64]),e(z,[2,41]),e(pt,[2,119],{106:Jt}),e(pt,[2,120],{106:Jt})],defaultActions:{2:[2,1],9:[2,5],10:[2,2],132:[2,7]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},re=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),12;case 1:return this.begin("type_directive"),13;case 2:return this.popState(),this.begin("arg_directive"),10;case 3:return this.popState(),this.popState(),15;case 4:return 14;case 5:case 6:break;case 7:return this.begin("acc_title"),44;case 8:return this.popState(),"acc_title_value";case 9:return this.begin("acc_descr"),46;case 10:return this.popState(),"acc_descr_value";case 11:this.begin("acc_descr_multiline");break;case 12:case 15:case 24:case 27:case 30:case 33:this.popState();break;case 13:return"acc_descr_multiline_value";case 14:this.begin("string");break;case 16:return"STR";case 17:return 86;case 18:return 95;case 19:return 87;case 20:return 104;case 21:return 88;case 22:return 89;case 23:this.begin("href");break;case 25:return 100;case 26:this.begin("callbackname");break;case 28:this.popState(),this.begin("callbackargs");break;case 29:return 98;case 31:return 99;case 32:this.begin("click");break;case 34:return 90;case 35:case 36:case 37:return t.lex.firstGraph()&&this.begin("dir"),24;case 38:return 38;case 39:return 42;case 40:case 41:case 42:case 43:return 101;case 44:return this.popState(),25;case 45:case 46:case 47:case 48:case 49:case 50:case 51:case 52:case 53:case 54:return this.popState(),26;case 55:return 118;case 56:return 119;case 57:return 120;case 58:return 121;case 59:return 105;case 60:return 111;case 61:return 53;case 62:return 67;case 63:return 52;case 64:return 20;case 65:return 106;case 66:return 126;case 67:case 68:case 69:return 82;case 70:case 71:case 72:return 81;case 73:return 59;case 74:return 60;case 75:return 61;case 76:return 62;case 77:return 63;case 78:return 64;case 79:return 65;case 80:return 69;case 81:return 70;case 82:return 55;case 83:return 56;case 84:return 109;case 85:return 112;case 86:return 127;case 87:return 124;case 88:return 113;case 89:case 90:return 125;case 91:return 114;case 92:return 73;case 93:return 92;case 94:return"SEP";case 95:return 91;case 96:return 66;case 97:return 75;case 98:return 74;case 99:return 77;case 100:return 76;case 101:return 122;case 102:return 123;case 103:return 68;case 104:return 57;case 105:return 58;case 106:return 40;case 107:return 41;case 108:return 71;case 109:return 72;case 110:return 133;case 111:return 21;case 112:return 22;case 113:return 23}},rules:[/^(?:%%\{)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)[^\n]*)/,/^(?:[^\}]%%[^\n]*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:style\b)/,/^(?:default\b)/,/^(?:linkStyle\b)/,/^(?:interpolate\b)/,/^(?:classDef\b)/,/^(?:class\b)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:click[\s]+)/,/^(?:[\s\n])/,/^(?:[^\s\n]*)/,/^(?:flowchart-elk\b)/,/^(?:graph\b)/,/^(?:flowchart\b)/,/^(?:subgraph\b)/,/^(?:end\b\s*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:(\r?\n)*\s*\n)/,/^(?:\s*LR\b)/,/^(?:\s*RL\b)/,/^(?:\s*TB\b)/,/^(?:\s*BT\b)/,/^(?:\s*TD\b)/,/^(?:\s*BR\b)/,/^(?:\s*<)/,/^(?:\s*>)/,/^(?:\s*\^)/,/^(?:\s*v\b)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:[0-9]+)/,/^(?:#)/,/^(?::::)/,/^(?::)/,/^(?:&)/,/^(?:;)/,/^(?:,)/,/^(?:\*)/,/^(?:\s*[xo<]?--+[-xo>]\s*)/,/^(?:\s*[xo<]?==+[=xo>]\s*)/,/^(?:\s*[xo<]?-?\.+-[xo>]?\s*)/,/^(?:\s*[xo<]?--\s*)/,/^(?:\s*[xo<]?==\s*)/,/^(?:\s*[xo<]?-\.\s*)/,/^(?:\(-)/,/^(?:-\))/,/^(?:\(\[)/,/^(?:\]\))/,/^(?:\[\[)/,/^(?:\]\])/,/^(?:\[\|)/,/^(?:\[\()/,/^(?:\)\])/,/^(?:\(\(\()/,/^(?:\)\)\))/,/^(?:-)/,/^(?:\.)/,/^(?:[\_])/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:<)/,/^(?:>)/,/^(?:\^)/,/^(?:\\\|)/,/^(?:v\b)/,/^(?:[A-Za-z]+)/,/^(?:\\\])/,/^(?:\[\/)/,/^(?:\/\])/,/^(?:\[\\)/,/^(?:[!"#$%&'*+,-.`?\\_/])/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\|)/,/^(?:\()/,/^(?:\))/,/^(?:\[)/,/^(?:\])/,/^(?:\{)/,/^(?:\})/,/^(?:")/,/^(?:(\r?\n)+)/,/^(?:\s)/,/^(?:$)/],conditions:{close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[30,31],inclusive:!1},callbackname:{rules:[27,28,29],inclusive:!1},href:{rules:[24,25],inclusive:!1},click:{rules:[33,34],inclusive:!1},vertex:{rules:[],inclusive:!1},dir:{rules:[44,45,46,47,48,49,50,51,52,53,54],inclusive:!1},acc_descr_multiline:{rules:[12,13],inclusive:!1},acc_descr:{rules:[10],inclusive:!1},acc_title:{rules:[8],inclusive:!1},string:{rules:[15,16],inclusive:!1},INITIAL:{rules:[0,5,6,7,9,11,14,17,18,19,20,21,22,23,26,32,35,36,37,38,39,40,41,42,43,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],inclusive:!0}}},t);function ie(){this.yy={}}return ne.lexer=re,ie.prototype=ne,ne.Parser=ie,new ie}();mo.parser=mo;const bo=mo,_o=(t,e)=>{var n,r;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&null!==t.match(/^\s*graph/))},xo=(t,e)=>{var n,r;return"dagre-d3"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&(null!==t.match(/^\s*graph/)||null!==t.match(/^\s*flowchart/)))};let vo,ko,wo=0,Eo=ar(),Co={},To=[],So={},Ao=[],Lo={},Bo={},No=0,Do=!0,Oo=[];const Mo=t=>Yt.sanitizeText(t,Eo),Io=function(t,e,n){ap.parseDirective(this,t,e,n)},Fo=function(t){const e=Object.keys(Co);for(const n of e)if(Co[n].id===t)return Co[n].domId;return t},$o=function(t,e,n,r,i,a,s={}){let o,c=t;void 0!==c&&0!==c.trim().length&&(void 0===Co[c]&&(Co[c]={id:c,domId:"flowchart-"+c+"-"+wo,styles:[],classes:[]}),wo++,void 0!==e?(Eo=ar(),o=Mo(e.trim()),'"'===o[0]&&'"'===o[o.length-1]&&(o=o.substring(1,o.length-1)),Co[c].text=o):void 0===Co[c].text&&(Co[c].text=t),void 0!==n&&(Co[c].type=n),null!=r&&r.forEach((function(t){Co[c].styles.push(t)})),null!=i&&i.forEach((function(t){Co[c].classes.push(t)})),void 0!==a&&(Co[c].dir=a),void 0===Co[c].props?Co[c].props=s:void 0!==s&&Object.assign(Co[c].props,s))},Ro=function(t,e,n,r){const i={start:t,end:e,type:void 0,text:""};void 0!==(r=n.text)&&(i.text=Mo(r.trim()),'"'===i.text[0]&&'"'===i.text[i.text.length-1]&&(i.text=i.text.substring(1,i.text.length-1))),void 0!==n&&(i.type=n.type,i.stroke=n.stroke,i.length=n.length),To.push(i)},Zo=function(t,e,n,r){let i,a;for(i=0;i<t.length;i++)for(a=0;a<e.length;a++)Ro(t[i],e[a],n,r)},Po=function(t,e){t.forEach((function(t){"default"===t?To.defaultInterpolate=e:To[t].interpolate=e}))},jo=function(t,e){t.forEach((function(t){"default"===t?To.defaultStyle=e:(-1===Gn.isSubstringInArray("fill",e)&&e.push("fill:none"),To[t].style=e)}))},Yo=function(t,e){void 0===So[t]&&(So[t]={id:t,styles:[],textStyles:[]}),null!=e&&e.forEach((function(e){if(e.match("color")){const n=e.replace("fill","bgFill").replace("color","fill");So[t].textStyles.push(n)}So[t].styles.push(e)}))},zo=function(t){vo=t,vo.match(/.*</)&&(vo="RL"),vo.match(/.*\^/)&&(vo="BT"),vo.match(/.*>/)&&(vo="LR"),vo.match(/.*v/)&&(vo="TB"),"TD"===vo&&(vo="TB")},Uo=function(t,e){t.split(",").forEach((function(t){let n=t;void 0!==Co[n]&&Co[n].classes.push(e),void 0!==Lo[n]&&Lo[n].classes.push(e)}))},Wo=function(t,e,n){t.split(",").forEach((function(t){void 0!==Co[t]&&(Co[t].link=Gn.formatUrl(e,Eo),Co[t].linkTarget=n)})),Uo(t,"clickable")},qo=function(t){return Bo[t]},Ho=function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){let r=Fo(t);if("loose"!==ar().securityLevel)return;if(void 0===e)return;let i=[];if("string"==typeof n){i=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<i.length;t++){let e=i[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),i[t]=e}}0===i.length&&i.push(t),void 0!==Co[t]&&(Co[t].haveCallback=!0,Oo.push((function(){const t=document.querySelector(`[id="${r}"]`);null!==t&&t.addEventListener("click",(function(){Gn.runFunc(e,...i)}),!1)})))}(t,e,n)})),Uo(t,"clickable")},Vo=function(t){Oo.forEach((function(e){e(t)}))},Go=function(){return vo.trim()},Xo=function(){return Co},Ko=function(){return To},Qo=function(){return So},Jo=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Oo.push(Jo);const tc=function(t="gen-1"){Co={},So={},To=[],Oo=[Jo],Ao=[],Lo={},No=0,Bo=[],Do=!0,ko=t,Dr()},ec=t=>{ko=t||"gen-2"},nc=function(){return"fill:#ffa;stroke: #f66; stroke-width: 3px; stroke-dasharray: 5, 5;fill:#ffa;stroke: #666;"},rc=function(t,e,n){let r=t.trim(),i=n;t===n&&n.match(/\s/)&&(r=void 0);let a=[];const{nodeList:s,dir:o}=function(t){const e={boolean:{},number:{},string:{}},n=[];let r;return{nodeList:t.filter((function(t){const i=typeof t;return t.stmt&&"dir"===t.stmt?(r=t.value,!1):""!==t.trim()&&(i in e?!e[i].hasOwnProperty(t)&&(e[i][t]=!0):!n.includes(t)&&n.push(t))})),dir:r}}(a.concat.apply(a,e));if(a=s,"gen-1"===ko)for(let l=0;l<a.length;l++)a[l]=Fo(a[l]);r=r||"subGraph"+No,i=i||"",i=Mo(i),No+=1;const c={id:r,nodes:a,title:i.trim(),classes:[],dir:o};return Nt.info("Adding",c.id,c.nodes,c.dir),c.nodes=fc(c,Ao).nodes,Ao.push(c),Lo[r]=c,r},ic=function(t){for(const[e,n]of Ao.entries())if(n.id===t)return e;return-1};let ac=-1;const sc=[],oc=function(t,e){const n=Ao[e].nodes;if(ac+=1,ac>2e3)return;if(sc[ac]=e,Ao[e].id===t)return{result:!0,count:0};let r=0,i=1;for(;r<n.length;){const e=ic(n[r]);if(e>=0){const n=oc(t,e);if(n.result)return{result:!0,count:i+n.count};i+=n.count}r+=1}return{result:!1,count:i}},cc=function(t){return sc[t]},lc=function(){ac=-1,Ao.length>0&&oc("none",Ao.length-1)},hc=function(){return Ao},uc=()=>!!Do&&(Do=!1,!0),dc=(t,e)=>{const n=(t=>{const e=t.trim();let n=e.slice(0,-1),r="arrow_open";switch(e.slice(-1)){case"x":r="arrow_cross","x"===e[0]&&(r="double_"+r,n=n.slice(1));break;case">":r="arrow_point","<"===e[0]&&(r="double_"+r,n=n.slice(1));break;case"o":r="arrow_circle","o"===e[0]&&(r="double_"+r,n=n.slice(1))}let i="normal",a=n.length-1;"="===n[0]&&(i="thick");let s=((t,e)=>{const n=e.length;let r=0;for(let i=0;i<n;++i)e[i]===t&&++r;return r})(".",n);return s&&(i="dotted",a=s),{type:r,stroke:i,length:a}})(t);let r;if(e){if(r=(t=>{let e=t.trim(),n="arrow_open";switch(e[0]){case"<":n="arrow_point",e=e.slice(1);break;case"x":n="arrow_cross",e=e.slice(1);break;case"o":n="arrow_circle",e=e.slice(1)}let r="normal";return e.includes("=")&&(r="thick"),e.includes(".")&&(r="dotted"),{type:n,stroke:r}})(e),r.stroke!==n.stroke)return{type:"INVALID",stroke:"INVALID"};if("arrow_open"===r.type)r.type=n.type;else{if(r.type!==n.type)return{type:"INVALID",stroke:"INVALID"};r.type="double_"+r.type}return"double_arrow"===r.type&&(r.type="double_arrow_point"),r.length=n.length,r}return n},pc=(t,e)=>{let n=!1;return t.forEach((t=>{t.nodes.indexOf(e)>=0&&(n=!0)})),n},fc=(t,e)=>{const n=[];return t.nodes.forEach(((r,i)=>{pc(e,r)||n.push(t.nodes[i])})),{nodes:n}},gc={firstGraph:uc},yc={parseDirective:Io,defaultConfig:()=>Kn.flowchart,setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,addVertex:$o,lookUpDomId:Fo,addLink:Zo,updateLinkInterpolate:Po,updateLink:jo,addClass:Yo,setDirection:zo,setClass:Uo,setTooltip:function(t,e){t.split(",").forEach((function(t){void 0!==e&&(Bo["gen-1"===ko?Fo(t):t]=Mo(e))}))},getTooltip:qo,setClickEvent:Ho,setLink:Wo,bindFunctions:Vo,getDirection:Go,getVertices:Xo,getEdges:Ko,getClasses:Qo,clear:tc,setGen:ec,defaultStyle:nc,addSubGraph:rc,getDepthFirstPos:cc,indexNodes:lc,getSubGraphs:hc,destructLink:dc,lex:gc,exists:pc,makeUniq:fc,setDiagramTitle:$r,getDiagramTitle:Rr},mc=Object.freeze(Object.defineProperty({__proto__:null,addClass:Yo,addLink:Zo,addSingleLink:Ro,addSubGraph:rc,addVertex:$o,bindFunctions:Vo,clear:tc,default:yc,defaultStyle:nc,destructLink:dc,firstGraph:uc,getClasses:Qo,getDepthFirstPos:cc,getDirection:Go,getEdges:Ko,getSubGraphs:hc,getTooltip:qo,getVertices:Xo,indexNodes:lc,lex:gc,lookUpDomId:Fo,parseDirective:Io,setClass:Uo,setClickEvent:Ho,setDirection:zo,setGen:ec,setLink:Wo,updateLink:jo,updateLinkInterpolate:Po},Symbol.toStringTag,{value:"Module"}));const bc={},_c=function(t){const e=Object.keys(t);for(const n of e)bc[n]=t[n]},xc={},vc=function(t,e,n,r,i,a){const s=r.select(`[id="${n}"]`);Object.keys(t).forEach((function(n){const r=t[n];let o="default";r.classes.length>0&&(o=r.classes.join(" "));const c=Mn(r.styles);let l,h=void 0!==r.text?r.text:r.id;if(Pt(ar().flowchart.htmlLabels)){const t={label:h.replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`))};l=(0,kt.a)(s,t).node(),l.parentNode.removeChild(l)}else{const t=i.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",c.labelStyle.replace("color:","fill:"));const e=h.split(Yt.lineBreakRegex);for(const n of e){const e=i.createElementNS("http://www.w3.org/2000/svg","tspan");e.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),e.setAttribute("dy","1em"),e.setAttribute("x","1"),e.textContent=n,t.appendChild(e)}l=t}let u=0,d="";switch(r.type){case"round":u=5,d="rect";break;case"square":case"group":default:d="rect";break;case"diamond":d="question";break;case"hexagon":d="hexagon";break;case"odd":case"odd_right":d="rect_left_inv_arrow";break;case"lean_right":d="lean_right";break;case"lean_left":d="lean_left";break;case"trapezoid":d="trapezoid";break;case"inv_trapezoid":d="inv_trapezoid";break;case"circle":d="circle";break;case"ellipse":d="ellipse";break;case"stadium":d="stadium";break;case"subroutine":d="subroutine";break;case"cylinder":d="cylinder";break;case"doublecircle":d="doublecircle"}e.setNode(r.id,{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,link:r.link,linkTarget:r.linkTarget,tooltip:a.db.getTooltip(r.id)||"",domId:a.db.lookUpDomId(r.id),haveCallback:r.haveCallback,width:"group"===r.type?500:void 0,dir:r.dir,type:r.type,props:r.props,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,domId:a.db.lookUpDomId(r.id),width:"group"===r.type?500:void 0,type:r.type,dir:r.dir,props:r.props,padding:ar().flowchart.padding})}))},kc=function(t,e,n){Nt.info("abc78 edges = ",t);let r,i,a=0,s={};if(void 0!==t.defaultStyle){const e=Mn(t.defaultStyle);r=e.style,i=e.labelStyle}t.forEach((function(n){a++;var c="L-"+n.start+"-"+n.end;void 0===s[c]?(s[c]=0,Nt.info("abc78 new entry",c,s[c])):(s[c]++,Nt.info("abc78 new entry",c,s[c]));let l=c+"-"+s[c];Nt.info("abc78 new link id to be used is",c,l,s[c]);var h="LS-"+n.start,u="LE-"+n.end;const d={style:"",labelStyle:""};switch(d.minlen=n.length||1,"arrow_open"===n.type?d.arrowhead="none":d.arrowhead="normal",d.arrowTypeStart="arrow_open",d.arrowTypeEnd="arrow_open",n.type){case"double_arrow_cross":d.arrowTypeStart="arrow_cross";case"arrow_cross":d.arrowTypeEnd="arrow_cross";break;case"double_arrow_point":d.arrowTypeStart="arrow_point";case"arrow_point":d.arrowTypeEnd="arrow_point";break;case"double_arrow_circle":d.arrowTypeStart="arrow_circle";case"arrow_circle":d.arrowTypeEnd="arrow_circle"}let p="",f="";switch(n.stroke){case"normal":p="fill:none;",void 0!==r&&(p=r),void 0!==i&&(f=i),d.thickness="normal",d.pattern="solid";break;case"dotted":d.thickness="normal",d.pattern="dotted",d.style="fill:none;stroke-width:2px;stroke-dasharray:3;";break;case"thick":d.thickness="thick",d.pattern="solid",d.style="stroke-width: 3.5px;fill:none;"}if(void 0!==n.style){const t=Mn(n.style);p=t.style,f=t.labelStyle}d.style=d.style+=p,d.labelStyle=d.labelStyle+=f,void 0!==n.interpolate?d.curve=Dn(n.interpolate,o.c_6):void 0!==t.defaultInterpolate?d.curve=Dn(t.defaultInterpolate,o.c_6):d.curve=Dn(xc.curve,o.c_6),void 0===n.text?void 0!==n.style&&(d.arrowheadStyle="fill: #333"):(d.arrowheadStyle="fill: #333",d.labelpos="c"),d.labelType="text",d.label=n.text.replace(Yt.lineBreakRegex,"\n"),void 0===n.style&&(d.style=d.style||"stroke: #333; stroke-width: 1.5px;fill:none;"),d.labelStyle=d.labelStyle.replace("color:","fill:"),d.id=l,d.classes="flowchart-link "+h+" "+u,e.setEdge(n.start,n.end,d,a)}))},wc={setConf:function(t){const e=Object.keys(t);for(const n of e)xc[n]=t[n]},addVertices:vc,addEdges:kc,getClasses:function(t,e){Nt.info("Extracting classes"),e.db.clear();try{return e.parse(t),e.db.getClasses()}catch(n){return}},draw:function(t,e,n,r){Nt.info("Drawing flowchart"),r.db.clear(),yc.setGen("gen-2"),r.parser.parse(t);let i=r.db.getDirection();void 0===i&&(i="TD");const{securityLevel:a,flowchart:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;let h;"sandbox"===a&&(h=(0,o.Ys)("#i"+e));const u="sandbox"===a?(0,o.Ys)(h.nodes()[0].contentDocument.body):(0,o.Ys)("body"),d="sandbox"===a?h.nodes()[0].contentDocument:document,p=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:i,nodesep:c,ranksep:l,marginx:0,marginy:0}).setDefaultEdgeLabel((function(){return{}}));let f;const g=r.db.getSubGraphs();Nt.info("Subgraphs - ",g);for(let o=g.length-1;o>=0;o--)f=g[o],Nt.info("Subgraph - ",f),r.db.addVertex(f.id,f.title,"group",void 0,f.classes,f.dir);const y=r.db.getVertices(),m=r.db.getEdges();Nt.info("Edges",m);let b=0;for(b=g.length-1;b>=0;b--){f=g[b],(0,o.td_)("cluster").append("text");for(let t=0;t<f.nodes.length;t++)Nt.info("Setting up subgraphs",f.nodes[t],f.id),p.setParent(f.nodes[t],f.id)}vc(y,p,e,u,d,r),kc(m,p);const _=u.select(`[id="${e}"]`),x=u.select("#"+e+" g");if(qs(x,p,["point","circle","cross"],"flowchart",e),Gn.insertTitle(_,"flowchartTitleText",s.titleTopMargin,r.db.getDiagramTitle()),pr(p,_,s.diagramPadding,s.useMaxWidth),r.db.indexNodes("subGraph"+b),!s.htmlLabels){const t=d.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of t){const t=e.getBBox(),n=d.createElementNS("http://www.w3.org/2000/svg","rect");n.setAttribute("rx",0),n.setAttribute("ry",0),n.setAttribute("width",t.width),n.setAttribute("height",t.height),e.insertBefore(n,e.firstChild)}}Object.keys(y).forEach((function(t){const n=y[t];if(n.link){const r=(0,o.Ys)("#"+e+' [id="'+t+'"]');if(r){const t=d.createElementNS("http://www.w3.org/2000/svg","a");t.setAttributeNS("http://www.w3.org/2000/svg","class",n.classes.join(" ")),t.setAttributeNS("http://www.w3.org/2000/svg","href",n.link),t.setAttributeNS("http://www.w3.org/2000/svg","rel","noopener"),"sandbox"===a?t.setAttributeNS("http://www.w3.org/2000/svg","target","_top"):n.linkTarget&&t.setAttributeNS("http://www.w3.org/2000/svg","target",n.linkTarget);const e=r.insert((function(){return t}),":first-child"),i=r.select(".label-container");i&&e.append((function(){return i.node()}));const s=r.select(".label");s&&e.append((function(){return s.node()}))}}}))}};var Ec=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,21],d=[1,22],p=[1,23],f=[1,24],g=[1,25],y=[1,26],m=[1,27],b=[1,29],_=[1,31],x=[1,34],v=[5,7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],k={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,gantt:5,document:6,EOF:7,line:8,SPACE:9,statement:10,NL:11,dateFormat:12,inclusiveEndDates:13,topAxis:14,axisFormat:15,tickInterval:16,excludes:17,includes:18,todayMarker:19,title:20,acc_title:21,acc_title_value:22,acc_descr:23,acc_descr_value:24,acc_descr_multiline_value:25,section:26,clickStatement:27,taskTxt:28,taskData:29,openDirective:30,typeDirective:31,closeDirective:32,":":33,argDirective:34,click:35,callbackname:36,callbackargs:37,href:38,clickStatementDebug:39,open_directive:40,type_directive:41,arg_directive:42,close_directive:43,$accept:0,$end:1},terminals_:{2:"error",5:"gantt",7:"EOF",9:"SPACE",11:"NL",12:"dateFormat",13:"inclusiveEndDates",14:"topAxis",15:"axisFormat",16:"tickInterval",17:"excludes",18:"includes",19:"todayMarker",20:"title",21:"acc_title",22:"acc_title_value",23:"acc_descr",24:"acc_descr_value",25:"acc_descr_multiline_value",26:"section",28:"taskTxt",29:"taskData",33:":",35:"click",36:"callbackname",37:"callbackargs",38:"href",40:"open_directive",41:"type_directive",42:"arg_directive",43:"close_directive"},productions_:[0,[3,2],[3,3],[6,0],[6,2],[8,2],[8,1],[8,1],[8,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,2],[10,2],[10,1],[10,1],[10,1],[10,2],[10,1],[4,4],[4,6],[27,2],[27,3],[27,3],[27,4],[27,3],[27,4],[27,2],[39,2],[39,3],[39,3],[39,4],[39,3],[39,4],[39,2],[30,1],[31,1],[34,1],[32,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 2:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 9:r.setDateFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 10:r.enableInclusiveEndDates(),this.$=a[o].substr(18);break;case 11:r.TopAxis(),this.$=a[o].substr(8);break;case 12:r.setAxisFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 13:r.setTickInterval(a[o].substr(13)),this.$=a[o].substr(13);break;case 14:r.setExcludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 15:r.setIncludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 16:r.setTodayMarker(a[o].substr(12)),this.$=a[o].substr(12);break;case 17:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 18:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 19:case 20:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 23:r.addTask(a[o-1],a[o]),this.$="task";break;case 27:this.$=a[o-1],r.setClickEvent(a[o-1],a[o],null);break;case 28:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 29:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],null),r.setLink(a[o-2],a[o]);break;case 30:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setLink(a[o-3],a[o]);break;case 31:this.$=a[o-2],r.setClickEvent(a[o-2],a[o],null),r.setLink(a[o-2],a[o-1]);break;case 32:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-1],a[o]),r.setLink(a[o-3],a[o-2]);break;case 33:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 34:case 40:this.$=a[o-1]+" "+a[o];break;case 35:case 36:case 38:this.$=a[o-2]+" "+a[o-1]+" "+a[o];break;case 37:case 39:this.$=a[o-3]+" "+a[o-2]+" "+a[o-1]+" "+a[o];break;case 41:r.parseDirective("%%{","open_directive");break;case 42:r.parseDirective(a[o],"type_directive");break;case 43:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 44:r.parseDirective("}%%","close_directive","gantt")}},table:[{3:1,4:2,5:n,30:4,40:r},{1:[3]},{3:6,4:2,5:n,30:4,40:r},e(i,[2,3],{6:7}),{31:8,41:[1,9]},{41:[2,41]},{1:[2,1]},{4:30,7:[1,10],8:11,9:[1,12],10:13,11:[1,14],12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},{32:32,33:[1,33],43:x},e([33,43],[2,42]),e(i,[2,8],{1:[2,2]}),e(i,[2,4]),{4:30,10:35,12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,9]),e(i,[2,10]),e(i,[2,11]),e(i,[2,12]),e(i,[2,13]),e(i,[2,14]),e(i,[2,15]),e(i,[2,16]),e(i,[2,17]),{22:[1,36]},{24:[1,37]},e(i,[2,20]),e(i,[2,21]),e(i,[2,22]),{29:[1,38]},e(i,[2,24]),{36:[1,39],38:[1,40]},{11:[1,41]},{34:42,42:[1,43]},{11:[2,44]},e(i,[2,5]),e(i,[2,18]),e(i,[2,19]),e(i,[2,23]),e(i,[2,27],{37:[1,44],38:[1,45]}),e(i,[2,33],{36:[1,46]}),e(v,[2,25]),{32:47,43:x},{43:[2,43]},e(i,[2,28],{38:[1,48]}),e(i,[2,29]),e(i,[2,31],{37:[1,49]}),{11:[1,50]},e(i,[2,30]),e(i,[2,32]),e(v,[2,26])],defaultActions:{5:[2,41],6:[2,1],34:[2,44],43:[2,43]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),40;case 1:return this.begin("type_directive"),41;case 2:return this.popState(),this.begin("arg_directive"),33;case 3:return this.popState(),this.popState(),43;case 4:return 42;case 5:return this.begin("acc_title"),21;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),23;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 20:case 23:case 26:case 29:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:case 13:case 14:case 16:case 17:case 18:break;case 15:return 11;case 19:this.begin("href");break;case 21:return 38;case 22:this.begin("callbackname");break;case 24:this.popState(),this.begin("callbackargs");break;case 25:return 36;case 27:return 37;case 28:this.begin("click");break;case 30:return 35;case 31:return 5;case 32:return 12;case 33:return 13;case 34:return 14;case 35:return 15;case 36:return 16;case 37:return 18;case 38:return 17;case 39:return 19;case 40:return"date";case 41:return 20;case 42:return"accDescription";case 43:return 26;case 44:return 28;case 45:return 29;case 46:return 33;case 47:return 7;case 48:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%(?!\{)*[^\n]*)/i,/^(?:[^\}]%%*[^\n]*)/i,/^(?:%%*[^\n]*[\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:href[\s]+["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:call[\s]+)/i,/^(?:\([\s]*\))/i,/^(?:\()/i,/^(?:[^(]*)/i,/^(?:\))/i,/^(?:[^)]*)/i,/^(?:click[\s]+)/i,/^(?:[\s\n])/i,/^(?:[^\s\n]*)/i,/^(?:gantt\b)/i,/^(?:dateFormat\s[^#\n;]+)/i,/^(?:inclusiveEndDates\b)/i,/^(?:topAxis\b)/i,/^(?:axisFormat\s[^#\n;]+)/i,/^(?:tickInterval\s[^#\n;]+)/i,/^(?:includes\s[^#\n;]+)/i,/^(?:excludes\s[^#\n;]+)/i,/^(?:todayMarker\s[^\n;]+)/i,/^(?:\d\d\d\d-\d\d-\d\d\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accDescription\s[^#\n;]+)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[26,27],inclusive:!1},callbackname:{rules:[23,24,25],inclusive:!1},href:{rules:[20,21],inclusive:!1},click:{rules:[29,30],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,22,28,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Ec.parser=Ec;const Cc=Ec,Tc=t=>null!==t.match(/^\s*gantt/);a().extend(Et()),a().extend(Tt()),a().extend(At());let Sc,Ac="",Lc="",Bc="",Nc=[],Dc=[],Oc={},Mc=[],Ic=[],Fc="";const $c=["active","done","crit","milestone"];let Rc=[],Zc=!1,Pc=!1,jc=0;const Yc=function(t,e,n,r){return!r.includes(t.format(e.trim()))&&(!!(t.isoWeekday()>=6&&n.includes("weekends"))||(!!n.includes(t.format("dddd").toLowerCase())||n.includes(t.format(e.trim()))))},zc=function(t,e,n,r){if(!n.length||t.manualEndTime)return;let i,s;i=t.startTime instanceof Date?a()(t.startTime):a()(t.startTime,e,!0),i=i.add(1,"d"),s=t.endTime instanceof Date?a()(t.endTime):a()(t.endTime,e,!0);const[o,c]=Uc(i,s,e,n,r);t.endTime=o.toDate(),t.renderEndTime=c},Uc=function(t,e,n,r,i){let a=!1,s=null;for(;t<=e;)a||(s=e.toDate()),a=Yc(t,n,r,i),a&&(e=e.add(1,"d")),t=t.add(1,"d");return[e,s]},Wc=function(t,e,n){n=n.trim();const r=/^after\s+([\d\w- ]+)/.exec(n.trim());if(null!==r){let t=null;if(r[1].split(" ").forEach((function(e){let n=tl(e);void 0!==n&&(t?n.endTime>t.endTime&&(t=n):t=n)})),t)return t.endTime;{const t=new Date;return t.setHours(0,0,0,0),t}}let i=a()(n,e.trim(),!0);if(i.isValid())return i.toDate();{Nt.debug("Invalid date:"+n),Nt.debug("With date format:"+e.trim());const t=new Date(n);if(void 0===t||isNaN(t.getTime()))throw new Error("Invalid date:"+n);return t}},qc=function(t){const e=/^(\d+(?:\.\d+)?)([Mdhmswy]|ms)$/.exec(t.trim());return null!==e?[Number.parseFloat(e[1]),e[2]]:[NaN,"ms"]},Hc=function(t,e,n,r=!1){n=n.trim();let i=a()(n,e.trim(),!0);if(i.isValid())return r&&(i=i.add(1,"d")),i.toDate();let s=a()(t);const[o,c]=qc(n);if(!Number.isNaN(o)){const t=s.add(o,c);t.isValid()&&(s=t)}return s.toDate()};let Vc=0;const Gc=function(t){return void 0===t?(Vc+=1,"task"+Vc):t};let Xc,Kc,Qc=[];const Jc={},tl=function(t){const e=Jc[t];return Qc[e]},el=function(){const t=function(t){const e=Qc[t];let n="";switch(Qc[t].raw.startTime.type){case"prevTaskEnd":{const t=tl(e.prevTaskId);e.startTime=t.endTime;break}case"getStartDate":n=Wc(0,Ac,Qc[t].raw.startTime.startData),n&&(Qc[t].startTime=n)}return Qc[t].startTime&&(Qc[t].endTime=Hc(Qc[t].startTime,Ac,Qc[t].raw.endTime.data,Zc),Qc[t].endTime&&(Qc[t].processed=!0,Qc[t].manualEndTime=a()(Qc[t].raw.endTime.data,"YYYY-MM-DD",!0).isValid(),zc(Qc[t],Ac,Dc,Nc))),Qc[t].processed};let e=!0;for(const[n,r]of Qc.entries())t(n),e=e&&r.processed;return e},nl=function(t,e){t.split(",").forEach((function(t){let n=tl(t);void 0!==n&&n.classes.push(e)}))},rl=function(t,e){Rc.push((function(){const n=document.querySelector(`[id="${t}"]`);null!==n&&n.addEventListener("click",(function(){e()}))}),(function(){const n=document.querySelector(`[id="${t}-text"]`);null!==n&&n.addEventListener("click",(function(){e()}))}))},il={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gantt,clear:function(){Mc=[],Ic=[],Fc="",Rc=[],Vc=0,Xc=void 0,Kc=void 0,Qc=[],Ac="",Lc="",Sc=void 0,Bc="",Nc=[],Dc=[],Zc=!1,Pc=!1,jc=0,Oc={},Dr()},setDateFormat:function(t){Ac=t},getDateFormat:function(){return Ac},enableInclusiveEndDates:function(){Zc=!0},endDatesAreInclusive:function(){return Zc},enableTopAxis:function(){Pc=!0},topAxisEnabled:function(){return Pc},setAxisFormat:function(t){Lc=t},getAxisFormat:function(){return Lc},setTickInterval:function(t){Sc=t},getTickInterval:function(){return Sc},setTodayMarker:function(t){Bc=t},getTodayMarker:function(){return Bc},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){Fc=t,Mc.push(t)},getSections:function(){return Mc},getTasks:function(){let t=el();let e=0;for(;!t&&e<10;)t=el(),e++;return Ic=Qc,Ic},addTask:function(t,e){const n={section:Fc,type:Fc,processed:!1,manualEndTime:!1,renderEndTime:null,raw:{data:e},task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();switch(r.length){case 1:i.id=Gc(),i.startTime={type:"prevTaskEnd",id:t},i.endTime={data:r[0]};break;case 2:i.id=Gc(),i.startTime={type:"getStartDate",startData:r[0]},i.endTime={data:r[1]};break;case 3:i.id=Gc(r[0]),i.startTime={type:"getStartDate",startData:r[1]},i.endTime={data:r[2]}}return i}(Kc,e);n.raw.startTime=r.startTime,n.raw.endTime=r.endTime,n.id=r.id,n.prevTaskId=Kc,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,n.order=jc,jc++;const i=Qc.push(n);Kc=n.id,Jc[n.id]=i-1},findTaskById:tl,addTaskOrg:function(t,e){const n={section:Fc,type:Fc,description:t,task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();let s="";switch(r.length){case 1:i.id=Gc(),i.startTime=t.endTime,s=r[0];break;case 2:i.id=Gc(),i.startTime=Wc(0,Ac,r[0]),s=r[1];break;case 3:i.id=Gc(r[0]),i.startTime=Wc(0,Ac,r[1]),s=r[2]}return s&&(i.endTime=Hc(i.startTime,Ac,s,Zc),i.manualEndTime=a()(s,"YYYY-MM-DD",!0).isValid(),zc(i,Ac,Dc,Nc)),i}(Xc,e);n.startTime=r.startTime,n.endTime=r.endTime,n.id=r.id,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,Xc=n,Ic.push(n)},setIncludes:function(t){Nc=t.toLowerCase().split(/[\s,]+/)},getIncludes:function(){return Nc},setExcludes:function(t){Dc=t.toLowerCase().split(/[\s,]+/)},getExcludes:function(){return Dc},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){if("loose"!==ar().securityLevel)return;if(void 0===e)return;let r=[];if("string"==typeof n){r=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<r.length;t++){let e=r[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),r[t]=e}}0===r.length&&r.push(t),void 0!==tl(t)&&rl(t,(()=>{Gn.runFunc(e,...r)}))}(t,e,n)})),nl(t,"clickable")},setLink:function(t,e){let n=e;"loose"!==ar().securityLevel&&(n=(0,s.N)(e)),t.split(",").forEach((function(t){void 0!==tl(t)&&(rl(t,(()=>{window.open(n,"_self")})),Oc[t]=n)})),nl(t,"clickable")},getLinks:function(){return Oc},bindFunctions:function(t){Rc.forEach((function(e){e(t)}))},parseDuration:qc,isInvalidDate:Yc};function al(t,e,n){let r=!0;for(;r;)r=!1,n.forEach((function(n){const i=new RegExp("^\\s*"+n+"\\s*$");t[0].match(i)&&(e[n]=!0,t.shift(1),r=!0)}))}let sl;const ol={setConf:function(){Nt.debug("Something is calling, setConf, remove the call")},draw:function(t,e,n,r){const i=ar().gantt,s=ar().securityLevel;let c;"sandbox"===s&&(c=(0,o.Ys)("#i"+e));const l="sandbox"===s?(0,o.Ys)(c.nodes()[0].contentDocument.body):(0,o.Ys)("body"),h="sandbox"===s?c.nodes()[0].contentDocument:document,u=h.getElementById(e);sl=u.parentElement.offsetWidth,void 0===sl&&(sl=1200),void 0!==i.useWidth&&(sl=i.useWidth);const d=r.db.getTasks(),p=d.length*(i.barHeight+i.barGap)+2*i.topPadding;u.setAttribute("viewBox","0 0 "+sl+" "+p);const f=l.select(`[id="${e}"]`),g=(0,o.Xf)().domain([(0,o.VV$)(d,(function(t){return t.startTime})),(0,o.Fp7)(d,(function(t){return t.endTime}))]).rangeRound([0,sl-i.leftPadding-i.rightPadding]);let y=[];for(const a of d)y.push(a.type);const m=y;function b(t,e){return function(t){let e=t.length;const n={};for(;e;)n[t[--e]]=(n[t[e]]||0)+1;return n}(e)[t]||0}y=function(t){const e={},n=[];for(let r=0,i=t.length;r<i;++r)Object.prototype.hasOwnProperty.call(e,t[r])||(e[t[r]]=!0,n.push(t[r]));return n}(y),d.sort((function(t,e){const n=t.startTime,r=e.startTime;let i=0;return n>r?i=1:n<r&&(i=-1),i})),function(t,n,s){const c=i.barHeight,l=c+i.barGap,u=i.topPadding,d=i.leftPadding;(0,o.BYU)().domain([0,y.length]).range(["#00B9FA","#F95002"]).interpolate(o.JHv);(function(t,e,n,s,o,c,l,h){const u=c.reduce(((t,{startTime:e})=>t?Math.min(t,e):e),0),d=c.reduce(((t,{endTime:e})=>t?Math.max(t,e):e),0),p=r.db.getDateFormat();if(!u||!d)return;const y=[];let m=null,b=a()(u);for(;b.valueOf()<=d;)r.db.isInvalidDate(b,p,l,h)?m?m.end=b:m={start:b,end:b}:m&&(y.push(m),m=null),b=b.add(1,"d");f.append("g").selectAll("rect").data(y).enter().append("rect").attr("id",(function(t){return"exclude-"+t.start.format("YYYY-MM-DD")})).attr("x",(function(t){return g(t.start)+n})).attr("y",i.gridLineStartPadding).attr("width",(function(t){const e=t.end.add(1,"day");return g(e)-g(t.start)})).attr("height",o-e-i.gridLineStartPadding).attr("transform-origin",(function(e,r){return(g(e.start)+n+.5*(g(e.end)-g(e.start))).toString()+"px "+(r*t+.5*o).toString()+"px"})).attr("class","exclude-range")})(l,u,d,0,s,t,r.db.getExcludes(),r.db.getIncludes()),function(t,e,n,a){let s=(0,o.LLu)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));const c=/^([1-9]\d*)(minute|hour|day|week|month)$/.exec(r.db.getTickInterval()||i.tickInterval);if(null!==c){const t=c[1];switch(c[2]){case"minute":s.ticks(o.Z_i.every(t));break;case"hour":s.ticks(o.WQD.every(t));break;case"day":s.ticks(o.rr1.every(t));break;case"week":s.ticks(o.NGh.every(t));break;case"month":s.ticks(o.F0B.every(t))}}if(f.append("g").attr("class","grid").attr("transform","translate("+t+", "+(a-50)+")").call(s).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10).attr("dy","1em"),r.db.topAxisEnabled()||i.topAxis){let n=(0,o.F5q)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));if(null!==c){const t=c[1];switch(c[2]){case"minute":n.ticks(o.Z_i.every(t));break;case"hour":n.ticks(o.WQD.every(t));break;case"day":n.ticks(o.rr1.every(t));break;case"week":n.ticks(o.NGh.every(t));break;case"month":n.ticks(o.F0B.every(t))}}f.append("g").attr("class","grid").attr("transform","translate("+t+", "+e+")").call(n).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10)}}(d,u,0,s),function(t,n,a,s,c,l,h){f.append("g").selectAll("rect").data(t).enter().append("rect").attr("x",0).attr("y",(function(t,e){return t.order*n+a-2})).attr("width",(function(){return h-i.rightPadding/2})).attr("height",n).attr("class",(function(t){for(const[e,n]of y.entries())if(t.type===n)return"section section"+e%i.numberSectionStyles;return"section section0"}));const u=f.append("g").selectAll("rect").data(t).enter(),d=r.db.getLinks();u.append("rect").attr("id",(function(t){return t.id})).attr("rx",3).attr("ry",3).attr("x",(function(t){return t.milestone?g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))-.5*c:g(t.startTime)+s})).attr("y",(function(t,e){return t.order*n+a})).attr("width",(function(t){return t.milestone?c:g(t.renderEndTime||t.endTime)-g(t.startTime)})).attr("height",c).attr("transform-origin",(function(t,e){return e=t.order,(g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))).toString()+"px "+(e*n+a+.5*c).toString()+"px"})).attr("class",(function(t){const e="task";let n="";t.classes.length>0&&(n=t.classes.join(" "));let r=0;for(const[s,o]of y.entries())t.type===o&&(r=s%i.numberSectionStyles);let a="";return t.active?t.crit?a+=" activeCrit":a=" active":t.done?a=t.crit?" doneCrit":" done":t.crit&&(a+=" crit"),0===a.length&&(a=" task"),t.milestone&&(a=" milestone "+a),a+=r,a+=" "+n,e+a})),u.append("text").attr("id",(function(t){return t.id+"-text"})).text((function(t){return t.task})).attr("font-size",i.fontSize).attr("x",(function(t){let e=g(t.startTime),n=g(t.renderEndTime||t.endTime);t.milestone&&(e+=.5*(g(t.endTime)-g(t.startTime))-.5*c),t.milestone&&(n=e+c);const r=this.getBBox().width;return r>n-e?n+r+1.5*i.leftPadding>h?e+s-5:n+s+5:(n-e)/2+e+s})).attr("y",(function(t,e){return t.order*n+i.barHeight/2+(i.fontSize/2-2)+a})).attr("text-height",c).attr("class",(function(t){const e=g(t.startTime);let n=g(t.endTime);t.milestone&&(n=e+c);const r=this.getBBox().width;let a="";t.classes.length>0&&(a=t.classes.join(" "));let s=0;for(const[c,l]of y.entries())t.type===l&&(s=c%i.numberSectionStyles);let o="";return t.active&&(o=t.crit?"activeCritText"+s:"activeText"+s),t.done?o=t.crit?o+" doneCritText"+s:o+" doneText"+s:t.crit&&(o=o+" critText"+s),t.milestone&&(o+=" milestoneText"),r>n-e?n+r+1.5*i.leftPadding>h?a+" taskTextOutsideLeft taskTextOutside"+s+" "+o:a+" taskTextOutsideRight taskTextOutside"+s+" "+o+" width-"+r:a+" taskText taskText"+s+" "+o+" width-"+r}));if("sandbox"===ar().securityLevel){let t;t=(0,o.Ys)("#i"+e);const n=t.nodes()[0].contentDocument;u.filter((function(t){return void 0!==d[t.id]})).each((function(t){var e=n.querySelector("#"+t.id),r=n.querySelector("#"+t.id+"-text");const i=e.parentNode;var a=n.createElement("a");a.setAttribute("xlink:href",d[t.id]),a.setAttribute("target","_top"),i.appendChild(a),a.appendChild(e),a.appendChild(r)}))}}(t,l,u,d,c,0,n),function(t,e){const n=[];let r=0;for(const[i,a]of y.entries())n[i]=[a,b(a,m)];f.append("g").selectAll("text").data(n).enter().append((function(t){const e=t[0].split(Yt.lineBreakRegex),n=-(e.length-1)/2,r=h.createElementNS("http://www.w3.org/2000/svg","text");r.setAttribute("dy",n+"em");for(const[i,a]of e.entries()){const t=h.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttribute("alignment-baseline","central"),t.setAttribute("x","10"),i>0&&t.setAttribute("dy","1em"),t.textContent=a,r.appendChild(t)}return r})).attr("x",10).attr("y",(function(i,a){if(!(a>0))return i[1]*t/2+e;for(let s=0;s<a;s++)return r+=n[a-1][1],i[1]*t/2+r*t+e})).attr("font-size",i.sectionFontSize).attr("font-size",i.sectionFontSize).attr("class",(function(t){for(const[e,n]of y.entries())if(t[0]===n)return"sectionTitle sectionTitle"+e%i.numberSectionStyles;return"sectionTitle"}))}(l,u),function(t,e,n,a){const s=r.db.getTodayMarker();if("off"===s)return;const o=f.append("g").attr("class","today"),c=new Date,l=o.append("line");l.attr("x1",g(c)+t).attr("x2",g(c)+t).attr("y1",i.titleTopMargin).attr("y2",a-i.titleTopMargin).attr("class","today"),""!==s&&l.attr("style",s.replace(/,/g,";"))}(d,0,0,s)}(d,sl,p),dr(f,p,sl,i.useMaxWidth),f.append("text").text(r.db.getDiagramTitle()).attr("x",sl/2).attr("y",i.titleTopMargin).attr("class","titleText")}};var cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[6,9,10],r={trace:function(){},yy:{},symbols_:{error:2,start:3,info:4,document:5,EOF:6,line:7,statement:8,NL:9,showInfo:10,$accept:0,$end:1},terminals_:{2:"error",4:"info",6:"EOF",9:"NL",10:"showInfo"},productions_:[0,[3,3],[5,0],[5,2],[7,1],[7,1],[8,1]],performAction:function(t,e,n,r,i,a,s){switch(a.length,i){case 1:return r;case 4:break;case 6:r.setInfo(!0)}},table:[{3:1,4:[1,2]},{1:[3]},e(n,[2,2],{5:3}),{6:[1,4],7:5,8:6,9:[1,7],10:[1,8]},{1:[2,1]},e(n,[2,3]),e(n,[2,4]),e(n,[2,5]),e(n,[2,6])],defaultActions:{4:[2,1]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},i=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 4;case 1:return 9;case 2:return"space";case 3:return 10;case 4:return 6;case 5:return"TXT"}},rules:[/^(?:info\b)/i,/^(?:[\s\n\r]+)/i,/^(?:[\s]+)/i,/^(?:showInfo\b)/i,/^(?:$)/i,/^(?:.)/i],conditions:{INITIAL:{rules:[0,1,2,3,4,5],inclusive:!0}}},t);function a(){this.yy={}}return r.lexer=i,a.prototype=r,r.Parser=a,new a}();cl.parser=cl;const ll=cl;var hl="",ul=!1;const dl={setMessage:t=>{Nt.debug("Setting message to: "+t),hl=t},getMessage:()=>hl,setInfo:t=>{ul=t},getInfo:()=>ul,clear:Dr},pl={draw:(t,e,n)=>{try{Nt.debug("Rendering info diagram\n"+t);const r=ar().securityLevel;let i;"sandbox"===r&&(i=(0,o.Ys)("#i"+e));const a=("sandbox"===r?(0,o.Ys)(i.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select("#"+e);a.append("g").append("text").attr("x",100).attr("y",40).attr("class","version").attr("font-size","32px").style("text-anchor","middle").text("v "+n),a.attr("height",100),a.attr("width",400)}catch(r){Nt.error("Error while rendering info diagram"),Nt.error(r.message)}}},fl=t=>null!==t.match(/^\s*info/);var gl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,5],i=[1,6],a=[1,7],s=[1,9],o=[1,11,13,15,17,19,20,26,27,28,29],c=[2,5],l=[1,6,11,13,15,17,19,20,26,27,28,29],h=[26,27,28],u=[2,8],d=[1,18],p=[1,19],f=[1,20],g=[1,21],y=[1,22],m=[1,23],b=[1,28],_=[6,26,27,28,29],x={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,PIE:6,document:7,showData:8,line:9,statement:10,txt:11,value:12,title:13,title_value:14,acc_title:15,acc_title_value:16,acc_descr:17,acc_descr_value:18,acc_descr_multiline_value:19,section:20,openDirective:21,typeDirective:22,closeDirective:23,":":24,argDirective:25,NEWLINE:26,";":27,EOF:28,open_directive:29,type_directive:30,arg_directive:31,close_directive:32,$accept:0,$end:1},terminals_:{2:"error",6:"PIE",8:"showData",11:"txt",12:"value",13:"title",14:"title_value",15:"acc_title",16:"acc_title_value",17:"acc_descr",18:"acc_descr_value",19:"acc_descr_multiline_value",20:"section",24:":",26:"NEWLINE",27:";",28:"EOF",29:"open_directive",30:"type_directive",31:"arg_directive",32:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,3],[7,0],[7,2],[9,2],[10,0],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,1],[5,3],[5,5],[4,1],[4,1],[4,1],[21,1],[22,1],[25,1],[23,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setShowData(!0);break;case 7:this.$=a[o-1];break;case 9:r.addSection(a[o-1],r.cleanupValue(a[o]));break;case 10:this.$=a[o].trim(),r.setDiagramTitle(this.$);break;case 11:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 12:case 13:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 14:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 21:r.parseDirective("%%{","open_directive");break;case 22:r.parseDirective(a[o],"type_directive");break;case 23:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 24:r.parseDirective("}%%","close_directive","pie")}},table:[{3:1,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{1:[3]},{3:10,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{3:11,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},e(o,c,{7:12,8:[1,13]}),e(l,[2,18]),e(l,[2,19]),e(l,[2,20]),{22:14,30:[1,15]},{30:[2,21]},{1:[2,1]},{1:[2,2]},e(h,u,{21:8,9:16,10:17,5:24,1:[2,3],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(o,c,{7:25}),{23:26,24:[1,27],32:b},e([24,32],[2,22]),e(o,[2,6]),{4:29,26:r,27:i,28:a},{12:[1,30]},{14:[1,31]},{16:[1,32]},{18:[1,33]},e(h,[2,13]),e(h,[2,14]),e(h,[2,15]),e(h,u,{21:8,9:16,10:17,5:24,1:[2,4],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(_,[2,16]),{25:34,31:[1,35]},e(_,[2,24]),e(o,[2,7]),e(h,[2,9]),e(h,[2,10]),e(h,[2,11]),e(h,[2,12]),{23:36,32:b},{32:[2,23]},e(_,[2,17])],defaultActions:{9:[2,21],10:[2,1],11:[2,2],35:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},v=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),29;case 1:return this.begin("type_directive"),30;case 2:return this.popState(),this.begin("arg_directive"),24;case 3:return this.popState(),this.popState(),32;case 4:return 31;case 5:case 6:case 8:case 9:break;case 7:return 26;case 10:return this.begin("title"),13;case 11:return this.popState(),"title_value";case 12:return this.begin("acc_title"),15;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),17;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:case 20:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:this.begin("string");break;case 21:return"txt";case 22:return 6;case 23:return 8;case 24:return"value";case 25:return 28}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n\r]+)/i,/^(?:%%[^\n]*)/i,/^(?:[\s]+)/i,/^(?:title\b)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:pie\b)/i,/^(?:showData\b)/i,/^(?::[\s]*[\d]+(?:\.[\d]+)?)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},title:{rules:[11],inclusive:!1},string:{rules:[20,21],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,12,14,16,19,22,23,24,25],inclusive:!0}}},t);function k(){this.yy={}}return x.lexer=v,k.prototype=x,x.Parser=k,new k}();gl.parser=gl;const yl=gl,ml=t=>null!==t.match(/^\s*pie/)||null!==t.match(/^\s*bar/);let bl={},_l=!1;const xl={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().pie,addSection:function(t,e){t=Yt.sanitizeText(t,ar()),void 0===bl[t]&&(bl[t]=e,Nt.debug("Added new section :",t))},getSections:()=>bl,cleanupValue:function(t){return":"===t.substring(0,1)?(t=t.substring(1).trim(),Number(t.trim())):Number(t.trim())},clear:function(){bl={},_l=!1,Dr()},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setShowData:function(t){_l=t},getShowData:function(){return _l},getAccDescription:Fr,setAccDescription:Ir};let vl,kl=ar();const wl=450,El={draw:(t,e,n,r)=>{try{kl=ar(),Nt.debug("Rendering info diagram\n"+t);const n=ar().securityLevel;let y;"sandbox"===n&&(y=(0,o.Ys)("#i"+e));const m="sandbox"===n?(0,o.Ys)(y.nodes()[0].contentDocument.body):(0,o.Ys)("body"),b="sandbox"===n?y.nodes()[0].contentDocument:document;r.db.clear(),r.parser.parse(t),Nt.debug("Parsed info diagram");const _=b.getElementById(e);vl=_.parentElement.offsetWidth,void 0===vl&&(vl=1200),void 0!==kl.useWidth&&(vl=kl.useWidth),void 0!==kl.pie.useWidth&&(vl=kl.pie.useWidth);const x=m.select("#"+e);dr(x,wl,vl,kl.pie.useMaxWidth),_.setAttribute("viewBox","0 0 "+vl+" "+wl);var i=18,a=Math.min(vl,wl)/2-40,s=x.append("g").attr("transform","translate("+vl/2+",225)"),c=r.db.getSections(),l=0;Object.keys(c).forEach((function(t){l+=c[t]}));const v=kl.themeVariables;var h=[v.pie1,v.pie2,v.pie3,v.pie4,v.pie5,v.pie6,v.pie7,v.pie8,v.pie9,v.pie10,v.pie11,v.pie12],u=(0,o.PKp)().range(h),d=Object.entries(c).map((function(t,e){return{order:e,name:t[0],value:t[1]}})),p=(0,o.ve8)().value((function(t){return t.value})).sort((function(t,e){return t.order-e.order}))(d),f=(0,o.Nb1)().innerRadius(0).outerRadius(a);s.selectAll("mySlices").data(p).enter().append("path").attr("d",f).attr("fill",(function(t){return u(t.data.name)})).attr("class","pieCircle"),s.selectAll("mySlices").data(p).enter().append("text").text((function(t){return(t.data.value/l*100).toFixed(0)+"%"})).attr("transform",(function(t){return"translate("+f.centroid(t)+")"})).style("text-anchor","middle").attr("class","slice"),s.append("text").text(r.db.getDiagramTitle()).attr("x",0).attr("y",-200).attr("class","pieTitleText");var g=s.selectAll(".legend").data(u.domain()).enter().append("g").attr("class","legend").attr("transform",(function(t,e){return"translate(216,"+(22*e-22*u.domain().length/2)+")"}));g.append("rect").attr("width",i).attr("height",i).style("fill",u).style("stroke",u),g.data(p).append("text").attr("x",22).attr("y",14).text((function(t){return r.db.getShowData()||kl.showData||kl.pie.showData?t.data.name+" ["+t.data.value+"]":t.data.name}))}catch(y){Nt.error("Error while rendering info diagram"),Nt.error(y)}}};var Cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[1,6],a=[1,7],s=[1,8],o=[5,6,8,14,16,18,19,40,41,42,43,44,45,53,71,72],c=[1,22],l=[2,13],h=[1,26],u=[1,27],d=[1,28],p=[1,29],f=[1,30],g=[1,31],y=[1,24],m=[1,32],b=[1,33],_=[1,36],x=[71,72],v=[5,8,14,16,18,19,40,41,42,43,44,45,53,60,62,71,72],k=[1,56],w=[1,57],E=[1,58],C=[1,59],T=[1,60],S=[1,61],A=[1,62],L=[62,63],B=[1,74],N=[1,70],D=[1,71],O=[1,72],M=[1,73],I=[1,75],F=[1,79],$=[1,80],R=[1,77],Z=[1,78],P=[5,8,14,16,18,19,40,41,42,43,44,45,53,71,72],j={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,NEWLINE:5,RD:6,diagram:7,EOF:8,openDirective:9,typeDirective:10,closeDirective:11,":":12,argDirective:13,acc_title:14,acc_title_value:15,acc_descr:16,acc_descr_value:17,acc_descr_multiline_value:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,requirementDef:23,elementDef:24,relationshipDef:25,requirementType:26,requirementName:27,STRUCT_START:28,requirementBody:29,ID:30,COLONSEP:31,id:32,TEXT:33,text:34,RISK:35,riskLevel:36,VERIFYMTHD:37,verifyType:38,STRUCT_STOP:39,REQUIREMENT:40,FUNCTIONAL_REQUIREMENT:41,INTERFACE_REQUIREMENT:42,PERFORMANCE_REQUIREMENT:43,PHYSICAL_REQUIREMENT:44,DESIGN_CONSTRAINT:45,LOW_RISK:46,MED_RISK:47,HIGH_RISK:48,VERIFY_ANALYSIS:49,VERIFY_DEMONSTRATION:50,VERIFY_INSPECTION:51,VERIFY_TEST:52,ELEMENT:53,elementName:54,elementBody:55,TYPE:56,type:57,DOCREF:58,ref:59,END_ARROW_L:60,relationship:61,LINE:62,END_ARROW_R:63,CONTAINS:64,COPIES:65,DERIVES:66,SATISFIES:67,VERIFIES:68,REFINES:69,TRACES:70,unqString:71,qString:72,$accept:0,$end:1},terminals_:{2:"error",5:"NEWLINE",6:"RD",8:"EOF",12:":",14:"acc_title",15:"acc_title_value",16:"acc_descr",17:"acc_descr_value",18:"acc_descr_multiline_value",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",28:"STRUCT_START",30:"ID",31:"COLONSEP",33:"TEXT",35:"RISK",37:"VERIFYMTHD",39:"STRUCT_STOP",40:"REQUIREMENT",41:"FUNCTIONAL_REQUIREMENT",42:"INTERFACE_REQUIREMENT",43:"PERFORMANCE_REQUIREMENT",44:"PHYSICAL_REQUIREMENT",45:"DESIGN_CONSTRAINT",46:"LOW_RISK",47:"MED_RISK",48:"HIGH_RISK",49:"VERIFY_ANALYSIS",50:"VERIFY_DEMONSTRATION",51:"VERIFY_INSPECTION",52:"VERIFY_TEST",53:"ELEMENT",56:"TYPE",58:"DOCREF",60:"END_ARROW_L",62:"LINE",63:"END_ARROW_R",64:"CONTAINS",65:"COPIES",66:"DERIVES",67:"SATISFIES",68:"VERIFIES",69:"REFINES",70:"TRACES",71:"unqString",72:"qString"},productions_:[0,[3,3],[3,2],[3,4],[4,3],[4,5],[4,2],[4,2],[4,1],[9,1],[10,1],[13,1],[11,1],[7,0],[7,2],[7,2],[7,2],[7,2],[7,2],[23,5],[29,5],[29,5],[29,5],[29,5],[29,2],[29,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[36,1],[36,1],[36,1],[38,1],[38,1],[38,1],[38,1],[24,5],[55,5],[55,5],[55,2],[55,1],[25,5],[25,5],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[27,1],[27,1],[32,1],[32,1],[34,1],[34,1],[54,1],[54,1],[57,1],[57,1],[59,1],[59,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 6:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 7:case 8:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 9:r.parseDirective("%%{","open_directive");break;case 10:r.parseDirective(a[o],"type_directive");break;case 11:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 12:r.parseDirective("}%%","close_directive","pie");break;case 13:this.$=[];break;case 19:r.addRequirement(a[o-3],a[o-4]);break;case 20:r.setNewReqId(a[o-2]);break;case 21:r.setNewReqText(a[o-2]);break;case 22:r.setNewReqRisk(a[o-2]);break;case 23:r.setNewReqVerifyMethod(a[o-2]);break;case 26:this.$=r.RequirementType.REQUIREMENT;break;case 27:this.$=r.RequirementType.FUNCTIONAL_REQUIREMENT;break;case 28:this.$=r.RequirementType.INTERFACE_REQUIREMENT;break;case 29:this.$=r.RequirementType.PERFORMANCE_REQUIREMENT;break;case 30:this.$=r.RequirementType.PHYSICAL_REQUIREMENT;break;case 31:this.$=r.RequirementType.DESIGN_CONSTRAINT;break;case 32:this.$=r.RiskLevel.LOW_RISK;break;case 33:this.$=r.RiskLevel.MED_RISK;break;case 34:this.$=r.RiskLevel.HIGH_RISK;break;case 35:this.$=r.VerifyType.VERIFY_ANALYSIS;break;case 36:this.$=r.VerifyType.VERIFY_DEMONSTRATION;break;case 37:this.$=r.VerifyType.VERIFY_INSPECTION;break;case 38:this.$=r.VerifyType.VERIFY_TEST;break;case 39:r.addElement(a[o-3]);break;case 40:r.setNewElementType(a[o-2]);break;case 41:r.setNewElementDocRef(a[o-2]);break;case 44:r.addRelationship(a[o-2],a[o],a[o-4]);break;case 45:r.addRelationship(a[o-2],a[o-4],a[o]);break;case 46:this.$=r.Relationships.CONTAINS;break;case 47:this.$=r.Relationships.COPIES;break;case 48:this.$=r.Relationships.DERIVES;break;case 49:this.$=r.Relationships.SATISFIES;break;case 50:this.$=r.Relationships.VERIFIES;break;case 51:this.$=r.Relationships.REFINES;break;case 52:this.$=r.Relationships.TRACES}},table:[{3:1,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[3]},{3:10,4:2,5:[1,9],6:n,9:4,14:r,16:i,18:a,19:s},{5:[1,11]},{10:12,20:[1,13]},{15:[1,14]},{17:[1,15]},e(o,[2,8]),{20:[2,9]},{3:16,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[2,2]},{4:21,5:c,7:17,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{11:34,12:[1,35],22:_},e([12,22],[2,10]),e(o,[2,6]),e(o,[2,7]),{1:[2,1]},{8:[1,37]},{4:21,5:c,7:38,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:39,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:40,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:41,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:42,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{27:43,71:[1,44],72:[1,45]},{54:46,71:[1,47],72:[1,48]},{60:[1,49],62:[1,50]},e(x,[2,26]),e(x,[2,27]),e(x,[2,28]),e(x,[2,29]),e(x,[2,30]),e(x,[2,31]),e(v,[2,55]),e(v,[2,56]),e(o,[2,4]),{13:51,21:[1,52]},e(o,[2,12]),{1:[2,3]},{8:[2,14]},{8:[2,15]},{8:[2,16]},{8:[2,17]},{8:[2,18]},{28:[1,53]},{28:[2,53]},{28:[2,54]},{28:[1,54]},{28:[2,59]},{28:[2,60]},{61:55,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{61:63,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{11:64,22:_},{22:[2,11]},{5:[1,65]},{5:[1,66]},{62:[1,67]},e(L,[2,46]),e(L,[2,47]),e(L,[2,48]),e(L,[2,49]),e(L,[2,50]),e(L,[2,51]),e(L,[2,52]),{63:[1,68]},e(o,[2,5]),{5:B,29:69,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:76,56:R,58:Z},{32:81,71:m,72:b},{32:82,71:m,72:b},e(P,[2,19]),{31:[1,83]},{31:[1,84]},{31:[1,85]},{31:[1,86]},{5:B,29:87,30:N,33:D,35:O,37:M,39:I},e(P,[2,25]),e(P,[2,39]),{31:[1,88]},{31:[1,89]},{5:F,39:$,55:90,56:R,58:Z},e(P,[2,43]),e(P,[2,44]),e(P,[2,45]),{32:91,71:m,72:b},{34:92,71:[1,93],72:[1,94]},{36:95,46:[1,96],47:[1,97],48:[1,98]},{38:99,49:[1,100],50:[1,101],51:[1,102],52:[1,103]},e(P,[2,24]),{57:104,71:[1,105],72:[1,106]},{59:107,71:[1,108],72:[1,109]},e(P,[2,42]),{5:[1,110]},{5:[1,111]},{5:[2,57]},{5:[2,58]},{5:[1,112]},{5:[2,32]},{5:[2,33]},{5:[2,34]},{5:[1,113]},{5:[2,35]},{5:[2,36]},{5:[2,37]},{5:[2,38]},{5:[1,114]},{5:[2,61]},{5:[2,62]},{5:[1,115]},{5:[2,63]},{5:[2,64]},{5:B,29:116,30:N,33:D,35:O,37:M,39:I},{5:B,29:117,30:N,33:D,35:O,37:M,39:I},{5:B,29:118,30:N,33:D,35:O,37:M,39:I},{5:B,29:119,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:120,56:R,58:Z},{5:F,39:$,55:121,56:R,58:Z},e(P,[2,20]),e(P,[2,21]),e(P,[2,22]),e(P,[2,23]),e(P,[2,40]),e(P,[2,41])],defaultActions:{8:[2,9],10:[2,2],16:[2,1],37:[2,3],38:[2,14],39:[2,15],40:[2,16],41:[2,17],42:[2,18],44:[2,53],45:[2,54],47:[2,59],48:[2,60],52:[2,11],93:[2,57],94:[2,58],96:[2,32],97:[2,33],98:[2,34],100:[2,35],101:[2,36],102:[2,37],103:[2,38],105:[2,61],106:[2,62],108:[2,63],109:[2,64]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},Y=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return this.begin("type_directive"),20;case 2:return this.popState(),this.begin("arg_directive"),12;case 3:return this.popState(),this.popState(),22;case 4:return 21;case 5:return"title";case 6:return this.begin("acc_title"),14;case 7:return this.popState(),"acc_title_value";case 8:return this.begin("acc_descr"),16;case 9:return this.popState(),"acc_descr_value";case 10:this.begin("acc_descr_multiline");break;case 11:case 53:this.popState();break;case 12:return"acc_descr_multiline_value";case 13:return 5;case 14:case 15:case 16:break;case 17:return 8;case 18:return 6;case 19:return 28;case 20:return 39;case 21:return 31;case 22:return 30;case 23:return 33;case 24:return 35;case 25:return 37;case 26:return 40;case 27:return 41;case 28:return 42;case 29:return 43;case 30:return 44;case 31:return 45;case 32:return 46;case 33:return 47;case 34:return 48;case 35:return 49;case 36:return 50;case 37:return 51;case 38:return 52;case 39:return 53;case 40:return 64;case 41:return 65;case 42:return 66;case 43:return 67;case 44:return 68;case 45:return 69;case 46:return 70;case 47:return 56;case 48:return 58;case 49:return 60;case 50:return 63;case 51:return 62;case 52:this.begin("string");break;case 54:return"qString";case 55:return e.yytext=e.yytext.trim(),71}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:$)/i,/^(?:requirementDiagram\b)/i,/^(?:\{)/i,/^(?:\})/i,/^(?::)/i,/^(?:id\b)/i,/^(?:text\b)/i,/^(?:risk\b)/i,/^(?:verifyMethod\b)/i,/^(?:requirement\b)/i,/^(?:functionalRequirement\b)/i,/^(?:interfaceRequirement\b)/i,/^(?:performanceRequirement\b)/i,/^(?:physicalRequirement\b)/i,/^(?:designConstraint\b)/i,/^(?:low\b)/i,/^(?:medium\b)/i,/^(?:high\b)/i,/^(?:analysis\b)/i,/^(?:demonstration\b)/i,/^(?:inspection\b)/i,/^(?:test\b)/i,/^(?:element\b)/i,/^(?:contains\b)/i,/^(?:copies\b)/i,/^(?:derives\b)/i,/^(?:satisfies\b)/i,/^(?:verifies\b)/i,/^(?:refines\b)/i,/^(?:traces\b)/i,/^(?:type\b)/i,/^(?:docref\b)/i,/^(?:<-)/i,/^(?:->)/i,/^(?:-)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[\w][^\r\n\{\<\>\-\=]*)/i],conditions:{acc_descr_multiline:{rules:[11,12],inclusive:!1},acc_descr:{rules:[9],inclusive:!1},acc_title:{rules:[7],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},unqString:{rules:[],inclusive:!1},token:{rules:[],inclusive:!1},string:{rules:[53,54],inclusive:!1},INITIAL:{rules:[0,5,6,8,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,55],inclusive:!0}}},t);function z(){this.yy={}}return j.lexer=Y,z.prototype=j,j.Parser=z,new z}();Cl.parser=Cl;const Tl=Cl,Sl=t=>null!==t.match(/^\s*requirement(Diagram)?/);let Al=[],Ll={},Bl={},Nl={},Dl={};const Ol={RequirementType:{REQUIREMENT:"Requirement",FUNCTIONAL_REQUIREMENT:"Functional Requirement",INTERFACE_REQUIREMENT:"Interface Requirement",PERFORMANCE_REQUIREMENT:"Performance Requirement",PHYSICAL_REQUIREMENT:"Physical Requirement",DESIGN_CONSTRAINT:"Design Constraint"},RiskLevel:{LOW_RISK:"Low",MED_RISK:"Medium",HIGH_RISK:"High"},VerifyType:{VERIFY_ANALYSIS:"Analysis",VERIFY_DEMONSTRATION:"Demonstration",VERIFY_INSPECTION:"Inspection",VERIFY_TEST:"Test"},Relationships:{CONTAINS:"contains",COPIES:"copies",DERIVES:"derives",SATISFIES:"satisfies",VERIFIES:"verifies",REFINES:"refines",TRACES:"traces"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().req,addRequirement:(t,e)=>(void 0===Bl[t]&&(Bl[t]={name:t,type:e,id:Ll.id,text:Ll.text,risk:Ll.risk,verifyMethod:Ll.verifyMethod}),Ll={},Bl[t]),getRequirements:()=>Bl,setNewReqId:t=>{void 0!==Ll&&(Ll.id=t)},setNewReqText:t=>{void 0!==Ll&&(Ll.text=t)},setNewReqRisk:t=>{void 0!==Ll&&(Ll.risk=t)},setNewReqVerifyMethod:t=>{void 0!==Ll&&(Ll.verifyMethod=t)},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addElement:t=>(void 0===Dl[t]&&(Dl[t]={name:t,type:Nl.type,docRef:Nl.docRef},Nt.info("Added new requirement: ",t)),Nl={},Dl[t]),getElements:()=>Dl,setNewElementType:t=>{void 0!==Nl&&(Nl.type=t)},setNewElementDocRef:t=>{void 0!==Nl&&(Nl.docRef=t)},addRelationship:(t,e,n)=>{Al.push({type:t,src:e,dst:n})},getRelationships:()=>Al,clear:()=>{Al=[],Ll={},Bl={},Nl={},Dl={},Dr()}},Ml={CONTAINS:"contains",ARROW:"arrow"},Il=Ml,Fl=(t,e)=>{let n=t.append("defs").append("marker").attr("id",Ml.CONTAINS+"_line_ending").attr("refX",0).attr("refY",e.line_height/2).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("g");n.append("circle").attr("cx",e.line_height/2).attr("cy",e.line_height/2).attr("r",e.line_height/2).attr("fill","none"),n.append("line").attr("x1",0).attr("x2",e.line_height).attr("y1",e.line_height/2).attr("y2",e.line_height/2).attr("stroke-width",1),n.append("line").attr("y1",0).attr("y2",e.line_height).attr("x1",e.line_height/2).attr("x2",e.line_height/2).attr("stroke-width",1),t.append("defs").append("marker").attr("id",Ml.ARROW+"_line_ending").attr("refX",e.line_height).attr("refY",.5*e.line_height).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("path").attr("d",`M0,0\n      L${e.line_height},${e.line_height/2}\n      M${e.line_height},${e.line_height/2}\n      L0,${e.line_height}`).attr("stroke-width",1)};let $l={},Rl=0;const Zl=(t,e)=>t.insert("rect","#"+e).attr("class","req reqBox").attr("x",0).attr("y",0).attr("width",$l.rect_min_width+"px").attr("height",$l.rect_min_height+"px"),Pl=(t,e,n)=>{let r=$l.rect_min_width/2,i=t.append("text").attr("class","req reqLabel reqTitle").attr("id",e).attr("x",r).attr("y",$l.rect_padding).attr("dominant-baseline","hanging"),a=0;n.forEach((t=>{0==a?i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",0).text(t):i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",.75*$l.line_height).text(t),a++}));let s=1.5*$l.rect_padding+a*$l.line_height*.75;return t.append("line").attr("class","req-title-line").attr("x1","0").attr("x2",$l.rect_min_width).attr("y1",s).attr("y2",s),{titleNode:i,y:s}},jl=(t,e,n,r)=>{let i=t.append("text").attr("class","req reqLabel").attr("id",e).attr("x",$l.rect_padding).attr("y",r).attr("dominant-baseline","hanging"),a=0;let s=[];return n.forEach((t=>{let e=t.length;for(;e>30&&a<3;){let n=t.substring(0,30);e=(t=t.substring(30,t.length)).length,s[s.length]=n,a++}if(3==a){let t=s[s.length-1];s[s.length-1]=t.substring(0,t.length-4)+"..."}else s[s.length]=t;a=0})),s.forEach((t=>{i.append("tspan").attr("x",$l.rect_padding).attr("dy",$l.line_height).text(t)})),i},Yl=function(t,e,n,r,i){const a=n.edge(zl(e.src),zl(e.dst)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})),c=t.insert("path","#"+r).attr("class","er relationshipLine").attr("d",s(a.points)).attr("fill","none");e.type==i.db.Relationships.CONTAINS?c.attr("marker-start","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+e.type+"_line_ending)"):(c.attr("stroke-dasharray","10,7"),c.attr("marker-end","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+Il.ARROW+"_line_ending)")),((t,e,n,r)=>{const i=e.node().getTotalLength(),a=e.node().getPointAtLength(.5*i),s="rel"+Rl;Rl++;const o=t.append("text").attr("class","req relationshipLabel").attr("id",s).attr("x",a.x).attr("y",a.y).attr("text-anchor","middle").attr("dominant-baseline","middle").text(r).node().getBBox();t.insert("rect","#"+s).attr("class","req reqLabelBox").attr("x",a.x-o.width/2).attr("y",a.y-o.height/2).attr("width",o.width).attr("height",o.height).attr("fill","white").attr("fill-opacity","85%")})(t,c,0,`<<${e.type}>>`)},zl=t=>t.replace(/\s/g,"").replace(/\./g,"_"),Ul={draw:(t,e,n,r)=>{$l=ar().requirement,r.db.clear(),r.parser.parse(t);const i=$l.securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);Fl(s,$l);const c=new ht.k({multigraph:!1,compound:!1,directed:!0}).setGraph({rankdir:$l.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));let l=r.db.getRequirements(),h=r.db.getElements(),u=r.db.getRelationships();var d,p,f;d=l,p=c,f=s,Object.keys(d).forEach((t=>{let e=d[t];t=zl(t),Nt.info("Added new requirement: ",t);const n=f.append("g").attr("id",t),r=Zl(n,"req-"+t);let i=Pl(n,t+"_title",[`<<${e.type}>>`,`${e.name}`]);jl(n,t+"_body",[`Id: ${e.id}`,`Text: ${e.text}`,`Risk: ${e.risk}`,`Verification: ${e.verifyMethod}`],i.y);const a=r.node().getBBox();p.setNode(t,{width:a.width,height:a.height,shape:"rect",id:t})})),((t,e,n)=>{Object.keys(t).forEach((r=>{let i=t[r];const a=zl(r),s=n.append("g").attr("id",a),o="element-"+a,c=Zl(s,o);let l=Pl(s,o+"_title",["<<Element>>",`${r}`]);jl(s,o+"_body",[`Type: ${i.type||"Not Specified"}`,`Doc Ref: ${i.docRef||"None"}`],l.y);const h=c.node().getBBox();e.setNode(a,{width:h.width,height:h.height,shape:"rect",id:a})}))})(h,c,s),((t,e)=>{t.forEach((function(t){let n=zl(t.src),r=zl(t.dst);e.setEdge(n,r,{relationship:t})}))})(u,c),(0,lt.bK)(c),function(t,e){e.nodes().forEach((function(n){void 0!==n&&void 0!==e.node(n)&&(t.select("#"+n),t.select("#"+n).attr("transform","translate("+(e.node(n).x-e.node(n).width/2)+","+(e.node(n).y-e.node(n).height/2)+" )"))}))}(s,c),u.forEach((function(t){Yl(s,t,c,e,r)}));const g=$l.rect_padding,y=s.node().getBBox(),m=y.width+2*g,b=y.height+2*g;dr(s,b,m,$l.useMaxWidth),s.attr("viewBox",`${y.x-g} ${y.y-g} ${m} ${b}`)}};var Wl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,19],h=[1,21],u=[1,22],d=[1,23],p=[1,29],f=[1,30],g=[1,31],y=[1,32],m=[1,33],b=[1,34],_=[1,35],x=[1,36],v=[1,37],k=[1,38],w=[1,39],E=[1,40],C=[1,42],T=[1,43],S=[1,45],A=[1,46],L=[1,47],B=[1,48],N=[1,49],D=[1,50],O=[1,53],M=[1,4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],I=[4,5,21,54,56],F=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],$=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,53,54,56,57,62,63,64,65,73,83],R=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,52,54,56,57,62,63,64,65,73,83],Z=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,54,56,57,62,63,64,65,73,83],P=[71,72,73],j=[1,125],Y=[1,4,5,7,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],z={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NEWLINE:5,directive:6,SD:7,document:8,line:9,statement:10,box_section:11,box_line:12,participant_statement:13,openDirective:14,typeDirective:15,closeDirective:16,":":17,argDirective:18,box:19,restOfLine:20,end:21,signal:22,autonumber:23,NUM:24,off:25,activate:26,actor:27,deactivate:28,note_statement:29,links_statement:30,link_statement:31,properties_statement:32,details_statement:33,title:34,legacy_title:35,acc_title:36,acc_title_value:37,acc_descr:38,acc_descr_value:39,acc_descr_multiline_value:40,loop:41,rect:42,opt:43,alt:44,else_sections:45,par:46,par_sections:47,critical:48,option_sections:49,break:50,option:51,and:52,else:53,participant:54,AS:55,participant_actor:56,note:57,placement:58,text2:59,over:60,actor_pair:61,links:62,link:63,properties:64,details:65,spaceList:66,",":67,left_of:68,right_of:69,signaltype:70,"+":71,"-":72,ACTOR:73,SOLID_OPEN_ARROW:74,DOTTED_OPEN_ARROW:75,SOLID_ARROW:76,DOTTED_ARROW:77,SOLID_CROSS:78,DOTTED_CROSS:79,SOLID_POINT:80,DOTTED_POINT:81,TXT:82,open_directive:83,type_directive:84,arg_directive:85,close_directive:86,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NEWLINE",7:"SD",17:":",19:"box",20:"restOfLine",21:"end",23:"autonumber",24:"NUM",25:"off",26:"activate",28:"deactivate",34:"title",35:"legacy_title",36:"acc_title",37:"acc_title_value",38:"acc_descr",39:"acc_descr_value",40:"acc_descr_multiline_value",41:"loop",42:"rect",43:"opt",44:"alt",46:"par",48:"critical",50:"break",51:"option",52:"and",53:"else",54:"participant",55:"AS",56:"participant_actor",57:"note",60:"over",62:"links",63:"link",64:"properties",65:"details",67:",",68:"left_of",69:"right_of",71:"+",72:"-",73:"ACTOR",74:"SOLID_OPEN_ARROW",75:"DOTTED_OPEN_ARROW",76:"SOLID_ARROW",77:"DOTTED_ARROW",78:"SOLID_CROSS",79:"DOTTED_CROSS",80:"SOLID_POINT",81:"DOTTED_POINT",82:"TXT",83:"open_directive",84:"type_directive",85:"arg_directive",86:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[11,0],[11,2],[12,2],[12,1],[12,1],[6,4],[6,6],[10,1],[10,4],[10,2],[10,4],[10,3],[10,3],[10,2],[10,3],[10,3],[10,2],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,2],[10,2],[10,1],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,1],[49,1],[49,4],[47,1],[47,4],[45,1],[45,4],[13,5],[13,3],[13,5],[13,3],[29,4],[29,4],[30,3],[31,3],[32,3],[33,3],[66,2],[66,1],[61,3],[61,1],[58,1],[58,1],[22,5],[22,5],[22,4],[27,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[59,1],[14,1],[15,1],[18,1],[16,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.apply(a[o]),a[o];case 5:case 10:case 9:case 14:this.$=[];break;case 6:case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 7:case 8:case 12:case 13:case 63:this.$=a[o];break;case 18:a[o-1].unshift({type:"boxStart",boxData:r.parseBoxData(a[o-2])}),a[o-1].push({type:"boxEnd",boxText:a[o-2]}),this.$=a[o-1];break;case 20:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-2]),sequenceIndexStep:Number(a[o-1]),sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 21:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-1]),sequenceIndexStep:1,sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 22:this.$={type:"sequenceIndex",sequenceVisible:!1,signalType:r.LINETYPE.AUTONUMBER};break;case 23:this.$={type:"sequenceIndex",sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 24:this.$={type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]};break;case 25:this.$={type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-1]};break;case 31:r.setDiagramTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 32:r.setDiagramTitle(a[o].substring(7)),this.$=a[o].substring(7);break;case 33:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 34:case 35:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 36:a[o-1].unshift({type:"loopStart",loopText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.LOOP_START}),a[o-1].push({type:"loopEnd",loopText:a[o-2],signalType:r.LINETYPE.LOOP_END}),this.$=a[o-1];break;case 37:a[o-1].unshift({type:"rectStart",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_START}),a[o-1].push({type:"rectEnd",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_END}),this.$=a[o-1];break;case 38:a[o-1].unshift({type:"optStart",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_START}),a[o-1].push({type:"optEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_END}),this.$=a[o-1];break;case 39:a[o-1].unshift({type:"altStart",altText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.ALT_START}),a[o-1].push({type:"altEnd",signalType:r.LINETYPE.ALT_END}),this.$=a[o-1];break;case 40:a[o-1].unshift({type:"parStart",parText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.PAR_START}),a[o-1].push({type:"parEnd",signalType:r.LINETYPE.PAR_END}),this.$=a[o-1];break;case 41:a[o-1].unshift({type:"criticalStart",criticalText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.CRITICAL_START}),a[o-1].push({type:"criticalEnd",signalType:r.LINETYPE.CRITICAL_END}),this.$=a[o-1];break;case 42:a[o-1].unshift({type:"breakStart",breakText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_START}),a[o-1].push({type:"breakEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_END}),this.$=a[o-1];break;case 45:this.$=a[o-3].concat([{type:"option",optionText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.CRITICAL_OPTION},a[o]]);break;case 47:this.$=a[o-3].concat([{type:"and",parText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.PAR_AND},a[o]]);break;case 49:this.$=a[o-3].concat([{type:"else",altText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.ALT_ELSE},a[o]]);break;case 50:a[o-3].type="addParticipant",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 51:a[o-1].type="addParticipant",this.$=a[o-1];break;case 52:a[o-3].type="addActor",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 53:a[o-1].type="addActor",this.$=a[o-1];break;case 54:this.$=[a[o-1],{type:"addNote",placement:a[o-2],actor:a[o-1].actor,text:a[o]}];break;case 55:a[o-2]=[].concat(a[o-1],a[o-1]).slice(0,2),a[o-2][0]=a[o-2][0].actor,a[o-2][1]=a[o-2][1].actor,this.$=[a[o-1],{type:"addNote",placement:r.PLACEMENT.OVER,actor:a[o-2].slice(0,2),text:a[o]}];break;case 56:this.$=[a[o-1],{type:"addLinks",actor:a[o-1].actor,text:a[o]}];break;case 57:this.$=[a[o-1],{type:"addALink",actor:a[o-1].actor,text:a[o]}];break;case 58:this.$=[a[o-1],{type:"addProperties",actor:a[o-1].actor,text:a[o]}];break;case 59:this.$=[a[o-1],{type:"addDetails",actor:a[o-1].actor,text:a[o]}];break;case 62:this.$=[a[o-2],a[o]];break;case 64:this.$=r.PLACEMENT.LEFTOF;break;case 65:this.$=r.PLACEMENT.RIGHTOF;break;case 66:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]}];break;case 67:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-4]}];break;case 68:this.$=[a[o-3],a[o-1],{type:"addMessage",from:a[o-3].actor,to:a[o-1].actor,signalType:a[o-2],msg:a[o]}];break;case 69:this.$={type:"addParticipant",actor:a[o]};break;case 70:this.$=r.LINETYPE.SOLID_OPEN;break;case 71:this.$=r.LINETYPE.DOTTED_OPEN;break;case 72:this.$=r.LINETYPE.SOLID;break;case 73:this.$=r.LINETYPE.DOTTED;break;case 74:this.$=r.LINETYPE.SOLID_CROSS;break;case 75:this.$=r.LINETYPE.DOTTED_CROSS;break;case 76:this.$=r.LINETYPE.SOLID_POINT;break;case 77:this.$=r.LINETYPE.DOTTED_POINT;break;case 78:this.$=r.parseMessage(a[o].trim().substring(1));break;case 79:r.parseDirective("%%{","open_directive");break;case 80:r.parseDirective(a[o],"type_directive");break;case 81:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 82:r.parseDirective("}%%","close_directive","sequence")}},table:[{3:1,4:n,5:r,6:4,7:i,14:6,83:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,14:6,83:a},{3:9,4:n,5:r,6:4,7:i,14:6,83:a},{3:10,4:n,5:r,6:4,7:i,14:6,83:a},e([1,4,5,19,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],s,{8:11}),{15:12,84:[1,13]},{84:[2,79]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{16:51,17:[1,52],86:O},e([17,86],[2,80]),e(M,[2,6]),{6:41,10:54,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},e(M,[2,8]),e(M,[2,9]),e(M,[2,17]),{20:[1,55]},{5:[1,56]},{5:[1,59],24:[1,57],25:[1,58]},{27:60,73:D},{27:61,73:D},{5:[1,62]},{5:[1,63]},{5:[1,64]},{5:[1,65]},{5:[1,66]},e(M,[2,31]),e(M,[2,32]),{37:[1,67]},{39:[1,68]},e(M,[2,35]),{20:[1,69]},{20:[1,70]},{20:[1,71]},{20:[1,72]},{20:[1,73]},{20:[1,74]},{20:[1,75]},e(M,[2,43]),{27:76,73:D},{27:77,73:D},{70:78,74:[1,79],75:[1,80],76:[1,81],77:[1,82],78:[1,83],79:[1,84],80:[1,85],81:[1,86]},{58:87,60:[1,88],68:[1,89],69:[1,90]},{27:91,73:D},{27:92,73:D},{27:93,73:D},{27:94,73:D},e([5,55,67,74,75,76,77,78,79,80,81,82],[2,69]),{5:[1,95]},{18:96,85:[1,97]},{5:[2,82]},e(M,[2,7]),e(I,[2,10],{11:98}),e(M,[2,19]),{5:[1,100],24:[1,99]},{5:[1,101]},e(M,[2,23]),{5:[1,102]},{5:[1,103]},e(M,[2,26]),e(M,[2,27]),e(M,[2,28]),e(M,[2,29]),e(M,[2,30]),e(M,[2,33]),e(M,[2,34]),e(F,s,{8:104}),e(F,s,{8:105}),e(F,s,{8:106}),e($,s,{45:107,8:108}),e(R,s,{47:109,8:110}),e(Z,s,{49:111,8:112}),e(F,s,{8:113}),{5:[1,115],55:[1,114]},{5:[1,117],55:[1,116]},{27:120,71:[1,118],72:[1,119],73:D},e(P,[2,70]),e(P,[2,71]),e(P,[2,72]),e(P,[2,73]),e(P,[2,74]),e(P,[2,75]),e(P,[2,76]),e(P,[2,77]),{27:121,73:D},{27:123,61:122,73:D},{73:[2,64]},{73:[2,65]},{59:124,82:j},{59:126,82:j},{59:127,82:j},{59:128,82:j},e(Y,[2,15]),{16:129,86:O},{86:[2,81]},{4:[1,132],5:[1,134],12:131,13:133,21:[1,130],54:C,56:T},{5:[1,135]},e(M,[2,21]),e(M,[2,22]),e(M,[2,24]),e(M,[2,25]),{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,136],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,137],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,138],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,139]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,48],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,53:[1,140],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,141]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,46],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,52:[1,142],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,143]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,44],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,51:[1,144],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,145],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{20:[1,146]},e(M,[2,51]),{20:[1,147]},e(M,[2,53]),{27:148,73:D},{27:149,73:D},{59:150,82:j},{59:151,82:j},{59:152,82:j},{67:[1,153],82:[2,63]},{5:[2,56]},{5:[2,78]},{5:[2,57]},{5:[2,58]},{5:[2,59]},{5:[1,154]},e(M,[2,18]),e(I,[2,11]),{13:155,54:C,56:T},e(I,[2,13]),e(I,[2,14]),e(M,[2,20]),e(M,[2,36]),e(M,[2,37]),e(M,[2,38]),e(M,[2,39]),{20:[1,156]},e(M,[2,40]),{20:[1,157]},e(M,[2,41]),{20:[1,158]},e(M,[2,42]),{5:[1,159]},{5:[1,160]},{59:161,82:j},{59:162,82:j},{5:[2,68]},{5:[2,54]},{5:[2,55]},{27:163,73:D},e(Y,[2,16]),e(I,[2,12]),e($,s,{8:108,45:164}),e(R,s,{8:110,47:165}),e(Z,s,{8:112,49:166}),e(M,[2,50]),e(M,[2,52]),{5:[2,66]},{5:[2,67]},{82:[2,62]},{21:[2,49]},{21:[2,47]},{21:[2,45]}],defaultActions:{7:[2,79],8:[2,1],9:[2,2],10:[2,3],53:[2,82],89:[2,64],90:[2,65],97:[2,81],124:[2,56],125:[2,78],126:[2,57],127:[2,58],128:[2,59],150:[2,68],151:[2,54],152:[2,55],161:[2,66],162:[2,67],163:[2,62],164:[2,49],165:[2,47],166:[2,45]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},U=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),83;case 1:return this.begin("type_directive"),84;case 2:return this.popState(),this.begin("arg_directive"),17;case 3:return this.popState(),this.popState(),86;case 4:return 85;case 5:case 53:case 66:return 5;case 6:case 7:case 8:case 9:case 10:break;case 11:return 24;case 12:return this.begin("LINE"),19;case 13:return this.begin("ID"),54;case 14:return this.begin("ID"),56;case 15:return e.yytext=e.yytext.trim(),this.begin("ALIAS"),73;case 16:return this.popState(),this.popState(),this.begin("LINE"),55;case 17:return this.popState(),this.popState(),5;case 18:return this.begin("LINE"),41;case 19:return this.begin("LINE"),42;case 20:return this.begin("LINE"),43;case 21:return this.begin("LINE"),44;case 22:return this.begin("LINE"),53;case 23:return this.begin("LINE"),46;case 24:return this.begin("LINE"),52;case 25:return this.begin("LINE"),48;case 26:return this.begin("LINE"),51;case 27:return this.begin("LINE"),50;case 28:return this.popState(),20;case 29:return 21;case 30:return 68;case 31:return 69;case 32:return 62;case 33:return 63;case 34:return 64;case 35:return 65;case 36:return 60;case 37:return 57;case 38:return this.begin("ID"),26;case 39:return this.begin("ID"),28;case 40:return 34;case 41:return 35;case 42:return this.begin("acc_title"),36;case 43:return this.popState(),"acc_title_value";case 44:return this.begin("acc_descr"),38;case 45:return this.popState(),"acc_descr_value";case 46:this.begin("acc_descr_multiline");break;case 47:this.popState();break;case 48:return"acc_descr_multiline_value";case 49:return 7;case 50:return 23;case 51:return 25;case 52:return 67;case 54:return e.yytext=e.yytext.trim(),73;case 55:return 76;case 56:return 77;case 57:return 74;case 58:return 75;case 59:return 78;case 60:return 79;case 61:return 80;case 62:return 81;case 63:return 82;case 64:return 71;case 65:return 72;case 67:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[0-9]+(?=[ \n]+))/i,/^(?:box\b)/i,/^(?:participant\b)/i,/^(?:actor\b)/i,/^(?:[^\->:\n,;]+?([\-]*[^\->:\n,;]+?)*?(?=((?!\n)\s)+as(?!\n)\s|[#\n;]|$))/i,/^(?:as\b)/i,/^(?:(?:))/i,/^(?:loop\b)/i,/^(?:rect\b)/i,/^(?:opt\b)/i,/^(?:alt\b)/i,/^(?:else\b)/i,/^(?:par\b)/i,/^(?:and\b)/i,/^(?:critical\b)/i,/^(?:option\b)/i,/^(?:break\b)/i,/^(?:(?:[:]?(?:no)?wrap)?[^#\n;]*)/i,/^(?:end\b)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:links\b)/i,/^(?:link\b)/i,/^(?:properties\b)/i,/^(?:details\b)/i,/^(?:over\b)/i,/^(?:note\b)/i,/^(?:activate\b)/i,/^(?:deactivate\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:title:\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:sequenceDiagram\b)/i,/^(?:autonumber\b)/i,/^(?:off\b)/i,/^(?:,)/i,/^(?:;)/i,/^(?:[^\+\->:\n,;]+((?!(-x|--x|-\)|--\)))[\-]*[^\+\->:\n,;]+)*)/i,/^(?:->>)/i,/^(?:-->>)/i,/^(?:->)/i,/^(?:-->)/i,/^(?:-[x])/i,/^(?:--[x])/i,/^(?:-[\)])/i,/^(?:--[\)])/i,/^(?::(?:(?:no)?wrap)?[^#\n;]+)/i,/^(?:\+)/i,/^(?:-)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[47,48],inclusive:!1},acc_descr:{rules:[45],inclusive:!1},acc_title:{rules:[43],inclusive:!1},open_directive:{rules:[1,8],inclusive:!1},type_directive:{rules:[2,3,8],inclusive:!1},arg_directive:{rules:[3,4,8],inclusive:!1},ID:{rules:[7,8,15],inclusive:!1},ALIAS:{rules:[7,8,16,17],inclusive:!1},LINE:{rules:[7,8,28],inclusive:!1},INITIAL:{rules:[0,5,6,8,9,10,11,12,13,14,18,19,20,21,22,23,24,25,26,27,29,30,31,32,33,34,35,36,37,38,39,40,41,42,44,46,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],inclusive:!0}}},t);function W(){this.yy={}}return z.lexer=U,W.prototype=z,z.Parser=W,new W}();Wl.parser=Wl;const ql=Wl,Hl=t=>null!==t.match(/^\s*sequenceDiagram/);let Vl,Gl,Xl,Kl={},Ql=[],Jl=[],th=!1;const eh=function(t,e,n,r){let i=Xl;const a=Kl[t];if(a){if(Xl&&a.box&&Xl!==a.box)throw new Error("A same participant should only be defined in one Box: "+a.name+" can't be in '"+a.box.name+"' and in '"+Xl.name+"' at the same time.");if(i=a.box?a.box:Xl,a.box=i,a&&e===a.name&&null==n)return}null!=n&&null!=n.text||(n={text:e,wrap:null,type:r}),null!=r&&null!=n.text||(n={text:e,wrap:null,type:r}),Kl[t]={box:i,name:e,description:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,prevActor:Vl,links:{},properties:{},actorCnt:null,rectData:null,type:r||"participant"},Vl&&Kl[Vl]&&(Kl[Vl].nextActor=t),Xl&&Xl.actorKeys.push(t),Vl=t},nh=function(t,e,n={text:void 0,wrap:void 0},r){if(r===ah.ACTIVE_END){const e=(t=>{let e,n=0;for(e=0;e<Jl.length;e++)Jl[e].type===ah.ACTIVE_START&&Jl[e].from.actor===t&&n++,Jl[e].type===ah.ACTIVE_END&&Jl[e].from.actor===t&&n--;return n})(t.actor);if(e<1){let e=new Error("Trying to inactivate an inactive participant ("+t.actor+")");throw e.hash={text:"->>-",token:"->>-",line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["'ACTIVE_PARTICIPANT'"]},e}}return Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:r}),!0},rh=function(t){return Kl[t]},ih=()=>void 0!==Gl?Gl:ar().sequence.wrap,ah={SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25,AUTONUMBER:26,CRITICAL_START:27,CRITICAL_OPTION:28,CRITICAL_END:29,BREAK_START:30,BREAK_END:31},sh=function(t,e,n){n.text,void 0===n.wrap&&ih()||n.wrap;const r=[].concat(t,t);Jl.push({from:r[0],to:r[1],message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:ah.NOTE,placement:e})},oh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());t=t.replace(/&amp;/g,"&"),t=t.replace(/&equals;/g,"=");ch(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor link text",r)}};function ch(t,e){if(null==t.links)t.links=e;else for(let n in e)t.links[n]=e[n]}const lh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());hh(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor properties text",r)}};function hh(t,e){if(null==t.properties)t.properties=e;else for(let n in e)t.properties[n]=e[n]}const uh=function(t,e){const n=rh(t),r=document.getElementById(e.text);try{const t=r.innerHTML,e=JSON.parse(t);e.properties&&hh(n,e.properties),e.links&&ch(n,e.links)}catch(i){Nt.error("error while parsing actor details text",i)}},dh=function(t){if(Array.isArray(t))t.forEach((function(t){dh(t)}));else switch(t.type){case"sequenceIndex":Jl.push({from:void 0,to:void 0,message:{start:t.sequenceIndex,step:t.sequenceIndexStep,visible:t.sequenceVisible},wrap:!1,type:t.signalType});break;case"addParticipant":eh(t.actor,t.actor,t.description,"participant");break;case"addActor":eh(t.actor,t.actor,t.description,"actor");break;case"activeStart":case"activeEnd":nh(t.actor,void 0,void 0,t.signalType);break;case"addNote":sh(t.actor,t.placement,t.text);break;case"addLinks":oh(t.actor,t.text);break;case"addALink":!function(t,e){const n=rh(t);try{const t={};let s=Ft(e.text,ar());var r=s.indexOf("@");s=s.replace(/&amp;/g,"&"),s=s.replace(/&equals;/g,"=");var i=s.slice(0,r-1).trim(),a=s.slice(r+1).trim();t[i]=a,ch(n,t)}catch(s){Nt.error("error while parsing actor link text",s)}}(t.actor,t.text);break;case"addProperties":lh(t.actor,t.text);break;case"addDetails":uh(t.actor,t.text);break;case"addMessage":nh(t.from,t.to,t.msg,t.signalType);break;case"boxStart":e=t.boxData,Ql.push({name:e.text,wrap:void 0===e.wrap&&ih()||!!e.wrap,fill:e.color,actorKeys:[]}),Xl=Ql.slice(-1)[0];break;case"boxEnd":Xl=void 0;break;case"loopStart":nh(void 0,void 0,t.loopText,t.signalType);break;case"loopEnd":case"rectEnd":case"optEnd":case"altEnd":case"parEnd":case"criticalEnd":case"breakEnd":nh(void 0,void 0,void 0,t.signalType);break;case"rectStart":nh(void 0,void 0,t.color,t.signalType);break;case"optStart":nh(void 0,void 0,t.optText,t.signalType);break;case"altStart":case"else":nh(void 0,void 0,t.altText,t.signalType);break;case"setAccTitle":Or(t.text);break;case"parStart":case"and":nh(void 0,void 0,t.parText,t.signalType);break;case"criticalStart":nh(void 0,void 0,t.criticalText,t.signalType);break;case"option":nh(void 0,void 0,t.optionText,t.signalType);break;case"breakStart":nh(void 0,void 0,t.breakText,t.signalType)}var e},ph={addActor:eh,addMessage:function(t,e,n,r){Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,answer:r})},addSignal:nh,addLinks:oh,addDetails:uh,addProperties:lh,autoWrap:ih,setWrap:function(t){Gl=t},enableSequenceNumbers:function(){th=!0},disableSequenceNumbers:function(){th=!1},showSequenceNumbers:()=>th,getMessages:function(){return Jl},getActors:function(){return Kl},getActor:rh,getActorKeys:function(){return Object.keys(Kl)},getActorProperty:function(t,e){if(void 0!==t&&void 0!==t.properties)return t.properties[e]},getAccTitle:Mr,getBoxes:function(){return Ql},getDiagramTitle:Rr,setDiagramTitle:$r,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().sequence,clear:function(){Kl={},Ql=[],Jl=[],th=!1,Dr()},parseMessage:function(t){const e=t.trim(),n={text:e.replace(/^:?(?:no)?wrap:/,"").trim(),wrap:null!==e.match(/^:?wrap:/)||null===e.match(/^:?nowrap:/)&&void 0};return Nt.debug("parseMessage:",n),n},parseBoxData:function(t){const e=t.match(/^((?:rgba?|hsla?)\s*\(.*\)|\w*)(.*)$/);let n=null!=e&&e[1]?e[1].trim():"transparent",r=null!=e&&e[2]?e[2].trim():void 0;if(window&&window.CSS)window.CSS.supports("color",n)||(n="transparent",r=t.trim());else{const e=(new Option).style;e.color=n,e.color!==n&&(n="transparent",r=t.trim())}return{color:n,text:void 0!==r?Ft(r.replace(/^:?(?:no)?wrap:/,""),ar()):void 0,wrap:void 0!==r?null!==r.match(/^:?wrap:/)||null===r.match(/^:?nowrap:/)&&void 0:void 0}},LINETYPE:ah,ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},addNote:sh,setAccTitle:Or,apply:dh,setAccDescription:Ir,getAccDescription:Fr,hasAtLeastOneBox:function(){return Ql.length>0},hasAtLeastOneBoxWithTitle:function(){return Ql.some((t=>t.name))}};let fh=[];const gh=()=>{fh.forEach((t=>{t()})),fh=[]},yh=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},mh=(t,e)=>{var n;n=()=>{const n=document.querySelectorAll(t);0!==n.length&&(n[0].addEventListener("mouseover",(function(){xh("actor"+e+"_popup")})),n[0].addEventListener("mouseout",(function(){vh("actor"+e+"_popup")})))},fh.push(n)},bh=function(t,e,n,r){const i=t.append("image");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href",a)},_h=function(t,e,n,r){const i=t.append("use");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href","#"+a)},xh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="block")},vh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="none")},kh=function(t,e){let n=0,r=0;const i=e.text.split(Yt.lineBreakRegex),[a,s]=Vn(e.fontSize);let o=[],c=0,l=()=>e.y;if(void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0)switch(e.valign){case"top":case"start":l=()=>Math.round(e.y+e.textMargin);break;case"middle":case"center":l=()=>Math.round(e.y+(n+r+e.textMargin)/2);break;case"bottom":case"end":l=()=>Math.round(e.y+(n+r+2*e.textMargin)-e.textMargin)}if(void 0!==e.anchor&&void 0!==e.textMargin&&void 0!==e.width)switch(e.anchor){case"left":case"start":e.x=Math.round(e.x+e.textMargin),e.anchor="start",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"middle":case"center":e.x=Math.round(e.x+e.width/2),e.anchor="middle",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"right":case"end":e.x=Math.round(e.x+e.width-e.textMargin),e.anchor="end",e.dominantBaseline="middle",e.alignmentBaseline="middle"}for(let[h,u]of i.entries()){void 0!==e.textMargin&&0===e.textMargin&&void 0!==a&&(c=h*a);const i=t.append("text");if(i.attr("x",e.x),i.attr("y",l()),void 0!==e.anchor&&i.attr("text-anchor",e.anchor).attr("dominant-baseline",e.dominantBaseline).attr("alignment-baseline",e.alignmentBaseline),void 0!==e.fontFamily&&i.style("font-family",e.fontFamily),void 0!==s&&i.style("font-size",s),void 0!==e.fontWeight&&i.style("font-weight",e.fontWeight),void 0!==e.fill&&i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class),void 0!==e.dy?i.attr("dy",e.dy):0!==c&&i.attr("dy",c),e.tspan){const t=i.append("tspan");t.attr("x",e.x),void 0!==e.fill&&t.attr("fill",e.fill),t.text(u)}else i.text(u);void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0&&(r+=(i._groups||i)[0][0].getBBox().height,n=r),o.push(i)}return o},wh=function(t,e){const n=t.append("polygon");var r,i,a,s,o;return n.attr("points",(r=e.x,i=e.y,a=e.width,s=e.height,r+","+i+" "+(r+a)+","+i+" "+(r+a)+","+(i+s-(o=7))+" "+(r+a-1.2*o)+","+(i+s)+" "+r+","+(i+s))),n.attr("class","labelBox"),e.y=e.y+e.height/2,kh(t,e),n};let Eh=-1;const Ch=(t,e)=>{t.selectAll&&t.selectAll(".actor-line").attr("class","200").attr("y2",e-55)},Th=function(t,e){yh(t,{x:e.startx,y:e.starty,width:e.stopx-e.startx,height:e.stopy-e.starty,fill:e.fill,stroke:e.stroke,class:"rect"}).lower()},Sh=function(){return{x:0,y:0,fill:void 0,anchor:void 0,style:"#666",width:void 0,height:void 0,textMargin:0,rx:0,ry:0,tspan:!0,valign:void 0}},Ah=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},Lh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,[d,p]=Vn(l),f=t.split(Yt.lineBreakRegex);for(let g=0;g<f.length;g++){const t=g*d-d*(f.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").style("font-size",p).style("font-weight",u).style("font-family",h);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(f[g]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Bh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,a=e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").style("font-size",l).style("font-weight",u).style("font-family",h);a.append("tspan").attr("x",n).attr("dy",t).text(d[p]),a.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(a,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,0,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Nh={drawRect:yh,drawText:kh,drawLabel:wh,drawActor:function(t,e,n,r){switch(e.type){case"actor":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+80;r||(Eh++,t.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"));const s=t.append("g");s.attr("class","actor-man");const o=Ah();o.x=e.x,o.y=e.y,o.fill="#eaeaea",o.width=e.width,o.height=e.height,o.class="actor",o.rx=3,o.ry=3,s.append("line").attr("id","actor-man-torso"+Eh).attr("x1",i).attr("y1",e.y+25).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("id","actor-man-arms"+Eh).attr("x1",i-18).attr("y1",e.y+33).attr("x2",i+18).attr("y2",e.y+33),s.append("line").attr("x1",i-18).attr("y1",e.y+60).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("x1",i).attr("y1",e.y+45).attr("x2",i+16).attr("y2",e.y+60);const c=s.append("circle");c.attr("cx",e.x+e.width/2),c.attr("cy",e.y+10),c.attr("r",15),c.attr("width",e.width),c.attr("height",e.height);const l=s.node().getBBox();return e.height=l.height,Lh(n)(e.description,s,o.x,o.y+35,o.width,o.height,{class:"actor"},n),e.height}(t,e,n,r);case"participant":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+5,s=t.append("g");var o=s;r||(Eh++,o.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"),o=s.append("g"),e.actorCnt=Eh,null!=e.links&&(o.attr("id","root-"+Eh),mh("#root-"+Eh,Eh)));const c=Ah();var l="actor";null!=e.properties&&e.properties.class?l=e.properties.class:c.fill="#eaeaea",c.x=e.x,c.y=e.y,c.width=e.width,c.height=e.height,c.class=l,c.rx=3,c.ry=3;const h=yh(o,c);if(e.rectData=c,null!=e.properties&&e.properties.icon){const t=e.properties.icon.trim();"@"===t.charAt(0)?_h(o,c.x+c.width-20,c.y+10,t.substr(1)):bh(o,c.x+c.width-20,c.y+10,t)}Lh(n)(e.description,o,c.x,c.y,c.width,c.height,{class:"actor"},n);let u=e.height;if(h.node){const t=h.node().getBBox();e.height=t.height,u=t.height}return u}(t,e,n,r)}},drawBox:function(t,e,n){const r=t.append("g");Th(r,e),e.name&&Lh(n)(e.name,r,e.x,e.y+(e.textMaxHeight||0)/2,e.width,0,{class:"text"},n),r.lower()},drawPopup:function(t,e,n,r,i){if(void 0===e.links||null===e.links||0===Object.keys(e.links).length)return{height:0,width:0};const a=e.links,o=e.actorCnt,c=e.rectData;var l="none";i&&(l="block !important");const h=t.append("g");h.attr("id","actor"+o+"_popup"),h.attr("class","actorPopupMenu"),h.attr("display",l),mh("#actor"+o+"_popup",o);var u="";void 0!==c.class&&(u=" "+c.class);let d=c.width>n?c.width:n;const p=h.append("rect");if(p.attr("class","actorPopupMenuPanel"+u),p.attr("x",c.x),p.attr("y",c.height),p.attr("fill",c.fill),p.attr("stroke",c.stroke),p.attr("width",d),p.attr("height",c.height),p.attr("rx",c.rx),p.attr("ry",c.ry),null!=a){var f=20;for(let t in a){var g=h.append("a"),y=(0,s.N)(a[t]);g.attr("xlink:href",y),g.attr("target","_blank"),Bh(r)(t,g,c.x+10,c.height+f,d,20,{class:"actor"},r),f+=30}}return p.attr("height",f),{height:c.height+f,width:d}},drawImage:bh,drawEmbeddedImage:_h,anchorElement:function(t){return t.append("g")},drawActivation:function(t,e,n,r,i){const a=Ah(),s=e.anchored;a.x=e.startx,a.y=e.starty,a.class="activation"+i%3,a.width=e.stopx-e.startx,a.height=n-e.starty,yh(s,a)},drawLoop:function(t,e,n,r){const{boxMargin:i,boxTextMargin:a,labelBoxHeight:s,labelBoxWidth:o,messageFontFamily:c,messageFontSize:l,messageFontWeight:h}=r,u=t.append("g"),d=function(t,e,n,r){return u.append("line").attr("x1",t).attr("y1",e).attr("x2",n).attr("y2",r).attr("class","loopLine")};d(e.startx,e.starty,e.stopx,e.starty),d(e.stopx,e.starty,e.stopx,e.stopy),d(e.startx,e.stopy,e.stopx,e.stopy),d(e.startx,e.starty,e.startx,e.stopy),void 0!==e.sections&&e.sections.forEach((function(t){d(e.startx,t.y,e.stopx,t.y).style("stroke-dasharray","3, 3")}));let p=Sh();p.text=n,p.x=e.startx,p.y=e.starty,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.anchor="middle",p.valign="middle",p.tspan=!1,p.width=o||50,p.height=s||20,p.textMargin=a,p.class="labelText",wh(u,p),p=Sh(),p.text=e.title,p.x=e.startx+o/2+(e.stopx-e.startx)/2,p.y=e.starty+i+a,p.anchor="middle",p.valign="middle",p.textMargin=a,p.class="loopText",p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=!0;let f=kh(u,p);return void 0!==e.sectionTitles&&e.sectionTitles.forEach((function(t,n){if(t.message){p.text=t.message,p.x=e.startx+(e.stopx-e.startx)/2,p.y=e.sections[n].y+i+a,p.class="loopText",p.anchor="middle",p.valign="middle",p.tspan=!1,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=e.wrap,f=kh(u,p);let r=Math.round(f.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));e.sections[n].height+=r-(i+a)}})),e.height=Math.round(e.stopy-e.starty),u},drawBackgroundRect:Th,insertArrowHead:function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},insertArrowFilledHead:function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},insertSequenceNumber:function(t){t.append("defs").append("marker").attr("id","sequencenumber").attr("refX",15).attr("refY",15).attr("markerWidth",60).attr("markerHeight",40).attr("orient","auto").append("circle").attr("cx",15).attr("cy",15).attr("r",6)},insertArrowCrossHead:function(t){t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",4).attr("refY",5).append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1pt").attr("d","M 1,2 L 6,7 M 6,2 L 1,7")},insertDatabaseIcon:function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},insertComputerIcon:function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},insertClockIcon:function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")},getTextObj:Sh,getNoteRect:Ah,popupMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'block'; }"},popdownMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'none'; }"},fixLifeLineHeights:Ch,sanitizeUrl:s.N};let Dh={};const Oh={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],activations:[],models:{getHeight:function(){return Math.max.apply(null,0===this.actors.length?[0]:this.actors.map((t=>t.height||0)))+(0===this.loops.length?0:this.loops.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.messages.length?0:this.messages.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.notes.length?0:this.notes.map((t=>t.height||0)).reduce(((t,e)=>t+e)))},clear:function(){this.actors=[],this.boxes=[],this.loops=[],this.messages=[],this.notes=[]},addBox:function(t){this.boxes.push(t)},addActor:function(t){this.actors.push(t)},addLoop:function(t){this.loops.push(t)},addMessage:function(t){this.messages.push(t)},addNote:function(t){this.notes.push(t)},lastActor:function(){return this.actors[this.actors.length-1]},lastLoop:function(){return this.loops[this.loops.length-1]},lastMessage:function(){return this.messages[this.messages.length-1]},lastNote:function(){return this.notes[this.notes.length-1]},actors:[],boxes:[],loops:[],messages:[],notes:[]},init:function(){this.sequenceItems=[],this.activations=[],this.models.clear(),this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0,Zh(ar())},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=this;let a=0;function s(s){return function(o){a++;const c=i.sequenceItems.length-a+1;i.updateVal(o,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopy",r+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopx",n+c*Dh.boxMargin,Math.max),"activation"!==s&&(i.updateVal(o,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopx",n+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopy",r+c*Dh.boxMargin,Math.max))}}this.sequenceItems.forEach(s()),this.activations.forEach(s("activation"))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(Oh.data,"startx",i,Math.min),this.updateVal(Oh.data,"starty",s,Math.min),this.updateVal(Oh.data,"stopx",a,Math.max),this.updateVal(Oh.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},newActivation:function(t,e,n){const r=n[t.from.actor],i=Ph(t.from.actor).length||0,a=r.x+r.width/2+(i-1)*Dh.activationWidth/2;this.activations.push({startx:a,starty:this.verticalPos+2,stopx:a+Dh.activationWidth,stopy:void 0,actor:t.from.actor,anchored:Nh.anchorElement(e)})},endActivation:function(t){const e=this.activations.map((function(t){return t.actor})).lastIndexOf(t.from.actor);return this.activations.splice(e,1)[0]},createLoop:function(t={message:void 0,wrap:!1,width:void 0},e){return{startx:void 0,starty:this.verticalPos,stopx:void 0,stopy:void 0,title:t.message,wrap:t.wrap,width:t.width,height:0,fill:e}},newLoop:function(t={message:void 0,wrap:!1,width:void 0},e){this.sequenceItems.push(this.createLoop(t,e))},endLoop:function(){return this.sequenceItems.pop()},addSectionToLoop:function(t){const e=this.sequenceItems.pop();e.sections=e.sections||[],e.sectionTitles=e.sectionTitles||[],e.sections.push({y:Oh.getVerticalPos(),height:0}),e.sectionTitles.push(t),this.sequenceItems.push(e)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return{bounds:this.data,models:this.models}}},Mh=t=>({fontFamily:t.messageFontFamily,fontSize:t.messageFontSize,fontWeight:t.messageFontWeight}),Ih=t=>({fontFamily:t.noteFontFamily,fontSize:t.noteFontSize,fontWeight:t.noteFontWeight}),Fh=t=>({fontFamily:t.actorFontFamily,fontSize:t.actorFontSize,fontWeight:t.actorFontWeight});const $h=function(t,e,n,r,i,a,s){if(!0===i.hideUnusedParticipants){const t=new Set;a.forEach((e=>{t.add(e.from),t.add(e.to)})),n=n.filter((e=>t.has(e)))}let o,c=0,l=0,h=0;for(const u of n){const n=e[u],i=n.box;o&&o!=i&&(s||Oh.models.addBox(o),l+=Dh.boxMargin+o.margin),i&&i!=o&&(s||(i.x=c+l,i.y=r),l+=i.margin),n.width=n.width||Dh.width,n.height=Math.max(n.height||Dh.height,Dh.height),n.margin=n.margin||Dh.actorMargin,n.x=c+l,n.y=Oh.getVerticalPos();const a=Nh.drawActor(t,n,Dh,s);h=Math.max(h,a),Oh.insert(n.x,r,n.x+n.width,n.height),c+=n.width+l,n.box&&(n.box.width=c+i.margin-n.box.x),l=n.margin,o=n.box,Oh.models.addActor(n)}o&&!s&&Oh.models.addBox(o),Oh.bumpVerticalPos(h)},Rh=function(t,e,n,r){let i=0,a=0;for(const s of n){const n=e[s],o=zh(n),c=Nh.drawPopup(t,n,o,Dh,Dh.forceMenus,r);c.height>i&&(i=c.height),c.width+n.x>a&&(a=c.width+n.x)}return{maxHeight:i,maxWidth:a}},Zh=function(t){Sn(Dh,t),t.fontFamily&&(Dh.actorFontFamily=Dh.noteFontFamily=Dh.messageFontFamily=t.fontFamily),t.fontSize&&(Dh.actorFontSize=Dh.noteFontSize=Dh.messageFontSize=t.fontSize),t.fontWeight&&(Dh.actorFontWeight=Dh.noteFontWeight=Dh.messageFontWeight=t.fontWeight)},Ph=function(t){return Oh.activations.filter((function(e){return e.actor===t}))},jh=function(t,e){const n=e[t],r=Ph(t);return[r.reduce((function(t,e){return Math.min(t,e.startx)}),n.x+n.width/2),r.reduce((function(t,e){return Math.max(t,e.stopx)}),n.x+n.width/2)]};function Yh(t,e,n,r,i){Oh.bumpVerticalPos(n);let a=r;if(e.id&&e.message&&t[e.id]){const n=t[e.id].width,i=Mh(Dh);e.message=Gn.wrapLabel(`[${e.message}]`,n-2*Dh.wrapPadding,i),e.width=n,e.wrap=!0;const s=Gn.calculateTextDimensions(e.message,i),o=Math.max(s.height,Dh.labelBoxHeight);a=r+o,Nt.debug(`${o} - ${e.message}`)}i(e),Oh.bumpVerticalPos(a)}const zh=function(t){let e=0;const n=Fh(Dh);for(const r in t.links){const t=Gn.calculateTextDimensions(r,n).width+2*Dh.wrapPadding+2*Dh.boxMargin;e<t&&(e=t)}return e};const Uh=function(t,e,n,r){const i={},a=[];let s,o,c;return t.forEach((function(t){switch(t.id=Gn.random({length:10}),t.type){case r.db.LINETYPE.LOOP_START:case r.db.LINETYPE.ALT_START:case r.db.LINETYPE.OPT_START:case r.db.LINETYPE.PAR_START:case r.db.LINETYPE.CRITICAL_START:case r.db.LINETYPE.BREAK_START:a.push({id:t.id,msg:t.message,from:Number.MAX_SAFE_INTEGER,to:Number.MIN_SAFE_INTEGER,width:0});break;case r.db.LINETYPE.ALT_ELSE:case r.db.LINETYPE.PAR_AND:case r.db.LINETYPE.CRITICAL_OPTION:t.message&&(s=a.pop(),i[s.id]=s,i[t.id]=s,a.push(s));break;case r.db.LINETYPE.LOOP_END:case r.db.LINETYPE.ALT_END:case r.db.LINETYPE.OPT_END:case r.db.LINETYPE.PAR_END:case r.db.LINETYPE.CRITICAL_END:case r.db.LINETYPE.BREAK_END:s=a.pop(),i[s.id]=s;break;case r.db.LINETYPE.ACTIVE_START:{const n=e[t.from?t.from.actor:t.to.actor],r=Ph(t.from?t.from.actor:t.to.actor).length,i=n.x+n.width/2+(r-1)*Dh.activationWidth/2,a={startx:i,stopx:i+Dh.activationWidth,actor:t.from.actor,enabled:!0};Oh.activations.push(a)}break;case r.db.LINETYPE.ACTIVE_END:{const e=Oh.activations.map((t=>t.actor)).lastIndexOf(t.from.actor);delete Oh.activations.splice(e,1)[0]}}void 0!==t.placement?(o=function(t,e,n){const r=e[t.from].x,i=e[t.to].x,a=t.wrap&&t.message;let s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Dh.width,Ih(Dh)):t.message,Ih(Dh));const o={width:a?Dh.width:Math.max(Dh.width,s.width+2*Dh.noteMargin),height:0,startx:e[t.from].x,stopx:0,starty:0,stopy:0,message:t.message};return t.placement===n.db.PLACEMENT.RIGHTOF?(o.width=a?Math.max(Dh.width,s.width):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width+Dh.actorMargin)/2):t.placement===n.db.PLACEMENT.LEFTOF?(o.width=a?Math.max(Dh.width,s.width+2*Dh.noteMargin):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r-o.width+(e[t.from].width-Dh.actorMargin)/2):t.to===t.from?(s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Math.max(Dh.width,e[t.from].width),Ih(Dh)):t.message,Ih(Dh)),o.width=a?Math.max(Dh.width,e[t.from].width):Math.max(e[t.from].width,Dh.width,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width-o.width)/2):(o.width=Math.abs(r+e[t.from].width/2-(i+e[t.to].width/2))+Dh.actorMargin,o.startx=r<i?r+e[t.from].width/2-Dh.actorMargin/2:i+e[t.to].width/2-Dh.actorMargin/2),a&&(o.message=Gn.wrapLabel(t.message,o.width-2*Dh.wrapPadding,Ih(Dh))),Nt.debug(`NM:[${o.startx},${o.stopx},${o.starty},${o.stopy}:${o.width},${o.height}=${t.message}]`),o}(t,e,r),t.noteModel=o,a.forEach((t=>{s=t,s.from=Math.min(s.from,o.startx),s.to=Math.max(s.to,o.startx+o.width),s.width=Math.max(s.width,Math.abs(s.from-s.to))-Dh.labelBoxWidth}))):(c=function(t,e,n){let r=!1;if([n.db.LINETYPE.SOLID_OPEN,n.db.LINETYPE.DOTTED_OPEN,n.db.LINETYPE.SOLID,n.db.LINETYPE.DOTTED,n.db.LINETYPE.SOLID_CROSS,n.db.LINETYPE.DOTTED_CROSS,n.db.LINETYPE.SOLID_POINT,n.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(r=!0),!r)return{};const i=jh(t.from,e),a=jh(t.to,e),s=i[0]<=a[0]?1:0,o=i[0]<a[0]?0:1,c=[...i,...a],l=Math.abs(a[o]-i[s]);t.wrap&&t.message&&(t.message=Gn.wrapLabel(t.message,Math.max(l+2*Dh.wrapPadding,Dh.width),Mh(Dh)));const h=Gn.calculateTextDimensions(t.message,Mh(Dh));return{width:Math.max(t.wrap?0:h.width+2*Dh.wrapPadding,l+2*Dh.wrapPadding,Dh.width),height:0,startx:i[s],stopx:a[o],starty:0,stopy:0,message:t.message,type:t.type,wrap:t.wrap,fromBounds:Math.min.apply(null,c),toBounds:Math.max.apply(null,c)}}(t,e,r),t.msgModel=c,c.startx&&c.stopx&&a.length>0&&a.forEach((n=>{if(s=n,c.startx===c.stopx){const n=e[t.from],r=e[t.to];s.from=Math.min(n.x-c.width/2,n.x-n.width/2,s.from),s.to=Math.max(r.x+c.width/2,r.x+n.width/2,s.to),s.width=Math.max(s.width,Math.abs(s.to-s.from))-Dh.labelBoxWidth}else s.from=Math.min(c.startx,s.from),s.to=Math.max(c.stopx,s.to),s.width=Math.max(s.width,c.width)-Dh.labelBoxWidth})))})),Oh.activations=[],Nt.debug("Loop type widths:",i),i},Wh={bounds:Oh,drawActors:$h,drawActorsPopup:Rh,setConf:Zh,draw:function(t,e,n,r){const{securityLevel:i,sequence:a}=ar();let s;Dh=a,r.db.clear(),r.parser.parse(t),"sandbox"===i&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===i?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l="sandbox"===i?s.nodes()[0].contentDocument:document;Oh.init(),Nt.debug(r.db);const h="sandbox"===i?c.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`),u=r.db.getActors(),d=r.db.getBoxes(),p=r.db.getActorKeys(),f=r.db.getMessages(),g=r.db.getDiagramTitle(),y=r.db.hasAtLeastOneBox(),m=r.db.hasAtLeastOneBoxWithTitle(),b=function(t,e,n){const r={};return e.forEach((function(e){if(t[e.to]&&t[e.from]){const i=t[e.to];if(e.placement===n.db.PLACEMENT.LEFTOF&&!i.prevActor)return;if(e.placement===n.db.PLACEMENT.RIGHTOF&&!i.nextActor)return;const a=void 0!==e.placement,s=!a,o=a?Ih(Dh):Mh(Dh),c=e.wrap?Gn.wrapLabel(e.message,Dh.width-2*Dh.wrapPadding,o):e.message,l=Gn.calculateTextDimensions(c,o).width+2*Dh.wrapPadding;s&&e.from===i.nextActor?r[e.to]=Math.max(r[e.to]||0,l):s&&e.from===i.prevActor?r[e.from]=Math.max(r[e.from]||0,l):s&&e.from===e.to?(r[e.from]=Math.max(r[e.from]||0,l/2),r[e.to]=Math.max(r[e.to]||0,l/2)):e.placement===n.db.PLACEMENT.RIGHTOF?r[e.from]=Math.max(r[e.from]||0,l):e.placement===n.db.PLACEMENT.LEFTOF?r[i.prevActor]=Math.max(r[i.prevActor]||0,l):e.placement===n.db.PLACEMENT.OVER&&(i.prevActor&&(r[i.prevActor]=Math.max(r[i.prevActor]||0,l/2)),i.nextActor&&(r[e.from]=Math.max(r[e.from]||0,l/2)))}})),Nt.debug("maxMessageWidthPerActor:",r),r}(u,f,r);Dh.height=function(t,e,n){let r=0;Object.keys(t).forEach((e=>{const n=t[e];n.wrap&&(n.description=Gn.wrapLabel(n.description,Dh.width-2*Dh.wrapPadding,Fh(Dh)));const i=Gn.calculateTextDimensions(n.description,Fh(Dh));n.width=n.wrap?Dh.width:Math.max(Dh.width,i.width+2*Dh.wrapPadding),n.height=n.wrap?Math.max(i.height,Dh.height):Dh.height,r=Math.max(r,n.height)}));for(const a in e){const n=t[a];if(!n)continue;const r=t[n.nextActor];if(!r){const t=e[a]+Dh.actorMargin-n.width/2;n.margin=Math.max(t,Dh.actorMargin);continue}const i=e[a]+Dh.actorMargin-n.width/2-r.width/2;n.margin=Math.max(i,Dh.actorMargin)}let i=0;return n.forEach((e=>{const n=Mh(Dh);let r=e.actorKeys.reduce(((e,n)=>e+(t[n].width+(t[n].margin||0))),0);r-=2*Dh.boxTextMargin,e.wrap&&(e.name=Gn.wrapLabel(e.name,r-2*Dh.wrapPadding,n));const a=Gn.calculateTextDimensions(e.name,n);i=Math.max(a.height,i);const s=Math.max(r,a.width+2*Dh.wrapPadding);if(e.margin=Dh.boxTextMargin,r<s){const t=(s-r)/2;e.margin+=t}})),n.forEach((t=>t.textMaxHeight=i)),Math.max(r,Dh.height)}(u,b,d),Nh.insertComputerIcon(h),Nh.insertDatabaseIcon(h),Nh.insertClockIcon(h),y&&(Oh.bumpVerticalPos(Dh.boxMargin),m&&Oh.bumpVerticalPos(d[0].textMaxHeight)),$h(h,u,p,0,Dh,f,!1);const _=Uh(f,u,b,r);Nh.insertArrowHead(h),Nh.insertArrowCrossHead(h),Nh.insertArrowFilledHead(h),Nh.insertSequenceNumber(h);let x=1,v=1;const k=[];f.forEach((function(t){let e,n,i;switch(t.type){case r.db.LINETYPE.NOTE:n=t.noteModel,function(t,e){Oh.bumpVerticalPos(Dh.boxMargin),e.height=Dh.boxMargin,e.starty=Oh.getVerticalPos();const n=Nh.getNoteRect();n.x=e.startx,n.y=e.starty,n.width=e.width||Dh.width,n.class="note";const r=t.append("g"),i=Nh.drawRect(r,n),a=Nh.getTextObj();a.x=e.startx,a.y=e.starty,a.width=n.width,a.dy="1em",a.text=e.message,a.class="noteText",a.fontFamily=Dh.noteFontFamily,a.fontSize=Dh.noteFontSize,a.fontWeight=Dh.noteFontWeight,a.anchor=Dh.noteAlign,a.textMargin=Dh.noteMargin,a.valign="center";const s=kh(r,a),o=Math.round(s.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));i.attr("height",o+2*Dh.noteMargin),e.height+=o+2*Dh.noteMargin,Oh.bumpVerticalPos(o+2*Dh.noteMargin),e.stopy=e.starty+o+2*Dh.noteMargin,e.stopx=e.startx+n.width,Oh.insert(e.startx,e.starty,e.stopx,e.stopy),Oh.models.addNote(e)}(h,n);break;case r.db.LINETYPE.ACTIVE_START:Oh.newActivation(t,h,u);break;case r.db.LINETYPE.ACTIVE_END:!function(t,e){const n=Oh.endActivation(t);n.starty+18>e&&(n.starty=e-6,e+=12),Nh.drawActivation(h,n,e,Dh,Ph(t.from.actor).length),Oh.insert(n.startx,e-10,n.stopx,e)}(t,Oh.getVerticalPos());break;case r.db.LINETYPE.LOOP_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.LOOP_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"loop",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.RECT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin,(t=>Oh.newLoop(void 0,t.message)));break;case r.db.LINETYPE.RECT_END:e=Oh.endLoop(),Nh.drawBackgroundRect(h,e),Oh.models.addLoop(e),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos());break;case r.db.LINETYPE.OPT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.OPT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"opt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.ALT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.ALT_ELSE:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.ALT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"alt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.PAR_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.PAR_AND:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.PAR_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"par",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.AUTONUMBER:x=t.message.start||x,v=t.message.step||v,t.message.visible?r.db.enableSequenceNumbers():r.db.disableSequenceNumbers();break;case r.db.LINETYPE.CRITICAL_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.CRITICAL_OPTION:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.CRITICAL_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"critical",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.BREAK_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.BREAK_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"break",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;default:try{i=t.msgModel,i.starty=Oh.getVerticalPos(),i.sequenceIndex=x,i.sequenceVisible=r.db.showSequenceNumbers();const e=function(t,e){Oh.bumpVerticalPos(10);const{startx:n,stopx:r,message:i}=e,a=Yt.splitBreaks(i).length,s=Gn.calculateTextDimensions(i,Mh(Dh)),o=s.height/a;let c;e.height+=o,Oh.bumpVerticalPos(o);let l=s.height-10;const h=s.width;if(n===r){c=Oh.getVerticalPos()+l,Dh.rightAngles||(l+=Dh.boxMargin,c=Oh.getVerticalPos()+l),l+=30;const t=Math.max(h/2,Dh.width/2);Oh.insert(n-t,Oh.getVerticalPos()-10+l,r+t,Oh.getVerticalPos()+30+l)}else l+=Dh.boxMargin,c=Oh.getVerticalPos()+l,Oh.insert(n,c-10,r,c);return Oh.bumpVerticalPos(l),e.height+=l,e.stopy=e.starty+e.height,Oh.insert(e.fromBounds,e.starty,e.toBounds,e.stopy),c}(0,i);k.push({messageModel:i,lineStartY:e}),Oh.models.addMessage(i)}catch(a){Nt.error("error while drawing message",a)}}[r.db.LINETYPE.SOLID_OPEN,r.db.LINETYPE.DOTTED_OPEN,r.db.LINETYPE.SOLID,r.db.LINETYPE.DOTTED,r.db.LINETYPE.SOLID_CROSS,r.db.LINETYPE.DOTTED_CROSS,r.db.LINETYPE.SOLID_POINT,r.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(x+=v)})),k.forEach((t=>function(t,e,n,r){const{startx:i,stopx:a,starty:s,message:o,type:c,sequenceIndex:l,sequenceVisible:h}=e,u=Gn.calculateTextDimensions(o,Mh(Dh)),d=Nh.getTextObj();d.x=i,d.y=s+10,d.width=a-i,d.class="messageText",d.dy="1em",d.text=o,d.fontFamily=Dh.messageFontFamily,d.fontSize=Dh.messageFontSize,d.fontWeight=Dh.messageFontWeight,d.anchor=Dh.messageAlign,d.valign="center",d.textMargin=Dh.wrapPadding,d.tspan=!1,kh(t,d);const p=u.width;let f;i===a?f=Dh.rightAngles?t.append("path").attr("d",`M  ${i},${n} H ${i+Math.max(Dh.width/2,p/2)} V ${n+25} H ${i}`):t.append("path").attr("d","M "+i+","+n+" C "+(i+60)+","+(n-10)+" "+(i+60)+","+(n+30)+" "+i+","+(n+20)):(f=t.append("line"),f.attr("x1",i),f.attr("y1",n),f.attr("x2",a),f.attr("y2",n)),c===r.db.LINETYPE.DOTTED||c===r.db.LINETYPE.DOTTED_CROSS||c===r.db.LINETYPE.DOTTED_POINT||c===r.db.LINETYPE.DOTTED_OPEN?(f.style("stroke-dasharray","3, 3"),f.attr("class","messageLine1")):f.attr("class","messageLine0");let g="";Dh.arrowMarkerAbsolute&&(g=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,g=g.replace(/\(/g,"\\("),g=g.replace(/\)/g,"\\)")),f.attr("stroke-width",2),f.attr("stroke","none"),f.style("fill","none"),c!==r.db.LINETYPE.SOLID&&c!==r.db.LINETYPE.DOTTED||f.attr("marker-end","url("+g+"#arrowhead)"),c!==r.db.LINETYPE.SOLID_POINT&&c!==r.db.LINETYPE.DOTTED_POINT||f.attr("marker-end","url("+g+"#filled-head)"),c!==r.db.LINETYPE.SOLID_CROSS&&c!==r.db.LINETYPE.DOTTED_CROSS||f.attr("marker-end","url("+g+"#crosshead)"),(h||Dh.showSequenceNumbers)&&(f.attr("marker-start","url("+g+"#sequencenumber)"),t.append("text").attr("x",i).attr("y",n+4).attr("font-family","sans-serif").attr("font-size","12px").attr("text-anchor","middle").attr("class","sequenceNumber").text(l))}(h,t.messageModel,t.lineStartY,r))),Dh.mirrorActors&&(Oh.bumpVerticalPos(2*Dh.boxMargin),$h(h,u,p,Oh.getVerticalPos(),Dh,f,!0),Oh.bumpVerticalPos(Dh.boxMargin),Ch(h,Oh.getVerticalPos())),Oh.models.boxes.forEach((function(t){t.height=Oh.getVerticalPos()-t.y,Oh.insert(t.x,t.y,t.x+t.width,t.height),t.startx=t.x,t.starty=t.y,t.stopx=t.startx+t.width,t.stopy=t.starty+t.height,t.stroke="rgb(0,0,0, 0.5)",Nh.drawBox(h,t,Dh)})),y&&Oh.bumpVerticalPos(Dh.boxMargin);const w=Rh(h,u,p,l),{bounds:E}=Oh.getBounds();Nt.debug("For line height fix Querying: #"+e+" .actor-line");(0,o.td_)("#"+e+" .actor-line").attr("y2",E.stopy);let C=E.stopy-E.starty;C<w.maxHeight&&(C=w.maxHeight);let T=C+2*Dh.diagramMarginY;Dh.mirrorActors&&(T=T-Dh.boxMargin+Dh.bottomMarginAdj);let S=E.stopx-E.startx;S<w.maxWidth&&(S=w.maxWidth);const A=S+2*Dh.diagramMarginX;g&&h.append("text").text(g).attr("x",(E.stopx-E.startx)/2-2*Dh.diagramMarginX).attr("y",-25),dr(h,T,A,Dh.useMaxWidth);const L=g?40:0;h.attr("viewBox",E.startx-Dh.diagramMarginX+" -"+(Dh.diagramMarginY+L)+" "+A+" "+(T+L)),Nt.debug("models:",Oh.models)}};var qh=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,21],h=[1,22],u=[1,23],d=[1,24],p=[1,37],f=[1,25],g=[1,26],y=[1,27],m=[1,28],b=[1,29],_=[1,32],x=[1,33],v=[1,34],k=[1,35],w=[1,36],E=[1,39],C=[1,40],T=[1,41],S=[1,42],A=[1,38],L=[1,45],B=[1,4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],N=[1,4,5,14,15,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],D=[1,4,5,7,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],O=[4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],M={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NL:5,directive:6,SD:7,document:8,line:9,statement:10,classDefStatement:11,cssClassStatement:12,idStatement:13,DESCR:14,"--\x3e":15,HIDE_EMPTY:16,scale:17,WIDTH:18,COMPOSIT_STATE:19,STRUCT_START:20,STRUCT_STOP:21,STATE_DESCR:22,AS:23,ID:24,FORK:25,JOIN:26,CHOICE:27,CONCURRENT:28,note:29,notePosition:30,NOTE_TEXT:31,direction:32,acc_title:33,acc_title_value:34,acc_descr:35,acc_descr_value:36,acc_descr_multiline_value:37,classDef:38,CLASSDEF_ID:39,CLASSDEF_STYLEOPTS:40,DEFAULT:41,class:42,CLASSENTITY_IDS:43,STYLECLASS:44,openDirective:45,typeDirective:46,closeDirective:47,":":48,argDirective:49,direction_tb:50,direction_bt:51,direction_rl:52,direction_lr:53,eol:54,";":55,EDGE_STATE:56,STYLE_SEPARATOR:57,left_of:58,right_of:59,open_directive:60,type_directive:61,arg_directive:62,close_directive:63,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NL",7:"SD",14:"DESCR",15:"--\x3e",16:"HIDE_EMPTY",17:"scale",18:"WIDTH",19:"COMPOSIT_STATE",20:"STRUCT_START",21:"STRUCT_STOP",22:"STATE_DESCR",23:"AS",24:"ID",25:"FORK",26:"JOIN",27:"CHOICE",28:"CONCURRENT",29:"note",31:"NOTE_TEXT",33:"acc_title",34:"acc_title_value",35:"acc_descr",36:"acc_descr_value",37:"acc_descr_multiline_value",38:"classDef",39:"CLASSDEF_ID",40:"CLASSDEF_STYLEOPTS",41:"DEFAULT",42:"class",43:"CLASSENTITY_IDS",44:"STYLECLASS",48:":",50:"direction_tb",51:"direction_bt",52:"direction_rl",53:"direction_lr",55:";",56:"EDGE_STATE",57:"STYLE_SEPARATOR",58:"left_of",59:"right_of",60:"open_directive",61:"type_directive",62:"arg_directive",63:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[10,1],[10,1],[10,1],[10,2],[10,3],[10,4],[10,1],[10,2],[10,1],[10,4],[10,3],[10,6],[10,1],[10,1],[10,1],[10,1],[10,4],[10,4],[10,1],[10,1],[10,2],[10,2],[10,1],[11,3],[11,3],[12,3],[6,3],[6,5],[32,1],[32,1],[32,1],[32,1],[54,1],[54,1],[13,1],[13,1],[13,3],[13,3],[30,1],[30,1],[45,1],[46,1],[49,1],[47,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.setRootDoc(a[o]),a[o];case 5:this.$=[];break;case 6:"nl"!=a[o]&&(a[o-1].push(a[o]),this.$=a[o-1]);break;case 7:case 8:case 12:this.$=a[o];break;case 9:this.$="nl";break;case 13:const t=a[o-1];t.description=r.trimColon(a[o]),this.$=t;break;case 14:this.$={stmt:"relation",state1:a[o-2],state2:a[o]};break;case 15:const e=r.trimColon(a[o]);this.$={stmt:"relation",state1:a[o-3],state2:a[o-1],description:e};break;case 19:this.$={stmt:"state",id:a[o-3],type:"default",description:"",doc:a[o-1]};break;case 20:var c=a[o],l=a[o-2].trim();if(a[o].match(":")){var h=a[o].split(":");c=h[0],l=[l,h[1]]}this.$={stmt:"state",id:c,type:"default",description:l};break;case 21:this.$={stmt:"state",id:a[o-3],type:"default",description:a[o-5],doc:a[o-1]};break;case 22:this.$={stmt:"state",id:a[o],type:"fork"};break;case 23:this.$={stmt:"state",id:a[o],type:"join"};break;case 24:this.$={stmt:"state",id:a[o],type:"choice"};break;case 25:this.$={stmt:"state",id:r.getDividerId(),type:"divider"};break;case 26:this.$={stmt:"state",id:a[o-1].trim(),note:{position:a[o-2].trim(),text:a[o].trim()}};break;case 30:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 31:case 32:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 33:case 34:this.$={stmt:"classDef",id:a[o-1].trim(),classes:a[o].trim()};break;case 35:this.$={stmt:"applyClass",id:a[o-1].trim(),styleClass:a[o].trim()};break;case 38:r.setDirection("TB"),this.$={stmt:"dir",value:"TB"};break;case 39:r.setDirection("BT"),this.$={stmt:"dir",value:"BT"};break;case 40:r.setDirection("RL"),this.$={stmt:"dir",value:"RL"};break;case 41:r.setDirection("LR"),this.$={stmt:"dir",value:"LR"};break;case 44:case 45:this.$={stmt:"state",id:a[o].trim(),type:"default",description:""};break;case 46:case 47:this.$={stmt:"state",id:a[o-2].trim(),classes:[a[o].trim()],type:"default",description:""};break;case 50:r.parseDirective("%%{","open_directive");break;case 51:r.parseDirective(a[o],"type_directive");break;case 52:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 53:r.parseDirective("}%%","close_directive","state")}},table:[{3:1,4:n,5:r,6:4,7:i,45:6,60:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,45:6,60:a},{3:9,4:n,5:r,6:4,7:i,45:6,60:a},{3:10,4:n,5:r,6:4,7:i,45:6,60:a},e([1,4,5,16,17,19,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],s,{8:11}),{46:12,61:[1,13]},{61:[2,50]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},{47:43,48:[1,44],63:L},e([48,63],[2,51]),e(B,[2,6]),{6:30,10:46,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,8]),e(B,[2,9]),e(B,[2,10]),e(B,[2,11]),e(B,[2,12],{14:[1,47],15:[1,48]}),e(B,[2,16]),{18:[1,49]},e(B,[2,18],{20:[1,50]}),{23:[1,51]},e(B,[2,22]),e(B,[2,23]),e(B,[2,24]),e(B,[2,25]),{30:52,31:[1,53],58:[1,54],59:[1,55]},e(B,[2,28]),e(B,[2,29]),{34:[1,56]},{36:[1,57]},e(B,[2,32]),{39:[1,58],41:[1,59]},{43:[1,60]},e(N,[2,44],{57:[1,61]}),e(N,[2,45],{57:[1,62]}),e(B,[2,38]),e(B,[2,39]),e(B,[2,40]),e(B,[2,41]),e(D,[2,36]),{49:63,62:[1,64]},e(D,[2,53]),e(B,[2,7]),e(B,[2,13]),{13:65,24:p,56:A},e(B,[2,17]),e(O,s,{8:66}),{24:[1,67]},{24:[1,68]},{23:[1,69]},{24:[2,48]},{24:[2,49]},e(B,[2,30]),e(B,[2,31]),{40:[1,70]},{40:[1,71]},{44:[1,72]},{24:[1,73]},{24:[1,74]},{47:75,63:L},{63:[2,52]},e(B,[2,14],{14:[1,76]}),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,77],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,20],{20:[1,78]}),{31:[1,79]},{24:[1,80]},e(B,[2,33]),e(B,[2,34]),e(B,[2,35]),e(N,[2,46]),e(N,[2,47]),e(D,[2,37]),e(B,[2,15]),e(B,[2,19]),e(O,s,{8:81}),e(B,[2,26]),e(B,[2,27]),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,82],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,21])],defaultActions:{7:[2,50],8:[2,1],9:[2,2],10:[2,3],54:[2,48],55:[2,49],64:[2,52]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},I=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 41;case 1:case 44:return 50;case 2:case 45:return 51;case 3:case 46:return 52;case 4:case 47:return 53;case 5:return this.begin("open_directive"),60;case 6:return this.begin("type_directive"),61;case 7:return this.popState(),this.begin("arg_directive"),48;case 8:return this.popState(),this.popState(),63;case 9:return 62;case 10:case 11:case 13:case 14:case 15:case 16:case 56:case 58:case 64:break;case 12:case 79:return 5;case 17:case 34:return this.pushState("SCALE"),17;case 18:case 35:return 18;case 19:case 25:case 36:case 51:case 54:this.popState();break;case 20:return this.begin("acc_title"),33;case 21:return this.popState(),"acc_title_value";case 22:return this.begin("acc_descr"),35;case 23:return this.popState(),"acc_descr_value";case 24:this.begin("acc_descr_multiline");break;case 26:return"acc_descr_multiline_value";case 27:return this.pushState("CLASSDEF"),38;case 28:return this.popState(),this.pushState("CLASSDEFID"),"DEFAULT_CLASSDEF_ID";case 29:return this.popState(),this.pushState("CLASSDEFID"),39;case 30:return this.popState(),40;case 31:return this.pushState("CLASS"),42;case 32:return this.popState(),this.pushState("CLASS_STYLE"),43;case 33:return this.popState(),44;case 37:this.pushState("STATE");break;case 38:case 41:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),25;case 39:case 42:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),26;case 40:case 43:return this.popState(),e.yytext=e.yytext.slice(0,-10).trim(),27;case 48:this.pushState("STATE_STRING");break;case 49:return this.pushState("STATE_ID"),"AS";case 50:case 66:return this.popState(),"ID";case 52:return"STATE_DESCR";case 53:return 19;case 55:return this.popState(),this.pushState("struct"),20;case 57:return this.popState(),21;case 59:return this.begin("NOTE"),29;case 60:return this.popState(),this.pushState("NOTE_ID"),58;case 61:return this.popState(),this.pushState("NOTE_ID"),59;case 62:this.popState(),this.pushState("FLOATING_NOTE");break;case 63:return this.popState(),this.pushState("FLOATING_NOTE_ID"),"AS";case 65:return"NOTE_TEXT";case 67:return this.popState(),this.pushState("NOTE_TEXT"),24;case 68:return this.popState(),e.yytext=e.yytext.substr(2).trim(),31;case 69:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),31;case 70:case 71:return 7;case 72:return 16;case 73:return 56;case 74:return 24;case 75:return e.yytext=e.yytext.trim(),14;case 76:return 15;case 77:return 28;case 78:return 57;case 80:return"INVALID"}},rules:[/^(?:default\b)/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:[\s]+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:classDef\s+)/i,/^(?:DEFAULT\s+)/i,/^(?:\w+\s+)/i,/^(?:[^\n]*)/i,/^(?:class\s+)/i,/^(?:(\w+)+((,\s*\w+)*))/i,/^(?:[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:state\s+)/i,/^(?:.*<<fork>>)/i,/^(?:.*<<join>>)/i,/^(?:.*<<choice>>)/i,/^(?:.*\[\[fork\]\])/i,/^(?:.*\[\[join\]\])/i,/^(?:.*\[\[choice\]\])/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:["])/i,/^(?:\s*as\s+)/i,/^(?:[^\n\{]*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n\s\{]+)/i,/^(?:\n)/i,/^(?:\{)/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:\})/i,/^(?:[\n])/i,/^(?:note\s+)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:")/i,/^(?:\s*as\s*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n]*)/i,/^(?:\s*[^:\n\s\-]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:[\s\S]*?end note\b)/i,/^(?:stateDiagram\s+)/i,/^(?:stateDiagram-v2\s+)/i,/^(?:hide empty description\b)/i,/^(?:\[\*\])/i,/^(?:[^:\n\s\-\{]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:-->)/i,/^(?:--)/i,/^(?::::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{LINE:{rules:[14,15],inclusive:!1},close_directive:{rules:[14,15],inclusive:!1},arg_directive:{rules:[8,9,14,15],inclusive:!1},type_directive:{rules:[7,8,14,15],inclusive:!1},open_directive:{rules:[6,14,15],inclusive:!1},struct:{rules:[14,15,27,31,37,44,45,46,47,56,57,58,59,73,74,75,76,77],inclusive:!1},FLOATING_NOTE_ID:{rules:[66],inclusive:!1},FLOATING_NOTE:{rules:[63,64,65],inclusive:!1},NOTE_TEXT:{rules:[68,69],inclusive:!1},NOTE_ID:{rules:[67],inclusive:!1},NOTE:{rules:[60,61,62],inclusive:!1},CLASS_STYLE:{rules:[33],inclusive:!1},CLASS:{rules:[32],inclusive:!1},CLASSDEFID:{rules:[30],inclusive:!1},CLASSDEF:{rules:[28,29],inclusive:!1},acc_descr_multiline:{rules:[25,26],inclusive:!1},acc_descr:{rules:[23],inclusive:!1},acc_title:{rules:[21],inclusive:!1},SCALE:{rules:[18,19,35,36],inclusive:!1},ALIAS:{rules:[],inclusive:!1},STATE_ID:{rules:[50],inclusive:!1},STATE_STRING:{rules:[51,52],inclusive:!1},FORK_STATE:{rules:[],inclusive:!1},STATE:{rules:[14,15,38,39,40,41,42,43,48,49,53,54,55],inclusive:!1},ID:{rules:[14,15],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,5,10,11,12,13,15,16,17,20,22,24,27,31,34,37,55,59,70,71,72,73,74,75,76,78,79,80],inclusive:!0}}},t);function F(){this.yy={}}return M.lexer=I,F.prototype=M,M.Parser=F,new F}();qh.parser=qh;const Hh=qh,Vh=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*stateDiagram/)},Gh=(t,e)=>{var n;return null!==t.match(/^\s*stateDiagram-v2/)||!(!t.match(/^\s*stateDiagram/)||"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer))},Xh="state",Kh="relation",Qh="default",Jh="divider",tu="[*]",eu="start",nu="color",ru="fill";let iu="LR",au=[],su={};let ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,hu=0;const uu=t=>JSON.parse(JSON.stringify(t)),du=(t,e,n)=>{if(e.stmt===Kh)du(t,e.state1,!0),du(t,e.state2,!1);else if(e.stmt===Xh&&("[*]"===e.id?(e.id=n?t.id+"_start":t.id+"_end",e.start=n):e.id=e.id.trim()),e.doc){const t=[];let n,r=[];for(n=0;n<e.doc.length;n++)if(e.doc[n].type===Jh){const i=uu(e.doc[n]);i.doc=uu(r),t.push(i),r=[]}else r.push(e.doc[n]);if(t.length>0&&r.length>0){const n={stmt:Xh,id:Fn(),type:"divider",doc:uu(r)};t.push(uu(n)),e.doc=t}e.doc.forEach((t=>du(e,t,!0)))}},pu=function(t,e="default",n=null,r=null,i=null,a=null,s=null,o=null){const c=null==t?void 0:t.trim();if(void 0===cu.states[c]?(Nt.info("Adding state ",c,r),cu.states[c]={id:c,descriptions:[],type:e,doc:n,note:i,classes:[],styles:[],textStyles:[]}):(cu.states[c].doc||(cu.states[c].doc=n),cu.states[c].type||(cu.states[c].type=e)),r&&(Nt.info("Setting state description",c,r),"string"==typeof r&&_u(c,r.trim()),"object"==typeof r&&r.forEach((t=>_u(c,t.trim())))),i&&(cu.states[c].note=i,cu.states[c].note.text=Yt.sanitizeText(cu.states[c].note.text,ar())),a){Nt.info("Setting state classes",c,a);("string"==typeof a?[a]:a).forEach((t=>vu(c,t.trim())))}if(s){Nt.info("Setting state styles",c,s);("string"==typeof s?[s]:s).forEach((t=>ku(c,t.trim())))}if(o){Nt.info("Setting state styles",c,s);("string"==typeof o?[o]:o).forEach((t=>wu(c,t.trim())))}},fu=function(t){ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,su={},t||Dr()},gu=function(t){return cu.states[t]};function yu(t=""){let e=t;return t===tu&&(lu++,e=`start${lu}`),e}function mu(t="",e="default"){return t===tu?eu:e}const bu=function(t,e,n){if("object"==typeof t)!function(t,e,n){let r=yu(t.id.trim()),i=mu(t.id.trim(),t.type),a=yu(e.id.trim()),s=mu(e.id.trim(),e.type);pu(r,i,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles),pu(a,s,e.doc,e.description,e.note,e.classes,e.styles,e.textStyles),cu.relations.push({id1:r,id2:a,relationTitle:Yt.sanitizeText(n,ar())})}(t,e,n);else{const r=yu(t.trim()),i=mu(t),a=function(t=""){let e=t;return"[*]"===t&&(lu++,e=`end${lu}`),e}(e.trim()),s=function(t="",e="default"){return"[*]"===t?"end":e}(e);pu(r,i),pu(a,s),cu.relations.push({id1:r,id2:a,title:Yt.sanitizeText(n,ar())})}},_u=function(t,e){const n=cu.states[t],r=e.startsWith(":")?e.replace(":","").trim():e;n.descriptions.push(Yt.sanitizeText(r,ar()))},xu=function(t,e=""){void 0===su[t]&&(su[t]={id:t,styles:[],textStyles:[]});const n=su[t];null!=e&&e.split(",").forEach((t=>{const e=t.replace(/([^;]*);/,"$1").trim();if(t.match(nu)){const t=e.replace(ru,"bgFill").replace(nu,ru);n.textStyles.push(t)}n.styles.push(e)}))},vu=function(t,e){t.split(",").forEach((function(t){let n=gu(t);if(void 0===n){const e=t.trim();pu(e),n=gu(e)}n.classes.push(e)}))},ku=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},wu=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},Eu={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().state,addState:pu,clear:fu,getState:gu,getStates:function(){return cu.states},getRelations:function(){return cu.relations},getClasses:function(){return su},getDirection:()=>iu,addRelation:bu,getDividerId:()=>(hu++,"divider-id-"+hu),setDirection:t=>{iu=t},cleanupLabel:function(t){return":"===t.substring(0,1)?t.substr(2).trim():t.trim()},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3},logDocuments:function(){Nt.info("Documents = ",ou)},getRootDoc:()=>au,setRootDoc:t=>{Nt.info("Setting root doc",t),au=t},getRootDocV2:()=>(du({id:"root"},{id:"root",doc:au},!0),{id:"root",doc:au}),extract:t=>{let e;e=t.doc?t.doc:t,Nt.info(e),fu(!0),Nt.info("Extract",e),e.forEach((t=>{switch(t.stmt){case Xh:pu(t.id.trim(),t.type,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles);break;case Kh:bu(t.state1,t.state2,t.description);break;case"classDef":xu(t.id.trim(),t.classes);break;case"applyClass":vu(t.id.trim(),t.styleClass)}}))},trimColon:t=>t&&":"===t[0]?t.substr(1).trim():t.trim(),getAccTitle:Mr,setAccTitle:Or,getAccDescription:Fr,setAccDescription:Ir,addStyleClass:xu,setCssClass:vu,addDescription:_u,setDiagramTitle:$r,getDiagramTitle:Rr},Cu={},Tu=(t,e)=>{Cu[t]=e},Su=(t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+1.3*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.descriptions[0]).node().getBBox(),r=n.height,i=t.append("text").attr("x",ar().state.padding).attr("y",r+.4*ar().state.padding+ar().state.dividerMargin+ar().state.textHeight).attr("class","state-description");let a=!0,s=!0;e.descriptions.forEach((function(t){a||(!function(t,e,n){const r=t.append("tspan").attr("x",2*ar().state.padding).text(e);n||r.attr("dy",ar().state.textHeight)}(i,t,s),s=!1),a=!1}));const o=t.append("line").attr("x1",ar().state.padding).attr("y1",ar().state.padding+r+ar().state.dividerMargin/2).attr("y2",ar().state.padding+r+ar().state.dividerMargin/2).attr("class","descr-divider"),c=i.node().getBBox(),l=Math.max(c.width,n.width);return o.attr("x2",l+3*ar().state.padding),t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",l+2*ar().state.padding).attr("height",c.height+r+2*ar().state.padding).attr("rx",ar().state.radius),t},Au=(t,e,n)=>{const r=ar().state.padding,i=2*ar().state.padding,a=t.node().getBBox(),s=a.width,o=a.x,c=t.append("text").attr("x",0).attr("y",ar().state.titleShift).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),l=c.node().getBBox().width+i;let h,u=Math.max(l,s);u===s&&(u+=i);const d=t.node().getBBox();e.doc,h=o-r,l>s&&(h=(s-u)/2+r),Math.abs(o-d.x)<r&&l>s&&(h=o-(l-s)/2);const p=1-ar().state.textHeight;return t.insert("rect",":first-child").attr("x",h).attr("y",p).attr("class",n?"alt-composit":"composit").attr("width",u).attr("height",d.height+ar().state.textHeight+ar().state.titleShift+1).attr("rx","0"),c.attr("x",h+r),l<=s&&c.attr("x",o+(u-i)/2-l/2+r),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",3*ar().state.textHeight).attr("rx",ar().state.radius),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",d.height+3+2*ar().state.textHeight).attr("rx",ar().state.radius),t},Lu=(t,e)=>{e.attr("class","state-note");const n=e.append("rect").attr("x",0).attr("y",ar().state.padding),r=e.append("g"),{textWidth:i,textHeight:a}=((t,e,n,r)=>{let i=0;const a=r.append("text");a.style("text-anchor","start"),a.attr("class","noteText");let s=t.replace(/\r\n/g,"<br/>");s=s.replace(/\n/g,"<br/>");const o=s.split(Yt.lineBreakRegex);let c=1.25*ar().state.noteMargin;for(const l of o){const t=l.trim();if(t.length>0){const r=a.append("tspan");r.text(t),0===c&&(c+=r.node().getBBox().height),i+=c,r.attr("x",e+ar().state.noteMargin),r.attr("y",n+i+1.25*ar().state.noteMargin)}}return{textWidth:a.node().getBBox().width,textHeight:i}})(t,0,0,r);return n.attr("height",a+2*ar().state.noteMargin),n.attr("width",i+2*ar().state.noteMargin),n},Bu=function(t,e){const n=e.id,r={id:n,label:e.id,width:0,height:0},i=t.append("g").attr("id",n).attr("class","stateGroup");"start"===e.type&&(t=>{t.append("circle").attr("class","start-state").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit).attr("cy",ar().state.padding+ar().state.sizeUnit)})(i),"end"===e.type&&(t=>{t.append("circle").attr("class","end-state-outer").attr("r",ar().state.sizeUnit+ar().state.miniPadding).attr("cx",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding).attr("cy",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding),t.append("circle").attr("class","end-state-inner").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit+2).attr("cy",ar().state.padding+ar().state.sizeUnit+2)})(i),"fork"!==e.type&&"join"!==e.type||((t,e)=>{let n=ar().state.forkWidth,r=ar().state.forkHeight;if(e.parentId){let t=n;n=r,r=t}t.append("rect").style("stroke","black").style("fill","black").attr("width",n).attr("height",r).attr("x",ar().state.padding).attr("y",ar().state.padding)})(i,e),"note"===e.type&&Lu(e.note.text,i),"divider"===e.type&&(t=>{t.append("line").style("stroke","grey").style("stroke-dasharray","3").attr("x1",ar().state.textHeight).attr("class","divider").attr("x2",2*ar().state.textHeight).attr("y1",0).attr("y2",0)})(i),"default"===e.type&&0===e.descriptions.length&&((t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+2*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),r=n.node().getBBox();t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",r.width+2*ar().state.padding).attr("height",r.height+2*ar().state.padding).attr("rx",ar().state.radius)})(i,e),"default"===e.type&&e.descriptions.length>0&&Su(i,e);const a=i.node().getBBox();return r.width=a.width+2*ar().state.padding,r.height=a.height+2*ar().state.padding,Tu(n,r),r};let Nu=0;let Du;const Ou={},Mu=(t,e,n,r,i,a,s)=>{const c=new ht.k({compound:!0,multigraph:!0});let l,h=!0;for(l=0;l<t.length;l++)if("relation"===t[l].stmt){h=!1;break}n?c.setGraph({rankdir:"LR",multigraph:!0,compound:!0,ranker:"tight-tree",ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,isMultiGraph:!0}):c.setGraph({rankdir:"TB",multigraph:!0,compound:!0,ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,ranker:"tight-tree",isMultiGraph:!0}),c.setDefaultEdgeLabel((function(){return{}})),s.db.extract(t);const u=s.db.getStates(),d=s.db.getRelations(),p=Object.keys(u);for(const o of p){const t=u[o];let l;if(n&&(t.parentId=n),t.doc){let n=e.append("g").attr("id",t.id).attr("class","stateGroup");l=Mu(t.doc,n,t.id,!r,i,a,s);{n=Au(n,t,r);let e=n.node().getBBox();l.width=e.width,l.height=e.height+Du.padding/2,Ou[t.id]={y:Du.compositTitleSize}}}else l=Bu(e,t);if(t.note){const n={descriptions:[],id:t.id+"-note",note:t.note,type:"note"},r=Bu(e,n);"left of"===t.note.position?(c.setNode(l.id+"-note",r),c.setNode(l.id,l)):(c.setNode(l.id,l),c.setNode(l.id+"-note",r)),c.setParent(l.id,l.id+"-group"),c.setParent(l.id+"-note",l.id+"-group")}else c.setNode(l.id,l)}Nt.debug("Count=",c.nodeCount(),c);let f=0;d.forEach((function(t){var e;f++,Nt.debug("Setting edge",t),c.setEdge(t.id1,t.id2,{relation:t,width:(e=t.title,e?e.length*Du.fontSizeFactor:1),height:Du.labelHeight*Yt.getRows(t.title).length,labelpos:"c"},"id"+f)})),(0,lt.bK)(c),Nt.debug("Graph after layout",c.nodes());const g=e.node();c.nodes().forEach((function(t){if(void 0!==t&&void 0!==c.node(t)){Nt.warn("Node "+t+": "+JSON.stringify(c.node(t))),i.select("#"+g.id+" #"+t).attr("transform","translate("+(c.node(t).x-c.node(t).width/2)+","+(c.node(t).y+(Ou[t]?Ou[t].y:0)-c.node(t).height/2)+" )"),i.select("#"+g.id+" #"+t).attr("data-x-shift",c.node(t).x-c.node(t).width/2);a.querySelectorAll("#"+g.id+" #"+t+" .divider").forEach((t=>{const e=t.parentElement;let n=0,r=0;e&&(e.parentElement&&(n=e.parentElement.getBBox().width),r=parseInt(e.getAttribute("data-x-shift"),10),Number.isNaN(r)&&(r=0)),t.setAttribute("x1",0-r+8),t.setAttribute("x2",n-r-8)}))}else Nt.debug("No Node "+t+": "+JSON.stringify(c.node(t)))}));let y=g.getBBox();c.edges().forEach((function(t){void 0!==t&&void 0!==c.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(c.edge(t))),function(t,e,n){e.points=e.points.filter((t=>!Number.isNaN(t.y)));const r=e.points,i=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),a=t.append("path").attr("d",i(r)).attr("id","edge"+Nu).attr("class","transition");let s="";if(ar().state.arrowMarkerAbsolute&&(s=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,s=s.replace(/\(/g,"\\("),s=s.replace(/\)/g,"\\)")),a.attr("marker-end","url("+s+"#"+function(t){switch(t){case Eu.relationType.AGGREGATION:return"aggregation";case Eu.relationType.EXTENSION:return"extension";case Eu.relationType.COMPOSITION:return"composition";case Eu.relationType.DEPENDENCY:return"dependency"}}(Eu.relationType.DEPENDENCY)+"End)"),void 0!==n.title){const r=t.append("g").attr("class","stateLabel"),{x:i,y:a}=Gn.calcLabelPosition(e.points),s=Yt.getRows(n.title);let o=0;const c=[];let l=0,h=0;for(let t=0;t<=s.length;t++){const e=r.append("text").attr("text-anchor","middle").text(s[t]).attr("x",i).attr("y",a+o),n=e.node().getBBox();if(l=Math.max(l,n.width),h=Math.min(h,n.x),Nt.info(n.x,i,a+o),0===o){const t=e.node().getBBox();o=t.height,Nt.info("Title height",o,a)}c.push(e)}let u=o*s.length;if(s.length>1){const t=(s.length-1)*o*.5;c.forEach(((e,n)=>e.attr("y",a+n*o-t))),u=o*s.length}const d=r.node().getBBox();r.insert("rect",":first-child").attr("class","box").attr("x",i-l/2-ar().state.padding/2).attr("y",a-u/2-ar().state.padding/2-3.5).attr("width",l+ar().state.padding).attr("height",u+ar().state.padding),Nt.info(d)}Nu++}(e,c.edge(t),c.edge(t).relation))})),y=g.getBBox();const m={id:n||"root",label:n||"root",width:0,height:0};return m.width=y.width+2*Du.padding,m.height=y.height+2*Du.padding,Nt.debug("Doc rendered",m,c),m},Iu={setConf:function(){},draw:function(t,e,n,r){Du=ar().state;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body"),c="sandbox"===i?a.nodes()[0].contentDocument:document;Nt.debug("Rendering diagram "+t);const l=s.select(`[id='${e}']`);l.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z");new ht.k({multigraph:!0,compound:!0,rankdir:"RL"}).setDefaultEdgeLabel((function(){return{}}));const h=r.db.getRootDoc();Mu(h,l,void 0,!1,s,c,r);const u=Du.padding,d=l.node().getBBox(),p=d.width+2*u,f=d.height+2*u;dr(l,f,1.75*p,Du.useMaxWidth),l.attr("viewBox",`${d.x-Du.padding}  ${d.y-Du.padding} `+p+" "+f)}},Fu="rect",$u="rectWithTitle",Ru="statediagram",Zu="transition",Pu="parent",ju="note",Yu="----parent",zu="fill:none",Uu="fill: #333",Wu="text",qu="normal";let Hu={},Vu=0;function Gu(t="",e=0,n="",r="----"){return`state-${t}${null!==n&&n.length>0?`${r}${n}`:""}-${e}`}const Xu=(t,e,n,r,i,a)=>{const s=n.id,o=null==(c=r[s])?"":c.classes?c.classes.join(" "):"";var c;if("root"!==s){let e=Fu;!0===n.start&&(e="start"),!1===n.start&&(e="end"),n.type!==Qh&&(e=n.type),Hu[s]||(Hu[s]={id:s,shape:e,description:Yt.sanitizeText(s,ar()),classes:`${o} statediagram-state`});const r=Hu[s];n.description&&(Array.isArray(r.description)?(r.shape=$u,r.description.push(n.description)):r.description.length>0?(r.shape=$u,r.description===s?r.description=[n.description]:r.description=[r.description,n.description]):(r.shape=Fu,r.description=n.description),r.description=Yt.sanitizeTextOrArray(r.description,ar())),1===r.description.length&&r.shape===$u&&(r.shape=Fu),!r.type&&n.doc&&(Nt.info("Setting cluster for ",s,Qu(n)),r.type="group",r.dir=Qu(n),r.shape=n.type===Jh?"divider":"roundedWithTitle",r.classes=r.classes+" statediagram-cluster "+(a?"statediagram-cluster-alt":""));const i={labelStyle:"",shape:r.shape,labelText:r.description,classes:r.classes,style:"",id:s,dir:r.dir,domId:Gu(s,Vu),type:r.type,padding:15};if(n.note){const e={labelStyle:"",shape:"note",labelText:n.note.text,classes:"statediagram-note",style:"",id:s+"----note-"+Vu,domId:Gu(s,Vu,ju),type:r.type,padding:15},a={labelStyle:"",shape:"noteGroup",labelText:n.note.text,classes:r.classes,style:"",id:s+Yu,domId:Gu(s,Vu,Pu),type:"group",padding:0};Vu++;const o=s+Yu;t.setNode(o,a),t.setNode(e.id,e),t.setNode(s,i),t.setParent(s,o),t.setParent(e.id,o);let c=s,l=e.id;"left of"===n.note.position&&(c=e.id,l=s),t.setEdge(c,l,{arrowhead:"none",arrowType:"",style:zu,labelStyle:"",classes:"transition note-edge",arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu})}else t.setNode(s,i)}e&&"root"!==e.id&&(Nt.trace("Setting node ",s," to be child of its parent ",e.id),t.setParent(s,e.id)),n.doc&&(Nt.trace("Adding nodes children "),Ku(t,n,n.doc,r,i,!a))},Ku=(t,e,n,r,i,a)=>{Nt.trace("items",n),n.forEach((n=>{switch(n.stmt){case Xh:case Qh:Xu(t,e,n,r,i,a);break;case Kh:{Xu(t,e,n.state1,r,i,a),Xu(t,e,n.state2,r,i,a);const s={id:"edge"+Vu,arrowhead:"normal",arrowTypeEnd:"arrow_barb",style:zu,labelStyle:"",label:Yt.sanitizeText(n.description,ar()),arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu,classes:Zu};t.setEdge(n.state1.id,n.state2.id,s,Vu),Vu++}}}))},Qu=(t,e="TB")=>{let n=e;if(t.doc)for(let r=0;r<t.doc.length;r++){const e=t.doc[r];"dir"===e.stmt&&(n=e.value)}return n},Ju={setConf:function(t){const e=Object.keys(t);for(const n of e)t[n]},getClasses:function(t,e){Nt.trace("Extracting classes"),e.db.clear();try{return e.parser.parse(t),e.db.extract(e.db.getRootDocV2()),e.db.getClasses()}catch(n){return n}},draw:function(t,e,n,r){Nt.info("Drawing state diagram (v2)",e),Hu={};let i=r.db.getDirection();void 0===i&&(i="LR");const{securityLevel:a,state:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;Nt.info(r.db.getRootDocV2()),r.db.extract(r.db.getRootDocV2()),Nt.info(r.db.getRootDocV2());const h=r.db.getStates(),u=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:Qu(r.db.getRootDocV2()),nodesep:c,ranksep:l,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));let d;Xu(u,void 0,r.db.getRootDocV2(),h,r.db,!0),"sandbox"===a&&(d=(0,o.Ys)("#i"+e));const p="sandbox"===a?(0,o.Ys)(d.nodes()[0].contentDocument.body):(0,o.Ys)("body"),f=p.select(`[id="${e}"]`),g=p.select("#"+e+" g");qs(g,u,["barb"],Ru,e);Gn.insertTitle(f,"statediagramTitleText",s.titleTopMargin,r.db.getDiagramTitle());const y=f.node().getBBox(),m=y.width+16,b=y.height+16;f.attr("class",Ru);const _=f.node().getBBox();dr(f,b,m,s.useMaxWidth);const x=`${_.x-8} ${_.y-8} ${m} ${b}`;Nt.debug(`viewBox ${x}`),f.attr("viewBox",x);const v=document.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const o of v){const t=o.getBBox(),e=document.createElementNS("http://www.w3.org/2000/svg",Fu);e.setAttribute("rx",0),e.setAttribute("ry",0),e.setAttribute("width",t.width),e.setAttribute("height",t.height),o.insertBefore(e,o.firstChild)}}};var td=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,17,18,20,22,23,24,26],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,24],d=[4,6,9,11,17,18,20,22,23,24,26],p={trace:function(){},yy:{},symbols_:{error:2,start:3,journey:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,title:17,acc_title:18,acc_title_value:19,acc_descr:20,acc_descr_value:21,acc_descr_multiline_value:22,section:23,taskName:24,taskData:25,open_directive:26,type_directive:27,arg_directive:28,close_directive:29,$accept:0,$end:1},terminals_:{2:"error",4:"journey",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",17:"title",18:"acc_title",19:"acc_title_value",20:"acc_descr",21:"acc_descr_value",22:"acc_descr_multiline_value",23:"section",24:"taskName",25:"taskData",26:"open_directive",27:"type_directive",28:"arg_directive",29:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,2],[10,2],[10,1],[10,1],[10,2],[10,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 11:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 12:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 13:case 14:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 15:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 16:r.addTask(a[o-1],a[o]),this.$="task";break;case 18:r.parseDirective("%%{","open_directive");break;case 19:r.parseDirective(a[o],"type_directive");break;case 20:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 21:r.parseDirective("}%%","close_directive","journey")}},table:[{3:1,4:n,7:3,12:4,26:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,26:r},{13:8,27:[1,9]},{27:[2,18]},{6:[1,10],7:21,8:11,9:[1,12],10:13,11:[1,14],12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},{1:[2,2]},{14:22,15:[1,23],29:u},e([15,29],[2,19]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:21,10:25,12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),{19:[1,26]},{21:[1,27]},e(i,[2,14]),e(i,[2,15]),{25:[1,28]},e(i,[2,17]),{11:[1,29]},{16:30,28:[1,31]},{11:[2,21]},e(i,[2,5]),e(i,[2,12]),e(i,[2,13]),e(i,[2,16]),e(d,[2,9]),{14:32,29:u},{29:[2,20]},{11:[1,33]},e(d,[2,10])],defaultActions:{5:[2,18],7:[2,2],24:[2,21],31:[2,20]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},f=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),26;case 1:return this.begin("type_directive"),27;case 2:return this.popState(),this.begin("arg_directive"),15;case 3:return this.popState(),this.popState(),29;case 4:return 28;case 5:case 6:case 8:case 9:break;case 7:return 11;case 10:return 4;case 11:return 17;case 12:return this.begin("acc_title"),18;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),20;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:return 23;case 20:return 24;case 21:return 25;case 22:return 15;case 23:return 6;case 24:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:journey\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{open_directive:{rules:[1],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,11,12,14,16,19,20,21,22,23,24],inclusive:!0}}},t);function g(){this.yy={}}return p.lexer=f,g.prototype=p,p.Parser=g,new g}();td.parser=td;const ed=td,nd=t=>null!==t.match(/^\s*journey/);let rd="";const id=[],ad=[],sd=[],od=function(){let t=!0;for(const[e,n]of sd.entries())sd[e].processed,t=t&&n.processed;return t},cd={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().journey,clear:function(){id.length=0,ad.length=0,rd="",sd.length=0,Dr()},setDiagramTitle:$r,getDiagramTitle:Rr,setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){rd=t,id.push(t)},getSections:function(){return id},getTasks:function(){let t=od();let e=0;for(;!t&&e<100;)t=od(),e++;return ad.push(...sd),ad},addTask:function(t,e){const n=e.substr(1).split(":");let r=0,i=[];1===n.length?(r=Number(n[0]),i=[]):(r=Number(n[0]),i=n[1].split(","));const a=i.map((t=>t.trim())),s={section:rd,type:rd,people:a,task:t,score:r};sd.push(s)},addTaskOrg:function(t){const e={section:rd,type:rd,description:t,task:t,classes:[]};ad.push(e)},getActors:function(){return function(){const t=[];return ad.forEach((e=>{e.people&&t.push(...e.people)})),[...new Set(t)].sort()}()}},ld=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},hd=function(t,e){const n=t.append("circle");return n.attr("cx",e.cx),n.attr("cy",e.cy),n.attr("class","actor-"+e.pos),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("r",e.r),void 0!==n.class&&n.attr("class",n.class),void 0!==e.title&&n.append("title").text(e.title),n},ud=function(t,e){const n=e.text.replace(/<br\s*\/?>/gi," "),r=t.append("text");r.attr("x",e.x),r.attr("y",e.y),r.attr("class","legend"),r.style("text-anchor",e.anchor),void 0!==e.class&&r.attr("class",e.class);const i=r.append("tspan");return i.attr("x",e.x+2*e.textMargin),i.text(n),r};let dd=-1;const pd=function(){return{x:0,y:0,width:100,anchor:"start",height:100,rx:0,ry:0}},fd=function(){function t(t,e,n,i,a,s,o,c){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("font-color",c).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c,l){const{taskFontSize:h,taskFontFamily:u}=c,d=t.split(/<br\s*\/?>/gi);for(let p=0;p<d.length;p++){const t=p*h-h*(d.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).attr("fill",l).style("text-anchor","middle").style("font-size",h).style("font-family",u);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(d[p]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).attr("position","fixed").append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").attr("class","label").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)n in e&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),gd=hd,yd=function(t,e,n){const r=t.append("g"),i=pd();i.x=e.x,i.y=e.y,i.fill=e.fill,i.width=n.width,i.height=n.height,i.class="journey-section section-type-"+e.num,i.rx=3,i.ry=3,ld(r,i),fd(n)(e.text,r,i.x,i.y,i.width,i.height,{class:"journey-section section-type-"+e.num},n,e.colour)},md=ud,bd=function(t,e,n){const r=e.x+n.width/2,i=t.append("g");dd++;i.append("line").attr("id","task"+dd).attr("x1",r).attr("y1",e.y).attr("x2",r).attr("y2",450).attr("class","task-line").attr("stroke-width","1px").attr("stroke-dasharray","4 2").attr("stroke","#666"),function(t,e){const n=15,r=t.append("circle").attr("cx",e.cx).attr("cy",e.cy).attr("class","face").attr("r",n).attr("stroke-width",2).attr("overflow","visible"),i=t.append("g");i.append("circle").attr("cx",e.cx-5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),i.append("circle").attr("cx",e.cx+5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),e.score>3?function(t){const r=(0,o.Nb1)().startAngle(Math.PI/2).endAngle(Math.PI/2*3).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+2)+")")}(i):e.score<3?function(t){const r=(0,o.Nb1)().startAngle(3*Math.PI/2).endAngle(Math.PI/2*5).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+7)+")")}(i):i.append("line").attr("class","mouth").attr("stroke",2).attr("x1",e.cx-5).attr("y1",e.cy+7).attr("x2",e.cx+5).attr("y2",e.cy+7).attr("class","mouth").attr("stroke-width","1px").attr("stroke","#666")}(i,{cx:r,cy:300+30*(5-e.score),score:e.score});const a=pd();a.x=e.x,a.y=e.y,a.fill=e.fill,a.width=n.width,a.height=n.height,a.class="task task-type-"+e.num,a.rx=3,a.ry=3,ld(i,a);let s=e.x+14;e.people.forEach((t=>{const n=e.actors[t].color,r={cx:s,cy:e.y,r:7,fill:n,stroke:"#000",title:t,pos:e.actors[t].position};hd(i,r),s+=10})),fd(n)(e.task,i,a.x,a.y,a.width,a.height,{class:"task"},n,e.colour)},_d=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",5).attr("refY",2).attr("markerWidth",6).attr("markerHeight",4).attr("orient","auto").append("path").attr("d","M 0,0 V 4 L6,2 Z")},xd={};const vd=ar().journey,kd=vd.leftMargin,wd={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],init:function(){this.sequenceItems=[],this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=ar().journey,a=this;let s=0;var o;this.sequenceItems.forEach((function(c){s++;const l=a.sequenceItems.length-s+1;a.updateVal(c,"starty",e-l*i.boxMargin,Math.min),a.updateVal(c,"stopy",r+l*i.boxMargin,Math.max),a.updateVal(wd.data,"startx",t-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopx",n+l*i.boxMargin,Math.max),"activation"!==o&&(a.updateVal(c,"startx",t-l*i.boxMargin,Math.min),a.updateVal(c,"stopx",n+l*i.boxMargin,Math.max),a.updateVal(wd.data,"starty",e-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopy",r+l*i.boxMargin,Math.max))}))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(wd.data,"startx",i,Math.min),this.updateVal(wd.data,"starty",s,Math.min),this.updateVal(wd.data,"stopx",a,Math.max),this.updateVal(wd.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return this.data}},Ed=vd.sectionFills,Cd=vd.sectionColours,Td=function(t,e,n){const r=ar().journey;let i="";const a=n+(2*r.height+r.diagramMarginY);let s=0,o="#CCC",c="black",l=0;for(const[h,u]of e.entries()){if(i!==u.section){o=Ed[s%Ed.length],l=s%Ed.length,c=Cd[s%Cd.length];const e={x:h*r.taskMargin+h*r.width+kd,y:50,text:u.section,fill:o,num:l,colour:c};yd(t,e,r),i=u.section,s++}const e=u.people.reduce(((t,e)=>(xd[e]&&(t[e]=xd[e]),t)),{});u.x=h*r.taskMargin+h*r.width+kd,u.y=a,u.width=r.diagramMarginX,u.height=r.diagramMarginY,u.colour=c,u.fill=o,u.num=l,u.actors=e,bd(t,u,r),wd.insert(u.x,u.y,u.x+u.width+r.taskMargin,450)}},Sd={setConf:function(t){Object.keys(t).forEach((function(e){vd[e]=t[e]}))},draw:function(t,e,n,r){const i=ar().journey;r.db.clear(),r.parser.parse(t+"\n");const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body");wd.init();const l=c.select("#"+e);_d(l);const h=r.db.getTasks(),u=r.db.getDiagramTitle(),d=r.db.getActors();for(const o in xd)delete xd[o];let p=0;d.forEach((t=>{xd[t]={color:i.actorColours[p%i.actorColours.length],position:p},p++})),function(t){const e=ar().journey;let n=60;Object.keys(xd).forEach((r=>{const i=xd[r].color,a={cx:20,cy:n,r:7,fill:i,stroke:"#000",pos:xd[r].position};gd(t,a);const s={x:40,y:n+7,fill:"#666",text:r,textMargin:5|e.boxTextMargin};md(t,s),n+=20}))}(l),wd.insert(0,0,kd,50*Object.keys(xd).length),Td(l,h,0);const f=wd.getBounds();u&&l.append("text").text(u).attr("x",kd).attr("font-size","4ex").attr("font-weight","bold").attr("y",25);const g=f.stopy-f.starty+2*i.diagramMarginY,y=kd+f.stopx+2*i.diagramMarginX;dr(l,g,y,i.useMaxWidth),l.append("line").attr("x1",kd).attr("y1",4*i.height).attr("x2",y-kd-4).attr("y2",4*i.height).attr("stroke-width",4).attr("stroke","black").attr("marker-end","url(#arrowhead)");const m=u?70:0;l.attr("viewBox",`${f.startx} -25 ${y} ${g+m}`),l.attr("preserveAspectRatio","xMinYMin meet"),l.attr("height",g+m+25)}};let Ad={};const Ld={setConf:function(t){Ad={...Ad,...t}},draw:(t,e,n)=>{try{Nt.debug("Renering svg for syntax error\n");const t=(0,o.Ys)("#"+e),r=t.append("g");r.append("path").attr("class","error-icon").attr("d","m411.313,123.313c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32-9.375,9.375-20.688-20.688c-12.484-12.5-32.766-12.5-45.25,0l-16,16c-1.261,1.261-2.304,2.648-3.31,4.051-21.739-8.561-45.324-13.426-70.065-13.426-105.867,0-192,86.133-192,192s86.133,192 192,192 192-86.133 192-192c0-24.741-4.864-48.327-13.426-70.065 1.402-1.007 2.79-2.049 4.051-3.31l16-16c12.5-12.492 12.5-32.758 0-45.25l-20.688-20.688 9.375-9.375 32.001-31.999zm-219.313,100.687c-52.938,0-96,43.063-96,96 0,8.836-7.164,16-16,16s-16-7.164-16-16c0-70.578 57.422-128 128-128 8.836,0 16,7.164 16,16s-7.164,16-16,16z"),r.append("path").attr("class","error-icon").attr("d","m459.02,148.98c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l16,16c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16.001-16z"),r.append("path").attr("class","error-icon").attr("d","m340.395,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16-16c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l15.999,16z"),r.append("path").attr("class","error-icon").attr("d","m400,64c8.844,0 16-7.164 16-16v-32c0-8.836-7.156-16-16-16-8.844,0-16,7.164-16,16v32c0,8.836 7.156,16 16,16z"),r.append("path").attr("class","error-icon").attr("d","m496,96.586h-32c-8.844,0-16,7.164-16,16 0,8.836 7.156,16 16,16h32c8.844,0 16-7.164 16-16 0-8.836-7.156-16-16-16z"),r.append("path").attr("class","error-icon").attr("d","m436.98,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688l32-32c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32c-6.251,6.25-6.251,16.375-0.001,22.625z"),r.append("text").attr("class","error-text").attr("x",1440).attr("y",250).attr("font-size","150px").style("text-anchor","middle").text("Syntax error in graph"),r.append("text").attr("class","error-text").attr("x",1250).attr("y",400).attr("font-size","100px").style("text-anchor","middle").text("mermaid version "+n),t.attr("height",100),t.attr("width",500),t.attr("viewBox","768 0 912 512")}catch(i){Nt.error("Error while rendering info diagram"),Nt.error((r=i)instanceof Error?r.message:String(r))}var r}},Bd="flowchart-elk",Nd={id:Bd,detector:(t,e)=>{var n;return!!(t.match(/^\s*flowchart-elk/)||t.match(/^\s*flowchart|graph/)&&"elk"===(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer))},loader:async()=>{const{diagram:t}=await n.e(9487).then(n.bind(n,9487));return{id:Bd,diagram:t}}},Dd="timeline",Od={id:Dd,detector:t=>null!==t.match(/^\s*timeline/),loader:async()=>{const{diagram:t}=await n.e(6316).then(n.bind(n,6316));return{id:Dd,diagram:t}}},Md="mindmap",Id={id:Md,detector:t=>null!==t.match(/^\s*mindmap/),loader:async()=>{const{diagram:t}=await n.e(7724).then(n.bind(n,7724));return{id:Md,diagram:t}}};let Fd=!1;const $d=()=>{Fd||(Fd=!0,En(Nd,Od,Id),Kr("error",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{}},init:()=>{}},(t=>"error"===t.toLowerCase().trim())),Kr("---",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{throw new Error("Diagrams beginning with --- are not valid. If you were trying to use a YAML front-matter, please ensure that you've correctly opened and closed the YAML front-matter with unindented `---` blocks")}},init:()=>null},(t=>t.toLowerCase().trimStart().startsWith("---"))),Kr("c4",{parser:Fi,db:Ki,renderer:La,styles:Cr,init:t=>{La.setConf(t.c4)}},$i),Kr("class",{parser:Na,db:Ga,renderer:cs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Da),Kr("classDiagram",{parser:Na,db:Ga,renderer:Xs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Oa),Kr("er",{parser:Qs,db:ro,renderer:yo,styles:gr},Js),Kr("gantt",{parser:Cc,db:il,renderer:ol,styles:br},Tc),Kr("info",{parser:ll,db:dl,renderer:pl,styles:_r},fl),Kr("pie",{parser:yl,db:xl,renderer:El,styles:xr},ml),Kr("requirement",{parser:Tl,db:Ol,renderer:Ul,styles:vr},Sl),Kr("sequence",{parser:ql,db:ph,renderer:Wh,styles:kr,init:t=>{if(t.sequence||(t.sequence={}),t.sequence.arrowMarkerAbsolute=t.arrowMarkerAbsolute,"sequenceDiagram"in t)throw new Error("`mermaid config.sequenceDiagram` has been renamed to `config.sequence`. Please update your mermaid config.");ph.setWrap(t.wrap),Wh.setConf(t.sequence)}},Hl),Kr("state",{parser:Hh,db:Eu,renderer:Iu,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Vh),Kr("stateDiagram",{parser:Hh,db:Eu,renderer:Ju,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Gh),Kr("journey",{parser:ed,db:cd,renderer:Sd,styles:Er,init:t=>{Sd.setConf(t.journey),cd.clear()}},nd),Kr("flowchart",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,_c(t.flowchart),yc.clear(),yc.setGen("gen-1")}},_o),Kr("flowchart-v2",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,ir({flowchart:{arrowMarkerAbsolute:t.arrowMarkerAbsolute}}),wc.setConf(t.flowchart),yc.clear(),yc.setGen("gen-2")}},xo),Kr("gitGraph",{parser:ti,db:bi,renderer:Oi,styles:Mi},ei))};class Rd{constructor(t,e){var n,r;this.txt=t,this.type="graph",this.detectTypeFailed=!1;const i=ar();this.txt=t;try{this.type=wn(t,i)}catch(o){this.handleError(o,e),this.type="error",this.detectTypeFailed=!0}const a=Qr(this.type);Nt.debug("Type "+this.type),this.db=a.db,null==(r=(n=this.db).clear)||r.call(n),this.renderer=a.renderer,this.parser=a.parser;const s=this.parser.parse.bind(this.parser);this.parser.parse=t=>s(function(t,e){var n;const r=t.match(_n);if(r){const i=bn(r[1],{schema:mn});return(null==i?void 0:i.title)&&(null==(n=e.setDiagramTitle)||n.call(e,i.title)),t.slice(r[0].length)}return t}(t,this.db)),this.parser.parser.yy=this.db,a.init&&(a.init(i),Nt.info("Initialized diagram "+this.type,i)),this.txt+="\n",this.parse(this.txt,e)}parse(t,e){var n,r;if(this.detectTypeFailed)return!1;try{return t+="\n",null==(r=(n=this.db).clear)||r.call(n),this.parser.parse(t),!0}catch(i){this.handleError(i,e)}return!1}handleError(t,e){if(void 0===e)throw t;Hn(t)?e(t.str,t.hash):e(t)}getParser(){return this.parser}getType(){return this.type}}const Zd=(t,e)=>{const n=wn(t,ar());try{Qr(n)}catch(r){const i=kn[n].loader;if(!i)throw new Error(`Diagram ${n} not found.`);return i().then((({diagram:r})=>(Kr(n,r,void 0),new Rd(t,e))))}return new Rd(t,e)},Pd=Rd;const jd=["graph","flowchart","flowchart-v2","stateDiagram","stateDiagram-v2"],Yd="graph TB;a[Maximum text size in diagram exceeded];style a fill:#faa",zd="sandbox",Ud="loose",Wd="http://www.w3.org/1999/xlink",qd="http://www.w3.org/1999/xhtml",Hd=["foreignobject"],Vd=["dominant-baseline"];const Gd=function(t){let e=t;return e=e.replace(/style.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/classDef.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/#\w+;/g,(function(t){const e=t.substring(1,t.length-1);return/^\+?\d+$/.test(e)?"\ufb02\xb0\xb0"+e+"\xb6\xdf":"\ufb02\xb0"+e+"\xb6\xdf"})),e},Xd=function(t){let e=t;return e=e.replace(/\ufb02\xb0\xb0/g,"&#"),e=e.replace(/\ufb02\xb0/g,"&"),e=e.replace(/\xb6\xdf/g,";"),e},Kd=(t,e,n=[])=>`\n.${t} ${e} { ${n.join(" !important; ")} !important; }`,Qd=(t,e,n,r)=>{const i=((t,e,n={})=>{var r;let i="";if(void 0!==t.themeCSS&&(i+=`\n${t.themeCSS}`),void 0!==t.fontFamily&&(i+=`\n:root { --mermaid-font-family: ${t.fontFamily}}`),void 0!==t.altFontFamily&&(i+=`\n:root { --mermaid-alt-font-family: ${t.altFontFamily}}`),!(0,Lt.Z)(n)&&jd.includes(e)){const e=["> *","span"],a=["rect","polygon","ellipse","circle","path"],s=t.htmlLabels||(null==(r=t.flowchart)?void 0:r.htmlLabels)?e:a;for(const t in n){const e=n[t];(0,Lt.Z)(e.styles)||s.forEach((t=>{i+=Kd(e.id,t,e.styles)})),(0,Lt.Z)(e.textStyles)||(i+=Kd(e.id,"tspan",e.textStyles))}}return i})(t,e,n);return I(it(`${r}{${Sr(e,i,t.themeVariables)}}`),F)},Jd=(t="",e,n)=>{let r=t;return n||e||(r=r.replace(/marker-end="url\(.*?#/g,'marker-end="url(#')),r=Xd(r),r=r.replace(/<br>/g,"<br/>"),r},tp=(t="",e)=>`<iframe style="width:100%;height:${e?e.viewBox.baseVal.height+"px":"100%"};border:0;margin:0;" src="data:text/html;base64,${btoa('<body style="margin:0">'+t+"</body>")}" sandbox="allow-top-navigation-by-user-activation allow-popups">\n  The "iframe" tag is not supported by your browser.\n</iframe>`,ep=(t,e,n,r,i)=>{const a=t.append("div");a.attr("id",n),r&&a.attr("style",r);const s=a.append("svg").attr("id",e).attr("width","100%").attr("xmlns","http://www.w3.org/2000/svg");return i&&s.attr("xmlns:xlink",i),s.append("g"),t};function np(t,e){return t.append("iframe").attr("id",e).attr("style","width: 100%; height: 100%;").attr("sandbox","")}const rp=(t,e,n,r)=>{var i,a,s;null==(i=t.getElementById(e))||i.remove(),null==(a=t.getElementById(n))||a.remove(),null==(s=t.getElementById(r))||s.remove()};function ip(t,e,n,r){var i,a;a=t,(i=e).attr("role","graphics-document document"),(0,Lt.Z)(a)||i.attr("aria-roledescription",a),function(t,e,n,r){if(void 0!==t.insert&&(e||n)){if(n){const e="chart-desc-"+r;t.attr("aria-describedby",e),t.insert("desc",":first-child").attr("id",e).text(n)}if(e){const n="chart-title-"+r;t.attr("aria-labelledby",n),t.insert("title",":first-child").attr("id",n).text(e)}}}(e,n,r,e.attr("id"))}const ap=Object.freeze({render:function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{if(v=Zd(e),"then"in v)throw new Error("Diagram is a promise. Use renderAsync.")}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},renderAsync:async function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{v=await Zd(e)}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{await v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},parse:function(t,e){return $d(),new Pd(t,e).parse(t,e)},parseAsync:async function(t,e){return $d(),(await Zd(t,e)).parse(t,e)},parseDirective:Yr,initialize:function(t={}){var e;(null==t?void 0:t.fontFamily)&&!(null==(e=t.themeVariables)?void 0:e.fontFamily)&&(t.themeVariables={fontFamily:t.fontFamily}),Qn=Sn({},t),(null==t?void 0:t.theme)&&t.theme in Ht?t.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables):t&&(t.themeVariables=Ht.default.getThemeVariables(t.themeVariables));const n="object"==typeof t?(t=>(Jn=Sn({},Kn),Jn=Sn(Jn,t),t.theme&&Ht[t.theme]&&(Jn.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables)),nr(Jn,tr),Jn))(t):rr();Dt(n.logLevel),$d()},getConfig:ar,setConfig:ir,getSiteConfig:rr,updateSiteConfig:t=>(Jn=Sn(Jn,t),nr(Jn,tr),Jn),reset:()=>{cr()},globalReset:()=>{cr(Kn)},defaultConfig:Kn});Dt(ar().logLevel),cr(ar());const sp=(t,e,n)=>{Nt.warn(t),Hn(t)?(n&&n(t.str,t.hash),e.push({...t,message:t.str,error:t})):(n&&n(t),t instanceof Error&&e.push({str:t.message,message:t.message,hash:t.name,error:t}))},op=async function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{await ap.renderAsync(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},cp=function(){if(dp.startOnLoad){const{startOnLoad:t}=ap.getConfig();t&&dp.init().catch((t=>Nt.error("Mermaid failed to initialize",t)))}};"undefined"!=typeof document&&window.addEventListener("load",cp,!1);const lp=[];let hp=!1;const up=async()=>{if(!hp){for(hp=!0;lp.length>0;){const e=lp.shift();if(e)try{await e()}catch(t){Nt.error("Error executing queue",t)}}hp=!1}},dp={startOnLoad:!0,diagrams:{},mermaidAPI:ap,parse:t=>ap.parse(t,dp.parseError),parseAsync:t=>new Promise(((e,n)=>{lp.push((()=>new Promise(((r,i)=>{ap.parseAsync(t,dp.parseError).then((t=>{r(t),e(t)}),(t=>{Nt.error("Error parsing",t),i(t),n(t)}))})))),up().catch(n)})),render:ap.render,renderAsync:(t,e,n,r)=>new Promise(((i,a)=>{lp.push((()=>new Promise(((s,o)=>{ap.renderAsync(t,e,n,r).then((t=>{s(t),i(t)}),(t=>{Nt.error("Error parsing",t),o(t),a(t)}))})))),up().catch(a)})),init:async function(t,e,n){try{await op(t,e,n)}catch(r){Nt.warn("Syntax Error rendering"),Hn(r)&&Nt.warn(r.str),dp.parseError&&dp.parseError(r)}},initThrowsErrors:function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{ap.render(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},initThrowsErrorsAsync:op,registerExternalDiagrams:async(t,{lazyLoad:e=!0}={})=>{e?En(...t):await(async(...t)=>{Nt.debug(`Loading ${t.length} external diagrams`);const e=(await Promise.allSettled(t.map((async({id:t,detector:e,loader:n})=>{const{diagram:r}=await n();Kr(t,r,e)})))).filter((t=>"rejected"===t.status));if(e.length>0){Nt.error(`Failed to load ${e.length} external diagrams`);for(const t of e)Nt.error(t);throw new Error(`Failed to load ${e.length} external diagrams`)}})(...t)},initialize:function(t){ap.initialize(t)},parseError:void 0,contentLoaded:cp,setParseErrorHandler:function(t){dp.parseError=t}}},7594:(t,e)=>{function n(t){let e,n=[];for(let r of t.split(",").map((t=>t.trim())))if(/^-?\d+$/.test(r))n.push(parseInt(r,10));else if(e=r.match(/^(-?\d+)(-|\.\.\.?|\u2025|\u2026|\u22EF)(-?\d+)$/)){let[t,r,i,a]=e;if(r&&a){r=parseInt(r),a=parseInt(a);const t=r<a?1:-1;"-"!==i&&".."!==i&&"\u2025"!==i||(a+=t);for(let e=r;e!==a;e+=t)n.push(e)}}return n}e.default=n,t.exports=n},9373:(t,e,n)=>{"use strict";function r(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n<r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n<i||void 0===n&&i>=i)&&(n=i)}return n}function i(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n>r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n>i||void 0===n&&i>=i)&&(n=i)}return n}function a(t){return t}n.d(e,{Nb1:()=>ao,LLu:()=>f,F5q:()=>p,$0Z:()=>_o,Dts:()=>vo,WQY:()=>wo,qpX:()=>Co,u93:()=>To,tFB:()=>Ao,YY7:()=>No,OvA:()=>Oo,dCK:()=>Io,zgE:()=>Ro,fGX:()=>Po,$m7:()=>Yo,c_6:()=>co,fxm:()=>Uo,FdL:()=>Qo,ak_:()=>Jo,SxZ:()=>nc,eA_:()=>ic,jsv:()=>sc,iJ:()=>ac,JHv:()=>dr,jvg:()=>uo,Fp7:()=>r,VV$:()=>i,ve8:()=>go,BYU:()=>ai,PKp:()=>di,Xf:()=>As,Ys:()=>Ls,td_:()=>Bs,YPS:()=>Hn,rr1:()=>Li,i$Z:()=>oa,WQD:()=>Si,Z_i:()=>Ci,F0B:()=>Vi,NGh:()=>Oi});var s=1e-6;function o(t){return"translate("+t+",0)"}function c(t){return"translate(0,"+t+")"}function l(t){return e=>+t(e)}function h(t,e){return e=Math.max(0,t.bandwidth()-2*e)/2,t.round()&&(e=Math.round(e)),n=>+t(n)+e}function u(){return!this.__axis}function d(t,e){var n=[],r=null,i=null,d=6,p=6,f=3,g="undefined"!=typeof window&&window.devicePixelRatio>1?0:.5,y=1===t||4===t?-1:1,m=4===t||2===t?"x":"y",b=1===t||3===t?o:c;function _(o){var c=null==r?e.ticks?e.ticks.apply(e,n):e.domain():r,_=null==i?e.tickFormat?e.tickFormat.apply(e,n):a:i,x=Math.max(d,0)+f,v=e.range(),k=+v[0]+g,w=+v[v.length-1]+g,E=(e.bandwidth?h:l)(e.copy(),g),C=o.selection?o.selection():o,T=C.selectAll(".domain").data([null]),S=C.selectAll(".tick").data(c,e).order(),A=S.exit(),L=S.enter().append("g").attr("class","tick"),B=S.select("line"),N=S.select("text");T=T.merge(T.enter().insert("path",".tick").attr("class","domain").attr("stroke","currentColor")),S=S.merge(L),B=B.merge(L.append("line").attr("stroke","currentColor").attr(m+"2",y*d)),N=N.merge(L.append("text").attr("fill","currentColor").attr(m,y*x).attr("dy",1===t?"0em":3===t?"0.71em":"0.32em")),o!==C&&(T=T.transition(o),S=S.transition(o),B=B.transition(o),N=N.transition(o),A=A.transition(o).attr("opacity",s).attr("transform",(function(t){return isFinite(t=E(t))?b(t+g):this.getAttribute("transform")})),L.attr("opacity",s).attr("transform",(function(t){var e=this.parentNode.__axis;return b((e&&isFinite(e=e(t))?e:E(t))+g)}))),A.remove(),T.attr("d",4===t||2===t?p?"M"+y*p+","+k+"H"+g+"V"+w+"H"+y*p:"M"+g+","+k+"V"+w:p?"M"+k+","+y*p+"V"+g+"H"+w+"V"+y*p:"M"+k+","+g+"H"+w),S.attr("opacity",1).attr("transform",(function(t){return b(E(t)+g)})),B.attr(m+"2",y*d),N.attr(m,y*x).text(_),C.filter(u).attr("fill","none").attr("font-size",10).attr("font-family","sans-serif").attr("text-anchor",2===t?"start":4===t?"end":"middle"),C.each((function(){this.__axis=E}))}return _.scale=function(t){return arguments.length?(e=t,_):e},_.ticks=function(){return n=Array.from(arguments),_},_.tickArguments=function(t){return arguments.length?(n=null==t?[]:Array.from(t),_):n.slice()},_.tickValues=function(t){return arguments.length?(r=null==t?null:Array.from(t),_):r&&r.slice()},_.tickFormat=function(t){return arguments.length?(i=t,_):i},_.tickSize=function(t){return arguments.length?(d=p=+t,_):d},_.tickSizeInner=function(t){return arguments.length?(d=+t,_):d},_.tickSizeOuter=function(t){return arguments.length?(p=+t,_):p},_.tickPadding=function(t){return arguments.length?(f=+t,_):f},_.offset=function(t){return arguments.length?(g=+t,_):g},_}function p(t){return d(1,t)}function f(t){return d(3,t)}function g(){}function y(t){return null==t?g:function(){return this.querySelector(t)}}function m(t){return null==t?[]:Array.isArray(t)?t:Array.from(t)}function b(){return[]}function _(t){return null==t?b:function(){return this.querySelectorAll(t)}}function x(t){return function(){return this.matches(t)}}function v(t){return function(e){return e.matches(t)}}var k=Array.prototype.find;function w(){return this.firstElementChild}var E=Array.prototype.filter;function C(){return Array.from(this.children)}function T(t){return new Array(t.length)}function S(t,e){this.ownerDocument=t.ownerDocument,this.namespaceURI=t.namespaceURI,this._next=null,this._parent=t,this.__data__=e}function A(t){return function(){return t}}function L(t,e,n,r,i,a){for(var s,o=0,c=e.length,l=a.length;o<l;++o)(s=e[o])?(s.__data__=a[o],r[o]=s):n[o]=new S(t,a[o]);for(;o<c;++o)(s=e[o])&&(i[o]=s)}function B(t,e,n,r,i,a,s){var o,c,l,h=new Map,u=e.length,d=a.length,p=new Array(u);for(o=0;o<u;++o)(c=e[o])&&(p[o]=l=s.call(c,c.__data__,o,e)+"",h.has(l)?i[o]=c:h.set(l,c));for(o=0;o<d;++o)l=s.call(t,a[o],o,a)+"",(c=h.get(l))?(r[o]=c,c.__data__=a[o],h.delete(l)):n[o]=new S(t,a[o]);for(o=0;o<u;++o)(c=e[o])&&h.get(p[o])===c&&(i[o]=c)}function N(t){return t.__data__}function D(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function O(t,e){return t<e?-1:t>e?1:t>=e?0:NaN}S.prototype={constructor:S,appendChild:function(t){return this._parent.insertBefore(t,this._next)},insertBefore:function(t,e){return this._parent.insertBefore(t,e)},querySelector:function(t){return this._parent.querySelector(t)},querySelectorAll:function(t){return this._parent.querySelectorAll(t)}};var M="http://www.w3.org/1999/xhtml";const I={svg:"http://www.w3.org/2000/svg",xhtml:M,xlink:"http://www.w3.org/1999/xlink",xml:"http://www.w3.org/XML/1998/namespace",xmlns:"http://www.w3.org/2000/xmlns/"};function F(t){var e=t+="",n=e.indexOf(":");return n>=0&&"xmlns"!==(e=t.slice(0,n))&&(t=t.slice(n+1)),I.hasOwnProperty(e)?{space:I[e],local:t}:t}function $(t){return function(){this.removeAttribute(t)}}function R(t){return function(){this.removeAttributeNS(t.space,t.local)}}function Z(t,e){return function(){this.setAttribute(t,e)}}function P(t,e){return function(){this.setAttributeNS(t.space,t.local,e)}}function j(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttribute(t):this.setAttribute(t,n)}}function Y(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttributeNS(t.space,t.local):this.setAttributeNS(t.space,t.local,n)}}function z(t){return t.ownerDocument&&t.ownerDocument.defaultView||t.document&&t||t.defaultView}function U(t){return function(){this.style.removeProperty(t)}}function W(t,e,n){return function(){this.style.setProperty(t,e,n)}}function q(t,e,n){return function(){var r=e.apply(this,arguments);null==r?this.style.removeProperty(t):this.style.setProperty(t,r,n)}}function H(t,e){return t.style.getPropertyValue(e)||z(t).getComputedStyle(t,null).getPropertyValue(e)}function V(t){return function(){delete this[t]}}function G(t,e){return function(){this[t]=e}}function X(t,e){return function(){var n=e.apply(this,arguments);null==n?delete this[t]:this[t]=n}}function K(t){return t.trim().split(/^|\s+/)}function Q(t){return t.classList||new J(t)}function J(t){this._node=t,this._names=K(t.getAttribute("class")||"")}function tt(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.add(e[r])}function et(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.remove(e[r])}function nt(t){return function(){tt(this,t)}}function rt(t){return function(){et(this,t)}}function it(t,e){return function(){(e.apply(this,arguments)?tt:et)(this,t)}}function at(){this.textContent=""}function st(t){return function(){this.textContent=t}}function ot(t){return function(){var e=t.apply(this,arguments);this.textContent=null==e?"":e}}function ct(){this.innerHTML=""}function lt(t){return function(){this.innerHTML=t}}function ht(t){return function(){var e=t.apply(this,arguments);this.innerHTML=null==e?"":e}}function ut(){this.nextSibling&&this.parentNode.appendChild(this)}function dt(){this.previousSibling&&this.parentNode.insertBefore(this,this.parentNode.firstChild)}function pt(t){return function(){var e=this.ownerDocument,n=this.namespaceURI;return n===M&&e.documentElement.namespaceURI===M?e.createElement(t):e.createElementNS(n,t)}}function ft(t){return function(){return this.ownerDocument.createElementNS(t.space,t.local)}}function gt(t){var e=F(t);return(e.local?ft:pt)(e)}function yt(){return null}function mt(){var t=this.parentNode;t&&t.removeChild(this)}function bt(){var t=this.cloneNode(!1),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function _t(){var t=this.cloneNode(!0),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function xt(t){return t.trim().split(/^|\s+/).map((function(t){var e="",n=t.indexOf(".");return n>=0&&(e=t.slice(n+1),t=t.slice(0,n)),{type:t,name:e}}))}function vt(t){return function(){var e=this.__on;if(e){for(var n,r=0,i=-1,a=e.length;r<a;++r)n=e[r],t.type&&n.type!==t.type||n.name!==t.name?e[++i]=n:this.removeEventListener(n.type,n.listener,n.options);++i?e.length=i:delete this.__on}}}function kt(t,e,n){return function(){var r,i=this.__on,a=function(t){return function(e){t.call(this,e,this.__data__)}}(e);if(i)for(var s=0,o=i.length;s<o;++s)if((r=i[s]).type===t.type&&r.name===t.name)return this.removeEventListener(r.type,r.listener,r.options),this.addEventListener(r.type,r.listener=a,r.options=n),void(r.value=e);this.addEventListener(t.type,a,n),r={type:t.type,name:t.name,value:e,listener:a,options:n},i?i.push(r):this.__on=[r]}}function wt(t,e,n){var r=z(t),i=r.CustomEvent;"function"==typeof i?i=new i(e,n):(i=r.document.createEvent("Event"),n?(i.initEvent(e,n.bubbles,n.cancelable),i.detail=n.detail):i.initEvent(e,!1,!1)),t.dispatchEvent(i)}function Et(t,e){return function(){return wt(this,t,e)}}function Ct(t,e){return function(){return wt(this,t,e.apply(this,arguments))}}J.prototype={add:function(t){this._names.indexOf(t)<0&&(this._names.push(t),this._node.setAttribute("class",this._names.join(" ")))},remove:function(t){var e=this._names.indexOf(t);e>=0&&(this._names.splice(e,1),this._node.setAttribute("class",this._names.join(" ")))},contains:function(t){return this._names.indexOf(t)>=0}};var Tt=[null];function St(t,e){this._groups=t,this._parents=e}function At(){return new St([[document.documentElement]],Tt)}St.prototype=At.prototype={constructor:St,select:function(t){"function"!=typeof t&&(t=y(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s,o=e[i],c=o.length,l=r[i]=new Array(c),h=0;h<c;++h)(a=o[h])&&(s=t.call(a,a.__data__,h,o))&&("__data__"in a&&(s.__data__=a.__data__),l[h]=s);return new St(r,this._parents)},selectAll:function(t){t="function"==typeof t?function(t){return function(){return m(t.apply(this,arguments))}}(t):_(t);for(var e=this._groups,n=e.length,r=[],i=[],a=0;a<n;++a)for(var s,o=e[a],c=o.length,l=0;l<c;++l)(s=o[l])&&(r.push(t.call(s,s.__data__,l,o)),i.push(s));return new St(r,i)},selectChild:function(t){return this.select(null==t?w:function(t){return function(){return k.call(this.children,t)}}("function"==typeof t?t:v(t)))},selectChildren:function(t){return this.selectAll(null==t?C:function(t){return function(){return E.call(this.children,t)}}("function"==typeof t?t:v(t)))},filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new St(r,this._parents)},data:function(t,e){if(!arguments.length)return Array.from(this,N);var n=e?B:L,r=this._parents,i=this._groups;"function"!=typeof t&&(t=A(t));for(var a=i.length,s=new Array(a),o=new Array(a),c=new Array(a),l=0;l<a;++l){var h=r[l],u=i[l],d=u.length,p=D(t.call(h,h&&h.__data__,l,r)),f=p.length,g=o[l]=new Array(f),y=s[l]=new Array(f),m=c[l]=new Array(d);n(h,u,g,y,m,p,e);for(var b,_,x=0,v=0;x<f;++x)if(b=g[x]){for(x>=v&&(v=x+1);!(_=y[v])&&++v<f;);b._next=_||null}}return(s=new St(s,r))._enter=o,s._exit=c,s},enter:function(){return new St(this._enter||this._groups.map(T),this._parents)},exit:function(){return new St(this._exit||this._groups.map(T),this._parents)},join:function(t,e,n){var r=this.enter(),i=this,a=this.exit();return"function"==typeof t?(r=t(r))&&(r=r.selection()):r=r.append(t+""),null!=e&&(i=e(i))&&(i=i.selection()),null==n?a.remove():n(a),r&&i?r.merge(i).order():i},merge:function(t){for(var e=t.selection?t.selection():t,n=this._groups,r=e._groups,i=n.length,a=r.length,s=Math.min(i,a),o=new Array(i),c=0;c<s;++c)for(var l,h=n[c],u=r[c],d=h.length,p=o[c]=new Array(d),f=0;f<d;++f)(l=h[f]||u[f])&&(p[f]=l);for(;c<i;++c)o[c]=n[c];return new St(o,this._parents)},selection:function(){return this},order:function(){for(var t=this._groups,e=-1,n=t.length;++e<n;)for(var r,i=t[e],a=i.length-1,s=i[a];--a>=0;)(r=i[a])&&(s&&4^r.compareDocumentPosition(s)&&s.parentNode.insertBefore(r,s),s=r);return this},sort:function(t){function e(e,n){return e&&n?t(e.__data__,n.__data__):!e-!n}t||(t=O);for(var n=this._groups,r=n.length,i=new Array(r),a=0;a<r;++a){for(var s,o=n[a],c=o.length,l=i[a]=new Array(c),h=0;h<c;++h)(s=o[h])&&(l[h]=s);l.sort(e)}return new St(i,this._parents).order()},call:function(){var t=arguments[0];return arguments[0]=this,t.apply(null,arguments),this},nodes:function(){return Array.from(this)},node:function(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r=t[e],i=0,a=r.length;i<a;++i){var s=r[i];if(s)return s}return null},size:function(){let t=0;for(const e of this)++t;return t},empty:function(){return!this.node()},each:function(t){for(var e=this._groups,n=0,r=e.length;n<r;++n)for(var i,a=e[n],s=0,o=a.length;s<o;++s)(i=a[s])&&t.call(i,i.__data__,s,a);return this},attr:function(t,e){var n=F(t);if(arguments.length<2){var r=this.node();return n.local?r.getAttributeNS(n.space,n.local):r.getAttribute(n)}return this.each((null==e?n.local?R:$:"function"==typeof e?n.local?Y:j:n.local?P:Z)(n,e))},style:function(t,e,n){return arguments.length>1?this.each((null==e?U:"function"==typeof e?q:W)(t,e,null==n?"":n)):H(this.node(),t)},property:function(t,e){return arguments.length>1?this.each((null==e?V:"function"==typeof e?X:G)(t,e)):this.node()[t]},classed:function(t,e){var n=K(t+"");if(arguments.length<2){for(var r=Q(this.node()),i=-1,a=n.length;++i<a;)if(!r.contains(n[i]))return!1;return!0}return this.each(("function"==typeof e?it:e?nt:rt)(n,e))},text:function(t){return arguments.length?this.each(null==t?at:("function"==typeof t?ot:st)(t)):this.node().textContent},html:function(t){return arguments.length?this.each(null==t?ct:("function"==typeof t?ht:lt)(t)):this.node().innerHTML},raise:function(){return this.each(ut)},lower:function(){return this.each(dt)},append:function(t){var e="function"==typeof t?t:gt(t);return this.select((function(){return this.appendChild(e.apply(this,arguments))}))},insert:function(t,e){var n="function"==typeof t?t:gt(t),r=null==e?yt:"function"==typeof e?e:y(e);return this.select((function(){return this.insertBefore(n.apply(this,arguments),r.apply(this,arguments)||null)}))},remove:function(){return this.each(mt)},clone:function(t){return this.select(t?_t:bt)},datum:function(t){return arguments.length?this.property("__data__",t):this.node().__data__},on:function(t,e,n){var r,i,a=xt(t+""),s=a.length;if(!(arguments.length<2)){for(o=e?kt:vt,r=0;r<s;++r)this.each(o(a[r],e,n));return this}var o=this.node().__on;if(o)for(var c,l=0,h=o.length;l<h;++l)for(r=0,c=o[l];r<s;++r)if((i=a[r]).type===c.type&&i.name===c.name)return c.value},dispatch:function(t,e){return this.each(("function"==typeof e?Ct:Et)(t,e))},[Symbol.iterator]:function*(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r,i=t[e],a=0,s=i.length;a<s;++a)(r=i[a])&&(yield r)}};const Lt=At;var Bt={value:()=>{}};function Nt(){for(var t,e=0,n=arguments.length,r={};e<n;++e){if(!(t=arguments[e]+"")||t in r||/[\s.]/.test(t))throw new Error("illegal type: "+t);r[t]=[]}return new Dt(r)}function Dt(t){this._=t}function Ot(t,e){return t.trim().split(/^|\s+/).map((function(t){var n="",r=t.indexOf(".");if(r>=0&&(n=t.slice(r+1),t=t.slice(0,r)),t&&!e.hasOwnProperty(t))throw new Error("unknown type: "+t);return{type:t,name:n}}))}function Mt(t,e){for(var n,r=0,i=t.length;r<i;++r)if((n=t[r]).name===e)return n.value}function It(t,e,n){for(var r=0,i=t.length;r<i;++r)if(t[r].name===e){t[r]=Bt,t=t.slice(0,r).concat(t.slice(r+1));break}return null!=n&&t.push({name:e,value:n}),t}Dt.prototype=Nt.prototype={constructor:Dt,on:function(t,e){var n,r=this._,i=Ot(t+"",r),a=-1,s=i.length;if(!(arguments.length<2)){if(null!=e&&"function"!=typeof e)throw new Error("invalid callback: "+e);for(;++a<s;)if(n=(t=i[a]).type)r[n]=It(r[n],t.name,e);else if(null==e)for(n in r)r[n]=It(r[n],t.name,null);return this}for(;++a<s;)if((n=(t=i[a]).type)&&(n=Mt(r[n],t.name)))return n},copy:function(){var t={},e=this._;for(var n in e)t[n]=e[n].slice();return new Dt(t)},call:function(t,e){if((n=arguments.length-2)>0)for(var n,r,i=new Array(n),a=0;a<n;++a)i[a]=arguments[a+2];if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(a=0,n=(r=this._[t]).length;a<n;++a)r[a].value.apply(e,i)},apply:function(t,e,n){if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(var r=this._[t],i=0,a=r.length;i<a;++i)r[i].value.apply(e,n)}};const Ft=Nt;var $t,Rt,Zt=0,Pt=0,jt=0,Yt=0,zt=0,Ut=0,Wt="object"==typeof performance&&performance.now?performance:Date,qt="object"==typeof window&&window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(t){setTimeout(t,17)};function Ht(){return zt||(qt(Vt),zt=Wt.now()+Ut)}function Vt(){zt=0}function Gt(){this._call=this._time=this._next=null}function Xt(t,e,n){var r=new Gt;return r.restart(t,e,n),r}function Kt(){zt=(Yt=Wt.now())+Ut,Zt=Pt=0;try{!function(){Ht(),++Zt;for(var t,e=$t;e;)(t=zt-e._time)>=0&&e._call.call(void 0,t),e=e._next;--Zt}()}finally{Zt=0,function(){var t,e,n=$t,r=1/0;for(;n;)n._call?(r>n._time&&(r=n._time),t=n,n=n._next):(e=n._next,n._next=null,n=t?t._next=e:$t=e);Rt=t,Jt(r)}(),zt=0}}function Qt(){var t=Wt.now(),e=t-Yt;e>1e3&&(Ut-=e,Yt=t)}function Jt(t){Zt||(Pt&&(Pt=clearTimeout(Pt)),t-zt>24?(t<1/0&&(Pt=setTimeout(Kt,t-Wt.now()-Ut)),jt&&(jt=clearInterval(jt))):(jt||(Yt=Wt.now(),jt=setInterval(Qt,1e3)),Zt=1,qt(Kt)))}function te(t,e,n){var r=new Gt;return e=null==e?0:+e,r.restart((n=>{r.stop(),t(n+e)}),e,n),r}Gt.prototype=Xt.prototype={constructor:Gt,restart:function(t,e,n){if("function"!=typeof t)throw new TypeError("callback is not a function");n=(null==n?Ht():+n)+(null==e?0:+e),this._next||Rt===this||(Rt?Rt._next=this:$t=this,Rt=this),this._call=t,this._time=n,Jt()},stop:function(){this._call&&(this._call=null,this._time=1/0,Jt())}};var ee=Ft("start","end","cancel","interrupt"),ne=[];function re(t,e,n,r,i,a){var s=t.__transition;if(s){if(n in s)return}else t.__transition={};!function(t,e,n){var r,i=t.__transition;function a(t){n.state=1,n.timer.restart(s,n.delay,n.time),n.delay<=t&&s(t-n.delay)}function s(a){var l,h,u,d;if(1!==n.state)return c();for(l in i)if((d=i[l]).name===n.name){if(3===d.state)return te(s);4===d.state?(d.state=6,d.timer.stop(),d.on.call("interrupt",t,t.__data__,d.index,d.group),delete i[l]):+l<e&&(d.state=6,d.timer.stop(),d.on.call("cancel",t,t.__data__,d.index,d.group),delete i[l])}if(te((function(){3===n.state&&(n.state=4,n.timer.restart(o,n.delay,n.time),o(a))})),n.state=2,n.on.call("start",t,t.__data__,n.index,n.group),2===n.state){for(n.state=3,r=new Array(u=n.tween.length),l=0,h=-1;l<u;++l)(d=n.tween[l].value.call(t,t.__data__,n.index,n.group))&&(r[++h]=d);r.length=h+1}}function o(e){for(var i=e<n.duration?n.ease.call(null,e/n.duration):(n.timer.restart(c),n.state=5,1),a=-1,s=r.length;++a<s;)r[a].call(t,i);5===n.state&&(n.on.call("end",t,t.__data__,n.index,n.group),c())}function c(){for(var r in n.state=6,n.timer.stop(),delete i[e],i)return;delete t.__transition}i[e]=n,n.timer=Xt(a,0,n.time)}(t,n,{name:e,index:r,group:i,on:ee,tween:ne,time:a.time,delay:a.delay,duration:a.duration,ease:a.ease,timer:null,state:0})}function ie(t,e){var n=se(t,e);if(n.state>0)throw new Error("too late; already scheduled");return n}function ae(t,e){var n=se(t,e);if(n.state>3)throw new Error("too late; already running");return n}function se(t,e){var n=t.__transition;if(!n||!(n=n[e]))throw new Error("transition not found");return n}function oe(t,e){return t=+t,e=+e,function(n){return t*(1-n)+e*n}}var ce,le=180/Math.PI,he={translateX:0,translateY:0,rotate:0,skewX:0,scaleX:1,scaleY:1};function ue(t,e,n,r,i,a){var s,o,c;return(s=Math.sqrt(t*t+e*e))&&(t/=s,e/=s),(c=t*n+e*r)&&(n-=t*c,r-=e*c),(o=Math.sqrt(n*n+r*r))&&(n/=o,r/=o,c/=o),t*r<e*n&&(t=-t,e=-e,c=-c,s=-s),{translateX:i,translateY:a,rotate:Math.atan2(e,t)*le,skewX:Math.atan(c)*le,scaleX:s,scaleY:o}}function de(t,e,n,r){function i(t){return t.length?t.pop()+" ":""}return function(a,s){var o=[],c=[];return a=t(a),s=t(s),function(t,r,i,a,s,o){if(t!==i||r!==a){var c=s.push("translate(",null,e,null,n);o.push({i:c-4,x:oe(t,i)},{i:c-2,x:oe(r,a)})}else(i||a)&&s.push("translate("+i+e+a+n)}(a.translateX,a.translateY,s.translateX,s.translateY,o,c),function(t,e,n,a){t!==e?(t-e>180?e+=360:e-t>180&&(t+=360),a.push({i:n.push(i(n)+"rotate(",null,r)-2,x:oe(t,e)})):e&&n.push(i(n)+"rotate("+e+r)}(a.rotate,s.rotate,o,c),function(t,e,n,a){t!==e?a.push({i:n.push(i(n)+"skewX(",null,r)-2,x:oe(t,e)}):e&&n.push(i(n)+"skewX("+e+r)}(a.skewX,s.skewX,o,c),function(t,e,n,r,a,s){if(t!==n||e!==r){var o=a.push(i(a)+"scale(",null,",",null,")");s.push({i:o-4,x:oe(t,n)},{i:o-2,x:oe(e,r)})}else 1===n&&1===r||a.push(i(a)+"scale("+n+","+r+")")}(a.scaleX,a.scaleY,s.scaleX,s.scaleY,o,c),a=s=null,function(t){for(var e,n=-1,r=c.length;++n<r;)o[(e=c[n]).i]=e.x(t);return o.join("")}}}var pe=de((function(t){const e=new("function"==typeof DOMMatrix?DOMMatrix:WebKitCSSMatrix)(t+"");return e.isIdentity?he:ue(e.a,e.b,e.c,e.d,e.e,e.f)}),"px, ","px)","deg)"),fe=de((function(t){return null==t?he:(ce||(ce=document.createElementNS("http://www.w3.org/2000/svg","g")),ce.setAttribute("transform",t),(t=ce.transform.baseVal.consolidate())?ue((t=t.matrix).a,t.b,t.c,t.d,t.e,t.f):he)}),", ",")",")");function ge(t,e){var n,r;return function(){var i=ae(this,t),a=i.tween;if(a!==n)for(var s=0,o=(r=n=a).length;s<o;++s)if(r[s].name===e){(r=r.slice()).splice(s,1);break}i.tween=r}}function ye(t,e,n){var r,i;if("function"!=typeof n)throw new Error;return function(){var a=ae(this,t),s=a.tween;if(s!==r){i=(r=s).slice();for(var o={name:e,value:n},c=0,l=i.length;c<l;++c)if(i[c].name===e){i[c]=o;break}c===l&&i.push(o)}a.tween=i}}function me(t,e,n){var r=t._id;return t.each((function(){var t=ae(this,r);(t.value||(t.value={}))[e]=n.apply(this,arguments)})),function(t){return se(t,r).value[e]}}function be(t,e,n){t.prototype=e.prototype=n,n.constructor=t}function _e(t,e){var n=Object.create(t.prototype);for(var r in e)n[r]=e[r];return n}function xe(){}var ve=.7,ke=1/ve,we="\\s*([+-]?\\d+)\\s*",Ee="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)\\s*",Ce="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)%\\s*",Te=/^#([0-9a-f]{3,8})$/,Se=new RegExp(`^rgb\\(${we},${we},${we}\\)$`),Ae=new RegExp(`^rgb\\(${Ce},${Ce},${Ce}\\)$`),Le=new RegExp(`^rgba\\(${we},${we},${we},${Ee}\\)$`),Be=new RegExp(`^rgba\\(${Ce},${Ce},${Ce},${Ee}\\)$`),Ne=new RegExp(`^hsl\\(${Ee},${Ce},${Ce}\\)$`),De=new RegExp(`^hsla\\(${Ee},${Ce},${Ce},${Ee}\\)$`),Oe={aliceblue:15792383,antiquewhite:16444375,aqua:65535,aquamarine:8388564,azure:15794175,beige:16119260,bisque:16770244,black:0,blanchedalmond:16772045,blue:255,blueviolet:9055202,brown:10824234,burlywood:14596231,cadetblue:6266528,chartreuse:8388352,chocolate:13789470,coral:16744272,cornflowerblue:6591981,cornsilk:16775388,crimson:14423100,cyan:65535,darkblue:139,darkcyan:35723,darkgoldenrod:12092939,darkgray:11119017,darkgreen:25600,darkgrey:11119017,darkkhaki:12433259,darkmagenta:9109643,darkolivegreen:5597999,darkorange:16747520,darkorchid:10040012,darkred:9109504,darksalmon:15308410,darkseagreen:9419919,darkslateblue:4734347,darkslategray:3100495,darkslategrey:3100495,darkturquoise:52945,darkviolet:9699539,deeppink:16716947,deepskyblue:49151,dimgray:6908265,dimgrey:6908265,dodgerblue:2003199,firebrick:11674146,floralwhite:16775920,forestgreen:2263842,fuchsia:16711935,gainsboro:14474460,ghostwhite:16316671,gold:16766720,goldenrod:14329120,gray:8421504,green:32768,greenyellow:11403055,grey:8421504,honeydew:15794160,hotpink:16738740,indianred:13458524,indigo:4915330,ivory:16777200,khaki:15787660,lavender:15132410,lavenderblush:16773365,lawngreen:8190976,lemonchiffon:16775885,lightblue:11393254,lightcoral:15761536,lightcyan:14745599,lightgoldenrodyellow:16448210,lightgray:13882323,lightgreen:9498256,lightgrey:13882323,lightpink:16758465,lightsalmon:16752762,lightseagreen:2142890,lightskyblue:8900346,lightslategray:7833753,lightslategrey:7833753,lightsteelblue:11584734,lightyellow:16777184,lime:65280,limegreen:3329330,linen:16445670,magenta:16711935,maroon:8388608,mediumaquamarine:6737322,mediumblue:205,mediumorchid:12211667,mediumpurple:9662683,mediumseagreen:3978097,mediumslateblue:8087790,mediumspringgreen:64154,mediumturquoise:4772300,mediumvioletred:13047173,midnightblue:1644912,mintcream:16121850,mistyrose:16770273,moccasin:16770229,navajowhite:16768685,navy:128,oldlace:16643558,olive:8421376,olivedrab:7048739,orange:16753920,orangered:16729344,orchid:14315734,palegoldenrod:15657130,palegreen:10025880,paleturquoise:11529966,palevioletred:14381203,papayawhip:16773077,peachpuff:16767673,peru:13468991,pink:16761035,plum:14524637,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateblue:6970061,slategray:7372944,slategrey:7372944,snow:16775930,springgreen:65407,steelblue:4620980,tan:13808780,teal:32896,thistle:14204888,tomato:16737095,turquoise:4251856,violet:15631086,wheat:16113331,white:16777215,whitesmoke:16119285,yellow:16776960,yellowgreen:10145074};function Me(){return this.rgb().formatHex()}function Ie(){return this.rgb().formatRgb()}function Fe(t){var e,n;return t=(t+"").trim().toLowerCase(),(e=Te.exec(t))?(n=e[1].length,e=parseInt(e[1],16),6===n?$e(e):3===n?new je(e>>8&15|e>>4&240,e>>4&15|240&e,(15&e)<<4|15&e,1):8===n?Re(e>>24&255,e>>16&255,e>>8&255,(255&e)/255):4===n?Re(e>>12&15|e>>8&240,e>>8&15|e>>4&240,e>>4&15|240&e,((15&e)<<4|15&e)/255):null):(e=Se.exec(t))?new je(e[1],e[2],e[3],1):(e=Ae.exec(t))?new je(255*e[1]/100,255*e[2]/100,255*e[3]/100,1):(e=Le.exec(t))?Re(e[1],e[2],e[3],e[4]):(e=Be.exec(t))?Re(255*e[1]/100,255*e[2]/100,255*e[3]/100,e[4]):(e=Ne.exec(t))?He(e[1],e[2]/100,e[3]/100,1):(e=De.exec(t))?He(e[1],e[2]/100,e[3]/100,e[4]):Oe.hasOwnProperty(t)?$e(Oe[t]):"transparent"===t?new je(NaN,NaN,NaN,0):null}function $e(t){return new je(t>>16&255,t>>8&255,255&t,1)}function Re(t,e,n,r){return r<=0&&(t=e=n=NaN),new je(t,e,n,r)}function Ze(t){return t instanceof xe||(t=Fe(t)),t?new je((t=t.rgb()).r,t.g,t.b,t.opacity):new je}function Pe(t,e,n,r){return 1===arguments.length?Ze(t):new je(t,e,n,null==r?1:r)}function je(t,e,n,r){this.r=+t,this.g=+e,this.b=+n,this.opacity=+r}function Ye(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}`}function ze(){const t=Ue(this.opacity);return`${1===t?"rgb(":"rgba("}${We(this.r)}, ${We(this.g)}, ${We(this.b)}${1===t?")":`, ${t})`}`}function Ue(t){return isNaN(t)?1:Math.max(0,Math.min(1,t))}function We(t){return Math.max(0,Math.min(255,Math.round(t)||0))}function qe(t){return((t=We(t))<16?"0":"")+t.toString(16)}function He(t,e,n,r){return r<=0?t=e=n=NaN:n<=0||n>=1?t=e=NaN:e<=0&&(t=NaN),new Ge(t,e,n,r)}function Ve(t){if(t instanceof Ge)return new Ge(t.h,t.s,t.l,t.opacity);if(t instanceof xe||(t=Fe(t)),!t)return new Ge;if(t instanceof Ge)return t;var e=(t=t.rgb()).r/255,n=t.g/255,r=t.b/255,i=Math.min(e,n,r),a=Math.max(e,n,r),s=NaN,o=a-i,c=(a+i)/2;return o?(s=e===a?(n-r)/o+6*(n<r):n===a?(r-e)/o+2:(e-n)/o+4,o/=c<.5?a+i:2-a-i,s*=60):o=c>0&&c<1?0:s,new Ge(s,o,c,t.opacity)}function Ge(t,e,n,r){this.h=+t,this.s=+e,this.l=+n,this.opacity=+r}function Xe(t){return(t=(t||0)%360)<0?t+360:t}function Ke(t){return Math.max(0,Math.min(1,t||0))}function Qe(t,e,n){return 255*(t<60?e+(n-e)*t/60:t<180?n:t<240?e+(n-e)*(240-t)/60:e)}function Je(t,e,n,r,i){var a=t*t,s=a*t;return((1-3*t+3*a-s)*e+(4-6*a+3*s)*n+(1+3*t+3*a-3*s)*r+s*i)/6}be(xe,Fe,{copy(t){return Object.assign(new this.constructor,this,t)},displayable(){return this.rgb().displayable()},hex:Me,formatHex:Me,formatHex8:function(){return this.rgb().formatHex8()},formatHsl:function(){return Ve(this).formatHsl()},formatRgb:Ie,toString:Ie}),be(je,Pe,_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},rgb(){return this},clamp(){return new je(We(this.r),We(this.g),We(this.b),Ue(this.opacity))},displayable(){return-.5<=this.r&&this.r<255.5&&-.5<=this.g&&this.g<255.5&&-.5<=this.b&&this.b<255.5&&0<=this.opacity&&this.opacity<=1},hex:Ye,formatHex:Ye,formatHex8:function(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}${qe(255*(isNaN(this.opacity)?1:this.opacity))}`},formatRgb:ze,toString:ze})),be(Ge,(function(t,e,n,r){return 1===arguments.length?Ve(t):new Ge(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new Ge(this.h,this.s,this.l*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new Ge(this.h,this.s,this.l*t,this.opacity)},rgb(){var t=this.h%360+360*(this.h<0),e=isNaN(t)||isNaN(this.s)?0:this.s,n=this.l,r=n+(n<.5?n:1-n)*e,i=2*n-r;return new je(Qe(t>=240?t-240:t+120,i,r),Qe(t,i,r),Qe(t<120?t+240:t-120,i,r),this.opacity)},clamp(){return new Ge(Xe(this.h),Ke(this.s),Ke(this.l),Ue(this.opacity))},displayable(){return(0<=this.s&&this.s<=1||isNaN(this.s))&&0<=this.l&&this.l<=1&&0<=this.opacity&&this.opacity<=1},formatHsl(){const t=Ue(this.opacity);return`${1===t?"hsl(":"hsla("}${Xe(this.h)}, ${100*Ke(this.s)}%, ${100*Ke(this.l)}%${1===t?")":`, ${t})`}`}}));const tn=t=>()=>t;function en(t,e){return function(n){return t+n*e}}function nn(t){return 1==(t=+t)?rn:function(e,n){return n-e?function(t,e,n){return t=Math.pow(t,n),e=Math.pow(e,n)-t,n=1/n,function(r){return Math.pow(t+r*e,n)}}(e,n,t):tn(isNaN(e)?n:e)}}function rn(t,e){var n=e-t;return n?en(t,n):tn(isNaN(t)?e:t)}const an=function t(e){var n=nn(e);function r(t,e){var r=n((t=Pe(t)).r,(e=Pe(e)).r),i=n(t.g,e.g),a=n(t.b,e.b),s=rn(t.opacity,e.opacity);return function(e){return t.r=r(e),t.g=i(e),t.b=a(e),t.opacity=s(e),t+""}}return r.gamma=t,r}(1);function sn(t){return function(e){var n,r,i=e.length,a=new Array(i),s=new Array(i),o=new Array(i);for(n=0;n<i;++n)r=Pe(e[n]),a[n]=r.r||0,s[n]=r.g||0,o[n]=r.b||0;return a=t(a),s=t(s),o=t(o),r.opacity=1,function(t){return r.r=a(t),r.g=s(t),r.b=o(t),r+""}}}sn((function(t){var e=t.length-1;return function(n){var r=n<=0?n=0:n>=1?(n=1,e-1):Math.floor(n*e),i=t[r],a=t[r+1],s=r>0?t[r-1]:2*i-a,o=r<e-1?t[r+2]:2*a-i;return Je((n-r/e)*e,s,i,a,o)}})),sn((function(t){var e=t.length;return function(n){var r=Math.floor(((n%=1)<0?++n:n)*e),i=t[(r+e-1)%e],a=t[r%e],s=t[(r+1)%e],o=t[(r+2)%e];return Je((n-r/e)*e,i,a,s,o)}}));var on=/[-+]?(?:\d+\.?\d*|\.?\d+)(?:[eE][-+]?\d+)?/g,cn=new RegExp(on.source,"g");function ln(t,e){var n,r,i,a=on.lastIndex=cn.lastIndex=0,s=-1,o=[],c=[];for(t+="",e+="";(n=on.exec(t))&&(r=cn.exec(e));)(i=r.index)>a&&(i=e.slice(a,i),o[s]?o[s]+=i:o[++s]=i),(n=n[0])===(r=r[0])?o[s]?o[s]+=r:o[++s]=r:(o[++s]=null,c.push({i:s,x:oe(n,r)})),a=cn.lastIndex;return a<e.length&&(i=e.slice(a),o[s]?o[s]+=i:o[++s]=i),o.length<2?c[0]?function(t){return function(e){return t(e)+""}}(c[0].x):function(t){return function(){return t}}(e):(e=c.length,function(t){for(var n,r=0;r<e;++r)o[(n=c[r]).i]=n.x(t);return o.join("")})}function hn(t,e){var n;return("number"==typeof e?oe:e instanceof Fe?an:(n=Fe(e))?(e=n,an):ln)(t,e)}function un(t){return function(){this.removeAttribute(t)}}function dn(t){return function(){this.removeAttributeNS(t.space,t.local)}}function pn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttribute(t);return s===a?null:s===r?i:i=e(r=s,n)}}function fn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttributeNS(t.space,t.local);return s===a?null:s===r?i:i=e(r=s,n)}}function gn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttribute(t))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttribute(t)}}function yn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttributeNS(t.space,t.local))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttributeNS(t.space,t.local)}}function mn(t,e){return function(n){this.setAttribute(t,e.call(this,n))}}function bn(t,e){return function(n){this.setAttributeNS(t.space,t.local,e.call(this,n))}}function _n(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&bn(t,i)),n}return i._value=e,i}function xn(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&mn(t,i)),n}return i._value=e,i}function vn(t,e){return function(){ie(this,t).delay=+e.apply(this,arguments)}}function kn(t,e){return e=+e,function(){ie(this,t).delay=e}}function wn(t,e){return function(){ae(this,t).duration=+e.apply(this,arguments)}}function En(t,e){return e=+e,function(){ae(this,t).duration=e}}function Cn(t,e){if("function"!=typeof e)throw new Error;return function(){ae(this,t).ease=e}}function Tn(t,e,n){var r,i,a=function(t){return(t+"").trim().split(/^|\s+/).every((function(t){var e=t.indexOf(".");return e>=0&&(t=t.slice(0,e)),!t||"start"===t}))}(e)?ie:ae;return function(){var s=a(this,t),o=s.on;o!==r&&(i=(r=o).copy()).on(e,n),s.on=i}}var Sn=Lt.prototype.constructor;function An(t){return function(){this.style.removeProperty(t)}}function Ln(t,e,n){return function(r){this.style.setProperty(t,e.call(this,r),n)}}function Bn(t,e,n){var r,i;function a(){var a=e.apply(this,arguments);return a!==i&&(r=(i=a)&&Ln(t,a,n)),r}return a._value=e,a}function Nn(t){return function(e){this.textContent=t.call(this,e)}}function Dn(t){var e,n;function r(){var r=t.apply(this,arguments);return r!==n&&(e=(n=r)&&Nn(r)),e}return r._value=t,r}var On=0;function Mn(t,e,n,r){this._groups=t,this._parents=e,this._name=n,this._id=r}function In(){return++On}var Fn=Lt.prototype;Mn.prototype=function(t){return Lt().transition(t)}.prototype={constructor:Mn,select:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=y(t));for(var r=this._groups,i=r.length,a=new Array(i),s=0;s<i;++s)for(var o,c,l=r[s],h=l.length,u=a[s]=new Array(h),d=0;d<h;++d)(o=l[d])&&(c=t.call(o,o.__data__,d,l))&&("__data__"in o&&(c.__data__=o.__data__),u[d]=c,re(u[d],e,n,d,u,se(o,n)));return new Mn(a,this._parents,e,n)},selectAll:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=_(t));for(var r=this._groups,i=r.length,a=[],s=[],o=0;o<i;++o)for(var c,l=r[o],h=l.length,u=0;u<h;++u)if(c=l[u]){for(var d,p=t.call(c,c.__data__,u,l),f=se(c,n),g=0,y=p.length;g<y;++g)(d=p[g])&&re(d,e,n,g,p,f);a.push(p),s.push(c)}return new Mn(a,s,e,n)},selectChild:Fn.selectChild,selectChildren:Fn.selectChildren,filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new Mn(r,this._parents,this._name,this._id)},merge:function(t){if(t._id!==this._id)throw new Error;for(var e=this._groups,n=t._groups,r=e.length,i=n.length,a=Math.min(r,i),s=new Array(r),o=0;o<a;++o)for(var c,l=e[o],h=n[o],u=l.length,d=s[o]=new Array(u),p=0;p<u;++p)(c=l[p]||h[p])&&(d[p]=c);for(;o<r;++o)s[o]=e[o];return new Mn(s,this._parents,this._name,this._id)},selection:function(){return new Sn(this._groups,this._parents)},transition:function(){for(var t=this._name,e=this._id,n=In(),r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)if(s=o[l]){var h=se(s,e);re(s,t,n,l,o,{time:h.time+h.delay+h.duration,delay:0,duration:h.duration,ease:h.ease})}return new Mn(r,this._parents,t,n)},call:Fn.call,nodes:Fn.nodes,node:Fn.node,size:Fn.size,empty:Fn.empty,each:Fn.each,on:function(t,e){var n=this._id;return arguments.length<2?se(this.node(),n).on.on(t):this.each(Tn(n,t,e))},attr:function(t,e){var n=F(t),r="transform"===n?fe:hn;return this.attrTween(t,"function"==typeof e?(n.local?yn:gn)(n,r,me(this,"attr."+t,e)):null==e?(n.local?dn:un)(n):(n.local?fn:pn)(n,r,e))},attrTween:function(t,e){var n="attr."+t;if(arguments.length<2)return(n=this.tween(n))&&n._value;if(null==e)return this.tween(n,null);if("function"!=typeof e)throw new Error;var r=F(t);return this.tween(n,(r.local?_n:xn)(r,e))},style:function(t,e,n){var r="transform"==(t+="")?pe:hn;return null==e?this.styleTween(t,function(t,e){var n,r,i;return function(){var a=H(this,t),s=(this.style.removeProperty(t),H(this,t));return a===s?null:a===n&&s===r?i:i=e(n=a,r=s)}}(t,r)).on("end.style."+t,An(t)):"function"==typeof e?this.styleTween(t,function(t,e,n){var r,i,a;return function(){var s=H(this,t),o=n(this),c=o+"";return null==o&&(this.style.removeProperty(t),c=o=H(this,t)),s===c?null:s===r&&c===i?a:(i=c,a=e(r=s,o))}}(t,r,me(this,"style."+t,e))).each(function(t,e){var n,r,i,a,s="style."+e,o="end."+s;return function(){var c=ae(this,t),l=c.on,h=null==c.value[s]?a||(a=An(e)):void 0;l===n&&i===h||(r=(n=l).copy()).on(o,i=h),c.on=r}}(this._id,t)):this.styleTween(t,function(t,e,n){var r,i,a=n+"";return function(){var s=H(this,t);return s===a?null:s===r?i:i=e(r=s,n)}}(t,r,e),n).on("end.style."+t,null)},styleTween:function(t,e,n){var r="style."+(t+="");if(arguments.length<2)return(r=this.tween(r))&&r._value;if(null==e)return this.tween(r,null);if("function"!=typeof e)throw new Error;return this.tween(r,Bn(t,e,null==n?"":n))},text:function(t){return this.tween("text","function"==typeof t?function(t){return function(){var e=t(this);this.textContent=null==e?"":e}}(me(this,"text",t)):function(t){return function(){this.textContent=t}}(null==t?"":t+""))},textTween:function(t){var e="text";if(arguments.length<1)return(e=this.tween(e))&&e._value;if(null==t)return this.tween(e,null);if("function"!=typeof t)throw new Error;return this.tween(e,Dn(t))},remove:function(){return this.on("end.remove",function(t){return function(){var e=this.parentNode;for(var n in this.__transition)if(+n!==t)return;e&&e.removeChild(this)}}(this._id))},tween:function(t,e){var n=this._id;if(t+="",arguments.length<2){for(var r,i=se(this.node(),n).tween,a=0,s=i.length;a<s;++a)if((r=i[a]).name===t)return r.value;return null}return this.each((null==e?ge:ye)(n,t,e))},delay:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?vn:kn)(e,t)):se(this.node(),e).delay},duration:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?wn:En)(e,t)):se(this.node(),e).duration},ease:function(t){var e=this._id;return arguments.length?this.each(Cn(e,t)):se(this.node(),e).ease},easeVarying:function(t){if("function"!=typeof t)throw new Error;return this.each(function(t,e){return function(){var n=e.apply(this,arguments);if("function"!=typeof n)throw new Error;ae(this,t).ease=n}}(this._id,t))},end:function(){var t,e,n=this,r=n._id,i=n.size();return new Promise((function(a,s){var o={value:s},c={value:function(){0==--i&&a()}};n.each((function(){var n=ae(this,r),i=n.on;i!==t&&((e=(t=i).copy())._.cancel.push(o),e._.interrupt.push(o),e._.end.push(c)),n.on=e})),0===i&&a()}))},[Symbol.iterator]:Fn[Symbol.iterator]};var $n={time:null,delay:0,duration:250,ease:function(t){return((t*=2)<=1?t*t*t:(t-=2)*t*t+2)/2}};function Rn(t,e){for(var n;!(n=t.__transition)||!(n=n[e]);)if(!(t=t.parentNode))throw new Error(`transition ${e} not found`);return n}Lt.prototype.interrupt=function(t){return this.each((function(){!function(t,e){var n,r,i,a=t.__transition,s=!0;if(a){for(i in e=null==e?null:e+"",a)(n=a[i]).name===e?(r=n.state>2&&n.state<5,n.state=6,n.timer.stop(),n.on.call(r?"interrupt":"cancel",t,t.__data__,n.index,n.group),delete a[i]):s=!1;s&&delete t.__transition}}(this,t)}))},Lt.prototype.transition=function(t){var e,n;t instanceof Mn?(e=t._id,t=t._name):(e=In(),(n=$n).time=Ht(),t=null==t?null:t+"");for(var r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)(s=o[l])&&re(s,t,e,l,o,n||Rn(s,e));return new Mn(r,this._parents,t,e)};const{abs:Zn,max:Pn,min:jn}=Math;function Yn(t){return[+t[0],+t[1]]}function zn(t){return[Yn(t[0]),Yn(t[1])]}["w","e"].map(Un),["n","s"].map(Un),["n","w","e","s","nw","ne","sw","se"].map(Un);function Un(t){return{type:t}}function Wn(t){if(!t.ok)throw new Error(t.status+" "+t.statusText);return t.text()}function qn(t){return(e,n)=>function(t,e){return fetch(t,e).then(Wn)}(e,n).then((e=>(new DOMParser).parseFromString(e,t)))}qn("application/xml");qn("text/html");var Hn=qn("image/svg+xml");const Vn=Math.PI/180,Gn=180/Math.PI,Xn=.96422,Kn=.82521,Qn=4/29,Jn=6/29,tr=3*Jn*Jn;function er(t){if(t instanceof nr)return new nr(t.l,t.a,t.b,t.opacity);if(t instanceof lr)return hr(t);t instanceof je||(t=Ze(t));var e,n,r=sr(t.r),i=sr(t.g),a=sr(t.b),s=rr((.2225045*r+.7168786*i+.0606169*a)/1);return r===i&&i===a?e=n=s:(e=rr((.4360747*r+.3850649*i+.1430804*a)/Xn),n=rr((.0139322*r+.0971045*i+.7141733*a)/Kn)),new nr(116*s-16,500*(e-s),200*(s-n),t.opacity)}function nr(t,e,n,r){this.l=+t,this.a=+e,this.b=+n,this.opacity=+r}function rr(t){return t>.008856451679035631?Math.pow(t,1/3):t/tr+Qn}function ir(t){return t>Jn?t*t*t:tr*(t-Qn)}function ar(t){return 255*(t<=.0031308?12.92*t:1.055*Math.pow(t,1/2.4)-.055)}function sr(t){return(t/=255)<=.04045?t/12.92:Math.pow((t+.055)/1.055,2.4)}function or(t){if(t instanceof lr)return new lr(t.h,t.c,t.l,t.opacity);if(t instanceof nr||(t=er(t)),0===t.a&&0===t.b)return new lr(NaN,0<t.l&&t.l<100?0:NaN,t.l,t.opacity);var e=Math.atan2(t.b,t.a)*Gn;return new lr(e<0?e+360:e,Math.sqrt(t.a*t.a+t.b*t.b),t.l,t.opacity)}function cr(t,e,n,r){return 1===arguments.length?or(t):new lr(t,e,n,null==r?1:r)}function lr(t,e,n,r){this.h=+t,this.c=+e,this.l=+n,this.opacity=+r}function hr(t){if(isNaN(t.h))return new nr(t.l,0,0,t.opacity);var e=t.h*Vn;return new nr(t.l,Math.cos(e)*t.c,Math.sin(e)*t.c,t.opacity)}function ur(t){return function(e,n){var r=t((e=cr(e)).h,(n=cr(n)).h),i=rn(e.c,n.c),a=rn(e.l,n.l),s=rn(e.opacity,n.opacity);return function(t){return e.h=r(t),e.c=i(t),e.l=a(t),e.opacity=s(t),e+""}}}be(nr,(function(t,e,n,r){return 1===arguments.length?er(t):new nr(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return new nr(this.l+18*(null==t?1:t),this.a,this.b,this.opacity)},darker(t){return new nr(this.l-18*(null==t?1:t),this.a,this.b,this.opacity)},rgb(){var t=(this.l+16)/116,e=isNaN(this.a)?t:t+this.a/500,n=isNaN(this.b)?t:t-this.b/200;return new je(ar(3.1338561*(e=Xn*ir(e))-1.6168667*(t=1*ir(t))-.4906146*(n=Kn*ir(n))),ar(-.9787684*e+1.9161415*t+.033454*n),ar(.0719453*e-.2289914*t+1.4052427*n),this.opacity)}})),be(lr,cr,_e(xe,{brighter(t){return new lr(this.h,this.c,this.l+18*(null==t?1:t),this.opacity)},darker(t){return new lr(this.h,this.c,this.l-18*(null==t?1:t),this.opacity)},rgb(){return hr(this).rgb()}}));const dr=ur((function(t,e){var n=e-t;return n?en(t,n>180||n<-180?n-360*Math.round(n/360):n):tn(isNaN(t)?e:t)}));ur(rn);const pr=Math.sqrt(50),fr=Math.sqrt(10),gr=Math.sqrt(2);function yr(t,e,n){const r=(e-t)/Math.max(0,n),i=Math.floor(Math.log10(r)),a=r/Math.pow(10,i),s=a>=pr?10:a>=fr?5:a>=gr?2:1;let o,c,l;return i<0?(l=Math.pow(10,-i)/s,o=Math.round(t*l),c=Math.round(e*l),o/l<t&&++o,c/l>e&&--c,l=-l):(l=Math.pow(10,i)*s,o=Math.round(t/l),c=Math.round(e/l),o*l<t&&++o,c*l>e&&--c),c<o&&.5<=n&&n<2?yr(t,e,2*n):[o,c,l]}function mr(t,e,n){return yr(t=+t,e=+e,n=+n)[2]}function br(t,e,n){n=+n;const r=(e=+e)<(t=+t),i=r?mr(e,t,n):mr(t,e,n);return(r?-1:1)*(i<0?1/-i:i)}function _r(t,e){return null==t||null==e?NaN:t<e?-1:t>e?1:t>=e?0:NaN}function xr(t,e){return null==t||null==e?NaN:e<t?-1:e>t?1:e>=t?0:NaN}function vr(t){let e,n,r;function i(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<0?i=e+1:a=e}while(i<a)}return i}return 2!==t.length?(e=_r,n=(e,n)=>_r(t(e),n),r=(e,n)=>t(e)-n):(e=t===_r||t===xr?t:kr,n=t,r=t),{left:i,center:function(t,e,n=0,a=t.length){const s=i(t,e,n,a-1);return s>n&&r(t[s-1],e)>-r(t[s],e)?s-1:s},right:function(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<=0?i=e+1:a=e}while(i<a)}return i}}}function kr(){return 0}const wr=vr(_r),Er=wr.right,Cr=(wr.left,vr((function(t){return null===t?NaN:+t})).center,Er);function Tr(t,e){var n,r=e?e.length:0,i=t?Math.min(r,t.length):0,a=new Array(i),s=new Array(r);for(n=0;n<i;++n)a[n]=Br(t[n],e[n]);for(;n<r;++n)s[n]=e[n];return function(t){for(n=0;n<i;++n)s[n]=a[n](t);return s}}function Sr(t,e){var n=new Date;return t=+t,e=+e,function(r){return n.setTime(t*(1-r)+e*r),n}}function Ar(t,e){var n,r={},i={};for(n in null!==t&&"object"==typeof t||(t={}),null!==e&&"object"==typeof e||(e={}),e)n in t?r[n]=Br(t[n],e[n]):i[n]=e[n];return function(t){for(n in r)i[n]=r[n](t);return i}}function Lr(t,e){e||(e=[]);var n,r=t?Math.min(e.length,t.length):0,i=e.slice();return function(a){for(n=0;n<r;++n)i[n]=t[n]*(1-a)+e[n]*a;return i}}function Br(t,e){var n,r,i=typeof e;return null==e||"boolean"===i?tn(e):("number"===i?oe:"string"===i?(n=Fe(e))?(e=n,an):ln:e instanceof Fe?an:e instanceof Date?Sr:(r=e,!ArrayBuffer.isView(r)||r instanceof DataView?Array.isArray(e)?Tr:"function"!=typeof e.valueOf&&"function"!=typeof e.toString||isNaN(e)?Ar:oe:Lr))(t,e)}function Nr(t,e){return t=+t,e=+e,function(n){return Math.round(t*(1-n)+e*n)}}function Dr(t){return+t}var Or=[0,1];function Mr(t){return t}function Ir(t,e){return(e-=t=+t)?function(n){return(n-t)/e}:(n=isNaN(e)?NaN:.5,function(){return n});var n}function Fr(t,e,n){var r=t[0],i=t[1],a=e[0],s=e[1];return i<r?(r=Ir(i,r),a=n(s,a)):(r=Ir(r,i),a=n(a,s)),function(t){return a(r(t))}}function $r(t,e,n){var r=Math.min(t.length,e.length)-1,i=new Array(r),a=new Array(r),s=-1;for(t[r]<t[0]&&(t=t.slice().reverse(),e=e.slice().reverse());++s<r;)i[s]=Ir(t[s],t[s+1]),a[s]=n(e[s],e[s+1]);return function(e){var n=Cr(t,e,1,r)-1;return a[n](i[n](e))}}function Rr(t,e){return e.domain(t.domain()).range(t.range()).interpolate(t.interpolate()).clamp(t.clamp()).unknown(t.unknown())}function Zr(){var t,e,n,r,i,a,s=Or,o=Or,c=Br,l=Mr;function h(){var t,e,n,c=Math.min(s.length,o.length);return l!==Mr&&(t=s[0],e=s[c-1],t>e&&(n=t,t=e,e=n),l=function(n){return Math.max(t,Math.min(e,n))}),r=c>2?$r:Fr,i=a=null,u}function u(e){return null==e||isNaN(e=+e)?n:(i||(i=r(s.map(t),o,c)))(t(l(e)))}return u.invert=function(n){return l(e((a||(a=r(o,s.map(t),oe)))(n)))},u.domain=function(t){return arguments.length?(s=Array.from(t,Dr),h()):s.slice()},u.range=function(t){return arguments.length?(o=Array.from(t),h()):o.slice()},u.rangeRound=function(t){return o=Array.from(t),c=Nr,h()},u.clamp=function(t){return arguments.length?(l=!!t||Mr,h()):l!==Mr},u.interpolate=function(t){return arguments.length?(c=t,h()):c},u.unknown=function(t){return arguments.length?(n=t,u):n},function(n,r){return t=n,e=r,h()}}function Pr(){return Zr()(Mr,Mr)}function jr(t,e){switch(arguments.length){case 0:break;case 1:this.range(t);break;default:this.range(e).domain(t)}return this}var Yr,zr=/^(?:(.)?([<>=^]))?([+\-( ])?([$#])?(0)?(\d+)?(,)?(\.\d+)?(~)?([a-z%])?$/i;function Ur(t){if(!(e=zr.exec(t)))throw new Error("invalid format: "+t);var e;return new Wr({fill:e[1],align:e[2],sign:e[3],symbol:e[4],zero:e[5],width:e[6],comma:e[7],precision:e[8]&&e[8].slice(1),trim:e[9],type:e[10]})}function Wr(t){this.fill=void 0===t.fill?" ":t.fill+"",this.align=void 0===t.align?">":t.align+"",this.sign=void 0===t.sign?"-":t.sign+"",this.symbol=void 0===t.symbol?"":t.symbol+"",this.zero=!!t.zero,this.width=void 0===t.width?void 0:+t.width,this.comma=!!t.comma,this.precision=void 0===t.precision?void 0:+t.precision,this.trim=!!t.trim,this.type=void 0===t.type?"":t.type+""}function qr(t,e){if((n=(t=e?t.toExponential(e-1):t.toExponential()).indexOf("e"))<0)return null;var n,r=t.slice(0,n);return[r.length>1?r[0]+r.slice(2):r,+t.slice(n+1)]}function Hr(t){return(t=qr(Math.abs(t)))?t[1]:NaN}function Vr(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1];return i<0?"0."+new Array(-i).join("0")+r:r.length>i+1?r.slice(0,i+1)+"."+r.slice(i+1):r+new Array(i-r.length+2).join("0")}Ur.prototype=Wr.prototype,Wr.prototype.toString=function(){return this.fill+this.align+this.sign+this.symbol+(this.zero?"0":"")+(void 0===this.width?"":Math.max(1,0|this.width))+(this.comma?",":"")+(void 0===this.precision?"":"."+Math.max(0,0|this.precision))+(this.trim?"~":"")+this.type};const Gr={"%":(t,e)=>(100*t).toFixed(e),b:t=>Math.round(t).toString(2),c:t=>t+"",d:function(t){return Math.abs(t=Math.round(t))>=1e21?t.toLocaleString("en").replace(/,/g,""):t.toString(10)},e:(t,e)=>t.toExponential(e),f:(t,e)=>t.toFixed(e),g:(t,e)=>t.toPrecision(e),o:t=>Math.round(t).toString(8),p:(t,e)=>Vr(100*t,e),r:Vr,s:function(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1],a=i-(Yr=3*Math.max(-8,Math.min(8,Math.floor(i/3))))+1,s=r.length;return a===s?r:a>s?r+new Array(a-s+1).join("0"):a>0?r.slice(0,a)+"."+r.slice(a):"0."+new Array(1-a).join("0")+qr(t,Math.max(0,e+a-1))[0]},X:t=>Math.round(t).toString(16).toUpperCase(),x:t=>Math.round(t).toString(16)};function Xr(t){return t}var Kr,Qr,Jr,ti=Array.prototype.map,ei=["y","z","a","f","p","n","\xb5","m","","k","M","G","T","P","E","Z","Y"];function ni(t){var e,n,r=void 0===t.grouping||void 0===t.thousands?Xr:(e=ti.call(t.grouping,Number),n=t.thousands+"",function(t,r){for(var i=t.length,a=[],s=0,o=e[0],c=0;i>0&&o>0&&(c+o+1>r&&(o=Math.max(1,r-c)),a.push(t.substring(i-=o,i+o)),!((c+=o+1)>r));)o=e[s=(s+1)%e.length];return a.reverse().join(n)}),i=void 0===t.currency?"":t.currency[0]+"",a=void 0===t.currency?"":t.currency[1]+"",s=void 0===t.decimal?".":t.decimal+"",o=void 0===t.numerals?Xr:function(t){return function(e){return e.replace(/[0-9]/g,(function(e){return t[+e]}))}}(ti.call(t.numerals,String)),c=void 0===t.percent?"%":t.percent+"",l=void 0===t.minus?"\u2212":t.minus+"",h=void 0===t.nan?"NaN":t.nan+"";function u(t){var e=(t=Ur(t)).fill,n=t.align,u=t.sign,d=t.symbol,p=t.zero,f=t.width,g=t.comma,y=t.precision,m=t.trim,b=t.type;"n"===b?(g=!0,b="g"):Gr[b]||(void 0===y&&(y=12),m=!0,b="g"),(p||"0"===e&&"="===n)&&(p=!0,e="0",n="=");var _="$"===d?i:"#"===d&&/[boxX]/.test(b)?"0"+b.toLowerCase():"",x="$"===d?a:/[%p]/.test(b)?c:"",v=Gr[b],k=/[defgprs%]/.test(b);function w(t){var i,a,c,d=_,w=x;if("c"===b)w=v(t)+w,t="";else{var E=(t=+t)<0||1/t<0;if(t=isNaN(t)?h:v(Math.abs(t),y),m&&(t=function(t){t:for(var e,n=t.length,r=1,i=-1;r<n;++r)switch(t[r]){case".":i=e=r;break;case"0":0===i&&(i=r),e=r;break;default:if(!+t[r])break t;i>0&&(i=0)}return i>0?t.slice(0,i)+t.slice(e+1):t}(t)),E&&0==+t&&"+"!==u&&(E=!1),d=(E?"("===u?u:l:"-"===u||"("===u?"":u)+d,w=("s"===b?ei[8+Yr/3]:"")+w+(E&&"("===u?")":""),k)for(i=-1,a=t.length;++i<a;)if(48>(c=t.charCodeAt(i))||c>57){w=(46===c?s+t.slice(i+1):t.slice(i))+w,t=t.slice(0,i);break}}g&&!p&&(t=r(t,1/0));var C=d.length+t.length+w.length,T=C<f?new Array(f-C+1).join(e):"";switch(g&&p&&(t=r(T+t,T.length?f-w.length:1/0),T=""),n){case"<":t=d+t+w+T;break;case"=":t=d+T+t+w;break;case"^":t=T.slice(0,C=T.length>>1)+d+t+w+T.slice(C);break;default:t=T+d+t+w}return o(t)}return y=void 0===y?6:/[gprs]/.test(b)?Math.max(1,Math.min(21,y)):Math.max(0,Math.min(20,y)),w.toString=function(){return t+""},w}return{format:u,formatPrefix:function(t,e){var n=u(((t=Ur(t)).type="f",t)),r=3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3))),i=Math.pow(10,-r),a=ei[8+r/3];return function(t){return n(i*t)+a}}}}function ri(t,e,n,r){var i,a=br(t,e,n);switch((r=Ur(null==r?",f":r)).type){case"s":var s=Math.max(Math.abs(t),Math.abs(e));return null!=r.precision||isNaN(i=function(t,e){return Math.max(0,3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3)))-Hr(Math.abs(t)))}(a,s))||(r.precision=i),Jr(r,s);case"":case"e":case"g":case"p":case"r":null!=r.precision||isNaN(i=function(t,e){return t=Math.abs(t),e=Math.abs(e)-t,Math.max(0,Hr(e)-Hr(t))+1}(a,Math.max(Math.abs(t),Math.abs(e))))||(r.precision=i-("e"===r.type));break;case"f":case"%":null!=r.precision||isNaN(i=function(t){return Math.max(0,-Hr(Math.abs(t)))}(a))||(r.precision=i-2*("%"===r.type))}return Qr(r)}function ii(t){var e=t.domain;return t.ticks=function(t){var n=e();return function(t,e,n){if(!((n=+n)>0))return[];if((t=+t)==(e=+e))return[t];const r=e<t,[i,a,s]=r?yr(e,t,n):yr(t,e,n);if(!(a>=i))return[];const o=a-i+1,c=new Array(o);if(r)if(s<0)for(let l=0;l<o;++l)c[l]=(a-l)/-s;else for(let l=0;l<o;++l)c[l]=(a-l)*s;else if(s<0)for(let l=0;l<o;++l)c[l]=(i+l)/-s;else for(let l=0;l<o;++l)c[l]=(i+l)*s;return c}(n[0],n[n.length-1],null==t?10:t)},t.tickFormat=function(t,n){var r=e();return ri(r[0],r[r.length-1],null==t?10:t,n)},t.nice=function(n){null==n&&(n=10);var r,i,a=e(),s=0,o=a.length-1,c=a[s],l=a[o],h=10;for(l<c&&(i=c,c=l,l=i,i=s,s=o,o=i);h-- >0;){if((i=mr(c,l,n))===r)return a[s]=c,a[o]=l,e(a);if(i>0)c=Math.floor(c/i)*i,l=Math.ceil(l/i)*i;else{if(!(i<0))break;c=Math.ceil(c*i)/i,l=Math.floor(l*i)/i}r=i}return t},t}function ai(){var t=Pr();return t.copy=function(){return Rr(t,ai())},jr.apply(t,arguments),ii(t)}Kr=ni({thousands:",",grouping:[3],currency:["$",""]}),Qr=Kr.format,Jr=Kr.formatPrefix;class si extends Map{constructor(t,e=hi){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:e}}),null!=t)for(const[n,r]of t)this.set(n,r)}get(t){return super.get(oi(this,t))}has(t){return super.has(oi(this,t))}set(t,e){return super.set(ci(this,t),e)}delete(t){return super.delete(li(this,t))}}Set;function oi({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):n}function ci({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):(t.set(r,n),n)}function li({_intern:t,_key:e},n){const r=e(n);return t.has(r)&&(n=t.get(r),t.delete(r)),n}function hi(t){return null!==t&&"object"==typeof t?t.valueOf():t}const ui=Symbol("implicit");function di(){var t=new si,e=[],n=[],r=ui;function i(i){let a=t.get(i);if(void 0===a){if(r!==ui)return r;t.set(i,a=e.push(i)-1)}return n[a%n.length]}return i.domain=function(n){if(!arguments.length)return e.slice();e=[],t=new si;for(const r of n)t.has(r)||t.set(r,e.push(r)-1);return i},i.range=function(t){return arguments.length?(n=Array.from(t),i):n.slice()},i.unknown=function(t){return arguments.length?(r=t,i):r},i.copy=function(){return di(e,n).unknown(r)},jr.apply(i,arguments),i}const pi=1e3,fi=6e4,gi=36e5,yi=864e5,mi=6048e5,bi=2592e6,_i=31536e6,xi=new Date,vi=new Date;function ki(t,e,n,r){function i(e){return t(e=0===arguments.length?new Date:new Date(+e)),e}return i.floor=e=>(t(e=new Date(+e)),e),i.ceil=n=>(t(n=new Date(n-1)),e(n,1),t(n),n),i.round=t=>{const e=i(t),n=i.ceil(t);return t-e<n-t?e:n},i.offset=(t,n)=>(e(t=new Date(+t),null==n?1:Math.floor(n)),t),i.range=(n,r,a)=>{const s=[];if(n=i.ceil(n),a=null==a?1:Math.floor(a),!(n<r&&a>0))return s;let o;do{s.push(o=new Date(+n)),e(n,a),t(n)}while(o<n&&n<r);return s},i.filter=n=>ki((e=>{if(e>=e)for(;t(e),!n(e);)e.setTime(e-1)}),((t,r)=>{if(t>=t)if(r<0)for(;++r<=0;)for(;e(t,-1),!n(t););else for(;--r>=0;)for(;e(t,1),!n(t););})),n&&(i.count=(e,r)=>(xi.setTime(+e),vi.setTime(+r),t(xi),t(vi),Math.floor(n(xi,vi))),i.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?i.filter(r?e=>r(e)%t==0:e=>i.count(0,e)%t==0):i:null)),i}const wi=ki((()=>{}),((t,e)=>{t.setTime(+t+e)}),((t,e)=>e-t));wi.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?ki((e=>{e.setTime(Math.floor(e/t)*t)}),((e,n)=>{e.setTime(+e+n*t)}),((e,n)=>(n-e)/t)):wi:null);wi.range;const Ei=ki((t=>{t.setTime(t-t.getMilliseconds())}),((t,e)=>{t.setTime(+t+e*pi)}),((t,e)=>(e-t)/pi),(t=>t.getUTCSeconds())),Ci=(Ei.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getMinutes()))),Ti=(Ci.range,ki((t=>{t.setUTCSeconds(0,0)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getUTCMinutes()))),Si=(Ti.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi-t.getMinutes()*fi)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getHours()))),Ai=(Si.range,ki((t=>{t.setUTCMinutes(0,0,0)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getUTCHours()))),Li=(Ai.range,ki((t=>t.setHours(0,0,0,0)),((t,e)=>t.setDate(t.getDate()+e)),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/yi),(t=>t.getDate()-1))),Bi=(Li.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>t.getUTCDate()-1))),Ni=(Bi.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>Math.floor(t/yi))));Ni.range;function Di(t){return ki((e=>{e.setDate(e.getDate()-(e.getDay()+7-t)%7),e.setHours(0,0,0,0)}),((t,e)=>{t.setDate(t.getDate()+7*e)}),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/mi))}const Oi=Di(0),Mi=Di(1),Ii=Di(2),Fi=Di(3),$i=Di(4),Ri=Di(5),Zi=Di(6);Oi.range,Mi.range,Ii.range,Fi.range,$i.range,Ri.range,Zi.range;function Pi(t){return ki((e=>{e.setUTCDate(e.getUTCDate()-(e.getUTCDay()+7-t)%7),e.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+7*e)}),((t,e)=>(e-t)/mi))}const ji=Pi(0),Yi=Pi(1),zi=Pi(2),Ui=Pi(3),Wi=Pi(4),qi=Pi(5),Hi=Pi(6),Vi=(ji.range,Yi.range,zi.range,Ui.range,Wi.range,qi.range,Hi.range,ki((t=>{t.setDate(1),t.setHours(0,0,0,0)}),((t,e)=>{t.setMonth(t.getMonth()+e)}),((t,e)=>e.getMonth()-t.getMonth()+12*(e.getFullYear()-t.getFullYear())),(t=>t.getMonth()))),Gi=(Vi.range,ki((t=>{t.setUTCDate(1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCMonth(t.getUTCMonth()+e)}),((t,e)=>e.getUTCMonth()-t.getUTCMonth()+12*(e.getUTCFullYear()-t.getUTCFullYear())),(t=>t.getUTCMonth()))),Xi=(Gi.range,ki((t=>{t.setMonth(0,1),t.setHours(0,0,0,0)}),((t,e)=>{t.setFullYear(t.getFullYear()+e)}),((t,e)=>e.getFullYear()-t.getFullYear()),(t=>t.getFullYear())));Xi.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setFullYear(Math.floor(e.getFullYear()/t)*t),e.setMonth(0,1),e.setHours(0,0,0,0)}),((e,n)=>{e.setFullYear(e.getFullYear()+n*t)})):null;Xi.range;const Ki=ki((t=>{t.setUTCMonth(0,1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCFullYear(t.getUTCFullYear()+e)}),((t,e)=>e.getUTCFullYear()-t.getUTCFullYear()),(t=>t.getUTCFullYear()));Ki.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setUTCFullYear(Math.floor(e.getUTCFullYear()/t)*t),e.setUTCMonth(0,1),e.setUTCHours(0,0,0,0)}),((e,n)=>{e.setUTCFullYear(e.getUTCFullYear()+n*t)})):null;Ki.range;function Qi(t,e,n,r,i,a){const s=[[Ei,1,pi],[Ei,5,5e3],[Ei,15,15e3],[Ei,30,3e4],[a,1,fi],[a,5,3e5],[a,15,9e5],[a,30,18e5],[i,1,gi],[i,3,108e5],[i,6,216e5],[i,12,432e5],[r,1,yi],[r,2,1728e5],[n,1,mi],[e,1,bi],[e,3,7776e6],[t,1,_i]];function o(e,n,r){const i=Math.abs(n-e)/r,a=vr((([,,t])=>t)).right(s,i);if(a===s.length)return t.every(br(e/_i,n/_i,r));if(0===a)return wi.every(Math.max(br(e,n,r),1));const[o,c]=s[i/s[a-1][2]<s[a][2]/i?a-1:a];return o.every(c)}return[function(t,e,n){const r=e<t;r&&([t,e]=[e,t]);const i=n&&"function"==typeof n.range?n:o(t,e,n),a=i?i.range(t,+e+1):[];return r?a.reverse():a},o]}const[Ji,ta]=Qi(Ki,Gi,ji,Ni,Ai,Ti),[ea,na]=Qi(Xi,Vi,Oi,Li,Si,Ci);function ra(t){if(0<=t.y&&t.y<100){var e=new Date(-1,t.m,t.d,t.H,t.M,t.S,t.L);return e.setFullYear(t.y),e}return new Date(t.y,t.m,t.d,t.H,t.M,t.S,t.L)}function ia(t){if(0<=t.y&&t.y<100){var e=new Date(Date.UTC(-1,t.m,t.d,t.H,t.M,t.S,t.L));return e.setUTCFullYear(t.y),e}return new Date(Date.UTC(t.y,t.m,t.d,t.H,t.M,t.S,t.L))}function aa(t,e,n){return{y:t,m:e,d:n,H:0,M:0,S:0,L:0}}var sa,oa,ca={"-":"",_:" ",0:"0"},la=/^\s*\d+/,ha=/^%/,ua=/[\\^$*+?|[\]().{}]/g;function da(t,e,n){var r=t<0?"-":"",i=(r?-t:t)+"",a=i.length;return r+(a<n?new Array(n-a+1).join(e)+i:i)}function pa(t){return t.replace(ua,"\\$&")}function fa(t){return new RegExp("^(?:"+t.map(pa).join("|")+")","i")}function ga(t){return new Map(t.map(((t,e)=>[t.toLowerCase(),e])))}function ya(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.w=+r[0],n+r[0].length):-1}function ma(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.u=+r[0],n+r[0].length):-1}function ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.U=+r[0],n+r[0].length):-1}function _a(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.V=+r[0],n+r[0].length):-1}function xa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.W=+r[0],n+r[0].length):-1}function va(t,e,n){var r=la.exec(e.slice(n,n+4));return r?(t.y=+r[0],n+r[0].length):-1}function ka(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.y=+r[0]+(+r[0]>68?1900:2e3),n+r[0].length):-1}function wa(t,e,n){var r=/^(Z)|([+-]\d\d)(?::?(\d\d))?/.exec(e.slice(n,n+6));return r?(t.Z=r[1]?0:-(r[2]+(r[3]||"00")),n+r[0].length):-1}function Ea(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.q=3*r[0]-3,n+r[0].length):-1}function Ca(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.m=r[0]-1,n+r[0].length):-1}function Ta(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.d=+r[0],n+r[0].length):-1}function Sa(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.m=0,t.d=+r[0],n+r[0].length):-1}function Aa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.H=+r[0],n+r[0].length):-1}function La(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.M=+r[0],n+r[0].length):-1}function Ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.S=+r[0],n+r[0].length):-1}function Na(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.L=+r[0],n+r[0].length):-1}function Da(t,e,n){var r=la.exec(e.slice(n,n+6));return r?(t.L=Math.floor(r[0]/1e3),n+r[0].length):-1}function Oa(t,e,n){var r=ha.exec(e.slice(n,n+1));return r?n+r[0].length:-1}function Ma(t,e,n){var r=la.exec(e.slice(n));return r?(t.Q=+r[0],n+r[0].length):-1}function Ia(t,e,n){var r=la.exec(e.slice(n));return r?(t.s=+r[0],n+r[0].length):-1}function Fa(t,e){return da(t.getDate(),e,2)}function $a(t,e){return da(t.getHours(),e,2)}function Ra(t,e){return da(t.getHours()%12||12,e,2)}function Za(t,e){return da(1+Li.count(Xi(t),t),e,3)}function Pa(t,e){return da(t.getMilliseconds(),e,3)}function ja(t,e){return Pa(t,e)+"000"}function Ya(t,e){return da(t.getMonth()+1,e,2)}function za(t,e){return da(t.getMinutes(),e,2)}function Ua(t,e){return da(t.getSeconds(),e,2)}function Wa(t){var e=t.getDay();return 0===e?7:e}function qa(t,e){return da(Oi.count(Xi(t)-1,t),e,2)}function Ha(t){var e=t.getDay();return e>=4||0===e?$i(t):$i.ceil(t)}function Va(t,e){return t=Ha(t),da($i.count(Xi(t),t)+(4===Xi(t).getDay()),e,2)}function Ga(t){return t.getDay()}function Xa(t,e){return da(Mi.count(Xi(t)-1,t),e,2)}function Ka(t,e){return da(t.getFullYear()%100,e,2)}function Qa(t,e){return da((t=Ha(t)).getFullYear()%100,e,2)}function Ja(t,e){return da(t.getFullYear()%1e4,e,4)}function ts(t,e){var n=t.getDay();return da((t=n>=4||0===n?$i(t):$i.ceil(t)).getFullYear()%1e4,e,4)}function es(t){var e=t.getTimezoneOffset();return(e>0?"-":(e*=-1,"+"))+da(e/60|0,"0",2)+da(e%60,"0",2)}function ns(t,e){return da(t.getUTCDate(),e,2)}function rs(t,e){return da(t.getUTCHours(),e,2)}function is(t,e){return da(t.getUTCHours()%12||12,e,2)}function as(t,e){return da(1+Bi.count(Ki(t),t),e,3)}function ss(t,e){return da(t.getUTCMilliseconds(),e,3)}function os(t,e){return ss(t,e)+"000"}function cs(t,e){return da(t.getUTCMonth()+1,e,2)}function ls(t,e){return da(t.getUTCMinutes(),e,2)}function hs(t,e){return da(t.getUTCSeconds(),e,2)}function us(t){var e=t.getUTCDay();return 0===e?7:e}function ds(t,e){return da(ji.count(Ki(t)-1,t),e,2)}function ps(t){var e=t.getUTCDay();return e>=4||0===e?Wi(t):Wi.ceil(t)}function fs(t,e){return t=ps(t),da(Wi.count(Ki(t),t)+(4===Ki(t).getUTCDay()),e,2)}function gs(t){return t.getUTCDay()}function ys(t,e){return da(Yi.count(Ki(t)-1,t),e,2)}function ms(t,e){return da(t.getUTCFullYear()%100,e,2)}function bs(t,e){return da((t=ps(t)).getUTCFullYear()%100,e,2)}function _s(t,e){return da(t.getUTCFullYear()%1e4,e,4)}function xs(t,e){var n=t.getUTCDay();return da((t=n>=4||0===n?Wi(t):Wi.ceil(t)).getUTCFullYear()%1e4,e,4)}function vs(){return"+0000"}function ks(){return"%"}function ws(t){return+t}function Es(t){return Math.floor(+t/1e3)}function Cs(t){return new Date(t)}function Ts(t){return t instanceof Date?+t:+new Date(+t)}function Ss(t,e,n,r,i,a,s,o,c,l){var h=Pr(),u=h.invert,d=h.domain,p=l(".%L"),f=l(":%S"),g=l("%I:%M"),y=l("%I %p"),m=l("%a %d"),b=l("%b %d"),_=l("%B"),x=l("%Y");function v(t){return(c(t)<t?p:o(t)<t?f:s(t)<t?g:a(t)<t?y:r(t)<t?i(t)<t?m:b:n(t)<t?_:x)(t)}return h.invert=function(t){return new Date(u(t))},h.domain=function(t){return arguments.length?d(Array.from(t,Ts)):d().map(Cs)},h.ticks=function(e){var n=d();return t(n[0],n[n.length-1],null==e?10:e)},h.tickFormat=function(t,e){return null==e?v:l(e)},h.nice=function(t){var n=d();return t&&"function"==typeof t.range||(t=e(n[0],n[n.length-1],null==t?10:t)),t?d(function(t,e){var n,r=0,i=(t=t.slice()).length-1,a=t[r],s=t[i];return s<a&&(n=r,r=i,i=n,n=a,a=s,s=n),t[r]=e.floor(a),t[i]=e.ceil(s),t}(n,t)):h},h.copy=function(){return Rr(h,Ss(t,e,n,r,i,a,s,o,c,l))},h}function As(){return jr.apply(Ss(ea,na,Xi,Vi,Oi,Li,Si,Ci,Ei,oa).domain([new Date(2e3,0,1),new Date(2e3,0,2)]),arguments)}function Ls(t){return"string"==typeof t?new St([[document.querySelector(t)]],[document.documentElement]):new St([[t]],Tt)}function Bs(t){return"string"==typeof t?new St([document.querySelectorAll(t)],[document.documentElement]):new St([m(t)],Tt)}function Ns(t){return function(){return t}}!function(t){sa=function(t){var e=t.dateTime,n=t.date,r=t.time,i=t.periods,a=t.days,s=t.shortDays,o=t.months,c=t.shortMonths,l=fa(i),h=ga(i),u=fa(a),d=ga(a),p=fa(s),f=ga(s),g=fa(o),y=ga(o),m=fa(c),b=ga(c),_={a:function(t){return s[t.getDay()]},A:function(t){return a[t.getDay()]},b:function(t){return c[t.getMonth()]},B:function(t){return o[t.getMonth()]},c:null,d:Fa,e:Fa,f:ja,g:Qa,G:ts,H:$a,I:Ra,j:Za,L:Pa,m:Ya,M:za,p:function(t){return i[+(t.getHours()>=12)]},q:function(t){return 1+~~(t.getMonth()/3)},Q:ws,s:Es,S:Ua,u:Wa,U:qa,V:Va,w:Ga,W:Xa,x:null,X:null,y:Ka,Y:Ja,Z:es,"%":ks},x={a:function(t){return s[t.getUTCDay()]},A:function(t){return a[t.getUTCDay()]},b:function(t){return c[t.getUTCMonth()]},B:function(t){return o[t.getUTCMonth()]},c:null,d:ns,e:ns,f:os,g:bs,G:xs,H:rs,I:is,j:as,L:ss,m:cs,M:ls,p:function(t){return i[+(t.getUTCHours()>=12)]},q:function(t){return 1+~~(t.getUTCMonth()/3)},Q:ws,s:Es,S:hs,u:us,U:ds,V:fs,w:gs,W:ys,x:null,X:null,y:ms,Y:_s,Z:vs,"%":ks},v={a:function(t,e,n){var r=p.exec(e.slice(n));return r?(t.w=f.get(r[0].toLowerCase()),n+r[0].length):-1},A:function(t,e,n){var r=u.exec(e.slice(n));return r?(t.w=d.get(r[0].toLowerCase()),n+r[0].length):-1},b:function(t,e,n){var r=m.exec(e.slice(n));return r?(t.m=b.get(r[0].toLowerCase()),n+r[0].length):-1},B:function(t,e,n){var r=g.exec(e.slice(n));return r?(t.m=y.get(r[0].toLowerCase()),n+r[0].length):-1},c:function(t,n,r){return E(t,e,n,r)},d:Ta,e:Ta,f:Da,g:ka,G:va,H:Aa,I:Aa,j:Sa,L:Na,m:Ca,M:La,p:function(t,e,n){var r=l.exec(e.slice(n));return r?(t.p=h.get(r[0].toLowerCase()),n+r[0].length):-1},q:Ea,Q:Ma,s:Ia,S:Ba,u:ma,U:ba,V:_a,w:ya,W:xa,x:function(t,e,r){return E(t,n,e,r)},X:function(t,e,n){return E(t,r,e,n)},y:ka,Y:va,Z:wa,"%":Oa};function k(t,e){return function(n){var r,i,a,s=[],o=-1,c=0,l=t.length;for(n instanceof Date||(n=new Date(+n));++o<l;)37===t.charCodeAt(o)&&(s.push(t.slice(c,o)),null!=(i=ca[r=t.charAt(++o)])?r=t.charAt(++o):i="e"===r?" ":"0",(a=e[r])&&(r=a(n,i)),s.push(r),c=o+1);return s.push(t.slice(c,o)),s.join("")}}function w(t,e){return function(n){var r,i,a=aa(1900,void 0,1);if(E(a,t,n+="",0)!=n.length)return null;if("Q"in a)return new Date(a.Q);if("s"in a)return new Date(1e3*a.s+("L"in a?a.L:0));if(e&&!("Z"in a)&&(a.Z=0),"p"in a&&(a.H=a.H%12+12*a.p),void 0===a.m&&(a.m="q"in a?a.q:0),"V"in a){if(a.V<1||a.V>53)return null;"w"in a||(a.w=1),"Z"in a?(i=(r=ia(aa(a.y,0,1))).getUTCDay(),r=i>4||0===i?Yi.ceil(r):Yi(r),r=Bi.offset(r,7*(a.V-1)),a.y=r.getUTCFullYear(),a.m=r.getUTCMonth(),a.d=r.getUTCDate()+(a.w+6)%7):(i=(r=ra(aa(a.y,0,1))).getDay(),r=i>4||0===i?Mi.ceil(r):Mi(r),r=Li.offset(r,7*(a.V-1)),a.y=r.getFullYear(),a.m=r.getMonth(),a.d=r.getDate()+(a.w+6)%7)}else("W"in a||"U"in a)&&("w"in a||(a.w="u"in a?a.u%7:"W"in a?1:0),i="Z"in a?ia(aa(a.y,0,1)).getUTCDay():ra(aa(a.y,0,1)).getDay(),a.m=0,a.d="W"in a?(a.w+6)%7+7*a.W-(i+5)%7:a.w+7*a.U-(i+6)%7);return"Z"in a?(a.H+=a.Z/100|0,a.M+=a.Z%100,ia(a)):ra(a)}}function E(t,e,n,r){for(var i,a,s=0,o=e.length,c=n.length;s<o;){if(r>=c)return-1;if(37===(i=e.charCodeAt(s++))){if(i=e.charAt(s++),!(a=v[i in ca?e.charAt(s++):i])||(r=a(t,n,r))<0)return-1}else if(i!=n.charCodeAt(r++))return-1}return r}return _.x=k(n,_),_.X=k(r,_),_.c=k(e,_),x.x=k(n,x),x.X=k(r,x),x.c=k(e,x),{format:function(t){var e=k(t+="",_);return e.toString=function(){return t},e},parse:function(t){var e=w(t+="",!1);return e.toString=function(){return t},e},utcFormat:function(t){var e=k(t+="",x);return e.toString=function(){return t},e},utcParse:function(t){var e=w(t+="",!0);return e.toString=function(){return t},e}}}(t),oa=sa.format,sa.parse,sa.utcFormat,sa.utcParse}({dateTime:"%x, %X",date:"%-m/%-d/%Y",time:"%-I:%M:%S %p",periods:["AM","PM"],days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],shortDays:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});const Ds=Math.abs,Os=Math.atan2,Ms=Math.cos,Is=Math.max,Fs=Math.min,$s=Math.sin,Rs=Math.sqrt,Zs=1e-12,Ps=Math.PI,js=Ps/2,Ys=2*Ps;function zs(t){return t>1?0:t<-1?Ps:Math.acos(t)}function Us(t){return t>=1?js:t<=-1?-js:Math.asin(t)}const Ws=Math.PI,qs=2*Ws,Hs=1e-6,Vs=qs-Hs;function Gs(t){this._+=t[0];for(let e=1,n=t.length;e<n;++e)this._+=arguments[e]+t[e]}class Xs{constructor(t){this._x0=this._y0=this._x1=this._y1=null,this._="",this._append=null==t?Gs:function(t){let e=Math.floor(t);if(!(e>=0))throw new Error(`invalid digits: ${t}`);if(e>15)return Gs;const n=10**e;return function(t){this._+=t[0];for(let e=1,r=t.length;e<r;++e)this._+=Math.round(arguments[e]*n)/n+t[e]}}(t)}moveTo(t,e){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}`}closePath(){null!==this._x1&&(this._x1=this._x0,this._y1=this._y0,this._append`Z`)}lineTo(t,e){this._append`L${this._x1=+t},${this._y1=+e}`}quadraticCurveTo(t,e,n,r){this._append`Q${+t},${+e},${this._x1=+n},${this._y1=+r}`}bezierCurveTo(t,e,n,r,i,a){this._append`C${+t},${+e},${+n},${+r},${this._x1=+i},${this._y1=+a}`}arcTo(t,e,n,r,i){if(t=+t,e=+e,n=+n,r=+r,(i=+i)<0)throw new Error(`negative radius: ${i}`);let a=this._x1,s=this._y1,o=n-t,c=r-e,l=a-t,h=s-e,u=l*l+h*h;if(null===this._x1)this._append`M${this._x1=t},${this._y1=e}`;else if(u>Hs)if(Math.abs(h*o-c*l)>Hs&&i){let d=n-a,p=r-s,f=o*o+c*c,g=d*d+p*p,y=Math.sqrt(f),m=Math.sqrt(u),b=i*Math.tan((Ws-Math.acos((f+u-g)/(2*y*m)))/2),_=b/m,x=b/y;Math.abs(_-1)>Hs&&this._append`L${t+_*l},${e+_*h}`,this._append`A${i},${i},0,0,${+(h*d>l*p)},${this._x1=t+x*o},${this._y1=e+x*c}`}else this._append`L${this._x1=t},${this._y1=e}`;else;}arc(t,e,n,r,i,a){if(t=+t,e=+e,a=!!a,(n=+n)<0)throw new Error(`negative radius: ${n}`);let s=n*Math.cos(r),o=n*Math.sin(r),c=t+s,l=e+o,h=1^a,u=a?r-i:i-r;null===this._x1?this._append`M${c},${l}`:(Math.abs(this._x1-c)>Hs||Math.abs(this._y1-l)>Hs)&&this._append`L${c},${l}`,n&&(u<0&&(u=u%qs+qs),u>Vs?this._append`A${n},${n},0,1,${h},${t-s},${e-o}A${n},${n},0,1,${h},${this._x1=c},${this._y1=l}`:u>Hs&&this._append`A${n},${n},0,${+(u>=Ws)},${h},${this._x1=t+n*Math.cos(i)},${this._y1=e+n*Math.sin(i)}`)}rect(t,e,n,r){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}h${n=+n}v${+r}h${-n}Z`}toString(){return this._}}function Ks(t){let e=3;return t.digits=function(n){if(!arguments.length)return e;if(null==n)e=null;else{const t=Math.floor(n);if(!(t>=0))throw new RangeError(`invalid digits: ${n}`);e=t}return t},()=>new Xs(e)}function Qs(t){return t.innerRadius}function Js(t){return t.outerRadius}function to(t){return t.startAngle}function eo(t){return t.endAngle}function no(t){return t&&t.padAngle}function ro(t,e,n,r,i,a,s,o){var c=n-t,l=r-e,h=s-i,u=o-a,d=u*c-h*l;if(!(d*d<Zs))return[t+(d=(h*(e-a)-u*(t-i))/d)*c,e+d*l]}function io(t,e,n,r,i,a,s){var o=t-n,c=e-r,l=(s?a:-a)/Rs(o*o+c*c),h=l*c,u=-l*o,d=t+h,p=e+u,f=n+h,g=r+u,y=(d+f)/2,m=(p+g)/2,b=f-d,_=g-p,x=b*b+_*_,v=i-a,k=d*g-f*p,w=(_<0?-1:1)*Rs(Is(0,v*v*x-k*k)),E=(k*_-b*w)/x,C=(-k*b-_*w)/x,T=(k*_+b*w)/x,S=(-k*b+_*w)/x,A=E-y,L=C-m,B=T-y,N=S-m;return A*A+L*L>B*B+N*N&&(E=T,C=S),{cx:E,cy:C,x01:-h,y01:-u,x11:E*(i/v-1),y11:C*(i/v-1)}}function ao(){var t=Qs,e=Js,n=Ns(0),r=null,i=to,a=eo,s=no,o=null,c=Ks(l);function l(){var l,h,u=+t.apply(this,arguments),d=+e.apply(this,arguments),p=i.apply(this,arguments)-js,f=a.apply(this,arguments)-js,g=Ds(f-p),y=f>p;if(o||(o=l=c()),d<u&&(h=d,d=u,u=h),d>Zs)if(g>Ys-Zs)o.moveTo(d*Ms(p),d*$s(p)),o.arc(0,0,d,p,f,!y),u>Zs&&(o.moveTo(u*Ms(f),u*$s(f)),o.arc(0,0,u,f,p,y));else{var m,b,_=p,x=f,v=p,k=f,w=g,E=g,C=s.apply(this,arguments)/2,T=C>Zs&&(r?+r.apply(this,arguments):Rs(u*u+d*d)),S=Fs(Ds(d-u)/2,+n.apply(this,arguments)),A=S,L=S;if(T>Zs){var B=Us(T/u*$s(C)),N=Us(T/d*$s(C));(w-=2*B)>Zs?(v+=B*=y?1:-1,k-=B):(w=0,v=k=(p+f)/2),(E-=2*N)>Zs?(_+=N*=y?1:-1,x-=N):(E=0,_=x=(p+f)/2)}var D=d*Ms(_),O=d*$s(_),M=u*Ms(k),I=u*$s(k);if(S>Zs){var F,$=d*Ms(x),R=d*$s(x),Z=u*Ms(v),P=u*$s(v);if(g<Ps)if(F=ro(D,O,Z,P,$,R,M,I)){var j=D-F[0],Y=O-F[1],z=$-F[0],U=R-F[1],W=1/$s(zs((j*z+Y*U)/(Rs(j*j+Y*Y)*Rs(z*z+U*U)))/2),q=Rs(F[0]*F[0]+F[1]*F[1]);A=Fs(S,(u-q)/(W-1)),L=Fs(S,(d-q)/(W+1))}else A=L=0}E>Zs?L>Zs?(m=io(Z,P,D,O,d,L,y),b=io($,R,M,I,d,L,y),o.moveTo(m.cx+m.x01,m.cy+m.y01),L<S?o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,d,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),!y),o.arc(b.cx,b.cy,L,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):(o.moveTo(D,O),o.arc(0,0,d,_,x,!y)):o.moveTo(D,O),u>Zs&&w>Zs?A>Zs?(m=io(M,I,$,R,u,-A,y),b=io(D,O,Z,P,u,-A,y),o.lineTo(m.cx+m.x01,m.cy+m.y01),A<S?o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,u,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),y),o.arc(b.cx,b.cy,A,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):o.arc(0,0,u,k,v,y):o.lineTo(M,I)}else o.moveTo(0,0);if(o.closePath(),l)return o=null,l+""||null}return l.centroid=function(){var n=(+t.apply(this,arguments)+ +e.apply(this,arguments))/2,r=(+i.apply(this,arguments)+ +a.apply(this,arguments))/2-Ps/2;return[Ms(r)*n,$s(r)*n]},l.innerRadius=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),l):t},l.outerRadius=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),l):e},l.cornerRadius=function(t){return arguments.length?(n="function"==typeof t?t:Ns(+t),l):n},l.padRadius=function(t){return arguments.length?(r=null==t?null:"function"==typeof t?t:Ns(+t),l):r},l.startAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),l):i},l.endAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),l):a},l.padAngle=function(t){return arguments.length?(s="function"==typeof t?t:Ns(+t),l):s},l.context=function(t){return arguments.length?(o=null==t?null:t,l):o},l}Array.prototype.slice;function so(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function oo(t){this._context=t}function co(t){return new oo(t)}function lo(t){return t[0]}function ho(t){return t[1]}function uo(t,e){var n=Ns(!0),r=null,i=co,a=null,s=Ks(o);function o(o){var c,l,h,u=(o=so(o)).length,d=!1;for(null==r&&(a=i(h=s())),c=0;c<=u;++c)!(c<u&&n(l=o[c],c,o))===d&&((d=!d)?a.lineStart():a.lineEnd()),d&&a.point(+t(l,c,o),+e(l,c,o));if(h)return a=null,h+""||null}return t="function"==typeof t?t:void 0===t?lo:Ns(t),e="function"==typeof e?e:void 0===e?ho:Ns(e),o.x=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),o):t},o.y=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),o):e},o.defined=function(t){return arguments.length?(n="function"==typeof t?t:Ns(!!t),o):n},o.curve=function(t){return arguments.length?(i=t,null!=r&&(a=i(r)),o):i},o.context=function(t){return arguments.length?(null==t?r=a=null:a=i(r=t),o):r},o}function po(t,e){return e<t?-1:e>t?1:e>=t?0:NaN}function fo(t){return t}function go(){var t=fo,e=po,n=null,r=Ns(0),i=Ns(Ys),a=Ns(0);function s(s){var o,c,l,h,u,d=(s=so(s)).length,p=0,f=new Array(d),g=new Array(d),y=+r.apply(this,arguments),m=Math.min(Ys,Math.max(-Ys,i.apply(this,arguments)-y)),b=Math.min(Math.abs(m)/d,a.apply(this,arguments)),_=b*(m<0?-1:1);for(o=0;o<d;++o)(u=g[f[o]=o]=+t(s[o],o,s))>0&&(p+=u);for(null!=e?f.sort((function(t,n){return e(g[t],g[n])})):null!=n&&f.sort((function(t,e){return n(s[t],s[e])})),o=0,l=p?(m-d*_)/p:0;o<d;++o,y=h)c=f[o],h=y+((u=g[c])>0?u*l:0)+_,g[c]={data:s[c],index:o,value:u,startAngle:y,endAngle:h,padAngle:b};return g}return s.value=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),s):t},s.sortValues=function(t){return arguments.length?(e=t,n=null,s):e},s.sort=function(t){return arguments.length?(n=t,e=null,s):n},s.startAngle=function(t){return arguments.length?(r="function"==typeof t?t:Ns(+t),s):r},s.endAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),s):i},s.padAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),s):a},s}function yo(){}function mo(t,e,n){t._context.bezierCurveTo((2*t._x0+t._x1)/3,(2*t._y0+t._y1)/3,(t._x0+2*t._x1)/3,(t._y0+2*t._y1)/3,(t._x0+4*t._x1+e)/6,(t._y0+4*t._y1+n)/6)}function bo(t){this._context=t}function _o(t){return new bo(t)}function xo(t){this._context=t}function vo(t){return new xo(t)}function ko(t){this._context=t}function wo(t){return new ko(t)}oo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._point=0},lineEnd:function(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._context.lineTo(t,e)}}},bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){switch(this._point){case 3:mo(this,this._x1,this._y1);case 2:this._context.lineTo(this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,this._context.lineTo((5*this._x0+this._x1)/6,(5*this._y0+this._y1)/6);default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},xo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._y0=this._y1=this._y2=this._y3=this._y4=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x2,this._y2),this._context.closePath();break;case 2:this._context.moveTo((this._x2+2*this._x3)/3,(this._y2+2*this._y3)/3),this._context.lineTo((this._x3+2*this._x2)/3,(this._y3+2*this._y2)/3),this._context.closePath();break;case 3:this.point(this._x2,this._y2),this.point(this._x3,this._y3),this.point(this._x4,this._y4)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x2=t,this._y2=e;break;case 1:this._point=2,this._x3=t,this._y3=e;break;case 2:this._point=3,this._x4=t,this._y4=e,this._context.moveTo((this._x0+4*this._x1+t)/6,(this._y0+4*this._y1+e)/6);break;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},ko.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3;var n=(this._x0+4*this._x1+t)/6,r=(this._y0+4*this._y1+e)/6;this._line?this._context.lineTo(n,r):this._context.moveTo(n,r);break;case 3:this._point=4;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}};class Eo{constructor(t,e){this._context=t,this._x=e}areaStart(){this._line=0}areaEnd(){this._line=NaN}lineStart(){this._point=0}lineEnd(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line}point(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._x?this._context.bezierCurveTo(this._x0=(this._x0+t)/2,this._y0,this._x0,e,t,e):this._context.bezierCurveTo(this._x0,this._y0=(this._y0+e)/2,t,this._y0,t,e)}this._x0=t,this._y0=e}}function Co(t){return new Eo(t,!0)}function To(t){return new Eo(t,!1)}function So(t,e){this._basis=new bo(t),this._beta=e}So.prototype={lineStart:function(){this._x=[],this._y=[],this._basis.lineStart()},lineEnd:function(){var t=this._x,e=this._y,n=t.length-1;if(n>0)for(var r,i=t[0],a=e[0],s=t[n]-i,o=e[n]-a,c=-1;++c<=n;)r=c/n,this._basis.point(this._beta*t[c]+(1-this._beta)*(i+r*s),this._beta*e[c]+(1-this._beta)*(a+r*o));this._x=this._y=null,this._basis.lineEnd()},point:function(t,e){this._x.push(+t),this._y.push(+e)}};const Ao=function t(e){function n(t){return 1===e?new bo(t):new So(t,e)}return n.beta=function(e){return t(+e)},n}(.85);function Lo(t,e,n){t._context.bezierCurveTo(t._x1+t._k*(t._x2-t._x0),t._y1+t._k*(t._y2-t._y0),t._x2+t._k*(t._x1-e),t._y2+t._k*(t._y1-n),t._x2,t._y2)}function Bo(t,e){this._context=t,this._k=(1-e)/6}Bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:Lo(this,this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2,this._x1=t,this._y1=e;break;case 2:this._point=3;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const No=function t(e){function n(t){return new Bo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Do(t,e){this._context=t,this._k=(1-e)/6}Do.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Oo=function t(e){function n(t){return new Do(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Mo(t,e){this._context=t,this._k=(1-e)/6}Mo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Io=function t(e){function n(t){return new Mo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Fo(t,e,n){var r=t._x1,i=t._y1,a=t._x2,s=t._y2;if(t._l01_a>Zs){var o=2*t._l01_2a+3*t._l01_a*t._l12_a+t._l12_2a,c=3*t._l01_a*(t._l01_a+t._l12_a);r=(r*o-t._x0*t._l12_2a+t._x2*t._l01_2a)/c,i=(i*o-t._y0*t._l12_2a+t._y2*t._l01_2a)/c}if(t._l23_a>Zs){var l=2*t._l23_2a+3*t._l23_a*t._l12_a+t._l12_2a,h=3*t._l23_a*(t._l23_a+t._l12_a);a=(a*l+t._x1*t._l23_2a-e*t._l12_2a)/h,s=(s*l+t._y1*t._l23_2a-n*t._l12_2a)/h}t._context.bezierCurveTo(r,i,a,s,t._x2,t._y2)}function $o(t,e){this._context=t,this._alpha=e}$o.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:this.point(this._x2,this._y2)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Ro=function t(e){function n(t){return e?new $o(t,e):new Bo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function Zo(t,e){this._context=t,this._alpha=e}Zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Po=function t(e){function n(t){return e?new Zo(t,e):new Do(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function jo(t,e){this._context=t,this._alpha=e}jo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Yo=function t(e){function n(t){return e?new jo(t,e):new Mo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function zo(t){this._context=t}function Uo(t){return new zo(t)}function Wo(t){return t<0?-1:1}function qo(t,e,n){var r=t._x1-t._x0,i=e-t._x1,a=(t._y1-t._y0)/(r||i<0&&-0),s=(n-t._y1)/(i||r<0&&-0),o=(a*i+s*r)/(r+i);return(Wo(a)+Wo(s))*Math.min(Math.abs(a),Math.abs(s),.5*Math.abs(o))||0}function Ho(t,e){var n=t._x1-t._x0;return n?(3*(t._y1-t._y0)/n-e)/2:e}function Vo(t,e,n){var r=t._x0,i=t._y0,a=t._x1,s=t._y1,o=(a-r)/3;t._context.bezierCurveTo(r+o,i+o*e,a-o,s-o*n,a,s)}function Go(t){this._context=t}function Xo(t){this._context=new Ko(t)}function Ko(t){this._context=t}function Qo(t){return new Go(t)}function Jo(t){return new Xo(t)}function tc(t){this._context=t}function ec(t){var e,n,r=t.length-1,i=new Array(r),a=new Array(r),s=new Array(r);for(i[0]=0,a[0]=2,s[0]=t[0]+2*t[1],e=1;e<r-1;++e)i[e]=1,a[e]=4,s[e]=4*t[e]+2*t[e+1];for(i[r-1]=2,a[r-1]=7,s[r-1]=8*t[r-1]+t[r],e=1;e<r;++e)n=i[e]/a[e-1],a[e]-=n,s[e]-=n*s[e-1];for(i[r-1]=s[r-1]/a[r-1],e=r-2;e>=0;--e)i[e]=(s[e]-i[e+1])/a[e];for(a[r-1]=(t[r]+i[r-1])/2,e=0;e<r-1;++e)a[e]=2*t[e+1]-i[e+1];return[i,a]}function nc(t){return new tc(t)}function rc(t,e){this._context=t,this._t=e}function ic(t){return new rc(t,.5)}function ac(t){return new rc(t,0)}function sc(t){return new rc(t,1)}function oc(t,e,n){this.k=t,this.x=e,this.y=n}zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._point=0},lineEnd:function(){this._point&&this._context.closePath()},point:function(t,e){t=+t,e=+e,this._point?this._context.lineTo(t,e):(this._point=1,this._context.moveTo(t,e))}},Go.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=this._t0=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x1,this._y1);break;case 3:Vo(this,this._t0,Ho(this,this._t0))}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){var n=NaN;if(e=+e,(t=+t)!==this._x1||e!==this._y1){switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,Vo(this,Ho(this,n=qo(this,t,e)),n);break;default:Vo(this,this._t0,n=qo(this,t,e))}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e,this._t0=n}}},(Xo.prototype=Object.create(Go.prototype)).point=function(t,e){Go.prototype.point.call(this,e,t)},Ko.prototype={moveTo:function(t,e){this._context.moveTo(e,t)},closePath:function(){this._context.closePath()},lineTo:function(t,e){this._context.lineTo(e,t)},bezierCurveTo:function(t,e,n,r,i,a){this._context.bezierCurveTo(e,t,r,n,a,i)}},tc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=[],this._y=[]},lineEnd:function(){var t=this._x,e=this._y,n=t.length;if(n)if(this._line?this._context.lineTo(t[0],e[0]):this._context.moveTo(t[0],e[0]),2===n)this._context.lineTo(t[1],e[1]);else for(var r=ec(t),i=ec(e),a=0,s=1;s<n;++a,++s)this._context.bezierCurveTo(r[0][a],i[0][a],r[1][a],i[1][a],t[s],e[s]);(this._line||0!==this._line&&1===n)&&this._context.closePath(),this._line=1-this._line,this._x=this._y=null},point:function(t,e){this._x.push(+t),this._y.push(+e)}},rc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=this._y=NaN,this._point=0},lineEnd:function(){0<this._t&&this._t<1&&2===this._point&&this._context.lineTo(this._x,this._y),(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line>=0&&(this._t=1-this._t,this._line=1-this._line)},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:if(this._t<=0)this._context.lineTo(this._x,e),this._context.lineTo(t,e);else{var n=this._x*(1-this._t)+t*this._t;this._context.lineTo(n,this._y),this._context.lineTo(n,e)}}this._x=t,this._y=e}},oc.prototype={constructor:oc,scale:function(t){return 1===t?this:new oc(this.k*t,this.x,this.y)},translate:function(t,e){return 0===t&0===e?this:new oc(this.k,this.x+this.k*t,this.y+this.k*e)},apply:function(t){return[t[0]*this.k+this.x,t[1]*this.k+this.y]},applyX:function(t){return t*this.k+this.x},applyY:function(t){return t*this.k+this.y},invert:function(t){return[(t[0]-this.x)/this.k,(t[1]-this.y)/this.k]},invertX:function(t){return(t-this.x)/this.k},invertY:function(t){return(t-this.y)/this.k},rescaleX:function(t){return t.copy().domain(t.range().map(this.invertX,this).map(t.invert,t))},rescaleY:function(t){return t.copy().domain(t.range().map(this.invertY,this).map(t.invert,t))},toString:function(){return"translate("+this.x+","+this.y+") scale("+this.k+")"}};new oc(1,0,0);oc.prototype},3352:(t,e,n)=>{"use strict";function r(t,e,n,r){var a,s,o,c,l,h,u,d,p,f,g,y,m;if(a=e.y-t.y,o=t.x-e.x,l=e.x*t.y-t.x*e.y,p=a*n.x+o*n.y+l,f=a*r.x+o*r.y+l,!(0!==p&&0!==f&&i(p,f)||(s=r.y-n.y,c=n.x-r.x,h=r.x*n.y-n.x*r.y,u=s*t.x+c*t.y+h,d=s*e.x+c*e.y+h,0!==u&&0!==d&&i(u,d)||0==(g=a*c-s*o))))return y=Math.abs(g/2),{x:(m=o*h-c*l)<0?(m-y)/g:(m+y)/g,y:(m=s*l-a*h)<0?(m-y)/g:(m+y)/g}}function i(t,e){return t*e>0}function a(t,e,n){var i=t.x,a=t.y,s=[],o=Number.POSITIVE_INFINITY,c=Number.POSITIVE_INFINITY;e.forEach((function(t){o=Math.min(o,t.x),c=Math.min(c,t.y)}));for(var l=i-t.width/2-o,h=a-t.height/2-c,u=0;u<e.length;u++){var d=e[u],p=e[u<e.length-1?u+1:0],f=r(t,n,{x:l+d.x,y:h+d.y},{x:l+p.x,y:h+p.y});f&&s.push(f)}return s.length?(s.length>1&&s.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),s[0]):(console.log("NO INTERSECTION FOUND, RETURN NODE CENTER",t),t)}n.d(e,{A:()=>a})},2930:(t,e,n)=>{"use strict";function r(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}}n.d(e,{q:()=>r})},3349:(t,e,n)=>{"use strict";n.d(e,{a:()=>i});var r=n(6225);function i(t,e){var n=t.append("foreignObject").attr("width","100000"),i=n.append("xhtml:div");i.attr("xmlns","http://www.w3.org/1999/xhtml");var a=e.label;switch(typeof a){case"function":i.insert(a);break;case"object":i.insert((function(){return a}));break;default:i.html(a)}r.bg(i,e.labelStyle),i.style("display","inline-block"),i.style("white-space","nowrap");var s=i.node().getBoundingClientRect();return n.attr("width",s.width).attr("height",s.height),n}},6225:(t,e,n)=>{"use strict";n.d(e,{$p:()=>h,O1:()=>s,WR:()=>u,bF:()=>a,bg:()=>l});var r=n(7514),i=n(3234);function a(t,e){return!!t.children(e).length}function s(t){return c(t.v)+":"+c(t.w)+":"+c(t.name)}var o=/:/g;function c(t){return t?String(t).replace(o,"\\:"):""}function l(t,e){e&&t.attr("style",e)}function h(t,e,n){e&&t.attr("class",e).attr("class",n+" "+t.attr("class"))}function u(t,e){var n=e.graph();if(r.Z(n)){var a=n.transition;if(i.Z(a))return a(t)}return t}},277:(t,e,n)=>{"use strict";n.d(e,{bK:()=>Ve});var r=n(870),i=n(6749),a=n(7452),s=n(2002),o=n(7961),c=n(3836),l=n(4379),h=n(5625);class u{constructor(){var t={};t._next=t._prev=t,this._sentinel=t}dequeue(){var t=this._sentinel,e=t._prev;if(e!==t)return d(e),e}enqueue(t){var e=this._sentinel;t._prev&&t._next&&d(t),t._next=e._next,e._next._prev=t,e._next=t,t._prev=e}toString(){for(var t=[],e=this._sentinel,n=e._prev;n!==e;)t.push(JSON.stringify(n,p)),n=n._prev;return"["+t.join(", ")+"]"}}function d(t){t._prev._next=t._next,t._next._prev=t._prev,delete t._next,delete t._prev}function p(t,e){if("_next"!==t&&"_prev"!==t)return e}var f=s.Z(1);function g(t,e){if(t.nodeCount()<=1)return[];var n=function(t,e){var n=new h.k,i=0,a=0;r.Z(t.nodes(),(function(t){n.setNode(t,{v:t,in:0,out:0})})),r.Z(t.edges(),(function(t){var r=n.edge(t.v,t.w)||0,s=e(t),o=r+s;n.setEdge(t.v,t.w,o),a=Math.max(a,n.node(t.v).out+=s),i=Math.max(i,n.node(t.w).in+=s)}));var s=l.Z(a+i+3).map((function(){return new u})),o=i+1;return r.Z(n.nodes(),(function(t){m(s,o,n.node(t))})),{graph:n,buckets:s,zeroIdx:o}}(t,e||f),i=function(t,e,n){var r,i=[],a=e[e.length-1],s=e[0];for(;t.nodeCount();){for(;r=s.dequeue();)y(t,e,n,r);for(;r=a.dequeue();)y(t,e,n,r);if(t.nodeCount())for(var o=e.length-2;o>0;--o)if(r=e[o].dequeue()){i=i.concat(y(t,e,n,r,!0));break}}return i}(n.graph,n.buckets,n.zeroIdx);return o.Z(c.Z(i,(function(e){return t.outEdges(e.v,e.w)})))}function y(t,e,n,i,a){var s=a?[]:void 0;return r.Z(t.inEdges(i.v),(function(r){var i=t.edge(r),o=t.node(r.v);a&&s.push({v:r.v,w:r.w}),o.out-=i,m(e,n,o)})),r.Z(t.outEdges(i.v),(function(r){var i=t.edge(r),a=r.w,s=t.node(a);s.in-=i,m(e,n,s)})),t.removeNode(i.v),s}function m(t,e,n){n.out?n.in?t[n.out-n.in+e].enqueue(n):t[t.length-1].enqueue(n):t[0].enqueue(n)}function b(t){var e="greedy"===t.graph().acyclicer?g(t,function(t){return function(e){return t.edge(e).weight}}(t)):function(t){var e=[],n={},i={};function s(o){a.Z(i,o)||(i[o]=!0,n[o]=!0,r.Z(t.outEdges(o),(function(t){a.Z(n,t.w)?e.push(t):s(t.w)})),delete n[o])}return r.Z(t.nodes(),s),e}(t);r.Z(e,(function(e){var n=t.edge(e);t.removeEdge(e),n.forwardName=e.name,n.reversed=!0,t.setEdge(e.w,e.v,n,i.Z("rev"))}))}var _=n(1667),x=n(4752),v=n(9651);const k=function(t,e,n){(void 0!==n&&!(0,v.Z)(t[e],n)||void 0===n&&!(e in t))&&(0,x.Z)(t,e,n)};var w=n(1395),E=n(1050),C=n(2701),T=n(7215),S=n(3658),A=n(9169),L=n(7771),B=n(836),N=n(7008),D=n(3234),O=n(7226),M=n(7514),I=n(8843);const F=function(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]};var $=n(1899),R=n(2957);const Z=function(t){return(0,$.Z)(t,(0,R.Z)(t))};const P=function(t,e,n,r,i,a,s){var o=F(t,n),c=F(e,n),l=s.get(c);if(l)k(t,n,l);else{var h=a?a(o,c,n+"",t,e,s):void 0,u=void 0===h;if(u){var d=(0,L.Z)(c),p=!d&&(0,N.Z)(c),f=!d&&!p&&(0,I.Z)(c);h=c,d||p||f?(0,L.Z)(o)?h=o:(0,B.Z)(o)?h=(0,T.Z)(o):p?(u=!1,h=(0,E.Z)(c,!0)):f?(u=!1,h=(0,C.Z)(c,!0)):h=[]:(0,M.Z)(c)||(0,A.Z)(c)?(h=o,(0,A.Z)(o)?h=Z(o):(0,O.Z)(o)&&!(0,D.Z)(o)||(h=(0,S.Z)(c))):u=!1}u&&(s.set(c,h),i(h,c,r,a,s),s.delete(c)),k(t,n,h)}};const j=function t(e,n,r,i,a){e!==n&&(0,w.Z)(n,(function(s,o){if(a||(a=new _.Z),(0,O.Z)(s))P(e,n,o,r,t,i,a);else{var c=i?i(F(e,o),s,o+"",e,n,a):void 0;void 0===c&&(c=s),k(e,o,c)}}),R.Z)};var Y=n(9581),z=n(439);const U=function(t){return(0,Y.Z)((function(e,n){var r=-1,i=n.length,a=i>1?n[i-1]:void 0,s=i>2?n[2]:void 0;for(a=t.length>3&&"function"==typeof a?(i--,a):void 0,s&&(0,z.Z)(n[0],n[1],s)&&(a=i<3?void 0:a,i=1),e=Object(e);++r<i;){var o=n[r];o&&t(e,o,r,a)}return e}))}((function(t,e,n){j(t,e,n)}));var W=n(1666),q=n(3688),H=n(2714);const V=function(t,e,n){for(var r=-1,i=t.length;++r<i;){var a=t[r],s=e(a);if(null!=s&&(void 0===o?s==s&&!(0,H.Z)(s):n(s,o)))var o=s,c=a}return c};const G=function(t,e){return t>e};var X=n(9203);const K=function(t){return t&&t.length?V(t,X.Z,G):void 0};const Q=function(t){var e=null==t?0:t.length;return e?t[e-1]:void 0};var J=n(2693),tt=n(4765);const et=function(t,e){var n={};return e=(0,tt.Z)(e,3),(0,J.Z)(t,(function(t,r,i){(0,x.Z)(n,r,e(t,r,i))})),n};var nt=n(9360);const rt=function(t,e){return t<e};const it=function(t){return t&&t.length?V(t,X.Z,rt):void 0};var at=n(6092);const st=function(){return at.Z.Date.now()};function ot(t,e,n,r){var a;do{a=i.Z(r)}while(t.hasNode(a));return n.dummy=e,t.setNode(a,n),a}function ct(t){var e=new h.k({multigraph:t.isMultigraph()}).setGraph(t.graph());return r.Z(t.nodes(),(function(n){t.children(n).length||e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){e.setEdge(n,t.edge(n))})),e}function lt(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;if(!s&&!o)throw new Error("Not possible to find intersection inside of the rectangle");return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=l*s/o,r=l):(s<0&&(c=-c),n=c,r=c*o/s),{x:i+n,y:a+r}}function ht(t){var e=c.Z(l.Z(dt(t)+1),(function(){return[]}));return r.Z(t.nodes(),(function(n){var r=t.node(n),i=r.rank;nt.Z(i)||(e[i][r.order]=n)})),e}function ut(t,e,n,r){var i={width:0,height:0};return arguments.length>=4&&(i.rank=n,i.order=r),ot(t,"border",i,e)}function dt(t){return K(c.Z(t.nodes(),(function(e){var n=t.node(e).rank;if(!nt.Z(n))return n})))}function pt(t,e){var n=st();try{return e()}finally{console.log(t+" time: "+(st()-n)+"ms")}}function ft(t,e){return e()}function gt(t,e,n,r,i,a){var s={width:0,height:0,rank:a,borderType:e},o=i[e][a-1],c=ot(t,"border",s,n);i[e][a]=c,t.setParent(c,r),o&&t.setEdge(o,c,{weight:1})}function yt(t){var e=t.graph().rankdir.toLowerCase();"bt"!==e&&"rl"!==e||function(t){r.Z(t.nodes(),(function(e){_t(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,_t),a.Z(n,"y")&&_t(n)}))}(t),"lr"!==e&&"rl"!==e||(!function(t){r.Z(t.nodes(),(function(e){xt(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,xt),a.Z(n,"x")&&xt(n)}))}(t),mt(t))}function mt(t){r.Z(t.nodes(),(function(e){bt(t.node(e))})),r.Z(t.edges(),(function(e){bt(t.edge(e))}))}function bt(t){var e=t.width;t.width=t.height,t.height=e}function _t(t){t.y=-t.y}function xt(t){var e=t.x;t.x=t.y,t.y=e}function vt(t){t.graph().dummyChains=[],r.Z(t.edges(),(function(e){!function(t,e){var n,r,i,a=e.v,s=t.node(a).rank,o=e.w,c=t.node(o).rank,l=e.name,h=t.edge(e),u=h.labelRank;if(c===s+1)return;for(t.removeEdge(e),i=0,++s;s<c;++i,++s)h.points=[],n=ot(t,"edge",r={width:0,height:0,edgeLabel:h,edgeObj:e,rank:s},"_d"),s===u&&(r.width=h.width,r.height=h.height,r.dummy="edge-label",r.labelpos=h.labelpos),t.setEdge(a,n,{weight:h.weight},l),0===i&&t.graph().dummyChains.push(n),a=n;t.setEdge(a,o,{weight:h.weight},l)}(t,e)}))}const kt=function(t,e){return t&&t.length?V(t,(0,tt.Z)(e,2),rt):void 0};function wt(t){var e={};r.Z(t.sources(),(function n(r){var i=t.node(r);if(a.Z(e,r))return i.rank;e[r]=!0;var s=it(c.Z(t.outEdges(r),(function(e){return n(e.w)-t.edge(e).minlen})));return s!==Number.POSITIVE_INFINITY&&null!=s||(s=0),i.rank=s}))}function Et(t,e){return t.node(e.w).rank-t.node(e.v).rank-t.edge(e).minlen}function Ct(t){var e,n,r=new h.k({directed:!1}),i=t.nodes()[0],a=t.nodeCount();for(r.setNode(i,{});Tt(r,t)<a;)e=St(r,t),n=r.hasNode(e.v)?Et(t,e):-Et(t,e),At(r,t,n);return r}function Tt(t,e){return r.Z(t.nodes(),(function n(i){r.Z(e.nodeEdges(i),(function(r){var a=r.v,s=i===a?r.w:a;t.hasNode(s)||Et(e,r)||(t.setNode(s,{}),t.setEdge(i,s,{}),n(s))}))})),t.nodeCount()}function St(t,e){return kt(e.edges(),(function(n){if(t.hasNode(n.v)!==t.hasNode(n.w))return Et(e,n)}))}function At(t,e,n){r.Z(t.nodes(),(function(t){e.node(t).rank+=n}))}var Lt=n(585),Bt=n(7179);const Nt=function(t){return function(e,n,r){var i=Object(e);if(!(0,Lt.Z)(e)){var a=(0,tt.Z)(n,3);e=(0,Bt.Z)(e),n=function(t){return a(i[t],t,i)}}var s=t(e,n,r);return s>-1?i[a?e[s]:s]:void 0}};var Dt=n(1692),Ot=n(4099);const Mt=function(t){var e=(0,Ot.Z)(t),n=e%1;return e==e?n?e-n:e:0};var It=Math.max;const Ft=Nt((function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var i=null==n?0:Mt(n);return i<0&&(i=It(r+i,0)),(0,Dt.Z)(t,(0,tt.Z)(e,3),i)}));var $t=n(3445);s.Z(1);s.Z(1);n(9473),n(3970),n(3589),n(8533);(0,n(4193).Z)("length");RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");var Rt="[\\ud800-\\udfff]",Zt="[\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff]",Pt="\\ud83c[\\udffb-\\udfff]",jt="[^\\ud800-\\udfff]",Yt="(?:\\ud83c[\\udde6-\\uddff]){2}",zt="[\\ud800-\\udbff][\\udc00-\\udfff]",Ut="(?:"+Zt+"|"+Pt+")"+"?",Wt="[\\ufe0e\\ufe0f]?",qt=Wt+Ut+("(?:\\u200d(?:"+[jt,Yt,zt].join("|")+")"+Wt+Ut+")*"),Ht="(?:"+[jt+Zt+"?",Zt,Yt,zt,Rt].join("|")+")";RegExp(Pt+"(?="+Pt+")|"+Ht+qt,"g");function Vt(){}function Gt(t,e,n){L.Z(e)||(e=[e]);var i=(t.isDirected()?t.successors:t.neighbors).bind(t),a=[],s={};return r.Z(e,(function(e){if(!t.hasNode(e))throw new Error("Graph does not have node: "+e);Xt(t,e,"post"===n,s,i,a)})),a}function Xt(t,e,n,i,s,o){a.Z(i,e)||(i[e]=!0,n||o.push(e),r.Z(s(e),(function(e){Xt(t,e,n,i,s,o)})),n&&o.push(e))}Vt.prototype=new Error;n(2544);function Kt(t){t=function(t){var e=(new h.k).setGraph(t.graph());return r.Z(t.nodes(),(function(n){e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){var r=e.edge(n.v,n.w)||{weight:0,minlen:1},i=t.edge(n);e.setEdge(n.v,n.w,{weight:r.weight+i.weight,minlen:Math.max(r.minlen,i.minlen)})})),e}(t),wt(t);var e,n=Ct(t);for(te(n),Qt(n,t);e=ne(n);)ie(n,t,e,re(n,t,e))}function Qt(t,e){var n=function(t,e){return Gt(t,e,"post")}(t,t.nodes());n=n.slice(0,n.length-1),r.Z(n,(function(n){!function(t,e,n){var r=t.node(n).parent;t.edge(n,r).cutvalue=Jt(t,e,n)}(t,e,n)}))}function Jt(t,e,n){var i=t.node(n).parent,a=!0,s=e.edge(n,i),o=0;return s||(a=!1,s=e.edge(i,n)),o=s.weight,r.Z(e.nodeEdges(n),(function(r){var s,c,l=r.v===n,h=l?r.w:r.v;if(h!==i){var u=l===a,d=e.edge(r).weight;if(o+=u?d:-d,s=n,c=h,t.hasEdge(s,c)){var p=t.edge(n,h).cutvalue;o+=u?-p:p}}})),o}function te(t,e){arguments.length<2&&(e=t.nodes()[0]),ee(t,{},1,e)}function ee(t,e,n,i,s){var o=n,c=t.node(i);return e[i]=!0,r.Z(t.neighbors(i),(function(r){a.Z(e,r)||(n=ee(t,e,n,r,i))})),c.low=o,c.lim=n++,s?c.parent=s:delete c.parent,n}function ne(t){return Ft(t.edges(),(function(e){return t.edge(e).cutvalue<0}))}function re(t,e,n){var r=n.v,i=n.w;e.hasEdge(r,i)||(r=n.w,i=n.v);var a=t.node(r),s=t.node(i),o=a,c=!1;a.lim>s.lim&&(o=s,c=!0);var l=$t.Z(e.edges(),(function(e){return c===ae(t,t.node(e.v),o)&&c!==ae(t,t.node(e.w),o)}));return kt(l,(function(t){return Et(e,t)}))}function ie(t,e,n,i){var a=n.v,s=n.w;t.removeEdge(a,s),t.setEdge(i.v,i.w,{}),te(t),Qt(t,e),function(t,e){var n=Ft(t.nodes(),(function(t){return!e.node(t).parent})),i=function(t,e){return Gt(t,e,"pre")}(t,n);i=i.slice(1),r.Z(i,(function(n){var r=t.node(n).parent,i=e.edge(n,r),a=!1;i||(i=e.edge(r,n),a=!0),e.node(n).rank=e.node(r).rank+(a?i.minlen:-i.minlen)}))}(t,e)}function ae(t,e,n){return n.low<=e.lim&&e.lim<=n.lim}function se(t){switch(t.graph().ranker){case"network-simplex":default:ce(t);break;case"tight-tree":!function(t){wt(t),Ct(t)}(t);break;case"longest-path":oe(t)}}Kt.initLowLimValues=te,Kt.initCutValues=Qt,Kt.calcCutValue=Jt,Kt.leaveEdge=ne,Kt.enterEdge=re,Kt.exchangeEdges=ie;var oe=wt;function ce(t){Kt(t)}var le=n(4148),he=n(2344);function ue(t){var e=ot(t,"root",{},"_root"),n=function(t){var e={};function n(i,a){var s=t.children(i);s&&s.length&&r.Z(s,(function(t){n(t,a+1)})),e[i]=a}return r.Z(t.children(),(function(t){n(t,1)})),e}(t),i=K(le.Z(n))-1,a=2*i+1;t.graph().nestingRoot=e,r.Z(t.edges(),(function(e){t.edge(e).minlen*=a}));var s=function(t){return he.Z(t.edges(),(function(e,n){return e+t.edge(n).weight}),0)}(t)+1;r.Z(t.children(),(function(r){de(t,e,a,s,i,n,r)})),t.graph().nodeRankFactor=a}function de(t,e,n,i,a,s,o){var c=t.children(o);if(c.length){var l=ut(t,"_bt"),h=ut(t,"_bb"),u=t.node(o);t.setParent(l,o),u.borderTop=l,t.setParent(h,o),u.borderBottom=h,r.Z(c,(function(r){de(t,e,n,i,a,s,r);var c=t.node(r),u=c.borderTop?c.borderTop:r,d=c.borderBottom?c.borderBottom:r,p=c.borderTop?i:2*i,f=u!==d?1:a-s[o]+1;t.setEdge(l,u,{weight:p,minlen:f,nestingEdge:!0}),t.setEdge(d,h,{weight:p,minlen:f,nestingEdge:!0})})),t.parent(o)||t.setEdge(e,l,{weight:0,minlen:a+s[o]})}else o!==e&&t.setEdge(e,o,{weight:0,minlen:n})}var pe=n(8451);const fe=function(t){return(0,pe.Z)(t,5)};function ge(t,e,n){var s=function(t){var e;for(;t.hasNode(e=i.Z("_root")););return e}(t),o=new h.k({compound:!0}).setGraph({root:s}).setDefaultNodeLabel((function(e){return t.node(e)}));return r.Z(t.nodes(),(function(i){var c=t.node(i),l=t.parent(i);(c.rank===e||c.minRank<=e&&e<=c.maxRank)&&(o.setNode(i),o.setParent(i,l||s),r.Z(t[n](i),(function(e){var n=e.v===i?e.w:e.v,r=o.edge(n,i),a=nt.Z(r)?0:r.weight;o.setEdge(n,i,{weight:t.edge(e).weight+a})})),a.Z(c,"minRank")&&o.setNode(i,{borderLeft:c.borderLeft[e],borderRight:c.borderRight[e]}))})),o}var ye=n(2954);const me=function(t,e,n){for(var r=-1,i=t.length,a=e.length,s={};++r<i;){var o=r<a?e[r]:void 0;n(s,t[r],o)}return s};const be=function(t,e){return me(t||[],e||[],ye.Z)};var _e=n(626),xe=n(4073),ve=n(3317),ke=n(1018);const we=function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t};var Ee=n(1162);const Ce=function(t,e){if(t!==e){var n=void 0!==t,r=null===t,i=t==t,a=(0,H.Z)(t),s=void 0!==e,o=null===e,c=e==e,l=(0,H.Z)(e);if(!o&&!l&&!a&&t>e||a&&s&&c&&!o&&!l||r&&s&&c||!n&&c||!i)return 1;if(!r&&!a&&!l&&t<e||l&&n&&i&&!r&&!a||o&&n&&i||!s&&i||!c)return-1}return 0};const Te=function(t,e,n){for(var r=-1,i=t.criteria,a=e.criteria,s=i.length,o=n.length;++r<s;){var c=Ce(i[r],a[r]);if(c)return r>=o?c:c*("desc"==n[r]?-1:1)}return t.index-e.index};const Se=function(t,e,n){e=e.length?(0,xe.Z)(e,(function(t){return(0,L.Z)(t)?function(e){return(0,ve.Z)(e,1===t.length?t[0]:t)}:t})):[X.Z];var r=-1;e=(0,xe.Z)(e,(0,Ee.Z)(tt.Z));var i=(0,ke.Z)(t,(function(t,n,i){return{criteria:(0,xe.Z)(e,(function(e){return e(t)})),index:++r,value:t}}));return we(i,(function(t,e){return Te(t,e,n)}))};const Ae=(0,Y.Z)((function(t,e){if(null==t)return[];var n=e.length;return n>1&&(0,z.Z)(t,e[0],e[1])?e=[]:n>2&&(0,z.Z)(e[0],e[1],e[2])&&(e=[e[0]]),Se(t,(0,_e.Z)(e,1),[])}));function Le(t,e){for(var n=0,r=1;r<e.length;++r)n+=Be(t,e[r-1],e[r]);return n}function Be(t,e,n){for(var i=be(n,c.Z(n,(function(t,e){return e}))),a=o.Z(c.Z(e,(function(e){return Ae(c.Z(t.outEdges(e),(function(e){return{pos:i[e.w],weight:t.edge(e).weight}})),"pos")}))),s=1;s<n.length;)s<<=1;var l=2*s-1;s-=1;var h=c.Z(new Array(l),(function(){return 0})),u=0;return r.Z(a.forEach((function(t){var e=t.pos+s;h[e]+=t.weight;for(var n=0;e>0;)e%2&&(n+=h[e+1]),h[e=e-1>>1]+=t.weight;u+=t.weight*n}))),u}function Ne(t,e){var n={};return r.Z(t,(function(t,e){var r=n[t.v]={indegree:0,in:[],out:[],vs:[t.v],i:e};nt.Z(t.barycenter)||(r.barycenter=t.barycenter,r.weight=t.weight)})),r.Z(e.edges(),(function(t){var e=n[t.v],r=n[t.w];nt.Z(e)||nt.Z(r)||(r.indegree++,e.out.push(n[t.w]))})),function(t){var e=[];function n(t){return function(e){e.merged||(nt.Z(e.barycenter)||nt.Z(t.barycenter)||e.barycenter>=t.barycenter)&&function(t,e){var n=0,r=0;t.weight&&(n+=t.barycenter*t.weight,r+=t.weight);e.weight&&(n+=e.barycenter*e.weight,r+=e.weight);t.vs=e.vs.concat(t.vs),t.barycenter=n/r,t.weight=r,t.i=Math.min(e.i,t.i),e.merged=!0}(t,e)}}function i(e){return function(n){n.in.push(e),0==--n.indegree&&t.push(n)}}for(;t.length;){var a=t.pop();e.push(a),r.Z(a.in.reverse(),n(a)),r.Z(a.out,i(a))}return c.Z($t.Z(e,(function(t){return!t.merged})),(function(t){return W.Z(t,["vs","i","barycenter","weight"])}))}($t.Z(n,(function(t){return!t.indegree})))}function De(t,e){var n,i=function(t,e){var n={lhs:[],rhs:[]};return r.Z(t,(function(t){e(t)?n.lhs.push(t):n.rhs.push(t)})),n}(t,(function(t){return a.Z(t,"barycenter")})),s=i.lhs,c=Ae(i.rhs,(function(t){return-t.i})),l=[],h=0,u=0,d=0;s.sort((n=!!e,function(t,e){return t.barycenter<e.barycenter?-1:t.barycenter>e.barycenter?1:n?e.i-t.i:t.i-e.i})),d=Oe(l,c,d),r.Z(s,(function(t){d+=t.vs.length,l.push(t.vs),h+=t.barycenter*t.weight,u+=t.weight,d=Oe(l,c,d)}));var p={vs:o.Z(l)};return u&&(p.barycenter=h/u,p.weight=u),p}function Oe(t,e,n){for(var r;e.length&&(r=Q(e)).i<=n;)e.pop(),t.push(r.vs),n++;return n}function Me(t,e,n,i){var s=t.children(e),l=t.node(e),h=l?l.borderLeft:void 0,u=l?l.borderRight:void 0,d={};h&&(s=$t.Z(s,(function(t){return t!==h&&t!==u})));var p=function(t,e){return c.Z(e,(function(e){var n=t.inEdges(e);if(n.length){var r=he.Z(n,(function(e,n){var r=t.edge(n),i=t.node(n.v);return{sum:e.sum+r.weight*i.order,weight:e.weight+r.weight}}),{sum:0,weight:0});return{v:e,barycenter:r.sum/r.weight,weight:r.weight}}return{v:e}}))}(t,s);r.Z(p,(function(e){if(t.children(e.v).length){var r=Me(t,e.v,n,i);d[e.v]=r,a.Z(r,"barycenter")&&(s=e,o=r,nt.Z(s.barycenter)?(s.barycenter=o.barycenter,s.weight=o.weight):(s.barycenter=(s.barycenter*s.weight+o.barycenter*o.weight)/(s.weight+o.weight),s.weight+=o.weight))}var s,o}));var f=Ne(p,n);!function(t,e){r.Z(t,(function(t){t.vs=o.Z(t.vs.map((function(t){return e[t]?e[t].vs:t})))}))}(f,d);var g=De(f,i);if(h&&(g.vs=o.Z([h,g.vs,u]),t.predecessors(h).length)){var y=t.node(t.predecessors(h)[0]),m=t.node(t.predecessors(u)[0]);a.Z(g,"barycenter")||(g.barycenter=0,g.weight=0),g.barycenter=(g.barycenter*g.weight+y.order+m.order)/(g.weight+2),g.weight+=2}return g}function Ie(t){var e=dt(t),n=Fe(t,l.Z(1,e+1),"inEdges"),i=Fe(t,l.Z(e-1,-1,-1),"outEdges"),s=function(t){var e={},n=$t.Z(t.nodes(),(function(e){return!t.children(e).length})),i=K(c.Z(n,(function(e){return t.node(e).rank}))),s=c.Z(l.Z(i+1),(function(){return[]})),o=Ae(n,(function(e){return t.node(e).rank}));return r.Z(o,(function n(i){if(!a.Z(e,i)){e[i]=!0;var o=t.node(i);s[o.rank].push(i),r.Z(t.successors(i),n)}})),s}(t);Re(t,s);for(var o,h=Number.POSITIVE_INFINITY,u=0,d=0;d<4;++u,++d){$e(u%2?n:i,u%4>=2);var p=Le(t,s=ht(t));p<h&&(d=0,o=fe(s),h=p)}Re(t,o)}function Fe(t,e,n){return c.Z(e,(function(e){return ge(t,e,n)}))}function $e(t,e){var n=new h.k;r.Z(t,(function(t){var i=t.graph().root,a=Me(t,i,n,e);r.Z(a.vs,(function(e,n){t.node(e).order=n})),function(t,e,n){var i,a={};r.Z(n,(function(n){for(var r,s,o=t.parent(n);o;){if((r=t.parent(o))?(s=a[r],a[r]=o):(s=i,i=o),s&&s!==o)return void e.setEdge(s,o);o=r}}))}(t,n,a.vs)}))}function Re(t,e){r.Z(e,(function(e){r.Z(e,(function(e,n){t.node(e).order=n}))}))}function Ze(t){var e=function(t){var e={},n=0;function i(a){var s=n;r.Z(t.children(a),i),e[a]={low:s,lim:n++}}return r.Z(t.children(),i),e}(t);r.Z(t.graph().dummyChains,(function(n){for(var r=t.node(n),i=r.edgeObj,a=function(t,e,n,r){var i,a,s=[],o=[],c=Math.min(e[n].low,e[r].low),l=Math.max(e[n].lim,e[r].lim);i=n;do{i=t.parent(i),s.push(i)}while(i&&(e[i].low>c||l>e[i].lim));a=i,i=r;for(;(i=t.parent(i))!==a;)o.push(i);return{path:s.concat(o.reverse()),lca:a}}(t,e,i.v,i.w),s=a.path,o=a.lca,c=0,l=s[c],h=!0;n!==i.w;){if(r=t.node(n),h){for(;(l=s[c])!==o&&t.node(l).maxRank<r.rank;)c++;l===o&&(h=!1)}if(!h){for(;c<s.length-1&&t.node(l=s[c+1]).minRank<=r.rank;)c++;l=s[c]}t.setParent(n,l),n=t.successors(n)[0]}}))}var Pe=n(8882);const je=function(t,e){return null==t?t:(0,w.Z)(t,(0,Pe.Z)(e),R.Z)};function Ye(t,e){var n={};return he.Z(e,(function(e,i){var a=0,s=0,o=e.length,c=Q(i);return r.Z(i,(function(e,l){var h=function(t,e){if(t.node(e).dummy)return Ft(t.predecessors(e),(function(e){return t.node(e).dummy}))}(t,e),u=h?t.node(h).order:o;(h||e===c)&&(r.Z(i.slice(s,l+1),(function(e){r.Z(t.predecessors(e),(function(r){var i=t.node(r),s=i.order;!(s<a||u<s)||i.dummy&&t.node(e).dummy||ze(n,r,e)}))})),s=l+1,a=u)})),i})),n}function ze(t,e,n){if(e>n){var r=e;e=n,n=r}var i=t[e];i||(t[e]=i={}),i[n]=!0}function Ue(t,e,n){if(e>n){var r=e;e=n,n=r}return a.Z(t[e],n)}function We(t,e,n,i,s){var o={},c=function(t,e,n,i){var s=new h.k,o=t.graph(),c=function(t,e,n){return function(r,i,s){var o,c=r.node(i),l=r.node(s),h=0;if(h+=c.width/2,a.Z(c,"labelpos"))switch(c.labelpos.toLowerCase()){case"l":o=-c.width/2;break;case"r":o=c.width/2}if(o&&(h+=n?o:-o),o=0,h+=(c.dummy?e:t)/2,h+=(l.dummy?e:t)/2,h+=l.width/2,a.Z(l,"labelpos"))switch(l.labelpos.toLowerCase()){case"l":o=l.width/2;break;case"r":o=-l.width/2}return o&&(h+=n?o:-o),o=0,h}}(o.nodesep,o.edgesep,i);return r.Z(e,(function(e){var i;r.Z(e,(function(e){var r=n[e];if(s.setNode(r),i){var a=n[i],o=s.edge(a,r);s.setEdge(a,r,Math.max(c(t,e,i),o||0))}i=e}))})),s}(t,e,n,s),l=s?"borderLeft":"borderRight";function u(t,e){for(var n=c.nodes(),r=n.pop(),i={};r;)i[r]?t(r):(i[r]=!0,n.push(r),n=n.concat(e(r))),r=n.pop()}return u((function(t){o[t]=c.inEdges(t).reduce((function(t,e){return Math.max(t,o[e.v]+c.edge(e))}),0)}),c.predecessors.bind(c)),u((function(e){var n=c.outEdges(e).reduce((function(t,e){return Math.min(t,o[e.w]-c.edge(e))}),Number.POSITIVE_INFINITY),r=t.node(e);n!==Number.POSITIVE_INFINITY&&r.borderType!==l&&(o[e]=Math.max(o[e],n))}),c.successors.bind(c)),r.Z(i,(function(t){o[t]=o[n[t]]})),o}function qe(t){var e,n=ht(t),i=U(Ye(t,n),function(t,e){var n={};function i(e,i,a,s,o){var c;r.Z(l.Z(i,a),(function(i){c=e[i],t.node(c).dummy&&r.Z(t.predecessors(c),(function(e){var r=t.node(e);r.dummy&&(r.order<s||r.order>o)&&ze(n,e,c)}))}))}return he.Z(e,(function(e,n){var a,s=-1,o=0;return r.Z(n,(function(r,c){if("border"===t.node(r).dummy){var l=t.predecessors(r);l.length&&(a=t.node(l[0]).order,i(n,o,c,s,a),o=c,s=a)}i(n,o,n.length,a,e.length)})),n})),n}(t,n)),a={};r.Z(["u","d"],(function(s){e="u"===s?n:le.Z(n).reverse(),r.Z(["l","r"],(function(n){"r"===n&&(e=c.Z(e,(function(t){return le.Z(t).reverse()})));var o=("u"===s?t.predecessors:t.successors).bind(t),l=function(t,e,n,i){var a={},s={},o={};return r.Z(e,(function(t){r.Z(t,(function(t,e){a[t]=t,s[t]=t,o[t]=e}))})),r.Z(e,(function(t){var e=-1;r.Z(t,(function(t){var r=i(t);if(r.length){r=Ae(r,(function(t){return o[t]}));for(var c=(r.length-1)/2,l=Math.floor(c),h=Math.ceil(c);l<=h;++l){var u=r[l];s[t]===t&&e<o[u]&&!Ue(n,t,u)&&(s[u]=t,s[t]=a[t]=a[u],e=o[u])}}}))})),{root:a,align:s}}(0,e,i,o),h=We(t,e,l.root,l.align,"r"===n);"r"===n&&(h=et(h,(function(t){return-t}))),a[s+n]=h}))}));var s=function(t,e){return kt(le.Z(e),(function(e){var n=Number.NEGATIVE_INFINITY,r=Number.POSITIVE_INFINITY;return je(e,(function(e,i){var a=function(t,e){return t.node(e).width}(t,i)/2;n=Math.max(e+a,n),r=Math.min(e-a,r)})),n-r}))}(t,a);return function(t,e){var n=le.Z(e),i=it(n),a=K(n);r.Z(["u","d"],(function(n){r.Z(["l","r"],(function(r){var s,o=n+r,c=t[o];if(c!==e){var l=le.Z(c);(s="l"===r?i-it(l):a-K(l))&&(t[o]=et(c,(function(t){return t+s})))}}))}))}(a,s),function(t,e){return et(t.ul,(function(n,r){if(e)return t[e.toLowerCase()][r];var i=Ae(c.Z(t,r));return(i[1]+i[2])/2}))}(a,t.graph().align)}function He(t){(function(t){var e=ht(t),n=t.graph().ranksep,i=0;r.Z(e,(function(e){var a=K(c.Z(e,(function(e){return t.node(e).height})));r.Z(e,(function(e){t.node(e).y=i+a/2})),i+=a+n}))})(t=ct(t)),r.Z(qe(t),(function(e,n){t.node(n).x=e}))}function Ve(t,e){var n=e&&e.debugTiming?pt:ft;n("layout",(function(){var e=n("  buildLayoutGraph",(function(){return function(t){var e=new h.k({multigraph:!0,compound:!0}),n=an(t.graph());return e.setGraph(U({},Xe,rn(n,Ge),W.Z(n,Ke))),r.Z(t.nodes(),(function(n){var r=an(t.node(n));e.setNode(n,q.Z(rn(r,Qe),Je)),e.setParent(n,t.parent(n))})),r.Z(t.edges(),(function(n){var r=an(t.edge(n));e.setEdge(n,U({},en,rn(r,tn),W.Z(r,nn)))})),e}(t)}));n("  runLayout",(function(){!function(t,e){e("    makeSpaceForEdgeLabels",(function(){!function(t){var e=t.graph();e.ranksep/=2,r.Z(t.edges(),(function(n){var r=t.edge(n);r.minlen*=2,"c"!==r.labelpos.toLowerCase()&&("TB"===e.rankdir||"BT"===e.rankdir?r.width+=r.labeloffset:r.height+=r.labeloffset)}))}(t)})),e("    removeSelfEdges",(function(){!function(t){r.Z(t.edges(),(function(e){if(e.v===e.w){var n=t.node(e.v);n.selfEdges||(n.selfEdges=[]),n.selfEdges.push({e:e,label:t.edge(e)}),t.removeEdge(e)}}))}(t)})),e("    acyclic",(function(){b(t)})),e("    nestingGraph.run",(function(){ue(t)})),e("    rank",(function(){se(ct(t))})),e("    injectEdgeLabelProxies",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.width&&n.height){var r=t.node(e.v),i={rank:(t.node(e.w).rank-r.rank)/2+r.rank,e:e};ot(t,"edge-proxy",i,"_ep")}}))}(t)})),e("    removeEmptyRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank}))),n=[];r.Z(t.nodes(),(function(r){var i=t.node(r).rank-e;n[i]||(n[i]=[]),n[i].push(r)}));var i=0,a=t.graph().nodeRankFactor;r.Z(n,(function(e,n){nt.Z(e)&&n%a!=0?--i:i&&r.Z(e,(function(e){t.node(e).rank+=i}))}))}(t)})),e("    nestingGraph.cleanup",(function(){!function(t){var e=t.graph();t.removeNode(e.nestingRoot),delete e.nestingRoot,r.Z(t.edges(),(function(e){t.edge(e).nestingEdge&&t.removeEdge(e)}))}(t)})),e("    normalizeRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank})));r.Z(t.nodes(),(function(n){var r=t.node(n);a.Z(r,"rank")&&(r.rank-=e)}))}(t)})),e("    assignRankMinMax",(function(){!function(t){var e=0;r.Z(t.nodes(),(function(n){var r=t.node(n);r.borderTop&&(r.minRank=t.node(r.borderTop).rank,r.maxRank=t.node(r.borderBottom).rank,e=K(e,r.maxRank))})),t.graph().maxRank=e}(t)})),e("    removeEdgeLabelProxies",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);"edge-proxy"===n.dummy&&(t.edge(n.e).labelRank=n.rank,t.removeNode(e))}))}(t)})),e("    normalize.run",(function(){vt(t)})),e("    parentDummyChains",(function(){Ze(t)})),e("    addBorderSegments",(function(){!function(t){r.Z(t.children(),(function e(n){var i=t.children(n),s=t.node(n);if(i.length&&r.Z(i,e),a.Z(s,"minRank")){s.borderLeft=[],s.borderRight=[];for(var o=s.minRank,c=s.maxRank+1;o<c;++o)gt(t,"borderLeft","_bl",n,s,o),gt(t,"borderRight","_br",n,s,o)}}))}(t)})),e("    order",(function(){Ie(t)})),e("    insertSelfEdges",(function(){!function(t){var e=ht(t);r.Z(e,(function(e){var n=0;r.Z(e,(function(e,i){var a=t.node(e);a.order=i+n,r.Z(a.selfEdges,(function(e){ot(t,"selfedge",{width:e.label.width,height:e.label.height,rank:a.rank,order:i+ ++n,e:e.e,label:e.label},"_se")})),delete a.selfEdges}))}))}(t)})),e("    adjustCoordinateSystem",(function(){!function(t){var e=t.graph().rankdir.toLowerCase();"lr"!==e&&"rl"!==e||mt(t)}(t)})),e("    position",(function(){He(t)})),e("    positionSelfEdges",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);if("selfedge"===n.dummy){var r=t.node(n.e.v),i=r.x+r.width/2,a=r.y,s=n.x-i,o=r.height/2;t.setEdge(n.e,n.label),t.removeNode(e),n.label.points=[{x:i+2*s/3,y:a-o},{x:i+5*s/6,y:a-o},{x:i+s,y:a},{x:i+5*s/6,y:a+o},{x:i+2*s/3,y:a+o}],n.label.x=n.x,n.label.y=n.y}}))}(t)})),e("    removeBorderNodes",(function(){!function(t){r.Z(t.nodes(),(function(e){if(t.children(e).length){var n=t.node(e),r=t.node(n.borderTop),i=t.node(n.borderBottom),a=t.node(Q(n.borderLeft)),s=t.node(Q(n.borderRight));n.width=Math.abs(s.x-a.x),n.height=Math.abs(i.y-r.y),n.x=a.x+n.width/2,n.y=r.y+n.height/2}})),r.Z(t.nodes(),(function(e){"border"===t.node(e).dummy&&t.removeNode(e)}))}(t)})),e("    normalize.undo",(function(){!function(t){r.Z(t.graph().dummyChains,(function(e){var n,r=t.node(e),i=r.edgeLabel;for(t.setEdge(r.edgeObj,i);r.dummy;)n=t.successors(e)[0],t.removeNode(e),i.points.push({x:r.x,y:r.y}),"edge-label"===r.dummy&&(i.x=r.x,i.y=r.y,i.width=r.width,i.height=r.height),e=n,r=t.node(e)}))}(t)})),e("    fixupEdgeLabelCoords",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(a.Z(n,"x"))switch("l"!==n.labelpos&&"r"!==n.labelpos||(n.width-=n.labeloffset),n.labelpos){case"l":n.x-=n.width/2+n.labeloffset;break;case"r":n.x+=n.width/2+n.labeloffset}}))}(t)})),e("    undoCoordinateSystem",(function(){yt(t)})),e("    translateGraph",(function(){!function(t){var e=Number.POSITIVE_INFINITY,n=0,i=Number.POSITIVE_INFINITY,s=0,o=t.graph(),c=o.marginx||0,l=o.marginy||0;function h(t){var r=t.x,a=t.y,o=t.width,c=t.height;e=Math.min(e,r-o/2),n=Math.max(n,r+o/2),i=Math.min(i,a-c/2),s=Math.max(s,a+c/2)}r.Z(t.nodes(),(function(e){h(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);a.Z(n,"x")&&h(n)})),e-=c,i-=l,r.Z(t.nodes(),(function(n){var r=t.node(n);r.x-=e,r.y-=i})),r.Z(t.edges(),(function(n){var s=t.edge(n);r.Z(s.points,(function(t){t.x-=e,t.y-=i})),a.Z(s,"x")&&(s.x-=e),a.Z(s,"y")&&(s.y-=i)})),o.width=n-e+c,o.height=s-i+l}(t)})),e("    assignNodeIntersects",(function(){!function(t){r.Z(t.edges(),(function(e){var n,r,i=t.edge(e),a=t.node(e.v),s=t.node(e.w);i.points?(n=i.points[0],r=i.points[i.points.length-1]):(i.points=[],n=s,r=a),i.points.unshift(lt(a,n)),i.points.push(lt(s,r))}))}(t)})),e("    reversePoints",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);n.reversed&&n.points.reverse()}))}(t)})),e("    acyclic.undo",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.reversed){t.removeEdge(e);var r=n.forwardName;delete n.reversed,delete n.forwardName,t.setEdge(e.w,e.v,n,r)}}))}(t)}))}(e,n)})),n("  updateInputGraph",(function(){!function(t,e){r.Z(t.nodes(),(function(n){var r=t.node(n),i=e.node(n);r&&(r.x=i.x,r.y=i.y,e.children(n).length&&(r.width=i.width,r.height=i.height))})),r.Z(t.edges(),(function(n){var r=t.edge(n),i=e.edge(n);r.points=i.points,a.Z(i,"x")&&(r.x=i.x,r.y=i.y)})),t.graph().width=e.graph().width,t.graph().height=e.graph().height}(t,e)}))}))}var Ge=["nodesep","edgesep","ranksep","marginx","marginy"],Xe={ranksep:50,edgesep:20,nodesep:50,rankdir:"tb"},Ke=["acyclicer","ranker","rankdir","align"],Qe=["width","height"],Je={width:0,height:0},tn=["minlen","weight","width","height","labeloffset"],en={minlen:1,weight:1,width:0,height:0,labeloffset:10,labelpos:"r"},nn=["labelpos"];function rn(t,e){return et(W.Z(t,e),Number)}function an(t){var e={};return r.Z(t,(function(t,n){e[n.toLowerCase()]=t})),e}},2544:(t,e,n)=>{"use strict";n.d(e,{k:()=>D});var r=n(7452),i=n(2002),a=n(3234),s=n(7179),o=n(3445),c=n(9697),l=n(870),h=n(9360),u=n(626),d=n(9581),p=n(3001),f=n(1692);const g=function(t){return t!=t};const y=function(t,e,n){for(var r=n-1,i=t.length;++r<i;)if(t[r]===e)return r;return-1};const m=function(t,e,n){return e==e?y(t,e,n):(0,f.Z)(t,g,n)};const b=function(t,e){return!!(null==t?0:t.length)&&m(t,e,0)>-1};const _=function(t,e,n){for(var r=-1,i=null==t?0:t.length;++r<i;)if(n(e,t[r]))return!0;return!1};var x=n(9548),v=n(3203);const k=function(){};var w=n(6545),E=v.Z&&1/(0,w.Z)(new v.Z([,-0]))[1]==1/0?function(t){return new v.Z(t)}:k;const C=E;const T=function(t,e,n){var r=-1,i=b,a=t.length,s=!0,o=[],c=o;if(n)s=!1,i=_;else if(a>=200){var l=e?null:C(t);if(l)return(0,w.Z)(l);s=!1,i=x.Z,c=new p.Z}else c=e?[]:o;t:for(;++r<a;){var h=t[r],u=e?e(h):h;if(h=n||0!==h?h:0,s&&u==u){for(var d=c.length;d--;)if(c[d]===u)continue t;e&&c.push(u),o.push(h)}else i(c,u,n)||(c!==o&&c.push(u),o.push(h))}return o};var S=n(836);const A=(0,d.Z)((function(t){return T((0,u.Z)(t,1,S.Z,!0))}));var L=n(4148),B=n(2344),N="\0";class D{constructor(t={}){this._isDirected=!r.Z(t,"directed")||t.directed,this._isMultigraph=!!r.Z(t,"multigraph")&&t.multigraph,this._isCompound=!!r.Z(t,"compound")&&t.compound,this._label=void 0,this._defaultNodeLabelFn=i.Z(void 0),this._defaultEdgeLabelFn=i.Z(void 0),this._nodes={},this._isCompound&&(this._parent={},this._children={},this._children["\0"]={}),this._in={},this._preds={},this._out={},this._sucs={},this._edgeObjs={},this._edgeLabels={}}isDirected(){return this._isDirected}isMultigraph(){return this._isMultigraph}isCompound(){return this._isCompound}setGraph(t){return this._label=t,this}graph(){return this._label}setDefaultNodeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultNodeLabelFn=t,this}nodeCount(){return this._nodeCount}nodes(){return s.Z(this._nodes)}sources(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._in[e])}))}sinks(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._out[e])}))}setNodes(t,e){var n=arguments,r=this;return l.Z(t,(function(t){n.length>1?r.setNode(t,e):r.setNode(t)})),this}setNode(t,e){return r.Z(this._nodes,t)?(arguments.length>1&&(this._nodes[t]=e),this):(this._nodes[t]=arguments.length>1?e:this._defaultNodeLabelFn(t),this._isCompound&&(this._parent[t]=N,this._children[t]={},this._children["\0"][t]=!0),this._in[t]={},this._preds[t]={},this._out[t]={},this._sucs[t]={},++this._nodeCount,this)}node(t){return this._nodes[t]}hasNode(t){return r.Z(this._nodes,t)}removeNode(t){var e=this;if(r.Z(this._nodes,t)){var n=function(t){e.removeEdge(e._edgeObjs[t])};delete this._nodes[t],this._isCompound&&(this._removeFromParentsChildList(t),delete this._parent[t],l.Z(this.children(t),(function(t){e.setParent(t)})),delete this._children[t]),l.Z(s.Z(this._in[t]),n),delete this._in[t],delete this._preds[t],l.Z(s.Z(this._out[t]),n),delete this._out[t],delete this._sucs[t],--this._nodeCount}return this}setParent(t,e){if(!this._isCompound)throw new Error("Cannot set parent in a non-compound graph");if(h.Z(e))e=N;else{for(var n=e+="";!h.Z(n);n=this.parent(n))if(n===t)throw new Error("Setting "+e+" as parent of "+t+" would create a cycle");this.setNode(e)}return this.setNode(t),this._removeFromParentsChildList(t),this._parent[t]=e,this._children[e][t]=!0,this}_removeFromParentsChildList(t){delete this._children[this._parent[t]][t]}parent(t){if(this._isCompound){var e=this._parent[t];if(e!==N)return e}}children(t){if(h.Z(t)&&(t=N),this._isCompound){var e=this._children[t];if(e)return s.Z(e)}else{if(t===N)return this.nodes();if(this.hasNode(t))return[]}}predecessors(t){var e=this._preds[t];if(e)return s.Z(e)}successors(t){var e=this._sucs[t];if(e)return s.Z(e)}neighbors(t){var e=this.predecessors(t);if(e)return A(e,this.successors(t))}isLeaf(t){return 0===(this.isDirected()?this.successors(t):this.neighbors(t)).length}filterNodes(t){var e=new this.constructor({directed:this._isDirected,multigraph:this._isMultigraph,compound:this._isCompound});e.setGraph(this.graph());var n=this;l.Z(this._nodes,(function(n,r){t(r)&&e.setNode(r,n)})),l.Z(this._edgeObjs,(function(t){e.hasNode(t.v)&&e.hasNode(t.w)&&e.setEdge(t,n.edge(t))}));var r={};function i(t){var a=n.parent(t);return void 0===a||e.hasNode(a)?(r[t]=a,a):a in r?r[a]:i(a)}return this._isCompound&&l.Z(e.nodes(),(function(t){e.setParent(t,i(t))})),e}setDefaultEdgeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultEdgeLabelFn=t,this}edgeCount(){return this._edgeCount}edges(){return L.Z(this._edgeObjs)}setPath(t,e){var n=this,r=arguments;return B.Z(t,(function(t,i){return r.length>1?n.setEdge(t,i,e):n.setEdge(t,i),i})),this}setEdge(){var t,e,n,i,a=!1,s=arguments[0];"object"==typeof s&&null!==s&&"v"in s?(t=s.v,e=s.w,n=s.name,2===arguments.length&&(i=arguments[1],a=!0)):(t=s,e=arguments[1],n=arguments[3],arguments.length>2&&(i=arguments[2],a=!0)),t=""+t,e=""+e,h.Z(n)||(n=""+n);var o=I(this._isDirected,t,e,n);if(r.Z(this._edgeLabels,o))return a&&(this._edgeLabels[o]=i),this;if(!h.Z(n)&&!this._isMultigraph)throw new Error("Cannot set a named edge when isMultigraph = false");this.setNode(t),this.setNode(e),this._edgeLabels[o]=a?i:this._defaultEdgeLabelFn(t,e,n);var c=function(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}var o={v:i,w:a};r&&(o.name=r);return o}(this._isDirected,t,e,n);return t=c.v,e=c.w,Object.freeze(c),this._edgeObjs[o]=c,O(this._preds[e],t),O(this._sucs[t],e),this._in[e][o]=c,this._out[t][o]=c,this._edgeCount++,this}edge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return this._edgeLabels[r]}hasEdge(t,e,n){var i=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return r.Z(this._edgeLabels,i)}removeEdge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n),i=this._edgeObjs[r];return i&&(t=i.v,e=i.w,delete this._edgeLabels[r],delete this._edgeObjs[r],M(this._preds[e],t),M(this._sucs[t],e),delete this._in[e][r],delete this._out[t][r],this._edgeCount--),this}inEdges(t,e){var n=this._in[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.v===e})):r}}outEdges(t,e){var n=this._out[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.w===e})):r}}nodeEdges(t,e){var n=this.inEdges(t,e);if(n)return n.concat(this.outEdges(t,e))}}function O(t,e){t[e]?t[e]++:t[e]=1}function M(t,e){--t[e]||delete t[e]}function I(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}return i+"\x01"+a+"\x01"+(h.Z(r)?"\0":r)}function F(t,e){return I(t,e.v,e.w,e.name)}D.prototype._nodeCount=0,D.prototype._edgeCount=0},5625:(t,e,n)=>{"use strict";n.d(e,{k:()=>r.k});var r=n(2544)},9354:(t,e,n)=>{"use strict";n.d(e,{c:()=>o});var r=n(9360),i=n(8451);const a=function(t){return(0,i.Z)(t,4)};var s=n(3836);n(2544);function o(t){var e={options:{directed:t.isDirected(),multigraph:t.isMultigraph(),compound:t.isCompound()},nodes:c(t),edges:l(t)};return r.Z(t.graph())||(e.value=a(t.graph())),e}function c(t){return s.Z(t.nodes(),(function(e){var n=t.node(e),i=t.parent(e),a={v:e};return r.Z(n)||(a.value=n),r.Z(i)||(a.parent=i),a}))}function l(t){return s.Z(t.edges(),(function(e){var n=t.edge(e),i={v:e.v,w:e.w};return r.Z(e.name)||(i.name=e.name),r.Z(n)||(i.value=n),i}))}},1518:(t,e,n)=>{"use strict";n.d(e,{sY:()=>N});var r=n(9373),i=n(7452),a=n(3688),s=n(870),o=n(277),c=n(6225),l={normal:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},vee:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 L 4 5 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},undirected:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 5 L 10 5").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])}};function h(t){l=t}var u=n(3349);function d(t,e,n){var r=e.label,i=t.append("g");"svg"===e.labelType?function(t,e){var n=t;n.node().appendChild(e.label),c.bg(n,e.labelStyle)}(i,e):"string"!=typeof r||"html"===e.labelType?(0,u.a)(i,e):function(t,e){for(var n=t.append("text"),r=function(t){for(var e,n="",r=!1,i=0;i<t.length;++i)e=t[i],r?(n+="n"===e?"\n":e,r=!1):"\\"===e?r=!0:n+=e;return n}(e.label).split("\n"),i=0;i<r.length;i++)n.append("tspan").attr("xml:space","preserve").attr("dy","1em").attr("x","1").text(r[i]);c.bg(n,e.labelStyle)}(i,e);var a,s=i.node().getBBox();switch(n){case"top":a=-e.height/2;break;case"bottom":a=e.height/2-s.height;break;default:a=-s.height/2}return i.attr("transform","translate("+-s.width/2+","+a+")"),i}var p=function(t,e){var n=e.nodes().filter((function(t){return c.bF(e,t)})),i=t.selectAll("g.cluster").data(n,(function(t){return t}));c.WR(i.exit(),e).style("opacity",0).remove();var a=i.enter().append("g").attr("class","cluster").attr("id",(function(t){return e.node(t).id})).style("opacity",0).each((function(t){var n=e.node(t),i=r.Ys(this);r.Ys(this).append("rect"),d(i.append("g").attr("class","label"),n,n.clusterLabelPos)}));return i=i.merge(a),(i=c.WR(i,e).style("opacity",1)).selectAll("rect").each((function(t){var n=e.node(t),i=r.Ys(this);c.bg(i,n.style)})),i};function f(t){p=t}let g=function(t,e){var n,a=t.selectAll("g.edgeLabel").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0);return a.exit().remove(),a.enter().append("g").classed("edgeLabel",!0).style("opacity",0),(a=t.selectAll("g.edgeLabel")).each((function(t){var n=r.Ys(this);n.select(".label").remove();var a=e.edge(t),s=d(n,e.edge(t),0).classed("label",!0),o=s.node().getBBox();a.labelId&&s.attr("id",a.labelId),i.Z(a,"width")||(a.width=o.width),i.Z(a,"height")||(a.height=o.height)})),n=a.exit?a.exit():a.selectAll(null),c.WR(n,e).style("opacity",0).remove(),a};function y(t){g=t}var m=n(6749),b=n(4379);function _(t,e){return t.intersect(e)}var x=function(t,e,n){var i=t.selectAll("g.edgePath").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0),a=function(t,e){var n=t.enter().append("g").attr("class","edgePath").style("opacity",0);return n.append("path").attr("class","path").attr("d",(function(t){var n=e.edge(t),r=e.node(t.v).elem;return k(n,b.Z(n.points.length).map((function(){return e=(t=r).getBBox(),{x:(n=t.ownerSVGElement.getScreenCTM().inverse().multiply(t.getScreenCTM()).translate(e.width/2,e.height/2)).e,y:n.f};var t,e,n})))})),n.append("defs"),n}(i,e);!function(t,e){var n=t.exit();c.WR(n,e).style("opacity",0).remove()}(i,e);var s=void 0!==i.merge?i.merge(a):i;return c.WR(s,e).style("opacity",1),s.each((function(t){var n=r.Ys(this),i=e.edge(t);i.elem=this,i.id&&n.attr("id",i.id),c.$p(n,i.class,(n.classed("update")?"update ":"")+"edgePath")})),s.selectAll("path.path").each((function(t){var n=e.edge(t);n.arrowheadId=m.Z("arrowhead");var i=r.Ys(this).attr("marker-end",(function(){return"url("+(t=location.href,e=n.arrowheadId,t.split("#")[0]+"#"+e+")");var t,e})).style("fill","none");c.WR(i,e).attr("d",(function(t){return function(t,e){var n=t.edge(e),r=t.node(e.v),i=t.node(e.w),a=n.points.slice(1,n.points.length-1);return a.unshift(_(r,a[0])),a.push(_(i,a[a.length-1])),k(n,a)}(e,t)})),c.bg(i,n.style)})),s.selectAll("defs *").remove(),s.selectAll("defs").each((function(t){var i=e.edge(t);(0,n[i.arrowhead])(r.Ys(this),i.arrowheadId,i,"arrowhead")})),s};function v(t){x=t}function k(t,e){var n=(r.jvg||r.YPS.line)().x((function(t){return t.x})).y((function(t){return t.y}));return(n.curve||n.interpolate)(t.curve),n(e)}var w=n(1666),E=function(t,e,n){var a,s=e.nodes().filter((function(t){return!c.bF(e,t)})),o=t.selectAll("g.node").data(s,(function(t){return t})).classed("update",!0);return o.exit().remove(),o.enter().append("g").attr("class","node").style("opacity",0),(o=t.selectAll("g.node")).each((function(t){var a=e.node(t),s=r.Ys(this);c.$p(s,a.class,(s.classed("update")?"update ":"")+"node"),s.select("g.label").remove();var o=s.append("g").attr("class","label"),l=d(o,a),h=n[a.shape],u=w.Z(l.node().getBBox(),"width","height");a.elem=this,a.id&&s.attr("id",a.id),a.labelId&&o.attr("id",a.labelId),i.Z(a,"width")&&(u.width=a.width),i.Z(a,"height")&&(u.height=a.height),u.width+=a.paddingLeft+a.paddingRight,u.height+=a.paddingTop+a.paddingBottom,o.attr("transform","translate("+(a.paddingLeft-a.paddingRight)/2+","+(a.paddingTop-a.paddingBottom)/2+")");var p=r.Ys(this);p.select(".label-container").remove();var f=h(p,u,a).classed("label-container",!0);c.bg(f,a.style);var g=f.node().getBBox();a.width=g.width,a.height=g.height})),a=o.exit?o.exit():o.selectAll(null),c.WR(a,e).style("opacity",0).remove(),o};function C(t){E=t}function T(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}var S=n(3352),A=n(2930),L={rect:function(t,e,n){var r=t.insert("rect",":first-child").attr("rx",n.rx).attr("ry",n.ry).attr("x",-e.width/2).attr("y",-e.height/2).attr("width",e.width).attr("height",e.height);return n.intersect=function(t){return(0,A.q)(n,t)},r},ellipse:function(t,e,n){var r=e.width/2,i=e.height/2,a=t.insert("ellipse",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("rx",r).attr("ry",i);return n.intersect=function(t){return T(n,r,i,t)},a},circle:function(t,e,n){var r=Math.max(e.width,e.height)/2,i=t.insert("circle",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("r",r);return n.intersect=function(t){return function(t,e,n){return T(t,e,e,n)}(n,r,t)},i},diamond:function(t,e,n){var r=e.width*Math.SQRT2/2,i=e.height*Math.SQRT2/2,a=[{x:0,y:-i},{x:-r,y:0},{x:0,y:i},{x:r,y:0}],s=t.insert("polygon",":first-child").attr("points",a.map((function(t){return t.x+","+t.y})).join(" "));return n.intersect=function(t){return(0,S.A)(n,a,t)},s}};function B(t){L=t}function N(){var t=function(t,e){!function(t){t.nodes().forEach((function(e){var n=t.node(e);i.Z(n,"label")||t.children(e).length||(n.label=e),i.Z(n,"paddingX")&&a.Z(n,{paddingLeft:n.paddingX,paddingRight:n.paddingX}),i.Z(n,"paddingY")&&a.Z(n,{paddingTop:n.paddingY,paddingBottom:n.paddingY}),i.Z(n,"padding")&&a.Z(n,{paddingLeft:n.padding,paddingRight:n.padding,paddingTop:n.padding,paddingBottom:n.padding}),a.Z(n,D),s.Z(["paddingLeft","paddingRight","paddingTop","paddingBottom"],(function(t){n[t]=Number(n[t])})),i.Z(n,"width")&&(n._prevWidth=n.width),i.Z(n,"height")&&(n._prevHeight=n.height)})),t.edges().forEach((function(e){var n=t.edge(e);i.Z(n,"label")||(n.label=""),a.Z(n,O)}))}(e);var n=M(t,"output"),h=M(n,"clusters"),u=M(n,"edgePaths"),d=g(M(n,"edgeLabels"),e),f=E(M(n,"nodes"),e,L);(0,o.bK)(e),function(t,e){function n(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(f,e),function(t,e){function n(t){var n=e.edge(t);return i.Z(n,"x")?"translate("+n.x+","+n.y+")":""}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(d,e),x(u,e,l),function(t,e){var n=t.filter((function(){return!r.Ys(this).classed("update")}));function i(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}n.attr("transform",i),c.WR(t,e).style("opacity",1).attr("transform",i),c.WR(n.selectAll("rect"),e).attr("width",(function(t){return e.node(t).width})).attr("height",(function(t){return e.node(t).height})).attr("x",(function(t){return-e.node(t).width/2})).attr("y",(function(t){return-e.node(t).height/2}))}(p(h,e),e),function(t){s.Z(t.nodes(),(function(e){var n=t.node(e);i.Z(n,"_prevWidth")?n.width=n._prevWidth:delete n.width,i.Z(n,"_prevHeight")?n.height=n._prevHeight:delete n.height,delete n._prevWidth,delete n._prevHeight}))}(e)};return t.createNodes=function(e){return arguments.length?(C(e),t):E},t.createClusters=function(e){return arguments.length?(f(e),t):p},t.createEdgeLabels=function(e){return arguments.length?(y(e),t):g},t.createEdgePaths=function(e){return arguments.length?(v(e),t):x},t.shapes=function(e){return arguments.length?(B(e),t):L},t.arrows=function(e){return arguments.length?(h(e),t):l},t}var D={paddingLeft:10,paddingRight:10,paddingTop:10,paddingBottom:10,rx:0,ry:0,shape:"rect"},O={arrowhead:"normal",curve:r.c_6};function M(t,e){var n=t.select("g."+e);return n.empty()&&(n=t.append("g").attr("class",e)),n}n(5625)},1883:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(1691),i=n(2142);const a=class{constructor(){this.type=i.w.ALL}get(){return this.type}set(t){if(this.type&&this.type!==t)throw new Error("Cannot change both RGB and HSL channels at the same time");this.type=t}reset(){this.type=i.w.ALL}is(t){return this.type===t}};const s=new class{constructor(t,e){this.color=e,this.changed=!1,this.data=t,this.type=new a}set(t,e){return this.color=e,this.changed=!1,this.data=t,this.type.type=i.w.ALL,this}_ensureHSL(){const t=this.data,{h:e,s:n,l:i}=t;void 0===e&&(t.h=r.Z.channel.rgb2hsl(t,"h")),void 0===n&&(t.s=r.Z.channel.rgb2hsl(t,"s")),void 0===i&&(t.l=r.Z.channel.rgb2hsl(t,"l"))}_ensureRGB(){const t=this.data,{r:e,g:n,b:i}=t;void 0===e&&(t.r=r.Z.channel.hsl2rgb(t,"r")),void 0===n&&(t.g=r.Z.channel.hsl2rgb(t,"g")),void 0===i&&(t.b=r.Z.channel.hsl2rgb(t,"b"))}get r(){const t=this.data,e=t.r;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"r")):e}get g(){const t=this.data,e=t.g;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"g")):e}get b(){const t=this.data,e=t.b;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"b")):e}get h(){const t=this.data,e=t.h;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"h")):e}get s(){const t=this.data,e=t.s;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"s")):e}get l(){const t=this.data,e=t.l;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"l")):e}get a(){return this.data.a}set r(t){this.type.set(i.w.RGB),this.changed=!0,this.data.r=t}set g(t){this.type.set(i.w.RGB),this.changed=!0,this.data.g=t}set b(t){this.type.set(i.w.RGB),this.changed=!0,this.data.b=t}set h(t){this.type.set(i.w.HSL),this.changed=!0,this.data.h=t}set s(t){this.type.set(i.w.HSL),this.changed=!0,this.data.s=t}set l(t){this.type.set(i.w.HSL),this.changed=!0,this.data.l=t}set a(t){this.changed=!0,this.data.a=t}}({r:0,g:0,b:0,a:0},"transparent")},1610:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=n(1883),i=n(2142);const a={re:/^#((?:[a-f0-9]{2}){2,4}|[a-f0-9]{3})$/i,parse:t=>{if(35!==t.charCodeAt(0))return;const e=t.match(a.re);if(!e)return;const n=e[1],i=parseInt(n,16),s=n.length,o=s%4==0,c=s>4,l=c?1:17,h=c?8:4,u=o?0:-1,d=c?255:15;return r.Z.set({r:(i>>h*(u+3)&d)*l,g:(i>>h*(u+2)&d)*l,b:(i>>h*(u+1)&d)*l,a:o?(i&d)*l/255:1},t)},stringify:t=>{const{r:e,g:n,b:r,a:a}=t;return a<1?`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}${i.Q[Math.round(255*a)]}`:`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}`}},s=a;var o=n(1691);const c={re:/^hsla?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(?:deg|grad|rad|turn)?)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(%)?))?\s*?\)$/i,hueRe:/^(.+?)(deg|grad|rad|turn)$/i,_hue2deg:t=>{const e=t.match(c.hueRe);if(e){const[,t,n]=e;switch(n){case"grad":return o.Z.channel.clamp.h(.9*parseFloat(t));case"rad":return o.Z.channel.clamp.h(180*parseFloat(t)/Math.PI);case"turn":return o.Z.channel.clamp.h(360*parseFloat(t))}}return o.Z.channel.clamp.h(parseFloat(t))},parse:t=>{const e=t.charCodeAt(0);if(104!==e&&72!==e)return;const n=t.match(c.re);if(!n)return;const[,i,a,s,l,h]=n;return r.Z.set({h:c._hue2deg(i),s:o.Z.channel.clamp.s(parseFloat(a)),l:o.Z.channel.clamp.l(parseFloat(s)),a:l?o.Z.channel.clamp.a(h?parseFloat(l)/100:parseFloat(l)):1},t)},stringify:t=>{const{h:e,s:n,l:r,a:i}=t;return i<1?`hsla(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%, ${i})`:`hsl(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%)`}},l=c,h={colors:{aliceblue:"#f0f8ff",antiquewhite:"#faebd7",aqua:"#00ffff",aquamarine:"#7fffd4",azure:"#f0ffff",beige:"#f5f5dc",bisque:"#ffe4c4",black:"#000000",blanchedalmond:"#ffebcd",blue:"#0000ff",blueviolet:"#8a2be2",brown:"#a52a2a",burlywood:"#deb887",cadetblue:"#5f9ea0",chartreuse:"#7fff00",chocolate:"#d2691e",coral:"#ff7f50",cornflowerblue:"#6495ed",cornsilk:"#fff8dc",crimson:"#dc143c",cyanaqua:"#00ffff",darkblue:"#00008b",darkcyan:"#008b8b",darkgoldenrod:"#b8860b",darkgray:"#a9a9a9",darkgreen:"#006400",darkgrey:"#a9a9a9",darkkhaki:"#bdb76b",darkmagenta:"#8b008b",darkolivegreen:"#556b2f",darkorange:"#ff8c00",darkorchid:"#9932cc",darkred:"#8b0000",darksalmon:"#e9967a",darkseagreen:"#8fbc8f",darkslateblue:"#483d8b",darkslategray:"#2f4f4f",darkslategrey:"#2f4f4f",darkturquoise:"#00ced1",darkviolet:"#9400d3",deeppink:"#ff1493",deepskyblue:"#00bfff",dimgray:"#696969",dimgrey:"#696969",dodgerblue:"#1e90ff",firebrick:"#b22222",floralwhite:"#fffaf0",forestgreen:"#228b22",fuchsia:"#ff00ff",gainsboro:"#dcdcdc",ghostwhite:"#f8f8ff",gold:"#ffd700",goldenrod:"#daa520",gray:"#808080",green:"#008000",greenyellow:"#adff2f",grey:"#808080",honeydew:"#f0fff0",hotpink:"#ff69b4",indianred:"#cd5c5c",indigo:"#4b0082",ivory:"#fffff0",khaki:"#f0e68c",lavender:"#e6e6fa",lavenderblush:"#fff0f5",lawngreen:"#7cfc00",lemonchiffon:"#fffacd",lightblue:"#add8e6",lightcoral:"#f08080",lightcyan:"#e0ffff",lightgoldenrodyellow:"#fafad2",lightgray:"#d3d3d3",lightgreen:"#90ee90",lightgrey:"#d3d3d3",lightpink:"#ffb6c1",lightsalmon:"#ffa07a",lightseagreen:"#20b2aa",lightskyblue:"#87cefa",lightslategray:"#778899",lightslategrey:"#778899",lightsteelblue:"#b0c4de",lightyellow:"#ffffe0",lime:"#00ff00",limegreen:"#32cd32",linen:"#faf0e6",magenta:"#ff00ff",maroon:"#800000",mediumaquamarine:"#66cdaa",mediumblue:"#0000cd",mediumorchid:"#ba55d3",mediumpurple:"#9370db",mediumseagreen:"#3cb371",mediumslateblue:"#7b68ee",mediumspringgreen:"#00fa9a",mediumturquoise:"#48d1cc",mediumvioletred:"#c71585",midnightblue:"#191970",mintcream:"#f5fffa",mistyrose:"#ffe4e1",moccasin:"#ffe4b5",navajowhite:"#ffdead",navy:"#000080",oldlace:"#fdf5e6",olive:"#808000",olivedrab:"#6b8e23",orange:"#ffa500",orangered:"#ff4500",orchid:"#da70d6",palegoldenrod:"#eee8aa",palegreen:"#98fb98",paleturquoise:"#afeeee",palevioletred:"#db7093",papayawhip:"#ffefd5",peachpuff:"#ffdab9",peru:"#cd853f",pink:"#ffc0cb",plum:"#dda0dd",powderblue:"#b0e0e6",purple:"#800080",rebeccapurple:"#663399",red:"#ff0000",rosybrown:"#bc8f8f",royalblue:"#4169e1",saddlebrown:"#8b4513",salmon:"#fa8072",sandybrown:"#f4a460",seagreen:"#2e8b57",seashell:"#fff5ee",sienna:"#a0522d",silver:"#c0c0c0",skyblue:"#87ceeb",slateblue:"#6a5acd",slategray:"#708090",slategrey:"#708090",snow:"#fffafa",springgreen:"#00ff7f",tan:"#d2b48c",teal:"#008080",thistle:"#d8bfd8",transparent:"#00000000",turquoise:"#40e0d0",violet:"#ee82ee",wheat:"#f5deb3",white:"#ffffff",whitesmoke:"#f5f5f5",yellow:"#ffff00",yellowgreen:"#9acd32"},parse:t=>{t=t.toLowerCase();const e=h.colors[t];if(e)return s.parse(e)},stringify:t=>{const e=s.stringify(t);for(const n in h.colors)if(h.colors[n]===e)return n}},u=h,d={re:/^rgba?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?)))?\s*?\)$/i,parse:t=>{const e=t.charCodeAt(0);if(114!==e&&82!==e)return;const n=t.match(d.re);if(!n)return;const[,i,a,s,c,l,h,u,p]=n;return r.Z.set({r:o.Z.channel.clamp.r(a?2.55*parseFloat(i):parseFloat(i)),g:o.Z.channel.clamp.g(c?2.55*parseFloat(s):parseFloat(s)),b:o.Z.channel.clamp.b(h?2.55*parseFloat(l):parseFloat(l)),a:u?o.Z.channel.clamp.a(p?parseFloat(u)/100:parseFloat(u)):1},t)},stringify:t=>{const{r:e,g:n,b:r,a:i}=t;return i<1?`rgba(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)}, ${o.Z.lang.round(i)})`:`rgb(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)})`}},p=d,f={format:{keyword:h,hex:s,rgb:d,rgba:d,hsl:c,hsla:c},parse:t=>{if("string"!=typeof t)return t;const e=s.parse(t)||p.parse(t)||l.parse(t)||u.parse(t);if(e)return e;throw new Error(`Unsupported color format: "${t}"`)},stringify:t=>!t.changed&&t.color?t.color:t.type.is(i.w.HSL)||void 0===t.data.r?l.stringify(t):t.a<1||!Number.isInteger(t.r)||!Number.isInteger(t.g)||!Number.isInteger(t.b)?p.stringify(t):s.stringify(t)},g=f},2142:(t,e,n)=>{"use strict";n.d(e,{Q:()=>i,w:()=>a});var r=n(1691);const i={};for(let s=0;s<=255;s++)i[s]=r.Z.unit.dec2hex(s);const a={ALL:0,RGB:1,HSL:2}},1506:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1691),i=n(1610);const a=(t,e,n)=>{const a=i.Z.parse(t),s=a[e],o=r.Z.channel.clamp[e](s+n);return s!==o&&(a[e]=o),i.Z.stringify(a)}},7201:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",-e)},5920:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",e)},1691:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});const r={min:{r:0,g:0,b:0,s:0,l:0,a:0},max:{r:255,g:255,b:255,h:360,s:100,l:100,a:1},clamp:{r:t=>t>=255?255:t<0?0:t,g:t=>t>=255?255:t<0?0:t,b:t=>t>=255?255:t<0?0:t,h:t=>t%360,s:t=>t>=100?100:t<0?0:t,l:t=>t>=100?100:t<0?0:t,a:t=>t>=1?1:t<0?0:t},toLinear:t=>{const e=t/255;return t>.03928?Math.pow((e+.055)/1.055,2.4):e/12.92},hue2rgb:(t,e,n)=>(n<0&&(n+=1),n>1&&(n-=1),n<1/6?t+6*(e-t)*n:n<.5?e:n<2/3?t+(e-t)*(2/3-n)*6:t),hsl2rgb:({h:t,s:e,l:n},i)=>{if(!e)return 2.55*n;t/=360,e/=100;const a=(n/=100)<.5?n*(1+e):n+e-n*e,s=2*n-a;switch(i){case"r":return 255*r.hue2rgb(s,a,t+1/3);case"g":return 255*r.hue2rgb(s,a,t);case"b":return 255*r.hue2rgb(s,a,t-1/3)}},rgb2hsl:({r:t,g:e,b:n},r)=>{t/=255,e/=255,n/=255;const i=Math.max(t,e,n),a=Math.min(t,e,n),s=(i+a)/2;if("l"===r)return 100*s;if(i===a)return 0;const o=i-a;if("s"===r)return 100*(s>.5?o/(2-i-a):o/(i+a));switch(i){case t:return 60*((e-n)/o+(e<n?6:0));case e:return 60*((n-t)/o+2);case n:return 60*((t-e)/o+4);default:return-1}}},i={channel:r,lang:{clamp:(t,e,n)=>e>n?Math.min(e,Math.max(n,t)):Math.min(n,Math.max(e,t)),round:t=>Math.round(1e10*t)/1e10},unit:{dec2hex:t=>{const e=Math.round(t).toString(16);return e.length>1?e:`0${e}`}}}},7308:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});const r=function(){this.__data__=[],this.size=0};var i=n(9651);const a=function(t,e){for(var n=t.length;n--;)if((0,i.Z)(t[n][0],e))return n;return-1};var s=Array.prototype.splice;const o=function(t){var e=this.__data__,n=a(e,t);return!(n<0)&&(n==e.length-1?e.pop():s.call(e,n,1),--this.size,!0)};const c=function(t){var e=this.__data__,n=a(e,t);return n<0?void 0:e[n][1]};const l=function(t){return a(this.__data__,t)>-1};const h=function(t,e){var n=this.__data__,r=a(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=r,u.prototype.delete=o,u.prototype.get=c,u.prototype.has=l,u.prototype.set=h;const d=u},6183:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Map")},7834:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});const r=(0,n(2508).Z)(Object,"create");const i=function(){this.__data__=r?r(null):{},this.size=0};const a=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e};var s=Object.prototype.hasOwnProperty;const o=function(t){var e=this.__data__;if(r){var n=e[t];return"__lodash_hash_undefined__"===n?void 0:n}return s.call(e,t)?e[t]:void 0};var c=Object.prototype.hasOwnProperty;const l=function(t){var e=this.__data__;return r?void 0!==e[t]:c.call(e,t)};const h=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=r&&void 0===e?"__lodash_hash_undefined__":e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=o,u.prototype.has=l,u.prototype.set=h;const d=u;var p=n(7308),f=n(6183);const g=function(){this.size=0,this.__data__={hash:new d,map:new(f.Z||p.Z),string:new d}};const y=function(t){var e=typeof t;return"string"==e||"number"==e||"symbol"==e||"boolean"==e?"__proto__"!==t:null===t};const m=function(t,e){var n=t.__data__;return y(e)?n["string"==typeof e?"string":"hash"]:n.map};const b=function(t){var e=m(this,t).delete(t);return this.size-=e?1:0,e};const _=function(t){return m(this,t).get(t)};const x=function(t){return m(this,t).has(t)};const v=function(t,e){var n=m(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this};function k(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}k.prototype.clear=g,k.prototype.delete=b,k.prototype.get=_,k.prototype.has=x,k.prototype.set=v;const w=k},3203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Set")},3001:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7834);const i=function(t){return this.__data__.set(t,"__lodash_hash_undefined__"),this};const a=function(t){return this.__data__.has(t)};function s(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r.Z;++e<n;)this.add(t[e])}s.prototype.add=s.prototype.push=i,s.prototype.has=a;const o=s},1667:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7308);const i=function(){this.__data__=new r.Z,this.size=0};const a=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n};const s=function(t){return this.__data__.get(t)};const o=function(t){return this.__data__.has(t)};var c=n(6183),l=n(7834);const h=function(t,e){var n=this.__data__;if(n instanceof r.Z){var i=n.__data__;if(!c.Z||i.length<199)return i.push([t,e]),this.size=++n.size,this;n=this.__data__=new l.Z(i)}return n.set(t,e),this.size=n.size,this};function u(t){var e=this.__data__=new r.Z(t);this.size=e.size}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=s,u.prototype.has=o,u.prototype.set=h;const d=u},7685:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Symbol},7623:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Uint8Array},6579:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}},8774:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=0,a=[];++n<r;){var s=t[n];e(s,n,t)&&(a[i++]=s)}return a}},7668:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});const r=function(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r};var i=n(9169),a=n(7771),s=n(7008),o=n(6009),c=n(8843),l=Object.prototype.hasOwnProperty;const h=function(t,e){var n=(0,a.Z)(t),h=!n&&(0,i.Z)(t),u=!n&&!h&&(0,s.Z)(t),d=!n&&!h&&!u&&(0,c.Z)(t),p=n||h||u||d,f=p?r(t.length,String):[],g=f.length;for(var y in t)!e&&!l.call(t,y)||p&&("length"==y||u&&("offset"==y||"parent"==y)||d&&("buffer"==y||"byteLength"==y||"byteOffset"==y)||(0,o.Z)(y,g))||f.push(y);return f}},4073:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=Array(r);++n<r;)i[n]=e(t[n],n,t);return i}},8694:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=e.length,i=t.length;++n<r;)t[i+n]=e[n];return t}},2954:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4752),i=n(9651),a=Object.prototype.hasOwnProperty;const s=function(t,e,n){var s=t[e];a.call(t,e)&&(0,i.Z)(s,n)&&(void 0!==n||e in t)||(0,r.Z)(t,e,n)}},4752:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7904);const i=function(t,e,n){"__proto__"==e&&r.Z?(0,r.Z)(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}},8451:(t,e,n)=>{"use strict";n.d(e,{Z:()=>J});var r=n(1667),i=n(6579),a=n(2954),s=n(1899),o=n(7179);const c=function(t,e){return t&&(0,s.Z)(e,(0,o.Z)(e),t)};var l=n(2957);const h=function(t,e){return t&&(0,s.Z)(e,(0,l.Z)(e),t)};var u=n(1050),d=n(7215),p=n(5695);const f=function(t,e){return(0,s.Z)(t,(0,p.Z)(t),e)};var g=n(8694),y=n(2513),m=n(532);const b=Object.getOwnPropertySymbols?function(t){for(var e=[];t;)(0,g.Z)(e,(0,p.Z)(t)),t=(0,y.Z)(t);return e}:m.Z;const _=function(t,e){return(0,s.Z)(t,b(t),e)};var x=n(1808),v=n(3327);const k=function(t){return(0,v.Z)(t,l.Z,b)};var w=n(3970),E=Object.prototype.hasOwnProperty;const C=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&E.call(t,"index")&&(n.index=t.index,n.input=t.input),n};var T=n(1884);const S=function(t,e){var n=e?(0,T.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)};var A=/\w*$/;const L=function(t){var e=new t.constructor(t.source,A.exec(t));return e.lastIndex=t.lastIndex,e};var B=n(7685),N=B.Z?B.Z.prototype:void 0,D=N?N.valueOf:void 0;const O=function(t){return D?Object(D.call(t)):{}};var M=n(2701);const I=function(t,e,n){var r=t.constructor;switch(e){case"[object ArrayBuffer]":return(0,T.Z)(t);case"[object Boolean]":case"[object Date]":return new r(+t);case"[object DataView]":return S(t,n);case"[object Float32Array]":case"[object Float64Array]":case"[object Int8Array]":case"[object Int16Array]":case"[object Int32Array]":case"[object Uint8Array]":case"[object Uint8ClampedArray]":case"[object Uint16Array]":case"[object Uint32Array]":return(0,M.Z)(t,n);case"[object Map]":case"[object Set]":return new r;case"[object Number]":case"[object String]":return new r(t);case"[object RegExp]":return L(t);case"[object Symbol]":return O(t)}};var F=n(3658),$=n(7771),R=n(7008),Z=n(8533);const P=function(t){return(0,Z.Z)(t)&&"[object Map]"==(0,w.Z)(t)};var j=n(1162),Y=n(8351),z=Y.Z&&Y.Z.isMap;const U=z?(0,j.Z)(z):P;var W=n(7226);const q=function(t){return(0,Z.Z)(t)&&"[object Set]"==(0,w.Z)(t)};var H=Y.Z&&Y.Z.isSet;const V=H?(0,j.Z)(H):q;var G="[object Arguments]",X="[object Function]",K="[object Object]",Q={};Q[G]=Q["[object Array]"]=Q["[object ArrayBuffer]"]=Q["[object DataView]"]=Q["[object Boolean]"]=Q["[object Date]"]=Q["[object Float32Array]"]=Q["[object Float64Array]"]=Q["[object Int8Array]"]=Q["[object Int16Array]"]=Q["[object Int32Array]"]=Q["[object Map]"]=Q["[object Number]"]=Q[K]=Q["[object RegExp]"]=Q["[object Set]"]=Q["[object String]"]=Q["[object Symbol]"]=Q["[object Uint8Array]"]=Q["[object Uint8ClampedArray]"]=Q["[object Uint16Array]"]=Q["[object Uint32Array]"]=!0,Q["[object Error]"]=Q[X]=Q["[object WeakMap]"]=!1;const J=function t(e,n,s,p,g,y){var m,b=1&n,v=2&n,E=4&n;if(s&&(m=g?s(e,p,g,y):s(e)),void 0!==m)return m;if(!(0,W.Z)(e))return e;var T=(0,$.Z)(e);if(T){if(m=C(e),!b)return(0,d.Z)(e,m)}else{var S=(0,w.Z)(e),A=S==X||"[object GeneratorFunction]"==S;if((0,R.Z)(e))return(0,u.Z)(e,b);if(S==K||S==G||A&&!g){if(m=v||A?{}:(0,F.Z)(e),!b)return v?_(e,h(m,e)):f(e,c(m,e))}else{if(!Q[S])return g?e:{};m=I(e,S,b)}}y||(y=new r.Z);var L=y.get(e);if(L)return L;y.set(e,m),V(e)?e.forEach((function(r){m.add(t(r,n,s,r,e,y))})):U(e)&&e.forEach((function(r,i){m.set(i,t(r,n,s,i,e,y))}));var B=E?v?k:x.Z:v?l.Z:o.Z,N=T?void 0:B(e);return(0,i.Z)(N||e,(function(r,i){N&&(r=e[i=r]),(0,a.Z)(m,i,t(r,n,s,i,e,y))})),m}},9811:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2693),i=n(585);const a=function(t,e){return function(n,r){if(null==n)return n;if(!(0,i.Z)(n))return t(n,r);for(var a=n.length,s=e?a:-1,o=Object(n);(e?s--:++s<a)&&!1!==r(o[s],s,o););return n}}(r.Z)},1692:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e,n,r){for(var i=t.length,a=n+(r?1:-1);r?a--:++a<i;)if(e(t[a],a,t))return a;return-1}},626:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(8694),i=n(7685),a=n(9169),s=n(7771),o=i.Z?i.Z.isConcatSpreadable:void 0;const c=function(t){return(0,s.Z)(t)||(0,a.Z)(t)||!!(o&&t&&t[o])};const l=function t(e,n,i,a,s){var o=-1,l=e.length;for(i||(i=c),s||(s=[]);++o<l;){var h=e[o];n>0&&i(h)?n>1?t(h,n-1,i,a,s):(0,r.Z)(s,h):a||(s[s.length]=h)}return s}},1395:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e,n,r){for(var i=-1,a=Object(e),s=r(e),o=s.length;o--;){var c=s[t?o:++i];if(!1===n(a[c],c,a))break}return e}}()},2693:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1395),i=n(7179);const a=function(t,e){return t&&(0,r.Z)(t,e,i.Z)}},3317:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2823),i=n(2281);const a=function(t,e){for(var n=0,a=(e=(0,r.Z)(e,t)).length;null!=t&&n<a;)t=t[(0,i.Z)(e[n++])];return n&&n==a?t:void 0}},3327:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(8694),i=n(7771);const a=function(t,e,n){var a=e(t);return(0,i.Z)(t)?a:(0,r.Z)(a,n(t))}},3589:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7685),i=Object.prototype,a=i.hasOwnProperty,s=i.toString,o=r.Z?r.Z.toStringTag:void 0;const c=function(t){var e=a.call(t,o),n=t[o];try{t[o]=void 0;var r=!0}catch(c){}var i=s.call(t);return r&&(e?t[o]=n:delete t[o]),i};var l=Object.prototype.toString;const h=function(t){return l.call(t)};var u=r.Z?r.Z.toStringTag:void 0;const d=function(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":u&&u in Object(t)?c(t):h(t)}},4765:(t,e,n)=>{"use strict";n.d(e,{Z:()=>H});var r=n(1667),i=n(3001);const a=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1};var s=n(9548);const o=function(t,e,n,r,o,c){var l=1&n,h=t.length,u=e.length;if(h!=u&&!(l&&u>h))return!1;var d=c.get(t),p=c.get(e);if(d&&p)return d==e&&p==t;var f=-1,g=!0,y=2&n?new i.Z:void 0;for(c.set(t,e),c.set(e,t);++f<h;){var m=t[f],b=e[f];if(r)var _=l?r(b,m,f,e,t,c):r(m,b,f,t,e,c);if(void 0!==_){if(_)continue;g=!1;break}if(y){if(!a(e,(function(t,e){if(!(0,s.Z)(y,e)&&(m===t||o(m,t,n,r,c)))return y.push(e)}))){g=!1;break}}else if(m!==b&&!o(m,b,n,r,c)){g=!1;break}}return c.delete(t),c.delete(e),g};var c=n(7685),l=n(7623),h=n(9651);const u=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t,r){n[++e]=[r,t]})),n};var d=n(6545),p=c.Z?c.Z.prototype:void 0,f=p?p.valueOf:void 0;const g=function(t,e,n,r,i,a,s){switch(n){case"[object DataView]":if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case"[object ArrayBuffer]":return!(t.byteLength!=e.byteLength||!a(new l.Z(t),new l.Z(e)));case"[object Boolean]":case"[object Date]":case"[object Number]":return(0,h.Z)(+t,+e);case"[object Error]":return t.name==e.name&&t.message==e.message;case"[object RegExp]":case"[object String]":return t==e+"";case"[object Map]":var c=u;case"[object Set]":var p=1&r;if(c||(c=d.Z),t.size!=e.size&&!p)return!1;var g=s.get(t);if(g)return g==e;r|=2,s.set(t,e);var y=o(c(t),c(e),r,i,a,s);return s.delete(t),y;case"[object Symbol]":if(f)return f.call(t)==f.call(e)}return!1};var y=n(1808),m=Object.prototype.hasOwnProperty;const b=function(t,e,n,r,i,a){var s=1&n,o=(0,y.Z)(t),c=o.length;if(c!=(0,y.Z)(e).length&&!s)return!1;for(var l=c;l--;){var h=o[l];if(!(s?h in e:m.call(e,h)))return!1}var u=a.get(t),d=a.get(e);if(u&&d)return u==e&&d==t;var p=!0;a.set(t,e),a.set(e,t);for(var f=s;++l<c;){var g=t[h=o[l]],b=e[h];if(r)var _=s?r(b,g,h,e,t,a):r(g,b,h,t,e,a);if(!(void 0===_?g===b||i(g,b,n,r,a):_)){p=!1;break}f||(f="constructor"==h)}if(p&&!f){var x=t.constructor,v=e.constructor;x==v||!("constructor"in t)||!("constructor"in e)||"function"==typeof x&&x instanceof x&&"function"==typeof v&&v instanceof v||(p=!1)}return a.delete(t),a.delete(e),p};var _=n(3970),x=n(7771),v=n(7008),k=n(8843),w="[object Arguments]",E="[object Array]",C="[object Object]",T=Object.prototype.hasOwnProperty;const S=function(t,e,n,i,a,s){var c=(0,x.Z)(t),l=(0,x.Z)(e),h=c?E:(0,_.Z)(t),u=l?E:(0,_.Z)(e),d=(h=h==w?C:h)==C,p=(u=u==w?C:u)==C,f=h==u;if(f&&(0,v.Z)(t)){if(!(0,v.Z)(e))return!1;c=!0,d=!1}if(f&&!d)return s||(s=new r.Z),c||(0,k.Z)(t)?o(t,e,n,i,a,s):g(t,e,h,n,i,a,s);if(!(1&n)){var y=d&&T.call(t,"__wrapped__"),m=p&&T.call(e,"__wrapped__");if(y||m){var S=y?t.value():t,A=m?e.value():e;return s||(s=new r.Z),a(S,A,n,i,s)}}return!!f&&(s||(s=new r.Z),b(t,e,n,i,a,s))};var A=n(8533);const L=function t(e,n,r,i,a){return e===n||(null==e||null==n||!(0,A.Z)(e)&&!(0,A.Z)(n)?e!=e&&n!=n:S(e,n,r,i,t,a))};const B=function(t,e,n,i){var a=n.length,s=a,o=!i;if(null==t)return!s;for(t=Object(t);a--;){var c=n[a];if(o&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++a<s;){var l=(c=n[a])[0],h=t[l],u=c[1];if(o&&c[2]){if(void 0===h&&!(l in t))return!1}else{var d=new r.Z;if(i)var p=i(h,u,l,t,e,d);if(!(void 0===p?L(u,h,3,i,d):p))return!1}}return!0};var N=n(7226);const D=function(t){return t==t&&!(0,N.Z)(t)};var O=n(7179);const M=function(t){for(var e=(0,O.Z)(t),n=e.length;n--;){var r=e[n],i=t[r];e[n]=[r,i,D(i)]}return e};const I=function(t,e){return function(n){return null!=n&&(n[t]===e&&(void 0!==e||t in Object(n)))}};const F=function(t){var e=M(t);return 1==e.length&&e[0][2]?I(e[0][0],e[0][1]):function(n){return n===t||B(n,t,e)}};var $=n(3317);const R=function(t,e,n){var r=null==t?void 0:(0,$.Z)(t,e);return void 0===r?n:r};var Z=n(5487),P=n(9365),j=n(2281);const Y=function(t,e){return(0,P.Z)(t)&&D(e)?I((0,j.Z)(t),e):function(n){var r=R(n,t);return void 0===r&&r===e?(0,Z.Z)(n,t):L(e,r,3)}};var z=n(9203),U=n(4193);const W=function(t){return function(e){return(0,$.Z)(e,t)}};const q=function(t){return(0,P.Z)(t)?(0,U.Z)((0,j.Z)(t)):W(t)};const H=function(t){return"function"==typeof t?t:null==t?z.Z:"object"==typeof t?(0,x.Z)(t)?Y(t[0],t[1]):F(t):q(t)}},9473:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(2764);const i=(0,n(1851).Z)(Object.keys,Object);var a=Object.prototype.hasOwnProperty;const s=function(t){if(!(0,r.Z)(t))return i(t);var e=[];for(var n in Object(t))a.call(t,n)&&"constructor"!=n&&e.push(n);return e}},1018:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(9811),i=n(585);const a=function(t,e){var n=-1,a=(0,i.Z)(t)?Array(t.length):[];return(0,r.Z)(t,(function(t,r,i){a[++n]=e(t,r,i)})),a}},4193:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return null==e?void 0:e[t]}}},9581:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(9203),i=n(1211),a=n(7227);const s=function(t,e){return(0,a.Z)((0,i.Z)(t,e,r.Z),t+"")}},1162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return t(e)}}},9548:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t.has(e)}},8882:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(9203);const i=function(t){return"function"==typeof t?t:r.Z}},2823:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7771),i=n(9365),a=n(2454);var s=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,o=/\\(\\)?/g;const c=function(t){var e=(0,a.Z)(t,(function(t){return 500===n.size&&n.clear(),t})),n=e.cache;return e}((function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(s,(function(t,n,r,i){e.push(r?i.replace(o,"$1"):n||t)})),e}));var l=n(751);const h=function(t,e){return(0,r.Z)(t)?t:(0,i.Z)(t,e)?[t]:c((0,l.Z)(t))}},1884:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7623);const i=function(t){var e=new t.constructor(t.byteLength);return new r.Z(e).set(new r.Z(t)),e}},1050:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i?r.Z.Buffer:void 0,o=s?s.allocUnsafe:void 0;const c=function(t,e){if(e)return t.slice();var n=t.length,r=o?o(n):new t.constructor(n);return t.copy(r),r}},2701:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1884);const i=function(t,e){var n=e?(0,r.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}},7215:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){var n=-1,r=t.length;for(e||(e=Array(r));++n<r;)e[n]=t[n];return e}},1899:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2954),i=n(4752);const a=function(t,e,n,a){var s=!n;n||(n={});for(var o=-1,c=e.length;++o<c;){var l=e[o],h=a?a(n[l],t[l],l,n,t):void 0;void 0===h&&(h=t[l]),s?(0,i.Z)(n,l,h):(0,r.Z)(n,l,h)}return n}},7904:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2508);const i=function(){try{var t=(0,r.Z)(Object,"defineProperty");return t({},"",{}),t}catch(e){}}()},3413:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r="object"==typeof global&&global&&global.Object===Object&&global},1808:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(3327),i=n(5695),a=n(7179);const s=function(t){return(0,r.Z)(t,a.Z,i.Z)}},2508:(t,e,n)=>{"use strict";n.d(e,{Z:()=>b});var r=n(3234);const i=n(6092).Z["__core-js_shared__"];var a,s=(a=/[^.]+$/.exec(i&&i.keys&&i.keys.IE_PROTO||""))?"Symbol(src)_1."+a:"";const o=function(t){return!!s&&s in t};var c=n(7226),l=n(19),h=/^\[object .+?Constructor\]$/,u=Function.prototype,d=Object.prototype,p=u.toString,f=d.hasOwnProperty,g=RegExp("^"+p.call(f).replace(/[\\^$.*+?()[\]{}|]/g,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$");const y=function(t){return!(!(0,c.Z)(t)||o(t))&&((0,r.Z)(t)?g:h).test((0,l.Z)(t))};const m=function(t,e){return null==t?void 0:t[e]};const b=function(t,e){var n=m(t,e);return y(n)?n:void 0}},2513:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=(0,n(1851).Z)(Object.getPrototypeOf,Object)},5695:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(8774),i=n(532),a=Object.prototype.propertyIsEnumerable,s=Object.getOwnPropertySymbols;const o=s?function(t){return null==t?[]:(t=Object(t),(0,r.Z)(s(t),(function(e){return a.call(t,e)})))}:i.Z},3970:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"DataView");var s=n(6183);const o=(0,r.Z)(i.Z,"Promise");var c=n(3203);const l=(0,r.Z)(i.Z,"WeakMap");var h=n(3589),u=n(19),d="[object Map]",p="[object Promise]",f="[object Set]",g="[object WeakMap]",y="[object DataView]",m=(0,u.Z)(a),b=(0,u.Z)(s.Z),_=(0,u.Z)(o),x=(0,u.Z)(c.Z),v=(0,u.Z)(l),k=h.Z;(a&&k(new a(new ArrayBuffer(1)))!=y||s.Z&&k(new s.Z)!=d||o&&k(o.resolve())!=p||c.Z&&k(new c.Z)!=f||l&&k(new l)!=g)&&(k=function(t){var e=(0,h.Z)(t),n="[object Object]"==e?t.constructor:void 0,r=n?(0,u.Z)(n):"";if(r)switch(r){case m:return y;case b:return d;case _:return p;case x:return f;case v:return g}return e});const w=k},6174:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(2823),i=n(9169),a=n(7771),s=n(6009),o=n(1656),c=n(2281);const l=function(t,e,n){for(var l=-1,h=(e=(0,r.Z)(e,t)).length,u=!1;++l<h;){var d=(0,c.Z)(e[l]);if(!(u=null!=t&&n(t,d)))break;t=t[d]}return u||++l!=h?u:!!(h=null==t?0:t.length)&&(0,o.Z)(h)&&(0,s.Z)(d,h)&&((0,a.Z)(t)||(0,i.Z)(t))}},3658:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(7226),i=Object.create;const a=function(){function t(){}return function(e){if(!(0,r.Z)(e))return{};if(i)return i(e);t.prototype=e;var n=new t;return t.prototype=void 0,n}}();var s=n(2513),o=n(2764);const c=function(t){return"function"!=typeof t.constructor||(0,o.Z)(t)?{}:a((0,s.Z)(t))}},6009:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=/^(?:0|[1-9]\d*)$/;const i=function(t,e){var n=typeof t;return!!(e=null==e?9007199254740991:e)&&("number"==n||"symbol"!=n&&r.test(t))&&t>-1&&t%1==0&&t<e}},439:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(9651),i=n(585),a=n(6009),s=n(7226);const o=function(t,e,n){if(!(0,s.Z)(n))return!1;var o=typeof e;return!!("number"==o?(0,i.Z)(n)&&(0,a.Z)(e,n.length):"string"==o&&e in n)&&(0,r.Z)(n[e],t)}},9365:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7771),i=n(2714),a=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,s=/^\w*$/;const o=function(t,e){if((0,r.Z)(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!(0,i.Z)(t))||(s.test(t)||!a.test(t)||null!=e&&t in Object(e))}},2764:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Object.prototype;const i=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||r)}},8351:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(3413),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i&&r.Z.process;const o=function(){try{var t=a&&a.require&&a.require("util").types;return t||s&&s.binding&&s.binding("util")}catch(e){}}()},1851:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return function(n){return t(e(n))}}},1211:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)};var i=Math.max;const a=function(t,e,n){return e=i(void 0===e?t.length-1:e,0),function(){for(var a=arguments,s=-1,o=i(a.length-e,0),c=Array(o);++s<o;)c[s]=a[e+s];s=-1;for(var l=Array(e+1);++s<e;)l[s]=a[s];return l[e]=n(c),r(t,this,l)}}},6092:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3413),i="object"==typeof self&&self&&self.Object===Object&&self;const a=r.Z||i||Function("return this")()},6545:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t){n[++e]=t})),n}},7227:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(2002),i=n(7904),a=n(9203);const s=i.Z?function(t,e){return(0,i.Z)(t,"toString",{configurable:!0,enumerable:!1,value:(0,r.Z)(e),writable:!0})}:a.Z;var o=Date.now;const c=function(t){var e=0,n=0;return function(){var r=o(),i=16-(r-n);if(n=r,i>0){if(++e>=800)return arguments[0]}else e=0;return t.apply(void 0,arguments)}}(s)},2281:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2714);const i=function(t){if("string"==typeof t||(0,r.Z)(t))return t;var e=t+"";return"0"==e&&1/t==-Infinity?"-0":e}},19:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Function.prototype.toString;const i=function(t){if(null!=t){try{return r.call(t)}catch(e){}try{return t+""}catch(e){}}return""}},2002:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(){return t}}},3688:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(9581),i=n(9651),a=n(439),s=n(2957),o=Object.prototype,c=o.hasOwnProperty;const l=(0,r.Z)((function(t,e){t=Object(t);var n=-1,r=e.length,l=r>2?e[2]:void 0;for(l&&(0,a.Z)(e[0],e[1],l)&&(r=1);++n<r;)for(var h=e[n],u=(0,s.Z)(h),d=-1,p=u.length;++d<p;){var f=u[d],g=t[f];(void 0===g||(0,i.Z)(g,o[f])&&!c.call(t,f))&&(t[f]=h[f])}return t}))},9651:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t===e||t!=t&&e!=e}},3445:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(8774),i=n(9811);const a=function(t,e){var n=[];return(0,i.Z)(t,(function(t,r,i){e(t,r,i)&&n.push(t)})),n};var s=n(4765),o=n(7771);const c=function(t,e){return((0,o.Z)(t)?r.Z:a)(t,(0,s.Z)(e,3))}},7961:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(626);const i=function(t){return(null==t?0:t.length)?(0,r.Z)(t,1):[]}},870:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(6579),i=n(9811),a=n(8882),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:i.Z)(t,(0,a.Z)(e))}},7452:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=Object.prototype.hasOwnProperty;const i=function(t,e){return null!=t&&r.call(t,e)};var a=n(6174);const s=function(t,e){return null!=t&&(0,a.Z)(t,e,i)}},5487:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e){return null!=t&&e in Object(t)};var i=n(6174);const a=function(t,e){return null!=t&&(0,i.Z)(t,e,r)}},9203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return t}},9169:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(3589),i=n(8533);const a=function(t){return(0,i.Z)(t)&&"[object Arguments]"==(0,r.Z)(t)};var s=Object.prototype,o=s.hasOwnProperty,c=s.propertyIsEnumerable;const l=a(function(){return arguments}())?a:function(t){return(0,i.Z)(t)&&o.call(t,"callee")&&!c.call(t,"callee")}},7771:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=Array.isArray},585:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3234),i=n(1656);const a=function(t){return null!=t&&(0,i.Z)(t.length)&&!(0,r.Z)(t)}},836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(585),i=n(8533);const a=function(t){return(0,i.Z)(t)&&(0,r.Z)(t)}},7008:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092);const i=function(){return!1};var a="object"==typeof exports&&exports&&!exports.nodeType&&exports,s=a&&"object"==typeof module&&module&&!module.nodeType&&module,o=s&&s.exports===a?r.Z.Buffer:void 0;const c=(o?o.isBuffer:void 0)||i},9697:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(9473),i=n(3970),a=n(9169),s=n(7771),o=n(585),c=n(7008),l=n(2764),h=n(8843),u=Object.prototype.hasOwnProperty;const d=function(t){if(null==t)return!0;if((0,o.Z)(t)&&((0,s.Z)(t)||"string"==typeof t||"function"==typeof t.splice||(0,c.Z)(t)||(0,h.Z)(t)||(0,a.Z)(t)))return!t.length;var e=(0,i.Z)(t);if("[object Map]"==e||"[object Set]"==e)return!t.size;if((0,l.Z)(t))return!(0,r.Z)(t).length;for(var n in t)if(u.call(t,n))return!1;return!0}},3234:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(7226);const a=function(t){if(!(0,i.Z)(t))return!1;var e=(0,r.Z)(t);return"[object Function]"==e||"[object GeneratorFunction]"==e||"[object AsyncFunction]"==e||"[object Proxy]"==e}},1656:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=9007199254740991}},7226:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},8533:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return null!=t&&"object"==typeof t}},7514:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(2513),a=n(8533),s=Function.prototype,o=Object.prototype,c=s.toString,l=o.hasOwnProperty,h=c.call(Object);const u=function(t){if(!(0,a.Z)(t)||"[object Object]"!=(0,r.Z)(t))return!1;var e=(0,i.Z)(t);if(null===e)return!0;var n=l.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&c.call(n)==h}},2714:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(8533);const a=function(t){return"symbol"==typeof t||(0,i.Z)(t)&&"[object Symbol]"==(0,r.Z)(t)}},8843:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(1656),a=n(8533),s={};s["[object Float32Array]"]=s["[object Float64Array]"]=s["[object Int8Array]"]=s["[object Int16Array]"]=s["[object Int32Array]"]=s["[object Uint8Array]"]=s["[object Uint8ClampedArray]"]=s["[object Uint16Array]"]=s["[object Uint32Array]"]=!0,s["[object Arguments]"]=s["[object Array]"]=s["[object ArrayBuffer]"]=s["[object Boolean]"]=s["[object DataView]"]=s["[object Date]"]=s["[object Error]"]=s["[object Function]"]=s["[object Map]"]=s["[object Number]"]=s["[object Object]"]=s["[object RegExp]"]=s["[object Set]"]=s["[object String]"]=s["[object WeakMap]"]=!1;const o=function(t){return(0,a.Z)(t)&&(0,i.Z)(t.length)&&!!s[(0,r.Z)(t)]};var c=n(1162),l=n(8351),h=l.Z&&l.Z.isTypedArray;const u=h?(0,c.Z)(h):o},9360:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return void 0===t}},7179:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7668),i=n(9473),a=n(585);const s=function(t){return(0,a.Z)(t)?(0,r.Z)(t):(0,i.Z)(t)}},2957:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7668),i=n(7226),a=n(2764);const s=function(t){var e=[];if(null!=t)for(var n in Object(t))e.push(n);return e};var o=Object.prototype.hasOwnProperty;const c=function(t){if(!(0,i.Z)(t))return s(t);var e=(0,a.Z)(t),n=[];for(var r in t)("constructor"!=r||!e&&o.call(t,r))&&n.push(r);return n};var l=n(585);const h=function(t){return(0,l.Z)(t)?(0,r.Z)(t,!0):c(t)}},3836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(4073),i=n(4765),a=n(1018),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:a.Z)(t,(0,i.Z)(e,3))}},2454:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(7834);function i(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new TypeError("Expected a function");var n=function(){var r=arguments,i=e?e.apply(this,r):r[0],a=n.cache;if(a.has(i))return a.get(i);var s=t.apply(this,r);return n.cache=a.set(i,s)||a,s};return n.cache=new(i.Cache||r.Z),n}i.Cache=r.Z;const a=i},1666:(t,e,n)=>{"use strict";n.d(e,{Z:()=>y});var r=n(3317),i=n(2954),a=n(2823),s=n(6009),o=n(7226),c=n(2281);const l=function(t,e,n,r){if(!(0,o.Z)(t))return t;for(var l=-1,h=(e=(0,a.Z)(e,t)).length,u=h-1,d=t;null!=d&&++l<h;){var p=(0,c.Z)(e[l]),f=n;if("__proto__"===p||"constructor"===p||"prototype"===p)return t;if(l!=u){var g=d[p];void 0===(f=r?r(g,p,d):void 0)&&(f=(0,o.Z)(g)?g:(0,s.Z)(e[l+1])?[]:{})}(0,i.Z)(d,p,f),d=d[p]}return t};const h=function(t,e,n){for(var i=-1,s=e.length,o={};++i<s;){var c=e[i],h=(0,r.Z)(t,c);n(h,c)&&l(o,(0,a.Z)(c,t),h)}return o};var u=n(5487);const d=function(t,e){return h(t,e,(function(e,n){return(0,u.Z)(t,n)}))};var p=n(7961),f=n(1211),g=n(7227);const y=function(t){return(0,g.Z)((0,f.Z)(t,void 0,p.Z),t+"")}((function(t,e){return null==t?{}:d(t,e)}))},4379:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=Math.ceil,i=Math.max;const a=function(t,e,n,a){for(var s=-1,o=i(r((e-t)/(n||1)),0),c=Array(o);o--;)c[a?o:++s]=t,t+=n;return c};var s=n(439),o=n(4099);const c=function(t){return function(e,n,r){return r&&"number"!=typeof r&&(0,s.Z)(e,n,r)&&(n=r=void 0),e=(0,o.Z)(e),void 0===n?(n=e,e=0):n=(0,o.Z)(n),r=void 0===r?e<n?1:-1:(0,o.Z)(r),a(e,n,r,t)}}()},2344:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});const r=function(t,e,n,r){var i=-1,a=null==t?0:t.length;for(r&&a&&(n=t[++i]);++i<a;)n=e(n,t[i],i,t);return n};var i=n(9811),a=n(4765);const s=function(t,e,n,r,i){return i(t,(function(t,i,a){n=r?(r=!1,t):e(n,t,i,a)})),n};var o=n(7771);const c=function(t,e,n){var c=(0,o.Z)(t)?r:s,l=arguments.length<3;return c(t,(0,a.Z)(e,4),n,l,i.Z)}},532:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(){return[]}},4099:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=/\s/;const i=function(t){for(var e=t.length;e--&&r.test(t.charAt(e)););return e};var a=/^\s+/;const s=function(t){return t?t.slice(0,i(t)+1).replace(a,""):t};var o=n(7226),c=n(2714),l=/^[-+]0x[0-9a-f]+$/i,h=/^0b[01]+$/i,u=/^0o[0-7]+$/i,d=parseInt;const p=function(t){if("number"==typeof t)return t;if((0,c.Z)(t))return NaN;if((0,o.Z)(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=(0,o.Z)(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=s(t);var n=h.test(t);return n||u.test(t)?d(t.slice(2),n?2:8):l.test(t)?NaN:+t};var f=1/0;const g=function(t){return t?(t=p(t))===f||t===-1/0?17976931348623157e292*(t<0?-1:1):t==t?t:0:0===t?t:0}},751:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7685),i=n(4073),a=n(7771),s=n(2714),o=r.Z?r.Z.prototype:void 0,c=o?o.toString:void 0;const l=function t(e){if("string"==typeof e)return e;if((0,a.Z)(e))return(0,i.Z)(e,t)+"";if((0,s.Z)(e))return c?c.call(e):"";var n=e+"";return"0"==n&&1/e==-Infinity?"-0":n};const h=function(t){return null==t?"":l(t)}},6749:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(751),i=0;const a=function(t){var e=++i;return(0,r.Z)(t)+e}},4148:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4073);const i=function(t,e){return(0,r.Z)(e,(function(e){return t[e]}))};var a=n(7179);const s=function(t){return null==t?[]:i(t,(0,a.Z)(t))}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/4835.0e2e1b5f.js.LICENSE.txt b/zh/assets/js/4835.071674c5.js.LICENSE.txt
similarity index 100%
rename from zh/assets/js/4835.0e2e1b5f.js.LICENSE.txt
rename to zh/assets/js/4835.071674c5.js.LICENSE.txt
diff --git a/zh/assets/js/4835.0e2e1b5f.js b/zh/assets/js/4835.0e2e1b5f.js
deleted file mode 100644
index 264a0b12b..000000000
--- a/zh/assets/js/4835.0e2e1b5f.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see 4835.0e2e1b5f.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4835],{7967:(t,e)=>{"use strict";e.N=void 0;var n=/^([^\w]*)(javascript|data|vbscript)/im,r=/&#(\w+)(^\w|;)?/g,i=/&(newline|tab);/gi,a=/[\u0000-\u001F\u007F-\u009F\u2000-\u200D\uFEFF]/gim,s=/^.+(:|&colon;)/gim,o=[".","/"];e.N=function(t){var e,c=(e=t||"",e.replace(r,(function(t,e){return String.fromCharCode(e)}))).replace(i,"").replace(a,"").trim();if(!c)return"about:blank";if(function(t){return o.indexOf(t[0])>-1}(c))return c;var l=c.match(s);if(!l)return c;var h=l[0];return n.test(h)?"about:blank":c}},3905:(t,e,n)=>{"use strict";n.d(e,{Zo:()=>h,kt:()=>p});var r=n(7294);function i(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function a(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(t);e&&(r=r.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,r)}return n}function s(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?a(Object(n),!0).forEach((function(e){i(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):a(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function o(t,e){if(null==t)return{};var n,r,i=function(t,e){if(null==t)return{};var n,r,i={},a=Object.keys(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||(i[n]=t[n]);return i}(t,e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);for(r=0;r<a.length;r++)n=a[r],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(i[n]=t[n])}return i}var c=r.createContext({}),l=function(t){var e=r.useContext(c),n=e;return t&&(n="function"==typeof t?t(e):s(s({},e),t)),n},h=function(t){var e=l(t.components);return r.createElement(c.Provider,{value:e},t.children)},u={inlineCode:"code",wrapper:function(t){var e=t.children;return r.createElement(r.Fragment,{},e)}},d=r.forwardRef((function(t,e){var n=t.components,i=t.mdxType,a=t.originalType,c=t.parentName,h=o(t,["components","mdxType","originalType","parentName"]),d=l(n),p=i,f=d["".concat(c,".").concat(p)]||d[p]||u[p]||a;return n?r.createElement(f,s(s({ref:e},h),{},{components:n})):r.createElement(f,s({ref:e},h))}));function p(t,e){var n=arguments,i=e&&e.mdxType;if("string"==typeof t||i){var a=n.length,s=new Array(a);s[0]=d;var o={};for(var c in e)hasOwnProperty.call(e,c)&&(o[c]=e[c]);o.originalType=t,o.mdxType="string"==typeof t?t:i,s[1]=o;for(var l=2;l<a;l++)s[l]=n[l];return r.createElement.apply(null,s)}return r.createElement.apply(null,n)}d.displayName="MDXCreateElement"},2839:(t,e,n)=>{"use strict";n.r(e),n.d(e,{default:()=>Ot});var r=n(7294),i=n(833),a=n(902);const s=r.createContext(null);function o(t){let{children:e,content:n}=t;const i=function(t){return(0,r.useMemo)((()=>({metadata:t.metadata,frontMatter:t.frontMatter,assets:t.assets,contentTitle:t.contentTitle,toc:t.toc})),[t])}(n);return r.createElement(s.Provider,{value:i},e)}function c(){const t=(0,r.useContext)(s);if(null===t)throw new a.i6("DocProvider");return t}function l(){const{metadata:t,frontMatter:e,assets:n}=c();return r.createElement(i.d,{title:t.title,description:t.description,keywords:e.keywords,image:n.image??e.image})}var h=n(6010),u=n(7524),d=n(3117),p=n(5999),f=n(9960);function g(t){const{permalink:e,title:n,subLabel:i,isNext:a}=t;return r.createElement(f.Z,{className:(0,h.Z)("pagination-nav__link",a?"pagination-nav__link--next":"pagination-nav__link--prev"),to:e},i&&r.createElement("div",{className:"pagination-nav__sublabel"},i),r.createElement("div",{className:"pagination-nav__label"},n))}function y(t){const{previous:e,next:n}=t;return r.createElement("nav",{className:"pagination-nav docusaurus-mt-lg","aria-label":(0,p.I)({id:"theme.docs.paginator.navAriaLabel",message:"Docs pages",description:"The ARIA label for the docs pagination"})},e&&r.createElement(g,(0,d.Z)({},e,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.previous",description:"The label used to navigate to the previous doc"},"Previous")})),n&&r.createElement(g,(0,d.Z)({},n,{subLabel:r.createElement(p.Z,{id:"theme.docs.paginator.next",description:"The label used to navigate to the next doc"},"Next"),isNext:!0})))}function m(){const{metadata:t}=c();return r.createElement(y,{previous:t.previous,next:t.next})}var b=n(2263),_=n(143),x=n(5281),v=n(373),k=n(4477);const w={unreleased:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unreleasedVersionLabel",description:"The label used to tell the user that he's browsing an unreleased doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is unreleased documentation for {siteTitle} {versionLabel} version.")},unmaintained:function(t){let{siteTitle:e,versionMetadata:n}=t;return r.createElement(p.Z,{id:"theme.docs.versions.unmaintainedVersionLabel",description:"The label used to tell the user that he's browsing an unmaintained doc version",values:{siteTitle:e,versionLabel:r.createElement("b",null,n.label)}},"This is documentation for {siteTitle} {versionLabel}, which is no longer actively maintained.")}};function E(t){const e=w[t.versionMetadata.banner];return r.createElement(e,t)}function C(t){let{versionLabel:e,to:n,onClick:i}=t;return r.createElement(p.Z,{id:"theme.docs.versions.latestVersionSuggestionLabel",description:"The label used to tell the user to check the latest version",values:{versionLabel:e,latestVersionLink:r.createElement("b",null,r.createElement(f.Z,{to:n,onClick:i},r.createElement(p.Z,{id:"theme.docs.versions.latestVersionLinkLabel",description:"The label used for the latest version suggestion link label"},"latest version")))}},"For up-to-date documentation, see the {latestVersionLink} ({versionLabel}).")}function T(t){let{className:e,versionMetadata:n}=t;const{siteConfig:{title:i}}=(0,b.Z)(),{pluginId:a}=(0,_.gA)({failfast:!0}),{savePreferredVersionName:s}=(0,v.J)(a),{latestDocSuggestion:o,latestVersionSuggestion:c}=(0,_.Jo)(a),l=o??(u=c).docs.find((t=>t.id===u.mainDocId));var u;return r.createElement("div",{className:(0,h.Z)(e,x.k.docs.docVersionBanner,"alert alert--warning margin-bottom--md"),role:"alert"},r.createElement("div",null,r.createElement(E,{siteTitle:i,versionMetadata:n})),r.createElement("div",{className:"margin-top--md"},r.createElement(C,{versionLabel:c.label,to:l.path,onClick:()=>s(c.name)})))}function S(t){let{className:e}=t;const n=(0,k.E)();return n.banner?r.createElement(T,{className:e,versionMetadata:n}):null}function A(t){let{className:e}=t;const n=(0,k.E)();return n.badge?r.createElement("span",{className:(0,h.Z)(e,x.k.docs.docVersionBadge,"badge badge--secondary")},r.createElement(p.Z,{id:"theme.docs.versionBadge.label",values:{versionLabel:n.label}},"Version: {versionLabel}")):null}function L(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.atDate",description:"The words used to describe on which date a page has been last updated",values:{date:r.createElement("b",null,r.createElement("time",{dateTime:new Date(1e3*e).toISOString()},n))}}," on {date}")}function B(t){let{lastUpdatedBy:e}=t;return r.createElement(p.Z,{id:"theme.lastUpdated.byUser",description:"The words used to describe by who the page has been last updated",values:{user:r.createElement("b",null,e)}}," by {user}")}function N(t){let{lastUpdatedAt:e,formattedLastUpdatedAt:n,lastUpdatedBy:i}=t;return r.createElement("span",{className:x.k.common.lastUpdated},r.createElement(p.Z,{id:"theme.lastUpdated.lastUpdatedAtBy",description:"The sentence used to display when a page has been last updated, and by who",values:{atDate:e&&n?r.createElement(L,{lastUpdatedAt:e,formattedLastUpdatedAt:n}):"",byUser:i?r.createElement(B,{lastUpdatedBy:i}):""}},"Last updated{atDate}{byUser}"),!1)}const D="iconEdit_Z9Sw";function O(t){let{className:e,...n}=t;return r.createElement("svg",(0,d.Z)({fill:"currentColor",height:"20",width:"20",viewBox:"0 0 40 40",className:(0,h.Z)(D,e),"aria-hidden":"true"},n),r.createElement("g",null,r.createElement("path",{d:"m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"})))}function M(t){let{editUrl:e}=t;return r.createElement("a",{href:e,target:"_blank",rel:"noreferrer noopener",className:x.k.common.editThisPage},r.createElement(O,null),r.createElement(p.Z,{id:"theme.common.editThisPage",description:"The link label to edit the current page"},"Edit this page"))}const I="tag_zVej",F="tagRegular_sFm0",$="tagWithCount_h2kH";function R(t){let{permalink:e,label:n,count:i}=t;return r.createElement(f.Z,{href:e,className:(0,h.Z)(I,i?$:F)},n,i&&r.createElement("span",null,i))}const Z="tags_jXut",P="tag_QGVx";function j(t){let{tags:e}=t;return r.createElement(r.Fragment,null,r.createElement("b",null,r.createElement(p.Z,{id:"theme.tags.tagsListLabel",description:"The label alongside a tag list"},"Tags:")),r.createElement("ul",{className:(0,h.Z)(Z,"padding--none","margin-left--sm")},e.map((t=>{let{label:e,permalink:n}=t;return r.createElement("li",{key:n,className:P},r.createElement(R,{label:e,permalink:n}))}))))}const Y="lastUpdated_vwxv";function z(t){return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterTagsRow,"row margin-bottom--sm")},r.createElement("div",{className:"col"},r.createElement(j,t)))}function U(t){let{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:i,formattedLastUpdatedAt:a}=t;return r.createElement("div",{className:(0,h.Z)(x.k.docs.docFooterEditMetaRow,"row")},r.createElement("div",{className:"col"},e&&r.createElement(M,{editUrl:e})),r.createElement("div",{className:(0,h.Z)("col",Y)},(n||i)&&r.createElement(N,{lastUpdatedAt:n,formattedLastUpdatedAt:a,lastUpdatedBy:i})))}function W(){const{metadata:t}=c(),{editUrl:e,lastUpdatedAt:n,formattedLastUpdatedAt:i,lastUpdatedBy:a,tags:s}=t,o=s.length>0,l=!!(e||n||a);return o||l?r.createElement("footer",{className:(0,h.Z)(x.k.docs.docFooter,"docusaurus-mt-lg")},o&&r.createElement(z,{tags:s}),l&&r.createElement(U,{editUrl:e,lastUpdatedAt:n,lastUpdatedBy:a,formattedLastUpdatedAt:i})):null}var q=n(6043),H=n(6668);function V(t){const e=t.map((t=>({...t,parentIndex:-1,children:[]}))),n=Array(7).fill(-1);e.forEach(((t,e)=>{const r=n.slice(2,t.level);t.parentIndex=Math.max(...r),n[t.level]=e}));const r=[];return e.forEach((t=>{const{parentIndex:n,...i}=t;n>=0?e[n].children.push(i):r.push(i)})),r}function G(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:r}=t;return e.flatMap((t=>{const e=G({toc:t.children,minHeadingLevel:n,maxHeadingLevel:r});return function(t){return t.level>=n&&t.level<=r}(t)?[{...t,children:e}]:e}))}function X(t){const e=t.getBoundingClientRect();return e.top===e.bottom?X(t.parentNode):e}function K(t,e){let{anchorTopOffset:n}=e;const r=t.find((t=>X(t).top>=n));if(r){return function(t){return t.top>0&&t.bottom<window.innerHeight/2}(X(r))?r:t[t.indexOf(r)-1]??null}return t[t.length-1]??null}function Q(){const t=(0,r.useRef)(0),{navbar:{hideOnScroll:e}}=(0,H.L)();return(0,r.useEffect)((()=>{t.current=e?0:document.querySelector(".navbar").clientHeight}),[e]),t}function J(t){const e=(0,r.useRef)(void 0),n=Q();(0,r.useEffect)((()=>{if(!t)return()=>{};const{linkClassName:r,linkActiveClassName:i,minHeadingLevel:a,maxHeadingLevel:s}=t;function o(){const t=function(t){return Array.from(document.getElementsByClassName(t))}(r),o=function(t){let{minHeadingLevel:e,maxHeadingLevel:n}=t;const r=[];for(let i=e;i<=n;i+=1)r.push(`h${i}.anchor`);return Array.from(document.querySelectorAll(r.join()))}({minHeadingLevel:a,maxHeadingLevel:s}),c=K(o,{anchorTopOffset:n.current}),l=t.find((t=>c&&c.id===function(t){return decodeURIComponent(t.href.substring(t.href.indexOf("#")+1))}(t)));t.forEach((t=>{!function(t,n){n?(e.current&&e.current!==t&&e.current.classList.remove(i),t.classList.add(i),e.current=t):t.classList.remove(i)}(t,t===l)}))}return document.addEventListener("scroll",o),document.addEventListener("resize",o),o(),()=>{document.removeEventListener("scroll",o),document.removeEventListener("resize",o)}}),[t,n])}function tt(t){let{toc:e,className:n,linkClassName:i,isChild:a}=t;return e.length?r.createElement("ul",{className:a?void 0:n},e.map((t=>r.createElement("li",{key:t.id},r.createElement("a",{href:`#${t.id}`,className:i??void 0,dangerouslySetInnerHTML:{__html:t.value}}),r.createElement(tt,{isChild:!0,toc:t.children,className:n,linkClassName:i}))))):null}const et=r.memo(tt);function nt(t){let{toc:e,className:n="table-of-contents table-of-contents__left-border",linkClassName:i="table-of-contents__link",linkActiveClassName:a,minHeadingLevel:s,maxHeadingLevel:o,...c}=t;const l=(0,H.L)(),h=s??l.tableOfContents.minHeadingLevel,u=o??l.tableOfContents.maxHeadingLevel,p=function(t){let{toc:e,minHeadingLevel:n,maxHeadingLevel:i}=t;return(0,r.useMemo)((()=>G({toc:V(e),minHeadingLevel:n,maxHeadingLevel:i})),[e,n,i])}({toc:e,minHeadingLevel:h,maxHeadingLevel:u});return J((0,r.useMemo)((()=>{if(i&&a)return{linkClassName:i,linkActiveClassName:a,minHeadingLevel:h,maxHeadingLevel:u}}),[i,a,h,u])),r.createElement(et,(0,d.Z)({toc:p,className:n,linkClassName:i},c))}const rt="tocCollapsibleButton_TO0P",it="tocCollapsibleButtonExpanded_MG3E";function at(t){let{collapsed:e,...n}=t;return r.createElement("button",(0,d.Z)({type:"button"},n,{className:(0,h.Z)("clean-btn",rt,!e&&it,n.className)}),r.createElement(p.Z,{id:"theme.TOCCollapsible.toggleButtonLabel",description:"The label used by the button on the collapsible TOC component"},"On this page"))}const st="tocCollapsible_ETCw",ot="tocCollapsibleContent_vkbj",ct="tocCollapsibleExpanded_sAul";function lt(t){let{toc:e,className:n,minHeadingLevel:i,maxHeadingLevel:a}=t;const{collapsed:s,toggleCollapsed:o}=(0,q.u)({initialState:!0});return r.createElement("div",{className:(0,h.Z)(st,!s&&ct,n)},r.createElement(at,{collapsed:s,onClick:o}),r.createElement(q.z,{lazy:!0,className:ot,collapsed:s},r.createElement(nt,{toc:e,minHeadingLevel:i,maxHeadingLevel:a})))}const ht="tocMobile_ITEo";function ut(){const{toc:t,frontMatter:e}=c();return r.createElement(lt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:(0,h.Z)(x.k.docs.docTocMobile,ht)})}const dt="tableOfContents_bqdL";function pt(t){let{className:e,...n}=t;return r.createElement("div",{className:(0,h.Z)(dt,"thin-scrollbar",e)},r.createElement(nt,(0,d.Z)({},n,{linkClassName:"table-of-contents__link toc-highlight",linkActiveClassName:"table-of-contents__link--active"})))}function ft(){const{toc:t,frontMatter:e}=c();return r.createElement(pt,{toc:t,minHeadingLevel:e.toc_min_heading_level,maxHeadingLevel:e.toc_max_heading_level,className:x.k.docs.docTocDesktop})}var gt=n(2503),yt=n(3905),mt=n(1769);function bt(t){let{children:e}=t;return r.createElement(yt.Zo,{components:mt.Z},e)}function _t(t){let{children:e}=t;const n=function(){const{metadata:t,frontMatter:e,contentTitle:n}=c();return e.hide_title||void 0!==n?null:t.title}();return r.createElement("div",{className:(0,h.Z)(x.k.docs.docMarkdown,"markdown")},n&&r.createElement("header",null,r.createElement(gt.Z,{as:"h1"},n)),r.createElement(bt,null,e))}var xt=n(3438),vt=n(8596),kt=n(4996);function wt(t){return r.createElement("svg",(0,d.Z)({viewBox:"0 0 24 24"},t),r.createElement("path",{d:"M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z",fill:"currentColor"}))}const Et="breadcrumbHomeIcon_YNFT";function Ct(){const t=(0,kt.Z)("/");return r.createElement("li",{className:"breadcrumbs__item"},r.createElement(f.Z,{"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.home",message:"Home page",description:"The ARIA label for the home page in the breadcrumbs"}),className:"breadcrumbs__link",href:t},r.createElement(wt,{className:Et})))}const Tt="breadcrumbsContainer_Z_bl";function St(t){let{children:e,href:n,isLast:i}=t;const a="breadcrumbs__link";return i?r.createElement("span",{className:a,itemProp:"name"},e):n?r.createElement(f.Z,{className:a,href:n,itemProp:"item"},r.createElement("span",{itemProp:"name"},e)):r.createElement("span",{className:a},e)}function At(t){let{children:e,active:n,index:i,addMicrodata:a}=t;return r.createElement("li",(0,d.Z)({},a&&{itemScope:!0,itemProp:"itemListElement",itemType:"https://schema.org/ListItem"},{className:(0,h.Z)("breadcrumbs__item",{"breadcrumbs__item--active":n})}),e,r.createElement("meta",{itemProp:"position",content:String(i+1)}))}function Lt(){const t=(0,xt.s1)(),e=(0,vt.Ns)();return t?r.createElement("nav",{className:(0,h.Z)(x.k.docs.docBreadcrumbs,Tt),"aria-label":(0,p.I)({id:"theme.docs.breadcrumbs.navAriaLabel",message:"Breadcrumbs",description:"The ARIA label for the breadcrumbs"})},r.createElement("ul",{className:"breadcrumbs",itemScope:!0,itemType:"https://schema.org/BreadcrumbList"},e&&r.createElement(Ct,null),t.map(((e,n)=>{const i=n===t.length-1;return r.createElement(At,{key:n,active:i,index:n,addMicrodata:!!e.href},r.createElement(St,{href:e.href,isLast:i},e.label))})))):null}const Bt="docItemContainer_Djhp",Nt="docItemCol_VOVn";function Dt(t){let{children:e}=t;const n=function(){const{frontMatter:t,toc:e}=c(),n=(0,u.i)(),i=t.hide_table_of_contents,a=!i&&e.length>0;return{hidden:i,mobile:a?r.createElement(ut,null):void 0,desktop:!a||"desktop"!==n&&"ssr"!==n?void 0:r.createElement(ft,null)}}();return r.createElement("div",{className:"row"},r.createElement("div",{className:(0,h.Z)("col",!n.hidden&&Nt)},r.createElement(S,null),r.createElement("div",{className:Bt},r.createElement("article",null,r.createElement(Lt,null),r.createElement(A,null),n.mobile,r.createElement(_t,null,e),r.createElement(W,null)),r.createElement(m,null))),n.desktop&&r.createElement("div",{className:"col col--3"},n.desktop))}function Ot(t){const e=`docs-doc-id-${t.content.metadata.unversionedId}`,n=t.content;return r.createElement(o,{content:t.content},r.createElement(i.FG,{className:e},r.createElement(l,null),r.createElement(Dt,null,r.createElement(n,null))))}},2503:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3117),i=n(7294),a=n(6010),s=n(5999),o=n(6668),c=n(9960);const l="anchorWithStickyNavbar_LWe7",h="anchorWithHideOnScrollNavbar_WYt5";function u(t){let{as:e,id:n,...u}=t;const{navbar:{hideOnScroll:d}}=(0,o.L)();if("h1"===e||!n)return i.createElement(e,(0,r.Z)({},u,{id:void 0}));const p=(0,s.I)({id:"theme.common.headingLinkTitle",message:"Direct link to {heading}",description:"Title for link to heading"},{heading:"string"==typeof u.children?u.children:n});return i.createElement(e,(0,r.Z)({},u,{className:(0,a.Z)("anchor",d?h:l,u.className),id:n}),u.children,i.createElement(c.Z,{className:"hash-link",to:`#${n}`,"aria-label":p,title:p},"\u200b"))}},6566:(t,e,n)=>{"use strict";n.d(e,{Z:()=>wt});var r=n(3117),i=n(7294),a=n(5742);var s=n(2389),o=n(6010),c=n(2949),l=n(6668);function h(){const{prism:t}=(0,l.L)(),{colorMode:e}=(0,c.I)(),n=t.theme,r=t.darkTheme||n;return"dark"===e?r:n}var u=n(5281),d=n(7594),p=n.n(d);const f=/title=(?<quote>["'])(?<title>.*?)\1/,g=/\{(?<range>[\d,-]+)\}/,y={js:{start:"\\/\\/",end:""},jsBlock:{start:"\\/\\*",end:"\\*\\/"},jsx:{start:"\\{\\s*\\/\\*",end:"\\*\\/\\s*\\}"},bash:{start:"#",end:""},html:{start:"\x3c!--",end:"--\x3e"}};function m(t,e){const n=t.map((t=>{const{start:n,end:r}=y[t];return`(?:${n}\\s*(${e.flatMap((t=>[t.line,t.block?.start,t.block?.end].filter(Boolean))).join("|")})\\s*${r})`})).join("|");return new RegExp(`^\\s*(?:${n})\\s*$`)}function b(t,e){let n=t.replace(/\n$/,"");const{language:r,magicComments:i,metastring:a}=e;if(a&&g.test(a)){const t=a.match(g).groups.range;if(0===i.length)throw new Error(`A highlight range has been given in code block's metastring (\`\`\` ${a}), but no magic comment config is available. Docusaurus applies the first magic comment entry's className for metastring ranges.`);const e=i[0].className,r=p()(t).filter((t=>t>0)).map((t=>[t-1,[e]]));return{lineClassNames:Object.fromEntries(r),code:n}}if(void 0===r)return{lineClassNames:{},code:n};const s=function(t,e){switch(t){case"js":case"javascript":case"ts":case"typescript":return m(["js","jsBlock"],e);case"jsx":case"tsx":return m(["js","jsBlock","jsx"],e);case"html":return m(["js","jsBlock","html"],e);case"python":case"py":case"bash":return m(["bash"],e);case"markdown":case"md":return m(["html","jsx","bash"],e);default:return m(Object.keys(y),e)}}(r,i),o=n.split("\n"),c=Object.fromEntries(i.map((t=>[t.className,{start:0,range:""}]))),l=Object.fromEntries(i.filter((t=>t.line)).map((t=>{let{className:e,line:n}=t;return[n,e]}))),h=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.start,e]}))),u=Object.fromEntries(i.filter((t=>t.block)).map((t=>{let{className:e,block:n}=t;return[n.end,e]})));for(let p=0;p<o.length;){const t=o[p].match(s);if(!t){p+=1;continue}const e=t.slice(1).find((t=>void 0!==t));l[e]?c[l[e]].range+=`${p},`:h[e]?c[h[e]].start=p:u[e]&&(c[u[e]].range+=`${c[u[e]].start}-${p-1},`),o.splice(p,1)}n=o.join("\n");const d={};return Object.entries(c).forEach((t=>{let[e,{range:n}]=t;p()(n).forEach((t=>{d[t]??=[],d[t].push(e)}))})),{lineClassNames:d,code:n}}const _="codeBlockContainer_Ckt0";function x(t){let{as:e,...n}=t;const a=function(t){const e={color:"--prism-color",backgroundColor:"--prism-background-color"},n={};return Object.entries(t.plain).forEach((t=>{let[r,i]=t;const a=e[r];a&&"string"==typeof i&&(n[a]=i)})),n}(h());return i.createElement(e,(0,r.Z)({},n,{style:a,className:(0,o.Z)(n.className,_,u.k.common.codeBlock)}))}const v={codeBlockContent:"codeBlockContent_biex",codeBlockTitle:"codeBlockTitle_Ktv7",codeBlock:"codeBlock_bY9V",codeBlockStandalone:"codeBlockStandalone_MEMb",codeBlockLines:"codeBlockLines_e6Vv",codeBlockLinesWithNumbering:"codeBlockLinesWithNumbering_o6Pm",buttonGroup:"buttonGroup__atx"};function k(t){let{children:e,className:n}=t;return i.createElement(x,{as:"pre",tabIndex:0,className:(0,o.Z)(v.codeBlockStandalone,"thin-scrollbar",n)},i.createElement("code",{className:v.codeBlockLines},e))}var w=n(902);const E={attributes:!0,characterData:!0,childList:!0,subtree:!0};function C(t,e){const[n,r]=(0,i.useState)(),a=(0,i.useCallback)((()=>{r(t.current?.closest("[role=tabpanel][hidden]"))}),[t,r]);(0,i.useEffect)((()=>{a()}),[a]),function(t,e,n){void 0===n&&(n=E);const r=(0,w.zX)(e),a=(0,w.Ql)(n);(0,i.useEffect)((()=>{const e=new MutationObserver(r);return t&&e.observe(t,a),()=>e.disconnect()}),[t,r,a])}(n,(t=>{t.forEach((t=>{"attributes"===t.type&&"hidden"===t.attributeName&&(e(),a())}))}),{attributes:!0,characterData:!1,childList:!1,subtree:!1})}const T={plain:{backgroundColor:"#2a2734",color:"#9a86fd"},styles:[{types:["comment","prolog","doctype","cdata","punctuation"],style:{color:"#6c6783"}},{types:["namespace"],style:{opacity:.7}},{types:["tag","operator","number"],style:{color:"#e09142"}},{types:["property","function"],style:{color:"#9a86fd"}},{types:["tag-id","selector","atrule-id"],style:{color:"#eeebff"}},{types:["attr-name"],style:{color:"#c4b9fe"}},{types:["boolean","string","entity","url","attr-value","keyword","control","directive","unit","statement","regex","atrule","placeholder","variable"],style:{color:"#ffcc99"}},{types:["deleted"],style:{textDecorationLine:"line-through"}},{types:["inserted"],style:{textDecorationLine:"underline"}},{types:["italic"],style:{fontStyle:"italic"}},{types:["important","bold"],style:{fontWeight:"bold"}},{types:["important"],style:{color:"#c4b9fe"}}]};var S={Prism:n(7410).Z,theme:T};function A(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function L(){return L=Object.assign||function(t){for(var e=1;e<arguments.length;e++){var n=arguments[e];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(t[r]=n[r])}return t},L.apply(this,arguments)}var B=/\r\n|\r|\n/,N=function(t){0===t.length?t.push({types:["plain"],content:"\n",empty:!0}):1===t.length&&""===t[0].content&&(t[0].content="\n",t[0].empty=!0)},D=function(t,e){var n=t.length;return n>0&&t[n-1]===e?t:t.concat(e)},O=function(t,e){var n=t.plain,r=Object.create(null),i=t.styles.reduce((function(t,n){var r=n.languages,i=n.style;return r&&!r.includes(e)||n.types.forEach((function(e){var n=L({},t[e],i);t[e]=n})),t}),r);return i.root=n,i.plain=L({},n,{backgroundColor:null}),i};function M(t,e){var n={};for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&-1===e.indexOf(r)&&(n[r]=t[r]);return n}const I=function(t){function e(){for(var e=this,n=[],r=arguments.length;r--;)n[r]=arguments[r];t.apply(this,n),A(this,"getThemeDict",(function(t){if(void 0!==e.themeDict&&t.theme===e.prevTheme&&t.language===e.prevLanguage)return e.themeDict;e.prevTheme=t.theme,e.prevLanguage=t.language;var n=t.theme?O(t.theme,t.language):void 0;return e.themeDict=n})),A(this,"getLineProps",(function(t){var n=t.key,r=t.className,i=t.style,a=L({},M(t,["key","className","style","line"]),{className:"token-line",style:void 0,key:void 0}),s=e.getThemeDict(e.props);return void 0!==s&&(a.style=s.plain),void 0!==i&&(a.style=void 0!==a.style?L({},a.style,i):i),void 0!==n&&(a.key=n),r&&(a.className+=" "+r),a})),A(this,"getStyleForToken",(function(t){var n=t.types,r=t.empty,i=n.length,a=e.getThemeDict(e.props);if(void 0!==a){if(1===i&&"plain"===n[0])return r?{display:"inline-block"}:void 0;if(1===i&&!r)return a[n[0]];var s=r?{display:"inline-block"}:{},o=n.map((function(t){return a[t]}));return Object.assign.apply(Object,[s].concat(o))}})),A(this,"getTokenProps",(function(t){var n=t.key,r=t.className,i=t.style,a=t.token,s=L({},M(t,["key","className","style","token"]),{className:"token "+a.types.join(" "),children:a.content,style:e.getStyleForToken(a),key:void 0});return void 0!==i&&(s.style=void 0!==s.style?L({},s.style,i):i),void 0!==n&&(s.key=n),r&&(s.className+=" "+r),s})),A(this,"tokenize",(function(t,e,n,r){var i={code:e,grammar:n,language:r,tokens:[]};t.hooks.run("before-tokenize",i);var a=i.tokens=t.tokenize(i.code,i.grammar,i.language);return t.hooks.run("after-tokenize",i),a}))}return t&&(e.__proto__=t),e.prototype=Object.create(t&&t.prototype),e.prototype.constructor=e,e.prototype.render=function(){var t=this.props,e=t.Prism,n=t.language,r=t.code,i=t.children,a=this.getThemeDict(this.props),s=e.languages[n];return i({tokens:function(t){for(var e=[[]],n=[t],r=[0],i=[t.length],a=0,s=0,o=[],c=[o];s>-1;){for(;(a=r[s]++)<i[s];){var l=void 0,h=e[s],u=n[s][a];if("string"==typeof u?(h=s>0?h:["plain"],l=u):(h=D(h,u.type),u.alias&&(h=D(h,u.alias)),l=u.content),"string"==typeof l){var d=l.split(B),p=d.length;o.push({types:h,content:d[0]});for(var f=1;f<p;f++)N(o),c.push(o=[]),o.push({types:h,content:d[f]})}else s++,e.push(h),n.push(l),r.push(0),i.push(l.length)}s--,e.pop(),n.pop(),r.pop(),i.pop()}return N(o),c}(void 0!==s?this.tokenize(e,r,s,n):[r]),className:"prism-code language-"+n,style:void 0!==a?a.root:{},getLineProps:this.getLineProps,getTokenProps:this.getTokenProps})},e}(i.Component),F="codeLine_lJS_",$="codeLineNumber_Tfdd",R="codeLineContent_feaV";function Z(t){let{line:e,classNames:n,showLineNumbers:a,getLineProps:s,getTokenProps:c}=t;1===e.length&&"\n"===e[0].content&&(e[0].content="");const l=s({line:e,className:(0,o.Z)(n,a&&F)}),h=e.map(((t,e)=>i.createElement("span",(0,r.Z)({key:e},c({token:t,key:e})))));return i.createElement("span",l,a?i.createElement(i.Fragment,null,i.createElement("span",{className:$}),i.createElement("span",{className:R},h)):h,i.createElement("br",null))}var P=n(5999);function j(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"}))}function Y(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"}))}const z={copyButtonCopied:"copyButtonCopied_obH4",copyButtonIcons:"copyButtonIcons_eSgA",copyButtonIcon:"copyButtonIcon_y97N",copyButtonSuccessIcon:"copyButtonSuccessIcon_LjdS"};function U(t){let{code:e,className:n}=t;const[r,a]=(0,i.useState)(!1),s=(0,i.useRef)(void 0),c=(0,i.useCallback)((()=>{!function(t,e){let{target:n=document.body}=void 0===e?{}:e;if("string"!=typeof t)throw new TypeError(`Expected parameter \`text\` to be a \`string\`, got \`${typeof t}\`.`);const r=document.createElement("textarea"),i=document.activeElement;r.value=t,r.setAttribute("readonly",""),r.style.contain="strict",r.style.position="absolute",r.style.left="-9999px",r.style.fontSize="12pt";const a=document.getSelection(),s=a.rangeCount>0&&a.getRangeAt(0);n.append(r),r.select(),r.selectionStart=0,r.selectionEnd=t.length;let o=!1;try{o=document.execCommand("copy")}catch{}r.remove(),s&&(a.removeAllRanges(),a.addRange(s)),i&&i.focus()}(e),a(!0),s.current=window.setTimeout((()=>{a(!1)}),1e3)}),[e]);return(0,i.useEffect)((()=>()=>window.clearTimeout(s.current)),[]),i.createElement("button",{type:"button","aria-label":r?(0,P.I)({id:"theme.CodeBlock.copied",message:"Copied",description:"The copied button label on code blocks"}):(0,P.I)({id:"theme.CodeBlock.copyButtonAriaLabel",message:"Copy code to clipboard",description:"The ARIA label for copy code blocks button"}),title:(0,P.I)({id:"theme.CodeBlock.copy",message:"Copy",description:"The copy button label on code blocks"}),className:(0,o.Z)("clean-btn",n,z.copyButton,r&&z.copyButtonCopied),onClick:c},i.createElement("span",{className:z.copyButtonIcons,"aria-hidden":"true"},i.createElement(j,{className:z.copyButtonIcon}),i.createElement(Y,{className:z.copyButtonSuccessIcon})))}function W(t){return i.createElement("svg",(0,r.Z)({viewBox:"0 0 24 24"},t),i.createElement("path",{fill:"currentColor",d:"M4 19h6v-2H4v2zM20 5H4v2h16V5zm-3 6H4v2h13.25c1.1 0 2 .9 2 2s-.9 2-2 2H15v-2l-3 3l3 3v-2h2c2.21 0 4-1.79 4-4s-1.79-4-4-4z"}))}const q="wordWrapButtonIcon_Bwma",H="wordWrapButtonEnabled_EoeP";function V(t){let{className:e,onClick:n,isEnabled:r}=t;const a=(0,P.I)({id:"theme.CodeBlock.wordWrapToggle",message:"Toggle word wrap",description:"The title attribute for toggle word wrapping button of code block lines"});return i.createElement("button",{type:"button",onClick:n,className:(0,o.Z)("clean-btn",e,r&&H),"aria-label":a,title:a},i.createElement(W,{className:q,"aria-hidden":"true"}))}function G(t){let{children:e,className:n="",metastring:a,title:s,showLineNumbers:c,language:u}=t;const{prism:{defaultLanguage:d,magicComments:p}}=(0,l.L)(),g=u??n.split(" ").find((t=>t.startsWith("language-")))?.replace(/language-/,"")??d;const y=h(),m=function(){const[t,e]=(0,i.useState)(!1),[n,r]=(0,i.useState)(!1),a=(0,i.useRef)(null),s=(0,i.useCallback)((()=>{const n=a.current.querySelector("code");t?n.removeAttribute("style"):(n.style.whiteSpace="pre-wrap",n.style.overflowWrap="anywhere"),e((t=>!t))}),[a,t]),o=(0,i.useCallback)((()=>{const{scrollWidth:t,clientWidth:e}=a.current,n=t>e||a.current.querySelector("code").hasAttribute("style");r(n)}),[a]);return C(a,o),(0,i.useEffect)((()=>{o()}),[t,o]),(0,i.useEffect)((()=>(window.addEventListener("resize",o,{passive:!0}),()=>{window.removeEventListener("resize",o)})),[o]),{codeBlockRef:a,isEnabled:t,isCodeScrollable:n,toggle:s}}(),_=function(t){return t?.match(f)?.groups.title??""}(a)||s,{lineClassNames:k,code:w}=b(e,{metastring:a,language:g,magicComments:p}),E=c??function(t){return Boolean(t?.includes("showLineNumbers"))}(a);return i.createElement(x,{as:"div",className:(0,o.Z)(n,g&&!n.includes(`language-${g}`)&&`language-${g}`)},_&&i.createElement("div",{className:v.codeBlockTitle},_),i.createElement("div",{className:v.codeBlockContent},i.createElement(I,(0,r.Z)({},S,{theme:y,code:w,language:g??"text"}),(t=>{let{className:e,tokens:n,getLineProps:r,getTokenProps:a}=t;return i.createElement("pre",{tabIndex:0,ref:m.codeBlockRef,className:(0,o.Z)(e,v.codeBlock,"thin-scrollbar")},i.createElement("code",{className:(0,o.Z)(v.codeBlockLines,E&&v.codeBlockLinesWithNumbering)},n.map(((t,e)=>i.createElement(Z,{key:e,line:t,getLineProps:r,getTokenProps:a,classNames:k[e],showLineNumbers:E})))))})),i.createElement("div",{className:v.buttonGroup},(m.isEnabled||m.isCodeScrollable)&&i.createElement(V,{className:v.codeButton,onClick:()=>m.toggle(),isEnabled:m.isEnabled}),i.createElement(U,{className:v.codeButton,code:w}))))}function X(t){let{children:e,...n}=t;const a=(0,s.Z)(),o=function(t){return i.Children.toArray(t).some((t=>(0,i.isValidElement)(t)))?t:Array.isArray(t)?t.join(""):t}(e),c="string"==typeof o?G:k;return i.createElement(c,(0,r.Z)({key:String(a)},n),o)}var K=n(9960);var Q=n(6043);const J="details_lb9f",tt="isBrowser_bmU9",et="collapsibleContent_i85q";function nt(t){return!!t&&("SUMMARY"===t.tagName||nt(t.parentElement))}function rt(t,e){return!!t&&(t===e||rt(t.parentElement,e))}function it(t){let{summary:e,children:n,...a}=t;const c=(0,s.Z)(),l=(0,i.useRef)(null),{collapsed:h,setCollapsed:u}=(0,Q.u)({initialState:!a.open}),[d,p]=(0,i.useState)(a.open),f=i.isValidElement(e)?e:i.createElement("summary",null,e??"Details");return i.createElement("details",(0,r.Z)({},a,{ref:l,open:d,"data-collapsed":h,className:(0,o.Z)(J,c&&tt,a.className),onMouseDown:t=>{nt(t.target)&&t.detail>1&&t.preventDefault()},onClick:t=>{t.stopPropagation();const e=t.target;nt(e)&&rt(e,l.current)&&(t.preventDefault(),h?(u(!1),p(!0)):u(!0))}}),f,i.createElement(Q.z,{lazy:!1,collapsed:h,disableSSRStyle:!0,onCollapseTransitionEnd:t=>{u(t),p(!t)}},i.createElement("div",{className:et},n)))}const at="details_b_Ee";function st(t){let{...e}=t;return i.createElement(it,(0,r.Z)({},e,{className:(0,o.Z)("alert alert--info",at,e.className)}))}var ot=n(2503);function ct(t){return i.createElement(ot.Z,t)}const lt="containsTaskList_mC6p";const ht="img_ev3q";const ut="admonition_LlT9",dt="admonitionHeading_tbUL",pt="admonitionIcon_kALy",ft="admonitionContent_S0QG";const gt={note:{infimaClassName:"secondary",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"}))},label:i.createElement(P.Z,{id:"theme.admonition.note",description:"The default label used for the Note admonition (:::note)"},"note")},tip:{infimaClassName:"success",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.tip",description:"The default label used for the Tip admonition (:::tip)"},"tip")},danger:{infimaClassName:"danger",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 12 16"},i.createElement("path",{fillRule:"evenodd",d:"M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"}))},label:i.createElement(P.Z,{id:"theme.admonition.danger",description:"The default label used for the Danger admonition (:::danger)"},"danger")},info:{infimaClassName:"info",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 14 16"},i.createElement("path",{fillRule:"evenodd",d:"M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"}))},label:i.createElement(P.Z,{id:"theme.admonition.info",description:"The default label used for the Info admonition (:::info)"},"info")},caution:{infimaClassName:"warning",iconComponent:function(){return i.createElement("svg",{viewBox:"0 0 16 16"},i.createElement("path",{fillRule:"evenodd",d:"M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"}))},label:i.createElement(P.Z,{id:"theme.admonition.caution",description:"The default label used for the Caution admonition (:::caution)"},"caution")}},yt={secondary:"note",important:"info",success:"tip",warning:"danger"};function mt(t){const{mdxAdmonitionTitle:e,rest:n}=function(t){const e=i.Children.toArray(t),n=e.find((t=>i.isValidElement(t)&&"mdxAdmonitionTitle"===t.props?.mdxType)),r=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return{mdxAdmonitionTitle:n,rest:r}}(t.children);return{...t,title:t.title??e,children:n}}function bt(t){let{children:e,fallback:n}=t;return(0,s.Z)()?i.createElement(i.Fragment,null,e?.()):n??null}var _t=n(6432);function xt(){const{colorMode:t}=(0,c.I)(),e=(0,l.L)().mermaid,n=e.theme[t],{options:r}=e;return(0,i.useMemo)((()=>({startOnLoad:!1,...r,theme:n})),[n,r])}const vt="container_lyt7";function kt(t){let{value:e}=t;const n=function(t,e){const n=xt(),r=e??n;return(0,i.useMemo)((()=>{_t.o.mermaidAPI.initialize(r);const e=`mermaid-svg-${Math.round(1e7*Math.random())}`;return _t.o.render(e,t)}),[t,r])}(e);return i.createElement("div",{className:`docusaurus-mermaid-container ${vt}`,dangerouslySetInnerHTML:{__html:n}})}const wt={head:function(t){const e=i.Children.map(t.children,(t=>i.isValidElement(t)?function(t){if(t.props?.mdxType&&t.props.originalType){const{mdxType:e,originalType:n,...r}=t.props;return i.createElement(t.props.originalType,r)}return t}(t):t));return i.createElement(a.Z,t,e)},code:function(t){const e=["a","abbr","b","br","button","cite","code","del","dfn","em","i","img","input","ins","kbd","label","object","output","q","ruby","s","small","span","strong","sub","sup","time","u","var","wbr"];return i.Children.toArray(t.children).every((t=>"string"==typeof t&&!t.includes("\n")||(0,i.isValidElement)(t)&&e.includes(t.props?.mdxType)))?i.createElement("code",t):i.createElement(X,t)},a:function(t){return i.createElement(K.Z,t)},pre:function(t){return i.createElement(X,(0,i.isValidElement)(t.children)&&"code"===t.children.props?.originalType?t.children.props:{...t})},details:function(t){const e=i.Children.toArray(t.children),n=e.find((t=>i.isValidElement(t)&&"summary"===t.props?.mdxType)),a=i.createElement(i.Fragment,null,e.filter((t=>t!==n)));return i.createElement(st,(0,r.Z)({},t,{summary:n}),a)},ul:function(t){return i.createElement("ul",(0,r.Z)({},t,{className:(e=t.className,(0,o.Z)(e,e?.includes("contains-task-list")&&lt))}));var e},img:function(t){return i.createElement("img",(0,r.Z)({loading:"lazy"},t,{className:(e=t.className,(0,o.Z)(e,ht))}));var e},h1:t=>i.createElement(ct,(0,r.Z)({as:"h1"},t)),h2:t=>i.createElement(ct,(0,r.Z)({as:"h2"},t)),h3:t=>i.createElement(ct,(0,r.Z)({as:"h3"},t)),h4:t=>i.createElement(ct,(0,r.Z)({as:"h4"},t)),h5:t=>i.createElement(ct,(0,r.Z)({as:"h5"},t)),h6:t=>i.createElement(ct,(0,r.Z)({as:"h6"},t)),admonition:function(t){const{children:e,type:n,title:r,icon:a}=mt(t),s=function(t){const e=yt[t]??t;return gt[e]||(console.warn(`No admonition config found for admonition type "${e}". Using Info as fallback.`),gt.info)}(n),c=r??s.label,{iconComponent:l}=s,h=a??i.createElement(l,null);return i.createElement("div",{className:(0,o.Z)(u.k.common.admonition,u.k.common.admonitionType(t.type),"alert",`alert--${s.infimaClassName}`,ut)},i.createElement("div",{className:dt},i.createElement("span",{className:pt},h),c),i.createElement("div",{className:ft},e))},mermaid:function(t){return i.createElement(bt,null,(()=>i.createElement(kt,t)))}}},5162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7294),i=n(6010);const a="tabItem_Ymn6";function s(t){let{children:e,hidden:n,className:s}=t;return r.createElement("div",{role:"tabpanel",className:(0,i.Z)(a,s),hidden:n},e)}},4866:(t,e,n)=>{"use strict";n.d(e,{Z:()=>k});var r=n(3117),i=n(7294),a=n(6010),s=n(2466),o=n(6775),c=n(1980),l=n(7392),h=n(12);function u(t){return function(t){return i.Children.map(t,(t=>{if(!t||(0,i.isValidElement)(t)&&function(t){const{props:e}=t;return!!e&&"object"==typeof e&&"value"in e}(t))return t;throw new Error(`Docusaurus error: Bad <Tabs> child <${"string"==typeof t.type?t.type:t.type.name}>: all children of the <Tabs> component should be <TabItem>, and every <TabItem> should have a unique "value" prop.`)}))?.filter(Boolean)??[]}(t).map((t=>{let{props:{value:e,label:n,attributes:r,default:i}}=t;return{value:e,label:n,attributes:r,default:i}}))}function d(t){const{values:e,children:n}=t;return(0,i.useMemo)((()=>{const t=e??u(n);return function(t){const e=(0,l.l)(t,((t,e)=>t.value===e.value));if(e.length>0)throw new Error(`Docusaurus error: Duplicate values "${e.map((t=>t.value)).join(", ")}" found in <Tabs>. Every value needs to be unique.`)}(t),t}),[e,n])}function p(t){let{value:e,tabValues:n}=t;return n.some((t=>t.value===e))}function f(t){let{queryString:e=!1,groupId:n}=t;const r=(0,o.k6)(),a=function(t){let{queryString:e=!1,groupId:n}=t;if("string"==typeof e)return e;if(!1===e)return null;if(!0===e&&!n)throw new Error('Docusaurus error: The <Tabs> component groupId prop is required if queryString=true, because this value is used as the search param name. You can also provide an explicit value such as queryString="my-search-param".');return n??null}({queryString:e,groupId:n});return[(0,c._X)(a),(0,i.useCallback)((t=>{if(!a)return;const e=new URLSearchParams(r.location.search);e.set(a,t),r.replace({...r.location,search:e.toString()})}),[a,r])]}function g(t){const{defaultValue:e,queryString:n=!1,groupId:r}=t,a=d(t),[s,o]=(0,i.useState)((()=>function(t){let{defaultValue:e,tabValues:n}=t;if(0===n.length)throw new Error("Docusaurus error: the <Tabs> component requires at least one <TabItem> children component");if(e){if(!p({value:e,tabValues:n}))throw new Error(`Docusaurus error: The <Tabs> has a defaultValue "${e}" but none of its children has the corresponding value. Available values are: ${n.map((t=>t.value)).join(", ")}. If you intend to show no default tab, use defaultValue={null} instead.`);return e}const r=n.find((t=>t.default))??n[0];if(!r)throw new Error("Unexpected error: 0 tabValues");return r.value}({defaultValue:e,tabValues:a}))),[c,l]=f({queryString:n,groupId:r}),[u,g]=function(t){let{groupId:e}=t;const n=function(t){return t?`docusaurus.tab.${t}`:null}(e),[r,a]=(0,h.Nk)(n);return[r,(0,i.useCallback)((t=>{n&&a.set(t)}),[n,a])]}({groupId:r}),y=(()=>{const t=c??u;return p({value:t,tabValues:a})?t:null})();(0,i.useLayoutEffect)((()=>{y&&o(y)}),[y]);return{selectedValue:s,selectValue:(0,i.useCallback)((t=>{if(!p({value:t,tabValues:a}))throw new Error(`Can't select invalid tab value=${t}`);o(t),l(t),g(t)}),[l,g,a]),tabValues:a}}var y=n(2389);const m="tabList__CuJ",b="tabItem_LNqP";function _(t){let{className:e,block:n,selectedValue:o,selectValue:c,tabValues:l}=t;const h=[],{blockElementScrollPositionUntilNextRender:u}=(0,s.o5)(),d=t=>{const e=t.currentTarget,n=h.indexOf(e),r=l[n].value;r!==o&&(u(e),c(r))},p=t=>{let e=null;switch(t.key){case"Enter":d(t);break;case"ArrowRight":{const n=h.indexOf(t.currentTarget)+1;e=h[n]??h[0];break}case"ArrowLeft":{const n=h.indexOf(t.currentTarget)-1;e=h[n]??h[h.length-1];break}}e?.focus()};return i.createElement("ul",{role:"tablist","aria-orientation":"horizontal",className:(0,a.Z)("tabs",{"tabs--block":n},e)},l.map((t=>{let{value:e,label:n,attributes:s}=t;return i.createElement("li",(0,r.Z)({role:"tab",tabIndex:o===e?0:-1,"aria-selected":o===e,key:e,ref:t=>h.push(t),onKeyDown:p,onClick:d},s,{className:(0,a.Z)("tabs__item",b,s?.className,{"tabs__item--active":o===e})}),n??e)})))}function x(t){let{lazy:e,children:n,selectedValue:r}=t;const a=(Array.isArray(n)?n:[n]).filter(Boolean);if(e){const t=a.find((t=>t.props.value===r));return t?(0,i.cloneElement)(t,{className:"margin-top--md"}):null}return i.createElement("div",{className:"margin-top--md"},a.map(((t,e)=>(0,i.cloneElement)(t,{key:e,hidden:t.props.value!==r}))))}function v(t){const e=g(t);return i.createElement("div",{className:(0,a.Z)("tabs-container",m)},i.createElement(_,(0,r.Z)({},t,e)),i.createElement(x,(0,r.Z)({},t,e)))}function k(t){const e=(0,y.Z)();return i.createElement(v,(0,r.Z)({key:String(e)},t))}},4477:(t,e,n)=>{"use strict";n.d(e,{E:()=>o,q:()=>s});var r=n(7294),i=n(902);const a=r.createContext(null);function s(t){let{children:e,version:n}=t;return r.createElement(a.Provider,{value:n},e)}function o(){const t=(0,r.useContext)(a);if(null===t)throw new i.i6("DocsVersionProvider");return t}},7484:function(t){t.exports=function(){"use strict";var t=1e3,e=6e4,n=36e5,r="millisecond",i="second",a="minute",s="hour",o="day",c="week",l="month",h="quarter",u="year",d="date",p="Invalid Date",f=/^(\d{4})[-/]?(\d{1,2})?[-/]?(\d{0,2})[Tt\s]*(\d{1,2})?:?(\d{1,2})?:?(\d{1,2})?[.:]?(\d+)?$/,g=/\[([^\]]+)]|Y{1,4}|M{1,4}|D{1,2}|d{1,4}|H{1,2}|h{1,2}|a|A|m{1,2}|s{1,2}|Z{1,2}|SSS/g,y={name:"en",weekdays:"Sunday_Monday_Tuesday_Wednesday_Thursday_Friday_Saturday".split("_"),months:"January_February_March_April_May_June_July_August_September_October_November_December".split("_"),ordinal:function(t){var e=["th","st","nd","rd"],n=t%100;return"["+t+(e[(n-20)%10]||e[n]||e[0])+"]"}},m=function(t,e,n){var r=String(t);return!r||r.length>=e?t:""+Array(e+1-r.length).join(n)+t},b={s:m,z:function(t){var e=-t.utcOffset(),n=Math.abs(e),r=Math.floor(n/60),i=n%60;return(e<=0?"+":"-")+m(r,2,"0")+":"+m(i,2,"0")},m:function t(e,n){if(e.date()<n.date())return-t(n,e);var r=12*(n.year()-e.year())+(n.month()-e.month()),i=e.clone().add(r,l),a=n-i<0,s=e.clone().add(r+(a?-1:1),l);return+(-(r+(n-i)/(a?i-s:s-i))||0)},a:function(t){return t<0?Math.ceil(t)||0:Math.floor(t)},p:function(t){return{M:l,y:u,w:c,d:o,D:d,h:s,m:a,s:i,ms:r,Q:h}[t]||String(t||"").toLowerCase().replace(/s$/,"")},u:function(t){return void 0===t}},_="en",x={};x[_]=y;var v=function(t){return t instanceof C},k=function t(e,n,r){var i;if(!e)return _;if("string"==typeof e){var a=e.toLowerCase();x[a]&&(i=a),n&&(x[a]=n,i=a);var s=e.split("-");if(!i&&s.length>1)return t(s[0])}else{var o=e.name;x[o]=e,i=o}return!r&&i&&(_=i),i||!r&&_},w=function(t,e){if(v(t))return t.clone();var n="object"==typeof e?e:{};return n.date=t,n.args=arguments,new C(n)},E=b;E.l=k,E.i=v,E.w=function(t,e){return w(t,{locale:e.$L,utc:e.$u,x:e.$x,$offset:e.$offset})};var C=function(){function y(t){this.$L=k(t.locale,null,!0),this.parse(t)}var m=y.prototype;return m.parse=function(t){this.$d=function(t){var e=t.date,n=t.utc;if(null===e)return new Date(NaN);if(E.u(e))return new Date;if(e instanceof Date)return new Date(e);if("string"==typeof e&&!/Z$/i.test(e)){var r=e.match(f);if(r){var i=r[2]-1||0,a=(r[7]||"0").substring(0,3);return n?new Date(Date.UTC(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)):new Date(r[1],i,r[3]||1,r[4]||0,r[5]||0,r[6]||0,a)}}return new Date(e)}(t),this.$x=t.x||{},this.init()},m.init=function(){var t=this.$d;this.$y=t.getFullYear(),this.$M=t.getMonth(),this.$D=t.getDate(),this.$W=t.getDay(),this.$H=t.getHours(),this.$m=t.getMinutes(),this.$s=t.getSeconds(),this.$ms=t.getMilliseconds()},m.$utils=function(){return E},m.isValid=function(){return!(this.$d.toString()===p)},m.isSame=function(t,e){var n=w(t);return this.startOf(e)<=n&&n<=this.endOf(e)},m.isAfter=function(t,e){return w(t)<this.startOf(e)},m.isBefore=function(t,e){return this.endOf(e)<w(t)},m.$g=function(t,e,n){return E.u(t)?this[e]:this.set(n,t)},m.unix=function(){return Math.floor(this.valueOf()/1e3)},m.valueOf=function(){return this.$d.getTime()},m.startOf=function(t,e){var n=this,r=!!E.u(e)||e,h=E.p(t),p=function(t,e){var i=E.w(n.$u?Date.UTC(n.$y,e,t):new Date(n.$y,e,t),n);return r?i:i.endOf(o)},f=function(t,e){return E.w(n.toDate()[t].apply(n.toDate("s"),(r?[0,0,0,0]:[23,59,59,999]).slice(e)),n)},g=this.$W,y=this.$M,m=this.$D,b="set"+(this.$u?"UTC":"");switch(h){case u:return r?p(1,0):p(31,11);case l:return r?p(1,y):p(0,y+1);case c:var _=this.$locale().weekStart||0,x=(g<_?g+7:g)-_;return p(r?m-x:m+(6-x),y);case o:case d:return f(b+"Hours",0);case s:return f(b+"Minutes",1);case a:return f(b+"Seconds",2);case i:return f(b+"Milliseconds",3);default:return this.clone()}},m.endOf=function(t){return this.startOf(t,!1)},m.$set=function(t,e){var n,c=E.p(t),h="set"+(this.$u?"UTC":""),p=(n={},n[o]=h+"Date",n[d]=h+"Date",n[l]=h+"Month",n[u]=h+"FullYear",n[s]=h+"Hours",n[a]=h+"Minutes",n[i]=h+"Seconds",n[r]=h+"Milliseconds",n)[c],f=c===o?this.$D+(e-this.$W):e;if(c===l||c===u){var g=this.clone().set(d,1);g.$d[p](f),g.init(),this.$d=g.set(d,Math.min(this.$D,g.daysInMonth())).$d}else p&&this.$d[p](f);return this.init(),this},m.set=function(t,e){return this.clone().$set(t,e)},m.get=function(t){return this[E.p(t)]()},m.add=function(r,h){var d,p=this;r=Number(r);var f=E.p(h),g=function(t){var e=w(p);return E.w(e.date(e.date()+Math.round(t*r)),p)};if(f===l)return this.set(l,this.$M+r);if(f===u)return this.set(u,this.$y+r);if(f===o)return g(1);if(f===c)return g(7);var y=(d={},d[a]=e,d[s]=n,d[i]=t,d)[f]||1,m=this.$d.getTime()+r*y;return E.w(m,this)},m.subtract=function(t,e){return this.add(-1*t,e)},m.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return n.invalidDate||p;var r=t||"YYYY-MM-DDTHH:mm:ssZ",i=E.z(this),a=this.$H,s=this.$m,o=this.$M,c=n.weekdays,l=n.months,h=function(t,n,i,a){return t&&(t[n]||t(e,r))||i[n].slice(0,a)},u=function(t){return E.s(a%12||12,t,"0")},d=n.meridiem||function(t,e,n){var r=t<12?"AM":"PM";return n?r.toLowerCase():r},f={YY:String(this.$y).slice(-2),YYYY:this.$y,M:o+1,MM:E.s(o+1,2,"0"),MMM:h(n.monthsShort,o,l,3),MMMM:h(l,o),D:this.$D,DD:E.s(this.$D,2,"0"),d:String(this.$W),dd:h(n.weekdaysMin,this.$W,c,2),ddd:h(n.weekdaysShort,this.$W,c,3),dddd:c[this.$W],H:String(a),HH:E.s(a,2,"0"),h:u(1),hh:u(2),a:d(a,s,!0),A:d(a,s,!1),m:String(s),mm:E.s(s,2,"0"),s:String(this.$s),ss:E.s(this.$s,2,"0"),SSS:E.s(this.$ms,3,"0"),Z:i};return r.replace(g,(function(t,e){return e||f[t]||i.replace(":","")}))},m.utcOffset=function(){return 15*-Math.round(this.$d.getTimezoneOffset()/15)},m.diff=function(r,d,p){var f,g=E.p(d),y=w(r),m=(y.utcOffset()-this.utcOffset())*e,b=this-y,_=E.m(this,y);return _=(f={},f[u]=_/12,f[l]=_,f[h]=_/3,f[c]=(b-m)/6048e5,f[o]=(b-m)/864e5,f[s]=b/n,f[a]=b/e,f[i]=b/t,f)[g]||b,p?_:E.a(_)},m.daysInMonth=function(){return this.endOf(l).$D},m.$locale=function(){return x[this.$L]},m.locale=function(t,e){if(!t)return this.$L;var n=this.clone(),r=k(t,e,!0);return r&&(n.$L=r),n},m.clone=function(){return E.w(this.$d,this)},m.toDate=function(){return new Date(this.valueOf())},m.toJSON=function(){return this.isValid()?this.toISOString():null},m.toISOString=function(){return this.$d.toISOString()},m.toString=function(){return this.$d.toUTCString()},y}(),T=C.prototype;return w.prototype=T,[["$ms",r],["$s",i],["$m",a],["$H",s],["$W",o],["$M",l],["$y",u],["$D",d]].forEach((function(t){T[t[1]]=function(e){return this.$g(e,t[0],t[1])}})),w.extend=function(t,e){return t.$i||(t(e,C,w),t.$i=!0),w},w.locale=k,w.isDayjs=v,w.unix=function(t){return w(1e3*t)},w.en=x[_],w.Ls=x,w.p={},w}()},8734:function(t){t.exports=function(){"use strict";return function(t,e){var n=e.prototype,r=n.format;n.format=function(t){var e=this,n=this.$locale();if(!this.isValid())return r.bind(this)(t);var i=this.$utils(),a=(t||"YYYY-MM-DDTHH:mm:ssZ").replace(/\[([^\]]+)]|Q|wo|ww|w|WW|W|zzz|z|gggg|GGGG|Do|X|x|k{1,2}|S/g,(function(t){switch(t){case"Q":return Math.ceil((e.$M+1)/3);case"Do":return n.ordinal(e.$D);case"gggg":return e.weekYear();case"GGGG":return e.isoWeekYear();case"wo":return n.ordinal(e.week(),"W");case"w":case"ww":return i.s(e.week(),"w"===t?1:2,"0");case"W":case"WW":return i.s(e.isoWeek(),"W"===t?1:2,"0");case"k":case"kk":return i.s(String(0===e.$H?24:e.$H),"k"===t?1:2,"0");case"X":return Math.floor(e.$d.getTime()/1e3);case"x":return e.$d.getTime();case"z":return"["+e.offsetName()+"]";case"zzz":return"["+e.offsetName("long")+"]";default:return t}}));return r.bind(this)(a)}}}()},285:function(t){t.exports=function(){"use strict";var t={LTS:"h:mm:ss A",LT:"h:mm A",L:"MM/DD/YYYY",LL:"MMMM D, YYYY",LLL:"MMMM D, YYYY h:mm A",LLLL:"dddd, MMMM D, YYYY h:mm A"},e=/(\[[^[]*\])|([-_:/.,()\s]+)|(A|a|YYYY|YY?|MM?M?M?|Do|DD?|hh?|HH?|mm?|ss?|S{1,3}|z|ZZ?)/g,n=/\d\d/,r=/\d\d?/,i=/\d*[^-_:/,()\s\d]+/,a={},s=function(t){return(t=+t)+(t>68?1900:2e3)},o=function(t){return function(e){this[t]=+e}},c=[/[+-]\d\d:?(\d\d)?|Z/,function(t){(this.zone||(this.zone={})).offset=function(t){if(!t)return 0;if("Z"===t)return 0;var e=t.match(/([+-]|\d\d)/g),n=60*e[1]+(+e[2]||0);return 0===n?0:"+"===e[0]?-n:n}(t)}],l=function(t){var e=a[t];return e&&(e.indexOf?e:e.s.concat(e.f))},h=function(t,e){var n,r=a.meridiem;if(r){for(var i=1;i<=24;i+=1)if(t.indexOf(r(i,0,e))>-1){n=i>12;break}}else n=t===(e?"pm":"PM");return n},u={A:[i,function(t){this.afternoon=h(t,!1)}],a:[i,function(t){this.afternoon=h(t,!0)}],S:[/\d/,function(t){this.milliseconds=100*+t}],SS:[n,function(t){this.milliseconds=10*+t}],SSS:[/\d{3}/,function(t){this.milliseconds=+t}],s:[r,o("seconds")],ss:[r,o("seconds")],m:[r,o("minutes")],mm:[r,o("minutes")],H:[r,o("hours")],h:[r,o("hours")],HH:[r,o("hours")],hh:[r,o("hours")],D:[r,o("day")],DD:[n,o("day")],Do:[i,function(t){var e=a.ordinal,n=t.match(/\d+/);if(this.day=n[0],e)for(var r=1;r<=31;r+=1)e(r).replace(/\[|\]/g,"")===t&&(this.day=r)}],M:[r,o("month")],MM:[n,o("month")],MMM:[i,function(t){var e=l("months"),n=(l("monthsShort")||e.map((function(t){return t.slice(0,3)}))).indexOf(t)+1;if(n<1)throw new Error;this.month=n%12||n}],MMMM:[i,function(t){var e=l("months").indexOf(t)+1;if(e<1)throw new Error;this.month=e%12||e}],Y:[/[+-]?\d+/,o("year")],YY:[n,function(t){this.year=s(t)}],YYYY:[/\d{4}/,o("year")],Z:c,ZZ:c};function d(n){var r,i;r=n,i=a&&a.formats;for(var s=(n=r.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(function(e,n,r){var a=r&&r.toUpperCase();return n||i[r]||t[r]||i[a].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(function(t,e,n){return e||n.slice(1)}))}))).match(e),o=s.length,c=0;c<o;c+=1){var l=s[c],h=u[l],d=h&&h[0],p=h&&h[1];s[c]=p?{regex:d,parser:p}:l.replace(/^\[|\]$/g,"")}return function(t){for(var e={},n=0,r=0;n<o;n+=1){var i=s[n];if("string"==typeof i)r+=i.length;else{var a=i.regex,c=i.parser,l=t.slice(r),h=a.exec(l)[0];c.call(e,h),t=t.replace(h,"")}}return function(t){var e=t.afternoon;if(void 0!==e){var n=t.hours;e?n<12&&(t.hours+=12):12===n&&(t.hours=0),delete t.afternoon}}(e),e}}return function(t,e,n){n.p.customParseFormat=!0,t&&t.parseTwoDigitYear&&(s=t.parseTwoDigitYear);var r=e.prototype,i=r.parse;r.parse=function(t){var e=t.date,r=t.utc,s=t.args;this.$u=r;var o=s[1];if("string"==typeof o){var c=!0===s[2],l=!0===s[3],h=c||l,u=s[2];l&&(u=s[2]),a=this.$locale(),!c&&u&&(a=n.Ls[u]),this.$d=function(t,e,n){try{if(["x","X"].indexOf(e)>-1)return new Date(("X"===e?1e3:1)*t);var r=d(e)(t),i=r.year,a=r.month,s=r.day,o=r.hours,c=r.minutes,l=r.seconds,h=r.milliseconds,u=r.zone,p=new Date,f=s||(i||a?1:p.getDate()),g=i||p.getFullYear(),y=0;i&&!a||(y=a>0?a-1:p.getMonth());var m=o||0,b=c||0,_=l||0,x=h||0;return u?new Date(Date.UTC(g,y,f,m,b,_,x+60*u.offset*1e3)):n?new Date(Date.UTC(g,y,f,m,b,_,x)):new Date(g,y,f,m,b,_,x)}catch(t){return new Date("")}}(e,o,r),this.init(),u&&!0!==u&&(this.$L=this.locale(u).$L),h&&e!=this.format(o)&&(this.$d=new Date("")),a={}}else if(o instanceof Array)for(var p=o.length,f=1;f<=p;f+=1){s[1]=o[f-1];var g=n.apply(this,s);if(g.isValid()){this.$d=g.$d,this.$L=g.$L,this.init();break}f===p&&(this.$d=new Date(""))}else i.call(this,t)}}}()},9542:function(t){t.exports=function(){"use strict";var t="day";return function(e,n,r){var i=function(e){return e.add(4-e.isoWeekday(),t)},a=n.prototype;a.isoWeekYear=function(){return i(this).year()},a.isoWeek=function(e){if(!this.$utils().u(e))return this.add(7*(e-this.isoWeek()),t);var n,a,s,o=i(this),c=(n=this.isoWeekYear(),s=4-(a=(this.$u?r.utc:r)().year(n).startOf("year")).isoWeekday(),a.isoWeekday()>4&&(s+=7),a.add(s,t));return o.diff(c,"week")+1},a.isoWeekday=function(t){return this.$utils().u(t)?this.day()||7:this.day(this.day()%7?t:t-7)};var s=a.startOf;a.startOf=function(t,e){var n=this.$utils(),r=!!n.u(e)||e;return"isoweek"===n.p(t)?r?this.date(this.date()-(this.isoWeekday()-1)).startOf("day"):this.date(this.date()-1-(this.isoWeekday()-1)+7).endOf("day"):s.bind(this)(t,e)}}}()},7856:function(t){t.exports=function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},t(e)}function e(t,n){return e=Object.setPrototypeOf||function(t,e){return t.__proto__=e,t},e(t,n)}function n(){if("undefined"==typeof Reflect||!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){}))),!0}catch(t){return!1}}function r(t,i,a){return r=n()?Reflect.construct:function(t,n,r){var i=[null];i.push.apply(i,n);var a=new(Function.bind.apply(t,i));return r&&e(a,r.prototype),a},r.apply(null,arguments)}function i(t){return a(t)||s(t)||o(t)||l()}function a(t){if(Array.isArray(t))return c(t)}function s(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]||null!=t["@@iterator"])return Array.from(t)}function o(t,e){if(t){if("string"==typeof t)return c(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n||"Set"===n?Array.from(t):"Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n)?c(t,e):void 0}}function c(t,e){(null==e||e>t.length)&&(e=t.length);for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n];return r}function l(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var h=Object.hasOwnProperty,u=Object.setPrototypeOf,d=Object.isFrozen,p=Object.getPrototypeOf,f=Object.getOwnPropertyDescriptor,g=Object.freeze,y=Object.seal,m=Object.create,b="undefined"!=typeof Reflect&&Reflect,_=b.apply,x=b.construct;_||(_=function(t,e,n){return t.apply(e,n)}),g||(g=function(t){return t}),y||(y=function(t){return t}),x||(x=function(t,e){return r(t,i(e))});var v=D(Array.prototype.forEach),k=D(Array.prototype.pop),w=D(Array.prototype.push),E=D(String.prototype.toLowerCase),C=D(String.prototype.toString),T=D(String.prototype.match),S=D(String.prototype.replace),A=D(String.prototype.indexOf),L=D(String.prototype.trim),B=D(RegExp.prototype.test),N=O(TypeError);function D(t){return function(e){for(var n=arguments.length,r=new Array(n>1?n-1:0),i=1;i<n;i++)r[i-1]=arguments[i];return _(t,e,r)}}function O(t){return function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];return x(t,n)}}function M(t,e,n){n=n||E,u&&u(t,null);for(var r=e.length;r--;){var i=e[r];if("string"==typeof i){var a=n(i);a!==i&&(d(e)||(e[r]=a),i=a)}t[i]=!0}return t}function I(t){var e,n=m(null);for(e in t)!0===_(h,t,[e])&&(n[e]=t[e]);return n}function F(t,e){for(;null!==t;){var n=f(t,e);if(n){if(n.get)return D(n.get);if("function"==typeof n.value)return D(n.value)}t=p(t)}function r(t){return console.warn("fallback value for",t),null}return r}var $=g(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","section","select","shadow","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),R=g(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","filter","font","g","glyph","glyphref","hkern","image","line","lineargradient","marker","mask","metadata","mpath","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Z=g(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),P=g(["animate","color-profile","cursor","discard","fedropshadow","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),j=g(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover"]),Y=g(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),z=g(["#text"]),U=g(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","face","for","headers","height","hidden","high","href","hreflang","id","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","xmlns","slot"]),W=g(["accent-height","accumulate","additive","alignment-baseline","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),q=g(["accent","accentunder","align","bevelled","close","columnsalign","columnlines","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lspace","lquote","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),H=g(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),V=y(/\{\{[\w\W]*|[\w\W]*\}\}/gm),G=y(/<%[\w\W]*|[\w\W]*%>/gm),X=y(/\${[\w\W]*}/gm),K=y(/^data-[\-\w.\u00B7-\uFFFF]/),Q=y(/^aria-[\-\w]+$/),J=y(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|cid|xmpp):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),tt=y(/^(?:\w+script|data):/i),et=y(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),nt=y(/^html$/i),rt=function(){return"undefined"==typeof window?null:window},it=function(e,n){if("object"!==t(e)||"function"!=typeof e.createPolicy)return null;var r=null,i="data-tt-policy-suffix";n.currentScript&&n.currentScript.hasAttribute(i)&&(r=n.currentScript.getAttribute(i));var a="dompurify"+(r?"#"+r:"");try{return e.createPolicy(a,{createHTML:function(t){return t},createScriptURL:function(t){return t}})}catch(s){return console.warn("TrustedTypes policy "+a+" could not be created."),null}};function at(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:rt(),n=function(t){return at(t)};if(n.version="2.4.3",n.removed=[],!e||!e.document||9!==e.document.nodeType)return n.isSupported=!1,n;var r=e.document,a=e.document,s=e.DocumentFragment,o=e.HTMLTemplateElement,c=e.Node,l=e.Element,h=e.NodeFilter,u=e.NamedNodeMap,d=void 0===u?e.NamedNodeMap||e.MozNamedAttrMap:u,p=e.HTMLFormElement,f=e.DOMParser,y=e.trustedTypes,m=l.prototype,b=F(m,"cloneNode"),_=F(m,"nextSibling"),x=F(m,"childNodes"),D=F(m,"parentNode");if("function"==typeof o){var O=a.createElement("template");O.content&&O.content.ownerDocument&&(a=O.content.ownerDocument)}var st=it(y,r),ot=st?st.createHTML(""):"",ct=a,lt=ct.implementation,ht=ct.createNodeIterator,ut=ct.createDocumentFragment,dt=ct.getElementsByTagName,pt=r.importNode,ft={};try{ft=I(a).documentMode?a.documentMode:{}}catch(De){}var gt={};n.isSupported="function"==typeof D&&lt&&void 0!==lt.createHTMLDocument&&9!==ft;var yt,mt,bt=V,_t=G,xt=X,vt=K,kt=Q,wt=tt,Et=et,Ct=J,Tt=null,St=M({},[].concat(i($),i(R),i(Z),i(j),i(z))),At=null,Lt=M({},[].concat(i(U),i(W),i(q),i(H))),Bt=Object.seal(Object.create(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),Nt=null,Dt=null,Ot=!0,Mt=!0,It=!1,Ft=!1,$t=!1,Rt=!1,Zt=!1,Pt=!1,jt=!1,Yt=!1,zt=!0,Ut=!1,Wt="user-content-",qt=!0,Ht=!1,Vt={},Gt=null,Xt=M({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","style","svg","template","thead","title","video","xmp"]),Kt=null,Qt=M({},["audio","video","img","source","image","track"]),Jt=null,te=M({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),ee="http://www.w3.org/1998/Math/MathML",ne="http://www.w3.org/2000/svg",re="http://www.w3.org/1999/xhtml",ie=re,ae=!1,se=null,oe=M({},[ee,ne,re],C),ce=["application/xhtml+xml","text/html"],le="text/html",he=null,ue=a.createElement("form"),de=function(t){return t instanceof RegExp||t instanceof Function},pe=function(e){he&&he===e||(e&&"object"===t(e)||(e={}),e=I(e),yt=yt=-1===ce.indexOf(e.PARSER_MEDIA_TYPE)?le:e.PARSER_MEDIA_TYPE,mt="application/xhtml+xml"===yt?C:E,Tt="ALLOWED_TAGS"in e?M({},e.ALLOWED_TAGS,mt):St,At="ALLOWED_ATTR"in e?M({},e.ALLOWED_ATTR,mt):Lt,se="ALLOWED_NAMESPACES"in e?M({},e.ALLOWED_NAMESPACES,C):oe,Jt="ADD_URI_SAFE_ATTR"in e?M(I(te),e.ADD_URI_SAFE_ATTR,mt):te,Kt="ADD_DATA_URI_TAGS"in e?M(I(Qt),e.ADD_DATA_URI_TAGS,mt):Qt,Gt="FORBID_CONTENTS"in e?M({},e.FORBID_CONTENTS,mt):Xt,Nt="FORBID_TAGS"in e?M({},e.FORBID_TAGS,mt):{},Dt="FORBID_ATTR"in e?M({},e.FORBID_ATTR,mt):{},Vt="USE_PROFILES"in e&&e.USE_PROFILES,Ot=!1!==e.ALLOW_ARIA_ATTR,Mt=!1!==e.ALLOW_DATA_ATTR,It=e.ALLOW_UNKNOWN_PROTOCOLS||!1,Ft=e.SAFE_FOR_TEMPLATES||!1,$t=e.WHOLE_DOCUMENT||!1,Pt=e.RETURN_DOM||!1,jt=e.RETURN_DOM_FRAGMENT||!1,Yt=e.RETURN_TRUSTED_TYPE||!1,Zt=e.FORCE_BODY||!1,zt=!1!==e.SANITIZE_DOM,Ut=e.SANITIZE_NAMED_PROPS||!1,qt=!1!==e.KEEP_CONTENT,Ht=e.IN_PLACE||!1,Ct=e.ALLOWED_URI_REGEXP||Ct,ie=e.NAMESPACE||re,e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.tagNameCheck)&&(Bt.tagNameCheck=e.CUSTOM_ELEMENT_HANDLING.tagNameCheck),e.CUSTOM_ELEMENT_HANDLING&&de(e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck)&&(Bt.attributeNameCheck=e.CUSTOM_ELEMENT_HANDLING.attributeNameCheck),e.CUSTOM_ELEMENT_HANDLING&&"boolean"==typeof e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements&&(Bt.allowCustomizedBuiltInElements=e.CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements),Ft&&(Mt=!1),jt&&(Pt=!0),Vt&&(Tt=M({},i(z)),At=[],!0===Vt.html&&(M(Tt,$),M(At,U)),!0===Vt.svg&&(M(Tt,R),M(At,W),M(At,H)),!0===Vt.svgFilters&&(M(Tt,Z),M(At,W),M(At,H)),!0===Vt.mathMl&&(M(Tt,j),M(At,q),M(At,H))),e.ADD_TAGS&&(Tt===St&&(Tt=I(Tt)),M(Tt,e.ADD_TAGS,mt)),e.ADD_ATTR&&(At===Lt&&(At=I(At)),M(At,e.ADD_ATTR,mt)),e.ADD_URI_SAFE_ATTR&&M(Jt,e.ADD_URI_SAFE_ATTR,mt),e.FORBID_CONTENTS&&(Gt===Xt&&(Gt=I(Gt)),M(Gt,e.FORBID_CONTENTS,mt)),qt&&(Tt["#text"]=!0),$t&&M(Tt,["html","head","body"]),Tt.table&&(M(Tt,["tbody"]),delete Nt.tbody),g&&g(e),he=e)},fe=M({},["mi","mo","mn","ms","mtext"]),ge=M({},["foreignobject","desc","title","annotation-xml"]),ye=M({},["title","style","font","a","script"]),me=M({},R);M(me,Z),M(me,P);var be=M({},j);M(be,Y);var _e=function(t){var e=D(t);e&&e.tagName||(e={namespaceURI:ie,tagName:"template"});var n=E(t.tagName),r=E(e.tagName);return!!se[t.namespaceURI]&&(t.namespaceURI===ne?e.namespaceURI===re?"svg"===n:e.namespaceURI===ee?"svg"===n&&("annotation-xml"===r||fe[r]):Boolean(me[n]):t.namespaceURI===ee?e.namespaceURI===re?"math"===n:e.namespaceURI===ne?"math"===n&&ge[r]:Boolean(be[n]):t.namespaceURI===re?!(e.namespaceURI===ne&&!ge[r])&&!(e.namespaceURI===ee&&!fe[r])&&!be[n]&&(ye[n]||!me[n]):!("application/xhtml+xml"!==yt||!se[t.namespaceURI]))},xe=function(t){w(n.removed,{element:t});try{t.parentNode.removeChild(t)}catch(De){try{t.outerHTML=ot}catch(De){t.remove()}}},ve=function(t,e){try{w(n.removed,{attribute:e.getAttributeNode(t),from:e})}catch(De){w(n.removed,{attribute:null,from:e})}if(e.removeAttribute(t),"is"===t&&!At[t])if(Pt||jt)try{xe(e)}catch(De){}else try{e.setAttribute(t,"")}catch(De){}},ke=function(t){var e,n;if(Zt)t="<remove></remove>"+t;else{var r=T(t,/^[\r\n\t ]+/);n=r&&r[0]}"application/xhtml+xml"===yt&&ie===re&&(t='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+t+"</body></html>");var i=st?st.createHTML(t):t;if(ie===re)try{e=(new f).parseFromString(i,yt)}catch(De){}if(!e||!e.documentElement){e=lt.createDocument(ie,"template",null);try{e.documentElement.innerHTML=ae?ot:i}catch(De){}}var s=e.body||e.documentElement;return t&&n&&s.insertBefore(a.createTextNode(n),s.childNodes[0]||null),ie===re?dt.call(e,$t?"html":"body")[0]:$t?e.documentElement:s},we=function(t){return ht.call(t.ownerDocument||t,t,h.SHOW_ELEMENT|h.SHOW_COMMENT|h.SHOW_TEXT,null,!1)},Ee=function(t){return t instanceof p&&("string"!=typeof t.nodeName||"string"!=typeof t.textContent||"function"!=typeof t.removeChild||!(t.attributes instanceof d)||"function"!=typeof t.removeAttribute||"function"!=typeof t.setAttribute||"string"!=typeof t.namespaceURI||"function"!=typeof t.insertBefore||"function"!=typeof t.hasChildNodes)},Ce=function(e){return"object"===t(c)?e instanceof c:e&&"object"===t(e)&&"number"==typeof e.nodeType&&"string"==typeof e.nodeName},Te=function(t,e,r){gt[t]&&v(gt[t],(function(t){t.call(n,e,r,he)}))},Se=function(t){var e;if(Te("beforeSanitizeElements",t,null),Ee(t))return xe(t),!0;if(B(/[\u0080-\uFFFF]/,t.nodeName))return xe(t),!0;var r=mt(t.nodeName);if(Te("uponSanitizeElement",t,{tagName:r,allowedTags:Tt}),t.hasChildNodes()&&!Ce(t.firstElementChild)&&(!Ce(t.content)||!Ce(t.content.firstElementChild))&&B(/<[/\w]/g,t.innerHTML)&&B(/<[/\w]/g,t.textContent))return xe(t),!0;if("select"===r&&B(/<template/i,t.innerHTML))return xe(t),!0;if(!Tt[r]||Nt[r]){if(!Nt[r]&&Le(r)){if(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,r))return!1;if(Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(r))return!1}if(qt&&!Gt[r]){var i=D(t)||t.parentNode,a=x(t)||t.childNodes;if(a&&i)for(var s=a.length-1;s>=0;--s)i.insertBefore(b(a[s],!0),_(t))}return xe(t),!0}return t instanceof l&&!_e(t)?(xe(t),!0):"noscript"!==r&&"noembed"!==r||!B(/<\/no(script|embed)/i,t.innerHTML)?(Ft&&3===t.nodeType&&(e=t.textContent,e=S(e,bt," "),e=S(e,_t," "),e=S(e,xt," "),t.textContent!==e&&(w(n.removed,{element:t.cloneNode()}),t.textContent=e)),Te("afterSanitizeElements",t,null),!1):(xe(t),!0)},Ae=function(t,e,n){if(zt&&("id"===e||"name"===e)&&(n in a||n in ue))return!1;if(Mt&&!Dt[e]&&B(vt,e));else if(Ot&&B(kt,e));else if(!At[e]||Dt[e]){if(!(Le(t)&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,t)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(t))&&(Bt.attributeNameCheck instanceof RegExp&&B(Bt.attributeNameCheck,e)||Bt.attributeNameCheck instanceof Function&&Bt.attributeNameCheck(e))||"is"===e&&Bt.allowCustomizedBuiltInElements&&(Bt.tagNameCheck instanceof RegExp&&B(Bt.tagNameCheck,n)||Bt.tagNameCheck instanceof Function&&Bt.tagNameCheck(n))))return!1}else if(Jt[e]);else if(B(Ct,S(n,Et,"")));else if("src"!==e&&"xlink:href"!==e&&"href"!==e||"script"===t||0!==A(n,"data:")||!Kt[t])if(It&&!B(wt,S(n,Et,"")));else if(n)return!1;return!0},Le=function(t){return t.indexOf("-")>0},Be=function(e){var r,i,a,s;Te("beforeSanitizeAttributes",e,null);var o=e.attributes;if(o){var c={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:At};for(s=o.length;s--;){var l=r=o[s],h=l.name,u=l.namespaceURI;if(i="value"===h?r.value:L(r.value),a=mt(h),c.attrName=a,c.attrValue=i,c.keepAttr=!0,c.forceKeepAttr=void 0,Te("uponSanitizeAttribute",e,c),i=c.attrValue,!c.forceKeepAttr&&(ve(h,e),c.keepAttr))if(B(/\/>/i,i))ve(h,e);else{Ft&&(i=S(i,bt," "),i=S(i,_t," "),i=S(i,xt," "));var d=mt(e.nodeName);if(Ae(d,a,i)){if(!Ut||"id"!==a&&"name"!==a||(ve(h,e),i=Wt+i),st&&"object"===t(y)&&"function"==typeof y.getAttributeType)if(u);else switch(y.getAttributeType(d,a)){case"TrustedHTML":i=st.createHTML(i);break;case"TrustedScriptURL":i=st.createScriptURL(i)}try{u?e.setAttributeNS(u,h,i):e.setAttribute(h,i),k(n.removed)}catch(De){}}}}Te("afterSanitizeAttributes",e,null)}},Ne=function t(e){var n,r=we(e);for(Te("beforeSanitizeShadowDOM",e,null);n=r.nextNode();)Te("uponSanitizeShadowNode",n,null),Se(n)||(n.content instanceof s&&t(n.content),Be(n));Te("afterSanitizeShadowDOM",e,null)};return n.sanitize=function(i){var a,o,l,h,u,d=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};if((ae=!i)&&(i="\x3c!--\x3e"),"string"!=typeof i&&!Ce(i)){if("function"!=typeof i.toString)throw N("toString is not a function");if("string"!=typeof(i=i.toString()))throw N("dirty is not a string, aborting")}if(!n.isSupported){if("object"===t(e.toStaticHTML)||"function"==typeof e.toStaticHTML){if("string"==typeof i)return e.toStaticHTML(i);if(Ce(i))return e.toStaticHTML(i.outerHTML)}return i}if(Rt||pe(d),n.removed=[],"string"==typeof i&&(Ht=!1),Ht){if(i.nodeName){var p=mt(i.nodeName);if(!Tt[p]||Nt[p])throw N("root node is forbidden and cannot be sanitized in-place")}}else if(i instanceof c)1===(o=(a=ke("\x3c!----\x3e")).ownerDocument.importNode(i,!0)).nodeType&&"BODY"===o.nodeName||"HTML"===o.nodeName?a=o:a.appendChild(o);else{if(!Pt&&!Ft&&!$t&&-1===i.indexOf("<"))return st&&Yt?st.createHTML(i):i;if(!(a=ke(i)))return Pt?null:Yt?ot:""}a&&Zt&&xe(a.firstChild);for(var f=we(Ht?i:a);l=f.nextNode();)3===l.nodeType&&l===h||Se(l)||(l.content instanceof s&&Ne(l.content),Be(l),h=l);if(h=null,Ht)return i;if(Pt){if(jt)for(u=ut.call(a.ownerDocument);a.firstChild;)u.appendChild(a.firstChild);else u=a;return At.shadowroot&&(u=pt.call(r,u,!0)),u}var g=$t?a.outerHTML:a.innerHTML;return $t&&Tt["!doctype"]&&a.ownerDocument&&a.ownerDocument.doctype&&a.ownerDocument.doctype.name&&B(nt,a.ownerDocument.doctype.name)&&(g="<!DOCTYPE "+a.ownerDocument.doctype.name+">\n"+g),Ft&&(g=S(g,bt," "),g=S(g,_t," "),g=S(g,xt," ")),st&&Yt?st.createHTML(g):g},n.setConfig=function(t){pe(t),Rt=!0},n.clearConfig=function(){he=null,Rt=!1},n.isValidAttribute=function(t,e,n){he||pe({});var r=mt(t),i=mt(e);return Ae(r,i,n)},n.addHook=function(t,e){"function"==typeof e&&(gt[t]=gt[t]||[],w(gt[t],e))},n.removeHook=function(t){if(gt[t])return k(gt[t])},n.removeHooks=function(t){gt[t]&&(gt[t]=[])},n.removeAllHooks=function(){gt={}},n}return at()}()},6432:(t,e,n)=>{"use strict";n.d(e,{a:()=>Mn,b:()=>Fs,c:()=>Yt,d:()=>Dn,e:()=>Pt,f:()=>Ys,g:()=>ar,h:()=>mc,i:()=>hs,j:()=>Pr,k:()=>Yr,l:()=>Nt,m:()=>Dr,n:()=>Ft,o:()=>dp,p:()=>bo,s:()=>pr});const r=function(t){for(var e=[],n=1;n<arguments.length;n++)e[n-1]=arguments[n];var r=Array.from("string"==typeof t?[t]:t);r[r.length-1]=r[r.length-1].replace(/\r?\n([\t ]*)$/,"");var i=r.reduce((function(t,e){var n=e.match(/\n([\t ]+|(?!\s).)/g);return n?t.concat(n.map((function(t){var e,n;return null!==(n=null===(e=t.match(/[\t ]/g))||void 0===e?void 0:e.length)&&void 0!==n?n:0}))):t}),[]);if(i.length){var a=new RegExp("\n[\t ]{"+Math.min.apply(Math,i)+"}","g");r=r.map((function(t){return t.replace(a,"\n")}))}r[0]=r[0].replace(/^\r?\n/,"");var s=r[0];return e.forEach((function(t,e){var n=s.match(/(?:^|\n)( *)$/),i=n?n[1]:"",a=t;"string"==typeof t&&t.includes("\n")&&(a=String(t).split("\n").map((function(t,e){return 0===e?t:""+i+t})).join("\n")),s+=a+r[e+1]})),s};var i=n(7484),a=n.n(i),s=n(7967),o=n(9373),l=n(7856),h=n.n(l),u=n(1610),d=n(1691);const p=(t,e)=>{const n=u.Z.parse(t);for(const r in e)n[r]=d.Z.channel.clamp[r](e[r]);return u.Z.stringify(n)},f=(t,e)=>{const n=u.Z.parse(t),r={};for(const i in e)e[i]&&(r[i]=n[i]+e[i]);return p(t,r)};var g=n(1883);const y=(t,e,n=0,r=1)=>{if("number"!=typeof t)return p(t,{a:e});const i=g.Z.set({r:d.Z.channel.clamp.r(t),g:d.Z.channel.clamp.g(e),b:d.Z.channel.clamp.b(n),a:d.Z.channel.clamp.a(r)});return u.Z.stringify(i)},m=(t,e,n=50)=>{const{r:r,g:i,b:a,a:s}=u.Z.parse(t),{r:o,g:c,b:l,a:h}=u.Z.parse(e),d=n/100,p=2*d-1,f=s-h,g=((p*f==-1?p:(p+f)/(1+p*f))+1)/2,m=1-g;return y(r*g+o*m,i*g+c*m,a*g+l*m,s*d+h*(1-d))},b=(t,e=100)=>{const n=u.Z.parse(t);return n.r=255-n.r,n.g=255-n.g,n.b=255-n.b,m(n,t,e)};var _=n(7201),x=n(5920),v=n(2454),k="comm",w="rule",E="decl",C=Math.abs,T=String.fromCharCode;Object.assign;function S(t){return t.trim()}function A(t,e,n){return t.replace(e,n)}function L(t,e){return t.indexOf(e)}function B(t,e){return 0|t.charCodeAt(e)}function N(t,e,n){return t.slice(e,n)}function D(t){return t.length}function O(t){return t.length}function M(t,e){return e.push(t),t}function I(t,e){for(var n="",r=O(t),i=0;i<r;i++)n+=e(t[i],i,t,e)||"";return n}function F(t,e,n,r){switch(t.type){case"@import":case E:return t.return=t.return||t.value;case k:return"";case"@keyframes":return t.return=t.value+"{"+I(t.children,r)+"}";case w:t.value=t.props.join(",")}return D(n=I(t.children,r))?t.return=t.value+"{"+n+"}":""}var $=1,R=1,Z=0,P=0,j=0,Y="";function z(t,e,n,r,i,a,s){return{value:t,root:e,parent:n,type:r,props:i,children:a,line:$,column:R,length:s,return:""}}function U(){return j=P>0?B(Y,--P):0,R--,10===j&&(R=1,$--),j}function W(){return j=P<Z?B(Y,P++):0,R++,10===j&&(R=1,$++),j}function q(){return B(Y,P)}function H(){return P}function V(t,e){return N(Y,t,e)}function G(t){switch(t){case 0:case 9:case 10:case 13:case 32:return 5;case 33:case 43:case 44:case 47:case 62:case 64:case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function X(t){return $=R=1,Z=D(Y=t),P=0,[]}function K(t){return Y="",t}function Q(t){return S(V(P-1,et(91===t?t+2:40===t?t+1:t)))}function J(t){for(;(j=q())&&j<33;)W();return G(t)>2||G(j)>3?"":" "}function tt(t,e){for(;--e&&W()&&!(j<48||j>102||j>57&&j<65||j>70&&j<97););return V(t,H()+(e<6&&32==q()&&32==W()))}function et(t){for(;W();)switch(j){case t:return P;case 34:case 39:34!==t&&39!==t&&et(j);break;case 40:41===t&&et(t);break;case 92:W()}return P}function nt(t,e){for(;W()&&t+j!==57&&(t+j!==84||47!==q()););return"/*"+V(e,P-1)+"*"+T(47===t?t:W())}function rt(t){for(;!G(q());)W();return V(t,P)}function it(t){return K(at("",null,null,null,[""],t=X(t),0,[0],t))}function at(t,e,n,r,i,a,s,o,c){for(var l=0,h=0,u=s,d=0,p=0,f=0,g=1,y=1,m=1,b=0,_="",x=i,v=a,k=r,w=_;y;)switch(f=b,b=W()){case 40:if(108!=f&&58==B(w,u-1)){-1!=L(w+=A(Q(b),"&","&\f"),"&\f")&&(m=-1);break}case 34:case 39:case 91:w+=Q(b);break;case 9:case 10:case 13:case 32:w+=J(f);break;case 92:w+=tt(H()-1,7);continue;case 47:switch(q()){case 42:case 47:M(ot(nt(W(),H()),e,n),c);break;default:w+="/"}break;case 123*g:o[l++]=D(w)*m;case 125*g:case 59:case 0:switch(b){case 0:case 125:y=0;case 59+h:p>0&&D(w)-u&&M(p>32?ct(w+";",r,n,u-1):ct(A(w," ","")+";",r,n,u-2),c);break;case 59:w+=";";default:if(M(k=st(w,e,n,l,h,i,o,_,x=[],v=[],u),a),123===b)if(0===h)at(w,e,k,k,x,a,u,o,v);else switch(99===d&&110===B(w,3)?100:d){case 100:case 109:case 115:at(t,k,k,r&&M(st(t,k,k,0,0,i,o,_,i,x=[],u),v),i,v,u,o,r?x:v);break;default:at(w,k,k,k,[""],v,0,o,v)}}l=h=p=0,g=m=1,_=w="",u=s;break;case 58:u=1+D(w),p=f;default:if(g<1)if(123==b)--g;else if(125==b&&0==g++&&125==U())continue;switch(w+=T(b),b*g){case 38:m=h>0?1:(w+="\f",-1);break;case 44:o[l++]=(D(w)-1)*m,m=1;break;case 64:45===q()&&(w+=Q(W())),d=q(),h=u=D(_=w+=rt(H())),b++;break;case 45:45===f&&2==D(w)&&(g=0)}}return a}function st(t,e,n,r,i,a,s,o,c,l,h){for(var u=i-1,d=0===i?a:[""],p=O(d),f=0,g=0,y=0;f<r;++f)for(var m=0,b=N(t,u+1,u=C(g=s[f])),_=t;m<p;++m)(_=S(g>0?d[m]+" "+b:A(b,/&\f/g,d[m])))&&(c[y++]=_);return z(t,e,n,0===i?w:o,c,l,h)}function ot(t,e,n){return z(t,e,n,k,T(j),N(t,2,-2),0)}function ct(t,e,n,r){return z(t,e,n,E,N(t,0,r),N(t,r+1,-1),r)}var lt=n(277),ht=n(5625),ut=n(9354);const dt=[];for(let c=0;c<256;++c)dt.push((c+256).toString(16).slice(1));function pt(t,e=0){return(dt[t[e+0]]+dt[t[e+1]]+dt[t[e+2]]+dt[t[e+3]]+"-"+dt[t[e+4]]+dt[t[e+5]]+"-"+dt[t[e+6]]+dt[t[e+7]]+"-"+dt[t[e+8]]+dt[t[e+9]]+"-"+dt[t[e+10]]+dt[t[e+11]]+dt[t[e+12]]+dt[t[e+13]]+dt[t[e+14]]+dt[t[e+15]]).toLowerCase()}const ft=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000)$/i;const gt=function(t){return"string"==typeof t&&ft.test(t)};const yt=function(t){if(!gt(t))throw TypeError("Invalid UUID");let e;const n=new Uint8Array(16);return n[0]=(e=parseInt(t.slice(0,8),16))>>>24,n[1]=e>>>16&255,n[2]=e>>>8&255,n[3]=255&e,n[4]=(e=parseInt(t.slice(9,13),16))>>>8,n[5]=255&e,n[6]=(e=parseInt(t.slice(14,18),16))>>>8,n[7]=255&e,n[8]=(e=parseInt(t.slice(19,23),16))>>>8,n[9]=255&e,n[10]=(e=parseInt(t.slice(24,36),16))/1099511627776&255,n[11]=e/4294967296&255,n[12]=e>>>24&255,n[13]=e>>>16&255,n[14]=e>>>8&255,n[15]=255&e,n};function mt(t,e,n,r){switch(t){case 0:return e&n^~e&r;case 1:case 3:return e^n^r;case 2:return e&n^e&r^n&r}}function bt(t,e){return t<<e|t>>>32-e}const _t=function(t){const e=[1518500249,1859775393,2400959708,3395469782],n=[1732584193,4023233417,2562383102,271733878,3285377520];if("string"==typeof t){const e=unescape(encodeURIComponent(t));t=[];for(let n=0;n<e.length;++n)t.push(e.charCodeAt(n))}else Array.isArray(t)||(t=Array.prototype.slice.call(t));t.push(128);const r=t.length/4+2,i=Math.ceil(r/16),a=new Array(i);for(let s=0;s<i;++s){const e=new Uint32Array(16);for(let n=0;n<16;++n)e[n]=t[64*s+4*n]<<24|t[64*s+4*n+1]<<16|t[64*s+4*n+2]<<8|t[64*s+4*n+3];a[s]=e}a[i-1][14]=8*(t.length-1)/Math.pow(2,32),a[i-1][14]=Math.floor(a[i-1][14]),a[i-1][15]=8*(t.length-1)&4294967295;for(let s=0;s<i;++s){const t=new Uint32Array(80);for(let e=0;e<16;++e)t[e]=a[s][e];for(let e=16;e<80;++e)t[e]=bt(t[e-3]^t[e-8]^t[e-14]^t[e-16],1);let r=n[0],i=n[1],o=n[2],c=n[3],l=n[4];for(let n=0;n<80;++n){const a=Math.floor(n/20),s=bt(r,5)+mt(a,i,o,c)+l+e[a]+t[n]>>>0;l=c,c=o,o=bt(i,30)>>>0,i=r,r=s}n[0]=n[0]+r>>>0,n[1]=n[1]+i>>>0,n[2]=n[2]+o>>>0,n[3]=n[3]+c>>>0,n[4]=n[4]+l>>>0}return[n[0]>>24&255,n[0]>>16&255,n[0]>>8&255,255&n[0],n[1]>>24&255,n[1]>>16&255,n[1]>>8&255,255&n[1],n[2]>>24&255,n[2]>>16&255,n[2]>>8&255,255&n[2],n[3]>>24&255,n[3]>>16&255,n[3]>>8&255,255&n[3],n[4]>>24&255,n[4]>>16&255,n[4]>>8&255,255&n[4]]},xt=function(t,e,n){function r(t,r,i,a){var s;if("string"==typeof t&&(t=function(t){t=unescape(encodeURIComponent(t));const e=[];for(let n=0;n<t.length;++n)e.push(t.charCodeAt(n));return e}(t)),"string"==typeof r&&(r=yt(r)),16!==(null===(s=r)||void 0===s?void 0:s.length))throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");let o=new Uint8Array(16+t.length);if(o.set(r),o.set(t,r.length),o=n(o),o[6]=15&o[6]|e,o[8]=63&o[8]|128,i){a=a||0;for(let t=0;t<16;++t)i[a+t]=o[t];return i}return pt(o)}try{r.name=t}catch(i){}return r.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",r.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8",r}("v5",80,_t),vt=xt;n(1518),n(6225);var kt=n(3349),wt=(n(3352),n(2930),n(9542)),Et=n.n(wt),Ct=n(285),Tt=n.n(Ct),St=n(8734),At=n.n(St),Lt=n(9697);const Bt={trace:0,debug:1,info:2,warn:3,error:4,fatal:5},Nt={trace:(...t)=>{},debug:(...t)=>{},info:(...t)=>{},warn:(...t)=>{},error:(...t)=>{},fatal:(...t)=>{}},Dt=function(t="fatal"){let e=Bt.fatal;"string"==typeof t?(t=t.toLowerCase())in Bt&&(e=Bt[t]):"number"==typeof t&&(e=t),Nt.trace=()=>{},Nt.debug=()=>{},Nt.info=()=>{},Nt.warn=()=>{},Nt.error=()=>{},Nt.fatal=()=>{},e<=Bt.fatal&&(Nt.fatal=console.error?console.error.bind(console,Ot("FATAL"),"color: orange"):console.log.bind(console,"\x1b[35m",Ot("FATAL"))),e<=Bt.error&&(Nt.error=console.error?console.error.bind(console,Ot("ERROR"),"color: orange"):console.log.bind(console,"\x1b[31m",Ot("ERROR"))),e<=Bt.warn&&(Nt.warn=console.warn?console.warn.bind(console,Ot("WARN"),"color: orange"):console.log.bind(console,"\x1b[33m",Ot("WARN"))),e<=Bt.info&&(Nt.info=console.info?console.info.bind(console,Ot("INFO"),"color: lightblue"):console.log.bind(console,"\x1b[34m",Ot("INFO"))),e<=Bt.debug&&(Nt.debug=console.debug?console.debug.bind(console,Ot("DEBUG"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("DEBUG"))),e<=Bt.trace&&(Nt.trace=console.debug?console.debug.bind(console,Ot("TRACE"),"color: lightgreen"):console.log.bind(console,"\x1b[32m",Ot("TRACE")))},Ot=t=>`%c${a()().format("ss.SSS")} : ${t} : `,Mt=t=>h().sanitize(t),It=(t,e)=>{var n;if(!1!==(null==(n=e.flowchart)?void 0:n.htmlLabels)){const n=e.securityLevel;"antiscript"===n||"strict"===n?t=Mt(t):"loose"!==n&&(t=(t=(t=Zt(t)).replace(/</g,"&lt;").replace(/>/g,"&gt;")).replace(/=/g,"&equals;"),t=Rt(t))}return t},Ft=(t,e)=>t?t=e.dompurifyConfig?h().sanitize(It(t,e),e.dompurifyConfig).toString():h().sanitize(It(t,e),{FORBID_TAGS:["style"]}).toString():t,$t=/<br\s*\/?>/gi,Rt=t=>t.replace(/#br#/g,"<br/>"),Zt=t=>t.replace($t,"#br#"),Pt=t=>!1!==t&&!["false","null","0"].includes(String(t).trim().toLowerCase()),jt=function(t){let e=t;if(t.split("~").length-1>=2){let t=e;do{e=t,t=e.replace(/~([^\s,:;]+)~/,"<$1>")}while(t!=e);return jt(t)}return e},Yt={getRows:t=>{if(!t)return[""];return Zt(t).replace(/\\n/g,"#br#").split("#br#")},sanitizeText:Ft,sanitizeTextOrArray:(t,e)=>"string"==typeof t?Ft(t,e):t.flat().map((t=>Ft(t,e))),hasBreaks:t=>$t.test(t),splitBreaks:t=>t.split($t),lineBreakRegex:$t,removeScript:Mt,getUrl:t=>{let e="";return t&&(e=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,e=e.replaceAll(/\(/g,"\\("),e=e.replaceAll(/\)/g,"\\)")),e},evaluate:Pt},zt=(t,e)=>f(t,e?{s:-40,l:10}:{s:-40,l:-10}),Ut="#ffffff",Wt="#f2f2f2";class qt{constructor(){this.primaryColor="#eee",this.contrast="#707070",this.secondaryColor=(0,x.Z)(this.contrast,55),this.background="#ffffff",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#eee",this.secondBkg="calculated",this.lineColor="#666",this.border1="#999",this.border2="calculated",this.note="#ffa",this.text="#333",this.critical="#d42",this.done="#bbb",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="white",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="calculated",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="white",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBkgColor="calculated",this.critBorderColor="calculated",this.todayLineColor="calculated",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.secondBkg=(0,x.Z)(this.contrast,55),this.border2=this.contrast,this.cScale0=this.cScale0||"#555",this.cScale1=this.cScale1||"#F4F4F4",this.cScale2=this.cScale2||"#555",this.cScale3=this.cScale3||"#BBB",this.cScale4=this.cScale4||"#777",this.cScale5=this.cScale5||"#999",this.cScale6=this.cScale6||"#DDD",this.cScale7=this.cScale7||"#FFF",this.cScale8=this.cScale8||"#DDD",this.cScale9=this.cScale9||"#BBB",this.cScale10=this.cScale10||"#999",this.cScale11=this.cScale11||"#777";for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this.darkMode?this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10):this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],10);this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor),this.cScaleLabel0=this.cScaleLabel0||this.cScale1,this.cScaleLabel2=this.cScaleLabel2||this.cScale1;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.text,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.actorTextColor=this.text,this.actorLineColor=this.lineColor,this.signalColor=this.text,this.signalTextColor=this.text,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.text,this.loopTextColor=this.text,this.noteBorderColor="#999",this.noteBkgColor="#666",this.noteTextColor="#fff",this.sectionBkgColor=(0,x.Z)(this.contrast,30),this.sectionBkgColor2=(0,x.Z)(this.contrast,30),this.taskBorderColor=(0,_.Z)(this.contrast,10),this.taskBkgColor=this.contrast,this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor=this.text,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.gridColor=(0,x.Z)(this.border1,30),this.doneTaskBkgColor=this.done,this.doneTaskBorderColor=this.lineColor,this.critBkgColor=this.critical,this.critBorderColor=(0,_.Z)(this.critBkgColor,10),this.todayLineColor=this.critBkgColor,this.transitionColor=this.transitionColor||"#000",this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f4f4f4",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.stateBorder=this.stateBorder||"#000",this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#222",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pie12=this.pie0,this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,_.Z)(this.pie1,25)||this.primaryColor,this.git1=this.pie2||this.secondaryColor,this.git2=this.pie3||this.tertiaryColor,this.git3=this.pie4||f(this.primaryColor,{h:-30}),this.git4=this.pie5||f(this.primaryColor,{h:-60}),this.git5=this.pie6||f(this.primaryColor,{h:-90}),this.git6=this.pie7||f(this.primaryColor,{h:60}),this.git7=this.pie8||f(this.primaryColor,{h:120}),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||this.labelTextColor,this.gitBranchLabel0=this.branchLabelColor,this.gitBranchLabel1="white",this.gitBranchLabel2=this.branchLabelColor,this.gitBranchLabel3="white",this.gitBranchLabel4=this.branchLabelColor,this.gitBranchLabel5=this.branchLabelColor,this.gitBranchLabel6=this.branchLabelColor,this.gitBranchLabel7=this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}}const Ht={base:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#fff4dd",this.noteBkgColor="#fff5ad",this.noteTextColor="#333",this.THEME_COLOR_LIMIT=12,this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px"}updateColors(){if(this.primaryTextColor=this.primaryTextColor||(this.darkMode?"#eee":"#333"),this.secondaryColor=this.secondaryColor||f(this.primaryColor,{h:-120}),this.tertiaryColor=this.tertiaryColor||f(this.primaryColor,{h:180,l:5}),this.primaryBorderColor=this.primaryBorderColor||zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=this.secondaryBorderColor||zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=this.tertiaryBorderColor||zt(this.tertiaryColor,this.darkMode),this.noteBorderColor=this.noteBorderColor||zt(this.noteBkgColor,this.darkMode),this.noteBkgColor=this.noteBkgColor||"#fff5ad",this.noteTextColor=this.noteTextColor||"#333",this.secondaryTextColor=this.secondaryTextColor||b(this.secondaryColor),this.tertiaryTextColor=this.tertiaryTextColor||b(this.tertiaryColor),this.lineColor=this.lineColor||b(this.background),this.textColor=this.textColor||this.primaryTextColor,this.nodeBkg=this.nodeBkg||this.primaryColor,this.mainBkg=this.mainBkg||this.primaryColor,this.nodeBorder=this.nodeBorder||this.primaryBorderColor,this.clusterBkg=this.clusterBkg||this.tertiaryColor,this.clusterBorder=this.clusterBorder||this.tertiaryBorderColor,this.defaultLinkColor=this.defaultLinkColor||this.lineColor,this.titleColor=this.titleColor||this.tertiaryTextColor,this.edgeLabelBackground=this.edgeLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.nodeTextColor=this.nodeTextColor||this.primaryTextColor,this.actorBorder=this.actorBorder||this.primaryBorderColor,this.actorBkg=this.actorBkg||this.mainBkg,this.actorTextColor=this.actorTextColor||this.primaryTextColor,this.actorLineColor=this.actorLineColor||"grey",this.labelBoxBkgColor=this.labelBoxBkgColor||this.actorBkg,this.signalColor=this.signalColor||this.textColor,this.signalTextColor=this.signalTextColor||this.textColor,this.labelBoxBorderColor=this.labelBoxBorderColor||this.actorBorder,this.labelTextColor=this.labelTextColor||this.actorTextColor,this.loopTextColor=this.loopTextColor||this.actorTextColor,this.activationBorderColor=this.activationBorderColor||(0,_.Z)(this.secondaryColor,10),this.activationBkgColor=this.activationBkgColor||this.secondaryColor,this.sequenceNumberColor=this.sequenceNumberColor||b(this.lineColor),this.sectionBkgColor=this.sectionBkgColor||this.tertiaryColor,this.altSectionBkgColor=this.altSectionBkgColor||"white",this.sectionBkgColor=this.sectionBkgColor||this.secondaryColor,this.sectionBkgColor2=this.sectionBkgColor2||this.primaryColor,this.excludeBkgColor=this.excludeBkgColor||"#eeeeee",this.taskBorderColor=this.taskBorderColor||this.primaryBorderColor,this.taskBkgColor=this.taskBkgColor||this.primaryColor,this.activeTaskBorderColor=this.activeTaskBorderColor||this.primaryColor,this.activeTaskBkgColor=this.activeTaskBkgColor||(0,x.Z)(this.primaryColor,23),this.gridColor=this.gridColor||"lightgrey",this.doneTaskBkgColor=this.doneTaskBkgColor||"lightgrey",this.doneTaskBorderColor=this.doneTaskBorderColor||"grey",this.critBorderColor=this.critBorderColor||"#ff8888",this.critBkgColor=this.critBkgColor||"red",this.todayLineColor=this.todayLineColor||"red",this.taskTextColor=this.taskTextColor||this.textColor,this.taskTextOutsideColor=this.taskTextOutsideColor||this.textColor,this.taskTextLightColor=this.taskTextLightColor||this.textColor,this.taskTextColor=this.taskTextColor||this.primaryTextColor,this.taskTextDarkColor=this.taskTextDarkColor||this.textColor,this.taskTextClickableColor=this.taskTextClickableColor||"#003163",this.personBorder=this.personBorder||this.primaryBorderColor,this.personBkg=this.personBkg||this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||this.tertiaryColor,this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.specialStateColor=this.lineColor,this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210,l:150}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.darkMode)for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],75);else for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScale"+e]=(0,_.Z)(this["cScale"+e],25);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleInv"+e]=this["cScaleInv"+e]||b(this["cScale"+e]);for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this.darkMode?this["cScalePeer"+e]=this["cScalePeer"+e]||(0,x.Z)(this["cScale"+e],10):this["cScalePeer"+e]=this["cScalePeer"+e]||(0,_.Z)(this["cScale"+e],10);this.scaleLabelColor=this.scaleLabelColor||this.labelTextColor;for(let e=0;e<this.THEME_COLOR_LIMIT;e++)this["cScaleLabel"+e]=this["cScaleLabel"+e]||this.scaleLabelColor;const t=this.darkMode?-4:-1;for(let e=0;e<5;e++)this["surface"+e]=this["surface"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(5+3*e)}),this["surfacePeer"+e]=this["surfacePeer"+e]||f(this.mainBkg,{h:180,s:-15,l:t*(8+3*e)});this.classText=this.classText||this.textColor,this.fillType0=this.fillType0||this.primaryColor,this.fillType1=this.fillType1||this.secondaryColor,this.fillType2=this.fillType2||f(this.primaryColor,{h:64}),this.fillType3=this.fillType3||f(this.secondaryColor,{h:64}),this.fillType4=this.fillType4||f(this.primaryColor,{h:-64}),this.fillType5=this.fillType5||f(this.secondaryColor,{h:-64}),this.fillType6=this.fillType6||f(this.primaryColor,{h:128}),this.fillType7=this.fillType7||f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-10}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-10}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-20}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-20}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-10}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.branchLabelColor=this.branchLabelColor||(this.darkMode?"black":this.labelTextColor),this.gitBranchLabel0=this.gitBranchLabel0||this.branchLabelColor,this.gitBranchLabel1=this.gitBranchLabel1||this.branchLabelColor,this.gitBranchLabel2=this.gitBranchLabel2||this.branchLabelColor,this.gitBranchLabel3=this.gitBranchLabel3||this.branchLabelColor,this.gitBranchLabel4=this.gitBranchLabel4||this.branchLabelColor,this.gitBranchLabel5=this.gitBranchLabel5||this.branchLabelColor,this.gitBranchLabel6=this.gitBranchLabel6||this.branchLabelColor,this.gitBranchLabel7=this.gitBranchLabel7||this.branchLabelColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},dark:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#333",this.primaryColor="#1f2020",this.secondaryColor=(0,x.Z)(this.primaryColor,16),this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=b(this.background),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.mainBkg="#1f2020",this.secondBkg="calculated",this.mainContrastColor="lightgrey",this.darkTextColor=(0,x.Z)(b("#323D47"),10),this.lineColor="calculated",this.border1="#81B1DB",this.border2=y(255,255,255,.25),this.arrowheadColor="calculated",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#181818",this.textColor="#ccc",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#F9FFFE",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="calculated",this.actorLineColor="calculated",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="calculated",this.activationBkgColor="calculated",this.sequenceNumberColor="black",this.sectionBkgColor=(0,_.Z)("#EAE8D9",30),this.altSectionBkgColor="calculated",this.sectionBkgColor2="#EAE8D9",this.taskBorderColor=y(255,255,255,70),this.taskBkgColor="calculated",this.taskTextColor="calculated",this.taskTextLightColor="calculated",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor=y(255,255,255,50),this.activeTaskBkgColor="#81B1DB",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="grey",this.critBorderColor="#E83737",this.critBkgColor="#E83737",this.taskTextDarkColor="calculated",this.todayLineColor="#DB5757",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="calculated",this.errorBkgColor="#a44141",this.errorTextColor="#ddd"}updateColors(){this.secondBkg=(0,x.Z)(this.mainBkg,16),this.lineColor=this.mainContrastColor,this.arrowheadColor=this.mainContrastColor,this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.edgeLabelBackground=(0,x.Z)(this.labelBackground,25),this.actorBorder=this.border1,this.actorBkg=this.mainBkg,this.actorTextColor=this.mainContrastColor,this.actorLineColor=this.mainContrastColor,this.signalColor=this.mainContrastColor,this.signalTextColor=this.mainContrastColor,this.labelBoxBkgColor=this.actorBkg,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.mainContrastColor,this.loopTextColor=this.mainContrastColor,this.noteBorderColor=this.secondaryBorderColor,this.noteBkgColor=this.secondBkg,this.noteTextColor=this.secondaryTextColor,this.activationBorderColor=this.border1,this.activationBkgColor=this.secondBkg,this.altSectionBkgColor=this.background,this.taskBkgColor=(0,x.Z)(this.mainBkg,23),this.taskTextColor=this.darkTextColor,this.taskTextLightColor=this.mainContrastColor,this.taskTextOutsideColor=this.taskTextLightColor,this.gridColor=this.mainContrastColor,this.doneTaskBkgColor=this.mainContrastColor,this.taskTextDarkColor=this.darkTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#555",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor="#f4f4f4",this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.cScale1=this.cScale1||"#0b0000",this.cScale2=this.cScale2||"#4d1037",this.cScale3=this.cScale3||"#3f5258",this.cScale4=this.cScale4||"#4f2f1b",this.cScale5=this.cScale5||"#6e0a0a",this.cScale6=this.cScale6||"#3b0048",this.cScale7=this.cScale7||"#995a01",this.cScale8=this.cScale8||"#154706",this.cScale9=this.cScale9||"#161722",this.cScale10=this.cScale10||"#00296f",this.cScale11=this.cScale11||"#01629c",this.cScale12=this.cScale12||"#010029",this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330});for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||b(this["cScale"+t]);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScalePeer"+t]=this["cScalePeer"+t]||(0,x.Z)(this["cScale"+t],10);for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-10)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(4*t-7)});this.scaleLabelColor=this.scaleLabelColor||(this.darkMode?"black":this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["pie"+t]=this["cScale"+t];this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.classText=this.primaryTextColor,this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||(this.darkMode?(0,_.Z)(this.secondaryColor,30):this.secondaryColor),this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=(0,x.Z)(this.secondaryColor,20),this.git1=(0,x.Z)(this.pie2||this.secondaryColor,20),this.git2=(0,x.Z)(this.pie3||this.tertiaryColor,20),this.git3=(0,x.Z)(this.pie4||f(this.primaryColor,{h:-30}),20),this.git4=(0,x.Z)(this.pie5||f(this.primaryColor,{h:-60}),20),this.git5=(0,x.Z)(this.pie6||f(this.primaryColor,{h:-90}),10),this.git6=(0,x.Z)(this.pie7||f(this.primaryColor,{h:60}),10),this.git7=(0,x.Z)(this.pie8||f(this.primaryColor,{h:120}),20),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||(0,x.Z)(this.background,12),this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||(0,x.Z)(this.background,2)}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},default:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#ECECFF",this.secondaryColor=f(this.primaryColor,{h:120}),this.secondaryColor="#ffffde",this.tertiaryColor=f(this.primaryColor,{h:-160}),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.tertiaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.background="white",this.mainBkg="#ECECFF",this.secondBkg="#ffffde",this.lineColor="#333333",this.border1="#9370DB",this.border2="#aaaa33",this.arrowheadColor="#333333",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.labelBackground="#e8e8e8",this.textColor="#333",this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="calculated",this.edgeLabelBackground="calculated",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="calculated",this.signalTextColor="calculated",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="calculated",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="calculated",this.altSectionBkgColor="calculated",this.sectionBkgColor2="calculated",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="calculated",this.taskTextLightColor="calculated",this.taskTextColor=this.taskTextLightColor,this.taskTextDarkColor="calculated",this.taskTextOutsideColor=this.taskTextDarkColor,this.taskTextClickableColor="calculated",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="calculated",this.doneTaskBkgColor="calculated",this.doneTaskBorderColor="calculated",this.critBorderColor="calculated",this.critBkgColor="calculated",this.todayLineColor="calculated",this.sectionBkgColor=y(102,102,255,.49),this.altSectionBkgColor="white",this.sectionBkgColor2="#fff400",this.taskBorderColor="#534fbc",this.taskBkgColor="#8a90dd",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="#534fbc",this.activeTaskBkgColor="#bfc7ff",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222",this.updateColors()}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,l:-(7+5*t)});if(this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor,"calculated"!==this.labelTextColor){this.cScaleLabel0=this.cScaleLabel0||b(this.labelTextColor),this.cScaleLabel3=this.cScaleLabel3||b(this.labelTextColor);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.labelTextColor}this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.titleColor=this.textColor,this.edgeLabelBackground=this.labelBackground,this.actorBorder=(0,x.Z)(this.border1,23),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.signalColor=this.textColor,this.signalTextColor=this.textColor,this.labelBoxBorderColor=this.actorBorder,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.nodeBorder,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||f(this.tertiaryColor,{l:-40}),this.pie4=this.pie4||f(this.primaryColor,{l:-10}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{l:-20}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-20}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-40}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:-40}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-40}),this.pie11=this.pie11||f(this.primaryColor,{h:-90,l:-40}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-30}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.labelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||(0,_.Z)(b(this.git0),25),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.gitBranchLabel0=this.gitBranchLabel0||b(this.labelTextColor),this.gitBranchLabel1=this.gitBranchLabel1||this.labelTextColor,this.gitBranchLabel2=this.gitBranchLabel2||this.labelTextColor,this.gitBranchLabel3=this.gitBranchLabel3||b(this.labelTextColor),this.gitBranchLabel4=this.gitBranchLabel4||this.labelTextColor,this.gitBranchLabel5=this.gitBranchLabel5||this.labelTextColor,this.gitBranchLabel6=this.gitBranchLabel6||this.labelTextColor,this.gitBranchLabel7=this.gitBranchLabel7||this.labelTextColor,this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},forest:{getThemeVariables:t=>{const e=new class{constructor(){this.background="#f4f4f4",this.primaryColor="#cde498",this.secondaryColor="#cdffb2",this.background="white",this.mainBkg="#cde498",this.secondBkg="#cdffb2",this.lineColor="green",this.border1="#13540c",this.border2="#6eaa49",this.arrowheadColor="green",this.fontFamily='"trebuchet ms", verdana, arial, sans-serif',this.fontSize="16px",this.tertiaryColor=(0,x.Z)("#cde498",10),this.primaryBorderColor=zt(this.primaryColor,this.darkMode),this.secondaryBorderColor=zt(this.secondaryColor,this.darkMode),this.tertiaryBorderColor=zt(this.tertiaryColor,this.darkMode),this.primaryTextColor=b(this.primaryColor),this.secondaryTextColor=b(this.secondaryColor),this.tertiaryTextColor=b(this.primaryColor),this.lineColor=b(this.background),this.textColor=b(this.background),this.THEME_COLOR_LIMIT=12,this.nodeBkg="calculated",this.nodeBorder="calculated",this.clusterBkg="calculated",this.clusterBorder="calculated",this.defaultLinkColor="calculated",this.titleColor="#333",this.edgeLabelBackground="#e8e8e8",this.actorBorder="calculated",this.actorBkg="calculated",this.actorTextColor="black",this.actorLineColor="grey",this.signalColor="#333",this.signalTextColor="#333",this.labelBoxBkgColor="calculated",this.labelBoxBorderColor="#326932",this.labelTextColor="calculated",this.loopTextColor="calculated",this.noteBorderColor="calculated",this.noteBkgColor="#fff5ad",this.noteTextColor="calculated",this.activationBorderColor="#666",this.activationBkgColor="#f4f4f4",this.sequenceNumberColor="white",this.sectionBkgColor="#6eaa49",this.altSectionBkgColor="white",this.sectionBkgColor2="#6eaa49",this.excludeBkgColor="#eeeeee",this.taskBorderColor="calculated",this.taskBkgColor="#487e3a",this.taskTextLightColor="white",this.taskTextColor="calculated",this.taskTextDarkColor="black",this.taskTextOutsideColor="calculated",this.taskTextClickableColor="#003163",this.activeTaskBorderColor="calculated",this.activeTaskBkgColor="calculated",this.gridColor="lightgrey",this.doneTaskBkgColor="lightgrey",this.doneTaskBorderColor="grey",this.critBorderColor="#ff8888",this.critBkgColor="red",this.todayLineColor="red",this.personBorder="calculated",this.personBkg="calculated",this.labelColor="black",this.errorBkgColor="#552222",this.errorTextColor="#552222"}updateColors(){this.cScale0=this.cScale0||this.primaryColor,this.cScale1=this.cScale1||this.secondaryColor,this.cScale2=this.cScale2||this.tertiaryColor,this.cScale3=this.cScale3||f(this.primaryColor,{h:30}),this.cScale4=this.cScale4||f(this.primaryColor,{h:60}),this.cScale5=this.cScale5||f(this.primaryColor,{h:90}),this.cScale6=this.cScale6||f(this.primaryColor,{h:120}),this.cScale7=this.cScale7||f(this.primaryColor,{h:150}),this.cScale8=this.cScale8||f(this.primaryColor,{h:210}),this.cScale9=this.cScale9||f(this.primaryColor,{h:270}),this.cScale10=this.cScale10||f(this.primaryColor,{h:300}),this.cScale11=this.cScale11||f(this.primaryColor,{h:330}),this.cScalePeer1=this.cScalePeer1||(0,_.Z)(this.secondaryColor,45),this.cScalePeer2=this.cScalePeer2||(0,_.Z)(this.tertiaryColor,40);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScale"+t]=(0,_.Z)(this["cScale"+t],10),this["cScalePeer"+t]=this["cScalePeer"+t]||(0,_.Z)(this["cScale"+t],25);for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleInv"+t]=this["cScaleInv"+t]||f(this["cScale"+t],{h:180});this.scaleLabelColor="calculated"!==this.scaleLabelColor&&this.scaleLabelColor?this.scaleLabelColor:this.labelTextColor;for(let t=0;t<this.THEME_COLOR_LIMIT;t++)this["cScaleLabel"+t]=this["cScaleLabel"+t]||this.scaleLabelColor;for(let t=0;t<5;t++)this["surface"+t]=this["surface"+t]||f(this.mainBkg,{h:30,s:-30,l:-(5+5*t)}),this["surfacePeer"+t]=this["surfacePeer"+t]||f(this.mainBkg,{h:30,s:-30,l:-(8+5*t)});this.nodeBkg=this.mainBkg,this.nodeBorder=this.border1,this.clusterBkg=this.secondBkg,this.clusterBorder=this.border2,this.defaultLinkColor=this.lineColor,this.actorBorder=(0,_.Z)(this.mainBkg,20),this.actorBkg=this.mainBkg,this.labelBoxBkgColor=this.actorBkg,this.labelTextColor=this.actorTextColor,this.loopTextColor=this.actorTextColor,this.noteBorderColor=this.border2,this.noteTextColor=this.actorTextColor,this.taskBorderColor=this.border1,this.taskTextColor=this.taskTextLightColor,this.taskTextOutsideColor=this.taskTextDarkColor,this.activeTaskBorderColor=this.taskBorderColor,this.activeTaskBkgColor=this.mainBkg,this.transitionColor=this.transitionColor||this.lineColor,this.transitionLabelColor=this.transitionLabelColor||this.textColor,this.stateLabelColor=this.stateLabelColor||this.stateBkg||this.primaryTextColor,this.stateBkg=this.stateBkg||this.mainBkg,this.labelBackgroundColor=this.labelBackgroundColor||this.stateBkg,this.compositeBackground=this.compositeBackground||this.background||this.tertiaryColor,this.altBackground=this.altBackground||"#f0f0f0",this.compositeTitleBackground=this.compositeTitleBackground||this.mainBkg,this.compositeBorder=this.compositeBorder||this.nodeBorder,this.innerEndBackground=this.primaryBorderColor,this.specialStateColor=this.lineColor,this.errorBkgColor=this.errorBkgColor||this.tertiaryColor,this.errorTextColor=this.errorTextColor||this.tertiaryTextColor,this.transitionColor=this.transitionColor||this.lineColor,this.classText=this.primaryTextColor,this.fillType0=this.primaryColor,this.fillType1=this.secondaryColor,this.fillType2=f(this.primaryColor,{h:64}),this.fillType3=f(this.secondaryColor,{h:64}),this.fillType4=f(this.primaryColor,{h:-64}),this.fillType5=f(this.secondaryColor,{h:-64}),this.fillType6=f(this.primaryColor,{h:128}),this.fillType7=f(this.secondaryColor,{h:128}),this.pie1=this.pie1||this.primaryColor,this.pie2=this.pie2||this.secondaryColor,this.pie3=this.pie3||this.tertiaryColor,this.pie4=this.pie4||f(this.primaryColor,{l:-30}),this.pie5=this.pie5||f(this.secondaryColor,{l:-30}),this.pie6=this.pie6||f(this.tertiaryColor,{h:40,l:-40}),this.pie7=this.pie7||f(this.primaryColor,{h:60,l:-10}),this.pie8=this.pie8||f(this.primaryColor,{h:-60,l:-10}),this.pie9=this.pie9||f(this.primaryColor,{h:120,l:0}),this.pie10=this.pie10||f(this.primaryColor,{h:60,l:-50}),this.pie11=this.pie11||f(this.primaryColor,{h:-60,l:-50}),this.pie12=this.pie12||f(this.primaryColor,{h:120,l:-50}),this.pieTitleTextSize=this.pieTitleTextSize||"25px",this.pieTitleTextColor=this.pieTitleTextColor||this.taskTextDarkColor,this.pieSectionTextSize=this.pieSectionTextSize||"17px",this.pieSectionTextColor=this.pieSectionTextColor||this.textColor,this.pieLegendTextSize=this.pieLegendTextSize||"17px",this.pieLegendTextColor=this.pieLegendTextColor||this.taskTextDarkColor,this.pieStrokeColor=this.pieStrokeColor||"black",this.pieStrokeWidth=this.pieStrokeWidth||"2px",this.pieOpacity=this.pieOpacity||"0.7",this.requirementBackground=this.requirementBackground||this.primaryColor,this.requirementBorderColor=this.requirementBorderColor||this.primaryBorderColor,this.requirementBorderSize=this.requirementBorderSize||this.primaryBorderColor,this.requirementTextColor=this.requirementTextColor||this.primaryTextColor,this.relationColor=this.relationColor||this.lineColor,this.relationLabelBackground=this.relationLabelBackground||this.edgeLabelBackground,this.relationLabelColor=this.relationLabelColor||this.actorTextColor,this.git0=this.git0||this.primaryColor,this.git1=this.git1||this.secondaryColor,this.git2=this.git2||this.tertiaryColor,this.git3=this.git3||f(this.primaryColor,{h:-30}),this.git4=this.git4||f(this.primaryColor,{h:-60}),this.git5=this.git5||f(this.primaryColor,{h:-90}),this.git6=this.git6||f(this.primaryColor,{h:60}),this.git7=this.git7||f(this.primaryColor,{h:120}),this.darkMode?(this.git0=(0,x.Z)(this.git0,25),this.git1=(0,x.Z)(this.git1,25),this.git2=(0,x.Z)(this.git2,25),this.git3=(0,x.Z)(this.git3,25),this.git4=(0,x.Z)(this.git4,25),this.git5=(0,x.Z)(this.git5,25),this.git6=(0,x.Z)(this.git6,25),this.git7=(0,x.Z)(this.git7,25)):(this.git0=(0,_.Z)(this.git0,25),this.git1=(0,_.Z)(this.git1,25),this.git2=(0,_.Z)(this.git2,25),this.git3=(0,_.Z)(this.git3,25),this.git4=(0,_.Z)(this.git4,25),this.git5=(0,_.Z)(this.git5,25),this.git6=(0,_.Z)(this.git6,25),this.git7=(0,_.Z)(this.git7,25)),this.gitInv0=this.gitInv0||b(this.git0),this.gitInv1=this.gitInv1||b(this.git1),this.gitInv2=this.gitInv2||b(this.git2),this.gitInv3=this.gitInv3||b(this.git3),this.gitInv4=this.gitInv4||b(this.git4),this.gitInv5=this.gitInv5||b(this.git5),this.gitInv6=this.gitInv6||b(this.git6),this.gitInv7=this.gitInv7||b(this.git7),this.tagLabelColor=this.tagLabelColor||this.primaryTextColor,this.tagLabelBackground=this.tagLabelBackground||this.primaryColor,this.tagLabelBorder=this.tagBorder||this.primaryBorderColor,this.tagLabelFontSize=this.tagLabelFontSize||"10px",this.commitLabelColor=this.commitLabelColor||this.secondaryTextColor,this.commitLabelBackground=this.commitLabelBackground||this.secondaryColor,this.commitLabelFontSize=this.commitLabelFontSize||"10px",this.attributeBackgroundColorOdd=this.attributeBackgroundColorOdd||Ut,this.attributeBackgroundColorEven=this.attributeBackgroundColorEven||Wt}calculate(t){if("object"!=typeof t)return void this.updateColors();const e=Object.keys(t);e.forEach((e=>{this[e]=t[e]})),this.updateColors(),e.forEach((e=>{this[e]=t[e]}))}};return e.calculate(t),e}},neutral:{getThemeVariables:t=>{const e=new qt;return e.calculate(t),e}}},Vt={theme:"default",themeVariables:Ht.default.getThemeVariables(),themeCSS:void 0,maxTextSize:5e4,darkMode:!1,fontFamily:'"trebuchet ms", verdana, arial, sans-serif;',logLevel:5,securityLevel:"strict",startOnLoad:!0,arrowMarkerAbsolute:!1,secure:["secure","securityLevel","startOnLoad","maxTextSize"],deterministicIds:!1,deterministicIDSeed:void 0,flowchart:{titleTopMargin:25,diagramPadding:8,htmlLabels:!0,nodeSpacing:50,rankSpacing:50,curve:"basis",padding:15,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},sequence:{hideUnusedParticipants:!1,activationWidth:10,diagramMarginX:50,diagramMarginY:10,actorMargin:50,width:150,height:65,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",mirrorActors:!0,forceMenus:!1,bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,showSequenceNumbers:!1,actorFontSize:14,actorFontFamily:'"Open Sans", sans-serif',actorFontWeight:400,noteFontSize:14,noteFontFamily:'"trebuchet ms", verdana, arial, sans-serif',noteFontWeight:400,noteAlign:"center",messageFontSize:16,messageFontFamily:'"trebuchet ms", verdana, arial, sans-serif',messageFontWeight:400,wrap:!1,wrapPadding:10,labelBoxWidth:50,labelBoxHeight:20,messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},noteFont:function(){return{fontFamily:this.noteFontFamily,fontSize:this.noteFontSize,fontWeight:this.noteFontWeight}},actorFont:function(){return{fontFamily:this.actorFontFamily,fontSize:this.actorFontSize,fontWeight:this.actorFontWeight}}},gantt:{titleTopMargin:25,barHeight:20,barGap:4,topPadding:50,rightPadding:75,leftPadding:75,gridLineStartPadding:35,fontSize:11,sectionFontSize:11,numberSectionStyles:4,axisFormat:"%Y-%m-%d",tickInterval:void 0,useMaxWidth:!0,topAxis:!1,useWidth:void 0},journey:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"]},timeline:{diagramMarginX:50,diagramMarginY:10,leftMargin:150,width:150,height:50,boxMargin:10,boxTextMargin:5,noteMargin:10,messageMargin:35,messageAlign:"center",bottomMarginAdj:1,useMaxWidth:!0,rightAngles:!1,taskFontSize:14,taskFontFamily:'"Open Sans", sans-serif',taskMargin:50,activationWidth:10,textPlacement:"fo",actorColours:["#8FBC8F","#7CFC00","#00FFFF","#20B2AA","#B0E0E6","#FFFFE0"],sectionFills:["#191970","#8B008B","#4B0082","#2F4F4F","#800000","#8B4513","#00008B"],sectionColours:["#fff"],disableMulticolor:!1},class:{titleTopMargin:25,arrowMarkerAbsolute:!1,dividerMargin:10,padding:5,textHeight:10,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},state:{titleTopMargin:25,dividerMargin:10,sizeUnit:5,padding:8,textHeight:10,titleShift:-15,noteMargin:10,forkWidth:70,forkHeight:7,miniPadding:2,fontSizeFactor:5.02,fontSize:24,labelHeight:16,edgeLengthFactor:"20",compositTitleSize:35,radius:5,useMaxWidth:!0,defaultRenderer:"dagre-wrapper"},er:{titleTopMargin:25,diagramPadding:20,layoutDirection:"TB",minEntityWidth:100,minEntityHeight:75,entityPadding:15,stroke:"gray",fill:"honeydew",fontSize:12,useMaxWidth:!0},pie:{useWidth:void 0,useMaxWidth:!0},requirement:{useWidth:void 0,useMaxWidth:!0,rect_fill:"#f9f9f9",text_color:"#333",rect_border_size:"0.5px",rect_border_color:"#bbb",rect_min_width:200,rect_min_height:200,fontSize:14,rect_padding:10,line_height:20},gitGraph:{titleTopMargin:25,diagramPadding:8,nodeLabel:{width:75,height:100,x:-25,y:0},mainBranchName:"main",mainBranchOrder:0,showCommitLabel:!0,showBranches:!0,rotateCommitLabel:!0},c4:{useWidth:void 0,diagramMarginX:50,diagramMarginY:10,c4ShapeMargin:50,c4ShapePadding:20,width:216,height:60,boxMargin:10,useMaxWidth:!0,c4ShapeInRow:4,nextLinePaddingX:0,c4BoundaryInRow:2,personFontSize:14,personFontFamily:'"Open Sans", sans-serif',personFontWeight:"normal",external_personFontSize:14,external_personFontFamily:'"Open Sans", sans-serif',external_personFontWeight:"normal",systemFontSize:14,systemFontFamily:'"Open Sans", sans-serif',systemFontWeight:"normal",external_systemFontSize:14,external_systemFontFamily:'"Open Sans", sans-serif',external_systemFontWeight:"normal",system_dbFontSize:14,system_dbFontFamily:'"Open Sans", sans-serif',system_dbFontWeight:"normal",external_system_dbFontSize:14,external_system_dbFontFamily:'"Open Sans", sans-serif',external_system_dbFontWeight:"normal",system_queueFontSize:14,system_queueFontFamily:'"Open Sans", sans-serif',system_queueFontWeight:"normal",external_system_queueFontSize:14,external_system_queueFontFamily:'"Open Sans", sans-serif',external_system_queueFontWeight:"normal",boundaryFontSize:14,boundaryFontFamily:'"Open Sans", sans-serif',boundaryFontWeight:"normal",messageFontSize:12,messageFontFamily:'"Open Sans", sans-serif',messageFontWeight:"normal",containerFontSize:14,containerFontFamily:'"Open Sans", sans-serif',containerFontWeight:"normal",external_containerFontSize:14,external_containerFontFamily:'"Open Sans", sans-serif',external_containerFontWeight:"normal",container_dbFontSize:14,container_dbFontFamily:'"Open Sans", sans-serif',container_dbFontWeight:"normal",external_container_dbFontSize:14,external_container_dbFontFamily:'"Open Sans", sans-serif',external_container_dbFontWeight:"normal",container_queueFontSize:14,container_queueFontFamily:'"Open Sans", sans-serif',container_queueFontWeight:"normal",external_container_queueFontSize:14,external_container_queueFontFamily:'"Open Sans", sans-serif',external_container_queueFontWeight:"normal",componentFontSize:14,componentFontFamily:'"Open Sans", sans-serif',componentFontWeight:"normal",external_componentFontSize:14,external_componentFontFamily:'"Open Sans", sans-serif',external_componentFontWeight:"normal",component_dbFontSize:14,component_dbFontFamily:'"Open Sans", sans-serif',component_dbFontWeight:"normal",external_component_dbFontSize:14,external_component_dbFontFamily:'"Open Sans", sans-serif',external_component_dbFontWeight:"normal",component_queueFontSize:14,component_queueFontFamily:'"Open Sans", sans-serif',component_queueFontWeight:"normal",external_component_queueFontSize:14,external_component_queueFontFamily:'"Open Sans", sans-serif',external_component_queueFontWeight:"normal",wrap:!0,wrapPadding:10,personFont:function(){return{fontFamily:this.personFontFamily,fontSize:this.personFontSize,fontWeight:this.personFontWeight}},external_personFont:function(){return{fontFamily:this.external_personFontFamily,fontSize:this.external_personFontSize,fontWeight:this.external_personFontWeight}},systemFont:function(){return{fontFamily:this.systemFontFamily,fontSize:this.systemFontSize,fontWeight:this.systemFontWeight}},external_systemFont:function(){return{fontFamily:this.external_systemFontFamily,fontSize:this.external_systemFontSize,fontWeight:this.external_systemFontWeight}},system_dbFont:function(){return{fontFamily:this.system_dbFontFamily,fontSize:this.system_dbFontSize,fontWeight:this.system_dbFontWeight}},external_system_dbFont:function(){return{fontFamily:this.external_system_dbFontFamily,fontSize:this.external_system_dbFontSize,fontWeight:this.external_system_dbFontWeight}},system_queueFont:function(){return{fontFamily:this.system_queueFontFamily,fontSize:this.system_queueFontSize,fontWeight:this.system_queueFontWeight}},external_system_queueFont:function(){return{fontFamily:this.external_system_queueFontFamily,fontSize:this.external_system_queueFontSize,fontWeight:this.external_system_queueFontWeight}},containerFont:function(){return{fontFamily:this.containerFontFamily,fontSize:this.containerFontSize,fontWeight:this.containerFontWeight}},external_containerFont:function(){return{fontFamily:this.external_containerFontFamily,fontSize:this.external_containerFontSize,fontWeight:this.external_containerFontWeight}},container_dbFont:function(){return{fontFamily:this.container_dbFontFamily,fontSize:this.container_dbFontSize,fontWeight:this.container_dbFontWeight}},external_container_dbFont:function(){return{fontFamily:this.external_container_dbFontFamily,fontSize:this.external_container_dbFontSize,fontWeight:this.external_container_dbFontWeight}},container_queueFont:function(){return{fontFamily:this.container_queueFontFamily,fontSize:this.container_queueFontSize,fontWeight:this.container_queueFontWeight}},external_container_queueFont:function(){return{fontFamily:this.external_container_queueFontFamily,fontSize:this.external_container_queueFontSize,fontWeight:this.external_container_queueFontWeight}},componentFont:function(){return{fontFamily:this.componentFontFamily,fontSize:this.componentFontSize,fontWeight:this.componentFontWeight}},external_componentFont:function(){return{fontFamily:this.external_componentFontFamily,fontSize:this.external_componentFontSize,fontWeight:this.external_componentFontWeight}},component_dbFont:function(){return{fontFamily:this.component_dbFontFamily,fontSize:this.component_dbFontSize,fontWeight:this.component_dbFontWeight}},external_component_dbFont:function(){return{fontFamily:this.external_component_dbFontFamily,fontSize:this.external_component_dbFontSize,fontWeight:this.external_component_dbFontWeight}},component_queueFont:function(){return{fontFamily:this.component_queueFontFamily,fontSize:this.component_queueFontSize,fontWeight:this.component_queueFontWeight}},external_component_queueFont:function(){return{fontFamily:this.external_component_queueFontFamily,fontSize:this.external_component_queueFontSize,fontWeight:this.external_component_queueFontWeight}},boundaryFont:function(){return{fontFamily:this.boundaryFontFamily,fontSize:this.boundaryFontSize,fontWeight:this.boundaryFontWeight}},messageFont:function(){return{fontFamily:this.messageFontFamily,fontSize:this.messageFontSize,fontWeight:this.messageFontWeight}},person_bg_color:"#08427B",person_border_color:"#073B6F",external_person_bg_color:"#686868",external_person_border_color:"#8A8A8A",system_bg_color:"#1168BD",system_border_color:"#3C7FC0",system_db_bg_color:"#1168BD",system_db_border_color:"#3C7FC0",system_queue_bg_color:"#1168BD",system_queue_border_color:"#3C7FC0",external_system_bg_color:"#999999",external_system_border_color:"#8A8A8A",external_system_db_bg_color:"#999999",external_system_db_border_color:"#8A8A8A",external_system_queue_bg_color:"#999999",external_system_queue_border_color:"#8A8A8A",container_bg_color:"#438DD5",container_border_color:"#3C7FC0",container_db_bg_color:"#438DD5",container_db_border_color:"#3C7FC0",container_queue_bg_color:"#438DD5",container_queue_border_color:"#3C7FC0",external_container_bg_color:"#B3B3B3",external_container_border_color:"#A6A6A6",external_container_db_bg_color:"#B3B3B3",external_container_db_border_color:"#A6A6A6",external_container_queue_bg_color:"#B3B3B3",external_container_queue_border_color:"#A6A6A6",component_bg_color:"#85BBF0",component_border_color:"#78A8D8",component_db_bg_color:"#85BBF0",component_db_border_color:"#78A8D8",component_queue_bg_color:"#85BBF0",component_queue_border_color:"#78A8D8",external_component_bg_color:"#CCCCCC",external_component_border_color:"#BFBFBF",external_component_db_bg_color:"#CCCCCC",external_component_db_border_color:"#BFBFBF",external_component_queue_bg_color:"#CCCCCC",external_component_queue_border_color:"#BFBFBF"},mindmap:{useMaxWidth:!0,padding:10,maxNodeWidth:200},fontSize:16};Vt.class&&(Vt.class.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute),Vt.gitGraph&&(Vt.gitGraph.arrowMarkerAbsolute=Vt.arrowMarkerAbsolute);const Gt=(t,e="")=>Object.keys(t).reduce(((n,r)=>Array.isArray(t[r])?n:"object"==typeof t[r]&&null!==t[r]?[...n,e+r,...Gt(t[r],"")]:[...n,e+r]),[]),Xt=Gt(Vt,""),Kt=Vt;function Qt(t){return null==t}var Jt={isNothing:Qt,isObject:function(t){return"object"==typeof t&&null!==t},toArray:function(t){return Array.isArray(t)?t:Qt(t)?[]:[t]},repeat:function(t,e){var n,r="";for(n=0;n<e;n+=1)r+=t;return r},isNegativeZero:function(t){return 0===t&&Number.NEGATIVE_INFINITY===1/t},extend:function(t,e){var n,r,i,a;if(e)for(n=0,r=(a=Object.keys(e)).length;n<r;n+=1)t[i=a[n]]=e[i];return t}};function te(t,e){var n="",r=t.reason||"(unknown reason)";return t.mark?(t.mark.name&&(n+='in "'+t.mark.name+'" '),n+="("+(t.mark.line+1)+":"+(t.mark.column+1)+")",!e&&t.mark.snippet&&(n+="\n\n"+t.mark.snippet),r+" "+n):r}function ee(t,e){Error.call(this),this.name="YAMLException",this.reason=t,this.mark=e,this.message=te(this,!1),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=(new Error).stack||""}ee.prototype=Object.create(Error.prototype),ee.prototype.constructor=ee,ee.prototype.toString=function(t){return this.name+": "+te(this,t)};var ne=ee;function re(t,e,n,r,i){var a="",s="",o=Math.floor(i/2)-1;return r-e>o&&(e=r-o+(a=" ... ").length),n-r>o&&(n=r+o-(s=" ...").length),{str:a+t.slice(e,n).replace(/\t/g,"\u2192")+s,pos:r-e+a.length}}function ie(t,e){return Jt.repeat(" ",e-t.length)+t}var ae=function(t,e){if(e=Object.create(e||null),!t.buffer)return null;e.maxLength||(e.maxLength=79),"number"!=typeof e.indent&&(e.indent=1),"number"!=typeof e.linesBefore&&(e.linesBefore=3),"number"!=typeof e.linesAfter&&(e.linesAfter=2);for(var n,r=/\r?\n|\r|\0/g,i=[0],a=[],s=-1;n=r.exec(t.buffer);)a.push(n.index),i.push(n.index+n[0].length),t.position<=n.index&&s<0&&(s=i.length-2);s<0&&(s=i.length-1);var o,c,l="",h=Math.min(t.line+e.linesAfter,a.length).toString().length,u=e.maxLength-(e.indent+h+3);for(o=1;o<=e.linesBefore&&!(s-o<0);o++)c=re(t.buffer,i[s-o],a[s-o],t.position-(i[s]-i[s-o]),u),l=Jt.repeat(" ",e.indent)+ie((t.line-o+1).toString(),h)+" | "+c.str+"\n"+l;for(c=re(t.buffer,i[s],a[s],t.position,u),l+=Jt.repeat(" ",e.indent)+ie((t.line+1).toString(),h)+" | "+c.str+"\n",l+=Jt.repeat("-",e.indent+h+3+c.pos)+"^\n",o=1;o<=e.linesAfter&&!(s+o>=a.length);o++)c=re(t.buffer,i[s+o],a[s+o],t.position-(i[s]-i[s+o]),u),l+=Jt.repeat(" ",e.indent)+ie((t.line+o+1).toString(),h)+" | "+c.str+"\n";return l.replace(/\n$/,"")},se=["kind","multi","resolve","construct","instanceOf","predicate","represent","representName","defaultStyle","styleAliases"],oe=["scalar","sequence","mapping"];var ce=function(t,e){var n,r;if(e=e||{},Object.keys(e).forEach((function(e){if(-1===se.indexOf(e))throw new ne('Unknown option "'+e+'" is met in definition of "'+t+'" YAML type.')})),this.options=e,this.tag=t,this.kind=e.kind||null,this.resolve=e.resolve||function(){return!0},this.construct=e.construct||function(t){return t},this.instanceOf=e.instanceOf||null,this.predicate=e.predicate||null,this.represent=e.represent||null,this.representName=e.representName||null,this.defaultStyle=e.defaultStyle||null,this.multi=e.multi||!1,this.styleAliases=(n=e.styleAliases||null,r={},null!==n&&Object.keys(n).forEach((function(t){n[t].forEach((function(e){r[String(e)]=t}))})),r),-1===oe.indexOf(this.kind))throw new ne('Unknown kind "'+this.kind+'" is specified for "'+t+'" YAML type.')};function le(t,e){var n=[];return t[e].forEach((function(t){var e=n.length;n.forEach((function(n,r){n.tag===t.tag&&n.kind===t.kind&&n.multi===t.multi&&(e=r)})),n[e]=t})),n}function he(t){return this.extend(t)}he.prototype.extend=function(t){var e=[],n=[];if(t instanceof ce)n.push(t);else if(Array.isArray(t))n=n.concat(t);else{if(!t||!Array.isArray(t.implicit)&&!Array.isArray(t.explicit))throw new ne("Schema.extend argument should be a Type, [ Type ], or a schema definition ({ implicit: [...], explicit: [...] })");t.implicit&&(e=e.concat(t.implicit)),t.explicit&&(n=n.concat(t.explicit))}e.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.");if(t.loadKind&&"scalar"!==t.loadKind)throw new ne("There is a non-scalar type in the implicit list of a schema. Implicit resolving of such types is not supported.");if(t.multi)throw new ne("There is a multi type in the implicit list of a schema. Multi tags can only be listed as explicit.")})),n.forEach((function(t){if(!(t instanceof ce))throw new ne("Specified list of YAML types (or a single Type object) contains a non-Type object.")}));var r=Object.create(he.prototype);return r.implicit=(this.implicit||[]).concat(e),r.explicit=(this.explicit||[]).concat(n),r.compiledImplicit=le(r,"implicit"),r.compiledExplicit=le(r,"explicit"),r.compiledTypeMap=function(){var t,e,n={scalar:{},sequence:{},mapping:{},fallback:{},multi:{scalar:[],sequence:[],mapping:[],fallback:[]}};function r(t){t.multi?(n.multi[t.kind].push(t),n.multi.fallback.push(t)):n[t.kind][t.tag]=n.fallback[t.tag]=t}for(t=0,e=arguments.length;t<e;t+=1)arguments[t].forEach(r);return n}(r.compiledImplicit,r.compiledExplicit),r};var ue=new he({explicit:[new ce("tag:yaml.org,2002:str",{kind:"scalar",construct:function(t){return null!==t?t:""}}),new ce("tag:yaml.org,2002:seq",{kind:"sequence",construct:function(t){return null!==t?t:[]}}),new ce("tag:yaml.org,2002:map",{kind:"mapping",construct:function(t){return null!==t?t:{}}})]});var de=new ce("tag:yaml.org,2002:null",{kind:"scalar",resolve:function(t){if(null===t)return!0;var e=t.length;return 1===e&&"~"===t||4===e&&("null"===t||"Null"===t||"NULL"===t)},construct:function(){return null},predicate:function(t){return null===t},represent:{canonical:function(){return"~"},lowercase:function(){return"null"},uppercase:function(){return"NULL"},camelcase:function(){return"Null"},empty:function(){return""}},defaultStyle:"lowercase"});var pe=new ce("tag:yaml.org,2002:bool",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e=t.length;return 4===e&&("true"===t||"True"===t||"TRUE"===t)||5===e&&("false"===t||"False"===t||"FALSE"===t)},construct:function(t){return"true"===t||"True"===t||"TRUE"===t},predicate:function(t){return"[object Boolean]"===Object.prototype.toString.call(t)},represent:{lowercase:function(t){return t?"true":"false"},uppercase:function(t){return t?"TRUE":"FALSE"},camelcase:function(t){return t?"True":"False"}},defaultStyle:"lowercase"});function fe(t){return 48<=t&&t<=55}function ge(t){return 48<=t&&t<=57}var ye=new ce("tag:yaml.org,2002:int",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=t.length,i=0,a=!1;if(!r)return!1;if("-"!==(e=t[i])&&"+"!==e||(e=t[++i]),"0"===e){if(i+1===r)return!0;if("b"===(e=t[++i])){for(i++;i<r;i++)if("_"!==(e=t[i])){if("0"!==e&&"1"!==e)return!1;a=!0}return a&&"_"!==e}if("x"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!(48<=(n=t.charCodeAt(i))&&n<=57||65<=n&&n<=70||97<=n&&n<=102))return!1;a=!0}return a&&"_"!==e}if("o"===e){for(i++;i<r;i++)if("_"!==(e=t[i])){if(!fe(t.charCodeAt(i)))return!1;a=!0}return a&&"_"!==e}}if("_"===e)return!1;for(;i<r;i++)if("_"!==(e=t[i])){if(!ge(t.charCodeAt(i)))return!1;a=!0}return!(!a||"_"===e)},construct:function(t){var e,n=t,r=1;if(-1!==n.indexOf("_")&&(n=n.replace(/_/g,"")),"-"!==(e=n[0])&&"+"!==e||("-"===e&&(r=-1),e=(n=n.slice(1))[0]),"0"===n)return 0;if("0"===e){if("b"===n[1])return r*parseInt(n.slice(2),2);if("x"===n[1])return r*parseInt(n.slice(2),16);if("o"===n[1])return r*parseInt(n.slice(2),8)}return r*parseInt(n,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&t%1==0&&!Jt.isNegativeZero(t)},represent:{binary:function(t){return t>=0?"0b"+t.toString(2):"-0b"+t.toString(2).slice(1)},octal:function(t){return t>=0?"0o"+t.toString(8):"-0o"+t.toString(8).slice(1)},decimal:function(t){return t.toString(10)},hexadecimal:function(t){return t>=0?"0x"+t.toString(16).toUpperCase():"-0x"+t.toString(16).toUpperCase().slice(1)}},defaultStyle:"decimal",styleAliases:{binary:[2,"bin"],octal:[8,"oct"],decimal:[10,"dec"],hexadecimal:[16,"hex"]}}),me=new RegExp("^(?:[-+]?(?:[0-9][0-9_]*)(?:\\.[0-9_]*)?(?:[eE][-+]?[0-9]+)?|\\.[0-9_]+(?:[eE][-+]?[0-9]+)?|[-+]?\\.(?:inf|Inf|INF)|\\.(?:nan|NaN|NAN))$");var be=/^[-+]?[0-9]+e/;var _e=new ce("tag:yaml.org,2002:float",{kind:"scalar",resolve:function(t){return null!==t&&!(!me.test(t)||"_"===t[t.length-1])},construct:function(t){var e,n;return n="-"===(e=t.replace(/_/g,"").toLowerCase())[0]?-1:1,"+-".indexOf(e[0])>=0&&(e=e.slice(1)),".inf"===e?1===n?Number.POSITIVE_INFINITY:Number.NEGATIVE_INFINITY:".nan"===e?NaN:n*parseFloat(e,10)},predicate:function(t){return"[object Number]"===Object.prototype.toString.call(t)&&(t%1!=0||Jt.isNegativeZero(t))},represent:function(t,e){var n;if(isNaN(t))switch(e){case"lowercase":return".nan";case"uppercase":return".NAN";case"camelcase":return".NaN"}else if(Number.POSITIVE_INFINITY===t)switch(e){case"lowercase":return".inf";case"uppercase":return".INF";case"camelcase":return".Inf"}else if(Number.NEGATIVE_INFINITY===t)switch(e){case"lowercase":return"-.inf";case"uppercase":return"-.INF";case"camelcase":return"-.Inf"}else if(Jt.isNegativeZero(t))return"-0.0";return n=t.toString(10),be.test(n)?n.replace("e",".e"):n},defaultStyle:"lowercase"}),xe=ue.extend({implicit:[de,pe,ye,_e]}),ve=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9])-([0-9][0-9])$"),ke=new RegExp("^([0-9][0-9][0-9][0-9])-([0-9][0-9]?)-([0-9][0-9]?)(?:[Tt]|[ \\t]+)([0-9][0-9]?):([0-9][0-9]):([0-9][0-9])(?:\\.([0-9]*))?(?:[ \\t]*(Z|([-+])([0-9][0-9]?)(?::([0-9][0-9]))?))?$");var we=new ce("tag:yaml.org,2002:timestamp",{kind:"scalar",resolve:function(t){return null!==t&&(null!==ve.exec(t)||null!==ke.exec(t))},construct:function(t){var e,n,r,i,a,s,o,c,l=0,h=null;if(null===(e=ve.exec(t))&&(e=ke.exec(t)),null===e)throw new Error("Date resolve error");if(n=+e[1],r=+e[2]-1,i=+e[3],!e[4])return new Date(Date.UTC(n,r,i));if(a=+e[4],s=+e[5],o=+e[6],e[7]){for(l=e[7].slice(0,3);l.length<3;)l+="0";l=+l}return e[9]&&(h=6e4*(60*+e[10]+ +(e[11]||0)),"-"===e[9]&&(h=-h)),c=new Date(Date.UTC(n,r,i,a,s,o,l)),h&&c.setTime(c.getTime()-h),c},instanceOf:Date,represent:function(t){return t.toISOString()}});var Ee=new ce("tag:yaml.org,2002:merge",{kind:"scalar",resolve:function(t){return"<<"===t||null===t}}),Ce="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\n\r";var Te=new ce("tag:yaml.org,2002:binary",{kind:"scalar",resolve:function(t){if(null===t)return!1;var e,n,r=0,i=t.length,a=Ce;for(n=0;n<i;n++)if(!((e=a.indexOf(t.charAt(n)))>64)){if(e<0)return!1;r+=6}return r%8==0},construct:function(t){var e,n,r=t.replace(/[\r\n=]/g,""),i=r.length,a=Ce,s=0,o=[];for(e=0;e<i;e++)e%4==0&&e&&(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)),s=s<<6|a.indexOf(r.charAt(e));return 0===(n=i%4*6)?(o.push(s>>16&255),o.push(s>>8&255),o.push(255&s)):18===n?(o.push(s>>10&255),o.push(s>>2&255)):12===n&&o.push(s>>4&255),new Uint8Array(o)},predicate:function(t){return"[object Uint8Array]"===Object.prototype.toString.call(t)},represent:function(t){var e,n,r="",i=0,a=t.length,s=Ce;for(e=0;e<a;e++)e%3==0&&e&&(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]),i=(i<<8)+t[e];return 0===(n=a%3)?(r+=s[i>>18&63],r+=s[i>>12&63],r+=s[i>>6&63],r+=s[63&i]):2===n?(r+=s[i>>10&63],r+=s[i>>4&63],r+=s[i<<2&63],r+=s[64]):1===n&&(r+=s[i>>2&63],r+=s[i<<4&63],r+=s[64],r+=s[64]),r}}),Se=Object.prototype.hasOwnProperty,Ae=Object.prototype.toString;var Le=new ce("tag:yaml.org,2002:omap",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=[],o=t;for(e=0,n=o.length;e<n;e+=1){if(r=o[e],a=!1,"[object Object]"!==Ae.call(r))return!1;for(i in r)if(Se.call(r,i)){if(a)return!1;a=!0}if(!a)return!1;if(-1!==s.indexOf(i))return!1;s.push(i)}return!0},construct:function(t){return null!==t?t:[]}}),Be=Object.prototype.toString;var Ne=new ce("tag:yaml.org,2002:pairs",{kind:"sequence",resolve:function(t){if(null===t)return!0;var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1){if(r=s[e],"[object Object]"!==Be.call(r))return!1;if(1!==(i=Object.keys(r)).length)return!1;a[e]=[i[0],r[i[0]]]}return!0},construct:function(t){if(null===t)return[];var e,n,r,i,a,s=t;for(a=new Array(s.length),e=0,n=s.length;e<n;e+=1)r=s[e],i=Object.keys(r),a[e]=[i[0],r[i[0]]];return a}}),De=Object.prototype.hasOwnProperty;var Oe=new ce("tag:yaml.org,2002:set",{kind:"mapping",resolve:function(t){if(null===t)return!0;var e,n=t;for(e in n)if(De.call(n,e)&&null!==n[e])return!1;return!0},construct:function(t){return null!==t?t:{}}}),Me=xe.extend({implicit:[we,Ee],explicit:[Te,Le,Ne,Oe]}),Ie=Object.prototype.hasOwnProperty,Fe=/[\x00-\x08\x0B\x0C\x0E-\x1F\x7F-\x84\x86-\x9F\uFFFE\uFFFF]|[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?:[^\uD800-\uDBFF]|^)[\uDC00-\uDFFF]/,$e=/[\x85\u2028\u2029]/,Re=/[,\[\]\{\}]/,Ze=/^(?:!|!!|![a-z\-]+!)$/i,Pe=/^(?:!|[^,\[\]\{\}])(?:%[0-9a-f]{2}|[0-9a-z\-#;\/\?:@&=\+\$,_\.!~\*'\(\)\[\]])*$/i;function je(t){return Object.prototype.toString.call(t)}function Ye(t){return 10===t||13===t}function ze(t){return 9===t||32===t}function Ue(t){return 9===t||32===t||10===t||13===t}function We(t){return 44===t||91===t||93===t||123===t||125===t}function qe(t){var e;return 48<=t&&t<=57?t-48:97<=(e=32|t)&&e<=102?e-97+10:-1}function He(t){return 48===t?"\0":97===t?"\x07":98===t?"\b":116===t||9===t?"\t":110===t?"\n":118===t?"\v":102===t?"\f":114===t?"\r":101===t?"\x1b":32===t?" ":34===t?'"':47===t?"/":92===t?"\\":78===t?"\x85":95===t?"\xa0":76===t?"\u2028":80===t?"\u2029":""}function Ve(t){return t<=65535?String.fromCharCode(t):String.fromCharCode(55296+(t-65536>>10),56320+(t-65536&1023))}for(var Ge=new Array(256),Xe=new Array(256),Ke=0;Ke<256;Ke++)Ge[Ke]=He(Ke)?1:0,Xe[Ke]=He(Ke);function Qe(t,e){this.input=t,this.filename=e.filename||null,this.schema=e.schema||Me,this.onWarning=e.onWarning||null,this.legacy=e.legacy||!1,this.json=e.json||!1,this.listener=e.listener||null,this.implicitTypes=this.schema.compiledImplicit,this.typeMap=this.schema.compiledTypeMap,this.length=t.length,this.position=0,this.line=0,this.lineStart=0,this.lineIndent=0,this.firstTabInLine=-1,this.documents=[]}function Je(t,e){var n={name:t.filename,buffer:t.input.slice(0,-1),position:t.position,line:t.line,column:t.position-t.lineStart};return n.snippet=ae(n),new ne(e,n)}function tn(t,e){throw Je(t,e)}function en(t,e){t.onWarning&&t.onWarning.call(null,Je(t,e))}var nn={YAML:function(t,e,n){var r,i,a;null!==t.version&&tn(t,"duplication of %YAML directive"),1!==n.length&&tn(t,"YAML directive accepts exactly one argument"),null===(r=/^([0-9]+)\.([0-9]+)$/.exec(n[0]))&&tn(t,"ill-formed argument of the YAML directive"),i=parseInt(r[1],10),a=parseInt(r[2],10),1!==i&&tn(t,"unacceptable YAML version of the document"),t.version=n[0],t.checkLineBreaks=a<2,1!==a&&2!==a&&en(t,"unsupported YAML version of the document")},TAG:function(t,e,n){var r,i;2!==n.length&&tn(t,"TAG directive accepts exactly two arguments"),r=n[0],i=n[1],Ze.test(r)||tn(t,"ill-formed tag handle (first argument) of the TAG directive"),Ie.call(t.tagMap,r)&&tn(t,'there is a previously declared suffix for "'+r+'" tag handle'),Pe.test(i)||tn(t,"ill-formed tag prefix (second argument) of the TAG directive");try{i=decodeURIComponent(i)}catch(a){tn(t,"tag prefix is malformed: "+i)}t.tagMap[r]=i}};function rn(t,e,n,r){var i,a,s,o;if(e<n){if(o=t.input.slice(e,n),r)for(i=0,a=o.length;i<a;i+=1)9===(s=o.charCodeAt(i))||32<=s&&s<=1114111||tn(t,"expected valid JSON character");else Fe.test(o)&&tn(t,"the stream contains non-printable characters");t.result+=o}}function an(t,e,n,r){var i,a,s,o;for(Jt.isObject(n)||tn(t,"cannot merge mappings; the provided source object is unacceptable"),s=0,o=(i=Object.keys(n)).length;s<o;s+=1)a=i[s],Ie.call(e,a)||(e[a]=n[a],r[a]=!0)}function sn(t,e,n,r,i,a,s,o,c){var l,h;if(Array.isArray(i))for(l=0,h=(i=Array.prototype.slice.call(i)).length;l<h;l+=1)Array.isArray(i[l])&&tn(t,"nested arrays are not supported inside keys"),"object"==typeof i&&"[object Object]"===je(i[l])&&(i[l]="[object Object]");if("object"==typeof i&&"[object Object]"===je(i)&&(i="[object Object]"),i=String(i),null===e&&(e={}),"tag:yaml.org,2002:merge"===r)if(Array.isArray(a))for(l=0,h=a.length;l<h;l+=1)an(t,e,a[l],n);else an(t,e,a,n);else t.json||Ie.call(n,i)||!Ie.call(e,i)||(t.line=s||t.line,t.lineStart=o||t.lineStart,t.position=c||t.position,tn(t,"duplicated mapping key")),"__proto__"===i?Object.defineProperty(e,i,{configurable:!0,enumerable:!0,writable:!0,value:a}):e[i]=a,delete n[i];return e}function on(t){var e;10===(e=t.input.charCodeAt(t.position))?t.position++:13===e?(t.position++,10===t.input.charCodeAt(t.position)&&t.position++):tn(t,"a line break is expected"),t.line+=1,t.lineStart=t.position,t.firstTabInLine=-1}function cn(t,e,n){for(var r=0,i=t.input.charCodeAt(t.position);0!==i;){for(;ze(i);)9===i&&-1===t.firstTabInLine&&(t.firstTabInLine=t.position),i=t.input.charCodeAt(++t.position);if(e&&35===i)do{i=t.input.charCodeAt(++t.position)}while(10!==i&&13!==i&&0!==i);if(!Ye(i))break;for(on(t),i=t.input.charCodeAt(t.position),r++,t.lineIndent=0;32===i;)t.lineIndent++,i=t.input.charCodeAt(++t.position)}return-1!==n&&0!==r&&t.lineIndent<n&&en(t,"deficient indentation"),r}function ln(t){var e,n=t.position;return!(45!==(e=t.input.charCodeAt(n))&&46!==e||e!==t.input.charCodeAt(n+1)||e!==t.input.charCodeAt(n+2)||(n+=3,0!==(e=t.input.charCodeAt(n))&&!Ue(e)))}function hn(t,e){1===e?t.result+=" ":e>1&&(t.result+=Jt.repeat("\n",e-1))}function un(t,e){var n,r,i=t.tag,a=t.anchor,s=[],o=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=s),r=t.input.charCodeAt(t.position);0!==r&&(-1!==t.firstTabInLine&&(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),45===r)&&Ue(t.input.charCodeAt(t.position+1));)if(o=!0,t.position++,cn(t,!0,-1)&&t.lineIndent<=e)s.push(null),r=t.input.charCodeAt(t.position);else if(n=t.line,fn(t,e,3,!1,!0),s.push(t.result),cn(t,!0,-1),r=t.input.charCodeAt(t.position),(t.line===n||t.lineIndent>e)&&0!==r)tn(t,"bad indentation of a sequence entry");else if(t.lineIndent<e)break;return!!o&&(t.tag=i,t.anchor=a,t.kind="sequence",t.result=s,!0)}function dn(t){var e,n,r,i,a=!1,s=!1;if(33!==(i=t.input.charCodeAt(t.position)))return!1;if(null!==t.tag&&tn(t,"duplication of a tag property"),60===(i=t.input.charCodeAt(++t.position))?(a=!0,i=t.input.charCodeAt(++t.position)):33===i?(s=!0,n="!!",i=t.input.charCodeAt(++t.position)):n="!",e=t.position,a){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&62!==i);t.position<t.length?(r=t.input.slice(e,t.position),i=t.input.charCodeAt(++t.position)):tn(t,"unexpected end of the stream within a verbatim tag")}else{for(;0!==i&&!Ue(i);)33===i&&(s?tn(t,"tag suffix cannot contain exclamation marks"):(n=t.input.slice(e-1,t.position+1),Ze.test(n)||tn(t,"named tag handle cannot contain such characters"),s=!0,e=t.position+1)),i=t.input.charCodeAt(++t.position);r=t.input.slice(e,t.position),Re.test(r)&&tn(t,"tag suffix cannot contain flow indicator characters")}r&&!Pe.test(r)&&tn(t,"tag name cannot contain such characters: "+r);try{r=decodeURIComponent(r)}catch(o){tn(t,"tag name is malformed: "+r)}return a?t.tag=r:Ie.call(t.tagMap,n)?t.tag=t.tagMap[n]+r:"!"===n?t.tag="!"+r:"!!"===n?t.tag="tag:yaml.org,2002:"+r:tn(t,'undeclared tag handle "'+n+'"'),!0}function pn(t){var e,n;if(38!==(n=t.input.charCodeAt(t.position)))return!1;for(null!==t.anchor&&tn(t,"duplication of an anchor property"),n=t.input.charCodeAt(++t.position),e=t.position;0!==n&&!Ue(n)&&!We(n);)n=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an anchor node must contain at least one character"),t.anchor=t.input.slice(e,t.position),!0}function fn(t,e,n,r,i){var a,s,o,c,l,h,u,d,p,f=1,g=!1,y=!1;if(null!==t.listener&&t.listener("open",t),t.tag=null,t.anchor=null,t.kind=null,t.result=null,a=s=o=4===n||3===n,r&&cn(t,!0,-1)&&(g=!0,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)),1===f)for(;dn(t)||pn(t);)cn(t,!0,-1)?(g=!0,o=a,t.lineIndent>e?f=1:t.lineIndent===e?f=0:t.lineIndent<e&&(f=-1)):o=!1;if(o&&(o=g||i),1!==f&&4!==n||(d=1===n||2===n?e:e+1,p=t.position-t.lineStart,1===f?o&&(un(t,p)||function(t,e,n){var r,i,a,s,o,c,l,h=t.tag,u=t.anchor,d={},p=Object.create(null),f=null,g=null,y=null,m=!1,b=!1;if(-1!==t.firstTabInLine)return!1;for(null!==t.anchor&&(t.anchorMap[t.anchor]=d),l=t.input.charCodeAt(t.position);0!==l;){if(m||-1===t.firstTabInLine||(t.position=t.firstTabInLine,tn(t,"tab characters must not be used in indentation")),r=t.input.charCodeAt(t.position+1),a=t.line,63!==l&&58!==l||!Ue(r)){if(s=t.line,o=t.lineStart,c=t.position,!fn(t,n,2,!1,!0))break;if(t.line===a){for(l=t.input.charCodeAt(t.position);ze(l);)l=t.input.charCodeAt(++t.position);if(58===l)Ue(l=t.input.charCodeAt(++t.position))||tn(t,"a whitespace character is expected after the key-value separator within a block mapping"),m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!1,i=!1,f=t.tag,g=t.result;else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read an implicit mapping pair; a colon is missed")}}else{if(!b)return t.tag=h,t.anchor=u,!0;tn(t,"can not read a block mapping entry; a multiline key may not be an implicit key")}}else 63===l?(m&&(sn(t,d,p,f,g,null,s,o,c),f=g=y=null),b=!0,m=!0,i=!0):m?(m=!1,i=!0):tn(t,"incomplete explicit mapping pair; a key node is missed; or followed by a non-tabulated empty line"),t.position+=1,l=r;if((t.line===a||t.lineIndent>e)&&(m&&(s=t.line,o=t.lineStart,c=t.position),fn(t,e,4,!0,i)&&(m?g=t.result:y=t.result),m||(sn(t,d,p,f,g,y,s,o,c),f=g=y=null),cn(t,!0,-1),l=t.input.charCodeAt(t.position)),(t.line===a||t.lineIndent>e)&&0!==l)tn(t,"bad indentation of a mapping entry");else if(t.lineIndent<e)break}return m&&sn(t,d,p,f,g,null,s,o,c),b&&(t.tag=h,t.anchor=u,t.kind="mapping",t.result=d),b}(t,p,d))||function(t,e){var n,r,i,a,s,o,c,l,h,u,d,p,f=!0,g=t.tag,y=t.anchor,m=Object.create(null);if(91===(p=t.input.charCodeAt(t.position)))s=93,l=!1,a=[];else{if(123!==p)return!1;s=125,l=!0,a={}}for(null!==t.anchor&&(t.anchorMap[t.anchor]=a),p=t.input.charCodeAt(++t.position);0!==p;){if(cn(t,!0,e),(p=t.input.charCodeAt(t.position))===s)return t.position++,t.tag=g,t.anchor=y,t.kind=l?"mapping":"sequence",t.result=a,!0;f?44===p&&tn(t,"expected the node content, but found ','"):tn(t,"missed comma between flow collection entries"),d=null,o=c=!1,63===p&&Ue(t.input.charCodeAt(t.position+1))&&(o=c=!0,t.position++,cn(t,!0,e)),n=t.line,r=t.lineStart,i=t.position,fn(t,e,1,!1,!0),u=t.tag,h=t.result,cn(t,!0,e),p=t.input.charCodeAt(t.position),!c&&t.line!==n||58!==p||(o=!0,p=t.input.charCodeAt(++t.position),cn(t,!0,e),fn(t,e,1,!1,!0),d=t.result),l?sn(t,a,m,u,h,d,n,r,i):o?a.push(sn(t,null,m,u,h,d,n,r,i)):a.push(h),cn(t,!0,e),44===(p=t.input.charCodeAt(t.position))?(f=!0,p=t.input.charCodeAt(++t.position)):f=!1}tn(t,"unexpected end of the stream within a flow collection")}(t,d)?y=!0:(s&&function(t,e){var n,r,i,a,s,o=1,c=!1,l=!1,h=e,u=0,d=!1;if(124===(a=t.input.charCodeAt(t.position)))r=!1;else{if(62!==a)return!1;r=!0}for(t.kind="scalar",t.result="";0!==a;)if(43===(a=t.input.charCodeAt(++t.position))||45===a)1===o?o=43===a?3:2:tn(t,"repeat of a chomping mode identifier");else{if(!((i=48<=(s=a)&&s<=57?s-48:-1)>=0))break;0===i?tn(t,"bad explicit indentation width of a block scalar; it cannot be less than one"):l?tn(t,"repeat of an indentation width identifier"):(h=e+i-1,l=!0)}if(ze(a)){do{a=t.input.charCodeAt(++t.position)}while(ze(a));if(35===a)do{a=t.input.charCodeAt(++t.position)}while(!Ye(a)&&0!==a)}for(;0!==a;){for(on(t),t.lineIndent=0,a=t.input.charCodeAt(t.position);(!l||t.lineIndent<h)&&32===a;)t.lineIndent++,a=t.input.charCodeAt(++t.position);if(!l&&t.lineIndent>h&&(h=t.lineIndent),Ye(a))u++;else{if(t.lineIndent<h){3===o?t.result+=Jt.repeat("\n",c?1+u:u):1===o&&c&&(t.result+="\n");break}for(r?ze(a)?(d=!0,t.result+=Jt.repeat("\n",c?1+u:u)):d?(d=!1,t.result+=Jt.repeat("\n",u+1)):0===u?c&&(t.result+=" "):t.result+=Jt.repeat("\n",u):t.result+=Jt.repeat("\n",c?1+u:u),c=!0,l=!0,u=0,n=t.position;!Ye(a)&&0!==a;)a=t.input.charCodeAt(++t.position);rn(t,n,t.position,!1)}}return!0}(t,d)||function(t,e){var n,r,i;if(39!==(n=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,r=i=t.position;0!==(n=t.input.charCodeAt(t.position));)if(39===n){if(rn(t,r,t.position,!0),39!==(n=t.input.charCodeAt(++t.position)))return!0;r=t.position,t.position++,i=t.position}else Ye(n)?(rn(t,r,i,!0),hn(t,cn(t,!1,e)),r=i=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a single quoted scalar"):(t.position++,i=t.position);tn(t,"unexpected end of the stream within a single quoted scalar")}(t,d)||function(t,e){var n,r,i,a,s,o,c;if(34!==(o=t.input.charCodeAt(t.position)))return!1;for(t.kind="scalar",t.result="",t.position++,n=r=t.position;0!==(o=t.input.charCodeAt(t.position));){if(34===o)return rn(t,n,t.position,!0),t.position++,!0;if(92===o){if(rn(t,n,t.position,!0),Ye(o=t.input.charCodeAt(++t.position)))cn(t,!1,e);else if(o<256&&Ge[o])t.result+=Xe[o],t.position++;else if((s=120===(c=o)?2:117===c?4:85===c?8:0)>0){for(i=s,a=0;i>0;i--)(s=qe(o=t.input.charCodeAt(++t.position)))>=0?a=(a<<4)+s:tn(t,"expected hexadecimal character");t.result+=Ve(a),t.position++}else tn(t,"unknown escape sequence");n=r=t.position}else Ye(o)?(rn(t,n,r,!0),hn(t,cn(t,!1,e)),n=r=t.position):t.position===t.lineStart&&ln(t)?tn(t,"unexpected end of the document within a double quoted scalar"):(t.position++,r=t.position)}tn(t,"unexpected end of the stream within a double quoted scalar")}(t,d)?y=!0:!function(t){var e,n,r;if(42!==(r=t.input.charCodeAt(t.position)))return!1;for(r=t.input.charCodeAt(++t.position),e=t.position;0!==r&&!Ue(r)&&!We(r);)r=t.input.charCodeAt(++t.position);return t.position===e&&tn(t,"name of an alias node must contain at least one character"),n=t.input.slice(e,t.position),Ie.call(t.anchorMap,n)||tn(t,'unidentified alias "'+n+'"'),t.result=t.anchorMap[n],cn(t,!0,-1),!0}(t)?function(t,e,n){var r,i,a,s,o,c,l,h,u=t.kind,d=t.result;if(Ue(h=t.input.charCodeAt(t.position))||We(h)||35===h||38===h||42===h||33===h||124===h||62===h||39===h||34===h||37===h||64===h||96===h)return!1;if((63===h||45===h)&&(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r)))return!1;for(t.kind="scalar",t.result="",i=a=t.position,s=!1;0!==h;){if(58===h){if(Ue(r=t.input.charCodeAt(t.position+1))||n&&We(r))break}else if(35===h){if(Ue(t.input.charCodeAt(t.position-1)))break}else{if(t.position===t.lineStart&&ln(t)||n&&We(h))break;if(Ye(h)){if(o=t.line,c=t.lineStart,l=t.lineIndent,cn(t,!1,-1),t.lineIndent>=e){s=!0,h=t.input.charCodeAt(t.position);continue}t.position=a,t.line=o,t.lineStart=c,t.lineIndent=l;break}}s&&(rn(t,i,a,!1),hn(t,t.line-o),i=a=t.position,s=!1),ze(h)||(a=t.position+1),h=t.input.charCodeAt(++t.position)}return rn(t,i,a,!1),!!t.result||(t.kind=u,t.result=d,!1)}(t,d,1===n)&&(y=!0,null===t.tag&&(t.tag="?")):(y=!0,null===t.tag&&null===t.anchor||tn(t,"alias node should not have any properties")),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):0===f&&(y=o&&un(t,p))),null===t.tag)null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);else if("?"===t.tag){for(null!==t.result&&"scalar"!==t.kind&&tn(t,'unacceptable node kind for !<?> tag; it should be "scalar", not "'+t.kind+'"'),c=0,l=t.implicitTypes.length;c<l;c+=1)if((u=t.implicitTypes[c]).resolve(t.result)){t.result=u.construct(t.result),t.tag=u.tag,null!==t.anchor&&(t.anchorMap[t.anchor]=t.result);break}}else if("!"!==t.tag){if(Ie.call(t.typeMap[t.kind||"fallback"],t.tag))u=t.typeMap[t.kind||"fallback"][t.tag];else for(u=null,c=0,l=(h=t.typeMap.multi[t.kind||"fallback"]).length;c<l;c+=1)if(t.tag.slice(0,h[c].tag.length)===h[c].tag){u=h[c];break}u||tn(t,"unknown tag !<"+t.tag+">"),null!==t.result&&u.kind!==t.kind&&tn(t,"unacceptable node kind for !<"+t.tag+'> tag; it should be "'+u.kind+'", not "'+t.kind+'"'),u.resolve(t.result,t.tag)?(t.result=u.construct(t.result,t.tag),null!==t.anchor&&(t.anchorMap[t.anchor]=t.result)):tn(t,"cannot resolve a node with !<"+t.tag+"> explicit tag")}return null!==t.listener&&t.listener("close",t),null!==t.tag||null!==t.anchor||y}function gn(t){var e,n,r,i,a=t.position,s=!1;for(t.version=null,t.checkLineBreaks=t.legacy,t.tagMap=Object.create(null),t.anchorMap=Object.create(null);0!==(i=t.input.charCodeAt(t.position))&&(cn(t,!0,-1),i=t.input.charCodeAt(t.position),!(t.lineIndent>0||37!==i));){for(s=!0,i=t.input.charCodeAt(++t.position),e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);for(r=[],(n=t.input.slice(e,t.position)).length<1&&tn(t,"directive name must not be less than one character in length");0!==i;){for(;ze(i);)i=t.input.charCodeAt(++t.position);if(35===i){do{i=t.input.charCodeAt(++t.position)}while(0!==i&&!Ye(i));break}if(Ye(i))break;for(e=t.position;0!==i&&!Ue(i);)i=t.input.charCodeAt(++t.position);r.push(t.input.slice(e,t.position))}0!==i&&on(t),Ie.call(nn,n)?nn[n](t,n,r):en(t,'unknown document directive "'+n+'"')}cn(t,!0,-1),0===t.lineIndent&&45===t.input.charCodeAt(t.position)&&45===t.input.charCodeAt(t.position+1)&&45===t.input.charCodeAt(t.position+2)?(t.position+=3,cn(t,!0,-1)):s&&tn(t,"directives end mark is expected"),fn(t,t.lineIndent-1,4,!1,!0),cn(t,!0,-1),t.checkLineBreaks&&$e.test(t.input.slice(a,t.position))&&en(t,"non-ASCII line breaks are interpreted as content"),t.documents.push(t.result),t.position===t.lineStart&&ln(t)?46===t.input.charCodeAt(t.position)&&(t.position+=3,cn(t,!0,-1)):t.position<t.length-1&&tn(t,"end of the stream or a document separator is expected")}function yn(t,e){e=e||{},0!==(t=String(t)).length&&(10!==t.charCodeAt(t.length-1)&&13!==t.charCodeAt(t.length-1)&&(t+="\n"),65279===t.charCodeAt(0)&&(t=t.slice(1)));var n=new Qe(t,e),r=t.indexOf("\0");for(-1!==r&&(n.position=r,tn(n,"null byte is not allowed in input")),n.input+="\0";32===n.input.charCodeAt(n.position);)n.lineIndent+=1,n.position+=1;for(;n.position<n.length-1;)gn(n);return n.documents}var mn=ue,bn={loadAll:function(t,e,n){null!==e&&"object"==typeof e&&void 0===n&&(n=e,e=null);var r=yn(t,n);if("function"!=typeof e)return r;for(var i=0,a=r.length;i<a;i+=1)e(r[i])},load:function(t,e){var n=yn(t,e);if(0!==n.length){if(1===n.length)return n[0];throw new ne("expected a single document in the stream, but found more")}}}.load;const _n=/^-{3}\s*[\n\r](.*?)[\n\r]-{3}\s*[\n\r]+/s;const xn=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,vn=/\s*%%.*\n/gm,kn={},wn=function(t,e){t=t.replace(_n,"").replace(xn,"").replace(vn,"\n");for(const[n,{detector:r}]of Object.entries(kn)){if(r(t,e))return n}throw new Error(`No diagram type detected for text: ${t}`)},En=(...t)=>{for(const{id:e,detector:n,loader:r}of t)Cn(e,n,r)},Cn=(t,e,n)=>{kn[t]?Nt.error(`Detector with key ${t} already exists`):kn[t]={detector:e,loader:n},Nt.debug(`Detector with key ${t} added${n?" with loader":""}`)},Tn=function(t,e,n){const{depth:r,clobber:i}=Object.assign({depth:2,clobber:!1},n);return Array.isArray(e)&&!Array.isArray(t)?(e.forEach((e=>Tn(t,e,n))),t):Array.isArray(e)&&Array.isArray(t)?(e.forEach((e=>{t.includes(e)||t.push(e)})),t):void 0===t||r<=0?null!=t&&"object"==typeof t&&"object"==typeof e?Object.assign(t,e):e:(void 0!==e&&"object"==typeof t&&"object"==typeof e&&Object.keys(e).forEach((n=>{"object"!=typeof e[n]||void 0!==t[n]&&"object"!=typeof t[n]?(i||"object"!=typeof t[n]&&"object"!=typeof e[n])&&(t[n]=e[n]):(void 0===t[n]&&(t[n]=Array.isArray(e[n])?[]:{}),t[n]=Tn(t[n],e[n],{depth:r-1,clobber:i}))})),t)},Sn=Tn,An={curveBasis:o.$0Z,curveBasisClosed:o.Dts,curveBasisOpen:o.WQY,curveBumpX:o.qpX,curveBumpY:o.u93,curveBundle:o.tFB,curveCardinalClosed:o.OvA,curveCardinalOpen:o.dCK,curveCardinal:o.YY7,curveCatmullRomClosed:o.fGX,curveCatmullRomOpen:o.$m7,curveCatmullRom:o.zgE,curveLinear:o.c_6,curveLinearClosed:o.fxm,curveMonotoneX:o.FdL,curveMonotoneY:o.ak_,curveNatural:o.SxZ,curveStep:o.eA_,curveStepAfter:o.jsv,curveStepBefore:o.iJ},Ln=/%{2}{\s*(?:(\w+)\s*:|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Bn=/\s*(?:(\w+)(?=:):|(\w+))\s*(?:(\w+)|((?:(?!}%{2}).|\r?\n)*))?\s*(?:}%{2})?/gi,Nn=function(t,e=null){try{const n=new RegExp(`[%]{2}(?![{]${Bn.source})(?=[}][%]{2}).*\n`,"ig");let r;t=t.trim().replace(n,"").replace(/'/gm,'"'),Nt.debug(`Detecting diagram directive${null!==e?" type:"+e:""} based on the text:${t}`);const i=[];for(;null!==(r=Ln.exec(t));)if(r.index===Ln.lastIndex&&Ln.lastIndex++,r&&!e||e&&r[1]&&r[1].match(e)||e&&r[2]&&r[2].match(e)){const t=r[1]?r[1]:r[2],e=r[3]?r[3].trim():r[4]?JSON.parse(r[4].trim()):null;i.push({type:t,args:e})}return 0===i.length&&i.push({type:t,args:null}),1===i.length?i[0]:i}catch(n){return Nt.error(`ERROR: ${n.message} - Unable to parse directive\n      ${null!==e?" type:"+e:""} based on the text:${t}`),{type:null,args:null}}};function Dn(t,e){if(!t)return e;const n=`curve${t.charAt(0).toUpperCase()+t.slice(1)}`;return An[n]||e}function On(t,e){return t&&e?Math.sqrt(Math.pow(e.x-t.x,2)+Math.pow(e.y-t.y,2)):0}function Mn(t){let e="",n="";for(const r of t)void 0!==r&&(r.startsWith("color:")||r.startsWith("text-align:")?n=n+r+";":e=e+r+";");return{style:e,labelStyle:n}}let In=0;const Fn=()=>(In++,"id-"+Math.random().toString(36).substr(2,12)+"-"+In);const $n=t=>function(t){let e="";const n="0123456789abcdef",r=n.length;for(let i=0;i<t;i++)e+=n.charAt(Math.floor(Math.random()*r));return e}(t.length),Rn=function(t,e){const n=e.text.replace(Yt.lineBreakRegex," "),[,r]=Vn(e.fontSize),i=t.append("text");i.attr("x",e.x),i.attr("y",e.y),i.style("text-anchor",e.anchor),i.style("font-family",e.fontFamily),i.style("font-size",r),i.style("font-weight",e.fontWeight),i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class);const a=i.append("tspan");return a.attr("x",e.x+2*e.textMargin),a.attr("fill",e.fill),a.text(n),i},Zn=(0,v.Z)(((t,e,n)=>{if(!t)return t;if(n=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",joinWith:"<br/>"},n),Yt.lineBreakRegex.test(t))return t;const r=t.split(" "),i=[];let a="";return r.forEach(((t,s)=>{const o=Yn(`${t} `,n),c=Yn(a,n);if(o>e){const{hyphenatedStrings:r,remainingWord:s}=Pn(t,e,"-",n);i.push(a,...r),a=s}else c+o>=e?(i.push(a),a=t):a=[a,t].filter(Boolean).join(" ");s+1===r.length&&i.push(a)})),i.filter((t=>""!==t)).join(n.joinWith)}),((t,e,n)=>`${t}${e}${n.fontSize}${n.fontWeight}${n.fontFamily}${n.joinWith}`)),Pn=(0,v.Z)(((t,e,n="-",r)=>{r=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:0},r);const i=[...t],a=[];let s="";return i.forEach(((t,o)=>{const c=`${s}${t}`;if(Yn(c,r)>=e){const t=o+1,e=i.length===t,r=`${c}${n}`;a.push(e?c:r),s=""}else s=c})),{hyphenatedStrings:a,remainingWord:s}}),((t,e,n="-",r)=>`${t}${e}${n}${r.fontSize}${r.fontWeight}${r.fontFamily}`));function jn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial",margin:15},e),zn(t,e).height}function Yn(t,e){return e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e),zn(t,e).width}const zn=(0,v.Z)(((t,e)=>{e=Object.assign({fontSize:12,fontWeight:400,fontFamily:"Arial"},e);const{fontSize:n,fontFamily:r,fontWeight:i}=e;if(!t)return{width:0,height:0};const[,a]=Vn(n),s=["sans-serif",r],c=t.split(Yt.lineBreakRegex),l=[],h=(0,o.Ys)("body");if(!h.remove)return{width:0,height:0,lineHeight:0};const u=h.append("svg");for(const o of s){let t=0;const e={width:0,height:0,lineHeight:0};for(const n of c){const r={x:0,y:0,fill:void 0,anchor:"start",style:"#666",width:100,height:100,textMargin:0,rx:0,ry:0,valign:void 0};r.text=n;const s=Rn(u,r).style("font-size",a).style("font-weight",i).style("font-family",o),c=(s._groups||s)[0][0].getBBox();e.width=Math.round(Math.max(e.width,c.width)),t=Math.round(c.height),e.height+=t,e.lineHeight=Math.round(Math.max(e.lineHeight,t))}l.push(e)}u.remove();return l[isNaN(l[1].height)||isNaN(l[1].width)||isNaN(l[1].lineHeight)||l[0].height>l[1].height&&l[0].width>l[1].width&&l[0].lineHeight>l[1].lineHeight?0:1]}),((t,e)=>`${t}${e.fontSize}${e.fontWeight}${e.fontFamily}`));let Un;const Wn=t=>{if(Nt.debug("directiveSanitizer called with",t),"object"==typeof t&&(t.length?t.forEach((t=>Wn(t))):Object.keys(t).forEach((e=>{Nt.debug("Checking key",e),e.startsWith("__")&&(Nt.debug("sanitize deleting __ option",e),delete t[e]),e.includes("proto")&&(Nt.debug("sanitize deleting proto option",e),delete t[e]),e.includes("constr")&&(Nt.debug("sanitize deleting constr option",e),delete t[e]),e.includes("themeCSS")&&(Nt.debug("sanitizing themeCss option"),t[e]=qn(t[e])),e.includes("fontFamily")&&(Nt.debug("sanitizing fontFamily option"),t[e]=qn(t[e])),e.includes("altFontFamily")&&(Nt.debug("sanitizing altFontFamily option"),t[e]=qn(t[e])),Xt.includes(e)?"object"==typeof t[e]&&(Nt.debug("sanitize deleting object",e),Wn(t[e])):(Nt.debug("sanitize deleting option",e),delete t[e])}))),t.themeVariables){const e=Object.keys(t.themeVariables);for(const n of e){const e=t.themeVariables[n];e&&e.match&&!e.match(/^[\d "#%(),.;A-Za-z]+$/)&&(t.themeVariables[n]="")}}Nt.debug("After sanitization",t)},qn=t=>{let e=0,n=0;for(const r of t){if(e<n)return"{ /* ERROR: Unbalanced CSS */ }";"{"===r?e++:"}"===r&&n++}return e!==n?"{ /* ERROR: Unbalanced CSS */ }":t};function Hn(t){return"str"in t}const Vn=t=>{if("number"==typeof t)return[t,t+"px"];const e=parseInt(t,10);return Number.isNaN(e)?[void 0,void 0]:t===String(e)?[e,t+"px"]:[e,t]},Gn={assignWithDepth:Sn,wrapLabel:Zn,calculateTextHeight:jn,calculateTextWidth:Yn,calculateTextDimensions:zn,detectInit:function(t,e){const n=Nn(t,/(?:init\b)|(?:initialize\b)/);let r={};if(Array.isArray(n)){const t=n.map((t=>t.args));Wn(t),r=Sn(r,[...t])}else r=n.args;if(r){let n=wn(t,e);["config"].forEach((t=>{void 0!==r[t]&&("flowchart-v2"===n&&(n="flowchart"),r[n]=r[t],delete r[t])}))}return r},detectDirective:Nn,isSubstringInArray:function(t,e){for(const[n,r]of e.entries())if(r.match(t))return n;return-1},interpolateToCurve:Dn,calcLabelPosition:function(t){return 1===t.length?t[0]:function(t){let e,n=0;t.forEach((t=>{n+=On(t,e),e=t}));let r,i=n/2;return e=void 0,t.forEach((t=>{if(e&&!r){const n=On(t,e);if(n<i)i-=n;else{const a=i/n;a<=0&&(r=e),a>=1&&(r={x:t.x,y:t.y}),a>0&&a<1&&(r={x:(1-a)*e.x+a*t.x,y:(1-a)*e.y+a*t.y})}}e=t})),r}(t)},calcCardinalityPosition:(t,e,n)=>{let r;Nt.info(`our points ${JSON.stringify(e)}`),e[0]!==n&&(e=e.reverse());let i,a=25;r=void 0,e.forEach((t=>{if(r&&!i){const e=On(t,r);if(e<a)a-=e;else{const n=a/e;n<=0&&(i=r),n>=1&&(i={x:t.x,y:t.y}),n>0&&n<1&&(i={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const s=t?10:5,o=Math.atan2(e[0].y-i.y,e[0].x-i.x),c={x:0,y:0};return c.x=Math.sin(o)*s+(e[0].x+i.x)/2,c.y=-Math.cos(o)*s+(e[0].y+i.y)/2,c},calcTerminalLabelPosition:function(t,e,n){let r,i=JSON.parse(JSON.stringify(n));Nt.info("our points",i),"start_left"!==e&&"start_right"!==e&&(i=i.reverse()),i.forEach((t=>{r=t}));let a,s=25+t;r=void 0,i.forEach((t=>{if(r&&!a){const e=On(t,r);if(e<s)s-=e;else{const n=s/e;n<=0&&(a=r),n>=1&&(a={x:t.x,y:t.y}),n>0&&n<1&&(a={x:(1-n)*r.x+n*t.x,y:(1-n)*r.y+n*t.y})}}r=t}));const o=10+.5*t,c=Math.atan2(i[0].y-a.y,i[0].x-a.x),l={x:0,y:0};return l.x=Math.sin(c)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2,"start_left"===e&&(l.x=Math.sin(c+Math.PI)*o+(i[0].x+a.x)/2,l.y=-Math.cos(c+Math.PI)*o+(i[0].y+a.y)/2),"end_right"===e&&(l.x=Math.sin(c-Math.PI)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c-Math.PI)*o+(i[0].y+a.y)/2-5),"end_left"===e&&(l.x=Math.sin(c)*o+(i[0].x+a.x)/2-5,l.y=-Math.cos(c)*o+(i[0].y+a.y)/2-5),l},formatUrl:function(t,e){const n=t.trim();if(n)return"loose"!==e.securityLevel?(0,s.N)(n):n},getStylesFromArray:Mn,generateId:Fn,random:$n,runFunc:(t,...e)=>{const n=t.split("."),r=n.length-1,i=n[r];let a=window;for(let s=0;s<r;s++)if(a=a[n[s]],!a)return;a[i](...e)},entityDecode:function(t){return Un=Un||document.createElement("div"),t=escape(t).replace(/%26/g,"&").replace(/%23/g,"#").replace(/%3B/g,";"),Un.innerHTML=t,unescape(Un.textContent)},initIdGenerator:class{constructor(t,e){this.deterministic=t,this.seed=e,this.count=e?e.length:0}next(){return this.deterministic?this.count++:Date.now()}},directiveSanitizer:Wn,sanitizeCss:qn,insertTitle:(t,e,n,r)=>{if(!r)return;const i=t.node().getBBox();t.append("text").text(r).attr("x",i.x+i.width/2).attr("y",-n).attr("class",e)},parseFontSize:Vn},Xn="9.4.3",Kn=Object.freeze(Kt);let Qn,Jn=Sn({},Kn),tr=[],er=Sn({},Kn);const nr=(t,e)=>{let n=Sn({},t),r={};for(const i of e)sr(i),r=Sn(r,i);if(n=Sn(n,r),r.theme&&r.theme in Ht){const t=Sn({},Qn),e=Sn(t.themeVariables||{},r.themeVariables);n.theme&&n.theme in Ht&&(n.themeVariables=Ht[n.theme].getThemeVariables(e))}return er=n,ur(er),er},rr=()=>Sn({},Jn),ir=t=>(ur(t),Sn(er,t),ar()),ar=()=>Sn({},er),sr=t=>{["secure",...Jn.secure??[]].forEach((e=>{void 0!==t[e]&&(Nt.debug(`Denied attempt to modify a secure key ${e}`,t[e]),delete t[e])})),Object.keys(t).forEach((e=>{0===e.indexOf("__")&&delete t[e]})),Object.keys(t).forEach((e=>{"string"==typeof t[e]&&(t[e].includes("<")||t[e].includes(">")||t[e].includes("url(data:"))&&delete t[e],"object"==typeof t[e]&&sr(t[e])}))},or=t=>{t.fontFamily&&(t.themeVariables&&t.themeVariables.fontFamily||(t.themeVariables={fontFamily:t.fontFamily})),tr.push(t),nr(Jn,tr)},cr=(t=Jn)=>{tr=[],nr(t,tr)};var lr=(t=>(t.LAZY_LOAD_DEPRECATED="The configuration options lazyLoadedDiagrams and loadExternalDiagramsAtStartup are deprecated. Please use registerExternalDiagrams instead.",t))(lr||{});const hr={},ur=t=>{var e;t&&((t.lazyLoadedDiagrams||t.loadExternalDiagramsAtStartup)&&(hr[e="LAZY_LOAD_DEPRECATED"]||(Nt.warn(lr[e]),hr[e]=!0)))},dr=function(t,e,n,r){const i=function(t,e,n){let r=new Map;return n?(r.set("width","100%"),r.set("style",`max-width: ${e}px;`)):(r.set("height",t),r.set("width",e)),r}(e,n,r);!function(t,e){for(let n of e)t.attr(n[0],n[1])}(t,i)},pr=function(t,e,n,r){const i=e.node().getBBox(),a=i.width,s=i.height;Nt.info(`SVG bounds: ${a}x${s}`,i);let o=0,c=0;Nt.info(`Graph bounds: ${o}x${c}`,t),o=a+2*n,c=s+2*n,Nt.info(`Calculated bounds: ${o}x${c}`),dr(e,c,o,r);const l=`${i.x-n} ${i.y-n} ${i.width+2*n} ${i.height+2*n}`;e.attr("viewBox",l)},fr=t=>`g.classGroup text {\n  fill: ${t.nodeBorder};\n  fill: ${t.classText};\n  stroke: none;\n  font-family: ${t.fontFamily};\n  font-size: 10px;\n\n  .title {\n    font-weight: bolder;\n  }\n\n}\n\n.nodeLabel, .edgeLabel {\n  color: ${t.classText};\n}\n.edgeLabel .label rect {\n  fill: ${t.mainBkg};\n}\n.label text {\n  fill: ${t.classText};\n}\n.edgeLabel .label span {\n  background: ${t.mainBkg};\n}\n\n.classTitle {\n  font-weight: bolder;\n}\n.node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n\n.divider {\n  stroke: ${t.nodeBorder};\n  stroke: 1;\n}\n\ng.clickable {\n  cursor: pointer;\n}\n\ng.classGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.classGroup line {\n  stroke: ${t.nodeBorder};\n  stroke-width: 1;\n}\n\n.classLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.classLabel .label {\n  fill: ${t.nodeBorder};\n  font-size: 10px;\n}\n\n.relation {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.dashed-line{\n  stroke-dasharray: 3;\n}\n\n.dotted-line{\n  stroke-dasharray: 1 2;\n}\n\n#compositionStart, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#compositionEnd, .composition {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#dependencyStart, .dependency {\n  fill: ${t.lineColor} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionStart, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#extensionEnd, .extension {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationStart, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#aggregationEnd, .aggregation {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopStart, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n#lollipopEnd, .lollipop {\n  fill: ${t.mainBkg} !important;\n  stroke: ${t.lineColor} !important;\n  stroke-width: 1;\n}\n\n.edgeTerminals {\n  font-size: 11px;\n}\n\n.classTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,gr=t=>`\n  .entityBox {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxOdd {\n    fill: ${t.attributeBackgroundColorOdd};\n    stroke: ${t.nodeBorder};\n  }\n\n  .attributeBoxEven {\n    fill:  ${t.attributeBackgroundColorEven};\n    stroke: ${t.nodeBorder};\n  }\n\n  .relationshipLabelBox {\n    fill: ${t.tertiaryColor};\n    opacity: 0.7;\n    background-color: ${t.tertiaryColor};\n      rect {\n        opacity: 0.5;\n      }\n  }\n\n    .relationshipLine {\n      stroke: ${t.lineColor};\n    }\n\n  .entityTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }    \n`,yr=()=>"",mr=t=>`.label {\n    font-family: ${t.fontFamily};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n  .cluster-label text {\n    fill: ${t.titleColor};\n  }\n  .cluster-label span {\n    color: ${t.titleColor};\n  }\n\n  .label text,span {\n    fill: ${t.nodeTextColor||t.textColor};\n    color: ${t.nodeTextColor||t.textColor};\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 2.0px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n      background-color: ${t.edgeLabelBackground};\n      fill: ${t.edgeLabelBackground};\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n    fill: ${t.clusterBkg};\n    stroke: ${t.clusterBorder};\n    stroke-width: 1px;\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  .cluster span {\n    color: ${t.titleColor};\n  }\n  /* .cluster div {\n    color: ${t.titleColor};\n  } */\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: ${t.fontFamily};\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .flowchartTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n`,br=t=>`\n  .mermaid-main-font {\n    font-family: "trebuchet ms", verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  .exclude-range {\n    fill: ${t.excludeBkgColor};\n  }\n\n  .section {\n    stroke: none;\n    opacity: 0.2;\n  }\n\n  .section0 {\n    fill: ${t.sectionBkgColor};\n  }\n\n  .section2 {\n    fill: ${t.sectionBkgColor2};\n  }\n\n  .section1,\n  .section3 {\n    fill: ${t.altSectionBkgColor};\n    opacity: 0.2;\n  }\n\n  .sectionTitle0 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle1 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle2 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle3 {\n    fill: ${t.titleColor};\n  }\n\n  .sectionTitle {\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    // text-height: 14px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n\n  /* Grid and axis */\n\n  .grid .tick {\n    stroke: ${t.gridColor};\n    opacity: 0.8;\n    shape-rendering: crispEdges;\n    text {\n      font-family: ${t.fontFamily};\n      fill: ${t.textColor};\n    }\n  }\n\n  .grid path {\n    stroke-width: 0;\n  }\n\n\n  /* Today line */\n\n  .today {\n    fill: none;\n    stroke: ${t.todayLineColor};\n    stroke-width: 2px;\n  }\n\n\n  /* Task styling */\n\n  /* Default task */\n\n  .task {\n    stroke-width: 2;\n  }\n\n  .taskText {\n    text-anchor: middle;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n\n  // .taskText:not([font-size]) {\n  //   font-size: ${t.ganttFontSize};\n  // }\n\n  .taskTextOutsideRight {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: start;\n    // font-size: ${t.ganttFontSize};\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n\n  }\n\n  .taskTextOutsideLeft {\n    fill: ${t.taskTextDarkColor};\n    text-anchor: end;\n    // font-size: ${t.ganttFontSize};\n  }\n\n  /* Special case clickable */\n  .task.clickable {\n    cursor: pointer;\n  }\n  .taskText.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideLeft.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  .taskTextOutsideRight.clickable {\n    cursor: pointer;\n    fill: ${t.taskTextClickableColor} !important;\n    font-weight: bold;\n  }\n\n  /* Specific task settings for the sections*/\n\n  .taskText0,\n  .taskText1,\n  .taskText2,\n  .taskText3 {\n    fill: ${t.taskTextColor};\n  }\n\n  .task0,\n  .task1,\n  .task2,\n  .task3 {\n    fill: ${t.taskBkgColor};\n    stroke: ${t.taskBorderColor};\n  }\n\n  .taskTextOutside0,\n  .taskTextOutside2\n  {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n  .taskTextOutside1,\n  .taskTextOutside3 {\n    fill: ${t.taskTextOutsideColor};\n  }\n\n\n  /* Active task */\n\n  .active0,\n  .active1,\n  .active2,\n  .active3 {\n    fill: ${t.activeTaskBkgColor};\n    stroke: ${t.activeTaskBorderColor};\n  }\n\n  .activeText0,\n  .activeText1,\n  .activeText2,\n  .activeText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Completed task */\n\n  .done0,\n  .done1,\n  .done2,\n  .done3 {\n    stroke: ${t.doneTaskBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneText0,\n  .doneText1,\n  .doneText2,\n  .doneText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n\n  /* Tasks on the critical line */\n\n  .crit0,\n  .crit1,\n  .crit2,\n  .crit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.critBkgColor};\n    stroke-width: 2;\n  }\n\n  .activeCrit0,\n  .activeCrit1,\n  .activeCrit2,\n  .activeCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.activeTaskBkgColor};\n    stroke-width: 2;\n  }\n\n  .doneCrit0,\n  .doneCrit1,\n  .doneCrit2,\n  .doneCrit3 {\n    stroke: ${t.critBorderColor};\n    fill: ${t.doneTaskBkgColor};\n    stroke-width: 2;\n    cursor: pointer;\n    shape-rendering: crispEdges;\n  }\n\n  .milestone {\n    transform: rotate(45deg) scale(0.8,0.8);\n  }\n\n  .milestoneText {\n    font-style: italic;\n  }\n  .doneCritText0,\n  .doneCritText1,\n  .doneCritText2,\n  .doneCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .activeCritText0,\n  .activeCritText1,\n  .activeCritText2,\n  .activeCritText3 {\n    fill: ${t.taskTextDarkColor} !important;\n  }\n\n  .titleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor}    ;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n`,_r=()=>"",xr=t=>`\n  .pieCircle{\n    stroke: ${t.pieStrokeColor};\n    stroke-width : ${t.pieStrokeWidth};\n    opacity : ${t.pieOpacity};\n  }\n  .pieTitleText {\n    text-anchor: middle;\n    font-size: ${t.pieTitleTextSize};\n    fill: ${t.pieTitleTextColor};\n    font-family: ${t.fontFamily};\n  }\n  .slice {\n    font-family: ${t.fontFamily};\n    fill: ${t.pieSectionTextColor};\n    font-size:${t.pieSectionTextSize};\n    // fill: white;\n  }\n  .legend text {\n    fill: ${t.pieLegendTextColor};\n    font-family: ${t.fontFamily};\n    font-size: ${t.pieLegendTextSize};\n  }\n`,vr=t=>`\n\n  marker {\n    fill: ${t.relationColor};\n    stroke: ${t.relationColor};\n  }\n\n  marker.cross {\n    stroke: ${t.lineColor};\n  }\n\n  svg {\n    font-family: ${t.fontFamily};\n    font-size: ${t.fontSize};\n  }\n\n  .reqBox {\n    fill: ${t.requirementBackground};\n    fill-opacity: 100%;\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  \n  .reqTitle, .reqLabel{\n    fill:  ${t.requirementTextColor};\n  }\n  .reqLabelBox {\n    fill: ${t.relationLabelBackground};\n    fill-opacity: 100%;\n  }\n\n  .req-title-line {\n    stroke: ${t.requirementBorderColor};\n    stroke-width: ${t.requirementBorderSize};\n  }\n  .relationshipLine {\n    stroke: ${t.relationColor};\n    stroke-width: 1;\n  }\n  .relationshipLabel {\n    fill: ${t.relationLabelColor};\n  }\n\n`,kr=t=>`.actor {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n\n  text.actor > tspan {\n    fill: ${t.actorTextColor};\n    stroke: none;\n  }\n\n  .actor-line {\n    stroke: ${t.actorLineColor};\n  }\n\n  .messageLine0 {\n    stroke-width: 1.5;\n    stroke-dasharray: none;\n    stroke: ${t.signalColor};\n  }\n\n  .messageLine1 {\n    stroke-width: 1.5;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.signalColor};\n  }\n\n  #arrowhead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .sequenceNumber {\n    fill: ${t.sequenceNumberColor};\n  }\n\n  #sequencenumber {\n    fill: ${t.signalColor};\n  }\n\n  #crosshead path {\n    fill: ${t.signalColor};\n    stroke: ${t.signalColor};\n  }\n\n  .messageText {\n    fill: ${t.signalTextColor};\n    stroke: none;\n  }\n\n  .labelBox {\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBkgColor};\n  }\n\n  .labelText, .labelText > tspan {\n    fill: ${t.labelTextColor};\n    stroke: none;\n  }\n\n  .loopText, .loopText > tspan {\n    fill: ${t.loopTextColor};\n    stroke: none;\n  }\n\n  .loopLine {\n    stroke-width: 2px;\n    stroke-dasharray: 2, 2;\n    stroke: ${t.labelBoxBorderColor};\n    fill: ${t.labelBoxBorderColor};\n  }\n\n  .note {\n    //stroke: #decc93;\n    stroke: ${t.noteBorderColor};\n    fill: ${t.noteBkgColor};\n  }\n\n  .noteText, .noteText > tspan {\n    fill: ${t.noteTextColor};\n    stroke: none;\n  }\n\n  .activation0 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation1 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .activation2 {\n    fill: ${t.activationBkgColor};\n    stroke: ${t.activationBorderColor};\n  }\n\n  .actorPopupMenu {\n    position: absolute;\n  }\n\n  .actorPopupMenuPanel {\n    position: absolute;\n    fill: ${t.actorBkg};\n    box-shadow: 0px 8px 16px 0px rgba(0,0,0,0.2);\n    filter: drop-shadow(3px 5px 2px rgb(0 0 0 / 0.4));\n}\n  .actor-man line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n  }\n  .actor-man circle, line {\n    stroke: ${t.actorBorder};\n    fill: ${t.actorBkg};\n    stroke-width: 2px;\n  }\n`,wr=t=>`\ndefs #statediagram-barbEnd {\n    fill: ${t.transitionColor};\n    stroke: ${t.transitionColor};\n  }\ng.stateGroup text {\n  fill: ${t.nodeBorder};\n  stroke: none;\n  font-size: 10px;\n}\ng.stateGroup text {\n  fill: ${t.textColor};\n  stroke: none;\n  font-size: 10px;\n\n}\ng.stateGroup .state-title {\n  font-weight: bolder;\n  fill: ${t.stateLabelColor};\n}\n\ng.stateGroup rect {\n  fill: ${t.mainBkg};\n  stroke: ${t.nodeBorder};\n}\n\ng.stateGroup line {\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.transition {\n  stroke: ${t.transitionColor};\n  stroke-width: 1;\n  fill: none;\n}\n\n.stateGroup .composit {\n  fill: ${t.background};\n  border-bottom: 1px\n}\n\n.stateGroup .alt-composit {\n  fill: #e0e0e0;\n  border-bottom: 1px\n}\n\n.state-note {\n  stroke: ${t.noteBorderColor};\n  fill: ${t.noteBkgColor};\n\n  text {\n    fill: ${t.noteTextColor};\n    stroke: none;\n    font-size: 10px;\n  }\n}\n\n.stateLabel .box {\n  stroke: none;\n  stroke-width: 0;\n  fill: ${t.mainBkg};\n  opacity: 0.5;\n}\n\n.edgeLabel .label rect {\n  fill: ${t.labelBackgroundColor};\n  opacity: 0.5;\n}\n.edgeLabel .label text {\n  fill: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n.label div .edgeLabel {\n  color: ${t.transitionLabelColor||t.tertiaryTextColor};\n}\n\n.stateLabel text {\n  fill: ${t.stateLabelColor};\n  font-size: 10px;\n  font-weight: bold;\n}\n\n.node circle.state-start {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node .fork-join {\n  fill: ${t.specialStateColor};\n  stroke: ${t.specialStateColor};\n}\n\n.node circle.state-end {\n  fill: ${t.innerEndBackground};\n  stroke: ${t.background};\n  stroke-width: 1.5\n}\n.end-state-inner {\n  fill: ${t.compositeBackground||t.background};\n  // stroke: ${t.background};\n  stroke-width: 1.5\n}\n\n.node rect {\n  fill: ${t.stateBkg||t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n.node polygon {\n  fill: ${t.mainBkg};\n  stroke: ${t.stateBorder||t.nodeBorder};;\n  stroke-width: 1px;\n}\n#statediagram-barbEnd {\n  fill: ${t.lineColor};\n}\n\n.statediagram-cluster rect {\n  fill: ${t.compositeTitleBackground};\n  stroke: ${t.stateBorder||t.nodeBorder};\n  stroke-width: 1px;\n}\n\n.cluster-label, .nodeLabel {\n  color: ${t.stateLabelColor};\n}\n\n.statediagram-cluster rect.outer {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state .divider {\n  stroke: ${t.stateBorder||t.nodeBorder};\n}\n\n.statediagram-state .title-state {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-cluster.statediagram-cluster .inner {\n  fill: ${t.compositeBackground||t.background};\n}\n.statediagram-cluster.statediagram-cluster-alt .inner {\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.statediagram-cluster .inner {\n  rx:0;\n  ry:0;\n}\n\n.statediagram-state rect.basic {\n  rx: 5px;\n  ry: 5px;\n}\n.statediagram-state rect.divider {\n  stroke-dasharray: 10,10;\n  fill: ${t.altBackground?t.altBackground:"#efefef"};\n}\n\n.note-edge {\n  stroke-dasharray: 5;\n}\n\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n.statediagram-note rect {\n  fill: ${t.noteBkgColor};\n  stroke: ${t.noteBorderColor};\n  stroke-width: 1px;\n  rx: 0;\n  ry: 0;\n}\n\n.statediagram-note text {\n  fill: ${t.noteTextColor};\n}\n\n.statediagram-note .nodeLabel {\n  color: ${t.noteTextColor};\n}\n.statediagram .edgeLabel {\n  color: red; // ${t.noteTextColor};\n}\n\n#dependencyStart, #dependencyEnd {\n  fill: ${t.lineColor};\n  stroke: ${t.lineColor};\n  stroke-width: 1;\n}\n\n.statediagramTitleText {\n  text-anchor: middle;\n  font-size: 18px;\n  fill: ${t.textColor};\n}\n`,Er=t=>`.label {\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    color: ${t.textColor};\n  }\n  .mouth {\n    stroke: #666;\n  }\n\n  line {\n    stroke: ${t.textColor}\n  }\n\n  .legend {\n    fill: ${t.textColor};\n  }\n\n  .label text {\n    fill: #333;\n  }\n  .label {\n    color: ${t.textColor}\n  }\n\n  .face {\n    ${t.faceColor?`fill: ${t.faceColor}`:"fill: #FFF8DC"};\n    stroke: #999;\n  }\n\n  .node rect,\n  .node circle,\n  .node ellipse,\n  .node polygon,\n  .node path {\n    fill: ${t.mainBkg};\n    stroke: ${t.nodeBorder};\n    stroke-width: 1px;\n  }\n\n  .node .label {\n    text-align: center;\n  }\n  .node.clickable {\n    cursor: pointer;\n  }\n\n  .arrowheadPath {\n    fill: ${t.arrowheadColor};\n  }\n\n  .edgePath .path {\n    stroke: ${t.lineColor};\n    stroke-width: 1.5px;\n  }\n\n  .flowchart-link {\n    stroke: ${t.lineColor};\n    fill: none;\n  }\n\n  .edgeLabel {\n    background-color: ${t.edgeLabelBackground};\n    rect {\n      opacity: 0.5;\n    }\n    text-align: center;\n  }\n\n  .cluster rect {\n  }\n\n  .cluster text {\n    fill: ${t.titleColor};\n  }\n\n  div.mermaidTooltip {\n    position: absolute;\n    text-align: center;\n    max-width: 200px;\n    padding: 2px;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n    font-size: 12px;\n    background: ${t.tertiaryColor};\n    border: 1px solid ${t.border2};\n    border-radius: 2px;\n    pointer-events: none;\n    z-index: 100;\n  }\n\n  .task-type-0, .section-type-0  {\n    ${t.fillType0?`fill: ${t.fillType0}`:""};\n  }\n  .task-type-1, .section-type-1  {\n    ${t.fillType0?`fill: ${t.fillType1}`:""};\n  }\n  .task-type-2, .section-type-2  {\n    ${t.fillType0?`fill: ${t.fillType2}`:""};\n  }\n  .task-type-3, .section-type-3  {\n    ${t.fillType0?`fill: ${t.fillType3}`:""};\n  }\n  .task-type-4, .section-type-4  {\n    ${t.fillType0?`fill: ${t.fillType4}`:""};\n  }\n  .task-type-5, .section-type-5  {\n    ${t.fillType0?`fill: ${t.fillType5}`:""};\n  }\n  .task-type-6, .section-type-6  {\n    ${t.fillType0?`fill: ${t.fillType6}`:""};\n  }\n  .task-type-7, .section-type-7  {\n    ${t.fillType0?`fill: ${t.fillType7}`:""};\n  }\n\n  .actor-0 {\n    ${t.actor0?`fill: ${t.actor0}`:""};\n  }\n  .actor-1 {\n    ${t.actor1?`fill: ${t.actor1}`:""};\n  }\n  .actor-2 {\n    ${t.actor2?`fill: ${t.actor2}`:""};\n  }\n  .actor-3 {\n    ${t.actor3?`fill: ${t.actor3}`:""};\n  }\n  .actor-4 {\n    ${t.actor4?`fill: ${t.actor4}`:""};\n  }\n  .actor-5 {\n    ${t.actor5?`fill: ${t.actor5}`:""};\n  }\n`,Cr=t=>`.person {\n    stroke: ${t.personBorder};\n    fill: ${t.personBkg};\n  }\n`,Tr={flowchart:mr,"flowchart-v2":mr,sequence:kr,gantt:br,classDiagram:fr,"classDiagram-v2":fr,class:fr,stateDiagram:wr,state:wr,info:_r,pie:xr,er:gr,error:yr,journey:Er,requirement:vr,c4:Cr},Sr=(t,e,n)=>{let r="";return t in Tr&&Tr[t]?r=Tr[t](n):Nt.warn(`No theme found for ${t}`),` & {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n    fill: ${n.textColor}\n  }\n\n  /* Classes common for multiple diagrams */\n\n  & .error-icon {\n    fill: ${n.errorBkgColor};\n  }\n  & .error-text {\n    fill: ${n.errorTextColor};\n    stroke: ${n.errorTextColor};\n  }\n\n  & .edge-thickness-normal {\n    stroke-width: 2px;\n  }\n  & .edge-thickness-thick {\n    stroke-width: 3.5px\n  }\n  & .edge-pattern-solid {\n    stroke-dasharray: 0;\n  }\n\n  & .edge-pattern-dashed{\n    stroke-dasharray: 3;\n  }\n  .edge-pattern-dotted {\n    stroke-dasharray: 2;\n  }\n\n  & .marker {\n    fill: ${n.lineColor};\n    stroke: ${n.lineColor};\n  }\n  & .marker.cross {\n    stroke: ${n.lineColor};\n  }\n\n  & svg {\n    font-family: ${n.fontFamily};\n    font-size: ${n.fontSize};\n  }\n\n  ${r}\n\n  ${e}\n`};let Ar="",Lr="",Br="";const Nr=t=>Ft(t,ar()),Dr=function(){Ar="",Br="",Lr=""},Or=function(t){Ar=Nr(t).replace(/^\s+/g,"")},Mr=function(){return Ar||Lr},Ir=function(t){Br=Nr(t).replace(/\n\s+/g,"\n")},Fr=function(){return Br},$r=function(t){Lr=Nr(t)},Rr=function(){return Lr},Zr={setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,getAccDescription:Fr,setAccDescription:Ir,clear:Dr},Pr=Object.freeze(Object.defineProperty({__proto__:null,clear:Dr,default:Zr,getAccDescription:Fr,getAccTitle:Mr,getDiagramTitle:Rr,setAccDescription:Ir,setAccTitle:Or,setDiagramTitle:$r},Symbol.toStringTag,{value:"Module"}));let jr={};const Yr=function(t,e,n,r){Nt.debug("parseDirective is being called",e,n,r);try{if(void 0!==e)switch(e=e.trim(),n){case"open_directive":jr={};break;case"type_directive":if(!jr)throw new Error("currentDirective is undefined");jr.type=e.toLowerCase();break;case"arg_directive":if(!jr)throw new Error("currentDirective is undefined");jr.args=JSON.parse(e);break;case"close_directive":zr(t,jr,r),jr=void 0}}catch(i){Nt.error(`Error while rendering sequenceDiagram directive: ${e} jison context: ${n}`),Nt.error(i.message)}},zr=function(t,e,n){switch(Nt.info(`Directive type=${e.type} with args:`,e.args),e.type){case"init":case"initialize":["config"].forEach((t=>{void 0!==e.args[t]&&("flowchart-v2"===n&&(n="flowchart"),e.args[n]=e.args[t],delete e.args[t])})),Nt.info("sanitize in handleDirective",e.args),Wn(e.args),Nt.info("sanitize in handleDirective (done)",e.args),or(e.args);break;case"wrap":case"nowrap":t&&t.setWrap&&t.setWrap("wrap"===e.type);break;case"themeCss":Nt.warn("themeCss encountered");break;default:Nt.warn(`Unhandled directive: source: '%%{${e.type}: ${JSON.stringify(e.args?e.args:{})}}%%`,e)}},Ur=Nt,Wr=Dt,qr=ar,Hr=t=>Ft(t,qr()),Vr=pr,Gr=(t,e,n,r)=>Yr(t,e,n,r),Xr={},Kr=(t,e,n)=>{if(Xr[t])throw new Error(`Diagram ${t} already registered.`);var r,i;Xr[t]=e,n&&Cn(t,n),r=t,i=e.styles,Tr[r]=i,e.injectUtils&&e.injectUtils(Ur,Wr,qr,Hr,Vr,Pr,Gr)},Qr=t=>{if(t in Xr)return Xr[t];throw new Error(`Diagram ${t} not found.`)};var Jr=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,7],i=[1,5],a=[1,9],s=[1,6],o=[2,6],c=[1,16],l=[6,8,14,20,22,24,25,27,29,32,37,40,50,55],h=[8,14,20,22,24,25,27,29,32,37,40],u=[8,13,14,20,22,24,25,27,29,32,37,40],d=[1,26],p=[6,8,14,50,55],f=[8,14,55],g=[1,53],y=[1,52],m=[8,14,30,33,35,38,55],b=[1,67],_=[1,68],x=[1,69],v=[8,14,33,35,42,55],k={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,GG:6,document:7,EOF:8,":":9,DIR:10,options:11,body:12,OPT:13,NL:14,line:15,statement:16,commitStatement:17,mergeStatement:18,cherryPickStatement:19,acc_title:20,acc_title_value:21,acc_descr:22,acc_descr_value:23,acc_descr_multiline_value:24,section:25,branchStatement:26,CHECKOUT:27,ref:28,BRANCH:29,ORDER:30,NUM:31,CHERRY_PICK:32,COMMIT_ID:33,STR:34,COMMIT_TAG:35,EMPTYSTR:36,MERGE:37,COMMIT_TYPE:38,commitType:39,COMMIT:40,commit_arg:41,COMMIT_MSG:42,NORMAL:43,REVERSE:44,HIGHLIGHT:45,openDirective:46,typeDirective:47,closeDirective:48,argDirective:49,open_directive:50,type_directive:51,arg_directive:52,close_directive:53,ID:54,";":55,$accept:0,$end:1},terminals_:{2:"error",6:"GG",8:"EOF",9:":",10:"DIR",13:"OPT",14:"NL",20:"acc_title",21:"acc_title_value",22:"acc_descr",23:"acc_descr_value",24:"acc_descr_multiline_value",25:"section",27:"CHECKOUT",29:"BRANCH",30:"ORDER",31:"NUM",32:"CHERRY_PICK",33:"COMMIT_ID",34:"STR",35:"COMMIT_TAG",36:"EMPTYSTR",37:"MERGE",38:"COMMIT_TYPE",40:"COMMIT",42:"COMMIT_MSG",43:"NORMAL",44:"REVERSE",45:"HIGHLIGHT",50:"open_directive",51:"type_directive",52:"arg_directive",53:"close_directive",54:"ID",55:";"},productions_:[0,[3,2],[3,2],[3,3],[3,4],[3,5],[7,0],[7,2],[11,2],[11,1],[12,0],[12,2],[15,2],[15,1],[16,1],[16,1],[16,1],[16,2],[16,2],[16,1],[16,1],[16,1],[16,2],[26,2],[26,4],[19,3],[19,5],[19,5],[19,5],[19,5],[18,2],[18,4],[18,4],[18,4],[18,6],[18,6],[18,6],[18,6],[18,6],[18,6],[18,8],[18,8],[18,8],[18,8],[18,8],[18,8],[17,2],[17,3],[17,3],[17,5],[17,5],[17,3],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,3],[17,5],[17,5],[17,5],[17,5],[17,5],[17,5],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,7],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[17,9],[41,0],[41,1],[39,1],[39,1],[39,1],[5,3],[5,5],[46,1],[47,1],[49,1],[48,1],[28,1],[28,1],[4,1],[4,1],[4,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 3:return a[o];case 4:return a[o-1];case 5:return r.setDirection(a[o-3]),a[o-1];case 7:r.setOptions(a[o-1]),this.$=a[o];break;case 8:a[o-1]+=a[o],this.$=a[o-1];break;case 10:this.$=[];break;case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 12:this.$=a[o-1];break;case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 20:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 22:r.checkout(a[o]);break;case 23:r.branch(a[o]);break;case 24:r.branch(a[o-2],a[o]);break;case 25:r.cherryPick(a[o],"",void 0);break;case 26:r.cherryPick(a[o-2],"",a[o]);break;case 27:case 29:r.cherryPick(a[o-2],"","");break;case 28:r.cherryPick(a[o],"",a[o-2]);break;case 30:r.merge(a[o],"","","");break;case 31:r.merge(a[o-2],a[o],"","");break;case 32:r.merge(a[o-2],"",a[o],"");break;case 33:r.merge(a[o-2],"","",a[o]);break;case 34:r.merge(a[o-4],a[o],"",a[o-2]);break;case 35:r.merge(a[o-4],"",a[o],a[o-2]);break;case 36:r.merge(a[o-4],"",a[o-2],a[o]);break;case 37:r.merge(a[o-4],a[o-2],a[o],"");break;case 38:r.merge(a[o-4],a[o-2],"",a[o]);break;case 39:r.merge(a[o-4],a[o],a[o-2],"");break;case 40:r.merge(a[o-6],a[o-4],a[o-2],a[o]);break;case 41:r.merge(a[o-6],a[o],a[o-4],a[o-2]);break;case 42:r.merge(a[o-6],a[o-4],a[o],a[o-2]);break;case 43:r.merge(a[o-6],a[o-2],a[o-4],a[o]);break;case 44:r.merge(a[o-6],a[o],a[o-2],a[o-4]);break;case 45:r.merge(a[o-6],a[o-2],a[o],a[o-4]);break;case 46:r.commit(a[o]);break;case 47:r.commit("","",r.commitType.NORMAL,a[o]);break;case 48:r.commit("","",a[o],"");break;case 49:r.commit("","",a[o],a[o-2]);break;case 50:r.commit("","",a[o-2],a[o]);break;case 51:r.commit("",a[o],r.commitType.NORMAL,"");break;case 52:r.commit("",a[o-2],r.commitType.NORMAL,a[o]);break;case 53:r.commit("",a[o],r.commitType.NORMAL,a[o-2]);break;case 54:r.commit("",a[o-2],a[o],"");break;case 55:r.commit("",a[o],a[o-2],"");break;case 56:r.commit("",a[o-4],a[o-2],a[o]);break;case 57:r.commit("",a[o-4],a[o],a[o-2]);break;case 58:r.commit("",a[o-2],a[o-4],a[o]);break;case 59:r.commit("",a[o],a[o-4],a[o-2]);break;case 60:r.commit("",a[o],a[o-2],a[o-4]);break;case 61:r.commit("",a[o-2],a[o],a[o-4]);break;case 62:r.commit(a[o],"",r.commitType.NORMAL,"");break;case 63:r.commit(a[o],"",r.commitType.NORMAL,a[o-2]);break;case 64:r.commit(a[o-2],"",r.commitType.NORMAL,a[o]);break;case 65:r.commit(a[o-2],"",a[o],"");break;case 66:r.commit(a[o],"",a[o-2],"");break;case 67:r.commit(a[o],a[o-2],r.commitType.NORMAL,"");break;case 68:r.commit(a[o-2],a[o],r.commitType.NORMAL,"");break;case 69:r.commit(a[o-4],"",a[o-2],a[o]);break;case 70:r.commit(a[o-4],"",a[o],a[o-2]);break;case 71:r.commit(a[o-2],"",a[o-4],a[o]);break;case 72:r.commit(a[o],"",a[o-4],a[o-2]);break;case 73:r.commit(a[o],"",a[o-2],a[o-4]);break;case 74:r.commit(a[o-2],"",a[o],a[o-4]);break;case 75:r.commit(a[o-4],a[o],a[o-2],"");break;case 76:r.commit(a[o-4],a[o-2],a[o],"");break;case 77:r.commit(a[o-2],a[o],a[o-4],"");break;case 78:r.commit(a[o],a[o-2],a[o-4],"");break;case 79:r.commit(a[o],a[o-4],a[o-2],"");break;case 80:r.commit(a[o-2],a[o-4],a[o],"");break;case 81:r.commit(a[o-4],a[o],r.commitType.NORMAL,a[o-2]);break;case 82:r.commit(a[o-4],a[o-2],r.commitType.NORMAL,a[o]);break;case 83:r.commit(a[o-2],a[o],r.commitType.NORMAL,a[o-4]);break;case 84:r.commit(a[o],a[o-2],r.commitType.NORMAL,a[o-4]);break;case 85:r.commit(a[o],a[o-4],r.commitType.NORMAL,a[o-2]);break;case 86:r.commit(a[o-2],a[o-4],r.commitType.NORMAL,a[o]);break;case 87:r.commit(a[o-6],a[o-4],a[o-2],a[o]);break;case 88:r.commit(a[o-6],a[o-4],a[o],a[o-2]);break;case 89:r.commit(a[o-6],a[o-2],a[o-4],a[o]);break;case 90:r.commit(a[o-6],a[o],a[o-4],a[o-2]);break;case 91:r.commit(a[o-6],a[o-2],a[o],a[o-4]);break;case 92:r.commit(a[o-6],a[o],a[o-2],a[o-4]);break;case 93:r.commit(a[o-4],a[o-6],a[o-2],a[o]);break;case 94:r.commit(a[o-4],a[o-6],a[o],a[o-2]);break;case 95:r.commit(a[o-2],a[o-6],a[o-4],a[o]);break;case 96:r.commit(a[o],a[o-6],a[o-4],a[o-2]);break;case 97:r.commit(a[o-2],a[o-6],a[o],a[o-4]);break;case 98:r.commit(a[o],a[o-6],a[o-2],a[o-4]);break;case 99:r.commit(a[o],a[o-4],a[o-2],a[o-6]);break;case 100:r.commit(a[o-2],a[o-4],a[o],a[o-6]);break;case 101:r.commit(a[o],a[o-2],a[o-4],a[o-6]);break;case 102:r.commit(a[o-2],a[o],a[o-4],a[o-6]);break;case 103:r.commit(a[o-4],a[o-2],a[o],a[o-6]);break;case 104:r.commit(a[o-4],a[o],a[o-2],a[o-6]);break;case 105:r.commit(a[o-2],a[o-4],a[o-6],a[o]);break;case 106:r.commit(a[o],a[o-4],a[o-6],a[o-2]);break;case 107:r.commit(a[o-2],a[o],a[o-6],a[o-4]);break;case 108:r.commit(a[o],a[o-2],a[o-6],a[o-4]);break;case 109:r.commit(a[o-4],a[o-2],a[o-6],a[o]);break;case 110:r.commit(a[o-4],a[o],a[o-6],a[o-2]);break;case 111:this.$="";break;case 112:this.$=a[o];break;case 113:this.$=r.commitType.NORMAL;break;case 114:this.$=r.commitType.REVERSE;break;case 115:this.$=r.commitType.HIGHLIGHT;break;case 118:r.parseDirective("%%{","open_directive");break;case 119:r.parseDirective(a[o],"type_directive");break;case 120:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 121:r.parseDirective("}%%","close_directive","gitGraph")}},table:[{3:1,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{1:[3]},{3:10,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{3:11,4:2,5:3,6:n,8:r,14:i,46:8,50:a,55:s},{7:12,8:o,9:[1,13],10:[1,14],11:15,14:c},e(l,[2,124]),e(l,[2,125]),e(l,[2,126]),{47:17,51:[1,18]},{51:[2,118]},{1:[2,1]},{1:[2,2]},{8:[1,19]},{7:20,8:o,11:15,14:c},{9:[1,21]},e(h,[2,10],{12:22,13:[1,23]}),e(u,[2,9]),{9:[1,25],48:24,53:d},e([9,53],[2,119]),{1:[2,3]},{8:[1,27]},{7:28,8:o,11:15,14:c},{8:[2,7],14:[1,31],15:29,16:30,17:32,18:33,19:34,20:[1,35],22:[1,36],24:[1,37],25:[1,38],26:39,27:[1,40],29:[1,44],32:[1,43],37:[1,42],40:[1,41]},e(u,[2,8]),e(p,[2,116]),{49:45,52:[1,46]},e(p,[2,121]),{1:[2,4]},{8:[1,47]},e(h,[2,11]),{4:48,8:r,14:i,55:s},e(h,[2,13]),e(f,[2,14]),e(f,[2,15]),e(f,[2,16]),{21:[1,49]},{23:[1,50]},e(f,[2,19]),e(f,[2,20]),e(f,[2,21]),{28:51,34:g,54:y},e(f,[2,111],{41:54,33:[1,57],34:[1,59],35:[1,55],38:[1,56],42:[1,58]}),{28:60,34:g,54:y},{33:[1,61],35:[1,62]},{28:63,34:g,54:y},{48:64,53:d},{53:[2,120]},{1:[2,5]},e(h,[2,12]),e(f,[2,17]),e(f,[2,18]),e(f,[2,22]),e(m,[2,122]),e(m,[2,123]),e(f,[2,46]),{34:[1,65]},{39:66,43:b,44:_,45:x},{34:[1,70]},{34:[1,71]},e(f,[2,112]),e(f,[2,30],{33:[1,72],35:[1,74],38:[1,73]}),{34:[1,75]},{34:[1,76],36:[1,77]},e(f,[2,23],{30:[1,78]}),e(p,[2,117]),e(f,[2,47],{33:[1,80],38:[1,79],42:[1,81]}),e(f,[2,48],{33:[1,83],35:[1,82],42:[1,84]}),e(v,[2,113]),e(v,[2,114]),e(v,[2,115]),e(f,[2,51],{35:[1,85],38:[1,86],42:[1,87]}),e(f,[2,62],{33:[1,90],35:[1,88],38:[1,89]}),{34:[1,91]},{39:92,43:b,44:_,45:x},{34:[1,93]},e(f,[2,25],{35:[1,94]}),{33:[1,95]},{33:[1,96]},{31:[1,97]},{39:98,43:b,44:_,45:x},{34:[1,99]},{34:[1,100]},{34:[1,101]},{34:[1,102]},{34:[1,103]},{34:[1,104]},{39:105,43:b,44:_,45:x},{34:[1,106]},{34:[1,107]},{39:108,43:b,44:_,45:x},{34:[1,109]},e(f,[2,31],{35:[1,111],38:[1,110]}),e(f,[2,32],{33:[1,113],35:[1,112]}),e(f,[2,33],{33:[1,114],38:[1,115]}),{34:[1,116],36:[1,117]},{34:[1,118]},{34:[1,119]},e(f,[2,24]),e(f,[2,49],{33:[1,120],42:[1,121]}),e(f,[2,53],{38:[1,122],42:[1,123]}),e(f,[2,63],{33:[1,125],38:[1,124]}),e(f,[2,50],{33:[1,126],42:[1,127]}),e(f,[2,55],{35:[1,128],42:[1,129]}),e(f,[2,66],{33:[1,131],35:[1,130]}),e(f,[2,52],{38:[1,132],42:[1,133]}),e(f,[2,54],{35:[1,134],42:[1,135]}),e(f,[2,67],{35:[1,137],38:[1,136]}),e(f,[2,64],{33:[1,139],38:[1,138]}),e(f,[2,65],{33:[1,141],35:[1,140]}),e(f,[2,68],{35:[1,143],38:[1,142]}),{39:144,43:b,44:_,45:x},{34:[1,145]},{34:[1,146]},{34:[1,147]},{34:[1,148]},{39:149,43:b,44:_,45:x},e(f,[2,26]),e(f,[2,27]),e(f,[2,28]),e(f,[2,29]),{34:[1,150]},{34:[1,151]},{39:152,43:b,44:_,45:x},{34:[1,153]},{39:154,43:b,44:_,45:x},{34:[1,155]},{34:[1,156]},{34:[1,157]},{34:[1,158]},{34:[1,159]},{34:[1,160]},{34:[1,161]},{39:162,43:b,44:_,45:x},{34:[1,163]},{34:[1,164]},{34:[1,165]},{39:166,43:b,44:_,45:x},{34:[1,167]},{39:168,43:b,44:_,45:x},{34:[1,169]},{34:[1,170]},{34:[1,171]},{39:172,43:b,44:_,45:x},{34:[1,173]},e(f,[2,37],{35:[1,174]}),e(f,[2,38],{38:[1,175]}),e(f,[2,36],{33:[1,176]}),e(f,[2,39],{35:[1,177]}),e(f,[2,34],{38:[1,178]}),e(f,[2,35],{33:[1,179]}),e(f,[2,60],{42:[1,180]}),e(f,[2,73],{33:[1,181]}),e(f,[2,61],{42:[1,182]}),e(f,[2,84],{38:[1,183]}),e(f,[2,74],{33:[1,184]}),e(f,[2,83],{38:[1,185]}),e(f,[2,59],{42:[1,186]}),e(f,[2,72],{33:[1,187]}),e(f,[2,58],{42:[1,188]}),e(f,[2,78],{35:[1,189]}),e(f,[2,71],{33:[1,190]}),e(f,[2,77],{35:[1,191]}),e(f,[2,57],{42:[1,192]}),e(f,[2,85],{38:[1,193]}),e(f,[2,56],{42:[1,194]}),e(f,[2,79],{35:[1,195]}),e(f,[2,80],{35:[1,196]}),e(f,[2,86],{38:[1,197]}),e(f,[2,70],{33:[1,198]}),e(f,[2,81],{38:[1,199]}),e(f,[2,69],{33:[1,200]}),e(f,[2,75],{35:[1,201]}),e(f,[2,76],{35:[1,202]}),e(f,[2,82],{38:[1,203]}),{34:[1,204]},{39:205,43:b,44:_,45:x},{34:[1,206]},{34:[1,207]},{39:208,43:b,44:_,45:x},{34:[1,209]},{34:[1,210]},{34:[1,211]},{34:[1,212]},{39:213,43:b,44:_,45:x},{34:[1,214]},{39:215,43:b,44:_,45:x},{34:[1,216]},{34:[1,217]},{34:[1,218]},{34:[1,219]},{34:[1,220]},{34:[1,221]},{34:[1,222]},{39:223,43:b,44:_,45:x},{34:[1,224]},{34:[1,225]},{34:[1,226]},{39:227,43:b,44:_,45:x},{34:[1,228]},{39:229,43:b,44:_,45:x},{34:[1,230]},{34:[1,231]},{34:[1,232]},{39:233,43:b,44:_,45:x},e(f,[2,40]),e(f,[2,42]),e(f,[2,41]),e(f,[2,43]),e(f,[2,45]),e(f,[2,44]),e(f,[2,101]),e(f,[2,102]),e(f,[2,99]),e(f,[2,100]),e(f,[2,104]),e(f,[2,103]),e(f,[2,108]),e(f,[2,107]),e(f,[2,106]),e(f,[2,105]),e(f,[2,110]),e(f,[2,109]),e(f,[2,98]),e(f,[2,97]),e(f,[2,96]),e(f,[2,95]),e(f,[2,93]),e(f,[2,94]),e(f,[2,92]),e(f,[2,91]),e(f,[2,90]),e(f,[2,89]),e(f,[2,87]),e(f,[2,88])],defaultActions:{9:[2,118],10:[2,1],11:[2,2],19:[2,3],27:[2,4],46:[2,120],47:[2,5]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),50;case 1:return this.begin("type_directive"),51;case 2:return this.popState(),this.begin("arg_directive"),9;case 3:return this.popState(),this.popState(),53;case 4:return 52;case 5:return this.begin("acc_title"),20;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),22;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 34:case 38:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:return 14;case 13:case 14:break;case 15:return 6;case 16:return 40;case 17:return 33;case 18:return 38;case 19:return 42;case 20:return 43;case 21:return 44;case 22:return 45;case 23:return 35;case 24:return 29;case 25:return 30;case 26:return 37;case 27:return 32;case 28:return 27;case 29:case 30:return 10;case 31:return 9;case 32:return"CARET";case 33:this.begin("options");break;case 35:return 13;case 36:return 36;case 37:this.begin("string");break;case 39:return 34;case 40:return 31;case 41:return 54;case 42:return 8}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:gitGraph\b)/i,/^(?:commit(?=\s|$))/i,/^(?:id:)/i,/^(?:type:)/i,/^(?:msg:)/i,/^(?:NORMAL\b)/i,/^(?:REVERSE\b)/i,/^(?:HIGHLIGHT\b)/i,/^(?:tag:)/i,/^(?:branch(?=\s|$))/i,/^(?:order:)/i,/^(?:merge(?=\s|$))/i,/^(?:cherry-pick(?=\s|$))/i,/^(?:checkout(?=\s|$))/i,/^(?:LR\b)/i,/^(?:BT\b)/i,/^(?::)/i,/^(?:\^)/i,/^(?:options\r?\n)/i,/^(?:[ \r\n\t]+end\b)/i,/^(?:[\s\S]+(?=[ \r\n\t]+end))/i,/^(?:["]["])/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[0-9]+(?=\s|$))/i,/^(?:\w([-\./\w]*[-\w])?)/i,/^(?:$)/i,/^(?:\s+)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},options:{rules:[34,35],inclusive:!1},string:{rules:[38,39],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,36,37,40,41,42,43],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Jr.parser=Jr;const ti=Jr,ei=t=>null!==t.match(/^\s*gitGraph/);let ni=ar().gitGraph.mainBranchName,ri=ar().gitGraph.mainBranchOrder,ii={},ai=null,si={};si[ni]={name:ni,order:ri};let oi={};oi[ni]=ai;let ci=ni,li="LR",hi=0;function ui(){return $n({length:7})}let di={};const pi=function(t){if(t=Yt.sanitizeText(t,ar()),void 0===oi[t]){let e=new Error('Trying to checkout branch which is not yet created. (Help try using "branch '+t+'")');throw e.hash={text:"checkout "+t,token:"checkout "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"branch '+t+'"']},e}{ci=t;const e=oi[ci];ai=ii[e]}};function fi(t,e,n){const r=t.indexOf(e);-1===r?t.push(n):t.splice(r,1,n)}function gi(t){const e=t.reduce(((t,e)=>t.seq>e.seq?t:e),t[0]);let n="";t.forEach((function(t){n+=t===e?"\t*":"\t|"}));const r=[n,e.id,e.seq];for(let i in oi)oi[i]===e.id&&r.push(i);if(Nt.debug(r.join(" ")),e.parents&&2==e.parents.length){const n=ii[e.parents[0]];fi(t,e,n),t.push(ii[e.parents[1]])}else{if(0==e.parents.length)return;{const n=ii[e.parents];fi(t,e,n)}}gi(t=function(t,e){const n=Object.create(null);return t.reduce(((t,r)=>{const i=e(r);return n[i]||(n[i]=!0,t.push(r)),t}),[])}(t,(t=>t.id)))}const yi=function(){const t=Object.keys(ii).map((function(t){return ii[t]}));return t.forEach((function(t){Nt.debug(t.id)})),t.sort(((t,e)=>t.seq-e.seq)),t},mi={NORMAL:0,REVERSE:1,HIGHLIGHT:2,MERGE:3,CHERRY_PICK:4},bi={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gitGraph,setDirection:function(t){li=t},setOptions:function(t){Nt.debug("options str",t),t=(t=t&&t.trim())||"{}";try{di=JSON.parse(t)}catch(e){Nt.error("error while parsing gitGraph options",e.message)}},getOptions:function(){return di},commit:function(t,e,n,r){Nt.debug("Entering commit:",t,e,n,r),e=Yt.sanitizeText(e,ar()),t=Yt.sanitizeText(t,ar()),r=Yt.sanitizeText(r,ar());const i={id:e||hi+"-"+ui(),message:t,seq:hi++,type:n||mi.NORMAL,tag:r||"",parents:null==ai?[]:[ai.id],branch:ci};ai=i,ii[i.id]=i,oi[ci]=i.id,Nt.debug("in pushCommit "+i.id)},branch:function(t,e){if(t=Yt.sanitizeText(t,ar()),void 0!==oi[t]){let e=new Error('Trying to create an existing branch. (Help: Either use a new name if you want create a new branch or try using "checkout '+t+'")');throw e.hash={text:"branch "+t,token:"branch "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"checkout '+t+'"']},e}oi[t]=null!=ai?ai.id:null,si[t]={name:t,order:e?parseInt(e,10):null},pi(t),Nt.debug("in createBranch")},merge:function(t,e,n,r){t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar());const i=ii[oi[ci]],a=ii[oi[t]];if(ci===t){let e=new Error('Incorrect usage of "merge". Cannot merge a branch to itself');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(void 0===i||!i){let e=new Error('Incorrect usage of "merge". Current branch ('+ci+")has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["commit"]},e}if(void 0===oi[t]){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") does not exist");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch "+t]},e}if(void 0===a||!a){let e=new Error('Incorrect usage of "merge". Branch to be merged ('+t+") has no commits");throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:['"commit"']},e}if(i===a){let e=new Error('Incorrect usage of "merge". Both branches have same head');throw e.hash={text:"merge "+t,token:"merge "+t,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["branch abc"]},e}if(e&&void 0!==ii[e]){let i=new Error('Incorrect usage of "merge". Commit with id:'+e+" already exists, use different custom Id");throw i.hash={text:"merge "+t+e+n+r,token:"merge "+t+e+n+r,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["merge "+t+" "+e+"_UNIQUE "+n+" "+r]},i}const s={id:e||hi+"-"+ui(),message:"merged branch "+t+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,oi[t]],branch:ci,type:mi.MERGE,customType:n,customId:!!e,tag:r||""};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in mergeBranch")},cherryPick:function(t,e,n){if(Nt.debug("Entering cherryPick:",t,e,n),t=Yt.sanitizeText(t,ar()),e=Yt.sanitizeText(e,ar()),n=Yt.sanitizeText(n,ar()),!t||void 0===ii[t]){let n=new Error('Incorrect usage of "cherryPick". Source commit id should exist and provided');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}let r=ii[t],i=r.branch;if(r.type===mi.MERGE){let n=new Error('Incorrect usage of "cherryPick". Source commit should not be a merge commit');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}if(!e||void 0===ii[e]){if(i===ci){let n=new Error('Incorrect usage of "cherryPick". Source commit is already on current branch');throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const a=ii[oi[ci]];if(void 0===a||!a){let n=new Error('Incorrect usage of "cherry-pick". Current branch ('+ci+")has no commits");throw n.hash={text:"cherryPick "+t+" "+e,token:"cherryPick "+t+" "+e,line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["cherry-pick abc"]},n}const s={id:hi+"-"+ui(),message:"cherry-picked "+r+" into "+ci,seq:hi++,parents:[null==ai?null:ai.id,r.id],branch:ci,type:mi.CHERRY_PICK,tag:n??"cherry-pick:"+r.id};ai=s,ii[s.id]=s,oi[ci]=s.id,Nt.debug(oi),Nt.debug("in cherryPick")}},checkout:pi,prettyPrint:function(){Nt.debug(ii);gi([yi()[0]])},clear:function(){ii={},ai=null;let t=ar().gitGraph.mainBranchName,e=ar().gitGraph.mainBranchOrder;oi={},oi[t]=null,si={},si[t]={name:t,order:e},ci=t,hi=0,Dr()},getBranchesAsObjArray:function(){const t=Object.values(si).map(((t,e)=>null!==t.order?t:{...t,order:parseFloat(`0.${e}`,10)})).sort(((t,e)=>t.order-e.order)).map((({name:t})=>({name:t})));return t},getBranches:function(){return oi},getCommits:function(){return ii},getCommitsArray:yi,getCurrentBranch:function(){return ci},getDirection:function(){return li},getHead:function(){return ai},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,setDiagramTitle:$r,getDiagramTitle:Rr,commitType:mi};let _i={};const xi=0,vi=1,ki=2,wi=3,Ei=4;let Ci={},Ti={},Si=[],Ai=0;const Li=(t,e,n)=>{const r=qr().gitGraph,i=t.append("g").attr("class","commit-bullets"),a=t.append("g").attr("class","commit-labels");let s=0;Object.keys(e).sort(((t,n)=>e[t].seq-e[n].seq)).forEach((t=>{const o=e[t],c=Ci[o.branch].pos,l=s+10;if(n){let t,e=void 0!==o.customType&&""!==o.customType?o.customType:o.type;switch(e){case xi:t="commit-normal";break;case vi:t="commit-reverse";break;case ki:t="commit-highlight";break;case wi:t="commit-merge";break;case Ei:t="commit-cherry-pick";break;default:t="commit-normal"}if(e===ki){const e=i.append("rect");e.attr("x",l-10),e.attr("y",c-10),e.attr("height",20),e.attr("width",20),e.attr("class",`commit ${o.id} commit-highlight${Ci[o.branch].index%8} ${t}-outer`),i.append("rect").attr("x",l-6).attr("y",c-6).attr("height",12).attr("width",12).attr("class",`commit ${o.id} commit${Ci[o.branch].index%8} ${t}-inner`)}else if(e===Ei)i.append("circle").attr("cx",l).attr("cy",c).attr("r",10).attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l-3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("circle").attr("cx",l+3).attr("cy",c+2).attr("r",2.75).attr("fill","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l+3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`),i.append("line").attr("x1",l-3).attr("y1",c+1).attr("x2",l).attr("y2",c-5).attr("stroke","#fff").attr("class",`commit ${o.id} ${t}`);else{const n=i.append("circle");if(n.attr("cx",l),n.attr("cy",c),n.attr("r",o.type===wi?9:10),n.attr("class",`commit ${o.id} commit${Ci[o.branch].index%8}`),e===wi){const e=i.append("circle");e.attr("cx",l),e.attr("cy",c),e.attr("r",6),e.attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}if(e===vi){i.append("path").attr("d",`M ${l-5},${c-5}L${l+5},${c+5}M${l-5},${c+5}L${l+5},${c-5}`).attr("class",`commit ${t} ${o.id} commit${Ci[o.branch].index%8}`)}}}if(Ti[o.id]={x:s+10,y:c},n){const t=4,e=2;if(o.type!==Ei&&(o.customId&&o.type===wi||o.type!==wi)&&r.showCommitLabel){const t=a.append("g"),n=t.insert("rect").attr("class","commit-label-bkg"),i=t.append("text").attr("x",s).attr("y",c+25).attr("class","commit-label").text(o.id);let l=i.node().getBBox();if(n.attr("x",s+10-l.width/2-e).attr("y",c+13.5).attr("width",l.width+2*e).attr("height",l.height+2*e),i.attr("x",s+10-l.width/2),r.rotateCommitLabel){let e=-7.5-(l.width+10)/25*9.5,n=10+l.width/25*8.5;t.attr("transform","translate("+e+", "+n+") rotate("+"-45, "+s+", "+c+")")}}if(o.tag){const n=a.insert("polygon"),r=a.append("circle"),i=a.append("text").attr("y",c-16).attr("class","tag-label").text(o.tag);let l=i.node().getBBox();i.attr("x",s+10-l.width/2);const h=l.height/2,u=c-19.2;n.attr("class","tag-label-bkg").attr("points",`\n          ${s-l.width/2-t/2},${u+e}\n          ${s-l.width/2-t/2},${u-e}\n          ${s+10-l.width/2-t},${u-h-e}\n          ${s+10+l.width/2+t},${u-h-e}\n          ${s+10+l.width/2+t},${u+h+e}\n          ${s+10-l.width/2-t},${u+h+e}`),r.attr("cx",s-l.width/2+t/2).attr("cy",u).attr("r",1.5).attr("class","tag-hole")}}s+=50,s>Ai&&(Ai=s)}))},Bi=(t,e,n=0)=>{const r=t+Math.abs(t-e)/2;if(n>5)return r;if(Si.every((t=>Math.abs(t-r)>=10)))return Si.push(r),r;const i=Math.abs(t-e);return Bi(t,e-i/5,n+1)},Ni=(t,e,n,r)=>{const i=Ti[e.id],a=Ti[n.id],s=((t,e,n)=>Object.keys(n).filter((r=>n[r].branch===e.branch&&n[r].seq>t.seq&&n[r].seq<e.seq)).length>0)(e,n,r);let o,c="",l="",h=0,u=0,d=Ci[n.branch].index;if(s){c="A 10 10, 0, 0, 0,",l="A 10 10, 0, 0, 1,",h=10,u=10,d=Ci[n.branch].index;const t=i.y<a.y?Bi(i.y,a.y):Bi(a.y,i.y);o=i.y<a.y?`M ${i.x} ${i.y} L ${i.x} ${t-h} ${c} ${i.x+u} ${t} L ${a.x-h} ${t} ${l} ${a.x} ${t+u} L ${a.x} ${a.y}`:`M ${i.x} ${i.y} L ${i.x} ${t+h} ${l} ${i.x+u} ${t} L ${a.x-h} ${t} ${c} ${a.x} ${t-u} L ${a.x} ${a.y}`}else i.y<a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[n.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`),i.y>a.y&&(c="A 20 20, 0, 0, 0,",h=20,u=20,d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${a.x-h} ${i.y} ${c} ${a.x} ${i.y-u} L ${a.x} ${a.y}`),i.y===a.y&&(d=Ci[e.branch].index,o=`M ${i.x} ${i.y} L ${i.x} ${a.y-h} ${c} ${i.x+u} ${a.y} L ${a.x} ${a.y}`);t.append("path").attr("d",o).attr("class","arrow arrow"+d%8)},Di=(t,e)=>{const n=qr().gitGraph,r=t.append("g");e.forEach(((t,e)=>{const i=e%8,a=Ci[t.name].pos,s=r.append("line");s.attr("x1",0),s.attr("y1",a),s.attr("x2",Ai),s.attr("y2",a),s.attr("class","branch branch"+i),Si.push(a);const o=(t=>{const e=document.createElementNS("http://www.w3.org/2000/svg","text");let n=[];n="string"==typeof t?t.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(t)?t:[];for(const r of n){const t=document.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),t.setAttribute("dy","1em"),t.setAttribute("x","0"),t.setAttribute("class","row"),t.textContent=r.trim(),e.appendChild(t)}return e})(t.name),c=r.insert("rect"),l=r.insert("g").attr("class","branchLabel").insert("g").attr("class","label branch-label"+i);l.node().appendChild(o);let h=o.getBBox();c.attr("class","branchLabelBkg label"+i).attr("rx",4).attr("ry",4).attr("x",-h.width-4-(!0===n.rotateCommitLabel?30:0)).attr("y",-h.height/2+8).attr("width",h.width+18).attr("height",h.height+4),l.attr("transform","translate("+(-h.width-14-(!0===n.rotateCommitLabel?30:0))+", "+(a-h.height/2-1)+")"),c.attr("transform","translate(-19, "+(a-h.height/2)+")")}))},Oi={draw:function(t,e,n,r){Ci={},Ti={},_i={},Ai=0,Si=[];const i=qr(),a=i.gitGraph;Nt.debug("in gitgraph renderer",t+"\n","id:",e,n),_i=r.db.getCommits();const s=r.db.getBranchesAsObjArray();let c=0;s.forEach(((t,e)=>{Ci[t.name]={pos:c,index:e},c+=50+(a.rotateCommitLabel?40:0)}));const l=(0,o.Ys)(`[id="${e}"]`);Li(l,_i,!1),a.showBranches&&Di(l,s),((t,e)=>{const n=t.append("g").attr("class","commit-arrows");Object.keys(e).forEach((t=>{const r=e[t];r.parents&&r.parents.length>0&&r.parents.forEach((t=>{Ni(n,e[t],r,e)}))}))})(l,_i),Li(l,_i,!0),Gn.insertTitle(l,"gitTitleText",a.titleTopMargin,r.db.getDiagramTitle()),Vr(void 0,l,a.diagramPadding,a.useMaxWidth??i.useMaxWidth)}},Mi=t=>`\n  .commit-id,\n  .commit-msg,\n  .branch-label {\n    fill: lightgrey;\n    color: lightgrey;\n    font-family: 'trebuchet ms', verdana, arial, sans-serif;\n    font-family: var(--mermaid-font-family);\n  }\n  ${[0,1,2,3,4,5,6,7].map((e=>`\n        .branch-label${e} { fill: ${t["gitBranchLabel"+e]}; }\n        .commit${e} { stroke: ${t["git"+e]}; fill: ${t["git"+e]}; }\n        .commit-highlight${e} { stroke: ${t["gitInv"+e]}; fill: ${t["gitInv"+e]}; }\n        .label${e}  { fill: ${t["git"+e]}; }\n        .arrow${e} { stroke: ${t["git"+e]}; }\n        `)).join("\n")}\n\n  .branch {\n    stroke-width: 1;\n    stroke: ${t.lineColor};\n    stroke-dasharray: 2;\n  }\n  .commit-label { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelColor};}\n  .commit-label-bkg { font-size: ${t.commitLabelFontSize}; fill: ${t.commitLabelBackground}; opacity: 0.5; }\n  .tag-label { font-size: ${t.tagLabelFontSize}; fill: ${t.tagLabelColor};}\n  .tag-label-bkg { fill: ${t.tagLabelBackground}; stroke: ${t.tagLabelBorder}; }\n  .tag-hole { fill: ${t.textColor}; }\n\n  .commit-merge {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n  .commit-reverse {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n    stroke-width: 3;\n  }\n  .commit-highlight-outer {\n  }\n  .commit-highlight-inner {\n    stroke: ${t.primaryColor};\n    fill: ${t.primaryColor};\n  }\n\n  .arrow { stroke-width: 8; stroke-linecap: round; fill: none}\n  .gitTitleText {\n    text-anchor: middle;\n    font-size: 18px;\n    fill: ${t.textColor};\n  }\n  }\n`;var Ii=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,6],r=[1,7],i=[1,8],a=[1,9],s=[1,16],o=[1,11],l=[1,12],h=[1,13],u=[1,14],d=[1,15],p=[1,27],f=[1,33],g=[1,34],y=[1,35],m=[1,36],b=[1,37],_=[1,72],x=[1,73],v=[1,74],k=[1,75],w=[1,76],E=[1,77],C=[1,78],T=[1,38],S=[1,39],A=[1,40],L=[1,41],B=[1,42],N=[1,43],D=[1,44],O=[1,45],M=[1,46],I=[1,47],F=[1,48],$=[1,49],R=[1,50],Z=[1,51],P=[1,52],j=[1,53],Y=[1,54],z=[1,55],U=[1,56],W=[1,57],q=[1,59],H=[1,60],V=[1,61],G=[1,62],X=[1,63],K=[1,64],Q=[1,65],J=[1,66],tt=[1,67],et=[1,68],nt=[1,69],rt=[24,52],it=[24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],at=[15,24,44,46,47,48,49,50,51,52,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],st=[1,94],ot=[1,95],ct=[1,96],lt=[1,97],ht=[15,24,52],ut=[7,8,9,10,18,22,25,26,27,28],dt=[15,24,43,52],pt=[15,24,43,52,86,87,89,90],ft=[15,43],gt=[44,46,47,48,49,50,51,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84],yt={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,direction:5,directive:6,direction_tb:7,direction_bt:8,direction_rl:9,direction_lr:10,graphConfig:11,openDirective:12,typeDirective:13,closeDirective:14,NEWLINE:15,":":16,argDirective:17,open_directive:18,type_directive:19,arg_directive:20,close_directive:21,C4_CONTEXT:22,statements:23,EOF:24,C4_CONTAINER:25,C4_COMPONENT:26,C4_DYNAMIC:27,C4_DEPLOYMENT:28,otherStatements:29,diagramStatements:30,otherStatement:31,title:32,accDescription:33,acc_title:34,acc_title_value:35,acc_descr:36,acc_descr_value:37,acc_descr_multiline_value:38,boundaryStatement:39,boundaryStartStatement:40,boundaryStopStatement:41,boundaryStart:42,LBRACE:43,ENTERPRISE_BOUNDARY:44,attributes:45,SYSTEM_BOUNDARY:46,BOUNDARY:47,CONTAINER_BOUNDARY:48,NODE:49,NODE_L:50,NODE_R:51,RBRACE:52,diagramStatement:53,PERSON:54,PERSON_EXT:55,SYSTEM:56,SYSTEM_DB:57,SYSTEM_QUEUE:58,SYSTEM_EXT:59,SYSTEM_EXT_DB:60,SYSTEM_EXT_QUEUE:61,CONTAINER:62,CONTAINER_DB:63,CONTAINER_QUEUE:64,CONTAINER_EXT:65,CONTAINER_EXT_DB:66,CONTAINER_EXT_QUEUE:67,COMPONENT:68,COMPONENT_DB:69,COMPONENT_QUEUE:70,COMPONENT_EXT:71,COMPONENT_EXT_DB:72,COMPONENT_EXT_QUEUE:73,REL:74,BIREL:75,REL_U:76,REL_D:77,REL_L:78,REL_R:79,REL_B:80,REL_INDEX:81,UPDATE_EL_STYLE:82,UPDATE_REL_STYLE:83,UPDATE_LAYOUT_CONFIG:84,attribute:85,STR:86,STR_KEY:87,STR_VALUE:88,ATTRIBUTE:89,ATTRIBUTE_EMPTY:90,$accept:0,$end:1},terminals_:{2:"error",7:"direction_tb",8:"direction_bt",9:"direction_rl",10:"direction_lr",15:"NEWLINE",16:":",18:"open_directive",19:"type_directive",20:"arg_directive",21:"close_directive",22:"C4_CONTEXT",24:"EOF",25:"C4_CONTAINER",26:"C4_COMPONENT",27:"C4_DYNAMIC",28:"C4_DEPLOYMENT",32:"title",33:"accDescription",34:"acc_title",35:"acc_title_value",36:"acc_descr",37:"acc_descr_value",38:"acc_descr_multiline_value",43:"LBRACE",44:"ENTERPRISE_BOUNDARY",46:"SYSTEM_BOUNDARY",47:"BOUNDARY",48:"CONTAINER_BOUNDARY",49:"NODE",50:"NODE_L",51:"NODE_R",52:"RBRACE",54:"PERSON",55:"PERSON_EXT",56:"SYSTEM",57:"SYSTEM_DB",58:"SYSTEM_QUEUE",59:"SYSTEM_EXT",60:"SYSTEM_EXT_DB",61:"SYSTEM_EXT_QUEUE",62:"CONTAINER",63:"CONTAINER_DB",64:"CONTAINER_QUEUE",65:"CONTAINER_EXT",66:"CONTAINER_EXT_DB",67:"CONTAINER_EXT_QUEUE",68:"COMPONENT",69:"COMPONENT_DB",70:"COMPONENT_QUEUE",71:"COMPONENT_EXT",72:"COMPONENT_EXT_DB",73:"COMPONENT_EXT_QUEUE",74:"REL",75:"BIREL",76:"REL_U",77:"REL_D",78:"REL_L",79:"REL_R",80:"REL_B",81:"REL_INDEX",82:"UPDATE_EL_STYLE",83:"UPDATE_REL_STYLE",84:"UPDATE_LAYOUT_CONFIG",86:"STR",87:"STR_KEY",88:"STR_VALUE",89:"ATTRIBUTE",90:"ATTRIBUTE_EMPTY"},productions_:[0,[3,1],[3,1],[3,2],[5,1],[5,1],[5,1],[5,1],[4,1],[6,4],[6,6],[12,1],[13,1],[17,1],[14,1],[11,4],[11,4],[11,4],[11,4],[11,4],[23,1],[23,1],[23,2],[29,1],[29,2],[29,3],[31,1],[31,1],[31,2],[31,2],[31,1],[39,3],[40,3],[40,3],[40,4],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[42,2],[41,1],[30,1],[30,2],[30,3],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,1],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[53,2],[45,1],[45,2],[85,1],[85,2],[85,1],[85,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setDirection("TB");break;case 5:r.setDirection("BT");break;case 6:r.setDirection("RL");break;case 7:r.setDirection("LR");break;case 11:r.parseDirective("%%{","open_directive");break;case 12:break;case 13:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 14:r.parseDirective("}%%","close_directive","c4Context");break;case 15:case 16:case 17:case 18:case 19:r.setC4Type(a[o-3]);break;case 26:r.setTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 27:r.setAccDescription(a[o].substring(15)),this.$=a[o].substring(15);break;case 28:this.$=a[o].trim(),r.setTitle(this.$);break;case 29:case 30:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 35:case 36:a[o].splice(2,0,"ENTERPRISE"),r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 37:r.addPersonOrSystemBoundary(...a[o]),this.$=a[o];break;case 38:a[o].splice(2,0,"CONTAINER"),r.addContainerBoundary(...a[o]),this.$=a[o];break;case 39:r.addDeploymentNode("node",...a[o]),this.$=a[o];break;case 40:r.addDeploymentNode("nodeL",...a[o]),this.$=a[o];break;case 41:r.addDeploymentNode("nodeR",...a[o]),this.$=a[o];break;case 42:r.popBoundaryParseStack();break;case 46:r.addPersonOrSystem("person",...a[o]),this.$=a[o];break;case 47:r.addPersonOrSystem("external_person",...a[o]),this.$=a[o];break;case 48:r.addPersonOrSystem("system",...a[o]),this.$=a[o];break;case 49:r.addPersonOrSystem("system_db",...a[o]),this.$=a[o];break;case 50:r.addPersonOrSystem("system_queue",...a[o]),this.$=a[o];break;case 51:r.addPersonOrSystem("external_system",...a[o]),this.$=a[o];break;case 52:r.addPersonOrSystem("external_system_db",...a[o]),this.$=a[o];break;case 53:r.addPersonOrSystem("external_system_queue",...a[o]),this.$=a[o];break;case 54:r.addContainer("container",...a[o]),this.$=a[o];break;case 55:r.addContainer("container_db",...a[o]),this.$=a[o];break;case 56:r.addContainer("container_queue",...a[o]),this.$=a[o];break;case 57:r.addContainer("external_container",...a[o]),this.$=a[o];break;case 58:r.addContainer("external_container_db",...a[o]),this.$=a[o];break;case 59:r.addContainer("external_container_queue",...a[o]),this.$=a[o];break;case 60:r.addComponent("component",...a[o]),this.$=a[o];break;case 61:r.addComponent("component_db",...a[o]),this.$=a[o];break;case 62:r.addComponent("component_queue",...a[o]),this.$=a[o];break;case 63:r.addComponent("external_component",...a[o]),this.$=a[o];break;case 64:r.addComponent("external_component_db",...a[o]),this.$=a[o];break;case 65:r.addComponent("external_component_queue",...a[o]),this.$=a[o];break;case 67:r.addRel("rel",...a[o]),this.$=a[o];break;case 68:r.addRel("birel",...a[o]),this.$=a[o];break;case 69:r.addRel("rel_u",...a[o]),this.$=a[o];break;case 70:r.addRel("rel_d",...a[o]),this.$=a[o];break;case 71:r.addRel("rel_l",...a[o]),this.$=a[o];break;case 72:r.addRel("rel_r",...a[o]),this.$=a[o];break;case 73:r.addRel("rel_b",...a[o]),this.$=a[o];break;case 74:a[o].splice(0,1),r.addRel("rel",...a[o]),this.$=a[o];break;case 75:r.updateElStyle("update_el_style",...a[o]),this.$=a[o];break;case 76:r.updateRelStyle("update_rel_style",...a[o]),this.$=a[o];break;case 77:r.updateLayoutConfig("update_layout_config",...a[o]),this.$=a[o];break;case 78:this.$=[a[o]];break;case 79:a[o].unshift(a[o-1]),this.$=a[o];break;case 80:case 82:this.$=a[o].trim();break;case 81:let t={};t[a[o-1].trim()]=a[o].trim(),this.$=t;break;case 83:this.$=""}},table:[{3:1,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[3]},{1:[2,1]},{1:[2,2]},{3:17,4:2,5:3,6:4,7:n,8:r,9:i,10:a,11:5,12:10,18:s,22:o,25:l,26:h,27:u,28:d},{1:[2,8]},{1:[2,4]},{1:[2,5]},{1:[2,6]},{1:[2,7]},{13:18,19:[1,19]},{15:[1,20]},{15:[1,21]},{15:[1,22]},{15:[1,23]},{15:[1,24]},{19:[2,11]},{1:[2,3]},{14:25,16:[1,26],21:p},e([16,21],[2,12]),{23:28,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:79,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:80,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:81,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{23:82,29:29,30:30,31:31,32:f,33:g,34:y,36:m,38:b,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,83]},{17:84,20:[1,85]},{15:[2,14]},{24:[1,86]},e(rt,[2,20],{53:32,39:58,40:70,42:71,30:87,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(rt,[2,21]),e(it,[2,23],{15:[1,88]}),e(rt,[2,43],{15:[1,89]}),e(at,[2,26]),e(at,[2,27]),{35:[1,90]},{37:[1,91]},e(at,[2,30]),{45:92,85:93,86:st,87:ot,89:ct,90:lt},{45:98,85:93,86:st,87:ot,89:ct,90:lt},{45:99,85:93,86:st,87:ot,89:ct,90:lt},{45:100,85:93,86:st,87:ot,89:ct,90:lt},{45:101,85:93,86:st,87:ot,89:ct,90:lt},{45:102,85:93,86:st,87:ot,89:ct,90:lt},{45:103,85:93,86:st,87:ot,89:ct,90:lt},{45:104,85:93,86:st,87:ot,89:ct,90:lt},{45:105,85:93,86:st,87:ot,89:ct,90:lt},{45:106,85:93,86:st,87:ot,89:ct,90:lt},{45:107,85:93,86:st,87:ot,89:ct,90:lt},{45:108,85:93,86:st,87:ot,89:ct,90:lt},{45:109,85:93,86:st,87:ot,89:ct,90:lt},{45:110,85:93,86:st,87:ot,89:ct,90:lt},{45:111,85:93,86:st,87:ot,89:ct,90:lt},{45:112,85:93,86:st,87:ot,89:ct,90:lt},{45:113,85:93,86:st,87:ot,89:ct,90:lt},{45:114,85:93,86:st,87:ot,89:ct,90:lt},{45:115,85:93,86:st,87:ot,89:ct,90:lt},{45:116,85:93,86:st,87:ot,89:ct,90:lt},e(ht,[2,66]),{45:117,85:93,86:st,87:ot,89:ct,90:lt},{45:118,85:93,86:st,87:ot,89:ct,90:lt},{45:119,85:93,86:st,87:ot,89:ct,90:lt},{45:120,85:93,86:st,87:ot,89:ct,90:lt},{45:121,85:93,86:st,87:ot,89:ct,90:lt},{45:122,85:93,86:st,87:ot,89:ct,90:lt},{45:123,85:93,86:st,87:ot,89:ct,90:lt},{45:124,85:93,86:st,87:ot,89:ct,90:lt},{45:125,85:93,86:st,87:ot,89:ct,90:lt},{45:126,85:93,86:st,87:ot,89:ct,90:lt},{45:127,85:93,86:st,87:ot,89:ct,90:lt},{30:128,39:58,40:70,42:71,44:_,46:x,47:v,48:k,49:w,50:E,51:C,53:32,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt},{15:[1,130],43:[1,129]},{45:131,85:93,86:st,87:ot,89:ct,90:lt},{45:132,85:93,86:st,87:ot,89:ct,90:lt},{45:133,85:93,86:st,87:ot,89:ct,90:lt},{45:134,85:93,86:st,87:ot,89:ct,90:lt},{45:135,85:93,86:st,87:ot,89:ct,90:lt},{45:136,85:93,86:st,87:ot,89:ct,90:lt},{45:137,85:93,86:st,87:ot,89:ct,90:lt},{24:[1,138]},{24:[1,139]},{24:[1,140]},{24:[1,141]},e(ut,[2,9]),{14:142,21:p},{21:[2,13]},{1:[2,15]},e(rt,[2,22]),e(it,[2,24],{31:31,29:143,32:f,33:g,34:y,36:m,38:b}),e(rt,[2,44],{29:29,30:30,31:31,53:32,39:58,40:70,42:71,23:144,32:f,33:g,34:y,36:m,38:b,44:_,46:x,47:v,48:k,49:w,50:E,51:C,54:T,55:S,56:A,57:L,58:B,59:N,60:D,61:O,62:M,63:I,64:F,65:$,66:R,67:Z,68:P,69:j,70:Y,71:z,72:U,73:W,74:q,75:H,76:V,77:G,78:X,79:K,80:Q,81:J,82:tt,83:et,84:nt}),e(at,[2,28]),e(at,[2,29]),e(ht,[2,46]),e(dt,[2,78],{85:93,45:145,86:st,87:ot,89:ct,90:lt}),e(pt,[2,80]),{88:[1,146]},e(pt,[2,82]),e(pt,[2,83]),e(ht,[2,47]),e(ht,[2,48]),e(ht,[2,49]),e(ht,[2,50]),e(ht,[2,51]),e(ht,[2,52]),e(ht,[2,53]),e(ht,[2,54]),e(ht,[2,55]),e(ht,[2,56]),e(ht,[2,57]),e(ht,[2,58]),e(ht,[2,59]),e(ht,[2,60]),e(ht,[2,61]),e(ht,[2,62]),e(ht,[2,63]),e(ht,[2,64]),e(ht,[2,65]),e(ht,[2,67]),e(ht,[2,68]),e(ht,[2,69]),e(ht,[2,70]),e(ht,[2,71]),e(ht,[2,72]),e(ht,[2,73]),e(ht,[2,74]),e(ht,[2,75]),e(ht,[2,76]),e(ht,[2,77]),{41:147,52:[1,148]},{15:[1,149]},{43:[1,150]},e(ft,[2,35]),e(ft,[2,36]),e(ft,[2,37]),e(ft,[2,38]),e(ft,[2,39]),e(ft,[2,40]),e(ft,[2,41]),{1:[2,16]},{1:[2,17]},{1:[2,18]},{1:[2,19]},{15:[1,151]},e(it,[2,25]),e(rt,[2,45]),e(dt,[2,79]),e(pt,[2,81]),e(ht,[2,31]),e(ht,[2,42]),e(gt,[2,32]),e(gt,[2,33],{15:[1,152]}),e(ut,[2,10]),e(gt,[2,34])],defaultActions:{2:[2,1],3:[2,2],5:[2,8],6:[2,4],7:[2,5],8:[2,6],9:[2,7],16:[2,11],17:[2,3],27:[2,14],85:[2,13],86:[2,15],138:[2,16],139:[2,17],140:[2,18],141:[2,19]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},mt=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),18;case 1:return 7;case 2:return 8;case 3:return 9;case 4:return 10;case 5:return this.begin("type_directive"),19;case 6:return this.popState(),this.begin("arg_directive"),16;case 7:return this.popState(),this.popState(),21;case 8:return 20;case 9:return 32;case 10:return 33;case 11:return this.begin("acc_title"),34;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),36;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 78:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:case 21:case 75:break;case 19:c;break;case 20:return 15;case 22:return 22;case 23:return 25;case 24:return 26;case 25:return 27;case 26:return 28;case 27:return this.begin("person_ext"),55;case 28:return this.begin("person"),54;case 29:return this.begin("system_ext_queue"),61;case 30:return this.begin("system_ext_db"),60;case 31:return this.begin("system_ext"),59;case 32:return this.begin("system_queue"),58;case 33:return this.begin("system_db"),57;case 34:return this.begin("system"),56;case 35:return this.begin("boundary"),47;case 36:return this.begin("enterprise_boundary"),44;case 37:return this.begin("system_boundary"),46;case 38:return this.begin("container_ext_queue"),67;case 39:return this.begin("container_ext_db"),66;case 40:return this.begin("container_ext"),65;case 41:return this.begin("container_queue"),64;case 42:return this.begin("container_db"),63;case 43:return this.begin("container"),62;case 44:return this.begin("container_boundary"),48;case 45:return this.begin("component_ext_queue"),73;case 46:return this.begin("component_ext_db"),72;case 47:return this.begin("component_ext"),71;case 48:return this.begin("component_queue"),70;case 49:return this.begin("component_db"),69;case 50:return this.begin("component"),68;case 51:case 52:return this.begin("node"),49;case 53:return this.begin("node_l"),50;case 54:return this.begin("node_r"),51;case 55:return this.begin("rel"),74;case 56:return this.begin("birel"),75;case 57:case 58:return this.begin("rel_u"),76;case 59:case 60:return this.begin("rel_d"),77;case 61:case 62:return this.begin("rel_l"),78;case 63:case 64:return this.begin("rel_r"),79;case 65:return this.begin("rel_b"),80;case 66:return this.begin("rel_index"),81;case 67:return this.begin("update_el_style"),82;case 68:return this.begin("update_rel_style"),83;case 69:return this.begin("update_layout_config"),84;case 70:return"EOF_IN_STRUCT";case 71:return this.begin("attribute"),"ATTRIBUTE_EMPTY";case 72:this.begin("attribute");break;case 73:case 84:this.popState(),this.popState();break;case 74:case 76:return 90;case 77:this.begin("string");break;case 79:case 85:return"STR";case 80:this.begin("string_kv");break;case 81:return this.begin("string_kv_key"),"STR_KEY";case 82:this.popState(),this.begin("string_kv_value");break;case 83:return"STR_VALUE";case 86:return"LBRACE";case 87:return"RBRACE";case 88:return"SPACE";case 89:return"EOL";case 90:return 24}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:title\s[^#\n;]+)/,/^(?:accDescription\s[^#\n;]+)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:C4Context\b)/,/^(?:C4Container\b)/,/^(?:C4Component\b)/,/^(?:C4Dynamic\b)/,/^(?:C4Deployment\b)/,/^(?:Person_Ext\b)/,/^(?:Person\b)/,/^(?:SystemQueue_Ext\b)/,/^(?:SystemDb_Ext\b)/,/^(?:System_Ext\b)/,/^(?:SystemQueue\b)/,/^(?:SystemDb\b)/,/^(?:System\b)/,/^(?:Boundary\b)/,/^(?:Enterprise_Boundary\b)/,/^(?:System_Boundary\b)/,/^(?:ContainerQueue_Ext\b)/,/^(?:ContainerDb_Ext\b)/,/^(?:Container_Ext\b)/,/^(?:ContainerQueue\b)/,/^(?:ContainerDb\b)/,/^(?:Container\b)/,/^(?:Container_Boundary\b)/,/^(?:ComponentQueue_Ext\b)/,/^(?:ComponentDb_Ext\b)/,/^(?:Component_Ext\b)/,/^(?:ComponentQueue\b)/,/^(?:ComponentDb\b)/,/^(?:Component\b)/,/^(?:Deployment_Node\b)/,/^(?:Node\b)/,/^(?:Node_L\b)/,/^(?:Node_R\b)/,/^(?:Rel\b)/,/^(?:BiRel\b)/,/^(?:Rel_Up\b)/,/^(?:Rel_U\b)/,/^(?:Rel_Down\b)/,/^(?:Rel_D\b)/,/^(?:Rel_Left\b)/,/^(?:Rel_L\b)/,/^(?:Rel_Right\b)/,/^(?:Rel_R\b)/,/^(?:Rel_Back\b)/,/^(?:RelIndex\b)/,/^(?:UpdateElementStyle\b)/,/^(?:UpdateRelStyle\b)/,/^(?:UpdateLayoutConfig\b)/,/^(?:$)/,/^(?:[(][ ]*[,])/,/^(?:[(])/,/^(?:[)])/,/^(?:,,)/,/^(?:,)/,/^(?:[ ]*["]["])/,/^(?:[ ]*["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[ ]*[\$])/,/^(?:[^=]*)/,/^(?:[=][ ]*["])/,/^(?:[^"]+)/,/^(?:["])/,/^(?:[^,]+)/,/^(?:\{)/,/^(?:\})/,/^(?:[\s]+)/,/^(?:[\n\r]+)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},string_kv_value:{rules:[83,84],inclusive:!1},string_kv_key:{rules:[82],inclusive:!1},string_kv:{rules:[81],inclusive:!1},string:{rules:[78,79],inclusive:!1},attribute:{rules:[73,74,75,76,77,80,85],inclusive:!1},update_layout_config:{rules:[70,71,72,73],inclusive:!1},update_rel_style:{rules:[70,71,72,73],inclusive:!1},update_el_style:{rules:[70,71,72,73],inclusive:!1},rel_b:{rules:[70,71,72,73],inclusive:!1},rel_r:{rules:[70,71,72,73],inclusive:!1},rel_l:{rules:[70,71,72,73],inclusive:!1},rel_d:{rules:[70,71,72,73],inclusive:!1},rel_u:{rules:[70,71,72,73],inclusive:!1},rel_bi:{rules:[],inclusive:!1},rel:{rules:[70,71,72,73],inclusive:!1},node_r:{rules:[70,71,72,73],inclusive:!1},node_l:{rules:[70,71,72,73],inclusive:!1},node:{rules:[70,71,72,73],inclusive:!1},index:{rules:[],inclusive:!1},rel_index:{rules:[70,71,72,73],inclusive:!1},component_ext_queue:{rules:[],inclusive:!1},component_ext_db:{rules:[70,71,72,73],inclusive:!1},component_ext:{rules:[70,71,72,73],inclusive:!1},component_queue:{rules:[70,71,72,73],inclusive:!1},component_db:{rules:[70,71,72,73],inclusive:!1},component:{rules:[70,71,72,73],inclusive:!1},container_boundary:{rules:[70,71,72,73],inclusive:!1},container_ext_queue:{rules:[],inclusive:!1},container_ext_db:{rules:[70,71,72,73],inclusive:!1},container_ext:{rules:[70,71,72,73],inclusive:!1},container_queue:{rules:[70,71,72,73],inclusive:!1},container_db:{rules:[70,71,72,73],inclusive:!1},container:{rules:[70,71,72,73],inclusive:!1},birel:{rules:[70,71,72,73],inclusive:!1},system_boundary:{rules:[70,71,72,73],inclusive:!1},enterprise_boundary:{rules:[70,71,72,73],inclusive:!1},boundary:{rules:[70,71,72,73],inclusive:!1},system_ext_queue:{rules:[70,71,72,73],inclusive:!1},system_ext_db:{rules:[70,71,72,73],inclusive:!1},system_ext:{rules:[70,71,72,73],inclusive:!1},system_queue:{rules:[70,71,72,73],inclusive:!1},system_db:{rules:[70,71,72,73],inclusive:!1},system:{rules:[70,71,72,73],inclusive:!1},person_ext:{rules:[70,71,72,73],inclusive:!1},person:{rules:[70,71,72,73],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,86,87,88,89,90],inclusive:!0}}},t);function bt(){this.yy={}}return yt.lexer=mt,bt.prototype=yt,yt.Parser=bt,new bt}();Ii.parser=Ii;const Fi=Ii,$i=t=>null!==t.match(/^\s*C4Context|C4Container|C4Component|C4Dynamic|C4Deployment/);let Ri=[],Zi=[""],Pi="global",ji="",Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],zi=[],Ui="",Wi=!1,qi=4,Hi=2;var Vi;const Gi=function(t){return null==t?Ri:Ri.filter((e=>e.parentBoundary===t))},Xi=function(){return Wi},Ki={addPersonOrSystem:function(t,e,n,r,i,a,s){if(null===e||null===n)return;let o={};const c=Ri.find((t=>t.alias===e));if(c&&e===c.alias?o=c:(o.alias=e,Ri.push(o)),o.label=null==n?{text:""}:{text:n},null==r)o.descr={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]={text:e}}else o.descr={text:r};if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.sprite=i;if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=e}else o.tags=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=e}else o.link=s;o.typeC4Shape={text:t},o.parentBoundary=Pi,o.wrap=Xi()},addPersonOrSystemBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"system"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addContainer:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addContainerBoundary:function(t,e,n,r,i){if(null===t||null===e)return;let a={};const s=Yi.find((e=>e.alias===t));if(s&&t===s.alias?a=s:(a.alias=t,Yi.push(a)),a.label=null==e?{text:""}:{text:e},null==n)a.type={text:"container"};else if("object"==typeof n){let[t,e]=Object.entries(n)[0];a[t]={text:e}}else a.type={text:n};if("object"==typeof r){let[t,e]=Object.entries(r)[0];a[t]=e}else a.tags=r;if("object"==typeof i){let[t,e]=Object.entries(i)[0];a[t]=e}else a.link=i;a.parentBoundary=Pi,a.wrap=Xi(),ji=Pi,Pi=t,Zi.push(ji)},addComponent:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Ri.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Ri.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.techn={text:""};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.techn={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof a){let[t,e]=Object.entries(a)[0];c[t]=e}else c.sprite=a;if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.wrap=Xi(),c.typeC4Shape={text:t},c.parentBoundary=Pi},addDeploymentNode:function(t,e,n,r,i,a,s,o){if(null===e||null===n)return;let c={};const l=Yi.find((t=>t.alias===e));if(l&&e===l.alias?c=l:(c.alias=e,Yi.push(c)),c.label=null==n?{text:""}:{text:n},null==r)c.type={text:"node"};else if("object"==typeof r){let[t,e]=Object.entries(r)[0];c[t]={text:e}}else c.type={text:r};if(null==i)c.descr={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];c[t]={text:e}}else c.descr={text:i};if("object"==typeof s){let[t,e]=Object.entries(s)[0];c[t]=e}else c.tags=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];c[t]=e}else c.link=o;c.nodeType=t,c.parentBoundary=Pi,c.wrap=Xi(),ji=Pi,Pi=e,Zi.push(ji)},popBoundaryParseStack:function(){Pi=ji,Zi.pop(),ji=Zi.pop(),Zi.push(ji)},addRel:function(t,e,n,r,i,a,s,o,c){if(null==t||null==e||null==n||null==r)return;let l={};const h=zi.find((t=>t.from===e&&t.to===n));if(h?l=h:zi.push(l),l.type=t,l.from=e,l.to=n,l.label={text:r},null==i)l.techn={text:""};else if("object"==typeof i){let[t,e]=Object.entries(i)[0];l[t]={text:e}}else l.techn={text:i};if(null==a)l.descr={text:""};else if("object"==typeof a){let[t,e]=Object.entries(a)[0];l[t]={text:e}}else l.descr={text:a};if("object"==typeof s){let[t,e]=Object.entries(s)[0];l[t]=e}else l.sprite=s;if("object"==typeof o){let[t,e]=Object.entries(o)[0];l[t]=e}else l.tags=o;if("object"==typeof c){let[t,e]=Object.entries(c)[0];l[t]=e}else l.link=c;l.wrap=Xi()},updateElStyle:function(t,e,n,r,i,a,s,o,c,l,h){let u=Ri.find((t=>t.alias===e));if(void 0!==u||(u=Yi.find((t=>t.alias===e)),void 0!==u)){if(null!=n)if("object"==typeof n){let[t,e]=Object.entries(n)[0];u[t]=e}else u.bgColor=n;if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];u[t]=e}else u.fontColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];u[t]=e}else u.borderColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];u[t]=e}else u.shadowing=a;if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];u[t]=e}else u.shape=s;if(null!=o)if("object"==typeof o){let[t,e]=Object.entries(o)[0];u[t]=e}else u.sprite=o;if(null!=c)if("object"==typeof c){let[t,e]=Object.entries(c)[0];u[t]=e}else u.techn=c;if(null!=l)if("object"==typeof l){let[t,e]=Object.entries(l)[0];u[t]=e}else u.legendText=l;if(null!=h)if("object"==typeof h){let[t,e]=Object.entries(h)[0];u[t]=e}else u.legendSprite=h}},updateRelStyle:function(t,e,n,r,i,a,s){const o=zi.find((t=>t.from===e&&t.to===n));if(void 0!==o){if(null!=r)if("object"==typeof r){let[t,e]=Object.entries(r)[0];o[t]=e}else o.textColor=r;if(null!=i)if("object"==typeof i){let[t,e]=Object.entries(i)[0];o[t]=e}else o.lineColor=i;if(null!=a)if("object"==typeof a){let[t,e]=Object.entries(a)[0];o[t]=parseInt(e)}else o.offsetX=parseInt(a);if(null!=s)if("object"==typeof s){let[t,e]=Object.entries(s)[0];o[t]=parseInt(e)}else o.offsetY=parseInt(s)}},updateLayoutConfig:function(t,e,n){let r=qi,i=Hi;if("object"==typeof e){const t=Object.values(e)[0];r=parseInt(t)}else r=parseInt(e);if("object"==typeof n){const t=Object.values(n)[0];i=parseInt(t)}else i=parseInt(n);r>=1&&(qi=r),i>=1&&(Hi=i)},autoWrap:Xi,setWrap:function(t){Wi=t},getC4ShapeArray:Gi,getC4Shape:function(t){return Ri.find((e=>e.alias===t))},getC4ShapeKeys:function(t){return Object.keys(Gi(t))},getBoundarys:function(t){return null==t?Yi:Yi.filter((e=>e.parentBoundary===t))},getCurrentBoundaryParse:function(){return Pi},getParentBoundaryParse:function(){return ji},getRels:function(){return zi},getTitle:function(){return Ui},getC4Type:function(){return Vi},getC4ShapeInRow:function(){return qi},getC4BoundaryInRow:function(){return Hi},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().c4,clear:function(){Ri=[],Yi=[{alias:"global",label:{text:"global"},type:{text:"global"},tags:null,link:null,parentBoundary:""}],ji="",Pi="global",Zi=[""],zi=[],Zi=[""],Ui="",Wi=!1,qi=4,Hi=2},LINETYPE:{SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25},ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},setTitle:function(t){let e=Ft(t,ar());Ui=e},setC4Type:function(t){let e=Ft(t,ar());Vi=e}},Qi=function(t,e){const n=t.append("rect");if(n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),"undefined"!==e.attrs&&null!==e.attrs)for(let r in e.attrs)n.attr(r,e.attrs[r]);return"undefined"!==e.class&&n.attr("class",e.class),n},Ji=function(t,e,n,r,i,a){const o=t.append("image");o.attr("width",e),o.attr("height",n),o.attr("x",r),o.attr("y",i);let c=a.startsWith("data:image/png;base64")?a:(0,s.N)(a);o.attr("xlink:href",c)},ta=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},ea=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),na=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{fontSize:l,fontFamily:h,fontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,s=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").attr("dominant-baseline","middle").style("font-size",l).style("font-weight",u).style("font-family",h);s.append("tspan").attr("dy",t).text(d[p]).attr("alignment-baseline","mathematical"),r(s,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,0,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),ra=function(t,e,n){const r=t.append("g");let i=e.bgColor?e.bgColor:"none",a=e.borderColor?e.borderColor:"#444444",s=e.fontColor?e.fontColor:"black",o={"stroke-width":1,"stroke-dasharray":"7.0,7.0"};e.nodeType&&(o={"stroke-width":1});let c={x:e.x,y:e.y,fill:i,stroke:a,width:e.width,height:e.height,rx:2.5,ry:2.5,attrs:o};Qi(r,c);let l=n.boundaryFont();l.fontWeight="bold",l.fontSize=l.fontSize+2,l.fontColor=s,na(n)(e.label.text,r,e.x,e.y+e.label.Y,e.width,e.height,{fill:"#444444"},l),e.type&&""!==e.type.text&&(l=n.boundaryFont(),l.fontColor=s,na(n)(e.type.text,r,e.x,e.y+e.type.Y,e.width,e.height,{fill:"#444444"},l)),e.descr&&""!==e.descr.text&&(l=n.boundaryFont(),l.fontSize=l.fontSize-2,l.fontColor=s,na(n)(e.descr.text,r,e.x,e.y+e.descr.Y,e.width,e.height,{fill:"#444444"},l))},ia=function(t,e,n){var r;let i=e.bgColor?e.bgColor:n[e.typeC4Shape.text+"_bg_color"],a=e.borderColor?e.borderColor:n[e.typeC4Shape.text+"_border_color"],s=e.fontColor?e.fontColor:"#FFFFFF",o="data:image/png;base64,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";switch(e.typeC4Shape.text){case"person":o="data:image/png;base64,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";break;case"external_person":o="data:image/png;base64,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"}const c=t.append("g");c.attr("class","person-man");const l=ta();switch(e.typeC4Shape.text){case"person":case"external_person":case"system":case"external_system":case"container":case"external_container":case"component":case"external_component":l.x=e.x,l.y=e.y,l.fill=i,l.width=e.width,l.height=e.height,l.stroke=a,l.rx=2.5,l.ry=2.5,l.attrs={"stroke-width":.5},Qi(c,l);break;case"system_db":case"external_system_db":case"container_db":case"external_container_db":case"component_db":case"external_component_db":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,-10 half,-10 half,-10c0,0 half,0 half,10l0,heightc0,10 -half,10 -half,10c0,0 -half,0 -half,-10l0,-height".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2).replaceAll("height",e.height)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc0,10 half,10 half,10c0,0 half,0 half,-10".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("half",e.width/2));break;case"system_queue":case"external_system_queue":case"container_queue":case"external_container_queue":case"component_queue":case"external_component_queue":c.append("path").attr("fill",i).attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startylwidth,0c5,0 5,half 5,halfc0,0 0,half -5,halfl-width,0c-5,0 -5,-half -5,-halfc0,0 0,-half 5,-half".replaceAll("startx",e.x).replaceAll("starty",e.y).replaceAll("width",e.width).replaceAll("half",e.height/2)),c.append("path").attr("fill","none").attr("stroke-width","0.5").attr("stroke",a).attr("d","Mstartx,startyc-5,0 -5,half -5,halfc0,half 5,half 5,half".replaceAll("startx",e.x+e.width).replaceAll("starty",e.y).replaceAll("half",e.height/2))}let h=ea(n,e.typeC4Shape.text);switch(c.append("text").attr("fill",s).attr("font-family",h.fontFamily).attr("font-size",h.fontSize-2).attr("font-style","italic").attr("lengthAdjust","spacing").attr("textLength",e.typeC4Shape.width).attr("x",e.x+e.width/2-e.typeC4Shape.width/2).attr("y",e.y+e.typeC4Shape.Y).text("<<"+e.typeC4Shape.text+">>"),e.typeC4Shape.text){case"person":case"external_person":Ji(c,48,48,e.x+e.width/2-24,e.y+e.image.Y,o)}let u=n[e.typeC4Shape.text+"Font"]();return u.fontWeight="bold",u.fontSize=u.fontSize+2,u.fontColor=s,na(n)(e.label.text,c,e.x,e.y+e.label.Y,e.width,e.height,{fill:s},u),u=n[e.typeC4Shape.text+"Font"](),u.fontColor=s,e.techn&&""!==(null==(r=e.techn)?void 0:r.text)?na(n)(e.techn.text,c,e.x,e.y+e.techn.Y,e.width,e.height,{fill:s,"font-style":"italic"},u):e.type&&""!==e.type.text&&na(n)(e.type.text,c,e.x,e.y+e.type.Y,e.width,e.height,{fill:s,"font-style":"italic"},u),e.descr&&""!==e.descr.text&&(u=n.personFont(),u.fontColor=s,na(n)(e.descr.text,c,e.x,e.y+e.descr.Y,e.width,e.height,{fill:s},u)),e.height},aa=(t,e,n)=>{const r=t.append("g");let i=0;for(let a of e){let t=a.textColor?a.textColor:"#444444",e=a.lineColor?a.lineColor:"#444444",s=a.offsetX?parseInt(a.offsetX):0,o=a.offsetY?parseInt(a.offsetY):0,c="";if(0===i){let t=r.append("line");t.attr("x1",a.startPoint.x),t.attr("y1",a.startPoint.y),t.attr("x2",a.endPoint.x),t.attr("y2",a.endPoint.y),t.attr("stroke-width","1"),t.attr("stroke",e),t.style("fill","none"),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)"),i=-1}else{let t=r.append("path");t.attr("fill","none").attr("stroke-width","1").attr("stroke",e).attr("d","Mstartx,starty Qcontrolx,controly stopx,stopy ".replaceAll("startx",a.startPoint.x).replaceAll("starty",a.startPoint.y).replaceAll("controlx",a.startPoint.x+(a.endPoint.x-a.startPoint.x)/2-(a.endPoint.x-a.startPoint.x)/4).replaceAll("controly",a.startPoint.y+(a.endPoint.y-a.startPoint.y)/2).replaceAll("stopx",a.endPoint.x).replaceAll("stopy",a.endPoint.y)),"rel_b"!==a.type&&t.attr("marker-end","url("+c+"#arrowhead)"),"birel"!==a.type&&"rel_b"!==a.type||t.attr("marker-start","url("+c+"#arrowend)")}let l=n.messageFont();na(n)(a.label.text,r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+o,a.label.width,a.label.height,{fill:t},l),a.techn&&""!==a.techn.text&&(l=n.messageFont(),na(n)("["+a.techn.text+"]",r,Math.min(a.startPoint.x,a.endPoint.x)+Math.abs(a.endPoint.x-a.startPoint.x)/2+s,Math.min(a.startPoint.y,a.endPoint.y)+Math.abs(a.endPoint.y-a.startPoint.y)/2+n.messageFontSize+5+o,Math.max(a.label.width,a.techn.width),a.techn.height,{fill:t,"font-style":"italic"},l))}},sa=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},oa=function(t){t.append("defs").append("marker").attr("id","arrowend").attr("refX",1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 10 0 L 0 5 L 10 10 z")},ca=function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},la=function(t){const e=t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",16).attr("refY",4);e.append("path").attr("fill","black").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 9,2 V 6 L16,4 Z"),e.append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1px").attr("d","M 0,1 L 6,7 M 6,1 L 0,7")},ha=function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},ua=function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},da=function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")};s.N;let pa=0,fa=0,ga=4,ya=2;Ii.yy=Ki;let ma={};class ba{constructor(t){this.name="",this.data={},this.data.startx=void 0,this.data.stopx=void 0,this.data.starty=void 0,this.data.stopy=void 0,this.data.widthLimit=void 0,this.nextData={},this.nextData.startx=void 0,this.nextData.stopx=void 0,this.nextData.starty=void 0,this.nextData.stopy=void 0,this.nextData.cnt=0,_a(t.db.getConfig())}setData(t,e,n,r){this.nextData.startx=this.data.startx=t,this.nextData.stopx=this.data.stopx=e,this.nextData.starty=this.data.starty=n,this.nextData.stopy=this.data.stopy=r}updateVal(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])}insert(t){this.nextData.cnt=this.nextData.cnt+1;let e=this.nextData.startx===this.nextData.stopx?this.nextData.stopx+t.margin:this.nextData.stopx+2*t.margin,n=e+t.width,r=this.nextData.starty+2*t.margin,i=r+t.height;(e>=this.data.widthLimit||n>=this.data.widthLimit||this.nextData.cnt>ga)&&(e=this.nextData.startx+t.margin+ma.nextLinePaddingX,r=this.nextData.stopy+2*t.margin,this.nextData.stopx=n=e+t.width,this.nextData.starty=this.nextData.stopy,this.nextData.stopy=i=r+t.height,this.nextData.cnt=1),t.x=e,t.y=r,this.updateVal(this.data,"startx",e,Math.min),this.updateVal(this.data,"starty",r,Math.min),this.updateVal(this.data,"stopx",n,Math.max),this.updateVal(this.data,"stopy",i,Math.max),this.updateVal(this.nextData,"startx",e,Math.min),this.updateVal(this.nextData,"starty",r,Math.min),this.updateVal(this.nextData,"stopx",n,Math.max),this.updateVal(this.nextData,"stopy",i,Math.max)}init(t){this.name="",this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,widthLimit:void 0},this.nextData={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0,cnt:0},_a(t.db.getConfig())}bumpLastMargin(t){this.data.stopx+=t,this.data.stopy+=t}}const _a=function(t){Sn(ma,t),t.fontFamily&&(ma.personFontFamily=ma.systemFontFamily=ma.messageFontFamily=t.fontFamily),t.fontSize&&(ma.personFontSize=ma.systemFontSize=ma.messageFontSize=t.fontSize),t.fontWeight&&(ma.personFontWeight=ma.systemFontWeight=ma.messageFontWeight=t.fontWeight)},xa=(t,e)=>({fontFamily:t[e+"FontFamily"],fontSize:t[e+"FontSize"],fontWeight:t[e+"FontWeight"]}),va=t=>({fontFamily:t.boundaryFontFamily,fontSize:t.boundaryFontSize,fontWeight:t.boundaryFontWeight});function ka(t,e,n,r,i){if(!e[t].width)if(n)e[t].text=Zn(e[t].text,i,r),e[t].textLines=e[t].text.split(Yt.lineBreakRegex).length,e[t].width=i,e[t].height=jn(e[t].text,r);else{let n=e[t].text.split(Yt.lineBreakRegex);e[t].textLines=n.length;let i=0;e[t].height=0,e[t].width=0;for(const a of n)e[t].width=Math.max(Yn(a,r),e[t].width),i=jn(a,r),e[t].height=e[t].height+i}}const wa=function(t,e,n){e.x=n.data.startx,e.y=n.data.starty,e.width=n.data.stopx-n.data.startx,e.height=n.data.stopy-n.data.starty,e.label.y=ma.c4ShapeMargin-35;let r=e.wrap&&ma.wrap,i=va(ma);i.fontSize=i.fontSize+2,i.fontWeight="bold",ka("label",e,r,i,Yn(e.label.text,i)),ra(t,e,ma)},Ea=function(t,e,n,r){let i=0;for(const a of r){i=0;const r=n[a];let s=xa(ma,r.typeC4Shape.text);switch(s.fontSize=s.fontSize-2,r.typeC4Shape.width=Yn("<<"+r.typeC4Shape.text+">>",s),r.typeC4Shape.height=s.fontSize+2,r.typeC4Shape.Y=ma.c4ShapePadding,i=r.typeC4Shape.Y+r.typeC4Shape.height-4,r.image={width:0,height:0,Y:0},r.typeC4Shape.text){case"person":case"external_person":r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height}r.sprite&&(r.image.width=48,r.image.height=48,r.image.Y=i,i=r.image.Y+r.image.height);let o=r.wrap&&ma.wrap,c=ma.width-2*ma.c4ShapePadding,l=xa(ma,r.typeC4Shape.text);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",r,o,l,c),r.label.Y=i+8,i=r.label.Y+r.label.height,r.type&&""!==r.type.text){r.type.text="["+r.type.text+"]",ka("type",r,o,xa(ma,r.typeC4Shape.text),c),r.type.Y=i+5,i=r.type.Y+r.type.height}else if(r.techn&&""!==r.techn.text){r.techn.text="["+r.techn.text+"]",ka("techn",r,o,xa(ma,r.techn.text),c),r.techn.Y=i+5,i=r.techn.Y+r.techn.height}let h=i,u=r.label.width;if(r.descr&&""!==r.descr.text){ka("descr",r,o,xa(ma,r.typeC4Shape.text),c),r.descr.Y=i+20,i=r.descr.Y+r.descr.height,u=Math.max(r.label.width,r.descr.width),h=i-5*r.descr.textLines}u+=ma.c4ShapePadding,r.width=Math.max(r.width||ma.width,u,ma.width),r.height=Math.max(r.height||ma.height,h,ma.height),r.margin=r.margin||ma.c4ShapeMargin,t.insert(r),ia(e,r,ma)}t.bumpLastMargin(ma.c4ShapeMargin)};class Ca{constructor(t,e){this.x=t,this.y=e}}let Ta=function(t,e){let n=t.x,r=t.y,i=e.x,a=e.y,s=n+t.width/2,o=r+t.height/2,c=Math.abs(n-i),l=Math.abs(r-a),h=l/c,u=t.height/t.width,d=null;return r==a&&n<i?d=new Ca(n+t.width,o):r==a&&n>i?d=new Ca(n,o):n==i&&r<a?d=new Ca(s,r+t.height):n==i&&r>a&&(d=new Ca(s,r)),n>i&&r<a?d=u>=h?new Ca(n,o+h*t.width/2):new Ca(s-c/l*t.height/2,r+t.height):n<i&&r<a?d=u>=h?new Ca(n+t.width,o+h*t.width/2):new Ca(s+c/l*t.height/2,r+t.height):n<i&&r>a?d=u>=h?new Ca(n+t.width,o-h*t.width/2):new Ca(s+t.height/2*c/l,r):n>i&&r>a&&(d=u>=h?new Ca(n,o-t.width/2*h):new Ca(s-t.height/2*c/l,r)),d},Sa=function(t,e){let n={x:0,y:0};n.x=e.x+e.width/2,n.y=e.y+e.height/2;let r=Ta(t,n);return n.x=t.x+t.width/2,n.y=t.y+t.height/2,{startPoint:r,endPoint:Ta(e,n)}};function Aa(t,e,n,r,i){let a=new ba(i);a.data.widthLimit=n.data.widthLimit/Math.min(ya,r.length);for(let[s,o]of r.entries()){let r=0;o.image={width:0,height:0,Y:0},o.sprite&&(o.image.width=48,o.image.height=48,o.image.Y=r,r=o.image.Y+o.image.height);let c=o.wrap&&ma.wrap,l=va(ma);if(l.fontSize=l.fontSize+2,l.fontWeight="bold",ka("label",o,c,l,a.data.widthLimit),o.label.Y=r+8,r=o.label.Y+o.label.height,o.type&&""!==o.type.text){o.type.text="["+o.type.text+"]",ka("type",o,c,va(ma),a.data.widthLimit),o.type.Y=r+5,r=o.type.Y+o.type.height}if(o.descr&&""!==o.descr.text){let t=va(ma);t.fontSize=t.fontSize-2,ka("descr",o,c,t,a.data.widthLimit),o.descr.Y=r+20,r=o.descr.Y+o.descr.height}if(0==s||s%ya==0){let t=n.data.startx+ma.diagramMarginX,e=n.data.stopy+ma.diagramMarginY+r;a.setData(t,t,e,e)}else{let t=a.data.stopx!==a.data.startx?a.data.stopx+ma.diagramMarginX:a.data.startx,e=a.data.starty;a.setData(t,t,e,e)}a.name=o.alias;let h=i.db.getC4ShapeArray(o.alias),u=i.db.getC4ShapeKeys(o.alias);u.length>0&&Ea(a,t,h,u),e=o.alias;let d=i.db.getBoundarys(e);d.length>0&&Aa(t,e,a,d,i),"global"!==o.alias&&wa(t,o,a),n.data.stopy=Math.max(a.data.stopy+ma.c4ShapeMargin,n.data.stopy),n.data.stopx=Math.max(a.data.stopx+ma.c4ShapeMargin,n.data.stopx),pa=Math.max(pa,n.data.stopx),fa=Math.max(fa,n.data.stopy)}}const La={drawPersonOrSystemArray:Ea,drawBoundary:wa,setConf:_a,draw:function(t,e,n,r){ma=ar().c4;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body");let c=r.db;r.db.setWrap(ma.wrap),ga=c.getC4ShapeInRow(),ya=c.getC4BoundaryInRow(),Nt.debug(`C:${JSON.stringify(ma,null,2)}`);const l="sandbox"===i?s.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`);ua(l),ha(l),da(l);let h=new ba(r);h.setData(ma.diagramMarginX,ma.diagramMarginX,ma.diagramMarginY,ma.diagramMarginY),h.data.widthLimit=screen.availWidth,pa=ma.diagramMarginX,fa=ma.diagramMarginY;const u=r.db.getTitle();Aa(l,"",h,r.db.getBoundarys(""),r),sa(l),oa(l),la(l),ca(l),function(t,e,n,r){let i=0;for(let s of e){i+=1;let t=s.wrap&&ma.wrap,e={fontFamily:(a=ma).messageFontFamily,fontSize:a.messageFontSize,fontWeight:a.messageFontWeight};"C4Dynamic"===r.db.getC4Type()&&(s.label.text=i+": "+s.label.text);let o=Yn(s.label.text,e);ka("label",s,t,e,o),s.techn&&""!==s.techn.text&&(o=Yn(s.techn.text,e),ka("techn",s,t,e,o)),s.descr&&""!==s.descr.text&&(o=Yn(s.descr.text,e),ka("descr",s,t,e,o));let c=n(s.from),l=n(s.to),h=Sa(c,l);s.startPoint=h.startPoint,s.endPoint=h.endPoint}var a;aa(t,e,ma)}(l,r.db.getRels(),r.db.getC4Shape,r),h.data.stopx=pa,h.data.stopy=fa;const d=h.data;let p=d.stopy-d.starty+2*ma.diagramMarginY;const f=d.stopx-d.startx+2*ma.diagramMarginX;u&&l.append("text").text(u).attr("x",(d.stopx-d.startx)/2-4*ma.diagramMarginX).attr("y",d.starty+ma.diagramMarginY),dr(l,p,f,ma.useMaxWidth);const g=u?60:0;l.attr("viewBox",d.startx-ma.diagramMarginX+" -"+(ma.diagramMarginY+g)+" "+f+" "+(p+g)),Nt.debug("models:",d)}};var Ba=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,7],i=[1,8],a=[1,9],s=[1,10],o=[1,13],c=[1,12],l=[1,16,25],h=[1,20],u=[1,32],d=[1,33],p=[1,34],f=[1,36],g=[1,39],y=[1,37],m=[1,38],b=[1,44],_=[1,45],x=[1,40],v=[1,41],k=[1,42],w=[1,43],E=[1,48],C=[1,49],T=[1,50],S=[1,51],A=[16,25],L=[1,65],B=[1,66],N=[1,67],D=[1,68],O=[1,69],M=[1,70],I=[1,71],F=[1,80],$=[16,25,32,45,46,54,60,61,62,63,64,65,66,71,73],R=[16,25,30,32,45,46,50,54,60,61,62,63,64,65,66,71,73,88,89,90,91],Z=[5,8,9,10,11,16,19,23,25],P=[54,88,89,90,91],j=[54,65,66,88,89,90,91],Y=[54,60,61,62,63,64,88,89,90,91],z=[16,25,32],U=[1,107],W={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,statments:5,direction:6,directive:7,direction_tb:8,direction_bt:9,direction_rl:10,direction_lr:11,graphConfig:12,openDirective:13,typeDirective:14,closeDirective:15,NEWLINE:16,":":17,argDirective:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,CLASS_DIAGRAM:23,statements:24,EOF:25,statement:26,className:27,alphaNumToken:28,classLiteralName:29,GENERICTYPE:30,relationStatement:31,LABEL:32,classStatement:33,methodStatement:34,annotationStatement:35,clickStatement:36,cssClassStatement:37,noteStatement:38,acc_title:39,acc_title_value:40,acc_descr:41,acc_descr_value:42,acc_descr_multiline_value:43,CLASS:44,STYLE_SEPARATOR:45,STRUCT_START:46,members:47,STRUCT_STOP:48,ANNOTATION_START:49,ANNOTATION_END:50,MEMBER:51,SEPARATOR:52,relation:53,STR:54,NOTE_FOR:55,noteText:56,NOTE:57,relationType:58,lineType:59,AGGREGATION:60,EXTENSION:61,COMPOSITION:62,DEPENDENCY:63,LOLLIPOP:64,LINE:65,DOTTED_LINE:66,CALLBACK:67,LINK:68,LINK_TARGET:69,CLICK:70,CALLBACK_NAME:71,CALLBACK_ARGS:72,HREF:73,CSSCLASS:74,commentToken:75,textToken:76,graphCodeTokens:77,textNoTagsToken:78,TAGSTART:79,TAGEND:80,"==":81,"--":82,PCT:83,DEFAULT:84,SPACE:85,MINUS:86,keywords:87,UNICODE_TEXT:88,NUM:89,ALPHA:90,BQUOTE_STR:91,$accept:0,$end:1},terminals_:{2:"error",5:"statments",8:"direction_tb",9:"direction_bt",10:"direction_rl",11:"direction_lr",16:"NEWLINE",17:":",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",23:"CLASS_DIAGRAM",25:"EOF",30:"GENERICTYPE",32:"LABEL",39:"acc_title",40:"acc_title_value",41:"acc_descr",42:"acc_descr_value",43:"acc_descr_multiline_value",44:"CLASS",45:"STYLE_SEPARATOR",46:"STRUCT_START",48:"STRUCT_STOP",49:"ANNOTATION_START",50:"ANNOTATION_END",51:"MEMBER",52:"SEPARATOR",54:"STR",55:"NOTE_FOR",57:"NOTE",60:"AGGREGATION",61:"EXTENSION",62:"COMPOSITION",63:"DEPENDENCY",64:"LOLLIPOP",65:"LINE",66:"DOTTED_LINE",67:"CALLBACK",68:"LINK",69:"LINK_TARGET",70:"CLICK",71:"CALLBACK_NAME",72:"CALLBACK_ARGS",73:"HREF",74:"CSSCLASS",77:"graphCodeTokens",79:"TAGSTART",80:"TAGEND",81:"==",82:"--",83:"PCT",84:"DEFAULT",85:"SPACE",86:"MINUS",87:"keywords",88:"UNICODE_TEXT",89:"NUM",90:"ALPHA",91:"BQUOTE_STR"},productions_:[0,[3,1],[3,1],[3,1],[3,2],[6,1],[6,1],[6,1],[6,1],[4,1],[7,4],[7,6],[13,1],[14,1],[18,1],[15,1],[12,4],[24,1],[24,2],[24,3],[27,1],[27,1],[27,2],[27,2],[27,2],[26,1],[26,2],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,2],[26,2],[26,1],[33,2],[33,4],[33,5],[33,7],[35,4],[47,1],[47,2],[34,1],[34,2],[34,1],[34,1],[31,3],[31,4],[31,4],[31,5],[38,3],[38,2],[53,3],[53,2],[53,2],[53,1],[58,1],[58,1],[58,1],[58,1],[58,1],[59,1],[59,1],[36,3],[36,4],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[36,3],[36,4],[36,4],[36,5],[37,3],[75,1],[75,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[76,1],[78,1],[78,1],[78,1],[78,1],[28,1],[28,1],[28,1],[29,1],[56,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.setDirection("TB");break;case 6:r.setDirection("BT");break;case 7:r.setDirection("RL");break;case 8:r.setDirection("LR");break;case 12:r.parseDirective("%%{","open_directive");break;case 13:r.parseDirective(a[o],"type_directive");break;case 14:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 15:r.parseDirective("}%%","close_directive","class");break;case 20:case 21:this.$=a[o];break;case 22:this.$=a[o-1]+a[o];break;case 23:case 24:this.$=a[o-1]+"~"+a[o];break;case 25:r.addRelation(a[o]);break;case 26:a[o-1].title=r.cleanupLabel(a[o]),r.addRelation(a[o-1]);break;case 35:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 36:case 37:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 38:r.addClass(a[o]);break;case 39:r.addClass(a[o-2]),r.setCssClass(a[o-2],a[o]);break;case 40:r.addClass(a[o-3]),r.addMembers(a[o-3],a[o-1]);break;case 41:r.addClass(a[o-5]),r.setCssClass(a[o-5],a[o-3]),r.addMembers(a[o-5],a[o-1]);break;case 42:r.addAnnotation(a[o],a[o-2]);break;case 43:this.$=[a[o]];break;case 44:a[o].push(a[o-1]),this.$=a[o];break;case 45:case 47:case 48:break;case 46:r.addMember(a[o-1],r.cleanupLabel(a[o]));break;case 49:this.$={id1:a[o-2],id2:a[o],relation:a[o-1],relationTitle1:"none",relationTitle2:"none"};break;case 50:this.$={id1:a[o-3],id2:a[o],relation:a[o-1],relationTitle1:a[o-2],relationTitle2:"none"};break;case 51:this.$={id1:a[o-3],id2:a[o],relation:a[o-2],relationTitle1:"none",relationTitle2:a[o-1]};break;case 52:this.$={id1:a[o-4],id2:a[o],relation:a[o-2],relationTitle1:a[o-3],relationTitle2:a[o-1]};break;case 53:r.addNote(a[o],a[o-1]);break;case 54:r.addNote(a[o]);break;case 55:this.$={type1:a[o-2],type2:a[o],lineType:a[o-1]};break;case 56:this.$={type1:"none",type2:a[o],lineType:a[o-1]};break;case 57:this.$={type1:a[o-1],type2:"none",lineType:a[o]};break;case 58:this.$={type1:"none",type2:"none",lineType:a[o]};break;case 59:this.$=r.relationType.AGGREGATION;break;case 60:this.$=r.relationType.EXTENSION;break;case 61:this.$=r.relationType.COMPOSITION;break;case 62:this.$=r.relationType.DEPENDENCY;break;case 63:this.$=r.relationType.LOLLIPOP;break;case 64:this.$=r.lineType.LINE;break;case 65:this.$=r.lineType.DOTTED_LINE;break;case 66:case 72:this.$=a[o-2],r.setClickEvent(a[o-1],a[o]);break;case 67:case 73:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 68:case 76:this.$=a[o-2],r.setLink(a[o-1],a[o]);break;case 69:case 77:this.$=a[o-3],r.setLink(a[o-2],a[o-1],a[o]);break;case 70:case 78:this.$=a[o-3],r.setLink(a[o-2],a[o-1]),r.setTooltip(a[o-2],a[o]);break;case 71:case 79:this.$=a[o-4],r.setLink(a[o-3],a[o-2],a[o]),r.setTooltip(a[o-3],a[o-1]);break;case 74:this.$=a[o-3],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 75:this.$=a[o-4],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setTooltip(a[o-3],a[o]);break;case 80:r.setCssClass(a[o-1],a[o])}},table:[{3:1,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[3]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{3:14,4:2,5:n,6:4,7:5,8:r,9:i,10:a,11:s,12:6,13:11,19:o,23:c},{1:[2,9]},e(l,[2,5]),e(l,[2,6]),e(l,[2,7]),e(l,[2,8]),{14:15,20:[1,16]},{16:[1,17]},{20:[2,12]},{1:[2,4]},{15:18,17:[1,19],22:h},e([17,22],[2,13]),{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:21,26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},{16:[1,52]},{18:53,21:[1,54]},{16:[2,15]},{25:[1,55]},{16:[1,56],25:[2,17]},e(A,[2,25],{32:[1,57]}),e(A,[2,27]),e(A,[2,28]),e(A,[2,29]),e(A,[2,30]),e(A,[2,31]),e(A,[2,32]),e(A,[2,33]),e(A,[2,34]),{40:[1,58]},{42:[1,59]},e(A,[2,37]),e(A,[2,45],{53:60,58:63,59:64,32:[1,62],54:[1,61],60:L,61:B,62:N,63:D,64:O,65:M,66:I}),{27:72,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,47]),e(A,[2,48]),{28:73,88:E,89:C,90:T},{27:74,28:46,29:47,88:E,89:C,90:T,91:S},{27:75,28:46,29:47,88:E,89:C,90:T,91:S},{27:76,28:46,29:47,88:E,89:C,90:T,91:S},{54:[1,77]},{27:78,28:46,29:47,88:E,89:C,90:T,91:S},{54:F,56:79},e($,[2,20],{28:46,29:47,27:81,30:[1,82],88:E,89:C,90:T,91:S}),e($,[2,21],{30:[1,83]}),e(R,[2,94]),e(R,[2,95]),e(R,[2,96]),e([16,25,30,32,45,46,54,60,61,62,63,64,65,66,71,73],[2,97]),e(Z,[2,10]),{15:84,22:h},{22:[2,14]},{1:[2,16]},{6:31,7:30,8:r,9:i,10:a,11:s,13:11,19:o,24:85,25:[2,18],26:22,27:35,28:46,29:47,31:23,33:24,34:25,35:26,36:27,37:28,38:29,39:u,41:d,43:p,44:f,49:g,51:y,52:m,55:b,57:_,67:x,68:v,70:k,74:w,88:E,89:C,90:T,91:S},e(A,[2,26]),e(A,[2,35]),e(A,[2,36]),{27:86,28:46,29:47,54:[1,87],88:E,89:C,90:T,91:S},{53:88,58:63,59:64,60:L,61:B,62:N,63:D,64:O,65:M,66:I},e(A,[2,46]),{59:89,65:M,66:I},e(P,[2,58],{58:90,60:L,61:B,62:N,63:D,64:O}),e(j,[2,59]),e(j,[2,60]),e(j,[2,61]),e(j,[2,62]),e(j,[2,63]),e(Y,[2,64]),e(Y,[2,65]),e(A,[2,38],{45:[1,91],46:[1,92]}),{50:[1,93]},{54:[1,94]},{54:[1,95]},{71:[1,96],73:[1,97]},{28:98,88:E,89:C,90:T},{54:F,56:99},e(A,[2,54]),e(A,[2,98]),e($,[2,22]),e($,[2,23]),e($,[2,24]),{16:[1,100]},{25:[2,19]},e(z,[2,49]),{27:101,28:46,29:47,88:E,89:C,90:T,91:S},{27:102,28:46,29:47,54:[1,103],88:E,89:C,90:T,91:S},e(P,[2,57],{58:104,60:L,61:B,62:N,63:D,64:O}),e(P,[2,56]),{28:105,88:E,89:C,90:T},{47:106,51:U},{27:108,28:46,29:47,88:E,89:C,90:T,91:S},e(A,[2,66],{54:[1,109]}),e(A,[2,68],{54:[1,111],69:[1,110]}),e(A,[2,72],{54:[1,112],72:[1,113]}),e(A,[2,76],{54:[1,115],69:[1,114]}),e(A,[2,80]),e(A,[2,53]),e(Z,[2,11]),e(z,[2,51]),e(z,[2,50]),{27:116,28:46,29:47,88:E,89:C,90:T,91:S},e(P,[2,55]),e(A,[2,39],{46:[1,117]}),{48:[1,118]},{47:119,48:[2,43],51:U},e(A,[2,42]),e(A,[2,67]),e(A,[2,69]),e(A,[2,70],{69:[1,120]}),e(A,[2,73]),e(A,[2,74],{54:[1,121]}),e(A,[2,77]),e(A,[2,78],{69:[1,122]}),e(z,[2,52]),{47:123,51:U},e(A,[2,40]),{48:[2,44]},e(A,[2,71]),e(A,[2,75]),e(A,[2,79]),{48:[1,124]},e(A,[2,41])],defaultActions:{2:[2,1],3:[2,2],4:[2,3],6:[2,9],13:[2,12],14:[2,4],20:[2,15],54:[2,14],55:[2,16],85:[2,19],119:[2,44]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},q=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return 8;case 2:return 9;case 3:return 10;case 4:return 11;case 5:return this.begin("type_directive"),20;case 6:return this.popState(),this.begin("arg_directive"),17;case 7:return this.popState(),this.popState(),22;case 8:return 21;case 9:case 10:case 19:case 27:break;case 11:return this.begin("acc_title"),39;case 12:return this.popState(),"acc_title_value";case 13:return this.begin("acc_descr"),41;case 14:return this.popState(),"acc_descr_value";case 15:this.begin("acc_descr_multiline");break;case 16:case 39:case 42:case 45:case 48:case 51:case 54:this.popState();break;case 17:return"acc_descr_multiline_value";case 18:return 16;case 20:case 21:return 23;case 22:return this.begin("struct"),46;case 23:return"EDGE_STATE";case 24:return"EOF_IN_STRUCT";case 25:return"OPEN_IN_STRUCT";case 26:return this.popState(),48;case 28:return"MEMBER";case 29:return 44;case 30:return 74;case 31:return 67;case 32:return 68;case 33:return 70;case 34:return 55;case 35:return 57;case 36:return 49;case 37:return 50;case 38:this.begin("generic");break;case 40:return"GENERICTYPE";case 41:this.begin("string");break;case 43:return"STR";case 44:this.begin("bqstring");break;case 46:return"BQUOTE_STR";case 47:this.begin("href");break;case 49:return 73;case 50:this.begin("callback_name");break;case 52:this.popState(),this.begin("callback_args");break;case 53:return 71;case 55:return 72;case 56:case 57:case 58:case 59:return 69;case 60:case 61:return 61;case 62:case 63:return 63;case 64:return 62;case 65:return 60;case 66:return 64;case 67:return 65;case 68:return 66;case 69:return 32;case 70:return 45;case 71:return 86;case 72:return"DOT";case 73:return"PLUS";case 74:return 83;case 75:case 76:return"EQUALS";case 77:return 90;case 78:return"PUNCTUATION";case 79:return 89;case 80:return 88;case 81:return 85;case 82:return 25}},rules:[/^(?:%%\{)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)*[^\n]*(\r?\n?)+)/,/^(?:%%[^\n]*(\r?\n)*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:\s*(\r?\n)+)/,/^(?:\s+)/,/^(?:classDiagram-v2\b)/,/^(?:classDiagram\b)/,/^(?:[{])/,/^(?:\[\*\])/,/^(?:$)/,/^(?:[{])/,/^(?:[}])/,/^(?:[\n])/,/^(?:[^{}\n]*)/,/^(?:class\b)/,/^(?:cssClass\b)/,/^(?:callback\b)/,/^(?:link\b)/,/^(?:click\b)/,/^(?:note for\b)/,/^(?:note\b)/,/^(?:<<)/,/^(?:>>)/,/^(?:[~])/,/^(?:[~])/,/^(?:[^~]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:[`])/,/^(?:[`])/,/^(?:[^`]+)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:\s*<\|)/,/^(?:\s*\|>)/,/^(?:\s*>)/,/^(?:\s*<)/,/^(?:\s*\*)/,/^(?:\s*o\b)/,/^(?:\s*\(\))/,/^(?:--)/,/^(?:\.\.)/,/^(?::{1}[^:\n;]+)/,/^(?::{3})/,/^(?:-)/,/^(?:\.)/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:\w+)/,/^(?:[!"#$%&'*+,-.`?\\/])/,/^(?:[0-9]+)/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\s)/,/^(?:$)/],conditions:{acc_descr_multiline:{rules:[16,17],inclusive:!1},acc_descr:{rules:[14],inclusive:!1},acc_title:{rules:[12],inclusive:!1},arg_directive:{rules:[7,8],inclusive:!1},type_directive:{rules:[6,7],inclusive:!1},open_directive:{rules:[5],inclusive:!1},callback_args:{rules:[54,55],inclusive:!1},callback_name:{rules:[51,52,53],inclusive:!1},href:{rules:[48,49],inclusive:!1},struct:{rules:[23,24,25,26,27,28],inclusive:!1},generic:{rules:[39,40],inclusive:!1},bqstring:{rules:[45,46],inclusive:!1},string:{rules:[42,43],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,9,10,11,13,15,18,19,20,21,22,23,29,30,31,32,33,34,35,36,37,38,41,44,47,50,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],inclusive:!0}}},t);function H(){this.yy={}}return W.lexer=q,H.prototype=W,W.Parser=H,new H}();Ba.parser=Ba;const Na=Ba,Da=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*classDiagram/)},Oa=(t,e)=>{var n;return null!==t.match(/^\s*classDiagram/)&&"dagre-wrapper"===(null==(n=null==e?void 0:e.class)?void 0:n.defaultRenderer)||null!==t.match(/^\s*classDiagram-v2/)},Ma="classid-";let Ia=[],Fa={},$a=[],Ra=0,Za=[];const Pa=t=>Yt.sanitizeText(t,ar()),ja=function(t){let e="",n=t;if(t.indexOf("~")>0){let r=t.split("~");n=r[0],e=Yt.sanitizeText(r[1],ar())}return{className:n,type:e}},Ya=function(t){let e=ja(t);void 0===Fa[e.className]&&(Fa[e.className]={id:e.className,type:e.type,cssClasses:[],methods:[],members:[],annotations:[],domId:Ma+e.className+"-"+Ra},Ra++)},za=function(t){const e=Object.keys(Fa);for(const n of e)if(Fa[n].id===t)return Fa[n].domId},Ua=function(t,e){const n=ja(t).className,r=Fa[n];if("string"==typeof e){const t=e.trim();t.startsWith("<<")&&t.endsWith(">>")?r.annotations.push(Pa(t.substring(2,t.length-2))):t.indexOf(")")>0?r.methods.push(Pa(t)):t&&r.members.push(Pa(t))}},Wa=function(t,e){t.split(",").forEach((function(t){let n=t;t[0].match(/\d/)&&(n=Ma+n),void 0!==Fa[n]&&Fa[n].cssClasses.push(e)}))},qa=function(t,e,n){const r=ar();let i=t,a=za(i);if("loose"===r.securityLevel&&void 0!==e&&void 0!==Fa[i]){let t=[];if("string"==typeof n){t=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let e=0;e<t.length;e++){let n=t[e].trim();'"'===n.charAt(0)&&'"'===n.charAt(n.length-1)&&(n=n.substr(1,n.length-2)),t[e]=n}}0===t.length&&t.push(a),Za.push((function(){const n=document.querySelector(`[id="${a}"]`);null!==n&&n.addEventListener("click",(function(){Gn.runFunc(e,...t)}),!1)}))}},Ha=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Za.push(Ha);let Va="TB";const Ga={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,getConfig:()=>ar().class,addClass:Ya,bindFunctions:function(t){Za.forEach((function(e){e(t)}))},clear:function(){Ia=[],Fa={},$a=[],Za=[],Za.push(Ha),Dr()},getClass:function(t){return Fa[t]},getClasses:function(){return Fa},getNotes:function(){return $a},addAnnotation:function(t,e){const n=ja(t).className;Fa[n].annotations.push(e)},addNote:function(t,e){const n={id:`note${$a.length}`,class:e,text:t};$a.push(n)},getRelations:function(){return Ia},addRelation:function(t){Nt.debug("Adding relation: "+JSON.stringify(t)),Ya(t.id1),Ya(t.id2),t.id1=ja(t.id1).className,t.id2=ja(t.id2).className,t.relationTitle1=Yt.sanitizeText(t.relationTitle1.trim(),ar()),t.relationTitle2=Yt.sanitizeText(t.relationTitle2.trim(),ar()),Ia.push(t)},getDirection:()=>Va,setDirection:t=>{Va=t},addMember:Ua,addMembers:function(t,e){Array.isArray(e)&&(e.reverse(),e.forEach((e=>Ua(t,e))))},cleanupLabel:function(t){return":"===t.substring(0,1)?Yt.sanitizeText(t.substr(1).trim(),ar()):Pa(t.trim())},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3,LOLLIPOP:4},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){qa(t,e,n),Fa[t].haveCallback=!0})),Wa(t,"clickable")},setCssClass:Wa,setLink:function(t,e,n){const r=ar();t.split(",").forEach((function(t){let i=t;t[0].match(/\d/)&&(i=Ma+i),void 0!==Fa[i]&&(Fa[i].link=Gn.formatUrl(e,r),"sandbox"===r.securityLevel?Fa[i].linkTarget="_top":Fa[i].linkTarget="string"==typeof n?Pa(n):"_blank")})),Wa(t,"clickable")},getTooltip:function(t){return Fa[t].tooltip},setTooltip:function(t,e){const n=ar();t.split(",").forEach((function(t){void 0!==e&&(Fa[t].tooltip=Yt.sanitizeText(e,n))}))},lookUpDomId:za,setDiagramTitle:$r,getDiagramTitle:Rr};let Xa=0;const Ka=function(t){let e=t.match(/^([#+~-])?(\w+)(~\w+~|\[])?\s+(\w+) *([$*])?$/),n=t.match(/^([#+|~-])?(\w+) *\( *(.*)\) *([$*])? *(\w*[[\]|~]*\s*\w*~?)$/);return e&&!n?Qa(e):n?Ja(n):ts(t)},Qa=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"",o=t[5]?t[5].trim():"";n=r+i+a+" "+s,e=ns(o)}catch(r){n=t}return{displayText:n,cssStyle:e}},Ja=function(t){let e="",n="";try{let r=t[1]?t[1].trim():"",i=t[2]?t[2].trim():"",a=t[3]?jt(t[3].trim()):"",s=t[4]?t[4].trim():"";n=r+i+"("+a+")"+(t[5]?" : "+jt(t[5]).trim():""),e=ns(s)}catch(r){n=t}return{displayText:n,cssStyle:e}},ts=function(t){let e="",n="",r="",i=t.indexOf("("),a=t.indexOf(")");if(i>1&&a>i&&a<=t.length){let s="",o="",c=t.substring(0,1);c.match(/\w/)?o=t.substring(0,i).trim():(c.match(/[#+~-]/)&&(s=c),o=t.substring(1,i).trim());const l=t.substring(i+1,a);t.substring(a+1,1),n=ns(t.substring(a+1,a+2)),e=s+o+"("+jt(l.trim())+")",a<t.length&&(r=t.substring(a+2).trim(),""!==r&&(r=" : "+jt(r),e+=r))}else e=jt(t);return{displayText:e,cssStyle:n}},es=function(t,e,n,r){let i=Ka(e);const a=t.append("tspan").attr("x",r.padding).text(i.displayText);""!==i.cssStyle&&a.attr("style",i.cssStyle),n||a.attr("dy",r.textHeight)},ns=function(t){switch(t){case"*":return"font-style:italic;";case"$":return"text-decoration:underline;";default:return""}},rs=function(t,e,n,r){Nt.debug("Rendering class ",e,n);const i=e.id,a={id:i,label:e.id,width:0,height:0},s=t.append("g").attr("id",r.db.lookUpDomId(i)).attr("class","classGroup");let o;o=e.link?s.append("svg:a").attr("xlink:href",e.link).attr("target",e.linkTarget).append("text").attr("y",n.textHeight+n.padding).attr("x",0):s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);let c=!0;e.annotations.forEach((function(t){const e=o.append("tspan").text("\xab"+t+"\xbb");c||e.attr("dy",n.textHeight),c=!1}));let l=e.id;void 0!==e.type&&""!==e.type&&(l+="<"+e.type+">");const h=o.append("tspan").text(l).attr("class","title");c||h.attr("dy",n.textHeight);const u=o.node().getBBox().height,d=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin/2).attr("y2",n.padding+u+n.dividerMargin/2),p=s.append("text").attr("x",n.padding).attr("y",u+n.dividerMargin+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.members.forEach((function(t){es(p,t,c,n),c=!1}));const f=p.node().getBBox(),g=s.append("line").attr("x1",0).attr("y1",n.padding+u+n.dividerMargin+f.height).attr("y2",n.padding+u+n.dividerMargin+f.height),y=s.append("text").attr("x",n.padding).attr("y",u+2*n.dividerMargin+f.height+n.textHeight).attr("fill","white").attr("class","classText");c=!0,e.methods.forEach((function(t){es(y,t,c,n),c=!1}));const m=s.node().getBBox();var b=" ";e.cssClasses.length>0&&(b+=e.cssClasses.join(" "));const _=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",m.width+2*n.padding).attr("height",m.height+n.padding+.5*n.dividerMargin).attr("class",b).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(_-t.getBBox().width)/2)})),e.tooltip&&o.insert("title").text(e.tooltip),d.attr("x2",_),g.attr("x2",_),a.width=_,a.height=m.height+n.padding+.5*n.dividerMargin,a},is=function(t,e,n,r,i){const a=function(t){switch(t){case i.db.relationType.AGGREGATION:return"aggregation";case i.db.relationType.EXTENSION:return"extension";case i.db.relationType.COMPOSITION:return"composition";case i.db.relationType.DEPENDENCY:return"dependency";case i.db.relationType.LOLLIPOP:return"lollipop"}};e.points=e.points.filter((t=>!Number.isNaN(t.y)));const s=e.points,c=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),l=t.append("path").attr("d",c(s)).attr("id","edge"+Xa).attr("class","relation");let h,u,d="";r.arrowMarkerAbsolute&&(d=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,d=d.replace(/\(/g,"\\("),d=d.replace(/\)/g,"\\)")),1==n.relation.lineType&&l.attr("class","relation dashed-line"),10==n.relation.lineType&&l.attr("class","relation dotted-line"),"none"!==n.relation.type1&&l.attr("marker-start","url("+d+"#"+a(n.relation.type1)+"Start)"),"none"!==n.relation.type2&&l.attr("marker-end","url("+d+"#"+a(n.relation.type2)+"End)");const p=e.points.length;let f,g,y,m,b=Gn.calcLabelPosition(e.points);if(h=b.x,u=b.y,p%2!=0&&p>1){let t=Gn.calcCardinalityPosition("none"!==n.relation.type1,e.points,e.points[0]),r=Gn.calcCardinalityPosition("none"!==n.relation.type2,e.points,e.points[p-1]);Nt.debug("cardinality_1_point "+JSON.stringify(t)),Nt.debug("cardinality_2_point "+JSON.stringify(r)),f=t.x,g=t.y,y=r.x,m=r.y}if(void 0!==n.title){const e=t.append("g").attr("class","classLabel"),i=e.append("text").attr("class","label").attr("x",h).attr("y",u).attr("fill","red").attr("text-anchor","middle").text(n.title);window.label=i;const a=i.node().getBBox();e.insert("rect",":first-child").attr("class","box").attr("x",a.x-r.padding/2).attr("y",a.y-r.padding/2).attr("width",a.width+r.padding).attr("height",a.height+r.padding)}if(Nt.info("Rendering relation "+JSON.stringify(n)),void 0!==n.relationTitle1&&"none"!==n.relationTitle1){t.append("g").attr("class","cardinality").append("text").attr("class","type1").attr("x",f).attr("y",g).attr("fill","black").attr("font-size","6").text(n.relationTitle1)}if(void 0!==n.relationTitle2&&"none"!==n.relationTitle2){t.append("g").attr("class","cardinality").append("text").attr("class","type2").attr("x",y).attr("y",m).attr("fill","black").attr("font-size","6").text(n.relationTitle2)}Xa++},as=function(t,e,n,r){Nt.debug("Rendering note ",e,n);const i=e.id,a={id:i,text:e.text,width:0,height:0},s=t.append("g").attr("id",i).attr("class","classGroup");let o=s.append("text").attr("y",n.textHeight+n.padding).attr("x",0);const c=JSON.parse(`"${e.text}"`).split("\n");c.forEach((function(t){Nt.debug(`Adding line: ${t}`),o.append("tspan").text(t).attr("class","title").attr("dy",n.textHeight)}));const l=s.node().getBBox(),h=s.insert("rect",":first-child").attr("x",0).attr("y",0).attr("width",l.width+2*n.padding).attr("height",l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin).node().getBBox().width;return o.node().childNodes.forEach((function(t){t.setAttribute("x",(h-t.getBBox().width)/2)})),a.width=h,a.height=l.height+c.length*n.textHeight+n.padding+.5*n.dividerMargin,a};let ss={};const os=function(t){const e=Object.entries(ss).find((e=>e[1].label===t));if(e)return e[0]},cs={draw:function(t,e,n,r){const i=ar().class;ss={},Nt.info("Rendering diagram "+t);const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l=c.select(`[id='${e}']`);var h;(h=l).append("defs").append("marker").attr("id","extensionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),h.append("defs").append("marker").attr("id","extensionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z"),h.append("defs").append("marker").attr("id","compositionStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","compositionEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","aggregationEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyStart").attr("class","extension").attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),h.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z");const u=new ht.k({multigraph:!0});u.setGraph({isMultiGraph:!0}),u.setDefaultEdgeLabel((function(){return{}}));const d=r.db.getClasses(),p=Object.keys(d);for(const o of p){const t=d[o],e=rs(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),Nt.info("Org height: "+e.height)}r.db.getRelations().forEach((function(t){Nt.info("tjoho"+os(t.id1)+os(t.id2)+JSON.stringify(t)),u.setEdge(os(t.id1),os(t.id2),{relation:t},t.title||"DEFAULT")}));r.db.getNotes().forEach((function(t){Nt.debug(`Adding note: ${JSON.stringify(t)}`);const e=as(l,t,i,r);ss[e.id]=e,u.setNode(e.id,e),t.class&&t.class in d&&u.setEdge(t.id,os(t.class),{relation:{id1:t.id,id2:t.class,relation:{type1:"none",type2:"none",lineType:10}}},"DEFAULT")})),(0,lt.bK)(u),u.nodes().forEach((function(t){void 0!==t&&void 0!==u.node(t)&&(Nt.debug("Node "+t+": "+JSON.stringify(u.node(t))),c.select("#"+(r.db.lookUpDomId(t)||t)).attr("transform","translate("+(u.node(t).x-u.node(t).width/2)+","+(u.node(t).y-u.node(t).height/2)+" )"))})),u.edges().forEach((function(t){void 0!==t&&void 0!==u.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(u.edge(t))),is(l,u.edge(t),u.edge(t).relation,i,r))}));const f=l.node().getBBox(),g=f.width+40,y=f.height+40;dr(l,y,g,i.useMaxWidth);const m=`${f.x-20} ${f.y-20} ${g} ${y}`;Nt.debug(`viewBox ${m}`),l.attr("viewBox",m)}},ls={extension:(t,e,n)=>{Nt.trace("Making markers for ",n),t.append("defs").append("marker").attr("id",e+"-extensionStart").attr("class","marker extension "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 1,7 L18,13 V 1 Z"),t.append("defs").append("marker").attr("id",e+"-extensionEnd").attr("class","marker extension "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 1,1 V 13 L18,7 Z")},composition:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-compositionStart").attr("class","marker composition "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-compositionEnd").attr("class","marker composition "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},aggregation:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-aggregationStart").attr("class","marker aggregation "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-aggregationEnd").attr("class","marker aggregation "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L1,7 L9,1 Z")},dependency:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-dependencyStart").attr("class","marker dependency "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("path").attr("d","M 5,7 L9,13 L1,7 L9,1 Z"),t.append("defs").append("marker").attr("id",e+"-dependencyEnd").attr("class","marker dependency "+e).attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},lollipop:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-lollipopStart").attr("class","marker lollipop "+e).attr("refX",0).attr("refY",7).attr("markerWidth",190).attr("markerHeight",240).attr("orient","auto").append("circle").attr("stroke","black").attr("fill","white").attr("cx",6).attr("cy",7).attr("r",6)},point:(t,e)=>{t.append("marker").attr("id",e+"-pointEnd").attr("class","marker "+e).attr("viewBox","0 0 12 20").attr("refX",10).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-pointStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",0).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 5 L 10 10 L 10 0 z").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},circle:(t,e)=>{t.append("marker").attr("id",e+"-circleEnd").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",11).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-circleStart").attr("class","marker "+e).attr("viewBox","0 0 10 10").attr("refX",-1).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("circle").attr("cx","5").attr("cy","5").attr("r","5").attr("class","arrowMarkerPath").style("stroke-width",1).style("stroke-dasharray","1,0")},cross:(t,e)=>{t.append("marker").attr("id",e+"-crossEnd").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",12).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0"),t.append("marker").attr("id",e+"-crossStart").attr("class","marker cross "+e).attr("viewBox","0 0 11 11").attr("refX",-1).attr("refY",5.2).attr("markerUnits","userSpaceOnUse").attr("markerWidth",11).attr("markerHeight",11).attr("orient","auto").append("path").attr("d","M 1,1 l 9,9 M 10,1 l -9,9").attr("class","arrowMarkerPath").style("stroke-width",2).style("stroke-dasharray","1,0")},barb:(t,e)=>{t.append("defs").append("marker").attr("id",e+"-barbEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",14).attr("markerUnits","strokeWidth").attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z")}},hs=(t,e,n,r)=>{e.forEach((e=>{ls[e](t,n,r)}))};const us=(t,e,n,r)=>{let i=t||"";if("object"==typeof i&&(i=i[0]),Pt(ar().flowchart.htmlLabels)){i=i.replace(/\\n|\n/g,"<br />"),Nt.info("vertexText"+i);let t=function(t){const e=(0,o.Ys)(document.createElementNS("http://www.w3.org/2000/svg","foreignObject")),n=e.append("xhtml:div"),r=t.label,i=t.isNode?"nodeLabel":"edgeLabel";var a,s;return n.html('<span class="'+i+'" '+(t.labelStyle?'style="'+t.labelStyle+'"':"")+">"+r+"</span>"),a=n,(s=t.labelStyle)&&a.attr("style",s),n.style("display","inline-block"),n.style("white-space","nowrap"),n.attr("xmlns","http://www.w3.org/1999/xhtml"),e.node()}({isNode:r,label:Xd(i).replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`)),labelStyle:e.replace("fill:","color:")});return t}{const t=document.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",e.replace("color:","fill:"));let r=[];r="string"==typeof i?i.split(/\\n|\n|<br\s*\/?>/gi):Array.isArray(i)?i:[];for(const e of r){const r=document.createElementNS("http://www.w3.org/2000/svg","tspan");r.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),r.setAttribute("dy","1em"),r.setAttribute("x","0"),n?r.setAttribute("class","title-row"):r.setAttribute("class","row"),r.textContent=e.trim(),t.appendChild(r)}return t}},ds=(t,e,n,r)=>{let i;i=n||"node default";const a=t.insert("g").attr("class",i).attr("id",e.domId||e.id),s=a.insert("g").attr("class","label").attr("style",e.labelStyle);let c;c=void 0===e.labelText?"":"string"==typeof e.labelText?e.labelText:e.labelText[0];const l=s.node().appendChild(us(Ft(Xd(c),ar()),e.labelStyle,!1,r));let h=l.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=l.children[0],e=(0,o.Ys)(l);h=t.getBoundingClientRect(),e.attr("width",h.width),e.attr("height",h.height)}const u=e.padding/2;return s.attr("transform","translate("+-h.width/2+", "+-h.height/2+")"),{shapeSvg:a,bbox:h,halfPadding:u,label:s}},ps=(t,e)=>{const n=e.node().getBBox();t.width=n.width,t.height=n.height};function fs(t,e,n,r){return t.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","label-container").attr("transform","translate("+-e/2+","+n/2+")")}let gs={},ys={},ms={};const bs=(t,e)=>(Nt.trace("In isDecendant",e," ",t," = ",ys[e].includes(t)),!!ys[e].includes(t)),_s=(t,e,n,r)=>{Nt.warn("Copying children of ",t,"root",r,"data",e.node(t),r);const i=e.children(t)||[];t!==r&&i.push(t),Nt.warn("Copying (nodes) clusterId",t,"nodes",i),i.forEach((i=>{if(e.children(i).length>0)_s(i,e,n,r);else{const a=e.node(i);Nt.info("cp ",i," to ",r," with parent ",t),n.setNode(i,a),r!==e.parent(i)&&(Nt.warn("Setting parent",i,e.parent(i)),n.setParent(i,e.parent(i))),t!==r&&i!==t?(Nt.debug("Setting parent",i,t),n.setParent(i,t)):(Nt.info("In copy ",t,"root",r,"data",e.node(t),r),Nt.debug("Not Setting parent for node=",i,"cluster!==rootId",t!==r,"node!==clusterId",i!==t));const s=e.edges(i);Nt.debug("Copying Edges",s),s.forEach((i=>{Nt.info("Edge",i);const a=e.edge(i.v,i.w,i.name);Nt.info("Edge data",a,r);try{((t,e)=>(Nt.info("Decendants of ",e," is ",ys[e]),Nt.info("Edge is ",t),t.v!==e&&t.w!==e&&(ys[e]?ys[e].includes(t.v)||bs(t.v,e)||bs(t.w,e)||ys[e].includes(t.w):(Nt.debug("Tilt, ",e,",not in decendants"),!1))))(i,r)?(Nt.info("Copying as ",i.v,i.w,a,i.name),n.setEdge(i.v,i.w,a,i.name),Nt.info("newGraph edges ",n.edges(),n.edge(n.edges()[0]))):Nt.info("Skipping copy of edge ",i.v,"--\x3e",i.w," rootId: ",r," clusterId:",t)}catch(s){Nt.error(s)}}))}Nt.debug("Removing node",i),e.removeNode(i)}))},xs=(t,e)=>{const n=e.children(t);let r=[...n];for(const i of n)ms[i]=t,r=[...r,...xs(i,e)];return r},vs=(t,e)=>{Nt.trace("Searching",t);const n=e.children(t);if(Nt.trace("Searching children of id ",t,n),n.length<1)return Nt.trace("This is a valid node",t),t;for(const r of n){const n=vs(r,e);if(n)return Nt.trace("Found replacement for",t," => ",n),n}},ks=t=>gs[t]&&gs[t].externalConnections&&gs[t]?gs[t].id:t,ws=(t,e)=>{if(Nt.warn("extractor - ",e,ut.c(t),t.children("D")),e>10)return void Nt.error("Bailing out");let n=t.nodes(),r=!1;for(const i of n){const e=t.children(i);r=r||e.length>0}if(r){Nt.debug("Nodes = ",n,e);for(const r of n)if(Nt.debug("Extracting node",r,gs,gs[r]&&!gs[r].externalConnections,!t.parent(r),t.node(r),t.children("D")," Depth ",e),gs[r])if(!gs[r].externalConnections&&t.children(r)&&t.children(r).length>0){Nt.warn("Cluster without external connections, without a parent and with children",r,e);let n="TB"===t.graph().rankdir?"LR":"TB";gs[r]&&gs[r].clusterData&&gs[r].clusterData.dir&&(n=gs[r].clusterData.dir,Nt.warn("Fixing dir",gs[r].clusterData.dir,n));const i=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:n,nodesep:50,ranksep:50,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));Nt.warn("Old graph before copy",ut.c(t)),_s(r,t,i,r),t.setNode(r,{clusterNode:!0,id:r,clusterData:gs[r].clusterData,labelText:gs[r].labelText,graph:i}),Nt.warn("New graph after copy node: (",r,")",ut.c(i)),Nt.debug("Old graph after copy",ut.c(t))}else Nt.warn("Cluster ** ",r," **not meeting the criteria !externalConnections:",!gs[r].externalConnections," no parent: ",!t.parent(r)," children ",t.children(r)&&t.children(r).length>0,t.children("D"),e),Nt.debug(gs);else Nt.debug("Not a cluster",r,e);n=t.nodes(),Nt.warn("New list of nodes",n);for(const r of n){const n=t.node(r);Nt.warn(" Now next level",r,n),n.clusterNode&&ws(n.graph,e+1)}}else Nt.debug("Done, no node has children",t.nodes())},Es=(t,e)=>{if(0===e.length)return[];let n=Object.assign(e);return e.forEach((e=>{const r=t.children(e),i=Es(t,r);n=[...n,...i]})),n};function Cs(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}function Ts(t,e,n,r){var i,a,s,o,c,l,h,u,d,p,f,g,y;if(i=e.y-t.y,s=t.x-e.x,c=e.x*t.y-t.x*e.y,d=i*n.x+s*n.y+c,p=i*r.x+s*r.y+c,!(0!==d&&0!==p&&Ss(d,p)||(a=r.y-n.y,o=n.x-r.x,l=r.x*n.y-n.x*r.y,h=a*t.x+o*t.y+l,u=a*e.x+o*e.y+l,0!==h&&0!==u&&Ss(h,u)||0==(f=i*o-a*s))))return g=Math.abs(f/2),{x:(y=s*l-o*c)<0?(y-g)/f:(y+g)/f,y:(y=a*c-i*l)<0?(y-g)/f:(y+g)/f}}function Ss(t,e){return t*e>0}const As=(t,e)=>{var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}},Ls={node:function(t,e){return t.intersect(e)},circle:function(t,e,n){return Cs(t,e,e,n)},ellipse:Cs,polygon:function(t,e,n){var r=t.x,i=t.y,a=[],s=Number.POSITIVE_INFINITY,o=Number.POSITIVE_INFINITY;"function"==typeof e.forEach?e.forEach((function(t){s=Math.min(s,t.x),o=Math.min(o,t.y)})):(s=Math.min(s,e.x),o=Math.min(o,e.y));for(var c=r-t.width/2-s,l=i-t.height/2-o,h=0;h<e.length;h++){var u=e[h],d=e[h<e.length-1?h+1:0],p=Ts(t,n,{x:c+u.x,y:l+u.y},{x:c+d.x,y:l+d.y});p&&a.push(p)}return a.length?(a.length>1&&a.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),a[0]):t},rect:As},Bs=(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.info("Classes = ",e.classes);const a=n.insert("rect",":first-child");return a.attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},Ns=(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding+(r.height+e.padding),a=[{x:i/2,y:0},{x:i,y:-i/2},{x:i/2,y:-i},{x:0,y:-i/2}];Nt.info("Question main (Circle)");const s=fs(n,i,i,a);return s.attr("style",e.style),ps(e,s),e.intersect=function(t){return Nt.warn("Intersect called"),Ls.polygon(e,a,t)},n};function Ds(t,e,n,r){const i=[],a=t=>{i.push(t,0)},s=t=>{i.push(0,t)};e.includes("t")?(Nt.debug("add top border"),a(n)):s(n),e.includes("r")?(Nt.debug("add right border"),a(r)):s(r),e.includes("b")?(Nt.debug("add bottom border"),a(n)):s(n),e.includes("l")?(Nt.debug("add left border"),a(r)):s(r),t.attr("stroke-dasharray",i.join(" "))}const Os=(t,e,n)=>{const r=t.insert("g").attr("class","node default").attr("id",e.domId||e.id);let i=70,a=10;"LR"===n&&(i=10,a=70);const s=r.append("rect").attr("x",-1*i/2).attr("y",-1*a/2).attr("width",i).attr("height",a).attr("class","fork-join");return ps(e,s),e.height=e.height+e.padding/2,e.width=e.width+e.padding/2,e.intersect=function(t){return Ls.rect(e,t)},r},Ms={rhombus:Ns,question:Ns,rect:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,"node "+e.classes,!0);Nt.trace("Classes = ",e.classes);const a=n.insert("rect",":first-child"),s=r.width+e.padding,o=r.height+e.padding;if(a.attr("class","basic label-container").attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",-r.width/2-i).attr("y",-r.height/2-i).attr("width",s).attr("height",o),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(a,e.props.borders,s,o),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},n},labelRect:(t,e)=>{const{shapeSvg:n}=ds(t,e,"label",!0);Nt.trace("Classes = ",e.classes);const r=n.insert("rect",":first-child");if(r.attr("width",0).attr("height",0),n.attr("class","label edgeLabel"),e.props){const t=new Set(Object.keys(e.props));e.props.borders&&(Ds(r,e.props.borders,0,0),t.delete("borders")),t.forEach((t=>{Nt.warn(`Unknown node property ${t}`)}))}return ps(e,r),e.intersect=function(t){return Ls.rect(e,t)},n},rectWithTitle:(t,e)=>{let n;n=e.classes?"node "+e.classes:"node default";const r=t.insert("g").attr("class",n).attr("id",e.domId||e.id),i=r.insert("rect",":first-child"),a=r.insert("line"),s=r.insert("g").attr("class","label"),c=e.labelText.flat?e.labelText.flat():e.labelText;let l="";l="object"==typeof c?c[0]:c,Nt.info("Label text abc79",l,c,"object"==typeof c);const h=s.node().appendChild(us(l,e.labelStyle,!0,!0));let u={width:0,height:0};if(Pt(ar().flowchart.htmlLabels)){const t=h.children[0],e=(0,o.Ys)(h);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}Nt.info("Text 2",c);const d=c.slice(1,c.length);let p=h.getBBox();const f=s.node().appendChild(us(d.join?d.join("<br/>"):d,e.labelStyle,!0,!0));if(Pt(ar().flowchart.htmlLabels)){const t=f.children[0],e=(0,o.Ys)(f);u=t.getBoundingClientRect(),e.attr("width",u.width),e.attr("height",u.height)}const g=e.padding/2;return(0,o.Ys)(f).attr("transform","translate( "+(u.width>p.width?0:(p.width-u.width)/2)+", "+(p.height+g+5)+")"),(0,o.Ys)(h).attr("transform","translate( "+(u.width<p.width?0:-(p.width-u.width)/2)+", 0)"),u=s.node().getBBox(),s.attr("transform","translate("+-u.width/2+", "+(-u.height/2-g+3)+")"),i.attr("class","outer title-state").attr("x",-u.width/2-g).attr("y",-u.height/2-g).attr("width",u.width+e.padding).attr("height",u.height+e.padding),a.attr("class","divider").attr("x1",-u.width/2-g).attr("x2",u.width/2+g).attr("y1",-u.height/2-g+p.height+g).attr("y2",-u.height/2-g+p.height+g),ps(e,i),e.intersect=function(t){return Ls.rect(e,t)},r},choice:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=[{x:0,y:14},{x:14,y:0},{x:0,y:-14},{x:-14,y:0}];return n.insert("polygon",":first-child").attr("points",r.map((function(t){return t.x+","+t.y})).join(" ")).attr("class","state-start").attr("r",7).attr("width",28).attr("height",28),e.width=28,e.height=28,e.intersect=function(t){return Ls.circle(e,14,t)},n},circle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("circle",":first-child");return a.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("Circle main"),ps(e,a),e.intersect=function(t){return Nt.info("Circle intersect",e,r.width/2+i,t),Ls.circle(e,r.width/2+i,t)},n},doublecircle:(t,e)=>{const{shapeSvg:n,bbox:r,halfPadding:i}=ds(t,e,void 0,!0),a=n.insert("g",":first-child"),s=a.insert("circle"),o=a.insert("circle");return s.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i+5).attr("width",r.width+e.padding+10).attr("height",r.height+e.padding+10),o.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("r",r.width/2+i).attr("width",r.width+e.padding).attr("height",r.height+e.padding),Nt.info("DoubleCircle main"),ps(e,s),e.intersect=function(t){return Nt.info("DoubleCircle intersect",e,r.width/2+i+5,t),Ls.circle(e,r.width/2+i+5,t)},n},stadium:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=r.width+i/4+e.padding,s=n.insert("rect",":first-child").attr("style",e.style).attr("rx",i/2).attr("ry",i/2).attr("x",-a/2).attr("y",-i/2).attr("width",a).attr("height",i);return ps(e,s),e.intersect=function(t){return Ls.rect(e,t)},n},hexagon:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.height+e.padding,a=i/4,s=r.width+2*a+e.padding,o=[{x:a,y:0},{x:s-a,y:0},{x:s,y:-i/2},{x:s-a,y:-i},{x:a,y:-i},{x:0,y:-i/2}],c=fs(n,s,i,o);return c.attr("style",e.style),ps(e,c),e.intersect=function(t){return Ls.polygon(e,o,t)},n},rect_left_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-a/2,y:0},{x:i,y:0},{x:i,y:-a},{x:-a/2,y:-a},{x:0,y:-a/2}];return fs(n,i,a,s).attr("style",e.style),e.width=i+a,e.height=a,e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_right:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},lean_left:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:2*a/6,y:0},{x:i+a/6,y:0},{x:i-2*a/6,y:-a},{x:-a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:-2*a/6,y:0},{x:i+2*a/6,y:0},{x:i-a/6,y:-a},{x:a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},inv_trapezoid:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:a/6,y:0},{x:i-a/6,y:0},{x:i+2*a/6,y:-a},{x:-2*a/6,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},rect_right_inv_arrow:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i+a/2,y:0},{x:i,y:-a/2},{x:i+a/2,y:-a},{x:0,y:-a}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},cylinder:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=i/2,s=a/(2.5+i/50),o=r.height+s+e.padding,c="M 0,"+s+" a "+a+","+s+" 0,0,0 "+i+" 0 a "+a+","+s+" 0,0,0 "+-i+" 0 l 0,"+o+" a "+a+","+s+" 0,0,0 "+i+" 0 l 0,"+-o,l=n.attr("label-offset-y",s).insert("path",":first-child").attr("style",e.style).attr("d",c).attr("transform","translate("+-i/2+","+-(o/2+s)+")");return ps(e,l),e.intersect=function(t){const n=Ls.rect(e,t),r=n.x-e.x;if(0!=a&&(Math.abs(r)<e.width/2||Math.abs(r)==e.width/2&&Math.abs(n.y-e.y)>e.height/2-s)){let i=s*s*(1-r*r/(a*a));0!=i&&(i=Math.sqrt(i)),i=s-i,t.y-e.y>0&&(i=-i),n.y+=i}return n},n},start:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child");return r.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),ps(e,r),e.intersect=function(t){return Ls.circle(e,7,t)},n},end:(t,e)=>{const n=t.insert("g").attr("class","node default").attr("id",e.domId||e.id),r=n.insert("circle",":first-child"),i=n.insert("circle",":first-child");return i.attr("class","state-start").attr("r",7).attr("width",14).attr("height",14),r.attr("class","state-end").attr("r",5).attr("width",10).attr("height",10),ps(e,i),e.intersect=function(t){return Ls.circle(e,7,t)},n},note:Bs,subroutine:(t,e)=>{const{shapeSvg:n,bbox:r}=ds(t,e,void 0,!0),i=r.width+e.padding,a=r.height+e.padding,s=[{x:0,y:0},{x:i,y:0},{x:i,y:-a},{x:0,y:-a},{x:0,y:0},{x:-8,y:0},{x:i+8,y:0},{x:i+8,y:-a},{x:-8,y:-a},{x:-8,y:0}],o=fs(n,i,a,s);return o.attr("style",e.style),ps(e,o),e.intersect=function(t){return Ls.polygon(e,s,t)},n},fork:Os,join:Os,class_box:(t,e)=>{const n=e.padding/2;let r;r=e.classes?"node "+e.classes:"node default";const i=t.insert("g").attr("class",r).attr("id",e.domId||e.id),a=i.insert("rect",":first-child"),s=i.insert("line"),c=i.insert("line");let l=0,h=4;const u=i.insert("g").attr("class","label");let d=0;const p=e.classData.annotations&&e.classData.annotations[0],f=e.classData.annotations[0]?"\xab"+e.classData.annotations[0]+"\xbb":"",g=u.node().appendChild(us(f,e.labelStyle,!0,!0));let y=g.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=g.children[0],e=(0,o.Ys)(g);y=t.getBoundingClientRect(),e.attr("width",y.width),e.attr("height",y.height)}e.classData.annotations[0]&&(h+=y.height+4,l+=y.width);let m=e.classData.id;void 0!==e.classData.type&&""!==e.classData.type&&(ar().flowchart.htmlLabels?m+="&lt;"+e.classData.type+"&gt;":m+="<"+e.classData.type+">");const b=u.node().appendChild(us(m,e.labelStyle,!0,!0));(0,o.Ys)(b).attr("class","classTitle");let _=b.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=b.children[0],e=(0,o.Ys)(b);_=t.getBoundingClientRect(),e.attr("width",_.width),e.attr("height",_.height)}h+=_.height+4,_.width>l&&(l=_.width);const x=[];e.classData.members.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,x.push(i)})),h+=8;const v=[];if(e.classData.methods.forEach((t=>{const n=Ka(t);let r=n.displayText;ar().flowchart.htmlLabels&&(r=r.replace(/</g,"&lt;").replace(/>/g,"&gt;"));const i=u.node().appendChild(us(r,n.cssStyle?n.cssStyle:e.labelStyle,!0,!0));let a=i.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=i.children[0],e=(0,o.Ys)(i);a=t.getBoundingClientRect(),e.attr("width",a.width),e.attr("height",a.height)}a.width>l&&(l=a.width),h+=a.height+4,v.push(i)})),h+=8,p){let t=(l-y.width)/2;(0,o.Ys)(g).attr("transform","translate( "+(-1*l/2+t)+", "+-1*h/2+")"),d=y.height+4}let k=(l-_.width)/2;return(0,o.Ys)(b).attr("transform","translate( "+(-1*l/2+k)+", "+(-1*h/2+d)+")"),d+=_.height+4,s.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,x.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d+4)+")"),d+=_.height+4})),d+=8,c.attr("class","divider").attr("x1",-l/2-n).attr("x2",l/2+n).attr("y1",-h/2-n+8+d).attr("y2",-h/2-n+8+d),d+=8,v.forEach((t=>{(0,o.Ys)(t).attr("transform","translate( "+-l/2+", "+(-1*h/2+d)+")"),d+=_.height+4})),a.attr("class","outer title-state").attr("x",-l/2-n).attr("y",-h/2-n).attr("width",l+e.padding).attr("height",h+e.padding),ps(e,a),e.intersect=function(t){return Ls.rect(e,t)},i}};let Is={};const Fs=(t,e,n)=>{let r,i;if(e.link){let a;"sandbox"===ar().securityLevel?a="_top":e.linkTarget&&(a=e.linkTarget||"_blank"),r=t.insert("svg:a").attr("xlink:href",e.link).attr("target",a),i=Ms[e.shape](r,e,n)}else i=Ms[e.shape](t,e,n),r=i;return e.tooltip&&i.attr("title",e.tooltip),e.class&&i.attr("class","node default "+e.class),Is[e.id]=r,e.haveCallback&&Is[e.id].attr("class",Is[e.id].attr("class")+" clickable"),r},$s=t=>{const e=Is[t.id];Nt.trace("Transforming node",t.diff,t,"translate("+(t.x-t.width/2-5)+", "+t.width/2+")");const n=t.diff||0;return t.clusterNode?e.attr("transform","translate("+(t.x+n-t.width/2)+", "+(t.y-t.height/2-8)+")"):e.attr("transform","translate("+t.x+", "+t.y+")"),n},Rs={rect:(t,e)=>{Nt.trace("Creating subgraph rect for ",e.id,e);const n=t.insert("g").attr("class","cluster"+(e.class?" "+e.class:"")).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let s=a.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=a.children[0],e=(0,o.Ys)(a);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}const c=0*e.padding,l=c/2,h=e.width<=s.width+c?s.width+c:e.width;e.width<=s.width+c?e.diff=(s.width-e.width)/2-e.padding/2:e.diff=-e.padding/2,Nt.trace("Data ",e,JSON.stringify(e)),r.attr("style",e.style).attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-h/2).attr("y",e.y-e.height/2-l).attr("width",h).attr("height",e.height+c),i.attr("transform","translate("+(e.x-s.width/2)+", "+(e.y-e.height/2)+")");const u=r.node().getBBox();return e.width=u.width,e.height=u.height,e.intersect=function(t){return As(e,t)},n},roundedWithTitle:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=n.insert("g").attr("class","cluster-label"),a=n.append("rect"),s=i.node().appendChild(us(e.labelText,e.labelStyle,void 0,!0));let c=s.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=s.children[0],e=(0,o.Ys)(s);c=t.getBoundingClientRect(),e.attr("width",c.width),e.attr("height",c.height)}c=s.getBBox();const l=0*e.padding,h=l/2,u=e.width<=c.width+e.padding?c.width+e.padding:e.width;e.width<=c.width+e.padding?e.diff=(c.width+0*e.padding-e.width)/2:e.diff=-e.padding/2,r.attr("class","outer").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h).attr("width",u+l).attr("height",e.height+l),a.attr("class","inner").attr("x",e.x-u/2-h).attr("y",e.y-e.height/2-h+c.height-1).attr("width",u+l).attr("height",e.height+l-c.height-3),i.attr("transform","translate("+(e.x-c.width/2)+", "+(e.y-e.height/2-e.padding/3+(Pt(ar().flowchart.htmlLabels)?5:3))+")");const d=r.node().getBBox();return e.height=d.height,e.intersect=function(t){return As(e,t)},n},noteGroup:(t,e)=>{const n=t.insert("g").attr("class","note-cluster").attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("rx",e.rx).attr("ry",e.ry).attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2-a).attr("width",e.width+i).attr("height",e.height+i).attr("fill","none");const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.intersect=function(t){return As(e,t)},n},divider:(t,e)=>{const n=t.insert("g").attr("class",e.classes).attr("id",e.id),r=n.insert("rect",":first-child"),i=0*e.padding,a=i/2;r.attr("class","divider").attr("x",e.x-e.width/2-a).attr("y",e.y-e.height/2).attr("width",e.width+i).attr("height",e.height+i);const s=r.node().getBBox();return e.width=s.width,e.height=s.height,e.diff=-e.padding/2,e.intersect=function(t){return As(e,t)},n}};let Zs={};let Ps={},js={};const Ys=(t,e)=>{const n=us(e.label,e.labelStyle),r=t.insert("g").attr("class","edgeLabel"),i=r.insert("g").attr("class","label");i.node().appendChild(n);let a,s=n.getBBox();if(Pt(ar().flowchart.htmlLabels)){const t=n.children[0],e=(0,o.Ys)(n);s=t.getBoundingClientRect(),e.attr("width",s.width),e.attr("height",s.height)}if(i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),Ps[e.id]=r,e.width=s.width,e.height=s.height,e.startLabelLeft){const n=us(e.startLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startLeft=r,zs(a,e.startLabelLeft)}if(e.startLabelRight){const n=us(e.startLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=r.node().appendChild(n),i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),js[e.id]||(js[e.id]={}),js[e.id].startRight=r,zs(a,e.startLabelRight)}if(e.endLabelLeft){const n=us(e.endLabelLeft,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endLeft=r,zs(a,e.endLabelLeft)}if(e.endLabelRight){const n=us(e.endLabelRight,e.labelStyle),r=t.insert("g").attr("class","edgeTerminals"),i=r.insert("g").attr("class","inner");a=i.node().appendChild(n);const s=n.getBBox();i.attr("transform","translate("+-s.width/2+", "+-s.height/2+")"),r.node().appendChild(n),js[e.id]||(js[e.id]={}),js[e.id].endRight=r,zs(a,e.endLabelRight)}return n};function zs(t,e){ar().flowchart.htmlLabels&&t&&(t.style.width=9*e.length+"px",t.style.height="12px")}const Us=(t,e)=>{Nt.warn("abc88 cutPathAtIntersect",t,e);let n=[],r=t[0],i=!1;return t.forEach((t=>{if(Nt.info("abc88 checking point",t,e),((t,e)=>{const n=t.x,r=t.y,i=Math.abs(e.x-n),a=Math.abs(e.y-r),s=t.width/2,o=t.height/2;return i>=s||a>=o})(e,t)||i)Nt.warn("abc88 outside",t,r),r=t,i||n.push(t);else{const a=((t,e,n)=>{Nt.warn(`intersection calc abc89:\n  outsidePoint: ${JSON.stringify(e)}\n  insidePoint : ${JSON.stringify(n)}\n  node        : x:${t.x} y:${t.y} w:${t.width} h:${t.height}`);const r=t.x,i=t.y,a=Math.abs(r-n.x),s=t.width/2;let o=n.x<e.x?s-a:s+a;const c=t.height/2,l=Math.abs(e.y-n.y),h=Math.abs(e.x-n.x);if(Math.abs(i-e.y)*s>Math.abs(r-e.x)*c){let t=n.y<e.y?e.y-c-i:i-c-e.y;o=h*t/l;const r={x:n.x<e.x?n.x+o:n.x-h+o,y:n.y<e.y?n.y+l-t:n.y-l+t};return 0===o&&(r.x=e.x,r.y=e.y),0===h&&(r.x=e.x),0===l&&(r.y=e.y),Nt.warn(`abc89 topp/bott calc, Q ${l}, q ${t}, R ${h}, r ${o}`,r),r}{o=n.x<e.x?e.x-s-r:r-s-e.x;let t=l*o/h,i=n.x<e.x?n.x+h-o:n.x-h+o,a=n.y<e.y?n.y+t:n.y-t;return Nt.warn(`sides calc abc89, Q ${l}, q ${t}, R ${h}, r ${o}`,{_x:i,_y:a}),0===o&&(i=e.x,a=e.y),0===h&&(i=e.x),0===l&&(a=e.y),{x:i,y:a}}})(e,r,t);Nt.warn("abc88 inside",t,r,a),Nt.warn("abc88 intersection",a);let s=!1;n.forEach((t=>{s=s||t.x===a.x&&t.y===a.y})),n.some((t=>t.x===a.x&&t.y===a.y))?Nt.warn("abc88 no intersect",a,n):n.push(a),i=!0}})),Nt.warn("abc88 returning points",n),n},Ws=(t,e,n,r)=>{Nt.info("Graph in recursive render: XXX",ut.c(e),r);const i=e.graph().rankdir;Nt.trace("Dir in recursive render - dir:",i);const a=t.insert("g").attr("class","root");e.nodes()?Nt.info("Recursive render XXX",e.nodes()):Nt.info("No nodes found for",e),e.edges().length>0&&Nt.trace("Recursive edges",e.edge(e.edges()[0]));const s=a.insert("g").attr("class","clusters"),c=a.insert("g").attr("class","edgePaths"),l=a.insert("g").attr("class","edgeLabels"),h=a.insert("g").attr("class","nodes");e.nodes().forEach((function(t){const a=e.node(t);if(void 0!==r){const n=JSON.parse(JSON.stringify(r.clusterData));Nt.info("Setting data for cluster XXX (",t,") ",n,r),e.setNode(r.id,n),e.parent(t)||(Nt.trace("Setting parent",t,r.id),e.setParent(t,r.id,n))}if(Nt.info("(Insert) Node XXX"+t+": "+JSON.stringify(e.node(t))),a&&a.clusterNode){Nt.info("Cluster identified",t,a.width,e.node(t));const r=Ws(h,a.graph,n,e.node(t)),i=r.elem;ps(a,i),a.diff=r.diff||0,Nt.info("Node bounds (abc123)",t,a,a.width,a.x,a.y),((t,e)=>{Is[e.id]=t})(i,a),Nt.warn("Recursive render complete ",i,a)}else e.children(t).length>0?(Nt.info("Cluster - the non recursive path XXX",t,a.id,a,e),Nt.info(vs(a.id,e)),gs[a.id]={id:vs(a.id,e),node:a}):(Nt.info("Node - the non recursive path",t,a.id,a),Fs(h,e.node(t),i))})),e.edges().forEach((function(t){const n=e.edge(t.v,t.w,t.name);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t)),Nt.info("Edge "+t.v+" -> "+t.w+": ",t," ",JSON.stringify(e.edge(t))),Nt.info("Fix",gs,"ids:",t.v,t.w,"Translateing: ",gs[t.v],gs[t.w]),Ys(l,n)})),e.edges().forEach((function(t){Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(t))})),Nt.info("#############################################"),Nt.info("###                Layout                 ###"),Nt.info("#############################################"),Nt.info(e),(0,lt.bK)(e),Nt.info("Graph after layout:",ut.c(e));let u=0;return(t=>Es(t,t.children()))(e).forEach((function(t){const n=e.node(t);Nt.info("Position "+t+": "+JSON.stringify(e.node(t))),Nt.info("Position "+t+": ("+n.x,","+n.y,") width: ",n.width," height: ",n.height),n&&n.clusterNode?$s(n):e.children(t).length>0?(((t,e)=>{Nt.trace("Inserting cluster");const n=e.shape||"rect";Zs[e.id]=Rs[n](t,e)})(s,n),gs[n.id].node=n):$s(n)})),e.edges().forEach((function(t){const r=e.edge(t);Nt.info("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(r),r);const i=function(t,e,n,r,i,a){let s=n.points,c=!1;const l=a.node(e.v);var h=a.node(e.w);Nt.info("abc88 InsertEdge: ",n),h.intersect&&l.intersect&&(s=s.slice(1,n.points.length-1),s.unshift(l.intersect(s[0])),Nt.info("Last point",s[s.length-1],h,h.intersect(s[s.length-1])),s.push(h.intersect(s[s.length-1]))),n.toCluster&&(Nt.info("to cluster abc88",r[n.toCluster]),s=Us(n.points,r[n.toCluster].node),c=!0),n.fromCluster&&(Nt.info("from cluster abc88",r[n.fromCluster]),s=Us(s.reverse(),r[n.fromCluster].node).reverse(),c=!0);const u=s.filter((t=>!Number.isNaN(t.y)));let d;d=("graph"===i||"flowchart"===i)&&n.curve||o.$0Z;const p=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(d);let f;switch(n.thickness){case"normal":f="edge-thickness-normal";break;case"thick":f="edge-thickness-thick";break;default:f=""}switch(n.pattern){case"solid":f+=" edge-pattern-solid";break;case"dotted":f+=" edge-pattern-dotted";break;case"dashed":f+=" edge-pattern-dashed"}const g=t.append("path").attr("d",p(u)).attr("id",n.id).attr("class"," "+f+(n.classes?" "+n.classes:"")).attr("style",n.style);let y="";switch((ar().flowchart.arrowMarkerAbsolute||ar().state.arrowMarkerAbsolute)&&(y=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,y=y.replace(/\(/g,"\\("),y=y.replace(/\)/g,"\\)")),Nt.info("arrowTypeStart",n.arrowTypeStart),Nt.info("arrowTypeEnd",n.arrowTypeEnd),n.arrowTypeStart){case"arrow_cross":g.attr("marker-start","url("+y+"#"+i+"-crossStart)");break;case"arrow_point":g.attr("marker-start","url("+y+"#"+i+"-pointStart)");break;case"arrow_barb":g.attr("marker-start","url("+y+"#"+i+"-barbStart)");break;case"arrow_circle":g.attr("marker-start","url("+y+"#"+i+"-circleStart)");break;case"aggregation":g.attr("marker-start","url("+y+"#"+i+"-aggregationStart)");break;case"extension":g.attr("marker-start","url("+y+"#"+i+"-extensionStart)");break;case"composition":g.attr("marker-start","url("+y+"#"+i+"-compositionStart)");break;case"dependency":g.attr("marker-start","url("+y+"#"+i+"-dependencyStart)");break;case"lollipop":g.attr("marker-start","url("+y+"#"+i+"-lollipopStart)")}switch(n.arrowTypeEnd){case"arrow_cross":g.attr("marker-end","url("+y+"#"+i+"-crossEnd)");break;case"arrow_point":g.attr("marker-end","url("+y+"#"+i+"-pointEnd)");break;case"arrow_barb":g.attr("marker-end","url("+y+"#"+i+"-barbEnd)");break;case"arrow_circle":g.attr("marker-end","url("+y+"#"+i+"-circleEnd)");break;case"aggregation":g.attr("marker-end","url("+y+"#"+i+"-aggregationEnd)");break;case"extension":g.attr("marker-end","url("+y+"#"+i+"-extensionEnd)");break;case"composition":g.attr("marker-end","url("+y+"#"+i+"-compositionEnd)");break;case"dependency":g.attr("marker-end","url("+y+"#"+i+"-dependencyEnd)");break;case"lollipop":g.attr("marker-end","url("+y+"#"+i+"-lollipopEnd)")}let m={};return c&&(m.updatedPath=s),m.originalPath=n.points,m}(c,t,r,gs,n,e);((t,e)=>{Nt.info("Moving label abc78 ",t.id,t.label,Ps[t.id]);let n=e.updatedPath?e.updatedPath:e.originalPath;if(t.label){const r=Ps[t.id];let i=t.x,a=t.y;if(n){const r=Gn.calcLabelPosition(n);Nt.info("Moving label "+t.label+" from (",i,",",a,") to (",r.x,",",r.y,") abc78"),e.updatedPath&&(i=r.x,a=r.y)}r.attr("transform","translate("+i+", "+a+")")}if(t.startLabelLeft){const e=js[t.id].startLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.startLabelRight){const e=js[t.id].startRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeStart?10:0,"start_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelLeft){const e=js[t.id].endLeft;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_left",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}if(t.endLabelRight){const e=js[t.id].endRight;let r=t.x,i=t.y;if(n){const e=Gn.calcTerminalLabelPosition(t.arrowTypeEnd?10:0,"end_right",n);r=e.x,i=e.y}e.attr("transform","translate("+r+", "+i+")")}})(r,i)})),e.nodes().forEach((function(t){const n=e.node(t);Nt.info(t,n.type,n.diff),"group"===n.type&&(u=n.diff)})),{elem:a,diff:u}},qs=(t,e,n,r,i)=>{hs(t,n,r,i),Is={},Ps={},js={},Zs={},ys={},ms={},gs={},Nt.warn("Graph at first:",ut.c(e)),((t,e)=>{!t||e>10?Nt.debug("Opting out, no graph "):(Nt.debug("Opting in, graph "),t.nodes().forEach((function(e){t.children(e).length>0&&(Nt.warn("Cluster identified",e," Replacement id in edges: ",vs(e,t)),ys[e]=xs(e,t),gs[e]={id:vs(e,t),clusterData:t.node(e)})})),t.nodes().forEach((function(e){const n=t.children(e),r=t.edges();n.length>0?(Nt.debug("Cluster identified",e,ys),r.forEach((t=>{t.v!==e&&t.w!==e&&bs(t.v,e)^bs(t.w,e)&&(Nt.warn("Edge: ",t," leaves cluster ",e),Nt.warn("Decendants of XXX ",e,": ",ys[e]),gs[e].externalConnections=!0)}))):Nt.debug("Not a cluster ",e,ys)})),t.edges().forEach((function(e){const n=t.edge(e);Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(e)),Nt.warn("Edge "+e.v+" -> "+e.w+": "+JSON.stringify(t.edge(e)));let r=e.v,i=e.w;if(Nt.warn("Fix XXX",gs,"ids:",e.v,e.w,"Translating: ",gs[e.v]," --- ",gs[e.w]),gs[e.v]&&gs[e.w]&&gs[e.v]===gs[e.w]){Nt.warn("Fixing and trixing link to self - removing XXX",e.v,e.w,e.name),Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name);const a=e.w+"---"+e.v;t.setNode(a,{domId:a,id:a,labelStyle:"",labelText:n.label,padding:0,shape:"labelRect",style:""});const s=JSON.parse(JSON.stringify(n)),o=JSON.parse(JSON.stringify(n));s.label="",s.arrowTypeEnd="none",o.label="",s.fromCluster=e.v,o.toCluster=e.v,t.setEdge(r,a,s,e.name+"-cyclic-special"),t.setEdge(a,i,o,e.name+"-cyclic-special")}else(gs[e.v]||gs[e.w])&&(Nt.warn("Fixing and trixing - removing XXX",e.v,e.w,e.name),r=ks(e.v),i=ks(e.w),t.removeEdge(e.v,e.w,e.name),r!==e.v&&(n.fromCluster=e.v),i!==e.w&&(n.toCluster=e.w),Nt.warn("Fix Replacing with XXX",r,i,e.name),t.setEdge(r,i,n,e.name))})),Nt.warn("Adjusted Graph",ut.c(t)),ws(t,0),Nt.trace(gs))})(e),Nt.warn("Graph after:",ut.c(e)),Ws(t,e,r)},Hs=t=>Yt.sanitizeText(t,ar());let Vs={dividerMargin:10,padding:5,textHeight:10};function Gs(t){let e;switch(t){case 0:e="aggregation";break;case 1:e="extension";break;case 2:e="composition";break;case 3:e="dependency";break;case 4:e="lollipop";break;default:e="none"}return e}const Xs={setConf:function(t){Object.keys(t).forEach((function(e){Vs[e]=t[e]}))},draw:function(t,e,n,r){Nt.info("Drawing class - ",e);const i=ar().flowchart,a=ar().securityLevel;Nt.info("config:",i);const s=i.nodeSpacing||50,c=i.rankSpacing||50,l=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:r.db.getDirection(),nodesep:s,ranksep:c,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}})),h=r.db.getClasses(),u=r.db.getRelations(),d=r.db.getNotes();let p;Nt.info(u),function(t,e,n,r){const i=Object.keys(t);Nt.info("keys:",i),Nt.info(t),i.forEach((function(n){const i=t[n];let a="";i.cssClasses.length>0&&(a=a+" "+i.cssClasses.join(" "));const s={labelStyle:""};let o=void 0!==i.text?i.text:i.id,c="";i.type,c="class_box",e.setNode(i.id,{labelStyle:s.labelStyle,shape:c,labelText:Hs(o),classData:i,rx:0,ry:0,class:a,style:s.style,id:i.id,domId:i.domId,tooltip:r.db.getTooltip(i.id)||"",haveCallback:i.haveCallback,link:i.link,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s.labelStyle,shape:c,labelText:o,rx:0,ry:0,class:a,style:s.style,id:i.id,width:"group"===i.type?500:void 0,type:i.type,padding:ar().flowchart.padding})}))}(h,l,0,r),function(t,e){const n=ar().flowchart;let r=0;t.forEach((function(i){r++;const a={classes:"relation"};a.pattern=1==i.relation.lineType?"dashed":"solid",a.id="id"+r,"arrow_open"===i.type?a.arrowhead="none":a.arrowhead="normal",Nt.info(a,i),a.startLabelRight="none"===i.relationTitle1?"":i.relationTitle1,a.endLabelLeft="none"===i.relationTitle2?"":i.relationTitle2,a.arrowTypeStart=Gs(i.relation.type1),a.arrowTypeEnd=Gs(i.relation.type2);let s="",c="";if(void 0!==i.style){const t=Mn(i.style);s=t.style,c=t.labelStyle}else s="fill:none";a.style=s,a.labelStyle=c,void 0!==i.interpolate?a.curve=Dn(i.interpolate,o.c_6):void 0!==t.defaultInterpolate?a.curve=Dn(t.defaultInterpolate,o.c_6):a.curve=Dn(n.curve,o.c_6),i.text=i.title,void 0===i.text?void 0!==i.style&&(a.arrowheadStyle="fill: #333"):(a.arrowheadStyle="fill: #333",a.labelpos="c",ar().flowchart.htmlLabels?(a.labelType="html",a.label='<span class="edgeLabel">'+i.text+"</span>"):(a.labelType="text",a.label=i.text.replace(Yt.lineBreakRegex,"\n"),void 0===i.style&&(a.style=a.style||"stroke: #333; stroke-width: 1.5px;fill:none"),a.labelStyle=a.labelStyle.replace("color:","fill:"))),e.setEdge(i.id1,i.id2,a,r)}))}(u,l),function(t,e,n,r){Nt.info(t),t.forEach((function(t,i){const a=t,s="",c="";let l=a.text,h="note";if(e.setNode(a.id,{labelStyle:s,shape:h,labelText:Hs(l),noteData:a,rx:0,ry:0,class:"",style:c,id:a.id,domId:a.id,tooltip:"",type:"note",padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:s,shape:h,labelText:l,rx:0,ry:0,style:c,id:a.id,type:"note",padding:ar().flowchart.padding}),!a.class||!(a.class in r))return;const u=n+i,d={classes:"relation",pattern:"dotted"};d.id=`edgeNote${u}`,d.arrowhead="none",Nt.info(`Note edge: ${JSON.stringify(d)}, ${JSON.stringify(a)}`),d.startLabelRight="",d.endLabelLeft="",d.arrowTypeStart="none",d.arrowTypeEnd="none",d.style="fill:none",d.labelStyle="",d.curve=Dn(Vs.curve,o.c_6),e.setEdge(a.id,a.class,d,u)}))}(d,l,u.length+1,h),"sandbox"===a&&(p=(0,o.Ys)("#i"+e));const f="sandbox"===a?(0,o.Ys)(p.nodes()[0].contentDocument.body):(0,o.Ys)("body"),g=f.select(`[id="${e}"]`),y=f.select("#"+e+" g");if(qs(y,l,["aggregation","extension","composition","dependency","lollipop"],"classDiagram",e),Gn.insertTitle(g,"classTitleText",i.titleTopMargin,r.db.getDiagramTitle()),pr(l,g,i.diagramPadding,i.useMaxWidth),!i.htmlLabels){const t="sandbox"===a?p.nodes()[0].contentDocument:document,n=t.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of n){const n=e.getBBox(),r=t.createElementNS("http://www.w3.org/2000/svg","rect");r.setAttribute("rx",0),r.setAttribute("ry",0),r.setAttribute("width",n.width),r.setAttribute("height",n.height),e.insertBefore(r,e.firstChild)}}}};var Ks=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,23,25,27,29,30,31,51],a=[1,17],s=[1,18],o=[1,19],c=[1,20],l=[1,21],h=[1,22],u=[1,25],d=[1,30],p=[1,31],f=[1,32],g=[1,33],y=[6,9,11,15,20,23,25,27,29,30,31,44,45,46,47,51],m=[1,45],b=[30,31,48,49],_=[4,6,9,11,23,25,27,29,30,31,51],x=[44,45,46,47],v=[22,37],k=[1,65],w=[1,64],E=[22,37,39,41],C={trace:function(){},yy:{},symbols_:{error:2,start:3,ER_DIAGRAM:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,entityName:17,relSpec:18,role:19,BLOCK_START:20,attributes:21,BLOCK_STOP:22,title:23,title_value:24,acc_title:25,acc_title_value:26,acc_descr:27,acc_descr_value:28,acc_descr_multiline_value:29,ALPHANUM:30,ENTITY_NAME:31,attribute:32,attributeType:33,attributeName:34,attributeKeyTypeList:35,attributeComment:36,ATTRIBUTE_WORD:37,attributeKeyType:38,COMMA:39,ATTRIBUTE_KEY:40,COMMENT:41,cardinality:42,relType:43,ZERO_OR_ONE:44,ZERO_OR_MORE:45,ONE_OR_MORE:46,ONLY_ONE:47,NON_IDENTIFYING:48,IDENTIFYING:49,WORD:50,open_directive:51,type_directive:52,arg_directive:53,close_directive:54,$accept:0,$end:1},terminals_:{2:"error",4:"ER_DIAGRAM",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",20:"BLOCK_START",22:"BLOCK_STOP",23:"title",24:"title_value",25:"acc_title",26:"acc_title_value",27:"acc_descr",28:"acc_descr_value",29:"acc_descr_multiline_value",30:"ALPHANUM",31:"ENTITY_NAME",37:"ATTRIBUTE_WORD",39:"COMMA",40:"ATTRIBUTE_KEY",41:"COMMENT",44:"ZERO_OR_ONE",45:"ZERO_OR_MORE",46:"ONE_OR_MORE",47:"ONLY_ONE",48:"NON_IDENTIFYING",49:"IDENTIFYING",50:"WORD",51:"open_directive",52:"type_directive",53:"arg_directive",54:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,5],[10,4],[10,3],[10,1],[10,2],[10,2],[10,2],[10,1],[17,1],[17,1],[21,1],[21,2],[32,2],[32,3],[32,3],[32,4],[33,1],[34,1],[35,1],[35,3],[38,1],[36,1],[18,3],[42,1],[42,1],[42,1],[42,1],[43,1],[43,1],[19,1],[19,1],[19,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:break;case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:case 20:case 43:case 28:case 29:case 32:this.$=a[o];break;case 12:r.addEntity(a[o-4]),r.addEntity(a[o-2]),r.addRelationship(a[o-4],a[o],a[o-2],a[o-3]);break;case 13:r.addEntity(a[o-3]),r.addAttributes(a[o-3],a[o-1]);break;case 14:r.addEntity(a[o-2]);break;case 15:r.addEntity(a[o]);break;case 16:case 17:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 18:case 19:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:case 41:case 42:case 33:this.$=a[o].replace(/"/g,"");break;case 22:case 30:this.$=[a[o]];break;case 23:a[o].push(a[o-1]),this.$=a[o];break;case 24:this.$={attributeType:a[o-1],attributeName:a[o]};break;case 25:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeKeyTypeList:a[o]};break;case 26:this.$={attributeType:a[o-2],attributeName:a[o-1],attributeComment:a[o]};break;case 27:this.$={attributeType:a[o-3],attributeName:a[o-2],attributeKeyTypeList:a[o-1],attributeComment:a[o]};break;case 31:a[o-2].push(a[o]),this.$=a[o-2];break;case 34:this.$={cardA:a[o],relType:a[o-1],cardB:a[o-2]};break;case 35:this.$=r.Cardinality.ZERO_OR_ONE;break;case 36:this.$=r.Cardinality.ZERO_OR_MORE;break;case 37:this.$=r.Cardinality.ONE_OR_MORE;break;case 38:this.$=r.Cardinality.ONLY_ONE;break;case 39:this.$=r.Identification.NON_IDENTIFYING;break;case 40:this.$=r.Identification.IDENTIFYING;break;case 44:r.parseDirective("%%{","open_directive");break;case 45:r.parseDirective(a[o],"type_directive");break;case 46:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 47:r.parseDirective("}%%","close_directive","er")}},table:[{3:1,4:n,7:3,12:4,51:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,51:r},{13:8,52:[1,9]},{52:[2,44]},{6:[1,10],7:15,8:11,9:[1,12],10:13,11:[1,14],12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},{1:[2,2]},{14:23,15:[1,24],54:u},e([15,54],[2,45]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:15,10:26,12:4,17:16,23:a,25:s,27:o,29:c,30:l,31:h,51:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),e(i,[2,15],{18:27,42:29,20:[1,28],44:d,45:p,46:f,47:g}),{24:[1,34]},{26:[1,35]},{28:[1,36]},e(i,[2,19]),e(y,[2,20]),e(y,[2,21]),{11:[1,37]},{16:38,53:[1,39]},{11:[2,47]},e(i,[2,5]),{17:40,30:l,31:h},{21:41,22:[1,42],32:43,33:44,37:m},{43:46,48:[1,47],49:[1,48]},e(b,[2,35]),e(b,[2,36]),e(b,[2,37]),e(b,[2,38]),e(i,[2,16]),e(i,[2,17]),e(i,[2,18]),e(_,[2,9]),{14:49,54:u},{54:[2,46]},{15:[1,50]},{22:[1,51]},e(i,[2,14]),{21:52,22:[2,22],32:43,33:44,37:m},{34:53,37:[1,54]},{37:[2,28]},{42:55,44:d,45:p,46:f,47:g},e(x,[2,39]),e(x,[2,40]),{11:[1,56]},{19:57,30:[1,60],31:[1,59],50:[1,58]},e(i,[2,13]),{22:[2,23]},e(v,[2,24],{35:61,36:62,38:63,40:k,41:w}),e([22,37,40,41],[2,29]),e([30,31],[2,34]),e(_,[2,10]),e(i,[2,12]),e(i,[2,41]),e(i,[2,42]),e(i,[2,43]),e(v,[2,25],{36:66,39:[1,67],41:w}),e(v,[2,26]),e(E,[2,30]),e(v,[2,33]),e(E,[2,32]),e(v,[2,27]),{38:68,40:k},e(E,[2,31])],defaultActions:{5:[2,44],7:[2,2],25:[2,47],39:[2,46],45:[2,28],52:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},T=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("acc_title"),25;case 1:return this.popState(),"acc_title_value";case 2:return this.begin("acc_descr"),27;case 3:return this.popState(),"acc_descr_value";case 4:this.begin("acc_descr_multiline");break;case 5:this.popState();break;case 6:return"acc_descr_multiline_value";case 7:return this.begin("open_directive"),51;case 8:return this.begin("type_directive"),52;case 9:return this.popState(),this.begin("arg_directive"),15;case 10:return this.popState(),this.popState(),54;case 11:return 53;case 12:case 13:case 15:case 22:case 27:break;case 14:return 11;case 16:return 9;case 17:return 31;case 18:return 50;case 19:return 4;case 20:return this.begin("block"),20;case 21:return 39;case 23:return 40;case 24:case 25:return 37;case 26:return 41;case 28:return this.popState(),22;case 29:case 58:return e.yytext[0];case 30:case 34:case 35:case 48:return 44;case 31:case 32:case 33:case 41:case 43:case 50:return 46;case 36:case 37:case 38:case 39:case 40:case 42:case 49:return 45;case 44:case 45:case 46:case 47:return 47;case 51:case 54:case 55:case 56:return 48;case 52:case 53:return 49;case 57:return 30;case 59:return 6}},rules:[/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:[\s]+)/i,/^(?:"[^"%\r\n\v\b\\]+")/i,/^(?:"[^"]*")/i,/^(?:erDiagram\b)/i,/^(?:\{)/i,/^(?:,)/i,/^(?:\s+)/i,/^(?:\b((?:PK)|(?:FK)|(?:UK))\b)/i,/^(?:(.*?)[~](.*?)*[~])/i,/^(?:[A-Za-z_][A-Za-z0-9\-_\[\]\(\)]*)/i,/^(?:"[^"]*")/i,/^(?:[\n]+)/i,/^(?:\})/i,/^(?:.)/i,/^(?:one or zero\b)/i,/^(?:one or more\b)/i,/^(?:one or many\b)/i,/^(?:1\+)/i,/^(?:\|o\b)/i,/^(?:zero or one\b)/i,/^(?:zero or more\b)/i,/^(?:zero or many\b)/i,/^(?:0\+)/i,/^(?:\}o\b)/i,/^(?:many\(0\))/i,/^(?:many\(1\))/i,/^(?:many\b)/i,/^(?:\}\|)/i,/^(?:one\b)/i,/^(?:only one\b)/i,/^(?:1\b)/i,/^(?:\|\|)/i,/^(?:o\|)/i,/^(?:o\{)/i,/^(?:\|\{)/i,/^(?:\.\.)/i,/^(?:--)/i,/^(?:to\b)/i,/^(?:optionally to\b)/i,/^(?:\.-)/i,/^(?:-\.)/i,/^(?:[A-Za-z][A-Za-z0-9\-_]*)/i,/^(?:.)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[5,6],inclusive:!1},acc_descr:{rules:[3],inclusive:!1},acc_title:{rules:[1],inclusive:!1},open_directive:{rules:[8],inclusive:!1},type_directive:{rules:[9,10],inclusive:!1},arg_directive:{rules:[10,11],inclusive:!1},block:{rules:[21,22,23,24,25,26,27,28,29],inclusive:!1},INITIAL:{rules:[0,2,4,7,12,13,14,15,16,17,18,19,20,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59],inclusive:!0}}},t);function S(){this.yy={}}return C.lexer=T,S.prototype=C,C.Parser=S,new S}();Ks.parser=Ks;const Qs=Ks,Js=t=>null!==t.match(/^\s*erDiagram/);let to={},eo=[];const no=function(t){return void 0===to[t]&&(to[t]={attributes:[]},Nt.info("Added new entity :",t)),to[t]},ro={Cardinality:{ZERO_OR_ONE:"ZERO_OR_ONE",ZERO_OR_MORE:"ZERO_OR_MORE",ONE_OR_MORE:"ONE_OR_MORE",ONLY_ONE:"ONLY_ONE"},Identification:{NON_IDENTIFYING:"NON_IDENTIFYING",IDENTIFYING:"IDENTIFYING"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().er,addEntity:no,addAttributes:function(t,e){let n,r=no(t);for(n=e.length-1;n>=0;n--)r.attributes.push(e[n]),Nt.debug("Added attribute ",e[n].attributeName)},getEntities:()=>to,addRelationship:function(t,e,n,r){let i={entityA:t,roleA:e,entityB:n,relSpec:r};eo.push(i),Nt.debug("Added new relationship :",i)},getRelationships:()=>eo,clear:function(){to={},eo=[],Dr()},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,setDiagramTitle:$r,getDiagramTitle:Rr},io={ONLY_ONE_START:"ONLY_ONE_START",ONLY_ONE_END:"ONLY_ONE_END",ZERO_OR_ONE_START:"ZERO_OR_ONE_START",ZERO_OR_ONE_END:"ZERO_OR_ONE_END",ONE_OR_MORE_START:"ONE_OR_MORE_START",ONE_OR_MORE_END:"ONE_OR_MORE_END",ZERO_OR_MORE_START:"ZERO_OR_MORE_START",ZERO_OR_MORE_END:"ZERO_OR_MORE_END"},ao=io,so=function(t,e){let n;t.append("defs").append("marker").attr("id",io.ONLY_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18 M15,0 L15,18"),t.append("defs").append("marker").attr("id",io.ONLY_ONE_END).attr("refX",18).attr("refY",9).attr("markerWidth",18).attr("markerHeight",18).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,0 L3,18 M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_START).attr("refX",0).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",21).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M9,0 L9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_ONE_END).attr("refX",30).attr("refY",9).attr("markerWidth",30).attr("markerHeight",18).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",9).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,0 L21,18"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q 18,0 36,18 Q 18,36 0,18 M42,9 L42,27"),t.append("defs").append("marker").attr("id",io.ONE_OR_MORE_END).attr("refX",27).attr("refY",18).attr("markerWidth",45).attr("markerHeight",36).attr("orient","auto").append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M3,9 L3,27 M9,18 Q27,0 45,18 Q27,36 9,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_START).attr("refX",18).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",48).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M0,18 Q18,0 36,18 Q18,36 0,18"),n=t.append("defs").append("marker").attr("id",io.ZERO_OR_MORE_END).attr("refX",39).attr("refY",18).attr("markerWidth",57).attr("markerHeight",36).attr("orient","auto"),n.append("circle").attr("stroke",e.stroke).attr("fill","white").attr("cx",9).attr("cy",18).attr("r",6),n.append("path").attr("stroke",e.stroke).attr("fill","none").attr("d","M21,18 Q39,0 57,18 Q39,36 21,18")},oo=/[^\dA-Za-z](\W)*/g;let co={},lo=new Map;const ho=function(t,e,n){let r;return Object.keys(e).forEach((function(i){const a=function(t="",e=""){const n=t.replace(oo,"");return`${go(e)}${go(n)}${vt(t,fo)}`}(i,"entity");lo.set(i,a);const s=t.append("g").attr("id",a);r=void 0===r?a:r;const o="text-"+a,c=s.append("text").classed("er entityLabel",!0).attr("id",o).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(i),{width:l,height:h}=((t,e,n)=>{const r=co.entityPadding/3,i=co.entityPadding/3,a=.85*co.fontSize,s=e.node().getBBox(),o=[];let c=!1,l=!1,h=0,u=0,d=0,p=0,f=s.height+2*r,g=1;n.forEach((t=>{void 0!==t.attributeKeyTypeList&&t.attributeKeyTypeList.length>0&&(c=!0),void 0!==t.attributeComment&&(l=!0)})),n.forEach((n=>{const i=`${e.node().id}-attr-${g}`;let s=0;const y=jt(n.attributeType),m=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-type`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(y),b=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-name`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeName),_={};_.tn=m,_.nn=b;const x=m.node().getBBox(),v=b.node().getBBox();if(h=Math.max(h,x.width),u=Math.max(u,v.width),s=Math.max(x.height,v.height),c){const e=void 0!==n.attributeKeyTypeList?n.attributeKeyTypeList.join(","):"",r=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-key`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(e);_.kn=r;const o=r.node().getBBox();d=Math.max(d,o.width),s=Math.max(s,o.height)}if(l){const e=t.append("text").classed("er entityLabel",!0).attr("id",`${i}-comment`).attr("x",0).attr("y",0).style("dominant-baseline","middle").style("text-anchor","left").style("font-family",ar().fontFamily).style("font-size",a+"px").text(n.attributeComment||"");_.cn=e;const r=e.node().getBBox();p=Math.max(p,r.width),s=Math.max(s,r.height)}_.height=s,o.push(_),f+=s+2*r,g+=1}));let y=4;c&&(y+=2),l&&(y+=2);const m=h+u+d+p,b={width:Math.max(co.minEntityWidth,Math.max(s.width+2*co.entityPadding,m+i*y)),height:n.length>0?f:Math.max(co.minEntityHeight,s.height+2*co.entityPadding)};if(n.length>0){const n=Math.max(0,(b.width-m-i*y)/(y/2));e.attr("transform","translate("+b.width/2+","+(r+s.height/2)+")");let a=s.height+2*r,f="attributeBoxOdd";o.forEach((e=>{const s=a+r+e.height/2;e.tn.attr("transform","translate("+i+","+s+")");const o=t.insert("rect","#"+e.tn.node().id).classed(`er ${f}`,!0).attr("x",0).attr("y",a).attr("width",h+2*i+n).attr("height",e.height+2*r),g=parseFloat(o.attr("x"))+parseFloat(o.attr("width"));e.nn.attr("transform","translate("+(g+i)+","+s+")");const y=t.insert("rect","#"+e.nn.node().id).classed(`er ${f}`,!0).attr("x",g).attr("y",a).attr("width",u+2*i+n).attr("height",e.height+2*r);let m=parseFloat(y.attr("x"))+parseFloat(y.attr("width"));if(c){e.kn.attr("transform","translate("+(m+i)+","+s+")");const o=t.insert("rect","#"+e.kn.node().id).classed(`er ${f}`,!0).attr("x",m).attr("y",a).attr("width",d+2*i+n).attr("height",e.height+2*r);m=parseFloat(o.attr("x"))+parseFloat(o.attr("width"))}l&&(e.cn.attr("transform","translate("+(m+i)+","+s+")"),t.insert("rect","#"+e.cn.node().id).classed(`er ${f}`,"true").attr("x",m).attr("y",a).attr("width",p+2*i+n).attr("height",e.height+2*r)),a+=e.height+2*r,f="attributeBoxOdd"===f?"attributeBoxEven":"attributeBoxOdd"}))}else b.height=Math.max(co.minEntityHeight,f),e.attr("transform","translate("+b.width/2+","+b.height/2+")");return b})(s,c,e[i].attributes),u=s.insert("rect","#"+o).classed("er entityBox",!0).attr("x",0).attr("y",0).attr("width",l).attr("height",h).node().getBBox();n.setNode(a,{width:u.width,height:u.height,shape:"rect",id:a})})),r},uo=function(t){return(t.entityA+t.roleA+t.entityB).replace(/\s/g,"")};let po=0;const fo="28e9f9db-3c8d-5aa5-9faf-44286ae5937c";function go(t=""){return t.length>0?`${t}-`:""}const yo={setConf:function(t){const e=Object.keys(t);for(const n of e)co[n]=t[n]},draw:function(t,e,n,r){co=ar().er,Nt.info("Drawing ER diagram");const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);let c;so(s,co),c=new ht.k({multigraph:!0,directed:!0,compound:!1}).setGraph({rankdir:co.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));const l=ho(s,r.db.getEntities(),c),h=function(t,e){return t.forEach((function(t){e.setEdge(lo.get(t.entityA),lo.get(t.entityB),{relationship:t},uo(t))})),t}(r.db.getRelationships(),c);var u,d;(0,lt.bK)(c),u=s,(d=c).nodes().forEach((function(t){void 0!==t&&void 0!==d.node(t)&&u.select("#"+t).attr("transform","translate("+(d.node(t).x-d.node(t).width/2)+","+(d.node(t).y-d.node(t).height/2)+" )")})),h.forEach((function(t){!function(t,e,n,r,i){po++;const a=n.edge(lo.get(e.entityA),lo.get(e.entityB),uo(e)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),c=t.insert("path","#"+r).classed("er relationshipLine",!0).attr("d",s(a.points)).style("stroke",co.stroke).style("fill","none");e.relSpec.relType===i.db.Identification.NON_IDENTIFYING&&c.attr("stroke-dasharray","8,8");let l="";switch(co.arrowMarkerAbsolute&&(l=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,l=l.replace(/\(/g,"\\("),l=l.replace(/\)/g,"\\)")),e.relSpec.cardA){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_ONE_END+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ZERO_OR_MORE_END+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-end","url("+l+"#"+ao.ONE_OR_MORE_END+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-end","url("+l+"#"+ao.ONLY_ONE_END+")")}switch(e.relSpec.cardB){case i.db.Cardinality.ZERO_OR_ONE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_ONE_START+")");break;case i.db.Cardinality.ZERO_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ZERO_OR_MORE_START+")");break;case i.db.Cardinality.ONE_OR_MORE:c.attr("marker-start","url("+l+"#"+ao.ONE_OR_MORE_START+")");break;case i.db.Cardinality.ONLY_ONE:c.attr("marker-start","url("+l+"#"+ao.ONLY_ONE_START+")")}const h=c.node().getTotalLength(),u=c.node().getPointAtLength(.5*h),d="rel"+po,p=t.append("text").classed("er relationshipLabel",!0).attr("id",d).attr("x",u.x).attr("y",u.y).style("text-anchor","middle").style("dominant-baseline","middle").style("font-family",ar().fontFamily).style("font-size",co.fontSize+"px").text(e.roleA).node().getBBox();t.insert("rect","#"+d).classed("er relationshipLabelBox",!0).attr("x",u.x-p.width/2).attr("y",u.y-p.height/2).attr("width",p.width).attr("height",p.height)}(s,t,c,l,r)}));const p=co.diagramPadding;Gn.insertTitle(s,"entityTitleText",co.titleTopMargin,r.db.getDiagramTitle());const f=s.node().getBBox(),g=f.width+2*p,y=f.height+2*p;dr(s,y,g,co.useMaxWidth),s.attr("viewBox",`${f.x-p} ${f.y-p} ${g} ${y}`)}};var mo=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,9],r=[1,7],i=[1,6],a=[1,8],s=[1,20,21,22,23,38,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],o=[2,10],c=[1,20],l=[1,21],h=[1,22],u=[1,23],d=[1,30],p=[1,32],f=[1,33],g=[1,34],y=[1,62],m=[1,48],b=[1,52],_=[1,36],x=[1,37],v=[1,38],k=[1,39],w=[1,40],E=[1,56],C=[1,63],T=[1,51],S=[1,53],A=[1,55],L=[1,59],B=[1,60],N=[1,41],D=[1,42],O=[1,43],M=[1,44],I=[1,61],F=[1,50],$=[1,54],R=[1,57],Z=[1,58],P=[1,49],j=[1,66],Y=[1,71],z=[1,20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],U=[1,75],W=[1,74],q=[1,76],H=[20,21,23,81,82],V=[1,99],G=[1,104],X=[1,107],K=[1,108],Q=[1,101],J=[1,106],tt=[1,109],et=[1,102],nt=[1,114],rt=[1,113],it=[1,103],at=[1,105],st=[1,110],ot=[1,111],ct=[1,112],lt=[1,115],ht=[20,21,22,23,81,82],ut=[20,21,22,23,53,81,82],dt=[20,21,22,23,40,52,53,55,57,59,61,63,65,66,67,69,71,73,74,76,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],pt=[20,21,23],ft=[20,21,23,52,66,67,81,82,91,95,105,106,109,111,112,122,123,124,125,126,127],gt=[1,12,20,21,22,23,24,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],yt=[52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],mt=[1,149],bt=[1,157],_t=[1,158],xt=[1,159],vt=[1,160],kt=[1,144],wt=[1,145],Et=[1,141],Ct=[1,152],Tt=[1,153],St=[1,154],At=[1,155],Lt=[1,156],Bt=[1,161],Nt=[1,162],Dt=[1,147],Ot=[1,150],Mt=[1,146],It=[1,143],Ft=[20,21,22,23,38,42,44,46,48,52,66,67,86,87,88,89,90,91,95,105,106,109,111,112,118,119,120,121,122,123,124,125,126,127],$t=[1,165],Rt=[20,21,22,23,26,52,66,67,91,105,106,109,111,112,122,123,124,125,126,127],Zt=[20,21,22,23,24,26,38,40,41,42,52,56,58,60,62,64,66,67,68,70,72,73,75,77,81,82,86,87,88,89,90,91,92,95,105,106,109,111,112,113,114,122,123,124,125,126,127],Pt=[12,21,22,24],jt=[22,106],Yt=[1,250],zt=[1,245],Ut=[1,246],Wt=[1,254],qt=[1,251],Ht=[1,248],Vt=[1,247],Gt=[1,249],Xt=[1,252],Kt=[1,253],Qt=[1,255],Jt=[1,273],te=[20,21,23,106],ee=[20,21,22,23,66,67,86,102,105,106,109,110,111,112,113],ne={trace:function(){},yy:{},symbols_:{error:2,start:3,mermaidDoc:4,directive:5,openDirective:6,typeDirective:7,closeDirective:8,separator:9,":":10,argDirective:11,open_directive:12,type_directive:13,arg_directive:14,close_directive:15,graphConfig:16,document:17,line:18,statement:19,SEMI:20,NEWLINE:21,SPACE:22,EOF:23,GRAPH:24,NODIR:25,DIR:26,FirstStmtSeperator:27,ending:28,endToken:29,spaceList:30,spaceListNewline:31,verticeStatement:32,styleStatement:33,linkStyleStatement:34,classDefStatement:35,classStatement:36,clickStatement:37,subgraph:38,text:39,SQS:40,SQE:41,end:42,direction:43,acc_title:44,acc_title_value:45,acc_descr:46,acc_descr_value:47,acc_descr_multiline_value:48,link:49,node:50,vertex:51,AMP:52,STYLE_SEPARATOR:53,idString:54,DOUBLECIRCLESTART:55,DOUBLECIRCLEEND:56,PS:57,PE:58,"(-":59,"-)":60,STADIUMSTART:61,STADIUMEND:62,SUBROUTINESTART:63,SUBROUTINEEND:64,VERTEX_WITH_PROPS_START:65,ALPHA:66,COLON:67,PIPE:68,CYLINDERSTART:69,CYLINDEREND:70,DIAMOND_START:71,DIAMOND_STOP:72,TAGEND:73,TRAPSTART:74,TRAPEND:75,INVTRAPSTART:76,INVTRAPEND:77,linkStatement:78,arrowText:79,TESTSTR:80,START_LINK:81,LINK:82,textToken:83,STR:84,keywords:85,STYLE:86,LINKSTYLE:87,CLASSDEF:88,CLASS:89,CLICK:90,DOWN:91,UP:92,textNoTags:93,textNoTagsToken:94,DEFAULT:95,stylesOpt:96,alphaNum:97,CALLBACKNAME:98,CALLBACKARGS:99,HREF:100,LINK_TARGET:101,HEX:102,numList:103,INTERPOLATE:104,NUM:105,COMMA:106,style:107,styleComponent:108,MINUS:109,UNIT:110,BRKT:111,DOT:112,PCT:113,TAGSTART:114,alphaNumToken:115,idStringToken:116,alphaNumStatement:117,direction_tb:118,direction_bt:119,direction_rl:120,direction_lr:121,PUNCTUATION:122,UNICODE_TEXT:123,PLUS:124,EQUALS:125,MULT:126,UNDERSCORE:127,graphCodeTokens:128,ARROW_CROSS:129,ARROW_POINT:130,ARROW_CIRCLE:131,ARROW_OPEN:132,QUOTE:133,$accept:0,$end:1},terminals_:{2:"error",10:":",12:"open_directive",13:"type_directive",14:"arg_directive",15:"close_directive",20:"SEMI",21:"NEWLINE",22:"SPACE",23:"EOF",24:"GRAPH",25:"NODIR",26:"DIR",38:"subgraph",40:"SQS",41:"SQE",42:"end",44:"acc_title",45:"acc_title_value",46:"acc_descr",47:"acc_descr_value",48:"acc_descr_multiline_value",52:"AMP",53:"STYLE_SEPARATOR",55:"DOUBLECIRCLESTART",56:"DOUBLECIRCLEEND",57:"PS",58:"PE",59:"(-",60:"-)",61:"STADIUMSTART",62:"STADIUMEND",63:"SUBROUTINESTART",64:"SUBROUTINEEND",65:"VERTEX_WITH_PROPS_START",66:"ALPHA",67:"COLON",68:"PIPE",69:"CYLINDERSTART",70:"CYLINDEREND",71:"DIAMOND_START",72:"DIAMOND_STOP",73:"TAGEND",74:"TRAPSTART",75:"TRAPEND",76:"INVTRAPSTART",77:"INVTRAPEND",80:"TESTSTR",81:"START_LINK",82:"LINK",84:"STR",86:"STYLE",87:"LINKSTYLE",88:"CLASSDEF",89:"CLASS",90:"CLICK",91:"DOWN",92:"UP",95:"DEFAULT",98:"CALLBACKNAME",99:"CALLBACKARGS",100:"HREF",101:"LINK_TARGET",102:"HEX",104:"INTERPOLATE",105:"NUM",106:"COMMA",109:"MINUS",110:"UNIT",111:"BRKT",112:"DOT",113:"PCT",114:"TAGSTART",118:"direction_tb",119:"direction_bt",120:"direction_rl",121:"direction_lr",122:"PUNCTUATION",123:"UNICODE_TEXT",124:"PLUS",125:"EQUALS",126:"MULT",127:"UNDERSCORE",129:"ARROW_CROSS",130:"ARROW_POINT",131:"ARROW_CIRCLE",132:"ARROW_OPEN",133:"QUOTE"},productions_:[0,[3,1],[3,2],[5,4],[5,6],[6,1],[7,1],[11,1],[8,1],[4,2],[17,0],[17,2],[18,1],[18,1],[18,1],[18,1],[18,1],[16,2],[16,2],[16,2],[16,3],[28,2],[28,1],[29,1],[29,1],[29,1],[27,1],[27,1],[27,2],[31,2],[31,2],[31,1],[31,1],[30,2],[30,1],[19,2],[19,2],[19,2],[19,2],[19,2],[19,2],[19,9],[19,6],[19,4],[19,1],[19,2],[19,2],[19,1],[9,1],[9,1],[9,1],[32,3],[32,4],[32,2],[32,1],[50,1],[50,5],[50,3],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,8],[51,4],[51,4],[51,4],[51,6],[51,4],[51,4],[51,4],[51,4],[51,4],[51,1],[49,2],[49,3],[49,3],[49,1],[49,3],[78,1],[79,3],[39,1],[39,2],[39,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[85,1],[93,1],[93,2],[35,5],[35,5],[36,5],[37,2],[37,4],[37,3],[37,5],[37,2],[37,4],[37,4],[37,6],[37,2],[37,4],[37,2],[37,4],[37,4],[37,6],[33,5],[33,5],[34,5],[34,5],[34,9],[34,9],[34,7],[34,7],[103,1],[103,3],[96,1],[96,3],[107,1],[107,2],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[108,1],[83,1],[83,1],[83,1],[83,1],[83,1],[83,1],[94,1],[94,1],[94,1],[94,1],[54,1],[54,2],[97,1],[97,2],[117,1],[117,1],[117,1],[117,1],[43,1],[43,1],[43,1],[43,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[115,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[116,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1],[128,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 5:r.parseDirective("%%{","open_directive");break;case 6:r.parseDirective(a[o],"type_directive");break;case 7:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 8:r.parseDirective("}%%","close_directive","flowchart");break;case 10:case 36:case 37:case 38:case 39:case 40:this.$=[];break;case 11:(!Array.isArray(a[o])||a[o].length>0)&&a[o-1].push(a[o]),this.$=a[o-1];break;case 12:case 82:case 84:case 96:case 152:case 154:case 155:case 78:case 150:this.$=a[o];break;case 19:r.setDirection("TB"),this.$="TB";break;case 20:r.setDirection(a[o-1]),this.$=a[o-1];break;case 35:this.$=a[o-1].nodes;break;case 41:this.$=r.addSubGraph(a[o-6],a[o-1],a[o-4]);break;case 42:this.$=r.addSubGraph(a[o-3],a[o-1],a[o-3]);break;case 43:this.$=r.addSubGraph(void 0,a[o-1],void 0);break;case 45:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 46:case 47:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 51:r.addLink(a[o-2].stmt,a[o],a[o-1]),this.$={stmt:a[o],nodes:a[o].concat(a[o-2].nodes)};break;case 52:r.addLink(a[o-3].stmt,a[o-1],a[o-2]),this.$={stmt:a[o-1],nodes:a[o-1].concat(a[o-3].nodes)};break;case 53:this.$={stmt:a[o-1],nodes:a[o-1]};break;case 54:this.$={stmt:a[o],nodes:a[o]};break;case 55:case 123:case 125:this.$=[a[o]];break;case 56:this.$=a[o-4].concat(a[o]);break;case 57:this.$=[a[o-2]],r.setClass(a[o-2],a[o]);break;case 58:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"square");break;case 59:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"doublecircle");break;case 60:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"circle");break;case 61:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"ellipse");break;case 62:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"stadium");break;case 63:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"subroutine");break;case 64:this.$=a[o-7],r.addVertex(a[o-7],a[o-1],"rect",void 0,void 0,void 0,Object.fromEntries([[a[o-5],a[o-3]]]));break;case 65:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"cylinder");break;case 66:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"round");break;case 67:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"diamond");break;case 68:this.$=a[o-5],r.addVertex(a[o-5],a[o-2],"hexagon");break;case 69:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"odd");break;case 70:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"trapezoid");break;case 71:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"inv_trapezoid");break;case 72:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_right");break;case 73:this.$=a[o-3],r.addVertex(a[o-3],a[o-1],"lean_left");break;case 74:this.$=a[o],r.addVertex(a[o]);break;case 75:a[o-1].text=a[o],this.$=a[o-1];break;case 76:case 77:a[o-2].text=a[o-1],this.$=a[o-2];break;case 79:var c=r.destructLink(a[o],a[o-2]);this.$={type:c.type,stroke:c.stroke,length:c.length,text:a[o-1]};break;case 80:c=r.destructLink(a[o]);this.$={type:c.type,stroke:c.stroke,length:c.length};break;case 81:this.$=a[o-1];break;case 83:case 97:case 153:case 151:this.$=a[o-1]+""+a[o];break;case 98:case 99:this.$=a[o-4],r.addClass(a[o-2],a[o]);break;case 100:this.$=a[o-4],r.setClass(a[o-2],a[o]);break;case 101:case 109:this.$=a[o-1],r.setClickEvent(a[o-1],a[o]);break;case 102:case 110:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 103:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 104:this.$=a[o-4],r.setClickEvent(a[o-4],a[o-3],a[o-2]),r.setTooltip(a[o-4],a[o]);break;case 105:case 111:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 106:case 112:this.$=a[o-3],r.setLink(a[o-3],a[o-2]),r.setTooltip(a[o-3],a[o]);break;case 107:case 113:this.$=a[o-3],r.setLink(a[o-3],a[o-2],a[o]);break;case 108:case 114:this.$=a[o-5],r.setLink(a[o-5],a[o-4],a[o]),r.setTooltip(a[o-5],a[o-2]);break;case 115:this.$=a[o-4],r.addVertex(a[o-2],void 0,void 0,a[o]);break;case 116:case 118:this.$=a[o-4],r.updateLink(a[o-2],a[o]);break;case 117:this.$=a[o-4],r.updateLink([a[o-2]],a[o]);break;case 119:this.$=a[o-8],r.updateLinkInterpolate([a[o-6]],a[o-2]),r.updateLink([a[o-6]],a[o]);break;case 120:this.$=a[o-8],r.updateLinkInterpolate(a[o-6],a[o-2]),r.updateLink(a[o-6],a[o]);break;case 121:this.$=a[o-6],r.updateLinkInterpolate([a[o-4]],a[o]);break;case 122:this.$=a[o-6],r.updateLinkInterpolate(a[o-4],a[o]);break;case 124:case 126:a[o-2].push(a[o]),this.$=a[o-2];break;case 128:this.$=a[o-1]+a[o];break;case 156:this.$="v";break;case 157:this.$="-";break;case 158:this.$={stmt:"dir",value:"TB"};break;case 159:this.$={stmt:"dir",value:"BT"};break;case 160:this.$={stmt:"dir",value:"RL"};break;case 161:this.$={stmt:"dir",value:"LR"}}},table:[{3:1,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},{1:[3]},{1:[2,1]},{3:10,4:2,5:3,6:5,12:n,16:4,21:r,22:i,24:a},e(s,o,{17:11}),{7:12,13:[1,13]},{16:14,21:r,22:i,24:a},{16:15,21:r,22:i,24:a},{25:[1,16],26:[1,17]},{13:[2,5]},{1:[2,2]},{1:[2,9],18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{8:64,10:[1,65],15:j},e([10,15],[2,6]),e(s,[2,17]),e(s,[2,18]),e(s,[2,19]),{20:[1,68],21:[1,69],22:Y,27:67,30:70},e(z,[2,11]),e(z,[2,12]),e(z,[2,13]),e(z,[2,14]),e(z,[2,15]),e(z,[2,16]),{9:72,20:U,21:W,23:q,49:73,78:77,81:[1,78],82:[1,79]},{9:80,20:U,21:W,23:q},{9:81,20:U,21:W,23:q},{9:82,20:U,21:W,23:q},{9:83,20:U,21:W,23:q},{9:84,20:U,21:W,23:q},{9:86,20:U,21:W,22:[1,85],23:q},e(z,[2,44]),{45:[1,87]},{47:[1,88]},e(z,[2,47]),e(H,[2,54],{30:89,22:Y}),{22:[1,90]},{22:[1,91]},{22:[1,92]},{22:[1,93]},{26:V,52:G,66:X,67:K,84:[1,97],91:Q,97:96,98:[1,94],100:[1,95],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(z,[2,158]),e(z,[2,159]),e(z,[2,160]),e(z,[2,161]),e(ht,[2,55],{53:[1,116]}),e(ut,[2,74],{116:129,40:[1,117],52:y,55:[1,118],57:[1,119],59:[1,120],61:[1,121],63:[1,122],65:[1,123],66:m,67:b,69:[1,124],71:[1,125],73:[1,126],74:[1,127],76:[1,128],91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),e(dt,[2,150]),e(dt,[2,175]),e(dt,[2,176]),e(dt,[2,177]),e(dt,[2,178]),e(dt,[2,179]),e(dt,[2,180]),e(dt,[2,181]),e(dt,[2,182]),e(dt,[2,183]),e(dt,[2,184]),e(dt,[2,185]),e(dt,[2,186]),e(dt,[2,187]),e(dt,[2,188]),e(dt,[2,189]),e(dt,[2,190]),{9:130,20:U,21:W,23:q},{11:131,14:[1,132]},e(pt,[2,8]),e(s,[2,20]),e(s,[2,26]),e(s,[2,27]),{21:[1,133]},e(ft,[2,34],{30:134,22:Y}),e(z,[2,35]),{50:135,51:45,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},e(gt,[2,48]),e(gt,[2,49]),e(gt,[2,50]),e(yt,[2,78],{79:136,68:[1,138],80:[1,137]}),{22:mt,24:bt,26:_t,38:xt,39:139,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e([52,66,67,68,80,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,80]),e(z,[2,36]),e(z,[2,37]),e(z,[2,38]),e(z,[2,39]),e(z,[2,40]),{22:mt,24:bt,26:_t,38:xt,39:163,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:164}),e(z,[2,45]),e(z,[2,46]),e(H,[2,53],{52:$t}),{26:V,52:G,66:X,67:K,91:Q,97:166,102:[1,167],105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{95:[1,168],103:169,105:[1,170]},{26:V,52:G,66:X,67:K,91:Q,95:[1,171],97:172,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:173,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,101],{22:[1,174],99:[1,175]}),e(pt,[2,105],{22:[1,176]}),e(pt,[2,109],{115:100,117:178,22:[1,177],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,111],{22:[1,179]}),e(Rt,[2,152]),e(Rt,[2,154]),e(Rt,[2,155]),e(Rt,[2,156]),e(Rt,[2,157]),e(Zt,[2,162]),e(Zt,[2,163]),e(Zt,[2,164]),e(Zt,[2,165]),e(Zt,[2,166]),e(Zt,[2,167]),e(Zt,[2,168]),e(Zt,[2,169]),e(Zt,[2,170]),e(Zt,[2,171]),e(Zt,[2,172]),e(Zt,[2,173]),e(Zt,[2,174]),{52:y,54:180,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:mt,24:bt,26:_t,38:xt,39:181,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:182,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:184,42:vt,52:G,57:[1,183],66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:185,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:186,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:187,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{66:[1,188]},{22:mt,24:bt,26:_t,38:xt,39:189,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:190,42:vt,52:G,66:X,67:K,71:[1,191],73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:192,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:193,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:194,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(dt,[2,151]),e(Pt,[2,3]),{8:195,15:j},{15:[2,7]},e(s,[2,28]),e(ft,[2,33]),e(H,[2,51],{30:196,22:Y}),e(yt,[2,75],{22:[1,197]}),{22:[1,198]},{22:mt,24:bt,26:_t,38:xt,39:199,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,81:wt,82:[1,200],83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Zt,[2,82]),e(Zt,[2,84]),e(Zt,[2,140]),e(Zt,[2,141]),e(Zt,[2,142]),e(Zt,[2,143]),e(Zt,[2,144]),e(Zt,[2,145]),e(Zt,[2,146]),e(Zt,[2,147]),e(Zt,[2,148]),e(Zt,[2,149]),e(Zt,[2,85]),e(Zt,[2,86]),e(Zt,[2,87]),e(Zt,[2,88]),e(Zt,[2,89]),e(Zt,[2,90]),e(Zt,[2,91]),e(Zt,[2,92]),e(Zt,[2,93]),e(Zt,[2,94]),e(Zt,[2,95]),{9:203,20:U,21:W,22:mt,23:q,24:bt,26:_t,38:xt,40:[1,202],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,204],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Y,30:205},{22:[1,206],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,207]},{22:[1,208]},{22:[1,209],106:[1,210]},e(jt,[2,123]),{22:[1,211]},{22:[1,212],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:[1,213],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:178,122:it,123:at,124:st,125:ot,126:ct,127:lt},{84:[1,214]},e(pt,[2,103],{22:[1,215]}),{84:[1,216],101:[1,217]},{84:[1,218]},e(Rt,[2,153]),{84:[1,219],101:[1,220]},e(ht,[2,57],{116:129,52:y,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,122:I,123:F,124:$,125:R,126:Z,127:P}),{22:mt,24:bt,26:_t,38:xt,41:[1,221],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,56:[1,222],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:223,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,224],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,60:[1,225],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,62:[1,226],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,64:[1,227],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{67:[1,228]},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,70:[1,229],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,230],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,39:231,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,41:[1,232],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,233],77:[1,234],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,73:kt,75:[1,236],77:[1,235],81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{9:237,20:U,21:W,23:q},e(H,[2,52],{52:$t}),e(yt,[2,77]),e(yt,[2,76]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,68:[1,238],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(yt,[2,79]),e(Zt,[2,83]),{22:mt,24:bt,26:_t,38:xt,39:239,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(Ft,o,{17:240}),e(z,[2,43]),{51:241,52:y,54:46,66:m,67:b,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:242,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:256,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:257,102:qt,104:[1,258],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:259,102:qt,104:[1,260],105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{105:[1,261]},{22:Yt,66:zt,67:Ut,86:Wt,96:262,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:263,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{26:V,52:G,66:X,67:K,91:Q,97:264,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,102]),{84:[1,265]},e(pt,[2,106],{22:[1,266]}),e(pt,[2,107]),e(pt,[2,110]),e(pt,[2,112],{22:[1,267]}),e(pt,[2,113]),e(ut,[2,58]),e(ut,[2,59]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,58:[1,268],66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,66]),e(ut,[2,61]),e(ut,[2,62]),e(ut,[2,63]),{66:[1,269]},e(ut,[2,65]),e(ut,[2,67]),{22:mt,24:bt,26:_t,38:xt,42:vt,52:G,66:X,67:K,72:[1,270],73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,69]),e(ut,[2,70]),e(ut,[2,72]),e(ut,[2,71]),e(ut,[2,73]),e(Pt,[2,4]),e([22,52,66,67,91,95,105,106,109,111,112,122,123,124,125,126,127],[2,81]),{22:mt,24:bt,26:_t,38:xt,41:[1,271],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,272],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},e(ht,[2,56]),e(pt,[2,115],{106:Jt}),e(te,[2,125],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(ee,[2,127]),e(ee,[2,129]),e(ee,[2,130]),e(ee,[2,131]),e(ee,[2,132]),e(ee,[2,133]),e(ee,[2,134]),e(ee,[2,135]),e(ee,[2,136]),e(ee,[2,137]),e(ee,[2,138]),e(ee,[2,139]),e(pt,[2,116],{106:Jt}),e(pt,[2,117],{106:Jt}),{22:[1,275]},e(pt,[2,118],{106:Jt}),{22:[1,276]},e(jt,[2,124]),e(pt,[2,98],{106:Jt}),e(pt,[2,99],{106:Jt}),e(pt,[2,100],{115:100,117:178,26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,104]),{101:[1,277]},{101:[1,278]},{58:[1,279]},{68:[1,280]},{72:[1,281]},{9:282,20:U,21:W,23:q},e(z,[2,42]),{22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,107:283,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ee,[2,128]),{26:V,52:G,66:X,67:K,91:Q,97:284,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},{26:V,52:G,66:X,67:K,91:Q,97:285,105:J,106:tt,109:et,111:nt,112:rt,115:100,117:98,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(pt,[2,108]),e(pt,[2,114]),e(ut,[2,60]),{22:mt,24:bt,26:_t,38:xt,39:286,42:vt,52:G,66:X,67:K,73:kt,81:wt,83:140,84:Et,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},e(ut,[2,68]),e(Ft,o,{17:287}),e(te,[2,126],{108:274,22:Yt,66:zt,67:Ut,86:Wt,102:qt,105:Ht,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt}),e(pt,[2,121],{115:100,117:178,22:[1,288],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),e(pt,[2,122],{115:100,117:178,22:[1,289],26:V,52:G,66:X,67:K,91:Q,105:J,106:tt,109:et,111:nt,112:rt,122:it,123:at,124:st,125:ot,126:ct,127:lt}),{22:mt,24:bt,26:_t,38:xt,41:[1,290],42:vt,52:G,66:X,67:K,73:kt,81:wt,83:201,85:151,86:Ct,87:Tt,88:St,89:At,90:Lt,91:Bt,92:Nt,94:142,95:Dt,105:J,106:tt,109:Ot,111:nt,112:rt,113:Mt,114:It,115:148,122:it,123:at,124:st,125:ot,126:ct,127:lt},{18:18,19:19,20:c,21:l,22:h,23:u,32:24,33:25,34:26,35:27,36:28,37:29,38:d,42:[1,291],43:31,44:p,46:f,48:g,50:35,51:45,52:y,54:46,66:m,67:b,86:_,87:x,88:v,89:k,90:w,91:E,95:C,105:T,106:S,109:A,111:L,112:B,116:47,118:N,119:D,120:O,121:M,122:I,123:F,124:$,125:R,126:Z,127:P},{22:Yt,66:zt,67:Ut,86:Wt,96:292,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},{22:Yt,66:zt,67:Ut,86:Wt,96:293,102:qt,105:Ht,107:243,108:244,109:Vt,110:Gt,111:Xt,112:Kt,113:Qt},e(ut,[2,64]),e(z,[2,41]),e(pt,[2,119],{106:Jt}),e(pt,[2,120],{106:Jt})],defaultActions:{2:[2,1],9:[2,5],10:[2,2],132:[2,7]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},re=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),12;case 1:return this.begin("type_directive"),13;case 2:return this.popState(),this.begin("arg_directive"),10;case 3:return this.popState(),this.popState(),15;case 4:return 14;case 5:case 6:break;case 7:return this.begin("acc_title"),44;case 8:return this.popState(),"acc_title_value";case 9:return this.begin("acc_descr"),46;case 10:return this.popState(),"acc_descr_value";case 11:this.begin("acc_descr_multiline");break;case 12:case 15:case 24:case 27:case 30:case 33:this.popState();break;case 13:return"acc_descr_multiline_value";case 14:this.begin("string");break;case 16:return"STR";case 17:return 86;case 18:return 95;case 19:return 87;case 20:return 104;case 21:return 88;case 22:return 89;case 23:this.begin("href");break;case 25:return 100;case 26:this.begin("callbackname");break;case 28:this.popState(),this.begin("callbackargs");break;case 29:return 98;case 31:return 99;case 32:this.begin("click");break;case 34:return 90;case 35:case 36:case 37:return t.lex.firstGraph()&&this.begin("dir"),24;case 38:return 38;case 39:return 42;case 40:case 41:case 42:case 43:return 101;case 44:return this.popState(),25;case 45:case 46:case 47:case 48:case 49:case 50:case 51:case 52:case 53:case 54:return this.popState(),26;case 55:return 118;case 56:return 119;case 57:return 120;case 58:return 121;case 59:return 105;case 60:return 111;case 61:return 53;case 62:return 67;case 63:return 52;case 64:return 20;case 65:return 106;case 66:return 126;case 67:case 68:case 69:return 82;case 70:case 71:case 72:return 81;case 73:return 59;case 74:return 60;case 75:return 61;case 76:return 62;case 77:return 63;case 78:return 64;case 79:return 65;case 80:return 69;case 81:return 70;case 82:return 55;case 83:return 56;case 84:return 109;case 85:return 112;case 86:return 127;case 87:return 124;case 88:return 113;case 89:case 90:return 125;case 91:return 114;case 92:return 73;case 93:return 92;case 94:return"SEP";case 95:return 91;case 96:return 66;case 97:return 75;case 98:return 74;case 99:return 77;case 100:return 76;case 101:return 122;case 102:return 123;case 103:return 68;case 104:return 57;case 105:return 58;case 106:return 40;case 107:return 41;case 108:return 71;case 109:return 72;case 110:return 133;case 111:return 21;case 112:return 22;case 113:return 23}},rules:[/^(?:%%\{)/,/^(?:((?:(?!\}%%)[^:.])*))/,/^(?::)/,/^(?:\}%%)/,/^(?:((?:(?!\}%%).|\n)*))/,/^(?:%%(?!\{)[^\n]*)/,/^(?:[^\}]%%[^\n]*)/,/^(?:accTitle\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*:\s*)/,/^(?:(?!\n||)*[^\n]*)/,/^(?:accDescr\s*\{\s*)/,/^(?:[\}])/,/^(?:[^\}]*)/,/^(?:["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:style\b)/,/^(?:default\b)/,/^(?:linkStyle\b)/,/^(?:interpolate\b)/,/^(?:classDef\b)/,/^(?:class\b)/,/^(?:href[\s]+["])/,/^(?:["])/,/^(?:[^"]*)/,/^(?:call[\s]+)/,/^(?:\([\s]*\))/,/^(?:\()/,/^(?:[^(]*)/,/^(?:\))/,/^(?:[^)]*)/,/^(?:click[\s]+)/,/^(?:[\s\n])/,/^(?:[^\s\n]*)/,/^(?:flowchart-elk\b)/,/^(?:graph\b)/,/^(?:flowchart\b)/,/^(?:subgraph\b)/,/^(?:end\b\s*)/,/^(?:_self\b)/,/^(?:_blank\b)/,/^(?:_parent\b)/,/^(?:_top\b)/,/^(?:(\r?\n)*\s*\n)/,/^(?:\s*LR\b)/,/^(?:\s*RL\b)/,/^(?:\s*TB\b)/,/^(?:\s*BT\b)/,/^(?:\s*TD\b)/,/^(?:\s*BR\b)/,/^(?:\s*<)/,/^(?:\s*>)/,/^(?:\s*\^)/,/^(?:\s*v\b)/,/^(?:.*direction\s+TB[^\n]*)/,/^(?:.*direction\s+BT[^\n]*)/,/^(?:.*direction\s+RL[^\n]*)/,/^(?:.*direction\s+LR[^\n]*)/,/^(?:[0-9]+)/,/^(?:#)/,/^(?::::)/,/^(?::)/,/^(?:&)/,/^(?:;)/,/^(?:,)/,/^(?:\*)/,/^(?:\s*[xo<]?--+[-xo>]\s*)/,/^(?:\s*[xo<]?==+[=xo>]\s*)/,/^(?:\s*[xo<]?-?\.+-[xo>]?\s*)/,/^(?:\s*[xo<]?--\s*)/,/^(?:\s*[xo<]?==\s*)/,/^(?:\s*[xo<]?-\.\s*)/,/^(?:\(-)/,/^(?:-\))/,/^(?:\(\[)/,/^(?:\]\))/,/^(?:\[\[)/,/^(?:\]\])/,/^(?:\[\|)/,/^(?:\[\()/,/^(?:\)\])/,/^(?:\(\(\()/,/^(?:\)\)\))/,/^(?:-)/,/^(?:\.)/,/^(?:[\_])/,/^(?:\+)/,/^(?:%)/,/^(?:=)/,/^(?:=)/,/^(?:<)/,/^(?:>)/,/^(?:\^)/,/^(?:\\\|)/,/^(?:v\b)/,/^(?:[A-Za-z]+)/,/^(?:\\\])/,/^(?:\[\/)/,/^(?:\/\])/,/^(?:\[\\)/,/^(?:[!"#$%&'*+,-.`?\\_/])/,/^(?:[\u00AA\u00B5\u00BA\u00C0-\u00D6\u00D8-\u00F6]|[\u00F8-\u02C1\u02C6-\u02D1\u02E0-\u02E4\u02EC\u02EE\u0370-\u0374\u0376\u0377]|[\u037A-\u037D\u0386\u0388-\u038A\u038C\u038E-\u03A1\u03A3-\u03F5]|[\u03F7-\u0481\u048A-\u0527\u0531-\u0556\u0559\u0561-\u0587\u05D0-\u05EA]|[\u05F0-\u05F2\u0620-\u064A\u066E\u066F\u0671-\u06D3\u06D5\u06E5\u06E6\u06EE]|[\u06EF\u06FA-\u06FC\u06FF\u0710\u0712-\u072F\u074D-\u07A5\u07B1\u07CA-\u07EA]|[\u07F4\u07F5\u07FA\u0800-\u0815\u081A\u0824\u0828\u0840-\u0858\u08A0]|[\u08A2-\u08AC\u0904-\u0939\u093D\u0950\u0958-\u0961\u0971-\u0977]|[\u0979-\u097F\u0985-\u098C\u098F\u0990\u0993-\u09A8\u09AA-\u09B0\u09B2]|[\u09B6-\u09B9\u09BD\u09CE\u09DC\u09DD\u09DF-\u09E1\u09F0\u09F1\u0A05-\u0A0A]|[\u0A0F\u0A10\u0A13-\u0A28\u0A2A-\u0A30\u0A32\u0A33\u0A35\u0A36\u0A38\u0A39]|[\u0A59-\u0A5C\u0A5E\u0A72-\u0A74\u0A85-\u0A8D\u0A8F-\u0A91\u0A93-\u0AA8]|[\u0AAA-\u0AB0\u0AB2\u0AB3\u0AB5-\u0AB9\u0ABD\u0AD0\u0AE0\u0AE1\u0B05-\u0B0C]|[\u0B0F\u0B10\u0B13-\u0B28\u0B2A-\u0B30\u0B32\u0B33\u0B35-\u0B39\u0B3D\u0B5C]|[\u0B5D\u0B5F-\u0B61\u0B71\u0B83\u0B85-\u0B8A\u0B8E-\u0B90\u0B92-\u0B95\u0B99]|[\u0B9A\u0B9C\u0B9E\u0B9F\u0BA3\u0BA4\u0BA8-\u0BAA\u0BAE-\u0BB9\u0BD0]|[\u0C05-\u0C0C\u0C0E-\u0C10\u0C12-\u0C28\u0C2A-\u0C33\u0C35-\u0C39\u0C3D]|[\u0C58\u0C59\u0C60\u0C61\u0C85-\u0C8C\u0C8E-\u0C90\u0C92-\u0CA8\u0CAA-\u0CB3]|[\u0CB5-\u0CB9\u0CBD\u0CDE\u0CE0\u0CE1\u0CF1\u0CF2\u0D05-\u0D0C\u0D0E-\u0D10]|[\u0D12-\u0D3A\u0D3D\u0D4E\u0D60\u0D61\u0D7A-\u0D7F\u0D85-\u0D96\u0D9A-\u0DB1]|[\u0DB3-\u0DBB\u0DBD\u0DC0-\u0DC6\u0E01-\u0E30\u0E32\u0E33\u0E40-\u0E46\u0E81]|[\u0E82\u0E84\u0E87\u0E88\u0E8A\u0E8D\u0E94-\u0E97\u0E99-\u0E9F\u0EA1-\u0EA3]|[\u0EA5\u0EA7\u0EAA\u0EAB\u0EAD-\u0EB0\u0EB2\u0EB3\u0EBD\u0EC0-\u0EC4\u0EC6]|[\u0EDC-\u0EDF\u0F00\u0F40-\u0F47\u0F49-\u0F6C\u0F88-\u0F8C\u1000-\u102A]|[\u103F\u1050-\u1055\u105A-\u105D\u1061\u1065\u1066\u106E-\u1070\u1075-\u1081]|[\u108E\u10A0-\u10C5\u10C7\u10CD\u10D0-\u10FA\u10FC-\u1248\u124A-\u124D]|[\u1250-\u1256\u1258\u125A-\u125D\u1260-\u1288\u128A-\u128D\u1290-\u12B0]|[\u12B2-\u12B5\u12B8-\u12BE\u12C0\u12C2-\u12C5\u12C8-\u12D6\u12D8-\u1310]|[\u1312-\u1315\u1318-\u135A\u1380-\u138F\u13A0-\u13F4\u1401-\u166C]|[\u166F-\u167F\u1681-\u169A\u16A0-\u16EA\u1700-\u170C\u170E-\u1711]|[\u1720-\u1731\u1740-\u1751\u1760-\u176C\u176E-\u1770\u1780-\u17B3\u17D7]|[\u17DC\u1820-\u1877\u1880-\u18A8\u18AA\u18B0-\u18F5\u1900-\u191C]|[\u1950-\u196D\u1970-\u1974\u1980-\u19AB\u19C1-\u19C7\u1A00-\u1A16]|[\u1A20-\u1A54\u1AA7\u1B05-\u1B33\u1B45-\u1B4B\u1B83-\u1BA0\u1BAE\u1BAF]|[\u1BBA-\u1BE5\u1C00-\u1C23\u1C4D-\u1C4F\u1C5A-\u1C7D\u1CE9-\u1CEC]|[\u1CEE-\u1CF1\u1CF5\u1CF6\u1D00-\u1DBF\u1E00-\u1F15\u1F18-\u1F1D]|[\u1F20-\u1F45\u1F48-\u1F4D\u1F50-\u1F57\u1F59\u1F5B\u1F5D\u1F5F-\u1F7D]|[\u1F80-\u1FB4\u1FB6-\u1FBC\u1FBE\u1FC2-\u1FC4\u1FC6-\u1FCC\u1FD0-\u1FD3]|[\u1FD6-\u1FDB\u1FE0-\u1FEC\u1FF2-\u1FF4\u1FF6-\u1FFC\u2071\u207F]|[\u2090-\u209C\u2102\u2107\u210A-\u2113\u2115\u2119-\u211D\u2124\u2126\u2128]|[\u212A-\u212D\u212F-\u2139\u213C-\u213F\u2145-\u2149\u214E\u2183\u2184]|[\u2C00-\u2C2E\u2C30-\u2C5E\u2C60-\u2CE4\u2CEB-\u2CEE\u2CF2\u2CF3]|[\u2D00-\u2D25\u2D27\u2D2D\u2D30-\u2D67\u2D6F\u2D80-\u2D96\u2DA0-\u2DA6]|[\u2DA8-\u2DAE\u2DB0-\u2DB6\u2DB8-\u2DBE\u2DC0-\u2DC6\u2DC8-\u2DCE]|[\u2DD0-\u2DD6\u2DD8-\u2DDE\u2E2F\u3005\u3006\u3031-\u3035\u303B\u303C]|[\u3041-\u3096\u309D-\u309F\u30A1-\u30FA\u30FC-\u30FF\u3105-\u312D]|[\u3131-\u318E\u31A0-\u31BA\u31F0-\u31FF\u3400-\u4DB5\u4E00-\u9FCC]|[\uA000-\uA48C\uA4D0-\uA4FD\uA500-\uA60C\uA610-\uA61F\uA62A\uA62B]|[\uA640-\uA66E\uA67F-\uA697\uA6A0-\uA6E5\uA717-\uA71F\uA722-\uA788]|[\uA78B-\uA78E\uA790-\uA793\uA7A0-\uA7AA\uA7F8-\uA801\uA803-\uA805]|[\uA807-\uA80A\uA80C-\uA822\uA840-\uA873\uA882-\uA8B3\uA8F2-\uA8F7\uA8FB]|[\uA90A-\uA925\uA930-\uA946\uA960-\uA97C\uA984-\uA9B2\uA9CF\uAA00-\uAA28]|[\uAA40-\uAA42\uAA44-\uAA4B\uAA60-\uAA76\uAA7A\uAA80-\uAAAF\uAAB1\uAAB5]|[\uAAB6\uAAB9-\uAABD\uAAC0\uAAC2\uAADB-\uAADD\uAAE0-\uAAEA\uAAF2-\uAAF4]|[\uAB01-\uAB06\uAB09-\uAB0E\uAB11-\uAB16\uAB20-\uAB26\uAB28-\uAB2E]|[\uABC0-\uABE2\uAC00-\uD7A3\uD7B0-\uD7C6\uD7CB-\uD7FB\uF900-\uFA6D]|[\uFA70-\uFAD9\uFB00-\uFB06\uFB13-\uFB17\uFB1D\uFB1F-\uFB28\uFB2A-\uFB36]|[\uFB38-\uFB3C\uFB3E\uFB40\uFB41\uFB43\uFB44\uFB46-\uFBB1\uFBD3-\uFD3D]|[\uFD50-\uFD8F\uFD92-\uFDC7\uFDF0-\uFDFB\uFE70-\uFE74\uFE76-\uFEFC]|[\uFF21-\uFF3A\uFF41-\uFF5A\uFF66-\uFFBE\uFFC2-\uFFC7\uFFCA-\uFFCF]|[\uFFD2-\uFFD7\uFFDA-\uFFDC])/,/^(?:\|)/,/^(?:\()/,/^(?:\))/,/^(?:\[)/,/^(?:\])/,/^(?:\{)/,/^(?:\})/,/^(?:")/,/^(?:(\r?\n)+)/,/^(?:\s)/,/^(?:$)/],conditions:{close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[30,31],inclusive:!1},callbackname:{rules:[27,28,29],inclusive:!1},href:{rules:[24,25],inclusive:!1},click:{rules:[33,34],inclusive:!1},vertex:{rules:[],inclusive:!1},dir:{rules:[44,45,46,47,48,49,50,51,52,53,54],inclusive:!1},acc_descr_multiline:{rules:[12,13],inclusive:!1},acc_descr:{rules:[10],inclusive:!1},acc_title:{rules:[8],inclusive:!1},string:{rules:[15,16],inclusive:!1},INITIAL:{rules:[0,5,6,7,9,11,14,17,18,19,20,21,22,23,26,32,35,36,37,38,39,40,41,42,43,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113],inclusive:!0}}},t);function ie(){this.yy={}}return ne.lexer=re,ie.prototype=ne,ne.Parser=ie,new ie}();mo.parser=mo;const bo=mo,_o=(t,e)=>{var n,r;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&null!==t.match(/^\s*graph/))},xo=(t,e)=>{var n,r;return"dagre-d3"!==(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer)&&("elk"!==(null==(r=null==e?void 0:e.flowchart)?void 0:r.defaultRenderer)&&(null!==t.match(/^\s*graph/)||null!==t.match(/^\s*flowchart/)))};let vo,ko,wo=0,Eo=ar(),Co={},To=[],So={},Ao=[],Lo={},Bo={},No=0,Do=!0,Oo=[];const Mo=t=>Yt.sanitizeText(t,Eo),Io=function(t,e,n){ap.parseDirective(this,t,e,n)},Fo=function(t){const e=Object.keys(Co);for(const n of e)if(Co[n].id===t)return Co[n].domId;return t},$o=function(t,e,n,r,i,a,s={}){let o,c=t;void 0!==c&&0!==c.trim().length&&(void 0===Co[c]&&(Co[c]={id:c,domId:"flowchart-"+c+"-"+wo,styles:[],classes:[]}),wo++,void 0!==e?(Eo=ar(),o=Mo(e.trim()),'"'===o[0]&&'"'===o[o.length-1]&&(o=o.substring(1,o.length-1)),Co[c].text=o):void 0===Co[c].text&&(Co[c].text=t),void 0!==n&&(Co[c].type=n),null!=r&&r.forEach((function(t){Co[c].styles.push(t)})),null!=i&&i.forEach((function(t){Co[c].classes.push(t)})),void 0!==a&&(Co[c].dir=a),void 0===Co[c].props?Co[c].props=s:void 0!==s&&Object.assign(Co[c].props,s))},Ro=function(t,e,n,r){const i={start:t,end:e,type:void 0,text:""};void 0!==(r=n.text)&&(i.text=Mo(r.trim()),'"'===i.text[0]&&'"'===i.text[i.text.length-1]&&(i.text=i.text.substring(1,i.text.length-1))),void 0!==n&&(i.type=n.type,i.stroke=n.stroke,i.length=n.length),To.push(i)},Zo=function(t,e,n,r){let i,a;for(i=0;i<t.length;i++)for(a=0;a<e.length;a++)Ro(t[i],e[a],n,r)},Po=function(t,e){t.forEach((function(t){"default"===t?To.defaultInterpolate=e:To[t].interpolate=e}))},jo=function(t,e){t.forEach((function(t){"default"===t?To.defaultStyle=e:(-1===Gn.isSubstringInArray("fill",e)&&e.push("fill:none"),To[t].style=e)}))},Yo=function(t,e){void 0===So[t]&&(So[t]={id:t,styles:[],textStyles:[]}),null!=e&&e.forEach((function(e){if(e.match("color")){const n=e.replace("fill","bgFill").replace("color","fill");So[t].textStyles.push(n)}So[t].styles.push(e)}))},zo=function(t){vo=t,vo.match(/.*</)&&(vo="RL"),vo.match(/.*\^/)&&(vo="BT"),vo.match(/.*>/)&&(vo="LR"),vo.match(/.*v/)&&(vo="TB"),"TD"===vo&&(vo="TB")},Uo=function(t,e){t.split(",").forEach((function(t){let n=t;void 0!==Co[n]&&Co[n].classes.push(e),void 0!==Lo[n]&&Lo[n].classes.push(e)}))},Wo=function(t,e,n){t.split(",").forEach((function(t){void 0!==Co[t]&&(Co[t].link=Gn.formatUrl(e,Eo),Co[t].linkTarget=n)})),Uo(t,"clickable")},qo=function(t){return Bo[t]},Ho=function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){let r=Fo(t);if("loose"!==ar().securityLevel)return;if(void 0===e)return;let i=[];if("string"==typeof n){i=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<i.length;t++){let e=i[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),i[t]=e}}0===i.length&&i.push(t),void 0!==Co[t]&&(Co[t].haveCallback=!0,Oo.push((function(){const t=document.querySelector(`[id="${r}"]`);null!==t&&t.addEventListener("click",(function(){Gn.runFunc(e,...i)}),!1)})))}(t,e,n)})),Uo(t,"clickable")},Vo=function(t){Oo.forEach((function(e){e(t)}))},Go=function(){return vo.trim()},Xo=function(){return Co},Ko=function(){return To},Qo=function(){return So},Jo=function(t){let e=(0,o.Ys)(".mermaidTooltip");null===(e._groups||e)[0][0]&&(e=(0,o.Ys)("body").append("div").attr("class","mermaidTooltip").style("opacity",0));(0,o.Ys)(t).select("svg").selectAll("g.node").on("mouseover",(function(){const t=(0,o.Ys)(this);if(null===t.attr("title"))return;const n=this.getBoundingClientRect();e.transition().duration(200).style("opacity",".9"),e.text(t.attr("title")).style("left",window.scrollX+n.left+(n.right-n.left)/2+"px").style("top",window.scrollY+n.top-14+document.body.scrollTop+"px"),e.html(e.html().replace(/&lt;br\/&gt;/g,"<br/>")),t.classed("hover",!0)})).on("mouseout",(function(){e.transition().duration(500).style("opacity",0);(0,o.Ys)(this).classed("hover",!1)}))};Oo.push(Jo);const tc=function(t="gen-1"){Co={},So={},To=[],Oo=[Jo],Ao=[],Lo={},No=0,Bo=[],Do=!0,ko=t,Dr()},ec=t=>{ko=t||"gen-2"},nc=function(){return"fill:#ffa;stroke: #f66; stroke-width: 3px; stroke-dasharray: 5, 5;fill:#ffa;stroke: #666;"},rc=function(t,e,n){let r=t.trim(),i=n;t===n&&n.match(/\s/)&&(r=void 0);let a=[];const{nodeList:s,dir:o}=function(t){const e={boolean:{},number:{},string:{}},n=[];let r;return{nodeList:t.filter((function(t){const i=typeof t;return t.stmt&&"dir"===t.stmt?(r=t.value,!1):""!==t.trim()&&(i in e?!e[i].hasOwnProperty(t)&&(e[i][t]=!0):!n.includes(t)&&n.push(t))})),dir:r}}(a.concat.apply(a,e));if(a=s,"gen-1"===ko)for(let l=0;l<a.length;l++)a[l]=Fo(a[l]);r=r||"subGraph"+No,i=i||"",i=Mo(i),No+=1;const c={id:r,nodes:a,title:i.trim(),classes:[],dir:o};return Nt.info("Adding",c.id,c.nodes,c.dir),c.nodes=fc(c,Ao).nodes,Ao.push(c),Lo[r]=c,r},ic=function(t){for(const[e,n]of Ao.entries())if(n.id===t)return e;return-1};let ac=-1;const sc=[],oc=function(t,e){const n=Ao[e].nodes;if(ac+=1,ac>2e3)return;if(sc[ac]=e,Ao[e].id===t)return{result:!0,count:0};let r=0,i=1;for(;r<n.length;){const e=ic(n[r]);if(e>=0){const n=oc(t,e);if(n.result)return{result:!0,count:i+n.count};i+=n.count}r+=1}return{result:!1,count:i}},cc=function(t){return sc[t]},lc=function(){ac=-1,Ao.length>0&&oc("none",Ao.length-1)},hc=function(){return Ao},uc=()=>!!Do&&(Do=!1,!0),dc=(t,e)=>{const n=(t=>{const e=t.trim();let n=e.slice(0,-1),r="arrow_open";switch(e.slice(-1)){case"x":r="arrow_cross","x"===e[0]&&(r="double_"+r,n=n.slice(1));break;case">":r="arrow_point","<"===e[0]&&(r="double_"+r,n=n.slice(1));break;case"o":r="arrow_circle","o"===e[0]&&(r="double_"+r,n=n.slice(1))}let i="normal",a=n.length-1;"="===n[0]&&(i="thick");let s=((t,e)=>{const n=e.length;let r=0;for(let i=0;i<n;++i)e[i]===t&&++r;return r})(".",n);return s&&(i="dotted",a=s),{type:r,stroke:i,length:a}})(t);let r;if(e){if(r=(t=>{let e=t.trim(),n="arrow_open";switch(e[0]){case"<":n="arrow_point",e=e.slice(1);break;case"x":n="arrow_cross",e=e.slice(1);break;case"o":n="arrow_circle",e=e.slice(1)}let r="normal";return e.includes("=")&&(r="thick"),e.includes(".")&&(r="dotted"),{type:n,stroke:r}})(e),r.stroke!==n.stroke)return{type:"INVALID",stroke:"INVALID"};if("arrow_open"===r.type)r.type=n.type;else{if(r.type!==n.type)return{type:"INVALID",stroke:"INVALID"};r.type="double_"+r.type}return"double_arrow"===r.type&&(r.type="double_arrow_point"),r.length=n.length,r}return n},pc=(t,e)=>{let n=!1;return t.forEach((t=>{t.nodes.indexOf(e)>=0&&(n=!0)})),n},fc=(t,e)=>{const n=[];return t.nodes.forEach(((r,i)=>{pc(e,r)||n.push(t.nodes[i])})),{nodes:n}},gc={firstGraph:uc},yc={parseDirective:Io,defaultConfig:()=>Kn.flowchart,setAccTitle:Or,getAccTitle:Mr,getAccDescription:Fr,setAccDescription:Ir,addVertex:$o,lookUpDomId:Fo,addLink:Zo,updateLinkInterpolate:Po,updateLink:jo,addClass:Yo,setDirection:zo,setClass:Uo,setTooltip:function(t,e){t.split(",").forEach((function(t){void 0!==e&&(Bo["gen-1"===ko?Fo(t):t]=Mo(e))}))},getTooltip:qo,setClickEvent:Ho,setLink:Wo,bindFunctions:Vo,getDirection:Go,getVertices:Xo,getEdges:Ko,getClasses:Qo,clear:tc,setGen:ec,defaultStyle:nc,addSubGraph:rc,getDepthFirstPos:cc,indexNodes:lc,getSubGraphs:hc,destructLink:dc,lex:gc,exists:pc,makeUniq:fc,setDiagramTitle:$r,getDiagramTitle:Rr},mc=Object.freeze(Object.defineProperty({__proto__:null,addClass:Yo,addLink:Zo,addSingleLink:Ro,addSubGraph:rc,addVertex:$o,bindFunctions:Vo,clear:tc,default:yc,defaultStyle:nc,destructLink:dc,firstGraph:uc,getClasses:Qo,getDepthFirstPos:cc,getDirection:Go,getEdges:Ko,getSubGraphs:hc,getTooltip:qo,getVertices:Xo,indexNodes:lc,lex:gc,lookUpDomId:Fo,parseDirective:Io,setClass:Uo,setClickEvent:Ho,setDirection:zo,setGen:ec,setLink:Wo,updateLink:jo,updateLinkInterpolate:Po},Symbol.toStringTag,{value:"Module"}));const bc={},_c=function(t){const e=Object.keys(t);for(const n of e)bc[n]=t[n]},xc={},vc=function(t,e,n,r,i,a){const s=r.select(`[id="${n}"]`);Object.keys(t).forEach((function(n){const r=t[n];let o="default";r.classes.length>0&&(o=r.classes.join(" "));const c=Mn(r.styles);let l,h=void 0!==r.text?r.text:r.id;if(Pt(ar().flowchart.htmlLabels)){const t={label:h.replace(/fa[blrs]?:fa-[\w-]+/g,(t=>`<i class='${t.replace(":"," ")}'></i>`))};l=(0,kt.a)(s,t).node(),l.parentNode.removeChild(l)}else{const t=i.createElementNS("http://www.w3.org/2000/svg","text");t.setAttribute("style",c.labelStyle.replace("color:","fill:"));const e=h.split(Yt.lineBreakRegex);for(const n of e){const e=i.createElementNS("http://www.w3.org/2000/svg","tspan");e.setAttributeNS("http://www.w3.org/XML/1998/namespace","xml:space","preserve"),e.setAttribute("dy","1em"),e.setAttribute("x","1"),e.textContent=n,t.appendChild(e)}l=t}let u=0,d="";switch(r.type){case"round":u=5,d="rect";break;case"square":case"group":default:d="rect";break;case"diamond":d="question";break;case"hexagon":d="hexagon";break;case"odd":case"odd_right":d="rect_left_inv_arrow";break;case"lean_right":d="lean_right";break;case"lean_left":d="lean_left";break;case"trapezoid":d="trapezoid";break;case"inv_trapezoid":d="inv_trapezoid";break;case"circle":d="circle";break;case"ellipse":d="ellipse";break;case"stadium":d="stadium";break;case"subroutine":d="subroutine";break;case"cylinder":d="cylinder";break;case"doublecircle":d="doublecircle"}e.setNode(r.id,{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,link:r.link,linkTarget:r.linkTarget,tooltip:a.db.getTooltip(r.id)||"",domId:a.db.lookUpDomId(r.id),haveCallback:r.haveCallback,width:"group"===r.type?500:void 0,dir:r.dir,type:r.type,props:r.props,padding:ar().flowchart.padding}),Nt.info("setNode",{labelStyle:c.labelStyle,shape:d,labelText:h,rx:u,ry:u,class:o,style:c.style,id:r.id,domId:a.db.lookUpDomId(r.id),width:"group"===r.type?500:void 0,type:r.type,dir:r.dir,props:r.props,padding:ar().flowchart.padding})}))},kc=function(t,e,n){Nt.info("abc78 edges = ",t);let r,i,a=0,s={};if(void 0!==t.defaultStyle){const e=Mn(t.defaultStyle);r=e.style,i=e.labelStyle}t.forEach((function(n){a++;var c="L-"+n.start+"-"+n.end;void 0===s[c]?(s[c]=0,Nt.info("abc78 new entry",c,s[c])):(s[c]++,Nt.info("abc78 new entry",c,s[c]));let l=c+"-"+s[c];Nt.info("abc78 new link id to be used is",c,l,s[c]);var h="LS-"+n.start,u="LE-"+n.end;const d={style:"",labelStyle:""};switch(d.minlen=n.length||1,"arrow_open"===n.type?d.arrowhead="none":d.arrowhead="normal",d.arrowTypeStart="arrow_open",d.arrowTypeEnd="arrow_open",n.type){case"double_arrow_cross":d.arrowTypeStart="arrow_cross";case"arrow_cross":d.arrowTypeEnd="arrow_cross";break;case"double_arrow_point":d.arrowTypeStart="arrow_point";case"arrow_point":d.arrowTypeEnd="arrow_point";break;case"double_arrow_circle":d.arrowTypeStart="arrow_circle";case"arrow_circle":d.arrowTypeEnd="arrow_circle"}let p="",f="";switch(n.stroke){case"normal":p="fill:none;",void 0!==r&&(p=r),void 0!==i&&(f=i),d.thickness="normal",d.pattern="solid";break;case"dotted":d.thickness="normal",d.pattern="dotted",d.style="fill:none;stroke-width:2px;stroke-dasharray:3;";break;case"thick":d.thickness="thick",d.pattern="solid",d.style="stroke-width: 3.5px;fill:none;"}if(void 0!==n.style){const t=Mn(n.style);p=t.style,f=t.labelStyle}d.style=d.style+=p,d.labelStyle=d.labelStyle+=f,void 0!==n.interpolate?d.curve=Dn(n.interpolate,o.c_6):void 0!==t.defaultInterpolate?d.curve=Dn(t.defaultInterpolate,o.c_6):d.curve=Dn(xc.curve,o.c_6),void 0===n.text?void 0!==n.style&&(d.arrowheadStyle="fill: #333"):(d.arrowheadStyle="fill: #333",d.labelpos="c"),d.labelType="text",d.label=n.text.replace(Yt.lineBreakRegex,"\n"),void 0===n.style&&(d.style=d.style||"stroke: #333; stroke-width: 1.5px;fill:none;"),d.labelStyle=d.labelStyle.replace("color:","fill:"),d.id=l,d.classes="flowchart-link "+h+" "+u,e.setEdge(n.start,n.end,d,a)}))},wc={setConf:function(t){const e=Object.keys(t);for(const n of e)xc[n]=t[n]},addVertices:vc,addEdges:kc,getClasses:function(t,e){Nt.info("Extracting classes"),e.db.clear();try{return e.parse(t),e.db.getClasses()}catch(n){return}},draw:function(t,e,n,r){Nt.info("Drawing flowchart"),r.db.clear(),yc.setGen("gen-2"),r.parser.parse(t);let i=r.db.getDirection();void 0===i&&(i="TD");const{securityLevel:a,flowchart:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;let h;"sandbox"===a&&(h=(0,o.Ys)("#i"+e));const u="sandbox"===a?(0,o.Ys)(h.nodes()[0].contentDocument.body):(0,o.Ys)("body"),d="sandbox"===a?h.nodes()[0].contentDocument:document,p=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:i,nodesep:c,ranksep:l,marginx:0,marginy:0}).setDefaultEdgeLabel((function(){return{}}));let f;const g=r.db.getSubGraphs();Nt.info("Subgraphs - ",g);for(let o=g.length-1;o>=0;o--)f=g[o],Nt.info("Subgraph - ",f),r.db.addVertex(f.id,f.title,"group",void 0,f.classes,f.dir);const y=r.db.getVertices(),m=r.db.getEdges();Nt.info("Edges",m);let b=0;for(b=g.length-1;b>=0;b--){f=g[b],(0,o.td_)("cluster").append("text");for(let t=0;t<f.nodes.length;t++)Nt.info("Setting up subgraphs",f.nodes[t],f.id),p.setParent(f.nodes[t],f.id)}vc(y,p,e,u,d,r),kc(m,p);const _=u.select(`[id="${e}"]`),x=u.select("#"+e+" g");if(qs(x,p,["point","circle","cross"],"flowchart",e),Gn.insertTitle(_,"flowchartTitleText",s.titleTopMargin,r.db.getDiagramTitle()),pr(p,_,s.diagramPadding,s.useMaxWidth),r.db.indexNodes("subGraph"+b),!s.htmlLabels){const t=d.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const e of t){const t=e.getBBox(),n=d.createElementNS("http://www.w3.org/2000/svg","rect");n.setAttribute("rx",0),n.setAttribute("ry",0),n.setAttribute("width",t.width),n.setAttribute("height",t.height),e.insertBefore(n,e.firstChild)}}Object.keys(y).forEach((function(t){const n=y[t];if(n.link){const r=(0,o.Ys)("#"+e+' [id="'+t+'"]');if(r){const t=d.createElementNS("http://www.w3.org/2000/svg","a");t.setAttributeNS("http://www.w3.org/2000/svg","class",n.classes.join(" ")),t.setAttributeNS("http://www.w3.org/2000/svg","href",n.link),t.setAttributeNS("http://www.w3.org/2000/svg","rel","noopener"),"sandbox"===a?t.setAttributeNS("http://www.w3.org/2000/svg","target","_top"):n.linkTarget&&t.setAttributeNS("http://www.w3.org/2000/svg","target",n.linkTarget);const e=r.insert((function(){return t}),":first-child"),i=r.select(".label-container");i&&e.append((function(){return i.node()}));const s=r.select(".label");s&&e.append((function(){return s.node()}))}}}))}};var Ec=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,21],d=[1,22],p=[1,23],f=[1,24],g=[1,25],y=[1,26],m=[1,27],b=[1,29],_=[1,31],x=[1,34],v=[5,7,9,11,12,13,14,15,16,17,18,19,20,21,23,25,26,28,35,40],k={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,gantt:5,document:6,EOF:7,line:8,SPACE:9,statement:10,NL:11,dateFormat:12,inclusiveEndDates:13,topAxis:14,axisFormat:15,tickInterval:16,excludes:17,includes:18,todayMarker:19,title:20,acc_title:21,acc_title_value:22,acc_descr:23,acc_descr_value:24,acc_descr_multiline_value:25,section:26,clickStatement:27,taskTxt:28,taskData:29,openDirective:30,typeDirective:31,closeDirective:32,":":33,argDirective:34,click:35,callbackname:36,callbackargs:37,href:38,clickStatementDebug:39,open_directive:40,type_directive:41,arg_directive:42,close_directive:43,$accept:0,$end:1},terminals_:{2:"error",5:"gantt",7:"EOF",9:"SPACE",11:"NL",12:"dateFormat",13:"inclusiveEndDates",14:"topAxis",15:"axisFormat",16:"tickInterval",17:"excludes",18:"includes",19:"todayMarker",20:"title",21:"acc_title",22:"acc_title_value",23:"acc_descr",24:"acc_descr_value",25:"acc_descr_multiline_value",26:"section",28:"taskTxt",29:"taskData",33:":",35:"click",36:"callbackname",37:"callbackargs",38:"href",40:"open_directive",41:"type_directive",42:"arg_directive",43:"close_directive"},productions_:[0,[3,2],[3,3],[6,0],[6,2],[8,2],[8,1],[8,1],[8,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,1],[10,2],[10,2],[10,1],[10,1],[10,1],[10,2],[10,1],[4,4],[4,6],[27,2],[27,3],[27,3],[27,4],[27,3],[27,4],[27,2],[39,2],[39,3],[39,3],[39,4],[39,3],[39,4],[39,2],[30,1],[31,1],[34,1],[32,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 2:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 9:r.setDateFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 10:r.enableInclusiveEndDates(),this.$=a[o].substr(18);break;case 11:r.TopAxis(),this.$=a[o].substr(8);break;case 12:r.setAxisFormat(a[o].substr(11)),this.$=a[o].substr(11);break;case 13:r.setTickInterval(a[o].substr(13)),this.$=a[o].substr(13);break;case 14:r.setExcludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 15:r.setIncludes(a[o].substr(9)),this.$=a[o].substr(9);break;case 16:r.setTodayMarker(a[o].substr(12)),this.$=a[o].substr(12);break;case 17:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 18:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 19:case 20:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 21:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 23:r.addTask(a[o-1],a[o]),this.$="task";break;case 27:this.$=a[o-1],r.setClickEvent(a[o-1],a[o],null);break;case 28:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],a[o]);break;case 29:this.$=a[o-2],r.setClickEvent(a[o-2],a[o-1],null),r.setLink(a[o-2],a[o]);break;case 30:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-2],a[o-1]),r.setLink(a[o-3],a[o]);break;case 31:this.$=a[o-2],r.setClickEvent(a[o-2],a[o],null),r.setLink(a[o-2],a[o-1]);break;case 32:this.$=a[o-3],r.setClickEvent(a[o-3],a[o-1],a[o]),r.setLink(a[o-3],a[o-2]);break;case 33:this.$=a[o-1],r.setLink(a[o-1],a[o]);break;case 34:case 40:this.$=a[o-1]+" "+a[o];break;case 35:case 36:case 38:this.$=a[o-2]+" "+a[o-1]+" "+a[o];break;case 37:case 39:this.$=a[o-3]+" "+a[o-2]+" "+a[o-1]+" "+a[o];break;case 41:r.parseDirective("%%{","open_directive");break;case 42:r.parseDirective(a[o],"type_directive");break;case 43:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 44:r.parseDirective("}%%","close_directive","gantt")}},table:[{3:1,4:2,5:n,30:4,40:r},{1:[3]},{3:6,4:2,5:n,30:4,40:r},e(i,[2,3],{6:7}),{31:8,41:[1,9]},{41:[2,41]},{1:[2,1]},{4:30,7:[1,10],8:11,9:[1,12],10:13,11:[1,14],12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},{32:32,33:[1,33],43:x},e([33,43],[2,42]),e(i,[2,8],{1:[2,2]}),e(i,[2,4]),{4:30,10:35,12:a,13:s,14:o,15:c,16:l,17:h,18:u,19:d,20:p,21:f,23:g,25:y,26:m,27:28,28:b,30:4,35:_,40:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,9]),e(i,[2,10]),e(i,[2,11]),e(i,[2,12]),e(i,[2,13]),e(i,[2,14]),e(i,[2,15]),e(i,[2,16]),e(i,[2,17]),{22:[1,36]},{24:[1,37]},e(i,[2,20]),e(i,[2,21]),e(i,[2,22]),{29:[1,38]},e(i,[2,24]),{36:[1,39],38:[1,40]},{11:[1,41]},{34:42,42:[1,43]},{11:[2,44]},e(i,[2,5]),e(i,[2,18]),e(i,[2,19]),e(i,[2,23]),e(i,[2,27],{37:[1,44],38:[1,45]}),e(i,[2,33],{36:[1,46]}),e(v,[2,25]),{32:47,43:x},{43:[2,43]},e(i,[2,28],{38:[1,48]}),e(i,[2,29]),e(i,[2,31],{37:[1,49]}),{11:[1,50]},e(i,[2,30]),e(i,[2,32]),e(v,[2,26])],defaultActions:{5:[2,41],6:[2,1],34:[2,44],43:[2,43]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},w=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),40;case 1:return this.begin("type_directive"),41;case 2:return this.popState(),this.begin("arg_directive"),33;case 3:return this.popState(),this.popState(),43;case 4:return 42;case 5:return this.begin("acc_title"),21;case 6:return this.popState(),"acc_title_value";case 7:return this.begin("acc_descr"),23;case 8:return this.popState(),"acc_descr_value";case 9:this.begin("acc_descr_multiline");break;case 10:case 20:case 23:case 26:case 29:this.popState();break;case 11:return"acc_descr_multiline_value";case 12:case 13:case 14:case 16:case 17:case 18:break;case 15:return 11;case 19:this.begin("href");break;case 21:return 38;case 22:this.begin("callbackname");break;case 24:this.popState(),this.begin("callbackargs");break;case 25:return 36;case 27:return 37;case 28:this.begin("click");break;case 30:return 35;case 31:return 5;case 32:return 12;case 33:return 13;case 34:return 14;case 35:return 15;case 36:return 16;case 37:return 18;case 38:return 17;case 39:return 19;case 40:return"date";case 41:return 20;case 42:return"accDescription";case 43:return 26;case 44:return 28;case 45:return 29;case 46:return 33;case 47:return 7;case 48:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:%%(?!\{)*[^\n]*)/i,/^(?:[^\}]%%*[^\n]*)/i,/^(?:%%*[^\n]*[\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:href[\s]+["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:call[\s]+)/i,/^(?:\([\s]*\))/i,/^(?:\()/i,/^(?:[^(]*)/i,/^(?:\))/i,/^(?:[^)]*)/i,/^(?:click[\s]+)/i,/^(?:[\s\n])/i,/^(?:[^\s\n]*)/i,/^(?:gantt\b)/i,/^(?:dateFormat\s[^#\n;]+)/i,/^(?:inclusiveEndDates\b)/i,/^(?:topAxis\b)/i,/^(?:axisFormat\s[^#\n;]+)/i,/^(?:tickInterval\s[^#\n;]+)/i,/^(?:includes\s[^#\n;]+)/i,/^(?:excludes\s[^#\n;]+)/i,/^(?:todayMarker\s[^\n;]+)/i,/^(?:\d\d\d\d-\d\d-\d\d\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accDescription\s[^#\n;]+)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[10,11],inclusive:!1},acc_descr:{rules:[8],inclusive:!1},acc_title:{rules:[6],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},callbackargs:{rules:[26,27],inclusive:!1},callbackname:{rules:[23,24,25],inclusive:!1},href:{rules:[20,21],inclusive:!1},click:{rules:[29,30],inclusive:!1},INITIAL:{rules:[0,5,7,9,12,13,14,15,16,17,18,19,22,28,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48],inclusive:!0}}},t);function E(){this.yy={}}return k.lexer=w,E.prototype=k,k.Parser=E,new E}();Ec.parser=Ec;const Cc=Ec,Tc=t=>null!==t.match(/^\s*gantt/);a().extend(Et()),a().extend(Tt()),a().extend(At());let Sc,Ac="",Lc="",Bc="",Nc=[],Dc=[],Oc={},Mc=[],Ic=[],Fc="";const $c=["active","done","crit","milestone"];let Rc=[],Zc=!1,Pc=!1,jc=0;const Yc=function(t,e,n,r){return!r.includes(t.format(e.trim()))&&(!!(t.isoWeekday()>=6&&n.includes("weekends"))||(!!n.includes(t.format("dddd").toLowerCase())||n.includes(t.format(e.trim()))))},zc=function(t,e,n,r){if(!n.length||t.manualEndTime)return;let i,s;i=t.startTime instanceof Date?a()(t.startTime):a()(t.startTime,e,!0),i=i.add(1,"d"),s=t.endTime instanceof Date?a()(t.endTime):a()(t.endTime,e,!0);const[o,c]=Uc(i,s,e,n,r);t.endTime=o.toDate(),t.renderEndTime=c},Uc=function(t,e,n,r,i){let a=!1,s=null;for(;t<=e;)a||(s=e.toDate()),a=Yc(t,n,r,i),a&&(e=e.add(1,"d")),t=t.add(1,"d");return[e,s]},Wc=function(t,e,n){n=n.trim();const r=/^after\s+([\d\w- ]+)/.exec(n.trim());if(null!==r){let t=null;if(r[1].split(" ").forEach((function(e){let n=tl(e);void 0!==n&&(t?n.endTime>t.endTime&&(t=n):t=n)})),t)return t.endTime;{const t=new Date;return t.setHours(0,0,0,0),t}}let i=a()(n,e.trim(),!0);if(i.isValid())return i.toDate();{Nt.debug("Invalid date:"+n),Nt.debug("With date format:"+e.trim());const t=new Date(n);if(void 0===t||isNaN(t.getTime()))throw new Error("Invalid date:"+n);return t}},qc=function(t){const e=/^(\d+(?:\.\d+)?)([Mdhmswy]|ms)$/.exec(t.trim());return null!==e?[Number.parseFloat(e[1]),e[2]]:[NaN,"ms"]},Hc=function(t,e,n,r=!1){n=n.trim();let i=a()(n,e.trim(),!0);if(i.isValid())return r&&(i=i.add(1,"d")),i.toDate();let s=a()(t);const[o,c]=qc(n);if(!Number.isNaN(o)){const t=s.add(o,c);t.isValid()&&(s=t)}return s.toDate()};let Vc=0;const Gc=function(t){return void 0===t?(Vc+=1,"task"+Vc):t};let Xc,Kc,Qc=[];const Jc={},tl=function(t){const e=Jc[t];return Qc[e]},el=function(){const t=function(t){const e=Qc[t];let n="";switch(Qc[t].raw.startTime.type){case"prevTaskEnd":{const t=tl(e.prevTaskId);e.startTime=t.endTime;break}case"getStartDate":n=Wc(0,Ac,Qc[t].raw.startTime.startData),n&&(Qc[t].startTime=n)}return Qc[t].startTime&&(Qc[t].endTime=Hc(Qc[t].startTime,Ac,Qc[t].raw.endTime.data,Zc),Qc[t].endTime&&(Qc[t].processed=!0,Qc[t].manualEndTime=a()(Qc[t].raw.endTime.data,"YYYY-MM-DD",!0).isValid(),zc(Qc[t],Ac,Dc,Nc))),Qc[t].processed};let e=!0;for(const[n,r]of Qc.entries())t(n),e=e&&r.processed;return e},nl=function(t,e){t.split(",").forEach((function(t){let n=tl(t);void 0!==n&&n.classes.push(e)}))},rl=function(t,e){Rc.push((function(){const n=document.querySelector(`[id="${t}"]`);null!==n&&n.addEventListener("click",(function(){e()}))}),(function(){const n=document.querySelector(`[id="${t}-text"]`);null!==n&&n.addEventListener("click",(function(){e()}))}))},il={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().gantt,clear:function(){Mc=[],Ic=[],Fc="",Rc=[],Vc=0,Xc=void 0,Kc=void 0,Qc=[],Ac="",Lc="",Sc=void 0,Bc="",Nc=[],Dc=[],Zc=!1,Pc=!1,jc=0,Oc={},Dr()},setDateFormat:function(t){Ac=t},getDateFormat:function(){return Ac},enableInclusiveEndDates:function(){Zc=!0},endDatesAreInclusive:function(){return Zc},enableTopAxis:function(){Pc=!0},topAxisEnabled:function(){return Pc},setAxisFormat:function(t){Lc=t},getAxisFormat:function(){return Lc},setTickInterval:function(t){Sc=t},getTickInterval:function(){return Sc},setTodayMarker:function(t){Bc=t},getTodayMarker:function(){return Bc},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){Fc=t,Mc.push(t)},getSections:function(){return Mc},getTasks:function(){let t=el();let e=0;for(;!t&&e<10;)t=el(),e++;return Ic=Qc,Ic},addTask:function(t,e){const n={section:Fc,type:Fc,processed:!1,manualEndTime:!1,renderEndTime:null,raw:{data:e},task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();switch(r.length){case 1:i.id=Gc(),i.startTime={type:"prevTaskEnd",id:t},i.endTime={data:r[0]};break;case 2:i.id=Gc(),i.startTime={type:"getStartDate",startData:r[0]},i.endTime={data:r[1]};break;case 3:i.id=Gc(r[0]),i.startTime={type:"getStartDate",startData:r[1]},i.endTime={data:r[2]}}return i}(Kc,e);n.raw.startTime=r.startTime,n.raw.endTime=r.endTime,n.id=r.id,n.prevTaskId=Kc,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,n.order=jc,jc++;const i=Qc.push(n);Kc=n.id,Jc[n.id]=i-1},findTaskById:tl,addTaskOrg:function(t,e){const n={section:Fc,type:Fc,description:t,task:t,classes:[]},r=function(t,e){let n;n=":"===e.substr(0,1)?e.substr(1,e.length):e;const r=n.split(","),i={};al(r,i,$c);for(let a=0;a<r.length;a++)r[a]=r[a].trim();let s="";switch(r.length){case 1:i.id=Gc(),i.startTime=t.endTime,s=r[0];break;case 2:i.id=Gc(),i.startTime=Wc(0,Ac,r[0]),s=r[1];break;case 3:i.id=Gc(r[0]),i.startTime=Wc(0,Ac,r[1]),s=r[2]}return s&&(i.endTime=Hc(i.startTime,Ac,s,Zc),i.manualEndTime=a()(s,"YYYY-MM-DD",!0).isValid(),zc(i,Ac,Dc,Nc)),i}(Xc,e);n.startTime=r.startTime,n.endTime=r.endTime,n.id=r.id,n.active=r.active,n.done=r.done,n.crit=r.crit,n.milestone=r.milestone,Xc=n,Ic.push(n)},setIncludes:function(t){Nc=t.toLowerCase().split(/[\s,]+/)},getIncludes:function(){return Nc},setExcludes:function(t){Dc=t.toLowerCase().split(/[\s,]+/)},getExcludes:function(){return Dc},setClickEvent:function(t,e,n){t.split(",").forEach((function(t){!function(t,e,n){if("loose"!==ar().securityLevel)return;if(void 0===e)return;let r=[];if("string"==typeof n){r=n.split(/,(?=(?:(?:[^"]*"){2})*[^"]*$)/);for(let t=0;t<r.length;t++){let e=r[t].trim();'"'===e.charAt(0)&&'"'===e.charAt(e.length-1)&&(e=e.substr(1,e.length-2)),r[t]=e}}0===r.length&&r.push(t),void 0!==tl(t)&&rl(t,(()=>{Gn.runFunc(e,...r)}))}(t,e,n)})),nl(t,"clickable")},setLink:function(t,e){let n=e;"loose"!==ar().securityLevel&&(n=(0,s.N)(e)),t.split(",").forEach((function(t){void 0!==tl(t)&&(rl(t,(()=>{window.open(n,"_self")})),Oc[t]=n)})),nl(t,"clickable")},getLinks:function(){return Oc},bindFunctions:function(t){Rc.forEach((function(e){e(t)}))},parseDuration:qc,isInvalidDate:Yc};function al(t,e,n){let r=!0;for(;r;)r=!1,n.forEach((function(n){const i=new RegExp("^\\s*"+n+"\\s*$");t[0].match(i)&&(e[n]=!0,t.shift(1),r=!0)}))}let sl;const ol={setConf:function(){Nt.debug("Something is calling, setConf, remove the call")},draw:function(t,e,n,r){const i=ar().gantt,s=ar().securityLevel;let c;"sandbox"===s&&(c=(0,o.Ys)("#i"+e));const l="sandbox"===s?(0,o.Ys)(c.nodes()[0].contentDocument.body):(0,o.Ys)("body"),h="sandbox"===s?c.nodes()[0].contentDocument:document,u=h.getElementById(e);sl=u.parentElement.offsetWidth,void 0===sl&&(sl=1200),void 0!==i.useWidth&&(sl=i.useWidth);const d=r.db.getTasks(),p=d.length*(i.barHeight+i.barGap)+2*i.topPadding;u.setAttribute("viewBox","0 0 "+sl+" "+p);const f=l.select(`[id="${e}"]`),g=(0,o.Xf)().domain([(0,o.VV$)(d,(function(t){return t.startTime})),(0,o.Fp7)(d,(function(t){return t.endTime}))]).rangeRound([0,sl-i.leftPadding-i.rightPadding]);let y=[];for(const a of d)y.push(a.type);const m=y;function b(t,e){return function(t){let e=t.length;const n={};for(;e;)n[t[--e]]=(n[t[e]]||0)+1;return n}(e)[t]||0}y=function(t){const e={},n=[];for(let r=0,i=t.length;r<i;++r)Object.prototype.hasOwnProperty.call(e,t[r])||(e[t[r]]=!0,n.push(t[r]));return n}(y),d.sort((function(t,e){const n=t.startTime,r=e.startTime;let i=0;return n>r?i=1:n<r&&(i=-1),i})),function(t,n,s){const c=i.barHeight,l=c+i.barGap,u=i.topPadding,d=i.leftPadding;(0,o.BYU)().domain([0,y.length]).range(["#00B9FA","#F95002"]).interpolate(o.JHv);(function(t,e,n,s,o,c,l,h){const u=c.reduce(((t,{startTime:e})=>t?Math.min(t,e):e),0),d=c.reduce(((t,{endTime:e})=>t?Math.max(t,e):e),0),p=r.db.getDateFormat();if(!u||!d)return;const y=[];let m=null,b=a()(u);for(;b.valueOf()<=d;)r.db.isInvalidDate(b,p,l,h)?m?m.end=b:m={start:b,end:b}:m&&(y.push(m),m=null),b=b.add(1,"d");f.append("g").selectAll("rect").data(y).enter().append("rect").attr("id",(function(t){return"exclude-"+t.start.format("YYYY-MM-DD")})).attr("x",(function(t){return g(t.start)+n})).attr("y",i.gridLineStartPadding).attr("width",(function(t){const e=t.end.add(1,"day");return g(e)-g(t.start)})).attr("height",o-e-i.gridLineStartPadding).attr("transform-origin",(function(e,r){return(g(e.start)+n+.5*(g(e.end)-g(e.start))).toString()+"px "+(r*t+.5*o).toString()+"px"})).attr("class","exclude-range")})(l,u,d,0,s,t,r.db.getExcludes(),r.db.getIncludes()),function(t,e,n,a){let s=(0,o.LLu)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));const c=/^([1-9]\d*)(minute|hour|day|week|month)$/.exec(r.db.getTickInterval()||i.tickInterval);if(null!==c){const t=c[1];switch(c[2]){case"minute":s.ticks(o.Z_i.every(t));break;case"hour":s.ticks(o.WQD.every(t));break;case"day":s.ticks(o.rr1.every(t));break;case"week":s.ticks(o.NGh.every(t));break;case"month":s.ticks(o.F0B.every(t))}}if(f.append("g").attr("class","grid").attr("transform","translate("+t+", "+(a-50)+")").call(s).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10).attr("dy","1em"),r.db.topAxisEnabled()||i.topAxis){let n=(0,o.F5q)(g).tickSize(-a+e+i.gridLineStartPadding).tickFormat((0,o.i$Z)(r.db.getAxisFormat()||i.axisFormat||"%Y-%m-%d"));if(null!==c){const t=c[1];switch(c[2]){case"minute":n.ticks(o.Z_i.every(t));break;case"hour":n.ticks(o.WQD.every(t));break;case"day":n.ticks(o.rr1.every(t));break;case"week":n.ticks(o.NGh.every(t));break;case"month":n.ticks(o.F0B.every(t))}}f.append("g").attr("class","grid").attr("transform","translate("+t+", "+e+")").call(n).selectAll("text").style("text-anchor","middle").attr("fill","#000").attr("stroke","none").attr("font-size",10)}}(d,u,0,s),function(t,n,a,s,c,l,h){f.append("g").selectAll("rect").data(t).enter().append("rect").attr("x",0).attr("y",(function(t,e){return t.order*n+a-2})).attr("width",(function(){return h-i.rightPadding/2})).attr("height",n).attr("class",(function(t){for(const[e,n]of y.entries())if(t.type===n)return"section section"+e%i.numberSectionStyles;return"section section0"}));const u=f.append("g").selectAll("rect").data(t).enter(),d=r.db.getLinks();u.append("rect").attr("id",(function(t){return t.id})).attr("rx",3).attr("ry",3).attr("x",(function(t){return t.milestone?g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))-.5*c:g(t.startTime)+s})).attr("y",(function(t,e){return t.order*n+a})).attr("width",(function(t){return t.milestone?c:g(t.renderEndTime||t.endTime)-g(t.startTime)})).attr("height",c).attr("transform-origin",(function(t,e){return e=t.order,(g(t.startTime)+s+.5*(g(t.endTime)-g(t.startTime))).toString()+"px "+(e*n+a+.5*c).toString()+"px"})).attr("class",(function(t){const e="task";let n="";t.classes.length>0&&(n=t.classes.join(" "));let r=0;for(const[s,o]of y.entries())t.type===o&&(r=s%i.numberSectionStyles);let a="";return t.active?t.crit?a+=" activeCrit":a=" active":t.done?a=t.crit?" doneCrit":" done":t.crit&&(a+=" crit"),0===a.length&&(a=" task"),t.milestone&&(a=" milestone "+a),a+=r,a+=" "+n,e+a})),u.append("text").attr("id",(function(t){return t.id+"-text"})).text((function(t){return t.task})).attr("font-size",i.fontSize).attr("x",(function(t){let e=g(t.startTime),n=g(t.renderEndTime||t.endTime);t.milestone&&(e+=.5*(g(t.endTime)-g(t.startTime))-.5*c),t.milestone&&(n=e+c);const r=this.getBBox().width;return r>n-e?n+r+1.5*i.leftPadding>h?e+s-5:n+s+5:(n-e)/2+e+s})).attr("y",(function(t,e){return t.order*n+i.barHeight/2+(i.fontSize/2-2)+a})).attr("text-height",c).attr("class",(function(t){const e=g(t.startTime);let n=g(t.endTime);t.milestone&&(n=e+c);const r=this.getBBox().width;let a="";t.classes.length>0&&(a=t.classes.join(" "));let s=0;for(const[c,l]of y.entries())t.type===l&&(s=c%i.numberSectionStyles);let o="";return t.active&&(o=t.crit?"activeCritText"+s:"activeText"+s),t.done?o=t.crit?o+" doneCritText"+s:o+" doneText"+s:t.crit&&(o=o+" critText"+s),t.milestone&&(o+=" milestoneText"),r>n-e?n+r+1.5*i.leftPadding>h?a+" taskTextOutsideLeft taskTextOutside"+s+" "+o:a+" taskTextOutsideRight taskTextOutside"+s+" "+o+" width-"+r:a+" taskText taskText"+s+" "+o+" width-"+r}));if("sandbox"===ar().securityLevel){let t;t=(0,o.Ys)("#i"+e);const n=t.nodes()[0].contentDocument;u.filter((function(t){return void 0!==d[t.id]})).each((function(t){var e=n.querySelector("#"+t.id),r=n.querySelector("#"+t.id+"-text");const i=e.parentNode;var a=n.createElement("a");a.setAttribute("xlink:href",d[t.id]),a.setAttribute("target","_top"),i.appendChild(a),a.appendChild(e),a.appendChild(r)}))}}(t,l,u,d,c,0,n),function(t,e){const n=[];let r=0;for(const[i,a]of y.entries())n[i]=[a,b(a,m)];f.append("g").selectAll("text").data(n).enter().append((function(t){const e=t[0].split(Yt.lineBreakRegex),n=-(e.length-1)/2,r=h.createElementNS("http://www.w3.org/2000/svg","text");r.setAttribute("dy",n+"em");for(const[i,a]of e.entries()){const t=h.createElementNS("http://www.w3.org/2000/svg","tspan");t.setAttribute("alignment-baseline","central"),t.setAttribute("x","10"),i>0&&t.setAttribute("dy","1em"),t.textContent=a,r.appendChild(t)}return r})).attr("x",10).attr("y",(function(i,a){if(!(a>0))return i[1]*t/2+e;for(let s=0;s<a;s++)return r+=n[a-1][1],i[1]*t/2+r*t+e})).attr("font-size",i.sectionFontSize).attr("font-size",i.sectionFontSize).attr("class",(function(t){for(const[e,n]of y.entries())if(t[0]===n)return"sectionTitle sectionTitle"+e%i.numberSectionStyles;return"sectionTitle"}))}(l,u),function(t,e,n,a){const s=r.db.getTodayMarker();if("off"===s)return;const o=f.append("g").attr("class","today"),c=new Date,l=o.append("line");l.attr("x1",g(c)+t).attr("x2",g(c)+t).attr("y1",i.titleTopMargin).attr("y2",a-i.titleTopMargin).attr("class","today"),""!==s&&l.attr("style",s.replace(/,/g,";"))}(d,0,0,s)}(d,sl,p),dr(f,p,sl,i.useMaxWidth),f.append("text").text(r.db.getDiagramTitle()).attr("x",sl/2).attr("y",i.titleTopMargin).attr("class","titleText")}};var cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[6,9,10],r={trace:function(){},yy:{},symbols_:{error:2,start:3,info:4,document:5,EOF:6,line:7,statement:8,NL:9,showInfo:10,$accept:0,$end:1},terminals_:{2:"error",4:"info",6:"EOF",9:"NL",10:"showInfo"},productions_:[0,[3,3],[5,0],[5,2],[7,1],[7,1],[8,1]],performAction:function(t,e,n,r,i,a,s){switch(a.length,i){case 1:return r;case 4:break;case 6:r.setInfo(!0)}},table:[{3:1,4:[1,2]},{1:[3]},e(n,[2,2],{5:3}),{6:[1,4],7:5,8:6,9:[1,7],10:[1,8]},{1:[2,1]},e(n,[2,3]),e(n,[2,4]),e(n,[2,5]),e(n,[2,6])],defaultActions:{4:[2,1]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},i=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 4;case 1:return 9;case 2:return"space";case 3:return 10;case 4:return 6;case 5:return"TXT"}},rules:[/^(?:info\b)/i,/^(?:[\s\n\r]+)/i,/^(?:[\s]+)/i,/^(?:showInfo\b)/i,/^(?:$)/i,/^(?:.)/i],conditions:{INITIAL:{rules:[0,1,2,3,4,5],inclusive:!0}}},t);function a(){this.yy={}}return r.lexer=i,a.prototype=r,r.Parser=a,new a}();cl.parser=cl;const ll=cl;var hl="",ul=!1;const dl={setMessage:t=>{Nt.debug("Setting message to: "+t),hl=t},getMessage:()=>hl,setInfo:t=>{ul=t},getInfo:()=>ul,clear:Dr},pl={draw:(t,e,n)=>{try{Nt.debug("Rendering info diagram\n"+t);const r=ar().securityLevel;let i;"sandbox"===r&&(i=(0,o.Ys)("#i"+e));const a=("sandbox"===r?(0,o.Ys)(i.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select("#"+e);a.append("g").append("text").attr("x",100).attr("y",40).attr("class","version").attr("font-size","32px").style("text-anchor","middle").text("v "+n),a.attr("height",100),a.attr("width",400)}catch(r){Nt.error("Error while rendering info diagram"),Nt.error(r.message)}}},fl=t=>null!==t.match(/^\s*info/);var gl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,4],r=[1,5],i=[1,6],a=[1,7],s=[1,9],o=[1,11,13,15,17,19,20,26,27,28,29],c=[2,5],l=[1,6,11,13,15,17,19,20,26,27,28,29],h=[26,27,28],u=[2,8],d=[1,18],p=[1,19],f=[1,20],g=[1,21],y=[1,22],m=[1,23],b=[1,28],_=[6,26,27,28,29],x={trace:function(){},yy:{},symbols_:{error:2,start:3,eol:4,directive:5,PIE:6,document:7,showData:8,line:9,statement:10,txt:11,value:12,title:13,title_value:14,acc_title:15,acc_title_value:16,acc_descr:17,acc_descr_value:18,acc_descr_multiline_value:19,section:20,openDirective:21,typeDirective:22,closeDirective:23,":":24,argDirective:25,NEWLINE:26,";":27,EOF:28,open_directive:29,type_directive:30,arg_directive:31,close_directive:32,$accept:0,$end:1},terminals_:{2:"error",6:"PIE",8:"showData",11:"txt",12:"value",13:"title",14:"title_value",15:"acc_title",16:"acc_title_value",17:"acc_descr",18:"acc_descr_value",19:"acc_descr_multiline_value",20:"section",24:":",26:"NEWLINE",27:";",28:"EOF",29:"open_directive",30:"type_directive",31:"arg_directive",32:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,3],[7,0],[7,2],[9,2],[10,0],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,1],[5,3],[5,5],[4,1],[4,1],[4,1],[21,1],[22,1],[25,1],[23,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:r.setShowData(!0);break;case 7:this.$=a[o-1];break;case 9:r.addSection(a[o-1],r.cleanupValue(a[o]));break;case 10:this.$=a[o].trim(),r.setDiagramTitle(this.$);break;case 11:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 12:case 13:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 14:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 21:r.parseDirective("%%{","open_directive");break;case 22:r.parseDirective(a[o],"type_directive");break;case 23:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 24:r.parseDirective("}%%","close_directive","pie")}},table:[{3:1,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{1:[3]},{3:10,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},{3:11,4:2,5:3,6:n,21:8,26:r,27:i,28:a,29:s},e(o,c,{7:12,8:[1,13]}),e(l,[2,18]),e(l,[2,19]),e(l,[2,20]),{22:14,30:[1,15]},{30:[2,21]},{1:[2,1]},{1:[2,2]},e(h,u,{21:8,9:16,10:17,5:24,1:[2,3],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(o,c,{7:25}),{23:26,24:[1,27],32:b},e([24,32],[2,22]),e(o,[2,6]),{4:29,26:r,27:i,28:a},{12:[1,30]},{14:[1,31]},{16:[1,32]},{18:[1,33]},e(h,[2,13]),e(h,[2,14]),e(h,[2,15]),e(h,u,{21:8,9:16,10:17,5:24,1:[2,4],11:d,13:p,15:f,17:g,19:y,20:m,29:s}),e(_,[2,16]),{25:34,31:[1,35]},e(_,[2,24]),e(o,[2,7]),e(h,[2,9]),e(h,[2,10]),e(h,[2,11]),e(h,[2,12]),{23:36,32:b},{32:[2,23]},e(_,[2,17])],defaultActions:{9:[2,21],10:[2,1],11:[2,2],35:[2,23]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},v=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),29;case 1:return this.begin("type_directive"),30;case 2:return this.popState(),this.begin("arg_directive"),24;case 3:return this.popState(),this.popState(),32;case 4:return 31;case 5:case 6:case 8:case 9:break;case 7:return 26;case 10:return this.begin("title"),13;case 11:return this.popState(),"title_value";case 12:return this.begin("acc_title"),15;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),17;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:case 20:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:this.begin("string");break;case 21:return"txt";case 22:return 6;case 23:return 8;case 24:return"value";case 25:return 28}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n\r]+)/i,/^(?:%%[^\n]*)/i,/^(?:[\s]+)/i,/^(?:title\b)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:pie\b)/i,/^(?:showData\b)/i,/^(?::[\s]*[\d]+(?:\.[\d]+)?)/i,/^(?:$)/i],conditions:{acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},title:{rules:[11],inclusive:!1},string:{rules:[20,21],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,12,14,16,19,22,23,24,25],inclusive:!0}}},t);function k(){this.yy={}}return x.lexer=v,k.prototype=x,x.Parser=k,new k}();gl.parser=gl;const yl=gl,ml=t=>null!==t.match(/^\s*pie/)||null!==t.match(/^\s*bar/);let bl={},_l=!1;const xl={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().pie,addSection:function(t,e){t=Yt.sanitizeText(t,ar()),void 0===bl[t]&&(bl[t]=e,Nt.debug("Added new section :",t))},getSections:()=>bl,cleanupValue:function(t){return":"===t.substring(0,1)?(t=t.substring(1).trim(),Number(t.trim())):Number(t.trim())},clear:function(){bl={},_l=!1,Dr()},setAccTitle:Or,getAccTitle:Mr,setDiagramTitle:$r,getDiagramTitle:Rr,setShowData:function(t){_l=t},getShowData:function(){return _l},getAccDescription:Fr,setAccDescription:Ir};let vl,kl=ar();const wl=450,El={draw:(t,e,n,r)=>{try{kl=ar(),Nt.debug("Rendering info diagram\n"+t);const n=ar().securityLevel;let y;"sandbox"===n&&(y=(0,o.Ys)("#i"+e));const m="sandbox"===n?(0,o.Ys)(y.nodes()[0].contentDocument.body):(0,o.Ys)("body"),b="sandbox"===n?y.nodes()[0].contentDocument:document;r.db.clear(),r.parser.parse(t),Nt.debug("Parsed info diagram");const _=b.getElementById(e);vl=_.parentElement.offsetWidth,void 0===vl&&(vl=1200),void 0!==kl.useWidth&&(vl=kl.useWidth),void 0!==kl.pie.useWidth&&(vl=kl.pie.useWidth);const x=m.select("#"+e);dr(x,wl,vl,kl.pie.useMaxWidth),_.setAttribute("viewBox","0 0 "+vl+" "+wl);var i=18,a=Math.min(vl,wl)/2-40,s=x.append("g").attr("transform","translate("+vl/2+",225)"),c=r.db.getSections(),l=0;Object.keys(c).forEach((function(t){l+=c[t]}));const v=kl.themeVariables;var h=[v.pie1,v.pie2,v.pie3,v.pie4,v.pie5,v.pie6,v.pie7,v.pie8,v.pie9,v.pie10,v.pie11,v.pie12],u=(0,o.PKp)().range(h),d=Object.entries(c).map((function(t,e){return{order:e,name:t[0],value:t[1]}})),p=(0,o.ve8)().value((function(t){return t.value})).sort((function(t,e){return t.order-e.order}))(d),f=(0,o.Nb1)().innerRadius(0).outerRadius(a);s.selectAll("mySlices").data(p).enter().append("path").attr("d",f).attr("fill",(function(t){return u(t.data.name)})).attr("class","pieCircle"),s.selectAll("mySlices").data(p).enter().append("text").text((function(t){return(t.data.value/l*100).toFixed(0)+"%"})).attr("transform",(function(t){return"translate("+f.centroid(t)+")"})).style("text-anchor","middle").attr("class","slice"),s.append("text").text(r.db.getDiagramTitle()).attr("x",0).attr("y",-200).attr("class","pieTitleText");var g=s.selectAll(".legend").data(u.domain()).enter().append("g").attr("class","legend").attr("transform",(function(t,e){return"translate(216,"+(22*e-22*u.domain().length/2)+")"}));g.append("rect").attr("width",i).attr("height",i).style("fill",u).style("stroke",u),g.data(p).append("text").attr("x",22).attr("y",14).text((function(t){return r.db.getShowData()||kl.showData||kl.pie.showData?t.data.name+" ["+t.data.value+"]":t.data.name}))}catch(y){Nt.error("Error while rendering info diagram"),Nt.error(y)}}};var Cl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,3],r=[1,5],i=[1,6],a=[1,7],s=[1,8],o=[5,6,8,14,16,18,19,40,41,42,43,44,45,53,71,72],c=[1,22],l=[2,13],h=[1,26],u=[1,27],d=[1,28],p=[1,29],f=[1,30],g=[1,31],y=[1,24],m=[1,32],b=[1,33],_=[1,36],x=[71,72],v=[5,8,14,16,18,19,40,41,42,43,44,45,53,60,62,71,72],k=[1,56],w=[1,57],E=[1,58],C=[1,59],T=[1,60],S=[1,61],A=[1,62],L=[62,63],B=[1,74],N=[1,70],D=[1,71],O=[1,72],M=[1,73],I=[1,75],F=[1,79],$=[1,80],R=[1,77],Z=[1,78],P=[5,8,14,16,18,19,40,41,42,43,44,45,53,71,72],j={trace:function(){},yy:{},symbols_:{error:2,start:3,directive:4,NEWLINE:5,RD:6,diagram:7,EOF:8,openDirective:9,typeDirective:10,closeDirective:11,":":12,argDirective:13,acc_title:14,acc_title_value:15,acc_descr:16,acc_descr_value:17,acc_descr_multiline_value:18,open_directive:19,type_directive:20,arg_directive:21,close_directive:22,requirementDef:23,elementDef:24,relationshipDef:25,requirementType:26,requirementName:27,STRUCT_START:28,requirementBody:29,ID:30,COLONSEP:31,id:32,TEXT:33,text:34,RISK:35,riskLevel:36,VERIFYMTHD:37,verifyType:38,STRUCT_STOP:39,REQUIREMENT:40,FUNCTIONAL_REQUIREMENT:41,INTERFACE_REQUIREMENT:42,PERFORMANCE_REQUIREMENT:43,PHYSICAL_REQUIREMENT:44,DESIGN_CONSTRAINT:45,LOW_RISK:46,MED_RISK:47,HIGH_RISK:48,VERIFY_ANALYSIS:49,VERIFY_DEMONSTRATION:50,VERIFY_INSPECTION:51,VERIFY_TEST:52,ELEMENT:53,elementName:54,elementBody:55,TYPE:56,type:57,DOCREF:58,ref:59,END_ARROW_L:60,relationship:61,LINE:62,END_ARROW_R:63,CONTAINS:64,COPIES:65,DERIVES:66,SATISFIES:67,VERIFIES:68,REFINES:69,TRACES:70,unqString:71,qString:72,$accept:0,$end:1},terminals_:{2:"error",5:"NEWLINE",6:"RD",8:"EOF",12:":",14:"acc_title",15:"acc_title_value",16:"acc_descr",17:"acc_descr_value",18:"acc_descr_multiline_value",19:"open_directive",20:"type_directive",21:"arg_directive",22:"close_directive",28:"STRUCT_START",30:"ID",31:"COLONSEP",33:"TEXT",35:"RISK",37:"VERIFYMTHD",39:"STRUCT_STOP",40:"REQUIREMENT",41:"FUNCTIONAL_REQUIREMENT",42:"INTERFACE_REQUIREMENT",43:"PERFORMANCE_REQUIREMENT",44:"PHYSICAL_REQUIREMENT",45:"DESIGN_CONSTRAINT",46:"LOW_RISK",47:"MED_RISK",48:"HIGH_RISK",49:"VERIFY_ANALYSIS",50:"VERIFY_DEMONSTRATION",51:"VERIFY_INSPECTION",52:"VERIFY_TEST",53:"ELEMENT",56:"TYPE",58:"DOCREF",60:"END_ARROW_L",62:"LINE",63:"END_ARROW_R",64:"CONTAINS",65:"COPIES",66:"DERIVES",67:"SATISFIES",68:"VERIFIES",69:"REFINES",70:"TRACES",71:"unqString",72:"qString"},productions_:[0,[3,3],[3,2],[3,4],[4,3],[4,5],[4,2],[4,2],[4,1],[9,1],[10,1],[13,1],[11,1],[7,0],[7,2],[7,2],[7,2],[7,2],[7,2],[23,5],[29,5],[29,5],[29,5],[29,5],[29,2],[29,1],[26,1],[26,1],[26,1],[26,1],[26,1],[26,1],[36,1],[36,1],[36,1],[38,1],[38,1],[38,1],[38,1],[24,5],[55,5],[55,5],[55,2],[55,1],[25,5],[25,5],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[61,1],[27,1],[27,1],[32,1],[32,1],[34,1],[34,1],[54,1],[54,1],[57,1],[57,1],[59,1],[59,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 6:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 7:case 8:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 9:r.parseDirective("%%{","open_directive");break;case 10:r.parseDirective(a[o],"type_directive");break;case 11:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 12:r.parseDirective("}%%","close_directive","pie");break;case 13:this.$=[];break;case 19:r.addRequirement(a[o-3],a[o-4]);break;case 20:r.setNewReqId(a[o-2]);break;case 21:r.setNewReqText(a[o-2]);break;case 22:r.setNewReqRisk(a[o-2]);break;case 23:r.setNewReqVerifyMethod(a[o-2]);break;case 26:this.$=r.RequirementType.REQUIREMENT;break;case 27:this.$=r.RequirementType.FUNCTIONAL_REQUIREMENT;break;case 28:this.$=r.RequirementType.INTERFACE_REQUIREMENT;break;case 29:this.$=r.RequirementType.PERFORMANCE_REQUIREMENT;break;case 30:this.$=r.RequirementType.PHYSICAL_REQUIREMENT;break;case 31:this.$=r.RequirementType.DESIGN_CONSTRAINT;break;case 32:this.$=r.RiskLevel.LOW_RISK;break;case 33:this.$=r.RiskLevel.MED_RISK;break;case 34:this.$=r.RiskLevel.HIGH_RISK;break;case 35:this.$=r.VerifyType.VERIFY_ANALYSIS;break;case 36:this.$=r.VerifyType.VERIFY_DEMONSTRATION;break;case 37:this.$=r.VerifyType.VERIFY_INSPECTION;break;case 38:this.$=r.VerifyType.VERIFY_TEST;break;case 39:r.addElement(a[o-3]);break;case 40:r.setNewElementType(a[o-2]);break;case 41:r.setNewElementDocRef(a[o-2]);break;case 44:r.addRelationship(a[o-2],a[o],a[o-4]);break;case 45:r.addRelationship(a[o-2],a[o-4],a[o]);break;case 46:this.$=r.Relationships.CONTAINS;break;case 47:this.$=r.Relationships.COPIES;break;case 48:this.$=r.Relationships.DERIVES;break;case 49:this.$=r.Relationships.SATISFIES;break;case 50:this.$=r.Relationships.VERIFIES;break;case 51:this.$=r.Relationships.REFINES;break;case 52:this.$=r.Relationships.TRACES}},table:[{3:1,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[3]},{3:10,4:2,5:[1,9],6:n,9:4,14:r,16:i,18:a,19:s},{5:[1,11]},{10:12,20:[1,13]},{15:[1,14]},{17:[1,15]},e(o,[2,8]),{20:[2,9]},{3:16,4:2,6:n,9:4,14:r,16:i,18:a,19:s},{1:[2,2]},{4:21,5:c,7:17,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{11:34,12:[1,35],22:_},e([12,22],[2,10]),e(o,[2,6]),e(o,[2,7]),{1:[2,1]},{8:[1,37]},{4:21,5:c,7:38,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:39,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:40,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:41,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{4:21,5:c,7:42,8:l,9:4,14:r,16:i,18:a,19:s,23:18,24:19,25:20,26:23,32:25,40:h,41:u,42:d,43:p,44:f,45:g,53:y,71:m,72:b},{27:43,71:[1,44],72:[1,45]},{54:46,71:[1,47],72:[1,48]},{60:[1,49],62:[1,50]},e(x,[2,26]),e(x,[2,27]),e(x,[2,28]),e(x,[2,29]),e(x,[2,30]),e(x,[2,31]),e(v,[2,55]),e(v,[2,56]),e(o,[2,4]),{13:51,21:[1,52]},e(o,[2,12]),{1:[2,3]},{8:[2,14]},{8:[2,15]},{8:[2,16]},{8:[2,17]},{8:[2,18]},{28:[1,53]},{28:[2,53]},{28:[2,54]},{28:[1,54]},{28:[2,59]},{28:[2,60]},{61:55,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{61:63,64:k,65:w,66:E,67:C,68:T,69:S,70:A},{11:64,22:_},{22:[2,11]},{5:[1,65]},{5:[1,66]},{62:[1,67]},e(L,[2,46]),e(L,[2,47]),e(L,[2,48]),e(L,[2,49]),e(L,[2,50]),e(L,[2,51]),e(L,[2,52]),{63:[1,68]},e(o,[2,5]),{5:B,29:69,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:76,56:R,58:Z},{32:81,71:m,72:b},{32:82,71:m,72:b},e(P,[2,19]),{31:[1,83]},{31:[1,84]},{31:[1,85]},{31:[1,86]},{5:B,29:87,30:N,33:D,35:O,37:M,39:I},e(P,[2,25]),e(P,[2,39]),{31:[1,88]},{31:[1,89]},{5:F,39:$,55:90,56:R,58:Z},e(P,[2,43]),e(P,[2,44]),e(P,[2,45]),{32:91,71:m,72:b},{34:92,71:[1,93],72:[1,94]},{36:95,46:[1,96],47:[1,97],48:[1,98]},{38:99,49:[1,100],50:[1,101],51:[1,102],52:[1,103]},e(P,[2,24]),{57:104,71:[1,105],72:[1,106]},{59:107,71:[1,108],72:[1,109]},e(P,[2,42]),{5:[1,110]},{5:[1,111]},{5:[2,57]},{5:[2,58]},{5:[1,112]},{5:[2,32]},{5:[2,33]},{5:[2,34]},{5:[1,113]},{5:[2,35]},{5:[2,36]},{5:[2,37]},{5:[2,38]},{5:[1,114]},{5:[2,61]},{5:[2,62]},{5:[1,115]},{5:[2,63]},{5:[2,64]},{5:B,29:116,30:N,33:D,35:O,37:M,39:I},{5:B,29:117,30:N,33:D,35:O,37:M,39:I},{5:B,29:118,30:N,33:D,35:O,37:M,39:I},{5:B,29:119,30:N,33:D,35:O,37:M,39:I},{5:F,39:$,55:120,56:R,58:Z},{5:F,39:$,55:121,56:R,58:Z},e(P,[2,20]),e(P,[2,21]),e(P,[2,22]),e(P,[2,23]),e(P,[2,40]),e(P,[2,41])],defaultActions:{8:[2,9],10:[2,2],16:[2,1],37:[2,3],38:[2,14],39:[2,15],40:[2,16],41:[2,17],42:[2,18],44:[2,53],45:[2,54],47:[2,59],48:[2,60],52:[2,11],93:[2,57],94:[2,58],96:[2,32],97:[2,33],98:[2,34],100:[2,35],101:[2,36],102:[2,37],103:[2,38],105:[2,61],106:[2,62],108:[2,63],109:[2,64]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},Y=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),19;case 1:return this.begin("type_directive"),20;case 2:return this.popState(),this.begin("arg_directive"),12;case 3:return this.popState(),this.popState(),22;case 4:return 21;case 5:return"title";case 6:return this.begin("acc_title"),14;case 7:return this.popState(),"acc_title_value";case 8:return this.begin("acc_descr"),16;case 9:return this.popState(),"acc_descr_value";case 10:this.begin("acc_descr_multiline");break;case 11:case 53:this.popState();break;case 12:return"acc_descr_multiline_value";case 13:return 5;case 14:case 15:case 16:break;case 17:return 8;case 18:return 6;case 19:return 28;case 20:return 39;case 21:return 31;case 22:return 30;case 23:return 33;case 24:return 35;case 25:return 37;case 26:return 40;case 27:return 41;case 28:return 42;case 29:return 43;case 30:return 44;case 31:return 45;case 32:return 46;case 33:return 47;case 34:return 48;case 35:return 49;case 36:return 50;case 37:return 51;case 38:return 52;case 39:return 53;case 40:return 64;case 41:return 65;case 42:return 66;case 43:return 67;case 44:return 68;case 45:return 69;case 46:return 70;case 47:return 56;case 48:return 58;case 49:return 60;case 50:return 63;case 51:return 62;case 52:this.begin("string");break;case 54:return"qString";case 55:return e.yytext=e.yytext.trim(),71}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:(\r?\n)+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:$)/i,/^(?:requirementDiagram\b)/i,/^(?:\{)/i,/^(?:\})/i,/^(?::)/i,/^(?:id\b)/i,/^(?:text\b)/i,/^(?:risk\b)/i,/^(?:verifyMethod\b)/i,/^(?:requirement\b)/i,/^(?:functionalRequirement\b)/i,/^(?:interfaceRequirement\b)/i,/^(?:performanceRequirement\b)/i,/^(?:physicalRequirement\b)/i,/^(?:designConstraint\b)/i,/^(?:low\b)/i,/^(?:medium\b)/i,/^(?:high\b)/i,/^(?:analysis\b)/i,/^(?:demonstration\b)/i,/^(?:inspection\b)/i,/^(?:test\b)/i,/^(?:element\b)/i,/^(?:contains\b)/i,/^(?:copies\b)/i,/^(?:derives\b)/i,/^(?:satisfies\b)/i,/^(?:verifies\b)/i,/^(?:refines\b)/i,/^(?:traces\b)/i,/^(?:type\b)/i,/^(?:docref\b)/i,/^(?:<-)/i,/^(?:->)/i,/^(?:-)/i,/^(?:["])/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[\w][^\r\n\{\<\>\-\=]*)/i],conditions:{acc_descr_multiline:{rules:[11,12],inclusive:!1},acc_descr:{rules:[9],inclusive:!1},acc_title:{rules:[7],inclusive:!1},close_directive:{rules:[],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},open_directive:{rules:[1],inclusive:!1},unqString:{rules:[],inclusive:!1},token:{rules:[],inclusive:!1},string:{rules:[53,54],inclusive:!1},INITIAL:{rules:[0,5,6,8,10,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,55],inclusive:!0}}},t);function z(){this.yy={}}return j.lexer=Y,z.prototype=j,j.Parser=z,new z}();Cl.parser=Cl;const Tl=Cl,Sl=t=>null!==t.match(/^\s*requirement(Diagram)?/);let Al=[],Ll={},Bl={},Nl={},Dl={};const Ol={RequirementType:{REQUIREMENT:"Requirement",FUNCTIONAL_REQUIREMENT:"Functional Requirement",INTERFACE_REQUIREMENT:"Interface Requirement",PERFORMANCE_REQUIREMENT:"Performance Requirement",PHYSICAL_REQUIREMENT:"Physical Requirement",DESIGN_CONSTRAINT:"Design Constraint"},RiskLevel:{LOW_RISK:"Low",MED_RISK:"Medium",HIGH_RISK:"High"},VerifyType:{VERIFY_ANALYSIS:"Analysis",VERIFY_DEMONSTRATION:"Demonstration",VERIFY_INSPECTION:"Inspection",VERIFY_TEST:"Test"},Relationships:{CONTAINS:"contains",COPIES:"copies",DERIVES:"derives",SATISFIES:"satisfies",VERIFIES:"verifies",REFINES:"refines",TRACES:"traces"},parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().req,addRequirement:(t,e)=>(void 0===Bl[t]&&(Bl[t]={name:t,type:e,id:Ll.id,text:Ll.text,risk:Ll.risk,verifyMethod:Ll.verifyMethod}),Ll={},Bl[t]),getRequirements:()=>Bl,setNewReqId:t=>{void 0!==Ll&&(Ll.id=t)},setNewReqText:t=>{void 0!==Ll&&(Ll.text=t)},setNewReqRisk:t=>{void 0!==Ll&&(Ll.risk=t)},setNewReqVerifyMethod:t=>{void 0!==Ll&&(Ll.verifyMethod=t)},setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addElement:t=>(void 0===Dl[t]&&(Dl[t]={name:t,type:Nl.type,docRef:Nl.docRef},Nt.info("Added new requirement: ",t)),Nl={},Dl[t]),getElements:()=>Dl,setNewElementType:t=>{void 0!==Nl&&(Nl.type=t)},setNewElementDocRef:t=>{void 0!==Nl&&(Nl.docRef=t)},addRelationship:(t,e,n)=>{Al.push({type:t,src:e,dst:n})},getRelationships:()=>Al,clear:()=>{Al=[],Ll={},Bl={},Nl={},Dl={},Dr()}},Ml={CONTAINS:"contains",ARROW:"arrow"},Il=Ml,Fl=(t,e)=>{let n=t.append("defs").append("marker").attr("id",Ml.CONTAINS+"_line_ending").attr("refX",0).attr("refY",e.line_height/2).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("g");n.append("circle").attr("cx",e.line_height/2).attr("cy",e.line_height/2).attr("r",e.line_height/2).attr("fill","none"),n.append("line").attr("x1",0).attr("x2",e.line_height).attr("y1",e.line_height/2).attr("y2",e.line_height/2).attr("stroke-width",1),n.append("line").attr("y1",0).attr("y2",e.line_height).attr("x1",e.line_height/2).attr("x2",e.line_height/2).attr("stroke-width",1),t.append("defs").append("marker").attr("id",Ml.ARROW+"_line_ending").attr("refX",e.line_height).attr("refY",.5*e.line_height).attr("markerWidth",e.line_height).attr("markerHeight",e.line_height).attr("orient","auto").append("path").attr("d",`M0,0\n      L${e.line_height},${e.line_height/2}\n      M${e.line_height},${e.line_height/2}\n      L0,${e.line_height}`).attr("stroke-width",1)};let $l={},Rl=0;const Zl=(t,e)=>t.insert("rect","#"+e).attr("class","req reqBox").attr("x",0).attr("y",0).attr("width",$l.rect_min_width+"px").attr("height",$l.rect_min_height+"px"),Pl=(t,e,n)=>{let r=$l.rect_min_width/2,i=t.append("text").attr("class","req reqLabel reqTitle").attr("id",e).attr("x",r).attr("y",$l.rect_padding).attr("dominant-baseline","hanging"),a=0;n.forEach((t=>{0==a?i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",0).text(t):i.append("tspan").attr("text-anchor","middle").attr("x",$l.rect_min_width/2).attr("dy",.75*$l.line_height).text(t),a++}));let s=1.5*$l.rect_padding+a*$l.line_height*.75;return t.append("line").attr("class","req-title-line").attr("x1","0").attr("x2",$l.rect_min_width).attr("y1",s).attr("y2",s),{titleNode:i,y:s}},jl=(t,e,n,r)=>{let i=t.append("text").attr("class","req reqLabel").attr("id",e).attr("x",$l.rect_padding).attr("y",r).attr("dominant-baseline","hanging"),a=0;let s=[];return n.forEach((t=>{let e=t.length;for(;e>30&&a<3;){let n=t.substring(0,30);e=(t=t.substring(30,t.length)).length,s[s.length]=n,a++}if(3==a){let t=s[s.length-1];s[s.length-1]=t.substring(0,t.length-4)+"..."}else s[s.length]=t;a=0})),s.forEach((t=>{i.append("tspan").attr("x",$l.rect_padding).attr("dy",$l.line_height).text(t)})),i},Yl=function(t,e,n,r,i){const a=n.edge(zl(e.src),zl(e.dst)),s=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})),c=t.insert("path","#"+r).attr("class","er relationshipLine").attr("d",s(a.points)).attr("fill","none");e.type==i.db.Relationships.CONTAINS?c.attr("marker-start","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+e.type+"_line_ending)"):(c.attr("stroke-dasharray","10,7"),c.attr("marker-end","url("+Yt.getUrl($l.arrowMarkerAbsolute)+"#"+Il.ARROW+"_line_ending)")),((t,e,n,r)=>{const i=e.node().getTotalLength(),a=e.node().getPointAtLength(.5*i),s="rel"+Rl;Rl++;const o=t.append("text").attr("class","req relationshipLabel").attr("id",s).attr("x",a.x).attr("y",a.y).attr("text-anchor","middle").attr("dominant-baseline","middle").text(r).node().getBBox();t.insert("rect","#"+s).attr("class","req reqLabelBox").attr("x",a.x-o.width/2).attr("y",a.y-o.height/2).attr("width",o.width).attr("height",o.height).attr("fill","white").attr("fill-opacity","85%")})(t,c,0,`<<${e.type}>>`)},zl=t=>t.replace(/\s/g,"").replace(/\./g,"_"),Ul={draw:(t,e,n,r)=>{$l=ar().requirement,r.db.clear(),r.parser.parse(t);const i=$l.securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s=("sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body")).select(`[id='${e}']`);Fl(s,$l);const c=new ht.k({multigraph:!1,compound:!1,directed:!0}).setGraph({rankdir:$l.layoutDirection,marginx:20,marginy:20,nodesep:100,edgesep:100,ranksep:100}).setDefaultEdgeLabel((function(){return{}}));let l=r.db.getRequirements(),h=r.db.getElements(),u=r.db.getRelationships();var d,p,f;d=l,p=c,f=s,Object.keys(d).forEach((t=>{let e=d[t];t=zl(t),Nt.info("Added new requirement: ",t);const n=f.append("g").attr("id",t),r=Zl(n,"req-"+t);let i=Pl(n,t+"_title",[`<<${e.type}>>`,`${e.name}`]);jl(n,t+"_body",[`Id: ${e.id}`,`Text: ${e.text}`,`Risk: ${e.risk}`,`Verification: ${e.verifyMethod}`],i.y);const a=r.node().getBBox();p.setNode(t,{width:a.width,height:a.height,shape:"rect",id:t})})),((t,e,n)=>{Object.keys(t).forEach((r=>{let i=t[r];const a=zl(r),s=n.append("g").attr("id",a),o="element-"+a,c=Zl(s,o);let l=Pl(s,o+"_title",["<<Element>>",`${r}`]);jl(s,o+"_body",[`Type: ${i.type||"Not Specified"}`,`Doc Ref: ${i.docRef||"None"}`],l.y);const h=c.node().getBBox();e.setNode(a,{width:h.width,height:h.height,shape:"rect",id:a})}))})(h,c,s),((t,e)=>{t.forEach((function(t){let n=zl(t.src),r=zl(t.dst);e.setEdge(n,r,{relationship:t})}))})(u,c),(0,lt.bK)(c),function(t,e){e.nodes().forEach((function(n){void 0!==n&&void 0!==e.node(n)&&(t.select("#"+n),t.select("#"+n).attr("transform","translate("+(e.node(n).x-e.node(n).width/2)+","+(e.node(n).y-e.node(n).height/2)+" )"))}))}(s,c),u.forEach((function(t){Yl(s,t,c,e,r)}));const g=$l.rect_padding,y=s.node().getBBox(),m=y.width+2*g,b=y.height+2*g;dr(s,b,m,$l.useMaxWidth),s.attr("viewBox",`${y.x-g} ${y.y-g} ${m} ${b}`)}};var Wl=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,19],h=[1,21],u=[1,22],d=[1,23],p=[1,29],f=[1,30],g=[1,31],y=[1,32],m=[1,33],b=[1,34],_=[1,35],x=[1,36],v=[1,37],k=[1,38],w=[1,39],E=[1,40],C=[1,42],T=[1,43],S=[1,45],A=[1,46],L=[1,47],B=[1,48],N=[1,49],D=[1,50],O=[1,53],M=[1,4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],I=[4,5,21,54,56],F=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],$=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,53,54,56,57,62,63,64,65,73,83],R=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,52,54,56,57,62,63,64,65,73,83],Z=[4,5,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,54,56,57,62,63,64,65,73,83],P=[71,72,73],j=[1,125],Y=[1,4,5,7,19,21,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,51,52,53,54,56,57,62,63,64,65,73,83],z={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NEWLINE:5,directive:6,SD:7,document:8,line:9,statement:10,box_section:11,box_line:12,participant_statement:13,openDirective:14,typeDirective:15,closeDirective:16,":":17,argDirective:18,box:19,restOfLine:20,end:21,signal:22,autonumber:23,NUM:24,off:25,activate:26,actor:27,deactivate:28,note_statement:29,links_statement:30,link_statement:31,properties_statement:32,details_statement:33,title:34,legacy_title:35,acc_title:36,acc_title_value:37,acc_descr:38,acc_descr_value:39,acc_descr_multiline_value:40,loop:41,rect:42,opt:43,alt:44,else_sections:45,par:46,par_sections:47,critical:48,option_sections:49,break:50,option:51,and:52,else:53,participant:54,AS:55,participant_actor:56,note:57,placement:58,text2:59,over:60,actor_pair:61,links:62,link:63,properties:64,details:65,spaceList:66,",":67,left_of:68,right_of:69,signaltype:70,"+":71,"-":72,ACTOR:73,SOLID_OPEN_ARROW:74,DOTTED_OPEN_ARROW:75,SOLID_ARROW:76,DOTTED_ARROW:77,SOLID_CROSS:78,DOTTED_CROSS:79,SOLID_POINT:80,DOTTED_POINT:81,TXT:82,open_directive:83,type_directive:84,arg_directive:85,close_directive:86,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NEWLINE",7:"SD",17:":",19:"box",20:"restOfLine",21:"end",23:"autonumber",24:"NUM",25:"off",26:"activate",28:"deactivate",34:"title",35:"legacy_title",36:"acc_title",37:"acc_title_value",38:"acc_descr",39:"acc_descr_value",40:"acc_descr_multiline_value",41:"loop",42:"rect",43:"opt",44:"alt",46:"par",48:"critical",50:"break",51:"option",52:"and",53:"else",54:"participant",55:"AS",56:"participant_actor",57:"note",60:"over",62:"links",63:"link",64:"properties",65:"details",67:",",68:"left_of",69:"right_of",71:"+",72:"-",73:"ACTOR",74:"SOLID_OPEN_ARROW",75:"DOTTED_OPEN_ARROW",76:"SOLID_ARROW",77:"DOTTED_ARROW",78:"SOLID_CROSS",79:"DOTTED_CROSS",80:"SOLID_POINT",81:"DOTTED_POINT",82:"TXT",83:"open_directive",84:"type_directive",85:"arg_directive",86:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[11,0],[11,2],[12,2],[12,1],[12,1],[6,4],[6,6],[10,1],[10,4],[10,2],[10,4],[10,3],[10,3],[10,2],[10,3],[10,3],[10,2],[10,2],[10,2],[10,2],[10,2],[10,1],[10,1],[10,2],[10,2],[10,1],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,4],[10,1],[49,1],[49,4],[47,1],[47,4],[45,1],[45,4],[13,5],[13,3],[13,5],[13,3],[29,4],[29,4],[30,3],[31,3],[32,3],[33,3],[66,2],[66,1],[61,3],[61,1],[58,1],[58,1],[22,5],[22,5],[22,4],[27,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[70,1],[59,1],[14,1],[15,1],[18,1],[16,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.apply(a[o]),a[o];case 5:case 10:case 9:case 14:this.$=[];break;case 6:case 11:a[o-1].push(a[o]),this.$=a[o-1];break;case 7:case 8:case 12:case 13:case 63:this.$=a[o];break;case 18:a[o-1].unshift({type:"boxStart",boxData:r.parseBoxData(a[o-2])}),a[o-1].push({type:"boxEnd",boxText:a[o-2]}),this.$=a[o-1];break;case 20:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-2]),sequenceIndexStep:Number(a[o-1]),sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 21:this.$={type:"sequenceIndex",sequenceIndex:Number(a[o-1]),sequenceIndexStep:1,sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 22:this.$={type:"sequenceIndex",sequenceVisible:!1,signalType:r.LINETYPE.AUTONUMBER};break;case 23:this.$={type:"sequenceIndex",sequenceVisible:!0,signalType:r.LINETYPE.AUTONUMBER};break;case 24:this.$={type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]};break;case 25:this.$={type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-1]};break;case 31:r.setDiagramTitle(a[o].substring(6)),this.$=a[o].substring(6);break;case 32:r.setDiagramTitle(a[o].substring(7)),this.$=a[o].substring(7);break;case 33:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 34:case 35:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 36:a[o-1].unshift({type:"loopStart",loopText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.LOOP_START}),a[o-1].push({type:"loopEnd",loopText:a[o-2],signalType:r.LINETYPE.LOOP_END}),this.$=a[o-1];break;case 37:a[o-1].unshift({type:"rectStart",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_START}),a[o-1].push({type:"rectEnd",color:r.parseMessage(a[o-2]),signalType:r.LINETYPE.RECT_END}),this.$=a[o-1];break;case 38:a[o-1].unshift({type:"optStart",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_START}),a[o-1].push({type:"optEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.OPT_END}),this.$=a[o-1];break;case 39:a[o-1].unshift({type:"altStart",altText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.ALT_START}),a[o-1].push({type:"altEnd",signalType:r.LINETYPE.ALT_END}),this.$=a[o-1];break;case 40:a[o-1].unshift({type:"parStart",parText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.PAR_START}),a[o-1].push({type:"parEnd",signalType:r.LINETYPE.PAR_END}),this.$=a[o-1];break;case 41:a[o-1].unshift({type:"criticalStart",criticalText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.CRITICAL_START}),a[o-1].push({type:"criticalEnd",signalType:r.LINETYPE.CRITICAL_END}),this.$=a[o-1];break;case 42:a[o-1].unshift({type:"breakStart",breakText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_START}),a[o-1].push({type:"breakEnd",optText:r.parseMessage(a[o-2]),signalType:r.LINETYPE.BREAK_END}),this.$=a[o-1];break;case 45:this.$=a[o-3].concat([{type:"option",optionText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.CRITICAL_OPTION},a[o]]);break;case 47:this.$=a[o-3].concat([{type:"and",parText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.PAR_AND},a[o]]);break;case 49:this.$=a[o-3].concat([{type:"else",altText:r.parseMessage(a[o-1]),signalType:r.LINETYPE.ALT_ELSE},a[o]]);break;case 50:a[o-3].type="addParticipant",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 51:a[o-1].type="addParticipant",this.$=a[o-1];break;case 52:a[o-3].type="addActor",a[o-3].description=r.parseMessage(a[o-1]),this.$=a[o-3];break;case 53:a[o-1].type="addActor",this.$=a[o-1];break;case 54:this.$=[a[o-1],{type:"addNote",placement:a[o-2],actor:a[o-1].actor,text:a[o]}];break;case 55:a[o-2]=[].concat(a[o-1],a[o-1]).slice(0,2),a[o-2][0]=a[o-2][0].actor,a[o-2][1]=a[o-2][1].actor,this.$=[a[o-1],{type:"addNote",placement:r.PLACEMENT.OVER,actor:a[o-2].slice(0,2),text:a[o]}];break;case 56:this.$=[a[o-1],{type:"addLinks",actor:a[o-1].actor,text:a[o]}];break;case 57:this.$=[a[o-1],{type:"addALink",actor:a[o-1].actor,text:a[o]}];break;case 58:this.$=[a[o-1],{type:"addProperties",actor:a[o-1].actor,text:a[o]}];break;case 59:this.$=[a[o-1],{type:"addDetails",actor:a[o-1].actor,text:a[o]}];break;case 62:this.$=[a[o-2],a[o]];break;case 64:this.$=r.PLACEMENT.LEFTOF;break;case 65:this.$=r.PLACEMENT.RIGHTOF;break;case 66:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeStart",signalType:r.LINETYPE.ACTIVE_START,actor:a[o-1]}];break;case 67:this.$=[a[o-4],a[o-1],{type:"addMessage",from:a[o-4].actor,to:a[o-1].actor,signalType:a[o-3],msg:a[o]},{type:"activeEnd",signalType:r.LINETYPE.ACTIVE_END,actor:a[o-4]}];break;case 68:this.$=[a[o-3],a[o-1],{type:"addMessage",from:a[o-3].actor,to:a[o-1].actor,signalType:a[o-2],msg:a[o]}];break;case 69:this.$={type:"addParticipant",actor:a[o]};break;case 70:this.$=r.LINETYPE.SOLID_OPEN;break;case 71:this.$=r.LINETYPE.DOTTED_OPEN;break;case 72:this.$=r.LINETYPE.SOLID;break;case 73:this.$=r.LINETYPE.DOTTED;break;case 74:this.$=r.LINETYPE.SOLID_CROSS;break;case 75:this.$=r.LINETYPE.DOTTED_CROSS;break;case 76:this.$=r.LINETYPE.SOLID_POINT;break;case 77:this.$=r.LINETYPE.DOTTED_POINT;break;case 78:this.$=r.parseMessage(a[o].trim().substring(1));break;case 79:r.parseDirective("%%{","open_directive");break;case 80:r.parseDirective(a[o],"type_directive");break;case 81:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 82:r.parseDirective("}%%","close_directive","sequence")}},table:[{3:1,4:n,5:r,6:4,7:i,14:6,83:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,14:6,83:a},{3:9,4:n,5:r,6:4,7:i,14:6,83:a},{3:10,4:n,5:r,6:4,7:i,14:6,83:a},e([1,4,5,19,23,26,28,34,35,36,38,40,41,42,43,44,46,48,50,54,56,57,62,63,64,65,73,83],s,{8:11}),{15:12,84:[1,13]},{84:[2,79]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{16:51,17:[1,52],86:O},e([17,86],[2,80]),e(M,[2,6]),{6:41,10:54,13:18,14:6,19:l,22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},e(M,[2,8]),e(M,[2,9]),e(M,[2,17]),{20:[1,55]},{5:[1,56]},{5:[1,59],24:[1,57],25:[1,58]},{27:60,73:D},{27:61,73:D},{5:[1,62]},{5:[1,63]},{5:[1,64]},{5:[1,65]},{5:[1,66]},e(M,[2,31]),e(M,[2,32]),{37:[1,67]},{39:[1,68]},e(M,[2,35]),{20:[1,69]},{20:[1,70]},{20:[1,71]},{20:[1,72]},{20:[1,73]},{20:[1,74]},{20:[1,75]},e(M,[2,43]),{27:76,73:D},{27:77,73:D},{70:78,74:[1,79],75:[1,80],76:[1,81],77:[1,82],78:[1,83],79:[1,84],80:[1,85],81:[1,86]},{58:87,60:[1,88],68:[1,89],69:[1,90]},{27:91,73:D},{27:92,73:D},{27:93,73:D},{27:94,73:D},e([5,55,67,74,75,76,77,78,79,80,81,82],[2,69]),{5:[1,95]},{18:96,85:[1,97]},{5:[2,82]},e(M,[2,7]),e(I,[2,10],{11:98}),e(M,[2,19]),{5:[1,100],24:[1,99]},{5:[1,101]},e(M,[2,23]),{5:[1,102]},{5:[1,103]},e(M,[2,26]),e(M,[2,27]),e(M,[2,28]),e(M,[2,29]),e(M,[2,30]),e(M,[2,33]),e(M,[2,34]),e(F,s,{8:104}),e(F,s,{8:105}),e(F,s,{8:106}),e($,s,{45:107,8:108}),e(R,s,{47:109,8:110}),e(Z,s,{49:111,8:112}),e(F,s,{8:113}),{5:[1,115],55:[1,114]},{5:[1,117],55:[1,116]},{27:120,71:[1,118],72:[1,119],73:D},e(P,[2,70]),e(P,[2,71]),e(P,[2,72]),e(P,[2,73]),e(P,[2,74]),e(P,[2,75]),e(P,[2,76]),e(P,[2,77]),{27:121,73:D},{27:123,61:122,73:D},{73:[2,64]},{73:[2,65]},{59:124,82:j},{59:126,82:j},{59:127,82:j},{59:128,82:j},e(Y,[2,15]),{16:129,86:O},{86:[2,81]},{4:[1,132],5:[1,134],12:131,13:133,21:[1,130],54:C,56:T},{5:[1,135]},e(M,[2,21]),e(M,[2,22]),e(M,[2,24]),e(M,[2,25]),{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,136],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,137],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,138],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,139]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,48],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,53:[1,140],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,141]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,46],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,52:[1,142],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{21:[1,143]},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[2,44],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,51:[1,144],54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{4:o,5:c,6:41,9:14,10:16,13:18,14:6,19:l,21:[1,145],22:20,23:h,26:u,27:44,28:d,29:24,30:25,31:26,32:27,33:28,34:p,35:f,36:g,38:y,40:m,41:b,42:_,43:x,44:v,46:k,48:w,50:E,54:C,56:T,57:S,62:A,63:L,64:B,65:N,73:D,83:a},{20:[1,146]},e(M,[2,51]),{20:[1,147]},e(M,[2,53]),{27:148,73:D},{27:149,73:D},{59:150,82:j},{59:151,82:j},{59:152,82:j},{67:[1,153],82:[2,63]},{5:[2,56]},{5:[2,78]},{5:[2,57]},{5:[2,58]},{5:[2,59]},{5:[1,154]},e(M,[2,18]),e(I,[2,11]),{13:155,54:C,56:T},e(I,[2,13]),e(I,[2,14]),e(M,[2,20]),e(M,[2,36]),e(M,[2,37]),e(M,[2,38]),e(M,[2,39]),{20:[1,156]},e(M,[2,40]),{20:[1,157]},e(M,[2,41]),{20:[1,158]},e(M,[2,42]),{5:[1,159]},{5:[1,160]},{59:161,82:j},{59:162,82:j},{5:[2,68]},{5:[2,54]},{5:[2,55]},{27:163,73:D},e(Y,[2,16]),e(I,[2,12]),e($,s,{8:108,45:164}),e(R,s,{8:110,47:165}),e(Z,s,{8:112,49:166}),e(M,[2,50]),e(M,[2,52]),{5:[2,66]},{5:[2,67]},{82:[2,62]},{21:[2,49]},{21:[2,47]},{21:[2,45]}],defaultActions:{7:[2,79],8:[2,1],9:[2,2],10:[2,3],53:[2,82],89:[2,64],90:[2,65],97:[2,81],124:[2,56],125:[2,78],126:[2,57],127:[2,58],128:[2,59],150:[2,68],151:[2,54],152:[2,55],161:[2,66],162:[2,67],163:[2,62],164:[2,49],165:[2,47],166:[2,45]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},U=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),83;case 1:return this.begin("type_directive"),84;case 2:return this.popState(),this.begin("arg_directive"),17;case 3:return this.popState(),this.popState(),86;case 4:return 85;case 5:case 53:case 66:return 5;case 6:case 7:case 8:case 9:case 10:break;case 11:return 24;case 12:return this.begin("LINE"),19;case 13:return this.begin("ID"),54;case 14:return this.begin("ID"),56;case 15:return e.yytext=e.yytext.trim(),this.begin("ALIAS"),73;case 16:return this.popState(),this.popState(),this.begin("LINE"),55;case 17:return this.popState(),this.popState(),5;case 18:return this.begin("LINE"),41;case 19:return this.begin("LINE"),42;case 20:return this.begin("LINE"),43;case 21:return this.begin("LINE"),44;case 22:return this.begin("LINE"),53;case 23:return this.begin("LINE"),46;case 24:return this.begin("LINE"),52;case 25:return this.begin("LINE"),48;case 26:return this.begin("LINE"),51;case 27:return this.begin("LINE"),50;case 28:return this.popState(),20;case 29:return 21;case 30:return 68;case 31:return 69;case 32:return 62;case 33:return 63;case 34:return 64;case 35:return 65;case 36:return 60;case 37:return 57;case 38:return this.begin("ID"),26;case 39:return this.begin("ID"),28;case 40:return 34;case 41:return 35;case 42:return this.begin("acc_title"),36;case 43:return this.popState(),"acc_title_value";case 44:return this.begin("acc_descr"),38;case 45:return this.popState(),"acc_descr_value";case 46:this.begin("acc_descr_multiline");break;case 47:this.popState();break;case 48:return"acc_descr_multiline_value";case 49:return 7;case 50:return 23;case 51:return 25;case 52:return 67;case 54:return e.yytext=e.yytext.trim(),73;case 55:return 76;case 56:return 77;case 57:return 74;case 58:return 75;case 59:return 78;case 60:return 79;case 61:return 80;case 62:return 81;case 63:return 82;case 64:return 71;case 65:return 72;case 67:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[0-9]+(?=[ \n]+))/i,/^(?:box\b)/i,/^(?:participant\b)/i,/^(?:actor\b)/i,/^(?:[^\->:\n,;]+?([\-]*[^\->:\n,;]+?)*?(?=((?!\n)\s)+as(?!\n)\s|[#\n;]|$))/i,/^(?:as\b)/i,/^(?:(?:))/i,/^(?:loop\b)/i,/^(?:rect\b)/i,/^(?:opt\b)/i,/^(?:alt\b)/i,/^(?:else\b)/i,/^(?:par\b)/i,/^(?:and\b)/i,/^(?:critical\b)/i,/^(?:option\b)/i,/^(?:break\b)/i,/^(?:(?:[:]?(?:no)?wrap)?[^#\n;]*)/i,/^(?:end\b)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:links\b)/i,/^(?:link\b)/i,/^(?:properties\b)/i,/^(?:details\b)/i,/^(?:over\b)/i,/^(?:note\b)/i,/^(?:activate\b)/i,/^(?:deactivate\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:title:\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:sequenceDiagram\b)/i,/^(?:autonumber\b)/i,/^(?:off\b)/i,/^(?:,)/i,/^(?:;)/i,/^(?:[^\+\->:\n,;]+((?!(-x|--x|-\)|--\)))[\-]*[^\+\->:\n,;]+)*)/i,/^(?:->>)/i,/^(?:-->>)/i,/^(?:->)/i,/^(?:-->)/i,/^(?:-[x])/i,/^(?:--[x])/i,/^(?:-[\)])/i,/^(?:--[\)])/i,/^(?::(?:(?:no)?wrap)?[^#\n;]+)/i,/^(?:\+)/i,/^(?:-)/i,/^(?:$)/i,/^(?:.)/i],conditions:{acc_descr_multiline:{rules:[47,48],inclusive:!1},acc_descr:{rules:[45],inclusive:!1},acc_title:{rules:[43],inclusive:!1},open_directive:{rules:[1,8],inclusive:!1},type_directive:{rules:[2,3,8],inclusive:!1},arg_directive:{rules:[3,4,8],inclusive:!1},ID:{rules:[7,8,15],inclusive:!1},ALIAS:{rules:[7,8,16,17],inclusive:!1},LINE:{rules:[7,8,28],inclusive:!1},INITIAL:{rules:[0,5,6,8,9,10,11,12,13,14,18,19,20,21,22,23,24,25,26,27,29,30,31,32,33,34,35,36,37,38,39,40,41,42,44,46,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67],inclusive:!0}}},t);function W(){this.yy={}}return z.lexer=U,W.prototype=z,z.Parser=W,new W}();Wl.parser=Wl;const ql=Wl,Hl=t=>null!==t.match(/^\s*sequenceDiagram/);let Vl,Gl,Xl,Kl={},Ql=[],Jl=[],th=!1;const eh=function(t,e,n,r){let i=Xl;const a=Kl[t];if(a){if(Xl&&a.box&&Xl!==a.box)throw new Error("A same participant should only be defined in one Box: "+a.name+" can't be in '"+a.box.name+"' and in '"+Xl.name+"' at the same time.");if(i=a.box?a.box:Xl,a.box=i,a&&e===a.name&&null==n)return}null!=n&&null!=n.text||(n={text:e,wrap:null,type:r}),null!=r&&null!=n.text||(n={text:e,wrap:null,type:r}),Kl[t]={box:i,name:e,description:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,prevActor:Vl,links:{},properties:{},actorCnt:null,rectData:null,type:r||"participant"},Vl&&Kl[Vl]&&(Kl[Vl].nextActor=t),Xl&&Xl.actorKeys.push(t),Vl=t},nh=function(t,e,n={text:void 0,wrap:void 0},r){if(r===ah.ACTIVE_END){const e=(t=>{let e,n=0;for(e=0;e<Jl.length;e++)Jl[e].type===ah.ACTIVE_START&&Jl[e].from.actor===t&&n++,Jl[e].type===ah.ACTIVE_END&&Jl[e].from.actor===t&&n--;return n})(t.actor);if(e<1){let e=new Error("Trying to inactivate an inactive participant ("+t.actor+")");throw e.hash={text:"->>-",token:"->>-",line:"1",loc:{first_line:1,last_line:1,first_column:1,last_column:1},expected:["'ACTIVE_PARTICIPANT'"]},e}}return Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:r}),!0},rh=function(t){return Kl[t]},ih=()=>void 0!==Gl?Gl:ar().sequence.wrap,ah={SOLID:0,DOTTED:1,NOTE:2,SOLID_CROSS:3,DOTTED_CROSS:4,SOLID_OPEN:5,DOTTED_OPEN:6,LOOP_START:10,LOOP_END:11,ALT_START:12,ALT_ELSE:13,ALT_END:14,OPT_START:15,OPT_END:16,ACTIVE_START:17,ACTIVE_END:18,PAR_START:19,PAR_AND:20,PAR_END:21,RECT_START:22,RECT_END:23,SOLID_POINT:24,DOTTED_POINT:25,AUTONUMBER:26,CRITICAL_START:27,CRITICAL_OPTION:28,CRITICAL_END:29,BREAK_START:30,BREAK_END:31},sh=function(t,e,n){n.text,void 0===n.wrap&&ih()||n.wrap;const r=[].concat(t,t);Jl.push({from:r[0],to:r[1],message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,type:ah.NOTE,placement:e})},oh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());t=t.replace(/&amp;/g,"&"),t=t.replace(/&equals;/g,"=");ch(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor link text",r)}};function ch(t,e){if(null==t.links)t.links=e;else for(let n in e)t.links[n]=e[n]}const lh=function(t,e){const n=rh(t);try{let t=Ft(e.text,ar());hh(n,JSON.parse(t))}catch(r){Nt.error("error while parsing actor properties text",r)}};function hh(t,e){if(null==t.properties)t.properties=e;else for(let n in e)t.properties[n]=e[n]}const uh=function(t,e){const n=rh(t),r=document.getElementById(e.text);try{const t=r.innerHTML,e=JSON.parse(t);e.properties&&hh(n,e.properties),e.links&&ch(n,e.links)}catch(i){Nt.error("error while parsing actor details text",i)}},dh=function(t){if(Array.isArray(t))t.forEach((function(t){dh(t)}));else switch(t.type){case"sequenceIndex":Jl.push({from:void 0,to:void 0,message:{start:t.sequenceIndex,step:t.sequenceIndexStep,visible:t.sequenceVisible},wrap:!1,type:t.signalType});break;case"addParticipant":eh(t.actor,t.actor,t.description,"participant");break;case"addActor":eh(t.actor,t.actor,t.description,"actor");break;case"activeStart":case"activeEnd":nh(t.actor,void 0,void 0,t.signalType);break;case"addNote":sh(t.actor,t.placement,t.text);break;case"addLinks":oh(t.actor,t.text);break;case"addALink":!function(t,e){const n=rh(t);try{const t={};let s=Ft(e.text,ar());var r=s.indexOf("@");s=s.replace(/&amp;/g,"&"),s=s.replace(/&equals;/g,"=");var i=s.slice(0,r-1).trim(),a=s.slice(r+1).trim();t[i]=a,ch(n,t)}catch(s){Nt.error("error while parsing actor link text",s)}}(t.actor,t.text);break;case"addProperties":lh(t.actor,t.text);break;case"addDetails":uh(t.actor,t.text);break;case"addMessage":nh(t.from,t.to,t.msg,t.signalType);break;case"boxStart":e=t.boxData,Ql.push({name:e.text,wrap:void 0===e.wrap&&ih()||!!e.wrap,fill:e.color,actorKeys:[]}),Xl=Ql.slice(-1)[0];break;case"boxEnd":Xl=void 0;break;case"loopStart":nh(void 0,void 0,t.loopText,t.signalType);break;case"loopEnd":case"rectEnd":case"optEnd":case"altEnd":case"parEnd":case"criticalEnd":case"breakEnd":nh(void 0,void 0,void 0,t.signalType);break;case"rectStart":nh(void 0,void 0,t.color,t.signalType);break;case"optStart":nh(void 0,void 0,t.optText,t.signalType);break;case"altStart":case"else":nh(void 0,void 0,t.altText,t.signalType);break;case"setAccTitle":Or(t.text);break;case"parStart":case"and":nh(void 0,void 0,t.parText,t.signalType);break;case"criticalStart":nh(void 0,void 0,t.criticalText,t.signalType);break;case"option":nh(void 0,void 0,t.optionText,t.signalType);break;case"breakStart":nh(void 0,void 0,t.breakText,t.signalType)}var e},ph={addActor:eh,addMessage:function(t,e,n,r){Jl.push({from:t,to:e,message:n.text,wrap:void 0===n.wrap&&ih()||!!n.wrap,answer:r})},addSignal:nh,addLinks:oh,addDetails:uh,addProperties:lh,autoWrap:ih,setWrap:function(t){Gl=t},enableSequenceNumbers:function(){th=!0},disableSequenceNumbers:function(){th=!1},showSequenceNumbers:()=>th,getMessages:function(){return Jl},getActors:function(){return Kl},getActor:rh,getActorKeys:function(){return Object.keys(Kl)},getActorProperty:function(t,e){if(void 0!==t&&void 0!==t.properties)return t.properties[e]},getAccTitle:Mr,getBoxes:function(){return Ql},getDiagramTitle:Rr,setDiagramTitle:$r,parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().sequence,clear:function(){Kl={},Ql=[],Jl=[],th=!1,Dr()},parseMessage:function(t){const e=t.trim(),n={text:e.replace(/^:?(?:no)?wrap:/,"").trim(),wrap:null!==e.match(/^:?wrap:/)||null===e.match(/^:?nowrap:/)&&void 0};return Nt.debug("parseMessage:",n),n},parseBoxData:function(t){const e=t.match(/^((?:rgba?|hsla?)\s*\(.*\)|\w*)(.*)$/);let n=null!=e&&e[1]?e[1].trim():"transparent",r=null!=e&&e[2]?e[2].trim():void 0;if(window&&window.CSS)window.CSS.supports("color",n)||(n="transparent",r=t.trim());else{const e=(new Option).style;e.color=n,e.color!==n&&(n="transparent",r=t.trim())}return{color:n,text:void 0!==r?Ft(r.replace(/^:?(?:no)?wrap:/,""),ar()):void 0,wrap:void 0!==r?null!==r.match(/^:?wrap:/)||null===r.match(/^:?nowrap:/)&&void 0:void 0}},LINETYPE:ah,ARROWTYPE:{FILLED:0,OPEN:1},PLACEMENT:{LEFTOF:0,RIGHTOF:1,OVER:2},addNote:sh,setAccTitle:Or,apply:dh,setAccDescription:Ir,getAccDescription:Fr,hasAtLeastOneBox:function(){return Ql.length>0},hasAtLeastOneBoxWithTitle:function(){return Ql.some((t=>t.name))}};let fh=[];const gh=()=>{fh.forEach((t=>{t()})),fh=[]},yh=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},mh=(t,e)=>{var n;n=()=>{const n=document.querySelectorAll(t);0!==n.length&&(n[0].addEventListener("mouseover",(function(){xh("actor"+e+"_popup")})),n[0].addEventListener("mouseout",(function(){vh("actor"+e+"_popup")})))},fh.push(n)},bh=function(t,e,n,r){const i=t.append("image");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href",a)},_h=function(t,e,n,r){const i=t.append("use");i.attr("x",e),i.attr("y",n);var a=(0,s.N)(r);i.attr("xlink:href","#"+a)},xh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="block")},vh=function(t){var e=document.getElementById(t);null!=e&&(e.style.display="none")},kh=function(t,e){let n=0,r=0;const i=e.text.split(Yt.lineBreakRegex),[a,s]=Vn(e.fontSize);let o=[],c=0,l=()=>e.y;if(void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0)switch(e.valign){case"top":case"start":l=()=>Math.round(e.y+e.textMargin);break;case"middle":case"center":l=()=>Math.round(e.y+(n+r+e.textMargin)/2);break;case"bottom":case"end":l=()=>Math.round(e.y+(n+r+2*e.textMargin)-e.textMargin)}if(void 0!==e.anchor&&void 0!==e.textMargin&&void 0!==e.width)switch(e.anchor){case"left":case"start":e.x=Math.round(e.x+e.textMargin),e.anchor="start",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"middle":case"center":e.x=Math.round(e.x+e.width/2),e.anchor="middle",e.dominantBaseline="middle",e.alignmentBaseline="middle";break;case"right":case"end":e.x=Math.round(e.x+e.width-e.textMargin),e.anchor="end",e.dominantBaseline="middle",e.alignmentBaseline="middle"}for(let[h,u]of i.entries()){void 0!==e.textMargin&&0===e.textMargin&&void 0!==a&&(c=h*a);const i=t.append("text");if(i.attr("x",e.x),i.attr("y",l()),void 0!==e.anchor&&i.attr("text-anchor",e.anchor).attr("dominant-baseline",e.dominantBaseline).attr("alignment-baseline",e.alignmentBaseline),void 0!==e.fontFamily&&i.style("font-family",e.fontFamily),void 0!==s&&i.style("font-size",s),void 0!==e.fontWeight&&i.style("font-weight",e.fontWeight),void 0!==e.fill&&i.attr("fill",e.fill),void 0!==e.class&&i.attr("class",e.class),void 0!==e.dy?i.attr("dy",e.dy):0!==c&&i.attr("dy",c),e.tspan){const t=i.append("tspan");t.attr("x",e.x),void 0!==e.fill&&t.attr("fill",e.fill),t.text(u)}else i.text(u);void 0!==e.valign&&void 0!==e.textMargin&&e.textMargin>0&&(r+=(i._groups||i)[0][0].getBBox().height,n=r),o.push(i)}return o},wh=function(t,e){const n=t.append("polygon");var r,i,a,s,o;return n.attr("points",(r=e.x,i=e.y,a=e.width,s=e.height,r+","+i+" "+(r+a)+","+i+" "+(r+a)+","+(i+s-(o=7))+" "+(r+a-1.2*o)+","+(i+s)+" "+r+","+(i+s))),n.attr("class","labelBox"),e.y=e.y+e.height/2,kh(t,e),n};let Eh=-1;const Ch=(t,e)=>{t.selectAll&&t.selectAll(".actor-line").attr("class","200").attr("y2",e-55)},Th=function(t,e){yh(t,{x:e.startx,y:e.starty,width:e.stopx-e.startx,height:e.stopy-e.starty,fill:e.fill,stroke:e.stroke,class:"rect"}).lower()},Sh=function(){return{x:0,y:0,fill:void 0,anchor:void 0,style:"#666",width:void 0,height:void 0,textMargin:0,rx:0,ry:0,tspan:!0,valign:void 0}},Ah=function(){return{x:0,y:0,fill:"#EDF2AE",stroke:"#666",width:100,anchor:"start",height:100,rx:0,ry:0}},Lh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,[d,p]=Vn(l),f=t.split(Yt.lineBreakRegex);for(let g=0;g<f.length;g++){const t=g*d-d*(f.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).style("text-anchor","middle").style("font-size",p).style("font-weight",u).style("font-family",h);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(f[g]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Bh=function(){function t(t,e,n,i,a,s,o){r(e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").text(t),o)}function e(t,e,n,i,a,s,o,c){const{actorFontSize:l,actorFontFamily:h,actorFontWeight:u}=c,d=t.split(Yt.lineBreakRegex);for(let p=0;p<d.length;p++){const t=p*l-l*(d.length-1)/2,a=e.append("text").attr("x",n).attr("y",i).style("text-anchor","start").style("font-size",l).style("font-weight",u).style("font-family",h);a.append("tspan").attr("x",n).attr("dy",t).text(d[p]),a.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(a,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,0,o,c,l),r(u,c)}function r(t,e){for(const n in e)e.hasOwnProperty(n)&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),Nh={drawRect:yh,drawText:kh,drawLabel:wh,drawActor:function(t,e,n,r){switch(e.type){case"actor":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+80;r||(Eh++,t.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"));const s=t.append("g");s.attr("class","actor-man");const o=Ah();o.x=e.x,o.y=e.y,o.fill="#eaeaea",o.width=e.width,o.height=e.height,o.class="actor",o.rx=3,o.ry=3,s.append("line").attr("id","actor-man-torso"+Eh).attr("x1",i).attr("y1",e.y+25).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("id","actor-man-arms"+Eh).attr("x1",i-18).attr("y1",e.y+33).attr("x2",i+18).attr("y2",e.y+33),s.append("line").attr("x1",i-18).attr("y1",e.y+60).attr("x2",i).attr("y2",e.y+45),s.append("line").attr("x1",i).attr("y1",e.y+45).attr("x2",i+16).attr("y2",e.y+60);const c=s.append("circle");c.attr("cx",e.x+e.width/2),c.attr("cy",e.y+10),c.attr("r",15),c.attr("width",e.width),c.attr("height",e.height);const l=s.node().getBBox();return e.height=l.height,Lh(n)(e.description,s,o.x,o.y+35,o.width,o.height,{class:"actor"},n),e.height}(t,e,n,r);case"participant":return function(t,e,n,r){const i=e.x+e.width/2,a=e.y+5,s=t.append("g");var o=s;r||(Eh++,o.append("line").attr("id","actor"+Eh).attr("x1",i).attr("y1",a).attr("x2",i).attr("y2",2e3).attr("class","actor-line").attr("stroke-width","0.5px").attr("stroke","#999"),o=s.append("g"),e.actorCnt=Eh,null!=e.links&&(o.attr("id","root-"+Eh),mh("#root-"+Eh,Eh)));const c=Ah();var l="actor";null!=e.properties&&e.properties.class?l=e.properties.class:c.fill="#eaeaea",c.x=e.x,c.y=e.y,c.width=e.width,c.height=e.height,c.class=l,c.rx=3,c.ry=3;const h=yh(o,c);if(e.rectData=c,null!=e.properties&&e.properties.icon){const t=e.properties.icon.trim();"@"===t.charAt(0)?_h(o,c.x+c.width-20,c.y+10,t.substr(1)):bh(o,c.x+c.width-20,c.y+10,t)}Lh(n)(e.description,o,c.x,c.y,c.width,c.height,{class:"actor"},n);let u=e.height;if(h.node){const t=h.node().getBBox();e.height=t.height,u=t.height}return u}(t,e,n,r)}},drawBox:function(t,e,n){const r=t.append("g");Th(r,e),e.name&&Lh(n)(e.name,r,e.x,e.y+(e.textMaxHeight||0)/2,e.width,0,{class:"text"},n),r.lower()},drawPopup:function(t,e,n,r,i){if(void 0===e.links||null===e.links||0===Object.keys(e.links).length)return{height:0,width:0};const a=e.links,o=e.actorCnt,c=e.rectData;var l="none";i&&(l="block !important");const h=t.append("g");h.attr("id","actor"+o+"_popup"),h.attr("class","actorPopupMenu"),h.attr("display",l),mh("#actor"+o+"_popup",o);var u="";void 0!==c.class&&(u=" "+c.class);let d=c.width>n?c.width:n;const p=h.append("rect");if(p.attr("class","actorPopupMenuPanel"+u),p.attr("x",c.x),p.attr("y",c.height),p.attr("fill",c.fill),p.attr("stroke",c.stroke),p.attr("width",d),p.attr("height",c.height),p.attr("rx",c.rx),p.attr("ry",c.ry),null!=a){var f=20;for(let t in a){var g=h.append("a"),y=(0,s.N)(a[t]);g.attr("xlink:href",y),g.attr("target","_blank"),Bh(r)(t,g,c.x+10,c.height+f,d,20,{class:"actor"},r),f+=30}}return p.attr("height",f),{height:c.height+f,width:d}},drawImage:bh,drawEmbeddedImage:_h,anchorElement:function(t){return t.append("g")},drawActivation:function(t,e,n,r,i){const a=Ah(),s=e.anchored;a.x=e.startx,a.y=e.starty,a.class="activation"+i%3,a.width=e.stopx-e.startx,a.height=n-e.starty,yh(s,a)},drawLoop:function(t,e,n,r){const{boxMargin:i,boxTextMargin:a,labelBoxHeight:s,labelBoxWidth:o,messageFontFamily:c,messageFontSize:l,messageFontWeight:h}=r,u=t.append("g"),d=function(t,e,n,r){return u.append("line").attr("x1",t).attr("y1",e).attr("x2",n).attr("y2",r).attr("class","loopLine")};d(e.startx,e.starty,e.stopx,e.starty),d(e.stopx,e.starty,e.stopx,e.stopy),d(e.startx,e.stopy,e.stopx,e.stopy),d(e.startx,e.starty,e.startx,e.stopy),void 0!==e.sections&&e.sections.forEach((function(t){d(e.startx,t.y,e.stopx,t.y).style("stroke-dasharray","3, 3")}));let p=Sh();p.text=n,p.x=e.startx,p.y=e.starty,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.anchor="middle",p.valign="middle",p.tspan=!1,p.width=o||50,p.height=s||20,p.textMargin=a,p.class="labelText",wh(u,p),p=Sh(),p.text=e.title,p.x=e.startx+o/2+(e.stopx-e.startx)/2,p.y=e.starty+i+a,p.anchor="middle",p.valign="middle",p.textMargin=a,p.class="loopText",p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=!0;let f=kh(u,p);return void 0!==e.sectionTitles&&e.sectionTitles.forEach((function(t,n){if(t.message){p.text=t.message,p.x=e.startx+(e.stopx-e.startx)/2,p.y=e.sections[n].y+i+a,p.class="loopText",p.anchor="middle",p.valign="middle",p.tspan=!1,p.fontFamily=c,p.fontSize=l,p.fontWeight=h,p.wrap=e.wrap,f=kh(u,p);let r=Math.round(f.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));e.sections[n].height+=r-(i+a)}})),e.height=Math.round(e.stopy-e.starty),u},drawBackgroundRect:Th,insertArrowHead:function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",9).attr("refY",5).attr("markerUnits","userSpaceOnUse").attr("markerWidth",12).attr("markerHeight",12).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z")},insertArrowFilledHead:function(t){t.append("defs").append("marker").attr("id","filled-head").attr("refX",18).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 18,7 L9,13 L14,7 L9,1 Z")},insertSequenceNumber:function(t){t.append("defs").append("marker").attr("id","sequencenumber").attr("refX",15).attr("refY",15).attr("markerWidth",60).attr("markerHeight",40).attr("orient","auto").append("circle").attr("cx",15).attr("cy",15).attr("r",6)},insertArrowCrossHead:function(t){t.append("defs").append("marker").attr("id","crosshead").attr("markerWidth",15).attr("markerHeight",8).attr("orient","auto").attr("refX",4).attr("refY",5).append("path").attr("fill","none").attr("stroke","#000000").style("stroke-dasharray","0, 0").attr("stroke-width","1pt").attr("d","M 1,2 L 6,7 M 6,2 L 1,7")},insertDatabaseIcon:function(t){t.append("defs").append("symbol").attr("id","database").attr("fill-rule","evenodd").attr("clip-rule","evenodd").append("path").attr("transform","scale(.5)").attr("d","M12.258.001l.256.004.255.005.253.008.251.01.249.012.247.015.246.016.242.019.241.02.239.023.236.024.233.027.231.028.229.031.225.032.223.034.22.036.217.038.214.04.211.041.208.043.205.045.201.046.198.048.194.05.191.051.187.053.183.054.18.056.175.057.172.059.168.06.163.061.16.063.155.064.15.066.074.033.073.033.071.034.07.034.069.035.068.035.067.035.066.035.064.036.064.036.062.036.06.036.06.037.058.037.058.037.055.038.055.038.053.038.052.038.051.039.05.039.048.039.047.039.045.04.044.04.043.04.041.04.04.041.039.041.037.041.036.041.034.041.033.042.032.042.03.042.029.042.027.042.026.043.024.043.023.043.021.043.02.043.018.044.017.043.015.044.013.044.012.044.011.045.009.044.007.045.006.045.004.045.002.045.001.045v17l-.001.045-.002.045-.004.045-.006.045-.007.045-.009.044-.011.045-.012.044-.013.044-.015.044-.017.043-.018.044-.02.043-.021.043-.023.043-.024.043-.026.043-.027.042-.029.042-.03.042-.032.042-.033.042-.034.041-.036.041-.037.041-.039.041-.04.041-.041.04-.043.04-.044.04-.045.04-.047.039-.048.039-.05.039-.051.039-.052.038-.053.038-.055.038-.055.038-.058.037-.058.037-.06.037-.06.036-.062.036-.064.036-.064.036-.066.035-.067.035-.068.035-.069.035-.07.034-.071.034-.073.033-.074.033-.15.066-.155.064-.16.063-.163.061-.168.06-.172.059-.175.057-.18.056-.183.054-.187.053-.191.051-.194.05-.198.048-.201.046-.205.045-.208.043-.211.041-.214.04-.217.038-.22.036-.223.034-.225.032-.229.031-.231.028-.233.027-.236.024-.239.023-.241.02-.242.019-.246.016-.247.015-.249.012-.251.01-.253.008-.255.005-.256.004-.258.001-.258-.001-.256-.004-.255-.005-.253-.008-.251-.01-.249-.012-.247-.015-.245-.016-.243-.019-.241-.02-.238-.023-.236-.024-.234-.027-.231-.028-.228-.031-.226-.032-.223-.034-.22-.036-.217-.038-.214-.04-.211-.041-.208-.043-.204-.045-.201-.046-.198-.048-.195-.05-.19-.051-.187-.053-.184-.054-.179-.056-.176-.057-.172-.059-.167-.06-.164-.061-.159-.063-.155-.064-.151-.066-.074-.033-.072-.033-.072-.034-.07-.034-.069-.035-.068-.035-.067-.035-.066-.035-.064-.036-.063-.036-.062-.036-.061-.036-.06-.037-.058-.037-.057-.037-.056-.038-.055-.038-.053-.038-.052-.038-.051-.039-.049-.039-.049-.039-.046-.039-.046-.04-.044-.04-.043-.04-.041-.04-.04-.041-.039-.041-.037-.041-.036-.041-.034-.041-.033-.042-.032-.042-.03-.042-.029-.042-.027-.042-.026-.043-.024-.043-.023-.043-.021-.043-.02-.043-.018-.044-.017-.043-.015-.044-.013-.044-.012-.044-.011-.045-.009-.044-.007-.045-.006-.045-.004-.045-.002-.045-.001-.045v-17l.001-.045.002-.045.004-.045.006-.045.007-.045.009-.044.011-.045.012-.044.013-.044.015-.044.017-.043.018-.044.02-.043.021-.043.023-.043.024-.043.026-.043.027-.042.029-.042.03-.042.032-.042.033-.042.034-.041.036-.041.037-.041.039-.041.04-.041.041-.04.043-.04.044-.04.046-.04.046-.039.049-.039.049-.039.051-.039.052-.038.053-.038.055-.038.056-.038.057-.037.058-.037.06-.037.061-.036.062-.036.063-.036.064-.036.066-.035.067-.035.068-.035.069-.035.07-.034.072-.034.072-.033.074-.033.151-.066.155-.064.159-.063.164-.061.167-.06.172-.059.176-.057.179-.056.184-.054.187-.053.19-.051.195-.05.198-.048.201-.046.204-.045.208-.043.211-.041.214-.04.217-.038.22-.036.223-.034.226-.032.228-.031.231-.028.234-.027.236-.024.238-.023.241-.02.243-.019.245-.016.247-.015.249-.012.251-.01.253-.008.255-.005.256-.004.258-.001.258.001zm-9.258 20.499v.01l.001.021.003.021.004.022.005.021.006.022.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.023.018.024.019.024.021.024.022.025.023.024.024.025.052.049.056.05.061.051.066.051.07.051.075.051.079.052.084.052.088.052.092.052.097.052.102.051.105.052.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.048.144.049.147.047.152.047.155.047.16.045.163.045.167.043.171.043.176.041.178.041.183.039.187.039.19.037.194.035.197.035.202.033.204.031.209.03.212.029.216.027.219.025.222.024.226.021.23.02.233.018.236.016.24.015.243.012.246.01.249.008.253.005.256.004.259.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.021.224-.024.22-.026.216-.027.212-.028.21-.031.205-.031.202-.034.198-.034.194-.036.191-.037.187-.039.183-.04.179-.04.175-.042.172-.043.168-.044.163-.045.16-.046.155-.046.152-.047.148-.048.143-.049.139-.049.136-.05.131-.05.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.053.083-.051.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.05.023-.024.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.023.01-.022.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.127l-.077.055-.08.053-.083.054-.085.053-.087.052-.09.052-.093.051-.095.05-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.045-.118.044-.12.043-.122.042-.124.042-.126.041-.128.04-.13.04-.132.038-.134.038-.135.037-.138.037-.139.035-.142.035-.143.034-.144.033-.147.032-.148.031-.15.03-.151.03-.153.029-.154.027-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.01-.179.008-.179.008-.181.006-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.006-.179-.008-.179-.008-.178-.01-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.027-.153-.029-.151-.03-.15-.03-.148-.031-.146-.032-.145-.033-.143-.034-.141-.035-.14-.035-.137-.037-.136-.037-.134-.038-.132-.038-.13-.04-.128-.04-.126-.041-.124-.042-.122-.042-.12-.044-.117-.043-.116-.045-.113-.045-.112-.046-.109-.047-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.05-.093-.052-.09-.051-.087-.052-.085-.053-.083-.054-.08-.054-.077-.054v4.127zm0-5.654v.011l.001.021.003.021.004.021.005.022.006.022.007.022.009.022.01.022.011.023.012.023.013.023.015.024.016.023.017.024.018.024.019.024.021.024.022.024.023.025.024.024.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.052.11.051.114.051.119.052.123.05.127.051.131.05.135.049.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.044.171.042.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.022.23.02.233.018.236.016.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.012.241-.015.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.048.139-.05.136-.049.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.051.051-.049.023-.025.023-.024.021-.025.02-.024.019-.024.018-.024.017-.024.015-.023.014-.023.013-.024.012-.022.01-.023.01-.023.008-.022.006-.022.006-.022.004-.021.004-.022.001-.021.001-.021v-4.139l-.077.054-.08.054-.083.054-.085.052-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.049-.105.048-.106.047-.109.047-.111.046-.114.045-.115.044-.118.044-.12.044-.122.042-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.035-.143.033-.144.033-.147.033-.148.031-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.025-.161.024-.162.023-.163.022-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.011-.178.009-.179.009-.179.007-.181.007-.182.005-.182.004-.184.003-.184.002h-.37l-.184-.002-.184-.003-.182-.004-.182-.005-.181-.007-.179-.007-.179-.009-.178-.009-.176-.011-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.022-.162-.023-.161-.024-.159-.025-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.031-.146-.033-.145-.033-.143-.033-.141-.035-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.04-.126-.041-.124-.042-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.047-.105-.048-.102-.049-.1-.049-.097-.05-.095-.051-.093-.051-.09-.051-.087-.053-.085-.052-.083-.054-.08-.054-.077-.054v4.139zm0-5.666v.011l.001.02.003.022.004.021.005.022.006.021.007.022.009.023.01.022.011.023.012.023.013.023.015.023.016.024.017.024.018.023.019.024.021.025.022.024.023.024.024.025.052.05.056.05.061.05.066.051.07.051.075.052.079.051.084.052.088.052.092.052.097.052.102.052.105.051.11.052.114.051.119.051.123.051.127.05.131.05.135.05.139.049.144.048.147.048.152.047.155.046.16.045.163.045.167.043.171.043.176.042.178.04.183.04.187.038.19.037.194.036.197.034.202.033.204.032.209.03.212.028.216.027.219.025.222.024.226.021.23.02.233.018.236.017.24.014.243.012.246.01.249.008.253.006.256.003.259.001.26-.001.257-.003.254-.006.25-.008.247-.01.244-.013.241-.014.237-.016.233-.018.231-.02.226-.022.224-.024.22-.025.216-.027.212-.029.21-.03.205-.032.202-.033.198-.035.194-.036.191-.037.187-.039.183-.039.179-.041.175-.042.172-.043.168-.044.163-.045.16-.045.155-.047.152-.047.148-.048.143-.049.139-.049.136-.049.131-.051.126-.05.123-.051.118-.052.114-.051.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.052.07-.051.065-.051.06-.051.056-.05.051-.049.023-.025.023-.025.021-.024.02-.024.019-.024.018-.024.017-.024.015-.023.014-.024.013-.023.012-.023.01-.022.01-.023.008-.022.006-.022.006-.022.004-.022.004-.021.001-.021.001-.021v-4.153l-.077.054-.08.054-.083.053-.085.053-.087.053-.09.051-.093.051-.095.051-.097.05-.1.049-.102.048-.105.048-.106.048-.109.046-.111.046-.114.046-.115.044-.118.044-.12.043-.122.043-.124.042-.126.041-.128.04-.13.039-.132.039-.134.038-.135.037-.138.036-.139.036-.142.034-.143.034-.144.033-.147.032-.148.032-.15.03-.151.03-.153.028-.154.028-.156.027-.158.026-.159.024-.161.024-.162.023-.163.023-.165.021-.166.02-.167.019-.169.018-.169.017-.171.016-.173.015-.173.014-.175.013-.175.012-.177.01-.178.01-.179.009-.179.007-.181.006-.182.006-.182.004-.184.003-.184.001-.185.001-.185-.001-.184-.001-.184-.003-.182-.004-.182-.006-.181-.006-.179-.007-.179-.009-.178-.01-.176-.01-.176-.012-.175-.013-.173-.014-.172-.015-.171-.016-.17-.017-.169-.018-.167-.019-.166-.02-.165-.021-.163-.023-.162-.023-.161-.024-.159-.024-.157-.026-.156-.027-.155-.028-.153-.028-.151-.03-.15-.03-.148-.032-.146-.032-.145-.033-.143-.034-.141-.034-.14-.036-.137-.036-.136-.037-.134-.038-.132-.039-.13-.039-.128-.041-.126-.041-.124-.041-.122-.043-.12-.043-.117-.044-.116-.044-.113-.046-.112-.046-.109-.046-.106-.048-.105-.048-.102-.048-.1-.05-.097-.049-.095-.051-.093-.051-.09-.052-.087-.052-.085-.053-.083-.053-.08-.054-.077-.054v4.153zm8.74-8.179l-.257.004-.254.005-.25.008-.247.011-.244.012-.241.014-.237.016-.233.018-.231.021-.226.022-.224.023-.22.026-.216.027-.212.028-.21.031-.205.032-.202.033-.198.034-.194.036-.191.038-.187.038-.183.04-.179.041-.175.042-.172.043-.168.043-.163.045-.16.046-.155.046-.152.048-.148.048-.143.048-.139.049-.136.05-.131.05-.126.051-.123.051-.118.051-.114.052-.11.052-.106.052-.101.052-.096.052-.092.052-.088.052-.083.052-.079.052-.074.051-.07.052-.065.051-.06.05-.056.05-.051.05-.023.025-.023.024-.021.024-.02.025-.019.024-.018.024-.017.023-.015.024-.014.023-.013.023-.012.023-.01.023-.01.022-.008.022-.006.023-.006.021-.004.022-.004.021-.001.021-.001.021.001.021.001.021.004.021.004.022.006.021.006.023.008.022.01.022.01.023.012.023.013.023.014.023.015.024.017.023.018.024.019.024.02.025.021.024.023.024.023.025.051.05.056.05.06.05.065.051.07.052.074.051.079.052.083.052.088.052.092.052.096.052.101.052.106.052.11.052.114.052.118.051.123.051.126.051.131.05.136.05.139.049.143.048.148.048.152.048.155.046.16.046.163.045.168.043.172.043.175.042.179.041.183.04.187.038.191.038.194.036.198.034.202.033.205.032.21.031.212.028.216.027.22.026.224.023.226.022.231.021.233.018.237.016.241.014.244.012.247.011.25.008.254.005.257.004.26.001.26-.001.257-.004.254-.005.25-.008.247-.011.244-.012.241-.014.237-.016.233-.018.231-.021.226-.022.224-.023.22-.026.216-.027.212-.028.21-.031.205-.032.202-.033.198-.034.194-.036.191-.038.187-.038.183-.04.179-.041.175-.042.172-.043.168-.043.163-.045.16-.046.155-.046.152-.048.148-.048.143-.048.139-.049.136-.05.131-.05.126-.051.123-.051.118-.051.114-.052.11-.052.106-.052.101-.052.096-.052.092-.052.088-.052.083-.052.079-.052.074-.051.07-.052.065-.051.06-.05.056-.05.051-.05.023-.025.023-.024.021-.024.02-.025.019-.024.018-.024.017-.023.015-.024.014-.023.013-.023.012-.023.01-.023.01-.022.008-.022.006-.023.006-.021.004-.022.004-.021.001-.021.001-.021-.001-.021-.001-.021-.004-.021-.004-.022-.006-.021-.006-.023-.008-.022-.01-.022-.01-.023-.012-.023-.013-.023-.014-.023-.015-.024-.017-.023-.018-.024-.019-.024-.02-.025-.021-.024-.023-.024-.023-.025-.051-.05-.056-.05-.06-.05-.065-.051-.07-.052-.074-.051-.079-.052-.083-.052-.088-.052-.092-.052-.096-.052-.101-.052-.106-.052-.11-.052-.114-.052-.118-.051-.123-.051-.126-.051-.131-.05-.136-.05-.139-.049-.143-.048-.148-.048-.152-.048-.155-.046-.16-.046-.163-.045-.168-.043-.172-.043-.175-.042-.179-.041-.183-.04-.187-.038-.191-.038-.194-.036-.198-.034-.202-.033-.205-.032-.21-.031-.212-.028-.216-.027-.22-.026-.224-.023-.226-.022-.231-.021-.233-.018-.237-.016-.241-.014-.244-.012-.247-.011-.25-.008-.254-.005-.257-.004-.26-.001-.26.001z")},insertComputerIcon:function(t){t.append("defs").append("symbol").attr("id","computer").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M2 2v13h20v-13h-20zm18 11h-16v-9h16v9zm-10.228 6l.466-1h3.524l.467 1h-4.457zm14.228 3h-24l2-6h2.104l-1.33 4h18.45l-1.297-4h2.073l2 6zm-5-10h-14v-7h14v7z")},insertClockIcon:function(t){t.append("defs").append("symbol").attr("id","clock").attr("width","24").attr("height","24").append("path").attr("transform","scale(.5)").attr("d","M12 2c5.514 0 10 4.486 10 10s-4.486 10-10 10-10-4.486-10-10 4.486-10 10-10zm0-2c-6.627 0-12 5.373-12 12s5.373 12 12 12 12-5.373 12-12-5.373-12-12-12zm5.848 12.459c.202.038.202.333.001.372-1.907.361-6.045 1.111-6.547 1.111-.719 0-1.301-.582-1.301-1.301 0-.512.77-5.447 1.125-7.445.034-.192.312-.181.343.014l.985 6.238 5.394 1.011z")},getTextObj:Sh,getNoteRect:Ah,popupMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'block'; }"},popdownMenu:function(t){return"var pu = document.getElementById('"+t+"'); if (pu != null) { pu.style.display = 'none'; }"},fixLifeLineHeights:Ch,sanitizeUrl:s.N};let Dh={};const Oh={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],activations:[],models:{getHeight:function(){return Math.max.apply(null,0===this.actors.length?[0]:this.actors.map((t=>t.height||0)))+(0===this.loops.length?0:this.loops.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.messages.length?0:this.messages.map((t=>t.height||0)).reduce(((t,e)=>t+e)))+(0===this.notes.length?0:this.notes.map((t=>t.height||0)).reduce(((t,e)=>t+e)))},clear:function(){this.actors=[],this.boxes=[],this.loops=[],this.messages=[],this.notes=[]},addBox:function(t){this.boxes.push(t)},addActor:function(t){this.actors.push(t)},addLoop:function(t){this.loops.push(t)},addMessage:function(t){this.messages.push(t)},addNote:function(t){this.notes.push(t)},lastActor:function(){return this.actors[this.actors.length-1]},lastLoop:function(){return this.loops[this.loops.length-1]},lastMessage:function(){return this.messages[this.messages.length-1]},lastNote:function(){return this.notes[this.notes.length-1]},actors:[],boxes:[],loops:[],messages:[],notes:[]},init:function(){this.sequenceItems=[],this.activations=[],this.models.clear(),this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0,Zh(ar())},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=this;let a=0;function s(s){return function(o){a++;const c=i.sequenceItems.length-a+1;i.updateVal(o,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopy",r+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopx",n+c*Dh.boxMargin,Math.max),"activation"!==s&&(i.updateVal(o,"startx",t-c*Dh.boxMargin,Math.min),i.updateVal(o,"stopx",n+c*Dh.boxMargin,Math.max),i.updateVal(Oh.data,"starty",e-c*Dh.boxMargin,Math.min),i.updateVal(Oh.data,"stopy",r+c*Dh.boxMargin,Math.max))}}this.sequenceItems.forEach(s()),this.activations.forEach(s("activation"))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(Oh.data,"startx",i,Math.min),this.updateVal(Oh.data,"starty",s,Math.min),this.updateVal(Oh.data,"stopx",a,Math.max),this.updateVal(Oh.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},newActivation:function(t,e,n){const r=n[t.from.actor],i=Ph(t.from.actor).length||0,a=r.x+r.width/2+(i-1)*Dh.activationWidth/2;this.activations.push({startx:a,starty:this.verticalPos+2,stopx:a+Dh.activationWidth,stopy:void 0,actor:t.from.actor,anchored:Nh.anchorElement(e)})},endActivation:function(t){const e=this.activations.map((function(t){return t.actor})).lastIndexOf(t.from.actor);return this.activations.splice(e,1)[0]},createLoop:function(t={message:void 0,wrap:!1,width:void 0},e){return{startx:void 0,starty:this.verticalPos,stopx:void 0,stopy:void 0,title:t.message,wrap:t.wrap,width:t.width,height:0,fill:e}},newLoop:function(t={message:void 0,wrap:!1,width:void 0},e){this.sequenceItems.push(this.createLoop(t,e))},endLoop:function(){return this.sequenceItems.pop()},addSectionToLoop:function(t){const e=this.sequenceItems.pop();e.sections=e.sections||[],e.sectionTitles=e.sectionTitles||[],e.sections.push({y:Oh.getVerticalPos(),height:0}),e.sectionTitles.push(t),this.sequenceItems.push(e)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return{bounds:this.data,models:this.models}}},Mh=t=>({fontFamily:t.messageFontFamily,fontSize:t.messageFontSize,fontWeight:t.messageFontWeight}),Ih=t=>({fontFamily:t.noteFontFamily,fontSize:t.noteFontSize,fontWeight:t.noteFontWeight}),Fh=t=>({fontFamily:t.actorFontFamily,fontSize:t.actorFontSize,fontWeight:t.actorFontWeight});const $h=function(t,e,n,r,i,a,s){if(!0===i.hideUnusedParticipants){const t=new Set;a.forEach((e=>{t.add(e.from),t.add(e.to)})),n=n.filter((e=>t.has(e)))}let o,c=0,l=0,h=0;for(const u of n){const n=e[u],i=n.box;o&&o!=i&&(s||Oh.models.addBox(o),l+=Dh.boxMargin+o.margin),i&&i!=o&&(s||(i.x=c+l,i.y=r),l+=i.margin),n.width=n.width||Dh.width,n.height=Math.max(n.height||Dh.height,Dh.height),n.margin=n.margin||Dh.actorMargin,n.x=c+l,n.y=Oh.getVerticalPos();const a=Nh.drawActor(t,n,Dh,s);h=Math.max(h,a),Oh.insert(n.x,r,n.x+n.width,n.height),c+=n.width+l,n.box&&(n.box.width=c+i.margin-n.box.x),l=n.margin,o=n.box,Oh.models.addActor(n)}o&&!s&&Oh.models.addBox(o),Oh.bumpVerticalPos(h)},Rh=function(t,e,n,r){let i=0,a=0;for(const s of n){const n=e[s],o=zh(n),c=Nh.drawPopup(t,n,o,Dh,Dh.forceMenus,r);c.height>i&&(i=c.height),c.width+n.x>a&&(a=c.width+n.x)}return{maxHeight:i,maxWidth:a}},Zh=function(t){Sn(Dh,t),t.fontFamily&&(Dh.actorFontFamily=Dh.noteFontFamily=Dh.messageFontFamily=t.fontFamily),t.fontSize&&(Dh.actorFontSize=Dh.noteFontSize=Dh.messageFontSize=t.fontSize),t.fontWeight&&(Dh.actorFontWeight=Dh.noteFontWeight=Dh.messageFontWeight=t.fontWeight)},Ph=function(t){return Oh.activations.filter((function(e){return e.actor===t}))},jh=function(t,e){const n=e[t],r=Ph(t);return[r.reduce((function(t,e){return Math.min(t,e.startx)}),n.x+n.width/2),r.reduce((function(t,e){return Math.max(t,e.stopx)}),n.x+n.width/2)]};function Yh(t,e,n,r,i){Oh.bumpVerticalPos(n);let a=r;if(e.id&&e.message&&t[e.id]){const n=t[e.id].width,i=Mh(Dh);e.message=Gn.wrapLabel(`[${e.message}]`,n-2*Dh.wrapPadding,i),e.width=n,e.wrap=!0;const s=Gn.calculateTextDimensions(e.message,i),o=Math.max(s.height,Dh.labelBoxHeight);a=r+o,Nt.debug(`${o} - ${e.message}`)}i(e),Oh.bumpVerticalPos(a)}const zh=function(t){let e=0;const n=Fh(Dh);for(const r in t.links){const t=Gn.calculateTextDimensions(r,n).width+2*Dh.wrapPadding+2*Dh.boxMargin;e<t&&(e=t)}return e};const Uh=function(t,e,n,r){const i={},a=[];let s,o,c;return t.forEach((function(t){switch(t.id=Gn.random({length:10}),t.type){case r.db.LINETYPE.LOOP_START:case r.db.LINETYPE.ALT_START:case r.db.LINETYPE.OPT_START:case r.db.LINETYPE.PAR_START:case r.db.LINETYPE.CRITICAL_START:case r.db.LINETYPE.BREAK_START:a.push({id:t.id,msg:t.message,from:Number.MAX_SAFE_INTEGER,to:Number.MIN_SAFE_INTEGER,width:0});break;case r.db.LINETYPE.ALT_ELSE:case r.db.LINETYPE.PAR_AND:case r.db.LINETYPE.CRITICAL_OPTION:t.message&&(s=a.pop(),i[s.id]=s,i[t.id]=s,a.push(s));break;case r.db.LINETYPE.LOOP_END:case r.db.LINETYPE.ALT_END:case r.db.LINETYPE.OPT_END:case r.db.LINETYPE.PAR_END:case r.db.LINETYPE.CRITICAL_END:case r.db.LINETYPE.BREAK_END:s=a.pop(),i[s.id]=s;break;case r.db.LINETYPE.ACTIVE_START:{const n=e[t.from?t.from.actor:t.to.actor],r=Ph(t.from?t.from.actor:t.to.actor).length,i=n.x+n.width/2+(r-1)*Dh.activationWidth/2,a={startx:i,stopx:i+Dh.activationWidth,actor:t.from.actor,enabled:!0};Oh.activations.push(a)}break;case r.db.LINETYPE.ACTIVE_END:{const e=Oh.activations.map((t=>t.actor)).lastIndexOf(t.from.actor);delete Oh.activations.splice(e,1)[0]}}void 0!==t.placement?(o=function(t,e,n){const r=e[t.from].x,i=e[t.to].x,a=t.wrap&&t.message;let s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Dh.width,Ih(Dh)):t.message,Ih(Dh));const o={width:a?Dh.width:Math.max(Dh.width,s.width+2*Dh.noteMargin),height:0,startx:e[t.from].x,stopx:0,starty:0,stopy:0,message:t.message};return t.placement===n.db.PLACEMENT.RIGHTOF?(o.width=a?Math.max(Dh.width,s.width):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width+Dh.actorMargin)/2):t.placement===n.db.PLACEMENT.LEFTOF?(o.width=a?Math.max(Dh.width,s.width+2*Dh.noteMargin):Math.max(e[t.from].width/2+e[t.to].width/2,s.width+2*Dh.noteMargin),o.startx=r-o.width+(e[t.from].width-Dh.actorMargin)/2):t.to===t.from?(s=Gn.calculateTextDimensions(a?Gn.wrapLabel(t.message,Math.max(Dh.width,e[t.from].width),Ih(Dh)):t.message,Ih(Dh)),o.width=a?Math.max(Dh.width,e[t.from].width):Math.max(e[t.from].width,Dh.width,s.width+2*Dh.noteMargin),o.startx=r+(e[t.from].width-o.width)/2):(o.width=Math.abs(r+e[t.from].width/2-(i+e[t.to].width/2))+Dh.actorMargin,o.startx=r<i?r+e[t.from].width/2-Dh.actorMargin/2:i+e[t.to].width/2-Dh.actorMargin/2),a&&(o.message=Gn.wrapLabel(t.message,o.width-2*Dh.wrapPadding,Ih(Dh))),Nt.debug(`NM:[${o.startx},${o.stopx},${o.starty},${o.stopy}:${o.width},${o.height}=${t.message}]`),o}(t,e,r),t.noteModel=o,a.forEach((t=>{s=t,s.from=Math.min(s.from,o.startx),s.to=Math.max(s.to,o.startx+o.width),s.width=Math.max(s.width,Math.abs(s.from-s.to))-Dh.labelBoxWidth}))):(c=function(t,e,n){let r=!1;if([n.db.LINETYPE.SOLID_OPEN,n.db.LINETYPE.DOTTED_OPEN,n.db.LINETYPE.SOLID,n.db.LINETYPE.DOTTED,n.db.LINETYPE.SOLID_CROSS,n.db.LINETYPE.DOTTED_CROSS,n.db.LINETYPE.SOLID_POINT,n.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(r=!0),!r)return{};const i=jh(t.from,e),a=jh(t.to,e),s=i[0]<=a[0]?1:0,o=i[0]<a[0]?0:1,c=[...i,...a],l=Math.abs(a[o]-i[s]);t.wrap&&t.message&&(t.message=Gn.wrapLabel(t.message,Math.max(l+2*Dh.wrapPadding,Dh.width),Mh(Dh)));const h=Gn.calculateTextDimensions(t.message,Mh(Dh));return{width:Math.max(t.wrap?0:h.width+2*Dh.wrapPadding,l+2*Dh.wrapPadding,Dh.width),height:0,startx:i[s],stopx:a[o],starty:0,stopy:0,message:t.message,type:t.type,wrap:t.wrap,fromBounds:Math.min.apply(null,c),toBounds:Math.max.apply(null,c)}}(t,e,r),t.msgModel=c,c.startx&&c.stopx&&a.length>0&&a.forEach((n=>{if(s=n,c.startx===c.stopx){const n=e[t.from],r=e[t.to];s.from=Math.min(n.x-c.width/2,n.x-n.width/2,s.from),s.to=Math.max(r.x+c.width/2,r.x+n.width/2,s.to),s.width=Math.max(s.width,Math.abs(s.to-s.from))-Dh.labelBoxWidth}else s.from=Math.min(c.startx,s.from),s.to=Math.max(c.stopx,s.to),s.width=Math.max(s.width,c.width)-Dh.labelBoxWidth})))})),Oh.activations=[],Nt.debug("Loop type widths:",i),i},Wh={bounds:Oh,drawActors:$h,drawActorsPopup:Rh,setConf:Zh,draw:function(t,e,n,r){const{securityLevel:i,sequence:a}=ar();let s;Dh=a,r.db.clear(),r.parser.parse(t),"sandbox"===i&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===i?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body"),l="sandbox"===i?s.nodes()[0].contentDocument:document;Oh.init(),Nt.debug(r.db);const h="sandbox"===i?c.select(`[id="${e}"]`):(0,o.Ys)(`[id="${e}"]`),u=r.db.getActors(),d=r.db.getBoxes(),p=r.db.getActorKeys(),f=r.db.getMessages(),g=r.db.getDiagramTitle(),y=r.db.hasAtLeastOneBox(),m=r.db.hasAtLeastOneBoxWithTitle(),b=function(t,e,n){const r={};return e.forEach((function(e){if(t[e.to]&&t[e.from]){const i=t[e.to];if(e.placement===n.db.PLACEMENT.LEFTOF&&!i.prevActor)return;if(e.placement===n.db.PLACEMENT.RIGHTOF&&!i.nextActor)return;const a=void 0!==e.placement,s=!a,o=a?Ih(Dh):Mh(Dh),c=e.wrap?Gn.wrapLabel(e.message,Dh.width-2*Dh.wrapPadding,o):e.message,l=Gn.calculateTextDimensions(c,o).width+2*Dh.wrapPadding;s&&e.from===i.nextActor?r[e.to]=Math.max(r[e.to]||0,l):s&&e.from===i.prevActor?r[e.from]=Math.max(r[e.from]||0,l):s&&e.from===e.to?(r[e.from]=Math.max(r[e.from]||0,l/2),r[e.to]=Math.max(r[e.to]||0,l/2)):e.placement===n.db.PLACEMENT.RIGHTOF?r[e.from]=Math.max(r[e.from]||0,l):e.placement===n.db.PLACEMENT.LEFTOF?r[i.prevActor]=Math.max(r[i.prevActor]||0,l):e.placement===n.db.PLACEMENT.OVER&&(i.prevActor&&(r[i.prevActor]=Math.max(r[i.prevActor]||0,l/2)),i.nextActor&&(r[e.from]=Math.max(r[e.from]||0,l/2)))}})),Nt.debug("maxMessageWidthPerActor:",r),r}(u,f,r);Dh.height=function(t,e,n){let r=0;Object.keys(t).forEach((e=>{const n=t[e];n.wrap&&(n.description=Gn.wrapLabel(n.description,Dh.width-2*Dh.wrapPadding,Fh(Dh)));const i=Gn.calculateTextDimensions(n.description,Fh(Dh));n.width=n.wrap?Dh.width:Math.max(Dh.width,i.width+2*Dh.wrapPadding),n.height=n.wrap?Math.max(i.height,Dh.height):Dh.height,r=Math.max(r,n.height)}));for(const a in e){const n=t[a];if(!n)continue;const r=t[n.nextActor];if(!r){const t=e[a]+Dh.actorMargin-n.width/2;n.margin=Math.max(t,Dh.actorMargin);continue}const i=e[a]+Dh.actorMargin-n.width/2-r.width/2;n.margin=Math.max(i,Dh.actorMargin)}let i=0;return n.forEach((e=>{const n=Mh(Dh);let r=e.actorKeys.reduce(((e,n)=>e+(t[n].width+(t[n].margin||0))),0);r-=2*Dh.boxTextMargin,e.wrap&&(e.name=Gn.wrapLabel(e.name,r-2*Dh.wrapPadding,n));const a=Gn.calculateTextDimensions(e.name,n);i=Math.max(a.height,i);const s=Math.max(r,a.width+2*Dh.wrapPadding);if(e.margin=Dh.boxTextMargin,r<s){const t=(s-r)/2;e.margin+=t}})),n.forEach((t=>t.textMaxHeight=i)),Math.max(r,Dh.height)}(u,b,d),Nh.insertComputerIcon(h),Nh.insertDatabaseIcon(h),Nh.insertClockIcon(h),y&&(Oh.bumpVerticalPos(Dh.boxMargin),m&&Oh.bumpVerticalPos(d[0].textMaxHeight)),$h(h,u,p,0,Dh,f,!1);const _=Uh(f,u,b,r);Nh.insertArrowHead(h),Nh.insertArrowCrossHead(h),Nh.insertArrowFilledHead(h),Nh.insertSequenceNumber(h);let x=1,v=1;const k=[];f.forEach((function(t){let e,n,i;switch(t.type){case r.db.LINETYPE.NOTE:n=t.noteModel,function(t,e){Oh.bumpVerticalPos(Dh.boxMargin),e.height=Dh.boxMargin,e.starty=Oh.getVerticalPos();const n=Nh.getNoteRect();n.x=e.startx,n.y=e.starty,n.width=e.width||Dh.width,n.class="note";const r=t.append("g"),i=Nh.drawRect(r,n),a=Nh.getTextObj();a.x=e.startx,a.y=e.starty,a.width=n.width,a.dy="1em",a.text=e.message,a.class="noteText",a.fontFamily=Dh.noteFontFamily,a.fontSize=Dh.noteFontSize,a.fontWeight=Dh.noteFontWeight,a.anchor=Dh.noteAlign,a.textMargin=Dh.noteMargin,a.valign="center";const s=kh(r,a),o=Math.round(s.map((t=>(t._groups||t)[0][0].getBBox().height)).reduce(((t,e)=>t+e)));i.attr("height",o+2*Dh.noteMargin),e.height+=o+2*Dh.noteMargin,Oh.bumpVerticalPos(o+2*Dh.noteMargin),e.stopy=e.starty+o+2*Dh.noteMargin,e.stopx=e.startx+n.width,Oh.insert(e.startx,e.starty,e.stopx,e.stopy),Oh.models.addNote(e)}(h,n);break;case r.db.LINETYPE.ACTIVE_START:Oh.newActivation(t,h,u);break;case r.db.LINETYPE.ACTIVE_END:!function(t,e){const n=Oh.endActivation(t);n.starty+18>e&&(n.starty=e-6,e+=12),Nh.drawActivation(h,n,e,Dh,Ph(t.from.actor).length),Oh.insert(n.startx,e-10,n.stopx,e)}(t,Oh.getVerticalPos());break;case r.db.LINETYPE.LOOP_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.LOOP_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"loop",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.RECT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin,(t=>Oh.newLoop(void 0,t.message)));break;case r.db.LINETYPE.RECT_END:e=Oh.endLoop(),Nh.drawBackgroundRect(h,e),Oh.models.addLoop(e),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos());break;case r.db.LINETYPE.OPT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.OPT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"opt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.ALT_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.ALT_ELSE:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.ALT_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"alt",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.PAR_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.PAR_AND:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.PAR_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"par",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.AUTONUMBER:x=t.message.start||x,v=t.message.step||v,t.message.visible?r.db.enableSequenceNumbers():r.db.disableSequenceNumbers();break;case r.db.LINETYPE.CRITICAL_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.CRITICAL_OPTION:Yh(_,t,Dh.boxMargin+Dh.boxTextMargin,Dh.boxMargin,(t=>Oh.addSectionToLoop(t)));break;case r.db.LINETYPE.CRITICAL_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"critical",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;case r.db.LINETYPE.BREAK_START:Yh(_,t,Dh.boxMargin,Dh.boxMargin+Dh.boxTextMargin,(t=>Oh.newLoop(t)));break;case r.db.LINETYPE.BREAK_END:e=Oh.endLoop(),Nh.drawLoop(h,e,"break",Dh),Oh.bumpVerticalPos(e.stopy-Oh.getVerticalPos()),Oh.models.addLoop(e);break;default:try{i=t.msgModel,i.starty=Oh.getVerticalPos(),i.sequenceIndex=x,i.sequenceVisible=r.db.showSequenceNumbers();const e=function(t,e){Oh.bumpVerticalPos(10);const{startx:n,stopx:r,message:i}=e,a=Yt.splitBreaks(i).length,s=Gn.calculateTextDimensions(i,Mh(Dh)),o=s.height/a;let c;e.height+=o,Oh.bumpVerticalPos(o);let l=s.height-10;const h=s.width;if(n===r){c=Oh.getVerticalPos()+l,Dh.rightAngles||(l+=Dh.boxMargin,c=Oh.getVerticalPos()+l),l+=30;const t=Math.max(h/2,Dh.width/2);Oh.insert(n-t,Oh.getVerticalPos()-10+l,r+t,Oh.getVerticalPos()+30+l)}else l+=Dh.boxMargin,c=Oh.getVerticalPos()+l,Oh.insert(n,c-10,r,c);return Oh.bumpVerticalPos(l),e.height+=l,e.stopy=e.starty+e.height,Oh.insert(e.fromBounds,e.starty,e.toBounds,e.stopy),c}(0,i);k.push({messageModel:i,lineStartY:e}),Oh.models.addMessage(i)}catch(a){Nt.error("error while drawing message",a)}}[r.db.LINETYPE.SOLID_OPEN,r.db.LINETYPE.DOTTED_OPEN,r.db.LINETYPE.SOLID,r.db.LINETYPE.DOTTED,r.db.LINETYPE.SOLID_CROSS,r.db.LINETYPE.DOTTED_CROSS,r.db.LINETYPE.SOLID_POINT,r.db.LINETYPE.DOTTED_POINT].includes(t.type)&&(x+=v)})),k.forEach((t=>function(t,e,n,r){const{startx:i,stopx:a,starty:s,message:o,type:c,sequenceIndex:l,sequenceVisible:h}=e,u=Gn.calculateTextDimensions(o,Mh(Dh)),d=Nh.getTextObj();d.x=i,d.y=s+10,d.width=a-i,d.class="messageText",d.dy="1em",d.text=o,d.fontFamily=Dh.messageFontFamily,d.fontSize=Dh.messageFontSize,d.fontWeight=Dh.messageFontWeight,d.anchor=Dh.messageAlign,d.valign="center",d.textMargin=Dh.wrapPadding,d.tspan=!1,kh(t,d);const p=u.width;let f;i===a?f=Dh.rightAngles?t.append("path").attr("d",`M  ${i},${n} H ${i+Math.max(Dh.width/2,p/2)} V ${n+25} H ${i}`):t.append("path").attr("d","M "+i+","+n+" C "+(i+60)+","+(n-10)+" "+(i+60)+","+(n+30)+" "+i+","+(n+20)):(f=t.append("line"),f.attr("x1",i),f.attr("y1",n),f.attr("x2",a),f.attr("y2",n)),c===r.db.LINETYPE.DOTTED||c===r.db.LINETYPE.DOTTED_CROSS||c===r.db.LINETYPE.DOTTED_POINT||c===r.db.LINETYPE.DOTTED_OPEN?(f.style("stroke-dasharray","3, 3"),f.attr("class","messageLine1")):f.attr("class","messageLine0");let g="";Dh.arrowMarkerAbsolute&&(g=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,g=g.replace(/\(/g,"\\("),g=g.replace(/\)/g,"\\)")),f.attr("stroke-width",2),f.attr("stroke","none"),f.style("fill","none"),c!==r.db.LINETYPE.SOLID&&c!==r.db.LINETYPE.DOTTED||f.attr("marker-end","url("+g+"#arrowhead)"),c!==r.db.LINETYPE.SOLID_POINT&&c!==r.db.LINETYPE.DOTTED_POINT||f.attr("marker-end","url("+g+"#filled-head)"),c!==r.db.LINETYPE.SOLID_CROSS&&c!==r.db.LINETYPE.DOTTED_CROSS||f.attr("marker-end","url("+g+"#crosshead)"),(h||Dh.showSequenceNumbers)&&(f.attr("marker-start","url("+g+"#sequencenumber)"),t.append("text").attr("x",i).attr("y",n+4).attr("font-family","sans-serif").attr("font-size","12px").attr("text-anchor","middle").attr("class","sequenceNumber").text(l))}(h,t.messageModel,t.lineStartY,r))),Dh.mirrorActors&&(Oh.bumpVerticalPos(2*Dh.boxMargin),$h(h,u,p,Oh.getVerticalPos(),Dh,f,!0),Oh.bumpVerticalPos(Dh.boxMargin),Ch(h,Oh.getVerticalPos())),Oh.models.boxes.forEach((function(t){t.height=Oh.getVerticalPos()-t.y,Oh.insert(t.x,t.y,t.x+t.width,t.height),t.startx=t.x,t.starty=t.y,t.stopx=t.startx+t.width,t.stopy=t.starty+t.height,t.stroke="rgb(0,0,0, 0.5)",Nh.drawBox(h,t,Dh)})),y&&Oh.bumpVerticalPos(Dh.boxMargin);const w=Rh(h,u,p,l),{bounds:E}=Oh.getBounds();Nt.debug("For line height fix Querying: #"+e+" .actor-line");(0,o.td_)("#"+e+" .actor-line").attr("y2",E.stopy);let C=E.stopy-E.starty;C<w.maxHeight&&(C=w.maxHeight);let T=C+2*Dh.diagramMarginY;Dh.mirrorActors&&(T=T-Dh.boxMargin+Dh.bottomMarginAdj);let S=E.stopx-E.startx;S<w.maxWidth&&(S=w.maxWidth);const A=S+2*Dh.diagramMarginX;g&&h.append("text").text(g).attr("x",(E.stopx-E.startx)/2-2*Dh.diagramMarginX).attr("y",-25),dr(h,T,A,Dh.useMaxWidth);const L=g?40:0;h.attr("viewBox",E.startx-Dh.diagramMarginX+" -"+(Dh.diagramMarginY+L)+" "+A+" "+(T+L)),Nt.debug("models:",Oh.models)}};var qh=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,3],i=[1,5],a=[1,7],s=[2,5],o=[1,15],c=[1,17],l=[1,21],h=[1,22],u=[1,23],d=[1,24],p=[1,37],f=[1,25],g=[1,26],y=[1,27],m=[1,28],b=[1,29],_=[1,32],x=[1,33],v=[1,34],k=[1,35],w=[1,36],E=[1,39],C=[1,40],T=[1,41],S=[1,42],A=[1,38],L=[1,45],B=[1,4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],N=[1,4,5,14,15,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],D=[1,4,5,7,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],O=[4,5,16,17,19,21,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],M={trace:function(){},yy:{},symbols_:{error:2,start:3,SPACE:4,NL:5,directive:6,SD:7,document:8,line:9,statement:10,classDefStatement:11,cssClassStatement:12,idStatement:13,DESCR:14,"--\x3e":15,HIDE_EMPTY:16,scale:17,WIDTH:18,COMPOSIT_STATE:19,STRUCT_START:20,STRUCT_STOP:21,STATE_DESCR:22,AS:23,ID:24,FORK:25,JOIN:26,CHOICE:27,CONCURRENT:28,note:29,notePosition:30,NOTE_TEXT:31,direction:32,acc_title:33,acc_title_value:34,acc_descr:35,acc_descr_value:36,acc_descr_multiline_value:37,classDef:38,CLASSDEF_ID:39,CLASSDEF_STYLEOPTS:40,DEFAULT:41,class:42,CLASSENTITY_IDS:43,STYLECLASS:44,openDirective:45,typeDirective:46,closeDirective:47,":":48,argDirective:49,direction_tb:50,direction_bt:51,direction_rl:52,direction_lr:53,eol:54,";":55,EDGE_STATE:56,STYLE_SEPARATOR:57,left_of:58,right_of:59,open_directive:60,type_directive:61,arg_directive:62,close_directive:63,$accept:0,$end:1},terminals_:{2:"error",4:"SPACE",5:"NL",7:"SD",14:"DESCR",15:"--\x3e",16:"HIDE_EMPTY",17:"scale",18:"WIDTH",19:"COMPOSIT_STATE",20:"STRUCT_START",21:"STRUCT_STOP",22:"STATE_DESCR",23:"AS",24:"ID",25:"FORK",26:"JOIN",27:"CHOICE",28:"CONCURRENT",29:"note",31:"NOTE_TEXT",33:"acc_title",34:"acc_title_value",35:"acc_descr",36:"acc_descr_value",37:"acc_descr_multiline_value",38:"classDef",39:"CLASSDEF_ID",40:"CLASSDEF_STYLEOPTS",41:"DEFAULT",42:"class",43:"CLASSENTITY_IDS",44:"STYLECLASS",48:":",50:"direction_tb",51:"direction_bt",52:"direction_rl",53:"direction_lr",55:";",56:"EDGE_STATE",57:"STYLE_SEPARATOR",58:"left_of",59:"right_of",60:"open_directive",61:"type_directive",62:"arg_directive",63:"close_directive"},productions_:[0,[3,2],[3,2],[3,2],[3,2],[8,0],[8,2],[9,2],[9,1],[9,1],[10,1],[10,1],[10,1],[10,2],[10,3],[10,4],[10,1],[10,2],[10,1],[10,4],[10,3],[10,6],[10,1],[10,1],[10,1],[10,1],[10,4],[10,4],[10,1],[10,1],[10,2],[10,2],[10,1],[11,3],[11,3],[12,3],[6,3],[6,5],[32,1],[32,1],[32,1],[32,1],[54,1],[54,1],[13,1],[13,1],[13,3],[13,3],[30,1],[30,1],[45,1],[46,1],[49,1],[47,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 4:return r.setRootDoc(a[o]),a[o];case 5:this.$=[];break;case 6:"nl"!=a[o]&&(a[o-1].push(a[o]),this.$=a[o-1]);break;case 7:case 8:case 12:this.$=a[o];break;case 9:this.$="nl";break;case 13:const t=a[o-1];t.description=r.trimColon(a[o]),this.$=t;break;case 14:this.$={stmt:"relation",state1:a[o-2],state2:a[o]};break;case 15:const e=r.trimColon(a[o]);this.$={stmt:"relation",state1:a[o-3],state2:a[o-1],description:e};break;case 19:this.$={stmt:"state",id:a[o-3],type:"default",description:"",doc:a[o-1]};break;case 20:var c=a[o],l=a[o-2].trim();if(a[o].match(":")){var h=a[o].split(":");c=h[0],l=[l,h[1]]}this.$={stmt:"state",id:c,type:"default",description:l};break;case 21:this.$={stmt:"state",id:a[o-3],type:"default",description:a[o-5],doc:a[o-1]};break;case 22:this.$={stmt:"state",id:a[o],type:"fork"};break;case 23:this.$={stmt:"state",id:a[o],type:"join"};break;case 24:this.$={stmt:"state",id:a[o],type:"choice"};break;case 25:this.$={stmt:"state",id:r.getDividerId(),type:"divider"};break;case 26:this.$={stmt:"state",id:a[o-1].trim(),note:{position:a[o-2].trim(),text:a[o].trim()}};break;case 30:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 31:case 32:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 33:case 34:this.$={stmt:"classDef",id:a[o-1].trim(),classes:a[o].trim()};break;case 35:this.$={stmt:"applyClass",id:a[o-1].trim(),styleClass:a[o].trim()};break;case 38:r.setDirection("TB"),this.$={stmt:"dir",value:"TB"};break;case 39:r.setDirection("BT"),this.$={stmt:"dir",value:"BT"};break;case 40:r.setDirection("RL"),this.$={stmt:"dir",value:"RL"};break;case 41:r.setDirection("LR"),this.$={stmt:"dir",value:"LR"};break;case 44:case 45:this.$={stmt:"state",id:a[o].trim(),type:"default",description:""};break;case 46:case 47:this.$={stmt:"state",id:a[o-2].trim(),classes:[a[o].trim()],type:"default",description:""};break;case 50:r.parseDirective("%%{","open_directive");break;case 51:r.parseDirective(a[o],"type_directive");break;case 52:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 53:r.parseDirective("}%%","close_directive","state")}},table:[{3:1,4:n,5:r,6:4,7:i,45:6,60:a},{1:[3]},{3:8,4:n,5:r,6:4,7:i,45:6,60:a},{3:9,4:n,5:r,6:4,7:i,45:6,60:a},{3:10,4:n,5:r,6:4,7:i,45:6,60:a},e([1,4,5,16,17,19,22,24,25,26,27,28,29,33,35,37,38,42,50,51,52,53,56,60],s,{8:11}),{46:12,61:[1,13]},{61:[2,50]},{1:[2,1]},{1:[2,2]},{1:[2,3]},{1:[2,4],4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},{47:43,48:[1,44],63:L},e([48,63],[2,51]),e(B,[2,6]),{6:30,10:46,11:18,12:19,13:20,16:l,17:h,19:u,22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,8]),e(B,[2,9]),e(B,[2,10]),e(B,[2,11]),e(B,[2,12],{14:[1,47],15:[1,48]}),e(B,[2,16]),{18:[1,49]},e(B,[2,18],{20:[1,50]}),{23:[1,51]},e(B,[2,22]),e(B,[2,23]),e(B,[2,24]),e(B,[2,25]),{30:52,31:[1,53],58:[1,54],59:[1,55]},e(B,[2,28]),e(B,[2,29]),{34:[1,56]},{36:[1,57]},e(B,[2,32]),{39:[1,58],41:[1,59]},{43:[1,60]},e(N,[2,44],{57:[1,61]}),e(N,[2,45],{57:[1,62]}),e(B,[2,38]),e(B,[2,39]),e(B,[2,40]),e(B,[2,41]),e(D,[2,36]),{49:63,62:[1,64]},e(D,[2,53]),e(B,[2,7]),e(B,[2,13]),{13:65,24:p,56:A},e(B,[2,17]),e(O,s,{8:66}),{24:[1,67]},{24:[1,68]},{23:[1,69]},{24:[2,48]},{24:[2,49]},e(B,[2,30]),e(B,[2,31]),{40:[1,70]},{40:[1,71]},{44:[1,72]},{24:[1,73]},{24:[1,74]},{47:75,63:L},{63:[2,52]},e(B,[2,14],{14:[1,76]}),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,77],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,20],{20:[1,78]}),{31:[1,79]},{24:[1,80]},e(B,[2,33]),e(B,[2,34]),e(B,[2,35]),e(N,[2,46]),e(N,[2,47]),e(D,[2,37]),e(B,[2,15]),e(B,[2,19]),e(O,s,{8:81}),e(B,[2,26]),e(B,[2,27]),{4:o,5:c,6:30,9:14,10:16,11:18,12:19,13:20,16:l,17:h,19:u,21:[1,82],22:d,24:p,25:f,26:g,27:y,28:m,29:b,32:31,33:_,35:x,37:v,38:k,42:w,45:6,50:E,51:C,52:T,53:S,56:A,60:a},e(B,[2,21])],defaultActions:{7:[2,50],8:[2,1],9:[2,2],10:[2,3],54:[2,48],55:[2,49],64:[2,52]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},I=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return 41;case 1:case 44:return 50;case 2:case 45:return 51;case 3:case 46:return 52;case 4:case 47:return 53;case 5:return this.begin("open_directive"),60;case 6:return this.begin("type_directive"),61;case 7:return this.popState(),this.begin("arg_directive"),48;case 8:return this.popState(),this.popState(),63;case 9:return 62;case 10:case 11:case 13:case 14:case 15:case 16:case 56:case 58:case 64:break;case 12:case 79:return 5;case 17:case 34:return this.pushState("SCALE"),17;case 18:case 35:return 18;case 19:case 25:case 36:case 51:case 54:this.popState();break;case 20:return this.begin("acc_title"),33;case 21:return this.popState(),"acc_title_value";case 22:return this.begin("acc_descr"),35;case 23:return this.popState(),"acc_descr_value";case 24:this.begin("acc_descr_multiline");break;case 26:return"acc_descr_multiline_value";case 27:return this.pushState("CLASSDEF"),38;case 28:return this.popState(),this.pushState("CLASSDEFID"),"DEFAULT_CLASSDEF_ID";case 29:return this.popState(),this.pushState("CLASSDEFID"),39;case 30:return this.popState(),40;case 31:return this.pushState("CLASS"),42;case 32:return this.popState(),this.pushState("CLASS_STYLE"),43;case 33:return this.popState(),44;case 37:this.pushState("STATE");break;case 38:case 41:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),25;case 39:case 42:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),26;case 40:case 43:return this.popState(),e.yytext=e.yytext.slice(0,-10).trim(),27;case 48:this.pushState("STATE_STRING");break;case 49:return this.pushState("STATE_ID"),"AS";case 50:case 66:return this.popState(),"ID";case 52:return"STATE_DESCR";case 53:return 19;case 55:return this.popState(),this.pushState("struct"),20;case 57:return this.popState(),21;case 59:return this.begin("NOTE"),29;case 60:return this.popState(),this.pushState("NOTE_ID"),58;case 61:return this.popState(),this.pushState("NOTE_ID"),59;case 62:this.popState(),this.pushState("FLOATING_NOTE");break;case 63:return this.popState(),this.pushState("FLOATING_NOTE_ID"),"AS";case 65:return"NOTE_TEXT";case 67:return this.popState(),this.pushState("NOTE_TEXT"),24;case 68:return this.popState(),e.yytext=e.yytext.substr(2).trim(),31;case 69:return this.popState(),e.yytext=e.yytext.slice(0,-8).trim(),31;case 70:case 71:return 7;case 72:return 16;case 73:return 56;case 74:return 24;case 75:return e.yytext=e.yytext.trim(),14;case 76:return 15;case 77:return 28;case 78:return 57;case 80:return"INVALID"}},rules:[/^(?:default\b)/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:[\s]+)/i,/^(?:((?!\n)\s)+)/i,/^(?:#[^\n]*)/i,/^(?:%[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:classDef\s+)/i,/^(?:DEFAULT\s+)/i,/^(?:\w+\s+)/i,/^(?:[^\n]*)/i,/^(?:class\s+)/i,/^(?:(\w+)+((,\s*\w+)*))/i,/^(?:[^\n]*)/i,/^(?:scale\s+)/i,/^(?:\d+)/i,/^(?:\s+width\b)/i,/^(?:state\s+)/i,/^(?:.*<<fork>>)/i,/^(?:.*<<join>>)/i,/^(?:.*<<choice>>)/i,/^(?:.*\[\[fork\]\])/i,/^(?:.*\[\[join\]\])/i,/^(?:.*\[\[choice\]\])/i,/^(?:.*direction\s+TB[^\n]*)/i,/^(?:.*direction\s+BT[^\n]*)/i,/^(?:.*direction\s+RL[^\n]*)/i,/^(?:.*direction\s+LR[^\n]*)/i,/^(?:["])/i,/^(?:\s*as\s+)/i,/^(?:[^\n\{]*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n\s\{]+)/i,/^(?:\n)/i,/^(?:\{)/i,/^(?:%%(?!\{)[^\n]*)/i,/^(?:\})/i,/^(?:[\n])/i,/^(?:note\s+)/i,/^(?:left of\b)/i,/^(?:right of\b)/i,/^(?:")/i,/^(?:\s*as\s*)/i,/^(?:["])/i,/^(?:[^"]*)/i,/^(?:[^\n]*)/i,/^(?:\s*[^:\n\s\-]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:[\s\S]*?end note\b)/i,/^(?:stateDiagram\s+)/i,/^(?:stateDiagram-v2\s+)/i,/^(?:hide empty description\b)/i,/^(?:\[\*\])/i,/^(?:[^:\n\s\-\{]+)/i,/^(?:\s*:[^:\n;]+)/i,/^(?:-->)/i,/^(?:--)/i,/^(?::::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{LINE:{rules:[14,15],inclusive:!1},close_directive:{rules:[14,15],inclusive:!1},arg_directive:{rules:[8,9,14,15],inclusive:!1},type_directive:{rules:[7,8,14,15],inclusive:!1},open_directive:{rules:[6,14,15],inclusive:!1},struct:{rules:[14,15,27,31,37,44,45,46,47,56,57,58,59,73,74,75,76,77],inclusive:!1},FLOATING_NOTE_ID:{rules:[66],inclusive:!1},FLOATING_NOTE:{rules:[63,64,65],inclusive:!1},NOTE_TEXT:{rules:[68,69],inclusive:!1},NOTE_ID:{rules:[67],inclusive:!1},NOTE:{rules:[60,61,62],inclusive:!1},CLASS_STYLE:{rules:[33],inclusive:!1},CLASS:{rules:[32],inclusive:!1},CLASSDEFID:{rules:[30],inclusive:!1},CLASSDEF:{rules:[28,29],inclusive:!1},acc_descr_multiline:{rules:[25,26],inclusive:!1},acc_descr:{rules:[23],inclusive:!1},acc_title:{rules:[21],inclusive:!1},SCALE:{rules:[18,19,35,36],inclusive:!1},ALIAS:{rules:[],inclusive:!1},STATE_ID:{rules:[50],inclusive:!1},STATE_STRING:{rules:[51,52],inclusive:!1},FORK_STATE:{rules:[],inclusive:!1},STATE:{rules:[14,15,38,39,40,41,42,43,48,49,53,54,55],inclusive:!1},ID:{rules:[14,15],inclusive:!1},INITIAL:{rules:[0,1,2,3,4,5,10,11,12,13,15,16,17,20,22,24,27,31,34,37,55,59,70,71,72,73,74,75,76,78,79,80],inclusive:!0}}},t);function F(){this.yy={}}return M.lexer=I,F.prototype=M,M.Parser=F,new F}();qh.parser=qh;const Hh=qh,Vh=(t,e)=>{var n;return"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer)&&null!==t.match(/^\s*stateDiagram/)},Gh=(t,e)=>{var n;return null!==t.match(/^\s*stateDiagram-v2/)||!(!t.match(/^\s*stateDiagram/)||"dagre-wrapper"!==(null==(n=null==e?void 0:e.state)?void 0:n.defaultRenderer))},Xh="state",Kh="relation",Qh="default",Jh="divider",tu="[*]",eu="start",nu="color",ru="fill";let iu="LR",au=[],su={};let ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,hu=0;const uu=t=>JSON.parse(JSON.stringify(t)),du=(t,e,n)=>{if(e.stmt===Kh)du(t,e.state1,!0),du(t,e.state2,!1);else if(e.stmt===Xh&&("[*]"===e.id?(e.id=n?t.id+"_start":t.id+"_end",e.start=n):e.id=e.id.trim()),e.doc){const t=[];let n,r=[];for(n=0;n<e.doc.length;n++)if(e.doc[n].type===Jh){const i=uu(e.doc[n]);i.doc=uu(r),t.push(i),r=[]}else r.push(e.doc[n]);if(t.length>0&&r.length>0){const n={stmt:Xh,id:Fn(),type:"divider",doc:uu(r)};t.push(uu(n)),e.doc=t}e.doc.forEach((t=>du(e,t,!0)))}},pu=function(t,e="default",n=null,r=null,i=null,a=null,s=null,o=null){const c=null==t?void 0:t.trim();if(void 0===cu.states[c]?(Nt.info("Adding state ",c,r),cu.states[c]={id:c,descriptions:[],type:e,doc:n,note:i,classes:[],styles:[],textStyles:[]}):(cu.states[c].doc||(cu.states[c].doc=n),cu.states[c].type||(cu.states[c].type=e)),r&&(Nt.info("Setting state description",c,r),"string"==typeof r&&_u(c,r.trim()),"object"==typeof r&&r.forEach((t=>_u(c,t.trim())))),i&&(cu.states[c].note=i,cu.states[c].note.text=Yt.sanitizeText(cu.states[c].note.text,ar())),a){Nt.info("Setting state classes",c,a);("string"==typeof a?[a]:a).forEach((t=>vu(c,t.trim())))}if(s){Nt.info("Setting state styles",c,s);("string"==typeof s?[s]:s).forEach((t=>ku(c,t.trim())))}if(o){Nt.info("Setting state styles",c,s);("string"==typeof o?[o]:o).forEach((t=>wu(c,t.trim())))}},fu=function(t){ou={root:{relations:[],states:{},documents:{}}},cu=ou.root,lu=0,su={},t||Dr()},gu=function(t){return cu.states[t]};function yu(t=""){let e=t;return t===tu&&(lu++,e=`start${lu}`),e}function mu(t="",e="default"){return t===tu?eu:e}const bu=function(t,e,n){if("object"==typeof t)!function(t,e,n){let r=yu(t.id.trim()),i=mu(t.id.trim(),t.type),a=yu(e.id.trim()),s=mu(e.id.trim(),e.type);pu(r,i,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles),pu(a,s,e.doc,e.description,e.note,e.classes,e.styles,e.textStyles),cu.relations.push({id1:r,id2:a,relationTitle:Yt.sanitizeText(n,ar())})}(t,e,n);else{const r=yu(t.trim()),i=mu(t),a=function(t=""){let e=t;return"[*]"===t&&(lu++,e=`end${lu}`),e}(e.trim()),s=function(t="",e="default"){return"[*]"===t?"end":e}(e);pu(r,i),pu(a,s),cu.relations.push({id1:r,id2:a,title:Yt.sanitizeText(n,ar())})}},_u=function(t,e){const n=cu.states[t],r=e.startsWith(":")?e.replace(":","").trim():e;n.descriptions.push(Yt.sanitizeText(r,ar()))},xu=function(t,e=""){void 0===su[t]&&(su[t]={id:t,styles:[],textStyles:[]});const n=su[t];null!=e&&e.split(",").forEach((t=>{const e=t.replace(/([^;]*);/,"$1").trim();if(t.match(nu)){const t=e.replace(ru,"bgFill").replace(nu,ru);n.textStyles.push(t)}n.styles.push(e)}))},vu=function(t,e){t.split(",").forEach((function(t){let n=gu(t);if(void 0===n){const e=t.trim();pu(e),n=gu(e)}n.classes.push(e)}))},ku=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},wu=function(t,e){const n=gu(t);void 0!==n&&n.textStyles.push(e)},Eu={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().state,addState:pu,clear:fu,getState:gu,getStates:function(){return cu.states},getRelations:function(){return cu.relations},getClasses:function(){return su},getDirection:()=>iu,addRelation:bu,getDividerId:()=>(hu++,"divider-id-"+hu),setDirection:t=>{iu=t},cleanupLabel:function(t){return":"===t.substring(0,1)?t.substr(2).trim():t.trim()},lineType:{LINE:0,DOTTED_LINE:1},relationType:{AGGREGATION:0,EXTENSION:1,COMPOSITION:2,DEPENDENCY:3},logDocuments:function(){Nt.info("Documents = ",ou)},getRootDoc:()=>au,setRootDoc:t=>{Nt.info("Setting root doc",t),au=t},getRootDocV2:()=>(du({id:"root"},{id:"root",doc:au},!0),{id:"root",doc:au}),extract:t=>{let e;e=t.doc?t.doc:t,Nt.info(e),fu(!0),Nt.info("Extract",e),e.forEach((t=>{switch(t.stmt){case Xh:pu(t.id.trim(),t.type,t.doc,t.description,t.note,t.classes,t.styles,t.textStyles);break;case Kh:bu(t.state1,t.state2,t.description);break;case"classDef":xu(t.id.trim(),t.classes);break;case"applyClass":vu(t.id.trim(),t.styleClass)}}))},trimColon:t=>t&&":"===t[0]?t.substr(1).trim():t.trim(),getAccTitle:Mr,setAccTitle:Or,getAccDescription:Fr,setAccDescription:Ir,addStyleClass:xu,setCssClass:vu,addDescription:_u,setDiagramTitle:$r,getDiagramTitle:Rr},Cu={},Tu=(t,e)=>{Cu[t]=e},Su=(t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+1.3*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.descriptions[0]).node().getBBox(),r=n.height,i=t.append("text").attr("x",ar().state.padding).attr("y",r+.4*ar().state.padding+ar().state.dividerMargin+ar().state.textHeight).attr("class","state-description");let a=!0,s=!0;e.descriptions.forEach((function(t){a||(!function(t,e,n){const r=t.append("tspan").attr("x",2*ar().state.padding).text(e);n||r.attr("dy",ar().state.textHeight)}(i,t,s),s=!1),a=!1}));const o=t.append("line").attr("x1",ar().state.padding).attr("y1",ar().state.padding+r+ar().state.dividerMargin/2).attr("y2",ar().state.padding+r+ar().state.dividerMargin/2).attr("class","descr-divider"),c=i.node().getBBox(),l=Math.max(c.width,n.width);return o.attr("x2",l+3*ar().state.padding),t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",l+2*ar().state.padding).attr("height",c.height+r+2*ar().state.padding).attr("rx",ar().state.radius),t},Au=(t,e,n)=>{const r=ar().state.padding,i=2*ar().state.padding,a=t.node().getBBox(),s=a.width,o=a.x,c=t.append("text").attr("x",0).attr("y",ar().state.titleShift).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),l=c.node().getBBox().width+i;let h,u=Math.max(l,s);u===s&&(u+=i);const d=t.node().getBBox();e.doc,h=o-r,l>s&&(h=(s-u)/2+r),Math.abs(o-d.x)<r&&l>s&&(h=o-(l-s)/2);const p=1-ar().state.textHeight;return t.insert("rect",":first-child").attr("x",h).attr("y",p).attr("class",n?"alt-composit":"composit").attr("width",u).attr("height",d.height+ar().state.textHeight+ar().state.titleShift+1).attr("rx","0"),c.attr("x",h+r),l<=s&&c.attr("x",o+(u-i)/2-l/2+r),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",3*ar().state.textHeight).attr("rx",ar().state.radius),t.insert("rect",":first-child").attr("x",h).attr("y",ar().state.titleShift-ar().state.textHeight-ar().state.padding).attr("width",u).attr("height",d.height+3+2*ar().state.textHeight).attr("rx",ar().state.radius),t},Lu=(t,e)=>{e.attr("class","state-note");const n=e.append("rect").attr("x",0).attr("y",ar().state.padding),r=e.append("g"),{textWidth:i,textHeight:a}=((t,e,n,r)=>{let i=0;const a=r.append("text");a.style("text-anchor","start"),a.attr("class","noteText");let s=t.replace(/\r\n/g,"<br/>");s=s.replace(/\n/g,"<br/>");const o=s.split(Yt.lineBreakRegex);let c=1.25*ar().state.noteMargin;for(const l of o){const t=l.trim();if(t.length>0){const r=a.append("tspan");r.text(t),0===c&&(c+=r.node().getBBox().height),i+=c,r.attr("x",e+ar().state.noteMargin),r.attr("y",n+i+1.25*ar().state.noteMargin)}}return{textWidth:a.node().getBBox().width,textHeight:i}})(t,0,0,r);return n.attr("height",a+2*ar().state.noteMargin),n.attr("width",i+2*ar().state.noteMargin),n},Bu=function(t,e){const n=e.id,r={id:n,label:e.id,width:0,height:0},i=t.append("g").attr("id",n).attr("class","stateGroup");"start"===e.type&&(t=>{t.append("circle").attr("class","start-state").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit).attr("cy",ar().state.padding+ar().state.sizeUnit)})(i),"end"===e.type&&(t=>{t.append("circle").attr("class","end-state-outer").attr("r",ar().state.sizeUnit+ar().state.miniPadding).attr("cx",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding).attr("cy",ar().state.padding+ar().state.sizeUnit+ar().state.miniPadding),t.append("circle").attr("class","end-state-inner").attr("r",ar().state.sizeUnit).attr("cx",ar().state.padding+ar().state.sizeUnit+2).attr("cy",ar().state.padding+ar().state.sizeUnit+2)})(i),"fork"!==e.type&&"join"!==e.type||((t,e)=>{let n=ar().state.forkWidth,r=ar().state.forkHeight;if(e.parentId){let t=n;n=r,r=t}t.append("rect").style("stroke","black").style("fill","black").attr("width",n).attr("height",r).attr("x",ar().state.padding).attr("y",ar().state.padding)})(i,e),"note"===e.type&&Lu(e.note.text,i),"divider"===e.type&&(t=>{t.append("line").style("stroke","grey").style("stroke-dasharray","3").attr("x1",ar().state.textHeight).attr("class","divider").attr("x2",2*ar().state.textHeight).attr("y1",0).attr("y2",0)})(i),"default"===e.type&&0===e.descriptions.length&&((t,e)=>{const n=t.append("text").attr("x",2*ar().state.padding).attr("y",ar().state.textHeight+2*ar().state.padding).attr("font-size",ar().state.fontSize).attr("class","state-title").text(e.id),r=n.node().getBBox();t.insert("rect",":first-child").attr("x",ar().state.padding).attr("y",ar().state.padding).attr("width",r.width+2*ar().state.padding).attr("height",r.height+2*ar().state.padding).attr("rx",ar().state.radius)})(i,e),"default"===e.type&&e.descriptions.length>0&&Su(i,e);const a=i.node().getBBox();return r.width=a.width+2*ar().state.padding,r.height=a.height+2*ar().state.padding,Tu(n,r),r};let Nu=0;let Du;const Ou={},Mu=(t,e,n,r,i,a,s)=>{const c=new ht.k({compound:!0,multigraph:!0});let l,h=!0;for(l=0;l<t.length;l++)if("relation"===t[l].stmt){h=!1;break}n?c.setGraph({rankdir:"LR",multigraph:!0,compound:!0,ranker:"tight-tree",ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,isMultiGraph:!0}):c.setGraph({rankdir:"TB",multigraph:!0,compound:!0,ranksep:h?1:Du.edgeLengthFactor,nodeSep:h?1:50,ranker:"tight-tree",isMultiGraph:!0}),c.setDefaultEdgeLabel((function(){return{}})),s.db.extract(t);const u=s.db.getStates(),d=s.db.getRelations(),p=Object.keys(u);for(const o of p){const t=u[o];let l;if(n&&(t.parentId=n),t.doc){let n=e.append("g").attr("id",t.id).attr("class","stateGroup");l=Mu(t.doc,n,t.id,!r,i,a,s);{n=Au(n,t,r);let e=n.node().getBBox();l.width=e.width,l.height=e.height+Du.padding/2,Ou[t.id]={y:Du.compositTitleSize}}}else l=Bu(e,t);if(t.note){const n={descriptions:[],id:t.id+"-note",note:t.note,type:"note"},r=Bu(e,n);"left of"===t.note.position?(c.setNode(l.id+"-note",r),c.setNode(l.id,l)):(c.setNode(l.id,l),c.setNode(l.id+"-note",r)),c.setParent(l.id,l.id+"-group"),c.setParent(l.id+"-note",l.id+"-group")}else c.setNode(l.id,l)}Nt.debug("Count=",c.nodeCount(),c);let f=0;d.forEach((function(t){var e;f++,Nt.debug("Setting edge",t),c.setEdge(t.id1,t.id2,{relation:t,width:(e=t.title,e?e.length*Du.fontSizeFactor:1),height:Du.labelHeight*Yt.getRows(t.title).length,labelpos:"c"},"id"+f)})),(0,lt.bK)(c),Nt.debug("Graph after layout",c.nodes());const g=e.node();c.nodes().forEach((function(t){if(void 0!==t&&void 0!==c.node(t)){Nt.warn("Node "+t+": "+JSON.stringify(c.node(t))),i.select("#"+g.id+" #"+t).attr("transform","translate("+(c.node(t).x-c.node(t).width/2)+","+(c.node(t).y+(Ou[t]?Ou[t].y:0)-c.node(t).height/2)+" )"),i.select("#"+g.id+" #"+t).attr("data-x-shift",c.node(t).x-c.node(t).width/2);a.querySelectorAll("#"+g.id+" #"+t+" .divider").forEach((t=>{const e=t.parentElement;let n=0,r=0;e&&(e.parentElement&&(n=e.parentElement.getBBox().width),r=parseInt(e.getAttribute("data-x-shift"),10),Number.isNaN(r)&&(r=0)),t.setAttribute("x1",0-r+8),t.setAttribute("x2",n-r-8)}))}else Nt.debug("No Node "+t+": "+JSON.stringify(c.node(t)))}));let y=g.getBBox();c.edges().forEach((function(t){void 0!==t&&void 0!==c.edge(t)&&(Nt.debug("Edge "+t.v+" -> "+t.w+": "+JSON.stringify(c.edge(t))),function(t,e,n){e.points=e.points.filter((t=>!Number.isNaN(t.y)));const r=e.points,i=(0,o.jvg)().x((function(t){return t.x})).y((function(t){return t.y})).curve(o.$0Z),a=t.append("path").attr("d",i(r)).attr("id","edge"+Nu).attr("class","transition");let s="";if(ar().state.arrowMarkerAbsolute&&(s=window.location.protocol+"//"+window.location.host+window.location.pathname+window.location.search,s=s.replace(/\(/g,"\\("),s=s.replace(/\)/g,"\\)")),a.attr("marker-end","url("+s+"#"+function(t){switch(t){case Eu.relationType.AGGREGATION:return"aggregation";case Eu.relationType.EXTENSION:return"extension";case Eu.relationType.COMPOSITION:return"composition";case Eu.relationType.DEPENDENCY:return"dependency"}}(Eu.relationType.DEPENDENCY)+"End)"),void 0!==n.title){const r=t.append("g").attr("class","stateLabel"),{x:i,y:a}=Gn.calcLabelPosition(e.points),s=Yt.getRows(n.title);let o=0;const c=[];let l=0,h=0;for(let t=0;t<=s.length;t++){const e=r.append("text").attr("text-anchor","middle").text(s[t]).attr("x",i).attr("y",a+o),n=e.node().getBBox();if(l=Math.max(l,n.width),h=Math.min(h,n.x),Nt.info(n.x,i,a+o),0===o){const t=e.node().getBBox();o=t.height,Nt.info("Title height",o,a)}c.push(e)}let u=o*s.length;if(s.length>1){const t=(s.length-1)*o*.5;c.forEach(((e,n)=>e.attr("y",a+n*o-t))),u=o*s.length}const d=r.node().getBBox();r.insert("rect",":first-child").attr("class","box").attr("x",i-l/2-ar().state.padding/2).attr("y",a-u/2-ar().state.padding/2-3.5).attr("width",l+ar().state.padding).attr("height",u+ar().state.padding),Nt.info(d)}Nu++}(e,c.edge(t),c.edge(t).relation))})),y=g.getBBox();const m={id:n||"root",label:n||"root",width:0,height:0};return m.width=y.width+2*Du.padding,m.height=y.height+2*Du.padding,Nt.debug("Doc rendered",m,c),m},Iu={setConf:function(){},draw:function(t,e,n,r){Du=ar().state;const i=ar().securityLevel;let a;"sandbox"===i&&(a=(0,o.Ys)("#i"+e));const s="sandbox"===i?(0,o.Ys)(a.nodes()[0].contentDocument.body):(0,o.Ys)("body"),c="sandbox"===i?a.nodes()[0].contentDocument:document;Nt.debug("Rendering diagram "+t);const l=s.select(`[id='${e}']`);l.append("defs").append("marker").attr("id","dependencyEnd").attr("refX",19).attr("refY",7).attr("markerWidth",20).attr("markerHeight",28).attr("orient","auto").append("path").attr("d","M 19,7 L9,13 L14,7 L9,1 Z");new ht.k({multigraph:!0,compound:!0,rankdir:"RL"}).setDefaultEdgeLabel((function(){return{}}));const h=r.db.getRootDoc();Mu(h,l,void 0,!1,s,c,r);const u=Du.padding,d=l.node().getBBox(),p=d.width+2*u,f=d.height+2*u;dr(l,f,1.75*p,Du.useMaxWidth),l.attr("viewBox",`${d.x-Du.padding}  ${d.y-Du.padding} `+p+" "+f)}},Fu="rect",$u="rectWithTitle",Ru="statediagram",Zu="transition",Pu="parent",ju="note",Yu="----parent",zu="fill:none",Uu="fill: #333",Wu="text",qu="normal";let Hu={},Vu=0;function Gu(t="",e=0,n="",r="----"){return`state-${t}${null!==n&&n.length>0?`${r}${n}`:""}-${e}`}const Xu=(t,e,n,r,i,a)=>{const s=n.id,o=null==(c=r[s])?"":c.classes?c.classes.join(" "):"";var c;if("root"!==s){let e=Fu;!0===n.start&&(e="start"),!1===n.start&&(e="end"),n.type!==Qh&&(e=n.type),Hu[s]||(Hu[s]={id:s,shape:e,description:Yt.sanitizeText(s,ar()),classes:`${o} statediagram-state`});const r=Hu[s];n.description&&(Array.isArray(r.description)?(r.shape=$u,r.description.push(n.description)):r.description.length>0?(r.shape=$u,r.description===s?r.description=[n.description]:r.description=[r.description,n.description]):(r.shape=Fu,r.description=n.description),r.description=Yt.sanitizeTextOrArray(r.description,ar())),1===r.description.length&&r.shape===$u&&(r.shape=Fu),!r.type&&n.doc&&(Nt.info("Setting cluster for ",s,Qu(n)),r.type="group",r.dir=Qu(n),r.shape=n.type===Jh?"divider":"roundedWithTitle",r.classes=r.classes+" statediagram-cluster "+(a?"statediagram-cluster-alt":""));const i={labelStyle:"",shape:r.shape,labelText:r.description,classes:r.classes,style:"",id:s,dir:r.dir,domId:Gu(s,Vu),type:r.type,padding:15};if(n.note){const e={labelStyle:"",shape:"note",labelText:n.note.text,classes:"statediagram-note",style:"",id:s+"----note-"+Vu,domId:Gu(s,Vu,ju),type:r.type,padding:15},a={labelStyle:"",shape:"noteGroup",labelText:n.note.text,classes:r.classes,style:"",id:s+Yu,domId:Gu(s,Vu,Pu),type:"group",padding:0};Vu++;const o=s+Yu;t.setNode(o,a),t.setNode(e.id,e),t.setNode(s,i),t.setParent(s,o),t.setParent(e.id,o);let c=s,l=e.id;"left of"===n.note.position&&(c=e.id,l=s),t.setEdge(c,l,{arrowhead:"none",arrowType:"",style:zu,labelStyle:"",classes:"transition note-edge",arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu})}else t.setNode(s,i)}e&&"root"!==e.id&&(Nt.trace("Setting node ",s," to be child of its parent ",e.id),t.setParent(s,e.id)),n.doc&&(Nt.trace("Adding nodes children "),Ku(t,n,n.doc,r,i,!a))},Ku=(t,e,n,r,i,a)=>{Nt.trace("items",n),n.forEach((n=>{switch(n.stmt){case Xh:case Qh:Xu(t,e,n,r,i,a);break;case Kh:{Xu(t,e,n.state1,r,i,a),Xu(t,e,n.state2,r,i,a);const s={id:"edge"+Vu,arrowhead:"normal",arrowTypeEnd:"arrow_barb",style:zu,labelStyle:"",label:Yt.sanitizeText(n.description,ar()),arrowheadStyle:Uu,labelpos:"c",labelType:Wu,thickness:qu,classes:Zu};t.setEdge(n.state1.id,n.state2.id,s,Vu),Vu++}}}))},Qu=(t,e="TB")=>{let n=e;if(t.doc)for(let r=0;r<t.doc.length;r++){const e=t.doc[r];"dir"===e.stmt&&(n=e.value)}return n},Ju={setConf:function(t){const e=Object.keys(t);for(const n of e)t[n]},getClasses:function(t,e){Nt.trace("Extracting classes"),e.db.clear();try{return e.parser.parse(t),e.db.extract(e.db.getRootDocV2()),e.db.getClasses()}catch(n){return n}},draw:function(t,e,n,r){Nt.info("Drawing state diagram (v2)",e),Hu={};let i=r.db.getDirection();void 0===i&&(i="LR");const{securityLevel:a,state:s}=ar(),c=s.nodeSpacing||50,l=s.rankSpacing||50;Nt.info(r.db.getRootDocV2()),r.db.extract(r.db.getRootDocV2()),Nt.info(r.db.getRootDocV2());const h=r.db.getStates(),u=new ht.k({multigraph:!0,compound:!0}).setGraph({rankdir:Qu(r.db.getRootDocV2()),nodesep:c,ranksep:l,marginx:8,marginy:8}).setDefaultEdgeLabel((function(){return{}}));let d;Xu(u,void 0,r.db.getRootDocV2(),h,r.db,!0),"sandbox"===a&&(d=(0,o.Ys)("#i"+e));const p="sandbox"===a?(0,o.Ys)(d.nodes()[0].contentDocument.body):(0,o.Ys)("body"),f=p.select(`[id="${e}"]`),g=p.select("#"+e+" g");qs(g,u,["barb"],Ru,e);Gn.insertTitle(f,"statediagramTitleText",s.titleTopMargin,r.db.getDiagramTitle());const y=f.node().getBBox(),m=y.width+16,b=y.height+16;f.attr("class",Ru);const _=f.node().getBBox();dr(f,b,m,s.useMaxWidth);const x=`${_.x-8} ${_.y-8} ${m} ${b}`;Nt.debug(`viewBox ${x}`),f.attr("viewBox",x);const v=document.querySelectorAll('[id="'+e+'"] .edgeLabel .label');for(const o of v){const t=o.getBBox(),e=document.createElementNS("http://www.w3.org/2000/svg",Fu);e.setAttribute("rx",0),e.setAttribute("ry",0),e.setAttribute("width",t.width),e.setAttribute("height",t.height),o.insertBefore(e,o.firstChild)}}};var td=function(){var t,e=function(t,e,n,r){for(n=n||{},r=t.length;r--;n[t[r]]=e);return n},n=[1,2],r=[1,5],i=[6,9,11,17,18,20,22,23,24,26],a=[1,15],s=[1,16],o=[1,17],c=[1,18],l=[1,19],h=[1,20],u=[1,24],d=[4,6,9,11,17,18,20,22,23,24,26],p={trace:function(){},yy:{},symbols_:{error:2,start:3,journey:4,document:5,EOF:6,directive:7,line:8,SPACE:9,statement:10,NEWLINE:11,openDirective:12,typeDirective:13,closeDirective:14,":":15,argDirective:16,title:17,acc_title:18,acc_title_value:19,acc_descr:20,acc_descr_value:21,acc_descr_multiline_value:22,section:23,taskName:24,taskData:25,open_directive:26,type_directive:27,arg_directive:28,close_directive:29,$accept:0,$end:1},terminals_:{2:"error",4:"journey",6:"EOF",9:"SPACE",11:"NEWLINE",15:":",17:"title",18:"acc_title",19:"acc_title_value",20:"acc_descr",21:"acc_descr_value",22:"acc_descr_multiline_value",23:"section",24:"taskName",25:"taskData",26:"open_directive",27:"type_directive",28:"arg_directive",29:"close_directive"},productions_:[0,[3,3],[3,2],[5,0],[5,2],[8,2],[8,1],[8,1],[8,1],[7,4],[7,6],[10,1],[10,2],[10,2],[10,1],[10,1],[10,2],[10,1],[12,1],[13,1],[16,1],[14,1]],performAction:function(t,e,n,r,i,a,s){var o=a.length-1;switch(i){case 1:return a[o-1];case 3:case 7:case 8:this.$=[];break;case 4:a[o-1].push(a[o]),this.$=a[o-1];break;case 5:case 6:this.$=a[o];break;case 11:r.setDiagramTitle(a[o].substr(6)),this.$=a[o].substr(6);break;case 12:this.$=a[o].trim(),r.setAccTitle(this.$);break;case 13:case 14:this.$=a[o].trim(),r.setAccDescription(this.$);break;case 15:r.addSection(a[o].substr(8)),this.$=a[o].substr(8);break;case 16:r.addTask(a[o-1],a[o]),this.$="task";break;case 18:r.parseDirective("%%{","open_directive");break;case 19:r.parseDirective(a[o],"type_directive");break;case 20:a[o]=a[o].trim().replace(/'/g,'"'),r.parseDirective(a[o],"arg_directive");break;case 21:r.parseDirective("}%%","close_directive","journey")}},table:[{3:1,4:n,7:3,12:4,26:r},{1:[3]},e(i,[2,3],{5:6}),{3:7,4:n,7:3,12:4,26:r},{13:8,27:[1,9]},{27:[2,18]},{6:[1,10],7:21,8:11,9:[1,12],10:13,11:[1,14],12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},{1:[2,2]},{14:22,15:[1,23],29:u},e([15,29],[2,19]),e(i,[2,8],{1:[2,1]}),e(i,[2,4]),{7:21,10:25,12:4,17:a,18:s,20:o,22:c,23:l,24:h,26:r},e(i,[2,6]),e(i,[2,7]),e(i,[2,11]),{19:[1,26]},{21:[1,27]},e(i,[2,14]),e(i,[2,15]),{25:[1,28]},e(i,[2,17]),{11:[1,29]},{16:30,28:[1,31]},{11:[2,21]},e(i,[2,5]),e(i,[2,12]),e(i,[2,13]),e(i,[2,16]),e(d,[2,9]),{14:32,29:u},{29:[2,20]},{11:[1,33]},e(d,[2,10])],defaultActions:{5:[2,18],7:[2,2],24:[2,21],31:[2,20]},parseError:function(t,e){if(!e.recoverable){var n=new Error(t);throw n.hash=e,n}this.trace(t)},parse:function(t){var e=this,n=[0],r=[],i=[null],a=[],s=this.table,o="",c=0,l=0,h=2,u=1,d=a.slice.call(arguments,1),p=Object.create(this.lexer),f={yy:{}};for(var g in this.yy)Object.prototype.hasOwnProperty.call(this.yy,g)&&(f.yy[g]=this.yy[g]);p.setInput(t,f.yy),f.yy.lexer=p,f.yy.parser=this,void 0===p.yylloc&&(p.yylloc={});var y=p.yylloc;a.push(y);var m=p.options&&p.options.ranges;function b(){var t;return"number"!=typeof(t=r.pop()||p.lex()||u)&&(t instanceof Array&&(t=(r=t).pop()),t=e.symbols_[t]||t),t}"function"==typeof f.yy.parseError?this.parseError=f.yy.parseError:this.parseError=Object.getPrototypeOf(this).parseError;for(var _,x,v,k,w,E,C,T,S={};;){if(x=n[n.length-1],this.defaultActions[x]?v=this.defaultActions[x]:(null==_&&(_=b()),v=s[x]&&s[x][_]),void 0===v||!v.length||!v[0]){var A="";for(w in T=[],s[x])this.terminals_[w]&&w>h&&T.push("'"+this.terminals_[w]+"'");A=p.showPosition?"Parse error on line "+(c+1)+":\n"+p.showPosition()+"\nExpecting "+T.join(", ")+", got '"+(this.terminals_[_]||_)+"'":"Parse error on line "+(c+1)+": Unexpected "+(_==u?"end of input":"'"+(this.terminals_[_]||_)+"'"),this.parseError(A,{text:p.match,token:this.terminals_[_]||_,line:p.yylineno,loc:y,expected:T})}if(v[0]instanceof Array&&v.length>1)throw new Error("Parse Error: multiple actions possible at state: "+x+", token: "+_);switch(v[0]){case 1:n.push(_),i.push(p.yytext),a.push(p.yylloc),n.push(v[1]),_=null,l=p.yyleng,o=p.yytext,c=p.yylineno,y=p.yylloc;break;case 2:if(E=this.productions_[v[1]][1],S.$=i[i.length-E],S._$={first_line:a[a.length-(E||1)].first_line,last_line:a[a.length-1].last_line,first_column:a[a.length-(E||1)].first_column,last_column:a[a.length-1].last_column},m&&(S._$.range=[a[a.length-(E||1)].range[0],a[a.length-1].range[1]]),void 0!==(k=this.performAction.apply(S,[o,l,c,f.yy,v[1],i,a].concat(d))))return k;E&&(n=n.slice(0,-1*E*2),i=i.slice(0,-1*E),a=a.slice(0,-1*E)),n.push(this.productions_[v[1]][0]),i.push(S.$),a.push(S._$),C=s[n[n.length-2]][n[n.length-1]],n.push(C);break;case 3:return!0}}return!0}},f=(t={EOF:1,parseError:function(t,e){if(!this.yy.parser)throw new Error(t);this.yy.parser.parseError(t,e)},setInput:function(t,e){return this.yy=e||this.yy||{},this._input=t,this._more=this._backtrack=this.done=!1,this.yylineno=this.yyleng=0,this.yytext=this.matched=this.match="",this.conditionStack=["INITIAL"],this.yylloc={first_line:1,first_column:0,last_line:1,last_column:0},this.options.ranges&&(this.yylloc.range=[0,0]),this.offset=0,this},input:function(){var t=this._input[0];return this.yytext+=t,this.yyleng++,this.offset++,this.match+=t,this.matched+=t,t.match(/(?:\r\n?|\n).*/g)?(this.yylineno++,this.yylloc.last_line++):this.yylloc.last_column++,this.options.ranges&&this.yylloc.range[1]++,this._input=this._input.slice(1),t},unput:function(t){var e=t.length,n=t.split(/(?:\r\n?|\n)/g);this._input=t+this._input,this.yytext=this.yytext.substr(0,this.yytext.length-e),this.offset-=e;var r=this.match.split(/(?:\r\n?|\n)/g);this.match=this.match.substr(0,this.match.length-1),this.matched=this.matched.substr(0,this.matched.length-1),n.length-1&&(this.yylineno-=n.length-1);var i=this.yylloc.range;return this.yylloc={first_line:this.yylloc.first_line,last_line:this.yylineno+1,first_column:this.yylloc.first_column,last_column:n?(n.length===r.length?this.yylloc.first_column:0)+r[r.length-n.length].length-n[0].length:this.yylloc.first_column-e},this.options.ranges&&(this.yylloc.range=[i[0],i[0]+this.yyleng-e]),this.yyleng=this.yytext.length,this},more:function(){return this._more=!0,this},reject:function(){return this.options.backtrack_lexer?(this._backtrack=!0,this):this.parseError("Lexical error on line "+(this.yylineno+1)+". You can only invoke reject() in the lexer when the lexer is of the backtracking persuasion (options.backtrack_lexer = true).\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},less:function(t){this.unput(this.match.slice(t))},pastInput:function(){var t=this.matched.substr(0,this.matched.length-this.match.length);return(t.length>20?"...":"")+t.substr(-20).replace(/\n/g,"")},upcomingInput:function(){var t=this.match;return t.length<20&&(t+=this._input.substr(0,20-t.length)),(t.substr(0,20)+(t.length>20?"...":"")).replace(/\n/g,"")},showPosition:function(){var t=this.pastInput(),e=new Array(t.length+1).join("-");return t+this.upcomingInput()+"\n"+e+"^"},test_match:function(t,e){var n,r,i;if(this.options.backtrack_lexer&&(i={yylineno:this.yylineno,yylloc:{first_line:this.yylloc.first_line,last_line:this.last_line,first_column:this.yylloc.first_column,last_column:this.yylloc.last_column},yytext:this.yytext,match:this.match,matches:this.matches,matched:this.matched,yyleng:this.yyleng,offset:this.offset,_more:this._more,_input:this._input,yy:this.yy,conditionStack:this.conditionStack.slice(0),done:this.done},this.options.ranges&&(i.yylloc.range=this.yylloc.range.slice(0))),(r=t[0].match(/(?:\r\n?|\n).*/g))&&(this.yylineno+=r.length),this.yylloc={first_line:this.yylloc.last_line,last_line:this.yylineno+1,first_column:this.yylloc.last_column,last_column:r?r[r.length-1].length-r[r.length-1].match(/\r?\n?/)[0].length:this.yylloc.last_column+t[0].length},this.yytext+=t[0],this.match+=t[0],this.matches=t,this.yyleng=this.yytext.length,this.options.ranges&&(this.yylloc.range=[this.offset,this.offset+=this.yyleng]),this._more=!1,this._backtrack=!1,this._input=this._input.slice(t[0].length),this.matched+=t[0],n=this.performAction.call(this,this.yy,this,e,this.conditionStack[this.conditionStack.length-1]),this.done&&this._input&&(this.done=!1),n)return n;if(this._backtrack){for(var a in i)this[a]=i[a];return!1}return!1},next:function(){if(this.done)return this.EOF;var t,e,n,r;this._input||(this.done=!0),this._more||(this.yytext="",this.match="");for(var i=this._currentRules(),a=0;a<i.length;a++)if((n=this._input.match(this.rules[i[a]]))&&(!e||n[0].length>e[0].length)){if(e=n,r=a,this.options.backtrack_lexer){if(!1!==(t=this.test_match(n,i[a])))return t;if(this._backtrack){e=!1;continue}return!1}if(!this.options.flex)break}return e?!1!==(t=this.test_match(e,i[r]))&&t:""===this._input?this.EOF:this.parseError("Lexical error on line "+(this.yylineno+1)+". Unrecognized text.\n"+this.showPosition(),{text:"",token:null,line:this.yylineno})},lex:function(){var t=this.next();return t||this.lex()},begin:function(t){this.conditionStack.push(t)},popState:function(){return this.conditionStack.length-1>0?this.conditionStack.pop():this.conditionStack[0]},_currentRules:function(){return this.conditionStack.length&&this.conditionStack[this.conditionStack.length-1]?this.conditions[this.conditionStack[this.conditionStack.length-1]].rules:this.conditions.INITIAL.rules},topState:function(t){return(t=this.conditionStack.length-1-Math.abs(t||0))>=0?this.conditionStack[t]:"INITIAL"},pushState:function(t){this.begin(t)},stateStackSize:function(){return this.conditionStack.length},options:{"case-insensitive":!0},performAction:function(t,e,n,r){switch(n){case 0:return this.begin("open_directive"),26;case 1:return this.begin("type_directive"),27;case 2:return this.popState(),this.begin("arg_directive"),15;case 3:return this.popState(),this.popState(),29;case 4:return 28;case 5:case 6:case 8:case 9:break;case 7:return 11;case 10:return 4;case 11:return 17;case 12:return this.begin("acc_title"),18;case 13:return this.popState(),"acc_title_value";case 14:return this.begin("acc_descr"),20;case 15:return this.popState(),"acc_descr_value";case 16:this.begin("acc_descr_multiline");break;case 17:this.popState();break;case 18:return"acc_descr_multiline_value";case 19:return 23;case 20:return 24;case 21:return 25;case 22:return 15;case 23:return 6;case 24:return"INVALID"}},rules:[/^(?:%%\{)/i,/^(?:((?:(?!\}%%)[^:.])*))/i,/^(?::)/i,/^(?:\}%%)/i,/^(?:((?:(?!\}%%).|\n)*))/i,/^(?:%(?!\{)[^\n]*)/i,/^(?:[^\}]%%[^\n]*)/i,/^(?:[\n]+)/i,/^(?:\s+)/i,/^(?:#[^\n]*)/i,/^(?:journey\b)/i,/^(?:title\s[^#\n;]+)/i,/^(?:accTitle\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*:\s*)/i,/^(?:(?!\n||)*[^\n]*)/i,/^(?:accDescr\s*\{\s*)/i,/^(?:[\}])/i,/^(?:[^\}]*)/i,/^(?:section\s[^#:\n;]+)/i,/^(?:[^#:\n;]+)/i,/^(?::[^#\n;]+)/i,/^(?::)/i,/^(?:$)/i,/^(?:.)/i],conditions:{open_directive:{rules:[1],inclusive:!1},type_directive:{rules:[2,3],inclusive:!1},arg_directive:{rules:[3,4],inclusive:!1},acc_descr_multiline:{rules:[17,18],inclusive:!1},acc_descr:{rules:[15],inclusive:!1},acc_title:{rules:[13],inclusive:!1},INITIAL:{rules:[0,5,6,7,8,9,10,11,12,14,16,19,20,21,22,23,24],inclusive:!0}}},t);function g(){this.yy={}}return p.lexer=f,g.prototype=p,p.Parser=g,new g}();td.parser=td;const ed=td,nd=t=>null!==t.match(/^\s*journey/);let rd="";const id=[],ad=[],sd=[],od=function(){let t=!0;for(const[e,n]of sd.entries())sd[e].processed,t=t&&n.processed;return t},cd={parseDirective:function(t,e,n){ap.parseDirective(this,t,e,n)},getConfig:()=>ar().journey,clear:function(){id.length=0,ad.length=0,rd="",sd.length=0,Dr()},setDiagramTitle:$r,getDiagramTitle:Rr,setAccTitle:Or,getAccTitle:Mr,setAccDescription:Ir,getAccDescription:Fr,addSection:function(t){rd=t,id.push(t)},getSections:function(){return id},getTasks:function(){let t=od();let e=0;for(;!t&&e<100;)t=od(),e++;return ad.push(...sd),ad},addTask:function(t,e){const n=e.substr(1).split(":");let r=0,i=[];1===n.length?(r=Number(n[0]),i=[]):(r=Number(n[0]),i=n[1].split(","));const a=i.map((t=>t.trim())),s={section:rd,type:rd,people:a,task:t,score:r};sd.push(s)},addTaskOrg:function(t){const e={section:rd,type:rd,description:t,task:t,classes:[]};ad.push(e)},getActors:function(){return function(){const t=[];return ad.forEach((e=>{e.people&&t.push(...e.people)})),[...new Set(t)].sort()}()}},ld=function(t,e){const n=t.append("rect");return n.attr("x",e.x),n.attr("y",e.y),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("width",e.width),n.attr("height",e.height),n.attr("rx",e.rx),n.attr("ry",e.ry),void 0!==e.class&&n.attr("class",e.class),n},hd=function(t,e){const n=t.append("circle");return n.attr("cx",e.cx),n.attr("cy",e.cy),n.attr("class","actor-"+e.pos),n.attr("fill",e.fill),n.attr("stroke",e.stroke),n.attr("r",e.r),void 0!==n.class&&n.attr("class",n.class),void 0!==e.title&&n.append("title").text(e.title),n},ud=function(t,e){const n=e.text.replace(/<br\s*\/?>/gi," "),r=t.append("text");r.attr("x",e.x),r.attr("y",e.y),r.attr("class","legend"),r.style("text-anchor",e.anchor),void 0!==e.class&&r.attr("class",e.class);const i=r.append("tspan");return i.attr("x",e.x+2*e.textMargin),i.text(n),r};let dd=-1;const pd=function(){return{x:0,y:0,width:100,anchor:"start",height:100,rx:0,ry:0}},fd=function(){function t(t,e,n,i,a,s,o,c){r(e.append("text").attr("x",n+a/2).attr("y",i+s/2+5).style("font-color",c).style("text-anchor","middle").text(t),o)}function e(t,e,n,i,a,s,o,c,l){const{taskFontSize:h,taskFontFamily:u}=c,d=t.split(/<br\s*\/?>/gi);for(let p=0;p<d.length;p++){const t=p*h-h*(d.length-1)/2,c=e.append("text").attr("x",n+a/2).attr("y",i).attr("fill",l).style("text-anchor","middle").style("font-size",h).style("font-family",u);c.append("tspan").attr("x",n+a/2).attr("dy",t).text(d[p]),c.attr("y",i+s/2).attr("dominant-baseline","central").attr("alignment-baseline","central"),r(c,o)}}function n(t,n,i,a,s,o,c,l){const h=n.append("switch"),u=h.append("foreignObject").attr("x",i).attr("y",a).attr("width",s).attr("height",o).attr("position","fixed").append("xhtml:div").style("display","table").style("height","100%").style("width","100%");u.append("div").attr("class","label").style("display","table-cell").style("text-align","center").style("vertical-align","middle").text(t),e(t,h,i,a,s,o,c,l),r(u,c)}function r(t,e){for(const n in e)n in e&&t.attr(n,e[n])}return function(r){return"fo"===r.textPlacement?n:"old"===r.textPlacement?t:e}}(),gd=hd,yd=function(t,e,n){const r=t.append("g"),i=pd();i.x=e.x,i.y=e.y,i.fill=e.fill,i.width=n.width,i.height=n.height,i.class="journey-section section-type-"+e.num,i.rx=3,i.ry=3,ld(r,i),fd(n)(e.text,r,i.x,i.y,i.width,i.height,{class:"journey-section section-type-"+e.num},n,e.colour)},md=ud,bd=function(t,e,n){const r=e.x+n.width/2,i=t.append("g");dd++;i.append("line").attr("id","task"+dd).attr("x1",r).attr("y1",e.y).attr("x2",r).attr("y2",450).attr("class","task-line").attr("stroke-width","1px").attr("stroke-dasharray","4 2").attr("stroke","#666"),function(t,e){const n=15,r=t.append("circle").attr("cx",e.cx).attr("cy",e.cy).attr("class","face").attr("r",n).attr("stroke-width",2).attr("overflow","visible"),i=t.append("g");i.append("circle").attr("cx",e.cx-5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),i.append("circle").attr("cx",e.cx+5).attr("cy",e.cy-5).attr("r",1.5).attr("stroke-width",2).attr("fill","#666").attr("stroke","#666"),e.score>3?function(t){const r=(0,o.Nb1)().startAngle(Math.PI/2).endAngle(Math.PI/2*3).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+2)+")")}(i):e.score<3?function(t){const r=(0,o.Nb1)().startAngle(3*Math.PI/2).endAngle(Math.PI/2*5).innerRadius(7.5).outerRadius(n/2.2);t.append("path").attr("class","mouth").attr("d",r).attr("transform","translate("+e.cx+","+(e.cy+7)+")")}(i):i.append("line").attr("class","mouth").attr("stroke",2).attr("x1",e.cx-5).attr("y1",e.cy+7).attr("x2",e.cx+5).attr("y2",e.cy+7).attr("class","mouth").attr("stroke-width","1px").attr("stroke","#666")}(i,{cx:r,cy:300+30*(5-e.score),score:e.score});const a=pd();a.x=e.x,a.y=e.y,a.fill=e.fill,a.width=n.width,a.height=n.height,a.class="task task-type-"+e.num,a.rx=3,a.ry=3,ld(i,a);let s=e.x+14;e.people.forEach((t=>{const n=e.actors[t].color,r={cx:s,cy:e.y,r:7,fill:n,stroke:"#000",title:t,pos:e.actors[t].position};hd(i,r),s+=10})),fd(n)(e.task,i,a.x,a.y,a.width,a.height,{class:"task"},n,e.colour)},_d=function(t){t.append("defs").append("marker").attr("id","arrowhead").attr("refX",5).attr("refY",2).attr("markerWidth",6).attr("markerHeight",4).attr("orient","auto").append("path").attr("d","M 0,0 V 4 L6,2 Z")},xd={};const vd=ar().journey,kd=vd.leftMargin,wd={data:{startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},verticalPos:0,sequenceItems:[],init:function(){this.sequenceItems=[],this.data={startx:void 0,stopx:void 0,starty:void 0,stopy:void 0},this.verticalPos=0},updateVal:function(t,e,n,r){void 0===t[e]?t[e]=n:t[e]=r(n,t[e])},updateBounds:function(t,e,n,r){const i=ar().journey,a=this;let s=0;var o;this.sequenceItems.forEach((function(c){s++;const l=a.sequenceItems.length-s+1;a.updateVal(c,"starty",e-l*i.boxMargin,Math.min),a.updateVal(c,"stopy",r+l*i.boxMargin,Math.max),a.updateVal(wd.data,"startx",t-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopx",n+l*i.boxMargin,Math.max),"activation"!==o&&(a.updateVal(c,"startx",t-l*i.boxMargin,Math.min),a.updateVal(c,"stopx",n+l*i.boxMargin,Math.max),a.updateVal(wd.data,"starty",e-l*i.boxMargin,Math.min),a.updateVal(wd.data,"stopy",r+l*i.boxMargin,Math.max))}))},insert:function(t,e,n,r){const i=Math.min(t,n),a=Math.max(t,n),s=Math.min(e,r),o=Math.max(e,r);this.updateVal(wd.data,"startx",i,Math.min),this.updateVal(wd.data,"starty",s,Math.min),this.updateVal(wd.data,"stopx",a,Math.max),this.updateVal(wd.data,"stopy",o,Math.max),this.updateBounds(i,s,a,o)},bumpVerticalPos:function(t){this.verticalPos=this.verticalPos+t,this.data.stopy=this.verticalPos},getVerticalPos:function(){return this.verticalPos},getBounds:function(){return this.data}},Ed=vd.sectionFills,Cd=vd.sectionColours,Td=function(t,e,n){const r=ar().journey;let i="";const a=n+(2*r.height+r.diagramMarginY);let s=0,o="#CCC",c="black",l=0;for(const[h,u]of e.entries()){if(i!==u.section){o=Ed[s%Ed.length],l=s%Ed.length,c=Cd[s%Cd.length];const e={x:h*r.taskMargin+h*r.width+kd,y:50,text:u.section,fill:o,num:l,colour:c};yd(t,e,r),i=u.section,s++}const e=u.people.reduce(((t,e)=>(xd[e]&&(t[e]=xd[e]),t)),{});u.x=h*r.taskMargin+h*r.width+kd,u.y=a,u.width=r.diagramMarginX,u.height=r.diagramMarginY,u.colour=c,u.fill=o,u.num=l,u.actors=e,bd(t,u,r),wd.insert(u.x,u.y,u.x+u.width+r.taskMargin,450)}},Sd={setConf:function(t){Object.keys(t).forEach((function(e){vd[e]=t[e]}))},draw:function(t,e,n,r){const i=ar().journey;r.db.clear(),r.parser.parse(t+"\n");const a=ar().securityLevel;let s;"sandbox"===a&&(s=(0,o.Ys)("#i"+e));const c="sandbox"===a?(0,o.Ys)(s.nodes()[0].contentDocument.body):(0,o.Ys)("body");wd.init();const l=c.select("#"+e);_d(l);const h=r.db.getTasks(),u=r.db.getDiagramTitle(),d=r.db.getActors();for(const o in xd)delete xd[o];let p=0;d.forEach((t=>{xd[t]={color:i.actorColours[p%i.actorColours.length],position:p},p++})),function(t){const e=ar().journey;let n=60;Object.keys(xd).forEach((r=>{const i=xd[r].color,a={cx:20,cy:n,r:7,fill:i,stroke:"#000",pos:xd[r].position};gd(t,a);const s={x:40,y:n+7,fill:"#666",text:r,textMargin:5|e.boxTextMargin};md(t,s),n+=20}))}(l),wd.insert(0,0,kd,50*Object.keys(xd).length),Td(l,h,0);const f=wd.getBounds();u&&l.append("text").text(u).attr("x",kd).attr("font-size","4ex").attr("font-weight","bold").attr("y",25);const g=f.stopy-f.starty+2*i.diagramMarginY,y=kd+f.stopx+2*i.diagramMarginX;dr(l,g,y,i.useMaxWidth),l.append("line").attr("x1",kd).attr("y1",4*i.height).attr("x2",y-kd-4).attr("y2",4*i.height).attr("stroke-width",4).attr("stroke","black").attr("marker-end","url(#arrowhead)");const m=u?70:0;l.attr("viewBox",`${f.startx} -25 ${y} ${g+m}`),l.attr("preserveAspectRatio","xMinYMin meet"),l.attr("height",g+m+25)}};let Ad={};const Ld={setConf:function(t){Ad={...Ad,...t}},draw:(t,e,n)=>{try{Nt.debug("Renering svg for syntax error\n");const t=(0,o.Ys)("#"+e),r=t.append("g");r.append("path").attr("class","error-icon").attr("d","m411.313,123.313c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32-9.375,9.375-20.688-20.688c-12.484-12.5-32.766-12.5-45.25,0l-16,16c-1.261,1.261-2.304,2.648-3.31,4.051-21.739-8.561-45.324-13.426-70.065-13.426-105.867,0-192,86.133-192,192s86.133,192 192,192 192-86.133 192-192c0-24.741-4.864-48.327-13.426-70.065 1.402-1.007 2.79-2.049 4.051-3.31l16-16c12.5-12.492 12.5-32.758 0-45.25l-20.688-20.688 9.375-9.375 32.001-31.999zm-219.313,100.687c-52.938,0-96,43.063-96,96 0,8.836-7.164,16-16,16s-16-7.164-16-16c0-70.578 57.422-128 128-128 8.836,0 16,7.164 16,16s-7.164,16-16,16z"),r.append("path").attr("class","error-icon").attr("d","m459.02,148.98c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l16,16c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16.001-16z"),r.append("path").attr("class","error-icon").attr("d","m340.395,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688 6.25-6.25 6.25-16.375 0-22.625l-16-16c-6.25-6.25-16.375-6.25-22.625,0s-6.25,16.375 0,22.625l15.999,16z"),r.append("path").attr("class","error-icon").attr("d","m400,64c8.844,0 16-7.164 16-16v-32c0-8.836-7.156-16-16-16-8.844,0-16,7.164-16,16v32c0,8.836 7.156,16 16,16z"),r.append("path").attr("class","error-icon").attr("d","m496,96.586h-32c-8.844,0-16,7.164-16,16 0,8.836 7.156,16 16,16h32c8.844,0 16-7.164 16-16 0-8.836-7.156-16-16-16z"),r.append("path").attr("class","error-icon").attr("d","m436.98,75.605c3.125,3.125 7.219,4.688 11.313,4.688 4.094,0 8.188-1.563 11.313-4.688l32-32c6.25-6.25 6.25-16.375 0-22.625s-16.375-6.25-22.625,0l-32,32c-6.251,6.25-6.251,16.375-0.001,22.625z"),r.append("text").attr("class","error-text").attr("x",1440).attr("y",250).attr("font-size","150px").style("text-anchor","middle").text("Syntax error in graph"),r.append("text").attr("class","error-text").attr("x",1250).attr("y",400).attr("font-size","100px").style("text-anchor","middle").text("mermaid version "+n),t.attr("height",100),t.attr("width",500),t.attr("viewBox","768 0 912 512")}catch(i){Nt.error("Error while rendering info diagram"),Nt.error((r=i)instanceof Error?r.message:String(r))}var r}},Bd="flowchart-elk",Nd={id:Bd,detector:(t,e)=>{var n;return!!(t.match(/^\s*flowchart-elk/)||t.match(/^\s*flowchart|graph/)&&"elk"===(null==(n=null==e?void 0:e.flowchart)?void 0:n.defaultRenderer))},loader:async()=>{const{diagram:t}=await n.e(9487).then(n.bind(n,9487));return{id:Bd,diagram:t}}},Dd="timeline",Od={id:Dd,detector:t=>null!==t.match(/^\s*timeline/),loader:async()=>{const{diagram:t}=await n.e(6316).then(n.bind(n,6316));return{id:Dd,diagram:t}}},Md="mindmap",Id={id:Md,detector:t=>null!==t.match(/^\s*mindmap/),loader:async()=>{const{diagram:t}=await n.e(7724).then(n.bind(n,7724));return{id:Md,diagram:t}}};let Fd=!1;const $d=()=>{Fd||(Fd=!0,En(Nd,Od,Id),Kr("error",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{}},init:()=>{}},(t=>"error"===t.toLowerCase().trim())),Kr("---",{db:{clear:()=>{}},styles:yr,renderer:Ld,parser:{parser:{yy:{}},parse:()=>{throw new Error("Diagrams beginning with --- are not valid. If you were trying to use a YAML front-matter, please ensure that you've correctly opened and closed the YAML front-matter with unindented `---` blocks")}},init:()=>null},(t=>t.toLowerCase().trimStart().startsWith("---"))),Kr("c4",{parser:Fi,db:Ki,renderer:La,styles:Cr,init:t=>{La.setConf(t.c4)}},$i),Kr("class",{parser:Na,db:Ga,renderer:cs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Da),Kr("classDiagram",{parser:Na,db:Ga,renderer:Xs,styles:fr,init:t=>{t.class||(t.class={}),t.class.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Ga.clear()}},Oa),Kr("er",{parser:Qs,db:ro,renderer:yo,styles:gr},Js),Kr("gantt",{parser:Cc,db:il,renderer:ol,styles:br},Tc),Kr("info",{parser:ll,db:dl,renderer:pl,styles:_r},fl),Kr("pie",{parser:yl,db:xl,renderer:El,styles:xr},ml),Kr("requirement",{parser:Tl,db:Ol,renderer:Ul,styles:vr},Sl),Kr("sequence",{parser:ql,db:ph,renderer:Wh,styles:kr,init:t=>{if(t.sequence||(t.sequence={}),t.sequence.arrowMarkerAbsolute=t.arrowMarkerAbsolute,"sequenceDiagram"in t)throw new Error("`mermaid config.sequenceDiagram` has been renamed to `config.sequence`. Please update your mermaid config.");ph.setWrap(t.wrap),Wh.setConf(t.sequence)}},Hl),Kr("state",{parser:Hh,db:Eu,renderer:Iu,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Vh),Kr("stateDiagram",{parser:Hh,db:Eu,renderer:Ju,styles:wr,init:t=>{t.state||(t.state={}),t.state.arrowMarkerAbsolute=t.arrowMarkerAbsolute,Eu.clear()}},Gh),Kr("journey",{parser:ed,db:cd,renderer:Sd,styles:Er,init:t=>{Sd.setConf(t.journey),cd.clear()}},nd),Kr("flowchart",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,_c(t.flowchart),yc.clear(),yc.setGen("gen-1")}},_o),Kr("flowchart-v2",{parser:bo,db:yc,renderer:wc,styles:mr,init:t=>{t.flowchart||(t.flowchart={}),t.flowchart.arrowMarkerAbsolute=t.arrowMarkerAbsolute,ir({flowchart:{arrowMarkerAbsolute:t.arrowMarkerAbsolute}}),wc.setConf(t.flowchart),yc.clear(),yc.setGen("gen-2")}},xo),Kr("gitGraph",{parser:ti,db:bi,renderer:Oi,styles:Mi},ei))};class Rd{constructor(t,e){var n,r;this.txt=t,this.type="graph",this.detectTypeFailed=!1;const i=ar();this.txt=t;try{this.type=wn(t,i)}catch(o){this.handleError(o,e),this.type="error",this.detectTypeFailed=!0}const a=Qr(this.type);Nt.debug("Type "+this.type),this.db=a.db,null==(r=(n=this.db).clear)||r.call(n),this.renderer=a.renderer,this.parser=a.parser;const s=this.parser.parse.bind(this.parser);this.parser.parse=t=>s(function(t,e){var n;const r=t.match(_n);if(r){const i=bn(r[1],{schema:mn});return(null==i?void 0:i.title)&&(null==(n=e.setDiagramTitle)||n.call(e,i.title)),t.slice(r[0].length)}return t}(t,this.db)),this.parser.parser.yy=this.db,a.init&&(a.init(i),Nt.info("Initialized diagram "+this.type,i)),this.txt+="\n",this.parse(this.txt,e)}parse(t,e){var n,r;if(this.detectTypeFailed)return!1;try{return t+="\n",null==(r=(n=this.db).clear)||r.call(n),this.parser.parse(t),!0}catch(i){this.handleError(i,e)}return!1}handleError(t,e){if(void 0===e)throw t;Hn(t)?e(t.str,t.hash):e(t)}getParser(){return this.parser}getType(){return this.type}}const Zd=(t,e)=>{const n=wn(t,ar());try{Qr(n)}catch(r){const i=kn[n].loader;if(!i)throw new Error(`Diagram ${n} not found.`);return i().then((({diagram:r})=>(Kr(n,r,void 0),new Rd(t,e))))}return new Rd(t,e)},Pd=Rd;const jd=["graph","flowchart","flowchart-v2","stateDiagram","stateDiagram-v2"],Yd="graph TB;a[Maximum text size in diagram exceeded];style a fill:#faa",zd="sandbox",Ud="loose",Wd="http://www.w3.org/1999/xlink",qd="http://www.w3.org/1999/xhtml",Hd=["foreignobject"],Vd=["dominant-baseline"];const Gd=function(t){let e=t;return e=e.replace(/style.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/classDef.*:\S*#.*;/g,(function(t){return t.substring(0,t.length-1)})),e=e.replace(/#\w+;/g,(function(t){const e=t.substring(1,t.length-1);return/^\+?\d+$/.test(e)?"\ufb02\xb0\xb0"+e+"\xb6\xdf":"\ufb02\xb0"+e+"\xb6\xdf"})),e},Xd=function(t){let e=t;return e=e.replace(/\ufb02\xb0\xb0/g,"&#"),e=e.replace(/\ufb02\xb0/g,"&"),e=e.replace(/\xb6\xdf/g,";"),e},Kd=(t,e,n=[])=>`\n.${t} ${e} { ${n.join(" !important; ")} !important; }`,Qd=(t,e,n,r)=>{const i=((t,e,n={})=>{var r;let i="";if(void 0!==t.themeCSS&&(i+=`\n${t.themeCSS}`),void 0!==t.fontFamily&&(i+=`\n:root { --mermaid-font-family: ${t.fontFamily}}`),void 0!==t.altFontFamily&&(i+=`\n:root { --mermaid-alt-font-family: ${t.altFontFamily}}`),!(0,Lt.Z)(n)&&jd.includes(e)){const e=["> *","span"],a=["rect","polygon","ellipse","circle","path"],s=t.htmlLabels||(null==(r=t.flowchart)?void 0:r.htmlLabels)?e:a;for(const t in n){const e=n[t];(0,Lt.Z)(e.styles)||s.forEach((t=>{i+=Kd(e.id,t,e.styles)})),(0,Lt.Z)(e.textStyles)||(i+=Kd(e.id,"tspan",e.textStyles))}}return i})(t,e,n);return I(it(`${r}{${Sr(e,i,t.themeVariables)}}`),F)},Jd=(t="",e,n)=>{let r=t;return n||e||(r=r.replace(/marker-end="url\(.*?#/g,'marker-end="url(#')),r=Xd(r),r=r.replace(/<br>/g,"<br/>"),r},tp=(t="",e)=>`<iframe style="width:100%;height:${e?e.viewBox.baseVal.height+"px":"100%"};border:0;margin:0;" src="data:text/html;base64,${btoa('<body style="margin:0">'+t+"</body>")}" sandbox="allow-top-navigation-by-user-activation allow-popups">\n  The "iframe" tag is not supported by your browser.\n</iframe>`,ep=(t,e,n,r,i)=>{const a=t.append("div");a.attr("id",n),r&&a.attr("style",r);const s=a.append("svg").attr("id",e).attr("width","100%").attr("xmlns","http://www.w3.org/2000/svg");return i&&s.attr("xmlns:xlink",i),s.append("g"),t};function np(t,e){return t.append("iframe").attr("id",e).attr("style","width: 100%; height: 100%;").attr("sandbox","")}const rp=(t,e,n,r)=>{var i,a,s;null==(i=t.getElementById(e))||i.remove(),null==(a=t.getElementById(n))||a.remove(),null==(s=t.getElementById(r))||s.remove()};function ip(t,e,n,r){var i,a;a=t,(i=e).attr("role","graphics-document document"),(0,Lt.Z)(a)||i.attr("aria-roledescription",a),function(t,e,n,r){if(void 0!==t.insert&&(e||n)){if(n){const e="chart-desc-"+r;t.attr("aria-describedby",e),t.insert("desc",":first-child").attr("id",e).text(n)}if(e){const n="chart-title-"+r;t.attr("aria-labelledby",n),t.insert("title",":first-child").attr("id",n).text(e)}}}(e,n,r,e.attr("id"))}const ap=Object.freeze({render:function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{if(v=Zd(e),"then"in v)throw new Error("Diagram is a promise. Use renderAsync.")}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},renderAsync:async function(t,e,n,r){var i,a,s,c;$d(),cr();const l=Gn.detectInit(e);l&&(Wn(l),or(l));const u=ar();Nt.debug(u),e.length>((null==u?void 0:u.maxTextSize)??5e4)&&(e=Yd),e=e.replace(/\r\n?/g,"\n");const d="#"+t,p="i"+t,f="#"+p,g="d"+t,y="#"+g;let m=(0,o.Ys)("body");const b=u.securityLevel===zd,_=u.securityLevel===Ud,x=u.fontFamily;if(void 0!==r){if(r&&(r.innerHTML=""),b){const t=np((0,o.Ys)(r),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)(r);ep(m,t,g,`font-family: ${x}`,Wd)}else{if(rp(document,t,g,p),b){const t=np((0,o.Ys)("body"),p);m=(0,o.Ys)(t.nodes()[0].contentDocument.body),m.node().style.margin=0}else m=(0,o.Ys)("body");ep(m,t,g)}let v,k;e=Gd(e);try{v=await Zd(e)}catch(O){v=new Pd("error"),k=O}const w=m.select(y).node(),E=v.type,C=w.firstChild,T=C.firstChild,S=jd.includes(E)?v.renderer.getClasses(e,v):{},A=Qd(u,E,S,d),L=document.createElement("style");L.innerHTML=A,C.insertBefore(L,T);try{await v.renderer.draw(e,t,Xn,v)}catch(M){throw Ld.draw(e,t,Xn),M}ip(E,m.select(`${y} svg`),null==(a=(i=v.db).getAccTitle)?void 0:a.call(i),null==(c=(s=v.db).getAccDescription)?void 0:c.call(s)),m.select(`[id="${t}"]`).selectAll("foreignobject > *").attr("xmlns",qd);let B=m.select(y).node().innerHTML;if(Nt.debug("config.arrowMarkerAbsolute",u.arrowMarkerAbsolute),B=Jd(B,b,Pt(u.arrowMarkerAbsolute)),b){const t=m.select(y+" svg").node();B=tp(B,t)}else _||(B=h().sanitize(B,{ADD_TAGS:Hd,ADD_ATTR:Vd}));if(void 0!==n)switch(E){case"flowchart":case"flowchart-v2":n(B,yc.bindFunctions);break;case"gantt":n(B,il.bindFunctions);break;case"class":case"classDiagram":n(B,Ga.bindFunctions);break;default:n(B)}else Nt.debug("CB = undefined!");gh();const N=b?f:y,D=(0,o.Ys)(N).node();if(D&&"remove"in D&&D.remove(),k)throw k;return B},parse:function(t,e){return $d(),new Pd(t,e).parse(t,e)},parseAsync:async function(t,e){return $d(),(await Zd(t,e)).parse(t,e)},parseDirective:Yr,initialize:function(t={}){var e;(null==t?void 0:t.fontFamily)&&!(null==(e=t.themeVariables)?void 0:e.fontFamily)&&(t.themeVariables={fontFamily:t.fontFamily}),Qn=Sn({},t),(null==t?void 0:t.theme)&&t.theme in Ht?t.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables):t&&(t.themeVariables=Ht.default.getThemeVariables(t.themeVariables));const n="object"==typeof t?(t=>(Jn=Sn({},Kn),Jn=Sn(Jn,t),t.theme&&Ht[t.theme]&&(Jn.themeVariables=Ht[t.theme].getThemeVariables(t.themeVariables)),nr(Jn,tr),Jn))(t):rr();Dt(n.logLevel),$d()},getConfig:ar,setConfig:ir,getSiteConfig:rr,updateSiteConfig:t=>(Jn=Sn(Jn,t),nr(Jn,tr),Jn),reset:()=>{cr()},globalReset:()=>{cr(Kn)},defaultConfig:Kn});Dt(ar().logLevel),cr(ar());const sp=(t,e,n)=>{Nt.warn(t),Hn(t)?(n&&n(t.str,t.hash),e.push({...t,message:t.str,error:t})):(n&&n(t),t instanceof Error&&e.push({str:t.message,message:t.message,hash:t.name,error:t}))},op=async function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{await ap.renderAsync(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},cp=function(){if(dp.startOnLoad){const{startOnLoad:t}=ap.getConfig();t&&dp.init().catch((t=>Nt.error("Mermaid failed to initialize",t)))}};"undefined"!=typeof document&&window.addEventListener("load",cp,!1);const lp=[];let hp=!1;const up=async()=>{if(!hp){for(hp=!0;lp.length>0;){const e=lp.shift();if(e)try{await e()}catch(t){Nt.error("Error executing queue",t)}}hp=!1}},dp={startOnLoad:!0,diagrams:{},mermaidAPI:ap,parse:t=>ap.parse(t,dp.parseError),parseAsync:t=>new Promise(((e,n)=>{lp.push((()=>new Promise(((r,i)=>{ap.parseAsync(t,dp.parseError).then((t=>{r(t),e(t)}),(t=>{Nt.error("Error parsing",t),i(t),n(t)}))})))),up().catch(n)})),render:ap.render,renderAsync:(t,e,n,r)=>new Promise(((i,a)=>{lp.push((()=>new Promise(((s,o)=>{ap.renderAsync(t,e,n,r).then((t=>{s(t),i(t)}),(t=>{Nt.error("Error parsing",t),o(t),a(t)}))})))),up().catch(a)})),init:async function(t,e,n){try{await op(t,e,n)}catch(r){Nt.warn("Syntax Error rendering"),Hn(r)&&Nt.warn(r.str),dp.parseError&&dp.parseError(r)}},initThrowsErrors:function(t,e,n){const i=ap.getConfig();let a;if(t&&(dp.sequenceConfig=t),Nt.debug((n?"":"No ")+"Callback function found"),void 0===e)a=document.querySelectorAll(".mermaid");else if("string"==typeof e)a=document.querySelectorAll(e);else if(e instanceof HTMLElement)a=[e];else{if(!(e instanceof NodeList))throw new Error("Invalid argument nodes for mermaid.init");a=e}Nt.debug(`Found ${a.length} diagrams`),void 0!==(null==t?void 0:t.startOnLoad)&&(Nt.debug("Start On Load: "+(null==t?void 0:t.startOnLoad)),ap.updateSiteConfig({startOnLoad:null==t?void 0:t.startOnLoad}));const s=new Gn.initIdGenerator(i.deterministicIds,i.deterministicIDSeed);let o;const c=[];for(const h of Array.from(a)){if(Nt.info("Rendering diagram: "+h.id),h.getAttribute("data-processed"))continue;h.setAttribute("data-processed","true");const t=`mermaid-${s.next()}`;o=h.innerHTML,o=r(Gn.entityDecode(o)).trim().replace(/<br\s*\/?>/gi,"<br/>");const e=Gn.detectInit(o);e&&Nt.debug("Detected early reinit: ",e);try{ap.render(t,o,((e,r)=>{h.innerHTML=e,void 0!==n&&n(t),r&&r(h)}),h)}catch(l){sp(l,c,dp.parseError)}}if(c.length>0)throw c[0]},initThrowsErrorsAsync:op,registerExternalDiagrams:async(t,{lazyLoad:e=!0}={})=>{e?En(...t):await(async(...t)=>{Nt.debug(`Loading ${t.length} external diagrams`);const e=(await Promise.allSettled(t.map((async({id:t,detector:e,loader:n})=>{const{diagram:r}=await n();Kr(t,r,e)})))).filter((t=>"rejected"===t.status));if(e.length>0){Nt.error(`Failed to load ${e.length} external diagrams`);for(const t of e)Nt.error(t);throw new Error(`Failed to load ${e.length} external diagrams`)}})(...t)},initialize:function(t){ap.initialize(t)},parseError:void 0,contentLoaded:cp,setParseErrorHandler:function(t){dp.parseError=t}}},7594:(t,e)=>{function n(t){let e,n=[];for(let r of t.split(",").map((t=>t.trim())))if(/^-?\d+$/.test(r))n.push(parseInt(r,10));else if(e=r.match(/^(-?\d+)(-|\.\.\.?|\u2025|\u2026|\u22EF)(-?\d+)$/)){let[t,r,i,a]=e;if(r&&a){r=parseInt(r),a=parseInt(a);const t=r<a?1:-1;"-"!==i&&".."!==i&&"\u2025"!==i||(a+=t);for(let e=r;e!==a;e+=t)n.push(e)}}return n}e.default=n,t.exports=n},9373:(t,e,n)=>{"use strict";function r(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n<r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n<i||void 0===n&&i>=i)&&(n=i)}return n}function i(t,e){let n;if(void 0===e)for(const r of t)null!=r&&(n>r||void 0===n&&r>=r)&&(n=r);else{let r=-1;for(let i of t)null!=(i=e(i,++r,t))&&(n>i||void 0===n&&i>=i)&&(n=i)}return n}function a(t){return t}n.d(e,{Nb1:()=>ao,LLu:()=>f,F5q:()=>p,$0Z:()=>_o,Dts:()=>vo,WQY:()=>wo,qpX:()=>Co,u93:()=>To,tFB:()=>Ao,YY7:()=>No,OvA:()=>Oo,dCK:()=>Io,zgE:()=>Ro,fGX:()=>Po,$m7:()=>Yo,c_6:()=>co,fxm:()=>Uo,FdL:()=>Qo,ak_:()=>Jo,SxZ:()=>nc,eA_:()=>ic,jsv:()=>sc,iJ:()=>ac,JHv:()=>dr,jvg:()=>uo,Fp7:()=>r,VV$:()=>i,ve8:()=>go,BYU:()=>ai,PKp:()=>di,Xf:()=>As,Ys:()=>Ls,td_:()=>Bs,YPS:()=>Hn,rr1:()=>Li,i$Z:()=>oa,WQD:()=>Si,Z_i:()=>Ci,F0B:()=>Vi,NGh:()=>Oi});var s=1e-6;function o(t){return"translate("+t+",0)"}function c(t){return"translate(0,"+t+")"}function l(t){return e=>+t(e)}function h(t,e){return e=Math.max(0,t.bandwidth()-2*e)/2,t.round()&&(e=Math.round(e)),n=>+t(n)+e}function u(){return!this.__axis}function d(t,e){var n=[],r=null,i=null,d=6,p=6,f=3,g="undefined"!=typeof window&&window.devicePixelRatio>1?0:.5,y=1===t||4===t?-1:1,m=4===t||2===t?"x":"y",b=1===t||3===t?o:c;function _(o){var c=null==r?e.ticks?e.ticks.apply(e,n):e.domain():r,_=null==i?e.tickFormat?e.tickFormat.apply(e,n):a:i,x=Math.max(d,0)+f,v=e.range(),k=+v[0]+g,w=+v[v.length-1]+g,E=(e.bandwidth?h:l)(e.copy(),g),C=o.selection?o.selection():o,T=C.selectAll(".domain").data([null]),S=C.selectAll(".tick").data(c,e).order(),A=S.exit(),L=S.enter().append("g").attr("class","tick"),B=S.select("line"),N=S.select("text");T=T.merge(T.enter().insert("path",".tick").attr("class","domain").attr("stroke","currentColor")),S=S.merge(L),B=B.merge(L.append("line").attr("stroke","currentColor").attr(m+"2",y*d)),N=N.merge(L.append("text").attr("fill","currentColor").attr(m,y*x).attr("dy",1===t?"0em":3===t?"0.71em":"0.32em")),o!==C&&(T=T.transition(o),S=S.transition(o),B=B.transition(o),N=N.transition(o),A=A.transition(o).attr("opacity",s).attr("transform",(function(t){return isFinite(t=E(t))?b(t+g):this.getAttribute("transform")})),L.attr("opacity",s).attr("transform",(function(t){var e=this.parentNode.__axis;return b((e&&isFinite(e=e(t))?e:E(t))+g)}))),A.remove(),T.attr("d",4===t||2===t?p?"M"+y*p+","+k+"H"+g+"V"+w+"H"+y*p:"M"+g+","+k+"V"+w:p?"M"+k+","+y*p+"V"+g+"H"+w+"V"+y*p:"M"+k+","+g+"H"+w),S.attr("opacity",1).attr("transform",(function(t){return b(E(t)+g)})),B.attr(m+"2",y*d),N.attr(m,y*x).text(_),C.filter(u).attr("fill","none").attr("font-size",10).attr("font-family","sans-serif").attr("text-anchor",2===t?"start":4===t?"end":"middle"),C.each((function(){this.__axis=E}))}return _.scale=function(t){return arguments.length?(e=t,_):e},_.ticks=function(){return n=Array.from(arguments),_},_.tickArguments=function(t){return arguments.length?(n=null==t?[]:Array.from(t),_):n.slice()},_.tickValues=function(t){return arguments.length?(r=null==t?null:Array.from(t),_):r&&r.slice()},_.tickFormat=function(t){return arguments.length?(i=t,_):i},_.tickSize=function(t){return arguments.length?(d=p=+t,_):d},_.tickSizeInner=function(t){return arguments.length?(d=+t,_):d},_.tickSizeOuter=function(t){return arguments.length?(p=+t,_):p},_.tickPadding=function(t){return arguments.length?(f=+t,_):f},_.offset=function(t){return arguments.length?(g=+t,_):g},_}function p(t){return d(1,t)}function f(t){return d(3,t)}function g(){}function y(t){return null==t?g:function(){return this.querySelector(t)}}function m(t){return null==t?[]:Array.isArray(t)?t:Array.from(t)}function b(){return[]}function _(t){return null==t?b:function(){return this.querySelectorAll(t)}}function x(t){return function(){return this.matches(t)}}function v(t){return function(e){return e.matches(t)}}var k=Array.prototype.find;function w(){return this.firstElementChild}var E=Array.prototype.filter;function C(){return Array.from(this.children)}function T(t){return new Array(t.length)}function S(t,e){this.ownerDocument=t.ownerDocument,this.namespaceURI=t.namespaceURI,this._next=null,this._parent=t,this.__data__=e}function A(t){return function(){return t}}function L(t,e,n,r,i,a){for(var s,o=0,c=e.length,l=a.length;o<l;++o)(s=e[o])?(s.__data__=a[o],r[o]=s):n[o]=new S(t,a[o]);for(;o<c;++o)(s=e[o])&&(i[o]=s)}function B(t,e,n,r,i,a,s){var o,c,l,h=new Map,u=e.length,d=a.length,p=new Array(u);for(o=0;o<u;++o)(c=e[o])&&(p[o]=l=s.call(c,c.__data__,o,e)+"",h.has(l)?i[o]=c:h.set(l,c));for(o=0;o<d;++o)l=s.call(t,a[o],o,a)+"",(c=h.get(l))?(r[o]=c,c.__data__=a[o],h.delete(l)):n[o]=new S(t,a[o]);for(o=0;o<u;++o)(c=e[o])&&h.get(p[o])===c&&(i[o]=c)}function N(t){return t.__data__}function D(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function O(t,e){return t<e?-1:t>e?1:t>=e?0:NaN}S.prototype={constructor:S,appendChild:function(t){return this._parent.insertBefore(t,this._next)},insertBefore:function(t,e){return this._parent.insertBefore(t,e)},querySelector:function(t){return this._parent.querySelector(t)},querySelectorAll:function(t){return this._parent.querySelectorAll(t)}};var M="http://www.w3.org/1999/xhtml";const I={svg:"http://www.w3.org/2000/svg",xhtml:M,xlink:"http://www.w3.org/1999/xlink",xml:"http://www.w3.org/XML/1998/namespace",xmlns:"http://www.w3.org/2000/xmlns/"};function F(t){var e=t+="",n=e.indexOf(":");return n>=0&&"xmlns"!==(e=t.slice(0,n))&&(t=t.slice(n+1)),I.hasOwnProperty(e)?{space:I[e],local:t}:t}function $(t){return function(){this.removeAttribute(t)}}function R(t){return function(){this.removeAttributeNS(t.space,t.local)}}function Z(t,e){return function(){this.setAttribute(t,e)}}function P(t,e){return function(){this.setAttributeNS(t.space,t.local,e)}}function j(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttribute(t):this.setAttribute(t,n)}}function Y(t,e){return function(){var n=e.apply(this,arguments);null==n?this.removeAttributeNS(t.space,t.local):this.setAttributeNS(t.space,t.local,n)}}function z(t){return t.ownerDocument&&t.ownerDocument.defaultView||t.document&&t||t.defaultView}function U(t){return function(){this.style.removeProperty(t)}}function W(t,e,n){return function(){this.style.setProperty(t,e,n)}}function q(t,e,n){return function(){var r=e.apply(this,arguments);null==r?this.style.removeProperty(t):this.style.setProperty(t,r,n)}}function H(t,e){return t.style.getPropertyValue(e)||z(t).getComputedStyle(t,null).getPropertyValue(e)}function V(t){return function(){delete this[t]}}function G(t,e){return function(){this[t]=e}}function X(t,e){return function(){var n=e.apply(this,arguments);null==n?delete this[t]:this[t]=n}}function K(t){return t.trim().split(/^|\s+/)}function Q(t){return t.classList||new J(t)}function J(t){this._node=t,this._names=K(t.getAttribute("class")||"")}function tt(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.add(e[r])}function et(t,e){for(var n=Q(t),r=-1,i=e.length;++r<i;)n.remove(e[r])}function nt(t){return function(){tt(this,t)}}function rt(t){return function(){et(this,t)}}function it(t,e){return function(){(e.apply(this,arguments)?tt:et)(this,t)}}function at(){this.textContent=""}function st(t){return function(){this.textContent=t}}function ot(t){return function(){var e=t.apply(this,arguments);this.textContent=null==e?"":e}}function ct(){this.innerHTML=""}function lt(t){return function(){this.innerHTML=t}}function ht(t){return function(){var e=t.apply(this,arguments);this.innerHTML=null==e?"":e}}function ut(){this.nextSibling&&this.parentNode.appendChild(this)}function dt(){this.previousSibling&&this.parentNode.insertBefore(this,this.parentNode.firstChild)}function pt(t){return function(){var e=this.ownerDocument,n=this.namespaceURI;return n===M&&e.documentElement.namespaceURI===M?e.createElement(t):e.createElementNS(n,t)}}function ft(t){return function(){return this.ownerDocument.createElementNS(t.space,t.local)}}function gt(t){var e=F(t);return(e.local?ft:pt)(e)}function yt(){return null}function mt(){var t=this.parentNode;t&&t.removeChild(this)}function bt(){var t=this.cloneNode(!1),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function _t(){var t=this.cloneNode(!0),e=this.parentNode;return e?e.insertBefore(t,this.nextSibling):t}function xt(t){return t.trim().split(/^|\s+/).map((function(t){var e="",n=t.indexOf(".");return n>=0&&(e=t.slice(n+1),t=t.slice(0,n)),{type:t,name:e}}))}function vt(t){return function(){var e=this.__on;if(e){for(var n,r=0,i=-1,a=e.length;r<a;++r)n=e[r],t.type&&n.type!==t.type||n.name!==t.name?e[++i]=n:this.removeEventListener(n.type,n.listener,n.options);++i?e.length=i:delete this.__on}}}function kt(t,e,n){return function(){var r,i=this.__on,a=function(t){return function(e){t.call(this,e,this.__data__)}}(e);if(i)for(var s=0,o=i.length;s<o;++s)if((r=i[s]).type===t.type&&r.name===t.name)return this.removeEventListener(r.type,r.listener,r.options),this.addEventListener(r.type,r.listener=a,r.options=n),void(r.value=e);this.addEventListener(t.type,a,n),r={type:t.type,name:t.name,value:e,listener:a,options:n},i?i.push(r):this.__on=[r]}}function wt(t,e,n){var r=z(t),i=r.CustomEvent;"function"==typeof i?i=new i(e,n):(i=r.document.createEvent("Event"),n?(i.initEvent(e,n.bubbles,n.cancelable),i.detail=n.detail):i.initEvent(e,!1,!1)),t.dispatchEvent(i)}function Et(t,e){return function(){return wt(this,t,e)}}function Ct(t,e){return function(){return wt(this,t,e.apply(this,arguments))}}J.prototype={add:function(t){this._names.indexOf(t)<0&&(this._names.push(t),this._node.setAttribute("class",this._names.join(" ")))},remove:function(t){var e=this._names.indexOf(t);e>=0&&(this._names.splice(e,1),this._node.setAttribute("class",this._names.join(" ")))},contains:function(t){return this._names.indexOf(t)>=0}};var Tt=[null];function St(t,e){this._groups=t,this._parents=e}function At(){return new St([[document.documentElement]],Tt)}St.prototype=At.prototype={constructor:St,select:function(t){"function"!=typeof t&&(t=y(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s,o=e[i],c=o.length,l=r[i]=new Array(c),h=0;h<c;++h)(a=o[h])&&(s=t.call(a,a.__data__,h,o))&&("__data__"in a&&(s.__data__=a.__data__),l[h]=s);return new St(r,this._parents)},selectAll:function(t){t="function"==typeof t?function(t){return function(){return m(t.apply(this,arguments))}}(t):_(t);for(var e=this._groups,n=e.length,r=[],i=[],a=0;a<n;++a)for(var s,o=e[a],c=o.length,l=0;l<c;++l)(s=o[l])&&(r.push(t.call(s,s.__data__,l,o)),i.push(s));return new St(r,i)},selectChild:function(t){return this.select(null==t?w:function(t){return function(){return k.call(this.children,t)}}("function"==typeof t?t:v(t)))},selectChildren:function(t){return this.selectAll(null==t?C:function(t){return function(){return E.call(this.children,t)}}("function"==typeof t?t:v(t)))},filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new St(r,this._parents)},data:function(t,e){if(!arguments.length)return Array.from(this,N);var n=e?B:L,r=this._parents,i=this._groups;"function"!=typeof t&&(t=A(t));for(var a=i.length,s=new Array(a),o=new Array(a),c=new Array(a),l=0;l<a;++l){var h=r[l],u=i[l],d=u.length,p=D(t.call(h,h&&h.__data__,l,r)),f=p.length,g=o[l]=new Array(f),y=s[l]=new Array(f),m=c[l]=new Array(d);n(h,u,g,y,m,p,e);for(var b,_,x=0,v=0;x<f;++x)if(b=g[x]){for(x>=v&&(v=x+1);!(_=y[v])&&++v<f;);b._next=_||null}}return(s=new St(s,r))._enter=o,s._exit=c,s},enter:function(){return new St(this._enter||this._groups.map(T),this._parents)},exit:function(){return new St(this._exit||this._groups.map(T),this._parents)},join:function(t,e,n){var r=this.enter(),i=this,a=this.exit();return"function"==typeof t?(r=t(r))&&(r=r.selection()):r=r.append(t+""),null!=e&&(i=e(i))&&(i=i.selection()),null==n?a.remove():n(a),r&&i?r.merge(i).order():i},merge:function(t){for(var e=t.selection?t.selection():t,n=this._groups,r=e._groups,i=n.length,a=r.length,s=Math.min(i,a),o=new Array(i),c=0;c<s;++c)for(var l,h=n[c],u=r[c],d=h.length,p=o[c]=new Array(d),f=0;f<d;++f)(l=h[f]||u[f])&&(p[f]=l);for(;c<i;++c)o[c]=n[c];return new St(o,this._parents)},selection:function(){return this},order:function(){for(var t=this._groups,e=-1,n=t.length;++e<n;)for(var r,i=t[e],a=i.length-1,s=i[a];--a>=0;)(r=i[a])&&(s&&4^r.compareDocumentPosition(s)&&s.parentNode.insertBefore(r,s),s=r);return this},sort:function(t){function e(e,n){return e&&n?t(e.__data__,n.__data__):!e-!n}t||(t=O);for(var n=this._groups,r=n.length,i=new Array(r),a=0;a<r;++a){for(var s,o=n[a],c=o.length,l=i[a]=new Array(c),h=0;h<c;++h)(s=o[h])&&(l[h]=s);l.sort(e)}return new St(i,this._parents).order()},call:function(){var t=arguments[0];return arguments[0]=this,t.apply(null,arguments),this},nodes:function(){return Array.from(this)},node:function(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r=t[e],i=0,a=r.length;i<a;++i){var s=r[i];if(s)return s}return null},size:function(){let t=0;for(const e of this)++t;return t},empty:function(){return!this.node()},each:function(t){for(var e=this._groups,n=0,r=e.length;n<r;++n)for(var i,a=e[n],s=0,o=a.length;s<o;++s)(i=a[s])&&t.call(i,i.__data__,s,a);return this},attr:function(t,e){var n=F(t);if(arguments.length<2){var r=this.node();return n.local?r.getAttributeNS(n.space,n.local):r.getAttribute(n)}return this.each((null==e?n.local?R:$:"function"==typeof e?n.local?Y:j:n.local?P:Z)(n,e))},style:function(t,e,n){return arguments.length>1?this.each((null==e?U:"function"==typeof e?q:W)(t,e,null==n?"":n)):H(this.node(),t)},property:function(t,e){return arguments.length>1?this.each((null==e?V:"function"==typeof e?X:G)(t,e)):this.node()[t]},classed:function(t,e){var n=K(t+"");if(arguments.length<2){for(var r=Q(this.node()),i=-1,a=n.length;++i<a;)if(!r.contains(n[i]))return!1;return!0}return this.each(("function"==typeof e?it:e?nt:rt)(n,e))},text:function(t){return arguments.length?this.each(null==t?at:("function"==typeof t?ot:st)(t)):this.node().textContent},html:function(t){return arguments.length?this.each(null==t?ct:("function"==typeof t?ht:lt)(t)):this.node().innerHTML},raise:function(){return this.each(ut)},lower:function(){return this.each(dt)},append:function(t){var e="function"==typeof t?t:gt(t);return this.select((function(){return this.appendChild(e.apply(this,arguments))}))},insert:function(t,e){var n="function"==typeof t?t:gt(t),r=null==e?yt:"function"==typeof e?e:y(e);return this.select((function(){return this.insertBefore(n.apply(this,arguments),r.apply(this,arguments)||null)}))},remove:function(){return this.each(mt)},clone:function(t){return this.select(t?_t:bt)},datum:function(t){return arguments.length?this.property("__data__",t):this.node().__data__},on:function(t,e,n){var r,i,a=xt(t+""),s=a.length;if(!(arguments.length<2)){for(o=e?kt:vt,r=0;r<s;++r)this.each(o(a[r],e,n));return this}var o=this.node().__on;if(o)for(var c,l=0,h=o.length;l<h;++l)for(r=0,c=o[l];r<s;++r)if((i=a[r]).type===c.type&&i.name===c.name)return c.value},dispatch:function(t,e){return this.each(("function"==typeof e?Ct:Et)(t,e))},[Symbol.iterator]:function*(){for(var t=this._groups,e=0,n=t.length;e<n;++e)for(var r,i=t[e],a=0,s=i.length;a<s;++a)(r=i[a])&&(yield r)}};const Lt=At;var Bt={value:()=>{}};function Nt(){for(var t,e=0,n=arguments.length,r={};e<n;++e){if(!(t=arguments[e]+"")||t in r||/[\s.]/.test(t))throw new Error("illegal type: "+t);r[t]=[]}return new Dt(r)}function Dt(t){this._=t}function Ot(t,e){return t.trim().split(/^|\s+/).map((function(t){var n="",r=t.indexOf(".");if(r>=0&&(n=t.slice(r+1),t=t.slice(0,r)),t&&!e.hasOwnProperty(t))throw new Error("unknown type: "+t);return{type:t,name:n}}))}function Mt(t,e){for(var n,r=0,i=t.length;r<i;++r)if((n=t[r]).name===e)return n.value}function It(t,e,n){for(var r=0,i=t.length;r<i;++r)if(t[r].name===e){t[r]=Bt,t=t.slice(0,r).concat(t.slice(r+1));break}return null!=n&&t.push({name:e,value:n}),t}Dt.prototype=Nt.prototype={constructor:Dt,on:function(t,e){var n,r=this._,i=Ot(t+"",r),a=-1,s=i.length;if(!(arguments.length<2)){if(null!=e&&"function"!=typeof e)throw new Error("invalid callback: "+e);for(;++a<s;)if(n=(t=i[a]).type)r[n]=It(r[n],t.name,e);else if(null==e)for(n in r)r[n]=It(r[n],t.name,null);return this}for(;++a<s;)if((n=(t=i[a]).type)&&(n=Mt(r[n],t.name)))return n},copy:function(){var t={},e=this._;for(var n in e)t[n]=e[n].slice();return new Dt(t)},call:function(t,e){if((n=arguments.length-2)>0)for(var n,r,i=new Array(n),a=0;a<n;++a)i[a]=arguments[a+2];if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(a=0,n=(r=this._[t]).length;a<n;++a)r[a].value.apply(e,i)},apply:function(t,e,n){if(!this._.hasOwnProperty(t))throw new Error("unknown type: "+t);for(var r=this._[t],i=0,a=r.length;i<a;++i)r[i].value.apply(e,n)}};const Ft=Nt;var $t,Rt,Zt=0,Pt=0,jt=0,Yt=0,zt=0,Ut=0,Wt="object"==typeof performance&&performance.now?performance:Date,qt="object"==typeof window&&window.requestAnimationFrame?window.requestAnimationFrame.bind(window):function(t){setTimeout(t,17)};function Ht(){return zt||(qt(Vt),zt=Wt.now()+Ut)}function Vt(){zt=0}function Gt(){this._call=this._time=this._next=null}function Xt(t,e,n){var r=new Gt;return r.restart(t,e,n),r}function Kt(){zt=(Yt=Wt.now())+Ut,Zt=Pt=0;try{!function(){Ht(),++Zt;for(var t,e=$t;e;)(t=zt-e._time)>=0&&e._call.call(void 0,t),e=e._next;--Zt}()}finally{Zt=0,function(){var t,e,n=$t,r=1/0;for(;n;)n._call?(r>n._time&&(r=n._time),t=n,n=n._next):(e=n._next,n._next=null,n=t?t._next=e:$t=e);Rt=t,Jt(r)}(),zt=0}}function Qt(){var t=Wt.now(),e=t-Yt;e>1e3&&(Ut-=e,Yt=t)}function Jt(t){Zt||(Pt&&(Pt=clearTimeout(Pt)),t-zt>24?(t<1/0&&(Pt=setTimeout(Kt,t-Wt.now()-Ut)),jt&&(jt=clearInterval(jt))):(jt||(Yt=Wt.now(),jt=setInterval(Qt,1e3)),Zt=1,qt(Kt)))}function te(t,e,n){var r=new Gt;return e=null==e?0:+e,r.restart((n=>{r.stop(),t(n+e)}),e,n),r}Gt.prototype=Xt.prototype={constructor:Gt,restart:function(t,e,n){if("function"!=typeof t)throw new TypeError("callback is not a function");n=(null==n?Ht():+n)+(null==e?0:+e),this._next||Rt===this||(Rt?Rt._next=this:$t=this,Rt=this),this._call=t,this._time=n,Jt()},stop:function(){this._call&&(this._call=null,this._time=1/0,Jt())}};var ee=Ft("start","end","cancel","interrupt"),ne=[];function re(t,e,n,r,i,a){var s=t.__transition;if(s){if(n in s)return}else t.__transition={};!function(t,e,n){var r,i=t.__transition;function a(t){n.state=1,n.timer.restart(s,n.delay,n.time),n.delay<=t&&s(t-n.delay)}function s(a){var l,h,u,d;if(1!==n.state)return c();for(l in i)if((d=i[l]).name===n.name){if(3===d.state)return te(s);4===d.state?(d.state=6,d.timer.stop(),d.on.call("interrupt",t,t.__data__,d.index,d.group),delete i[l]):+l<e&&(d.state=6,d.timer.stop(),d.on.call("cancel",t,t.__data__,d.index,d.group),delete i[l])}if(te((function(){3===n.state&&(n.state=4,n.timer.restart(o,n.delay,n.time),o(a))})),n.state=2,n.on.call("start",t,t.__data__,n.index,n.group),2===n.state){for(n.state=3,r=new Array(u=n.tween.length),l=0,h=-1;l<u;++l)(d=n.tween[l].value.call(t,t.__data__,n.index,n.group))&&(r[++h]=d);r.length=h+1}}function o(e){for(var i=e<n.duration?n.ease.call(null,e/n.duration):(n.timer.restart(c),n.state=5,1),a=-1,s=r.length;++a<s;)r[a].call(t,i);5===n.state&&(n.on.call("end",t,t.__data__,n.index,n.group),c())}function c(){for(var r in n.state=6,n.timer.stop(),delete i[e],i)return;delete t.__transition}i[e]=n,n.timer=Xt(a,0,n.time)}(t,n,{name:e,index:r,group:i,on:ee,tween:ne,time:a.time,delay:a.delay,duration:a.duration,ease:a.ease,timer:null,state:0})}function ie(t,e){var n=se(t,e);if(n.state>0)throw new Error("too late; already scheduled");return n}function ae(t,e){var n=se(t,e);if(n.state>3)throw new Error("too late; already running");return n}function se(t,e){var n=t.__transition;if(!n||!(n=n[e]))throw new Error("transition not found");return n}function oe(t,e){return t=+t,e=+e,function(n){return t*(1-n)+e*n}}var ce,le=180/Math.PI,he={translateX:0,translateY:0,rotate:0,skewX:0,scaleX:1,scaleY:1};function ue(t,e,n,r,i,a){var s,o,c;return(s=Math.sqrt(t*t+e*e))&&(t/=s,e/=s),(c=t*n+e*r)&&(n-=t*c,r-=e*c),(o=Math.sqrt(n*n+r*r))&&(n/=o,r/=o,c/=o),t*r<e*n&&(t=-t,e=-e,c=-c,s=-s),{translateX:i,translateY:a,rotate:Math.atan2(e,t)*le,skewX:Math.atan(c)*le,scaleX:s,scaleY:o}}function de(t,e,n,r){function i(t){return t.length?t.pop()+" ":""}return function(a,s){var o=[],c=[];return a=t(a),s=t(s),function(t,r,i,a,s,o){if(t!==i||r!==a){var c=s.push("translate(",null,e,null,n);o.push({i:c-4,x:oe(t,i)},{i:c-2,x:oe(r,a)})}else(i||a)&&s.push("translate("+i+e+a+n)}(a.translateX,a.translateY,s.translateX,s.translateY,o,c),function(t,e,n,a){t!==e?(t-e>180?e+=360:e-t>180&&(t+=360),a.push({i:n.push(i(n)+"rotate(",null,r)-2,x:oe(t,e)})):e&&n.push(i(n)+"rotate("+e+r)}(a.rotate,s.rotate,o,c),function(t,e,n,a){t!==e?a.push({i:n.push(i(n)+"skewX(",null,r)-2,x:oe(t,e)}):e&&n.push(i(n)+"skewX("+e+r)}(a.skewX,s.skewX,o,c),function(t,e,n,r,a,s){if(t!==n||e!==r){var o=a.push(i(a)+"scale(",null,",",null,")");s.push({i:o-4,x:oe(t,n)},{i:o-2,x:oe(e,r)})}else 1===n&&1===r||a.push(i(a)+"scale("+n+","+r+")")}(a.scaleX,a.scaleY,s.scaleX,s.scaleY,o,c),a=s=null,function(t){for(var e,n=-1,r=c.length;++n<r;)o[(e=c[n]).i]=e.x(t);return o.join("")}}}var pe=de((function(t){const e=new("function"==typeof DOMMatrix?DOMMatrix:WebKitCSSMatrix)(t+"");return e.isIdentity?he:ue(e.a,e.b,e.c,e.d,e.e,e.f)}),"px, ","px)","deg)"),fe=de((function(t){return null==t?he:(ce||(ce=document.createElementNS("http://www.w3.org/2000/svg","g")),ce.setAttribute("transform",t),(t=ce.transform.baseVal.consolidate())?ue((t=t.matrix).a,t.b,t.c,t.d,t.e,t.f):he)}),", ",")",")");function ge(t,e){var n,r;return function(){var i=ae(this,t),a=i.tween;if(a!==n)for(var s=0,o=(r=n=a).length;s<o;++s)if(r[s].name===e){(r=r.slice()).splice(s,1);break}i.tween=r}}function ye(t,e,n){var r,i;if("function"!=typeof n)throw new Error;return function(){var a=ae(this,t),s=a.tween;if(s!==r){i=(r=s).slice();for(var o={name:e,value:n},c=0,l=i.length;c<l;++c)if(i[c].name===e){i[c]=o;break}c===l&&i.push(o)}a.tween=i}}function me(t,e,n){var r=t._id;return t.each((function(){var t=ae(this,r);(t.value||(t.value={}))[e]=n.apply(this,arguments)})),function(t){return se(t,r).value[e]}}function be(t,e,n){t.prototype=e.prototype=n,n.constructor=t}function _e(t,e){var n=Object.create(t.prototype);for(var r in e)n[r]=e[r];return n}function xe(){}var ve=.7,ke=1/ve,we="\\s*([+-]?\\d+)\\s*",Ee="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)\\s*",Ce="\\s*([+-]?(?:\\d*\\.)?\\d+(?:[eE][+-]?\\d+)?)%\\s*",Te=/^#([0-9a-f]{3,8})$/,Se=new RegExp(`^rgb\\(${we},${we},${we}\\)$`),Ae=new RegExp(`^rgb\\(${Ce},${Ce},${Ce}\\)$`),Le=new RegExp(`^rgba\\(${we},${we},${we},${Ee}\\)$`),Be=new RegExp(`^rgba\\(${Ce},${Ce},${Ce},${Ee}\\)$`),Ne=new RegExp(`^hsl\\(${Ee},${Ce},${Ce}\\)$`),De=new RegExp(`^hsla\\(${Ee},${Ce},${Ce},${Ee}\\)$`),Oe={aliceblue:15792383,antiquewhite:16444375,aqua:65535,aquamarine:8388564,azure:15794175,beige:16119260,bisque:16770244,black:0,blanchedalmond:16772045,blue:255,blueviolet:9055202,brown:10824234,burlywood:14596231,cadetblue:6266528,chartreuse:8388352,chocolate:13789470,coral:16744272,cornflowerblue:6591981,cornsilk:16775388,crimson:14423100,cyan:65535,darkblue:139,darkcyan:35723,darkgoldenrod:12092939,darkgray:11119017,darkgreen:25600,darkgrey:11119017,darkkhaki:12433259,darkmagenta:9109643,darkolivegreen:5597999,darkorange:16747520,darkorchid:10040012,darkred:9109504,darksalmon:15308410,darkseagreen:9419919,darkslateblue:4734347,darkslategray:3100495,darkslategrey:3100495,darkturquoise:52945,darkviolet:9699539,deeppink:16716947,deepskyblue:49151,dimgray:6908265,dimgrey:6908265,dodgerblue:2003199,firebrick:11674146,floralwhite:16775920,forestgreen:2263842,fuchsia:16711935,gainsboro:14474460,ghostwhite:16316671,gold:16766720,goldenrod:14329120,gray:8421504,green:32768,greenyellow:11403055,grey:8421504,honeydew:15794160,hotpink:16738740,indianred:13458524,indigo:4915330,ivory:16777200,khaki:15787660,lavender:15132410,lavenderblush:16773365,lawngreen:8190976,lemonchiffon:16775885,lightblue:11393254,lightcoral:15761536,lightcyan:14745599,lightgoldenrodyellow:16448210,lightgray:13882323,lightgreen:9498256,lightgrey:13882323,lightpink:16758465,lightsalmon:16752762,lightseagreen:2142890,lightskyblue:8900346,lightslategray:7833753,lightslategrey:7833753,lightsteelblue:11584734,lightyellow:16777184,lime:65280,limegreen:3329330,linen:16445670,magenta:16711935,maroon:8388608,mediumaquamarine:6737322,mediumblue:205,mediumorchid:12211667,mediumpurple:9662683,mediumseagreen:3978097,mediumslateblue:8087790,mediumspringgreen:64154,mediumturquoise:4772300,mediumvioletred:13047173,midnightblue:1644912,mintcream:16121850,mistyrose:16770273,moccasin:16770229,navajowhite:16768685,navy:128,oldlace:16643558,olive:8421376,olivedrab:7048739,orange:16753920,orangered:16729344,orchid:14315734,palegoldenrod:15657130,palegreen:10025880,paleturquoise:11529966,palevioletred:14381203,papayawhip:16773077,peachpuff:16767673,peru:13468991,pink:16761035,plum:14524637,powderblue:11591910,purple:8388736,rebeccapurple:6697881,red:16711680,rosybrown:12357519,royalblue:4286945,saddlebrown:9127187,salmon:16416882,sandybrown:16032864,seagreen:3050327,seashell:16774638,sienna:10506797,silver:12632256,skyblue:8900331,slateblue:6970061,slategray:7372944,slategrey:7372944,snow:16775930,springgreen:65407,steelblue:4620980,tan:13808780,teal:32896,thistle:14204888,tomato:16737095,turquoise:4251856,violet:15631086,wheat:16113331,white:16777215,whitesmoke:16119285,yellow:16776960,yellowgreen:10145074};function Me(){return this.rgb().formatHex()}function Ie(){return this.rgb().formatRgb()}function Fe(t){var e,n;return t=(t+"").trim().toLowerCase(),(e=Te.exec(t))?(n=e[1].length,e=parseInt(e[1],16),6===n?$e(e):3===n?new je(e>>8&15|e>>4&240,e>>4&15|240&e,(15&e)<<4|15&e,1):8===n?Re(e>>24&255,e>>16&255,e>>8&255,(255&e)/255):4===n?Re(e>>12&15|e>>8&240,e>>8&15|e>>4&240,e>>4&15|240&e,((15&e)<<4|15&e)/255):null):(e=Se.exec(t))?new je(e[1],e[2],e[3],1):(e=Ae.exec(t))?new je(255*e[1]/100,255*e[2]/100,255*e[3]/100,1):(e=Le.exec(t))?Re(e[1],e[2],e[3],e[4]):(e=Be.exec(t))?Re(255*e[1]/100,255*e[2]/100,255*e[3]/100,e[4]):(e=Ne.exec(t))?He(e[1],e[2]/100,e[3]/100,1):(e=De.exec(t))?He(e[1],e[2]/100,e[3]/100,e[4]):Oe.hasOwnProperty(t)?$e(Oe[t]):"transparent"===t?new je(NaN,NaN,NaN,0):null}function $e(t){return new je(t>>16&255,t>>8&255,255&t,1)}function Re(t,e,n,r){return r<=0&&(t=e=n=NaN),new je(t,e,n,r)}function Ze(t){return t instanceof xe||(t=Fe(t)),t?new je((t=t.rgb()).r,t.g,t.b,t.opacity):new je}function Pe(t,e,n,r){return 1===arguments.length?Ze(t):new je(t,e,n,null==r?1:r)}function je(t,e,n,r){this.r=+t,this.g=+e,this.b=+n,this.opacity=+r}function Ye(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}`}function ze(){const t=Ue(this.opacity);return`${1===t?"rgb(":"rgba("}${We(this.r)}, ${We(this.g)}, ${We(this.b)}${1===t?")":`, ${t})`}`}function Ue(t){return isNaN(t)?1:Math.max(0,Math.min(1,t))}function We(t){return Math.max(0,Math.min(255,Math.round(t)||0))}function qe(t){return((t=We(t))<16?"0":"")+t.toString(16)}function He(t,e,n,r){return r<=0?t=e=n=NaN:n<=0||n>=1?t=e=NaN:e<=0&&(t=NaN),new Ge(t,e,n,r)}function Ve(t){if(t instanceof Ge)return new Ge(t.h,t.s,t.l,t.opacity);if(t instanceof xe||(t=Fe(t)),!t)return new Ge;if(t instanceof Ge)return t;var e=(t=t.rgb()).r/255,n=t.g/255,r=t.b/255,i=Math.min(e,n,r),a=Math.max(e,n,r),s=NaN,o=a-i,c=(a+i)/2;return o?(s=e===a?(n-r)/o+6*(n<r):n===a?(r-e)/o+2:(e-n)/o+4,o/=c<.5?a+i:2-a-i,s*=60):o=c>0&&c<1?0:s,new Ge(s,o,c,t.opacity)}function Ge(t,e,n,r){this.h=+t,this.s=+e,this.l=+n,this.opacity=+r}function Xe(t){return(t=(t||0)%360)<0?t+360:t}function Ke(t){return Math.max(0,Math.min(1,t||0))}function Qe(t,e,n){return 255*(t<60?e+(n-e)*t/60:t<180?n:t<240?e+(n-e)*(240-t)/60:e)}function Je(t,e,n,r,i){var a=t*t,s=a*t;return((1-3*t+3*a-s)*e+(4-6*a+3*s)*n+(1+3*t+3*a-3*s)*r+s*i)/6}be(xe,Fe,{copy(t){return Object.assign(new this.constructor,this,t)},displayable(){return this.rgb().displayable()},hex:Me,formatHex:Me,formatHex8:function(){return this.rgb().formatHex8()},formatHsl:function(){return Ve(this).formatHsl()},formatRgb:Ie,toString:Ie}),be(je,Pe,_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new je(this.r*t,this.g*t,this.b*t,this.opacity)},rgb(){return this},clamp(){return new je(We(this.r),We(this.g),We(this.b),Ue(this.opacity))},displayable(){return-.5<=this.r&&this.r<255.5&&-.5<=this.g&&this.g<255.5&&-.5<=this.b&&this.b<255.5&&0<=this.opacity&&this.opacity<=1},hex:Ye,formatHex:Ye,formatHex8:function(){return`#${qe(this.r)}${qe(this.g)}${qe(this.b)}${qe(255*(isNaN(this.opacity)?1:this.opacity))}`},formatRgb:ze,toString:ze})),be(Ge,(function(t,e,n,r){return 1===arguments.length?Ve(t):new Ge(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return t=null==t?ke:Math.pow(ke,t),new Ge(this.h,this.s,this.l*t,this.opacity)},darker(t){return t=null==t?ve:Math.pow(ve,t),new Ge(this.h,this.s,this.l*t,this.opacity)},rgb(){var t=this.h%360+360*(this.h<0),e=isNaN(t)||isNaN(this.s)?0:this.s,n=this.l,r=n+(n<.5?n:1-n)*e,i=2*n-r;return new je(Qe(t>=240?t-240:t+120,i,r),Qe(t,i,r),Qe(t<120?t+240:t-120,i,r),this.opacity)},clamp(){return new Ge(Xe(this.h),Ke(this.s),Ke(this.l),Ue(this.opacity))},displayable(){return(0<=this.s&&this.s<=1||isNaN(this.s))&&0<=this.l&&this.l<=1&&0<=this.opacity&&this.opacity<=1},formatHsl(){const t=Ue(this.opacity);return`${1===t?"hsl(":"hsla("}${Xe(this.h)}, ${100*Ke(this.s)}%, ${100*Ke(this.l)}%${1===t?")":`, ${t})`}`}}));const tn=t=>()=>t;function en(t,e){return function(n){return t+n*e}}function nn(t){return 1==(t=+t)?rn:function(e,n){return n-e?function(t,e,n){return t=Math.pow(t,n),e=Math.pow(e,n)-t,n=1/n,function(r){return Math.pow(t+r*e,n)}}(e,n,t):tn(isNaN(e)?n:e)}}function rn(t,e){var n=e-t;return n?en(t,n):tn(isNaN(t)?e:t)}const an=function t(e){var n=nn(e);function r(t,e){var r=n((t=Pe(t)).r,(e=Pe(e)).r),i=n(t.g,e.g),a=n(t.b,e.b),s=rn(t.opacity,e.opacity);return function(e){return t.r=r(e),t.g=i(e),t.b=a(e),t.opacity=s(e),t+""}}return r.gamma=t,r}(1);function sn(t){return function(e){var n,r,i=e.length,a=new Array(i),s=new Array(i),o=new Array(i);for(n=0;n<i;++n)r=Pe(e[n]),a[n]=r.r||0,s[n]=r.g||0,o[n]=r.b||0;return a=t(a),s=t(s),o=t(o),r.opacity=1,function(t){return r.r=a(t),r.g=s(t),r.b=o(t),r+""}}}sn((function(t){var e=t.length-1;return function(n){var r=n<=0?n=0:n>=1?(n=1,e-1):Math.floor(n*e),i=t[r],a=t[r+1],s=r>0?t[r-1]:2*i-a,o=r<e-1?t[r+2]:2*a-i;return Je((n-r/e)*e,s,i,a,o)}})),sn((function(t){var e=t.length;return function(n){var r=Math.floor(((n%=1)<0?++n:n)*e),i=t[(r+e-1)%e],a=t[r%e],s=t[(r+1)%e],o=t[(r+2)%e];return Je((n-r/e)*e,i,a,s,o)}}));var on=/[-+]?(?:\d+\.?\d*|\.?\d+)(?:[eE][-+]?\d+)?/g,cn=new RegExp(on.source,"g");function ln(t,e){var n,r,i,a=on.lastIndex=cn.lastIndex=0,s=-1,o=[],c=[];for(t+="",e+="";(n=on.exec(t))&&(r=cn.exec(e));)(i=r.index)>a&&(i=e.slice(a,i),o[s]?o[s]+=i:o[++s]=i),(n=n[0])===(r=r[0])?o[s]?o[s]+=r:o[++s]=r:(o[++s]=null,c.push({i:s,x:oe(n,r)})),a=cn.lastIndex;return a<e.length&&(i=e.slice(a),o[s]?o[s]+=i:o[++s]=i),o.length<2?c[0]?function(t){return function(e){return t(e)+""}}(c[0].x):function(t){return function(){return t}}(e):(e=c.length,function(t){for(var n,r=0;r<e;++r)o[(n=c[r]).i]=n.x(t);return o.join("")})}function hn(t,e){var n;return("number"==typeof e?oe:e instanceof Fe?an:(n=Fe(e))?(e=n,an):ln)(t,e)}function un(t){return function(){this.removeAttribute(t)}}function dn(t){return function(){this.removeAttributeNS(t.space,t.local)}}function pn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttribute(t);return s===a?null:s===r?i:i=e(r=s,n)}}function fn(t,e,n){var r,i,a=n+"";return function(){var s=this.getAttributeNS(t.space,t.local);return s===a?null:s===r?i:i=e(r=s,n)}}function gn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttribute(t))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttribute(t)}}function yn(t,e,n){var r,i,a;return function(){var s,o,c=n(this);if(null!=c)return(s=this.getAttributeNS(t.space,t.local))===(o=c+"")?null:s===r&&o===i?a:(i=o,a=e(r=s,c));this.removeAttributeNS(t.space,t.local)}}function mn(t,e){return function(n){this.setAttribute(t,e.call(this,n))}}function bn(t,e){return function(n){this.setAttributeNS(t.space,t.local,e.call(this,n))}}function _n(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&bn(t,i)),n}return i._value=e,i}function xn(t,e){var n,r;function i(){var i=e.apply(this,arguments);return i!==r&&(n=(r=i)&&mn(t,i)),n}return i._value=e,i}function vn(t,e){return function(){ie(this,t).delay=+e.apply(this,arguments)}}function kn(t,e){return e=+e,function(){ie(this,t).delay=e}}function wn(t,e){return function(){ae(this,t).duration=+e.apply(this,arguments)}}function En(t,e){return e=+e,function(){ae(this,t).duration=e}}function Cn(t,e){if("function"!=typeof e)throw new Error;return function(){ae(this,t).ease=e}}function Tn(t,e,n){var r,i,a=function(t){return(t+"").trim().split(/^|\s+/).every((function(t){var e=t.indexOf(".");return e>=0&&(t=t.slice(0,e)),!t||"start"===t}))}(e)?ie:ae;return function(){var s=a(this,t),o=s.on;o!==r&&(i=(r=o).copy()).on(e,n),s.on=i}}var Sn=Lt.prototype.constructor;function An(t){return function(){this.style.removeProperty(t)}}function Ln(t,e,n){return function(r){this.style.setProperty(t,e.call(this,r),n)}}function Bn(t,e,n){var r,i;function a(){var a=e.apply(this,arguments);return a!==i&&(r=(i=a)&&Ln(t,a,n)),r}return a._value=e,a}function Nn(t){return function(e){this.textContent=t.call(this,e)}}function Dn(t){var e,n;function r(){var r=t.apply(this,arguments);return r!==n&&(e=(n=r)&&Nn(r)),e}return r._value=t,r}var On=0;function Mn(t,e,n,r){this._groups=t,this._parents=e,this._name=n,this._id=r}function In(){return++On}var Fn=Lt.prototype;Mn.prototype=function(t){return Lt().transition(t)}.prototype={constructor:Mn,select:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=y(t));for(var r=this._groups,i=r.length,a=new Array(i),s=0;s<i;++s)for(var o,c,l=r[s],h=l.length,u=a[s]=new Array(h),d=0;d<h;++d)(o=l[d])&&(c=t.call(o,o.__data__,d,l))&&("__data__"in o&&(c.__data__=o.__data__),u[d]=c,re(u[d],e,n,d,u,se(o,n)));return new Mn(a,this._parents,e,n)},selectAll:function(t){var e=this._name,n=this._id;"function"!=typeof t&&(t=_(t));for(var r=this._groups,i=r.length,a=[],s=[],o=0;o<i;++o)for(var c,l=r[o],h=l.length,u=0;u<h;++u)if(c=l[u]){for(var d,p=t.call(c,c.__data__,u,l),f=se(c,n),g=0,y=p.length;g<y;++g)(d=p[g])&&re(d,e,n,g,p,f);a.push(p),s.push(c)}return new Mn(a,s,e,n)},selectChild:Fn.selectChild,selectChildren:Fn.selectChildren,filter:function(t){"function"!=typeof t&&(t=x(t));for(var e=this._groups,n=e.length,r=new Array(n),i=0;i<n;++i)for(var a,s=e[i],o=s.length,c=r[i]=[],l=0;l<o;++l)(a=s[l])&&t.call(a,a.__data__,l,s)&&c.push(a);return new Mn(r,this._parents,this._name,this._id)},merge:function(t){if(t._id!==this._id)throw new Error;for(var e=this._groups,n=t._groups,r=e.length,i=n.length,a=Math.min(r,i),s=new Array(r),o=0;o<a;++o)for(var c,l=e[o],h=n[o],u=l.length,d=s[o]=new Array(u),p=0;p<u;++p)(c=l[p]||h[p])&&(d[p]=c);for(;o<r;++o)s[o]=e[o];return new Mn(s,this._parents,this._name,this._id)},selection:function(){return new Sn(this._groups,this._parents)},transition:function(){for(var t=this._name,e=this._id,n=In(),r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)if(s=o[l]){var h=se(s,e);re(s,t,n,l,o,{time:h.time+h.delay+h.duration,delay:0,duration:h.duration,ease:h.ease})}return new Mn(r,this._parents,t,n)},call:Fn.call,nodes:Fn.nodes,node:Fn.node,size:Fn.size,empty:Fn.empty,each:Fn.each,on:function(t,e){var n=this._id;return arguments.length<2?se(this.node(),n).on.on(t):this.each(Tn(n,t,e))},attr:function(t,e){var n=F(t),r="transform"===n?fe:hn;return this.attrTween(t,"function"==typeof e?(n.local?yn:gn)(n,r,me(this,"attr."+t,e)):null==e?(n.local?dn:un)(n):(n.local?fn:pn)(n,r,e))},attrTween:function(t,e){var n="attr."+t;if(arguments.length<2)return(n=this.tween(n))&&n._value;if(null==e)return this.tween(n,null);if("function"!=typeof e)throw new Error;var r=F(t);return this.tween(n,(r.local?_n:xn)(r,e))},style:function(t,e,n){var r="transform"==(t+="")?pe:hn;return null==e?this.styleTween(t,function(t,e){var n,r,i;return function(){var a=H(this,t),s=(this.style.removeProperty(t),H(this,t));return a===s?null:a===n&&s===r?i:i=e(n=a,r=s)}}(t,r)).on("end.style."+t,An(t)):"function"==typeof e?this.styleTween(t,function(t,e,n){var r,i,a;return function(){var s=H(this,t),o=n(this),c=o+"";return null==o&&(this.style.removeProperty(t),c=o=H(this,t)),s===c?null:s===r&&c===i?a:(i=c,a=e(r=s,o))}}(t,r,me(this,"style."+t,e))).each(function(t,e){var n,r,i,a,s="style."+e,o="end."+s;return function(){var c=ae(this,t),l=c.on,h=null==c.value[s]?a||(a=An(e)):void 0;l===n&&i===h||(r=(n=l).copy()).on(o,i=h),c.on=r}}(this._id,t)):this.styleTween(t,function(t,e,n){var r,i,a=n+"";return function(){var s=H(this,t);return s===a?null:s===r?i:i=e(r=s,n)}}(t,r,e),n).on("end.style."+t,null)},styleTween:function(t,e,n){var r="style."+(t+="");if(arguments.length<2)return(r=this.tween(r))&&r._value;if(null==e)return this.tween(r,null);if("function"!=typeof e)throw new Error;return this.tween(r,Bn(t,e,null==n?"":n))},text:function(t){return this.tween("text","function"==typeof t?function(t){return function(){var e=t(this);this.textContent=null==e?"":e}}(me(this,"text",t)):function(t){return function(){this.textContent=t}}(null==t?"":t+""))},textTween:function(t){var e="text";if(arguments.length<1)return(e=this.tween(e))&&e._value;if(null==t)return this.tween(e,null);if("function"!=typeof t)throw new Error;return this.tween(e,Dn(t))},remove:function(){return this.on("end.remove",function(t){return function(){var e=this.parentNode;for(var n in this.__transition)if(+n!==t)return;e&&e.removeChild(this)}}(this._id))},tween:function(t,e){var n=this._id;if(t+="",arguments.length<2){for(var r,i=se(this.node(),n).tween,a=0,s=i.length;a<s;++a)if((r=i[a]).name===t)return r.value;return null}return this.each((null==e?ge:ye)(n,t,e))},delay:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?vn:kn)(e,t)):se(this.node(),e).delay},duration:function(t){var e=this._id;return arguments.length?this.each(("function"==typeof t?wn:En)(e,t)):se(this.node(),e).duration},ease:function(t){var e=this._id;return arguments.length?this.each(Cn(e,t)):se(this.node(),e).ease},easeVarying:function(t){if("function"!=typeof t)throw new Error;return this.each(function(t,e){return function(){var n=e.apply(this,arguments);if("function"!=typeof n)throw new Error;ae(this,t).ease=n}}(this._id,t))},end:function(){var t,e,n=this,r=n._id,i=n.size();return new Promise((function(a,s){var o={value:s},c={value:function(){0==--i&&a()}};n.each((function(){var n=ae(this,r),i=n.on;i!==t&&((e=(t=i).copy())._.cancel.push(o),e._.interrupt.push(o),e._.end.push(c)),n.on=e})),0===i&&a()}))},[Symbol.iterator]:Fn[Symbol.iterator]};var $n={time:null,delay:0,duration:250,ease:function(t){return((t*=2)<=1?t*t*t:(t-=2)*t*t+2)/2}};function Rn(t,e){for(var n;!(n=t.__transition)||!(n=n[e]);)if(!(t=t.parentNode))throw new Error(`transition ${e} not found`);return n}Lt.prototype.interrupt=function(t){return this.each((function(){!function(t,e){var n,r,i,a=t.__transition,s=!0;if(a){for(i in e=null==e?null:e+"",a)(n=a[i]).name===e?(r=n.state>2&&n.state<5,n.state=6,n.timer.stop(),n.on.call(r?"interrupt":"cancel",t,t.__data__,n.index,n.group),delete a[i]):s=!1;s&&delete t.__transition}}(this,t)}))},Lt.prototype.transition=function(t){var e,n;t instanceof Mn?(e=t._id,t=t._name):(e=In(),(n=$n).time=Ht(),t=null==t?null:t+"");for(var r=this._groups,i=r.length,a=0;a<i;++a)for(var s,o=r[a],c=o.length,l=0;l<c;++l)(s=o[l])&&re(s,t,e,l,o,n||Rn(s,e));return new Mn(r,this._parents,t,e)};const{abs:Zn,max:Pn,min:jn}=Math;function Yn(t){return[+t[0],+t[1]]}function zn(t){return[Yn(t[0]),Yn(t[1])]}["w","e"].map(Un),["n","s"].map(Un),["n","w","e","s","nw","ne","sw","se"].map(Un);function Un(t){return{type:t}}function Wn(t){if(!t.ok)throw new Error(t.status+" "+t.statusText);return t.text()}function qn(t){return(e,n)=>function(t,e){return fetch(t,e).then(Wn)}(e,n).then((e=>(new DOMParser).parseFromString(e,t)))}qn("application/xml");qn("text/html");var Hn=qn("image/svg+xml");const Vn=Math.PI/180,Gn=180/Math.PI,Xn=.96422,Kn=.82521,Qn=4/29,Jn=6/29,tr=3*Jn*Jn;function er(t){if(t instanceof nr)return new nr(t.l,t.a,t.b,t.opacity);if(t instanceof lr)return hr(t);t instanceof je||(t=Ze(t));var e,n,r=sr(t.r),i=sr(t.g),a=sr(t.b),s=rr((.2225045*r+.7168786*i+.0606169*a)/1);return r===i&&i===a?e=n=s:(e=rr((.4360747*r+.3850649*i+.1430804*a)/Xn),n=rr((.0139322*r+.0971045*i+.7141733*a)/Kn)),new nr(116*s-16,500*(e-s),200*(s-n),t.opacity)}function nr(t,e,n,r){this.l=+t,this.a=+e,this.b=+n,this.opacity=+r}function rr(t){return t>.008856451679035631?Math.pow(t,1/3):t/tr+Qn}function ir(t){return t>Jn?t*t*t:tr*(t-Qn)}function ar(t){return 255*(t<=.0031308?12.92*t:1.055*Math.pow(t,1/2.4)-.055)}function sr(t){return(t/=255)<=.04045?t/12.92:Math.pow((t+.055)/1.055,2.4)}function or(t){if(t instanceof lr)return new lr(t.h,t.c,t.l,t.opacity);if(t instanceof nr||(t=er(t)),0===t.a&&0===t.b)return new lr(NaN,0<t.l&&t.l<100?0:NaN,t.l,t.opacity);var e=Math.atan2(t.b,t.a)*Gn;return new lr(e<0?e+360:e,Math.sqrt(t.a*t.a+t.b*t.b),t.l,t.opacity)}function cr(t,e,n,r){return 1===arguments.length?or(t):new lr(t,e,n,null==r?1:r)}function lr(t,e,n,r){this.h=+t,this.c=+e,this.l=+n,this.opacity=+r}function hr(t){if(isNaN(t.h))return new nr(t.l,0,0,t.opacity);var e=t.h*Vn;return new nr(t.l,Math.cos(e)*t.c,Math.sin(e)*t.c,t.opacity)}function ur(t){return function(e,n){var r=t((e=cr(e)).h,(n=cr(n)).h),i=rn(e.c,n.c),a=rn(e.l,n.l),s=rn(e.opacity,n.opacity);return function(t){return e.h=r(t),e.c=i(t),e.l=a(t),e.opacity=s(t),e+""}}}be(nr,(function(t,e,n,r){return 1===arguments.length?er(t):new nr(t,e,n,null==r?1:r)}),_e(xe,{brighter(t){return new nr(this.l+18*(null==t?1:t),this.a,this.b,this.opacity)},darker(t){return new nr(this.l-18*(null==t?1:t),this.a,this.b,this.opacity)},rgb(){var t=(this.l+16)/116,e=isNaN(this.a)?t:t+this.a/500,n=isNaN(this.b)?t:t-this.b/200;return new je(ar(3.1338561*(e=Xn*ir(e))-1.6168667*(t=1*ir(t))-.4906146*(n=Kn*ir(n))),ar(-.9787684*e+1.9161415*t+.033454*n),ar(.0719453*e-.2289914*t+1.4052427*n),this.opacity)}})),be(lr,cr,_e(xe,{brighter(t){return new lr(this.h,this.c,this.l+18*(null==t?1:t),this.opacity)},darker(t){return new lr(this.h,this.c,this.l-18*(null==t?1:t),this.opacity)},rgb(){return hr(this).rgb()}}));const dr=ur((function(t,e){var n=e-t;return n?en(t,n>180||n<-180?n-360*Math.round(n/360):n):tn(isNaN(t)?e:t)}));ur(rn);const pr=Math.sqrt(50),fr=Math.sqrt(10),gr=Math.sqrt(2);function yr(t,e,n){const r=(e-t)/Math.max(0,n),i=Math.floor(Math.log10(r)),a=r/Math.pow(10,i),s=a>=pr?10:a>=fr?5:a>=gr?2:1;let o,c,l;return i<0?(l=Math.pow(10,-i)/s,o=Math.round(t*l),c=Math.round(e*l),o/l<t&&++o,c/l>e&&--c,l=-l):(l=Math.pow(10,i)*s,o=Math.round(t/l),c=Math.round(e/l),o*l<t&&++o,c*l>e&&--c),c<o&&.5<=n&&n<2?yr(t,e,2*n):[o,c,l]}function mr(t,e,n){return yr(t=+t,e=+e,n=+n)[2]}function br(t,e,n){n=+n;const r=(e=+e)<(t=+t),i=r?mr(e,t,n):mr(t,e,n);return(r?-1:1)*(i<0?1/-i:i)}function _r(t,e){return null==t||null==e?NaN:t<e?-1:t>e?1:t>=e?0:NaN}function xr(t,e){return null==t||null==e?NaN:e<t?-1:e>t?1:e>=t?0:NaN}function vr(t){let e,n,r;function i(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<0?i=e+1:a=e}while(i<a)}return i}return 2!==t.length?(e=_r,n=(e,n)=>_r(t(e),n),r=(e,n)=>t(e)-n):(e=t===_r||t===xr?t:kr,n=t,r=t),{left:i,center:function(t,e,n=0,a=t.length){const s=i(t,e,n,a-1);return s>n&&r(t[s-1],e)>-r(t[s],e)?s-1:s},right:function(t,r,i=0,a=t.length){if(i<a){if(0!==e(r,r))return a;do{const e=i+a>>>1;n(t[e],r)<=0?i=e+1:a=e}while(i<a)}return i}}}function kr(){return 0}const wr=vr(_r),Er=wr.right,Cr=(wr.left,vr((function(t){return null===t?NaN:+t})).center,Er);function Tr(t,e){var n,r=e?e.length:0,i=t?Math.min(r,t.length):0,a=new Array(i),s=new Array(r);for(n=0;n<i;++n)a[n]=Br(t[n],e[n]);for(;n<r;++n)s[n]=e[n];return function(t){for(n=0;n<i;++n)s[n]=a[n](t);return s}}function Sr(t,e){var n=new Date;return t=+t,e=+e,function(r){return n.setTime(t*(1-r)+e*r),n}}function Ar(t,e){var n,r={},i={};for(n in null!==t&&"object"==typeof t||(t={}),null!==e&&"object"==typeof e||(e={}),e)n in t?r[n]=Br(t[n],e[n]):i[n]=e[n];return function(t){for(n in r)i[n]=r[n](t);return i}}function Lr(t,e){e||(e=[]);var n,r=t?Math.min(e.length,t.length):0,i=e.slice();return function(a){for(n=0;n<r;++n)i[n]=t[n]*(1-a)+e[n]*a;return i}}function Br(t,e){var n,r,i=typeof e;return null==e||"boolean"===i?tn(e):("number"===i?oe:"string"===i?(n=Fe(e))?(e=n,an):ln:e instanceof Fe?an:e instanceof Date?Sr:(r=e,!ArrayBuffer.isView(r)||r instanceof DataView?Array.isArray(e)?Tr:"function"!=typeof e.valueOf&&"function"!=typeof e.toString||isNaN(e)?Ar:oe:Lr))(t,e)}function Nr(t,e){return t=+t,e=+e,function(n){return Math.round(t*(1-n)+e*n)}}function Dr(t){return+t}var Or=[0,1];function Mr(t){return t}function Ir(t,e){return(e-=t=+t)?function(n){return(n-t)/e}:(n=isNaN(e)?NaN:.5,function(){return n});var n}function Fr(t,e,n){var r=t[0],i=t[1],a=e[0],s=e[1];return i<r?(r=Ir(i,r),a=n(s,a)):(r=Ir(r,i),a=n(a,s)),function(t){return a(r(t))}}function $r(t,e,n){var r=Math.min(t.length,e.length)-1,i=new Array(r),a=new Array(r),s=-1;for(t[r]<t[0]&&(t=t.slice().reverse(),e=e.slice().reverse());++s<r;)i[s]=Ir(t[s],t[s+1]),a[s]=n(e[s],e[s+1]);return function(e){var n=Cr(t,e,1,r)-1;return a[n](i[n](e))}}function Rr(t,e){return e.domain(t.domain()).range(t.range()).interpolate(t.interpolate()).clamp(t.clamp()).unknown(t.unknown())}function Zr(){var t,e,n,r,i,a,s=Or,o=Or,c=Br,l=Mr;function h(){var t,e,n,c=Math.min(s.length,o.length);return l!==Mr&&(t=s[0],e=s[c-1],t>e&&(n=t,t=e,e=n),l=function(n){return Math.max(t,Math.min(e,n))}),r=c>2?$r:Fr,i=a=null,u}function u(e){return null==e||isNaN(e=+e)?n:(i||(i=r(s.map(t),o,c)))(t(l(e)))}return u.invert=function(n){return l(e((a||(a=r(o,s.map(t),oe)))(n)))},u.domain=function(t){return arguments.length?(s=Array.from(t,Dr),h()):s.slice()},u.range=function(t){return arguments.length?(o=Array.from(t),h()):o.slice()},u.rangeRound=function(t){return o=Array.from(t),c=Nr,h()},u.clamp=function(t){return arguments.length?(l=!!t||Mr,h()):l!==Mr},u.interpolate=function(t){return arguments.length?(c=t,h()):c},u.unknown=function(t){return arguments.length?(n=t,u):n},function(n,r){return t=n,e=r,h()}}function Pr(){return Zr()(Mr,Mr)}function jr(t,e){switch(arguments.length){case 0:break;case 1:this.range(t);break;default:this.range(e).domain(t)}return this}var Yr,zr=/^(?:(.)?([<>=^]))?([+\-( ])?([$#])?(0)?(\d+)?(,)?(\.\d+)?(~)?([a-z%])?$/i;function Ur(t){if(!(e=zr.exec(t)))throw new Error("invalid format: "+t);var e;return new Wr({fill:e[1],align:e[2],sign:e[3],symbol:e[4],zero:e[5],width:e[6],comma:e[7],precision:e[8]&&e[8].slice(1),trim:e[9],type:e[10]})}function Wr(t){this.fill=void 0===t.fill?" ":t.fill+"",this.align=void 0===t.align?">":t.align+"",this.sign=void 0===t.sign?"-":t.sign+"",this.symbol=void 0===t.symbol?"":t.symbol+"",this.zero=!!t.zero,this.width=void 0===t.width?void 0:+t.width,this.comma=!!t.comma,this.precision=void 0===t.precision?void 0:+t.precision,this.trim=!!t.trim,this.type=void 0===t.type?"":t.type+""}function qr(t,e){if((n=(t=e?t.toExponential(e-1):t.toExponential()).indexOf("e"))<0)return null;var n,r=t.slice(0,n);return[r.length>1?r[0]+r.slice(2):r,+t.slice(n+1)]}function Hr(t){return(t=qr(Math.abs(t)))?t[1]:NaN}function Vr(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1];return i<0?"0."+new Array(-i).join("0")+r:r.length>i+1?r.slice(0,i+1)+"."+r.slice(i+1):r+new Array(i-r.length+2).join("0")}Ur.prototype=Wr.prototype,Wr.prototype.toString=function(){return this.fill+this.align+this.sign+this.symbol+(this.zero?"0":"")+(void 0===this.width?"":Math.max(1,0|this.width))+(this.comma?",":"")+(void 0===this.precision?"":"."+Math.max(0,0|this.precision))+(this.trim?"~":"")+this.type};const Gr={"%":(t,e)=>(100*t).toFixed(e),b:t=>Math.round(t).toString(2),c:t=>t+"",d:function(t){return Math.abs(t=Math.round(t))>=1e21?t.toLocaleString("en").replace(/,/g,""):t.toString(10)},e:(t,e)=>t.toExponential(e),f:(t,e)=>t.toFixed(e),g:(t,e)=>t.toPrecision(e),o:t=>Math.round(t).toString(8),p:(t,e)=>Vr(100*t,e),r:Vr,s:function(t,e){var n=qr(t,e);if(!n)return t+"";var r=n[0],i=n[1],a=i-(Yr=3*Math.max(-8,Math.min(8,Math.floor(i/3))))+1,s=r.length;return a===s?r:a>s?r+new Array(a-s+1).join("0"):a>0?r.slice(0,a)+"."+r.slice(a):"0."+new Array(1-a).join("0")+qr(t,Math.max(0,e+a-1))[0]},X:t=>Math.round(t).toString(16).toUpperCase(),x:t=>Math.round(t).toString(16)};function Xr(t){return t}var Kr,Qr,Jr,ti=Array.prototype.map,ei=["y","z","a","f","p","n","\xb5","m","","k","M","G","T","P","E","Z","Y"];function ni(t){var e,n,r=void 0===t.grouping||void 0===t.thousands?Xr:(e=ti.call(t.grouping,Number),n=t.thousands+"",function(t,r){for(var i=t.length,a=[],s=0,o=e[0],c=0;i>0&&o>0&&(c+o+1>r&&(o=Math.max(1,r-c)),a.push(t.substring(i-=o,i+o)),!((c+=o+1)>r));)o=e[s=(s+1)%e.length];return a.reverse().join(n)}),i=void 0===t.currency?"":t.currency[0]+"",a=void 0===t.currency?"":t.currency[1]+"",s=void 0===t.decimal?".":t.decimal+"",o=void 0===t.numerals?Xr:function(t){return function(e){return e.replace(/[0-9]/g,(function(e){return t[+e]}))}}(ti.call(t.numerals,String)),c=void 0===t.percent?"%":t.percent+"",l=void 0===t.minus?"\u2212":t.minus+"",h=void 0===t.nan?"NaN":t.nan+"";function u(t){var e=(t=Ur(t)).fill,n=t.align,u=t.sign,d=t.symbol,p=t.zero,f=t.width,g=t.comma,y=t.precision,m=t.trim,b=t.type;"n"===b?(g=!0,b="g"):Gr[b]||(void 0===y&&(y=12),m=!0,b="g"),(p||"0"===e&&"="===n)&&(p=!0,e="0",n="=");var _="$"===d?i:"#"===d&&/[boxX]/.test(b)?"0"+b.toLowerCase():"",x="$"===d?a:/[%p]/.test(b)?c:"",v=Gr[b],k=/[defgprs%]/.test(b);function w(t){var i,a,c,d=_,w=x;if("c"===b)w=v(t)+w,t="";else{var E=(t=+t)<0||1/t<0;if(t=isNaN(t)?h:v(Math.abs(t),y),m&&(t=function(t){t:for(var e,n=t.length,r=1,i=-1;r<n;++r)switch(t[r]){case".":i=e=r;break;case"0":0===i&&(i=r),e=r;break;default:if(!+t[r])break t;i>0&&(i=0)}return i>0?t.slice(0,i)+t.slice(e+1):t}(t)),E&&0==+t&&"+"!==u&&(E=!1),d=(E?"("===u?u:l:"-"===u||"("===u?"":u)+d,w=("s"===b?ei[8+Yr/3]:"")+w+(E&&"("===u?")":""),k)for(i=-1,a=t.length;++i<a;)if(48>(c=t.charCodeAt(i))||c>57){w=(46===c?s+t.slice(i+1):t.slice(i))+w,t=t.slice(0,i);break}}g&&!p&&(t=r(t,1/0));var C=d.length+t.length+w.length,T=C<f?new Array(f-C+1).join(e):"";switch(g&&p&&(t=r(T+t,T.length?f-w.length:1/0),T=""),n){case"<":t=d+t+w+T;break;case"=":t=d+T+t+w;break;case"^":t=T.slice(0,C=T.length>>1)+d+t+w+T.slice(C);break;default:t=T+d+t+w}return o(t)}return y=void 0===y?6:/[gprs]/.test(b)?Math.max(1,Math.min(21,y)):Math.max(0,Math.min(20,y)),w.toString=function(){return t+""},w}return{format:u,formatPrefix:function(t,e){var n=u(((t=Ur(t)).type="f",t)),r=3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3))),i=Math.pow(10,-r),a=ei[8+r/3];return function(t){return n(i*t)+a}}}}function ri(t,e,n,r){var i,a=br(t,e,n);switch((r=Ur(null==r?",f":r)).type){case"s":var s=Math.max(Math.abs(t),Math.abs(e));return null!=r.precision||isNaN(i=function(t,e){return Math.max(0,3*Math.max(-8,Math.min(8,Math.floor(Hr(e)/3)))-Hr(Math.abs(t)))}(a,s))||(r.precision=i),Jr(r,s);case"":case"e":case"g":case"p":case"r":null!=r.precision||isNaN(i=function(t,e){return t=Math.abs(t),e=Math.abs(e)-t,Math.max(0,Hr(e)-Hr(t))+1}(a,Math.max(Math.abs(t),Math.abs(e))))||(r.precision=i-("e"===r.type));break;case"f":case"%":null!=r.precision||isNaN(i=function(t){return Math.max(0,-Hr(Math.abs(t)))}(a))||(r.precision=i-2*("%"===r.type))}return Qr(r)}function ii(t){var e=t.domain;return t.ticks=function(t){var n=e();return function(t,e,n){if(!((n=+n)>0))return[];if((t=+t)==(e=+e))return[t];const r=e<t,[i,a,s]=r?yr(e,t,n):yr(t,e,n);if(!(a>=i))return[];const o=a-i+1,c=new Array(o);if(r)if(s<0)for(let l=0;l<o;++l)c[l]=(a-l)/-s;else for(let l=0;l<o;++l)c[l]=(a-l)*s;else if(s<0)for(let l=0;l<o;++l)c[l]=(i+l)/-s;else for(let l=0;l<o;++l)c[l]=(i+l)*s;return c}(n[0],n[n.length-1],null==t?10:t)},t.tickFormat=function(t,n){var r=e();return ri(r[0],r[r.length-1],null==t?10:t,n)},t.nice=function(n){null==n&&(n=10);var r,i,a=e(),s=0,o=a.length-1,c=a[s],l=a[o],h=10;for(l<c&&(i=c,c=l,l=i,i=s,s=o,o=i);h-- >0;){if((i=mr(c,l,n))===r)return a[s]=c,a[o]=l,e(a);if(i>0)c=Math.floor(c/i)*i,l=Math.ceil(l/i)*i;else{if(!(i<0))break;c=Math.ceil(c*i)/i,l=Math.floor(l*i)/i}r=i}return t},t}function ai(){var t=Pr();return t.copy=function(){return Rr(t,ai())},jr.apply(t,arguments),ii(t)}Kr=ni({thousands:",",grouping:[3],currency:["$",""]}),Qr=Kr.format,Jr=Kr.formatPrefix;class si extends Map{constructor(t,e=hi){if(super(),Object.defineProperties(this,{_intern:{value:new Map},_key:{value:e}}),null!=t)for(const[n,r]of t)this.set(n,r)}get(t){return super.get(oi(this,t))}has(t){return super.has(oi(this,t))}set(t,e){return super.set(ci(this,t),e)}delete(t){return super.delete(li(this,t))}}Set;function oi({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):n}function ci({_intern:t,_key:e},n){const r=e(n);return t.has(r)?t.get(r):(t.set(r,n),n)}function li({_intern:t,_key:e},n){const r=e(n);return t.has(r)&&(n=t.get(r),t.delete(r)),n}function hi(t){return null!==t&&"object"==typeof t?t.valueOf():t}const ui=Symbol("implicit");function di(){var t=new si,e=[],n=[],r=ui;function i(i){let a=t.get(i);if(void 0===a){if(r!==ui)return r;t.set(i,a=e.push(i)-1)}return n[a%n.length]}return i.domain=function(n){if(!arguments.length)return e.slice();e=[],t=new si;for(const r of n)t.has(r)||t.set(r,e.push(r)-1);return i},i.range=function(t){return arguments.length?(n=Array.from(t),i):n.slice()},i.unknown=function(t){return arguments.length?(r=t,i):r},i.copy=function(){return di(e,n).unknown(r)},jr.apply(i,arguments),i}const pi=1e3,fi=6e4,gi=36e5,yi=864e5,mi=6048e5,bi=2592e6,_i=31536e6,xi=new Date,vi=new Date;function ki(t,e,n,r){function i(e){return t(e=0===arguments.length?new Date:new Date(+e)),e}return i.floor=e=>(t(e=new Date(+e)),e),i.ceil=n=>(t(n=new Date(n-1)),e(n,1),t(n),n),i.round=t=>{const e=i(t),n=i.ceil(t);return t-e<n-t?e:n},i.offset=(t,n)=>(e(t=new Date(+t),null==n?1:Math.floor(n)),t),i.range=(n,r,a)=>{const s=[];if(n=i.ceil(n),a=null==a?1:Math.floor(a),!(n<r&&a>0))return s;let o;do{s.push(o=new Date(+n)),e(n,a),t(n)}while(o<n&&n<r);return s},i.filter=n=>ki((e=>{if(e>=e)for(;t(e),!n(e);)e.setTime(e-1)}),((t,r)=>{if(t>=t)if(r<0)for(;++r<=0;)for(;e(t,-1),!n(t););else for(;--r>=0;)for(;e(t,1),!n(t););})),n&&(i.count=(e,r)=>(xi.setTime(+e),vi.setTime(+r),t(xi),t(vi),Math.floor(n(xi,vi))),i.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?i.filter(r?e=>r(e)%t==0:e=>i.count(0,e)%t==0):i:null)),i}const wi=ki((()=>{}),((t,e)=>{t.setTime(+t+e)}),((t,e)=>e-t));wi.every=t=>(t=Math.floor(t),isFinite(t)&&t>0?t>1?ki((e=>{e.setTime(Math.floor(e/t)*t)}),((e,n)=>{e.setTime(+e+n*t)}),((e,n)=>(n-e)/t)):wi:null);wi.range;const Ei=ki((t=>{t.setTime(t-t.getMilliseconds())}),((t,e)=>{t.setTime(+t+e*pi)}),((t,e)=>(e-t)/pi),(t=>t.getUTCSeconds())),Ci=(Ei.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getMinutes()))),Ti=(Ci.range,ki((t=>{t.setUTCSeconds(0,0)}),((t,e)=>{t.setTime(+t+e*fi)}),((t,e)=>(e-t)/fi),(t=>t.getUTCMinutes()))),Si=(Ti.range,ki((t=>{t.setTime(t-t.getMilliseconds()-t.getSeconds()*pi-t.getMinutes()*fi)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getHours()))),Ai=(Si.range,ki((t=>{t.setUTCMinutes(0,0,0)}),((t,e)=>{t.setTime(+t+e*gi)}),((t,e)=>(e-t)/gi),(t=>t.getUTCHours()))),Li=(Ai.range,ki((t=>t.setHours(0,0,0,0)),((t,e)=>t.setDate(t.getDate()+e)),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/yi),(t=>t.getDate()-1))),Bi=(Li.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>t.getUTCDate()-1))),Ni=(Bi.range,ki((t=>{t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+e)}),((t,e)=>(e-t)/yi),(t=>Math.floor(t/yi))));Ni.range;function Di(t){return ki((e=>{e.setDate(e.getDate()-(e.getDay()+7-t)%7),e.setHours(0,0,0,0)}),((t,e)=>{t.setDate(t.getDate()+7*e)}),((t,e)=>(e-t-(e.getTimezoneOffset()-t.getTimezoneOffset())*fi)/mi))}const Oi=Di(0),Mi=Di(1),Ii=Di(2),Fi=Di(3),$i=Di(4),Ri=Di(5),Zi=Di(6);Oi.range,Mi.range,Ii.range,Fi.range,$i.range,Ri.range,Zi.range;function Pi(t){return ki((e=>{e.setUTCDate(e.getUTCDate()-(e.getUTCDay()+7-t)%7),e.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCDate(t.getUTCDate()+7*e)}),((t,e)=>(e-t)/mi))}const ji=Pi(0),Yi=Pi(1),zi=Pi(2),Ui=Pi(3),Wi=Pi(4),qi=Pi(5),Hi=Pi(6),Vi=(ji.range,Yi.range,zi.range,Ui.range,Wi.range,qi.range,Hi.range,ki((t=>{t.setDate(1),t.setHours(0,0,0,0)}),((t,e)=>{t.setMonth(t.getMonth()+e)}),((t,e)=>e.getMonth()-t.getMonth()+12*(e.getFullYear()-t.getFullYear())),(t=>t.getMonth()))),Gi=(Vi.range,ki((t=>{t.setUTCDate(1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCMonth(t.getUTCMonth()+e)}),((t,e)=>e.getUTCMonth()-t.getUTCMonth()+12*(e.getUTCFullYear()-t.getUTCFullYear())),(t=>t.getUTCMonth()))),Xi=(Gi.range,ki((t=>{t.setMonth(0,1),t.setHours(0,0,0,0)}),((t,e)=>{t.setFullYear(t.getFullYear()+e)}),((t,e)=>e.getFullYear()-t.getFullYear()),(t=>t.getFullYear())));Xi.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setFullYear(Math.floor(e.getFullYear()/t)*t),e.setMonth(0,1),e.setHours(0,0,0,0)}),((e,n)=>{e.setFullYear(e.getFullYear()+n*t)})):null;Xi.range;const Ki=ki((t=>{t.setUTCMonth(0,1),t.setUTCHours(0,0,0,0)}),((t,e)=>{t.setUTCFullYear(t.getUTCFullYear()+e)}),((t,e)=>e.getUTCFullYear()-t.getUTCFullYear()),(t=>t.getUTCFullYear()));Ki.every=t=>isFinite(t=Math.floor(t))&&t>0?ki((e=>{e.setUTCFullYear(Math.floor(e.getUTCFullYear()/t)*t),e.setUTCMonth(0,1),e.setUTCHours(0,0,0,0)}),((e,n)=>{e.setUTCFullYear(e.getUTCFullYear()+n*t)})):null;Ki.range;function Qi(t,e,n,r,i,a){const s=[[Ei,1,pi],[Ei,5,5e3],[Ei,15,15e3],[Ei,30,3e4],[a,1,fi],[a,5,3e5],[a,15,9e5],[a,30,18e5],[i,1,gi],[i,3,108e5],[i,6,216e5],[i,12,432e5],[r,1,yi],[r,2,1728e5],[n,1,mi],[e,1,bi],[e,3,7776e6],[t,1,_i]];function o(e,n,r){const i=Math.abs(n-e)/r,a=vr((([,,t])=>t)).right(s,i);if(a===s.length)return t.every(br(e/_i,n/_i,r));if(0===a)return wi.every(Math.max(br(e,n,r),1));const[o,c]=s[i/s[a-1][2]<s[a][2]/i?a-1:a];return o.every(c)}return[function(t,e,n){const r=e<t;r&&([t,e]=[e,t]);const i=n&&"function"==typeof n.range?n:o(t,e,n),a=i?i.range(t,+e+1):[];return r?a.reverse():a},o]}const[Ji,ta]=Qi(Ki,Gi,ji,Ni,Ai,Ti),[ea,na]=Qi(Xi,Vi,Oi,Li,Si,Ci);function ra(t){if(0<=t.y&&t.y<100){var e=new Date(-1,t.m,t.d,t.H,t.M,t.S,t.L);return e.setFullYear(t.y),e}return new Date(t.y,t.m,t.d,t.H,t.M,t.S,t.L)}function ia(t){if(0<=t.y&&t.y<100){var e=new Date(Date.UTC(-1,t.m,t.d,t.H,t.M,t.S,t.L));return e.setUTCFullYear(t.y),e}return new Date(Date.UTC(t.y,t.m,t.d,t.H,t.M,t.S,t.L))}function aa(t,e,n){return{y:t,m:e,d:n,H:0,M:0,S:0,L:0}}var sa,oa,ca={"-":"",_:" ",0:"0"},la=/^\s*\d+/,ha=/^%/,ua=/[\\^$*+?|[\]().{}]/g;function da(t,e,n){var r=t<0?"-":"",i=(r?-t:t)+"",a=i.length;return r+(a<n?new Array(n-a+1).join(e)+i:i)}function pa(t){return t.replace(ua,"\\$&")}function fa(t){return new RegExp("^(?:"+t.map(pa).join("|")+")","i")}function ga(t){return new Map(t.map(((t,e)=>[t.toLowerCase(),e])))}function ya(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.w=+r[0],n+r[0].length):-1}function ma(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.u=+r[0],n+r[0].length):-1}function ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.U=+r[0],n+r[0].length):-1}function _a(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.V=+r[0],n+r[0].length):-1}function xa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.W=+r[0],n+r[0].length):-1}function va(t,e,n){var r=la.exec(e.slice(n,n+4));return r?(t.y=+r[0],n+r[0].length):-1}function ka(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.y=+r[0]+(+r[0]>68?1900:2e3),n+r[0].length):-1}function wa(t,e,n){var r=/^(Z)|([+-]\d\d)(?::?(\d\d))?/.exec(e.slice(n,n+6));return r?(t.Z=r[1]?0:-(r[2]+(r[3]||"00")),n+r[0].length):-1}function Ea(t,e,n){var r=la.exec(e.slice(n,n+1));return r?(t.q=3*r[0]-3,n+r[0].length):-1}function Ca(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.m=r[0]-1,n+r[0].length):-1}function Ta(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.d=+r[0],n+r[0].length):-1}function Sa(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.m=0,t.d=+r[0],n+r[0].length):-1}function Aa(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.H=+r[0],n+r[0].length):-1}function La(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.M=+r[0],n+r[0].length):-1}function Ba(t,e,n){var r=la.exec(e.slice(n,n+2));return r?(t.S=+r[0],n+r[0].length):-1}function Na(t,e,n){var r=la.exec(e.slice(n,n+3));return r?(t.L=+r[0],n+r[0].length):-1}function Da(t,e,n){var r=la.exec(e.slice(n,n+6));return r?(t.L=Math.floor(r[0]/1e3),n+r[0].length):-1}function Oa(t,e,n){var r=ha.exec(e.slice(n,n+1));return r?n+r[0].length:-1}function Ma(t,e,n){var r=la.exec(e.slice(n));return r?(t.Q=+r[0],n+r[0].length):-1}function Ia(t,e,n){var r=la.exec(e.slice(n));return r?(t.s=+r[0],n+r[0].length):-1}function Fa(t,e){return da(t.getDate(),e,2)}function $a(t,e){return da(t.getHours(),e,2)}function Ra(t,e){return da(t.getHours()%12||12,e,2)}function Za(t,e){return da(1+Li.count(Xi(t),t),e,3)}function Pa(t,e){return da(t.getMilliseconds(),e,3)}function ja(t,e){return Pa(t,e)+"000"}function Ya(t,e){return da(t.getMonth()+1,e,2)}function za(t,e){return da(t.getMinutes(),e,2)}function Ua(t,e){return da(t.getSeconds(),e,2)}function Wa(t){var e=t.getDay();return 0===e?7:e}function qa(t,e){return da(Oi.count(Xi(t)-1,t),e,2)}function Ha(t){var e=t.getDay();return e>=4||0===e?$i(t):$i.ceil(t)}function Va(t,e){return t=Ha(t),da($i.count(Xi(t),t)+(4===Xi(t).getDay()),e,2)}function Ga(t){return t.getDay()}function Xa(t,e){return da(Mi.count(Xi(t)-1,t),e,2)}function Ka(t,e){return da(t.getFullYear()%100,e,2)}function Qa(t,e){return da((t=Ha(t)).getFullYear()%100,e,2)}function Ja(t,e){return da(t.getFullYear()%1e4,e,4)}function ts(t,e){var n=t.getDay();return da((t=n>=4||0===n?$i(t):$i.ceil(t)).getFullYear()%1e4,e,4)}function es(t){var e=t.getTimezoneOffset();return(e>0?"-":(e*=-1,"+"))+da(e/60|0,"0",2)+da(e%60,"0",2)}function ns(t,e){return da(t.getUTCDate(),e,2)}function rs(t,e){return da(t.getUTCHours(),e,2)}function is(t,e){return da(t.getUTCHours()%12||12,e,2)}function as(t,e){return da(1+Bi.count(Ki(t),t),e,3)}function ss(t,e){return da(t.getUTCMilliseconds(),e,3)}function os(t,e){return ss(t,e)+"000"}function cs(t,e){return da(t.getUTCMonth()+1,e,2)}function ls(t,e){return da(t.getUTCMinutes(),e,2)}function hs(t,e){return da(t.getUTCSeconds(),e,2)}function us(t){var e=t.getUTCDay();return 0===e?7:e}function ds(t,e){return da(ji.count(Ki(t)-1,t),e,2)}function ps(t){var e=t.getUTCDay();return e>=4||0===e?Wi(t):Wi.ceil(t)}function fs(t,e){return t=ps(t),da(Wi.count(Ki(t),t)+(4===Ki(t).getUTCDay()),e,2)}function gs(t){return t.getUTCDay()}function ys(t,e){return da(Yi.count(Ki(t)-1,t),e,2)}function ms(t,e){return da(t.getUTCFullYear()%100,e,2)}function bs(t,e){return da((t=ps(t)).getUTCFullYear()%100,e,2)}function _s(t,e){return da(t.getUTCFullYear()%1e4,e,4)}function xs(t,e){var n=t.getUTCDay();return da((t=n>=4||0===n?Wi(t):Wi.ceil(t)).getUTCFullYear()%1e4,e,4)}function vs(){return"+0000"}function ks(){return"%"}function ws(t){return+t}function Es(t){return Math.floor(+t/1e3)}function Cs(t){return new Date(t)}function Ts(t){return t instanceof Date?+t:+new Date(+t)}function Ss(t,e,n,r,i,a,s,o,c,l){var h=Pr(),u=h.invert,d=h.domain,p=l(".%L"),f=l(":%S"),g=l("%I:%M"),y=l("%I %p"),m=l("%a %d"),b=l("%b %d"),_=l("%B"),x=l("%Y");function v(t){return(c(t)<t?p:o(t)<t?f:s(t)<t?g:a(t)<t?y:r(t)<t?i(t)<t?m:b:n(t)<t?_:x)(t)}return h.invert=function(t){return new Date(u(t))},h.domain=function(t){return arguments.length?d(Array.from(t,Ts)):d().map(Cs)},h.ticks=function(e){var n=d();return t(n[0],n[n.length-1],null==e?10:e)},h.tickFormat=function(t,e){return null==e?v:l(e)},h.nice=function(t){var n=d();return t&&"function"==typeof t.range||(t=e(n[0],n[n.length-1],null==t?10:t)),t?d(function(t,e){var n,r=0,i=(t=t.slice()).length-1,a=t[r],s=t[i];return s<a&&(n=r,r=i,i=n,n=a,a=s,s=n),t[r]=e.floor(a),t[i]=e.ceil(s),t}(n,t)):h},h.copy=function(){return Rr(h,Ss(t,e,n,r,i,a,s,o,c,l))},h}function As(){return jr.apply(Ss(ea,na,Xi,Vi,Oi,Li,Si,Ci,Ei,oa).domain([new Date(2e3,0,1),new Date(2e3,0,2)]),arguments)}function Ls(t){return"string"==typeof t?new St([[document.querySelector(t)]],[document.documentElement]):new St([[t]],Tt)}function Bs(t){return"string"==typeof t?new St([document.querySelectorAll(t)],[document.documentElement]):new St([m(t)],Tt)}function Ns(t){return function(){return t}}!function(t){sa=function(t){var e=t.dateTime,n=t.date,r=t.time,i=t.periods,a=t.days,s=t.shortDays,o=t.months,c=t.shortMonths,l=fa(i),h=ga(i),u=fa(a),d=ga(a),p=fa(s),f=ga(s),g=fa(o),y=ga(o),m=fa(c),b=ga(c),_={a:function(t){return s[t.getDay()]},A:function(t){return a[t.getDay()]},b:function(t){return c[t.getMonth()]},B:function(t){return o[t.getMonth()]},c:null,d:Fa,e:Fa,f:ja,g:Qa,G:ts,H:$a,I:Ra,j:Za,L:Pa,m:Ya,M:za,p:function(t){return i[+(t.getHours()>=12)]},q:function(t){return 1+~~(t.getMonth()/3)},Q:ws,s:Es,S:Ua,u:Wa,U:qa,V:Va,w:Ga,W:Xa,x:null,X:null,y:Ka,Y:Ja,Z:es,"%":ks},x={a:function(t){return s[t.getUTCDay()]},A:function(t){return a[t.getUTCDay()]},b:function(t){return c[t.getUTCMonth()]},B:function(t){return o[t.getUTCMonth()]},c:null,d:ns,e:ns,f:os,g:bs,G:xs,H:rs,I:is,j:as,L:ss,m:cs,M:ls,p:function(t){return i[+(t.getUTCHours()>=12)]},q:function(t){return 1+~~(t.getUTCMonth()/3)},Q:ws,s:Es,S:hs,u:us,U:ds,V:fs,w:gs,W:ys,x:null,X:null,y:ms,Y:_s,Z:vs,"%":ks},v={a:function(t,e,n){var r=p.exec(e.slice(n));return r?(t.w=f.get(r[0].toLowerCase()),n+r[0].length):-1},A:function(t,e,n){var r=u.exec(e.slice(n));return r?(t.w=d.get(r[0].toLowerCase()),n+r[0].length):-1},b:function(t,e,n){var r=m.exec(e.slice(n));return r?(t.m=b.get(r[0].toLowerCase()),n+r[0].length):-1},B:function(t,e,n){var r=g.exec(e.slice(n));return r?(t.m=y.get(r[0].toLowerCase()),n+r[0].length):-1},c:function(t,n,r){return E(t,e,n,r)},d:Ta,e:Ta,f:Da,g:ka,G:va,H:Aa,I:Aa,j:Sa,L:Na,m:Ca,M:La,p:function(t,e,n){var r=l.exec(e.slice(n));return r?(t.p=h.get(r[0].toLowerCase()),n+r[0].length):-1},q:Ea,Q:Ma,s:Ia,S:Ba,u:ma,U:ba,V:_a,w:ya,W:xa,x:function(t,e,r){return E(t,n,e,r)},X:function(t,e,n){return E(t,r,e,n)},y:ka,Y:va,Z:wa,"%":Oa};function k(t,e){return function(n){var r,i,a,s=[],o=-1,c=0,l=t.length;for(n instanceof Date||(n=new Date(+n));++o<l;)37===t.charCodeAt(o)&&(s.push(t.slice(c,o)),null!=(i=ca[r=t.charAt(++o)])?r=t.charAt(++o):i="e"===r?" ":"0",(a=e[r])&&(r=a(n,i)),s.push(r),c=o+1);return s.push(t.slice(c,o)),s.join("")}}function w(t,e){return function(n){var r,i,a=aa(1900,void 0,1);if(E(a,t,n+="",0)!=n.length)return null;if("Q"in a)return new Date(a.Q);if("s"in a)return new Date(1e3*a.s+("L"in a?a.L:0));if(e&&!("Z"in a)&&(a.Z=0),"p"in a&&(a.H=a.H%12+12*a.p),void 0===a.m&&(a.m="q"in a?a.q:0),"V"in a){if(a.V<1||a.V>53)return null;"w"in a||(a.w=1),"Z"in a?(i=(r=ia(aa(a.y,0,1))).getUTCDay(),r=i>4||0===i?Yi.ceil(r):Yi(r),r=Bi.offset(r,7*(a.V-1)),a.y=r.getUTCFullYear(),a.m=r.getUTCMonth(),a.d=r.getUTCDate()+(a.w+6)%7):(i=(r=ra(aa(a.y,0,1))).getDay(),r=i>4||0===i?Mi.ceil(r):Mi(r),r=Li.offset(r,7*(a.V-1)),a.y=r.getFullYear(),a.m=r.getMonth(),a.d=r.getDate()+(a.w+6)%7)}else("W"in a||"U"in a)&&("w"in a||(a.w="u"in a?a.u%7:"W"in a?1:0),i="Z"in a?ia(aa(a.y,0,1)).getUTCDay():ra(aa(a.y,0,1)).getDay(),a.m=0,a.d="W"in a?(a.w+6)%7+7*a.W-(i+5)%7:a.w+7*a.U-(i+6)%7);return"Z"in a?(a.H+=a.Z/100|0,a.M+=a.Z%100,ia(a)):ra(a)}}function E(t,e,n,r){for(var i,a,s=0,o=e.length,c=n.length;s<o;){if(r>=c)return-1;if(37===(i=e.charCodeAt(s++))){if(i=e.charAt(s++),!(a=v[i in ca?e.charAt(s++):i])||(r=a(t,n,r))<0)return-1}else if(i!=n.charCodeAt(r++))return-1}return r}return _.x=k(n,_),_.X=k(r,_),_.c=k(e,_),x.x=k(n,x),x.X=k(r,x),x.c=k(e,x),{format:function(t){var e=k(t+="",_);return e.toString=function(){return t},e},parse:function(t){var e=w(t+="",!1);return e.toString=function(){return t},e},utcFormat:function(t){var e=k(t+="",x);return e.toString=function(){return t},e},utcParse:function(t){var e=w(t+="",!0);return e.toString=function(){return t},e}}}(t),oa=sa.format,sa.parse,sa.utcFormat,sa.utcParse}({dateTime:"%x, %X",date:"%-m/%-d/%Y",time:"%-I:%M:%S %p",periods:["AM","PM"],days:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],shortDays:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],months:["January","February","March","April","May","June","July","August","September","October","November","December"],shortMonths:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"]});const Ds=Math.abs,Os=Math.atan2,Ms=Math.cos,Is=Math.max,Fs=Math.min,$s=Math.sin,Rs=Math.sqrt,Zs=1e-12,Ps=Math.PI,js=Ps/2,Ys=2*Ps;function zs(t){return t>1?0:t<-1?Ps:Math.acos(t)}function Us(t){return t>=1?js:t<=-1?-js:Math.asin(t)}const Ws=Math.PI,qs=2*Ws,Hs=1e-6,Vs=qs-Hs;function Gs(t){this._+=t[0];for(let e=1,n=t.length;e<n;++e)this._+=arguments[e]+t[e]}class Xs{constructor(t){this._x0=this._y0=this._x1=this._y1=null,this._="",this._append=null==t?Gs:function(t){let e=Math.floor(t);if(!(e>=0))throw new Error(`invalid digits: ${t}`);if(e>15)return Gs;const n=10**e;return function(t){this._+=t[0];for(let e=1,r=t.length;e<r;++e)this._+=Math.round(arguments[e]*n)/n+t[e]}}(t)}moveTo(t,e){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}`}closePath(){null!==this._x1&&(this._x1=this._x0,this._y1=this._y0,this._append`Z`)}lineTo(t,e){this._append`L${this._x1=+t},${this._y1=+e}`}quadraticCurveTo(t,e,n,r){this._append`Q${+t},${+e},${this._x1=+n},${this._y1=+r}`}bezierCurveTo(t,e,n,r,i,a){this._append`C${+t},${+e},${+n},${+r},${this._x1=+i},${this._y1=+a}`}arcTo(t,e,n,r,i){if(t=+t,e=+e,n=+n,r=+r,(i=+i)<0)throw new Error(`negative radius: ${i}`);let a=this._x1,s=this._y1,o=n-t,c=r-e,l=a-t,h=s-e,u=l*l+h*h;if(null===this._x1)this._append`M${this._x1=t},${this._y1=e}`;else if(u>Hs)if(Math.abs(h*o-c*l)>Hs&&i){let d=n-a,p=r-s,f=o*o+c*c,g=d*d+p*p,y=Math.sqrt(f),m=Math.sqrt(u),b=i*Math.tan((Ws-Math.acos((f+u-g)/(2*y*m)))/2),_=b/m,x=b/y;Math.abs(_-1)>Hs&&this._append`L${t+_*l},${e+_*h}`,this._append`A${i},${i},0,0,${+(h*d>l*p)},${this._x1=t+x*o},${this._y1=e+x*c}`}else this._append`L${this._x1=t},${this._y1=e}`;else;}arc(t,e,n,r,i,a){if(t=+t,e=+e,a=!!a,(n=+n)<0)throw new Error(`negative radius: ${n}`);let s=n*Math.cos(r),o=n*Math.sin(r),c=t+s,l=e+o,h=1^a,u=a?r-i:i-r;null===this._x1?this._append`M${c},${l}`:(Math.abs(this._x1-c)>Hs||Math.abs(this._y1-l)>Hs)&&this._append`L${c},${l}`,n&&(u<0&&(u=u%qs+qs),u>Vs?this._append`A${n},${n},0,1,${h},${t-s},${e-o}A${n},${n},0,1,${h},${this._x1=c},${this._y1=l}`:u>Hs&&this._append`A${n},${n},0,${+(u>=Ws)},${h},${this._x1=t+n*Math.cos(i)},${this._y1=e+n*Math.sin(i)}`)}rect(t,e,n,r){this._append`M${this._x0=this._x1=+t},${this._y0=this._y1=+e}h${n=+n}v${+r}h${-n}Z`}toString(){return this._}}function Ks(t){let e=3;return t.digits=function(n){if(!arguments.length)return e;if(null==n)e=null;else{const t=Math.floor(n);if(!(t>=0))throw new RangeError(`invalid digits: ${n}`);e=t}return t},()=>new Xs(e)}function Qs(t){return t.innerRadius}function Js(t){return t.outerRadius}function to(t){return t.startAngle}function eo(t){return t.endAngle}function no(t){return t&&t.padAngle}function ro(t,e,n,r,i,a,s,o){var c=n-t,l=r-e,h=s-i,u=o-a,d=u*c-h*l;if(!(d*d<Zs))return[t+(d=(h*(e-a)-u*(t-i))/d)*c,e+d*l]}function io(t,e,n,r,i,a,s){var o=t-n,c=e-r,l=(s?a:-a)/Rs(o*o+c*c),h=l*c,u=-l*o,d=t+h,p=e+u,f=n+h,g=r+u,y=(d+f)/2,m=(p+g)/2,b=f-d,_=g-p,x=b*b+_*_,v=i-a,k=d*g-f*p,w=(_<0?-1:1)*Rs(Is(0,v*v*x-k*k)),E=(k*_-b*w)/x,C=(-k*b-_*w)/x,T=(k*_+b*w)/x,S=(-k*b+_*w)/x,A=E-y,L=C-m,B=T-y,N=S-m;return A*A+L*L>B*B+N*N&&(E=T,C=S),{cx:E,cy:C,x01:-h,y01:-u,x11:E*(i/v-1),y11:C*(i/v-1)}}function ao(){var t=Qs,e=Js,n=Ns(0),r=null,i=to,a=eo,s=no,o=null,c=Ks(l);function l(){var l,h,u=+t.apply(this,arguments),d=+e.apply(this,arguments),p=i.apply(this,arguments)-js,f=a.apply(this,arguments)-js,g=Ds(f-p),y=f>p;if(o||(o=l=c()),d<u&&(h=d,d=u,u=h),d>Zs)if(g>Ys-Zs)o.moveTo(d*Ms(p),d*$s(p)),o.arc(0,0,d,p,f,!y),u>Zs&&(o.moveTo(u*Ms(f),u*$s(f)),o.arc(0,0,u,f,p,y));else{var m,b,_=p,x=f,v=p,k=f,w=g,E=g,C=s.apply(this,arguments)/2,T=C>Zs&&(r?+r.apply(this,arguments):Rs(u*u+d*d)),S=Fs(Ds(d-u)/2,+n.apply(this,arguments)),A=S,L=S;if(T>Zs){var B=Us(T/u*$s(C)),N=Us(T/d*$s(C));(w-=2*B)>Zs?(v+=B*=y?1:-1,k-=B):(w=0,v=k=(p+f)/2),(E-=2*N)>Zs?(_+=N*=y?1:-1,x-=N):(E=0,_=x=(p+f)/2)}var D=d*Ms(_),O=d*$s(_),M=u*Ms(k),I=u*$s(k);if(S>Zs){var F,$=d*Ms(x),R=d*$s(x),Z=u*Ms(v),P=u*$s(v);if(g<Ps)if(F=ro(D,O,Z,P,$,R,M,I)){var j=D-F[0],Y=O-F[1],z=$-F[0],U=R-F[1],W=1/$s(zs((j*z+Y*U)/(Rs(j*j+Y*Y)*Rs(z*z+U*U)))/2),q=Rs(F[0]*F[0]+F[1]*F[1]);A=Fs(S,(u-q)/(W-1)),L=Fs(S,(d-q)/(W+1))}else A=L=0}E>Zs?L>Zs?(m=io(Z,P,D,O,d,L,y),b=io($,R,M,I,d,L,y),o.moveTo(m.cx+m.x01,m.cy+m.y01),L<S?o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,L,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,d,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),!y),o.arc(b.cx,b.cy,L,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):(o.moveTo(D,O),o.arc(0,0,d,_,x,!y)):o.moveTo(D,O),u>Zs&&w>Zs?A>Zs?(m=io(M,I,$,R,u,-A,y),b=io(D,O,Z,P,u,-A,y),o.lineTo(m.cx+m.x01,m.cy+m.y01),A<S?o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(b.y01,b.x01),!y):(o.arc(m.cx,m.cy,A,Os(m.y01,m.x01),Os(m.y11,m.x11),!y),o.arc(0,0,u,Os(m.cy+m.y11,m.cx+m.x11),Os(b.cy+b.y11,b.cx+b.x11),y),o.arc(b.cx,b.cy,A,Os(b.y11,b.x11),Os(b.y01,b.x01),!y))):o.arc(0,0,u,k,v,y):o.lineTo(M,I)}else o.moveTo(0,0);if(o.closePath(),l)return o=null,l+""||null}return l.centroid=function(){var n=(+t.apply(this,arguments)+ +e.apply(this,arguments))/2,r=(+i.apply(this,arguments)+ +a.apply(this,arguments))/2-Ps/2;return[Ms(r)*n,$s(r)*n]},l.innerRadius=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),l):t},l.outerRadius=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),l):e},l.cornerRadius=function(t){return arguments.length?(n="function"==typeof t?t:Ns(+t),l):n},l.padRadius=function(t){return arguments.length?(r=null==t?null:"function"==typeof t?t:Ns(+t),l):r},l.startAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),l):i},l.endAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),l):a},l.padAngle=function(t){return arguments.length?(s="function"==typeof t?t:Ns(+t),l):s},l.context=function(t){return arguments.length?(o=null==t?null:t,l):o},l}Array.prototype.slice;function so(t){return"object"==typeof t&&"length"in t?t:Array.from(t)}function oo(t){this._context=t}function co(t){return new oo(t)}function lo(t){return t[0]}function ho(t){return t[1]}function uo(t,e){var n=Ns(!0),r=null,i=co,a=null,s=Ks(o);function o(o){var c,l,h,u=(o=so(o)).length,d=!1;for(null==r&&(a=i(h=s())),c=0;c<=u;++c)!(c<u&&n(l=o[c],c,o))===d&&((d=!d)?a.lineStart():a.lineEnd()),d&&a.point(+t(l,c,o),+e(l,c,o));if(h)return a=null,h+""||null}return t="function"==typeof t?t:void 0===t?lo:Ns(t),e="function"==typeof e?e:void 0===e?ho:Ns(e),o.x=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),o):t},o.y=function(t){return arguments.length?(e="function"==typeof t?t:Ns(+t),o):e},o.defined=function(t){return arguments.length?(n="function"==typeof t?t:Ns(!!t),o):n},o.curve=function(t){return arguments.length?(i=t,null!=r&&(a=i(r)),o):i},o.context=function(t){return arguments.length?(null==t?r=a=null:a=i(r=t),o):r},o}function po(t,e){return e<t?-1:e>t?1:e>=t?0:NaN}function fo(t){return t}function go(){var t=fo,e=po,n=null,r=Ns(0),i=Ns(Ys),a=Ns(0);function s(s){var o,c,l,h,u,d=(s=so(s)).length,p=0,f=new Array(d),g=new Array(d),y=+r.apply(this,arguments),m=Math.min(Ys,Math.max(-Ys,i.apply(this,arguments)-y)),b=Math.min(Math.abs(m)/d,a.apply(this,arguments)),_=b*(m<0?-1:1);for(o=0;o<d;++o)(u=g[f[o]=o]=+t(s[o],o,s))>0&&(p+=u);for(null!=e?f.sort((function(t,n){return e(g[t],g[n])})):null!=n&&f.sort((function(t,e){return n(s[t],s[e])})),o=0,l=p?(m-d*_)/p:0;o<d;++o,y=h)c=f[o],h=y+((u=g[c])>0?u*l:0)+_,g[c]={data:s[c],index:o,value:u,startAngle:y,endAngle:h,padAngle:b};return g}return s.value=function(e){return arguments.length?(t="function"==typeof e?e:Ns(+e),s):t},s.sortValues=function(t){return arguments.length?(e=t,n=null,s):e},s.sort=function(t){return arguments.length?(n=t,e=null,s):n},s.startAngle=function(t){return arguments.length?(r="function"==typeof t?t:Ns(+t),s):r},s.endAngle=function(t){return arguments.length?(i="function"==typeof t?t:Ns(+t),s):i},s.padAngle=function(t){return arguments.length?(a="function"==typeof t?t:Ns(+t),s):a},s}function yo(){}function mo(t,e,n){t._context.bezierCurveTo((2*t._x0+t._x1)/3,(2*t._y0+t._y1)/3,(t._x0+2*t._x1)/3,(t._y0+2*t._y1)/3,(t._x0+4*t._x1+e)/6,(t._y0+4*t._y1+n)/6)}function bo(t){this._context=t}function _o(t){return new bo(t)}function xo(t){this._context=t}function vo(t){return new xo(t)}function ko(t){this._context=t}function wo(t){return new ko(t)}oo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._point=0},lineEnd:function(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._context.lineTo(t,e)}}},bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){switch(this._point){case 3:mo(this,this._x1,this._y1);case 2:this._context.lineTo(this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,this._context.lineTo((5*this._x0+this._x1)/6,(5*this._y0+this._y1)/6);default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},xo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._y0=this._y1=this._y2=this._y3=this._y4=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x2,this._y2),this._context.closePath();break;case 2:this._context.moveTo((this._x2+2*this._x3)/3,(this._y2+2*this._y3)/3),this._context.lineTo((this._x3+2*this._x2)/3,(this._y3+2*this._y2)/3),this._context.closePath();break;case 3:this.point(this._x2,this._y2),this.point(this._x3,this._y3),this.point(this._x4,this._y4)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x2=t,this._y2=e;break;case 1:this._point=2,this._x3=t,this._y3=e;break;case 2:this._point=3,this._x4=t,this._y4=e,this._context.moveTo((this._x0+4*this._x1+t)/6,(this._y0+4*this._y1+e)/6);break;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}},ko.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3;var n=(this._x0+4*this._x1+t)/6,r=(this._y0+4*this._y1+e)/6;this._line?this._context.lineTo(n,r):this._context.moveTo(n,r);break;case 3:this._point=4;default:mo(this,t,e)}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e}};class Eo{constructor(t,e){this._context=t,this._x=e}areaStart(){this._line=0}areaEnd(){this._line=NaN}lineStart(){this._point=0}lineEnd(){(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line}point(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:this._x?this._context.bezierCurveTo(this._x0=(this._x0+t)/2,this._y0,this._x0,e,t,e):this._context.bezierCurveTo(this._x0,this._y0=(this._y0+e)/2,t,this._y0,t,e)}this._x0=t,this._y0=e}}function Co(t){return new Eo(t,!0)}function To(t){return new Eo(t,!1)}function So(t,e){this._basis=new bo(t),this._beta=e}So.prototype={lineStart:function(){this._x=[],this._y=[],this._basis.lineStart()},lineEnd:function(){var t=this._x,e=this._y,n=t.length-1;if(n>0)for(var r,i=t[0],a=e[0],s=t[n]-i,o=e[n]-a,c=-1;++c<=n;)r=c/n,this._basis.point(this._beta*t[c]+(1-this._beta)*(i+r*s),this._beta*e[c]+(1-this._beta)*(a+r*o));this._x=this._y=null,this._basis.lineEnd()},point:function(t,e){this._x.push(+t),this._y.push(+e)}};const Ao=function t(e){function n(t){return 1===e?new bo(t):new So(t,e)}return n.beta=function(e){return t(+e)},n}(.85);function Lo(t,e,n){t._context.bezierCurveTo(t._x1+t._k*(t._x2-t._x0),t._y1+t._k*(t._y2-t._y0),t._x2+t._k*(t._x1-e),t._y2+t._k*(t._y1-n),t._x2,t._y2)}function Bo(t,e){this._context=t,this._k=(1-e)/6}Bo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:Lo(this,this._x1,this._y1)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2,this._x1=t,this._y1=e;break;case 2:this._point=3;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const No=function t(e){function n(t){return new Bo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Do(t,e){this._context=t,this._k=(1-e)/6}Do.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Oo=function t(e){function n(t){return new Do(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Mo(t,e){this._context=t,this._k=(1-e)/6}Mo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Lo(this,t,e)}this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Io=function t(e){function n(t){return new Mo(t,e)}return n.tension=function(e){return t(+e)},n}(0);function Fo(t,e,n){var r=t._x1,i=t._y1,a=t._x2,s=t._y2;if(t._l01_a>Zs){var o=2*t._l01_2a+3*t._l01_a*t._l12_a+t._l12_2a,c=3*t._l01_a*(t._l01_a+t._l12_a);r=(r*o-t._x0*t._l12_2a+t._x2*t._l01_2a)/c,i=(i*o-t._y0*t._l12_2a+t._y2*t._l01_2a)/c}if(t._l23_a>Zs){var l=2*t._l23_2a+3*t._l23_a*t._l12_a+t._l12_2a,h=3*t._l23_a*(t._l23_a+t._l12_a);a=(a*l+t._x1*t._l23_2a-e*t._l12_2a)/h,s=(s*l+t._y1*t._l23_2a-n*t._l12_2a)/h}t._context.bezierCurveTo(r,i,a,s,t._x2,t._y2)}function $o(t,e){this._context=t,this._alpha=e}$o.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x2,this._y2);break;case 3:this.point(this._x2,this._y2)}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Ro=function t(e){function n(t){return e?new $o(t,e):new Bo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function Zo(t,e){this._context=t,this._alpha=e}Zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._x0=this._x1=this._x2=this._x3=this._x4=this._x5=this._y0=this._y1=this._y2=this._y3=this._y4=this._y5=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){switch(this._point){case 1:this._context.moveTo(this._x3,this._y3),this._context.closePath();break;case 2:this._context.lineTo(this._x3,this._y3),this._context.closePath();break;case 3:this.point(this._x3,this._y3),this.point(this._x4,this._y4),this.point(this._x5,this._y5)}},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1,this._x3=t,this._y3=e;break;case 1:this._point=2,this._context.moveTo(this._x4=t,this._y4=e);break;case 2:this._point=3,this._x5=t,this._y5=e;break;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Po=function t(e){function n(t){return e?new Zo(t,e):new Do(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function jo(t,e){this._context=t,this._alpha=e}jo.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._x2=this._y0=this._y1=this._y2=NaN,this._l01_a=this._l12_a=this._l23_a=this._l01_2a=this._l12_2a=this._l23_2a=this._point=0},lineEnd:function(){(this._line||0!==this._line&&3===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){if(t=+t,e=+e,this._point){var n=this._x2-t,r=this._y2-e;this._l23_a=Math.sqrt(this._l23_2a=Math.pow(n*n+r*r,this._alpha))}switch(this._point){case 0:this._point=1;break;case 1:this._point=2;break;case 2:this._point=3,this._line?this._context.lineTo(this._x2,this._y2):this._context.moveTo(this._x2,this._y2);break;case 3:this._point=4;default:Fo(this,t,e)}this._l01_a=this._l12_a,this._l12_a=this._l23_a,this._l01_2a=this._l12_2a,this._l12_2a=this._l23_2a,this._x0=this._x1,this._x1=this._x2,this._x2=t,this._y0=this._y1,this._y1=this._y2,this._y2=e}};const Yo=function t(e){function n(t){return e?new jo(t,e):new Mo(t,0)}return n.alpha=function(e){return t(+e)},n}(.5);function zo(t){this._context=t}function Uo(t){return new zo(t)}function Wo(t){return t<0?-1:1}function qo(t,e,n){var r=t._x1-t._x0,i=e-t._x1,a=(t._y1-t._y0)/(r||i<0&&-0),s=(n-t._y1)/(i||r<0&&-0),o=(a*i+s*r)/(r+i);return(Wo(a)+Wo(s))*Math.min(Math.abs(a),Math.abs(s),.5*Math.abs(o))||0}function Ho(t,e){var n=t._x1-t._x0;return n?(3*(t._y1-t._y0)/n-e)/2:e}function Vo(t,e,n){var r=t._x0,i=t._y0,a=t._x1,s=t._y1,o=(a-r)/3;t._context.bezierCurveTo(r+o,i+o*e,a-o,s-o*n,a,s)}function Go(t){this._context=t}function Xo(t){this._context=new Ko(t)}function Ko(t){this._context=t}function Qo(t){return new Go(t)}function Jo(t){return new Xo(t)}function tc(t){this._context=t}function ec(t){var e,n,r=t.length-1,i=new Array(r),a=new Array(r),s=new Array(r);for(i[0]=0,a[0]=2,s[0]=t[0]+2*t[1],e=1;e<r-1;++e)i[e]=1,a[e]=4,s[e]=4*t[e]+2*t[e+1];for(i[r-1]=2,a[r-1]=7,s[r-1]=8*t[r-1]+t[r],e=1;e<r;++e)n=i[e]/a[e-1],a[e]-=n,s[e]-=n*s[e-1];for(i[r-1]=s[r-1]/a[r-1],e=r-2;e>=0;--e)i[e]=(s[e]-i[e+1])/a[e];for(a[r-1]=(t[r]+i[r-1])/2,e=0;e<r-1;++e)a[e]=2*t[e+1]-i[e+1];return[i,a]}function nc(t){return new tc(t)}function rc(t,e){this._context=t,this._t=e}function ic(t){return new rc(t,.5)}function ac(t){return new rc(t,0)}function sc(t){return new rc(t,1)}function oc(t,e,n){this.k=t,this.x=e,this.y=n}zo.prototype={areaStart:yo,areaEnd:yo,lineStart:function(){this._point=0},lineEnd:function(){this._point&&this._context.closePath()},point:function(t,e){t=+t,e=+e,this._point?this._context.lineTo(t,e):(this._point=1,this._context.moveTo(t,e))}},Go.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x0=this._x1=this._y0=this._y1=this._t0=NaN,this._point=0},lineEnd:function(){switch(this._point){case 2:this._context.lineTo(this._x1,this._y1);break;case 3:Vo(this,this._t0,Ho(this,this._t0))}(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line=1-this._line},point:function(t,e){var n=NaN;if(e=+e,(t=+t)!==this._x1||e!==this._y1){switch(this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;break;case 2:this._point=3,Vo(this,Ho(this,n=qo(this,t,e)),n);break;default:Vo(this,this._t0,n=qo(this,t,e))}this._x0=this._x1,this._x1=t,this._y0=this._y1,this._y1=e,this._t0=n}}},(Xo.prototype=Object.create(Go.prototype)).point=function(t,e){Go.prototype.point.call(this,e,t)},Ko.prototype={moveTo:function(t,e){this._context.moveTo(e,t)},closePath:function(){this._context.closePath()},lineTo:function(t,e){this._context.lineTo(e,t)},bezierCurveTo:function(t,e,n,r,i,a){this._context.bezierCurveTo(e,t,r,n,a,i)}},tc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=[],this._y=[]},lineEnd:function(){var t=this._x,e=this._y,n=t.length;if(n)if(this._line?this._context.lineTo(t[0],e[0]):this._context.moveTo(t[0],e[0]),2===n)this._context.lineTo(t[1],e[1]);else for(var r=ec(t),i=ec(e),a=0,s=1;s<n;++a,++s)this._context.bezierCurveTo(r[0][a],i[0][a],r[1][a],i[1][a],t[s],e[s]);(this._line||0!==this._line&&1===n)&&this._context.closePath(),this._line=1-this._line,this._x=this._y=null},point:function(t,e){this._x.push(+t),this._y.push(+e)}},rc.prototype={areaStart:function(){this._line=0},areaEnd:function(){this._line=NaN},lineStart:function(){this._x=this._y=NaN,this._point=0},lineEnd:function(){0<this._t&&this._t<1&&2===this._point&&this._context.lineTo(this._x,this._y),(this._line||0!==this._line&&1===this._point)&&this._context.closePath(),this._line>=0&&(this._t=1-this._t,this._line=1-this._line)},point:function(t,e){switch(t=+t,e=+e,this._point){case 0:this._point=1,this._line?this._context.lineTo(t,e):this._context.moveTo(t,e);break;case 1:this._point=2;default:if(this._t<=0)this._context.lineTo(this._x,e),this._context.lineTo(t,e);else{var n=this._x*(1-this._t)+t*this._t;this._context.lineTo(n,this._y),this._context.lineTo(n,e)}}this._x=t,this._y=e}},oc.prototype={constructor:oc,scale:function(t){return 1===t?this:new oc(this.k*t,this.x,this.y)},translate:function(t,e){return 0===t&0===e?this:new oc(this.k,this.x+this.k*t,this.y+this.k*e)},apply:function(t){return[t[0]*this.k+this.x,t[1]*this.k+this.y]},applyX:function(t){return t*this.k+this.x},applyY:function(t){return t*this.k+this.y},invert:function(t){return[(t[0]-this.x)/this.k,(t[1]-this.y)/this.k]},invertX:function(t){return(t-this.x)/this.k},invertY:function(t){return(t-this.y)/this.k},rescaleX:function(t){return t.copy().domain(t.range().map(this.invertX,this).map(t.invert,t))},rescaleY:function(t){return t.copy().domain(t.range().map(this.invertY,this).map(t.invert,t))},toString:function(){return"translate("+this.x+","+this.y+") scale("+this.k+")"}};new oc(1,0,0);oc.prototype},3352:(t,e,n)=>{"use strict";function r(t,e,n,r){var a,s,o,c,l,h,u,d,p,f,g,y,m;if(a=e.y-t.y,o=t.x-e.x,l=e.x*t.y-t.x*e.y,p=a*n.x+o*n.y+l,f=a*r.x+o*r.y+l,!(0!==p&&0!==f&&i(p,f)||(s=r.y-n.y,c=n.x-r.x,h=r.x*n.y-n.x*r.y,u=s*t.x+c*t.y+h,d=s*e.x+c*e.y+h,0!==u&&0!==d&&i(u,d)||0==(g=a*c-s*o))))return y=Math.abs(g/2),{x:(m=o*h-c*l)<0?(m-y)/g:(m+y)/g,y:(m=s*l-a*h)<0?(m-y)/g:(m+y)/g}}function i(t,e){return t*e>0}function a(t,e,n){var i=t.x,a=t.y,s=[],o=Number.POSITIVE_INFINITY,c=Number.POSITIVE_INFINITY;e.forEach((function(t){o=Math.min(o,t.x),c=Math.min(c,t.y)}));for(var l=i-t.width/2-o,h=a-t.height/2-c,u=0;u<e.length;u++){var d=e[u],p=e[u<e.length-1?u+1:0],f=r(t,n,{x:l+d.x,y:h+d.y},{x:l+p.x,y:h+p.y});f&&s.push(f)}return s.length?(s.length>1&&s.sort((function(t,e){var r=t.x-n.x,i=t.y-n.y,a=Math.sqrt(r*r+i*i),s=e.x-n.x,o=e.y-n.y,c=Math.sqrt(s*s+o*o);return a<c?-1:a===c?0:1})),s[0]):(console.log("NO INTERSECTION FOUND, RETURN NODE CENTER",t),t)}n.d(e,{A:()=>a})},2930:(t,e,n)=>{"use strict";function r(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=0===o?0:l*s/o,r=l):(s<0&&(c=-c),n=c,r=0===s?0:c*o/s),{x:i+n,y:a+r}}n.d(e,{q:()=>r})},3349:(t,e,n)=>{"use strict";n.d(e,{a:()=>i});var r=n(6225);function i(t,e){var n=t.append("foreignObject").attr("width","100000"),i=n.append("xhtml:div");i.attr("xmlns","http://www.w3.org/1999/xhtml");var a=e.label;switch(typeof a){case"function":i.insert(a);break;case"object":i.insert((function(){return a}));break;default:i.html(a)}r.bg(i,e.labelStyle),i.style("display","inline-block"),i.style("white-space","nowrap");var s=i.node().getBoundingClientRect();return n.attr("width",s.width).attr("height",s.height),n}},6225:(t,e,n)=>{"use strict";n.d(e,{$p:()=>h,O1:()=>s,WR:()=>u,bF:()=>a,bg:()=>l});var r=n(7514),i=n(3234);function a(t,e){return!!t.children(e).length}function s(t){return c(t.v)+":"+c(t.w)+":"+c(t.name)}var o=/:/g;function c(t){return t?String(t).replace(o,"\\:"):""}function l(t,e){e&&t.attr("style",e)}function h(t,e,n){e&&t.attr("class",e).attr("class",n+" "+t.attr("class"))}function u(t,e){var n=e.graph();if(r.Z(n)){var a=n.transition;if(i.Z(a))return a(t)}return t}},277:(t,e,n)=>{"use strict";n.d(e,{bK:()=>Ve});var r=n(870),i=n(6749),a=n(7452),s=n(2002),o=n(7961),c=n(3836),l=n(4379),h=n(5625);class u{constructor(){var t={};t._next=t._prev=t,this._sentinel=t}dequeue(){var t=this._sentinel,e=t._prev;if(e!==t)return d(e),e}enqueue(t){var e=this._sentinel;t._prev&&t._next&&d(t),t._next=e._next,e._next._prev=t,e._next=t,t._prev=e}toString(){for(var t=[],e=this._sentinel,n=e._prev;n!==e;)t.push(JSON.stringify(n,p)),n=n._prev;return"["+t.join(", ")+"]"}}function d(t){t._prev._next=t._next,t._next._prev=t._prev,delete t._next,delete t._prev}function p(t,e){if("_next"!==t&&"_prev"!==t)return e}var f=s.Z(1);function g(t,e){if(t.nodeCount()<=1)return[];var n=function(t,e){var n=new h.k,i=0,a=0;r.Z(t.nodes(),(function(t){n.setNode(t,{v:t,in:0,out:0})})),r.Z(t.edges(),(function(t){var r=n.edge(t.v,t.w)||0,s=e(t),o=r+s;n.setEdge(t.v,t.w,o),a=Math.max(a,n.node(t.v).out+=s),i=Math.max(i,n.node(t.w).in+=s)}));var s=l.Z(a+i+3).map((function(){return new u})),o=i+1;return r.Z(n.nodes(),(function(t){m(s,o,n.node(t))})),{graph:n,buckets:s,zeroIdx:o}}(t,e||f),i=function(t,e,n){var r,i=[],a=e[e.length-1],s=e[0];for(;t.nodeCount();){for(;r=s.dequeue();)y(t,e,n,r);for(;r=a.dequeue();)y(t,e,n,r);if(t.nodeCount())for(var o=e.length-2;o>0;--o)if(r=e[o].dequeue()){i=i.concat(y(t,e,n,r,!0));break}}return i}(n.graph,n.buckets,n.zeroIdx);return o.Z(c.Z(i,(function(e){return t.outEdges(e.v,e.w)})))}function y(t,e,n,i,a){var s=a?[]:void 0;return r.Z(t.inEdges(i.v),(function(r){var i=t.edge(r),o=t.node(r.v);a&&s.push({v:r.v,w:r.w}),o.out-=i,m(e,n,o)})),r.Z(t.outEdges(i.v),(function(r){var i=t.edge(r),a=r.w,s=t.node(a);s.in-=i,m(e,n,s)})),t.removeNode(i.v),s}function m(t,e,n){n.out?n.in?t[n.out-n.in+e].enqueue(n):t[t.length-1].enqueue(n):t[0].enqueue(n)}function b(t){var e="greedy"===t.graph().acyclicer?g(t,function(t){return function(e){return t.edge(e).weight}}(t)):function(t){var e=[],n={},i={};function s(o){a.Z(i,o)||(i[o]=!0,n[o]=!0,r.Z(t.outEdges(o),(function(t){a.Z(n,t.w)?e.push(t):s(t.w)})),delete n[o])}return r.Z(t.nodes(),s),e}(t);r.Z(e,(function(e){var n=t.edge(e);t.removeEdge(e),n.forwardName=e.name,n.reversed=!0,t.setEdge(e.w,e.v,n,i.Z("rev"))}))}var _=n(1667),x=n(4752),v=n(9651);const k=function(t,e,n){(void 0!==n&&!(0,v.Z)(t[e],n)||void 0===n&&!(e in t))&&(0,x.Z)(t,e,n)};var w=n(1395),E=n(1050),C=n(2701),T=n(7215),S=n(3658),A=n(9169),L=n(7771),B=n(836),N=n(7008),D=n(3234),O=n(7226),M=n(7514),I=n(8843);const F=function(t,e){if(("constructor"!==e||"function"!=typeof t[e])&&"__proto__"!=e)return t[e]};var $=n(1899),R=n(2957);const Z=function(t){return(0,$.Z)(t,(0,R.Z)(t))};const P=function(t,e,n,r,i,a,s){var o=F(t,n),c=F(e,n),l=s.get(c);if(l)k(t,n,l);else{var h=a?a(o,c,n+"",t,e,s):void 0,u=void 0===h;if(u){var d=(0,L.Z)(c),p=!d&&(0,N.Z)(c),f=!d&&!p&&(0,I.Z)(c);h=c,d||p||f?(0,L.Z)(o)?h=o:(0,B.Z)(o)?h=(0,T.Z)(o):p?(u=!1,h=(0,E.Z)(c,!0)):f?(u=!1,h=(0,C.Z)(c,!0)):h=[]:(0,M.Z)(c)||(0,A.Z)(c)?(h=o,(0,A.Z)(o)?h=Z(o):(0,O.Z)(o)&&!(0,D.Z)(o)||(h=(0,S.Z)(c))):u=!1}u&&(s.set(c,h),i(h,c,r,a,s),s.delete(c)),k(t,n,h)}};const j=function t(e,n,r,i,a){e!==n&&(0,w.Z)(n,(function(s,o){if(a||(a=new _.Z),(0,O.Z)(s))P(e,n,o,r,t,i,a);else{var c=i?i(F(e,o),s,o+"",e,n,a):void 0;void 0===c&&(c=s),k(e,o,c)}}),R.Z)};var Y=n(9581),z=n(439);const U=function(t){return(0,Y.Z)((function(e,n){var r=-1,i=n.length,a=i>1?n[i-1]:void 0,s=i>2?n[2]:void 0;for(a=t.length>3&&"function"==typeof a?(i--,a):void 0,s&&(0,z.Z)(n[0],n[1],s)&&(a=i<3?void 0:a,i=1),e=Object(e);++r<i;){var o=n[r];o&&t(e,o,r,a)}return e}))}((function(t,e,n){j(t,e,n)}));var W=n(1666),q=n(3688),H=n(2714);const V=function(t,e,n){for(var r=-1,i=t.length;++r<i;){var a=t[r],s=e(a);if(null!=s&&(void 0===o?s==s&&!(0,H.Z)(s):n(s,o)))var o=s,c=a}return c};const G=function(t,e){return t>e};var X=n(9203);const K=function(t){return t&&t.length?V(t,X.Z,G):void 0};const Q=function(t){var e=null==t?0:t.length;return e?t[e-1]:void 0};var J=n(2693),tt=n(4765);const et=function(t,e){var n={};return e=(0,tt.Z)(e,3),(0,J.Z)(t,(function(t,r,i){(0,x.Z)(n,r,e(t,r,i))})),n};var nt=n(9360);const rt=function(t,e){return t<e};const it=function(t){return t&&t.length?V(t,X.Z,rt):void 0};var at=n(6092);const st=function(){return at.Z.Date.now()};function ot(t,e,n,r){var a;do{a=i.Z(r)}while(t.hasNode(a));return n.dummy=e,t.setNode(a,n),a}function ct(t){var e=new h.k({multigraph:t.isMultigraph()}).setGraph(t.graph());return r.Z(t.nodes(),(function(n){t.children(n).length||e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){e.setEdge(n,t.edge(n))})),e}function lt(t,e){var n,r,i=t.x,a=t.y,s=e.x-i,o=e.y-a,c=t.width/2,l=t.height/2;if(!s&&!o)throw new Error("Not possible to find intersection inside of the rectangle");return Math.abs(o)*c>Math.abs(s)*l?(o<0&&(l=-l),n=l*s/o,r=l):(s<0&&(c=-c),n=c,r=c*o/s),{x:i+n,y:a+r}}function ht(t){var e=c.Z(l.Z(dt(t)+1),(function(){return[]}));return r.Z(t.nodes(),(function(n){var r=t.node(n),i=r.rank;nt.Z(i)||(e[i][r.order]=n)})),e}function ut(t,e,n,r){var i={width:0,height:0};return arguments.length>=4&&(i.rank=n,i.order=r),ot(t,"border",i,e)}function dt(t){return K(c.Z(t.nodes(),(function(e){var n=t.node(e).rank;if(!nt.Z(n))return n})))}function pt(t,e){var n=st();try{return e()}finally{console.log(t+" time: "+(st()-n)+"ms")}}function ft(t,e){return e()}function gt(t,e,n,r,i,a){var s={width:0,height:0,rank:a,borderType:e},o=i[e][a-1],c=ot(t,"border",s,n);i[e][a]=c,t.setParent(c,r),o&&t.setEdge(o,c,{weight:1})}function yt(t){var e=t.graph().rankdir.toLowerCase();"bt"!==e&&"rl"!==e||function(t){r.Z(t.nodes(),(function(e){_t(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,_t),a.Z(n,"y")&&_t(n)}))}(t),"lr"!==e&&"rl"!==e||(!function(t){r.Z(t.nodes(),(function(e){xt(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);r.Z(n.points,xt),a.Z(n,"x")&&xt(n)}))}(t),mt(t))}function mt(t){r.Z(t.nodes(),(function(e){bt(t.node(e))})),r.Z(t.edges(),(function(e){bt(t.edge(e))}))}function bt(t){var e=t.width;t.width=t.height,t.height=e}function _t(t){t.y=-t.y}function xt(t){var e=t.x;t.x=t.y,t.y=e}function vt(t){t.graph().dummyChains=[],r.Z(t.edges(),(function(e){!function(t,e){var n,r,i,a=e.v,s=t.node(a).rank,o=e.w,c=t.node(o).rank,l=e.name,h=t.edge(e),u=h.labelRank;if(c===s+1)return;for(t.removeEdge(e),i=0,++s;s<c;++i,++s)h.points=[],n=ot(t,"edge",r={width:0,height:0,edgeLabel:h,edgeObj:e,rank:s},"_d"),s===u&&(r.width=h.width,r.height=h.height,r.dummy="edge-label",r.labelpos=h.labelpos),t.setEdge(a,n,{weight:h.weight},l),0===i&&t.graph().dummyChains.push(n),a=n;t.setEdge(a,o,{weight:h.weight},l)}(t,e)}))}const kt=function(t,e){return t&&t.length?V(t,(0,tt.Z)(e,2),rt):void 0};function wt(t){var e={};r.Z(t.sources(),(function n(r){var i=t.node(r);if(a.Z(e,r))return i.rank;e[r]=!0;var s=it(c.Z(t.outEdges(r),(function(e){return n(e.w)-t.edge(e).minlen})));return s!==Number.POSITIVE_INFINITY&&null!=s||(s=0),i.rank=s}))}function Et(t,e){return t.node(e.w).rank-t.node(e.v).rank-t.edge(e).minlen}function Ct(t){var e,n,r=new h.k({directed:!1}),i=t.nodes()[0],a=t.nodeCount();for(r.setNode(i,{});Tt(r,t)<a;)e=St(r,t),n=r.hasNode(e.v)?Et(t,e):-Et(t,e),At(r,t,n);return r}function Tt(t,e){return r.Z(t.nodes(),(function n(i){r.Z(e.nodeEdges(i),(function(r){var a=r.v,s=i===a?r.w:a;t.hasNode(s)||Et(e,r)||(t.setNode(s,{}),t.setEdge(i,s,{}),n(s))}))})),t.nodeCount()}function St(t,e){return kt(e.edges(),(function(n){if(t.hasNode(n.v)!==t.hasNode(n.w))return Et(e,n)}))}function At(t,e,n){r.Z(t.nodes(),(function(t){e.node(t).rank+=n}))}var Lt=n(585),Bt=n(7179);const Nt=function(t){return function(e,n,r){var i=Object(e);if(!(0,Lt.Z)(e)){var a=(0,tt.Z)(n,3);e=(0,Bt.Z)(e),n=function(t){return a(i[t],t,i)}}var s=t(e,n,r);return s>-1?i[a?e[s]:s]:void 0}};var Dt=n(1692),Ot=n(4099);const Mt=function(t){var e=(0,Ot.Z)(t),n=e%1;return e==e?n?e-n:e:0};var It=Math.max;const Ft=Nt((function(t,e,n){var r=null==t?0:t.length;if(!r)return-1;var i=null==n?0:Mt(n);return i<0&&(i=It(r+i,0)),(0,Dt.Z)(t,(0,tt.Z)(e,3),i)}));var $t=n(3445);s.Z(1);s.Z(1);n(9473),n(3970),n(3589),n(8533);(0,n(4193).Z)("length");RegExp("[\\u200d\\ud800-\\udfff\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff\\ufe0e\\ufe0f]");var Rt="[\\ud800-\\udfff]",Zt="[\\u0300-\\u036f\\ufe20-\\ufe2f\\u20d0-\\u20ff]",Pt="\\ud83c[\\udffb-\\udfff]",jt="[^\\ud800-\\udfff]",Yt="(?:\\ud83c[\\udde6-\\uddff]){2}",zt="[\\ud800-\\udbff][\\udc00-\\udfff]",Ut="(?:"+Zt+"|"+Pt+")"+"?",Wt="[\\ufe0e\\ufe0f]?",qt=Wt+Ut+("(?:\\u200d(?:"+[jt,Yt,zt].join("|")+")"+Wt+Ut+")*"),Ht="(?:"+[jt+Zt+"?",Zt,Yt,zt,Rt].join("|")+")";RegExp(Pt+"(?="+Pt+")|"+Ht+qt,"g");function Vt(){}function Gt(t,e,n){L.Z(e)||(e=[e]);var i=(t.isDirected()?t.successors:t.neighbors).bind(t),a=[],s={};return r.Z(e,(function(e){if(!t.hasNode(e))throw new Error("Graph does not have node: "+e);Xt(t,e,"post"===n,s,i,a)})),a}function Xt(t,e,n,i,s,o){a.Z(i,e)||(i[e]=!0,n||o.push(e),r.Z(s(e),(function(e){Xt(t,e,n,i,s,o)})),n&&o.push(e))}Vt.prototype=new Error;n(2544);function Kt(t){t=function(t){var e=(new h.k).setGraph(t.graph());return r.Z(t.nodes(),(function(n){e.setNode(n,t.node(n))})),r.Z(t.edges(),(function(n){var r=e.edge(n.v,n.w)||{weight:0,minlen:1},i=t.edge(n);e.setEdge(n.v,n.w,{weight:r.weight+i.weight,minlen:Math.max(r.minlen,i.minlen)})})),e}(t),wt(t);var e,n=Ct(t);for(te(n),Qt(n,t);e=ne(n);)ie(n,t,e,re(n,t,e))}function Qt(t,e){var n=function(t,e){return Gt(t,e,"post")}(t,t.nodes());n=n.slice(0,n.length-1),r.Z(n,(function(n){!function(t,e,n){var r=t.node(n).parent;t.edge(n,r).cutvalue=Jt(t,e,n)}(t,e,n)}))}function Jt(t,e,n){var i=t.node(n).parent,a=!0,s=e.edge(n,i),o=0;return s||(a=!1,s=e.edge(i,n)),o=s.weight,r.Z(e.nodeEdges(n),(function(r){var s,c,l=r.v===n,h=l?r.w:r.v;if(h!==i){var u=l===a,d=e.edge(r).weight;if(o+=u?d:-d,s=n,c=h,t.hasEdge(s,c)){var p=t.edge(n,h).cutvalue;o+=u?-p:p}}})),o}function te(t,e){arguments.length<2&&(e=t.nodes()[0]),ee(t,{},1,e)}function ee(t,e,n,i,s){var o=n,c=t.node(i);return e[i]=!0,r.Z(t.neighbors(i),(function(r){a.Z(e,r)||(n=ee(t,e,n,r,i))})),c.low=o,c.lim=n++,s?c.parent=s:delete c.parent,n}function ne(t){return Ft(t.edges(),(function(e){return t.edge(e).cutvalue<0}))}function re(t,e,n){var r=n.v,i=n.w;e.hasEdge(r,i)||(r=n.w,i=n.v);var a=t.node(r),s=t.node(i),o=a,c=!1;a.lim>s.lim&&(o=s,c=!0);var l=$t.Z(e.edges(),(function(e){return c===ae(t,t.node(e.v),o)&&c!==ae(t,t.node(e.w),o)}));return kt(l,(function(t){return Et(e,t)}))}function ie(t,e,n,i){var a=n.v,s=n.w;t.removeEdge(a,s),t.setEdge(i.v,i.w,{}),te(t),Qt(t,e),function(t,e){var n=Ft(t.nodes(),(function(t){return!e.node(t).parent})),i=function(t,e){return Gt(t,e,"pre")}(t,n);i=i.slice(1),r.Z(i,(function(n){var r=t.node(n).parent,i=e.edge(n,r),a=!1;i||(i=e.edge(r,n),a=!0),e.node(n).rank=e.node(r).rank+(a?i.minlen:-i.minlen)}))}(t,e)}function ae(t,e,n){return n.low<=e.lim&&e.lim<=n.lim}function se(t){switch(t.graph().ranker){case"network-simplex":default:ce(t);break;case"tight-tree":!function(t){wt(t),Ct(t)}(t);break;case"longest-path":oe(t)}}Kt.initLowLimValues=te,Kt.initCutValues=Qt,Kt.calcCutValue=Jt,Kt.leaveEdge=ne,Kt.enterEdge=re,Kt.exchangeEdges=ie;var oe=wt;function ce(t){Kt(t)}var le=n(4148),he=n(2344);function ue(t){var e=ot(t,"root",{},"_root"),n=function(t){var e={};function n(i,a){var s=t.children(i);s&&s.length&&r.Z(s,(function(t){n(t,a+1)})),e[i]=a}return r.Z(t.children(),(function(t){n(t,1)})),e}(t),i=K(le.Z(n))-1,a=2*i+1;t.graph().nestingRoot=e,r.Z(t.edges(),(function(e){t.edge(e).minlen*=a}));var s=function(t){return he.Z(t.edges(),(function(e,n){return e+t.edge(n).weight}),0)}(t)+1;r.Z(t.children(),(function(r){de(t,e,a,s,i,n,r)})),t.graph().nodeRankFactor=a}function de(t,e,n,i,a,s,o){var c=t.children(o);if(c.length){var l=ut(t,"_bt"),h=ut(t,"_bb"),u=t.node(o);t.setParent(l,o),u.borderTop=l,t.setParent(h,o),u.borderBottom=h,r.Z(c,(function(r){de(t,e,n,i,a,s,r);var c=t.node(r),u=c.borderTop?c.borderTop:r,d=c.borderBottom?c.borderBottom:r,p=c.borderTop?i:2*i,f=u!==d?1:a-s[o]+1;t.setEdge(l,u,{weight:p,minlen:f,nestingEdge:!0}),t.setEdge(d,h,{weight:p,minlen:f,nestingEdge:!0})})),t.parent(o)||t.setEdge(e,l,{weight:0,minlen:a+s[o]})}else o!==e&&t.setEdge(e,o,{weight:0,minlen:n})}var pe=n(8451);const fe=function(t){return(0,pe.Z)(t,5)};function ge(t,e,n){var s=function(t){var e;for(;t.hasNode(e=i.Z("_root")););return e}(t),o=new h.k({compound:!0}).setGraph({root:s}).setDefaultNodeLabel((function(e){return t.node(e)}));return r.Z(t.nodes(),(function(i){var c=t.node(i),l=t.parent(i);(c.rank===e||c.minRank<=e&&e<=c.maxRank)&&(o.setNode(i),o.setParent(i,l||s),r.Z(t[n](i),(function(e){var n=e.v===i?e.w:e.v,r=o.edge(n,i),a=nt.Z(r)?0:r.weight;o.setEdge(n,i,{weight:t.edge(e).weight+a})})),a.Z(c,"minRank")&&o.setNode(i,{borderLeft:c.borderLeft[e],borderRight:c.borderRight[e]}))})),o}var ye=n(2954);const me=function(t,e,n){for(var r=-1,i=t.length,a=e.length,s={};++r<i;){var o=r<a?e[r]:void 0;n(s,t[r],o)}return s};const be=function(t,e){return me(t||[],e||[],ye.Z)};var _e=n(626),xe=n(4073),ve=n(3317),ke=n(1018);const we=function(t,e){var n=t.length;for(t.sort(e);n--;)t[n]=t[n].value;return t};var Ee=n(1162);const Ce=function(t,e){if(t!==e){var n=void 0!==t,r=null===t,i=t==t,a=(0,H.Z)(t),s=void 0!==e,o=null===e,c=e==e,l=(0,H.Z)(e);if(!o&&!l&&!a&&t>e||a&&s&&c&&!o&&!l||r&&s&&c||!n&&c||!i)return 1;if(!r&&!a&&!l&&t<e||l&&n&&i&&!r&&!a||o&&n&&i||!s&&i||!c)return-1}return 0};const Te=function(t,e,n){for(var r=-1,i=t.criteria,a=e.criteria,s=i.length,o=n.length;++r<s;){var c=Ce(i[r],a[r]);if(c)return r>=o?c:c*("desc"==n[r]?-1:1)}return t.index-e.index};const Se=function(t,e,n){e=e.length?(0,xe.Z)(e,(function(t){return(0,L.Z)(t)?function(e){return(0,ve.Z)(e,1===t.length?t[0]:t)}:t})):[X.Z];var r=-1;e=(0,xe.Z)(e,(0,Ee.Z)(tt.Z));var i=(0,ke.Z)(t,(function(t,n,i){return{criteria:(0,xe.Z)(e,(function(e){return e(t)})),index:++r,value:t}}));return we(i,(function(t,e){return Te(t,e,n)}))};const Ae=(0,Y.Z)((function(t,e){if(null==t)return[];var n=e.length;return n>1&&(0,z.Z)(t,e[0],e[1])?e=[]:n>2&&(0,z.Z)(e[0],e[1],e[2])&&(e=[e[0]]),Se(t,(0,_e.Z)(e,1),[])}));function Le(t,e){for(var n=0,r=1;r<e.length;++r)n+=Be(t,e[r-1],e[r]);return n}function Be(t,e,n){for(var i=be(n,c.Z(n,(function(t,e){return e}))),a=o.Z(c.Z(e,(function(e){return Ae(c.Z(t.outEdges(e),(function(e){return{pos:i[e.w],weight:t.edge(e).weight}})),"pos")}))),s=1;s<n.length;)s<<=1;var l=2*s-1;s-=1;var h=c.Z(new Array(l),(function(){return 0})),u=0;return r.Z(a.forEach((function(t){var e=t.pos+s;h[e]+=t.weight;for(var n=0;e>0;)e%2&&(n+=h[e+1]),h[e=e-1>>1]+=t.weight;u+=t.weight*n}))),u}function Ne(t,e){var n={};return r.Z(t,(function(t,e){var r=n[t.v]={indegree:0,in:[],out:[],vs:[t.v],i:e};nt.Z(t.barycenter)||(r.barycenter=t.barycenter,r.weight=t.weight)})),r.Z(e.edges(),(function(t){var e=n[t.v],r=n[t.w];nt.Z(e)||nt.Z(r)||(r.indegree++,e.out.push(n[t.w]))})),function(t){var e=[];function n(t){return function(e){e.merged||(nt.Z(e.barycenter)||nt.Z(t.barycenter)||e.barycenter>=t.barycenter)&&function(t,e){var n=0,r=0;t.weight&&(n+=t.barycenter*t.weight,r+=t.weight);e.weight&&(n+=e.barycenter*e.weight,r+=e.weight);t.vs=e.vs.concat(t.vs),t.barycenter=n/r,t.weight=r,t.i=Math.min(e.i,t.i),e.merged=!0}(t,e)}}function i(e){return function(n){n.in.push(e),0==--n.indegree&&t.push(n)}}for(;t.length;){var a=t.pop();e.push(a),r.Z(a.in.reverse(),n(a)),r.Z(a.out,i(a))}return c.Z($t.Z(e,(function(t){return!t.merged})),(function(t){return W.Z(t,["vs","i","barycenter","weight"])}))}($t.Z(n,(function(t){return!t.indegree})))}function De(t,e){var n,i=function(t,e){var n={lhs:[],rhs:[]};return r.Z(t,(function(t){e(t)?n.lhs.push(t):n.rhs.push(t)})),n}(t,(function(t){return a.Z(t,"barycenter")})),s=i.lhs,c=Ae(i.rhs,(function(t){return-t.i})),l=[],h=0,u=0,d=0;s.sort((n=!!e,function(t,e){return t.barycenter<e.barycenter?-1:t.barycenter>e.barycenter?1:n?e.i-t.i:t.i-e.i})),d=Oe(l,c,d),r.Z(s,(function(t){d+=t.vs.length,l.push(t.vs),h+=t.barycenter*t.weight,u+=t.weight,d=Oe(l,c,d)}));var p={vs:o.Z(l)};return u&&(p.barycenter=h/u,p.weight=u),p}function Oe(t,e,n){for(var r;e.length&&(r=Q(e)).i<=n;)e.pop(),t.push(r.vs),n++;return n}function Me(t,e,n,i){var s=t.children(e),l=t.node(e),h=l?l.borderLeft:void 0,u=l?l.borderRight:void 0,d={};h&&(s=$t.Z(s,(function(t){return t!==h&&t!==u})));var p=function(t,e){return c.Z(e,(function(e){var n=t.inEdges(e);if(n.length){var r=he.Z(n,(function(e,n){var r=t.edge(n),i=t.node(n.v);return{sum:e.sum+r.weight*i.order,weight:e.weight+r.weight}}),{sum:0,weight:0});return{v:e,barycenter:r.sum/r.weight,weight:r.weight}}return{v:e}}))}(t,s);r.Z(p,(function(e){if(t.children(e.v).length){var r=Me(t,e.v,n,i);d[e.v]=r,a.Z(r,"barycenter")&&(s=e,o=r,nt.Z(s.barycenter)?(s.barycenter=o.barycenter,s.weight=o.weight):(s.barycenter=(s.barycenter*s.weight+o.barycenter*o.weight)/(s.weight+o.weight),s.weight+=o.weight))}var s,o}));var f=Ne(p,n);!function(t,e){r.Z(t,(function(t){t.vs=o.Z(t.vs.map((function(t){return e[t]?e[t].vs:t})))}))}(f,d);var g=De(f,i);if(h&&(g.vs=o.Z([h,g.vs,u]),t.predecessors(h).length)){var y=t.node(t.predecessors(h)[0]),m=t.node(t.predecessors(u)[0]);a.Z(g,"barycenter")||(g.barycenter=0,g.weight=0),g.barycenter=(g.barycenter*g.weight+y.order+m.order)/(g.weight+2),g.weight+=2}return g}function Ie(t){var e=dt(t),n=Fe(t,l.Z(1,e+1),"inEdges"),i=Fe(t,l.Z(e-1,-1,-1),"outEdges"),s=function(t){var e={},n=$t.Z(t.nodes(),(function(e){return!t.children(e).length})),i=K(c.Z(n,(function(e){return t.node(e).rank}))),s=c.Z(l.Z(i+1),(function(){return[]})),o=Ae(n,(function(e){return t.node(e).rank}));return r.Z(o,(function n(i){if(!a.Z(e,i)){e[i]=!0;var o=t.node(i);s[o.rank].push(i),r.Z(t.successors(i),n)}})),s}(t);Re(t,s);for(var o,h=Number.POSITIVE_INFINITY,u=0,d=0;d<4;++u,++d){$e(u%2?n:i,u%4>=2);var p=Le(t,s=ht(t));p<h&&(d=0,o=fe(s),h=p)}Re(t,o)}function Fe(t,e,n){return c.Z(e,(function(e){return ge(t,e,n)}))}function $e(t,e){var n=new h.k;r.Z(t,(function(t){var i=t.graph().root,a=Me(t,i,n,e);r.Z(a.vs,(function(e,n){t.node(e).order=n})),function(t,e,n){var i,a={};r.Z(n,(function(n){for(var r,s,o=t.parent(n);o;){if((r=t.parent(o))?(s=a[r],a[r]=o):(s=i,i=o),s&&s!==o)return void e.setEdge(s,o);o=r}}))}(t,n,a.vs)}))}function Re(t,e){r.Z(e,(function(e){r.Z(e,(function(e,n){t.node(e).order=n}))}))}function Ze(t){var e=function(t){var e={},n=0;function i(a){var s=n;r.Z(t.children(a),i),e[a]={low:s,lim:n++}}return r.Z(t.children(),i),e}(t);r.Z(t.graph().dummyChains,(function(n){for(var r=t.node(n),i=r.edgeObj,a=function(t,e,n,r){var i,a,s=[],o=[],c=Math.min(e[n].low,e[r].low),l=Math.max(e[n].lim,e[r].lim);i=n;do{i=t.parent(i),s.push(i)}while(i&&(e[i].low>c||l>e[i].lim));a=i,i=r;for(;(i=t.parent(i))!==a;)o.push(i);return{path:s.concat(o.reverse()),lca:a}}(t,e,i.v,i.w),s=a.path,o=a.lca,c=0,l=s[c],h=!0;n!==i.w;){if(r=t.node(n),h){for(;(l=s[c])!==o&&t.node(l).maxRank<r.rank;)c++;l===o&&(h=!1)}if(!h){for(;c<s.length-1&&t.node(l=s[c+1]).minRank<=r.rank;)c++;l=s[c]}t.setParent(n,l),n=t.successors(n)[0]}}))}var Pe=n(8882);const je=function(t,e){return null==t?t:(0,w.Z)(t,(0,Pe.Z)(e),R.Z)};function Ye(t,e){var n={};return he.Z(e,(function(e,i){var a=0,s=0,o=e.length,c=Q(i);return r.Z(i,(function(e,l){var h=function(t,e){if(t.node(e).dummy)return Ft(t.predecessors(e),(function(e){return t.node(e).dummy}))}(t,e),u=h?t.node(h).order:o;(h||e===c)&&(r.Z(i.slice(s,l+1),(function(e){r.Z(t.predecessors(e),(function(r){var i=t.node(r),s=i.order;!(s<a||u<s)||i.dummy&&t.node(e).dummy||ze(n,r,e)}))})),s=l+1,a=u)})),i})),n}function ze(t,e,n){if(e>n){var r=e;e=n,n=r}var i=t[e];i||(t[e]=i={}),i[n]=!0}function Ue(t,e,n){if(e>n){var r=e;e=n,n=r}return a.Z(t[e],n)}function We(t,e,n,i,s){var o={},c=function(t,e,n,i){var s=new h.k,o=t.graph(),c=function(t,e,n){return function(r,i,s){var o,c=r.node(i),l=r.node(s),h=0;if(h+=c.width/2,a.Z(c,"labelpos"))switch(c.labelpos.toLowerCase()){case"l":o=-c.width/2;break;case"r":o=c.width/2}if(o&&(h+=n?o:-o),o=0,h+=(c.dummy?e:t)/2,h+=(l.dummy?e:t)/2,h+=l.width/2,a.Z(l,"labelpos"))switch(l.labelpos.toLowerCase()){case"l":o=l.width/2;break;case"r":o=-l.width/2}return o&&(h+=n?o:-o),o=0,h}}(o.nodesep,o.edgesep,i);return r.Z(e,(function(e){var i;r.Z(e,(function(e){var r=n[e];if(s.setNode(r),i){var a=n[i],o=s.edge(a,r);s.setEdge(a,r,Math.max(c(t,e,i),o||0))}i=e}))})),s}(t,e,n,s),l=s?"borderLeft":"borderRight";function u(t,e){for(var n=c.nodes(),r=n.pop(),i={};r;)i[r]?t(r):(i[r]=!0,n.push(r),n=n.concat(e(r))),r=n.pop()}return u((function(t){o[t]=c.inEdges(t).reduce((function(t,e){return Math.max(t,o[e.v]+c.edge(e))}),0)}),c.predecessors.bind(c)),u((function(e){var n=c.outEdges(e).reduce((function(t,e){return Math.min(t,o[e.w]-c.edge(e))}),Number.POSITIVE_INFINITY),r=t.node(e);n!==Number.POSITIVE_INFINITY&&r.borderType!==l&&(o[e]=Math.max(o[e],n))}),c.successors.bind(c)),r.Z(i,(function(t){o[t]=o[n[t]]})),o}function qe(t){var e,n=ht(t),i=U(Ye(t,n),function(t,e){var n={};function i(e,i,a,s,o){var c;r.Z(l.Z(i,a),(function(i){c=e[i],t.node(c).dummy&&r.Z(t.predecessors(c),(function(e){var r=t.node(e);r.dummy&&(r.order<s||r.order>o)&&ze(n,e,c)}))}))}return he.Z(e,(function(e,n){var a,s=-1,o=0;return r.Z(n,(function(r,c){if("border"===t.node(r).dummy){var l=t.predecessors(r);l.length&&(a=t.node(l[0]).order,i(n,o,c,s,a),o=c,s=a)}i(n,o,n.length,a,e.length)})),n})),n}(t,n)),a={};r.Z(["u","d"],(function(s){e="u"===s?n:le.Z(n).reverse(),r.Z(["l","r"],(function(n){"r"===n&&(e=c.Z(e,(function(t){return le.Z(t).reverse()})));var o=("u"===s?t.predecessors:t.successors).bind(t),l=function(t,e,n,i){var a={},s={},o={};return r.Z(e,(function(t){r.Z(t,(function(t,e){a[t]=t,s[t]=t,o[t]=e}))})),r.Z(e,(function(t){var e=-1;r.Z(t,(function(t){var r=i(t);if(r.length){r=Ae(r,(function(t){return o[t]}));for(var c=(r.length-1)/2,l=Math.floor(c),h=Math.ceil(c);l<=h;++l){var u=r[l];s[t]===t&&e<o[u]&&!Ue(n,t,u)&&(s[u]=t,s[t]=a[t]=a[u],e=o[u])}}}))})),{root:a,align:s}}(0,e,i,o),h=We(t,e,l.root,l.align,"r"===n);"r"===n&&(h=et(h,(function(t){return-t}))),a[s+n]=h}))}));var s=function(t,e){return kt(le.Z(e),(function(e){var n=Number.NEGATIVE_INFINITY,r=Number.POSITIVE_INFINITY;return je(e,(function(e,i){var a=function(t,e){return t.node(e).width}(t,i)/2;n=Math.max(e+a,n),r=Math.min(e-a,r)})),n-r}))}(t,a);return function(t,e){var n=le.Z(e),i=it(n),a=K(n);r.Z(["u","d"],(function(n){r.Z(["l","r"],(function(r){var s,o=n+r,c=t[o];if(c!==e){var l=le.Z(c);(s="l"===r?i-it(l):a-K(l))&&(t[o]=et(c,(function(t){return t+s})))}}))}))}(a,s),function(t,e){return et(t.ul,(function(n,r){if(e)return t[e.toLowerCase()][r];var i=Ae(c.Z(t,r));return(i[1]+i[2])/2}))}(a,t.graph().align)}function He(t){(function(t){var e=ht(t),n=t.graph().ranksep,i=0;r.Z(e,(function(e){var a=K(c.Z(e,(function(e){return t.node(e).height})));r.Z(e,(function(e){t.node(e).y=i+a/2})),i+=a+n}))})(t=ct(t)),r.Z(qe(t),(function(e,n){t.node(n).x=e}))}function Ve(t,e){var n=e&&e.debugTiming?pt:ft;n("layout",(function(){var e=n("  buildLayoutGraph",(function(){return function(t){var e=new h.k({multigraph:!0,compound:!0}),n=an(t.graph());return e.setGraph(U({},Xe,rn(n,Ge),W.Z(n,Ke))),r.Z(t.nodes(),(function(n){var r=an(t.node(n));e.setNode(n,q.Z(rn(r,Qe),Je)),e.setParent(n,t.parent(n))})),r.Z(t.edges(),(function(n){var r=an(t.edge(n));e.setEdge(n,U({},en,rn(r,tn),W.Z(r,nn)))})),e}(t)}));n("  runLayout",(function(){!function(t,e){e("    makeSpaceForEdgeLabels",(function(){!function(t){var e=t.graph();e.ranksep/=2,r.Z(t.edges(),(function(n){var r=t.edge(n);r.minlen*=2,"c"!==r.labelpos.toLowerCase()&&("TB"===e.rankdir||"BT"===e.rankdir?r.width+=r.labeloffset:r.height+=r.labeloffset)}))}(t)})),e("    removeSelfEdges",(function(){!function(t){r.Z(t.edges(),(function(e){if(e.v===e.w){var n=t.node(e.v);n.selfEdges||(n.selfEdges=[]),n.selfEdges.push({e:e,label:t.edge(e)}),t.removeEdge(e)}}))}(t)})),e("    acyclic",(function(){b(t)})),e("    nestingGraph.run",(function(){ue(t)})),e("    rank",(function(){se(ct(t))})),e("    injectEdgeLabelProxies",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.width&&n.height){var r=t.node(e.v),i={rank:(t.node(e.w).rank-r.rank)/2+r.rank,e:e};ot(t,"edge-proxy",i,"_ep")}}))}(t)})),e("    removeEmptyRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank}))),n=[];r.Z(t.nodes(),(function(r){var i=t.node(r).rank-e;n[i]||(n[i]=[]),n[i].push(r)}));var i=0,a=t.graph().nodeRankFactor;r.Z(n,(function(e,n){nt.Z(e)&&n%a!=0?--i:i&&r.Z(e,(function(e){t.node(e).rank+=i}))}))}(t)})),e("    nestingGraph.cleanup",(function(){!function(t){var e=t.graph();t.removeNode(e.nestingRoot),delete e.nestingRoot,r.Z(t.edges(),(function(e){t.edge(e).nestingEdge&&t.removeEdge(e)}))}(t)})),e("    normalizeRanks",(function(){!function(t){var e=it(c.Z(t.nodes(),(function(e){return t.node(e).rank})));r.Z(t.nodes(),(function(n){var r=t.node(n);a.Z(r,"rank")&&(r.rank-=e)}))}(t)})),e("    assignRankMinMax",(function(){!function(t){var e=0;r.Z(t.nodes(),(function(n){var r=t.node(n);r.borderTop&&(r.minRank=t.node(r.borderTop).rank,r.maxRank=t.node(r.borderBottom).rank,e=K(e,r.maxRank))})),t.graph().maxRank=e}(t)})),e("    removeEdgeLabelProxies",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);"edge-proxy"===n.dummy&&(t.edge(n.e).labelRank=n.rank,t.removeNode(e))}))}(t)})),e("    normalize.run",(function(){vt(t)})),e("    parentDummyChains",(function(){Ze(t)})),e("    addBorderSegments",(function(){!function(t){r.Z(t.children(),(function e(n){var i=t.children(n),s=t.node(n);if(i.length&&r.Z(i,e),a.Z(s,"minRank")){s.borderLeft=[],s.borderRight=[];for(var o=s.minRank,c=s.maxRank+1;o<c;++o)gt(t,"borderLeft","_bl",n,s,o),gt(t,"borderRight","_br",n,s,o)}}))}(t)})),e("    order",(function(){Ie(t)})),e("    insertSelfEdges",(function(){!function(t){var e=ht(t);r.Z(e,(function(e){var n=0;r.Z(e,(function(e,i){var a=t.node(e);a.order=i+n,r.Z(a.selfEdges,(function(e){ot(t,"selfedge",{width:e.label.width,height:e.label.height,rank:a.rank,order:i+ ++n,e:e.e,label:e.label},"_se")})),delete a.selfEdges}))}))}(t)})),e("    adjustCoordinateSystem",(function(){!function(t){var e=t.graph().rankdir.toLowerCase();"lr"!==e&&"rl"!==e||mt(t)}(t)})),e("    position",(function(){He(t)})),e("    positionSelfEdges",(function(){!function(t){r.Z(t.nodes(),(function(e){var n=t.node(e);if("selfedge"===n.dummy){var r=t.node(n.e.v),i=r.x+r.width/2,a=r.y,s=n.x-i,o=r.height/2;t.setEdge(n.e,n.label),t.removeNode(e),n.label.points=[{x:i+2*s/3,y:a-o},{x:i+5*s/6,y:a-o},{x:i+s,y:a},{x:i+5*s/6,y:a+o},{x:i+2*s/3,y:a+o}],n.label.x=n.x,n.label.y=n.y}}))}(t)})),e("    removeBorderNodes",(function(){!function(t){r.Z(t.nodes(),(function(e){if(t.children(e).length){var n=t.node(e),r=t.node(n.borderTop),i=t.node(n.borderBottom),a=t.node(Q(n.borderLeft)),s=t.node(Q(n.borderRight));n.width=Math.abs(s.x-a.x),n.height=Math.abs(i.y-r.y),n.x=a.x+n.width/2,n.y=r.y+n.height/2}})),r.Z(t.nodes(),(function(e){"border"===t.node(e).dummy&&t.removeNode(e)}))}(t)})),e("    normalize.undo",(function(){!function(t){r.Z(t.graph().dummyChains,(function(e){var n,r=t.node(e),i=r.edgeLabel;for(t.setEdge(r.edgeObj,i);r.dummy;)n=t.successors(e)[0],t.removeNode(e),i.points.push({x:r.x,y:r.y}),"edge-label"===r.dummy&&(i.x=r.x,i.y=r.y,i.width=r.width,i.height=r.height),e=n,r=t.node(e)}))}(t)})),e("    fixupEdgeLabelCoords",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(a.Z(n,"x"))switch("l"!==n.labelpos&&"r"!==n.labelpos||(n.width-=n.labeloffset),n.labelpos){case"l":n.x-=n.width/2+n.labeloffset;break;case"r":n.x+=n.width/2+n.labeloffset}}))}(t)})),e("    undoCoordinateSystem",(function(){yt(t)})),e("    translateGraph",(function(){!function(t){var e=Number.POSITIVE_INFINITY,n=0,i=Number.POSITIVE_INFINITY,s=0,o=t.graph(),c=o.marginx||0,l=o.marginy||0;function h(t){var r=t.x,a=t.y,o=t.width,c=t.height;e=Math.min(e,r-o/2),n=Math.max(n,r+o/2),i=Math.min(i,a-c/2),s=Math.max(s,a+c/2)}r.Z(t.nodes(),(function(e){h(t.node(e))})),r.Z(t.edges(),(function(e){var n=t.edge(e);a.Z(n,"x")&&h(n)})),e-=c,i-=l,r.Z(t.nodes(),(function(n){var r=t.node(n);r.x-=e,r.y-=i})),r.Z(t.edges(),(function(n){var s=t.edge(n);r.Z(s.points,(function(t){t.x-=e,t.y-=i})),a.Z(s,"x")&&(s.x-=e),a.Z(s,"y")&&(s.y-=i)})),o.width=n-e+c,o.height=s-i+l}(t)})),e("    assignNodeIntersects",(function(){!function(t){r.Z(t.edges(),(function(e){var n,r,i=t.edge(e),a=t.node(e.v),s=t.node(e.w);i.points?(n=i.points[0],r=i.points[i.points.length-1]):(i.points=[],n=s,r=a),i.points.unshift(lt(a,n)),i.points.push(lt(s,r))}))}(t)})),e("    reversePoints",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);n.reversed&&n.points.reverse()}))}(t)})),e("    acyclic.undo",(function(){!function(t){r.Z(t.edges(),(function(e){var n=t.edge(e);if(n.reversed){t.removeEdge(e);var r=n.forwardName;delete n.reversed,delete n.forwardName,t.setEdge(e.w,e.v,n,r)}}))}(t)}))}(e,n)})),n("  updateInputGraph",(function(){!function(t,e){r.Z(t.nodes(),(function(n){var r=t.node(n),i=e.node(n);r&&(r.x=i.x,r.y=i.y,e.children(n).length&&(r.width=i.width,r.height=i.height))})),r.Z(t.edges(),(function(n){var r=t.edge(n),i=e.edge(n);r.points=i.points,a.Z(i,"x")&&(r.x=i.x,r.y=i.y)})),t.graph().width=e.graph().width,t.graph().height=e.graph().height}(t,e)}))}))}var Ge=["nodesep","edgesep","ranksep","marginx","marginy"],Xe={ranksep:50,edgesep:20,nodesep:50,rankdir:"tb"},Ke=["acyclicer","ranker","rankdir","align"],Qe=["width","height"],Je={width:0,height:0},tn=["minlen","weight","width","height","labeloffset"],en={minlen:1,weight:1,width:0,height:0,labeloffset:10,labelpos:"r"},nn=["labelpos"];function rn(t,e){return et(W.Z(t,e),Number)}function an(t){var e={};return r.Z(t,(function(t,n){e[n.toLowerCase()]=t})),e}},2544:(t,e,n)=>{"use strict";n.d(e,{k:()=>D});var r=n(7452),i=n(2002),a=n(3234),s=n(7179),o=n(3445),c=n(9697),l=n(870),h=n(9360),u=n(626),d=n(9581),p=n(3001),f=n(1692);const g=function(t){return t!=t};const y=function(t,e,n){for(var r=n-1,i=t.length;++r<i;)if(t[r]===e)return r;return-1};const m=function(t,e,n){return e==e?y(t,e,n):(0,f.Z)(t,g,n)};const b=function(t,e){return!!(null==t?0:t.length)&&m(t,e,0)>-1};const _=function(t,e,n){for(var r=-1,i=null==t?0:t.length;++r<i;)if(n(e,t[r]))return!0;return!1};var x=n(9548),v=n(3203);const k=function(){};var w=n(6545),E=v.Z&&1/(0,w.Z)(new v.Z([,-0]))[1]==1/0?function(t){return new v.Z(t)}:k;const C=E;const T=function(t,e,n){var r=-1,i=b,a=t.length,s=!0,o=[],c=o;if(n)s=!1,i=_;else if(a>=200){var l=e?null:C(t);if(l)return(0,w.Z)(l);s=!1,i=x.Z,c=new p.Z}else c=e?[]:o;t:for(;++r<a;){var h=t[r],u=e?e(h):h;if(h=n||0!==h?h:0,s&&u==u){for(var d=c.length;d--;)if(c[d]===u)continue t;e&&c.push(u),o.push(h)}else i(c,u,n)||(c!==o&&c.push(u),o.push(h))}return o};var S=n(836);const A=(0,d.Z)((function(t){return T((0,u.Z)(t,1,S.Z,!0))}));var L=n(4148),B=n(2344),N="\0";class D{constructor(t={}){this._isDirected=!r.Z(t,"directed")||t.directed,this._isMultigraph=!!r.Z(t,"multigraph")&&t.multigraph,this._isCompound=!!r.Z(t,"compound")&&t.compound,this._label=void 0,this._defaultNodeLabelFn=i.Z(void 0),this._defaultEdgeLabelFn=i.Z(void 0),this._nodes={},this._isCompound&&(this._parent={},this._children={},this._children["\0"]={}),this._in={},this._preds={},this._out={},this._sucs={},this._edgeObjs={},this._edgeLabels={}}isDirected(){return this._isDirected}isMultigraph(){return this._isMultigraph}isCompound(){return this._isCompound}setGraph(t){return this._label=t,this}graph(){return this._label}setDefaultNodeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultNodeLabelFn=t,this}nodeCount(){return this._nodeCount}nodes(){return s.Z(this._nodes)}sources(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._in[e])}))}sinks(){var t=this;return o.Z(this.nodes(),(function(e){return c.Z(t._out[e])}))}setNodes(t,e){var n=arguments,r=this;return l.Z(t,(function(t){n.length>1?r.setNode(t,e):r.setNode(t)})),this}setNode(t,e){return r.Z(this._nodes,t)?(arguments.length>1&&(this._nodes[t]=e),this):(this._nodes[t]=arguments.length>1?e:this._defaultNodeLabelFn(t),this._isCompound&&(this._parent[t]=N,this._children[t]={},this._children["\0"][t]=!0),this._in[t]={},this._preds[t]={},this._out[t]={},this._sucs[t]={},++this._nodeCount,this)}node(t){return this._nodes[t]}hasNode(t){return r.Z(this._nodes,t)}removeNode(t){var e=this;if(r.Z(this._nodes,t)){var n=function(t){e.removeEdge(e._edgeObjs[t])};delete this._nodes[t],this._isCompound&&(this._removeFromParentsChildList(t),delete this._parent[t],l.Z(this.children(t),(function(t){e.setParent(t)})),delete this._children[t]),l.Z(s.Z(this._in[t]),n),delete this._in[t],delete this._preds[t],l.Z(s.Z(this._out[t]),n),delete this._out[t],delete this._sucs[t],--this._nodeCount}return this}setParent(t,e){if(!this._isCompound)throw new Error("Cannot set parent in a non-compound graph");if(h.Z(e))e=N;else{for(var n=e+="";!h.Z(n);n=this.parent(n))if(n===t)throw new Error("Setting "+e+" as parent of "+t+" would create a cycle");this.setNode(e)}return this.setNode(t),this._removeFromParentsChildList(t),this._parent[t]=e,this._children[e][t]=!0,this}_removeFromParentsChildList(t){delete this._children[this._parent[t]][t]}parent(t){if(this._isCompound){var e=this._parent[t];if(e!==N)return e}}children(t){if(h.Z(t)&&(t=N),this._isCompound){var e=this._children[t];if(e)return s.Z(e)}else{if(t===N)return this.nodes();if(this.hasNode(t))return[]}}predecessors(t){var e=this._preds[t];if(e)return s.Z(e)}successors(t){var e=this._sucs[t];if(e)return s.Z(e)}neighbors(t){var e=this.predecessors(t);if(e)return A(e,this.successors(t))}isLeaf(t){return 0===(this.isDirected()?this.successors(t):this.neighbors(t)).length}filterNodes(t){var e=new this.constructor({directed:this._isDirected,multigraph:this._isMultigraph,compound:this._isCompound});e.setGraph(this.graph());var n=this;l.Z(this._nodes,(function(n,r){t(r)&&e.setNode(r,n)})),l.Z(this._edgeObjs,(function(t){e.hasNode(t.v)&&e.hasNode(t.w)&&e.setEdge(t,n.edge(t))}));var r={};function i(t){var a=n.parent(t);return void 0===a||e.hasNode(a)?(r[t]=a,a):a in r?r[a]:i(a)}return this._isCompound&&l.Z(e.nodes(),(function(t){e.setParent(t,i(t))})),e}setDefaultEdgeLabel(t){return a.Z(t)||(t=i.Z(t)),this._defaultEdgeLabelFn=t,this}edgeCount(){return this._edgeCount}edges(){return L.Z(this._edgeObjs)}setPath(t,e){var n=this,r=arguments;return B.Z(t,(function(t,i){return r.length>1?n.setEdge(t,i,e):n.setEdge(t,i),i})),this}setEdge(){var t,e,n,i,a=!1,s=arguments[0];"object"==typeof s&&null!==s&&"v"in s?(t=s.v,e=s.w,n=s.name,2===arguments.length&&(i=arguments[1],a=!0)):(t=s,e=arguments[1],n=arguments[3],arguments.length>2&&(i=arguments[2],a=!0)),t=""+t,e=""+e,h.Z(n)||(n=""+n);var o=I(this._isDirected,t,e,n);if(r.Z(this._edgeLabels,o))return a&&(this._edgeLabels[o]=i),this;if(!h.Z(n)&&!this._isMultigraph)throw new Error("Cannot set a named edge when isMultigraph = false");this.setNode(t),this.setNode(e),this._edgeLabels[o]=a?i:this._defaultEdgeLabelFn(t,e,n);var c=function(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}var o={v:i,w:a};r&&(o.name=r);return o}(this._isDirected,t,e,n);return t=c.v,e=c.w,Object.freeze(c),this._edgeObjs[o]=c,O(this._preds[e],t),O(this._sucs[t],e),this._in[e][o]=c,this._out[t][o]=c,this._edgeCount++,this}edge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return this._edgeLabels[r]}hasEdge(t,e,n){var i=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n);return r.Z(this._edgeLabels,i)}removeEdge(t,e,n){var r=1===arguments.length?F(this._isDirected,arguments[0]):I(this._isDirected,t,e,n),i=this._edgeObjs[r];return i&&(t=i.v,e=i.w,delete this._edgeLabels[r],delete this._edgeObjs[r],M(this._preds[e],t),M(this._sucs[t],e),delete this._in[e][r],delete this._out[t][r],this._edgeCount--),this}inEdges(t,e){var n=this._in[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.v===e})):r}}outEdges(t,e){var n=this._out[t];if(n){var r=L.Z(n);return e?o.Z(r,(function(t){return t.w===e})):r}}nodeEdges(t,e){var n=this.inEdges(t,e);if(n)return n.concat(this.outEdges(t,e))}}function O(t,e){t[e]?t[e]++:t[e]=1}function M(t,e){--t[e]||delete t[e]}function I(t,e,n,r){var i=""+e,a=""+n;if(!t&&i>a){var s=i;i=a,a=s}return i+"\x01"+a+"\x01"+(h.Z(r)?"\0":r)}function F(t,e){return I(t,e.v,e.w,e.name)}D.prototype._nodeCount=0,D.prototype._edgeCount=0},5625:(t,e,n)=>{"use strict";n.d(e,{k:()=>r.k});var r=n(2544)},9354:(t,e,n)=>{"use strict";n.d(e,{c:()=>o});var r=n(9360),i=n(8451);const a=function(t){return(0,i.Z)(t,4)};var s=n(3836);n(2544);function o(t){var e={options:{directed:t.isDirected(),multigraph:t.isMultigraph(),compound:t.isCompound()},nodes:c(t),edges:l(t)};return r.Z(t.graph())||(e.value=a(t.graph())),e}function c(t){return s.Z(t.nodes(),(function(e){var n=t.node(e),i=t.parent(e),a={v:e};return r.Z(n)||(a.value=n),r.Z(i)||(a.parent=i),a}))}function l(t){return s.Z(t.edges(),(function(e){var n=t.edge(e),i={v:e.v,w:e.w};return r.Z(e.name)||(i.name=e.name),r.Z(n)||(i.value=n),i}))}},1518:(t,e,n)=>{"use strict";n.d(e,{sY:()=>N});var r=n(9373),i=n(7452),a=n(3688),s=n(870),o=n(277),c=n(6225),l={normal:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},vee:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 0 L 10 5 L 0 10 L 4 5 z").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])},undirected:function(t,e,n,r){var i=t.append("marker").attr("id",e).attr("viewBox","0 0 10 10").attr("refX",9).attr("refY",5).attr("markerUnits","strokeWidth").attr("markerWidth",8).attr("markerHeight",6).attr("orient","auto").append("path").attr("d","M 0 5 L 10 5").style("stroke-width",1).style("stroke-dasharray","1,0");c.bg(i,n[r+"Style"]),n[r+"Class"]&&i.attr("class",n[r+"Class"])}};function h(t){l=t}var u=n(3349);function d(t,e,n){var r=e.label,i=t.append("g");"svg"===e.labelType?function(t,e){var n=t;n.node().appendChild(e.label),c.bg(n,e.labelStyle)}(i,e):"string"!=typeof r||"html"===e.labelType?(0,u.a)(i,e):function(t,e){for(var n=t.append("text"),r=function(t){for(var e,n="",r=!1,i=0;i<t.length;++i)e=t[i],r?(n+="n"===e?"\n":e,r=!1):"\\"===e?r=!0:n+=e;return n}(e.label).split("\n"),i=0;i<r.length;i++)n.append("tspan").attr("xml:space","preserve").attr("dy","1em").attr("x","1").text(r[i]);c.bg(n,e.labelStyle)}(i,e);var a,s=i.node().getBBox();switch(n){case"top":a=-e.height/2;break;case"bottom":a=e.height/2-s.height;break;default:a=-s.height/2}return i.attr("transform","translate("+-s.width/2+","+a+")"),i}var p=function(t,e){var n=e.nodes().filter((function(t){return c.bF(e,t)})),i=t.selectAll("g.cluster").data(n,(function(t){return t}));c.WR(i.exit(),e).style("opacity",0).remove();var a=i.enter().append("g").attr("class","cluster").attr("id",(function(t){return e.node(t).id})).style("opacity",0).each((function(t){var n=e.node(t),i=r.Ys(this);r.Ys(this).append("rect"),d(i.append("g").attr("class","label"),n,n.clusterLabelPos)}));return i=i.merge(a),(i=c.WR(i,e).style("opacity",1)).selectAll("rect").each((function(t){var n=e.node(t),i=r.Ys(this);c.bg(i,n.style)})),i};function f(t){p=t}let g=function(t,e){var n,a=t.selectAll("g.edgeLabel").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0);return a.exit().remove(),a.enter().append("g").classed("edgeLabel",!0).style("opacity",0),(a=t.selectAll("g.edgeLabel")).each((function(t){var n=r.Ys(this);n.select(".label").remove();var a=e.edge(t),s=d(n,e.edge(t),0).classed("label",!0),o=s.node().getBBox();a.labelId&&s.attr("id",a.labelId),i.Z(a,"width")||(a.width=o.width),i.Z(a,"height")||(a.height=o.height)})),n=a.exit?a.exit():a.selectAll(null),c.WR(n,e).style("opacity",0).remove(),a};function y(t){g=t}var m=n(6749),b=n(4379);function _(t,e){return t.intersect(e)}var x=function(t,e,n){var i=t.selectAll("g.edgePath").data(e.edges(),(function(t){return c.O1(t)})).classed("update",!0),a=function(t,e){var n=t.enter().append("g").attr("class","edgePath").style("opacity",0);return n.append("path").attr("class","path").attr("d",(function(t){var n=e.edge(t),r=e.node(t.v).elem;return k(n,b.Z(n.points.length).map((function(){return e=(t=r).getBBox(),{x:(n=t.ownerSVGElement.getScreenCTM().inverse().multiply(t.getScreenCTM()).translate(e.width/2,e.height/2)).e,y:n.f};var t,e,n})))})),n.append("defs"),n}(i,e);!function(t,e){var n=t.exit();c.WR(n,e).style("opacity",0).remove()}(i,e);var s=void 0!==i.merge?i.merge(a):i;return c.WR(s,e).style("opacity",1),s.each((function(t){var n=r.Ys(this),i=e.edge(t);i.elem=this,i.id&&n.attr("id",i.id),c.$p(n,i.class,(n.classed("update")?"update ":"")+"edgePath")})),s.selectAll("path.path").each((function(t){var n=e.edge(t);n.arrowheadId=m.Z("arrowhead");var i=r.Ys(this).attr("marker-end",(function(){return"url("+(t=location.href,e=n.arrowheadId,t.split("#")[0]+"#"+e+")");var t,e})).style("fill","none");c.WR(i,e).attr("d",(function(t){return function(t,e){var n=t.edge(e),r=t.node(e.v),i=t.node(e.w),a=n.points.slice(1,n.points.length-1);return a.unshift(_(r,a[0])),a.push(_(i,a[a.length-1])),k(n,a)}(e,t)})),c.bg(i,n.style)})),s.selectAll("defs *").remove(),s.selectAll("defs").each((function(t){var i=e.edge(t);(0,n[i.arrowhead])(r.Ys(this),i.arrowheadId,i,"arrowhead")})),s};function v(t){x=t}function k(t,e){var n=(r.jvg||r.YPS.line)().x((function(t){return t.x})).y((function(t){return t.y}));return(n.curve||n.interpolate)(t.curve),n(e)}var w=n(1666),E=function(t,e,n){var a,s=e.nodes().filter((function(t){return!c.bF(e,t)})),o=t.selectAll("g.node").data(s,(function(t){return t})).classed("update",!0);return o.exit().remove(),o.enter().append("g").attr("class","node").style("opacity",0),(o=t.selectAll("g.node")).each((function(t){var a=e.node(t),s=r.Ys(this);c.$p(s,a.class,(s.classed("update")?"update ":"")+"node"),s.select("g.label").remove();var o=s.append("g").attr("class","label"),l=d(o,a),h=n[a.shape],u=w.Z(l.node().getBBox(),"width","height");a.elem=this,a.id&&s.attr("id",a.id),a.labelId&&o.attr("id",a.labelId),i.Z(a,"width")&&(u.width=a.width),i.Z(a,"height")&&(u.height=a.height),u.width+=a.paddingLeft+a.paddingRight,u.height+=a.paddingTop+a.paddingBottom,o.attr("transform","translate("+(a.paddingLeft-a.paddingRight)/2+","+(a.paddingTop-a.paddingBottom)/2+")");var p=r.Ys(this);p.select(".label-container").remove();var f=h(p,u,a).classed("label-container",!0);c.bg(f,a.style);var g=f.node().getBBox();a.width=g.width,a.height=g.height})),a=o.exit?o.exit():o.selectAll(null),c.WR(a,e).style("opacity",0).remove(),o};function C(t){E=t}function T(t,e,n,r){var i=t.x,a=t.y,s=i-r.x,o=a-r.y,c=Math.sqrt(e*e*o*o+n*n*s*s),l=Math.abs(e*n*s/c);r.x<i&&(l=-l);var h=Math.abs(e*n*o/c);return r.y<a&&(h=-h),{x:i+l,y:a+h}}var S=n(3352),A=n(2930),L={rect:function(t,e,n){var r=t.insert("rect",":first-child").attr("rx",n.rx).attr("ry",n.ry).attr("x",-e.width/2).attr("y",-e.height/2).attr("width",e.width).attr("height",e.height);return n.intersect=function(t){return(0,A.q)(n,t)},r},ellipse:function(t,e,n){var r=e.width/2,i=e.height/2,a=t.insert("ellipse",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("rx",r).attr("ry",i);return n.intersect=function(t){return T(n,r,i,t)},a},circle:function(t,e,n){var r=Math.max(e.width,e.height)/2,i=t.insert("circle",":first-child").attr("x",-e.width/2).attr("y",-e.height/2).attr("r",r);return n.intersect=function(t){return function(t,e,n){return T(t,e,e,n)}(n,r,t)},i},diamond:function(t,e,n){var r=e.width*Math.SQRT2/2,i=e.height*Math.SQRT2/2,a=[{x:0,y:-i},{x:-r,y:0},{x:0,y:i},{x:r,y:0}],s=t.insert("polygon",":first-child").attr("points",a.map((function(t){return t.x+","+t.y})).join(" "));return n.intersect=function(t){return(0,S.A)(n,a,t)},s}};function B(t){L=t}function N(){var t=function(t,e){!function(t){t.nodes().forEach((function(e){var n=t.node(e);i.Z(n,"label")||t.children(e).length||(n.label=e),i.Z(n,"paddingX")&&a.Z(n,{paddingLeft:n.paddingX,paddingRight:n.paddingX}),i.Z(n,"paddingY")&&a.Z(n,{paddingTop:n.paddingY,paddingBottom:n.paddingY}),i.Z(n,"padding")&&a.Z(n,{paddingLeft:n.padding,paddingRight:n.padding,paddingTop:n.padding,paddingBottom:n.padding}),a.Z(n,D),s.Z(["paddingLeft","paddingRight","paddingTop","paddingBottom"],(function(t){n[t]=Number(n[t])})),i.Z(n,"width")&&(n._prevWidth=n.width),i.Z(n,"height")&&(n._prevHeight=n.height)})),t.edges().forEach((function(e){var n=t.edge(e);i.Z(n,"label")||(n.label=""),a.Z(n,O)}))}(e);var n=M(t,"output"),h=M(n,"clusters"),u=M(n,"edgePaths"),d=g(M(n,"edgeLabels"),e),f=E(M(n,"nodes"),e,L);(0,o.bK)(e),function(t,e){function n(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(f,e),function(t,e){function n(t){var n=e.edge(t);return i.Z(n,"x")?"translate("+n.x+","+n.y+")":""}t.filter((function(){return!r.Ys(this).classed("update")})).attr("transform",n),c.WR(t,e).style("opacity",1).attr("transform",n)}(d,e),x(u,e,l),function(t,e){var n=t.filter((function(){return!r.Ys(this).classed("update")}));function i(t){var n=e.node(t);return"translate("+n.x+","+n.y+")"}n.attr("transform",i),c.WR(t,e).style("opacity",1).attr("transform",i),c.WR(n.selectAll("rect"),e).attr("width",(function(t){return e.node(t).width})).attr("height",(function(t){return e.node(t).height})).attr("x",(function(t){return-e.node(t).width/2})).attr("y",(function(t){return-e.node(t).height/2}))}(p(h,e),e),function(t){s.Z(t.nodes(),(function(e){var n=t.node(e);i.Z(n,"_prevWidth")?n.width=n._prevWidth:delete n.width,i.Z(n,"_prevHeight")?n.height=n._prevHeight:delete n.height,delete n._prevWidth,delete n._prevHeight}))}(e)};return t.createNodes=function(e){return arguments.length?(C(e),t):E},t.createClusters=function(e){return arguments.length?(f(e),t):p},t.createEdgeLabels=function(e){return arguments.length?(y(e),t):g},t.createEdgePaths=function(e){return arguments.length?(v(e),t):x},t.shapes=function(e){return arguments.length?(B(e),t):L},t.arrows=function(e){return arguments.length?(h(e),t):l},t}var D={paddingLeft:10,paddingRight:10,paddingTop:10,paddingBottom:10,rx:0,ry:0,shape:"rect"},O={arrowhead:"normal",curve:r.c_6};function M(t,e){var n=t.select("g."+e);return n.empty()&&(n=t.append("g").attr("class",e)),n}n(5625)},1883:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(1691),i=n(2142);const a=class{constructor(){this.type=i.w.ALL}get(){return this.type}set(t){if(this.type&&this.type!==t)throw new Error("Cannot change both RGB and HSL channels at the same time");this.type=t}reset(){this.type=i.w.ALL}is(t){return this.type===t}};const s=new class{constructor(t,e){this.color=e,this.changed=!1,this.data=t,this.type=new a}set(t,e){return this.color=e,this.changed=!1,this.data=t,this.type.type=i.w.ALL,this}_ensureHSL(){const t=this.data,{h:e,s:n,l:i}=t;void 0===e&&(t.h=r.Z.channel.rgb2hsl(t,"h")),void 0===n&&(t.s=r.Z.channel.rgb2hsl(t,"s")),void 0===i&&(t.l=r.Z.channel.rgb2hsl(t,"l"))}_ensureRGB(){const t=this.data,{r:e,g:n,b:i}=t;void 0===e&&(t.r=r.Z.channel.hsl2rgb(t,"r")),void 0===n&&(t.g=r.Z.channel.hsl2rgb(t,"g")),void 0===i&&(t.b=r.Z.channel.hsl2rgb(t,"b"))}get r(){const t=this.data,e=t.r;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"r")):e}get g(){const t=this.data,e=t.g;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"g")):e}get b(){const t=this.data,e=t.b;return this.type.is(i.w.HSL)||void 0===e?(this._ensureHSL(),r.Z.channel.hsl2rgb(t,"b")):e}get h(){const t=this.data,e=t.h;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"h")):e}get s(){const t=this.data,e=t.s;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"s")):e}get l(){const t=this.data,e=t.l;return this.type.is(i.w.RGB)||void 0===e?(this._ensureRGB(),r.Z.channel.rgb2hsl(t,"l")):e}get a(){return this.data.a}set r(t){this.type.set(i.w.RGB),this.changed=!0,this.data.r=t}set g(t){this.type.set(i.w.RGB),this.changed=!0,this.data.g=t}set b(t){this.type.set(i.w.RGB),this.changed=!0,this.data.b=t}set h(t){this.type.set(i.w.HSL),this.changed=!0,this.data.h=t}set s(t){this.type.set(i.w.HSL),this.changed=!0,this.data.s=t}set l(t){this.type.set(i.w.HSL),this.changed=!0,this.data.l=t}set a(t){this.changed=!0,this.data.a=t}}({r:0,g:0,b:0,a:0},"transparent")},1610:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=n(1883),i=n(2142);const a={re:/^#((?:[a-f0-9]{2}){2,4}|[a-f0-9]{3})$/i,parse:t=>{if(35!==t.charCodeAt(0))return;const e=t.match(a.re);if(!e)return;const n=e[1],i=parseInt(n,16),s=n.length,o=s%4==0,c=s>4,l=c?1:17,h=c?8:4,u=o?0:-1,d=c?255:15;return r.Z.set({r:(i>>h*(u+3)&d)*l,g:(i>>h*(u+2)&d)*l,b:(i>>h*(u+1)&d)*l,a:o?(i&d)*l/255:1},t)},stringify:t=>{const{r:e,g:n,b:r,a:a}=t;return a<1?`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}${i.Q[Math.round(255*a)]}`:`#${i.Q[Math.round(e)]}${i.Q[Math.round(n)]}${i.Q[Math.round(r)]}`}},s=a;var o=n(1691);const c={re:/^hsla?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(?:deg|grad|rad|turn)?)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?%)(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e-?\d+)?(%)?))?\s*?\)$/i,hueRe:/^(.+?)(deg|grad|rad|turn)$/i,_hue2deg:t=>{const e=t.match(c.hueRe);if(e){const[,t,n]=e;switch(n){case"grad":return o.Z.channel.clamp.h(.9*parseFloat(t));case"rad":return o.Z.channel.clamp.h(180*parseFloat(t)/Math.PI);case"turn":return o.Z.channel.clamp.h(360*parseFloat(t))}}return o.Z.channel.clamp.h(parseFloat(t))},parse:t=>{const e=t.charCodeAt(0);if(104!==e&&72!==e)return;const n=t.match(c.re);if(!n)return;const[,i,a,s,l,h]=n;return r.Z.set({h:c._hue2deg(i),s:o.Z.channel.clamp.s(parseFloat(a)),l:o.Z.channel.clamp.l(parseFloat(s)),a:l?o.Z.channel.clamp.a(h?parseFloat(l)/100:parseFloat(l)):1},t)},stringify:t=>{const{h:e,s:n,l:r,a:i}=t;return i<1?`hsla(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%, ${i})`:`hsl(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}%, ${o.Z.lang.round(r)}%)`}},l=c,h={colors:{aliceblue:"#f0f8ff",antiquewhite:"#faebd7",aqua:"#00ffff",aquamarine:"#7fffd4",azure:"#f0ffff",beige:"#f5f5dc",bisque:"#ffe4c4",black:"#000000",blanchedalmond:"#ffebcd",blue:"#0000ff",blueviolet:"#8a2be2",brown:"#a52a2a",burlywood:"#deb887",cadetblue:"#5f9ea0",chartreuse:"#7fff00",chocolate:"#d2691e",coral:"#ff7f50",cornflowerblue:"#6495ed",cornsilk:"#fff8dc",crimson:"#dc143c",cyanaqua:"#00ffff",darkblue:"#00008b",darkcyan:"#008b8b",darkgoldenrod:"#b8860b",darkgray:"#a9a9a9",darkgreen:"#006400",darkgrey:"#a9a9a9",darkkhaki:"#bdb76b",darkmagenta:"#8b008b",darkolivegreen:"#556b2f",darkorange:"#ff8c00",darkorchid:"#9932cc",darkred:"#8b0000",darksalmon:"#e9967a",darkseagreen:"#8fbc8f",darkslateblue:"#483d8b",darkslategray:"#2f4f4f",darkslategrey:"#2f4f4f",darkturquoise:"#00ced1",darkviolet:"#9400d3",deeppink:"#ff1493",deepskyblue:"#00bfff",dimgray:"#696969",dimgrey:"#696969",dodgerblue:"#1e90ff",firebrick:"#b22222",floralwhite:"#fffaf0",forestgreen:"#228b22",fuchsia:"#ff00ff",gainsboro:"#dcdcdc",ghostwhite:"#f8f8ff",gold:"#ffd700",goldenrod:"#daa520",gray:"#808080",green:"#008000",greenyellow:"#adff2f",grey:"#808080",honeydew:"#f0fff0",hotpink:"#ff69b4",indianred:"#cd5c5c",indigo:"#4b0082",ivory:"#fffff0",khaki:"#f0e68c",lavender:"#e6e6fa",lavenderblush:"#fff0f5",lawngreen:"#7cfc00",lemonchiffon:"#fffacd",lightblue:"#add8e6",lightcoral:"#f08080",lightcyan:"#e0ffff",lightgoldenrodyellow:"#fafad2",lightgray:"#d3d3d3",lightgreen:"#90ee90",lightgrey:"#d3d3d3",lightpink:"#ffb6c1",lightsalmon:"#ffa07a",lightseagreen:"#20b2aa",lightskyblue:"#87cefa",lightslategray:"#778899",lightslategrey:"#778899",lightsteelblue:"#b0c4de",lightyellow:"#ffffe0",lime:"#00ff00",limegreen:"#32cd32",linen:"#faf0e6",magenta:"#ff00ff",maroon:"#800000",mediumaquamarine:"#66cdaa",mediumblue:"#0000cd",mediumorchid:"#ba55d3",mediumpurple:"#9370db",mediumseagreen:"#3cb371",mediumslateblue:"#7b68ee",mediumspringgreen:"#00fa9a",mediumturquoise:"#48d1cc",mediumvioletred:"#c71585",midnightblue:"#191970",mintcream:"#f5fffa",mistyrose:"#ffe4e1",moccasin:"#ffe4b5",navajowhite:"#ffdead",navy:"#000080",oldlace:"#fdf5e6",olive:"#808000",olivedrab:"#6b8e23",orange:"#ffa500",orangered:"#ff4500",orchid:"#da70d6",palegoldenrod:"#eee8aa",palegreen:"#98fb98",paleturquoise:"#afeeee",palevioletred:"#db7093",papayawhip:"#ffefd5",peachpuff:"#ffdab9",peru:"#cd853f",pink:"#ffc0cb",plum:"#dda0dd",powderblue:"#b0e0e6",purple:"#800080",rebeccapurple:"#663399",red:"#ff0000",rosybrown:"#bc8f8f",royalblue:"#4169e1",saddlebrown:"#8b4513",salmon:"#fa8072",sandybrown:"#f4a460",seagreen:"#2e8b57",seashell:"#fff5ee",sienna:"#a0522d",silver:"#c0c0c0",skyblue:"#87ceeb",slateblue:"#6a5acd",slategray:"#708090",slategrey:"#708090",snow:"#fffafa",springgreen:"#00ff7f",tan:"#d2b48c",teal:"#008080",thistle:"#d8bfd8",transparent:"#00000000",turquoise:"#40e0d0",violet:"#ee82ee",wheat:"#f5deb3",white:"#ffffff",whitesmoke:"#f5f5f5",yellow:"#ffff00",yellowgreen:"#9acd32"},parse:t=>{t=t.toLowerCase();const e=h.colors[t];if(e)return s.parse(e)},stringify:t=>{const e=s.stringify(t);for(const n in h.colors)if(h.colors[n]===e)return n}},u=h,d={re:/^rgba?\(\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))\s*?(?:,|\s)\s*?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?))(?:\s*?(?:,|\/)\s*?\+?(-?(?:\d+(?:\.\d+)?|(?:\.\d+))(?:e\d+)?(%?)))?\s*?\)$/i,parse:t=>{const e=t.charCodeAt(0);if(114!==e&&82!==e)return;const n=t.match(d.re);if(!n)return;const[,i,a,s,c,l,h,u,p]=n;return r.Z.set({r:o.Z.channel.clamp.r(a?2.55*parseFloat(i):parseFloat(i)),g:o.Z.channel.clamp.g(c?2.55*parseFloat(s):parseFloat(s)),b:o.Z.channel.clamp.b(h?2.55*parseFloat(l):parseFloat(l)),a:u?o.Z.channel.clamp.a(p?parseFloat(u)/100:parseFloat(u)):1},t)},stringify:t=>{const{r:e,g:n,b:r,a:i}=t;return i<1?`rgba(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)}, ${o.Z.lang.round(i)})`:`rgb(${o.Z.lang.round(e)}, ${o.Z.lang.round(n)}, ${o.Z.lang.round(r)})`}},p=d,f={format:{keyword:h,hex:s,rgb:d,rgba:d,hsl:c,hsla:c},parse:t=>{if("string"!=typeof t)return t;const e=s.parse(t)||p.parse(t)||l.parse(t)||u.parse(t);if(e)return e;throw new Error(`Unsupported color format: "${t}"`)},stringify:t=>!t.changed&&t.color?t.color:t.type.is(i.w.HSL)||void 0===t.data.r?l.stringify(t):t.a<1||!Number.isInteger(t.r)||!Number.isInteger(t.g)||!Number.isInteger(t.b)?p.stringify(t):s.stringify(t)},g=f},2142:(t,e,n)=>{"use strict";n.d(e,{Q:()=>i,w:()=>a});var r=n(1691);const i={};for(let s=0;s<=255;s++)i[s]=r.Z.unit.dec2hex(s);const a={ALL:0,RGB:1,HSL:2}},1506:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1691),i=n(1610);const a=(t,e,n)=>{const a=i.Z.parse(t),s=a[e],o=r.Z.channel.clamp[e](s+n);return s!==o&&(a[e]=o),i.Z.stringify(a)}},7201:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",-e)},5920:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1506);const i=(t,e)=>(0,r.Z)(t,"l",e)},1691:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});const r={min:{r:0,g:0,b:0,s:0,l:0,a:0},max:{r:255,g:255,b:255,h:360,s:100,l:100,a:1},clamp:{r:t=>t>=255?255:t<0?0:t,g:t=>t>=255?255:t<0?0:t,b:t=>t>=255?255:t<0?0:t,h:t=>t%360,s:t=>t>=100?100:t<0?0:t,l:t=>t>=100?100:t<0?0:t,a:t=>t>=1?1:t<0?0:t},toLinear:t=>{const e=t/255;return t>.03928?Math.pow((e+.055)/1.055,2.4):e/12.92},hue2rgb:(t,e,n)=>(n<0&&(n+=1),n>1&&(n-=1),n<1/6?t+6*(e-t)*n:n<.5?e:n<2/3?t+(e-t)*(2/3-n)*6:t),hsl2rgb:({h:t,s:e,l:n},i)=>{if(!e)return 2.55*n;t/=360,e/=100;const a=(n/=100)<.5?n*(1+e):n+e-n*e,s=2*n-a;switch(i){case"r":return 255*r.hue2rgb(s,a,t+1/3);case"g":return 255*r.hue2rgb(s,a,t);case"b":return 255*r.hue2rgb(s,a,t-1/3)}},rgb2hsl:({r:t,g:e,b:n},r)=>{t/=255,e/=255,n/=255;const i=Math.max(t,e,n),a=Math.min(t,e,n),s=(i+a)/2;if("l"===r)return 100*s;if(i===a)return 0;const o=i-a;if("s"===r)return 100*(s>.5?o/(2-i-a):o/(i+a));switch(i){case t:return 60*((e-n)/o+(e<n?6:0));case e:return 60*((n-t)/o+2);case n:return 60*((t-e)/o+4);default:return-1}}},i={channel:r,lang:{clamp:(t,e,n)=>e>n?Math.min(e,Math.max(n,t)):Math.min(n,Math.max(e,t)),round:t=>Math.round(1e10*t)/1e10},unit:{dec2hex:t=>{const e=Math.round(t).toString(16);return e.length>1?e:`0${e}`}}}},7308:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});const r=function(){this.__data__=[],this.size=0};var i=n(9651);const a=function(t,e){for(var n=t.length;n--;)if((0,i.Z)(t[n][0],e))return n;return-1};var s=Array.prototype.splice;const o=function(t){var e=this.__data__,n=a(e,t);return!(n<0)&&(n==e.length-1?e.pop():s.call(e,n,1),--this.size,!0)};const c=function(t){var e=this.__data__,n=a(e,t);return n<0?void 0:e[n][1]};const l=function(t){return a(this.__data__,t)>-1};const h=function(t,e){var n=this.__data__,r=a(n,t);return r<0?(++this.size,n.push([t,e])):n[r][1]=e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=r,u.prototype.delete=o,u.prototype.get=c,u.prototype.has=l,u.prototype.set=h;const d=u},6183:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Map")},7834:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});const r=(0,n(2508).Z)(Object,"create");const i=function(){this.__data__=r?r(null):{},this.size=0};const a=function(t){var e=this.has(t)&&delete this.__data__[t];return this.size-=e?1:0,e};var s=Object.prototype.hasOwnProperty;const o=function(t){var e=this.__data__;if(r){var n=e[t];return"__lodash_hash_undefined__"===n?void 0:n}return s.call(e,t)?e[t]:void 0};var c=Object.prototype.hasOwnProperty;const l=function(t){var e=this.__data__;return r?void 0!==e[t]:c.call(e,t)};const h=function(t,e){var n=this.__data__;return this.size+=this.has(t)?0:1,n[t]=r&&void 0===e?"__lodash_hash_undefined__":e,this};function u(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=o,u.prototype.has=l,u.prototype.set=h;const d=u;var p=n(7308),f=n(6183);const g=function(){this.size=0,this.__data__={hash:new d,map:new(f.Z||p.Z),string:new d}};const y=function(t){var e=typeof t;return"string"==e||"number"==e||"symbol"==e||"boolean"==e?"__proto__"!==t:null===t};const m=function(t,e){var n=t.__data__;return y(e)?n["string"==typeof e?"string":"hash"]:n.map};const b=function(t){var e=m(this,t).delete(t);return this.size-=e?1:0,e};const _=function(t){return m(this,t).get(t)};const x=function(t){return m(this,t).has(t)};const v=function(t,e){var n=m(this,t),r=n.size;return n.set(t,e),this.size+=n.size==r?0:1,this};function k(t){var e=-1,n=null==t?0:t.length;for(this.clear();++e<n;){var r=t[e];this.set(r[0],r[1])}}k.prototype.clear=g,k.prototype.delete=b,k.prototype.get=_,k.prototype.has=x,k.prototype.set=v;const w=k},3203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"Set")},3001:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7834);const i=function(t){return this.__data__.set(t,"__lodash_hash_undefined__"),this};const a=function(t){return this.__data__.has(t)};function s(t){var e=-1,n=null==t?0:t.length;for(this.__data__=new r.Z;++e<n;)this.add(t[e])}s.prototype.add=s.prototype.push=i,s.prototype.has=a;const o=s},1667:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7308);const i=function(){this.__data__=new r.Z,this.size=0};const a=function(t){var e=this.__data__,n=e.delete(t);return this.size=e.size,n};const s=function(t){return this.__data__.get(t)};const o=function(t){return this.__data__.has(t)};var c=n(6183),l=n(7834);const h=function(t,e){var n=this.__data__;if(n instanceof r.Z){var i=n.__data__;if(!c.Z||i.length<199)return i.push([t,e]),this.size=++n.size,this;n=this.__data__=new l.Z(i)}return n.set(t,e),this.size=n.size,this};function u(t){var e=this.__data__=new r.Z(t);this.size=e.size}u.prototype.clear=i,u.prototype.delete=a,u.prototype.get=s,u.prototype.has=o,u.prototype.set=h;const d=u},7685:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Symbol},7623:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=n(6092).Z.Uint8Array},6579:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r&&!1!==e(t[n],n,t););return t}},8774:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=0,a=[];++n<r;){var s=t[n];e(s,n,t)&&(a[i++]=s)}return a}},7668:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});const r=function(t,e){for(var n=-1,r=Array(t);++n<t;)r[n]=e(n);return r};var i=n(9169),a=n(7771),s=n(7008),o=n(6009),c=n(8843),l=Object.prototype.hasOwnProperty;const h=function(t,e){var n=(0,a.Z)(t),h=!n&&(0,i.Z)(t),u=!n&&!h&&(0,s.Z)(t),d=!n&&!h&&!u&&(0,c.Z)(t),p=n||h||u||d,f=p?r(t.length,String):[],g=f.length;for(var y in t)!e&&!l.call(t,y)||p&&("length"==y||u&&("offset"==y||"parent"==y)||d&&("buffer"==y||"byteLength"==y||"byteOffset"==y)||(0,o.Z)(y,g))||f.push(y);return f}},4073:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=null==t?0:t.length,i=Array(r);++n<r;)i[n]=e(t[n],n,t);return i}},8694:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){for(var n=-1,r=e.length,i=t.length;++n<r;)t[i+n]=e[n];return t}},2954:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4752),i=n(9651),a=Object.prototype.hasOwnProperty;const s=function(t,e,n){var s=t[e];a.call(t,e)&&(0,i.Z)(s,n)&&(void 0!==n||e in t)||(0,r.Z)(t,e,n)}},4752:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7904);const i=function(t,e,n){"__proto__"==e&&r.Z?(0,r.Z)(t,e,{configurable:!0,enumerable:!0,value:n,writable:!0}):t[e]=n}},8451:(t,e,n)=>{"use strict";n.d(e,{Z:()=>J});var r=n(1667),i=n(6579),a=n(2954),s=n(1899),o=n(7179);const c=function(t,e){return t&&(0,s.Z)(e,(0,o.Z)(e),t)};var l=n(2957);const h=function(t,e){return t&&(0,s.Z)(e,(0,l.Z)(e),t)};var u=n(1050),d=n(7215),p=n(5695);const f=function(t,e){return(0,s.Z)(t,(0,p.Z)(t),e)};var g=n(8694),y=n(2513),m=n(532);const b=Object.getOwnPropertySymbols?function(t){for(var e=[];t;)(0,g.Z)(e,(0,p.Z)(t)),t=(0,y.Z)(t);return e}:m.Z;const _=function(t,e){return(0,s.Z)(t,b(t),e)};var x=n(1808),v=n(3327);const k=function(t){return(0,v.Z)(t,l.Z,b)};var w=n(3970),E=Object.prototype.hasOwnProperty;const C=function(t){var e=t.length,n=new t.constructor(e);return e&&"string"==typeof t[0]&&E.call(t,"index")&&(n.index=t.index,n.input=t.input),n};var T=n(1884);const S=function(t,e){var n=e?(0,T.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.byteLength)};var A=/\w*$/;const L=function(t){var e=new t.constructor(t.source,A.exec(t));return e.lastIndex=t.lastIndex,e};var B=n(7685),N=B.Z?B.Z.prototype:void 0,D=N?N.valueOf:void 0;const O=function(t){return D?Object(D.call(t)):{}};var M=n(2701);const I=function(t,e,n){var r=t.constructor;switch(e){case"[object ArrayBuffer]":return(0,T.Z)(t);case"[object Boolean]":case"[object Date]":return new r(+t);case"[object DataView]":return S(t,n);case"[object Float32Array]":case"[object Float64Array]":case"[object Int8Array]":case"[object Int16Array]":case"[object Int32Array]":case"[object Uint8Array]":case"[object Uint8ClampedArray]":case"[object Uint16Array]":case"[object Uint32Array]":return(0,M.Z)(t,n);case"[object Map]":case"[object Set]":return new r;case"[object Number]":case"[object String]":return new r(t);case"[object RegExp]":return L(t);case"[object Symbol]":return O(t)}};var F=n(3658),$=n(7771),R=n(7008),Z=n(8533);const P=function(t){return(0,Z.Z)(t)&&"[object Map]"==(0,w.Z)(t)};var j=n(1162),Y=n(8351),z=Y.Z&&Y.Z.isMap;const U=z?(0,j.Z)(z):P;var W=n(7226);const q=function(t){return(0,Z.Z)(t)&&"[object Set]"==(0,w.Z)(t)};var H=Y.Z&&Y.Z.isSet;const V=H?(0,j.Z)(H):q;var G="[object Arguments]",X="[object Function]",K="[object Object]",Q={};Q[G]=Q["[object Array]"]=Q["[object ArrayBuffer]"]=Q["[object DataView]"]=Q["[object Boolean]"]=Q["[object Date]"]=Q["[object Float32Array]"]=Q["[object Float64Array]"]=Q["[object Int8Array]"]=Q["[object Int16Array]"]=Q["[object Int32Array]"]=Q["[object Map]"]=Q["[object Number]"]=Q[K]=Q["[object RegExp]"]=Q["[object Set]"]=Q["[object String]"]=Q["[object Symbol]"]=Q["[object Uint8Array]"]=Q["[object Uint8ClampedArray]"]=Q["[object Uint16Array]"]=Q["[object Uint32Array]"]=!0,Q["[object Error]"]=Q[X]=Q["[object WeakMap]"]=!1;const J=function t(e,n,s,p,g,y){var m,b=1&n,v=2&n,E=4&n;if(s&&(m=g?s(e,p,g,y):s(e)),void 0!==m)return m;if(!(0,W.Z)(e))return e;var T=(0,$.Z)(e);if(T){if(m=C(e),!b)return(0,d.Z)(e,m)}else{var S=(0,w.Z)(e),A=S==X||"[object GeneratorFunction]"==S;if((0,R.Z)(e))return(0,u.Z)(e,b);if(S==K||S==G||A&&!g){if(m=v||A?{}:(0,F.Z)(e),!b)return v?_(e,h(m,e)):f(e,c(m,e))}else{if(!Q[S])return g?e:{};m=I(e,S,b)}}y||(y=new r.Z);var L=y.get(e);if(L)return L;y.set(e,m),V(e)?e.forEach((function(r){m.add(t(r,n,s,r,e,y))})):U(e)&&e.forEach((function(r,i){m.set(i,t(r,n,s,i,e,y))}));var B=E?v?k:x.Z:v?l.Z:o.Z,N=T?void 0:B(e);return(0,i.Z)(N||e,(function(r,i){N&&(r=e[i=r]),(0,a.Z)(m,i,t(r,n,s,i,e,y))})),m}},9811:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2693),i=n(585);const a=function(t,e){return function(n,r){if(null==n)return n;if(!(0,i.Z)(n))return t(n,r);for(var a=n.length,s=e?a:-1,o=Object(n);(e?s--:++s<a)&&!1!==r(o[s],s,o););return n}}(r.Z)},1692:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e,n,r){for(var i=t.length,a=n+(r?1:-1);r?a--:++a<i;)if(e(t[a],a,t))return a;return-1}},626:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(8694),i=n(7685),a=n(9169),s=n(7771),o=i.Z?i.Z.isConcatSpreadable:void 0;const c=function(t){return(0,s.Z)(t)||(0,a.Z)(t)||!!(o&&t&&t[o])};const l=function t(e,n,i,a,s){var o=-1,l=e.length;for(i||(i=c),s||(s=[]);++o<l;){var h=e[o];n>0&&i(h)?n>1?t(h,n-1,i,a,s):(0,r.Z)(s,h):a||(s[s.length]=h)}return s}},1395:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e,n,r){for(var i=-1,a=Object(e),s=r(e),o=s.length;o--;){var c=s[t?o:++i];if(!1===n(a[c],c,a))break}return e}}()},2693:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(1395),i=n(7179);const a=function(t,e){return t&&(0,r.Z)(t,e,i.Z)}},3317:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2823),i=n(2281);const a=function(t,e){for(var n=0,a=(e=(0,r.Z)(e,t)).length;null!=t&&n<a;)t=t[(0,i.Z)(e[n++])];return n&&n==a?t:void 0}},3327:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(8694),i=n(7771);const a=function(t,e,n){var a=e(t);return(0,i.Z)(t)?a:(0,r.Z)(a,n(t))}},3589:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(7685),i=Object.prototype,a=i.hasOwnProperty,s=i.toString,o=r.Z?r.Z.toStringTag:void 0;const c=function(t){var e=a.call(t,o),n=t[o];try{t[o]=void 0;var r=!0}catch(c){}var i=s.call(t);return r&&(e?t[o]=n:delete t[o]),i};var l=Object.prototype.toString;const h=function(t){return l.call(t)};var u=r.Z?r.Z.toStringTag:void 0;const d=function(t){return null==t?void 0===t?"[object Undefined]":"[object Null]":u&&u in Object(t)?c(t):h(t)}},4765:(t,e,n)=>{"use strict";n.d(e,{Z:()=>H});var r=n(1667),i=n(3001);const a=function(t,e){for(var n=-1,r=null==t?0:t.length;++n<r;)if(e(t[n],n,t))return!0;return!1};var s=n(9548);const o=function(t,e,n,r,o,c){var l=1&n,h=t.length,u=e.length;if(h!=u&&!(l&&u>h))return!1;var d=c.get(t),p=c.get(e);if(d&&p)return d==e&&p==t;var f=-1,g=!0,y=2&n?new i.Z:void 0;for(c.set(t,e),c.set(e,t);++f<h;){var m=t[f],b=e[f];if(r)var _=l?r(b,m,f,e,t,c):r(m,b,f,t,e,c);if(void 0!==_){if(_)continue;g=!1;break}if(y){if(!a(e,(function(t,e){if(!(0,s.Z)(y,e)&&(m===t||o(m,t,n,r,c)))return y.push(e)}))){g=!1;break}}else if(m!==b&&!o(m,b,n,r,c)){g=!1;break}}return c.delete(t),c.delete(e),g};var c=n(7685),l=n(7623),h=n(9651);const u=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t,r){n[++e]=[r,t]})),n};var d=n(6545),p=c.Z?c.Z.prototype:void 0,f=p?p.valueOf:void 0;const g=function(t,e,n,r,i,a,s){switch(n){case"[object DataView]":if(t.byteLength!=e.byteLength||t.byteOffset!=e.byteOffset)return!1;t=t.buffer,e=e.buffer;case"[object ArrayBuffer]":return!(t.byteLength!=e.byteLength||!a(new l.Z(t),new l.Z(e)));case"[object Boolean]":case"[object Date]":case"[object Number]":return(0,h.Z)(+t,+e);case"[object Error]":return t.name==e.name&&t.message==e.message;case"[object RegExp]":case"[object String]":return t==e+"";case"[object Map]":var c=u;case"[object Set]":var p=1&r;if(c||(c=d.Z),t.size!=e.size&&!p)return!1;var g=s.get(t);if(g)return g==e;r|=2,s.set(t,e);var y=o(c(t),c(e),r,i,a,s);return s.delete(t),y;case"[object Symbol]":if(f)return f.call(t)==f.call(e)}return!1};var y=n(1808),m=Object.prototype.hasOwnProperty;const b=function(t,e,n,r,i,a){var s=1&n,o=(0,y.Z)(t),c=o.length;if(c!=(0,y.Z)(e).length&&!s)return!1;for(var l=c;l--;){var h=o[l];if(!(s?h in e:m.call(e,h)))return!1}var u=a.get(t),d=a.get(e);if(u&&d)return u==e&&d==t;var p=!0;a.set(t,e),a.set(e,t);for(var f=s;++l<c;){var g=t[h=o[l]],b=e[h];if(r)var _=s?r(b,g,h,e,t,a):r(g,b,h,t,e,a);if(!(void 0===_?g===b||i(g,b,n,r,a):_)){p=!1;break}f||(f="constructor"==h)}if(p&&!f){var x=t.constructor,v=e.constructor;x==v||!("constructor"in t)||!("constructor"in e)||"function"==typeof x&&x instanceof x&&"function"==typeof v&&v instanceof v||(p=!1)}return a.delete(t),a.delete(e),p};var _=n(3970),x=n(7771),v=n(7008),k=n(8843),w="[object Arguments]",E="[object Array]",C="[object Object]",T=Object.prototype.hasOwnProperty;const S=function(t,e,n,i,a,s){var c=(0,x.Z)(t),l=(0,x.Z)(e),h=c?E:(0,_.Z)(t),u=l?E:(0,_.Z)(e),d=(h=h==w?C:h)==C,p=(u=u==w?C:u)==C,f=h==u;if(f&&(0,v.Z)(t)){if(!(0,v.Z)(e))return!1;c=!0,d=!1}if(f&&!d)return s||(s=new r.Z),c||(0,k.Z)(t)?o(t,e,n,i,a,s):g(t,e,h,n,i,a,s);if(!(1&n)){var y=d&&T.call(t,"__wrapped__"),m=p&&T.call(e,"__wrapped__");if(y||m){var S=y?t.value():t,A=m?e.value():e;return s||(s=new r.Z),a(S,A,n,i,s)}}return!!f&&(s||(s=new r.Z),b(t,e,n,i,a,s))};var A=n(8533);const L=function t(e,n,r,i,a){return e===n||(null==e||null==n||!(0,A.Z)(e)&&!(0,A.Z)(n)?e!=e&&n!=n:S(e,n,r,i,t,a))};const B=function(t,e,n,i){var a=n.length,s=a,o=!i;if(null==t)return!s;for(t=Object(t);a--;){var c=n[a];if(o&&c[2]?c[1]!==t[c[0]]:!(c[0]in t))return!1}for(;++a<s;){var l=(c=n[a])[0],h=t[l],u=c[1];if(o&&c[2]){if(void 0===h&&!(l in t))return!1}else{var d=new r.Z;if(i)var p=i(h,u,l,t,e,d);if(!(void 0===p?L(u,h,3,i,d):p))return!1}}return!0};var N=n(7226);const D=function(t){return t==t&&!(0,N.Z)(t)};var O=n(7179);const M=function(t){for(var e=(0,O.Z)(t),n=e.length;n--;){var r=e[n],i=t[r];e[n]=[r,i,D(i)]}return e};const I=function(t,e){return function(n){return null!=n&&(n[t]===e&&(void 0!==e||t in Object(n)))}};const F=function(t){var e=M(t);return 1==e.length&&e[0][2]?I(e[0][0],e[0][1]):function(n){return n===t||B(n,t,e)}};var $=n(3317);const R=function(t,e,n){var r=null==t?void 0:(0,$.Z)(t,e);return void 0===r?n:r};var Z=n(5487),P=n(9365),j=n(2281);const Y=function(t,e){return(0,P.Z)(t)&&D(e)?I((0,j.Z)(t),e):function(n){var r=R(n,t);return void 0===r&&r===e?(0,Z.Z)(n,t):L(e,r,3)}};var z=n(9203),U=n(4193);const W=function(t){return function(e){return(0,$.Z)(e,t)}};const q=function(t){return(0,P.Z)(t)?(0,U.Z)((0,j.Z)(t)):W(t)};const H=function(t){return"function"==typeof t?t:null==t?z.Z:"object"==typeof t?(0,x.Z)(t)?Y(t[0],t[1]):F(t):q(t)}},9473:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(2764);const i=(0,n(1851).Z)(Object.keys,Object);var a=Object.prototype.hasOwnProperty;const s=function(t){if(!(0,r.Z)(t))return i(t);var e=[];for(var n in Object(t))a.call(t,n)&&"constructor"!=n&&e.push(n);return e}},1018:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(9811),i=n(585);const a=function(t,e){var n=-1,a=(0,i.Z)(t)?Array(t.length):[];return(0,r.Z)(t,(function(t,r,i){a[++n]=e(t,r,i)})),a}},4193:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return null==e?void 0:e[t]}}},9581:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(9203),i=n(1211),a=n(7227);const s=function(t,e){return(0,a.Z)((0,i.Z)(t,e,r.Z),t+"")}},1162:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(e){return t(e)}}},9548:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t.has(e)}},8882:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(9203);const i=function(t){return"function"==typeof t?t:r.Z}},2823:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7771),i=n(9365),a=n(2454);var s=/[^.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|$))/g,o=/\\(\\)?/g;const c=function(t){var e=(0,a.Z)(t,(function(t){return 500===n.size&&n.clear(),t})),n=e.cache;return e}((function(t){var e=[];return 46===t.charCodeAt(0)&&e.push(""),t.replace(s,(function(t,n,r,i){e.push(r?i.replace(o,"$1"):n||t)})),e}));var l=n(751);const h=function(t,e){return(0,r.Z)(t)?t:(0,i.Z)(t,e)?[t]:c((0,l.Z)(t))}},1884:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(7623);const i=function(t){var e=new t.constructor(t.byteLength);return new r.Z(e).set(new r.Z(t)),e}},1050:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i?r.Z.Buffer:void 0,o=s?s.allocUnsafe:void 0;const c=function(t,e){if(e)return t.slice();var n=t.length,r=o?o(n):new t.constructor(n);return t.copy(r),r}},2701:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(1884);const i=function(t,e){var n=e?(0,r.Z)(t.buffer):t.buffer;return new t.constructor(n,t.byteOffset,t.length)}},7215:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){var n=-1,r=t.length;for(e||(e=Array(r));++n<r;)e[n]=t[n];return e}},1899:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(2954),i=n(4752);const a=function(t,e,n,a){var s=!n;n||(n={});for(var o=-1,c=e.length;++o<c;){var l=e[o],h=a?a(n[l],t[l],l,n,t):void 0;void 0===h&&(h=t[l]),s?(0,i.Z)(n,l,h):(0,r.Z)(n,l,h)}return n}},7904:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2508);const i=function(){try{var t=(0,r.Z)(Object,"defineProperty");return t({},"",{}),t}catch(e){}}()},3413:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r="object"==typeof global&&global&&global.Object===Object&&global},1808:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(3327),i=n(5695),a=n(7179);const s=function(t){return(0,r.Z)(t,a.Z,i.Z)}},2508:(t,e,n)=>{"use strict";n.d(e,{Z:()=>b});var r=n(3234);const i=n(6092).Z["__core-js_shared__"];var a,s=(a=/[^.]+$/.exec(i&&i.keys&&i.keys.IE_PROTO||""))?"Symbol(src)_1."+a:"";const o=function(t){return!!s&&s in t};var c=n(7226),l=n(19),h=/^\[object .+?Constructor\]$/,u=Function.prototype,d=Object.prototype,p=u.toString,f=d.hasOwnProperty,g=RegExp("^"+p.call(f).replace(/[\\^$.*+?()[\]{}|]/g,"\\$&").replace(/hasOwnProperty|(function).*?(?=\\\()| for .+?(?=\\\])/g,"$1.*?")+"$");const y=function(t){return!(!(0,c.Z)(t)||o(t))&&((0,r.Z)(t)?g:h).test((0,l.Z)(t))};const m=function(t,e){return null==t?void 0:t[e]};const b=function(t,e){var n=m(t,e);return y(n)?n:void 0}},2513:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=(0,n(1851).Z)(Object.getPrototypeOf,Object)},5695:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(8774),i=n(532),a=Object.prototype.propertyIsEnumerable,s=Object.getOwnPropertySymbols;const o=s?function(t){return null==t?[]:(t=Object(t),(0,r.Z)(s(t),(function(e){return a.call(t,e)})))}:i.Z},3970:(t,e,n)=>{"use strict";n.d(e,{Z:()=>w});var r=n(2508),i=n(6092);const a=(0,r.Z)(i.Z,"DataView");var s=n(6183);const o=(0,r.Z)(i.Z,"Promise");var c=n(3203);const l=(0,r.Z)(i.Z,"WeakMap");var h=n(3589),u=n(19),d="[object Map]",p="[object Promise]",f="[object Set]",g="[object WeakMap]",y="[object DataView]",m=(0,u.Z)(a),b=(0,u.Z)(s.Z),_=(0,u.Z)(o),x=(0,u.Z)(c.Z),v=(0,u.Z)(l),k=h.Z;(a&&k(new a(new ArrayBuffer(1)))!=y||s.Z&&k(new s.Z)!=d||o&&k(o.resolve())!=p||c.Z&&k(new c.Z)!=f||l&&k(new l)!=g)&&(k=function(t){var e=(0,h.Z)(t),n="[object Object]"==e?t.constructor:void 0,r=n?(0,u.Z)(n):"";if(r)switch(r){case m:return y;case b:return d;case _:return p;case x:return f;case v:return g}return e});const w=k},6174:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(2823),i=n(9169),a=n(7771),s=n(6009),o=n(1656),c=n(2281);const l=function(t,e,n){for(var l=-1,h=(e=(0,r.Z)(e,t)).length,u=!1;++l<h;){var d=(0,c.Z)(e[l]);if(!(u=null!=t&&n(t,d)))break;t=t[d]}return u||++l!=h?u:!!(h=null==t?0:t.length)&&(0,o.Z)(h)&&(0,s.Z)(d,h)&&((0,a.Z)(t)||(0,i.Z)(t))}},3658:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(7226),i=Object.create;const a=function(){function t(){}return function(e){if(!(0,r.Z)(e))return{};if(i)return i(e);t.prototype=e;var n=new t;return t.prototype=void 0,n}}();var s=n(2513),o=n(2764);const c=function(t){return"function"!=typeof t.constructor||(0,o.Z)(t)?{}:a((0,s.Z)(t))}},6009:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=/^(?:0|[1-9]\d*)$/;const i=function(t,e){var n=typeof t;return!!(e=null==e?9007199254740991:e)&&("number"==n||"symbol"!=n&&r.test(t))&&t>-1&&t%1==0&&t<e}},439:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(9651),i=n(585),a=n(6009),s=n(7226);const o=function(t,e,n){if(!(0,s.Z)(n))return!1;var o=typeof e;return!!("number"==o?(0,i.Z)(n)&&(0,a.Z)(e,n.length):"string"==o&&e in n)&&(0,r.Z)(n[e],t)}},9365:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(7771),i=n(2714),a=/\.|\[(?:[^[\]]*|(["'])(?:(?!\1)[^\\]|\\.)*?\1)\]/,s=/^\w*$/;const o=function(t,e){if((0,r.Z)(t))return!1;var n=typeof t;return!("number"!=n&&"symbol"!=n&&"boolean"!=n&&null!=t&&!(0,i.Z)(t))||(s.test(t)||!a.test(t)||null!=e&&t in Object(e))}},2764:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Object.prototype;const i=function(t){var e=t&&t.constructor;return t===("function"==typeof e&&e.prototype||r)}},8351:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(3413),i="object"==typeof exports&&exports&&!exports.nodeType&&exports,a=i&&"object"==typeof module&&module&&!module.nodeType&&module,s=a&&a.exports===i&&r.Z.process;const o=function(){try{var t=a&&a.require&&a.require("util").types;return t||s&&s.binding&&s.binding("util")}catch(e){}}()},1851:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return function(n){return t(e(n))}}},1211:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e,n){switch(n.length){case 0:return t.call(e);case 1:return t.call(e,n[0]);case 2:return t.call(e,n[0],n[1]);case 3:return t.call(e,n[0],n[1],n[2])}return t.apply(e,n)};var i=Math.max;const a=function(t,e,n){return e=i(void 0===e?t.length-1:e,0),function(){for(var a=arguments,s=-1,o=i(a.length-e,0),c=Array(o);++s<o;)c[s]=a[e+s];s=-1;for(var l=Array(e+1);++s<e;)l[s]=a[s];return l[e]=n(c),r(t,this,l)}}},6092:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3413),i="object"==typeof self&&self&&self.Object===Object&&self;const a=r.Z||i||Function("return this")()},6545:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=-1,n=Array(t.size);return t.forEach((function(t){n[++e]=t})),n}},7227:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(2002),i=n(7904),a=n(9203);const s=i.Z?function(t,e){return(0,i.Z)(t,"toString",{configurable:!0,enumerable:!1,value:(0,r.Z)(e),writable:!0})}:a.Z;var o=Date.now;const c=function(t){var e=0,n=0;return function(){var r=o(),i=16-(r-n);if(n=r,i>0){if(++e>=800)return arguments[0]}else e=0;return t.apply(void 0,arguments)}}(s)},2281:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(2714);const i=function(t){if("string"==typeof t||(0,r.Z)(t))return t;var e=t+"";return"0"==e&&1/t==-Infinity?"-0":e}},19:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=Function.prototype.toString;const i=function(t){if(null!=t){try{return r.call(t)}catch(e){}try{return t+""}catch(e){}}return""}},2002:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return function(){return t}}},3688:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(9581),i=n(9651),a=n(439),s=n(2957),o=Object.prototype,c=o.hasOwnProperty;const l=(0,r.Z)((function(t,e){t=Object(t);var n=-1,r=e.length,l=r>2?e[2]:void 0;for(l&&(0,a.Z)(e[0],e[1],l)&&(r=1);++n<r;)for(var h=e[n],u=(0,s.Z)(h),d=-1,p=u.length;++d<p;){var f=u[d],g=t[f];(void 0===g||(0,i.Z)(g,o[f])&&!c.call(t,f))&&(t[f]=h[f])}return t}))},9651:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t,e){return t===e||t!=t&&e!=e}},3445:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(8774),i=n(9811);const a=function(t,e){var n=[];return(0,i.Z)(t,(function(t,r,i){e(t,r,i)&&n.push(t)})),n};var s=n(4765),o=n(7771);const c=function(t,e){return((0,o.Z)(t)?r.Z:a)(t,(0,s.Z)(e,3))}},7961:(t,e,n)=>{"use strict";n.d(e,{Z:()=>i});var r=n(626);const i=function(t){return(null==t?0:t.length)?(0,r.Z)(t,1):[]}},870:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(6579),i=n(9811),a=n(8882),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:i.Z)(t,(0,a.Z)(e))}},7452:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=Object.prototype.hasOwnProperty;const i=function(t,e){return null!=t&&r.call(t,e)};var a=n(6174);const s=function(t,e){return null!=t&&(0,a.Z)(t,e,i)}},5487:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});const r=function(t,e){return null!=t&&e in Object(t)};var i=n(6174);const a=function(t,e){return null!=t&&(0,i.Z)(t,e,r)}},9203:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return t}},9169:(t,e,n)=>{"use strict";n.d(e,{Z:()=>l});var r=n(3589),i=n(8533);const a=function(t){return(0,i.Z)(t)&&"[object Arguments]"==(0,r.Z)(t)};var s=Object.prototype,o=s.hasOwnProperty,c=s.propertyIsEnumerable;const l=a(function(){return arguments}())?a:function(t){return(0,i.Z)(t)&&o.call(t,"callee")&&!c.call(t,"callee")}},7771:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=Array.isArray},585:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3234),i=n(1656);const a=function(t){return null!=t&&(0,i.Z)(t.length)&&!(0,r.Z)(t)}},836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(585),i=n(8533);const a=function(t){return(0,i.Z)(t)&&(0,r.Z)(t)}},7008:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=n(6092);const i=function(){return!1};var a="object"==typeof exports&&exports&&!exports.nodeType&&exports,s=a&&"object"==typeof module&&module&&!module.nodeType&&module,o=s&&s.exports===a?r.Z.Buffer:void 0;const c=(o?o.isBuffer:void 0)||i},9697:(t,e,n)=>{"use strict";n.d(e,{Z:()=>d});var r=n(9473),i=n(3970),a=n(9169),s=n(7771),o=n(585),c=n(7008),l=n(2764),h=n(8843),u=Object.prototype.hasOwnProperty;const d=function(t){if(null==t)return!0;if((0,o.Z)(t)&&((0,s.Z)(t)||"string"==typeof t||"function"==typeof t.splice||(0,c.Z)(t)||(0,h.Z)(t)||(0,a.Z)(t)))return!t.length;var e=(0,i.Z)(t);if("[object Map]"==e||"[object Set]"==e)return!t.size;if((0,l.Z)(t))return!(0,r.Z)(t).length;for(var n in t)if(u.call(t,n))return!1;return!0}},3234:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(7226);const a=function(t){if(!(0,i.Z)(t))return!1;var e=(0,r.Z)(t);return"[object Function]"==e||"[object GeneratorFunction]"==e||"[object AsyncFunction]"==e||"[object Proxy]"==e}},1656:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return"number"==typeof t&&t>-1&&t%1==0&&t<=9007199254740991}},7226:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){var e=typeof t;return null!=t&&("object"==e||"function"==e)}},8533:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return null!=t&&"object"==typeof t}},7514:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(2513),a=n(8533),s=Function.prototype,o=Object.prototype,c=s.toString,l=o.hasOwnProperty,h=c.call(Object);const u=function(t){if(!(0,a.Z)(t)||"[object Object]"!=(0,r.Z)(t))return!1;var e=(0,i.Z)(t);if(null===e)return!0;var n=l.call(e,"constructor")&&e.constructor;return"function"==typeof n&&n instanceof n&&c.call(n)==h}},2714:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(3589),i=n(8533);const a=function(t){return"symbol"==typeof t||(0,i.Z)(t)&&"[object Symbol]"==(0,r.Z)(t)}},8843:(t,e,n)=>{"use strict";n.d(e,{Z:()=>u});var r=n(3589),i=n(1656),a=n(8533),s={};s["[object Float32Array]"]=s["[object Float64Array]"]=s["[object Int8Array]"]=s["[object Int16Array]"]=s["[object Int32Array]"]=s["[object Uint8Array]"]=s["[object Uint8ClampedArray]"]=s["[object Uint16Array]"]=s["[object Uint32Array]"]=!0,s["[object Arguments]"]=s["[object Array]"]=s["[object ArrayBuffer]"]=s["[object Boolean]"]=s["[object DataView]"]=s["[object Date]"]=s["[object Error]"]=s["[object Function]"]=s["[object Map]"]=s["[object Number]"]=s["[object Object]"]=s["[object RegExp]"]=s["[object Set]"]=s["[object String]"]=s["[object WeakMap]"]=!1;const o=function(t){return(0,a.Z)(t)&&(0,i.Z)(t.length)&&!!s[(0,r.Z)(t)]};var c=n(1162),l=n(8351),h=l.Z&&l.Z.isTypedArray;const u=h?(0,c.Z)(h):o},9360:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(t){return void 0===t}},7179:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(7668),i=n(9473),a=n(585);const s=function(t){return(0,a.Z)(t)?(0,r.Z)(t):(0,i.Z)(t)}},2957:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7668),i=n(7226),a=n(2764);const s=function(t){var e=[];if(null!=t)for(var n in Object(t))e.push(n);return e};var o=Object.prototype.hasOwnProperty;const c=function(t){if(!(0,i.Z)(t))return s(t);var e=(0,a.Z)(t),n=[];for(var r in t)("constructor"!=r||!e&&o.call(t,r))&&n.push(r);return n};var l=n(585);const h=function(t){return(0,l.Z)(t)?(0,r.Z)(t,!0):c(t)}},3836:(t,e,n)=>{"use strict";n.d(e,{Z:()=>o});var r=n(4073),i=n(4765),a=n(1018),s=n(7771);const o=function(t,e){return((0,s.Z)(t)?r.Z:a.Z)(t,(0,i.Z)(e,3))}},2454:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(7834);function i(t,e){if("function"!=typeof t||null!=e&&"function"!=typeof e)throw new TypeError("Expected a function");var n=function(){var r=arguments,i=e?e.apply(this,r):r[0],a=n.cache;if(a.has(i))return a.get(i);var s=t.apply(this,r);return n.cache=a.set(i,s)||a,s};return n.cache=new(i.Cache||r.Z),n}i.Cache=r.Z;const a=i},1666:(t,e,n)=>{"use strict";n.d(e,{Z:()=>y});var r=n(3317),i=n(2954),a=n(2823),s=n(6009),o=n(7226),c=n(2281);const l=function(t,e,n,r){if(!(0,o.Z)(t))return t;for(var l=-1,h=(e=(0,a.Z)(e,t)).length,u=h-1,d=t;null!=d&&++l<h;){var p=(0,c.Z)(e[l]),f=n;if("__proto__"===p||"constructor"===p||"prototype"===p)return t;if(l!=u){var g=d[p];void 0===(f=r?r(g,p,d):void 0)&&(f=(0,o.Z)(g)?g:(0,s.Z)(e[l+1])?[]:{})}(0,i.Z)(d,p,f),d=d[p]}return t};const h=function(t,e,n){for(var i=-1,s=e.length,o={};++i<s;){var c=e[i],h=(0,r.Z)(t,c);n(h,c)&&l(o,(0,a.Z)(c,t),h)}return o};var u=n(5487);const d=function(t,e){return h(t,e,(function(e,n){return(0,u.Z)(t,n)}))};var p=n(7961),f=n(1211),g=n(7227);const y=function(t){return(0,g.Z)((0,f.Z)(t,void 0,p.Z),t+"")}((function(t,e){return null==t?{}:d(t,e)}))},4379:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});var r=Math.ceil,i=Math.max;const a=function(t,e,n,a){for(var s=-1,o=i(r((e-t)/(n||1)),0),c=Array(o);o--;)c[a?o:++s]=t,t+=n;return c};var s=n(439),o=n(4099);const c=function(t){return function(e,n,r){return r&&"number"!=typeof r&&(0,s.Z)(e,n,r)&&(n=r=void 0),e=(0,o.Z)(e),void 0===n?(n=e,e=0):n=(0,o.Z)(n),r=void 0===r?e<n?1:-1:(0,o.Z)(r),a(e,n,r,t)}}()},2344:(t,e,n)=>{"use strict";n.d(e,{Z:()=>c});const r=function(t,e,n,r){var i=-1,a=null==t?0:t.length;for(r&&a&&(n=t[++i]);++i<a;)n=e(n,t[i],i,t);return n};var i=n(9811),a=n(4765);const s=function(t,e,n,r,i){return i(t,(function(t,i,a){n=r?(r=!1,t):e(n,t,i,a)})),n};var o=n(7771);const c=function(t,e,n){var c=(0,o.Z)(t)?r:s,l=arguments.length<3;return c(t,(0,a.Z)(e,4),n,l,i.Z)}},532:(t,e,n)=>{"use strict";n.d(e,{Z:()=>r});const r=function(){return[]}},4099:(t,e,n)=>{"use strict";n.d(e,{Z:()=>g});var r=/\s/;const i=function(t){for(var e=t.length;e--&&r.test(t.charAt(e)););return e};var a=/^\s+/;const s=function(t){return t?t.slice(0,i(t)+1).replace(a,""):t};var o=n(7226),c=n(2714),l=/^[-+]0x[0-9a-f]+$/i,h=/^0b[01]+$/i,u=/^0o[0-7]+$/i,d=parseInt;const p=function(t){if("number"==typeof t)return t;if((0,c.Z)(t))return NaN;if((0,o.Z)(t)){var e="function"==typeof t.valueOf?t.valueOf():t;t=(0,o.Z)(e)?e+"":e}if("string"!=typeof t)return 0===t?t:+t;t=s(t);var n=h.test(t);return n||u.test(t)?d(t.slice(2),n?2:8):l.test(t)?NaN:+t};var f=1/0;const g=function(t){return t?(t=p(t))===f||t===-1/0?17976931348623157e292*(t<0?-1:1):t==t?t:0:0===t?t:0}},751:(t,e,n)=>{"use strict";n.d(e,{Z:()=>h});var r=n(7685),i=n(4073),a=n(7771),s=n(2714),o=r.Z?r.Z.prototype:void 0,c=o?o.toString:void 0;const l=function t(e){if("string"==typeof e)return e;if((0,a.Z)(e))return(0,i.Z)(e,t)+"";if((0,s.Z)(e))return c?c.call(e):"";var n=e+"";return"0"==n&&1/e==-Infinity?"-0":n};const h=function(t){return null==t?"":l(t)}},6749:(t,e,n)=>{"use strict";n.d(e,{Z:()=>a});var r=n(751),i=0;const a=function(t){var e=++i;return(0,r.Z)(t)+e}},4148:(t,e,n)=>{"use strict";n.d(e,{Z:()=>s});var r=n(4073);const i=function(t,e){return(0,r.Z)(e,(function(e){return t[e]}))};var a=n(7179);const s=function(t){return null==t?[]:i(t,(0,a.Z)(t))}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/492f60c5.f0dfd156.js b/zh/assets/js/492f60c5.4b215836.js
similarity index 97%
rename from zh/assets/js/492f60c5.f0dfd156.js
rename to zh/assets/js/492f60c5.4b215836.js
index 81c4ed226..25d896097 100644
--- a/zh/assets/js/492f60c5.f0dfd156.js
+++ b/zh/assets/js/492f60c5.4b215836.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2967],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},f=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),f=p(n),m=a,d=f["".concat(s,".").concat(m)]||f[m]||u[m]||o;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=f;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=n[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}f.displayName="MDXCreateElement"},1512:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const o={title:"\u5b89\u88c5",weight:20},i=void 0,l={unversionedId:"installation/installation",id:"installation/installation",title:"\u5b89\u88c5",description:"\u672c\u6587\u5305\u542b\u4e86\u5728\u5404\u79cd\u73af\u5883\u4e0b\u5b89\u88c5 K3s \u7684\u8bf4\u660e\u3002\u5728\u5f00\u59cb\u5b89\u88c5 K3s \u4e4b\u524d\uff0c\u8bf7\u786e\u4fdd\u5df2\u6ee1\u8db3 K3s \u7684\u5b89\u88c5\u8981\u6c42\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/installation.md",sourceDirName:"installation",slug:"/installation/",permalink:"/zh/installation/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5b89\u88c5",weight:20},sidebar:"mySidebar",previous:{title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",permalink:"/zh/quick-start/"},next:{title:"\u8981\u6c42",permalink:"/zh/installation/requirements"}},s={},p=[],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u5305\u542b\u4e86\u5728\u5404\u79cd\u73af\u5883\u4e0b\u5b89\u88c5 K3s \u7684\u8bf4\u660e\u3002\u5728\u5f00\u59cb\u5b89\u88c5 K3s \u4e4b\u524d\uff0c\u8bf7\u786e\u4fdd\u5df2\u6ee1\u8db3 ",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/requirements"},"K3s \u7684\u5b89\u88c5\u8981\u6c42"),"\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/configuration"},"\u914d\u7f6e\u9009\u9879"),"\u63d0\u4f9b\u4e86\u5b89\u88c5 K3s \u65f6\u53ef\u7528\u9009\u9879\u7684\u6307\u5357\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/network-options"},"\u7f51\u7edc\u9009\u9879"),"\u63d0\u4f9b\u4e86 K3s \u4e2d\u53ef\u7528\u7f51\u7edc\u9009\u9879\u7684\u6307\u5357\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/airgap"},"\u79bb\u7ebf\u5b89\u88c5"),"\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u5728\u65e0\u6cd5\u76f4\u63a5\u8bbf\u95ee\u4e92\u8054\u7f51\u7684\u73af\u5883\u4e2d\u8bbe\u7f6e K3s\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/server-roles"},"\u7ba1\u7406 Server \u89d2\u8272"),"\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u4f7f\u7528\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," Server \u8bbe\u7f6e K3s\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/packaged-components"},"\u7ba1\u7406\u6253\u5305\u7ec4\u4ef6"),"\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u7981\u7528\u6253\u5305\u7ec4\u4ef6\uff0c\u6216\u4f7f\u7528\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\u5b89\u88c5\u4f60\u81ea\u5df1\u7684\u7ec4\u4ef6\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[2967],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function o(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?o(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):o(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function l(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},f=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),f=p(n),m=a,d=f["".concat(s,".").concat(m)]||f[m]||u[m]||o;return n?r.createElement(d,i(i({ref:t},c),{},{components:n})):r.createElement(d,i({ref:t},c))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=n.length,i=new Array(o);i[0]=f;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=n[p];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}f.displayName="MDXCreateElement"},1512:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const o={title:"\u5b89\u88c5",weight:20},i=void 0,l={unversionedId:"installation/installation",id:"installation/installation",title:"\u5b89\u88c5",description:"\u672c\u6587\u5305\u542b\u4e86\u5728\u5404\u79cd\u73af\u5883\u4e0b\u5b89\u88c5 K3s \u7684\u8bf4\u660e\u3002\u5728\u5f00\u59cb\u5b89\u88c5 K3s \u4e4b\u524d\uff0c\u8bf7\u786e\u4fdd\u5df2\u6ee1\u8db3 K3s \u7684\u5b89\u88c5\u8981\u6c42\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/installation.md",sourceDirName:"installation",slug:"/installation/",permalink:"/zh/installation/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5b89\u88c5",weight:20},sidebar:"mySidebar",previous:{title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",permalink:"/zh/quick-start/"},next:{title:"\u8981\u6c42",permalink:"/zh/installation/requirements"}},s={},p=[],c={toc:p};function u(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u5305\u542b\u4e86\u5728\u5404\u79cd\u73af\u5883\u4e0b\u5b89\u88c5 K3s \u7684\u8bf4\u660e\u3002\u5728\u5f00\u59cb\u5b89\u88c5 K3s \u4e4b\u524d\uff0c\u8bf7\u786e\u4fdd\u5df2\u6ee1\u8db3 ",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/requirements"},"K3s \u7684\u5b89\u88c5\u8981\u6c42"),"\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/configuration"},"\u914d\u7f6e\u9009\u9879"),"\u63d0\u4f9b\u4e86\u5b89\u88c5 K3s \u65f6\u53ef\u7528\u9009\u9879\u7684\u6307\u5357\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/network-options"},"\u7f51\u7edc\u9009\u9879"),"\u63d0\u4f9b\u4e86 K3s \u4e2d\u53ef\u7528\u7f51\u7edc\u9009\u9879\u7684\u6307\u5357\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/airgap"},"\u79bb\u7ebf\u5b89\u88c5"),"\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u5728\u65e0\u6cd5\u76f4\u63a5\u8bbf\u95ee\u4e92\u8054\u7f51\u7684\u73af\u5883\u4e2d\u8bbe\u7f6e K3s\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/server-roles"},"\u7ba1\u7406 Server \u89d2\u8272"),"\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u4f7f\u7528\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," Server \u8bbe\u7f6e K3s\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"/zh/installation/packaged-components"},"\u7ba1\u7406\u6253\u5305\u7ec4\u4ef6"),"\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u5982\u4f55\u7981\u7528\u6253\u5305\u7ec4\u4ef6\uff0c\u6216\u4f7f\u7528\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\u5b89\u88c5\u4f60\u81ea\u5df1\u7684\u7ec4\u4ef6\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/4972.8e6a9569.js b/zh/assets/js/4972.8e6a9569.js
new file mode 100644
index 000000000..6c5c128de
--- /dev/null
+++ b/zh/assets/js/4972.8e6a9569.js
@@ -0,0 +1 @@
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4972],{4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(1944),r=n(1573);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/4972.f742b7fa.js b/zh/assets/js/4972.f742b7fa.js
deleted file mode 100644
index 7406f8355..000000000
--- a/zh/assets/js/4972.f742b7fa.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4972],{4972:(e,t,n)=>{n.r(t),n.d(t,{default:()=>c});var a=n(7294),l=n(5999),o=n(833),r=n(6999);function c(){return a.createElement(a.Fragment,null,a.createElement(o.d,{title:(0,l.I)({id:"theme.NotFound.title",message:"Page Not Found"})}),a.createElement(r.Z,null,a.createElement("main",{className:"container margin-vert--xl"},a.createElement("div",{className:"row"},a.createElement("div",{className:"col col--6 col--offset-3"},a.createElement("h1",{className:"hero__title"},a.createElement(l.Z,{id:"theme.NotFound.title",description:"The title of the 404 page"},"Page Not Found")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p1",description:"The first paragraph of the 404 page"},"We could not find what you were looking for.")),a.createElement("p",null,a.createElement(l.Z,{id:"theme.NotFound.p2",description:"The 2nd paragraph of the 404 page"},"Please contact the owner of the site that linked you to the original URL and let them know their link is broken.")))))))}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/4a93747f.17dfd6ee.js b/zh/assets/js/4a93747f.ee1f23db.js
similarity index 99%
rename from zh/assets/js/4a93747f.17dfd6ee.js
rename to zh/assets/js/4a93747f.ee1f23db.js
index 2d9ea9b06..113ad6417 100644
--- a/zh/assets/js/4a93747f.17dfd6ee.js
+++ b/zh/assets/js/4a93747f.ee1f23db.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9596],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),c=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(r),m=a,k=d["".concat(o,".").concat(m)]||d[m]||p[m]||i;return r?n.createElement(k,l(l({ref:t},u),{},{components:r})):n.createElement(k,l({ref:t},u))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,l=new Array(i);l[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,l[1]=s;for(var c=2;c<i;c++)l[c]=r[c];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5e3:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>o,default:()=>v,frontMatter:()=>s,metadata:()=>c,toc:()=>p});var n=r(3117),a=(r(7294),r(3905)),i=r(941),l=r(4996);const s={title:"\u67b6\u6784",weight:1},o=void 0,c={unversionedId:"architecture/architecture",id:"architecture/architecture",title:"\u67b6\u6784",description:"\u672c\u6587\u4ecb\u7ecd\u4e86\u9ad8\u53ef\u7528\uff08HA\uff09K3s \u670d\u52a1\u5668\u96c6\u7fa4\u7684\u67b6\u6784\uff0c\u4ee5\u53ca K3s \u4e0e\u5355\u8282\u70b9\u670d\u52a1\u5668\u96c6\u7fa4\u7684\u533a\u522b\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/architecture/architecture.md",sourceDirName:"architecture",slug:"/architecture/",permalink:"/zh/architecture/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u67b6\u6784",weight:1},sidebar:"mySidebar",previous:{title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes",permalink:"/zh/"},next:{title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",permalink:"/zh/quick-start/"}},u={},p=[{value:"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e",id:"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e",level:3},{value:"\u9ad8\u53ef\u7528 K3s",id:"\u9ad8\u53ef\u7528-k3s",level:3},{value:"Agent \u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740",id:"agent-\u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740",level:3},{value:"Agent \u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406",id:"agent-\u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},m=d("Tabs"),k=d("TabItem"),g={toc:p};function v(e){let{components:t,...s}=e;return(0,a.kt)("wrapper",(0,n.Z)({},g,s,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u9ad8\u53ef\u7528\uff08HA\uff09K3s \u670d\u52a1\u5668\u96c6\u7fa4\u7684\u67b6\u6784\uff0c\u4ee5\u53ca K3s \u4e0e\u5355\u8282\u70b9\u670d\u52a1\u5668\u96c6\u7fa4\u7684\u533a\u522b\u3002"),(0,a.kt)("p",null,"\u672c\u6587\u8fd8\u63cf\u8ff0\u4e86 Agent \u8282\u70b9\u662f\u5982\u4f55\u6ce8\u518c\u5230 K3s Server \u7684\u3002"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Server \u8282\u70b9\u6307\u7684\u662f\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s server")," \u547d\u4ee4\u7684\u4e3b\u673a\uff0ccontrol plane \u548c\u6570\u636e\u5b58\u50a8\u7ec4\u4ef6\u7531 K3s \u7ba1\u7406\u3002"),(0,a.kt)("li",{parentName:"ul"},"Agent \u8282\u70b9\u6307\u7684\u662f\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s agent")," \u547d\u4ee4\u7684\u4e3b\u673a\uff0c\u4e0d\u5177\u6709\u4efb\u4f55\u6570\u636e\u5b58\u50a8\u6216 control plane \u7ec4\u4ef6\u3002"),(0,a.kt)("li",{parentName:"ul"},"Server \u548c Agent \u90fd\u8fd0\u884c kubelet\u3001\u5bb9\u5668\u8fd0\u884c\u65f6\u548c CNI\u3002\u6709\u5173\u8fd0\u884c\u65e0 Agent \u7684 Server \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"li",href:"/zh/advanced/#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7"},"\u9ad8\u7ea7\u9009\u9879"),"\u3002")),(0,a.kt)("p",null,(0,a.kt)("img",{src:r(4530).Z,width:"1562",height:"898"})),(0,a.kt)("h3",{id:"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e"},"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e"),(0,a.kt)("p",null,"\u4e0b\u56fe\u663e\u793a\u4e86\u5177\u6709\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5e93\u7684\u5355\u8282\u70b9 K3s Server \u96c6\u7fa4\u793a\u4f8b\u3002"),(0,a.kt)("p",null,"\u5728\u6b64\u914d\u7f6e\u4e2d\uff0c\u6bcf\u4e2a Agent \u8282\u70b9\u90fd\u6ce8\u518c\u5230\u540c\u4e00\u4e2a Server \u8282\u70b9\u3002K3s \u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u8c03\u7528 Server \u8282\u70b9\u4e0a\u7684 K3s API \u6765\u64cd\u4f5c Kubernetes \u8d44\u6e90\u3002"),(0,a.kt)(i.Z,{alt:"K3s Architecture with a Single Server",sources:{light:(0,l.Z)("/img/k3s-architecture-single-server.svg"),dark:(0,l.Z)("/img/k3s-architecture-single-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\u9ad8\u53ef\u7528-k3s"},"\u9ad8\u53ef\u7528 K3s"),(0,a.kt)("p",null,"\u5355\u670d\u52a1\u5668\u96c6\u7fa4\u53ef\u4ee5\u6ee1\u8db3\u5404\u79cd\u7528\u4f8b\uff0c\u4f46\u5982\u679c\u4f60\u7684\u73af\u5883\u5bf9 Kubernetes control plane \u7684\u6b63\u5e38\u8fd0\u884c\u65f6\u95f4\u6709\u8981\u6c42\uff0c\u4f60\u53ef\u4ee5\u5728 HA \u914d\u7f6e\u4e2d\u8fd0\u884c K3s\u3002\u4e00\u4e2a\u9ad8\u53ef\u7528 K3s \u96c6\u7fa4\u5305\u62ec\uff1a"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"\u5d4c\u5165\u5f0f\u6570\u636e\u5e93",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e09\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8"),"\uff08\u4e0e\u5355\u8282\u70b9\u8bbe\u7f6e\u4e2d\u4f7f\u7528\u7684\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5b58\u50a8\u76f8\u53cd\uff09")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers",sources:{light:(0,l.Z)("/img/k3s-architecture-ha-embedded.svg"),dark:(0,l.Z)("/img/k3s-architecture-ha-embedded-dark.svg")},mdxType:"ThemedImage"})),(0,a.kt)(k,{value:"\u5916\u90e8\u6570\u636e\u5e93",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e24\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\u5916\u90e8\u6570\u636e\u5b58\u50a8"),"\uff08\u4f8b\u5982 MySQL\u3001PostgreSQL \u6216 etcd\uff09")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers and an External DB",sources:{light:(0,l.Z)("/img/k3s-architecture-ha-external.svg"),dark:(0,l.Z)("/img/k3s-architecture-ha-external-dark.svg")},mdxType:"ThemedImage"}))),(0,a.kt)("h3",{id:"agent-\u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"},"Agent \u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"),(0,a.kt)("p",null,"\u5728 HA \u670d\u52a1\u5668\u914d\u7f6e\u4e2d\uff0c\u6bcf\u4e2a\u8282\u70b9\u90fd\u80fd\u4f7f\u7528\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740\u5411 Kubernetes API \u6ce8\u518c\uff0c\u5982\u4e0b\u56fe\u6240\u793a\u3002"),(0,a.kt)("p",null,"\u6ce8\u518c\u540e\uff0cAgent \u8282\u70b9\u76f4\u63a5\u4e0e\u5176\u4e2d\u4e00\u4e2a Server \u8282\u70b9\u5efa\u7acb\u8fde\u63a5\u3002"),(0,a.kt)(i.Z,{alt:"Agent Registration HA",sources:{light:(0,l.Z)("/img/k3s-production-setup.svg"),dark:(0,l.Z)("/img/k3s-production-setup-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"agent-\u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406"},"Agent \u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406"),(0,a.kt)("p",null,"Agent \u8282\u70b9\u901a\u8fc7 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s agent")," \u8fdb\u7a0b\u53d1\u8d77\u7684 WebSocket \u8fde\u63a5\u8fdb\u884c\u6ce8\u518c\uff0c\u8fde\u63a5\u7531\u4f5c\u4e3a agent \u8fdb\u7a0b\u4e00\u90e8\u5206\u8fd0\u884c\u7684\u5ba2\u6237\u7aef\u8d1f\u8f7d\u5747\u8861\u5668\u7ef4\u62a4\u3002\u6700\u521d\uff0cAgent \u901a\u8fc7\u672c\u5730\u8d1f\u8f7d\u5747\u8861\u5668\u7aef\u53e3 6443 \u8fde\u63a5\u5230 supervisor\uff08\u548c kube-apiserver\uff09\u3002\u8d1f\u8f7d\u5747\u8861\u5668\u7ef4\u62a4\u4e86\u4e00\u4e2a\u8981\u8fde\u63a5\u7684\u53ef\u7528\u7aef\u70b9\u5217\u8868\u3002\u9ed8\u8ba4\uff08\u4e5f\u662f\u6700\u521d\u552f\u4e00\u7684\uff09\u7aef\u70b9\u7531 ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," \u5730\u5740\u4e2d\u7684\u4e3b\u673a\u540d\u64ad\u79cd\u3002\u8fde\u63a5\u5230\u96c6\u7fa4\u540e\uff0cAgent \u4f1a\u4ece\u9ed8\u8ba4\u547d\u540d\u7a7a\u95f4\u4e2d\u7684 Kubernetes Service \u7aef\u70b9\u5217\u8868\u4e2d\u68c0\u7d22 kube-apiserver \u5730\u5740\u5217\u8868\u3002\u8fd9\u4e9b\u7aef\u70b9\u6dfb\u52a0\u5230\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u7136\u540e\u8d1f\u8f7d\u5747\u8861\u5668\u5c06\u4fdd\u6301\u4e0e\u96c6\u7fa4\u4e2d\u6240\u6709 Server \u7a33\u5b9a\u8fde\u63a5\uff0c\u63d0\u4f9b\u4e0e kube-apiserver \u7684\u8fde\u63a5\uff0c\u4ece\u800c\u5bb9\u5fcd\u5355\u4e2a Server \u7684\u4e2d\u65ad\u3002"),(0,a.kt)("p",null,"Agent \u5c06\u4f7f\u7528\u8282\u70b9\u96c6\u7fa4 Secret \u4ee5\u53ca\u968f\u673a\u751f\u6210\u7684\u8282\u70b9\u5bc6\u7801\u6ce8\u518c\u5230 Server\uff0c\u5bc6\u7801\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/password")," \u4e2d\u3002Server \u4f1a\u5c06\u5404\u4e2a\u8282\u70b9\u7684\u5bc6\u7801\u5b58\u50a8\u4e3a Kubernetes Secret\uff0c\u540e\u7eed\u7684\u4efb\u4f55\u5c1d\u8bd5\u90fd\u5fc5\u987b\u4f7f\u7528\u76f8\u540c\u7684\u5bc6\u7801\u3002\u8282\u70b9\u5bc6\u7801 Secret \u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\uff0c\u540d\u79f0\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"<host>.node-password.k3s")," \u6a21\u677f\u3002\u8fd9\u6837\u505a\u662f\u4e3a\u4e86\u4fdd\u62a4\u8282\u70b9 ID \u7684\u5b8c\u6574\u6027\u3002"),(0,a.kt)("p",null,"\u5982\u679c Agent \u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node")," \u76ee\u5f55\u88ab\u5220\u9664\uff0c\u6216\u8005\u4f60\u5e0c\u671b\u4f7f\u7528\u73b0\u6709\u540d\u79f0\u91cd\u65b0\u52a0\u5165\u8282\u70b9\uff0c\u90a3\u4e48\u4f60\u9700\u8981\u4ece\u96c6\u7fa4\u4e2d\u5220\u9664\u8be5\u8282\u70b9\u3002\u8fd9\u5c06\u6e05\u9664\u65e7\u8282\u70b9\u6761\u76ee\u548c\u8282\u70b9\u5bc6\u7801 Secret\uff0c\u5e76\u5141\u8bb8\u8282\u70b9\uff08\u91cd\u65b0\uff09\u52a0\u5165\u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u7ecf\u5e38\u91cd\u590d\u4f7f\u7528\u4e3b\u673a\u540d\uff0c\u4f46\u65e0\u6cd5\u5220\u9664\u8282\u70b9\u5bc6\u7801 Secret\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," \u6807\u5fd7\u542f\u52a8 K3s Server \u6216 Agent\uff0c\u4ece\u800c\u5c06\u552f\u4e00\u7684\u8282\u70b9 ID \u81ea\u52a8\u9644\u52a0\u5230\u4e3b\u673a\u540d\u3002\u542f\u7528\u540e\uff0c\u8282\u70b9 ID \u4e5f\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/")," \u4e2d\u3002"))}v.isMDXComponent=!0},4530:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg"}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9596],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},i=Object.keys(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var o=n.createContext({}),c=function(e){var t=n.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},u=function(e){var t=c(e.components);return n.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,i=e.originalType,o=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=c(r),m=a,k=d["".concat(o,".").concat(m)]||d[m]||p[m]||i;return r?n.createElement(k,l(l({ref:t},u),{},{components:r})):n.createElement(k,l({ref:t},u))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var i=r.length,l=new Array(i);l[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:a,l[1]=s;for(var c=2;c<i;c++)l[c]=r[c];return n.createElement.apply(null,l)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5e3:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>u,contentTitle:()=>o,default:()=>v,frontMatter:()=>s,metadata:()=>c,toc:()=>p});var n=r(3117),a=(r(7294),r(3905)),i=r(941),l=r(4996);const s={title:"\u67b6\u6784",weight:1},o=void 0,c={unversionedId:"architecture/architecture",id:"architecture/architecture",title:"\u67b6\u6784",description:"\u672c\u6587\u4ecb\u7ecd\u4e86\u9ad8\u53ef\u7528\uff08HA\uff09K3s \u670d\u52a1\u5668\u96c6\u7fa4\u7684\u67b6\u6784\uff0c\u4ee5\u53ca K3s \u4e0e\u5355\u8282\u70b9\u670d\u52a1\u5668\u96c6\u7fa4\u7684\u533a\u522b\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/architecture/architecture.md",sourceDirName:"architecture",slug:"/architecture/",permalink:"/zh/architecture/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/architecture/architecture.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u67b6\u6784",weight:1},sidebar:"mySidebar",previous:{title:"K3s - \u8f7b\u91cf\u7ea7 Kubernetes",permalink:"/zh/"},next:{title:"\u5feb\u901f\u5165\u95e8\u6307\u5357",permalink:"/zh/quick-start/"}},u={},p=[{value:"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e",id:"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e",level:3},{value:"\u9ad8\u53ef\u7528 K3s",id:"\u9ad8\u53ef\u7528-k3s",level:3},{value:"Agent \u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740",id:"agent-\u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740",level:3},{value:"Agent \u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406",id:"agent-\u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,a.kt)("div",t)},m=d("Tabs"),k=d("TabItem"),g={toc:p};function v(e){let{components:t,...s}=e;return(0,a.kt)("wrapper",(0,n.Z)({},g,s,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u9ad8\u53ef\u7528\uff08HA\uff09K3s \u670d\u52a1\u5668\u96c6\u7fa4\u7684\u67b6\u6784\uff0c\u4ee5\u53ca K3s \u4e0e\u5355\u8282\u70b9\u670d\u52a1\u5668\u96c6\u7fa4\u7684\u533a\u522b\u3002"),(0,a.kt)("p",null,"\u672c\u6587\u8fd8\u63cf\u8ff0\u4e86 Agent \u8282\u70b9\u662f\u5982\u4f55\u6ce8\u518c\u5230 K3s Server \u7684\u3002"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"Server \u8282\u70b9\u6307\u7684\u662f\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s server")," \u547d\u4ee4\u7684\u4e3b\u673a\uff0ccontrol plane \u548c\u6570\u636e\u5b58\u50a8\u7ec4\u4ef6\u7531 K3s \u7ba1\u7406\u3002"),(0,a.kt)("li",{parentName:"ul"},"Agent \u8282\u70b9\u6307\u7684\u662f\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"li"},"k3s agent")," \u547d\u4ee4\u7684\u4e3b\u673a\uff0c\u4e0d\u5177\u6709\u4efb\u4f55\u6570\u636e\u5b58\u50a8\u6216 control plane \u7ec4\u4ef6\u3002"),(0,a.kt)("li",{parentName:"ul"},"Server \u548c Agent \u90fd\u8fd0\u884c kubelet\u3001\u5bb9\u5668\u8fd0\u884c\u65f6\u548c CNI\u3002\u6709\u5173\u8fd0\u884c\u65e0 Agent \u7684 Server \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"li",href:"/zh/advanced/#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7"},"\u9ad8\u7ea7\u9009\u9879"),"\u3002")),(0,a.kt)("p",null,(0,a.kt)("img",{src:r(4530).Z,width:"1562",height:"898"})),(0,a.kt)("h3",{id:"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e"},"\u5e26\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u5355\u670d\u52a1\u5668\u8bbe\u7f6e"),(0,a.kt)("p",null,"\u4e0b\u56fe\u663e\u793a\u4e86\u5177\u6709\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5e93\u7684\u5355\u8282\u70b9 K3s Server \u96c6\u7fa4\u793a\u4f8b\u3002"),(0,a.kt)("p",null,"\u5728\u6b64\u914d\u7f6e\u4e2d\uff0c\u6bcf\u4e2a Agent \u8282\u70b9\u90fd\u6ce8\u518c\u5230\u540c\u4e00\u4e2a Server \u8282\u70b9\u3002K3s \u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u8c03\u7528 Server \u8282\u70b9\u4e0a\u7684 K3s API \u6765\u64cd\u4f5c Kubernetes \u8d44\u6e90\u3002"),(0,a.kt)(i.Z,{alt:"K3s Architecture with a Single Server",sources:{light:(0,l.Z)("/img/k3s-architecture-single-server.svg"),dark:(0,l.Z)("/img/k3s-architecture-single-server-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"\u9ad8\u53ef\u7528-k3s"},"\u9ad8\u53ef\u7528 K3s"),(0,a.kt)("p",null,"\u5355\u670d\u52a1\u5668\u96c6\u7fa4\u53ef\u4ee5\u6ee1\u8db3\u5404\u79cd\u7528\u4f8b\uff0c\u4f46\u5982\u679c\u4f60\u7684\u73af\u5883\u5bf9 Kubernetes control plane \u7684\u6b63\u5e38\u8fd0\u884c\u65f6\u95f4\u6709\u8981\u6c42\uff0c\u4f60\u53ef\u4ee5\u5728 HA \u914d\u7f6e\u4e2d\u8fd0\u884c K3s\u3002\u4e00\u4e2a\u9ad8\u53ef\u7528 K3s \u96c6\u7fa4\u5305\u62ec\uff1a"),(0,a.kt)(m,{mdxType:"Tabs"},(0,a.kt)(k,{value:"\u5d4c\u5165\u5f0f\u6570\u636e\u5e93",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e09\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8"),"\uff08\u4e0e\u5355\u8282\u70b9\u8bbe\u7f6e\u4e2d\u4f7f\u7528\u7684\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5b58\u50a8\u76f8\u53cd\uff09")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers",sources:{light:(0,l.Z)("/img/k3s-architecture-ha-embedded.svg"),dark:(0,l.Z)("/img/k3s-architecture-ha-embedded-dark.svg")},mdxType:"ThemedImage"})),(0,a.kt)(k,{value:"\u5916\u90e8\u6570\u636e\u5e93",mdxType:"TabItem"},(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e24\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\u5916\u90e8\u6570\u636e\u5b58\u50a8"),"\uff08\u4f8b\u5982 MySQL\u3001PostgreSQL \u6216 etcd\uff09")),(0,a.kt)(i.Z,{alt:"K3s Architecture with High-availability Servers and an External DB",sources:{light:(0,l.Z)("/img/k3s-architecture-ha-external.svg"),dark:(0,l.Z)("/img/k3s-architecture-ha-external-dark.svg")},mdxType:"ThemedImage"}))),(0,a.kt)("h3",{id:"agent-\u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"},"Agent \u8282\u70b9\u7684\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"),(0,a.kt)("p",null,"\u5728 HA \u670d\u52a1\u5668\u914d\u7f6e\u4e2d\uff0c\u6bcf\u4e2a\u8282\u70b9\u90fd\u80fd\u4f7f\u7528\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740\u5411 Kubernetes API \u6ce8\u518c\uff0c\u5982\u4e0b\u56fe\u6240\u793a\u3002"),(0,a.kt)("p",null,"\u6ce8\u518c\u540e\uff0cAgent \u8282\u70b9\u76f4\u63a5\u4e0e\u5176\u4e2d\u4e00\u4e2a Server \u8282\u70b9\u5efa\u7acb\u8fde\u63a5\u3002"),(0,a.kt)(i.Z,{alt:"Agent Registration HA",sources:{light:(0,l.Z)("/img/k3s-production-setup.svg"),dark:(0,l.Z)("/img/k3s-production-setup-dark.svg")},mdxType:"ThemedImage"}),(0,a.kt)("h3",{id:"agent-\u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406"},"Agent \u8282\u70b9\u6ce8\u518c\u7684\u5de5\u4f5c\u539f\u7406"),(0,a.kt)("p",null,"Agent \u8282\u70b9\u901a\u8fc7 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s agent")," \u8fdb\u7a0b\u53d1\u8d77\u7684 WebSocket \u8fde\u63a5\u8fdb\u884c\u6ce8\u518c\uff0c\u8fde\u63a5\u7531\u4f5c\u4e3a agent \u8fdb\u7a0b\u4e00\u90e8\u5206\u8fd0\u884c\u7684\u5ba2\u6237\u7aef\u8d1f\u8f7d\u5747\u8861\u5668\u7ef4\u62a4\u3002\u6700\u521d\uff0cAgent \u901a\u8fc7\u672c\u5730\u8d1f\u8f7d\u5747\u8861\u5668\u7aef\u53e3 6443 \u8fde\u63a5\u5230 supervisor\uff08\u548c kube-apiserver\uff09\u3002\u8d1f\u8f7d\u5747\u8861\u5668\u7ef4\u62a4\u4e86\u4e00\u4e2a\u8981\u8fde\u63a5\u7684\u53ef\u7528\u7aef\u70b9\u5217\u8868\u3002\u9ed8\u8ba4\uff08\u4e5f\u662f\u6700\u521d\u552f\u4e00\u7684\uff09\u7aef\u70b9\u7531 ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," \u5730\u5740\u4e2d\u7684\u4e3b\u673a\u540d\u64ad\u79cd\u3002\u8fde\u63a5\u5230\u96c6\u7fa4\u540e\uff0cAgent \u4f1a\u4ece\u9ed8\u8ba4\u547d\u540d\u7a7a\u95f4\u4e2d\u7684 Kubernetes Service \u7aef\u70b9\u5217\u8868\u4e2d\u68c0\u7d22 kube-apiserver \u5730\u5740\u5217\u8868\u3002\u8fd9\u4e9b\u7aef\u70b9\u6dfb\u52a0\u5230\u8d1f\u8f7d\u5747\u8861\u5668\uff0c\u7136\u540e\u8d1f\u8f7d\u5747\u8861\u5668\u5c06\u4fdd\u6301\u4e0e\u96c6\u7fa4\u4e2d\u6240\u6709 Server \u7a33\u5b9a\u8fde\u63a5\uff0c\u63d0\u4f9b\u4e0e kube-apiserver \u7684\u8fde\u63a5\uff0c\u4ece\u800c\u5bb9\u5fcd\u5355\u4e2a Server \u7684\u4e2d\u65ad\u3002"),(0,a.kt)("p",null,"Agent \u5c06\u4f7f\u7528\u8282\u70b9\u96c6\u7fa4 Secret \u4ee5\u53ca\u968f\u673a\u751f\u6210\u7684\u8282\u70b9\u5bc6\u7801\u6ce8\u518c\u5230 Server\uff0c\u5bc6\u7801\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/password")," \u4e2d\u3002Server \u4f1a\u5c06\u5404\u4e2a\u8282\u70b9\u7684\u5bc6\u7801\u5b58\u50a8\u4e3a Kubernetes Secret\uff0c\u540e\u7eed\u7684\u4efb\u4f55\u5c1d\u8bd5\u90fd\u5fc5\u987b\u4f7f\u7528\u76f8\u540c\u7684\u5bc6\u7801\u3002\u8282\u70b9\u5bc6\u7801 Secret \u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\uff0c\u540d\u79f0\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"<host>.node-password.k3s")," \u6a21\u677f\u3002\u8fd9\u6837\u505a\u662f\u4e3a\u4e86\u4fdd\u62a4\u8282\u70b9 ID \u7684\u5b8c\u6574\u6027\u3002"),(0,a.kt)("p",null,"\u5982\u679c Agent \u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node")," \u76ee\u5f55\u88ab\u5220\u9664\uff0c\u6216\u8005\u4f60\u5e0c\u671b\u4f7f\u7528\u73b0\u6709\u540d\u79f0\u91cd\u65b0\u52a0\u5165\u8282\u70b9\uff0c\u90a3\u4e48\u4f60\u9700\u8981\u4ece\u96c6\u7fa4\u4e2d\u5220\u9664\u8be5\u8282\u70b9\u3002\u8fd9\u5c06\u6e05\u9664\u65e7\u8282\u70b9\u6761\u76ee\u548c\u8282\u70b9\u5bc6\u7801 Secret\uff0c\u5e76\u5141\u8bb8\u8282\u70b9\uff08\u91cd\u65b0\uff09\u52a0\u5165\u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u7ecf\u5e38\u91cd\u590d\u4f7f\u7528\u4e3b\u673a\u540d\uff0c\u4f46\u65e0\u6cd5\u5220\u9664\u8282\u70b9\u5bc6\u7801 Secret\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--with-node-id")," \u6807\u5fd7\u542f\u52a8 K3s Server \u6216 Agent\uff0c\u4ece\u800c\u5c06\u552f\u4e00\u7684\u8282\u70b9 ID \u81ea\u52a8\u9644\u52a0\u5230\u4e3b\u673a\u540d\u3002\u542f\u7528\u540e\uff0c\u8282\u70b9 ID \u4e5f\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/node/")," \u4e2d\u3002"))}v.isMDXComponent=!0},4530:(e,t,r)=>{r.d(t,{Z:()=>n});const n=r.p+"assets/images/how-it-works-k3s-revised-9c025ef482404bca2e53a89a0ba7a3c5.svg"}}]);
\ No newline at end of file
diff --git a/zh/assets/js/50715220.0f726c7e.js b/zh/assets/js/50715220.56fc3345.js
similarity index 98%
rename from zh/assets/js/50715220.0f726c7e.js
rename to zh/assets/js/50715220.56fc3345.js
index 7f71d7c23..2729ae85b 100644
--- a/zh/assets/js/50715220.0f726c7e.js
+++ b/zh/assets/js/50715220.56fc3345.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8576],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>s});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),d=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,p=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),k=d(n),s=a,u=k["".concat(p,".").concat(s)]||k[s]||m[s]||l;return n?r.createElement(u,i(i({ref:t},c),{},{components:n})):r.createElement(u,i({ref:t},c))}));function s(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=k;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},2927:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const l={title:"CLI \u5de5\u5177",weight:1},i=void 0,o={unversionedId:"cli/cli",id:"cli/cli",title:"CLI \u5de5\u5177",description:"K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u5305\u542b\u4e86\u5f88\u591a\u5de5\u5177\uff0c\u53ef\u5e2e\u52a9\u4f60\u7ba1\u7406\u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/cli.md",sourceDirName:"cli",slug:"/cli/",permalink:"/zh/cli/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"CLI \u5de5\u5177",weight:1},sidebar:"mySidebar",previous:{title:"\u5e38\u89c1\u95ee\u9898",permalink:"/zh/faq/"},next:{title:"server",permalink:"/zh/cli/server"}},p={},d=[],c={toc:d};function m(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u5305\u542b\u4e86\u5f88\u591a\u5de5\u5177\uff0c\u53ef\u5e2e\u52a9\u4f60\u7ba1\u7406\u96c6\u7fa4\u3002"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"\u547d\u4ee4"),(0,a.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s server")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c K3s Server \u8282\u70b9\uff0c\u8fd9\u5c06\u542f\u52a8 Kubernetes ",(0,a.kt)("inlineCode",{parentName:"td"},"apiserver"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"scheduler"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"controller-manager")," \u548c ",(0,a.kt)("inlineCode",{parentName:"td"},"cloud-controller-manager")," \u7ec4\u4ef6\uff0c\u4ee5\u53ca\u6570\u636e\u5b58\u50a8\u548c Agent \u7ec4\u4ef6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/server"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s server")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s agent")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c K3s Agent \u8282\u70b9\uff0c\u8fd9\u5c06\u542f\u52a8 ",(0,a.kt)("inlineCode",{parentName:"td"},"containerd"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"flannel"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"kube-router")," \u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u548c Kubernetes ",(0,a.kt)("inlineCode",{parentName:"td"},"kubelet")," \u548c ",(0,a.kt)("inlineCode",{parentName:"td"},"kube-proxy")," \u7ec4\u4ef6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/agent"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s agent")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s kubectl")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c\u5d4c\u5165\u5f0f ",(0,a.kt)("a",{parentName:"td",href:"https://kubernetes.io/docs/reference/kubectl"},(0,a.kt)("inlineCode",{parentName:"a"},"kubectl")," \u547d\u4ee4"),"\u3002\u8fd9\u662f\u7528\u4e8e\u4e0e Kubernetes apiserver \u4ea4\u4e92\u7684 CLI\u3002\u5982\u679c\u672a\u8bbe\u7f6e ",(0,a.kt)("inlineCode",{parentName:"td"},"KUBECONFIG")," \u73af\u5883\u53d8\u91cf\uff0c\u5c06\u81ea\u52a8\u5c1d\u8bd5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"td"},"/etc/rancher/k3s/k3s.yaml")," \u4e2d\u7684 kubeconfig\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s crictl")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c\u5d4c\u5165\u5f0f ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md"},(0,a.kt)("inlineCode",{parentName:"a"},"crictl")," \u547d\u4ee4"),"\u3002\u8fd9\u662f\u4e00\u4e2a CLI\uff0c\u7528\u4e8e\u4e0e Kubernetes \u7684\u5bb9\u5668\u8fd0\u884c\u65f6\u63a5\u53e3 (CRI) \u4ea4\u4e92\u3002\u5bf9\u8c03\u8bd5\u5f88\u6709\u7528\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s ctr")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c\u5d4c\u5165\u5f0f ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/projectatomic/containerd/blob/master/docs/cli.md"},(0,a.kt)("inlineCode",{parentName:"a"},"ctr")," \u547d\u4ee4"),"\u3002\u8fd9\u662f\u4e00\u4e2a\u7528\u4e8e containerd \u7684 CLI\uff0ccontainerd \u662f K3s \u4f7f\u7528\u7684\u5bb9\u5668 daemon\u3002\u5bf9\u8c03\u8bd5\u5f88\u6709\u7528\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s token")),(0,a.kt)("td",{parentName:"tr",align:null},"\u7ba1\u7406\u5f15\u5bfc Token\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s etcd-snapshot")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5bf9 K3s \u96c6\u7fa4\u6570\u636e\u8fdb\u884c\u6309\u9700\u5907\u4efd\u5e76\u4e0a\u4f20\u5230 S3\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/etcd-snapshot"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s secrets-encrypt")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5728\u5c06 Secret \u5b58\u50a8\u5230\u96c6\u7fa4\u4e2d\u65f6\u52a0\u5bc6 Secret\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/secrets-encrypt"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s certificate")),(0,a.kt)("td",{parentName:"tr",align:null},"\u7ba1\u7406 K3s \u8bc1\u4e66\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/certificate"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s certificate")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s completion")),(0,a.kt)("td",{parentName:"tr",align:null},"\u4e3a K3s \u751f\u6210 shell \u8865\u5168\u811a\u672c")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s help")),(0,a.kt)("td",{parentName:"tr",align:null},"\u663e\u793a\u547d\u4ee4\u5217\u8868\u6216\u67d0\u4e2a\u547d\u4ee4\u7684\u5e2e\u52a9")))))}m.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8576],{3905:(e,t,n)=>{n.d(t,{Zo:()=>c,kt:()=>s});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),d=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},c=function(e){var t=d(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,p=e.parentName,c=o(e,["components","mdxType","originalType","parentName"]),k=d(n),s=a,u=k["".concat(p,".").concat(s)]||k[s]||m[s]||l;return n?r.createElement(u,i(i({ref:t},c),{},{components:n})):r.createElement(u,i({ref:t},c))}));function s(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,i=new Array(l);i[0]=k;var o={};for(var p in t)hasOwnProperty.call(t,p)&&(o[p]=t[p]);o.originalType=e,o.mdxType="string"==typeof e?e:a,i[1]=o;for(var d=2;d<l;d++)i[d]=n[d];return r.createElement.apply(null,i)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},2927:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>o,toc:()=>d});var r=n(3117),a=(n(7294),n(3905));const l={title:"CLI \u5de5\u5177",weight:1},i=void 0,o={unversionedId:"cli/cli",id:"cli/cli",title:"CLI \u5de5\u5177",description:"K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u5305\u542b\u4e86\u5f88\u591a\u5de5\u5177\uff0c\u53ef\u5e2e\u52a9\u4f60\u7ba1\u7406\u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/cli.md",sourceDirName:"cli",slug:"/cli/",permalink:"/zh/cli/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"CLI \u5de5\u5177",weight:1},sidebar:"mySidebar",previous:{title:"\u5e38\u89c1\u95ee\u9898",permalink:"/zh/faq/"},next:{title:"server",permalink:"/zh/cli/server"}},p={},d=[],c={toc:d};function m(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u5305\u542b\u4e86\u5f88\u591a\u5de5\u5177\uff0c\u53ef\u5e2e\u52a9\u4f60\u7ba1\u7406\u96c6\u7fa4\u3002"),(0,a.kt)("table",null,(0,a.kt)("thead",{parentName:"table"},(0,a.kt)("tr",{parentName:"thead"},(0,a.kt)("th",{parentName:"tr",align:null},"\u547d\u4ee4"),(0,a.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,a.kt)("tbody",{parentName:"table"},(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s server")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c K3s Server \u8282\u70b9\uff0c\u8fd9\u5c06\u542f\u52a8 Kubernetes ",(0,a.kt)("inlineCode",{parentName:"td"},"apiserver"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"scheduler"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"controller-manager")," \u548c ",(0,a.kt)("inlineCode",{parentName:"td"},"cloud-controller-manager")," \u7ec4\u4ef6\uff0c\u4ee5\u53ca\u6570\u636e\u5b58\u50a8\u548c Agent \u7ec4\u4ef6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/server"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s server")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s agent")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c K3s Agent \u8282\u70b9\uff0c\u8fd9\u5c06\u542f\u52a8 ",(0,a.kt)("inlineCode",{parentName:"td"},"containerd"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"flannel"),"\u3001",(0,a.kt)("inlineCode",{parentName:"td"},"kube-router")," \u7f51\u7edc\u7b56\u7565\u63a7\u5236\u5668\u548c Kubernetes ",(0,a.kt)("inlineCode",{parentName:"td"},"kubelet")," \u548c ",(0,a.kt)("inlineCode",{parentName:"td"},"kube-proxy")," \u7ec4\u4ef6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/agent"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s agent")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s kubectl")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c\u5d4c\u5165\u5f0f ",(0,a.kt)("a",{parentName:"td",href:"https://kubernetes.io/docs/reference/kubectl"},(0,a.kt)("inlineCode",{parentName:"a"},"kubectl")," \u547d\u4ee4"),"\u3002\u8fd9\u662f\u7528\u4e8e\u4e0e Kubernetes apiserver \u4ea4\u4e92\u7684 CLI\u3002\u5982\u679c\u672a\u8bbe\u7f6e ",(0,a.kt)("inlineCode",{parentName:"td"},"KUBECONFIG")," \u73af\u5883\u53d8\u91cf\uff0c\u5c06\u81ea\u52a8\u5c1d\u8bd5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"td"},"/etc/rancher/k3s/k3s.yaml")," \u4e2d\u7684 kubeconfig\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s crictl")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c\u5d4c\u5165\u5f0f ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md"},(0,a.kt)("inlineCode",{parentName:"a"},"crictl")," \u547d\u4ee4"),"\u3002\u8fd9\u662f\u4e00\u4e2a CLI\uff0c\u7528\u4e8e\u4e0e Kubernetes \u7684\u5bb9\u5668\u8fd0\u884c\u65f6\u63a5\u53e3 (CRI) \u4ea4\u4e92\u3002\u5bf9\u8c03\u8bd5\u5f88\u6709\u7528\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s ctr")),(0,a.kt)("td",{parentName:"tr",align:null},"\u8fd0\u884c\u5d4c\u5165\u5f0f ",(0,a.kt)("a",{parentName:"td",href:"https://github.com/projectatomic/containerd/blob/master/docs/cli.md"},(0,a.kt)("inlineCode",{parentName:"a"},"ctr")," \u547d\u4ee4"),"\u3002\u8fd9\u662f\u4e00\u4e2a\u7528\u4e8e containerd \u7684 CLI\uff0ccontainerd \u662f K3s \u4f7f\u7528\u7684\u5bb9\u5668 daemon\u3002\u5bf9\u8c03\u8bd5\u5f88\u6709\u7528\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s token")),(0,a.kt)("td",{parentName:"tr",align:null},"\u7ba1\u7406\u5f15\u5bfc Token\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s etcd-snapshot")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5bf9 K3s \u96c6\u7fa4\u6570\u636e\u8fdb\u884c\u6309\u9700\u5907\u4efd\u5e76\u4e0a\u4f20\u5230 S3\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/etcd-snapshot"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s secrets-encrypt")),(0,a.kt)("td",{parentName:"tr",align:null},"\u5728\u5c06 Secret \u5b58\u50a8\u5230\u96c6\u7fa4\u4e2d\u65f6\u52a0\u5bc6 Secret\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/secrets-encrypt"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s secrets-encrypt")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s certificate")),(0,a.kt)("td",{parentName:"tr",align:null},"\u7ba1\u7406 K3s \u8bc1\u4e66\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"td",href:"/zh/cli/certificate"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s certificate")," \u547d\u4ee4\u6587\u6863"),"\u3002")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s completion")),(0,a.kt)("td",{parentName:"tr",align:null},"\u4e3a K3s \u751f\u6210 shell \u8865\u5168\u811a\u672c")),(0,a.kt)("tr",{parentName:"tbody"},(0,a.kt)("td",{parentName:"tr",align:null},(0,a.kt)("inlineCode",{parentName:"td"},"k3s help")),(0,a.kt)("td",{parentName:"tr",align:null},"\u663e\u793a\u547d\u4ee4\u5217\u8868\u6216\u67d0\u4e2a\u547d\u4ee4\u7684\u5e2e\u52a9")))))}m.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/53163943.c2232d18.js b/zh/assets/js/53163943.f91492b1.js
similarity index 99%
rename from zh/assets/js/53163943.c2232d18.js
rename to zh/assets/js/53163943.f91492b1.js
index 38e88e159..320302fb2 100644
--- a/zh/assets/js/53163943.c2232d18.js
+++ b/zh/assets/js/53163943.f91492b1.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5493],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>u});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),o=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},p=function(e){var t=o(e.components);return n.createElement(l.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},k=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,c=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),k=o(r),u=a,m=k["".concat(l,".").concat(u)]||k[u]||d[u]||c;return r?n.createElement(m,i(i({ref:t},p),{},{components:r})):n.createElement(m,i({ref:t},p))}));function u(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var c=r.length,i=new Array(c);i[0]=k;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var o=2;o<c;o++)i[o]=r[o];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}k.displayName="MDXCreateElement"},8718:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>d,frontMatter:()=>c,metadata:()=>s,toc:()=>o});var n=r(3117),a=(r(7294),r(3905));const c={title:"certificate"},i="k3s certificate",s={unversionedId:"cli/certificate",id:"cli/certificate",title:"certificate",description:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/certificate.md",sourceDirName:"cli",slug:"/cli/certificate",permalink:"/zh/cli/certificate",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"certificate"},sidebar:"mySidebar",previous:{title:"agent",permalink:"/zh/cli/agent"},next:{title:"etcd-snapshot",permalink:"/zh/cli/etcd-snapshot"}},l={},o=[{value:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",level:2},{value:"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",id:"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",level:3},{value:"CA \u8bc1\u4e66",id:"ca-\u8bc1\u4e66",level:2},{value:"\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66",id:"\u4f7f\u7528\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66",level:3},{value:"\u81ea\u5b9a\u4e49 CA \u62d3\u6251",id:"\u81ea\u5b9a\u4e49-ca-\u62d3\u6251",level:4},{value:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",level:4},{value:"\u8f6e\u6362\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66",id:"\u8f6e\u6362\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66",level:3},{value:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-1",level:4},{value:"\u8f6e\u6362\u81ea\u7b7e\u540d CA \u8bc1\u4e66",id:"\u8f6e\u6362\u81ea\u7b7e\u540d-ca-\u8bc1\u4e66",level:3},{value:"\u9ed8\u8ba4 CA \u62d3\u6251",id:"\u9ed8\u8ba4-ca-\u62d3\u6251",level:4},{value:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-2",level:4},{value:"ServiceAccount Issuer \u5bc6\u94a5\u8f6e\u6362",id:"serviceaccount-issuer-\u5bc6\u94a5\u8f6e\u6362",level:2}],p={toc:o};function d(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-certificate"},"k3s certificate"),(0,a.kt)("h2",{id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"},"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"),(0,a.kt)("p",null,"K3s \u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\u81ea\u9881\u53d1\u65e5\u8d77 365 \u5929\u5185\u6709\u6548\u3002\u6bcf\u6b21\u542f\u52a8 K3s \u65f6\uff0c\u5df2\u8fc7\u671f\u6216 90 \u5929\u5185\u8fc7\u671f\u7684\u8bc1\u4e66\u90fd\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,a.kt)("h3",{id:"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"},"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"),(0,a.kt)("p",null,"\u8981\u624b\u52a8\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate")," \u5b50\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u505c\u6b62 K3s\nsystemctl stop k3s\n\n# \u8f6e\u6362\u8bc1\u4e66\nk3s certificate rotate\n\n# \u542f\u52a8 K3s\nsystemctl start k3s\n")),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u6307\u5b9a\u8bc1\u4e66\u540d\u79f0\u6765\u8f6e\u6362\u5355\u4e2a\u6216\u591a\u4e2a\u8bc1\u4e66\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s certificate rotate --service <SERVICE>,<SERVICE>\n")),(0,a.kt)("p",null,"\u53ef\u4ee5\u8f6e\u6362\u7684\u8bc1\u4e66\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"admin"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"api-server"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"controller-manager"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"scheduler"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"cloud-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"auth-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kubelet"),"\uff0c",(0,a.kt)("inlineCode",{parentName:"p"},"kube-proxy"),"\u3002"),(0,a.kt)("h2",{id:"ca-\u8bc1\u4e66"},"CA \u8bc1\u4e66"),(0,a.kt)("p",null,"Kubernetes \u9700\u8981\u5927\u91cf CA \u8bc1\u4e66\u624d\u80fd\u6b63\u5e38\u8fd0\u884c\u3002\u6709\u5173 Kubernetes \u5982\u4f55\u4f7f\u7528 CA \u8bc1\u4e66\uff0c\u8bf7\u53c2\u9605 Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates"},"PKI \u8bc1\u4e66\u548c\u8981\u6c42"),"\u6587\u6863\u3002"),(0,a.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cK3s \u5728\u7b2c\u4e00\u4e2a Server \u8282\u70b9\u542f\u52a8\u65f6\u751f\u6210\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u3002\u8fd9\u4e9b CA \u8bc1\u4e66\u81ea\u9881\u53d1\u65e5\u8d77 10 \u5e74\u5185\u6709\u6548\uff0c\u4e0d\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,a.kt)("p",null,"\u6743\u5a01 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u5b58\u50a8\u5728\u6570\u636e\u5b58\u50a8\u533a\u7684\u5f15\u5bfc\u7a0b\u5e8f\u5bc6\u94a5\u4e2d\uff0c\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#server"},"server token")," \u4f5c\u4e3a PBKDF2 \u5bc6\u7801\u548c AES256-GCM \u548c HMAC-SHA1 \u8fdb\u884c\u52a0\u5bc6\u3002\n\u5728 K3s Server \u542f\u52a8\u671f\u95f4\uff0cCA \u8bc1\u4e66\u548c\u5bc6\u94a5\u7684\u526f\u672c\u4f1a\u88ab\u63d0\u53d6\u5230\u78c1\u76d8\u3002\n\u4efb\u4f55 Server \u90fd\u53ef\u4ee5\u5728\u8282\u70b9\u52a0\u5165\u96c6\u7fa4\u65f6\u4e3a\u8282\u70b9\u751f\u6210\u53f6\u8bc1\u4e66\uff0c\u800c Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"},"Certificates API")," \u63a7\u5236\u5668\u53ef\u4ee5\u5728\u8fd0\u884c\u65f6\u9881\u53d1\u5176\u4ed6\u8bc1\u4e66\u3002"),(0,a.kt)("p",null,"\u8981\u8f6e\u6362 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u547d\u4ee4\u3002\n\u8be5\u547d\u4ee4\u4f1a\u6267\u884c\u5b8c\u6574\u6027\u68c0\u67e5\uff0c\u4ece\u800c\u786e\u8ba4\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u53ef\u7528\u3002\n\u5982\u679c\u66f4\u65b0\u540e\u7684\u6570\u636e\u6ca1\u6709\u95ee\u9898\uff0c\u5219\u4f1a\u66f4\u65b0\u6570\u636e\u5b58\u50a8\u7684\u52a0\u5bc6\u5f15\u5bfc\u7a0b\u5e8f\u5bc6\u94a5\uff0c\u5e76\u5728\u4e0b\u6b21 K3s \u542f\u52a8\u65f6\u4f7f\u7528\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\n\u5982\u679c\u5728\u9a8c\u8bc1\u8bc1\u4e66\u548c\u5bc6\u94a5\u65f6\u51fa\u73b0\u4e86\u95ee\u9898\uff0c\u5219\u4f1a\u5411\u7cfb\u7edf\u65e5\u5fd7\u62a5\u544a\u9519\u8bef\uff0c\u5e76\u53d6\u6d88\u64cd\u4f5c\u4e14\u4e0d\u505a\u4efb\u4f55\u66f4\u6539\u3002"),(0,a.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"\u4ece 2023-02 \u7248\u672c\uff08v1.26.2+k3s1\u3001v1.25.7+k3s1\u3001v1.24.11+k3s1\u3001v1.23.17+k3s1\uff09\u5f00\u59cb\uff0c\u652f\u6301 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u547d\u4ee4\u4ee5\u53ca\u4f7f\u7528\u7531\u5916\u90e8 CA \u7b7e\u53d1\u7684 CA \u8bc1\u4e66\u3002")),(0,a.kt)("h3",{id:"\u4f7f\u7528\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66"},"\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66"),(0,a.kt)("p",null,"\u5728\u96c6\u7fa4\u4e2d\u7684\u7b2c\u4e00\u53f0 Server \u521d\u59cb\u542f\u52a8\u671f\u95f4\uff0c\u5982\u679c\u627e\u5230\u4e86\u653e\u7f6e\u5728\u6b63\u786e\u4f4d\u7f6e\u7684 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u5c06\u4e0d\u4f1a\u81ea\u52a8\u751f\u6210 CA \u8bc1\u4e66\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/generate-custom-ca-certs.sh"},"K3s \u4ed3\u5e93\u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/generate-custom-ca-certs.sh"))," \u793a\u4f8b\u811a\u672c\u7528\u4e8e\u9884\u5148\u521b\u5efa\u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\n\u8be5\u811a\u672c\u5e94\u5728\u9996\u6b21\u542f\u52a8 K3s \u4e4b\u524d\u8fd0\u884c\uff0c\u80fd\u521b\u5efa\u4e00\u6574\u5957\u7531\u901a\u7528\u6839\u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66\u7b7e\u540d\u7684\u53f6 CA \u8bc1\u4e66\u3002\n\u5982\u679c\u4f60\u5df2\u6709\u6839\u8bc1\u4e66\u6216\u4e2d\u95f4 CA \u8bc1\u4e66\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u6b64\u811a\u672c\uff08\u6216\u7528\u4f5c\u8d77\u70b9\uff09\u521b\u5efa CA \u8bc1\u4e66\uff0c\u4ece\u800c\u4f7f\u7528\u73b0\u6709\u673a\u6784\u4e2d\u7684 PKI \u6765\u914d\u7f6e K3s \u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u81ea\u5b9a\u4e49\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u6587\u4ef6\u5fc5\u987b\u653e\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u3002\u9700\u8981\u4ee5\u4e0b\u6587\u4ef6\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.key"),(0,a.kt)("br",{parentName:"li"}),"",(0,a.kt)("em",{parentName:"li"},"// \u6ce8\u610f\uff1a\u5373\u4f7f\u672a\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u4e5f\u9700\u8981 etcd \u6587\u4ef6\u3002")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.key"),(0,a.kt)("br",{parentName:"li"}),"",(0,a.kt)("em",{parentName:"li"},"// \u6ce8\u610f\uff1a\u8fd9\u662f\u7528\u4e8e\u7b7e\u7f72 ServiceAccount Token \u7684\u79c1\u94a5\u3002\u5b83\u6ca1\u6709\u5bf9\u5e94\u7684\u8bc1\u4e66\u3002")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"service.key"))),(0,a.kt)("h4",{id:"\u81ea\u5b9a\u4e49-ca-\u62d3\u6251"},"\u81ea\u5b9a\u4e49 CA \u62d3\u6251"),(0,a.kt)("p",null,"\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u5e94\u9075\u5faa\u4ee5\u4e0b\u62d3\u6251\u7ed3\u6784\uff1a"),(0,a.kt)("mermaid",{value:'graph TD\n  root("Root CA")\n  intermediate("Intermediate CA")\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  root -.-|SHA256| root-hash\n  root ---\x3e intermediate\n  intermediate --\x3e server-ca ==> kube-server-certs\n  intermediate --\x3e client-ca ==> kube-client-certs\n  intermediate --\x3e request-header-ca ==> request-header-certs\n  intermediate --\x3e etcd-peer-ca ==> etcd-peer-certs\n  intermediate --\x3e etcd-server-ca ==> etcd-server-certs'}),(0,a.kt)("h4",{id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"},"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"),(0,a.kt)("admonition",{type:"important"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c\u8981\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u901a\u8fc7\u73b0\u6709\u6839 CA \u6765\u7b7e\u53d1\u96c6\u7fa4 CA \u8bc1\u4e66\uff0c\u5219\u5fc5\u987b\u5728\u8fd0\u884c\u811a\u672c\u4e4b\u524d\u5c06\u6839\u6587\u4ef6\u548c\u4e2d\u95f4\u6587\u4ef6\u653e\u5728\u76ee\u6807\u76ee\u5f55\u4e2d\u3002\n\u5982\u679c\u6587\u4ef6\u4e0d\u5b58\u5728\uff0c\u811a\u672c\u5c06\u521b\u5efa\u65b0\u7684\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66\u3002")),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u53ea\u60f3\u4f7f\u7528\u73b0\u6709\u7684\u6839 CA \u8bc1\u4e66\uff0c\u8bf7\u63d0\u4f9b\u4ee5\u4e0b\u6587\u4ef6\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.key"))),(0,a.kt)("p",null,"\u8981\u4f7f\u7528\u73b0\u6709\u7684\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66\uff0c\u8bf7\u63d0\u4f9b\u4ee5\u4e0b\u6587\u4ef6\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.key"))),(0,a.kt)("p",null,"\u8981\u5728\u542f\u52a8 K3s \u4e4b\u524d\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u751f\u6210\u81ea\u5b9a\u4e49\u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u7528\u4e8e\u751f\u6210\u8bc1\u4e66\u7684\u76ee\u6807\u76ee\u5f55\u3002\nmkdir -p /var/lib/rancher/k3s/server/tls\n\n# \u5c06\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66 + \u5bc6\u94a5\u590d\u5236\u5230\u811a\u672c\u7684\u6b63\u786e\u4f4d\u7f6e\u3002\n# \u672c\u793a\u4f8b\u5047\u8bbe\u4f60\u5728 /etc/ssl \u4e2d\u653e\u7f6e\u4e86\u73b0\u6709\u7684\u6839 CA \u6587\u4ef6\u548c\u4e2d\u95f4 CA \u6587\u4ef6\u3002\n# \u5982\u679c\u4f60\u6ca1\u6709\u73b0\u6709\u7684\u6839\u8bc1\u4e66\u6216\u4e2d\u95f4 CA \u8bc1\u4e66\uff0c\u811a\u672c\u5c06\u4e3a\u4f60\u751f\u6210\u3002\ncp /etc/ssl/certs/root-ca.pem /etc/ssl/certs/intermediate-ca.pem /etc/ssl/private/intermediate-ca.key /var/lib/rancher/k3s/server/tls\n\n# \u751f\u6210\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash -\n")),(0,a.kt)("p",null,"\u5982\u679c\u547d\u4ee4\u6210\u529f\u5b8c\u6210\uff0c\u4f60\u53ef\u4ee5\u8fdb\u884c K3s \u7684\u9996\u6b21\u5b89\u88c5\u548c\u542f\u52a8\u3002\n\u5982\u679c\u811a\u672c\u751f\u6210\u4e86\u6839 CA \u6587\u4ef6\u6216\u4e2d\u95f4 CA \u6587\u4ef6\uff0c\u4f60\u5e94\u8be5\u5907\u4efd\u8fd9\u4e9b\u6587\u4ef6\uff0c\u8fd9\u6837\uff0c\u4f60\u5c31\u80fd\u5728\u9700\u8981\u8f6e\u6362 CA \u8bc1\u4e66\u65f6\u91cd\u65b0\u4f7f\u7528\u8fd9\u4e9b\u6587\u4ef6\u3002"),(0,a.kt)("h3",{id:"\u8f6e\u6362\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66"},"\u8f6e\u6362\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66"),(0,a.kt)("p",null,"\u8981\u8f6e\u6362\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u5b50\u547d\u4ee4\u3002\n\u66f4\u65b0\u540e\u7684\u6587\u4ef6\u5fc5\u987b\u6682\u5b58\u5230\u4e00\u4e2a\u4e34\u65f6\u76ee\u5f55\u4e2d\uff0c\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\uff0c\u5e76\u4e14\u5fc5\u987b\u5728\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s \u624d\u80fd\u4f7f\u7528\u66f4\u65b0\u540e\u7684\u8bc1\u4e66\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4e0d\u8981\u8986\u76d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u6b63\u5728\u4f7f\u7528\u7684\u6570\u636e\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u5c06\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u6682\u5b58\u5230\u5355\u72ec\u7684\u76ee\u5f55\u4e2d\u3002")),(0,a.kt)("p",null,"\u53ea\u8981\u662f\u4f7f\u7528\u76f8\u540c\u7684\u6839 CA\uff0c\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u542f\u52a8\u7684\u96c6\u7fa4\u80fd\u65e0\u4e2d\u65ad\u5730\u66f4\u65b0\u6216\u8f6e\u6362 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f7f\u7528\u65b0\u7684\u6839 CA\uff0c\u5219\u9700\u8981\u4e2d\u65ad\u624d\u80fd\u8fdb\u884c\u8f6e\u6362\u3002\u5fc5\u987b\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca --force")," \u9009\u9879\uff0c\u6240\u6709\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u8282\u70b9\uff08\u5305\u62ec server\uff09\u90fd\u9700\u8981\u91cd\u65b0\u914d\u7f6e\u624d\u80fd\u4f7f\u7528\u65b0\u7684 Token \u503c\uff0c\u5e76\u4e14 Pod \u9700\u8981\u91cd\u542f\u624d\u80fd\u4fe1\u4efb\u65b0\u7684\u6839 CA\u3002"),(0,a.kt)("h4",{id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-1"},"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"),(0,a.kt)("p",null,"\u4e0a\u9762\u7684\u793a\u4f8b ",(0,a.kt)("inlineCode",{parentName:"p"},"generate-custom-ca-certs.sh")," \u811a\u672c\u4e5f\u53ef\u7528\u4e8e\u5728\u65b0\u7684\u4e34\u65f6\u76ee\u5f55\u4e2d\u751f\u6210\u66f4\u65b0\u7684\u8bc1\u4e66\uff0c\u8fd9\u662f\u901a\u8fc7\u5c06\u6587\u4ef6\u590d\u5236\u5230\u6b63\u786e\u7684\u4f4d\u7f6e\u5e76\u8bbe\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"DATA_DIR")," \u73af\u5883\u53d8\u91cf\u5b9e\u73b0\u7684\u3002\n\u8981\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u751f\u6210\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u7528\u4e8e\u751f\u6210\u8bc1\u4e66\u7684\u4e34\u65f6\u76ee\u5f55\u3002\nmkdir -p /opt/k3s/server/tls\n\n# \u5c06\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66 + \u5bc6\u94a5\u590d\u5236\u5230\u811a\u672c\u7684\u6b63\u786e\u4f4d\u7f6e\u3002\n# \u5982\u679c\u662f\u975e\u4e2d\u65ad\u8f6e\u6362\uff0c\u5219\u9700\u8981\u7528\u4e8e\u751f\u6210\u539f\u59cb\u8bc1\u4e66\u7684\u540c\u4e00\u4e2a\u6839 CA\u3002\n# \u5982\u679c\u539f\u59cb\u6587\u4ef6\u4ecd\u5728\u6570\u636e\u76ee\u5f55\u4e2d\uff0c\u5219\u53ef\u4ee5\u8fd0\u884c\uff1a\ncp /var/lib/rancher/k3s/server/tls/root-ca.* /var/lib/rancher/k3s/server/tls/intermediate-ca.* /opt/k3s/server/tls\n\n# \u590d\u5236\u5f53\u524d\u7684 service-account \u7b7e\u540d\u5bc6\u94a5\uff0c\u8fd9\u6837\uff0c\u73b0\u6709\u7684 service-account token \u5c31\u4e0d\u4f1a\u5931\u6548\u3002\ncp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls\n\n# \u751f\u6210\u66f4\u65b0\u7684\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash -\n\n# \u5c06\u66f4\u65b0\u540e\u7684 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\u3002\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"\u5982\u679c ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," \u547d\u4ee4\u8fd4\u56de\u9519\u8bef\uff0c\u8bf7\u68c0\u67e5\u670d\u52a1\u65e5\u5fd7\u4e2d\u7684\u9519\u8bef\u3002\n\u547d\u4ee4\u6210\u529f\u5b8c\u6210\uff0c\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s\uff0c\u4f60\u9700\u8981\u5148\u91cd\u542f Server\uff0c\u7136\u540e\u518d\u91cd\u542f Agent\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528\u4e86 ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," \u9009\u9879\u6216\u66f4\u6539\u4e86\u6839 CA\uff0c\u8bf7\u786e\u4fdd\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u8282\u70b9\u5728\u91cd\u542f\u524d\u90fd\u91cd\u65b0\u914d\u7f6e\u4e3a\u4f7f\u7528\u65b0\u7684 Token \u503c\u3002\nToken \u53ef\u80fd\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," \u6587\u4ef6\u3001systemd \u5355\u5143\u6216 config.yaml \u4e2d\uff0c\u5177\u4f53\u53d6\u51b3\u4e8e\u8282\u70b9\u521d\u59cb\u5b89\u88c5\u65f6\u7684\u914d\u7f6e\u3002"),(0,a.kt)("h3",{id:"\u8f6e\u6362\u81ea\u7b7e\u540d-ca-\u8bc1\u4e66"},"\u8f6e\u6362\u81ea\u7b7e\u540d CA \u8bc1\u4e66"),(0,a.kt)("p",null,"\u8981\u8f6e\u6362 K3s \u751f\u6210\u7684\u81ea\u7b7e\u540d CA \u8bc1\u4e66\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u5b50\u547d\u4ee4\u3002\n\u66f4\u65b0\u540e\u7684\u6587\u4ef6\u5fc5\u987b\u6682\u5b58\u5230\u4e00\u4e2a\u4e34\u65f6\u76ee\u5f55\u4e2d\uff0c\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\uff0c\u5e76\u4e14\u5fc5\u987b\u5728\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s \u624d\u80fd\u4f7f\u7528\u66f4\u65b0\u540e\u7684\u8bc1\u4e66\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4e0d\u8981\u8986\u76d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u6b63\u5728\u4f7f\u7528\u7684\u6570\u636e\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u5c06\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u6682\u5b58\u5230\u5355\u72ec\u7684\u76ee\u5f55\u4e2d\u3002")),(0,a.kt)("p",null,"\u5982\u679c\u96c6\u7fa4\u5df2\u4f7f\u7528\u9ed8\u8ba4\u7684\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u542f\u52a8\uff0c\u8f6e\u6362\u5c06\u662f\u4e2d\u65ad\u7684\u3002\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u6240\u6709\u8282\u70b9\u90fd\u9700\u8981\u91cd\u65b0\u914d\u7f6e\u624d\u80fd\u4fe1\u4efb\u65b0\u7684 CA \u54c8\u5e0c\u3002\n\u5982\u679c\u65e7 CA \u8bc1\u4e66\u6ca1\u6709\u4ea4\u53c9\u7b7e\u540d\u65b0\u7684 CA \u8bc1\u4e66\uff0c\u4f60\u9700\u8981\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," \u9009\u9879\u6765\u7ed5\u8fc7\u5b8c\u6574\u6027\u68c0\u67e5\uff0c\u5e76\u4e14\u9700\u8981\u91cd\u542f Pod \u624d\u80fd\u4fe1\u4efb\u65b0\u7684\u6839 CA\u3002"),(0,a.kt)("h4",{id:"\u9ed8\u8ba4-ca-\u62d3\u6251"},"\u9ed8\u8ba4 CA \u62d3\u6251"),(0,a.kt)("p",null,"\u9ed8\u8ba4\u7684\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u62d3\u6251\u7ed3\u6784\u5982\u4e0b\uff1a"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca -.-|SHA256| root-hash\n  server-ca ===> kube-server-certs\n  client-ca ===> kube-client-certs\n  request-header-ca ===> request-header-certs\n  etcd-peer-ca ===> etcd-peer-certs\n  etcd-server-ca ===> etcd-server-certs'}),(0,a.kt)("p",null,"\u8f6e\u6362\u9ed8\u8ba4\u7684\u81ea\u7b7e\u540d CA \u65f6\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u5177\u6709\u4e2d\u95f4 CA \u7684\u4fee\u6539\u540e\u8bc1\u4e66\u62d3\u6251\u548c\u7531\u65e7 CA \u4ea4\u53c9\u7b7e\u540d\u7684\u65b0\u6839 CA\uff0c\u4ee5\u4fbf\u5728\u65b0\u65e7 CA \u4e4b\u95f4\u4fdd\u7559\u8fde\u7eed\u7684\u4fe1\u4efb\u94fe\uff1a"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca-old("Server CA<br/>(old)")\n  client-ca-old("Client CA<br/>(old)")\n  request-header-ca-old("API Aggregation CA<br/>(old)")\n  etcd-peer-ca-old("etcd Peer CA<br/>(old)")\n  etcd-server-ca-old("etcd Server CA<br/>(old)")\n\n  root-hash>"Join token CA hash"]\n\n  server-ca-xsigned("Server CA<br/>(cross-signed)")\n  client-ca-xsigned("Client CA<br/>(cross-signed)")\n  request-header-ca-xsigned("API Aggregation CA<br/>(cross-signed)")\n  etcd-peer-ca-xsigned("etcd Peer CA<br/>(cross-signed)")\n  etcd-server-ca-xsigned("etcd Server CA<br/>(cross-signed)")\n\n  server-ca-ssigned("Server CA<br/>(self-signed)")\n  client-ca-ssigned("Client CA<br/>(self-signed)")\n  request-header-ca-ssigned("API Aggregation CA<br/>(self-signed)")\n  etcd-peer-ca-ssigned("etcd Peer CA<br/>(self-signed)")\n  etcd-server-ca-ssigned("etcd Server CA<br/>(self-signed)")\n\n  server-ca("Intermediate<br/>Server CA")\n  client-ca("Intermediate<br/>Client CA")\n  request-header-ca("Intermediate<br/>API Aggregation CA")\n  etcd-peer-ca("Intermediate<br/>etcd Peer CA")\n  etcd-server-ca("Intermediate<br>etcd Server CA")\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca-ssigned -.-|SHA256| root-hash\n  server-ca-ssigned --\x3e server-ca ==> kube-server-certs\n  server-ca-old --\x3e server-ca-xsigned --\x3e server-ca\n  client-ca-ssigned --\x3e client-ca ==> kube-client-certs\n  client-ca-old --\x3e client-ca-xsigned --\x3e client-ca\n  request-header-ca-ssigned --\x3e request-header-ca ==> request-header-certs\n  request-header-ca-old --\x3e request-header-ca-xsigned --\x3e request-header-ca\n  etcd-peer-ca-ssigned --\x3e etcd-peer-ca ==> etcd-peer-certs\n  etcd-peer-ca-old --\x3e etcd-peer-ca-xsigned --\x3e etcd-peer-ca\n  etcd-server-ca-ssigned --\x3e etcd-server-ca ==> etcd-server-certs\n  etcd-server-ca-old --\x3e etcd-server-ca-xsigned --\x3e etcd-server-ca'}),(0,a.kt)("h4",{id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-2"},"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/rotate-default-ca-certs.sh"},"K3s \u4ed3\u5e93\u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/rotate-default-ca-certs.sh"))," \u793a\u4f8b\u811a\u672c\u7528\u4e8e\u521b\u5efa\u7531\u73b0\u6709 CA \u4ea4\u53c9\u7b7e\u540d\u7684\u66f4\u65b0 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002"),(0,a.kt)("p",null,"\u8981\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u751f\u6210\u7531\u73b0\u6709 CA \u4ea4\u53c9\u7b7e\u540d\u7684\u66f4\u65b0\u7684\u81ea\u7b7e\u540d\u8bc1\u4e66\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u66f4\u65b0\u7684 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u7531\u5f53\u524d CA \u4ea4\u53c9\u7b7e\u540d\u3002\n# \u8be5\u811a\u672c\u5c06\u521b\u5efa\u4e00\u4e2a\u5305\u542b\u66f4\u65b0\u8bc1\u4e66\u7684\u65b0\u4e34\u65f6\u76ee\u5f55\uff0c\u5e76\u8f93\u51fa\u65b0\u7684 Token \u503c\u3002\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash -\n\n# \u5c06\u66f4\u65b0\u540e\u7684\u8bc1\u4e66\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\u3002\u5728\u811a\u672c\u7684\u8f93\u51fa\u4e2d\u67e5\u770b\u66f4\u65b0\u540e\u7684 Token \u503c\u3002\nk3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca\n")),(0,a.kt)("p",null,"\u5982\u679c ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," \u547d\u4ee4\u8fd4\u56de\u9519\u8bef\uff0c\u8bf7\u68c0\u67e5\u670d\u52a1\u65e5\u5fd7\u4e2d\u7684\u9519\u8bef\u3002\n\u547d\u4ee4\u6210\u529f\u5b8c\u6210\uff0c\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s\uff0c\u4f60\u9700\u8981\u5148\u91cd\u542f Server\uff0c\u7136\u540e\u518d\u91cd\u542f Agent\u3002"),(0,a.kt)("p",null,"\u8bf7\u786e\u4fdd\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u8282\u70b9\uff08\u5305\u62ec server \u8282\u70b9\uff09\u5728\u91cd\u542f\u524d\u90fd\u91cd\u65b0\u914d\u7f6e\u4e3a\u4f7f\u7528\u65b0\u7684 Token \u503c\u3002\nToken \u53ef\u80fd\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," \u6587\u4ef6\u3001systemd \u5355\u5143\u6216 config.yaml \u4e2d\uff0c\u5177\u4f53\u53d6\u51b3\u4e8e\u8282\u70b9\u5728\u521d\u59cb\u5b89\u88c5\u65f6\u7684\u914d\u7f6e\u3002"),(0,a.kt)("h2",{id:"serviceaccount-issuer-\u5bc6\u94a5\u8f6e\u6362"},"ServiceAccount Issuer \u5bc6\u94a5\u8f6e\u6362"),(0,a.kt)("p",null,"service-account Issuer \u5bc6\u94a5\u662f\u7528\u4e8e\u7b7e\u53d1 service-account Token \u7684 RSA \u79c1\u94a5\u3002\n\u8f6e\u6362 service-account Issuer \u5bc6\u94a5\u65f6\uff0c\u6587\u4ef6\u4e2d\u81f3\u5c11\u5e94\u4fdd\u7559\u4e00\u4e2a\u65e7\u5bc6\u94a5\uff0c\u4ee5\u514d\u73b0\u6709 service-account Token \u5931\u6548\u3002\n\u5b83\u53ef\u4ee5\u901a\u8fc7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u72ec\u7acb\u4e8e\u96c6\u7fa4 CA \u8fdb\u884c\u8f6e\u6362\uff0c\u8fd9\u6837\u80fd\u4ec5\u5b89\u88c5\u5305\u542b\u65b0\u65e7\u5bc6\u94a5\u7684\u66f4\u65b0\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"service.key")," \u6587\u4ef6\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4e0d\u8981\u8986\u76d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u6b63\u5728\u4f7f\u7528\u7684\u6570\u636e\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u5c06\u66f4\u65b0\u7684\u5bc6\u94a5\u6682\u5b58\u5230\u5355\u72ec\u7684\u76ee\u5f55\u4e2d\u3002")),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u4ec5\u8f6e\u6362 service-account Issuer \u5bc6\u94a5\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u7528\u4e8e\u751f\u6210\u8bc1\u4e66\u7684\u4e34\u65f6\u76ee\u5f55\nmkdir -p /opt/k3s/server/tls\n\n# \u68c0\u67e5 OpenSSL \u7248\u672c\nopenssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional\n\n# \u751f\u6210\u65b0\u7684\u5bc6\u94a5\nopenssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048\n\n# \u8ffd\u52a0\u73b0\u6709\u5bc6\u94a5\uff0c\u907f\u514d\u5f53\u524d token \u5931\u6548\ncat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key\n\n# \u5c06\u66f4\u65b0\u540e\u7684\u5bc6\u94a5\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"\u51fa\u73b0\u6587\u4ef6\u672a\u66f4\u65b0\u7684\u8b66\u544a\u662f\u6b63\u5e38\u7684\u3002\u5982\u679c ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," \u547d\u4ee4\u8fd4\u56de\u9519\u8bef\uff0c\u8bf7\u68c0\u67e5\u670d\u52a1\u65e5\u5fd7\u4e2d\u7684\u9519\u8bef\u3002\n\u547d\u4ee4\u6210\u529f\u5b8c\u6210\u540e\uff0c\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server \u4e0a\u91cd\u542f K3s\u3002\u65e0\u9700\u91cd\u542f Agent \u6216\u4efb\u4f55 Pod\u3002"))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5493],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>u});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var l=n.createContext({}),o=function(e){var t=n.useContext(l),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},p=function(e){var t=o(e.components);return n.createElement(l.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},k=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,c=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),k=o(r),u=a,m=k["".concat(l,".").concat(u)]||k[u]||d[u]||c;return r?n.createElement(m,i(i({ref:t},p),{},{components:r})):n.createElement(m,i({ref:t},p))}));function u(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var c=r.length,i=new Array(c);i[0]=k;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s.mdxType="string"==typeof e?e:a,i[1]=s;for(var o=2;o<c;o++)i[o]=r[o];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}k.displayName="MDXCreateElement"},8718:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>l,contentTitle:()=>i,default:()=>d,frontMatter:()=>c,metadata:()=>s,toc:()=>o});var n=r(3117),a=(r(7294),r(3905));const c={title:"certificate"},i="k3s certificate",s={unversionedId:"cli/certificate",id:"cli/certificate",title:"certificate",description:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/certificate.md",sourceDirName:"cli",slug:"/cli/certificate",permalink:"/zh/cli/certificate",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"certificate"},sidebar:"mySidebar",previous:{title:"agent",permalink:"/zh/cli/agent"},next:{title:"etcd-snapshot",permalink:"/zh/cli/etcd-snapshot"}},l={},o=[{value:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",level:2},{value:"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",id:"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",level:3},{value:"CA \u8bc1\u4e66",id:"ca-\u8bc1\u4e66",level:2},{value:"\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66",id:"\u4f7f\u7528\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66",level:3},{value:"\u81ea\u5b9a\u4e49 CA \u62d3\u6251",id:"\u81ea\u5b9a\u4e49-ca-\u62d3\u6251",level:4},{value:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",level:4},{value:"\u8f6e\u6362\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66",id:"\u8f6e\u6362\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66",level:3},{value:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-1",level:4},{value:"\u8f6e\u6362\u81ea\u7b7e\u540d CA \u8bc1\u4e66",id:"\u8f6e\u6362\u81ea\u7b7e\u540d-ca-\u8bc1\u4e66",level:3},{value:"\u9ed8\u8ba4 CA \u62d3\u6251",id:"\u9ed8\u8ba4-ca-\u62d3\u6251",level:4},{value:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c",id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-2",level:4},{value:"ServiceAccount Issuer \u5bc6\u94a5\u8f6e\u6362",id:"serviceaccount-issuer-\u5bc6\u94a5\u8f6e\u6362",level:2}],p={toc:o};function d(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("h1",{id:"k3s-certificate"},"k3s certificate"),(0,a.kt)("h2",{id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"},"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"),(0,a.kt)("p",null,"K3s \u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\u81ea\u9881\u53d1\u65e5\u8d77 365 \u5929\u5185\u6709\u6548\u3002\u6bcf\u6b21\u542f\u52a8 K3s \u65f6\uff0c\u5df2\u8fc7\u671f\u6216 90 \u5929\u5185\u8fc7\u671f\u7684\u8bc1\u4e66\u90fd\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,a.kt)("h3",{id:"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"},"\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"),(0,a.kt)("p",null,"\u8981\u624b\u52a8\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate")," \u5b50\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u505c\u6b62 K3s\nsystemctl stop k3s\n\n# \u8f6e\u6362\u8bc1\u4e66\nk3s certificate rotate\n\n# \u542f\u52a8 K3s\nsystemctl start k3s\n")),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u6307\u5b9a\u8bc1\u4e66\u540d\u79f0\u6765\u8f6e\u6362\u5355\u4e2a\u6216\u591a\u4e2a\u8bc1\u4e66\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"k3s certificate rotate --service <SERVICE>,<SERVICE>\n")),(0,a.kt)("p",null,"\u53ef\u4ee5\u8f6e\u6362\u7684\u8bc1\u4e66\uff1a",(0,a.kt)("inlineCode",{parentName:"p"},"admin"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"api-server"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"controller-manager"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"scheduler"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s-server"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"cloud-controller"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"auth-proxy"),", ",(0,a.kt)("inlineCode",{parentName:"p"},"kubelet"),"\uff0c",(0,a.kt)("inlineCode",{parentName:"p"},"kube-proxy"),"\u3002"),(0,a.kt)("h2",{id:"ca-\u8bc1\u4e66"},"CA \u8bc1\u4e66"),(0,a.kt)("p",null,"Kubernetes \u9700\u8981\u5927\u91cf CA \u8bc1\u4e66\u624d\u80fd\u6b63\u5e38\u8fd0\u884c\u3002\u6709\u5173 Kubernetes \u5982\u4f55\u4f7f\u7528 CA \u8bc1\u4e66\uff0c\u8bf7\u53c2\u9605 Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates"},"PKI \u8bc1\u4e66\u548c\u8981\u6c42"),"\u6587\u6863\u3002"),(0,a.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cK3s \u5728\u7b2c\u4e00\u4e2a Server \u8282\u70b9\u542f\u52a8\u65f6\u751f\u6210\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u3002\u8fd9\u4e9b CA \u8bc1\u4e66\u81ea\u9881\u53d1\u65e5\u8d77 10 \u5e74\u5185\u6709\u6548\uff0c\u4e0d\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,a.kt)("p",null,"\u6743\u5a01 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u5b58\u50a8\u5728\u6570\u636e\u5b58\u50a8\u533a\u7684\u5f15\u5bfc\u7a0b\u5e8f\u5bc6\u94a5\u4e2d\uff0c\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#server"},"server token")," \u4f5c\u4e3a PBKDF2 \u5bc6\u7801\u548c AES256-GCM \u548c HMAC-SHA1 \u8fdb\u884c\u52a0\u5bc6\u3002\n\u5728 K3s Server \u542f\u52a8\u671f\u95f4\uff0cCA \u8bc1\u4e66\u548c\u5bc6\u94a5\u7684\u526f\u672c\u4f1a\u88ab\u63d0\u53d6\u5230\u78c1\u76d8\u3002\n\u4efb\u4f55 Server \u90fd\u53ef\u4ee5\u5728\u8282\u70b9\u52a0\u5165\u96c6\u7fa4\u65f6\u4e3a\u8282\u70b9\u751f\u6210\u53f6\u8bc1\u4e66\uff0c\u800c Kubernetes ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/"},"Certificates API")," \u63a7\u5236\u5668\u53ef\u4ee5\u5728\u8fd0\u884c\u65f6\u9881\u53d1\u5176\u4ed6\u8bc1\u4e66\u3002"),(0,a.kt)("p",null,"\u8981\u8f6e\u6362 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u547d\u4ee4\u3002\n\u8be5\u547d\u4ee4\u4f1a\u6267\u884c\u5b8c\u6574\u6027\u68c0\u67e5\uff0c\u4ece\u800c\u786e\u8ba4\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u53ef\u7528\u3002\n\u5982\u679c\u66f4\u65b0\u540e\u7684\u6570\u636e\u6ca1\u6709\u95ee\u9898\uff0c\u5219\u4f1a\u66f4\u65b0\u6570\u636e\u5b58\u50a8\u7684\u52a0\u5bc6\u5f15\u5bfc\u7a0b\u5e8f\u5bc6\u94a5\uff0c\u5e76\u5728\u4e0b\u6b21 K3s \u542f\u52a8\u65f6\u4f7f\u7528\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\n\u5982\u679c\u5728\u9a8c\u8bc1\u8bc1\u4e66\u548c\u5bc6\u94a5\u65f6\u51fa\u73b0\u4e86\u95ee\u9898\uff0c\u5219\u4f1a\u5411\u7cfb\u7edf\u65e5\u5fd7\u62a5\u544a\u9519\u8bef\uff0c\u5e76\u53d6\u6d88\u64cd\u4f5c\u4e14\u4e0d\u505a\u4efb\u4f55\u66f4\u6539\u3002"),(0,a.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,a.kt)("p",{parentName:"admonition"},"\u4ece 2023-02 \u7248\u672c\uff08v1.26.2+k3s1\u3001v1.25.7+k3s1\u3001v1.24.11+k3s1\u3001v1.23.17+k3s1\uff09\u5f00\u59cb\uff0c\u652f\u6301 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u547d\u4ee4\u4ee5\u53ca\u4f7f\u7528\u7531\u5916\u90e8 CA \u7b7e\u53d1\u7684 CA \u8bc1\u4e66\u3002")),(0,a.kt)("h3",{id:"\u4f7f\u7528\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66"},"\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66"),(0,a.kt)("p",null,"\u5728\u96c6\u7fa4\u4e2d\u7684\u7b2c\u4e00\u53f0 Server \u521d\u59cb\u542f\u52a8\u671f\u95f4\uff0c\u5982\u679c\u627e\u5230\u4e86\u653e\u7f6e\u5728\u6b63\u786e\u4f4d\u7f6e\u7684 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u5c06\u4e0d\u4f1a\u81ea\u52a8\u751f\u6210 CA \u8bc1\u4e66\u3002"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/generate-custom-ca-certs.sh"},"K3s \u4ed3\u5e93\u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/generate-custom-ca-certs.sh"))," \u793a\u4f8b\u811a\u672c\u7528\u4e8e\u9884\u5148\u521b\u5efa\u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\n\u8be5\u811a\u672c\u5e94\u5728\u9996\u6b21\u542f\u52a8 K3s \u4e4b\u524d\u8fd0\u884c\uff0c\u80fd\u521b\u5efa\u4e00\u6574\u5957\u7531\u901a\u7528\u6839\u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66\u7b7e\u540d\u7684\u53f6 CA \u8bc1\u4e66\u3002\n\u5982\u679c\u4f60\u5df2\u6709\u6839\u8bc1\u4e66\u6216\u4e2d\u95f4 CA \u8bc1\u4e66\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u6b64\u811a\u672c\uff08\u6216\u7528\u4f5c\u8d77\u70b9\uff09\u521b\u5efa CA \u8bc1\u4e66\uff0c\u4ece\u800c\u4f7f\u7528\u73b0\u6709\u673a\u6784\u4e2d\u7684 PKI \u6765\u914d\u7f6e K3s \u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u81ea\u5b9a\u4e49\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u6587\u4ef6\u5fc5\u987b\u653e\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u3002\u9700\u8981\u4ee5\u4e0b\u6587\u4ef6\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"server-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"client-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"request-header-ca.key"),(0,a.kt)("br",{parentName:"li"}),"",(0,a.kt)("em",{parentName:"li"},"// \u6ce8\u610f\uff1a\u5373\u4f7f\u672a\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u4e5f\u9700\u8981 etcd \u6587\u4ef6\u3002")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/peer-ca.key")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.crt")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"etcd/server-ca.key"),(0,a.kt)("br",{parentName:"li"}),"",(0,a.kt)("em",{parentName:"li"},"// \u6ce8\u610f\uff1a\u8fd9\u662f\u7528\u4e8e\u7b7e\u7f72 ServiceAccount Token \u7684\u79c1\u94a5\u3002\u5b83\u6ca1\u6709\u5bf9\u5e94\u7684\u8bc1\u4e66\u3002")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"service.key"))),(0,a.kt)("h4",{id:"\u81ea\u5b9a\u4e49-ca-\u62d3\u6251"},"\u81ea\u5b9a\u4e49 CA \u62d3\u6251"),(0,a.kt)("p",null,"\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u5e94\u9075\u5faa\u4ee5\u4e0b\u62d3\u6251\u7ed3\u6784\uff1a"),(0,a.kt)("mermaid",{value:'graph TD\n  root("Root CA")\n  intermediate("Intermediate CA")\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  root -.-|SHA256| root-hash\n  root ---\x3e intermediate\n  intermediate --\x3e server-ca ==> kube-server-certs\n  intermediate --\x3e client-ca ==> kube-client-certs\n  intermediate --\x3e request-header-ca ==> request-header-certs\n  intermediate --\x3e etcd-peer-ca ==> etcd-peer-certs\n  intermediate --\x3e etcd-server-ca ==> etcd-server-certs'}),(0,a.kt)("h4",{id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"},"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"),(0,a.kt)("admonition",{type:"important"},(0,a.kt)("p",{parentName:"admonition"},"\u5982\u679c\u8981\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u901a\u8fc7\u73b0\u6709\u6839 CA \u6765\u7b7e\u53d1\u96c6\u7fa4 CA \u8bc1\u4e66\uff0c\u5219\u5fc5\u987b\u5728\u8fd0\u884c\u811a\u672c\u4e4b\u524d\u5c06\u6839\u6587\u4ef6\u548c\u4e2d\u95f4\u6587\u4ef6\u653e\u5728\u76ee\u6807\u76ee\u5f55\u4e2d\u3002\n\u5982\u679c\u6587\u4ef6\u4e0d\u5b58\u5728\uff0c\u811a\u672c\u5c06\u521b\u5efa\u65b0\u7684\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66\u3002")),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u53ea\u60f3\u4f7f\u7528\u73b0\u6709\u7684\u6839 CA \u8bc1\u4e66\uff0c\u8bf7\u63d0\u4f9b\u4ee5\u4e0b\u6587\u4ef6\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.key"))),(0,a.kt)("p",null,"\u8981\u4f7f\u7528\u73b0\u6709\u7684\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66\uff0c\u8bf7\u63d0\u4f9b\u4ee5\u4e0b\u6587\u4ef6\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"root-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.pem")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("inlineCode",{parentName:"li"},"intermediate-ca.key"))),(0,a.kt)("p",null,"\u8981\u5728\u542f\u52a8 K3s \u4e4b\u524d\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u751f\u6210\u81ea\u5b9a\u4e49\u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u7528\u4e8e\u751f\u6210\u8bc1\u4e66\u7684\u76ee\u6807\u76ee\u5f55\u3002\nmkdir -p /var/lib/rancher/k3s/server/tls\n\n# \u5c06\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66 + \u5bc6\u94a5\u590d\u5236\u5230\u811a\u672c\u7684\u6b63\u786e\u4f4d\u7f6e\u3002\n# \u672c\u793a\u4f8b\u5047\u8bbe\u4f60\u5728 /etc/ssl \u4e2d\u653e\u7f6e\u4e86\u73b0\u6709\u7684\u6839 CA \u6587\u4ef6\u548c\u4e2d\u95f4 CA \u6587\u4ef6\u3002\n# \u5982\u679c\u4f60\u6ca1\u6709\u73b0\u6709\u7684\u6839\u8bc1\u4e66\u6216\u4e2d\u95f4 CA \u8bc1\u4e66\uff0c\u811a\u672c\u5c06\u4e3a\u4f60\u751f\u6210\u3002\ncp /etc/ssl/certs/root-ca.pem /etc/ssl/certs/intermediate-ca.pem /etc/ssl/private/intermediate-ca.key /var/lib/rancher/k3s/server/tls\n\n# \u751f\u6210\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash -\n")),(0,a.kt)("p",null,"\u5982\u679c\u547d\u4ee4\u6210\u529f\u5b8c\u6210\uff0c\u4f60\u53ef\u4ee5\u8fdb\u884c K3s \u7684\u9996\u6b21\u5b89\u88c5\u548c\u542f\u52a8\u3002\n\u5982\u679c\u811a\u672c\u751f\u6210\u4e86\u6839 CA \u6587\u4ef6\u6216\u4e2d\u95f4 CA \u6587\u4ef6\uff0c\u4f60\u5e94\u8be5\u5907\u4efd\u8fd9\u4e9b\u6587\u4ef6\uff0c\u8fd9\u6837\uff0c\u4f60\u5c31\u80fd\u5728\u9700\u8981\u8f6e\u6362 CA \u8bc1\u4e66\u65f6\u91cd\u65b0\u4f7f\u7528\u8fd9\u4e9b\u6587\u4ef6\u3002"),(0,a.kt)("h3",{id:"\u8f6e\u6362\u81ea\u5b9a\u4e49-ca-\u8bc1\u4e66"},"\u8f6e\u6362\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66"),(0,a.kt)("p",null,"\u8981\u8f6e\u6362\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u5b50\u547d\u4ee4\u3002\n\u66f4\u65b0\u540e\u7684\u6587\u4ef6\u5fc5\u987b\u6682\u5b58\u5230\u4e00\u4e2a\u4e34\u65f6\u76ee\u5f55\u4e2d\uff0c\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\uff0c\u5e76\u4e14\u5fc5\u987b\u5728\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s \u624d\u80fd\u4f7f\u7528\u66f4\u65b0\u540e\u7684\u8bc1\u4e66\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4e0d\u8981\u8986\u76d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u6b63\u5728\u4f7f\u7528\u7684\u6570\u636e\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u5c06\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u6682\u5b58\u5230\u5355\u72ec\u7684\u76ee\u5f55\u4e2d\u3002")),(0,a.kt)("p",null,"\u53ea\u8981\u662f\u4f7f\u7528\u76f8\u540c\u7684\u6839 CA\uff0c\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u542f\u52a8\u7684\u96c6\u7fa4\u80fd\u65e0\u4e2d\u65ad\u5730\u66f4\u65b0\u6216\u8f6e\u6362 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f7f\u7528\u65b0\u7684\u6839 CA\uff0c\u5219\u9700\u8981\u4e2d\u65ad\u624d\u80fd\u8fdb\u884c\u8f6e\u6362\u3002\u5fc5\u987b\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca --force")," \u9009\u9879\uff0c\u6240\u6709\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u8282\u70b9\uff08\u5305\u62ec server\uff09\u90fd\u9700\u8981\u91cd\u65b0\u914d\u7f6e\u624d\u80fd\u4f7f\u7528\u65b0\u7684 Token \u503c\uff0c\u5e76\u4e14 Pod \u9700\u8981\u91cd\u542f\u624d\u80fd\u4fe1\u4efb\u65b0\u7684\u6839 CA\u3002"),(0,a.kt)("h4",{id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-1"},"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"),(0,a.kt)("p",null,"\u4e0a\u9762\u7684\u793a\u4f8b ",(0,a.kt)("inlineCode",{parentName:"p"},"generate-custom-ca-certs.sh")," \u811a\u672c\u4e5f\u53ef\u7528\u4e8e\u5728\u65b0\u7684\u4e34\u65f6\u76ee\u5f55\u4e2d\u751f\u6210\u66f4\u65b0\u7684\u8bc1\u4e66\uff0c\u8fd9\u662f\u901a\u8fc7\u5c06\u6587\u4ef6\u590d\u5236\u5230\u6b63\u786e\u7684\u4f4d\u7f6e\u5e76\u8bbe\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"DATA_DIR")," \u73af\u5883\u53d8\u91cf\u5b9e\u73b0\u7684\u3002\n\u8981\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u751f\u6210\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u7528\u4e8e\u751f\u6210\u8bc1\u4e66\u7684\u4e34\u65f6\u76ee\u5f55\u3002\nmkdir -p /opt/k3s/server/tls\n\n# \u5c06\u6839 CA \u8bc1\u4e66\u548c\u4e2d\u95f4 CA \u8bc1\u4e66 + \u5bc6\u94a5\u590d\u5236\u5230\u811a\u672c\u7684\u6b63\u786e\u4f4d\u7f6e\u3002\n# \u5982\u679c\u662f\u975e\u4e2d\u65ad\u8f6e\u6362\uff0c\u5219\u9700\u8981\u7528\u4e8e\u751f\u6210\u539f\u59cb\u8bc1\u4e66\u7684\u540c\u4e00\u4e2a\u6839 CA\u3002\n# \u5982\u679c\u539f\u59cb\u6587\u4ef6\u4ecd\u5728\u6570\u636e\u76ee\u5f55\u4e2d\uff0c\u5219\u53ef\u4ee5\u8fd0\u884c\uff1a\ncp /var/lib/rancher/k3s/server/tls/root-ca.* /var/lib/rancher/k3s/server/tls/intermediate-ca.* /opt/k3s/server/tls\n\n# \u590d\u5236\u5f53\u524d\u7684 service-account \u7b7e\u540d\u5bc6\u94a5\uff0c\u8fd9\u6837\uff0c\u73b0\u6709\u7684 service-account token \u5c31\u4e0d\u4f1a\u5931\u6548\u3002\ncp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls\n\n# \u751f\u6210\u66f4\u65b0\u7684\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash -\n\n# \u5c06\u66f4\u65b0\u540e\u7684 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\u3002\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"\u5982\u679c ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," \u547d\u4ee4\u8fd4\u56de\u9519\u8bef\uff0c\u8bf7\u68c0\u67e5\u670d\u52a1\u65e5\u5fd7\u4e2d\u7684\u9519\u8bef\u3002\n\u547d\u4ee4\u6210\u529f\u5b8c\u6210\uff0c\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s\uff0c\u4f60\u9700\u8981\u5148\u91cd\u542f Server\uff0c\u7136\u540e\u518d\u91cd\u542f Agent\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528\u4e86 ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," \u9009\u9879\u6216\u66f4\u6539\u4e86\u6839 CA\uff0c\u8bf7\u786e\u4fdd\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u8282\u70b9\u5728\u91cd\u542f\u524d\u90fd\u91cd\u65b0\u914d\u7f6e\u4e3a\u4f7f\u7528\u65b0\u7684 Token \u503c\u3002\nToken \u53ef\u80fd\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," \u6587\u4ef6\u3001systemd \u5355\u5143\u6216 config.yaml \u4e2d\uff0c\u5177\u4f53\u53d6\u51b3\u4e8e\u8282\u70b9\u521d\u59cb\u5b89\u88c5\u65f6\u7684\u914d\u7f6e\u3002"),(0,a.kt)("h3",{id:"\u8f6e\u6362\u81ea\u7b7e\u540d-ca-\u8bc1\u4e66"},"\u8f6e\u6362\u81ea\u7b7e\u540d CA \u8bc1\u4e66"),(0,a.kt)("p",null,"\u8981\u8f6e\u6362 K3s \u751f\u6210\u7684\u81ea\u7b7e\u540d CA \u8bc1\u4e66\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u5b50\u547d\u4ee4\u3002\n\u66f4\u65b0\u540e\u7684\u6587\u4ef6\u5fc5\u987b\u6682\u5b58\u5230\u4e00\u4e2a\u4e34\u65f6\u76ee\u5f55\u4e2d\uff0c\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\uff0c\u5e76\u4e14\u5fc5\u987b\u5728\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s \u624d\u80fd\u4f7f\u7528\u66f4\u65b0\u540e\u7684\u8bc1\u4e66\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4e0d\u8981\u8986\u76d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u6b63\u5728\u4f7f\u7528\u7684\u6570\u636e\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u5c06\u66f4\u65b0\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u6682\u5b58\u5230\u5355\u72ec\u7684\u76ee\u5f55\u4e2d\u3002")),(0,a.kt)("p",null,"\u5982\u679c\u96c6\u7fa4\u5df2\u4f7f\u7528\u9ed8\u8ba4\u7684\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u542f\u52a8\uff0c\u8f6e\u6362\u5c06\u662f\u4e2d\u65ad\u7684\u3002\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u6240\u6709\u8282\u70b9\u90fd\u9700\u8981\u91cd\u65b0\u914d\u7f6e\u624d\u80fd\u4fe1\u4efb\u65b0\u7684 CA \u54c8\u5e0c\u3002\n\u5982\u679c\u65e7 CA \u8bc1\u4e66\u6ca1\u6709\u4ea4\u53c9\u7b7e\u540d\u65b0\u7684 CA \u8bc1\u4e66\uff0c\u4f60\u9700\u8981\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--force")," \u9009\u9879\u6765\u7ed5\u8fc7\u5b8c\u6574\u6027\u68c0\u67e5\uff0c\u5e76\u4e14\u9700\u8981\u91cd\u542f Pod \u624d\u80fd\u4fe1\u4efb\u65b0\u7684\u6839 CA\u3002"),(0,a.kt)("h4",{id:"\u9ed8\u8ba4-ca-\u62d3\u6251"},"\u9ed8\u8ba4 CA \u62d3\u6251"),(0,a.kt)("p",null,"\u9ed8\u8ba4\u7684\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u62d3\u6251\u7ed3\u6784\u5982\u4e0b\uff1a"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca("Server CA")\n  client-ca("Client CA")\n  request-header-ca("API Aggregation CA")\n  etcd-peer-ca("etcd Peer CA")\n  etcd-server-ca("etcd Server CA")\n\n  root-hash>"Join token CA hash"]\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca -.-|SHA256| root-hash\n  server-ca ===> kube-server-certs\n  client-ca ===> kube-client-certs\n  request-header-ca ===> request-header-certs\n  etcd-peer-ca ===> etcd-peer-certs\n  etcd-server-ca ===> etcd-server-certs'}),(0,a.kt)("p",null,"\u8f6e\u6362\u9ed8\u8ba4\u7684\u81ea\u7b7e\u540d CA \u65f6\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u5177\u6709\u4e2d\u95f4 CA \u7684\u4fee\u6539\u540e\u8bc1\u4e66\u62d3\u6251\u548c\u7531\u65e7 CA \u4ea4\u53c9\u7b7e\u540d\u7684\u65b0\u6839 CA\uff0c\u4ee5\u4fbf\u5728\u65b0\u65e7 CA \u4e4b\u95f4\u4fdd\u7559\u8fde\u7eed\u7684\u4fe1\u4efb\u94fe\uff1a"),(0,a.kt)("mermaid",{value:'graph TD\n  server-ca-old("Server CA<br/>(old)")\n  client-ca-old("Client CA<br/>(old)")\n  request-header-ca-old("API Aggregation CA<br/>(old)")\n  etcd-peer-ca-old("etcd Peer CA<br/>(old)")\n  etcd-server-ca-old("etcd Server CA<br/>(old)")\n\n  root-hash>"Join token CA hash"]\n\n  server-ca-xsigned("Server CA<br/>(cross-signed)")\n  client-ca-xsigned("Client CA<br/>(cross-signed)")\n  request-header-ca-xsigned("API Aggregation CA<br/>(cross-signed)")\n  etcd-peer-ca-xsigned("etcd Peer CA<br/>(cross-signed)")\n  etcd-server-ca-xsigned("etcd Server CA<br/>(cross-signed)")\n\n  server-ca-ssigned("Server CA<br/>(self-signed)")\n  client-ca-ssigned("Client CA<br/>(self-signed)")\n  request-header-ca-ssigned("API Aggregation CA<br/>(self-signed)")\n  etcd-peer-ca-ssigned("etcd Peer CA<br/>(self-signed)")\n  etcd-server-ca-ssigned("etcd Server CA<br/>(self-signed)")\n\n  server-ca("Intermediate<br/>Server CA")\n  client-ca("Intermediate<br/>Client CA")\n  request-header-ca("Intermediate<br/>API Aggregation CA")\n  etcd-peer-ca("Intermediate<br/>etcd Peer CA")\n  etcd-server-ca("Intermediate<br>etcd Server CA")\n\n  kube-server-certs[["Kubernetes servers<br/>(control-plane and kubelet listeners)"]]\n  kube-client-certs[["Kubernetes clients<br/>(apiserver and kubelet clients)"]]\n  request-header-certs[["Kubernetes API aggregation<br/>(apiserver proxy client)"]]\n  etcd-peer-certs[["etcd peer client/server<br/>(etcd replication)"]]\n  etcd-server-certs[["etcd client/server certificates<br/>(Kubernetes <-> etcd)"]]\n\n  server-ca-ssigned -.-|SHA256| root-hash\n  server-ca-ssigned --\x3e server-ca ==> kube-server-certs\n  server-ca-old --\x3e server-ca-xsigned --\x3e server-ca\n  client-ca-ssigned --\x3e client-ca ==> kube-client-certs\n  client-ca-old --\x3e client-ca-xsigned --\x3e client-ca\n  request-header-ca-ssigned --\x3e request-header-ca ==> request-header-certs\n  request-header-ca-old --\x3e request-header-ca-xsigned --\x3e request-header-ca\n  etcd-peer-ca-ssigned --\x3e etcd-peer-ca ==> etcd-peer-certs\n  etcd-peer-ca-old --\x3e etcd-peer-ca-xsigned --\x3e etcd-peer-ca\n  etcd-server-ca-ssigned --\x3e etcd-server-ca ==> etcd-server-certs\n  etcd-server-ca-old --\x3e etcd-server-ca-xsigned --\x3e etcd-server-ca'}),(0,a.kt)("h4",{id:"\u4f7f\u7528\u793a\u4f8b\u811a\u672c-2"},"\u4f7f\u7528\u793a\u4f8b\u811a\u672c"),(0,a.kt)("p",null,(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/contrib/util/rotate-default-ca-certs.sh"},"K3s \u4ed3\u5e93\u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"a"},"contrib/util/rotate-default-ca-certs.sh"))," \u793a\u4f8b\u811a\u672c\u7528\u4e8e\u521b\u5efa\u7531\u73b0\u6709 CA \u4ea4\u53c9\u7b7e\u540d\u7684\u66f4\u65b0 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\u3002"),(0,a.kt)("p",null,"\u8981\u4f7f\u7528\u793a\u4f8b\u811a\u672c\u751f\u6210\u7531\u73b0\u6709 CA \u4ea4\u53c9\u7b7e\u540d\u7684\u66f4\u65b0\u7684\u81ea\u7b7e\u540d\u8bc1\u4e66\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u66f4\u65b0\u7684 CA \u8bc1\u4e66\u548c\u5bc6\u94a5\uff0c\u7531\u5f53\u524d CA \u4ea4\u53c9\u7b7e\u540d\u3002\n# \u8be5\u811a\u672c\u5c06\u521b\u5efa\u4e00\u4e2a\u5305\u542b\u66f4\u65b0\u8bc1\u4e66\u7684\u65b0\u4e34\u65f6\u76ee\u5f55\uff0c\u5e76\u8f93\u51fa\u65b0\u7684 Token \u503c\u3002\ncurl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash -\n\n# \u5c06\u66f4\u65b0\u540e\u7684\u8bc1\u4e66\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\u3002\u5728\u811a\u672c\u7684\u8f93\u51fa\u4e2d\u67e5\u770b\u66f4\u65b0\u540e\u7684 Token \u503c\u3002\nk3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca\n")),(0,a.kt)("p",null,"\u5982\u679c ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," \u547d\u4ee4\u8fd4\u56de\u9519\u8bef\uff0c\u8bf7\u68c0\u67e5\u670d\u52a1\u65e5\u5fd7\u4e2d\u7684\u9519\u8bef\u3002\n\u547d\u4ee4\u6210\u529f\u5b8c\u6210\uff0c\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u4e0a\u91cd\u542f K3s\uff0c\u4f60\u9700\u8981\u5148\u91cd\u542f Server\uff0c\u7136\u540e\u518d\u91cd\u542f Agent\u3002"),(0,a.kt)("p",null,"\u8bf7\u786e\u4fdd\u4f7f\u7528 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token#secure"},"secure token")," \u52a0\u5165\u7684\u8282\u70b9\uff08\u5305\u62ec server \u8282\u70b9\uff09\u5728\u91cd\u542f\u524d\u90fd\u91cd\u65b0\u914d\u7f6e\u4e3a\u4f7f\u7528\u65b0\u7684 Token \u503c\u3002\nToken \u53ef\u80fd\u5b58\u50a8\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},".env")," \u6587\u4ef6\u3001systemd \u5355\u5143\u6216 config.yaml \u4e2d\uff0c\u5177\u4f53\u53d6\u51b3\u4e8e\u8282\u70b9\u5728\u521d\u59cb\u5b89\u88c5\u65f6\u7684\u914d\u7f6e\u3002"),(0,a.kt)("h2",{id:"serviceaccount-issuer-\u5bc6\u94a5\u8f6e\u6362"},"ServiceAccount Issuer \u5bc6\u94a5\u8f6e\u6362"),(0,a.kt)("p",null,"service-account Issuer \u5bc6\u94a5\u662f\u7528\u4e8e\u7b7e\u53d1 service-account Token \u7684 RSA \u79c1\u94a5\u3002\n\u8f6e\u6362 service-account Issuer \u5bc6\u94a5\u65f6\uff0c\u6587\u4ef6\u4e2d\u81f3\u5c11\u5e94\u4fdd\u7559\u4e00\u4e2a\u65e7\u5bc6\u94a5\uff0c\u4ee5\u514d\u73b0\u6709 service-account Token \u5931\u6548\u3002\n\u5b83\u53ef\u4ee5\u901a\u8fc7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s certificate rotate-ca")," \u72ec\u7acb\u4e8e\u96c6\u7fa4 CA \u8fdb\u884c\u8f6e\u6362\uff0c\u8fd9\u6837\u80fd\u4ec5\u5b89\u88c5\u5305\u542b\u65b0\u65e7\u5bc6\u94a5\u7684\u66f4\u65b0\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"service.key")," \u6587\u4ef6\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u4e0d\u8981\u8986\u76d6 ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/tls")," \u4e2d\u6b63\u5728\u4f7f\u7528\u7684\u6570\u636e\u3002",(0,a.kt)("br",{parentName:"p"}),"\n","\u5c06\u66f4\u65b0\u7684\u5bc6\u94a5\u6682\u5b58\u5230\u5355\u72ec\u7684\u76ee\u5f55\u4e2d\u3002")),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u4ec5\u8f6e\u6362 service-account Issuer \u5bc6\u94a5\uff0c\u8bf7\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"# \u521b\u5efa\u7528\u4e8e\u751f\u6210\u8bc1\u4e66\u7684\u4e34\u65f6\u76ee\u5f55\nmkdir -p /opt/k3s/server/tls\n\n# \u68c0\u67e5 OpenSSL \u7248\u672c\nopenssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional\n\n# \u751f\u6210\u65b0\u7684\u5bc6\u94a5\nopenssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048\n\n# \u8ffd\u52a0\u73b0\u6709\u5bc6\u94a5\uff0c\u907f\u514d\u5f53\u524d token \u5931\u6548\ncat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key\n\n# \u5c06\u66f4\u65b0\u540e\u7684\u5bc6\u94a5\u52a0\u8f7d\u5230\u6570\u636e\u5b58\u50a8\u4e2d\nk3s certificate rotate-ca --path=/opt/k3s/server\n")),(0,a.kt)("p",null,"\u51fa\u73b0\u6587\u4ef6\u672a\u66f4\u65b0\u7684\u8b66\u544a\u662f\u6b63\u5e38\u7684\u3002\u5982\u679c ",(0,a.kt)("inlineCode",{parentName:"p"},"rotate-ca")," \u547d\u4ee4\u8fd4\u56de\u9519\u8bef\uff0c\u8bf7\u68c0\u67e5\u670d\u52a1\u65e5\u5fd7\u4e2d\u7684\u9519\u8bef\u3002\n\u547d\u4ee4\u6210\u529f\u5b8c\u6210\u540e\uff0c\u5728\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server \u4e0a\u91cd\u542f K3s\u3002\u65e0\u9700\u91cd\u542f Agent \u6216\u4efb\u4f55 Pod\u3002"))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/5525.ab860f59.js b/zh/assets/js/5525.ab860f59.js
new file mode 100644
index 000000000..ead43e4a6
--- /dev/null
+++ b/zh/assets/js/5525.ab860f59.js
@@ -0,0 +1 @@
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5525],{5525:()=>{}}]);
\ No newline at end of file
diff --git a/zh/assets/js/5977b32d.4b413646.js b/zh/assets/js/5977b32d.c472809c.js
similarity index 96%
rename from zh/assets/js/5977b32d.4b413646.js
rename to zh/assets/js/5977b32d.c472809c.js
index d53300fd0..aef2c2d36 100644
--- a/zh/assets/js/5977b32d.4b413646.js
+++ b/zh/assets/js/5977b32d.c472809c.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[681],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),i=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},u=function(e){var t=i(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=i(r),f=a,m=d["".concat(s,".").concat(f)]||d[f]||p[f]||o;return r?n.createElement(m,c(c({ref:t},u),{},{components:r})):n.createElement(m,c({ref:t},u))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,c=new Array(o);c[0]=d;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,c[1]=l;for(var i=2;i<o;i++)c[i]=r[i];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},6952:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>i});var n=r(3117),a=(r(7294),r(3905));const o={},c=void 0,l={unversionedId:"datastore/cluster-loadbalancer",id:"datastore/cluster-loadbalancer",title:"cluster-loadbalancer",description:"",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",sourceDirName:"datastore",slug:"/datastore/cluster-loadbalancer",permalink:"/zh/datastore/cluster-loadbalancer",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{},sidebar:"mySidebar",previous:{title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",permalink:"/zh/datastore/ha"},next:{title:"\u96c6\u7fa4\u8bbf\u95ee",permalink:"/zh/cluster-access/"}},s={},i=[],u={toc:i};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[681],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>f});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function c(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),i=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):c(c({},t),e)),r},u=function(e){var t=i(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=i(r),f=a,m=d["".concat(s,".").concat(f)]||d[f]||p[f]||o;return r?n.createElement(m,c(c({ref:t},u),{},{components:r})):n.createElement(m,c({ref:t},u))}));function f(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,c=new Array(o);c[0]=d;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,c[1]=l;for(var i=2;i<o;i++)c[i]=r[i];return n.createElement.apply(null,c)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},6952:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>c,default:()=>p,frontMatter:()=>o,metadata:()=>l,toc:()=>i});var n=r(3117),a=(r(7294),r(3905));const o={},c=void 0,l={unversionedId:"datastore/cluster-loadbalancer",id:"datastore/cluster-loadbalancer",title:"cluster-loadbalancer",description:"",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",sourceDirName:"datastore",slug:"/datastore/cluster-loadbalancer",permalink:"/zh/datastore/cluster-loadbalancer",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{},sidebar:"mySidebar",previous:{title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",permalink:"/zh/datastore/ha"},next:{title:"\u96c6\u7fa4\u8bbf\u95ee",permalink:"/zh/cluster-access/"}},s={},i=[],u={toc:i};function p(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},u,r,{components:t,mdxType:"MDXLayout"}))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/59b068d1.acb0a1a4.js b/zh/assets/js/59b068d1.acb0a1a4.js
deleted file mode 100644
index 8ea8acacf..000000000
--- a/zh/assets/js/59b068d1.acb0a1a4.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6385],{1572:s=>{s.exports=JSON.parse('{"name":"docusaurus-theme-search-algolia","id":"default"}')}}]);
\ No newline at end of file
diff --git a/zh/assets/js/62005660.3790999c.js b/zh/assets/js/62005660.69eb2a79.js
similarity index 99%
rename from zh/assets/js/62005660.3790999c.js
rename to zh/assets/js/62005660.69eb2a79.js
index 6b9936bd9..fa797e2f2 100644
--- a/zh/assets/js/62005660.3790999c.js
+++ b/zh/assets/js/62005660.69eb2a79.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4124],{3905:(t,e,n)=>{n.d(e,{Zo:()=>m,kt:()=>N});var a=n(7294);function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);e&&(a=a.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,a)}return n}function i(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?l(Object(n),!0).forEach((function(e){r(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function p(t,e){if(null==t)return{};var n,a,r=function(t,e){if(null==t)return{};var n,a,r={},l=Object.keys(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||(r[n]=t[n]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(r[n]=t[n])}return r}var d=a.createContext({}),k=function(t){var e=a.useContext(d),n=e;return t&&(n="function"==typeof t?t(e):i(i({},e),t)),n},m=function(t){var e=k(t.components);return a.createElement(d.Provider,{value:e},t.children)},o={inlineCode:"code",wrapper:function(t){var e=t.children;return a.createElement(a.Fragment,{},e)}},u=a.forwardRef((function(t,e){var n=t.components,r=t.mdxType,l=t.originalType,d=t.parentName,m=p(t,["components","mdxType","originalType","parentName"]),u=k(n),N=r,c=u["".concat(d,".").concat(N)]||u[N]||o[N]||l;return n?a.createElement(c,i(i({ref:e},m),{},{components:n})):a.createElement(c,i({ref:e},m))}));function N(t,e){var n=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=n.length,i=new Array(l);i[0]=u;var p={};for(var d in e)hasOwnProperty.call(e,d)&&(p[d]=e[d]);p.originalType=t,p.mdxType="string"==typeof t?t:r,i[1]=p;for(var k=2;k<l;k++)i[k]=n[k];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},5502:(t,e,n)=>{n.r(e),n.d(e,{assets:()=>d,contentTitle:()=>i,default:()=>o,frontMatter:()=>l,metadata:()=>p,toc:()=>k});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u8981\u6c42",weight:1},i=void 0,p={unversionedId:"installation/requirements",id:"installation/requirements",title:"\u8981\u6c42",description:"K3s \u975e\u5e38\u8f7b\u91cf\uff0c\u4f46\u4e5f\u6709\u4e00\u4e9b\u6700\u4f4e\u8981\u6c42\uff0c\u5982\u4e0b\u6240\u8ff0\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/requirements.md",sourceDirName:"installation",slug:"/installation/requirements",permalink:"/zh/installation/requirements",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u8981\u6c42",weight:1},sidebar:"mySidebar",previous:{title:"\u5b89\u88c5",permalink:"/zh/installation/"},next:{title:"\u914d\u7f6e\u9009\u9879",permalink:"/zh/installation/configuration"}},d={},k=[{value:"\u5148\u51b3\u6761\u4ef6",id:"\u5148\u51b3\u6761\u4ef6",level:2},{value:"\u67b6\u6784",id:"\u67b6\u6784",level:2},{value:"\u64cd\u4f5c\u7cfb\u7edf",id:"\u64cd\u4f5c\u7cfb\u7edf",level:2},{value:"\u786c\u4ef6",id:"\u786c\u4ef6",level:2},{value:"\u78c1\u76d8",id:"\u78c1\u76d8",level:4},{value:"\u7f51\u7edc",id:"\u7f51\u7edc",level:2},{value:"K3s Server \u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219",id:"k3s-server-\u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219",level:3},{value:"\u5927\u578b\u96c6\u7fa4",id:"\u5927\u578b\u96c6\u7fa4",level:2},{value:"CPU \u548c\u5185\u5b58",id:"cpu-\u548c\u5185\u5b58",level:3},{value:"\u78c1\u76d8",id:"\u78c1\u76d8-1",level:3},{value:"\u7f51\u7edc",id:"\u7f51\u7edc-1",level:3},{value:"\u6570\u636e\u5e93",id:"\u6570\u636e\u5e93",level:3}],m={toc:k};function o(t){let{components:e,...n}=t;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"K3s \u975e\u5e38\u8f7b\u91cf\uff0c\u4f46\u4e5f\u6709\u4e00\u4e9b\u6700\u4f4e\u8981\u6c42\uff0c\u5982\u4e0b\u6240\u8ff0\u3002"),(0,r.kt)("p",null,"\u65e0\u8bba K3s \u5728\u5bb9\u5668\u4e2d\u8fd0\u884c\u8fd8\u662f\u4f5c\u4e3a\u539f\u751f Linux \u670d\u52a1\u8fd0\u884c\uff0c\u6bcf\u4e2a\u8fd0\u884c K3s \u7684\u8282\u70b9\u90fd\u5e94\u6ee1\u8db3\u4ee5\u4e0b\u6700\u4f4e\u8981\u6c42\u3002\u8fd9\u4e9b\u8981\u6c42\u662f K3s \u53ca\u5176\u6253\u5305\u7ec4\u4ef6\u7684\u57fa\u51c6\uff0c\u4e0d\u5305\u62ec\u5de5\u4f5c\u8d1f\u8f7d\u672c\u8eab\u6d88\u8017\u7684\u8d44\u6e90\u3002"),(0,r.kt)("h2",{id:"\u5148\u51b3\u6761\u4ef6"},"\u5148\u51b3\u6761\u4ef6"),(0,r.kt)("p",null,"\u4e24\u4e2a\u8282\u70b9\u4e0d\u80fd\u5177\u6709\u76f8\u540c\u7684\u4e3b\u673a\u540d\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u591a\u4e2a\u8282\u70b9\u5c06\u5177\u6709\u76f8\u540c\u7684\u4e3b\u673a\u540d\uff0c\u6216\u8005\u4e3b\u673a\u540d\u53ef\u4ee5\u88ab\u81ea\u52a8\u914d\u7f6e\u7cfb\u7edf\u91cd\u590d\u4f7f\u7528\uff0c\u8bf7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--with-node-id")," \u9009\u9879\u4e3a\u6bcf\u4e2a\u8282\u70b9\u9644\u52a0\u4e00\u4e2a\u968f\u673a\u540e\u7f00\uff0c\u6216\u8005\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-name")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"$K3S_NODE_NAME")," \u4e3a\u6dfb\u52a0\u5230\u96c6\u7fa4\u7684\u6bcf\u4e2a\u8282\u70b9\u8bbe\u8ba1\u4e00\u4e2a\u72ec\u7279\u7684\u540d\u79f0\u3002"),(0,r.kt)("h2",{id:"\u67b6\u6784"},"\u67b6\u6784"),(0,r.kt)("p",null,"K3s \u9002\u7528\u4e8e\u4ee5\u4e0b\u67b6\u6784\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"x86_64"),(0,r.kt)("li",{parentName:"ul"},"armhf"),(0,r.kt)("li",{parentName:"ul"},"arm64/aarch64"),(0,r.kt)("li",{parentName:"ul"},"s390x")),(0,r.kt)("admonition",{title:"ARM64 \u9875\u9762\u5927\u5c0f",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"\u5728 2023 \u5e74 5 \u6708\u7248\u672c\uff08v1.24.14+k3s1\u3001v1.25.10+k3s1\u3001v1.26.5+k3s1\u3001v1.27.2+k3s1\uff09\u524d\uff0c\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"aarch64/arm64")," \u7cfb\u7edf\u4e0a\uff0c\u64cd\u4f5c\u7cfb\u7edf\u5fc5\u987b\u4f7f\u7528 4k \u9875\u9762\u5927\u5c0f\u3002",(0,r.kt)("strong",{parentName:"p"},"RHEL9"),"\u3001",(0,r.kt)("strong",{parentName:"p"},"Ubuntu"),"\u3001",(0,r.kt)("strong",{parentName:"p"},"Raspberry PI OS")," \u548c ",(0,r.kt)("strong",{parentName:"p"},"SLES")," \u90fd\u6ee1\u8db3\u8fd9\u4e2a\u8981\u6c42\u3002")),(0,r.kt)("h2",{id:"\u64cd\u4f5c\u7cfb\u7edf"},"\u64cd\u4f5c\u7cfb\u7edf"),(0,r.kt)("p",null,"K3s \u6709\u671b\u5728\u5927\u591a\u6570\u73b0\u4ee3 Linux \u7cfb\u7edf\u4e0a\u8fd0\u884c\u3002"),(0,r.kt)("p",null,"\u4e00\u4e9b\u64cd\u4f5c\u7cfb\u7edf\u6709\u7279\u5b9a\u7684\u8981\u6c42\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u4f7f\u7528 ",(0,r.kt)("strong",{parentName:"li"},"Red Hat/CentOS Enterprise Linux"),"\uff0c\u8bf7\u6309\u7167",(0,r.kt)("a",{parentName:"li",href:"/zh/advanced/#red-hat-enterprise-linux--centos"},"\u8fd9\u4e9b\u6b65\u9aa4"),"\u8fdb\u884c\u5176\u4ed6\u8bbe\u7f6e\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u4f7f\u7528 ",(0,r.kt)("strong",{parentName:"li"},"Raspberry Pi OS"),"\uff0c\u8bf7\u6309\u7167",(0,r.kt)("a",{parentName:"li",href:"/zh/advanced/#raspberry-pi"},"\u8fd9\u4e9b\u6b65\u9aa4"),"\u5207\u6362\u5230\u65e7\u7248 iptables\u3002")),(0,r.kt)("p",null,"\u5173\u4e8e Rancher \u7ba1\u7406\u7684 K3s \u96c6\u7fa4\u6d4b\u8bd5\u4e86\u54ea\u4e9b\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/support-maintenance-terms/"},"Rancher \u652f\u6301\u548c\u7ef4\u62a4\u6761\u6b3e"),"\u3002"),(0,r.kt)("h2",{id:"\u786c\u4ef6"},"\u786c\u4ef6"),(0,r.kt)("p",null,"\u786c\u4ef6\u8981\u6c42\u6839\u636e\u4f60\u90e8\u7f72\u7684\u89c4\u6a21\u800c\u53d8\u5316\u3002\u6b64\u5904\u6982\u8ff0\u4e86\u6700\u4f4e\u5efa\u8bae\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Spec"),(0,r.kt)("th",{parentName:"tr",align:null},"\u6700\u4f4e"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63a8\u8350"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"CPU"),(0,r.kt)("td",{parentName:"tr",align:null},"1 \u6838"),(0,r.kt)("td",{parentName:"tr",align:null},"2 \u6838")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"RAM"),(0,r.kt)("td",{parentName:"tr",align:null},"512MB"),(0,r.kt)("td",{parentName:"tr",align:null},"1 GB")))),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"/zh/reference/resource-profiling"},"\u8d44\u6e90\u5206\u6790"),"\u7684\u6d4b\u8bd5\u7ed3\u679c\u7528\u4e8e\u786e\u5b9a K3s Agent\u3001\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server \u548c\u5177\u6709\u4e00\u4e2a Agent \u7684 K3s Server \u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002\u5b83\u8fd8\u5305\u542b\u4e86\u6709\u5173\u5bf9 K3s Server \u548c Agent \u5229\u7528\u7387\u4ea7\u751f\u6700\u5927\u5f71\u54cd\u7684\u5206\u6790\uff0c\u4ee5\u53ca\u5982\u4f55\u4fdd\u62a4\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u514d\u53d7 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u7684\u5e72\u6270\u3002"),(0,r.kt)("admonition",{title:"Raspberry Pi \u548c\u5d4c\u5165\u5f0f etcd",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5982\u679c\u5728 Raspberry Pi \u4e0a\u90e8\u7f72\u5e26\u6709\u5d4c\u5165\u5f0f etcd \u7684 K3s\uff0c\u5efa\u8bae\u4f60\u4f7f\u7528\u5916\u90e8 SSD\u3002etcd \u662f\u5199\u5165\u5bc6\u96c6\u578b\u7684\uff0cSD \u5361\u65e0\u6cd5\u5904\u7406 IO \u8d1f\u8f7d\u3002")),(0,r.kt)("h4",{id:"\u78c1\u76d8"},"\u78c1\u76d8"),(0,r.kt)("p",null,"K3s \u7684\u6027\u80fd\u53d6\u51b3\u4e8e\u6570\u636e\u5e93\u7684\u6027\u80fd\u3002\u4e3a\u786e\u4fdd\u6700\u4f73\u901f\u5ea6\uff0c\u6211\u4eec\u5efa\u8bae\u5c3d\u53ef\u80fd\u4f7f\u7528 SSD\u3002\u5728\u4f7f\u7528 SD \u5361\u6216 eMMC \u7684 ARM \u8bbe\u5907\u4e0a\uff0c\u78c1\u76d8\u6027\u80fd\u4f1a\u6709\u6240\u4e0d\u540c\u3002"),(0,r.kt)("h2",{id:"\u7f51\u7edc"},"\u7f51\u7edc"),(0,r.kt)("p",null,"K3s Server \u9700\u8981 6443 \u7aef\u53e3\u624d\u80fd\u88ab\u6240\u6709\u8282\u70b9\u8bbf\u95ee\u3002"),(0,r.kt)("p",null,"\u4f7f\u7528 Flannel VXLAN \u65f6\uff0c\u8282\u70b9\u9700\u8981\u80fd\u591f\u901a\u8fc7 UDP \u7aef\u53e3 8472 \u8bbf\u95ee\u5176\u4ed6\u8282\u70b9\uff0c\u4f7f\u7528 Flannel Wireguard \u540e\u7aef\u65f6\uff0c\u8282\u70b9\u9700\u8981\u80fd\u591f\u901a\u8fc7 UDP \u7aef\u53e3 51820 \u548c 51821\uff08\u4f7f\u7528 IPv6 \u65f6\uff09\u8bbf\u95ee\u5176\u4ed6\u8282\u70b9\u3002\u8be5\u8282\u70b9\u4e0d\u5e94\u4fa6\u542c\u4efb\u4f55\u5176\u4ed6\u7aef\u53e3\u3002K3s \u4f7f\u7528\u53cd\u5411\u96a7\u9053\u5efa\u7acb\u8282\u70b9\u4e0e Server \u7684\u51fa\u7ad9\u8fde\u63a5\uff0c\u6240\u6709 kubelet \u6d41\u91cf\u90fd\u901a\u8fc7\u8be5\u96a7\u9053\u8fdb\u884c\u3002\u4f46\u662f\uff0c\u5982\u679c\u4f60\u4e0d\u4f7f\u7528 Flannel \u5e76\u63d0\u4f9b\u81ea\u5df1\u7684\u81ea\u5b9a\u4e49 CNI\uff0c\u90a3\u4e48 K3s \u4e0d\u9700\u8981 Flannel \u6240\u9700\u7684\u7aef\u53e3\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u8981\u4f7f\u7528 Metrics Server\uff0c\u6240\u6709\u8282\u70b9\u5fc5\u987b\u53ef\u4ee5\u5728\u7aef\u53e3 10250 \u4e0a\u76f8\u4e92\u8bbf\u95ee\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u8ba1\u5212\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u6765\u5b9e\u73b0\u9ad8\u53ef\u7528\u6027\uff0c\u5219 Server \u8282\u70b9\u5fc5\u987b\u53ef\u4ee5\u5728\u7aef\u53e3 2379 \u548c 2380 \u4e0a\u76f8\u4e92\u8bbf\u95ee\u3002"),(0,r.kt)("admonition",{title:"\u91cd\u8981\u63d0\u793a",type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"\u8282\u70b9\u4e0a\u7684 VXLAN \u7aef\u53e3\u4f1a\u5f00\u653e\u96c6\u7fa4\u7f51\u7edc\uff0c\u8ba9\u4efb\u4f55\u4eba\u5747\u80fd\u8bbf\u95ee\u96c6\u7fa4\u3002\u56e0\u6b64\uff0c\u4e0d\u8981\u5c06 VXLAN \u7aef\u53e3\u66b4\u9732\u7ed9\u5916\u754c\u3002\u8bf7\u4f7f\u7528\u7981\u7528 8472 \u7aef\u53e3\u7684\u9632\u706b\u5899/\u5b89\u5168\u7ec4\u6765\u8fd0\u884c\u8282\u70b9\u3002")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"Flannel \u4f9d\u8d56 ",(0,r.kt)("a",{parentName:"p",href:"https://www.cni.dev/plugins/current/main/bridge/"},"Bridge CNI \u63d2\u4ef6"),"\u6765\u521b\u5efa\u4ea4\u6362\u6d41\u91cf\u7684 L2 \u7f51\u7edc\u3002\u5177\u6709 ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW")," \u529f\u80fd\u7684 Rogue pod \u53ef\u4ee5\u6ee5\u7528\u8be5 L2 \u7f51\u7edc\u6765\u53d1\u52a8\u653b\u51fb\uff0c\u5982 ",(0,r.kt)("a",{parentName:"p",href:"https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf"},"ARP \u6b3a\u9a97"),"\u3002\u56e0\u6b64\uff0c\u5982 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"Kubernetes \u6587\u6863"),"\u6240\u8ff0\uff0c\u8bf7\u8bbe\u7f6e\u4e00\u4e2a\u53d7\u9650\u914d\u7f6e\u6587\u4ef6\uff0c\u5728\u4e0d\u53ef\u4fe1\u4efb\u7684 Pod \u4e0a\u7981\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW"),"\u3002")),(0,r.kt)("h3",{id:"k3s-server-\u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219"},"K3s Server \u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u534f\u8bae"),(0,r.kt)("th",{parentName:"tr",align:null},"\u7aef\u53e3"),(0,r.kt)("th",{parentName:"tr",align:null},"\u6e90"),(0,r.kt)("th",{parentName:"tr",align:null},"\u76ee\u6807"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"2379-2380"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709\u5177\u6709\u5d4c\u5165\u5f0f etcd \u7684 HA \u9700\u8981")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"Agents"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"K3s supervisor \u548c Kubernetes API Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"8472"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709 Flannel VXLAN \u9700\u8981")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"10250"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"Kubelet \u6307\u6807")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51820"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709\u4f7f\u7528 IPv4 \u7684 Flannel Wireguard \u624d\u9700\u8981")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51821"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709\u4f7f\u7528 IPv6 \u7684 Flannel Wireguard \u624d\u9700\u8981")))),(0,r.kt)("p",null,"\u6240\u6709\u51fa\u7ad9\u6d41\u91cf\u901a\u5e38\u90fd\u662f\u5141\u8bb8\u7684\u3002"),(0,r.kt)("p",null,"\u4f60\u53ef\u80fd\u9700\u8981\u6839\u636e\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u5bf9\u9632\u706b\u5899\u8fdb\u884c\u5176\u4ed6\u66f4\u6539\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),"\u3002"),(0,r.kt)("h2",{id:"\u5927\u578b\u96c6\u7fa4"},"\u5927\u578b\u96c6\u7fa4"),(0,r.kt)("p",null,"\u786c\u4ef6\u8981\u6c42\u53d6\u51b3\u4e8e K3s \u96c6\u7fa4\u7684\u5927\u5c0f\u3002\u5bf9\u4e8e\u751f\u4ea7\u548c\u5927\u578b\u96c6\u7fa4\uff0c\u6211\u4eec\u5efa\u8bae\u4f7f\u7528\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528\u6027\u8bbe\u7f6e\u3002\u5bf9\u4e8e\u751f\u4ea7\u73af\u5883\u4e2d\u7684\u5916\u90e8\u6570\u636e\u5e93\uff0c\u5efa\u8bae\u4f7f\u7528\u4ee5\u4e0b\u9009\u9879\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"MySQL"),(0,r.kt)("li",{parentName:"ul"},"PostgreSQL"),(0,r.kt)("li",{parentName:"ul"},"etcd")),(0,r.kt)("h3",{id:"cpu-\u548c\u5185\u5b58"},"CPU \u548c\u5185\u5b58"),(0,r.kt)("p",null,"\u9ad8\u53ef\u7528 K3s Server \u4e2d\u8282\u70b9\u7684\u6700\u4f4e CPU \u548c\u5185\u5b58\u8981\u6c42\u5982\u4e0b\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"\u90e8\u7f72\u89c4\u6a21"),(0,r.kt)("th",{parentName:"tr",align:"center"},"\u8282\u70b9"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64GB")))),(0,r.kt)("h3",{id:"\u78c1\u76d8-1"},"\u78c1\u76d8"),(0,r.kt)("p",null,"\u96c6\u7fa4\u6027\u80fd\u53d6\u51b3\u4e8e\u6570\u636e\u5e93\u6027\u80fd\u3002\u4e3a\u786e\u4fdd\u6700\u4f73\u901f\u5ea6\uff0c\u6211\u4eec\u5efa\u8bae\u4e3a K3s \u96c6\u7fa4\u4f7f\u7528 SSD \u78c1\u76d8\u3002\u5728\u4e91\u63d0\u4f9b\u5546\u4e0a\uff0c\u4f60\u8fd8\u9700\u4f7f\u7528\u80fd\u83b7\u5f97\u6700\u5927 IOPS \u7684\u6700\u5c0f\u5927\u5c0f\u3002"),(0,r.kt)("h3",{id:"\u7f51\u7edc-1"},"\u7f51\u7edc"),(0,r.kt)("p",null,"\u4f60\u5e94\u8be5\u8003\u8651\u589e\u52a0\u96c6\u7fa4 CIDR \u7684\u5b50\u7f51\u5927\u5c0f\uff0c\u907f\u514d\u7528\u5c3d Pod \u7684 IP\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u5728\u542f\u52a8\u65f6\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u9009\u9879\u4f20\u9012\u7ed9 K3s Server \u6765\u5b9e\u73b0\u8fd9\u4e00\u70b9\u3002"),(0,r.kt)("h3",{id:"\u6570\u636e\u5e93"},"\u6570\u636e\u5e93"),(0,r.kt)("p",null,"K3s \u652f\u6301\u4e0d\u540c\u7684\u6570\u636e\u5e93\uff0c\u5305\u62ec MySQL\u3001PostgreSQL\u3001MariaDB \u548c etcd\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/datastore/"},"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"),"\u3002"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u662f\u8fd0\u884c\u5927\u578b\u96c6\u7fa4\u6240\u9700\u7684\u6570\u636e\u5e93\u8d44\u6e90\u7684\u5927\u5c0f\u6307\u5357\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"\u90e8\u7f72\u89c4\u6a21"),(0,r.kt)("th",{parentName:"tr",align:"center"},"\u8282\u70b9"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"1"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64GB")))))}o.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4124],{3905:(t,e,n)=>{n.d(e,{Zo:()=>m,kt:()=>N});var a=n(7294);function r(t,e,n){return e in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function l(t,e){var n=Object.keys(t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(t);e&&(a=a.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),n.push.apply(n,a)}return n}function i(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?l(Object(n),!0).forEach((function(e){r(t,e,n[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))}))}return t}function p(t,e){if(null==t)return{};var n,a,r=function(t,e){if(null==t)return{};var n,a,r={},l=Object.keys(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||(r[n]=t[n]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(a=0;a<l.length;a++)n=l[a],e.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(t,n)&&(r[n]=t[n])}return r}var d=a.createContext({}),k=function(t){var e=a.useContext(d),n=e;return t&&(n="function"==typeof t?t(e):i(i({},e),t)),n},m=function(t){var e=k(t.components);return a.createElement(d.Provider,{value:e},t.children)},o={inlineCode:"code",wrapper:function(t){var e=t.children;return a.createElement(a.Fragment,{},e)}},u=a.forwardRef((function(t,e){var n=t.components,r=t.mdxType,l=t.originalType,d=t.parentName,m=p(t,["components","mdxType","originalType","parentName"]),u=k(n),N=r,c=u["".concat(d,".").concat(N)]||u[N]||o[N]||l;return n?a.createElement(c,i(i({ref:e},m),{},{components:n})):a.createElement(c,i({ref:e},m))}));function N(t,e){var n=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=n.length,i=new Array(l);i[0]=u;var p={};for(var d in e)hasOwnProperty.call(e,d)&&(p[d]=e[d]);p.originalType=t,p.mdxType="string"==typeof t?t:r,i[1]=p;for(var k=2;k<l;k++)i[k]=n[k];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}u.displayName="MDXCreateElement"},5502:(t,e,n)=>{n.r(e),n.d(e,{assets:()=>d,contentTitle:()=>i,default:()=>o,frontMatter:()=>l,metadata:()=>p,toc:()=>k});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u8981\u6c42",weight:1},i=void 0,p={unversionedId:"installation/requirements",id:"installation/requirements",title:"\u8981\u6c42",description:"K3s \u975e\u5e38\u8f7b\u91cf\uff0c\u4f46\u4e5f\u6709\u4e00\u4e9b\u6700\u4f4e\u8981\u6c42\uff0c\u5982\u4e0b\u6240\u8ff0\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/requirements.md",sourceDirName:"installation",slug:"/installation/requirements",permalink:"/zh/installation/requirements",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u8981\u6c42",weight:1},sidebar:"mySidebar",previous:{title:"\u5b89\u88c5",permalink:"/zh/installation/"},next:{title:"\u914d\u7f6e\u9009\u9879",permalink:"/zh/installation/configuration"}},d={},k=[{value:"\u5148\u51b3\u6761\u4ef6",id:"\u5148\u51b3\u6761\u4ef6",level:2},{value:"\u67b6\u6784",id:"\u67b6\u6784",level:2},{value:"\u64cd\u4f5c\u7cfb\u7edf",id:"\u64cd\u4f5c\u7cfb\u7edf",level:2},{value:"\u786c\u4ef6",id:"\u786c\u4ef6",level:2},{value:"\u78c1\u76d8",id:"\u78c1\u76d8",level:4},{value:"\u7f51\u7edc",id:"\u7f51\u7edc",level:2},{value:"K3s Server \u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219",id:"k3s-server-\u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219",level:3},{value:"\u5927\u578b\u96c6\u7fa4",id:"\u5927\u578b\u96c6\u7fa4",level:2},{value:"CPU \u548c\u5185\u5b58",id:"cpu-\u548c\u5185\u5b58",level:3},{value:"\u78c1\u76d8",id:"\u78c1\u76d8-1",level:3},{value:"\u7f51\u7edc",id:"\u7f51\u7edc-1",level:3},{value:"\u6570\u636e\u5e93",id:"\u6570\u636e\u5e93",level:3}],m={toc:k};function o(t){let{components:e,...n}=t;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"K3s \u975e\u5e38\u8f7b\u91cf\uff0c\u4f46\u4e5f\u6709\u4e00\u4e9b\u6700\u4f4e\u8981\u6c42\uff0c\u5982\u4e0b\u6240\u8ff0\u3002"),(0,r.kt)("p",null,"\u65e0\u8bba K3s \u5728\u5bb9\u5668\u4e2d\u8fd0\u884c\u8fd8\u662f\u4f5c\u4e3a\u539f\u751f Linux \u670d\u52a1\u8fd0\u884c\uff0c\u6bcf\u4e2a\u8fd0\u884c K3s \u7684\u8282\u70b9\u90fd\u5e94\u6ee1\u8db3\u4ee5\u4e0b\u6700\u4f4e\u8981\u6c42\u3002\u8fd9\u4e9b\u8981\u6c42\u662f K3s \u53ca\u5176\u6253\u5305\u7ec4\u4ef6\u7684\u57fa\u51c6\uff0c\u4e0d\u5305\u62ec\u5de5\u4f5c\u8d1f\u8f7d\u672c\u8eab\u6d88\u8017\u7684\u8d44\u6e90\u3002"),(0,r.kt)("h2",{id:"\u5148\u51b3\u6761\u4ef6"},"\u5148\u51b3\u6761\u4ef6"),(0,r.kt)("p",null,"\u4e24\u4e2a\u8282\u70b9\u4e0d\u80fd\u5177\u6709\u76f8\u540c\u7684\u4e3b\u673a\u540d\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u591a\u4e2a\u8282\u70b9\u5c06\u5177\u6709\u76f8\u540c\u7684\u4e3b\u673a\u540d\uff0c\u6216\u8005\u4e3b\u673a\u540d\u53ef\u4ee5\u88ab\u81ea\u52a8\u914d\u7f6e\u7cfb\u7edf\u91cd\u590d\u4f7f\u7528\uff0c\u8bf7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--with-node-id")," \u9009\u9879\u4e3a\u6bcf\u4e2a\u8282\u70b9\u9644\u52a0\u4e00\u4e2a\u968f\u673a\u540e\u7f00\uff0c\u6216\u8005\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-name")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"$K3S_NODE_NAME")," \u4e3a\u6dfb\u52a0\u5230\u96c6\u7fa4\u7684\u6bcf\u4e2a\u8282\u70b9\u8bbe\u8ba1\u4e00\u4e2a\u72ec\u7279\u7684\u540d\u79f0\u3002"),(0,r.kt)("h2",{id:"\u67b6\u6784"},"\u67b6\u6784"),(0,r.kt)("p",null,"K3s \u9002\u7528\u4e8e\u4ee5\u4e0b\u67b6\u6784\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"x86_64"),(0,r.kt)("li",{parentName:"ul"},"armhf"),(0,r.kt)("li",{parentName:"ul"},"arm64/aarch64"),(0,r.kt)("li",{parentName:"ul"},"s390x")),(0,r.kt)("admonition",{title:"ARM64 \u9875\u9762\u5927\u5c0f",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"\u5728 2023 \u5e74 5 \u6708\u7248\u672c\uff08v1.24.14+k3s1\u3001v1.25.10+k3s1\u3001v1.26.5+k3s1\u3001v1.27.2+k3s1\uff09\u524d\uff0c\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"aarch64/arm64")," \u7cfb\u7edf\u4e0a\uff0c\u64cd\u4f5c\u7cfb\u7edf\u5fc5\u987b\u4f7f\u7528 4k \u9875\u9762\u5927\u5c0f\u3002",(0,r.kt)("strong",{parentName:"p"},"RHEL9"),"\u3001",(0,r.kt)("strong",{parentName:"p"},"Ubuntu"),"\u3001",(0,r.kt)("strong",{parentName:"p"},"Raspberry PI OS")," \u548c ",(0,r.kt)("strong",{parentName:"p"},"SLES")," \u90fd\u6ee1\u8db3\u8fd9\u4e2a\u8981\u6c42\u3002")),(0,r.kt)("h2",{id:"\u64cd\u4f5c\u7cfb\u7edf"},"\u64cd\u4f5c\u7cfb\u7edf"),(0,r.kt)("p",null,"K3s \u6709\u671b\u5728\u5927\u591a\u6570\u73b0\u4ee3 Linux \u7cfb\u7edf\u4e0a\u8fd0\u884c\u3002"),(0,r.kt)("p",null,"\u4e00\u4e9b\u64cd\u4f5c\u7cfb\u7edf\u6709\u7279\u5b9a\u7684\u8981\u6c42\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u4f7f\u7528 ",(0,r.kt)("strong",{parentName:"li"},"Red Hat/CentOS Enterprise Linux"),"\uff0c\u8bf7\u6309\u7167",(0,r.kt)("a",{parentName:"li",href:"/zh/advanced/#red-hat-enterprise-linux--centos"},"\u8fd9\u4e9b\u6b65\u9aa4"),"\u8fdb\u884c\u5176\u4ed6\u8bbe\u7f6e\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u4f7f\u7528 ",(0,r.kt)("strong",{parentName:"li"},"Raspberry Pi OS"),"\uff0c\u8bf7\u6309\u7167",(0,r.kt)("a",{parentName:"li",href:"/zh/advanced/#raspberry-pi"},"\u8fd9\u4e9b\u6b65\u9aa4"),"\u5207\u6362\u5230\u65e7\u7248 iptables\u3002")),(0,r.kt)("p",null,"\u5173\u4e8e Rancher \u7ba1\u7406\u7684 K3s \u96c6\u7fa4\u6d4b\u8bd5\u4e86\u54ea\u4e9b\u64cd\u4f5c\u7cfb\u7edf\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/support-maintenance-terms/"},"Rancher \u652f\u6301\u548c\u7ef4\u62a4\u6761\u6b3e"),"\u3002"),(0,r.kt)("h2",{id:"\u786c\u4ef6"},"\u786c\u4ef6"),(0,r.kt)("p",null,"\u786c\u4ef6\u8981\u6c42\u6839\u636e\u4f60\u90e8\u7f72\u7684\u89c4\u6a21\u800c\u53d8\u5316\u3002\u6b64\u5904\u6982\u8ff0\u4e86\u6700\u4f4e\u5efa\u8bae\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Spec"),(0,r.kt)("th",{parentName:"tr",align:null},"\u6700\u4f4e"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63a8\u8350"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"CPU"),(0,r.kt)("td",{parentName:"tr",align:null},"1 \u6838"),(0,r.kt)("td",{parentName:"tr",align:null},"2 \u6838")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"RAM"),(0,r.kt)("td",{parentName:"tr",align:null},"512MB"),(0,r.kt)("td",{parentName:"tr",align:null},"1 GB")))),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"/zh/reference/resource-profiling"},"\u8d44\u6e90\u5206\u6790"),"\u7684\u6d4b\u8bd5\u7ed3\u679c\u7528\u4e8e\u786e\u5b9a K3s Agent\u3001\u5177\u6709\u5de5\u4f5c\u8d1f\u8f7d\u7684 K3s Server \u548c\u5177\u6709\u4e00\u4e2a Agent \u7684 K3s Server \u7684\u6700\u4f4e\u8d44\u6e90\u8981\u6c42\u3002\u5b83\u8fd8\u5305\u542b\u4e86\u6709\u5173\u5bf9 K3s Server \u548c Agent \u5229\u7528\u7387\u4ea7\u751f\u6700\u5927\u5f71\u54cd\u7684\u5206\u6790\uff0c\u4ee5\u53ca\u5982\u4f55\u4fdd\u62a4\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u514d\u53d7 Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u7684\u5e72\u6270\u3002"),(0,r.kt)("admonition",{title:"Raspberry Pi \u548c\u5d4c\u5165\u5f0f etcd",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5982\u679c\u5728 Raspberry Pi \u4e0a\u90e8\u7f72\u5e26\u6709\u5d4c\u5165\u5f0f etcd \u7684 K3s\uff0c\u5efa\u8bae\u4f60\u4f7f\u7528\u5916\u90e8 SSD\u3002etcd \u662f\u5199\u5165\u5bc6\u96c6\u578b\u7684\uff0cSD \u5361\u65e0\u6cd5\u5904\u7406 IO \u8d1f\u8f7d\u3002")),(0,r.kt)("h4",{id:"\u78c1\u76d8"},"\u78c1\u76d8"),(0,r.kt)("p",null,"K3s \u7684\u6027\u80fd\u53d6\u51b3\u4e8e\u6570\u636e\u5e93\u7684\u6027\u80fd\u3002\u4e3a\u786e\u4fdd\u6700\u4f73\u901f\u5ea6\uff0c\u6211\u4eec\u5efa\u8bae\u5c3d\u53ef\u80fd\u4f7f\u7528 SSD\u3002\u5728\u4f7f\u7528 SD \u5361\u6216 eMMC \u7684 ARM \u8bbe\u5907\u4e0a\uff0c\u78c1\u76d8\u6027\u80fd\u4f1a\u6709\u6240\u4e0d\u540c\u3002"),(0,r.kt)("h2",{id:"\u7f51\u7edc"},"\u7f51\u7edc"),(0,r.kt)("p",null,"K3s Server \u9700\u8981 6443 \u7aef\u53e3\u624d\u80fd\u88ab\u6240\u6709\u8282\u70b9\u8bbf\u95ee\u3002"),(0,r.kt)("p",null,"\u4f7f\u7528 Flannel VXLAN \u65f6\uff0c\u8282\u70b9\u9700\u8981\u80fd\u591f\u901a\u8fc7 UDP \u7aef\u53e3 8472 \u8bbf\u95ee\u5176\u4ed6\u8282\u70b9\uff0c\u4f7f\u7528 Flannel Wireguard \u540e\u7aef\u65f6\uff0c\u8282\u70b9\u9700\u8981\u80fd\u591f\u901a\u8fc7 UDP \u7aef\u53e3 51820 \u548c 51821\uff08\u4f7f\u7528 IPv6 \u65f6\uff09\u8bbf\u95ee\u5176\u4ed6\u8282\u70b9\u3002\u8be5\u8282\u70b9\u4e0d\u5e94\u4fa6\u542c\u4efb\u4f55\u5176\u4ed6\u7aef\u53e3\u3002K3s \u4f7f\u7528\u53cd\u5411\u96a7\u9053\u5efa\u7acb\u8282\u70b9\u4e0e Server \u7684\u51fa\u7ad9\u8fde\u63a5\uff0c\u6240\u6709 kubelet \u6d41\u91cf\u90fd\u901a\u8fc7\u8be5\u96a7\u9053\u8fdb\u884c\u3002\u4f46\u662f\uff0c\u5982\u679c\u4f60\u4e0d\u4f7f\u7528 Flannel \u5e76\u63d0\u4f9b\u81ea\u5df1\u7684\u81ea\u5b9a\u4e49 CNI\uff0c\u90a3\u4e48 K3s \u4e0d\u9700\u8981 Flannel \u6240\u9700\u7684\u7aef\u53e3\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u8981\u4f7f\u7528 Metrics Server\uff0c\u6240\u6709\u8282\u70b9\u5fc5\u987b\u53ef\u4ee5\u5728\u7aef\u53e3 10250 \u4e0a\u76f8\u4e92\u8bbf\u95ee\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u8ba1\u5212\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u6765\u5b9e\u73b0\u9ad8\u53ef\u7528\u6027\uff0c\u5219 Server \u8282\u70b9\u5fc5\u987b\u53ef\u4ee5\u5728\u7aef\u53e3 2379 \u548c 2380 \u4e0a\u76f8\u4e92\u8bbf\u95ee\u3002"),(0,r.kt)("admonition",{title:"\u91cd\u8981\u63d0\u793a",type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"\u8282\u70b9\u4e0a\u7684 VXLAN \u7aef\u53e3\u4f1a\u5f00\u653e\u96c6\u7fa4\u7f51\u7edc\uff0c\u8ba9\u4efb\u4f55\u4eba\u5747\u80fd\u8bbf\u95ee\u96c6\u7fa4\u3002\u56e0\u6b64\uff0c\u4e0d\u8981\u5c06 VXLAN \u7aef\u53e3\u66b4\u9732\u7ed9\u5916\u754c\u3002\u8bf7\u4f7f\u7528\u7981\u7528 8472 \u7aef\u53e3\u7684\u9632\u706b\u5899/\u5b89\u5168\u7ec4\u6765\u8fd0\u884c\u8282\u70b9\u3002")),(0,r.kt)("admonition",{type:"warning"},(0,r.kt)("p",{parentName:"admonition"},"Flannel \u4f9d\u8d56 ",(0,r.kt)("a",{parentName:"p",href:"https://www.cni.dev/plugins/current/main/bridge/"},"Bridge CNI \u63d2\u4ef6"),"\u6765\u521b\u5efa\u4ea4\u6362\u6d41\u91cf\u7684 L2 \u7f51\u7edc\u3002\u5177\u6709 ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW")," \u529f\u80fd\u7684 Rogue pod \u53ef\u4ee5\u6ee5\u7528\u8be5 L2 \u7f51\u7edc\u6765\u53d1\u52a8\u653b\u51fb\uff0c\u5982 ",(0,r.kt)("a",{parentName:"p",href:"https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf"},"ARP \u6b3a\u9a97"),"\u3002\u56e0\u6b64\uff0c\u5982 ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-standards/"},"Kubernetes \u6587\u6863"),"\u6240\u8ff0\uff0c\u8bf7\u8bbe\u7f6e\u4e00\u4e2a\u53d7\u9650\u914d\u7f6e\u6587\u4ef6\uff0c\u5728\u4e0d\u53ef\u4fe1\u4efb\u7684 Pod \u4e0a\u7981\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"NET_RAW"),"\u3002")),(0,r.kt)("h3",{id:"k3s-server-\u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219"},"K3s Server \u8282\u70b9\u7684\u5165\u7ad9\u89c4\u5219"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u534f\u8bae"),(0,r.kt)("th",{parentName:"tr",align:null},"\u7aef\u53e3"),(0,r.kt)("th",{parentName:"tr",align:null},"\u6e90"),(0,r.kt)("th",{parentName:"tr",align:null},"\u76ee\u6807"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"2379-2380"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709\u5177\u6709\u5d4c\u5165\u5f0f etcd \u7684 HA \u9700\u8981")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"6443"),(0,r.kt)("td",{parentName:"tr",align:null},"Agents"),(0,r.kt)("td",{parentName:"tr",align:null},"Servers"),(0,r.kt)("td",{parentName:"tr",align:null},"K3s supervisor \u548c Kubernetes API Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"8472"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709 Flannel VXLAN \u9700\u8981")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"TCP"),(0,r.kt)("td",{parentName:"tr",align:null},"10250"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"Kubelet \u6307\u6807")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51820"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709\u4f7f\u7528 IPv4 \u7684 Flannel Wireguard \u624d\u9700\u8981")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"UDP"),(0,r.kt)("td",{parentName:"tr",align:null},"51821"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6240\u6709\u8282\u70b9"),(0,r.kt)("td",{parentName:"tr",align:null},"\u53ea\u6709\u4f7f\u7528 IPv6 \u7684 Flannel Wireguard \u624d\u9700\u8981")))),(0,r.kt)("p",null,"\u6240\u6709\u51fa\u7ad9\u6d41\u91cf\u901a\u5e38\u90fd\u662f\u5141\u8bb8\u7684\u3002"),(0,r.kt)("p",null,"\u4f60\u53ef\u80fd\u9700\u8981\u6839\u636e\u4f7f\u7528\u7684\u64cd\u4f5c\u7cfb\u7edf\u5bf9\u9632\u706b\u5899\u8fdb\u884c\u5176\u4ed6\u66f4\u6539\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),"\u3002"),(0,r.kt)("h2",{id:"\u5927\u578b\u96c6\u7fa4"},"\u5927\u578b\u96c6\u7fa4"),(0,r.kt)("p",null,"\u786c\u4ef6\u8981\u6c42\u53d6\u51b3\u4e8e K3s \u96c6\u7fa4\u7684\u5927\u5c0f\u3002\u5bf9\u4e8e\u751f\u4ea7\u548c\u5927\u578b\u96c6\u7fa4\uff0c\u6211\u4eec\u5efa\u8bae\u4f7f\u7528\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528\u6027\u8bbe\u7f6e\u3002\u5bf9\u4e8e\u751f\u4ea7\u73af\u5883\u4e2d\u7684\u5916\u90e8\u6570\u636e\u5e93\uff0c\u5efa\u8bae\u4f7f\u7528\u4ee5\u4e0b\u9009\u9879\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"MySQL"),(0,r.kt)("li",{parentName:"ul"},"PostgreSQL"),(0,r.kt)("li",{parentName:"ul"},"etcd")),(0,r.kt)("h3",{id:"cpu-\u548c\u5185\u5b58"},"CPU \u548c\u5185\u5b58"),(0,r.kt)("p",null,"\u9ad8\u53ef\u7528 K3s Server \u4e2d\u8282\u70b9\u7684\u6700\u4f4e CPU \u548c\u5185\u5b58\u8981\u6c42\u5982\u4e0b\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"\u90e8\u7f72\u89c4\u6a21"),(0,r.kt)("th",{parentName:"tr",align:"center"},"\u8282\u70b9"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64GB")))),(0,r.kt)("h3",{id:"\u78c1\u76d8-1"},"\u78c1\u76d8"),(0,r.kt)("p",null,"\u96c6\u7fa4\u6027\u80fd\u53d6\u51b3\u4e8e\u6570\u636e\u5e93\u6027\u80fd\u3002\u4e3a\u786e\u4fdd\u6700\u4f73\u901f\u5ea6\uff0c\u6211\u4eec\u5efa\u8bae\u4e3a K3s \u96c6\u7fa4\u4f7f\u7528 SSD \u78c1\u76d8\u3002\u5728\u4e91\u63d0\u4f9b\u5546\u4e0a\uff0c\u4f60\u8fd8\u9700\u4f7f\u7528\u80fd\u83b7\u5f97\u6700\u5927 IOPS \u7684\u6700\u5c0f\u5927\u5c0f\u3002"),(0,r.kt)("h3",{id:"\u7f51\u7edc-1"},"\u7f51\u7edc"),(0,r.kt)("p",null,"\u4f60\u5e94\u8be5\u8003\u8651\u589e\u52a0\u96c6\u7fa4 CIDR \u7684\u5b50\u7f51\u5927\u5c0f\uff0c\u907f\u514d\u7528\u5c3d Pod \u7684 IP\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u5728\u542f\u52a8\u65f6\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u9009\u9879\u4f20\u9012\u7ed9 K3s Server \u6765\u5b9e\u73b0\u8fd9\u4e00\u70b9\u3002"),(0,r.kt)("h3",{id:"\u6570\u636e\u5e93"},"\u6570\u636e\u5e93"),(0,r.kt)("p",null,"K3s \u652f\u6301\u4e0d\u540c\u7684\u6570\u636e\u5e93\uff0c\u5305\u62ec MySQL\u3001PostgreSQL\u3001MariaDB \u548c etcd\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/datastore/"},"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8"),"\u3002"),(0,r.kt)("p",null,"\u4ee5\u4e0b\u662f\u8fd0\u884c\u5927\u578b\u96c6\u7fa4\u6240\u9700\u7684\u6570\u636e\u5e93\u8d44\u6e90\u7684\u5927\u5c0f\u6307\u5357\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:"center"},"\u90e8\u7f72\u89c4\u6a21"),(0,r.kt)("th",{parentName:"tr",align:"center"},"\u8282\u70b9"),(0,r.kt)("th",{parentName:"tr",align:"center"},"VCPUS"),(0,r.kt)("th",{parentName:"tr",align:"center"},"RAM"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Small"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 10"),(0,r.kt)("td",{parentName:"tr",align:"center"},"1"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Medium"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 100"),(0,r.kt)("td",{parentName:"tr",align:"center"},"2"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8 GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 250"),(0,r.kt)("td",{parentName:"tr",align:"center"},"4"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"X-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"Up to 500"),(0,r.kt)("td",{parentName:"tr",align:"center"},"8"),(0,r.kt)("td",{parentName:"tr",align:"center"},"32GB")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:"center"},"XX-Large"),(0,r.kt)("td",{parentName:"tr",align:"center"},"500+"),(0,r.kt)("td",{parentName:"tr",align:"center"},"16"),(0,r.kt)("td",{parentName:"tr",align:"center"},"64GB")))))}o.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/6780.6d95d5ed.js b/zh/assets/js/6780.6d95d5ed.js
deleted file mode 100644
index 803aa19e4..000000000
--- a/zh/assets/js/6780.6d95d5ed.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6780],{6780:(e,t,r)=>{function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t,r){var a,c=t.initialState;return{getState:function(){return c},dispatch:function(a,i){var l=function(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?n(Object(r),!0).forEach((function(t){o(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):n(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}({},c);c=e(c,{type:a,props:t,payload:i}),r({state:c,prevState:l})},pendingRequests:(a=[],{add:function(e){return a.push(e),e.finally((function(){a=a.filter((function(t){return t!==e}))}))},cancelAll:function(){a.forEach((function(e){return e.cancel()}))},isEmpty:function(){return 0===a.length}})}}function c(e){return e.reduce((function(e,t){return e.concat(t)}),[])}function i(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?i(Object(r),!0).forEach((function(t){s(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):i(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function u(e){return 0===e.collections.length?0:e.collections.reduce((function(e,t){return e+t.items.length}),0)}r.r(t),r.d(t,{DocSearchModal:()=>Dr});var f=0;var m=function(){};function p(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function d(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function h(e,t){var r=[];return Promise.resolve(e(t)).then((function(e){return Array.isArray(e),Promise.all(e.filter((function(e){return Boolean(e)})).map((function(e){if(e.sourceId,r.includes(e.sourceId))throw new Error("[Autocomplete] The `sourceId` ".concat(JSON.stringify(e.sourceId)," is not unique."));r.push(e.sourceId);var t=function(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?p(Object(r),!0).forEach((function(t){d(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):p(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}({getItemInputValue:function(e){return e.state.query},getItemUrl:function(){},onSelect:function(e){(0,e.setIsOpen)(!1)},onActive:m},e);return Promise.resolve(t)})))}))}function v(e){return function(e){if(Array.isArray(e))return y(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return y(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return y(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function y(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function g(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function b(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?g(Object(r),!0).forEach((function(t){O(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):g(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function O(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function S(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function E(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?S(Object(r),!0).forEach((function(t){j(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):S(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function j(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function w(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function P(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?w(Object(r),!0).forEach((function(t){I(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):w(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function I(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function D(e){return function(e){if(Array.isArray(e))return k(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return k(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return k(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function k(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function C(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function A(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?C(Object(r),!0).forEach((function(t){x(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):C(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function x(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function N(e){return Boolean(e.execute)}function _(e,t){return r=e,Boolean(null==r?void 0:r.execute)?A(A({},e),{},{requests:e.queries.map((function(r){return{query:r,sourceId:t,transformResponse:e.transformResponse}}))}):{items:e,sourceId:t};var r}function R(e){var t=e.reduce((function(e,t){if(!N(t))return e.push(t),e;var r=t.searchClient,n=t.execute,o=t.requesterId,a=t.requests,c=e.find((function(e){return N(t)&&N(e)&&e.searchClient===r&&Boolean(o)&&e.requesterId===o}));if(c){var i;(i=c.items).push.apply(i,D(a))}else{var l={execute:n,requesterId:o,items:a,searchClient:r};e.push(l)}return e}),[]).map((function(e){if(!N(e))return Promise.resolve(e);var t=e,r=t.execute,n=t.items;return r({searchClient:t.searchClient,requests:n})}));return Promise.all(t).then((function(e){return c(e)}))}function q(e,t){return t.map((function(t){var r=e.filter((function(e){return e.sourceId===t.sourceId})),n=r.map((function(e){return e.items})),o=r[0].transformResponse,a=o?o(function(e){var t=e.map((function(e){var t;return P(P({},e),{},{hits:null===(t=e.hits)||void 0===t?void 0:t.map((function(t){return P(P({},t),{},{__autocomplete_indexName:e.index,__autocomplete_queryID:e.queryID})}))})}));return{results:t,hits:t.map((function(e){return e.hits})).filter(Boolean),facetHits:t.map((function(e){var t;return null===(t=e.facetHits)||void 0===t?void 0:t.map((function(e){return{label:e.value,count:e.count,_highlightResult:{label:{value:e.highlighted}}}}))})).filter(Boolean)}}(n)):n;return Array.isArray(a),a.every(Boolean),'The `getItems` function from source "'.concat(t.sourceId,'" must return an array of items but returned ').concat(JSON.stringify(void 0),".\n\nDid you forget to return items?\n\nSee: https://www.algolia.com/doc/ui-libraries/autocomplete/core-concepts/sources/#param-getitems"),{source:t,items:a}}))}function T(e,t){var r=t;return{then:function(t,n){return T(e.then(H(t,r,e),H(n,r,e)),r)},catch:function(t){return T(e.catch(H(t,r,e)),r)},finally:function(t){return t&&r.onCancelList.push(t),T(e.finally(H(t&&function(){return r.onCancelList=[],t()},r,e)),r)},cancel:function(){r.isCanceled=!0;var e=r.onCancelList;r.onCancelList=[],e.forEach((function(e){e()}))},isCanceled:function(){return!0===r.isCanceled}}}function L(e){return T(new Promise((function(t,r){return e(t,r)})),{isCanceled:!1,onCancelList:[]})}function M(e){return T(e,{isCanceled:!1,onCancelList:[]})}function H(e,t,r){return e?function(r){return t.isCanceled?r:e(r)}:r}function F(e){var t=function(e){var t=e.collections.map((function(e){return e.items.length})).reduce((function(e,t,r){var n=(e[r-1]||0)+t;return e.push(n),e}),[]).reduce((function(t,r){return r<=e.activeItemId?t+1:t}),0);return e.collections[t]}(e);if(!t)return null;var r=t.items[function(e){for(var t=e.state,r=e.collection,n=!1,o=0,a=0;!1===n;){var c=t.collections[o];if(c===r){n=!0;break}a+=c.items.length,o++}return t.activeItemId-a}({state:e,collection:t})],n=t.source;return{item:r,itemInputValue:n.getItemInputValue({item:r,state:e}),itemUrl:n.getItemUrl({item:r,state:e}),source:n}}L.resolve=function(e){return M(Promise.resolve(e))},L.reject=function(e){return M(Promise.reject(e))};var U=["event","nextState","props","query","refresh","store"];function B(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function V(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?B(Object(r),!0).forEach((function(t){K(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):B(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function K(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function J(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var $,z,W,Q=null,Z=($=-1,z=-1,W=void 0,function(e){var t=++$;return Promise.resolve(e).then((function(e){return W&&t<z?W:(z=t,W=e,e)}))});function Y(e){var t=e.event,r=e.nextState,n=void 0===r?{}:r,o=e.props,a=e.query,i=e.refresh,l=e.store,s=J(e,U);Q&&o.environment.clearTimeout(Q);var u=s.setCollections,f=s.setIsOpen,m=s.setQuery,p=s.setActiveItemId,d=s.setStatus;if(m(a),p(o.defaultActiveItemId),!a&&!1===o.openOnFocus){var h,v=l.getState().collections.map((function(e){return V(V({},e),{},{items:[]})}));d("idle"),u(v),f(null!==(h=n.isOpen)&&void 0!==h?h:o.shouldPanelOpen({state:l.getState()}));var y=M(Z(v).then((function(){return Promise.resolve()})));return l.pendingRequests.add(y)}d("loading"),Q=o.environment.setTimeout((function(){d("stalled")}),o.stallThreshold);var g=M(Z(o.getSources(V({query:a,refresh:i,state:l.getState()},s)).then((function(e){return Promise.all(e.map((function(e){return Promise.resolve(e.getItems(V({query:a,refresh:i,state:l.getState()},s))).then((function(t){return _(t,e.sourceId)}))}))).then(R).then((function(t){return q(t,e)})).then((function(e){return function(e){var t=e.collections,r=e.props,n=e.state,o=t.reduce((function(e,t){return E(E({},e),{},j({},t.source.sourceId,E(E({},t.source),{},{getItems:function(){return c(t.items)}})))}),{});return c(r.reshape({sources:Object.values(o),sourcesBySourceId:o,state:n})).filter(Boolean).map((function(e){return{source:e,items:e.getItems()}}))}({collections:e,props:o,state:l.getState()})}))})))).then((function(e){var r;d("idle"),u(e);var c=o.shouldPanelOpen({state:l.getState()});f(null!==(r=n.isOpen)&&void 0!==r?r:o.openOnFocus&&!a&&c||c);var m=F(l.getState());if(null!==l.getState().activeItemId&&m){var p=m.item,h=m.itemInputValue,v=m.itemUrl,y=m.source;y.onActive(V({event:t,item:p,itemInputValue:h,itemUrl:v,refresh:i,source:y,state:l.getState()},s))}})).finally((function(){d("idle"),Q&&o.environment.clearTimeout(Q)}));return l.pendingRequests.add(g)}var G=["event","props","refresh","store"];function X(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ee(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?X(Object(r),!0).forEach((function(t){te(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):X(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function te(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function re(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var ne=/((gt|sm)-|galaxy nexus)|samsung[- ]/i;var oe=["props","refresh","store"],ae=["inputElement","formElement","panelElement"],ce=["inputElement"],ie=["inputElement","maxLength"],le=["item","source"];function se(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ue(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?se(Object(r),!0).forEach((function(t){fe(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):se(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function fe(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function me(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function pe(e){var t=e.props,r=e.refresh,n=e.store,o=me(e,oe);return{getEnvironmentProps:function(e){var r=e.inputElement,o=e.formElement,a=e.panelElement;function c(e){!n.getState().isOpen&&n.pendingRequests.isEmpty()||e.target===r||!1===[o,a].some((function(t){return r=t,n=e.target,r===n||r.contains(n);var r,n}))&&(n.dispatch("blur",null),t.debug||n.pendingRequests.cancelAll())}return ue({onTouchStart:c,onMouseDown:c,onTouchMove:function(e){!1!==n.getState().isOpen&&r===t.environment.document.activeElement&&e.target!==r&&r.blur()}},me(e,ae))},getRootProps:function(e){return ue({role:"combobox","aria-expanded":n.getState().isOpen,"aria-haspopup":"listbox","aria-owns":n.getState().isOpen?"".concat(t.id,"-list"):void 0,"aria-labelledby":"".concat(t.id,"-label")},e)},getFormProps:function(e){e.inputElement;return ue({action:"",noValidate:!0,role:"search",onSubmit:function(a){var c;a.preventDefault(),t.onSubmit(ue({event:a,refresh:r,state:n.getState()},o)),n.dispatch("submit",null),null===(c=e.inputElement)||void 0===c||c.blur()},onReset:function(a){var c;a.preventDefault(),t.onReset(ue({event:a,refresh:r,state:n.getState()},o)),n.dispatch("reset",null),null===(c=e.inputElement)||void 0===c||c.focus()}},me(e,ce))},getLabelProps:function(e){return ue({htmlFor:"".concat(t.id,"-input"),id:"".concat(t.id,"-label")},e)},getInputProps:function(e){var a;function c(e){(t.openOnFocus||Boolean(n.getState().query))&&Y(ue({event:e,props:t,query:n.getState().completion||n.getState().query,refresh:r,store:n},o)),n.dispatch("focus",null)}var i=e||{},l=(i.inputElement,i.maxLength),s=void 0===l?512:l,u=me(i,ie),f=F(n.getState()),p=function(e){return Boolean(e&&e.match(ne))}((null===(a=t.environment.navigator)||void 0===a?void 0:a.userAgent)||""),d=null!=f&&f.itemUrl&&!p?"go":"search";return ue({"aria-autocomplete":"both","aria-activedescendant":n.getState().isOpen&&null!==n.getState().activeItemId?"".concat(t.id,"-item-").concat(n.getState().activeItemId):void 0,"aria-controls":n.getState().isOpen?"".concat(t.id,"-list"):void 0,"aria-labelledby":"".concat(t.id,"-label"),value:n.getState().completion||n.getState().query,id:"".concat(t.id,"-input"),autoComplete:"off",autoCorrect:"off",autoCapitalize:"off",enterKeyHint:d,spellCheck:"false",autoFocus:t.autoFocus,placeholder:t.placeholder,maxLength:s,type:"search",onChange:function(e){Y(ue({event:e,props:t,query:e.currentTarget.value.slice(0,s),refresh:r,store:n},o))},onKeyDown:function(e){!function(e){var t=e.event,r=e.props,n=e.refresh,o=e.store,a=re(e,G);if("ArrowUp"===t.key||"ArrowDown"===t.key){var c=function(){var e=r.environment.document.getElementById("".concat(r.id,"-item-").concat(o.getState().activeItemId));e&&(e.scrollIntoViewIfNeeded?e.scrollIntoViewIfNeeded(!1):e.scrollIntoView(!1))},i=function(){var e=F(o.getState());if(null!==o.getState().activeItemId&&e){var r=e.item,c=e.itemInputValue,i=e.itemUrl,l=e.source;l.onActive(ee({event:t,item:r,itemInputValue:c,itemUrl:i,refresh:n,source:l,state:o.getState()},a))}};t.preventDefault(),!1===o.getState().isOpen&&(r.openOnFocus||Boolean(o.getState().query))?Y(ee({event:t,props:r,query:o.getState().query,refresh:n,store:o},a)).then((function(){o.dispatch(t.key,{nextActiveItemId:r.defaultActiveItemId}),i(),setTimeout(c,0)})):(o.dispatch(t.key,{}),i(),c())}else if("Escape"===t.key)t.preventDefault(),o.dispatch(t.key,null),o.pendingRequests.cancelAll();else if("Tab"===t.key)o.dispatch("blur",null),o.pendingRequests.cancelAll();else if("Enter"===t.key){if(null===o.getState().activeItemId||o.getState().collections.every((function(e){return 0===e.items.length})))return void(r.debug||o.pendingRequests.cancelAll());t.preventDefault();var l=F(o.getState()),s=l.item,u=l.itemInputValue,f=l.itemUrl,m=l.source;if(t.metaKey||t.ctrlKey)void 0!==f&&(m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),r.navigator.navigateNewTab({itemUrl:f,item:s,state:o.getState()}));else if(t.shiftKey)void 0!==f&&(m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),r.navigator.navigateNewWindow({itemUrl:f,item:s,state:o.getState()}));else if(t.altKey);else{if(void 0!==f)return m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a)),void r.navigator.navigate({itemUrl:f,item:s,state:o.getState()});Y(ee({event:t,nextState:{isOpen:!1},props:r,query:u,refresh:n,store:o},a)).then((function(){m.onSelect(ee({event:t,item:s,itemInputValue:u,itemUrl:f,refresh:n,source:m,state:o.getState()},a))}))}}}(ue({event:e,props:t,refresh:r,store:n},o))},onFocus:c,onBlur:m,onClick:function(r){e.inputElement!==t.environment.document.activeElement||n.getState().isOpen||c(r)}},u)},getPanelProps:function(e){return ue({onMouseDown:function(e){e.preventDefault()},onMouseLeave:function(){n.dispatch("mouseleave",null)}},e)},getListProps:function(e){return ue({role:"listbox","aria-labelledby":"".concat(t.id,"-label"),id:"".concat(t.id,"-list")},e)},getItemProps:function(e){var a=e.item,c=e.source,i=me(e,le);return ue({id:"".concat(t.id,"-item-").concat(a.__autocomplete_id),role:"option","aria-selected":n.getState().activeItemId===a.__autocomplete_id,onMouseMove:function(e){if(a.__autocomplete_id!==n.getState().activeItemId){n.dispatch("mousemove",a.__autocomplete_id);var t=F(n.getState());if(null!==n.getState().activeItemId&&t){var c=t.item,i=t.itemInputValue,l=t.itemUrl,s=t.source;s.onActive(ue({event:e,item:c,itemInputValue:i,itemUrl:l,refresh:r,source:s,state:n.getState()},o))}}},onMouseDown:function(e){e.preventDefault()},onClick:function(e){var i=c.getItemInputValue({item:a,state:n.getState()}),l=c.getItemUrl({item:a,state:n.getState()});(l?Promise.resolve():Y(ue({event:e,nextState:{isOpen:!1},props:t,query:i,refresh:r,store:n},o))).then((function(){c.onSelect(ue({event:e,item:a,itemInputValue:i,itemUrl:l,refresh:r,source:c,state:n.getState()},o))}))}},i)}}}var de=[{segment:"autocomplete-core",version:"1.7.4"}];function he(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function ve(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?he(Object(r),!0).forEach((function(t){ye(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):he(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function ye(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function ge(e){var t,r,n,o,a=e.plugins,c=e.options,i=null===(t=((null===(r=c.__autocomplete_metadata)||void 0===r?void 0:r.userAgents)||[])[0])||void 0===t?void 0:t.segment,l=i?ye({},i,Object.keys((null===(n=c.__autocomplete_metadata)||void 0===n?void 0:n.options)||{})):{};return{plugins:a.map((function(e){return{name:e.name,options:Object.keys(e.__autocomplete_pluginOptions||[])}})),options:ve({"autocomplete-core":Object.keys(c)},l),ua:de.concat((null===(o=c.__autocomplete_metadata)||void 0===o?void 0:o.userAgents)||[])}}function be(e){var t,r=e.state;return!1===r.isOpen||null===r.activeItemId?null:(null===(t=F(r))||void 0===t?void 0:t.itemInputValue)||null}function Oe(e,t,r,n){if(!r)return null;if(e<0&&(null===t||null!==n&&0===t))return r+e;var o=(null===t?-1:t)+e;return o<=-1||o>=r?null===n?null:0:o}function Se(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Ee(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Se(Object(r),!0).forEach((function(t){je(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Se(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function je(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}var we=function(e,t){switch(t.type){case"setActiveItemId":case"mousemove":return Ee(Ee({},e),{},{activeItemId:t.payload});case"setQuery":return Ee(Ee({},e),{},{query:t.payload,completion:null});case"setCollections":return Ee(Ee({},e),{},{collections:t.payload});case"setIsOpen":return Ee(Ee({},e),{},{isOpen:t.payload});case"setStatus":return Ee(Ee({},e),{},{status:t.payload});case"setContext":return Ee(Ee({},e),{},{context:Ee(Ee({},e.context),t.payload)});case"ArrowDown":var r=Ee(Ee({},e),{},{activeItemId:t.payload.hasOwnProperty("nextActiveItemId")?t.payload.nextActiveItemId:Oe(1,e.activeItemId,u(e),t.props.defaultActiveItemId)});return Ee(Ee({},r),{},{completion:be({state:r})});case"ArrowUp":var n=Ee(Ee({},e),{},{activeItemId:Oe(-1,e.activeItemId,u(e),t.props.defaultActiveItemId)});return Ee(Ee({},n),{},{completion:be({state:n})});case"Escape":return e.isOpen?Ee(Ee({},e),{},{activeItemId:null,isOpen:!1,completion:null}):Ee(Ee({},e),{},{activeItemId:null,query:"",status:"idle",collections:[]});case"submit":return Ee(Ee({},e),{},{activeItemId:null,isOpen:!1,status:"idle"});case"reset":return Ee(Ee({},e),{},{activeItemId:!0===t.props.openOnFocus?t.props.defaultActiveItemId:null,status:"idle",query:""});case"focus":return Ee(Ee({},e),{},{activeItemId:t.props.defaultActiveItemId,isOpen:(t.props.openOnFocus||Boolean(e.query))&&t.props.shouldPanelOpen({state:e})});case"blur":return t.props.debug?e:Ee(Ee({},e),{},{isOpen:!1,activeItemId:null});case"mouseleave":return Ee(Ee({},e),{},{activeItemId:t.props.defaultActiveItemId});default:return"The reducer action ".concat(JSON.stringify(t.type)," is not supported."),e}};function Pe(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Ie(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Pe(Object(r),!0).forEach((function(t){De(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Pe(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function De(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function ke(e){var t=[],r=function(e,t){var r,n="undefined"!=typeof window?window:{},o=e.plugins||[];return b(b({debug:!1,openOnFocus:!1,placeholder:"",autoFocus:!1,defaultActiveItemId:null,stallThreshold:300,environment:n,shouldPanelOpen:function(e){return u(e.state)>0},reshape:function(e){return e.sources}},e),{},{id:null!==(r=e.id)&&void 0!==r?r:"autocomplete-".concat(f++),plugins:o,initialState:b({activeItemId:null,query:"",completion:null,collections:[],isOpen:!1,status:"idle",context:{}},e.initialState),onStateChange:function(t){var r;null===(r=e.onStateChange)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onStateChange)||void 0===r?void 0:r.call(e,t)}))},onSubmit:function(t){var r;null===(r=e.onSubmit)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onSubmit)||void 0===r?void 0:r.call(e,t)}))},onReset:function(t){var r;null===(r=e.onReset)||void 0===r||r.call(e,t),o.forEach((function(e){var r;return null===(r=e.onReset)||void 0===r?void 0:r.call(e,t)}))},getSources:function(r){return Promise.all([].concat(v(o.map((function(e){return e.getSources}))),[e.getSources]).filter(Boolean).map((function(e){return h(e,r)}))).then((function(e){return c(e)})).then((function(e){return e.map((function(e){return b(b({},e),{},{onSelect:function(r){e.onSelect(r),t.forEach((function(e){var t;return null===(t=e.onSelect)||void 0===t?void 0:t.call(e,r)}))},onActive:function(r){e.onActive(r),t.forEach((function(e){var t;return null===(t=e.onActive)||void 0===t?void 0:t.call(e,r)}))}})}))}))},navigator:b({navigate:function(e){var t=e.itemUrl;n.location.assign(t)},navigateNewTab:function(e){var t=e.itemUrl,r=n.open(t,"_blank","noopener");null==r||r.focus()},navigateNewWindow:function(e){var t=e.itemUrl;n.open(t,"_blank","noopener")}},e.navigator)})}(e,t),n=a(we,r,(function(e){var t=e.prevState,n=e.state;r.onStateChange(Ie({prevState:t,state:n,refresh:s},o))})),o=function(e){var t=e.store;return{setActiveItemId:function(e){t.dispatch("setActiveItemId",e)},setQuery:function(e){t.dispatch("setQuery",e)},setCollections:function(e){var r=0,n=e.map((function(e){return l(l({},e),{},{items:c(e.items).map((function(e){return l(l({},e),{},{__autocomplete_id:r++})}))})}));t.dispatch("setCollections",n)},setIsOpen:function(e){t.dispatch("setIsOpen",e)},setStatus:function(e){t.dispatch("setStatus",e)},setContext:function(e){t.dispatch("setContext",e)}}}({store:n}),i=pe(Ie({props:r,refresh:s,store:n},o));function s(){return Y(Ie({event:new Event("input"),nextState:{isOpen:n.getState().isOpen},props:r,query:n.getState().query,refresh:s,store:n},o))}return r.plugins.forEach((function(e){var r;return null===(r=e.subscribe)||void 0===r?void 0:r.call(e,Ie(Ie({},o),{},{refresh:s,onSelect:function(e){t.push({onSelect:e})},onActive:function(e){t.push({onActive:e})}}))})),function(e){var t,r,n=e.metadata,o=e.environment;if(null===(t=o.navigator)||void 0===t||null===(r=t.userAgent)||void 0===r?void 0:r.includes("Algolia Crawler")){var a=o.document.createElement("meta"),c=o.document.querySelector("head");a.name="algolia:metadata",setTimeout((function(){a.content=JSON.stringify(n),c.appendChild(a)}),0)}}({metadata:ge({plugins:r.plugins,options:e}),environment:r.environment}),Ie(Ie({refresh:s},i),o)}var Ce=r(7294);function Ae(e){var t=e.translations,r=(void 0===t?{}:t).searchByText,n=void 0===r?"Search by":r;return Ce.createElement("a",{href:"https://www.algolia.com/ref/docsearch/?utm_source=".concat(window.location.hostname,"&utm_medium=referral&utm_content=powered_by&utm_campaign=docsearch"),target:"_blank",rel:"noopener noreferrer"},Ce.createElement("span",{className:"DocSearch-Label"},n),Ce.createElement("svg",{width:"77",height:"19","aria-label":"Algolia",role:"img",id:"Layer_1",xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 2196.2 500"},Ce.createElement("defs",null,Ce.createElement("style",null,".cls-1,.cls-2{fill:#003dff;}.cls-2{fill-rule:evenodd;}")),Ce.createElement("path",{className:"cls-2",d:"M1070.38,275.3V5.91c0-3.63-3.24-6.39-6.82-5.83l-50.46,7.94c-2.87,.45-4.99,2.93-4.99,5.84l.17,273.22c0,12.92,0,92.7,95.97,95.49,3.33,.1,6.09-2.58,6.09-5.91v-40.78c0-2.96-2.19-5.51-5.12-5.84-34.85-4.01-34.85-47.57-34.85-54.72Z"}),Ce.createElement("rect",{className:"cls-1",x:"1845.88",y:"104.73",width:"62.58",height:"277.9",rx:"5.9",ry:"5.9"}),Ce.createElement("path",{className:"cls-2",d:"M1851.78,71.38h50.77c3.26,0,5.9-2.64,5.9-5.9V5.9c0-3.62-3.24-6.39-6.82-5.83l-50.77,7.95c-2.87,.45-4.99,2.92-4.99,5.83v51.62c0,3.26,2.64,5.9,5.9,5.9Z"}),Ce.createElement("path",{className:"cls-2",d:"M1764.03,275.3V5.91c0-3.63-3.24-6.39-6.82-5.83l-50.46,7.94c-2.87,.45-4.99,2.93-4.99,5.84l.17,273.22c0,12.92,0,92.7,95.97,95.49,3.33,.1,6.09-2.58,6.09-5.91v-40.78c0-2.96-2.19-5.51-5.12-5.84-34.85-4.01-34.85-47.57-34.85-54.72Z"}),Ce.createElement("path",{className:"cls-2",d:"M1631.95,142.72c-11.14-12.25-24.83-21.65-40.78-28.31-15.92-6.53-33.26-9.85-52.07-9.85-18.78,0-36.15,3.17-51.92,9.85-15.59,6.66-29.29,16.05-40.76,28.31-11.47,12.23-20.38,26.87-26.76,44.03-6.38,17.17-9.24,37.37-9.24,58.36,0,20.99,3.19,36.87,9.55,54.21,6.38,17.32,15.14,32.11,26.45,44.36,11.29,12.23,24.83,21.62,40.6,28.46,15.77,6.83,40.12,10.33,52.4,10.48,12.25,0,36.78-3.82,52.7-10.48,15.92-6.68,29.46-16.23,40.78-28.46,11.29-12.25,20.05-27.04,26.25-44.36,6.22-17.34,9.24-33.22,9.24-54.21,0-20.99-3.34-41.19-10.03-58.36-6.38-17.17-15.14-31.8-26.43-44.03Zm-44.43,163.75c-11.47,15.75-27.56,23.7-48.09,23.7-20.55,0-36.63-7.8-48.1-23.7-11.47-15.75-17.21-34.01-17.21-61.2,0-26.89,5.59-49.14,17.06-64.87,11.45-15.75,27.54-23.52,48.07-23.52,20.55,0,36.63,7.78,48.09,23.52,11.47,15.57,17.36,37.98,17.36,64.87,0,27.19-5.72,45.3-17.19,61.2Z"}),Ce.createElement("path",{className:"cls-2",d:"M894.42,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-14.52,22.58-22.99,49.63-22.99,78.73,0,44.89,20.13,84.92,51.59,111.1,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47,1.23,0,2.46-.03,3.68-.09,.36-.02,.71-.05,1.07-.07,.87-.05,1.75-.11,2.62-.2,.34-.03,.68-.08,1.02-.12,.91-.1,1.82-.21,2.73-.34,.21-.03,.42-.07,.63-.1,32.89-5.07,61.56-30.82,70.9-62.81v57.83c0,3.26,2.64,5.9,5.9,5.9h50.42c3.26,0,5.9-2.64,5.9-5.9V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,206.92c-12.2,10.16-27.97,13.98-44.84,15.12-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-42.24,0-77.12-35.89-77.12-79.37,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33v142.83Z"}),Ce.createElement("path",{className:"cls-2",d:"M2133.97,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-14.52,22.58-22.99,49.63-22.99,78.73,0,44.89,20.13,84.92,51.59,111.1,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47,1.23,0,2.46-.03,3.68-.09,.36-.02,.71-.05,1.07-.07,.87-.05,1.75-.11,2.62-.2,.34-.03,.68-.08,1.02-.12,.91-.1,1.82-.21,2.73-.34,.21-.03,.42-.07,.63-.1,32.89-5.07,61.56-30.82,70.9-62.81v57.83c0,3.26,2.64,5.9,5.9,5.9h50.42c3.26,0,5.9-2.64,5.9-5.9V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,206.92c-12.2,10.16-27.97,13.98-44.84,15.12-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-42.24,0-77.12-35.89-77.12-79.37,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33v142.83Z"}),Ce.createElement("path",{className:"cls-2",d:"M1314.05,104.73h-49.33c-48.36,0-90.91,25.48-115.75,64.1-11.79,18.34-19.6,39.64-22.11,62.59-.58,5.3-.88,10.68-.88,16.14s.31,11.15,.93,16.59c4.28,38.09,23.14,71.61,50.66,94.52,2.93,2.6,6.05,4.98,9.31,7.14,12.86,8.49,28.11,13.47,44.52,13.47h0c17.99,0,34.61-5.93,48.16-15.97,16.29-11.58,28.88-28.54,34.48-47.75v50.26h-.11v11.08c0,21.84-5.71,38.27-17.34,49.36-11.61,11.08-31.04,16.63-58.25,16.63-11.12,0-28.79-.59-46.6-2.41-2.83-.29-5.46,1.5-6.27,4.22l-12.78,43.11c-1.02,3.46,1.27,7.02,4.83,7.53,21.52,3.08,42.52,4.68,54.65,4.68,48.91,0,85.16-10.75,108.89-32.21,21.48-19.41,33.15-48.89,35.2-88.52V110.63c0-3.26-2.64-5.9-5.9-5.9h-56.32Zm0,64.1s.65,139.13,0,143.36c-12.08,9.77-27.11,13.59-43.49,14.7-.16,.01-.33,.03-.49,.04-1.12,.07-2.24,.1-3.36,.1-1.32,0-2.63-.03-3.94-.1-40.41-2.11-74.52-37.26-74.52-79.38,0-10.25,1.96-20.01,5.42-28.98,11.22-29.12,38.77-49.74,71.06-49.74h49.33Z"}),Ce.createElement("path",{className:"cls-1",d:"M249.83,0C113.3,0,2,110.09,.03,246.16c-2,138.19,110.12,252.7,248.33,253.5,42.68,.25,83.79-10.19,120.3-30.03,3.56-1.93,4.11-6.83,1.08-9.51l-23.38-20.72c-4.75-4.21-11.51-5.4-17.36-2.92-25.48,10.84-53.17,16.38-81.71,16.03-111.68-1.37-201.91-94.29-200.13-205.96,1.76-110.26,92-199.41,202.67-199.41h202.69V407.41l-115-102.18c-3.72-3.31-9.42-2.66-12.42,1.31-18.46,24.44-48.53,39.64-81.93,37.34-46.33-3.2-83.87-40.5-87.34-86.81-4.15-55.24,39.63-101.52,94-101.52,49.18,0,89.68,37.85,93.91,85.95,.38,4.28,2.31,8.27,5.52,11.12l29.95,26.55c3.4,3.01,8.79,1.17,9.63-3.3,2.16-11.55,2.92-23.58,2.07-35.92-4.82-70.34-61.8-126.93-132.17-131.26-80.68-4.97-148.13,58.14-150.27,137.25-2.09,77.1,61.08,143.56,138.19,145.26,32.19,.71,62.03-9.41,86.14-26.95l150.26,133.2c6.44,5.71,16.61,1.14,16.61-7.47V9.48C499.66,4.25,495.42,0,490.18,0H249.83Z"})))}function xe(e){return Ce.createElement("svg",{width:"15",height:"15","aria-label":e.ariaLabel,role:"img"},Ce.createElement("g",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:"1.2"},e.children))}function Ne(e){var t=e.translations,r=void 0===t?{}:t,n=r.selectText,o=void 0===n?"to select":n,a=r.selectKeyAriaLabel,c=void 0===a?"Enter key":a,i=r.navigateText,l=void 0===i?"to navigate":i,s=r.navigateUpKeyAriaLabel,u=void 0===s?"Arrow up":s,f=r.navigateDownKeyAriaLabel,m=void 0===f?"Arrow down":f,p=r.closeText,d=void 0===p?"to close":p,h=r.closeKeyAriaLabel,v=void 0===h?"Escape key":h,y=r.searchByText,g=void 0===y?"Search by":y;return Ce.createElement(Ce.Fragment,null,Ce.createElement("div",{className:"DocSearch-Logo"},Ce.createElement(Ae,{translations:{searchByText:g}})),Ce.createElement("ul",{className:"DocSearch-Commands"},Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:c},Ce.createElement("path",{d:"M12 3.53088v3c0 1-1 2-2 2H4M7 11.53088l-3-3 3-3"}))),Ce.createElement("span",{className:"DocSearch-Label"},o)),Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:m},Ce.createElement("path",{d:"M7.5 3.5v8M10.5 8.5l-3 3-3-3"}))),Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:u},Ce.createElement("path",{d:"M7.5 11.5v-8M10.5 6.5l-3-3-3 3"}))),Ce.createElement("span",{className:"DocSearch-Label"},l)),Ce.createElement("li",null,Ce.createElement("kbd",{className:"DocSearch-Commands-Key"},Ce.createElement(xe,{ariaLabel:v},Ce.createElement("path",{d:"M13.6167 8.936c-.1065.3583-.6883.962-1.4875.962-.7993 0-1.653-.9165-1.653-2.1258v-.5678c0-1.2548.7896-2.1016 1.653-2.1016.8634 0 1.3601.4778 1.4875 1.0724M9 6c-.1352-.4735-.7506-.9219-1.46-.8972-.7092.0246-1.344.57-1.344 1.2166s.4198.8812 1.3445.9805C8.465 7.3992 8.968 7.9337 9 8.5c.032.5663-.454 1.398-1.4595 1.398C6.6593 9.898 6 9 5.963 8.4851m-1.4748.5368c-.2635.5941-.8099.876-1.5443.876s-1.7073-.6248-1.7073-2.204v-.4603c0-1.0416.721-2.131 1.7073-2.131.9864 0 1.6425 1.031 1.5443 2.2492h-2.956"}))),Ce.createElement("span",{className:"DocSearch-Label"},d))))}function _e(e){var t=e.hit,r=e.children;return Ce.createElement("a",{href:t.url},r)}function Re(){return Ce.createElement("svg",{width:"40",height:"40",viewBox:"0 0 20 20",fill:"none",fillRule:"evenodd",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M19 4.8a16 16 0 00-2-1.2m-3.3-1.2A16 16 0 001.1 4.7M16.7 8a12 12 0 00-2.8-1.4M10 6a12 12 0 00-6.7 2M12.3 14.7a4 4 0 00-4.5 0M14.5 11.4A8 8 0 0010 10M3 16L18 2M10 18h0"}))}function qe(e){var t=e.translations,r=void 0===t?{}:t,n=r.titleText,o=void 0===n?"Unable to fetch results":n,a=r.helpText,c=void 0===a?"You might want to check your network connection.":a;return Ce.createElement("div",{className:"DocSearch-ErrorScreen"},Ce.createElement("div",{className:"DocSearch-Screen-Icon"},Ce.createElement(Re,null)),Ce.createElement("p",{className:"DocSearch-Title"},o),Ce.createElement("p",{className:"DocSearch-Help"},c))}function Te(){return Ce.createElement("svg",{width:"40",height:"40",viewBox:"0 0 20 20",fill:"none",fillRule:"evenodd",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M15.5 4.8c2 3 1.7 7-1 9.7h0l4.3 4.3-4.3-4.3a7.8 7.8 0 01-9.8 1m-2.2-2.2A7.8 7.8 0 0113.2 2.4M2 18L18 2"}))}var Le=["translations"];function Me(e){return function(e){if(Array.isArray(e))return He(e)}(e)||function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]||null!=e["@@iterator"])return Array.from(e)}(e)||function(e,t){if(!e)return;if("string"==typeof e)return He(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return He(e,t)}(e)||function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function He(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function Fe(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ue(e){var t=e.translations,r=void 0===t?{}:t,n=Fe(e,Le),o=r.noResultsText,a=void 0===o?"No results for":o,c=r.suggestedQueryText,i=void 0===c?"Try searching for":c,l=r.reportMissingResultsText,s=void 0===l?"Believe this query should return results?":l,u=r.reportMissingResultsLinkText,f=void 0===u?"Let us know.":u,m=n.state.context.searchSuggestions;return Ce.createElement("div",{className:"DocSearch-NoResults"},Ce.createElement("div",{className:"DocSearch-Screen-Icon"},Ce.createElement(Te,null)),Ce.createElement("p",{className:"DocSearch-Title"},a,' "',Ce.createElement("strong",null,n.state.query),'"'),m&&m.length>0&&Ce.createElement("div",{className:"DocSearch-NoResults-Prefill-List"},Ce.createElement("p",{className:"DocSearch-Help"},i,":"),Ce.createElement("ul",null,m.slice(0,3).reduce((function(e,t){return[].concat(Me(e),[Ce.createElement("li",{key:t},Ce.createElement("button",{className:"DocSearch-Prefill",key:t,type:"button",onClick:function(){n.setQuery(t.toLowerCase()+" "),n.refresh(),n.inputRef.current.focus()}},t))])}),[]))),n.getMissingResultsUrl&&Ce.createElement("p",{className:"DocSearch-Help"},"".concat(s," "),Ce.createElement("a",{href:n.getMissingResultsUrl({query:n.state.query}),target:"_blank",rel:"noopener noreferrer"},f)))}var Be=function(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M17 6v12c0 .52-.2 1-1 1H4c-.7 0-1-.33-1-1V2c0-.55.42-1 1-1h8l5 5zM14 8h-3.13c-.51 0-.87-.34-.87-.87V4",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))};function Ve(e){switch(e.type){case"lvl1":return Ce.createElement(Be,null);case"content":return Ce.createElement(Je,null);default:return Ce.createElement(Ke,null)}}function Ke(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M13 13h4-4V8H7v5h6v4-4H7V8H3h4V3v5h6V3v5h4-4v5zm-6 0v4-4H3h4z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}function Je(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M17 5H3h14zm0 5H3h14zm0 5H3h14z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))}function $e(){return Ce.createElement("svg",{className:"DocSearch-Hit-Select-Icon",width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M18 3v4c0 2-2 4-4 4H2"}),Ce.createElement("path",{d:"M8 17l-6-6 6-6"})))}var ze=["hit","attribute","tagName"];function We(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Qe(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?We(Object(r),!0).forEach((function(t){Ze(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):We(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function Ze(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function Ye(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ge(e,t){return t.split(".").reduce((function(e,t){return null!=e&&e[t]?e[t]:null}),e)}function Xe(e){var t=e.hit,r=e.attribute,n=e.tagName,o=void 0===n?"span":n,a=Ye(e,ze);return(0,Ce.createElement)(o,Qe(Qe({},a),{},{dangerouslySetInnerHTML:{__html:Ge(t,"_snippetResult.".concat(r,".value"))||Ge(t,r)}}))}function et(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==r)return;var n,o,a=[],c=!0,i=!1;try{for(r=r.call(e);!(c=(n=r.next()).done)&&(a.push(n.value),!t||a.length!==t);c=!0);}catch(l){i=!0,o=l}finally{try{c||null==r.return||r.return()}finally{if(i)throw o}}return a}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return tt(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return tt(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function tt(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function rt(){return rt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},rt.apply(this,arguments)}function nt(e){return e.collection&&0!==e.collection.items.length?Ce.createElement("section",{className:"DocSearch-Hits"},Ce.createElement("div",{className:"DocSearch-Hit-source"},e.title),Ce.createElement("ul",e.getListProps(),e.collection.items.map((function(t,r){return Ce.createElement(ot,rt({key:[e.title,t.objectID].join(":"),item:t,index:r},e))})))):null}function ot(e){var t=e.item,r=e.index,n=e.renderIcon,o=e.renderAction,a=e.getItemProps,c=e.onItemClick,i=e.collection,l=e.hitComponent,s=et(Ce.useState(!1),2),u=s[0],f=s[1],m=et(Ce.useState(!1),2),p=m[0],d=m[1],h=Ce.useRef(null),v=l;return Ce.createElement("li",rt({className:["DocSearch-Hit",t.__docsearch_parent&&"DocSearch-Hit--Child",u&&"DocSearch-Hit--deleting",p&&"DocSearch-Hit--favoriting"].filter(Boolean).join(" "),onTransitionEnd:function(){h.current&&h.current()}},a({item:t,source:i.source,onClick:function(){c(t)}})),Ce.createElement(v,{hit:t},Ce.createElement("div",{className:"DocSearch-Hit-Container"},n({item:t,index:r}),t.hierarchy[t.type]&&"lvl1"===t.type&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"hierarchy.lvl1"}),t.content&&Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"content"})),t.hierarchy[t.type]&&("lvl2"===t.type||"lvl3"===t.type||"lvl4"===t.type||"lvl5"===t.type||"lvl6"===t.type)&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"hierarchy.".concat(t.type)}),Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"hierarchy.lvl1"})),"content"===t.type&&Ce.createElement("div",{className:"DocSearch-Hit-content-wrapper"},Ce.createElement(Xe,{className:"DocSearch-Hit-title",hit:t,attribute:"content"}),Ce.createElement(Xe,{className:"DocSearch-Hit-path",hit:t,attribute:"hierarchy.lvl1"})),o({item:t,runDeleteTransition:function(e){f(!0),h.current=e},runFavoriteTransition:function(e){d(!0),h.current=e}}))))}var at=/(<mark>|<\/mark>)/g,ct=RegExp(at.source);function it(e){var t,r,n,o,a,c=e;if(!c.__docsearch_parent&&!e._highlightResult)return e.hierarchy.lvl0;var i=((c.__docsearch_parent?null===(t=c.__docsearch_parent)||void 0===t||null===(r=t._highlightResult)||void 0===r||null===(n=r.hierarchy)||void 0===n?void 0:n.lvl0:null===(o=e._highlightResult)||void 0===o||null===(a=o.hierarchy)||void 0===a?void 0:a.lvl0)||{}).value;return i&&ct.test(i)?i.replace(at,""):i}function lt(){return lt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},lt.apply(this,arguments)}function st(e){return Ce.createElement("div",{className:"DocSearch-Dropdown-Container"},e.state.collections.map((function(t){if(0===t.items.length)return null;var r=it(t.items[0]);return Ce.createElement(nt,lt({},e,{key:t.source.sourceId,title:r,collection:t,renderIcon:function(e){var r,n=e.item,o=e.index;return Ce.createElement(Ce.Fragment,null,n.__docsearch_parent&&Ce.createElement("svg",{className:"DocSearch-Hit-Tree",viewBox:"0 0 24 54"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},n.__docsearch_parent!==(null===(r=t.items[o+1])||void 0===r?void 0:r.__docsearch_parent)?Ce.createElement("path",{d:"M8 6v21M20 27H8.3"}):Ce.createElement("path",{d:"M8 6v42M20 27H8.3"}))),Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(Ve,{type:n.type})))},renderAction:function(){return Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement($e,null))}}))})),e.resultsFooterComponent&&Ce.createElement("section",{className:"DocSearch-HitsFooter"},Ce.createElement(e.resultsFooterComponent,{state:e.state})))}function ut(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("g",{stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"},Ce.createElement("path",{d:"M3.18 6.6a8.23 8.23 0 1112.93 9.94h0a8.23 8.23 0 01-11.63 0"}),Ce.createElement("path",{d:"M6.44 7.25H2.55V3.36M10.45 6v5.6M10.45 11.6L13 13"})))}function ft(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M10 14.2L5 17l1-5.6-4-4 5.5-.7 2.5-5 2.5 5 5.6.8-4 4 .9 5.5z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinejoin:"round"}))}function mt(){return Ce.createElement("svg",{width:"20",height:"20",viewBox:"0 0 20 20"},Ce.createElement("path",{d:"M10 10l5.09-5.09L10 10l5.09 5.09L10 10zm0 0L4.91 4.91 10 10l-5.09 5.09L10 10z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}var pt=["translations"];function dt(){return dt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},dt.apply(this,arguments)}function ht(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function vt(e){var t=e.translations,r=void 0===t?{}:t,n=ht(e,pt),o=r.recentSearchesTitle,a=void 0===o?"Recent":o,c=r.noRecentSearchesText,i=void 0===c?"No recent searches":c,l=r.saveRecentSearchButtonTitle,s=void 0===l?"Save this search":l,u=r.removeRecentSearchButtonTitle,f=void 0===u?"Remove this search from history":u,m=r.favoriteSearchesTitle,p=void 0===m?"Favorite":m,d=r.removeFavoriteSearchButtonTitle,h=void 0===d?"Remove this search from favorites":d;return"idle"===n.state.status&&!1===n.hasCollections?n.disableUserPersonalization?null:Ce.createElement("div",{className:"DocSearch-StartScreen"},Ce.createElement("p",{className:"DocSearch-Help"},i)):!1===n.hasCollections?null:Ce.createElement("div",{className:"DocSearch-Dropdown-Container"},Ce.createElement(nt,dt({},n,{title:a,collection:n.state.collections[0],renderIcon:function(){return Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(ut,null))},renderAction:function(e){var t=e.item,r=e.runFavoriteTransition,o=e.runDeleteTransition;return Ce.createElement(Ce.Fragment,null,Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:s,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),r((function(){n.favoriteSearches.add(t),n.recentSearches.remove(t),n.refresh()}))}},Ce.createElement(ft,null))),Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:f,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),o((function(){n.recentSearches.remove(t),n.refresh()}))}},Ce.createElement(mt,null))))}})),Ce.createElement(nt,dt({},n,{title:p,collection:n.state.collections[1],renderIcon:function(){return Ce.createElement("div",{className:"DocSearch-Hit-icon"},Ce.createElement(ft,null))},renderAction:function(e){var t=e.item,r=e.runDeleteTransition;return Ce.createElement("div",{className:"DocSearch-Hit-action"},Ce.createElement("button",{className:"DocSearch-Hit-action-button",title:h,type:"submit",onClick:function(e){e.preventDefault(),e.stopPropagation(),r((function(){n.favoriteSearches.remove(t),n.refresh()}))}},Ce.createElement(mt,null)))}})))}var yt=["translations"];function gt(){return gt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},gt.apply(this,arguments)}function bt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}var Ot=Ce.memo((function(e){var t=e.translations,r=void 0===t?{}:t,n=bt(e,yt);if("error"===n.state.status)return Ce.createElement(qe,{translations:null==r?void 0:r.errorScreen});var o=n.state.collections.some((function(e){return e.items.length>0}));return n.state.query?!1===o?Ce.createElement(Ue,gt({},n,{translations:null==r?void 0:r.noResultsScreen})):Ce.createElement(st,n):Ce.createElement(vt,gt({},n,{hasCollections:o,translations:null==r?void 0:r.startScreen}))}),(function(e,t){return"loading"===t.state.status||"stalled"===t.state.status}));function St(){return Ce.createElement("svg",{viewBox:"0 0 38 38",stroke:"currentColor",strokeOpacity:".5"},Ce.createElement("g",{fill:"none",fillRule:"evenodd"},Ce.createElement("g",{transform:"translate(1 1)",strokeWidth:"2"},Ce.createElement("circle",{strokeOpacity:".3",cx:"18",cy:"18",r:"18"}),Ce.createElement("path",{d:"M36 18c0-9.94-8.06-18-18-18"},Ce.createElement("animateTransform",{attributeName:"transform",type:"rotate",from:"0 18 18",to:"360 18 18",dur:"1s",repeatCount:"indefinite"})))))}var Et=r(830),jt=["translations"];function wt(){return wt=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},wt.apply(this,arguments)}function Pt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function It(e){var t=e.translations,r=void 0===t?{}:t,n=Pt(e,jt),o=r.resetButtonTitle,a=void 0===o?"Clear the query":o,c=r.resetButtonAriaLabel,i=void 0===c?"Clear the query":c,l=r.cancelButtonText,s=void 0===l?"Cancel":l,u=r.cancelButtonAriaLabel,f=void 0===u?"Cancel":u,m=n.getFormProps({inputElement:n.inputRef.current}).onReset;return Ce.useEffect((function(){n.autoFocus&&n.inputRef.current&&n.inputRef.current.focus()}),[n.autoFocus,n.inputRef]),Ce.useEffect((function(){n.isFromSelection&&n.inputRef.current&&n.inputRef.current.select()}),[n.isFromSelection,n.inputRef]),Ce.createElement(Ce.Fragment,null,Ce.createElement("form",{className:"DocSearch-Form",onSubmit:function(e){e.preventDefault()},onReset:m},Ce.createElement("label",wt({className:"DocSearch-MagnifierLabel"},n.getLabelProps()),Ce.createElement(Et.W,null)),Ce.createElement("div",{className:"DocSearch-LoadingIndicator"},Ce.createElement(St,null)),Ce.createElement("input",wt({className:"DocSearch-Input",ref:n.inputRef},n.getInputProps({inputElement:n.inputRef.current,autoFocus:n.autoFocus,maxLength:64}))),Ce.createElement("button",{type:"reset",title:a,className:"DocSearch-Reset","aria-label":i,hidden:!n.state.query},Ce.createElement(mt,null))),Ce.createElement("button",{className:"DocSearch-Cancel",type:"reset","aria-label":f,onClick:n.onClose},s))}var Dt=["_highlightResult","_snippetResult"];function kt(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Ct(e){return!1===function(){var e="__TEST_KEY__";try{return localStorage.setItem(e,""),localStorage.removeItem(e),!0}catch(t){return!1}}()?{setItem:function(){},getItem:function(){return[]}}:{setItem:function(t){return window.localStorage.setItem(e,JSON.stringify(t))},getItem:function(){var t=window.localStorage.getItem(e);return t?JSON.parse(t):[]}}}function At(e){var t=e.key,r=e.limit,n=void 0===r?5:r,o=Ct(t),a=o.getItem().slice(0,n);return{add:function(e){var t=e,r=(t._highlightResult,t._snippetResult,kt(t,Dt)),c=a.findIndex((function(e){return e.objectID===r.objectID}));c>-1&&a.splice(c,1),a.unshift(r),a=a.slice(0,n),o.setItem(a)},remove:function(e){a=a.filter((function(t){return t.objectID!==e.objectID})),o.setItem(a)},getAll:function(){return a}}}function xt(e){const t=`algoliasearch-client-js-${e.key}`;let r;const n=()=>(void 0===r&&(r=e.localStorage||window.localStorage),r),o=()=>JSON.parse(n().getItem(t)||"{}");return{get:(e,t,r={miss:()=>Promise.resolve()})=>Promise.resolve().then((()=>{const r=JSON.stringify(e),n=o()[r];return Promise.all([n||t(),void 0!==n])})).then((([e,t])=>Promise.all([e,t||r.miss(e)]))).then((([e])=>e)),set:(e,r)=>Promise.resolve().then((()=>{const a=o();return a[JSON.stringify(e)]=r,n().setItem(t,JSON.stringify(a)),r})),delete:e=>Promise.resolve().then((()=>{const r=o();delete r[JSON.stringify(e)],n().setItem(t,JSON.stringify(r))})),clear:()=>Promise.resolve().then((()=>{n().removeItem(t)}))}}function Nt(e){const t=[...e.caches],r=t.shift();return void 0===r?{get:(e,t,r={miss:()=>Promise.resolve()})=>t().then((e=>Promise.all([e,r.miss(e)]))).then((([e])=>e)),set:(e,t)=>Promise.resolve(t),delete:e=>Promise.resolve(),clear:()=>Promise.resolve()}:{get:(e,n,o={miss:()=>Promise.resolve()})=>r.get(e,n,o).catch((()=>Nt({caches:t}).get(e,n,o))),set:(e,n)=>r.set(e,n).catch((()=>Nt({caches:t}).set(e,n))),delete:e=>r.delete(e).catch((()=>Nt({caches:t}).delete(e))),clear:()=>r.clear().catch((()=>Nt({caches:t}).clear()))}}function _t(e={serializable:!0}){let t={};return{get(r,n,o={miss:()=>Promise.resolve()}){const a=JSON.stringify(r);if(a in t)return Promise.resolve(e.serializable?JSON.parse(t[a]):t[a]);const c=n(),i=o&&o.miss||(()=>Promise.resolve());return c.then((e=>i(e))).then((()=>c))},set:(r,n)=>(t[JSON.stringify(r)]=e.serializable?JSON.stringify(n):n,Promise.resolve(n)),delete:e=>(delete t[JSON.stringify(e)],Promise.resolve()),clear:()=>(t={},Promise.resolve())}}function Rt(e){let t=e.length-1;for(;t>0;t--){const r=Math.floor(Math.random()*(t+1)),n=e[t];e[t]=e[r],e[r]=n}return e}function qt(e,t){return t?(Object.keys(t).forEach((r=>{e[r]=t[r](e)})),e):e}function Tt(e,...t){let r=0;return e.replace(/%s/g,(()=>encodeURIComponent(t[r++])))}const Lt="4.15.0",Mt={WithinQueryParameters:0,WithinHeaders:1};function Ht(e,t){const r=e||{},n=r.data||{};return Object.keys(r).forEach((e=>{-1===["timeout","headers","queryParameters","data","cacheable"].indexOf(e)&&(n[e]=r[e])})),{data:Object.entries(n).length>0?n:void 0,timeout:r.timeout||t,headers:r.headers||{},queryParameters:r.queryParameters||{},cacheable:r.cacheable}}const Ft={Read:1,Write:2,Any:3},Ut=1,Bt=2,Vt=3,Kt=12e4;function Jt(e,t=Ut){return{...e,status:t,lastUpdate:Date.now()}}function $t(e){return"string"==typeof e?{protocol:"https",url:e,accept:Ft.Any}:{protocol:e.protocol||"https",url:e.url,accept:e.accept||Ft.Any}}const zt="GET",Wt="POST";function Qt(e,t){return Promise.all(t.map((t=>e.get(t,(()=>Promise.resolve(Jt(t))))))).then((e=>{const r=e.filter((e=>function(e){return e.status===Ut||Date.now()-e.lastUpdate>Kt}(e))),n=e.filter((e=>function(e){return e.status===Vt&&Date.now()-e.lastUpdate<=Kt}(e))),o=[...r,...n];return{getTimeout:(e,t)=>(0===n.length&&0===e?1:n.length+3+e)*t,statelessHosts:o.length>0?o.map((e=>$t(e))):t}}))}function Zt(e,t,r,n){const o=[],a=function(e,t){if(e.method===zt||void 0===e.data&&void 0===t.data)return;const r=Array.isArray(e.data)?e.data:{...e.data,...t.data};return JSON.stringify(r)}(r,n),c=function(e,t){const r={...e.headers,...t.headers},n={};return Object.keys(r).forEach((e=>{const t=r[e];n[e.toLowerCase()]=t})),n}(e,n),i=r.method,l=r.method!==zt?{}:{...r.data,...n.data},s={"x-algolia-agent":e.userAgent.value,...e.queryParameters,...l,...n.queryParameters};let u=0;const f=(t,l)=>{const m=t.pop();if(void 0===m)throw{name:"RetryError",message:"Unreachable hosts - your application id may be incorrect. If the error persists, contact support@algolia.com.",transporterStackTrace:er(o)};const p={data:a,headers:c,method:i,url:Gt(m,r.path,s),connectTimeout:l(u,e.timeouts.connect),responseTimeout:l(u,n.timeout)},d=e=>{const r={request:p,response:e,host:m,triesLeft:t.length};return o.push(r),r},h={onSuccess:e=>function(e){try{return JSON.parse(e.content)}catch(t){throw function(e,t){return{name:"DeserializationError",message:e,response:t}}(t.message,e)}}(e),onRetry(r){const n=d(r);return r.isTimedOut&&u++,Promise.all([e.logger.info("Retryable failure",tr(n)),e.hostsCache.set(m,Jt(m,r.isTimedOut?Vt:Bt))]).then((()=>f(t,l)))},onFail(e){throw d(e),function({content:e,status:t},r){let n=e;try{n=JSON.parse(e).message}catch(o){}return function(e,t,r){return{name:"ApiError",message:e,status:t,transporterStackTrace:r}}(n,t,r)}(e,er(o))}};return e.requester.send(p).then((e=>((e,t)=>(e=>{const t=e.status;return e.isTimedOut||(({isTimedOut:e,status:t})=>!e&&0==~~t)(e)||2!=~~(t/100)&&4!=~~(t/100)})(e)?t.onRetry(e):(({status:e})=>2==~~(e/100))(e)?t.onSuccess(e):t.onFail(e))(e,h)))};return Qt(e.hostsCache,t).then((e=>f([...e.statelessHosts].reverse(),e.getTimeout)))}function Yt(e){const t={value:`Algolia for JavaScript (${e})`,add(e){const r=`; ${e.segment}${void 0!==e.version?` (${e.version})`:""}`;return-1===t.value.indexOf(r)&&(t.value=`${t.value}${r}`),t}};return t}function Gt(e,t,r){const n=Xt(r);let o=`${e.protocol}://${e.url}/${"/"===t.charAt(0)?t.substr(1):t}`;return n.length&&(o+=`?${n}`),o}function Xt(e){return Object.keys(e).map((t=>{return Tt("%s=%s",t,(r=e[t],"[object Object]"===Object.prototype.toString.call(r)||"[object Array]"===Object.prototype.toString.call(r)?JSON.stringify(e[t]):e[t]));var r})).join("&")}function er(e){return e.map((e=>tr(e)))}function tr(e){const t=e.request.headers["x-algolia-api-key"]?{"x-algolia-api-key":"*****"}:{};return{...e,request:{...e.request,headers:{...e.request.headers,...t}}}}const rr=e=>{const t=e.appId,r=function(e,t,r){const n={"x-algolia-api-key":r,"x-algolia-application-id":t};return{headers:()=>e===Mt.WithinHeaders?n:{},queryParameters:()=>e===Mt.WithinQueryParameters?n:{}}}(void 0!==e.authMode?e.authMode:Mt.WithinHeaders,t,e.apiKey),n=function(e){const{hostsCache:t,logger:r,requester:n,requestsCache:o,responsesCache:a,timeouts:c,userAgent:i,hosts:l,queryParameters:s,headers:u}=e,f={hostsCache:t,logger:r,requester:n,requestsCache:o,responsesCache:a,timeouts:c,userAgent:i,headers:u,queryParameters:s,hosts:l.map((e=>$t(e))),read(e,t){const r=Ht(t,f.timeouts.read),n=()=>Zt(f,f.hosts.filter((e=>0!=(e.accept&Ft.Read))),e,r);if(!0!==(void 0!==r.cacheable?r.cacheable:e.cacheable))return n();const o={request:e,mappedRequestOptions:r,transporter:{queryParameters:f.queryParameters,headers:f.headers}};return f.responsesCache.get(o,(()=>f.requestsCache.get(o,(()=>f.requestsCache.set(o,n()).then((e=>Promise.all([f.requestsCache.delete(o),e])),(e=>Promise.all([f.requestsCache.delete(o),Promise.reject(e)]))).then((([e,t])=>t))))),{miss:e=>f.responsesCache.set(o,e)})},write:(e,t)=>Zt(f,f.hosts.filter((e=>0!=(e.accept&Ft.Write))),e,Ht(t,f.timeouts.write))};return f}({hosts:[{url:`${t}-dsn.algolia.net`,accept:Ft.Read},{url:`${t}.algolia.net`,accept:Ft.Write}].concat(Rt([{url:`${t}-1.algolianet.com`},{url:`${t}-2.algolianet.com`},{url:`${t}-3.algolianet.com`}])),...e,headers:{...r.headers(),"content-type":"application/x-www-form-urlencoded",...e.headers},queryParameters:{...r.queryParameters(),...e.queryParameters}}),o={transporter:n,appId:t,addAlgoliaAgent(e,t){n.userAgent.add({segment:e,version:t})},clearCache:()=>Promise.all([n.requestsCache.clear(),n.responsesCache.clear()]).then((()=>{}))};return qt(o,e.methods)},nr=e=>(t,r)=>t.method===zt?e.transporter.read(t,r):e.transporter.write(t,r),or=e=>(t,r={})=>qt({transporter:e.transporter,appId:e.appId,indexName:t},r.methods),ar=e=>(t,r)=>{const n=t.map((e=>({...e,params:Xt(e.params||{})})));return e.transporter.read({method:Wt,path:"1/indexes/*/queries",data:{requests:n},cacheable:!0},r)},cr=e=>(t,r)=>Promise.all(t.map((t=>{const{facetName:n,facetQuery:o,...a}=t.params;return or(e)(t.indexName,{methods:{searchForFacetValues:sr}}).searchForFacetValues(n,o,{...r,...a})}))),ir=e=>(t,r,n)=>e.transporter.read({method:Wt,path:Tt("1/answers/%s/prediction",e.indexName),data:{query:t,queryLanguages:r},cacheable:!0},n),lr=e=>(t,r)=>e.transporter.read({method:Wt,path:Tt("1/indexes/%s/query",e.indexName),data:{query:t},cacheable:!0},r),sr=e=>(t,r,n)=>e.transporter.read({method:Wt,path:Tt("1/indexes/%s/facets/%s/query",e.indexName,t),data:{facetQuery:r},cacheable:!0},n),ur=1,fr=2,mr=3;function pr(e,t,r){const n={appId:e,apiKey:t,timeouts:{connect:1,read:2,write:30},requester:{send:e=>new Promise((t=>{const r=new XMLHttpRequest;r.open(e.method,e.url,!0),Object.keys(e.headers).forEach((t=>r.setRequestHeader(t,e.headers[t])));const n=(e,n)=>setTimeout((()=>{r.abort(),t({status:0,content:n,isTimedOut:!0})}),1e3*e),o=n(e.connectTimeout,"Connection timeout");let a;r.onreadystatechange=()=>{r.readyState>r.OPENED&&void 0===a&&(clearTimeout(o),a=n(e.responseTimeout,"Socket timeout"))},r.onerror=()=>{0===r.status&&(clearTimeout(o),clearTimeout(a),t({content:r.responseText||"Network request failed",status:r.status,isTimedOut:!1}))},r.onload=()=>{clearTimeout(o),clearTimeout(a),t({content:r.responseText,status:r.status,isTimedOut:!1})},r.send(e.data)}))},logger:(o=mr,{debug:(e,t)=>(ur>=o&&console.debug(e,t),Promise.resolve()),info:(e,t)=>(fr>=o&&console.info(e,t),Promise.resolve()),error:(e,t)=>(console.error(e,t),Promise.resolve())}),responsesCache:_t(),requestsCache:_t({serializable:!1}),hostsCache:Nt({caches:[xt({key:`4.15.0-${e}`}),_t()]}),userAgent:Yt(Lt).add({segment:"Browser",version:"lite"}),authMode:Mt.WithinQueryParameters};var o;return rr({...n,...r,methods:{search:ar,searchForFacetValues:cr,multipleQueries:ar,multipleSearchForFacetValues:cr,customRequest:nr,initIndex:e=>t=>or(e)(t,{methods:{search:lr,searchForFacetValues:sr,findAnswers:ir}})}})}pr.version=Lt;const dr=pr;var hr="3.3.3";function vr(){}function yr(e){return e}function gr(e,t){return e.reduce((function(e,r){var n=t(r);return e.hasOwnProperty(n)||(e[n]=[]),e[n].length<5&&e[n].push(r),e}),{})}var br=["footer","searchBox"];function Or(){return Or=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},Or.apply(this,arguments)}function Sr(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function Er(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?Sr(Object(r),!0).forEach((function(t){jr(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):Sr(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function jr(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function wr(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==r)return;var n,o,a=[],c=!0,i=!1;try{for(r=r.call(e);!(c=(n=r.next()).done)&&(a.push(n.value),!t||a.length!==t);c=!0);}catch(l){i=!0,o=l}finally{try{c||null==r.return||r.return()}finally{if(i)throw o}}return a}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return Pr(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);"Object"===r&&e.constructor&&(r=e.constructor.name);if("Map"===r||"Set"===r)return Array.from(e);if("Arguments"===r||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return Pr(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function Pr(e,t){(null==t||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function Ir(e,t){if(null==e)return{};var r,n,o=function(e,t){if(null==e)return{};var r,n,o={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(o[r]=e[r]);return o}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Dr(e){var t=e.appId,r=e.apiKey,n=e.indexName,o=e.placeholder,a=void 0===o?"Search docs":o,c=e.searchParameters,i=e.onClose,l=void 0===i?vr:i,s=e.transformItems,u=void 0===s?yr:s,f=e.hitComponent,m=void 0===f?_e:f,p=e.resultsFooterComponent,d=void 0===p?function(){return null}:p,h=e.navigator,v=e.initialScrollY,y=void 0===v?0:v,g=e.transformSearchClient,b=void 0===g?yr:g,O=e.disableUserPersonalization,S=void 0!==O&&O,E=e.initialQuery,j=void 0===E?"":E,w=e.translations,P=void 0===w?{}:w,I=e.getMissingResultsUrl,D=P.footer,k=P.searchBox,C=Ir(P,br),A=wr(Ce.useState({query:"",collections:[],completion:null,context:{},isOpen:!1,activeItemId:null,status:"idle"}),2),x=A[0],N=A[1],_=Ce.useRef(null),R=Ce.useRef(null),q=Ce.useRef(null),T=Ce.useRef(null),L=Ce.useRef(null),M=Ce.useRef(10),H=Ce.useRef("undefined"!=typeof window?window.getSelection().toString().slice(0,64):"").current,F=Ce.useRef(j||H).current,U=function(e,t,r){return Ce.useMemo((function(){var n=dr(e,t);return n.addAlgoliaAgent("docsearch",hr),!1===/docsearch.js \(.*\)/.test(n.transporter.userAgent.value)&&n.addAlgoliaAgent("docsearch-react",hr),r(n)}),[e,t,r])}(t,r,b),B=Ce.useRef(At({key:"__DOCSEARCH_FAVORITE_SEARCHES__".concat(n),limit:10})).current,V=Ce.useRef(At({key:"__DOCSEARCH_RECENT_SEARCHES__".concat(n),limit:0===B.getAll().length?7:4})).current,K=Ce.useCallback((function(e){if(!S){var t="content"===e.type?e.__docsearch_parent:e;t&&-1===B.getAll().findIndex((function(e){return e.objectID===t.objectID}))&&V.add(t)}}),[B,V,S]),J=Ce.useMemo((function(){return ke({id:"docsearch",defaultActiveItemId:0,placeholder:a,openOnFocus:!0,initialState:{query:F,context:{searchSuggestions:[]}},navigator:h,onStateChange:function(e){N(e.state)},getSources:function(e){var t=e.query,r=e.state,o=e.setContext,a=e.setStatus;return t?U.search([{query:t,indexName:n,params:Er({attributesToRetrieve:["hierarchy.lvl0","hierarchy.lvl1","hierarchy.lvl2","hierarchy.lvl3","hierarchy.lvl4","hierarchy.lvl5","hierarchy.lvl6","content","type","url"],attributesToSnippet:["hierarchy.lvl1:".concat(M.current),"hierarchy.lvl2:".concat(M.current),"hierarchy.lvl3:".concat(M.current),"hierarchy.lvl4:".concat(M.current),"hierarchy.lvl5:".concat(M.current),"hierarchy.lvl6:".concat(M.current),"content:".concat(M.current)],snippetEllipsisText:"\u2026",highlightPreTag:"<mark>",highlightPostTag:"</mark>",hitsPerPage:20},c)}]).catch((function(e){throw"RetryError"===e.name&&a("error"),e})).then((function(e){var t=e.results[0],n=t.hits,a=t.nbHits,c=gr(n,(function(e){return it(e)}));return r.context.searchSuggestions.length<Object.keys(c).length&&o({searchSuggestions:Object.keys(c)}),o({nbHits:a}),Object.values(c).map((function(e,t){return{sourceId:"hits".concat(t),onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return Object.values(gr(e,(function(e){return e.hierarchy.lvl1}))).map(u).map((function(e){return e.map((function(t){return Er(Er({},t),{},{__docsearch_parent:"lvl1"!==t.type&&e.find((function(e){return"lvl1"===e.type&&e.hierarchy.lvl1===t.hierarchy.lvl1}))})}))})).flat()}}}))})):S?[]:[{sourceId:"recentSearches",onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return V.getAll()}},{sourceId:"favoriteSearches",onSelect:function(e){var t=e.item,r=e.event;K(t),r.shiftKey||r.ctrlKey||r.metaKey||l()},getItemUrl:function(e){return e.item.url},getItems:function(){return B.getAll()}}]}})}),[n,c,U,l,V,B,K,F,a,h,u,S]),$=J.getEnvironmentProps,z=J.getRootProps,W=J.refresh;return function(e){var t=e.getEnvironmentProps,r=e.panelElement,n=e.formElement,o=e.inputElement;Ce.useEffect((function(){if(r&&n&&o){var e=t({panelElement:r,formElement:n,inputElement:o}),a=e.onTouchStart,c=e.onTouchMove;return window.addEventListener("touchstart",a),window.addEventListener("touchmove",c),function(){window.removeEventListener("touchstart",a),window.removeEventListener("touchmove",c)}}}),[t,r,n,o])}({getEnvironmentProps:$,panelElement:T.current,formElement:q.current,inputElement:L.current}),function(e){var t=e.container;Ce.useEffect((function(){if(t){var e=t.querySelectorAll("a[href]:not([disabled]), button:not([disabled]), input:not([disabled])"),r=e[0],n=e[e.length-1];return t.addEventListener("keydown",o),function(){t.removeEventListener("keydown",o)}}function o(e){"Tab"===e.key&&(e.shiftKey?document.activeElement===r&&(e.preventDefault(),n.focus()):document.activeElement===n&&(e.preventDefault(),r.focus()))}}),[t])}({container:_.current}),Ce.useEffect((function(){return document.body.classList.add("DocSearch--active"),function(){var e,t;document.body.classList.remove("DocSearch--active"),null===(e=(t=window).scrollTo)||void 0===e||e.call(t,0,y)}}),[]),Ce.useEffect((function(){window.matchMedia("(max-width: 768px)").matches&&(M.current=5)}),[]),Ce.useEffect((function(){T.current&&(T.current.scrollTop=0)}),[x.query]),Ce.useEffect((function(){F.length>0&&(W(),L.current&&L.current.focus())}),[F,W]),Ce.useEffect((function(){function e(){if(R.current){var e=.01*window.innerHeight;R.current.style.setProperty("--docsearch-vh","".concat(e,"px"))}}return e(),window.addEventListener("resize",e),function(){window.removeEventListener("resize",e)}}),[]),Ce.createElement("div",Or({ref:_},z({"aria-expanded":!0}),{className:["DocSearch","DocSearch-Container","stalled"===x.status&&"DocSearch-Container--Stalled","error"===x.status&&"DocSearch-Container--Errored"].filter(Boolean).join(" "),role:"button",tabIndex:0,onMouseDown:function(e){e.target===e.currentTarget&&l()}}),Ce.createElement("div",{className:"DocSearch-Modal",ref:R},Ce.createElement("header",{className:"DocSearch-SearchBar",ref:q},Ce.createElement(It,Or({},J,{state:x,autoFocus:0===F.length,inputRef:L,isFromSelection:Boolean(F)&&F===H,translations:k,onClose:l}))),Ce.createElement("div",{className:"DocSearch-Dropdown",ref:T},Ce.createElement(Ot,Or({},J,{indexName:n,state:x,hitComponent:m,resultsFooterComponent:d,disableUserPersonalization:S,recentSearches:V,favoriteSearches:B,inputRef:L,translations:C,getMissingResultsUrl:I,onItemClick:function(e){K(e),l()}}))),Ce.createElement("footer",{className:"DocSearch-Footer"},Ce.createElement(Ne,{translations:D}))))}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/6945.a46579e2.js b/zh/assets/js/6945.a46579e2.js
deleted file mode 100644
index f4f3153e0..000000000
--- a/zh/assets/js/6945.a46579e2.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6945],{6945:(s,k,_)=>{_.r(k)}}]);
\ No newline at end of file
diff --git a/zh/assets/js/6b4d906e.ed6869b3.js b/zh/assets/js/6b4d906e.ccdea4df.js
similarity index 99%
rename from zh/assets/js/6b4d906e.ed6869b3.js
rename to zh/assets/js/6b4d906e.ccdea4df.js
index 4c786f5a4..53bdca353 100644
--- a/zh/assets/js/6b4d906e.ed6869b3.js
+++ b/zh/assets/js/6b4d906e.ccdea4df.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6535],{3905:(e,t,n)=>{n.d(t,{Zo:()=>s,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function m(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var p=a.createContext({}),o=function(e){var t=a.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):m(m({},t),e)),n},s=function(e){var t=o(e.components);return a.createElement(p.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,p=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),k=o(n),c=r,u=k["".concat(p,".").concat(c)]||k[c]||d[c]||l;return n?a.createElement(u,m(m({ref:t},s),{},{components:n})):a.createElement(u,m({ref:t},s))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,m=new Array(l);m[0]=k;var i={};for(var p in t)hasOwnProperty.call(t,p)&&(i[p]=t[p]);i.originalType=e,i.mdxType="string"==typeof e?e:r,m[1]=i;for(var o=2;o<l;o++)m[o]=n[o];return a.createElement.apply(null,m)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},3446:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>m,default:()=>d,frontMatter:()=>l,metadata:()=>i,toc:()=>o});var a=n(3117),r=(n(7294),n(3905));const l={title:"Helm",weight:42},m=void 0,i={unversionedId:"helm/helm",id:"helm/helm",title:"Helm",description:"Helm \u662f Kubernetes \u7684\u5305\u7ba1\u7406\u5de5\u5177\u3002Helm Chart \u4e3a Kubernetes YAML \u6e05\u5355\u6587\u4ef6\u63d0\u4f9b\u4e86\u6a21\u677f\u8bed\u6cd5\u3002\u501f\u52a9 Helm\uff0c\u5f00\u53d1\u4eba\u5458\u6216\u96c6\u7fa4\u7ba1\u7406\u5458\u53ef\u4ee5\u521b\u5efa\u79f0\u4e3a Chart \u7684\u53ef\u914d\u7f6e\u6a21\u677f\uff0c\u800c\u4e0d\u4ec5\u4ec5\u662f\u4f7f\u7528\u9759\u6001\u6e05\u5355\u3002\u5982\u679c\u4f60\u9700\u8981\u521b\u5efa\u81ea\u5df1\u7684 Chart catalog\uff0c\u8bf7\u53c2\u9605 https://helm.sh/docs/intro/quickstart/\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/helm/helm.md",sourceDirName:"helm",slug:"/helm/",permalink:"/zh/helm/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"Helm",weight:42},sidebar:"mySidebar",previous:{title:"\u7f51\u7edc",permalink:"/zh/networking/"},next:{title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",permalink:"/zh/advanced/"}},p={},o=[{value:"\u4f7f\u7528 Helm Controller",id:"\u4f7f\u7528-helm-controller",level:3},{value:"HelmChart \u5b57\u6bb5\u5b9a\u4e49",id:"helmchart-\u5b57\u6bb5\u5b9a\u4e49",level:4},{value:"\u4f7f\u7528 HelmChartConfig \u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6",id:"\u4f7f\u7528-helmchartconfig-\u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6",level:3},{value:"\u4ece Helm v2 \u8fc1\u79fb",id:"\u4ece-helm-v2-\u8fc1\u79fb",level:3}],s={toc:o};function d(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},s,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Helm \u662f Kubernetes \u7684\u5305\u7ba1\u7406\u5de5\u5177\u3002Helm Chart \u4e3a Kubernetes YAML \u6e05\u5355\u6587\u4ef6\u63d0\u4f9b\u4e86\u6a21\u677f\u8bed\u6cd5\u3002\u501f\u52a9 Helm\uff0c\u5f00\u53d1\u4eba\u5458\u6216\u96c6\u7fa4\u7ba1\u7406\u5458\u53ef\u4ee5\u521b\u5efa\u79f0\u4e3a Chart \u7684\u53ef\u914d\u7f6e\u6a21\u677f\uff0c\u800c\u4e0d\u4ec5\u4ec5\u662f\u4f7f\u7528\u9759\u6001\u6e05\u5355\u3002\u5982\u679c\u4f60\u9700\u8981\u521b\u5efa\u81ea\u5df1\u7684 Chart catalog\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/intro/quickstart/"},"https://helm.sh/docs/intro/quickstart/"),"\u3002"),(0,r.kt)("p",null,"K3s \u4e0d\u9700\u8981\u4f7f\u7528\u4efb\u4f55\u7279\u6b8a\u914d\u7f6e\u6765\u652f\u6301 Helm\u3002\u8bf7\u786e\u4fdd\u4f60\u5df2\u6839\u636e",(0,r.kt)("a",{parentName:"p",href:"/zh/cluster-access/"},"\u96c6\u7fa4\u8bbf\u95ee"),"\u6587\u6863\u6b63\u786e\u8bbe\u7f6e\u4e86 kubeconfig \u8def\u5f84\u3002"),(0,r.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller/"},"Helm Controller"),"\uff0c\u5b83\u4f7f\u7528 HelmChart \u81ea\u5b9a\u4e49\u8d44\u6e90\u5b9a\u4e49 (CRD) \u6765\u7ba1\u7406 Helm Chart \u7684\u5b89\u88c5\u3001\u5347\u7ea7\u3001\u91cd\u65b0\u914d\u7f6e\u548c\u5378\u8f7d\u3002\u4e0e",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/packaged-components"},"\u81ea\u52a8\u90e8\u7f72 AddOn \u6e05\u5355"),"\u914d\u5408\u4f7f\u7528\u540e\uff0c\u5b83\u53ef\u4ee5\u5728\u78c1\u76d8\u4e0a\u521b\u5efa\u5355\u4e2a\u6587\u4ef6\uff0c\u81ea\u52a8\u5728\u96c6\u7fa4\u4e0a\u5b89\u88c5 Helm Chart\u3002"),(0,r.kt)("h3",{id:"\u4f7f\u7528-helm-controller"},"\u4f7f\u7528 Helm Controller"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller#helm-controller"},"HelmChart Custom Resource")," \u6355\u83b7\u4e86\u4f60\u901a\u5e38\u4f20\u9012\u7ed9 ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \u547d\u4ee4\u884c\u5de5\u5177\u7684\u5927\u90e8\u5206\u9009\u9879\u3002\u4ee5\u4e0b\u793a\u4f8b\u8bf4\u660e\u4e86\u5982\u4f55\u4ece Bitnami Chart \u4ed3\u5e93\u90e8\u7f72 Apache\uff0c\u5e76\u8986\u76d6\u67d0\u4e9b\u9ed8\u8ba4\u7684 Chart \u503c\u3002\u8bf7\u6ce8\u610f\uff0cHelmChart \u8d44\u6e90\u672c\u8eab\u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\uff0c\u4f46 Chart \u7684\u8d44\u6e90\u5c06\u90e8\u7f72\u5230\u5728\u540c\u4e00\u6e05\u5355\u4e2d\u521b\u5efa\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"web")," \u547d\u540d\u7a7a\u95f4\u3002\u5982\u679c\u4f60\u5e0c\u671b\u5c06 HelmChart \u8d44\u6e90\u4e0e\u5176\u90e8\u7f72\u7684\u8d44\u6e90\u5206\u5f00\uff0c\u8fd9\u5c06\u5f88\u6709\u7528\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: web\n---\napiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: apache\n  namespace: kube-system\nspec:\n  repo: https://charts.bitnami.com/bitnami\n  chart: apache\n  targetNamespace: web\n  valuesContent: |-\n    service:\n      type: ClusterIP\n    ingress:\n      enabled: true\n      hostname: www.example.com\n    metrics:\n      enabled: true\n")),(0,r.kt)("h4",{id:"helmchart-\u5b57\u6bb5\u5b9a\u4e49"},"HelmChart \u5b57\u6bb5\u5b9a\u4e49"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u5b57\u6bb5"),(0,r.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"),(0,r.kt)("th",{parentName:"tr",align:null},"Helm \u53c2\u6570/\u6807\u5fd7\u7b49\u6548\u9879"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"metadata.name"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u540d\u79f0"),(0,r.kt)("td",{parentName:"tr",align:null},"NAME")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u4ed3\u5e93\u4e2d\u7684 Helm Chart \u540d\u79f0\uff0c\u6216 chart archive (.tgz) \u7684\u5b8c\u6574 HTTPS URL"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.targetNamespace"),(0,r.kt)("td",{parentName:"tr",align:null},"default"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u76ee\u6807\u547d\u540d\u7a7a\u95f4"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--namespace"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.version"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u7248\u672c\uff08\u901a\u8fc7\u4ed3\u5e93\u5b89\u88c5\u65f6\uff09"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--version"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repo"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u4ed3\u5e93 URL"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--repo"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repoCA"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a\u542f\u7528 HTTPS \u7684 Server \u7684\u8bc1\u4e66"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ca-file"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.helmVersion"),(0,r.kt)("td",{parentName:"tr",align:null},"v3"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u4f7f\u7528\u7684 Helm \u7248\u672c\uff08",(0,r.kt)("inlineCode",{parentName:"td"},"v2")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"td"},"v3"),"\uff09"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},"False"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u9700\u8981\u6b64 Chart \u6765\u5f15\u5bfc\u96c6\u7fa4\uff08Cloud Controller Manager \u7b49\uff09\uff0c\u8bf7\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"True")),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.set"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u7b80\u5355\u7684\u9ed8\u8ba4 Chart \u503c\u3002\u4f18\u5148\u4e8e\u901a\u8fc7 valuesContent \u8bbe\u7f6e\u7684\u9009\u9879\u3002"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--set")," / ",(0,r.kt)("inlineCode",{parentName:"td"},"--set-string"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.jobImage"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a\u5b89\u88c5 helm chart \u65f6\u8981\u4f7f\u7528\u7684\u955c\u50cf\u3002\u4f8b\u5982\uff1arancher/klipper-helm:v0.3.0"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.timeout"),(0,r.kt)("td",{parentName:"tr",align:null},"300"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm \u64cd\u4f5c\u7684\u8d85\u65f6\u79d2\u6570"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--timeout"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.failurePolicy"),(0,r.kt)("td",{parentName:"tr",align:null},"reinstall"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"abort"),"\uff0cHelm \u64cd\u4f5c\u4f1a\u88ab\u4e2d\u6b62\uff0c\u7b49\u5f85\u64cd\u4f5c\u4eba\u5458\u7684\u624b\u52a8\u5e72\u9884\u3002"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.valuesContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 YAML \u6587\u4ef6\u5185\u5bb9\u8986\u76d6\u590d\u6742\u7684\u9ed8\u8ba4 Chart \u503c"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--values"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chartContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Base64 \u7f16\u7801\u7684 chart archive .tgz\uff0c\u8986\u76d6 spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")))),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u96c6\u7fa4\u5185\u7684 Kubernetes APIServer \u533f\u540d\u8bbf\u95ee ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/static/")," \u4e2d\u7684\u5185\u5bb9\u3002\u6b64 URL \u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.chart")," \u5b57\u6bb5\u4e2d\u7684\u7279\u6b8a\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"p"},"%{KUBERNETES_API}%")," \u8fdb\u884c\u6a21\u677f\u5316\u3002\u4f8b\u5982\uff0c\u6253\u5305\u7684 Traefik \u7ec4\u4ef6\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz")," \u52a0\u8f7d Chart\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"name")," \u5b57\u6bb5\u9700\u8981\u9075\u5faa Helm Chart \u547d\u540d\u7ea6\u5b9a\u3002\u5982\u9700\u4e86\u89e3\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/chart_best_practices/conventions/#chart-names"},"Helm \u6700\u4f73\u5b9e\u8df5\u6587\u6863"),"\u3002")),(0,r.kt)("h3",{id:"\u4f7f\u7528-helmchartconfig-\u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6"},"\u4f7f\u7528 HelmChartConfig \u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u4e3a\u4e86\u5141\u8bb8\u8986\u76d6\u90e8\u7f72\u4e3a HelmCharts\uff08\u4f8b\u5982 Traefik\uff09\u7684\u6253\u5305\u7ec4\u4ef6\u7684\u503c\uff0cK3s \u652f\u6301\u901a\u8fc7 HelmChartConfig \u8d44\u6e90\u8fdb\u884c\u81ea\u5b9a\u4e49\u90e8\u7f72\u3002HelmChartConfig \u8d44\u6e90\u5fc5\u987b\u4e0e\u5bf9\u5e94\u7684 HelmChart \u540d\u79f0\u548c\u547d\u540d\u7a7a\u95f4\u5339\u914d\uff0c\u5e76\u4e14\u652f\u6301\u63d0\u4f9b\u989d\u5916\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"valuesContent"),"\uff0c\u5b83\u4f5c\u4e3a\u9644\u52a0\u503c\u6587\u4ef6\u4f20\u9012\u7ed9 ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \u547d\u4ee4\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"HelmChart ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.set")," \u503c\u4f1a\u8986\u76d6 HelmChart \u548c HelmChartConfig ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.valuesContent")," \u8bbe\u7f6e\u3002")),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u81ea\u5b9a\u4e49\u6253\u5305\u7684 Traefik ingress \u914d\u7f6e\uff0c\u4f60\u53ef\u4ee5\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik-config.yaml")," \u7684\u6587\u4ef6\u5e76\u4f7f\u7528\u4ee5\u4e0b\u5185\u5bb9\u586b\u5145\u5b83\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: helm.cattle.io/v1\nkind: HelmChartConfig\nmetadata:\n  name: traefik\n  namespace: kube-system\nspec:\n  valuesContent: |-\n    image:\n      name: traefik\n      tag: v2.8.5\n    forwardedHeaders:\n      enabled: true\n      trustedIPs:\n        - 10.0.0.0/8\n    ssl:\n      enabled: true\n      permanentRedirect: false\n")),(0,r.kt)("h3",{id:"\u4ece-helm-v2-\u8fc1\u79fb"},"\u4ece Helm v2 \u8fc1\u79fb"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1"},"v1.17.0+k3s.1")," \u5f00\u59cb\u652f\u6301 Helm v3 \u5e76\u9ed8\u8ba4\u4f7f\u7528\u5b83\u3002")),(0,r.kt)("p",null,"K3s \u53ef\u4ee5\u5904\u7406 Helm v2 \u6216 Helm v3\u3002\u5982\u679c\u4f60\u60f3\u8fc1\u79fb\u5230 Helm v3\uff0cHelm \u7684",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/"},"\u8fd9\u7bc7\u535a\u5ba2\u6587\u7ae0"),"\u89e3\u91ca\u4e86\u5982\u4f55\u4f7f\u7528\u63d2\u4ef6\u8fdb\u884c\u8fc1\u79fb\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/"},"\u5b98\u65b9 Helm 3 \u6587\u6863"),"\u3002\u8bf7\u786e\u4fdd\u4f60\u5df2\u6309\u7167",(0,r.kt)("a",{parentName:"p",href:"/zh/cluster-access/"},"\u96c6\u7fa4\u8bbf\u95ee"),"\u90e8\u5206\u6b63\u786e\u8bbe\u7f6e\u4e86 kubeconfig\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Helm 3 \u4e0d\u518d\u9700\u8981 Tiller \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"helm init")," \u547d\u4ee4\u3002\u8be6\u60c5\u8bf7\u53c2\u9605\u5b98\u65b9\u6587\u6863\u3002")))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6535],{3905:(e,t,n)=>{n.d(t,{Zo:()=>s,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function m(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var p=a.createContext({}),o=function(e){var t=a.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):m(m({},t),e)),n},s=function(e){var t=o(e.components);return a.createElement(p.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,p=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),k=o(n),c=r,u=k["".concat(p,".").concat(c)]||k[c]||d[c]||l;return n?a.createElement(u,m(m({ref:t},s),{},{components:n})):a.createElement(u,m({ref:t},s))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,m=new Array(l);m[0]=k;var i={};for(var p in t)hasOwnProperty.call(t,p)&&(i[p]=t[p]);i.originalType=e,i.mdxType="string"==typeof e?e:r,m[1]=i;for(var o=2;o<l;o++)m[o]=n[o];return a.createElement.apply(null,m)}return a.createElement.apply(null,n)}k.displayName="MDXCreateElement"},3446:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>m,default:()=>d,frontMatter:()=>l,metadata:()=>i,toc:()=>o});var a=n(3117),r=(n(7294),n(3905));const l={title:"Helm",weight:42},m=void 0,i={unversionedId:"helm/helm",id:"helm/helm",title:"Helm",description:"Helm \u662f Kubernetes \u7684\u5305\u7ba1\u7406\u5de5\u5177\u3002Helm Chart \u4e3a Kubernetes YAML \u6e05\u5355\u6587\u4ef6\u63d0\u4f9b\u4e86\u6a21\u677f\u8bed\u6cd5\u3002\u501f\u52a9 Helm\uff0c\u5f00\u53d1\u4eba\u5458\u6216\u96c6\u7fa4\u7ba1\u7406\u5458\u53ef\u4ee5\u521b\u5efa\u79f0\u4e3a Chart \u7684\u53ef\u914d\u7f6e\u6a21\u677f\uff0c\u800c\u4e0d\u4ec5\u4ec5\u662f\u4f7f\u7528\u9759\u6001\u6e05\u5355\u3002\u5982\u679c\u4f60\u9700\u8981\u521b\u5efa\u81ea\u5df1\u7684 Chart catalog\uff0c\u8bf7\u53c2\u9605 https://helm.sh/docs/intro/quickstart/\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/helm/helm.md",sourceDirName:"helm",slug:"/helm/",permalink:"/zh/helm/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"Helm",weight:42},sidebar:"mySidebar",previous:{title:"\u7f51\u7edc",permalink:"/zh/networking/"},next:{title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",permalink:"/zh/advanced/"}},p={},o=[{value:"\u4f7f\u7528 Helm Controller",id:"\u4f7f\u7528-helm-controller",level:3},{value:"HelmChart \u5b57\u6bb5\u5b9a\u4e49",id:"helmchart-\u5b57\u6bb5\u5b9a\u4e49",level:4},{value:"\u4f7f\u7528 HelmChartConfig \u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6",id:"\u4f7f\u7528-helmchartconfig-\u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6",level:3},{value:"\u4ece Helm v2 \u8fc1\u79fb",id:"\u4ece-helm-v2-\u8fc1\u79fb",level:3}],s={toc:o};function d(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},s,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"Helm \u662f Kubernetes \u7684\u5305\u7ba1\u7406\u5de5\u5177\u3002Helm Chart \u4e3a Kubernetes YAML \u6e05\u5355\u6587\u4ef6\u63d0\u4f9b\u4e86\u6a21\u677f\u8bed\u6cd5\u3002\u501f\u52a9 Helm\uff0c\u5f00\u53d1\u4eba\u5458\u6216\u96c6\u7fa4\u7ba1\u7406\u5458\u53ef\u4ee5\u521b\u5efa\u79f0\u4e3a Chart \u7684\u53ef\u914d\u7f6e\u6a21\u677f\uff0c\u800c\u4e0d\u4ec5\u4ec5\u662f\u4f7f\u7528\u9759\u6001\u6e05\u5355\u3002\u5982\u679c\u4f60\u9700\u8981\u521b\u5efa\u81ea\u5df1\u7684 Chart catalog\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/intro/quickstart/"},"https://helm.sh/docs/intro/quickstart/"),"\u3002"),(0,r.kt)("p",null,"K3s \u4e0d\u9700\u8981\u4f7f\u7528\u4efb\u4f55\u7279\u6b8a\u914d\u7f6e\u6765\u652f\u6301 Helm\u3002\u8bf7\u786e\u4fdd\u4f60\u5df2\u6839\u636e",(0,r.kt)("a",{parentName:"p",href:"/zh/cluster-access/"},"\u96c6\u7fa4\u8bbf\u95ee"),"\u6587\u6863\u6b63\u786e\u8bbe\u7f6e\u4e86 kubeconfig \u8def\u5f84\u3002"),(0,r.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller/"},"Helm Controller"),"\uff0c\u5b83\u4f7f\u7528 HelmChart \u81ea\u5b9a\u4e49\u8d44\u6e90\u5b9a\u4e49 (CRD) \u6765\u7ba1\u7406 Helm Chart \u7684\u5b89\u88c5\u3001\u5347\u7ea7\u3001\u91cd\u65b0\u914d\u7f6e\u548c\u5378\u8f7d\u3002\u4e0e",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/packaged-components"},"\u81ea\u52a8\u90e8\u7f72 AddOn \u6e05\u5355"),"\u914d\u5408\u4f7f\u7528\u540e\uff0c\u5b83\u53ef\u4ee5\u5728\u78c1\u76d8\u4e0a\u521b\u5efa\u5355\u4e2a\u6587\u4ef6\uff0c\u81ea\u52a8\u5728\u96c6\u7fa4\u4e0a\u5b89\u88c5 Helm Chart\u3002"),(0,r.kt)("h3",{id:"\u4f7f\u7528-helm-controller"},"\u4f7f\u7528 Helm Controller"),(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/helm-controller#helm-controller"},"HelmChart Custom Resource")," \u6355\u83b7\u4e86\u4f60\u901a\u5e38\u4f20\u9012\u7ed9 ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \u547d\u4ee4\u884c\u5de5\u5177\u7684\u5927\u90e8\u5206\u9009\u9879\u3002\u4ee5\u4e0b\u793a\u4f8b\u8bf4\u660e\u4e86\u5982\u4f55\u4ece Bitnami Chart \u4ed3\u5e93\u90e8\u7f72 Apache\uff0c\u5e76\u8986\u76d6\u67d0\u4e9b\u9ed8\u8ba4\u7684 Chart \u503c\u3002\u8bf7\u6ce8\u610f\uff0cHelmChart \u8d44\u6e90\u672c\u8eab\u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\uff0c\u4f46 Chart \u7684\u8d44\u6e90\u5c06\u90e8\u7f72\u5230\u5728\u540c\u4e00\u6e05\u5355\u4e2d\u521b\u5efa\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"web")," \u547d\u540d\u7a7a\u95f4\u3002\u5982\u679c\u4f60\u5e0c\u671b\u5c06 HelmChart \u8d44\u6e90\u4e0e\u5176\u90e8\u7f72\u7684\u8d44\u6e90\u5206\u5f00\uff0c\u8fd9\u5c06\u5f88\u6709\u7528\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Namespace\nmetadata:\n  name: web\n---\napiVersion: helm.cattle.io/v1\nkind: HelmChart\nmetadata:\n  name: apache\n  namespace: kube-system\nspec:\n  repo: https://charts.bitnami.com/bitnami\n  chart: apache\n  targetNamespace: web\n  valuesContent: |-\n    service:\n      type: ClusterIP\n    ingress:\n      enabled: true\n      hostname: www.example.com\n    metrics:\n      enabled: true\n")),(0,r.kt)("h4",{id:"helmchart-\u5b57\u6bb5\u5b9a\u4e49"},"HelmChart \u5b57\u6bb5\u5b9a\u4e49"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u5b57\u6bb5"),(0,r.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"),(0,r.kt)("th",{parentName:"tr",align:null},"Helm \u53c2\u6570/\u6807\u5fd7\u7b49\u6548\u9879"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"metadata.name"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u540d\u79f0"),(0,r.kt)("td",{parentName:"tr",align:null},"NAME")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u4ed3\u5e93\u4e2d\u7684 Helm Chart \u540d\u79f0\uff0c\u6216 chart archive (.tgz) \u7684\u5b8c\u6574 HTTPS URL"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.targetNamespace"),(0,r.kt)("td",{parentName:"tr",align:null},"default"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u76ee\u6807\u547d\u540d\u7a7a\u95f4"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--namespace"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.version"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u7248\u672c\uff08\u901a\u8fc7\u4ed3\u5e93\u5b89\u88c5\u65f6\uff09"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--version"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repo"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Helm Chart \u4ed3\u5e93 URL"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--repo"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.repoCA"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a\u542f\u7528 HTTPS \u7684 Server \u7684\u8bc1\u4e66"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ca-file"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.helmVersion"),(0,r.kt)("td",{parentName:"tr",align:null},"v3"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u4f7f\u7528\u7684 Helm \u7248\u672c\uff08",(0,r.kt)("inlineCode",{parentName:"td"},"v2")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"td"},"v3"),"\uff09"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},"False"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u9700\u8981\u6b64 Chart \u6765\u5f15\u5bfc\u96c6\u7fa4\uff08Cloud Controller Manager \u7b49\uff09\uff0c\u8bf7\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"True")),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.set"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u8986\u76d6\u7b80\u5355\u7684\u9ed8\u8ba4 Chart \u503c\u3002\u4f18\u5148\u4e8e\u901a\u8fc7 valuesContent \u8bbe\u7f6e\u7684\u9009\u9879\u3002"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--set")," / ",(0,r.kt)("inlineCode",{parentName:"td"},"--set-string"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.jobImage"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a\u5b89\u88c5 helm chart \u65f6\u8981\u4f7f\u7528\u7684\u955c\u50cf\u3002\u4f8b\u5982\uff1arancher/klipper-helm:v0.3.0"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.timeout"),(0,r.kt)("td",{parentName:"tr",align:null},"300"),(0,r.kt)("td",{parentName:"tr",align:null},"Helm \u64cd\u4f5c\u7684\u8d85\u65f6\u79d2\u6570"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--timeout"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.failurePolicy"),(0,r.kt)("td",{parentName:"tr",align:null},"reinstall"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"abort"),"\uff0cHelm \u64cd\u4f5c\u4f1a\u88ab\u4e2d\u6b62\uff0c\u7b49\u5f85\u64cd\u4f5c\u4eba\u5458\u7684\u624b\u52a8\u5e72\u9884\u3002"),(0,r.kt)("td",{parentName:"tr",align:null})),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.valuesContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 YAML \u6587\u4ef6\u5185\u5bb9\u8986\u76d6\u590d\u6742\u7684\u9ed8\u8ba4 Chart \u503c"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--values"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"spec.chartContent"),(0,r.kt)("td",{parentName:"tr",align:null}),(0,r.kt)("td",{parentName:"tr",align:null},"Base64 \u7f16\u7801\u7684 chart archive .tgz\uff0c\u8986\u76d6 spec.chart"),(0,r.kt)("td",{parentName:"tr",align:null},"CHART")))),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u96c6\u7fa4\u5185\u7684 Kubernetes APIServer \u533f\u540d\u8bbf\u95ee ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/static/")," \u4e2d\u7684\u5185\u5bb9\u3002\u6b64 URL \u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.chart")," \u5b57\u6bb5\u4e2d\u7684\u7279\u6b8a\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"p"},"%{KUBERNETES_API}%")," \u8fdb\u884c\u6a21\u677f\u5316\u3002\u4f8b\u5982\uff0c\u6253\u5305\u7684 Traefik \u7ec4\u4ef6\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz")," \u52a0\u8f7d Chart\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"name")," \u5b57\u6bb5\u9700\u8981\u9075\u5faa Helm Chart \u547d\u540d\u7ea6\u5b9a\u3002\u5982\u9700\u4e86\u89e3\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/chart_best_practices/conventions/#chart-names"},"Helm \u6700\u4f73\u5b9e\u8df5\u6587\u6863"),"\u3002")),(0,r.kt)("h3",{id:"\u4f7f\u7528-helmchartconfig-\u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6"},"\u4f7f\u7528 HelmChartConfig \u81ea\u5b9a\u4e49\u6253\u5305\u7ec4\u4ef6"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u4e3a\u4e86\u5141\u8bb8\u8986\u76d6\u90e8\u7f72\u4e3a HelmCharts\uff08\u4f8b\u5982 Traefik\uff09\u7684\u6253\u5305\u7ec4\u4ef6\u7684\u503c\uff0cK3s \u652f\u6301\u901a\u8fc7 HelmChartConfig \u8d44\u6e90\u8fdb\u884c\u81ea\u5b9a\u4e49\u90e8\u7f72\u3002HelmChartConfig \u8d44\u6e90\u5fc5\u987b\u4e0e\u5bf9\u5e94\u7684 HelmChart \u540d\u79f0\u548c\u547d\u540d\u7a7a\u95f4\u5339\u914d\uff0c\u5e76\u4e14\u652f\u6301\u63d0\u4f9b\u989d\u5916\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"valuesContent"),"\uff0c\u5b83\u4f5c\u4e3a\u9644\u52a0\u503c\u6587\u4ef6\u4f20\u9012\u7ed9 ",(0,r.kt)("inlineCode",{parentName:"p"},"helm")," \u547d\u4ee4\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"HelmChart ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.set")," \u503c\u4f1a\u8986\u76d6 HelmChart \u548c HelmChartConfig ",(0,r.kt)("inlineCode",{parentName:"p"},"spec.valuesContent")," \u8bbe\u7f6e\u3002")),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u81ea\u5b9a\u4e49\u6253\u5305\u7684 Traefik ingress \u914d\u7f6e\uff0c\u4f60\u53ef\u4ee5\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests/traefik-config.yaml")," \u7684\u6587\u4ef6\u5e76\u4f7f\u7528\u4ee5\u4e0b\u5185\u5bb9\u586b\u5145\u5b83\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: helm.cattle.io/v1\nkind: HelmChartConfig\nmetadata:\n  name: traefik\n  namespace: kube-system\nspec:\n  valuesContent: |-\n    image:\n      name: traefik\n      tag: v2.8.5\n    forwardedHeaders:\n      enabled: true\n      trustedIPs:\n        - 10.0.0.0/8\n    ssl:\n      enabled: true\n      permanentRedirect: false\n")),(0,r.kt)("h3",{id:"\u4ece-helm-v2-\u8fc1\u79fb"},"\u4ece Helm v2 \u8fc1\u79fb"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1"},"v1.17.0+k3s.1")," \u5f00\u59cb\u652f\u6301 Helm v3 \u5e76\u9ed8\u8ba4\u4f7f\u7528\u5b83\u3002")),(0,r.kt)("p",null,"K3s \u53ef\u4ee5\u5904\u7406 Helm v2 \u6216 Helm v3\u3002\u5982\u679c\u4f60\u60f3\u8fc1\u79fb\u5230 Helm v3\uff0cHelm \u7684",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/"},"\u8fd9\u7bc7\u535a\u5ba2\u6587\u7ae0"),"\u89e3\u91ca\u4e86\u5982\u4f55\u4f7f\u7528\u63d2\u4ef6\u8fdb\u884c\u8fc1\u79fb\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://helm.sh/docs/"},"\u5b98\u65b9 Helm 3 \u6587\u6863"),"\u3002\u8bf7\u786e\u4fdd\u4f60\u5df2\u6309\u7167",(0,r.kt)("a",{parentName:"p",href:"/zh/cluster-access/"},"\u96c6\u7fa4\u8bbf\u95ee"),"\u90e8\u5206\u6b63\u786e\u8bbe\u7f6e\u4e86 kubeconfig\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"Helm 3 \u4e0d\u518d\u9700\u8981 Tiller \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"helm init")," \u547d\u4ee4\u3002\u8be6\u60c5\u8bf7\u53c2\u9605\u5b98\u65b9\u6587\u6863\u3002")))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/6d8200b0.1901ff4d.js b/zh/assets/js/6d8200b0.e1cf527a.js
similarity index 98%
rename from zh/assets/js/6d8200b0.1901ff4d.js
rename to zh/assets/js/6d8200b0.e1cf527a.js
index 6f6fd84e1..aeef84723 100644
--- a/zh/assets/js/6d8200b0.1901ff4d.js
+++ b/zh/assets/js/6d8200b0.e1cf527a.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4424],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>f});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function a(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),u=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},l=function(e){var t=u(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},y=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,c=e.originalType,s=e.parentName,l=a(e,["components","mdxType","originalType","parentName"]),y=u(r),f=i,d=y["".concat(s,".").concat(f)]||y[f]||p[f]||c;return r?n.createElement(d,o(o({ref:t},l),{},{components:r})):n.createElement(d,o({ref:t},l))}));function f(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var c=r.length,o=new Array(c);o[0]=y;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:i,o[1]=a;for(var u=2;u<c;u++)o[u]=r[u];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}y.displayName="MDXCreateElement"},4773:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>p,frontMatter:()=>c,metadata:()=>a,toc:()=>u});var n=r(3117),i=(r(7294),r(3905));const c={title:"\u5b89\u5168",weight:90},o=void 0,a={unversionedId:"security/security",id:"security/security",title:"\u5b89\u5168",description:"\u672c\u8282\u4ecb\u7ecd\u4e86\u52a0\u5f3a K3s \u96c6\u7fa4\u5b89\u5168\u6027\u7684\u65b9\u6cd5\uff0c\u5305\u62ec 2 \u4e2a\u90e8\u5206\u3002\u672c\u6307\u5357\u5047\u8bbe K3s \u4e0e\u5d4c\u5165\u5f0f etcd \u4e00\u8d77\u8fd0\u884c\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/security.md",sourceDirName:"security",slug:"/security/",permalink:"/zh/security/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/security.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5b89\u5168",weight:90},sidebar:"mySidebar",previous:{title:"\u5df2\u77e5\u95ee\u9898",permalink:"/zh/known-issues/"},next:{title:"Secret \u52a0\u5bc6",permalink:"/zh/security/secrets-encryption"}},s={},u=[],l={toc:u};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"\u672c\u8282\u4ecb\u7ecd\u4e86\u52a0\u5f3a K3s \u96c6\u7fa4\u5b89\u5168\u6027\u7684\u65b9\u6cd5\uff0c\u5305\u62ec 2 \u4e2a\u90e8\u5206\u3002\u672c\u6307\u5357\u5047\u8bbe K3s \u4e0e\u5d4c\u5165\u5f0f etcd \u4e00\u8d77\u8fd0\u884c\u3002"),(0,i.kt)("p",null,"\u4ee5\u4e0b\u6587\u6863\u9002\u7528\u4e8e CIS Kubernetes Benchmark v1.23\u3002"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/zh/security/hardening-guide"},"\u5f3a\u5316\u6307\u5357")),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/zh/security/self-assessment"},"CIS Benchmark \u81ea\u6211\u8bc4\u4f30\u6307\u5357"))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4424],{3905:(e,t,r)=>{r.d(t,{Zo:()=>l,kt:()=>f});var n=r(7294);function i(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function c(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?c(Object(r),!0).forEach((function(t){i(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):c(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function a(e,t){if(null==e)return{};var r,n,i=function(e,t){if(null==e)return{};var r,n,i={},c=Object.keys(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||(i[r]=e[r]);return i}(e,t);if(Object.getOwnPropertySymbols){var c=Object.getOwnPropertySymbols(e);for(n=0;n<c.length;n++)r=c[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(i[r]=e[r])}return i}var s=n.createContext({}),u=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},l=function(e){var t=u(e.components);return n.createElement(s.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},y=n.forwardRef((function(e,t){var r=e.components,i=e.mdxType,c=e.originalType,s=e.parentName,l=a(e,["components","mdxType","originalType","parentName"]),y=u(r),f=i,d=y["".concat(s,".").concat(f)]||y[f]||p[f]||c;return r?n.createElement(d,o(o({ref:t},l),{},{components:r})):n.createElement(d,o({ref:t},l))}));function f(e,t){var r=arguments,i=t&&t.mdxType;if("string"==typeof e||i){var c=r.length,o=new Array(c);o[0]=y;var a={};for(var s in t)hasOwnProperty.call(t,s)&&(a[s]=t[s]);a.originalType=e,a.mdxType="string"==typeof e?e:i,o[1]=a;for(var u=2;u<c;u++)o[u]=r[u];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}y.displayName="MDXCreateElement"},4773:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>p,frontMatter:()=>c,metadata:()=>a,toc:()=>u});var n=r(3117),i=(r(7294),r(3905));const c={title:"\u5b89\u5168",weight:90},o=void 0,a={unversionedId:"security/security",id:"security/security",title:"\u5b89\u5168",description:"\u672c\u8282\u4ecb\u7ecd\u4e86\u52a0\u5f3a K3s \u96c6\u7fa4\u5b89\u5168\u6027\u7684\u65b9\u6cd5\uff0c\u5305\u62ec 2 \u4e2a\u90e8\u5206\u3002\u672c\u6307\u5357\u5047\u8bbe K3s \u4e0e\u5d4c\u5165\u5f0f etcd \u4e00\u8d77\u8fd0\u884c\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/security.md",sourceDirName:"security",slug:"/security/",permalink:"/zh/security/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/security.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5b89\u5168",weight:90},sidebar:"mySidebar",previous:{title:"\u5df2\u77e5\u95ee\u9898",permalink:"/zh/known-issues/"},next:{title:"Secret \u52a0\u5bc6",permalink:"/zh/security/secrets-encryption"}},s={},u=[],l={toc:u};function p(e){let{components:t,...r}=e;return(0,i.kt)("wrapper",(0,n.Z)({},l,r,{components:t,mdxType:"MDXLayout"}),(0,i.kt)("p",null,"\u672c\u8282\u4ecb\u7ecd\u4e86\u52a0\u5f3a K3s \u96c6\u7fa4\u5b89\u5168\u6027\u7684\u65b9\u6cd5\uff0c\u5305\u62ec 2 \u4e2a\u90e8\u5206\u3002\u672c\u6307\u5357\u5047\u8bbe K3s \u4e0e\u5d4c\u5165\u5f0f etcd \u4e00\u8d77\u8fd0\u884c\u3002"),(0,i.kt)("p",null,"\u4ee5\u4e0b\u6587\u6863\u9002\u7528\u4e8e CIS Kubernetes Benchmark v1.23\u3002"),(0,i.kt)("ul",null,(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/zh/security/hardening-guide"},"\u5f3a\u5316\u6307\u5357")),(0,i.kt)("li",{parentName:"ul"},(0,i.kt)("a",{parentName:"li",href:"/zh/security/self-assessment"},"CIS Benchmark \u81ea\u6211\u8bc4\u4f30\u6307\u5357"))))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/6f7960fe.576f8dcd.js b/zh/assets/js/6f7960fe.cbd199ce.js
similarity index 99%
rename from zh/assets/js/6f7960fe.576f8dcd.js
rename to zh/assets/js/6f7960fe.cbd199ce.js
index c3b422ef8..499dedd67 100644
--- a/zh/assets/js/6f7960fe.576f8dcd.js
+++ b/zh/assets/js/6f7960fe.cbd199ce.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3100],{3905:(t,e,a)=>{a.d(e,{Zo:()=>d,kt:()=>k});var n=a(7294);function r(t,e,a){return e in t?Object.defineProperty(t,e,{value:a,enumerable:!0,configurable:!0,writable:!0}):t[e]=a,t}function l(t,e){var a=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),a.push.apply(a,n)}return a}function i(t){for(var e=1;e<arguments.length;e++){var a=null!=arguments[e]?arguments[e]:{};e%2?l(Object(a),!0).forEach((function(e){r(t,e,a[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(a,e))}))}return t}function o(t,e){if(null==t)return{};var a,n,r=function(t,e){if(null==t)return{};var a,n,r={},l=Object.keys(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||(r[a]=t[a]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(t,a)&&(r[a]=t[a])}return r}var p=n.createContext({}),s=function(t){var e=n.useContext(p),a=e;return t&&(a="function"==typeof t?t(e):i(i({},e),t)),a},d=function(t){var e=s(t.components);return n.createElement(p.Provider,{value:e},t.children)},m={inlineCode:"code",wrapper:function(t){var e=t.children;return n.createElement(n.Fragment,{},e)}},u=n.forwardRef((function(t,e){var a=t.components,r=t.mdxType,l=t.originalType,p=t.parentName,d=o(t,["components","mdxType","originalType","parentName"]),u=s(a),k=r,c=u["".concat(p,".").concat(k)]||u[k]||m[k]||l;return a?n.createElement(c,i(i({ref:e},d),{},{components:a})):n.createElement(c,i({ref:e},d))}));function k(t,e){var a=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=a.length,i=new Array(l);i[0]=u;var o={};for(var p in e)hasOwnProperty.call(e,p)&&(o[p]=e[p]);o.originalType=t,o.mdxType="string"==typeof t?t:r,i[1]=o;for(var s=2;s<l;s++)i[s]=a[s];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}u.displayName="MDXCreateElement"},7958:(t,e,a)=>{a.r(e),a.d(e,{assets:()=>p,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>s});var n=a(3117),r=(a(7294),a(3905));const l={title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",weight:50},i=void 0,o={unversionedId:"datastore/datastore",id:"datastore/datastore",title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",description:"K3s \u4e0e\u5176\u4ed6 Kubernetes \u53d1\u884c\u7248\u7684\u4e0d\u540c\u4e4b\u5904\uff0c\u5728\u4e8e K3s \u652f\u6301\u4f7f\u7528 etcd \u4ee5\u5916\u7684\u6570\u636e\u5e93\u6765\u8fd0\u884c Kubernetes\u3002\u8be5\u529f\u80fd\u8ba9 Kubernetes \u8fd0\u7ef4\u66f4\u52a0\u7075\u6d3b\u3002\u4f60\u53ef\u4ee5\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u9009\u62e9\u5408\u9002\u7684\u6570\u636e\u5b58\u50a8\u9009\u9879\u3002\u4f8b\u5982\uff1a",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/datastore.md",sourceDirName:"datastore",slug:"/datastore/",permalink:"/zh/datastore/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",weight:50},sidebar:"mySidebar",previous:{title:"\u5378\u8f7d K3s",permalink:"/zh/installation/uninstall"},next:{title:"\u5907\u4efd\u548c\u6062\u590d",permalink:"/zh/datastore/backup-restore"}},p={},s=[{value:"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570",id:"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570",level:3},{value:"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd",id:"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd",level:3}],d=t=>function(e){return console.warn("Component "+t+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",e)},m=d("Tabs"),u=d("TabItem"),k={toc:s};function c(t){let{components:e,...a}=t;return(0,r.kt)("wrapper",(0,n.Z)({},k,a,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"K3s \u4e0e\u5176\u4ed6 Kubernetes \u53d1\u884c\u7248\u7684\u4e0d\u540c\u4e4b\u5904\uff0c\u5728\u4e8e K3s \u652f\u6301\u4f7f\u7528 etcd \u4ee5\u5916\u7684\u6570\u636e\u5e93\u6765\u8fd0\u884c Kubernetes\u3002\u8be5\u529f\u80fd\u8ba9 Kubernetes \u8fd0\u7ef4\u66f4\u52a0\u7075\u6d3b\u3002\u4f60\u53ef\u4ee5\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u9009\u62e9\u5408\u9002\u7684\u6570\u636e\u5b58\u50a8\u9009\u9879\u3002\u4f8b\u5982\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u7684\u56e2\u961f\u6ca1\u6709\u64cd\u4f5c etcd \u7684\u4e13\u4e1a\u77e5\u8bc6\uff0c\u4f60\u53ef\u4ee5\u9009\u62e9 MySQL \u6216 PostgreSQL \u7b49\u4f01\u4e1a\u7ea7 SQL \u6570\u636e\u5e93\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u9700\u8981\u5728 CI/CD \u73af\u5883\u4e2d\u8fd0\u884c\u4e00\u4e2a\u7b80\u5355\u3001\u77ed\u671f\u7684\u96c6\u7fa4\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5e93\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u5e0c\u671b\u5728\u8fb9\u7f18\u90e8\u7f72 Kubernetes \u5e76\u9700\u8981\u9ad8\u53ef\u7528\u89e3\u51b3\u65b9\u6848\uff0c\u4f46\u53c8\u65e0\u6cd5\u627f\u62c5\u5728\u8fb9\u7f18\u7ba1\u7406\u6570\u636e\u5e93\u7684\u8fd0\u8425\u5f00\u9500\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 K3s \u7684\u5d4c\u5165\u5f0f HA \u6570\u636e\u5b58\u50a8\uff0c\u8be5\u6570\u636e\u5b58\u50a8\u6784\u5efa\u5728\u5d4c\u5165\u5f0f etcd \u4e4b\u4e0a\u3002")),(0,r.kt)("p",null,"K3s \u652f\u6301\u4ee5\u4e0b\u6570\u636e\u5b58\u50a8\u9009\u9879\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\u5d4c\u5165\u5f0f ",(0,r.kt)("a",{parentName:"strong",href:"https://www.sqlite.org/index.html"},"SQLite")),(0,r.kt)("br",{parentName:"li"}),"SQLite \u4e0d\u80fd\u7528\u4e8e\u5177\u6709\u591a\u4e2a Server \u7684\u96c6\u7fa4\u3002",(0,r.kt)("br",{parentName:"li"}),"SQLite \u662f\u9ed8\u8ba4\u7684\u6570\u636e\u5b58\u50a8\uff0c\u5982\u679c\u6ca1\u6709\u5176\u4ed6\u6570\u636e\u5b58\u50a8\u914d\u7f6e\uff0c\u5e76\u4e14\u78c1\u76d8\u4e0a\u6ca1\u6709\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5e93\u6587\u4ef6\uff0c\u5c06\u4f7f\u7528 SQLite\u3002"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("br",{parentName:"li"}),"\u6709\u5173\u5728\u5177\u6709\u591a\u4e2a Server \u7684\u60c5\u51b5\u4e0b\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"li",href:"/zh/datastore/ha-embedded"},"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd")," \u6587\u6863\u3002\n\u5982\u679c K3s \u914d\u7f6e\u4e3a\u521d\u59cb\u5316\u4e00\u4e2a\u65b0\u7684 etcd \u96c6\u7fa4\uff0c\u52a0\u5165\u4e00\u4e2a\u73b0\u6709\u7684 etcd \u96c6\u7fa4\uff0c\u6216\u8005 etcd \u6570\u636e\u5e93\u6587\u4ef6\u5728\u542f\u52a8\u65f6\u5728\u78c1\u76d8\u4e0a\uff0c\u90a3\u4e48\u4f1a\u81ea\u52a8\u9009\u62e9\u5d4c\u5165\u5f0f etcd\u3002"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\u5916\u90e8\u6570\u636e\u5e93"),(0,r.kt)("br",{parentName:"li"}),"\u6709\u5173\u5728\u5177\u6709\u591a\u4e2a Server \u7684\u60c5\u51b5\u4e0b\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"li",href:"/zh/datastore/ha"},"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93"),"\u6587\u6863\u3002",(0,r.kt)("br",{parentName:"li"}),"\u652f\u6301\u4ee5\u4e0b\u5916\u90e8\u6570\u636e\u5b58\u50a8\uff1a",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://etcd.io/"},"etcd"),"\uff08\u9488\u5bf9\u7248\u672c 3.5.4 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.mysql.com/"},"MySQL"),"\uff08\u9488\u5bf9\u7248\u672c 5.7 \u548c 8.0 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://mariadb.org/"},"MariaDB"),"\uff08\u9488\u5bf9\u7248\u672c 10.6.8 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.postgresql.org/"},"PostgreSQL"),"\uff08\u9488\u5bf9\u7248\u672c 10.7\u300111.5 \u548c 14.2 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09")))),(0,r.kt)("admonition",{title:"\u51c6\u5907\u8bed\u53e5\u652f\u6301",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"K3s \u9700\u8981 DB \u7684\u51c6\u5907\u8bed\u53e5\u652f\u6301\u3002\u6362\u8a00\u4e4b\uff0c",(0,r.kt)("a",{parentName:"p",href:"https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling"},"PgBouncer")," \u4e4b\u7c7b\u7684\u8fde\u63a5\u6c60\u5c06\u65e0\u6cd5\u4e0e K3s \u4e00\u8d77\u4f7f\u7528\u3002")),(0,r.kt)("h3",{id:"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570"},"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u5e0c\u671b\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\uff08\u4f8b\u5982 PostgreSQL\u3001MySQL \u6216 etcd\uff09\uff0c\u4f60\u5fc5\u987b\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\uff0c\u4ee5\u4fbf K3s \u77e5\u9053\u5982\u4f55\u8fde\u63a5\u5230\u5916\u90e8\u6570\u636e\u5b58\u50a8\u3002\u4f60\u4e5f\u53ef\u4ee5\u6307\u5b9a\u53c2\u6570\u6765\u914d\u7f6e\u8fde\u63a5\u7684\u8ba4\u8bc1\u548c\u52a0\u5bc6\u3002\u4e0b\u8868\u603b\u7ed3\u4e86\u8fd9\u4e9b\u53c2\u6570\uff0c\u5b83\u4eec\u53ef\u4ee5\u4f5c\u4e3a CLI \u6807\u5fd7\u6216\u73af\u5883\u53d8\u91cf\u4f20\u9012\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"CLI \u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a PostgreSQL\u3001MySQL \u6216 etcd \u8fde\u63a5\u5b57\u7b26\u4e32\u3002\u8be5\u5b57\u7b26\u4e32\u7528\u4e8e\u63cf\u8ff0\u4e0e\u6570\u636e\u5b58\u50a8\u7684\u8fde\u63a5\u3002\u4e0d\u540c\u7684\u540e\u7aef\u5bf9\u5e94\u4e0d\u540c\u7684\u5b57\u7b26\u4e32\u7ed3\u6784\uff0c\u4e0b\u6587\u6709\u8be6\u7ec6\u8bf4\u660e\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS \u8bc1\u4e66\u9881\u53d1\u673a\u6784\uff08CA\uff09\u6587\u4ef6\uff0c\u7528\u4e8e\u786e\u4fdd\u6570\u636e\u5b58\u50a8\u7684\u901a\u4fe1\u5b89\u5168\u3002\u5982\u679c\u4f60\u7684\u6570\u636e\u5b58\u50a8\u4f7f\u7528\u81ea\u5b9a\u4e49\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u7b7e\u7f72\u7684\u8bc1\u4e66\u901a\u8fc7 TLS \u5904\u7406\u8bf7\u6c42\uff0c\u5219\u53ef\u4ee5\u4f7f\u7528\u6b64\u53c2\u6570\u6307\u5b9a CA\uff0c\u4ee5\u4fbf K3s \u5ba2\u6237\u7aef\u53ef\u4ee5\u6b63\u786e\u9a8c\u8bc1\u8bc1\u4e66\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS \u8bc1\u4e66\u6587\u4ef6\uff0c\u7528\u4e8e\u5bf9\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u57fa\u4e8e\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684\u9a8c\u8bc1\u3002\u8981\u4f7f\u7528\u8fd9\u4e2a\u529f\u80fd\uff0c\u4f60\u5fc5\u987b\u5c06\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u4e3a\u652f\u6301\u57fa\u4e8e\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684\u8ba4\u8bc1\u3002\u8981\u6307\u5b9a\u6b64\u53c2\u6570\uff0c\u4f60\u8fd8\u5fc5\u987b\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-keyfile")," \u53c2\u6570\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS \u5bc6\u94a5\u6587\u4ef6\uff0c\u7528\u4e8e\u5bf9\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u57fa\u4e8e\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684\u9a8c\u8bc1\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u524d\u9762\u7684 ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-certfile")," \u53c2\u6570\u3002")))),(0,r.kt)("p",null,"\u4f5c\u4e3a\u6700\u4f73\u5b9e\u8df5\uff0c\u6211\u4eec\u5efa\u8bae\u5c06\u8fd9\u4e9b\u53c2\u6570\u8bbe\u7f6e\u4e3a\u73af\u5883\u53d8\u91cf\uff0c\u800c\u4e0d\u662f\u547d\u4ee4\u884c\u53c2\u6570\uff0c\u8fd9\u6837\u4f60\u7684\u6570\u636e\u5e93\u8bc1\u4e66\u6216\u5176\u4ed6\u654f\u611f\u4fe1\u606f\u5c31\u4e0d\u4f1a\u4f5c\u4e3a\u8fdb\u7a0b\u4fe1\u606f\u7684\u4e00\u90e8\u5206\u66b4\u9732\u51fa\u6765\u3002"),(0,r.kt)("h3",{id:"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd"},"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd"),(0,r.kt)("p",null,"\u5982\u524d\u6240\u8ff0\uff0c\u4f20\u9012\u7ed9 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u7684\u503c\u7684\u683c\u5f0f\u53d6\u51b3\u4e8e\u6570\u636e\u5b58\u50a8\u540e\u7aef\u3002\u4e0b\u6587\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u6bcf\u4e2a\u652f\u6301\u7684\u5916\u90e8\u6570\u636e\u5b58\u50a8\u7684\u683c\u5f0f\u548c\u529f\u80fd\u3002"),(0,r.kt)(m,{mdxType:"Tabs"},(0,r.kt)(u,{value:"PostgreSQL",mdxType:"TabItem"},(0,r.kt)("p",null,"\u6700\u5e38\u89c1\u7684 PostgreSQL \u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u683c\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"postgres://username:password@hostname:port/database-name")),(0,r.kt)("p",null,"\u652f\u6301\u4f7f\u7528\u66f4\u9ad8\u7ea7\u7684\u914d\u7f6e\u53c2\u6570\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://godoc.org/github.com/lib/pq%E3%80%82"},"https://godoc.org/github.com/lib/pq\u3002")),(0,r.kt)("p",null,"\u5982\u679c\u6307\u5b9a\u6570\u636e\u5e93\u540d\u79f0\u4e0d\u5b58\u5728\uff0cserver \u5c06\u5c1d\u8bd5\u521b\u5efa\u5b83\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u53ea\u63d0\u4f9b\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"postgres://")," \u4f5c\u4e3a\u7aef\u70b9\uff0cK3s \u5c06\u5c1d\u8bd5\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"li"},"postgres")," \u4f5c\u4e3a\u7528\u6237\u540d\u548c\u5bc6\u7801\u8fde\u63a5\u5230 localhost"),(0,r.kt)("li",{parentName:"ul"},"\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes")," \u7684\u6570\u636e\u5e93"))),(0,r.kt)(u,{value:"MySQL / MariaDB",mdxType:"TabItem"},(0,r.kt)("p",null,"\u6700\u5e38\u89c1\u7684 MySQL \u548c MariaDB \u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u683c\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"mysql://username:password@tcp(hostname:3306)/database-name")),(0,r.kt)("p",null,"\u652f\u6301\u4f7f\u7528\u66f4\u9ad8\u7ea7\u7684\u914d\u7f6e\u53c2\u6570\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/go-sql-driver/mysql#dsn-data-source-name"},"https://github.com/go-sql-driver/mysql#dsn-data-source-name")),(0,r.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0c\u7531\u4e8e K3s \u7684\u4e00\u4e2a",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/1093"},"\u5df2\u77e5\u95ee\u9898"),"\uff0c\u4f60\u65e0\u6cd5\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"tls")," \u53c2\u6570\u3002TLS \u901a\u4fe1\u662f\u652f\u6301\u7684\uff0c\u4f46\u4f60\u4e0d\u80fd\u5c06\u6b64\u53c2\u6570\u8bbe\u7f6e\u4e3a \u201cskip-verify\u201d \u4ee5\u4f7f K3s \u8df3\u8fc7\u8bc1\u4e66\u9a8c\u8bc1\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u6307\u5b9a\u6570\u636e\u5e93\u540d\u79f0\u4e0d\u5b58\u5728\uff0cserver \u5c06\u5c1d\u8bd5\u521b\u5efa\u5b83\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u53ea\u63d0\u4f9b\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"mysql://")," \u4f5c\u4e3a\u7aef\u70b9\uff0cK3s \u5c06\u5c1d\u8bd5\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"li"},"root")," \u7528\u6237\uff0c\u4e0d\u4f7f\u7528\u5bc6\u7801\u8fde\u63a5\u5230 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/run/mysqld/mysqld.sock")," \u7684 MySQL socket"),(0,r.kt)("li",{parentName:"ul"},"\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes")," \u7684\u6570\u636e\u5e93"))),(0,r.kt)(u,{value:"etcd",mdxType:"TabItem"},(0,r.kt)("p",null,"\u6700\u5e38\u89c1\u7684 etcd \u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u683c\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379")),(0,r.kt)("p",null,"\u4ee5\u4e0a\u5047\u8bbe\u4f7f\u7528\u7684\u662f\u5178\u578b\u7684\u4e09\u8282\u70b9 etcd \u96c6\u7fa4\u3002\u8be5\u53c2\u6570\u53ef\u4ee5\u518d\u63a5\u53d7\u4e00\u4e2a\u9017\u53f7\u5206\u9694\u7684 etcd URL\u3002"))))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3100],{3905:(t,e,a)=>{a.d(e,{Zo:()=>d,kt:()=>k});var n=a(7294);function r(t,e,a){return e in t?Object.defineProperty(t,e,{value:a,enumerable:!0,configurable:!0,writable:!0}):t[e]=a,t}function l(t,e){var a=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),a.push.apply(a,n)}return a}function i(t){for(var e=1;e<arguments.length;e++){var a=null!=arguments[e]?arguments[e]:{};e%2?l(Object(a),!0).forEach((function(e){r(t,e,a[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(a,e))}))}return t}function o(t,e){if(null==t)return{};var a,n,r=function(t,e){if(null==t)return{};var a,n,r={},l=Object.keys(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||(r[a]=t[a]);return r}(t,e);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(t);for(n=0;n<l.length;n++)a=l[n],e.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(t,a)&&(r[a]=t[a])}return r}var p=n.createContext({}),s=function(t){var e=n.useContext(p),a=e;return t&&(a="function"==typeof t?t(e):i(i({},e),t)),a},d=function(t){var e=s(t.components);return n.createElement(p.Provider,{value:e},t.children)},m={inlineCode:"code",wrapper:function(t){var e=t.children;return n.createElement(n.Fragment,{},e)}},u=n.forwardRef((function(t,e){var a=t.components,r=t.mdxType,l=t.originalType,p=t.parentName,d=o(t,["components","mdxType","originalType","parentName"]),u=s(a),k=r,c=u["".concat(p,".").concat(k)]||u[k]||m[k]||l;return a?n.createElement(c,i(i({ref:e},d),{},{components:a})):n.createElement(c,i({ref:e},d))}));function k(t,e){var a=arguments,r=e&&e.mdxType;if("string"==typeof t||r){var l=a.length,i=new Array(l);i[0]=u;var o={};for(var p in e)hasOwnProperty.call(e,p)&&(o[p]=e[p]);o.originalType=t,o.mdxType="string"==typeof t?t:r,i[1]=o;for(var s=2;s<l;s++)i[s]=a[s];return n.createElement.apply(null,i)}return n.createElement.apply(null,a)}u.displayName="MDXCreateElement"},7958:(t,e,a)=>{a.r(e),a.d(e,{assets:()=>p,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>o,toc:()=>s});var n=a(3117),r=(a(7294),a(3905));const l={title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",weight:50},i=void 0,o={unversionedId:"datastore/datastore",id:"datastore/datastore",title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",description:"K3s \u4e0e\u5176\u4ed6 Kubernetes \u53d1\u884c\u7248\u7684\u4e0d\u540c\u4e4b\u5904\uff0c\u5728\u4e8e K3s \u652f\u6301\u4f7f\u7528 etcd \u4ee5\u5916\u7684\u6570\u636e\u5e93\u6765\u8fd0\u884c Kubernetes\u3002\u8be5\u529f\u80fd\u8ba9 Kubernetes \u8fd0\u7ef4\u66f4\u52a0\u7075\u6d3b\u3002\u4f60\u53ef\u4ee5\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u9009\u62e9\u5408\u9002\u7684\u6570\u636e\u5b58\u50a8\u9009\u9879\u3002\u4f8b\u5982\uff1a",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/datastore.md",sourceDirName:"datastore",slug:"/datastore/",permalink:"/zh/datastore/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",weight:50},sidebar:"mySidebar",previous:{title:"\u5378\u8f7d K3s",permalink:"/zh/installation/uninstall"},next:{title:"\u5907\u4efd\u548c\u6062\u590d",permalink:"/zh/datastore/backup-restore"}},p={},s=[{value:"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570",id:"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570",level:3},{value:"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd",id:"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd",level:3}],d=t=>function(e){return console.warn("Component "+t+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",e)},m=d("Tabs"),u=d("TabItem"),k={toc:s};function c(t){let{components:e,...a}=t;return(0,r.kt)("wrapper",(0,n.Z)({},k,a,{components:e,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"K3s \u4e0e\u5176\u4ed6 Kubernetes \u53d1\u884c\u7248\u7684\u4e0d\u540c\u4e4b\u5904\uff0c\u5728\u4e8e K3s \u652f\u6301\u4f7f\u7528 etcd \u4ee5\u5916\u7684\u6570\u636e\u5e93\u6765\u8fd0\u884c Kubernetes\u3002\u8be5\u529f\u80fd\u8ba9 Kubernetes \u8fd0\u7ef4\u66f4\u52a0\u7075\u6d3b\u3002\u4f60\u53ef\u4ee5\u6839\u636e\u5b9e\u9645\u60c5\u51b5\u9009\u62e9\u5408\u9002\u7684\u6570\u636e\u5b58\u50a8\u9009\u9879\u3002\u4f8b\u5982\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u7684\u56e2\u961f\u6ca1\u6709\u64cd\u4f5c etcd \u7684\u4e13\u4e1a\u77e5\u8bc6\uff0c\u4f60\u53ef\u4ee5\u9009\u62e9 MySQL \u6216 PostgreSQL \u7b49\u4f01\u4e1a\u7ea7 SQL \u6570\u636e\u5e93\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u9700\u8981\u5728 CI/CD \u73af\u5883\u4e2d\u8fd0\u884c\u4e00\u4e2a\u7b80\u5355\u3001\u77ed\u671f\u7684\u96c6\u7fa4\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5e93\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u5e0c\u671b\u5728\u8fb9\u7f18\u90e8\u7f72 Kubernetes \u5e76\u9700\u8981\u9ad8\u53ef\u7528\u89e3\u51b3\u65b9\u6848\uff0c\u4f46\u53c8\u65e0\u6cd5\u627f\u62c5\u5728\u8fb9\u7f18\u7ba1\u7406\u6570\u636e\u5e93\u7684\u8fd0\u8425\u5f00\u9500\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 K3s \u7684\u5d4c\u5165\u5f0f HA \u6570\u636e\u5b58\u50a8\uff0c\u8be5\u6570\u636e\u5b58\u50a8\u6784\u5efa\u5728\u5d4c\u5165\u5f0f etcd \u4e4b\u4e0a\u3002")),(0,r.kt)("p",null,"K3s \u652f\u6301\u4ee5\u4e0b\u6570\u636e\u5b58\u50a8\u9009\u9879\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\u5d4c\u5165\u5f0f ",(0,r.kt)("a",{parentName:"strong",href:"https://www.sqlite.org/index.html"},"SQLite")),(0,r.kt)("br",{parentName:"li"}),"SQLite \u4e0d\u80fd\u7528\u4e8e\u5177\u6709\u591a\u4e2a Server \u7684\u96c6\u7fa4\u3002",(0,r.kt)("br",{parentName:"li"}),"SQLite \u662f\u9ed8\u8ba4\u7684\u6570\u636e\u5b58\u50a8\uff0c\u5982\u679c\u6ca1\u6709\u5176\u4ed6\u6570\u636e\u5b58\u50a8\u914d\u7f6e\uff0c\u5e76\u4e14\u78c1\u76d8\u4e0a\u6ca1\u6709\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5e93\u6587\u4ef6\uff0c\u5c06\u4f7f\u7528 SQLite\u3002"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\u5d4c\u5165\u5f0f etcd"),(0,r.kt)("br",{parentName:"li"}),"\u6709\u5173\u5728\u5177\u6709\u591a\u4e2a Server \u7684\u60c5\u51b5\u4e0b\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"li",href:"/zh/datastore/ha-embedded"},"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd")," \u6587\u6863\u3002\n\u5982\u679c K3s \u914d\u7f6e\u4e3a\u521d\u59cb\u5316\u4e00\u4e2a\u65b0\u7684 etcd \u96c6\u7fa4\uff0c\u52a0\u5165\u4e00\u4e2a\u73b0\u6709\u7684 etcd \u96c6\u7fa4\uff0c\u6216\u8005 etcd \u6570\u636e\u5e93\u6587\u4ef6\u5728\u542f\u52a8\u65f6\u5728\u78c1\u76d8\u4e0a\uff0c\u90a3\u4e48\u4f1a\u81ea\u52a8\u9009\u62e9\u5d4c\u5165\u5f0f etcd\u3002"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("strong",{parentName:"li"},"\u5916\u90e8\u6570\u636e\u5e93"),(0,r.kt)("br",{parentName:"li"}),"\u6709\u5173\u5728\u5177\u6709\u591a\u4e2a Server \u7684\u60c5\u51b5\u4e0b\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"li",href:"/zh/datastore/ha"},"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93"),"\u6587\u6863\u3002",(0,r.kt)("br",{parentName:"li"}),"\u652f\u6301\u4ee5\u4e0b\u5916\u90e8\u6570\u636e\u5b58\u50a8\uff1a",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://etcd.io/"},"etcd"),"\uff08\u9488\u5bf9\u7248\u672c 3.5.4 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.mysql.com/"},"MySQL"),"\uff08\u9488\u5bf9\u7248\u672c 5.7 \u548c 8.0 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://mariadb.org/"},"MariaDB"),"\uff08\u9488\u5bf9\u7248\u672c 10.6.8 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("a",{parentName:"li",href:"https://www.postgresql.org/"},"PostgreSQL"),"\uff08\u9488\u5bf9\u7248\u672c 10.7\u300111.5 \u548c 14.2 \u8fdb\u884c\u4e86\u8ba4\u8bc1\uff09")))),(0,r.kt)("admonition",{title:"\u51c6\u5907\u8bed\u53e5\u652f\u6301",type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"K3s \u9700\u8981 DB \u7684\u51c6\u5907\u8bed\u53e5\u652f\u6301\u3002\u6362\u8a00\u4e4b\uff0c",(0,r.kt)("a",{parentName:"p",href:"https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling"},"PgBouncer")," \u4e4b\u7c7b\u7684\u8fde\u63a5\u6c60\u5c06\u65e0\u6cd5\u4e0e K3s \u4e00\u8d77\u4f7f\u7528\u3002")),(0,r.kt)("h3",{id:"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570"},"\u5916\u90e8\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u53c2\u6570"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u5e0c\u671b\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\uff08\u4f8b\u5982 PostgreSQL\u3001MySQL \u6216 etcd\uff09\uff0c\u4f60\u5fc5\u987b\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\uff0c\u4ee5\u4fbf K3s \u77e5\u9053\u5982\u4f55\u8fde\u63a5\u5230\u5916\u90e8\u6570\u636e\u5b58\u50a8\u3002\u4f60\u4e5f\u53ef\u4ee5\u6307\u5b9a\u53c2\u6570\u6765\u914d\u7f6e\u8fde\u63a5\u7684\u8ba4\u8bc1\u548c\u52a0\u5bc6\u3002\u4e0b\u8868\u603b\u7ed3\u4e86\u8fd9\u4e9b\u53c2\u6570\uff0c\u5b83\u4eec\u53ef\u4ee5\u4f5c\u4e3a CLI \u6807\u5fd7\u6216\u73af\u5883\u53d8\u91cf\u4f20\u9012\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"CLI \u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-endpoint")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_ENDPOINT")),(0,r.kt)("td",{parentName:"tr",align:null},"\u6307\u5b9a PostgreSQL\u3001MySQL \u6216 etcd \u8fde\u63a5\u5b57\u7b26\u4e32\u3002\u8be5\u5b57\u7b26\u4e32\u7528\u4e8e\u63cf\u8ff0\u4e0e\u6570\u636e\u5b58\u50a8\u7684\u8fde\u63a5\u3002\u4e0d\u540c\u7684\u540e\u7aef\u5bf9\u5e94\u4e0d\u540c\u7684\u5b57\u7b26\u4e32\u7ed3\u6784\uff0c\u4e0b\u6587\u6709\u8be6\u7ec6\u8bf4\u660e\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-cafile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CAFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS \u8bc1\u4e66\u9881\u53d1\u673a\u6784\uff08CA\uff09\u6587\u4ef6\uff0c\u7528\u4e8e\u786e\u4fdd\u6570\u636e\u5b58\u50a8\u7684\u901a\u4fe1\u5b89\u5168\u3002\u5982\u679c\u4f60\u7684\u6570\u636e\u5b58\u50a8\u4f7f\u7528\u81ea\u5b9a\u4e49\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u7b7e\u7f72\u7684\u8bc1\u4e66\u901a\u8fc7 TLS \u5904\u7406\u8bf7\u6c42\uff0c\u5219\u53ef\u4ee5\u4f7f\u7528\u6b64\u53c2\u6570\u6307\u5b9a CA\uff0c\u4ee5\u4fbf K3s \u5ba2\u6237\u7aef\u53ef\u4ee5\u6b63\u786e\u9a8c\u8bc1\u8bc1\u4e66\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-certfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_CERTFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS \u8bc1\u4e66\u6587\u4ef6\uff0c\u7528\u4e8e\u5bf9\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u57fa\u4e8e\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684\u9a8c\u8bc1\u3002\u8981\u4f7f\u7528\u8fd9\u4e2a\u529f\u80fd\uff0c\u4f60\u5fc5\u987b\u5c06\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u4e3a\u652f\u6301\u57fa\u4e8e\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684\u8ba4\u8bc1\u3002\u8981\u6307\u5b9a\u6b64\u53c2\u6570\uff0c\u4f60\u8fd8\u5fc5\u987b\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-keyfile")," \u53c2\u6570\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--datastore-keyfile")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_DATASTORE_KEYFILE")),(0,r.kt)("td",{parentName:"tr",align:null},"TLS \u5bc6\u94a5\u6587\u4ef6\uff0c\u7528\u4e8e\u5bf9\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u57fa\u4e8e\u5ba2\u6237\u7aef\u8bc1\u4e66\u7684\u9a8c\u8bc1\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u524d\u9762\u7684 ",(0,r.kt)("inlineCode",{parentName:"td"},"datastore-certfile")," \u53c2\u6570\u3002")))),(0,r.kt)("p",null,"\u4f5c\u4e3a\u6700\u4f73\u5b9e\u8df5\uff0c\u6211\u4eec\u5efa\u8bae\u5c06\u8fd9\u4e9b\u53c2\u6570\u8bbe\u7f6e\u4e3a\u73af\u5883\u53d8\u91cf\uff0c\u800c\u4e0d\u662f\u547d\u4ee4\u884c\u53c2\u6570\uff0c\u8fd9\u6837\u4f60\u7684\u6570\u636e\u5e93\u8bc1\u4e66\u6216\u5176\u4ed6\u654f\u611f\u4fe1\u606f\u5c31\u4e0d\u4f1a\u4f5c\u4e3a\u8fdb\u7a0b\u4fe1\u606f\u7684\u4e00\u90e8\u5206\u66b4\u9732\u51fa\u6765\u3002"),(0,r.kt)("h3",{id:"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd"},"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f\u548c\u529f\u80fd"),(0,r.kt)("p",null,"\u5982\u524d\u6240\u8ff0\uff0c\u4f20\u9012\u7ed9 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u7684\u503c\u7684\u683c\u5f0f\u53d6\u51b3\u4e8e\u6570\u636e\u5b58\u50a8\u540e\u7aef\u3002\u4e0b\u6587\u8be6\u7ec6\u4ecb\u7ecd\u4e86\u6bcf\u4e2a\u652f\u6301\u7684\u5916\u90e8\u6570\u636e\u5b58\u50a8\u7684\u683c\u5f0f\u548c\u529f\u80fd\u3002"),(0,r.kt)(m,{mdxType:"Tabs"},(0,r.kt)(u,{value:"PostgreSQL",mdxType:"TabItem"},(0,r.kt)("p",null,"\u6700\u5e38\u89c1\u7684 PostgreSQL \u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u683c\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"postgres://username:password@hostname:port/database-name")),(0,r.kt)("p",null,"\u652f\u6301\u4f7f\u7528\u66f4\u9ad8\u7ea7\u7684\u914d\u7f6e\u53c2\u6570\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://godoc.org/github.com/lib/pq%E3%80%82"},"https://godoc.org/github.com/lib/pq\u3002")),(0,r.kt)("p",null,"\u5982\u679c\u6307\u5b9a\u6570\u636e\u5e93\u540d\u79f0\u4e0d\u5b58\u5728\uff0cserver \u5c06\u5c1d\u8bd5\u521b\u5efa\u5b83\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u53ea\u63d0\u4f9b\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"postgres://")," \u4f5c\u4e3a\u7aef\u70b9\uff0cK3s \u5c06\u5c1d\u8bd5\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"li"},"postgres")," \u4f5c\u4e3a\u7528\u6237\u540d\u548c\u5bc6\u7801\u8fde\u63a5\u5230 localhost"),(0,r.kt)("li",{parentName:"ul"},"\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes")," \u7684\u6570\u636e\u5e93"))),(0,r.kt)(u,{value:"MySQL / MariaDB",mdxType:"TabItem"},(0,r.kt)("p",null,"\u6700\u5e38\u89c1\u7684 MySQL \u548c MariaDB \u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u683c\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"mysql://username:password@tcp(hostname:3306)/database-name")),(0,r.kt)("p",null,"\u652f\u6301\u4f7f\u7528\u66f4\u9ad8\u7ea7\u7684\u914d\u7f6e\u53c2\u6570\u3002\u6709\u5173\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/go-sql-driver/mysql#dsn-data-source-name"},"https://github.com/go-sql-driver/mysql#dsn-data-source-name")),(0,r.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0c\u7531\u4e8e K3s \u7684\u4e00\u4e2a",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/1093"},"\u5df2\u77e5\u95ee\u9898"),"\uff0c\u4f60\u65e0\u6cd5\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"tls")," \u53c2\u6570\u3002TLS \u901a\u4fe1\u662f\u652f\u6301\u7684\uff0c\u4f46\u4f60\u4e0d\u80fd\u5c06\u6b64\u53c2\u6570\u8bbe\u7f6e\u4e3a \u201cskip-verify\u201d \u4ee5\u4f7f K3s \u8df3\u8fc7\u8bc1\u4e66\u9a8c\u8bc1\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u6307\u5b9a\u6570\u636e\u5e93\u540d\u79f0\u4e0d\u5b58\u5728\uff0cserver \u5c06\u5c1d\u8bd5\u521b\u5efa\u5b83\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u53ea\u63d0\u4f9b\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"mysql://")," \u4f5c\u4e3a\u7aef\u70b9\uff0cK3s \u5c06\u5c1d\u8bd5\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"li"},"root")," \u7528\u6237\uff0c\u4e0d\u4f7f\u7528\u5bc6\u7801\u8fde\u63a5\u5230 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/run/mysqld/mysqld.sock")," \u7684 MySQL socket"),(0,r.kt)("li",{parentName:"ul"},"\u521b\u5efa\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"kubernetes")," \u7684\u6570\u636e\u5e93"))),(0,r.kt)(u,{value:"etcd",mdxType:"TabItem"},(0,r.kt)("p",null,"\u6700\u5e38\u89c1\u7684 etcd \u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\u683c\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379")),(0,r.kt)("p",null,"\u4ee5\u4e0a\u5047\u8bbe\u4f7f\u7528\u7684\u662f\u5178\u578b\u7684\u4e09\u8282\u70b9 etcd \u96c6\u7fa4\u3002\u8be5\u53c2\u6570\u53ef\u4ee5\u518d\u63a5\u53d7\u4e00\u4e2a\u9017\u53f7\u5206\u9694\u7684 etcd URL\u3002"))))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/711cf357.dbfa5f10.js b/zh/assets/js/711cf357.d9b48a55.js
similarity index 98%
rename from zh/assets/js/711cf357.dbfa5f10.js
rename to zh/assets/js/711cf357.d9b48a55.js
index f318f3ddc..566947c9f 100644
--- a/zh/assets/js/711cf357.dbfa5f10.js
+++ b/zh/assets/js/711cf357.d9b48a55.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5812],{3905:(e,t,n)=>{n.d(t,{Zo:()=>m,kt:()=>k});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),d=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},m=function(e){var t=d(e.components);return a.createElement(o.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},N=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,m=p(e,["components","mdxType","originalType","parentName"]),N=d(n),k=r,u=N["".concat(o,".").concat(k)]||N[k]||s[k]||l;return n?a.createElement(u,i(i({ref:t},m),{},{components:n})):a.createElement(u,i({ref:t},m))}));function k(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=N;var p={};for(var o in t)hasOwnProperty.call(t,o)&&(p[o]=t[o]);p.originalType=e,p.mdxType="string"==typeof e?e:r,i[1]=p;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}N.displayName="MDXCreateElement"},9538:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>s,frontMatter:()=>l,metadata:()=>p,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u73af\u5883\u53d8\u91cf",weight:3},i=void 0,p={unversionedId:"reference/env-variables",id:"reference/env-variables",title:"\u73af\u5883\u53d8\u91cf",description:"\u5982\u5feb\u901f\u5165\u95e8\u6307\u5357\u4e2d\u6240\u8ff0\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 https://get.k3s.io \u4e0a\u63d0\u4f9b\u7684\u5b89\u88c5\u811a\u672c\u5728\u57fa\u4e8e systemd \u548c openrc \u7684\u7cfb\u7edf\u4e0a\u5c06 K3s \u5b89\u88c5\u4e3a\u670d\u52a1\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/env-variables.md",sourceDirName:"reference",slug:"/reference/env-variables",permalink:"/zh/reference/env-variables",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u73af\u5883\u53d8\u91cf",weight:3},sidebar:"mySidebar",previous:{title:"\u53c2\u8003",permalink:"/zh/reference/"},next:{title:"\u8d44\u6e90\u5206\u6790",permalink:"/zh/reference/resource-profiling"}},o={},d=[],m={toc:d};function s(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u5982",(0,r.kt)("a",{parentName:"p",href:"/zh/quick-start/"},"\u5feb\u901f\u5165\u95e8\u6307\u5357"),"\u4e2d\u6240\u8ff0\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \u4e0a\u63d0\u4f9b\u7684\u5b89\u88c5\u811a\u672c\u5728\u57fa\u4e8e systemd \u548c openrc \u7684\u7cfb\u7edf\u4e0a\u5c06 K3s \u5b89\u88c5\u4e3a\u670d\u52a1\u3002"),(0,r.kt)("p",null,"\u6b64\u547d\u4ee4\u7684\u6700\u7b80\u5355\u5f62\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,r.kt)("pre",{parentName:"admonition"},(0,r.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -\n"))),(0,r.kt)("p",null,"\u4f7f\u7528\u8be5\u65b9\u6cd5\u5b89\u88c5 K3s \u65f6\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u73af\u5883\u53d8\u91cf\u6765\u914d\u7f6e\u5b89\u88c5\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u4e0b\u8f7d K3s \u54c8\u5e0c\u6216\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYMLINK")),(0,r.kt)("td",{parentName:"tr",align:null},"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5982\u679c\u547d\u4ee4\u4e0d\u5b58\u5728\u4e8e\u8def\u5f84\u4e2d\uff0c\u5c06\u4e3a kubectl\u3001crictl \u548c ctr \u4e8c\u8fdb\u5236\u6587\u4ef6\u521b\u5efa\u7b26\u53f7\u94fe\u63a5\u3002\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"skip")," \u5c06\u4e0d\u4f1a\u521b\u5efa\u7b26\u53f7\u94fe\u63a5\uff0c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"force")," \u5c06\u4f1a\u8986\u76d6\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_ENABLE")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u542f\u7528\u6216\u542f\u52a8 K3s \u670d\u52a1\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_START")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u542f\u52a8 K3s \u670d\u52a1\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_VERSION")),(0,r.kt)("td",{parentName:"tr",align:null},"\u4ece GitHub \u4e0b\u8f7d\u7684 K3s \u7248\u672c\u3002\u5982\u679c\u672a\u6307\u5b9a\uff0c\u5c06\u5c1d\u8bd5\u4ece stable channel \u4e0b\u8f7d\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5b89\u88c5 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u3001\u94fe\u63a5\u548c\u5378\u8f7d\u811a\u672c\u7684\u76ee\u5f55\uff0c\u6216\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"td"},"/usr/local/bin")," \u4f5c\u4e3a\u9ed8\u8ba4\u76ee\u5f55\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR_READ_ONLY")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u5c06\u6587\u4ef6\u5199\u5165 ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR"),"\uff0c\u5f3a\u5236\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),"\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYSTEMD_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5b89\u88c5 systemd \u670d\u52a1\u548c\u73af\u5883\u6587\u4ef6\u7684\u76ee\u5f55\uff0c\u6216\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/systemd/system")," \u4f5c\u4e3a\u9ed8\u8ba4\u76ee\u5f55\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_EXEC")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5e26\u6709\u6807\u5fd7\u7684\u547d\u4ee4\uff0c\u7528\u4e8e\u5728\u670d\u52a1\u4e2d\u542f\u52a8 K3s\u3002\u5982\u679c\u672a\u6307\u5b9a\u547d\u4ee4\u5e76\u4e14\u8bbe\u7f6e\u4e86 ",(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),'\uff0c\u5b83\u5c06\u9ed8\u8ba4\u4e3a "agent"\u3002\u5982\u679c\u672a\u8bbe\u7f6e ',(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),'\uff0c\u5b83\u5c06\u9ed8\u8ba4\u4e3a "server"\u3002\u5982\u9700\u5e2e\u52a9\uff0c\u8bf7\u53c2\u9605',(0,r.kt)("a",{parentName:"td",href:"/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9"},"\u6b64\u793a\u4f8b"),"\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u521b\u5efa\u7684 systemd \u670d\u52a1\u7684\u540d\u79f0\uff0c\u5982\u679c\u5c06 K3s \u4f5c\u4e3a server \u8fd0\u884c\uff0c\u5219\u9ed8\u8ba4\u4e3a \u201ck3s\u201d\uff0c\u5982\u679c\u5c06 K3s \u4f5c\u4e3a agent \u8fd0\u884c\uff0c\u5219\u9ed8\u8ba4\u4e3a \u201ck3s-agent\u201d\u3002\u5982\u679c\u6307\u5b9a\uff0c\u540d\u79f0\u5c06\u4ee5\u201ck3s-\u201d\u4e3a\u524d\u7f00\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_TYPE")),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u521b\u5efa\u7684 systemd \u670d\u52a1\u7c7b\u578b\uff0c\u5982\u679c\u672a\u6307\u5b9a\uff0c\u5c06\u9ed8\u8ba4\u4f7f\u7528\u6765\u81ea K3s exec \u547d\u4ee4\u7684\u7c7b\u578b\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SELINUX_WARN")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true"),"\uff0c\u5219\u5728\u672a\u627e\u5230 k3s-selinux \u7b56\u7565\u65f6\u4f1a\u7ee7\u7eed\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_SELINUX_RPM")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u8df3\u8fc7 k3s RPM \u7684\u81ea\u52a8\u5b89\u88c5\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u83b7\u53d6 K3s \u4e0b\u8f7d URL \u7684 Channel URL\u3002\u9ed8\u8ba4\u4e3a ",(0,r.kt)("a",{parentName:"td",href:"https://update.k3s.io/v1-release/channels"},"https://update.k3s.io/v1-release/channels"),"\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL")),(0,r.kt)("td",{parentName:"tr",align:null},'\u7528\u4e8e\u83b7\u53d6 K3s \u4e0b\u8f7d URL \u7684 Channel\u3002\u9ed8\u8ba4\u4e3a "stable"\u3002\u53ef\u9009\u9879\uff1a',(0,r.kt)("inlineCode",{parentName:"td"},"stable"),"\u3001",(0,r.kt)("inlineCode",{parentName:"td"},"latest"),"\u3001",(0,r.kt)("inlineCode",{parentName:"td"},"testing"),"\u3002")))),(0,r.kt)("p",null,"\u4ee5\u4e0b\u793a\u4f8b\u663e\u793a\u4e86\u5982\u4f55\u5c06\u4e0a\u8ff0\u73af\u5883\u53d8\u91cf\u4f5c\u4e3a\u9009\u9879\u8bbe\u7f6e\uff08\u5728\u7ba1\u9053\u7b26\u540e\uff09\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"\u4ee5 ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u5f00\u5934\u7684\u73af\u5883\u53d8\u91cf\u5c06\u88ab\u4fdd\u7559\uff0c\u4f9b systemd \u548c openrc \u670d\u52a1\u4f7f\u7528\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u8bbe\u7f6e\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u4f46\u6ca1\u6709\u8bbe\u7f6e exec \u547d\u4ee4\uff0c\u5c06\u9ed8\u8ba4\u547d\u4ee4\u4e3a\u201cagent\u201d\u3002"),(0,r.kt)("p",null,"\u8fd0\u884c agent \u65f6\uff0c\u8fd8\u5fc5\u987b\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN"),"\u3002"))}s.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5812],{3905:(e,t,n)=>{n.d(t,{Zo:()=>m,kt:()=>k});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),d=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},m=function(e){var t=d(e.components);return a.createElement(o.Provider,{value:t},e.children)},s={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},N=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,m=p(e,["components","mdxType","originalType","parentName"]),N=d(n),k=r,u=N["".concat(o,".").concat(k)]||N[k]||s[k]||l;return n?a.createElement(u,i(i({ref:t},m),{},{components:n})):a.createElement(u,i({ref:t},m))}));function k(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=N;var p={};for(var o in t)hasOwnProperty.call(t,o)&&(p[o]=t[o]);p.originalType=e,p.mdxType="string"==typeof e?e:r,i[1]=p;for(var d=2;d<l;d++)i[d]=n[d];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}N.displayName="MDXCreateElement"},9538:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>s,frontMatter:()=>l,metadata:()=>p,toc:()=>d});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u73af\u5883\u53d8\u91cf",weight:3},i=void 0,p={unversionedId:"reference/env-variables",id:"reference/env-variables",title:"\u73af\u5883\u53d8\u91cf",description:"\u5982\u5feb\u901f\u5165\u95e8\u6307\u5357\u4e2d\u6240\u8ff0\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 https://get.k3s.io \u4e0a\u63d0\u4f9b\u7684\u5b89\u88c5\u811a\u672c\u5728\u57fa\u4e8e systemd \u548c openrc \u7684\u7cfb\u7edf\u4e0a\u5c06 K3s \u5b89\u88c5\u4e3a\u670d\u52a1\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/env-variables.md",sourceDirName:"reference",slug:"/reference/env-variables",permalink:"/zh/reference/env-variables",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u73af\u5883\u53d8\u91cf",weight:3},sidebar:"mySidebar",previous:{title:"\u53c2\u8003",permalink:"/zh/reference/"},next:{title:"\u8d44\u6e90\u5206\u6790",permalink:"/zh/reference/resource-profiling"}},o={},d=[],m={toc:d};function s(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u5982",(0,r.kt)("a",{parentName:"p",href:"/zh/quick-start/"},"\u5feb\u901f\u5165\u95e8\u6307\u5357"),"\u4e2d\u6240\u8ff0\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \u4e0a\u63d0\u4f9b\u7684\u5b89\u88c5\u811a\u672c\u5728\u57fa\u4e8e systemd \u548c openrc \u7684\u7cfb\u7edf\u4e0a\u5c06 K3s \u5b89\u88c5\u4e3a\u670d\u52a1\u3002"),(0,r.kt)("p",null,"\u6b64\u547d\u4ee4\u7684\u6700\u7b80\u5355\u5f62\u5f0f\u5982\u4e0b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,r.kt)("pre",{parentName:"admonition"},(0,r.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -\n"))),(0,r.kt)("p",null,"\u4f7f\u7528\u8be5\u65b9\u6cd5\u5b89\u88c5 K3s \u65f6\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u73af\u5883\u53d8\u91cf\u6765\u914d\u7f6e\u5b89\u88c5\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u4e0b\u8f7d K3s \u54c8\u5e0c\u6216\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYMLINK")),(0,r.kt)("td",{parentName:"tr",align:null},"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5982\u679c\u547d\u4ee4\u4e0d\u5b58\u5728\u4e8e\u8def\u5f84\u4e2d\uff0c\u5c06\u4e3a kubectl\u3001crictl \u548c ctr \u4e8c\u8fdb\u5236\u6587\u4ef6\u521b\u5efa\u7b26\u53f7\u94fe\u63a5\u3002\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"skip")," \u5c06\u4e0d\u4f1a\u521b\u5efa\u7b26\u53f7\u94fe\u63a5\uff0c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"force")," \u5c06\u4f1a\u8986\u76d6\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_ENABLE")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u542f\u7528\u6216\u542f\u52a8 K3s \u670d\u52a1\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_START")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u542f\u52a8 K3s \u670d\u52a1\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_VERSION")),(0,r.kt)("td",{parentName:"tr",align:null},"\u4ece GitHub \u4e0b\u8f7d\u7684 K3s \u7248\u672c\u3002\u5982\u679c\u672a\u6307\u5b9a\uff0c\u5c06\u5c1d\u8bd5\u4ece stable channel \u4e0b\u8f7d\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5b89\u88c5 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u3001\u94fe\u63a5\u548c\u5378\u8f7d\u811a\u672c\u7684\u76ee\u5f55\uff0c\u6216\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"td"},"/usr/local/bin")," \u4f5c\u4e3a\u9ed8\u8ba4\u76ee\u5f55\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR_READ_ONLY")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u4e0d\u4f1a\u5c06\u6587\u4ef6\u5199\u5165 ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_BIN_DIR"),"\uff0c\u5f3a\u5236\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),"\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SYSTEMD_DIR")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5b89\u88c5 systemd \u670d\u52a1\u548c\u73af\u5883\u6587\u4ef6\u7684\u76ee\u5f55\uff0c\u6216\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"td"},"/etc/systemd/system")," \u4f5c\u4e3a\u9ed8\u8ba4\u76ee\u5f55\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_EXEC")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5e26\u6709\u6807\u5fd7\u7684\u547d\u4ee4\uff0c\u7528\u4e8e\u5728\u670d\u52a1\u4e2d\u542f\u52a8 K3s\u3002\u5982\u679c\u672a\u6307\u5b9a\u547d\u4ee4\u5e76\u4e14\u8bbe\u7f6e\u4e86 ",(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),'\uff0c\u5b83\u5c06\u9ed8\u8ba4\u4e3a "agent"\u3002\u5982\u679c\u672a\u8bbe\u7f6e ',(0,r.kt)("inlineCode",{parentName:"td"},"K3S_URL"),'\uff0c\u5b83\u5c06\u9ed8\u8ba4\u4e3a "server"\u3002\u5982\u9700\u5e2e\u52a9\uff0c\u8bf7\u53c2\u9605',(0,r.kt)("a",{parentName:"td",href:"/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9"},"\u6b64\u793a\u4f8b"),"\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_NAME")),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u521b\u5efa\u7684 systemd \u670d\u52a1\u7684\u540d\u79f0\uff0c\u5982\u679c\u5c06 K3s \u4f5c\u4e3a server \u8fd0\u884c\uff0c\u5219\u9ed8\u8ba4\u4e3a \u201ck3s\u201d\uff0c\u5982\u679c\u5c06 K3s \u4f5c\u4e3a agent \u8fd0\u884c\uff0c\u5219\u9ed8\u8ba4\u4e3a \u201ck3s-agent\u201d\u3002\u5982\u679c\u6307\u5b9a\uff0c\u540d\u79f0\u5c06\u4ee5\u201ck3s-\u201d\u4e3a\u524d\u7f00\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_TYPE")),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u521b\u5efa\u7684 systemd \u670d\u52a1\u7c7b\u578b\uff0c\u5982\u679c\u672a\u6307\u5b9a\uff0c\u5c06\u9ed8\u8ba4\u4f7f\u7528\u6765\u81ea K3s exec \u547d\u4ee4\u7684\u7c7b\u578b\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SELINUX_WARN")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true"),"\uff0c\u5219\u5728\u672a\u627e\u5230 k3s-selinux \u7b56\u7565\u65f6\u4f1a\u7ee7\u7eed\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_SKIP_SELINUX_RPM")),(0,r.kt)("td",{parentName:"tr",align:null},"\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"true")," \u5c06\u8df3\u8fc7 k3s RPM \u7684\u81ea\u52a8\u5b89\u88c5\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL_URL")),(0,r.kt)("td",{parentName:"tr",align:null},"\u7528\u4e8e\u83b7\u53d6 K3s \u4e0b\u8f7d URL \u7684 Channel URL\u3002\u9ed8\u8ba4\u4e3a ",(0,r.kt)("a",{parentName:"td",href:"https://update.k3s.io/v1-release/channels"},"https://update.k3s.io/v1-release/channels"),"\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"INSTALL_K3S_CHANNEL")),(0,r.kt)("td",{parentName:"tr",align:null},'\u7528\u4e8e\u83b7\u53d6 K3s \u4e0b\u8f7d URL \u7684 Channel\u3002\u9ed8\u8ba4\u4e3a "stable"\u3002\u53ef\u9009\u9879\uff1a',(0,r.kt)("inlineCode",{parentName:"td"},"stable"),"\u3001",(0,r.kt)("inlineCode",{parentName:"td"},"latest"),"\u3001",(0,r.kt)("inlineCode",{parentName:"td"},"testing"),"\u3002")))),(0,r.kt)("p",null,"\u4ee5\u4e0b\u793a\u4f8b\u663e\u793a\u4e86\u5982\u4f55\u5c06\u4e0a\u8ff0\u73af\u5883\u53d8\u91cf\u4f5c\u4e3a\u9009\u9879\u8bbe\u7f6e\uff08\u5728\u7ba1\u9053\u7b26\u540e\uff09\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh -\n")),(0,r.kt)("p",null,"\u4ee5 ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u5f00\u5934\u7684\u73af\u5883\u53d8\u91cf\u5c06\u88ab\u4fdd\u7559\uff0c\u4f9b systemd \u548c openrc \u670d\u52a1\u4f7f\u7528\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u8bbe\u7f6e\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u4f46\u6ca1\u6709\u8bbe\u7f6e exec \u547d\u4ee4\uff0c\u5c06\u9ed8\u8ba4\u547d\u4ee4\u4e3a\u201cagent\u201d\u3002"),(0,r.kt)("p",null,"\u8fd0\u884c agent \u65f6\uff0c\u8fd8\u5fc5\u987b\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN"),"\u3002"))}s.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/772a162b.1d5b99e1.js b/zh/assets/js/772a162b.bf0dab18.js
similarity index 99%
rename from zh/assets/js/772a162b.1d5b99e1.js
rename to zh/assets/js/772a162b.bf0dab18.js
index ed77ec8da..abede6933 100644
--- a/zh/assets/js/772a162b.1d5b99e1.js
+++ b/zh/assets/js/772a162b.bf0dab18.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5165],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>s});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function k(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),p=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=p(e.components);return a.createElement(i.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,d=k(e,["components","mdxType","originalType","parentName"]),m=p(n),s=r,N=m["".concat(i,".").concat(s)]||m[s]||u[s]||l;return n?a.createElement(N,o(o({ref:t},d),{},{components:n})):a.createElement(N,o({ref:t},d))}));function s(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=m;var k={};for(var i in t)hasOwnProperty.call(t,i)&&(k[i]=t[i]);k.originalType=e,k.mdxType="string"==typeof e?e:r,o[1]=k;for(var p=2;p<l;p++)o[p]=n[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},4120:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>o,default:()=>u,frontMatter:()=>l,metadata:()=>k,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const l={title:"token"},o="k3s token",k={unversionedId:"cli/token",id:"cli/token",title:"token",description:"K3s \u4f7f\u7528 Token \u6765\u4fdd\u62a4\u52a0\u5165\u8282\u70b9\u7684\u8fc7\u7a0b\u3002Token \u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u7684\u8282\u70b9\u548c\u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/token.md",sourceDirName:"cli",slug:"/cli/token",permalink:"/zh/cli/token",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/token.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"token"},sidebar:"mySidebar",previous:{title:"secrets-encrypt",permalink:"/zh/cli/secrets-encrypt"},next:{title:"\u53c2\u8003",permalink:"/zh/reference/"}},i={},p=[{value:"Token \u683c\u5f0f",id:"token-\u683c\u5f0f",level:2},{value:"Secure",id:"secure",level:3},{value:"TLS \u5f15\u5bfc",id:"tls-\u5f15\u5bfc",level:4},{value:"Short",id:"short",level:3},{value:"Token \u7c7b\u578b",id:"token-\u7c7b\u578b",level:2},{value:"Server",id:"server",level:3},{value:"Agent",id:"agent",level:3},{value:"Bootstrap",id:"bootstrap",level:3},{value:"k3s token",id:"k3s-token-1",level:2},{value:"<code>k3s token create [token]</code>",id:"k3s-token-create-token",level:4},{value:"<code>k3s token delete</code>",id:"k3s-token-delete",level:4},{value:"<code>k3s token generate</code>",id:"k3s-token-generate",level:4},{value:"<code>k3s token list</code>",id:"k3s-token-list",level:4}],d={toc:p};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-token"},"k3s token"),(0,r.kt)("p",null,"K3s \u4f7f\u7528 Token \u6765\u4fdd\u62a4\u52a0\u5165\u8282\u70b9\u7684\u8fc7\u7a0b\u3002Token \u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u7684\u8282\u70b9\u548c\u96c6\u7fa4\u3002"),(0,r.kt)("h2",{id:"token-\u683c\u5f0f"},"Token \u683c\u5f0f"),(0,r.kt)("p",null,"K3s Token \u53ef\u4ee5\u4f7f\u7528\u5b89\u5168\uff08secure\uff09\u6216\u77ed\uff08short\uff09\u683c\u5f0f\u3002\u5b89\u5168\u683c\u5f0f\u80fd\u8ba9\u5ba2\u6237\u7aef\u5728\u53d1\u9001\u51ed\u8bc1\u4e4b\u524d\u9a8c\u8bc1\u52a0\u5165\u7684\u96c6\u7fa4\u7684\u8eab\u4efd\uff0c\u56e0\u6b64\u9996\u9009\u5b89\u5168\u683c\u5f0f\u3002"),(0,r.kt)("h3",{id:"secure"},"Secure"),(0,r.kt)("p",null,"\u5b89\u5168 Token \u683c\u5f0f\uff08\u6709\u65f6\u79f0\u4e3a\u201c\u5b8c\u6574\u201d Token \u683c\u5f0f\uff09\u5305\u542b\u4ee5\u4e0b\u90e8\u5206\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"<prefix><cluster CA hash>::<credentials>")),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"prefix"),"\uff1a\u56fa\u5b9a\u7684 ",(0,r.kt)("inlineCode",{parentName:"li"},"K10")," \u524d\u7f00\uff0c\u7528\u6765\u6807\u8bc6 token \u683c\u5f0f"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"cluster CA hash"),"\uff1a\u96c6\u7fa4\u7684 Server CA \u8bc1\u4e66\u7684\u54c8\u5e0c\uff0c\u7528\u4e8e\u4e3a\u52a0\u5165\u7684\u8282\u70b9\u9a8c\u8bc1 Server\u3002",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},"\u5bf9\u4e8e\u81ea\u7b7e\u540d CA \u8bc1\u4e66\uff0c\u8fd9\u662f\u5b58\u50a8\u5728\u78c1\u76d8\u4e0a\u7684 PEM \u683c\u5f0f\u8bc1\u4e66\u7684 SHA256 \u603b\u548c\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5bf9\u4e8e\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u8fd9\u662f\u6839\u8bc1\u4e66\u7684 DER \u7f16\u7801\u7684 SHA256 \u603b\u548c\uff0c\u4e5f\u79f0\u4e3a\u8bc1\u4e66\u6307\u7eb9\u3002"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"credentials"),"\uff1a\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u6216\u6301\u6709\u8005 Token\uff0c\u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u96c6\u7fa4\u7684\u8282\u70b9\u3002")),(0,r.kt)("h4",{id:"tls-\u5f15\u5bfc"},"TLS \u5f15\u5bfc"),(0,r.kt)("p",null,"\u5982\u679c\u6307\u5b9a\u4e86\u5b89\u5168 Token\uff0c\u5728\u4f20\u8f93\u51ed\u8bc1\u4e4b\u524d\uff0c\u52a0\u5165\u7684\u8282\u70b9\u4f1a\u6267\u884c\u4ee5\u4e0b\u6b65\u9aa4\u6765\u8ba4\u8bc1\u8fde\u63a5\u7684 Server\uff1a"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\u7981\u7528 TLS \u9a8c\u8bc1\u540e\uff0c\u4ece\u8981\u52a0\u5165\u7684 Server \u4e0a\u7684 ",(0,r.kt)("inlineCode",{parentName:"li"},"/cacerts")," \u4e0b\u8f7d CA \u5305\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u5982\u4e0a\u6240\u8ff0\u8ba1\u7b97 CA \u8bc1\u4e66\u7684 SHA256 \u54c8\u5e0c\u503c\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u6bd4\u8f83\u8ba1\u7b97\u51fa\u7684 SHA256 \u54c8\u5e0c\u503c\u4e0e Token \u4e2d\u7684\u54c8\u5e0c\u503c\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u5982\u679c\u54c8\u5e0c\u503c\u5339\u914d\uff0c\u5219\u9a8c\u8bc1 Server \u63d0\u4f9b\u7684\u8bc1\u4e66\u662f\u5426\u53ef\u4ee5\u7531 Server \u7684 CA \u5305\u8fdb\u884c\u9a8c\u8bc1\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u5982\u679c Server \u8bc1\u4e66\u6709\u6548\uff0c\u4f60\u9700\u8981\u4f7f\u7528\u57fa\u7840\u6216\u6301\u6709\u8005 Token \u8ba4\u8bc1\uff08\u6839\u636e Token \u7684\u7c7b\u578b\uff09\u6765\u63d0\u4f9b\u52a0\u5165\u96c6\u7fa4\u7684\u51ed\u8bc1\u3002")),(0,r.kt)("h3",{id:"short"},"Short"),(0,r.kt)("p",null,"\u77ed Token \u683c\u5f0f\u4ec5\u5305\u62ec\u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u96c6\u7fa4\u7684\u8282\u70b9\u7684\u5bc6\u7801\u6216\u6301\u6709\u8005 Token\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f7f\u7528\u4e86\u77ed Token\uff0c\u5219\u52a0\u5165\u7684\u8282\u70b9\u4f1a\u9690\u5f0f\u4fe1\u4efb Server \u63d0\u4f9b\u7684 CA \u5305\uff0c\u4ee5\u53ca\u8df3\u8fc7 TLS \u5f15\u5bfc\u8fc7\u7a0b\u4e2d\u7684\u6b65\u9aa4 2-4\u3002\u521d\u59cb\u8fde\u63a5\u53ef\u80fd\u5bb9\u6613\u53d7\u5230",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/Man-in-the-middle_attack"},"\u4e2d\u95f4\u4eba"),"\u653b\u51fb\u3002"),(0,r.kt)("h2",{id:"token-\u7c7b\u578b"},"Token \u7c7b\u578b"),(0,r.kt)("p",null,"K3s \u652f\u6301\u4e09\u79cd\u7c7b\u578b\u7684 Token\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u53ea\u6709 Server Token \u53ef\u7528\uff0c\u5176\u4ed6\u7c7b\u578b\u7684 Token \u5fc5\u987b\u7531\u7ba1\u7406\u5458\u914d\u7f6e\u6216\u521b\u5efa\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7c7b\u578b"),(0,r.kt)("th",{parentName:"tr",align:null},"CLI \u9009\u9879"),(0,r.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Server"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Agent"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a"))))),(0,r.kt)("h3",{id:"server"},"Server"),(0,r.kt)("p",null,"\u5982\u679c\u5728\u542f\u52a8\u96c6\u7fa4\u4e2d\u7684\u7b2c\u4e00\u4e2a Server \u65f6\u672a\u63d0\u4f9b Token\uff0c\u5219\u4f1a\u4f7f\u7528\u968f\u673a\u5bc6\u7801\u521b\u5efa\u3002Server Token \u59cb\u7ec8\u4ee5\u5b89\u5168\u683c\u5f0f\u5199\u5165 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"\u3002"),(0,r.kt)("p",null,"Server Token \u53ef\u7528\u4e8e\u5c06 Server \u548c Agent \u8282\u70b9\u52a0\u5165\u96c6\u7fa4\u3002\u4e00\u65e6\u521b\u5efa\u4e86\u96c6\u7fa4\uff0c\u5b83\u5c31\u65e0\u6cd5\u66f4\u6539\uff0c\u4efb\u4f55\u6709\u6743\u8bbf\u95ee Server Token \u7684\u7528\u6237\u57fa\u672c\u4e0a\u90fd\u62e5\u6709\u96c6\u7fa4\u7684\u5b8c\u5168\u7ba1\u7406\u5458\u8bbf\u95ee\u6743\u9650\u3002\u56e0\u6b64\uff0c\u4f60\u9700\u8981\u5c0f\u5fc3\u4fdd\u7ba1 Token\u3002"),(0,r.kt)("p",null,"Server Token \u8fd8\u7528\u4f5c\u5bc6\u94a5\u7684 ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/PBKDF2"},"PBKDF2")," \u5bc6\u7801\uff0c\u8be5\u5bc6\u94a5\u7528\u4e8e\u52a0\u5bc6\u6301\u4e45\u4fdd\u5b58\u5230\u6570\u636e\u5b58\u50a8\u7684\u673a\u5bc6\u4fe1\u606f\uff0c\u4f8b\u5982 Secret \u52a0\u5bc6\u914d\u7f6e\u3001wireguard \u5bc6\u94a5\uff0c\u96c6\u7fa4 CA \u8bc1\u4e66\u7684\u79c1\u94a5\u4ee5\u53ca service-account Token\u3002\u56e0\u6b64\uff0cToken \u5fc5\u987b\u4e0e\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u4e00\u8d77\u5907\u4efd\u3002"),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"\u9664\u975e\u4f7f\u7528\u4e86\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u5426\u5219\u5728\u542f\u52a8\u96c6\u7fa4\u7684\u7b2c\u4e00\u4e2a Server \u65f6\u53ea\u80fd\u4f7f\u7528\u77ed Token \u683c\u5f0f\uff08\u4ec5\u5bc6\u7801\uff09\u3002\u8fd9\u662f\u56e0\u4e3a\u53ea\u6709\u5728 Server \u751f\u6210\u81ea\u7b7e\u540d\u96c6\u7fa4 CA \u8bc1\u4e66\u540e\u624d\u80fd\u77e5\u9053\u96c6\u7fa4 CA \u54c8\u5e0c\u503c\u3002")),(0,r.kt)("p",null,"\u6709\u5173\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/certificate#"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," \u6587\u6863"),"\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u6709\u5173\u5907\u4efd\u96c6\u7fa4\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/datastore/backup-restore"},"\u5907\u4efd\u548c\u6062\u590d"),"\u6587\u6863\u3002"),(0,r.kt)("h3",{id:"agent"},"Agent"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cAgent Token \u4e0e Server Token \u76f8\u540c\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u66f4\u6539\u96c6\u7fa4\u4e2d\u6240\u6709 Server \u4e0a\u7684 CLI \u9009\u9879\u6216\u73af\u5883\u53d8\u91cf\uff0c\u5728\u96c6\u7fa4\u542f\u52a8\u4e4b\u524d\u6216\u4e4b\u540e\u8bbe\u7f6e Agent Token\u3002Agent Token \u7c7b\u4f3c\u4e8e Server Token\uff0c\u662f\u9759\u6001\u914d\u7f6e\u7684\u5e76\u4e14\u4e0d\u4f1a\u8fc7\u671f\u3002"),(0,r.kt)("p",null,"Agent Token \u4ee5\u5b89\u5168\u683c\u5f0f\u5199\u5165 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/agent-token"),"\u3002\u5982\u679c\u672a\u6307\u5b9a Agent Token\uff0c\u5219\u6b64\u6587\u4ef6\u662f\u6307\u5411 Server Token \u7684\u94fe\u63a5\u3002"),(0,r.kt)("h3",{id:"bootstrap"},"Bootstrap"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece 2023-02 \u7248\u672c\uff08v1.26.2+k3s1\u3001v1.25.7+k3s1\u3001v1.24.11+k3s1\u3001v1.23.17+k3s1\uff09\u5f00\u59cb\uff0c\u652f\u6301 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," \u547d\u4ee4\u4ee5\u53ca\u4f7f\u7528 Bootstrap Token \u52a0\u5165\u8282\u70b9\u3002")),(0,r.kt)("p",null,"K3s \u652f\u6301\u52a8\u6001\u751f\u6210\u3001\u81ea\u52a8\u8fc7\u671f\u7684 agent bootstrap token\u3002Bootstrap Token \u53ea\u80fd\u7528\u4e8e\u52a0\u5165 Agent\u3002"),(0,r.kt)("h2",{id:"k3s-token-1"},"k3s token"),(0,r.kt)("p",null,"K3s Bootstrap Token \u4f7f\u7528\u4e0e ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm token")," Bootstrap Token \u76f8\u540c\u7684\u751f\u6210\u548c\u9a8c\u8bc1\u4ee3\u7801\uff0c",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," CLI \u4e5f\u662f\u7c7b\u4f3c\u7684\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"NAME:\n   k3s token - Manage bootstrap tokens\n\nUSAGE:\n   k3s token command [command options] [arguments...]\n\nCOMMANDS:\n   create    Create bootstrap tokens on the server\n   delete    Delete bootstrap tokens on the server\n   generate  Generate and print a bootstrap token, but do not create it on the server\n   list      List bootstrap tokens on the server\n\nOPTIONS:\n   --help, -h  show help\n")),(0,r.kt)("h4",{id:"k3s-token-create-token"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token create [token]")),(0,r.kt)("p",null,"\u521b\u5efa\u4e00\u4e2a\u65b0 Token\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"[token]")," \u662f\u8981\u5199\u5165\u7684\u5b9e\u9645 Token\uff0c\u7531 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token generate")," \u751f\u6210\u3002\u5982\u679c\u6ca1\u6709\u6307\u5b9a Token\uff0c\u5c06\u751f\u6210\u4e00\u4e2a\u968f\u673a Token\u3002"),(0,r.kt)("p",null,"\u5b89\u5168\u683c\u5f0f\u7684 Token\uff08\u5305\u62ec\u96c6\u7fa4 CA \u54c8\u5e0c\uff09\u4f1a\u5199\u5165\u5230 stdout\u3002Token \u7684 secret \u90e8\u5206\u53ea\u663e\u793a\u4e00\u6b21\uff0c\u56e0\u6b64\u4f60\u9700\u8981\u4fdd\u5b58\u6b64\u547d\u4ee4\u7684\u8f93\u51fa\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--description")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6709\u5173\u5982\u4f55\u4f7f\u7528\u6b64 Token \u7684\u63cf\u8ff0")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--groups")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8be5 Token \u7528\u4e8e\u8ba4\u8bc1\u7684\u5176\u4ed6\u7ec4\uff08\u9ed8\u8ba4\u503c\uff1a\u201csystem:bootstrappers:k3s:default-node-token\u201d\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ttl")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u81ea\u52a8\u5220\u9664 Token \u7684\u65f6\u95f4\uff08\u4f8b\u5982 1s\u30012m\u30013h\uff09\u3002\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"0"),"\uff0cToken \u5c06\u6c38\u4e0d\u8fc7\u671f\uff08\u9ed8\u8ba4\u503c\uff1a24h0m0s\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--usages")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'\u63cf\u8ff0\u53ef\u4f7f\u7528\u6b64 Token \u7684\u65b9\u5f0f\u3002(\u9ed8\u8ba4\u503c\uff1a"signing,authentication")')))),(0,r.kt)("h4",{id:"k3s-token-delete"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token delete")),(0,r.kt)("p",null,"\u5220\u9664\u4e00\u4e2a\u6216\u591a\u4e2a Token\u3002\u4f60\u53ef\u4ee5\u63d0\u4f9b\u5b8c\u6574\u7684 Token\uff0c\u4e5f\u53ef\u4ee5\u4ec5\u63d0\u4f9b Token ID\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")))),(0,r.kt)("h4",{id:"k3s-token-generate"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token generate")),(0,r.kt)("p",null,"\u751f\u6210\u4e00\u4e2a\u968f\u673a\u7684 Bootstrap Token\u3002"),(0,r.kt)("p",null,'\u4f60\u4e0d\u9700\u8981\u4f7f\u7528\u6b64\u547d\u4ee4\u6765\u751f\u6210 Token\u3002\u53ea\u8981\u683c\u5f0f\u4e3a "',"[a-z0-9]","{6}.","[a-z0-9]",'{16}"\uff08\u5176\u4e2d\u7b2c\u4e00\u90e8\u5206\u662f Token ID\uff0c\u7b2c\u4e8c\u90e8\u5206\u662f Secret\uff09\uff0c\u4f60\u5c31\u53ef\u4ee5\u81ea\u5df1\u8fdb\u884c\u64cd\u4f5c\u3002'),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")))),(0,r.kt)("h4",{id:"k3s-token-list"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token list")),(0,r.kt)("p",null,"\u5217\u51fa Bootstrap Token\uff0c\u8fd9\u5c06\u663e\u793a Token \u7684 ID\u3001\u63cf\u8ff0\u548c\u5269\u4f59 TTL\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--output")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8f93\u51fa\u683c\u5f0f\u3002\u53ef\u9009\u503c\uff1atext\u3001json\uff08\u9ed8\u8ba4\u503c\uff1a",(0,r.kt)("inlineCode",{parentName:"td"},"text"),"\uff09")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[5165],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>s});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function k(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var i=a.createContext({}),p=function(e){var t=a.useContext(i),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=p(e.components);return a.createElement(i.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,i=e.parentName,d=k(e,["components","mdxType","originalType","parentName"]),m=p(n),s=r,N=m["".concat(i,".").concat(s)]||m[s]||u[s]||l;return n?a.createElement(N,o(o({ref:t},d),{},{components:n})):a.createElement(N,o({ref:t},d))}));function s(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,o=new Array(l);o[0]=m;var k={};for(var i in t)hasOwnProperty.call(t,i)&&(k[i]=t[i]);k.originalType=e,k.mdxType="string"==typeof e?e:r,o[1]=k;for(var p=2;p<l;p++)o[p]=n[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},4120:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>i,contentTitle:()=>o,default:()=>u,frontMatter:()=>l,metadata:()=>k,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const l={title:"token"},o="k3s token",k={unversionedId:"cli/token",id:"cli/token",title:"token",description:"K3s \u4f7f\u7528 Token \u6765\u4fdd\u62a4\u52a0\u5165\u8282\u70b9\u7684\u8fc7\u7a0b\u3002Token \u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u7684\u8282\u70b9\u548c\u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/token.md",sourceDirName:"cli",slug:"/cli/token",permalink:"/zh/cli/token",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/token.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"token"},sidebar:"mySidebar",previous:{title:"secrets-encrypt",permalink:"/zh/cli/secrets-encrypt"},next:{title:"\u53c2\u8003",permalink:"/zh/reference/"}},i={},p=[{value:"Token \u683c\u5f0f",id:"token-\u683c\u5f0f",level:2},{value:"Secure",id:"secure",level:3},{value:"TLS \u5f15\u5bfc",id:"tls-\u5f15\u5bfc",level:4},{value:"Short",id:"short",level:3},{value:"Token \u7c7b\u578b",id:"token-\u7c7b\u578b",level:2},{value:"Server",id:"server",level:3},{value:"Agent",id:"agent",level:3},{value:"Bootstrap",id:"bootstrap",level:3},{value:"k3s token",id:"k3s-token-1",level:2},{value:"<code>k3s token create [token]</code>",id:"k3s-token-create-token",level:4},{value:"<code>k3s token delete</code>",id:"k3s-token-delete",level:4},{value:"<code>k3s token generate</code>",id:"k3s-token-generate",level:4},{value:"<code>k3s token list</code>",id:"k3s-token-list",level:4}],d={toc:p};function u(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("h1",{id:"k3s-token"},"k3s token"),(0,r.kt)("p",null,"K3s \u4f7f\u7528 Token \u6765\u4fdd\u62a4\u52a0\u5165\u8282\u70b9\u7684\u8fc7\u7a0b\u3002Token \u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u7684\u8282\u70b9\u548c\u96c6\u7fa4\u3002"),(0,r.kt)("h2",{id:"token-\u683c\u5f0f"},"Token \u683c\u5f0f"),(0,r.kt)("p",null,"K3s Token \u53ef\u4ee5\u4f7f\u7528\u5b89\u5168\uff08secure\uff09\u6216\u77ed\uff08short\uff09\u683c\u5f0f\u3002\u5b89\u5168\u683c\u5f0f\u80fd\u8ba9\u5ba2\u6237\u7aef\u5728\u53d1\u9001\u51ed\u8bc1\u4e4b\u524d\u9a8c\u8bc1\u52a0\u5165\u7684\u96c6\u7fa4\u7684\u8eab\u4efd\uff0c\u56e0\u6b64\u9996\u9009\u5b89\u5168\u683c\u5f0f\u3002"),(0,r.kt)("h3",{id:"secure"},"Secure"),(0,r.kt)("p",null,"\u5b89\u5168 Token \u683c\u5f0f\uff08\u6709\u65f6\u79f0\u4e3a\u201c\u5b8c\u6574\u201d Token \u683c\u5f0f\uff09\u5305\u542b\u4ee5\u4e0b\u90e8\u5206\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"<prefix><cluster CA hash>::<credentials>")),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"prefix"),"\uff1a\u56fa\u5b9a\u7684 ",(0,r.kt)("inlineCode",{parentName:"li"},"K10")," \u524d\u7f00\uff0c\u7528\u6765\u6807\u8bc6 token \u683c\u5f0f"),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"cluster CA hash"),"\uff1a\u96c6\u7fa4\u7684 Server CA \u8bc1\u4e66\u7684\u54c8\u5e0c\uff0c\u7528\u4e8e\u4e3a\u52a0\u5165\u7684\u8282\u70b9\u9a8c\u8bc1 Server\u3002",(0,r.kt)("ul",{parentName:"li"},(0,r.kt)("li",{parentName:"ul"},"\u5bf9\u4e8e\u81ea\u7b7e\u540d CA \u8bc1\u4e66\uff0c\u8fd9\u662f\u5b58\u50a8\u5728\u78c1\u76d8\u4e0a\u7684 PEM \u683c\u5f0f\u8bc1\u4e66\u7684 SHA256 \u603b\u548c\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u5bf9\u4e8e\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u8fd9\u662f\u6839\u8bc1\u4e66\u7684 DER \u7f16\u7801\u7684 SHA256 \u603b\u548c\uff0c\u4e5f\u79f0\u4e3a\u8bc1\u4e66\u6307\u7eb9\u3002"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"credentials"),"\uff1a\u7528\u6237\u540d\u548c\u5bc6\u7801\uff0c\u6216\u6301\u6709\u8005 Token\uff0c\u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u96c6\u7fa4\u7684\u8282\u70b9\u3002")),(0,r.kt)("h4",{id:"tls-\u5f15\u5bfc"},"TLS \u5f15\u5bfc"),(0,r.kt)("p",null,"\u5982\u679c\u6307\u5b9a\u4e86\u5b89\u5168 Token\uff0c\u5728\u4f20\u8f93\u51ed\u8bc1\u4e4b\u524d\uff0c\u52a0\u5165\u7684\u8282\u70b9\u4f1a\u6267\u884c\u4ee5\u4e0b\u6b65\u9aa4\u6765\u8ba4\u8bc1\u8fde\u63a5\u7684 Server\uff1a"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\u7981\u7528 TLS \u9a8c\u8bc1\u540e\uff0c\u4ece\u8981\u52a0\u5165\u7684 Server \u4e0a\u7684 ",(0,r.kt)("inlineCode",{parentName:"li"},"/cacerts")," \u4e0b\u8f7d CA \u5305\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u5982\u4e0a\u6240\u8ff0\u8ba1\u7b97 CA \u8bc1\u4e66\u7684 SHA256 \u54c8\u5e0c\u503c\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u6bd4\u8f83\u8ba1\u7b97\u51fa\u7684 SHA256 \u54c8\u5e0c\u503c\u4e0e Token \u4e2d\u7684\u54c8\u5e0c\u503c\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u5982\u679c\u54c8\u5e0c\u503c\u5339\u914d\uff0c\u5219\u9a8c\u8bc1 Server \u63d0\u4f9b\u7684\u8bc1\u4e66\u662f\u5426\u53ef\u4ee5\u7531 Server \u7684 CA \u5305\u8fdb\u884c\u9a8c\u8bc1\u3002"),(0,r.kt)("li",{parentName:"ol"},"\u5982\u679c Server \u8bc1\u4e66\u6709\u6548\uff0c\u4f60\u9700\u8981\u4f7f\u7528\u57fa\u7840\u6216\u6301\u6709\u8005 Token \u8ba4\u8bc1\uff08\u6839\u636e Token \u7684\u7c7b\u578b\uff09\u6765\u63d0\u4f9b\u52a0\u5165\u96c6\u7fa4\u7684\u51ed\u8bc1\u3002")),(0,r.kt)("h3",{id:"short"},"Short"),(0,r.kt)("p",null,"\u77ed Token \u683c\u5f0f\u4ec5\u5305\u62ec\u7528\u4e8e\u9a8c\u8bc1\u52a0\u5165\u96c6\u7fa4\u7684\u8282\u70b9\u7684\u5bc6\u7801\u6216\u6301\u6709\u8005 Token\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f7f\u7528\u4e86\u77ed Token\uff0c\u5219\u52a0\u5165\u7684\u8282\u70b9\u4f1a\u9690\u5f0f\u4fe1\u4efb Server \u63d0\u4f9b\u7684 CA \u5305\uff0c\u4ee5\u53ca\u8df3\u8fc7 TLS \u5f15\u5bfc\u8fc7\u7a0b\u4e2d\u7684\u6b65\u9aa4 2-4\u3002\u521d\u59cb\u8fde\u63a5\u53ef\u80fd\u5bb9\u6613\u53d7\u5230",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/Man-in-the-middle_attack"},"\u4e2d\u95f4\u4eba"),"\u653b\u51fb\u3002"),(0,r.kt)("h2",{id:"token-\u7c7b\u578b"},"Token \u7c7b\u578b"),(0,r.kt)("p",null,"K3s \u652f\u6301\u4e09\u79cd\u7c7b\u578b\u7684 Token\u3002\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u53ea\u6709 Server Token \u53ef\u7528\uff0c\u5176\u4ed6\u7c7b\u578b\u7684 Token \u5fc5\u987b\u7531\u7ba1\u7406\u5458\u914d\u7f6e\u6216\u521b\u5efa\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u7c7b\u578b"),(0,r.kt)("th",{parentName:"tr",align:null},"CLI \u9009\u9879"),(0,r.kt)("th",{parentName:"tr",align:null},"\u73af\u5883\u53d8\u91cf"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Server"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Agent"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--agent-token")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_AGENT_TOKEN"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"Bootstrap"),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a")),(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"n/a"))))),(0,r.kt)("h3",{id:"server"},"Server"),(0,r.kt)("p",null,"\u5982\u679c\u5728\u542f\u52a8\u96c6\u7fa4\u4e2d\u7684\u7b2c\u4e00\u4e2a Server \u65f6\u672a\u63d0\u4f9b Token\uff0c\u5219\u4f1a\u4f7f\u7528\u968f\u673a\u5bc6\u7801\u521b\u5efa\u3002Server Token \u59cb\u7ec8\u4ee5\u5b89\u5168\u683c\u5f0f\u5199\u5165 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"\u3002"),(0,r.kt)("p",null,"Server Token \u53ef\u7528\u4e8e\u5c06 Server \u548c Agent \u8282\u70b9\u52a0\u5165\u96c6\u7fa4\u3002\u4e00\u65e6\u521b\u5efa\u4e86\u96c6\u7fa4\uff0c\u5b83\u5c31\u65e0\u6cd5\u66f4\u6539\uff0c\u4efb\u4f55\u6709\u6743\u8bbf\u95ee Server Token \u7684\u7528\u6237\u57fa\u672c\u4e0a\u90fd\u62e5\u6709\u96c6\u7fa4\u7684\u5b8c\u5168\u7ba1\u7406\u5458\u8bbf\u95ee\u6743\u9650\u3002\u56e0\u6b64\uff0c\u4f60\u9700\u8981\u5c0f\u5fc3\u4fdd\u7ba1 Token\u3002"),(0,r.kt)("p",null,"Server Token \u8fd8\u7528\u4f5c\u5bc6\u94a5\u7684 ",(0,r.kt)("a",{parentName:"p",href:"https://en.wikipedia.org/wiki/PBKDF2"},"PBKDF2")," \u5bc6\u7801\uff0c\u8be5\u5bc6\u94a5\u7528\u4e8e\u52a0\u5bc6\u6301\u4e45\u4fdd\u5b58\u5230\u6570\u636e\u5b58\u50a8\u7684\u673a\u5bc6\u4fe1\u606f\uff0c\u4f8b\u5982 Secret \u52a0\u5bc6\u914d\u7f6e\u3001wireguard \u5bc6\u94a5\uff0c\u96c6\u7fa4 CA \u8bc1\u4e66\u7684\u79c1\u94a5\u4ee5\u53ca service-account Token\u3002\u56e0\u6b64\uff0cToken \u5fc5\u987b\u4e0e\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u4e00\u8d77\u5907\u4efd\u3002"),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"\u9664\u975e\u4f7f\u7528\u4e86\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\uff0c\u5426\u5219\u5728\u542f\u52a8\u96c6\u7fa4\u7684\u7b2c\u4e00\u4e2a Server \u65f6\u53ea\u80fd\u4f7f\u7528\u77ed Token \u683c\u5f0f\uff08\u4ec5\u5bc6\u7801\uff09\u3002\u8fd9\u662f\u56e0\u4e3a\u53ea\u6709\u5728 Server \u751f\u6210\u81ea\u7b7e\u540d\u96c6\u7fa4 CA \u8bc1\u4e66\u540e\u624d\u80fd\u77e5\u9053\u96c6\u7fa4 CA \u54c8\u5e0c\u503c\u3002")),(0,r.kt)("p",null,"\u6709\u5173\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/certificate#"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate")," \u6587\u6863"),"\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u6709\u5173\u5907\u4efd\u96c6\u7fa4\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/datastore/backup-restore"},"\u5907\u4efd\u548c\u6062\u590d"),"\u6587\u6863\u3002"),(0,r.kt)("h3",{id:"agent"},"Agent"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cAgent Token \u4e0e Server Token \u76f8\u540c\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u66f4\u6539\u96c6\u7fa4\u4e2d\u6240\u6709 Server \u4e0a\u7684 CLI \u9009\u9879\u6216\u73af\u5883\u53d8\u91cf\uff0c\u5728\u96c6\u7fa4\u542f\u52a8\u4e4b\u524d\u6216\u4e4b\u540e\u8bbe\u7f6e Agent Token\u3002Agent Token \u7c7b\u4f3c\u4e8e Server Token\uff0c\u662f\u9759\u6001\u914d\u7f6e\u7684\u5e76\u4e14\u4e0d\u4f1a\u8fc7\u671f\u3002"),(0,r.kt)("p",null,"Agent Token \u4ee5\u5b89\u5168\u683c\u5f0f\u5199\u5165 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/agent-token"),"\u3002\u5982\u679c\u672a\u6307\u5b9a Agent Token\uff0c\u5219\u6b64\u6587\u4ef6\u662f\u6307\u5411 Server Token \u7684\u94fe\u63a5\u3002"),(0,r.kt)("h3",{id:"bootstrap"},"Bootstrap"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece 2023-02 \u7248\u672c\uff08v1.26.2+k3s1\u3001v1.25.7+k3s1\u3001v1.24.11+k3s1\u3001v1.23.17+k3s1\uff09\u5f00\u59cb\uff0c\u652f\u6301 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," \u547d\u4ee4\u4ee5\u53ca\u4f7f\u7528 Bootstrap Token \u52a0\u5165\u8282\u70b9\u3002")),(0,r.kt)("p",null,"K3s \u652f\u6301\u52a8\u6001\u751f\u6210\u3001\u81ea\u52a8\u8fc7\u671f\u7684 agent bootstrap token\u3002Bootstrap Token \u53ea\u80fd\u7528\u4e8e\u52a0\u5165 Agent\u3002"),(0,r.kt)("h2",{id:"k3s-token-1"},"k3s token"),(0,r.kt)("p",null,"K3s Bootstrap Token \u4f7f\u7528\u4e0e ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm token")," Bootstrap Token \u76f8\u540c\u7684\u751f\u6210\u548c\u9a8c\u8bc1\u4ee3\u7801\uff0c",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token")," CLI \u4e5f\u662f\u7c7b\u4f3c\u7684\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"NAME:\n   k3s token - Manage bootstrap tokens\n\nUSAGE:\n   k3s token command [command options] [arguments...]\n\nCOMMANDS:\n   create    Create bootstrap tokens on the server\n   delete    Delete bootstrap tokens on the server\n   generate  Generate and print a bootstrap token, but do not create it on the server\n   list      List bootstrap tokens on the server\n\nOPTIONS:\n   --help, -h  show help\n")),(0,r.kt)("h4",{id:"k3s-token-create-token"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token create [token]")),(0,r.kt)("p",null,"\u521b\u5efa\u4e00\u4e2a\u65b0 Token\u3002",(0,r.kt)("inlineCode",{parentName:"p"},"[token]")," \u662f\u8981\u5199\u5165\u7684\u5b9e\u9645 Token\uff0c\u7531 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s token generate")," \u751f\u6210\u3002\u5982\u679c\u6ca1\u6709\u6307\u5b9a Token\uff0c\u5c06\u751f\u6210\u4e00\u4e2a\u968f\u673a Token\u3002"),(0,r.kt)("p",null,"\u5b89\u5168\u683c\u5f0f\u7684 Token\uff08\u5305\u62ec\u96c6\u7fa4 CA \u54c8\u5e0c\uff09\u4f1a\u5199\u5165\u5230 stdout\u3002Token \u7684 secret \u90e8\u5206\u53ea\u663e\u793a\u4e00\u6b21\uff0c\u56e0\u6b64\u4f60\u9700\u8981\u4fdd\u5b58\u6b64\u547d\u4ee4\u7684\u8f93\u51fa\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--description")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6709\u5173\u5982\u4f55\u4f7f\u7528\u6b64 Token \u7684\u63cf\u8ff0")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--groups")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8be5 Token \u7528\u4e8e\u8ba4\u8bc1\u7684\u5176\u4ed6\u7ec4\uff08\u9ed8\u8ba4\u503c\uff1a\u201csystem:bootstrappers:k3s:default-node-token\u201d\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--ttl")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u81ea\u52a8\u5220\u9664 Token \u7684\u65f6\u95f4\uff08\u4f8b\u5982 1s\u30012m\u30013h\uff09\u3002\u5982\u679c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"0"),"\uff0cToken \u5c06\u6c38\u4e0d\u8fc7\u671f\uff08\u9ed8\u8ba4\u503c\uff1a24h0m0s\uff09")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--usages")," value"),(0,r.kt)("td",{parentName:"tr",align:null},'\u63cf\u8ff0\u53ef\u4f7f\u7528\u6b64 Token \u7684\u65b9\u5f0f\u3002(\u9ed8\u8ba4\u503c\uff1a"signing,authentication")')))),(0,r.kt)("h4",{id:"k3s-token-delete"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token delete")),(0,r.kt)("p",null,"\u5220\u9664\u4e00\u4e2a\u6216\u591a\u4e2a Token\u3002\u4f60\u53ef\u4ee5\u63d0\u4f9b\u5b8c\u6574\u7684 Token\uff0c\u4e5f\u53ef\u4ee5\u4ec5\u63d0\u4f9b Token ID\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")))),(0,r.kt)("h4",{id:"k3s-token-generate"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token generate")),(0,r.kt)("p",null,"\u751f\u6210\u4e00\u4e2a\u968f\u673a\u7684 Bootstrap Token\u3002"),(0,r.kt)("p",null,'\u4f60\u4e0d\u9700\u8981\u4f7f\u7528\u6b64\u547d\u4ee4\u6765\u751f\u6210 Token\u3002\u53ea\u8981\u683c\u5f0f\u4e3a "',"[a-z0-9]","{6}.","[a-z0-9]",'{16}"\uff08\u5176\u4e2d\u7b2c\u4e00\u90e8\u5206\u662f Token ID\uff0c\u7b2c\u4e8c\u90e8\u5206\u662f Secret\uff09\uff0c\u4f60\u5c31\u53ef\u4ee5\u81ea\u5df1\u8fdb\u884c\u64cd\u4f5c\u3002'),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")))),(0,r.kt)("h4",{id:"k3s-token-list"},(0,r.kt)("inlineCode",{parentName:"h4"},"k3s token list")),(0,r.kt)("p",null,"\u5217\u51fa Bootstrap Token\uff0c\u8fd9\u5c06\u663e\u793a Token \u7684 ID\u3001\u63cf\u8ff0\u548c\u5269\u4f59 TTL\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u6807\u5fd7"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--data-dir")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4fdd\u5b58\u72b6\u6001\u7684\uff08\u6570\u636e\uff09\u6587\u4ef6\u5939\uff0c\u5982\u679c\u4e0d\u662f root\uff0c\u5219\u9ed8\u8ba4\u4e3a ",(0,r.kt)("inlineCode",{parentName:"td"},"/var/lib/rancher/k3s \u6216 ${HOME}/.rancher/k3s"))),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--kubeconfig")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8981\u8fde\u63a5\u5230 ","[$KUBECONFIG]"," \u7684\uff08\u96c6\u7fa4\uff09Server")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"--output")," value"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8f93\u51fa\u683c\u5f0f\u3002\u53ef\u9009\u503c\uff1atext\u3001json\uff08\u9ed8\u8ba4\u503c\uff1a",(0,r.kt)("inlineCode",{parentName:"td"},"text"),"\uff09")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/7d5aab5d.b28fe083.js b/zh/assets/js/7d5aab5d.71b407b7.js
similarity index 99%
rename from zh/assets/js/7d5aab5d.b28fe083.js
rename to zh/assets/js/7d5aab5d.71b407b7.js
index 2c49635b1..fc5bfb375 100644
--- a/zh/assets/js/7d5aab5d.b28fe083.js
+++ b/zh/assets/js/7d5aab5d.71b407b7.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3219],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>k});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var p=r.createContext({}),o=function(e){var t=r.useContext(p),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=o(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,p=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=o(a),k=n,c=d["".concat(p,".").concat(k)]||d[k]||m[k]||l;return a?r.createElement(c,i(i({ref:t},u),{},{components:a})):r.createElement(c,i({ref:t},u))}));function k(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var p in t)hasOwnProperty.call(t,p)&&(s[p]=t[p]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var o=2;o<l;o++)i[o]=a[o];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},4799:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>s,toc:()=>o});var r=a(3117),n=(a(7294),a(3905));const l={title:"\u79bb\u7ebf\u5b89\u88c5",weight:60},i=void 0,s={unversionedId:"installation/airgap",id:"installation/airgap",title:"\u79bb\u7ebf\u5b89\u88c5",description:"\u4f60\u53ef\u4ee5\u4f7f\u7528\u4e24\u79cd\u4e0d\u540c\u7684\u65b9\u6cd5\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s\u3002\u79bb\u7ebf\u73af\u5883\u6307\u7684\u662f\u4e0d\u76f4\u63a5\u8fde\u63a5\u5230 Internet \u7684\u73af\u5883\u3002\u4f60\u53ef\u4ee5\u90e8\u7f72\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u548c mirror docker.io\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u90e8\u7f72\u955c\u50cf\uff0c\u4f8b\u5982\u7528\u4e8e\u5c0f\u578b\u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/airgap.md",sourceDirName:"installation",slug:"/installation/airgap",permalink:"/zh/installation/airgap",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u79bb\u7ebf\u5b89\u88c5",weight:60},sidebar:"mySidebar",previous:{title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",permalink:"/zh/installation/private-registry"},next:{title:"\u7ba1\u7406 Server \u89d2\u8272",permalink:"/zh/installation/server-roles"}},p={},o=[{value:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",id:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",level:2},{value:"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93 YAML",id:"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93-yaml",level:3},{value:"\u624b\u52a8\u90e8\u7f72\u955c\u50cf",id:"\u624b\u52a8\u90e8\u7f72\u955c\u50cf",level:2},{value:"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c K3s \u4e8c\u8fdb\u5236\u6587\u4ef6",id:"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c-k3s-\u4e8c\u8fdb\u5236\u6587\u4ef6",level:3},{value:"\u5b89\u88c5 K3s",id:"\u5b89\u88c5-k3s",level:2},{value:"\u5148\u51b3\u6761\u4ef6",id:"\u5148\u51b3\u6761\u4ef6",level:3},{value:"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s",id:"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5-k3s",level:3},{value:"\u5347\u7ea7",id:"\u5347\u7ea7",level:2},{value:"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5",id:"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5",level:3},{value:"\u81ea\u52a8\u5347\u7ea7",id:"\u81ea\u52a8\u5347\u7ea7",level:3}],u=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},m=u("Tabs"),d=u("TabItem"),k={toc:o};function c(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},k,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528\u4e24\u79cd\u4e0d\u540c\u7684\u65b9\u6cd5\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s\u3002\u79bb\u7ebf\u73af\u5883\u6307\u7684\u662f\u4e0d\u76f4\u63a5\u8fde\u63a5\u5230 Internet \u7684\u73af\u5883\u3002\u4f60\u53ef\u4ee5\u90e8\u7f72\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u548c mirror docker.io\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u90e8\u7f72\u955c\u50cf\uff0c\u4f8b\u5982\u7528\u4e8e\u5c0f\u578b\u96c6\u7fa4\u3002"),(0,n.kt)("h2",{id:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"),(0,n.kt)("p",null,"\u672c\u6587\u6863\u5047\u8bbe\u4f60\u5df2\u7ecf\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u521b\u5efa\u4e86\u8282\u70b9\uff0c\u5e76\u4e14\u5728\u5821\u5792\u4e3b\u673a\u4e0a\u62e5\u6709 Docker \u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u3002"),(0,n.kt)("p",null,"\u5982\u679c\u4f60\u5c1a\u672a\u8bbe\u7f6e\u79c1\u6709 Docker \u955c\u50cf\u4ed3\u5e93\uff0c\u8bf7\u53c2\u9605",(0,n.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry"},"\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,n.kt)("h3",{id:"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93-yaml"},"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93 YAML"),(0,n.kt)("p",null,"\u6309\u7167",(0,n.kt)("a",{parentName:"p",href:"/zh/installation/private-registry"},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e"),"\u6307\u5357\u521b\u5efa\u548c\u914d\u7f6e registry.yaml \u6587\u4ef6\u3002"),(0,n.kt)("p",null,"\u5b8c\u6210\u6b64\u64cd\u4f5c\u540e\uff0c\u4f60\u73b0\u5728\u53ef\u4ee5\u8f6c\u5230\u4e0b\u9762\u7684",(0,n.kt)("a",{parentName:"p",href:"#%E5%AE%89%E8%A3%85-k3s"},"\u5b89\u88c5 K3s")," \u90e8\u5206\u3002"),(0,n.kt)("h2",{id:"\u624b\u52a8\u90e8\u7f72\u955c\u50cf"},"\u624b\u52a8\u90e8\u7f72\u955c\u50cf"),(0,n.kt)("p",null,"\u6211\u4eec\u5047\u8bbe\u4f60\u5df2\u7ecf\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u521b\u5efa\u4e86\u8282\u70b9\u5e76\u4f7f\u7528 Containerd \u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6\u3002\n\u6b64\u65b9\u6cd5\u9700\u8981\u4f60\u624b\u52a8\u5c06\u5fc5\u8981\u7684\u955c\u50cf\u90e8\u7f72\u5230\u6bcf\u4e2a\u8282\u70b9\uff0c\u9002\u7528\u4e8e\u65e0\u6cd5\u8fd0\u884c\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u7684\u8fb9\u7f18\u90e8\u7f72\u3002"),(0,n.kt)("h3",{id:"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c-k3s-\u4e8c\u8fdb\u5236\u6587\u4ef6"},"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c K3s \u4e8c\u8fdb\u5236\u6587\u4ef6"),(0,n.kt)("p",null,"\u4ece ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases"},"Releases")," \u9875\u9762\u83b7\u53d6\u8981\u8fd0\u884c\u7684 K3s \u7248\u672c\u7684\u955c\u50cf tar \u6587\u4ef6\u3002"),(0,n.kt)("p",null,"\u5c06 tar \u6587\u4ef6\u653e\u5728 ",(0,n.kt)("inlineCode",{parentName:"p"},"images")," \u76ee\u5f55\u4e0b\uff0c\u4f8b\u5982\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p /var/lib/rancher/k3s/agent/images/\nsudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/\n")),(0,n.kt)("p",null,"\u5b8c\u6210\u6b64\u64cd\u4f5c\u540e\uff0c\u4f60\u73b0\u5728\u53ef\u4ee5\u8f6c\u5230\u4e0b\u9762\u7684",(0,n.kt)("a",{parentName:"p",href:"#%E5%AE%89%E8%A3%85-k3s"},"\u5b89\u88c5 K3s")," \u90e8\u5206\u3002"),(0,n.kt)("h2",{id:"\u5b89\u88c5-k3s"},"\u5b89\u88c5 K3s"),(0,n.kt)("h3",{id:"\u5148\u51b3\u6761\u4ef6"},"\u5148\u51b3\u6761\u4ef6"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"\u5728\u5b89\u88c5 K3s \u4e4b\u524d\uff0c\u5b8c\u6210\u4e0a\u9762\u7684",(0,n.kt)("a",{parentName:"li",href:"#%E7%A7%81%E6%9C%89%E9%95%9C%E5%83%8F%E4%BB%93%E5%BA%93"},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"),"\u6216",(0,n.kt)("a",{parentName:"li",href:"#%E6%89%8B%E5%8A%A8%E9%83%A8%E7%BD%B2%E9%95%9C%E5%83%8F"},"\u624b\u52a8\u90e8\u7f72\u955c\u50cf"),"\u64cd\u4f5c\uff0c\u9884\u586b\u5145 K3s \u9700\u8981\u5b89\u88c5\u7684\u955c\u50cf\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u4ece ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"Releases")," \u9875\u9762\u4e0b\u8f7d K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u8be5\u6587\u4ef6\u9700\u8981\u5339\u914d\u7528\u4e8e\u83b7\u53d6\u79bb\u7ebf\u955c\u50cf\u7684\u7248\u672c\u3002\u5c06\u4e8c\u8fdb\u5236\u6587\u4ef6\u653e\u5728\u6bcf\u4e2a\u79bb\u7ebf\u8282\u70b9\u4e0a\u7684 ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," \u4e2d\uff0c\u5e76\u786e\u4fdd\u6587\u4ef6\u662f\u53ef\u6267\u884c\u7684\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u5728 ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"get.k3s.io")," \u4e0b\u8f7d K3s \u5b89\u88c5\u811a\u672c\u3002\u5c06\u5b89\u88c5\u811a\u672c\u653e\u5728\u6bcf\u4e2a\u79bb\u7ebf\u8282\u70b9\u4e0a\u7684\u4efb\u4f55\u4f4d\u7f6e\uff0c\u5e76\u5c06\u5176\u547d\u540d\u4e3a ",(0,n.kt)("inlineCode",{parentName:"li"},"install.sh"),"\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u7684\u8282\u70b9\u6ca1\u6709\u5e26\u9ed8\u8ba4\u8def\u7531\u7684\u63a5\u53e3\uff0c\u5219\u5fc5\u987b\u914d\u7f6e\u9ed8\u8ba4\u8def\u7531\uff0c\u4f7f\u7528\u865a\u62df\u63a5\u53e3\u7684\u9ed1\u6d1e\u8def\u7531\u4e5f\u8db3\u591f\u4e86\u3002K3s \u9700\u8981\u4e00\u4e2a\u9ed8\u8ba4\u8def\u7531\u6765\u81ea\u52a8\u68c0\u6d4b\u8282\u70b9\u7684\u4e3b IP\uff0c\u5e76\u4f7f kube-proxy ClusterIP \u8def\u7531\u6b63\u5e38\u8fd0\u884c\u3002\u8981\u6dfb\u52a0\u865a\u62df\u8def\u7531\uff0c\u8bf7\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a",(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre"},"ip link add dummy0 type dummy\nip link set dummy0 up\nip addr add 169.254.255.254/31 dev dummy0\nip route add default via 169.254.255.255 dev dummy0 metric 1000\n")))),(0,n.kt)("p",null,"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD")," \u73af\u5883\u53d8\u91cf\u8fd0\u884c K3s \u811a\u672c\u65f6\uff0cK3s \u5c06\u4f7f\u7528\u811a\u672c\u7684\u672c\u5730\u7248\u672c\u548c\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002"),(0,n.kt)("h3",{id:"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5-k3s"},"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s"),(0,n.kt)("p",null,"\u4f60\u53ef\u4ee5\u5728\u4e00\u53f0\u6216\u591a\u53f0\u670d\u52a1\u5668\u4e0a\u5b89\u88c5 K3s\uff0c\u5982\u4e0b\u6240\u8ff0\u3002"),(0,n.kt)(m,{mdxType:"Tabs"},(0,n.kt)(d,{value:"\u5355\u8282\u70b9\u914d\u7f6e",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u8981\u5728\u5355\u4e2a\u670d\u52a1\u5668\u4e0a\u5b89\u88c5 K3s\uff0c\u53ea\u9700\u5728 Server \u8282\u70b9\u4e0a\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh\n")),(0,n.kt)("p",null,"\u8981\u6dfb\u52a0\u5176\u4ed6 Agent\uff0c\u8bf7\u5728\u6bcf\u4e2a Agent \u8282\u70b9\u4e0a\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\u3002"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh\n")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"Server \u7684 Token \u901a\u5e38\u4f4d\u4e8e ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"\u3002"))),(0,n.kt)(d,{value:"\u9ad8\u53ef\u7528\u914d\u7f6e",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u53c2\u8003",(0,n.kt)("a",{parentName:"p",href:"/zh/datastore/ha"},"\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528"),"\u6216",(0,n.kt)("a",{parentName:"p",href:"/zh/datastore/ha-embedded"},"\u5177\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528"),"\u6307\u5357\u3002\u4f60\u9700\u8981\u8c03\u6574\u5b89\u88c5\u547d\u4ee4\u6765\u6307\u5b9a ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),"\uff0c\u5e76\u5728\u672c\u5730\u8fd0\u884c\u5b89\u88c5\u811a\u672c\uff0c\u800c\u4e0d\u662f\u4f7f\u7528 curl\u3002\u4f60\u8fd8\u5c06\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC='args'")," \u4e3a K3s \u63d0\u4f9b\u53c2\u6570\u3002"),(0,n.kt)("p",null,"\u4f8b\u5982\uff0c\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528\u6307\u5357\u7684\u7b2c\u4e8c\u6b65\u63d0\u5230\u4e86\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,n.kt)("p",null,"\u4f60\u9700\u8981\u4fee\u6539\u6b64\u7c7b\u793a\u4f8b\uff0c\u5982\u4e0b\u6240\u793a\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\\nK3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\\n./install.sh\n")))),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"K3s \u8fd8\u4e3a kubelet \u63d0\u4f9b\u4e86\u4e00\u4e2a ",(0,n.kt)("inlineCode",{parentName:"p"},"--resolv-conf")," \u6807\u5fd7\uff0c\u6709\u52a9\u4e8e\u5728\u79bb\u7ebf\u7f51\u7edc\u4e2d\u914d\u7f6e DNS\u3002")),(0,n.kt)("h2",{id:"\u5347\u7ea7"},"\u5347\u7ea7"),(0,n.kt)("h3",{id:"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5"},"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5"),(0,n.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u5b8c\u6210\u79bb\u7ebf\u73af\u5883\u7684\u5347\u7ea7\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},"\u4ece ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"Releases")," \u9875\u9762\u4e0b\u8f7d\u8981\u5347\u7ea7\u7684 K3s \u7248\u672c\u7684\u65b0\u79bb\u7ebf\u955c\u50cf tar \u5305\u3002\u5c06 tar \u6587\u4ef6\u653e\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u7684 ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/images/")," \u76ee\u5f55\u4e2d\u3002\u5220\u9664\u65e7\u7684 tar \u6587\u4ef6\u3002"),(0,n.kt)("li",{parentName:"ol"},"\u590d\u5236\u5e76\u66ff\u6362\u6bcf\u4e2a\u8282\u70b9\u4e0a ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," \u4e2d\u7684\u65e7 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u590d\u5236 ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"K3s \u5b89\u88c5\u811a\u672c"),"\uff08\u56e0\u4e3a\u811a\u672c\u53ef\u80fd\u81ea\u4e0a\u6b21\u7248\u672c\u53d1\u5e03\u4ee5\u6765\u5df2\u66f4\u6539\uff09\u3002\u4f7f\u7528\u76f8\u540c\u7684\u73af\u5883\u53d8\u91cf\u518d\u6b21\u8fd0\u884c\u811a\u672c\u3002"),(0,n.kt)("li",{parentName:"ol"},"\u91cd\u542f K3s \u670d\u52a1\uff08\u5982\u679c\u5b89\u88c5\u7a0b\u5e8f\u6ca1\u6709\u81ea\u52a8\u91cd\u542f K3s \u7684\u8bdd\uff09\u3002")),(0,n.kt)("h3",{id:"\u81ea\u52a8\u5347\u7ea7"},"\u81ea\u52a8\u5347\u7ea7"),(0,n.kt)("p",null,"K3s \u652f\u6301",(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u3002\u8981\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u542f\u7528\u6b64\u529f\u80fd\uff0c\u4f60\u5fc5\u987b\u786e\u4fdd\u6240\u9700\u7684\u955c\u50cf\u5728\u4f60\u7684\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u4e2d\u53ef\u7528\u3002"),(0,n.kt)("p",null,"\u4f60\u5c06\u9700\u8981\u4e0e\u4f60\u6253\u7b97\u5347\u7ea7\u5230\u7684 K3s \u7248\u672c\u76f8\u5bf9\u5e94\u7684 rancher/k3s-upgrade \u7248\u672c\u3002\u6ce8\u610f\uff0c\u955c\u50cf\u6807\u7b7e\u5c06 K3s \u7248\u672c\u4e2d\u7684 ",(0,n.kt)("inlineCode",{parentName:"p"},"+")," \u66ff\u6362\u4e3a ",(0,n.kt)("inlineCode",{parentName:"p"},"-"),"\uff0c\u56e0\u4e3a Docker \u955c\u50cf\u4e0d\u652f\u6301 ",(0,n.kt)("inlineCode",{parentName:"p"},"+"),"\u3002"),(0,n.kt)("p",null,"\u4f60\u8fd8\u9700\u8981\u5728\u4f60\u8981\u90e8\u7f72\u7684 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller")," \u6e05\u5355 YAML \u4e2d\u6307\u5b9a\u7684 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller")," \u548c ",(0,n.kt)("inlineCode",{parentName:"p"},"kubectl")," \u7248\u672c\u3002\u5728",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/releases/latest"},"\u8fd9\u91cc"),"\u68c0\u67e5 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrad-controller")," \u7684\u6700\u65b0\u7248\u672c\uff0c\u5e76\u4e0b\u8f7d ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller.yaml")," \u6765\u786e\u5b9a\u4f60\u9700\u8981\u63a8\u9001\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u7684\u7248\u672c\u3002\u4f8b\u5982\uff0c\u5728 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller")," \u7684 v0.4.0 \u7248\u672c\u4e2d\uff0c\u6e05\u5355 YAML \u4e2d\u6307\u5b9a\u4e86\u8fd9\u4e9b\u955c\u50cf\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre"},"rancher/system-upgrade-controller:v0.4.0\nrancher/kubectl:v0.17.0\n")),(0,n.kt)("p",null,"\u5c06\u5fc5\u8981\u7684 rancher/k3s-upgrade\u3001rancher/system-upgrade-controller \u548c rancher/kubectl \u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u540e\uff0c\u8bf7\u6309\u7167",(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u6307\u5357\u8fdb\u884c\u64cd\u4f5c\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3219],{3905:(e,t,a)=>{a.d(t,{Zo:()=>u,kt:()=>k});var r=a(7294);function n(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function l(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),a.push.apply(a,r)}return a}function i(e){for(var t=1;t<arguments.length;t++){var a=null!=arguments[t]?arguments[t]:{};t%2?l(Object(a),!0).forEach((function(t){n(e,t,a[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(a)):l(Object(a)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(a,t))}))}return e}function s(e,t){if(null==e)return{};var a,r,n=function(e,t){if(null==e)return{};var a,r,n={},l=Object.keys(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||(n[a]=e[a]);return n}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)a=l[r],t.indexOf(a)>=0||Object.prototype.propertyIsEnumerable.call(e,a)&&(n[a]=e[a])}return n}var p=r.createContext({}),o=function(e){var t=r.useContext(p),a=t;return e&&(a="function"==typeof e?e(t):i(i({},t),e)),a},u=function(e){var t=o(e.components);return r.createElement(p.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},d=r.forwardRef((function(e,t){var a=e.components,n=e.mdxType,l=e.originalType,p=e.parentName,u=s(e,["components","mdxType","originalType","parentName"]),d=o(a),k=n,c=d["".concat(p,".").concat(k)]||d[k]||m[k]||l;return a?r.createElement(c,i(i({ref:t},u),{},{components:a})):r.createElement(c,i({ref:t},u))}));function k(e,t){var a=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var l=a.length,i=new Array(l);i[0]=d;var s={};for(var p in t)hasOwnProperty.call(t,p)&&(s[p]=t[p]);s.originalType=e,s.mdxType="string"==typeof e?e:n,i[1]=s;for(var o=2;o<l;o++)i[o]=a[o];return r.createElement.apply(null,i)}return r.createElement.apply(null,a)}d.displayName="MDXCreateElement"},4799:(e,t,a)=>{a.r(t),a.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>c,frontMatter:()=>l,metadata:()=>s,toc:()=>o});var r=a(3117),n=(a(7294),a(3905));const l={title:"\u79bb\u7ebf\u5b89\u88c5",weight:60},i=void 0,s={unversionedId:"installation/airgap",id:"installation/airgap",title:"\u79bb\u7ebf\u5b89\u88c5",description:"\u4f60\u53ef\u4ee5\u4f7f\u7528\u4e24\u79cd\u4e0d\u540c\u7684\u65b9\u6cd5\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s\u3002\u79bb\u7ebf\u73af\u5883\u6307\u7684\u662f\u4e0d\u76f4\u63a5\u8fde\u63a5\u5230 Internet \u7684\u73af\u5883\u3002\u4f60\u53ef\u4ee5\u90e8\u7f72\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u548c mirror docker.io\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u90e8\u7f72\u955c\u50cf\uff0c\u4f8b\u5982\u7528\u4e8e\u5c0f\u578b\u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/airgap.md",sourceDirName:"installation",slug:"/installation/airgap",permalink:"/zh/installation/airgap",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u79bb\u7ebf\u5b89\u88c5",weight:60},sidebar:"mySidebar",previous:{title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",permalink:"/zh/installation/private-registry"},next:{title:"\u7ba1\u7406 Server \u89d2\u8272",permalink:"/zh/installation/server-roles"}},p={},o=[{value:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",id:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93",level:2},{value:"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93 YAML",id:"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93-yaml",level:3},{value:"\u624b\u52a8\u90e8\u7f72\u955c\u50cf",id:"\u624b\u52a8\u90e8\u7f72\u955c\u50cf",level:2},{value:"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c K3s \u4e8c\u8fdb\u5236\u6587\u4ef6",id:"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c-k3s-\u4e8c\u8fdb\u5236\u6587\u4ef6",level:3},{value:"\u5b89\u88c5 K3s",id:"\u5b89\u88c5-k3s",level:2},{value:"\u5148\u51b3\u6761\u4ef6",id:"\u5148\u51b3\u6761\u4ef6",level:3},{value:"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s",id:"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5-k3s",level:3},{value:"\u5347\u7ea7",id:"\u5347\u7ea7",level:2},{value:"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5",id:"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5",level:3},{value:"\u81ea\u52a8\u5347\u7ea7",id:"\u81ea\u52a8\u5347\u7ea7",level:3}],u=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},m=u("Tabs"),d=u("TabItem"),k={toc:o};function c(e){let{components:t,...a}=e;return(0,n.kt)("wrapper",(0,r.Z)({},k,a,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528\u4e24\u79cd\u4e0d\u540c\u7684\u65b9\u6cd5\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s\u3002\u79bb\u7ebf\u73af\u5883\u6307\u7684\u662f\u4e0d\u76f4\u63a5\u8fde\u63a5\u5230 Internet \u7684\u73af\u5883\u3002\u4f60\u53ef\u4ee5\u90e8\u7f72\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u548c mirror docker.io\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u90e8\u7f72\u955c\u50cf\uff0c\u4f8b\u5982\u7528\u4e8e\u5c0f\u578b\u96c6\u7fa4\u3002"),(0,n.kt)("h2",{id:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"),(0,n.kt)("p",null,"\u672c\u6587\u6863\u5047\u8bbe\u4f60\u5df2\u7ecf\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u521b\u5efa\u4e86\u8282\u70b9\uff0c\u5e76\u4e14\u5728\u5821\u5792\u4e3b\u673a\u4e0a\u62e5\u6709 Docker \u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u3002"),(0,n.kt)("p",null,"\u5982\u679c\u4f60\u5c1a\u672a\u8bbe\u7f6e\u79c1\u6709 Docker \u955c\u50cf\u4ed3\u5e93\uff0c\u8bf7\u53c2\u9605",(0,n.kt)("a",{parentName:"p",href:"https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry"},"\u5b98\u65b9\u6587\u6863"),"\u3002"),(0,n.kt)("h3",{id:"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93-yaml"},"\u521b\u5efa\u955c\u50cf\u4ed3\u5e93 YAML"),(0,n.kt)("p",null,"\u6309\u7167",(0,n.kt)("a",{parentName:"p",href:"/zh/installation/private-registry"},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e"),"\u6307\u5357\u521b\u5efa\u548c\u914d\u7f6e registry.yaml \u6587\u4ef6\u3002"),(0,n.kt)("p",null,"\u5b8c\u6210\u6b64\u64cd\u4f5c\u540e\uff0c\u4f60\u73b0\u5728\u53ef\u4ee5\u8f6c\u5230\u4e0b\u9762\u7684",(0,n.kt)("a",{parentName:"p",href:"#%E5%AE%89%E8%A3%85-k3s"},"\u5b89\u88c5 K3s")," \u90e8\u5206\u3002"),(0,n.kt)("h2",{id:"\u624b\u52a8\u90e8\u7f72\u955c\u50cf"},"\u624b\u52a8\u90e8\u7f72\u955c\u50cf"),(0,n.kt)("p",null,"\u6211\u4eec\u5047\u8bbe\u4f60\u5df2\u7ecf\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u521b\u5efa\u4e86\u8282\u70b9\u5e76\u4f7f\u7528 Containerd \u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6\u3002\n\u6b64\u65b9\u6cd5\u9700\u8981\u4f60\u624b\u52a8\u5c06\u5fc5\u8981\u7684\u955c\u50cf\u90e8\u7f72\u5230\u6bcf\u4e2a\u8282\u70b9\uff0c\u9002\u7528\u4e8e\u65e0\u6cd5\u8fd0\u884c\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u7684\u8fb9\u7f18\u90e8\u7f72\u3002"),(0,n.kt)("h3",{id:"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c-k3s-\u4e8c\u8fdb\u5236\u6587\u4ef6"},"\u51c6\u5907\u955c\u50cf\u76ee\u5f55\u548c K3s \u4e8c\u8fdb\u5236\u6587\u4ef6"),(0,n.kt)("p",null,"\u4ece ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases"},"Releases")," \u9875\u9762\u83b7\u53d6\u8981\u8fd0\u884c\u7684 K3s \u7248\u672c\u7684\u955c\u50cf tar \u6587\u4ef6\u3002"),(0,n.kt)("p",null,"\u5c06 tar \u6587\u4ef6\u653e\u5728 ",(0,n.kt)("inlineCode",{parentName:"p"},"images")," \u76ee\u5f55\u4e0b\uff0c\u4f8b\u5982\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p /var/lib/rancher/k3s/agent/images/\nsudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/\n")),(0,n.kt)("p",null,"\u5b8c\u6210\u6b64\u64cd\u4f5c\u540e\uff0c\u4f60\u73b0\u5728\u53ef\u4ee5\u8f6c\u5230\u4e0b\u9762\u7684",(0,n.kt)("a",{parentName:"p",href:"#%E5%AE%89%E8%A3%85-k3s"},"\u5b89\u88c5 K3s")," \u90e8\u5206\u3002"),(0,n.kt)("h2",{id:"\u5b89\u88c5-k3s"},"\u5b89\u88c5 K3s"),(0,n.kt)("h3",{id:"\u5148\u51b3\u6761\u4ef6"},"\u5148\u51b3\u6761\u4ef6"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"\u5728\u5b89\u88c5 K3s \u4e4b\u524d\uff0c\u5b8c\u6210\u4e0a\u9762\u7684",(0,n.kt)("a",{parentName:"li",href:"#%E7%A7%81%E6%9C%89%E9%95%9C%E5%83%8F%E4%BB%93%E5%BA%93"},"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93"),"\u6216",(0,n.kt)("a",{parentName:"li",href:"#%E6%89%8B%E5%8A%A8%E9%83%A8%E7%BD%B2%E9%95%9C%E5%83%8F"},"\u624b\u52a8\u90e8\u7f72\u955c\u50cf"),"\u64cd\u4f5c\uff0c\u9884\u586b\u5145 K3s \u9700\u8981\u5b89\u88c5\u7684\u955c\u50cf\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u4ece ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"Releases")," \u9875\u9762\u4e0b\u8f7d K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u8be5\u6587\u4ef6\u9700\u8981\u5339\u914d\u7528\u4e8e\u83b7\u53d6\u79bb\u7ebf\u955c\u50cf\u7684\u7248\u672c\u3002\u5c06\u4e8c\u8fdb\u5236\u6587\u4ef6\u653e\u5728\u6bcf\u4e2a\u79bb\u7ebf\u8282\u70b9\u4e0a\u7684 ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," \u4e2d\uff0c\u5e76\u786e\u4fdd\u6587\u4ef6\u662f\u53ef\u6267\u884c\u7684\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u5728 ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"get.k3s.io")," \u4e0b\u8f7d K3s \u5b89\u88c5\u811a\u672c\u3002\u5c06\u5b89\u88c5\u811a\u672c\u653e\u5728\u6bcf\u4e2a\u79bb\u7ebf\u8282\u70b9\u4e0a\u7684\u4efb\u4f55\u4f4d\u7f6e\uff0c\u5e76\u5c06\u5176\u547d\u540d\u4e3a ",(0,n.kt)("inlineCode",{parentName:"li"},"install.sh"),"\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u5982\u679c\u4f60\u7684\u8282\u70b9\u6ca1\u6709\u5e26\u9ed8\u8ba4\u8def\u7531\u7684\u63a5\u53e3\uff0c\u5219\u5fc5\u987b\u914d\u7f6e\u9ed8\u8ba4\u8def\u7531\uff0c\u4f7f\u7528\u865a\u62df\u63a5\u53e3\u7684\u9ed1\u6d1e\u8def\u7531\u4e5f\u8db3\u591f\u4e86\u3002K3s \u9700\u8981\u4e00\u4e2a\u9ed8\u8ba4\u8def\u7531\u6765\u81ea\u52a8\u68c0\u6d4b\u8282\u70b9\u7684\u4e3b IP\uff0c\u5e76\u4f7f kube-proxy ClusterIP \u8def\u7531\u6b63\u5e38\u8fd0\u884c\u3002\u8981\u6dfb\u52a0\u865a\u62df\u8def\u7531\uff0c\u8bf7\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a",(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre"},"ip link add dummy0 type dummy\nip link set dummy0 up\nip addr add 169.254.255.254/31 dev dummy0\nip route add default via 169.254.255.255 dev dummy0 metric 1000\n")))),(0,n.kt)("p",null,"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD")," \u73af\u5883\u53d8\u91cf\u8fd0\u884c K3s \u811a\u672c\u65f6\uff0cK3s \u5c06\u4f7f\u7528\u811a\u672c\u7684\u672c\u5730\u7248\u672c\u548c\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002"),(0,n.kt)("h3",{id:"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5-k3s"},"\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u5b89\u88c5 K3s"),(0,n.kt)("p",null,"\u4f60\u53ef\u4ee5\u5728\u4e00\u53f0\u6216\u591a\u53f0\u670d\u52a1\u5668\u4e0a\u5b89\u88c5 K3s\uff0c\u5982\u4e0b\u6240\u8ff0\u3002"),(0,n.kt)(m,{mdxType:"Tabs"},(0,n.kt)(d,{value:"\u5355\u8282\u70b9\u914d\u7f6e",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u8981\u5728\u5355\u4e2a\u670d\u52a1\u5668\u4e0a\u5b89\u88c5 K3s\uff0c\u53ea\u9700\u5728 Server \u8282\u70b9\u4e0a\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh\n")),(0,n.kt)("p",null,"\u8981\u6dfb\u52a0\u5176\u4ed6 Agent\uff0c\u8bf7\u5728\u6bcf\u4e2a Agent \u8282\u70b9\u4e0a\u6267\u884c\u4ee5\u4e0b\u64cd\u4f5c\u3002"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh\n")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"Server \u7684 Token \u901a\u5e38\u4f4d\u4e8e ",(0,n.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token"),"\u3002"))),(0,n.kt)(d,{value:"\u9ad8\u53ef\u7528\u914d\u7f6e",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u53c2\u8003",(0,n.kt)("a",{parentName:"p",href:"/zh/datastore/ha"},"\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528"),"\u6216",(0,n.kt)("a",{parentName:"p",href:"/zh/datastore/ha-embedded"},"\u5177\u6709\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528"),"\u6307\u5357\u3002\u4f60\u9700\u8981\u8c03\u6574\u5b89\u88c5\u547d\u4ee4\u6765\u6307\u5b9a ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_DOWNLOAD=true"),"\uff0c\u5e76\u5728\u672c\u5730\u8fd0\u884c\u5b89\u88c5\u811a\u672c\uff0c\u800c\u4e0d\u662f\u4f7f\u7528 curl\u3002\u4f60\u8fd8\u5c06\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC='args'")," \u4e3a K3s \u63d0\u4f9b\u53c2\u6570\u3002"),(0,n.kt)("p",null,"\u4f8b\u5982\uff0c\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528\u6307\u5357\u7684\u7b2c\u4e8c\u6b65\u63d0\u5230\u4e86\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,n.kt)("p",null,"\u4f60\u9700\u8981\u4fee\u6539\u6b64\u7c7b\u793a\u4f8b\uff0c\u5982\u4e0b\u6240\u793a\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\\nK3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\\n./install.sh\n")))),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"K3s \u8fd8\u4e3a kubelet \u63d0\u4f9b\u4e86\u4e00\u4e2a ",(0,n.kt)("inlineCode",{parentName:"p"},"--resolv-conf")," \u6807\u5fd7\uff0c\u6709\u52a9\u4e8e\u5728\u79bb\u7ebf\u7f51\u7edc\u4e2d\u914d\u7f6e DNS\u3002")),(0,n.kt)("h2",{id:"\u5347\u7ea7"},"\u5347\u7ea7"),(0,n.kt)("h3",{id:"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5"},"\u5b89\u88c5\u811a\u672c\u65b9\u6cd5"),(0,n.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u65b9\u5f0f\u5b8c\u6210\u79bb\u7ebf\u73af\u5883\u7684\u5347\u7ea7\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},"\u4ece ",(0,n.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"Releases")," \u9875\u9762\u4e0b\u8f7d\u8981\u5347\u7ea7\u7684 K3s \u7248\u672c\u7684\u65b0\u79bb\u7ebf\u955c\u50cf tar \u5305\u3002\u5c06 tar \u6587\u4ef6\u653e\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u7684 ",(0,n.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/images/")," \u76ee\u5f55\u4e2d\u3002\u5220\u9664\u65e7\u7684 tar \u6587\u4ef6\u3002"),(0,n.kt)("li",{parentName:"ol"},"\u590d\u5236\u5e76\u66ff\u6362\u6bcf\u4e2a\u8282\u70b9\u4e0a ",(0,n.kt)("inlineCode",{parentName:"li"},"/usr/local/bin")," \u4e2d\u7684\u65e7 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u590d\u5236 ",(0,n.kt)("a",{parentName:"li",href:"https://get.k3s.io"},"K3s \u5b89\u88c5\u811a\u672c"),"\uff08\u56e0\u4e3a\u811a\u672c\u53ef\u80fd\u81ea\u4e0a\u6b21\u7248\u672c\u53d1\u5e03\u4ee5\u6765\u5df2\u66f4\u6539\uff09\u3002\u4f7f\u7528\u76f8\u540c\u7684\u73af\u5883\u53d8\u91cf\u518d\u6b21\u8fd0\u884c\u811a\u672c\u3002"),(0,n.kt)("li",{parentName:"ol"},"\u91cd\u542f K3s \u670d\u52a1\uff08\u5982\u679c\u5b89\u88c5\u7a0b\u5e8f\u6ca1\u6709\u81ea\u52a8\u91cd\u542f K3s \u7684\u8bdd\uff09\u3002")),(0,n.kt)("h3",{id:"\u81ea\u52a8\u5347\u7ea7"},"\u81ea\u52a8\u5347\u7ea7"),(0,n.kt)("p",null,"K3s \u652f\u6301",(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u3002\u8981\u5728\u79bb\u7ebf\u73af\u5883\u4e2d\u542f\u7528\u6b64\u529f\u80fd\uff0c\u4f60\u5fc5\u987b\u786e\u4fdd\u6240\u9700\u7684\u955c\u50cf\u5728\u4f60\u7684\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u4e2d\u53ef\u7528\u3002"),(0,n.kt)("p",null,"\u4f60\u5c06\u9700\u8981\u4e0e\u4f60\u6253\u7b97\u5347\u7ea7\u5230\u7684 K3s \u7248\u672c\u76f8\u5bf9\u5e94\u7684 rancher/k3s-upgrade \u7248\u672c\u3002\u6ce8\u610f\uff0c\u955c\u50cf\u6807\u7b7e\u5c06 K3s \u7248\u672c\u4e2d\u7684 ",(0,n.kt)("inlineCode",{parentName:"p"},"+")," \u66ff\u6362\u4e3a ",(0,n.kt)("inlineCode",{parentName:"p"},"-"),"\uff0c\u56e0\u4e3a Docker \u955c\u50cf\u4e0d\u652f\u6301 ",(0,n.kt)("inlineCode",{parentName:"p"},"+"),"\u3002"),(0,n.kt)("p",null,"\u4f60\u8fd8\u9700\u8981\u5728\u4f60\u8981\u90e8\u7f72\u7684 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller")," \u6e05\u5355 YAML \u4e2d\u6307\u5b9a\u7684 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller")," \u548c ",(0,n.kt)("inlineCode",{parentName:"p"},"kubectl")," \u7248\u672c\u3002\u5728",(0,n.kt)("a",{parentName:"p",href:"https://github.com/rancher/system-upgrade-controller/releases/latest"},"\u8fd9\u91cc"),"\u68c0\u67e5 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrad-controller")," \u7684\u6700\u65b0\u7248\u672c\uff0c\u5e76\u4e0b\u8f7d ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller.yaml")," \u6765\u786e\u5b9a\u4f60\u9700\u8981\u63a8\u9001\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u7684\u7248\u672c\u3002\u4f8b\u5982\uff0c\u5728 ",(0,n.kt)("inlineCode",{parentName:"p"},"system-upgrade-controller")," \u7684 v0.4.0 \u7248\u672c\u4e2d\uff0c\u6e05\u5355 YAML \u4e2d\u6307\u5b9a\u4e86\u8fd9\u4e9b\u955c\u50cf\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre"},"rancher/system-upgrade-controller:v0.4.0\nrancher/kubectl:v0.17.0\n")),(0,n.kt)("p",null,"\u5c06\u5fc5\u8981\u7684 rancher/k3s-upgrade\u3001rancher/system-upgrade-controller \u548c rancher/kubectl \u955c\u50cf\u6dfb\u52a0\u5230\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u540e\uff0c\u8bf7\u6309\u7167",(0,n.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u6307\u5357\u8fdb\u884c\u64cd\u4f5c\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/811e87f8.d34d0249.js b/zh/assets/js/811e87f8.3ca75874.js
similarity index 99%
rename from zh/assets/js/811e87f8.d34d0249.js
rename to zh/assets/js/811e87f8.3ca75874.js
index 963c5d89c..ac845ec0f 100644
--- a/zh/assets/js/811e87f8.d34d0249.js
+++ b/zh/assets/js/811e87f8.3ca75874.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4143],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},d=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(t),m=r,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||i;return t?a.createElement(k,s(s({ref:n},u),{},{components:t})):a.createElement(k,s({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,s=new Array(i);s[0]=d;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var c=2;c<i;c++)s[c]=t[c];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}d.displayName="MDXCreateElement"},7223:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const i={title:"CIS Hardening Guide",weight:80},s=void 0,o={unversionedId:"security/hardening-guide",id:"security/hardening-guide",title:"CIS Hardening Guide",description:"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/hardening-guide.md",sourceDirName:"security",slug:"/security/hardening-guide",permalink:"/zh/security/hardening-guide",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"CIS Hardening Guide",weight:80},sidebar:"mySidebar",previous:{title:"Secret \u52a0\u5bc6",permalink:"/zh/security/secrets-encryption"},next:{title:"CIS Self Assessment Guide",permalink:"/zh/security/self-assessment"}},l={},c=[{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set",id:"ensure-protect-kernel-defaults-is-set",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:4},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security",id:"pod-security",level:3},{value:"NetworkPolicies",id:"networkpolicies",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Configuration for Kubernetes Components",id:"configuration-for-kubernetes-components",level:2},{value:"Control Plane Execution and Arguments",id:"control-plane-execution-and-arguments",level:2},{value:"Known Issues",id:"known-issues",level:2},{value:"Control 1.2.15",id:"control-1215",level:3},{value:"Control 1.2.16",id:"control-1216",level:3},{value:"Control 1.2.22",id:"control-1222",level:3},{value:"Control 1.2.23",id:"control-1223",level:3},{value:"Control 1.2.24",id:"control-1224",level:3},{value:"Control 1.2.25",id:"control-1225",level:3},{value:"Control 1.2.26",id:"control-1226",level:3},{value:"Control 1.2.27",id:"control-1227",level:3},{value:"Control 1.2.33",id:"control-1233",level:3},{value:"Control 1.2.34",id:"control-1234",level:3},{value:"Control 1.3.1",id:"control-131",level:3},{value:"Control 3.2.1",id:"control-321",level:3},{value:"Control 4.2.7",id:"control-427",level:3},{value:"Control 5.1.5",id:"control-515",level:3},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=u("Tabs"),d=u("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002")),(0,r.kt)("p",null,"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."),(0,r.kt)("p",null,"K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"K3s will not modify the host operating system. Any host-level modifications will need to be done manually."),(0,r.kt)("li",{parentName:"ol"},"Certain CIS policy controls for ",(0,r.kt)("inlineCode",{parentName:"li"},"NetworkPolicies")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityStandards")," (",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicies")," on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.")),(0,r.kt)("p",null,"The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary."),(0,r.kt)("h2",{id:"host-level-requirements"},"Host-level Requirements"),(0,r.kt)("p",null,"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section."),(0,r.kt)("h3",{id:"ensure-protect-kernel-defaults-is-set"},"Ensure ",(0,r.kt)("inlineCode",{parentName:"h3"},"protect-kernel-defaults")," is set"),(0,r.kt)("p",null,"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults."),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," ",(0,r.kt)("inlineCode",{parentName:"p"},"protect-kernel-defaults")," is exposed as a top-level flag for K3s.")),(0,r.kt)("h4",{id:"set-kernel-parameters"},"Set kernel parameters"),(0,r.kt)("p",null,"Create a file called ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/sysctl.d/90-kubelet.conf")," and add the snippet below. Then run ",(0,r.kt)("inlineCode",{parentName:"p"},"sysctl -p /etc/sysctl.d/90-kubelet.conf"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"vm.panic_on_oom=0\nvm.overcommit_memory=1\nkernel.panic=10\nkernel.panic_on_oops=1\nkernel.keys.root_maxbytes=25000000\n")),(0,r.kt)("h2",{id:"kubernetes-runtime-requirements"},"Kubernetes Runtime Requirements"),(0,r.kt)("p",null,"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section."),(0,r.kt)("p",null,"By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurity")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," admission controllers enabled, among others."),(0,r.kt)("h3",{id:"pod-security"},"Pod Security"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.25 and newer support ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/"},"Pod Security Admissions (PSAs)")," for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n')),(0,r.kt)("p",null,"The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"psa.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. "),(0,r.kt)("p",null,"Here is an example of a compliant PSA:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system]\n'))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.24 and older support ",(0,r.kt)("a",{parentName:"p",href:"https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/"},"Pod Security Policies (PSPs)")," for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="enable-admission-plugins=NodeRestriction,PodSecurityPolicy"\n')),(0,r.kt)("p",null,"This will have the effect of maintaining the ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," plugin as well as enabling the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy"),". "),(0,r.kt)("p",null,"When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark."),(0,r.kt)("p",null,"Here is an example of a compliant PSP:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false                # CIS - 5.2.1\n  allowPrivilegeEscalation: false  # CIS - 5.2.5\n  requiredDropCapabilities:        # CIS - 5.2.7/8/9\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false               # CIS - 5.2.4\n  hostIPC: false                   # CIS - 5.2.3\n  hostPID: false                   # CIS - 5.2.2\n  runAsUser:\n    rule: 'MustRunAsNonRoot'       # CIS - 5.2.6\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n")),(0,r.kt)("p",null,'For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a "system unrestricted policy" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.'),(0,r.kt)("p",null,"Combining the configuration above with the ",(0,r.kt)("a",{parentName:"p",href:"#networkpolicies"},"Network Policy")," described in the next section, a single file can be placed in the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory. Here is an example of a ",(0,r.kt)("inlineCode",{parentName:"p"},"policy.yaml")," file: "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false\n  allowPrivilegeEscalation: false\n  requiredDropCapabilities:\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false\n  hostIPC: false\n  hostPID: false\n  runAsUser:\n    rule: 'MustRunAsNonRoot'\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: system-unrestricted-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: true\n  allowedCapabilities:\n  - '*'\n  fsGroup:\n    rule: RunAsAny\n  hostIPC: true\n  hostNetwork: true\n  hostPID: true\n  hostPorts:\n  - max: 65535\n    min: 0\n  privileged: true\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n  volumes:\n  - '*'\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: svclb-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: false\n  allowedCapabilities:\n  - NET_ADMIN\n  allowedUnsafeSysctls:\n  - net.ipv4.ip_forward\n  - net.ipv6.conf.all.forwarding\n  fsGroup:\n    rule: RunAsAny\n  hostPorts:\n  - max: 65535\n    min: 0\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:restricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  verbs:\n  - use\n  resourceNames:\n  - restricted-psp\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:system-unrestricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - system-unrestricted-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:svclb-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - svclb-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: default:restricted-psp\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:restricted-psp\nsubjects:\n- kind: Group\n  name: system:authenticated\n  apiGroup: rbac.authorization.k8s.io\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: system-unrestricted-node-psp-rolebinding\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: system-unrestricted-svc-acct-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:serviceaccounts\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: svclb-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:svclb-psp\nsubjects:\n- kind: ServiceAccount\n  name: svclb\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: default\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: default\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-public\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-public\n")))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.")),(0,r.kt)("h3",{id:"networkpolicies"},"NetworkPolicies"),(0,r.kt)("p",null,"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods."),(0,r.kt)("p",null,"Network policies should be placed the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory, where they will automatically be deployed on startup."),(0,r.kt)("p",null,"Here is an example of a compliant network policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"kind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n")),(0,r.kt)("p",null,"With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: default-network-dns-policy\n  namespace: <NAMESPACE>\nspec:\n  ingress:\n  - ports:\n    - port: 53\n      protocol: TCP\n    - port: 53\n      protocol: UDP\n  podSelector:\n    matchLabels:\n      k8s-app: kube-dns\n  policyTypes:\n  - Ingress\n")),(0,r.kt)("p",null,"The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.21 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v121-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app.kubernetes.io/name: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n"))),(0,r.kt)(d,{value:"v1.20 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v120-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n")))),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Operators must manage network policies as normal for additional namespaces that are created.")),(0,r.kt)("h3",{id:"api-server-audit-configuration"},"API Server audit configuration"),(0,r.kt)("p",null,"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment."),(0,r.kt)("p",null,"The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs\n")),(0,r.kt)("p",null,"A starter audit policy to log request metadata is provided below. The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"audit.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. Detailed information about policy configuration for the API server can be found in the Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/debug-application-cluster/audit/"},"documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: audit.k8s.io/v1\nkind: Policy\nrules:\n- level: Metadata\n")),(0,r.kt)("p",null,"Both configurations must be passed as arguments to the API Server as:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"--kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n--kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n")),(0,r.kt)("p",null,"If the configurations are created after K3s is installed, they must be added to K3s' systemd service in ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ExecStart=/usr/local/bin/k3s \\\n    server \\\n    '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\\n    '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\\n")),(0,r.kt)("p",null,"K3s must be restarted to load the new configuration."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo systemctl daemon-reload\nsudo systemctl restart k3s.service\n")),(0,r.kt)("h2",{id:"configuration-for-kubernetes-components"},"Configuration for Kubernetes Components"),(0,r.kt)("p",null,"The configuration below should be placed in the ",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#configuration-file"},"configuration file"),", and contains all the necessary remediations to harden the Kubernetes components."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n"))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")))),(0,r.kt)("h2",{id:"control-plane-execution-and-arguments"},"Control Plane Execution and Arguments"),(0,r.kt)("p",null,"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-apiserver \n    --advertise-port=6443 \n    --allow-privileged=true \n    --anonymous-auth=false                                                            # 1.2.1\n    --api-audiences=unknown \n    --authorization-mode=Node,RBAC \n    --bind-address=127.0.0.1 \n    --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs\n    --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt                    # 1.2.31\n    --enable-admission-plugins=NodeRestriction,PodSecurityPolicy                      # 1.2.17\n    --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  # 1.2.32\n    --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt                   # 1.2.29\n    --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key                    # 1.2.29\n    --etcd-servers=https://127.0.0.1:2379 \n    --insecure-port=0                                                                 # 1.2.19\n    --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt \n    --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt \n    --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key \n    --profiling=false                                                                 # 1.2.21\n    --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt \n    --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key \n    --requestheader-allowed-names=system:auth-proxy \n    --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt \n    --requestheader-extra-headers-prefix=X-Remote-Extra- \n    --requestheader-group-headers=X-Remote-Group \n    --requestheader-username-headers=X-Remote-User \n    --secure-port=6444                                                                # 1.2.20\n    --service-account-issuer=k3s \n    --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key            # 1.2.28\n    --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key \n    --service-cluster-ip-range=10.43.0.0/16 \n    --storage-backend=etcd3 \n    --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        # 1.2.30\n    --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30\n    --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-controller-manager \n    --address=127.0.0.1 \n    --allocate-node-cidrs=true \n    --bind-address=127.0.0.1                                                       # 1.3.7\n    --cluster-cidr=10.42.0.0/16 \n    --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt \n    --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key \n    --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig \n    --port=10252 \n    --profiling=false                                                              # 1.3.2\n    --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt                   # 1.3.5\n    --secure-port=0 \n    --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 \n    --use-service-account-credentials=true                                         # 1.3.3\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-scheduler \n    --address=127.0.0.1 \n    --bind-address=127.0.0.1                                              # 1.4.2\n    --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig \n    --port=10251 \n    --profiling=false                                                     # 1.4.1\n    --secure-port=0\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubelet \n    --address=0.0.0.0 \n    --anonymous-auth=false                                                # 4.2.1\n    --authentication-token-webhook=true \n    --authorization-mode=Webhook                                          # 4.2.2\n    --cgroup-driver=cgroupfs \n    --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt             # 4.2.3\n    --cloud-provider=external \n    --cluster-dns=10.43.0.10 \n    --cluster-domain=cluster.local \n    --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin \n    --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d \n    --container-runtime-endpoint=/run/k3s/containerd/containerd.sock \n    --container-runtime=remote \n    --containerd=/run/k3s/containerd/containerd.sock \n    --eviction-hard=imagefs.available<5%,nodefs.available<5% \n    --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% \n    --fail-swap-on=false \n    --healthz-bind-address=127.0.0.1 \n    --hostname-override=hostname01 \n    --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig \n    --kubelet-cgroups=/systemd/system.slice \n    --node-labels= \n    --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests \n    --protect-kernel-defaults=true                                        # 4.2.6\n    --read-only-port=0                                                    # 4.2.4\n    --resolv-conf=/run/systemd/resolve/resolv.conf \n    --runtime-cgroups=/systemd/system.slice \n    --serialize-image-pulls=false \n    --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt        # 4.2.10\n    --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10\n")),(0,r.kt)("p",null,"Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below."),(0,r.kt)("h2",{id:"known-issues"},"Known Issues"),(0,r.kt)("p",null,"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s."),(0,r.kt)("h3",{id:"control-1215"},"Control 1.2.15"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"NamespaceLifecycle")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1216"},"Control 1.2.16"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1222"},"Control 1.2.22"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-path")," argument is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1223"},"Control 1.2.23"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxage")," argument is set to 30 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1224"},"Control 1.2.24"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxbackup")," argument is set to 10 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1225"},"Control 1.2.25"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxsize")," argument is set to 100 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1226"},"Control 1.2.26"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--request-timeout")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1227"},"Control 1.2.27"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--service-account-lookup")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1233"},"Control 1.2.33"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--encryption-provider-config")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.",(0,r.kt)("p",null,"Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/zh/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-1234"},"Control 1.2.34"),(0,r.kt)("p",null,"Ensure that encryption providers are appropriately configured."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.",(0,r.kt)("p",null,"This can be remediated by passing a valid configuration to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/zh/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-131"},"Control 1.3.1"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--terminated-pod-gc-threshold")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-321"},"Control 3.2.1"),(0,r.kt)("p",null,"Ensure that a minimal audit policy is created."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Logging is an important detective control for all systems, to detect potential unauthorized access.",(0,r.kt)("p",null,"This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.")),(0,r.kt)("h3",{id:"control-427"},"Control 4.2.7"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--make-iptables-util-chains")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-515"},"Control 5.1.5"),(0,r.kt)("p",null,"Ensure that default service accounts are not actively used"),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.",(0,r.kt)("p",null,"Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account."),(0,r.kt)("p",null,"The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments."),(0,r.kt)("p",null,"This can be remediated by updating the ",(0,r.kt)("inlineCode",{parentName:"p"},"automountServiceAccountToken")," field to ",(0,r.kt)("inlineCode",{parentName:"p"},"false")," for the ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service account in each namespace."),(0,r.kt)("p",null,"For ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service accounts in the built-in namespaces (",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-public"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-node-lease"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"default"),"), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.")),(0,r.kt)("h2",{id:"conclusion"},"Conclusion"),(0,r.kt)("p",null,"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the ",(0,r.kt)("a",{parentName:"p",href:"/zh/security/self-assessment"},"CIS Benchmark Self-Assessment Guide")," to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4143],{3905:(e,n,t)=>{t.d(n,{Zo:()=>u,kt:()=>m});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function s(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var l=a.createContext({}),c=function(e){var n=a.useContext(l),t=n;return e&&(t="function"==typeof e?e(n):s(s({},n),e)),t},u=function(e){var n=c(e.components);return a.createElement(l.Provider,{value:n},e.children)},p={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},d=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,l=e.parentName,u=o(e,["components","mdxType","originalType","parentName"]),d=c(t),m=r,k=d["".concat(l,".").concat(m)]||d[m]||p[m]||i;return t?a.createElement(k,s(s({ref:n},u),{},{components:t})):a.createElement(k,s({ref:n},u))}));function m(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,s=new Array(i);s[0]=d;var o={};for(var l in n)hasOwnProperty.call(n,l)&&(o[l]=n[l]);o.originalType=e,o.mdxType="string"==typeof e?e:r,s[1]=o;for(var c=2;c<i;c++)s[c]=t[c];return a.createElement.apply(null,s)}return a.createElement.apply(null,t)}d.displayName="MDXCreateElement"},7223:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>l,contentTitle:()=>s,default:()=>k,frontMatter:()=>i,metadata:()=>o,toc:()=>c});var a=t(3117),r=(t(7294),t(3905));const i={title:"CIS Hardening Guide",weight:80},s=void 0,o={unversionedId:"security/hardening-guide",id:"security/hardening-guide",title:"CIS Hardening Guide",description:"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/hardening-guide.md",sourceDirName:"security",slug:"/security/hardening-guide",permalink:"/zh/security/hardening-guide",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"CIS Hardening Guide",weight:80},sidebar:"mySidebar",previous:{title:"Secret \u52a0\u5bc6",permalink:"/zh/security/secrets-encryption"},next:{title:"CIS Self Assessment Guide",permalink:"/zh/security/self-assessment"}},l={},c=[{value:"Host-level Requirements",id:"host-level-requirements",level:2},{value:"Ensure <code>protect-kernel-defaults</code> is set",id:"ensure-protect-kernel-defaults-is-set",level:3},{value:"Set kernel parameters",id:"set-kernel-parameters",level:4},{value:"Kubernetes Runtime Requirements",id:"kubernetes-runtime-requirements",level:2},{value:"Pod Security",id:"pod-security",level:3},{value:"NetworkPolicies",id:"networkpolicies",level:3},{value:"API Server audit configuration",id:"api-server-audit-configuration",level:3},{value:"Configuration for Kubernetes Components",id:"configuration-for-kubernetes-components",level:2},{value:"Control Plane Execution and Arguments",id:"control-plane-execution-and-arguments",level:2},{value:"Known Issues",id:"known-issues",level:2},{value:"Control 1.2.15",id:"control-1215",level:3},{value:"Control 1.2.16",id:"control-1216",level:3},{value:"Control 1.2.22",id:"control-1222",level:3},{value:"Control 1.2.23",id:"control-1223",level:3},{value:"Control 1.2.24",id:"control-1224",level:3},{value:"Control 1.2.25",id:"control-1225",level:3},{value:"Control 1.2.26",id:"control-1226",level:3},{value:"Control 1.2.27",id:"control-1227",level:3},{value:"Control 1.2.33",id:"control-1233",level:3},{value:"Control 1.2.34",id:"control-1234",level:3},{value:"Control 1.3.1",id:"control-131",level:3},{value:"Control 3.2.1",id:"control-321",level:3},{value:"Control 4.2.7",id:"control-427",level:3},{value:"Control 5.1.5",id:"control-515",level:3},{value:"Conclusion",id:"conclusion",level:2}],u=e=>function(n){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",n)},p=u("Tabs"),d=u("TabItem"),m={toc:c};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},m,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002")),(0,r.kt)("p",null,"This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS)."),(0,r.kt)("p",null,"K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"K3s will not modify the host operating system. Any host-level modifications will need to be done manually."),(0,r.kt)("li",{parentName:"ol"},"Certain CIS policy controls for ",(0,r.kt)("inlineCode",{parentName:"li"},"NetworkPolicies")," and ",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityStandards")," (",(0,r.kt)("inlineCode",{parentName:"li"},"PodSecurityPolicies")," on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.")),(0,r.kt)("p",null,"The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary."),(0,r.kt)("h2",{id:"host-level-requirements"},"Host-level Requirements"),(0,r.kt)("p",null,"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section."),(0,r.kt)("h3",{id:"ensure-protect-kernel-defaults-is-set"},"Ensure ",(0,r.kt)("inlineCode",{parentName:"h3"},"protect-kernel-defaults")," is set"),(0,r.kt)("p",null,"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults."),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," ",(0,r.kt)("inlineCode",{parentName:"p"},"protect-kernel-defaults")," is exposed as a top-level flag for K3s.")),(0,r.kt)("h4",{id:"set-kernel-parameters"},"Set kernel parameters"),(0,r.kt)("p",null,"Create a file called ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/sysctl.d/90-kubelet.conf")," and add the snippet below. Then run ",(0,r.kt)("inlineCode",{parentName:"p"},"sysctl -p /etc/sysctl.d/90-kubelet.conf"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"vm.panic_on_oom=0\nvm.overcommit_memory=1\nkernel.panic=10\nkernel.panic_on_oops=1\nkernel.keys.root_maxbytes=25000000\n")),(0,r.kt)("h2",{id:"kubernetes-runtime-requirements"},"Kubernetes Runtime Requirements"),(0,r.kt)("p",null,"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section."),(0,r.kt)("p",null,"By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurity")," and ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," admission controllers enabled, among others."),(0,r.kt)("h3",{id:"pod-security"},"Pod Security"),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.25 and newer support ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/security/pod-security-admission/"},"Pod Security Admissions (PSAs)")," for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml"\n')),(0,r.kt)("p",null,"The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"psa.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. "),(0,r.kt)("p",null,"Here is an example of a compliant PSA:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: apiserver.config.k8s.io/v1\nkind: AdmissionConfiguration\nplugins:\n- name: PodSecurity\n  configuration:\n    apiVersion: pod-security.admission.config.k8s.io/v1beta1\n    kind: PodSecurityConfiguration\n    defaults:\n      enforce: "restricted"\n      enforce-version: "latest"\n      audit: "restricted"\n      audit-version: "latest"\n      warn: "restricted"\n      warn-version: "latest"\n    exemptions:\n      usernames: []\n      runtimeClasses: []\n      namespaces: [kube-system, cis-operator-system]\n'))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"K3s v1.24 and older support ",(0,r.kt)("a",{parentName:"p",href:"https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/"},"Pod Security Policies (PSPs)")," for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},'--kube-apiserver-arg="enable-admission-plugins=NodeRestriction,PodSecurityPolicy"\n')),(0,r.kt)("p",null,"This will have the effect of maintaining the ",(0,r.kt)("inlineCode",{parentName:"p"},"NodeRestriction")," plugin as well as enabling the ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy"),". "),(0,r.kt)("p",null,"When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark."),(0,r.kt)("p",null,"Here is an example of a compliant PSP:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false                # CIS - 5.2.1\n  allowPrivilegeEscalation: false  # CIS - 5.2.5\n  requiredDropCapabilities:        # CIS - 5.2.7/8/9\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false               # CIS - 5.2.4\n  hostIPC: false                   # CIS - 5.2.3\n  hostPID: false                   # CIS - 5.2.2\n  runAsUser:\n    rule: 'MustRunAsNonRoot'       # CIS - 5.2.6\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n")),(0,r.kt)("p",null,'For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a "system unrestricted policy" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.'),(0,r.kt)("p",null,"Combining the configuration above with the ",(0,r.kt)("a",{parentName:"p",href:"#networkpolicies"},"Network Policy")," described in the next section, a single file can be placed in the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory. Here is an example of a ",(0,r.kt)("inlineCode",{parentName:"p"},"policy.yaml")," file: "),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: restricted-psp\nspec:\n  privileged: false\n  allowPrivilegeEscalation: false\n  requiredDropCapabilities:\n    - ALL\n  volumes:\n    - 'configMap'\n    - 'emptyDir'\n    - 'projected'\n    - 'secret'\n    - 'downwardAPI'\n    - 'csi'\n    - 'persistentVolumeClaim'\n    - 'ephemeral'\n  hostNetwork: false\n  hostIPC: false\n  hostPID: false\n  runAsUser:\n    rule: 'MustRunAsNonRoot'\n  seLinux:\n    rule: 'RunAsAny'\n  supplementalGroups:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  fsGroup:\n    rule: 'MustRunAs'\n    ranges:\n      - min: 1\n        max: 65535\n  readOnlyRootFilesystem: false\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: system-unrestricted-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: true\n  allowedCapabilities:\n  - '*'\n  fsGroup:\n    rule: RunAsAny\n  hostIPC: true\n  hostNetwork: true\n  hostPID: true\n  hostPorts:\n  - max: 65535\n    min: 0\n  privileged: true\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n  volumes:\n  - '*'\n---\napiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n  name: svclb-psp\n  annotations:\n    seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*'\nspec:\n  allowPrivilegeEscalation: false\n  allowedCapabilities:\n  - NET_ADMIN\n  allowedUnsafeSysctls:\n  - net.ipv4.ip_forward\n  - net.ipv6.conf.all.forwarding\n  fsGroup:\n    rule: RunAsAny\n  hostPorts:\n  - max: 65535\n    min: 0\n  runAsUser:\n    rule: RunAsAny\n  seLinux:\n    rule: RunAsAny\n  supplementalGroups:\n    rule: RunAsAny\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:restricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  verbs:\n  - use\n  resourceNames:\n  - restricted-psp\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:system-unrestricted-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - system-unrestricted-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n  name: psp:svclb-psp\nrules:\n- apiGroups:\n  - policy\n  resources:\n  - podsecuritypolicies\n  resourceNames:\n  - svclb-psp\n  verbs:\n  - use\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: default:restricted-psp\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:restricted-psp\nsubjects:\n- kind: Group\n  name: system:authenticated\n  apiGroup: rbac.authorization.k8s.io\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: system-unrestricted-node-psp-rolebinding\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:nodes\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: system-unrestricted-svc-acct-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:system-unrestricted-psp\nsubjects:\n- apiGroup: rbac.authorization.k8s.io\n  kind: Group\n  name: system:serviceaccounts\n---\napiVersion: rbac.authorization.k8s.io/v1\nkind: RoleBinding\nmetadata:\n  name: svclb-psp-rolebinding\n  namespace: kube-system\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: psp:svclb-psp\nsubjects:\n- kind: ServiceAccount\n  name: svclb\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: default\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: default\n---\nkind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-public\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-public\n")))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"Note:")," The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.")),(0,r.kt)("h3",{id:"networkpolicies"},"NetworkPolicies"),(0,r.kt)("p",null,"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods."),(0,r.kt)("p",null,"Network policies should be placed the ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," directory, where they will automatically be deployed on startup."),(0,r.kt)("p",null,"Here is an example of a compliant network policy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"kind: NetworkPolicy\napiVersion: networking.k8s.io/v1\nmetadata:\n  name: intra-namespace\n  namespace: kube-system\nspec:\n  podSelector: {}\n  ingress:\n    - from:\n      - namespaceSelector:\n          matchLabels:\n            name: kube-system\n")),(0,r.kt)("p",null,"With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: default-network-dns-policy\n  namespace: <NAMESPACE>\nspec:\n  ingress:\n  - ports:\n    - port: 53\n      protocol: TCP\n    - port: 53\n      protocol: UDP\n  podSelector:\n    matchLabels:\n      k8s-app: kube-dns\n  policyTypes:\n  - Ingress\n")),(0,r.kt)("p",null,"The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.21 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v121-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app.kubernetes.io/name: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n"))),(0,r.kt)(d,{value:"v1.20 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-metrics-server\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      k8s-app: metrics-server\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-svclbtraefik-ingress\n  namespace: kube-system\nspec:\n  podSelector: \n    matchLabels:\n      svccontroller.k3s.cattle.io/svcname: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\napiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n  name: allow-all-traefik-v120-ingress\n  namespace: kube-system\nspec:\n  podSelector:\n    matchLabels:\n      app: traefik\n  ingress:\n  - {}\n  policyTypes:\n  - Ingress\n---\n\n")))),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"Operators must manage network policies as normal for additional namespaces that are created.")),(0,r.kt)("h3",{id:"api-server-audit-configuration"},"API Server audit configuration"),(0,r.kt)("p",null,"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment."),(0,r.kt)("p",null,"The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs\n")),(0,r.kt)("p",null,"A starter audit policy to log request metadata is provided below. The policy should be written to a file named ",(0,r.kt)("inlineCode",{parentName:"p"},"audit.yaml")," in ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server")," directory. Detailed information about policy configuration for the API server can be found in the Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/debug-application-cluster/audit/"},"documentation"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: audit.k8s.io/v1\nkind: Policy\nrules:\n- level: Metadata\n")),(0,r.kt)("p",null,"Both configurations must be passed as arguments to the API Server as:"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"--kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n--kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n")),(0,r.kt)("p",null,"If the configurations are created after K3s is installed, they must be added to K3s' systemd service in ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service"),"."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ExecStart=/usr/local/bin/k3s \\\n    server \\\n    '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\\n    '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\\n")),(0,r.kt)("p",null,"K3s must be restarted to load the new configuration."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo systemctl daemon-reload\nsudo systemctl restart k3s.service\n")),(0,r.kt)("h2",{id:"configuration-for-kubernetes-components"},"Configuration for Kubernetes Components"),(0,r.kt)("p",null,"The configuration below should be placed in the ",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#configuration-file"},"configuration file"),", and contains all the necessary remediations to harden the Kubernetes components."),(0,r.kt)(p,{mdxType:"Tabs"},(0,r.kt)(d,{value:"v1.25 and Newer",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n"))),(0,r.kt)(d,{value:"v1.24 and Older",default:!0,mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"protect-kernel-defaults: true\nsecrets-encryption: true\nkube-apiserver-arg:\n  - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount'\n  - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log'\n  - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml'\n  - 'audit-log-maxage=30'\n  - 'audit-log-maxbackup=10'\n  - 'audit-log-maxsize=100'\n  - 'request-timeout=300s'\n  - 'service-account-lookup=true'\nkube-controller-manager-arg:\n  - 'terminated-pod-gc-threshold=10'\n  - 'use-service-account-credentials=true'\nkubelet-arg:\n  - 'streaming-connection-idle-timeout=5m'\n  - 'make-iptables-util-chains=true'\n")))),(0,r.kt)("h2",{id:"control-plane-execution-and-arguments"},"Control Plane Execution and Arguments"),(0,r.kt)("p",null,"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy."),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-apiserver \n    --advertise-port=6443 \n    --allow-privileged=true \n    --anonymous-auth=false                                                            # 1.2.1\n    --api-audiences=unknown \n    --authorization-mode=Node,RBAC \n    --bind-address=127.0.0.1 \n    --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs\n    --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt                    # 1.2.31\n    --enable-admission-plugins=NodeRestriction,PodSecurityPolicy                      # 1.2.17\n    --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  # 1.2.32\n    --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt                   # 1.2.29\n    --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key                    # 1.2.29\n    --etcd-servers=https://127.0.0.1:2379 \n    --insecure-port=0                                                                 # 1.2.19\n    --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt \n    --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt \n    --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key \n    --profiling=false                                                                 # 1.2.21\n    --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt \n    --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key \n    --requestheader-allowed-names=system:auth-proxy \n    --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt \n    --requestheader-extra-headers-prefix=X-Remote-Extra- \n    --requestheader-group-headers=X-Remote-Group \n    --requestheader-username-headers=X-Remote-User \n    --secure-port=6444                                                                # 1.2.20\n    --service-account-issuer=k3s \n    --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key            # 1.2.28\n    --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key \n    --service-cluster-ip-range=10.43.0.0/16 \n    --storage-backend=etcd3 \n    --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        # 1.2.30\n    --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30\n    --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-controller-manager \n    --address=127.0.0.1 \n    --allocate-node-cidrs=true \n    --bind-address=127.0.0.1                                                       # 1.3.7\n    --cluster-cidr=10.42.0.0/16 \n    --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt \n    --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key \n    --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig \n    --port=10252 \n    --profiling=false                                                              # 1.3.2\n    --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt                   # 1.3.5\n    --secure-port=0 \n    --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 \n    --use-service-account-credentials=true                                         # 1.3.3\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kube-scheduler \n    --address=127.0.0.1 \n    --bind-address=127.0.0.1                                              # 1.4.2\n    --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig \n    --port=10251 \n    --profiling=false                                                     # 1.4.1\n    --secure-port=0\n")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"kubelet \n    --address=0.0.0.0 \n    --anonymous-auth=false                                                # 4.2.1\n    --authentication-token-webhook=true \n    --authorization-mode=Webhook                                          # 4.2.2\n    --cgroup-driver=cgroupfs \n    --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt             # 4.2.3\n    --cloud-provider=external \n    --cluster-dns=10.43.0.10 \n    --cluster-domain=cluster.local \n    --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin \n    --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d \n    --container-runtime-endpoint=/run/k3s/containerd/containerd.sock \n    --container-runtime=remote \n    --containerd=/run/k3s/containerd/containerd.sock \n    --eviction-hard=imagefs.available<5%,nodefs.available<5% \n    --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% \n    --fail-swap-on=false \n    --healthz-bind-address=127.0.0.1 \n    --hostname-override=hostname01 \n    --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig \n    --kubelet-cgroups=/systemd/system.slice \n    --node-labels= \n    --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests \n    --protect-kernel-defaults=true                                        # 4.2.6\n    --read-only-port=0                                                    # 4.2.4\n    --resolv-conf=/run/systemd/resolve/resolv.conf \n    --runtime-cgroups=/systemd/system.slice \n    --serialize-image-pulls=false \n    --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt        # 4.2.10\n    --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10\n")),(0,r.kt)("p",null,"Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below."),(0,r.kt)("h2",{id:"known-issues"},"Known Issues"),(0,r.kt)("p",null,"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s."),(0,r.kt)("h3",{id:"control-1215"},"Control 1.2.15"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"NamespaceLifecycle")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1216"},"Control 1.2.16"),(0,r.kt)("p",null,"Ensure that the admission control plugin ",(0,r.kt)("inlineCode",{parentName:"p"},"PodSecurityPolicy")," is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"enable-admission-plugins=")," and pass that to  ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1222"},"Control 1.2.22"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-path")," argument is set."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1223"},"Control 1.2.23"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxage")," argument is set to 30 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1224"},"Control 1.2.24"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxbackup")," argument is set to 10 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1225"},"Control 1.2.25"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--audit-log-maxsize")," argument is set to 100 or as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1226"},"Control 1.2.26"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--request-timeout")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1227"},"Control 1.2.27"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--service-account-lookup")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-1233"},"Control 1.2.33"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--encryption-provider-config")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.",(0,r.kt)("p",null,"Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/zh/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-1234"},"Control 1.2.34"),(0,r.kt)("p",null,"Ensure that encryption providers are appropriately configured."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.",(0,r.kt)("p",null,"This can be remediated by passing a valid configuration to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in ",(0,r.kt)("a",{parentName:"p",href:"/zh/security/secrets-encryption"},"Secrets Encryption"),".")),(0,r.kt)("h3",{id:"control-131"},"Control 1.3.1"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--terminated-pod-gc-threshold")," argument is set as appropriate."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-321"},"Control 3.2.1"),(0,r.kt)("p",null,"Ensure that a minimal audit policy is created."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Logging is an important detective control for all systems, to detect potential unauthorized access.",(0,r.kt)("p",null,"This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.")),(0,r.kt)("h3",{id:"control-427"},"Control 4.2.7"),(0,r.kt)("p",null,"Ensure that the ",(0,r.kt)("inlineCode",{parentName:"p"},"--make-iptables-util-chains")," argument is set to true."),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.",(0,r.kt)("p",null,"This can be remediated by passing this argument as a value to the ",(0,r.kt)("inlineCode",{parentName:"p"},"--kube-apiserver-arg=")," argument to ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server"),". An example can be found below.")),(0,r.kt)("h3",{id:"control-515"},"Control 5.1.5"),(0,r.kt)("p",null,"Ensure that default service accounts are not actively used"),(0,r.kt)("details",null,(0,r.kt)("summary",null,"Rationale"),"Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.",(0,r.kt)("p",null,"Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account."),(0,r.kt)("p",null,"The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments."),(0,r.kt)("p",null,"This can be remediated by updating the ",(0,r.kt)("inlineCode",{parentName:"p"},"automountServiceAccountToken")," field to ",(0,r.kt)("inlineCode",{parentName:"p"},"false")," for the ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service account in each namespace."),(0,r.kt)("p",null,"For ",(0,r.kt)("inlineCode",{parentName:"p"},"default")," service accounts in the built-in namespaces (",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-public"),", ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-node-lease"),", and ",(0,r.kt)("inlineCode",{parentName:"p"},"default"),"), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.")),(0,r.kt)("h2",{id:"conclusion"},"Conclusion"),(0,r.kt)("p",null,"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the ",(0,r.kt)("a",{parentName:"p",href:"/zh/security/self-assessment"},"CIS Benchmark Self-Assessment Guide")," to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster."))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/8443.6e4145c7.js b/zh/assets/js/8443.6e4145c7.js
new file mode 100644
index 000000000..0fac7051d
--- /dev/null
+++ b/zh/assets/js/8443.6e4145c7.js
@@ -0,0 +1,2 @@
+/*! For license information please see 8443.6e4145c7.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8443],{8443:(t,e,n)=>{"use strict";t.exports=n(295)},1228:(t,e,n)=>{"use strict";var i=n(2856),s={wrapper:{position:"relative",display:"inline-block"},hint:{position:"absolute",top:"0",left:"0",borderColor:"transparent",boxShadow:"none",opacity:"1"},input:{position:"relative",verticalAlign:"top",backgroundColor:"transparent"},inputWithNoHint:{position:"relative",verticalAlign:"top"},dropdown:{position:"absolute",top:"100%",left:"0",zIndex:"100",display:"none"},suggestions:{display:"block"},suggestion:{whiteSpace:"nowrap",cursor:"pointer"},suggestionChild:{whiteSpace:"normal"},ltr:{left:"0",right:"auto"},rtl:{left:"auto",right:"0"},defaultClasses:{root:"algolia-autocomplete",prefix:"aa",noPrefix:!1,dropdownMenu:"dropdown-menu",input:"input",hint:"hint",suggestions:"suggestions",suggestion:"suggestion",cursor:"cursor",dataset:"dataset",empty:"empty"},appendTo:{wrapper:{position:"absolute",zIndex:"100",display:"none"},input:{},inputWithNoHint:{},dropdown:{display:"block"}}};i.isMsie()&&i.mixin(s.input,{backgroundImage:"url(data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)"}),i.isMsie()&&i.isMsie()<=7&&i.mixin(s.input,{marginTop:"-1px"}),t.exports=s},9050:(t,e,n)=>{"use strict";var i="aaDataset",s="aaValue",r="aaDatum",o=n(2856),a=n(4910),u=n(3561),c=n(1228),l=n(3109);function h(t){var e;(t=t||{}).templates=t.templates||{},t.source||o.error("missing source"),t.name&&(e=t.name,!/^[_a-zA-Z0-9-]+$/.test(e))&&o.error("invalid dataset name: "+t.name),this.query=null,this._isEmpty=!0,this.highlight=!!t.highlight,this.name=void 0===t.name||null===t.name?o.getUniqueId():t.name,this.source=t.source,this.displayFn=function(t){return t=t||"value",o.isFunction(t)?t:e;function e(e){return e[t]}}(t.display||t.displayKey),this.debounce=t.debounce,this.cache=!1!==t.cache,this.templates=function(t,e){return{empty:t.empty&&o.templatify(t.empty),header:t.header&&o.templatify(t.header),footer:t.footer&&o.templatify(t.footer),suggestion:t.suggestion||n};function n(t){return"<p>"+e(t)+"</p>"}}(t.templates,this.displayFn),this.css=o.mixin({},c,t.appendTo?c.appendTo:{}),this.cssClasses=t.cssClasses=o.mixin({},c.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix||o.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix);var n=o.className(this.cssClasses.prefix,this.cssClasses.dataset);this.$el=t.$menu&&t.$menu.find(n+"-"+this.name).length>0?a.element(t.$menu.find(n+"-"+this.name)[0]):a.element(u.dataset.replace("%CLASS%",this.name).replace("%PREFIX%",this.cssClasses.prefix).replace("%DATASET%",this.cssClasses.dataset)),this.$menu=t.$menu,this.clearCachedSuggestions()}h.extractDatasetName=function(t){return a.element(t).data(i)},h.extractValue=function(t){return a.element(t).data(s)},h.extractDatum=function(t){var e=a.element(t).data(r);return"string"==typeof e&&(e=JSON.parse(e)),e},o.mixin(h.prototype,l,{_render:function(t,e){if(this.$el){var n,c=this,l=[].slice.call(arguments,2);if(this.$el.empty(),n=e&&e.length,this._isEmpty=!n,!n&&this.templates.empty)this.$el.html(h.apply(this,l)).prepend(c.templates.header?f.apply(this,l):null).append(c.templates.footer?d.apply(this,l):null);else if(n)this.$el.html(p.apply(this,l)).prepend(c.templates.header?f.apply(this,l):null).append(c.templates.footer?d.apply(this,l):null);else if(e&&!Array.isArray(e))throw new TypeError("suggestions must be an array");this.$menu&&this.$menu.addClass(this.cssClasses.prefix+(n?"with":"without")+"-"+this.name).removeClass(this.cssClasses.prefix+(n?"without":"with")+"-"+this.name),this.trigger("rendered",t)}function h(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!0}].concat(e),c.templates.empty.apply(this,e)}function p(){var t,n,l=[].slice.call(arguments,0),h=this,p=u.suggestions.replace("%PREFIX%",this.cssClasses.prefix).replace("%SUGGESTIONS%",this.cssClasses.suggestions);return t=a.element(p).css(this.css.suggestions),n=o.map(e,f),t.append.apply(t,n),t;function f(t){var e,n=u.suggestion.replace("%PREFIX%",h.cssClasses.prefix).replace("%SUGGESTION%",h.cssClasses.suggestion);return(e=a.element(n).attr({role:"option",id:["option",Math.floor(1e8*Math.random())].join("-")}).append(c.templates.suggestion.apply(this,[t].concat(l)))).data(i,c.name),e.data(s,c.displayFn(t)||void 0),e.data(r,JSON.stringify(t)),e.children().each((function(){a.element(this).css(h.css.suggestionChild)})),e}}function f(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!n}].concat(e),c.templates.header.apply(this,e)}function d(){var e=[].slice.call(arguments,0);return e=[{query:t,isEmpty:!n}].concat(e),c.templates.footer.apply(this,e)}},getRoot:function(){return this.$el},update:function(t){function e(e){if(!this.canceled&&t===this.query){var n=[].slice.call(arguments,1);this.cacheSuggestions(t,e,n),this._render.apply(this,[t,e].concat(n))}}if(this.query=t,this.canceled=!1,this.shouldFetchFromCache(t))e.apply(this,[this.cachedSuggestions].concat(this.cachedRenderExtraArgs));else{var n=this,i=function(){n.canceled||n.source(t,e.bind(n))};if(this.debounce){clearTimeout(this.debounceTimeout),this.debounceTimeout=setTimeout((function(){n.debounceTimeout=null,i()}),this.debounce)}else i()}},cacheSuggestions:function(t,e,n){this.cachedQuery=t,this.cachedSuggestions=e,this.cachedRenderExtraArgs=n},shouldFetchFromCache:function(t){return this.cache&&this.cachedQuery===t&&this.cachedSuggestions&&this.cachedSuggestions.length},clearCachedSuggestions:function(){delete this.cachedQuery,delete this.cachedSuggestions,delete this.cachedRenderExtraArgs},cancel:function(){this.canceled=!0},clear:function(){this.$el&&(this.cancel(),this.$el.empty(),this.trigger("rendered",""))},isEmpty:function(){return this._isEmpty},destroy:function(){this.clearCachedSuggestions(),this.$el=null}}),t.exports=h},3354:(t,e,n)=>{"use strict";var i=n(2856),s=n(4910),r=n(3109),o=n(9050),a=n(1228);function u(t){var e,n,r,o=this;(t=t||{}).menu||i.error("menu is required"),i.isArray(t.datasets)||i.isObject(t.datasets)||i.error("1 or more datasets required"),t.datasets||i.error("datasets is required"),this.isOpen=!1,this.isEmpty=!0,this.minLength=t.minLength||0,this.templates={},this.appendTo=t.appendTo||!1,this.css=i.mixin({},a,t.appendTo?a.appendTo:{}),this.cssClasses=t.cssClasses=i.mixin({},a.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix||i.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix),e=i.bind(this._onSuggestionClick,this),n=i.bind(this._onSuggestionMouseEnter,this),r=i.bind(this._onSuggestionMouseLeave,this);var c=i.className(this.cssClasses.prefix,this.cssClasses.suggestion);this.$menu=s.element(t.menu).on("mouseenter.aa",c,n).on("mouseleave.aa",c,r).on("click.aa",c,e),this.$container=t.appendTo?t.wrapper:this.$menu,t.templates&&t.templates.header&&(this.templates.header=i.templatify(t.templates.header),this.$menu.prepend(this.templates.header())),t.templates&&t.templates.empty&&(this.templates.empty=i.templatify(t.templates.empty),this.$empty=s.element('<div class="'+i.className(this.cssClasses.prefix,this.cssClasses.empty,!0)+'"></div>'),this.$menu.append(this.$empty),this.$empty.hide()),this.datasets=i.map(t.datasets,(function(e){return function(t,e,n){return new u.Dataset(i.mixin({$menu:t,cssClasses:n},e))}(o.$menu,e,t.cssClasses)})),i.each(this.datasets,(function(t){var e=t.getRoot();e&&0===e.parent().length&&o.$menu.append(e),t.onSync("rendered",o._onRendered,o)})),t.templates&&t.templates.footer&&(this.templates.footer=i.templatify(t.templates.footer),this.$menu.append(this.templates.footer()));var l=this;s.element(window).resize((function(){l._redraw()}))}i.mixin(u.prototype,r,{_onSuggestionClick:function(t){this.trigger("suggestionClicked",s.element(t.currentTarget))},_onSuggestionMouseEnter:function(t){var e=s.element(t.currentTarget);if(!e.hasClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0))){this._removeCursor();var n=this;setTimeout((function(){n._setCursor(e,!1)}),0)}},_onSuggestionMouseLeave:function(t){if(t.relatedTarget&&s.element(t.relatedTarget).closest("."+i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).length>0)return;this._removeCursor(),this.trigger("cursorRemoved")},_onRendered:function(t,e){if(this.isEmpty=i.every(this.datasets,(function(t){return t.isEmpty()})),this.isEmpty)if(e.length>=this.minLength&&this.trigger("empty"),this.$empty)if(e.length<this.minLength)this._hide();else{var n=this.templates.empty({query:this.datasets[0]&&this.datasets[0].query});this.$empty.html(n),this.$empty.show(),this._show()}else i.any(this.datasets,(function(t){return t.templates&&t.templates.empty}))?e.length<this.minLength?this._hide():this._show():this._hide();else this.isOpen&&(this.$empty&&(this.$empty.empty(),this.$empty.hide()),e.length>=this.minLength?this._show():this._hide());this.trigger("datasetRendered")},_hide:function(){this.$container.hide()},_show:function(){this.$container.css("display","block"),this._redraw(),this.trigger("shown")},_redraw:function(){this.isOpen&&this.appendTo&&this.trigger("redrawn")},_getSuggestions:function(){return this.$menu.find(i.className(this.cssClasses.prefix,this.cssClasses.suggestion))},_getCursor:function(){return this.$menu.find(i.className(this.cssClasses.prefix,this.cssClasses.cursor)).first()},_setCursor:function(t,e){t.first().addClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).attr("aria-selected","true"),this.trigger("cursorMoved",e)},_removeCursor:function(){this._getCursor().removeClass(i.className(this.cssClasses.prefix,this.cssClasses.cursor,!0)).removeAttr("aria-selected")},_moveCursor:function(t){var e,n,i,s;this.isOpen&&(n=this._getCursor(),e=this._getSuggestions(),this._removeCursor(),-1!==(i=((i=e.index(n)+t)+1)%(e.length+1)-1)?(i<-1&&(i=e.length-1),this._setCursor(s=e.eq(i),!0),this._ensureVisible(s)):this.trigger("cursorRemoved"))},_ensureVisible:function(t){var e,n,i,s;n=(e=t.position().top)+t.height()+parseInt(t.css("margin-top"),10)+parseInt(t.css("margin-bottom"),10),i=this.$menu.scrollTop(),s=this.$menu.height()+parseInt(this.$menu.css("padding-top"),10)+parseInt(this.$menu.css("padding-bottom"),10),e<0?this.$menu.scrollTop(i+e):s<n&&this.$menu.scrollTop(i+(n-s))},close:function(){this.isOpen&&(this.isOpen=!1,this._removeCursor(),this._hide(),this.trigger("closed"))},open:function(){this.isOpen||(this.isOpen=!0,this.isEmpty||this._show(),this.trigger("opened"))},setLanguageDirection:function(t){this.$menu.css("ltr"===t?this.css.ltr:this.css.rtl)},moveCursorUp:function(){this._moveCursor(-1)},moveCursorDown:function(){this._moveCursor(1)},getDatumForSuggestion:function(t){var e=null;return t.length&&(e={raw:o.extractDatum(t),value:o.extractValue(t),datasetName:o.extractDatasetName(t)}),e},getCurrentCursor:function(){return this._getCursor().first()},getDatumForCursor:function(){return this.getDatumForSuggestion(this._getCursor().first())},getDatumForTopSuggestion:function(){return this.getDatumForSuggestion(this._getSuggestions().first())},cursorTopSuggestion:function(){this._setCursor(this._getSuggestions().first(),!1)},update:function(t){i.each(this.datasets,(function(e){e.update(t)}))},empty:function(){i.each(this.datasets,(function(t){t.clear()})),this.isEmpty=!0},isVisible:function(){return this.isOpen&&!this.isEmpty},destroy:function(){this.$menu.off(".aa"),this.$menu=null,i.each(this.datasets,(function(t){t.destroy()}))}}),u.Dataset=o,t.exports=u},50:(t,e,n)=>{"use strict";var i=n(2856),s=n(4910);function r(t){t&&t.el||i.error("EventBus initialized without el"),this.$el=s.element(t.el)}i.mixin(r.prototype,{trigger:function(t,e,n,s){var r=i.Event("autocomplete:"+t);return this.$el.trigger(r,[e,n,s]),r}}),t.exports=r},3109:(t,e,n)=>{"use strict";var i=n(624),s=/\s+/;function r(t,e,n,i){var r;if(!n)return this;for(e=e.split(s),n=i?function(t,e){return t.bind?t.bind(e):function(){t.apply(e,[].slice.call(arguments,0))}}(n,i):n,this._callbacks=this._callbacks||{};r=e.shift();)this._callbacks[r]=this._callbacks[r]||{sync:[],async:[]},this._callbacks[r][t].push(n);return this}function o(t,e,n){return function(){for(var i,s=0,r=t.length;!i&&s<r;s+=1)i=!1===t[s].apply(e,n);return!i}}t.exports={onSync:function(t,e,n){return r.call(this,"sync",t,e,n)},onAsync:function(t,e,n){return r.call(this,"async",t,e,n)},off:function(t){var e;if(!this._callbacks)return this;t=t.split(s);for(;e=t.shift();)delete this._callbacks[e];return this},trigger:function(t){var e,n,r,a,u;if(!this._callbacks)return this;t=t.split(s),r=[].slice.call(arguments,1);for(;(e=t.shift())&&(n=this._callbacks[e]);)a=o(n.sync,this,[e].concat(r)),u=o(n.async,this,[e].concat(r)),a()&&i(u);return this}}},3561:t=>{"use strict";t.exports={wrapper:'<span class="%ROOT%"></span>',dropdown:'<span class="%PREFIX%%DROPDOWN_MENU%"></span>',dataset:'<div class="%PREFIX%%DATASET%-%CLASS%"></div>',suggestions:'<span class="%PREFIX%%SUGGESTIONS%"></span>',suggestion:'<div class="%PREFIX%%SUGGESTION%"></div>'}},2534:(t,e,n)=>{"use strict";var i;i={9:"tab",27:"esc",37:"left",39:"right",13:"enter",38:"up",40:"down"};var s=n(2856),r=n(4910),o=n(3109);function a(t){var e,n,o,a,u,c=this;(t=t||{}).input||s.error("input is missing"),e=s.bind(this._onBlur,this),n=s.bind(this._onFocus,this),o=s.bind(this._onKeydown,this),a=s.bind(this._onInput,this),this.$hint=r.element(t.hint),this.$input=r.element(t.input).on("blur.aa",e).on("focus.aa",n).on("keydown.aa",o),0===this.$hint.length&&(this.setHint=this.getHint=this.clearHint=this.clearHintIfInvalid=s.noop),s.isMsie()?this.$input.on("keydown.aa keypress.aa cut.aa paste.aa",(function(t){i[t.which||t.keyCode]||s.defer(s.bind(c._onInput,c,t))})):this.$input.on("input.aa",a),this.query=this.$input.val(),this.$overflowHelper=(u=this.$input,r.element('<pre aria-hidden="true"></pre>').css({position:"absolute",visibility:"hidden",whiteSpace:"pre",fontFamily:u.css("font-family"),fontSize:u.css("font-size"),fontStyle:u.css("font-style"),fontVariant:u.css("font-variant"),fontWeight:u.css("font-weight"),wordSpacing:u.css("word-spacing"),letterSpacing:u.css("letter-spacing"),textIndent:u.css("text-indent"),textRendering:u.css("text-rendering"),textTransform:u.css("text-transform")}).insertAfter(u))}function u(t){return t.altKey||t.ctrlKey||t.metaKey||t.shiftKey}a.normalizeQuery=function(t){return(t||"").replace(/^\s*/g,"").replace(/\s{2,}/g," ")},s.mixin(a.prototype,o,{_onBlur:function(){this.resetInputValue(),this.$input.removeAttr("aria-activedescendant"),this.trigger("blurred")},_onFocus:function(){this.trigger("focused")},_onKeydown:function(t){var e=i[t.which||t.keyCode];this._managePreventDefault(e,t),e&&this._shouldTrigger(e,t)&&this.trigger(e+"Keyed",t)},_onInput:function(){this._checkInputValue()},_managePreventDefault:function(t,e){var n,i,s;switch(t){case"tab":i=this.getHint(),s=this.getInputValue(),n=i&&i!==s&&!u(e);break;case"up":case"down":n=!u(e);break;default:n=!1}n&&e.preventDefault()},_shouldTrigger:function(t,e){var n;if("tab"===t)n=!u(e);else n=!0;return n},_checkInputValue:function(){var t,e,n,i,s;t=this.getInputValue(),i=t,s=this.query,n=!(!(e=a.normalizeQuery(i)===a.normalizeQuery(s))||!this.query)&&this.query.length!==t.length,this.query=t,e?n&&this.trigger("whitespaceChanged",this.query):this.trigger("queryChanged",this.query)},focus:function(){this.$input.focus()},blur:function(){this.$input.blur()},getQuery:function(){return this.query},setQuery:function(t){this.query=t},getInputValue:function(){return this.$input.val()},setInputValue:function(t,e){void 0===t&&(t=this.query),this.$input.val(t),e?this.clearHint():this._checkInputValue()},expand:function(){this.$input.attr("aria-expanded","true")},collapse:function(){this.$input.attr("aria-expanded","false")},setActiveDescendant:function(t){this.$input.attr("aria-activedescendant",t)},removeActiveDescendant:function(){this.$input.removeAttr("aria-activedescendant")},resetInputValue:function(){this.setInputValue(this.query,!0)},getHint:function(){return this.$hint.val()},setHint:function(t){this.$hint.val(t)},clearHint:function(){this.setHint("")},clearHintIfInvalid:function(){var t,e,n;n=(t=this.getInputValue())!==(e=this.getHint())&&0===e.indexOf(t),""!==t&&n&&!this.hasOverflow()||this.clearHint()},getLanguageDirection:function(){return(this.$input.css("direction")||"ltr").toLowerCase()},hasOverflow:function(){var t=this.$input.width()-2;return this.$overflowHelper.text(this.getInputValue()),this.$overflowHelper.width()>=t},isCursorAtEnd:function(){var t,e,n;return t=this.$input.val().length,e=this.$input[0].selectionStart,s.isNumber(e)?e===t:!document.selection||((n=document.selection.createRange()).moveStart("character",-t),t===n.text.length)},destroy:function(){this.$hint.off(".aa"),this.$input.off(".aa"),this.$hint=this.$input=this.$overflowHelper=null}}),t.exports=a},6549:(t,e,n)=>{"use strict";var i="aaAttrs",s=n(2856),r=n(4910),o=n(50),a=n(2534),u=n(3354),c=n(3561),l=n(1228);function h(t){var e,n;if((t=t||{}).input||s.error("missing input"),this.isActivated=!1,this.debug=!!t.debug,this.autoselect=!!t.autoselect,this.autoselectOnBlur=!!t.autoselectOnBlur,this.openOnFocus=!!t.openOnFocus,this.minLength=s.isNumber(t.minLength)?t.minLength:1,this.autoWidth=void 0===t.autoWidth||!!t.autoWidth,this.clearOnSelected=!!t.clearOnSelected,this.tabAutocomplete=void 0===t.tabAutocomplete||!!t.tabAutocomplete,t.hint=!!t.hint,t.hint&&t.appendTo)throw new Error("[autocomplete.js] hint and appendTo options can't be used at the same time");this.css=t.css=s.mixin({},l,t.appendTo?l.appendTo:{}),this.cssClasses=t.cssClasses=s.mixin({},l.defaultClasses,t.cssClasses||{}),this.cssClasses.prefix=t.cssClasses.formattedPrefix=s.formatPrefix(this.cssClasses.prefix,this.cssClasses.noPrefix),this.listboxId=t.listboxId=[this.cssClasses.root,"listbox",s.getUniqueId()].join("-");var a=function(t){var e,n,o,a;e=r.element(t.input),n=r.element(c.wrapper.replace("%ROOT%",t.cssClasses.root)).css(t.css.wrapper),t.appendTo||"block"!==e.css("display")||"table"!==e.parent().css("display")||n.css("display","table-cell");var u=c.dropdown.replace("%PREFIX%",t.cssClasses.prefix).replace("%DROPDOWN_MENU%",t.cssClasses.dropdownMenu);o=r.element(u).css(t.css.dropdown).attr({role:"listbox",id:t.listboxId}),t.templates&&t.templates.dropdownMenu&&o.html(s.templatify(t.templates.dropdownMenu)());(a=e.clone().css(t.css.hint).css(function(t){return{backgroundAttachment:t.css("background-attachment"),backgroundClip:t.css("background-clip"),backgroundColor:t.css("background-color"),backgroundImage:t.css("background-image"),backgroundOrigin:t.css("background-origin"),backgroundPosition:t.css("background-position"),backgroundRepeat:t.css("background-repeat"),backgroundSize:t.css("background-size")}}(e))).val("").addClass(s.className(t.cssClasses.prefix,t.cssClasses.hint,!0)).removeAttr("id name placeholder required").prop("readonly",!0).attr({"aria-hidden":"true",autocomplete:"off",spellcheck:"false",tabindex:-1}),a.removeData&&a.removeData();e.data(i,{"aria-autocomplete":e.attr("aria-autocomplete"),"aria-expanded":e.attr("aria-expanded"),"aria-owns":e.attr("aria-owns"),autocomplete:e.attr("autocomplete"),dir:e.attr("dir"),role:e.attr("role"),spellcheck:e.attr("spellcheck"),style:e.attr("style"),type:e.attr("type")}),e.addClass(s.className(t.cssClasses.prefix,t.cssClasses.input,!0)).attr({autocomplete:"off",spellcheck:!1,role:"combobox","aria-autocomplete":t.datasets&&t.datasets[0]&&t.datasets[0].displayKey?"both":"list","aria-expanded":"false","aria-label":t.ariaLabel,"aria-owns":t.listboxId}).css(t.hint?t.css.input:t.css.inputWithNoHint);try{e.attr("dir")||e.attr("dir","auto")}catch(l){}return(n=t.appendTo?n.appendTo(r.element(t.appendTo).eq(0)).eq(0):e.wrap(n).parent()).prepend(t.hint?a:null).append(o),{wrapper:n,input:e,hint:a,menu:o}}(t);this.$node=a.wrapper;var u=this.$input=a.input;e=a.menu,n=a.hint,t.dropdownMenuContainer&&r.element(t.dropdownMenuContainer).css("position","relative").append(e.css("top","0")),u.on("blur.aa",(function(t){var n=document.activeElement;s.isMsie()&&(e[0]===n||e[0].contains(n))&&(t.preventDefault(),t.stopImmediatePropagation(),s.defer((function(){u.focus()})))})),e.on("mousedown.aa",(function(t){t.preventDefault()})),this.eventBus=t.eventBus||new o({el:u}),this.dropdown=new h.Dropdown({appendTo:t.appendTo,wrapper:this.$node,menu:e,datasets:t.datasets,templates:t.templates,cssClasses:t.cssClasses,minLength:this.minLength}).onSync("suggestionClicked",this._onSuggestionClicked,this).onSync("cursorMoved",this._onCursorMoved,this).onSync("cursorRemoved",this._onCursorRemoved,this).onSync("opened",this._onOpened,this).onSync("closed",this._onClosed,this).onSync("shown",this._onShown,this).onSync("empty",this._onEmpty,this).onSync("redrawn",this._onRedrawn,this).onAsync("datasetRendered",this._onDatasetRendered,this),this.input=new h.Input({input:u,hint:n}).onSync("focused",this._onFocused,this).onSync("blurred",this._onBlurred,this).onSync("enterKeyed",this._onEnterKeyed,this).onSync("tabKeyed",this._onTabKeyed,this).onSync("escKeyed",this._onEscKeyed,this).onSync("upKeyed",this._onUpKeyed,this).onSync("downKeyed",this._onDownKeyed,this).onSync("leftKeyed",this._onLeftKeyed,this).onSync("rightKeyed",this._onRightKeyed,this).onSync("queryChanged",this._onQueryChanged,this).onSync("whitespaceChanged",this._onWhitespaceChanged,this),this._bindKeyboardShortcuts(t),this._setLanguageDirection()}s.mixin(h.prototype,{_bindKeyboardShortcuts:function(t){if(t.keyboardShortcuts){var e=this.$input,n=[];s.each(t.keyboardShortcuts,(function(t){"string"==typeof t&&(t=t.toUpperCase().charCodeAt(0)),n.push(t)})),r.element(document).keydown((function(t){var i=t.target||t.srcElement,s=i.tagName;if(!i.isContentEditable&&"INPUT"!==s&&"SELECT"!==s&&"TEXTAREA"!==s){var r=t.which||t.keyCode;-1!==n.indexOf(r)&&(e.focus(),t.stopPropagation(),t.preventDefault())}}))}},_onSuggestionClicked:function(t,e){var n;(n=this.dropdown.getDatumForSuggestion(e))&&this._select(n,{selectionMethod:"click"})},_onCursorMoved:function(t,e){var n=this.dropdown.getDatumForCursor(),i=this.dropdown.getCurrentCursor().attr("id");this.input.setActiveDescendant(i),n&&(e&&this.input.setInputValue(n.value,!0),this.eventBus.trigger("cursorchanged",n.raw,n.datasetName))},_onCursorRemoved:function(){this.input.resetInputValue(),this._updateHint(),this.eventBus.trigger("cursorremoved")},_onDatasetRendered:function(){this._updateHint(),this.eventBus.trigger("updated")},_onOpened:function(){this._updateHint(),this.input.expand(),this.eventBus.trigger("opened")},_onEmpty:function(){this.eventBus.trigger("empty")},_onRedrawn:function(){this.$node.css("top","0px"),this.$node.css("left","0px");var t=this.$input[0].getBoundingClientRect();this.autoWidth&&this.$node.css("width",t.width+"px");var e=this.$node[0].getBoundingClientRect(),n=t.bottom-e.top;this.$node.css("top",n+"px");var i=t.left-e.left;this.$node.css("left",i+"px"),this.eventBus.trigger("redrawn")},_onShown:function(){this.eventBus.trigger("shown"),this.autoselect&&this.dropdown.cursorTopSuggestion()},_onClosed:function(){this.input.clearHint(),this.input.removeActiveDescendant(),this.input.collapse(),this.eventBus.trigger("closed")},_onFocused:function(){if(this.isActivated=!0,this.openOnFocus){var t=this.input.getQuery();t.length>=this.minLength?this.dropdown.update(t):this.dropdown.empty(),this.dropdown.open()}},_onBlurred:function(){var t,e;t=this.dropdown.getDatumForCursor(),e=this.dropdown.getDatumForTopSuggestion();var n={selectionMethod:"blur"};this.debug||(this.autoselectOnBlur&&t?this._select(t,n):this.autoselectOnBlur&&e?this._select(e,n):(this.isActivated=!1,this.dropdown.empty(),this.dropdown.close()))},_onEnterKeyed:function(t,e){var n,i;n=this.dropdown.getDatumForCursor(),i=this.dropdown.getDatumForTopSuggestion();var s={selectionMethod:"enterKey"};n?(this._select(n,s),e.preventDefault()):this.autoselect&&i&&(this._select(i,s),e.preventDefault())},_onTabKeyed:function(t,e){if(this.tabAutocomplete){var n;(n=this.dropdown.getDatumForCursor())?(this._select(n,{selectionMethod:"tabKey"}),e.preventDefault()):this._autocomplete(!0)}else this.dropdown.close()},_onEscKeyed:function(){this.dropdown.close(),this.input.resetInputValue()},_onUpKeyed:function(){var t=this.input.getQuery();this.dropdown.isEmpty&&t.length>=this.minLength?this.dropdown.update(t):this.dropdown.moveCursorUp(),this.dropdown.open()},_onDownKeyed:function(){var t=this.input.getQuery();this.dropdown.isEmpty&&t.length>=this.minLength?this.dropdown.update(t):this.dropdown.moveCursorDown(),this.dropdown.open()},_onLeftKeyed:function(){"rtl"===this.dir&&this._autocomplete()},_onRightKeyed:function(){"ltr"===this.dir&&this._autocomplete()},_onQueryChanged:function(t,e){this.input.clearHintIfInvalid(),e.length>=this.minLength?this.dropdown.update(e):this.dropdown.empty(),this.dropdown.open(),this._setLanguageDirection()},_onWhitespaceChanged:function(){this._updateHint(),this.dropdown.open()},_setLanguageDirection:function(){var t=this.input.getLanguageDirection();this.dir!==t&&(this.dir=t,this.$node.css("direction",t),this.dropdown.setLanguageDirection(t))},_updateHint:function(){var t,e,n,i,r;(t=this.dropdown.getDatumForTopSuggestion())&&this.dropdown.isVisible()&&!this.input.hasOverflow()?(e=this.input.getInputValue(),n=a.normalizeQuery(e),i=s.escapeRegExChars(n),(r=new RegExp("^(?:"+i+")(.+$)","i").exec(t.value))?this.input.setHint(e+r[1]):this.input.clearHint()):this.input.clearHint()},_autocomplete:function(t){var e,n,i,s;e=this.input.getHint(),n=this.input.getQuery(),i=t||this.input.isCursorAtEnd(),e&&n!==e&&i&&((s=this.dropdown.getDatumForTopSuggestion())&&this.input.setInputValue(s.value),this.eventBus.trigger("autocompleted",s.raw,s.datasetName))},_select:function(t,e){void 0!==t.value&&this.input.setQuery(t.value),this.clearOnSelected?this.setVal(""):this.input.setInputValue(t.value,!0),this._setLanguageDirection(),!1===this.eventBus.trigger("selected",t.raw,t.datasetName,e).isDefaultPrevented()&&(this.dropdown.close(),s.defer(s.bind(this.dropdown.empty,this.dropdown)))},open:function(){if(!this.isActivated){var t=this.input.getInputValue();t.length>=this.minLength?this.dropdown.update(t):this.dropdown.empty()}this.dropdown.open()},close:function(){this.dropdown.close()},setVal:function(t){t=s.toStr(t),this.isActivated?this.input.setInputValue(t):(this.input.setQuery(t),this.input.setInputValue(t,!0)),this._setLanguageDirection()},getVal:function(){return this.input.getQuery()},destroy:function(){this.input.destroy(),this.dropdown.destroy(),function(t,e){var n=t.find(s.className(e.prefix,e.input));s.each(n.data(i),(function(t,e){void 0===t?n.removeAttr(e):n.attr(e,t)})),n.detach().removeClass(s.className(e.prefix,e.input,!0)).insertAfter(t),n.removeData&&n.removeData(i);t.remove()}(this.$node,this.cssClasses),this.$node=null},getWrapper:function(){return this.dropdown.$container[0]}}),h.Dropdown=u,h.Input=a,h.sources=n(8840),t.exports=h},4910:t=>{"use strict";t.exports={element:null}},6177:t=>{"use strict";t.exports=function(t){var e=t.match(/Algolia for JavaScript \((\d+\.)(\d+\.)(\d+)\)/)||t.match(/Algolia for vanilla JavaScript (\d+\.)(\d+\.)(\d+)/);if(e)return[e[1],e[2],e[3]]}},2856:(t,e,n)=>{"use strict";var i,s=n(8820),r=n(4910);function o(t){return t.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")}t.exports={isArray:null,isFunction:null,isObject:null,bind:null,each:null,map:null,mixin:null,isMsie:function(t){if(void 0===t&&(t=navigator.userAgent),/(msie|trident)/i.test(t)){var e=t.match(/(msie |rv:)(\d+(.\d+)?)/i);if(e)return e[2]}return!1},escapeRegExChars:function(t){return t.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")},isNumber:function(t){return"number"==typeof t},toStr:function(t){return null==t?"":t+""},cloneDeep:function(t){var e=this.mixin({},t),n=this;return this.each(e,(function(t,i){t&&(n.isArray(t)?e[i]=[].concat(t):n.isObject(t)&&(e[i]=n.cloneDeep(t)))})),e},error:function(t){throw new Error(t)},every:function(t,e){var n=!0;return t?(this.each(t,(function(i,s){n&&(n=e.call(null,i,s,t)&&n)})),!!n):n},any:function(t,e){var n=!1;return t?(this.each(t,(function(i,s){if(e.call(null,i,s,t))return n=!0,!1})),n):n},getUniqueId:(i=0,function(){return i++}),templatify:function(t){if(this.isFunction(t))return t;var e=r.element(t);return"SCRIPT"===e.prop("tagName")?function(){return e.text()}:function(){return String(t)}},defer:function(t){setTimeout(t,0)},noop:function(){},formatPrefix:function(t,e){return e?"":t+"-"},className:function(t,e,n){return n?t+e:"."+s(t+e,{isIdentifier:!0})},escapeHighlightedString:function(t,e,n){e=e||"<em>";var i=document.createElement("div");i.appendChild(document.createTextNode(e)),n=n||"</em>";var s=document.createElement("div");s.appendChild(document.createTextNode(n));var r=document.createElement("div");return r.appendChild(document.createTextNode(t)),r.innerHTML.replace(RegExp(o(i.innerHTML),"g"),e).replace(RegExp(o(s.innerHTML),"g"),n)}}},9983:(t,e,n)=>{"use strict";var i=n(2856),s=n(533),r=n(6177);var o,a,u=(o=[],a=window.Promise.resolve(),function(t,e){return function(n,s){(function(t,e){return window.Promise.resolve().then((function(){return o.length&&(a=t.search(o),o=[]),a})).then((function(t){if(t)return t.results[e]}))})(t.as,o.push({indexName:t.indexName,query:n,params:e})-1).then((function(t){t&&s(t.hits,t)})).catch((function(t){i.error(t.message)}))}});t.exports=function(t,e){var n=r(t.as._ua);if(n&&n[0]>=3&&n[1]>20){var i="autocomplete.js "+s;-1===t.as._ua.indexOf(i)&&(t.as._ua+="; "+i)}return u(t,e)}},8840:(t,e,n)=>{"use strict";t.exports={hits:n(9983),popularIn:n(4445)}},4445:(t,e,n)=>{"use strict";var i=n(2856),s=n(533),r=n(6177);t.exports=function(t,e,n,o){var a=r(t.as._ua);if(a&&a[0]>=3&&a[1]>20&&((e=e||{}).additionalUA="autocomplete.js "+s),!n.source)return i.error("Missing 'source' key");var u=i.isFunction(n.source)?n.source:function(t){return t[n.source]};if(!n.index)return i.error("Missing 'index' key");var c=n.index;return o=o||{},function(a,l){t.search(a,e,(function(t,a){if(t)i.error(t.message);else{if(a.hits.length>0){var h=a.hits[0],p=i.mixin({hitsPerPage:0},n);delete p.source,delete p.index;var f=r(c.as._ua);return f&&f[0]>=3&&f[1]>20&&(e.additionalUA="autocomplete.js "+s),void c.search(u(h),p,(function(t,e){if(t)i.error(t.message);else{var n=[];if(o.includeAll){var s=o.allTitle||"All departments";n.push(i.mixin({facet:{value:s,count:e.nbHits}},i.cloneDeep(h)))}i.each(e.facets,(function(t,e){i.each(t,(function(t,s){n.push(i.mixin({facet:{facet:e,value:s,count:t}},i.cloneDeep(h)))}))}));for(var r=1;r<a.hits.length;++r)n.push(a.hits[r]);l(n,a)}}))}l([])}}))}}},295:(t,e,n)=>{"use strict";var i=n(6990);n(4910).element=i;var s=n(2856);s.isArray=i.isArray,s.isFunction=i.isFunction,s.isObject=i.isPlainObject,s.bind=i.proxy,s.each=function(t,e){i.each(t,(function(t,n){return e(n,t)}))},s.map=i.map,s.mixin=i.extend,s.Event=i.Event;var r="aaAutocomplete",o=n(6549),a=n(50);function u(t,e,n,u){n=s.isArray(n)?n:[].slice.call(arguments,2);var c=i(t).each((function(t,s){var c=i(s),l=new a({el:c}),h=u||new o({input:c,eventBus:l,dropdownMenuContainer:e.dropdownMenuContainer,hint:void 0===e.hint||!!e.hint,minLength:e.minLength,autoselect:e.autoselect,autoselectOnBlur:e.autoselectOnBlur,tabAutocomplete:e.tabAutocomplete,openOnFocus:e.openOnFocus,templates:e.templates,debug:e.debug,clearOnSelected:e.clearOnSelected,cssClasses:e.cssClasses,datasets:n,keyboardShortcuts:e.keyboardShortcuts,appendTo:e.appendTo,autoWidth:e.autoWidth,ariaLabel:e.ariaLabel||s.getAttribute("aria-label")});c.data(r,h)}));return c.autocomplete={},s.each(["open","close","getVal","setVal","destroy","getWrapper"],(function(t){c.autocomplete[t]=function(){var e,n=arguments;return c.each((function(s,o){var a=i(o).data(r);e=a[t].apply(a,n)})),e}})),c}u.sources=o.sources,u.escapeHighlightedString=s.escapeHighlightedString;var c="autocomplete"in window,l=window.autocomplete;u.noConflict=function(){return c?window.autocomplete=l:delete window.autocomplete,u},t.exports=u},533:t=>{t.exports="0.38.1"},6990:t=>{var e;e=window,t.exports=function(t){var e,n,i=function(){var e,n,i,s,r,o,a=[],u=a.concat,c=a.filter,l=a.slice,h=t.document,p={},f={},d={"column-count":1,columns:1,"font-weight":1,"line-height":1,opacity:1,"z-index":1,zoom:1},g=/^\s*<(\w+|!)[^>]*>/,m=/^<(\w+)\s*\/?>(?:<\/\1>|)$/,v=/<(?!area|br|col|embed|hr|img|input|link|meta|param)(([\w:]+)[^>]*)\/>/gi,y=/^(?:body|html)$/i,w=/([A-Z])/g,b=["val","css","html","text","data","width","height","offset"],C=["after","prepend","before","append"],x=h.createElement("table"),_=h.createElement("tr"),S={tr:h.createElement("tbody"),tbody:x,thead:x,tfoot:x,td:_,th:_,"*":h.createElement("div")},E=/complete|loaded|interactive/,A=/^[\w-]*$/,$={},T=$.toString,O={},D=h.createElement("div"),N={tabindex:"tabIndex",readonly:"readOnly",for:"htmlFor",class:"className",maxlength:"maxLength",cellspacing:"cellSpacing",cellpadding:"cellPadding",rowspan:"rowSpan",colspan:"colSpan",usemap:"useMap",frameborder:"frameBorder",contenteditable:"contentEditable"},k=Array.isArray||function(t){return t instanceof Array};function I(t){return null==t?String(t):$[T.call(t)]||"object"}function P(t){return"function"==I(t)}function L(t){return null!=t&&t==t.window}function M(t){return null!=t&&t.nodeType==t.DOCUMENT_NODE}function F(t){return"object"==I(t)}function R(t){return F(t)&&!L(t)&&Object.getPrototypeOf(t)==Object.prototype}function q(t){var e=!!t&&"length"in t&&t.length,n=i.type(t);return"function"!=n&&!L(t)&&("array"==n||0===e||"number"==typeof e&&e>0&&e-1 in t)}function V(t){return c.call(t,(function(t){return null!=t}))}function H(t){return t.length>0?i.fn.concat.apply([],t):t}function B(t){return t.replace(/::/g,"/").replace(/([A-Z]+)([A-Z][a-z])/g,"$1_$2").replace(/([a-z\d])([A-Z])/g,"$1_$2").replace(/_/g,"-").toLowerCase()}function K(t){return t in f?f[t]:f[t]=new RegExp("(^|\\s)"+t+"(\\s|$)")}function j(t,e){return"number"!=typeof e||d[B(t)]?e:e+"px"}function z(t){var e,n;return p[t]||(e=h.createElement(t),h.body.appendChild(e),n=getComputedStyle(e,"").getPropertyValue("display"),e.parentNode.removeChild(e),"none"==n&&(n="block"),p[t]=n),p[t]}function U(t){return"children"in t?l.call(t.children):i.map(t.childNodes,(function(t){if(1==t.nodeType)return t}))}function Q(t,e){var n,i=t?t.length:0;for(n=0;n<i;n++)this[n]=t[n];this.length=i,this.selector=e||""}function W(t,i,s){for(n in i)s&&(R(i[n])||k(i[n]))?(R(i[n])&&!R(t[n])&&(t[n]={}),k(i[n])&&!k(t[n])&&(t[n]=[]),W(t[n],i[n],s)):i[n]!==e&&(t[n]=i[n])}function Z(t,e){return null==e?i(t):i(t).filter(e)}function X(t,e,n,i){return P(e)?e.call(t,n,i):e}function G(t,e,n){null==n?t.removeAttribute(e):t.setAttribute(e,n)}function J(t,n){var i=t.className||"",s=i&&i.baseVal!==e;if(n===e)return s?i.baseVal:i;s?i.baseVal=n:t.className=n}function Y(t){try{return t?"true"==t||"false"!=t&&("null"==t?null:+t+""==t?+t:/^[\[\{]/.test(t)?i.parseJSON(t):t):t}catch(e){return t}}function tt(t,e){e(t);for(var n=0,i=t.childNodes.length;n<i;n++)tt(t.childNodes[n],e)}return O.matches=function(t,e){if(!e||!t||1!==t.nodeType)return!1;var n=t.matches||t.webkitMatchesSelector||t.mozMatchesSelector||t.oMatchesSelector||t.matchesSelector;if(n)return n.call(t,e);var i,s=t.parentNode,r=!s;return r&&(s=D).appendChild(t),i=~O.qsa(s,e).indexOf(t),r&&D.removeChild(t),i},r=function(t){return t.replace(/-+(.)?/g,(function(t,e){return e?e.toUpperCase():""}))},o=function(t){return c.call(t,(function(e,n){return t.indexOf(e)==n}))},O.fragment=function(t,n,s){var r,o,a;return m.test(t)&&(r=i(h.createElement(RegExp.$1))),r||(t.replace&&(t=t.replace(v,"<$1></$2>")),n===e&&(n=g.test(t)&&RegExp.$1),n in S||(n="*"),(a=S[n]).innerHTML=""+t,r=i.each(l.call(a.childNodes),(function(){a.removeChild(this)}))),R(s)&&(o=i(r),i.each(s,(function(t,e){b.indexOf(t)>-1?o[t](e):o.attr(t,e)}))),r},O.Z=function(t,e){return new Q(t,e)},O.isZ=function(t){return t instanceof O.Z},O.init=function(t,n){var s;if(!t)return O.Z();if("string"==typeof t)if("<"==(t=t.trim())[0]&&g.test(t))s=O.fragment(t,RegExp.$1,n),t=null;else{if(n!==e)return i(n).find(t);s=O.qsa(h,t)}else{if(P(t))return i(h).ready(t);if(O.isZ(t))return t;if(k(t))s=V(t);else if(F(t))s=[t],t=null;else if(g.test(t))s=O.fragment(t.trim(),RegExp.$1,n),t=null;else{if(n!==e)return i(n).find(t);s=O.qsa(h,t)}}return O.Z(s,t)},(i=function(t,e){return O.init(t,e)}).extend=function(t){var e,n=l.call(arguments,1);return"boolean"==typeof t&&(e=t,t=n.shift()),n.forEach((function(n){W(t,n,e)})),t},O.qsa=function(t,e){var n,i="#"==e[0],s=!i&&"."==e[0],r=i||s?e.slice(1):e,o=A.test(r);return t.getElementById&&o&&i?(n=t.getElementById(r))?[n]:[]:1!==t.nodeType&&9!==t.nodeType&&11!==t.nodeType?[]:l.call(o&&!i&&t.getElementsByClassName?s?t.getElementsByClassName(r):t.getElementsByTagName(e):t.querySelectorAll(e))},i.contains=h.documentElement.contains?function(t,e){return t!==e&&t.contains(e)}:function(t,e){for(;e&&(e=e.parentNode);)if(e===t)return!0;return!1},i.type=I,i.isFunction=P,i.isWindow=L,i.isArray=k,i.isPlainObject=R,i.isEmptyObject=function(t){var e;for(e in t)return!1;return!0},i.isNumeric=function(t){var e=Number(t),n=typeof t;return null!=t&&"boolean"!=n&&("string"!=n||t.length)&&!isNaN(e)&&isFinite(e)||!1},i.inArray=function(t,e,n){return a.indexOf.call(e,t,n)},i.camelCase=r,i.trim=function(t){return null==t?"":String.prototype.trim.call(t)},i.uuid=0,i.support={},i.expr={},i.noop=function(){},i.map=function(t,e){var n,i,s,r=[];if(q(t))for(i=0;i<t.length;i++)null!=(n=e(t[i],i))&&r.push(n);else for(s in t)null!=(n=e(t[s],s))&&r.push(n);return H(r)},i.each=function(t,e){var n,i;if(q(t)){for(n=0;n<t.length;n++)if(!1===e.call(t[n],n,t[n]))return t}else for(i in t)if(!1===e.call(t[i],i,t[i]))return t;return t},i.grep=function(t,e){return c.call(t,e)},t.JSON&&(i.parseJSON=JSON.parse),i.each("Boolean Number String Function Array Date RegExp Object Error".split(" "),(function(t,e){$["[object "+e+"]"]=e.toLowerCase()})),i.fn={constructor:O.Z,length:0,forEach:a.forEach,reduce:a.reduce,push:a.push,sort:a.sort,splice:a.splice,indexOf:a.indexOf,concat:function(){var t,e,n=[];for(t=0;t<arguments.length;t++)e=arguments[t],n[t]=O.isZ(e)?e.toArray():e;return u.apply(O.isZ(this)?this.toArray():this,n)},map:function(t){return i(i.map(this,(function(e,n){return t.call(e,n,e)})))},slice:function(){return i(l.apply(this,arguments))},ready:function(t){return E.test(h.readyState)&&h.body?t(i):h.addEventListener("DOMContentLoaded",(function(){t(i)}),!1),this},get:function(t){return t===e?l.call(this):this[t>=0?t:t+this.length]},toArray:function(){return this.get()},size:function(){return this.length},remove:function(){return this.each((function(){null!=this.parentNode&&this.parentNode.removeChild(this)}))},each:function(t){return a.every.call(this,(function(e,n){return!1!==t.call(e,n,e)})),this},filter:function(t){return P(t)?this.not(this.not(t)):i(c.call(this,(function(e){return O.matches(e,t)})))},add:function(t,e){return i(o(this.concat(i(t,e))))},is:function(t){return this.length>0&&O.matches(this[0],t)},not:function(t){var n=[];if(P(t)&&t.call!==e)this.each((function(e){t.call(this,e)||n.push(this)}));else{var s="string"==typeof t?this.filter(t):q(t)&&P(t.item)?l.call(t):i(t);this.forEach((function(t){s.indexOf(t)<0&&n.push(t)}))}return i(n)},has:function(t){return this.filter((function(){return F(t)?i.contains(this,t):i(this).find(t).size()}))},eq:function(t){return-1===t?this.slice(t):this.slice(t,+t+1)},first:function(){var t=this[0];return t&&!F(t)?t:i(t)},last:function(){var t=this[this.length-1];return t&&!F(t)?t:i(t)},find:function(t){var e=this;return t?"object"==typeof t?i(t).filter((function(){var t=this;return a.some.call(e,(function(e){return i.contains(e,t)}))})):1==this.length?i(O.qsa(this[0],t)):this.map((function(){return O.qsa(this,t)})):i()},closest:function(t,e){var n=[],s="object"==typeof t&&i(t);return this.each((function(i,r){for(;r&&!(s?s.indexOf(r)>=0:O.matches(r,t));)r=r!==e&&!M(r)&&r.parentNode;r&&n.indexOf(r)<0&&n.push(r)})),i(n)},parents:function(t){for(var e=[],n=this;n.length>0;)n=i.map(n,(function(t){if((t=t.parentNode)&&!M(t)&&e.indexOf(t)<0)return e.push(t),t}));return Z(e,t)},parent:function(t){return Z(o(this.pluck("parentNode")),t)},children:function(t){return Z(this.map((function(){return U(this)})),t)},contents:function(){return this.map((function(){return this.contentDocument||l.call(this.childNodes)}))},siblings:function(t){return Z(this.map((function(t,e){return c.call(U(e.parentNode),(function(t){return t!==e}))})),t)},empty:function(){return this.each((function(){this.innerHTML=""}))},pluck:function(t){return i.map(this,(function(e){return e[t]}))},show:function(){return this.each((function(){"none"==this.style.display&&(this.style.display=""),"none"==getComputedStyle(this,"").getPropertyValue("display")&&(this.style.display=z(this.nodeName))}))},replaceWith:function(t){return this.before(t).remove()},wrap:function(t){var e=P(t);if(this[0]&&!e)var n=i(t).get(0),s=n.parentNode||this.length>1;return this.each((function(r){i(this).wrapAll(e?t.call(this,r):s?n.cloneNode(!0):n)}))},wrapAll:function(t){if(this[0]){var e;for(i(this[0]).before(t=i(t));(e=t.children()).length;)t=e.first();i(t).append(this)}return this},wrapInner:function(t){var e=P(t);return this.each((function(n){var s=i(this),r=s.contents(),o=e?t.call(this,n):t;r.length?r.wrapAll(o):s.append(o)}))},unwrap:function(){return this.parent().each((function(){i(this).replaceWith(i(this).children())})),this},clone:function(){return this.map((function(){return this.cloneNode(!0)}))},hide:function(){return this.css("display","none")},toggle:function(t){return this.each((function(){var n=i(this);(t===e?"none"==n.css("display"):t)?n.show():n.hide()}))},prev:function(t){return i(this.pluck("previousElementSibling")).filter(t||"*")},next:function(t){return i(this.pluck("nextElementSibling")).filter(t||"*")},html:function(t){return 0 in arguments?this.each((function(e){var n=this.innerHTML;i(this).empty().append(X(this,t,e,n))})):0 in this?this[0].innerHTML:null},text:function(t){return 0 in arguments?this.each((function(e){var n=X(this,t,e,this.textContent);this.textContent=null==n?"":""+n})):0 in this?this.pluck("textContent").join(""):null},attr:function(t,i){var s;return"string"!=typeof t||1 in arguments?this.each((function(e){if(1===this.nodeType)if(F(t))for(n in t)G(this,n,t[n]);else G(this,t,X(this,i,e,this.getAttribute(t)))})):0 in this&&1==this[0].nodeType&&null!=(s=this[0].getAttribute(t))?s:e},removeAttr:function(t){return this.each((function(){1===this.nodeType&&t.split(" ").forEach((function(t){G(this,t)}),this)}))},prop:function(t,e){return t=N[t]||t,1 in arguments?this.each((function(n){this[t]=X(this,e,n,this[t])})):this[0]&&this[0][t]},removeProp:function(t){return t=N[t]||t,this.each((function(){delete this[t]}))},data:function(t,n){var i="data-"+t.replace(w,"-$1").toLowerCase(),s=1 in arguments?this.attr(i,n):this.attr(i);return null!==s?Y(s):e},val:function(t){return 0 in arguments?(null==t&&(t=""),this.each((function(e){this.value=X(this,t,e,this.value)}))):this[0]&&(this[0].multiple?i(this[0]).find("option").filter((function(){return this.selected})).pluck("value"):this[0].value)},offset:function(e){if(e)return this.each((function(t){var n=i(this),s=X(this,e,t,n.offset()),r=n.offsetParent().offset(),o={top:s.top-r.top,left:s.left-r.left};"static"==n.css("position")&&(o.position="relative"),n.css(o)}));if(!this.length)return null;if(h.documentElement!==this[0]&&!i.contains(h.documentElement,this[0]))return{top:0,left:0};var n=this[0].getBoundingClientRect();return{left:n.left+t.pageXOffset,top:n.top+t.pageYOffset,width:Math.round(n.width),height:Math.round(n.height)}},css:function(t,e){if(arguments.length<2){var s=this[0];if("string"==typeof t){if(!s)return;return s.style[r(t)]||getComputedStyle(s,"").getPropertyValue(t)}if(k(t)){if(!s)return;var o={},a=getComputedStyle(s,"");return i.each(t,(function(t,e){o[e]=s.style[r(e)]||a.getPropertyValue(e)})),o}}var u="";if("string"==I(t))e||0===e?u=B(t)+":"+j(t,e):this.each((function(){this.style.removeProperty(B(t))}));else for(n in t)t[n]||0===t[n]?u+=B(n)+":"+j(n,t[n])+";":this.each((function(){this.style.removeProperty(B(n))}));return this.each((function(){this.style.cssText+=";"+u}))},index:function(t){return t?this.indexOf(i(t)[0]):this.parent().children().indexOf(this[0])},hasClass:function(t){return!!t&&a.some.call(this,(function(t){return this.test(J(t))}),K(t))},addClass:function(t){return t?this.each((function(e){if("className"in this){s=[];var n=J(this);X(this,t,e,n).split(/\s+/g).forEach((function(t){i(this).hasClass(t)||s.push(t)}),this),s.length&&J(this,n+(n?" ":"")+s.join(" "))}})):this},removeClass:function(t){return this.each((function(n){if("className"in this){if(t===e)return J(this,"");s=J(this),X(this,t,n,s).split(/\s+/g).forEach((function(t){s=s.replace(K(t)," ")})),J(this,s.trim())}}))},toggleClass:function(t,n){return t?this.each((function(s){var r=i(this);X(this,t,s,J(this)).split(/\s+/g).forEach((function(t){(n===e?!r.hasClass(t):n)?r.addClass(t):r.removeClass(t)}))})):this},scrollTop:function(t){if(this.length){var n="scrollTop"in this[0];return t===e?n?this[0].scrollTop:this[0].pageYOffset:this.each(n?function(){this.scrollTop=t}:function(){this.scrollTo(this.scrollX,t)})}},scrollLeft:function(t){if(this.length){var n="scrollLeft"in this[0];return t===e?n?this[0].scrollLeft:this[0].pageXOffset:this.each(n?function(){this.scrollLeft=t}:function(){this.scrollTo(t,this.scrollY)})}},position:function(){if(this.length){var t=this[0],e=this.offsetParent(),n=this.offset(),s=y.test(e[0].nodeName)?{top:0,left:0}:e.offset();return n.top-=parseFloat(i(t).css("margin-top"))||0,n.left-=parseFloat(i(t).css("margin-left"))||0,s.top+=parseFloat(i(e[0]).css("border-top-width"))||0,s.left+=parseFloat(i(e[0]).css("border-left-width"))||0,{top:n.top-s.top,left:n.left-s.left}}},offsetParent:function(){return this.map((function(){for(var t=this.offsetParent||h.body;t&&!y.test(t.nodeName)&&"static"==i(t).css("position");)t=t.offsetParent;return t}))}},i.fn.detach=i.fn.remove,["width","height"].forEach((function(t){var n=t.replace(/./,(function(t){return t[0].toUpperCase()}));i.fn[t]=function(s){var r,o=this[0];return s===e?L(o)?o["inner"+n]:M(o)?o.documentElement["scroll"+n]:(r=this.offset())&&r[t]:this.each((function(e){(o=i(this)).css(t,X(this,s,e,o[t]()))}))}})),C.forEach((function(n,s){var r=s%2;i.fn[n]=function(){var n,o,a=i.map(arguments,(function(t){var s=[];return"array"==(n=I(t))?(t.forEach((function(t){return t.nodeType!==e?s.push(t):i.zepto.isZ(t)?s=s.concat(t.get()):void(s=s.concat(O.fragment(t)))})),s):"object"==n||null==t?t:O.fragment(t)})),u=this.length>1;return a.length<1?this:this.each((function(e,n){o=r?n:n.parentNode,n=0==s?n.nextSibling:1==s?n.firstChild:2==s?n:null;var c=i.contains(h.documentElement,o);a.forEach((function(e){if(u)e=e.cloneNode(!0);else if(!o)return i(e).remove();o.insertBefore(e,n),c&&tt(e,(function(e){if(!(null==e.nodeName||"SCRIPT"!==e.nodeName.toUpperCase()||e.type&&"text/javascript"!==e.type||e.src)){var n=e.ownerDocument?e.ownerDocument.defaultView:t;n.eval.call(n,e.innerHTML)}}))}))}))},i.fn[r?n+"To":"insert"+(s?"Before":"After")]=function(t){return i(t)[n](this),this}})),O.Z.prototype=Q.prototype=i.fn,O.uniq=o,O.deserializeValue=Y,i.zepto=O,i}();return function(e){var n,i=1,s=Array.prototype.slice,r=e.isFunction,o=function(t){return"string"==typeof t},a={},u={},c="onfocusin"in t,l={focus:"focusin",blur:"focusout"},h={mouseenter:"mouseover",mouseleave:"mouseout"};function p(t){return t._zid||(t._zid=i++)}function f(t,e,n,i){if((e=d(e)).ns)var s=g(e.ns);return(a[p(t)]||[]).filter((function(t){return t&&(!e.e||t.e==e.e)&&(!e.ns||s.test(t.ns))&&(!n||p(t.fn)===p(n))&&(!i||t.sel==i)}))}function d(t){var e=(""+t).split(".");return{e:e[0],ns:e.slice(1).sort().join(" ")}}function g(t){return new RegExp("(?:^| )"+t.replace(" "," .* ?")+"(?: |$)")}function m(t,e){return t.del&&!c&&t.e in l||!!e}function v(t){return h[t]||c&&l[t]||t}function y(t,i,s,r,o,u,c){var l=p(t),f=a[l]||(a[l]=[]);i.split(/\s/).forEach((function(i){if("ready"==i)return e(document).ready(s);var a=d(i);a.fn=s,a.sel=o,a.e in h&&(s=function(t){var n=t.relatedTarget;if(!n||n!==this&&!e.contains(this,n))return a.fn.apply(this,arguments)}),a.del=u;var l=u||s;a.proxy=function(e){if(!(e=S(e)).isImmediatePropagationStopped()){try{var i=Object.getOwnPropertyDescriptor(e,"data");i&&!i.writable||(e.data=r)}catch(e){}var s=l.apply(t,e._args==n?[e]:[e].concat(e._args));return!1===s&&(e.preventDefault(),e.stopPropagation()),s}},a.i=f.length,f.push(a),"addEventListener"in t&&t.addEventListener(v(a.e),a.proxy,m(a,c))}))}function w(t,e,n,i,s){var r=p(t);(e||"").split(/\s/).forEach((function(e){f(t,e,n,i).forEach((function(e){delete a[r][e.i],"removeEventListener"in t&&t.removeEventListener(v(e.e),e.proxy,m(e,s))}))}))}u.click=u.mousedown=u.mouseup=u.mousemove="MouseEvents",e.event={add:y,remove:w},e.proxy=function(t,n){var i=2 in arguments&&s.call(arguments,2);if(r(t)){var a=function(){return t.apply(n,i?i.concat(s.call(arguments)):arguments)};return a._zid=p(t),a}if(o(n))return i?(i.unshift(t[n],t),e.proxy.apply(null,i)):e.proxy(t[n],t);throw new TypeError("expected function")},e.fn.bind=function(t,e,n){return this.on(t,e,n)},e.fn.unbind=function(t,e){return this.off(t,e)},e.fn.one=function(t,e,n,i){return this.on(t,e,n,i,1)};var b=function(){return!0},C=function(){return!1},x=/^([A-Z]|returnValue$|layer[XY]$|webkitMovement[XY]$)/,_={preventDefault:"isDefaultPrevented",stopImmediatePropagation:"isImmediatePropagationStopped",stopPropagation:"isPropagationStopped"};function S(t,i){if(i||!t.isDefaultPrevented){i||(i=t),e.each(_,(function(e,n){var s=i[e];t[e]=function(){return this[n]=b,s&&s.apply(i,arguments)},t[n]=C}));try{t.timeStamp||(t.timeStamp=Date.now())}catch(s){}(i.defaultPrevented!==n?i.defaultPrevented:"returnValue"in i?!1===i.returnValue:i.getPreventDefault&&i.getPreventDefault())&&(t.isDefaultPrevented=b)}return t}function E(t){var e,i={originalEvent:t};for(e in t)x.test(e)||t[e]===n||(i[e]=t[e]);return S(i,t)}e.fn.delegate=function(t,e,n){return this.on(e,t,n)},e.fn.undelegate=function(t,e,n){return this.off(e,t,n)},e.fn.live=function(t,n){return e(document.body).delegate(this.selector,t,n),this},e.fn.die=function(t,n){return e(document.body).undelegate(this.selector,t,n),this},e.fn.on=function(t,i,a,u,c){var l,h,p=this;return t&&!o(t)?(e.each(t,(function(t,e){p.on(t,i,a,e,c)})),p):(o(i)||r(u)||!1===u||(u=a,a=i,i=n),u!==n&&!1!==a||(u=a,a=n),!1===u&&(u=C),p.each((function(n,r){c&&(l=function(t){return w(r,t.type,u),u.apply(this,arguments)}),i&&(h=function(t){var n,o=e(t.target).closest(i,r).get(0);if(o&&o!==r)return n=e.extend(E(t),{currentTarget:o,liveFired:r}),(l||u).apply(o,[n].concat(s.call(arguments,1)))}),y(r,t,u,a,i,h||l)})))},e.fn.off=function(t,i,s){var a=this;return t&&!o(t)?(e.each(t,(function(t,e){a.off(t,i,e)})),a):(o(i)||r(s)||!1===s||(s=i,i=n),!1===s&&(s=C),a.each((function(){w(this,t,s,i)})))},e.fn.trigger=function(t,n){return(t=o(t)||e.isPlainObject(t)?e.Event(t):S(t))._args=n,this.each((function(){t.type in l&&"function"==typeof this[t.type]?this[t.type]():"dispatchEvent"in this?this.dispatchEvent(t):e(this).triggerHandler(t,n)}))},e.fn.triggerHandler=function(t,n){var i,s;return this.each((function(r,a){(i=E(o(t)?e.Event(t):t))._args=n,i.target=a,e.each(f(a,t.type||t),(function(t,e){if(s=e.proxy(i),i.isImmediatePropagationStopped())return!1}))})),s},"focusin focusout focus blur load resize scroll unload click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave change select keydown keypress keyup error".split(" ").forEach((function(t){e.fn[t]=function(e){return 0 in arguments?this.bind(t,e):this.trigger(t)}})),e.Event=function(t,e){o(t)||(t=(e=t).type);var n=document.createEvent(u[t]||"Events"),i=!0;if(e)for(var s in e)"bubbles"==s?i=!!e[s]:n[s]=e[s];return n.initEvent(t,i,!0),S(n)}}(i),n=[],i.fn.remove=function(){return this.each((function(){this.parentNode&&("IMG"===this.tagName&&(n.push(this),this.src="data:image/gif;base64,R0lGODlhAQABAAD/ACwAAAAAAQABAAACADs=",e&&clearTimeout(e),e=setTimeout((function(){n=[]}),6e4)),this.parentNode.removeChild(this))}))},function(t){var e={},n=t.fn.data,i=t.camelCase,s=t.expando="Zepto"+ +new Date,r=[];function o(r,o){var u=r[s],c=u&&e[u];if(void 0===o)return c||a(r);if(c){if(o in c)return c[o];var l=i(o);if(l in c)return c[l]}return n.call(t(r),o)}function a(n,r,o){var a=n[s]||(n[s]=++t.uuid),c=e[a]||(e[a]=u(n));return void 0!==r&&(c[i(r)]=o),c}function u(e){var n={};return t.each(e.attributes||r,(function(e,s){0==s.name.indexOf("data-")&&(n[i(s.name.replace("data-",""))]=t.zepto.deserializeValue(s.value))})),n}t.fn.data=function(e,n){return void 0===n?t.isPlainObject(e)?this.each((function(n,i){t.each(e,(function(t,e){a(i,t,e)}))})):0 in this?o(this[0],e):void 0:this.each((function(){a(this,e,n)}))},t.data=function(e,n,i){return t(e).data(n,i)},t.hasData=function(n){var i=n[s],r=i&&e[i];return!!r&&!t.isEmptyObject(r)},t.fn.removeData=function(n){return"string"==typeof n&&(n=n.split(/\s+/)),this.each((function(){var r=this[s],o=r&&e[r];o&&t.each(n||o,(function(t){delete o[n?i(this):t]}))}))},["remove","empty"].forEach((function(e){var n=t.fn[e];t.fn[e]=function(){var t=this.find("*");return"remove"===e&&(t=t.add(this)),t.removeData(),n.call(this)}}))}(i),i}(e)},8820:t=>{"use strict";var e={}.hasOwnProperty,n=/[ -,\.\/:-@\[-\^`\{-~]/,i=/[ -,\.\/:-@\[\]\^`\{-~]/,s=/(^|\\+)?(\\[A-F0-9]{1,6})\x20(?![a-fA-F0-9\x20])/g,r=function t(r,o){"single"!=(o=function(t,n){if(!t)return n;var i={};for(var s in n)i[s]=e.call(t,s)?t[s]:n[s];return i}(o,t.options)).quotes&&"double"!=o.quotes&&(o.quotes="single");for(var a="double"==o.quotes?'"':"'",u=o.isIdentifier,c=r.charAt(0),l="",h=0,p=r.length;h<p;){var f=r.charAt(h++),d=f.charCodeAt(),g=void 0;if(d<32||d>126){if(d>=55296&&d<=56319&&h<p){var m=r.charCodeAt(h++);56320==(64512&m)?d=((1023&d)<<10)+(1023&m)+65536:h--}g="\\"+d.toString(16).toUpperCase()+" "}else g=o.escapeEverything?n.test(f)?"\\"+f:"\\"+d.toString(16).toUpperCase()+" ":/[\t\n\f\r\x0B]/.test(f)?"\\"+d.toString(16).toUpperCase()+" ":"\\"==f||!u&&('"'==f&&a==f||"'"==f&&a==f)||u&&i.test(f)?"\\"+f:f;l+=g}return u&&(/^-[-\d]/.test(l)?l="\\-"+l.slice(1):/\d/.test(c)&&(l="\\3"+c+" "+l.slice(1))),l=l.replace(s,(function(t,e,n){return e&&e.length%2?t:(e||"")+n})),!u&&o.wrap?a+l+a:l};r.options={escapeEverything:!1,isIdentifier:!1,quotes:"single",wrap:!1},r.version="3.0.0",t.exports=r},624:(t,e,n)=>{"use strict";var i,s,r,o=[n(5525),n(4785),n(8291),n(2709),n(2506),n(9176)],a=-1,u=[],c=!1;function l(){i&&s&&(i=!1,s.length?u=s.concat(u):a=-1,u.length&&h())}function h(){if(!i){c=!1,i=!0;for(var t=u.length,e=setTimeout(l);t;){for(s=u,u=[];s&&++a<t;)s[a].run();a=-1,t=u.length}s=null,a=-1,i=!1,clearTimeout(e)}}for(var p=-1,f=o.length;++p<f;)if(o[p]&&o[p].test&&o[p].test()){r=o[p].install(h);break}function d(t,e){this.fun=t,this.array=e}d.prototype.run=function(){var t=this.fun,e=this.array;switch(e.length){case 0:return t();case 1:return t(e[0]);case 2:return t(e[0],e[1]);case 3:return t(e[0],e[1],e[2]);default:return t.apply(null,e)}},t.exports=function(t){var e=new Array(arguments.length-1);if(arguments.length>1)for(var n=1;n<arguments.length;n++)e[n-1]=arguments[n];u.push(new d(t,e)),c||i||(c=!0,r())}},2709:(t,e,n)=>{"use strict";e.test=function(){return!n.g.setImmediate&&void 0!==n.g.MessageChannel},e.install=function(t){var e=new n.g.MessageChannel;return e.port1.onmessage=t,function(){e.port2.postMessage(0)}}},8291:(t,e,n)=>{"use strict";var i=n.g.MutationObserver||n.g.WebKitMutationObserver;e.test=function(){return i},e.install=function(t){var e=0,s=new i(t),r=n.g.document.createTextNode("");return s.observe(r,{characterData:!0}),function(){r.data=e=++e%2}}},4785:(t,e,n)=>{"use strict";e.test=function(){return"function"==typeof n.g.queueMicrotask},e.install=function(t){return function(){n.g.queueMicrotask(t)}}},2506:(t,e,n)=>{"use strict";e.test=function(){return"document"in n.g&&"onreadystatechange"in n.g.document.createElement("script")},e.install=function(t){return function(){var e=n.g.document.createElement("script");return e.onreadystatechange=function(){t(),e.onreadystatechange=null,e.parentNode.removeChild(e),e=null},n.g.document.documentElement.appendChild(e),t}}},9176:(t,e)=>{"use strict";e.test=function(){return!0},e.install=function(t){return function(){setTimeout(t,0)}}}}]);
\ No newline at end of file
diff --git a/zh/assets/js/8443.6e4145c7.js.LICENSE.txt b/zh/assets/js/8443.6e4145c7.js.LICENSE.txt
new file mode 100644
index 000000000..4f7ccd8a7
--- /dev/null
+++ b/zh/assets/js/8443.6e4145c7.js.LICENSE.txt
@@ -0,0 +1 @@
+/*! https://mths.be/cssesc v3.0.0 by @mathias */
diff --git a/zh/assets/js/8894.b6a0e6e6.js b/zh/assets/js/8894.b6a0e6e6.js
deleted file mode 100644
index ab9a307a0..000000000
--- a/zh/assets/js/8894.b6a0e6e6.js
+++ /dev/null
@@ -1 +0,0 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8894],{8894:(s,k,_)=>{_.r(k)}}]);
\ No newline at end of file
diff --git a/zh/assets/js/93e8d6ea.50269464.js b/zh/assets/js/93e8d6ea.e1761271.js
similarity index 97%
rename from zh/assets/js/93e8d6ea.50269464.js
rename to zh/assets/js/93e8d6ea.e1761271.js
index c1a6dcb03..4034089df 100644
--- a/zh/assets/js/93e8d6ea.50269464.js
+++ b/zh/assets/js/93e8d6ea.e1761271.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[622],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>f});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var s=n.createContext({}),c=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,s=e.parentName,p=i(e,["components","mdxType","originalType","parentName"]),d=c(r),f=l,m=d["".concat(s,".").concat(f)]||d[f]||u[f]||a;return r?n.createElement(m,o(o({ref:t},p),{},{components:r})):n.createElement(m,o({ref:t},p))}));function f(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,o=new Array(a);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:l,o[1]=i;for(var c=2;c<a;c++)o[c]=r[c];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},4827:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>a,metadata:()=>i,toc:()=>c});var n=r(3117),l=(r(7294),r(3905));const a={title:"\u505c\u6b62 K3s",weight:4},o=void 0,i={unversionedId:"upgrades/killall",id:"upgrades/killall",title:"\u505c\u6b62 K3s",description:"\u4e3a\u4e86\u5728\u5347\u7ea7\u671f\u95f4\u5b9e\u73b0\u9ad8\u53ef\u7528\u6027\uff0cK3s \u5bb9\u5668\u5728 K3s \u670d\u52a1\u505c\u6b62\u65f6\u4f1a\u7ee7\u7eed\u8fd0\u884c\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/killall.md",sourceDirName:"upgrades",slug:"/upgrades/killall",permalink:"/zh/upgrades/killall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u505c\u6b62 K3s",weight:4},sidebar:"mySidebar",previous:{title:"\u5347\u7ea7",permalink:"/zh/upgrades/"},next:{title:"\u624b\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/manual"}},s={},c=[],p={toc:c};function u(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\u4e3a\u4e86\u5728\u5347\u7ea7\u671f\u95f4\u5b9e\u73b0\u9ad8\u53ef\u7528\u6027\uff0cK3s \u5bb9\u5668\u5728 K3s \u670d\u52a1\u505c\u6b62\u65f6\u4f1a\u7ee7\u7eed\u8fd0\u884c\u3002"),(0,l.kt)("p",null,"\u8981\u505c\u6b62\u6240\u6709 K3s \u5bb9\u5668\u5e76\u91cd\u7f6e\u5bb9\u5668\u72b6\u6001\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," \u811a\u672c\u3002"),(0,l.kt)("p",null,"killall \u811a\u672c\u80fd\u6e05\u7406\u5bb9\u5668\u3001K3s \u76ee\u5f55\u548c\u7f51\u7edc\u7ec4\u4ef6\uff0c\u540c\u65f6\u8fd8\u80fd\u5220\u9664 iptables \u94fe\u4ee5\u53ca\u6240\u6709\u76f8\u5173\u89c4\u5219\u3002\u96c6\u7fa4\u6570\u636e\u4e0d\u4f1a\u88ab\u5220\u9664\u3002"),(0,l.kt)("p",null,"\u8981\u5728 Server \u8282\u70b9\u4e2d\u8fd0\u884c killall \u811a\u672c\uff0c\u8bf7\u8fd0\u884c\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-killall.sh\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[622],{3905:(e,t,r)=>{r.d(t,{Zo:()=>p,kt:()=>f});var n=r(7294);function l(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function a(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function o(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?a(Object(r),!0).forEach((function(t){l(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):a(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function i(e,t){if(null==e)return{};var r,n,l=function(e,t){if(null==e)return{};var r,n,l={},a=Object.keys(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||(l[r]=e[r]);return l}(e,t);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);for(n=0;n<a.length;n++)r=a[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(l[r]=e[r])}return l}var s=n.createContext({}),c=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):o(o({},t),e)),r},p=function(e){var t=c(e.components);return n.createElement(s.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,l=e.mdxType,a=e.originalType,s=e.parentName,p=i(e,["components","mdxType","originalType","parentName"]),d=c(r),f=l,m=d["".concat(s,".").concat(f)]||d[f]||u[f]||a;return r?n.createElement(m,o(o({ref:t},p),{},{components:r})):n.createElement(m,o({ref:t},p))}));function f(e,t){var r=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var a=r.length,o=new Array(a);o[0]=d;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:l,o[1]=i;for(var c=2;c<a;c++)o[c]=r[c];return n.createElement.apply(null,o)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},4827:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>u,frontMatter:()=>a,metadata:()=>i,toc:()=>c});var n=r(3117),l=(r(7294),r(3905));const a={title:"\u505c\u6b62 K3s",weight:4},o=void 0,i={unversionedId:"upgrades/killall",id:"upgrades/killall",title:"\u505c\u6b62 K3s",description:"\u4e3a\u4e86\u5728\u5347\u7ea7\u671f\u95f4\u5b9e\u73b0\u9ad8\u53ef\u7528\u6027\uff0cK3s \u5bb9\u5668\u5728 K3s \u670d\u52a1\u505c\u6b62\u65f6\u4f1a\u7ee7\u7eed\u8fd0\u884c\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/killall.md",sourceDirName:"upgrades",slug:"/upgrades/killall",permalink:"/zh/upgrades/killall",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u505c\u6b62 K3s",weight:4},sidebar:"mySidebar",previous:{title:"\u5347\u7ea7",permalink:"/zh/upgrades/"},next:{title:"\u624b\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/manual"}},s={},c=[],p={toc:c};function u(e){let{components:t,...r}=e;return(0,l.kt)("wrapper",(0,n.Z)({},p,r,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\u4e3a\u4e86\u5728\u5347\u7ea7\u671f\u95f4\u5b9e\u73b0\u9ad8\u53ef\u7528\u6027\uff0cK3s \u5bb9\u5668\u5728 K3s \u670d\u52a1\u505c\u6b62\u65f6\u4f1a\u7ee7\u7eed\u8fd0\u884c\u3002"),(0,l.kt)("p",null,"\u8981\u505c\u6b62\u6240\u6709 K3s \u5bb9\u5668\u5e76\u91cd\u7f6e\u5bb9\u5668\u72b6\u6001\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," \u811a\u672c\u3002"),(0,l.kt)("p",null,"killall \u811a\u672c\u80fd\u6e05\u7406\u5bb9\u5668\u3001K3s \u76ee\u5f55\u548c\u7f51\u7edc\u7ec4\u4ef6\uff0c\u540c\u65f6\u8fd8\u80fd\u5220\u9664 iptables \u94fe\u4ee5\u53ca\u6240\u6709\u76f8\u5173\u89c4\u5219\u3002\u96c6\u7fa4\u6570\u636e\u4e0d\u4f1a\u88ab\u5220\u9664\u3002"),(0,l.kt)("p",null,"\u8981\u5728 Server \u8282\u70b9\u4e2d\u8fd0\u884c killall \u811a\u672c\uff0c\u8bf7\u8fd0\u884c\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"/usr/local/bin/k3s-killall.sh\n")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/97691ddb.68feaacc.js b/zh/assets/js/97691ddb.1e809fce.js
similarity index 98%
rename from zh/assets/js/97691ddb.68feaacc.js
rename to zh/assets/js/97691ddb.1e809fce.js
index a19815ac3..2c0892193 100644
--- a/zh/assets/js/97691ddb.68feaacc.js
+++ b/zh/assets/js/97691ddb.1e809fce.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6499],{3905:(e,t,n)=>{n.d(t,{Zo:()=>s,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),c=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},s=function(e){var t=c(e.components);return r.createElement(p.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,p=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),u=c(n),m=a,k=u["".concat(p,".").concat(m)]||u[m]||d[m]||l;return n?r.createElement(k,o(o({ref:t},s),{},{components:n})):r.createElement(k,o({ref:t},s))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=u;var i={};for(var p in t)hasOwnProperty.call(t,p)&&(i[p]=t[p]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var c=2;c<l;c++)o[c]=n[c];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},1232:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>o,default:()=>d,frontMatter:()=>l,metadata:()=>i,toc:()=>c});var r=n(3117),a=(n(7294),n(3905));const l={title:"\u7ba1\u7406 Server \u89d2\u8272",weight:60},o=void 0,i={unversionedId:"installation/server-roles",id:"installation/server-roles",title:"\u7ba1\u7406 Server \u89d2\u8272",description:"\u4f7f\u7528 --cluster-init \u542f\u52a8 K3s Server \u5c06\u8fd0\u884c\u6240\u6709 control-plane \u7ec4\u4ef6\uff0c\u5305\u62ec apiserver\u3001controller-manager\u3001scheduler \u548c etcd\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u7981\u7528\u7279\u5b9a\u7ec4\u4ef6\u6765\u5c06 control-plane \u548c etcd \u89d2\u8272\u62c6\u5206\u5230\u5355\u72ec\u7684\u8282\u70b9\u4e0a\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/server-roles.md",sourceDirName:"installation",slug:"/installation/server-roles",permalink:"/zh/installation/server-roles",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u7ba1\u7406 Server \u89d2\u8272",weight:60},sidebar:"mySidebar",previous:{title:"\u79bb\u7ebf\u5b89\u88c5",permalink:"/zh/installation/airgap"},next:{title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",permalink:"/zh/installation/packaged-components"}},p={},c=[{value:"\u4e13\u7528 <code>etcd</code> \u8282\u70b9",id:"\u4e13\u7528-etcd-\u8282\u70b9",level:2},{value:"\u4e13\u7528 <code>control-plane</code> \u8282\u70b9",id:"\u4e13\u7528-control-plane-\u8282\u70b9",level:2},{value:"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709 server",id:"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709-server",level:2},{value:"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5",id:"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5",level:2}],s={toc:c};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},s,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," \u542f\u52a8 K3s Server \u5c06\u8fd0\u884c\u6240\u6709 control-plane \u7ec4\u4ef6\uff0c\u5305\u62ec apiserver\u3001controller-manager\u3001scheduler \u548c etcd\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u7981\u7528\u7279\u5b9a\u7ec4\u4ef6\u6765\u5c06 control-plane \u548c etcd \u89d2\u8272\u62c6\u5206\u5230\u5355\u72ec\u7684\u8282\u70b9\u4e0a\u3002"),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"\u672c\u6587\u6863\u4ec5\u9002\u7528\u4e8e\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u7684\u60c5\u51b5\u3002\u5982\u679c\u6ca1\u6709\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u6240\u6709 Server \u90fd\u5c06\u5177\u6709 control-plane \u89d2\u8272\u5e76\u8fd0\u884c control-plane \u7ec4\u4ef6\u3002")),(0,a.kt)("h2",{id:"\u4e13\u7528-etcd-\u8282\u70b9"},"\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"h2"},"etcd")," \u8282\u70b9"),(0,a.kt)("p",null,"\u8981\u521b\u5efa\u4ec5\u5177\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u89d2\u8272\u7684 server\uff0c\u8bf7\u5728\u7981\u7528\u6240\u6709 control plane \u7ec4\u4ef6\u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},"curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler\n")),(0,a.kt)("p",null,"\u7b2c\u4e00\u4e2a\u8282\u70b9\u5c06\u542f\u52a8 etcd\uff0c\u7136\u540e\u7b49\u5f85\u5176\u4ed6 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u548c/\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u8282\u70b9\u52a0\u5165\u3002\u5728\u52a0\u5165\u542f\u7528\u4e86 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u7ec4\u4ef6\u7684\u5176\u4ed6 server \u4e4b\u524d\uff0c\u96c6\u7fa4\u5c06\u65e0\u6cd5\u4f7f\u7528\u3002"),(0,a.kt)("h2",{id:"\u4e13\u7528-control-plane-\u8282\u70b9"},"\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"h2"},"control-plane")," \u8282\u70b9"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u8282\u70b9\u4e0d\u80fd\u662f\u96c6\u7fa4\u4e2d\u7684\u7b2c\u4e00\u4e2a server\u3002\u5728\u52a0\u5165\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u8282\u70b9\u4e4b\u524d\uff0c\u5fc5\u987b\u6709\u4e00\u4e2a\u5177\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u89d2\u8272\u7684\u73b0\u6709\u8282\u70b9\u3002")),(0,a.kt)("p",null,"\u8981\u521b\u5efa\u4ec5\u5177\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u89d2\u8272\u7684 server\uff0c\u8bf7\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-etcd")," \u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443\n")),(0,a.kt)("p",null,"\u521b\u5efa\u4e13\u7528 Server \u8282\u70b9\u540e\uff0c\u6240\u9009\u89d2\u8272\u5c06\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl get node")," \u4e2d\u53ef\u89c1\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME           STATUS   ROLES                       AGE     VERSION\nk3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1\nk3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1\n")),(0,a.kt)("h2",{id:"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709-server"},"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709 server"),(0,a.kt)("p",null,"\u5982\u679c\u5728\u5220\u9664\u4e86 disable \u6807\u5fd7\u7684\u60c5\u51b5\u4e0b\u91cd\u542f K3s\uff0c\u4f60\u53ef\u4ee5\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709\u7684\u4e13\u7528\u8282\u70b9\u3002\u4f8b\u5982\uff0c\u8981\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u89d2\u8272\u6dfb\u52a0\u5230\u4e13\u7528\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u8282\u70b9\uff0c\u4f60\u53ef\u4ee5\u4ece systemd \u5355\u5143\u6216\u914d\u7f6e\u6587\u4ef6\u4e2d\u5220\u9664 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-apiserver --disable-controller -manager --disable-scheduler")," \u6807\u8bb0\uff0c\u5e76\u91cd\u542f\u670d\u52a1\u3002"),(0,a.kt)("h2",{id:"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5"},"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5"),(0,a.kt)("p",null,"\u4e0e\u6240\u6709\u5176\u4ed6 CLI \u6807\u5fd7\u4e00\u6837\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\u6765\u7981\u7528\u7ec4\u4ef6\uff0c\u800c\u4e0d\u662f\u5c06\u9009\u9879\u4f5c\u4e3a CLI \u6807\u5fd7\u4f20\u9012\u3002\u4f8b\u5982\uff0c\u8981\u521b\u5efa\u4e13\u7528\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u8282\u70b9\uff0c\u4f60\u53ef\u4ee5\u5c06\u4ee5\u4e0b\u503c\u653e\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u4e2d\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"cluster-init: true\ndisable-apiserver: true\ndisable-controller-manager: true\ndisable-scheduler: true\n")))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6499],{3905:(e,t,n)=>{n.d(t,{Zo:()=>s,kt:()=>m});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var p=r.createContext({}),c=function(e){var t=r.useContext(p),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},s=function(e){var t=c(e.components);return r.createElement(p.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},u=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,p=e.parentName,s=i(e,["components","mdxType","originalType","parentName"]),u=c(n),m=a,k=u["".concat(p,".").concat(m)]||u[m]||d[m]||l;return n?r.createElement(k,o(o({ref:t},s),{},{components:n})):r.createElement(k,o({ref:t},s))}));function m(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=u;var i={};for(var p in t)hasOwnProperty.call(t,p)&&(i[p]=t[p]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var c=2;c<l;c++)o[c]=n[c];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}u.displayName="MDXCreateElement"},1232:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>p,contentTitle:()=>o,default:()=>d,frontMatter:()=>l,metadata:()=>i,toc:()=>c});var r=n(3117),a=(n(7294),n(3905));const l={title:"\u7ba1\u7406 Server \u89d2\u8272",weight:60},o=void 0,i={unversionedId:"installation/server-roles",id:"installation/server-roles",title:"\u7ba1\u7406 Server \u89d2\u8272",description:"\u4f7f\u7528 --cluster-init \u542f\u52a8 K3s Server \u5c06\u8fd0\u884c\u6240\u6709 control-plane \u7ec4\u4ef6\uff0c\u5305\u62ec apiserver\u3001controller-manager\u3001scheduler \u548c etcd\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u7981\u7528\u7279\u5b9a\u7ec4\u4ef6\u6765\u5c06 control-plane \u548c etcd \u89d2\u8272\u62c6\u5206\u5230\u5355\u72ec\u7684\u8282\u70b9\u4e0a\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/server-roles.md",sourceDirName:"installation",slug:"/installation/server-roles",permalink:"/zh/installation/server-roles",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u7ba1\u7406 Server \u89d2\u8272",weight:60},sidebar:"mySidebar",previous:{title:"\u79bb\u7ebf\u5b89\u88c5",permalink:"/zh/installation/airgap"},next:{title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",permalink:"/zh/installation/packaged-components"}},p={},c=[{value:"\u4e13\u7528 <code>etcd</code> \u8282\u70b9",id:"\u4e13\u7528-etcd-\u8282\u70b9",level:2},{value:"\u4e13\u7528 <code>control-plane</code> \u8282\u70b9",id:"\u4e13\u7528-control-plane-\u8282\u70b9",level:2},{value:"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709 server",id:"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709-server",level:2},{value:"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5",id:"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5",level:2}],s={toc:c};function d(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},s,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," \u542f\u52a8 K3s Server \u5c06\u8fd0\u884c\u6240\u6709 control-plane \u7ec4\u4ef6\uff0c\u5305\u62ec apiserver\u3001controller-manager\u3001scheduler \u548c etcd\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u7981\u7528\u7279\u5b9a\u7ec4\u4ef6\u6765\u5c06 control-plane \u548c etcd \u89d2\u8272\u62c6\u5206\u5230\u5355\u72ec\u7684\u8282\u70b9\u4e0a\u3002"),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"\u672c\u6587\u6863\u4ec5\u9002\u7528\u4e8e\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u7684\u60c5\u51b5\u3002\u5982\u679c\u6ca1\u6709\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u6240\u6709 Server \u90fd\u5c06\u5177\u6709 control-plane \u89d2\u8272\u5e76\u8fd0\u884c control-plane \u7ec4\u4ef6\u3002")),(0,a.kt)("h2",{id:"\u4e13\u7528-etcd-\u8282\u70b9"},"\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"h2"},"etcd")," \u8282\u70b9"),(0,a.kt)("p",null,"\u8981\u521b\u5efa\u4ec5\u5177\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u89d2\u8272\u7684 server\uff0c\u8bf7\u5728\u7981\u7528\u6240\u6709 control plane \u7ec4\u4ef6\u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre"},"curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler\n")),(0,a.kt)("p",null,"\u7b2c\u4e00\u4e2a\u8282\u70b9\u5c06\u542f\u52a8 etcd\uff0c\u7136\u540e\u7b49\u5f85\u5176\u4ed6 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u548c/\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u8282\u70b9\u52a0\u5165\u3002\u5728\u52a0\u5165\u542f\u7528\u4e86 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u7ec4\u4ef6\u7684\u5176\u4ed6 server \u4e4b\u524d\uff0c\u96c6\u7fa4\u5c06\u65e0\u6cd5\u4f7f\u7528\u3002"),(0,a.kt)("h2",{id:"\u4e13\u7528-control-plane-\u8282\u70b9"},"\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"h2"},"control-plane")," \u8282\u70b9"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u8282\u70b9\u4e0d\u80fd\u662f\u96c6\u7fa4\u4e2d\u7684\u7b2c\u4e00\u4e2a server\u3002\u5728\u52a0\u5165\u4e13\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u8282\u70b9\u4e4b\u524d\uff0c\u5fc5\u987b\u6709\u4e00\u4e2a\u5177\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u89d2\u8272\u7684\u73b0\u6709\u8282\u70b9\u3002")),(0,a.kt)("p",null,"\u8981\u521b\u5efa\u4ec5\u5177\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u89d2\u8272\u7684 server\uff0c\u8bf7\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-etcd")," \u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443\n")),(0,a.kt)("p",null,"\u521b\u5efa\u4e13\u7528 Server \u8282\u70b9\u540e\uff0c\u6240\u9009\u89d2\u8272\u5c06\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"kubectl get node")," \u4e2d\u53ef\u89c1\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME           STATUS   ROLES                       AGE     VERSION\nk3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1\nk3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1\n")),(0,a.kt)("h2",{id:"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709-server"},"\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709 server"),(0,a.kt)("p",null,"\u5982\u679c\u5728\u5220\u9664\u4e86 disable \u6807\u5fd7\u7684\u60c5\u51b5\u4e0b\u91cd\u542f K3s\uff0c\u4f60\u53ef\u4ee5\u5c06\u89d2\u8272\u6dfb\u52a0\u5230\u73b0\u6709\u7684\u4e13\u7528\u8282\u70b9\u3002\u4f8b\u5982\uff0c\u8981\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"control-plane")," \u89d2\u8272\u6dfb\u52a0\u5230\u4e13\u7528\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u8282\u70b9\uff0c\u4f60\u53ef\u4ee5\u4ece systemd \u5355\u5143\u6216\u914d\u7f6e\u6587\u4ef6\u4e2d\u5220\u9664 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable-apiserver --disable-controller -manager --disable-scheduler")," \u6807\u8bb0\uff0c\u5e76\u91cd\u542f\u670d\u52a1\u3002"),(0,a.kt)("h2",{id:"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5"},"\u914d\u7f6e\u6587\u4ef6\u8bed\u6cd5"),(0,a.kt)("p",null,"\u4e0e\u6240\u6709\u5176\u4ed6 CLI \u6807\u5fd7\u4e00\u6837\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6"),"\u6765\u7981\u7528\u7ec4\u4ef6\uff0c\u800c\u4e0d\u662f\u5c06\u9009\u9879\u4f5c\u4e3a CLI \u6807\u5fd7\u4f20\u9012\u3002\u4f8b\u5982\uff0c\u8981\u521b\u5efa\u4e13\u7528\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"etcd")," \u8282\u70b9\uff0c\u4f60\u53ef\u4ee5\u5c06\u4ee5\u4e0b\u503c\u653e\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u4e2d\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-yaml"},"cluster-init: true\ndisable-apiserver: true\ndisable-controller-manager: true\ndisable-scheduler: true\n")))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/9c71bff4.e3a22950.js b/zh/assets/js/9c71bff4.42abfe4f.js
similarity index 99%
rename from zh/assets/js/9c71bff4.e3a22950.js
rename to zh/assets/js/9c71bff4.42abfe4f.js
index d37074e5b..718f7e21c 100644
--- a/zh/assets/js/9c71bff4.e3a22950.js
+++ b/zh/assets/js/9c71bff4.42abfe4f.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4222],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),p=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=p(e.components);return a.createElement(o.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,k=s(e,["components","mdxType","originalType","parentName"]),d=p(n),c=r,m=d["".concat(o,".").concat(c)]||d[c]||u[c]||l;return n?a.createElement(m,i(i({ref:t},k),{},{components:n})):a.createElement(m,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var p=2;p<l;p++)i[p]=n[p];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},89:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},i=void 0,s={unversionedId:"advanced/advanced",id:"advanced/advanced",title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",description:"\u672c\u6587\u63cf\u8ff0\u4e86\u7528\u4e8e\u8fd0\u884c\u548c\u7ba1\u7406 K3s \u7684\u9ad8\u7ea7\u8bbe\u7f6e\uff0c\u4ee5\u53ca\u4e3a K3s \u51c6\u5907\u4e3b\u673a\u64cd\u4f5c\u7cfb\u7edf\u6240\u9700\u7684\u6b65\u9aa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/advanced/advanced.md",sourceDirName:"advanced",slug:"/advanced/",permalink:"/zh/advanced/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},sidebar:"mySidebar",previous:{title:"Helm",permalink:"/zh/helm/"},next:{title:"\u5e38\u89c1\u95ee\u9898",permalink:"/zh/faq/"}},o={},p=[{value:"\u8bc1\u4e66\u7ba1\u7406",id:"\u8bc1\u4e66\u7ba1\u7406",level:2},{value:"CA \u8bc1\u4e66",id:"ca-\u8bc1\u4e66",level:3},{value:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",level:3},{value:"Token \u7ba1\u7406",id:"token-\u7ba1\u7406",level:2},{value:"\u914d\u7f6e HTTP \u4ee3\u7406",id:"\u914d\u7f6e-http-\u4ee3\u7406",level:2},{value:"\u4f7f\u7528 Docker \u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6",id:"\u4f7f\u7528-docker-\u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6",level:2},{value:"\u4f7f\u7528 etcdctl",id:"\u4f7f\u7528-etcdctl",level:2},{value:"\u914d\u7f6e Containerd",id:"\u914d\u7f6e-containerd",level:2},{value:"NVIDIA \u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301",id:"nvidia-\u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301",level:2},{value:"\u8fd0\u884c\u65e0 Agent \u7684 Server\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u8fd0\u884c\u65e0-agent-\u7684-server\u5b9e\u9a8c\u6027",level:2},{value:"\u4f7f\u7528 Rootless \u6a21\u5f0f\u8fd0\u884c Server\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u4f7f\u7528-rootless-\u6a21\u5f0f\u8fd0\u884c-server\u5b9e\u9a8c\u6027",level:2},{value:"Rootless \u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898",id:"rootless-\u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898",level:3},{value:"\u542f\u52a8 Rootless Server",id:"\u542f\u52a8-rootless-server",level:3},{value:"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e",id:"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e",level:3},{value:"Rootless \u6a21\u5f0f\u6545\u969c\u6392\u9664",id:"rootless-\u6a21\u5f0f\u6545\u969c\u6392\u9664",level:3},{value:"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",id:"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",level:2},{value:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1",id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1",level:2},{value:"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907",id:"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907",level:2},{value:"\u65e7\u7684 iptables \u7248\u672c",id:"\u65e7\u7684-iptables-\u7248\u672c",level:3},{value:"Red Hat Enterprise Linux / CentOS",id:"red-hat-enterprise-linux--centos",level:3},{value:"Ubuntu",id:"ubuntu",level:3},{value:"Raspberry Pi",id:"raspberry-pi",level:3},{value:"\u5728 Docker \u4e2d\u8fd0\u884c K3s",id:"\u5728-docker-\u4e2d\u8fd0\u884c-k3s",level:2},{value:"SELinux \u652f\u6301",id:"selinux-\u652f\u6301",level:2},{value:"\u542f\u7528 SELinux \u5f3a\u5236\u6267\u884c",id:"\u542f\u7528-selinux-\u5f3a\u5236\u6267\u884c",level:3},{value:"\u542f\u7528 eStargz \u7684 Lazy Pulling\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u542f\u7528-estargz-\u7684-lazy-pulling\u5b9e\u9a8c\u6027",level:2},{value:"\u4ec0\u4e48\u662f Lazy Pulling \u548c eStargz\uff1f",id:"\u4ec0\u4e48\u662f-lazy-pulling-\u548c-estargz",level:3},{value:"\u914d\u7f6e K3s \u8fdb\u884c eStargz \u7684 Lazy Pulling",id:"\u914d\u7f6e-k3s-\u8fdb\u884c-estargz-\u7684-lazy-pulling",level:3},{value:"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90",id:"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90",level:2},{value:"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7",id:"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7",level:2}],k=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=k("Tabs"),d=k("TabItem"),c={toc:p};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u6587\u63cf\u8ff0\u4e86\u7528\u4e8e\u8fd0\u884c\u548c\u7ba1\u7406 K3s \u7684\u9ad8\u7ea7\u8bbe\u7f6e\uff0c\u4ee5\u53ca\u4e3a K3s \u51c6\u5907\u4e3b\u673a\u64cd\u4f5c\u7cfb\u7edf\u6240\u9700\u7684\u6b65\u9aa4\u3002"),(0,r.kt)("h2",{id:"\u8bc1\u4e66\u7ba1\u7406"},"\u8bc1\u4e66\u7ba1\u7406"),(0,r.kt)("h3",{id:"ca-\u8bc1\u4e66"},"CA \u8bc1\u4e66"),(0,r.kt)("p",null,"K3s \u5728\u7b2c\u4e00\u4e2a Server \u8282\u70b9\u542f\u52a8\u65f6\u751f\u6210\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u3002\u8fd9\u4e9b CA \u8bc1\u4e66\u7684\u6709\u6548\u671f\u4e3a 10 \u5e74\uff0c\u4e0d\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,r.kt)("p",null,"\u6709\u5173\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u6216\u66f4\u65b0\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/certificate#certificate-authority-ca-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate-ca")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,r.kt)("h3",{id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"},"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"),(0,r.kt)("p",null,"K3s \u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\u81ea\u9881\u53d1\u65e5\u8d77 365 \u5929\u5185\u6709\u6548\u3002\u6bcf\u6b21\u542f\u52a8 K3s \u65f6\uff0c\u5df2\u8fc7\u671f\u6216 90 \u5929\u5185\u8fc7\u671f\u7684\u8bc1\u4e66\u90fd\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,r.kt)("p",null,"\u6709\u5173\u624b\u52a8\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/certificate#client-and-server-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,r.kt)("h2",{id:"token-\u7ba1\u7406"},"Token \u7ba1\u7406"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cK3s \u4e3a Server \u548c Agent \u4f7f\u7528\u5355\u4e2a\u9759\u6001 Token\u3002\u521b\u5efa\u96c6\u7fa4\u540e\u4e0d\u80fd\u66f4\u6539\u6b64 Token\u3002\n\u4f60\u53ef\u4ee5\u542f\u7528\u53ea\u80fd\u7528\u4e8e\u52a0\u5165 Agent \u7684\u7b2c\u4e8c\u4e2a\u9759\u6001 Token\uff0c\u6216\u521b\u5efa\u81ea\u52a8\u8fc7\u671f\u7684\u4e34\u65f6 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm")," \u8054\u63a5\u6837\u5f0f Token\u3002\n\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,r.kt)("h2",{id:"\u914d\u7f6e-http-\u4ee3\u7406"},"\u914d\u7f6e HTTP \u4ee3\u7406"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u8fd0\u884c K3s \u7684\u73af\u5883\u4e2d\u53ea\u901a\u8fc7 HTTP \u4ee3\u7406\u8fdb\u884c\u5916\u90e8\u8fde\u63a5\uff0c\u4f60\u53ef\u4ee5\u5728 K3s \u7684 systemd \u670d\u52a1\u4e0a\u914d\u7f6e\u4ee3\u7406\u3002K3s \u5c06\u4f7f\u7528\u8fd9\u4e9b\u4ee3\u7406\u8bbe\u7f6e\uff0c\u5e76\u5411\u4e0b\u4f20\u9012\u5230\u5d4c\u5165\u5f0f containerd \u548c kubelet\u3002"),(0,r.kt)("p",null,"K3s \u5b89\u88c5\u811a\u672c\u4f1a\u81ea\u52a8\u4f7f\u7528\u5f53\u524d shell \u4e2d\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTP_PROXY"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"HTTPS_PROXY")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY"),"\uff0c\u4ee5\u53ca ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTP_PROXY"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTPS_PROXY")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_NO_PROXY")," \u53d8\u91cf\uff08\u5982\u679c\u5b58\u5728\uff09\uff0c\u5e76\u5c06\u5b83\u4eec\u5199\u5165 systemd \u670d\u52a1\u7684\u73af\u5883\u6587\u4ef6\uff0c\u901a\u5e38\u662f\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s.service.env")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s-agent.service.env"))),(0,r.kt)("p",null,"\u4f60\u4e5f\u53ef\u4ee5\u901a\u8fc7\u7f16\u8f91\u8fd9\u4e9b\u6587\u4ef6\u6765\u914d\u7f6e\u4ee3\u7406\u3002"),(0,r.kt)("p",null,"K3s \u4f1a\u81ea\u52a8\u5c06\u96c6\u7fa4\u5185\u90e8 Pod \u548c Service IP \u8303\u56f4\u4ee5\u53ca\u96c6\u7fa4 DNS \u57df\u6dfb\u52a0\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \u6761\u76ee\u5217\u8868\u4e2d\u3002\u4f60\u9700\u8981\u786e\u4fdd Kubernetes \u8282\u70b9\u672c\u8eab\u4f7f\u7528\u7684 IP \u5730\u5740\u8303\u56f4\uff08\u5373\u8282\u70b9\u7684\u516c\u5171\u548c\u79c1\u6709 IP\uff09\u5305\u542b\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \u5217\u8868\u4e2d\uff0c\u6216\u8005\u53ef\u4ee5\u901a\u8fc7\u4ee3\u7406\u8bbf\u95ee\u8282\u70b9\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"HTTP_PROXY=http://your-proxy.example.com:8888\nHTTPS_PROXY=http://your-proxy.example.com:8888\nNO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u4e0d\u5f71\u54cd K3s \u548c Kubelet \u7684\u60c5\u51b5\u4e0b\u4e3a containerd \u914d\u7f6e\u4ee3\u7406\uff0c\u4f60\u53ef\u4ee5\u5728\u53d8\u91cf\u524d\u52a0\u4e0a ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_"),"\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("h2",{id:"\u4f7f\u7528-docker-\u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6"},"\u4f7f\u7528 Docker \u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6"),(0,r.kt)("p",null,"K3s \u5305\u542b\u5e76\u9ed8\u8ba4\u4e3a ",(0,r.kt)("a",{parentName:"p",href:"https://containerd.io/"},"containerd"),"\uff0c\u5b83\u662f\u4e00\u4e2a\u884c\u4e1a\u6807\u51c6\u7684\u5bb9\u5668\u8fd0\u884c\u65f6\u3002\n\u4ece Kubernetes 1.24 \u5f00\u59cb\uff0cKubelet \u4e0d\u518d\u5305\u542b dockershim\uff0c\u8be5\u7ec4\u4ef6\u5141\u8bb8 kubelet \u4e0e dockerd \u901a\u4fe1\u3002\nK3s 1.24 \u53ca\u66f4\u9ad8\u7248\u672c\u5305\u62ec\u4e86 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/Mirantis/cri-dockerd"},"cri-dockerd"),"\uff0c\u5b83\u5141\u8bb8\u4f60\u65e0\u7f1d\u5347\u7ea7\u65e7\u7684 K3s \u7248\u672c\uff0c\u540c\u65f6\u7ee7\u7eed\u4f7f\u7528 Docker \u5bb9\u5668\u8fd0\u884c\u65f6\u3002"),(0,r.kt)("p",null,"\u8981\u4f7f\u7528 Docker \u800c\u4e0d\u662f containerd\uff1a"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 K3s \u8282\u70b9\u4e0a\u5b89\u88c5 Docker\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528 Rancher \u7684\u4e00\u4e2a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/install-docker"},"Docker \u5b89\u88c5\u811a\u672c"),"\u6765\u5b89\u88c5 Docker\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl https://releases.rancher.com/install-docker/20.10.sh | sh\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--docker")," \u9009\u9879\u5b89\u88c5 K3s\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -s - --docker\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u786e\u8ba4\u96c6\u7fa4\u53ef\u7528\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ sudo k3s kubectl get pods --all-namespaces\nNAMESPACE     NAME                                     READY   STATUS      RESTARTS   AGE\nkube-system   local-path-provisioner-6d59f47c7-lncxn   1/1     Running     0          51s\nkube-system   metrics-server-7566d596c8-9tnck          1/1     Running     0          51s\nkube-system   helm-install-traefik-mbkn9               0/1     Completed   1          51s\nkube-system   coredns-8655855d6-rtbnb                  1/1     Running     0          51s\nkube-system   svclb-traefik-jbmvl                      2/2     Running     0          43s\nkube-system   traefik-758cd5fc85-2wz97                 1/1     Running     0          43s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u786e\u8ba4 Docker \u5bb9\u5668\u6b63\u5728\u8fd0\u884c\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'$ sudo docker ps\nCONTAINER ID        IMAGE                     COMMAND                  CREATED              STATUS              PORTS               NAMES\n3e4d34729602        897ce3c5fc8f              "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\nbffdc9d7a65f        rancher/klipper-lb        "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n436b85c5e38d        rancher/library-traefik   "/traefik --configfi\u2026"   About a minute ago   Up About a minute                       k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nde8fded06188        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n7c6a30aeeb2f        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nae6c58cab4a7        9d12f9848b99              "local-path-provisio\u2026"   About a minute ago   Up About a minute                       k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\nbe1450e1a11e        9dd718864ce6              "/metrics-server"        About a minute ago   Up About a minute                       k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0\n4454d14e4d3f        c4d3d16fe508              "/coredns -conf /etc\u2026"   About a minute ago   Up About a minute                       k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\nc3675b87f96c        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\n4b1fddbe6ca6        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\n64d3517d4a95        rancher/pause:3.1         "/pause"\n')))),(0,r.kt)("h2",{id:"\u4f7f\u7528-etcdctl"},"\u4f7f\u7528 etcdctl"),(0,r.kt)("p",null,"etcdctl \u63d0\u4f9b\u4e86\u4e00\u4e2a\u4e0e etcd \u670d\u52a1\u5668\u4ea4\u4e92\u7684 CLI\u3002K3s \u9644\u5e26 etcdctl\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u4f7f\u7528 etcdctl \u4e0e K3s \u7684\u5d4c\u5165\u5f0f etcd \u8fdb\u884c\u4ea4\u4e92\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://etcd.io/docs/latest/install/"},"\u5b98\u65b9\u6587\u6863"),"\u5b89\u88c5 etcdctl\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'ETCD_VERSION="v3.5.5"\nETCD_URL="https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz"\ncurl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin\n')),(0,r.kt)("p",null,"\u7136\u540e\uff0c\u4f60\u53ef\u4ee5\u5c06 etcdctl \u914d\u7f6e\u4e3a\u4f7f\u7528 K3s \u7ba1\u7406\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u6765\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\uff0c\u4ece\u800c\u4f7f\u7528 etcdctl\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo etcdctl version \\\n  --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\\n  --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\\n  --key=/var/lib/rancher/k3s/server/tls/etcd/client.key\n")),(0,r.kt)("h2",{id:"\u914d\u7f6e-containerd"},"\u914d\u7f6e Containerd"),(0,r.kt)("p",null,"K3s \u4f1a\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/agent/etc/containerd/config.toml")," \u4e2d\u4e3a containerd \u751f\u6210 config.toml\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u8981\u5bf9\u8fd9\u4e2a\u6587\u4ef6\u8fdb\u884c\u9ad8\u7ea7\u5b9a\u5236\uff0c\u4f60\u53ef\u4ee5\u5728\u540c\u4e00\u76ee\u5f55\u4e2d\u521b\u5efa\u53e6\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," \u7684\u6587\u4ef6\uff0c\u6b64\u6587\u4ef6\u5c06\u4f1a\u4ee3\u66ff\u9ed8\u8ba4\u8bbe\u7f6e\u3002"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," \u662f\u4e00\u4e2a Go \u6a21\u677f\u6587\u4ef6\uff0c\u5e76\u4e14 ",(0,r.kt)("inlineCode",{parentName:"p"},"config.Node")," \u7ed3\u6784\u4f1a\u88ab\u4f20\u9012\u7ed9\u6a21\u677f\u3002\u6709\u5173\u5982\u4f55\u4f7f\u7528\u8be5\u7ed3\u6784\u81ea\u5b9a\u4e49\u914d\u7f6e\u6587\u4ef6\u7684 Linux \u548c Windows \u793a\u4f8b\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/agent/templates"},"\u6b64\u6587\u4ef6\u5939"),"\u3002\nconfig.Node golang \u7ed3\u6784\u5b9a\u4e49\u5728",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/daemons/config/types.go#L37"},"\u8fd9\u91cc"),"\u3002"),(0,r.kt)("h2",{id:"nvidia-\u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301"},"NVIDIA \u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301"),(0,r.kt)("p",null,"\u5982\u679c NVIDIA \u5bb9\u5668\u8fd0\u884c\u65f6\u5728 K3s \u542f\u52a8\u65f6\u5b58\u5728\uff0cK3s \u5c06\u81ea\u52a8\u68c0\u6d4b\u5e76\u914d\u7f6e\u5b83\u3002"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\u6309\u7167\u4ee5\u4e0b\u8bf4\u660e\u5728\u8282\u70b9\u4e0a\u5b89\u88c5 nvidia-container \u5305\u4ed3\u5e93\uff1a\n",(0,r.kt)("a",{parentName:"li",href:"https://nvidia.github.io/libnvidia-container/"},"https://nvidia.github.io/libnvidia-container/")),(0,r.kt)("li",{parentName:"ol"},"\u5b89\u88c5 nvidia \u5bb9\u5668\u8fd0\u884c\u65f6\u5305\u3002\u4f8b\u5982\uff1a\n",(0,r.kt)("inlineCode",{parentName:"li"},"apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server")),(0,r.kt)("li",{parentName:"ol"},"\u5b89\u88c5 K3s\uff0c\u5982\u679c\u5df2\u7ecf\u5b89\u88c5\u5219\u91cd\u542f\u5b83\uff1a\n",(0,r.kt)("inlineCode",{parentName:"li"},"curl -ksL get.k3s.io | sh -")),(0,r.kt)("li",{parentName:"ol"},"\u786e\u8ba4 K3s \u5df2\u7ecf\u627e\u5230 nvidia \u5bb9\u5668\u8fd0\u884c\u65f6\uff1a\n",(0,r.kt)("inlineCode",{parentName:"li"},"grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml"))),(0,r.kt)("p",null,"\u8fd9\u5c06\u6839\u636e\u627e\u5230\u7684\u8fd0\u884c\u65f6\u53ef\u6267\u884c\u6587\u4ef6\u81ea\u52a8\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia")," \u548c/\u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia-experimental")," \u8fd0\u884c\u65f6\u6dfb\u52a0\u5230 containerd \u914d\u7f6e\u4e2d\u3002\n\u4f60\u4ecd\u7136\u5fc5\u987b\u5411\u96c6\u7fa4\u6dfb\u52a0 RuntimeClass \u5b9a\u4e49\uff0c\u5e76\u901a\u8fc7\u5728 Pod \u89c4\u8303\u4e2d\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia")," \u6765\u90e8\u7f72\u663e\u5f0f\u8bf7\u6c42\u8fd0\u884c\u65f6\u7684 Pod\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: node.k8s.io/v1\nkind: RuntimeClass\nmetadata:\n  name: nvidia\nhandler: nvidia\n---\napiVersion: v1\nkind: Pod\nmetadata:\n  name: nbody-gpu-benchmark\n  namespace: default\nspec:\n  restartPolicy: OnFailure\n  runtimeClassName: nvidia\n  containers:\n  - name: cuda-container\n    image: nvcr.io/nvidia/k8s/cuda-sample:nbody\n    args: ["nbody", "-gpu", "-benchmark"]\n    resources:\n      limits:\n        nvidia.com/gpu: 1\n    env:\n    - name: NVIDIA_VISIBLE_DEVICES\n      value: all\n    - name: NVIDIA_DRIVER_CAPABILITIES\n      value: all\n')),(0,r.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cNVIDIA Container Runtime \u4e5f\u7ecf\u5e38\u4e0e ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/k8s-device-plugin/"},"NVIDIA Device Plugin")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/gpu-feature-discovery/"},"GPU Feature Discovery")," \u4e00\u8d77\u4f7f\u7528\uff0c\u5b83\u4eec\u5fc5\u987b\u5355\u72ec\u5b89\u88c5\uff0c\u800c\u4e14\u9700\u8981\u4fee\u6539\u4ee5\u786e\u4fdd Pod \u89c4\u8303\u80fd\u5305\u62ec ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),"\uff0c\u5982\u524d\u6240\u8ff0\u3002"),(0,r.kt)("h2",{id:"\u8fd0\u884c\u65e0-agent-\u7684-server\u5b9e\u9a8c\u6027"},"\u8fd0\u884c\u65e0 Agent \u7684 Server\uff08\u5b9e\u9a8c\u6027\uff09"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u8b66\u544a"),"\uff1a\u6b64\u529f\u80fd\u662f\u5b9e\u9a8c\u6027\u7684\u3002")),(0,r.kt)("p",null,"\u5f53\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-agent")," \u6807\u5fd7\u542f\u52a8\u65f6\uff0cServer \u4e0d\u8fd0\u884c kubelet\u3001\u5bb9\u5668\u8fd0\u884c\u65f6\u6216 CNI\u3002\u5b83\u4eec\u4e0d\u4f1a\u5728\u96c6\u7fa4\u4e2d\u6ce8\u518c Node \u8d44\u6e90\uff0c\u4e5f\u4e0d\u4f1a\u51fa\u73b0\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get nodes")," \u8f93\u51fa\u4e2d\u3002\n\u56e0\u4e3a\u5b83\u4eec\u4e0d\u6258\u7ba1 kubelet\uff0c\u6240\u4ee5\u5b83\u4eec\u4e0d\u80fd\u8fd0\u884c pod\uff0c\u4e5f\u4e0d\u80fd\u7531\u4f9d\u8d56\u679a\u4e3e\u96c6\u7fa4\u8282\u70b9\u7684 Operator \u7ba1\u7406\uff0c\u5305\u62ec\u5d4c\u5165\u5f0f etcd controller \u548c system-upgrade-controller\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u8ba9 control plane \u8282\u70b9\u4e0d\u88ab Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u53d1\u73b0\uff0c\u4f60\u53ef\u4ee5\u8fd0\u884c\u65e0 Agent \u7684 Server\uff0c\u4f46\u662f\u4ee3\u4ef7\u662f\u7531\u4e8e\u7f3a\u4e4f\u96c6\u7fa4 Operator \u652f\u6301\uff0c\u7ba1\u7406\u5f00\u9500\u4f1a\u589e\u52a0\u3002"),(0,r.kt)("h2",{id:"\u4f7f\u7528-rootless-\u6a21\u5f0f\u8fd0\u884c-server\u5b9e\u9a8c\u6027"},"\u4f7f\u7528 Rootless \u6a21\u5f0f\u8fd0\u884c Server\uff08\u5b9e\u9a8c\u6027\uff09"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u8b66\u544a"),"\uff1a\u6b64\u529f\u80fd\u662f\u5b9e\u9a8c\u6027\u7684\u3002")),(0,r.kt)("p",null,"Rootless \u6a21\u5f0f\u5141\u8bb8\u975e\u7279\u6743\u7528\u6237\u8fd0\u884c K3s Server\uff0c\u8fd9\u6837\u53ef\u4ee5\u4fdd\u62a4\u4e3b\u673a\u4e0a\u771f\u6b63\u7684 root \u514d\u53d7\u6f5c\u5728\u7684\u5bb9\u5668\u653b\u51fb\u3002"),(0,r.kt)("p",null,"\u6709\u5173 Rootless \u6a21\u5f0f Kubernetes \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/"},"\u6b64\u5904"),"\u3002"),(0,r.kt)("h3",{id:"rootless-\u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898"},"Rootless \u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\u7aef\u53e3")),(0,r.kt)("p",{parentName:"li"}," \u5982\u679c\u4ee5 Rootless \u6a21\u5f0f\u8fd0\u884c\uff0c\u5c06\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u3002\u6362\u8a00\u4e4b\uff0cK3s \u5b9e\u4f8b\u5728\u7f51\u7edc\u4e0e\u4e3b\u673a\u5b8c\u5168\u5206\u79bb\u7684\u60c5\u51b5\u4e0b\u8fd0\u884c\u3002\n\u8981\u4ece\u4e3b\u673a\u8bbf\u95ee\u5728 K3s \u4e2d\u8fd0\u884c\u7684 Service\uff0c\u552f\u4e00\u7684\u65b9\u6cd5\u662f\u8bbe\u7f6e\u8f6c\u53d1\u5230 K3s \u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u7684\u7aef\u53e3\u3002\nRootless \u6a21\u5f0f\u4e0b\u7684 K3s \u5305\u542b\u63a7\u5236\u5668\uff0c\u5b83\u4f1a\u81ea\u52a8\u5c06 6443 \u548c\u4f4e\u4e8e 1024 \u7684 Service \u7aef\u53e3\u7ed1\u5b9a\u5230\u504f\u79fb\u91cf\u4e3a 10000 \u7684\u4e3b\u673a\u3002"),(0,r.kt)("p",{parentName:"li"}," \u4f8b\u5982\uff0c\u7aef\u53e3 80 \u4e0a\u7684 Service \u5728\u4e3b\u673a\u4e0a\u4f1a\u53d8\u6210 10080\uff0c\u4f46 8080 \u4f1a\u53d8\u6210 8080\uff0c\u6ca1\u6709\u4efb\u4f55\u504f\u79fb\u3002\u76ee\u524d\u53ea\u6709 LoadBalancer Service \u662f\u81ea\u52a8\u7ed1\u5b9a\u7684\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Cgroups")),(0,r.kt)("p",{parentName:"li"}," \u4e0d\u652f\u6301 Cgroup v1 \u548c Hybrid v1/v2\uff0c\u4ec5\u652f\u6301\u7eaf Cgroup v2\u3002\u5982\u679c K3s \u5728 Rootless \u6a21\u5f0f\u4e0b\u8fd0\u884c\u65f6\u7531\u4e8e\u7f3a\u5c11 cgroup \u800c\u65e0\u6cd5\u542f\u52a8\uff0c\u5f88\u53ef\u80fd\u4f60\u7684\u8282\u70b9\u5904\u4e8e Hybrid \u6a21\u5f0f\uff0c\u800c\u4e14\u201c\u4e22\u5931\u201d\u7684 cgroup \u4ecd\u7136\u7ed1\u5b9a\u4e86 v1 \u63a7\u5236\u5668\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\u591a\u8282\u70b9/\u591a\u8fdb\u7a0b\u96c6\u7fa4")),(0,r.kt)("p",{parentName:"li"}," \u76ee\u524d\uff0c\u6211\u4eec\u4e0d\u652f\u6301\u591a\u8282\u70b9\u65e0\u6839\u96c6\u7fa4\u6216\u540c\u4e00\u8282\u70b9\u4e0a\u7684\u591a\u4e2a\u65e0\u6839 k3s \u8fdb\u7a0b\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/6488#issuecomment-1314998091"},"#6488"),"\u3002"))),(0,r.kt)("h3",{id:"\u542f\u52a8-rootless-server"},"\u542f\u52a8 Rootless Server"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u542f\u7528 cgroup v2 \u6388\u6743\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/getting-started/common/cgroup2/%E3%80%82"},"https://rootlesscontaine.rs/getting-started/common/cgroup2/\u3002"),"\n\u6b64\u6b65\u9aa4\u662f\u5fc5\u9700\u7684\u3002\u5982\u679c\u6ca1\u6709\u6b63\u786e\u7684 cgroups \u6388\u6743\uff0crootless kubelet \u5c06\u65e0\u6cd5\u542f\u52a8\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service"},(0,r.kt)("inlineCode",{parentName:"a"},"https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service"))," \u4e0b\u8f7d ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\u3002\n\u786e\u4fdd\u4f7f\u7528\u4e86\u76f8\u540c\u7248\u672c\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s"),"\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," \u5b89\u88c5\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"~/.config/systemd/user/k3s-rootless.service"),"\u3002\n\u4e0d\u652f\u6301\u5c06\u6b64\u6587\u4ef6\u5b89\u88c5\u4e3a\u5168\u7cfb\u7edf\u670d\u52a1 (",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/..."),")\u3002\n\u6839\u636e ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u7684\u8def\u5f84\uff0c\u4f60\u53ef\u80fd\u9700\u8981\u4fee\u6539\u6587\u4ef6\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"ExecStart=/usr/local/bin/k3s ...")," \u884c\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user daemon-reload"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user enable --now k3s-rootless"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A"),"\uff0c\u5e76\u786e\u4fdd Pod \u6b63\u5728\u8fd0\u884c\u3002"))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u6ce8\u610f"),"\uff1a\u7531\u4e8e\u7ec8\u7aef\u4f1a\u8bdd\u4e0d\u5141\u8bb8 cgroup v2 \u6388\u6743\uff0c\u56e0\u6b64\u4e0d\u8981\u5c1d\u8bd5\u5728\u7ec8\u7aef\u4e0a\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server --rootless"),"\u3002\n\u5982\u679c\u4f60\u786e\u5b9e\u9700\u8981\u5728\u7ec8\u7aef\u4e0a\u4f7f\u7528\uff0c\u8bf7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"systemd-run --user -p Delegate=yes --tty k3s server --rooless")," \u5c06\u5176\u5305\u88c5\u5728 systemd \u8303\u56f4\u5185\u3002")),(0,r.kt)("h3",{id:"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e"},"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e"),(0,r.kt)("p",null,"Rootless K3s \u4f7f\u7528 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/rootlesskit"},"rootlesskit")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/slirp4netns"},"slirp4netns")," \u5728\u4e3b\u673a\u548c\u7528\u6237\u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u4e4b\u95f4\u8fdb\u884c\u901a\u4fe1\u3002\nrootlesskit \u548c slirp4nets \u4f7f\u7528\u7684\u4e00\u4e9b\u914d\u7f6e\u53ef\u4ee5\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u6765\u8bbe\u7f6e\u3002\u8bbe\u7f6e\u5b83\u4eec\u7684\u6700\u4f73\u65b9\u6cd5\u662f\u5c06\u5b83\u4eec\u6dfb\u52a0\u5230 k3s-rootless systemd \u5355\u5143\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"Environment")," \u5b57\u6bb5\u4e2d\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u53d8\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_MTU")),(0,r.kt)("td",{parentName:"tr",align:null},"1500"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4e3a slirp4netns \u865a\u62df\u63a5\u53e3\u8bbe\u7f6e MTU\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_CIDR")),(0,r.kt)("td",{parentName:"tr",align:null},"10.41.0.0/16"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8bbe\u7f6e slirp4netns \u865a\u62df\u63a5\u53e3\u4f7f\u7528\u7684 CIDR\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_ENABLE_IPV6")),(0,r.kt)("td",{parentName:"tr",align:null},"autotedected"),(0,r.kt)("td",{parentName:"tr",align:null},"\u542f\u7528 slirp4netns IPv6 \u652f\u6301\u3002\u5982\u679c\u672a\u6307\u5b9a\uff0c\u5219\u5728 K3s \u914d\u7f6e\u4e3a\u53cc\u6808\u65f6\u81ea\u52a8\u542f\u7528\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_PORT_DRIVER")),(0,r.kt)("td",{parentName:"tr",align:null},"builtin"),(0,r.kt)("td",{parentName:"tr",align:null},"\u9009\u62e9\u65e0\u6839 port driver\uff0c\u53ef\u9009\u503c\u662f ",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"td"},"slirp4netns"),"\u3002",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," \u901f\u5ea6\u66f4\u5feb\uff0c\u4f46\u4f1a\u4f2a\u88c5\u5165\u7ad9\u6570\u636e\u5305\u7684\u539f\u59cb\u6e90\u5730\u5740\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_DISABLE_HOST_LOOPBACK")),(0,r.kt)("td",{parentName:"tr",align:null},"true"),(0,r.kt)("td",{parentName:"tr",align:null},"\u63a7\u5236\u662f\u5426\u5141\u8bb8\u901a\u8fc7\u7f51\u5173\u63a5\u53e3\u8bbf\u95ee\u4e3b\u673a\u7684\u73af\u56de\u5730\u5740\u3002\u51fa\u4e8e\u5b89\u5168\u539f\u56e0\uff0c\u5efa\u8bae\u4e0d\u8981\u66f4\u6539\u6b64\u8bbe\u7f6e\u3002")))),(0,r.kt)("h3",{id:"rootless-\u6a21\u5f0f\u6545\u969c\u6392\u9664"},"Rootless \u6a21\u5f0f\u6545\u969c\u6392\u9664"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"li"},"systemctl --user status k3s-rootless")," \u6765\u68c0\u67e5 daemon \u72b6\u6001"),(0,r.kt)("li",{parentName:"ul"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl --user -f -u k3s-rootless")," \u6765\u67e5\u770b\u200b\u200b daemon \u65e5\u5fd7"),(0,r.kt)("li",{parentName:"ul"},"\u53e6\u89c1 ",(0,r.kt)("a",{parentName:"li",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/"))),(0,r.kt)("h2",{id:"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"},"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"),(0,r.kt)("p",null,"K3s Agent \u53ef\u4ee5\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," \u9009\u9879\u6765\u914d\u7f6e\uff0c\u5b83\u4eec\u4f1a\u4e3a kubelet \u6dfb\u52a0\u6807\u7b7e\u548c\u6c61\u70b9\u3002\u8fd9\u4e24\u4e2a\u9009\u9879\u4ec5\u5728",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/agent#agent-%E7%9A%84%E8%8A%82%E7%82%B9%E6%A0%87%E7%AD%BE%E5%92%8C%E6%B1%A1%E7%82%B9"},"\u6ce8\u518c\u65f6"),"\u6dfb\u52a0\u6807\u7b7e\u548c/\u6216\u6c61\u70b9\uff0c\u56e0\u6b64\u53ea\u80fd\u5728\u8282\u70b9\u9996\u6b21\u52a0\u5165\u96c6\u7fa4\u65f6\u8bbe\u7f6e\u3002"),(0,r.kt)("p",null,"\u5f53\u524d\u6240\u6709\u7684 Kubernetes \u7248\u672c\u90fd\u9650\u5236\u8282\u70b9\u6ce8\u518c\u5230\u5e26\u6709 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"k8s.io")," \u524d\u7f00\u7684\u5927\u90e8\u5206\u6807\u7b7e\uff0c\u7279\u522b\u662f ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io/role")," \u6807\u7b7e\u3002\u5982\u679c\u4f60\u5c1d\u8bd5\u542f\u52a8\u5e26\u6709\u4e0d\u5141\u8bb8\u7684\u6807\u7b7e\u7684\u8282\u70b9\uff0cK3s \u5c06\u65e0\u6cd5\u542f\u52a8\u3002\u6b63\u5982 Kubernetes \u4f5c\u8005\u6240\u8bf4\uff1a"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\u4e0d\u5141\u8bb8\u8282\u70b9\u65ad\u8a00\u81ea\u5df1\u7684\u89d2\u8272\u6807\u7b7e\u3002\u8282\u70b9\u89d2\u8272\u901a\u5e38\u7528\u4e8e\u8bc6\u522b\u8282\u70b9\u7684\u7279\u6743\u6216 control plane \u7c7b\u578b\uff0c\u5982\u679c\u5141\u8bb8\u8282\u70b9\u5c06\u81ea\u5df1\u6807\u8bb0\u5230\u8be5\u6c60\uff0c\u90a3\u4e48\u53d7\u611f\u67d3\u7684\u8282\u70b9\u5c06\u80fd\u5438\u5f15\u53ef\u6388\u4e88\u66f4\u9ad8\u7279\u6743\u51ed\u8bc1\u8bbf\u95ee\u6743\u9650\u7684\u5de5\u4f5c\u8d1f\u8f7d\uff08\u5982 control plane \u5b88\u62a4\u8fdb\u7a0b\uff09\u3002")),(0,r.kt)("p",null,"\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/279-limit-node-access/README.md#proposal"},"SIG-Auth KEP 279"),"\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u8282\u70b9\u6ce8\u518c\u540e\u66f4\u6539\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9\uff0c\u6216\u8005\u6dfb\u52a0\u4fdd\u7559\u6807\u7b7e\uff0c\u8bf7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),"\u3002\u5173\u4e8e\u5982\u4f55\u6dfb\u52a0",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"\u6c61\u70b9"),"\u548c",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"\u8282\u70b9\u6807\u7b7e"),"\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u5b98\u65b9 Kubernetes \u6587\u6863\u3002"),(0,r.kt)("h2",{id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1"},"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1"),(0,r.kt)("p",null,"\u5b89\u88c5\u811a\u672c\u5c06\u81ea\u52a8\u68c0\u6d4b\u4f60\u7684\u64cd\u4f5c\u7cfb\u7edf\u4f7f\u7528\u7684\u662f systemd \u8fd8\u662f openrc\uff0c\u5e76\u5728\u5b89\u88c5\u8fc7\u7a0b\u4e2d\u542f\u52a8\u8be5\u670d\u52a1\u3002"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 openrc \u8fd0\u884c\u65f6\uff0c\u5c06\u5728 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log")," \u4e2d\u521b\u5efa\u65e5\u5fd7\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 systemd \u8fd0\u884c\u65f6\uff0c\u5c06\u5728 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/syslog")," \u4e2d\u521b\u5efa\u65e5\u5fd7\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"\uff08Agent \u4e0a\u662f ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s-agent"),"\uff09\u67e5\u770b\u65e5\u5fd7\u3002")),(0,r.kt)("p",null,"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7981\u7528\u81ea\u52a8\u542f\u52a8\u548c\u670d\u52a1\u542f\u7528\u7684\u793a\u4f8b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,r.kt)("h2",{id:"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),(0,r.kt)("h3",{id:"\u65e7\u7684-iptables-\u7248\u672c"},"\u65e7\u7684 iptables \u7248\u672c"),(0,r.kt)("p",null,"\u51e0\u4e2a\u4e3b\u6d41 Linux \u53d1\u884c\u7248\u53d1\u5e03\u7684 iptables \u7248\u672c\u5305\u542b\u4e00\u4e2a\u9519\u8bef\uff0c\u8be5\u9519\u8bef\u4f1a\u5bfc\u81f4\u91cd\u590d\u89c4\u5219\u7684\u7d2f\u79ef\uff0c\u4ece\u800c\u5bf9\u8282\u70b9\u7684\u6027\u80fd\u548c\u7a33\u5b9a\u6027\u4ea7\u751f\u8d1f\u9762\u5f71\u54cd\u3002\u6709\u5173\u5982\u4f55\u786e\u5b9a\u4f60\u662f\u5426\u53d7\u6b64\u95ee\u9898\u5f71\u54cd\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/3117"},"issue #3117"),"\u3002"),(0,r.kt)("p",null,"K3s \u5177\u6709\u4e00\u4e2a\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\u7684 iptables (v1.8.8) \u7248\u672c\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," \u9009\u9879\u6765\u542f\u52a8 K3s\uff0c\u6216\u4ece\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u5378\u8f7d iptables/nftables \u5305\uff0c\u4ece\u800c\u8ba9 K3s \u4f7f\u7528\u6346\u7ed1\u7684 iptables \u7248\u672c\u3002"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," \u6807\u5fd7\u4ece 2022-12 \u7248\u672c\u5f00\u59cb\u53ef\u7528\uff08v1.26.0+k3s1\u3001v1.25.5+k3s1\u3001v1.24.9+k3s1\u3001v1.23.15+k3s1\uff09\u3002")),(0,r.kt)("h3",{id:"red-hat-enterprise-linux--centos"},"Red Hat Enterprise Linux / CentOS"),(0,r.kt)("p",null,"\u5efa\u8bae\u5173\u95ed firewalld\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable firewalld --now\n")),(0,r.kt)("p",null,"\u5982\u679c\u8981\u4fdd\u6301\u542f\u7528 firewalld\uff0c\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u9700\u8981\u4ee5\u4e0b\u89c4\u5219\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"firewall-cmd --permanent --add-port=6443/tcp #apiserver\nfirewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods\nfirewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services\nfirewall-cmd --reload\n")),(0,r.kt)("p",null,"\u4f60\u53ef\u80fd\u8fd8\u9700\u8981\u6253\u5f00\u5176\u4ed6\u7aef\u53e3\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/requirements#k3s-server-%E8%8A%82%E7%82%B9%E7%9A%84%E5%85%A5%E7%AB%99%E8%A7%84%E5%88%99"},"\u5165\u7ad9\u89c4\u5219"),"\u3002\u5982\u679c\u66f4\u6539\u4e86 pod \u6216\u670d\u52a1\u7684\u9ed8\u8ba4 CIDR\uff0c\u5219\u9700\u8981\u76f8\u5e94\u5730\u66f4\u65b0\u9632\u706b\u5899\u89c4\u5219\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u542f\u7528\uff0c\u5219\u9700\u8981\u7981\u7528 nm-cloud-setup \u5e76\u91cd\u65b0\u542f\u52a8\u8282\u70b9\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable nm-cloud-setup.service nm-cloud-setup.timer\nreboot\n")),(0,r.kt)("h3",{id:"ubuntu"},"Ubuntu"),(0,r.kt)("p",null,"\u5efa\u8bae\u5173\u95ed ufw\uff08\u4e0d\u590d\u6742\u7684\u9632\u706b\u5899\uff09\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw disable\n")),(0,r.kt)("p",null,"\u5982\u679c\u8981\u4fdd\u6301\u542f\u7528 ufw\uff0c\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u9700\u8981\u4ee5\u4e0b\u89c4\u5219\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw allow 6443/tcp #apiserver\nufw allow from 10.42.0.0/16 to any #pods\nufw allow from 10.43.0.0/16 to any #services\n")),(0,r.kt)("p",null,"\u4f60\u53ef\u80fd\u8fd8\u9700\u8981\u6253\u5f00\u5176\u4ed6\u7aef\u53e3\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/requirements#k3s-server-%E8%8A%82%E7%82%B9%E7%9A%84%E5%85%A5%E7%AB%99%E8%A7%84%E5%88%99"},"\u5165\u7ad9\u89c4\u5219"),"\u3002\u5982\u679c\u66f4\u6539\u4e86 pod \u6216\u670d\u52a1\u7684\u9ed8\u8ba4 CIDR\uff0c\u5219\u9700\u8981\u76f8\u5e94\u5730\u66f4\u65b0\u9632\u706b\u5899\u89c4\u5219\u3002"),(0,r.kt)("h3",{id:"raspberry-pi"},"Raspberry Pi"),(0,r.kt)("p",null,"Raspberry Pi OS \u57fa\u4e8e Debian\uff0c\u53ef\u80fd\u4f1a\u53d7\u5230\u65e7 iptables \u7248\u672c\u7684\u5f71\u54cd\u3002\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"#%E6%97%A7%E7%9A%84-iptables-%E7%89%88%E6%9C%AC"},"\u89e3\u51b3\u65b9\u6cd5"),"\u3002"),(0,r.kt)("p",null,"\u6807\u51c6 Raspberry Pi OS \u4e0d\u4f1a\u5728\u542f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," \u7684\u60c5\u51b5\u4e0b\u5f00\u59cb\u3002",(0,r.kt)("strong",{parentName:"p"},"K3S")," \u9700\u8981 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," \u6765\u542f\u52a8 systemd \u670d\u52a1\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroup_memory=1 cgroup_enable=memory")," \u9644\u52a0\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"/boot/cmdline.txt")," \u6765\u542f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," \u3002"),(0,r.kt)("p",null,"\u793a\u4f8b cmdline.txt\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory\n")),(0,r.kt)("p",null,"\u4ece Ubuntu 21.10 \u5f00\u59cb\uff0c\u5bf9 Raspberry Pi \u7684 vxlan \u652f\u6301\u5df2\u79fb\u81f3\u5355\u72ec\u7684\u5185\u6838\u6a21\u5757\u4e2d\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt install linux-modules-extra-raspi\n")),(0,r.kt)("h2",{id:"\u5728-docker-\u4e2d\u8fd0\u884c-k3s"},"\u5728 Docker \u4e2d\u8fd0\u884c K3s"),(0,r.kt)("p",null,"\u5728 Docker \u4e2d\u8fd0\u884c K3s \u6709\u51e0\u79cd\u65b9\u6cd5\uff1a"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"K3d",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3d-io/k3d"},"k3d")," \u662f\u4e00\u4e2a\u7528\u4e8e\u5728 Docker \u4e2d\u8f7b\u677e\u8fd0\u884c\u591a\u8282\u70b9 K3s \u96c6\u7fa4\u7684\u5b9e\u7528\u7a0b\u5e8f\u3002"),(0,r.kt)("p",null,"K3d \u80fd\u8ba9\u4f60\u8f7b\u677e\u5728 Docker \u4e2d\u521b\u5efa\u5355\u8282\u70b9\u548c\u591a\u8282\u70b9 K3s \u96c6\u7fa4\uff08\u4f8b\u5982 Kubernetes \u4e0a\u7684\u672c\u5730\u5f00\u53d1\uff09\u3002"),(0,r.kt)("p",null,"\u6709\u5173\u5982\u4f55\u5b89\u88c5\u548c\u4f7f\u7528 K3d \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://k3d.io/#installation"},"\u5b89\u88c5"),"\u6587\u6863\u3002")),(0,r.kt)(d,{value:"Docker",mdxType:"TabItem"},(0,r.kt)("p",null,"\u8981\u4f7f\u7528 Docker\uff0c\u4f60\u8fd8\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"rancher/k3s")," \u955c\u50cf\u6765\u8fd0\u884c K3s Server \u548c Agent\u3002\n\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"docker run")," \u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker run \\\n  --privileged \\\n  --name k3s-server-1 \\\n  --hostname k3s-server-1 \\\n  -p 6443:6443 \\\n  -d rancher/k3s:v1.24.10-k3s1 \\\n  server\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\u4f60\u5fc5\u987b\u6307\u5b9a\u4e00\u4e2a\u6709\u6548\u7684 K3s \u7248\u672c\u4f5c\u4e3a\u6807\u7b7e\uff1b\u6211\u4eec\u672a\u7ef4\u62a4 ",(0,r.kt)("inlineCode",{parentName:"p"},"latest")," \u6807\u7b7e\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","Docker \u955c\u50cf\u4e0d\u652f\u6301\u5728\u6807\u7b7e\u4e2d\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \u7b26\u53f7\uff0c\u56e0\u6b64\uff0c\u8bf7\u5728\u6807\u7b7e\u4e2d\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"-")," \u7b26\u53f7\u3002")),(0,r.kt)("p",null,"K3s \u8fd0\u884c\u540e\uff0c\u4f60\u53ef\u4ee5\u5c06 admin kubeconfig \u4ece Docker \u5bb9\u5668\u4e2d\u590d\u5236\u51fa\u6765\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config\n")))),(0,r.kt)("h2",{id:"selinux-\u652f\u6301"},"SELinux \u652f\u6301"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece v1.19.4+k3s1 \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u5728\u9ed8\u8ba4\u542f\u7528 SELinux \u7684\u7cfb\u7edf\uff08\u4f8b\u5982 CentOS\uff09\u4e0a\u5b89\u88c5 K3s\uff0c\u5219\u5fc5\u987b\u786e\u4fdd\u5df2\u5b89\u88c5\u6b63\u786e\u7684 SELinux \u7b56\u7565\u3002"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"\u81ea\u52a8\u5b89\u88c5",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\u5982\u679c\u7cfb\u7edf\u517c\u5bb9\uff0c\u800c\u4e14\u6ca1\u6709\u8fdb\u884c\u79bb\u7ebf\u5b89\u88c5\uff0c\u90a3\u4e48",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9"},"\u5b89\u88c5\u811a\u672c"),"\u5c06\u81ea\u52a8\u4ece Rancher RPM \u4ed3\u5e93\u5b89\u88c5 SELinux RPM\u3002\u4f60\u901a\u8fc7\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_SELINUX_RPM=true")," \u6765\u8df3\u8fc7\u81ea\u52a8\u5b89\u88c5\u3002")),(0,r.kt)(d,{value:"\u624b\u52a8\u5b89\u88c5",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5b89\u88c5\u5fc5\u8981\u7684\u7b56\u7565\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"yum install -y container-selinux selinux-policy-base\nyum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm\n")),(0,r.kt)("p",null,"\u8981\u8ba9\u5b89\u88c5\u811a\u672c\u62a5\u544a warning \u800c\u4e0d\u662f fail\uff0c\u4f60\u53ef\u4ee5\u8bbe\u7f6e\u73af\u5883\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SELINUX_WARN=true"),"\u3002"))),(0,r.kt)("h3",{id:"\u542f\u7528-selinux-\u5f3a\u5236\u6267\u884c"},"\u542f\u7528 SELinux \u5f3a\u5236\u6267\u884c"),(0,r.kt)("p",null,"\u8981\u5229\u7528 SELinux\uff0c\u8bf7\u5728\u542f\u52a8 K3s Server \u548c Agent \u65f6\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"p"},"--selinux")," \u6807\u5fd7\u3002"),(0,r.kt)("p",null,"\u4f60\u4e5f\u53ef\u4ee5\u5728 K3s ",(0,r.kt)("a",{parentName:"p",href:"#"},"\u914d\u7f6e\u6587\u4ef6"),"\u4e2d\u6307\u5b9a\u6b64\u9009\u9879\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"selinux: true\n")),(0,r.kt)("p",null,"\u4e0d\u652f\u6301\u5728 SELinux \u4e0b\u4f7f\u7528\u81ea\u5b9a\u4e49 ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir"),"\u3002\u8981\u81ea\u5b9a\u4e49\u5b83\uff0c\u4f60\u53ef\u80fd\u9700\u8981\u81ea\u884c\u7f16\u5199\u81ea\u5b9a\u4e49\u7b56\u7565\u3002\u5982\u9700\u6307\u5bfc\uff0c\u4f60\u53ef\u4ee5\u53c2\u8003 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containers/container-selinux"},"containers/container-selinux")," \u4ed3\u5e93\uff0c\u4ed3\u5e93\u5305\u542b Container Runtime \u7684 SELinux \u7b56\u7565\u6587\u4ef6\uff0c\u540c\u65f6\u4f60\u53ef\u4ee5\u53c2\u8003 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s-selinux"},"k3s-io/k3s-selinux")," \u4ed3\u5e93\uff0c\u8be5\u4ed3\u5e93\u5305\u542b K3s \u7684 SELinux \u7b56\u7565\u3002"),(0,r.kt)("h2",{id:"\u542f\u7528-estargz-\u7684-lazy-pulling\u5b9e\u9a8c\u6027"},"\u542f\u7528 eStargz \u7684 Lazy Pulling\uff08\u5b9e\u9a8c\u6027\uff09"),(0,r.kt)("h3",{id:"\u4ec0\u4e48\u662f-lazy-pulling-\u548c-estargz"},"\u4ec0\u4e48\u662f Lazy Pulling \u548c eStargz\uff1f"),(0,r.kt)("p",null,"\u62c9\u53d6\u955c\u50cf\u662f\u5bb9\u5668\u751f\u547d\u5468\u671f\u4e2d\u6bd4\u8f83\u8017\u65f6\u7684\u6b65\u9aa4\u4e4b\u4e00\n\uff08\u6839\u636e ",(0,r.kt)("a",{parentName:"p",href:"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"},"Harter \u7b49\u4eba"),"\u7684\u8bf4\u6cd5\uff09\u3002"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\u62c9\u5305\u5360\u5bb9\u5668\u542f\u52a8\u65f6\u95f4\u7684 76%\uff0c\u4f46\u5374\u53ea\u8bfb\u53d6\u4e86 6.4% \u7684\u6570\u636e\u3002")),(0,r.kt)("p",null,"\u4e3a\u4e86\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\uff0cK3s \u7684\u5b9e\u9a8c\u529f\u80fd\u652f\u6301\u955c\u50cf\u5185\u5bb9\u7684 ",(0,r.kt)("em",{parentName:"p"},"lazy pulling"),"\u3002\n\u8fd9\u5141\u8bb8 K3s \u5728\u62c9\u53d6\u6574\u4e2a\u955c\u50cf\u4e4b\u524d\u542f\u52a8\u4e00\u4e2a\u5bb9\u5668\u3002\n\u5fc5\u8981\u7684\u5185\u5bb9\u5757\uff08\u4f8b\u5982\u5355\u4e2a\u6587\u4ef6\uff09\u662f\u6309\u9700\u83b7\u53d6\u7684\u3002\n\u5bf9\u4e8e\u5927\u955c\u50cf\u800c\u8a00\uff0c\u8fd9\u79cd\u6280\u672f\u53ef\u4ee5\u7f29\u77ed\u5bb9\u5668\u542f\u52a8\u5ef6\u8fdf\u3002"),(0,r.kt)("p",null,"\u8981\u542f\u7528 lazy pulling\uff0c\u4f60\u9700\u8981\u5c06\u76ee\u6807\u955c\u50cf\u683c\u5f0f\u5316\u4e3a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter/blob/main/docs/stargz-estargz.md"},(0,r.kt)("em",{parentName:"a"},"eStargz")),"\u3002\n\u8fd9\u662f OCI \u7684\u4e00\u4e2a\u66ff\u4ee3\u54c1\uff0c\u4f46\u5b83 100% OCI \u517c\u5bb9\u955c\u50cf\u683c\u5f0f\uff0c\u7528\u4e8e Lazy Pulling\u3002\n\u7531\u4e8e\u517c\u5bb9\u6027\uff0ceStargz \u53ef\u4ee5\u63a8\u9001\u5230\u6807\u51c6\u5bb9\u5668\u955c\u50cf\u4ed3\u5e93\uff08\u4f8b\u5982 ghcr.io\uff09\uff0c\u5e76\u4e14\u5373\u4f7f\u5728 eStargz-agnostic \u8fd0\u884c\u65f6\u4e5f",(0,r.kt)("em",{parentName:"p"},"\u4ecd\u7136\u53ef\u4ee5\u8fd0\u884c"),"\u3002"),(0,r.kt)("p",null,"eStargz \u662f\u57fa\u4e8e ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/google/crfs"},"Google CRFS \u9879\u76ee\u63d0\u51fa\u7684 stargz \u683c\u5f0f"),"\u5f00\u53d1\u7684\uff0c\u5177\u6709\u5185\u5bb9\u9a8c\u8bc1\u548c\u6027\u80fd\u4f18\u5316\u7b49\u5b9e\u7528\u529f\u80fd\u3002\n\u6709\u5173 Lazy Pulling \u548c eStargz \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter"},"Stargz Snapshotter \u9879\u76ee\u4ed3\u5e93"),"\u3002"),(0,r.kt)("h3",{id:"\u914d\u7f6e-k3s-\u8fdb\u884c-estargz-\u7684-lazy-pulling"},"\u914d\u7f6e K3s \u8fdb\u884c eStargz \u7684 Lazy Pulling"),(0,r.kt)("p",null,"\u5982\u4e0b\u6240\u793a\uff0cK3s Server \u548c Agent \u9700\u8981 ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshotter=stargz")," \u9009\u9879\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --snapshotter=stargz\n")),(0,r.kt)("p",null,"\u4f7f\u7528\u6b64\u914d\u7f6e\uff0c\u4f60\u53ef\u4ee5\u5bf9 eStargz \u683c\u5f0f\u7684\u955c\u50cf\u8fdb\u884c Lazy Pulling\u3002\n\u4ee5\u4e0b Pod \u6e05\u5355\u793a\u4f8b\u4f7f\u7528 eStargz \u683c\u5f0f\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"node:13.13.0")," \u955c\u50cf (",(0,r.kt)("inlineCode",{parentName:"p"},"ghcr.io/stargz-containers/node:13.13.0-esgz"),")\u3002\n\u5f53\u542f\u7528 stargz snapshotter \u65f6\uff0cK3s \u4f1a\u5bf9\u8be5\u955c\u50cf\u8fdb\u884c lazy pulling\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: nodejs\nspec:\n  containers:\n  - name: nodejs-estargz\n    image: ghcr.io/stargz-containers/node:13.13.0-esgz\n    command: [\"node\"]\n    args:\n    - -e\n    - var http = require('http');\n      http.createServer(function(req, res) {\n        res.writeHead(200);\n        res.end('Hello World!\\n');\n      }).listen(80);\n    ports:\n    - containerPort: 80\n")),(0,r.kt)("h2",{id:"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90"},"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u5728\u4e0d\u4f7f\u7528 Rancher \u7684\u60c5\u51b5\u4e0b\u4e3a K3s \u5b89\u88c5 ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/"},"Rancher Logging"),"\u3002\u4e3a\u6b64\uff0c\u4f60\u53ef\u4ee5\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"helm repo add rancher-charts https://charts.rancher.io\nhelm repo update\nhelm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd\nhelm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging\n")),(0,r.kt)("h2",{id:"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7"},"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7"),(0,r.kt)("p",null,"\u652f\u6301\u8bb0\u5f55\u7f51\u7edc\u7b56\u7565\u4e22\u5f03\u7684\u6570\u636e\u5305\u3002\u6570\u636e\u5305\u88ab\u53d1\u9001\u5230 iptables NFLOG \u64cd\u4f5c\uff0c\u5b83\u663e\u793a\u4e86\u6570\u636e\u5305\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u5305\u62ec\u963b\u6b62\u5b83\u7684\u7f51\u7edc\u7b56\u7565\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u6d41\u91cf\u5f88\u5927\uff0c\u65e5\u5fd7\u6d88\u606f\u7684\u6570\u91cf\u53ef\u80fd\u4f1a\u975e\u5e38\u591a\u3002\u8981\u5728\u6bcf\u4e2a\u7b56\u7565\u4e0a\u63a7\u5236\u65e5\u5fd7\u901f\u7387\uff0c\u4f60\u53ef\u4ee5\u5728 question \u7684\u7f51\u7edc\u7b56\u7565\u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u6ce8\u91ca\uff0c\u4ece\u800c\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"limit")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst")," iptables \u53c2\u6570\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit=<LIMIT-VALUE>")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE>"))),(0,r.kt)("p",null,"\u9ed8\u8ba4\u503c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"limit=10/minute")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst=10"),"\u3002\u4f60\u53ef\u4ee5\u67e5\u770b ",(0,r.kt)("a",{parentName:"p",href:"https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches"},"iptables \u624b\u518c"),"\u4ee5\u8fdb\u4e00\u6b65\u4e86\u89e3\u8fd9\u4e9b\u5b57\u6bb5\u7684\u683c\u5f0f\u548c\u53ef\u9009\u503c\u3002"),(0,r.kt)("p",null,"\u8981\u5c06 NFLOG \u6570\u636e\u5305\u8f6c\u6362\u4e3a\u65e5\u5fd7\u6761\u76ee\uff0c\u8bf7\u5b89\u88c5 ulogd2 \u5e76\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"[log1]")," \u914d\u7f6e\u4e3a\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"group=100")," \u4e0a\u8bfb\u53d6\u3002\u7136\u540e\uff0c\u91cd\u542f ulogd2 \u670d\u52a1\u4ee5\u63d0\u4ea4\u65b0\u914d\u7f6e\u3002\n\u5f53\u6570\u636e\u5305\u88ab\u7f51\u7edc\u7b56\u7565\u89c4\u5219\u963b\u6b62\u65f6\uff0c\u65e5\u5fd7\u6d88\u606f\u5c06\u51fa\u73b0\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/log/ulog/syslogemu.log")," \u4e2d\u3002"),(0,r.kt)("p",null,"\u53d1\u9001\u5230 NFLOG netlink \u5957\u63a5\u5b57\u7684\u6570\u636e\u5305\u4e5f\u53ef\u4ee5\u4f7f\u7528 tcpdump \u6216 tshark \u7b49\u547d\u4ee4\u884c\u5de5\u5177\u8bfb\u53d6\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"tcpdump -ni nflog:100\n")),(0,r.kt)("p",null,"\u867d\u7136\u66f4\u5bb9\u6613\u83b7\u5f97\uff0c\u4f46 tcpdump \u4e0d\u4f1a\u663e\u793a\u963b\u6b62\u6570\u636e\u5305\u7684\u7f51\u7edc\u7b56\u7565\u7684\u540d\u79f0\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528 wireshark \u7684 tshark \u547d\u4ee4\u6765\u663e\u793a\u5b8c\u6574\u7684 NFLOG \u6570\u636e\u5305\u6807\u5934\uff0c\u5176\u4e2d\u5305\u62ec\u5305\u542b\u4e86\u7b56\u7565\u540d\u79f0\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"nflog.prefix")," \u5b57\u6bb5\u3002"))}m.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4222],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>c});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function s(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),p=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=p(e.components);return a.createElement(o.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,k=s(e,["components","mdxType","originalType","parentName"]),d=p(n),c=r,m=d["".concat(o,".").concat(c)]||d[c]||u[c]||l;return n?a.createElement(m,i(i({ref:t},k),{},{components:n})):a.createElement(m,i({ref:t},k))}));function c(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,i=new Array(l);i[0]=d;var s={};for(var o in t)hasOwnProperty.call(t,o)&&(s[o]=t[o]);s.originalType=e,s.mdxType="string"==typeof e?e:r,i[1]=s;for(var p=2;p<l;p++)i[p]=n[p];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}d.displayName="MDXCreateElement"},89:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>m,frontMatter:()=>l,metadata:()=>s,toc:()=>p});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},i=void 0,s={unversionedId:"advanced/advanced",id:"advanced/advanced",title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",description:"\u672c\u6587\u63cf\u8ff0\u4e86\u7528\u4e8e\u8fd0\u884c\u548c\u7ba1\u7406 K3s \u7684\u9ad8\u7ea7\u8bbe\u7f6e\uff0c\u4ee5\u53ca\u4e3a K3s \u51c6\u5907\u4e3b\u673a\u64cd\u4f5c\u7cfb\u7edf\u6240\u9700\u7684\u6b65\u9aa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/advanced/advanced.md",sourceDirName:"advanced",slug:"/advanced/",permalink:"/zh/advanced/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/advanced/advanced.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",weight:45,aliases:["/k3s/latest/en/running/","/k3s/latest/en/configuration/"]},sidebar:"mySidebar",previous:{title:"Helm",permalink:"/zh/helm/"},next:{title:"\u5e38\u89c1\u95ee\u9898",permalink:"/zh/faq/"}},o={},p=[{value:"\u8bc1\u4e66\u7ba1\u7406",id:"\u8bc1\u4e66\u7ba1\u7406",level:2},{value:"CA \u8bc1\u4e66",id:"ca-\u8bc1\u4e66",level:3},{value:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66",level:3},{value:"Token \u7ba1\u7406",id:"token-\u7ba1\u7406",level:2},{value:"\u914d\u7f6e HTTP \u4ee3\u7406",id:"\u914d\u7f6e-http-\u4ee3\u7406",level:2},{value:"\u4f7f\u7528 Docker \u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6",id:"\u4f7f\u7528-docker-\u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6",level:2},{value:"\u4f7f\u7528 etcdctl",id:"\u4f7f\u7528-etcdctl",level:2},{value:"\u914d\u7f6e Containerd",id:"\u914d\u7f6e-containerd",level:2},{value:"NVIDIA \u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301",id:"nvidia-\u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301",level:2},{value:"\u8fd0\u884c\u65e0 Agent \u7684 Server\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u8fd0\u884c\u65e0-agent-\u7684-server\u5b9e\u9a8c\u6027",level:2},{value:"\u4f7f\u7528 Rootless \u6a21\u5f0f\u8fd0\u884c Server\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u4f7f\u7528-rootless-\u6a21\u5f0f\u8fd0\u884c-server\u5b9e\u9a8c\u6027",level:2},{value:"Rootless \u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898",id:"rootless-\u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898",level:3},{value:"\u542f\u52a8 Rootless Server",id:"\u542f\u52a8-rootless-server",level:3},{value:"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e",id:"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e",level:3},{value:"Rootless \u6a21\u5f0f\u6545\u969c\u6392\u9664",id:"rootless-\u6a21\u5f0f\u6545\u969c\u6392\u9664",level:3},{value:"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",id:"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9",level:2},{value:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1",id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1",level:2},{value:"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907",id:"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907",level:2},{value:"\u65e7\u7684 iptables \u7248\u672c",id:"\u65e7\u7684-iptables-\u7248\u672c",level:3},{value:"Red Hat Enterprise Linux / CentOS",id:"red-hat-enterprise-linux--centos",level:3},{value:"Ubuntu",id:"ubuntu",level:3},{value:"Raspberry Pi",id:"raspberry-pi",level:3},{value:"\u5728 Docker \u4e2d\u8fd0\u884c K3s",id:"\u5728-docker-\u4e2d\u8fd0\u884c-k3s",level:2},{value:"SELinux \u652f\u6301",id:"selinux-\u652f\u6301",level:2},{value:"\u542f\u7528 SELinux \u5f3a\u5236\u6267\u884c",id:"\u542f\u7528-selinux-\u5f3a\u5236\u6267\u884c",level:3},{value:"\u542f\u7528 eStargz \u7684 Lazy Pulling\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u542f\u7528-estargz-\u7684-lazy-pulling\u5b9e\u9a8c\u6027",level:2},{value:"\u4ec0\u4e48\u662f Lazy Pulling \u548c eStargz\uff1f",id:"\u4ec0\u4e48\u662f-lazy-pulling-\u548c-estargz",level:3},{value:"\u914d\u7f6e K3s \u8fdb\u884c eStargz \u7684 Lazy Pulling",id:"\u914d\u7f6e-k3s-\u8fdb\u884c-estargz-\u7684-lazy-pulling",level:3},{value:"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90",id:"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90",level:2},{value:"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7",id:"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7",level:2}],k=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},u=k("Tabs"),d=k("TabItem"),c={toc:p};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u6587\u63cf\u8ff0\u4e86\u7528\u4e8e\u8fd0\u884c\u548c\u7ba1\u7406 K3s \u7684\u9ad8\u7ea7\u8bbe\u7f6e\uff0c\u4ee5\u53ca\u4e3a K3s \u51c6\u5907\u4e3b\u673a\u64cd\u4f5c\u7cfb\u7edf\u6240\u9700\u7684\u6b65\u9aa4\u3002"),(0,r.kt)("h2",{id:"\u8bc1\u4e66\u7ba1\u7406"},"\u8bc1\u4e66\u7ba1\u7406"),(0,r.kt)("h3",{id:"ca-\u8bc1\u4e66"},"CA \u8bc1\u4e66"),(0,r.kt)("p",null,"K3s \u5728\u7b2c\u4e00\u4e2a Server \u8282\u70b9\u542f\u52a8\u65f6\u751f\u6210\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u3002\u8fd9\u4e9b CA \u8bc1\u4e66\u7684\u6709\u6548\u671f\u4e3a 10 \u5e74\uff0c\u4e0d\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,r.kt)("p",null,"\u6709\u5173\u4f7f\u7528\u81ea\u5b9a\u4e49 CA \u8bc1\u4e66\u6216\u66f4\u65b0\u81ea\u7b7e\u540d CA \u8bc1\u4e66\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/certificate#certificate-authority-ca-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate-ca")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,r.kt)("h3",{id:"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"},"\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66"),(0,r.kt)("p",null,"K3s \u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\u81ea\u9881\u53d1\u65e5\u8d77 365 \u5929\u5185\u6709\u6548\u3002\u6bcf\u6b21\u542f\u52a8 K3s \u65f6\uff0c\u5df2\u8fc7\u671f\u6216 90 \u5929\u5185\u8fc7\u671f\u7684\u8bc1\u4e66\u90fd\u4f1a\u81ea\u52a8\u66f4\u65b0\u3002"),(0,r.kt)("p",null,"\u6709\u5173\u624b\u52a8\u8f6e\u6362\u5ba2\u6237\u7aef\u548c\u670d\u52a1\u5668\u8bc1\u4e66\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/certificate#client-and-server-certificates"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s certificate rotate")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,r.kt)("h2",{id:"token-\u7ba1\u7406"},"Token \u7ba1\u7406"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cK3s \u4e3a Server \u548c Agent \u4f7f\u7528\u5355\u4e2a\u9759\u6001 Token\u3002\u521b\u5efa\u96c6\u7fa4\u540e\u4e0d\u80fd\u66f4\u6539\u6b64 Token\u3002\n\u4f60\u53ef\u4ee5\u542f\u7528\u53ea\u80fd\u7528\u4e8e\u52a0\u5165 Agent \u7684\u7b2c\u4e8c\u4e2a\u9759\u6001 Token\uff0c\u6216\u521b\u5efa\u81ea\u52a8\u8fc7\u671f\u7684\u4e34\u65f6 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubeadm")," \u8054\u63a5\u6837\u5f0f Token\u3002\n\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/token"},(0,r.kt)("inlineCode",{parentName:"a"},"k3s token")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,r.kt)("h2",{id:"\u914d\u7f6e-http-\u4ee3\u7406"},"\u914d\u7f6e HTTP \u4ee3\u7406"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u8fd0\u884c K3s \u7684\u73af\u5883\u4e2d\u53ea\u901a\u8fc7 HTTP \u4ee3\u7406\u8fdb\u884c\u5916\u90e8\u8fde\u63a5\uff0c\u4f60\u53ef\u4ee5\u5728 K3s \u7684 systemd \u670d\u52a1\u4e0a\u914d\u7f6e\u4ee3\u7406\u3002K3s \u5c06\u4f7f\u7528\u8fd9\u4e9b\u4ee3\u7406\u8bbe\u7f6e\uff0c\u5e76\u5411\u4e0b\u4f20\u9012\u5230\u5d4c\u5165\u5f0f containerd \u548c kubelet\u3002"),(0,r.kt)("p",null,"K3s \u5b89\u88c5\u811a\u672c\u4f1a\u81ea\u52a8\u4f7f\u7528\u5f53\u524d shell \u4e2d\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"HTTP_PROXY"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"HTTPS_PROXY")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY"),"\uff0c\u4ee5\u53ca ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTP_PROXY"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_HTTPS_PROXY")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_NO_PROXY")," \u53d8\u91cf\uff08\u5982\u679c\u5b58\u5728\uff09\uff0c\u5e76\u5c06\u5b83\u4eec\u5199\u5165 systemd \u670d\u52a1\u7684\u73af\u5883\u6587\u4ef6\uff0c\u901a\u5e38\u662f\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s.service.env")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"/etc/systemd/system/k3s-agent.service.env"))),(0,r.kt)("p",null,"\u4f60\u4e5f\u53ef\u4ee5\u901a\u8fc7\u7f16\u8f91\u8fd9\u4e9b\u6587\u4ef6\u6765\u914d\u7f6e\u4ee3\u7406\u3002"),(0,r.kt)("p",null,"K3s \u4f1a\u81ea\u52a8\u5c06\u96c6\u7fa4\u5185\u90e8 Pod \u548c Service IP \u8303\u56f4\u4ee5\u53ca\u96c6\u7fa4 DNS \u57df\u6dfb\u52a0\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \u6761\u76ee\u5217\u8868\u4e2d\u3002\u4f60\u9700\u8981\u786e\u4fdd Kubernetes \u8282\u70b9\u672c\u8eab\u4f7f\u7528\u7684 IP \u5730\u5740\u8303\u56f4\uff08\u5373\u8282\u70b9\u7684\u516c\u5171\u548c\u79c1\u6709 IP\uff09\u5305\u542b\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"NO_PROXY")," \u5217\u8868\u4e2d\uff0c\u6216\u8005\u53ef\u4ee5\u901a\u8fc7\u4ee3\u7406\u8bbf\u95ee\u8282\u70b9\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"HTTP_PROXY=http://your-proxy.example.com:8888\nHTTPS_PROXY=http://your-proxy.example.com:8888\nNO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u4e0d\u5f71\u54cd K3s \u548c Kubelet \u7684\u60c5\u51b5\u4e0b\u4e3a containerd \u914d\u7f6e\u4ee3\u7406\uff0c\u4f60\u53ef\u4ee5\u5728\u53d8\u91cf\u524d\u52a0\u4e0a ",(0,r.kt)("inlineCode",{parentName:"p"},"CONTAINERD_"),"\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888\nCONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16\n")),(0,r.kt)("h2",{id:"\u4f7f\u7528-docker-\u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6"},"\u4f7f\u7528 Docker \u4f5c\u4e3a\u5bb9\u5668\u8fd0\u884c\u65f6"),(0,r.kt)("p",null,"K3s \u5305\u542b\u5e76\u9ed8\u8ba4\u4e3a ",(0,r.kt)("a",{parentName:"p",href:"https://containerd.io/"},"containerd"),"\uff0c\u5b83\u662f\u4e00\u4e2a\u884c\u4e1a\u6807\u51c6\u7684\u5bb9\u5668\u8fd0\u884c\u65f6\u3002\n\u4ece Kubernetes 1.24 \u5f00\u59cb\uff0cKubelet \u4e0d\u518d\u5305\u542b dockershim\uff0c\u8be5\u7ec4\u4ef6\u5141\u8bb8 kubelet \u4e0e dockerd \u901a\u4fe1\u3002\nK3s 1.24 \u53ca\u66f4\u9ad8\u7248\u672c\u5305\u62ec\u4e86 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/Mirantis/cri-dockerd"},"cri-dockerd"),"\uff0c\u5b83\u5141\u8bb8\u4f60\u65e0\u7f1d\u5347\u7ea7\u65e7\u7684 K3s \u7248\u672c\uff0c\u540c\u65f6\u7ee7\u7eed\u4f7f\u7528 Docker \u5bb9\u5668\u8fd0\u884c\u65f6\u3002"),(0,r.kt)("p",null,"\u8981\u4f7f\u7528 Docker \u800c\u4e0d\u662f containerd\uff1a"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u5728 K3s \u8282\u70b9\u4e0a\u5b89\u88c5 Docker\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528 Rancher \u7684\u4e00\u4e2a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/install-docker"},"Docker \u5b89\u88c5\u811a\u672c"),"\u6765\u5b89\u88c5 Docker\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl https://releases.rancher.com/install-docker/20.10.sh | sh\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--docker")," \u9009\u9879\u5b89\u88c5 K3s\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | sh -s - --docker\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u786e\u8ba4\u96c6\u7fa4\u53ef\u7528\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ sudo k3s kubectl get pods --all-namespaces\nNAMESPACE     NAME                                     READY   STATUS      RESTARTS   AGE\nkube-system   local-path-provisioner-6d59f47c7-lncxn   1/1     Running     0          51s\nkube-system   metrics-server-7566d596c8-9tnck          1/1     Running     0          51s\nkube-system   helm-install-traefik-mbkn9               0/1     Completed   1          51s\nkube-system   coredns-8655855d6-rtbnb                  1/1     Running     0          51s\nkube-system   svclb-traefik-jbmvl                      2/2     Running     0          43s\nkube-system   traefik-758cd5fc85-2wz97                 1/1     Running     0          43s\n"))),(0,r.kt)("li",{parentName:"ol"},(0,r.kt)("p",{parentName:"li"},"\u786e\u8ba4 Docker \u5bb9\u5668\u6b63\u5728\u8fd0\u884c\uff1a"),(0,r.kt)("pre",{parentName:"li"},(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'$ sudo docker ps\nCONTAINER ID        IMAGE                     COMMAND                  CREATED              STATUS              PORTS               NAMES\n3e4d34729602        897ce3c5fc8f              "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\nbffdc9d7a65f        rancher/klipper-lb        "entry"                  About a minute ago   Up About a minute                       k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n436b85c5e38d        rancher/library-traefik   "/traefik --configfi\u2026"   About a minute ago   Up About a minute                       k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nde8fded06188        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0\n7c6a30aeeb2f        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0\nae6c58cab4a7        9d12f9848b99              "local-path-provisio\u2026"   About a minute ago   Up About a minute                       k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\nbe1450e1a11e        9dd718864ce6              "/metrics-server"        About a minute ago   Up About a minute                       k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0\n4454d14e4d3f        c4d3d16fe508              "/coredns -conf /etc\u2026"   About a minute ago   Up About a minute                       k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\nc3675b87f96c        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0\n4b1fddbe6ca6        rancher/pause:3.1         "/pause"                 About a minute ago   Up About a minute                       k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0\n64d3517d4a95        rancher/pause:3.1         "/pause"\n')))),(0,r.kt)("h2",{id:"\u4f7f\u7528-etcdctl"},"\u4f7f\u7528 etcdctl"),(0,r.kt)("p",null,"etcdctl \u63d0\u4f9b\u4e86\u4e00\u4e2a\u4e0e etcd \u670d\u52a1\u5668\u4ea4\u4e92\u7684 CLI\u3002K3s \u9644\u5e26 etcdctl\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u4f7f\u7528 etcdctl \u4e0e K3s \u7684\u5d4c\u5165\u5f0f etcd \u8fdb\u884c\u4ea4\u4e92\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://etcd.io/docs/latest/install/"},"\u5b98\u65b9\u6587\u6863"),"\u5b89\u88c5 etcdctl\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'ETCD_VERSION="v3.5.5"\nETCD_URL="https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz"\ncurl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin\n')),(0,r.kt)("p",null,"\u7136\u540e\uff0c\u4f60\u53ef\u4ee5\u5c06 etcdctl \u914d\u7f6e\u4e3a\u4f7f\u7528 K3s \u7ba1\u7406\u7684\u8bc1\u4e66\u548c\u5bc6\u94a5\u6765\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\uff0c\u4ece\u800c\u4f7f\u7528 etcdctl\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo etcdctl version \\\n  --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\\n  --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\\n  --key=/var/lib/rancher/k3s/server/tls/etcd/client.key\n")),(0,r.kt)("h2",{id:"\u914d\u7f6e-containerd"},"\u914d\u7f6e Containerd"),(0,r.kt)("p",null,"K3s \u4f1a\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/agent/etc/containerd/config.toml")," \u4e2d\u4e3a containerd \u751f\u6210 config.toml\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u8981\u5bf9\u8fd9\u4e2a\u6587\u4ef6\u8fdb\u884c\u9ad8\u7ea7\u5b9a\u5236\uff0c\u4f60\u53ef\u4ee5\u5728\u540c\u4e00\u76ee\u5f55\u4e2d\u521b\u5efa\u53e6\u4e00\u4e2a\u540d\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," \u7684\u6587\u4ef6\uff0c\u6b64\u6587\u4ef6\u5c06\u4f1a\u4ee3\u66ff\u9ed8\u8ba4\u8bbe\u7f6e\u3002"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"config.toml.tmpl")," \u662f\u4e00\u4e2a Go \u6a21\u677f\u6587\u4ef6\uff0c\u5e76\u4e14 ",(0,r.kt)("inlineCode",{parentName:"p"},"config.Node")," \u7ed3\u6784\u4f1a\u88ab\u4f20\u9012\u7ed9\u6a21\u677f\u3002\u6709\u5173\u5982\u4f55\u4f7f\u7528\u8be5\u7ed3\u6784\u81ea\u5b9a\u4e49\u914d\u7f6e\u6587\u4ef6\u7684 Linux \u548c Windows \u793a\u4f8b\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/agent/templates"},"\u6b64\u6587\u4ef6\u5939"),"\u3002\nconfig.Node golang \u7ed3\u6784\u5b9a\u4e49\u5728",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/pkg/daemons/config/types.go#L37"},"\u8fd9\u91cc"),"\u3002"),(0,r.kt)("h2",{id:"nvidia-\u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301"},"NVIDIA \u5bb9\u5668\u8fd0\u884c\u65f6\u652f\u6301"),(0,r.kt)("p",null,"\u5982\u679c NVIDIA \u5bb9\u5668\u8fd0\u884c\u65f6\u5728 K3s \u542f\u52a8\u65f6\u5b58\u5728\uff0cK3s \u5c06\u81ea\u52a8\u68c0\u6d4b\u5e76\u914d\u7f6e\u5b83\u3002"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\u6309\u7167\u4ee5\u4e0b\u8bf4\u660e\u5728\u8282\u70b9\u4e0a\u5b89\u88c5 nvidia-container \u5305\u4ed3\u5e93\uff1a\n",(0,r.kt)("a",{parentName:"li",href:"https://nvidia.github.io/libnvidia-container/"},"https://nvidia.github.io/libnvidia-container/")),(0,r.kt)("li",{parentName:"ol"},"\u5b89\u88c5 nvidia \u5bb9\u5668\u8fd0\u884c\u65f6\u5305\u3002\u4f8b\u5982\uff1a\n",(0,r.kt)("inlineCode",{parentName:"li"},"apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server")),(0,r.kt)("li",{parentName:"ol"},"\u5b89\u88c5 K3s\uff0c\u5982\u679c\u5df2\u7ecf\u5b89\u88c5\u5219\u91cd\u542f\u5b83\uff1a\n",(0,r.kt)("inlineCode",{parentName:"li"},"curl -ksL get.k3s.io | sh -")),(0,r.kt)("li",{parentName:"ol"},"\u786e\u8ba4 K3s \u5df2\u7ecf\u627e\u5230 nvidia \u5bb9\u5668\u8fd0\u884c\u65f6\uff1a\n",(0,r.kt)("inlineCode",{parentName:"li"},"grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml"))),(0,r.kt)("p",null,"\u8fd9\u5c06\u6839\u636e\u627e\u5230\u7684\u8fd0\u884c\u65f6\u53ef\u6267\u884c\u6587\u4ef6\u81ea\u52a8\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia")," \u548c/\u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"nvidia-experimental")," \u8fd0\u884c\u65f6\u6dfb\u52a0\u5230 containerd \u914d\u7f6e\u4e2d\u3002\n\u4f60\u4ecd\u7136\u5fc5\u987b\u5411\u96c6\u7fa4\u6dfb\u52a0 RuntimeClass \u5b9a\u4e49\uff0c\u5e76\u901a\u8fc7\u5728 Pod \u89c4\u8303\u4e2d\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia")," \u6765\u90e8\u7f72\u663e\u5f0f\u8bf7\u6c42\u8fd0\u884c\u65f6\u7684 Pod\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'apiVersion: node.k8s.io/v1\nkind: RuntimeClass\nmetadata:\n  name: nvidia\nhandler: nvidia\n---\napiVersion: v1\nkind: Pod\nmetadata:\n  name: nbody-gpu-benchmark\n  namespace: default\nspec:\n  restartPolicy: OnFailure\n  runtimeClassName: nvidia\n  containers:\n  - name: cuda-container\n    image: nvcr.io/nvidia/k8s/cuda-sample:nbody\n    args: ["nbody", "-gpu", "-benchmark"]\n    resources:\n      limits:\n        nvidia.com/gpu: 1\n    env:\n    - name: NVIDIA_VISIBLE_DEVICES\n      value: all\n    - name: NVIDIA_DRIVER_CAPABILITIES\n      value: all\n')),(0,r.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0cNVIDIA Container Runtime \u4e5f\u7ecf\u5e38\u4e0e ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/k8s-device-plugin/"},"NVIDIA Device Plugin")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/NVIDIA/gpu-feature-discovery/"},"GPU Feature Discovery")," \u4e00\u8d77\u4f7f\u7528\uff0c\u5b83\u4eec\u5fc5\u987b\u5355\u72ec\u5b89\u88c5\uff0c\u800c\u4e14\u9700\u8981\u4fee\u6539\u4ee5\u786e\u4fdd Pod \u89c4\u8303\u80fd\u5305\u62ec ",(0,r.kt)("inlineCode",{parentName:"p"},"runtimeClassName: nvidia"),"\uff0c\u5982\u524d\u6240\u8ff0\u3002"),(0,r.kt)("h2",{id:"\u8fd0\u884c\u65e0-agent-\u7684-server\u5b9e\u9a8c\u6027"},"\u8fd0\u884c\u65e0 Agent \u7684 Server\uff08\u5b9e\u9a8c\u6027\uff09"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u8b66\u544a"),"\uff1a\u6b64\u529f\u80fd\u662f\u5b9e\u9a8c\u6027\u7684\u3002")),(0,r.kt)("p",null,"\u5f53\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable-agent")," \u6807\u5fd7\u542f\u52a8\u65f6\uff0cServer \u4e0d\u8fd0\u884c kubelet\u3001\u5bb9\u5668\u8fd0\u884c\u65f6\u6216 CNI\u3002\u5b83\u4eec\u4e0d\u4f1a\u5728\u96c6\u7fa4\u4e2d\u6ce8\u518c Node \u8d44\u6e90\uff0c\u4e5f\u4e0d\u4f1a\u51fa\u73b0\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get nodes")," \u8f93\u51fa\u4e2d\u3002\n\u56e0\u4e3a\u5b83\u4eec\u4e0d\u6258\u7ba1 kubelet\uff0c\u6240\u4ee5\u5b83\u4eec\u4e0d\u80fd\u8fd0\u884c pod\uff0c\u4e5f\u4e0d\u80fd\u7531\u4f9d\u8d56\u679a\u4e3e\u96c6\u7fa4\u8282\u70b9\u7684 Operator \u7ba1\u7406\uff0c\u5305\u62ec\u5d4c\u5165\u5f0f etcd controller \u548c system-upgrade-controller\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u8ba9 control plane \u8282\u70b9\u4e0d\u88ab Agent \u548c\u5de5\u4f5c\u8d1f\u8f7d\u53d1\u73b0\uff0c\u4f60\u53ef\u4ee5\u8fd0\u884c\u65e0 Agent \u7684 Server\uff0c\u4f46\u662f\u4ee3\u4ef7\u662f\u7531\u4e8e\u7f3a\u4e4f\u96c6\u7fa4 Operator \u652f\u6301\uff0c\u7ba1\u7406\u5f00\u9500\u4f1a\u589e\u52a0\u3002"),(0,r.kt)("h2",{id:"\u4f7f\u7528-rootless-\u6a21\u5f0f\u8fd0\u884c-server\u5b9e\u9a8c\u6027"},"\u4f7f\u7528 Rootless \u6a21\u5f0f\u8fd0\u884c Server\uff08\u5b9e\u9a8c\u6027\uff09"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u8b66\u544a"),"\uff1a\u6b64\u529f\u80fd\u662f\u5b9e\u9a8c\u6027\u7684\u3002")),(0,r.kt)("p",null,"Rootless \u6a21\u5f0f\u5141\u8bb8\u975e\u7279\u6743\u7528\u6237\u8fd0\u884c K3s Server\uff0c\u8fd9\u6837\u53ef\u4ee5\u4fdd\u62a4\u4e3b\u673a\u4e0a\u771f\u6b63\u7684 root \u514d\u53d7\u6f5c\u5728\u7684\u5bb9\u5668\u653b\u51fb\u3002"),(0,r.kt)("p",null,"\u6709\u5173 Rootless \u6a21\u5f0f Kubernetes \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/"},"\u6b64\u5904"),"\u3002"),(0,r.kt)("h3",{id:"rootless-\u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898"},"Rootless \u6a21\u5f0f\u7684\u5df2\u77e5\u95ee\u9898"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\u7aef\u53e3")),(0,r.kt)("p",{parentName:"li"}," \u5982\u679c\u4ee5 Rootless \u6a21\u5f0f\u8fd0\u884c\uff0c\u5c06\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u3002\u6362\u8a00\u4e4b\uff0cK3s \u5b9e\u4f8b\u5728\u7f51\u7edc\u4e0e\u4e3b\u673a\u5b8c\u5168\u5206\u79bb\u7684\u60c5\u51b5\u4e0b\u8fd0\u884c\u3002\n\u8981\u4ece\u4e3b\u673a\u8bbf\u95ee\u5728 K3s \u4e2d\u8fd0\u884c\u7684 Service\uff0c\u552f\u4e00\u7684\u65b9\u6cd5\u662f\u8bbe\u7f6e\u8f6c\u53d1\u5230 K3s \u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u7684\u7aef\u53e3\u3002\nRootless \u6a21\u5f0f\u4e0b\u7684 K3s \u5305\u542b\u63a7\u5236\u5668\uff0c\u5b83\u4f1a\u81ea\u52a8\u5c06 6443 \u548c\u4f4e\u4e8e 1024 \u7684 Service \u7aef\u53e3\u7ed1\u5b9a\u5230\u504f\u79fb\u91cf\u4e3a 10000 \u7684\u4e3b\u673a\u3002"),(0,r.kt)("p",{parentName:"li"}," \u4f8b\u5982\uff0c\u7aef\u53e3 80 \u4e0a\u7684 Service \u5728\u4e3b\u673a\u4e0a\u4f1a\u53d8\u6210 10080\uff0c\u4f46 8080 \u4f1a\u53d8\u6210 8080\uff0c\u6ca1\u6709\u4efb\u4f55\u504f\u79fb\u3002\u76ee\u524d\u53ea\u6709 LoadBalancer Service \u662f\u81ea\u52a8\u7ed1\u5b9a\u7684\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"Cgroups")),(0,r.kt)("p",{parentName:"li"}," \u4e0d\u652f\u6301 Cgroup v1 \u548c Hybrid v1/v2\uff0c\u4ec5\u652f\u6301\u7eaf Cgroup v2\u3002\u5982\u679c K3s \u5728 Rootless \u6a21\u5f0f\u4e0b\u8fd0\u884c\u65f6\u7531\u4e8e\u7f3a\u5c11 cgroup \u800c\u65e0\u6cd5\u542f\u52a8\uff0c\u5f88\u53ef\u80fd\u4f60\u7684\u8282\u70b9\u5904\u4e8e Hybrid \u6a21\u5f0f\uff0c\u800c\u4e14\u201c\u4e22\u5931\u201d\u7684 cgroup \u4ecd\u7136\u7ed1\u5b9a\u4e86 v1 \u63a7\u5236\u5668\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},(0,r.kt)("strong",{parentName:"p"},"\u591a\u8282\u70b9/\u591a\u8fdb\u7a0b\u96c6\u7fa4")),(0,r.kt)("p",{parentName:"li"}," \u76ee\u524d\uff0c\u6211\u4eec\u4e0d\u652f\u6301\u591a\u8282\u70b9\u65e0\u6839\u96c6\u7fa4\u6216\u540c\u4e00\u8282\u70b9\u4e0a\u7684\u591a\u4e2a\u65e0\u6839 k3s \u8fdb\u7a0b\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/6488#issuecomment-1314998091"},"#6488"),"\u3002"))),(0,r.kt)("h3",{id:"\u542f\u52a8-rootless-server"},"\u542f\u52a8 Rootless Server"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u542f\u7528 cgroup v2 \u6388\u6743\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://rootlesscontaine.rs/getting-started/common/cgroup2/%E3%80%82"},"https://rootlesscontaine.rs/getting-started/common/cgroup2/\u3002"),"\n\u6b64\u6b65\u9aa4\u662f\u5fc5\u9700\u7684\u3002\u5982\u679c\u6ca1\u6709\u6b63\u786e\u7684 cgroups \u6388\u6743\uff0crootless kubelet \u5c06\u65e0\u6cd5\u542f\u52a8\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/k3s-rootless.service"},(0,r.kt)("inlineCode",{parentName:"a"},"https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service"))," \u4e0b\u8f7d ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service"),"\u3002\n\u786e\u4fdd\u4f7f\u7528\u4e86\u76f8\u540c\u7248\u672c\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s"),"\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s-rootless.service")," \u5b89\u88c5\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"~/.config/systemd/user/k3s-rootless.service"),"\u3002\n\u4e0d\u652f\u6301\u5c06\u6b64\u6587\u4ef6\u5b89\u88c5\u4e3a\u5168\u7cfb\u7edf\u670d\u52a1 (",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/systemd/..."),")\u3002\n\u6839\u636e ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u7684\u8def\u5f84\uff0c\u4f60\u53ef\u80fd\u9700\u8981\u4fee\u6539\u6587\u4ef6\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"ExecStart=/usr/local/bin/k3s ...")," \u884c\u3002")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user daemon-reload"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"systemctl --user enable --now k3s-rootless"))),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("p",{parentName:"li"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A"),"\uff0c\u5e76\u786e\u4fdd Pod \u6b63\u5728\u8fd0\u884c\u3002"))),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u6ce8\u610f"),"\uff1a\u7531\u4e8e\u7ec8\u7aef\u4f1a\u8bdd\u4e0d\u5141\u8bb8 cgroup v2 \u6388\u6743\uff0c\u56e0\u6b64\u4e0d\u8981\u5c1d\u8bd5\u5728\u7ec8\u7aef\u4e0a\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"p"},"k3s server --rootless"),"\u3002\n\u5982\u679c\u4f60\u786e\u5b9e\u9700\u8981\u5728\u7ec8\u7aef\u4e0a\u4f7f\u7528\uff0c\u8bf7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"systemd-run --user -p Delegate=yes --tty k3s server --rooless")," \u5c06\u5176\u5305\u88c5\u5728 systemd \u8303\u56f4\u5185\u3002")),(0,r.kt)("h3",{id:"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e"},"\u9ad8\u7ea7\u65e0\u6839\u914d\u7f6e"),(0,r.kt)("p",null,"Rootless K3s \u4f7f\u7528 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/rootlesskit"},"rootlesskit")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rootless-containers/slirp4netns"},"slirp4netns")," \u5728\u4e3b\u673a\u548c\u7528\u6237\u7f51\u7edc\u547d\u540d\u7a7a\u95f4\u4e4b\u95f4\u8fdb\u884c\u901a\u4fe1\u3002\nrootlesskit \u548c slirp4nets \u4f7f\u7528\u7684\u4e00\u4e9b\u914d\u7f6e\u53ef\u4ee5\u901a\u8fc7\u73af\u5883\u53d8\u91cf\u6765\u8bbe\u7f6e\u3002\u8bbe\u7f6e\u5b83\u4eec\u7684\u6700\u4f73\u65b9\u6cd5\u662f\u5c06\u5b83\u4eec\u6dfb\u52a0\u5230 k3s-rootless systemd \u5355\u5143\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"Environment")," \u5b57\u6bb5\u4e2d\u3002"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"\u53d8\u91cf"),(0,r.kt)("th",{parentName:"tr",align:null},"\u9ed8\u8ba4"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_MTU")),(0,r.kt)("td",{parentName:"tr",align:null},"1500"),(0,r.kt)("td",{parentName:"tr",align:null},"\u4e3a slirp4netns \u865a\u62df\u63a5\u53e3\u8bbe\u7f6e MTU\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_CIDR")),(0,r.kt)("td",{parentName:"tr",align:null},"10.41.0.0/16"),(0,r.kt)("td",{parentName:"tr",align:null},"\u8bbe\u7f6e slirp4netns \u865a\u62df\u63a5\u53e3\u4f7f\u7528\u7684 CIDR\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_ENABLE_IPV6")),(0,r.kt)("td",{parentName:"tr",align:null},"autotedected"),(0,r.kt)("td",{parentName:"tr",align:null},"\u542f\u7528 slirp4netns IPv6 \u652f\u6301\u3002\u5982\u679c\u672a\u6307\u5b9a\uff0c\u5219\u5728 K3s \u914d\u7f6e\u4e3a\u53cc\u6808\u65f6\u81ea\u52a8\u542f\u7528\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_PORT_DRIVER")),(0,r.kt)("td",{parentName:"tr",align:null},"builtin"),(0,r.kt)("td",{parentName:"tr",align:null},"\u9009\u62e9\u65e0\u6839 port driver\uff0c\u53ef\u9009\u503c\u662f ",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"td"},"slirp4netns"),"\u3002",(0,r.kt)("inlineCode",{parentName:"td"},"builtin")," \u901f\u5ea6\u66f4\u5feb\uff0c\u4f46\u4f1a\u4f2a\u88c5\u5165\u7ad9\u6570\u636e\u5305\u7684\u539f\u59cb\u6e90\u5730\u5740\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},(0,r.kt)("inlineCode",{parentName:"td"},"K3S_ROOTLESS_DISABLE_HOST_LOOPBACK")),(0,r.kt)("td",{parentName:"tr",align:null},"true"),(0,r.kt)("td",{parentName:"tr",align:null},"\u63a7\u5236\u662f\u5426\u5141\u8bb8\u901a\u8fc7\u7f51\u5173\u63a5\u53e3\u8bbf\u95ee\u4e3b\u673a\u7684\u73af\u56de\u5730\u5740\u3002\u51fa\u4e8e\u5b89\u5168\u539f\u56e0\uff0c\u5efa\u8bae\u4e0d\u8981\u66f4\u6539\u6b64\u8bbe\u7f6e\u3002")))),(0,r.kt)("h3",{id:"rootless-\u6a21\u5f0f\u6545\u969c\u6392\u9664"},"Rootless \u6a21\u5f0f\u6545\u969c\u6392\u9664"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"li"},"systemctl --user status k3s-rootless")," \u6765\u68c0\u67e5 daemon \u72b6\u6001"),(0,r.kt)("li",{parentName:"ul"},"\u8fd0\u884c ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl --user -f -u k3s-rootless")," \u6765\u67e5\u770b\u200b\u200b daemon \u65e5\u5fd7"),(0,r.kt)("li",{parentName:"ul"},"\u53e6\u89c1 ",(0,r.kt)("a",{parentName:"li",href:"https://rootlesscontaine.rs/"},"https://rootlesscontaine.rs/"))),(0,r.kt)("h2",{id:"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"},"\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9"),(0,r.kt)("p",null,"K3s Agent \u53ef\u4ee5\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-taint")," \u9009\u9879\u6765\u914d\u7f6e\uff0c\u5b83\u4eec\u4f1a\u4e3a kubelet \u6dfb\u52a0\u6807\u7b7e\u548c\u6c61\u70b9\u3002\u8fd9\u4e24\u4e2a\u9009\u9879\u4ec5\u5728",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/agent#agent-%E7%9A%84%E8%8A%82%E7%82%B9%E6%A0%87%E7%AD%BE%E5%92%8C%E6%B1%A1%E7%82%B9"},"\u6ce8\u518c\u65f6"),"\u6dfb\u52a0\u6807\u7b7e\u548c/\u6216\u6c61\u70b9\uff0c\u56e0\u6b64\u53ea\u80fd\u5728\u8282\u70b9\u9996\u6b21\u52a0\u5165\u96c6\u7fa4\u65f6\u8bbe\u7f6e\u3002"),(0,r.kt)("p",null,"\u5f53\u524d\u6240\u6709\u7684 Kubernetes \u7248\u672c\u90fd\u9650\u5236\u8282\u70b9\u6ce8\u518c\u5230\u5e26\u6709 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"k8s.io")," \u524d\u7f00\u7684\u5927\u90e8\u5206\u6807\u7b7e\uff0c\u7279\u522b\u662f ",(0,r.kt)("inlineCode",{parentName:"p"},"kubernetes.io/role")," \u6807\u7b7e\u3002\u5982\u679c\u4f60\u5c1d\u8bd5\u542f\u52a8\u5e26\u6709\u4e0d\u5141\u8bb8\u7684\u6807\u7b7e\u7684\u8282\u70b9\uff0cK3s \u5c06\u65e0\u6cd5\u542f\u52a8\u3002\u6b63\u5982 Kubernetes \u4f5c\u8005\u6240\u8bf4\uff1a"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\u4e0d\u5141\u8bb8\u8282\u70b9\u65ad\u8a00\u81ea\u5df1\u7684\u89d2\u8272\u6807\u7b7e\u3002\u8282\u70b9\u89d2\u8272\u901a\u5e38\u7528\u4e8e\u8bc6\u522b\u8282\u70b9\u7684\u7279\u6743\u6216 control plane \u7c7b\u578b\uff0c\u5982\u679c\u5141\u8bb8\u8282\u70b9\u5c06\u81ea\u5df1\u6807\u8bb0\u5230\u8be5\u6c60\uff0c\u90a3\u4e48\u53d7\u611f\u67d3\u7684\u8282\u70b9\u5c06\u80fd\u5438\u5f15\u53ef\u6388\u4e88\u66f4\u9ad8\u7279\u6743\u51ed\u8bc1\u8bbf\u95ee\u6743\u9650\u7684\u5de5\u4f5c\u8d1f\u8f7d\uff08\u5982 control plane \u5b88\u62a4\u8fdb\u7a0b\uff09\u3002")),(0,r.kt)("p",null,"\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/279-limit-node-access/README.md#proposal"},"SIG-Auth KEP 279"),"\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u60f3\u5728\u8282\u70b9\u6ce8\u518c\u540e\u66f4\u6539\u8282\u70b9\u6807\u7b7e\u548c\u6c61\u70b9\uff0c\u6216\u8005\u6dfb\u52a0\u4fdd\u7559\u6807\u7b7e\uff0c\u8bf7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl"),"\u3002\u5173\u4e8e\u5982\u4f55\u6dfb\u52a0",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/"},"\u6c61\u70b9"),"\u548c",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node"},"\u8282\u70b9\u6807\u7b7e"),"\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u5b98\u65b9 Kubernetes \u6587\u6863\u3002"),(0,r.kt)("h2",{id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1"},"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u542f\u52a8\u670d\u52a1"),(0,r.kt)("p",null,"\u5b89\u88c5\u811a\u672c\u5c06\u81ea\u52a8\u68c0\u6d4b\u4f60\u7684\u64cd\u4f5c\u7cfb\u7edf\u4f7f\u7528\u7684\u662f systemd \u8fd8\u662f openrc\uff0c\u5e76\u5728\u5b89\u88c5\u8fc7\u7a0b\u4e2d\u542f\u52a8\u8be5\u670d\u52a1\u3002"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 openrc \u8fd0\u884c\u65f6\uff0c\u5c06\u5728 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log")," \u4e2d\u521b\u5efa\u65e5\u5fd7\u3002"),(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 systemd \u8fd0\u884c\u65f6\uff0c\u5c06\u5728 ",(0,r.kt)("inlineCode",{parentName:"li"},"/var/log/syslog")," \u4e2d\u521b\u5efa\u65e5\u5fd7\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s"),"\uff08Agent \u4e0a\u662f ",(0,r.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s-agent"),"\uff09\u67e5\u770b\u65e5\u5fd7\u3002")),(0,r.kt)("p",null,"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7981\u7528\u81ea\u52a8\u542f\u52a8\u548c\u670d\u52a1\u542f\u7528\u7684\u793a\u4f8b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -\n")),(0,r.kt)("h2",{id:"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),(0,r.kt)("h3",{id:"\u65e7\u7684-iptables-\u7248\u672c"},"\u65e7\u7684 iptables \u7248\u672c"),(0,r.kt)("p",null,"\u51e0\u4e2a\u4e3b\u6d41 Linux \u53d1\u884c\u7248\u53d1\u5e03\u7684 iptables \u7248\u672c\u5305\u542b\u4e00\u4e2a\u9519\u8bef\uff0c\u8be5\u9519\u8bef\u4f1a\u5bfc\u81f4\u91cd\u590d\u89c4\u5219\u7684\u7d2f\u79ef\uff0c\u4ece\u800c\u5bf9\u8282\u70b9\u7684\u6027\u80fd\u548c\u7a33\u5b9a\u6027\u4ea7\u751f\u8d1f\u9762\u5f71\u54cd\u3002\u6709\u5173\u5982\u4f55\u786e\u5b9a\u4f60\u662f\u5426\u53d7\u6b64\u95ee\u9898\u5f71\u54cd\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/3117"},"issue #3117"),"\u3002"),(0,r.kt)("p",null,"K3s \u5177\u6709\u4e00\u4e2a\u53ef\u4ee5\u6b63\u5e38\u8fd0\u884c\u7684 iptables (v1.8.8) \u7248\u672c\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," \u9009\u9879\u6765\u542f\u52a8 K3s\uff0c\u6216\u4ece\u64cd\u4f5c\u7cfb\u7edf\u4e2d\u5378\u8f7d iptables/nftables \u5305\uff0c\u4ece\u800c\u8ba9 K3s \u4f7f\u7528\u6346\u7ed1\u7684 iptables \u7248\u672c\u3002"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("inlineCode",{parentName:"p"},"--prefer-bundled-bin")," \u6807\u5fd7\u4ece 2022-12 \u7248\u672c\u5f00\u59cb\u53ef\u7528\uff08v1.26.0+k3s1\u3001v1.25.5+k3s1\u3001v1.24.9+k3s1\u3001v1.23.15+k3s1\uff09\u3002")),(0,r.kt)("h3",{id:"red-hat-enterprise-linux--centos"},"Red Hat Enterprise Linux / CentOS"),(0,r.kt)("p",null,"\u5efa\u8bae\u5173\u95ed firewalld\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable firewalld --now\n")),(0,r.kt)("p",null,"\u5982\u679c\u8981\u4fdd\u6301\u542f\u7528 firewalld\uff0c\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u9700\u8981\u4ee5\u4e0b\u89c4\u5219\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"firewall-cmd --permanent --add-port=6443/tcp #apiserver\nfirewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods\nfirewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services\nfirewall-cmd --reload\n")),(0,r.kt)("p",null,"\u4f60\u53ef\u80fd\u8fd8\u9700\u8981\u6253\u5f00\u5176\u4ed6\u7aef\u53e3\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/requirements#k3s-server-%E8%8A%82%E7%82%B9%E7%9A%84%E5%85%A5%E7%AB%99%E8%A7%84%E5%88%99"},"\u5165\u7ad9\u89c4\u5219"),"\u3002\u5982\u679c\u66f4\u6539\u4e86 pod \u6216\u670d\u52a1\u7684\u9ed8\u8ba4 CIDR\uff0c\u5219\u9700\u8981\u76f8\u5e94\u5730\u66f4\u65b0\u9632\u706b\u5899\u89c4\u5219\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u542f\u7528\uff0c\u5219\u9700\u8981\u7981\u7528 nm-cloud-setup \u5e76\u91cd\u65b0\u542f\u52a8\u8282\u70b9\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl disable nm-cloud-setup.service nm-cloud-setup.timer\nreboot\n")),(0,r.kt)("h3",{id:"ubuntu"},"Ubuntu"),(0,r.kt)("p",null,"\u5efa\u8bae\u5173\u95ed ufw\uff08\u4e0d\u590d\u6742\u7684\u9632\u706b\u5899\uff09\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw disable\n")),(0,r.kt)("p",null,"\u5982\u679c\u8981\u4fdd\u6301\u542f\u7528 ufw\uff0c\u9ed8\u8ba4\u60c5\u51b5\u4e0b\u9700\u8981\u4ee5\u4e0b\u89c4\u5219\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"ufw allow 6443/tcp #apiserver\nufw allow from 10.42.0.0/16 to any #pods\nufw allow from 10.43.0.0/16 to any #services\n")),(0,r.kt)("p",null,"\u4f60\u53ef\u80fd\u8fd8\u9700\u8981\u6253\u5f00\u5176\u4ed6\u7aef\u53e3\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/requirements#k3s-server-%E8%8A%82%E7%82%B9%E7%9A%84%E5%85%A5%E7%AB%99%E8%A7%84%E5%88%99"},"\u5165\u7ad9\u89c4\u5219"),"\u3002\u5982\u679c\u66f4\u6539\u4e86 pod \u6216\u670d\u52a1\u7684\u9ed8\u8ba4 CIDR\uff0c\u5219\u9700\u8981\u76f8\u5e94\u5730\u66f4\u65b0\u9632\u706b\u5899\u89c4\u5219\u3002"),(0,r.kt)("h3",{id:"raspberry-pi"},"Raspberry Pi"),(0,r.kt)("p",null,"Raspberry Pi OS \u57fa\u4e8e Debian\uff0c\u53ef\u80fd\u4f1a\u53d7\u5230\u65e7 iptables \u7248\u672c\u7684\u5f71\u54cd\u3002\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"#%E6%97%A7%E7%9A%84-iptables-%E7%89%88%E6%9C%AC"},"\u89e3\u51b3\u65b9\u6cd5"),"\u3002"),(0,r.kt)("p",null,"\u6807\u51c6 Raspberry Pi OS \u4e0d\u4f1a\u5728\u542f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," \u7684\u60c5\u51b5\u4e0b\u5f00\u59cb\u3002",(0,r.kt)("strong",{parentName:"p"},"K3S")," \u9700\u8981 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," \u6765\u542f\u52a8 systemd \u670d\u52a1\u3002\u4f60\u53ef\u4ee5\u901a\u8fc7\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroup_memory=1 cgroup_enable=memory")," \u9644\u52a0\u5230 ",(0,r.kt)("inlineCode",{parentName:"p"},"/boot/cmdline.txt")," \u6765\u542f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"cgroups")," \u3002"),(0,r.kt)("p",null,"\u793a\u4f8b cmdline.txt\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory\n")),(0,r.kt)("p",null,"\u4ece Ubuntu 21.10 \u5f00\u59cb\uff0c\u5bf9 Raspberry Pi \u7684 vxlan \u652f\u6301\u5df2\u79fb\u81f3\u5355\u72ec\u7684\u5185\u6838\u6a21\u5757\u4e2d\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo apt install linux-modules-extra-raspi\n")),(0,r.kt)("h2",{id:"\u5728-docker-\u4e2d\u8fd0\u884c-k3s"},"\u5728 Docker \u4e2d\u8fd0\u884c K3s"),(0,r.kt)("p",null,"\u5728 Docker \u4e2d\u8fd0\u884c K3s \u6709\u51e0\u79cd\u65b9\u6cd5\uff1a"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"K3d",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3d-io/k3d"},"k3d")," \u662f\u4e00\u4e2a\u7528\u4e8e\u5728 Docker \u4e2d\u8f7b\u677e\u8fd0\u884c\u591a\u8282\u70b9 K3s \u96c6\u7fa4\u7684\u5b9e\u7528\u7a0b\u5e8f\u3002"),(0,r.kt)("p",null,"K3d \u80fd\u8ba9\u4f60\u8f7b\u677e\u5728 Docker \u4e2d\u521b\u5efa\u5355\u8282\u70b9\u548c\u591a\u8282\u70b9 K3s \u96c6\u7fa4\uff08\u4f8b\u5982 Kubernetes \u4e0a\u7684\u672c\u5730\u5f00\u53d1\uff09\u3002"),(0,r.kt)("p",null,"\u6709\u5173\u5982\u4f55\u5b89\u88c5\u548c\u4f7f\u7528 K3d \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"https://k3d.io/#installation"},"\u5b89\u88c5"),"\u6587\u6863\u3002")),(0,r.kt)(d,{value:"Docker",mdxType:"TabItem"},(0,r.kt)("p",null,"\u8981\u4f7f\u7528 Docker\uff0c\u4f60\u8fd8\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"rancher/k3s")," \u955c\u50cf\u6765\u8fd0\u884c K3s Server \u548c Agent\u3002\n\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"docker run")," \u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker run \\\n  --privileged \\\n  --name k3s-server-1 \\\n  --hostname k3s-server-1 \\\n  -p 6443:6443 \\\n  -d rancher/k3s:v1.24.10-k3s1 \\\n  server\n")),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\u4f60\u5fc5\u987b\u6307\u5b9a\u4e00\u4e2a\u6709\u6548\u7684 K3s \u7248\u672c\u4f5c\u4e3a\u6807\u7b7e\uff1b\u6211\u4eec\u672a\u7ef4\u62a4 ",(0,r.kt)("inlineCode",{parentName:"p"},"latest")," \u6807\u7b7e\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","Docker \u955c\u50cf\u4e0d\u652f\u6301\u5728\u6807\u7b7e\u4e2d\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \u7b26\u53f7\uff0c\u56e0\u6b64\uff0c\u8bf7\u5728\u6807\u7b7e\u4e2d\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"-")," \u7b26\u53f7\u3002")),(0,r.kt)("p",null,"K3s \u8fd0\u884c\u540e\uff0c\u4f60\u53ef\u4ee5\u5c06 admin kubeconfig \u4ece Docker \u5bb9\u5668\u4e2d\u590d\u5236\u51fa\u6765\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config\n")))),(0,r.kt)("h2",{id:"selinux-\u652f\u6301"},"SELinux \u652f\u6301"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece v1.19.4+k3s1 \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u5982\u679c\u4f60\u5728\u9ed8\u8ba4\u542f\u7528 SELinux \u7684\u7cfb\u7edf\uff08\u4f8b\u5982 CentOS\uff09\u4e0a\u5b89\u88c5 K3s\uff0c\u5219\u5fc5\u987b\u786e\u4fdd\u5df2\u5b89\u88c5\u6b63\u786e\u7684 SELinux \u7b56\u7565\u3002"),(0,r.kt)(u,{mdxType:"Tabs"},(0,r.kt)(d,{value:"\u81ea\u52a8\u5b89\u88c5",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\u5982\u679c\u7cfb\u7edf\u517c\u5bb9\uff0c\u800c\u4e14\u6ca1\u6709\u8fdb\u884c\u79bb\u7ebf\u5b89\u88c5\uff0c\u90a3\u4e48",(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9"},"\u5b89\u88c5\u811a\u672c"),"\u5c06\u81ea\u52a8\u4ece Rancher RPM \u4ed3\u5e93\u5b89\u88c5 SELinux RPM\u3002\u4f60\u901a\u8fc7\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SKIP_SELINUX_RPM=true")," \u6765\u8df3\u8fc7\u81ea\u52a8\u5b89\u88c5\u3002")),(0,r.kt)(d,{value:"\u624b\u52a8\u5b89\u88c5",default:!0,mdxType:"TabItem"},(0,r.kt)("p",null,"\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u547d\u4ee4\u5b89\u88c5\u5fc5\u8981\u7684\u7b56\u7565\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"yum install -y container-selinux selinux-policy-base\nyum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm\n")),(0,r.kt)("p",null,"\u8981\u8ba9\u5b89\u88c5\u811a\u672c\u62a5\u544a warning \u800c\u4e0d\u662f fail\uff0c\u4f60\u53ef\u4ee5\u8bbe\u7f6e\u73af\u5883\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_SELINUX_WARN=true"),"\u3002"))),(0,r.kt)("h3",{id:"\u542f\u7528-selinux-\u5f3a\u5236\u6267\u884c"},"\u542f\u7528 SELinux \u5f3a\u5236\u6267\u884c"),(0,r.kt)("p",null,"\u8981\u5229\u7528 SELinux\uff0c\u8bf7\u5728\u542f\u52a8 K3s Server \u548c Agent \u65f6\u6307\u5b9a ",(0,r.kt)("inlineCode",{parentName:"p"},"--selinux")," \u6807\u5fd7\u3002"),(0,r.kt)("p",null,"\u4f60\u4e5f\u53ef\u4ee5\u5728 K3s ",(0,r.kt)("a",{parentName:"p",href:"#"},"\u914d\u7f6e\u6587\u4ef6"),"\u4e2d\u6307\u5b9a\u6b64\u9009\u9879\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre"},"selinux: true\n")),(0,r.kt)("p",null,"\u4e0d\u652f\u6301\u5728 SELinux \u4e0b\u4f7f\u7528\u81ea\u5b9a\u4e49 ",(0,r.kt)("inlineCode",{parentName:"p"},"--data-dir"),"\u3002\u8981\u81ea\u5b9a\u4e49\u5b83\uff0c\u4f60\u53ef\u80fd\u9700\u8981\u81ea\u884c\u7f16\u5199\u81ea\u5b9a\u4e49\u7b56\u7565\u3002\u5982\u9700\u6307\u5bfc\uff0c\u4f60\u53ef\u4ee5\u53c2\u8003 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containers/container-selinux"},"containers/container-selinux")," \u4ed3\u5e93\uff0c\u4ed3\u5e93\u5305\u542b Container Runtime \u7684 SELinux \u7b56\u7565\u6587\u4ef6\uff0c\u540c\u65f6\u4f60\u53ef\u4ee5\u53c2\u8003 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s-selinux"},"k3s-io/k3s-selinux")," \u4ed3\u5e93\uff0c\u8be5\u4ed3\u5e93\u5305\u542b K3s \u7684 SELinux \u7b56\u7565\u3002"),(0,r.kt)("h2",{id:"\u542f\u7528-estargz-\u7684-lazy-pulling\u5b9e\u9a8c\u6027"},"\u542f\u7528 eStargz \u7684 Lazy Pulling\uff08\u5b9e\u9a8c\u6027\uff09"),(0,r.kt)("h3",{id:"\u4ec0\u4e48\u662f-lazy-pulling-\u548c-estargz"},"\u4ec0\u4e48\u662f Lazy Pulling \u548c eStargz\uff1f"),(0,r.kt)("p",null,"\u62c9\u53d6\u955c\u50cf\u662f\u5bb9\u5668\u751f\u547d\u5468\u671f\u4e2d\u6bd4\u8f83\u8017\u65f6\u7684\u6b65\u9aa4\u4e4b\u4e00\n\uff08\u6839\u636e ",(0,r.kt)("a",{parentName:"p",href:"https://www.usenix.org/conference/fast16/technical-sessions/presentation/harter"},"Harter \u7b49\u4eba"),"\u7684\u8bf4\u6cd5\uff09\u3002"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},"\u62c9\u5305\u5360\u5bb9\u5668\u542f\u52a8\u65f6\u95f4\u7684 76%\uff0c\u4f46\u5374\u53ea\u8bfb\u53d6\u4e86 6.4% \u7684\u6570\u636e\u3002")),(0,r.kt)("p",null,"\u4e3a\u4e86\u89e3\u51b3\u8fd9\u4e2a\u95ee\u9898\uff0cK3s \u7684\u5b9e\u9a8c\u529f\u80fd\u652f\u6301\u955c\u50cf\u5185\u5bb9\u7684 ",(0,r.kt)("em",{parentName:"p"},"lazy pulling"),"\u3002\n\u8fd9\u5141\u8bb8 K3s \u5728\u62c9\u53d6\u6574\u4e2a\u955c\u50cf\u4e4b\u524d\u542f\u52a8\u4e00\u4e2a\u5bb9\u5668\u3002\n\u5fc5\u8981\u7684\u5185\u5bb9\u5757\uff08\u4f8b\u5982\u5355\u4e2a\u6587\u4ef6\uff09\u662f\u6309\u9700\u83b7\u53d6\u7684\u3002\n\u5bf9\u4e8e\u5927\u955c\u50cf\u800c\u8a00\uff0c\u8fd9\u79cd\u6280\u672f\u53ef\u4ee5\u7f29\u77ed\u5bb9\u5668\u542f\u52a8\u5ef6\u8fdf\u3002"),(0,r.kt)("p",null,"\u8981\u542f\u7528 lazy pulling\uff0c\u4f60\u9700\u8981\u5c06\u76ee\u6807\u955c\u50cf\u683c\u5f0f\u5316\u4e3a ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter/blob/main/docs/stargz-estargz.md"},(0,r.kt)("em",{parentName:"a"},"eStargz")),"\u3002\n\u8fd9\u662f OCI \u7684\u4e00\u4e2a\u66ff\u4ee3\u54c1\uff0c\u4f46\u5b83 100% OCI \u517c\u5bb9\u955c\u50cf\u683c\u5f0f\uff0c\u7528\u4e8e Lazy Pulling\u3002\n\u7531\u4e8e\u517c\u5bb9\u6027\uff0ceStargz \u53ef\u4ee5\u63a8\u9001\u5230\u6807\u51c6\u5bb9\u5668\u955c\u50cf\u4ed3\u5e93\uff08\u4f8b\u5982 ghcr.io\uff09\uff0c\u5e76\u4e14\u5373\u4f7f\u5728 eStargz-agnostic \u8fd0\u884c\u65f6\u4e5f",(0,r.kt)("em",{parentName:"p"},"\u4ecd\u7136\u53ef\u4ee5\u8fd0\u884c"),"\u3002"),(0,r.kt)("p",null,"eStargz \u662f\u57fa\u4e8e ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/google/crfs"},"Google CRFS \u9879\u76ee\u63d0\u51fa\u7684 stargz \u683c\u5f0f"),"\u5f00\u53d1\u7684\uff0c\u5177\u6709\u5185\u5bb9\u9a8c\u8bc1\u548c\u6027\u80fd\u4f18\u5316\u7b49\u5b9e\u7528\u529f\u80fd\u3002\n\u6709\u5173 Lazy Pulling \u548c eStargz \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/containerd/stargz-snapshotter"},"Stargz Snapshotter \u9879\u76ee\u4ed3\u5e93"),"\u3002"),(0,r.kt)("h3",{id:"\u914d\u7f6e-k3s-\u8fdb\u884c-estargz-\u7684-lazy-pulling"},"\u914d\u7f6e K3s \u8fdb\u884c eStargz \u7684 Lazy Pulling"),(0,r.kt)("p",null,"\u5982\u4e0b\u6240\u793a\uff0cK3s Server \u548c Agent \u9700\u8981 ",(0,r.kt)("inlineCode",{parentName:"p"},"--snapshotter=stargz")," \u9009\u9879\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --snapshotter=stargz\n")),(0,r.kt)("p",null,"\u4f7f\u7528\u6b64\u914d\u7f6e\uff0c\u4f60\u53ef\u4ee5\u5bf9 eStargz \u683c\u5f0f\u7684\u955c\u50cf\u8fdb\u884c Lazy Pulling\u3002\n\u4ee5\u4e0b Pod \u6e05\u5355\u793a\u4f8b\u4f7f\u7528 eStargz \u683c\u5f0f\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"node:13.13.0")," \u955c\u50cf (",(0,r.kt)("inlineCode",{parentName:"p"},"ghcr.io/stargz-containers/node:13.13.0-esgz"),")\u3002\n\u5f53\u542f\u7528 stargz snapshotter \u65f6\uff0cK3s \u4f1a\u5bf9\u8be5\u955c\u50cf\u8fdb\u884c lazy pulling\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: Pod\nmetadata:\n  name: nodejs\nspec:\n  containers:\n  - name: nodejs-estargz\n    image: ghcr.io/stargz-containers/node:13.13.0-esgz\n    command: [\"node\"]\n    args:\n    - -e\n    - var http = require('http');\n      http.createServer(function(req, res) {\n        res.writeHead(200);\n        res.end('Hello World!\\n');\n      }).listen(80);\n    ports:\n    - containerPort: 80\n")),(0,r.kt)("h2",{id:"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90"},"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u5728\u4e0d\u4f7f\u7528 Rancher \u7684\u60c5\u51b5\u4e0b\u4e3a K3s \u5b89\u88c5 ",(0,r.kt)("a",{parentName:"p",href:"https://rancher.com/docs/rancher/v2.6/en/logging/helm-chart-options/"},"Rancher Logging"),"\u3002\u4e3a\u6b64\uff0c\u4f60\u53ef\u4ee5\u6267\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"helm repo add rancher-charts https://charts.rancher.io\nhelm repo update\nhelm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd\nhelm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging\n")),(0,r.kt)("h2",{id:"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7"},"\u5176\u4ed6\u7f51\u7edc\u7b56\u7565\u65e5\u5fd7"),(0,r.kt)("p",null,"\u652f\u6301\u8bb0\u5f55\u7f51\u7edc\u7b56\u7565\u4e22\u5f03\u7684\u6570\u636e\u5305\u3002\u6570\u636e\u5305\u88ab\u53d1\u9001\u5230 iptables NFLOG \u64cd\u4f5c\uff0c\u5b83\u663e\u793a\u4e86\u6570\u636e\u5305\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u5305\u62ec\u963b\u6b62\u5b83\u7684\u7f51\u7edc\u7b56\u7565\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u6d41\u91cf\u5f88\u5927\uff0c\u65e5\u5fd7\u6d88\u606f\u7684\u6570\u91cf\u53ef\u80fd\u4f1a\u975e\u5e38\u591a\u3002\u8981\u5728\u6bcf\u4e2a\u7b56\u7565\u4e0a\u63a7\u5236\u65e5\u5fd7\u901f\u7387\uff0c\u4f60\u53ef\u4ee5\u5728 question \u7684\u7f51\u7edc\u7b56\u7565\u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u6ce8\u91ca\uff0c\u4ece\u800c\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"limit")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst")," iptables \u53c2\u6570\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit=<LIMIT-VALUE>")),(0,r.kt)("li",{parentName:"ul"},(0,r.kt)("inlineCode",{parentName:"li"},"kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE>"))),(0,r.kt)("p",null,"\u9ed8\u8ba4\u503c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"limit=10/minute")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"limit-burst=10"),"\u3002\u4f60\u53ef\u4ee5\u67e5\u770b ",(0,r.kt)("a",{parentName:"p",href:"https://www.netfilter.org/documentation/HOWTO/packet-filtering-HOWTO-7.html#:~:text=restrict%20the%20rate%20of%20matches"},"iptables \u624b\u518c"),"\u4ee5\u8fdb\u4e00\u6b65\u4e86\u89e3\u8fd9\u4e9b\u5b57\u6bb5\u7684\u683c\u5f0f\u548c\u53ef\u9009\u503c\u3002"),(0,r.kt)("p",null,"\u8981\u5c06 NFLOG \u6570\u636e\u5305\u8f6c\u6362\u4e3a\u65e5\u5fd7\u6761\u76ee\uff0c\u8bf7\u5b89\u88c5 ulogd2 \u5e76\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"[log1]")," \u914d\u7f6e\u4e3a\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"group=100")," \u4e0a\u8bfb\u53d6\u3002\u7136\u540e\uff0c\u91cd\u542f ulogd2 \u670d\u52a1\u4ee5\u63d0\u4ea4\u65b0\u914d\u7f6e\u3002\n\u5f53\u6570\u636e\u5305\u88ab\u7f51\u7edc\u7b56\u7565\u89c4\u5219\u963b\u6b62\u65f6\uff0c\u65e5\u5fd7\u6d88\u606f\u5c06\u51fa\u73b0\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/log/ulog/syslogemu.log")," \u4e2d\u3002"),(0,r.kt)("p",null,"\u53d1\u9001\u5230 NFLOG netlink \u5957\u63a5\u5b57\u7684\u6570\u636e\u5305\u4e5f\u53ef\u4ee5\u4f7f\u7528 tcpdump \u6216 tshark \u7b49\u547d\u4ee4\u884c\u5de5\u5177\u8bfb\u53d6\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"tcpdump -ni nflog:100\n")),(0,r.kt)("p",null,"\u867d\u7136\u66f4\u5bb9\u6613\u83b7\u5f97\uff0c\u4f46 tcpdump \u4e0d\u4f1a\u663e\u793a\u963b\u6b62\u6570\u636e\u5305\u7684\u7f51\u7edc\u7b56\u7565\u7684\u540d\u79f0\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528 wireshark \u7684 tshark \u547d\u4ee4\u6765\u663e\u793a\u5b8c\u6574\u7684 NFLOG \u6570\u636e\u5305\u6807\u5934\uff0c\u5176\u4e2d\u5305\u62ec\u5305\u542b\u4e86\u7b56\u7565\u540d\u79f0\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"nflog.prefix")," \u5b57\u6bb5\u3002"))}m.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/9df0942e.b8fd0822.js b/zh/assets/js/9df0942e.9281cd3f.js
similarity index 99%
rename from zh/assets/js/9df0942e.b8fd0822.js
rename to zh/assets/js/9df0942e.9281cd3f.js
index 487349a3a..1b9219565 100644
--- a/zh/assets/js/9df0942e.b8fd0822.js
+++ b/zh/assets/js/9df0942e.9281cd3f.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3531],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},2694:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const s={title:"CIS Self Assessment Guide",weight:90},i=void 0,l={unversionedId:"security/self-assessment",id:"security/self-assessment",title:"CIS Self Assessment Guide",description:"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/self-assessment.md",sourceDirName:"security",slug:"/security/self-assessment",permalink:"/zh/security/self-assessment",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"CIS Self Assessment Guide",weight:90},sidebar:"mySidebar",previous:{title:"CIS Hardening Guide",permalink:"/zh/security/hardening-guide"}},o={},c=[{value:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)",id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)",id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)",id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)",id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)",id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)",id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)",id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)",id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual",level:3},{value:"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)",id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated",level:3},{value:"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)",id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated",level:3},{value:"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)",id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated",level:3},{value:"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)",id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)",id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)",id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)",id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)",id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)",id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)",id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)",id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual",level:3},{value:"1.2 API Server",id:"12-api-server",level:2},{value:"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)",id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual",level:3},{value:"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)",id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated",level:3},{value:"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)",id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated",level:3},{value:"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)",id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated",level:3},{value:"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)",id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)",id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)",id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated",level:3},{value:"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)",id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated",level:3},{value:"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)",id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual",level:3},{value:"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)",id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated",level:3},{value:"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)",id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual",level:3},{value:"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)",id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual",level:3},{value:"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)",id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated",level:3},{value:"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)",id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated",level:3},{value:"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)",id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated",level:3},{value:"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)",id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated",level:3},{value:"1.2.18 Ensure that the --profiling argument is set to false (Automated)",id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.2.19 Ensure that the --audit-log-path argument is set (Automated)",id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated",level:3},{value:"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)",id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated",level:3},{value:"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)",id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated",level:3},{value:"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)",id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated",level:3},{value:"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)",id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated",level:3},{value:"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)",id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)",id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)",id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)",id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)",id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual",level:3},{value:"1.2.31 Ensure that encryption providers are appropriately configured (Manual)",id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual",level:3},{value:"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)",id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"1.3 Controller Manager",id:"13-controller-manager",level:2},{value:"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)",id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual",level:3},{value:"1.3.2 Ensure that the --profiling argument is set to false (Automated)",id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)",id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated",level:3},{value:"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)",id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)",id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)",id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated",level:3},{value:"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"1.4 Scheduler",id:"14-scheduler",level:2},{value:"1.4.1 Ensure that the --profiling argument is set to false (Automated)",id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"2 Etcd Node Configuration",id:"2-etcd-node-configuration",level:2},{value:"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)",id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)",id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.3 Ensure that the --auto-tls argument is not set to true (Automated)",id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)",id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)",id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)",id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)",id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual",level:3},{value:"3.1 Authentication and Authorization",id:"31-authentication-and-authorization",level:2},{value:"3.1.1 Client certificate authentication should not be used for users (Manual)",id:"311-client-certificate-authentication-should-not-be-used-for-users-manual",level:3},{value:"3.2 Logging",id:"32-logging",level:2},{value:"3.2.1 Ensure that a minimal audit policy is created (Manual)",id:"321-ensure-that-a-minimal-audit-policy-is-created-manual",level:3},{value:"3.2.2 Ensure that the audit policy covers key security concerns (Manual)",id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual",level:3},{value:"4.1 Worker Node Configuration Files",id:"41-worker-node-configuration-files",level:2},{value:"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)",id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)",id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)",id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)",id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)",id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)",id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)",id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)",id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)",id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)",id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.2 Kubelet",id:"42-kubelet",level:2},{value:"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)",id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated",level:3},{value:"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)",id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual",level:3},{value:"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)",id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual",level:3},{value:"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)",id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated",level:3},{value:"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)",id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated",level:3},{value:"4.2.8 Ensure that the --hostname-override argument is not set (Manual)",id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual",level:3},{value:"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)",id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual",level:3},{value:"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)",id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual",level:3},{value:"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)",id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated",level:3},{value:"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)",id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual",level:3},{value:"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)",id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"5.1 RBAC and Service Accounts",id:"51-rbac-and-service-accounts",level:2},{value:"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)",id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual",level:3},{value:"5.1.2 Minimize access to secrets (Manual)",id:"512-minimize-access-to-secrets-manual",level:3},{value:"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)",id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual",level:3},{value:"5.1.4 Minimize access to create pods (Manual)",id:"514-minimize-access-to-create-pods-manual",level:3},{value:"5.1.5 Ensure that default service accounts are not actively used. (Manual)",id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual",level:3},{value:"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)",id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual",level:3},{value:"5.1.7 Avoid use of system:masters group (Manual)",id:"517-avoid-use-of-systemmasters-group-manual",level:3},{value:"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)",id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual",level:3},{value:"5.2 Pod Security Standards",id:"52-pod-security-standards",level:2},{value:"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)",id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual",level:3},{value:"5.2.2 Minimize the admission of privileged containers (Automated)",id:"522-minimize-the-admission-of-privileged-containers-automated",level:3},{value:"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)",id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated",level:3},{value:"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)",id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated",level:3},{value:"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)",id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated",level:3},{value:"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)",id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated",level:3},{value:"5.2.7 Minimize the admission of root containers (Automated)",id:"527-minimize-the-admission-of-root-containers-automated",level:3},{value:"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)",id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated",level:3},{value:"5.2.9 Minimize the admission of containers with added capabilities (Automated)",id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated",level:3},{value:"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)",id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual",level:3},{value:"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)",id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual",level:3},{value:"5.2.12 Minimize the admission of HostPath volumes (Manual)",id:"5212-minimize-the-admission-of-hostpath-volumes-manual",level:3},{value:"5.2.13 Minimize the admission of containers which use HostPorts (Manual)",id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual",level:3},{value:"5.3 Network Policies and CNI",id:"53-network-policies-and-cni",level:2},{value:"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)",id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual",level:3},{value:"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)",id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual",level:3},{value:"5.4 Secrets Management",id:"54-secrets-management",level:2},{value:"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)",id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual",level:3},{value:"5.4.2 Consider external secret storage (Manual)",id:"542-consider-external-secret-storage-manual",level:3},{value:"5.5 Extensible Admission Control",id:"55-extensible-admission-control",level:2},{value:"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)",id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual",level:3},{value:"5.7 General Policies",id:"57-general-policies",level:2},{value:"5.7.1 Create administrative boundaries between resources using namespaces (Manual)",id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual",level:3},{value:"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)",id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual",level:3},{value:"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)",id:"573-apply-securitycontext-to-your-pods-and-containers-manual",level:3},{value:"5.7.4 The default namespace should not be used (Manual)",id:"574-the-default-namespace-should-not-be-used-manual",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("admonition",{type:"info"},(0,n.kt)("p",{parentName:"admonition"},"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002")),(0,n.kt)("h3",{id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124"},"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"),(0,n.kt)("h4",{id:"overview"},"Overview"),(0,n.kt)("p",null,"This document is a companion to the ",(0,n.kt)("a",{parentName:"p",href:"/zh/security/hardening-guide"},"K3s security hardening guide"),". The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers."),(0,n.kt)("p",null,"This guide is specific to the ",(0,n.kt)("strong",{parentName:"p"},"v1.22"),", ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," and ",(0,n.kt)("strong",{parentName:"p"},"v1.24")," release line of K3s and the ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," release of the CIS Kubernetes Benchmark."),(0,n.kt)("p",null,"For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in ",(0,n.kt)("a",{parentName:"p",href:"https://www.cisecurity.org/benchmark/kubernetes/"},"Center for Internet Security (CIS)"),"."),(0,n.kt)("h4",{id:"testing-controls-methodology"},"Testing controls methodology"),(0,n.kt)("p",null,"Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide."),(0,n.kt)("p",null,"Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing."),(0,n.kt)("p",null,"These are the possible results for each control:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Pass")," - The K3s cluster under test passed the audit outlined in the benchmark."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Not Applicable")," - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Warn")," - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.")),(0,n.kt)("p",null,'This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the "audit" commands to fit your scenario.'),(0,n.kt)("blockquote",null,(0,n.kt)("p",{parentName:"blockquote"},"NOTE: Only ",(0,n.kt)("inlineCode",{parentName:"p"},"automated")," tests (previously called ",(0,n.kt)("inlineCode",{parentName:"p"},"scored"),") are covered in this guide.")),(0,n.kt)("h3",{id:"controls"},"Controls"),(0,n.kt)("hr",null),(0,n.kt)("h2",{id:"11-control-plane-node-configuration-files"},"1.1 Control Plane Node Configuration Files"),(0,n.kt)("h3",{id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the\ncontrol plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 <path/to/cni/files>"),(0,n.kt)("h3",{id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual"},"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root <path/to/cni/files>"),(0,n.kt)("h3",{id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated"},"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above). For example,\nchmod 700 /var/lib/etcd"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.1.11\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'700' is equal to '700'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"700\n")),(0,n.kt)("h3",{id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated"},"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above).\nFor example, chown etcd:etcd /var/lib/etcd"),(0,n.kt)("h3",{id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated"},"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("h3",{id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated"},"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/admin.conf"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated"},"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown -R root:root /etc/kubernetes/pki/"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root\n")),(0,n.kt)("h3",{id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 644 /etc/kubernetes/pki/*.crt"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt\n")),(0,n.kt)("h3",{id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual"},"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 600 /etc/kubernetes/pki/*.key"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key\n")),(0,n.kt)("h2",{id:"12-api-server"},"1.2 API Server"),(0,n.kt)("h3",{id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual"},"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--anonymous-auth=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'\n")),(0,n.kt)("h3",{id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated"},"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and configure alternate mechanisms for authentication. Then,\nedit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token-auth-file=<filename>")," parameter."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--token-auth-file' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated"},"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"DenyServiceExternalIPs"),"\nfrom enabled admission plugins."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated"},"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the --kubelet-https parameter."),(0,n.kt)("h3",{id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated"},"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the\napiserver and kubelets. Then, edit API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\nkubelet client certificate and key parameters as below.\n--kubelet-client-certificate=<path/to/client-certificate-file>\n--kubelet-client-key=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-client-certificate' is present AND '--kubelet-client-key' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated"},"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup the TLS connection between\nthe apiserver and kubelets. Then, edit the API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\n--kubelet-certificate-authority parameter to the path to the cert file for the certificate authority\n",(0,n.kt)("inlineCode",{parentName:"p"},"--kubelet-certificate-authority=<ca-string>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-certificate-authority' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow.\nOne such example could be as below.\n--authorization-mode=RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated"},"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes Node.\n--authorization-mode=Node,RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'Node'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated"},"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes RBAC,\nfor example ",(0,n.kt)("inlineCode",{parentName:"p"},"--authorization-mode=Node,RBAC"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'RBAC'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual"},"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set the desired limits in a configuration file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\nand set the below parameters.\n--enable-admission-plugins=...,EventRateLimit,...\n--admission-control-config-file=<path/to/configuration/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'EventRateLimit'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated"},"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --enable-admission-plugins parameter, or set it to a\nvalue that does not include AlwaysAdmit."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual"},"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nAlwaysPullImages.\n--enable-admission-plugins=...,AlwaysPullImages,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual"},"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nSecurityContextDeny, unless PodSecurityPolicy is already in place.\n--enable-admission-plugins=...,SecurityContextDeny,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated"},"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create ServiceAccount objects as per your environment.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and ensure that the --disable-admission-plugins parameter is set to a\nvalue that does not include ServiceAccount."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated"},"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --disable-admission-plugins parameter to\nensure it does not include NamespaceLifecycle."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated"},"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to a\nvalue that includes NodeRestriction.\n--enable-admission-plugins=...,NodeRestriction,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'NodeRestriction'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated"},"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --secure-port parameter or\nset it to a different (non-zero) desired port."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--secure-port' is greater than 0 OR '--secure-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.2.18 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated"},"1.2.19 Ensure that the --audit-log-path argument is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-path parameter to a suitable path and\nfile where you would like audit logs to be written, for example,\n--audit-log-path=/var/log/apiserver/audit.log"),(0,n.kt)("h3",{id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated"},"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxage parameter to 30\nor as an appropriate number of days, for example,\n--audit-log-maxage=30"),(0,n.kt)("h3",{id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated"},"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate\nvalue. For example,\n--audit-log-maxbackup=10"),(0,n.kt)("h3",{id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated"},"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB.\nFor example, to set it as 100 MB, --audit-log-maxsize=100"),(0,n.kt)("h3",{id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated"},"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--service-account-lookup=true\nAlternatively, you can delete the --service-account-lookup parameter from this file so\nthat the default takes effect."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-lookup' is not present OR '--service-account-lookup' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated"},"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --service-account-key-file parameter\nto the public key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-key-file=<filename>"),"."),(0,n.kt)("h3",{id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated"},"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate and key file parameters.\n--etcd-certfile=<path/to/client-certificate-file>\n--etcd-keyfile=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.2.29\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-certfile' is present AND '--etcd-keyfile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--etcd-certfile AND --etcd-keyfile\n")),(0,n.kt)("h3",{id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated"},"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the TLS certificate and private key file parameters.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the client certificate authority file.\n--client-ca-file=<path/to/client-ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated"},"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate authority file parameter.\n--etcd-cafile=<path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-cafile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual"},"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --encryption-provider-config parameter to the path of that file.\nFor example, --encryption-provider-config=</path/to/EncryptionConfig/File>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'\n")),(0,n.kt)("h3",{id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual"},"1.2.31 Ensure that encryption providers are appropriately configured (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nIn this file, choose aescbc, kms or secretbox as the encryption provider."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"grep aescbc /path/to/encryption-config.json\n")),(0,n.kt)("h3",{id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual"},"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\nTLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,\nTLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,\nTLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'\n")),(0,n.kt)("h2",{id:"13-controller-manager"},"1.3 Controller Manager"),(0,n.kt)("h3",{id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual"},"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold,\nfor example, --terminated-pod-gc-threshold=10"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'\n")),(0,n.kt)("h3",{id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.3.2 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated"},"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node to set the below parameter.\n--use-service-account-credentials=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--use-service-account-credentials' is not equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated"},"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --service-account-private-key-file parameter\nto the private key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-private-key-file=<filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated"},"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --root-ca-file parameter to the certificate bundle file`.\n--root-ca-file=<path/to/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--root-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated"},"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true.\n--feature-gates=RotateKubeletServerCertificate=true"),(0,n.kt)("h3",{id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is present OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h2",{id:"14-scheduler"},"1.4 Scheduler"),(0,n.kt)("h3",{id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.4.1 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h2",{id:"2-etcd-node-configuration"},"2 Etcd Node Configuration"),(0,n.kt)("h3",{id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated"},"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure TLS encryption.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml\non the master node and set the below parameters.\n--cert-file=</path/to/ca-file>\n--key-file=</path/to/key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file\n")),(0,n.kt)("h3",{id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated"},"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),'\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--client-cert-auth="true"'),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated"},"2.3 Ensure that the --auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --auto-tls parameter or set it to false.\n--auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.3\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory\n")),(0,n.kt)("h3",{id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated"},"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure peer TLS encryption as appropriate\nfor your etcd cluster.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameters.\n--peer-client-file=</path/to/peer-cert-file>\n--peer-key-file=</path/to/peer-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.4\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file\n")),(0,n.kt)("h3",{id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated"},"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--peer-client-cert-auth=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.5\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated"},"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --peer-auto-tls parameter or set it to false.\n--peer-auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.6\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false\n")),(0,n.kt)("h3",{id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual"},"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\n","[Manual test]","\nFollow the etcd documentation and create a dedicated certificate authority setup for the\netcd service.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameter.\n--trusted-ca-file=</path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.7\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'trusted-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file\n")),(0,n.kt)("h2",{id:"31-authentication-and-authorization"},"3.1 Authentication and Authorization"),(0,n.kt)("h3",{id:"311-client-certificate-authentication-should-not-be-used-for-users-manual"},"3.1.1 Client certificate authentication should not be used for users (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAlternative mechanisms provided by Kubernetes such as the use of OIDC should be\nimplemented in place of client certificates."),(0,n.kt)("h2",{id:"32-logging"},"3.2 Logging"),(0,n.kt)("h3",{id:"321-ensure-that-a-minimal-audit-policy-is-created-manual"},"3.2.1 Ensure that a minimal audit policy is created (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate an audit policy file for your cluster."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'\n")),(0,n.kt)("h3",{id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual"},"3.2.2 Ensure that the audit policy covers key security concerns (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the audit policy provided for the cluster and ensure that it covers\nat least the following areas,"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Access to Secrets managed by the cluster. Care should be taken to only\nlog Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in\norder to avoid risk of logging sensitive data."),(0,n.kt)("li",{parentName:"ul"},"Modification of Pod and Deployment objects."),(0,n.kt)("li",{parentName:"ul"},"Use of ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/exec"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/portforward"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/proxy")," and ",(0,n.kt)("inlineCode",{parentName:"li"},"services/proxy"),".\nFor most requests, minimally logging at the Metadata level is recommended\n(the most basic level of logging).")),(0,n.kt)("h2",{id:"41-worker-node-configuration-files"},"4.1 Worker Node Configuration Files"),(0,n.kt)("h3",{id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated"},"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual"},"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is equal to '644'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated"},"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the file permissions of the\n--client-ca-file: ",(0,n.kt)("inlineCode",{parentName:"p"},"chmod 644 <filename>")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 600\n")),(0,n.kt)("h3",{id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual"},"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the ownership of the --client-ca-file:\n",(0,n.kt)("inlineCode",{parentName:"p"},"chown root:root <filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated"},"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchmod 644 /var/lib/kubelet/config.yaml"),(0,n.kt)("h3",{id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated"},"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchown root:root /var/lib/kubelet/config.yaml"),(0,n.kt)("h2",{id:"42-kubelet"},"4.2 Kubelet"),(0,n.kt)("h3",{id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated"},"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication: anonymous: enabled")," to\n",(0,n.kt)("inlineCode",{parentName:"p"},"false"),".\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n",(0,n.kt)("inlineCode",{parentName:"p"},"--anonymous-auth=false"),"\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "anonymous-auth" | grep -v grep; else echo "--anonymous-auth=false"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--anonymous-auth' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authorization.mode")," to Webhook. If\nusing executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--authorization-mode=Webhook\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "authorization-mode" | grep -v grep; else echo "--authorization-mode=Webhook"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication.x509.clientCAFile")," to\nthe location of the client CA file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--client-ca-file=<path/to/client-ca-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "client-ca-file" | grep -v grep; else echo "--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual"},"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"readOnlyPort")," to 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--read-only-port=0\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--read-only-port' is equal to '0' OR '--read-only-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual"},"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"streamingConnectionIdleTimeout")," to a\nvalue other than 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--streaming-connection-idle-timeout=5m\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'\n")),(0,n.kt)("h3",{id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated"},"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"protectKernelDefaults")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--protect-kernel-defaults=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated"},"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"makeIPTablesUtilChains")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove the --make-iptables-util-chains argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual"},"4.2.8 Ensure that the --hostname-override argument is not set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and remove the --hostname-override argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual"},"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"eventRecordQPS")," to an appropriate level.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h3",{id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual"},"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsCertFile")," to the location\nof the certificate file to use to identify this Kubelet, and ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsPrivateKeyFile"),"\nto the location of the corresponding private key file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameters in KUBELET_CERTIFICATE_ARGS variable.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated"},"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to add the line ",(0,n.kt)("inlineCode",{parentName:"p"},"rotateCertificates")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true")," or\nremove it altogether to use the default value.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS\nvariable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual"},"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable.\n--feature-gates=RotateKubeletServerCertificate=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual"},"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"TLSCipherSuites")," to\nTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nor to a subset of these values.\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the --tls-cipher-suites parameter as follows, or to a subset of these values.\n--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h2",{id:"51-rbac-and-service-accounts"},"5.1 RBAC and Service Accounts"),(0,n.kt)("h3",{id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual"},"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIdentify all clusterrolebindings to the cluster-admin role. Check if they are used and\nif they need this role or if they could use a role with fewer privileges.\nWhere possible, first bind users to a lower privileged role and then remove the\nclusterrolebinding to the cluster-admin role :\nkubectl delete clusterrolebinding ","[name]"),(0,n.kt)("h3",{id:"512-minimize-access-to-secrets-manual"},"5.1.2 Minimize access to secrets (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove get, list and watch access to Secret objects in the cluster."),(0,n.kt)("h3",{id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual"},"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible replace any use of wildcards in clusterroles and roles with specific\nobjects or actions."),(0,n.kt)("h3",{id:"514-minimize-access-to-create-pods-manual"},"5.1.4 Minimize access to create pods (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove create access to pod objects in the cluster."),(0,n.kt)("h3",{id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual"},"5.1.5 Ensure that default service accounts are not actively used. (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate explicit service accounts wherever a Kubernetes workload requires specific access\nto the Kubernetes API server.\nModify the configuration of each default service account to include this value\nautomountServiceAccountToken: false"),(0,n.kt)("h3",{id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual"},"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nModify the definition of pods and service accounts which do not need to mount service\naccount tokens to disable it."),(0,n.kt)("h3",{id:"517-avoid-use-of-systemmasters-group-manual"},"5.1.7 Avoid use of system:masters group (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRemove the system:masters group from all users in the cluster."),(0,n.kt)("h3",{id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual"},"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove the impersonate, bind and escalate rights from subjects."),(0,n.kt)("h2",{id:"52-pod-security-standards"},"5.2 Pod Security Standards"),(0,n.kt)("h3",{id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual"},"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that either Pod Security Admission or an external policy control system is in place\nfor every namespace which contains user workloads."),(0,n.kt)("h3",{id:"522-minimize-the-admission-of-privileged-containers-automated"},"5.2.2 Minimize the admission of privileged containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of privileged containers."),(0,n.kt)("h3",{id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated"},"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPID")," containers."),(0,n.kt)("h3",{id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated"},"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostIPC")," containers."),(0,n.kt)("h3",{id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated"},"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostNetwork")," containers."),(0,n.kt)("h3",{id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated"},"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},".spec.allowPrivilegeEscalation")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"527-minimize-the-admission-of-root-containers-automated"},"5.2.7 Minimize the admission of root containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate a policy for each namespace in the cluster, ensuring that either ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAsNonRoot"),"\nor ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAs")," with the range of UIDs not including 0, is set."),(0,n.kt)("h3",{id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated"},"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with the ",(0,n.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capability."),(0,n.kt)("h3",{id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated"},"5.2.9 Minimize the admission of containers with added capabilities (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that ",(0,n.kt)("inlineCode",{parentName:"p"},"allowedCapabilities")," is not present in policies for the cluster unless\nit is set to an empty array."),(0,n.kt)("h3",{id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual"},"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the use of capabilities in applications running on your cluster. Where a namespace\ncontains applications which do not require any Linux capabilities to operate consider adding\na PSP which forbids the admission of containers which do not drop all capabilities."),(0,n.kt)("h3",{id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual"},"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers that have ",(0,n.kt)("inlineCode",{parentName:"p"},".securityContext.windowsOptions.hostProcess")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"5212-minimize-the-admission-of-hostpath-volumes-manual"},"5.2.12 Minimize the admission of HostPath volumes (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPath")," volumes."),(0,n.kt)("h3",{id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual"},"5.2.13 Minimize the admission of containers which use HostPorts (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers which use ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPort")," sections."),(0,n.kt)("h2",{id:"53-network-policies-and-cni"},"5.3 Network Policies and CNI"),(0,n.kt)("h3",{id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual"},"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf the CNI plugin in use does not support network policies, consideration should be given to\nmaking use of a different plugin, or finding an alternate mechanism for restricting traffic\nin the Kubernetes cluster."),(0,n.kt)("h3",{id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual"},"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create NetworkPolicy objects as you need them."),(0,n.kt)("h2",{id:"54-secrets-management"},"5.4 Secrets Management"),(0,n.kt)("h3",{id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual"},"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf possible, rewrite application code to read Secrets from mounted secret files, rather than\nfrom environment variables."),(0,n.kt)("h3",{id:"542-consider-external-secret-storage-manual"},"5.4.2 Consider external secret storage (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRefer to the Secrets management options offered by your cloud provider or a third-party\nsecrets management solution."),(0,n.kt)("h2",{id:"55-extensible-admission-control"},"5.5 Extensible Admission Control"),(0,n.kt)("h3",{id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual"},"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup image provenance."),(0,n.kt)("h2",{id:"57-general-policies"},"5.7 General Policies"),(0,n.kt)("h3",{id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual"},"5.7.1 Create administrative boundaries between resources using namespaces (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create namespaces for objects in your deployment as you need\nthem."),(0,n.kt)("h3",{id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual"},"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nUse ",(0,n.kt)("inlineCode",{parentName:"p"},"securityContext")," to enable the docker/default seccomp profile in your pod definitions.\nAn example is as below:\nsecurityContext:\nseccompProfile:\ntype: RuntimeDefault"),(0,n.kt)("h3",{id:"573-apply-securitycontext-to-your-pods-and-containers-manual"},"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and apply SecurityContexts to your Pods. For a\nsuggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker\nContainers."),(0,n.kt)("h3",{id:"574-the-default-namespace-should-not-be-used-manual"},"5.7.4 The default namespace should not be used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that namespaces are created to allow for appropriate segregation of Kubernetes\nresources and that all new resources are created in a specific namespace."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3531],{3905:(e,t,r)=>{r.d(t,{Zo:()=>u,kt:()=>k});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function s(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?s(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):s(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},s=Object.keys(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)r=s[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var o=a.createContext({}),c=function(e){var t=a.useContext(o),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},u=function(e){var t=c(e.components);return a.createElement(o.Provider,{value:t},e.children)},p={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},d=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,s=e.originalType,o=e.parentName,u=l(e,["components","mdxType","originalType","parentName"]),d=c(r),k=n,h=d["".concat(o,".").concat(k)]||d[k]||p[k]||s;return r?a.createElement(h,i(i({ref:t},u),{},{components:r})):a.createElement(h,i({ref:t},u))}));function k(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var s=r.length,i=new Array(s);i[0]=d;var l={};for(var o in t)hasOwnProperty.call(t,o)&&(l[o]=t[o]);l.originalType=e,l.mdxType="string"==typeof e?e:n,i[1]=l;for(var c=2;c<s;c++)i[c]=r[c];return a.createElement.apply(null,i)}return a.createElement.apply(null,r)}d.displayName="MDXCreateElement"},2694:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>p,frontMatter:()=>s,metadata:()=>l,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const s={title:"CIS Self Assessment Guide",weight:90},i=void 0,l={unversionedId:"security/self-assessment",id:"security/self-assessment",title:"CIS Self Assessment Guide",description:"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/self-assessment.md",sourceDirName:"security",slug:"/security/self-assessment",permalink:"/zh/security/self-assessment",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"CIS Self Assessment Guide",weight:90},sidebar:"mySidebar",previous:{title:"CIS Hardening Guide",permalink:"/zh/security/hardening-guide"}},o={},c=[{value:"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24",id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124",level:3},{value:"Overview",id:"overview",level:4},{value:"Testing controls methodology",id:"testing-controls-methodology",level:4},{value:"Controls",id:"controls",level:3},{value:"1.1 Control Plane Node Configuration Files",id:"11-control-plane-node-configuration-files",level:2},{value:"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)",id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)",id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)",id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)",id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)",id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)",id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)",id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)",id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)",id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)",id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual",level:3},{value:"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)",id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated",level:3},{value:"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)",id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated",level:3},{value:"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)",id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated",level:3},{value:"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)",id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)",id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)",id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)",id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)",id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)",id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated",level:3},{value:"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)",id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)",id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual",level:3},{value:"1.2 API Server",id:"12-api-server",level:2},{value:"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)",id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual",level:3},{value:"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)",id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated",level:3},{value:"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)",id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated",level:3},{value:"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)",id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated",level:3},{value:"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)",id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)",id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)",id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated",level:3},{value:"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)",id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated",level:3},{value:"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)",id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual",level:3},{value:"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)",id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated",level:3},{value:"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)",id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual",level:3},{value:"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)",id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual",level:3},{value:"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)",id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated",level:3},{value:"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)",id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated",level:3},{value:"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)",id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated",level:3},{value:"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)",id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated",level:3},{value:"1.2.18 Ensure that the --profiling argument is set to false (Automated)",id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.2.19 Ensure that the --audit-log-path argument is set (Automated)",id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated",level:3},{value:"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)",id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated",level:3},{value:"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)",id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated",level:3},{value:"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)",id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated",level:3},{value:"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)",id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated",level:3},{value:"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)",id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)",id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)",id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)",id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated",level:3},{value:"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)",id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual",level:3},{value:"1.2.31 Ensure that encryption providers are appropriately configured (Manual)",id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual",level:3},{value:"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)",id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"1.3 Controller Manager",id:"13-controller-manager",level:2},{value:"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)",id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual",level:3},{value:"1.3.2 Ensure that the --profiling argument is set to false (Automated)",id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)",id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated",level:3},{value:"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)",id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)",id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)",id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated",level:3},{value:"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"1.4 Scheduler",id:"14-scheduler",level:2},{value:"1.4.1 Ensure that the --profiling argument is set to false (Automated)",id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated",level:3},{value:"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)",id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated",level:3},{value:"2 Etcd Node Configuration",id:"2-etcd-node-configuration",level:2},{value:"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)",id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)",id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.3 Ensure that the --auto-tls argument is not set to true (Automated)",id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)",id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated",level:3},{value:"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)",id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated",level:3},{value:"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)",id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated",level:3},{value:"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)",id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual",level:3},{value:"3.1 Authentication and Authorization",id:"31-authentication-and-authorization",level:2},{value:"3.1.1 Client certificate authentication should not be used for users (Manual)",id:"311-client-certificate-authentication-should-not-be-used-for-users-manual",level:3},{value:"3.2 Logging",id:"32-logging",level:2},{value:"3.2.1 Ensure that a minimal audit policy is created (Manual)",id:"321-ensure-that-a-minimal-audit-policy-is-created-manual",level:3},{value:"3.2.2 Ensure that the audit policy covers key security concerns (Manual)",id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual",level:3},{value:"4.1 Worker Node Configuration Files",id:"41-worker-node-configuration-files",level:2},{value:"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)",id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)",id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)",id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)",id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)",id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)",id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)",id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual",level:3},{value:"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)",id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual",level:3},{value:"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)",id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated",level:3},{value:"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)",id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated",level:3},{value:"4.2 Kubelet",id:"42-kubelet",level:2},{value:"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)",id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated",level:3},{value:"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)",id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated",level:3},{value:"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)",id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated",level:3},{value:"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)",id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual",level:3},{value:"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)",id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual",level:3},{value:"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)",id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated",level:3},{value:"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)",id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated",level:3},{value:"4.2.8 Ensure that the --hostname-override argument is not set (Manual)",id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual",level:3},{value:"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)",id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual",level:3},{value:"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)",id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual",level:3},{value:"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)",id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated",level:3},{value:"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)",id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual",level:3},{value:"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)",id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual",level:3},{value:"5.1 RBAC and Service Accounts",id:"51-rbac-and-service-accounts",level:2},{value:"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)",id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual",level:3},{value:"5.1.2 Minimize access to secrets (Manual)",id:"512-minimize-access-to-secrets-manual",level:3},{value:"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)",id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual",level:3},{value:"5.1.4 Minimize access to create pods (Manual)",id:"514-minimize-access-to-create-pods-manual",level:3},{value:"5.1.5 Ensure that default service accounts are not actively used. (Manual)",id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual",level:3},{value:"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)",id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual",level:3},{value:"5.1.7 Avoid use of system:masters group (Manual)",id:"517-avoid-use-of-systemmasters-group-manual",level:3},{value:"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)",id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual",level:3},{value:"5.2 Pod Security Standards",id:"52-pod-security-standards",level:2},{value:"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)",id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual",level:3},{value:"5.2.2 Minimize the admission of privileged containers (Automated)",id:"522-minimize-the-admission-of-privileged-containers-automated",level:3},{value:"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)",id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated",level:3},{value:"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)",id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated",level:3},{value:"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)",id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated",level:3},{value:"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)",id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated",level:3},{value:"5.2.7 Minimize the admission of root containers (Automated)",id:"527-minimize-the-admission-of-root-containers-automated",level:3},{value:"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)",id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated",level:3},{value:"5.2.9 Minimize the admission of containers with added capabilities (Automated)",id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated",level:3},{value:"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)",id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual",level:3},{value:"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)",id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual",level:3},{value:"5.2.12 Minimize the admission of HostPath volumes (Manual)",id:"5212-minimize-the-admission-of-hostpath-volumes-manual",level:3},{value:"5.2.13 Minimize the admission of containers which use HostPorts (Manual)",id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual",level:3},{value:"5.3 Network Policies and CNI",id:"53-network-policies-and-cni",level:2},{value:"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)",id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual",level:3},{value:"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)",id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual",level:3},{value:"5.4 Secrets Management",id:"54-secrets-management",level:2},{value:"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)",id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual",level:3},{value:"5.4.2 Consider external secret storage (Manual)",id:"542-consider-external-secret-storage-manual",level:3},{value:"5.5 Extensible Admission Control",id:"55-extensible-admission-control",level:2},{value:"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)",id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual",level:3},{value:"5.7 General Policies",id:"57-general-policies",level:2},{value:"5.7.1 Create administrative boundaries between resources using namespaces (Manual)",id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual",level:3},{value:"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)",id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual",level:3},{value:"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)",id:"573-apply-securitycontext-to-your-pods-and-containers-manual",level:3},{value:"5.7.4 The default namespace should not be used (Manual)",id:"574-the-default-namespace-should-not-be-used-manual",level:3}],u={toc:c};function p(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},u,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("admonition",{type:"info"},(0,n.kt)("p",{parentName:"admonition"},"\u8bf7\u77e5\u6089\uff0c\u672c\u6587\u4ec5\u63d0\u4f9b\u82f1\u6587\u7248\u3002")),(0,n.kt)("h3",{id:"cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124"},"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24"),(0,n.kt)("h4",{id:"overview"},"Overview"),(0,n.kt)("p",null,"This document is a companion to the ",(0,n.kt)("a",{parentName:"p",href:"/zh/security/hardening-guide"},"K3s security hardening guide"),". The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers."),(0,n.kt)("p",null,"This guide is specific to the ",(0,n.kt)("strong",{parentName:"p"},"v1.22"),", ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," and ",(0,n.kt)("strong",{parentName:"p"},"v1.24")," release line of K3s and the ",(0,n.kt)("strong",{parentName:"p"},"v1.23")," release of the CIS Kubernetes Benchmark."),(0,n.kt)("p",null,"For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in ",(0,n.kt)("a",{parentName:"p",href:"https://www.cisecurity.org/benchmark/kubernetes/"},"Center for Internet Security (CIS)"),"."),(0,n.kt)("h4",{id:"testing-controls-methodology"},"Testing controls methodology"),(0,n.kt)("p",null,"Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide."),(0,n.kt)("p",null,"Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing."),(0,n.kt)("p",null,"These are the possible results for each control:"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Pass")," - The K3s cluster under test passed the audit outlined in the benchmark."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Not Applicable")," - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so."),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Warn")," - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.")),(0,n.kt)("p",null,'This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the "audit" commands to fit your scenario.'),(0,n.kt)("blockquote",null,(0,n.kt)("p",{parentName:"blockquote"},"NOTE: Only ",(0,n.kt)("inlineCode",{parentName:"p"},"automated")," tests (previously called ",(0,n.kt)("inlineCode",{parentName:"p"},"scored"),") are covered in this guide.")),(0,n.kt)("h3",{id:"controls"},"Controls"),(0,n.kt)("hr",null),(0,n.kt)("h2",{id:"11-control-plane-node-configuration-files"},"1.1 Control Plane Node Configuration Files"),(0,n.kt)("h3",{id:"111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the\ncontrol plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml"),(0,n.kt)("h3",{id:"113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml"),(0,n.kt)("h3",{id:"115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml"),(0,n.kt)("h3",{id:"117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated"},"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root /etc/kubernetes/manifests/etcd.yaml"),(0,n.kt)("h3",{id:"119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 644 <path/to/cni/files>"),(0,n.kt)("h3",{id:"1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual"},"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root <path/to/cni/files>"),(0,n.kt)("h3",{id:"1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated"},"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above). For example,\nchmod 700 /var/lib/etcd"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.1.11\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'700' is equal to '700'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"700\n")),(0,n.kt)("h3",{id:"1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated"},"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nOn the etcd server node, get the etcd data directory, passed as an argument --data-dir,\nfrom the command 'ps -ef | grep etcd'.\nRun the below command (based on the etcd data directory found above).\nFor example, chown etcd:etcd /var/lib/etcd"),(0,n.kt)("h3",{id:"1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated"},"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("h3",{id:"1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated"},"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example, chown root:root /etc/kubernetes/admin.conf"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root scheduler"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod 644 controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions has permissions 644, expected 644 or more restrictive\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"permissions=644\n")),(0,n.kt)("h3",{id:"1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated"},"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown root:root controllermanager"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root\n")),(0,n.kt)("h3",{id:"1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated"},"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchown -R root:root /etc/kubernetes/pki/"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root\n")),(0,n.kt)("h3",{id:"1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual"},"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 644 /etc/kubernetes/pki/*.crt"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt\n")),(0,n.kt)("h3",{id:"1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual"},"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the control plane node.\nFor example,\nchmod -R 600 /etc/kubernetes/pki/*.key"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key\n")),(0,n.kt)("h2",{id:"12-api-server"},"1.2 API Server"),(0,n.kt)("h3",{id:"121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual"},"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--anonymous-auth=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'\n")),(0,n.kt)("h3",{id:"122-ensure-that-the---token-auth-file-parameter-is-not-set-automated"},"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and configure alternate mechanisms for authentication. Then,\nedit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"--token-auth-file=<filename>")," parameter."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--token-auth-file' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"123-ensure-that-the---denyserviceexternalips-is-not-set-automated"},"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the ",(0,n.kt)("inlineCode",{parentName:"p"},"DenyServiceExternalIPs"),"\nfrom enabled admission plugins."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated"},"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and remove the --kubelet-https parameter."),(0,n.kt)("h3",{id:"125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated"},"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the\napiserver and kubelets. Then, edit API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\nkubelet client certificate and key parameters as below.\n--kubelet-client-certificate=<path/to/client-certificate-file>\n--kubelet-client-key=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-client-certificate' is present AND '--kubelet-client-key' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated"},"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup the TLS connection between\nthe apiserver and kubelets. Then, edit the API server pod specification file\n/etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the\n--kubelet-certificate-authority parameter to the path to the cert file for the certificate authority\n",(0,n.kt)("inlineCode",{parentName:"p"},"--kubelet-certificate-authority=<ca-string>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--kubelet-certificate-authority' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow.\nOne such example could be as below.\n--authorization-mode=RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"128-ensure-that-the---authorization-mode-argument-includes-node-automated"},"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes Node.\n--authorization-mode=Node,RBAC"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'Node'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"129-ensure-that-the---authorization-mode-argument-includes-rbac-automated"},"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --authorization-mode parameter to a value that includes RBAC,\nfor example ",(0,n.kt)("inlineCode",{parentName:"p"},"--authorization-mode=Node,RBAC"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' has 'RBAC'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual"},"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set the desired limits in a configuration file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\nand set the below parameters.\n--enable-admission-plugins=...,EventRateLimit,...\n--admission-control-config-file=<path/to/configuration/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'EventRateLimit'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated"},"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --enable-admission-plugins parameter, or set it to a\nvalue that does not include AlwaysAdmit."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual"},"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nAlwaysPullImages.\n--enable-admission-plugins=...,AlwaysPullImages,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h3",{id:"1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual"},"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to include\nSecurityContextDeny, unless PodSecurityPolicy is already in place.\n--enable-admission-plugins=...,SecurityContextDeny,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated"},"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create ServiceAccount objects as per your environment.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and ensure that the --disable-admission-plugins parameter is set to a\nvalue that does not include ServiceAccount."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated"},"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --disable-admission-plugins parameter to\nensure it does not include NamespaceLifecycle."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated"},"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --enable-admission-plugins parameter to a\nvalue that includes NodeRestriction.\n--enable-admission-plugins=...,NodeRestriction,..."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--enable-admission-plugins' has 'NodeRestriction'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated"},"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and either remove the --secure-port parameter or\nset it to a different (non-zero) desired port."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--secure-port' is greater than 0 OR '--secure-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1218-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.2.18 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1219-ensure-that-the---audit-log-path-argument-is-set-automated"},"1.2.19 Ensure that the --audit-log-path argument is set (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-path parameter to a suitable path and\nfile where you would like audit logs to be written, for example,\n--audit-log-path=/var/log/apiserver/audit.log"),(0,n.kt)("h3",{id:"1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated"},"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxage parameter to 30\nor as an appropriate number of days, for example,\n--audit-log-maxage=30"),(0,n.kt)("h3",{id:"1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated"},"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate\nvalue. For example,\n--audit-log-maxbackup=10"),(0,n.kt)("h3",{id:"1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated"},"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB.\nFor example, to set it as 100 MB, --audit-log-maxsize=100"),(0,n.kt)("h3",{id:"1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated"},"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--service-account-lookup=true\nAlternatively, you can delete the --service-account-lookup parameter from this file so\nthat the default takes effect."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-lookup' is not present OR '--service-account-lookup' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated"},"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --service-account-key-file parameter\nto the public key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-key-file=<filename>"),"."),(0,n.kt)("h3",{id:"1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated"},"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate and key file parameters.\n--etcd-certfile=<path/to/client-certificate-file>\n--etcd-keyfile=<path/to/client-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 1.2.29\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-certfile' is present AND '--etcd-keyfile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--etcd-certfile AND --etcd-keyfile\n")),(0,n.kt)("h3",{id:"1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated"},"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the TLS certificate and private key file parameters.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection on the apiserver.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the client certificate authority file.\n--client-ca-file=<path/to/client-ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated"},"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the etcd certificate authority file parameter.\n--etcd-cafile=<path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--etcd-cafile' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual"},"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nThen, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the --encryption-provider-config parameter to the path of that file.\nFor example, --encryption-provider-config=</path/to/EncryptionConfig/File>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'\n")),(0,n.kt)("h3",{id:"1231-ensure-that-encryption-providers-are-appropriately-configured-manual"},"1.2.31 Ensure that encryption providers are appropriately configured (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and configure a EncryptionConfig file.\nIn this file, choose aescbc, kms or secretbox as the encryption provider."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"grep aescbc /path/to/encryption-config.json\n")),(0,n.kt)("h3",{id:"1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual"},"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml\non the control plane node and set the below parameter.\n--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,\nTLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,\nTLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,\nTLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,\nTLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,\nTLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'\n")),(0,n.kt)("h2",{id:"13-controller-manager"},"1.3 Controller Manager"),(0,n.kt)("h3",{id:"131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual"},"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold,\nfor example, --terminated-pod-gc-threshold=10"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'\n")),(0,n.kt)("h3",{id:"132-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.3.2 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated"},"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node to set the below parameter.\n--use-service-account-credentials=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--use-service-account-credentials' is not equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated"},"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --service-account-private-key-file parameter\nto the private key file for service accounts. For example,\n",(0,n.kt)("inlineCode",{parentName:"p"},"--service-account-private-key-file=<filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--service-account-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated"},"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --root-ca-file parameter to the certificate bundle file`.\n--root-ca-file=<path/to/file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--root-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true"\n')),(0,n.kt)("h3",{id:"136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated"},"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true.\n--feature-gates=RotateKubeletServerCertificate=true"),(0,n.kt)("h3",{id:"137-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -ef | grep containerd | grep -v grep\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is present OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock\n")),(0,n.kt)("h2",{id:"14-scheduler"},"1.4 Scheduler"),(0,n.kt)("h3",{id:"141-ensure-that-the---profiling-argument-is-set-to-false-automated"},"1.4.1 Ensure that the --profiling argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file\non the control plane node and set the below parameter.\n--profiling=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--profiling' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h3",{id:"142-ensure-that-the---bind-address-argument-is-set-to-127001-automated"},"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml\non the control plane node and ensure the correct value for the --bind-address parameter"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259"\n')),(0,n.kt)("h2",{id:"2-etcd-node-configuration"},"2 Etcd Node Configuration"),(0,n.kt)("h3",{id:"21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated"},"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure TLS encryption.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml\non the master node and set the below parameters.\n--cert-file=</path/to/ca-file>\n--key-file=</path/to/key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file\n")),(0,n.kt)("h3",{id:"22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated"},"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),'\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--client-cert-auth="true"'),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.2\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated"},"2.3 Ensure that the --auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --auto-tls parameter or set it to false.\n--auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.3\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory\n")),(0,n.kt)("h3",{id:"24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated"},"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the etcd service documentation and configure peer TLS encryption as appropriate\nfor your etcd cluster.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameters.\n--peer-client-file=</path/to/peer-cert-file>\n--peer-key-file=</path/to/peer-key-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.4\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'cert-file' is present AND 'key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file\n")),(0,n.kt)("h3",{id:"25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated"},"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and set the below parameter.\n--peer-client-cert-auth=true"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.5\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--client-cert-auth=true client-cert-auth: true --client-cert-auth=true\n")),(0,n.kt)("h3",{id:"26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated"},"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master\nnode and either remove the --peer-auto-tls parameter or set it to false.\n--peer-auto-tls=false"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.6\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false\n")),(0,n.kt)("h3",{id:"27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual"},"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\n","[Manual test]","\nFollow the etcd documentation and create a dedicated certificate authority setup for the\netcd service.\nThen, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the\nmaster node and set the below parameter.\n--trusted-ca-file=</path/to/ca-file>"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Script:")," ",(0,n.kt)("inlineCode",{parentName:"p"},"check_for_k3s_etcd.sh")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'#!/bin/bash\n\n# This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3)\n# before it checks the requirement\nset -eE\n\nhandle_error() {\n    echo "false"\n}\n\ntrap \'handle_error\' ERR\n\n\nif [[ "$(journalctl -D /var/log/journal -u k3s | grep \'Managed etcd cluster initializing\' | grep -v grep | wc -l)" -gt 0 ]]; then\n    case $1 in \n        "1.1.11")\n            echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);;\n        "1.2.29")\n            echo $(journalctl -D /var/log/journal -u k3s | grep \'Running kube-apiserver\' | tail -n1 | grep \'etcd-\');;\n        "2.1")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.2")\n            echo $(grep -A 5 \'client-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.3")\n            echo $(grep \'auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.4")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep -E \'cert-file|key-file\');;\n        "2.5")\n            echo $(grep -A 5 \'peer-transport-security\' /var/lib/rancher/k3s/server/db/etcd/config | grep \'client-cert-auth\');;\n        "2.6")\n            echo $(grep \'peer-auto-tls\' /var/lib/rancher/k3s/server/db/etcd/config);;\n        "2.7")\n            echo $(grep \'trusted-ca-file\' /var/lib/rancher/k3s/server/db/etcd/config);;\n    esac\nelse\n# If another database is running, return whatever is required to pass the scan\n    case $1 in\n        "1.1.11")\n            echo "700";;\n        "1.2.29")\n            echo "--etcd-certfile AND --etcd-keyfile";;\n        "2.1")\n            echo "cert-file AND key-file";;\n        "2.2")\n            echo "--client-cert-auth=true";;\n        "2.3")\n            echo "false";;\n        "2.4")\n            echo "peer-cert-file AND peer-key-file";;\n        "2.5")\n            echo "--client-cert-auth=true";;\n        "2.6")\n            echo "--peer-auto-tls=false";;\n        "2.7")\n            echo "--trusted-ca-file";;\n    esac\nfi\n\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit Execution:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"./check_for_k3s_etcd.sh 2.7\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'trusted-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"--trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file\n")),(0,n.kt)("h2",{id:"31-authentication-and-authorization"},"3.1 Authentication and Authorization"),(0,n.kt)("h3",{id:"311-client-certificate-authentication-should-not-be-used-for-users-manual"},"3.1.1 Client certificate authentication should not be used for users (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAlternative mechanisms provided by Kubernetes such as the use of OIDC should be\nimplemented in place of client certificates."),(0,n.kt)("h2",{id:"32-logging"},"3.2 Logging"),(0,n.kt)("h3",{id:"321-ensure-that-a-minimal-audit-policy-is-created-manual"},"3.2.1 Ensure that a minimal audit policy is created (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate an audit policy file for your cluster."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'\n")),(0,n.kt)("h3",{id:"322-ensure-that-the-audit-policy-covers-key-security-concerns-manual"},"3.2.2 Ensure that the audit policy covers key security concerns (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the audit policy provided for the cluster and ensure that it covers\nat least the following areas,"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"Access to Secrets managed by the cluster. Care should be taken to only\nlog Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in\norder to avoid risk of logging sensitive data."),(0,n.kt)("li",{parentName:"ul"},"Modification of Pod and Deployment objects."),(0,n.kt)("li",{parentName:"ul"},"Use of ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/exec"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/portforward"),", ",(0,n.kt)("inlineCode",{parentName:"li"},"pods/proxy")," and ",(0,n.kt)("inlineCode",{parentName:"li"},"services/proxy"),".\nFor most requests, minimally logging at the Metadata level is recommended\n(the most basic level of logging).")),(0,n.kt)("h2",{id:"41-worker-node-configuration-files"},"4.1 Worker Node Configuration Files"),(0,n.kt)("h3",{id:"411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated"},"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf"),(0,n.kt)("h3",{id:"413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual"},"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated"},"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is equal to '644'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 644\n")),(0,n.kt)("h3",{id:"416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated"},"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the below command (based on the file location on your system) on the each worker node.\nFor example,\nchown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual"},"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the file permissions of the\n--client-ca-file: ",(0,n.kt)("inlineCode",{parentName:"p"},"chmod 644 <filename>")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"644 600\n")),(0,n.kt)("h3",{id:"418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual"},"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command to modify the ownership of the --client-ca-file:\n",(0,n.kt)("inlineCode",{parentName:"p"},"chown root:root <filename>"),"."),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'root:root' is equal to 'root:root'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"root:root root:root\n")),(0,n.kt)("h3",{id:"419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated"},"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchmod 644 /var/lib/kubelet/config.yaml"),(0,n.kt)("h3",{id:"4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated"},"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRun the following command (using the config file location identified in the Audit step)\nchown root:root /var/lib/kubelet/config.yaml"),(0,n.kt)("h2",{id:"42-kubelet"},"4.2 Kubelet"),(0,n.kt)("h3",{id:"421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated"},"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication: anonymous: enabled")," to\n",(0,n.kt)("inlineCode",{parentName:"p"},"false"),".\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n",(0,n.kt)("inlineCode",{parentName:"p"},"--anonymous-auth=false"),"\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "anonymous-auth" | grep -v grep; else echo "--anonymous-auth=false"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--anonymous-auth' is equal to 'false'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated"},"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authorization.mode")," to Webhook. If\nusing executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--authorization-mode=Webhook\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "authorization-mode" | grep -v grep; else echo "--authorization-mode=Webhook"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--authorization-mode' does not have 'AlwaysAllow'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated"},"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"authentication.x509.clientCAFile")," to\nthe location of the client CA file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_AUTHZ_ARGS variable.\n--client-ca-file=<path/to/client-ca-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},'/bin/sh -c \'if test $(journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep "Running kube-apiserver" | tail -n1 | grep "client-ca-file" | grep -v grep; else echo "--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt"; fi\'\n')),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--client-ca-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:40Z" level=info msg="Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key"\n')),(0,n.kt)("h3",{id:"424-ensure-that-the---read-only-port-argument-is-set-to-0-manual"},"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"readOnlyPort")," to 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--read-only-port=0\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port'\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--read-only-port' is equal to '0' OR '--read-only-port' is not present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual"},"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"streamingConnectionIdleTimeout")," to a\nvalue other than 0.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--streaming-connection-idle-timeout=5m\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'\n")),(0,n.kt)("h3",{id:"426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated"},"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"protectKernelDefaults")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\n--protect-kernel-defaults=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated"},"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"makeIPTablesUtilChains")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),".\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove the --make-iptables-util-chains argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"428-ensure-that-the---hostname-override-argument-is-not-set-manual"},"4.2.8 Ensure that the --hostname-override argument is not set (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and remove the --hostname-override argument from the\nKUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual"},"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"eventRecordQPS")," to an appropriate level.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameter in KUBELET_SYSTEM_PODS_ARGS variable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h3",{id:"4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual"},"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," pass"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsCertFile")," to the location\nof the certificate file to use to identify this Kubelet, and ",(0,n.kt)("inlineCode",{parentName:"p"},"tlsPrivateKeyFile"),"\nto the location of the corresponding private key file.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the below parameters in KUBELET_CERTIFICATE_ARGS variable.\n--tls-cert-file=<path/to/tls-certificate-file>\n--tls-private-key-file=<path/to/tls-key-file>\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Expected Result"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},"'--tls-cert-file' is present AND '--tls-private-key-file' is present\n")),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Returned Value"),":"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-console"},'Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time="2022-09-13T13:26:50Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time="2022-09-13T13:26:44Z" level=info msg="Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key"\n')),(0,n.kt)("h3",{id:"4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated"},"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to add the line ",(0,n.kt)("inlineCode",{parentName:"p"},"rotateCertificates")," to ",(0,n.kt)("inlineCode",{parentName:"p"},"true")," or\nremove it altogether to use the default value.\nIf using command line arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nremove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS\nvariable.\nBased on your system, restart the kubelet service. For example,\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual"},"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," Not Applicable"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEdit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf\non each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable.\n--feature-gates=RotateKubeletServerCertificate=true\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("h3",{id:"4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual"},"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf using a Kubelet config file, edit the file to set ",(0,n.kt)("inlineCode",{parentName:"p"},"TLSCipherSuites")," to\nTLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nor to a subset of these values.\nIf using executable arguments, edit the kubelet service file\n/etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and\nset the --tls-cipher-suites parameter as follows, or to a subset of these values.\n--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256\nBased on your system, restart the kubelet service. For example:\nsystemctl daemon-reload\nsystemctl restart kubelet.service"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Audit:")),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"/bin/ps -fC containerd\n")),(0,n.kt)("h2",{id:"51-rbac-and-service-accounts"},"5.1 RBAC and Service Accounts"),(0,n.kt)("h3",{id:"511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual"},"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIdentify all clusterrolebindings to the cluster-admin role. Check if they are used and\nif they need this role or if they could use a role with fewer privileges.\nWhere possible, first bind users to a lower privileged role and then remove the\nclusterrolebinding to the cluster-admin role :\nkubectl delete clusterrolebinding ","[name]"),(0,n.kt)("h3",{id:"512-minimize-access-to-secrets-manual"},"5.1.2 Minimize access to secrets (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove get, list and watch access to Secret objects in the cluster."),(0,n.kt)("h3",{id:"513-minimize-wildcard-use-in-roles-and-clusterroles-manual"},"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible replace any use of wildcards in clusterroles and roles with specific\nobjects or actions."),(0,n.kt)("h3",{id:"514-minimize-access-to-create-pods-manual"},"5.1.4 Minimize access to create pods (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove create access to pod objects in the cluster."),(0,n.kt)("h3",{id:"515-ensure-that-default-service-accounts-are-not-actively-used-manual"},"5.1.5 Ensure that default service accounts are not actively used. (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate explicit service accounts wherever a Kubernetes workload requires specific access\nto the Kubernetes API server.\nModify the configuration of each default service account to include this value\nautomountServiceAccountToken: false"),(0,n.kt)("h3",{id:"516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual"},"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nModify the definition of pods and service accounts which do not need to mount service\naccount tokens to disable it."),(0,n.kt)("h3",{id:"517-avoid-use-of-systemmasters-group-manual"},"5.1.7 Avoid use of system:masters group (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRemove the system:masters group from all users in the cluster."),(0,n.kt)("h3",{id:"518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual"},"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nWhere possible, remove the impersonate, bind and escalate rights from subjects."),(0,n.kt)("h2",{id:"52-pod-security-standards"},"5.2 Pod Security Standards"),(0,n.kt)("h3",{id:"521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual"},"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that either Pod Security Admission or an external policy control system is in place\nfor every namespace which contains user workloads."),(0,n.kt)("h3",{id:"522-minimize-the-admission-of-privileged-containers-automated"},"5.2.2 Minimize the admission of privileged containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of privileged containers."),(0,n.kt)("h3",{id:"523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated"},"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPID")," containers."),(0,n.kt)("h3",{id:"524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated"},"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostIPC")," containers."),(0,n.kt)("h3",{id:"525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated"},"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of ",(0,n.kt)("inlineCode",{parentName:"p"},"hostNetwork")," containers."),(0,n.kt)("h3",{id:"526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated"},"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},".spec.allowPrivilegeEscalation")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"527-minimize-the-admission-of-root-containers-automated"},"5.2.7 Minimize the admission of root containers (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nCreate a policy for each namespace in the cluster, ensuring that either ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAsNonRoot"),"\nor ",(0,n.kt)("inlineCode",{parentName:"p"},"MustRunAs")," with the range of UIDs not including 0, is set."),(0,n.kt)("h3",{id:"528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated"},"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with the ",(0,n.kt)("inlineCode",{parentName:"p"},"NET_RAW")," capability."),(0,n.kt)("h3",{id:"529-minimize-the-admission-of-containers-with-added-capabilities-automated"},"5.2.9 Minimize the admission of containers with added capabilities (Automated)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that ",(0,n.kt)("inlineCode",{parentName:"p"},"allowedCapabilities")," is not present in policies for the cluster unless\nit is set to an empty array."),(0,n.kt)("h3",{id:"5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual"},"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nReview the use of capabilities in applications running on your cluster. Where a namespace\ncontains applications which do not require any Linux capabilities to operate consider adding\na PSP which forbids the admission of containers which do not drop all capabilities."),(0,n.kt)("h3",{id:"5211-minimize-the-admission-of-windows-hostprocess-containers-manual"},"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers that have ",(0,n.kt)("inlineCode",{parentName:"p"},".securityContext.windowsOptions.hostProcess")," set to ",(0,n.kt)("inlineCode",{parentName:"p"},"true"),"."),(0,n.kt)("h3",{id:"5212-minimize-the-admission-of-hostpath-volumes-manual"},"5.2.12 Minimize the admission of HostPath volumes (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers with ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPath")," volumes."),(0,n.kt)("h3",{id:"5213-minimize-the-admission-of-containers-which-use-hostports-manual"},"5.2.13 Minimize the admission of containers which use HostPorts (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nAdd policies to each namespace in the cluster which has user workloads to restrict the\nadmission of containers which use ",(0,n.kt)("inlineCode",{parentName:"p"},"hostPort")," sections."),(0,n.kt)("h2",{id:"53-network-policies-and-cni"},"5.3 Network Policies and CNI"),(0,n.kt)("h3",{id:"531-ensure-that-the-cni-in-use-supports-networkpolicies-manual"},"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf the CNI plugin in use does not support network policies, consideration should be given to\nmaking use of a different plugin, or finding an alternate mechanism for restricting traffic\nin the Kubernetes cluster."),(0,n.kt)("h3",{id:"532-ensure-that-all-namespaces-have-networkpolicies-defined-manual"},"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create NetworkPolicy objects as you need them."),(0,n.kt)("h2",{id:"54-secrets-management"},"5.4 Secrets Management"),(0,n.kt)("h3",{id:"541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual"},"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nIf possible, rewrite application code to read Secrets from mounted secret files, rather than\nfrom environment variables."),(0,n.kt)("h3",{id:"542-consider-external-secret-storage-manual"},"5.4.2 Consider external secret storage (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nRefer to the Secrets management options offered by your cloud provider or a third-party\nsecrets management solution."),(0,n.kt)("h2",{id:"55-extensible-admission-control"},"5.5 Extensible Admission Control"),(0,n.kt)("h3",{id:"551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual"},"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and setup image provenance."),(0,n.kt)("h2",{id:"57-general-policies"},"5.7 General Policies"),(0,n.kt)("h3",{id:"571-create-administrative-boundaries-between-resources-using-namespaces-manual"},"5.7.1 Create administrative boundaries between resources using namespaces (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the documentation and create namespaces for objects in your deployment as you need\nthem."),(0,n.kt)("h3",{id:"572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual"},"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nUse ",(0,n.kt)("inlineCode",{parentName:"p"},"securityContext")," to enable the docker/default seccomp profile in your pod definitions.\nAn example is as below:\nsecurityContext:\nseccompProfile:\ntype: RuntimeDefault"),(0,n.kt)("h3",{id:"573-apply-securitycontext-to-your-pods-and-containers-manual"},"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nFollow the Kubernetes documentation and apply SecurityContexts to your Pods. For a\nsuggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker\nContainers."),(0,n.kt)("h3",{id:"574-the-default-namespace-should-not-be-used-manual"},"5.7.4 The default namespace should not be used (Manual)"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Result:")," warn"),(0,n.kt)("p",null,(0,n.kt)("strong",{parentName:"p"},"Remediation:"),"\nEnsure that namespaces are created to allow for appropriate segregation of Kubernetes\nresources and that all new resources are created in a specific namespace."))}p.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/a3ec58b8.1e1f9bd0.js b/zh/assets/js/a3ec58b8.335a21cc.js
similarity index 98%
rename from zh/assets/js/a3ec58b8.1e1f9bd0.js
rename to zh/assets/js/a3ec58b8.335a21cc.js
index 2bb753741..5ecbc7d5d 100644
--- a/zh/assets/js/a3ec58b8.1e1f9bd0.js
+++ b/zh/assets/js/a3ec58b8.335a21cc.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[992],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>k});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),i=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):s(s({},t),e)),n},u=function(e){var t=i(e.components);return a.createElement(o.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,u=p(e,["components","mdxType","originalType","parentName"]),m=i(n),k=r,d=m["".concat(o,".").concat(k)]||m[k]||c[k]||l;return n?a.createElement(d,s(s({ref:t},u),{},{components:n})):a.createElement(d,s({ref:t},u))}));function k(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,s=new Array(l);s[0]=m;var p={};for(var o in t)hasOwnProperty.call(t,o)&&(p[o]=t[o]);p.originalType=e,p.mdxType="string"==typeof e?e:r,s[1]=p;for(var i=2;i<l;i++)s[i]=n[i];return a.createElement.apply(null,s)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8156:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>l,metadata:()=>p,toc:()=>i});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u624b\u52a8\u5347\u7ea7",weight:10},s=void 0,p={unversionedId:"upgrades/manual",id:"upgrades/manual",title:"\u624b\u52a8\u5347\u7ea7",description:"\u4f60\u53ef\u4ee5\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u5b89\u88c5\u6240\u9700\u7248\u672c\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/manual.md",sourceDirName:"upgrades",slug:"/upgrades/manual",permalink:"/zh/upgrades/manual",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u624b\u52a8\u5347\u7ea7",weight:10},sidebar:"mySidebar",previous:{title:"\u505c\u6b62 K3s",permalink:"/zh/upgrades/killall"},next:{title:"\u81ea\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/automated"}},o={},i=[{value:"\u7248\u672c Channels",id:"\u7248\u672c-channels",level:3},{value:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s",id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7-k3s",level:3},{value:"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7 K3s",id:"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7-k3s",level:3},{value:"\u91cd\u542f K3s",id:"\u91cd\u542f-k3s",level:3}],u={toc:i};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u5b89\u88c5\u6240\u9700\u7248\u672c\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\u5347\u7ea7\u65f6\u4f1a\u5148\u5347\u7ea7 Server \u8282\u70b9\uff0c\u7136\u540e\u518d\u5347\u7ea7 Agent \u8282\u70b9\u3002")),(0,r.kt)("h3",{id:"\u7248\u672c-channels"},"\u7248\u672c Channels"),(0,r.kt)("p",null,"\u901a\u8fc7\u5b89\u88c5\u811a\u672c\u6216\u4f7f\u7528\u6211\u4eec\u7684",(0,r.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u529f\u80fd\u6267\u884c\u7684\u5347\u7ea7\u53ef\u4ee5\u7ed1\u5b9a\u5230\u4e0d\u540c\u7684\u7248\u672c channels\u3002\u4ee5\u4e0b\u662f\u53ef\u7528\u7684 channels\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Channel"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"stable"),(0,r.kt)("td",{parentName:"tr",align:null},"\uff08\u9ed8\u8ba4\uff09\u751f\u4ea7\u73af\u5883\u5efa\u8bae\u4f7f\u7528\u7a33\u5b9a\u7248\u3002\u8fd9\u4e9b\u7248\u672c\u5df2\u7ecf\u8fc7\u4e00\u6bb5\u65f6\u95f4\u7684\u793e\u533a\u5f3a\u5316\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"latest"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5efa\u8bae\u4f7f\u7528\u6700\u65b0\u7248\u672c\u6765\u8bd5\u7528\u6700\u65b0\u529f\u80fd\u3002\u8fd9\u4e9b\u7248\u672c\u5df2\u7ecf\u8fc7\u4e00\u6bb5\u65f6\u95f4\u7684\u793e\u533a\u5f3a\u5316\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"v1.26\uff08\u793a\u4f8b\uff09"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6bcf\u4e2a Kubernetes \u6b21\u8981\u7248\u672c\u90fd\u6709\u4e00\u4e2a release channel\uff0c\u5305\u62ec EOL \u7684\u7248\u672c\u3002\u8fd9\u4e9b channel \u4f1a\u9009\u62e9\u53ef\u7528\u7684\u6700\u65b0\u8865\u4e01\uff0c\u4e0d\u4e00\u5b9a\u662f\u7a33\u5b9a\u7248\u672c\u3002")))),(0,r.kt)("p",null,"\u6709\u5173\u8be6\u7ec6\u7684\u6700\u65b0 channel \u5217\u8868\uff0c\u4f60\u53ef\u4ee5\u8bbf\u95ee ",(0,r.kt)("a",{parentName:"p",href:"https://update.k3s.io/v1-release/channels"},"k3s channel \u670d\u52a1 API"),"\u3002\u6709\u5173 channel \u5982\u4f55\u5de5\u4f5c\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/channelserver"},"channelserver \u9879\u76ee"),"\u3002"),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"\u5c1d\u8bd5\u5347\u7ea7\u5230 K3s \u65b0\u7248\u672c\u65f6\uff0c",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes \u7248\u672c\u503e\u659c\u7b56\u7565"),"\u9002\u7528\u3002\u786e\u4fdd\u4f60\u7684\u8ba1\u5212\u5728\u5347\u7ea7\u65f6\u4e0d\u4f1a\u8df3\u8fc7\u4e2d\u95f4\u6b21\u8981\u7248\u672c\u3002system-upgrade-controller \u672c\u8eab\u4e0d\u4f1a\u9632\u6b62\u66f4\u6539\u5230\u4e0d\u652f\u6301\u7684 Kubernetes \u7248\u672c\u3002")),(0,r.kt)("h3",{id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7-k3s"},"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s"),(0,r.kt)("p",null,"\u8981\u5347\u7ea7\u65e7\u7248\u672c\u7684 K3s\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u6700\u521d\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u4f7f\u7528\u7684\u76f8\u540c\u914d\u7f6e\u9009\u9879\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u3002"),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5b89\u88c5\u811a\u672c\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," \u53d8\u91cf\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u53d8\u91cf\u548c\u5c3e\u968f\u7684 shell \u53c2\u6570\u6765\u751f\u6210 systemd \u5355\u5143\u548c\u73af\u5883\u6587\u4ef6\u3002\n\u5982\u679c\u4f60\u5728\u6700\u521d\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u8fdb\u884c\u4e86\u914d\u7f6e\uff0c\u4f46\u5728\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u6ca1\u6709\u91cd\u65b0\u8bbe\u7f6e\uff0c\u5219\u539f\u59cb\u503c\u5c06\u4f1a\u4e22\u5931\u3002"),(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6")," \u7684\u5185\u5bb9\u4e0d\u53d7\u5b89\u88c5\u811a\u672c\u7ba1\u7406\u3002\n\u8981\u8ba9\u4f60\u7684\u914d\u7f6e\u72ec\u7acb\u4e8e\u5b89\u88c5\u811a\u672c\uff0c\u8bf7\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u800c\u4e0d\u662f\u4f20\u9012\u73af\u5883\u53d8\u91cf\u6216\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u53c2\u6570\u3002")),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u5347\u7ea7\u5230\u5f53\u524d\u7684\u7a33\u5b9a\u7248\u672c\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"\u5982\u679c\u60f3\u5347\u7ea7\u5230\u7279\u5b9a channel\uff08\u5982 latest\uff09\u4e2d\u7684\u66f4\u65b0\u7248\u672c\uff0c\u4f60\u53ef\u4ee5\u6307\u5b9a channel\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"\u5982\u679c\u8981\u5347\u7ea7\u5230\u7279\u5b9a\u7248\u672c\uff0c\u53ef\u4ee5\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("h3",{id:"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7-k3s"},"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7 K3s"),(0,r.kt)("p",null,"\u6216\u8005\u624b\u52a8\u5347\u7ea7 K3s\uff1a"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\u4ece ",(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," \u9875\u9762\u4e0b\u8f7d\u6240\u9700\u7248\u672c\u7684 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6"),(0,r.kt)("li",{parentName:"ol"},"\u5c06\u4e0b\u8f7d\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u590d\u5236\u5230 ",(0,r.kt)("inlineCode",{parentName:"li"},"/usr/local/bin/k3s"),"\uff08\u6216\u4f60\u60f3\u8981\u7684\u4f4d\u7f6e\uff09"),(0,r.kt)("li",{parentName:"ol"},"\u505c\u6b62\u65e7\u7684 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6"),(0,r.kt)("li",{parentName:"ol"},"\u542f\u52a8\u65b0\u7684 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6")),(0,r.kt)("h3",{id:"\u91cd\u542f-k3s"},"\u91cd\u542f K3s"),(0,r.kt)("p",null,"systemd \u548c OpenRC \u7684\u5b89\u88c5\u811a\u672c\u652f\u6301\u91cd\u542f K3s\u3002"),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"systemd")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Server\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s\n")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Agent\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s-agent\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"OpenRC")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Server\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s restart\n")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Agent\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s-agent restart\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[992],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>k});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function s(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)n=l[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var o=a.createContext({}),i=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):s(s({},t),e)),n},u=function(e){var t=i(e.components);return a.createElement(o.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},m=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,l=e.originalType,o=e.parentName,u=p(e,["components","mdxType","originalType","parentName"]),m=i(n),k=r,d=m["".concat(o,".").concat(k)]||m[k]||c[k]||l;return n?a.createElement(d,s(s({ref:t},u),{},{components:n})):a.createElement(d,s({ref:t},u))}));function k(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var l=n.length,s=new Array(l);s[0]=m;var p={};for(var o in t)hasOwnProperty.call(t,o)&&(p[o]=t[o]);p.originalType=e,p.mdxType="string"==typeof e?e:r,s[1]=p;for(var i=2;i<l;i++)s[i]=n[i];return a.createElement.apply(null,s)}return a.createElement.apply(null,n)}m.displayName="MDXCreateElement"},8156:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>s,default:()=>c,frontMatter:()=>l,metadata:()=>p,toc:()=>i});var a=n(3117),r=(n(7294),n(3905));const l={title:"\u624b\u52a8\u5347\u7ea7",weight:10},s=void 0,p={unversionedId:"upgrades/manual",id:"upgrades/manual",title:"\u624b\u52a8\u5347\u7ea7",description:"\u4f60\u53ef\u4ee5\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u5b89\u88c5\u6240\u9700\u7248\u672c\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/manual.md",sourceDirName:"upgrades",slug:"/upgrades/manual",permalink:"/zh/upgrades/manual",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u624b\u52a8\u5347\u7ea7",weight:10},sidebar:"mySidebar",previous:{title:"\u505c\u6b62 K3s",permalink:"/zh/upgrades/killall"},next:{title:"\u81ea\u52a8\u5347\u7ea7",permalink:"/zh/upgrades/automated"}},o={},i=[{value:"\u7248\u672c Channels",id:"\u7248\u672c-channels",level:3},{value:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s",id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7-k3s",level:3},{value:"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7 K3s",id:"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7-k3s",level:3},{value:"\u91cd\u542f K3s",id:"\u91cd\u542f-k3s",level:3}],u={toc:i};function c(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s\uff0c\u4e5f\u53ef\u4ee5\u624b\u52a8\u5b89\u88c5\u6240\u9700\u7248\u672c\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u3002"),(0,r.kt)("admonition",{type:"note"},(0,r.kt)("p",{parentName:"admonition"},"\u5347\u7ea7\u65f6\u4f1a\u5148\u5347\u7ea7 Server \u8282\u70b9\uff0c\u7136\u540e\u518d\u5347\u7ea7 Agent \u8282\u70b9\u3002")),(0,r.kt)("h3",{id:"\u7248\u672c-channels"},"\u7248\u672c Channels"),(0,r.kt)("p",null,"\u901a\u8fc7\u5b89\u88c5\u811a\u672c\u6216\u4f7f\u7528\u6211\u4eec\u7684",(0,r.kt)("a",{parentName:"p",href:"/zh/upgrades/automated"},"\u81ea\u52a8\u5347\u7ea7"),"\u529f\u80fd\u6267\u884c\u7684\u5347\u7ea7\u53ef\u4ee5\u7ed1\u5b9a\u5230\u4e0d\u540c\u7684\u7248\u672c channels\u3002\u4ee5\u4e0b\u662f\u53ef\u7528\u7684 channels\uff1a"),(0,r.kt)("table",null,(0,r.kt)("thead",{parentName:"table"},(0,r.kt)("tr",{parentName:"thead"},(0,r.kt)("th",{parentName:"tr",align:null},"Channel"),(0,r.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,r.kt)("tbody",{parentName:"table"},(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"stable"),(0,r.kt)("td",{parentName:"tr",align:null},"\uff08\u9ed8\u8ba4\uff09\u751f\u4ea7\u73af\u5883\u5efa\u8bae\u4f7f\u7528\u7a33\u5b9a\u7248\u3002\u8fd9\u4e9b\u7248\u672c\u5df2\u7ecf\u8fc7\u4e00\u6bb5\u65f6\u95f4\u7684\u793e\u533a\u5f3a\u5316\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"latest"),(0,r.kt)("td",{parentName:"tr",align:null},"\u5efa\u8bae\u4f7f\u7528\u6700\u65b0\u7248\u672c\u6765\u8bd5\u7528\u6700\u65b0\u529f\u80fd\u3002\u8fd9\u4e9b\u7248\u672c\u5df2\u7ecf\u8fc7\u4e00\u6bb5\u65f6\u95f4\u7684\u793e\u533a\u5f3a\u5316\u3002")),(0,r.kt)("tr",{parentName:"tbody"},(0,r.kt)("td",{parentName:"tr",align:null},"v1.26\uff08\u793a\u4f8b\uff09"),(0,r.kt)("td",{parentName:"tr",align:null},"\u6bcf\u4e2a Kubernetes \u6b21\u8981\u7248\u672c\u90fd\u6709\u4e00\u4e2a release channel\uff0c\u5305\u62ec EOL \u7684\u7248\u672c\u3002\u8fd9\u4e9b channel \u4f1a\u9009\u62e9\u53ef\u7528\u7684\u6700\u65b0\u8865\u4e01\uff0c\u4e0d\u4e00\u5b9a\u662f\u7a33\u5b9a\u7248\u672c\u3002")))),(0,r.kt)("p",null,"\u6709\u5173\u8be6\u7ec6\u7684\u6700\u65b0 channel \u5217\u8868\uff0c\u4f60\u53ef\u4ee5\u8bbf\u95ee ",(0,r.kt)("a",{parentName:"p",href:"https://update.k3s.io/v1-release/channels"},"k3s channel \u670d\u52a1 API"),"\u3002\u6709\u5173 channel \u5982\u4f55\u5de5\u4f5c\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/rancher/channelserver"},"channelserver \u9879\u76ee"),"\u3002"),(0,r.kt)("admonition",{type:"tip"},(0,r.kt)("p",{parentName:"admonition"},"\u5c1d\u8bd5\u5347\u7ea7\u5230 K3s \u65b0\u7248\u672c\u65f6\uff0c",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes \u7248\u672c\u503e\u659c\u7b56\u7565"),"\u9002\u7528\u3002\u786e\u4fdd\u4f60\u7684\u8ba1\u5212\u5728\u5347\u7ea7\u65f6\u4e0d\u4f1a\u8df3\u8fc7\u4e2d\u95f4\u6b21\u8981\u7248\u672c\u3002system-upgrade-controller \u672c\u8eab\u4e0d\u4f1a\u9632\u6b62\u66f4\u6539\u5230\u4e0d\u652f\u6301\u7684 Kubernetes \u7248\u672c\u3002")),(0,r.kt)("h3",{id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7-k3s"},"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u5347\u7ea7 K3s"),(0,r.kt)("p",null,"\u8981\u5347\u7ea7\u65e7\u7248\u672c\u7684 K3s\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u6700\u521d\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u4f7f\u7528\u7684\u76f8\u540c\u914d\u7f6e\u9009\u9879\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u3002"),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5b89\u88c5\u811a\u672c\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," \u53d8\u91cf\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u53d8\u91cf\u548c\u5c3e\u968f\u7684 shell \u53c2\u6570\u6765\u751f\u6210 systemd \u5355\u5143\u548c\u73af\u5883\u6587\u4ef6\u3002\n\u5982\u679c\u4f60\u5728\u6700\u521d\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u8fdb\u884c\u4e86\u914d\u7f6e\uff0c\u4f46\u5728\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u6ca1\u6709\u91cd\u65b0\u8bbe\u7f6e\uff0c\u5219\u539f\u59cb\u503c\u5c06\u4f1a\u4e22\u5931\u3002"),(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6")," \u7684\u5185\u5bb9\u4e0d\u53d7\u5b89\u88c5\u811a\u672c\u7ba1\u7406\u3002\n\u8981\u8ba9\u4f60\u7684\u914d\u7f6e\u72ec\u7acb\u4e8e\u5b89\u88c5\u811a\u672c\uff0c\u8bf7\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u800c\u4e0d\u662f\u4f20\u9012\u73af\u5883\u53d8\u91cf\u6216\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u53c2\u6570\u3002")),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u5347\u7ea7\u5230\u5f53\u524d\u7684\u7a33\u5b9a\u7248\u672c\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"\u5982\u679c\u60f3\u5347\u7ea7\u5230\u7279\u5b9a channel\uff08\u5982 latest\uff09\u4e2d\u7684\u66f4\u65b0\u7248\u672c\uff0c\u4f60\u53ef\u4ee5\u6307\u5b9a channel\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("p",null,"\u5982\u679c\u8981\u5347\u7ea7\u5230\u7279\u5b9a\u7248\u672c\uff0c\u53ef\u4ee5\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>\n")),(0,r.kt)("h3",{id:"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7-k3s"},"\u4f7f\u7528\u4e8c\u8fdb\u5236\u6587\u4ef6\u624b\u52a8\u5347\u7ea7 K3s"),(0,r.kt)("p",null,"\u6216\u8005\u624b\u52a8\u5347\u7ea7 K3s\uff1a"),(0,r.kt)("ol",null,(0,r.kt)("li",{parentName:"ol"},"\u4ece ",(0,r.kt)("a",{parentName:"li",href:"https://github.com/k3s-io/k3s/releases"},"releases")," \u9875\u9762\u4e0b\u8f7d\u6240\u9700\u7248\u672c\u7684 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6"),(0,r.kt)("li",{parentName:"ol"},"\u5c06\u4e0b\u8f7d\u7684\u4e8c\u8fdb\u5236\u6587\u4ef6\u590d\u5236\u5230 ",(0,r.kt)("inlineCode",{parentName:"li"},"/usr/local/bin/k3s"),"\uff08\u6216\u4f60\u60f3\u8981\u7684\u4f4d\u7f6e\uff09"),(0,r.kt)("li",{parentName:"ol"},"\u505c\u6b62\u65e7\u7684 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6"),(0,r.kt)("li",{parentName:"ol"},"\u542f\u52a8\u65b0\u7684 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6")),(0,r.kt)("h3",{id:"\u91cd\u542f-k3s"},"\u91cd\u542f K3s"),(0,r.kt)("p",null,"systemd \u548c OpenRC \u7684\u5b89\u88c5\u811a\u672c\u652f\u6301\u91cd\u542f K3s\u3002"),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"systemd")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Server\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s\n")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Agent\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo systemctl restart k3s-agent\n")),(0,r.kt)("p",null,(0,r.kt)("strong",{parentName:"p"},"OpenRC")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Server\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s restart\n")),(0,r.kt)("p",null,"\u624b\u52a8\u91cd\u542f Agent\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-sh"},"sudo service k3s-agent restart\n")))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/ac5690a0.d0c0e6b8.js b/zh/assets/js/ac5690a0.8ab45095.js
similarity index 99%
rename from zh/assets/js/ac5690a0.d0c0e6b8.js
rename to zh/assets/js/ac5690a0.8ab45095.js
index ee92207c0..c8bed4cb1 100644
--- a/zh/assets/js/ac5690a0.d0c0e6b8.js
+++ b/zh/assets/js/ac5690a0.8ab45095.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9971],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var o=r.createContext({}),p=function(e){var t=r.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},u=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},c=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,o=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),c=p(n),d=a,m=c["".concat(o,".").concat(d)]||c[d]||k[d]||s;return n?r.createElement(m,l(l({ref:t},u),{},{components:n})):r.createElement(m,l({ref:t},u))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,l=new Array(s);l[0]=c;var i={};for(var o in t)hasOwnProperty.call(t,o)&&(i[o]=t[o]);i.originalType=e,i.mdxType="string"==typeof e?e:a,l[1]=i;for(var p=2;p<s;p++)l[p]=n[p];return r.createElement.apply(null,l)}return r.createElement.apply(null,n)}c.displayName="MDXCreateElement"},8777:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>l,default:()=>k,frontMatter:()=>s,metadata:()=>i,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const s={title:"\u5e38\u89c1\u95ee\u9898",weight:60},l=void 0,i={unversionedId:"faq/faq",id:"faq/faq",title:"\u5e38\u89c1\u95ee\u9898",description:"\u672c\u6587\u4f1a\u5b9a\u671f\u66f4\u65b0\uff0c\u7528\u4e8e\u89e3\u7b54\u7528\u6237\u5e38\u89c1\u7684 K3s \u76f8\u5173\u95ee\u9898\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/faq/faq.md",sourceDirName:"faq",slug:"/faq/",permalink:"/zh/faq/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5e38\u89c1\u95ee\u9898",weight:60},sidebar:"mySidebar",previous:{title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",permalink:"/zh/advanced/"},next:{title:"CLI \u5de5\u5177",permalink:"/zh/cli/"}},o={},p=[{value:"K3s \u662f Kubernetes \u7684\u66ff\u4ee3\u54c1\u5417\uff1f",id:"k3s-\u662f-kubernetes-\u7684\u66ff\u4ee3\u54c1\u5417",level:3},{value:"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684 Ingress \u4ee3\u66ff Traefik\uff1f",id:"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684-ingress-\u4ee3\u66ff-traefik",level:3},{value:"K3s \u652f\u6301 Windows \u5417\uff1f",id:"k3s-\u652f\u6301-windows-\u5417",level:3},{value:"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa\uff1f",id:"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa",level:3},{value:"K3s \u65e5\u5fd7\u5728\u54ea\u91cc\uff1f",id:"k3s-\u65e5\u5fd7\u5728\u54ea\u91cc",level:3},{value:"\u53ef\u4ee5\u5728 Docker \u4e2d\u8fd0\u884c K3s \u5417\uff1f",id:"\u53ef\u4ee5\u5728-docker-\u4e2d\u8fd0\u884c-k3s-\u5417",level:3},{value:"K3s Server \u548c Agent Token \u6709\u4ec0\u4e48\u533a\u522b\uff1f",id:"k3s-server-\u548c-agent-token-\u6709\u4ec0\u4e48\u533a\u522b",level:3},{value:"\u4e0d\u540c\u7248\u672c\u7684 K3s \u517c\u5bb9\u6027\u5982\u4f55\uff1f",id:"\u4e0d\u540c\u7248\u672c\u7684-k3s-\u517c\u5bb9\u6027\u5982\u4f55",level:3},{value:"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\uff0c\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9\uff1f",id:"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9",level:3}],u={toc:p};function k(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4f1a\u5b9a\u671f\u66f4\u65b0\uff0c\u7528\u4e8e\u89e3\u7b54\u7528\u6237\u5e38\u89c1\u7684 K3s \u76f8\u5173\u95ee\u9898\u3002"),(0,a.kt)("h3",{id:"k3s-\u662f-kubernetes-\u7684\u66ff\u4ee3\u54c1\u5417"},"K3s \u662f Kubernetes \u7684\u66ff\u4ee3\u54c1\u5417\uff1f"),(0,a.kt)("p",null,"K3s \u662f\u7ecf\u8fc7 CNCF \u8ba4\u8bc1\u7684 Kubernetes \u53d1\u884c\u7248\uff0c\u53ef\u4ee5\u80dc\u4efb\u6807\u51c6 Kubernetes \u96c6\u7fa4\u7684\u6240\u6709\u5de5\u4f5c\u3002\u5b83\u53ea\u662f\u4e00\u4e2a\u66f4\u8f7b\u91cf\u7ea7\u7684\u7248\u672c\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/"},"\u4ecb\u7ecd\u6587\u6863"),"\u3002"),(0,a.kt)("h3",{id:"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684-ingress-\u4ee3\u66ff-traefik"},"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684 Ingress \u4ee3\u66ff Traefik\uff1f"),(0,a.kt)("p",null,"\u4f60\u53ea\u9700\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \u542f\u52a8 K3s Server\uff0c\u7136\u540e\u90e8\u7f72\u4f60\u7684 Ingress \u5373\u53ef\u3002"),(0,a.kt)("h3",{id:"k3s-\u652f\u6301-windows-\u5417"},"K3s \u652f\u6301 Windows \u5417\uff1f"),(0,a.kt)("p",null,"\u76ee\u524d K3s \u672c\u8eab\u4e0d\u652f\u6301 Windows\uff0c\u4f46\u6211\u4eec\u5bf9\u6b64\u60f3\u6cd5\u6301\u5f00\u653e\u6001\u5ea6\u3002"),(0,a.kt)("h3",{id:"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa"},"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa\uff1f"),(0,a.kt)("p",null,"\u8bf7\u53c2\u8003 K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/BUILDING.md"},"BUILDING.md")," \u7684\u8bf4\u660e\u3002"),(0,a.kt)("h3",{id:"k3s-\u65e5\u5fd7\u5728\u54ea\u91cc"},"K3s \u65e5\u5fd7\u5728\u54ea\u91cc\uff1f"),(0,a.kt)("p",null,"K3s \u65e5\u5fd7\u7684\u4f4d\u7f6e\u5c06\u6839\u636e\u4f60\u8fd0\u884c K3s \u7684\u65b9\u5f0f\u548c\u8282\u70b9\u7684\u64cd\u4f5c\u7cfb\u7edf\u800c\u6709\u6240\u4e0d\u540c\u3002"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4ece\u547d\u4ee4\u884c\u8fd0\u884c\u65f6\uff0c\u65e5\u5fd7\u5c06\u53d1\u9001\u5230 stdout \u548c stderr\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u4f7f\u7528 openrc \u8fd0\u884c\u65f6\uff0c\u5c06\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log")," \u4e2d\u521b\u5efa\u65e5\u5fd7\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u4f7f\u7528 systemd \u8fd0\u884c\u65f6\uff0c\u65e5\u5fd7\u5c06\u53d1\u9001\u5230 Journald \u5e76\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s")," \u67e5\u770b\u200b\u200b\u3002"),(0,a.kt)("li",{parentName:"ul"},"Pod \u65e5\u5fd7\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/pods")," \u4e2d\u3002"),(0,a.kt)("li",{parentName:"ul"},"Containerd \u65e5\u5fd7\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/containerd/containerd.log")," \u4e2d\u3002")),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u5728\u542f\u52a8 K3s \u65f6\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--debug")," \u6807\u5fd7\uff08\u6216\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"debug: true"),"\uff09\u6765\u751f\u6210\u66f4\u8be6\u7ec6\u7684\u65e5\u5fd7\u3002"),(0,a.kt)("p",null,"Kubernetes \u4f7f\u7528\u540d\u4e3a ",(0,a.kt)("inlineCode",{parentName:"p"},"klog")," \u7684\u65e5\u5fd7\u7ba1\u7406\u6846\u67b6\uff0c\u8be5\u6846\u67b6\u5bf9\u8fdb\u7a0b\u4e2d\u7684\u6240\u6709\u7ec4\u4ef6\u4f7f\u7528\u5355\u4e00\u7684\u65e5\u5fd7\u7ba1\u7406\u914d\u7f6e\u3002\n\u7531\u4e8e K3s \u5728\u5355\u4e2a\u8fdb\u7a0b\u4e2d\u8fd0\u884c\u6240\u6709 Kubernetes \u7ec4\u4ef6\uff0c\u56e0\u6b64\u65e0\u6cd5\u4e3a\u5355\u4e2a Kubernetes \u7ec4\u4ef6\u914d\u7f6e\u4e0d\u540c\u7684\u65e5\u5fd7\u7ea7\u522b\u6216\u76ee\u7684\u4f4d\u7f6e\u3002\n\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"-v=<level>")," \u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"--vmodule=<module>=<level>")," \u7ec4\u4ef6\u53c2\u6570\u7684\u6548\u679c\u53ef\u80fd\u4e0d\u5982\u9884\u671f\u3002"),(0,a.kt)("p",null,"\u8981\u83b7\u5f97\u66f4\u591a\u65e5\u5fd7\u9009\u9879\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%85%B6%E4%BB%96%E6%97%A5%E5%BF%97%E6%9D%A5%E6%BA%90"},"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90"),"\u3002"),(0,a.kt)("h3",{id:"\u53ef\u4ee5\u5728-docker-\u4e2d\u8fd0\u884c-k3s-\u5417"},"\u53ef\u4ee5\u5728 Docker \u4e2d\u8fd0\u884c K3s \u5417\uff1f"),(0,a.kt)("p",null,"\u662f\u7684\uff0c\u6709\u51e0\u79cd\u65b9\u6cd5\u53ef\u4ee5\u8ba9\u4f60\u5728 Docker \u4e2d\u8fd0\u884c K3s\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%9C%A8-docker-%E4%B8%AD%E8%BF%90%E8%A1%8C-k3s"},"\u9ad8\u7ea7\u9009\u9879"),"\u3002"),(0,a.kt)("h3",{id:"k3s-server-\u548c-agent-token-\u6709\u4ec0\u4e48\u533a\u522b"},"K3s Server \u548c Agent Token \u6709\u4ec0\u4e48\u533a\u522b\uff1f"),(0,a.kt)("p",null,"\u6709\u5173\u7ba1\u7406 K3s join token \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,a.kt)("h3",{id:"\u4e0d\u540c\u7248\u672c\u7684-k3s-\u517c\u5bb9\u6027\u5982\u4f55"},"\u4e0d\u540c\u7248\u672c\u7684 K3s \u517c\u5bb9\u6027\u5982\u4f55\uff1f"),(0,a.kt)("p",null,"\u901a\u5e38\uff0c",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes \u7248\u672c\u503e\u659c\u7b56\u7565"),"\u9002\u7528\u3002"),(0,a.kt)("p",null,"\u7b80\u800c\u8a00\u4e4b\uff0cServer \u7248\u672c\u53ef\u4ee5\u6bd4 Agnet \u65b0\uff0c\u4f46 Agent \u4e0d\u80fd\u6bd4 Server \u65b0\u3002"),(0,a.kt)("h3",{id:"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9"},"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\uff0c\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9\uff1f"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u5728\u90e8\u7f72 K3s \u65f6\u9047\u5230\u95ee\u9898\uff0c\u4f60\u5e94\u8be5\uff1a"),(0,a.kt)("p",null,"1) \u68c0\u67e5",(0,a.kt)("a",{parentName:"p",href:"/zh/known-issues/"},"\u5df2\u77e5\u95ee\u9898"),"\u9875\u9762\u3002"),(0,a.kt)("p",null,"2) \u68c0\u67e5\u4f60\u662f\u5426\u5df2\u89e3\u51b3",(0,a.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),"\u3002\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s check-config")," \u5e76\u786e\u4fdd\u5b83\u901a\u8fc7\u3002"),(0,a.kt)("p",null,"3) \u5728 K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues"},"Issues")," \u548c ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/discussions"},"Discussions")," \u4e2d\u641c\u7d22\u5339\u914d\u7684\u95ee\u9898\u3002"),(0,a.kt)("p",null,"4) \u52a0\u5165 ",(0,a.kt)("a",{parentName:"p",href:"https://slack.rancher.io/"},"Rancher Slack")," K3s \u9891\u9053\u4ee5\u83b7\u5f97\u5e2e\u52a9\u3002"),(0,a.kt)("p",null,"5) \u5728 K3s Github \u4e0a\u63d0\u4ea4",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/new/choose"},"\u65b0 issue"),"\uff0c\u4f60\u53ef\u4ee5\u63cf\u8ff0\u4f60\u7684\u8bbe\u7f6e\u548c\u9047\u5230\u7684\u95ee\u9898\u3002"))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9971],{3905:(e,t,n)=>{n.d(t,{Zo:()=>u,kt:()=>d});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},s=Object.keys(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(r=0;r<s.length;r++)n=s[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var o=r.createContext({}),p=function(e){var t=r.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},u=function(e){var t=p(e.components);return r.createElement(o.Provider,{value:t},e.children)},k={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},c=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,s=e.originalType,o=e.parentName,u=i(e,["components","mdxType","originalType","parentName"]),c=p(n),d=a,m=c["".concat(o,".").concat(d)]||c[d]||k[d]||s;return n?r.createElement(m,l(l({ref:t},u),{},{components:n})):r.createElement(m,l({ref:t},u))}));function d(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var s=n.length,l=new Array(s);l[0]=c;var i={};for(var o in t)hasOwnProperty.call(t,o)&&(i[o]=t[o]);i.originalType=e,i.mdxType="string"==typeof e?e:a,l[1]=i;for(var p=2;p<s;p++)l[p]=n[p];return r.createElement.apply(null,l)}return r.createElement.apply(null,n)}c.displayName="MDXCreateElement"},8777:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>l,default:()=>k,frontMatter:()=>s,metadata:()=>i,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const s={title:"\u5e38\u89c1\u95ee\u9898",weight:60},l=void 0,i={unversionedId:"faq/faq",id:"faq/faq",title:"\u5e38\u89c1\u95ee\u9898",description:"\u672c\u6587\u4f1a\u5b9a\u671f\u66f4\u65b0\uff0c\u7528\u4e8e\u89e3\u7b54\u7528\u6237\u5e38\u89c1\u7684 K3s \u76f8\u5173\u95ee\u9898\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/faq/faq.md",sourceDirName:"faq",slug:"/faq/",permalink:"/zh/faq/",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5e38\u89c1\u95ee\u9898",weight:60},sidebar:"mySidebar",previous:{title:"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e",permalink:"/zh/advanced/"},next:{title:"CLI \u5de5\u5177",permalink:"/zh/cli/"}},o={},p=[{value:"K3s \u662f Kubernetes \u7684\u66ff\u4ee3\u54c1\u5417\uff1f",id:"k3s-\u662f-kubernetes-\u7684\u66ff\u4ee3\u54c1\u5417",level:3},{value:"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684 Ingress \u4ee3\u66ff Traefik\uff1f",id:"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684-ingress-\u4ee3\u66ff-traefik",level:3},{value:"K3s \u652f\u6301 Windows \u5417\uff1f",id:"k3s-\u652f\u6301-windows-\u5417",level:3},{value:"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa\uff1f",id:"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa",level:3},{value:"K3s \u65e5\u5fd7\u5728\u54ea\u91cc\uff1f",id:"k3s-\u65e5\u5fd7\u5728\u54ea\u91cc",level:3},{value:"\u53ef\u4ee5\u5728 Docker \u4e2d\u8fd0\u884c K3s \u5417\uff1f",id:"\u53ef\u4ee5\u5728-docker-\u4e2d\u8fd0\u884c-k3s-\u5417",level:3},{value:"K3s Server \u548c Agent Token \u6709\u4ec0\u4e48\u533a\u522b\uff1f",id:"k3s-server-\u548c-agent-token-\u6709\u4ec0\u4e48\u533a\u522b",level:3},{value:"\u4e0d\u540c\u7248\u672c\u7684 K3s \u517c\u5bb9\u6027\u5982\u4f55\uff1f",id:"\u4e0d\u540c\u7248\u672c\u7684-k3s-\u517c\u5bb9\u6027\u5982\u4f55",level:3},{value:"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\uff0c\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9\uff1f",id:"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9",level:3}],u={toc:p};function k(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},u,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4f1a\u5b9a\u671f\u66f4\u65b0\uff0c\u7528\u4e8e\u89e3\u7b54\u7528\u6237\u5e38\u89c1\u7684 K3s \u76f8\u5173\u95ee\u9898\u3002"),(0,a.kt)("h3",{id:"k3s-\u662f-kubernetes-\u7684\u66ff\u4ee3\u54c1\u5417"},"K3s \u662f Kubernetes \u7684\u66ff\u4ee3\u54c1\u5417\uff1f"),(0,a.kt)("p",null,"K3s \u662f\u7ecf\u8fc7 CNCF \u8ba4\u8bc1\u7684 Kubernetes \u53d1\u884c\u7248\uff0c\u53ef\u4ee5\u80dc\u4efb\u6807\u51c6 Kubernetes \u96c6\u7fa4\u7684\u6240\u6709\u5de5\u4f5c\u3002\u5b83\u53ea\u662f\u4e00\u4e2a\u66f4\u8f7b\u91cf\u7ea7\u7684\u7248\u672c\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/"},"\u4ecb\u7ecd\u6587\u6863"),"\u3002"),(0,a.kt)("h3",{id:"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684-ingress-\u4ee3\u66ff-traefik"},"\u5982\u4f55\u4f7f\u7528\u81ea\u5df1\u7684 Ingress \u4ee3\u66ff Traefik\uff1f"),(0,a.kt)("p",null,"\u4f60\u53ea\u9700\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \u542f\u52a8 K3s Server\uff0c\u7136\u540e\u90e8\u7f72\u4f60\u7684 Ingress \u5373\u53ef\u3002"),(0,a.kt)("h3",{id:"k3s-\u652f\u6301-windows-\u5417"},"K3s \u652f\u6301 Windows \u5417\uff1f"),(0,a.kt)("p",null,"\u76ee\u524d K3s \u672c\u8eab\u4e0d\u652f\u6301 Windows\uff0c\u4f46\u6211\u4eec\u5bf9\u6b64\u60f3\u6cd5\u6301\u5f00\u653e\u6001\u5ea6\u3002"),(0,a.kt)("h3",{id:"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa"},"\u5982\u4f55\u901a\u8fc7\u6e90\u7801\u6784\u5efa\uff1f"),(0,a.kt)("p",null,"\u8bf7\u53c2\u8003 K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/blob/master/BUILDING.md"},"BUILDING.md")," \u7684\u8bf4\u660e\u3002"),(0,a.kt)("h3",{id:"k3s-\u65e5\u5fd7\u5728\u54ea\u91cc"},"K3s \u65e5\u5fd7\u5728\u54ea\u91cc\uff1f"),(0,a.kt)("p",null,"K3s \u65e5\u5fd7\u7684\u4f4d\u7f6e\u5c06\u6839\u636e\u4f60\u8fd0\u884c K3s \u7684\u65b9\u5f0f\u548c\u8282\u70b9\u7684\u64cd\u4f5c\u7cfb\u7edf\u800c\u6709\u6240\u4e0d\u540c\u3002"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4ece\u547d\u4ee4\u884c\u8fd0\u884c\u65f6\uff0c\u65e5\u5fd7\u5c06\u53d1\u9001\u5230 stdout \u548c stderr\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u4f7f\u7528 openrc \u8fd0\u884c\u65f6\uff0c\u5c06\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/k3s.log")," \u4e2d\u521b\u5efa\u65e5\u5fd7\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u4f7f\u7528 systemd \u8fd0\u884c\u65f6\uff0c\u65e5\u5fd7\u5c06\u53d1\u9001\u5230 Journald \u5e76\u53ef\u4ee5\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"li"},"journalctl -u k3s")," \u67e5\u770b\u200b\u200b\u3002"),(0,a.kt)("li",{parentName:"ul"},"Pod \u65e5\u5fd7\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/log/pods")," \u4e2d\u3002"),(0,a.kt)("li",{parentName:"ul"},"Containerd \u65e5\u5fd7\u5728 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/agent/containerd/containerd.log")," \u4e2d\u3002")),(0,a.kt)("p",null,"\u4f60\u53ef\u4ee5\u5728\u542f\u52a8 K3s \u65f6\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--debug")," \u6807\u5fd7\uff08\u6216\u914d\u7f6e\u6587\u4ef6\u4e2d\u7684 ",(0,a.kt)("inlineCode",{parentName:"p"},"debug: true"),"\uff09\u6765\u751f\u6210\u66f4\u8be6\u7ec6\u7684\u65e5\u5fd7\u3002"),(0,a.kt)("p",null,"Kubernetes \u4f7f\u7528\u540d\u4e3a ",(0,a.kt)("inlineCode",{parentName:"p"},"klog")," \u7684\u65e5\u5fd7\u7ba1\u7406\u6846\u67b6\uff0c\u8be5\u6846\u67b6\u5bf9\u8fdb\u7a0b\u4e2d\u7684\u6240\u6709\u7ec4\u4ef6\u4f7f\u7528\u5355\u4e00\u7684\u65e5\u5fd7\u7ba1\u7406\u914d\u7f6e\u3002\n\u7531\u4e8e K3s \u5728\u5355\u4e2a\u8fdb\u7a0b\u4e2d\u8fd0\u884c\u6240\u6709 Kubernetes \u7ec4\u4ef6\uff0c\u56e0\u6b64\u65e0\u6cd5\u4e3a\u5355\u4e2a Kubernetes \u7ec4\u4ef6\u914d\u7f6e\u4e0d\u540c\u7684\u65e5\u5fd7\u7ea7\u522b\u6216\u76ee\u7684\u4f4d\u7f6e\u3002\n\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"-v=<level>")," \u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"--vmodule=<module>=<level>")," \u7ec4\u4ef6\u53c2\u6570\u7684\u6548\u679c\u53ef\u80fd\u4e0d\u5982\u9884\u671f\u3002"),(0,a.kt)("p",null,"\u8981\u83b7\u5f97\u66f4\u591a\u65e5\u5fd7\u9009\u9879\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%85%B6%E4%BB%96%E6%97%A5%E5%BF%97%E6%9D%A5%E6%BA%90"},"\u5176\u4ed6\u65e5\u5fd7\u6765\u6e90"),"\u3002"),(0,a.kt)("h3",{id:"\u53ef\u4ee5\u5728-docker-\u4e2d\u8fd0\u884c-k3s-\u5417"},"\u53ef\u4ee5\u5728 Docker \u4e2d\u8fd0\u884c K3s \u5417\uff1f"),(0,a.kt)("p",null,"\u662f\u7684\uff0c\u6709\u51e0\u79cd\u65b9\u6cd5\u53ef\u4ee5\u8ba9\u4f60\u5728 Docker \u4e2d\u8fd0\u884c K3s\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%9C%A8-docker-%E4%B8%AD%E8%BF%90%E8%A1%8C-k3s"},"\u9ad8\u7ea7\u9009\u9879"),"\u3002"),(0,a.kt)("h3",{id:"k3s-server-\u548c-agent-token-\u6709\u4ec0\u4e48\u533a\u522b"},"K3s Server \u548c Agent Token \u6709\u4ec0\u4e48\u533a\u522b\uff1f"),(0,a.kt)("p",null,"\u6709\u5173\u7ba1\u7406 K3s join token \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/token"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s token")," \u547d\u4ee4\u6587\u6863"),"\u3002"),(0,a.kt)("h3",{id:"\u4e0d\u540c\u7248\u672c\u7684-k3s-\u517c\u5bb9\u6027\u5982\u4f55"},"\u4e0d\u540c\u7248\u672c\u7684 K3s \u517c\u5bb9\u6027\u5982\u4f55\uff1f"),(0,a.kt)("p",null,"\u901a\u5e38\uff0c",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/setup/release/version-skew-policy/"},"Kubernetes \u7248\u672c\u503e\u659c\u7b56\u7565"),"\u9002\u7528\u3002"),(0,a.kt)("p",null,"\u7b80\u800c\u8a00\u4e4b\uff0cServer \u7248\u672c\u53ef\u4ee5\u6bd4 Agnet \u65b0\uff0c\u4f46 Agent \u4e0d\u80fd\u6bd4 Server \u65b0\u3002"),(0,a.kt)("h3",{id:"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9"},"\u5982\u679c\u6211\u9047\u5230\u95ee\u9898\uff0c\u53ef\u4ee5\u5728\u54ea\u91cc\u83b7\u5f97\u5e2e\u52a9\uff1f"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u5728\u90e8\u7f72 K3s \u65f6\u9047\u5230\u95ee\u9898\uff0c\u4f60\u5e94\u8be5\uff1a"),(0,a.kt)("p",null,"1) \u68c0\u67e5",(0,a.kt)("a",{parentName:"p",href:"/zh/known-issues/"},"\u5df2\u77e5\u95ee\u9898"),"\u9875\u9762\u3002"),(0,a.kt)("p",null,"2) \u68c0\u67e5\u4f60\u662f\u5426\u5df2\u89e3\u51b3",(0,a.kt)("a",{parentName:"p",href:"/zh/advanced/#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87"},"\u5176\u4ed6\u64cd\u4f5c\u7cfb\u7edf\u51c6\u5907"),"\u3002\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s check-config")," \u5e76\u786e\u4fdd\u5b83\u901a\u8fc7\u3002"),(0,a.kt)("p",null,"3) \u5728 K3s ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues"},"Issues")," \u548c ",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/discussions"},"Discussions")," \u4e2d\u641c\u7d22\u5339\u914d\u7684\u95ee\u9898\u3002"),(0,a.kt)("p",null,"4) \u52a0\u5165 ",(0,a.kt)("a",{parentName:"p",href:"https://slack.rancher.io/"},"Rancher Slack")," K3s \u9891\u9053\u4ee5\u83b7\u5f97\u5e2e\u52a9\u3002"),(0,a.kt)("p",null,"5) \u5728 K3s Github \u4e0a\u63d0\u4ea4",(0,a.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/issues/new/choose"},"\u65b0 issue"),"\uff0c\u4f60\u53ef\u4ee5\u63cf\u8ff0\u4f60\u7684\u8bbe\u7f6e\u548c\u9047\u5230\u7684\u95ee\u9898\u3002"))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/b2fd5509.69b69acd.js b/zh/assets/js/b2fd5509.964c0b6a.js
similarity index 98%
rename from zh/assets/js/b2fd5509.69b69acd.js
rename to zh/assets/js/b2fd5509.964c0b6a.js
index 49a3c2446..4a94d7980 100644
--- a/zh/assets/js/b2fd5509.69b69acd.js
+++ b/zh/assets/js/b2fd5509.964c0b6a.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6842],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(r),m=a,k=u["".concat(s,".").concat(m)]||u[m]||d[m]||o;return r?n.createElement(k,i(i({ref:t},c),{},{components:r})):n.createElement(k,i({ref:t},c))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},1320:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>d,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var n=r(3117),a=(r(7294),r(3905));const o={title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",weight:40},i=void 0,l={unversionedId:"datastore/ha-embedded",id:"datastore/ha-embedded",title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",description:"\u5d4c\u5165\u5f0f etcd (HA) \u5728\u901f\u5ea6\u8f83\u6162\u7684\u78c1\u76d8\uff08\u4f8b\u5982\u4f7f\u7528 SD \u5361\u8fd0\u884c\u7684 Raspberry Pi\uff09\u4e0a\u53ef\u80fd\u4f1a\u51fa\u73b0\u6027\u80fd\u95ee\u9898\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",sourceDirName:"datastore",slug:"/datastore/ha-embedded",permalink:"/zh/datastore/ha-embedded",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",weight:40},sidebar:"mySidebar",previous:{title:"\u5907\u4efd\u548c\u6062\u590d",permalink:"/zh/datastore/backup-restore"},next:{title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",permalink:"/zh/datastore/ha"}},s={},p=[{value:"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4",id:"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4",level:2}],c={toc:p};function d(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u5d4c\u5165\u5f0f etcd (HA) \u5728\u901f\u5ea6\u8f83\u6162\u7684\u78c1\u76d8\uff08\u4f8b\u5982\u4f7f\u7528 SD \u5361\u8fd0\u884c\u7684 Raspberry Pi\uff09\u4e0a\u53ef\u80fd\u4f1a\u51fa\u73b0\u6027\u80fd\u95ee\u9898\u3002")),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"HA \u5d4c\u5165\u5f0f etcd \u96c6\u7fa4\u5fc5\u987b\u7531\u5947\u6570\u4e2a Server \u8282\u70b9\u7ec4\u6210\uff0c\u4ee5\u4fbf etcd \u7ef4\u6301 quorum\u3002\u5bf9\u4e8e\u6709 n \u4e2a server \u7684\u96c6\u7fa4\uff0cquorum \u662f (n/2)+1\u3002\u5982\u679c\u96c6\u7fa4\u8282\u70b9\u6570\u91cf\u662f\u5947\u6570\uff0c\u6bcf\u65b0\u589e\u4e00\u4e2a\u8282\u70b9\uff0c\u90fd\u4f1a\u589e\u52a0 quorum \u6240\u9700\u8282\u70b9\u6570\u3002\u867d\u7136\u5c06\u8282\u70b9\u6dfb\u52a0\u5230\u5947\u6570\u8282\u70b9\u6570\u91cf\u7684\u96c6\u7fa4\u589e\u52a0\u4e86\u673a\u5668\uff0c\u770b\u8d77\u6765\u66f4\u597d\uff0c\u4f46\u5176\u5b9e\u96c6\u7fa4\u7684\u5bb9\u9519\u6027\u4f1a\u53d8\u5dee\uff0c\u8fd9\u662f\u56e0\u4e3a\u5b8c\u5168\u76f8\u540c\u6570\u91cf\u7684\u8282\u70b9\u53ef\u80fd\u5931\u8d25\u800c\u4e0d\u4e22\u5931 quorum\uff0c\u4f46\u6709\u66f4\u591a\u7684\u8282\u70b9\u53ef\u80fd\u5931\u8d25\u3002")),(0,a.kt)("p",null,"\u5177\u6709\u5d4c\u5165\u5f0f etcd \u7684 HA K3s \u96c6\u7fa4\u7531\u4ee5\u4e0b\u90e8\u5206\u7ec4\u6210\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e09\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1\uff0c\u4ee5\u53ca\u6258\u7ba1\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a\u96f6\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Agent \u8282\u70b9"),"\uff0c\u7528\u4e8e\u8fd0\u884c\u4f60\u7684\u5e94\u7528\u548c\u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a",(0,a.kt)("strong",{parentName:"li"},"\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"),"\uff0c\u4f9b Agent \u8282\u70b9\u6ce8\u518c\u5230\u96c6\u7fa4")),(0,a.kt)("p",null,"\u9996\u5148\uff0c\u542f\u52a8\u4e00\u4e2a\u5e26\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"cluster-init")," \u6807\u5fd7\u7684 Server \u8282\u70b9\u6765\u542f\u7528\u96c6\u7fa4\u548c\u4e00\u4e2a\u4ee4\u724c\uff0c\u8be5\u4ee4\u724c\u5c06\u4f5c\u4e3a\u5171\u4eab secret\uff0c\u7528\u4e8e\u5c06\u5176\u4ed6 Server \u52a0\u5165\u96c6\u7fa4\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --cluster-init\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --cluster-init\n"))),(0,a.kt)("p",null,"\u542f\u52a8\u7b2c\u4e00\u53f0\u670d\u52a1\u5668\u540e\uff0c\u4f7f\u7528\u5171\u4eab secret  \u5c06\u7b2c\u4e8c\u53f0\u548c\u7b2c\u4e09\u53f0\u670d\u52a1\u5668\u52a0\u5165\u96c6\u7fa4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443\n"))),(0,a.kt)("p",null,"\u68c0\u67e5\u7b2c\u4e8c\u4e2a\u548c\u7b2c\u4e09\u4e2a\u670d\u52a1\u5668\u662f\u5426\u5df2\u52a0\u5165\u96c6\u7fa4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME        STATUS   ROLES                       AGE   VERSION\nserver1     Ready    control-plane,etcd,master   28m   vX.Y.Z\nserver2     Ready    control-plane,etcd,master   13m   vX.Y.Z\nserver3     Ready    control-plane,etcd,master   10m   vX.Y.Z\n")),(0,a.kt)("p",null,"\u73b0\u5728\u4f60\u6709\u4e86\u4e00\u4e2a\u9ad8\u53ef\u7528\u7684 control plane\u3002\u4f60\u53ef\u4ee5\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," \u53c2\u6570\u4e2d\u4f7f\u7528\u4efb\u4f55\u96c6\u7fa4 server\uff0c\u4ece\u800c\u52a0\u5165\u5176\u4ed6 server \u548c agent \u8282\u70b9\u3002\u5c06\u5176\u4ed6 agent \u8282\u70b9\u52a0\u5165\u5230\u96c6\u7fa4\u4e2d\uff0c\u6b65\u9aa4\u4e0e server \u76f8\u540c\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - agent --server https://<ip or hostname of server>:6443\n")),(0,a.kt)("p",null,"\u6709\u51e0\u4e2a\u914d\u7f6e\u6807\u5fd7\u5728\u6240\u6709 Server \u8282\u70b9\u4e2d\u5fc5\u987b\u662f\u76f8\u540c\u7684:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u7f51\u7edc\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--service- cidr")),(0,a.kt)("li",{parentName:"ul"},"\u63a7\u5236\u67d0\u4e9b\u7ec4\u4ef6\u90e8\u7f72\u7684\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," \u548c\u4efb\u4f55\u4f20\u9012\u7ed9 ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")," \u7684\u7ec4\u4ef6"),(0,a.kt)("li",{parentName:"ul"},"\u529f\u80fd\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("h2",{id:"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4"},"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u6709\u4e00\u4e2a\u4f7f\u7528\u9ed8\u8ba4\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5e93\u7684\u73b0\u6709\u96c6\u7fa4\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," \u6807\u5fd7\u91cd\u65b0\u542f\u52a8\u4f60\u7684 K3s server\uff0c\u4ece\u800c\u5c06\u5176\u8f6c\u6362\u4e3a etcd\u3002\u5b8c\u6210\u6b64\u64cd\u4f5c\u540e\uff0c\u4f60\u5c06\u80fd\u591f\u5982\u4e0a\u6240\u8ff0\u6dfb\u52a0\u5176\u4ed6\u5b9e\u4f8b\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u7531\u4e8e\u8282\u70b9\u5df2\u7ecf\u521d\u59cb\u5316\u6216\u52a0\u5165\u4e86\u4e00\u4e2a\u96c6\u7fa4\uff0c\u5bfc\u81f4\u5728\u78c1\u76d8\u4e0a\u53d1\u73b0\u4e00\u4e2a etcd \u6570\u636e\u5b58\u50a8\uff0c\u90a3\u4e48\u6570\u636e\u5b58\u50a8\u53c2\u6570\uff08",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"--server"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"--datastore-endpoint")," \u7b49\uff09\u5c06\u88ab\u5ffd\u7565\u3002"),(0,a.kt)("blockquote",null,(0,a.kt)("p",{parentName:"blockquote"},(0,a.kt)("strong",{parentName:"p"},"\u91cd\u8981\u63d0\u793a"),"\uff1aK3s v1.22.2 \u53ca\u66f4\u9ad8\u7248\u672c\u652f\u6301\u5c06 SQLite \u8fc1\u79fb\u5230 etcd\u3002\u5982\u679c\u4f60\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," \u6dfb\u52a0\u5230\u73b0\u6709 server\uff0c\u65e7\u7248\u672c\u5c06\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u7a7a\u6570\u636e\u5b58\u50a8\u3002")))}d.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[6842],{3905:(e,t,r)=>{r.d(t,{Zo:()=>c,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var s=n.createContext({}),p=function(e){var t=n.useContext(s),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},c=function(e){var t=p(e.components);return n.createElement(s.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},u=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,s=e.parentName,c=l(e,["components","mdxType","originalType","parentName"]),u=p(r),m=a,k=u["".concat(s,".").concat(m)]||u[m]||d[m]||o;return r?n.createElement(k,i(i({ref:t},c),{},{components:r})):n.createElement(k,i({ref:t},c))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=u;var l={};for(var s in t)hasOwnProperty.call(t,s)&&(l[s]=t[s]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var p=2;p<o;p++)i[p]=r[p];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}u.displayName="MDXCreateElement"},1320:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>s,contentTitle:()=>i,default:()=>d,frontMatter:()=>o,metadata:()=>l,toc:()=>p});var n=r(3117),a=(r(7294),r(3905));const o={title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",weight:40},i=void 0,l={unversionedId:"datastore/ha-embedded",id:"datastore/ha-embedded",title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",description:"\u5d4c\u5165\u5f0f etcd (HA) \u5728\u901f\u5ea6\u8f83\u6162\u7684\u78c1\u76d8\uff08\u4f8b\u5982\u4f7f\u7528 SD \u5361\u8fd0\u884c\u7684 Raspberry Pi\uff09\u4e0a\u53ef\u80fd\u4f1a\u51fa\u73b0\u6027\u80fd\u95ee\u9898\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",sourceDirName:"datastore",slug:"/datastore/ha-embedded",permalink:"/zh/datastore/ha-embedded",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",weight:40},sidebar:"mySidebar",previous:{title:"\u5907\u4efd\u548c\u6062\u590d",permalink:"/zh/datastore/backup-restore"},next:{title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",permalink:"/zh/datastore/ha"}},s={},p=[{value:"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4",id:"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4",level:2}],c={toc:p};function d(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},c,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u5d4c\u5165\u5f0f etcd (HA) \u5728\u901f\u5ea6\u8f83\u6162\u7684\u78c1\u76d8\uff08\u4f8b\u5982\u4f7f\u7528 SD \u5361\u8fd0\u884c\u7684 Raspberry Pi\uff09\u4e0a\u53ef\u80fd\u4f1a\u51fa\u73b0\u6027\u80fd\u95ee\u9898\u3002")),(0,a.kt)("admonition",{type:"info"},(0,a.kt)("p",{parentName:"admonition"},"HA \u5d4c\u5165\u5f0f etcd \u96c6\u7fa4\u5fc5\u987b\u7531\u5947\u6570\u4e2a Server \u8282\u70b9\u7ec4\u6210\uff0c\u4ee5\u4fbf etcd \u7ef4\u6301 quorum\u3002\u5bf9\u4e8e\u6709 n \u4e2a server \u7684\u96c6\u7fa4\uff0cquorum \u662f (n/2)+1\u3002\u5982\u679c\u96c6\u7fa4\u8282\u70b9\u6570\u91cf\u662f\u5947\u6570\uff0c\u6bcf\u65b0\u589e\u4e00\u4e2a\u8282\u70b9\uff0c\u90fd\u4f1a\u589e\u52a0 quorum \u6240\u9700\u8282\u70b9\u6570\u3002\u867d\u7136\u5c06\u8282\u70b9\u6dfb\u52a0\u5230\u5947\u6570\u8282\u70b9\u6570\u91cf\u7684\u96c6\u7fa4\u589e\u52a0\u4e86\u673a\u5668\uff0c\u770b\u8d77\u6765\u66f4\u597d\uff0c\u4f46\u5176\u5b9e\u96c6\u7fa4\u7684\u5bb9\u9519\u6027\u4f1a\u53d8\u5dee\uff0c\u8fd9\u662f\u56e0\u4e3a\u5b8c\u5168\u76f8\u540c\u6570\u91cf\u7684\u8282\u70b9\u53ef\u80fd\u5931\u8d25\u800c\u4e0d\u4e22\u5931 quorum\uff0c\u4f46\u6709\u66f4\u591a\u7684\u8282\u70b9\u53ef\u80fd\u5931\u8d25\u3002")),(0,a.kt)("p",null,"\u5177\u6709\u5d4c\u5165\u5f0f etcd \u7684 HA K3s \u96c6\u7fa4\u7531\u4ee5\u4e0b\u90e8\u5206\u7ec4\u6210\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e09\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1\uff0c\u4ee5\u53ca\u6258\u7ba1\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a\u96f6\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Agent \u8282\u70b9"),"\uff0c\u7528\u4e8e\u8fd0\u884c\u4f60\u7684\u5e94\u7528\u548c\u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a",(0,a.kt)("strong",{parentName:"li"},"\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"),"\uff0c\u4f9b Agent \u8282\u70b9\u6ce8\u518c\u5230\u96c6\u7fa4")),(0,a.kt)("p",null,"\u9996\u5148\uff0c\u542f\u52a8\u4e00\u4e2a\u5e26\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"cluster-init")," \u6807\u5fd7\u7684 Server \u8282\u70b9\u6765\u542f\u7528\u96c6\u7fa4\u548c\u4e00\u4e2a\u4ee4\u724c\uff0c\u8be5\u4ee4\u724c\u5c06\u4f5c\u4e3a\u5171\u4eab secret\uff0c\u7528\u4e8e\u5c06\u5176\u4ed6 Server \u52a0\u5165\u96c6\u7fa4\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --cluster-init\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --cluster-init\n"))),(0,a.kt)("p",null,"\u542f\u52a8\u7b2c\u4e00\u53f0\u670d\u52a1\u5668\u540e\uff0c\u4f7f\u7528\u5171\u4eab secret  \u5c06\u7b2c\u4e8c\u53f0\u548c\u7b2c\u4e09\u53f0\u670d\u52a1\u5668\u52a0\u5165\u96c6\u7fa4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443\n")),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},"curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443\n"))),(0,a.kt)("p",null,"\u68c0\u67e5\u7b2c\u4e8c\u4e2a\u548c\u7b2c\u4e09\u4e2a\u670d\u52a1\u5668\u662f\u5426\u5df2\u52a0\u5165\u96c6\u7fa4\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"$ kubectl get nodes\nNAME        STATUS   ROLES                       AGE   VERSION\nserver1     Ready    control-plane,etcd,master   28m   vX.Y.Z\nserver2     Ready    control-plane,etcd,master   13m   vX.Y.Z\nserver3     Ready    control-plane,etcd,master   10m   vX.Y.Z\n")),(0,a.kt)("p",null,"\u73b0\u5728\u4f60\u6709\u4e86\u4e00\u4e2a\u9ad8\u53ef\u7528\u7684 control plane\u3002\u4f60\u53ef\u4ee5\u5728 ",(0,a.kt)("inlineCode",{parentName:"p"},"--server")," \u53c2\u6570\u4e2d\u4f7f\u7528\u4efb\u4f55\u96c6\u7fa4 server\uff0c\u4ece\u800c\u52a0\u5165\u5176\u4ed6 server \u548c agent \u8282\u70b9\u3002\u5c06\u5176\u4ed6 agent \u8282\u70b9\u52a0\u5165\u5230\u96c6\u7fa4\u4e2d\uff0c\u6b65\u9aa4\u4e0e server \u76f8\u540c\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - agent --server https://<ip or hostname of server>:6443\n")),(0,a.kt)("p",null,"\u6709\u51e0\u4e2a\u914d\u7f6e\u6807\u5fd7\u5728\u6240\u6709 Server \u8282\u70b9\u4e2d\u5fc5\u987b\u662f\u76f8\u540c\u7684:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u7f51\u7edc\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--service- cidr")),(0,a.kt)("li",{parentName:"ul"},"\u63a7\u5236\u67d0\u4e9b\u7ec4\u4ef6\u90e8\u7f72\u7684\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," \u548c\u4efb\u4f55\u4f20\u9012\u7ed9 ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")," \u7684\u7ec4\u4ef6"),(0,a.kt)("li",{parentName:"ul"},"\u529f\u80fd\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("h2",{id:"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4"},"\u73b0\u6709\u7684\u5355\u8282\u70b9\u96c6\u7fa4"),(0,a.kt)("p",null,"\u5982\u679c\u4f60\u6709\u4e00\u4e2a\u4f7f\u7528\u9ed8\u8ba4\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5e93\u7684\u73b0\u6709\u96c6\u7fa4\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," \u6807\u5fd7\u91cd\u65b0\u542f\u52a8\u4f60\u7684 K3s server\uff0c\u4ece\u800c\u5c06\u5176\u8f6c\u6362\u4e3a etcd\u3002\u5b8c\u6210\u6b64\u64cd\u4f5c\u540e\uff0c\u4f60\u5c06\u80fd\u591f\u5982\u4e0a\u6240\u8ff0\u6dfb\u52a0\u5176\u4ed6\u5b9e\u4f8b\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u7531\u4e8e\u8282\u70b9\u5df2\u7ecf\u521d\u59cb\u5316\u6216\u52a0\u5165\u4e86\u4e00\u4e2a\u96c6\u7fa4\uff0c\u5bfc\u81f4\u5728\u78c1\u76d8\u4e0a\u53d1\u73b0\u4e00\u4e2a etcd \u6570\u636e\u5b58\u50a8\uff0c\u90a3\u4e48\u6570\u636e\u5b58\u50a8\u53c2\u6570\uff08",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"--server"),"\u3001",(0,a.kt)("inlineCode",{parentName:"p"},"--datastore-endpoint")," \u7b49\uff09\u5c06\u88ab\u5ffd\u7565\u3002"),(0,a.kt)("blockquote",null,(0,a.kt)("p",{parentName:"blockquote"},(0,a.kt)("strong",{parentName:"p"},"\u91cd\u8981\u63d0\u793a"),"\uff1aK3s v1.22.2 \u53ca\u66f4\u9ad8\u7248\u672c\u652f\u6301\u5c06 SQLite \u8fc1\u79fb\u5230 etcd\u3002\u5982\u679c\u4f60\u5c06 ",(0,a.kt)("inlineCode",{parentName:"p"},"--cluster-init")," \u6dfb\u52a0\u5230\u73b0\u6709 server\uff0c\u65e7\u7248\u672c\u5c06\u521b\u5efa\u4e00\u4e2a\u65b0\u7684\u7a7a\u6570\u636e\u5b58\u50a8\u3002")))}d.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/beafadc6.06131245.js b/zh/assets/js/beafadc6.df522882.js
similarity index 99%
rename from zh/assets/js/beafadc6.06131245.js
rename to zh/assets/js/beafadc6.df522882.js
index 2ff9f862c..d5d1c7f0a 100644
--- a/zh/assets/js/beafadc6.06131245.js
+++ b/zh/assets/js/beafadc6.df522882.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9390],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>u});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,d=i(e,["components","mdxType","originalType","parentName"]),k=p(n),u=a,m=k["".concat(s,".").concat(u)]||k[u]||c[u]||l;return n?r.createElement(m,o(o({ref:t},d),{},{components:n})):r.createElement(m,o({ref:t},d))}));function u(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=k;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var p=2;p<l;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},4845:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>l,metadata:()=>i,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const l={title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",weight:30},o=void 0,i={unversionedId:"datastore/ha",id:"datastore/ha",title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",description:"\u672c\u6587\u4ecb\u7ecd\u4e86\u5982\u4f55\u5b89\u88c5\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528 K3s \u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha.md",sourceDirName:"datastore",slug:"/datastore/ha",permalink:"/zh/datastore/ha",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",weight:30},sidebar:"mySidebar",previous:{title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",permalink:"/zh/datastore/ha-embedded"},next:{title:"cluster-loadbalancer",permalink:"/zh/datastore/cluster-loadbalancer"}},s={},p=[{value:"\u5b89\u88c5\u6982\u8981",id:"\u5b89\u88c5\u6982\u8981",level:2},{value:"1. \u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8",id:"1-\u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8",level:3},{value:"2. \u542f\u52a8 Server \u8282\u70b9",id:"2-\u542f\u52a8-server-\u8282\u70b9",level:3},{value:"3. \u53ef\u9009\uff1a\u52a0\u5165\u5176\u5b83 Server \u8282\u70b9",id:"3-\u53ef\u9009\u52a0\u5165\u5176\u5b83-server-\u8282\u70b9",level:3},{value:"4. \u53ef\u9009\uff1a\u52a0\u5165 Agent \u8282\u70b9",id:"4-\u53ef\u9009\u52a0\u5165-agent-\u8282\u70b9",level:3},{value:"5. \u53ef\u9009\uff1a\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740",id:"5-\u53ef\u9009\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740",level:3}],d={toc:p};function c(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u5982\u4f55\u5b89\u88c5\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528 K3s \u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u5355\u670d\u52a1\u5668\u96c6\u7fa4\u53ef\u4ee5\u6ee1\u8db3\u5404\u79cd\u7528\u4f8b\uff0c\u4f46\u5982\u679c\u4f60\u7684\u73af\u5883\u5bf9 Kubernetes control plane \u7684\u6b63\u5e38\u8fd0\u884c\u65f6\u95f4\u6709\u8981\u6c42\uff0c\u4f60\u53ef\u4ee5\u5728 HA \u914d\u7f6e\u4e2d\u8fd0\u884c K3s\u3002\u4e00\u4e2a HA K3s \u96c6\u7fa4\u5305\u62ec\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e24\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\u5916\u90e8\u6570\u636e\u5b58\u50a8"),"\uff08\u4e0e\u5355\u8282\u70b9\u8bbe\u7f6e\u4e2d\u4f7f\u7528\u7684\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5b58\u50a8\u76f8\u53cd\uff09"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a\u96f6\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Agent \u8282\u70b9"),"\uff0c\u7528\u4e8e\u8fd0\u884c\u4f60\u7684\u5e94\u7528\u548c\u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a",(0,a.kt)("strong",{parentName:"li"},"\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"),"\uff0c\u4f9b Agent \u8282\u70b9\u6ce8\u518c\u5230\u96c6\u7fa4")),(0,a.kt)("p",null,"\u6709\u5173\u8fd9\u4e9b\u7ec4\u4ef6\u5982\u4f55\u534f\u540c\u5de5\u4f5c\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/architecture/#%E9%AB%98%E5%8F%AF%E7%94%A8-k3s"},"\u67b6\u6784"),"\u3002"),(0,a.kt)("h2",{id:"\u5b89\u88c5\u6982\u8981"},"\u5b89\u88c5\u6982\u8981"),(0,a.kt)("p",null,"\u8bbe\u7f6e HA \u96c6\u7fa4\u9700\u8981\u4ee5\u4e0b\u6b65\u9aa4\uff1a"),(0,a.kt)("h3",{id:"1-\u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8"},"1. \u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8"),(0,a.kt)("p",null,"\u4f60\u9996\u5148\u9700\u8981\u4e3a\u96c6\u7fa4\u521b\u5efa\u4e00\u4e2a\u5916\u90e8\u6570\u636e\u5b58\u50a8\u3002\u6709\u5173\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/datastore/"},"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u9009\u9879"),"\u6587\u6863\u3002"),(0,a.kt)("h3",{id:"2-\u542f\u52a8-server-\u8282\u70b9"},"2. \u542f\u52a8 Server \u8282\u70b9"),(0,a.kt)("p",null,"K3s \u9700\u8981\u4e24\u4e2a\u6216\u66f4\u591a\u7684 Server \u8282\u70b9\u6765\u5b9e\u73b0 HA \u914d\u7f6e\u3002\u6709\u5173\u6700\u4f4e\u4e3b\u673a\u8981\u6c42\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/requirements"},"\u5b89\u88c5\u8981\u6c42"),"\u3002"),(0,a.kt)("p",null,"\u5728\u8fd9\u4e9b\u8282\u70b9\u4e0a\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s server")," \u547d\u4ee4\u65f6\uff0c\u4f60\u5fc5\u987b\u8bbe\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\uff0c\u4ee5\u4fbf K3s \u77e5\u9053\u5982\u4f55\u8fde\u63a5\u5230\u5916\u90e8\u6570\u636e\u5b58\u50a8\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"token")," \u53c2\u6570\u4e5f\u53ef\u4ee5\u7528\u6765\u5728\u6dfb\u52a0\u8282\u70b9\u65f6\u8bbe\u7f6e\u4e00\u4e2a\u56fa\u5b9a\u7684 token\u3002\u5f53\u4e3a\u7a7a\u65f6\uff0c\u5c06\u81ea\u52a8\u751f\u6210 token\u3002"),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u5982\u4e0b\u547d\u4ee4\u5b89\u88c5 K3s Server\uff0c\u5e76\u4f7f\u7528 MySQL \u6570\u636e\u5e93\u4f5c\u4e3a\u5916\u90e8\u6570\u636e\u5b58\u50a8\u548c",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9"},"\u8bbe\u7f6e token"),"\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},'curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n'))),(0,a.kt)("p",null,"\u6839\u636e\u6570\u636e\u5e93\u7c7b\u578b\u7684\u4e0d\u540c\uff0c\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u7684\u683c\u5f0f\u4e5f\u4e0d\u540c\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/datastore/#%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8%E7%AB%AF%E7%82%B9%E6%A0%BC%E5%BC%8F%E5%92%8C%E5%8A%9F%E8%83%BD"},"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f"),"\u3002"),(0,a.kt)("p",null,"\u8981\u5728\u542f\u52a8 server \u8282\u70b9\u65f6\u914d\u7f6e TLS \u8bc1\u4e66\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/datastore/#%E5%A4%96%E9%83%A8%E6%95%B0%E6%8D%AE%E5%BA%93%E9%85%8D%E7%BD%AE%E5%8F%82%E6%95%B0"},"\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u6307\u5357"),"\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5355\u53f0 Server \u5b89\u88c5\u65f6\u53ef\u7528\u7684\u5b89\u88c5\u9009\u9879\u4e5f\u9002\u7528\u4e8e\u9ad8\u53ef\u7528\u5b89\u88c5\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/configuration"},"\u914d\u7f6e\u9009\u9879"),"\u6587\u6863\u3002")),(0,a.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cServer \u8282\u70b9\u662f\u53ef\u8c03\u5ea6\u7684\uff0c\u56e0\u6b64\u4f60\u7684\u5de5\u4f5c\u8d1f\u8f7d\u53ef\u4ee5\u5728\u5b83\u4eec\u4e0a\u542f\u52a8\u3002\u5982\u679c\u4f60\u5e0c\u671b\u62e5\u6709\u4e00\u4e2a\u4e0d\u4f1a\u8fd0\u884c\u7528\u6237\u5de5\u4f5c\u8d1f\u8f7d\u7684\u4e13\u7528 control plane\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u6c61\u70b9\uff08taint\uff09\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"node-taint")," \u53c2\u6570\u5c06\u5141\u8bb8\u4f60\u914d\u7f6e\u5e26\u6709\u6c61\u70b9\u7684\u8282\u70b9\uff0c\u4f8b\u5982 ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-taint CriticalAddonsOnly=true:NoExecute"),"\u3002"),(0,a.kt)("p",null,"\u5728\u6240\u6709 server \u8282\u70b9\u4e0a\u542f\u52a8 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s server")," \u8fdb\u7a0b\u540e\uff0c\u8bf7\u901a\u8fc7 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s kubectl get nodes")," \u786e\u4fdd\u96c6\u7fa4\u5df2\u6b63\u786e\u542f\u52a8\u3002\u4f60\u5e94\u8be5\u770b\u5230 server \u8282\u70b9\u5904\u4e8e Ready \u72b6\u6001\u3002"),(0,a.kt)("h3",{id:"3-\u53ef\u9009\u52a0\u5165\u5176\u5b83-server-\u8282\u70b9"},"3. \u53ef\u9009\uff1a\u52a0\u5165\u5176\u5b83 Server \u8282\u70b9"),(0,a.kt)("p",null,"\u6b65\u9aa4 2 \u4e2d\u7684\u76f8\u540c\u793a\u4f8b\u547d\u4ee4\u53ef\u7528\u4e8e\u52a0\u5165\u5176\u4ed6 Server \u8282\u70b9\uff0c\u5176\u4e2d\u9700\u8981\u4f7f\u7528\u7b2c\u4e00\u4e2a\u8282\u70b9\u7684 Token\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u7b2c\u4e00\u4e2a Server \u8282\u70b9\u662f\u5728\u6ca1\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"--token")," CLI \u6807\u5fd7\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \u53d8\u91cf\u7684\u60c5\u51b5\u4e0b\u542f\u52a8\u7684\uff0c\u90a3\u4e48\u53ef\u4ee5\u4ece\u4efb\u4f55\u5df2\u7ecf\u52a0\u5165\u96c6\u7fa4\u7684 Server \u8282\u70b9\u4e2d\u68c0\u7d22\u5230 Token\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,a.kt)("p",null,"\u7136\u540e\u53ef\u4ee5",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9"},"\u4f7f\u7528 Token")," \u6dfb\u52a0\u5176\u4ed6 Server \u8282\u70b9\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},'curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n'))),(0,a.kt)("p",null,"\u6709\u51e0\u4e2a\u914d\u7f6e\u6807\u5fd7\u5728\u6240\u6709 Server \u8282\u70b9\u4e2d\u5fc5\u987b\u662f\u76f8\u540c\u7684:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u7f51\u7edc\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--service- cidr")),(0,a.kt)("li",{parentName:"ul"},"\u63a7\u5236\u67d0\u4e9b\u7ec4\u4ef6\u90e8\u7f72\u7684\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," \u548c\u4efb\u4f55\u4f20\u9012\u7ed9 ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")," \u7684\u7ec4\u4ef6"),(0,a.kt)("li",{parentName:"ul"},"\u529f\u80fd\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4f60\u9700\u8981\u5907\u4efd token \u7684\u503c\uff0c\u56e0\u4e3a\u6062\u590d\u5907\u4efd\u548c\u6dfb\u52a0\u8282\u70b9\u65f6\u90fd\u9700\u8981\u8be5 token\u3002\u4ee5\u524d\uff0cK3s \u5728\u4f7f\u7528\u5916\u90e8 SQL \u6570\u636e\u5b58\u50a8\u65f6\u4e0d\u5f3a\u5236\u4f7f\u7528 token\u3002")),(0,a.kt)("h3",{id:"4-\u53ef\u9009\u52a0\u5165-agent-\u8282\u70b9"},"4. \u53ef\u9009\uff1a\u52a0\u5165 Agent \u8282\u70b9"),(0,a.kt)("p",null,"\u56e0\u4e3a K3s Server \u8282\u70b9\u9ed8\u8ba4\u662f\u53ef\u8c03\u5ea6\u7684\uff0c\u6240\u4ee5 HA K3s \u96c6\u7fa4\u4e0d\u9700\u8981 Agent \u8282\u70b9\u3002\u4f46\u662f\uff0c\u4f60\u53ef\u80fd\u5e0c\u671b\u4f7f\u7528\u4e13\u95e8\u7684 Agent \u8282\u70b9\u6765\u8fd0\u884c\u5e94\u7528\u7a0b\u5e8f\u548c\u670d\u52a1\u3002"),(0,a.kt)("p",null,"\u5728 HA \u96c6\u7fa4\u4e2d\u52a0\u5165 Agent \u8282\u70b9\u4e0e\u5728\u5355\u4e2a Server \u96c6\u7fa4\u4e2d\u52a0\u5165 Agent \u8282\u70b9\u662f\u4e00\u6837\u7684\u3002\u4f60\u53ea\u9700\u8981\u6307\u5b9a Agent \u5e94\u8be5\u6ce8\u518c\u7684 URL\uff08server IP \u4e4b\u4e00\u6216\u56fa\u5b9a\u6ce8\u518c\u5730\u5740\uff09\u548c\u8981\u4f7f\u7528\u7684 Token \u5373\u53ef\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"K3S_TOKEN=SECRET k3s agent --server https://server-or-fixed-registration-address:6443\n")),(0,a.kt)("h3",{id:"5-\u53ef\u9009\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740"},"5. \u53ef\u9009\uff1a\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740"),(0,a.kt)("p",null,"Agent \u8282\u70b9\u9700\u8981\u4e00\u4e2a URL \u6765\u6ce8\u518c\u3002\u8fd9\u53ef\u4ee5\u662f\u4efb\u4f55 server \u8282\u70b9\u7684 IP \u6216\u4e3b\u673a\u540d\uff0c\u4f46\u5728\u8bb8\u591a\u60c5\u51b5\u4e0b\uff0c\u8fd9\u4e9b\u8282\u70b9\u53ef\u80fd\u4f1a\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\u800c\u6539\u53d8\u3002\u4f8b\u5982\uff0c\u5982\u679c\u4f60\u5728\u652f\u6301\u7f29\u653e\u7ec4\u7684\u4e91\u4e2d\u8fd0\u884c\u96c6\u7fa4\uff0c\u4f60\u53ef\u80fd\u4f1a\u7eb5\u5411\u7f29\u653e Server \u8282\u70b9\u7ec4\uff0c\u5bfc\u81f4\u8282\u70b9\u88ab\u521b\u5efa\u548c\u9500\u6bc1\uff0c\u4ece\u800c\u5bfc\u81f4 Server \u8282\u70b9\u96c6\u7684 IP \u53d1\u751f\u6539\u53d8\u3002\u56e0\u6b64\uff0c\u4f60\u5e94\u8be5\u5728 Server \u8282\u70b9\u524d\u9762\u6709\u4e00\u4e2a\u7a33\u5b9a\u7684\u7aef\u70b9\uff0c\u800c\u4e14\u5b83\u4e0d\u4f1a\u968f\u65f6\u95f4\u63a8\u79fb\u800c\u6539\u53d8\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528\u8bb8\u591a\u65b9\u6cd5\u6765\u8bbe\u7f6e\u6b64\u7aef\u70b9\uff0c\u4f8b\u5982\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"4 \u5c42 (TCP) \u8d1f\u8f7d\u5747\u8861\u5668"),(0,a.kt)("li",{parentName:"ul"},"\u8f6e\u8be2 DNS"),(0,a.kt)("li",{parentName:"ul"},"\u865a\u62df\u6216\u5f39\u6027 IP \u5730\u5740")),(0,a.kt)("p",null,"\u8fd9\u4e2a\u7aef\u70b9\u4e5f\u53ef\u4ee5\u7528\u6765\u8bbf\u95ee Kubernetes API\u3002\u56e0\u6b64\uff0c\u4f60\u53ef\u4ee5\u4fee\u6539 ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," \u6587\u4ef6\u6765\u6307\u5411\u5b83\uff0c\u800c\u4e0d\u662f\u7279\u5b9a\u7684\u8282\u70b9\u3002"),(0,a.kt)("p",null,"\u8981\u907f\u514d\u6b64\u7c7b\u914d\u7f6e\u4e2d\u7684\u8bc1\u4e66\u9519\u8bef\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--tls-san YOUR_IP_OR_HOSTNAME_HERE")," \u9009\u9879\u6765\u914d\u7f6e Server\u3002\u8fd9\u4e2a\u9009\u9879\u5728 TLS \u8bc1\u4e66\u4e2d\u589e\u52a0\u4e86\u4e00\u4e2a\u989d\u5916\u7684\u4e3b\u673a\u540d\u6216 IP \u4f5c\u4e3a Subject Alternative Name\uff0c\u5982\u679c\u4f60\u60f3\u901a\u8fc7 IP \u548c\u4e3b\u673a\u540d\u8bbf\u95ee\uff0c\u53ef\u4ee5\u591a\u6b21\u6307\u5b9a\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[9390],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>u});var r=n(7294);function a(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function l(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function o(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?l(Object(n),!0).forEach((function(t){a(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):l(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function i(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},l=Object.keys(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(r=0;r<l.length;r++)n=l[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var s=r.createContext({}),p=function(e){var t=r.useContext(s),n=t;return e&&(n="function"==typeof e?e(t):o(o({},t),e)),n},d=function(e){var t=p(e.components);return r.createElement(s.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},k=r.forwardRef((function(e,t){var n=e.components,a=e.mdxType,l=e.originalType,s=e.parentName,d=i(e,["components","mdxType","originalType","parentName"]),k=p(n),u=a,m=k["".concat(s,".").concat(u)]||k[u]||c[u]||l;return n?r.createElement(m,o(o({ref:t},d),{},{components:n})):r.createElement(m,o({ref:t},d))}));function u(e,t){var n=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var l=n.length,o=new Array(l);o[0]=k;var i={};for(var s in t)hasOwnProperty.call(t,s)&&(i[s]=t[s]);i.originalType=e,i.mdxType="string"==typeof e?e:a,o[1]=i;for(var p=2;p<l;p++)o[p]=n[p];return r.createElement.apply(null,o)}return r.createElement.apply(null,n)}k.displayName="MDXCreateElement"},4845:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>s,contentTitle:()=>o,default:()=>c,frontMatter:()=>l,metadata:()=>i,toc:()=>p});var r=n(3117),a=(n(7294),n(3905));const l={title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",weight:30},o=void 0,i={unversionedId:"datastore/ha",id:"datastore/ha",title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",description:"\u672c\u6587\u4ecb\u7ecd\u4e86\u5982\u4f55\u5b89\u88c5\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528 K3s \u96c6\u7fa4\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha.md",sourceDirName:"datastore",slug:"/datastore/ha",permalink:"/zh/datastore/ha",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u9ad8\u53ef\u7528\u5916\u90e8\u6570\u636e\u5e93",weight:30},sidebar:"mySidebar",previous:{title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",permalink:"/zh/datastore/ha-embedded"},next:{title:"cluster-loadbalancer",permalink:"/zh/datastore/cluster-loadbalancer"}},s={},p=[{value:"\u5b89\u88c5\u6982\u8981",id:"\u5b89\u88c5\u6982\u8981",level:2},{value:"1. \u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8",id:"1-\u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8",level:3},{value:"2. \u542f\u52a8 Server \u8282\u70b9",id:"2-\u542f\u52a8-server-\u8282\u70b9",level:3},{value:"3. \u53ef\u9009\uff1a\u52a0\u5165\u5176\u5b83 Server \u8282\u70b9",id:"3-\u53ef\u9009\u52a0\u5165\u5176\u5b83-server-\u8282\u70b9",level:3},{value:"4. \u53ef\u9009\uff1a\u52a0\u5165 Agent \u8282\u70b9",id:"4-\u53ef\u9009\u52a0\u5165-agent-\u8282\u70b9",level:3},{value:"5. \u53ef\u9009\uff1a\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740",id:"5-\u53ef\u9009\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740",level:3}],d={toc:p};function c(e){let{components:t,...n}=e;return(0,a.kt)("wrapper",(0,r.Z)({},d,n,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86\u5982\u4f55\u5b89\u88c5\u5177\u6709\u5916\u90e8\u6570\u636e\u5e93\u7684\u9ad8\u53ef\u7528 K3s \u96c6\u7fa4\u3002"),(0,a.kt)("p",null,"\u5355\u670d\u52a1\u5668\u96c6\u7fa4\u53ef\u4ee5\u6ee1\u8db3\u5404\u79cd\u7528\u4f8b\uff0c\u4f46\u5982\u679c\u4f60\u7684\u73af\u5883\u5bf9 Kubernetes control plane \u7684\u6b63\u5e38\u8fd0\u884c\u65f6\u95f4\u6709\u8981\u6c42\uff0c\u4f60\u53ef\u4ee5\u5728 HA \u914d\u7f6e\u4e2d\u8fd0\u884c K3s\u3002\u4e00\u4e2a HA K3s \u96c6\u7fa4\u5305\u62ec\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u4e24\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Server \u8282\u70b9"),"\u4e3a Kubernetes API \u63d0\u4f9b\u670d\u52a1\u5e76\u8fd0\u884c\u5176\u4ed6 control plane \u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("strong",{parentName:"li"},"\u5916\u90e8\u6570\u636e\u5b58\u50a8"),"\uff08\u4e0e\u5355\u8282\u70b9\u8bbe\u7f6e\u4e2d\u4f7f\u7528\u7684\u5d4c\u5165\u5f0f SQLite \u6570\u636e\u5b58\u50a8\u76f8\u53cd\uff09"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a\u96f6\u4e2a\u6216\u591a\u4e2a ",(0,a.kt)("strong",{parentName:"li"},"Agent \u8282\u70b9"),"\uff0c\u7528\u4e8e\u8fd0\u884c\u4f60\u7684\u5e94\u7528\u548c\u670d\u52a1"),(0,a.kt)("li",{parentName:"ul"},"\u53ef\u9009\uff1a",(0,a.kt)("strong",{parentName:"li"},"\u56fa\u5b9a\u6ce8\u518c\u5730\u5740"),"\uff0c\u4f9b Agent \u8282\u70b9\u6ce8\u518c\u5230\u96c6\u7fa4")),(0,a.kt)("p",null,"\u6709\u5173\u8fd9\u4e9b\u7ec4\u4ef6\u5982\u4f55\u534f\u540c\u5de5\u4f5c\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/architecture/#%E9%AB%98%E5%8F%AF%E7%94%A8-k3s"},"\u67b6\u6784"),"\u3002"),(0,a.kt)("h2",{id:"\u5b89\u88c5\u6982\u8981"},"\u5b89\u88c5\u6982\u8981"),(0,a.kt)("p",null,"\u8bbe\u7f6e HA \u96c6\u7fa4\u9700\u8981\u4ee5\u4e0b\u6b65\u9aa4\uff1a"),(0,a.kt)("h3",{id:"1-\u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8"},"1. \u521b\u5efa\u5916\u90e8\u6570\u636e\u5b58\u50a8"),(0,a.kt)("p",null,"\u4f60\u9996\u5148\u9700\u8981\u4e3a\u96c6\u7fa4\u521b\u5efa\u4e00\u4e2a\u5916\u90e8\u6570\u636e\u5b58\u50a8\u3002\u6709\u5173\u66f4\u591a\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/datastore/"},"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8\u9009\u9879"),"\u6587\u6863\u3002"),(0,a.kt)("h3",{id:"2-\u542f\u52a8-server-\u8282\u70b9"},"2. \u542f\u52a8 Server \u8282\u70b9"),(0,a.kt)("p",null,"K3s \u9700\u8981\u4e24\u4e2a\u6216\u66f4\u591a\u7684 Server \u8282\u70b9\u6765\u5b9e\u73b0 HA \u914d\u7f6e\u3002\u6709\u5173\u6700\u4f4e\u4e3b\u673a\u8981\u6c42\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/requirements"},"\u5b89\u88c5\u8981\u6c42"),"\u3002"),(0,a.kt)("p",null,"\u5728\u8fd9\u4e9b\u8282\u70b9\u4e0a\u8fd0\u884c ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s server")," \u547d\u4ee4\u65f6\uff0c\u4f60\u5fc5\u987b\u8bbe\u7f6e ",(0,a.kt)("inlineCode",{parentName:"p"},"datastore-endpoint")," \u53c2\u6570\uff0c\u4ee5\u4fbf K3s \u77e5\u9053\u5982\u4f55\u8fde\u63a5\u5230\u5916\u90e8\u6570\u636e\u5b58\u50a8\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"token")," \u53c2\u6570\u4e5f\u53ef\u4ee5\u7528\u6765\u5728\u6dfb\u52a0\u8282\u70b9\u65f6\u8bbe\u7f6e\u4e00\u4e2a\u56fa\u5b9a\u7684 token\u3002\u5f53\u4e3a\u7a7a\u65f6\uff0c\u5c06\u81ea\u52a8\u751f\u6210 token\u3002"),(0,a.kt)("p",null,"\u4f8b\u5982\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u5982\u4e0b\u547d\u4ee4\u5b89\u88c5 K3s Server\uff0c\u5e76\u4f7f\u7528 MySQL \u6570\u636e\u5e93\u4f5c\u4e3a\u5916\u90e8\u6570\u636e\u5b58\u50a8\u548c",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9"},"\u8bbe\u7f6e token"),"\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},'curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n'))),(0,a.kt)("p",null,"\u6839\u636e\u6570\u636e\u5e93\u7c7b\u578b\u7684\u4e0d\u540c\uff0c\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u7684\u683c\u5f0f\u4e5f\u4e0d\u540c\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/datastore/#%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8%E7%AB%AF%E7%82%B9%E6%A0%BC%E5%BC%8F%E5%92%8C%E5%8A%9F%E8%83%BD"},"\u6570\u636e\u5b58\u50a8\u7aef\u70b9\u683c\u5f0f"),"\u3002"),(0,a.kt)("p",null,"\u8981\u5728\u542f\u52a8 server \u8282\u70b9\u65f6\u914d\u7f6e TLS \u8bc1\u4e66\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/datastore/#%E5%A4%96%E9%83%A8%E6%95%B0%E6%8D%AE%E5%BA%93%E9%85%8D%E7%BD%AE%E5%8F%82%E6%95%B0"},"\u6570\u636e\u5b58\u50a8\u914d\u7f6e\u6307\u5357"),"\u3002"),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u5355\u53f0 Server \u5b89\u88c5\u65f6\u53ef\u7528\u7684\u5b89\u88c5\u9009\u9879\u4e5f\u9002\u7528\u4e8e\u9ad8\u53ef\u7528\u5b89\u88c5\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,a.kt)("a",{parentName:"p",href:"/zh/installation/configuration"},"\u914d\u7f6e\u9009\u9879"),"\u6587\u6863\u3002")),(0,a.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0cServer \u8282\u70b9\u662f\u53ef\u8c03\u5ea6\u7684\uff0c\u56e0\u6b64\u4f60\u7684\u5de5\u4f5c\u8d1f\u8f7d\u53ef\u4ee5\u5728\u5b83\u4eec\u4e0a\u542f\u52a8\u3002\u5982\u679c\u4f60\u5e0c\u671b\u62e5\u6709\u4e00\u4e2a\u4e0d\u4f1a\u8fd0\u884c\u7528\u6237\u5de5\u4f5c\u8d1f\u8f7d\u7684\u4e13\u7528 control plane\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u6c61\u70b9\uff08taint\uff09\u3002",(0,a.kt)("inlineCode",{parentName:"p"},"node-taint")," \u53c2\u6570\u5c06\u5141\u8bb8\u4f60\u914d\u7f6e\u5e26\u6709\u6c61\u70b9\u7684\u8282\u70b9\uff0c\u4f8b\u5982 ",(0,a.kt)("inlineCode",{parentName:"p"},"--node-taint CriticalAddonsOnly=true:NoExecute"),"\u3002"),(0,a.kt)("p",null,"\u5728\u6240\u6709 server \u8282\u70b9\u4e0a\u542f\u52a8 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s server")," \u8fdb\u7a0b\u540e\uff0c\u8bf7\u901a\u8fc7 ",(0,a.kt)("inlineCode",{parentName:"p"},"k3s kubectl get nodes")," \u786e\u4fdd\u96c6\u7fa4\u5df2\u6b63\u786e\u542f\u52a8\u3002\u4f60\u5e94\u8be5\u770b\u5230 server \u8282\u70b9\u5904\u4e8e Ready \u72b6\u6001\u3002"),(0,a.kt)("h3",{id:"3-\u53ef\u9009\u52a0\u5165\u5176\u5b83-server-\u8282\u70b9"},"3. \u53ef\u9009\uff1a\u52a0\u5165\u5176\u5b83 Server \u8282\u70b9"),(0,a.kt)("p",null,"\u6b65\u9aa4 2 \u4e2d\u7684\u76f8\u540c\u793a\u4f8b\u547d\u4ee4\u53ef\u7528\u4e8e\u52a0\u5165\u5176\u4ed6 Server \u8282\u70b9\uff0c\u5176\u4e2d\u9700\u8981\u4f7f\u7528\u7b2c\u4e00\u4e2a\u8282\u70b9\u7684 Token\u3002"),(0,a.kt)("p",null,"\u5982\u679c\u7b2c\u4e00\u4e2a Server \u8282\u70b9\u662f\u5728\u6ca1\u6709 ",(0,a.kt)("inlineCode",{parentName:"p"},"--token")," CLI \u6807\u5fd7\u6216 ",(0,a.kt)("inlineCode",{parentName:"p"},"K3S_TOKEN")," \u53d8\u91cf\u7684\u60c5\u51b5\u4e0b\u542f\u52a8\u7684\uff0c\u90a3\u4e48\u53ef\u4ee5\u4ece\u4efb\u4f55\u5df2\u7ecf\u52a0\u5165\u96c6\u7fa4\u7684 Server \u8282\u70b9\u4e2d\u68c0\u7d22\u5230 Token\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"cat /var/lib/rancher/k3s/server/token\n")),(0,a.kt)("p",null,"\u7136\u540e\u53ef\u4ee5",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9"},"\u4f7f\u7528 Token")," \u6dfb\u52a0\u5176\u4ed6 Server \u8282\u70b9\uff1a"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n')),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4e2d\u56fd\u7528\u6237\uff0c\u53ef\u4ee5\u4f7f\u7528\u4ee5\u4e0b\u65b9\u6cd5\u52a0\u901f\u5b89\u88c5\uff1a"),(0,a.kt)("pre",{parentName:"admonition"},(0,a.kt)("code",{parentName:"pre"},'curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \\\n  --token=SECRET \\\n  --datastore-endpoint="mysql://username:password@tcp(hostname:3306)/database-name"\n'))),(0,a.kt)("p",null,"\u6709\u51e0\u4e2a\u914d\u7f6e\u6807\u5fd7\u5728\u6240\u6709 Server \u8282\u70b9\u4e2d\u5fc5\u987b\u662f\u76f8\u540c\u7684:"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u7f51\u7edc\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-dns"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-domain"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--cluster-cidr"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--service- cidr")),(0,a.kt)("li",{parentName:"ul"},"\u63a7\u5236\u67d0\u4e9b\u7ec4\u4ef6\u90e8\u7f72\u7684\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-helm-controller"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-kube-proxy"),"\u3001",(0,a.kt)("inlineCode",{parentName:"li"},"--disable-network-policy")," \u548c\u4efb\u4f55\u4f20\u9012\u7ed9 ",(0,a.kt)("inlineCode",{parentName:"li"},"--disable")," \u7684\u7ec4\u4ef6"),(0,a.kt)("li",{parentName:"ul"},"\u529f\u80fd\u76f8\u5173\u6807\u5fd7\uff1a",(0,a.kt)("inlineCode",{parentName:"li"},"--secrets-encryption"))),(0,a.kt)("admonition",{type:"note"},(0,a.kt)("p",{parentName:"admonition"},"\u4f60\u9700\u8981\u5907\u4efd token \u7684\u503c\uff0c\u56e0\u4e3a\u6062\u590d\u5907\u4efd\u548c\u6dfb\u52a0\u8282\u70b9\u65f6\u90fd\u9700\u8981\u8be5 token\u3002\u4ee5\u524d\uff0cK3s \u5728\u4f7f\u7528\u5916\u90e8 SQL \u6570\u636e\u5b58\u50a8\u65f6\u4e0d\u5f3a\u5236\u4f7f\u7528 token\u3002")),(0,a.kt)("h3",{id:"4-\u53ef\u9009\u52a0\u5165-agent-\u8282\u70b9"},"4. \u53ef\u9009\uff1a\u52a0\u5165 Agent \u8282\u70b9"),(0,a.kt)("p",null,"\u56e0\u4e3a K3s Server \u8282\u70b9\u9ed8\u8ba4\u662f\u53ef\u8c03\u5ea6\u7684\uff0c\u6240\u4ee5 HA K3s \u96c6\u7fa4\u4e0d\u9700\u8981 Agent \u8282\u70b9\u3002\u4f46\u662f\uff0c\u4f60\u53ef\u80fd\u5e0c\u671b\u4f7f\u7528\u4e13\u95e8\u7684 Agent \u8282\u70b9\u6765\u8fd0\u884c\u5e94\u7528\u7a0b\u5e8f\u548c\u670d\u52a1\u3002"),(0,a.kt)("p",null,"\u5728 HA \u96c6\u7fa4\u4e2d\u52a0\u5165 Agent \u8282\u70b9\u4e0e\u5728\u5355\u4e2a Server \u96c6\u7fa4\u4e2d\u52a0\u5165 Agent \u8282\u70b9\u662f\u4e00\u6837\u7684\u3002\u4f60\u53ea\u9700\u8981\u6307\u5b9a Agent \u5e94\u8be5\u6ce8\u518c\u7684 URL\uff08server IP \u4e4b\u4e00\u6216\u56fa\u5b9a\u6ce8\u518c\u5730\u5740\uff09\u548c\u8981\u4f7f\u7528\u7684 Token \u5373\u53ef\u3002"),(0,a.kt)("pre",null,(0,a.kt)("code",{parentName:"pre",className:"language-bash"},"K3S_TOKEN=SECRET k3s agent --server https://server-or-fixed-registration-address:6443\n")),(0,a.kt)("h3",{id:"5-\u53ef\u9009\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740"},"5. \u53ef\u9009\uff1a\u914d\u7f6e\u56fa\u5b9a\u7684\u6ce8\u518c\u5730\u5740"),(0,a.kt)("p",null,"Agent \u8282\u70b9\u9700\u8981\u4e00\u4e2a URL \u6765\u6ce8\u518c\u3002\u8fd9\u53ef\u4ee5\u662f\u4efb\u4f55 server \u8282\u70b9\u7684 IP \u6216\u4e3b\u673a\u540d\uff0c\u4f46\u5728\u8bb8\u591a\u60c5\u51b5\u4e0b\uff0c\u8fd9\u4e9b\u8282\u70b9\u53ef\u80fd\u4f1a\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\u800c\u6539\u53d8\u3002\u4f8b\u5982\uff0c\u5982\u679c\u4f60\u5728\u652f\u6301\u7f29\u653e\u7ec4\u7684\u4e91\u4e2d\u8fd0\u884c\u96c6\u7fa4\uff0c\u4f60\u53ef\u80fd\u4f1a\u7eb5\u5411\u7f29\u653e Server \u8282\u70b9\u7ec4\uff0c\u5bfc\u81f4\u8282\u70b9\u88ab\u521b\u5efa\u548c\u9500\u6bc1\uff0c\u4ece\u800c\u5bfc\u81f4 Server \u8282\u70b9\u96c6\u7684 IP \u53d1\u751f\u6539\u53d8\u3002\u56e0\u6b64\uff0c\u4f60\u5e94\u8be5\u5728 Server \u8282\u70b9\u524d\u9762\u6709\u4e00\u4e2a\u7a33\u5b9a\u7684\u7aef\u70b9\uff0c\u800c\u4e14\u5b83\u4e0d\u4f1a\u968f\u65f6\u95f4\u63a8\u79fb\u800c\u6539\u53d8\u3002\u4f60\u53ef\u4ee5\u4f7f\u7528\u8bb8\u591a\u65b9\u6cd5\u6765\u8bbe\u7f6e\u6b64\u7aef\u70b9\uff0c\u4f8b\u5982\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"4 \u5c42 (TCP) \u8d1f\u8f7d\u5747\u8861\u5668"),(0,a.kt)("li",{parentName:"ul"},"\u8f6e\u8be2 DNS"),(0,a.kt)("li",{parentName:"ul"},"\u865a\u62df\u6216\u5f39\u6027 IP \u5730\u5740")),(0,a.kt)("p",null,"\u8fd9\u4e2a\u7aef\u70b9\u4e5f\u53ef\u4ee5\u7528\u6765\u8bbf\u95ee Kubernetes API\u3002\u56e0\u6b64\uff0c\u4f60\u53ef\u4ee5\u4fee\u6539 ",(0,a.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/"},"kubeconfig")," \u6587\u4ef6\u6765\u6307\u5411\u5b83\uff0c\u800c\u4e0d\u662f\u7279\u5b9a\u7684\u8282\u70b9\u3002"),(0,a.kt)("p",null,"\u8981\u907f\u514d\u6b64\u7c7b\u914d\u7f6e\u4e2d\u7684\u8bc1\u4e66\u9519\u8bef\uff0c\u8bf7\u4f7f\u7528 ",(0,a.kt)("inlineCode",{parentName:"p"},"--tls-san YOUR_IP_OR_HOSTNAME_HERE")," \u9009\u9879\u6765\u914d\u7f6e Server\u3002\u8fd9\u4e2a\u9009\u9879\u5728 TLS \u8bc1\u4e66\u4e2d\u589e\u52a0\u4e86\u4e00\u4e2a\u989d\u5916\u7684\u4e3b\u673a\u540d\u6216 IP \u4f5c\u4e3a Subject Alternative Name\uff0c\u5982\u679c\u4f60\u60f3\u901a\u8fc7 IP \u548c\u4e3b\u673a\u540d\u8bbf\u95ee\uff0c\u53ef\u4ee5\u591a\u6b21\u6307\u5b9a\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/dcd62276.71994018.js b/zh/assets/js/dcd62276.703117e1.js
similarity index 99%
rename from zh/assets/js/dcd62276.71994018.js
rename to zh/assets/js/dcd62276.703117e1.js
index bf793193a..97d920761 100644
--- a/zh/assets/js/dcd62276.71994018.js
+++ b/zh/assets/js/dcd62276.703117e1.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8855],{3905:(e,n,t)=>{t.d(n,{Zo:()=>d,kt:()=>k});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function l(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var s=a.createContext({}),p=function(e){var n=a.useContext(s),t=n;return e&&(t="function"==typeof e?e(n):l(l({},n),e)),t},d=function(e){var n=p(e.components);return a.createElement(s.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,s=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),m=p(t),k=r,u=m["".concat(s,".").concat(k)]||m[k]||c[k]||i;return t?a.createElement(u,l(l({ref:n},d),{},{components:t})):a.createElement(u,l({ref:n},d))}));function k(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,l=new Array(i);l[0]=m;var o={};for(var s in n)hasOwnProperty.call(n,s)&&(o[s]=n[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var p=2;p<i;p++)l[p]=t[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},8693:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>s,contentTitle:()=>l,default:()=>c,frontMatter:()=>i,metadata:()=>o,toc:()=>p});var a=t(3117),r=(t(7294),t(3905));const i={title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",weight:60},l=void 0,o={unversionedId:"installation/packaged-components",id:"installation/packaged-components",title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",description:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\uff08AddOn\uff09",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/packaged-components.md",sourceDirName:"installation",slug:"/installation/packaged-components",permalink:"/zh/installation/packaged-components",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",weight:60},sidebar:"mySidebar",previous:{title:"\u7ba1\u7406 Server \u89d2\u8272",permalink:"/zh/installation/server-roles"},next:{title:"Kubernetes \u4eea\u8868\u677f",permalink:"/zh/installation/kube-dashboard"}},s={},p=[{value:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\uff08AddOn\uff09",id:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355addon",level:2},{value:"\u5c01\u88c5\u7684\u7ec4\u4ef6",id:"\u5c01\u88c5\u7684\u7ec4\u4ef6",level:3},{value:"\u7528\u6237 AddOn",id:"\u7528\u6237-addon",level:3},{value:"\u6587\u4ef6\u547d\u540d\u8981\u6c42",id:"\u6587\u4ef6\u547d\u540d\u8981\u6c42",level:4},{value:"\u7981\u7528\u6e05\u5355",id:"\u7981\u7528\u6e05\u5355",level:2},{value:"\u4f7f\u7528 <code>--disable</code> \u6807\u5fd7",id:"\u4f7f\u7528---disable-\u6807\u5fd7",level:3},{value:"\u4f7f\u7528 .skip \u6587\u4ef6",id:"\u4f7f\u7528-skip-\u6587\u4ef6",level:3},{value:"Helm AddOn",id:"helm-addon",level:2}],d={toc:p};function c(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},d,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("h2",{id:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355addon"},"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\uff08AddOn\uff09"),(0,r.kt)("p",null,"\u5728 server \u8282\u70b9\u4e0a\uff0c",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," \u4e2d\u7684\u4efb\u4f55\u6587\u4ef6\u90fd\u4f1a\u4ee5\u7c7b\u4f3c ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl apply")," \u7684\u65b9\u5f0f\u81ea\u52a8\u90e8\u7f72\u5230 Kubernetes\uff0c\u8fd9\u4f1a\u5728\u542f\u52a8\u548c\u66f4\u6539\u78c1\u76d8\u6587\u4ef6\u65f6\u8fdb\u884c\u3002\u5982\u679c\u4f60\u5220\u9664\u8be5\u76ee\u5f55\u7684\u6587\u4ef6\uff0c\u96c6\u7fa4\u4e2d\u76f8\u5e94\u7684\u8d44\u6e90\u4e0d\u4f1a\u88ab\u5220\u9664\u3002"),(0,r.kt)("p",null,"\u6e05\u5355\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\u4f5c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u81ea\u5b9a\u4e49\u8d44\u6e90\u8fdb\u884c\u8ddf\u8e2a\u3002\u4f60\u53ef\u4ee5\u5728\u76f8\u5e94\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u4e0a\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl describe")," \u6765\u67e5\u770b\u5e94\u7528\u6e05\u5355\u6587\u4ef6\u65f6\u9047\u5230\u7684\u4efb\u4f55\u9519\u8bef\u6216\u8b66\u544a\uff0c\u4e5f\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get event -n kube-system")," \u6765\u67e5\u770b\u8be5\u547d\u540d\u7a7a\u95f4\u7684\u6240\u6709\u4e8b\u4ef6\uff0c\u5305\u62ec\u90e8\u7f72\u63a7\u5236\u5668\u7684\u4e8b\u4ef6\u3002"),(0,r.kt)("h3",{id:"\u5c01\u88c5\u7684\u7ec4\u4ef6"},"\u5c01\u88c5\u7684\u7ec4\u4ef6"),(0,r.kt)("p",null,"K3s \u5c01\u88c5\u4e86\u5f88\u591a\u7ec4\u4ef6\uff0c\u8fd9\u4e9b\u7ec4\u4ef6\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u90e8\u7f72\u4e3a AddOn\uff0c\u5305\u62ec ",(0,r.kt)("inlineCode",{parentName:"p"},"coredns"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"traefik"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"local-storage")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"metrics-server"),"\u3002\u5d4c\u5165\u5f0f ",(0,r.kt)("inlineCode",{parentName:"p"},"servicelb")," LoadBalancer controller \u6ca1\u6709\u6e05\u5355\u6587\u4ef6\uff0c\u4f46\u7531\u4e8e\u5386\u53f2\u539f\u56e0\uff0c\u5b83\u53ef\u4ee5\u50cf ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u4e00\u6837\u88ab\u7981\u7528\u3002"),(0,r.kt)("p",null,"\u5c01\u88c5\u7ec4\u4ef6\u7684\u6e05\u5355\u7531 K3s \u7ba1\u7406\uff0c\u8bf7\u4e0d\u8981\u66f4\u6539\u3002K3s \u542f\u52a8\u65f6\uff0c\u8fd9\u4e9b\u6587\u4ef6\u90fd\u4f1a\u91cd\u65b0\u5199\u5165\u78c1\u76d8\u6765\u786e\u4fdd\u6587\u4ef6\u7684\u5b8c\u6574\u6027\u3002"),(0,r.kt)("h3",{id:"\u7528\u6237-addon"},"\u7528\u6237 AddOn"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u5c06\u5176\u4ed6\u6587\u4ef6\u653e\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\uff0c\u5c06\u5b83\u4eec\u4f5c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u90e8\u7f72\u3002\u6bcf\u4e2a\u6587\u4ef6\u53ef\u80fd\u5305\u542b\u591a\u4e2a Kubernetes \u8d44\u6e90\uff0c\u5b83\u4eec\u7531 ",(0,r.kt)("inlineCode",{parentName:"p"},"---")," YAML \u5206\u9694\u7b26\u5206\u9694\u3002\u6709\u5173\u5728\u6e05\u5355\u4e2d\u7ec4\u7ec7\u8d44\u6e90\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 Kubernetes \u6587\u6863\u7684",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/"},"\u7ba1\u7406\u8d44\u6e90"),"\u7ae0\u8282\u3002"),(0,r.kt)("h4",{id:"\u6587\u4ef6\u547d\u540d\u8981\u6c42"},"\u6587\u4ef6\u547d\u540d\u8981\u6c42"),(0,r.kt)("p",null,"\u6e05\u5355\u76ee\u5f55\u4e2d\u6bcf\u4e2a\u6587\u4ef6\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u540d\u79f0\u5747\u6d3e\u751f\u81ea\u6587\u4ef6\u7684\u57fa\u672c\u540d\u79f0\u3002\n\u8bf7\u786e\u4fdd\u6e05\u5355\u76ee\u5f55\uff08\u6216\u4efb\u4f55\u5b50\u76ee\u5f55\uff09\u4e2d\u7684\u6240\u6709\u6587\u4ef6\u540d\u79f0\u90fd\u662f\u552f\u4e00\u7684\uff0c\u5e76\u9075\u5b88 Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/names/"},"\u5bf9\u8c61\u547d\u540d\u9650\u5236"),"\u3002\n\u6b64\u5916\uff0c\u5373\u4f7f K3s \u5c01\u88c5\u7ec4\u4ef6\u5df2\u7981\u7528\uff0c\u4e5f\u4e0d\u8981\u4e0e\u9ed8\u8ba4 K3s \u5c01\u88c5\u7ec4\u4ef6\u7684\u540d\u79f0\u51b2\u7a81\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u6587\u4ef6\u540d\u5305\u542b\u4e0b\u5212\u7ebf\u5c06\u62a5\u544a\u4ee5\u4e0b\u793a\u4f8b\u9519\u8bef\uff1a"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("inlineCode",{parentName:"p"},"Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:\n   Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\":\n   a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character\n   (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')"))),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u6709\u591a\u4e2a Server \u8282\u70b9\uff0c\u5e76\u5728\u591a\u4e2a Server \u4e0a\u653e\u7f6e\u4e86\u989d\u5916\u7684 AddOn \u6e05\u5355\uff0c\u90a3\u4e48\u4f60\u9700\u8981\u786e\u4fdd\u6587\u4ef6\u5728\u8282\u70b9\u4e4b\u95f4\u4fdd\u6301\u540c\u6b65\u3002K3s \u4e0d\u4f1a\u5728\u8282\u70b9\u4e4b\u95f4\u540c\u6b65 AddOn \u7684\u5185\u5bb9\u3002\u5982\u679c\u4e0d\u540c\u7684 Server \u5c1d\u8bd5\u90e8\u7f72\u51b2\u7a81\u7684\u6e05\u5355\uff0c\u90a3\u4e48\u53ef\u80fd\u4f1a\u51fa\u73b0\u95ee\u9898\u3002")),(0,r.kt)("h2",{id:"\u7981\u7528\u6e05\u5355"},"\u7981\u7528\u6e05\u5355"),(0,r.kt)("p",null,"\u6709\u4e24\u79cd\u65b9\u6cd5\u53ef\u4ee5\u7981\u7528\u6e05\u5355\u76ee\u5f55\u4e2d\u7279\u5b9a\u5185\u5bb9\u7684\u90e8\u7f72\u3002"),(0,r.kt)("h3",{id:"\u4f7f\u7528---disable-\u6807\u5fd7"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"h3"},"--disable")," \u6807\u5fd7"),(0,r.kt)("p",null,"\u9664\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\u7684\u5176\u4ed6\u6e05\u5355\u7684 AddOn \u4e4b\u5916\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable")," \u6807\u5fd7\u6765\u7981\u7528\u4e0a\u9762\u5217\u51fa\u7684\u5c01\u88c5\u7ec4\u4ef6\u7684 AddOn\u3002\u5df2\u7981\u7528\u7684 AddOn \u4f1a\u4ece\u96c6\u7fa4\u4e2d\u5378\u8f7d\uff0c\u5e76\u4ece ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\u5220\u9664\u6e90\u6587\u4ef6\u3002"),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u7981\u6b62\u5728\u65b0\u96c6\u7fa4\u4e0a\u5b89\u88c5 Traefik\uff0c\u6216\u8005\u8981\u5378\u8f7d Traefik \u5e76\u5220\u9664\u73b0\u6709\u96c6\u7fa4\u4e2d\u7684\u6e05\u5355\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \u6765\u542f\u52a8 K3s\u3002\u8981\u7981\u7528\u591a\u4e2a\u6761\u76ee\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u9017\u53f7\u6765\u5206\u9694\u5b83\u4eec\u7684\u540d\u79f0\u6216\u591a\u6b21\u4f7f\u7528\u6807\u5fd7\u3002"),(0,r.kt)("h3",{id:"\u4f7f\u7528-skip-\u6587\u4ef6"},"\u4f7f\u7528 .skip \u6587\u4ef6"),(0,r.kt)("p",null,"\u5bf9\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," \u4e0b\u7684\u4efb\u4f55\u6587\u4ef6\uff0c\u4f60\u53ef\u4ee5\u521b\u5efa\u4e00\u4e2a ",(0,r.kt)("inlineCode",{parentName:"p"},".skip")," \u6587\u4ef6\uff0c\u7136\u540e K3s \u4f1a\u5ffd\u7565\u76f8\u5e94\u7684\u6e05\u5355\u3002",(0,r.kt)("inlineCode",{parentName:"p"},".skip")," \u6587\u4ef6\u7684\u5185\u5bb9\u4e0d\u91cd\u8981\uff0c\u56e0\u4e3a\u53ea\u4f1a\u68c0\u67e5\u6587\u4ef6\u662f\u5426\u5b58\u5728\u3002\u8bf7\u6ce8\u610f\uff0c\u5982\u679c\u4f60\u5728\u521b\u5efa AddOn \u4e4b\u540e\u518d\u521b\u5efa ",(0,r.kt)("inlineCode",{parentName:"p"},".skip")," \u6587\u4ef6\uff0c\u5219\u4e0d\u4f1a\u5220\u9664\u6216\u4fee\u6539 AddOn \u4ee5\u53ca AddOn \u521b\u5efa\u7684\u8d44\u6e90\uff0c\u53ea\u4f1a\u8ba4\u4e3a\u8be5\u6587\u4ef6\u4e0d\u5b58\u5728\u3002"),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u5982\u679c\u5728\u7b2c\u4e00\u6b21\u542f\u52a8 K3s \u4e4b\u524d\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\u521b\u5efa\u4e00\u4e2a\u7a7a\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.yaml.skip")," \u6587\u4ef6\uff0c\u90a3\u4e48 K3s \u4f1a\u8df3\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," \u7684\u90e8\u7f72\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ ls /var/lib/rancher/k3s/server/manifests\nccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip\ncoredns.yaml  traefik.yaml\n\n$ kubectl get pods -A\nNAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE\nkube-system   local-path-provisioner-64ffb68fd-xx98j   1/1     Running   0          74s\nkube-system   metrics-server-5489f84d5d-7zwkt          1/1     Running   0          74s\nkube-system   coredns-85cb69466-vcq7j                  1/1     Running   0          74s\n")),(0,r.kt)("p",null,"\u5982\u679c\u5728\u521b\u5efa ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.skip")," \u6587\u4ef6\u4e4b\u524d\u5df2\u7ecf\u90e8\u7f72\u4e86 Traefik\uff0cTraefik \u5c06\u4fdd\u6301\u539f\u6837\uff0c\u5e76\u4e14\u5347\u7ea7 K3s \u65f6\u7684\u540e\u7eed\u66f4\u65b0\u4e0d\u4f1a\u5f71\u54cd Traefik\u3002"),(0,r.kt)("h2",{id:"helm-addon"},"Helm AddOn"),(0,r.kt)("p",null,"\u6709\u5173\u901a\u8fc7\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\u6765\u7ba1\u7406 Helm Chart \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/helm/"},"Helm"),"\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8855],{3905:(e,n,t)=>{t.d(n,{Zo:()=>d,kt:()=>k});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function i(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function l(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?i(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):i(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function o(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},i=Object.keys(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(a=0;a<i.length;a++)t=i[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var s=a.createContext({}),p=function(e){var n=a.useContext(s),t=n;return e&&(t="function"==typeof e?e(n):l(l({},n),e)),t},d=function(e){var n=p(e.components);return a.createElement(s.Provider,{value:n},e.children)},c={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,i=e.originalType,s=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),m=p(t),k=r,u=m["".concat(s,".").concat(k)]||m[k]||c[k]||i;return t?a.createElement(u,l(l({ref:n},d),{},{components:t})):a.createElement(u,l({ref:n},d))}));function k(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var i=t.length,l=new Array(i);l[0]=m;var o={};for(var s in n)hasOwnProperty.call(n,s)&&(o[s]=n[s]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var p=2;p<i;p++)l[p]=t[p];return a.createElement.apply(null,l)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},8693:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>s,contentTitle:()=>l,default:()=>c,frontMatter:()=>i,metadata:()=>o,toc:()=>p});var a=t(3117),r=(t(7294),t(3905));const i={title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",weight:60},l=void 0,o={unversionedId:"installation/packaged-components",id:"installation/packaged-components",title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",description:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\uff08AddOn\uff09",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/packaged-components.md",sourceDirName:"installation",slug:"/installation/packaged-components",permalink:"/zh/installation/packaged-components",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",weight:60},sidebar:"mySidebar",previous:{title:"\u7ba1\u7406 Server \u89d2\u8272",permalink:"/zh/installation/server-roles"},next:{title:"Kubernetes \u4eea\u8868\u677f",permalink:"/zh/installation/kube-dashboard"}},s={},p=[{value:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\uff08AddOn\uff09",id:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355addon",level:2},{value:"\u5c01\u88c5\u7684\u7ec4\u4ef6",id:"\u5c01\u88c5\u7684\u7ec4\u4ef6",level:3},{value:"\u7528\u6237 AddOn",id:"\u7528\u6237-addon",level:3},{value:"\u6587\u4ef6\u547d\u540d\u8981\u6c42",id:"\u6587\u4ef6\u547d\u540d\u8981\u6c42",level:4},{value:"\u7981\u7528\u6e05\u5355",id:"\u7981\u7528\u6e05\u5355",level:2},{value:"\u4f7f\u7528 <code>--disable</code> \u6807\u5fd7",id:"\u4f7f\u7528---disable-\u6807\u5fd7",level:3},{value:"\u4f7f\u7528 .skip \u6587\u4ef6",id:"\u4f7f\u7528-skip-\u6587\u4ef6",level:3},{value:"Helm AddOn",id:"helm-addon",level:2}],d={toc:p};function c(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},d,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("h2",{id:"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355addon"},"\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\uff08AddOn\uff09"),(0,r.kt)("p",null,"\u5728 server \u8282\u70b9\u4e0a\uff0c",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," \u4e2d\u7684\u4efb\u4f55\u6587\u4ef6\u90fd\u4f1a\u4ee5\u7c7b\u4f3c ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl apply")," \u7684\u65b9\u5f0f\u81ea\u52a8\u90e8\u7f72\u5230 Kubernetes\uff0c\u8fd9\u4f1a\u5728\u542f\u52a8\u548c\u66f4\u6539\u78c1\u76d8\u6587\u4ef6\u65f6\u8fdb\u884c\u3002\u5982\u679c\u4f60\u5220\u9664\u8be5\u76ee\u5f55\u7684\u6587\u4ef6\uff0c\u96c6\u7fa4\u4e2d\u76f8\u5e94\u7684\u8d44\u6e90\u4e0d\u4f1a\u88ab\u5220\u9664\u3002"),(0,r.kt)("p",null,"\u6e05\u5355\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"kube-system")," \u547d\u540d\u7a7a\u95f4\u4e2d\u4f5c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u81ea\u5b9a\u4e49\u8d44\u6e90\u8fdb\u884c\u8ddf\u8e2a\u3002\u4f60\u53ef\u4ee5\u5728\u76f8\u5e94\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u4e0a\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl describe")," \u6765\u67e5\u770b\u5e94\u7528\u6e05\u5355\u6587\u4ef6\u65f6\u9047\u5230\u7684\u4efb\u4f55\u9519\u8bef\u6216\u8b66\u544a\uff0c\u4e5f\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"kubectl get event -n kube-system")," \u6765\u67e5\u770b\u8be5\u547d\u540d\u7a7a\u95f4\u7684\u6240\u6709\u4e8b\u4ef6\uff0c\u5305\u62ec\u90e8\u7f72\u63a7\u5236\u5668\u7684\u4e8b\u4ef6\u3002"),(0,r.kt)("h3",{id:"\u5c01\u88c5\u7684\u7ec4\u4ef6"},"\u5c01\u88c5\u7684\u7ec4\u4ef6"),(0,r.kt)("p",null,"K3s \u5c01\u88c5\u4e86\u5f88\u591a\u7ec4\u4ef6\uff0c\u8fd9\u4e9b\u7ec4\u4ef6\u901a\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u90e8\u7f72\u4e3a AddOn\uff0c\u5305\u62ec ",(0,r.kt)("inlineCode",{parentName:"p"},"coredns"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"traefik"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"local-storage")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"metrics-server"),"\u3002\u5d4c\u5165\u5f0f ",(0,r.kt)("inlineCode",{parentName:"p"},"servicelb")," LoadBalancer controller \u6ca1\u6709\u6e05\u5355\u6587\u4ef6\uff0c\u4f46\u7531\u4e8e\u5386\u53f2\u539f\u56e0\uff0c\u5b83\u53ef\u4ee5\u50cf ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u4e00\u6837\u88ab\u7981\u7528\u3002"),(0,r.kt)("p",null,"\u5c01\u88c5\u7ec4\u4ef6\u7684\u6e05\u5355\u7531 K3s \u7ba1\u7406\uff0c\u8bf7\u4e0d\u8981\u66f4\u6539\u3002K3s \u542f\u52a8\u65f6\uff0c\u8fd9\u4e9b\u6587\u4ef6\u90fd\u4f1a\u91cd\u65b0\u5199\u5165\u78c1\u76d8\u6765\u786e\u4fdd\u6587\u4ef6\u7684\u5b8c\u6574\u6027\u3002"),(0,r.kt)("h3",{id:"\u7528\u6237-addon"},"\u7528\u6237 AddOn"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u5c06\u5176\u4ed6\u6587\u4ef6\u653e\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\uff0c\u5c06\u5b83\u4eec\u4f5c\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u90e8\u7f72\u3002\u6bcf\u4e2a\u6587\u4ef6\u53ef\u80fd\u5305\u542b\u591a\u4e2a Kubernetes \u8d44\u6e90\uff0c\u5b83\u4eec\u7531 ",(0,r.kt)("inlineCode",{parentName:"p"},"---")," YAML \u5206\u9694\u7b26\u5206\u9694\u3002\u6709\u5173\u5728\u6e05\u5355\u4e2d\u7ec4\u7ec7\u8d44\u6e90\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 Kubernetes \u6587\u6863\u7684",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/"},"\u7ba1\u7406\u8d44\u6e90"),"\u7ae0\u8282\u3002"),(0,r.kt)("h4",{id:"\u6587\u4ef6\u547d\u540d\u8981\u6c42"},"\u6587\u4ef6\u547d\u540d\u8981\u6c42"),(0,r.kt)("p",null,"\u6e05\u5355\u76ee\u5f55\u4e2d\u6bcf\u4e2a\u6587\u4ef6\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"AddOn")," \u540d\u79f0\u5747\u6d3e\u751f\u81ea\u6587\u4ef6\u7684\u57fa\u672c\u540d\u79f0\u3002\n\u8bf7\u786e\u4fdd\u6e05\u5355\u76ee\u5f55\uff08\u6216\u4efb\u4f55\u5b50\u76ee\u5f55\uff09\u4e2d\u7684\u6240\u6709\u6587\u4ef6\u540d\u79f0\u90fd\u662f\u552f\u4e00\u7684\uff0c\u5e76\u9075\u5b88 Kubernetes ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/concepts/overview/working-with-objects/names/"},"\u5bf9\u8c61\u547d\u540d\u9650\u5236"),"\u3002\n\u6b64\u5916\uff0c\u5373\u4f7f K3s \u5c01\u88c5\u7ec4\u4ef6\u5df2\u7981\u7528\uff0c\u4e5f\u4e0d\u8981\u4e0e\u9ed8\u8ba4 K3s \u5c01\u88c5\u7ec4\u4ef6\u7684\u540d\u79f0\u51b2\u7a81\u3002"),(0,r.kt)("p",null,"\u5982\u679c\u6587\u4ef6\u540d\u5305\u542b\u4e0b\u5212\u7ebf\u5c06\u62a5\u544a\u4ee5\u4e0b\u793a\u4f8b\u9519\u8bef\uff1a"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("inlineCode",{parentName:"p"},"Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:\n   Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\":\n   a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character\n   (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*')"))),(0,r.kt)("admonition",{type:"caution"},(0,r.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u6709\u591a\u4e2a Server \u8282\u70b9\uff0c\u5e76\u5728\u591a\u4e2a Server \u4e0a\u653e\u7f6e\u4e86\u989d\u5916\u7684 AddOn \u6e05\u5355\uff0c\u90a3\u4e48\u4f60\u9700\u8981\u786e\u4fdd\u6587\u4ef6\u5728\u8282\u70b9\u4e4b\u95f4\u4fdd\u6301\u540c\u6b65\u3002K3s \u4e0d\u4f1a\u5728\u8282\u70b9\u4e4b\u95f4\u540c\u6b65 AddOn \u7684\u5185\u5bb9\u3002\u5982\u679c\u4e0d\u540c\u7684 Server \u5c1d\u8bd5\u90e8\u7f72\u51b2\u7a81\u7684\u6e05\u5355\uff0c\u90a3\u4e48\u53ef\u80fd\u4f1a\u51fa\u73b0\u95ee\u9898\u3002")),(0,r.kt)("h2",{id:"\u7981\u7528\u6e05\u5355"},"\u7981\u7528\u6e05\u5355"),(0,r.kt)("p",null,"\u6709\u4e24\u79cd\u65b9\u6cd5\u53ef\u4ee5\u7981\u7528\u6e05\u5355\u76ee\u5f55\u4e2d\u7279\u5b9a\u5185\u5bb9\u7684\u90e8\u7f72\u3002"),(0,r.kt)("h3",{id:"\u4f7f\u7528---disable-\u6807\u5fd7"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"h3"},"--disable")," \u6807\u5fd7"),(0,r.kt)("p",null,"\u9664\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\u7684\u5176\u4ed6\u6e05\u5355\u7684 AddOn \u4e4b\u5916\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable")," \u6807\u5fd7\u6765\u7981\u7528\u4e0a\u9762\u5217\u51fa\u7684\u5c01\u88c5\u7ec4\u4ef6\u7684 AddOn\u3002\u5df2\u7981\u7528\u7684 AddOn \u4f1a\u4ece\u96c6\u7fa4\u4e2d\u5378\u8f7d\uff0c\u5e76\u4ece ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\u5220\u9664\u6e90\u6587\u4ef6\u3002"),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u8981\u7981\u6b62\u5728\u65b0\u96c6\u7fa4\u4e0a\u5b89\u88c5 Traefik\uff0c\u6216\u8005\u8981\u5378\u8f7d Traefik \u5e76\u5220\u9664\u73b0\u6709\u96c6\u7fa4\u4e2d\u7684\u6e05\u5355\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable=traefik")," \u6765\u542f\u52a8 K3s\u3002\u8981\u7981\u7528\u591a\u4e2a\u6761\u76ee\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528\u9017\u53f7\u6765\u5206\u9694\u5b83\u4eec\u7684\u540d\u79f0\u6216\u591a\u6b21\u4f7f\u7528\u6807\u5fd7\u3002"),(0,r.kt)("h3",{id:"\u4f7f\u7528-skip-\u6587\u4ef6"},"\u4f7f\u7528 .skip \u6587\u4ef6"),(0,r.kt)("p",null,"\u5bf9\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/manifests")," \u4e0b\u7684\u4efb\u4f55\u6587\u4ef6\uff0c\u4f60\u53ef\u4ee5\u521b\u5efa\u4e00\u4e2a ",(0,r.kt)("inlineCode",{parentName:"p"},".skip")," \u6587\u4ef6\uff0c\u7136\u540e K3s \u4f1a\u5ffd\u7565\u76f8\u5e94\u7684\u6e05\u5355\u3002",(0,r.kt)("inlineCode",{parentName:"p"},".skip")," \u6587\u4ef6\u7684\u5185\u5bb9\u4e0d\u91cd\u8981\uff0c\u56e0\u4e3a\u53ea\u4f1a\u68c0\u67e5\u6587\u4ef6\u662f\u5426\u5b58\u5728\u3002\u8bf7\u6ce8\u610f\uff0c\u5982\u679c\u4f60\u5728\u521b\u5efa AddOn \u4e4b\u540e\u518d\u521b\u5efa ",(0,r.kt)("inlineCode",{parentName:"p"},".skip")," \u6587\u4ef6\uff0c\u5219\u4e0d\u4f1a\u5220\u9664\u6216\u4fee\u6539 AddOn \u4ee5\u53ca AddOn \u521b\u5efa\u7684\u8d44\u6e90\uff0c\u53ea\u4f1a\u8ba4\u4e3a\u8be5\u6587\u4ef6\u4e0d\u5b58\u5728\u3002"),(0,r.kt)("p",null,"\u4f8b\u5982\uff0c\u5982\u679c\u5728\u7b2c\u4e00\u6b21\u542f\u52a8 K3s \u4e4b\u524d\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"manifests")," \u76ee\u5f55\u4e2d\u521b\u5efa\u4e00\u4e2a\u7a7a\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.yaml.skip")," \u6587\u4ef6\uff0c\u90a3\u4e48 K3s \u4f1a\u8df3\u8fc7 ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.yaml")," \u7684\u90e8\u7f72\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"$ ls /var/lib/rancher/k3s/server/manifests\nccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip\ncoredns.yaml  traefik.yaml\n\n$ kubectl get pods -A\nNAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE\nkube-system   local-path-provisioner-64ffb68fd-xx98j   1/1     Running   0          74s\nkube-system   metrics-server-5489f84d5d-7zwkt          1/1     Running   0          74s\nkube-system   coredns-85cb69466-vcq7j                  1/1     Running   0          74s\n")),(0,r.kt)("p",null,"\u5982\u679c\u5728\u521b\u5efa ",(0,r.kt)("inlineCode",{parentName:"p"},"traefik.skip")," \u6587\u4ef6\u4e4b\u524d\u5df2\u7ecf\u90e8\u7f72\u4e86 Traefik\uff0cTraefik \u5c06\u4fdd\u6301\u539f\u6837\uff0c\u5e76\u4e14\u5347\u7ea7 K3s \u65f6\u7684\u540e\u7eed\u66f4\u65b0\u4e0d\u4f1a\u5f71\u54cd Traefik\u3002"),(0,r.kt)("h2",{id:"helm-addon"},"Helm AddOn"),(0,r.kt)("p",null,"\u6709\u5173\u901a\u8fc7\u81ea\u52a8\u90e8\u7f72\u6e05\u5355\u6765\u7ba1\u7406 Helm Chart \u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/helm/"},"Helm"),"\u3002"))}c.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/de044cc7.4e4a427b.js b/zh/assets/js/de044cc7.46859cc3.js
similarity index 98%
rename from zh/assets/js/de044cc7.4e4a427b.js
rename to zh/assets/js/de044cc7.46859cc3.js
index ce96d32dc..fb52ae57e 100644
--- a/zh/assets/js/de044cc7.4e4a427b.js
+++ b/zh/assets/js/de044cc7.46859cc3.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3374],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>b});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},s=Object.keys(e);for(a=0;a<s.length;a++)n=s[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)n=s[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var u=a.createContext({}),i=function(e){var t=a.useContext(u),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},d=function(e){var t=i(e.components);return a.createElement(u.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},p=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,s=e.originalType,u=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),p=i(n),b=r,m=p["".concat(u,".").concat(b)]||p[b]||c[b]||s;return n?a.createElement(m,l(l({ref:t},d),{},{components:n})):a.createElement(m,l({ref:t},d))}));function b(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var s=n.length,l=new Array(s);l[0]=p;var o={};for(var u in t)hasOwnProperty.call(t,u)&&(o[u]=t[u]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var i=2;i<s;i++)l[i]=n[i];return a.createElement.apply(null,l)}return a.createElement.apply(null,n)}p.displayName="MDXCreateElement"},7552:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>u,contentTitle:()=>l,default:()=>m,frontMatter:()=>s,metadata:()=>o,toc:()=>i});var a=n(3117),r=(n(7294),n(3905));const s={title:"Kubernetes \u4eea\u8868\u677f",weight:60},l=void 0,o={unversionedId:"installation/kube-dashboard",id:"installation/kube-dashboard",title:"Kubernetes \u4eea\u8868\u677f",description:"\u672c\u5b89\u88c5\u6307\u5357\u5c06\u5e2e\u52a9\u4f60\u5728 K3s \u4e0a\u90e8\u7f72\u548c\u914d\u7f6e Kubernetes \u4eea\u8868\u677f\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",sourceDirName:"installation",slug:"/installation/kube-dashboard",permalink:"/zh/installation/kube-dashboard",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"Kubernetes \u4eea\u8868\u677f",weight:60},sidebar:"mySidebar",previous:{title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",permalink:"/zh/installation/packaged-components"},next:{title:"\u5378\u8f7d K3s",permalink:"/zh/installation/uninstall"}},u={},i=[{value:"\u90e8\u7f72 Kubernetes \u4eea\u8868\u677f",id:"\u90e8\u7f72-kubernetes-\u4eea\u8868\u677f",level:3},{value:"\u4eea\u8868\u677f RBAC \u914d\u7f6e",id:"\u4eea\u8868\u677f-rbac-\u914d\u7f6e",level:3},{value:"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c",id:"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c",level:3},{value:"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f",id:"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f",level:3},{value:"\u9ad8\u7ea7\uff1a\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f",id:"\u9ad8\u7ea7\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f",level:4},{value:"\u5347\u7ea7\u4eea\u8868\u677f",id:"\u5347\u7ea7\u4eea\u8868\u677f",level:3},{value:"\u5220\u9664\u4eea\u8868\u677f\u548c admin-user \u914d\u7f6e",id:"\u5220\u9664\u4eea\u8868\u677f\u548c-admin-user-\u914d\u7f6e",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},c=d("Tabs"),p=d("TabItem"),b={toc:i};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},b,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u5b89\u88c5\u6307\u5357\u5c06\u5e2e\u52a9\u4f60\u5728 K3s \u4e0a\u90e8\u7f72\u548c\u914d\u7f6e ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/"},"Kubernetes \u4eea\u8868\u677f"),"\u3002"),(0,r.kt)("h3",{id:"\u90e8\u7f72-kubernetes-\u4eea\u8868\u677f"},"\u90e8\u7f72 Kubernetes \u4eea\u8868\u677f"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"GITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml\n")),(0,r.kt)("h3",{id:"\u4eea\u8868\u677f-rbac-\u914d\u7f6e"},"\u4eea\u8868\u677f RBAC \u914d\u7f6e"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u91cd\u8981\u63d0\u793a"),"\uff1a\u5728\u672c\u6307\u5357\u4e2d\u521b\u5efa\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," \u5c06\u5728\u4eea\u8868\u677f\u4e2d\u62e5\u6709\u7ba1\u7406\u6743\u9650\u3002")),(0,r.kt)("p",null,"\u521b\u5efa\u4ee5\u4e0b\u8d44\u6e90\u6e05\u5355\u6587\u4ef6\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: ServiceAccount\nmetadata:\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user-role.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: admin-user\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,"\u90e8\u7f72 ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," \u914d\u7f6e\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c"},"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(p,{value:"v1.24 \u548c\u66f4\u65b0\u7248\u672c",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard create token admin-user\n"))),(0,r.kt)(p,{value:"v1.23 \u548c\u66f4\u4f4e\u7248\u672c",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'\n")))),(0,r.kt)("h3",{id:"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f"},"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f"),(0,r.kt)("p",null,"\u8981\u8bbf\u95ee\u4eea\u8868\u677f\uff0c\u4f60\u5fc5\u987b\u4e3a\u4f60\u7684 K3s \u96c6\u7fa4\u521b\u5efa\u4e00\u4e2a\u5b89\u5168\u901a\u9053\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl proxy\n")),(0,r.kt)("p",null,"\u73b0\u5728\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u7f51\u5740\u8bbf\u95ee\u4eea\u8868\u76d8\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/"),(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"li"},"admin-user")," \u6301\u6709\u8005\u4ee4\u724c\u8fdb\u884c",(0,r.kt)("inlineCode",{parentName:"li"},"\u767b\u5f55"),"\u3002")),(0,r.kt)("h4",{id:"\u9ad8\u7ea7\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f"},"\u9ad8\u7ea7\uff1a\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f"),(0,r.kt)("p",null,"\u8bf7\u53c2\u9605\u4eea\u8868\u677f\u6587\u6863\uff1a\u4f7f\u7528",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/"},"\u7aef\u53e3\u8f6c\u53d1"),"\u8bbf\u95ee\u96c6\u7fa4\u4e2d\u7684\u5e94\u7528\u7a0b\u5e8f\u3002"),(0,r.kt)("h3",{id:"\u5347\u7ea7\u4eea\u8868\u677f"},"\u5347\u7ea7\u4eea\u8868\u677f"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nGITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"\u5220\u9664\u4eea\u8868\u677f\u548c-admin-user-\u914d\u7f6e"},"\u5220\u9664\u4eea\u8868\u677f\u548c admin-user \u914d\u7f6e"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nsudo k3s kubectl delete clusterrolebinding kubernetes-dashboard\nsudo k3s kubectl delete clusterrole kubernetes-dashboard\n")))}m.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3374],{3905:(e,t,n)=>{n.d(t,{Zo:()=>d,kt:()=>b});var a=n(7294);function r(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function s(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function l(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?s(Object(n),!0).forEach((function(t){r(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):s(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function o(e,t){if(null==e)return{};var n,a,r=function(e,t){if(null==e)return{};var n,a,r={},s=Object.keys(e);for(a=0;a<s.length;a++)n=s[a],t.indexOf(n)>=0||(r[n]=e[n]);return r}(e,t);if(Object.getOwnPropertySymbols){var s=Object.getOwnPropertySymbols(e);for(a=0;a<s.length;a++)n=s[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(r[n]=e[n])}return r}var u=a.createContext({}),i=function(e){var t=a.useContext(u),n=t;return e&&(n="function"==typeof e?e(t):l(l({},t),e)),n},d=function(e){var t=i(e.components);return a.createElement(u.Provider,{value:t},e.children)},c={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},p=a.forwardRef((function(e,t){var n=e.components,r=e.mdxType,s=e.originalType,u=e.parentName,d=o(e,["components","mdxType","originalType","parentName"]),p=i(n),b=r,m=p["".concat(u,".").concat(b)]||p[b]||c[b]||s;return n?a.createElement(m,l(l({ref:t},d),{},{components:n})):a.createElement(m,l({ref:t},d))}));function b(e,t){var n=arguments,r=t&&t.mdxType;if("string"==typeof e||r){var s=n.length,l=new Array(s);l[0]=p;var o={};for(var u in t)hasOwnProperty.call(t,u)&&(o[u]=t[u]);o.originalType=e,o.mdxType="string"==typeof e?e:r,l[1]=o;for(var i=2;i<s;i++)l[i]=n[i];return a.createElement.apply(null,l)}return a.createElement.apply(null,n)}p.displayName="MDXCreateElement"},7552:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>u,contentTitle:()=>l,default:()=>m,frontMatter:()=>s,metadata:()=>o,toc:()=>i});var a=n(3117),r=(n(7294),n(3905));const s={title:"Kubernetes \u4eea\u8868\u677f",weight:60},l=void 0,o={unversionedId:"installation/kube-dashboard",id:"installation/kube-dashboard",title:"Kubernetes \u4eea\u8868\u677f",description:"\u672c\u5b89\u88c5\u6307\u5357\u5c06\u5e2e\u52a9\u4f60\u5728 K3s \u4e0a\u90e8\u7f72\u548c\u914d\u7f6e Kubernetes \u4eea\u8868\u677f\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",sourceDirName:"installation",slug:"/installation/kube-dashboard",permalink:"/zh/installation/kube-dashboard",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"Kubernetes \u4eea\u8868\u677f",weight:60},sidebar:"mySidebar",previous:{title:"\u7ba1\u7406\u5c01\u88c5\u7684\u7ec4\u4ef6",permalink:"/zh/installation/packaged-components"},next:{title:"\u5378\u8f7d K3s",permalink:"/zh/installation/uninstall"}},u={},i=[{value:"\u90e8\u7f72 Kubernetes \u4eea\u8868\u677f",id:"\u90e8\u7f72-kubernetes-\u4eea\u8868\u677f",level:3},{value:"\u4eea\u8868\u677f RBAC \u914d\u7f6e",id:"\u4eea\u8868\u677f-rbac-\u914d\u7f6e",level:3},{value:"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c",id:"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c",level:3},{value:"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f",id:"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f",level:3},{value:"\u9ad8\u7ea7\uff1a\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f",id:"\u9ad8\u7ea7\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f",level:4},{value:"\u5347\u7ea7\u4eea\u8868\u677f",id:"\u5347\u7ea7\u4eea\u8868\u677f",level:3},{value:"\u5220\u9664\u4eea\u8868\u677f\u548c admin-user \u914d\u7f6e",id:"\u5220\u9664\u4eea\u8868\u677f\u548c-admin-user-\u914d\u7f6e",level:3}],d=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,r.kt)("div",t)},c=d("Tabs"),p=d("TabItem"),b={toc:i};function m(e){let{components:t,...n}=e;return(0,r.kt)("wrapper",(0,a.Z)({},b,n,{components:t,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u5b89\u88c5\u6307\u5357\u5c06\u5e2e\u52a9\u4f60\u5728 K3s \u4e0a\u90e8\u7f72\u548c\u914d\u7f6e ",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/"},"Kubernetes \u4eea\u8868\u677f"),"\u3002"),(0,r.kt)("h3",{id:"\u90e8\u7f72-kubernetes-\u4eea\u8868\u677f"},"\u90e8\u7f72 Kubernetes \u4eea\u8868\u677f"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"GITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml\n")),(0,r.kt)("h3",{id:"\u4eea\u8868\u677f-rbac-\u914d\u7f6e"},"\u4eea\u8868\u677f RBAC \u914d\u7f6e"),(0,r.kt)("blockquote",null,(0,r.kt)("p",{parentName:"blockquote"},(0,r.kt)("strong",{parentName:"p"},"\u91cd\u8981\u63d0\u793a"),"\uff1a\u5728\u672c\u6307\u5357\u4e2d\u521b\u5efa\u7684 ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," \u5c06\u5728\u4eea\u8868\u677f\u4e2d\u62e5\u6709\u7ba1\u7406\u6743\u9650\u3002")),(0,r.kt)("p",null,"\u521b\u5efa\u4ee5\u4e0b\u8d44\u6e90\u6e05\u5355\u6587\u4ef6\uff1a"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: v1\nkind: ServiceAccount\nmetadata:\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"dashboard.admin-user-role.yml")),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRoleBinding\nmetadata:\n  name: admin-user\nroleRef:\n  apiGroup: rbac.authorization.k8s.io\n  kind: ClusterRole\n  name: cluster-admin\nsubjects:\n- kind: ServiceAccount\n  name: admin-user\n  namespace: kubernetes-dashboard\n")),(0,r.kt)("p",null,"\u90e8\u7f72 ",(0,r.kt)("inlineCode",{parentName:"p"},"admin-user")," \u914d\u7f6e\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c"},"\u83b7\u53d6\u6301\u6709\u8005\u4ee4\u724c"),(0,r.kt)(c,{mdxType:"Tabs"},(0,r.kt)(p,{value:"v1.24 \u548c\u66f4\u65b0\u7248\u672c",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard create token admin-user\n"))),(0,r.kt)(p,{value:"v1.23 \u548c\u66f4\u4f4e\u7248\u672c",mdxType:"TabItem"},(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'\n")))),(0,r.kt)("h3",{id:"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f"},"\u672c\u5730\u8bbf\u95ee\u4eea\u8868\u677f"),(0,r.kt)("p",null,"\u8981\u8bbf\u95ee\u4eea\u8868\u677f\uff0c\u4f60\u5fc5\u987b\u4e3a\u4f60\u7684 K3s \u96c6\u7fa4\u521b\u5efa\u4e00\u4e2a\u5b89\u5168\u901a\u9053\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl proxy\n")),(0,r.kt)("p",null,"\u73b0\u5728\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u4ee5\u4e0b\u7f51\u5740\u8bbf\u95ee\u4eea\u8868\u76d8\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/"),(0,r.kt)("li",{parentName:"ul"},"\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"li"},"admin-user")," \u6301\u6709\u8005\u4ee4\u724c\u8fdb\u884c",(0,r.kt)("inlineCode",{parentName:"li"},"\u767b\u5f55"),"\u3002")),(0,r.kt)("h4",{id:"\u9ad8\u7ea7\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f"},"\u9ad8\u7ea7\uff1a\u8fdc\u7a0b\u8bbf\u95ee\u4eea\u8868\u677f"),(0,r.kt)("p",null,"\u8bf7\u53c2\u9605\u4eea\u8868\u677f\u6587\u6863\uff1a\u4f7f\u7528",(0,r.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/"},"\u7aef\u53e3\u8f6c\u53d1"),"\u8bbf\u95ee\u96c6\u7fa4\u4e2d\u7684\u5e94\u7528\u7a0b\u5e8f\u3002"),(0,r.kt)("h3",{id:"\u5347\u7ea7\u4eea\u8868\u677f"},"\u5347\u7ea7\u4eea\u8868\u677f"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nGITHUB_URL=https://github.com/kubernetes/dashboard/releases\nVERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||')\nsudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml\n")),(0,r.kt)("h3",{id:"\u5220\u9664\u4eea\u8868\u677f\u548c-admin-user-\u914d\u7f6e"},"\u5220\u9664\u4eea\u8868\u677f\u548c admin-user \u914d\u7f6e"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"sudo k3s kubectl delete ns kubernetes-dashboard\nsudo k3s kubectl delete clusterrolebinding kubernetes-dashboard\nsudo k3s kubectl delete clusterrole kubernetes-dashboard\n")))}m.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/df5dd15e.0bda0a7d.js b/zh/assets/js/df5dd15e.052c2090.js
similarity index 99%
rename from zh/assets/js/df5dd15e.0bda0a7d.js
rename to zh/assets/js/df5dd15e.052c2090.js
index e09446f72..70a237478 100644
--- a/zh/assets/js/df5dd15e.0bda0a7d.js
+++ b/zh/assets/js/df5dd15e.052c2090.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8178],{3905:(e,t,r)=>{r.d(t,{Zo:()=>o,kt:()=>N});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function p(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?p(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):p(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},p=Object.keys(e);for(a=0;a<p.length;a++)r=p[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var p=Object.getOwnPropertySymbols(e);for(a=0;a<p.length;a++)r=p[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var i=a.createContext({}),c=function(e){var t=a.useContext(i),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},o=function(e){var t=c(e.components);return a.createElement(i.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,p=e.originalType,i=e.parentName,o=s(e,["components","mdxType","originalType","parentName"]),k=c(r),N=n,u=k["".concat(i,".").concat(N)]||k[N]||m[N]||p;return r?a.createElement(u,l(l({ref:t},o),{},{components:r})):a.createElement(u,l({ref:t},o))}));function N(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var p=r.length,l=new Array(p);l[0]=k;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:n,l[1]=s;for(var c=2;c<p;c++)l[c]=r[c];return a.createElement.apply(null,l)}return a.createElement.apply(null,r)}k.displayName="MDXCreateElement"},6709:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>u,frontMatter:()=>p,metadata:()=>s,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const p={title:"secrets-encrypt"},l="k3s secrets-encrypt",s={unversionedId:"cli/secrets-encrypt",id:"cli/secrets-encrypt",title:"secrets-encrypt",description:"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 Secret \u52a0\u5bc6\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",sourceDirName:"cli",slug:"/cli/secrets-encrypt",permalink:"/zh/cli/secrets-encrypt",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"secrets-encrypt"},sidebar:"mySidebar",previous:{title:"etcd-snapshot",permalink:"/zh/cli/etcd-snapshot"},next:{title:"token",permalink:"/zh/cli/token"}},i={},c=[{value:"Secret \u52a0\u5bc6\u5de5\u5177",id:"secret-\u52a0\u5bc6\u5de5\u5177",level:2},{value:"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362",id:"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362",level:3},{value:"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6",id:"\u7981\u7528\u542f\u7528-secret-\u52a0\u5bc6",level:3},{value:"Secret \u52a0\u5bc6\u72b6\u6001",id:"secret-\u52a0\u5bc6\u72b6\u6001",level:3}],o=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},m=o("Tabs"),k=o("TabItem"),N={toc:c};function u(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},N,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h1",{id:"k3s-secrets-encrypt"},"k3s secrets-encrypt"),(0,n.kt)("p",null,"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,n.kt)("a",{parentName:"p",href:"/zh/security/secrets-encryption"},"Secret \u52a0\u5bc6"),"\u3002"),(0,n.kt)("h2",{id:"secret-\u52a0\u5bc6\u5de5\u5177"},"Secret \u52a0\u5bc6\u5de5\u5177"),(0,n.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,n.kt)("p",{parentName:"admonition"},"\u4ece ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1"},"v1.21.8+k3s1")," \u8d77\u53ef\u7528")),(0,n.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a CLI \u5de5\u5177 ",(0,n.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),"\uff0c\u53ef\u4ee5\u81ea\u52a8\u63a7\u5236\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6"),(0,n.kt)("li",{parentName:"ul"},"\u6dfb\u52a0\u65b0\u7684\u52a0\u5bc6\u5bc6\u94a5"),(0,n.kt)("li",{parentName:"ul"},"\u8f6e\u6362\u548c\u5220\u9664\u52a0\u5bc6\u5bc6\u94a5"),(0,n.kt)("li",{parentName:"ul"},"\u91cd\u65b0\u52a0\u5bc6 Secret")),(0,n.kt)("admonition",{type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4e0d\u9075\u5faa\u6b63\u786e\u7684\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362\u7a0b\u5e8f\uff0c\u4f60\u7684\u96c6\u7fa4\u53ef\u80fd\u4f1a\u6c38\u4e45\u635f\u574f\u3002\u56e0\u6b64\uff0c\u8bf7\u8c28\u614e\u64cd\u4f5c\u3002")),(0,n.kt)("h3",{id:"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362"},"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362"),(0,n.kt)(m,{mdxType:"Tabs"},(0,n.kt)(k,{value:"\u5355\u670d\u52a1\u5668",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u8981\u5728\u5355\u670d\u52a1\u5668\u96c6\u7fa4\u4e0a\u8f6e\u6362 Secret \u52a0\u5bc6\u5bc6\u94a5\uff1a"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"\u4f7f\u7528\u6807\u5fd7 ",(0,n.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")," \u542f\u52a8 K3s Server")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"\u76ee\u524d",(0,n.kt)("em",{parentName:"p"},"\u4e0d"),"\u652f\u6301\u5728\u6ca1\u6709\u52a0\u5bc6\u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s \u5e76\u5728\u540e\u7eed\u542f\u7528\u5b83\u3002")),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u51c6\u5907"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u8f6e\u6362"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("admonition",{parentName:"li",type:"info"},(0,n.kt)("p",{parentName:"admonition"},"K3s \u6bcf\u79d2\u5c06\u91cd\u65b0\u52a0\u5bc6\u7ea6 5 \u4e2a Secret\u3002",(0,n.kt)("br",{parentName:"p"}),"\n","\u5177\u6709\u5927\u91cf Secret \u7684\u96c6\u7fa4\u53ef\u80fd\u9700\u8981\u51e0\u5206\u949f\u624d\u80fd\u91cd\u65b0\u52a0\u5bc6\u3002")),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))))),(0,n.kt)(k,{value:"\u9ad8\u53ef\u7528",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u548c\u5916\u90e8\u6570\u636e\u5e93\u96c6\u7fa4\u7684\u6b65\u9aa4\u76f8\u540c\u3002"),(0,n.kt)("p",null,"\u8981\u5728 HA \u8bbe\u7f6e\u4e0a\u8f6e\u6362 Secret \u52a0\u5bc6\u5bc6\u94a5\uff1a"),(0,n.kt)("admonition",{title:"\u6ce8\u610f\u4e8b\u9879",type:"note"},(0,n.kt)("ul",{parentName:"admonition"},(0,n.kt)("li",{parentName:"ul"},"\u76ee\u524d",(0,n.kt)("em",{parentName:"li"},"\u4e0d"),"\u652f\u6301\u5728\u6ca1\u6709\u52a0\u5bc6\u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s \u5e76\u5728\u540e\u7eed\u542f\u7528\u5b83\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u867d\u7136\u4e0d\u662f\u5fc5\u9700\u7684\uff0c\u4f46\u5efa\u8bae\u4f60\u9009\u62e9\u4e00\u4e2a Server \u8282\u70b9\u6765\u8fd0\u884c ",(0,n.kt)("inlineCode",{parentName:"li"},"secrets-encrypt")," \u547d\u4ee4\u3002"))),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u6807\u5fd7\u542f\u52a8\u6240\u6709\u4e09\u4e2a K3s Server\u3002\u4e3a\u7b80\u4fbf\u8d77\u89c1\uff0c\u6211\u4eec\u5c06 server \u5206\u522b\u79f0\u4e3a S1\u3001S2\u3001S3\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u51c6\u5907 S1"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u8f6e\u6362 S1"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("admonition",{parentName:"li",type:"info"},(0,n.kt)("p",{parentName:"admonition"},"K3s \u6bcf\u79d2\u5c06\u91cd\u65b0\u52a0\u5bc6\u7ea6 5 \u4e2a Secret\u3002",(0,n.kt)("br",{parentName:"p"}),"\n","\u5177\u6709\u5927\u91cf Secret \u7684\u96c6\u7fa4\u53ef\u80fd\u9700\u8981\u51e0\u5206\u949f\u624d\u80fd\u91cd\u65b0\u52a0\u5bc6\u3002")),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3"))))),(0,n.kt)("h3",{id:"\u7981\u7528\u542f\u7528-secret-\u52a0\u5bc6"},"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6"),(0,n.kt)(m,{mdxType:"Tabs"},(0,n.kt)(k,{value:"\u5355\u670d\u52a1\u5668",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u6807\u5fd7\u542f\u52a8 server \u540e\uff0c\u4f60\u8fd8\u53ef\u4ee5\u7981\u7528 Secret \u52a0\u5bc6\u3002"),(0,n.kt)("p",null,"\u8981\u5728\u5355\u8282\u70b9\u96c6\u7fa4\u4e0a\u7981\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u7981\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,n.kt)("p",null,"\u8981\u5728\u5355\u8282\u70b9\u96c6\u7fa4\u4e0a\u91cd\u65b0\u542f\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u542f\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n"))))),(0,n.kt)(k,{value:"\u9ad8\u53ef\u7528",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u6807\u5fd7\u542f\u52a8 HA \u96c6\u7fa4\u540e\uff0c\u4f60\u8fd8\u53ef\u4ee5\u7981\u7528 Secret \u52a0\u5bc6\u3002"),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"\u867d\u7136\u4e0d\u662f\u5fc5\u9700\u7684\uff0c\u4f46\u5efa\u8bae\u4f60\u9009\u62e9\u4e00\u4e2a Server \u8282\u70b9\u6765\u8fd0\u884c ",(0,n.kt)("inlineCode",{parentName:"p"},"secrets-encrypt")," \u547d\u4ee4\u3002")),(0,n.kt)("p",null,"\u4e3a\u7b80\u4fbf\u8d77\u89c1\uff0c\u6211\u4eec\u5c06\u672c\u6307\u5357\u4e2d\u4f7f\u7528\u7684 3 \u4e2a server \u5206\u522b\u79f0\u4e3a S1\u3001S2\u3001S3\u3002"),(0,n.kt)("p",null,"\u8981\u5728 HA \u96c6\u7fa4\u4e0a\u7981\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u7981\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3"))),(0,n.kt)("ol",{start:4},(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,n.kt)("p",null,"\u8981\u5728 HA \u96c6\u7fa4\u4e0a\u91cd\u65b0\u542f\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u542f\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))))),(0,n.kt)("h3",{id:"secret-\u52a0\u5bc6\u72b6\u6001"},"Secret \u52a0\u5bc6\u72b6\u6001"),(0,n.kt)("p",null,"secrets-encrypt \u5de5\u5177\u5305\u542b\u4e00\u4e2a ",(0,n.kt)("inlineCode",{parentName:"p"},"status")," \u547d\u4ee4\uff0c\u8be5\u547d\u4ee4\u80fd\u663e\u793a\u8282\u70b9\u4e0a Secret \u52a0\u5bc6\u7684\u5f53\u524d\u72b6\u6001\u4fe1\u606f\u3002"),(0,n.kt)("p",null,"\u5355 Server \u8282\u70b9\u4e0a\u7684\u547d\u4ee4\u793a\u4f8b\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: start\nServer Encryption Hashes: All hashes match\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey\n\n")),(0,n.kt)("p",null,"\u4ee5\u4e0b\u662f\u53e6\u4e00\u4e2a\u5173\u4e8e HA \u96c6\u7fa4\u7684\u4f8b\u5b50\uff0c\u5728\u8f6e\u6362\u5bc6\u94a5\u540e\uff0c\u91cd\u542f server \u4e4b\u524d\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: rotate\nServer Encryption Hashes: hash does not match between node-1 and node-2\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey-2021-12-10T22:54:38Z\n        AES-CBC   aescbckey\n\n")),(0,n.kt)("p",null,"\u5404\u90e8\u5206\u8be6\u60c5\u5982\u4e0b\uff1a"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Encryption Status"),"\uff1a\u663e\u793a\u8282\u70b9\u4e0a\u7684 Secret \u52a0\u5bc6\u662f\u7981\u7528\u8fd8\u662f\u542f\u7528\u7684"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Current Rotation Stage"),"\uff1a\u8868\u793a\u8282\u70b9\u4e0a\u5f53\u524d\u7684\u8f6e\u6362\u9636\u6bb5",(0,n.kt)("br",{parentName:"li"}),"Stage \u53ef\u80fd\u662f\uff1a",(0,n.kt)("inlineCode",{parentName:"li"},"start"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"prepare"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"rotate"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"reencrypt_request"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"reencrypt_active"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"reencrypt_finished")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Server Encryption Hashes"),"\uff1a\u5bf9 HA \u96c6\u7fa4\u6709\u7528\uff0c\u8868\u660e\u6240\u6709 server \u662f\u5426\u4e0e\u672c\u5730\u6587\u4ef6\u5904\u4e8e\u540c\u4e00\u9636\u6bb5\u3002\u8fd9\u53ef\u7528\u4e8e\u786e\u5b9a\u5728\u8fdb\u5165\u4e0b\u4e00\u9636\u6bb5\u4e4b\u524d\u662f\u5426\u9700\u8981\u91cd\u542f server\u3002\u5728\u4e0a\u9762\u7684 HA \u4f8b\u5b50\u4e2d\uff0cnode-1 \u548c node-2 \u7684\u54c8\u5e0c\u503c\u4e0d\u540c\uff0c\u8bf4\u660e\u5b83\u4eec\u76ee\u524d\u6ca1\u6709\u76f8\u540c\u7684\u52a0\u5bc6\u914d\u7f6e\u3002\u91cd\u542f server \u5c06\u540c\u6b65\u5b83\u4eec\u7684\u914d\u7f6e\u3002"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Key Table"),"\uff1a\u6c47\u603b\u5728\u8282\u70b9\u4e0a\u627e\u5230\u7684 Secret \u52a0\u5bc6\u5bc6\u94a5\u7684\u4fe1\u606f\u3002",(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Active"),"\uff1a\u201c*\u201d\u8868\u793a\u5f53\u524d\u4f7f\u7528\u4e86\u54ea\u4e9b\u5bc6\u94a5\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09\u8fdb\u884cSecret \u52a0\u5bc6\u3002Kubernetes \u4f7f\u7528 active \u5bc6\u94a5\u6765\u52a0\u5bc6\u65b0\u7684 Secret\u3002"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Key Type"),"\uff1a\u4f7f\u7528\u6b64\u5de5\u5177\u7684\u6240\u6709\u5bc6\u94a5\u90fd\u662f ",(0,n.kt)("inlineCode",{parentName:"li"},"AES-CBC")," \u7c7b\u578b\u3002\u8be6\u60c5\u8bf7\u53c2\u89c1",(0,n.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers"},"\u6b64\u5904"),"\u3002"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Name"),"\uff1a\u52a0\u5bc6\u5bc6\u94a5\u7684\u540d\u79f0\u3002")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[8178],{3905:(e,t,r)=>{r.d(t,{Zo:()=>o,kt:()=>N});var a=r(7294);function n(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function p(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,a)}return r}function l(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?p(Object(r),!0).forEach((function(t){n(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):p(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(e,t){if(null==e)return{};var r,a,n=function(e,t){if(null==e)return{};var r,a,n={},p=Object.keys(e);for(a=0;a<p.length;a++)r=p[a],t.indexOf(r)>=0||(n[r]=e[r]);return n}(e,t);if(Object.getOwnPropertySymbols){var p=Object.getOwnPropertySymbols(e);for(a=0;a<p.length;a++)r=p[a],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(n[r]=e[r])}return n}var i=a.createContext({}),c=function(e){var t=a.useContext(i),r=t;return e&&(r="function"==typeof e?e(t):l(l({},t),e)),r},o=function(e){var t=c(e.components);return a.createElement(i.Provider,{value:t},e.children)},m={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},k=a.forwardRef((function(e,t){var r=e.components,n=e.mdxType,p=e.originalType,i=e.parentName,o=s(e,["components","mdxType","originalType","parentName"]),k=c(r),N=n,u=k["".concat(i,".").concat(N)]||k[N]||m[N]||p;return r?a.createElement(u,l(l({ref:t},o),{},{components:r})):a.createElement(u,l({ref:t},o))}));function N(e,t){var r=arguments,n=t&&t.mdxType;if("string"==typeof e||n){var p=r.length,l=new Array(p);l[0]=k;var s={};for(var i in t)hasOwnProperty.call(t,i)&&(s[i]=t[i]);s.originalType=e,s.mdxType="string"==typeof e?e:n,l[1]=s;for(var c=2;c<p;c++)l[c]=r[c];return a.createElement.apply(null,l)}return a.createElement.apply(null,r)}k.displayName="MDXCreateElement"},6709:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>i,contentTitle:()=>l,default:()=>u,frontMatter:()=>p,metadata:()=>s,toc:()=>c});var a=r(3117),n=(r(7294),r(3905));const p={title:"secrets-encrypt"},l="k3s secrets-encrypt",s={unversionedId:"cli/secrets-encrypt",id:"cli/secrets-encrypt",title:"secrets-encrypt",description:"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 Secret \u52a0\u5bc6\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",sourceDirName:"cli",slug:"/cli/secrets-encrypt",permalink:"/zh/cli/secrets-encrypt",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"secrets-encrypt"},sidebar:"mySidebar",previous:{title:"etcd-snapshot",permalink:"/zh/cli/etcd-snapshot"},next:{title:"token",permalink:"/zh/cli/token"}},i={},c=[{value:"Secret \u52a0\u5bc6\u5de5\u5177",id:"secret-\u52a0\u5bc6\u5de5\u5177",level:2},{value:"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362",id:"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362",level:3},{value:"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6",id:"\u7981\u7528\u542f\u7528-secret-\u52a0\u5bc6",level:3},{value:"Secret \u52a0\u5bc6\u72b6\u6001",id:"secret-\u52a0\u5bc6\u72b6\u6001",level:3}],o=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,n.kt)("div",t)},m=o("Tabs"),k=o("TabItem"),N={toc:c};function u(e){let{components:t,...r}=e;return(0,n.kt)("wrapper",(0,a.Z)({},N,r,{components:t,mdxType:"MDXLayout"}),(0,n.kt)("h1",{id:"k3s-secrets-encrypt"},"k3s secrets-encrypt"),(0,n.kt)("p",null,"K3s \u652f\u6301\u542f\u7528\u9759\u6001\u52a0\u5bc6\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,n.kt)("a",{parentName:"p",href:"/zh/security/secrets-encryption"},"Secret \u52a0\u5bc6"),"\u3002"),(0,n.kt)("h2",{id:"secret-\u52a0\u5bc6\u5de5\u5177"},"Secret \u52a0\u5bc6\u5de5\u5177"),(0,n.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,n.kt)("p",{parentName:"admonition"},"\u4ece ",(0,n.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1"},"v1.21.8+k3s1")," \u8d77\u53ef\u7528")),(0,n.kt)("p",null,"K3s \u5305\u542b\u4e00\u4e2a CLI \u5de5\u5177 ",(0,n.kt)("inlineCode",{parentName:"p"},"secrets-encrypt"),"\uff0c\u53ef\u4ee5\u81ea\u52a8\u63a7\u5236\u4ee5\u4e0b\u5185\u5bb9\uff1a"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6"),(0,n.kt)("li",{parentName:"ul"},"\u6dfb\u52a0\u65b0\u7684\u52a0\u5bc6\u5bc6\u94a5"),(0,n.kt)("li",{parentName:"ul"},"\u8f6e\u6362\u548c\u5220\u9664\u52a0\u5bc6\u5bc6\u94a5"),(0,n.kt)("li",{parentName:"ul"},"\u91cd\u65b0\u52a0\u5bc6 Secret")),(0,n.kt)("admonition",{type:"caution"},(0,n.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4e0d\u9075\u5faa\u6b63\u786e\u7684\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362\u7a0b\u5e8f\uff0c\u4f60\u7684\u96c6\u7fa4\u53ef\u80fd\u4f1a\u6c38\u4e45\u635f\u574f\u3002\u56e0\u6b64\uff0c\u8bf7\u8c28\u614e\u64cd\u4f5c\u3002")),(0,n.kt)("h3",{id:"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362"},"\u52a0\u5bc6\u5bc6\u94a5\u8f6e\u6362"),(0,n.kt)(m,{mdxType:"Tabs"},(0,n.kt)(k,{value:"\u5355\u670d\u52a1\u5668",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u8981\u5728\u5355\u670d\u52a1\u5668\u96c6\u7fa4\u4e0a\u8f6e\u6362 Secret \u52a0\u5bc6\u5bc6\u94a5\uff1a"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},"\u4f7f\u7528\u6807\u5fd7 ",(0,n.kt)("inlineCode",{parentName:"li"},"--secrets-encryption")," \u542f\u52a8 K3s Server")),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"\u76ee\u524d",(0,n.kt)("em",{parentName:"p"},"\u4e0d"),"\u652f\u6301\u5728\u6ca1\u6709\u52a0\u5bc6\u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s \u5e76\u5728\u540e\u7eed\u542f\u7528\u5b83\u3002")),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u51c6\u5907"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u8f6e\u6362"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("admonition",{parentName:"li",type:"info"},(0,n.kt)("p",{parentName:"admonition"},"K3s \u6bcf\u79d2\u5c06\u91cd\u65b0\u52a0\u5bc6\u7ea6 5 \u4e2a Secret\u3002",(0,n.kt)("br",{parentName:"p"}),"\n","\u5177\u6709\u5927\u91cf Secret \u7684\u96c6\u7fa4\u53ef\u80fd\u9700\u8981\u51e0\u5206\u949f\u624d\u80fd\u91cd\u65b0\u52a0\u5bc6\u3002")),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))))),(0,n.kt)(k,{value:"\u9ad8\u53ef\u7528",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u5d4c\u5165\u5f0f\u6570\u636e\u5e93\u548c\u5916\u90e8\u6570\u636e\u5e93\u96c6\u7fa4\u7684\u6b65\u9aa4\u76f8\u540c\u3002"),(0,n.kt)("p",null,"\u8981\u5728 HA \u8bbe\u7f6e\u4e0a\u8f6e\u6362 Secret \u52a0\u5bc6\u5bc6\u94a5\uff1a"),(0,n.kt)("admonition",{title:"\u6ce8\u610f\u4e8b\u9879",type:"note"},(0,n.kt)("ul",{parentName:"admonition"},(0,n.kt)("li",{parentName:"ul"},"\u76ee\u524d",(0,n.kt)("em",{parentName:"li"},"\u4e0d"),"\u652f\u6301\u5728\u6ca1\u6709\u52a0\u5bc6\u7684\u60c5\u51b5\u4e0b\u542f\u52a8 K3s \u5e76\u5728\u540e\u7eed\u542f\u7528\u5b83\u3002"),(0,n.kt)("li",{parentName:"ul"},"\u867d\u7136\u4e0d\u662f\u5fc5\u9700\u7684\uff0c\u4f46\u5efa\u8bae\u4f60\u9009\u62e9\u4e00\u4e2a Server \u8282\u70b9\u6765\u8fd0\u884c ",(0,n.kt)("inlineCode",{parentName:"li"},"secrets-encrypt")," \u547d\u4ee4\u3002"))),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u6807\u5fd7\u542f\u52a8\u6240\u6709\u4e09\u4e2a K3s Server\u3002\u4e3a\u7b80\u4fbf\u8d77\u89c1\uff0c\u6211\u4eec\u5c06 server \u5206\u522b\u79f0\u4e3a S1\u3001S2\u3001S3\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u51c6\u5907 S1"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt prepare\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u8f6e\u6362 S1"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt rotate\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("admonition",{parentName:"li",type:"info"},(0,n.kt)("p",{parentName:"admonition"},"K3s \u6bcf\u79d2\u5c06\u91cd\u65b0\u52a0\u5bc6\u7ea6 5 \u4e2a Secret\u3002",(0,n.kt)("br",{parentName:"p"}),"\n","\u5177\u6709\u5927\u91cf Secret \u7684\u96c6\u7fa4\u53ef\u80fd\u9700\u8981\u51e0\u5206\u949f\u624d\u80fd\u91cd\u65b0\u52a0\u5bc6\u3002")),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3"))))),(0,n.kt)("h3",{id:"\u7981\u7528\u542f\u7528-secret-\u52a0\u5bc6"},"\u7981\u7528/\u542f\u7528 Secret \u52a0\u5bc6"),(0,n.kt)(m,{mdxType:"Tabs"},(0,n.kt)(k,{value:"\u5355\u670d\u52a1\u5668",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u6807\u5fd7\u542f\u52a8 server \u540e\uff0c\u4f60\u8fd8\u53ef\u4ee5\u7981\u7528 Secret \u52a0\u5bc6\u3002"),(0,n.kt)("p",null,"\u8981\u5728\u5355\u8282\u70b9\u96c6\u7fa4\u4e0a\u7981\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u7981\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,n.kt)("p",null,"\u8981\u5728\u5355\u8282\u70b9\u96c6\u7fa4\u4e0a\u91cd\u65b0\u542f\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u542f\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f K3s Server\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n"))))),(0,n.kt)(k,{value:"\u9ad8\u53ef\u7528",default:!0,mdxType:"TabItem"},(0,n.kt)("p",null,"\u4f7f\u7528 ",(0,n.kt)("inlineCode",{parentName:"p"},"--secrets-encryption")," \u6807\u5fd7\u542f\u52a8 HA \u96c6\u7fa4\u540e\uff0c\u4f60\u8fd8\u53ef\u4ee5\u7981\u7528 Secret \u52a0\u5bc6\u3002"),(0,n.kt)("admonition",{type:"note"},(0,n.kt)("p",{parentName:"admonition"},"\u867d\u7136\u4e0d\u662f\u5fc5\u9700\u7684\uff0c\u4f46\u5efa\u8bae\u4f60\u9009\u62e9\u4e00\u4e2a Server \u8282\u70b9\u6765\u8fd0\u884c ",(0,n.kt)("inlineCode",{parentName:"p"},"secrets-encrypt")," \u547d\u4ee4\u3002")),(0,n.kt)("p",null,"\u4e3a\u7b80\u4fbf\u8d77\u89c1\uff0c\u6211\u4eec\u5c06\u672c\u6307\u5357\u4e2d\u4f7f\u7528\u7684 3 \u4e2a server \u5206\u522b\u79f0\u4e3a S1\u3001S2\u3001S3\u3002"),(0,n.kt)("p",null,"\u8981\u5728 HA \u96c6\u7fa4\u4e0a\u7981\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u7981\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt disable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a\u670d\u52a1\u8fd0\u884c\uff1a"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"# \u5982\u679c\u4f7f\u7528 systemd\nsystemctl restart k3s\n# \u5982\u679c\u4f7f\u7528 openrc\nrc-service k3s restart\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3"))),(0,n.kt)("ol",{start:4},(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))),(0,n.kt)("p",null,"\u8981\u5728 HA \u96c6\u7fa4\u4e0a\u91cd\u65b0\u542f\u7528 Secret \u52a0\u5bc6\uff1a"),(0,n.kt)("ol",null,(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u542f\u7528"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt enable\n"))),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u4f7f\u7528\u76f8\u540c\u7684\u53c2\u6570\u7ec8\u6b62\u5e76\u91cd\u542f S1\u3002")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"S1 \u542f\u52a8\u540e\uff0c\u7ec8\u6b62\u5e76\u91cd\u542f S2 \u548c S3")),(0,n.kt)("li",{parentName:"ol"},(0,n.kt)("p",{parentName:"li"},"\u5728 S1 \u4e0a\u4f7f\u7528\u6807\u5fd7\u91cd\u65b0\u52a0\u5bc6"),(0,n.kt)("pre",{parentName:"li"},(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"k3s secrets-encrypt reencrypt --force --skip\n")))))),(0,n.kt)("h3",{id:"secret-\u52a0\u5bc6\u72b6\u6001"},"Secret \u52a0\u5bc6\u72b6\u6001"),(0,n.kt)("p",null,"secrets-encrypt \u5de5\u5177\u5305\u542b\u4e00\u4e2a ",(0,n.kt)("inlineCode",{parentName:"p"},"status")," \u547d\u4ee4\uff0c\u8be5\u547d\u4ee4\u80fd\u663e\u793a\u8282\u70b9\u4e0a Secret \u52a0\u5bc6\u7684\u5f53\u524d\u72b6\u6001\u4fe1\u606f\u3002"),(0,n.kt)("p",null,"\u5355 Server \u8282\u70b9\u4e0a\u7684\u547d\u4ee4\u793a\u4f8b\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: start\nServer Encryption Hashes: All hashes match\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey\n\n")),(0,n.kt)("p",null,"\u4ee5\u4e0b\u662f\u53e6\u4e00\u4e2a\u5173\u4e8e HA \u96c6\u7fa4\u7684\u4f8b\u5b50\uff0c\u5728\u8f6e\u6362\u5bc6\u94a5\u540e\uff0c\u91cd\u542f server \u4e4b\u524d\uff1a"),(0,n.kt)("pre",null,(0,n.kt)("code",{parentName:"pre",className:"language-bash"},"$ k3s secrets-encrypt status\nEncryption Status: Enabled\nCurrent Rotation Stage: rotate\nServer Encryption Hashes: hash does not match between node-1 and node-2\n\nActive  Key Type  Name\n------  --------  ----\n *      AES-CBC   aescbckey-2021-12-10T22:54:38Z\n        AES-CBC   aescbckey\n\n")),(0,n.kt)("p",null,"\u5404\u90e8\u5206\u8be6\u60c5\u5982\u4e0b\uff1a"),(0,n.kt)("ul",null,(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Encryption Status"),"\uff1a\u663e\u793a\u8282\u70b9\u4e0a\u7684 Secret \u52a0\u5bc6\u662f\u7981\u7528\u8fd8\u662f\u542f\u7528\u7684"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Current Rotation Stage"),"\uff1a\u8868\u793a\u8282\u70b9\u4e0a\u5f53\u524d\u7684\u8f6e\u6362\u9636\u6bb5",(0,n.kt)("br",{parentName:"li"}),"Stage \u53ef\u80fd\u662f\uff1a",(0,n.kt)("inlineCode",{parentName:"li"},"start"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"prepare"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"rotate"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"reencrypt_request"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"reencrypt_active"),"\uff0c",(0,n.kt)("inlineCode",{parentName:"li"},"reencrypt_finished")),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Server Encryption Hashes"),"\uff1a\u5bf9 HA \u96c6\u7fa4\u6709\u7528\uff0c\u8868\u660e\u6240\u6709 server \u662f\u5426\u4e0e\u672c\u5730\u6587\u4ef6\u5904\u4e8e\u540c\u4e00\u9636\u6bb5\u3002\u8fd9\u53ef\u7528\u4e8e\u786e\u5b9a\u5728\u8fdb\u5165\u4e0b\u4e00\u9636\u6bb5\u4e4b\u524d\u662f\u5426\u9700\u8981\u91cd\u542f server\u3002\u5728\u4e0a\u9762\u7684 HA \u4f8b\u5b50\u4e2d\uff0cnode-1 \u548c node-2 \u7684\u54c8\u5e0c\u503c\u4e0d\u540c\uff0c\u8bf4\u660e\u5b83\u4eec\u76ee\u524d\u6ca1\u6709\u76f8\u540c\u7684\u52a0\u5bc6\u914d\u7f6e\u3002\u91cd\u542f server \u5c06\u540c\u6b65\u5b83\u4eec\u7684\u914d\u7f6e\u3002"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Key Table"),"\uff1a\u6c47\u603b\u5728\u8282\u70b9\u4e0a\u627e\u5230\u7684 Secret \u52a0\u5bc6\u5bc6\u94a5\u7684\u4fe1\u606f\u3002",(0,n.kt)("ul",{parentName:"li"},(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Active"),"\uff1a\u201c*\u201d\u8868\u793a\u5f53\u524d\u4f7f\u7528\u4e86\u54ea\u4e9b\u5bc6\u94a5\uff08\u5982\u679c\u6709\u7684\u8bdd\uff09\u8fdb\u884cSecret \u52a0\u5bc6\u3002Kubernetes \u4f7f\u7528 active \u5bc6\u94a5\u6765\u52a0\u5bc6\u65b0\u7684 Secret\u3002"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Key Type"),"\uff1a\u4f7f\u7528\u6b64\u5de5\u5177\u7684\u6240\u6709\u5bc6\u94a5\u90fd\u662f ",(0,n.kt)("inlineCode",{parentName:"li"},"AES-CBC")," \u7c7b\u578b\u3002\u8be6\u60c5\u8bf7\u53c2\u89c1",(0,n.kt)("a",{parentName:"li",href:"https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers"},"\u6b64\u5904"),"\u3002"),(0,n.kt)("li",{parentName:"ul"},(0,n.kt)("strong",{parentName:"li"},"Name"),"\uff1a\u52a0\u5bc6\u5bc6\u94a5\u7684\u540d\u79f0\u3002")))))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/e1787277.95b5ddc3.js b/zh/assets/js/e1787277.a5473e1b.js
similarity index 99%
rename from zh/assets/js/e1787277.95b5ddc3.js
rename to zh/assets/js/e1787277.a5473e1b.js
index 03efc9104..e43a6aaa7 100644
--- a/zh/assets/js/e1787277.95b5ddc3.js
+++ b/zh/assets/js/e1787277.a5473e1b.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4126],{3905:(e,n,t)=>{t.d(n,{Zo:()=>c,kt:()=>u});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function l(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function o(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?l(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):l(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function i(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var s=a.createContext({}),p=function(e){var n=a.useContext(s),t=n;return e&&(t="function"==typeof e?e(n):o(o({},n),e)),t},c=function(e){var n=p(e.components);return a.createElement(s.Provider,{value:n},e.children)},k={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),m=p(t),u=r,d=m["".concat(s,".").concat(u)]||m[u]||k[u]||l;return t?a.createElement(d,o(o({ref:n},c),{},{components:t})):a.createElement(d,o({ref:n},c))}));function u(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var l=t.length,o=new Array(l);o[0]=m;var i={};for(var s in n)hasOwnProperty.call(n,s)&&(i[s]=n[s]);i.originalType=e,i.mdxType="string"==typeof e?e:r,o[1]=i;for(var p=2;p<l;p++)o[p]=t[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},6231:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>s,contentTitle:()=>o,default:()=>k,frontMatter:()=>l,metadata:()=>i,toc:()=>p});var a=t(3117),r=(t(7294),t(3905));const l={title:"\u914d\u7f6e\u9009\u9879",weight:20},o=void 0,i={unversionedId:"installation/configuration",id:"installation/configuration",title:"\u914d\u7f6e\u9009\u9879",description:"\u672c\u6587\u91cd\u70b9\u4ecb\u7ecd\u9996\u6b21\u8bbe\u7f6e K3s \u65f6\u5e38\u7528\u7684\u9009\u9879\u3002\u5982\u9700\u4e86\u89e3\u8be6\u60c5\uff0c\u8bf7\u53c2\u9605\u6709\u5173\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e\u4ee5\u53ca server \u548c agent \u547d\u4ee4\u7684\u6587\u6863\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/configuration.md",sourceDirName:"installation",slug:"/installation/configuration",permalink:"/zh/installation/configuration",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u914d\u7f6e\u9009\u9879",weight:20},sidebar:"mySidebar",previous:{title:"\u8981\u6c42",permalink:"/zh/installation/requirements"},next:{title:"\u7f51\u7edc\u9009\u9879",permalink:"/zh/installation/network-options"}},s={},p=[{value:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879",id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879",level:2},{value:"\u4e8c\u8fdb\u5236\u914d\u7f6e",id:"\u4e8c\u8fdb\u5236\u914d\u7f6e",level:2},{value:"\u914d\u7f6e\u6587\u4ef6",id:"\u914d\u7f6e\u6587\u4ef6",level:2},{value:"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6",id:"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6",level:3},{value:"\u7ec4\u5408\u4f7f\u7528",id:"\u7ec4\u5408\u4f7f\u7528",level:2}],c={toc:p};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u6587\u91cd\u70b9\u4ecb\u7ecd\u9996\u6b21\u8bbe\u7f6e K3s \u65f6\u5e38\u7528\u7684\u9009\u9879\u3002\u5982\u9700\u4e86\u89e3\u8be6\u60c5\uff0c\u8bf7\u53c2\u9605\u6709\u5173",(0,r.kt)("a",{parentName:"p",href:"/zh/advanced/"},"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e"),"\u4ee5\u53ca ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/server"},"server")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/agent"},"agent")," \u547d\u4ee4\u7684\u6587\u6863\u3002"),(0,r.kt)("h2",{id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879"},"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879"),(0,r.kt)("p",null,"\u5982",(0,r.kt)("a",{parentName:"p",href:"/zh/quick-start/"},"\u5feb\u901f\u5165\u95e8\u6307\u5357"),"\u4e2d\u6240\u8ff0\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \u4e0a\u63d0\u4f9b\u7684\u5b89\u88c5\u811a\u672c\u5728\u57fa\u4e8e systemd \u548c openrc \u7684\u7cfb\u7edf\u4e0a\u5c06 K3s \u5b89\u88c5\u4e3a\u670d\u52a1\u3002"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u7ed3\u5408\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u73af\u5883\u53d8\u91cf\u548c\u547d\u4ee4\u6807\u5fd7\u5c06\u914d\u7f6e\u4f20\u9012\u7ed9\u670d\u52a1\u914d\u7f6e\u3002\n\u5e26\u524d\u7f00\u7684\u73af\u5883\u53d8\u91cf\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," \u503c\u548c\u5c3e\u9644\u7684 shell \u53c2\u6570\u90fd\u4fdd\u5b58\u5728\u670d\u52a1\u914d\u7f6e\u4e2d\u3002\n\u5b89\u88c5\u540e\uff0c\u5982\u679c\u9700\u8981\u66f4\u6539\u914d\u7f6e\uff0c\u4f60\u53ef\u4ee5\u7f16\u8f91\u73af\u5883\u6587\u4ef6\u3001\u7f16\u8f91\u670d\u52a1\u914d\u7f6e\u6216\u7b80\u5355\u4f7f\u7528\u65b0\u9009\u9879\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u7a0b\u5e8f\u3002"),(0,r.kt)("p",null,"\u4e3a\u4e86\u8bf4\u660e\u8fd9\u4e00\u70b9\uff0c\u4ee5\u4e0b\u547d\u4ee4\u5747\u540c\u6837\u5730\u6ca1\u6709 Flannel \u548c\u4f7f\u7528\u4ee4\u724c\u7684\u60c5\u51b5\u4e0b\u6ce8\u518c Server\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none --token 12345\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -s -\ncurl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none\n# server is assumed below because there is no K3S_URL\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--flannel-backend none --token 12345" sh -s -\ncurl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345\n')),(0,r.kt)("p",null,"\u6ce8\u518c Agent \u65f6\uff0c\u4ee5\u4e0b\u547d\u4ee4\u90fd\u4f1a\u5bfc\u81f4\u540c\u6837\u7684\u884c\u4e3a\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent --server https://k3s.example.com --token mypassword" sh -s -\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent" K3S_TOKEN="mypassword" sh -s - --server https://k3s.example.com\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL\n')),(0,r.kt)("p",null,"\u6709\u5173\u6240\u6709\u73af\u5883\u53d8\u91cf\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/reference/env-variables"},"\u73af\u5883\u53d8\u91cf"),"\u3002"),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u5728\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u8fdb\u884c\u4e86\u914d\u7f6e\uff0c\u4f46\u5728\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u6ca1\u6709\u91cd\u65b0\u8bbe\u7f6e\uff0c\u5219\u539f\u59cb\u503c\u5c06\u4f1a\u4e22\u5931\u3002"),(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6")," \u7684\u5185\u5bb9\u4e0d\u53d7\u5b89\u88c5\u811a\u672c\u7ba1\u7406\u3002\n\u8981\u8ba9\u4f60\u7684\u914d\u7f6e\u72ec\u7acb\u4e8e\u5b89\u88c5\u811a\u672c\uff0c\u8bf7\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u800c\u4e0d\u662f\u4f20\u9012\u73af\u5883\u53d8\u91cf\u6216\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u53c2\u6570\u3002")),(0,r.kt)("h2",{id:"\u4e8c\u8fdb\u5236\u914d\u7f6e"},"\u4e8c\u8fdb\u5236\u914d\u7f6e"),(0,r.kt)("p",null,"\u5982\u524d\u6240\u8ff0\uff0c\u5b89\u88c5\u811a\u672c\u4e3b\u8981\u662f\u5c06 K3s \u914d\u7f6e\u4e3a\u670d\u52a1\u6765\u8fd0\u884c\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u5982\u679c\u4f60\u9009\u62e9\u4e0d\u4f7f\u7528\u8be5\u811a\u672c\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u6211\u4eec\u7684 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/latest"},"Releases \u9875\u9762"),"\u4e0b\u8f7d\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u5c06\u5176\u653e\u5728\u4f60\u7684\u8def\u5f84\u4e0a\uff0c\u7136\u540e\u6267\u884c\u5b83\u5373\u53ef\u8fd0\u884c K3s\u3002\u5bf9\u4e8e\u6c38\u4e45\u5b89\u88c5\u800c\u8a00\u8fd9\u4e0d\u662f\u7279\u522b\u6709\u7528\uff0c\u4f46\u5982\u679c\u6267\u884c\u4e0d\u9700\u8981\u5c06 K3s \u4f5c\u4e3a\u7cfb\u7edf\u670d\u52a1\u7ba1\u7406\u7684\u5feb\u901f\u6d4b\u8bd5\uff0c\u8fd9\u53ef\u80fd\u6709\u7528\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -Lo /usr/local/bin/k3s https://github.com/k3s-io/k3s/releases/download/v1.26.5+k3s1/k3s; chmod a+x /usr/local/bin/k3s\n")),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u73af\u5883\u53d8\u91cf\u6765\u4f20\u9012\u914d\u7f6e\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server\n')),(0,r.kt)("p",null,"\u6216\u4f7f\u7528\u547d\u4ee4\u6807\u5fd7\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --write-kubeconfig-mode=644\n")),(0,r.kt)("p",null,"K3s Agent \u4e5f\u53ef\u4ee5\u8fd9\u6837\u914d\u7f6e\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s agent --server https://k3s.example.com --token mypassword\n")),(0,r.kt)("p",null,"\u5173\u4e8e\u914d\u7f6e K3s Server \u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/server"},(0,r.kt)("inlineCode",{parentName:"a"},"K3s Server")," \u6587\u6863"),"\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u6709\u5173\u914d\u7f6e K3s Agent \u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"K3s Agent")," \u6587\u6863"),"\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u4f60\u8fd8\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--help")," \u6807\u5fd7\u6765\u67e5\u770b\u6240\u6709\u53ef\u7528\u9009\u9879\u53ca\u5176\u5bf9\u5e94\u7684\u73af\u5883\u53d8\u91cf\u3002"),(0,r.kt)("admonition",{title:"\u5339\u914d\u6807\u5fd7",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5339\u914d Server \u8282\u70b9\u4e0a\u7684\u5173\u952e\u6807\u5fd7\u662f\u975e\u5e38\u91cd\u8981\u7684\u3002\u4f8b\u5982\uff0c\u5982\u679c\u4f60\u5728 master \u8282\u70b9\u4e0a\u4f7f\u7528\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable servicelb")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr=10.200.0.0/16")," \u6807\u5fd7\uff0c\u4f46\u662f\u6ca1\u6709\u5728\u5176\u4ed6 Server \u8282\u70b9\u4e0a\u8fdb\u884c\u76f8\u540c\u7684\u8bbe\u7f6e\uff0c\u8282\u70b9\u5c06\u65e0\u6cd5\u52a0\u5165\u3002\u5b83\u4eec\u4f1a\u663e\u793a ",(0,r.kt)("inlineCode",{parentName:"p"},"failed to validate server configuration: critical configuration value mismatch")," \u9519\u8bef\u3002\n\u6709\u5173\u5fc5\u987b\u5728 Server \u8282\u70b9\u4e0a\u8bbe\u7f6e\u7684\u6807\u5fd7\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 Server \u914d\u7f6e\u6587\u6863\uff08\u4e0a\u65b9\u94fe\u63a5\uff09\u3002")),(0,r.kt)("h2",{id:"\u914d\u7f6e\u6587\u4ef6"},"\u914d\u7f6e\u6587\u4ef6"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u9664\u4e86\u4f7f\u7528\u73af\u5883\u53d8\u91cf\u548c CLI \u53c2\u6570\u4e4b\u5916\uff0c\u4f60\u8fd8\u53ef\u4ee5\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u914d\u7f6e K3s\u3002"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5b89\u88c5\u65f6\u5c06\u4f7f\u7528\u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u7684 YAML \u6587\u4ef6\u4e2d\u7684\u503c\u3002"),(0,r.kt)("p",null,"\u4e0b\u9762\u662f\u4e00\u4e2a ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," \u914d\u7f6e\u6587\u4ef6\u7684\u57fa\u672c\u793a\u4f8b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'write-kubeconfig-mode: "0644"\ntls-san:\n  - "foo.local"\nnode-label:\n  - "foo=bar"\n  - "something=amazing"\ncluster-init: true\n')),(0,r.kt)("p",null,"\u7b49\u6548\u4e8e\u4ee5\u4e0b CLI \u53c2\u6570\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'k3s server \\\n  --write-kubeconfig-mode "0644"    \\\n  --tls-san "foo.local"             \\\n  --node-label "foo=bar"            \\\n  --node-label "something=amazing"  \\\n  --cluster-init\n')),(0,r.kt)("p",null,"\u4e00\u822c\u6765\u8bf4\uff0cCLI \u53c2\u6570\u6620\u5c04\u5230\u5404\u81ea\u7684 YAML \u952e\uff0c\u53ef\u91cd\u590d\u7684 CLI \u53c2\u6570\u88ab\u8868\u793a\u4e3a YAML \u5217\u8868\u3002\u5e03\u5c14\u6807\u5fd7\u5728 YAML \u6587\u4ef6\u4e2d\u8868\u793a\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"true")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"false"),"\u3002"),(0,r.kt)("p",null,"\u4e5f\u53ef\u4ee5\u540c\u65f6\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u548c CLI \u53c2\u6570\u3002 \u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u503c\u5c06\u4ece\u4e24\u4e2a\u6765\u6e90\u52a0\u8f7d\uff0c\u4f46 CLI \u53c2\u6570\u5c06\u4f18\u5148\u3002 \u5bf9\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," \u7b49\u53ef\u91cd\u590d\u53c2\u6570\uff0cCLI \u53c2\u6570\u5c06\u8986\u76d6\u5217\u8868\u4e2d\u7684\u6240\u6709\u503c\u3002"),(0,r.kt)("p",null,"\u6700\u540e\uff0c\u914d\u7f6e\u6587\u4ef6\u7684\u4f4d\u7f6e\u53ef\u4ee5\u901a\u8fc7 CLI \u53c2\u6570 ",(0,r.kt)("inlineCode",{parentName:"p"},"--config FILE, -c FILE")," \u6216\u8005\u73af\u5883\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"p"},"$K3S_CONFIG_FILE")," \u6765\u6539\u53d8\u3002"),(0,r.kt)("h3",{id:"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6"},"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u652f\u6301\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6\u3002\u9ed8\u8ba4\u4ece ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml.d/*.yaml")," \u4e2d\u6309\u5b57\u6bcd\u987a\u5e8f\u8bfb\u53d6\u914d\u7f6e\u6587\u4ef6\u3002"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5c06\u4f7f\u7528\u7ed9\u5b9a\u952e\u7684\u6700\u540e\u4e00\u4e2a\u503c\u3002\u53ef\u4ee5\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \u9644\u52a0\u5230\u952e\uff0c\u8fd9\u6837\u80fd\u5c06\u503c\u9644\u52a0\u5230\u73b0\u6709\u5b57\u7b26\u4e32\u6216\u5207\u7247\uff0c\u800c\u4e0d\u662f\u66ff\u6362\u5b83\u3002\u540e\u7eed\u6587\u4ef6\u4e2d\u7684\u6240\u6709\u6b64\u952e\u4e5f\u9700\u8981\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \u6765\u9632\u6b62\u8986\u76d6\u7d2f\u79ef\u503c\u3002"),(0,r.kt)("p",null,"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6\u7684\u793a\u4f8b\u5982\u4e0b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"# config.yaml\ntoken: boop\nnode-label:\n  - foo=bar\n  - bar=baz\n\n\n# config.yaml.d/test1.yaml\nwrite-kubeconfig-mode: 600\nnode-taint:\n  - alice=bob:NoExecute\n\n# config.yaml.d/test2.yaml\nwrite-kubeconfig-mode: 777\nnode-label:\n  - other=what\n  - foo=three\nnode-taint+:\n  - charlie=delta:NoSchedule\n\n")),(0,r.kt)("p",null,"\u56e0\u6b64\uff0c\u6700\u7ec8\u914d\u7f6e\u5982\u4e0b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"write-kubeconfig-mode: 777\ntoken: boop\nnode-label:\n  - other=what\n  - foo=three\nnode-taint:\n  - alice=bob:NoExecute\n  - charlie=delta:NoSchedule\n")),(0,r.kt)("h2",{id:"\u7ec4\u5408\u4f7f\u7528"},"\u7ec4\u5408\u4f7f\u7528"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u628a\u4e0a\u8ff0\u6240\u6709\u9009\u9879\u7ec4\u5408\u6210\u4e00\u4e2a\u793a\u4f8b\u3002"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"config.yaml")," \u6587\u4ef6\u521b\u5efa\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u4e2d\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'token: "secret"\ndebug: true\n')),(0,r.kt)("p",null,"\u7136\u540e\u4f7f\u7528\u73af\u5883\u53d8\u91cf\u548c\u6807\u5fd7\u7ec4\u5408\u6765\u8fd0\u884c\u5b89\u88c5\u811a\u672c\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none\n')),(0,r.kt)("p",null,"\u6216\u8005\uff0c\u5982\u679c\u4f60\u5df2\u7ecf\u5b89\u88c5\u4e86 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server --flannel-backend none\n')),(0,r.kt)("p",null,"Server \u60c5\u51b5\u5982\u4e0b\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"kubeconfig \u6587\u4ef6\u6743\u9650\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"644")),(0,r.kt)("li",{parentName:"ul"},"Flannel \u540e\u7aef\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"none")),(0,r.kt)("li",{parentName:"ul"},"\u4ee4\u724c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"secret")),(0,r.kt)("li",{parentName:"ul"},"\u542f\u7528\u8c03\u8bd5\u65e5\u5fd7\u8bb0\u5f55")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[4126],{3905:(e,n,t)=>{t.d(n,{Zo:()=>c,kt:()=>u});var a=t(7294);function r(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function l(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);n&&(a=a.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,a)}return t}function o(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{};n%2?l(Object(t),!0).forEach((function(n){r(e,n,t[n])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):l(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))}))}return e}function i(e,n){if(null==e)return{};var t,a,r=function(e,n){if(null==e)return{};var t,a,r={},l=Object.keys(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||(r[t]=e[t]);return r}(e,n);if(Object.getOwnPropertySymbols){var l=Object.getOwnPropertySymbols(e);for(a=0;a<l.length;a++)t=l[a],n.indexOf(t)>=0||Object.prototype.propertyIsEnumerable.call(e,t)&&(r[t]=e[t])}return r}var s=a.createContext({}),p=function(e){var n=a.useContext(s),t=n;return e&&(t="function"==typeof e?e(n):o(o({},n),e)),t},c=function(e){var n=p(e.components);return a.createElement(s.Provider,{value:n},e.children)},k={inlineCode:"code",wrapper:function(e){var n=e.children;return a.createElement(a.Fragment,{},n)}},m=a.forwardRef((function(e,n){var t=e.components,r=e.mdxType,l=e.originalType,s=e.parentName,c=i(e,["components","mdxType","originalType","parentName"]),m=p(t),u=r,d=m["".concat(s,".").concat(u)]||m[u]||k[u]||l;return t?a.createElement(d,o(o({ref:n},c),{},{components:t})):a.createElement(d,o({ref:n},c))}));function u(e,n){var t=arguments,r=n&&n.mdxType;if("string"==typeof e||r){var l=t.length,o=new Array(l);o[0]=m;var i={};for(var s in n)hasOwnProperty.call(n,s)&&(i[s]=n[s]);i.originalType=e,i.mdxType="string"==typeof e?e:r,o[1]=i;for(var p=2;p<l;p++)o[p]=t[p];return a.createElement.apply(null,o)}return a.createElement.apply(null,t)}m.displayName="MDXCreateElement"},6231:(e,n,t)=>{t.r(n),t.d(n,{assets:()=>s,contentTitle:()=>o,default:()=>k,frontMatter:()=>l,metadata:()=>i,toc:()=>p});var a=t(3117),r=(t(7294),t(3905));const l={title:"\u914d\u7f6e\u9009\u9879",weight:20},o=void 0,i={unversionedId:"installation/configuration",id:"installation/configuration",title:"\u914d\u7f6e\u9009\u9879",description:"\u672c\u6587\u91cd\u70b9\u4ecb\u7ecd\u9996\u6b21\u8bbe\u7f6e K3s \u65f6\u5e38\u7528\u7684\u9009\u9879\u3002\u5982\u9700\u4e86\u89e3\u8be6\u60c5\uff0c\u8bf7\u53c2\u9605\u6709\u5173\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e\u4ee5\u53ca server \u548c agent \u547d\u4ee4\u7684\u6587\u6863\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/configuration.md",sourceDirName:"installation",slug:"/installation/configuration",permalink:"/zh/installation/configuration",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u914d\u7f6e\u9009\u9879",weight:20},sidebar:"mySidebar",previous:{title:"\u8981\u6c42",permalink:"/zh/installation/requirements"},next:{title:"\u7f51\u7edc\u9009\u9879",permalink:"/zh/installation/network-options"}},s={},p=[{value:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879",id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879",level:2},{value:"\u4e8c\u8fdb\u5236\u914d\u7f6e",id:"\u4e8c\u8fdb\u5236\u914d\u7f6e",level:2},{value:"\u914d\u7f6e\u6587\u4ef6",id:"\u914d\u7f6e\u6587\u4ef6",level:2},{value:"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6",id:"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6",level:3},{value:"\u7ec4\u5408\u4f7f\u7528",id:"\u7ec4\u5408\u4f7f\u7528",level:2}],c={toc:p};function k(e){let{components:n,...t}=e;return(0,r.kt)("wrapper",(0,a.Z)({},c,t,{components:n,mdxType:"MDXLayout"}),(0,r.kt)("p",null,"\u672c\u6587\u91cd\u70b9\u4ecb\u7ecd\u9996\u6b21\u8bbe\u7f6e K3s \u65f6\u5e38\u7528\u7684\u9009\u9879\u3002\u5982\u9700\u4e86\u89e3\u8be6\u60c5\uff0c\u8bf7\u53c2\u9605\u6709\u5173",(0,r.kt)("a",{parentName:"p",href:"/zh/advanced/"},"\u9ad8\u7ea7\u9009\u9879\u548c\u914d\u7f6e"),"\u4ee5\u53ca ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/server"},"server")," \u548c ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/agent"},"agent")," \u547d\u4ee4\u7684\u6587\u6863\u3002"),(0,r.kt)("h2",{id:"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879"},"\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u7684\u9009\u9879"),(0,r.kt)("p",null,"\u5982",(0,r.kt)("a",{parentName:"p",href:"/zh/quick-start/"},"\u5feb\u901f\u5165\u95e8\u6307\u5357"),"\u4e2d\u6240\u8ff0\uff0c\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("a",{parentName:"p",href:"https://get.k3s.io"},"https://get.k3s.io")," \u4e0a\u63d0\u4f9b\u7684\u5b89\u88c5\u811a\u672c\u5728\u57fa\u4e8e systemd \u548c openrc \u7684\u7cfb\u7edf\u4e0a\u5c06 K3s \u5b89\u88c5\u4e3a\u670d\u52a1\u3002"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u7ed3\u5408\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC"),"\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u73af\u5883\u53d8\u91cf\u548c\u547d\u4ee4\u6807\u5fd7\u5c06\u914d\u7f6e\u4f20\u9012\u7ed9\u670d\u52a1\u914d\u7f6e\u3002\n\u5e26\u524d\u7f00\u7684\u73af\u5883\u53d8\u91cf\u3001",(0,r.kt)("inlineCode",{parentName:"p"},"INSTALL_K3S_EXEC")," \u503c\u548c\u5c3e\u9644\u7684 shell \u53c2\u6570\u90fd\u4fdd\u5b58\u5728\u670d\u52a1\u914d\u7f6e\u4e2d\u3002\n\u5b89\u88c5\u540e\uff0c\u5982\u679c\u9700\u8981\u66f4\u6539\u914d\u7f6e\uff0c\u4f60\u53ef\u4ee5\u7f16\u8f91\u73af\u5883\u6587\u4ef6\u3001\u7f16\u8f91\u670d\u52a1\u914d\u7f6e\u6216\u7b80\u5355\u4f7f\u7528\u65b0\u9009\u9879\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u7a0b\u5e8f\u3002"),(0,r.kt)("p",null,"\u4e3a\u4e86\u8bf4\u660e\u8fd9\u4e00\u70b9\uff0c\u4ee5\u4e0b\u547d\u4ee4\u5747\u540c\u6837\u5730\u6ca1\u6709 Flannel \u548c\u4f7f\u7528\u4ee4\u724c\u7684\u60c5\u51b5\u4e0b\u6ce8\u518c Server\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none --token 12345\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="server --flannel-backend none" K3S_TOKEN=12345 sh -s -\ncurl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none\n# server is assumed below because there is no K3S_URL\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="--flannel-backend none --token 12345" sh -s -\ncurl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345\n')),(0,r.kt)("p",null,"\u6ce8\u518c Agent \u65f6\uff0c\u4ee5\u4e0b\u547d\u4ee4\u90fd\u4f1a\u5bfc\u81f4\u540c\u6837\u7684\u884c\u4e3a\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent --server https://k3s.example.com --token mypassword" sh -s -\ncurl -sfL https://get.k3s.io | INSTALL_K3S_EXEC="agent" K3S_TOKEN="mypassword" sh -s - --server https://k3s.example.com\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword\ncurl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL\n')),(0,r.kt)("p",null,"\u6709\u5173\u6240\u6709\u73af\u5883\u53d8\u91cf\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,r.kt)("a",{parentName:"p",href:"/zh/reference/env-variables"},"\u73af\u5883\u53d8\u91cf"),"\u3002"),(0,r.kt)("admonition",{type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u5728\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u8fdb\u884c\u4e86\u914d\u7f6e\uff0c\u4f46\u5728\u91cd\u65b0\u8fd0\u884c\u5b89\u88c5\u811a\u672c\u65f6\u6ca1\u6709\u91cd\u65b0\u8bbe\u7f6e\uff0c\u5219\u539f\u59cb\u503c\u5c06\u4f1a\u4e22\u5931\u3002"),(0,r.kt)("p",{parentName:"admonition"},(0,r.kt)("a",{parentName:"p",href:"#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6"},"\u914d\u7f6e\u6587\u4ef6")," \u7684\u5185\u5bb9\u4e0d\u53d7\u5b89\u88c5\u811a\u672c\u7ba1\u7406\u3002\n\u8981\u8ba9\u4f60\u7684\u914d\u7f6e\u72ec\u7acb\u4e8e\u5b89\u88c5\u811a\u672c\uff0c\u8bf7\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u800c\u4e0d\u662f\u4f20\u9012\u73af\u5883\u53d8\u91cf\u6216\u4f7f\u7528\u5b89\u88c5\u811a\u672c\u53c2\u6570\u3002")),(0,r.kt)("h2",{id:"\u4e8c\u8fdb\u5236\u914d\u7f6e"},"\u4e8c\u8fdb\u5236\u914d\u7f6e"),(0,r.kt)("p",null,"\u5982\u524d\u6240\u8ff0\uff0c\u5b89\u88c5\u811a\u672c\u4e3b\u8981\u662f\u5c06 K3s \u914d\u7f6e\u4e3a\u670d\u52a1\u6765\u8fd0\u884c\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u5982\u679c\u4f60\u9009\u62e9\u4e0d\u4f7f\u7528\u8be5\u811a\u672c\uff0c\u4f60\u53ef\u4ee5\u901a\u8fc7\u6211\u4eec\u7684 ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/latest"},"Releases \u9875\u9762"),"\u4e0b\u8f7d\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u5c06\u5176\u653e\u5728\u4f60\u7684\u8def\u5f84\u4e0a\uff0c\u7136\u540e\u6267\u884c\u5b83\u5373\u53ef\u8fd0\u884c K3s\u3002\u5bf9\u4e8e\u6c38\u4e45\u5b89\u88c5\u800c\u8a00\u8fd9\u4e0d\u662f\u7279\u522b\u6709\u7528\uff0c\u4f46\u5982\u679c\u6267\u884c\u4e0d\u9700\u8981\u5c06 K3s \u4f5c\u4e3a\u7cfb\u7edf\u670d\u52a1\u7ba1\u7406\u7684\u5feb\u901f\u6d4b\u8bd5\uff0c\u8fd9\u53ef\u80fd\u6709\u7528\u3002"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"curl -Lo /usr/local/bin/k3s https://github.com/k3s-io/k3s/releases/download/v1.26.5+k3s1/k3s; chmod a+x /usr/local/bin/k3s\n")),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u901a\u8fc7\u8bbe\u7f6e ",(0,r.kt)("inlineCode",{parentName:"p"},"K3S_")," \u73af\u5883\u53d8\u91cf\u6765\u4f20\u9012\u914d\u7f6e\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server\n')),(0,r.kt)("p",null,"\u6216\u4f7f\u7528\u547d\u4ee4\u6807\u5fd7\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s server --write-kubeconfig-mode=644\n")),(0,r.kt)("p",null,"K3s Agent \u4e5f\u53ef\u4ee5\u8fd9\u6837\u914d\u7f6e\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},"k3s agent --server https://k3s.example.com --token mypassword\n")),(0,r.kt)("p",null,"\u5173\u4e8e\u914d\u7f6e K3s Server \u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/server"},(0,r.kt)("inlineCode",{parentName:"a"},"K3s Server")," \u6587\u6863"),"\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u6709\u5173\u914d\u7f6e K3s Agent \u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,r.kt)("a",{parentName:"p",href:"/zh/cli/agent"},(0,r.kt)("inlineCode",{parentName:"a"},"K3s Agent")," \u6587\u6863"),"\u3002",(0,r.kt)("br",{parentName:"p"}),"\n","\u4f60\u8fd8\u53ef\u4ee5\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"--help")," \u6807\u5fd7\u6765\u67e5\u770b\u6240\u6709\u53ef\u7528\u9009\u9879\u53ca\u5176\u5bf9\u5e94\u7684\u73af\u5883\u53d8\u91cf\u3002"),(0,r.kt)("admonition",{title:"\u5339\u914d\u6807\u5fd7",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u5339\u914d Server \u8282\u70b9\u4e0a\u7684\u5173\u952e\u6807\u5fd7\u662f\u975e\u5e38\u91cd\u8981\u7684\u3002\u4f8b\u5982\uff0c\u5982\u679c\u4f60\u5728 master \u8282\u70b9\u4e0a\u4f7f\u7528\u4e86 ",(0,r.kt)("inlineCode",{parentName:"p"},"--disable servicelb")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"--cluster-cidr=10.200.0.0/16")," \u6807\u5fd7\uff0c\u4f46\u662f\u6ca1\u6709\u5728\u5176\u4ed6 Server \u8282\u70b9\u4e0a\u8fdb\u884c\u76f8\u540c\u7684\u8bbe\u7f6e\uff0c\u8282\u70b9\u5c06\u65e0\u6cd5\u52a0\u5165\u3002\u5b83\u4eec\u4f1a\u663e\u793a ",(0,r.kt)("inlineCode",{parentName:"p"},"failed to validate server configuration: critical configuration value mismatch")," \u9519\u8bef\u3002\n\u6709\u5173\u5fc5\u987b\u5728 Server \u8282\u70b9\u4e0a\u8bbe\u7f6e\u7684\u6807\u5fd7\u7684\u66f4\u591a\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 Server \u914d\u7f6e\u6587\u6863\uff08\u4e0a\u65b9\u94fe\u63a5\uff09\u3002")),(0,r.kt)("h2",{id:"\u914d\u7f6e\u6587\u4ef6"},"\u914d\u7f6e\u6587\u4ef6"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1"},"v1.19.1+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u9664\u4e86\u4f7f\u7528\u73af\u5883\u53d8\u91cf\u548c CLI \u53c2\u6570\u4e4b\u5916\uff0c\u4f60\u8fd8\u53ef\u4ee5\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u914d\u7f6e K3s\u3002"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5b89\u88c5\u65f6\u5c06\u4f7f\u7528\u4f4d\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u7684 YAML \u6587\u4ef6\u4e2d\u7684\u503c\u3002"),(0,r.kt)("p",null,"\u4e0b\u9762\u662f\u4e00\u4e2a ",(0,r.kt)("inlineCode",{parentName:"p"},"server")," \u914d\u7f6e\u6587\u4ef6\u7684\u57fa\u672c\u793a\u4f8b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'write-kubeconfig-mode: "0644"\ntls-san:\n  - "foo.local"\nnode-label:\n  - "foo=bar"\n  - "something=amazing"\ncluster-init: true\n')),(0,r.kt)("p",null,"\u7b49\u6548\u4e8e\u4ee5\u4e0b CLI \u53c2\u6570\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'k3s server \\\n  --write-kubeconfig-mode "0644"    \\\n  --tls-san "foo.local"             \\\n  --node-label "foo=bar"            \\\n  --node-label "something=amazing"  \\\n  --cluster-init\n')),(0,r.kt)("p",null,"\u4e00\u822c\u6765\u8bf4\uff0cCLI \u53c2\u6570\u6620\u5c04\u5230\u5404\u81ea\u7684 YAML \u952e\uff0c\u53ef\u91cd\u590d\u7684 CLI \u53c2\u6570\u88ab\u8868\u793a\u4e3a YAML \u5217\u8868\u3002\u5e03\u5c14\u6807\u5fd7\u5728 YAML \u6587\u4ef6\u4e2d\u8868\u793a\u4e3a ",(0,r.kt)("inlineCode",{parentName:"p"},"true")," \u6216 ",(0,r.kt)("inlineCode",{parentName:"p"},"false"),"\u3002"),(0,r.kt)("p",null,"\u4e5f\u53ef\u4ee5\u540c\u65f6\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\u548c CLI \u53c2\u6570\u3002 \u5728\u8fd9\u79cd\u60c5\u51b5\u4e0b\uff0c\u503c\u5c06\u4ece\u4e24\u4e2a\u6765\u6e90\u52a0\u8f7d\uff0c\u4f46 CLI \u53c2\u6570\u5c06\u4f18\u5148\u3002 \u5bf9\u4e8e ",(0,r.kt)("inlineCode",{parentName:"p"},"--node-label")," \u7b49\u53ef\u91cd\u590d\u53c2\u6570\uff0cCLI \u53c2\u6570\u5c06\u8986\u76d6\u5217\u8868\u4e2d\u7684\u6240\u6709\u503c\u3002"),(0,r.kt)("p",null,"\u6700\u540e\uff0c\u914d\u7f6e\u6587\u4ef6\u7684\u4f4d\u7f6e\u53ef\u4ee5\u901a\u8fc7 CLI \u53c2\u6570 ",(0,r.kt)("inlineCode",{parentName:"p"},"--config FILE, -c FILE")," \u6216\u8005\u73af\u5883\u53d8\u91cf ",(0,r.kt)("inlineCode",{parentName:"p"},"$K3S_CONFIG_FILE")," \u6765\u6539\u53d8\u3002"),(0,r.kt)("h3",{id:"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6"},"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6"),(0,r.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,r.kt)("p",{parentName:"admonition"},"\u4ece ",(0,r.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1")," \u8d77\u53ef\u7528")),(0,r.kt)("p",null,"\u652f\u6301\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6\u3002\u9ed8\u8ba4\u4ece ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u548c ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml.d/*.yaml")," \u4e2d\u6309\u5b57\u6bcd\u987a\u5e8f\u8bfb\u53d6\u914d\u7f6e\u6587\u4ef6\u3002"),(0,r.kt)("p",null,"\u9ed8\u8ba4\u60c5\u51b5\u4e0b\uff0c\u5c06\u4f7f\u7528\u7ed9\u5b9a\u952e\u7684\u6700\u540e\u4e00\u4e2a\u503c\u3002\u53ef\u4ee5\u5c06 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \u9644\u52a0\u5230\u952e\uff0c\u8fd9\u6837\u80fd\u5c06\u503c\u9644\u52a0\u5230\u73b0\u6709\u5b57\u7b26\u4e32\u6216\u5207\u7247\uff0c\u800c\u4e0d\u662f\u66ff\u6362\u5b83\u3002\u540e\u7eed\u6587\u4ef6\u4e2d\u7684\u6240\u6709\u6b64\u952e\u4e5f\u9700\u8981\u4f7f\u7528 ",(0,r.kt)("inlineCode",{parentName:"p"},"+")," \u6765\u9632\u6b62\u8986\u76d6\u7d2f\u79ef\u503c\u3002"),(0,r.kt)("p",null,"\u591a\u4e2a\u914d\u7f6e\u6587\u4ef6\u7684\u793a\u4f8b\u5982\u4e0b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"# config.yaml\ntoken: boop\nnode-label:\n  - foo=bar\n  - bar=baz\n\n\n# config.yaml.d/test1.yaml\nwrite-kubeconfig-mode: 600\nnode-taint:\n  - alice=bob:NoExecute\n\n# config.yaml.d/test2.yaml\nwrite-kubeconfig-mode: 777\nnode-label:\n  - other=what\n  - foo=three\nnode-taint+:\n  - charlie=delta:NoSchedule\n\n")),(0,r.kt)("p",null,"\u56e0\u6b64\uff0c\u6700\u7ec8\u914d\u7f6e\u5982\u4e0b\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},"write-kubeconfig-mode: 777\ntoken: boop\nnode-label:\n  - other=what\n  - foo=three\nnode-taint:\n  - alice=bob:NoExecute\n  - charlie=delta:NoSchedule\n")),(0,r.kt)("h2",{id:"\u7ec4\u5408\u4f7f\u7528"},"\u7ec4\u5408\u4f7f\u7528"),(0,r.kt)("p",null,"\u4f60\u53ef\u4ee5\u628a\u4e0a\u8ff0\u6240\u6709\u9009\u9879\u7ec4\u5408\u6210\u4e00\u4e2a\u793a\u4f8b\u3002"),(0,r.kt)("p",null,(0,r.kt)("inlineCode",{parentName:"p"},"config.yaml")," \u6587\u4ef6\u521b\u5efa\u5728 ",(0,r.kt)("inlineCode",{parentName:"p"},"/etc/rancher/k3s/config.yaml")," \u4e2d\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-yaml"},'token: "secret"\ndebug: true\n')),(0,r.kt)("p",null,"\u7136\u540e\u4f7f\u7528\u73af\u5883\u53d8\u91cf\u548c\u6807\u5fd7\u7ec4\u5408\u6765\u8fd0\u884c\u5b89\u88c5\u811a\u672c\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE="644" INSTALL_K3S_EXEC="server" sh -s - --flannel-backend none\n')),(0,r.kt)("p",null,"\u6216\u8005\uff0c\u5982\u679c\u4f60\u5df2\u7ecf\u5b89\u88c5\u4e86 K3s \u4e8c\u8fdb\u5236\u6587\u4ef6\uff1a"),(0,r.kt)("pre",null,(0,r.kt)("code",{parentName:"pre",className:"language-bash"},'K3S_KUBECONFIG_MODE="644" k3s server --flannel-backend none\n')),(0,r.kt)("p",null,"Server \u60c5\u51b5\u5982\u4e0b\uff1a"),(0,r.kt)("ul",null,(0,r.kt)("li",{parentName:"ul"},"kubeconfig \u6587\u4ef6\u6743\u9650\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"644")),(0,r.kt)("li",{parentName:"ul"},"Flannel \u540e\u7aef\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"none")),(0,r.kt)("li",{parentName:"ul"},"\u4ee4\u724c\u8bbe\u7f6e\u4e3a ",(0,r.kt)("inlineCode",{parentName:"li"},"secret")),(0,r.kt)("li",{parentName:"ul"},"\u542f\u7528\u8c03\u8bd5\u65e5\u5fd7\u8bb0\u5f55")))}k.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/e65553dc.7e1e3b50.js b/zh/assets/js/e65553dc.4c1627c8.js
similarity index 99%
rename from zh/assets/js/e65553dc.7e1e3b50.js
rename to zh/assets/js/e65553dc.4c1627c8.js
index 1a40a2401..243ad4114 100644
--- a/zh/assets/js/e65553dc.7e1e3b50.js
+++ b/zh/assets/js/e65553dc.4c1627c8.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3642],{3905:(e,t,r)=>{r.d(t,{Zo:()=>s,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var p=n.createContext({}),c=function(e){var t=n.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},s=function(e){var t=c(e.components);return n.createElement(p.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,p=e.parentName,s=l(e,["components","mdxType","originalType","parentName"]),d=c(r),m=a,k=d["".concat(p,".").concat(m)]||d[m]||u[m]||o;return r?n.createElement(k,i(i({ref:t},s),{},{components:r})):n.createElement(k,i({ref:t},s))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=d;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var c=2;c<o;c++)i[c]=r[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5095:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>c});var n=r(3117),a=(r(7294),r(3905));const o={title:"\u5907\u4efd\u548c\u6062\u590d",weight:26},i=void 0,l={unversionedId:"datastore/backup-restore",id:"datastore/backup-restore",title:"\u5907\u4efd\u548c\u6062\u590d",description:"K3s \u7684\u5907\u4efd\u548c\u6062\u590d\u65b9\u5f0f\u53d6\u51b3\u4e8e\u4f60\u4f7f\u7528\u7684\u6570\u636e\u5b58\u50a8\u7c7b\u578b\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",sourceDirName:"datastore",slug:"/datastore/backup-restore",permalink:"/zh/datastore/backup-restore",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u5907\u4efd\u548c\u6062\u590d",weight:26},sidebar:"mySidebar",previous:{title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",permalink:"/zh/datastore/"},next:{title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",permalink:"/zh/datastore/ha-embedded"}},p={},c=[{value:"\u4f7f\u7528 SQLite \u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",id:"\u4f7f\u7528-sqlite-\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",level:2},{value:"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",id:"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",level:2},{value:"\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",id:"\u4f7f\u7528\u5d4c\u5165\u5f0f-etcd-\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",level:2}],s={toc:c};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},s,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s \u7684\u5907\u4efd\u548c\u6062\u590d\u65b9\u5f0f\u53d6\u51b3\u4e8e\u4f60\u4f7f\u7528\u7684\u6570\u636e\u5b58\u50a8\u7c7b\u578b\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u9664\u4e86\u5907\u4efd\u6570\u636e\u5b58\u50a8\u672c\u8eab\uff0c\u4f60\u8fd8\u5fc5\u987b\u5907\u4efd\u4f4d\u4e8e ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token")," \u7684 Server Token \u6587\u4ef6\u3002\n\u4f7f\u7528\u5907\u4efd\u8fdb\u884c\u6062\u590d\u65f6\uff0c\u4f60\u5fc5\u987b\u6062\u590d\u6b64\u6587\u4ef6\uff0c\u6216\u5c06\u5176\u503c\u4f20\u9012\u7ed9 ",(0,a.kt)("inlineCode",{parentName:"p"},"--token")," \u9009\u9879\u3002\n\u7531\u4e8e Token \u7528\u4e8e\u52a0\u5bc6\u6570\u636e\u5b58\u50a8\u5185\u7684\u51ed\u8bc1\u6570\u636e\uff0c\u56e0\u6b64\u5982\u679c\u8fd8\u539f\u65f6\u6ca1\u6709\u4f7f\u7528\u76f8\u540c\u7684 Token \u503c\uff0c\u5feb\u7167\u5c06\u65e0\u6cd5\u4f7f\u7528\u3002")),(0,a.kt)("h2",{id:"\u4f7f\u7528-sqlite-\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"},"\u4f7f\u7528 SQLite \u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"),(0,a.kt)("p",null,"\u4f60\u4e0d\u9700\u8981\u4f7f\u7528\u7279\u6b8a\u547d\u4ee4\u5c31\u80fd\u5907\u4efd\u6216\u6062\u590d SQLite \u6570\u636e\u5b58\u50a8\u3002"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u8981\u5907\u4efd SQLite \u6570\u636e\u5b58\u50a8\uff0c\u8bf7\u590d\u5236 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db/"),"\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u8981\u6062\u590d SQLite \u6570\u636e\u5b58\u50a8\uff0c\u8bf7\u6062\u590d ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db")," \u7684\u5185\u5bb9\uff08\u4ee5\u53ca Token\uff0c\u5982\u4e0a\u6240\u8ff0\uff09\u3002")),(0,a.kt)("h2",{id:"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"},"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"),(0,a.kt)("p",null,"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u65f6\uff0c\u5907\u4efd\u548c\u6062\u590d\u64cd\u4f5c\u5728 K3s \u5916\u9762\u5904\u7406\u3002\u6570\u636e\u5e93\u7ba1\u7406\u5458\u9700\u8981\u5bf9\u5916\u90e8\u6570\u636e\u5e93\u8fdb\u884c\u5907\u4efd\uff0c\u6216\u8005\u4f7f\u7528\u5feb\u7167\u6216\u8f6c\u50a8\u8fdb\u884c\u6062\u590d\u3002"),(0,a.kt)("p",null,"\u6211\u4eec\u5efa\u8bae\u5c06\u6570\u636e\u5e93\u914d\u7f6e\u4e3a",(0,a.kt)("strong",{parentName:"p"},"\u6267\u884c\u5b9a\u671f\u5feb\u7167"),"\u3002"),(0,a.kt)("p",null,"\u6709\u5173\u83b7\u53d6\u6570\u636e\u5e93\u5feb\u7167\u5e76\u4ece\u4e2d\u6062\u590d\u6570\u636e\u5e93\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u5b98\u65b9\u6570\u636e\u5e93\u6587\u6863\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html"},"MySQL \u5b98\u65b9\u6587\u6863")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://www.postgresql.org/docs/8.3/backup-dump.html"},"PostgreSQL \u5b98\u65b9\u6587\u6863")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://etcd.io/docs/latest/op-guide/recovery/"},"etcd \u5b98\u65b9\u6587\u6863"))),(0,a.kt)("h2",{id:"\u4f7f\u7528\u5d4c\u5165\u5f0f-etcd-\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"},"\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"),(0,a.kt)("p",null,"\u6709\u5173\u5728\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u4e0a\u6267\u884c\u5907\u4efd\u548c\u6062\u590d\u64cd\u4f5c\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/etcd-snapshot"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," \u547d\u4ee4\u6587\u6863"),"\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[3642],{3905:(e,t,r)=>{r.d(t,{Zo:()=>s,kt:()=>m});var n=r(7294);function a(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function o(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function i(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?o(Object(r),!0).forEach((function(t){a(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function l(e,t){if(null==e)return{};var r,n,a=function(e,t){if(null==e)return{};var r,n,a={},o=Object.keys(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||(a[r]=e[r]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(n=0;n<o.length;n++)r=o[n],t.indexOf(r)>=0||Object.prototype.propertyIsEnumerable.call(e,r)&&(a[r]=e[r])}return a}var p=n.createContext({}),c=function(e){var t=n.useContext(p),r=t;return e&&(r="function"==typeof e?e(t):i(i({},t),e)),r},s=function(e){var t=c(e.components);return n.createElement(p.Provider,{value:t},e.children)},u={inlineCode:"code",wrapper:function(e){var t=e.children;return n.createElement(n.Fragment,{},t)}},d=n.forwardRef((function(e,t){var r=e.components,a=e.mdxType,o=e.originalType,p=e.parentName,s=l(e,["components","mdxType","originalType","parentName"]),d=c(r),m=a,k=d["".concat(p,".").concat(m)]||d[m]||u[m]||o;return r?n.createElement(k,i(i({ref:t},s),{},{components:r})):n.createElement(k,i({ref:t},s))}));function m(e,t){var r=arguments,a=t&&t.mdxType;if("string"==typeof e||a){var o=r.length,i=new Array(o);i[0]=d;var l={};for(var p in t)hasOwnProperty.call(t,p)&&(l[p]=t[p]);l.originalType=e,l.mdxType="string"==typeof e?e:a,i[1]=l;for(var c=2;c<o;c++)i[c]=r[c];return n.createElement.apply(null,i)}return n.createElement.apply(null,r)}d.displayName="MDXCreateElement"},5095:(e,t,r)=>{r.r(t),r.d(t,{assets:()=>p,contentTitle:()=>i,default:()=>u,frontMatter:()=>o,metadata:()=>l,toc:()=>c});var n=r(3117),a=(r(7294),r(3905));const o={title:"\u5907\u4efd\u548c\u6062\u590d",weight:26},i=void 0,l={unversionedId:"datastore/backup-restore",id:"datastore/backup-restore",title:"\u5907\u4efd\u548c\u6062\u590d",description:"K3s \u7684\u5907\u4efd\u548c\u6062\u590d\u65b9\u5f0f\u53d6\u51b3\u4e8e\u4f60\u4f7f\u7528\u7684\u6570\u636e\u5b58\u50a8\u7c7b\u578b\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",sourceDirName:"datastore",slug:"/datastore/backup-restore",permalink:"/zh/datastore/backup-restore",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u5907\u4efd\u548c\u6062\u590d",weight:26},sidebar:"mySidebar",previous:{title:"\u96c6\u7fa4\u6570\u636e\u5b58\u50a8",permalink:"/zh/datastore/"},next:{title:"\u9ad8\u53ef\u7528\u5d4c\u5165\u5f0f etcd",permalink:"/zh/datastore/ha-embedded"}},p={},c=[{value:"\u4f7f\u7528 SQLite \u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",id:"\u4f7f\u7528-sqlite-\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",level:2},{value:"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",id:"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",level:2},{value:"\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",id:"\u4f7f\u7528\u5d4c\u5165\u5f0f-etcd-\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d",level:2}],s={toc:c};function u(e){let{components:t,...r}=e;return(0,a.kt)("wrapper",(0,n.Z)({},s,r,{components:t,mdxType:"MDXLayout"}),(0,a.kt)("p",null,"K3s \u7684\u5907\u4efd\u548c\u6062\u590d\u65b9\u5f0f\u53d6\u51b3\u4e8e\u4f60\u4f7f\u7528\u7684\u6570\u636e\u5b58\u50a8\u7c7b\u578b\u3002"),(0,a.kt)("admonition",{type:"caution"},(0,a.kt)("p",{parentName:"admonition"},"\u9664\u4e86\u5907\u4efd\u6570\u636e\u5b58\u50a8\u672c\u8eab\uff0c\u4f60\u8fd8\u5fc5\u987b\u5907\u4efd\u4f4d\u4e8e ",(0,a.kt)("inlineCode",{parentName:"p"},"/var/lib/rancher/k3s/server/token")," \u7684 Server Token \u6587\u4ef6\u3002\n\u4f7f\u7528\u5907\u4efd\u8fdb\u884c\u6062\u590d\u65f6\uff0c\u4f60\u5fc5\u987b\u6062\u590d\u6b64\u6587\u4ef6\uff0c\u6216\u5c06\u5176\u503c\u4f20\u9012\u7ed9 ",(0,a.kt)("inlineCode",{parentName:"p"},"--token")," \u9009\u9879\u3002\n\u7531\u4e8e Token \u7528\u4e8e\u52a0\u5bc6\u6570\u636e\u5b58\u50a8\u5185\u7684\u51ed\u8bc1\u6570\u636e\uff0c\u56e0\u6b64\u5982\u679c\u8fd8\u539f\u65f6\u6ca1\u6709\u4f7f\u7528\u76f8\u540c\u7684 Token \u503c\uff0c\u5feb\u7167\u5c06\u65e0\u6cd5\u4f7f\u7528\u3002")),(0,a.kt)("h2",{id:"\u4f7f\u7528-sqlite-\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"},"\u4f7f\u7528 SQLite \u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"),(0,a.kt)("p",null,"\u4f60\u4e0d\u9700\u8981\u4f7f\u7528\u7279\u6b8a\u547d\u4ee4\u5c31\u80fd\u5907\u4efd\u6216\u6062\u590d SQLite \u6570\u636e\u5b58\u50a8\u3002"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},"\u8981\u5907\u4efd SQLite \u6570\u636e\u5b58\u50a8\uff0c\u8bf7\u590d\u5236 ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db/"),"\u3002"),(0,a.kt)("li",{parentName:"ul"},"\u8981\u6062\u590d SQLite \u6570\u636e\u5b58\u50a8\uff0c\u8bf7\u6062\u590d ",(0,a.kt)("inlineCode",{parentName:"li"},"/var/lib/rancher/k3s/server/db")," \u7684\u5185\u5bb9\uff08\u4ee5\u53ca Token\uff0c\u5982\u4e0a\u6240\u8ff0\uff09\u3002")),(0,a.kt)("h2",{id:"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"},"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"),(0,a.kt)("p",null,"\u4f7f\u7528\u5916\u90e8\u6570\u636e\u5b58\u50a8\u65f6\uff0c\u5907\u4efd\u548c\u6062\u590d\u64cd\u4f5c\u5728 K3s \u5916\u9762\u5904\u7406\u3002\u6570\u636e\u5e93\u7ba1\u7406\u5458\u9700\u8981\u5bf9\u5916\u90e8\u6570\u636e\u5e93\u8fdb\u884c\u5907\u4efd\uff0c\u6216\u8005\u4f7f\u7528\u5feb\u7167\u6216\u8f6c\u50a8\u8fdb\u884c\u6062\u590d\u3002"),(0,a.kt)("p",null,"\u6211\u4eec\u5efa\u8bae\u5c06\u6570\u636e\u5e93\u914d\u7f6e\u4e3a",(0,a.kt)("strong",{parentName:"p"},"\u6267\u884c\u5b9a\u671f\u5feb\u7167"),"\u3002"),(0,a.kt)("p",null,"\u6709\u5173\u83b7\u53d6\u6570\u636e\u5e93\u5feb\u7167\u5e76\u4ece\u4e2d\u6062\u590d\u6570\u636e\u5e93\u7684\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605\u5b98\u65b9\u6570\u636e\u5e93\u6587\u6863\uff1a"),(0,a.kt)("ul",null,(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html"},"MySQL \u5b98\u65b9\u6587\u6863")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://www.postgresql.org/docs/8.3/backup-dump.html"},"PostgreSQL \u5b98\u65b9\u6587\u6863")),(0,a.kt)("li",{parentName:"ul"},(0,a.kt)("a",{parentName:"li",href:"https://etcd.io/docs/latest/op-guide/recovery/"},"etcd \u5b98\u65b9\u6587\u6863"))),(0,a.kt)("h2",{id:"\u4f7f\u7528\u5d4c\u5165\u5f0f-etcd-\u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"},"\u4f7f\u7528\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u8fdb\u884c\u5907\u4efd\u548c\u6062\u590d"),(0,a.kt)("p",null,"\u6709\u5173\u5728\u5d4c\u5165\u5f0f etcd \u6570\u636e\u5b58\u50a8\u4e0a\u6267\u884c\u5907\u4efd\u548c\u6062\u590d\u64cd\u4f5c\u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,a.kt)("a",{parentName:"p",href:"/zh/cli/etcd-snapshot"},(0,a.kt)("inlineCode",{parentName:"a"},"k3s etcd-snapshot")," \u547d\u4ee4\u6587\u6863"),"\u3002"))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/f367c5c1.f588bb9a.js b/zh/assets/js/f367c5c1.672c9630.js
similarity index 99%
rename from zh/assets/js/f367c5c1.f588bb9a.js
rename to zh/assets/js/f367c5c1.672c9630.js
index 507f233d6..2b7d91c6b 100644
--- a/zh/assets/js/f367c5c1.f588bb9a.js
+++ b/zh/assets/js/f367c5c1.672c9630.js
@@ -1 +1 @@
-"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7393],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>m});var a=n(7294);function l(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){l(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,l=function(e,t){if(null==e)return{};var n,a,l={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(l[n]=e[n]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(l[n]=e[n])}return l}var o=a.createContext({}),s=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=s(e.components);return a.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,l=e.mdxType,r=e.originalType,o=e.parentName,k=p(e,["components","mdxType","originalType","parentName"]),c=s(n),m=l,u=c["".concat(o,".").concat(m)]||c[m]||d[m]||r;return n?a.createElement(u,i(i({ref:t},k),{},{components:n})):a.createElement(u,i({ref:t},k))}));function m(e,t){var n=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=n.length,i=new Array(r);i[0]=c;var p={};for(var o in t)hasOwnProperty.call(t,o)&&(p[o]=t[o]);p.originalType=e,p.mdxType="string"==typeof e?e:l,i[1]=p;for(var s=2;s<r;s++)i[s]=n[s];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},4554:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>u,frontMatter:()=>r,metadata:()=>p,toc:()=>s});var a=n(3117),l=(n(7294),n(3905));const r={title:"\u7f51\u7edc\u9009\u9879",weight:25},i=void 0,p={unversionedId:"installation/network-options",id:"installation/network-options",title:"\u7f51\u7edc\u9009\u9879",description:"\u672c\u6587\u4ecb\u7ecd\u4e86 K3s \u7f51\u7edc\u914d\u7f6e\u9009\u9879\uff0c\u5305\u62ec\u914d\u7f6e\u6216\u66ff\u6362 Flannel\uff0c\u4ee5\u53ca\u914d\u7f6e IPv6\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/network-options.md",sourceDirName:"installation",slug:"/installation/network-options",permalink:"/zh/installation/network-options",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md",tags:[],version:"current",lastUpdatedAt:1690906253,formattedLastUpdatedAt:"2023\u5e748\u67081\u65e5",frontMatter:{title:"\u7f51\u7edc\u9009\u9879",weight:25},sidebar:"mySidebar",previous:{title:"\u914d\u7f6e\u9009\u9879",permalink:"/zh/installation/configuration"},next:{title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",permalink:"/zh/installation/private-registry"}},o={},s=[{value:"Flannel \u9009\u9879",id:"flannel-\u9009\u9879",level:2},{value:"\u4ece <code>wireguard</code> \u6216 <code>ipsec</code> \u8fc1\u79fb\u5230 <code>wireguard-native</code>",id:"\u4ece-wireguard-\u6216-ipsec-\u8fc1\u79fb\u5230-wireguard-native",level:3},{value:"\u81ea\u5b9a\u4e49 CNI",id:"\u81ea\u5b9a\u4e49-cni",level:2},{value:"Control Plane Egress \u9009\u62e9\u5668\u914d\u7f6e",id:"control-plane-egress-\u9009\u62e9\u5668\u914d\u7f6e",level:2},{value:"\u53cc\u6808 (IPv4 + IPv6) \u7f51\u7edc",id:"\u53cc\u6808-ipv4--ipv6-\u7f51\u7edc",level:2},{value:"\u5355\u6808 IPv6 \u7f51\u7edc",id:"\u5355\u6808-ipv6-\u7f51\u7edc",level:2},{value:"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4",id:"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4",level:2},{value:"\u5d4c\u5165\u5f0f k3s \u591a\u4e91\u89e3\u51b3\u65b9\u6848",id:"\u5d4c\u5165\u5f0f-k3s-\u591a\u4e91\u89e3\u51b3\u65b9\u6848",level:3},{value:"\u96c6\u6210 Tailscale VPN \u63d0\u4f9b\u7a0b\u5e8f\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u96c6\u6210-tailscale-vpn-\u63d0\u4f9b\u7a0b\u5e8f\u5b9e\u9a8c\u6027",level:3}],k=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,l.kt)("div",t)},d=k("Tabs"),c=k("TabItem"),m={toc:s};function u(e){let{components:t,...n}=e;return(0,l.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86 K3s \u7f51\u7edc\u914d\u7f6e\u9009\u9879\uff0c\u5305\u62ec\u914d\u7f6e\u6216\u66ff\u6362 Flannel\uff0c\u4ee5\u53ca\u914d\u7f6e IPv6\u3002"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},(0,l.kt)("strong",{parentName:"p"},"\u6ce8\u610f"),"\uff1a\u6709\u5173 CoreDNS\u3001Traefik \u548c Service LB \u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"p",href:"/zh/networking/"},"\u7f51\u7edc"),"\u9875\u9762\u3002")),(0,l.kt)("h2",{id:"flannel-\u9009\u9879"},"Flannel \u9009\u9879"),(0,l.kt)("p",null,(0,l.kt)("a",{parentName:"p",href:"https://github.com/flannel-io/flannel/blob/master/README.md"},"Flannel")," \u662f\u7b2c 3 \u5c42\u7f51\u7edc\u7ed3\u6784\u7684\u8f7b\u91cf\u7ea7\u63d0\u4f9b\u7a0b\u5e8f\uff0c\u5b83\u5b9e\u73b0\u4e86 Kubernetes \u5bb9\u5668\u7f51\u7edc\u63a5\u53e3 (CNI)\u3002\u5b83\u5c31\u662f\u901a\u5e38\u6240\u8bf4\u7684 CNI \u63d2\u4ef6\u3002"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"Flannel \u53ea\u80fd\u5728 Server \u8282\u70b9\u4e0a\u8bbe\u7f6e\u9009\u9879\uff0c\u5e76\u4e14\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server \u4e0a\u90fd\u5fc5\u987b\u76f8\u540c\u3002"),(0,l.kt)("li",{parentName:"ul"},"Flannel \u7684\u9ed8\u8ba4\u540e\u7aef\u662f ",(0,l.kt)("inlineCode",{parentName:"li"},"vxlan"),"\u3002\u8981\u542f\u7528\u52a0\u5bc6\uff0c\u8bf7\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"wireguard-native")," \u540e\u7aef\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u5728 Rasperry Pi \u4e0a\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"vxlan")," \u548c\u6700\u65b0\u7248\u672c\u7684 Ubuntu \u9700\u8981",(0,l.kt)("a",{parentName:"li",href:"/zh/advanced/#raspberry-pi"},"\u989d\u5916\u7684\u51c6\u5907\u5de5\u4f5c"),"\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u5728\u67d0\u4e9b Linux \u53d1\u884c\u7248\u4e0a\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"wireguard-native")," \u4f5c\u4e3a Flannel \u540e\u7aef\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u6a21\u5757\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,l.kt)("a",{parentName:"li",href:"https://www.wireguard.com/install/"},"WireGuard \u5b89\u88c5\u6307\u5357"),"\u3002\nWireGuard \u7684\u5b89\u88c5\u6b65\u9aa4\u5c06\u786e\u4fdd\u4e3a\u4f60\u7684\u64cd\u4f5c\u7cfb\u7edf\u5b89\u88c5\u9002\u5f53\u7684\u5185\u6838\u6a21\u5757\u3002\n\u5728\u5c1d\u8bd5\u4f7f\u7528 WireGuard Flannel \u540e\u7aef\u4e4b\u524d\uff0c\u4f60\u5fc5\u987b\u786e\u4fdd WireGuard \u5185\u6838\u6a21\u5757\u5728\u6bcf\u4e2a\u8282\u70b9\uff08\u5305\u62ec Server \u548c Agent\uff09\u4e0a\u90fd\u53ef\u7528\u3002")),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"CLI \u6807\u5fd7\u548c\u503c"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06\u4f2a\u88c5\u89c4\u5219\u5e94\u7528\u4e8e IPv6 \u6d41\u91cf\uff08\u9ed8\u8ba4\u4e3a IPv4\uff09\u3002\u4ec5\u9002\u7528\u4e8e\u53cc\u6808\u6216\u4ec5\u4f7f\u7528 IPv6 \u7684\u96c6\u7fa4\u3002\u4e0e ",(0,l.kt)("inlineCode",{parentName:"td"},"none")," \u4ee5\u5916\u7684\u4efb\u4f55 Flannel \u540e\u7aef\u517c\u5bb9\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u8282\u70b9\u5916\u90e8 IP \u5730\u5740\u4f5c\u4e3a Flannel \u6d41\u91cf\u7684\u76ee\u7684\u5730\uff0c\u800c\u4e0d\u662f\u4f7f\u7528\u5185\u90e8 IP\u3002\u4ec5\u5f53\u8282\u70b9\u4e0a\u8bbe\u7f6e\u4e86 ",(0,l.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," \u65f6\u9002\u7528\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=vxlan")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 VXLAN \u5c01\u88c5\u6570\u636e\u5305\u3002\u5728 Raspberry Pi \u4e0a\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u5185\u6838\u6a21\u5757\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=host-gw")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7\u8282\u70b9 IP \u4f7f\u7528 IP \u8def\u7531\u5230 pod \u5b50\u7f51\u3002\u96c6\u7fa4\u4e2d\u6240\u6709\u8282\u70b9\u4e4b\u95f4\u90fd\u9700\u8981\u76f4\u63a5\u7684\u7b2c 2 \u5c42\u8fde\u63a5\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 WireGuard \u5c01\u88c5\u548c\u52a0\u5bc6\u7f51\u7edc\u6d41\u91cf\u3002\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u5185\u6838\u6a21\u5757\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=ipsec")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 ",(0,l.kt)("inlineCode",{parentName:"td"},"swanctl")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u4f7f\u7528 strongSwan IPSec \u6765\u52a0\u5bc6\u7f51\u7edc\u6d41\u91cf\u3002\uff08\u5df2\u5f03\u7528\uff1b\u5c06\u5728 v1.27.0 \u4e2d\u5220\u9664\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 ",(0,l.kt)("inlineCode",{parentName:"td"},"wg")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u4f7f\u7528 WireGuard \u6765\u52a0\u5bc6\u7f51\u7edc\u6d41\u91cf\u3002\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u5185\u6838\u6a21\u5757\u548c\u914d\u7f6e\u3002\uff08\u5df2\u5f03\u7528\uff1b\u5c06\u5728 v1.26.0 \u4e2d\u5220\u9664\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5b8c\u5168\u7981\u7528 Flannel\u3002")))),(0,l.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u4ece 2022-12 \u7248\u672c\uff08v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1\uff09\u5f00\u59cb\uff0cK3s \u4e0d\u518d\u5305\u542b strongSwan ",(0,l.kt)("inlineCode",{parentName:"p"},"swanctl")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"charon")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u5982\u679c\u4f60\u60f3\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"ipsec")," \u540e\u7aef\uff0c\u8bf7\u5728\u5347\u7ea7\u6216\u5b89\u88c5\u8fd9\u4e9b\u7248\u672c\u4e4b\u524d\u5728\u8282\u70b9\u4e0a\u5b89\u88c5\u6b63\u786e\u7684\u5305\u3002")),(0,l.kt)("h3",{id:"\u4ece-wireguard-\u6216-ipsec-\u8fc1\u79fb\u5230-wireguard-native"},"\u4ece ",(0,l.kt)("inlineCode",{parentName:"h3"},"wireguard")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"h3"},"ipsec")," \u8fc1\u79fb\u5230 ",(0,l.kt)("inlineCode",{parentName:"h3"},"wireguard-native")),(0,l.kt)("p",null,"\u65e7\u7248 ",(0,l.kt)("inlineCode",{parentName:"p"},"wireguard")," \u540e\u7aef\u9700\u8981\u5728\u4e3b\u673a\u4e0a\u5b89\u88c5 ",(0,l.kt)("inlineCode",{parentName:"p"},"wg")," \u5de5\u5177\u3002\u8be5\u540e\u7aef\u5c06\u5728 K3s v1.26 \u4e2d\u5220\u9664\uff0c\u53d6\u800c\u4ee3\u4e4b\u7684\u662f\u76f4\u63a5\u4e0e\u5185\u6838\u4ea4\u4e92\u7684 ",(0,l.kt)("inlineCode",{parentName:"p"},"wireguard-native")," \u540e\u7aef\u3002"),(0,l.kt)("p",null,"\u65e7\u7248 ",(0,l.kt)("inlineCode",{parentName:"p"},"ipsec")," \u540e\u7aef\u9700\u8981\u5728\u4e3b\u673a\u4e0a\u5b89\u88c5 ",(0,l.kt)("inlineCode",{parentName:"p"},"swanctl")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"charon")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u8be5\u540e\u7aef\u5c06\u5728 K3s v1.27 \u4e2d\u5220\u9664\uff0c\u4ee5\u652f\u6301 ",(0,l.kt)("inlineCode",{parentName:"p"},"wireguard-native")," \u540e\u7aef\u3002"),(0,l.kt)("p",null,"\u6211\u4eec\u5efa\u8bae\u7528\u6237\u5c3d\u5feb\u8fc1\u79fb\u5230\u65b0\u7684\u540e\u7aef\u3002\u8282\u70b9\u6709\u4e86\u65b0\u914d\u7f6e\u540e\uff0c\u8fc1\u79fb\u4e0d\u4f1a\u82b1\u8d39\u5f88\u957f\u7684\u505c\u673a\u65f6\u95f4\u3002\u4f60\u53ef\u4ee5\u9075\u5faa\u4ee5\u4e0b\u4e24\u4e2a\u6b65\u9aa4\u8fdb\u884c\u64cd\u4f5c\uff1a"),(0,l.kt)("ol",null,(0,l.kt)("li",{parentName:"ol"},"\u66f4\u65b0\u6240\u6709 Server \u8282\u70b9\u4e0a\u7684 K3s \u914d\u7f6e\u3002\u5982\u679c\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\uff0c",(0,l.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/config.yaml")," \u5e94\u8be5\u5305\u62ec ",(0,l.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard-native")," \u800c\u4e0d\u662f ",(0,l.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"li"},"flannel-backend: ipsec"),"\u3002\u5982\u679c\u4f60\u5728 systemd \u5355\u5143\u4e2d\u901a\u8fc7 CLI \u6807\u5fd7\u914d\u7f6e K3s\uff0c\u5219\u5e94\u66f4\u6539\u5bf9\u5e94\u7684\u6807\u5fd7\u3002"),(0,l.kt)("li",{parentName:"ol"},"\u4ece Server \u8282\u70b9\u5f00\u59cb\u91cd\u65b0\u542f\u52a8\u6240\u6709\u8282\u70b9\u3002")),(0,l.kt)("h2",{id:"\u81ea\u5b9a\u4e49-cni"},"\u81ea\u5b9a\u4e49 CNI"),(0,l.kt)("p",null,"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"--flannel-backend=none")," \u542f\u52a8 K3s \u5e76\u5b89\u88c5\u4f60\u9009\u62e9\u7684 CNI\u3002\u5927\u591a\u6570 CNI \u63d2\u4ef6\u90fd\u6709\u81ea\u5df1\u7684\u7f51\u7edc\u7b56\u7565\u5f15\u64ce\uff0c\u56e0\u6b64\u5efa\u8bae\u540c\u65f6\u8bbe\u7f6e ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," \u4ee5\u907f\u514d\u51b2\u7a81\u3002\u9700\u8981\u8003\u8651\u7684\u91cd\u8981\u4fe1\u606f\uff1a"),(0,l.kt)(d,{mdxType:"Tabs"},(0,l.kt)(c,{value:"Canal",default:!0,mdxType:"TabItem"},(0,l.kt)("p",null,"\u8bbf\u95ee ",(0,l.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/getting-started/kubernetes/flannel/install-for-flannel#installing-calico-for-policy-and-flannel-aka-canal-for-networking"},"Canal Docs")," \u7f51\u7ad9\u3002\u6309\u7167\u6b65\u9aa4\u5b89\u88c5 Canal\u3002\u4fee\u6539 Canal YAML \u4ee5\u4fbf\u5728 ",(0,l.kt)("inlineCode",{parentName:"p"},"container_settings")," \u4e2d\u5141\u8bb8 IP \u8f6c\u53d1\uff0c\u4f8b\u5982\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,l.kt)("p",null,"\u5e94\u7528 Canal YAML\u3002"),(0,l.kt)("p",null,"\u901a\u8fc7\u5728\u4e3b\u673a\u4e0a\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff0c\u786e\u4fdd\u8bbe\u7f6e\u5df2\u88ab\u5e94\u7528\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-canal.conflist\n")),(0,l.kt)("p",null,"\u4f60\u5e94\u8be5\u770b\u5230 IP \u8f6c\u53d1\u88ab\u8bbe\u7f6e\u4e3a true\u3002")),(0,l.kt)(c,{value:"Calico",default:!0,mdxType:"TabItem"},(0,l.kt)("p",null,"\u9075\u5faa ",(0,l.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/reference/configure-cni-plugins"},"Calico CNI \u63d2\u4ef6\u6307\u5357"),"\u3002\u4fee\u6539 Calico YAML \u4ee5\u4fbf\u5728 ",(0,l.kt)("inlineCode",{parentName:"p"},"container_settings")," \u4e2d\u5141\u8bb8 IP \u8f6c\u53d1\uff0c\u4f8b\u5982\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,l.kt)("p",null,"\u5e94\u7528 Calico YAML\u3002"),(0,l.kt)("p",null,"\u901a\u8fc7\u5728\u4e3b\u673a\u4e0a\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff0c\u786e\u4fdd\u8bbe\u7f6e\u5df2\u88ab\u5e94\u7528\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-calico.conflist\n")),(0,l.kt)("p",null,"\u4f60\u5e94\u8be5\u770b\u5230 IP \u8f6c\u53d1\u88ab\u8bbe\u7f6e\u4e3a true\u3002")),(0,l.kt)(c,{value:"Cilium",default:!0,mdxType:"TabItem"},(0,l.kt)("p",null,"\u8fd0\u884c ",(0,l.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"p"},"k3s-uninstall.sh"),"\u4e4b\u524d\uff0c\u4f60\u5fc5\u987b\u624b\u52a8\u5220\u9664 ",(0,l.kt)("inlineCode",{parentName:"p"},"cilium_host"),"\u3001",(0,l.kt)("inlineCode",{parentName:"p"},"cilium_net")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"cilium_vxlan")," \u63a5\u53e3\u3002\u5982\u679c\u4e0d\u8fd9\u6837\u505a\uff0c\u4f60\u53ef\u80fd\u4f1a\u5728 K3s \u505c\u6b62\u65f6\u4e22\u5931\u4e0e\u4e3b\u673a\u7684\u7f51\u7edc\u8fde\u63a5"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"ip link delete cilium_host\nip link delete cilium_net\nip link delete cilium_vxlan\n")),(0,l.kt)("p",null,"\u6b64\u5916\uff0c\u4f60\u9700\u8981\u5220\u9664 cilium \u7684 iptables \u89c4\u5219\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"iptables-save | grep -iv cilium | iptables-restore\nip6tables-save | grep -iv cilium | ip6tables-restore\n")))),(0,l.kt)("h2",{id:"control-plane-egress-\u9009\u62e9\u5668\u914d\u7f6e"},"Control Plane Egress \u9009\u62e9\u5668\u914d\u7f6e"),(0,l.kt)("p",null,"K3s Agent \u548c Server \u7ef4\u62a4\u8282\u70b9\u4e4b\u95f4\u7684 websocket \u96a7\u9053\uff0c\u8fd9\u4e9b\u96a7\u9053\u7528\u4e8e\u5c01\u88c5 control plane\uff08apiserver\uff09\u548c Agent\uff08kubelet \u548c containerd\uff09\u7ec4\u4ef6\u4e4b\u95f4\u7684\u53cc\u5411\u901a\u4fe1\u3002\n\u8fd9\u5141\u8bb8 Agent \u5728\u4e0d\u5c06 kubelet \u548c\u5bb9\u5668\u8fd0\u884c\u65f6\u6d41\u7aef\u53e3\u66b4\u9732\u7ed9\u4f20\u5165\u8fde\u63a5\u7684\u60c5\u51b5\u4e0b\u8fd0\u884c\uff0c\u5e76\u5141\u8bb8 control plane \u5728\u7981\u7528 Agent \u7684\u60c5\u51b5\u4e0b\u8fde\u63a5\u5230\u96c6\u7fa4\u670d\u52a1\u3002\n\u6b64\u529f\u80fd\u7b49\u540c\u4e8e\u5176\u4ed6 Kubernetes \u53d1\u884c\u7248\u4e0a\u5e38\u7528\u7684 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/extend-kubernetes/setup-konnectivity/"},"Konnectivity")," \u670d\u52a1\uff0c\u901a\u8fc7 apiserver \u7684 Egress \u9009\u62e9\u5668\u914d\u7f6e\u8fdb\u884c\u7ba1\u7406\u3002"),(0,l.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"--egress-selector-mode")," \u6807\u5fd7\u5728 Server \u4e0a\u914d\u7f6e Egress \u9009\u62e9\u5668\u6a21\u5f0f\uff0c\u652f\u6301\u56db\u79cd\u6a21\u5f0f\uff1a"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"disabled"),"\uff1aapiserver \u4e0d\u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelet \u6216\u96c6\u7fa4\u7aef\u70b9\u901a\u4fe1\u3002\n\u6b64\u6a21\u5f0f\u8981\u6c42 Server \u8fd0\u884c kubelet\u3001CNI \u548c kube-proxy\uff0c\u5e76\u4e0e Agent \u76f4\u63a5\u8fde\u63a5\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee Service \u7aef\u70b9\u6216\u6267\u884c ",(0,l.kt)("inlineCode",{parentName:"li"},"kubectl exec")," \u548c ",(0,l.kt)("inlineCode",{parentName:"li"},"kubectl logs"),"\u3002"),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"agent"),"\uff08\u9ed8\u8ba4\uff09\uff1aapiserver \u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelet \u901a\u4fe1\u3002\n\u8fd9\u79cd\u6a21\u5f0f\u8981\u6c42 Server \u4e5f\u8fd0\u884c kubelet\u3001CNI \u548c kube-proxy\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee Service \u7aef\u70b9\u3002"),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"pod"),"\uff1aapiserver \u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelets \u548c Service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u8282\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 Agent\u3002\n",(0,l.kt)("strong",{parentName:"li"},"\u6ce8\u610f"),"\uff1a\u5982\u679c CNI \u4f7f\u7528\u81ea\u5df1\u7684 IPAM\uff0c\u800c\u4e14\u4e0d\u8003\u8651\u8282\u70b9\u7684 PodCIDR \u5206\u914d\uff0c\u8fd9\u5c06\u4e0d\u8d77\u4f5c\u7528\u3002\u8fd9\u4e9b CNI \u9700\u8981\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"cluster")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"li"},"agent"),"\u3002"),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"cluster"),"\uff1aapiserver \u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelets \u548c Service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u7aef\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 Agent\u3002")),(0,l.kt)("h2",{id:"\u53cc\u6808-ipv4--ipv6-\u7f51\u7edc"},"\u53cc\u6808 (IPv4 + IPv6) \u7f51\u7edc"),(0,l.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u4ece ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1")," \u5f00\u59cb\u63d0\u4f9b\u5b9e\u9a8c\u6027\u652f\u6301\u3002",(0,l.kt)("br",{parentName:"p"}),"\n","\u4ece ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1"},"v1.23.7+k3s1")," \u5f00\u59cb\u63d0\u4f9b\u7a33\u5b9a\u652f\u6301\u3002")),(0,l.kt)("admonition",{title:"\u5df2\u77e5\u95ee\u9898",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"Kubernetes ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/111695"},"Issue #111695")," \u5bfc\u81f4\u4e86\u4e00\u4e2a\u95ee\u9898\u3002\u5982\u679c\u4f60\u6709\u4e00\u4e2a\u53cc\u6808\u73af\u5883\u800c\u4e14\u4f60\u6ca1\u6709\u4e3a\u96c6\u7fa4\u6d41\u91cf\u4f7f\u7528\u4e3b\u8981\u7f51\u5361\uff0c\u90a3\u4e48 Kubelet \u4f1a\u5ffd\u7565\u8282\u70b9 IPv6 \u5730\u5740\u3002\u4e3a\u907f\u514d\u6b64\u9519\u8bef\uff0c\u8bf7\u5c06\u4ee5\u4e0b\u6807\u5fd7\u6dfb\u52a0\u5230 K3s Server \u548c Agent \uff1a"),(0,l.kt)("pre",{parentName:"admonition"},(0,l.kt)("code",{parentName:"pre"},'--kubelet-arg="node-ip=0.0.0.0" # To proritize IPv4 traffic\n#OR\n--kubelet-arg="node-ip=::" # To proritize IPv6 traffic\n'))),(0,l.kt)("p",null,"\u9996\u6b21\u521b\u5efa\u96c6\u7fa4\u65f6\u5fc5\u987b\u914d\u7f6e\u53cc\u6808\u7ec4\u7f51\u3002\u4e00\u65e6\u4ec5\u4f7f\u7528 IPv4 \u542f\u52a8\uff0c\u5b83\u5c31\u65e0\u6cd5\u5728\u73b0\u6709\u96c6\u7fa4\u4e0a\u542f\u7528\u3002"),(0,l.kt)("p",null,"\u8981\u5728 K3s \u4e2d\u542f\u7528\u53cc\u6808\uff0c\u4f60\u5fc5\u987b\u5728\u6240\u6709 server \u8282\u70b9\u4e0a\u63d0\u4f9b\u6709\u6548\u7684\u53cc\u6808 ",(0,l.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"service-cidr"),"\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u6709\u6548\u914d\u7f6e\u7684\u793a\u4f8b\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre"},"--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112\n")),(0,l.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0c\u4f60\u53ef\u4ee5\u914d\u7f6e\u4efb\u4f55\u6709\u6548\u7684 ",(0,l.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"service-cidr")," \u503c\uff0c\u4f46\u5efa\u8bae\u4f7f\u7528\u4e0a\u8ff0\u63a9\u7801\u3002\u5982\u679c\u66f4\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," \u63a9\u7801\uff0c\u5219\u8fd8\u5e94\u66f4\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv4")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv6")," \u503c\u4ee5\u5339\u914d\u6bcf\u4e2a\u8282\u70b9\u7684\u8ba1\u5212 pod \u548c\u8282\u70b9\u603b\u6570\u3002\u5bf9\u4e8e IPv4\uff0c\u652f\u6301\u7684\u6700\u5927 ",(0,l.kt)("inlineCode",{parentName:"p"},"service-cidr")," \u63a9\u7801\u662f /12\uff0c\u800c IPv6 \u7684\u662f /112\u3002\u5982\u679c\u4f60\u5728\u516c\u5171\u4e91\u4e2d\u90e8\u7f72\uff0c\u8bf7\u8bb0\u4f4f\u5141\u8bb8 ipv6 \u6d41\u91cf\u3002"),(0,l.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528\u7684\u662f\u81ea\u5b9a\u4e49 CNI \u63d2\u4ef6\uff0c\u5373 Flannel \u4ee5\u5916\u7684 CNI \u63d2\u4ef6\uff0c\u5219\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u914d\u7f6e\u3002\u8bf7\u53c2\u9605\u4f60\u4f7f\u7528\u7684\u63d2\u4ef6\u7684\u53cc\u6808\u6587\u6863\uff0c\u5e76\u9a8c\u8bc1\u662f\u5426\u53ef\u4ee5\u542f\u7528\u7f51\u7edc\u7b56\u7565\u3002"),(0,l.kt)("h2",{id:"\u5355\u6808-ipv6-\u7f51\u7edc"},"\u5355\u6808 IPv6 \u7f51\u7edc"),(0,l.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u4ece ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1"},"v1.22.9+k3s1")," \u8d77\u53ef\u7528")),(0,l.kt)("admonition",{title:"\u5df2\u77e5\u95ee\u9898",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u7684 IPv6 \u9ed8\u8ba4\u8def\u7531\u662f\u7531\u8def\u7531\u5668\u516c\u544a\uff08RA\uff09\u8bbe\u7f6e\u7684\uff0c\u4f60\u9700\u8981\u8bbe\u7f6e sysctl ",(0,l.kt)("inlineCode",{parentName:"p"},"net.ipv6.conf.all.accept_ra=2"),"\u3002\u5426\u5219\uff0c\u4e00\u65e6\u9ed8\u8ba4\u8def\u7531\u8fc7\u671f\uff0c\u8282\u70b9\u5c06\u653e\u5f03\u8be5\u8def\u7531\u3002\u8bf7\u6ce8\u610f\uff0c\u63a5\u53d7 RA \u53ef\u80fd\u4f1a\u589e\u52a0",(0,l.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/91507"},"\u4e2d\u95f4\u4eba\u653b\u51fb"),"\u7684\u98ce\u9669\u3002")),(0,l.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"--service-cidr")," \u6807\u5fd7\u5728 K3s \u4e0a\u4f7f\u7528\u5355\u6808 IPv6 \u96c6\u7fa4\uff08\u6ca1\u6709 IPv4 \u7684\u96c6\u7fa4\uff09\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u6709\u6548\u914d\u7f6e\u7684\u793a\u4f8b\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112\n")),(0,l.kt)("h2",{id:"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4"},"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4"),(0,l.kt)("p",null,"K3s \u96c6\u7fa4\u4ecd\u7136\u53ef\u4ee5\u90e8\u7f72\u5728\u4e0d\u5171\u4eab\u516c\u5171\u79c1\u6709\u7f51\u7edc\u4e14\u4e0d\u76f4\u63a5\u8fde\u63a5\u7684\u8282\u70b9\u4e0a\uff08\u4f8b\u5982\u4e0d\u540c\u516c\u6709\u4e91\u4e2d\u7684\u8282\u70b9\uff09\u3002\u6709\u4e24\u79cd\u9009\u62e9\u53ef\u4ee5\u5b9e\u73b0\u8fd9\u4e00\u70b9\uff1a\u5d4c\u5165\u5f0f k3s \u591a\u4e91\u89e3\u51b3\u65b9\u6848\u548c\u96c6\u6210 ",(0,l.kt)("inlineCode",{parentName:"p"},"tailscale")," VPN \u63d0\u4f9b\u7a0b\u5e8f\u3002"),(0,l.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u5916\u90e8\u8fde\u63a5\u9700\u8981\u66f4\u591a\u7684\u8dc3\u70b9\uff0c\u90a3\u4e48\u8282\u70b9\u4e4b\u95f4\u7684\u5ef6\u8fdf\u4f1a\u53d8\u9ad8\u3002\u5ef6\u8fdf\u592a\u9ad8\u4f1a\u964d\u4f4e\u7f51\u7edc\u6027\u80fd\uff0c\u8fd8\u53ef\u80fd\u5f71\u54cd\u96c6\u7fa4\u7684\u8fd0\u884c\u3002")),(0,l.kt)("admonition",{type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u6b64\u7c7b\u90e8\u7f72\u4e0d\u652f\u6301\u5d4c\u5165\u5f0f etcd\u3002\u5982\u679c\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u6240\u6709 Server \u8282\u70b9\u5fc5\u987b\u53ef\u4ee5\u901a\u8fc7\u5176\u79c1\u6709 IP \u76f8\u4e92\u8bbf\u95ee\u3002Agent \u53ef\u80fd\u5206\u5e03\u5728\u591a\u4e2a\u7f51\u7edc\u4e0a\uff0c\u4f46\u6240\u6709 server \u90fd\u5e94\u8be5\u4f4d\u4e8e\u540c\u4e00\u4f4d\u7f6e\u3002")),(0,l.kt)("h3",{id:"\u5d4c\u5165\u5f0f-k3s-\u591a\u4e91\u89e3\u51b3\u65b9\u6848"},"\u5d4c\u5165\u5f0f k3s \u591a\u4e91\u89e3\u51b3\u65b9\u6848"),(0,l.kt)("p",null,"K3s \u4f7f\u7528 wireguard \u4e3a\u96c6\u7fa4\u6d41\u91cf\u5efa\u7acb VPN \u7f51\u683c\u3002\u6bcf\u4e2a\u8282\u70b9\u90fd\u5fc5\u987b\u5177\u6709\u552f\u4e00\u7684 IP\uff0c\u53ef\u4ee5\u901a\u8fc7 IP \u8bbf\u95ee\u8282\u70b9\uff08\u901a\u5e38\u662f\u516c\u5171 IP\uff09\u3002K3s supervisor \u6d41\u91cf\u5c06\u4f7f\u7528 websocket \u96a7\u9053\uff0c\u96c6\u7fa4 (CNI) \u6d41\u91cf\u5c06\u4f7f\u7528 wireguard \u96a7\u9053\u3002"),(0,l.kt)("p",null,"\u8981\u542f\u7528\u8fd9\u79cd\u7c7b\u578b\u7684\u90e8\u7f72\uff0c\u4f60\u5fc5\u987b\u5728 Server \u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u53c2\u6570\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip\n")),(0,l.kt)("p",null,"\u5728 Agent \u4e0a\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<AGENT_EXTERNAL_IP>\n")),(0,l.kt)("p",null,"\u5176\u4e2d ",(0,l.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," \u662f\u8bbf\u95ee Server \u8282\u70b9\u7684 IP\uff0c",(0,l.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," \u662f\u8bbf\u95ee Agent \u8282\u70b9\u7684 IP\u3002\u8bf7\u6ce8\u610f\uff0cAgent \u4e2d\u7684 ",(0,l.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u914d\u7f6e\u53c2\u6570\u9700\u8981\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," \u624d\u80fd\u8fde\u63a5\u3002\u8bf7\u8bb0\u4f4f\u68c0\u67e5",(0,l.kt)("a",{parentName:"p",href:"/zh/installation/requirements#%E7%BD%91%E7%BB%9C"},"\u7f51\u7edc\u8981\u6c42"),"\uff0c\u5e76\u5141\u8bb8\u8bbf\u95ee\u5185\u90e8\u548c\u5916\u90e8\u5730\u5740\u4e0a\u5217\u51fa\u7684\u7aef\u53e3\u3002"),(0,l.kt)("p",null,(0,l.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," \u4e4b\u95f4\u9700\u8981\u4fdd\u6301\u8fde\u63a5\uff0c\u5e76\u4e14\u901a\u5e38\u4f7f\u7528\u516c\u5171 IP\u3002"),(0,l.kt)("admonition",{title:"\u52a8\u6001 IP",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4e3a\u8282\u70b9\u5206\u914d\u52a8\u6001 IP \u5e76\u4e14 IP \u53d1\u751f\u53d8\u5316\uff08\u4f8b\u5982\u5728 AWS \u4e2d\uff09\uff0c\u5219\u5fc5\u987b\u4fee\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-external-ip")," \u53c2\u6570\u6765\u53cd\u6620\u65b0 IP\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a Service \u8fd0\u884c\uff0c\u5219\u5fc5\u987b\u4fee\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service")," \u7136\u540e\u8fd0\u884c\uff1a"),(0,l.kt)("pre",{parentName:"admonition"},(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl daemon-reload\nsystemctl restart k3s\n"))),(0,l.kt)("h3",{id:"\u96c6\u6210-tailscale-vpn-\u63d0\u4f9b\u7a0b\u5e8f\u5b9e\u9a8c\u6027"},"\u96c6\u6210 Tailscale VPN \u63d0\u4f9b\u7a0b\u5e8f\uff08\u5b9e\u9a8c\u6027\uff09"),(0,l.kt)("p",null,"\u5728 v1.27.3\u3001v1.26.6\u3001v1.25.11 \u548c\u66f4\u65b0\u7248\u672c\u4e2d\u53ef\u7528\u3002"),(0,l.kt)("p",null,"K3s \u53ef\u4ee5\u4e0e ",(0,l.kt)("a",{parentName:"p",href:"https://tailscale.com/"},"Tailscale")," \u96c6\u6210\uff0c\u4ee5\u4fbf\u8282\u70b9\u4f7f\u7528 Tailscale VPN \u670d\u52a1\u5728\u8282\u70b9\u4e4b\u95f4\u6784\u5efa\u7f51\u683c\u3002"),(0,l.kt)("p",null,"\u5728\u90e8\u7f72 K3s \u4e4b\u524d\uff0cTailscale \u9700\u8981\u5b8c\u6210\u56db\u4e2a\u6b65\u9aa4\uff1a"),(0,l.kt)("ol",null,(0,l.kt)("li",{parentName:"ol"},(0,l.kt)("p",{parentName:"li"},"\u767b\u5f55\u5230\u4f60\u7684 Tailscale \u5e10\u6237")),(0,l.kt)("li",{parentName:"ol"},(0,l.kt)("p",{parentName:"li"},"\u5728 ",(0,l.kt)("inlineCode",{parentName:"p"},"Settings > Keys")," \u4e2d\uff0c\u751f\u6210\u4e00\u4e2a\u6388\u6743\u5bc6\u94a5\uff08$AUTH-KEY\uff09\uff0c\u5b83\u53ef\u4ee5\u88ab\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u91cd\u590d\u4f7f\u7528")),(0,l.kt)("li",{parentName:"ol"},(0,l.kt)("p",{parentName:"li"},"\u51b3\u5b9a\u96c6\u7fa4\u5c06\u4f7f\u7528\u7684 podCIDR\uff08\u9ed8\u8ba4 ",(0,l.kt)("inlineCode",{parentName:"p"},"10.42.0.0/16"),"\uff09\u3002\u5728 Access \u63a7\u5236\u4e2d\u9644\u52a0 CIDR\uff08\u6216\u53cc\u6808\u7684 CIDR\uff09\uff1a"))),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-yaml"},'"autoApprovers": {\n        "routes": {\n            "10.42.0.0/16":        ["your_account@xyz.com"],\n            "2001:cafe:42:0::/56": ["your_account@xyz.com"],\n        },\n    },\n')),(0,l.kt)("ol",{start:4},(0,l.kt)("li",{parentName:"ol"},"\u5728\u8282\u70b9\u4e2d\u5b89\u88c5 Tailscale\uff1a")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fsSL https://tailscale.com/install.sh | sh\n")),(0,l.kt)("p",null,"\u8981\u90e8\u7f72\u542f\u7528\u4e86 Tailscale \u96c6\u6210\u7684 K3s\uff0c\u4f60\u5fc5\u987b\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u6dfb\u52a0\u4ee5\u4e0b\u53c2\u6570\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'--vpn-auth="name=tailscale,joinKey=$AUTH-KEY\n')),(0,l.kt)("p",null,"\u6216\u5728\u6587\u4ef6\u4e2d\u63d0\u4f9b\u8be5\u4fe1\u606f\u5e76\u4f7f\u7528\u53c2\u6570\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--vpn-auth-file=$PATH_TO_FILE\n")),(0,l.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u8ba1\u5212\u4f7f\u7528\u540c\u4e00\u4e2a tailscale \u7f51\u7edc\u8fd0\u884c\u591a\u4e2a K3s \u96c6\u7fa4\uff0c\u8bf7\u521b\u5efa\u9002\u5f53\u7684 ",(0,l.kt)("a",{parentName:"p",href:"https://tailscale.com/kb/1018/acls/"},"ACL")," \u6765\u907f\u514d IP \u51b2\u7a81\uff0c\u6216\u4e3a\u6bcf\u4e2a\u96c6\u7fa4\u4f7f\u7528\u4e0d\u540c\u7684 podCIDR \u5b50\u7f51\u3002")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
+"use strict";(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[7393],{3905:(e,t,n)=>{n.d(t,{Zo:()=>k,kt:()=>m});var a=n(7294);function l(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function r(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function i(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{};t%2?r(Object(n),!0).forEach((function(t){l(e,t,n[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function p(e,t){if(null==e)return{};var n,a,l=function(e,t){if(null==e)return{};var n,a,l={},r=Object.keys(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||(l[n]=e[n]);return l}(e,t);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);for(a=0;a<r.length;a++)n=r[a],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(l[n]=e[n])}return l}var o=a.createContext({}),s=function(e){var t=a.useContext(o),n=t;return e&&(n="function"==typeof e?e(t):i(i({},t),e)),n},k=function(e){var t=s(e.components);return a.createElement(o.Provider,{value:t},e.children)},d={inlineCode:"code",wrapper:function(e){var t=e.children;return a.createElement(a.Fragment,{},t)}},c=a.forwardRef((function(e,t){var n=e.components,l=e.mdxType,r=e.originalType,o=e.parentName,k=p(e,["components","mdxType","originalType","parentName"]),c=s(n),m=l,u=c["".concat(o,".").concat(m)]||c[m]||d[m]||r;return n?a.createElement(u,i(i({ref:t},k),{},{components:n})):a.createElement(u,i({ref:t},k))}));function m(e,t){var n=arguments,l=t&&t.mdxType;if("string"==typeof e||l){var r=n.length,i=new Array(r);i[0]=c;var p={};for(var o in t)hasOwnProperty.call(t,o)&&(p[o]=t[o]);p.originalType=e,p.mdxType="string"==typeof e?e:l,i[1]=p;for(var s=2;s<r;s++)i[s]=n[s];return a.createElement.apply(null,i)}return a.createElement.apply(null,n)}c.displayName="MDXCreateElement"},4554:(e,t,n)=>{n.r(t),n.d(t,{assets:()=>o,contentTitle:()=>i,default:()=>u,frontMatter:()=>r,metadata:()=>p,toc:()=>s});var a=n(3117),l=(n(7294),n(3905));const r={title:"\u7f51\u7edc\u9009\u9879",weight:25},i=void 0,p={unversionedId:"installation/network-options",id:"installation/network-options",title:"\u7f51\u7edc\u9009\u9879",description:"\u672c\u6587\u4ecb\u7ecd\u4e86 K3s \u7f51\u7edc\u914d\u7f6e\u9009\u9879\uff0c\u5305\u62ec\u914d\u7f6e\u6216\u66ff\u6362 Flannel\uff0c\u4ee5\u53ca\u914d\u7f6e IPv6\u3002",source:"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/network-options.md",sourceDirName:"installation",slug:"/installation/network-options",permalink:"/zh/installation/network-options",draft:!1,editUrl:"https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md",tags:[],version:"current",lastUpdatedAt:1691096602,formattedLastUpdatedAt:"2023\u5e748\u67083\u65e5",frontMatter:{title:"\u7f51\u7edc\u9009\u9879",weight:25},sidebar:"mySidebar",previous:{title:"\u914d\u7f6e\u9009\u9879",permalink:"/zh/installation/configuration"},next:{title:"\u79c1\u6709\u955c\u50cf\u4ed3\u5e93\u914d\u7f6e",permalink:"/zh/installation/private-registry"}},o={},s=[{value:"Flannel \u9009\u9879",id:"flannel-\u9009\u9879",level:2},{value:"\u4ece <code>wireguard</code> \u6216 <code>ipsec</code> \u8fc1\u79fb\u5230 <code>wireguard-native</code>",id:"\u4ece-wireguard-\u6216-ipsec-\u8fc1\u79fb\u5230-wireguard-native",level:3},{value:"\u81ea\u5b9a\u4e49 CNI",id:"\u81ea\u5b9a\u4e49-cni",level:2},{value:"Control Plane Egress \u9009\u62e9\u5668\u914d\u7f6e",id:"control-plane-egress-\u9009\u62e9\u5668\u914d\u7f6e",level:2},{value:"\u53cc\u6808 (IPv4 + IPv6) \u7f51\u7edc",id:"\u53cc\u6808-ipv4--ipv6-\u7f51\u7edc",level:2},{value:"\u5355\u6808 IPv6 \u7f51\u7edc",id:"\u5355\u6808-ipv6-\u7f51\u7edc",level:2},{value:"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4",id:"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4",level:2},{value:"\u5d4c\u5165\u5f0f k3s \u591a\u4e91\u89e3\u51b3\u65b9\u6848",id:"\u5d4c\u5165\u5f0f-k3s-\u591a\u4e91\u89e3\u51b3\u65b9\u6848",level:3},{value:"\u96c6\u6210 Tailscale VPN \u63d0\u4f9b\u7a0b\u5e8f\uff08\u5b9e\u9a8c\u6027\uff09",id:"\u96c6\u6210-tailscale-vpn-\u63d0\u4f9b\u7a0b\u5e8f\u5b9e\u9a8c\u6027",level:3}],k=e=>function(t){return console.warn("Component "+e+" was not imported, exported, or provided by MDXProvider as global scope"),(0,l.kt)("div",t)},d=k("Tabs"),c=k("TabItem"),m={toc:s};function u(e){let{components:t,...n}=e;return(0,l.kt)("wrapper",(0,a.Z)({},m,n,{components:t,mdxType:"MDXLayout"}),(0,l.kt)("p",null,"\u672c\u6587\u4ecb\u7ecd\u4e86 K3s \u7f51\u7edc\u914d\u7f6e\u9009\u9879\uff0c\u5305\u62ec\u914d\u7f6e\u6216\u66ff\u6362 Flannel\uff0c\u4ee5\u53ca\u914d\u7f6e IPv6\u3002"),(0,l.kt)("blockquote",null,(0,l.kt)("p",{parentName:"blockquote"},(0,l.kt)("strong",{parentName:"p"},"\u6ce8\u610f"),"\uff1a\u6709\u5173 CoreDNS\u3001Traefik \u548c Service LB \u7684\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605",(0,l.kt)("a",{parentName:"p",href:"/zh/networking/"},"\u7f51\u7edc"),"\u9875\u9762\u3002")),(0,l.kt)("h2",{id:"flannel-\u9009\u9879"},"Flannel \u9009\u9879"),(0,l.kt)("p",null,(0,l.kt)("a",{parentName:"p",href:"https://github.com/flannel-io/flannel/blob/master/README.md"},"Flannel")," \u662f\u7b2c 3 \u5c42\u7f51\u7edc\u7ed3\u6784\u7684\u8f7b\u91cf\u7ea7\u63d0\u4f9b\u7a0b\u5e8f\uff0c\u5b83\u5b9e\u73b0\u4e86 Kubernetes \u5bb9\u5668\u7f51\u7edc\u63a5\u53e3 (CNI)\u3002\u5b83\u5c31\u662f\u901a\u5e38\u6240\u8bf4\u7684 CNI \u63d2\u4ef6\u3002"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},"Flannel \u53ea\u80fd\u5728 Server \u8282\u70b9\u4e0a\u8bbe\u7f6e\u9009\u9879\uff0c\u5e76\u4e14\u96c6\u7fa4\u4e2d\u7684\u6240\u6709 Server \u4e0a\u90fd\u5fc5\u987b\u76f8\u540c\u3002"),(0,l.kt)("li",{parentName:"ul"},"Flannel \u7684\u9ed8\u8ba4\u540e\u7aef\u662f ",(0,l.kt)("inlineCode",{parentName:"li"},"vxlan"),"\u3002\u8981\u542f\u7528\u52a0\u5bc6\uff0c\u8bf7\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"wireguard-native")," \u540e\u7aef\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u5728 Rasperry Pi \u4e0a\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"vxlan")," \u548c\u6700\u65b0\u7248\u672c\u7684 Ubuntu \u9700\u8981",(0,l.kt)("a",{parentName:"li",href:"/zh/advanced/#raspberry-pi"},"\u989d\u5916\u7684\u51c6\u5907\u5de5\u4f5c"),"\u3002"),(0,l.kt)("li",{parentName:"ul"},"\u5728\u67d0\u4e9b Linux \u53d1\u884c\u7248\u4e0a\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"wireguard-native")," \u4f5c\u4e3a Flannel \u540e\u7aef\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u6a21\u5757\u3002\u6709\u5173\u8be6\u7ec6\u4fe1\u606f\uff0c\u8bf7\u53c2\u9605 ",(0,l.kt)("a",{parentName:"li",href:"https://www.wireguard.com/install/"},"WireGuard \u5b89\u88c5\u6307\u5357"),"\u3002\nWireGuard \u7684\u5b89\u88c5\u6b65\u9aa4\u5c06\u786e\u4fdd\u4e3a\u4f60\u7684\u64cd\u4f5c\u7cfb\u7edf\u5b89\u88c5\u9002\u5f53\u7684\u5185\u6838\u6a21\u5757\u3002\n\u5728\u5c1d\u8bd5\u4f7f\u7528 WireGuard Flannel \u540e\u7aef\u4e4b\u524d\uff0c\u4f60\u5fc5\u987b\u786e\u4fdd WireGuard \u5185\u6838\u6a21\u5757\u5728\u6bcf\u4e2a\u8282\u70b9\uff08\u5305\u62ec Server \u548c Agent\uff09\u4e0a\u90fd\u53ef\u7528\u3002")),(0,l.kt)("table",null,(0,l.kt)("thead",{parentName:"table"},(0,l.kt)("tr",{parentName:"thead"},(0,l.kt)("th",{parentName:"tr",align:null},"CLI \u6807\u5fd7\u548c\u503c"),(0,l.kt)("th",{parentName:"tr",align:null},"\u63cf\u8ff0"))),(0,l.kt)("tbody",{parentName:"table"},(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-ipv6-masq")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5c06\u4f2a\u88c5\u89c4\u5219\u5e94\u7528\u4e8e IPv6 \u6d41\u91cf\uff08\u9ed8\u8ba4\u4e3a IPv4\uff09\u3002\u4ec5\u9002\u7528\u4e8e\u53cc\u6808\u6216\u4ec5\u4f7f\u7528 IPv6 \u7684\u96c6\u7fa4\u3002\u4e0e ",(0,l.kt)("inlineCode",{parentName:"td"},"none")," \u4ee5\u5916\u7684\u4efb\u4f55 Flannel \u540e\u7aef\u517c\u5bb9\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-external-ip")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528\u8282\u70b9\u5916\u90e8 IP \u5730\u5740\u4f5c\u4e3a Flannel \u6d41\u91cf\u7684\u76ee\u7684\u5730\uff0c\u800c\u4e0d\u662f\u4f7f\u7528\u5185\u90e8 IP\u3002\u4ec5\u5f53\u8282\u70b9\u4e0a\u8bbe\u7f6e\u4e86 ",(0,l.kt)("inlineCode",{parentName:"td"},"--node-external-ip")," \u65f6\u9002\u7528\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=vxlan")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 VXLAN \u5c01\u88c5\u6570\u636e\u5305\u3002\u5728 Raspberry Pi \u4e0a\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u5185\u6838\u6a21\u5757\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=host-gw")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7\u8282\u70b9 IP \u4f7f\u7528 IP \u8def\u7531\u5230 pod \u5b50\u7f51\u3002\u96c6\u7fa4\u4e2d\u6240\u6709\u8282\u70b9\u4e4b\u95f4\u90fd\u9700\u8981\u76f4\u63a5\u7684\u7b2c 2 \u5c42\u8fde\u63a5\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard-native")),(0,l.kt)("td",{parentName:"tr",align:null},"\u4f7f\u7528 WireGuard \u5c01\u88c5\u548c\u52a0\u5bc6\u7f51\u7edc\u6d41\u91cf\u3002\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u5185\u6838\u6a21\u5757\u3002")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=ipsec")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 ",(0,l.kt)("inlineCode",{parentName:"td"},"swanctl")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u4f7f\u7528 strongSwan IPSec \u6765\u52a0\u5bc6\u7f51\u7edc\u6d41\u91cf\u3002\uff08\u5df2\u5f03\u7528\uff1b\u5c06\u5728 v1.27.0 \u4e2d\u5220\u9664\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=wireguard")),(0,l.kt)("td",{parentName:"tr",align:null},"\u901a\u8fc7 ",(0,l.kt)("inlineCode",{parentName:"td"},"wg")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u4f7f\u7528 WireGuard \u6765\u52a0\u5bc6\u7f51\u7edc\u6d41\u91cf\u3002\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u5185\u6838\u6a21\u5757\u548c\u914d\u7f6e\u3002\uff08\u5df2\u5f03\u7528\uff1b\u5c06\u5728 v1.26.0 \u4e2d\u5220\u9664\uff09")),(0,l.kt)("tr",{parentName:"tbody"},(0,l.kt)("td",{parentName:"tr",align:null},(0,l.kt)("inlineCode",{parentName:"td"},"--flannel-backend=none")),(0,l.kt)("td",{parentName:"tr",align:null},"\u5b8c\u5168\u7981\u7528 Flannel\u3002")))),(0,l.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u4ece 2022-12 \u7248\u672c\uff08v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1\uff09\u5f00\u59cb\uff0cK3s \u4e0d\u518d\u5305\u542b strongSwan ",(0,l.kt)("inlineCode",{parentName:"p"},"swanctl")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"charon")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u5982\u679c\u4f60\u60f3\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"ipsec")," \u540e\u7aef\uff0c\u8bf7\u5728\u5347\u7ea7\u6216\u5b89\u88c5\u8fd9\u4e9b\u7248\u672c\u4e4b\u524d\u5728\u8282\u70b9\u4e0a\u5b89\u88c5\u6b63\u786e\u7684\u5305\u3002")),(0,l.kt)("h3",{id:"\u4ece-wireguard-\u6216-ipsec-\u8fc1\u79fb\u5230-wireguard-native"},"\u4ece ",(0,l.kt)("inlineCode",{parentName:"h3"},"wireguard")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"h3"},"ipsec")," \u8fc1\u79fb\u5230 ",(0,l.kt)("inlineCode",{parentName:"h3"},"wireguard-native")),(0,l.kt)("p",null,"\u65e7\u7248 ",(0,l.kt)("inlineCode",{parentName:"p"},"wireguard")," \u540e\u7aef\u9700\u8981\u5728\u4e3b\u673a\u4e0a\u5b89\u88c5 ",(0,l.kt)("inlineCode",{parentName:"p"},"wg")," \u5de5\u5177\u3002\u8be5\u540e\u7aef\u5c06\u5728 K3s v1.26 \u4e2d\u5220\u9664\uff0c\u53d6\u800c\u4ee3\u4e4b\u7684\u662f\u76f4\u63a5\u4e0e\u5185\u6838\u4ea4\u4e92\u7684 ",(0,l.kt)("inlineCode",{parentName:"p"},"wireguard-native")," \u540e\u7aef\u3002"),(0,l.kt)("p",null,"\u65e7\u7248 ",(0,l.kt)("inlineCode",{parentName:"p"},"ipsec")," \u540e\u7aef\u9700\u8981\u5728\u4e3b\u673a\u4e0a\u5b89\u88c5 ",(0,l.kt)("inlineCode",{parentName:"p"},"swanctl")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"charon")," \u4e8c\u8fdb\u5236\u6587\u4ef6\u3002\u8be5\u540e\u7aef\u5c06\u5728 K3s v1.27 \u4e2d\u5220\u9664\uff0c\u4ee5\u652f\u6301 ",(0,l.kt)("inlineCode",{parentName:"p"},"wireguard-native")," \u540e\u7aef\u3002"),(0,l.kt)("p",null,"\u6211\u4eec\u5efa\u8bae\u7528\u6237\u5c3d\u5feb\u8fc1\u79fb\u5230\u65b0\u7684\u540e\u7aef\u3002\u8282\u70b9\u6709\u4e86\u65b0\u914d\u7f6e\u540e\uff0c\u8fc1\u79fb\u4e0d\u4f1a\u82b1\u8d39\u5f88\u957f\u7684\u505c\u673a\u65f6\u95f4\u3002\u4f60\u53ef\u4ee5\u9075\u5faa\u4ee5\u4e0b\u4e24\u4e2a\u6b65\u9aa4\u8fdb\u884c\u64cd\u4f5c\uff1a"),(0,l.kt)("ol",null,(0,l.kt)("li",{parentName:"ol"},"\u66f4\u65b0\u6240\u6709 Server \u8282\u70b9\u4e0a\u7684 K3s \u914d\u7f6e\u3002\u5982\u679c\u4f7f\u7528\u914d\u7f6e\u6587\u4ef6\uff0c",(0,l.kt)("inlineCode",{parentName:"li"},"/etc/rancher/k3s/config.yaml")," \u5e94\u8be5\u5305\u62ec ",(0,l.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard-native")," \u800c\u4e0d\u662f ",(0,l.kt)("inlineCode",{parentName:"li"},"flannel-backend: wireguard")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"li"},"flannel-backend: ipsec"),"\u3002\u5982\u679c\u4f60\u5728 systemd \u5355\u5143\u4e2d\u901a\u8fc7 CLI \u6807\u5fd7\u914d\u7f6e K3s\uff0c\u5219\u5e94\u66f4\u6539\u5bf9\u5e94\u7684\u6807\u5fd7\u3002"),(0,l.kt)("li",{parentName:"ol"},"\u4ece Server \u8282\u70b9\u5f00\u59cb\u91cd\u65b0\u542f\u52a8\u6240\u6709\u8282\u70b9\u3002")),(0,l.kt)("h2",{id:"\u81ea\u5b9a\u4e49-cni"},"\u81ea\u5b9a\u4e49 CNI"),(0,l.kt)("p",null,"\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"--flannel-backend=none")," \u542f\u52a8 K3s \u5e76\u5b89\u88c5\u4f60\u9009\u62e9\u7684 CNI\u3002\u5927\u591a\u6570 CNI \u63d2\u4ef6\u90fd\u6709\u81ea\u5df1\u7684\u7f51\u7edc\u7b56\u7565\u5f15\u64ce\uff0c\u56e0\u6b64\u5efa\u8bae\u540c\u65f6\u8bbe\u7f6e ",(0,l.kt)("inlineCode",{parentName:"p"},"--disable-network-policy")," \u4ee5\u907f\u514d\u51b2\u7a81\u3002\u9700\u8981\u8003\u8651\u7684\u91cd\u8981\u4fe1\u606f\uff1a"),(0,l.kt)(d,{mdxType:"Tabs"},(0,l.kt)(c,{value:"Canal",default:!0,mdxType:"TabItem"},(0,l.kt)("p",null,"\u8bbf\u95ee ",(0,l.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/getting-started/kubernetes/flannel/install-for-flannel#installing-calico-for-policy-and-flannel-aka-canal-for-networking"},"Canal Docs")," \u7f51\u7ad9\u3002\u6309\u7167\u6b65\u9aa4\u5b89\u88c5 Canal\u3002\u4fee\u6539 Canal YAML \u4ee5\u4fbf\u5728 ",(0,l.kt)("inlineCode",{parentName:"p"},"container_settings")," \u4e2d\u5141\u8bb8 IP \u8f6c\u53d1\uff0c\u4f8b\u5982\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,l.kt)("p",null,"\u5e94\u7528 Canal YAML\u3002"),(0,l.kt)("p",null,"\u901a\u8fc7\u5728\u4e3b\u673a\u4e0a\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff0c\u786e\u4fdd\u8bbe\u7f6e\u5df2\u88ab\u5e94\u7528\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-canal.conflist\n")),(0,l.kt)("p",null,"\u4f60\u5e94\u8be5\u770b\u5230 IP \u8f6c\u53d1\u88ab\u8bbe\u7f6e\u4e3a true\u3002")),(0,l.kt)(c,{value:"Calico",default:!0,mdxType:"TabItem"},(0,l.kt)("p",null,"\u9075\u5faa ",(0,l.kt)("a",{parentName:"p",href:"https://docs.tigera.io/calico/latest/reference/configure-cni-plugins"},"Calico CNI \u63d2\u4ef6\u6307\u5357"),"\u3002\u4fee\u6539 Calico YAML \u4ee5\u4fbf\u5728 ",(0,l.kt)("inlineCode",{parentName:"p"},"container_settings")," \u4e2d\u5141\u8bb8 IP \u8f6c\u53d1\uff0c\u4f8b\u5982\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-yaml"},'"container_settings": {\n  "allow_ip_forwarding": true\n}\n')),(0,l.kt)("p",null,"\u5e94\u7528 Calico YAML\u3002"),(0,l.kt)("p",null,"\u901a\u8fc7\u5728\u4e3b\u673a\u4e0a\u8fd0\u884c\u4ee5\u4e0b\u547d\u4ee4\uff0c\u786e\u4fdd\u8bbe\u7f6e\u5df2\u88ab\u5e94\u7528\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"cat /etc/cni/net.d/10-calico.conflist\n")),(0,l.kt)("p",null,"\u4f60\u5e94\u8be5\u770b\u5230 IP \u8f6c\u53d1\u88ab\u8bbe\u7f6e\u4e3a true\u3002")),(0,l.kt)(c,{value:"Cilium",default:!0,mdxType:"TabItem"},(0,l.kt)("p",null,"\u8fd0\u884c ",(0,l.kt)("inlineCode",{parentName:"p"},"k3s-killall.sh")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"p"},"k3s-uninstall.sh"),"\u4e4b\u524d\uff0c\u4f60\u5fc5\u987b\u624b\u52a8\u5220\u9664 ",(0,l.kt)("inlineCode",{parentName:"p"},"cilium_host"),"\u3001",(0,l.kt)("inlineCode",{parentName:"p"},"cilium_net")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"cilium_vxlan")," \u63a5\u53e3\u3002\u5982\u679c\u4e0d\u8fd9\u6837\u505a\uff0c\u4f60\u53ef\u80fd\u4f1a\u5728 K3s \u505c\u6b62\u65f6\u4e22\u5931\u4e0e\u4e3b\u673a\u7684\u7f51\u7edc\u8fde\u63a5"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"ip link delete cilium_host\nip link delete cilium_net\nip link delete cilium_vxlan\n")),(0,l.kt)("p",null,"\u6b64\u5916\uff0c\u4f60\u9700\u8981\u5220\u9664 cilium \u7684 iptables \u89c4\u5219\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"iptables-save | grep -iv cilium | iptables-restore\nip6tables-save | grep -iv cilium | ip6tables-restore\n")))),(0,l.kt)("h2",{id:"control-plane-egress-\u9009\u62e9\u5668\u914d\u7f6e"},"Control Plane Egress \u9009\u62e9\u5668\u914d\u7f6e"),(0,l.kt)("p",null,"K3s Agent \u548c Server \u7ef4\u62a4\u8282\u70b9\u4e4b\u95f4\u7684 websocket \u96a7\u9053\uff0c\u8fd9\u4e9b\u96a7\u9053\u7528\u4e8e\u5c01\u88c5 control plane\uff08apiserver\uff09\u548c Agent\uff08kubelet \u548c containerd\uff09\u7ec4\u4ef6\u4e4b\u95f4\u7684\u53cc\u5411\u901a\u4fe1\u3002\n\u8fd9\u5141\u8bb8 Agent \u5728\u4e0d\u5c06 kubelet \u548c\u5bb9\u5668\u8fd0\u884c\u65f6\u6d41\u7aef\u53e3\u66b4\u9732\u7ed9\u4f20\u5165\u8fde\u63a5\u7684\u60c5\u51b5\u4e0b\u8fd0\u884c\uff0c\u5e76\u5141\u8bb8 control plane \u5728\u7981\u7528 Agent \u7684\u60c5\u51b5\u4e0b\u8fde\u63a5\u5230\u96c6\u7fa4\u670d\u52a1\u3002\n\u6b64\u529f\u80fd\u7b49\u540c\u4e8e\u5176\u4ed6 Kubernetes \u53d1\u884c\u7248\u4e0a\u5e38\u7528\u7684 ",(0,l.kt)("a",{parentName:"p",href:"https://kubernetes.io/docs/tasks/extend-kubernetes/setup-konnectivity/"},"Konnectivity")," \u670d\u52a1\uff0c\u901a\u8fc7 apiserver \u7684 Egress \u9009\u62e9\u5668\u914d\u7f6e\u8fdb\u884c\u7ba1\u7406\u3002"),(0,l.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"--egress-selector-mode")," \u6807\u5fd7\u5728 Server \u4e0a\u914d\u7f6e Egress \u9009\u62e9\u5668\u6a21\u5f0f\uff0c\u652f\u6301\u56db\u79cd\u6a21\u5f0f\uff1a"),(0,l.kt)("ul",null,(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"disabled"),"\uff1aapiserver \u4e0d\u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelet \u6216\u96c6\u7fa4\u7aef\u70b9\u901a\u4fe1\u3002\n\u6b64\u6a21\u5f0f\u8981\u6c42 Server \u8fd0\u884c kubelet\u3001CNI \u548c kube-proxy\uff0c\u5e76\u4e0e Agent \u76f4\u63a5\u8fde\u63a5\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee Service \u7aef\u70b9\u6216\u6267\u884c ",(0,l.kt)("inlineCode",{parentName:"li"},"kubectl exec")," \u548c ",(0,l.kt)("inlineCode",{parentName:"li"},"kubectl logs"),"\u3002"),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"agent"),"\uff08\u9ed8\u8ba4\uff09\uff1aapiserver \u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelet \u901a\u4fe1\u3002\n\u8fd9\u79cd\u6a21\u5f0f\u8981\u6c42 Server \u4e5f\u8fd0\u884c kubelet\u3001CNI \u548c kube-proxy\uff0c\u5426\u5219 apiserver \u5c06\u65e0\u6cd5\u8bbf\u95ee Service \u7aef\u70b9\u3002"),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"pod"),"\uff1aapiserver \u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelets \u548c Service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u8282\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 Agent\u3002\n",(0,l.kt)("strong",{parentName:"li"},"\u6ce8\u610f"),"\uff1a\u5982\u679c CNI \u4f7f\u7528\u81ea\u5df1\u7684 IPAM\uff0c\u800c\u4e14\u4e0d\u8003\u8651\u8282\u70b9\u7684 PodCIDR \u5206\u914d\uff0c\u8fd9\u5c06\u4e0d\u8d77\u4f5c\u7528\u3002\u8fd9\u4e9b CNI \u9700\u8981\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"li"},"cluster")," \u6216 ",(0,l.kt)("inlineCode",{parentName:"li"},"agent"),"\u3002"),(0,l.kt)("li",{parentName:"ul"},(0,l.kt)("inlineCode",{parentName:"li"},"cluster"),"\uff1aapiserver \u4f7f\u7528 Agent \u96a7\u9053\u4e0e kubelets \u548c Service \u7aef\u70b9\u901a\u4fe1\uff0c\u901a\u8fc7\u76d1\u89c6\u7aef\u70b9\u5c06\u7aef\u70b9\u8fde\u63a5\u8def\u7531\u5230\u6b63\u786e\u7684 Agent\u3002")),(0,l.kt)("h2",{id:"\u53cc\u6808-ipv4--ipv6-\u7f51\u7edc"},"\u53cc\u6808 (IPv4 + IPv6) \u7f51\u7edc"),(0,l.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u4ece ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1"},"v1.21.0+k3s1")," \u5f00\u59cb\u63d0\u4f9b\u5b9e\u9a8c\u6027\u652f\u6301\u3002",(0,l.kt)("br",{parentName:"p"}),"\n","\u4ece ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1"},"v1.23.7+k3s1")," \u5f00\u59cb\u63d0\u4f9b\u7a33\u5b9a\u652f\u6301\u3002")),(0,l.kt)("admonition",{title:"\u5df2\u77e5\u95ee\u9898",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"Kubernetes ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/111695"},"Issue #111695")," \u5bfc\u81f4\u4e86\u4e00\u4e2a\u95ee\u9898\u3002\u5982\u679c\u4f60\u6709\u4e00\u4e2a\u53cc\u6808\u73af\u5883\u800c\u4e14\u4f60\u6ca1\u6709\u4e3a\u96c6\u7fa4\u6d41\u91cf\u4f7f\u7528\u4e3b\u8981\u7f51\u5361\uff0c\u90a3\u4e48 Kubelet \u4f1a\u5ffd\u7565\u8282\u70b9 IPv6 \u5730\u5740\u3002\u4e3a\u907f\u514d\u6b64\u9519\u8bef\uff0c\u8bf7\u5c06\u4ee5\u4e0b\u6807\u5fd7\u6dfb\u52a0\u5230 K3s Server \u548c Agent \uff1a"),(0,l.kt)("pre",{parentName:"admonition"},(0,l.kt)("code",{parentName:"pre"},'--kubelet-arg="node-ip=0.0.0.0" # To proritize IPv4 traffic\n#OR\n--kubelet-arg="node-ip=::" # To proritize IPv6 traffic\n'))),(0,l.kt)("p",null,"\u9996\u6b21\u521b\u5efa\u96c6\u7fa4\u65f6\u5fc5\u987b\u914d\u7f6e\u53cc\u6808\u7ec4\u7f51\u3002\u4e00\u65e6\u4ec5\u4f7f\u7528 IPv4 \u542f\u52a8\uff0c\u5b83\u5c31\u65e0\u6cd5\u5728\u73b0\u6709\u96c6\u7fa4\u4e0a\u542f\u7528\u3002"),(0,l.kt)("p",null,"\u8981\u5728 K3s \u4e2d\u542f\u7528\u53cc\u6808\uff0c\u4f60\u5fc5\u987b\u5728\u6240\u6709 server \u8282\u70b9\u4e0a\u63d0\u4f9b\u6709\u6548\u7684\u53cc\u6808 ",(0,l.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"service-cidr"),"\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u6709\u6548\u914d\u7f6e\u7684\u793a\u4f8b\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre"},"--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112\n")),(0,l.kt)("p",null,"\u8bf7\u6ce8\u610f\uff0c\u4f60\u53ef\u4ee5\u914d\u7f6e\u4efb\u4f55\u6709\u6548\u7684 ",(0,l.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"service-cidr")," \u503c\uff0c\u4f46\u5efa\u8bae\u4f7f\u7528\u4e0a\u8ff0\u63a9\u7801\u3002\u5982\u679c\u66f4\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"cluster-cidr")," \u63a9\u7801\uff0c\u5219\u8fd8\u5e94\u66f4\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv4")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"node-cidr-mask-size-ipv6")," \u503c\u4ee5\u5339\u914d\u6bcf\u4e2a\u8282\u70b9\u7684\u8ba1\u5212 pod \u548c\u8282\u70b9\u603b\u6570\u3002\u5bf9\u4e8e IPv4\uff0c\u652f\u6301\u7684\u6700\u5927 ",(0,l.kt)("inlineCode",{parentName:"p"},"service-cidr")," \u63a9\u7801\u662f /12\uff0c\u800c IPv6 \u7684\u662f /112\u3002\u5982\u679c\u4f60\u5728\u516c\u5171\u4e91\u4e2d\u90e8\u7f72\uff0c\u8bf7\u8bb0\u4f4f\u5141\u8bb8 ipv6 \u6d41\u91cf\u3002"),(0,l.kt)("p",null,"\u5982\u679c\u4f60\u4f7f\u7528\u7684\u662f\u81ea\u5b9a\u4e49 CNI \u63d2\u4ef6\uff0c\u5373 Flannel \u4ee5\u5916\u7684 CNI \u63d2\u4ef6\uff0c\u5219\u53ef\u80fd\u9700\u8981\u989d\u5916\u7684\u914d\u7f6e\u3002\u8bf7\u53c2\u9605\u4f60\u4f7f\u7528\u7684\u63d2\u4ef6\u7684\u53cc\u6808\u6587\u6863\uff0c\u5e76\u9a8c\u8bc1\u662f\u5426\u53ef\u4ee5\u542f\u7528\u7f51\u7edc\u7b56\u7565\u3002"),(0,l.kt)("h2",{id:"\u5355\u6808-ipv6-\u7f51\u7edc"},"\u5355\u6808 IPv6 \u7f51\u7edc"),(0,l.kt)("admonition",{title:"\u7248\u672c",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u4ece ",(0,l.kt)("a",{parentName:"p",href:"https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1"},"v1.22.9+k3s1")," \u8d77\u53ef\u7528")),(0,l.kt)("admonition",{title:"\u5df2\u77e5\u95ee\u9898",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u7684 IPv6 \u9ed8\u8ba4\u8def\u7531\u662f\u7531\u8def\u7531\u5668\u516c\u544a\uff08RA\uff09\u8bbe\u7f6e\u7684\uff0c\u4f60\u9700\u8981\u8bbe\u7f6e sysctl ",(0,l.kt)("inlineCode",{parentName:"p"},"net.ipv6.conf.all.accept_ra=2"),"\u3002\u5426\u5219\uff0c\u4e00\u65e6\u9ed8\u8ba4\u8def\u7531\u8fc7\u671f\uff0c\u8282\u70b9\u5c06\u653e\u5f03\u8be5\u8def\u7531\u3002\u8bf7\u6ce8\u610f\uff0c\u63a5\u53d7 RA \u53ef\u80fd\u4f1a\u589e\u52a0",(0,l.kt)("a",{parentName:"p",href:"https://github.com/kubernetes/kubernetes/issues/91507"},"\u4e2d\u95f4\u4eba\u653b\u51fb"),"\u7684\u98ce\u9669\u3002")),(0,l.kt)("p",null,"\u4f60\u53ef\u4ee5\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"--cluster-cidr")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"--service-cidr")," \u6807\u5fd7\u5728 K3s \u4e0a\u4f7f\u7528\u5355\u6808 IPv6 \u96c6\u7fa4\uff08\u6ca1\u6709 IPv4 \u7684\u96c6\u7fa4\uff09\u3002\u4ee5\u4e0b\u662f\u4e00\u4e2a\u6709\u6548\u914d\u7f6e\u7684\u793a\u4f8b\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112\n")),(0,l.kt)("h2",{id:"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4"},"\u5206\u5e03\u5f0f\u6df7\u5408\u6216\u591a\u4e91\u96c6\u7fa4"),(0,l.kt)("p",null,"K3s \u96c6\u7fa4\u4ecd\u7136\u53ef\u4ee5\u90e8\u7f72\u5728\u4e0d\u5171\u4eab\u516c\u5171\u79c1\u6709\u7f51\u7edc\u4e14\u4e0d\u76f4\u63a5\u8fde\u63a5\u7684\u8282\u70b9\u4e0a\uff08\u4f8b\u5982\u4e0d\u540c\u516c\u6709\u4e91\u4e2d\u7684\u8282\u70b9\uff09\u3002\u6709\u4e24\u79cd\u9009\u62e9\u53ef\u4ee5\u5b9e\u73b0\u8fd9\u4e00\u70b9\uff1a\u5d4c\u5165\u5f0f k3s \u591a\u4e91\u89e3\u51b3\u65b9\u6848\u548c\u96c6\u6210 ",(0,l.kt)("inlineCode",{parentName:"p"},"tailscale")," VPN \u63d0\u4f9b\u7a0b\u5e8f\u3002"),(0,l.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u5916\u90e8\u8fde\u63a5\u9700\u8981\u66f4\u591a\u7684\u8dc3\u70b9\uff0c\u90a3\u4e48\u8282\u70b9\u4e4b\u95f4\u7684\u5ef6\u8fdf\u4f1a\u53d8\u9ad8\u3002\u5ef6\u8fdf\u592a\u9ad8\u4f1a\u964d\u4f4e\u7f51\u7edc\u6027\u80fd\uff0c\u8fd8\u53ef\u80fd\u5f71\u54cd\u96c6\u7fa4\u7684\u8fd0\u884c\u3002")),(0,l.kt)("admonition",{type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u6b64\u7c7b\u90e8\u7f72\u4e0d\u652f\u6301\u5d4c\u5165\u5f0f etcd\u3002\u5982\u679c\u4f7f\u7528\u5d4c\u5165\u5f0f etcd\uff0c\u6240\u6709 Server \u8282\u70b9\u5fc5\u987b\u53ef\u4ee5\u901a\u8fc7\u5176\u79c1\u6709 IP \u76f8\u4e92\u8bbf\u95ee\u3002Agent \u53ef\u80fd\u5206\u5e03\u5728\u591a\u4e2a\u7f51\u7edc\u4e0a\uff0c\u4f46\u6240\u6709 server \u90fd\u5e94\u8be5\u4f4d\u4e8e\u540c\u4e00\u4f4d\u7f6e\u3002")),(0,l.kt)("h3",{id:"\u5d4c\u5165\u5f0f-k3s-\u591a\u4e91\u89e3\u51b3\u65b9\u6848"},"\u5d4c\u5165\u5f0f k3s \u591a\u4e91\u89e3\u51b3\u65b9\u6848"),(0,l.kt)("p",null,"K3s \u4f7f\u7528 wireguard \u4e3a\u96c6\u7fa4\u6d41\u91cf\u5efa\u7acb VPN \u7f51\u683c\u3002\u6bcf\u4e2a\u8282\u70b9\u90fd\u5fc5\u987b\u5177\u6709\u552f\u4e00\u7684 IP\uff0c\u53ef\u4ee5\u901a\u8fc7 IP \u8bbf\u95ee\u8282\u70b9\uff08\u901a\u5e38\u662f\u516c\u5171 IP\uff09\u3002K3s supervisor \u6d41\u91cf\u5c06\u4f7f\u7528 websocket \u96a7\u9053\uff0c\u96c6\u7fa4 (CNI) \u6d41\u91cf\u5c06\u4f7f\u7528 wireguard \u96a7\u9053\u3002"),(0,l.kt)("p",null,"\u8981\u542f\u7528\u8fd9\u79cd\u7c7b\u578b\u7684\u90e8\u7f72\uff0c\u4f60\u5fc5\u987b\u5728 Server \u4e2d\u6dfb\u52a0\u4ee5\u4e0b\u53c2\u6570\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip\n")),(0,l.kt)("p",null,"\u5728 Agent \u4e0a\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--node-external-ip=<AGENT_EXTERNAL_IP>\n")),(0,l.kt)("p",null,"\u5176\u4e2d ",(0,l.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," \u662f\u8bbf\u95ee Server \u8282\u70b9\u7684 IP\uff0c",(0,l.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," \u662f\u8bbf\u95ee Agent \u8282\u70b9\u7684 IP\u3002\u8bf7\u6ce8\u610f\uff0cAgent \u4e2d\u7684 ",(0,l.kt)("inlineCode",{parentName:"p"},"K3S_URL")," \u914d\u7f6e\u53c2\u6570\u9700\u8981\u4f7f\u7528 ",(0,l.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," \u624d\u80fd\u8fde\u63a5\u3002\u8bf7\u8bb0\u4f4f\u68c0\u67e5",(0,l.kt)("a",{parentName:"p",href:"/zh/installation/requirements#%E7%BD%91%E7%BB%9C"},"\u7f51\u7edc\u8981\u6c42"),"\uff0c\u5e76\u5141\u8bb8\u8bbf\u95ee\u5185\u90e8\u548c\u5916\u90e8\u5730\u5740\u4e0a\u5217\u51fa\u7684\u7aef\u53e3\u3002"),(0,l.kt)("p",null,(0,l.kt)("inlineCode",{parentName:"p"},"SERVER_EXTERNAL_IP")," \u548c ",(0,l.kt)("inlineCode",{parentName:"p"},"AGENT_EXTERNAL_IP")," \u4e4b\u95f4\u9700\u8981\u4fdd\u6301\u8fde\u63a5\uff0c\u5e76\u4e14\u901a\u5e38\u4f7f\u7528\u516c\u5171 IP\u3002"),(0,l.kt)("admonition",{title:"\u52a8\u6001 IP",type:"info"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4e3a\u8282\u70b9\u5206\u914d\u52a8\u6001 IP \u5e76\u4e14 IP \u53d1\u751f\u53d8\u5316\uff08\u4f8b\u5982\u5728 AWS \u4e2d\uff09\uff0c\u5219\u5fc5\u987b\u4fee\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"--node-external-ip")," \u53c2\u6570\u6765\u53cd\u6620\u65b0 IP\u3002\u5982\u679c\u5c06 K3s \u4f5c\u4e3a Service \u8fd0\u884c\uff0c\u5219\u5fc5\u987b\u4fee\u6539 ",(0,l.kt)("inlineCode",{parentName:"p"},"/etc/systemd/system/k3s.service")," \u7136\u540e\u8fd0\u884c\uff1a"),(0,l.kt)("pre",{parentName:"admonition"},(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"systemctl daemon-reload\nsystemctl restart k3s\n"))),(0,l.kt)("h3",{id:"\u96c6\u6210-tailscale-vpn-\u63d0\u4f9b\u7a0b\u5e8f\u5b9e\u9a8c\u6027"},"\u96c6\u6210 Tailscale VPN \u63d0\u4f9b\u7a0b\u5e8f\uff08\u5b9e\u9a8c\u6027\uff09"),(0,l.kt)("p",null,"\u5728 v1.27.3\u3001v1.26.6\u3001v1.25.11 \u548c\u66f4\u65b0\u7248\u672c\u4e2d\u53ef\u7528\u3002"),(0,l.kt)("p",null,"K3s \u53ef\u4ee5\u4e0e ",(0,l.kt)("a",{parentName:"p",href:"https://tailscale.com/"},"Tailscale")," \u96c6\u6210\uff0c\u4ee5\u4fbf\u8282\u70b9\u4f7f\u7528 Tailscale VPN \u670d\u52a1\u5728\u8282\u70b9\u4e4b\u95f4\u6784\u5efa\u7f51\u683c\u3002"),(0,l.kt)("p",null,"\u5728\u90e8\u7f72 K3s \u4e4b\u524d\uff0cTailscale \u9700\u8981\u5b8c\u6210\u56db\u4e2a\u6b65\u9aa4\uff1a"),(0,l.kt)("ol",null,(0,l.kt)("li",{parentName:"ol"},(0,l.kt)("p",{parentName:"li"},"\u767b\u5f55\u5230\u4f60\u7684 Tailscale \u5e10\u6237")),(0,l.kt)("li",{parentName:"ol"},(0,l.kt)("p",{parentName:"li"},"\u5728 ",(0,l.kt)("inlineCode",{parentName:"p"},"Settings > Keys")," \u4e2d\uff0c\u751f\u6210\u4e00\u4e2a\u6388\u6743\u5bc6\u94a5\uff08$AUTH-KEY\uff09\uff0c\u5b83\u53ef\u4ee5\u88ab\u96c6\u7fa4\u4e2d\u7684\u6240\u6709\u8282\u70b9\u91cd\u590d\u4f7f\u7528")),(0,l.kt)("li",{parentName:"ol"},(0,l.kt)("p",{parentName:"li"},"\u51b3\u5b9a\u96c6\u7fa4\u5c06\u4f7f\u7528\u7684 podCIDR\uff08\u9ed8\u8ba4 ",(0,l.kt)("inlineCode",{parentName:"p"},"10.42.0.0/16"),"\uff09\u3002\u5728 Access \u63a7\u5236\u4e2d\u9644\u52a0 CIDR\uff08\u6216\u53cc\u6808\u7684 CIDR\uff09\uff1a"))),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-yaml"},'"autoApprovers": {\n        "routes": {\n            "10.42.0.0/16":        ["your_account@xyz.com"],\n            "2001:cafe:42:0::/56": ["your_account@xyz.com"],\n        },\n    },\n')),(0,l.kt)("ol",{start:4},(0,l.kt)("li",{parentName:"ol"},"\u5728\u8282\u70b9\u4e2d\u5b89\u88c5 Tailscale\uff1a")),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"curl -fsSL https://tailscale.com/install.sh | sh\n")),(0,l.kt)("p",null,"\u8981\u90e8\u7f72\u542f\u7528\u4e86 Tailscale \u96c6\u6210\u7684 K3s\uff0c\u4f60\u5fc5\u987b\u5728\u6bcf\u4e2a\u8282\u70b9\u4e0a\u6dfb\u52a0\u4ee5\u4e0b\u53c2\u6570\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},'--vpn-auth="name=tailscale,joinKey=$AUTH-KEY\n')),(0,l.kt)("p",null,"\u6216\u5728\u6587\u4ef6\u4e2d\u63d0\u4f9b\u8be5\u4fe1\u606f\u5e76\u4f7f\u7528\u53c2\u6570\uff1a"),(0,l.kt)("pre",null,(0,l.kt)("code",{parentName:"pre",className:"language-bash"},"--vpn-auth-file=$PATH_TO_FILE\n")),(0,l.kt)("admonition",{title:"\u8b66\u544a",type:"caution"},(0,l.kt)("p",{parentName:"admonition"},"\u5982\u679c\u4f60\u8ba1\u5212\u4f7f\u7528\u540c\u4e00\u4e2a tailscale \u7f51\u7edc\u8fd0\u884c\u591a\u4e2a K3s \u96c6\u7fa4\uff0c\u8bf7\u521b\u5efa\u9002\u5f53\u7684 ",(0,l.kt)("a",{parentName:"p",href:"https://tailscale.com/kb/1018/acls/"},"ACL")," \u6765\u907f\u514d IP \u51b2\u7a81\uff0c\u6216\u4e3a\u6bcf\u4e2a\u96c6\u7fa4\u4f7f\u7528\u4e0d\u540c\u7684 podCIDR \u5b50\u7f51\u3002")))}u.isMDXComponent=!0}}]);
\ No newline at end of file
diff --git a/zh/assets/js/main.a0e9ca28.js b/zh/assets/js/main.a0e9ca28.js
new file mode 100644
index 000000000..830f2e83e
--- /dev/null
+++ b/zh/assets/js/main.a0e9ca28.js
@@ -0,0 +1,2 @@
+/*! For license information please see main.a0e9ca28.js.LICENSE.txt */
+(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[179],{723:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(7294),a=n(3117),o=n(8356),i=n.n(o),l=n(6887);const s={"03f6c9e9":[()=>n.e(843).then(n.bind(n,9943)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",9943],"0a0e4894":[()=>n.e(3572).then(n.bind(n,5020)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",5020],"0a743094":[()=>n.e(2170).then(n.bind(n,5578)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/server.md",5578],"11f121d5":[()=>n.e(3155).then(n.bind(n,1083)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/networking/networking.md",1083],13055719:[()=>n.e(9185).then(n.bind(n,6291)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/introduction.md",6291],"15ed8710":[()=>n.e(9513).then(n.bind(n,8201)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/agent.md",8201],17896441:[()=>Promise.all([n.e(532),n.e(4835),n.e(7918)]).then(n.bind(n,2839)),"@theme/DocItem",2839],"1a4e3797":[()=>Promise.all([n.e(532),n.e(7920)]).then(n.bind(n,2027)),"@theme/SearchPage",2027],"1ac3de50":[()=>n.e(9768).then(n.bind(n,1163)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",1163],"1be78505":[()=>Promise.all([n.e(532),n.e(9514)]).then(n.bind(n,9963)),"@theme/DocPage",9963],"1f6c7e37":[()=>n.e(5394).then(n.bind(n,1665)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/private-registry.md",1665],"247783bb":[()=>n.e(9334).then(n.t.bind(n,3769,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-plugin-content-docs/default/plugin-route-context-module-100.json",3769],"2af2f480":[()=>n.e(5292).then(n.bind(n,7085)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/uninstall.md",7085],"2d65ef92":[()=>n.e(2282).then(n.bind(n,1793)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",1793],"330f05fd":[()=>n.e(2290).then(n.bind(n,8086)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/reference.md",8086],"34c95e47":[()=>n.e(4951).then(n.bind(n,396)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",396],"3551cc1a":[()=>n.e(9534).then(n.bind(n,8513)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/storage/storage.md",8513],"357d395b":[()=>n.e(5251).then(n.bind(n,9049)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",9049],"37dfe6f0":[()=>n.e(3412).then(n.bind(n,178)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",178],"4129286c":[()=>n.e(5156).then(n.t.bind(n,2776,19)),"/home/runner/work/docs/docs/.docusaurus/@easyops-cn/docusaurus-search-local/default/plugin-route-context-module-100.json",2776],"46fd080e":[()=>n.e(8885).then(n.bind(n,2478)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/automated.md",2478],"492f60c5":[()=>n.e(2967).then(n.bind(n,1512)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/installation.md",1512],"4a93747f":[()=>n.e(9596).then(n.bind(n,5e3)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/architecture/architecture.md",5e3],50715220:[()=>n.e(8576).then(n.bind(n,2927)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/cli.md",2927],53163943:[()=>n.e(5493).then(n.bind(n,8718)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/certificate.md",8718],"5977b32d":[()=>n.e(681).then(n.bind(n,6952)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",6952],62005660:[()=>n.e(4124).then(n.bind(n,5502)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/requirements.md",5502],"6b4d906e":[()=>n.e(6535).then(n.bind(n,3446)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/helm/helm.md",3446],"6d8200b0":[()=>n.e(4424).then(n.bind(n,4773)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/security.md",4773],"6f7960fe":[()=>n.e(3100).then(n.bind(n,7958)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/datastore.md",7958],"711cf357":[()=>n.e(5812).then(n.bind(n,9538)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/env-variables.md",9538],"772a162b":[()=>n.e(5165).then(n.bind(n,4120)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/token.md",4120],"7d5aab5d":[()=>n.e(3219).then(n.bind(n,4799)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/airgap.md",4799],"811e87f8":[()=>n.e(4143).then(n.bind(n,7223)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/hardening-guide.md",7223],"935f2afb":[()=>n.e(53).then(n.t.bind(n,1109,19)),"~docs/default/version-current-metadata-prop-751.json",1109],"93e8d6ea":[()=>n.e(622).then(n.bind(n,4827)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/killall.md",4827],"97691ddb":[()=>n.e(6499).then(n.bind(n,1232)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/server-roles.md",1232],"9c71bff4":[()=>n.e(4222).then(n.bind(n,89)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/advanced/advanced.md",89],"9df0942e":[()=>n.e(3531).then(n.bind(n,2694)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/self-assessment.md",2694],a3ec58b8:[()=>n.e(992).then(n.bind(n,8156)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/manual.md",8156],ac5690a0:[()=>n.e(9971).then(n.bind(n,8777)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/faq/faq.md",8777],b2fd5509:[()=>n.e(6842).then(n.bind(n,1320)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",1320],beafadc6:[()=>n.e(9390).then(n.bind(n,4845)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha.md",4845],dcd62276:[()=>n.e(8855).then(n.bind(n,8693)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/packaged-components.md",8693],de044cc7:[()=>n.e(3374).then(n.bind(n,7552)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",7552],df5dd15e:[()=>n.e(8178).then(n.bind(n,6709)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",6709],e1787277:[()=>n.e(4126).then(n.bind(n,6231)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/configuration.md",6231],e65553dc:[()=>n.e(3642).then(n.bind(n,5095)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",5095],f367c5c1:[()=>n.e(7393).then(n.bind(n,4554)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/network-options.md",4554]};function u(e){let{error:t,retry:n,pastDelay:a}=e;return t?r.createElement("div",{style:{textAlign:"center",color:"#fff",backgroundColor:"#fa383e",borderColor:"#fa383e",borderStyle:"solid",borderRadius:"0.25rem",borderWidth:"1px",boxSizing:"border-box",display:"block",padding:"1rem",flex:"0 0 50%",marginLeft:"25%",marginRight:"25%",marginTop:"5rem",maxWidth:"50%",width:"100%"}},r.createElement("p",null,String(t)),r.createElement("div",null,r.createElement("button",{type:"button",onClick:n},"Retry"))):a?r.createElement("div",{style:{display:"flex",justifyContent:"center",alignItems:"center",height:"100vh"}},r.createElement("svg",{id:"loader",style:{width:128,height:110,position:"absolute",top:"calc(100vh - 64%)"},viewBox:"0 0 45 45",xmlns:"http://www.w3.org/2000/svg",stroke:"#61dafb"},r.createElement("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",strokeWidth:"2"},r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"1.5s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"1.5s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"1.5s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"3s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"3s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"3s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"8"},r.createElement("animate",{attributeName:"r",begin:"0s",dur:"1.5s",values:"6;1;2;3;4;5;6",calcMode:"linear",repeatCount:"indefinite"}))))):null}var c=n(9670),d=n(226);function f(e,t){if("*"===e)return i()({loading:u,loader:()=>n.e(4972).then(n.bind(n,4972)),modules:["@theme/NotFound"],webpack:()=>[4972],render(e,t){const n=e.default;return r.createElement(d.z,{value:{plugin:{name:"native",id:"default"}}},r.createElement(n,t))}});const o=l[`${e}-${t}`],f={},p=[],h=[],m=(0,c.Z)(o);return Object.entries(m).forEach((e=>{let[t,n]=e;const r=s[n];r&&(f[t]=r[0],p.push(r[1]),h.push(r[2]))})),i().Map({loading:u,loader:f,modules:p,webpack:()=>h,render(t,n){const i=JSON.parse(JSON.stringify(o));Object.entries(t).forEach((t=>{let[n,r]=t;const a=r.default;if(!a)throw new Error(`The page component at ${e} doesn't have a default export. This makes it impossible to render anything. Consider default-exporting a React component.`);"object"!=typeof a&&"function"!=typeof a||Object.keys(r).filter((e=>"default"!==e)).forEach((e=>{a[e]=r[e]}));let o=i;const l=n.split(".");l.slice(0,-1).forEach((e=>{o=o[e]})),o[l[l.length-1]]=a}));const l=i.__comp;delete i.__comp;const s=i.__context;return delete i.__context,r.createElement(d.z,{value:s},r.createElement(l,(0,a.Z)({},i,n)))}})}const p=[{path:"/zh/search",component:f("/zh/search","87d"),exact:!0},{path:"/zh/",component:f("/zh/","428"),routes:[{path:"/zh/",component:f("/zh/","73b"),exact:!0,sidebar:"mySidebar"},{path:"/zh/advanced",component:f("/zh/advanced","367"),exact:!0,sidebar:"mySidebar"},{path:"/zh/architecture",component:f("/zh/architecture","f86"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli",component:f("/zh/cli","16f"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/agent",component:f("/zh/cli/agent","a3f"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/certificate",component:f("/zh/cli/certificate","6a2"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/etcd-snapshot",component:f("/zh/cli/etcd-snapshot","8da"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/secrets-encrypt",component:f("/zh/cli/secrets-encrypt","0b0"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/server",component:f("/zh/cli/server","25d"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/token",component:f("/zh/cli/token","a40"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cluster-access",component:f("/zh/cluster-access","dbe"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore",component:f("/zh/datastore","ab6"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/backup-restore",component:f("/zh/datastore/backup-restore","379"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/cluster-loadbalancer",component:f("/zh/datastore/cluster-loadbalancer","995"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/ha",component:f("/zh/datastore/ha","7ae"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/ha-embedded",component:f("/zh/datastore/ha-embedded","7fe"),exact:!0,sidebar:"mySidebar"},{path:"/zh/faq",component:f("/zh/faq","936"),exact:!0,sidebar:"mySidebar"},{path:"/zh/helm",component:f("/zh/helm","416"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation",component:f("/zh/installation","40c"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/airgap",component:f("/zh/installation/airgap","262"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/configuration",component:f("/zh/installation/configuration","906"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/kube-dashboard",component:f("/zh/installation/kube-dashboard","ddd"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/network-options",component:f("/zh/installation/network-options","0b1"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/packaged-components",component:f("/zh/installation/packaged-components","19e"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/private-registry",component:f("/zh/installation/private-registry","c5c"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/requirements",component:f("/zh/installation/requirements","62d"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/server-roles",component:f("/zh/installation/server-roles","5fb"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/uninstall",component:f("/zh/installation/uninstall","47d"),exact:!0,sidebar:"mySidebar"},{path:"/zh/known-issues",component:f("/zh/known-issues","97f"),exact:!0,sidebar:"mySidebar"},{path:"/zh/networking",component:f("/zh/networking","69c"),exact:!0,sidebar:"mySidebar"},{path:"/zh/quick-start",component:f("/zh/quick-start","6e8"),exact:!0,sidebar:"mySidebar"},{path:"/zh/reference",component:f("/zh/reference","1cf"),exact:!0,sidebar:"mySidebar"},{path:"/zh/reference/env-variables",component:f("/zh/reference/env-variables","d35"),exact:!0,sidebar:"mySidebar"},{path:"/zh/reference/resource-profiling",component:f("/zh/reference/resource-profiling","541"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security",component:f("/zh/security","890"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security/hardening-guide",component:f("/zh/security/hardening-guide","195"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security/secrets-encryption",component:f("/zh/security/secrets-encryption","152"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security/self-assessment",component:f("/zh/security/self-assessment","b85"),exact:!0,sidebar:"mySidebar"},{path:"/zh/storage",component:f("/zh/storage","992"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades",component:f("/zh/upgrades","bca"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades/automated",component:f("/zh/upgrades/automated","aa6"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades/killall",component:f("/zh/upgrades/killall","3b5"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades/manual",component:f("/zh/upgrades/manual","8bc"),exact:!0,sidebar:"mySidebar"}]},{path:"*",component:f("*")}]},8934:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,t:()=>o});var r=n(7294);const a=r.createContext(!1);function o(e){let{children:t}=e;const[n,o]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{o(!0)}),[]),r.createElement(a.Provider,{value:n},t)}},9383:(e,t,n)=>{"use strict";var r=n(7294),a=n(3935),o=n(3727),i=n(405),l=n(412);const s=[n(2497),n(3310),n(8320),n(2295)];var u=n(723),c=n(6775),d=n(8790);function f(e){let{children:t}=e;return r.createElement(r.Fragment,null,t)}var p=n(3117),h=n(5742),m=n(2263),g=n(4996),v=n(6668),b=n(1944),y=n(4711),w=n(9727),k=n(3320),E=n(197);function S(){const{i18n:{defaultLocale:e,localeConfigs:t}}=(0,m.Z)(),n=(0,y.l)();return r.createElement(h.Z,null,Object.entries(t).map((e=>{let[t,{htmlLang:a}]=e;return r.createElement("link",{key:t,rel:"alternate",href:n.createUrl({locale:t,fullyQualified:!0}),hrefLang:a})})),r.createElement("link",{rel:"alternate",href:n.createUrl({locale:e,fullyQualified:!0}),hrefLang:"x-default"}))}function x(e){let{permalink:t}=e;const{siteConfig:{url:n}}=(0,m.Z)(),a=function(){const{siteConfig:{url:e}}=(0,m.Z)(),{pathname:t}=(0,c.TH)();return e+(0,g.Z)(t)}(),o=t?`${n}${t}`:a;return r.createElement(h.Z,null,r.createElement("meta",{property:"og:url",content:o}),r.createElement("link",{rel:"canonical",href:o}))}function T(){const{i18n:{currentLocale:e}}=(0,m.Z)(),{metadata:t,image:n}=(0,v.L)();return r.createElement(r.Fragment,null,r.createElement(h.Z,null,r.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),r.createElement("body",{className:w.h})),n&&r.createElement(b.d,{image:n}),r.createElement(x,null),r.createElement(S,null),r.createElement(E.Z,{tag:k.HX,locale:e}),r.createElement(h.Z,null,t.map(((e,t)=>r.createElement("meta",(0,p.Z)({key:t},e))))))}const C=new Map;function _(e){if(C.has(e.pathname))return{...e,pathname:C.get(e.pathname)};if((0,d.f)(u.Z,e.pathname).some((e=>{let{route:t}=e;return!0===t.exact})))return C.set(e.pathname,e.pathname),e;const t=e.pathname.trim().replace(/(?:\/index)?\.html$/,"")||"/";return C.set(e.pathname,t),{...e,pathname:t}}var L=n(8934),R=n(8940);function A(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];const a=s.map((t=>(t.default?.[e]??t[e])?.(...n)));return()=>a.forEach((e=>e?.()))}const N=function(e){let{children:t,location:n,previousLocation:a}=e;return(0,r.useLayoutEffect)((()=>{a!==n&&(!function(e){let{location:t,previousLocation:n}=e;if(!n)return;const r=t.pathname===n.pathname,a=t.hash===n.hash,o=t.search===n.search;if(r&&a&&!o)return;const{hash:i}=t;if(i){const e=decodeURIComponent(i.substring(1));document.getElementById(e)?.scrollIntoView()}else window.scrollTo(0,0)}({location:n,previousLocation:a}),A("onRouteDidUpdate",{previousLocation:a,location:n}))}),[a,n]),t};function P(e){const t=Array.from(new Set([e,decodeURI(e)])).map((e=>(0,d.f)(u.Z,e))).flat();return Promise.all(t.map((e=>e.route.component.preload?.())))}class O extends r.Component{constructor(e){super(e),this.previousLocation=void 0,this.routeUpdateCleanupCb=void 0,this.previousLocation=null,this.routeUpdateCleanupCb=l.Z.canUseDOM?A("onRouteUpdate",{previousLocation:null,location:this.props.location}):()=>{},this.state={nextRouteHasLoaded:!0}}shouldComponentUpdate(e,t){if(e.location===this.props.location)return t.nextRouteHasLoaded;const n=e.location;return this.previousLocation=this.props.location,this.setState({nextRouteHasLoaded:!1}),this.routeUpdateCleanupCb=A("onRouteUpdate",{previousLocation:this.previousLocation,location:n}),P(n.pathname).then((()=>{this.routeUpdateCleanupCb(),this.setState({nextRouteHasLoaded:!0})})).catch((e=>{console.warn(e),window.location.reload()})),!1}render(){const{children:e,location:t}=this.props;return r.createElement(N,{previousLocation:this.previousLocation,location:t},r.createElement(c.AW,{location:t,render:()=>e}))}}const I=O,D="__docusaurus-base-url-issue-banner-container",z="__docusaurus-base-url-issue-banner-suggestion-container",M="__DOCUSAURUS_INSERT_BASEURL_BANNER";function F(e){return`\nwindow['${M}'] = true;\n\ndocument.addEventListener('DOMContentLoaded', maybeInsertBanner);\n\nfunction maybeInsertBanner() {\n  var shouldInsert = window['${M}'];\n  shouldInsert && insertBanner();\n}\n\nfunction insertBanner() {\n  var bannerContainer = document.getElementById('${D}');\n  if (!bannerContainer) {\n    return;\n  }\n  var bannerHtml = ${JSON.stringify(function(e){return`\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">${e}</span> ${"/"===e?" (default value)":""}</p>\n   <p>We suggest trying baseUrl = <span id="${z}" style="font-weight: bold; color: green;"></span></p>\n</div>\n`}(e)).replace(/</g,"\\<")};\n  bannerContainer.innerHTML = bannerHtml;\n  var suggestionContainer = document.getElementById('${z}');\n  var actualHomePagePath = window.location.pathname;\n  var suggestedBaseUrl = actualHomePagePath.substr(-1) === '/'\n        ? actualHomePagePath\n        : actualHomePagePath + '/';\n  suggestionContainer.innerHTML = suggestedBaseUrl;\n}\n`}function B(){const{siteConfig:{baseUrl:e}}=(0,m.Z)();return(0,r.useLayoutEffect)((()=>{window[M]=!1}),[]),r.createElement(r.Fragment,null,!l.Z.canUseDOM&&r.createElement(h.Z,null,r.createElement("script",null,F(e))),r.createElement("div",{id:D}))}function j(){const{siteConfig:{baseUrl:e,baseUrlIssueBanner:t}}=(0,m.Z)(),{pathname:n}=(0,c.TH)();return t&&n===e?r.createElement(B,null):null}function $(){const{siteConfig:{favicon:e,title:t,noIndex:n},i18n:{currentLocale:a,localeConfigs:o}}=(0,m.Z)(),i=(0,g.Z)(e),{htmlLang:l,direction:s}=o[a];return r.createElement(h.Z,null,r.createElement("html",{lang:l,dir:s}),r.createElement("title",null,t),r.createElement("meta",{property:"og:title",content:t}),r.createElement("meta",{name:"viewport",content:"width=device-width, initial-scale=1.0"}),n&&r.createElement("meta",{name:"robots",content:"noindex, nofollow"}),e&&r.createElement("link",{rel:"icon",href:i}))}var U=n(4763);function q(){const e=(0,d.H)(u.Z),t=(0,c.TH)();return r.createElement(U.Z,null,r.createElement(R.M,null,r.createElement(L.t,null,r.createElement(f,null,r.createElement($,null),r.createElement(T,null),r.createElement(j,null),r.createElement(I,{location:_(t)},e)))))}var H=n(6887);const G=function(e){try{return document.createElement("link").relList.supports(e)}catch{return!1}}("prefetch")?function(e){return new Promise(((t,n)=>{if("undefined"==typeof document)return void n();const r=document.createElement("link");r.setAttribute("rel","prefetch"),r.setAttribute("href",e),r.onload=()=>t(),r.onerror=()=>n();(document.getElementsByTagName("head")[0]??document.getElementsByName("script")[0]?.parentNode)?.appendChild(r)}))}:function(e){return new Promise(((t,n)=>{const r=new XMLHttpRequest;r.open("GET",e,!0),r.withCredentials=!0,r.onload=()=>{200===r.status?t():n()},r.send(null)}))};var Z=n(9670);const Q=new Set,V=new Set,W=()=>navigator.connection?.effectiveType.includes("2g")||navigator.connection?.saveData,K={prefetch(e){if(!(e=>!W()&&!V.has(e)&&!Q.has(e))(e))return!1;Q.add(e);const t=(0,d.f)(u.Z,e).flatMap((e=>{return t=e.route.path,Object.entries(H).filter((e=>{let[n]=e;return n.replace(/-[^-]+$/,"")===t})).flatMap((e=>{let[,t]=e;return Object.values((0,Z.Z)(t))}));var t}));return Promise.all(t.map((e=>{const t=n.gca(e);return t&&!t.includes("undefined")?G(t).catch((()=>{})):Promise.resolve()})))},preload:e=>!!(e=>!W()&&!V.has(e))(e)&&(V.add(e),P(e))},Y=Object.freeze(K);if(l.Z.canUseDOM){window.docusaurus=Y;const e=a.hydrate;P(window.location.pathname).then((()=>{e(r.createElement(i.B6,null,r.createElement(o.VK,null,r.createElement(q,null))),document.getElementById("__docusaurus"))}))}},8940:(e,t,n)=>{"use strict";n.d(t,{_:()=>c,M:()=>d});var r=n(7294),a=n(6809);const o=JSON.parse('{"docusaurus-plugin-content-docs":{"default":{"path":"/zh/","versions":[{"name":"current","label":"Next","isLast":true,"path":"/zh/","mainDocId":"introduction","docs":[{"id":"advanced/advanced","path":"/zh/advanced/","sidebar":"mySidebar"},{"id":"architecture/architecture","path":"/zh/architecture/","sidebar":"mySidebar"},{"id":"cli/agent","path":"/zh/cli/agent","sidebar":"mySidebar"},{"id":"cli/certificate","path":"/zh/cli/certificate","sidebar":"mySidebar"},{"id":"cli/cli","path":"/zh/cli/","sidebar":"mySidebar"},{"id":"cli/etcd-snapshot","path":"/zh/cli/etcd-snapshot","sidebar":"mySidebar"},{"id":"cli/secrets-encrypt","path":"/zh/cli/secrets-encrypt","sidebar":"mySidebar"},{"id":"cli/server","path":"/zh/cli/server","sidebar":"mySidebar"},{"id":"cli/token","path":"/zh/cli/token","sidebar":"mySidebar"},{"id":"cluster-access/cluster-access","path":"/zh/cluster-access/","sidebar":"mySidebar"},{"id":"datastore/backup-restore","path":"/zh/datastore/backup-restore","sidebar":"mySidebar"},{"id":"datastore/cluster-loadbalancer","path":"/zh/datastore/cluster-loadbalancer","sidebar":"mySidebar"},{"id":"datastore/datastore","path":"/zh/datastore/","sidebar":"mySidebar"},{"id":"datastore/ha","path":"/zh/datastore/ha","sidebar":"mySidebar"},{"id":"datastore/ha-embedded","path":"/zh/datastore/ha-embedded","sidebar":"mySidebar"},{"id":"faq/faq","path":"/zh/faq/","sidebar":"mySidebar"},{"id":"helm/helm","path":"/zh/helm/","sidebar":"mySidebar"},{"id":"installation/airgap","path":"/zh/installation/airgap","sidebar":"mySidebar"},{"id":"installation/configuration","path":"/zh/installation/configuration","sidebar":"mySidebar"},{"id":"installation/installation","path":"/zh/installation/","sidebar":"mySidebar"},{"id":"installation/kube-dashboard","path":"/zh/installation/kube-dashboard","sidebar":"mySidebar"},{"id":"installation/network-options","path":"/zh/installation/network-options","sidebar":"mySidebar"},{"id":"installation/packaged-components","path":"/zh/installation/packaged-components","sidebar":"mySidebar"},{"id":"installation/private-registry","path":"/zh/installation/private-registry","sidebar":"mySidebar"},{"id":"installation/requirements","path":"/zh/installation/requirements","sidebar":"mySidebar"},{"id":"installation/server-roles","path":"/zh/installation/server-roles","sidebar":"mySidebar"},{"id":"installation/uninstall","path":"/zh/installation/uninstall","sidebar":"mySidebar"},{"id":"introduction","path":"/zh/","sidebar":"mySidebar"},{"id":"known-issues/known-issues","path":"/zh/known-issues/","sidebar":"mySidebar"},{"id":"networking/networking","path":"/zh/networking/","sidebar":"mySidebar"},{"id":"quick-start/quick-start","path":"/zh/quick-start/","sidebar":"mySidebar"},{"id":"reference/env-variables","path":"/zh/reference/env-variables","sidebar":"mySidebar"},{"id":"reference/reference","path":"/zh/reference/","sidebar":"mySidebar"},{"id":"reference/resource-profiling","path":"/zh/reference/resource-profiling","sidebar":"mySidebar"},{"id":"security/hardening-guide","path":"/zh/security/hardening-guide","sidebar":"mySidebar"},{"id":"security/secrets-encryption","path":"/zh/security/secrets-encryption","sidebar":"mySidebar"},{"id":"security/security","path":"/zh/security/","sidebar":"mySidebar"},{"id":"security/self-assessment","path":"/zh/security/self-assessment","sidebar":"mySidebar"},{"id":"storage/storage","path":"/zh/storage/","sidebar":"mySidebar"},{"id":"upgrades/automated","path":"/zh/upgrades/automated","sidebar":"mySidebar"},{"id":"upgrades/killall","path":"/zh/upgrades/killall","sidebar":"mySidebar"},{"id":"upgrades/manual","path":"/zh/upgrades/manual","sidebar":"mySidebar"},{"id":"upgrades/upgrades","path":"/zh/upgrades/","sidebar":"mySidebar"}],"draftIds":[],"sidebars":{"mySidebar":{"link":{"path":"/zh/","label":"introduction"}}}}],"breadcrumbs":true}}}'),i=JSON.parse('{"defaultLocale":"en","locales":["en","zh","kr"],"path":"i18n","currentLocale":"zh","localeConfigs":{"en":{"label":"English","direction":"ltr","htmlLang":"en","calendar":"gregory","path":"en"},"zh":{"label":"\u7b80\u4f53\u4e2d\u6587","direction":"ltr","htmlLang":"zh","calendar":"gregory","path":"zh"},"kr":{"label":"\ud55c\uad6d\uc5b4","direction":"ltr","htmlLang":"kr","calendar":"gregory","path":"kr"}}}');var l=n(7529);const s=JSON.parse('{"docusaurusVersion":"2.4.1","siteVersion":"0.0.1","pluginVersions":{"docusaurus-plugin-content-docs":{"type":"package","name":"@docusaurus/plugin-content-docs","version":"2.4.1"},"docusaurus-plugin-content-pages":{"type":"package","name":"@docusaurus/plugin-content-pages","version":"2.4.1"},"docusaurus-plugin-sitemap":{"type":"package","name":"@docusaurus/plugin-sitemap","version":"2.4.1"},"docusaurus-theme-classic":{"type":"package","name":"@docusaurus/theme-classic","version":"2.4.1"},"docusaurus-plugin-client-redirects":{"type":"package","name":"@docusaurus/plugin-client-redirects","version":"2.4.1"},"docusaurus-theme-mermaid":{"type":"package","name":"@docusaurus/theme-mermaid","version":"2.4.1"},"@easyops-cn/docusaurus-search-local":{"type":"package","name":"@easyops-cn/docusaurus-search-local","version":"0.35.0"}}}'),u={siteConfig:a.Z,siteMetadata:s,globalData:o,i18n:i,codeTranslations:l},c=r.createContext(u);function d(e){let{children:t}=e;return r.createElement(c.Provider,{value:u},t)}},4763:(e,t,n)=>{"use strict";n.d(t,{Z:()=>f});var r=n(7294),a=n(412),o=n(5742),i=n(8780),l=n(1573);function s(e){let{error:t,tryAgain:n}=e;return r.createElement("div",{style:{display:"flex",flexDirection:"column",justifyContent:"center",alignItems:"flex-start",minHeight:"100vh",width:"100%",maxWidth:"80ch",fontSize:"20px",margin:"0 auto",padding:"1rem"}},r.createElement("h1",{style:{fontSize:"3rem"}},"This page crashed"),r.createElement("button",{type:"button",onClick:n,style:{margin:"1rem 0",fontSize:"2rem",cursor:"pointer",borderRadius:20,padding:"1rem"}},"Try again"),r.createElement(u,{error:t}))}function u(e){let{error:t}=e;const n=(0,i.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{style:{whiteSpace:"pre-wrap"}},n)}function c(e){let{error:t,tryAgain:n}=e;return r.createElement(f,{fallback:()=>r.createElement(s,{error:t,tryAgain:n})},r.createElement(o.Z,null,r.createElement("title",null,"Page Error")),r.createElement(l.Z,null,r.createElement(s,{error:t,tryAgain:n})))}const d=e=>r.createElement(c,e);class f extends r.Component{constructor(e){super(e),this.state={error:null}}componentDidCatch(e){a.Z.canUseDOM&&this.setState({error:e})}render(){const{children:e}=this.props,{error:t}=this.state;if(t){const e={error:t,tryAgain:()=>this.setState({error:null})};return(this.props.fallback??d)(e)}return e??null}}},412:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});const r="undefined"!=typeof window&&"document"in window&&"createElement"in window.document,a={canUseDOM:r,canUseEventListeners:r&&("addEventListener"in window||"attachEvent"in window),canUseIntersectionObserver:r&&"IntersectionObserver"in window,canUseViewport:r&&"screen"in window}},5742:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(405);function o(e){return r.createElement(a.ql,e)}},9960:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(3117),a=n(7294),o=n(3727),i=n(8780),l=n(2263),s=n(3919),u=n(412);const c=a.createContext({collectLink:()=>{}});var d=n(4996);function f(e,t){let{isNavLink:n,to:f,href:p,activeClassName:h,isActive:m,"data-noBrokenLinkCheck":g,autoAddBaseUrl:v=!0,...b}=e;const{siteConfig:{trailingSlash:y,baseUrl:w}}=(0,l.Z)(),{withBaseUrl:k}=(0,d.C)(),E=(0,a.useContext)(c),S=(0,a.useRef)(null);(0,a.useImperativeHandle)(t,(()=>S.current));const x=f||p;const T=(0,s.Z)(x),C=x?.replace("pathname://","");let _=void 0!==C?(L=C,v&&(e=>e.startsWith("/"))(L)?k(L):L):void 0;var L;_&&T&&(_=(0,i.applyTrailingSlash)(_,{trailingSlash:y,baseUrl:w}));const R=(0,a.useRef)(!1),A=n?o.OL:o.rU,N=u.Z.canUseIntersectionObserver,P=(0,a.useRef)(),O=()=>{R.current||null==_||(window.docusaurus.preload(_),R.current=!0)};(0,a.useEffect)((()=>(!N&&T&&null!=_&&window.docusaurus.prefetch(_),()=>{N&&P.current&&P.current.disconnect()})),[P,_,N,T]);const I=_?.startsWith("#")??!1,D=!_||!T||I;return D||g||E.collectLink(_),D?a.createElement("a",(0,r.Z)({ref:S,href:_},x&&!T&&{target:"_blank",rel:"noopener noreferrer"},b)):a.createElement(A,(0,r.Z)({},b,{onMouseEnter:O,onTouchStart:O,innerRef:e=>{S.current=e,N&&e&&T&&(P.current=new window.IntersectionObserver((t=>{t.forEach((t=>{e===t.target&&(t.isIntersecting||t.intersectionRatio>0)&&(P.current.unobserve(e),P.current.disconnect(),null!=_&&window.docusaurus.prefetch(_))}))})),P.current.observe(e))},to:_},n&&{isActive:m,activeClassName:h}))}const p=a.forwardRef(f)},5999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s,I:()=>l});var r=n(7294);function a(e,t){const n=e.split(/(\{\w+\})/).map(((e,n)=>{if(n%2==1){const n=t?.[e.slice(1,-1)];if(void 0!==n)return n}return e}));return n.some((e=>(0,r.isValidElement)(e)))?n.map(((e,t)=>(0,r.isValidElement)(e)?r.cloneElement(e,{key:t}):e)).filter((e=>""!==e)):n.join("")}var o=n(7529);function i(e){let{id:t,message:n}=e;if(void 0===t&&void 0===n)throw new Error("Docusaurus translation declarations must have at least a translation id or a default translation message");return o[t??n]??n??t}function l(e,t){let{message:n,id:r}=e;return a(i({message:n,id:r}),t)}function s(e){let{children:t,id:n,values:o}=e;if(t&&"string"!=typeof t)throw console.warn("Illegal <Translate> children",t),new Error("The Docusaurus <Translate> component only accept simple string values");const l=i({message:t,id:n});return r.createElement(r.Fragment,null,a(l,o))}},9935:(e,t,n)=>{"use strict";n.d(t,{m:()=>r});const r="default"},3919:(e,t,n)=>{"use strict";function r(e){return/^(?:\w*:|\/\/)/.test(e)}function a(e){return void 0!==e&&!r(e)}n.d(t,{Z:()=>a,b:()=>r})},4996:(e,t,n)=>{"use strict";n.d(t,{C:()=>i,Z:()=>l});var r=n(7294),a=n(2263),o=n(3919);function i(){const{siteConfig:{baseUrl:e,url:t}}=(0,a.Z)(),n=(0,r.useCallback)(((n,r)=>function(e,t,n,r){let{forcePrependBaseUrl:a=!1,absolute:i=!1}=void 0===r?{}:r;if(!n||n.startsWith("#")||(0,o.b)(n))return n;if(a)return t+n.replace(/^\//,"");if(n===t.replace(/\/$/,""))return t;const l=n.startsWith(t)?n:t+n.replace(/^\//,"");return i?e+l:l}(t,e,n,r)),[t,e]);return{withBaseUrl:n}}function l(e,t){void 0===t&&(t={});const{withBaseUrl:n}=i();return n(e,t)}},2263:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8940);function o(){return(0,r.useContext)(a._)}},2389:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8934);function o(){return(0,r.useContext)(a._)}},9670:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});function r(e){const t={};return function e(n,r){Object.entries(n).forEach((n=>{let[a,o]=n;const i=r?`${r}.${a}`:a;var l;"object"==typeof(l=o)&&l&&Object.keys(l).length>0?e(o,i):t[i]=o}))}(e),t}},226:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,z:()=>o});var r=n(7294);const a=r.createContext(null);function o(e){let{children:t,value:n}=e;const o=r.useContext(a),i=(0,r.useMemo)((()=>function(e){let{parent:t,value:n}=e;if(!t){if(!n)throw new Error("Unexpected: no Docusaurus route context found");if(!("plugin"in n))throw new Error("Unexpected: Docusaurus topmost route context has no `plugin` attribute");return n}const r={...t.data,...n?.data};return{plugin:t.plugin,data:r}}({parent:o,value:n})),[o,n]);return r.createElement(a.Provider,{value:i},t)}},143:(e,t,n)=>{"use strict";n.d(t,{Iw:()=>m,gA:()=>f,_r:()=>c,Jo:()=>g,zh:()=>d,yW:()=>h,gB:()=>p});var r=n(6775),a=n(2263),o=n(9935);function i(e,t){void 0===t&&(t={});const n=function(){const{globalData:e}=(0,a.Z)();return e}()[e];if(!n&&t.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin.`);return n}const l=e=>e.versions.find((e=>e.isLast));function s(e,t){const n=function(e,t){const n=l(e);return[...e.versions.filter((e=>e!==n)),n].find((e=>!!(0,r.LX)(t,{path:e.path,exact:!1,strict:!1})))}(e,t),a=n?.docs.find((e=>!!(0,r.LX)(t,{path:e.path,exact:!0,strict:!1})));return{activeVersion:n,activeDoc:a,alternateDocVersions:a?function(t){const n={};return e.versions.forEach((e=>{e.docs.forEach((r=>{r.id===t&&(n[e.name]=r)}))})),n}(a.id):{}}}const u={},c=()=>i("docusaurus-plugin-content-docs")??u,d=e=>function(e,t,n){void 0===t&&(t=o.m),void 0===n&&(n={});const r=i(e)?.[t];if(!r&&n.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin with id "${t}".`);return r}("docusaurus-plugin-content-docs",e,{failfast:!0});function f(e){void 0===e&&(e={});const t=c(),{pathname:n}=(0,r.TH)();return function(e,t,n){void 0===n&&(n={});const a=Object.entries(e).sort(((e,t)=>t[1].path.localeCompare(e[1].path))).find((e=>{let[,n]=e;return!!(0,r.LX)(t,{path:n.path,exact:!1,strict:!1})})),o=a?{pluginId:a[0],pluginData:a[1]}:void 0;if(!o&&n.failfast)throw new Error(`Can't find active docs plugin for "${t}" pathname, while it was expected to be found. Maybe you tried to use a docs feature that can only be used on a docs-related page? Existing docs plugin paths are: ${Object.values(e).map((e=>e.path)).join(", ")}`);return o}(t,n,e)}function p(e){return d(e).versions}function h(e){const t=d(e);return l(t)}function m(e){const t=d(e),{pathname:n}=(0,r.TH)();return s(t,n)}function g(e){const t=d(e),{pathname:n}=(0,r.TH)();return function(e,t){const n=l(e);return{latestDocSuggestion:s(e,t).alternateDocVersions[n.name],latestVersionSuggestion:n}}(t,n)}},8320:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>o});var r=n(4865),a=n.n(r);a().configure({showSpinner:!1});const o={onRouteUpdate(e){let{location:t,previousLocation:n}=e;if(n&&t.pathname!==n.pathname){const e=window.setTimeout((()=>{a().start()}),200);return()=>window.clearTimeout(e)}},onRouteDidUpdate(){a().done()}}},3310:(e,t,n)=>{"use strict";n.r(t);var r=n(7410),a=n(6809);!function(e){const{themeConfig:{prism:t}}=a.Z,{additionalLanguages:r}=t;globalThis.Prism=e,r.forEach((e=>{n(6726)(`./prism-${e}`)})),delete globalThis.Prism}(r.Z)},9471:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294);const a="iconExternalLink_nPIU";function o(e){let{width:t=13.5,height:n=13.5}=e;return r.createElement("svg",{width:t,height:n,"aria-hidden":"true",viewBox:"0 0 24 24",className:a},r.createElement("path",{fill:"currentColor",d:"M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"}))}},1573:(e,t,n)=>{"use strict";n.d(t,{Z:()=>Jt});var r=n(7294),a=n(6010),o=n(4763),i=n(1944),l=n(3117),s=n(6775),u=n(5999),c=n(5936);const d="__docusaurus_skipToContent_fallback";function f(e){e.setAttribute("tabindex","-1"),e.focus(),e.removeAttribute("tabindex")}function p(){const e=(0,r.useRef)(null),{action:t}=(0,s.k6)(),n=(0,r.useCallback)((e=>{e.preventDefault();const t=document.querySelector("main:first-of-type")??document.getElementById(d);t&&f(t)}),[]);return(0,c.S)((n=>{let{location:r}=n;e.current&&!r.hash&&"PUSH"===t&&f(e.current)})),{containerRef:e,onClick:n}}const h=(0,u.I)({id:"theme.common.skipToMainContent",description:"The skip to content label used for accessibility, allowing to rapidly navigate to main content with keyboard tab/enter navigation",message:"Skip to main content"});function m(e){const t=e.children??h,{containerRef:n,onClick:a}=p();return r.createElement("div",{ref:n,role:"region","aria-label":h},r.createElement("a",(0,l.Z)({},e,{href:`#${d}`,onClick:a}),t))}var g=n(5281),v=n(9727);const b="skipToContent_fXgn";function y(){return r.createElement(m,{className:b})}var w=n(6668),k=n(9689);function E(e){let{width:t=21,height:n=21,color:a="currentColor",strokeWidth:o=1.2,className:i,...s}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 15 15",width:t,height:n},s),r.createElement("g",{stroke:a,strokeWidth:o},r.createElement("path",{d:"M.75.75l13.5 13.5M14.25.75L.75 14.25"})))}const S="closeButton_CVFx";function x(e){return r.createElement("button",(0,l.Z)({type:"button","aria-label":(0,u.I)({id:"theme.AnnouncementBar.closeButtonAriaLabel",message:"Close",description:"The ARIA label for close button of announcement bar"})},e,{className:(0,a.Z)("clean-btn close",S,e.className)}),r.createElement(E,{width:14,height:14,strokeWidth:3.1}))}const T="content_knG7";function C(e){const{announcementBar:t}=(0,w.L)(),{content:n}=t;return r.createElement("div",(0,l.Z)({},e,{className:(0,a.Z)(T,e.className),dangerouslySetInnerHTML:{__html:n}}))}const _="announcementBar_mb4j",L="announcementBarPlaceholder_vyr4",R="announcementBarClose_gvF7",A="announcementBarContent_xLdY";function N(){const{announcementBar:e}=(0,w.L)(),{isActive:t,close:n}=(0,k.nT)();if(!t)return null;const{backgroundColor:a,textColor:o,isCloseable:i}=e;return r.createElement("div",{className:_,style:{backgroundColor:a,color:o},role:"banner"},i&&r.createElement("div",{className:L}),r.createElement(C,{className:A}),i&&r.createElement(x,{onClick:n,className:R}))}var P=n(3163),O=n(2466);var I=n(902),D=n(3102);const z=r.createContext(null);function M(e){let{children:t}=e;const n=function(){const e=(0,P.e)(),t=(0,D.HY)(),[n,a]=(0,r.useState)(!1),o=null!==t.component,i=(0,I.D9)(o);return(0,r.useEffect)((()=>{o&&!i&&a(!0)}),[o,i]),(0,r.useEffect)((()=>{o?e.shown||a(!0):a(!1)}),[e.shown,o]),(0,r.useMemo)((()=>[n,a]),[n])}();return r.createElement(z.Provider,{value:n},t)}function F(e){if(e.component){const t=e.component;return r.createElement(t,e.props)}}function B(){const e=(0,r.useContext)(z);if(!e)throw new I.i6("NavbarSecondaryMenuDisplayProvider");const[t,n]=e,a=(0,r.useCallback)((()=>n(!1)),[n]),o=(0,D.HY)();return(0,r.useMemo)((()=>({shown:t,hide:a,content:F(o)})),[a,o,t])}function j(e){let{header:t,primaryMenu:n,secondaryMenu:o}=e;const{shown:i}=B();return r.createElement("div",{className:"navbar-sidebar"},t,r.createElement("div",{className:(0,a.Z)("navbar-sidebar__items",{"navbar-sidebar__items--show-secondary":i})},r.createElement("div",{className:"navbar-sidebar__item menu"},n),r.createElement("div",{className:"navbar-sidebar__item menu"},o)))}var $=n(2949),U=n(2389);function q(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"}))}function H(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"}))}const G={toggle:"toggle_vylO",toggleButton:"toggleButton_gllP",darkToggleIcon:"darkToggleIcon_wfgR",lightToggleIcon:"lightToggleIcon_pyhR",toggleButtonDisabled:"toggleButtonDisabled_aARS"};function Z(e){let{className:t,buttonClassName:n,value:o,onChange:i}=e;const l=(0,U.Z)(),s=(0,u.I)({message:"Switch between dark and light mode (currently {mode})",id:"theme.colorToggle.ariaLabel",description:"The ARIA label for the navbar color mode toggle"},{mode:"dark"===o?(0,u.I)({message:"dark mode",id:"theme.colorToggle.ariaLabel.mode.dark",description:"The name for the dark color mode"}):(0,u.I)({message:"light mode",id:"theme.colorToggle.ariaLabel.mode.light",description:"The name for the light color mode"})});return r.createElement("div",{className:(0,a.Z)(G.toggle,t)},r.createElement("button",{className:(0,a.Z)("clean-btn",G.toggleButton,!l&&G.toggleButtonDisabled,n),type:"button",onClick:()=>i("dark"===o?"light":"dark"),disabled:!l,title:s,"aria-label":s,"aria-live":"polite"},r.createElement(q,{className:(0,a.Z)(G.toggleIcon,G.lightToggleIcon)}),r.createElement(H,{className:(0,a.Z)(G.toggleIcon,G.darkToggleIcon)})))}const Q=r.memo(Z),V="darkNavbarColorModeToggle_X3D1";function W(e){let{className:t}=e;const n=(0,w.L)().navbar.style,a=(0,w.L)().colorMode.disableSwitch,{colorMode:o,setColorMode:i}=(0,$.I)();return a?null:r.createElement(Q,{className:t,buttonClassName:"dark"===n?V:void 0,value:o,onChange:i})}var K=n(1327);function Y(){return r.createElement(K.Z,{className:"navbar__brand",imageClassName:"navbar__logo",titleClassName:"navbar__title text--truncate"})}function X(){const e=(0,P.e)();return r.createElement("button",{type:"button","aria-label":(0,u.I)({id:"theme.docs.sidebar.closeSidebarButtonAriaLabel",message:"Close navigation bar",description:"The ARIA label for close button of mobile sidebar"}),className:"clean-btn navbar-sidebar__close",onClick:()=>e.toggle()},r.createElement(E,{color:"var(--ifm-color-emphasis-600)"}))}function J(){return r.createElement("div",{className:"navbar-sidebar__brand"},r.createElement(Y,null),r.createElement("a",{href:"https://github.com/k3s-io/k3s",target:"_blank",rel:"noopener noreferrer",className:"margin-right--md header-github-link"}),r.createElement(W,{className:"margin-right--md"}),r.createElement(X,null))}var ee=n(9960),te=n(4996),ne=n(3919);function re(e,t){return void 0!==e&&void 0!==t&&new RegExp(e,"gi").test(t)}var ae=n(9471);function oe(e){let{activeBasePath:t,activeBaseRegex:n,to:a,href:o,label:i,html:s,isDropdownLink:u,prependBaseUrlToHref:c,...d}=e;const f=(0,te.Z)(a),p=(0,te.Z)(t),h=(0,te.Z)(o,{forcePrependBaseUrl:!0}),m=i&&o&&!(0,ne.Z)(o),g=s?{dangerouslySetInnerHTML:{__html:s}}:{children:r.createElement(r.Fragment,null,i,m&&r.createElement(ae.Z,u&&{width:12,height:12}))};return o?r.createElement(ee.Z,(0,l.Z)({href:c?h:o},d,g)):r.createElement(ee.Z,(0,l.Z)({to:f,isNavLink:!0},(t||n)&&{isActive:(e,t)=>n?re(n,t.pathname):t.pathname.startsWith(p)},d,g))}function ie(e){let{className:t,isDropdownItem:n=!1,...o}=e;const i=r.createElement(oe,(0,l.Z)({className:(0,a.Z)(n?"dropdown__link":"navbar__item navbar__link",t),isDropdownLink:n},o));return n?r.createElement("li",null,i):i}function le(e){let{className:t,isDropdownItem:n,...o}=e;return r.createElement("li",{className:"menu__list-item"},r.createElement(oe,(0,l.Z)({className:(0,a.Z)("menu__link",t)},o)))}function se(e){let{mobile:t=!1,position:n,...a}=e;const o=t?le:ie;return r.createElement(o,(0,l.Z)({},a,{activeClassName:a.activeClassName??(t?"menu__link--active":"navbar__link--active")}))}var ue=n(6043),ce=n(8596),de=n(2263);function fe(e,t){return e.some((e=>function(e,t){return!!(0,ce.Mg)(e.to,t)||!!re(e.activeBaseRegex,t)||!(!e.activeBasePath||!t.startsWith(e.activeBasePath))}(e,t)))}function pe(e){let{items:t,position:n,className:o,onClick:i,...s}=e;const u=(0,r.useRef)(null),[c,d]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{const e=e=>{u.current&&!u.current.contains(e.target)&&d(!1)};return document.addEventListener("mousedown",e),document.addEventListener("touchstart",e),document.addEventListener("focusin",e),()=>{document.removeEventListener("mousedown",e),document.removeEventListener("touchstart",e),document.removeEventListener("focusin",e)}}),[u]),r.createElement("div",{ref:u,className:(0,a.Z)("navbar__item","dropdown","dropdown--hoverable",{"dropdown--right":"right"===n,"dropdown--show":c})},r.createElement(oe,(0,l.Z)({"aria-haspopup":"true","aria-expanded":c,role:"button",href:s.to?void 0:"#",className:(0,a.Z)("navbar__link",o)},s,{onClick:s.to?void 0:e=>e.preventDefault(),onKeyDown:e=>{"Enter"===e.key&&(e.preventDefault(),d(!c))}}),s.children??s.label),r.createElement("ul",{className:"dropdown__menu"},t.map(((e,t)=>r.createElement(ft,(0,l.Z)({isDropdownItem:!0,activeClassName:"dropdown__link--active"},e,{key:t}))))))}function he(e){let{items:t,className:n,position:o,onClick:i,...u}=e;const c=function(){const{siteConfig:{baseUrl:e}}=(0,de.Z)(),{pathname:t}=(0,s.TH)();return t.replace(e,"/")}(),d=fe(t,c),{collapsed:f,toggleCollapsed:p,setCollapsed:h}=(0,ue.u)({initialState:()=>!d});return(0,r.useEffect)((()=>{d&&h(!d)}),[c,d,h]),r.createElement("li",{className:(0,a.Z)("menu__list-item",{"menu__list-item--collapsed":f})},r.createElement(oe,(0,l.Z)({role:"button",className:(0,a.Z)("menu__link menu__link--sublist menu__link--sublist-caret",n)},u,{onClick:e=>{e.preventDefault(),p()}}),u.children??u.label),r.createElement(ue.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:f},t.map(((e,t)=>r.createElement(ft,(0,l.Z)({mobile:!0,isDropdownItem:!0,onClick:i,activeClassName:"menu__link--active"},e,{key:t}))))))}function me(e){let{mobile:t=!1,...n}=e;const a=t?he:pe;return r.createElement(a,n)}var ge=n(4711);function ve(e){let{width:t=20,height:n=20,...a}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:t,height:n,"aria-hidden":!0},a),r.createElement("path",{fill:"currentColor",d:"M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"}))}const be="iconLanguage_nlXk";var ye=n(1029),we=n(412),ke=n(373),Ee=n(143),Se=n(22),xe=n(8202),Te=n(3926),Ce=n(1073),_e=n(2539),Le=n(726);const Re="searchBar_RVTs",Ae="dropdownMenu_qbY6",Ne="searchBarLeft_MXDe",Pe="suggestion_fB_2",Oe="cursor_eG29",Ie="hitTree_kk6K",De="hitIcon_a7Zy",ze="hitPath_ieM4",Me="noResultsIcon_EBY5",Fe="hitFooter_E9YW",Be="hitWrapper_sAK8",je="hitTitle_vyVt",$e="hitAction_NqkB",Ue="noResults_l6Q3",qe="searchBarContainer_NW3z",He="searchBarLoadingRing_YnHq",Ge="searchClearButton_qk4g",Ze="searchIndexLoading_EJ1f",Qe="searchHintContainer_Pkmr",Ve="searchHint_iIMx",We="focused_OWtg",Ke="input_FOTf",Ye="hint_URu1",Xe="suggestions_X8XU",Je="dataset_QiCy",et="empty_eITn";function tt(e){let{document:t,type:n,page:r,metadata:a,tokens:o,isInterOfTree:i,isLastOfTree:l}=e;const s=0===n,u=1===n,c=[];i?c.push('<svg viewBox="0 0 24 54"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M8 6v42M20 27H8.3"></path></g></svg>'):l&&c.push('<svg viewBox="0 0 24 54"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M8 6v21M20 27H8.3"></path></g></svg>');const d=c.map((e=>`<span class="${Ie}">${e}</span>`)),f=`<span class="${De}">${s?'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M17 6v12c0 .52-.2 1-1 1H4c-.7 0-1-.33-1-1V2c0-.55.42-1 1-1h8l5 5zM14 8h-3.13c-.51 0-.87-.34-.87-.87V4" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linejoin="round"></path></svg>':u?'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M13 13h4-4V8H7v5h6v4-4H7V8H3h4V3v5h6V3v5h4-4v5zm-6 0v4-4H3h4z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg>':'<svg width="20" height="20" viewBox="0 0 20 20"><path d="M17 5H3h14zm0 5H3h14zm0 5H3h14z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linejoin="round"></path></svg>'}</span>`,p=[`<span class="${je}">${(0,Le.o)(t.t,(0,Ce.m)(a,"t"),o)}</span>`];if(!i&&!l&&ye.H6){const e=r?(r.b??[]).concat(r.t).concat(t.s&&t.s!==r.t?t.s:[]):t.b;p.push(`<span class="${ze}">${(0,Te.e)(e??[])}</span>`)}else s||p.push(`<span class="${ze}">${(0,_e.C)(r.t||(t.u.startsWith("/docs/api-reference/")?"API Reference":""),o)}</span>`);const h=`<span class="${$e}"><svg width="20" height="20" viewBox="0 0 20 20"><g stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"><path d="M18 3v4c0 2-2 4-4 4H2"></path><path d="M8 17l-6-6 6-6"></path></g></svg></span>`;return[...d,f,`<span class="${Be}">`,...p,"</span>",h].join("")}function nt(){return`<span class="${Ue}"><span class="${Me}"><svg width="40" height="40" viewBox="0 0 20 20" fill="none" fill-rule="evenodd" stroke="currentColor" stroke-linecap="round" stroke-linejoin="round"><path d="M15.5 4.8c2 3 1.7 7-1 9.7h0l4.3 4.3-4.3-4.3a7.8 7.8 0 01-9.8 1m-2.2-2.2A7.8 7.8 0 0113.2 2.4M2 18L18 2"></path></svg></span><span>${(0,u.I)({id:"theme.SearchBar.noResultsText",message:"No results"})}</span></span>`}var rt=n(311);async function at(){const e=await Promise.all([n.e(8443),n.e(5525)]).then(n.t.bind(n,8443,23)),t=e.default;return t.noConflict?t.noConflict():e.noConflict&&e.noConflict(),t}const ot="_highlight";const it=function(e){let{handleSearchBarToggle:t}=e;const{siteConfig:{baseUrl:n}}=(0,de.Z)(),o=(0,Ee.gA)();let i=n;try{const{preferredVersion:e}=(0,ke.J)(o?.pluginId??ye.gQ);e&&!e.isLast&&(i=e.path+"/")}catch(D){if(ye.l9&&!(D instanceof I.i6))throw D}const l=(0,s.k6)(),c=(0,s.TH)(),d=(0,r.useRef)(null),f=(0,r.useRef)(new Map),p=(0,r.useRef)(!1),[h,m]=(0,r.useState)(!1),[g,v]=(0,r.useState)(!1),[b,y]=(0,r.useState)(""),w=(0,r.useRef)(null),k=(0,r.useRef)(""),[E,S]=(0,r.useState)("");(0,r.useEffect)((()=>{if(!Array.isArray(ye.Kc))return;let e="";if(c.pathname.startsWith(i)){const t=c.pathname.substring(i.length),n=ye.Kc.find((e=>t===e||t.startsWith(`${e}/`)));n&&(e=n)}k.current!==e&&(f.current.delete(e),k.current=e),S(e)}),[c.pathname,i]);const x=!!ye.hG&&Array.isArray(ye.Kc)&&""===E,T=(0,r.useCallback)((async()=>{if(x||f.current.get(E))return;f.current.set(E,"loading"),w.current?.autocomplete.destroy(),m(!0);const[{wrappedIndexes:e,zhDictionary:t},r]=await Promise.all([(0,Se.w)(i,E),at()]);if(w.current=r(d.current,{hint:!1,autoselect:!0,openOnFocus:!0,cssClasses:{root:(0,a.Z)(Re,{[Ne]:"left"===ye.pu}),noPrefix:!0,dropdownMenu:Ae,input:Ke,hint:Ye,suggestions:Xe,suggestion:Pe,cursor:Oe,dataset:Je,empty:et}},[{source:(0,xe.v)(e,t,ye.qo),templates:{suggestion:tt,empty:nt,footer:e=>{let{query:t,isEmpty:r}=e;if(r&&!E)return;const a=(e=>{let{query:t,isEmpty:r}=e;const a=document.createElement("a"),o=new URLSearchParams,s=(0,u.I)({id:"theme.SearchBar.seeAll",message:"See all results"}),c=(0,u.I)({id:"theme.SearchBar.seeAllOutsideContext",message:"See results outside {context}"},{context:E}),d=(0,u.I)({id:"theme.SearchBar.searchInContext",message:"See all results in {context}"},{context:E});let f;if(o.set("q",t),f=E&&r?c:E?d:s,Array.isArray(ye.Kc)&&!r&&o.set("ctx",E),i!==n){if(!i.startsWith(n))throw new Error(`Version url '${i}' does not start with base url '${n}', this is a bug of \`@easyops-cn/docusaurus-search-local\`, please report it.`);o.set("version",i.substring(n.length))}const p=`${n}search?${o.toString()}`;return a.href=p,a.textContent=f,a.addEventListener("click",(e=>{e.ctrlKey||e.metaKey||(e.preventDefault(),w.current?.autocomplete.close(),l.push(p))})),a})({query:t,isEmpty:r}),o=document.createElement("div");return o.className=Fe,o.appendChild(a),o}}}]).on("autocomplete:selected",(function(e,t){let{document:{u:n,h:r},tokens:a}=t;d.current?.blur();let o=n;if(ye.vc&&a.length>0){const e=new URLSearchParams;for(const t of a)e.append(ot,t);o+=`?${e.toString()}`}r&&(o+=r),l.push(o)})).on("autocomplete:closed",(()=>{d.current?.blur()})),f.current.set(E,"done"),m(!1),p.current){const e=d.current;e.value&&w.current?.autocomplete.open(),e.focus()}}),[x,E,i,n,l]);(0,r.useEffect)((()=>{if(!ye.vc)return;const e=we.Z.canUseDOM?new URLSearchParams(c.search).getAll(ot):[];setTimeout((()=>{const t=document.querySelector("article");if(!t)return;const n=new ye.vc(t);n.unmark(),0!==e.length&&n.mark(e),y(e.join(" ")),w.current?.autocomplete.setVal(e.join(" "))}))}),[c.search,c.pathname]);const[C,_]=(0,r.useState)(!1),L=(0,r.useCallback)((()=>{p.current=!0,T(),_(!0),t?.(!0)}),[t,T]),R=(0,r.useCallback)((()=>{_(!1),t?.(!1)}),[t]),A=(0,r.useCallback)((()=>{T()}),[T]),N=(0,r.useCallback)((e=>{y(e.target.value),e.target.value&&v(!0)}),[]),P=!!we.Z.canUseDOM&&/mac/i.test(navigator.userAgentData?.platform??navigator.platform);(0,r.useEffect)((()=>{if(!ye.AY)return;const e=e=>{!(P?e.metaKey:e.ctrlKey)||"k"!==e.key&&"K"!==e.key||(e.preventDefault(),d.current?.focus(),L())};return document.addEventListener("keydown",e),()=>{document.removeEventListener("keydown",e)}}),[P,L]);const O=(0,r.useCallback)((()=>{const e=new URLSearchParams(c.search);e.delete(ot);const t=e.toString(),n=c.pathname+(""!=t?`?${t}`:"")+c.hash;n!=c.pathname+c.search+c.hash&&l.push(n),y(""),w.current?.autocomplete.setVal("")}),[c.pathname,c.search,c.hash,l]);return r.createElement("div",{className:(0,a.Z)("navbar__search",qe,{[Ze]:h&&g,[We]:C}),hidden:x},r.createElement("input",{placeholder:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"}),"aria-label":"Search",className:"navbar__search-input",onMouseEnter:A,onFocus:L,onBlur:R,onChange:N,ref:d,value:b}),r.createElement(rt.Z,{className:He}),ye.AY&&ye.t_&&(""!==b?r.createElement("button",{className:Ge,onClick:O},"\u2715"):we.Z.canUseDOM&&r.createElement("div",{className:Qe},r.createElement("kbd",{className:Ve},P?"\u2318":"ctrl"),r.createElement("kbd",{className:Ve},"K"))))},lt="searchBox_ZlJk";function st(e){let{children:t,className:n}=e;return r.createElement("div",{className:(0,a.Z)(n,lt)},t)}var ut=n(3438);const ct=e=>e.docs.find((t=>t.id===e.mainDocId));const dt={default:se,localeDropdown:function(e){let{mobile:t,dropdownItemsBefore:n,dropdownItemsAfter:a,...o}=e;const{i18n:{currentLocale:i,locales:c,localeConfigs:d}}=(0,de.Z)(),f=(0,ge.l)(),{search:p,hash:h}=(0,s.TH)(),m=[...n,...c.map((e=>{const n=`${`pathname://${f.createUrl({locale:e,fullyQualified:!1})}`}${p}${h}`;return{label:d[e].label,lang:d[e].htmlLang,to:n,target:"_self",autoAddBaseUrl:!1,className:e===i?t?"menu__link--active":"dropdown__link--active":""}})),...a],g=t?(0,u.I)({message:"Languages",id:"theme.navbar.mobileLanguageDropdown.label",description:"The label for the mobile language switcher dropdown"}):d[i].label;return r.createElement(me,(0,l.Z)({},o,{mobile:t,label:r.createElement(r.Fragment,null,r.createElement(ve,{className:be}),g),items:m}))},search:function(e){let{mobile:t,className:n}=e;return t?null:r.createElement(st,{className:n},r.createElement(it,null))},dropdown:me,html:function(e){let{value:t,className:n,mobile:o=!1,isDropdownItem:i=!1}=e;const l=i?"li":"div";return r.createElement(l,{className:(0,a.Z)({navbar__item:!o&&!i,"menu__list-item":o},n),dangerouslySetInnerHTML:{__html:t}})},doc:function(e){let{docId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ee.Iw)(a),s=(0,ut.vY)(t,a);return null===s?null:r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.path===s.path||!!i?.sidebar&&i.sidebar===s.sidebar,label:n??s.id,to:s.path}))},docSidebar:function(e){let{sidebarId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ee.Iw)(a),s=(0,ut.oz)(t,a).link;if(!s)throw new Error(`DocSidebarNavbarItem: Sidebar with ID "${t}" doesn't have anything to be linked to.`);return r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.sidebar===t,label:n??s.label,to:s.path}))},docsVersion:function(e){let{label:t,to:n,docsPluginId:a,...o}=e;const i=(0,ut.lO)(a)[0],s=t??i.label,u=n??(e=>e.docs.find((t=>t.id===e.mainDocId)))(i).path;return r.createElement(se,(0,l.Z)({},o,{label:s,to:u}))},docsVersionDropdown:function(e){let{mobile:t,docsPluginId:n,dropdownActiveClassDisabled:a,dropdownItemsBefore:o,dropdownItemsAfter:i,...c}=e;const{search:d,hash:f}=(0,s.TH)(),p=(0,Ee.Iw)(n),h=(0,Ee.gB)(n),{savePreferredVersionName:m}=(0,ke.J)(n),g=[...o,...h.map((e=>{const t=p.alternateDocVersions[e.name]??ct(e);return{label:e.label,to:`${t.path}${d}${f}`,isActive:()=>e===p.activeVersion,onClick:()=>m(e.name)}})),...i],v=(0,ut.lO)(n)[0],b=t&&g.length>1?(0,u.I)({id:"theme.navbar.mobileVersionsDropdown.label",message:"Versions",description:"The label for the navbar versions dropdown on mobile view"}):v.label,y=t&&g.length>1?void 0:ct(v).path;return g.length<=1?r.createElement(se,(0,l.Z)({},c,{mobile:t,label:b,to:y,isActive:a?()=>!1:void 0})):r.createElement(me,(0,l.Z)({},c,{mobile:t,label:b,to:y,items:g,isActive:a?()=>!1:void 0}))}};function ft(e){let{type:t,...n}=e;const a=function(e,t){return e&&"default"!==e?e:"items"in t?"dropdown":"default"}(t,n),o=dt[a];if(!o)throw new Error(`No NavbarItem component found for type "${t}".`);return r.createElement(o,n)}function pt(){const e=(0,P.e)(),t=(0,w.L)().navbar.items;return r.createElement("ul",{className:"menu__list"},t.map(((t,n)=>r.createElement(ft,(0,l.Z)({mobile:!0},t,{onClick:()=>e.toggle(),key:n})))))}function ht(e){return r.createElement("button",(0,l.Z)({},e,{type:"button",className:"clean-btn navbar-sidebar__back"}),r.createElement(u.Z,{id:"theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel",description:"The label of the back button to return to main menu, inside the mobile navbar sidebar secondary menu (notably used to display the docs sidebar)"},"\u2190 Back to main menu"))}function mt(){const e=0===(0,w.L)().navbar.items.length,t=B();return r.createElement(r.Fragment,null,!e&&r.createElement(ht,{onClick:()=>t.hide()}),t.content)}function gt(){const e=(0,P.e)();var t;return void 0===(t=e.shown)&&(t=!0),(0,r.useEffect)((()=>(document.body.style.overflow=t?"hidden":"visible",()=>{document.body.style.overflow="visible"})),[t]),e.shouldRender?r.createElement(j,{header:r.createElement(J,null),primaryMenu:r.createElement(pt,null),secondaryMenu:r.createElement(mt,null)}):null}const vt="navbarHideable_m1mJ",bt="navbarHidden_jGov";function yt(e){return r.createElement("div",(0,l.Z)({role:"presentation"},e,{className:(0,a.Z)("navbar-sidebar__backdrop",e.className)}))}function wt(e){let{children:t}=e;const{navbar:{hideOnScroll:n,style:o}}=(0,w.L)(),i=(0,P.e)(),{navbarRef:l,isNavbarVisible:s}=function(e){const[t,n]=(0,r.useState)(e),a=(0,r.useRef)(!1),o=(0,r.useRef)(0),i=(0,r.useCallback)((e=>{null!==e&&(o.current=e.getBoundingClientRect().height)}),[]);return(0,O.RF)(((t,r)=>{let{scrollY:i}=t;if(!e)return;if(i<o.current)return void n(!0);if(a.current)return void(a.current=!1);const l=r?.scrollY,s=document.documentElement.scrollHeight-o.current,u=window.innerHeight;l&&i>=l?n(!1):i+u<s&&n(!0)})),(0,c.S)((t=>{if(!e)return;const r=t.location.hash;if(r?document.getElementById(r.substring(1)):void 0)return a.current=!0,void n(!1);n(!0)})),{navbarRef:i,isNavbarVisible:t}}(n);return r.createElement("nav",{ref:l,"aria-label":(0,u.I)({id:"theme.NavBar.navAriaLabel",message:"Main",description:"The ARIA label for the main navigation"}),className:(0,a.Z)("navbar","navbar--fixed-top",n&&[vt,!s&&bt],{"navbar--dark":"dark"===o,"navbar--primary":"primary"===o,"navbar-sidebar--show":i.shown})},t,r.createElement(yt,{onClick:i.toggle}),r.createElement(gt,null))}var kt=n(8780);const Et="errorBoundaryError_a6uf";function St(e){return r.createElement("button",(0,l.Z)({type:"button"},e),r.createElement(u.Z,{id:"theme.ErrorPageContent.tryAgain",description:"The label of the button to try again rendering when the React error boundary captures an error"},"Try again"))}function xt(e){let{error:t}=e;const n=(0,kt.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{className:Et},n)}class Tt extends r.Component{componentDidCatch(e,t){throw this.props.onError(e,t)}render(){return this.props.children}}function Ct(e){let{width:t=30,height:n=30,className:a,...o}=e;return r.createElement("svg",(0,l.Z)({className:a,width:t,height:n,viewBox:"0 0 30 30","aria-hidden":"true"},o),r.createElement("path",{stroke:"currentColor",strokeLinecap:"round",strokeMiterlimit:"10",strokeWidth:"2",d:"M4 7h22M4 15h22M4 23h22"}))}function _t(){const{toggle:e,shown:t}=(0,P.e)();return r.createElement("button",{onClick:e,"aria-label":(0,u.I)({id:"theme.docs.sidebar.toggleSidebarButtonAriaLabel",message:"Toggle navigation bar",description:"The ARIA label for hamburger menu button of mobile navigation"}),"aria-expanded":t,className:"navbar__toggle clean-btn",type:"button"},r.createElement(Ct,null))}const Lt="colorModeToggle_DEke";function Rt(e){let{items:t}=e;return r.createElement(r.Fragment,null,t.map(((e,t)=>r.createElement(Tt,{key:t,onError:t=>new Error(`A theme navbar item failed to render.\nPlease double-check the following navbar item (themeConfig.navbar.items) of your Docusaurus config:\n${JSON.stringify(e,null,2)}`,{cause:t})},r.createElement(ft,e)))))}function At(e){let{left:t,right:n}=e;return r.createElement("div",{className:"navbar__inner"},r.createElement("div",{className:"navbar__items"},t),r.createElement("div",{className:"navbar__items navbar__items--right"},n))}function Nt(){const e=(0,P.e)(),t=(0,w.L)().navbar.items,[n,a]=function(e){function t(e){return"left"===(e.position??"right")}return[e.filter(t),e.filter((e=>!t(e)))]}(t),o=t.find((e=>"search"===e.type));return r.createElement(At,{left:r.createElement(r.Fragment,null,!e.disabled&&r.createElement(_t,null),r.createElement(Y,null),r.createElement(Rt,{items:n})),right:r.createElement(r.Fragment,null,r.createElement(Rt,{items:a}),r.createElement(W,{className:Lt}),!o&&r.createElement(st,null,r.createElement(it,null)))})}function Pt(){return r.createElement(wt,null,r.createElement(Nt,null))}function Ot(e){let{item:t}=e;const{to:n,href:a,label:o,prependBaseUrlToHref:i,...s}=t,u=(0,te.Z)(n),c=(0,te.Z)(a,{forcePrependBaseUrl:!0});return r.createElement(ee.Z,(0,l.Z)({className:"footer__link-item"},a?{href:i?c:a}:{to:u},s),o,a&&!(0,ne.Z)(a)&&r.createElement(ae.Z,null))}function It(e){let{item:t}=e;return t.html?r.createElement("li",{className:"footer__item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement("li",{key:t.href??t.to,className:"footer__item"},r.createElement(Ot,{item:t}))}function Dt(e){let{column:t}=e;return r.createElement("div",{className:"col footer__col"},r.createElement("div",{className:"footer__title"},t.title),r.createElement("ul",{className:"footer__items clean-list"},t.items.map(((e,t)=>r.createElement(It,{key:t,item:e})))))}function zt(e){let{columns:t}=e;return r.createElement("div",{className:"row footer__links"},t.map(((e,t)=>r.createElement(Dt,{key:t,column:e}))))}function Mt(){return r.createElement("span",{className:"footer__link-separator"},"\xb7")}function Ft(e){let{item:t}=e;return t.html?r.createElement("span",{className:"footer__link-item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement(Ot,{item:t})}function Bt(e){let{links:t}=e;return r.createElement("div",{className:"footer__links text--center"},r.createElement("div",{className:"footer__links"},t.map(((e,n)=>r.createElement(r.Fragment,{key:n},r.createElement(Ft,{item:e}),t.length!==n+1&&r.createElement(Mt,null))))))}function jt(e){let{links:t}=e;return function(e){return"title"in e[0]}(t)?r.createElement(zt,{columns:t}):r.createElement(Bt,{links:t})}var $t=n(941);const Ut="footerLogoLink_BH7S";function qt(e){let{logo:t}=e;const{withBaseUrl:n}=(0,te.C)(),o={light:n(t.src),dark:n(t.srcDark??t.src)};return r.createElement($t.Z,{className:(0,a.Z)("footer__logo",t.className),alt:t.alt,sources:o,width:t.width,height:t.height,style:t.style})}function Ht(e){let{logo:t}=e;return t.href?r.createElement(ee.Z,{href:t.href,className:Ut,target:t.target},r.createElement(qt,{logo:t})):r.createElement(qt,{logo:t})}function Gt(e){let{copyright:t}=e;return r.createElement("div",{className:"footer__copyright",dangerouslySetInnerHTML:{__html:t}})}function Zt(e){let{style:t,links:n,logo:o,copyright:i}=e;return r.createElement("footer",{className:(0,a.Z)("footer",{"footer--dark":"dark"===t})},r.createElement("div",{className:"container container-fluid"},n,(o||i)&&r.createElement("div",{className:"footer__bottom text--center"},o&&r.createElement("div",{className:"margin-bottom--sm"},o),i)))}function Qt(){const{footer:e}=(0,w.L)();if(!e)return null;const{copyright:t,links:n,logo:a,style:o}=e;return r.createElement(Zt,{style:o,links:n&&n.length>0&&r.createElement(jt,{links:n}),logo:a&&r.createElement(Ht,{logo:a}),copyright:t&&r.createElement(Gt,{copyright:t})})}const Vt=r.memo(Qt),Wt=(0,I.Qc)([$.S,k.pl,O.OC,ke.L5,i.VC,function(e){let{children:t}=e;return r.createElement(D.n2,null,r.createElement(P.M,null,r.createElement(M,null,t)))}]);function Kt(e){let{children:t}=e;return r.createElement(Wt,null,t)}function Yt(e){let{error:t,tryAgain:n}=e;return r.createElement("main",{className:"container margin-vert--xl"},r.createElement("div",{className:"row"},r.createElement("div",{className:"col col--6 col--offset-3"},r.createElement("h1",{className:"hero__title"},r.createElement(u.Z,{id:"theme.ErrorPageContent.title",description:"The title of the fallback page when the page crashed"},"This page crashed.")),r.createElement("div",{className:"margin-vert--lg"},r.createElement(St,{onClick:n,className:"button button--primary shadow--lw"})),r.createElement("hr",null),r.createElement("div",{className:"margin-vert--md"},r.createElement(xt,{error:t})))))}const Xt="mainWrapper_z2l0";function Jt(e){const{children:t,noFooter:n,wrapperClassName:l,title:s,description:u}=e;return(0,v.t)(),r.createElement(Kt,null,r.createElement(i.d,{title:s,description:u}),r.createElement(y,null),r.createElement(N,null),r.createElement(Pt,null),r.createElement("div",{id:d,className:(0,a.Z)(g.k.wrapper.main,Xt,l)},r.createElement(o.Z,{fallback:e=>r.createElement(Yt,e)},t)),!n&&r.createElement(Vt,null))}},1327:(e,t,n)=>{"use strict";n.d(t,{Z:()=>d});var r=n(3117),a=n(7294),o=n(9960),i=n(4996),l=n(2263),s=n(6668),u=n(941);function c(e){let{logo:t,alt:n,imageClassName:r}=e;const o={light:(0,i.Z)(t.src),dark:(0,i.Z)(t.srcDark||t.src)},l=a.createElement(u.Z,{className:t.className,sources:o,height:t.height,width:t.width,alt:n,style:t.style});return r?a.createElement("div",{className:r},l):l}function d(e){const{siteConfig:{title:t}}=(0,l.Z)(),{navbar:{title:n,logo:u}}=(0,s.L)(),{imageClassName:d,titleClassName:f,...p}=e,h=(0,i.Z)(u?.href||"/"),m=n?"":t,g=u?.alt??m;return a.createElement(o.Z,(0,r.Z)({to:h},p,u?.target&&{target:u.target}),u&&a.createElement(c,{logo:u,alt:g,imageClassName:d}),null!=n&&a.createElement("b",{className:f},n))}},197:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(5742);function o(e){let{locale:t,version:n,tag:o}=e;const i=t;return r.createElement(a.Z,null,t&&r.createElement("meta",{name:"docusaurus_locale",content:t}),n&&r.createElement("meta",{name:"docusaurus_version",content:n}),o&&r.createElement("meta",{name:"docusaurus_tag",content:o}),i&&r.createElement("meta",{name:"docsearch:language",content:i}),n&&r.createElement("meta",{name:"docsearch:version",content:n}),o&&r.createElement("meta",{name:"docsearch:docusaurus_tag",content:o}))}},941:(e,t,n)=>{"use strict";n.d(t,{Z:()=>u});var r=n(3117),a=n(7294),o=n(6010),i=n(2389),l=n(2949);const s={themedImage:"themedImage_ToTc","themedImage--light":"themedImage--light_HNdA","themedImage--dark":"themedImage--dark_i4oU"};function u(e){const t=(0,i.Z)(),{colorMode:n}=(0,l.I)(),{sources:u,className:c,alt:d,...f}=e,p=t?"dark"===n?["dark"]:["light"]:["light","dark"];return a.createElement(a.Fragment,null,p.map((e=>a.createElement("img",(0,r.Z)({key:e,src:u[e],alt:d,className:(0,o.Z)(s.themedImage,s[`themedImage--${e}`],c)},f)))))}},6043:(e,t,n)=>{"use strict";n.d(t,{u:()=>l,z:()=>m});var r=n(3117),a=n(7294),o=n(412),i=n(1442);function l(e){let{initialState:t}=e;const[n,r]=(0,a.useState)(t??!1),o=(0,a.useCallback)((()=>{r((e=>!e))}),[]);return{collapsed:n,setCollapsed:r,toggleCollapsed:o}}const s={display:"none",overflow:"hidden",height:"0px"},u={display:"block",overflow:"visible",height:"auto"};function c(e,t){const n=t?s:u;e.style.display=n.display,e.style.overflow=n.overflow,e.style.height=n.height}function d(e){let{collapsibleRef:t,collapsed:n,animation:r}=e;const o=(0,a.useRef)(!1);(0,a.useEffect)((()=>{const e=t.current;function a(){const t=e.scrollHeight,n=r?.duration??function(e){if((0,i.n)())return 1;const t=e/36;return Math.round(10*(4+15*t**.25+t/5))}(t);return{transition:`height ${n}ms ${r?.easing??"ease-in-out"}`,height:`${t}px`}}function l(){const t=a();e.style.transition=t.transition,e.style.height=t.height}if(!o.current)return c(e,n),void(o.current=!0);return e.style.willChange="height",function(){const t=requestAnimationFrame((()=>{n?(l(),requestAnimationFrame((()=>{e.style.height=s.height,e.style.overflow=s.overflow}))):(e.style.display="block",requestAnimationFrame((()=>{l()})))}));return()=>cancelAnimationFrame(t)}()}),[t,n,r])}function f(e){if(!o.Z.canUseDOM)return e?s:u}function p(e){let{as:t="div",collapsed:n,children:r,animation:o,onCollapseTransitionEnd:i,className:l,disableSSRStyle:s}=e;const u=(0,a.useRef)(null);return d({collapsibleRef:u,collapsed:n,animation:o}),a.createElement(t,{ref:u,style:s?void 0:f(n),onTransitionEnd:e=>{"height"===e.propertyName&&(c(u.current,n),i?.(n))},className:l},r)}function h(e){let{collapsed:t,...n}=e;const[o,i]=(0,a.useState)(!t),[l,s]=(0,a.useState)(t);return(0,a.useLayoutEffect)((()=>{t||i(!0)}),[t]),(0,a.useLayoutEffect)((()=>{o&&s(t)}),[o,t]),o?a.createElement(p,(0,r.Z)({},n,{collapsed:l})):null}function m(e){let{lazy:t,...n}=e;const r=t?h:p;return a.createElement(r,n)}},9689:(e,t,n)=>{"use strict";n.d(t,{nT:()=>h,pl:()=>p});var r=n(7294),a=n(2389),o=n(12),i=n(902),l=n(6668);const s=(0,o.WA)("docusaurus.announcement.dismiss"),u=(0,o.WA)("docusaurus.announcement.id"),c=()=>"true"===s.get(),d=e=>s.set(String(e)),f=r.createContext(null);function p(e){let{children:t}=e;const n=function(){const{announcementBar:e}=(0,l.L)(),t=(0,a.Z)(),[n,o]=(0,r.useState)((()=>!!t&&c()));(0,r.useEffect)((()=>{o(c())}),[]);const i=(0,r.useCallback)((()=>{d(!0),o(!0)}),[]);return(0,r.useEffect)((()=>{if(!e)return;const{id:t}=e;let n=u.get();"annoucement-bar"===n&&(n="announcement-bar");const r=t!==n;u.set(t),r&&d(!1),!r&&c()||o(!1)}),[e]),(0,r.useMemo)((()=>({isActive:!!e&&!n,close:i})),[e,n,i])}();return r.createElement(f.Provider,{value:n},t)}function h(){const e=(0,r.useContext)(f);if(!e)throw new i.i6("AnnouncementBarProvider");return e}},2949:(e,t,n)=>{"use strict";n.d(t,{I:()=>g,S:()=>m});var r=n(7294),a=n(412),o=n(902),i=n(12),l=n(6668);const s=r.createContext(void 0),u="theme",c=(0,i.WA)(u),d="light",f="dark",p=e=>e===f?f:d;function h(){const{colorMode:{defaultMode:e,disableSwitch:t,respectPrefersColorScheme:n}}=(0,l.L)(),[o,i]=(0,r.useState)((e=>a.Z.canUseDOM?p(document.documentElement.getAttribute("data-theme")):p(e))(e));(0,r.useEffect)((()=>{t&&c.del()}),[t]);const s=(0,r.useCallback)((function(t,r){void 0===r&&(r={});const{persist:a=!0}=r;t?(i(t),a&&(e=>{c.set(p(e))})(t)):(i(n?window.matchMedia("(prefers-color-scheme: dark)").matches?f:d:e),c.del())}),[n,e]);(0,r.useEffect)((()=>{document.documentElement.setAttribute("data-theme",p(o))}),[o]),(0,r.useEffect)((()=>{if(t)return;const e=e=>{if(e.key!==u)return;const t=c.get();null!==t&&s(p(t))};return window.addEventListener("storage",e),()=>window.removeEventListener("storage",e)}),[t,s]);const h=(0,r.useRef)(!1);return(0,r.useEffect)((()=>{if(t&&!n)return;const e=window.matchMedia("(prefers-color-scheme: dark)"),r=()=>{window.matchMedia("print").matches||h.current?h.current=window.matchMedia("print").matches:s(null)};return e.addListener(r),()=>e.removeListener(r)}),[s,t,n]),(0,r.useMemo)((()=>({colorMode:o,setColorMode:s,get isDarkTheme(){return o===f},setLightTheme(){s(d)},setDarkTheme(){s(f)}})),[o,s])}function m(e){let{children:t}=e;const n=h();return r.createElement(s.Provider,{value:n},t)}function g(){const e=(0,r.useContext)(s);if(null==e)throw new o.i6("ColorModeProvider","Please see https://docusaurus.io/docs/api/themes/configuration#use-color-mode.");return e}},373:(e,t,n)=>{"use strict";n.d(t,{J:()=>y,L5:()=>v});var r=n(7294),a=n(143),o=n(9935),i=n(6668),l=n(3438),s=n(902),u=n(12);const c=e=>`docs-preferred-version-${e}`,d=(e,t,n)=>{(0,u.WA)(c(e),{persistence:t}).set(n)},f=(e,t)=>(0,u.WA)(c(e),{persistence:t}).get(),p=(e,t)=>{(0,u.WA)(c(e),{persistence:t}).del()};const h=r.createContext(null);function m(){const e=(0,a._r)(),t=(0,i.L)().docs.versionPersistence,n=(0,r.useMemo)((()=>Object.keys(e)),[e]),[o,l]=(0,r.useState)((()=>(e=>Object.fromEntries(e.map((e=>[e,{preferredVersionName:null}]))))(n)));(0,r.useEffect)((()=>{l(function(e){let{pluginIds:t,versionPersistence:n,allDocsData:r}=e;function a(e){const t=f(e,n);return r[e].versions.some((e=>e.name===t))?{preferredVersionName:t}:(p(e,n),{preferredVersionName:null})}return Object.fromEntries(t.map((e=>[e,a(e)])))}({allDocsData:e,versionPersistence:t,pluginIds:n}))}),[e,t,n]);return[o,(0,r.useMemo)((()=>({savePreferredVersion:function(e,n){d(e,t,n),l((t=>({...t,[e]:{preferredVersionName:n}})))}})),[t])]}function g(e){let{children:t}=e;const n=m();return r.createElement(h.Provider,{value:n},t)}function v(e){let{children:t}=e;return l.cE?r.createElement(g,null,t):r.createElement(r.Fragment,null,t)}function b(){const e=(0,r.useContext)(h);if(!e)throw new s.i6("DocsPreferredVersionContextProvider");return e}function y(e){void 0===e&&(e=o.m);const t=(0,a.zh)(e),[n,i]=b(),{preferredVersionName:l}=n[e];return{preferredVersion:t.versions.find((e=>e.name===l))??null,savePreferredVersionName:(0,r.useCallback)((t=>{i.savePreferredVersion(e,t)}),[i,e])}}},1116:(e,t,n)=>{"use strict";n.d(t,{V:()=>s,b:()=>l});var r=n(7294),a=n(902);const o=Symbol("EmptyContext"),i=r.createContext(o);function l(e){let{children:t,name:n,items:a}=e;const o=(0,r.useMemo)((()=>n&&a?{name:n,items:a}:null),[n,a]);return r.createElement(i.Provider,{value:o},t)}function s(){const e=(0,r.useContext)(i);if(e===o)throw new a.i6("DocsSidebarProvider");return e}},3163:(e,t,n)=>{"use strict";n.d(t,{M:()=>d,e:()=>f});var r=n(7294),a=n(3102),o=n(7524),i=n(1980),l=n(6668),s=n(902);const u=r.createContext(void 0);function c(){const e=function(){const e=(0,a.HY)(),{items:t}=(0,l.L)().navbar;return 0===t.length&&!e.component}(),t=(0,o.i)(),n=!e&&"mobile"===t,[s,u]=(0,r.useState)(!1);(0,i.Rb)((()=>{if(s)return u(!1),!1}));const c=(0,r.useCallback)((()=>{u((e=>!e))}),[]);return(0,r.useEffect)((()=>{"desktop"===t&&u(!1)}),[t]),(0,r.useMemo)((()=>({disabled:e,shouldRender:n,toggle:c,shown:s})),[e,n,c,s])}function d(e){let{children:t}=e;const n=c();return r.createElement(u.Provider,{value:n},t)}function f(){const e=r.useContext(u);if(void 0===e)throw new s.i6("NavbarMobileSidebarProvider");return e}},3102:(e,t,n)=>{"use strict";n.d(t,{HY:()=>l,Zo:()=>s,n2:()=>i});var r=n(7294),a=n(902);const o=r.createContext(null);function i(e){let{children:t}=e;const n=(0,r.useState)({component:null,props:null});return r.createElement(o.Provider,{value:n},t)}function l(){const e=(0,r.useContext)(o);if(!e)throw new a.i6("NavbarSecondaryMenuContentProvider");return e[0]}function s(e){let{component:t,props:n}=e;const i=(0,r.useContext)(o);if(!i)throw new a.i6("NavbarSecondaryMenuContentProvider");const[,l]=i,s=(0,a.Ql)(n);return(0,r.useEffect)((()=>{l({component:t,props:s})}),[l,t,s]),(0,r.useEffect)((()=>()=>l({component:null,props:null})),[l]),null}},9727:(e,t,n)=>{"use strict";n.d(t,{h:()=>a,t:()=>o});var r=n(7294);const a="navigation-with-keyboard";function o(){(0,r.useEffect)((()=>{function e(e){"keydown"===e.type&&"Tab"===e.key&&document.body.classList.add(a),"mousedown"===e.type&&document.body.classList.remove(a)}return document.addEventListener("keydown",e),document.addEventListener("mousedown",e),()=>{document.body.classList.remove(a),document.removeEventListener("keydown",e),document.removeEventListener("mousedown",e)}}),[])}},7524:(e,t,n)=>{"use strict";n.d(t,{i:()=>u});var r=n(7294),a=n(412);const o="desktop",i="mobile",l="ssr";function s(){return a.Z.canUseDOM?window.innerWidth>996?o:i:l}function u(){const[e,t]=(0,r.useState)((()=>s()));return(0,r.useEffect)((()=>{function e(){t(s())}return window.addEventListener("resize",e),()=>{window.removeEventListener("resize",e),clearTimeout(undefined)}}),[]),e}},5281:(e,t,n)=>{"use strict";n.d(t,{k:()=>r});const r={page:{blogListPage:"blog-list-page",blogPostPage:"blog-post-page",blogTagsListPage:"blog-tags-list-page",blogTagPostListPage:"blog-tags-post-list-page",docsDocPage:"docs-doc-page",docsTagsListPage:"docs-tags-list-page",docsTagDocListPage:"docs-tags-doc-list-page",mdxPage:"mdx-page"},wrapper:{main:"main-wrapper",blogPages:"blog-wrapper",docsPages:"docs-wrapper",mdxPages:"mdx-wrapper"},common:{editThisPage:"theme-edit-this-page",lastUpdated:"theme-last-updated",backToTopButton:"theme-back-to-top-button",codeBlock:"theme-code-block",admonition:"theme-admonition",admonitionType:e=>`theme-admonition-${e}`},layout:{},docs:{docVersionBanner:"theme-doc-version-banner",docVersionBadge:"theme-doc-version-badge",docBreadcrumbs:"theme-doc-breadcrumbs",docMarkdown:"theme-doc-markdown",docTocMobile:"theme-doc-toc-mobile",docTocDesktop:"theme-doc-toc-desktop",docFooter:"theme-doc-footer",docFooterTagsRow:"theme-doc-footer-tags-row",docFooterEditMetaRow:"theme-doc-footer-edit-meta-row",docSidebarContainer:"theme-doc-sidebar-container",docSidebarMenu:"theme-doc-sidebar-menu",docSidebarItemCategory:"theme-doc-sidebar-item-category",docSidebarItemLink:"theme-doc-sidebar-item-link",docSidebarItemCategoryLevel:e=>`theme-doc-sidebar-item-category-level-${e}`,docSidebarItemLinkLevel:e=>`theme-doc-sidebar-item-link-level-${e}`},blog:{}}},1442:(e,t,n)=>{"use strict";function r(){return window.matchMedia("(prefers-reduced-motion: reduce)").matches}n.d(t,{n:()=>r})},3438:(e,t,n)=>{"use strict";n.d(t,{Wl:()=>f,_F:()=>h,cE:()=>d,hI:()=>w,lO:()=>v,oz:()=>b,s1:()=>g,vY:()=>y});var r=n(7294),a=n(6775),o=n(8790),i=n(143),l=n(373),s=n(1116),u=n(7392),c=n(8596);const d=!!i._r;function f(e){if(e.href)return e.href;for(const t of e.items){if("link"===t.type)return t.href;if("category"===t.type){const e=f(t);if(e)return e}}}const p=(e,t)=>void 0!==e&&(0,c.Mg)(e,t);function h(e,t){return"link"===e.type?p(e.href,t):"category"===e.type&&(p(e.href,t)||((e,t)=>e.some((e=>h(e,t))))(e.items,t))}function m(e){let{sidebarItems:t,pathname:n,onlyCategories:r=!1}=e;const a=[];return function e(t){for(const o of t)if("category"===o.type&&((0,c.Mg)(o.href,n)||e(o.items))||"link"===o.type&&(0,c.Mg)(o.href,n)){return r&&"category"!==o.type||a.unshift(o),!0}return!1}(t),a}function g(){const e=(0,s.V)(),{pathname:t}=(0,a.TH)(),n=(0,i.gA)()?.pluginData.breadcrumbs;return!1!==n&&e?m({sidebarItems:e.items,pathname:t}):null}function v(e){const{activeVersion:t}=(0,i.Iw)(e),{preferredVersion:n}=(0,l.J)(e),a=(0,i.yW)(e);return(0,r.useMemo)((()=>(0,u.j)([t,n,a].filter(Boolean))),[t,n,a])}function b(e,t){const n=v(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.sidebars?Object.entries(e.sidebars):[])),r=t.find((t=>t[0]===e));if(!r)throw new Error(`Can't find any sidebar with id "${e}" in version${n.length>1?"s":""} ${n.map((e=>e.name)).join(", ")}".\nAvailable sidebar ids are:\n- ${t.map((e=>e[0])).join("\n- ")}`);return r[1]}),[e,n])}function y(e,t){const n=v(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.docs)),r=t.find((t=>t.id===e));if(!r){if(n.flatMap((e=>e.draftIds)).includes(e))return null;throw new Error(`Couldn't find any doc with id "${e}" in version${n.length>1?"s":""} "${n.map((e=>e.name)).join(", ")}".\nAvailable doc ids are:\n- ${(0,u.j)(t.map((e=>e.id))).join("\n- ")}`)}return r}),[e,n])}function w(e){let{route:t,versionMetadata:n}=e;const r=(0,a.TH)(),i=t.routes,l=i.find((e=>(0,a.LX)(r.pathname,e)));if(!l)return null;const s=l.sidebar,u=s?n.docsSidebars[s]:void 0;return{docElement:(0,o.H)(i),sidebarName:s,sidebarItems:u}}},1980:(e,t,n)=>{"use strict";n.d(t,{Rb:()=>l,_X:()=>s});var r=n(7294),a=n(6775),o=n(1688),i=n(902);function l(e){!function(e){const t=(0,a.k6)(),n=(0,i.zX)(e);(0,r.useEffect)((()=>t.block(((e,t)=>n(e,t)))),[t,n])}(((t,n)=>{if("POP"===n)return e(t,n)}))}function s(e){return function(e){const t=(0,a.k6)();return(0,o.useSyncExternalStore)(t.listen,(()=>e(t)),(()=>e(t)))}((t=>null===e?null:new URLSearchParams(t.location.search).get(e)))}},7392:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=(e,t)=>e===t),e.filter(((n,r)=>e.findIndex((e=>t(e,n)))!==r))}function a(e){return Array.from(new Set(e))}n.d(t,{j:()=>a,l:()=>r})},1944:(e,t,n)=>{"use strict";n.d(t,{FG:()=>f,d:()=>c,VC:()=>p});var r=n(7294),a=n(6010),o=n(5742),i=n(226);function l(){const e=r.useContext(i._);if(!e)throw new Error("Unexpected: no Docusaurus route context found");return e}var s=n(4996),u=n(2263);function c(e){let{title:t,description:n,keywords:a,image:i,children:l}=e;const c=function(e){const{siteConfig:t}=(0,u.Z)(),{title:n,titleDelimiter:r}=t;return e?.trim().length?`${e.trim()} ${r} ${n}`:n}(t),{withBaseUrl:d}=(0,s.C)(),f=i?d(i,{absolute:!0}):void 0;return r.createElement(o.Z,null,t&&r.createElement("title",null,c),t&&r.createElement("meta",{property:"og:title",content:c}),n&&r.createElement("meta",{name:"description",content:n}),n&&r.createElement("meta",{property:"og:description",content:n}),a&&r.createElement("meta",{name:"keywords",content:Array.isArray(a)?a.join(","):a}),f&&r.createElement("meta",{property:"og:image",content:f}),f&&r.createElement("meta",{name:"twitter:image",content:f}),l)}const d=r.createContext(void 0);function f(e){let{className:t,children:n}=e;const i=r.useContext(d),l=(0,a.Z)(i,t);return r.createElement(d.Provider,{value:l},r.createElement(o.Z,null,r.createElement("html",{className:l})),n)}function p(e){let{children:t}=e;const n=l(),o=`plugin-${n.plugin.name.replace(/docusaurus-(?:plugin|theme)-(?:content-)?/gi,"")}`;const i=`plugin-id-${n.plugin.id}`;return r.createElement(f,{className:(0,a.Z)(o,i)},t)}},902:(e,t,n)=>{"use strict";n.d(t,{D9:()=>i,Qc:()=>u,Ql:()=>s,i6:()=>l,zX:()=>o});var r=n(7294);const a=n(412).Z.canUseDOM?r.useLayoutEffect:r.useEffect;function o(e){const t=(0,r.useRef)(e);return a((()=>{t.current=e}),[e]),(0,r.useCallback)((function(){return t.current(...arguments)}),[])}function i(e){const t=(0,r.useRef)();return a((()=>{t.current=e})),t.current}class l extends Error{constructor(e,t){super(),this.name="ReactContextError",this.message=`Hook ${this.stack?.split("\n")[1]?.match(/at (?:\w+\.)?(?<name>\w+)/)?.groups.name??""} is called outside the <${e}>. ${t??""}`}}function s(e){const t=Object.entries(e);return t.sort(((e,t)=>e[0].localeCompare(t[0]))),(0,r.useMemo)((()=>e),t.flat())}function u(e){return t=>{let{children:n}=t;return r.createElement(r.Fragment,null,e.reduceRight(((e,t)=>r.createElement(t,null,e)),n))}}},8596:(e,t,n)=>{"use strict";n.d(t,{Mg:()=>i,Ns:()=>l});var r=n(7294),a=n(723),o=n(2263);function i(e,t){const n=e=>(!e||e.endsWith("/")?e:`${e}/`)?.toLowerCase();return n(e)===n(t)}function l(){const{baseUrl:e}=(0,o.Z)().siteConfig;return(0,r.useMemo)((()=>function(e){let{baseUrl:t,routes:n}=e;function r(e){return e.path===t&&!0===e.exact}function a(e){return e.path===t&&!e.exact}return function e(t){if(0===t.length)return;return t.find(r)||e(t.filter(a).flatMap((e=>e.routes??[])))}(n)}({routes:a.Z,baseUrl:e})),[e])}},2466:(e,t,n)=>{"use strict";n.d(t,{Ct:()=>p,OC:()=>s,RF:()=>d,o5:()=>f});var r=n(7294),a=n(412),o=n(2389),i=n(902);const l=r.createContext(void 0);function s(e){let{children:t}=e;const n=function(){const e=(0,r.useRef)(!0);return(0,r.useMemo)((()=>({scrollEventsEnabledRef:e,enableScrollEvents:()=>{e.current=!0},disableScrollEvents:()=>{e.current=!1}})),[])}();return r.createElement(l.Provider,{value:n},t)}function u(){const e=(0,r.useContext)(l);if(null==e)throw new i.i6("ScrollControllerProvider");return e}const c=()=>a.Z.canUseDOM?{scrollX:window.pageXOffset,scrollY:window.pageYOffset}:null;function d(e,t){void 0===t&&(t=[]);const{scrollEventsEnabledRef:n}=u(),a=(0,r.useRef)(c()),o=(0,i.zX)(e);(0,r.useEffect)((()=>{const e=()=>{if(!n.current)return;const e=c();o(e,a.current),a.current=e},t={passive:!0};return e(),window.addEventListener("scroll",e,t),()=>window.removeEventListener("scroll",e,t)}),[o,n,...t])}function f(){const e=u(),t=function(){const e=(0,r.useRef)({elem:null,top:0}),t=(0,r.useCallback)((t=>{e.current={elem:t,top:t.getBoundingClientRect().top}}),[]),n=(0,r.useCallback)((()=>{const{current:{elem:t,top:n}}=e;if(!t)return{restored:!1};const r=t.getBoundingClientRect().top-n;return r&&window.scrollBy({left:0,top:r}),e.current={elem:null,top:0},{restored:0!==r}}),[]);return(0,r.useMemo)((()=>({save:t,restore:n})),[n,t])}(),n=(0,r.useRef)(void 0),a=(0,r.useCallback)((r=>{t.save(r),e.disableScrollEvents(),n.current=()=>{const{restored:r}=t.restore();if(n.current=void 0,r){const t=()=>{e.enableScrollEvents(),window.removeEventListener("scroll",t)};window.addEventListener("scroll",t)}else e.enableScrollEvents()}}),[e,t]);return(0,r.useLayoutEffect)((()=>{queueMicrotask((()=>n.current?.()))})),{blockElementScrollPositionUntilNextRender:a}}function p(){const e=(0,r.useRef)(null),t=(0,o.Z)()&&"smooth"===getComputedStyle(document.documentElement).scrollBehavior;return{startScroll:n=>{e.current=t?function(e){return window.scrollTo({top:e,behavior:"smooth"}),()=>{}}(n):function(e){let t=null;const n=document.documentElement.scrollTop>e;return function r(){const a=document.documentElement.scrollTop;(n&&a>e||!n&&a<e)&&(t=requestAnimationFrame(r),window.scrollTo(0,Math.floor(.85*(a-e))+e))}(),()=>t&&cancelAnimationFrame(t)}(n)},cancelScroll:()=>e.current?.()}}},3320:(e,t,n)=>{"use strict";n.d(t,{HX:()=>r,os:()=>a});n(2263);const r="default";function a(e,t){return`docs-${e}-${t}`}},12:(e,t,n)=>{"use strict";n.d(t,{Nk:()=>d,WA:()=>c});var r=n(7294),a=n(1688);const o="localStorage";function i(e){let{key:t,oldValue:n,newValue:r,storage:a}=e;if(n===r)return;const o=document.createEvent("StorageEvent");o.initStorageEvent("storage",!1,!1,t,n,r,window.location.href,a),window.dispatchEvent(o)}function l(e){if(void 0===e&&(e=o),"undefined"==typeof window)throw new Error("Browser storage is not available on Node.js/Docusaurus SSR process.");if("none"===e)return null;try{return window[e]}catch(n){return t=n,s||(console.warn("Docusaurus browser storage is not available.\nPossible reasons: running Docusaurus in an iframe, in an incognito browser session, or using too strict browser privacy settings.",t),s=!0),null}var t}let s=!1;const u={get:()=>null,set:()=>{},del:()=>{},listen:()=>()=>{}};function c(e,t){if("undefined"==typeof window)return function(e){function t(){throw new Error(`Illegal storage API usage for storage key "${e}".\nDocusaurus storage APIs are not supposed to be called on the server-rendering process.\nPlease only call storage APIs in effects and event handlers.`)}return{get:t,set:t,del:t,listen:t}}(e);const n=l(t?.persistence);return null===n?u:{get:()=>{try{return n.getItem(e)}catch(t){return console.error(`Docusaurus storage error, can't get key=${e}`,t),null}},set:t=>{try{const r=n.getItem(e);n.setItem(e,t),i({key:e,oldValue:r,newValue:t,storage:n})}catch(r){console.error(`Docusaurus storage error, can't set ${e}=${t}`,r)}},del:()=>{try{const t=n.getItem(e);n.removeItem(e),i({key:e,oldValue:t,newValue:null,storage:n})}catch(t){console.error(`Docusaurus storage error, can't delete key=${e}`,t)}},listen:t=>{try{const r=r=>{r.storageArea===n&&r.key===e&&t(r)};return window.addEventListener("storage",r),()=>window.removeEventListener("storage",r)}catch(r){return console.error(`Docusaurus storage error, can't listen for changes of key=${e}`,r),()=>{}}}}}function d(e,t){const n=(0,r.useRef)((()=>null===e?u:c(e,t))).current(),o=(0,r.useCallback)((e=>"undefined"==typeof window?()=>{}:n.listen(e)),[n]);return[(0,a.useSyncExternalStore)(o,(()=>"undefined"==typeof window?null:n.get()),(()=>null)),n]}},4711:(e,t,n)=>{"use strict";n.d(t,{l:()=>o});var r=n(2263),a=n(6775);function o(){const{siteConfig:{baseUrl:e,url:t},i18n:{defaultLocale:n,currentLocale:o}}=(0,r.Z)(),{pathname:i}=(0,a.TH)(),l=o===n?e:e.replace(`/${o}/`,"/"),s=i.replace(e,"");return{createUrl:function(e){let{locale:r,fullyQualified:a}=e;return`${a?t:""}${function(e){return e===n?`${l}`:`${l}${e}/`}(r)}${s}`}}}},5936:(e,t,n)=>{"use strict";n.d(t,{S:()=>i});var r=n(7294),a=n(6775),o=n(902);function i(e){const t=(0,a.TH)(),n=(0,o.D9)(t),i=(0,o.zX)(e);(0,r.useEffect)((()=>{n&&t!==n&&i({location:t,previousLocation:n})}),[i,t,n])}},6668:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){return(0,r.Z)().siteConfig.themeConfig}},8802:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){const{trailingSlash:n,baseUrl:r}=t;if(e.startsWith("#"))return e;if(void 0===n)return e;const[a]=e.split(/[#?]/),o="/"===a||a===r?a:(i=a,n?function(e){return e.endsWith("/")?e:`${e}/`}(i):function(e){return e.endsWith("/")?e.slice(0,-1):e}(i));var i;return e.replace(a,o)}},4143:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=void 0,t.getErrorCausalChain=function e(t){return t.cause?[t,...e(t.cause)]:[t]}},8780:function(e,t,n){"use strict";var r=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=t.applyTrailingSlash=t.blogPostContainerID=void 0,t.blogPostContainerID="__blog-post-container";var a=n(8802);Object.defineProperty(t,"applyTrailingSlash",{enumerable:!0,get:function(){return r(a).default}});var o=n(4143);Object.defineProperty(t,"getErrorCausalChain",{enumerable:!0,get:function(){return o.getErrorCausalChain}})},311:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(7294),a=n(6010);const o="loadingRing_RJI3";function i(e){let{className:t}=e;return r.createElement("div",{className:(0,a.Z)(o,t)},r.createElement("div",null),r.createElement("div",null),r.createElement("div",null),r.createElement("div",null))}},22:(e,t,n)=>{"use strict";n.d(t,{w:()=>l});var r=n(1336),a=n.n(r),o=n(1029);const i=new Map;function l(e,t){const n=`${e}${t}`;let r=i.get(n);return r||(r=async function(e,t){{const n=`${e}${o.J.replace("{dir}",t?`-${t.replace(/\//g,"-")}`:"")}`;if(new URL(n,location.origin).origin!==location.origin)throw new Error("Unexpected version url");const r=await(await fetch(n)).json(),i=r.map(((e,t)=>{let{documents:n,index:r}=e;return{type:t,documents:n,index:a().Index.load(r)}})),l=r.reduce(((e,t)=>{for(const n of t.index.invertedIndex)/\p{Unified_Ideograph}/u.test(n[0][0])&&e.add(n[0]);return e}),new Set);return{wrappedIndexes:i,zhDictionary:Array.from(l)}}return{wrappedIndexes:[],zhDictionary:[]}}(e,t),i.set(n,r)),r}},8202:(e,t,n)=>{"use strict";n.d(t,{v:()=>s});var r=n(1336),a=n.n(r);var o=n(1029);function i(e){return l(e).concat(l(e.filter((e=>{const t=e[e.length-1];return!t.trailing&&t.maybeTyping})),!0))}function l(e,t){return e.map((e=>({tokens:e.map((e=>e.value)),term:e.map((e=>({value:e.value,presence:a().Query.presence.REQUIRED,wildcard:(t?e.trailing||e.maybeTyping:e.trailing)?a().Query.wildcard.TRAILING:a().Query.wildcard.NONE})))})))}function s(e,t,n){return function(r,l){const s=function(e,t){if(1===t.length&&["ja","jp","th"].includes(t[0]))return a()[t[0]].tokenizer(e).map((e=>e.toString()));let n=/[^-\s]+/g;return t.includes("zh")&&(n=/\w+|\p{Unified_Ideograph}+/gu),e.toLowerCase().match(n)||[]}(r,o.dK);if(0===s.length)return void l([]);const u=function(e,t){const n=function(e,t){const n=[];return function e(r,a){if(0===r.length)return void n.push(a);const o=r[0];if(/\p{Unified_Ideograph}/u.test(o)){const n=function(e,t){const n=[];return function e(r,a){let o=0,i=!1;for(const l of t)if(r.substr(0,l.length)===l){const t={missed:a.missed,term:a.term.concat({value:l})};r.length>l.length?e(r.substr(l.length),t):n.push(t),i=!0}else for(let t=l.length-1;t>o;t-=1){const s=l.substr(0,t);if(r.substr(0,t)===s){o=t;const l={missed:a.missed,term:a.term.concat({value:s,trailing:!0})};r.length>t?e(r.substr(t),l):n.push(l),i=!0;break}}i||(r.length>0?e(r.substr(1),{missed:a.missed+1,term:a.term}):a.term.length>0&&n.push(a))}(e,{missed:0,term:[]}),n.sort(((e,t)=>{const n=e.missed>0?1:0,r=t.missed>0?1:0;return n!==r?n-r:e.term.length-t.term.length})).map((e=>e.term))}(o,t);for(const t of n){const n=a.concat(...t);e(r.slice(1),n)}}else{const t=a.concat({value:o});e(r.slice(1),t)}}(e,[]),n}(e,t);if(0===n.length)return[{tokens:e,term:e.map((e=>({value:e,presence:a().Query.presence.REQUIRED,wildcard:a().Query.wildcard.LEADING|a().Query.wildcard.TRAILING})))}];for(const a of n)a[a.length-1].maybeTyping=!0;const r=[];for(const i of o.dK)if("en"===i)o._k||r.unshift(a().stopWordFilter);else{const e=a()[i];e.stopWordFilter&&r.unshift(e.stopWordFilter)}let l;if(r.length>0){const e=e=>r.reduce(((e,t)=>e.filter((e=>t(e.value)))),e);l=[];const t=[];for(const r of n){const n=e(r);l.push(n),n.length<r.length&&n.length>0&&t.push(n)}n.push(...t)}else l=n.slice();const s=[];for(const a of l)if(a.length>2)for(let e=a.length-1;e>=0;e-=1)s.push(a.slice(0,e).concat(a.slice(e+1)));return i(n).concat(i(s))}(s,t),c=[];e:for(const{term:t,tokens:a}of u)for(const{documents:r,index:o,type:i}of e)if(c.push(...o.query((e=>{for(const n of t)e.term(n.value,{wildcard:n.wildcard,presence:n.presence})})).slice(0,n).filter((e=>!c.some((t=>t.document.i.toString()===e.ref)))).slice(0,n-c.length).map((t=>{const n=r.find((e=>e.i.toString()===t.ref));return{document:n,type:i,page:0!==i&&e[0].documents.find((e=>e.i===n.p)),metadata:t.matchData.metadata,tokens:a,score:t.score}}))),c.length>=n)break e;!function(e){e.forEach(((e,t)=>{e.index=t})),e.sort(((t,n)=>{let r=t.type>0&&t.page?e.findIndex((e=>e.document===t.page)):t.index,a=n.type>0&&n.page?e.findIndex((e=>e.document===n.page)):n.index;return-1===r&&(r=t.index),-1===a&&(a=n.index),r===a?0===t.type?-1:0===n.type?1:t.index-n.index:r-a}))}(c),function(e){e.forEach(((t,n)=>{n>0&&t.page&&e.some((e=>e.document===t.page))&&(n<e.length-1&&e[n+1].page===t.page?t.isInterOfTree=!0:t.isLastOfTree=!0)}))}(c),l(c)}}},3926:(e,t,n)=>{"use strict";function r(e){return e.join(" \u203a ")}n.d(t,{e:()=>r})},1690:(e,t,n)=>{"use strict";function r(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#039;")}n.d(t,{X:()=>r})},1073:(e,t,n)=>{"use strict";function r(e,t){const n=[];for(const r of Object.values(e))r[t]&&n.push(...r[t].position);return n.sort(((e,t)=>e[0]-t[0]||t[1]-e[1]))}n.d(t,{m:()=>r})},2539:(e,t,n)=>{"use strict";n.d(t,{C:()=>a});var r=n(1690);function a(e,t,n){const o=[];for(const i of t){const n=e.toLowerCase().indexOf(i);if(n>=0){n>0&&o.push(a(e.substr(0,n),t)),o.push(`<mark>${(0,r.X)(e.substr(n,i.length))}</mark>`);const l=n+i.length;l<e.length&&o.push(a(e.substr(l),t));break}}return 0===o.length?n?`<mark>${(0,r.X)(e)}</mark>`:(0,r.X)(e):o.join("")}},726:(e,t,n)=>{"use strict";n.d(t,{o:()=>s});var r=n(1690),a=n(2539);const o=/\w+|\p{Unified_Ideograph}/u;function i(e){const t=[];let n=0,r=e;for(;r.length>0;){const a=r.match(o);if(!a){t.push(r);break}a.index>0&&t.push(r.substring(0,a.index)),t.push(a[0]),n+=a.index+a[0].length,r=e.substring(n)}return t}var l=n(1029);function s(e,t,n,o){void 0===o&&(o=l.Hk);const{chunkIndex:s,chunks:u}=function(e,t,n){const o=[];let l=0,s=0,u=-1;for(;l<t.length;){const[c,d]=t[l];if(l+=1,!(c<s)){if(c>s){const t=i(e.substring(s,c)).map((e=>({html:(0,r.X)(e),textLength:e.length})));for(const e of t)o.push(e)}-1===u&&(u=o.length),s=c+d,o.push({html:(0,a.C)(e.substring(c,s),n,!0),textLength:d})}}if(s<e.length){const t=i(e.substring(s)).map((e=>({html:(0,r.X)(e),textLength:e.length})));for(const e of t)o.push(e)}return{chunkIndex:u,chunks:o}}(e,t,n),c=u.slice(0,s),d=u[s],f=[d.html],p=u.slice(s+1);let h=d.textLength,m=0,g=0,v=!1,b=!1;for(;h<o;)if((m<=g||0===p.length)&&c.length>0){const e=c.pop();h+e.textLength<=o?(f.unshift(e.html),m+=e.textLength,h+=e.textLength):(v=!0,c.length=0)}else{if(!(p.length>0))break;{const e=p.shift();h+e.textLength<=o?(f.push(e.html),g+=e.textLength,h+=e.textLength):(b=!0,p.length=0)}}return(v||c.length>0)&&f.unshift("\u2026"),(b||p.length>0)&&f.push("\u2026"),f.join("")}},1029:(e,t,n)=>{"use strict";n.d(t,{vc:()=>a(),gQ:()=>h,H6:()=>c,hG:()=>v,l9:()=>m,dK:()=>o,_k:()=>i,pu:()=>p,AY:()=>d,t_:()=>f,Kc:()=>g,J:()=>l,Hk:()=>u,qo:()=>s,pQ:()=>b});n(1336);var r=n(813),a=n.n(r);const o=["en"],i=!1,l="search-index{dir}.json?_=829cea69",s=8,u=50,c=!1,d=!0,f=!0,p="right",h=void 0,m=!0,g=null,v=!1,b=!1},6010:(e,t,n)=>{"use strict";function r(e){var t,n,a="";if("string"==typeof e||"number"==typeof e)a+=e;else if("object"==typeof e)if(Array.isArray(e))for(t=0;t<e.length;t++)e[t]&&(n=r(e[t]))&&(a&&(a+=" "),a+=n);else for(t in e)e[t]&&(a&&(a+=" "),a+=t);return a}n.d(t,{Z:()=>a});const a=function(){for(var e,t,n=0,a="";n<arguments.length;)(e=arguments[n++])&&(t=r(e))&&(a&&(a+=" "),a+=t);return a}},9318:(e,t,n)=>{"use strict";n.d(t,{lX:()=>w,q_:()=>C,ob:()=>p,PP:()=>L,Ep:()=>f});var r=n(3117);function a(e){return"/"===e.charAt(0)}function o(e,t){for(var n=t,r=n+1,a=e.length;r<a;n+=1,r+=1)e[n]=e[r];e.pop()}const i=function(e,t){void 0===t&&(t="");var n,r=e&&e.split("/")||[],i=t&&t.split("/")||[],l=e&&a(e),s=t&&a(t),u=l||s;if(e&&a(e)?i=r:r.length&&(i.pop(),i=i.concat(r)),!i.length)return"/";if(i.length){var c=i[i.length-1];n="."===c||".."===c||""===c}else n=!1;for(var d=0,f=i.length;f>=0;f--){var p=i[f];"."===p?o(i,f):".."===p?(o(i,f),d++):d&&(o(i,f),d--)}if(!u)for(;d--;d)i.unshift("..");!u||""===i[0]||i[0]&&a(i[0])||i.unshift("");var h=i.join("/");return n&&"/"!==h.substr(-1)&&(h+="/"),h};var l=n(2177);function s(e){return"/"===e.charAt(0)?e:"/"+e}function u(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return 0===e.toLowerCase().indexOf(t.toLowerCase())&&-1!=="/?#".indexOf(e.charAt(t.length))}(e,t)?e.substr(t.length):e}function d(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,a=t||"/";return n&&"?"!==n&&(a+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(a+="#"===r.charAt(0)?r:"#"+r),a}function p(e,t,n,a){var o;"string"==typeof e?(o=function(e){var t=e||"/",n="",r="",a=t.indexOf("#");-1!==a&&(r=t.substr(a),t=t.substr(0,a));var o=t.indexOf("?");return-1!==o&&(n=t.substr(o),t=t.substr(0,o)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),o.state=t):(void 0===(o=(0,r.Z)({},e)).pathname&&(o.pathname=""),o.search?"?"!==o.search.charAt(0)&&(o.search="?"+o.search):o.search="",o.hash?"#"!==o.hash.charAt(0)&&(o.hash="#"+o.hash):o.hash="",void 0!==t&&void 0===o.state&&(o.state=t));try{o.pathname=decodeURI(o.pathname)}catch(l){throw l instanceof URIError?new URIError('Pathname "'+o.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):l}return n&&(o.key=n),a?o.pathname?"/"!==o.pathname.charAt(0)&&(o.pathname=i(o.pathname,a.pathname)):o.pathname=a.pathname:o.pathname||(o.pathname="/"),o}function h(){var e=null;var t=[];return{setPrompt:function(t){return e=t,function(){e===t&&(e=null)}},confirmTransitionTo:function(t,n,r,a){if(null!=e){var o="function"==typeof e?e(t,n):e;"string"==typeof o?"function"==typeof r?r(o,a):a(!0):a(!1!==o)}else a(!0)},appendListener:function(e){var n=!0;function r(){n&&e.apply(void 0,arguments)}return t.push(r),function(){n=!1,t=t.filter((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];t.forEach((function(e){return e.apply(void 0,n)}))}}}var m=!("undefined"==typeof window||!window.document||!window.document.createElement);function g(e,t){t(window.confirm(e))}var v="popstate",b="hashchange";function y(){try{return window.history.state||{}}catch(e){return{}}}function w(e){void 0===e&&(e={}),m||(0,l.Z)(!1);var t,n=window.history,a=(-1===(t=window.navigator.userAgent).indexOf("Android 2.")&&-1===t.indexOf("Android 4.0")||-1===t.indexOf("Mobile Safari")||-1!==t.indexOf("Chrome")||-1!==t.indexOf("Windows Phone"))&&window.history&&"pushState"in window.history,o=!(-1===window.navigator.userAgent.indexOf("Trident")),i=e,u=i.forceRefresh,w=void 0!==u&&u,k=i.getUserConfirmation,E=void 0===k?g:k,S=i.keyLength,x=void 0===S?6:S,T=e.basename?d(s(e.basename)):"";function C(e){var t=e||{},n=t.key,r=t.state,a=window.location,o=a.pathname+a.search+a.hash;return T&&(o=c(o,T)),p(o,r,n)}function _(){return Math.random().toString(36).substr(2,x)}var L=h();function R(e){(0,r.Z)($,e),$.length=n.length,L.notifyListeners($.location,$.action)}function A(e){(function(e){return void 0===e.state&&-1===navigator.userAgent.indexOf("CriOS")})(e)||O(C(e.state))}function N(){O(C(y()))}var P=!1;function O(e){if(P)P=!1,R();else{L.confirmTransitionTo(e,"POP",E,(function(t){t?R({action:"POP",location:e}):function(e){var t=$.location,n=D.indexOf(t.key);-1===n&&(n=0);var r=D.indexOf(e.key);-1===r&&(r=0);var a=n-r;a&&(P=!0,M(a))}(e)}))}}var I=C(y()),D=[I.key];function z(e){return T+f(e)}function M(e){n.go(e)}var F=0;function B(e){1===(F+=e)&&1===e?(window.addEventListener(v,A),o&&window.addEventListener(b,N)):0===F&&(window.removeEventListener(v,A),o&&window.removeEventListener(b,N))}var j=!1;var $={length:n.length,action:"POP",location:I,createHref:z,push:function(e,t){var r="PUSH",o=p(e,t,_(),$.location);L.confirmTransitionTo(o,r,E,(function(e){if(e){var t=z(o),i=o.key,l=o.state;if(a)if(n.pushState({key:i,state:l},null,t),w)window.location.href=t;else{var s=D.indexOf($.location.key),u=D.slice(0,s+1);u.push(o.key),D=u,R({action:r,location:o})}else window.location.href=t}}))},replace:function(e,t){var r="REPLACE",o=p(e,t,_(),$.location);L.confirmTransitionTo(o,r,E,(function(e){if(e){var t=z(o),i=o.key,l=o.state;if(a)if(n.replaceState({key:i,state:l},null,t),w)window.location.replace(t);else{var s=D.indexOf($.location.key);-1!==s&&(D[s]=o.key),R({action:r,location:o})}else window.location.replace(t)}}))},go:M,goBack:function(){M(-1)},goForward:function(){M(1)},block:function(e){void 0===e&&(e=!1);var t=L.setPrompt(e);return j||(B(1),j=!0),function(){return j&&(j=!1,B(-1)),t()}},listen:function(e){var t=L.appendListener(e);return B(1),function(){B(-1),t()}}};return $}var k="hashchange",E={hashbang:{encodePath:function(e){return"!"===e.charAt(0)?e:"!/"+u(e)},decodePath:function(e){return"!"===e.charAt(0)?e.substr(1):e}},noslash:{encodePath:u,decodePath:s},slash:{encodePath:s,decodePath:s}};function S(e){var t=e.indexOf("#");return-1===t?e:e.slice(0,t)}function x(){var e=window.location.href,t=e.indexOf("#");return-1===t?"":e.substring(t+1)}function T(e){window.location.replace(S(window.location.href)+"#"+e)}function C(e){void 0===e&&(e={}),m||(0,l.Z)(!1);var t=window.history,n=(window.navigator.userAgent.indexOf("Firefox"),e),a=n.getUserConfirmation,o=void 0===a?g:a,i=n.hashType,u=void 0===i?"slash":i,v=e.basename?d(s(e.basename)):"",b=E[u],y=b.encodePath,w=b.decodePath;function C(){var e=w(x());return v&&(e=c(e,v)),p(e)}var _=h();function L(e){(0,r.Z)(j,e),j.length=t.length,_.notifyListeners(j.location,j.action)}var R=!1,A=null;function N(){var e,t,n=x(),r=y(n);if(n!==r)T(r);else{var a=C(),i=j.location;if(!R&&(t=a,(e=i).pathname===t.pathname&&e.search===t.search&&e.hash===t.hash))return;if(A===f(a))return;A=null,function(e){if(R)R=!1,L();else{var t="POP";_.confirmTransitionTo(e,t,o,(function(n){n?L({action:t,location:e}):function(e){var t=j.location,n=D.lastIndexOf(f(t));-1===n&&(n=0);var r=D.lastIndexOf(f(e));-1===r&&(r=0);var a=n-r;a&&(R=!0,z(a))}(e)}))}}(a)}}var P=x(),O=y(P);P!==O&&T(O);var I=C(),D=[f(I)];function z(e){t.go(e)}var M=0;function F(e){1===(M+=e)&&1===e?window.addEventListener(k,N):0===M&&window.removeEventListener(k,N)}var B=!1;var j={length:t.length,action:"POP",location:I,createHref:function(e){var t=document.querySelector("base"),n="";return t&&t.getAttribute("href")&&(n=S(window.location.href)),n+"#"+y(v+f(e))},push:function(e,t){var n="PUSH",r=p(e,void 0,void 0,j.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(v+t);if(x()!==a){A=t,function(e){window.location.hash=e}(a);var o=D.lastIndexOf(f(j.location)),i=D.slice(0,o+1);i.push(t),D=i,L({action:n,location:r})}else L()}}))},replace:function(e,t){var n="REPLACE",r=p(e,void 0,void 0,j.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(v+t);x()!==a&&(A=t,T(a));var o=D.indexOf(f(j.location));-1!==o&&(D[o]=t),L({action:n,location:r})}}))},go:z,goBack:function(){z(-1)},goForward:function(){z(1)},block:function(e){void 0===e&&(e=!1);var t=_.setPrompt(e);return B||(F(1),B=!0),function(){return B&&(B=!1,F(-1)),t()}},listen:function(e){var t=_.appendListener(e);return F(1),function(){F(-1),t()}}};return j}function _(e,t,n){return Math.min(Math.max(e,t),n)}function L(e){void 0===e&&(e={});var t=e,n=t.getUserConfirmation,a=t.initialEntries,o=void 0===a?["/"]:a,i=t.initialIndex,l=void 0===i?0:i,s=t.keyLength,u=void 0===s?6:s,c=h();function d(e){(0,r.Z)(w,e),w.length=w.entries.length,c.notifyListeners(w.location,w.action)}function m(){return Math.random().toString(36).substr(2,u)}var g=_(l,0,o.length-1),v=o.map((function(e){return p(e,void 0,"string"==typeof e?m():e.key||m())})),b=f;function y(e){var t=_(w.index+e,0,w.entries.length-1),r=w.entries[t];c.confirmTransitionTo(r,"POP",n,(function(e){e?d({action:"POP",location:r,index:t}):d()}))}var w={length:v.length,action:"POP",location:v[g],index:g,entries:v,createHref:b,push:function(e,t){var r="PUSH",a=p(e,t,m(),w.location);c.confirmTransitionTo(a,r,n,(function(e){if(e){var t=w.index+1,n=w.entries.slice(0);n.length>t?n.splice(t,n.length-t,a):n.push(a),d({action:r,location:a,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",a=p(e,t,m(),w.location);c.confirmTransitionTo(a,r,n,(function(e){e&&(w.entries[w.index]=a,d({action:r,location:a}))}))},go:y,goBack:function(){y(-1)},goForward:function(){y(1)},canGo:function(e){var t=w.index+e;return t>=0&&t<w.entries.length},block:function(e){return void 0===e&&(e=!1),c.setPrompt(e)},listen:function(e){return c.appendListener(e)}};return w}},8679:(e,t,n)=>{"use strict";var r=n(9864),a={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?i:l[e.$$typeof]||a}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var u=Object.defineProperty,c=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,h=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(h){var a=p(n);a&&a!==h&&e(t,a,r)}var i=c(n);d&&(i=i.concat(d(n)));for(var l=s(t),m=s(n),g=0;g<i.length;++g){var v=i[g];if(!(o[v]||r&&r[v]||m&&m[v]||l&&l[v])){var b=f(n,v);try{u(t,v,b)}catch(y){}}}}return t}},1143:e=>{"use strict";e.exports=function(e,t,n,r,a,o,i,l){if(!e){var s;if(void 0===t)s=new Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,a,o,i,l],c=0;(s=new Error(t.replace(/%s/g,(function(){return u[c++]})))).name="Invariant Violation"}throw s.framesToPop=1,s}}},5826:e=>{e.exports=Array.isArray||function(e){return"[object Array]"==Object.prototype.toString.call(e)}},1336:(e,t,n)=>{var r,a;!function(){var o,i,l,s,u,c,d,f,p,h,m,g,v,b,y,w,k,E,S,x,T,C,_,L,R,A,N=function(e){var t=new N.Builder;return t.pipeline.add(N.trimmer,N.stopWordFilter,N.stemmer),t.searchPipeline.add(N.stemmer),e.call(t,t),t.build()};N.version="2.3.9",N.utils={},N.utils.warn=(o=this,function(e){o.console&&console.warn&&console.warn(e)}),N.utils.asString=function(e){return null==e?"":e.toString()},N.utils.clone=function(e){if(null==e)return e;for(var t=Object.create(null),n=Object.keys(e),r=0;r<n.length;r++){var a=n[r],o=e[a];if(Array.isArray(o))t[a]=o.slice();else{if("string"!=typeof o&&"number"!=typeof o&&"boolean"!=typeof o)throw new TypeError("clone is not deep and does not support nested objects");t[a]=o}}return t},N.FieldRef=function(e,t,n){this.docRef=e,this.fieldName=t,this._stringValue=n},N.FieldRef.joiner="/",N.FieldRef.fromString=function(e){var t=e.indexOf(N.FieldRef.joiner);if(-1===t)throw"malformed field ref string";var n=e.slice(0,t),r=e.slice(t+1);return new N.FieldRef(r,n,e)},N.FieldRef.prototype.toString=function(){return null==this._stringValue&&(this._stringValue=this.fieldName+N.FieldRef.joiner+this.docRef),this._stringValue},N.Set=function(e){if(this.elements=Object.create(null),e){this.length=e.length;for(var t=0;t<this.length;t++)this.elements[e[t]]=!0}else this.length=0},N.Set.complete={intersect:function(e){return e},union:function(){return this},contains:function(){return!0}},N.Set.empty={intersect:function(){return this},union:function(e){return e},contains:function(){return!1}},N.Set.prototype.contains=function(e){return!!this.elements[e]},N.Set.prototype.intersect=function(e){var t,n,r,a=[];if(e===N.Set.complete)return this;if(e===N.Set.empty)return e;this.length<e.length?(t=this,n=e):(t=e,n=this),r=Object.keys(t.elements);for(var o=0;o<r.length;o++){var i=r[o];i in n.elements&&a.push(i)}return new N.Set(a)},N.Set.prototype.union=function(e){return e===N.Set.complete?N.Set.complete:e===N.Set.empty?this:new N.Set(Object.keys(this.elements).concat(Object.keys(e.elements)))},N.idf=function(e,t){var n=0;for(var r in e)"_index"!=r&&(n+=Object.keys(e[r]).length);var a=(t-n+.5)/(n+.5);return Math.log(1+Math.abs(a))},N.Token=function(e,t){this.str=e||"",this.metadata=t||{}},N.Token.prototype.toString=function(){return this.str},N.Token.prototype.update=function(e){return this.str=e(this.str,this.metadata),this},N.Token.prototype.clone=function(e){return e=e||function(e){return e},new N.Token(e(this.str,this.metadata),this.metadata)},N.tokenizer=function(e,t){if(null==e||null==e)return[];if(Array.isArray(e))return e.map((function(e){return new N.Token(N.utils.asString(e).toLowerCase(),N.utils.clone(t))}));for(var n=e.toString().toLowerCase(),r=n.length,a=[],o=0,i=0;o<=r;o++){var l=o-i;if(n.charAt(o).match(N.tokenizer.separator)||o==r){if(l>0){var s=N.utils.clone(t)||{};s.position=[i,l],s.index=a.length,a.push(new N.Token(n.slice(i,o),s))}i=o+1}}return a},N.tokenizer.separator=/[\s\-]+/,N.Pipeline=function(){this._stack=[]},N.Pipeline.registeredFunctions=Object.create(null),N.Pipeline.registerFunction=function(e,t){t in this.registeredFunctions&&N.utils.warn("Overwriting existing registered function: "+t),e.label=t,N.Pipeline.registeredFunctions[e.label]=e},N.Pipeline.warnIfFunctionNotRegistered=function(e){e.label&&e.label in this.registeredFunctions||N.utils.warn("Function is not registered with pipeline. This may cause problems when serialising the index.\n",e)},N.Pipeline.load=function(e){var t=new N.Pipeline;return e.forEach((function(e){var n=N.Pipeline.registeredFunctions[e];if(!n)throw new Error("Cannot load unregistered function: "+e);t.add(n)})),t},N.Pipeline.prototype.add=function(){var e=Array.prototype.slice.call(arguments);e.forEach((function(e){N.Pipeline.warnIfFunctionNotRegistered(e),this._stack.push(e)}),this)},N.Pipeline.prototype.after=function(e,t){N.Pipeline.warnIfFunctionNotRegistered(t);var n=this._stack.indexOf(e);if(-1==n)throw new Error("Cannot find existingFn");n+=1,this._stack.splice(n,0,t)},N.Pipeline.prototype.before=function(e,t){N.Pipeline.warnIfFunctionNotRegistered(t);var n=this._stack.indexOf(e);if(-1==n)throw new Error("Cannot find existingFn");this._stack.splice(n,0,t)},N.Pipeline.prototype.remove=function(e){var t=this._stack.indexOf(e);-1!=t&&this._stack.splice(t,1)},N.Pipeline.prototype.run=function(e){for(var t=this._stack.length,n=0;n<t;n++){for(var r=this._stack[n],a=[],o=0;o<e.length;o++){var i=r(e[o],o,e);if(null!=i&&""!==i)if(Array.isArray(i))for(var l=0;l<i.length;l++)a.push(i[l]);else a.push(i)}e=a}return e},N.Pipeline.prototype.runString=function(e,t){var n=new N.Token(e,t);return this.run([n]).map((function(e){return e.toString()}))},N.Pipeline.prototype.reset=function(){this._stack=[]},N.Pipeline.prototype.toJSON=function(){return this._stack.map((function(e){return N.Pipeline.warnIfFunctionNotRegistered(e),e.label}))},N.Vector=function(e){this._magnitude=0,this.elements=e||[]},N.Vector.prototype.positionForIndex=function(e){if(0==this.elements.length)return 0;for(var t=0,n=this.elements.length/2,r=n-t,a=Math.floor(r/2),o=this.elements[2*a];r>1&&(o<e&&(t=a),o>e&&(n=a),o!=e);)r=n-t,a=t+Math.floor(r/2),o=this.elements[2*a];return o==e||o>e?2*a:o<e?2*(a+1):void 0},N.Vector.prototype.insert=function(e,t){this.upsert(e,t,(function(){throw"duplicate index"}))},N.Vector.prototype.upsert=function(e,t,n){this._magnitude=0;var r=this.positionForIndex(e);this.elements[r]==e?this.elements[r+1]=n(this.elements[r+1],t):this.elements.splice(r,0,e,t)},N.Vector.prototype.magnitude=function(){if(this._magnitude)return this._magnitude;for(var e=0,t=this.elements.length,n=1;n<t;n+=2){var r=this.elements[n];e+=r*r}return this._magnitude=Math.sqrt(e)},N.Vector.prototype.dot=function(e){for(var t=0,n=this.elements,r=e.elements,a=n.length,o=r.length,i=0,l=0,s=0,u=0;s<a&&u<o;)(i=n[s])<(l=r[u])?s+=2:i>l?u+=2:i==l&&(t+=n[s+1]*r[u+1],s+=2,u+=2);return t},N.Vector.prototype.similarity=function(e){return this.dot(e)/this.magnitude()||0},N.Vector.prototype.toArray=function(){for(var e=new Array(this.elements.length/2),t=1,n=0;t<this.elements.length;t+=2,n++)e[n]=this.elements[t];return e},N.Vector.prototype.toJSON=function(){return this.elements},N.stemmer=(i={ational:"ate",tional:"tion",enci:"ence",anci:"ance",izer:"ize",bli:"ble",alli:"al",entli:"ent",eli:"e",ousli:"ous",ization:"ize",ation:"ate",ator:"ate",alism:"al",iveness:"ive",fulness:"ful",ousness:"ous",aliti:"al",iviti:"ive",biliti:"ble",logi:"log"},l={icate:"ic",ative:"",alize:"al",iciti:"ic",ical:"ic",ful:"",ness:""},s="[aeiouy]",u="[^aeiou][^aeiouy]*",c=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*"),d=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*[aeiouy][aeiou]*[^aeiou][^aeiouy]*"),f=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy][aeiou]*[^aeiou][^aeiouy]*([aeiouy][aeiou]*)?$"),p=new RegExp("^([^aeiou][^aeiouy]*)?[aeiouy]"),h=/^(.+?)(ss|i)es$/,m=/^(.+?)([^s])s$/,g=/^(.+?)eed$/,v=/^(.+?)(ed|ing)$/,b=/.$/,y=/(at|bl|iz)$/,w=new RegExp("([^aeiouylsz])\\1$"),k=new RegExp("^"+u+s+"[^aeiouwxy]$"),E=/^(.+?[^aeiou])y$/,S=/^(.+?)(ational|tional|enci|anci|izer|bli|alli|entli|eli|ousli|ization|ation|ator|alism|iveness|fulness|ousness|aliti|iviti|biliti|logi)$/,x=/^(.+?)(icate|ative|alize|iciti|ical|ful|ness)$/,T=/^(.+?)(al|ance|ence|er|ic|able|ible|ant|ement|ment|ent|ou|ism|ate|iti|ous|ive|ize)$/,C=/^(.+?)(s|t)(ion)$/,_=/^(.+?)e$/,L=/ll$/,R=new RegExp("^"+u+s+"[^aeiouwxy]$"),A=function(e){var t,n,r,a,o,s,u;if(e.length<3)return e;if("y"==(r=e.substr(0,1))&&(e=r.toUpperCase()+e.substr(1)),o=m,(a=h).test(e)?e=e.replace(a,"$1$2"):o.test(e)&&(e=e.replace(o,"$1$2")),o=v,(a=g).test(e)){var A=a.exec(e);(a=c).test(A[1])&&(a=b,e=e.replace(a,""))}else o.test(e)&&(t=(A=o.exec(e))[1],(o=p).test(t)&&(s=w,u=k,(o=y).test(e=t)?e+="e":s.test(e)?(a=b,e=e.replace(a,"")):u.test(e)&&(e+="e")));return(a=E).test(e)&&(e=(t=(A=a.exec(e))[1])+"i"),(a=S).test(e)&&(t=(A=a.exec(e))[1],n=A[2],(a=c).test(t)&&(e=t+i[n])),(a=x).test(e)&&(t=(A=a.exec(e))[1],n=A[2],(a=c).test(t)&&(e=t+l[n])),o=C,(a=T).test(e)?(t=(A=a.exec(e))[1],(a=d).test(t)&&(e=t)):o.test(e)&&(t=(A=o.exec(e))[1]+A[2],(o=d).test(t)&&(e=t)),(a=_).test(e)&&(t=(A=a.exec(e))[1],o=f,s=R,((a=d).test(t)||o.test(t)&&!s.test(t))&&(e=t)),o=d,(a=L).test(e)&&o.test(e)&&(a=b,e=e.replace(a,"")),"y"==r&&(e=r.toLowerCase()+e.substr(1)),e},function(e){return e.update(A)}),N.Pipeline.registerFunction(N.stemmer,"stemmer"),N.generateStopWordFilter=function(e){var t=e.reduce((function(e,t){return e[t]=t,e}),{});return function(e){if(e&&t[e.toString()]!==e.toString())return e}},N.stopWordFilter=N.generateStopWordFilter(["a","able","about","across","after","all","almost","also","am","among","an","and","any","are","as","at","be","because","been","but","by","can","cannot","could","dear","did","do","does","either","else","ever","every","for","from","get","got","had","has","have","he","her","hers","him","his","how","however","i","if","in","into","is","it","its","just","least","let","like","likely","may","me","might","most","must","my","neither","no","nor","not","of","off","often","on","only","or","other","our","own","rather","said","say","says","she","should","since","so","some","than","that","the","their","them","then","there","these","they","this","tis","to","too","twas","us","wants","was","we","were","what","when","where","which","while","who","whom","why","will","with","would","yet","you","your"]),N.Pipeline.registerFunction(N.stopWordFilter,"stopWordFilter"),N.trimmer=function(e){return e.update((function(e){return e.replace(/^\W+/,"").replace(/\W+$/,"")}))},N.Pipeline.registerFunction(N.trimmer,"trimmer"),N.TokenSet=function(){this.final=!1,this.edges={},this.id=N.TokenSet._nextId,N.TokenSet._nextId+=1},N.TokenSet._nextId=1,N.TokenSet.fromArray=function(e){for(var t=new N.TokenSet.Builder,n=0,r=e.length;n<r;n++)t.insert(e[n]);return t.finish(),t.root},N.TokenSet.fromClause=function(e){return"editDistance"in e?N.TokenSet.fromFuzzyString(e.term,e.editDistance):N.TokenSet.fromString(e.term)},N.TokenSet.fromFuzzyString=function(e,t){for(var n=new N.TokenSet,r=[{node:n,editsRemaining:t,str:e}];r.length;){var a=r.pop();if(a.str.length>0){var o,i=a.str.charAt(0);i in a.node.edges?o=a.node.edges[i]:(o=new N.TokenSet,a.node.edges[i]=o),1==a.str.length&&(o.final=!0),r.push({node:o,editsRemaining:a.editsRemaining,str:a.str.slice(1)})}if(0!=a.editsRemaining){if("*"in a.node.edges)var l=a.node.edges["*"];else{l=new N.TokenSet;a.node.edges["*"]=l}if(0==a.str.length&&(l.final=!0),r.push({node:l,editsRemaining:a.editsRemaining-1,str:a.str}),a.str.length>1&&r.push({node:a.node,editsRemaining:a.editsRemaining-1,str:a.str.slice(1)}),1==a.str.length&&(a.node.final=!0),a.str.length>=1){if("*"in a.node.edges)var s=a.node.edges["*"];else{s=new N.TokenSet;a.node.edges["*"]=s}1==a.str.length&&(s.final=!0),r.push({node:s,editsRemaining:a.editsRemaining-1,str:a.str.slice(1)})}if(a.str.length>1){var u,c=a.str.charAt(0),d=a.str.charAt(1);d in a.node.edges?u=a.node.edges[d]:(u=new N.TokenSet,a.node.edges[d]=u),1==a.str.length&&(u.final=!0),r.push({node:u,editsRemaining:a.editsRemaining-1,str:c+a.str.slice(2)})}}}return n},N.TokenSet.fromString=function(e){for(var t=new N.TokenSet,n=t,r=0,a=e.length;r<a;r++){var o=e[r],i=r==a-1;if("*"==o)t.edges[o]=t,t.final=i;else{var l=new N.TokenSet;l.final=i,t.edges[o]=l,t=l}}return n},N.TokenSet.prototype.toArray=function(){for(var e=[],t=[{prefix:"",node:this}];t.length;){var n=t.pop(),r=Object.keys(n.node.edges),a=r.length;n.node.final&&(n.prefix.charAt(0),e.push(n.prefix));for(var o=0;o<a;o++){var i=r[o];t.push({prefix:n.prefix.concat(i),node:n.node.edges[i]})}}return e},N.TokenSet.prototype.toString=function(){if(this._str)return this._str;for(var e=this.final?"1":"0",t=Object.keys(this.edges).sort(),n=t.length,r=0;r<n;r++){var a=t[r];e=e+a+this.edges[a].id}return e},N.TokenSet.prototype.intersect=function(e){for(var t=new N.TokenSet,n=void 0,r=[{qNode:e,output:t,node:this}];r.length;){n=r.pop();for(var a=Object.keys(n.qNode.edges),o=a.length,i=Object.keys(n.node.edges),l=i.length,s=0;s<o;s++)for(var u=a[s],c=0;c<l;c++){var d=i[c];if(d==u||"*"==u){var f=n.node.edges[d],p=n.qNode.edges[u],h=f.final&&p.final,m=void 0;d in n.output.edges?(m=n.output.edges[d]).final=m.final||h:((m=new N.TokenSet).final=h,n.output.edges[d]=m),r.push({qNode:p,output:m,node:f})}}}return t},N.TokenSet.Builder=function(){this.previousWord="",this.root=new N.TokenSet,this.uncheckedNodes=[],this.minimizedNodes={}},N.TokenSet.Builder.prototype.insert=function(e){var t,n=0;if(e<this.previousWord)throw new Error("Out of order word insertion");for(var r=0;r<e.length&&r<this.previousWord.length&&e[r]==this.previousWord[r];r++)n++;this.minimize(n),t=0==this.uncheckedNodes.length?this.root:this.uncheckedNodes[this.uncheckedNodes.length-1].child;for(r=n;r<e.length;r++){var a=new N.TokenSet,o=e[r];t.edges[o]=a,this.uncheckedNodes.push({parent:t,char:o,child:a}),t=a}t.final=!0,this.previousWord=e},N.TokenSet.Builder.prototype.finish=function(){this.minimize(0)},N.TokenSet.Builder.prototype.minimize=function(e){for(var t=this.uncheckedNodes.length-1;t>=e;t--){var n=this.uncheckedNodes[t],r=n.child.toString();r in this.minimizedNodes?n.parent.edges[n.char]=this.minimizedNodes[r]:(n.child._str=r,this.minimizedNodes[r]=n.child),this.uncheckedNodes.pop()}},N.Index=function(e){this.invertedIndex=e.invertedIndex,this.fieldVectors=e.fieldVectors,this.tokenSet=e.tokenSet,this.fields=e.fields,this.pipeline=e.pipeline},N.Index.prototype.search=function(e){return this.query((function(t){new N.QueryParser(e,t).parse()}))},N.Index.prototype.query=function(e){for(var t=new N.Query(this.fields),n=Object.create(null),r=Object.create(null),a=Object.create(null),o=Object.create(null),i=Object.create(null),l=0;l<this.fields.length;l++)r[this.fields[l]]=new N.Vector;e.call(t,t);for(l=0;l<t.clauses.length;l++){var s=t.clauses[l],u=null,c=N.Set.empty;u=s.usePipeline?this.pipeline.runString(s.term,{fields:s.fields}):[s.term];for(var d=0;d<u.length;d++){var f=u[d];s.term=f;var p=N.TokenSet.fromClause(s),h=this.tokenSet.intersect(p).toArray();if(0===h.length&&s.presence===N.Query.presence.REQUIRED){for(var m=0;m<s.fields.length;m++){o[P=s.fields[m]]=N.Set.empty}break}for(var g=0;g<h.length;g++){var v=h[g],b=this.invertedIndex[v],y=b._index;for(m=0;m<s.fields.length;m++){var w=b[P=s.fields[m]],k=Object.keys(w),E=v+"/"+P,S=new N.Set(k);if(s.presence==N.Query.presence.REQUIRED&&(c=c.union(S),void 0===o[P]&&(o[P]=N.Set.complete)),s.presence!=N.Query.presence.PROHIBITED){if(r[P].upsert(y,s.boost,(function(e,t){return e+t})),!a[E]){for(var x=0;x<k.length;x++){var T,C=k[x],_=new N.FieldRef(C,P),L=w[C];void 0===(T=n[_])?n[_]=new N.MatchData(v,P,L):T.add(v,P,L)}a[E]=!0}}else void 0===i[P]&&(i[P]=N.Set.empty),i[P]=i[P].union(S)}}}if(s.presence===N.Query.presence.REQUIRED)for(m=0;m<s.fields.length;m++){o[P=s.fields[m]]=o[P].intersect(c)}}var R=N.Set.complete,A=N.Set.empty;for(l=0;l<this.fields.length;l++){var P;o[P=this.fields[l]]&&(R=R.intersect(o[P])),i[P]&&(A=A.union(i[P]))}var O=Object.keys(n),I=[],D=Object.create(null);if(t.isNegated()){O=Object.keys(this.fieldVectors);for(l=0;l<O.length;l++){_=O[l];var z=N.FieldRef.fromString(_);n[_]=new N.MatchData}}for(l=0;l<O.length;l++){var M=(z=N.FieldRef.fromString(O[l])).docRef;if(R.contains(M)&&!A.contains(M)){var F,B=this.fieldVectors[z],j=r[z.fieldName].similarity(B);if(void 0!==(F=D[M]))F.score+=j,F.matchData.combine(n[z]);else{var $={ref:M,score:j,matchData:n[z]};D[M]=$,I.push($)}}}return I.sort((function(e,t){return t.score-e.score}))},N.Index.prototype.toJSON=function(){var e=Object.keys(this.invertedIndex).sort().map((function(e){return[e,this.invertedIndex[e]]}),this),t=Object.keys(this.fieldVectors).map((function(e){return[e,this.fieldVectors[e].toJSON()]}),this);return{version:N.version,fields:this.fields,fieldVectors:t,invertedIndex:e,pipeline:this.pipeline.toJSON()}},N.Index.load=function(e){var t={},n={},r=e.fieldVectors,a=Object.create(null),o=e.invertedIndex,i=new N.TokenSet.Builder,l=N.Pipeline.load(e.pipeline);e.version!=N.version&&N.utils.warn("Version mismatch when loading serialised index. Current version of lunr '"+N.version+"' does not match serialized index '"+e.version+"'");for(var s=0;s<r.length;s++){var u=(d=r[s])[0],c=d[1];n[u]=new N.Vector(c)}for(s=0;s<o.length;s++){var d,f=(d=o[s])[0],p=d[1];i.insert(f),a[f]=p}return i.finish(),t.fields=e.fields,t.fieldVectors=n,t.invertedIndex=a,t.tokenSet=i.root,t.pipeline=l,new N.Index(t)},N.Builder=function(){this._ref="id",this._fields=Object.create(null),this._documents=Object.create(null),this.invertedIndex=Object.create(null),this.fieldTermFrequencies={},this.fieldLengths={},this.tokenizer=N.tokenizer,this.pipeline=new N.Pipeline,this.searchPipeline=new N.Pipeline,this.documentCount=0,this._b=.75,this._k1=1.2,this.termIndex=0,this.metadataWhitelist=[]},N.Builder.prototype.ref=function(e){this._ref=e},N.Builder.prototype.field=function(e,t){if(/\//.test(e))throw new RangeError("Field '"+e+"' contains illegal character '/'");this._fields[e]=t||{}},N.Builder.prototype.b=function(e){this._b=e<0?0:e>1?1:e},N.Builder.prototype.k1=function(e){this._k1=e},N.Builder.prototype.add=function(e,t){var n=e[this._ref],r=Object.keys(this._fields);this._documents[n]=t||{},this.documentCount+=1;for(var a=0;a<r.length;a++){var o=r[a],i=this._fields[o].extractor,l=i?i(e):e[o],s=this.tokenizer(l,{fields:[o]}),u=this.pipeline.run(s),c=new N.FieldRef(n,o),d=Object.create(null);this.fieldTermFrequencies[c]=d,this.fieldLengths[c]=0,this.fieldLengths[c]+=u.length;for(var f=0;f<u.length;f++){var p=u[f];if(null==d[p]&&(d[p]=0),d[p]+=1,null==this.invertedIndex[p]){var h=Object.create(null);h._index=this.termIndex,this.termIndex+=1;for(var m=0;m<r.length;m++)h[r[m]]=Object.create(null);this.invertedIndex[p]=h}null==this.invertedIndex[p][o][n]&&(this.invertedIndex[p][o][n]=Object.create(null));for(var g=0;g<this.metadataWhitelist.length;g++){var v=this.metadataWhitelist[g],b=p.metadata[v];null==this.invertedIndex[p][o][n][v]&&(this.invertedIndex[p][o][n][v]=[]),this.invertedIndex[p][o][n][v].push(b)}}}},N.Builder.prototype.calculateAverageFieldLengths=function(){for(var e=Object.keys(this.fieldLengths),t=e.length,n={},r={},a=0;a<t;a++){var o=N.FieldRef.fromString(e[a]),i=o.fieldName;r[i]||(r[i]=0),r[i]+=1,n[i]||(n[i]=0),n[i]+=this.fieldLengths[o]}var l=Object.keys(this._fields);for(a=0;a<l.length;a++){var s=l[a];n[s]=n[s]/r[s]}this.averageFieldLength=n},N.Builder.prototype.createFieldVectors=function(){for(var e={},t=Object.keys(this.fieldTermFrequencies),n=t.length,r=Object.create(null),a=0;a<n;a++){for(var o=N.FieldRef.fromString(t[a]),i=o.fieldName,l=this.fieldLengths[o],s=new N.Vector,u=this.fieldTermFrequencies[o],c=Object.keys(u),d=c.length,f=this._fields[i].boost||1,p=this._documents[o.docRef].boost||1,h=0;h<d;h++){var m,g,v,b=c[h],y=u[b],w=this.invertedIndex[b]._index;void 0===r[b]?(m=N.idf(this.invertedIndex[b],this.documentCount),r[b]=m):m=r[b],g=m*((this._k1+1)*y)/(this._k1*(1-this._b+this._b*(l/this.averageFieldLength[i]))+y),g*=f,g*=p,v=Math.round(1e3*g)/1e3,s.insert(w,v)}e[o]=s}this.fieldVectors=e},N.Builder.prototype.createTokenSet=function(){this.tokenSet=N.TokenSet.fromArray(Object.keys(this.invertedIndex).sort())},N.Builder.prototype.build=function(){return this.calculateAverageFieldLengths(),this.createFieldVectors(),this.createTokenSet(),new N.Index({invertedIndex:this.invertedIndex,fieldVectors:this.fieldVectors,tokenSet:this.tokenSet,fields:Object.keys(this._fields),pipeline:this.searchPipeline})},N.Builder.prototype.use=function(e){var t=Array.prototype.slice.call(arguments,1);t.unshift(this),e.apply(this,t)},N.MatchData=function(e,t,n){for(var r=Object.create(null),a=Object.keys(n||{}),o=0;o<a.length;o++){var i=a[o];r[i]=n[i].slice()}this.metadata=Object.create(null),void 0!==e&&(this.metadata[e]=Object.create(null),this.metadata[e][t]=r)},N.MatchData.prototype.combine=function(e){for(var t=Object.keys(e.metadata),n=0;n<t.length;n++){var r=t[n],a=Object.keys(e.metadata[r]);null==this.metadata[r]&&(this.metadata[r]=Object.create(null));for(var o=0;o<a.length;o++){var i=a[o],l=Object.keys(e.metadata[r][i]);null==this.metadata[r][i]&&(this.metadata[r][i]=Object.create(null));for(var s=0;s<l.length;s++){var u=l[s];null==this.metadata[r][i][u]?this.metadata[r][i][u]=e.metadata[r][i][u]:this.metadata[r][i][u]=this.metadata[r][i][u].concat(e.metadata[r][i][u])}}}},N.MatchData.prototype.add=function(e,t,n){if(!(e in this.metadata))return this.metadata[e]=Object.create(null),void(this.metadata[e][t]=n);if(t in this.metadata[e])for(var r=Object.keys(n),a=0;a<r.length;a++){var o=r[a];o in this.metadata[e][t]?this.metadata[e][t][o]=this.metadata[e][t][o].concat(n[o]):this.metadata[e][t][o]=n[o]}else this.metadata[e][t]=n},N.Query=function(e){this.clauses=[],this.allFields=e},N.Query.wildcard=new String("*"),N.Query.wildcard.NONE=0,N.Query.wildcard.LEADING=1,N.Query.wildcard.TRAILING=2,N.Query.presence={OPTIONAL:1,REQUIRED:2,PROHIBITED:3},N.Query.prototype.clause=function(e){return"fields"in e||(e.fields=this.allFields),"boost"in e||(e.boost=1),"usePipeline"in e||(e.usePipeline=!0),"wildcard"in e||(e.wildcard=N.Query.wildcard.NONE),e.wildcard&N.Query.wildcard.LEADING&&e.term.charAt(0)!=N.Query.wildcard&&(e.term="*"+e.term),e.wildcard&N.Query.wildcard.TRAILING&&e.term.slice(-1)!=N.Query.wildcard&&(e.term=e.term+"*"),"presence"in e||(e.presence=N.Query.presence.OPTIONAL),this.clauses.push(e),this},N.Query.prototype.isNegated=function(){for(var e=0;e<this.clauses.length;e++)if(this.clauses[e].presence!=N.Query.presence.PROHIBITED)return!1;return!0},N.Query.prototype.term=function(e,t){if(Array.isArray(e))return e.forEach((function(e){this.term(e,N.utils.clone(t))}),this),this;var n=t||{};return n.term=e.toString(),this.clause(n),this},N.QueryParseError=function(e,t,n){this.name="QueryParseError",this.message=e,this.start=t,this.end=n},N.QueryParseError.prototype=new Error,N.QueryLexer=function(e){this.lexemes=[],this.str=e,this.length=e.length,this.pos=0,this.start=0,this.escapeCharPositions=[]},N.QueryLexer.prototype.run=function(){for(var e=N.QueryLexer.lexText;e;)e=e(this)},N.QueryLexer.prototype.sliceString=function(){for(var e=[],t=this.start,n=this.pos,r=0;r<this.escapeCharPositions.length;r++)n=this.escapeCharPositions[r],e.push(this.str.slice(t,n)),t=n+1;return e.push(this.str.slice(t,this.pos)),this.escapeCharPositions.length=0,e.join("")},N.QueryLexer.prototype.emit=function(e){this.lexemes.push({type:e,str:this.sliceString(),start:this.start,end:this.pos}),this.start=this.pos},N.QueryLexer.prototype.escapeCharacter=function(){this.escapeCharPositions.push(this.pos-1),this.pos+=1},N.QueryLexer.prototype.next=function(){if(this.pos>=this.length)return N.QueryLexer.EOS;var e=this.str.charAt(this.pos);return this.pos+=1,e},N.QueryLexer.prototype.width=function(){return this.pos-this.start},N.QueryLexer.prototype.ignore=function(){this.start==this.pos&&(this.pos+=1),this.start=this.pos},N.QueryLexer.prototype.backup=function(){this.pos-=1},N.QueryLexer.prototype.acceptDigitRun=function(){var e,t;do{t=(e=this.next()).charCodeAt(0)}while(t>47&&t<58);e!=N.QueryLexer.EOS&&this.backup()},N.QueryLexer.prototype.more=function(){return this.pos<this.length},N.QueryLexer.EOS="EOS",N.QueryLexer.FIELD="FIELD",N.QueryLexer.TERM="TERM",N.QueryLexer.EDIT_DISTANCE="EDIT_DISTANCE",N.QueryLexer.BOOST="BOOST",N.QueryLexer.PRESENCE="PRESENCE",N.QueryLexer.lexField=function(e){return e.backup(),e.emit(N.QueryLexer.FIELD),e.ignore(),N.QueryLexer.lexText},N.QueryLexer.lexTerm=function(e){if(e.width()>1&&(e.backup(),e.emit(N.QueryLexer.TERM)),e.ignore(),e.more())return N.QueryLexer.lexText},N.QueryLexer.lexEditDistance=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(N.QueryLexer.EDIT_DISTANCE),N.QueryLexer.lexText},N.QueryLexer.lexBoost=function(e){return e.ignore(),e.acceptDigitRun(),e.emit(N.QueryLexer.BOOST),N.QueryLexer.lexText},N.QueryLexer.lexEOS=function(e){e.width()>0&&e.emit(N.QueryLexer.TERM)},N.QueryLexer.termSeparator=N.tokenizer.separator,N.QueryLexer.lexText=function(e){for(;;){var t=e.next();if(t==N.QueryLexer.EOS)return N.QueryLexer.lexEOS;if(92!=t.charCodeAt(0)){if(":"==t)return N.QueryLexer.lexField;if("~"==t)return e.backup(),e.width()>0&&e.emit(N.QueryLexer.TERM),N.QueryLexer.lexEditDistance;if("^"==t)return e.backup(),e.width()>0&&e.emit(N.QueryLexer.TERM),N.QueryLexer.lexBoost;if("+"==t&&1===e.width())return e.emit(N.QueryLexer.PRESENCE),N.QueryLexer.lexText;if("-"==t&&1===e.width())return e.emit(N.QueryLexer.PRESENCE),N.QueryLexer.lexText;if(t.match(N.QueryLexer.termSeparator))return N.QueryLexer.lexTerm}else e.escapeCharacter()}},N.QueryParser=function(e,t){this.lexer=new N.QueryLexer(e),this.query=t,this.currentClause={},this.lexemeIdx=0},N.QueryParser.prototype.parse=function(){this.lexer.run(),this.lexemes=this.lexer.lexemes;for(var e=N.QueryParser.parseClause;e;)e=e(this);return this.query},N.QueryParser.prototype.peekLexeme=function(){return this.lexemes[this.lexemeIdx]},N.QueryParser.prototype.consumeLexeme=function(){var e=this.peekLexeme();return this.lexemeIdx+=1,e},N.QueryParser.prototype.nextClause=function(){var e=this.currentClause;this.query.clause(e),this.currentClause={}},N.QueryParser.parseClause=function(e){var t=e.peekLexeme();if(null!=t)switch(t.type){case N.QueryLexer.PRESENCE:return N.QueryParser.parsePresence;case N.QueryLexer.FIELD:return N.QueryParser.parseField;case N.QueryLexer.TERM:return N.QueryParser.parseTerm;default:var n="expected either a field or a term, found "+t.type;throw t.str.length>=1&&(n+=" with value '"+t.str+"'"),new N.QueryParseError(n,t.start,t.end)}},N.QueryParser.parsePresence=function(e){var t=e.consumeLexeme();if(null!=t){switch(t.str){case"-":e.currentClause.presence=N.Query.presence.PROHIBITED;break;case"+":e.currentClause.presence=N.Query.presence.REQUIRED;break;default:var n="unrecognised presence operator'"+t.str+"'";throw new N.QueryParseError(n,t.start,t.end)}var r=e.peekLexeme();if(null==r){n="expecting term or field, found nothing";throw new N.QueryParseError(n,t.start,t.end)}switch(r.type){case N.QueryLexer.FIELD:return N.QueryParser.parseField;case N.QueryLexer.TERM:return N.QueryParser.parseTerm;default:n="expecting term or field, found '"+r.type+"'";throw new N.QueryParseError(n,r.start,r.end)}}},N.QueryParser.parseField=function(e){var t=e.consumeLexeme();if(null!=t){if(-1==e.query.allFields.indexOf(t.str)){var n=e.query.allFields.map((function(e){return"'"+e+"'"})).join(", "),r="unrecognised field '"+t.str+"', possible fields: "+n;throw new N.QueryParseError(r,t.start,t.end)}e.currentClause.fields=[t.str];var a=e.peekLexeme();if(null==a){r="expecting term, found nothing";throw new N.QueryParseError(r,t.start,t.end)}if(a.type===N.QueryLexer.TERM)return N.QueryParser.parseTerm;r="expecting term, found '"+a.type+"'";throw new N.QueryParseError(r,a.start,a.end)}},N.QueryParser.parseTerm=function(e){var t=e.consumeLexeme();if(null!=t){e.currentClause.term=t.str.toLowerCase(),-1!=t.str.indexOf("*")&&(e.currentClause.usePipeline=!1);var n=e.peekLexeme();if(null!=n)switch(n.type){case N.QueryLexer.TERM:return e.nextClause(),N.QueryParser.parseTerm;case N.QueryLexer.FIELD:return e.nextClause(),N.QueryParser.parseField;case N.QueryLexer.EDIT_DISTANCE:return N.QueryParser.parseEditDistance;case N.QueryLexer.BOOST:return N.QueryParser.parseBoost;case N.QueryLexer.PRESENCE:return e.nextClause(),N.QueryParser.parsePresence;default:var r="Unexpected lexeme type '"+n.type+"'";throw new N.QueryParseError(r,n.start,n.end)}else e.nextClause()}},N.QueryParser.parseEditDistance=function(e){var t=e.consumeLexeme();if(null!=t){var n=parseInt(t.str,10);if(isNaN(n)){var r="edit distance must be numeric";throw new N.QueryParseError(r,t.start,t.end)}e.currentClause.editDistance=n;var a=e.peekLexeme();if(null!=a)switch(a.type){case N.QueryLexer.TERM:return e.nextClause(),N.QueryParser.parseTerm;case N.QueryLexer.FIELD:return e.nextClause(),N.QueryParser.parseField;case N.QueryLexer.EDIT_DISTANCE:return N.QueryParser.parseEditDistance;case N.QueryLexer.BOOST:return N.QueryParser.parseBoost;case N.QueryLexer.PRESENCE:return e.nextClause(),N.QueryParser.parsePresence;default:r="Unexpected lexeme type '"+a.type+"'";throw new N.QueryParseError(r,a.start,a.end)}else e.nextClause()}},N.QueryParser.parseBoost=function(e){var t=e.consumeLexeme();if(null!=t){var n=parseInt(t.str,10);if(isNaN(n)){var r="boost must be numeric";throw new N.QueryParseError(r,t.start,t.end)}e.currentClause.boost=n;var a=e.peekLexeme();if(null!=a)switch(a.type){case N.QueryLexer.TERM:return e.nextClause(),N.QueryParser.parseTerm;case N.QueryLexer.FIELD:return e.nextClause(),N.QueryParser.parseField;case N.QueryLexer.EDIT_DISTANCE:return N.QueryParser.parseEditDistance;case N.QueryLexer.BOOST:return N.QueryParser.parseBoost;case N.QueryLexer.PRESENCE:return e.nextClause(),N.QueryParser.parsePresence;default:r="Unexpected lexeme type '"+a.type+"'";throw new N.QueryParseError(r,a.start,a.end)}else e.nextClause()}},void 0===(a="function"==typeof(r=function(){return N})?r.call(t,n,t,e):r)||(e.exports=a)}()},813:function(e){e.exports=function(){"use strict";var e="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},t=function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")},n=function(){function e(e,t){for(var n=0;n<t.length;n++){var r=t[n];r.enumerable=r.enumerable||!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(e,r.key,r)}}return function(t,n,r){return n&&e(t.prototype,n),r&&e(t,r),t}}(),r=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a=function(){function e(n){var r=!(arguments.length>1&&void 0!==arguments[1])||arguments[1],a=arguments.length>2&&void 0!==arguments[2]?arguments[2]:[],o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:5e3;t(this,e),this.ctx=n,this.iframes=r,this.exclude=a,this.iframesTimeout=o}return n(e,[{key:"getContexts",value:function(){var e=[];return(void 0!==this.ctx&&this.ctx?NodeList.prototype.isPrototypeOf(this.ctx)?Array.prototype.slice.call(this.ctx):Array.isArray(this.ctx)?this.ctx:"string"==typeof this.ctx?Array.prototype.slice.call(document.querySelectorAll(this.ctx)):[this.ctx]:[]).forEach((function(t){var n=e.filter((function(e){return e.contains(t)})).length>0;-1!==e.indexOf(t)||n||e.push(t)})),e}},{key:"getIframeContents",value:function(e,t){var n=arguments.length>2&&void 0!==arguments[2]?arguments[2]:function(){},r=void 0;try{var a=e.contentWindow;if(r=a.document,!a||!r)throw new Error("iframe inaccessible")}catch(o){n()}r&&t(r)}},{key:"isIframeBlank",value:function(e){var t="about:blank",n=e.getAttribute("src").trim();return e.contentWindow.location.href===t&&n!==t&&n}},{key:"observeIframeLoad",value:function(e,t,n){var r=this,a=!1,o=null,i=function i(){if(!a){a=!0,clearTimeout(o);try{r.isIframeBlank(e)||(e.removeEventListener("load",i),r.getIframeContents(e,t,n))}catch(l){n()}}};e.addEventListener("load",i),o=setTimeout(i,this.iframesTimeout)}},{key:"onIframeReady",value:function(e,t,n){try{"complete"===e.contentWindow.document.readyState?this.isIframeBlank(e)?this.observeIframeLoad(e,t,n):this.getIframeContents(e,t,n):this.observeIframeLoad(e,t,n)}catch(r){n()}}},{key:"waitForIframes",value:function(e,t){var n=this,r=0;this.forEachIframe(e,(function(){return!0}),(function(e){r++,n.waitForIframes(e.querySelector("html"),(function(){--r||t()}))}),(function(e){e||t()}))}},{key:"forEachIframe",value:function(t,n,r){var a=this,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},i=t.querySelectorAll("iframe"),l=i.length,s=0;i=Array.prototype.slice.call(i);var u=function(){--l<=0&&o(s)};l||u(),i.forEach((function(t){e.matches(t,a.exclude)?u():a.onIframeReady(t,(function(e){n(t)&&(s++,r(e)),u()}),u)}))}},{key:"createIterator",value:function(e,t,n){return document.createNodeIterator(e,t,n,!1)}},{key:"createInstanceOnIframe",value:function(t){return new e(t.querySelector("html"),this.iframes)}},{key:"compareNodeIframe",value:function(e,t,n){if(e.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_PRECEDING){if(null===t)return!0;if(t.compareDocumentPosition(n)&Node.DOCUMENT_POSITION_FOLLOWING)return!0}return!1}},{key:"getIteratorNode",value:function(e){var t=e.previousNode();return{prevNode:t,node:(null===t||e.nextNode())&&e.nextNode()}}},{key:"checkIframeFilter",value:function(e,t,n,r){var a=!1,o=!1;return r.forEach((function(e,t){e.val===n&&(a=t,o=e.handled)})),this.compareNodeIframe(e,t,n)?(!1!==a||o?!1===a||o||(r[a].handled=!0):r.push({val:n,handled:!0}),!0):(!1===a&&r.push({val:n,handled:!1}),!1)}},{key:"handleOpenIframes",value:function(e,t,n,r){var a=this;e.forEach((function(e){e.handled||a.getIframeContents(e.val,(function(e){a.createInstanceOnIframe(e).forEachNode(t,n,r)}))}))}},{key:"iterateThroughNodes",value:function(e,t,n,r,a){for(var o=this,i=this.createIterator(t,e,r),l=[],s=[],u=void 0,c=void 0,d=function(){var e=o.getIteratorNode(i);return c=e.prevNode,u=e.node};d();)this.iframes&&this.forEachIframe(t,(function(e){return o.checkIframeFilter(u,c,e,l)}),(function(t){o.createInstanceOnIframe(t).forEachNode(e,(function(e){return s.push(e)}),r)})),s.push(u);s.forEach((function(e){n(e)})),this.iframes&&this.handleOpenIframes(l,e,n,r),a()}},{key:"forEachNode",value:function(e,t,n){var r=this,a=arguments.length>3&&void 0!==arguments[3]?arguments[3]:function(){},o=this.getContexts(),i=o.length;i||a(),o.forEach((function(o){var l=function(){r.iterateThroughNodes(e,o,t,n,(function(){--i<=0&&a()}))};r.iframes?r.waitForIframes(o,l):l()}))}}],[{key:"matches",value:function(e,t){var n="string"==typeof t?[t]:t,r=e.matches||e.matchesSelector||e.msMatchesSelector||e.mozMatchesSelector||e.oMatchesSelector||e.webkitMatchesSelector;if(r){var a=!1;return n.every((function(t){return!r.call(e,t)||(a=!0,!1)})),a}return!1}}]),e}(),o=function(){function o(e){t(this,o),this.ctx=e,this.ie=!1;var n=window.navigator.userAgent;(n.indexOf("MSIE")>-1||n.indexOf("Trident")>-1)&&(this.ie=!0)}return n(o,[{key:"log",value:function(t){var n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"debug",r=this.opt.log;this.opt.debug&&"object"===(void 0===r?"undefined":e(r))&&"function"==typeof r[n]&&r[n]("mark.js: "+t)}},{key:"escapeStr",value:function(e){return e.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g,"\\$&")}},{key:"createRegExp",value:function(e){return"disabled"!==this.opt.wildcards&&(e=this.setupWildcardsRegExp(e)),e=this.escapeStr(e),Object.keys(this.opt.synonyms).length&&(e=this.createSynonymsRegExp(e)),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),this.opt.diacritics&&(e=this.createDiacriticsRegExp(e)),e=this.createMergedBlanksRegExp(e),(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.createJoinersRegExp(e)),"disabled"!==this.opt.wildcards&&(e=this.createWildcardsRegExp(e)),e=this.createAccuracyRegExp(e)}},{key:"createSynonymsRegExp",value:function(e){var t=this.opt.synonyms,n=this.opt.caseSensitive?"":"i",r=this.opt.ignoreJoiners||this.opt.ignorePunctuation.length?"\0":"";for(var a in t)if(t.hasOwnProperty(a)){var o=t[a],i="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(a):this.escapeStr(a),l="disabled"!==this.opt.wildcards?this.setupWildcardsRegExp(o):this.escapeStr(o);""!==i&&""!==l&&(e=e.replace(new RegExp("("+this.escapeStr(i)+"|"+this.escapeStr(l)+")","gm"+n),r+"("+this.processSynomyms(i)+"|"+this.processSynomyms(l)+")"+r))}return e}},{key:"processSynomyms",value:function(e){return(this.opt.ignoreJoiners||this.opt.ignorePunctuation.length)&&(e=this.setupIgnoreJoinersRegExp(e)),e}},{key:"setupWildcardsRegExp",value:function(e){return(e=e.replace(/(?:\\)*\?/g,(function(e){return"\\"===e.charAt(0)?"?":"\x01"}))).replace(/(?:\\)*\*/g,(function(e){return"\\"===e.charAt(0)?"*":"\x02"}))}},{key:"createWildcardsRegExp",value:function(e){var t="withSpaces"===this.opt.wildcards;return e.replace(/\u0001/g,t?"[\\S\\s]?":"\\S?").replace(/\u0002/g,t?"[\\S\\s]*?":"\\S*")}},{key:"setupIgnoreJoinersRegExp",value:function(e){return e.replace(/[^(|)\\]/g,(function(e,t,n){var r=n.charAt(t+1);return/[(|)\\]/.test(r)||""===r?e:e+"\0"}))}},{key:"createJoinersRegExp",value:function(e){var t=[],n=this.opt.ignorePunctuation;return Array.isArray(n)&&n.length&&t.push(this.escapeStr(n.join(""))),this.opt.ignoreJoiners&&t.push("\\u00ad\\u200b\\u200c\\u200d"),t.length?e.split(/\u0000+/).join("["+t.join("")+"]*"):e}},{key:"createDiacriticsRegExp",value:function(e){var t=this.opt.caseSensitive?"":"i",n=this.opt.caseSensitive?["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105","A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010d","C\xc7\u0106\u010c","d\u0111\u010f","D\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119","E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012b","I\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142","L\u0141","n\xf1\u0148\u0144","N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014d","O\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159","R\u0158","s\u0161\u015b\u0219\u015f","S\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163","T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016b","U\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xff","Y\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017a","Z\u017d\u017b\u0179"]:["a\xe0\xe1\u1ea3\xe3\u1ea1\u0103\u1eb1\u1eaf\u1eb3\u1eb5\u1eb7\xe2\u1ea7\u1ea5\u1ea9\u1eab\u1ead\xe4\xe5\u0101\u0105A\xc0\xc1\u1ea2\xc3\u1ea0\u0102\u1eb0\u1eae\u1eb2\u1eb4\u1eb6\xc2\u1ea6\u1ea4\u1ea8\u1eaa\u1eac\xc4\xc5\u0100\u0104","c\xe7\u0107\u010dC\xc7\u0106\u010c","d\u0111\u010fD\u0110\u010e","e\xe8\xe9\u1ebb\u1ebd\u1eb9\xea\u1ec1\u1ebf\u1ec3\u1ec5\u1ec7\xeb\u011b\u0113\u0119E\xc8\xc9\u1eba\u1ebc\u1eb8\xca\u1ec0\u1ebe\u1ec2\u1ec4\u1ec6\xcb\u011a\u0112\u0118","i\xec\xed\u1ec9\u0129\u1ecb\xee\xef\u012bI\xcc\xcd\u1ec8\u0128\u1eca\xce\xcf\u012a","l\u0142L\u0141","n\xf1\u0148\u0144N\xd1\u0147\u0143","o\xf2\xf3\u1ecf\xf5\u1ecd\xf4\u1ed3\u1ed1\u1ed5\u1ed7\u1ed9\u01a1\u1edf\u1ee1\u1edb\u1edd\u1ee3\xf6\xf8\u014dO\xd2\xd3\u1ece\xd5\u1ecc\xd4\u1ed2\u1ed0\u1ed4\u1ed6\u1ed8\u01a0\u1ede\u1ee0\u1eda\u1edc\u1ee2\xd6\xd8\u014c","r\u0159R\u0158","s\u0161\u015b\u0219\u015fS\u0160\u015a\u0218\u015e","t\u0165\u021b\u0163T\u0164\u021a\u0162","u\xf9\xfa\u1ee7\u0169\u1ee5\u01b0\u1eeb\u1ee9\u1eed\u1eef\u1ef1\xfb\xfc\u016f\u016bU\xd9\xda\u1ee6\u0168\u1ee4\u01af\u1eea\u1ee8\u1eec\u1eee\u1ef0\xdb\xdc\u016e\u016a","y\xfd\u1ef3\u1ef7\u1ef9\u1ef5\xffY\xdd\u1ef2\u1ef6\u1ef8\u1ef4\u0178","z\u017e\u017c\u017aZ\u017d\u017b\u0179"],r=[];return e.split("").forEach((function(a){n.every((function(n){if(-1!==n.indexOf(a)){if(r.indexOf(n)>-1)return!1;e=e.replace(new RegExp("["+n+"]","gm"+t),"["+n+"]"),r.push(n)}return!0}))})),e}},{key:"createMergedBlanksRegExp",value:function(e){return e.replace(/[\s]+/gim,"[\\s]+")}},{key:"createAccuracyRegExp",value:function(e){var t=this,n="!\"#$%&'()*+,-./:;<=>?@[\\]^_`{|}~\xa1\xbf",r=this.opt.accuracy,a="string"==typeof r?r:r.value,o="string"==typeof r?[]:r.limiters,i="";switch(o.forEach((function(e){i+="|"+t.escapeStr(e)})),a){case"partially":default:return"()("+e+")";case"complementary":return"()([^"+(i="\\s"+(i||this.escapeStr(n)))+"]*"+e+"[^"+i+"]*)";case"exactly":return"(^|\\s"+i+")("+e+")(?=$|\\s"+i+")"}}},{key:"getSeparatedKeywords",value:function(e){var t=this,n=[];return e.forEach((function(e){t.opt.separateWordSearch?e.split(" ").forEach((function(e){e.trim()&&-1===n.indexOf(e)&&n.push(e)})):e.trim()&&-1===n.indexOf(e)&&n.push(e)})),{keywords:n.sort((function(e,t){return t.length-e.length})),length:n.length}}},{key:"isNumeric",value:function(e){return Number(parseFloat(e))==e}},{key:"checkRanges",value:function(e){var t=this;if(!Array.isArray(e)||"[object Object]"!==Object.prototype.toString.call(e[0]))return this.log("markRanges() will only accept an array of objects"),this.opt.noMatch(e),[];var n=[],r=0;return e.sort((function(e,t){return e.start-t.start})).forEach((function(e){var a=t.callNoMatchOnInvalidRanges(e,r),o=a.start,i=a.end;a.valid&&(e.start=o,e.length=i-o,n.push(e),r=i)})),n}},{key:"callNoMatchOnInvalidRanges",value:function(e,t){var n=void 0,r=void 0,a=!1;return e&&void 0!==e.start?(r=(n=parseInt(e.start,10))+parseInt(e.length,10),this.isNumeric(e.start)&&this.isNumeric(e.length)&&r-t>0&&r-n>0?a=!0:(this.log("Ignoring invalid or overlapping range: "+JSON.stringify(e)),this.opt.noMatch(e))):(this.log("Ignoring invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:n,end:r,valid:a}}},{key:"checkWhitespaceRanges",value:function(e,t,n){var r=void 0,a=!0,o=n.length,i=t-o,l=parseInt(e.start,10)-i;return(r=(l=l>o?o:l)+parseInt(e.length,10))>o&&(r=o,this.log("End range automatically set to the max value of "+o)),l<0||r-l<0||l>o||r>o?(a=!1,this.log("Invalid range: "+JSON.stringify(e)),this.opt.noMatch(e)):""===n.substring(l,r).replace(/\s+/g,"")&&(a=!1,this.log("Skipping whitespace only range: "+JSON.stringify(e)),this.opt.noMatch(e)),{start:l,end:r,valid:a}}},{key:"getTextNodes",value:function(e){var t=this,n="",r=[];this.iterator.forEachNode(NodeFilter.SHOW_TEXT,(function(e){r.push({start:n.length,end:(n+=e.textContent).length,node:e})}),(function(e){return t.matchesExclude(e.parentNode)?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}),(function(){e({value:n,nodes:r})}))}},{key:"matchesExclude",value:function(e){return a.matches(e,this.opt.exclude.concat(["script","style","title","head","html"]))}},{key:"wrapRangeInTextNode",value:function(e,t,n){var r=this.opt.element?this.opt.element:"mark",a=e.splitText(t),o=a.splitText(n-t),i=document.createElement(r);return i.setAttribute("data-markjs","true"),this.opt.className&&i.setAttribute("class",this.opt.className),i.textContent=a.textContent,a.parentNode.replaceChild(i,a),o}},{key:"wrapRangeInMappedTextNode",value:function(e,t,n,r,a){var o=this;e.nodes.every((function(i,l){var s=e.nodes[l+1];if(void 0===s||s.start>t){if(!r(i.node))return!1;var u=t-i.start,c=(n>i.end?i.end:n)-i.start,d=e.value.substr(0,i.start),f=e.value.substr(c+i.start);if(i.node=o.wrapRangeInTextNode(i.node,u,c),e.value=d+f,e.nodes.forEach((function(t,n){n>=l&&(e.nodes[n].start>0&&n!==l&&(e.nodes[n].start-=c),e.nodes[n].end-=c)})),n-=c,a(i.node.previousSibling,i.start),!(n>i.end))return!1;t=i.end}return!0}))}},{key:"wrapMatches",value:function(e,t,n,r,a){var o=this,i=0===t?0:t+1;this.getTextNodes((function(t){t.nodes.forEach((function(t){t=t.node;for(var a=void 0;null!==(a=e.exec(t.textContent))&&""!==a[i];)if(n(a[i],t)){var l=a.index;if(0!==i)for(var s=1;s<i;s++)l+=a[s].length;t=o.wrapRangeInTextNode(t,l,l+a[i].length),r(t.previousSibling),e.lastIndex=0}})),a()}))}},{key:"wrapMatchesAcrossElements",value:function(e,t,n,r,a){var o=this,i=0===t?0:t+1;this.getTextNodes((function(t){for(var l=void 0;null!==(l=e.exec(t.value))&&""!==l[i];){var s=l.index;if(0!==i)for(var u=1;u<i;u++)s+=l[u].length;var c=s+l[i].length;o.wrapRangeInMappedTextNode(t,s,c,(function(e){return n(l[i],e)}),(function(t,n){e.lastIndex=n,r(t)}))}a()}))}},{key:"wrapRangeFromIndex",value:function(e,t,n,r){var a=this;this.getTextNodes((function(o){var i=o.value.length;e.forEach((function(e,r){var l=a.checkWhitespaceRanges(e,i,o.value),s=l.start,u=l.end;l.valid&&a.wrapRangeInMappedTextNode(o,s,u,(function(n){return t(n,e,o.value.substring(s,u),r)}),(function(t){n(t,e)}))})),r()}))}},{key:"unwrapMatches",value:function(e){for(var t=e.parentNode,n=document.createDocumentFragment();e.firstChild;)n.appendChild(e.removeChild(e.firstChild));t.replaceChild(n,e),this.ie?this.normalizeTextNode(t):t.normalize()}},{key:"normalizeTextNode",value:function(e){if(e){if(3===e.nodeType)for(;e.nextSibling&&3===e.nextSibling.nodeType;)e.nodeValue+=e.nextSibling.nodeValue,e.parentNode.removeChild(e.nextSibling);else this.normalizeTextNode(e.firstChild);this.normalizeTextNode(e.nextSibling)}}},{key:"markRegExp",value:function(e,t){var n=this;this.opt=t,this.log('Searching with expression "'+e+'"');var r=0,a="wrapMatches",o=function(e){r++,n.opt.each(e)};this.opt.acrossElements&&(a="wrapMatchesAcrossElements"),this[a](e,this.opt.ignoreGroups,(function(e,t){return n.opt.filter(t,e,r)}),o,(function(){0===r&&n.opt.noMatch(e),n.opt.done(r)}))}},{key:"mark",value:function(e,t){var n=this;this.opt=t;var r=0,a="wrapMatches",o=this.getSeparatedKeywords("string"==typeof e?[e]:e),i=o.keywords,l=o.length,s=this.opt.caseSensitive?"":"i",u=function e(t){var o=new RegExp(n.createRegExp(t),"gm"+s),u=0;n.log('Searching with expression "'+o+'"'),n[a](o,1,(function(e,a){return n.opt.filter(a,t,r,u)}),(function(e){u++,r++,n.opt.each(e)}),(function(){0===u&&n.opt.noMatch(t),i[l-1]===t?n.opt.done(r):e(i[i.indexOf(t)+1])}))};this.opt.acrossElements&&(a="wrapMatchesAcrossElements"),0===l?this.opt.done(r):u(i[0])}},{key:"markRanges",value:function(e,t){var n=this;this.opt=t;var r=0,a=this.checkRanges(e);a&&a.length?(this.log("Starting to mark with the following ranges: "+JSON.stringify(a)),this.wrapRangeFromIndex(a,(function(e,t,r,a){return n.opt.filter(e,t,r,a)}),(function(e,t){r++,n.opt.each(e,t)}),(function(){n.opt.done(r)}))):this.opt.done(r)}},{key:"unmark",value:function(e){var t=this;this.opt=e;var n=this.opt.element?this.opt.element:"*";n+="[data-markjs]",this.opt.className&&(n+="."+this.opt.className),this.log('Removal selector "'+n+'"'),this.iterator.forEachNode(NodeFilter.SHOW_ELEMENT,(function(e){t.unwrapMatches(e)}),(function(e){var r=a.matches(e,n),o=t.matchesExclude(e);return!r||o?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}),this.opt.done)}},{key:"opt",set:function(e){this._opt=r({},{element:"",className:"",exclude:[],iframes:!1,iframesTimeout:5e3,separateWordSearch:!0,diacritics:!0,synonyms:{},accuracy:"partially",acrossElements:!1,caseSensitive:!1,ignoreJoiners:!1,ignoreGroups:0,ignorePunctuation:[],wildcards:"disabled",each:function(){},noMatch:function(){},filter:function(){return!0},done:function(){},debug:!1,log:window.console},e)},get:function(){return this._opt}},{key:"iterator",get:function(){return new a(this.ctx,this.opt.iframes,this.opt.exclude,this.opt.iframesTimeout)}}]),o}();function i(e){var t=this,n=new o(e);return this.mark=function(e,r){return n.mark(e,r),t},this.markRegExp=function(e,r){return n.markRegExp(e,r),t},this.markRanges=function(e,r){return n.markRanges(e,r),t},this.unmark=function(e){return n.unmark(e),t},this}return i}()},2497:(e,t,n)=>{"use strict";n.r(t)},2295:(e,t,n)=>{"use strict";n.r(t)},4865:function(e,t,n){var r,a;r=function(){var e,t,n={version:"0.2.0"},r=n.settings={minimum:.08,easing:"ease",positionUsing:"",speed:200,trickle:!0,trickleRate:.02,trickleSpeed:800,showSpinner:!0,barSelector:'[role="bar"]',spinnerSelector:'[role="spinner"]',parent:"body",template:'<div class="bar" role="bar"><div class="peg"></div></div><div class="spinner" role="spinner"><div class="spinner-icon"></div></div>'};function a(e,t,n){return e<t?t:e>n?n:e}function o(e){return 100*(-1+e)}function i(e,t,n){var a;return(a="translate3d"===r.positionUsing?{transform:"translate3d("+o(e)+"%,0,0)"}:"translate"===r.positionUsing?{transform:"translate("+o(e)+"%,0)"}:{"margin-left":o(e)+"%"}).transition="all "+t+"ms "+n,a}n.configure=function(e){var t,n;for(t in e)void 0!==(n=e[t])&&e.hasOwnProperty(t)&&(r[t]=n);return this},n.status=null,n.set=function(e){var t=n.isStarted();e=a(e,r.minimum,1),n.status=1===e?null:e;var o=n.render(!t),u=o.querySelector(r.barSelector),c=r.speed,d=r.easing;return o.offsetWidth,l((function(t){""===r.positionUsing&&(r.positionUsing=n.getPositioningCSS()),s(u,i(e,c,d)),1===e?(s(o,{transition:"none",opacity:1}),o.offsetWidth,setTimeout((function(){s(o,{transition:"all "+c+"ms linear",opacity:0}),setTimeout((function(){n.remove(),t()}),c)}),c)):setTimeout(t,c)})),this},n.isStarted=function(){return"number"==typeof n.status},n.start=function(){n.status||n.set(0);var e=function(){setTimeout((function(){n.status&&(n.trickle(),e())}),r.trickleSpeed)};return r.trickle&&e(),this},n.done=function(e){return e||n.status?n.inc(.3+.5*Math.random()).set(1):this},n.inc=function(e){var t=n.status;return t?("number"!=typeof e&&(e=(1-t)*a(Math.random()*t,.1,.95)),t=a(t+e,0,.994),n.set(t)):n.start()},n.trickle=function(){return n.inc(Math.random()*r.trickleRate)},e=0,t=0,n.promise=function(r){return r&&"resolved"!==r.state()?(0===t&&n.start(),e++,t++,r.always((function(){0==--t?(e=0,n.done()):n.set((e-t)/e)})),this):this},n.render=function(e){if(n.isRendered())return document.getElementById("nprogress");c(document.documentElement,"nprogress-busy");var t=document.createElement("div");t.id="nprogress",t.innerHTML=r.template;var a,i=t.querySelector(r.barSelector),l=e?"-100":o(n.status||0),u=document.querySelector(r.parent);return s(i,{transition:"all 0 linear",transform:"translate3d("+l+"%,0,0)"}),r.showSpinner||(a=t.querySelector(r.spinnerSelector))&&p(a),u!=document.body&&c(u,"nprogress-custom-parent"),u.appendChild(t),t},n.remove=function(){d(document.documentElement,"nprogress-busy"),d(document.querySelector(r.parent),"nprogress-custom-parent");var e=document.getElementById("nprogress");e&&p(e)},n.isRendered=function(){return!!document.getElementById("nprogress")},n.getPositioningCSS=function(){var e=document.body.style,t="WebkitTransform"in e?"Webkit":"MozTransform"in e?"Moz":"msTransform"in e?"ms":"OTransform"in e?"O":"";return t+"Perspective"in e?"translate3d":t+"Transform"in e?"translate":"margin"};var l=function(){var e=[];function t(){var n=e.shift();n&&n(t)}return function(n){e.push(n),1==e.length&&t()}}(),s=function(){var e=["Webkit","O","Moz","ms"],t={};function n(e){return e.replace(/^-ms-/,"ms-").replace(/-([\da-z])/gi,(function(e,t){return t.toUpperCase()}))}function r(t){var n=document.body.style;if(t in n)return t;for(var r,a=e.length,o=t.charAt(0).toUpperCase()+t.slice(1);a--;)if((r=e[a]+o)in n)return r;return t}function a(e){return e=n(e),t[e]||(t[e]=r(e))}function o(e,t,n){t=a(t),e.style[t]=n}return function(e,t){var n,r,a=arguments;if(2==a.length)for(n in t)void 0!==(r=t[n])&&t.hasOwnProperty(n)&&o(e,n,r);else o(e,a[1],a[2])}}();function u(e,t){return("string"==typeof e?e:f(e)).indexOf(" "+t+" ")>=0}function c(e,t){var n=f(e),r=n+t;u(n,t)||(e.className=r.substring(1))}function d(e,t){var n,r=f(e);u(e,t)&&(n=r.replace(" "+t+" "," "),e.className=n.substring(1,n.length-1))}function f(e){return(" "+(e.className||"")+" ").replace(/\s+/gi," ")}function p(e){e&&e.parentNode&&e.parentNode.removeChild(e)}return n},void 0===(a="function"==typeof r?r.call(t,n,t,e):r)||(e.exports=a)},7418:e=>{"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;function a(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(a){return!1}}()?Object.assign:function(e,o){for(var i,l,s=a(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(s[c]=i[c]);if(t){l=t(i);for(var d=0;d<l.length;d++)r.call(i,l[d])&&(s[l[d]]=i[l[d]])}}return s}},7410:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=function(){var e=/(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i,t=0,n={},r={util:{encode:function e(t){return t instanceof a?new a(t.type,e(t.content),t.alias):Array.isArray(t)?t.map(e):t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/\u00a0/g," ")},type:function(e){return Object.prototype.toString.call(e).slice(8,-1)},objId:function(e){return e.__id||Object.defineProperty(e,"__id",{value:++t}),e.__id},clone:function e(t,n){var a,o;switch(n=n||{},r.util.type(t)){case"Object":if(o=r.util.objId(t),n[o])return n[o];for(var i in a={},n[o]=a,t)t.hasOwnProperty(i)&&(a[i]=e(t[i],n));return a;case"Array":return o=r.util.objId(t),n[o]?n[o]:(a=[],n[o]=a,t.forEach((function(t,r){a[r]=e(t,n)})),a);default:return t}},getLanguage:function(t){for(;t;){var n=e.exec(t.className);if(n)return n[1].toLowerCase();t=t.parentElement}return"none"},setLanguage:function(t,n){t.className=t.className.replace(RegExp(e,"gi"),""),t.classList.add("language-"+n)},isActive:function(e,t,n){for(var r="no-"+t;e;){var a=e.classList;if(a.contains(t))return!0;if(a.contains(r))return!1;e=e.parentElement}return!!n}},languages:{plain:n,plaintext:n,text:n,txt:n,extend:function(e,t){var n=r.util.clone(r.languages[e]);for(var a in t)n[a]=t[a];return n},insertBefore:function(e,t,n,a){var o=(a=a||r.languages)[e],i={};for(var l in o)if(o.hasOwnProperty(l)){if(l==t)for(var s in n)n.hasOwnProperty(s)&&(i[s]=n[s]);n.hasOwnProperty(l)||(i[l]=o[l])}var u=a[e];return a[e]=i,r.languages.DFS(r.languages,(function(t,n){n===u&&t!=e&&(this[t]=i)})),i},DFS:function e(t,n,a,o){o=o||{};var i=r.util.objId;for(var l in t)if(t.hasOwnProperty(l)){n.call(t,l,t[l],a||l);var s=t[l],u=r.util.type(s);"Object"!==u||o[i(s)]?"Array"!==u||o[i(s)]||(o[i(s)]=!0,e(s,n,l,o)):(o[i(s)]=!0,e(s,n,null,o))}}},plugins:{},highlight:function(e,t,n){var o={code:e,grammar:t,language:n};return r.hooks.run("before-tokenize",o),o.tokens=r.tokenize(o.code,o.grammar),r.hooks.run("after-tokenize",o),a.stringify(r.util.encode(o.tokens),o.language)},tokenize:function(e,t){var n=t.rest;if(n){for(var r in n)t[r]=n[r];delete t.rest}var a=new l;return s(a,a.head,e),i(e,a,t,a.head,0),function(e){var t=[],n=e.head.next;for(;n!==e.tail;)t.push(n.value),n=n.next;return t}(a)},hooks:{all:{},add:function(e,t){var n=r.hooks.all;n[e]=n[e]||[],n[e].push(t)},run:function(e,t){var n=r.hooks.all[e];if(n&&n.length)for(var a,o=0;a=n[o++];)a(t)}},Token:a};function a(e,t,n,r){this.type=e,this.content=t,this.alias=n,this.length=0|(r||"").length}function o(e,t,n,r){e.lastIndex=t;var a=e.exec(n);if(a&&r&&a[1]){var o=a[1].length;a.index+=o,a[0]=a[0].slice(o)}return a}function i(e,t,n,l,c,d){for(var f in n)if(n.hasOwnProperty(f)&&n[f]){var p=n[f];p=Array.isArray(p)?p:[p];for(var h=0;h<p.length;++h){if(d&&d.cause==f+","+h)return;var m=p[h],g=m.inside,v=!!m.lookbehind,b=!!m.greedy,y=m.alias;if(b&&!m.pattern.global){var w=m.pattern.toString().match(/[imsuy]*$/)[0];m.pattern=RegExp(m.pattern.source,w+"g")}for(var k=m.pattern||m,E=l.next,S=c;E!==t.tail&&!(d&&S>=d.reach);S+=E.value.length,E=E.next){var x=E.value;if(t.length>e.length)return;if(!(x instanceof a)){var T,C=1;if(b){if(!(T=o(k,S,e,v))||T.index>=e.length)break;var _=T.index,L=T.index+T[0].length,R=S;for(R+=E.value.length;_>=R;)R+=(E=E.next).value.length;if(S=R-=E.value.length,E.value instanceof a)continue;for(var A=E;A!==t.tail&&(R<L||"string"==typeof A.value);A=A.next)C++,R+=A.value.length;C--,x=e.slice(S,R),T.index-=S}else if(!(T=o(k,0,x,v)))continue;_=T.index;var N=T[0],P=x.slice(0,_),O=x.slice(_+N.length),I=S+x.length;d&&I>d.reach&&(d.reach=I);var D=E.prev;if(P&&(D=s(t,D,P),S+=P.length),u(t,D,C),E=s(t,D,new a(f,g?r.tokenize(N,g):N,y,N)),O&&s(t,E,O),C>1){var z={cause:f+","+h,reach:I};i(e,t,n,E.prev,S,z),d&&z.reach>d.reach&&(d.reach=z.reach)}}}}}}function l(){var e={value:null,prev:null,next:null},t={value:null,prev:e,next:null};e.next=t,this.head=e,this.tail=t,this.length=0}function s(e,t,n){var r=t.next,a={value:n,prev:t,next:r};return t.next=a,r.prev=a,e.length++,a}function u(e,t,n){for(var r=t.next,a=0;a<n&&r!==e.tail;a++)r=r.next;t.next=r,r.prev=t,e.length-=a}return a.stringify=function e(t,n){if("string"==typeof t)return t;if(Array.isArray(t)){var a="";return t.forEach((function(t){a+=e(t,n)})),a}var o={type:t.type,content:e(t.content,n),tag:"span",classes:["token",t.type],attributes:{},language:n},i=t.alias;i&&(Array.isArray(i)?Array.prototype.push.apply(o.classes,i):o.classes.push(i)),r.hooks.run("wrap",o);var l="";for(var s in o.attributes)l+=" "+s+'="'+(o.attributes[s]||"").replace(/"/g,"&quot;")+'"';return"<"+o.tag+' class="'+o.classes.join(" ")+'"'+l+">"+o.content+"</"+o.tag+">"},r}(),a=r;r.default=r,a.languages.markup={comment:{pattern:/<!--(?:(?!<!--)[\s\S])*?-->/,greedy:!0},prolog:{pattern:/<\?[\s\S]+?\?>/,greedy:!0},doctype:{pattern:/<!DOCTYPE(?:[^>"'[\]]|"[^"]*"|'[^']*')+(?:\[(?:[^<"'\]]|"[^"]*"|'[^']*'|<(?!!--)|<!--(?:[^-]|-(?!->))*-->)*\]\s*)?>/i,greedy:!0,inside:{"internal-subset":{pattern:/(^[^\[]*\[)[\s\S]+(?=\]>$)/,lookbehind:!0,greedy:!0,inside:null},string:{pattern:/"[^"]*"|'[^']*'/,greedy:!0},punctuation:/^<!|>$|[[\]]/,"doctype-tag":/^DOCTYPE/i,name:/[^\s<>'"]+/}},cdata:{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,greedy:!0},tag:{pattern:/<\/?(?!\d)[^\s>\/=$<%]+(?:\s(?:\s*[^\s>\/=]+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))|(?=[\s/>])))+)?\s*\/?>/,greedy:!0,inside:{tag:{pattern:/^<\/?[^\s>\/]+/,inside:{punctuation:/^<\/?/,namespace:/^[^\s>\/:]+:/}},"special-attr":[],"attr-value":{pattern:/=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+)/,inside:{punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}},punctuation:/\/?>/,"attr-name":{pattern:/[^\s>\/]+/,inside:{namespace:/^[^\s>\/:]+:/}}}},entity:[{pattern:/&[\da-z]{1,8};/i,alias:"named-entity"},/&#x?[\da-f]{1,8};/i]},a.languages.markup.tag.inside["attr-value"].inside.entity=a.languages.markup.entity,a.languages.markup.doctype.inside["internal-subset"].inside=a.languages.markup,a.hooks.add("wrap",(function(e){"entity"===e.type&&(e.attributes.title=e.content.replace(/&amp;/,"&"))})),Object.defineProperty(a.languages.markup.tag,"addInlined",{value:function(e,t){var n={};n["language-"+t]={pattern:/(^<!\[CDATA\[)[\s\S]+?(?=\]\]>$)/i,lookbehind:!0,inside:a.languages[t]},n.cdata=/^<!\[CDATA\[|\]\]>$/i;var r={"included-cdata":{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,inside:n}};r["language-"+t]={pattern:/[\s\S]+/,inside:a.languages[t]};var o={};o[e]={pattern:RegExp(/(<__[^>]*>)(?:<!\[CDATA\[(?:[^\]]|\](?!\]>))*\]\]>|(?!<!\[CDATA\[)[\s\S])*?(?=<\/__>)/.source.replace(/__/g,(function(){return e})),"i"),lookbehind:!0,greedy:!0,inside:r},a.languages.insertBefore("markup","cdata",o)}}),Object.defineProperty(a.languages.markup.tag,"addAttribute",{value:function(e,t){a.languages.markup.tag.inside["special-attr"].push({pattern:RegExp(/(^|["'\s])/.source+"(?:"+e+")"+/\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))/.source,"i"),lookbehind:!0,inside:{"attr-name":/^[^\s=]+/,"attr-value":{pattern:/=[\s\S]+/,inside:{value:{pattern:/(^=\s*(["']|(?!["'])))\S[\s\S]*(?=\2$)/,lookbehind:!0,alias:[t,"language-"+t],inside:a.languages[t]},punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}}}})}}),a.languages.html=a.languages.markup,a.languages.mathml=a.languages.markup,a.languages.svg=a.languages.markup,a.languages.xml=a.languages.extend("markup",{}),a.languages.ssml=a.languages.xml,a.languages.atom=a.languages.xml,a.languages.rss=a.languages.xml,function(e){var t="\\b(?:BASH|BASHOPTS|BASH_ALIASES|BASH_ARGC|BASH_ARGV|BASH_CMDS|BASH_COMPLETION_COMPAT_DIR|BASH_LINENO|BASH_REMATCH|BASH_SOURCE|BASH_VERSINFO|BASH_VERSION|COLORTERM|COLUMNS|COMP_WORDBREAKS|DBUS_SESSION_BUS_ADDRESS|DEFAULTS_PATH|DESKTOP_SESSION|DIRSTACK|DISPLAY|EUID|GDMSESSION|GDM_LANG|GNOME_KEYRING_CONTROL|GNOME_KEYRING_PID|GPG_AGENT_INFO|GROUPS|HISTCONTROL|HISTFILE|HISTFILESIZE|HISTSIZE|HOME|HOSTNAME|HOSTTYPE|IFS|INSTANCE|JOB|LANG|LANGUAGE|LC_ADDRESS|LC_ALL|LC_IDENTIFICATION|LC_MEASUREMENT|LC_MONETARY|LC_NAME|LC_NUMERIC|LC_PAPER|LC_TELEPHONE|LC_TIME|LESSCLOSE|LESSOPEN|LINES|LOGNAME|LS_COLORS|MACHTYPE|MAILCHECK|MANDATORY_PATH|NO_AT_BRIDGE|OLDPWD|OPTERR|OPTIND|ORBIT_SOCKETDIR|OSTYPE|PAPERSIZE|PATH|PIPESTATUS|PPID|PS1|PS2|PS3|PS4|PWD|RANDOM|REPLY|SECONDS|SELINUX_INIT|SESSION|SESSIONTYPE|SESSION_MANAGER|SHELL|SHELLOPTS|SHLVL|SSH_AUTH_SOCK|TERM|UID|UPSTART_EVENTS|UPSTART_INSTANCE|UPSTART_JOB|UPSTART_SESSION|USER|WINDOWID|XAUTHORITY|XDG_CONFIG_DIRS|XDG_CURRENT_DESKTOP|XDG_DATA_DIRS|XDG_GREETER_DATA_DIR|XDG_MENU_PREFIX|XDG_RUNTIME_DIR|XDG_SEAT|XDG_SEAT_PATH|XDG_SESSION_DESKTOP|XDG_SESSION_ID|XDG_SESSION_PATH|XDG_SESSION_TYPE|XDG_VTNR|XMODIFIERS)\\b",n={pattern:/(^(["']?)\w+\2)[ \t]+\S.*/,lookbehind:!0,alias:"punctuation",inside:null},r={bash:n,environment:{pattern:RegExp("\\$"+t),alias:"constant"},variable:[{pattern:/\$?\(\([\s\S]+?\)\)/,greedy:!0,inside:{variable:[{pattern:/(^\$\(\([\s\S]+)\)\)/,lookbehind:!0},/^\$\(\(/],number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee]-?\d+)?/,operator:/--|\+\+|\*\*=?|<<=?|>>=?|&&|\|\||[=!+\-*/%<>^&|]=?|[?~:]/,punctuation:/\(\(?|\)\)?|,|;/}},{pattern:/\$\((?:\([^)]+\)|[^()])+\)|`[^`]+`/,greedy:!0,inside:{variable:/^\$\(|^`|\)$|`$/}},{pattern:/\$\{[^}]+\}/,greedy:!0,inside:{operator:/:[-=?+]?|[!\/]|##?|%%?|\^\^?|,,?/,punctuation:/[\[\]]/,environment:{pattern:RegExp("(\\{)"+t),lookbehind:!0,alias:"constant"}}},/\$(?:\w+|[#?*!@$])/],entity:/\\(?:[abceEfnrtv\\"]|O?[0-7]{1,3}|U[0-9a-fA-F]{8}|u[0-9a-fA-F]{4}|x[0-9a-fA-F]{1,2})/};e.languages.bash={shebang:{pattern:/^#!\s*\/.*/,alias:"important"},comment:{pattern:/(^|[^"{\\$])#.*/,lookbehind:!0},"function-name":[{pattern:/(\bfunction\s+)[\w-]+(?=(?:\s*\(?:\s*\))?\s*\{)/,lookbehind:!0,alias:"function"},{pattern:/\b[\w-]+(?=\s*\(\s*\)\s*\{)/,alias:"function"}],"for-or-select":{pattern:/(\b(?:for|select)\s+)\w+(?=\s+in\s)/,alias:"variable",lookbehind:!0},"assign-left":{pattern:/(^|[\s;|&]|[<>]\()\w+(?=\+?=)/,inside:{environment:{pattern:RegExp("(^|[\\s;|&]|[<>]\\()"+t),lookbehind:!0,alias:"constant"}},alias:"variable",lookbehind:!0},string:[{pattern:/((?:^|[^<])<<-?\s*)(\w+)\s[\s\S]*?(?:\r?\n|\r)\2/,lookbehind:!0,greedy:!0,inside:r},{pattern:/((?:^|[^<])<<-?\s*)(["'])(\w+)\2\s[\s\S]*?(?:\r?\n|\r)\3/,lookbehind:!0,greedy:!0,inside:{bash:n}},{pattern:/(^|[^\\](?:\\\\)*)"(?:\\[\s\S]|\$\([^)]+\)|\$(?!\()|`[^`]+`|[^"\\`$])*"/,lookbehind:!0,greedy:!0,inside:r},{pattern:/(^|[^$\\])'[^']*'/,lookbehind:!0,greedy:!0},{pattern:/\$'(?:[^'\\]|\\[\s\S])*'/,greedy:!0,inside:{entity:r.entity}}],environment:{pattern:RegExp("\\$?"+t),alias:"constant"},variable:r.variable,function:{pattern:/(^|[\s;|&]|[<>]\()(?:add|apropos|apt|apt-cache|apt-get|aptitude|aspell|automysqlbackup|awk|basename|bash|bc|bconsole|bg|bzip2|cal|cat|cfdisk|chgrp|chkconfig|chmod|chown|chroot|cksum|clear|cmp|column|comm|composer|cp|cron|crontab|csplit|curl|cut|date|dc|dd|ddrescue|debootstrap|df|diff|diff3|dig|dir|dircolors|dirname|dirs|dmesg|docker|docker-compose|du|egrep|eject|env|ethtool|expand|expect|expr|fdformat|fdisk|fg|fgrep|file|find|fmt|fold|format|free|fsck|ftp|fuser|gawk|git|gparted|grep|groupadd|groupdel|groupmod|groups|grub-mkconfig|gzip|halt|head|hg|history|host|hostname|htop|iconv|id|ifconfig|ifdown|ifup|import|install|ip|jobs|join|kill|killall|less|link|ln|locate|logname|logrotate|look|lpc|lpr|lprint|lprintd|lprintq|lprm|ls|lsof|lynx|make|man|mc|mdadm|mkconfig|mkdir|mke2fs|mkfifo|mkfs|mkisofs|mknod|mkswap|mmv|more|most|mount|mtools|mtr|mutt|mv|nano|nc|netstat|nice|nl|node|nohup|notify-send|npm|nslookup|op|open|parted|passwd|paste|pathchk|ping|pkill|pnpm|podman|podman-compose|popd|pr|printcap|printenv|ps|pushd|pv|quota|quotacheck|quotactl|ram|rar|rcp|reboot|remsync|rename|renice|rev|rm|rmdir|rpm|rsync|scp|screen|sdiff|sed|sendmail|seq|service|sftp|sh|shellcheck|shuf|shutdown|sleep|slocate|sort|split|ssh|stat|strace|su|sudo|sum|suspend|swapon|sync|tac|tail|tar|tee|time|timeout|top|touch|tr|traceroute|tsort|tty|umount|uname|unexpand|uniq|units|unrar|unshar|unzip|update-grub|uptime|useradd|userdel|usermod|users|uudecode|uuencode|v|vcpkg|vdir|vi|vim|virsh|vmstat|wait|watch|wc|wget|whereis|which|who|whoami|write|xargs|xdg-open|yarn|yes|zenity|zip|zsh|zypper)(?=$|[)\s;|&])/,lookbehind:!0},keyword:{pattern:/(^|[\s;|&]|[<>]\()(?:case|do|done|elif|else|esac|fi|for|function|if|in|select|then|until|while)(?=$|[)\s;|&])/,lookbehind:!0},builtin:{pattern:/(^|[\s;|&]|[<>]\()(?:\.|:|alias|bind|break|builtin|caller|cd|command|continue|declare|echo|enable|eval|exec|exit|export|getopts|hash|help|let|local|logout|mapfile|printf|pwd|read|readarray|readonly|return|set|shift|shopt|source|test|times|trap|type|typeset|ulimit|umask|unalias|unset)(?=$|[)\s;|&])/,lookbehind:!0,alias:"class-name"},boolean:{pattern:/(^|[\s;|&]|[<>]\()(?:false|true)(?=$|[)\s;|&])/,lookbehind:!0},"file-descriptor":{pattern:/\B&\d\b/,alias:"important"},operator:{pattern:/\d?<>|>\||\+=|=[=~]?|!=?|<<[<-]?|[&\d]?>>|\d[<>]&?|[<>][&=]?|&[>&]?|\|[&|]?/,inside:{"file-descriptor":{pattern:/^\d/,alias:"important"}}},punctuation:/\$?\(\(?|\)\)?|\.\.|[{}[\];\\]/,number:{pattern:/(^|\s)(?:[1-9]\d*|0)(?:[.,]\d+)?\b/,lookbehind:!0}},n.inside=e.languages.bash;for(var a=["comment","function-name","for-or-select","assign-left","string","environment","function","keyword","builtin","boolean","file-descriptor","operator","punctuation","number"],o=r.variable[1].inside,i=0;i<a.length;i++)o[a[i]]=e.languages.bash[a[i]];e.languages.shell=e.languages.bash}(a),a.languages.clike={comment:[{pattern:/(^|[^\\])\/\*[\s\S]*?(?:\*\/|$)/,lookbehind:!0,greedy:!0},{pattern:/(^|[^\\:])\/\/.*/,lookbehind:!0,greedy:!0}],string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|trait)\s+|\bcatch\s+\()[\w.\\]+/i,lookbehind:!0,inside:{punctuation:/[.\\]/}},keyword:/\b(?:break|catch|continue|do|else|finally|for|function|if|in|instanceof|new|null|return|throw|try|while)\b/,boolean:/\b(?:false|true)\b/,function:/\b\w+(?=\()/,number:/\b0x[\da-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?/i,operator:/[<>]=?|[!=]=?=?|--?|\+\+?|&&?|\|\|?|[?*/~^%]/,punctuation:/[{}[\];(),.:]/},a.languages.c=a.languages.extend("clike",{comment:{pattern:/\/\/(?:[^\r\n\\]|\\(?:\r\n?|\n|(?![\r\n])))*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},"class-name":{pattern:/(\b(?:enum|struct)\s+(?:__attribute__\s*\(\([\s\S]*?\)\)\s*)?)\w+|\b[a-z]\w*_t\b/,lookbehind:!0},keyword:/\b(?:_Alignas|_Alignof|_Atomic|_Bool|_Complex|_Generic|_Imaginary|_Noreturn|_Static_assert|_Thread_local|__attribute__|asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|inline|int|long|register|return|short|signed|sizeof|static|struct|switch|typedef|typeof|union|unsigned|void|volatile|while)\b/,function:/\b[a-z_]\w*(?=\s*\()/i,number:/(?:\b0x(?:[\da-f]+(?:\.[\da-f]*)?|\.[\da-f]+)(?:p[+-]?\d+)?|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?)[ful]{0,4}/i,operator:/>>=?|<<=?|->|([-+&|:])\1|[?:~]|[-+*/%&|^!=<>]=?/}),a.languages.insertBefore("c","string",{char:{pattern:/'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n]){0,32}'/,greedy:!0}}),a.languages.insertBefore("c","string",{macro:{pattern:/(^[\t ]*)#\s*[a-z](?:[^\r\n\\/]|\/(?!\*)|\/\*(?:[^*]|\*(?!\/))*\*\/|\\(?:\r\n|[\s\S]))*/im,lookbehind:!0,greedy:!0,alias:"property",inside:{string:[{pattern:/^(#\s*include\s*)<[^>]+>/,lookbehind:!0},a.languages.c.string],char:a.languages.c.char,comment:a.languages.c.comment,"macro-name":[{pattern:/(^#\s*define\s+)\w+\b(?!\()/i,lookbehind:!0},{pattern:/(^#\s*define\s+)\w+\b(?=\()/i,lookbehind:!0,alias:"function"}],directive:{pattern:/^(#\s*)[a-z]+/,lookbehind:!0,alias:"keyword"},"directive-hash":/^#/,punctuation:/##|\\(?=[\r\n])/,expression:{pattern:/\S[\s\S]*/,inside:a.languages.c}}}}),a.languages.insertBefore("c","function",{constant:/\b(?:EOF|NULL|SEEK_CUR|SEEK_END|SEEK_SET|__DATE__|__FILE__|__LINE__|__TIMESTAMP__|__TIME__|__func__|stderr|stdin|stdout)\b/}),delete a.languages.c.boolean,function(e){var t=/\b(?:alignas|alignof|asm|auto|bool|break|case|catch|char|char16_t|char32_t|char8_t|class|co_await|co_return|co_yield|compl|concept|const|const_cast|consteval|constexpr|constinit|continue|decltype|default|delete|do|double|dynamic_cast|else|enum|explicit|export|extern|final|float|for|friend|goto|if|import|inline|int|int16_t|int32_t|int64_t|int8_t|long|module|mutable|namespace|new|noexcept|nullptr|operator|override|private|protected|public|register|reinterpret_cast|requires|return|short|signed|sizeof|static|static_assert|static_cast|struct|switch|template|this|thread_local|throw|try|typedef|typeid|typename|uint16_t|uint32_t|uint64_t|uint8_t|union|unsigned|using|virtual|void|volatile|wchar_t|while)\b/,n=/\b(?!<keyword>)\w+(?:\s*\.\s*\w+)*\b/.source.replace(/<keyword>/g,(function(){return t.source}));e.languages.cpp=e.languages.extend("c",{"class-name":[{pattern:RegExp(/(\b(?:class|concept|enum|struct|typename)\s+)(?!<keyword>)\w+/.source.replace(/<keyword>/g,(function(){return t.source}))),lookbehind:!0},/\b[A-Z]\w*(?=\s*::\s*\w+\s*\()/,/\b[A-Z_]\w*(?=\s*::\s*~\w+\s*\()/i,/\b\w+(?=\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>\s*::\s*\w+\s*\()/],keyword:t,number:{pattern:/(?:\b0b[01']+|\b0x(?:[\da-f']+(?:\.[\da-f']*)?|\.[\da-f']+)(?:p[+-]?[\d']+)?|(?:\b[\d']+(?:\.[\d']*)?|\B\.[\d']+)(?:e[+-]?[\d']+)?)[ful]{0,4}/i,greedy:!0},operator:/>>=?|<<=?|->|--|\+\+|&&|\|\||[?:~]|<=>|[-+*/%&|^!=<>]=?|\b(?:and|and_eq|bitand|bitor|not|not_eq|or|or_eq|xor|xor_eq)\b/,boolean:/\b(?:false|true)\b/}),e.languages.insertBefore("cpp","string",{module:{pattern:RegExp(/(\b(?:import|module)\s+)/.source+"(?:"+/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|<[^<>\r\n]*>/.source+"|"+/<mod-name>(?:\s*:\s*<mod-name>)?|:\s*<mod-name>/.source.replace(/<mod-name>/g,(function(){return n}))+")"),lookbehind:!0,greedy:!0,inside:{string:/^[<"][\s\S]+/,operator:/:/,punctuation:/\./}},"raw-string":{pattern:/R"([^()\\ ]{0,16})\([\s\S]*?\)\1"/,alias:"string",greedy:!0}}),e.languages.insertBefore("cpp","keyword",{"generic-function":{pattern:/\b(?!operator\b)[a-z_]\w*\s*<(?:[^<>]|<[^<>]*>)*>(?=\s*\()/i,inside:{function:/^\w+/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:e.languages.cpp}}}}),e.languages.insertBefore("cpp","operator",{"double-colon":{pattern:/::/,alias:"punctuation"}}),e.languages.insertBefore("cpp","class-name",{"base-clause":{pattern:/(\b(?:class|struct)\s+\w+\s*:\s*)[^;{}"'\s]+(?:\s+[^;{}"'\s]+)*(?=\s*[;{])/,lookbehind:!0,greedy:!0,inside:e.languages.extend("cpp",{})}}),e.languages.insertBefore("inside","double-colon",{"class-name":/\b[a-z_]\w*\b(?!\s*::)/i},e.languages.cpp["base-clause"])}(a),function(e){var t=/(?:"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n])*')/;e.languages.css={comment:/\/\*[\s\S]*?\*\//,atrule:{pattern:/@[\w-](?:[^;{\s]|\s+(?![\s{]))*(?:;|(?=\s*\{))/,inside:{rule:/^@[\w-]+/,"selector-function-argument":{pattern:/(\bselector\s*\(\s*(?![\s)]))(?:[^()\s]|\s+(?![\s)])|\((?:[^()]|\([^()]*\))*\))+(?=\s*\))/,lookbehind:!0,alias:"selector"},keyword:{pattern:/(^|[^\w-])(?:and|not|only|or)(?![\w-])/,lookbehind:!0}}},url:{pattern:RegExp("\\burl\\((?:"+t.source+"|"+/(?:[^\\\r\n()"']|\\[\s\S])*/.source+")\\)","i"),greedy:!0,inside:{function:/^url/i,punctuation:/^\(|\)$/,string:{pattern:RegExp("^"+t.source+"$"),alias:"url"}}},selector:{pattern:RegExp("(^|[{}\\s])[^{}\\s](?:[^{};\"'\\s]|\\s+(?![\\s{])|"+t.source+")*(?=\\s*\\{)"),lookbehind:!0},string:{pattern:t,greedy:!0},property:{pattern:/(^|[^-\w\xA0-\uFFFF])(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*(?=\s*:)/i,lookbehind:!0},important:/!important\b/i,function:{pattern:/(^|[^-a-z0-9])[-a-z0-9]+(?=\()/i,lookbehind:!0},punctuation:/[(){};:,]/},e.languages.css.atrule.inside.rest=e.languages.css;var n=e.languages.markup;n&&(n.tag.addInlined("style","css"),n.tag.addAttribute("style","css"))}(a),function(e){var t,n=/("|')(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/;e.languages.css.selector={pattern:e.languages.css.selector.pattern,lookbehind:!0,inside:t={"pseudo-element":/:(?:after|before|first-letter|first-line|selection)|::[-\w]+/,"pseudo-class":/:[-\w]+/,class:/\.[-\w]+/,id:/#[-\w]+/,attribute:{pattern:RegExp("\\[(?:[^[\\]\"']|"+n.source+")*\\]"),greedy:!0,inside:{punctuation:/^\[|\]$/,"case-sensitivity":{pattern:/(\s)[si]$/i,lookbehind:!0,alias:"keyword"},namespace:{pattern:/^(\s*)(?:(?!\s)[-*\w\xA0-\uFFFF])*\|(?!=)/,lookbehind:!0,inside:{punctuation:/\|$/}},"attr-name":{pattern:/^(\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+/,lookbehind:!0},"attr-value":[n,{pattern:/(=\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+(?=\s*$)/,lookbehind:!0}],operator:/[|~*^$]?=/}},"n-th":[{pattern:/(\(\s*)[+-]?\d*[\dn](?:\s*[+-]\s*\d+)?(?=\s*\))/,lookbehind:!0,inside:{number:/[\dn]+/,operator:/[+-]/}},{pattern:/(\(\s*)(?:even|odd)(?=\s*\))/i,lookbehind:!0}],combinator:/>|\+|~|\|\|/,punctuation:/[(),]/}},e.languages.css.atrule.inside["selector-function-argument"].inside=t,e.languages.insertBefore("css","property",{variable:{pattern:/(^|[^-\w\xA0-\uFFFF])--(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*/i,lookbehind:!0}});var r={pattern:/(\b\d+)(?:%|[a-z]+(?![\w-]))/,lookbehind:!0},a={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0};e.languages.insertBefore("css","function",{operator:{pattern:/(\s)[+\-*\/](?=\s)/,lookbehind:!0},hexcode:{pattern:/\B#[\da-f]{3,8}\b/i,alias:"color"},color:[{pattern:/(^|[^\w-])(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)(?![\w-])/i,lookbehind:!0},{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:r,number:a,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:r,number:a})}(a),a.languages.javascript=a.languages.extend("clike",{"class-name":[a.languages.clike["class-name"],{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$A-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\.(?:constructor|prototype))/,lookbehind:!0}],keyword:[{pattern:/((?:^|\})\s*)catch\b/,lookbehind:!0},{pattern:/(^|[^.]|\.\.\.\s*)\b(?:as|assert(?=\s*\{)|async(?=\s*(?:function\b|\(|[$\w\xA0-\uFFFF]|$))|await|break|case|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally(?=\s*(?:\{|$))|for|from(?=\s*(?:['"]|$))|function|(?:get|set)(?=\s*(?:[#\[$\w\xA0-\uFFFF]|$))|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)\b/,lookbehind:!0}],function:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*(?:\.\s*(?:apply|bind|call)\s*)?\()/,number:{pattern:RegExp(/(^|[^\w$])/.source+"(?:"+/NaN|Infinity/.source+"|"+/0[bB][01]+(?:_[01]+)*n?/.source+"|"+/0[oO][0-7]+(?:_[0-7]+)*n?/.source+"|"+/0[xX][\dA-Fa-f]+(?:_[\dA-Fa-f]+)*n?/.source+"|"+/\d+(?:_\d+)*n/.source+"|"+/(?:\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\.\d+(?:_\d+)*)(?:[Ee][+-]?\d+(?:_\d+)*)?/.source+")"+/(?![\w$])/.source),lookbehind:!0},operator:/--|\+\+|\*\*=?|=>|&&=?|\|\|=?|[!=]==|<<=?|>>>?=?|[-+*/%&|^!=<>]=?|\.{3}|\?\?=?|\?\.?|[~:]/}),a.languages.javascript["class-name"][0].pattern=/(\b(?:class|extends|implements|instanceof|interface|new)\s+)[\w.\\]+/,a.languages.insertBefore("javascript","keyword",{regex:{pattern:/((?:^|[^$\w\xA0-\uFFFF."'\])\s]|\b(?:return|yield))\s*)\/(?:\[(?:[^\]\\\r\n]|\\.)*\]|\\.|[^/\\\[\r\n])+\/[dgimyus]{0,7}(?=(?:\s|\/\*(?:[^*]|\*(?!\/))*\*\/)*(?:$|[\r\n,.;:})\]]|\/\/))/,lookbehind:!0,greedy:!0,inside:{"regex-source":{pattern:/^(\/)[\s\S]+(?=\/[a-z]*$)/,lookbehind:!0,alias:"language-regex",inside:a.languages.regex},"regex-delimiter":/^\/|\/$/,"regex-flags":/^[a-z]+$/}},"function-variable":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*[=:]\s*(?:async\s*)?(?:\bfunction\b|(?:\((?:[^()]|\([^()]*\))*\)|(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)\s*=>))/,alias:"function"},parameter:[{pattern:/(function(?:\s+(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)?\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\))/,lookbehind:!0,inside:a.languages.javascript},{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$a-z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*=>)/i,lookbehind:!0,inside:a.languages.javascript},{pattern:/(\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*=>)/,lookbehind:!0,inside:a.languages.javascript},{pattern:/((?:\b|\s|^)(?!(?:as|async|await|break|case|catch|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally|for|from|function|get|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|set|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)(?![$\w\xA0-\uFFFF]))(?:(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*)\(\s*|\]\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*\{)/,lookbehind:!0,inside:a.languages.javascript}],constant:/\b[A-Z](?:[A-Z_]|\dx?)*\b/}),a.languages.insertBefore("javascript","string",{hashbang:{pattern:/^#!.*/,greedy:!0,alias:"comment"},"template-string":{pattern:/`(?:\\[\s\S]|\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}|(?!\$\{)[^\\`])*`/,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},interpolation:{pattern:/((?:^|[^\\])(?:\\{2})*)\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}/,lookbehind:!0,inside:{"interpolation-punctuation":{pattern:/^\$\{|\}$/,alias:"punctuation"},rest:a.languages.javascript}},string:/[\s\S]+/}},"string-property":{pattern:/((?:^|[,{])[ \t]*)(["'])(?:\\(?:\r\n|[\s\S])|(?!\2)[^\\\r\n])*\2(?=\s*:)/m,lookbehind:!0,greedy:!0,alias:"property"}}),a.languages.insertBefore("javascript","operator",{"literal-property":{pattern:/((?:^|[,{])[ \t]*)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*:)/m,lookbehind:!0,alias:"property"}}),a.languages.markup&&(a.languages.markup.tag.addInlined("script","javascript"),a.languages.markup.tag.addAttribute(/on(?:abort|blur|change|click|composition(?:end|start|update)|dblclick|error|focus(?:in|out)?|key(?:down|up)|load|mouse(?:down|enter|leave|move|out|over|up)|reset|resize|scroll|select|slotchange|submit|unload|wheel)/.source,"javascript")),a.languages.js=a.languages.javascript,function(e){var t=/#(?!\{).+/,n={pattern:/#\{[^}]+\}/,alias:"variable"};e.languages.coffeescript=e.languages.extend("javascript",{comment:t,string:[{pattern:/'(?:\\[\s\S]|[^\\'])*'/,greedy:!0},{pattern:/"(?:\\[\s\S]|[^\\"])*"/,greedy:!0,inside:{interpolation:n}}],keyword:/\b(?:and|break|by|catch|class|continue|debugger|delete|do|each|else|extend|extends|false|finally|for|if|in|instanceof|is|isnt|let|loop|namespace|new|no|not|null|of|off|on|or|own|return|super|switch|then|this|throw|true|try|typeof|undefined|unless|until|when|while|window|with|yes|yield)\b/,"class-member":{pattern:/@(?!\d)\w+/,alias:"variable"}}),e.languages.insertBefore("coffeescript","comment",{"multiline-comment":{pattern:/###[\s\S]+?###/,alias:"comment"},"block-regex":{pattern:/\/{3}[\s\S]*?\/{3}/,alias:"regex",inside:{comment:t,interpolation:n}}}),e.languages.insertBefore("coffeescript","string",{"inline-javascript":{pattern:/`(?:\\[\s\S]|[^\\`])*`/,inside:{delimiter:{pattern:/^`|`$/,alias:"punctuation"},script:{pattern:/[\s\S]+/,alias:"language-javascript",inside:e.languages.javascript}}},"multiline-string":[{pattern:/'''[\s\S]*?'''/,greedy:!0,alias:"string"},{pattern:/"""[\s\S]*?"""/,greedy:!0,alias:"string",inside:{interpolation:n}}]}),e.languages.insertBefore("coffeescript","keyword",{property:/(?!\d)\w+(?=\s*:(?!:))/}),delete e.languages.coffeescript["template-string"],e.languages.coffee=e.languages.coffeescript}(a),function(e){var t=/[*&][^\s[\]{},]+/,n=/!(?:<[\w\-%#;/?:@&=+$,.!~*'()[\]]+>|(?:[a-zA-Z\d-]*!)?[\w\-%#;/?:@&=+$.~*'()]+)?/,r="(?:"+n.source+"(?:[ \t]+"+t.source+")?|"+t.source+"(?:[ \t]+"+n.source+")?)",a=/(?:[^\s\x00-\x08\x0e-\x1f!"#%&'*,\-:>?@[\]`{|}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]|[?:-]<PLAIN>)(?:[ \t]*(?:(?![#:])<PLAIN>|:<PLAIN>))*/.source.replace(/<PLAIN>/g,(function(){return/[^\s\x00-\x08\x0e-\x1f,[\]{}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]/.source})),o=/"(?:[^"\\\r\n]|\\.)*"|'(?:[^'\\\r\n]|\\.)*'/.source;function i(e,t){t=(t||"").replace(/m/g,"")+"m";var n=/([:\-,[{]\s*(?:\s<<prop>>[ \t]+)?)(?:<<value>>)(?=[ \t]*(?:$|,|\]|\}|(?:[\r\n]\s*)?#))/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<value>>/g,(function(){return e}));return RegExp(n,t)}e.languages.yaml={scalar:{pattern:RegExp(/([\-:]\s*(?:\s<<prop>>[ \t]+)?[|>])[ \t]*(?:((?:\r?\n|\r)[ \t]+)\S[^\r\n]*(?:\2[^\r\n]+)*)/.source.replace(/<<prop>>/g,(function(){return r}))),lookbehind:!0,alias:"string"},comment:/#.*/,key:{pattern:RegExp(/((?:^|[:\-,[{\r\n?])[ \t]*(?:<<prop>>[ \t]+)?)<<key>>(?=\s*:\s)/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<key>>/g,(function(){return"(?:"+a+"|"+o+")"}))),lookbehind:!0,greedy:!0,alias:"atrule"},directive:{pattern:/(^[ \t]*)%.+/m,lookbehind:!0,alias:"important"},datetime:{pattern:i(/\d{4}-\d\d?-\d\d?(?:[tT]|[ \t]+)\d\d?:\d{2}:\d{2}(?:\.\d*)?(?:[ \t]*(?:Z|[-+]\d\d?(?::\d{2})?))?|\d{4}-\d{2}-\d{2}|\d\d?:\d{2}(?::\d{2}(?:\.\d*)?)?/.source),lookbehind:!0,alias:"number"},boolean:{pattern:i(/false|true/.source,"i"),lookbehind:!0,alias:"important"},null:{pattern:i(/null|~/.source,"i"),lookbehind:!0,alias:"important"},string:{pattern:i(o),lookbehind:!0,greedy:!0},number:{pattern:i(/[+-]?(?:0x[\da-f]+|0o[0-7]+|(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?|\.inf|\.nan)/.source,"i"),lookbehind:!0},tag:n,important:t,punctuation:/---|[:[\]{}\-,|>?]|\.\.\./},e.languages.yml=e.languages.yaml}(a),function(e){var t=/(?:\\.|[^\\\n\r]|(?:\n|\r\n?)(?![\r\n]))/.source;function n(e){return e=e.replace(/<inner>/g,(function(){return t})),RegExp(/((?:^|[^\\])(?:\\{2})*)/.source+"(?:"+e+")")}var r=/(?:\\.|``(?:[^`\r\n]|`(?!`))+``|`[^`\r\n]+`|[^\\|\r\n`])+/.source,a=/\|?__(?:\|__)+\|?(?:(?:\n|\r\n?)|(?![\s\S]))/.source.replace(/__/g,(function(){return r})),o=/\|?[ \t]*:?-{3,}:?[ \t]*(?:\|[ \t]*:?-{3,}:?[ \t]*)+\|?(?:\n|\r\n?)/.source;e.languages.markdown=e.languages.extend("markup",{}),e.languages.insertBefore("markdown","prolog",{"front-matter-block":{pattern:/(^(?:\s*[\r\n])?)---(?!.)[\s\S]*?[\r\n]---(?!.)/,lookbehind:!0,greedy:!0,inside:{punctuation:/^---|---$/,"front-matter":{pattern:/\S+(?:\s+\S+)*/,alias:["yaml","language-yaml"],inside:e.languages.yaml}}},blockquote:{pattern:/^>(?:[\t ]*>)*/m,alias:"punctuation"},table:{pattern:RegExp("^"+a+o+"(?:"+a+")*","m"),inside:{"table-data-rows":{pattern:RegExp("^("+a+o+")(?:"+a+")*$"),lookbehind:!0,inside:{"table-data":{pattern:RegExp(r),inside:e.languages.markdown},punctuation:/\|/}},"table-line":{pattern:RegExp("^("+a+")"+o+"$"),lookbehind:!0,inside:{punctuation:/\||:?-{3,}:?/}},"table-header-row":{pattern:RegExp("^"+a+"$"),inside:{"table-header":{pattern:RegExp(r),alias:"important",inside:e.languages.markdown},punctuation:/\|/}}}},code:[{pattern:/((?:^|\n)[ \t]*\n|(?:^|\r\n?)[ \t]*\r\n?)(?: {4}|\t).+(?:(?:\n|\r\n?)(?: {4}|\t).+)*/,lookbehind:!0,alias:"keyword"},{pattern:/^```[\s\S]*?^```$/m,greedy:!0,inside:{"code-block":{pattern:/^(```.*(?:\n|\r\n?))[\s\S]+?(?=(?:\n|\r\n?)^```$)/m,lookbehind:!0},"code-language":{pattern:/^(```).+/,lookbehind:!0},punctuation:/```/}}],title:[{pattern:/\S.*(?:\n|\r\n?)(?:==+|--+)(?=[ \t]*$)/m,alias:"important",inside:{punctuation:/==+$|--+$/}},{pattern:/(^\s*)#.+/m,lookbehind:!0,alias:"important",inside:{punctuation:/^#+|#+$/}}],hr:{pattern:/(^\s*)([*-])(?:[\t ]*\2){2,}(?=\s*$)/m,lookbehind:!0,alias:"punctuation"},list:{pattern:/(^\s*)(?:[*+-]|\d+\.)(?=[\t ].)/m,lookbehind:!0,alias:"punctuation"},"url-reference":{pattern:/!?\[[^\]]+\]:[\t ]+(?:\S+|<(?:\\.|[^>\\])+>)(?:[\t ]+(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\)))?/,inside:{variable:{pattern:/^(!?\[)[^\]]+/,lookbehind:!0},string:/(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\))$/,punctuation:/^[\[\]!:]|[<>]/},alias:"url"},bold:{pattern:n(/\b__(?:(?!_)<inner>|_(?:(?!_)<inner>)+_)+__\b|\*\*(?:(?!\*)<inner>|\*(?:(?!\*)<inner>)+\*)+\*\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^..)[\s\S]+(?=..$)/,lookbehind:!0,inside:{}},punctuation:/\*\*|__/}},italic:{pattern:n(/\b_(?:(?!_)<inner>|__(?:(?!_)<inner>)+__)+_\b|\*(?:(?!\*)<inner>|\*\*(?:(?!\*)<inner>)+\*\*)+\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^.)[\s\S]+(?=.$)/,lookbehind:!0,inside:{}},punctuation:/[*_]/}},strike:{pattern:n(/(~~?)(?:(?!~)<inner>)+\2/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^~~?)[\s\S]+(?=\1$)/,lookbehind:!0,inside:{}},punctuation:/~~?/}},"code-snippet":{pattern:/(^|[^\\`])(?:``[^`\r\n]+(?:`[^`\r\n]+)*``(?!`)|`[^`\r\n]+`(?!`))/,lookbehind:!0,greedy:!0,alias:["code","keyword"]},url:{pattern:n(/!?\[(?:(?!\])<inner>)+\](?:\([^\s)]+(?:[\t ]+"(?:\\.|[^"\\])*")?\)|[ \t]?\[(?:(?!\])<inner>)+\])/.source),lookbehind:!0,greedy:!0,inside:{operator:/^!/,content:{pattern:/(^\[)[^\]]+(?=\])/,lookbehind:!0,inside:{}},variable:{pattern:/(^\][ \t]?\[)[^\]]+(?=\]$)/,lookbehind:!0},url:{pattern:/(^\]\()[^\s)]+/,lookbehind:!0},string:{pattern:/(^[ \t]+)"(?:\\.|[^"\\])*"(?=\)$)/,lookbehind:!0}}}}),["url","bold","italic","strike"].forEach((function(t){["url","bold","italic","strike","code-snippet"].forEach((function(n){t!==n&&(e.languages.markdown[t].inside.content.inside[n]=e.languages.markdown[n])}))})),e.hooks.add("after-tokenize",(function(e){"markdown"!==e.language&&"md"!==e.language||function e(t){if(t&&"string"!=typeof t)for(var n=0,r=t.length;n<r;n++){var a=t[n];if("code"===a.type){var o=a.content[1],i=a.content[3];if(o&&i&&"code-language"===o.type&&"code-block"===i.type&&"string"==typeof o.content){var l=o.content.replace(/\b#/g,"sharp").replace(/\b\+\+/g,"pp"),s="language-"+(l=(/[a-z][\w-]*/i.exec(l)||[""])[0].toLowerCase());i.alias?"string"==typeof i.alias?i.alias=[i.alias,s]:i.alias.push(s):i.alias=[s]}}else e(a.content)}}(e.tokens)})),e.hooks.add("wrap",(function(t){if("code-block"===t.type){for(var n="",r=0,a=t.classes.length;r<a;r++){var o=t.classes[r],u=/language-(.+)/.exec(o);if(u){n=u[1];break}}var c,d=e.languages[n];if(d)t.content=e.highlight((c=t.content,c.replace(i,"").replace(/&(\w{1,8}|#x?[\da-f]{1,8});/gi,(function(e,t){var n;if("#"===(t=t.toLowerCase())[0])return n="x"===t[1]?parseInt(t.slice(2),16):Number(t.slice(1)),s(n);var r=l[t];return r||e}))),d,n);else if(n&&"none"!==n&&e.plugins.autoloader){var f="md-"+(new Date).valueOf()+"-"+Math.floor(1e16*Math.random());t.attributes.id=f,e.plugins.autoloader.loadLanguages(n,(function(){var t=document.getElementById(f);t&&(t.innerHTML=e.highlight(t.textContent,e.languages[n],n))}))}}}));var i=RegExp(e.languages.markup.tag.pattern.source,"gi"),l={amp:"&",lt:"<",gt:">",quot:'"'},s=String.fromCodePoint||String.fromCharCode;e.languages.md=e.languages.markdown}(a),a.languages.graphql={comment:/#.*/,description:{pattern:/(?:"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*")(?=\s*[a-z_])/i,greedy:!0,alias:"string",inside:{"language-markdown":{pattern:/(^"(?:"")?)(?!\1)[\s\S]+(?=\1$)/,lookbehind:!0,inside:a.languages.markdown}}},string:{pattern:/"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*"/,greedy:!0},number:/(?:\B-|\b)\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,boolean:/\b(?:false|true)\b/,variable:/\$[a-z_]\w*/i,directive:{pattern:/@[a-z_]\w*/i,alias:"function"},"attr-name":{pattern:/\b[a-z_]\w*(?=\s*(?:\((?:[^()"]|"(?:\\.|[^\\"\r\n])*")*\))?:)/i,greedy:!0},"atom-input":{pattern:/\b[A-Z]\w*Input\b/,alias:"class-name"},scalar:/\b(?:Boolean|Float|ID|Int|String)\b/,constant:/\b[A-Z][A-Z_\d]*\b/,"class-name":{pattern:/(\b(?:enum|implements|interface|on|scalar|type|union)\s+|&\s*|:\s*|\[)[A-Z_]\w*/,lookbehind:!0},fragment:{pattern:/(\bfragment\s+|\.{3}\s*(?!on\b))[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-mutation":{pattern:/(\bmutation\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-query":{pattern:/(\bquery\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},keyword:/\b(?:directive|enum|extend|fragment|implements|input|interface|mutation|on|query|repeatable|scalar|schema|subscription|type|union)\b/,operator:/[!=|&]|\.{3}/,"property-query":/\w+(?=\s*\()/,object:/\w+(?=\s*\{)/,punctuation:/[!(){}\[\]:=,]/,property:/\w+/},a.hooks.add("after-tokenize",(function(e){if("graphql"===e.language)for(var t=e.tokens.filter((function(e){return"string"!=typeof e&&"comment"!==e.type&&"scalar"!==e.type})),n=0;n<t.length;){var r=t[n++];if("keyword"===r.type&&"mutation"===r.content){var a=[];if(d(["definition-mutation","punctuation"])&&"("===c(1).content){n+=2;var o=f(/^\($/,/^\)$/);if(-1===o)continue;for(;n<o;n++){var i=c(0);"variable"===i.type&&(p(i,"variable-input"),a.push(i.content))}n=o+1}if(d(["punctuation","property-query"])&&"{"===c(0).content&&(n++,p(c(0),"property-mutation"),a.length>0)){var l=f(/^\{$/,/^\}$/);if(-1===l)continue;for(var s=n;s<l;s++){var u=t[s];"variable"===u.type&&a.indexOf(u.content)>=0&&p(u,"variable-input")}}}}function c(e){return t[n+e]}function d(e,t){t=t||0;for(var n=0;n<e.length;n++){var r=c(n+t);if(!r||r.type!==e[n])return!1}return!0}function f(e,r){for(var a=1,o=n;o<t.length;o++){var i=t[o],l=i.content;if("punctuation"===i.type&&"string"==typeof l)if(e.test(l))a++;else if(r.test(l)&&0===--a)return o}return-1}function p(e,t){var n=e.alias;n?Array.isArray(n)||(e.alias=n=[n]):e.alias=n=[],n.push(t)}})),a.languages.sql={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|(?:--|\/\/|#).*)/,lookbehind:!0},variable:[{pattern:/@(["'`])(?:\\[\s\S]|(?!\1)[^\\])+\1/,greedy:!0},/@[\w.$]+/],string:{pattern:/(^|[^@\\])("|')(?:\\[\s\S]|(?!\2)[^\\]|\2\2)*\2/,greedy:!0,lookbehind:!0},identifier:{pattern:/(^|[^@\\])`(?:\\[\s\S]|[^`\\]|``)*`/,greedy:!0,lookbehind:!0,inside:{punctuation:/^`|`$/}},function:/\b(?:AVG|COUNT|FIRST|FORMAT|LAST|LCASE|LEN|MAX|MID|MIN|MOD|NOW|ROUND|SUM|UCASE)(?=\s*\()/i,keyword:/\b(?:ACTION|ADD|AFTER|ALGORITHM|ALL|ALTER|ANALYZE|ANY|APPLY|AS|ASC|AUTHORIZATION|AUTO_INCREMENT|BACKUP|BDB|BEGIN|BERKELEYDB|BIGINT|BINARY|BIT|BLOB|BOOL|BOOLEAN|BREAK|BROWSE|BTREE|BULK|BY|CALL|CASCADED?|CASE|CHAIN|CHAR(?:ACTER|SET)?|CHECK(?:POINT)?|CLOSE|CLUSTERED|COALESCE|COLLATE|COLUMNS?|COMMENT|COMMIT(?:TED)?|COMPUTE|CONNECT|CONSISTENT|CONSTRAINT|CONTAINS(?:TABLE)?|CONTINUE|CONVERT|CREATE|CROSS|CURRENT(?:_DATE|_TIME|_TIMESTAMP|_USER)?|CURSOR|CYCLE|DATA(?:BASES?)?|DATE(?:TIME)?|DAY|DBCC|DEALLOCATE|DEC|DECIMAL|DECLARE|DEFAULT|DEFINER|DELAYED|DELETE|DELIMITERS?|DENY|DESC|DESCRIBE|DETERMINISTIC|DISABLE|DISCARD|DISK|DISTINCT|DISTINCTROW|DISTRIBUTED|DO|DOUBLE|DROP|DUMMY|DUMP(?:FILE)?|DUPLICATE|ELSE(?:IF)?|ENABLE|ENCLOSED|END|ENGINE|ENUM|ERRLVL|ERRORS|ESCAPED?|EXCEPT|EXEC(?:UTE)?|EXISTS|EXIT|EXPLAIN|EXTENDED|FETCH|FIELDS|FILE|FILLFACTOR|FIRST|FIXED|FLOAT|FOLLOWING|FOR(?: EACH ROW)?|FORCE|FOREIGN|FREETEXT(?:TABLE)?|FROM|FULL|FUNCTION|GEOMETRY(?:COLLECTION)?|GLOBAL|GOTO|GRANT|GROUP|HANDLER|HASH|HAVING|HOLDLOCK|HOUR|IDENTITY(?:COL|_INSERT)?|IF|IGNORE|IMPORT|INDEX|INFILE|INNER|INNODB|INOUT|INSERT|INT|INTEGER|INTERSECT|INTERVAL|INTO|INVOKER|ISOLATION|ITERATE|JOIN|KEYS?|KILL|LANGUAGE|LAST|LEAVE|LEFT|LEVEL|LIMIT|LINENO|LINES|LINESTRING|LOAD|LOCAL|LOCK|LONG(?:BLOB|TEXT)|LOOP|MATCH(?:ED)?|MEDIUM(?:BLOB|INT|TEXT)|MERGE|MIDDLEINT|MINUTE|MODE|MODIFIES|MODIFY|MONTH|MULTI(?:LINESTRING|POINT|POLYGON)|NATIONAL|NATURAL|NCHAR|NEXT|NO|NONCLUSTERED|NULLIF|NUMERIC|OFF?|OFFSETS?|ON|OPEN(?:DATASOURCE|QUERY|ROWSET)?|OPTIMIZE|OPTION(?:ALLY)?|ORDER|OUT(?:ER|FILE)?|OVER|PARTIAL|PARTITION|PERCENT|PIVOT|PLAN|POINT|POLYGON|PRECEDING|PRECISION|PREPARE|PREV|PRIMARY|PRINT|PRIVILEGES|PROC(?:EDURE)?|PUBLIC|PURGE|QUICK|RAISERROR|READS?|REAL|RECONFIGURE|REFERENCES|RELEASE|RENAME|REPEAT(?:ABLE)?|REPLACE|REPLICATION|REQUIRE|RESIGNAL|RESTORE|RESTRICT|RETURN(?:ING|S)?|REVOKE|RIGHT|ROLLBACK|ROUTINE|ROW(?:COUNT|GUIDCOL|S)?|RTREE|RULE|SAVE(?:POINT)?|SCHEMA|SECOND|SELECT|SERIAL(?:IZABLE)?|SESSION(?:_USER)?|SET(?:USER)?|SHARE|SHOW|SHUTDOWN|SIMPLE|SMALLINT|SNAPSHOT|SOME|SONAME|SQL|START(?:ING)?|STATISTICS|STATUS|STRIPED|SYSTEM_USER|TABLES?|TABLESPACE|TEMP(?:ORARY|TABLE)?|TERMINATED|TEXT(?:SIZE)?|THEN|TIME(?:STAMP)?|TINY(?:BLOB|INT|TEXT)|TOP?|TRAN(?:SACTIONS?)?|TRIGGER|TRUNCATE|TSEQUAL|TYPES?|UNBOUNDED|UNCOMMITTED|UNDEFINED|UNION|UNIQUE|UNLOCK|UNPIVOT|UNSIGNED|UPDATE(?:TEXT)?|USAGE|USE|USER|USING|VALUES?|VAR(?:BINARY|CHAR|CHARACTER|YING)|VIEW|WAITFOR|WARNINGS|WHEN|WHERE|WHILE|WITH(?: ROLLUP|IN)?|WORK|WRITE(?:TEXT)?|YEAR)\b/i,boolean:/\b(?:FALSE|NULL|TRUE)\b/i,number:/\b0x[\da-f]+\b|\b\d+(?:\.\d*)?|\B\.\d+\b/i,operator:/[-+*\/=%^~]|&&?|\|\|?|!=?|<(?:=>?|<|>)?|>[>=]?|\b(?:AND|BETWEEN|DIV|ILIKE|IN|IS|LIKE|NOT|OR|REGEXP|RLIKE|SOUNDS LIKE|XOR)\b/i,punctuation:/[;[\]()`,.]/},function(e){var t=e.languages.javascript["template-string"],n=t.pattern.source,r=t.inside.interpolation,a=r.inside["interpolation-punctuation"],o=r.pattern.source;function i(t,r){if(e.languages[t])return{pattern:RegExp("((?:"+r+")\\s*)"+n),lookbehind:!0,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},"embedded-code":{pattern:/[\s\S]+/,alias:t}}}}function l(e,t){return"___"+t.toUpperCase()+"_"+e+"___"}function s(t,n,r){var a={code:t,grammar:n,language:r};return e.hooks.run("before-tokenize",a),a.tokens=e.tokenize(a.code,a.grammar),e.hooks.run("after-tokenize",a),a.tokens}function u(t){var n={};n["interpolation-punctuation"]=a;var o=e.tokenize(t,n);if(3===o.length){var i=[1,1];i.push.apply(i,s(o[1],e.languages.javascript,"javascript")),o.splice.apply(o,i)}return new e.Token("interpolation",o,r.alias,t)}function c(t,n,r){var a=e.tokenize(t,{interpolation:{pattern:RegExp(o),lookbehind:!0}}),i=0,c={},d=s(a.map((function(e){if("string"==typeof e)return e;for(var n,a=e.content;-1!==t.indexOf(n=l(i++,r)););return c[n]=a,n})).join(""),n,r),f=Object.keys(c);return i=0,function e(t){for(var n=0;n<t.length;n++){if(i>=f.length)return;var r=t[n];if("string"==typeof r||"string"==typeof r.content){var a=f[i],o="string"==typeof r?r:r.content,l=o.indexOf(a);if(-1!==l){++i;var s=o.substring(0,l),d=u(c[a]),p=o.substring(l+a.length),h=[];if(s&&h.push(s),h.push(d),p){var m=[p];e(m),h.push.apply(h,m)}"string"==typeof r?(t.splice.apply(t,[n,1].concat(h)),n+=h.length-1):r.content=h}}else{var g=r.content;Array.isArray(g)?e(g):e([g])}}}(d),new e.Token(r,d,"language-"+r,t)}e.languages.javascript["template-string"]=[i("css",/\b(?:styled(?:\([^)]*\))?(?:\s*\.\s*\w+(?:\([^)]*\))*)*|css(?:\s*\.\s*(?:global|resolve))?|createGlobalStyle|keyframes)/.source),i("html",/\bhtml|\.\s*(?:inner|outer)HTML\s*\+?=/.source),i("svg",/\bsvg/.source),i("markdown",/\b(?:markdown|md)/.source),i("graphql",/\b(?:gql|graphql(?:\s*\.\s*experimental)?)/.source),i("sql",/\bsql/.source),t].filter(Boolean);var d={javascript:!0,js:!0,typescript:!0,ts:!0,jsx:!0,tsx:!0};function f(e){return"string"==typeof e?e:Array.isArray(e)?e.map(f).join(""):f(e.content)}e.hooks.add("after-tokenize",(function(t){t.language in d&&function t(n){for(var r=0,a=n.length;r<a;r++){var o=n[r];if("string"!=typeof o){var i=o.content;if(Array.isArray(i))if("template-string"===o.type){var l=i[1];if(3===i.length&&"string"!=typeof l&&"embedded-code"===l.type){var s=f(l),u=l.alias,d=Array.isArray(u)?u[0]:u,p=e.languages[d];if(!p)continue;i[1]=c(s,p,d)}}else t(i);else"string"!=typeof i&&t([i])}}}(t.tokens)}))}(a),function(e){e.languages.typescript=e.languages.extend("javascript",{"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|type)\s+)(?!keyof\b)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?:\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?/,lookbehind:!0,greedy:!0,inside:null},builtin:/\b(?:Array|Function|Promise|any|boolean|console|never|number|string|symbol|unknown)\b/}),e.languages.typescript.keyword.push(/\b(?:abstract|declare|is|keyof|readonly|require)\b/,/\b(?:asserts|infer|interface|module|namespace|type)\b(?=\s*(?:[{_$a-zA-Z\xA0-\uFFFF]|$))/,/\btype\b(?=\s*(?:[\{*]|$))/),delete e.languages.typescript.parameter,delete e.languages.typescript["literal-property"];var t=e.languages.extend("typescript",{});delete t["class-name"],e.languages.typescript["class-name"].inside=t,e.languages.insertBefore("typescript","function",{decorator:{pattern:/@[$\w\xA0-\uFFFF]+/,inside:{at:{pattern:/^@/,alias:"operator"},function:/^[\s\S]+/}},"generic-function":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>(?=\s*\()/,greedy:!0,inside:{function:/^#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:t}}}}),e.languages.ts=e.languages.typescript}(a),function(e){function t(e,t){return RegExp(e.replace(/<ID>/g,(function(){return/(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/.source})),t)}e.languages.insertBefore("javascript","function-variable",{"method-variable":{pattern:RegExp("(\\.\\s*)"+e.languages.javascript["function-variable"].pattern.source),lookbehind:!0,alias:["function-variable","method","function","property-access"]}}),e.languages.insertBefore("javascript","function",{method:{pattern:RegExp("(\\.\\s*)"+e.languages.javascript.function.source),lookbehind:!0,alias:["function","property-access"]}}),e.languages.insertBefore("javascript","constant",{"known-class-name":[{pattern:/\b(?:(?:Float(?:32|64)|(?:Int|Uint)(?:8|16|32)|Uint8Clamped)?Array|ArrayBuffer|BigInt|Boolean|DataView|Date|Error|Function|Intl|JSON|(?:Weak)?(?:Map|Set)|Math|Number|Object|Promise|Proxy|Reflect|RegExp|String|Symbol|WebAssembly)\b/,alias:"class-name"},{pattern:/\b(?:[A-Z]\w*)Error\b/,alias:"class-name"}]}),e.languages.insertBefore("javascript","keyword",{imports:{pattern:t(/(\bimport\b\s*)(?:<ID>(?:\s*,\s*(?:\*\s*as\s+<ID>|\{[^{}]*\}))?|\*\s*as\s+<ID>|\{[^{}]*\})(?=\s*\bfrom\b)/.source),lookbehind:!0,inside:e.languages.javascript},exports:{pattern:t(/(\bexport\b\s*)(?:\*(?:\s*as\s+<ID>)?(?=\s*\bfrom\b)|\{[^{}]*\})/.source),lookbehind:!0,inside:e.languages.javascript}}),e.languages.javascript.keyword.unshift({pattern:/\b(?:as|default|export|from|import)\b/,alias:"module"},{pattern:/\b(?:await|break|catch|continue|do|else|finally|for|if|return|switch|throw|try|while|yield)\b/,alias:"control-flow"},{pattern:/\bnull\b/,alias:["null","nil"]},{pattern:/\bundefined\b/,alias:"nil"}),e.languages.insertBefore("javascript","operator",{spread:{pattern:/\.{3}/,alias:"operator"},arrow:{pattern:/=>/,alias:"operator"}}),e.languages.insertBefore("javascript","punctuation",{"property-access":{pattern:t(/(\.\s*)#?<ID>/.source),lookbehind:!0},"maybe-class-name":{pattern:/(^|[^$\w\xA0-\uFFFF])[A-Z][$\w\xA0-\uFFFF]+/,lookbehind:!0},dom:{pattern:/\b(?:document|(?:local|session)Storage|location|navigator|performance|window)\b/,alias:"variable"},console:{pattern:/\bconsole(?=\s*\.)/,alias:"class-name"}});for(var n=["function","function-variable","method","method-variable","property-access"],r=0;r<n.length;r++){var a=n[r],o=e.languages.javascript[a];"RegExp"===e.util.type(o)&&(o=e.languages.javascript[a]={pattern:o});var i=o.inside||{};o.inside=i,i["maybe-class-name"]=/^[A-Z][\s\S]*/}}(a),function(e){var t=e.util.clone(e.languages.javascript),n=/(?:\s|\/\/.*(?!.)|\/\*(?:[^*]|\*(?!\/))\*\/)/.source,r=/(?:\{(?:\{(?:\{[^{}]*\}|[^{}])*\}|[^{}])*\})/.source,a=/(?:\{<S>*\.{3}(?:[^{}]|<BRACES>)*\})/.source;function o(e,t){return e=e.replace(/<S>/g,(function(){return n})).replace(/<BRACES>/g,(function(){return r})).replace(/<SPREAD>/g,(function(){return a})),RegExp(e,t)}a=o(a).source,e.languages.jsx=e.languages.extend("markup",t),e.languages.jsx.tag.pattern=o(/<\/?(?:[\w.:-]+(?:<S>+(?:[\w.:$-]+(?:=(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s{'"/>=]+|<BRACES>))?|<SPREAD>))*<S>*\/?)?>/.source),e.languages.jsx.tag.inside.tag.pattern=/^<\/?[^\s>\/]*/,e.languages.jsx.tag.inside["attr-value"].pattern=/=(?!\{)(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s'">]+)/,e.languages.jsx.tag.inside.tag.inside["class-name"]=/^[A-Z]\w*(?:\.[A-Z]\w*)*$/,e.languages.jsx.tag.inside.comment=t.comment,e.languages.insertBefore("inside","attr-name",{spread:{pattern:o(/<SPREAD>/.source),inside:e.languages.jsx}},e.languages.jsx.tag),e.languages.insertBefore("inside","special-attr",{script:{pattern:o(/=<BRACES>/.source),alias:"language-javascript",inside:{"script-punctuation":{pattern:/^=(?=\{)/,alias:"punctuation"},rest:e.languages.jsx}}},e.languages.jsx.tag);var i=function(e){return e?"string"==typeof e?e:"string"==typeof e.content?e.content:e.content.map(i).join(""):""},l=function(t){for(var n=[],r=0;r<t.length;r++){var a=t[r],o=!1;if("string"!=typeof a&&("tag"===a.type&&a.content[0]&&"tag"===a.content[0].type?"</"===a.content[0].content[0].content?n.length>0&&n[n.length-1].tagName===i(a.content[0].content[1])&&n.pop():"/>"===a.content[a.content.length-1].content||n.push({tagName:i(a.content[0].content[1]),openedBraces:0}):n.length>0&&"punctuation"===a.type&&"{"===a.content?n[n.length-1].openedBraces++:n.length>0&&n[n.length-1].openedBraces>0&&"punctuation"===a.type&&"}"===a.content?n[n.length-1].openedBraces--:o=!0),(o||"string"==typeof a)&&n.length>0&&0===n[n.length-1].openedBraces){var s=i(a);r<t.length-1&&("string"==typeof t[r+1]||"plain-text"===t[r+1].type)&&(s+=i(t[r+1]),t.splice(r+1,1)),r>0&&("string"==typeof t[r-1]||"plain-text"===t[r-1].type)&&(s=i(t[r-1])+s,t.splice(r-1,1),r--),t[r]=new e.Token("plain-text",s,null,s)}a.content&&"string"!=typeof a.content&&l(a.content)}};e.hooks.add("after-tokenize",(function(e){"jsx"!==e.language&&"tsx"!==e.language||l(e.tokens)}))}(a),function(e){e.languages.diff={coord:[/^(?:\*{3}|-{3}|\+{3}).*$/m,/^@@.*@@$/m,/^\d.*$/m]};var t={"deleted-sign":"-","deleted-arrow":"<","inserted-sign":"+","inserted-arrow":">",unchanged:" ",diff:"!"};Object.keys(t).forEach((function(n){var r=t[n],a=[];/^\w+$/.test(n)||a.push(/\w+/.exec(n)[0]),"diff"===n&&a.push("bold"),e.languages.diff[n]={pattern:RegExp("^(?:["+r+"].*(?:\r\n?|\n|(?![\\s\\S])))+","m"),alias:a,inside:{line:{pattern:/(.)(?=[\s\S]).*(?:\r\n?|\n)?/,lookbehind:!0},prefix:{pattern:/[\s\S]/,alias:/\w+/.exec(n)[0]}}}})),Object.defineProperty(e.languages.diff,"PREFIXES",{value:t})}(a),a.languages.git={comment:/^#.*/m,deleted:/^[-\u2013].*/m,inserted:/^\+.*/m,string:/("|')(?:\\.|(?!\1)[^\\\r\n])*\1/,command:{pattern:/^.*\$ git .*$/m,inside:{parameter:/\s--?\w+/}},coord:/^@@.*@@$/m,"commit-sha1":/^commit \w{40}$/m},a.languages.go=a.languages.extend("clike",{string:{pattern:/(^|[^\\])"(?:\\.|[^"\\\r\n])*"|`[^`]*`/,lookbehind:!0,greedy:!0},keyword:/\b(?:break|case|chan|const|continue|default|defer|else|fallthrough|for|func|go(?:to)?|if|import|interface|map|package|range|return|select|struct|switch|type|var)\b/,boolean:/\b(?:_|false|iota|nil|true)\b/,number:[/\b0(?:b[01_]+|o[0-7_]+)i?\b/i,/\b0x(?:[a-f\d_]+(?:\.[a-f\d_]*)?|\.[a-f\d_]+)(?:p[+-]?\d+(?:_\d+)*)?i?(?!\w)/i,/(?:\b\d[\d_]*(?:\.[\d_]*)?|\B\.\d[\d_]*)(?:e[+-]?[\d_]+)?i?(?!\w)/i],operator:/[*\/%^!=]=?|\+[=+]?|-[=-]?|\|[=|]?|&(?:=|&|\^=?)?|>(?:>=?|=)?|<(?:<=?|=|-)?|:=|\.\.\./,builtin:/\b(?:append|bool|byte|cap|close|complex|complex(?:64|128)|copy|delete|error|float(?:32|64)|u?int(?:8|16|32|64)?|imag|len|make|new|panic|print(?:ln)?|real|recover|rune|string|uintptr)\b/}),a.languages.insertBefore("go","string",{char:{pattern:/'(?:\\.|[^'\\\r\n]){0,10}'/,greedy:!0}}),delete a.languages.go["class-name"],function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,a,o){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(a,(function(e){if("function"==typeof o&&!o(e))return e;for(var a,l=i.length;-1!==n.code.indexOf(a=t(r,l));)++l;return i[l]=e,a})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var a=0,o=Object.keys(n.tokenStack);!function i(l){for(var s=0;s<l.length&&!(a>=o.length);s++){var u=l[s];if("string"==typeof u||u.content&&"string"==typeof u.content){var c=o[a],d=n.tokenStack[c],f="string"==typeof u?u:u.content,p=t(r,c),h=f.indexOf(p);if(h>-1){++a;var m=f.substring(0,h),g=new e.Token(r,e.tokenize(d,n.grammar),"language-"+r,d),v=f.substring(h+p.length),b=[];m&&b.push.apply(b,i([m])),b.push(g),v&&b.push.apply(b,i([v])),"string"==typeof u?l.splice.apply(l,[s,1].concat(b)):u.content=b}}else u.content&&i(u.content)}return l}(n.tokens)}}}})}(a),function(e){e.languages.handlebars={comment:/\{\{![\s\S]*?\}\}/,delimiter:{pattern:/^\{\{\{?|\}\}\}?$/,alias:"punctuation"},string:/(["'])(?:\\.|(?!\1)[^\\\r\n])*\1/,number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee][+-]?\d+)?/,boolean:/\b(?:false|true)\b/,block:{pattern:/^(\s*(?:~\s*)?)[#\/]\S+?(?=\s*(?:~\s*)?$|\s)/,lookbehind:!0,alias:"keyword"},brackets:{pattern:/\[[^\]]+\]/,inside:{punctuation:/\[|\]/,variable:/[\s\S]+/}},punctuation:/[!"#%&':()*+,.\/;<=>@\[\\\]^`{|}~]/,variable:/[^!"#%&'()*+,\/;<=>@\[\\\]^`{|}~\s]+/},e.hooks.add("before-tokenize",(function(t){e.languages["markup-templating"].buildPlaceholders(t,"handlebars",/\{\{\{[\s\S]+?\}\}\}|\{\{[\s\S]+?\}\}/g)})),e.hooks.add("after-tokenize",(function(t){e.languages["markup-templating"].tokenizePlaceholders(t,"handlebars")})),e.languages.hbs=e.languages.handlebars}(a),a.languages.json={property:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?=\s*:)/,lookbehind:!0,greedy:!0},string:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?!\s*:)/,lookbehind:!0,greedy:!0},comment:{pattern:/\/\/.*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},number:/-?\b\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,punctuation:/[{}[\],]/,operator:/:/,boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"}},a.languages.webmanifest=a.languages.json,a.languages.less=a.languages.extend("css",{comment:[/\/\*[\s\S]*?\*\//,{pattern:/(^|[^\\])\/\/.*/,lookbehind:!0}],atrule:{pattern:/@[\w-](?:\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{punctuation:/[:()]/}},selector:{pattern:/(?:@\{[\w-]+\}|[^{};\s@])(?:@\{[\w-]+\}|\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};@\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{variable:/@+[\w-]+/}},property:/(?:@\{[\w-]+\}|[\w-])+(?:\+_?)?(?=\s*:)/,operator:/[+\-*\/]/}),a.languages.insertBefore("less","property",{variable:[{pattern:/@[\w-]+\s*:/,inside:{punctuation:/:/}},/@@?[\w-]+/],"mixin-usage":{pattern:/([{;]\s*)[.#](?!\d)[\w-].*?(?=[(;])/,lookbehind:!0,alias:"function"}}),a.languages.makefile={comment:{pattern:/(^|[^\\])#(?:\\(?:\r\n|[\s\S])|[^\\\r\n])*/,lookbehind:!0},string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"builtin-target":{pattern:/\.[A-Z][^:#=\s]+(?=\s*:(?!=))/,alias:"builtin"},target:{pattern:/^(?:[^:=\s]|[ \t]+(?![\s:]))+(?=\s*:(?!=))/m,alias:"symbol",inside:{variable:/\$+(?:(?!\$)[^(){}:#=\s]+|(?=[({]))/}},variable:/\$+(?:(?!\$)[^(){}:#=\s]+|\([@*%<^+?][DF]\)|(?=[({]))/,keyword:/-include\b|\b(?:define|else|endef|endif|export|ifn?def|ifn?eq|include|override|private|sinclude|undefine|unexport|vpath)\b/,function:{pattern:/(\()(?:abspath|addsuffix|and|basename|call|dir|error|eval|file|filter(?:-out)?|findstring|firstword|flavor|foreach|guile|if|info|join|lastword|load|notdir|or|origin|patsubst|realpath|shell|sort|strip|subst|suffix|value|warning|wildcard|word(?:list|s)?)(?=[ \t])/,lookbehind:!0},operator:/(?:::|[?:+!])?=|[|@]/,punctuation:/[:;(){}]/},a.languages.objectivec=a.languages.extend("c",{string:{pattern:/@?"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},keyword:/\b(?:asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|in|inline|int|long|register|return|self|short|signed|sizeof|static|struct|super|switch|typedef|typeof|union|unsigned|void|volatile|while)\b|(?:@interface|@end|@implementation|@protocol|@class|@public|@protected|@private|@property|@try|@catch|@finally|@throw|@synthesize|@dynamic|@selector)\b/,operator:/-[->]?|\+\+?|!=?|<<?=?|>>?=?|==?|&&?|\|\|?|[~^%?*\/@]/}),delete a.languages.objectivec["class-name"],a.languages.objc=a.languages.objectivec,a.languages.ocaml={comment:{pattern:/\(\*[\s\S]*?\*\)/,greedy:!0},char:{pattern:/'(?:[^\\\r\n']|\\(?:.|[ox]?[0-9a-f]{1,3}))'/i,greedy:!0},string:[{pattern:/"(?:\\(?:[\s\S]|\r\n)|[^\\\r\n"])*"/,greedy:!0},{pattern:/\{([a-z_]*)\|[\s\S]*?\|\1\}/,greedy:!0}],number:[/\b(?:0b[01][01_]*|0o[0-7][0-7_]*)\b/i,/\b0x[a-f0-9][a-f0-9_]*(?:\.[a-f0-9_]*)?(?:p[+-]?\d[\d_]*)?(?!\w)/i,/\b\d[\d_]*(?:\.[\d_]*)?(?:e[+-]?\d[\d_]*)?(?!\w)/i],directive:{pattern:/\B#\w+/,alias:"property"},label:{pattern:/\B~\w+/,alias:"property"},"type-variable":{pattern:/\B'\w+/,alias:"function"},variant:{pattern:/`\w+/,alias:"symbol"},keyword:/\b(?:as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|match|method|module|mutable|new|nonrec|object|of|open|private|rec|sig|struct|then|to|try|type|val|value|virtual|when|where|while|with)\b/,boolean:/\b(?:false|true)\b/,"operator-like-punctuation":{pattern:/\[[<>|]|[>|]\]|\{<|>\}/,alias:"punctuation"},operator:/\.[.~]|:[=>]|[=<>@^|&+\-*\/$%!?~][!$%&*+\-.\/:<=>?@^|~]*|\b(?:and|asr|land|lor|lsl|lsr|lxor|mod|or)\b/,punctuation:/;;|::|[(){}\[\].,:;#]|\b_\b/},a.languages.python={comment:{pattern:/(^|[^\\])#.*/,lookbehind:!0,greedy:!0},"string-interpolation":{pattern:/(?:f|fr|rf)(?:("""|''')[\s\S]*?\1|("|')(?:\\.|(?!\2)[^\\\r\n])*\2)/i,greedy:!0,inside:{interpolation:{pattern:/((?:^|[^{])(?:\{\{)*)\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}])+\})+\})+\}/,lookbehind:!0,inside:{"format-spec":{pattern:/(:)[^:(){}]+(?=\}$)/,lookbehind:!0},"conversion-option":{pattern:/![sra](?=[:}]$)/,alias:"punctuation"},rest:null}},string:/[\s\S]+/}},"triple-quoted-string":{pattern:/(?:[rub]|br|rb)?("""|''')[\s\S]*?\1/i,greedy:!0,alias:"string"},string:{pattern:/(?:[rub]|br|rb)?("|')(?:\\.|(?!\1)[^\\\r\n])*\1/i,greedy:!0},function:{pattern:/((?:^|\s)def[ \t]+)[a-zA-Z_]\w*(?=\s*\()/g,lookbehind:!0},"class-name":{pattern:/(\bclass\s+)\w+/i,lookbehind:!0},decorator:{pattern:/(^[\t ]*)@\w+(?:\.\w+)*/m,lookbehind:!0,alias:["annotation","punctuation"],inside:{punctuation:/\./}},keyword:/\b(?:_(?=\s*:)|and|as|assert|async|await|break|case|class|continue|def|del|elif|else|except|exec|finally|for|from|global|if|import|in|is|lambda|match|nonlocal|not|or|pass|print|raise|return|try|while|with|yield)\b/,builtin:/\b(?:__import__|abs|all|any|apply|ascii|basestring|bin|bool|buffer|bytearray|bytes|callable|chr|classmethod|cmp|coerce|compile|complex|delattr|dict|dir|divmod|enumerate|eval|execfile|file|filter|float|format|frozenset|getattr|globals|hasattr|hash|help|hex|id|input|int|intern|isinstance|issubclass|iter|len|list|locals|long|map|max|memoryview|min|next|object|oct|open|ord|pow|property|range|raw_input|reduce|reload|repr|reversed|round|set|setattr|slice|sorted|staticmethod|str|sum|super|tuple|type|unichr|unicode|vars|xrange|zip)\b/,boolean:/\b(?:False|None|True)\b/,number:/\b0(?:b(?:_?[01])+|o(?:_?[0-7])+|x(?:_?[a-f0-9])+)\b|(?:\b\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\B\.\d+(?:_\d+)*)(?:e[+-]?\d+(?:_\d+)*)?j?(?!\w)/i,operator:/[-+%=]=?|!=|:=|\*\*?=?|\/\/?=?|<[<=>]?|>[=>]?|[&|^~]/,punctuation:/[{}[\];(),.:]/},a.languages.python["string-interpolation"].inside.interpolation.inside.rest=a.languages.python,a.languages.py=a.languages.python,a.languages.reason=a.languages.extend("clike",{string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^\\\r\n"])*"/,greedy:!0},"class-name":/\b[A-Z]\w*/,keyword:/\b(?:and|as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|method|module|mutable|new|nonrec|object|of|open|or|private|rec|sig|struct|switch|then|to|try|type|val|virtual|when|while|with)\b/,operator:/\.{3}|:[:=]|\|>|->|=(?:==?|>)?|<=?|>=?|[|^?'#!~`]|[+\-*\/]\.?|\b(?:asr|land|lor|lsl|lsr|lxor|mod)\b/}),a.languages.insertBefore("reason","class-name",{char:{pattern:/'(?:\\x[\da-f]{2}|\\o[0-3][0-7][0-7]|\\\d{3}|\\.|[^'\\\r\n])'/,greedy:!0},constructor:/\b[A-Z]\w*\b(?!\s*\.)/,label:{pattern:/\b[a-z]\w*(?=::)/,alias:"symbol"}}),delete a.languages.reason.function,function(e){e.languages.sass=e.languages.extend("css",{comment:{pattern:/^([ \t]*)\/[\/*].*(?:(?:\r?\n|\r)\1[ \t].+)*/m,lookbehind:!0,greedy:!0}}),e.languages.insertBefore("sass","atrule",{"atrule-line":{pattern:/^(?:[ \t]*)[@+=].+/m,greedy:!0,inside:{atrule:/(?:@[\w-]+|[+=])/}}}),delete e.languages.sass.atrule;var t=/\$[-\w]+|#\{\$[-\w]+\}/,n=[/[+*\/%]|[=!]=|<=?|>=?|\b(?:and|not|or)\b/,{pattern:/(\s)-(?=\s)/,lookbehind:!0}];e.languages.insertBefore("sass","property",{"variable-line":{pattern:/^[ \t]*\$.+/m,greedy:!0,inside:{punctuation:/:/,variable:t,operator:n}},"property-line":{pattern:/^[ \t]*(?:[^:\s]+ *:.*|:[^:\s].*)/m,greedy:!0,inside:{property:[/[^:\s]+(?=\s*:)/,{pattern:/(:)[^:\s]+/,lookbehind:!0}],punctuation:/:/,variable:t,operator:n,important:e.languages.sass.important}}}),delete e.languages.sass.property,delete e.languages.sass.important,e.languages.insertBefore("sass","punctuation",{selector:{pattern:/^([ \t]*)\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*(?:,(?:\r?\n|\r)\1[ \t]+\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*)*/m,lookbehind:!0,greedy:!0}})}(a),a.languages.scss=a.languages.extend("css",{comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},atrule:{pattern:/@[\w-](?:\([^()]+\)|[^()\s]|\s+(?!\s))*?(?=\s+[{;])/,inside:{rule:/@[\w-]+/}},url:/(?:[-a-z]+-)?url(?=\()/i,selector:{pattern:/(?=\S)[^@;{}()]?(?:[^@;{}()\s]|\s+(?!\s)|#\{\$[-\w]+\})+(?=\s*\{(?:\}|\s|[^}][^:{}]*[:{][^}]))/,inside:{parent:{pattern:/&/,alias:"important"},placeholder:/%[-\w]+/,variable:/\$[-\w]+|#\{\$[-\w]+\}/}},property:{pattern:/(?:[-\w]|\$[-\w]|#\{\$[-\w]+\})+(?=\s*:)/,inside:{variable:/\$[-\w]+|#\{\$[-\w]+\}/}}}),a.languages.insertBefore("scss","atrule",{keyword:[/@(?:content|debug|each|else(?: if)?|extend|for|forward|function|if|import|include|mixin|return|use|warn|while)\b/i,{pattern:/( )(?:from|through)(?= )/,lookbehind:!0}]}),a.languages.insertBefore("scss","important",{variable:/\$[-\w]+|#\{\$[-\w]+\}/}),a.languages.insertBefore("scss","function",{"module-modifier":{pattern:/\b(?:as|hide|show|with)\b/i,alias:"keyword"},placeholder:{pattern:/%[-\w]+/,alias:"selector"},statement:{pattern:/\B!(?:default|optional)\b/i,alias:"keyword"},boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"},operator:{pattern:/(\s)(?:[-+*\/%]|[=!]=|<=?|>=?|and|not|or)(?=\s)/,lookbehind:!0}}),a.languages.scss.atrule.inside.rest=a.languages.scss,function(e){var t={pattern:/(\b\d+)(?:%|[a-z]+)/,lookbehind:!0},n={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0},r={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},url:{pattern:/\burl\((["']?).*?\1\)/i,greedy:!0},string:{pattern:/("|')(?:(?!\1)[^\\\r\n]|\\(?:\r\n|[\s\S]))*\1/,greedy:!0},interpolation:null,func:null,important:/\B!(?:important|optional)\b/i,keyword:{pattern:/(^|\s+)(?:(?:else|for|if|return|unless)(?=\s|$)|@[\w-]+)/,lookbehind:!0},hexcode:/#[\da-f]{3,6}/i,color:[/\b(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)\b/i,{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:t,number:n,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:t,boolean:/\b(?:false|true)\b/,operator:[/~|[+!\/%<>?=]=?|[-:]=|\*[*=]?|\.{2,3}|&&|\|\||\B-\B|\b(?:and|in|is(?: a| defined| not|nt)?|not|or)\b/],number:n,punctuation:/[{}()\[\];:,]/};r.interpolation={pattern:/\{[^\r\n}:]+\}/,alias:"variable",inside:{delimiter:{pattern:/^\{|\}$/,alias:"punctuation"},rest:r}},r.func={pattern:/[\w-]+\([^)]*\).*/,inside:{function:/^[^(]+/,rest:r}},e.languages.stylus={"atrule-declaration":{pattern:/(^[ \t]*)@.+/m,lookbehind:!0,inside:{atrule:/^@[\w-]+/,rest:r}},"variable-declaration":{pattern:/(^[ \t]*)[\w$-]+\s*.?=[ \t]*(?:\{[^{}]*\}|\S.*|$)/m,lookbehind:!0,inside:{variable:/^\S+/,rest:r}},statement:{pattern:/(^[ \t]*)(?:else|for|if|return|unless)[ \t].+/m,lookbehind:!0,inside:{keyword:/^\S+/,rest:r}},"property-declaration":{pattern:/((?:^|\{)([ \t]*))(?:[\w-]|\{[^}\r\n]+\})+(?:\s*:\s*|[ \t]+)(?!\s)[^{\r\n]*(?:;|[^{\r\n,]$(?!(?:\r?\n|\r)(?:\{|\2[ \t])))/m,lookbehind:!0,inside:{property:{pattern:/^[^\s:]+/,inside:{interpolation:r.interpolation}},rest:r}},selector:{pattern:/(^[ \t]*)(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)(?:(?:\r?\n|\r)(?:\1(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)))*(?:,$|\{|(?=(?:\r?\n|\r)(?:\{|\1[ \t])))/m,lookbehind:!0,inside:{interpolation:r.interpolation,comment:r.comment,punctuation:/[{},]/}},func:r.func,string:r.string,comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0,greedy:!0},interpolation:r.interpolation,punctuation:/[{}()\[\];:.]/}}(a),function(e){var t=e.util.clone(e.languages.typescript);e.languages.tsx=e.languages.extend("jsx",t),delete e.languages.tsx.parameter,delete e.languages.tsx["literal-property"];var n=e.languages.tsx.tag;n.pattern=RegExp(/(^|[^\w$]|(?=<\/))/.source+"(?:"+n.pattern.source+")",n.pattern.flags),n.lookbehind=!0}(a),a.languages.wasm={comment:[/\(;[\s\S]*?;\)/,{pattern:/;;.*/,greedy:!0}],string:{pattern:/"(?:\\[\s\S]|[^"\\])*"/,greedy:!0},keyword:[{pattern:/\b(?:align|offset)=/,inside:{operator:/=/}},{pattern:/\b(?:(?:f32|f64|i32|i64)(?:\.(?:abs|add|and|ceil|clz|const|convert_[su]\/i(?:32|64)|copysign|ctz|demote\/f64|div(?:_[su])?|eqz?|extend_[su]\/i32|floor|ge(?:_[su])?|gt(?:_[su])?|le(?:_[su])?|load(?:(?:8|16|32)_[su])?|lt(?:_[su])?|max|min|mul|neg?|nearest|or|popcnt|promote\/f32|reinterpret\/[fi](?:32|64)|rem_[su]|rot[lr]|shl|shr_[su]|sqrt|store(?:8|16|32)?|sub|trunc(?:_[su]\/f(?:32|64))?|wrap\/i64|xor))?|memory\.(?:grow|size))\b/,inside:{punctuation:/\./}},/\b(?:anyfunc|block|br(?:_if|_table)?|call(?:_indirect)?|data|drop|elem|else|end|export|func|get_(?:global|local)|global|if|import|local|loop|memory|module|mut|nop|offset|param|result|return|select|set_(?:global|local)|start|table|tee_local|then|type|unreachable)\b/],variable:/\$[\w!#$%&'*+\-./:<=>?@\\^`|~]+/,number:/[+-]?\b(?:\d(?:_?\d)*(?:\.\d(?:_?\d)*)?(?:[eE][+-]?\d(?:_?\d)*)?|0x[\da-fA-F](?:_?[\da-fA-F])*(?:\.[\da-fA-F](?:_?[\da-fA-D])*)?(?:[pP][+-]?\d(?:_?\d)*)?)\b|\binf\b|\bnan(?::0x[\da-fA-F](?:_?[\da-fA-D])*)?\b/,punctuation:/[()]/};const o=a},9901:e=>{e.exports&&(e.exports={core:{meta:{path:"components/prism-core.js",option:"mandatory"},core:"Core"},themes:{meta:{path:"themes/{id}.css",link:"index.html?theme={id}",exclusive:!0},prism:{title:"Default",option:"default"},"prism-dark":"Dark","prism-funky":"Funky","prism-okaidia":{title:"Okaidia",owner:"ocodia"},"prism-twilight":{title:"Twilight",owner:"remybach"},"prism-coy":{title:"Coy",owner:"tshedor"},"prism-solarizedlight":{title:"Solarized Light",owner:"hectormatos2011 "},"prism-tomorrow":{title:"Tomorrow Night",owner:"Rosey"}},languages:{meta:{path:"components/prism-{id}",noCSS:!0,examplesPath:"examples/prism-{id}",addCheckAll:!0},markup:{title:"Markup",alias:["html","xml","svg","mathml","ssml","atom","rss"],aliasTitles:{html:"HTML",xml:"XML",svg:"SVG",mathml:"MathML",ssml:"SSML",atom:"Atom",rss:"RSS"},option:"default"},css:{title:"CSS",option:"default",modify:"markup"},clike:{title:"C-like",option:"default"},javascript:{title:"JavaScript",require:"clike",modify:"markup",optional:"regex",alias:"js",option:"default"},abap:{title:"ABAP",owner:"dellagustin"},abnf:{title:"ABNF",owner:"RunDevelopment"},actionscript:{title:"ActionScript",require:"javascript",modify:"markup",owner:"Golmote"},ada:{title:"Ada",owner:"Lucretia"},agda:{title:"Agda",owner:"xy-ren"},al:{title:"AL",owner:"RunDevelopment"},antlr4:{title:"ANTLR4",alias:"g4",owner:"RunDevelopment"},apacheconf:{title:"Apache Configuration",owner:"GuiTeK"},apex:{title:"Apex",require:["clike","sql"],owner:"RunDevelopment"},apl:{title:"APL",owner:"ngn"},applescript:{title:"AppleScript",owner:"Golmote"},aql:{title:"AQL",owner:"RunDevelopment"},arduino:{title:"Arduino",require:"cpp",alias:"ino",owner:"dkern"},arff:{title:"ARFF",owner:"Golmote"},armasm:{title:"ARM Assembly",alias:"arm-asm",owner:"RunDevelopment"},arturo:{title:"Arturo",alias:"art",optional:["bash","css","javascript","markup","markdown","sql"],owner:"drkameleon"},asciidoc:{alias:"adoc",title:"AsciiDoc",owner:"Golmote"},aspnet:{title:"ASP.NET (C#)",require:["markup","csharp"],owner:"nauzilus"},asm6502:{title:"6502 Assembly",owner:"kzurawel"},asmatmel:{title:"Atmel AVR Assembly",owner:"cerkit"},autohotkey:{title:"AutoHotkey",owner:"aviaryan"},autoit:{title:"AutoIt",owner:"Golmote"},avisynth:{title:"AviSynth",alias:"avs",owner:"Zinfidel"},"avro-idl":{title:"Avro IDL",alias:"avdl",owner:"RunDevelopment"},awk:{title:"AWK",alias:"gawk",aliasTitles:{gawk:"GAWK"},owner:"RunDevelopment"},bash:{title:"Bash",alias:["sh","shell"],aliasTitles:{sh:"Shell",shell:"Shell"},owner:"zeitgeist87"},basic:{title:"BASIC",owner:"Golmote"},batch:{title:"Batch",owner:"Golmote"},bbcode:{title:"BBcode",alias:"shortcode",aliasTitles:{shortcode:"Shortcode"},owner:"RunDevelopment"},bbj:{title:"BBj",owner:"hyyan"},bicep:{title:"Bicep",owner:"johnnyreilly"},birb:{title:"Birb",require:"clike",owner:"Calamity210"},bison:{title:"Bison",require:"c",owner:"Golmote"},bnf:{title:"BNF",alias:"rbnf",aliasTitles:{rbnf:"RBNF"},owner:"RunDevelopment"},bqn:{title:"BQN",owner:"yewscion"},brainfuck:{title:"Brainfuck",owner:"Golmote"},brightscript:{title:"BrightScript",owner:"RunDevelopment"},bro:{title:"Bro",owner:"wayward710"},bsl:{title:"BSL (1C:Enterprise)",alias:"oscript",aliasTitles:{oscript:"OneScript"},owner:"Diversus23"},c:{title:"C",require:"clike",owner:"zeitgeist87"},csharp:{title:"C#",require:"clike",alias:["cs","dotnet"],owner:"mvalipour"},cpp:{title:"C++",require:"c",owner:"zeitgeist87"},cfscript:{title:"CFScript",require:"clike",alias:"cfc",owner:"mjclemente"},chaiscript:{title:"ChaiScript",require:["clike","cpp"],owner:"RunDevelopment"},cil:{title:"CIL",owner:"sbrl"},cilkc:{title:"Cilk/C",require:"c",alias:"cilk-c",owner:"OpenCilk"},cilkcpp:{title:"Cilk/C++",require:"cpp",alias:["cilk-cpp","cilk"],owner:"OpenCilk"},clojure:{title:"Clojure",owner:"troglotit"},cmake:{title:"CMake",owner:"mjrogozinski"},cobol:{title:"COBOL",owner:"RunDevelopment"},coffeescript:{title:"CoffeeScript",require:"javascript",alias:"coffee",owner:"R-osey"},concurnas:{title:"Concurnas",alias:"conc",owner:"jasontatton"},csp:{title:"Content-Security-Policy",owner:"ScottHelme"},cooklang:{title:"Cooklang",owner:"ahue"},coq:{title:"Coq",owner:"RunDevelopment"},crystal:{title:"Crystal",require:"ruby",owner:"MakeNowJust"},"css-extras":{title:"CSS Extras",require:"css",modify:"css",owner:"milesj"},csv:{title:"CSV",owner:"RunDevelopment"},cue:{title:"CUE",owner:"RunDevelopment"},cypher:{title:"Cypher",owner:"RunDevelopment"},d:{title:"D",require:"clike",owner:"Golmote"},dart:{title:"Dart",require:"clike",owner:"Golmote"},dataweave:{title:"DataWeave",owner:"machaval"},dax:{title:"DAX",owner:"peterbud"},dhall:{title:"Dhall",owner:"RunDevelopment"},diff:{title:"Diff",owner:"uranusjr"},django:{title:"Django/Jinja2",require:"markup-templating",alias:"jinja2",owner:"romanvm"},"dns-zone-file":{title:"DNS zone file",owner:"RunDevelopment",alias:"dns-zone"},docker:{title:"Docker",alias:"dockerfile",owner:"JustinBeckwith"},dot:{title:"DOT (Graphviz)",alias:"gv",optional:"markup",owner:"RunDevelopment"},ebnf:{title:"EBNF",owner:"RunDevelopment"},editorconfig:{title:"EditorConfig",owner:"osipxd"},eiffel:{title:"Eiffel",owner:"Conaclos"},ejs:{title:"EJS",require:["javascript","markup-templating"],owner:"RunDevelopment",alias:"eta",aliasTitles:{eta:"Eta"}},elixir:{title:"Elixir",owner:"Golmote"},elm:{title:"Elm",owner:"zwilias"},etlua:{title:"Embedded Lua templating",require:["lua","markup-templating"],owner:"RunDevelopment"},erb:{title:"ERB",require:["ruby","markup-templating"],owner:"Golmote"},erlang:{title:"Erlang",owner:"Golmote"},"excel-formula":{title:"Excel Formula",alias:["xlsx","xls"],owner:"RunDevelopment"},fsharp:{title:"F#",require:"clike",owner:"simonreynolds7"},factor:{title:"Factor",owner:"catb0t"},false:{title:"False",owner:"edukisto"},"firestore-security-rules":{title:"Firestore security rules",require:"clike",owner:"RunDevelopment"},flow:{title:"Flow",require:"javascript",owner:"Golmote"},fortran:{title:"Fortran",owner:"Golmote"},ftl:{title:"FreeMarker Template Language",require:"markup-templating",owner:"RunDevelopment"},gml:{title:"GameMaker Language",alias:"gamemakerlanguage",require:"clike",owner:"LiarOnce"},gap:{title:"GAP (CAS)",owner:"RunDevelopment"},gcode:{title:"G-code",owner:"RunDevelopment"},gdscript:{title:"GDScript",owner:"RunDevelopment"},gedcom:{title:"GEDCOM",owner:"Golmote"},gettext:{title:"gettext",alias:"po",owner:"RunDevelopment"},gherkin:{title:"Gherkin",owner:"hason"},git:{title:"Git",owner:"lgiraudel"},glsl:{title:"GLSL",require:"c",owner:"Golmote"},gn:{title:"GN",alias:"gni",owner:"RunDevelopment"},"linker-script":{title:"GNU Linker Script",alias:"ld",owner:"RunDevelopment"},go:{title:"Go",require:"clike",owner:"arnehormann"},"go-module":{title:"Go module",alias:"go-mod",owner:"RunDevelopment"},gradle:{title:"Gradle",require:"clike",owner:"zeabdelkhalek-badido18"},graphql:{title:"GraphQL",optional:"markdown",owner:"Golmote"},groovy:{title:"Groovy",require:"clike",owner:"robfletcher"},haml:{title:"Haml",require:"ruby",optional:["css","css-extras","coffeescript","erb","javascript","less","markdown","scss","textile"],owner:"Golmote"},handlebars:{title:"Handlebars",require:"markup-templating",alias:["hbs","mustache"],aliasTitles:{mustache:"Mustache"},owner:"Golmote"},haskell:{title:"Haskell",alias:"hs",owner:"bholst"},haxe:{title:"Haxe",require:"clike",optional:"regex",owner:"Golmote"},hcl:{title:"HCL",owner:"outsideris"},hlsl:{title:"HLSL",require:"c",owner:"RunDevelopment"},hoon:{title:"Hoon",owner:"matildepark"},http:{title:"HTTP",optional:["csp","css","hpkp","hsts","javascript","json","markup","uri"],owner:"danielgtaylor"},hpkp:{title:"HTTP Public-Key-Pins",owner:"ScottHelme"},hsts:{title:"HTTP Strict-Transport-Security",owner:"ScottHelme"},ichigojam:{title:"IchigoJam",owner:"BlueCocoa"},icon:{title:"Icon",owner:"Golmote"},"icu-message-format":{title:"ICU Message Format",owner:"RunDevelopment"},idris:{title:"Idris",alias:"idr",owner:"KeenS",require:"haskell"},ignore:{title:".ignore",owner:"osipxd",alias:["gitignore","hgignore","npmignore"],aliasTitles:{gitignore:".gitignore",hgignore:".hgignore",npmignore:".npmignore"}},inform7:{title:"Inform 7",owner:"Golmote"},ini:{title:"Ini",owner:"aviaryan"},io:{title:"Io",owner:"AlesTsurko"},j:{title:"J",owner:"Golmote"},java:{title:"Java",require:"clike",owner:"sherblot"},javadoc:{title:"JavaDoc",require:["markup","java","javadoclike"],modify:"java",optional:"scala",owner:"RunDevelopment"},javadoclike:{title:"JavaDoc-like",modify:["java","javascript","php"],owner:"RunDevelopment"},javastacktrace:{title:"Java stack trace",owner:"RunDevelopment"},jexl:{title:"Jexl",owner:"czosel"},jolie:{title:"Jolie",require:"clike",owner:"thesave"},jq:{title:"JQ",owner:"RunDevelopment"},jsdoc:{title:"JSDoc",require:["javascript","javadoclike","typescript"],modify:"javascript",optional:["actionscript","coffeescript"],owner:"RunDevelopment"},"js-extras":{title:"JS Extras",require:"javascript",modify:"javascript",optional:["actionscript","coffeescript","flow","n4js","typescript"],owner:"RunDevelopment"},json:{title:"JSON",alias:"webmanifest",aliasTitles:{webmanifest:"Web App Manifest"},owner:"CupOfTea696"},json5:{title:"JSON5",require:"json",owner:"RunDevelopment"},jsonp:{title:"JSONP",require:"json",owner:"RunDevelopment"},jsstacktrace:{title:"JS stack trace",owner:"sbrl"},"js-templates":{title:"JS Templates",require:"javascript",modify:"javascript",optional:["css","css-extras","graphql","markdown","markup","sql"],owner:"RunDevelopment"},julia:{title:"Julia",owner:"cdagnino"},keepalived:{title:"Keepalived Configure",owner:"dev-itsheng"},keyman:{title:"Keyman",owner:"mcdurdin"},kotlin:{title:"Kotlin",alias:["kt","kts"],aliasTitles:{kts:"Kotlin Script"},require:"clike",owner:"Golmote"},kumir:{title:"KuMir (\u041a\u0443\u041c\u0438\u0440)",alias:"kum",owner:"edukisto"},kusto:{title:"Kusto",owner:"RunDevelopment"},latex:{title:"LaTeX",alias:["tex","context"],aliasTitles:{tex:"TeX",context:"ConTeXt"},owner:"japborst"},latte:{title:"Latte",require:["clike","markup-templating","php"],owner:"nette"},less:{title:"Less",require:"css",optional:"css-extras",owner:"Golmote"},lilypond:{title:"LilyPond",require:"scheme",alias:"ly",owner:"RunDevelopment"},liquid:{title:"Liquid",require:"markup-templating",owner:"cinhtau"},lisp:{title:"Lisp",alias:["emacs","elisp","emacs-lisp"],owner:"JuanCaicedo"},livescript:{title:"LiveScript",owner:"Golmote"},llvm:{title:"LLVM IR",owner:"porglezomp"},log:{title:"Log file",optional:"javastacktrace",owner:"RunDevelopment"},lolcode:{title:"LOLCODE",owner:"Golmote"},lua:{title:"Lua",owner:"Golmote"},magma:{title:"Magma (CAS)",owner:"RunDevelopment"},makefile:{title:"Makefile",owner:"Golmote"},markdown:{title:"Markdown",require:"markup",optional:"yaml",alias:"md",owner:"Golmote"},"markup-templating":{title:"Markup templating",require:"markup",owner:"Golmote"},mata:{title:"Mata",owner:"RunDevelopment"},matlab:{title:"MATLAB",owner:"Golmote"},maxscript:{title:"MAXScript",owner:"RunDevelopment"},mel:{title:"MEL",owner:"Golmote"},mermaid:{title:"Mermaid",owner:"RunDevelopment"},metafont:{title:"METAFONT",owner:"LaeriExNihilo"},mizar:{title:"Mizar",owner:"Golmote"},mongodb:{title:"MongoDB",owner:"airs0urce",require:"javascript"},monkey:{title:"Monkey",owner:"Golmote"},moonscript:{title:"MoonScript",alias:"moon",owner:"RunDevelopment"},n1ql:{title:"N1QL",owner:"TMWilds"},n4js:{title:"N4JS",require:"javascript",optional:"jsdoc",alias:"n4jsd",owner:"bsmith-n4"},"nand2tetris-hdl":{title:"Nand To Tetris HDL",owner:"stephanmax"},naniscript:{title:"Naninovel Script",owner:"Elringus",alias:"nani"},nasm:{title:"NASM",owner:"rbmj"},neon:{title:"NEON",owner:"nette"},nevod:{title:"Nevod",owner:"nezaboodka"},nginx:{title:"nginx",owner:"volado"},nim:{title:"Nim",owner:"Golmote"},nix:{title:"Nix",owner:"Golmote"},nsis:{title:"NSIS",owner:"idleberg"},objectivec:{title:"Objective-C",require:"c",alias:"objc",owner:"uranusjr"},ocaml:{title:"OCaml",owner:"Golmote"},odin:{title:"Odin",owner:"edukisto"},opencl:{title:"OpenCL",require:"c",modify:["c","cpp"],owner:"Milania1"},openqasm:{title:"OpenQasm",alias:"qasm",owner:"RunDevelopment"},oz:{title:"Oz",owner:"Golmote"},parigp:{title:"PARI/GP",owner:"Golmote"},parser:{title:"Parser",require:"markup",owner:"Golmote"},pascal:{title:"Pascal",alias:"objectpascal",aliasTitles:{objectpascal:"Object Pascal"},owner:"Golmote"},pascaligo:{title:"Pascaligo",owner:"DefinitelyNotAGoat"},psl:{title:"PATROL Scripting Language",owner:"bertysentry"},pcaxis:{title:"PC-Axis",alias:"px",owner:"RunDevelopment"},peoplecode:{title:"PeopleCode",alias:"pcode",owner:"RunDevelopment"},perl:{title:"Perl",owner:"Golmote"},php:{title:"PHP",require:"markup-templating",owner:"milesj"},phpdoc:{title:"PHPDoc",require:["php","javadoclike"],modify:"php",owner:"RunDevelopment"},"php-extras":{title:"PHP Extras",require:"php",modify:"php",owner:"milesj"},"plant-uml":{title:"PlantUML",alias:"plantuml",owner:"RunDevelopment"},plsql:{title:"PL/SQL",require:"sql",owner:"Golmote"},powerquery:{title:"PowerQuery",alias:["pq","mscript"],owner:"peterbud"},powershell:{title:"PowerShell",owner:"nauzilus"},processing:{title:"Processing",require:"clike",owner:"Golmote"},prolog:{title:"Prolog",owner:"Golmote"},promql:{title:"PromQL",owner:"arendjr"},properties:{title:".properties",owner:"Golmote"},protobuf:{title:"Protocol Buffers",require:"clike",owner:"just-boris"},pug:{title:"Pug",require:["markup","javascript"],optional:["coffeescript","ejs","handlebars","less","livescript","markdown","scss","stylus","twig"],owner:"Golmote"},puppet:{title:"Puppet",owner:"Golmote"},pure:{title:"Pure",optional:["c","cpp","fortran"],owner:"Golmote"},purebasic:{title:"PureBasic",require:"clike",alias:"pbfasm",owner:"HeX0R101"},purescript:{title:"PureScript",require:"haskell",alias:"purs",owner:"sriharshachilakapati"},python:{title:"Python",alias:"py",owner:"multipetros"},qsharp:{title:"Q#",require:"clike",alias:"qs",owner:"fedonman"},q:{title:"Q (kdb+ database)",owner:"Golmote"},qml:{title:"QML",require:"javascript",owner:"RunDevelopment"},qore:{title:"Qore",require:"clike",owner:"temnroegg"},r:{title:"R",owner:"Golmote"},racket:{title:"Racket",require:"scheme",alias:"rkt",owner:"RunDevelopment"},cshtml:{title:"Razor C#",alias:"razor",require:["markup","csharp"],optional:["css","css-extras","javascript","js-extras"],owner:"RunDevelopment"},jsx:{title:"React JSX",require:["markup","javascript"],optional:["jsdoc","js-extras","js-templates"],owner:"vkbansal"},tsx:{title:"React TSX",require:["jsx","typescript"]},reason:{title:"Reason",require:"clike",owner:"Golmote"},regex:{title:"Regex",owner:"RunDevelopment"},rego:{title:"Rego",owner:"JordanSh"},renpy:{title:"Ren'py",alias:"rpy",owner:"HyuchiaDiego"},rescript:{title:"ReScript",alias:"res",owner:"vmarcosp"},rest:{title:"reST (reStructuredText)",owner:"Golmote"},rip:{title:"Rip",owner:"ravinggenius"},roboconf:{title:"Roboconf",owner:"Golmote"},robotframework:{title:"Robot Framework",alias:"robot",owner:"RunDevelopment"},ruby:{title:"Ruby",require:"clike",alias:"rb",owner:"samflores"},rust:{title:"Rust",owner:"Golmote"},sas:{title:"SAS",optional:["groovy","lua","sql"],owner:"Golmote"},sass:{title:"Sass (Sass)",require:"css",optional:"css-extras",owner:"Golmote"},scss:{title:"Sass (SCSS)",require:"css",optional:"css-extras",owner:"MoOx"},scala:{title:"Scala",require:"java",owner:"jozic"},scheme:{title:"Scheme",owner:"bacchus123"},"shell-session":{title:"Shell session",require:"bash",alias:["sh-session","shellsession"],owner:"RunDevelopment"},smali:{title:"Smali",owner:"RunDevelopment"},smalltalk:{title:"Smalltalk",owner:"Golmote"},smarty:{title:"Smarty",require:"markup-templating",optional:"php",owner:"Golmote"},sml:{title:"SML",alias:"smlnj",aliasTitles:{smlnj:"SML/NJ"},owner:"RunDevelopment"},solidity:{title:"Solidity (Ethereum)",alias:"sol",require:"clike",owner:"glachaud"},"solution-file":{title:"Solution file",alias:"sln",owner:"RunDevelopment"},soy:{title:"Soy (Closure Template)",require:"markup-templating",owner:"Golmote"},sparql:{title:"SPARQL",require:"turtle",owner:"Triply-Dev",alias:"rq"},"splunk-spl":{title:"Splunk SPL",owner:"RunDevelopment"},sqf:{title:"SQF: Status Quo Function (Arma 3)",require:"clike",owner:"RunDevelopment"},sql:{title:"SQL",owner:"multipetros"},squirrel:{title:"Squirrel",require:"clike",owner:"RunDevelopment"},stan:{title:"Stan",owner:"RunDevelopment"},stata:{title:"Stata Ado",require:["mata","java","python"],owner:"RunDevelopment"},iecst:{title:"Structured Text (IEC 61131-3)",owner:"serhioromano"},stylus:{title:"Stylus",owner:"vkbansal"},supercollider:{title:"SuperCollider",alias:"sclang",owner:"RunDevelopment"},swift:{title:"Swift",owner:"chrischares"},systemd:{title:"Systemd configuration file",owner:"RunDevelopment"},"t4-templating":{title:"T4 templating",owner:"RunDevelopment"},"t4-cs":{title:"T4 Text Templates (C#)",require:["t4-templating","csharp"],alias:"t4",owner:"RunDevelopment"},"t4-vb":{title:"T4 Text Templates (VB)",require:["t4-templating","vbnet"],owner:"RunDevelopment"},tap:{title:"TAP",owner:"isaacs",require:"yaml"},tcl:{title:"Tcl",owner:"PeterChaplin"},tt2:{title:"Template Toolkit 2",require:["clike","markup-templating"],owner:"gflohr"},textile:{title:"Textile",require:"markup",optional:"css",owner:"Golmote"},toml:{title:"TOML",owner:"RunDevelopment"},tremor:{title:"Tremor",alias:["trickle","troy"],owner:"darach",aliasTitles:{trickle:"trickle",troy:"troy"}},turtle:{title:"Turtle",alias:"trig",aliasTitles:{trig:"TriG"},owner:"jakubklimek"},twig:{title:"Twig",require:"markup-templating",owner:"brandonkelly"},typescript:{title:"TypeScript",require:"javascript",optional:"js-templates",alias:"ts",owner:"vkbansal"},typoscript:{title:"TypoScript",alias:"tsconfig",aliasTitles:{tsconfig:"TSConfig"},owner:"dkern"},unrealscript:{title:"UnrealScript",alias:["uscript","uc"],owner:"RunDevelopment"},uorazor:{title:"UO Razor Script",owner:"jaseowns"},uri:{title:"URI",alias:"url",aliasTitles:{url:"URL"},owner:"RunDevelopment"},v:{title:"V",require:"clike",owner:"taggon"},vala:{title:"Vala",require:"clike",optional:"regex",owner:"TemplarVolk"},vbnet:{title:"VB.Net",require:"basic",owner:"Bigsby"},velocity:{title:"Velocity",require:"markup",owner:"Golmote"},verilog:{title:"Verilog",owner:"a-rey"},vhdl:{title:"VHDL",owner:"a-rey"},vim:{title:"vim",owner:"westonganger"},"visual-basic":{title:"Visual Basic",alias:["vb","vba"],aliasTitles:{vba:"VBA"},owner:"Golmote"},warpscript:{title:"WarpScript",owner:"RunDevelopment"},wasm:{title:"WebAssembly",owner:"Golmote"},"web-idl":{title:"Web IDL",alias:"webidl",owner:"RunDevelopment"},wgsl:{title:"WGSL",owner:"Dr4gonthree"},wiki:{title:"Wiki markup",require:"markup",owner:"Golmote"},wolfram:{title:"Wolfram language",alias:["mathematica","nb","wl"],aliasTitles:{mathematica:"Mathematica",nb:"Mathematica Notebook"},owner:"msollami"},wren:{title:"Wren",owner:"clsource"},xeora:{title:"Xeora",require:"markup",alias:"xeoracube",aliasTitles:{xeoracube:"XeoraCube"},owner:"freakmaxi"},"xml-doc":{title:"XML doc (.net)",require:"markup",modify:["csharp","fsharp","vbnet"],owner:"RunDevelopment"},xojo:{title:"Xojo (REALbasic)",owner:"Golmote"},xquery:{title:"XQuery",require:"markup",owner:"Golmote"},yaml:{title:"YAML",alias:"yml",owner:"hason"},yang:{title:"YANG",owner:"RunDevelopment"},zig:{title:"Zig",owner:"RunDevelopment"}},plugins:{meta:{path:"plugins/{id}/prism-{id}",link:"plugins/{id}/"},"line-highlight":{title:"Line Highlight",description:"Highlights specific lines and/or line ranges."},"line-numbers":{title:"Line Numbers",description:"Line number at the beginning of code lines.",owner:"kuba-kubula"},"show-invisibles":{title:"Show Invisibles",description:"Show hidden characters such as tabs and line breaks.",optional:["autolinker","data-uri-highlight"]},autolinker:{title:"Autolinker",description:"Converts URLs and emails in code to clickable links. Parses Markdown links in comments."},wpd:{title:"WebPlatform Docs",description:'Makes tokens link to <a href="https://webplatform.github.io/docs/">WebPlatform.org documentation</a>. The links open in a new tab.'},"custom-class":{title:"Custom Class",description:"This plugin allows you to prefix Prism's default classes (<code>.comment</code> can become <code>.namespace--comment</code>) or replace them with your defined ones (like <code>.editor__comment</code>). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the <code>highlightAll</code> and <code>highlightAllUnder</code> methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},2885:(e,t,n)=>{const r=n(9901),a=n(9642),o=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...o,...Object.keys(Prism.languages)];a(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(6500).resolve(t)],delete Prism.languages[e],n(6500)(t),o.add(e)}))}i.silent=!1,e.exports=i},6726:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6726},6500:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6500},9642:e=>{"use strict";var t=function(){var e=function(){};function t(e,t){Array.isArray(e)?e.forEach(t):null!=e&&t(e,0)}function n(e){for(var t={},n=0,r=e.length;n<r;n++)t[e[n]]=!0;return t}function r(e){var n={},r=[];function a(r,o){if(!(r in n)){o.push(r);var i=o.indexOf(r);if(i<o.length-1)throw new Error("Circular dependency: "+o.slice(i).join(" -> "));var l={},s=e[r];if(s){function u(t){if(!(t in e))throw new Error(r+" depends on an unknown component "+t);if(!(t in l))for(var i in a(t,o),l[t]=!0,n[t])l[i]=!0}t(s.require,u),t(s.optional,u),t(s.modify,u)}n[r]=l,o.pop()}}return function(e){var t=n[e];return t||(a(e,r),t=n[e]),t}}function a(e){for(var t in e)return!0;return!1}return function(o,i,l){var s=function(e){var t={};for(var n in e){var r=e[n];for(var a in r)if("meta"!=a){var o=r[a];t[a]="string"==typeof o?{title:o}:o}}return t}(o),u=function(e){var n;return function(r){if(r in e)return r;if(!n)for(var a in n={},e){var o=e[a];t(o&&o.alias,(function(t){if(t in n)throw new Error(t+" cannot be alias for both "+a+" and "+n[t]);if(t in e)throw new Error(t+" cannot be alias of "+a+" because it is a component.");n[t]=a}))}return n[r]||r}}(s);i=i.map(u),l=(l||[]).map(u);var c=n(i),d=n(l);i.forEach((function e(n){var r=s[n];t(r&&r.require,(function(t){t in d||(c[t]=!0,e(t))}))}));for(var f,p=r(s),h=c;a(h);){for(var m in f={},h){var g=s[m];t(g&&g.modify,(function(e){e in d&&(f[e]=!0)}))}for(var v in d)if(!(v in c))for(var b in p(v))if(b in c){f[v]=!0;break}for(var y in h=f)c[y]=!0}var w={getIds:function(){var e=[];return w.load((function(t){e.push(t)})),e},load:function(t,n){return function(t,n,r,a){var o=a?a.series:void 0,i=a?a.parallel:e,l={},s={};function u(e){if(e in l)return l[e];s[e]=!0;var a,c=[];for(var d in t(e))d in n&&c.push(d);if(0===c.length)a=r(e);else{var f=i(c.map((function(e){var t=u(e);return delete s[e],t})));o?a=o(f,(function(){return r(e)})):r(e)}return l[e]=a}for(var c in n)u(c);var d=[];for(var f in s)d.push(l[f]);return i(d)}(p,c,t,n)}};return w}}();e.exports=t},2703:(e,t,n)=>{"use strict";var r=n(414);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,i){if(i!==r){var l=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw l.name="Invariant Violation",l}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},5697:(e,t,n)=>{e.exports=n(2703)()},414:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},4448:(e,t,n)=>{"use strict";var r=n(7294),a=n(7418),o=n(3840);function i(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(i(227));var l=new Set,s={};function u(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(s[e]=t,e=0;e<t.length;e++)l.add(t[e])}var d=!("undefined"==typeof window||void 0===window.document||void 0===window.document.createElement),f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p=Object.prototype.hasOwnProperty,h={},m={};function g(e,t,n,r,a,o,i){this.acceptsBooleans=2===t||3===t||4===t,this.attributeName=r,this.attributeNamespace=a,this.mustUseProperty=n,this.propertyName=e,this.type=t,this.sanitizeURL=o,this.removeEmptyString=i}var v={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach((function(e){v[e]=new g(e,0,!1,e,null,!1,!1)})),[["acceptCharset","accept-charset"],["className","class"],["htmlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];v[t]=new g(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){v[e]=new g(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach((function(e){v[e]=new g(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach((function(e){v[e]=new g(e,3,!1,e.toLowerCase(),null,!1,!1)})),["checked","multiple","muted","selected"].forEach((function(e){v[e]=new g(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){v[e]=new g(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){v[e]=new g(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((function(e){v[e]=new g(e,5,!1,e.toLowerCase(),null,!1,!1)}));var b=/[\-:]([a-z])/g;function y(e){return e[1].toUpperCase()}function w(e,t,n,r){var a=v.hasOwnProperty(t)?v[t]:null;(null!==a?0===a.type:!r&&(2<t.length&&("o"===t[0]||"O"===t[0])&&("n"===t[1]||"N"===t[1])))||(function(e,t,n,r){if(null==t||function(e,t,n,r){if(null!==n&&0===n.type)return!1;switch(typeof t){case"function":case"symbol":return!0;case"boolean":return!r&&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)||1>t}return!1}(t,n,a,r)&&(n=null),r||null===a?function(e){return!!p.call(m,e)||!p.call(h,e)&&(f.test(e)?m[e]=!0:(h[e]=!0,!1))}(t)&&(null===n?e.removeAttribute(t):e.setAttribute(t,""+n)):a.mustUseProperty?e[a.propertyName]=null===n?3!==a.type&&"":n:(t=a.attributeName,r=a.attributeNamespace,null===n?e.removeAttribute(t):(n=3===(a=a.type)||4===a&&!0===n?"":""+n,r?e.setAttributeNS(r,t,n):e.setAttribute(t,n))))}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-position overline-thickness paint-order panose-1 pointer-events rendering-intent shape-rendering stop-color stop-opacity strikethrough-position strikethrough-thickness stroke-dasharray stroke-dashoffset stroke-linecap stroke-linejoin stroke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var t=e.replace(b,y);v[t]=new g(t,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole xlink:role xlink:show xlink:title xlink:type".split(" ").forEach((function(e){var t=e.replace(b,y);v[t]=new g(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(b,y);v[t]=new g(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){v[e]=new g(e,1,!1,e.toLowerCase(),null,!1,!1)})),v.xlinkHref=new g("xlinkHref",1,!1,"xlink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){v[e]=new g(e,1,!1,e.toLowerCase(),null,!0,!0)}));var k=r.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,E=60103,S=60106,x=60107,T=60108,C=60114,_=60109,L=60110,R=60112,A=60113,N=60120,P=60115,O=60116,I=60121,D=60128,z=60129,M=60130,F=60131;if("function"==typeof Symbol&&Symbol.for){var B=Symbol.for;E=B("react.element"),S=B("react.portal"),x=B("react.fragment"),T=B("react.strict_mode"),C=B("react.profiler"),_=B("react.provider"),L=B("react.context"),R=B("react.forward_ref"),A=B("react.suspense"),N=B("react.suspense_list"),P=B("react.memo"),O=B("react.lazy"),I=B("react.block"),B("react.scope"),D=B("react.opaque.id"),z=B("react.debug_trace_mode"),M=B("react.offscreen"),F=B("react.legacy_hidden")}var j,$="function"==typeof Symbol&&Symbol.iterator;function U(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=$&&e[$]||e["@@iterator"])?e:null}function q(e){if(void 0===j)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);j=t&&t[1]||""}return"\n"+j+e}var H=!1;function G(e,t){if(!e||H)return"";H=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.construct(t,[])}catch(s){var r=s}Reflect.construct(e,[],t)}else{try{t.call()}catch(s){r=s}e.call(t.prototype)}else{try{throw Error()}catch(s){r=s}e()}}catch(s){if(s&&r&&"string"==typeof s.stack){for(var a=s.stack.split("\n"),o=r.stack.split("\n"),i=a.length-1,l=o.length-1;1<=i&&0<=l&&a[i]!==o[l];)l--;for(;1<=i&&0<=l;i--,l--)if(a[i]!==o[l]){if(1!==i||1!==l)do{if(i--,0>--l||a[i]!==o[l])return"\n"+a[i].replace(" at new "," at ")}while(1<=i&&0<=l);break}}}finally{H=!1,Error.prepareStackTrace=n}return(e=e?e.displayName||e.name:"")?q(e):""}function Z(e){switch(e.tag){case 5:return q(e.type);case 16:return q("Lazy");case 13:return q("Suspense");case 19:return q("SuspenseList");case 0:case 2:case 15:return e=G(e.type,!1);case 11:return e=G(e.type.render,!1);case 22:return e=G(e.type._render,!1);case 1:return e=G(e.type,!0);default:return""}}function Q(e){if(null==e)return null;if("function"==typeof e)return e.displayName||e.name||null;if("string"==typeof e)return e;switch(e){case x:return"Fragment";case S:return"Portal";case C:return"Profiler";case T:return"StrictMode";case A:return"Suspense";case N:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case L:return(e.displayName||"Context")+".Consumer";case _:return(e._context.displayName||"Context")+".Provider";case R:var t=e.render;return t=t.displayName||t.name||"",e.displayName||(""!==t?"ForwardRef("+t+")":"ForwardRef");case P:return Q(e.type);case I:return Q(e._render);case O:t=e._payload,e=e._init;try{return Q(e(t))}catch(n){}}return null}function V(e){switch(typeof e){case"boolean":case"number":case"object":case"string":case"undefined":return e;default:return""}}function W(e){var t=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===t||"radio"===t)}function K(e){e._valueTracker||(e._valueTracker=function(e){var t=W(e)?"checked":"value",n=Object.getOwnPropertyDescriptor(e.constructor.prototype,t),r=""+e[t];if(!e.hasOwnProperty(t)&&void 0!==n&&"function"==typeof n.get&&"function"==typeof n.set){var a=n.get,o=n.set;return Object.defineProperty(e,t,{configurable:!0,get:function(){return a.call(this)},set:function(e){r=""+e,o.call(this,e)}}),Object.defineProperty(e,t,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[t]}}}}(e))}function Y(e){if(!e)return!1;var t=e._valueTracker;if(!t)return!0;var n=t.getValue(),r="";return e&&(r=W(e)?e.checked?"true":"false":e.value),(e=r)!==n&&(t.setValue(e),!0)}function X(e){if(void 0===(e=e||("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement||e.body}catch(t){return e.body}}function J(e,t){var n=t.checked;return a({},t,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=n?n:e._wrapperState.initialChecked})}function ee(e,t){var n=null==t.defaultValue?"":t.defaultValue,r=null!=t.checked?t.checked:t.defaultChecked;n=V(null!=t.value?t.value:n),e._wrapperState={initialChecked:r,initialValue:n,controlled:"checkbox"===t.type||"radio"===t.type?null!=t.checked:null!=t.value}}function te(e,t){null!=(t=t.checked)&&w(e,"checked",t,!1)}function ne(e,t){te(e,t);var n=V(t.value),r=t.type;if(null!=n)"number"===r?(0===n&&""===e.value||e.value!=n)&&(e.value=""+n):e.value!==""+n&&(e.value=""+n);else if("submit"===r||"reset"===r)return void e.removeAttribute("value");t.hasOwnProperty("value")?ae(e,t.type,n):t.hasOwnProperty("defaultValue")&&ae(e,t.type,V(t.defaultValue)),null==t.checked&&null!=t.defaultChecked&&(e.defaultChecked=!!t.defaultChecked)}function re(e,t,n){if(t.hasOwnProperty("value")||t.hasOwnProperty("defaultValue")){var r=t.type;if(!("submit"!==r&&"reset"!==r||void 0!==t.value&&null!==t.value))return;t=""+e._wrapperState.initialValue,n||t===e.value||(e.value=t),e.defaultValue=t}""!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function ae(e,t,n){"number"===t&&X(e.ownerDocument)===e||(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultValue=""+n))}function oe(e,t){return e=a({children:void 0},t),(t=function(e){var t="";return r.Children.forEach(e,(function(e){null!=e&&(t+=e)})),t}(t.children))&&(e.children=t),e}function ie(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a<n.length;a++)t["$"+n[a]]=!0;for(n=0;n<e.length;n++)a=t.hasOwnProperty("$"+e[n].value),e[n].selected!==a&&(e[n].selected=a),a&&r&&(e[n].defaultSelected=!0)}else{for(n=""+V(n),t=null,a=0;a<e.length;a++){if(e[a].value===n)return e[a].selected=!0,void(r&&(e[a].defaultSelected=!0));null!==t||e[a].disabled||(t=e[a])}null!==t&&(t.selected=!0)}}function le(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(i(91));return a({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initialValue})}function se(e,t){var n=t.value;if(null==n){if(n=t.children,t=t.defaultValue,null!=n){if(null!=t)throw Error(i(92));if(Array.isArray(n)){if(!(1>=n.length))throw Error(i(93));n=n[0]}t=n}null==t&&(t=""),n=t}e._wrapperState={initialValue:V(n)}}function ue(e,t){var n=V(t.value),r=V(t.defaultValue);null!=n&&((n=""+n)!==e.value&&(e.value=n),null==t.defaultValue&&e.defaultValue!==n&&(e.defaultValue=n)),null!=r&&(e.defaultValue=""+r)}function ce(e){var t=e.textContent;t===e._wrapperState.initialValue&&""!==t&&null!==t&&(e.value=t)}var de="http://www.w3.org/1999/xhtml",fe="http://www.w3.org/2000/svg";function pe(e){switch(e){case"svg":return"http://www.w3.org/2000/svg";case"math":return"http://www.w3.org/1998/Math/MathML";default:return"http://www.w3.org/1999/xhtml"}}function he(e,t){return null==e||"http://www.w3.org/1999/xhtml"===e?pe(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var me,ge,ve=(ge=function(e,t){if(e.namespaceURI!==fe||"innerHTML"in e)e.innerHTML=t;else{for((me=me||document.createElement("div")).innerHTML="<svg>"+t.valueOf().toString()+"</svg>",t=me.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function be(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var ye={animationIterationCount:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,columnCount:!0,columns:!0,flex:!0,flexGrow:!0,flexPositive:!0,flexShrink:!0,flexNegative:!0,flexOrder:!0,gridArea:!0,gridRow:!0,gridRowEnd:!0,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},we=["Webkit","ms","Moz","O"];function ke(e,t,n){return null==t||"boolean"==typeof t||""===t?"":n||"number"!=typeof t||0===t||ye.hasOwnProperty(e)&&ye[e]?(""+t).trim():t+"px"}function Ee(e,t){for(var n in e=e.style,t)if(t.hasOwnProperty(n)){var r=0===n.indexOf("--"),a=ke(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,a):e[n]=a}}Object.keys(ye).forEach((function(e){we.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),ye[t]=ye[e]}))}));var Se=a({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function xe(e,t){if(t){if(Se[e]&&(null!=t.children||null!=t.dangerouslySetInnerHTML))throw Error(i(137,e));if(null!=t.dangerouslySetInnerHTML){if(null!=t.children)throw Error(i(60));if("object"!=typeof t.dangerouslySetInnerHTML||!("__html"in t.dangerouslySetInnerHTML))throw Error(i(61))}if(null!=t.style&&"object"!=typeof t.style)throw Error(i(62))}}function Te(e,t){if(-1===e.indexOf("-"))return"string"==typeof t.is;switch(e){case"annotation-xml":case"color-profile":case"font-face":case"font-face-src":case"font-face-uri":case"font-face-format":case"font-face-name":case"missing-glyph":return!1;default:return!0}}function Ce(e){return(e=e.target||e.srcElement||window).correspondingUseElement&&(e=e.correspondingUseElement),3===e.nodeType?e.parentNode:e}var _e=null,Le=null,Re=null;function Ae(e){if(e=ra(e)){if("function"!=typeof _e)throw Error(i(280));var t=e.stateNode;t&&(t=oa(t),_e(e.stateNode,e.type,t))}}function Ne(e){Le?Re?Re.push(e):Re=[e]:Le=e}function Pe(){if(Le){var e=Le,t=Re;if(Re=Le=null,Ae(e),t)for(e=0;e<t.length;e++)Ae(t[e])}}function Oe(e,t){return e(t)}function Ie(e,t,n,r,a){return e(t,n,r,a)}function De(){}var ze=Oe,Me=!1,Fe=!1;function Be(){null===Le&&null===Re||(De(),Pe())}function je(e,t){var n=e.stateNode;if(null===n)return null;var r=oa(n);if(null===r)return null;n=r[t];e:switch(t){case"onClick":case"onClickCapture":case"onDoubleClick":case"onDoubleClickCapture":case"onMouseDown":case"onMouseDownCapture":case"onMouseMove":case"onMouseMoveCapture":case"onMouseUp":case"onMouseUpCapture":case"onMouseEnter":(r=!r.disabled)||(r=!("button"===(e=e.type)||"input"===e||"select"===e||"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!=typeof n)throw Error(i(231,t,typeof n));return n}var $e=!1;if(d)try{var Ue={};Object.defineProperty(Ue,"passive",{get:function(){$e=!0}}),window.addEventListener("test",Ue,Ue),window.removeEventListener("test",Ue,Ue)}catch(ge){$e=!1}function qe(e,t,n,r,a,o,i,l,s){var u=Array.prototype.slice.call(arguments,3);try{t.apply(n,u)}catch(c){this.onError(c)}}var He=!1,Ge=null,Ze=!1,Qe=null,Ve={onError:function(e){He=!0,Ge=e}};function We(e,t,n,r,a,o,i,l,s){He=!1,Ge=null,qe.apply(Ve,arguments)}function Ke(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!=(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Ye(e){if(13===e.tag){var t=e.memoizedState;if(null===t&&(null!==(e=e.alternate)&&(t=e.memoizedState)),null!==t)return t.dehydrated}return null}function Xe(e){if(Ke(e)!==e)throw Error(i(188))}function Je(e){if(e=function(e){var t=e.alternate;if(!t){if(null===(t=Ke(e)))throw Error(i(188));return t!==e?null:e}for(var n=e,r=t;;){var a=n.return;if(null===a)break;var o=a.alternate;if(null===o){if(null!==(r=a.return)){n=r;continue}break}if(a.child===o.child){for(o=a.child;o;){if(o===n)return Xe(a),e;if(o===r)return Xe(a),t;o=o.sibling}throw Error(i(188))}if(n.return!==r.return)n=a,r=o;else{for(var l=!1,s=a.child;s;){if(s===n){l=!0,n=a,r=o;break}if(s===r){l=!0,r=a,n=o;break}s=s.sibling}if(!l){for(s=o.child;s;){if(s===n){l=!0,n=o,r=a;break}if(s===r){l=!0,r=o,n=a;break}s=s.sibling}if(!l)throw Error(i(189))}}if(n.alternate!==r)throw Error(i(190))}if(3!==n.tag)throw Error(i(188));return n.stateNode.current===n?e:t}(e),!e)return null;for(var t=e;;){if(5===t.tag||6===t.tag)return t;if(t.child)t.child.return=t,t=t.child;else{if(t===e)break;for(;!t.sibling;){if(!t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}}return null}function et(e,t){for(var n=e.alternate;null!==t;){if(t===e||t===n)return!0;t=t.return}return!1}var tt,nt,rt,at,ot=!1,it=[],lt=null,st=null,ut=null,ct=new Map,dt=new Map,ft=[],pt="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend dragstart drop compositionend compositionstart keydown keypress keyup input textInput copy cut paste click change contextmenu reset submit".split(" ");function ht(e,t,n,r,a){return{blockedOn:e,domEventName:t,eventSystemFlags:16|n,nativeEvent:a,targetContainers:[r]}}function mt(e,t){switch(e){case"focusin":case"focusout":lt=null;break;case"dragenter":case"dragleave":st=null;break;case"mouseover":case"mouseout":ut=null;break;case"pointerover":case"pointerout":ct.delete(t.pointerId);break;case"gotpointercapture":case"lostpointercapture":dt.delete(t.pointerId)}}function gt(e,t,n,r,a,o){return null===e||e.nativeEvent!==o?(e=ht(t,n,r,a,o),null!==t&&(null!==(t=ra(t))&&nt(t)),e):(e.eventSystemFlags|=r,t=e.targetContainers,null!==a&&-1===t.indexOf(a)&&t.push(a),e)}function vt(e){var t=na(e.target);if(null!==t){var n=Ke(t);if(null!==n)if(13===(t=n.tag)){if(null!==(t=Ye(n)))return e.blockedOn=t,void at(e.lanePriority,(function(){o.unstable_runWithPriority(e.priority,(function(){rt(n)}))}))}else if(3===t&&n.stateNode.hydrate)return void(e.blockedOn=3===n.tag?n.stateNode.containerInfo:null)}e.blockedOn=null}function bt(e){if(null!==e.blockedOn)return!1;for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n)return null!==(t=ra(n))&&nt(t),e.blockedOn=n,!1;t.shift()}return!0}function yt(e,t,n){bt(e)&&n.delete(t)}function wt(){for(ot=!1;0<it.length;){var e=it[0];if(null!==e.blockedOn){null!==(e=ra(e.blockedOn))&&tt(e);break}for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n){e.blockedOn=n;break}t.shift()}null===e.blockedOn&&it.shift()}null!==lt&&bt(lt)&&(lt=null),null!==st&&bt(st)&&(st=null),null!==ut&&bt(ut)&&(ut=null),ct.forEach(yt),dt.forEach(yt)}function kt(e,t){e.blockedOn===t&&(e.blockedOn=null,ot||(ot=!0,o.unstable_scheduleCallback(o.unstable_NormalPriority,wt)))}function Et(e){function t(t){return kt(t,e)}if(0<it.length){kt(it[0],e);for(var n=1;n<it.length;n++){var r=it[n];r.blockedOn===e&&(r.blockedOn=null)}}for(null!==lt&&kt(lt,e),null!==st&&kt(st,e),null!==ut&&kt(ut,e),ct.forEach(t),dt.forEach(t),n=0;n<ft.length;n++)(r=ft[n]).blockedOn===e&&(r.blockedOn=null);for(;0<ft.length&&null===(n=ft[0]).blockedOn;)vt(n),null===n.blockedOn&&ft.shift()}function St(e,t){var n={};return n[e.toLowerCase()]=t.toLowerCase(),n["Webkit"+e]="webkit"+t,n["Moz"+e]="moz"+t,n}var xt={animationend:St("Animation","AnimationEnd"),animationiteration:St("Animation","AnimationIteration"),animationstart:St("Animation","AnimationStart"),transitionend:St("Transition","TransitionEnd")},Tt={},Ct={};function _t(e){if(Tt[e])return Tt[e];if(!xt[e])return e;var t,n=xt[e];for(t in n)if(n.hasOwnProperty(t)&&t in Ct)return Tt[e]=n[t];return e}d&&(Ct=document.createElement("div").style,"AnimationEvent"in window||(delete xt.animationend.animation,delete xt.animationiteration.animation,delete xt.animationstart.animation),"TransitionEvent"in window||delete xt.transitionend.transition);var Lt=_t("animationend"),Rt=_t("animationiteration"),At=_t("animationstart"),Nt=_t("transitionend"),Pt=new Map,Ot=new Map,It=["abort","abort",Lt,"animationEnd",Rt,"animationIteration",At,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange","durationChange","emptied","emptied","encrypted","encrypted","ended","ended","error","error","gotpointercapture","gotPointerCapture","load","load","loadeddata","loadedData","loadedmetadata","loadedMetadata","loadstart","loadStart","lostpointercapture","lostPointerCapture","playing","playing","progress","progress","seeking","seeking","stalled","stalled","suspend","suspend","timeupdate","timeUpdate",Nt,"transitionEnd","waiting","waiting"];function Dt(e,t){for(var n=0;n<e.length;n+=2){var r=e[n],a=e[n+1];a="on"+(a[0].toUpperCase()+a.slice(1)),Ot.set(r,t),Pt.set(r,a),u(a,[r])}}(0,o.unstable_now)();var zt=8;function Mt(e){if(0!=(1&e))return zt=15,1;if(0!=(2&e))return zt=14,2;if(0!=(4&e))return zt=13,4;var t=24&e;return 0!==t?(zt=12,t):0!=(32&e)?(zt=11,32):0!==(t=192&e)?(zt=10,t):0!=(256&e)?(zt=9,256):0!==(t=3584&e)?(zt=8,t):0!=(4096&e)?(zt=7,4096):0!==(t=4186112&e)?(zt=6,t):0!==(t=62914560&e)?(zt=5,t):67108864&e?(zt=4,67108864):0!=(134217728&e)?(zt=3,134217728):0!==(t=805306368&e)?(zt=2,t):0!=(1073741824&e)?(zt=1,1073741824):(zt=8,e)}function Ft(e,t){var n=e.pendingLanes;if(0===n)return zt=0;var r=0,a=0,o=e.expiredLanes,i=e.suspendedLanes,l=e.pingedLanes;if(0!==o)r=o,a=zt=15;else if(0!==(o=134217727&n)){var s=o&~i;0!==s?(r=Mt(s),a=zt):0!==(l&=o)&&(r=Mt(l),a=zt)}else 0!==(o=n&~i)?(r=Mt(o),a=zt):0!==l&&(r=Mt(l),a=zt);if(0===r)return 0;if(r=n&((0>(r=31-Ht(r))?0:1<<r)<<1)-1,0!==t&&t!==r&&0==(t&i)){if(Mt(t),a<=zt)return t;zt=a}if(0!==(t=e.entangledLanes))for(e=e.entanglements,t&=r;0<t;)a=1<<(n=31-Ht(t)),r|=e[n],t&=~a;return r}function Bt(e){return 0!==(e=-1073741825&e.pendingLanes)?e:1073741824&e?1073741824:0}function jt(e,t){switch(e){case 15:return 1;case 14:return 2;case 12:return 0===(e=$t(24&~t))?jt(10,t):e;case 10:return 0===(e=$t(192&~t))?jt(8,t):e;case 8:return 0===(e=$t(3584&~t))&&(0===(e=$t(4186112&~t))&&(e=512)),e;case 2:return 0===(t=$t(805306368&~t))&&(t=268435456),t}throw Error(i(358,e))}function $t(e){return e&-e}function Ut(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function qt(e,t,n){e.pendingLanes|=t;var r=t-1;e.suspendedLanes&=r,e.pingedLanes&=r,(e=e.eventTimes)[t=31-Ht(t)]=n}var Ht=Math.clz32?Math.clz32:function(e){return 0===e?32:31-(Gt(e)/Zt|0)|0},Gt=Math.log,Zt=Math.LN2;var Qt=o.unstable_UserBlockingPriority,Vt=o.unstable_runWithPriority,Wt=!0;function Kt(e,t,n,r){Me||De();var a=Xt,o=Me;Me=!0;try{Ie(a,e,t,n,r)}finally{(Me=o)||Be()}}function Yt(e,t,n,r){Vt(Qt,Xt.bind(null,e,t,n,r))}function Xt(e,t,n,r){var a;if(Wt)if((a=0==(4&t))&&0<it.length&&-1<pt.indexOf(e))e=ht(null,e,t,n,r),it.push(e);else{var o=Jt(e,t,n,r);if(null===o)a&&mt(e,r);else{if(a){if(-1<pt.indexOf(e))return e=ht(o,e,t,n,r),void it.push(e);if(function(e,t,n,r,a){switch(t){case"focusin":return lt=gt(lt,e,t,n,r,a),!0;case"dragenter":return st=gt(st,e,t,n,r,a),!0;case"mouseover":return ut=gt(ut,e,t,n,r,a),!0;case"pointerover":var o=a.pointerId;return ct.set(o,gt(ct.get(o)||null,e,t,n,r,a)),!0;case"gotpointercapture":return o=a.pointerId,dt.set(o,gt(dt.get(o)||null,e,t,n,r,a)),!0}return!1}(o,e,t,n,r))return;mt(e,r)}Dr(e,t,r,null,n)}}}function Jt(e,t,n,r){var a=Ce(r);if(null!==(a=na(a))){var o=Ke(a);if(null===o)a=null;else{var i=o.tag;if(13===i){if(null!==(a=Ye(o)))return a;a=null}else if(3===i){if(o.stateNode.hydrate)return 3===o.tag?o.stateNode.containerInfo:null;a=null}else o!==a&&(a=null)}}return Dr(e,t,r,a,n),null}var en=null,tn=null,nn=null;function rn(){if(nn)return nn;var e,t,n=tn,r=n.length,a="value"in en?en.value:en.textContent,o=a.length;for(e=0;e<r&&n[e]===a[e];e++);var i=r-e;for(t=1;t<=i&&n[r-t]===a[o-t];t++);return nn=a.slice(e,1<t?1-t:void 0)}function an(e){var t=e.keyCode;return"charCode"in e?0===(e=e.charCode)&&13===t&&(e=13):e=t,10===e&&(e=13),32<=e||13===e?e:0}function on(){return!0}function ln(){return!1}function sn(e){function t(t,n,r,a,o){for(var i in this._reactName=t,this._targetInst=r,this.type=n,this.nativeEvent=a,this.target=o,this.currentTarget=null,e)e.hasOwnProperty(i)&&(t=e[i],this[i]=t?t(a):a[i]);return this.isDefaultPrevented=(null!=a.defaultPrevented?a.defaultPrevented:!1===a.returnValue)?on:ln,this.isPropagationStopped=ln,this}return a(t.prototype,{preventDefault:function(){this.defaultPrevented=!0;var e=this.nativeEvent;e&&(e.preventDefault?e.preventDefault():"unknown"!=typeof e.returnValue&&(e.returnValue=!1),this.isDefaultPrevented=on)},stopPropagation:function(){var e=this.nativeEvent;e&&(e.stopPropagation?e.stopPropagation():"unknown"!=typeof e.cancelBubble&&(e.cancelBubble=!0),this.isPropagationStopped=on)},persist:function(){},isPersistent:on}),t}var un,cn,dn,fn={eventPhase:0,bubbles:0,cancelable:0,timeStamp:function(e){return e.timeStamp||Date.now()},defaultPrevented:0,isTrusted:0},pn=sn(fn),hn=a({},fn,{view:0,detail:0}),mn=sn(hn),gn=a({},hn,{screenX:0,screenY:0,clientX:0,clientY:0,pageX:0,pageY:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,getModifierState:Ln,button:0,buttons:0,relatedTarget:function(e){return void 0===e.relatedTarget?e.fromElement===e.srcElement?e.toElement:e.fromElement:e.relatedTarget},movementX:function(e){return"movementX"in e?e.movementX:(e!==dn&&(dn&&"mousemove"===e.type?(un=e.screenX-dn.screenX,cn=e.screenY-dn.screenY):cn=un=0,dn=e),un)},movementY:function(e){return"movementY"in e?e.movementY:cn}}),vn=sn(gn),bn=sn(a({},gn,{dataTransfer:0})),yn=sn(a({},hn,{relatedTarget:0})),wn=sn(a({},fn,{animationName:0,elapsedTime:0,pseudoElement:0})),kn=a({},fn,{clipboardData:function(e){return"clipboardData"in e?e.clipboardData:window.clipboardData}}),En=sn(kn),Sn=sn(a({},fn,{data:0})),xn={Esc:"Escape",Spacebar:" ",Left:"ArrowLeft",Up:"ArrowUp",Right:"ArrowRight",Down:"ArrowDown",Del:"Delete",Win:"OS",Menu:"ContextMenu",Apps:"ContextMenu",Scroll:"ScrollLock",MozPrintableKey:"Unidentified"},Tn={8:"Backspace",9:"Tab",12:"Clear",13:"Enter",16:"Shift",17:"Control",18:"Alt",19:"Pause",20:"CapsLock",27:"Escape",32:" ",33:"PageUp",34:"PageDown",35:"End",36:"Home",37:"ArrowLeft",38:"ArrowUp",39:"ArrowRight",40:"ArrowDown",45:"Insert",46:"Delete",112:"F1",113:"F2",114:"F3",115:"F4",116:"F5",117:"F6",118:"F7",119:"F8",120:"F9",121:"F10",122:"F11",123:"F12",144:"NumLock",145:"ScrollLock",224:"Meta"},Cn={Alt:"altKey",Control:"ctrlKey",Meta:"metaKey",Shift:"shiftKey"};function _n(e){var t=this.nativeEvent;return t.getModifierState?t.getModifierState(e):!!(e=Cn[e])&&!!t[e]}function Ln(){return _n}var Rn=a({},hn,{key:function(e){if(e.key){var t=xn[e.key]||e.key;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=an(e))?"Enter":String.fromCharCode(e):"keydown"===e.type||"keyup"===e.type?Tn[e.keyCode]||"Unidentified":""},code:0,location:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,repeat:0,locale:0,getModifierState:Ln,charCode:function(e){return"keypress"===e.type?an(e):0},keyCode:function(e){return"keydown"===e.type||"keyup"===e.type?e.keyCode:0},which:function(e){return"keypress"===e.type?an(e):"keydown"===e.type||"keyup"===e.type?e.keyCode:0}}),An=sn(Rn),Nn=sn(a({},gn,{pointerId:0,width:0,height:0,pressure:0,tangentialPressure:0,tiltX:0,tiltY:0,twist:0,pointerType:0,isPrimary:0})),Pn=sn(a({},hn,{touches:0,targetTouches:0,changedTouches:0,altKey:0,metaKey:0,ctrlKey:0,shiftKey:0,getModifierState:Ln})),On=sn(a({},fn,{propertyName:0,elapsedTime:0,pseudoElement:0})),In=a({},gn,{deltaX:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Dn=sn(In),zn=[9,13,27,32],Mn=d&&"CompositionEvent"in window,Fn=null;d&&"documentMode"in document&&(Fn=document.documentMode);var Bn=d&&"TextEvent"in window&&!Fn,jn=d&&(!Mn||Fn&&8<Fn&&11>=Fn),$n=String.fromCharCode(32),Un=!1;function qn(e,t){switch(e){case"keyup":return-1!==zn.indexOf(t.keyCode);case"keydown":return 229!==t.keyCode;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function Hn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var Gn=!1;var Zn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function Qn(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return"input"===t?!!Zn[e.type]:"textarea"===t}function Vn(e,t,n,r){Ne(r),0<(t=Mr(t,"onChange")).length&&(n=new pn("onChange","change",null,n,r),e.push({event:n,listeners:t}))}var Wn=null,Kn=null;function Yn(e){Rr(e,0)}function Xn(e){if(Y(aa(e)))return e}function Jn(e,t){if("change"===e)return t}var er=!1;if(d){var tr;if(d){var nr="oninput"in document;if(!nr){var rr=document.createElement("div");rr.setAttribute("oninput","return;"),nr="function"==typeof rr.oninput}tr=nr}else tr=!1;er=tr&&(!document.documentMode||9<document.documentMode)}function ar(){Wn&&(Wn.detachEvent("onpropertychange",or),Kn=Wn=null)}function or(e){if("value"===e.propertyName&&Xn(Kn)){var t=[];if(Vn(t,Kn,e,Ce(e)),e=Yn,Me)e(t);else{Me=!0;try{Oe(e,t)}finally{Me=!1,Be()}}}}function ir(e,t,n){"focusin"===e?(ar(),Kn=n,(Wn=t).attachEvent("onpropertychange",or)):"focusout"===e&&ar()}function lr(e){if("selectionchange"===e||"keyup"===e||"keydown"===e)return Xn(Kn)}function sr(e,t){if("click"===e)return Xn(t)}function ur(e,t){if("input"===e||"change"===e)return Xn(t)}var cr="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},dr=Object.prototype.hasOwnProperty;function fr(e,t){if(cr(e,t))return!0;if("object"!=typeof e||null===e||"object"!=typeof t||null===t)return!1;var n=Object.keys(e),r=Object.keys(t);if(n.length!==r.length)return!1;for(r=0;r<n.length;r++)if(!dr.call(t,n[r])||!cr(e[n[r]],t[n[r]]))return!1;return!0}function pr(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function hr(e,t){var n,r=pr(e);for(e=0;r;){if(3===r.nodeType){if(n=e+r.textContent.length,e<=t&&n>=t)return{node:r,offset:t-e};e=n}e:{for(;r;){if(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=pr(r)}}function mr(e,t){return!(!e||!t)&&(e===t||(!e||3!==e.nodeType)&&(t&&3===t.nodeType?mr(e,t.parentNode):"contains"in e?e.contains(t):!!e.compareDocumentPosition&&!!(16&e.compareDocumentPosition(t))))}function gr(){for(var e=window,t=X();t instanceof e.HTMLIFrameElement;){try{var n="string"==typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=X((e=t.contentWindow).document)}return t}function vr(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&("input"===t&&("text"===e.type||"search"===e.type||"tel"===e.type||"url"===e.type||"password"===e.type)||"textarea"===t||"true"===e.contentEditable)}var br=d&&"documentMode"in document&&11>=document.documentMode,yr=null,wr=null,kr=null,Er=!1;function Sr(e,t,n){var r=n.window===n?n.document:9===n.nodeType?n:n.ownerDocument;Er||null==yr||yr!==X(r)||("selectionStart"in(r=yr)&&vr(r)?r={start:r.selectionStart,end:r.selectionEnd}:r={anchorNode:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&fr(kr,r)||(kr=r,0<(r=Mr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({event:t,listeners:r}),t.target=yr)))}Dt("cancel cancel click click close close contextmenu contextMenu copy copy cut cut auxclick auxClick dblclick doubleClick dragend dragEnd dragstart dragStart drop drop focusin focus focusout blur input input invalid invalid keydown keyDown keypress keyPress keyup keyUp mousedown mouseDown mouseup mouseUp paste paste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(" "),0),Dt("drag drag dragenter dragEnter dragexit dragExit dragleave dragLeave dragover dragOver mousemove mouseMove mouseout mouseOut mouseover mouseOver pointermove pointerMove pointerout pointerOut pointerover pointerOver scroll scroll toggle toggle touchmove touchMove wheel wheel".split(" "),1),Dt(It,2);for(var xr="change selectionchange textInput compositionstart compositionend compositionupdate".split(" "),Tr=0;Tr<xr.length;Tr++)Ot.set(xr[Tr],0);c("onMouseEnter",["mouseout","mouseover"]),c("onMouseLeave",["mouseout","mouseover"]),c("onPointerEnter",["pointerout","pointerover"]),c("onPointerLeave",["pointerout","pointerover"]),u("onChange","change click focusin focusout input keydown keyup selectionchange".split(" ")),u("onSelect","focusout contextmenu dragend focusin keydown keyup mousedown mouseup selectionchange".split(" ")),u("onBeforeInput",["compositionend","keypress","textInput","paste"]),u("onCompositionEnd","compositionend focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionStart","compositionstart focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionUpdate","compositionupdate focusout keydown keypress keyup mousedown".split(" "));var Cr="abort canplay canplaythrough durationchange emptied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend timeupdate volumechange waiting".split(" "),_r=new Set("cancel close invalid load scroll toggle".split(" ").concat(Cr));function Lr(e,t,n){var r=e.type||"unknown-event";e.currentTarget=n,function(e,t,n,r,a,o,l,s,u){if(We.apply(this,arguments),He){if(!He)throw Error(i(198));var c=Ge;He=!1,Ge=null,Ze||(Ze=!0,Qe=c)}}(r,t,void 0,e),e.currentTarget=null}function Rr(e,t){t=0!=(4&t);for(var n=0;n<e.length;n++){var r=e[n],a=r.event;r=r.listeners;e:{var o=void 0;if(t)for(var i=r.length-1;0<=i;i--){var l=r[i],s=l.instance,u=l.currentTarget;if(l=l.listener,s!==o&&a.isPropagationStopped())break e;Lr(a,l,u),o=s}else for(i=0;i<r.length;i++){if(s=(l=r[i]).instance,u=l.currentTarget,l=l.listener,s!==o&&a.isPropagationStopped())break e;Lr(a,l,u),o=s}}}if(Ze)throw e=Qe,Ze=!1,Qe=null,e}function Ar(e,t){var n=ia(t),r=e+"__bubble";n.has(r)||(Ir(t,e,2,!1),n.add(r))}var Nr="_reactListening"+Math.random().toString(36).slice(2);function Pr(e){e[Nr]||(e[Nr]=!0,l.forEach((function(t){_r.has(t)||Or(t,!1,e,null),Or(t,!0,e,null)})))}function Or(e,t,n,r){var a=4<arguments.length&&void 0!==arguments[4]?arguments[4]:0,o=n;if("selectionchange"===e&&9!==n.nodeType&&(o=n.ownerDocument),null!==r&&!t&&_r.has(e)){if("scroll"!==e)return;a|=2,o=r}var i=ia(o),l=e+"__"+(t?"capture":"bubble");i.has(l)||(t&&(a|=4),Ir(o,e,a,t),i.add(l))}function Ir(e,t,n,r){var a=Ot.get(t);switch(void 0===a?2:a){case 0:a=Kt;break;case 1:a=Yt;break;default:a=Xt}n=a.bind(null,t,n,e),a=void 0,!$e||"touchstart"!==t&&"touchmove"!==t&&"wheel"!==t||(a=!0),r?void 0!==a?e.addEventListener(t,n,{capture:!0,passive:a}):e.addEventListener(t,n,!0):void 0!==a?e.addEventListener(t,n,{passive:a}):e.addEventListener(t,n,!1)}function Dr(e,t,n,r,a){var o=r;if(0==(1&t)&&0==(2&t)&&null!==r)e:for(;;){if(null===r)return;var i=r.tag;if(3===i||4===i){var l=r.stateNode.containerInfo;if(l===a||8===l.nodeType&&l.parentNode===a)break;if(4===i)for(i=r.return;null!==i;){var s=i.tag;if((3===s||4===s)&&((s=i.stateNode.containerInfo)===a||8===s.nodeType&&s.parentNode===a))return;i=i.return}for(;null!==l;){if(null===(i=na(l)))return;if(5===(s=i.tag)||6===s){r=o=i;continue e}l=l.parentNode}}r=r.return}!function(e,t,n){if(Fe)return e(t,n);Fe=!0;try{ze(e,t,n)}finally{Fe=!1,Be()}}((function(){var r=o,a=Ce(n),i=[];e:{var l=Pt.get(e);if(void 0!==l){var s=pn,u=e;switch(e){case"keypress":if(0===an(n))break e;case"keydown":case"keyup":s=An;break;case"focusin":u="focus",s=yn;break;case"focusout":u="blur",s=yn;break;case"beforeblur":case"afterblur":s=yn;break;case"click":if(2===n.button)break e;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":s=vn;break;case"drag":case"dragend":case"dragenter":case"dragexit":case"dragleave":case"dragover":case"dragstart":case"drop":s=bn;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":s=Pn;break;case Lt:case Rt:case At:s=wn;break;case Nt:s=On;break;case"scroll":s=mn;break;case"wheel":s=Dn;break;case"copy":case"cut":case"paste":s=En;break;case"gotpointercapture":case"lostpointercapture":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":s=Nn}var c=0!=(4&t),d=!c&&"scroll"===e,f=c?null!==l?l+"Capture":null:l;c=[];for(var p,h=r;null!==h;){var m=(p=h).stateNode;if(5===p.tag&&null!==m&&(p=m,null!==f&&(null!=(m=je(h,f))&&c.push(zr(h,m,p)))),d)break;h=h.return}0<c.length&&(l=new s(l,u,null,n,a),i.push({event:l,listeners:c}))}}if(0==(7&t)){if(s="mouseout"===e||"pointerout"===e,(!(l="mouseover"===e||"pointerover"===e)||0!=(16&t)||!(u=n.relatedTarget||n.fromElement)||!na(u)&&!u[ea])&&(s||l)&&(l=a.window===a?a:(l=a.ownerDocument)?l.defaultView||l.parentWindow:window,s?(s=r,null!==(u=(u=n.relatedTarget||n.toElement)?na(u):null)&&(u!==(d=Ke(u))||5!==u.tag&&6!==u.tag)&&(u=null)):(s=null,u=r),s!==u)){if(c=vn,m="onMouseLeave",f="onMouseEnter",h="mouse","pointerout"!==e&&"pointerover"!==e||(c=Nn,m="onPointerLeave",f="onPointerEnter",h="pointer"),d=null==s?l:aa(s),p=null==u?l:aa(u),(l=new c(m,h+"leave",s,n,a)).target=d,l.relatedTarget=p,m=null,na(a)===r&&((c=new c(f,h+"enter",u,n,a)).target=p,c.relatedTarget=d,m=c),d=m,s&&u)e:{for(f=u,h=0,p=c=s;p;p=Fr(p))h++;for(p=0,m=f;m;m=Fr(m))p++;for(;0<h-p;)c=Fr(c),h--;for(;0<p-h;)f=Fr(f),p--;for(;h--;){if(c===f||null!==f&&c===f.alternate)break e;c=Fr(c),f=Fr(f)}c=null}else c=null;null!==s&&Br(i,l,s,c,!1),null!==u&&null!==d&&Br(i,d,u,c,!0)}if("select"===(s=(l=r?aa(r):window).nodeName&&l.nodeName.toLowerCase())||"input"===s&&"file"===l.type)var g=Jn;else if(Qn(l))if(er)g=ur;else{g=lr;var v=ir}else(s=l.nodeName)&&"input"===s.toLowerCase()&&("checkbox"===l.type||"radio"===l.type)&&(g=sr);switch(g&&(g=g(e,r))?Vn(i,g,n,a):(v&&v(e,l,r),"focusout"===e&&(v=l._wrapperState)&&v.controlled&&"number"===l.type&&ae(l,"number",l.value)),v=r?aa(r):window,e){case"focusin":(Qn(v)||"true"===v.contentEditable)&&(yr=v,wr=r,kr=null);break;case"focusout":kr=wr=yr=null;break;case"mousedown":Er=!0;break;case"contextmenu":case"mouseup":case"dragend":Er=!1,Sr(i,n,a);break;case"selectionchange":if(br)break;case"keydown":case"keyup":Sr(i,n,a)}var b;if(Mn)e:{switch(e){case"compositionstart":var y="onCompositionStart";break e;case"compositionend":y="onCompositionEnd";break e;case"compositionupdate":y="onCompositionUpdate";break e}y=void 0}else Gn?qn(e,n)&&(y="onCompositionEnd"):"keydown"===e&&229===n.keyCode&&(y="onCompositionStart");y&&(jn&&"ko"!==n.locale&&(Gn||"onCompositionStart"!==y?"onCompositionEnd"===y&&Gn&&(b=rn()):(tn="value"in(en=a)?en.value:en.textContent,Gn=!0)),0<(v=Mr(r,y)).length&&(y=new Sn(y,e,null,n,a),i.push({event:y,listeners:v}),b?y.data=b:null!==(b=Hn(n))&&(y.data=b))),(b=Bn?function(e,t){switch(e){case"compositionend":return Hn(t);case"keypress":return 32!==t.which?null:(Un=!0,$n);case"textInput":return(e=t.data)===$n&&Un?null:e;default:return null}}(e,n):function(e,t){if(Gn)return"compositionend"===e||!Mn&&qn(e,t)?(e=rn(),nn=tn=en=null,Gn=!1,e):null;switch(e){case"paste":default:return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1<t.char.length)return t.char;if(t.which)return String.fromCharCode(t.which)}return null;case"compositionend":return jn&&"ko"!==t.locale?null:t.data}}(e,n))&&(0<(r=Mr(r,"onBeforeInput")).length&&(a=new Sn("onBeforeInput","beforeinput",null,n,a),i.push({event:a,listeners:r}),a.data=b))}Rr(i,t)}))}function zr(e,t,n){return{instance:e,listener:t,currentTarget:n}}function Mr(e,t){for(var n=t+"Capture",r=[];null!==e;){var a=e,o=a.stateNode;5===a.tag&&null!==o&&(a=o,null!=(o=je(e,n))&&r.unshift(zr(e,o,a)),null!=(o=je(e,t))&&r.push(zr(e,o,a))),e=e.return}return r}function Fr(e){if(null===e)return null;do{e=e.return}while(e&&5!==e.tag);return e||null}function Br(e,t,n,r,a){for(var o=t._reactName,i=[];null!==n&&n!==r;){var l=n,s=l.alternate,u=l.stateNode;if(null!==s&&s===r)break;5===l.tag&&null!==u&&(l=u,a?null!=(s=je(n,o))&&i.unshift(zr(n,s,l)):a||null!=(s=je(n,o))&&i.push(zr(n,s,l))),n=n.return}0!==i.length&&e.push({event:t,listeners:i})}function jr(){}var $r=null,Ur=null;function qr(e,t){switch(e){case"button":case"input":case"select":case"textarea":return!!t.autoFocus}return!1}function Hr(e,t){return"textarea"===e||"option"===e||"noscript"===e||"string"==typeof t.children||"number"==typeof t.children||"object"==typeof t.dangerouslySetInnerHTML&&null!==t.dangerouslySetInnerHTML&&null!=t.dangerouslySetInnerHTML.__html}var Gr="function"==typeof setTimeout?setTimeout:void 0,Zr="function"==typeof clearTimeout?clearTimeout:void 0;function Qr(e){1===e.nodeType?e.textContent="":9===e.nodeType&&(null!=(e=e.body)&&(e.textContent=""))}function Vr(e){for(;null!=e;e=e.nextSibling){var t=e.nodeType;if(1===t||3===t)break}return e}function Wr(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n||"$!"===n||"$?"===n){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var Kr=0;var Yr=Math.random().toString(36).slice(2),Xr="__reactFiber$"+Yr,Jr="__reactProps$"+Yr,ea="__reactContainer$"+Yr,ta="__reactEvents$"+Yr;function na(e){var t=e[Xr];if(t)return t;for(var n=e.parentNode;n;){if(t=n[ea]||n[Xr]){if(n=t.alternate,null!==t.child||null!==n&&null!==n.child)for(e=Wr(e);null!==e;){if(n=e[Xr])return n;e=Wr(e)}return t}n=(e=n).parentNode}return null}function ra(e){return!(e=e[Xr]||e[ea])||5!==e.tag&&6!==e.tag&&13!==e.tag&&3!==e.tag?null:e}function aa(e){if(5===e.tag||6===e.tag)return e.stateNode;throw Error(i(33))}function oa(e){return e[Jr]||null}function ia(e){var t=e[ta];return void 0===t&&(t=e[ta]=new Set),t}var la=[],sa=-1;function ua(e){return{current:e}}function ca(e){0>sa||(e.current=la[sa],la[sa]=null,sa--)}function da(e,t){sa++,la[sa]=e.current,e.current=t}var fa={},pa=ua(fa),ha=ua(!1),ma=fa;function ga(e,t){var n=e.type.contextTypes;if(!n)return fa;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmaskedChildContext===t)return r.__reactInternalMemoizedMaskedChildContext;var a,o={};for(a in n)o[a]=t[a];return r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=t,e.__reactInternalMemoizedMaskedChildContext=o),o}function va(e){return null!=(e=e.childContextTypes)}function ba(){ca(ha),ca(pa)}function ya(e,t,n){if(pa.current!==fa)throw Error(i(168));da(pa,t),da(ha,n)}function wa(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.getChildContext)return n;for(var o in r=r.getChildContext())if(!(o in e))throw Error(i(108,Q(t)||"Unknown",o));return a({},n,r)}function ka(e){return e=(e=e.stateNode)&&e.__reactInternalMemoizedMergedChildContext||fa,ma=pa.current,da(pa,e),da(ha,ha.current),!0}function Ea(e,t,n){var r=e.stateNode;if(!r)throw Error(i(169));n?(e=wa(e,t,ma),r.__reactInternalMemoizedMergedChildContext=e,ca(ha),ca(pa),da(pa,e)):ca(ha),da(ha,n)}var Sa=null,xa=null,Ta=o.unstable_runWithPriority,Ca=o.unstable_scheduleCallback,_a=o.unstable_cancelCallback,La=o.unstable_shouldYield,Ra=o.unstable_requestPaint,Aa=o.unstable_now,Na=o.unstable_getCurrentPriorityLevel,Pa=o.unstable_ImmediatePriority,Oa=o.unstable_UserBlockingPriority,Ia=o.unstable_NormalPriority,Da=o.unstable_LowPriority,za=o.unstable_IdlePriority,Ma={},Fa=void 0!==Ra?Ra:function(){},Ba=null,ja=null,$a=!1,Ua=Aa(),qa=1e4>Ua?Aa:function(){return Aa()-Ua};function Ha(){switch(Na()){case Pa:return 99;case Oa:return 98;case Ia:return 97;case Da:return 96;case za:return 95;default:throw Error(i(332))}}function Ga(e){switch(e){case 99:return Pa;case 98:return Oa;case 97:return Ia;case 96:return Da;case 95:return za;default:throw Error(i(332))}}function Za(e,t){return e=Ga(e),Ta(e,t)}function Qa(e,t,n){return e=Ga(e),Ca(e,t,n)}function Va(){if(null!==ja){var e=ja;ja=null,_a(e)}Wa()}function Wa(){if(!$a&&null!==Ba){$a=!0;var e=0;try{var t=Ba;Za(99,(function(){for(;e<t.length;e++){var n=t[e];do{n=n(!0)}while(null!==n)}})),Ba=null}catch(n){throw null!==Ba&&(Ba=Ba.slice(e+1)),Ca(Pa,Va),n}finally{$a=!1}}}var Ka=k.ReactCurrentBatchConfig;function Ya(e,t){if(e&&e.defaultProps){for(var n in t=a({},t),e=e.defaultProps)void 0===t[n]&&(t[n]=e[n]);return t}return t}var Xa=ua(null),Ja=null,eo=null,to=null;function no(){to=eo=Ja=null}function ro(e){var t=Xa.current;ca(Xa),e.type._context._currentValue=t}function ao(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n||(n.childLanes&t)===t)break;n.childLanes|=t}else e.childLanes|=t,null!==n&&(n.childLanes|=t);e=e.return}}function oo(e,t){Ja=e,to=eo=null,null!==(e=e.dependencies)&&null!==e.firstContext&&(0!=(e.lanes&t)&&(Mi=!0),e.firstContext=null)}function io(e,t){if(to!==e&&!1!==t&&0!==t)if("number"==typeof t&&1073741823!==t||(to=e,t=1073741823),t={context:e,observedBits:t,next:null},null===eo){if(null===Ja)throw Error(i(308));eo=t,Ja.dependencies={lanes:0,firstContext:t,responders:null}}else eo=eo.next=t;return e._currentValue}var lo=!1;function so(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null},effects:null}}function uo(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,effects:e.effects})}function co(e,t){return{eventTime:e,lane:t,tag:0,payload:null,callback:null,next:null}}function fo(e,t){if(null!==(e=e.updateQueue)){var n=(e=e.shared).pending;null===n?t.next=t:(t.next=n.next,n.next=t),e.pending=t}}function po(e,t){var n=e.updateQueue,r=e.alternate;if(null!==r&&n===(r=r.updateQueue)){var a=null,o=null;if(null!==(n=n.firstBaseUpdate)){do{var i={eventTime:n.eventTime,lane:n.lane,tag:n.tag,payload:n.payload,callback:n.callback,next:null};null===o?a=o=i:o=o.next=i,n=n.next}while(null!==n);null===o?a=o=t:o=o.next=t}else a=o=t;return n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:o,shared:r.shared,effects:r.effects},void(e.updateQueue=n)}null===(e=n.lastBaseUpdate)?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}function ho(e,t,n,r){var o=e.updateQueue;lo=!1;var i=o.firstBaseUpdate,l=o.lastBaseUpdate,s=o.shared.pending;if(null!==s){o.shared.pending=null;var u=s,c=u.next;u.next=null,null===l?i=c:l.next=c,l=u;var d=e.alternate;if(null!==d){var f=(d=d.updateQueue).lastBaseUpdate;f!==l&&(null===f?d.firstBaseUpdate=c:f.next=c,d.lastBaseUpdate=u)}}if(null!==i){for(f=o.baseState,l=0,d=c=u=null;;){s=i.lane;var p=i.eventTime;if((r&s)===s){null!==d&&(d=d.next={eventTime:p,lane:0,tag:i.tag,payload:i.payload,callback:i.callback,next:null});e:{var h=e,m=i;switch(s=t,p=n,m.tag){case 1:if("function"==typeof(h=m.payload)){f=h.call(p,f,s);break e}f=h;break e;case 3:h.flags=-4097&h.flags|64;case 0:if(null==(s="function"==typeof(h=m.payload)?h.call(p,f,s):h))break e;f=a({},f,s);break e;case 2:lo=!0}}null!==i.callback&&(e.flags|=32,null===(s=o.effects)?o.effects=[i]:s.push(i))}else p={eventTime:p,lane:s,tag:i.tag,payload:i.payload,callback:i.callback,next:null},null===d?(c=d=p,u=f):d=d.next=p,l|=s;if(null===(i=i.next)){if(null===(s=o.shared.pending))break;i=s.next,s.next=null,o.lastBaseUpdate=s,o.shared.pending=null}}null===d&&(u=f),o.baseState=u,o.firstBaseUpdate=c,o.lastBaseUpdate=d,$l|=l,e.lanes=l,e.memoizedState=f}}function mo(e,t,n){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],a=r.callback;if(null!==a){if(r.callback=null,r=n,"function"!=typeof a)throw Error(i(191,a));a.call(r)}}}var go=(new r.Component).refs;function vo(e,t,n,r){n=null==(n=n(r,t=e.memoizedState))?t:a({},t,n),e.memoizedState=n,0===e.lanes&&(e.updateQueue.baseState=n)}var bo={isMounted:function(e){return!!(e=e._reactInternals)&&Ke(e)===e},enqueueSetState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.payload=t,null!=n&&(o.callback=n),fo(e,o),hs(e,a,r)},enqueueReplaceState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.tag=1,o.payload=t,null!=n&&(o.callback=n),fo(e,o),hs(e,a,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=fs(),r=ps(e),a=co(n,r);a.tag=2,null!=t&&(a.callback=t),fo(e,a),hs(e,r,n)}};function yo(e,t,n,r,a,o,i){return"function"==typeof(e=e.stateNode).shouldComponentUpdate?e.shouldComponentUpdate(r,o,i):!t.prototype||!t.prototype.isPureReactComponent||(!fr(n,r)||!fr(a,o))}function wo(e,t,n){var r=!1,a=fa,o=t.contextType;return"object"==typeof o&&null!==o?o=io(o):(a=va(t)?ma:pa.current,o=(r=null!=(r=t.contextTypes))?ga(e,a):fa),t=new t(n,o),e.memoizedState=null!==t.state&&void 0!==t.state?t.state:null,t.updater=bo,e.stateNode=t,t._reactInternals=e,r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=a,e.__reactInternalMemoizedMaskedChildContext=o),t}function ko(e,t,n,r){e=t.state,"function"==typeof t.componentWillReceiveProps&&t.componentWillReceiveProps(n,r),"function"==typeof t.UNSAFE_componentWillReceiveProps&&t.UNSAFE_componentWillReceiveProps(n,r),t.state!==e&&bo.enqueueReplaceState(t,t.state,null)}function Eo(e,t,n,r){var a=e.stateNode;a.props=n,a.state=e.memoizedState,a.refs=go,so(e);var o=t.contextType;"object"==typeof o&&null!==o?a.context=io(o):(o=va(t)?ma:pa.current,a.context=ga(e,o)),ho(e,n,a,r),a.state=e.memoizedState,"function"==typeof(o=t.getDerivedStateFromProps)&&(vo(e,t,o,n),a.state=e.memoizedState),"function"==typeof t.getDerivedStateFromProps||"function"==typeof a.getSnapshotBeforeUpdate||"function"!=typeof a.UNSAFE_componentWillMount&&"function"!=typeof a.componentWillMount||(t=a.state,"function"==typeof a.componentWillMount&&a.componentWillMount(),"function"==typeof a.UNSAFE_componentWillMount&&a.UNSAFE_componentWillMount(),t!==a.state&&bo.enqueueReplaceState(a,a.state,null),ho(e,n,a,r),a.state=e.memoizedState),"function"==typeof a.componentDidMount&&(e.flags|=4)}var So=Array.isArray;function xo(e,t,n){if(null!==(e=n.ref)&&"function"!=typeof e&&"object"!=typeof e){if(n._owner){if(n=n._owner){if(1!==n.tag)throw Error(i(309));var r=n.stateNode}if(!r)throw Error(i(147,e));var a=""+e;return null!==t&&null!==t.ref&&"function"==typeof t.ref&&t.ref._stringRef===a?t.ref:(t=function(e){var t=r.refs;t===go&&(t=r.refs={}),null===e?delete t[a]:t[a]=e},t._stringRef=a,t)}if("string"!=typeof e)throw Error(i(284));if(!n._owner)throw Error(i(290,e))}return e}function To(e,t){if("textarea"!==e.type)throw Error(i(31,"[object Object]"===Object.prototype.toString.call(t)?"object with keys {"+Object.keys(t).join(", ")+"}":t))}function Co(e){function t(t,n){if(e){var r=t.lastEffect;null!==r?(r.nextEffect=n,t.lastEffect=n):t.firstEffect=t.lastEffect=n,n.nextEffect=null,n.flags=8}}function n(n,r){if(!e)return null;for(;null!==r;)t(n,r),r=r.sibling;return null}function r(e,t){for(e=new Map;null!==t;)null!==t.key?e.set(t.key,t):e.set(t.index,t),t=t.sibling;return e}function a(e,t){return(e=Zs(e,t)).index=0,e.sibling=null,e}function o(t,n,r){return t.index=r,e?null!==(r=t.alternate)?(r=r.index)<n?(t.flags=2,n):r:(t.flags=2,n):n}function l(t){return e&&null===t.alternate&&(t.flags=2),t}function s(e,t,n,r){return null===t||6!==t.tag?((t=Ks(n,e.mode,r)).return=e,t):((t=a(t,n)).return=e,t)}function u(e,t,n,r){return null!==t&&t.elementType===n.type?((r=a(t,n.props)).ref=xo(e,t,n),r.return=e,r):((r=Qs(n.type,n.key,n.props,null,e.mode,r)).ref=xo(e,t,n),r.return=e,r)}function c(e,t,n,r){return null===t||4!==t.tag||t.stateNode.containerInfo!==n.containerInfo||t.stateNode.implementation!==n.implementation?((t=Ys(n,e.mode,r)).return=e,t):((t=a(t,n.children||[])).return=e,t)}function d(e,t,n,r,o){return null===t||7!==t.tag?((t=Vs(n,e.mode,r,o)).return=e,t):((t=a(t,n)).return=e,t)}function f(e,t,n){if("string"==typeof t||"number"==typeof t)return(t=Ks(""+t,e.mode,n)).return=e,t;if("object"==typeof t&&null!==t){switch(t.$$typeof){case E:return(n=Qs(t.type,t.key,t.props,null,e.mode,n)).ref=xo(e,null,t),n.return=e,n;case S:return(t=Ys(t,e.mode,n)).return=e,t}if(So(t)||U(t))return(t=Vs(t,e.mode,n,null)).return=e,t;To(e,t)}return null}function p(e,t,n,r){var a=null!==t?t.key:null;if("string"==typeof n||"number"==typeof n)return null!==a?null:s(e,t,""+n,r);if("object"==typeof n&&null!==n){switch(n.$$typeof){case E:return n.key===a?n.type===x?d(e,t,n.props.children,r,a):u(e,t,n,r):null;case S:return n.key===a?c(e,t,n,r):null}if(So(n)||U(n))return null!==a?null:d(e,t,n,r,null);To(e,n)}return null}function h(e,t,n,r,a){if("string"==typeof r||"number"==typeof r)return s(t,e=e.get(n)||null,""+r,a);if("object"==typeof r&&null!==r){switch(r.$$typeof){case E:return e=e.get(null===r.key?n:r.key)||null,r.type===x?d(t,e,r.props.children,a,r.key):u(t,e,r,a);case S:return c(t,e=e.get(null===r.key?n:r.key)||null,r,a)}if(So(r)||U(r))return d(t,e=e.get(n)||null,r,a,null);To(t,r)}return null}function m(a,i,l,s){for(var u=null,c=null,d=i,m=i=0,g=null;null!==d&&m<l.length;m++){d.index>m?(g=d,d=null):g=d.sibling;var v=p(a,d,l[m],s);if(null===v){null===d&&(d=g);break}e&&d&&null===v.alternate&&t(a,d),i=o(v,i,m),null===c?u=v:c.sibling=v,c=v,d=g}if(m===l.length)return n(a,d),u;if(null===d){for(;m<l.length;m++)null!==(d=f(a,l[m],s))&&(i=o(d,i,m),null===c?u=d:c.sibling=d,c=d);return u}for(d=r(a,d);m<l.length;m++)null!==(g=h(d,a,m,l[m],s))&&(e&&null!==g.alternate&&d.delete(null===g.key?m:g.key),i=o(g,i,m),null===c?u=g:c.sibling=g,c=g);return e&&d.forEach((function(e){return t(a,e)})),u}function g(a,l,s,u){var c=U(s);if("function"!=typeof c)throw Error(i(150));if(null==(s=c.call(s)))throw Error(i(151));for(var d=c=null,m=l,g=l=0,v=null,b=s.next();null!==m&&!b.done;g++,b=s.next()){m.index>g?(v=m,m=null):v=m.sibling;var y=p(a,m,b.value,u);if(null===y){null===m&&(m=v);break}e&&m&&null===y.alternate&&t(a,m),l=o(y,l,g),null===d?c=y:d.sibling=y,d=y,m=v}if(b.done)return n(a,m),c;if(null===m){for(;!b.done;g++,b=s.next())null!==(b=f(a,b.value,u))&&(l=o(b,l,g),null===d?c=b:d.sibling=b,d=b);return c}for(m=r(a,m);!b.done;g++,b=s.next())null!==(b=h(m,a,g,b.value,u))&&(e&&null!==b.alternate&&m.delete(null===b.key?g:b.key),l=o(b,l,g),null===d?c=b:d.sibling=b,d=b);return e&&m.forEach((function(e){return t(a,e)})),c}return function(e,r,o,s){var u="object"==typeof o&&null!==o&&o.type===x&&null===o.key;u&&(o=o.props.children);var c="object"==typeof o&&null!==o;if(c)switch(o.$$typeof){case E:e:{for(c=o.key,u=r;null!==u;){if(u.key===c){if(7===u.tag){if(o.type===x){n(e,u.sibling),(r=a(u,o.props.children)).return=e,e=r;break e}}else if(u.elementType===o.type){n(e,u.sibling),(r=a(u,o.props)).ref=xo(e,u,o),r.return=e,e=r;break e}n(e,u);break}t(e,u),u=u.sibling}o.type===x?((r=Vs(o.props.children,e.mode,s,o.key)).return=e,e=r):((s=Qs(o.type,o.key,o.props,null,e.mode,s)).ref=xo(e,r,o),s.return=e,e=s)}return l(e);case S:e:{for(u=o.key;null!==r;){if(r.key===u){if(4===r.tag&&r.stateNode.containerInfo===o.containerInfo&&r.stateNode.implementation===o.implementation){n(e,r.sibling),(r=a(r,o.children||[])).return=e,e=r;break e}n(e,r);break}t(e,r),r=r.sibling}(r=Ys(o,e.mode,s)).return=e,e=r}return l(e)}if("string"==typeof o||"number"==typeof o)return o=""+o,null!==r&&6===r.tag?(n(e,r.sibling),(r=a(r,o)).return=e,e=r):(n(e,r),(r=Ks(o,e.mode,s)).return=e,e=r),l(e);if(So(o))return m(e,r,o,s);if(U(o))return g(e,r,o,s);if(c&&To(e,o),void 0===o&&!u)switch(e.tag){case 1:case 22:case 0:case 11:case 15:throw Error(i(152,Q(e.type)||"Component"))}return n(e,r)}}var _o=Co(!0),Lo=Co(!1),Ro={},Ao=ua(Ro),No=ua(Ro),Po=ua(Ro);function Oo(e){if(e===Ro)throw Error(i(174));return e}function Io(e,t){switch(da(Po,t),da(No,e),da(Ao,Ro),e=t.nodeType){case 9:case 11:t=(t=t.documentElement)?t.namespaceURI:he(null,"");break;default:t=he(t=(e=8===e?t.parentNode:t).namespaceURI||null,e=e.tagName)}ca(Ao),da(Ao,t)}function Do(){ca(Ao),ca(No),ca(Po)}function zo(e){Oo(Po.current);var t=Oo(Ao.current),n=he(t,e.type);t!==n&&(da(No,e),da(Ao,n))}function Mo(e){No.current===e&&(ca(Ao),ca(No))}var Fo=ua(0);function Bo(e){for(var t=e;null!==t;){if(13===t.tag){var n=t.memoizedState;if(null!==n&&(null===(n=n.dehydrated)||"$?"===n.data||"$!"===n.data))return t}else if(19===t.tag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.flags))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}return null}var jo=null,$o=null,Uo=!1;function qo(e,t){var n=Hs(5,null,null,0);n.elementType="DELETED",n.type="DELETED",n.stateNode=t,n.return=e,n.flags=8,null!==e.lastEffect?(e.lastEffect.nextEffect=n,e.lastEffect=n):e.firstEffect=e.lastEffect=n}function Ho(e,t){switch(e.tag){case 5:var n=e.type;return null!==(t=1!==t.nodeType||n.toLowerCase()!==t.nodeName.toLowerCase()?null:t)&&(e.stateNode=t,!0);case 6:return null!==(t=""===e.pendingProps||3!==t.nodeType?null:t)&&(e.stateNode=t,!0);default:return!1}}function Go(e){if(Uo){var t=$o;if(t){var n=t;if(!Ho(e,t)){if(!(t=Vr(n.nextSibling))||!Ho(e,t))return e.flags=-1025&e.flags|2,Uo=!1,void(jo=e);qo(jo,n)}jo=e,$o=Vr(t.firstChild)}else e.flags=-1025&e.flags|2,Uo=!1,jo=e}}function Zo(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;jo=e}function Qo(e){if(e!==jo)return!1;if(!Uo)return Zo(e),Uo=!0,!1;var t=e.type;if(5!==e.tag||"head"!==t&&"body"!==t&&!Hr(t,e.memoizedProps))for(t=$o;t;)qo(e,t),t=Vr(t.nextSibling);if(Zo(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(i(317));e:{for(e=e.nextSibling,t=0;e;){if(8===e.nodeType){var n=e.data;if("/$"===n){if(0===t){$o=Vr(e.nextSibling);break e}t--}else"$"!==n&&"$!"!==n&&"$?"!==n||t++}e=e.nextSibling}$o=null}}else $o=jo?Vr(e.stateNode.nextSibling):null;return!0}function Vo(){$o=jo=null,Uo=!1}var Wo=[];function Ko(){for(var e=0;e<Wo.length;e++)Wo[e]._workInProgressVersionPrimary=null;Wo.length=0}var Yo=k.ReactCurrentDispatcher,Xo=k.ReactCurrentBatchConfig,Jo=0,ei=null,ti=null,ni=null,ri=!1,ai=!1;function oi(){throw Error(i(321))}function ii(e,t){if(null===t)return!1;for(var n=0;n<t.length&&n<e.length;n++)if(!cr(e[n],t[n]))return!1;return!0}function li(e,t,n,r,a,o){if(Jo=o,ei=t,t.memoizedState=null,t.updateQueue=null,t.lanes=0,Yo.current=null===e||null===e.memoizedState?Oi:Ii,e=n(r,a),ai){o=0;do{if(ai=!1,!(25>o))throw Error(i(301));o+=1,ni=ti=null,t.updateQueue=null,Yo.current=Di,e=n(r,a)}while(ai)}if(Yo.current=Pi,t=null!==ti&&null!==ti.next,Jo=0,ni=ti=ei=null,ri=!1,t)throw Error(i(300));return e}function si(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===ni?ei.memoizedState=ni=e:ni=ni.next=e,ni}function ui(){if(null===ti){var e=ei.alternate;e=null!==e?e.memoizedState:null}else e=ti.next;var t=null===ni?ei.memoizedState:ni.next;if(null!==t)ni=t,ti=e;else{if(null===e)throw Error(i(310));e={memoizedState:(ti=e).memoizedState,baseState:ti.baseState,baseQueue:ti.baseQueue,queue:ti.queue,next:null},null===ni?ei.memoizedState=ni=e:ni=ni.next=e}return ni}function ci(e,t){return"function"==typeof t?t(e):t}function di(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=ti,a=r.baseQueue,o=n.pending;if(null!==o){if(null!==a){var l=a.next;a.next=o.next,o.next=l}r.baseQueue=a=o,n.pending=null}if(null!==a){a=a.next,r=r.baseState;var s=l=o=null,u=a;do{var c=u.lane;if((Jo&c)===c)null!==s&&(s=s.next={lane:0,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null}),r=u.eagerReducer===e?u.eagerState:e(r,u.action);else{var d={lane:c,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null};null===s?(l=s=d,o=r):s=s.next=d,ei.lanes|=c,$l|=c}u=u.next}while(null!==u&&u!==a);null===s?o=r:s.next=l,cr(r,t.memoizedState)||(Mi=!0),t.memoizedState=r,t.baseState=o,t.baseQueue=s,n.lastRenderedState=r}return[t.memoizedState,n.dispatch]}function fi(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=n.dispatch,a=n.pending,o=t.memoizedState;if(null!==a){n.pending=null;var l=a=a.next;do{o=e(o,l.action),l=l.next}while(l!==a);cr(o,t.memoizedState)||(Mi=!0),t.memoizedState=o,null===t.baseQueue&&(t.baseState=o),n.lastRenderedState=o}return[o,r]}function pi(e,t,n){var r=t._getVersion;r=r(t._source);var a=t._workInProgressVersionPrimary;if(null!==a?e=a===r:(e=e.mutableReadLanes,(e=(Jo&e)===e)&&(t._workInProgressVersionPrimary=r,Wo.push(t))),e)return n(t._source);throw Wo.push(t),Error(i(350))}function hi(e,t,n,r){var a=Ol;if(null===a)throw Error(i(349));var o=t._getVersion,l=o(t._source),s=Yo.current,u=s.useState((function(){return pi(a,t,n)})),c=u[1],d=u[0];u=ni;var f=e.memoizedState,p=f.refs,h=p.getSnapshot,m=f.source;f=f.subscribe;var g=ei;return e.memoizedState={refs:p,source:t,subscribe:r},s.useEffect((function(){p.getSnapshot=n,p.setSnapshot=c;var e=o(t._source);if(!cr(l,e)){e=n(t._source),cr(d,e)||(c(e),e=ps(g),a.mutableReadLanes|=e&a.pendingLanes),e=a.mutableReadLanes,a.entangledLanes|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-Ht(i),u=1<<s;r[s]|=e,i&=~u}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(g);a.mutableReadLanes|=r&a.pendingLanes}catch(o){n((function(){throw o}))}}))}),[t,r]),cr(h,n)&&cr(m,t)&&cr(f,r)||((e={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:d}).dispatch=c=Ni.bind(null,ei,e),u.queue=e,u.baseQueue=null,d=pi(a,t,n),u.memoizedState=u.baseState=d),d}function mi(e,t,n){return hi(ui(),e,t,n)}function gi(e){var t=si();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:e}).dispatch=Ni.bind(null,ei,e),[t.memoizedState,e]}function vi(e,t,n,r){return e={tag:e,create:t,destroy:n,deps:r,next:null},null===(t=ei.updateQueue)?(t={lastEffect:null},ei.updateQueue=t,t.lastEffect=e.next=e):null===(n=t.lastEffect)?t.lastEffect=e.next=e:(r=n.next,n.next=e,e.next=r,t.lastEffect=e),e}function bi(e){return e={current:e},si().memoizedState=e}function yi(){return ui().memoizedState}function wi(e,t,n,r){var a=si();ei.flags|=e,a.memoizedState=vi(1|t,n,void 0,void 0===r?null:r)}function ki(e,t,n,r){var a=ui();r=void 0===r?null:r;var o=void 0;if(null!==ti){var i=ti.memoizedState;if(o=i.destroy,null!==r&&ii(r,i.deps))return void vi(t,n,o,r)}ei.flags|=e,a.memoizedState=vi(1|t,n,o,r)}function Ei(e,t){return wi(516,4,e,t)}function Si(e,t){return ki(516,4,e,t)}function xi(e,t){return ki(4,2,e,t)}function Ti(e,t){return"function"==typeof t?(e=e(),t(e),function(){t(null)}):null!=t?(e=e(),t.current=e,function(){t.current=null}):void 0}function Ci(e,t,n){return n=null!=n?n.concat([e]):null,ki(4,2,Ti.bind(null,t,e),n)}function _i(){}function Li(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Ri(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(e=e(),n.memoizedState=[e,t],e)}function Ai(e,t){var n=Ha();Za(98>n?98:n,(function(){e(!0)})),Za(97<n?97:n,(function(){var n=Xo.transition;Xo.transition=1;try{e(!1),t()}finally{Xo.transition=n}}))}function Ni(e,t,n){var r=fs(),a=ps(e),o={lane:a,action:n,eagerReducer:null,eagerState:null,next:null},i=t.pending;if(null===i?o.next=o:(o.next=i.next,i.next=o),t.pending=o,i=e.alternate,e===ei||null!==i&&i===ei)ai=ri=!0;else{if(0===e.lanes&&(null===i||0===i.lanes)&&null!==(i=t.lastRenderedReducer))try{var l=t.lastRenderedState,s=i(l,n);if(o.eagerReducer=i,o.eagerState=s,cr(s,l))return}catch(u){}hs(e,a,r)}}var Pi={readContext:io,useCallback:oi,useContext:oi,useEffect:oi,useImperativeHandle:oi,useLayoutEffect:oi,useMemo:oi,useReducer:oi,useRef:oi,useState:oi,useDebugValue:oi,useDeferredValue:oi,useTransition:oi,useMutableSource:oi,useOpaqueIdentifier:oi,unstable_isNewReconciler:!1},Oi={readContext:io,useCallback:function(e,t){return si().memoizedState=[e,void 0===t?null:t],e},useContext:io,useEffect:Ei,useImperativeHandle:function(e,t,n){return n=null!=n?n.concat([e]):null,wi(4,2,Ti.bind(null,t,e),n)},useLayoutEffect:function(e,t){return wi(4,2,e,t)},useMemo:function(e,t){var n=si();return t=void 0===t?null:t,e=e(),n.memoizedState=[e,t],e},useReducer:function(e,t,n){var r=si();return t=void 0!==n?n(t):t,r.memoizedState=r.baseState=t,e=(e=r.queue={pending:null,dispatch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=Ni.bind(null,ei,e),[r.memoizedState,e]},useRef:bi,useState:gi,useDebugValue:_i,useDeferredValue:function(e){var t=gi(e),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=gi(!1),t=e[0];return bi(e=Ai.bind(null,e[1])),[e,t]},useMutableSource:function(e,t,n){var r=si();return r.memoizedState={refs:{getSnapshot:t,setSnapshot:null},source:e,subscribe:n},hi(r,e,t,n)},useOpaqueIdentifier:function(){if(Uo){var e=!1,t=function(e){return{$$typeof:D,toString:e,valueOf:e}}((function(){throw e||(e=!0,n("r:"+(Kr++).toString(36))),Error(i(355))})),n=gi(t)[1];return 0==(2&ei.mode)&&(ei.flags|=516,vi(5,(function(){n("r:"+(Kr++).toString(36))}),void 0,null)),t}return gi(t="r:"+(Kr++).toString(36)),t},unstable_isNewReconciler:!1},Ii={readContext:io,useCallback:Li,useContext:io,useEffect:Si,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Ri,useReducer:di,useRef:yi,useState:function(){return di(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=di(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=di(ci)[0];return[yi().current,e]},useMutableSource:mi,useOpaqueIdentifier:function(){return di(ci)[0]},unstable_isNewReconciler:!1},Di={readContext:io,useCallback:Li,useContext:io,useEffect:Si,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Ri,useReducer:fi,useRef:yi,useState:function(){return fi(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=fi(ci),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=fi(ci)[0];return[yi().current,e]},useMutableSource:mi,useOpaqueIdentifier:function(){return fi(ci)[0]},unstable_isNewReconciler:!1},zi=k.ReactCurrentOwner,Mi=!1;function Fi(e,t,n,r){t.child=null===e?Lo(t,null,n,r):_o(t,e.child,n,r)}function Bi(e,t,n,r,a){n=n.render;var o=t.ref;return oo(t,a),r=li(e,t,n,r,o,a),null===e||Mi?(t.flags|=1,Fi(e,t,r,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function ji(e,t,n,r,a,o){if(null===e){var i=n.type;return"function"!=typeof i||Gs(i)||void 0!==i.defaultProps||null!==n.compare||void 0!==n.defaultProps?((e=Qs(n.type,null,r,t,t.mode,o)).ref=t.ref,e.return=t,t.child=e):(t.tag=15,t.type=i,$i(e,t,i,r,a,o))}return i=e.child,0==(a&o)&&(a=i.memoizedProps,(n=null!==(n=n.compare)?n:fr)(a,r)&&e.ref===t.ref)?ol(e,t,o):(t.flags|=1,(e=Zs(i,r)).ref=t.ref,e.return=t,t.child=e)}function $i(e,t,n,r,a,o){if(null!==e&&fr(e.memoizedProps,r)&&e.ref===t.ref){if(Mi=!1,0==(o&a))return t.lanes=e.lanes,ol(e,t,o);0!=(16384&e.flags)&&(Mi=!0)}return Hi(e,t,n,r,o)}function Ui(e,t,n){var r=t.pendingProps,a=r.children,o=null!==e?e.memoizedState:null;if("hidden"===r.mode||"unstable-defer-without-hiding"===r.mode)if(0==(4&t.mode))t.memoizedState={baseLanes:0},Es(t,n);else{if(0==(1073741824&n))return e=null!==o?o.baseLanes|n:n,t.lanes=t.childLanes=1073741824,t.memoizedState={baseLanes:e},Es(t,e),null;t.memoizedState={baseLanes:0},Es(t,null!==o?o.baseLanes:n)}else null!==o?(r=o.baseLanes|n,t.memoizedState=null):r=n,Es(t,r);return Fi(e,t,a,n),t.child}function qi(e,t){var n=t.ref;(null===e&&null!==n||null!==e&&e.ref!==n)&&(t.flags|=128)}function Hi(e,t,n,r,a){var o=va(n)?ma:pa.current;return o=ga(t,o),oo(t,a),n=li(e,t,n,r,o,a),null===e||Mi?(t.flags|=1,Fi(e,t,n,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function Gi(e,t,n,r,a){if(va(n)){var o=!0;ka(t)}else o=!1;if(oo(t,a),null===t.stateNode)null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),wo(t,n,r),Eo(t,n,r,a),r=!0;else if(null===e){var i=t.stateNode,l=t.memoizedProps;i.props=l;var s=i.context,u=n.contextType;"object"==typeof u&&null!==u?u=io(u):u=ga(t,u=va(n)?ma:pa.current);var c=n.getDerivedStateFromProps,d="function"==typeof c||"function"==typeof i.getSnapshotBeforeUpdate;d||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==r||s!==u)&&ko(t,i,r,u),lo=!1;var f=t.memoizedState;i.state=f,ho(t,r,i,a),s=t.memoizedState,l!==r||f!==s||ha.current||lo?("function"==typeof c&&(vo(t,n,c,r),s=t.memoizedState),(l=lo||yo(t,n,l,r,f,s,u))?(d||"function"!=typeof i.UNSAFE_componentWillMount&&"function"!=typeof i.componentWillMount||("function"==typeof i.componentWillMount&&i.componentWillMount(),"function"==typeof i.UNSAFE_componentWillMount&&i.UNSAFE_componentWillMount()),"function"==typeof i.componentDidMount&&(t.flags|=4)):("function"==typeof i.componentDidMount&&(t.flags|=4),t.memoizedProps=r,t.memoizedState=s),i.props=r,i.state=s,i.context=u,r=l):("function"==typeof i.componentDidMount&&(t.flags|=4),r=!1)}else{i=t.stateNode,uo(e,t),l=t.memoizedProps,u=t.type===t.elementType?l:Ya(t.type,l),i.props=u,d=t.pendingProps,f=i.context,"object"==typeof(s=n.contextType)&&null!==s?s=io(s):s=ga(t,s=va(n)?ma:pa.current);var p=n.getDerivedStateFromProps;(c="function"==typeof p||"function"==typeof i.getSnapshotBeforeUpdate)||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==d||f!==s)&&ko(t,i,r,s),lo=!1,f=t.memoizedState,i.state=f,ho(t,r,i,a);var h=t.memoizedState;l!==d||f!==h||ha.current||lo?("function"==typeof p&&(vo(t,n,p,r),h=t.memoizedState),(u=lo||yo(t,n,u,r,f,h,s))?(c||"function"!=typeof i.UNSAFE_componentWillUpdate&&"function"!=typeof i.componentWillUpdate||("function"==typeof i.componentWillUpdate&&i.componentWillUpdate(r,h,s),"function"==typeof i.UNSAFE_componentWillUpdate&&i.UNSAFE_componentWillUpdate(r,h,s)),"function"==typeof i.componentDidUpdate&&(t.flags|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(t.flags|=256)):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),t.memoizedProps=r,t.memoizedState=h),i.props=r,i.state=h,i.context=s,r=u):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),r=!1)}return Zi(e,t,n,r,o,a)}function Zi(e,t,n,r,a,o){qi(e,t);var i=0!=(64&t.flags);if(!r&&!i)return a&&Ea(t,n,!1),ol(e,t,o);r=t.stateNode,zi.current=t;var l=i&&"function"!=typeof n.getDerivedStateFromError?null:r.render();return t.flags|=1,null!==e&&i?(t.child=_o(t,e.child,null,o),t.child=_o(t,null,l,o)):Fi(e,t,l,o),t.memoizedState=r.state,a&&Ea(t,n,!0),t.child}function Qi(e){var t=e.stateNode;t.pendingContext?ya(0,t.pendingContext,t.pendingContext!==t.context):t.context&&ya(0,t.context,!1),Io(e,t.containerInfo)}var Vi,Wi,Ki,Yi={dehydrated:null,retryLane:0};function Xi(e,t,n){var r,a=t.pendingProps,o=Fo.current,i=!1;return(r=0!=(64&t.flags))||(r=(null===e||null!==e.memoizedState)&&0!=(2&o)),r?(i=!0,t.flags&=-65):null!==e&&null===e.memoizedState||void 0===a.fallback||!0===a.unstable_avoidThisFallback||(o|=1),da(Fo,1&o),null===e?(void 0!==a.fallback&&Go(t),e=a.children,o=a.fallback,i?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Yi,e):"number"==typeof a.unstable_expectedLoadTime?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Yi,t.lanes=33554432,e):((n=Ws({mode:"visible",children:e},t.mode,n,null)).return=t,t.child=n)):(e.memoizedState,i?(a=tl(e,t,a.children,a.fallback,n),i=t.child,o=e.child.memoizedState,i.memoizedState=null===o?{baseLanes:n}:{baseLanes:o.baseLanes|n},i.childLanes=e.childLanes&~n,t.memoizedState=Yi,a):(n=el(e,t,a.children,n),t.memoizedState=null,n))}function Ji(e,t,n,r){var a=e.mode,o=e.child;return t={mode:"hidden",children:t},0==(2&a)&&null!==o?(o.childLanes=0,o.pendingProps=t):o=Ws(t,a,0,null),n=Vs(n,a,r,null),o.return=e,n.return=e,o.sibling=n,e.child=o,n}function el(e,t,n,r){var a=e.child;return e=a.sibling,n=Zs(a,{mode:"visible",children:n}),0==(2&t.mode)&&(n.lanes=r),n.return=t,n.sibling=null,null!==e&&(e.nextEffect=null,e.flags=8,t.firstEffect=t.lastEffect=e),t.child=n}function tl(e,t,n,r,a){var o=t.mode,i=e.child;e=i.sibling;var l={mode:"hidden",children:n};return 0==(2&o)&&t.child!==i?((n=t.child).childLanes=0,n.pendingProps=l,null!==(i=n.lastEffect)?(t.firstEffect=n.firstEffect,t.lastEffect=i,i.nextEffect=null):t.firstEffect=t.lastEffect=null):n=Zs(i,l),null!==e?r=Zs(e,r):(r=Vs(r,o,a,null)).flags|=2,r.return=t,n.return=t,n.sibling=r,t.child=n,r}function nl(e,t){e.lanes|=t;var n=e.alternate;null!==n&&(n.lanes|=t),ao(e.return,t)}function rl(e,t,n,r,a,o){var i=e.memoizedState;null===i?e.memoizedState={isBackwards:t,rendering:null,renderingStartTime:0,last:r,tail:n,tailMode:a,lastEffect:o}:(i.isBackwards=t,i.rendering=null,i.renderingStartTime=0,i.last=r,i.tail=n,i.tailMode=a,i.lastEffect=o)}function al(e,t,n){var r=t.pendingProps,a=r.revealOrder,o=r.tail;if(Fi(e,t,r.children,n),0!=(2&(r=Fo.current)))r=1&r|2,t.flags|=64;else{if(null!==e&&0!=(64&e.flags))e:for(e=t.child;null!==e;){if(13===e.tag)null!==e.memoizedState&&nl(e,n);else if(19===e.tag)nl(e,n);else if(null!==e.child){e.child.return=e,e=e.child;continue}if(e===t)break e;for(;null===e.sibling;){if(null===e.return||e.return===t)break e;e=e.return}e.sibling.return=e.return,e=e.sibling}r&=1}if(da(Fo,r),0==(2&t.mode))t.memoizedState=null;else switch(a){case"forwards":for(n=t.child,a=null;null!==n;)null!==(e=n.alternate)&&null===Bo(e)&&(a=n),n=n.sibling;null===(n=a)?(a=t.child,t.child=null):(a=n.sibling,n.sibling=null),rl(t,!1,a,n,o,t.lastEffect);break;case"backwards":for(n=null,a=t.child,t.child=null;null!==a;){if(null!==(e=a.alternate)&&null===Bo(e)){t.child=a;break}e=a.sibling,a.sibling=n,n=a,a=e}rl(t,!0,n,null,o,t.lastEffect);break;case"together":rl(t,!1,null,null,void 0,t.lastEffect);break;default:t.memoizedState=null}return t.child}function ol(e,t,n){if(null!==e&&(t.dependencies=e.dependencies),$l|=t.lanes,0!=(n&t.childLanes)){if(null!==e&&t.child!==e.child)throw Error(i(153));if(null!==t.child){for(n=Zs(e=t.child,e.pendingProps),t.child=n,n.return=t;null!==e.sibling;)e=e.sibling,(n=n.sibling=Zs(e,e.pendingProps)).return=t;n.sibling=null}return t.child}return null}function il(e,t){if(!Uo)switch(e.tailMode){case"hidden":t=e.tail;for(var n=null;null!==t;)null!==t.alternate&&(n=t),t=t.sibling;null===n?e.tail=null:n.sibling=null;break;case"collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t||null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function ll(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12:case 9:case 14:return null;case 1:case 17:return va(t.type)&&ba(),null;case 3:return Do(),ca(ha),ca(pa),Ko(),(r=t.stateNode).pendingContext&&(r.context=r.pendingContext,r.pendingContext=null),null!==e&&null!==e.child||(Qo(t)?t.flags|=4:r.hydrate||(t.flags|=256)),null;case 5:Mo(t);var o=Oo(Po.current);if(n=t.type,null!==e&&null!=t.stateNode)Wi(e,t,n,r),e.ref!==t.ref&&(t.flags|=128);else{if(!r){if(null===t.stateNode)throw Error(i(166));return null}if(e=Oo(Ao.current),Qo(t)){r=t.stateNode,n=t.type;var l=t.memoizedProps;switch(r[Xr]=t,r[Jr]=l,n){case"dialog":Ar("cancel",r),Ar("close",r);break;case"iframe":case"object":case"embed":Ar("load",r);break;case"video":case"audio":for(e=0;e<Cr.length;e++)Ar(Cr[e],r);break;case"source":Ar("error",r);break;case"img":case"image":case"link":Ar("error",r),Ar("load",r);break;case"details":Ar("toggle",r);break;case"input":ee(r,l),Ar("invalid",r);break;case"select":r._wrapperState={wasMultiple:!!l.multiple},Ar("invalid",r);break;case"textarea":se(r,l),Ar("invalid",r)}for(var u in xe(n,l),e=null,l)l.hasOwnProperty(u)&&(o=l[u],"children"===u?"string"==typeof o?r.textContent!==o&&(e=["children",o]):"number"==typeof o&&r.textContent!==""+o&&(e=["children",""+o]):s.hasOwnProperty(u)&&null!=o&&"onScroll"===u&&Ar("scroll",r));switch(n){case"input":K(r),re(r,l,!0);break;case"textarea":K(r),ce(r);break;case"select":case"option":break;default:"function"==typeof l.onClick&&(r.onclick=jr)}r=e,t.updateQueue=r,null!==r&&(t.flags|=4)}else{switch(u=9===o.nodeType?o:o.ownerDocument,e===de&&(e=pe(n)),e===de?"script"===n?((e=u.createElement("div")).innerHTML="<script><\/script>",e=e.removeChild(e.firstChild)):"string"==typeof r.is?e=u.createElement(n,{is:r.is}):(e=u.createElement(n),"select"===n&&(u=e,r.multiple?u.multiple=!0:r.size&&(u.size=r.size))):e=u.createElementNS(e,n),e[Xr]=t,e[Jr]=r,Vi(e,t),t.stateNode=e,u=Te(n,r),n){case"dialog":Ar("cancel",e),Ar("close",e),o=r;break;case"iframe":case"object":case"embed":Ar("load",e),o=r;break;case"video":case"audio":for(o=0;o<Cr.length;o++)Ar(Cr[o],e);o=r;break;case"source":Ar("error",e),o=r;break;case"img":case"image":case"link":Ar("error",e),Ar("load",e),o=r;break;case"details":Ar("toggle",e),o=r;break;case"input":ee(e,r),o=J(e,r),Ar("invalid",e);break;case"option":o=oe(e,r);break;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Ar("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Ar("invalid",e);break;default:o=r}xe(n,o);var c=o;for(l in c)if(c.hasOwnProperty(l)){var d=c[l];"style"===l?Ee(e,d):"dangerouslySetInnerHTML"===l?null!=(d=d?d.__html:void 0)&&ve(e,d):"children"===l?"string"==typeof d?("textarea"!==n||""!==d)&&be(e,d):"number"==typeof d&&be(e,""+d):"suppressContentEditableWarning"!==l&&"suppressHydrationWarning"!==l&&"autoFocus"!==l&&(s.hasOwnProperty(l)?null!=d&&"onScroll"===l&&Ar("scroll",e):null!=d&&w(e,l,d,u))}switch(n){case"input":K(e),re(e,r,!1);break;case"textarea":K(e),ce(e);break;case"option":null!=r.value&&e.setAttribute("value",""+V(r.value));break;case"select":e.multiple=!!r.multiple,null!=(l=r.value)?ie(e,!!r.multiple,l,!1):null!=r.defaultValue&&ie(e,!!r.multiple,r.defaultValue,!0);break;default:"function"==typeof o.onClick&&(e.onclick=jr)}qr(n,r)&&(t.flags|=4)}null!==t.ref&&(t.flags|=128)}return null;case 6:if(e&&null!=t.stateNode)Ki(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(i(166));n=Oo(Po.current),Oo(Ao.current),Qo(t)?(r=t.stateNode,n=t.memoizedProps,r[Xr]=t,r.nodeValue!==n&&(t.flags|=4)):((r=(9===n.nodeType?n:n.ownerDocument).createTextNode(r))[Xr]=t,t.stateNode=r)}return null;case 13:return ca(Fo),r=t.memoizedState,0!=(64&t.flags)?(t.lanes=n,t):(r=null!==r,n=!1,null===e?void 0!==t.memoizedProps.fallback&&Qo(t):n=null!==e.memoizedState,r&&!n&&0!=(2&t.mode)&&(null===e&&!0!==t.memoizedProps.unstable_avoidThisFallback||0!=(1&Fo.current)?0===Fl&&(Fl=3):(0!==Fl&&3!==Fl||(Fl=4),null===Ol||0==(134217727&$l)&&0==(134217727&Ul)||bs(Ol,Dl))),(r||n)&&(t.flags|=4),null);case 4:return Do(),null===e&&Pr(t.stateNode.containerInfo),null;case 10:return ro(t),null;case 19:if(ca(Fo),null===(r=t.memoizedState))return null;if(l=0!=(64&t.flags),null===(u=r.rendering))if(l)il(r,!1);else{if(0!==Fl||null!==e&&0!=(64&e.flags))for(e=t.child;null!==e;){if(null!==(u=Bo(e))){for(t.flags|=64,il(r,!1),null!==(l=u.updateQueue)&&(t.updateQueue=l,t.flags|=4),null===r.lastEffect&&(t.firstEffect=null),t.lastEffect=r.lastEffect,r=n,n=t.child;null!==n;)e=r,(l=n).flags&=2,l.nextEffect=null,l.firstEffect=null,l.lastEffect=null,null===(u=l.alternate)?(l.childLanes=0,l.lanes=e,l.child=null,l.memoizedProps=null,l.memoizedState=null,l.updateQueue=null,l.dependencies=null,l.stateNode=null):(l.childLanes=u.childLanes,l.lanes=u.lanes,l.child=u.child,l.memoizedProps=u.memoizedProps,l.memoizedState=u.memoizedState,l.updateQueue=u.updateQueue,l.type=u.type,e=u.dependencies,l.dependencies=null===e?null:{lanes:e.lanes,firstContext:e.firstContext}),n=n.sibling;return da(Fo,1&Fo.current|2),t.child}e=e.sibling}null!==r.tail&&qa()>Zl&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432)}else{if(!l)if(null!==(e=Bo(u))){if(t.flags|=64,l=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags|=4),il(r,!0),null===r.tail&&"hidden"===r.tailMode&&!u.alternate&&!Uo)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null),null}else 2*qa()-r.renderingStartTime>Zl&&1073741824!==n&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432);r.isBackwards?(u.sibling=t.child,t.child=u):(null!==(n=r.last)?n.sibling=u:t.child=u,r.last=u)}return null!==r.tail?(n=r.tail,r.rendering=n,r.tail=n.sibling,r.lastEffect=t.lastEffect,r.renderingStartTime=qa(),n.sibling=null,t=Fo.current,da(Fo,l?1&t|2:1&t),n):null;case 23:case 24:return Ss(),null!==e&&null!==e.memoizedState!=(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags|=4),null}throw Error(i(156,t.tag))}function sl(e){switch(e.tag){case 1:va(e.type)&&ba();var t=e.flags;return 4096&t?(e.flags=-4097&t|64,e):null;case 3:if(Do(),ca(ha),ca(pa),Ko(),0!=(64&(t=e.flags)))throw Error(i(285));return e.flags=-4097&t|64,e;case 5:return Mo(e),null;case 13:return ca(Fo),4096&(t=e.flags)?(e.flags=-4097&t|64,e):null;case 19:return ca(Fo),null;case 4:return Do(),null;case 10:return ro(e),null;case 23:case 24:return Ss(),null;default:return null}}function ul(e,t){try{var n="",r=t;do{n+=Z(r),r=r.return}while(r);var a=n}catch(o){a="\nError generating stack: "+o.message+"\n"+o.stack}return{value:e,source:t,stack:a}}function cl(e,t){try{console.error(t.value)}catch(n){setTimeout((function(){throw n}))}}Vi=function(e,t){for(var n=t.child;null!==n;){if(5===n.tag||6===n.tag)e.appendChild(n.stateNode);else if(4!==n.tag&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===t)break;for(;null===n.sibling;){if(null===n.return||n.return===t)return;n=n.return}n.sibling.return=n.return,n=n.sibling}},Wi=function(e,t,n,r){var o=e.memoizedProps;if(o!==r){e=t.stateNode,Oo(Ao.current);var i,l=null;switch(n){case"input":o=J(e,o),r=J(e,r),l=[];break;case"option":o=oe(e,o),r=oe(e,r),l=[];break;case"select":o=a({},o,{value:void 0}),r=a({},r,{value:void 0}),l=[];break;case"textarea":o=le(e,o),r=le(e,r),l=[];break;default:"function"!=typeof o.onClick&&"function"==typeof r.onClick&&(e.onclick=jr)}for(d in xe(n,r),n=null,o)if(!r.hasOwnProperty(d)&&o.hasOwnProperty(d)&&null!=o[d])if("style"===d){var u=o[d];for(i in u)u.hasOwnProperty(i)&&(n||(n={}),n[i]="")}else"dangerouslySetInnerHTML"!==d&&"children"!==d&&"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&"autoFocus"!==d&&(s.hasOwnProperty(d)?l||(l=[]):(l=l||[]).push(d,null));for(d in r){var c=r[d];if(u=null!=o?o[d]:void 0,r.hasOwnProperty(d)&&c!==u&&(null!=c||null!=u))if("style"===d)if(u){for(i in u)!u.hasOwnProperty(i)||c&&c.hasOwnProperty(i)||(n||(n={}),n[i]="");for(i in c)c.hasOwnProperty(i)&&u[i]!==c[i]&&(n||(n={}),n[i]=c[i])}else n||(l||(l=[]),l.push(d,n)),n=c;else"dangerouslySetInnerHTML"===d?(c=c?c.__html:void 0,u=u?u.__html:void 0,null!=c&&u!==c&&(l=l||[]).push(d,c)):"children"===d?"string"!=typeof c&&"number"!=typeof c||(l=l||[]).push(d,""+c):"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&(s.hasOwnProperty(d)?(null!=c&&"onScroll"===d&&Ar("scroll",e),l||u===c||(l=[])):"object"==typeof c&&null!==c&&c.$$typeof===D?c.toString():(l=l||[]).push(d,c))}n&&(l=l||[]).push("style",n);var d=l;(t.updateQueue=d)&&(t.flags|=4)}},Ki=function(e,t,n,r){n!==r&&(t.flags|=4)};var dl="function"==typeof WeakMap?WeakMap:Map;function fl(e,t,n){(n=co(-1,n)).tag=3,n.payload={element:null};var r=t.value;return n.callback=function(){Kl||(Kl=!0,Yl=r),cl(0,t)},n}function pl(e,t,n){(n=co(-1,n)).tag=3;var r=e.type.getDerivedStateFromError;if("function"==typeof r){var a=t.value;n.payload=function(){return cl(0,t),r(a)}}var o=e.stateNode;return null!==o&&"function"==typeof o.componentDidCatch&&(n.callback=function(){"function"!=typeof r&&(null===Xl?Xl=new Set([this]):Xl.add(this),cl(0,t));var e=t.stack;this.componentDidCatch(t.value,{componentStack:null!==e?e:""})}),n}var hl="function"==typeof WeakSet?WeakSet:Set;function ml(e){var t=e.ref;if(null!==t)if("function"==typeof t)try{t(null)}catch(n){js(e,n)}else t.current=null}function gl(e,t){switch(t.tag){case 0:case 11:case 15:case 22:case 5:case 6:case 4:case 17:return;case 1:if(256&t.flags&&null!==e){var n=e.memoizedProps,r=e.memoizedState;t=(e=t.stateNode).getSnapshotBeforeUpdate(t.elementType===t.type?n:Ya(t.type,n),r),e.__reactInternalSnapshotBeforeUpdate=t}return;case 3:return void(256&t.flags&&Qr(t.stateNode.containerInfo))}throw Error(i(163))}function vl(e,t,n){switch(n.tag){case 0:case 11:case 15:case 22:if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{if(3==(3&e.tag)){var r=e.create;e.destroy=r()}e=e.next}while(e!==t)}if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{var a=e;r=a.next,0!=(4&(a=a.tag))&&0!=(1&a)&&(Ms(n,e),zs(n,e)),e=r}while(e!==t)}return;case 1:return e=n.stateNode,4&n.flags&&(null===t?e.componentDidMount():(r=n.elementType===n.type?t.memoizedProps:Ya(n.type,t.memoizedProps),e.componentDidUpdate(r,t.memoizedState,e.__reactInternalSnapshotBeforeUpdate))),void(null!==(t=n.updateQueue)&&mo(n,t,e));case 3:if(null!==(t=n.updateQueue)){if(e=null,null!==n.child)switch(n.child.tag){case 5:case 1:e=n.child.stateNode}mo(n,t,e)}return;case 5:return e=n.stateNode,void(null===t&&4&n.flags&&qr(n.type,n.memoizedProps)&&e.focus());case 6:case 4:case 12:case 19:case 17:case 20:case 21:case 23:case 24:return;case 13:return void(null===n.memoizedState&&(n=n.alternate,null!==n&&(n=n.memoizedState,null!==n&&(n=n.dehydrated,null!==n&&Et(n)))))}throw Error(i(163))}function bl(e,t){for(var n=e;;){if(5===n.tag){var r=n.stateNode;if(t)"function"==typeof(r=r.style).setProperty?r.setProperty("display","none","important"):r.display="none";else{r=n.stateNode;var a=n.memoizedProps.style;a=null!=a&&a.hasOwnProperty("display")?a.display:null,r.style.display=ke("display",a)}}else if(6===n.tag)n.stateNode.nodeValue=t?"":n.memoizedProps;else if((23!==n.tag&&24!==n.tag||null===n.memoizedState||n===e)&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===e)break;for(;null===n.sibling;){if(null===n.return||n.return===e)return;n=n.return}n.sibling.return=n.return,n=n.sibling}}function yl(e,t){if(xa&&"function"==typeof xa.onCommitFiberUnmount)try{xa.onCommitFiberUnmount(Sa,t)}catch(o){}switch(t.tag){case 0:case 11:case 14:case 15:case 22:if(null!==(e=t.updateQueue)&&null!==(e=e.lastEffect)){var n=e=e.next;do{var r=n,a=r.destroy;if(r=r.tag,void 0!==a)if(0!=(4&r))Ms(t,n);else{r=t;try{a()}catch(o){js(r,o)}}n=n.next}while(n!==e)}break;case 1:if(ml(t),"function"==typeof(e=t.stateNode).componentWillUnmount)try{e.props=t.memoizedProps,e.state=t.memoizedState,e.componentWillUnmount()}catch(o){js(t,o)}break;case 5:ml(t);break;case 4:Tl(e,t)}}function wl(e){e.alternate=null,e.child=null,e.dependencies=null,e.firstEffect=null,e.lastEffect=null,e.memoizedProps=null,e.memoizedState=null,e.pendingProps=null,e.return=null,e.updateQueue=null}function kl(e){return 5===e.tag||3===e.tag||4===e.tag}function El(e){e:{for(var t=e.return;null!==t;){if(kl(t))break e;t=t.return}throw Error(i(160))}var n=t;switch(t=n.stateNode,n.tag){case 5:var r=!1;break;case 3:case 4:t=t.containerInfo,r=!0;break;default:throw Error(i(161))}16&n.flags&&(be(t,""),n.flags&=-17);e:t:for(n=e;;){for(;null===n.sibling;){if(null===n.return||kl(n.return)){n=null;break e}n=n.return}for(n.sibling.return=n.return,n=n.sibling;5!==n.tag&&6!==n.tag&&18!==n.tag;){if(2&n.flags)continue t;if(null===n.child||4===n.tag)continue t;n.child.return=n,n=n.child}if(!(2&n.flags)){n=n.stateNode;break e}}r?Sl(e,n,t):xl(e,n,t)}function Sl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?8===n.nodeType?n.parentNode.insertBefore(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!=(n=n._reactRootContainer)||null!==t.onclick||(t.onclick=jr));else if(4!==r&&null!==(e=e.child))for(Sl(e,t,n),e=e.sibling;null!==e;)Sl(e,t,n),e=e.sibling}function xl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?n.insertBefore(e,t):n.appendChild(e);else if(4!==r&&null!==(e=e.child))for(xl(e,t,n),e=e.sibling;null!==e;)xl(e,t,n),e=e.sibling}function Tl(e,t){for(var n,r,a=t,o=!1;;){if(!o){o=a.return;e:for(;;){if(null===o)throw Error(i(160));switch(n=o.stateNode,o.tag){case 5:r=!1;break e;case 3:case 4:n=n.containerInfo,r=!0;break e}o=o.return}o=!0}if(5===a.tag||6===a.tag){e:for(var l=e,s=a,u=s;;)if(yl(l,u),null!==u.child&&4!==u.tag)u.child.return=u,u=u.child;else{if(u===s)break e;for(;null===u.sibling;){if(null===u.return||u.return===s)break e;u=u.return}u.sibling.return=u.return,u=u.sibling}r?(l=n,s=a.stateNode,8===l.nodeType?l.parentNode.removeChild(s):l.removeChild(s)):n.removeChild(a.stateNode)}else if(4===a.tag){if(null!==a.child){n=a.stateNode.containerInfo,r=!0,a.child.return=a,a=a.child;continue}}else if(yl(e,a),null!==a.child){a.child.return=a,a=a.child;continue}if(a===t)break;for(;null===a.sibling;){if(null===a.return||a.return===t)return;4===(a=a.return).tag&&(o=!1)}a.sibling.return=a.return,a=a.sibling}}function Cl(e,t){switch(t.tag){case 0:case 11:case 14:case 15:case 22:var n=t.updateQueue;if(null!==(n=null!==n?n.lastEffect:null)){var r=n=n.next;do{3==(3&r.tag)&&(e=r.destroy,r.destroy=void 0,void 0!==e&&e()),r=r.next}while(r!==n)}return;case 1:case 12:case 17:return;case 5:if(null!=(n=t.stateNode)){r=t.memoizedProps;var a=null!==e?e.memoizedProps:r;e=t.type;var o=t.updateQueue;if(t.updateQueue=null,null!==o){for(n[Jr]=r,"input"===e&&"radio"===r.type&&null!=r.name&&te(n,r),Te(e,a),t=Te(e,r),a=0;a<o.length;a+=2){var l=o[a],s=o[a+1];"style"===l?Ee(n,s):"dangerouslySetInnerHTML"===l?ve(n,s):"children"===l?be(n,s):w(n,l,s,t)}switch(e){case"input":ne(n,r);break;case"textarea":ue(n,r);break;case"select":e=n._wrapperState.wasMultiple,n._wrapperState.wasMultiple=!!r.multiple,null!=(o=r.value)?ie(n,!!r.multiple,o,!1):e!==!!r.multiple&&(null!=r.defaultValue?ie(n,!!r.multiple,r.defaultValue,!0):ie(n,!!r.multiple,r.multiple?[]:"",!1))}}}return;case 6:if(null===t.stateNode)throw Error(i(162));return void(t.stateNode.nodeValue=t.memoizedProps);case 3:return void((n=t.stateNode).hydrate&&(n.hydrate=!1,Et(n.containerInfo)));case 13:return null!==t.memoizedState&&(Gl=qa(),bl(t.child,!0)),void _l(t);case 19:return void _l(t);case 23:case 24:return void bl(t,null!==t.memoizedState)}throw Error(i(163))}function _l(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new hl),t.forEach((function(t){var r=Us.bind(null,e,t);n.has(t)||(n.add(t),t.then(r,r))}))}}function Ll(e,t){return null!==e&&(null===(e=e.memoizedState)||null!==e.dehydrated)&&(null!==(t=t.memoizedState)&&null===t.dehydrated)}var Rl=Math.ceil,Al=k.ReactCurrentDispatcher,Nl=k.ReactCurrentOwner,Pl=0,Ol=null,Il=null,Dl=0,zl=0,Ml=ua(0),Fl=0,Bl=null,jl=0,$l=0,Ul=0,ql=0,Hl=null,Gl=0,Zl=1/0;function Ql(){Zl=qa()+500}var Vl,Wl=null,Kl=!1,Yl=null,Xl=null,Jl=!1,es=null,ts=90,ns=[],rs=[],as=null,os=0,is=null,ls=-1,ss=0,us=0,cs=null,ds=!1;function fs(){return 0!=(48&Pl)?qa():-1!==ls?ls:ls=qa()}function ps(e){if(0==(2&(e=e.mode)))return 1;if(0==(4&e))return 99===Ha()?1:2;if(0===ss&&(ss=jl),0!==Ka.transition){0!==us&&(us=null!==Hl?Hl.pendingLanes:0),e=ss;var t=4186112&~us;return 0===(t&=-t)&&(0===(t=(e=4186112&~e)&-e)&&(t=8192)),t}return e=Ha(),0!=(4&Pl)&&98===e?e=jt(12,ss):e=jt(e=function(e){switch(e){case 99:return 15;case 98:return 10;case 97:case 96:return 8;case 95:return 2;default:return 0}}(e),ss),e}function hs(e,t,n){if(50<os)throw os=0,is=null,Error(i(185));if(null===(e=ms(e,t)))return null;qt(e,t,n),e===Ol&&(Ul|=t,4===Fl&&bs(e,Dl));var r=Ha();1===t?0!=(8&Pl)&&0==(48&Pl)?ys(e):(gs(e,n),0===Pl&&(Ql(),Va())):(0==(4&Pl)||98!==r&&99!==r||(null===as?as=new Set([e]):as.add(e)),gs(e,n)),Hl=e}function ms(e,t){e.lanes|=t;var n=e.alternate;for(null!==n&&(n.lanes|=t),n=e,e=e.return;null!==e;)e.childLanes|=t,null!==(n=e.alternate)&&(n.childLanes|=t),n=e,e=e.return;return 3===n.tag?n.stateNode:null}function gs(e,t){for(var n=e.callbackNode,r=e.suspendedLanes,a=e.pingedLanes,o=e.expirationTimes,l=e.pendingLanes;0<l;){var s=31-Ht(l),u=1<<s,c=o[s];if(-1===c){if(0==(u&r)||0!=(u&a)){c=t,Mt(u);var d=zt;o[s]=10<=d?c+250:6<=d?c+5e3:-1}}else c<=t&&(e.expiredLanes|=u);l&=~u}if(r=Ft(e,e===Ol?Dl:0),t=zt,0===r)null!==n&&(n!==Ma&&_a(n),e.callbackNode=null,e.callbackPriority=0);else{if(null!==n){if(e.callbackPriority===t)return;n!==Ma&&_a(n)}15===t?(n=ys.bind(null,e),null===Ba?(Ba=[n],ja=Ca(Pa,Wa)):Ba.push(n),n=Ma):14===t?n=Qa(99,ys.bind(null,e)):(n=function(e){switch(e){case 15:case 14:return 99;case 13:case 12:case 11:case 10:return 98;case 9:case 8:case 7:case 6:case 4:case 5:return 97;case 3:case 2:case 1:return 95;case 0:return 90;default:throw Error(i(358,e))}}(t),n=Qa(n,vs.bind(null,e))),e.callbackPriority=t,e.callbackNode=n}}function vs(e){if(ls=-1,us=ss=0,0!=(48&Pl))throw Error(i(327));var t=e.callbackNode;if(Ds()&&e.callbackNode!==t)return null;var n=Ft(e,e===Ol?Dl:0);if(0===n)return null;var r=n,a=Pl;Pl|=16;var o=Cs();for(Ol===e&&Dl===r||(Ql(),xs(e,r));;)try{Rs();break}catch(s){Ts(e,s)}if(no(),Al.current=o,Pl=a,null!==Il?r=0:(Ol=null,Dl=0,r=Fl),0!=(jl&Ul))xs(e,0);else if(0!==r){if(2===r&&(Pl|=64,e.hydrate&&(e.hydrate=!1,Qr(e.containerInfo)),0!==(n=Bt(e))&&(r=_s(e,n))),1===r)throw t=Bl,xs(e,0),bs(e,n),gs(e,qa()),t;switch(e.finishedWork=e.current.alternate,e.finishedLanes=n,r){case 0:case 1:throw Error(i(345));case 2:case 5:Ps(e);break;case 3:if(bs(e,n),(62914560&n)===n&&10<(r=Gl+500-qa())){if(0!==Ft(e,0))break;if(((a=e.suspendedLanes)&n)!==n){fs(),e.pingedLanes|=e.suspendedLanes&a;break}e.timeoutHandle=Gr(Ps.bind(null,e),r);break}Ps(e);break;case 4:if(bs(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-Ht(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=qa()-n)?120:480>n?480:1080>n?1080:1920>n?1920:3e3>n?3e3:4320>n?4320:1960*Rl(n/1960))-n)){e.timeoutHandle=Gr(Ps.bind(null,e),n);break}Ps(e);break;default:throw Error(i(329))}}return gs(e,qa()),e.callbackNode===t?vs.bind(null,e):null}function bs(e,t){for(t&=~ql,t&=~Ul,e.suspendedLanes|=t,e.pingedLanes&=~t,e=e.expirationTimes;0<t;){var n=31-Ht(t),r=1<<n;e[n]=-1,t&=~r}}function ys(e){if(0!=(48&Pl))throw Error(i(327));if(Ds(),e===Ol&&0!=(e.expiredLanes&Dl)){var t=Dl,n=_s(e,t);0!=(jl&Ul)&&(n=_s(e,t=Ft(e,t)))}else n=_s(e,t=Ft(e,0));if(0!==e.tag&&2===n&&(Pl|=64,e.hydrate&&(e.hydrate=!1,Qr(e.containerInfo)),0!==(t=Bt(e))&&(n=_s(e,t))),1===n)throw n=Bl,xs(e,0),bs(e,t),gs(e,qa()),n;return e.finishedWork=e.current.alternate,e.finishedLanes=t,Ps(e),gs(e,qa()),null}function ws(e,t){var n=Pl;Pl|=1;try{return e(t)}finally{0===(Pl=n)&&(Ql(),Va())}}function ks(e,t){var n=Pl;Pl&=-2,Pl|=8;try{return e(t)}finally{0===(Pl=n)&&(Ql(),Va())}}function Es(e,t){da(Ml,zl),zl|=t,jl|=t}function Ss(){zl=Ml.current,ca(Ml)}function xs(e,t){e.finishedWork=null,e.finishedLanes=0;var n=e.timeoutHandle;if(-1!==n&&(e.timeoutHandle=-1,Zr(n)),null!==Il)for(n=Il.return;null!==n;){var r=n;switch(r.tag){case 1:null!=(r=r.type.childContextTypes)&&ba();break;case 3:Do(),ca(ha),ca(pa),Ko();break;case 5:Mo(r);break;case 4:Do();break;case 13:case 19:ca(Fo);break;case 10:ro(r);break;case 23:case 24:Ss()}n=n.return}Ol=e,Il=Zs(e.current,null),Dl=zl=jl=t,Fl=0,Bl=null,ql=Ul=$l=0}function Ts(e,t){for(;;){var n=Il;try{if(no(),Yo.current=Pi,ri){for(var r=ei.memoizedState;null!==r;){var a=r.queue;null!==a&&(a.pending=null),r=r.next}ri=!1}if(Jo=0,ni=ti=ei=null,ai=!1,Nl.current=null,null===n||null===n.return){Fl=1,Bl=t,Il=null;break}e:{var o=e,i=n.return,l=n,s=t;if(t=Dl,l.flags|=2048,l.firstEffect=l.lastEffect=null,null!==s&&"object"==typeof s&&"function"==typeof s.then){var u=s;if(0==(2&l.mode)){var c=l.alternate;c?(l.updateQueue=c.updateQueue,l.memoizedState=c.memoizedState,l.lanes=c.lanes):(l.updateQueue=null,l.memoizedState=null)}var d=0!=(1&Fo.current),f=i;do{var p;if(p=13===f.tag){var h=f.memoizedState;if(null!==h)p=null!==h.dehydrated;else{var m=f.memoizedProps;p=void 0!==m.fallback&&(!0!==m.unstable_avoidThisFallback||!d)}}if(p){var g=f.updateQueue;if(null===g){var v=new Set;v.add(u),f.updateQueue=v}else g.add(u);if(0==(2&f.mode)){if(f.flags|=64,l.flags|=16384,l.flags&=-2981,1===l.tag)if(null===l.alternate)l.tag=17;else{var b=co(-1,1);b.tag=2,fo(l,b)}l.lanes|=1;break e}s=void 0,l=t;var y=o.pingCache;if(null===y?(y=o.pingCache=new dl,s=new Set,y.set(u,s)):void 0===(s=y.get(u))&&(s=new Set,y.set(u,s)),!s.has(l)){s.add(l);var w=$s.bind(null,o,u,l);u.then(w,w)}f.flags|=4096,f.lanes=t;break e}f=f.return}while(null!==f);s=Error((Q(l.type)||"A React component")+" suspended while rendering, but no fallback UI was specified.\n\nAdd a <Suspense fallback=...> component higher in the tree to provide a loading indicator or placeholder to display.")}5!==Fl&&(Fl=2),s=ul(s,l),f=i;do{switch(f.tag){case 3:o=s,f.flags|=4096,t&=-t,f.lanes|=t,po(f,fl(0,o,t));break e;case 1:o=s;var k=f.type,E=f.stateNode;if(0==(64&f.flags)&&("function"==typeof k.getDerivedStateFromError||null!==E&&"function"==typeof E.componentDidCatch&&(null===Xl||!Xl.has(E)))){f.flags|=4096,t&=-t,f.lanes|=t,po(f,pl(f,o,t));break e}}f=f.return}while(null!==f)}Ns(n)}catch(S){t=S,Il===n&&null!==n&&(Il=n=n.return);continue}break}}function Cs(){var e=Al.current;return Al.current=Pi,null===e?Pi:e}function _s(e,t){var n=Pl;Pl|=16;var r=Cs();for(Ol===e&&Dl===t||xs(e,t);;)try{Ls();break}catch(a){Ts(e,a)}if(no(),Pl=n,Al.current=r,null!==Il)throw Error(i(261));return Ol=null,Dl=0,Fl}function Ls(){for(;null!==Il;)As(Il)}function Rs(){for(;null!==Il&&!La();)As(Il)}function As(e){var t=Vl(e.alternate,e,zl);e.memoizedProps=e.pendingProps,null===t?Ns(e):Il=t,Nl.current=null}function Ns(e){var t=e;do{var n=t.alternate;if(e=t.return,0==(2048&t.flags)){if(null!==(n=ll(n,t,zl)))return void(Il=n);if(24!==(n=t).tag&&23!==n.tag||null===n.memoizedState||0!=(1073741824&zl)||0==(4&n.mode)){for(var r=0,a=n.child;null!==a;)r|=a.lanes|a.childLanes,a=a.sibling;n.childLanes=r}null!==e&&0==(2048&e.flags)&&(null===e.firstEffect&&(e.firstEffect=t.firstEffect),null!==t.lastEffect&&(null!==e.lastEffect&&(e.lastEffect.nextEffect=t.firstEffect),e.lastEffect=t.lastEffect),1<t.flags&&(null!==e.lastEffect?e.lastEffect.nextEffect=t:e.firstEffect=t,e.lastEffect=t))}else{if(null!==(n=sl(t)))return n.flags&=2047,void(Il=n);null!==e&&(e.firstEffect=e.lastEffect=null,e.flags|=2048)}if(null!==(t=t.sibling))return void(Il=t);Il=t=e}while(null!==t);0===Fl&&(Fl=5)}function Ps(e){var t=Ha();return Za(99,Os.bind(null,e,t)),null}function Os(e,t){do{Ds()}while(null!==es);if(0!=(48&Pl))throw Error(i(327));var n=e.finishedWork;if(null===n)return null;if(e.finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(i(177));e.callbackNode=null;var r=n.lanes|n.childLanes,a=r,o=e.pendingLanes&~a;e.pendingLanes=a,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=a,e.mutableReadLanes&=a,e.entangledLanes&=a,a=e.entanglements;for(var l=e.eventTimes,s=e.expirationTimes;0<o;){var u=31-Ht(o),c=1<<u;a[u]=0,l[u]=-1,s[u]=-1,o&=~c}if(null!==as&&0==(24&r)&&as.has(e)&&as.delete(e),e===Ol&&(Il=Ol=null,Dl=0),1<n.flags?null!==n.lastEffect?(n.lastEffect.nextEffect=n,r=n.firstEffect):r=n:r=n.firstEffect,null!==r){if(a=Pl,Pl|=32,Nl.current=null,$r=Wt,vr(l=gr())){if("selectionStart"in l)s={start:l.selectionStart,end:l.selectionEnd};else e:if(s=(s=l.ownerDocument)&&s.defaultView||window,(c=s.getSelection&&s.getSelection())&&0!==c.rangeCount){s=c.anchorNode,o=c.anchorOffset,u=c.focusNode,c=c.focusOffset;try{s.nodeType,u.nodeType}catch(C){s=null;break e}var d=0,f=-1,p=-1,h=0,m=0,g=l,v=null;t:for(;;){for(var b;g!==s||0!==o&&3!==g.nodeType||(f=d+o),g!==u||0!==c&&3!==g.nodeType||(p=d+c),3===g.nodeType&&(d+=g.nodeValue.length),null!==(b=g.firstChild);)v=g,g=b;for(;;){if(g===l)break t;if(v===s&&++h===o&&(f=d),v===u&&++m===c&&(p=d),null!==(b=g.nextSibling))break;v=(g=v).parentNode}g=b}s=-1===f||-1===p?null:{start:f,end:p}}else s=null;s=s||{start:0,end:0}}else s=null;Ur={focusedElem:l,selectionRange:s},Wt=!1,cs=null,ds=!1,Wl=r;do{try{Is()}catch(C){if(null===Wl)throw Error(i(330));js(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);cs=null,Wl=r;do{try{for(l=e;null!==Wl;){var y=Wl.flags;if(16&y&&be(Wl.stateNode,""),128&y){var w=Wl.alternate;if(null!==w){var k=w.ref;null!==k&&("function"==typeof k?k(null):k.current=null)}}switch(1038&y){case 2:El(Wl),Wl.flags&=-3;break;case 6:El(Wl),Wl.flags&=-3,Cl(Wl.alternate,Wl);break;case 1024:Wl.flags&=-1025;break;case 1028:Wl.flags&=-1025,Cl(Wl.alternate,Wl);break;case 4:Cl(Wl.alternate,Wl);break;case 8:Tl(l,s=Wl);var E=s.alternate;wl(s),null!==E&&wl(E)}Wl=Wl.nextEffect}}catch(C){if(null===Wl)throw Error(i(330));js(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);if(k=Ur,w=gr(),y=k.focusedElem,l=k.selectionRange,w!==y&&y&&y.ownerDocument&&mr(y.ownerDocument.documentElement,y)){null!==l&&vr(y)&&(w=l.start,void 0===(k=l.end)&&(k=w),"selectionStart"in y?(y.selectionStart=w,y.selectionEnd=Math.min(k,y.value.length)):(k=(w=y.ownerDocument||document)&&w.defaultView||window).getSelection&&(k=k.getSelection(),s=y.textContent.length,E=Math.min(l.start,s),l=void 0===l.end?E:Math.min(l.end,s),!k.extend&&E>l&&(s=l,l=E,E=s),s=hr(y,E),o=hr(y,l),s&&o&&(1!==k.rangeCount||k.anchorNode!==s.node||k.anchorOffset!==s.offset||k.focusNode!==o.node||k.focusOffset!==o.offset)&&((w=w.createRange()).setStart(s.node,s.offset),k.removeAllRanges(),E>l?(k.addRange(w),k.extend(o.node,o.offset)):(w.setEnd(o.node,o.offset),k.addRange(w))))),w=[];for(k=y;k=k.parentNode;)1===k.nodeType&&w.push({element:k,left:k.scrollLeft,top:k.scrollTop});for("function"==typeof y.focus&&y.focus(),y=0;y<w.length;y++)(k=w[y]).element.scrollLeft=k.left,k.element.scrollTop=k.top}Wt=!!$r,Ur=$r=null,e.current=n,Wl=r;do{try{for(y=e;null!==Wl;){var S=Wl.flags;if(36&S&&vl(y,Wl.alternate,Wl),128&S){w=void 0;var x=Wl.ref;if(null!==x){var T=Wl.stateNode;Wl.tag,w=T,"function"==typeof x?x(w):x.current=w}}Wl=Wl.nextEffect}}catch(C){if(null===Wl)throw Error(i(330));js(Wl,C),Wl=Wl.nextEffect}}while(null!==Wl);Wl=null,Fa(),Pl=a}else e.current=n;if(Jl)Jl=!1,es=e,ts=t;else for(Wl=r;null!==Wl;)t=Wl.nextEffect,Wl.nextEffect=null,8&Wl.flags&&((S=Wl).sibling=null,S.stateNode=null),Wl=t;if(0===(r=e.pendingLanes)&&(Xl=null),1===r?e===is?os++:(os=0,is=e):os=0,n=n.stateNode,xa&&"function"==typeof xa.onCommitFiberRoot)try{xa.onCommitFiberRoot(Sa,n,void 0,64==(64&n.current.flags))}catch(C){}if(gs(e,qa()),Kl)throw Kl=!1,e=Yl,Yl=null,e;return 0!=(8&Pl)||Va(),null}function Is(){for(;null!==Wl;){var e=Wl.alternate;ds||null===cs||(0!=(8&Wl.flags)?et(Wl,cs)&&(ds=!0):13===Wl.tag&&Ll(e,Wl)&&et(Wl,cs)&&(ds=!0));var t=Wl.flags;0!=(256&t)&&gl(e,Wl),0==(512&t)||Jl||(Jl=!0,Qa(97,(function(){return Ds(),null}))),Wl=Wl.nextEffect}}function Ds(){if(90!==ts){var e=97<ts?97:ts;return ts=90,Za(e,Fs)}return!1}function zs(e,t){ns.push(t,e),Jl||(Jl=!0,Qa(97,(function(){return Ds(),null})))}function Ms(e,t){rs.push(t,e),Jl||(Jl=!0,Qa(97,(function(){return Ds(),null})))}function Fs(){if(null===es)return!1;var e=es;if(es=null,0!=(48&Pl))throw Error(i(331));var t=Pl;Pl|=32;var n=rs;rs=[];for(var r=0;r<n.length;r+=2){var a=n[r],o=n[r+1],l=a.destroy;if(a.destroy=void 0,"function"==typeof l)try{l()}catch(u){if(null===o)throw Error(i(330));js(o,u)}}for(n=ns,ns=[],r=0;r<n.length;r+=2){a=n[r],o=n[r+1];try{var s=a.create;a.destroy=s()}catch(u){if(null===o)throw Error(i(330));js(o,u)}}for(s=e.current.firstEffect;null!==s;)e=s.nextEffect,s.nextEffect=null,8&s.flags&&(s.sibling=null,s.stateNode=null),s=e;return Pl=t,Va(),!0}function Bs(e,t,n){fo(e,t=fl(0,t=ul(n,t),1)),t=fs(),null!==(e=ms(e,1))&&(qt(e,1,t),gs(e,t))}function js(e,t){if(3===e.tag)Bs(e,e,t);else for(var n=e.return;null!==n;){if(3===n.tag){Bs(n,e,t);break}if(1===n.tag){var r=n.stateNode;if("function"==typeof n.type.getDerivedStateFromError||"function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r))){var a=pl(n,e=ul(t,e),1);if(fo(n,a),a=fs(),null!==(n=ms(n,1)))qt(n,1,a),gs(n,a);else if("function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r)))try{r.componentDidCatch(t,e)}catch(o){}break}}n=n.return}}function $s(e,t,n){var r=e.pingCache;null!==r&&r.delete(t),t=fs(),e.pingedLanes|=e.suspendedLanes&n,Ol===e&&(Dl&n)===n&&(4===Fl||3===Fl&&(62914560&Dl)===Dl&&500>qa()-Gl?xs(e,0):ql|=n),gs(e,t)}function Us(e,t){var n=e.stateNode;null!==n&&n.delete(t),0===(t=0)&&(0==(2&(t=e.mode))?t=1:0==(4&t)?t=99===Ha()?1:2:(0===ss&&(ss=jl),0===(t=$t(62914560&~ss))&&(t=4194304))),n=fs(),null!==(e=ms(e,t))&&(qt(e,t,n),gs(e,n))}function qs(e,t,n,r){this.tag=e,this.key=n,this.sibling=this.child=this.return=this.stateNode=this.type=this.elementType=null,this.index=0,this.ref=null,this.pendingProps=t,this.dependencies=this.memoizedState=this.updateQueue=this.memoizedProps=null,this.mode=r,this.flags=0,this.lastEffect=this.firstEffect=this.nextEffect=null,this.childLanes=this.lanes=0,this.alternate=null}function Hs(e,t,n,r){return new qs(e,t,n,r)}function Gs(e){return!(!(e=e.prototype)||!e.isReactComponent)}function Zs(e,t){var n=e.alternate;return null===n?((n=Hs(e.tag,t,e.key,e.mode)).elementType=e.elementType,n.type=e.type,n.stateNode=e.stateNode,n.alternate=e,e.alternate=n):(n.pendingProps=t,n.type=e.type,n.flags=0,n.nextEffect=null,n.firstEffect=null,n.lastEffect=null),n.childLanes=e.childLanes,n.lanes=e.lanes,n.child=e.child,n.memoizedProps=e.memoizedProps,n.memoizedState=e.memoizedState,n.updateQueue=e.updateQueue,t=e.dependencies,n.dependencies=null===t?null:{lanes:t.lanes,firstContext:t.firstContext},n.sibling=e.sibling,n.index=e.index,n.ref=e.ref,n}function Qs(e,t,n,r,a,o){var l=2;if(r=e,"function"==typeof e)Gs(e)&&(l=1);else if("string"==typeof e)l=5;else e:switch(e){case x:return Vs(n.children,a,o,t);case z:l=8,a|=16;break;case T:l=8,a|=1;break;case C:return(e=Hs(12,n,t,8|a)).elementType=C,e.type=C,e.lanes=o,e;case A:return(e=Hs(13,n,t,a)).type=A,e.elementType=A,e.lanes=o,e;case N:return(e=Hs(19,n,t,a)).elementType=N,e.lanes=o,e;case M:return Ws(n,a,o,t);case F:return(e=Hs(24,n,t,a)).elementType=F,e.lanes=o,e;default:if("object"==typeof e&&null!==e)switch(e.$$typeof){case _:l=10;break e;case L:l=9;break e;case R:l=11;break e;case P:l=14;break e;case O:l=16,r=null;break e;case I:l=22;break e}throw Error(i(130,null==e?e:typeof e,""))}return(t=Hs(l,n,t,a)).elementType=e,t.type=r,t.lanes=o,t}function Vs(e,t,n,r){return(e=Hs(7,e,r,t)).lanes=n,e}function Ws(e,t,n,r){return(e=Hs(23,e,r,t)).elementType=M,e.lanes=n,e}function Ks(e,t,n){return(e=Hs(6,e,null,t)).lanes=n,e}function Ys(e,t,n){return(t=Hs(4,null!==e.children?e.children:[],e.key,t)).lanes=n,t.stateNode={containerInfo:e.containerInfo,pendingChildren:null,implementation:e.implementation},t}function Xs(e,t,n){this.tag=t,this.containerInfo=e,this.finishedWork=this.pingCache=this.current=this.pendingChildren=null,this.timeoutHandle=-1,this.pendingContext=this.context=null,this.hydrate=n,this.callbackNode=null,this.callbackPriority=0,this.eventTimes=Ut(0),this.expirationTimes=Ut(-1),this.entangledLanes=this.finishedLanes=this.mutableReadLanes=this.expiredLanes=this.pingedLanes=this.suspendedLanes=this.pendingLanes=0,this.entanglements=Ut(0),this.mutableSourceEagerHydrationData=null}function Js(e,t,n){var r=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null;return{$$typeof:S,key:null==r?null:""+r,children:e,containerInfo:t,implementation:n}}function eu(e,t,n,r){var a=t.current,o=fs(),l=ps(a);e:if(n){t:{if(Ke(n=n._reactInternals)!==n||1!==n.tag)throw Error(i(170));var s=n;do{switch(s.tag){case 3:s=s.stateNode.context;break t;case 1:if(va(s.type)){s=s.stateNode.__reactInternalMemoizedMergedChildContext;break t}}s=s.return}while(null!==s);throw Error(i(171))}if(1===n.tag){var u=n.type;if(va(u)){n=wa(n,u,s);break e}}n=s}else n=fa;return null===t.context?t.context=n:t.pendingContext=n,(t=co(o,l)).payload={element:e},null!==(r=void 0===r?null:r)&&(t.callback=r),fo(a,t),hs(a,l,o),l}function tu(e){return(e=e.current).child?(e.child.tag,e.child.stateNode):null}function nu(e,t){if(null!==(e=e.memoizedState)&&null!==e.dehydrated){var n=e.retryLane;e.retryLane=0!==n&&n<t?n:t}}function ru(e,t){nu(e,t),(e=e.alternate)&&nu(e,t)}function au(e,t,n){var r=null!=n&&null!=n.hydrationOptions&&n.hydrationOptions.mutableSources||null;if(n=new Xs(e,t,null!=n&&!0===n.hydrate),t=Hs(3,null,null,2===t?7:1===t?3:0),n.current=t,t.stateNode=n,so(t),e[ea]=n.current,Pr(8===e.nodeType?e.parentNode:e),r)for(e=0;e<r.length;e++){var a=(t=r[e])._getVersion;a=a(t._source),null==n.mutableSourceEagerHydrationData?n.mutableSourceEagerHydrationData=[t,a]:n.mutableSourceEagerHydrationData.push(t,a)}this._internalRoot=n}function ou(e){return!(!e||1!==e.nodeType&&9!==e.nodeType&&11!==e.nodeType&&(8!==e.nodeType||" react-mount-point-unstable "!==e.nodeValue))}function iu(e,t,n,r,a){var o=n._reactRootContainer;if(o){var i=o._internalRoot;if("function"==typeof a){var l=a;a=function(){var e=tu(i);l.call(e)}}eu(t,i,e,a)}else{if(o=n._reactRootContainer=function(e,t){if(t||(t=!(!(t=e?9===e.nodeType?e.documentElement:e.firstChild:null)||1!==t.nodeType||!t.hasAttribute("data-reactroot"))),!t)for(var n;n=e.lastChild;)e.removeChild(n);return new au(e,0,t?{hydrate:!0}:void 0)}(n,r),i=o._internalRoot,"function"==typeof a){var s=a;a=function(){var e=tu(i);s.call(e)}}ks((function(){eu(t,i,e,a)}))}return tu(i)}function lu(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!ou(t))throw Error(i(200));return Js(e,t,null,n)}Vl=function(e,t,n){var r=t.lanes;if(null!==e)if(e.memoizedProps!==t.pendingProps||ha.current)Mi=!0;else{if(0==(n&r)){switch(Mi=!1,t.tag){case 3:Qi(t),Vo();break;case 5:zo(t);break;case 1:va(t.type)&&ka(t);break;case 4:Io(t,t.stateNode.containerInfo);break;case 10:r=t.memoizedProps.value;var a=t.type._context;da(Xa,a._currentValue),a._currentValue=r;break;case 13:if(null!==t.memoizedState)return 0!=(n&t.child.childLanes)?Xi(e,t,n):(da(Fo,1&Fo.current),null!==(t=ol(e,t,n))?t.sibling:null);da(Fo,1&Fo.current);break;case 19:if(r=0!=(n&t.childLanes),0!=(64&e.flags)){if(r)return al(e,t,n);t.flags|=64}if(null!==(a=t.memoizedState)&&(a.rendering=null,a.tail=null,a.lastEffect=null),da(Fo,Fo.current),r)break;return null;case 23:case 24:return t.lanes=0,Ui(e,t,n)}return ol(e,t,n)}Mi=0!=(16384&e.flags)}else Mi=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=ga(t,pa.current),oo(t,n),a=li(null,t,r,e,a,n),t.flags|=1,"object"==typeof a&&null!==a&&"function"==typeof a.render&&void 0===a.$$typeof){if(t.tag=1,t.memoizedState=null,t.updateQueue=null,va(r)){var o=!0;ka(t)}else o=!1;t.memoizedState=null!==a.state&&void 0!==a.state?a.state:null,so(t);var l=r.getDerivedStateFromProps;"function"==typeof l&&vo(t,r,l,e),a.updater=bo,t.stateNode=a,a._reactInternals=t,Eo(t,r,e,n),t=Zi(null,t,r,!0,o,n)}else t.tag=0,Fi(null,t,a,n),t=t.child;return t;case 16:a=t.elementType;e:{switch(null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=(o=a._init)(a._payload),t.type=a,o=t.tag=function(e){if("function"==typeof e)return Gs(e)?1:0;if(null!=e){if((e=e.$$typeof)===R)return 11;if(e===P)return 14}return 2}(a),e=Ya(a,e),o){case 0:t=Hi(null,t,a,e,n);break e;case 1:t=Gi(null,t,a,e,n);break e;case 11:t=Bi(null,t,a,e,n);break e;case 14:t=ji(null,t,a,Ya(a.type,e),r,n);break e}throw Error(i(306,a,""))}return t;case 0:return r=t.type,a=t.pendingProps,Hi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 1:return r=t.type,a=t.pendingProps,Gi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 3:if(Qi(t),r=t.updateQueue,null===e||null===r)throw Error(i(282));if(r=t.pendingProps,a=null!==(a=t.memoizedState)?a.element:null,uo(e,t),ho(t,r,null,n),(r=t.memoizedState.element)===a)Vo(),t=ol(e,t,n);else{if((o=(a=t.stateNode).hydrate)&&($o=Vr(t.stateNode.containerInfo.firstChild),jo=t,o=Uo=!0),o){if(null!=(e=a.mutableSourceEagerHydrationData))for(a=0;a<e.length;a+=2)(o=e[a])._workInProgressVersionPrimary=e[a+1],Wo.push(o);for(n=Lo(t,null,r,n),t.child=n;n;)n.flags=-3&n.flags|1024,n=n.sibling}else Fi(e,t,r,n),Vo();t=t.child}return t;case 5:return zo(t),null===e&&Go(t),r=t.type,a=t.pendingProps,o=null!==e?e.memoizedProps:null,l=a.children,Hr(r,a)?l=null:null!==o&&Hr(r,o)&&(t.flags|=16),qi(e,t),Fi(e,t,l,n),t.child;case 6:return null===e&&Go(t),null;case 13:return Xi(e,t,n);case 4:return Io(t,t.stateNode.containerInfo),r=t.pendingProps,null===e?t.child=_o(t,null,r,n):Fi(e,t,r,n),t.child;case 11:return r=t.type,a=t.pendingProps,Bi(e,t,r,a=t.elementType===r?a:Ya(r,a),n);case 7:return Fi(e,t,t.pendingProps,n),t.child;case 8:case 12:return Fi(e,t,t.pendingProps.children,n),t.child;case 10:e:{r=t.type._context,a=t.pendingProps,l=t.memoizedProps,o=a.value;var s=t.type._context;if(da(Xa,s._currentValue),s._currentValue=o,null!==l)if(s=l.value,0===(o=cr(s,o)?0:0|("function"==typeof r._calculateChangedBits?r._calculateChangedBits(s,o):1073741823))){if(l.children===a.children&&!ha.current){t=ol(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var u=s.dependencies;if(null!==u){l=s.child;for(var c=u.firstContext;null!==c;){if(c.context===r&&0!=(c.observedBits&o)){1===s.tag&&((c=co(-1,n&-n)).tag=2,fo(s,c)),s.lanes|=n,null!==(c=s.alternate)&&(c.lanes|=n),ao(s.return,n),u.lanes|=n;break}c=c.next}}else l=10===s.tag&&s.type===t.type?null:s.child;if(null!==l)l.return=s;else for(l=s;null!==l;){if(l===t){l=null;break}if(null!==(s=l.sibling)){s.return=l.return,l=s;break}l=l.return}s=l}Fi(e,t,a.children,n),t=t.child}return t;case 9:return a=t.type,r=(o=t.pendingProps).children,oo(t,n),r=r(a=io(a,o.unstable_observedBits)),t.flags|=1,Fi(e,t,r,n),t.child;case 14:return o=Ya(a=t.type,t.pendingProps),ji(e,t,a,o=Ya(a.type,o),r,n);case 15:return $i(e,t,t.type,t.pendingProps,r,n);case 17:return r=t.type,a=t.pendingProps,a=t.elementType===r?a:Ya(r,a),null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),t.tag=1,va(r)?(e=!0,ka(t)):e=!1,oo(t,n),wo(t,r,a),Eo(t,r,a,n),Zi(null,t,r,!0,e,n);case 19:return al(e,t,n);case 23:case 24:return Ui(e,t,n)}throw Error(i(156,t.tag))},au.prototype.render=function(e){eu(e,this._internalRoot,null,null)},au.prototype.unmount=function(){var e=this._internalRoot,t=e.containerInfo;eu(null,e,null,(function(){t[ea]=null}))},tt=function(e){13===e.tag&&(hs(e,4,fs()),ru(e,4))},nt=function(e){13===e.tag&&(hs(e,67108864,fs()),ru(e,67108864))},rt=function(e){if(13===e.tag){var t=fs(),n=ps(e);hs(e,n,t),ru(e,n)}},at=function(e,t){return t()},_e=function(e,t,n){switch(t){case"input":if(ne(e,n),t=n.name,"radio"===n.type&&null!=t){for(n=e;n.parentNode;)n=n.parentNode;for(n=n.querySelectorAll("input[name="+JSON.stringify(""+t)+'][type="radio"]'),t=0;t<n.length;t++){var r=n[t];if(r!==e&&r.form===e.form){var a=oa(r);if(!a)throw Error(i(90));Y(r),ne(r,a)}}}break;case"textarea":ue(e,n);break;case"select":null!=(t=n.value)&&ie(e,!!n.multiple,t,!1)}},Oe=ws,Ie=function(e,t,n,r,a){var o=Pl;Pl|=4;try{return Za(98,e.bind(null,t,n,r,a))}finally{0===(Pl=o)&&(Ql(),Va())}},De=function(){0==(49&Pl)&&(function(){if(null!==as){var e=as;as=null,e.forEach((function(e){e.expiredLanes|=24&e.pendingLanes,gs(e,qa())}))}Va()}(),Ds())},ze=function(e,t){var n=Pl;Pl|=2;try{return e(t)}finally{0===(Pl=n)&&(Ql(),Va())}};var su={Events:[ra,aa,oa,Ne,Pe,Ds,{current:!1}]},uu={findFiberByHostInstance:na,bundleType:0,version:"17.0.2",rendererPackageName:"react-dom"},cu={bundleType:uu.bundleType,version:uu.version,rendererPackageName:uu.rendererPackageName,rendererConfig:uu.rendererConfig,overrideHookState:null,overrideHookStateDeletePath:null,overrideHookStateRenamePath:null,overrideProps:null,overridePropsDeletePath:null,overridePropsRenamePath:null,setSuspenseHandler:null,scheduleUpdate:null,currentDispatcherRef:k.ReactCurrentDispatcher,findHostInstanceByFiber:function(e){return null===(e=Je(e))?null:e.stateNode},findFiberByHostInstance:uu.findFiberByHostInstance||function(){return null},findHostInstancesForRefresh:null,scheduleRefresh:null,scheduleRoot:null,setRefreshHandler:null,getCurrentFiber:null};if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__){var du=__REACT_DEVTOOLS_GLOBAL_HOOK__;if(!du.isDisabled&&du.supportsFiber)try{Sa=du.inject(cu),xa=du}catch(ge){}}t.hydrate=function(e,t,n){if(!ou(t))throw Error(i(200));return iu(null,e,t,!0,n)}},3935:(e,t,n)=>{"use strict";!function e(){if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(e)}catch(t){console.error(t)}}(),e.exports=n(4448)},9590:e=>{var t="undefined"!=typeof Element,n="function"==typeof Map,r="function"==typeof Set,a="function"==typeof ArrayBuffer&&!!ArrayBuffer.isView;function o(e,i){if(e===i)return!0;if(e&&i&&"object"==typeof e&&"object"==typeof i){if(e.constructor!==i.constructor)return!1;var l,s,u,c;if(Array.isArray(e)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(!o(e[s],i[s]))return!1;return!0}if(n&&e instanceof Map&&i instanceof Map){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;for(c=e.entries();!(s=c.next()).done;)if(!o(s.value[1],i.get(s.value[0])))return!1;return!0}if(r&&e instanceof Set&&i instanceof Set){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;return!0}if(a&&ArrayBuffer.isView(e)&&ArrayBuffer.isView(i)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(e[s]!==i[s])return!1;return!0}if(e.constructor===RegExp)return e.source===i.source&&e.flags===i.flags;if(e.valueOf!==Object.prototype.valueOf)return e.valueOf()===i.valueOf();if(e.toString!==Object.prototype.toString)return e.toString()===i.toString();if((l=(u=Object.keys(e)).length)!==Object.keys(i).length)return!1;for(s=l;0!=s--;)if(!Object.prototype.hasOwnProperty.call(i,u[s]))return!1;if(t&&e instanceof Element)return!1;for(s=l;0!=s--;)if(("_owner"!==u[s]&&"__v"!==u[s]&&"__o"!==u[s]||!e.$$typeof)&&!o(e[u[s]],i[u[s]]))return!1;return!0}return e!=e&&i!=i}e.exports=function(e,t){try{return o(e,t)}catch(n){if((n.message||"").match(/stack|recursion/i))return console.warn("react-fast-compare cannot handle circular refs"),!1;throw n}}},405:(e,t,n)=>{"use strict";n.d(t,{B6:()=>G,ql:()=>J});var r=n(7294),a=n(5697),o=n.n(a),i=n(9590),l=n.n(i),s=n(1143),u=n.n(s),c=n(6774),d=n.n(c);function f(){return f=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},f.apply(this,arguments)}function p(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,h(e,t)}function h(e,t){return h=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e},h(e,t)}function m(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t.indexOf(n=o[r])>=0||(a[n]=e[n]);return a}var g={BASE:"base",BODY:"body",HEAD:"head",HTML:"html",LINK:"link",META:"meta",NOSCRIPT:"noscript",SCRIPT:"script",STYLE:"style",TITLE:"title",FRAGMENT:"Symbol(react.fragment)"},v={rel:["amphtml","canonical","alternate"]},b={type:["application/ld+json"]},y={charset:"",name:["robots","description"],property:["og:type","og:title","og:url","og:image","og:image:alt","og:description","twitter:url","twitter:title","twitter:description","twitter:image","twitter:image:alt","twitter:card","twitter:site"]},w=Object.keys(g).map((function(e){return g[e]})),k={accesskey:"accessKey",charset:"charSet",class:"className",contenteditable:"contentEditable",contextmenu:"contextMenu","http-equiv":"httpEquiv",itemprop:"itemProp",tabindex:"tabIndex"},E=Object.keys(k).reduce((function(e,t){return e[k[t]]=t,e}),{}),S=function(e,t){for(var n=e.length-1;n>=0;n-=1){var r=e[n];if(Object.prototype.hasOwnProperty.call(r,t))return r[t]}return null},x=function(e){var t=S(e,g.TITLE),n=S(e,"titleTemplate");if(Array.isArray(t)&&(t=t.join("")),n&&t)return n.replace(/%s/g,(function(){return t}));var r=S(e,"defaultTitle");return t||r||void 0},T=function(e){return S(e,"onChangeClientState")||function(){}},C=function(e,t){return t.filter((function(t){return void 0!==t[e]})).map((function(t){return t[e]})).reduce((function(e,t){return f({},e,t)}),{})},_=function(e,t){return t.filter((function(e){return void 0!==e[g.BASE]})).map((function(e){return e[g.BASE]})).reverse().reduce((function(t,n){if(!t.length)for(var r=Object.keys(n),a=0;a<r.length;a+=1){var o=r[a].toLowerCase();if(-1!==e.indexOf(o)&&n[o])return t.concat(n)}return t}),[])},L=function(e,t,n){var r={};return n.filter((function(t){return!!Array.isArray(t[e])||(void 0!==t[e]&&console&&"function"==typeof console.warn&&console.warn("Helmet: "+e+' should be of type "Array". Instead found type "'+typeof t[e]+'"'),!1)})).map((function(t){return t[e]})).reverse().reduce((function(e,n){var a={};n.filter((function(e){for(var n,o=Object.keys(e),i=0;i<o.length;i+=1){var l=o[i],s=l.toLowerCase();-1===t.indexOf(s)||"rel"===n&&"canonical"===e[n].toLowerCase()||"rel"===s&&"stylesheet"===e[s].toLowerCase()||(n=s),-1===t.indexOf(l)||"innerHTML"!==l&&"cssText"!==l&&"itemprop"!==l||(n=l)}if(!n||!e[n])return!1;var u=e[n].toLowerCase();return r[n]||(r[n]={}),a[n]||(a[n]={}),!r[n][u]&&(a[n][u]=!0,!0)})).reverse().forEach((function(t){return e.push(t)}));for(var o=Object.keys(a),i=0;i<o.length;i+=1){var l=o[i],s=f({},r[l],a[l]);r[l]=s}return e}),[]).reverse()},R=function(e,t){if(Array.isArray(e)&&e.length)for(var n=0;n<e.length;n+=1)if(e[n][t])return!0;return!1},A=function(e){return Array.isArray(e)?e.join(""):e},N=function(e,t){return Array.isArray(e)?e.reduce((function(e,n){return function(e,t){for(var n=Object.keys(e),r=0;r<n.length;r+=1)if(t[n[r]]&&t[n[r]].includes(e[n[r]]))return!0;return!1}(n,t)?e.priority.push(n):e.default.push(n),e}),{priority:[],default:[]}):{default:e}},P=function(e,t){var n;return f({},e,((n={})[t]=void 0,n))},O=[g.NOSCRIPT,g.SCRIPT,g.STYLE],I=function(e,t){return void 0===t&&(t=!0),!1===t?String(e):String(e).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")},D=function(e){return Object.keys(e).reduce((function(t,n){var r=void 0!==e[n]?n+'="'+e[n]+'"':""+n;return t?t+" "+r:r}),"")},z=function(e,t){return void 0===t&&(t={}),Object.keys(e).reduce((function(t,n){return t[k[n]||n]=e[n],t}),t)},M=function(e,t){return t.map((function(t,n){var a,o=((a={key:n})["data-rh"]=!0,a);return Object.keys(t).forEach((function(e){var n=k[e]||e;"innerHTML"===n||"cssText"===n?o.dangerouslySetInnerHTML={__html:t.innerHTML||t.cssText}:o[n]=t[e]})),r.createElement(e,o)}))},F=function(e,t,n){switch(e){case g.TITLE:return{toComponent:function(){return n=t.titleAttributes,(a={key:e=t.title})["data-rh"]=!0,o=z(n,a),[r.createElement(g.TITLE,o,e)];var e,n,a,o},toString:function(){return function(e,t,n,r){var a=D(n),o=A(t);return a?"<"+e+' data-rh="true" '+a+">"+I(o,r)+"</"+e+">":"<"+e+' data-rh="true">'+I(o,r)+"</"+e+">"}(e,t.title,t.titleAttributes,n)}};case"bodyAttributes":case"htmlAttributes":return{toComponent:function(){return z(t)},toString:function(){return D(t)}};default:return{toComponent:function(){return M(e,t)},toString:function(){return function(e,t,n){return t.reduce((function(t,r){var a=Object.keys(r).filter((function(e){return!("innerHTML"===e||"cssText"===e)})).reduce((function(e,t){var a=void 0===r[t]?t:t+'="'+I(r[t],n)+'"';return e?e+" "+a:a}),""),o=r.innerHTML||r.cssText||"",i=-1===O.indexOf(e);return t+"<"+e+' data-rh="true" '+a+(i?"/>":">"+o+"</"+e+">")}),"")}(e,t,n)}}}},B=function(e){var t=e.baseTag,n=e.bodyAttributes,r=e.encode,a=e.htmlAttributes,o=e.noscriptTags,i=e.styleTags,l=e.title,s=void 0===l?"":l,u=e.titleAttributes,c=e.linkTags,d=e.metaTags,f=e.scriptTags,p={toComponent:function(){},toString:function(){return""}};if(e.prioritizeSeoTags){var h=function(e){var t=e.linkTags,n=e.scriptTags,r=e.encode,a=N(e.metaTags,y),o=N(t,v),i=N(n,b);return{priorityMethods:{toComponent:function(){return[].concat(M(g.META,a.priority),M(g.LINK,o.priority),M(g.SCRIPT,i.priority))},toString:function(){return F(g.META,a.priority,r)+" "+F(g.LINK,o.priority,r)+" "+F(g.SCRIPT,i.priority,r)}},metaTags:a.default,linkTags:o.default,scriptTags:i.default}}(e);p=h.priorityMethods,c=h.linkTags,d=h.metaTags,f=h.scriptTags}return{priority:p,base:F(g.BASE,t,r),bodyAttributes:F("bodyAttributes",n,r),htmlAttributes:F("htmlAttributes",a,r),link:F(g.LINK,c,r),meta:F(g.META,d,r),noscript:F(g.NOSCRIPT,o,r),script:F(g.SCRIPT,f,r),style:F(g.STYLE,i,r),title:F(g.TITLE,{title:s,titleAttributes:u},r)}},j=[],$=function(e,t){var n=this;void 0===t&&(t="undefined"!=typeof document),this.instances=[],this.value={setHelmet:function(e){n.context.helmet=e},helmetInstances:{get:function(){return n.canUseDOM?j:n.instances},add:function(e){(n.canUseDOM?j:n.instances).push(e)},remove:function(e){var t=(n.canUseDOM?j:n.instances).indexOf(e);(n.canUseDOM?j:n.instances).splice(t,1)}}},this.context=e,this.canUseDOM=t,t||(e.helmet=B({baseTag:[],bodyAttributes:{},encodeSpecialCharacters:!0,htmlAttributes:{},linkTags:[],metaTags:[],noscriptTags:[],scriptTags:[],styleTags:[],title:"",titleAttributes:{}}))},U=r.createContext({}),q=o().shape({setHelmet:o().func,helmetInstances:o().shape({get:o().func,add:o().func,remove:o().func})}),H="undefined"!=typeof document,G=function(e){function t(n){var r;return(r=e.call(this,n)||this).helmetData=new $(r.props.context,t.canUseDOM),r}return p(t,e),t.prototype.render=function(){return r.createElement(U.Provider,{value:this.helmetData.value},this.props.children)},t}(r.Component);G.canUseDOM=H,G.propTypes={context:o().shape({helmet:o().shape()}),children:o().node.isRequired},G.defaultProps={context:{}},G.displayName="HelmetProvider";var Z=function(e,t){var n,r=document.head||document.querySelector(g.HEAD),a=r.querySelectorAll(e+"[data-rh]"),o=[].slice.call(a),i=[];return t&&t.length&&t.forEach((function(t){var r=document.createElement(e);for(var a in t)Object.prototype.hasOwnProperty.call(t,a)&&("innerHTML"===a?r.innerHTML=t.innerHTML:"cssText"===a?r.styleSheet?r.styleSheet.cssText=t.cssText:r.appendChild(document.createTextNode(t.cssText)):r.setAttribute(a,void 0===t[a]?"":t[a]));r.setAttribute("data-rh","true"),o.some((function(e,t){return n=t,r.isEqualNode(e)}))?o.splice(n,1):i.push(r)})),o.forEach((function(e){return e.parentNode.removeChild(e)})),i.forEach((function(e){return r.appendChild(e)})),{oldTags:o,newTags:i}},Q=function(e,t){var n=document.getElementsByTagName(e)[0];if(n){for(var r=n.getAttribute("data-rh"),a=r?r.split(","):[],o=[].concat(a),i=Object.keys(t),l=0;l<i.length;l+=1){var s=i[l],u=t[s]||"";n.getAttribute(s)!==u&&n.setAttribute(s,u),-1===a.indexOf(s)&&a.push(s);var c=o.indexOf(s);-1!==c&&o.splice(c,1)}for(var d=o.length-1;d>=0;d-=1)n.removeAttribute(o[d]);a.length===o.length?n.removeAttribute("data-rh"):n.getAttribute("data-rh")!==i.join(",")&&n.setAttribute("data-rh",i.join(","))}},V=function(e,t){var n=e.baseTag,r=e.htmlAttributes,a=e.linkTags,o=e.metaTags,i=e.noscriptTags,l=e.onChangeClientState,s=e.scriptTags,u=e.styleTags,c=e.title,d=e.titleAttributes;Q(g.BODY,e.bodyAttributes),Q(g.HTML,r),function(e,t){void 0!==e&&document.title!==e&&(document.title=A(e)),Q(g.TITLE,t)}(c,d);var f={baseTag:Z(g.BASE,n),linkTags:Z(g.LINK,a),metaTags:Z(g.META,o),noscriptTags:Z(g.NOSCRIPT,i),scriptTags:Z(g.SCRIPT,s),styleTags:Z(g.STYLE,u)},p={},h={};Object.keys(f).forEach((function(e){var t=f[e],n=t.newTags,r=t.oldTags;n.length&&(p[e]=n),r.length&&(h[e]=f[e].oldTags)})),t&&t(),l(e,p,h)},W=null,K=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).rendered=!1,t}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!d()(e,this.props)},n.componentDidUpdate=function(){this.emitChange()},n.componentWillUnmount=function(){this.props.context.helmetInstances.remove(this),this.emitChange()},n.emitChange=function(){var e,t,n=this.props.context,r=n.setHelmet,a=null,o=(e=n.helmetInstances.get().map((function(e){var t=f({},e.props);return delete t.context,t})),{baseTag:_(["href"],e),bodyAttributes:C("bodyAttributes",e),defer:S(e,"defer"),encode:S(e,"encodeSpecialCharacters"),htmlAttributes:C("htmlAttributes",e),linkTags:L(g.LINK,["rel","href"],e),metaTags:L(g.META,["name","charset","http-equiv","property","itemprop"],e),noscriptTags:L(g.NOSCRIPT,["innerHTML"],e),onChangeClientState:T(e),scriptTags:L(g.SCRIPT,["src","innerHTML"],e),styleTags:L(g.STYLE,["cssText"],e),title:x(e),titleAttributes:C("titleAttributes",e),prioritizeSeoTags:R(e,"prioritizeSeoTags")});G.canUseDOM?(t=o,W&&cancelAnimationFrame(W),t.defer?W=requestAnimationFrame((function(){V(t,(function(){W=null}))})):(V(t),W=null)):B&&(a=B(o)),r(a)},n.init=function(){this.rendered||(this.rendered=!0,this.props.context.helmetInstances.add(this),this.emitChange())},n.render=function(){return this.init(),null},t}(r.Component);K.propTypes={context:q.isRequired},K.displayName="HelmetDispatcher";var Y=["children"],X=["children"],J=function(e){function t(){return e.apply(this,arguments)||this}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!l()(P(this.props,"helmetData"),P(e,"helmetData"))},n.mapNestedChildrenToProps=function(e,t){if(!t)return null;switch(e.type){case g.SCRIPT:case g.NOSCRIPT:return{innerHTML:t};case g.STYLE:return{cssText:t};default:throw new Error("<"+e.type+" /> elements are self-closing and can not contain children. Refer to our API for more information.")}},n.flattenArrayTypeChildren=function(e){var t,n=e.child,r=e.arrayTypeChildren;return f({},r,((t={})[n.type]=[].concat(r[n.type]||[],[f({},e.newChildProps,this.mapNestedChildrenToProps(n,e.nestedChildren))]),t))},n.mapObjectTypeChildren=function(e){var t,n,r=e.child,a=e.newProps,o=e.newChildProps,i=e.nestedChildren;switch(r.type){case g.TITLE:return f({},a,((t={})[r.type]=i,t.titleAttributes=f({},o),t));case g.BODY:return f({},a,{bodyAttributes:f({},o)});case g.HTML:return f({},a,{htmlAttributes:f({},o)});default:return f({},a,((n={})[r.type]=f({},o),n))}},n.mapArrayTypeChildrenToProps=function(e,t){var n=f({},t);return Object.keys(e).forEach((function(t){var r;n=f({},n,((r={})[t]=e[t],r))})),n},n.warnOnInvalidChildren=function(e,t){return u()(w.some((function(t){return e.type===t})),"function"==typeof e.type?"You may be attempting to nest <Helmet> components within each other, which is not allowed. Refer to our API for more information.":"Only elements types "+w.join(", ")+" are allowed. Helmet does not support rendering <"+e.type+"> elements. Refer to our API for more information."),u()(!t||"string"==typeof t||Array.isArray(t)&&!t.some((function(e){return"string"!=typeof e})),"Helmet expects a string as a child of <"+e.type+">. Did you forget to wrap your children in braces? ( <"+e.type+">{``}</"+e.type+"> ) Refer to our API for more information."),!0},n.mapChildrenToProps=function(e,t){var n=this,a={};return r.Children.forEach(e,(function(e){if(e&&e.props){var r=e.props,o=r.children,i=m(r,Y),l=Object.keys(i).reduce((function(e,t){return e[E[t]||t]=i[t],e}),{}),s=e.type;switch("symbol"==typeof s?s=s.toString():n.warnOnInvalidChildren(e,o),s){case g.FRAGMENT:t=n.mapChildrenToProps(o,t);break;case g.LINK:case g.META:case g.NOSCRIPT:case g.SCRIPT:case g.STYLE:a=n.flattenArrayTypeChildren({child:e,arrayTypeChildren:a,newChildProps:l,nestedChildren:o});break;default:t=n.mapObjectTypeChildren({child:e,newProps:t,newChildProps:l,nestedChildren:o})}}})),this.mapArrayTypeChildrenToProps(a,t)},n.render=function(){var e=this.props,t=e.children,n=m(e,X),a=f({},n),o=n.helmetData;return t&&(a=this.mapChildrenToProps(t,a)),!o||o instanceof $||(o=new $(o.context,o.instances)),o?r.createElement(K,f({},a,{context:o.value,helmetData:void 0})):r.createElement(U.Consumer,null,(function(e){return r.createElement(K,f({},a,{context:e}))}))},t}(r.Component);J.propTypes={base:o().object,bodyAttributes:o().object,children:o().oneOfType([o().arrayOf(o().node),o().node]),defaultTitle:o().string,defer:o().bool,encodeSpecialCharacters:o().bool,htmlAttributes:o().object,link:o().arrayOf(o().object),meta:o().arrayOf(o().object),noscript:o().arrayOf(o().object),onChangeClientState:o().func,script:o().arrayOf(o().object),style:o().arrayOf(o().object),title:o().string,titleAttributes:o().object,titleTemplate:o().string,prioritizeSeoTags:o().bool,helmetData:o().object},J.defaultProps={defer:!0,encodeSpecialCharacters:!0,prioritizeSeoTags:!1},J.displayName="Helmet"},9921:(e,t)=>{"use strict";var n="function"==typeof Symbol&&Symbol.for,r=n?Symbol.for("react.element"):60103,a=n?Symbol.for("react.portal"):60106,o=n?Symbol.for("react.fragment"):60107,i=n?Symbol.for("react.strict_mode"):60108,l=n?Symbol.for("react.profiler"):60114,s=n?Symbol.for("react.provider"):60109,u=n?Symbol.for("react.context"):60110,c=n?Symbol.for("react.async_mode"):60111,d=n?Symbol.for("react.concurrent_mode"):60111,f=n?Symbol.for("react.forward_ref"):60112,p=n?Symbol.for("react.suspense"):60113,h=n?Symbol.for("react.suspense_list"):60120,m=n?Symbol.for("react.memo"):60115,g=n?Symbol.for("react.lazy"):60116,v=n?Symbol.for("react.block"):60121,b=n?Symbol.for("react.fundamental"):60117,y=n?Symbol.for("react.responder"):60118,w=n?Symbol.for("react.scope"):60119;function k(e){if("object"==typeof e&&null!==e){var t=e.$$typeof;switch(t){case r:switch(e=e.type){case c:case d:case o:case l:case i:case p:return e;default:switch(e=e&&e.$$typeof){case u:case f:case g:case m:case s:return e;default:return t}}case a:return t}}}function E(e){return k(e)===d}t.AsyncMode=c,t.ConcurrentMode=d,t.ContextConsumer=u,t.ContextProvider=s,t.Element=r,t.ForwardRef=f,t.Fragment=o,t.Lazy=g,t.Memo=m,t.Portal=a,t.Profiler=l,t.StrictMode=i,t.Suspense=p,t.isAsyncMode=function(e){return E(e)||k(e)===c},t.isConcurrentMode=E,t.isContextConsumer=function(e){return k(e)===u},t.isContextProvider=function(e){return k(e)===s},t.isElement=function(e){return"object"==typeof e&&null!==e&&e.$$typeof===r},t.isForwardRef=function(e){return k(e)===f},t.isFragment=function(e){return k(e)===o},t.isLazy=function(e){return k(e)===g},t.isMemo=function(e){return k(e)===m},t.isPortal=function(e){return k(e)===a},t.isProfiler=function(e){return k(e)===l},t.isStrictMode=function(e){return k(e)===i},t.isSuspense=function(e){return k(e)===p},t.isValidElementType=function(e){return"string"==typeof e||"function"==typeof e||e===o||e===d||e===l||e===i||e===p||e===h||"object"==typeof e&&null!==e&&(e.$$typeof===g||e.$$typeof===m||e.$$typeof===s||e.$$typeof===u||e.$$typeof===f||e.$$typeof===b||e.$$typeof===y||e.$$typeof===w||e.$$typeof===v)},t.typeOf=k},9864:(e,t,n)=>{"use strict";e.exports=n(9921)},8356:(e,t,n)=>{"use strict";function r(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function a(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(){return i=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},i.apply(this,arguments)}var l=n(7294),s=n(5697),u=[],c=[];function d(e){var t=e(),n={loading:!0,loaded:null,error:null};return n.promise=t.then((function(e){return n.loading=!1,n.loaded=e,e})).catch((function(e){throw n.loading=!1,n.error=e,e})),n}function f(e){var t={loading:!1,loaded:{},error:null},n=[];try{Object.keys(e).forEach((function(r){var a=d(e[r]);a.loading?t.loading=!0:(t.loaded[r]=a.loaded,t.error=a.error),n.push(a.promise),a.promise.then((function(e){t.loaded[r]=e})).catch((function(e){t.error=e}))}))}catch(r){t.error=r}return t.promise=Promise.all(n).then((function(e){return t.loading=!1,e})).catch((function(e){throw t.loading=!1,e})),t}function p(e,t){return l.createElement((n=e)&&n.__esModule?n.default:n,t);var n}function h(e,t){var d,f;if(!t.loading)throw new Error("react-loadable requires a `loading` component");var h=i({loader:null,loading:null,delay:200,timeout:null,render:p,webpack:null,modules:null},t),m=null;function g(){return m||(m=e(h.loader)),m.promise}return u.push(g),"function"==typeof h.webpack&&c.push((function(){if((0,h.webpack)().every((function(e){return void 0!==e&&void 0!==n.m[e]})))return g()})),f=d=function(t){function n(n){var r;return o(a(a(r=t.call(this,n)||this)),"retry",(function(){r.setState({error:null,loading:!0,timedOut:!1}),m=e(h.loader),r._loadModule()})),g(),r.state={error:m.error,pastDelay:!1,timedOut:!1,loading:m.loading,loaded:m.loaded},r}r(n,t),n.preload=function(){return g()};var i=n.prototype;return i.UNSAFE_componentWillMount=function(){this._loadModule()},i.componentDidMount=function(){this._mounted=!0},i._loadModule=function(){var e=this;if(this.context.loadable&&Array.isArray(h.modules)&&h.modules.forEach((function(t){e.context.loadable.report(t)})),m.loading){var t=function(t){e._mounted&&e.setState(t)};"number"==typeof h.delay&&(0===h.delay?this.setState({pastDelay:!0}):this._delay=setTimeout((function(){t({pastDelay:!0})}),h.delay)),"number"==typeof h.timeout&&(this._timeout=setTimeout((function(){t({timedOut:!0})}),h.timeout));var n=function(){t({error:m.error,loaded:m.loaded,loading:m.loading}),e._clearTimeouts()};m.promise.then((function(){return n(),null})).catch((function(e){return n(),null}))}},i.componentWillUnmount=function(){this._mounted=!1,this._clearTimeouts()},i._clearTimeouts=function(){clearTimeout(this._delay),clearTimeout(this._timeout)},i.render=function(){return this.state.loading||this.state.error?l.createElement(h.loading,{isLoading:this.state.loading,pastDelay:this.state.pastDelay,timedOut:this.state.timedOut,error:this.state.error,retry:this.retry}):this.state.loaded?h.render(this.state.loaded,this.props):null},n}(l.Component),o(d,"contextTypes",{loadable:s.shape({report:s.func.isRequired})}),f}function m(e){return h(d,e)}m.Map=function(e){if("function"!=typeof e.render)throw new Error("LoadableMap requires a `render(loaded, props)` function");return h(f,e)};var g=function(e){function t(){return e.apply(this,arguments)||this}r(t,e);var n=t.prototype;return n.getChildContext=function(){return{loadable:{report:this.props.report}}},n.render=function(){return l.Children.only(this.props.children)},t}(l.Component);function v(e){for(var t=[];e.length;){var n=e.pop();t.push(n())}return Promise.all(t).then((function(){if(e.length)return v(e)}))}o(g,"propTypes",{report:s.func.isRequired}),o(g,"childContextTypes",{loadable:s.shape({report:s.func.isRequired}).isRequired}),m.Capture=g,m.preloadAll=function(){return new Promise((function(e,t){v(u).then(e,t)}))},m.preloadReady=function(){return new Promise((function(e,t){v(c).then(e,e)}))},e.exports=m},8790:(e,t,n)=>{"use strict";n.d(t,{H:()=>l,f:()=>i});var r=n(6775),a=n(3117),o=n(7294);function i(e,t,n){return void 0===n&&(n=[]),e.some((function(e){var a=e.path?(0,r.LX)(t,e):n.length?n[n.length-1].match:r.F0.computeRootMatch(t);return a&&(n.push({route:e,match:a}),e.routes&&i(e.routes,t,n)),a})),n}function l(e,t,n){return void 0===t&&(t={}),void 0===n&&(n={}),e?o.createElement(r.rs,n,e.map((function(e,n){return o.createElement(r.AW,{key:e.key||n,path:e.path,exact:e.exact,strict:e.strict,render:function(n){return e.render?e.render((0,a.Z)({},n,{},t,{route:e})):o.createElement(e.component,(0,a.Z)({},n,t,{route:e}))}})}))):null}},3727:(e,t,n)=>{"use strict";n.d(t,{OL:()=>y,VK:()=>c,rU:()=>g});var r=n(6775),a=n(144),o=n(7294),i=n(9318),l=n(3117),s=n(102),u=n(2177),c=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).history=(0,i.lX)(t.props),t}return(0,a.Z)(t,e),t.prototype.render=function(){return o.createElement(r.F0,{history:this.history,children:this.props.children})},t}(o.Component);o.Component;var d=function(e,t){return"function"==typeof e?e(t):e},f=function(e,t){return"string"==typeof e?(0,i.ob)(e,null,null,t):e},p=function(e){return e},h=o.forwardRef;void 0===h&&(h=p);var m=h((function(e,t){var n=e.innerRef,r=e.navigate,a=e.onClick,i=(0,s.Z)(e,["innerRef","navigate","onClick"]),u=i.target,c=(0,l.Z)({},i,{onClick:function(e){try{a&&a(e)}catch(t){throw e.preventDefault(),t}e.defaultPrevented||0!==e.button||u&&"_self"!==u||function(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}(e)||(e.preventDefault(),r())}});return c.ref=p!==h&&t||n,o.createElement("a",c)}));var g=h((function(e,t){var n=e.component,a=void 0===n?m:n,c=e.replace,g=e.to,v=e.innerRef,b=(0,s.Z)(e,["component","replace","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=e.history,r=f(d(g,e.location),e.location),s=r?n.createHref(r):"",m=(0,l.Z)({},b,{href:s,navigate:function(){var t=d(g,e.location),r=(0,i.Ep)(e.location)===(0,i.Ep)(f(t));(c||r?n.replace:n.push)(t)}});return p!==h?m.ref=t||v:m.innerRef=v,o.createElement(a,m)}))})),v=function(e){return e},b=o.forwardRef;void 0===b&&(b=v);var y=b((function(e,t){var n=e["aria-current"],a=void 0===n?"page":n,i=e.activeClassName,c=void 0===i?"active":i,p=e.activeStyle,h=e.className,m=e.exact,y=e.isActive,w=e.location,k=e.sensitive,E=e.strict,S=e.style,x=e.to,T=e.innerRef,C=(0,s.Z)(e,["aria-current","activeClassName","activeStyle","className","exact","isActive","location","sensitive","strict","style","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=w||e.location,i=f(d(x,n),n),s=i.pathname,_=s&&s.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1"),L=_?(0,r.LX)(n.pathname,{path:_,exact:m,sensitive:k,strict:E}):null,R=!!(y?y(L,n):L),A="function"==typeof h?h(R):h,N="function"==typeof S?S(R):S;R&&(A=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return t.filter((function(e){return e})).join(" ")}(A,c),N=(0,l.Z)({},N,p));var P=(0,l.Z)({"aria-current":R&&a||null,className:A,style:N,to:i},C);return v!==b?P.ref=t||T:P.innerRef=T,o.createElement(g,P)}))}))},6775:(e,t,n)=>{"use strict";n.d(t,{AW:()=>T,F0:()=>k,rs:()=>N,s6:()=>w,LX:()=>x,k6:()=>O,TH:()=>I});var r=n(144),a=n(7294),o=n(9318),i=n(5697),l=n.n(i),s=1073741823,u="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:{};function c(e){var t=[];return{on:function(e){t.push(e)},off:function(e){t=t.filter((function(t){return t!==e}))},get:function(){return e},set:function(n,r){e=n,t.forEach((function(t){return t(e,r)}))}}}var d=a.createContext||function(e,t){var n,o,i="__create-react-context-"+function(){var e="__global_unique_id__";return u[e]=(u[e]||0)+1}()+"__",d=function(e){function n(){var t;return(t=e.apply(this,arguments)||this).emitter=c(t.props.value),t}(0,r.Z)(n,e);var a=n.prototype;return a.getChildContext=function(){var e;return(e={})[i]=this.emitter,e},a.componentWillReceiveProps=function(e){if(this.props.value!==e.value){var n,r=this.props.value,a=e.value;((o=r)===(i=a)?0!==o||1/o==1/i:o!=o&&i!=i)?n=0:(n="function"==typeof t?t(r,a):s,0!==(n|=0)&&this.emitter.set(e.value,n))}var o,i},a.render=function(){return this.props.children},n}(a.Component);d.childContextTypes=((n={})[i]=l().object.isRequired,n);var f=function(t){function n(){var e;return(e=t.apply(this,arguments)||this).state={value:e.getValue()},e.onUpdate=function(t,n){0!=((0|e.observedBits)&n)&&e.setState({value:e.getValue()})},e}(0,r.Z)(n,t);var a=n.prototype;return a.componentWillReceiveProps=function(e){var t=e.observedBits;this.observedBits=null==t?s:t},a.componentDidMount=function(){this.context[i]&&this.context[i].on(this.onUpdate);var e=this.props.observedBits;this.observedBits=null==e?s:e},a.componentWillUnmount=function(){this.context[i]&&this.context[i].off(this.onUpdate)},a.getValue=function(){return this.context[i]?this.context[i].get():e},a.render=function(){return(e=this.props.children,Array.isArray(e)?e[0]:e)(this.state.value);var e},n}(a.Component);return f.contextTypes=((o={})[i]=l().object,o),{Provider:d,Consumer:f}};const f=d;var p=n(2177),h=n(3117),m=n(9658),g=n.n(m),v=(n(9864),n(102)),b=(n(8679),function(e){var t=f();return t.displayName=e,t}),y=b("Router-History"),w=b("Router"),k=function(e){function t(t){var n;return(n=e.call(this,t)||this).state={location:t.history.location},n._isMounted=!1,n._pendingLocation=null,t.staticContext||(n.unlisten=t.history.listen((function(e){n._pendingLocation=e}))),n}(0,r.Z)(t,e),t.computeRootMatch=function(e){return{path:"/",url:"/",params:{},isExact:"/"===e}};var n=t.prototype;return n.componentDidMount=function(){var e=this;this._isMounted=!0,this.unlisten&&this.unlisten(),this.props.staticContext||(this.unlisten=this.props.history.listen((function(t){e._isMounted&&e.setState({location:t})}))),this._pendingLocation&&this.setState({location:this._pendingLocation})},n.componentWillUnmount=function(){this.unlisten&&(this.unlisten(),this._isMounted=!1,this._pendingLocation=null)},n.render=function(){return a.createElement(w.Provider,{value:{history:this.props.history,location:this.state.location,match:t.computeRootMatch(this.state.location.pathname),staticContext:this.props.staticContext}},a.createElement(y.Provider,{children:this.props.children||null,value:this.props.history}))},t}(a.Component);a.Component;a.Component;var E={},S=0;function x(e,t){void 0===t&&(t={}),("string"==typeof t||Array.isArray(t))&&(t={path:t});var n=t,r=n.path,a=n.exact,o=void 0!==a&&a,i=n.strict,l=void 0!==i&&i,s=n.sensitive,u=void 0!==s&&s;return[].concat(r).reduce((function(t,n){if(!n&&""!==n)return null;if(t)return t;var r=function(e,t){var n=""+t.end+t.strict+t.sensitive,r=E[n]||(E[n]={});if(r[e])return r[e];var a=[],o={regexp:g()(e,a,t),keys:a};return S<1e4&&(r[e]=o,S++),o}(n,{end:o,strict:l,sensitive:u}),a=r.regexp,i=r.keys,s=a.exec(e);if(!s)return null;var c=s[0],d=s.slice(1),f=e===c;return o&&!f?null:{path:n,url:"/"===n&&""===c?"/":c,isExact:f,params:i.reduce((function(e,t,n){return e[t.name]=d[n],e}),{})}}),null)}var T=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n=e.props.location||t.location,r=e.props.computedMatch?e.props.computedMatch:e.props.path?x(n.pathname,e.props):t.match,o=(0,h.Z)({},t,{location:n,match:r}),i=e.props,l=i.children,s=i.component,u=i.render;return Array.isArray(l)&&function(e){return 0===a.Children.count(e)}(l)&&(l=null),a.createElement(w.Provider,{value:o},o.match?l?"function"==typeof l?l(o):l:s?a.createElement(s,o):u?u(o):null:"function"==typeof l?l(o):null)}))},t}(a.Component);function C(e){return"/"===e.charAt(0)?e:"/"+e}function _(e,t){if(!e)return t;var n=C(e);return 0!==t.pathname.indexOf(n)?t:(0,h.Z)({},t,{pathname:t.pathname.substr(n.length)})}function L(e){return"string"==typeof e?e:(0,o.Ep)(e)}function R(e){return function(){(0,p.Z)(!1)}}function A(){}a.Component;var N=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n,r,o=e.props.location||t.location;return a.Children.forEach(e.props.children,(function(e){if(null==r&&a.isValidElement(e)){n=e;var i=e.props.path||e.props.from;r=i?x(o.pathname,(0,h.Z)({},e.props,{path:i})):t.match}})),r?a.cloneElement(n,{location:o,computedMatch:r}):null}))},t}(a.Component);var P=a.useContext;function O(){return P(y)}function I(){return P(w).location}},9658:(e,t,n)=>{var r=n(5826);e.exports=p,e.exports.parse=o,e.exports.compile=function(e,t){return l(o(e,t),t)},e.exports.tokensToFunction=l,e.exports.tokensToRegExp=f;var a=new RegExp(["(\\\\.)","([\\/.])?(?:(?:\\:(\\w+)(?:\\(((?:\\\\.|[^\\\\()])+)\\))?|\\(((?:\\\\.|[^\\\\()])+)\\))([+*?])?|(\\*))"].join("|"),"g");function o(e,t){for(var n,r=[],o=0,i=0,l="",c=t&&t.delimiter||"/";null!=(n=a.exec(e));){var d=n[0],f=n[1],p=n.index;if(l+=e.slice(i,p),i=p+d.length,f)l+=f[1];else{var h=e[i],m=n[2],g=n[3],v=n[4],b=n[5],y=n[6],w=n[7];l&&(r.push(l),l="");var k=null!=m&&null!=h&&h!==m,E="+"===y||"*"===y,S="?"===y||"*"===y,x=n[2]||c,T=v||b;r.push({name:g||o++,prefix:m||"",delimiter:x,optional:S,repeat:E,partial:k,asterisk:!!w,pattern:T?u(T):w?".*":"[^"+s(x)+"]+?"})}}return i<e.length&&(l+=e.substr(i)),l&&r.push(l),r}function i(e){return encodeURI(e).replace(/[\/?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()}))}function l(e,t){for(var n=new Array(e.length),a=0;a<e.length;a++)"object"==typeof e[a]&&(n[a]=new RegExp("^(?:"+e[a].pattern+")$",d(t)));return function(t,a){for(var o="",l=t||{},s=(a||{}).pretty?i:encodeURIComponent,u=0;u<e.length;u++){var c=e[u];if("string"!=typeof c){var d,f=l[c.name];if(null==f){if(c.optional){c.partial&&(o+=c.prefix);continue}throw new TypeError('Expected "'+c.name+'" to be defined')}if(r(f)){if(!c.repeat)throw new TypeError('Expected "'+c.name+'" to not repeat, but received `'+JSON.stringify(f)+"`");if(0===f.length){if(c.optional)continue;throw new TypeError('Expected "'+c.name+'" to not be empty')}for(var p=0;p<f.length;p++){if(d=s(f[p]),!n[u].test(d))throw new TypeError('Expected all "'+c.name+'" to match "'+c.pattern+'", but received `'+JSON.stringify(d)+"`");o+=(0===p?c.prefix:c.delimiter)+d}}else{if(d=c.asterisk?encodeURI(f).replace(/[?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})):s(f),!n[u].test(d))throw new TypeError('Expected "'+c.name+'" to match "'+c.pattern+'", but received "'+d+'"');o+=c.prefix+d}}else o+=c}return o}}function s(e){return e.replace(/([.+*?=^!:${}()[\]|\/\\])/g,"\\$1")}function u(e){return e.replace(/([=!:$\/()])/g,"\\$1")}function c(e,t){return e.keys=t,e}function d(e){return e&&e.sensitive?"":"i"}function f(e,t,n){r(t)||(n=t||n,t=[]);for(var a=(n=n||{}).strict,o=!1!==n.end,i="",l=0;l<e.length;l++){var u=e[l];if("string"==typeof u)i+=s(u);else{var f=s(u.prefix),p="(?:"+u.pattern+")";t.push(u),u.repeat&&(p+="(?:"+f+p+")*"),i+=p=u.optional?u.partial?f+"("+p+")?":"(?:"+f+"("+p+"))?":f+"("+p+")"}}var h=s(n.delimiter||"/"),m=i.slice(-h.length)===h;return a||(i=(m?i.slice(0,-h.length):i)+"(?:"+h+"(?=$))?"),i+=o?"$":a&&m?"":"(?="+h+"|$)",c(new RegExp("^"+i,d(n)),t)}function p(e,t,n){return r(t)||(n=t||n,t=[]),n=n||{},e instanceof RegExp?function(e,t){var n=e.source.match(/\((?!\?)/g);if(n)for(var r=0;r<n.length;r++)t.push({name:r,prefix:null,delimiter:null,optional:!1,repeat:!1,partial:!1,asterisk:!1,pattern:null});return c(e,t)}(e,t):r(e)?function(e,t,n){for(var r=[],a=0;a<e.length;a++)r.push(p(e[a],t,n).source);return c(new RegExp("(?:"+r.join("|")+")",d(n)),t)}(e,t,n):function(e,t,n){return f(o(e,n),t,n)}(e,t,n)}},2408:(e,t,n)=>{"use strict";var r=n(7418),a=60103,o=60106;t.Fragment=60107,t.StrictMode=60108,t.Profiler=60114;var i=60109,l=60110,s=60112;t.Suspense=60113;var u=60115,c=60116;if("function"==typeof Symbol&&Symbol.for){var d=Symbol.for;a=d("react.element"),o=d("react.portal"),t.Fragment=d("react.fragment"),t.StrictMode=d("react.strict_mode"),t.Profiler=d("react.profiler"),i=d("react.provider"),l=d("react.context"),s=d("react.forward_ref"),t.Suspense=d("react.suspense"),u=d("react.memo"),c=d("react.lazy")}var f="function"==typeof Symbol&&Symbol.iterator;function p(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var h={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},m={};function g(e,t,n){this.props=e,this.context=t,this.refs=m,this.updater=n||h}function v(){}function b(e,t,n){this.props=e,this.context=t,this.refs=m,this.updater=n||h}g.prototype.isReactComponent={},g.prototype.setState=function(e,t){if("object"!=typeof e&&"function"!=typeof e&&null!=e)throw Error(p(85));this.updater.enqueueSetState(this,e,t,"setState")},g.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")},v.prototype=g.prototype;var y=b.prototype=new v;y.constructor=b,r(y,g.prototype),y.isPureReactComponent=!0;var w={current:null},k=Object.prototype.hasOwnProperty,E={key:!0,ref:!0,__self:!0,__source:!0};function S(e,t,n){var r,o={},i=null,l=null;if(null!=t)for(r in void 0!==t.ref&&(l=t.ref),void 0!==t.key&&(i=""+t.key),t)k.call(t,r)&&!E.hasOwnProperty(r)&&(o[r]=t[r]);var s=arguments.length-2;if(1===s)o.children=n;else if(1<s){for(var u=Array(s),c=0;c<s;c++)u[c]=arguments[c+2];o.children=u}if(e&&e.defaultProps)for(r in s=e.defaultProps)void 0===o[r]&&(o[r]=s[r]);return{$$typeof:a,type:e,key:i,ref:l,props:o,_owner:w.current}}function x(e){return"object"==typeof e&&null!==e&&e.$$typeof===a}var T=/\/+/g;function C(e,t){return"object"==typeof e&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}(""+e.key):t.toString(36)}function _(e,t,n,r,i){var l=typeof e;"undefined"!==l&&"boolean"!==l||(e=null);var s=!1;if(null===e)s=!0;else switch(l){case"string":case"number":s=!0;break;case"object":switch(e.$$typeof){case a:case o:s=!0}}if(s)return i=i(s=e),e=""===r?"."+C(s,0):r,Array.isArray(i)?(n="",null!=e&&(n=e.replace(T,"$&/")+"/"),_(i,t,n,"",(function(e){return e}))):null!=i&&(x(i)&&(i=function(e,t){return{$$typeof:a,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}(i,n+(!i.key||s&&s.key===i.key?"":(""+i.key).replace(T,"$&/")+"/")+e)),t.push(i)),1;if(s=0,r=""===r?".":r+":",Array.isArray(e))for(var u=0;u<e.length;u++){var c=r+C(l=e[u],u);s+=_(l,t,n,c,i)}else if(c=function(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=f&&e[f]||e["@@iterator"])?e:null}(e),"function"==typeof c)for(e=c.call(e),u=0;!(l=e.next()).done;)s+=_(l=l.value,t,n,c=r+C(l,u++),i);else if("object"===l)throw t=""+e,Error(p(31,"[object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function L(e,t,n){if(null==e)return e;var r=[],a=0;return _(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function R(e){if(-1===e._status){var t=e._result;t=t(),e._status=0,e._result=t,t.then((function(t){0===e._status&&(t=t.default,e._status=1,e._result=t)}),(function(t){0===e._status&&(e._status=2,e._result=t)}))}if(1===e._status)return e._result;throw e._result}var A={current:null};function N(){var e=A.current;if(null===e)throw Error(p(321));return e}var P={ReactCurrentDispatcher:A,ReactCurrentBatchConfig:{transition:0},ReactCurrentOwner:w,IsSomeRendererActing:{current:!1},assign:r};t.Children={map:L,forEach:function(e,t,n){L(e,(function(){t.apply(this,arguments)}),n)},count:function(e){var t=0;return L(e,(function(){t++})),t},toArray:function(e){return L(e,(function(e){return e}))||[]},only:function(e){if(!x(e))throw Error(p(143));return e}},t.Component=g,t.PureComponent=b,t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=P,t.cloneElement=function(e,t,n){if(null==e)throw Error(p(267,e));var o=r({},e.props),i=e.key,l=e.ref,s=e._owner;if(null!=t){if(void 0!==t.ref&&(l=t.ref,s=w.current),void 0!==t.key&&(i=""+t.key),e.type&&e.type.defaultProps)var u=e.type.defaultProps;for(c in t)k.call(t,c)&&!E.hasOwnProperty(c)&&(o[c]=void 0===t[c]&&void 0!==u?u[c]:t[c])}var c=arguments.length-2;if(1===c)o.children=n;else if(1<c){u=Array(c);for(var d=0;d<c;d++)u[d]=arguments[d+2];o.children=u}return{$$typeof:a,type:e.type,key:i,ref:l,props:o,_owner:s}},t.createContext=function(e,t){return void 0===t&&(t=null),(e={$$typeof:l,_calculateChangedBits:t,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null}).Provider={$$typeof:i,_context:e},e.Consumer=e},t.createElement=S,t.createFactory=function(e){var t=S.bind(null,e);return t.type=e,t},t.createRef=function(){return{current:null}},t.forwardRef=function(e){return{$$typeof:s,render:e}},t.isValidElement=x,t.lazy=function(e){return{$$typeof:c,_payload:{_status:-1,_result:e},_init:R}},t.memo=function(e,t){return{$$typeof:u,type:e,compare:void 0===t?null:t}},t.useCallback=function(e,t){return N().useCallback(e,t)},t.useContext=function(e,t){return N().useContext(e,t)},t.useDebugValue=function(){},t.useEffect=function(e,t){return N().useEffect(e,t)},t.useImperativeHandle=function(e,t,n){return N().useImperativeHandle(e,t,n)},t.useLayoutEffect=function(e,t){return N().useLayoutEffect(e,t)},t.useMemo=function(e,t){return N().useMemo(e,t)},t.useReducer=function(e,t,n){return N().useReducer(e,t,n)},t.useRef=function(e){return N().useRef(e)},t.useState=function(e){return N().useState(e)},t.version="17.0.2"},7294:(e,t,n)=>{"use strict";e.exports=n(2408)},53:(e,t)=>{"use strict";var n,r,a,o;if("object"==typeof performance&&"function"==typeof performance.now){var i=performance;t.unstable_now=function(){return i.now()}}else{var l=Date,s=l.now();t.unstable_now=function(){return l.now()-s}}if("undefined"==typeof window||"function"!=typeof MessageChannel){var u=null,c=null,d=function(){if(null!==u)try{var e=t.unstable_now();u(!0,e),u=null}catch(n){throw setTimeout(d,0),n}};n=function(e){null!==u?setTimeout(n,0,e):(u=e,setTimeout(d,0))},r=function(e,t){c=setTimeout(e,t)},a=function(){clearTimeout(c)},t.unstable_shouldYield=function(){return!1},o=t.unstable_forceFrameRate=function(){}}else{var f=window.setTimeout,p=window.clearTimeout;if("undefined"!=typeof console){var h=window.cancelAnimationFrame;"function"!=typeof window.requestAnimationFrame&&console.error("This browser doesn't support requestAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills"),"function"!=typeof h&&console.error("This browser doesn't support cancelAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills")}var m=!1,g=null,v=-1,b=5,y=0;t.unstable_shouldYield=function(){return t.unstable_now()>=y},o=function(){},t.unstable_forceFrameRate=function(e){0>e||125<e?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):b=0<e?Math.floor(1e3/e):5};var w=new MessageChannel,k=w.port2;w.port1.onmessage=function(){if(null!==g){var e=t.unstable_now();y=e+b;try{g(!0,e)?k.postMessage(null):(m=!1,g=null)}catch(n){throw k.postMessage(null),n}}else m=!1},n=function(e){g=e,m||(m=!0,k.postMessage(null))},r=function(e,n){v=f((function(){e(t.unstable_now())}),n)},a=function(){p(v),v=-1}}function E(e,t){var n=e.length;e.push(t);e:for(;;){var r=n-1>>>1,a=e[r];if(!(void 0!==a&&0<T(a,t)))break e;e[r]=t,e[n]=a,n=r}}function S(e){return void 0===(e=e[0])?null:e}function x(e){var t=e[0];if(void 0!==t){var n=e.pop();if(n!==t){e[0]=n;e:for(var r=0,a=e.length;r<a;){var o=2*(r+1)-1,i=e[o],l=o+1,s=e[l];if(void 0!==i&&0>T(i,n))void 0!==s&&0>T(s,i)?(e[r]=s,e[l]=n,r=l):(e[r]=i,e[o]=n,r=o);else{if(!(void 0!==s&&0>T(s,n)))break e;e[r]=s,e[l]=n,r=l}}}return t}return null}function T(e,t){var n=e.sortIndex-t.sortIndex;return 0!==n?n:e.id-t.id}var C=[],_=[],L=1,R=null,A=3,N=!1,P=!1,O=!1;function I(e){for(var t=S(_);null!==t;){if(null===t.callback)x(_);else{if(!(t.startTime<=e))break;x(_),t.sortIndex=t.expirationTime,E(C,t)}t=S(_)}}function D(e){if(O=!1,I(e),!P)if(null!==S(C))P=!0,n(z);else{var t=S(_);null!==t&&r(D,t.startTime-e)}}function z(e,n){P=!1,O&&(O=!1,a()),N=!0;var o=A;try{for(I(n),R=S(C);null!==R&&(!(R.expirationTime>n)||e&&!t.unstable_shouldYield());){var i=R.callback;if("function"==typeof i){R.callback=null,A=R.priorityLevel;var l=i(R.expirationTime<=n);n=t.unstable_now(),"function"==typeof l?R.callback=l:R===S(C)&&x(C),I(n)}else x(C);R=S(C)}if(null!==R)var s=!0;else{var u=S(_);null!==u&&r(D,u.startTime-n),s=!1}return s}finally{R=null,A=o,N=!1}}var M=o;t.unstable_IdlePriority=5,t.unstable_ImmediatePriority=1,t.unstable_LowPriority=4,t.unstable_NormalPriority=3,t.unstable_Profiling=null,t.unstable_UserBlockingPriority=2,t.unstable_cancelCallback=function(e){e.callback=null},t.unstable_continueExecution=function(){P||N||(P=!0,n(z))},t.unstable_getCurrentPriorityLevel=function(){return A},t.unstable_getFirstCallbackNode=function(){return S(C)},t.unstable_next=function(e){switch(A){case 1:case 2:case 3:var t=3;break;default:t=A}var n=A;A=t;try{return e()}finally{A=n}},t.unstable_pauseExecution=function(){},t.unstable_requestPaint=M,t.unstable_runWithPriority=function(e,t){switch(e){case 1:case 2:case 3:case 4:case 5:break;default:e=3}var n=A;A=e;try{return t()}finally{A=n}},t.unstable_scheduleCallback=function(e,o,i){var l=t.unstable_now();switch("object"==typeof i&&null!==i?i="number"==typeof(i=i.delay)&&0<i?l+i:l:i=l,e){case 1:var s=-1;break;case 2:s=250;break;case 5:s=1073741823;break;case 4:s=1e4;break;default:s=5e3}return e={id:L++,callback:o,priorityLevel:e,startTime:i,expirationTime:s=i+s,sortIndex:-1},i>l?(e.sortIndex=i,E(_,e),null===S(C)&&e===S(_)&&(O?a():O=!0,r(D,i-l))):(e.sortIndex=s,E(C,e),P||N||(P=!0,n(z))),e},t.unstable_wrapCallback=function(e){var t=A;return function(){var n=A;A=t;try{return e.apply(this,arguments)}finally{A=n}}}},3840:(e,t,n)=>{"use strict";e.exports=n(53)},6774:e=>{e.exports=function(e,t,n,r){var a=n?n.call(r,e,t):void 0;if(void 0!==a)return!!a;if(e===t)return!0;if("object"!=typeof e||!e||"object"!=typeof t||!t)return!1;var o=Object.keys(e),i=Object.keys(t);if(o.length!==i.length)return!1;for(var l=Object.prototype.hasOwnProperty.bind(t),s=0;s<o.length;s++){var u=o[s];if(!l(u))return!1;var c=e[u],d=t[u];if(!1===(a=n?n.call(r,c,d,u):void 0)||void 0===a&&c!==d)return!1}return!0}},2177:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});var r="Invariant failed";function a(e,t){if(!e)throw new Error(r)}},3250:(e,t,n)=>{"use strict";var r=n(7294);var a="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},o=r.useState,i=r.useEffect,l=r.useLayoutEffect,s=r.useDebugValue;function u(e){var t=e.getSnapshot;e=e.value;try{var n=t();return!a(e,n)}catch(r){return!0}}var c="undefined"==typeof window||void 0===window.document||void 0===window.document.createElement?function(e,t){return t()}:function(e,t){var n=t(),r=o({inst:{value:n,getSnapshot:t}}),a=r[0].inst,c=r[1];return l((function(){a.value=n,a.getSnapshot=t,u(a)&&c({inst:a})}),[e,n,t]),i((function(){return u(a)&&c({inst:a}),e((function(){u(a)&&c({inst:a})}))}),[e]),s(n),n};t.useSyncExternalStore=void 0!==r.useSyncExternalStore?r.useSyncExternalStore:c},1688:(e,t,n)=>{"use strict";e.exports=n(3250)},6809:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});const r={title:"K3s",tagline:"",url:"https://docs.k3s.io",baseUrl:"/zh/",onBrokenLinks:"throw",onBrokenMarkdownLinks:"warn",favicon:"img/favicon.ico",organizationName:"k3s-io",projectName:"docs",trailingSlash:!1,markdown:{mermaid:!0},themes:["@docusaurus/theme-mermaid",["@easyops-cn/docusaurus-search-local",{docsRouteBasePath:"/",hashed:!0,highlightSearchTermsOnTargetPage:!0,indexBlog:!1}]],i18n:{defaultLocale:"en",locales:["en","zh","kr"],localeConfigs:{en:{label:"English",direction:"ltr"},zh:{label:"\u7b80\u4f53\u4e2d\u6587",direction:"ltr"},kr:{label:"\ud55c\uad6d\uc5b4",direction:"ltr"}},path:"i18n"},themeConfig:{colorMode:{defaultMode:"light",respectPrefersColorScheme:!0,disableSwitch:!1},navbar:{title:"",logo:{alt:"logo",src:"img/k3s-logo-light.svg",srcDark:"img/k3s-logo-dark.svg"},items:[{type:"search",position:"right"},{type:"localeDropdown",position:"right",dropdownItemsBefore:[],dropdownItemsAfter:[]},{to:"https://github.com/k3s-io/k3s/",label:"GitHub",position:"right",className:"navbar__github btn"}],hideOnScroll:!1},footer:{style:"dark",links:[],copyright:'Copyright \xa9 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks\n      and uses trademarks. For a list of trademarks of The Linux Foundation, \n      please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.'},docs:{versionPersistence:"localStorage",sidebar:{hideable:!1,autoCollapseCategories:!1}},metadata:[],prism:{additionalLanguages:[],theme:{plain:{color:"#bfc7d5",backgroundColor:"#292d3e"},styles:[{types:["comment"],style:{color:"rgb(105, 112, 152)",fontStyle:"italic"}},{types:["string","inserted"],style:{color:"rgb(195, 232, 141)"}},{types:["number"],style:{color:"rgb(247, 140, 108)"}},{types:["builtin","char","constant","function"],style:{color:"rgb(130, 170, 255)"}},{types:["punctuation","selector"],style:{color:"rgb(199, 146, 234)"}},{types:["variable"],style:{color:"rgb(191, 199, 213)"}},{types:["class-name","attr-name"],style:{color:"rgb(255, 203, 107)"}},{types:["tag","deleted"],style:{color:"rgb(255, 85, 114)"}},{types:["operator"],style:{color:"rgb(137, 221, 255)"}},{types:["boolean"],style:{color:"rgb(255, 88, 116)"}},{types:["keyword"],style:{fontStyle:"italic"}},{types:["doctype"],style:{color:"rgb(199, 146, 234)",fontStyle:"italic"}},{types:["namespace"],style:{color:"rgb(178, 204, 214)"}},{types:["url"],style:{color:"rgb(221, 221, 221)"}}]},magicComments:[{className:"theme-code-block-highlighted-line",line:"highlight-next-line",block:{start:"highlight-start",end:"highlight-end"}}]},tableOfContents:{minHeadingLevel:2,maxHeadingLevel:3},mermaid:{theme:{dark:"dark",light:"default"},options:{}}},presets:[["@docusaurus/preset-classic",{docs:{routeBasePath:"/",sidebarPath:"/home/runner/work/docs/docs/sidebars.js",showLastUpdateTime:!0,editUrl:"https://github.com/k3s-io/docs/edit/main/"},blog:!1,theme:{customCss:["/home/runner/work/docs/docs/src/css/custom.css"]}}]],plugins:[["@docusaurus/plugin-client-redirects",{redirects:[{from:"/installation/ha",to:"/datastore/ha"},{from:"/installation/ha-embedded",to:"/datastore/ha-embedded"},{from:"/installation/datastore",to:"/datastore"},{from:"/installation/disable-flags",to:"/installation/server-roles"},{from:"/backup-restore/backup-restore",to:"/datastore/backup-restore"},{from:"/reference/agent-config",to:"/cli/agent"},{from:"/reference/server-config",to:"/cli/server"}]}]],baseUrlIssueBanner:!0,onDuplicateRoutes:"warn",staticDirectories:["static"],customFields:{},scripts:[],headTags:[],stylesheets:[],clientModules:[],titleDelimiter:"|",noIndex:!1}},3117:(e,t,n)=>{"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}n.d(t,{Z:()=>r})},144:(e,t,n)=>{"use strict";function r(e,t){return r=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(e,t){return e.__proto__=t,e},r(e,t)}function a(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,r(e,t)}n.d(t,{Z:()=>a})},102:(e,t,n)=>{"use strict";function r(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}n.d(t,{Z:()=>r})},7529:e=>{"use strict";e.exports=JSON.parse('{"theme.AnnouncementBar.closeButtonAriaLabel":"\u5173\u95ed","theme.BackToTopButton.buttonAriaLabel":"\u56de\u5230\u9876\u90e8","theme.CodeBlock.copied":"\u590d\u5236\u6210\u529f","theme.CodeBlock.copy":"\u590d\u5236","theme.CodeBlock.copyButtonAriaLabel":"\u590d\u5236\u4ee3\u7801\u5230\u526a\u8d34\u677f","theme.CodeBlock.wordWrapToggle":"\u5207\u6362\u81ea\u52a8\u6362\u884c","theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel":"\u6253\u5f00/\u6536\u8d77\u4fa7\u8fb9\u680f\u83dc\u5355\u300c{label}\u300d","theme.ErrorPageContent.title":"\u9875\u9762\u5df2\u5d29\u6e83\u3002","theme.ErrorPageContent.tryAgain":"\u91cd\u8bd5","theme.NavBar.navAriaLabel":"\u4e3b\u5bfc\u822a","theme.NotFound.p1":"\u6211\u4eec\u627e\u4e0d\u5230\u60a8\u8981\u627e\u7684\u9875\u9762\u3002","theme.NotFound.p2":"\u8bf7\u8054\u7cfb\u539f\u59cb\u94fe\u63a5\u6765\u6e90\u7f51\u7ad9\u7684\u6240\u6709\u8005\uff0c\u5e76\u544a\u77e5\u4ed6\u4eec\u94fe\u63a5\u5df2\u635f\u574f\u3002","theme.NotFound.title":"\u627e\u4e0d\u5230\u9875\u9762","theme.TOCCollapsible.toggleButtonLabel":"\u672c\u9875\u603b\u89c8","theme.admonition.caution":"\u8b66\u544a","theme.admonition.danger":"\u5371\u9669","theme.admonition.info":"\u4fe1\u606f","theme.admonition.note":"\u5907\u6ce8","theme.admonition.tip":"\u63d0\u793a","theme.blog.archive.description":"\u5386\u53f2\u535a\u6587","theme.blog.archive.title":"\u5386\u53f2\u535a\u6587","theme.blog.paginator.navAriaLabel":"\u535a\u6587\u5217\u8868\u5206\u9875\u5bfc\u822a","theme.blog.paginator.newerEntries":"\u8f83\u65b0\u7684\u535a\u6587","theme.blog.paginator.olderEntries":"\u8f83\u65e7\u7684\u535a\u6587","theme.blog.post.paginator.navAriaLabel":"\u535a\u6587\u5206\u9875\u5bfc\u822a","theme.blog.post.paginator.newerPost":"\u8f83\u65b0\u4e00\u7bc7","theme.blog.post.paginator.olderPost":"\u8f83\u65e7\u4e00\u7bc7","theme.blog.post.plurals":"{count} \u7bc7\u535a\u6587","theme.blog.post.readMore":"\u9605\u8bfb\u66f4\u591a","theme.blog.post.readMoreLabel":"\u9605\u8bfb {title} \u7684\u5168\u6587","theme.blog.post.readingTime.plurals":"\u9605\u8bfb\u9700 {readingTime} \u5206\u949f","theme.blog.sidebar.navAriaLabel":"\u6700\u8fd1\u535a\u6587\u5bfc\u822a","theme.blog.tagTitle":"{nPosts} \u542b\u6709\u6807\u7b7e\u300c{tagName}\u300d","theme.colorToggle.ariaLabel":"\u5207\u6362\u6d45\u8272/\u6697\u9ed1\u6a21\u5f0f\uff08\u5f53\u524d\u4e3a{mode}\uff09","theme.colorToggle.ariaLabel.mode.dark":"\u6697\u9ed1\u6a21\u5f0f","theme.colorToggle.ariaLabel.mode.light":"\u6d45\u8272\u6a21\u5f0f","theme.common.editThisPage":"\u7f16\u8f91\u6b64\u9875","theme.common.headingLinkTitle":"\u6807\u9898\u7684\u76f4\u63a5\u94fe\u63a5","theme.common.skipToMainContent":"\u8df3\u5230\u4e3b\u8981\u5185\u5bb9","theme.docs.DocCard.categoryDescription":"{count} \u4e2a\u9879\u76ee","theme.docs.breadcrumbs.home":"\u4e3b\u9875\u9762","theme.docs.breadcrumbs.navAriaLabel":"\u9875\u9762\u8def\u5f84","theme.docs.paginator.navAriaLabel":"\u6587\u6863\u5206\u9875\u5bfc\u822a","theme.docs.paginator.next":"\u4e0b\u4e00\u9875","theme.docs.paginator.previous":"\u4e0a\u4e00\u9875","theme.docs.sidebar.closeSidebarButtonAriaLabel":"Close navigation bar","theme.docs.sidebar.collapseButtonAriaLabel":"\u6536\u8d77\u4fa7\u8fb9\u680f","theme.docs.sidebar.collapseButtonTitle":"\u6536\u8d77\u4fa7\u8fb9\u680f","theme.docs.sidebar.expandButtonAriaLabel":"\u5c55\u5f00\u4fa7\u8fb9\u680f","theme.docs.sidebar.expandButtonTitle":"\u5c55\u5f00\u4fa7\u8fb9\u680f","theme.docs.sidebar.navAriaLabel":"\u6587\u6863\u4fa7\u8fb9\u680f","theme.docs.sidebar.toggleSidebarButtonAriaLabel":"Toggle navigation bar","theme.docs.tagDocListPageTitle":"{nDocsTagged}\u300c{tagName}\u300d","theme.docs.tagDocListPageTitle.nDocsTagged":"{count} \u7bc7\u6587\u6863\u5e26\u6709\u6807\u7b7e","theme.docs.versionBadge.label":"\u7248\u672c\uff1a{versionLabel}","theme.docs.versions.latestVersionLinkLabel":"\u6700\u65b0\u7248\u672c","theme.docs.versions.latestVersionSuggestionLabel":"\u6700\u65b0\u7684\u6587\u6863\u8bf7\u53c2\u9605 {latestVersionLink} ({versionLabel})\u3002","theme.docs.versions.unmaintainedVersionLabel":"\u6b64\u4e3a {siteTitle} {versionLabel} \u7248\u7684\u6587\u6863\uff0c\u73b0\u5df2\u4e0d\u518d\u79ef\u6781\u7ef4\u62a4\u3002","theme.docs.versions.unreleasedVersionLabel":"\u6b64\u4e3a {siteTitle} {versionLabel} \u7248\u5c1a\u672a\u53d1\u884c\u7684\u6587\u6863\u3002","theme.lastUpdated.atDate":"\u4e8e {date} ","theme.lastUpdated.byUser":"\u7531 {user} ","theme.lastUpdated.lastUpdatedAtBy":"\u6700\u540e{byUser}{atDate}\u66f4\u65b0","theme.navbar.mobileLanguageDropdown.label":"\u9009\u62e9\u8bed\u8a00","theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel":"\u2190 \u56de\u5230\u4e3b\u83dc\u5355","theme.navbar.mobileVersionsDropdown.label":"\u9009\u62e9\u7248\u672c","theme.tags.tagsListLabel":"\u6807\u7b7e\uff1a","theme.tags.tagsPageLink":"\u67e5\u770b\u6240\u6709\u6807\u7b7e","theme.tags.tagsPageTitle":"\u6807\u7b7e","theme.SearchBar.label":"\u641c\u7d22","theme.SearchBar.seeAll":"\u67e5\u770b\u5168\u90e8 {count} \u4e2a\u7ed3\u679c","theme.SearchBar.noResultsText":"\u6ca1\u6709\u627e\u5230\u4efb\u4f55\u6587\u6863","theme.SearchPage.existingResultsTitle":"\u300c{query}\u300d\u7684\u641c\u7d22\u7ed3\u679c","theme.SearchPage.emptyResultsTitle":"\u5728\u6587\u6863\u4e2d\u641c\u7d22","theme.SearchPage.documentsFound.plurals":"\u627e\u5230 {count} \u4efd\u6587\u4ef6","theme.SearchPage.noResultsText":"\u672a\u627e\u5230\u4efb\u4f55\u7ed3\u679c","theme.SearchPage.inputPlaceholder":"\u5728\u6b64\u8f93\u5165\u641c\u7d22\u5b57\u8bcd","theme.SearchPage.inputLabel":"\u641c\u7d22","theme.SearchPage.algoliaLabel":"\u901a\u8fc7 Algolia \u641c\u7d22","theme.SearchPage.fetchingNewResults":"\u6b63\u5728\u83b7\u53d6\u65b0\u7684\u641c\u7d22\u7ed3\u679c...","theme.SearchModal.searchBox.resetButtonTitle":"\u6e05\u9664\u67e5\u8be2","theme.SearchModal.searchBox.cancelButtonText":"\u53d6\u6d88","theme.SearchModal.startScreen.recentSearchesTitle":"\u6700\u8fd1\u641c\u7d22","theme.SearchModal.startScreen.noRecentSearchesText":"\u6ca1\u6709\u6700\u8fd1\u641c\u7d22","theme.SearchModal.startScreen.saveRecentSearchButtonTitle":"\u4fdd\u5b58\u8fd9\u4e2a\u641c\u7d22","theme.SearchModal.startScreen.removeRecentSearchButtonTitle":"\u4ece\u5386\u53f2\u8bb0\u5f55\u4e2d\u5220\u9664\u8fd9\u4e2a\u641c\u7d22","theme.SearchModal.startScreen.favoriteSearchesTitle":"\u6536\u85cf","theme.SearchModal.startScreen.removeFavoriteSearchButtonTitle":"\u4ece\u6536\u85cf\u5217\u8868\u4e2d\u5220\u9664\u8fd9\u4e2a\u641c\u7d22","theme.SearchModal.errorScreen.titleText":"\u65e0\u6cd5\u83b7\u53d6\u7ed3\u679c","theme.SearchModal.errorScreen.helpText":"\u4f60\u53ef\u80fd\u9700\u8981\u68c0\u67e5\u7f51\u7edc\u8fde\u63a5\u3002","theme.SearchModal.footer.selectText":"\u9009\u4e2d","theme.SearchModal.footer.selectKeyAriaLabel":"Enter \u952e","theme.SearchModal.footer.navigateText":"\u5bfc\u822a","theme.SearchModal.footer.navigateUpKeyAriaLabel":"\u5411\u4e0a\u952e","theme.SearchModal.footer.navigateDownKeyAriaLabel":"\u5411\u4e0b\u952e","theme.SearchModal.footer.closeText":"\u5173\u95ed","theme.SearchModal.footer.closeKeyAriaLabel":"Esc \u952e","theme.SearchModal.footer.searchByText":"\u641c\u7d22\u63d0\u4f9b","theme.SearchModal.noResultsScreen.noResultsText":"\u6ca1\u6709\u7ed3\u679c\uff1a","theme.SearchModal.noResultsScreen.suggestedQueryText":"\u8bd5\u8bd5\u641c\u7d22","theme.SearchModal.noResultsScreen.reportMissingResultsText":"\u8ba4\u4e3a\u8fd9\u4e2a\u67e5\u8be2\u5e94\u8be5\u6709\u7ed3\u679c\uff1f","theme.SearchModal.noResultsScreen.reportMissingResultsLinkText":"\u8bf7\u544a\u77e5\u6211\u4eec\u3002","theme.SearchModal.placeholder":"\u641c\u7d22\u6587\u6863"}')},6887:e=>{"use strict";e.exports=JSON.parse('{"/zh/search-87d":{"__comp":"1a4e3797","__context":{"plugin":"4129286c"}},"/zh/-428":{"__comp":"1be78505","__context":{"plugin":"247783bb"},"versionMetadata":"935f2afb"},"/zh/-73b":{"__comp":"17896441","content":"13055719"},"/zh/advanced-367":{"__comp":"17896441","content":"9c71bff4"},"/zh/architecture-f86":{"__comp":"17896441","content":"4a93747f"},"/zh/cli-16f":{"__comp":"17896441","content":"50715220"},"/zh/cli/agent-a3f":{"__comp":"17896441","content":"15ed8710"},"/zh/cli/certificate-6a2":{"__comp":"17896441","content":"53163943"},"/zh/cli/etcd-snapshot-8da":{"__comp":"17896441","content":"37dfe6f0"},"/zh/cli/secrets-encrypt-0b0":{"__comp":"17896441","content":"df5dd15e"},"/zh/cli/server-25d":{"__comp":"17896441","content":"0a743094"},"/zh/cli/token-a40":{"__comp":"17896441","content":"772a162b"},"/zh/cluster-access-dbe":{"__comp":"17896441","content":"0a0e4894"},"/zh/datastore-ab6":{"__comp":"17896441","content":"6f7960fe"},"/zh/datastore/backup-restore-379":{"__comp":"17896441","content":"e65553dc"},"/zh/datastore/cluster-loadbalancer-995":{"__comp":"17896441","content":"5977b32d"},"/zh/datastore/ha-7ae":{"__comp":"17896441","content":"beafadc6"},"/zh/datastore/ha-embedded-7fe":{"__comp":"17896441","content":"b2fd5509"},"/zh/faq-936":{"__comp":"17896441","content":"ac5690a0"},"/zh/helm-416":{"__comp":"17896441","content":"6b4d906e"},"/zh/installation-40c":{"__comp":"17896441","content":"492f60c5"},"/zh/installation/airgap-262":{"__comp":"17896441","content":"7d5aab5d"},"/zh/installation/configuration-906":{"__comp":"17896441","content":"e1787277"},"/zh/installation/kube-dashboard-ddd":{"__comp":"17896441","content":"de044cc7"},"/zh/installation/network-options-0b1":{"__comp":"17896441","content":"f367c5c1"},"/zh/installation/packaged-components-19e":{"__comp":"17896441","content":"dcd62276"},"/zh/installation/private-registry-c5c":{"__comp":"17896441","content":"1f6c7e37"},"/zh/installation/requirements-62d":{"__comp":"17896441","content":"62005660"},"/zh/installation/server-roles-5fb":{"__comp":"17896441","content":"97691ddb"},"/zh/installation/uninstall-47d":{"__comp":"17896441","content":"2af2f480"},"/zh/known-issues-97f":{"__comp":"17896441","content":"34c95e47"},"/zh/networking-69c":{"__comp":"17896441","content":"11f121d5"},"/zh/quick-start-6e8":{"__comp":"17896441","content":"1ac3de50"},"/zh/reference-1cf":{"__comp":"17896441","content":"330f05fd"},"/zh/reference/env-variables-d35":{"__comp":"17896441","content":"711cf357"},"/zh/reference/resource-profiling-541":{"__comp":"17896441","content":"2d65ef92"},"/zh/security-890":{"__comp":"17896441","content":"6d8200b0"},"/zh/security/hardening-guide-195":{"__comp":"17896441","content":"811e87f8"},"/zh/security/secrets-encryption-152":{"__comp":"17896441","content":"03f6c9e9"},"/zh/security/self-assessment-b85":{"__comp":"17896441","content":"9df0942e"},"/zh/storage-992":{"__comp":"17896441","content":"3551cc1a"},"/zh/upgrades-bca":{"__comp":"17896441","content":"357d395b"},"/zh/upgrades/automated-aa6":{"__comp":"17896441","content":"46fd080e"},"/zh/upgrades/killall-3b5":{"__comp":"17896441","content":"93e8d6ea"},"/zh/upgrades/manual-8bc":{"__comp":"17896441","content":"a3ec58b8"}}')}},e=>{e.O(0,[532],(()=>{return t=9383,e(e.s=t);var t}));e.O()}]);
\ No newline at end of file
diff --git a/zh/assets/js/main.cd1c03e6.js.LICENSE.txt b/zh/assets/js/main.a0e9ca28.js.LICENSE.txt
similarity index 56%
rename from zh/assets/js/main.cd1c03e6.js.LICENSE.txt
rename to zh/assets/js/main.a0e9ca28.js.LICENSE.txt
index eb75d6910..fbc063517 100644
--- a/zh/assets/js/main.cd1c03e6.js.LICENSE.txt
+++ b/zh/assets/js/main.a0e9ca28.js.LICENSE.txt
@@ -7,6 +7,69 @@ object-assign
 /* NProgress, (c) 2013, 2014 Rico Sta. Cruz - http://ricostacruz.com/nprogress
  * @license MIT */
 
+/*!
+ * lunr.Builder
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Index
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Pipeline
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Set
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.TokenSet
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.Vector
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.stemmer
+ * Copyright (C) 2020 Oliver Nightingale
+ * Includes code from - http://tartarus.org/~martin/PorterStemmer/js.txt
+ */
+
+/*!
+ * lunr.stopWordFilter
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.tokenizer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.trimmer
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!
+ * lunr.utils
+ * Copyright (C) 2020 Oliver Nightingale
+ */
+
+/*!***************************************************
+* mark.js v8.11.1
+* https://markjs.io/
+* Copyright (c) 2014–2018, Julian Kühnel
+* Released under the MIT license https://git.io/vwTVl
+*****************************************************/
+
 /**
  * @license React
  * use-sync-external-store-shim.production.min.js
@@ -26,6 +89,12 @@ object-assign
  * @public
  */
 
+/**
+ * lunr - http://lunrjs.com - A bit like Solr, but much smaller and not as bright - 2.3.9
+ * Copyright (C) 2020 Oliver Nightingale
+ * @license MIT
+ */
+
 /** @license React v0.20.2
  * scheduler.production.min.js
  *
diff --git a/zh/assets/js/main.cd1c03e6.js b/zh/assets/js/main.cd1c03e6.js
deleted file mode 100644
index c6329cb04..000000000
--- a/zh/assets/js/main.cd1c03e6.js
+++ /dev/null
@@ -1,2 +0,0 @@
-/*! For license information please see main.cd1c03e6.js.LICENSE.txt */
-(self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[]).push([[179],{830:(e,t,n)=>{"use strict";n.d(t,{W:()=>a});var r=n(7294);function a(){return r.createElement("svg",{width:"20",height:"20",className:"DocSearch-Search-Icon",viewBox:"0 0 20 20"},r.createElement("path",{d:"M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z",stroke:"currentColor",fill:"none",fillRule:"evenodd",strokeLinecap:"round",strokeLinejoin:"round"}))}},723:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(7294),a=n(3117),o=n(8356),i=n.n(o),l=n(6887);const s={"03f6c9e9":[()=>n.e(843).then(n.bind(n,9943)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/secrets-encryption.md",9943],"0a0e4894":[()=>n.e(3572).then(n.bind(n,5020)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cluster-access/cluster-access.md",5020],"0a743094":[()=>n.e(2170).then(n.bind(n,5578)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/server.md",5578],"11f121d5":[()=>n.e(3155).then(n.bind(n,1083)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/networking/networking.md",1083],13055719:[()=>n.e(9185).then(n.bind(n,6291)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/introduction.md",6291],"15ed8710":[()=>n.e(9513).then(n.bind(n,8201)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/agent.md",8201],17896441:[()=>Promise.all([n.e(532),n.e(4835),n.e(7918)]).then(n.bind(n,2839)),"@theme/DocItem",2839],"1a4e3797":[()=>Promise.all([n.e(532),n.e(7920)]).then(n.bind(n,6675)),"@theme/SearchPage",6675],"1ac3de50":[()=>n.e(9768).then(n.bind(n,1163)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/quick-start/quick-start.md",1163],"1be78505":[()=>Promise.all([n.e(532),n.e(9514)]).then(n.bind(n,9963)),"@theme/DocPage",9963],"1f6c7e37":[()=>n.e(5394).then(n.bind(n,1665)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/private-registry.md",1665],"247783bb":[()=>n.e(9334).then(n.t.bind(n,3769,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-plugin-content-docs/default/plugin-route-context-module-100.json",3769],"2af2f480":[()=>n.e(5292).then(n.bind(n,7085)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/uninstall.md",7085],"2d65ef92":[()=>n.e(2282).then(n.bind(n,1793)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/resource-profiling.md",1793],"330f05fd":[()=>n.e(2290).then(n.bind(n,8086)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/reference.md",8086],"34c95e47":[()=>n.e(4951).then(n.bind(n,396)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/known-issues/known-issues.md",396],"3551cc1a":[()=>n.e(9534).then(n.bind(n,8513)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/storage/storage.md",8513],"357d395b":[()=>n.e(5251).then(n.bind(n,9049)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/upgrades.md",9049],"37dfe6f0":[()=>n.e(3412).then(n.bind(n,178)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/etcd-snapshot.md",178],"46fd080e":[()=>n.e(8885).then(n.bind(n,2478)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/automated.md",2478],"492f60c5":[()=>n.e(2967).then(n.bind(n,1512)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/installation.md",1512],"4a93747f":[()=>n.e(9596).then(n.bind(n,5e3)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/architecture/architecture.md",5e3],50715220:[()=>n.e(8576).then(n.bind(n,2927)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/cli.md",2927],53163943:[()=>n.e(5493).then(n.bind(n,8718)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/certificate.md",8718],"5977b32d":[()=>n.e(681).then(n.bind(n,6952)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/cluster-loadbalancer.md",6952],"59b068d1":[()=>n.e(6385).then(n.t.bind(n,1572,19)),"/home/runner/work/docs/docs/.docusaurus/docusaurus-theme-search-algolia/default/plugin-route-context-module-100.json",1572],62005660:[()=>n.e(4124).then(n.bind(n,5502)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/requirements.md",5502],"6b4d906e":[()=>n.e(6535).then(n.bind(n,3446)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/helm/helm.md",3446],"6d8200b0":[()=>n.e(4424).then(n.bind(n,4773)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/security.md",4773],"6f7960fe":[()=>n.e(3100).then(n.bind(n,7958)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/datastore.md",7958],"711cf357":[()=>n.e(5812).then(n.bind(n,9538)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/reference/env-variables.md",9538],"772a162b":[()=>n.e(5165).then(n.bind(n,4120)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/token.md",4120],"7d5aab5d":[()=>n.e(3219).then(n.bind(n,4799)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/airgap.md",4799],"811e87f8":[()=>n.e(4143).then(n.bind(n,7223)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/hardening-guide.md",7223],"935f2afb":[()=>n.e(53).then(n.t.bind(n,1109,19)),"~docs/default/version-current-metadata-prop-751.json",1109],"93e8d6ea":[()=>n.e(622).then(n.bind(n,4827)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/killall.md",4827],"97691ddb":[()=>n.e(6499).then(n.bind(n,1232)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/server-roles.md",1232],"9c71bff4":[()=>n.e(4222).then(n.bind(n,89)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/advanced/advanced.md",89],"9df0942e":[()=>n.e(3531).then(n.bind(n,2694)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/security/self-assessment.md",2694],a3ec58b8:[()=>n.e(992).then(n.bind(n,8156)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/upgrades/manual.md",8156],ac5690a0:[()=>n.e(9971).then(n.bind(n,8777)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/faq/faq.md",8777],b2fd5509:[()=>n.e(6842).then(n.bind(n,1320)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha-embedded.md",1320],beafadc6:[()=>n.e(9390).then(n.bind(n,4845)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/ha.md",4845],dcd62276:[()=>n.e(8855).then(n.bind(n,8693)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/packaged-components.md",8693],de044cc7:[()=>n.e(3374).then(n.bind(n,7552)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/kube-dashboard.md",7552],df5dd15e:[()=>n.e(8178).then(n.bind(n,6709)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/cli/secrets-encrypt.md",6709],e1787277:[()=>n.e(4126).then(n.bind(n,6231)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/configuration.md",6231],e65553dc:[()=>n.e(3642).then(n.bind(n,5095)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/datastore/backup-restore.md",5095],f367c5c1:[()=>n.e(7393).then(n.bind(n,4554)),"@site/i18n/zh/docusaurus-plugin-content-docs/current/installation/network-options.md",4554]};function u(e){let{error:t,retry:n,pastDelay:a}=e;return t?r.createElement("div",{style:{textAlign:"center",color:"#fff",backgroundColor:"#fa383e",borderColor:"#fa383e",borderStyle:"solid",borderRadius:"0.25rem",borderWidth:"1px",boxSizing:"border-box",display:"block",padding:"1rem",flex:"0 0 50%",marginLeft:"25%",marginRight:"25%",marginTop:"5rem",maxWidth:"50%",width:"100%"}},r.createElement("p",null,String(t)),r.createElement("div",null,r.createElement("button",{type:"button",onClick:n},"Retry"))):a?r.createElement("div",{style:{display:"flex",justifyContent:"center",alignItems:"center",height:"100vh"}},r.createElement("svg",{id:"loader",style:{width:128,height:110,position:"absolute",top:"calc(100vh - 64%)"},viewBox:"0 0 45 45",xmlns:"http://www.w3.org/2000/svg",stroke:"#61dafb"},r.createElement("g",{fill:"none",fillRule:"evenodd",transform:"translate(1 1)",strokeWidth:"2"},r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"1.5s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"1.5s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"1.5s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"6",strokeOpacity:"0"},r.createElement("animate",{attributeName:"r",begin:"3s",dur:"3s",values:"6;22",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-opacity",begin:"3s",dur:"3s",values:"1;0",calcMode:"linear",repeatCount:"indefinite"}),r.createElement("animate",{attributeName:"stroke-width",begin:"3s",dur:"3s",values:"2;0",calcMode:"linear",repeatCount:"indefinite"})),r.createElement("circle",{cx:"22",cy:"22",r:"8"},r.createElement("animate",{attributeName:"r",begin:"0s",dur:"1.5s",values:"6;1;2;3;4;5;6",calcMode:"linear",repeatCount:"indefinite"}))))):null}var c=n(9670),d=n(226);function f(e,t){if("*"===e)return i()({loading:u,loader:()=>n.e(4972).then(n.bind(n,4972)),modules:["@theme/NotFound"],webpack:()=>[4972],render(e,t){const n=e.default;return r.createElement(d.z,{value:{plugin:{name:"native",id:"default"}}},r.createElement(n,t))}});const o=l[`${e}-${t}`],f={},p=[],m=[],h=(0,c.Z)(o);return Object.entries(h).forEach((e=>{let[t,n]=e;const r=s[n];r&&(f[t]=r[0],p.push(r[1]),m.push(r[2]))})),i().Map({loading:u,loader:f,modules:p,webpack:()=>m,render(t,n){const i=JSON.parse(JSON.stringify(o));Object.entries(t).forEach((t=>{let[n,r]=t;const a=r.default;if(!a)throw new Error(`The page component at ${e} doesn't have a default export. This makes it impossible to render anything. Consider default-exporting a React component.`);"object"!=typeof a&&"function"!=typeof a||Object.keys(r).filter((e=>"default"!==e)).forEach((e=>{a[e]=r[e]}));let o=i;const l=n.split(".");l.slice(0,-1).forEach((e=>{o=o[e]})),o[l[l.length-1]]=a}));const l=i.__comp;delete i.__comp;const s=i.__context;return delete i.__context,r.createElement(d.z,{value:s},r.createElement(l,(0,a.Z)({},i,n)))}})}const p=[{path:"/zh/search",component:f("/zh/search","b91"),exact:!0},{path:"/zh/",component:f("/zh/","428"),routes:[{path:"/zh/",component:f("/zh/","73b"),exact:!0,sidebar:"mySidebar"},{path:"/zh/advanced",component:f("/zh/advanced","367"),exact:!0,sidebar:"mySidebar"},{path:"/zh/architecture",component:f("/zh/architecture","f86"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli",component:f("/zh/cli","16f"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/agent",component:f("/zh/cli/agent","a3f"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/certificate",component:f("/zh/cli/certificate","6a2"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/etcd-snapshot",component:f("/zh/cli/etcd-snapshot","8da"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/secrets-encrypt",component:f("/zh/cli/secrets-encrypt","0b0"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/server",component:f("/zh/cli/server","25d"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cli/token",component:f("/zh/cli/token","a40"),exact:!0,sidebar:"mySidebar"},{path:"/zh/cluster-access",component:f("/zh/cluster-access","dbe"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore",component:f("/zh/datastore","ab6"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/backup-restore",component:f("/zh/datastore/backup-restore","379"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/cluster-loadbalancer",component:f("/zh/datastore/cluster-loadbalancer","995"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/ha",component:f("/zh/datastore/ha","7ae"),exact:!0,sidebar:"mySidebar"},{path:"/zh/datastore/ha-embedded",component:f("/zh/datastore/ha-embedded","7fe"),exact:!0,sidebar:"mySidebar"},{path:"/zh/faq",component:f("/zh/faq","936"),exact:!0,sidebar:"mySidebar"},{path:"/zh/helm",component:f("/zh/helm","416"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation",component:f("/zh/installation","40c"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/airgap",component:f("/zh/installation/airgap","262"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/configuration",component:f("/zh/installation/configuration","906"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/kube-dashboard",component:f("/zh/installation/kube-dashboard","ddd"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/network-options",component:f("/zh/installation/network-options","0b1"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/packaged-components",component:f("/zh/installation/packaged-components","19e"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/private-registry",component:f("/zh/installation/private-registry","c5c"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/requirements",component:f("/zh/installation/requirements","62d"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/server-roles",component:f("/zh/installation/server-roles","5fb"),exact:!0,sidebar:"mySidebar"},{path:"/zh/installation/uninstall",component:f("/zh/installation/uninstall","47d"),exact:!0,sidebar:"mySidebar"},{path:"/zh/known-issues",component:f("/zh/known-issues","97f"),exact:!0,sidebar:"mySidebar"},{path:"/zh/networking",component:f("/zh/networking","69c"),exact:!0,sidebar:"mySidebar"},{path:"/zh/quick-start",component:f("/zh/quick-start","6e8"),exact:!0,sidebar:"mySidebar"},{path:"/zh/reference",component:f("/zh/reference","1cf"),exact:!0,sidebar:"mySidebar"},{path:"/zh/reference/env-variables",component:f("/zh/reference/env-variables","d35"),exact:!0,sidebar:"mySidebar"},{path:"/zh/reference/resource-profiling",component:f("/zh/reference/resource-profiling","541"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security",component:f("/zh/security","890"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security/hardening-guide",component:f("/zh/security/hardening-guide","195"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security/secrets-encryption",component:f("/zh/security/secrets-encryption","152"),exact:!0,sidebar:"mySidebar"},{path:"/zh/security/self-assessment",component:f("/zh/security/self-assessment","b85"),exact:!0,sidebar:"mySidebar"},{path:"/zh/storage",component:f("/zh/storage","992"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades",component:f("/zh/upgrades","bca"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades/automated",component:f("/zh/upgrades/automated","aa6"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades/killall",component:f("/zh/upgrades/killall","3b5"),exact:!0,sidebar:"mySidebar"},{path:"/zh/upgrades/manual",component:f("/zh/upgrades/manual","8bc"),exact:!0,sidebar:"mySidebar"}]},{path:"*",component:f("*")}]},8934:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,t:()=>o});var r=n(7294);const a=r.createContext(!1);function o(e){let{children:t}=e;const[n,o]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{o(!0)}),[]),r.createElement(a.Provider,{value:n},t)}},9383:(e,t,n)=>{"use strict";var r=n(7294),a=n(3935),o=n(3727),i=n(405),l=n(412);const s=[n(2497),n(3310),n(8320),n(2295)];var u=n(723),c=n(6775),d=n(8790);function f(e){let{children:t}=e;return r.createElement(r.Fragment,null,t)}var p=n(3117),m=n(5742),h=n(2263),g=n(4996),b=n(6668),v=n(833),y=n(4711),w=n(9727),k=n(3320),S=n(197);function E(){const{i18n:{defaultLocale:e,localeConfigs:t}}=(0,h.Z)(),n=(0,y.l)();return r.createElement(m.Z,null,Object.entries(t).map((e=>{let[t,{htmlLang:a}]=e;return r.createElement("link",{key:t,rel:"alternate",href:n.createUrl({locale:t,fullyQualified:!0}),hrefLang:a})})),r.createElement("link",{rel:"alternate",href:n.createUrl({locale:e,fullyQualified:!0}),hrefLang:"x-default"}))}function x(e){let{permalink:t}=e;const{siteConfig:{url:n}}=(0,h.Z)(),a=function(){const{siteConfig:{url:e}}=(0,h.Z)(),{pathname:t}=(0,c.TH)();return e+(0,g.Z)(t)}(),o=t?`${n}${t}`:a;return r.createElement(m.Z,null,r.createElement("meta",{property:"og:url",content:o}),r.createElement("link",{rel:"canonical",href:o}))}function T(){const{i18n:{currentLocale:e}}=(0,h.Z)(),{metadata:t,image:n}=(0,b.L)();return r.createElement(r.Fragment,null,r.createElement(m.Z,null,r.createElement("meta",{name:"twitter:card",content:"summary_large_image"}),r.createElement("body",{className:w.h})),n&&r.createElement(v.d,{image:n}),r.createElement(x,null),r.createElement(E,null),r.createElement(S.Z,{tag:k.HX,locale:e}),r.createElement(m.Z,null,t.map(((e,t)=>r.createElement("meta",(0,p.Z)({key:t},e))))))}const C=new Map;function _(e){if(C.has(e.pathname))return{...e,pathname:C.get(e.pathname)};if((0,d.f)(u.Z,e.pathname).some((e=>{let{route:t}=e;return!0===t.exact})))return C.set(e.pathname,e.pathname),e;const t=e.pathname.trim().replace(/(?:\/index)?\.html$/,"")||"/";return C.set(e.pathname,t),{...e,pathname:t}}var A=n(8934),L=n(8940);function R(e){for(var t=arguments.length,n=new Array(t>1?t-1:0),r=1;r<t;r++)n[r-1]=arguments[r];const a=s.map((t=>(t.default?.[e]??t[e])?.(...n)));return()=>a.forEach((e=>e?.()))}const P=function(e){let{children:t,location:n,previousLocation:a}=e;return(0,r.useLayoutEffect)((()=>{a!==n&&(!function(e){let{location:t,previousLocation:n}=e;if(!n)return;const r=t.pathname===n.pathname,a=t.hash===n.hash,o=t.search===n.search;if(r&&a&&!o)return;const{hash:i}=t;if(i){const e=decodeURIComponent(i.substring(1));document.getElementById(e)?.scrollIntoView()}else window.scrollTo(0,0)}({location:n,previousLocation:a}),R("onRouteDidUpdate",{previousLocation:a,location:n}))}),[a,n]),t};function N(e){const t=Array.from(new Set([e,decodeURI(e)])).map((e=>(0,d.f)(u.Z,e))).flat();return Promise.all(t.map((e=>e.route.component.preload?.())))}class O extends r.Component{constructor(e){super(e),this.previousLocation=void 0,this.routeUpdateCleanupCb=void 0,this.previousLocation=null,this.routeUpdateCleanupCb=l.Z.canUseDOM?R("onRouteUpdate",{previousLocation:null,location:this.props.location}):()=>{},this.state={nextRouteHasLoaded:!0}}shouldComponentUpdate(e,t){if(e.location===this.props.location)return t.nextRouteHasLoaded;const n=e.location;return this.previousLocation=this.props.location,this.setState({nextRouteHasLoaded:!1}),this.routeUpdateCleanupCb=R("onRouteUpdate",{previousLocation:this.previousLocation,location:n}),N(n.pathname).then((()=>{this.routeUpdateCleanupCb(),this.setState({nextRouteHasLoaded:!0})})).catch((e=>{console.warn(e),window.location.reload()})),!1}render(){const{children:e,location:t}=this.props;return r.createElement(P,{previousLocation:this.previousLocation,location:t},r.createElement(c.AW,{location:t,render:()=>e}))}}const I=O,D="__docusaurus-base-url-issue-banner-container",M="__docusaurus-base-url-issue-banner-suggestion-container",z="__DOCUSAURUS_INSERT_BASEURL_BANNER";function B(e){return`\nwindow['${z}'] = true;\n\ndocument.addEventListener('DOMContentLoaded', maybeInsertBanner);\n\nfunction maybeInsertBanner() {\n  var shouldInsert = window['${z}'];\n  shouldInsert && insertBanner();\n}\n\nfunction insertBanner() {\n  var bannerContainer = document.getElementById('${D}');\n  if (!bannerContainer) {\n    return;\n  }\n  var bannerHtml = ${JSON.stringify(function(e){return`\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">${e}</span> ${"/"===e?" (default value)":""}</p>\n   <p>We suggest trying baseUrl = <span id="${M}" style="font-weight: bold; color: green;"></span></p>\n</div>\n`}(e)).replace(/</g,"\\<")};\n  bannerContainer.innerHTML = bannerHtml;\n  var suggestionContainer = document.getElementById('${M}');\n  var actualHomePagePath = window.location.pathname;\n  var suggestedBaseUrl = actualHomePagePath.substr(-1) === '/'\n        ? actualHomePagePath\n        : actualHomePagePath + '/';\n  suggestionContainer.innerHTML = suggestedBaseUrl;\n}\n`}function F(){const{siteConfig:{baseUrl:e}}=(0,h.Z)();return(0,r.useLayoutEffect)((()=>{window[z]=!1}),[]),r.createElement(r.Fragment,null,!l.Z.canUseDOM&&r.createElement(m.Z,null,r.createElement("script",null,B(e))),r.createElement("div",{id:D}))}function j(){const{siteConfig:{baseUrl:e,baseUrlIssueBanner:t}}=(0,h.Z)(),{pathname:n}=(0,c.TH)();return t&&n===e?r.createElement(F,null):null}function U(){const{siteConfig:{favicon:e,title:t,noIndex:n},i18n:{currentLocale:a,localeConfigs:o}}=(0,h.Z)(),i=(0,g.Z)(e),{htmlLang:l,direction:s}=o[a];return r.createElement(m.Z,null,r.createElement("html",{lang:l,dir:s}),r.createElement("title",null,t),r.createElement("meta",{property:"og:title",content:t}),r.createElement("meta",{name:"viewport",content:"width=device-width, initial-scale=1.0"}),n&&r.createElement("meta",{name:"robots",content:"noindex, nofollow"}),e&&r.createElement("link",{rel:"icon",href:i}))}var $=n(4763);function q(){const e=(0,d.H)(u.Z),t=(0,c.TH)();return r.createElement($.Z,null,r.createElement(L.M,null,r.createElement(A.t,null,r.createElement(f,null,r.createElement(U,null),r.createElement(T,null),r.createElement(j,null),r.createElement(I,{location:_(t)},e)))))}var H=n(6887);const G=function(e){try{return document.createElement("link").relList.supports(e)}catch{return!1}}("prefetch")?function(e){return new Promise(((t,n)=>{if("undefined"==typeof document)return void n();const r=document.createElement("link");r.setAttribute("rel","prefetch"),r.setAttribute("href",e),r.onload=()=>t(),r.onerror=()=>n();(document.getElementsByTagName("head")[0]??document.getElementsByName("script")[0]?.parentNode)?.appendChild(r)}))}:function(e){return new Promise(((t,n)=>{const r=new XMLHttpRequest;r.open("GET",e,!0),r.withCredentials=!0,r.onload=()=>{200===r.status?t():n()},r.send(null)}))};var Z=n(9670);const V=new Set,W=new Set,K=()=>navigator.connection?.effectiveType.includes("2g")||navigator.connection?.saveData,Y={prefetch(e){if(!(e=>!K()&&!W.has(e)&&!V.has(e))(e))return!1;V.add(e);const t=(0,d.f)(u.Z,e).flatMap((e=>{return t=e.route.path,Object.entries(H).filter((e=>{let[n]=e;return n.replace(/-[^-]+$/,"")===t})).flatMap((e=>{let[,t]=e;return Object.values((0,Z.Z)(t))}));var t}));return Promise.all(t.map((e=>{const t=n.gca(e);return t&&!t.includes("undefined")?G(t).catch((()=>{})):Promise.resolve()})))},preload:e=>!!(e=>!K()&&!W.has(e))(e)&&(W.add(e),N(e))},Q=Object.freeze(Y);if(l.Z.canUseDOM){window.docusaurus=Q;const e=a.hydrate;N(window.location.pathname).then((()=>{e(r.createElement(i.B6,null,r.createElement(o.VK,null,r.createElement(q,null))),document.getElementById("__docusaurus"))}))}},8940:(e,t,n)=>{"use strict";n.d(t,{_:()=>c,M:()=>d});var r=n(7294),a=n(6809);const o=JSON.parse('{"docusaurus-plugin-content-docs":{"default":{"path":"/zh/","versions":[{"name":"current","label":"Next","isLast":true,"path":"/zh/","mainDocId":"introduction","docs":[{"id":"advanced/advanced","path":"/zh/advanced/","sidebar":"mySidebar"},{"id":"architecture/architecture","path":"/zh/architecture/","sidebar":"mySidebar"},{"id":"cli/agent","path":"/zh/cli/agent","sidebar":"mySidebar"},{"id":"cli/certificate","path":"/zh/cli/certificate","sidebar":"mySidebar"},{"id":"cli/cli","path":"/zh/cli/","sidebar":"mySidebar"},{"id":"cli/etcd-snapshot","path":"/zh/cli/etcd-snapshot","sidebar":"mySidebar"},{"id":"cli/secrets-encrypt","path":"/zh/cli/secrets-encrypt","sidebar":"mySidebar"},{"id":"cli/server","path":"/zh/cli/server","sidebar":"mySidebar"},{"id":"cli/token","path":"/zh/cli/token","sidebar":"mySidebar"},{"id":"cluster-access/cluster-access","path":"/zh/cluster-access/","sidebar":"mySidebar"},{"id":"datastore/backup-restore","path":"/zh/datastore/backup-restore","sidebar":"mySidebar"},{"id":"datastore/cluster-loadbalancer","path":"/zh/datastore/cluster-loadbalancer","sidebar":"mySidebar"},{"id":"datastore/datastore","path":"/zh/datastore/","sidebar":"mySidebar"},{"id":"datastore/ha","path":"/zh/datastore/ha","sidebar":"mySidebar"},{"id":"datastore/ha-embedded","path":"/zh/datastore/ha-embedded","sidebar":"mySidebar"},{"id":"faq/faq","path":"/zh/faq/","sidebar":"mySidebar"},{"id":"helm/helm","path":"/zh/helm/","sidebar":"mySidebar"},{"id":"installation/airgap","path":"/zh/installation/airgap","sidebar":"mySidebar"},{"id":"installation/configuration","path":"/zh/installation/configuration","sidebar":"mySidebar"},{"id":"installation/installation","path":"/zh/installation/","sidebar":"mySidebar"},{"id":"installation/kube-dashboard","path":"/zh/installation/kube-dashboard","sidebar":"mySidebar"},{"id":"installation/network-options","path":"/zh/installation/network-options","sidebar":"mySidebar"},{"id":"installation/packaged-components","path":"/zh/installation/packaged-components","sidebar":"mySidebar"},{"id":"installation/private-registry","path":"/zh/installation/private-registry","sidebar":"mySidebar"},{"id":"installation/requirements","path":"/zh/installation/requirements","sidebar":"mySidebar"},{"id":"installation/server-roles","path":"/zh/installation/server-roles","sidebar":"mySidebar"},{"id":"installation/uninstall","path":"/zh/installation/uninstall","sidebar":"mySidebar"},{"id":"introduction","path":"/zh/","sidebar":"mySidebar"},{"id":"known-issues/known-issues","path":"/zh/known-issues/","sidebar":"mySidebar"},{"id":"networking/networking","path":"/zh/networking/","sidebar":"mySidebar"},{"id":"quick-start/quick-start","path":"/zh/quick-start/","sidebar":"mySidebar"},{"id":"reference/env-variables","path":"/zh/reference/env-variables","sidebar":"mySidebar"},{"id":"reference/reference","path":"/zh/reference/","sidebar":"mySidebar"},{"id":"reference/resource-profiling","path":"/zh/reference/resource-profiling","sidebar":"mySidebar"},{"id":"security/hardening-guide","path":"/zh/security/hardening-guide","sidebar":"mySidebar"},{"id":"security/secrets-encryption","path":"/zh/security/secrets-encryption","sidebar":"mySidebar"},{"id":"security/security","path":"/zh/security/","sidebar":"mySidebar"},{"id":"security/self-assessment","path":"/zh/security/self-assessment","sidebar":"mySidebar"},{"id":"storage/storage","path":"/zh/storage/","sidebar":"mySidebar"},{"id":"upgrades/automated","path":"/zh/upgrades/automated","sidebar":"mySidebar"},{"id":"upgrades/killall","path":"/zh/upgrades/killall","sidebar":"mySidebar"},{"id":"upgrades/manual","path":"/zh/upgrades/manual","sidebar":"mySidebar"},{"id":"upgrades/upgrades","path":"/zh/upgrades/","sidebar":"mySidebar"}],"draftIds":[],"sidebars":{"mySidebar":{"link":{"path":"/zh/","label":"introduction"}}}}],"breadcrumbs":true}}}'),i=JSON.parse('{"defaultLocale":"en","locales":["en","zh","kr"],"path":"i18n","currentLocale":"zh","localeConfigs":{"en":{"label":"English","direction":"ltr","htmlLang":"en","calendar":"gregory","path":"en"},"zh":{"label":"\u7b80\u4f53\u4e2d\u6587","direction":"ltr","htmlLang":"zh","calendar":"gregory","path":"zh"},"kr":{"label":"\ud55c\uad6d\uc5b4","direction":"ltr","htmlLang":"kr","calendar":"gregory","path":"kr"}}}');var l=n(7529);const s=JSON.parse('{"docusaurusVersion":"2.4.1","siteVersion":"0.0.1","pluginVersions":{"docusaurus-plugin-content-docs":{"type":"package","name":"@docusaurus/plugin-content-docs","version":"2.4.1"},"docusaurus-plugin-content-pages":{"type":"package","name":"@docusaurus/plugin-content-pages","version":"2.4.1"},"docusaurus-plugin-sitemap":{"type":"package","name":"@docusaurus/plugin-sitemap","version":"2.4.1"},"docusaurus-theme-classic":{"type":"package","name":"@docusaurus/theme-classic","version":"2.4.1"},"docusaurus-theme-search-algolia":{"type":"package","name":"@docusaurus/theme-search-algolia","version":"2.4.1"},"docusaurus-plugin-client-redirects":{"type":"package","name":"@docusaurus/plugin-client-redirects","version":"2.4.1"},"docusaurus-theme-mermaid":{"type":"package","name":"@docusaurus/theme-mermaid","version":"2.4.1"}}}'),u={siteConfig:a.Z,siteMetadata:s,globalData:o,i18n:i,codeTranslations:l},c=r.createContext(u);function d(e){let{children:t}=e;return r.createElement(c.Provider,{value:u},t)}},4763:(e,t,n)=>{"use strict";n.d(t,{Z:()=>f});var r=n(7294),a=n(412),o=n(5742),i=n(8780),l=n(6999);function s(e){let{error:t,tryAgain:n}=e;return r.createElement("div",{style:{display:"flex",flexDirection:"column",justifyContent:"center",alignItems:"flex-start",minHeight:"100vh",width:"100%",maxWidth:"80ch",fontSize:"20px",margin:"0 auto",padding:"1rem"}},r.createElement("h1",{style:{fontSize:"3rem"}},"This page crashed"),r.createElement("button",{type:"button",onClick:n,style:{margin:"1rem 0",fontSize:"2rem",cursor:"pointer",borderRadius:20,padding:"1rem"}},"Try again"),r.createElement(u,{error:t}))}function u(e){let{error:t}=e;const n=(0,i.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{style:{whiteSpace:"pre-wrap"}},n)}function c(e){let{error:t,tryAgain:n}=e;return r.createElement(f,{fallback:()=>r.createElement(s,{error:t,tryAgain:n})},r.createElement(o.Z,null,r.createElement("title",null,"Page Error")),r.createElement(l.Z,null,r.createElement(s,{error:t,tryAgain:n})))}const d=e=>r.createElement(c,e);class f extends r.Component{constructor(e){super(e),this.state={error:null}}componentDidCatch(e){a.Z.canUseDOM&&this.setState({error:e})}render(){const{children:e}=this.props,{error:t}=this.state;if(t){const e={error:t,tryAgain:()=>this.setState({error:null})};return(this.props.fallback??d)(e)}return e??null}}},412:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});const r="undefined"!=typeof window&&"document"in window&&"createElement"in window.document,a={canUseDOM:r,canUseEventListeners:r&&("addEventListener"in window||"attachEvent"in window),canUseIntersectionObserver:r&&"IntersectionObserver"in window,canUseViewport:r&&"screen"in window}},5742:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(405);function o(e){return r.createElement(a.ql,e)}},9960:(e,t,n)=>{"use strict";n.d(t,{Z:()=>p});var r=n(3117),a=n(7294),o=n(3727),i=n(8780),l=n(2263),s=n(3919),u=n(412);const c=a.createContext({collectLink:()=>{}});var d=n(4996);function f(e,t){let{isNavLink:n,to:f,href:p,activeClassName:m,isActive:h,"data-noBrokenLinkCheck":g,autoAddBaseUrl:b=!0,...v}=e;const{siteConfig:{trailingSlash:y,baseUrl:w}}=(0,l.Z)(),{withBaseUrl:k}=(0,d.C)(),S=(0,a.useContext)(c),E=(0,a.useRef)(null);(0,a.useImperativeHandle)(t,(()=>E.current));const x=f||p;const T=(0,s.Z)(x),C=x?.replace("pathname://","");let _=void 0!==C?(A=C,b&&(e=>e.startsWith("/"))(A)?k(A):A):void 0;var A;_&&T&&(_=(0,i.applyTrailingSlash)(_,{trailingSlash:y,baseUrl:w}));const L=(0,a.useRef)(!1),R=n?o.OL:o.rU,P=u.Z.canUseIntersectionObserver,N=(0,a.useRef)(),O=()=>{L.current||null==_||(window.docusaurus.preload(_),L.current=!0)};(0,a.useEffect)((()=>(!P&&T&&null!=_&&window.docusaurus.prefetch(_),()=>{P&&N.current&&N.current.disconnect()})),[N,_,P,T]);const I=_?.startsWith("#")??!1,D=!_||!T||I;return D||g||S.collectLink(_),D?a.createElement("a",(0,r.Z)({ref:E,href:_},x&&!T&&{target:"_blank",rel:"noopener noreferrer"},v)):a.createElement(R,(0,r.Z)({},v,{onMouseEnter:O,onTouchStart:O,innerRef:e=>{E.current=e,P&&e&&T&&(N.current=new window.IntersectionObserver((t=>{t.forEach((t=>{e===t.target&&(t.isIntersecting||t.intersectionRatio>0)&&(N.current.unobserve(e),N.current.disconnect(),null!=_&&window.docusaurus.prefetch(_))}))})),N.current.observe(e))},to:_},n&&{isActive:h,activeClassName:m}))}const p=a.forwardRef(f)},5999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s,I:()=>l});var r=n(7294);function a(e,t){const n=e.split(/(\{\w+\})/).map(((e,n)=>{if(n%2==1){const n=t?.[e.slice(1,-1)];if(void 0!==n)return n}return e}));return n.some((e=>(0,r.isValidElement)(e)))?n.map(((e,t)=>(0,r.isValidElement)(e)?r.cloneElement(e,{key:t}):e)).filter((e=>""!==e)):n.join("")}var o=n(7529);function i(e){let{id:t,message:n}=e;if(void 0===t&&void 0===n)throw new Error("Docusaurus translation declarations must have at least a translation id or a default translation message");return o[t??n]??n??t}function l(e,t){let{message:n,id:r}=e;return a(i({message:n,id:r}),t)}function s(e){let{children:t,id:n,values:o}=e;if(t&&"string"!=typeof t)throw console.warn("Illegal <Translate> children",t),new Error("The Docusaurus <Translate> component only accept simple string values");const l=i({message:t,id:n});return r.createElement(r.Fragment,null,a(l,o))}},9935:(e,t,n)=>{"use strict";n.d(t,{m:()=>r});const r="default"},3919:(e,t,n)=>{"use strict";function r(e){return/^(?:\w*:|\/\/)/.test(e)}function a(e){return void 0!==e&&!r(e)}n.d(t,{Z:()=>a,b:()=>r})},4996:(e,t,n)=>{"use strict";n.d(t,{C:()=>i,Z:()=>l});var r=n(7294),a=n(2263),o=n(3919);function i(){const{siteConfig:{baseUrl:e,url:t}}=(0,a.Z)(),n=(0,r.useCallback)(((n,r)=>function(e,t,n,r){let{forcePrependBaseUrl:a=!1,absolute:i=!1}=void 0===r?{}:r;if(!n||n.startsWith("#")||(0,o.b)(n))return n;if(a)return t+n.replace(/^\//,"");if(n===t.replace(/\/$/,""))return t;const l=n.startsWith(t)?n:t+n.replace(/^\//,"");return i?e+l:l}(t,e,n,r)),[t,e]);return{withBaseUrl:n}}function l(e,t){void 0===t&&(t={});const{withBaseUrl:n}=i();return n(e,t)}},2263:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8940);function o(){return(0,r.useContext)(a._)}},2389:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(8934);function o(){return(0,r.useContext)(a._)}},9670:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});function r(e){const t={};return function e(n,r){Object.entries(n).forEach((n=>{let[a,o]=n;const i=r?`${r}.${a}`:a;var l;"object"==typeof(l=o)&&l&&Object.keys(l).length>0?e(o,i):t[i]=o}))}(e),t}},226:(e,t,n)=>{"use strict";n.d(t,{_:()=>a,z:()=>o});var r=n(7294);const a=r.createContext(null);function o(e){let{children:t,value:n}=e;const o=r.useContext(a),i=(0,r.useMemo)((()=>function(e){let{parent:t,value:n}=e;if(!t){if(!n)throw new Error("Unexpected: no Docusaurus route context found");if(!("plugin"in n))throw new Error("Unexpected: Docusaurus topmost route context has no `plugin` attribute");return n}const r={...t.data,...n?.data};return{plugin:t.plugin,data:r}}({parent:o,value:n})),[o,n]);return r.createElement(a.Provider,{value:i},t)}},143:(e,t,n)=>{"use strict";n.d(t,{Iw:()=>b,gA:()=>p,WS:()=>m,_r:()=>d,Jo:()=>v,zh:()=>f,yW:()=>g,gB:()=>h});var r=n(6775),a=n(2263),o=n(9935);function i(e,t){void 0===t&&(t={});const n=function(){const{globalData:e}=(0,a.Z)();return e}()[e];if(!n&&t.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin.`);return n}const l=e=>e.versions.find((e=>e.isLast));function s(e,t){const n=l(e);return[...e.versions.filter((e=>e!==n)),n].find((e=>!!(0,r.LX)(t,{path:e.path,exact:!1,strict:!1})))}function u(e,t){const n=s(e,t),a=n?.docs.find((e=>!!(0,r.LX)(t,{path:e.path,exact:!0,strict:!1})));return{activeVersion:n,activeDoc:a,alternateDocVersions:a?function(t){const n={};return e.versions.forEach((e=>{e.docs.forEach((r=>{r.id===t&&(n[e.name]=r)}))})),n}(a.id):{}}}const c={},d=()=>i("docusaurus-plugin-content-docs")??c,f=e=>function(e,t,n){void 0===t&&(t=o.m),void 0===n&&(n={});const r=i(e)?.[t];if(!r&&n.failfast)throw new Error(`Docusaurus plugin global data not found for "${e}" plugin with id "${t}".`);return r}("docusaurus-plugin-content-docs",e,{failfast:!0});function p(e){void 0===e&&(e={});const t=d(),{pathname:n}=(0,r.TH)();return function(e,t,n){void 0===n&&(n={});const a=Object.entries(e).sort(((e,t)=>t[1].path.localeCompare(e[1].path))).find((e=>{let[,n]=e;return!!(0,r.LX)(t,{path:n.path,exact:!1,strict:!1})})),o=a?{pluginId:a[0],pluginData:a[1]}:void 0;if(!o&&n.failfast)throw new Error(`Can't find active docs plugin for "${t}" pathname, while it was expected to be found. Maybe you tried to use a docs feature that can only be used on a docs-related page? Existing docs plugin paths are: ${Object.values(e).map((e=>e.path)).join(", ")}`);return o}(t,n,e)}function m(e){void 0===e&&(e={});const t=p(e),{pathname:n}=(0,r.TH)();if(!t)return;return{activePlugin:t,activeVersion:s(t.pluginData,n)}}function h(e){return f(e).versions}function g(e){const t=f(e);return l(t)}function b(e){const t=f(e),{pathname:n}=(0,r.TH)();return u(t,n)}function v(e){const t=f(e),{pathname:n}=(0,r.TH)();return function(e,t){const n=l(e);return{latestDocSuggestion:u(e,t).alternateDocVersions[n.name],latestVersionSuggestion:n}}(t,n)}},8320:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>o});var r=n(4865),a=n.n(r);a().configure({showSpinner:!1});const o={onRouteUpdate(e){let{location:t,previousLocation:n}=e;if(n&&t.pathname!==n.pathname){const e=window.setTimeout((()=>{a().start()}),200);return()=>window.clearTimeout(e)}},onRouteDidUpdate(){a().done()}}},3310:(e,t,n)=>{"use strict";n.r(t);var r=n(7410),a=n(6809);!function(e){const{themeConfig:{prism:t}}=a.Z,{additionalLanguages:r}=t;globalThis.Prism=e,r.forEach((e=>{n(6726)(`./prism-${e}`)})),delete globalThis.Prism}(r.Z)},9471:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294);const a="iconExternalLink_nPIU";function o(e){let{width:t=13.5,height:n=13.5}=e;return r.createElement("svg",{width:t,height:n,"aria-hidden":"true",viewBox:"0 0 24 24",className:a},r.createElement("path",{fill:"currentColor",d:"M21 13v10h-21v-19h12v2h-10v15h17v-8h2zm3-12h-10.988l4.035 4-6.977 7.07 2.828 2.828 6.977-7.07 4.125 4.172v-11z"}))}},6999:(e,t,n)=>{"use strict";n.d(t,{Z:()=>Ot});var r=n(7294),a=n(6010),o=n(4763),i=n(833),l=n(3117),s=n(6775),u=n(5999),c=n(5936);const d="__docusaurus_skipToContent_fallback";function f(e){e.setAttribute("tabindex","-1"),e.focus(),e.removeAttribute("tabindex")}function p(){const e=(0,r.useRef)(null),{action:t}=(0,s.k6)(),n=(0,r.useCallback)((e=>{e.preventDefault();const t=document.querySelector("main:first-of-type")??document.getElementById(d);t&&f(t)}),[]);return(0,c.S)((n=>{let{location:r}=n;e.current&&!r.hash&&"PUSH"===t&&f(e.current)})),{containerRef:e,onClick:n}}const m=(0,u.I)({id:"theme.common.skipToMainContent",description:"The skip to content label used for accessibility, allowing to rapidly navigate to main content with keyboard tab/enter navigation",message:"Skip to main content"});function h(e){const t=e.children??m,{containerRef:n,onClick:a}=p();return r.createElement("div",{ref:n,role:"region","aria-label":m},r.createElement("a",(0,l.Z)({},e,{href:`#${d}`,onClick:a}),t))}var g=n(5281),b=n(9727);const v="skipToContent_fXgn";function y(){return r.createElement(h,{className:v})}var w=n(6668),k=n(9689);function S(e){let{width:t=21,height:n=21,color:a="currentColor",strokeWidth:o=1.2,className:i,...s}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 15 15",width:t,height:n},s),r.createElement("g",{stroke:a,strokeWidth:o},r.createElement("path",{d:"M.75.75l13.5 13.5M14.25.75L.75 14.25"})))}const E="closeButton_CVFx";function x(e){return r.createElement("button",(0,l.Z)({type:"button","aria-label":(0,u.I)({id:"theme.AnnouncementBar.closeButtonAriaLabel",message:"Close",description:"The ARIA label for close button of announcement bar"})},e,{className:(0,a.Z)("clean-btn close",E,e.className)}),r.createElement(S,{width:14,height:14,strokeWidth:3.1}))}const T="content_knG7";function C(e){const{announcementBar:t}=(0,w.L)(),{content:n}=t;return r.createElement("div",(0,l.Z)({},e,{className:(0,a.Z)(T,e.className),dangerouslySetInnerHTML:{__html:n}}))}const _="announcementBar_mb4j",A="announcementBarPlaceholder_vyr4",L="announcementBarClose_gvF7",R="announcementBarContent_xLdY";function P(){const{announcementBar:e}=(0,w.L)(),{isActive:t,close:n}=(0,k.nT)();if(!t)return null;const{backgroundColor:a,textColor:o,isCloseable:i}=e;return r.createElement("div",{className:_,style:{backgroundColor:a,color:o},role:"banner"},i&&r.createElement("div",{className:A}),r.createElement(C,{className:R}),i&&r.createElement(x,{onClick:n,className:L}))}var N=n(3163),O=n(2466);var I=n(902),D=n(3102);const M=r.createContext(null);function z(e){let{children:t}=e;const n=function(){const e=(0,N.e)(),t=(0,D.HY)(),[n,a]=(0,r.useState)(!1),o=null!==t.component,i=(0,I.D9)(o);return(0,r.useEffect)((()=>{o&&!i&&a(!0)}),[o,i]),(0,r.useEffect)((()=>{o?e.shown||a(!0):a(!1)}),[e.shown,o]),(0,r.useMemo)((()=>[n,a]),[n])}();return r.createElement(M.Provider,{value:n},t)}function B(e){if(e.component){const t=e.component;return r.createElement(t,e.props)}}function F(){const e=(0,r.useContext)(M);if(!e)throw new I.i6("NavbarSecondaryMenuDisplayProvider");const[t,n]=e,a=(0,r.useCallback)((()=>n(!1)),[n]),o=(0,D.HY)();return(0,r.useMemo)((()=>({shown:t,hide:a,content:B(o)})),[a,o,t])}function j(e){let{header:t,primaryMenu:n,secondaryMenu:o}=e;const{shown:i}=F();return r.createElement("div",{className:"navbar-sidebar"},t,r.createElement("div",{className:(0,a.Z)("navbar-sidebar__items",{"navbar-sidebar__items--show-secondary":i})},r.createElement("div",{className:"navbar-sidebar__item menu"},n),r.createElement("div",{className:"navbar-sidebar__item menu"},o)))}var U=n(2949),$=n(2389);function q(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"}))}function H(e){return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:24,height:24},e),r.createElement("path",{fill:"currentColor",d:"M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"}))}const G={toggle:"toggle_vylO",toggleButton:"toggleButton_gllP",darkToggleIcon:"darkToggleIcon_wfgR",lightToggleIcon:"lightToggleIcon_pyhR",toggleButtonDisabled:"toggleButtonDisabled_aARS"};function Z(e){let{className:t,buttonClassName:n,value:o,onChange:i}=e;const l=(0,$.Z)(),s=(0,u.I)({message:"Switch between dark and light mode (currently {mode})",id:"theme.colorToggle.ariaLabel",description:"The ARIA label for the navbar color mode toggle"},{mode:"dark"===o?(0,u.I)({message:"dark mode",id:"theme.colorToggle.ariaLabel.mode.dark",description:"The name for the dark color mode"}):(0,u.I)({message:"light mode",id:"theme.colorToggle.ariaLabel.mode.light",description:"The name for the light color mode"})});return r.createElement("div",{className:(0,a.Z)(G.toggle,t)},r.createElement("button",{className:(0,a.Z)("clean-btn",G.toggleButton,!l&&G.toggleButtonDisabled,n),type:"button",onClick:()=>i("dark"===o?"light":"dark"),disabled:!l,title:s,"aria-label":s,"aria-live":"polite"},r.createElement(q,{className:(0,a.Z)(G.toggleIcon,G.lightToggleIcon)}),r.createElement(H,{className:(0,a.Z)(G.toggleIcon,G.darkToggleIcon)})))}const V=r.memo(Z),W="darkNavbarColorModeToggle_X3D1";function K(e){let{className:t}=e;const n=(0,w.L)().navbar.style,a=(0,w.L)().colorMode.disableSwitch,{colorMode:o,setColorMode:i}=(0,U.I)();return a?null:r.createElement(V,{className:t,buttonClassName:"dark"===n?W:void 0,value:o,onChange:i})}var Y=n(1327);function Q(){return r.createElement(Y.Z,{className:"navbar__brand",imageClassName:"navbar__logo",titleClassName:"navbar__title text--truncate"})}function X(){const e=(0,N.e)();return r.createElement("button",{type:"button","aria-label":(0,u.I)({id:"theme.docs.sidebar.closeSidebarButtonAriaLabel",message:"Close navigation bar",description:"The ARIA label for close button of mobile sidebar"}),className:"clean-btn navbar-sidebar__close",onClick:()=>e.toggle()},r.createElement(S,{color:"var(--ifm-color-emphasis-600)"}))}function J(){return r.createElement("div",{className:"navbar-sidebar__brand"},r.createElement(Q,null),r.createElement("a",{href:"https://github.com/k3s-io/k3s",target:"_blank",rel:"noopener noreferrer",className:"margin-right--md header-github-link"}),r.createElement(K,{className:"margin-right--md"}),r.createElement(X,null))}var ee=n(9960),te=n(4996),ne=n(3919),re=n(8022),ae=n(9471);function oe(e){let{activeBasePath:t,activeBaseRegex:n,to:a,href:o,label:i,html:s,isDropdownLink:u,prependBaseUrlToHref:c,...d}=e;const f=(0,te.Z)(a),p=(0,te.Z)(t),m=(0,te.Z)(o,{forcePrependBaseUrl:!0}),h=i&&o&&!(0,ne.Z)(o),g=s?{dangerouslySetInnerHTML:{__html:s}}:{children:r.createElement(r.Fragment,null,i,h&&r.createElement(ae.Z,u&&{width:12,height:12}))};return o?r.createElement(ee.Z,(0,l.Z)({href:c?m:o},d,g)):r.createElement(ee.Z,(0,l.Z)({to:f,isNavLink:!0},(t||n)&&{isActive:(e,t)=>n?(0,re.F)(n,t.pathname):t.pathname.startsWith(p)},d,g))}function ie(e){let{className:t,isDropdownItem:n=!1,...o}=e;const i=r.createElement(oe,(0,l.Z)({className:(0,a.Z)(n?"dropdown__link":"navbar__item navbar__link",t),isDropdownLink:n},o));return n?r.createElement("li",null,i):i}function le(e){let{className:t,isDropdownItem:n,...o}=e;return r.createElement("li",{className:"menu__list-item"},r.createElement(oe,(0,l.Z)({className:(0,a.Z)("menu__link",t)},o)))}function se(e){let{mobile:t=!1,position:n,...a}=e;const o=t?le:ie;return r.createElement(o,(0,l.Z)({},a,{activeClassName:a.activeClassName??(t?"menu__link--active":"navbar__link--active")}))}var ue=n(6043),ce=n(8596),de=n(2263);function fe(e,t){return e.some((e=>function(e,t){return!!(0,ce.Mg)(e.to,t)||!!(0,re.F)(e.activeBaseRegex,t)||!(!e.activeBasePath||!t.startsWith(e.activeBasePath))}(e,t)))}function pe(e){let{items:t,position:n,className:o,onClick:i,...s}=e;const u=(0,r.useRef)(null),[c,d]=(0,r.useState)(!1);return(0,r.useEffect)((()=>{const e=e=>{u.current&&!u.current.contains(e.target)&&d(!1)};return document.addEventListener("mousedown",e),document.addEventListener("touchstart",e),document.addEventListener("focusin",e),()=>{document.removeEventListener("mousedown",e),document.removeEventListener("touchstart",e),document.removeEventListener("focusin",e)}}),[u]),r.createElement("div",{ref:u,className:(0,a.Z)("navbar__item","dropdown","dropdown--hoverable",{"dropdown--right":"right"===n,"dropdown--show":c})},r.createElement(oe,(0,l.Z)({"aria-haspopup":"true","aria-expanded":c,role:"button",href:s.to?void 0:"#",className:(0,a.Z)("navbar__link",o)},s,{onClick:s.to?void 0:e=>e.preventDefault(),onKeyDown:e=>{"Enter"===e.key&&(e.preventDefault(),d(!c))}}),s.children??s.label),r.createElement("ul",{className:"dropdown__menu"},t.map(((e,t)=>r.createElement(Ze,(0,l.Z)({isDropdownItem:!0,activeClassName:"dropdown__link--active"},e,{key:t}))))))}function me(e){let{items:t,className:n,position:o,onClick:i,...u}=e;const c=function(){const{siteConfig:{baseUrl:e}}=(0,de.Z)(),{pathname:t}=(0,s.TH)();return t.replace(e,"/")}(),d=fe(t,c),{collapsed:f,toggleCollapsed:p,setCollapsed:m}=(0,ue.u)({initialState:()=>!d});return(0,r.useEffect)((()=>{d&&m(!d)}),[c,d,m]),r.createElement("li",{className:(0,a.Z)("menu__list-item",{"menu__list-item--collapsed":f})},r.createElement(oe,(0,l.Z)({role:"button",className:(0,a.Z)("menu__link menu__link--sublist menu__link--sublist-caret",n)},u,{onClick:e=>{e.preventDefault(),p()}}),u.children??u.label),r.createElement(ue.z,{lazy:!0,as:"ul",className:"menu__list",collapsed:f},t.map(((e,t)=>r.createElement(Ze,(0,l.Z)({mobile:!0,isDropdownItem:!0,onClick:i,activeClassName:"menu__link--active"},e,{key:t}))))))}function he(e){let{mobile:t=!1,...n}=e;const a=t?me:pe;return r.createElement(a,n)}var ge=n(4711);function be(e){let{width:t=20,height:n=20,...a}=e;return r.createElement("svg",(0,l.Z)({viewBox:"0 0 24 24",width:t,height:n,"aria-hidden":!0},a),r.createElement("path",{fill:"currentColor",d:"M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"}))}const ve="iconLanguage_nlXk";function ye(){return r.createElement("svg",{width:"15",height:"15",className:"DocSearch-Control-Key-Icon"},r.createElement("path",{d:"M4.505 4.496h2M5.505 5.496v5M8.216 4.496l.055 5.993M10 7.5c.333.333.5.667.5 1v2M12.326 4.5v5.996M8.384 4.496c1.674 0 2.116 0 2.116 1.5s-.442 1.5-2.116 1.5M3.205 9.303c-.09.448-.277 1.21-1.241 1.203C1 10.5.5 9.513.5 8V7c0-1.57.5-2.5 1.464-2.494.964.006 1.134.598 1.24 1.342M12.553 10.5h1.953",strokeWidth:"1.2",stroke:"currentColor",fill:"none",strokeLinecap:"square"}))}var we=n(830),ke=["translations"];function Se(){return Se=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},Se.apply(this,arguments)}function Ee(e,t){return function(e){if(Array.isArray(e))return e}(e)||function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]||e["@@iterator"];if(null==n)return;var r,a,o=[],i=!0,l=!1;try{for(n=n.call(e);!(i=(r=n.next()).done)&&(o.push(r.value),!t||o.length!==t);i=!0);}catch(s){l=!0,a=s}finally{try{i||null==n.return||n.return()}finally{if(l)throw a}}return o}(e,t)||function(e,t){if(!e)return;if("string"==typeof e)return xe(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);"Object"===n&&e.constructor&&(n=e.constructor.name);if("Map"===n||"Set"===n)return Array.from(e);if("Arguments"===n||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(n))return xe(e,t)}(e,t)||function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function xe(e,t){(null==t||t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}function Te(e,t){if(null==e)return{};var n,r,a=function(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}(e,t);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(a[n]=e[n])}return a}var Ce="Ctrl";var _e=r.forwardRef((function(e,t){var n=e.translations,a=void 0===n?{}:n,o=Te(e,ke),i=a.buttonText,l=void 0===i?"Search":i,s=a.buttonAriaLabel,u=void 0===s?"Search":s,c=Ee((0,r.useState)(null),2),d=c[0],f=c[1];return(0,r.useEffect)((function(){"undefined"!=typeof navigator&&(/(Mac|iPhone|iPod|iPad)/i.test(navigator.platform)?f("\u2318"):f(Ce))}),[]),r.createElement("button",Se({type:"button",className:"DocSearch DocSearch-Button","aria-label":u},o,{ref:t}),r.createElement("span",{className:"DocSearch-Button-Container"},r.createElement(we.W,null),r.createElement("span",{className:"DocSearch-Button-Placeholder"},l)),r.createElement("span",{className:"DocSearch-Button-Keys"},null!==d&&r.createElement(r.Fragment,null,r.createElement("kbd",{className:"DocSearch-Button-Key"},d===Ce?r.createElement(ye,null):d),r.createElement("kbd",{className:"DocSearch-Button-Key"},"K"))))})),Ae=n(5742),Le=n(6177),Re=n(239),Pe=n(3320);var Ne=n(3935);const Oe={button:{buttonText:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"}),buttonAriaLabel:(0,u.I)({id:"theme.SearchBar.label",message:"Search",description:"The ARIA label and placeholder for search button"})},modal:{searchBox:{resetButtonTitle:(0,u.I)({id:"theme.SearchModal.searchBox.resetButtonTitle",message:"Clear the query",description:"The label and ARIA label for search box reset button"}),resetButtonAriaLabel:(0,u.I)({id:"theme.SearchModal.searchBox.resetButtonTitle",message:"Clear the query",description:"The label and ARIA label for search box reset button"}),cancelButtonText:(0,u.I)({id:"theme.SearchModal.searchBox.cancelButtonText",message:"Cancel",description:"The label and ARIA label for search box cancel button"}),cancelButtonAriaLabel:(0,u.I)({id:"theme.SearchModal.searchBox.cancelButtonText",message:"Cancel",description:"The label and ARIA label for search box cancel button"})},startScreen:{recentSearchesTitle:(0,u.I)({id:"theme.SearchModal.startScreen.recentSearchesTitle",message:"Recent",description:"The title for recent searches"}),noRecentSearchesText:(0,u.I)({id:"theme.SearchModal.startScreen.noRecentSearchesText",message:"No recent searches",description:"The text when no recent searches"}),saveRecentSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.saveRecentSearchButtonTitle",message:"Save this search",description:"The label for save recent search button"}),removeRecentSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.removeRecentSearchButtonTitle",message:"Remove this search from history",description:"The label for remove recent search button"}),favoriteSearchesTitle:(0,u.I)({id:"theme.SearchModal.startScreen.favoriteSearchesTitle",message:"Favorite",description:"The title for favorite searches"}),removeFavoriteSearchButtonTitle:(0,u.I)({id:"theme.SearchModal.startScreen.removeFavoriteSearchButtonTitle",message:"Remove this search from favorites",description:"The label for remove favorite search button"})},errorScreen:{titleText:(0,u.I)({id:"theme.SearchModal.errorScreen.titleText",message:"Unable to fetch results",description:"The title for error screen of search modal"}),helpText:(0,u.I)({id:"theme.SearchModal.errorScreen.helpText",message:"You might want to check your network connection.",description:"The help text for error screen of search modal"})},footer:{selectText:(0,u.I)({id:"theme.SearchModal.footer.selectText",message:"to select",description:"The explanatory text of the action for the enter key"}),selectKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.selectKeyAriaLabel",message:"Enter key",description:"The ARIA label for the Enter key button that makes the selection"}),navigateText:(0,u.I)({id:"theme.SearchModal.footer.navigateText",message:"to navigate",description:"The explanatory text of the action for the Arrow up and Arrow down key"}),navigateUpKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.navigateUpKeyAriaLabel",message:"Arrow up",description:"The ARIA label for the Arrow up key button that makes the navigation"}),navigateDownKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.navigateDownKeyAriaLabel",message:"Arrow down",description:"The ARIA label for the Arrow down key button that makes the navigation"}),closeText:(0,u.I)({id:"theme.SearchModal.footer.closeText",message:"to close",description:"The explanatory text of the action for Escape key"}),closeKeyAriaLabel:(0,u.I)({id:"theme.SearchModal.footer.closeKeyAriaLabel",message:"Escape key",description:"The ARIA label for the Escape key button that close the modal"}),searchByText:(0,u.I)({id:"theme.SearchModal.footer.searchByText",message:"Search by",description:"The text explain that the search is making by Algolia"})},noResultsScreen:{noResultsText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.noResultsText",message:"No results for",description:"The text explains that there are no results for the following search"}),suggestedQueryText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.suggestedQueryText",message:"Try searching for",description:"The text for the suggested query when no results are found for the following search"}),reportMissingResultsText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.reportMissingResultsText",message:"Believe this query should return results?",description:"The text for the question where the user thinks there are missing results"}),reportMissingResultsLinkText:(0,u.I)({id:"theme.SearchModal.noResultsScreen.reportMissingResultsLinkText",message:"Let us know.",description:"The text for the link to report missing results"})}},placeholder:(0,u.I)({id:"theme.SearchModal.placeholder",message:"Search docs",description:"The placeholder of the input of the DocSearch pop-up modal"})};let Ie=null;function De(e){let{hit:t,children:n}=e;return r.createElement(ee.Z,{to:t.url},n)}function Me(e){let{state:t,onClose:n}=e;const a=(0,Le.M)();return r.createElement(ee.Z,{to:a(t.query),onClick:n},r.createElement(u.Z,{id:"theme.SearchBar.seeAll",values:{count:t.context.nbHits}},"See all {count} results"))}function ze(e){let{contextualSearch:t,externalUrlRegex:a,...o}=e;const{siteMetadata:i}=(0,de.Z)(),u=(0,Re.l)(),c=function(){const{locale:e,tags:t}=(0,Pe._q)();return[`language:${e}`,t.map((e=>`docusaurus_tag:${e}`))]}(),d=o.searchParameters?.facetFilters??[],f=t?function(e,t){const n=e=>"string"==typeof e?[e]:e;return[...n(e),...n(t)]}(c,d):d,p={...o.searchParameters,facetFilters:f},m=(0,s.k6)(),h=(0,r.useRef)(null),g=(0,r.useRef)(null),[b,v]=(0,r.useState)(!1),[y,w]=(0,r.useState)(void 0),k=(0,r.useCallback)((()=>Ie?Promise.resolve():Promise.all([n.e(6780).then(n.bind(n,6780)),Promise.all([n.e(532),n.e(6945)]).then(n.bind(n,6945)),Promise.all([n.e(532),n.e(8894)]).then(n.bind(n,8894))]).then((e=>{let[{DocSearchModal:t}]=e;Ie=t}))),[]),S=(0,r.useCallback)((()=>{k().then((()=>{h.current=document.createElement("div"),document.body.insertBefore(h.current,document.body.firstChild),v(!0)}))}),[k,v]),E=(0,r.useCallback)((()=>{v(!1),h.current?.remove()}),[v]),x=(0,r.useCallback)((e=>{k().then((()=>{v(!0),w(e.key)}))}),[k,v,w]),T=(0,r.useRef)({navigate(e){let{itemUrl:t}=e;(0,re.F)(a,t)?window.location.href=t:m.push(t)}}).current,C=(0,r.useRef)((e=>o.transformItems?o.transformItems(e):e.map((e=>({...e,url:u(e.url)}))))).current,_=(0,r.useMemo)((()=>e=>r.createElement(Me,(0,l.Z)({},e,{onClose:E}))),[E]),A=(0,r.useCallback)((e=>(e.addAlgoliaAgent("docusaurus",i.docusaurusVersion),e)),[i.docusaurusVersion]);return function(e){var t=e.isOpen,n=e.onOpen,a=e.onClose,o=e.onInput,i=e.searchButtonRef;r.useEffect((function(){function e(e){(27===e.keyCode&&t||"k"===e.key.toLowerCase()&&(e.metaKey||e.ctrlKey)||!function(e){var t=e.target,n=t.tagName;return t.isContentEditable||"INPUT"===n||"SELECT"===n||"TEXTAREA"===n}(e)&&"/"===e.key&&!t)&&(e.preventDefault(),t?a():document.body.classList.contains("DocSearch--active")||document.body.classList.contains("DocSearch--active")||n()),i&&i.current===document.activeElement&&o&&/[a-zA-Z0-9]/.test(String.fromCharCode(e.keyCode))&&o(e)}return window.addEventListener("keydown",e),function(){window.removeEventListener("keydown",e)}}),[t,n,a,o,i])}({isOpen:b,onOpen:S,onClose:E,onInput:x,searchButtonRef:g}),r.createElement(r.Fragment,null,r.createElement(Ae.Z,null,r.createElement("link",{rel:"preconnect",href:`https://${o.appId}-dsn.algolia.net`,crossOrigin:"anonymous"})),r.createElement(_e,{onTouchStart:k,onFocus:k,onMouseOver:k,onClick:S,ref:g,translations:Oe.button}),b&&Ie&&h.current&&(0,Ne.createPortal)(r.createElement(Ie,(0,l.Z)({onClose:E,initialScrollY:window.scrollY,initialQuery:y,navigator:T,transformItems:C,hitComponent:De,transformSearchClient:A},o.searchPagePath&&{resultsFooterComponent:_},o,{searchParameters:p,placeholder:Oe.placeholder,translations:Oe.modal})),h.current))}function Be(){const{siteConfig:e}=(0,de.Z)();return r.createElement(ze,e.themeConfig.algolia)}const Fe="searchBox_ZlJk";function je(e){let{children:t,className:n}=e;return r.createElement("div",{className:(0,a.Z)(n,Fe)},t)}var Ue=n(143),$e=n(3438);var qe=n(373);const He=e=>e.docs.find((t=>t.id===e.mainDocId));const Ge={default:se,localeDropdown:function(e){let{mobile:t,dropdownItemsBefore:n,dropdownItemsAfter:a,...o}=e;const{i18n:{currentLocale:i,locales:c,localeConfigs:d}}=(0,de.Z)(),f=(0,ge.l)(),{search:p,hash:m}=(0,s.TH)(),h=[...n,...c.map((e=>{const n=`${`pathname://${f.createUrl({locale:e,fullyQualified:!1})}`}${p}${m}`;return{label:d[e].label,lang:d[e].htmlLang,to:n,target:"_self",autoAddBaseUrl:!1,className:e===i?t?"menu__link--active":"dropdown__link--active":""}})),...a],g=t?(0,u.I)({message:"Languages",id:"theme.navbar.mobileLanguageDropdown.label",description:"The label for the mobile language switcher dropdown"}):d[i].label;return r.createElement(he,(0,l.Z)({},o,{mobile:t,label:r.createElement(r.Fragment,null,r.createElement(be,{className:ve}),g),items:h}))},search:function(e){let{mobile:t,className:n}=e;return t?null:r.createElement(je,{className:n},r.createElement(Be,null))},dropdown:he,html:function(e){let{value:t,className:n,mobile:o=!1,isDropdownItem:i=!1}=e;const l=i?"li":"div";return r.createElement(l,{className:(0,a.Z)({navbar__item:!o&&!i,"menu__list-item":o},n),dangerouslySetInnerHTML:{__html:t}})},doc:function(e){let{docId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ue.Iw)(a),s=(0,$e.vY)(t,a);return null===s?null:r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.path===s.path||!!i?.sidebar&&i.sidebar===s.sidebar,label:n??s.id,to:s.path}))},docSidebar:function(e){let{sidebarId:t,label:n,docsPluginId:a,...o}=e;const{activeDoc:i}=(0,Ue.Iw)(a),s=(0,$e.oz)(t,a).link;if(!s)throw new Error(`DocSidebarNavbarItem: Sidebar with ID "${t}" doesn't have anything to be linked to.`);return r.createElement(se,(0,l.Z)({exact:!0},o,{isActive:()=>i?.sidebar===t,label:n??s.label,to:s.path}))},docsVersion:function(e){let{label:t,to:n,docsPluginId:a,...o}=e;const i=(0,$e.lO)(a)[0],s=t??i.label,u=n??(e=>e.docs.find((t=>t.id===e.mainDocId)))(i).path;return r.createElement(se,(0,l.Z)({},o,{label:s,to:u}))},docsVersionDropdown:function(e){let{mobile:t,docsPluginId:n,dropdownActiveClassDisabled:a,dropdownItemsBefore:o,dropdownItemsAfter:i,...c}=e;const{search:d,hash:f}=(0,s.TH)(),p=(0,Ue.Iw)(n),m=(0,Ue.gB)(n),{savePreferredVersionName:h}=(0,qe.J)(n),g=[...o,...m.map((e=>{const t=p.alternateDocVersions[e.name]??He(e);return{label:e.label,to:`${t.path}${d}${f}`,isActive:()=>e===p.activeVersion,onClick:()=>h(e.name)}})),...i],b=(0,$e.lO)(n)[0],v=t&&g.length>1?(0,u.I)({id:"theme.navbar.mobileVersionsDropdown.label",message:"Versions",description:"The label for the navbar versions dropdown on mobile view"}):b.label,y=t&&g.length>1?void 0:He(b).path;return g.length<=1?r.createElement(se,(0,l.Z)({},c,{mobile:t,label:v,to:y,isActive:a?()=>!1:void 0})):r.createElement(he,(0,l.Z)({},c,{mobile:t,label:v,to:y,items:g,isActive:a?()=>!1:void 0}))}};function Ze(e){let{type:t,...n}=e;const a=function(e,t){return e&&"default"!==e?e:"items"in t?"dropdown":"default"}(t,n),o=Ge[a];if(!o)throw new Error(`No NavbarItem component found for type "${t}".`);return r.createElement(o,n)}function Ve(){const e=(0,N.e)(),t=(0,w.L)().navbar.items;return r.createElement("ul",{className:"menu__list"},t.map(((t,n)=>r.createElement(Ze,(0,l.Z)({mobile:!0},t,{onClick:()=>e.toggle(),key:n})))))}function We(e){return r.createElement("button",(0,l.Z)({},e,{type:"button",className:"clean-btn navbar-sidebar__back"}),r.createElement(u.Z,{id:"theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel",description:"The label of the back button to return to main menu, inside the mobile navbar sidebar secondary menu (notably used to display the docs sidebar)"},"\u2190 Back to main menu"))}function Ke(){const e=0===(0,w.L)().navbar.items.length,t=F();return r.createElement(r.Fragment,null,!e&&r.createElement(We,{onClick:()=>t.hide()}),t.content)}function Ye(){const e=(0,N.e)();var t;return void 0===(t=e.shown)&&(t=!0),(0,r.useEffect)((()=>(document.body.style.overflow=t?"hidden":"visible",()=>{document.body.style.overflow="visible"})),[t]),e.shouldRender?r.createElement(j,{header:r.createElement(J,null),primaryMenu:r.createElement(Ve,null),secondaryMenu:r.createElement(Ke,null)}):null}const Qe="navbarHideable_m1mJ",Xe="navbarHidden_jGov";function Je(e){return r.createElement("div",(0,l.Z)({role:"presentation"},e,{className:(0,a.Z)("navbar-sidebar__backdrop",e.className)}))}function et(e){let{children:t}=e;const{navbar:{hideOnScroll:n,style:o}}=(0,w.L)(),i=(0,N.e)(),{navbarRef:l,isNavbarVisible:s}=function(e){const[t,n]=(0,r.useState)(e),a=(0,r.useRef)(!1),o=(0,r.useRef)(0),i=(0,r.useCallback)((e=>{null!==e&&(o.current=e.getBoundingClientRect().height)}),[]);return(0,O.RF)(((t,r)=>{let{scrollY:i}=t;if(!e)return;if(i<o.current)return void n(!0);if(a.current)return void(a.current=!1);const l=r?.scrollY,s=document.documentElement.scrollHeight-o.current,u=window.innerHeight;l&&i>=l?n(!1):i+u<s&&n(!0)})),(0,c.S)((t=>{if(!e)return;const r=t.location.hash;if(r?document.getElementById(r.substring(1)):void 0)return a.current=!0,void n(!1);n(!0)})),{navbarRef:i,isNavbarVisible:t}}(n);return r.createElement("nav",{ref:l,"aria-label":(0,u.I)({id:"theme.NavBar.navAriaLabel",message:"Main",description:"The ARIA label for the main navigation"}),className:(0,a.Z)("navbar","navbar--fixed-top",n&&[Qe,!s&&Xe],{"navbar--dark":"dark"===o,"navbar--primary":"primary"===o,"navbar-sidebar--show":i.shown})},t,r.createElement(Je,{onClick:i.toggle}),r.createElement(Ye,null))}var tt=n(8780);const nt="errorBoundaryError_a6uf";function rt(e){return r.createElement("button",(0,l.Z)({type:"button"},e),r.createElement(u.Z,{id:"theme.ErrorPageContent.tryAgain",description:"The label of the button to try again rendering when the React error boundary captures an error"},"Try again"))}function at(e){let{error:t}=e;const n=(0,tt.getErrorCausalChain)(t).map((e=>e.message)).join("\n\nCause:\n");return r.createElement("p",{className:nt},n)}class ot extends r.Component{componentDidCatch(e,t){throw this.props.onError(e,t)}render(){return this.props.children}}function it(e){let{width:t=30,height:n=30,className:a,...o}=e;return r.createElement("svg",(0,l.Z)({className:a,width:t,height:n,viewBox:"0 0 30 30","aria-hidden":"true"},o),r.createElement("path",{stroke:"currentColor",strokeLinecap:"round",strokeMiterlimit:"10",strokeWidth:"2",d:"M4 7h22M4 15h22M4 23h22"}))}function lt(){const{toggle:e,shown:t}=(0,N.e)();return r.createElement("button",{onClick:e,"aria-label":(0,u.I)({id:"theme.docs.sidebar.toggleSidebarButtonAriaLabel",message:"Toggle navigation bar",description:"The ARIA label for hamburger menu button of mobile navigation"}),"aria-expanded":t,className:"navbar__toggle clean-btn",type:"button"},r.createElement(it,null))}const st="colorModeToggle_DEke";function ut(e){let{items:t}=e;return r.createElement(r.Fragment,null,t.map(((e,t)=>r.createElement(ot,{key:t,onError:t=>new Error(`A theme navbar item failed to render.\nPlease double-check the following navbar item (themeConfig.navbar.items) of your Docusaurus config:\n${JSON.stringify(e,null,2)}`,{cause:t})},r.createElement(Ze,e)))))}function ct(e){let{left:t,right:n}=e;return r.createElement("div",{className:"navbar__inner"},r.createElement("div",{className:"navbar__items"},t),r.createElement("div",{className:"navbar__items navbar__items--right"},n))}function dt(){const e=(0,N.e)(),t=(0,w.L)().navbar.items,[n,a]=function(e){function t(e){return"left"===(e.position??"right")}return[e.filter(t),e.filter((e=>!t(e)))]}(t),o=t.find((e=>"search"===e.type));return r.createElement(ct,{left:r.createElement(r.Fragment,null,!e.disabled&&r.createElement(lt,null),r.createElement(Q,null),r.createElement(ut,{items:n})),right:r.createElement(r.Fragment,null,r.createElement(ut,{items:a}),r.createElement(K,{className:st}),!o&&r.createElement(je,null,r.createElement(Be,null)))})}function ft(){return r.createElement(et,null,r.createElement(dt,null))}function pt(e){let{item:t}=e;const{to:n,href:a,label:o,prependBaseUrlToHref:i,...s}=t,u=(0,te.Z)(n),c=(0,te.Z)(a,{forcePrependBaseUrl:!0});return r.createElement(ee.Z,(0,l.Z)({className:"footer__link-item"},a?{href:i?c:a}:{to:u},s),o,a&&!(0,ne.Z)(a)&&r.createElement(ae.Z,null))}function mt(e){let{item:t}=e;return t.html?r.createElement("li",{className:"footer__item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement("li",{key:t.href??t.to,className:"footer__item"},r.createElement(pt,{item:t}))}function ht(e){let{column:t}=e;return r.createElement("div",{className:"col footer__col"},r.createElement("div",{className:"footer__title"},t.title),r.createElement("ul",{className:"footer__items clean-list"},t.items.map(((e,t)=>r.createElement(mt,{key:t,item:e})))))}function gt(e){let{columns:t}=e;return r.createElement("div",{className:"row footer__links"},t.map(((e,t)=>r.createElement(ht,{key:t,column:e}))))}function bt(){return r.createElement("span",{className:"footer__link-separator"},"\xb7")}function vt(e){let{item:t}=e;return t.html?r.createElement("span",{className:"footer__link-item",dangerouslySetInnerHTML:{__html:t.html}}):r.createElement(pt,{item:t})}function yt(e){let{links:t}=e;return r.createElement("div",{className:"footer__links text--center"},r.createElement("div",{className:"footer__links"},t.map(((e,n)=>r.createElement(r.Fragment,{key:n},r.createElement(vt,{item:e}),t.length!==n+1&&r.createElement(bt,null))))))}function wt(e){let{links:t}=e;return function(e){return"title"in e[0]}(t)?r.createElement(gt,{columns:t}):r.createElement(yt,{links:t})}var kt=n(941);const St="footerLogoLink_BH7S";function Et(e){let{logo:t}=e;const{withBaseUrl:n}=(0,te.C)(),o={light:n(t.src),dark:n(t.srcDark??t.src)};return r.createElement(kt.Z,{className:(0,a.Z)("footer__logo",t.className),alt:t.alt,sources:o,width:t.width,height:t.height,style:t.style})}function xt(e){let{logo:t}=e;return t.href?r.createElement(ee.Z,{href:t.href,className:St,target:t.target},r.createElement(Et,{logo:t})):r.createElement(Et,{logo:t})}function Tt(e){let{copyright:t}=e;return r.createElement("div",{className:"footer__copyright",dangerouslySetInnerHTML:{__html:t}})}function Ct(e){let{style:t,links:n,logo:o,copyright:i}=e;return r.createElement("footer",{className:(0,a.Z)("footer",{"footer--dark":"dark"===t})},r.createElement("div",{className:"container container-fluid"},n,(o||i)&&r.createElement("div",{className:"footer__bottom text--center"},o&&r.createElement("div",{className:"margin-bottom--sm"},o),i)))}function _t(){const{footer:e}=(0,w.L)();if(!e)return null;const{copyright:t,links:n,logo:a,style:o}=e;return r.createElement(Ct,{style:o,links:n&&n.length>0&&r.createElement(wt,{links:n}),logo:a&&r.createElement(xt,{logo:a}),copyright:t&&r.createElement(Tt,{copyright:t})})}const At=r.memo(_t),Lt=(0,I.Qc)([U.S,k.pl,O.OC,qe.L5,i.VC,function(e){let{children:t}=e;return r.createElement(D.n2,null,r.createElement(N.M,null,r.createElement(z,null,t)))}]);function Rt(e){let{children:t}=e;return r.createElement(Lt,null,t)}function Pt(e){let{error:t,tryAgain:n}=e;return r.createElement("main",{className:"container margin-vert--xl"},r.createElement("div",{className:"row"},r.createElement("div",{className:"col col--6 col--offset-3"},r.createElement("h1",{className:"hero__title"},r.createElement(u.Z,{id:"theme.ErrorPageContent.title",description:"The title of the fallback page when the page crashed"},"This page crashed.")),r.createElement("div",{className:"margin-vert--lg"},r.createElement(rt,{onClick:n,className:"button button--primary shadow--lw"})),r.createElement("hr",null),r.createElement("div",{className:"margin-vert--md"},r.createElement(at,{error:t})))))}const Nt="mainWrapper_z2l0";function Ot(e){const{children:t,noFooter:n,wrapperClassName:l,title:s,description:u}=e;return(0,b.t)(),r.createElement(Rt,null,r.createElement(i.d,{title:s,description:u}),r.createElement(y,null),r.createElement(P,null),r.createElement(ft,null),r.createElement("div",{id:d,className:(0,a.Z)(g.k.wrapper.main,Nt,l)},r.createElement(o.Z,{fallback:e=>r.createElement(Pt,e)},t)),!n&&r.createElement(At,null))}},1327:(e,t,n)=>{"use strict";n.d(t,{Z:()=>d});var r=n(3117),a=n(7294),o=n(9960),i=n(4996),l=n(2263),s=n(6668),u=n(941);function c(e){let{logo:t,alt:n,imageClassName:r}=e;const o={light:(0,i.Z)(t.src),dark:(0,i.Z)(t.srcDark||t.src)},l=a.createElement(u.Z,{className:t.className,sources:o,height:t.height,width:t.width,alt:n,style:t.style});return r?a.createElement("div",{className:r},l):l}function d(e){const{siteConfig:{title:t}}=(0,l.Z)(),{navbar:{title:n,logo:u}}=(0,s.L)(),{imageClassName:d,titleClassName:f,...p}=e,m=(0,i.Z)(u?.href||"/"),h=n?"":t,g=u?.alt??h;return a.createElement(o.Z,(0,r.Z)({to:m},p,u?.target&&{target:u.target}),u&&a.createElement(c,{logo:u,alt:g,imageClassName:d}),null!=n&&a.createElement("b",{className:f},n))}},197:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=n(7294),a=n(5742);function o(e){let{locale:t,version:n,tag:o}=e;const i=t;return r.createElement(a.Z,null,t&&r.createElement("meta",{name:"docusaurus_locale",content:t}),n&&r.createElement("meta",{name:"docusaurus_version",content:n}),o&&r.createElement("meta",{name:"docusaurus_tag",content:o}),i&&r.createElement("meta",{name:"docsearch:language",content:i}),n&&r.createElement("meta",{name:"docsearch:version",content:n}),o&&r.createElement("meta",{name:"docsearch:docusaurus_tag",content:o}))}},941:(e,t,n)=>{"use strict";n.d(t,{Z:()=>u});var r=n(3117),a=n(7294),o=n(6010),i=n(2389),l=n(2949);const s={themedImage:"themedImage_ToTc","themedImage--light":"themedImage--light_HNdA","themedImage--dark":"themedImage--dark_i4oU"};function u(e){const t=(0,i.Z)(),{colorMode:n}=(0,l.I)(),{sources:u,className:c,alt:d,...f}=e,p=t?"dark"===n?["dark"]:["light"]:["light","dark"];return a.createElement(a.Fragment,null,p.map((e=>a.createElement("img",(0,r.Z)({key:e,src:u[e],alt:d,className:(0,o.Z)(s.themedImage,s[`themedImage--${e}`],c)},f)))))}},6043:(e,t,n)=>{"use strict";n.d(t,{u:()=>l,z:()=>h});var r=n(3117),a=n(7294),o=n(412),i=n(1442);function l(e){let{initialState:t}=e;const[n,r]=(0,a.useState)(t??!1),o=(0,a.useCallback)((()=>{r((e=>!e))}),[]);return{collapsed:n,setCollapsed:r,toggleCollapsed:o}}const s={display:"none",overflow:"hidden",height:"0px"},u={display:"block",overflow:"visible",height:"auto"};function c(e,t){const n=t?s:u;e.style.display=n.display,e.style.overflow=n.overflow,e.style.height=n.height}function d(e){let{collapsibleRef:t,collapsed:n,animation:r}=e;const o=(0,a.useRef)(!1);(0,a.useEffect)((()=>{const e=t.current;function a(){const t=e.scrollHeight,n=r?.duration??function(e){if((0,i.n)())return 1;const t=e/36;return Math.round(10*(4+15*t**.25+t/5))}(t);return{transition:`height ${n}ms ${r?.easing??"ease-in-out"}`,height:`${t}px`}}function l(){const t=a();e.style.transition=t.transition,e.style.height=t.height}if(!o.current)return c(e,n),void(o.current=!0);return e.style.willChange="height",function(){const t=requestAnimationFrame((()=>{n?(l(),requestAnimationFrame((()=>{e.style.height=s.height,e.style.overflow=s.overflow}))):(e.style.display="block",requestAnimationFrame((()=>{l()})))}));return()=>cancelAnimationFrame(t)}()}),[t,n,r])}function f(e){if(!o.Z.canUseDOM)return e?s:u}function p(e){let{as:t="div",collapsed:n,children:r,animation:o,onCollapseTransitionEnd:i,className:l,disableSSRStyle:s}=e;const u=(0,a.useRef)(null);return d({collapsibleRef:u,collapsed:n,animation:o}),a.createElement(t,{ref:u,style:s?void 0:f(n),onTransitionEnd:e=>{"height"===e.propertyName&&(c(u.current,n),i?.(n))},className:l},r)}function m(e){let{collapsed:t,...n}=e;const[o,i]=(0,a.useState)(!t),[l,s]=(0,a.useState)(t);return(0,a.useLayoutEffect)((()=>{t||i(!0)}),[t]),(0,a.useLayoutEffect)((()=>{o&&s(t)}),[o,t]),o?a.createElement(p,(0,r.Z)({},n,{collapsed:l})):null}function h(e){let{lazy:t,...n}=e;const r=t?m:p;return a.createElement(r,n)}},9689:(e,t,n)=>{"use strict";n.d(t,{nT:()=>m,pl:()=>p});var r=n(7294),a=n(2389),o=n(12),i=n(902),l=n(6668);const s=(0,o.WA)("docusaurus.announcement.dismiss"),u=(0,o.WA)("docusaurus.announcement.id"),c=()=>"true"===s.get(),d=e=>s.set(String(e)),f=r.createContext(null);function p(e){let{children:t}=e;const n=function(){const{announcementBar:e}=(0,l.L)(),t=(0,a.Z)(),[n,o]=(0,r.useState)((()=>!!t&&c()));(0,r.useEffect)((()=>{o(c())}),[]);const i=(0,r.useCallback)((()=>{d(!0),o(!0)}),[]);return(0,r.useEffect)((()=>{if(!e)return;const{id:t}=e;let n=u.get();"annoucement-bar"===n&&(n="announcement-bar");const r=t!==n;u.set(t),r&&d(!1),!r&&c()||o(!1)}),[e]),(0,r.useMemo)((()=>({isActive:!!e&&!n,close:i})),[e,n,i])}();return r.createElement(f.Provider,{value:n},t)}function m(){const e=(0,r.useContext)(f);if(!e)throw new i.i6("AnnouncementBarProvider");return e}},2949:(e,t,n)=>{"use strict";n.d(t,{I:()=>g,S:()=>h});var r=n(7294),a=n(412),o=n(902),i=n(12),l=n(6668);const s=r.createContext(void 0),u="theme",c=(0,i.WA)(u),d="light",f="dark",p=e=>e===f?f:d;function m(){const{colorMode:{defaultMode:e,disableSwitch:t,respectPrefersColorScheme:n}}=(0,l.L)(),[o,i]=(0,r.useState)((e=>a.Z.canUseDOM?p(document.documentElement.getAttribute("data-theme")):p(e))(e));(0,r.useEffect)((()=>{t&&c.del()}),[t]);const s=(0,r.useCallback)((function(t,r){void 0===r&&(r={});const{persist:a=!0}=r;t?(i(t),a&&(e=>{c.set(p(e))})(t)):(i(n?window.matchMedia("(prefers-color-scheme: dark)").matches?f:d:e),c.del())}),[n,e]);(0,r.useEffect)((()=>{document.documentElement.setAttribute("data-theme",p(o))}),[o]),(0,r.useEffect)((()=>{if(t)return;const e=e=>{if(e.key!==u)return;const t=c.get();null!==t&&s(p(t))};return window.addEventListener("storage",e),()=>window.removeEventListener("storage",e)}),[t,s]);const m=(0,r.useRef)(!1);return(0,r.useEffect)((()=>{if(t&&!n)return;const e=window.matchMedia("(prefers-color-scheme: dark)"),r=()=>{window.matchMedia("print").matches||m.current?m.current=window.matchMedia("print").matches:s(null)};return e.addListener(r),()=>e.removeListener(r)}),[s,t,n]),(0,r.useMemo)((()=>({colorMode:o,setColorMode:s,get isDarkTheme(){return o===f},setLightTheme(){s(d)},setDarkTheme(){s(f)}})),[o,s])}function h(e){let{children:t}=e;const n=m();return r.createElement(s.Provider,{value:n},t)}function g(){const e=(0,r.useContext)(s);if(null==e)throw new o.i6("ColorModeProvider","Please see https://docusaurus.io/docs/api/themes/configuration#use-color-mode.");return e}},373:(e,t,n)=>{"use strict";n.d(t,{J:()=>y,L5:()=>b,Oh:()=>w});var r=n(7294),a=n(143),o=n(9935),i=n(6668),l=n(3438),s=n(902),u=n(12);const c=e=>`docs-preferred-version-${e}`,d=(e,t,n)=>{(0,u.WA)(c(e),{persistence:t}).set(n)},f=(e,t)=>(0,u.WA)(c(e),{persistence:t}).get(),p=(e,t)=>{(0,u.WA)(c(e),{persistence:t}).del()};const m=r.createContext(null);function h(){const e=(0,a._r)(),t=(0,i.L)().docs.versionPersistence,n=(0,r.useMemo)((()=>Object.keys(e)),[e]),[o,l]=(0,r.useState)((()=>(e=>Object.fromEntries(e.map((e=>[e,{preferredVersionName:null}]))))(n)));(0,r.useEffect)((()=>{l(function(e){let{pluginIds:t,versionPersistence:n,allDocsData:r}=e;function a(e){const t=f(e,n);return r[e].versions.some((e=>e.name===t))?{preferredVersionName:t}:(p(e,n),{preferredVersionName:null})}return Object.fromEntries(t.map((e=>[e,a(e)])))}({allDocsData:e,versionPersistence:t,pluginIds:n}))}),[e,t,n]);return[o,(0,r.useMemo)((()=>({savePreferredVersion:function(e,n){d(e,t,n),l((t=>({...t,[e]:{preferredVersionName:n}})))}})),[t])]}function g(e){let{children:t}=e;const n=h();return r.createElement(m.Provider,{value:n},t)}function b(e){let{children:t}=e;return l.cE?r.createElement(g,null,t):r.createElement(r.Fragment,null,t)}function v(){const e=(0,r.useContext)(m);if(!e)throw new s.i6("DocsPreferredVersionContextProvider");return e}function y(e){void 0===e&&(e=o.m);const t=(0,a.zh)(e),[n,i]=v(),{preferredVersionName:l}=n[e];return{preferredVersion:t.versions.find((e=>e.name===l))??null,savePreferredVersionName:(0,r.useCallback)((t=>{i.savePreferredVersion(e,t)}),[i,e])}}function w(){const e=(0,a._r)(),[t]=v();function n(n){const r=e[n],{preferredVersionName:a}=t[n];return r.versions.find((e=>e.name===a))??null}const r=Object.keys(e);return Object.fromEntries(r.map((e=>[e,n(e)])))}},1116:(e,t,n)=>{"use strict";n.d(t,{V:()=>s,b:()=>l});var r=n(7294),a=n(902);const o=Symbol("EmptyContext"),i=r.createContext(o);function l(e){let{children:t,name:n,items:a}=e;const o=(0,r.useMemo)((()=>n&&a?{name:n,items:a}:null),[n,a]);return r.createElement(i.Provider,{value:o},t)}function s(){const e=(0,r.useContext)(i);if(e===o)throw new a.i6("DocsSidebarProvider");return e}},3163:(e,t,n)=>{"use strict";n.d(t,{M:()=>d,e:()=>f});var r=n(7294),a=n(3102),o=n(7524),i=n(1980),l=n(6668),s=n(902);const u=r.createContext(void 0);function c(){const e=function(){const e=(0,a.HY)(),{items:t}=(0,l.L)().navbar;return 0===t.length&&!e.component}(),t=(0,o.i)(),n=!e&&"mobile"===t,[s,u]=(0,r.useState)(!1);(0,i.Rb)((()=>{if(s)return u(!1),!1}));const c=(0,r.useCallback)((()=>{u((e=>!e))}),[]);return(0,r.useEffect)((()=>{"desktop"===t&&u(!1)}),[t]),(0,r.useMemo)((()=>({disabled:e,shouldRender:n,toggle:c,shown:s})),[e,n,c,s])}function d(e){let{children:t}=e;const n=c();return r.createElement(u.Provider,{value:n},t)}function f(){const e=r.useContext(u);if(void 0===e)throw new s.i6("NavbarMobileSidebarProvider");return e}},3102:(e,t,n)=>{"use strict";n.d(t,{HY:()=>l,Zo:()=>s,n2:()=>i});var r=n(7294),a=n(902);const o=r.createContext(null);function i(e){let{children:t}=e;const n=(0,r.useState)({component:null,props:null});return r.createElement(o.Provider,{value:n},t)}function l(){const e=(0,r.useContext)(o);if(!e)throw new a.i6("NavbarSecondaryMenuContentProvider");return e[0]}function s(e){let{component:t,props:n}=e;const i=(0,r.useContext)(o);if(!i)throw new a.i6("NavbarSecondaryMenuContentProvider");const[,l]=i,s=(0,a.Ql)(n);return(0,r.useEffect)((()=>{l({component:t,props:s})}),[l,t,s]),(0,r.useEffect)((()=>()=>l({component:null,props:null})),[l]),null}},9727:(e,t,n)=>{"use strict";n.d(t,{h:()=>a,t:()=>o});var r=n(7294);const a="navigation-with-keyboard";function o(){(0,r.useEffect)((()=>{function e(e){"keydown"===e.type&&"Tab"===e.key&&document.body.classList.add(a),"mousedown"===e.type&&document.body.classList.remove(a)}return document.addEventListener("keydown",e),document.addEventListener("mousedown",e),()=>{document.body.classList.remove(a),document.removeEventListener("keydown",e),document.removeEventListener("mousedown",e)}}),[])}},6177:(e,t,n)=>{"use strict";n.d(t,{K:()=>i,M:()=>l});var r=n(7294),a=n(2263),o=n(1980);function i(){return(0,o.Nc)("q")}function l(){const{siteConfig:{baseUrl:e,themeConfig:t}}=(0,a.Z)(),{algolia:{searchPagePath:n}}=t;return(0,r.useCallback)((t=>`${e}${n}?q=${encodeURIComponent(t)}`),[e,n])}},7524:(e,t,n)=>{"use strict";n.d(t,{i:()=>u});var r=n(7294),a=n(412);const o="desktop",i="mobile",l="ssr";function s(){return a.Z.canUseDOM?window.innerWidth>996?o:i:l}function u(){const[e,t]=(0,r.useState)((()=>s()));return(0,r.useEffect)((()=>{function e(){t(s())}return window.addEventListener("resize",e),()=>{window.removeEventListener("resize",e),clearTimeout(undefined)}}),[]),e}},5281:(e,t,n)=>{"use strict";n.d(t,{k:()=>r});const r={page:{blogListPage:"blog-list-page",blogPostPage:"blog-post-page",blogTagsListPage:"blog-tags-list-page",blogTagPostListPage:"blog-tags-post-list-page",docsDocPage:"docs-doc-page",docsTagsListPage:"docs-tags-list-page",docsTagDocListPage:"docs-tags-doc-list-page",mdxPage:"mdx-page"},wrapper:{main:"main-wrapper",blogPages:"blog-wrapper",docsPages:"docs-wrapper",mdxPages:"mdx-wrapper"},common:{editThisPage:"theme-edit-this-page",lastUpdated:"theme-last-updated",backToTopButton:"theme-back-to-top-button",codeBlock:"theme-code-block",admonition:"theme-admonition",admonitionType:e=>`theme-admonition-${e}`},layout:{},docs:{docVersionBanner:"theme-doc-version-banner",docVersionBadge:"theme-doc-version-badge",docBreadcrumbs:"theme-doc-breadcrumbs",docMarkdown:"theme-doc-markdown",docTocMobile:"theme-doc-toc-mobile",docTocDesktop:"theme-doc-toc-desktop",docFooter:"theme-doc-footer",docFooterTagsRow:"theme-doc-footer-tags-row",docFooterEditMetaRow:"theme-doc-footer-edit-meta-row",docSidebarContainer:"theme-doc-sidebar-container",docSidebarMenu:"theme-doc-sidebar-menu",docSidebarItemCategory:"theme-doc-sidebar-item-category",docSidebarItemLink:"theme-doc-sidebar-item-link",docSidebarItemCategoryLevel:e=>`theme-doc-sidebar-item-category-level-${e}`,docSidebarItemLinkLevel:e=>`theme-doc-sidebar-item-link-level-${e}`},blog:{}}},1442:(e,t,n)=>{"use strict";function r(){return window.matchMedia("(prefers-reduced-motion: reduce)").matches}n.d(t,{n:()=>r})},3438:(e,t,n)=>{"use strict";n.d(t,{Wl:()=>f,_F:()=>m,cE:()=>d,hI:()=>w,lO:()=>b,oz:()=>v,s1:()=>g,vY:()=>y});var r=n(7294),a=n(6775),o=n(8790),i=n(143),l=n(373),s=n(1116),u=n(7392),c=n(8596);const d=!!i._r;function f(e){if(e.href)return e.href;for(const t of e.items){if("link"===t.type)return t.href;if("category"===t.type){const e=f(t);if(e)return e}}}const p=(e,t)=>void 0!==e&&(0,c.Mg)(e,t);function m(e,t){return"link"===e.type?p(e.href,t):"category"===e.type&&(p(e.href,t)||((e,t)=>e.some((e=>m(e,t))))(e.items,t))}function h(e){let{sidebarItems:t,pathname:n,onlyCategories:r=!1}=e;const a=[];return function e(t){for(const o of t)if("category"===o.type&&((0,c.Mg)(o.href,n)||e(o.items))||"link"===o.type&&(0,c.Mg)(o.href,n)){return r&&"category"!==o.type||a.unshift(o),!0}return!1}(t),a}function g(){const e=(0,s.V)(),{pathname:t}=(0,a.TH)(),n=(0,i.gA)()?.pluginData.breadcrumbs;return!1!==n&&e?h({sidebarItems:e.items,pathname:t}):null}function b(e){const{activeVersion:t}=(0,i.Iw)(e),{preferredVersion:n}=(0,l.J)(e),a=(0,i.yW)(e);return(0,r.useMemo)((()=>(0,u.j)([t,n,a].filter(Boolean))),[t,n,a])}function v(e,t){const n=b(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.sidebars?Object.entries(e.sidebars):[])),r=t.find((t=>t[0]===e));if(!r)throw new Error(`Can't find any sidebar with id "${e}" in version${n.length>1?"s":""} ${n.map((e=>e.name)).join(", ")}".\nAvailable sidebar ids are:\n- ${t.map((e=>e[0])).join("\n- ")}`);return r[1]}),[e,n])}function y(e,t){const n=b(t);return(0,r.useMemo)((()=>{const t=n.flatMap((e=>e.docs)),r=t.find((t=>t.id===e));if(!r){if(n.flatMap((e=>e.draftIds)).includes(e))return null;throw new Error(`Couldn't find any doc with id "${e}" in version${n.length>1?"s":""} "${n.map((e=>e.name)).join(", ")}".\nAvailable doc ids are:\n- ${(0,u.j)(t.map((e=>e.id))).join("\n- ")}`)}return r}),[e,n])}function w(e){let{route:t,versionMetadata:n}=e;const r=(0,a.TH)(),i=t.routes,l=i.find((e=>(0,a.LX)(r.pathname,e)));if(!l)return null;const s=l.sidebar,u=s?n.docsSidebars[s]:void 0;return{docElement:(0,o.H)(i),sidebarName:s,sidebarItems:u}}},2128:(e,t,n)=>{"use strict";n.d(t,{p:()=>a});var r=n(2263);function a(e){const{siteConfig:t}=(0,r.Z)(),{title:n,titleDelimiter:a}=t;return e?.trim().length?`${e.trim()} ${a} ${n}`:n}},1980:(e,t,n)=>{"use strict";n.d(t,{Nc:()=>u,Rb:()=>l,_X:()=>s});var r=n(7294),a=n(6775),o=n(1688),i=n(902);function l(e){!function(e){const t=(0,a.k6)(),n=(0,i.zX)(e);(0,r.useEffect)((()=>t.block(((e,t)=>n(e,t)))),[t,n])}(((t,n)=>{if("POP"===n)return e(t,n)}))}function s(e){return function(e){const t=(0,a.k6)();return(0,o.useSyncExternalStore)(t.listen,(()=>e(t)),(()=>e(t)))}((t=>null===e?null:new URLSearchParams(t.location.search).get(e)))}function u(e){const t=s(e)??"",n=function(){const e=(0,a.k6)();return(0,r.useCallback)(((t,n,r)=>{const a=new URLSearchParams(e.location.search);n?a.set(t,n):a.delete(t),(r?.push?e.push:e.replace)({search:a.toString()})}),[e])}();return[t,(0,r.useCallback)(((t,r)=>{n(e,t,r)}),[n,e])]}},7392:(e,t,n)=>{"use strict";function r(e,t){return void 0===t&&(t=(e,t)=>e===t),e.filter(((n,r)=>e.findIndex((e=>t(e,n)))!==r))}function a(e){return Array.from(new Set(e))}n.d(t,{j:()=>a,l:()=>r})},833:(e,t,n)=>{"use strict";n.d(t,{FG:()=>f,d:()=>c,VC:()=>p});var r=n(7294),a=n(6010),o=n(5742),i=n(226);function l(){const e=r.useContext(i._);if(!e)throw new Error("Unexpected: no Docusaurus route context found");return e}var s=n(4996),u=n(2128);function c(e){let{title:t,description:n,keywords:a,image:i,children:l}=e;const c=(0,u.p)(t),{withBaseUrl:d}=(0,s.C)(),f=i?d(i,{absolute:!0}):void 0;return r.createElement(o.Z,null,t&&r.createElement("title",null,c),t&&r.createElement("meta",{property:"og:title",content:c}),n&&r.createElement("meta",{name:"description",content:n}),n&&r.createElement("meta",{property:"og:description",content:n}),a&&r.createElement("meta",{name:"keywords",content:Array.isArray(a)?a.join(","):a}),f&&r.createElement("meta",{property:"og:image",content:f}),f&&r.createElement("meta",{name:"twitter:image",content:f}),l)}const d=r.createContext(void 0);function f(e){let{className:t,children:n}=e;const i=r.useContext(d),l=(0,a.Z)(i,t);return r.createElement(d.Provider,{value:l},r.createElement(o.Z,null,r.createElement("html",{className:l})),n)}function p(e){let{children:t}=e;const n=l(),o=`plugin-${n.plugin.name.replace(/docusaurus-(?:plugin|theme)-(?:content-)?/gi,"")}`;const i=`plugin-id-${n.plugin.id}`;return r.createElement(f,{className:(0,a.Z)(o,i)},t)}},902:(e,t,n)=>{"use strict";n.d(t,{D9:()=>i,Qc:()=>u,Ql:()=>s,i6:()=>l,zX:()=>o});var r=n(7294);const a=n(412).Z.canUseDOM?r.useLayoutEffect:r.useEffect;function o(e){const t=(0,r.useRef)(e);return a((()=>{t.current=e}),[e]),(0,r.useCallback)((function(){return t.current(...arguments)}),[])}function i(e){const t=(0,r.useRef)();return a((()=>{t.current=e})),t.current}class l extends Error{constructor(e,t){super(),this.name="ReactContextError",this.message=`Hook ${this.stack?.split("\n")[1]?.match(/at (?:\w+\.)?(?<name>\w+)/)?.groups.name??""} is called outside the <${e}>. ${t??""}`}}function s(e){const t=Object.entries(e);return t.sort(((e,t)=>e[0].localeCompare(t[0]))),(0,r.useMemo)((()=>e),t.flat())}function u(e){return t=>{let{children:n}=t;return r.createElement(r.Fragment,null,e.reduceRight(((e,t)=>r.createElement(t,null,e)),n))}}},8022:(e,t,n)=>{"use strict";function r(e,t){return void 0!==e&&void 0!==t&&new RegExp(e,"gi").test(t)}n.d(t,{F:()=>r})},8596:(e,t,n)=>{"use strict";n.d(t,{Mg:()=>i,Ns:()=>l});var r=n(7294),a=n(723),o=n(2263);function i(e,t){const n=e=>(!e||e.endsWith("/")?e:`${e}/`)?.toLowerCase();return n(e)===n(t)}function l(){const{baseUrl:e}=(0,o.Z)().siteConfig;return(0,r.useMemo)((()=>function(e){let{baseUrl:t,routes:n}=e;function r(e){return e.path===t&&!0===e.exact}function a(e){return e.path===t&&!e.exact}return function e(t){if(0===t.length)return;return t.find(r)||e(t.filter(a).flatMap((e=>e.routes??[])))}(n)}({routes:a.Z,baseUrl:e})),[e])}},2466:(e,t,n)=>{"use strict";n.d(t,{Ct:()=>p,OC:()=>s,RF:()=>d,o5:()=>f});var r=n(7294),a=n(412),o=n(2389),i=n(902);const l=r.createContext(void 0);function s(e){let{children:t}=e;const n=function(){const e=(0,r.useRef)(!0);return(0,r.useMemo)((()=>({scrollEventsEnabledRef:e,enableScrollEvents:()=>{e.current=!0},disableScrollEvents:()=>{e.current=!1}})),[])}();return r.createElement(l.Provider,{value:n},t)}function u(){const e=(0,r.useContext)(l);if(null==e)throw new i.i6("ScrollControllerProvider");return e}const c=()=>a.Z.canUseDOM?{scrollX:window.pageXOffset,scrollY:window.pageYOffset}:null;function d(e,t){void 0===t&&(t=[]);const{scrollEventsEnabledRef:n}=u(),a=(0,r.useRef)(c()),o=(0,i.zX)(e);(0,r.useEffect)((()=>{const e=()=>{if(!n.current)return;const e=c();o(e,a.current),a.current=e},t={passive:!0};return e(),window.addEventListener("scroll",e,t),()=>window.removeEventListener("scroll",e,t)}),[o,n,...t])}function f(){const e=u(),t=function(){const e=(0,r.useRef)({elem:null,top:0}),t=(0,r.useCallback)((t=>{e.current={elem:t,top:t.getBoundingClientRect().top}}),[]),n=(0,r.useCallback)((()=>{const{current:{elem:t,top:n}}=e;if(!t)return{restored:!1};const r=t.getBoundingClientRect().top-n;return r&&window.scrollBy({left:0,top:r}),e.current={elem:null,top:0},{restored:0!==r}}),[]);return(0,r.useMemo)((()=>({save:t,restore:n})),[n,t])}(),n=(0,r.useRef)(void 0),a=(0,r.useCallback)((r=>{t.save(r),e.disableScrollEvents(),n.current=()=>{const{restored:r}=t.restore();if(n.current=void 0,r){const t=()=>{e.enableScrollEvents(),window.removeEventListener("scroll",t)};window.addEventListener("scroll",t)}else e.enableScrollEvents()}}),[e,t]);return(0,r.useLayoutEffect)((()=>{queueMicrotask((()=>n.current?.()))})),{blockElementScrollPositionUntilNextRender:a}}function p(){const e=(0,r.useRef)(null),t=(0,o.Z)()&&"smooth"===getComputedStyle(document.documentElement).scrollBehavior;return{startScroll:n=>{e.current=t?function(e){return window.scrollTo({top:e,behavior:"smooth"}),()=>{}}(n):function(e){let t=null;const n=document.documentElement.scrollTop>e;return function r(){const a=document.documentElement.scrollTop;(n&&a>e||!n&&a<e)&&(t=requestAnimationFrame(r),window.scrollTo(0,Math.floor(.85*(a-e))+e))}(),()=>t&&cancelAnimationFrame(t)}(n)},cancelScroll:()=>e.current?.()}}},3320:(e,t,n)=>{"use strict";n.d(t,{HX:()=>i,_q:()=>s,os:()=>l});var r=n(143),a=n(2263),o=n(373);const i="default";function l(e,t){return`docs-${e}-${t}`}function s(){const{i18n:e}=(0,a.Z)(),t=(0,r._r)(),n=(0,r.WS)(),s=(0,o.Oh)();const u=[i,...Object.keys(t).map((function(e){const r=n?.activePlugin.pluginId===e?n.activeVersion:void 0,a=s[e],o=t[e].versions.find((e=>e.isLast));return l(e,(r??a??o).name)}))];return{locale:e.currentLocale,tags:u}}},12:(e,t,n)=>{"use strict";n.d(t,{Nk:()=>d,WA:()=>c});var r=n(7294),a=n(1688);const o="localStorage";function i(e){let{key:t,oldValue:n,newValue:r,storage:a}=e;if(n===r)return;const o=document.createEvent("StorageEvent");o.initStorageEvent("storage",!1,!1,t,n,r,window.location.href,a),window.dispatchEvent(o)}function l(e){if(void 0===e&&(e=o),"undefined"==typeof window)throw new Error("Browser storage is not available on Node.js/Docusaurus SSR process.");if("none"===e)return null;try{return window[e]}catch(n){return t=n,s||(console.warn("Docusaurus browser storage is not available.\nPossible reasons: running Docusaurus in an iframe, in an incognito browser session, or using too strict browser privacy settings.",t),s=!0),null}var t}let s=!1;const u={get:()=>null,set:()=>{},del:()=>{},listen:()=>()=>{}};function c(e,t){if("undefined"==typeof window)return function(e){function t(){throw new Error(`Illegal storage API usage for storage key "${e}".\nDocusaurus storage APIs are not supposed to be called on the server-rendering process.\nPlease only call storage APIs in effects and event handlers.`)}return{get:t,set:t,del:t,listen:t}}(e);const n=l(t?.persistence);return null===n?u:{get:()=>{try{return n.getItem(e)}catch(t){return console.error(`Docusaurus storage error, can't get key=${e}`,t),null}},set:t=>{try{const r=n.getItem(e);n.setItem(e,t),i({key:e,oldValue:r,newValue:t,storage:n})}catch(r){console.error(`Docusaurus storage error, can't set ${e}=${t}`,r)}},del:()=>{try{const t=n.getItem(e);n.removeItem(e),i({key:e,oldValue:t,newValue:null,storage:n})}catch(t){console.error(`Docusaurus storage error, can't delete key=${e}`,t)}},listen:t=>{try{const r=r=>{r.storageArea===n&&r.key===e&&t(r)};return window.addEventListener("storage",r),()=>window.removeEventListener("storage",r)}catch(r){return console.error(`Docusaurus storage error, can't listen for changes of key=${e}`,r),()=>{}}}}}function d(e,t){const n=(0,r.useRef)((()=>null===e?u:c(e,t))).current(),o=(0,r.useCallback)((e=>"undefined"==typeof window?()=>{}:n.listen(e)),[n]);return[(0,a.useSyncExternalStore)(o,(()=>"undefined"==typeof window?null:n.get()),(()=>null)),n]}},4711:(e,t,n)=>{"use strict";n.d(t,{l:()=>o});var r=n(2263),a=n(6775);function o(){const{siteConfig:{baseUrl:e,url:t},i18n:{defaultLocale:n,currentLocale:o}}=(0,r.Z)(),{pathname:i}=(0,a.TH)(),l=o===n?e:e.replace(`/${o}/`,"/"),s=i.replace(e,"");return{createUrl:function(e){let{locale:r,fullyQualified:a}=e;return`${a?t:""}${function(e){return e===n?`${l}`:`${l}${e}/`}(r)}${s}`}}}},5936:(e,t,n)=>{"use strict";n.d(t,{S:()=>i});var r=n(7294),a=n(6775),o=n(902);function i(e){const t=(0,a.TH)(),n=(0,o.D9)(t),i=(0,o.zX)(e);(0,r.useEffect)((()=>{n&&t!==n&&i({location:t,previousLocation:n})}),[i,t,n])}},6668:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){return(0,r.Z)().siteConfig.themeConfig}},6278:(e,t,n)=>{"use strict";n.d(t,{L:()=>a});var r=n(2263);function a(){const{siteConfig:{themeConfig:e}}=(0,r.Z)();return e}},239:(e,t,n)=>{"use strict";n.d(t,{l:()=>l});var r=n(7294),a=n(8022),o=n(4996),i=n(6278);function l(){const{withBaseUrl:e}=(0,o.C)(),{algolia:{externalUrlRegex:t,replaceSearchResultPathname:n}}=(0,i.L)();return(0,r.useCallback)((r=>{const o=new URL(r);if((0,a.F)(t,o.href))return r;const i=`${o.pathname+o.hash}`;return e(function(e,t){return t?e.replaceAll(new RegExp(t.from,"g"),t.to):e}(i,n))}),[e,t,n])}},8802:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){const{trailingSlash:n,baseUrl:r}=t;if(e.startsWith("#"))return e;if(void 0===n)return e;const[a]=e.split(/[#?]/),o="/"===a||a===r?a:(i=a,n?function(e){return e.endsWith("/")?e:`${e}/`}(i):function(e){return e.endsWith("/")?e.slice(0,-1):e}(i));var i;return e.replace(a,o)}},4143:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=void 0,t.getErrorCausalChain=function e(t){return t.cause?[t,...e(t.cause)]:[t]}},8780:function(e,t,n){"use strict";var r=this&&this.__importDefault||function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.getErrorCausalChain=t.applyTrailingSlash=t.blogPostContainerID=void 0,t.blogPostContainerID="__blog-post-container";var a=n(8802);Object.defineProperty(t,"applyTrailingSlash",{enumerable:!0,get:function(){return r(a).default}});var o=n(4143);Object.defineProperty(t,"getErrorCausalChain",{enumerable:!0,get:function(){return o.getErrorCausalChain}})},6010:(e,t,n)=>{"use strict";function r(e){var t,n,a="";if("string"==typeof e||"number"==typeof e)a+=e;else if("object"==typeof e)if(Array.isArray(e))for(t=0;t<e.length;t++)e[t]&&(n=r(e[t]))&&(a&&(a+=" "),a+=n);else for(t in e)e[t]&&(a&&(a+=" "),a+=t);return a}n.d(t,{Z:()=>a});const a=function(){for(var e,t,n=0,a="";n<arguments.length;)(e=arguments[n++])&&(t=r(e))&&(a&&(a+=" "),a+=t);return a}},9318:(e,t,n)=>{"use strict";n.d(t,{lX:()=>w,q_:()=>C,ob:()=>p,PP:()=>A,Ep:()=>f});var r=n(3117);function a(e){return"/"===e.charAt(0)}function o(e,t){for(var n=t,r=n+1,a=e.length;r<a;n+=1,r+=1)e[n]=e[r];e.pop()}const i=function(e,t){void 0===t&&(t="");var n,r=e&&e.split("/")||[],i=t&&t.split("/")||[],l=e&&a(e),s=t&&a(t),u=l||s;if(e&&a(e)?i=r:r.length&&(i.pop(),i=i.concat(r)),!i.length)return"/";if(i.length){var c=i[i.length-1];n="."===c||".."===c||""===c}else n=!1;for(var d=0,f=i.length;f>=0;f--){var p=i[f];"."===p?o(i,f):".."===p?(o(i,f),d++):d&&(o(i,f),d--)}if(!u)for(;d--;d)i.unshift("..");!u||""===i[0]||i[0]&&a(i[0])||i.unshift("");var m=i.join("/");return n&&"/"!==m.substr(-1)&&(m+="/"),m};var l=n(2177);function s(e){return"/"===e.charAt(0)?e:"/"+e}function u(e){return"/"===e.charAt(0)?e.substr(1):e}function c(e,t){return function(e,t){return 0===e.toLowerCase().indexOf(t.toLowerCase())&&-1!=="/?#".indexOf(e.charAt(t.length))}(e,t)?e.substr(t.length):e}function d(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function f(e){var t=e.pathname,n=e.search,r=e.hash,a=t||"/";return n&&"?"!==n&&(a+="?"===n.charAt(0)?n:"?"+n),r&&"#"!==r&&(a+="#"===r.charAt(0)?r:"#"+r),a}function p(e,t,n,a){var o;"string"==typeof e?(o=function(e){var t=e||"/",n="",r="",a=t.indexOf("#");-1!==a&&(r=t.substr(a),t=t.substr(0,a));var o=t.indexOf("?");return-1!==o&&(n=t.substr(o),t=t.substr(0,o)),{pathname:t,search:"?"===n?"":n,hash:"#"===r?"":r}}(e),o.state=t):(void 0===(o=(0,r.Z)({},e)).pathname&&(o.pathname=""),o.search?"?"!==o.search.charAt(0)&&(o.search="?"+o.search):o.search="",o.hash?"#"!==o.hash.charAt(0)&&(o.hash="#"+o.hash):o.hash="",void 0!==t&&void 0===o.state&&(o.state=t));try{o.pathname=decodeURI(o.pathname)}catch(l){throw l instanceof URIError?new URIError('Pathname "'+o.pathname+'" could not be decoded. This is likely caused by an invalid percent-encoding.'):l}return n&&(o.key=n),a?o.pathname?"/"!==o.pathname.charAt(0)&&(o.pathname=i(o.pathname,a.pathname)):o.pathname=a.pathname:o.pathname||(o.pathname="/"),o}function m(){var e=null;var t=[];return{setPrompt:function(t){return e=t,function(){e===t&&(e=null)}},confirmTransitionTo:function(t,n,r,a){if(null!=e){var o="function"==typeof e?e(t,n):e;"string"==typeof o?"function"==typeof r?r(o,a):a(!0):a(!1!==o)}else a(!0)},appendListener:function(e){var n=!0;function r(){n&&e.apply(void 0,arguments)}return t.push(r),function(){n=!1,t=t.filter((function(e){return e!==r}))}},notifyListeners:function(){for(var e=arguments.length,n=new Array(e),r=0;r<e;r++)n[r]=arguments[r];t.forEach((function(e){return e.apply(void 0,n)}))}}}var h=!("undefined"==typeof window||!window.document||!window.document.createElement);function g(e,t){t(window.confirm(e))}var b="popstate",v="hashchange";function y(){try{return window.history.state||{}}catch(e){return{}}}function w(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t,n=window.history,a=(-1===(t=window.navigator.userAgent).indexOf("Android 2.")&&-1===t.indexOf("Android 4.0")||-1===t.indexOf("Mobile Safari")||-1!==t.indexOf("Chrome")||-1!==t.indexOf("Windows Phone"))&&window.history&&"pushState"in window.history,o=!(-1===window.navigator.userAgent.indexOf("Trident")),i=e,u=i.forceRefresh,w=void 0!==u&&u,k=i.getUserConfirmation,S=void 0===k?g:k,E=i.keyLength,x=void 0===E?6:E,T=e.basename?d(s(e.basename)):"";function C(e){var t=e||{},n=t.key,r=t.state,a=window.location,o=a.pathname+a.search+a.hash;return T&&(o=c(o,T)),p(o,r,n)}function _(){return Math.random().toString(36).substr(2,x)}var A=m();function L(e){(0,r.Z)(U,e),U.length=n.length,A.notifyListeners(U.location,U.action)}function R(e){(function(e){return void 0===e.state&&-1===navigator.userAgent.indexOf("CriOS")})(e)||O(C(e.state))}function P(){O(C(y()))}var N=!1;function O(e){if(N)N=!1,L();else{A.confirmTransitionTo(e,"POP",S,(function(t){t?L({action:"POP",location:e}):function(e){var t=U.location,n=D.indexOf(t.key);-1===n&&(n=0);var r=D.indexOf(e.key);-1===r&&(r=0);var a=n-r;a&&(N=!0,z(a))}(e)}))}}var I=C(y()),D=[I.key];function M(e){return T+f(e)}function z(e){n.go(e)}var B=0;function F(e){1===(B+=e)&&1===e?(window.addEventListener(b,R),o&&window.addEventListener(v,P)):0===B&&(window.removeEventListener(b,R),o&&window.removeEventListener(v,P))}var j=!1;var U={length:n.length,action:"POP",location:I,createHref:M,push:function(e,t){var r="PUSH",o=p(e,t,_(),U.location);A.confirmTransitionTo(o,r,S,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.pushState({key:i,state:l},null,t),w)window.location.href=t;else{var s=D.indexOf(U.location.key),u=D.slice(0,s+1);u.push(o.key),D=u,L({action:r,location:o})}else window.location.href=t}}))},replace:function(e,t){var r="REPLACE",o=p(e,t,_(),U.location);A.confirmTransitionTo(o,r,S,(function(e){if(e){var t=M(o),i=o.key,l=o.state;if(a)if(n.replaceState({key:i,state:l},null,t),w)window.location.replace(t);else{var s=D.indexOf(U.location.key);-1!==s&&(D[s]=o.key),L({action:r,location:o})}else window.location.replace(t)}}))},go:z,goBack:function(){z(-1)},goForward:function(){z(1)},block:function(e){void 0===e&&(e=!1);var t=A.setPrompt(e);return j||(F(1),j=!0),function(){return j&&(j=!1,F(-1)),t()}},listen:function(e){var t=A.appendListener(e);return F(1),function(){F(-1),t()}}};return U}var k="hashchange",S={hashbang:{encodePath:function(e){return"!"===e.charAt(0)?e:"!/"+u(e)},decodePath:function(e){return"!"===e.charAt(0)?e.substr(1):e}},noslash:{encodePath:u,decodePath:s},slash:{encodePath:s,decodePath:s}};function E(e){var t=e.indexOf("#");return-1===t?e:e.slice(0,t)}function x(){var e=window.location.href,t=e.indexOf("#");return-1===t?"":e.substring(t+1)}function T(e){window.location.replace(E(window.location.href)+"#"+e)}function C(e){void 0===e&&(e={}),h||(0,l.Z)(!1);var t=window.history,n=(window.navigator.userAgent.indexOf("Firefox"),e),a=n.getUserConfirmation,o=void 0===a?g:a,i=n.hashType,u=void 0===i?"slash":i,b=e.basename?d(s(e.basename)):"",v=S[u],y=v.encodePath,w=v.decodePath;function C(){var e=w(x());return b&&(e=c(e,b)),p(e)}var _=m();function A(e){(0,r.Z)(j,e),j.length=t.length,_.notifyListeners(j.location,j.action)}var L=!1,R=null;function P(){var e,t,n=x(),r=y(n);if(n!==r)T(r);else{var a=C(),i=j.location;if(!L&&(t=a,(e=i).pathname===t.pathname&&e.search===t.search&&e.hash===t.hash))return;if(R===f(a))return;R=null,function(e){if(L)L=!1,A();else{var t="POP";_.confirmTransitionTo(e,t,o,(function(n){n?A({action:t,location:e}):function(e){var t=j.location,n=D.lastIndexOf(f(t));-1===n&&(n=0);var r=D.lastIndexOf(f(e));-1===r&&(r=0);var a=n-r;a&&(L=!0,M(a))}(e)}))}}(a)}}var N=x(),O=y(N);N!==O&&T(O);var I=C(),D=[f(I)];function M(e){t.go(e)}var z=0;function B(e){1===(z+=e)&&1===e?window.addEventListener(k,P):0===z&&window.removeEventListener(k,P)}var F=!1;var j={length:t.length,action:"POP",location:I,createHref:function(e){var t=document.querySelector("base"),n="";return t&&t.getAttribute("href")&&(n=E(window.location.href)),n+"#"+y(b+f(e))},push:function(e,t){var n="PUSH",r=p(e,void 0,void 0,j.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(b+t);if(x()!==a){R=t,function(e){window.location.hash=e}(a);var o=D.lastIndexOf(f(j.location)),i=D.slice(0,o+1);i.push(t),D=i,A({action:n,location:r})}else A()}}))},replace:function(e,t){var n="REPLACE",r=p(e,void 0,void 0,j.location);_.confirmTransitionTo(r,n,o,(function(e){if(e){var t=f(r),a=y(b+t);x()!==a&&(R=t,T(a));var o=D.indexOf(f(j.location));-1!==o&&(D[o]=t),A({action:n,location:r})}}))},go:M,goBack:function(){M(-1)},goForward:function(){M(1)},block:function(e){void 0===e&&(e=!1);var t=_.setPrompt(e);return F||(B(1),F=!0),function(){return F&&(F=!1,B(-1)),t()}},listen:function(e){var t=_.appendListener(e);return B(1),function(){B(-1),t()}}};return j}function _(e,t,n){return Math.min(Math.max(e,t),n)}function A(e){void 0===e&&(e={});var t=e,n=t.getUserConfirmation,a=t.initialEntries,o=void 0===a?["/"]:a,i=t.initialIndex,l=void 0===i?0:i,s=t.keyLength,u=void 0===s?6:s,c=m();function d(e){(0,r.Z)(w,e),w.length=w.entries.length,c.notifyListeners(w.location,w.action)}function h(){return Math.random().toString(36).substr(2,u)}var g=_(l,0,o.length-1),b=o.map((function(e){return p(e,void 0,"string"==typeof e?h():e.key||h())})),v=f;function y(e){var t=_(w.index+e,0,w.entries.length-1),r=w.entries[t];c.confirmTransitionTo(r,"POP",n,(function(e){e?d({action:"POP",location:r,index:t}):d()}))}var w={length:b.length,action:"POP",location:b[g],index:g,entries:b,createHref:v,push:function(e,t){var r="PUSH",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){if(e){var t=w.index+1,n=w.entries.slice(0);n.length>t?n.splice(t,n.length-t,a):n.push(a),d({action:r,location:a,index:t,entries:n})}}))},replace:function(e,t){var r="REPLACE",a=p(e,t,h(),w.location);c.confirmTransitionTo(a,r,n,(function(e){e&&(w.entries[w.index]=a,d({action:r,location:a}))}))},go:y,goBack:function(){y(-1)},goForward:function(){y(1)},canGo:function(e){var t=w.index+e;return t>=0&&t<w.entries.length},block:function(e){return void 0===e&&(e=!1),c.setPrompt(e)},listen:function(e){return c.appendListener(e)}};return w}},8679:(e,t,n)=>{"use strict";var r=n(9864),a={childContextTypes:!0,contextType:!0,contextTypes:!0,defaultProps:!0,displayName:!0,getDefaultProps:!0,getDerivedStateFromError:!0,getDerivedStateFromProps:!0,mixins:!0,propTypes:!0,type:!0},o={name:!0,length:!0,prototype:!0,caller:!0,callee:!0,arguments:!0,arity:!0},i={$$typeof:!0,compare:!0,defaultProps:!0,displayName:!0,propTypes:!0,type:!0},l={};function s(e){return r.isMemo(e)?i:l[e.$$typeof]||a}l[r.ForwardRef]={$$typeof:!0,render:!0,defaultProps:!0,displayName:!0,propTypes:!0},l[r.Memo]=i;var u=Object.defineProperty,c=Object.getOwnPropertyNames,d=Object.getOwnPropertySymbols,f=Object.getOwnPropertyDescriptor,p=Object.getPrototypeOf,m=Object.prototype;e.exports=function e(t,n,r){if("string"!=typeof n){if(m){var a=p(n);a&&a!==m&&e(t,a,r)}var i=c(n);d&&(i=i.concat(d(n)));for(var l=s(t),h=s(n),g=0;g<i.length;++g){var b=i[g];if(!(o[b]||r&&r[b]||h&&h[b]||l&&l[b])){var v=f(n,b);try{u(t,b,v)}catch(y){}}}}return t}},1143:e=>{"use strict";e.exports=function(e,t,n,r,a,o,i,l){if(!e){var s;if(void 0===t)s=new Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,a,o,i,l],c=0;(s=new Error(t.replace(/%s/g,(function(){return u[c++]})))).name="Invariant Violation"}throw s.framesToPop=1,s}}},5826:e=>{e.exports=Array.isArray||function(e){return"[object Array]"==Object.prototype.toString.call(e)}},2497:(e,t,n)=>{"use strict";n.r(t)},2295:(e,t,n)=>{"use strict";n.r(t)},4865:function(e,t,n){var r,a;r=function(){var e,t,n={version:"0.2.0"},r=n.settings={minimum:.08,easing:"ease",positionUsing:"",speed:200,trickle:!0,trickleRate:.02,trickleSpeed:800,showSpinner:!0,barSelector:'[role="bar"]',spinnerSelector:'[role="spinner"]',parent:"body",template:'<div class="bar" role="bar"><div class="peg"></div></div><div class="spinner" role="spinner"><div class="spinner-icon"></div></div>'};function a(e,t,n){return e<t?t:e>n?n:e}function o(e){return 100*(-1+e)}function i(e,t,n){var a;return(a="translate3d"===r.positionUsing?{transform:"translate3d("+o(e)+"%,0,0)"}:"translate"===r.positionUsing?{transform:"translate("+o(e)+"%,0)"}:{"margin-left":o(e)+"%"}).transition="all "+t+"ms "+n,a}n.configure=function(e){var t,n;for(t in e)void 0!==(n=e[t])&&e.hasOwnProperty(t)&&(r[t]=n);return this},n.status=null,n.set=function(e){var t=n.isStarted();e=a(e,r.minimum,1),n.status=1===e?null:e;var o=n.render(!t),u=o.querySelector(r.barSelector),c=r.speed,d=r.easing;return o.offsetWidth,l((function(t){""===r.positionUsing&&(r.positionUsing=n.getPositioningCSS()),s(u,i(e,c,d)),1===e?(s(o,{transition:"none",opacity:1}),o.offsetWidth,setTimeout((function(){s(o,{transition:"all "+c+"ms linear",opacity:0}),setTimeout((function(){n.remove(),t()}),c)}),c)):setTimeout(t,c)})),this},n.isStarted=function(){return"number"==typeof n.status},n.start=function(){n.status||n.set(0);var e=function(){setTimeout((function(){n.status&&(n.trickle(),e())}),r.trickleSpeed)};return r.trickle&&e(),this},n.done=function(e){return e||n.status?n.inc(.3+.5*Math.random()).set(1):this},n.inc=function(e){var t=n.status;return t?("number"!=typeof e&&(e=(1-t)*a(Math.random()*t,.1,.95)),t=a(t+e,0,.994),n.set(t)):n.start()},n.trickle=function(){return n.inc(Math.random()*r.trickleRate)},e=0,t=0,n.promise=function(r){return r&&"resolved"!==r.state()?(0===t&&n.start(),e++,t++,r.always((function(){0==--t?(e=0,n.done()):n.set((e-t)/e)})),this):this},n.render=function(e){if(n.isRendered())return document.getElementById("nprogress");c(document.documentElement,"nprogress-busy");var t=document.createElement("div");t.id="nprogress",t.innerHTML=r.template;var a,i=t.querySelector(r.barSelector),l=e?"-100":o(n.status||0),u=document.querySelector(r.parent);return s(i,{transition:"all 0 linear",transform:"translate3d("+l+"%,0,0)"}),r.showSpinner||(a=t.querySelector(r.spinnerSelector))&&p(a),u!=document.body&&c(u,"nprogress-custom-parent"),u.appendChild(t),t},n.remove=function(){d(document.documentElement,"nprogress-busy"),d(document.querySelector(r.parent),"nprogress-custom-parent");var e=document.getElementById("nprogress");e&&p(e)},n.isRendered=function(){return!!document.getElementById("nprogress")},n.getPositioningCSS=function(){var e=document.body.style,t="WebkitTransform"in e?"Webkit":"MozTransform"in e?"Moz":"msTransform"in e?"ms":"OTransform"in e?"O":"";return t+"Perspective"in e?"translate3d":t+"Transform"in e?"translate":"margin"};var l=function(){var e=[];function t(){var n=e.shift();n&&n(t)}return function(n){e.push(n),1==e.length&&t()}}(),s=function(){var e=["Webkit","O","Moz","ms"],t={};function n(e){return e.replace(/^-ms-/,"ms-").replace(/-([\da-z])/gi,(function(e,t){return t.toUpperCase()}))}function r(t){var n=document.body.style;if(t in n)return t;for(var r,a=e.length,o=t.charAt(0).toUpperCase()+t.slice(1);a--;)if((r=e[a]+o)in n)return r;return t}function a(e){return e=n(e),t[e]||(t[e]=r(e))}function o(e,t,n){t=a(t),e.style[t]=n}return function(e,t){var n,r,a=arguments;if(2==a.length)for(n in t)void 0!==(r=t[n])&&t.hasOwnProperty(n)&&o(e,n,r);else o(e,a[1],a[2])}}();function u(e,t){return("string"==typeof e?e:f(e)).indexOf(" "+t+" ")>=0}function c(e,t){var n=f(e),r=n+t;u(n,t)||(e.className=r.substring(1))}function d(e,t){var n,r=f(e);u(e,t)&&(n=r.replace(" "+t+" "," "),e.className=n.substring(1,n.length-1))}function f(e){return(" "+(e.className||"")+" ").replace(/\s+/gi," ")}function p(e){e&&e.parentNode&&e.parentNode.removeChild(e)}return n},void 0===(a="function"==typeof r?r.call(t,n,t,e):r)||(e.exports=a)},7418:e=>{"use strict";var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,r=Object.prototype.propertyIsEnumerable;function a(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map((function(e){return t[e]})).join(""))return!1;var r={};return"abcdefghijklmnopqrst".split("").forEach((function(e){r[e]=e})),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},r)).join("")}catch(a){return!1}}()?Object.assign:function(e,o){for(var i,l,s=a(e),u=1;u<arguments.length;u++){for(var c in i=Object(arguments[u]))n.call(i,c)&&(s[c]=i[c]);if(t){l=t(i);for(var d=0;d<l.length;d++)r.call(i,l[d])&&(s[l[d]]=i[l[d]])}}return s}},7410:(e,t,n)=>{"use strict";n.d(t,{Z:()=>o});var r=function(){var e=/(?:^|\s)lang(?:uage)?-([\w-]+)(?=\s|$)/i,t=0,n={},r={util:{encode:function e(t){return t instanceof a?new a(t.type,e(t.content),t.alias):Array.isArray(t)?t.map(e):t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/\u00a0/g," ")},type:function(e){return Object.prototype.toString.call(e).slice(8,-1)},objId:function(e){return e.__id||Object.defineProperty(e,"__id",{value:++t}),e.__id},clone:function e(t,n){var a,o;switch(n=n||{},r.util.type(t)){case"Object":if(o=r.util.objId(t),n[o])return n[o];for(var i in a={},n[o]=a,t)t.hasOwnProperty(i)&&(a[i]=e(t[i],n));return a;case"Array":return o=r.util.objId(t),n[o]?n[o]:(a=[],n[o]=a,t.forEach((function(t,r){a[r]=e(t,n)})),a);default:return t}},getLanguage:function(t){for(;t;){var n=e.exec(t.className);if(n)return n[1].toLowerCase();t=t.parentElement}return"none"},setLanguage:function(t,n){t.className=t.className.replace(RegExp(e,"gi"),""),t.classList.add("language-"+n)},isActive:function(e,t,n){for(var r="no-"+t;e;){var a=e.classList;if(a.contains(t))return!0;if(a.contains(r))return!1;e=e.parentElement}return!!n}},languages:{plain:n,plaintext:n,text:n,txt:n,extend:function(e,t){var n=r.util.clone(r.languages[e]);for(var a in t)n[a]=t[a];return n},insertBefore:function(e,t,n,a){var o=(a=a||r.languages)[e],i={};for(var l in o)if(o.hasOwnProperty(l)){if(l==t)for(var s in n)n.hasOwnProperty(s)&&(i[s]=n[s]);n.hasOwnProperty(l)||(i[l]=o[l])}var u=a[e];return a[e]=i,r.languages.DFS(r.languages,(function(t,n){n===u&&t!=e&&(this[t]=i)})),i},DFS:function e(t,n,a,o){o=o||{};var i=r.util.objId;for(var l in t)if(t.hasOwnProperty(l)){n.call(t,l,t[l],a||l);var s=t[l],u=r.util.type(s);"Object"!==u||o[i(s)]?"Array"!==u||o[i(s)]||(o[i(s)]=!0,e(s,n,l,o)):(o[i(s)]=!0,e(s,n,null,o))}}},plugins:{},highlight:function(e,t,n){var o={code:e,grammar:t,language:n};return r.hooks.run("before-tokenize",o),o.tokens=r.tokenize(o.code,o.grammar),r.hooks.run("after-tokenize",o),a.stringify(r.util.encode(o.tokens),o.language)},tokenize:function(e,t){var n=t.rest;if(n){for(var r in n)t[r]=n[r];delete t.rest}var a=new l;return s(a,a.head,e),i(e,a,t,a.head,0),function(e){var t=[],n=e.head.next;for(;n!==e.tail;)t.push(n.value),n=n.next;return t}(a)},hooks:{all:{},add:function(e,t){var n=r.hooks.all;n[e]=n[e]||[],n[e].push(t)},run:function(e,t){var n=r.hooks.all[e];if(n&&n.length)for(var a,o=0;a=n[o++];)a(t)}},Token:a};function a(e,t,n,r){this.type=e,this.content=t,this.alias=n,this.length=0|(r||"").length}function o(e,t,n,r){e.lastIndex=t;var a=e.exec(n);if(a&&r&&a[1]){var o=a[1].length;a.index+=o,a[0]=a[0].slice(o)}return a}function i(e,t,n,l,c,d){for(var f in n)if(n.hasOwnProperty(f)&&n[f]){var p=n[f];p=Array.isArray(p)?p:[p];for(var m=0;m<p.length;++m){if(d&&d.cause==f+","+m)return;var h=p[m],g=h.inside,b=!!h.lookbehind,v=!!h.greedy,y=h.alias;if(v&&!h.pattern.global){var w=h.pattern.toString().match(/[imsuy]*$/)[0];h.pattern=RegExp(h.pattern.source,w+"g")}for(var k=h.pattern||h,S=l.next,E=c;S!==t.tail&&!(d&&E>=d.reach);E+=S.value.length,S=S.next){var x=S.value;if(t.length>e.length)return;if(!(x instanceof a)){var T,C=1;if(v){if(!(T=o(k,E,e,b))||T.index>=e.length)break;var _=T.index,A=T.index+T[0].length,L=E;for(L+=S.value.length;_>=L;)L+=(S=S.next).value.length;if(E=L-=S.value.length,S.value instanceof a)continue;for(var R=S;R!==t.tail&&(L<A||"string"==typeof R.value);R=R.next)C++,L+=R.value.length;C--,x=e.slice(E,L),T.index-=E}else if(!(T=o(k,0,x,b)))continue;_=T.index;var P=T[0],N=x.slice(0,_),O=x.slice(_+P.length),I=E+x.length;d&&I>d.reach&&(d.reach=I);var D=S.prev;if(N&&(D=s(t,D,N),E+=N.length),u(t,D,C),S=s(t,D,new a(f,g?r.tokenize(P,g):P,y,P)),O&&s(t,S,O),C>1){var M={cause:f+","+m,reach:I};i(e,t,n,S.prev,E,M),d&&M.reach>d.reach&&(d.reach=M.reach)}}}}}}function l(){var e={value:null,prev:null,next:null},t={value:null,prev:e,next:null};e.next=t,this.head=e,this.tail=t,this.length=0}function s(e,t,n){var r=t.next,a={value:n,prev:t,next:r};return t.next=a,r.prev=a,e.length++,a}function u(e,t,n){for(var r=t.next,a=0;a<n&&r!==e.tail;a++)r=r.next;t.next=r,r.prev=t,e.length-=a}return a.stringify=function e(t,n){if("string"==typeof t)return t;if(Array.isArray(t)){var a="";return t.forEach((function(t){a+=e(t,n)})),a}var o={type:t.type,content:e(t.content,n),tag:"span",classes:["token",t.type],attributes:{},language:n},i=t.alias;i&&(Array.isArray(i)?Array.prototype.push.apply(o.classes,i):o.classes.push(i)),r.hooks.run("wrap",o);var l="";for(var s in o.attributes)l+=" "+s+'="'+(o.attributes[s]||"").replace(/"/g,"&quot;")+'"';return"<"+o.tag+' class="'+o.classes.join(" ")+'"'+l+">"+o.content+"</"+o.tag+">"},r}(),a=r;r.default=r,a.languages.markup={comment:{pattern:/<!--(?:(?!<!--)[\s\S])*?-->/,greedy:!0},prolog:{pattern:/<\?[\s\S]+?\?>/,greedy:!0},doctype:{pattern:/<!DOCTYPE(?:[^>"'[\]]|"[^"]*"|'[^']*')+(?:\[(?:[^<"'\]]|"[^"]*"|'[^']*'|<(?!!--)|<!--(?:[^-]|-(?!->))*-->)*\]\s*)?>/i,greedy:!0,inside:{"internal-subset":{pattern:/(^[^\[]*\[)[\s\S]+(?=\]>$)/,lookbehind:!0,greedy:!0,inside:null},string:{pattern:/"[^"]*"|'[^']*'/,greedy:!0},punctuation:/^<!|>$|[[\]]/,"doctype-tag":/^DOCTYPE/i,name:/[^\s<>'"]+/}},cdata:{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,greedy:!0},tag:{pattern:/<\/?(?!\d)[^\s>\/=$<%]+(?:\s(?:\s*[^\s>\/=]+(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))|(?=[\s/>])))+)?\s*\/?>/,greedy:!0,inside:{tag:{pattern:/^<\/?[^\s>\/]+/,inside:{punctuation:/^<\/?/,namespace:/^[^\s>\/:]+:/}},"special-attr":[],"attr-value":{pattern:/=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+)/,inside:{punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}},punctuation:/\/?>/,"attr-name":{pattern:/[^\s>\/]+/,inside:{namespace:/^[^\s>\/:]+:/}}}},entity:[{pattern:/&[\da-z]{1,8};/i,alias:"named-entity"},/&#x?[\da-f]{1,8};/i]},a.languages.markup.tag.inside["attr-value"].inside.entity=a.languages.markup.entity,a.languages.markup.doctype.inside["internal-subset"].inside=a.languages.markup,a.hooks.add("wrap",(function(e){"entity"===e.type&&(e.attributes.title=e.content.replace(/&amp;/,"&"))})),Object.defineProperty(a.languages.markup.tag,"addInlined",{value:function(e,t){var n={};n["language-"+t]={pattern:/(^<!\[CDATA\[)[\s\S]+?(?=\]\]>$)/i,lookbehind:!0,inside:a.languages[t]},n.cdata=/^<!\[CDATA\[|\]\]>$/i;var r={"included-cdata":{pattern:/<!\[CDATA\[[\s\S]*?\]\]>/i,inside:n}};r["language-"+t]={pattern:/[\s\S]+/,inside:a.languages[t]};var o={};o[e]={pattern:RegExp(/(<__[^>]*>)(?:<!\[CDATA\[(?:[^\]]|\](?!\]>))*\]\]>|(?!<!\[CDATA\[)[\s\S])*?(?=<\/__>)/.source.replace(/__/g,(function(){return e})),"i"),lookbehind:!0,greedy:!0,inside:r},a.languages.insertBefore("markup","cdata",o)}}),Object.defineProperty(a.languages.markup.tag,"addAttribute",{value:function(e,t){a.languages.markup.tag.inside["special-attr"].push({pattern:RegExp(/(^|["'\s])/.source+"(?:"+e+")"+/\s*=\s*(?:"[^"]*"|'[^']*'|[^\s'">=]+(?=[\s>]))/.source,"i"),lookbehind:!0,inside:{"attr-name":/^[^\s=]+/,"attr-value":{pattern:/=[\s\S]+/,inside:{value:{pattern:/(^=\s*(["']|(?!["'])))\S[\s\S]*(?=\2$)/,lookbehind:!0,alias:[t,"language-"+t],inside:a.languages[t]},punctuation:[{pattern:/^=/,alias:"attr-equals"},/"|'/]}}}})}}),a.languages.html=a.languages.markup,a.languages.mathml=a.languages.markup,a.languages.svg=a.languages.markup,a.languages.xml=a.languages.extend("markup",{}),a.languages.ssml=a.languages.xml,a.languages.atom=a.languages.xml,a.languages.rss=a.languages.xml,function(e){var t="\\b(?:BASH|BASHOPTS|BASH_ALIASES|BASH_ARGC|BASH_ARGV|BASH_CMDS|BASH_COMPLETION_COMPAT_DIR|BASH_LINENO|BASH_REMATCH|BASH_SOURCE|BASH_VERSINFO|BASH_VERSION|COLORTERM|COLUMNS|COMP_WORDBREAKS|DBUS_SESSION_BUS_ADDRESS|DEFAULTS_PATH|DESKTOP_SESSION|DIRSTACK|DISPLAY|EUID|GDMSESSION|GDM_LANG|GNOME_KEYRING_CONTROL|GNOME_KEYRING_PID|GPG_AGENT_INFO|GROUPS|HISTCONTROL|HISTFILE|HISTFILESIZE|HISTSIZE|HOME|HOSTNAME|HOSTTYPE|IFS|INSTANCE|JOB|LANG|LANGUAGE|LC_ADDRESS|LC_ALL|LC_IDENTIFICATION|LC_MEASUREMENT|LC_MONETARY|LC_NAME|LC_NUMERIC|LC_PAPER|LC_TELEPHONE|LC_TIME|LESSCLOSE|LESSOPEN|LINES|LOGNAME|LS_COLORS|MACHTYPE|MAILCHECK|MANDATORY_PATH|NO_AT_BRIDGE|OLDPWD|OPTERR|OPTIND|ORBIT_SOCKETDIR|OSTYPE|PAPERSIZE|PATH|PIPESTATUS|PPID|PS1|PS2|PS3|PS4|PWD|RANDOM|REPLY|SECONDS|SELINUX_INIT|SESSION|SESSIONTYPE|SESSION_MANAGER|SHELL|SHELLOPTS|SHLVL|SSH_AUTH_SOCK|TERM|UID|UPSTART_EVENTS|UPSTART_INSTANCE|UPSTART_JOB|UPSTART_SESSION|USER|WINDOWID|XAUTHORITY|XDG_CONFIG_DIRS|XDG_CURRENT_DESKTOP|XDG_DATA_DIRS|XDG_GREETER_DATA_DIR|XDG_MENU_PREFIX|XDG_RUNTIME_DIR|XDG_SEAT|XDG_SEAT_PATH|XDG_SESSION_DESKTOP|XDG_SESSION_ID|XDG_SESSION_PATH|XDG_SESSION_TYPE|XDG_VTNR|XMODIFIERS)\\b",n={pattern:/(^(["']?)\w+\2)[ \t]+\S.*/,lookbehind:!0,alias:"punctuation",inside:null},r={bash:n,environment:{pattern:RegExp("\\$"+t),alias:"constant"},variable:[{pattern:/\$?\(\([\s\S]+?\)\)/,greedy:!0,inside:{variable:[{pattern:/(^\$\(\([\s\S]+)\)\)/,lookbehind:!0},/^\$\(\(/],number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee]-?\d+)?/,operator:/--|\+\+|\*\*=?|<<=?|>>=?|&&|\|\||[=!+\-*/%<>^&|]=?|[?~:]/,punctuation:/\(\(?|\)\)?|,|;/}},{pattern:/\$\((?:\([^)]+\)|[^()])+\)|`[^`]+`/,greedy:!0,inside:{variable:/^\$\(|^`|\)$|`$/}},{pattern:/\$\{[^}]+\}/,greedy:!0,inside:{operator:/:[-=?+]?|[!\/]|##?|%%?|\^\^?|,,?/,punctuation:/[\[\]]/,environment:{pattern:RegExp("(\\{)"+t),lookbehind:!0,alias:"constant"}}},/\$(?:\w+|[#?*!@$])/],entity:/\\(?:[abceEfnrtv\\"]|O?[0-7]{1,3}|U[0-9a-fA-F]{8}|u[0-9a-fA-F]{4}|x[0-9a-fA-F]{1,2})/};e.languages.bash={shebang:{pattern:/^#!\s*\/.*/,alias:"important"},comment:{pattern:/(^|[^"{\\$])#.*/,lookbehind:!0},"function-name":[{pattern:/(\bfunction\s+)[\w-]+(?=(?:\s*\(?:\s*\))?\s*\{)/,lookbehind:!0,alias:"function"},{pattern:/\b[\w-]+(?=\s*\(\s*\)\s*\{)/,alias:"function"}],"for-or-select":{pattern:/(\b(?:for|select)\s+)\w+(?=\s+in\s)/,alias:"variable",lookbehind:!0},"assign-left":{pattern:/(^|[\s;|&]|[<>]\()\w+(?=\+?=)/,inside:{environment:{pattern:RegExp("(^|[\\s;|&]|[<>]\\()"+t),lookbehind:!0,alias:"constant"}},alias:"variable",lookbehind:!0},string:[{pattern:/((?:^|[^<])<<-?\s*)(\w+)\s[\s\S]*?(?:\r?\n|\r)\2/,lookbehind:!0,greedy:!0,inside:r},{pattern:/((?:^|[^<])<<-?\s*)(["'])(\w+)\2\s[\s\S]*?(?:\r?\n|\r)\3/,lookbehind:!0,greedy:!0,inside:{bash:n}},{pattern:/(^|[^\\](?:\\\\)*)"(?:\\[\s\S]|\$\([^)]+\)|\$(?!\()|`[^`]+`|[^"\\`$])*"/,lookbehind:!0,greedy:!0,inside:r},{pattern:/(^|[^$\\])'[^']*'/,lookbehind:!0,greedy:!0},{pattern:/\$'(?:[^'\\]|\\[\s\S])*'/,greedy:!0,inside:{entity:r.entity}}],environment:{pattern:RegExp("\\$?"+t),alias:"constant"},variable:r.variable,function:{pattern:/(^|[\s;|&]|[<>]\()(?:add|apropos|apt|apt-cache|apt-get|aptitude|aspell|automysqlbackup|awk|basename|bash|bc|bconsole|bg|bzip2|cal|cat|cfdisk|chgrp|chkconfig|chmod|chown|chroot|cksum|clear|cmp|column|comm|composer|cp|cron|crontab|csplit|curl|cut|date|dc|dd|ddrescue|debootstrap|df|diff|diff3|dig|dir|dircolors|dirname|dirs|dmesg|docker|docker-compose|du|egrep|eject|env|ethtool|expand|expect|expr|fdformat|fdisk|fg|fgrep|file|find|fmt|fold|format|free|fsck|ftp|fuser|gawk|git|gparted|grep|groupadd|groupdel|groupmod|groups|grub-mkconfig|gzip|halt|head|hg|history|host|hostname|htop|iconv|id|ifconfig|ifdown|ifup|import|install|ip|jobs|join|kill|killall|less|link|ln|locate|logname|logrotate|look|lpc|lpr|lprint|lprintd|lprintq|lprm|ls|lsof|lynx|make|man|mc|mdadm|mkconfig|mkdir|mke2fs|mkfifo|mkfs|mkisofs|mknod|mkswap|mmv|more|most|mount|mtools|mtr|mutt|mv|nano|nc|netstat|nice|nl|node|nohup|notify-send|npm|nslookup|op|open|parted|passwd|paste|pathchk|ping|pkill|pnpm|podman|podman-compose|popd|pr|printcap|printenv|ps|pushd|pv|quota|quotacheck|quotactl|ram|rar|rcp|reboot|remsync|rename|renice|rev|rm|rmdir|rpm|rsync|scp|screen|sdiff|sed|sendmail|seq|service|sftp|sh|shellcheck|shuf|shutdown|sleep|slocate|sort|split|ssh|stat|strace|su|sudo|sum|suspend|swapon|sync|tac|tail|tar|tee|time|timeout|top|touch|tr|traceroute|tsort|tty|umount|uname|unexpand|uniq|units|unrar|unshar|unzip|update-grub|uptime|useradd|userdel|usermod|users|uudecode|uuencode|v|vcpkg|vdir|vi|vim|virsh|vmstat|wait|watch|wc|wget|whereis|which|who|whoami|write|xargs|xdg-open|yarn|yes|zenity|zip|zsh|zypper)(?=$|[)\s;|&])/,lookbehind:!0},keyword:{pattern:/(^|[\s;|&]|[<>]\()(?:case|do|done|elif|else|esac|fi|for|function|if|in|select|then|until|while)(?=$|[)\s;|&])/,lookbehind:!0},builtin:{pattern:/(^|[\s;|&]|[<>]\()(?:\.|:|alias|bind|break|builtin|caller|cd|command|continue|declare|echo|enable|eval|exec|exit|export|getopts|hash|help|let|local|logout|mapfile|printf|pwd|read|readarray|readonly|return|set|shift|shopt|source|test|times|trap|type|typeset|ulimit|umask|unalias|unset)(?=$|[)\s;|&])/,lookbehind:!0,alias:"class-name"},boolean:{pattern:/(^|[\s;|&]|[<>]\()(?:false|true)(?=$|[)\s;|&])/,lookbehind:!0},"file-descriptor":{pattern:/\B&\d\b/,alias:"important"},operator:{pattern:/\d?<>|>\||\+=|=[=~]?|!=?|<<[<-]?|[&\d]?>>|\d[<>]&?|[<>][&=]?|&[>&]?|\|[&|]?/,inside:{"file-descriptor":{pattern:/^\d/,alias:"important"}}},punctuation:/\$?\(\(?|\)\)?|\.\.|[{}[\];\\]/,number:{pattern:/(^|\s)(?:[1-9]\d*|0)(?:[.,]\d+)?\b/,lookbehind:!0}},n.inside=e.languages.bash;for(var a=["comment","function-name","for-or-select","assign-left","string","environment","function","keyword","builtin","boolean","file-descriptor","operator","punctuation","number"],o=r.variable[1].inside,i=0;i<a.length;i++)o[a[i]]=e.languages.bash[a[i]];e.languages.shell=e.languages.bash}(a),a.languages.clike={comment:[{pattern:/(^|[^\\])\/\*[\s\S]*?(?:\*\/|$)/,lookbehind:!0,greedy:!0},{pattern:/(^|[^\\:])\/\/.*/,lookbehind:!0,greedy:!0}],string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|trait)\s+|\bcatch\s+\()[\w.\\]+/i,lookbehind:!0,inside:{punctuation:/[.\\]/}},keyword:/\b(?:break|catch|continue|do|else|finally|for|function|if|in|instanceof|new|null|return|throw|try|while)\b/,boolean:/\b(?:false|true)\b/,function:/\b\w+(?=\()/,number:/\b0x[\da-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?/i,operator:/[<>]=?|[!=]=?=?|--?|\+\+?|&&?|\|\|?|[?*/~^%]/,punctuation:/[{}[\];(),.:]/},a.languages.c=a.languages.extend("clike",{comment:{pattern:/\/\/(?:[^\r\n\\]|\\(?:\r\n?|\n|(?![\r\n])))*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},"class-name":{pattern:/(\b(?:enum|struct)\s+(?:__attribute__\s*\(\([\s\S]*?\)\)\s*)?)\w+|\b[a-z]\w*_t\b/,lookbehind:!0},keyword:/\b(?:_Alignas|_Alignof|_Atomic|_Bool|_Complex|_Generic|_Imaginary|_Noreturn|_Static_assert|_Thread_local|__attribute__|asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|inline|int|long|register|return|short|signed|sizeof|static|struct|switch|typedef|typeof|union|unsigned|void|volatile|while)\b/,function:/\b[a-z_]\w*(?=\s*\()/i,number:/(?:\b0x(?:[\da-f]+(?:\.[\da-f]*)?|\.[\da-f]+)(?:p[+-]?\d+)?|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:e[+-]?\d+)?)[ful]{0,4}/i,operator:/>>=?|<<=?|->|([-+&|:])\1|[?:~]|[-+*/%&|^!=<>]=?/}),a.languages.insertBefore("c","string",{char:{pattern:/'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n]){0,32}'/,greedy:!0}}),a.languages.insertBefore("c","string",{macro:{pattern:/(^[\t ]*)#\s*[a-z](?:[^\r\n\\/]|\/(?!\*)|\/\*(?:[^*]|\*(?!\/))*\*\/|\\(?:\r\n|[\s\S]))*/im,lookbehind:!0,greedy:!0,alias:"property",inside:{string:[{pattern:/^(#\s*include\s*)<[^>]+>/,lookbehind:!0},a.languages.c.string],char:a.languages.c.char,comment:a.languages.c.comment,"macro-name":[{pattern:/(^#\s*define\s+)\w+\b(?!\()/i,lookbehind:!0},{pattern:/(^#\s*define\s+)\w+\b(?=\()/i,lookbehind:!0,alias:"function"}],directive:{pattern:/^(#\s*)[a-z]+/,lookbehind:!0,alias:"keyword"},"directive-hash":/^#/,punctuation:/##|\\(?=[\r\n])/,expression:{pattern:/\S[\s\S]*/,inside:a.languages.c}}}}),a.languages.insertBefore("c","function",{constant:/\b(?:EOF|NULL|SEEK_CUR|SEEK_END|SEEK_SET|__DATE__|__FILE__|__LINE__|__TIMESTAMP__|__TIME__|__func__|stderr|stdin|stdout)\b/}),delete a.languages.c.boolean,function(e){var t=/\b(?:alignas|alignof|asm|auto|bool|break|case|catch|char|char16_t|char32_t|char8_t|class|co_await|co_return|co_yield|compl|concept|const|const_cast|consteval|constexpr|constinit|continue|decltype|default|delete|do|double|dynamic_cast|else|enum|explicit|export|extern|final|float|for|friend|goto|if|import|inline|int|int16_t|int32_t|int64_t|int8_t|long|module|mutable|namespace|new|noexcept|nullptr|operator|override|private|protected|public|register|reinterpret_cast|requires|return|short|signed|sizeof|static|static_assert|static_cast|struct|switch|template|this|thread_local|throw|try|typedef|typeid|typename|uint16_t|uint32_t|uint64_t|uint8_t|union|unsigned|using|virtual|void|volatile|wchar_t|while)\b/,n=/\b(?!<keyword>)\w+(?:\s*\.\s*\w+)*\b/.source.replace(/<keyword>/g,(function(){return t.source}));e.languages.cpp=e.languages.extend("c",{"class-name":[{pattern:RegExp(/(\b(?:class|concept|enum|struct|typename)\s+)(?!<keyword>)\w+/.source.replace(/<keyword>/g,(function(){return t.source}))),lookbehind:!0},/\b[A-Z]\w*(?=\s*::\s*\w+\s*\()/,/\b[A-Z_]\w*(?=\s*::\s*~\w+\s*\()/i,/\b\w+(?=\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>\s*::\s*\w+\s*\()/],keyword:t,number:{pattern:/(?:\b0b[01']+|\b0x(?:[\da-f']+(?:\.[\da-f']*)?|\.[\da-f']+)(?:p[+-]?[\d']+)?|(?:\b[\d']+(?:\.[\d']*)?|\B\.[\d']+)(?:e[+-]?[\d']+)?)[ful]{0,4}/i,greedy:!0},operator:/>>=?|<<=?|->|--|\+\+|&&|\|\||[?:~]|<=>|[-+*/%&|^!=<>]=?|\b(?:and|and_eq|bitand|bitor|not|not_eq|or|or_eq|xor|xor_eq)\b/,boolean:/\b(?:false|true)\b/}),e.languages.insertBefore("cpp","string",{module:{pattern:RegExp(/(\b(?:import|module)\s+)/.source+"(?:"+/"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|<[^<>\r\n]*>/.source+"|"+/<mod-name>(?:\s*:\s*<mod-name>)?|:\s*<mod-name>/.source.replace(/<mod-name>/g,(function(){return n}))+")"),lookbehind:!0,greedy:!0,inside:{string:/^[<"][\s\S]+/,operator:/:/,punctuation:/\./}},"raw-string":{pattern:/R"([^()\\ ]{0,16})\([\s\S]*?\)\1"/,alias:"string",greedy:!0}}),e.languages.insertBefore("cpp","keyword",{"generic-function":{pattern:/\b(?!operator\b)[a-z_]\w*\s*<(?:[^<>]|<[^<>]*>)*>(?=\s*\()/i,inside:{function:/^\w+/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:e.languages.cpp}}}}),e.languages.insertBefore("cpp","operator",{"double-colon":{pattern:/::/,alias:"punctuation"}}),e.languages.insertBefore("cpp","class-name",{"base-clause":{pattern:/(\b(?:class|struct)\s+\w+\s*:\s*)[^;{}"'\s]+(?:\s+[^;{}"'\s]+)*(?=\s*[;{])/,lookbehind:!0,greedy:!0,inside:e.languages.extend("cpp",{})}}),e.languages.insertBefore("inside","double-colon",{"class-name":/\b[a-z_]\w*\b(?!\s*::)/i},e.languages.cpp["base-clause"])}(a),function(e){var t=/(?:"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"|'(?:\\(?:\r\n|[\s\S])|[^'\\\r\n])*')/;e.languages.css={comment:/\/\*[\s\S]*?\*\//,atrule:{pattern:/@[\w-](?:[^;{\s]|\s+(?![\s{]))*(?:;|(?=\s*\{))/,inside:{rule:/^@[\w-]+/,"selector-function-argument":{pattern:/(\bselector\s*\(\s*(?![\s)]))(?:[^()\s]|\s+(?![\s)])|\((?:[^()]|\([^()]*\))*\))+(?=\s*\))/,lookbehind:!0,alias:"selector"},keyword:{pattern:/(^|[^\w-])(?:and|not|only|or)(?![\w-])/,lookbehind:!0}}},url:{pattern:RegExp("\\burl\\((?:"+t.source+"|"+/(?:[^\\\r\n()"']|\\[\s\S])*/.source+")\\)","i"),greedy:!0,inside:{function:/^url/i,punctuation:/^\(|\)$/,string:{pattern:RegExp("^"+t.source+"$"),alias:"url"}}},selector:{pattern:RegExp("(^|[{}\\s])[^{}\\s](?:[^{};\"'\\s]|\\s+(?![\\s{])|"+t.source+")*(?=\\s*\\{)"),lookbehind:!0},string:{pattern:t,greedy:!0},property:{pattern:/(^|[^-\w\xA0-\uFFFF])(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*(?=\s*:)/i,lookbehind:!0},important:/!important\b/i,function:{pattern:/(^|[^-a-z0-9])[-a-z0-9]+(?=\()/i,lookbehind:!0},punctuation:/[(){};:,]/},e.languages.css.atrule.inside.rest=e.languages.css;var n=e.languages.markup;n&&(n.tag.addInlined("style","css"),n.tag.addAttribute("style","css"))}(a),function(e){var t,n=/("|')(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/;e.languages.css.selector={pattern:e.languages.css.selector.pattern,lookbehind:!0,inside:t={"pseudo-element":/:(?:after|before|first-letter|first-line|selection)|::[-\w]+/,"pseudo-class":/:[-\w]+/,class:/\.[-\w]+/,id:/#[-\w]+/,attribute:{pattern:RegExp("\\[(?:[^[\\]\"']|"+n.source+")*\\]"),greedy:!0,inside:{punctuation:/^\[|\]$/,"case-sensitivity":{pattern:/(\s)[si]$/i,lookbehind:!0,alias:"keyword"},namespace:{pattern:/^(\s*)(?:(?!\s)[-*\w\xA0-\uFFFF])*\|(?!=)/,lookbehind:!0,inside:{punctuation:/\|$/}},"attr-name":{pattern:/^(\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+/,lookbehind:!0},"attr-value":[n,{pattern:/(=\s*)(?:(?!\s)[-\w\xA0-\uFFFF])+(?=\s*$)/,lookbehind:!0}],operator:/[|~*^$]?=/}},"n-th":[{pattern:/(\(\s*)[+-]?\d*[\dn](?:\s*[+-]\s*\d+)?(?=\s*\))/,lookbehind:!0,inside:{number:/[\dn]+/,operator:/[+-]/}},{pattern:/(\(\s*)(?:even|odd)(?=\s*\))/i,lookbehind:!0}],combinator:/>|\+|~|\|\|/,punctuation:/[(),]/}},e.languages.css.atrule.inside["selector-function-argument"].inside=t,e.languages.insertBefore("css","property",{variable:{pattern:/(^|[^-\w\xA0-\uFFFF])--(?!\s)[-_a-z\xA0-\uFFFF](?:(?!\s)[-\w\xA0-\uFFFF])*/i,lookbehind:!0}});var r={pattern:/(\b\d+)(?:%|[a-z]+(?![\w-]))/,lookbehind:!0},a={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0};e.languages.insertBefore("css","function",{operator:{pattern:/(\s)[+\-*\/](?=\s)/,lookbehind:!0},hexcode:{pattern:/\B#[\da-f]{3,8}\b/i,alias:"color"},color:[{pattern:/(^|[^\w-])(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)(?![\w-])/i,lookbehind:!0},{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:r,number:a,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:r,number:a})}(a),a.languages.javascript=a.languages.extend("clike",{"class-name":[a.languages.clike["class-name"],{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$A-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\.(?:constructor|prototype))/,lookbehind:!0}],keyword:[{pattern:/((?:^|\})\s*)catch\b/,lookbehind:!0},{pattern:/(^|[^.]|\.\.\.\s*)\b(?:as|assert(?=\s*\{)|async(?=\s*(?:function\b|\(|[$\w\xA0-\uFFFF]|$))|await|break|case|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally(?=\s*(?:\{|$))|for|from(?=\s*(?:['"]|$))|function|(?:get|set)(?=\s*(?:[#\[$\w\xA0-\uFFFF]|$))|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)\b/,lookbehind:!0}],function:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*(?:\.\s*(?:apply|bind|call)\s*)?\()/,number:{pattern:RegExp(/(^|[^\w$])/.source+"(?:"+/NaN|Infinity/.source+"|"+/0[bB][01]+(?:_[01]+)*n?/.source+"|"+/0[oO][0-7]+(?:_[0-7]+)*n?/.source+"|"+/0[xX][\dA-Fa-f]+(?:_[\dA-Fa-f]+)*n?/.source+"|"+/\d+(?:_\d+)*n/.source+"|"+/(?:\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\.\d+(?:_\d+)*)(?:[Ee][+-]?\d+(?:_\d+)*)?/.source+")"+/(?![\w$])/.source),lookbehind:!0},operator:/--|\+\+|\*\*=?|=>|&&=?|\|\|=?|[!=]==|<<=?|>>>?=?|[-+*/%&|^!=<>]=?|\.{3}|\?\?=?|\?\.?|[~:]/}),a.languages.javascript["class-name"][0].pattern=/(\b(?:class|extends|implements|instanceof|interface|new)\s+)[\w.\\]+/,a.languages.insertBefore("javascript","keyword",{regex:{pattern:/((?:^|[^$\w\xA0-\uFFFF."'\])\s]|\b(?:return|yield))\s*)\/(?:\[(?:[^\]\\\r\n]|\\.)*\]|\\.|[^/\\\[\r\n])+\/[dgimyus]{0,7}(?=(?:\s|\/\*(?:[^*]|\*(?!\/))*\*\/)*(?:$|[\r\n,.;:})\]]|\/\/))/,lookbehind:!0,greedy:!0,inside:{"regex-source":{pattern:/^(\/)[\s\S]+(?=\/[a-z]*$)/,lookbehind:!0,alias:"language-regex",inside:a.languages.regex},"regex-delimiter":/^\/|\/$/,"regex-flags":/^[a-z]+$/}},"function-variable":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*[=:]\s*(?:async\s*)?(?:\bfunction\b|(?:\((?:[^()]|\([^()]*\))*\)|(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)\s*=>))/,alias:"function"},parameter:[{pattern:/(function(?:\s+(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*)?\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\))/,lookbehind:!0,inside:a.languages.javascript},{pattern:/(^|[^$\w\xA0-\uFFFF])(?!\s)[_$a-z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*=>)/i,lookbehind:!0,inside:a.languages.javascript},{pattern:/(\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*=>)/,lookbehind:!0,inside:a.languages.javascript},{pattern:/((?:\b|\s|^)(?!(?:as|async|await|break|case|catch|class|const|continue|debugger|default|delete|do|else|enum|export|extends|finally|for|from|function|get|if|implements|import|in|instanceof|interface|let|new|null|of|package|private|protected|public|return|set|static|super|switch|this|throw|try|typeof|undefined|var|void|while|with|yield)(?![$\w\xA0-\uFFFF]))(?:(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*)\(\s*|\]\s*\(\s*)(?!\s)(?:[^()\s]|\s+(?![\s)])|\([^()]*\))+(?=\s*\)\s*\{)/,lookbehind:!0,inside:a.languages.javascript}],constant:/\b[A-Z](?:[A-Z_]|\dx?)*\b/}),a.languages.insertBefore("javascript","string",{hashbang:{pattern:/^#!.*/,greedy:!0,alias:"comment"},"template-string":{pattern:/`(?:\\[\s\S]|\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}|(?!\$\{)[^\\`])*`/,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},interpolation:{pattern:/((?:^|[^\\])(?:\\{2})*)\$\{(?:[^{}]|\{(?:[^{}]|\{[^}]*\})*\})+\}/,lookbehind:!0,inside:{"interpolation-punctuation":{pattern:/^\$\{|\}$/,alias:"punctuation"},rest:a.languages.javascript}},string:/[\s\S]+/}},"string-property":{pattern:/((?:^|[,{])[ \t]*)(["'])(?:\\(?:\r\n|[\s\S])|(?!\2)[^\\\r\n])*\2(?=\s*:)/m,lookbehind:!0,greedy:!0,alias:"property"}}),a.languages.insertBefore("javascript","operator",{"literal-property":{pattern:/((?:^|[,{])[ \t]*)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?=\s*:)/m,lookbehind:!0,alias:"property"}}),a.languages.markup&&(a.languages.markup.tag.addInlined("script","javascript"),a.languages.markup.tag.addAttribute(/on(?:abort|blur|change|click|composition(?:end|start|update)|dblclick|error|focus(?:in|out)?|key(?:down|up)|load|mouse(?:down|enter|leave|move|out|over|up)|reset|resize|scroll|select|slotchange|submit|unload|wheel)/.source,"javascript")),a.languages.js=a.languages.javascript,function(e){var t=/#(?!\{).+/,n={pattern:/#\{[^}]+\}/,alias:"variable"};e.languages.coffeescript=e.languages.extend("javascript",{comment:t,string:[{pattern:/'(?:\\[\s\S]|[^\\'])*'/,greedy:!0},{pattern:/"(?:\\[\s\S]|[^\\"])*"/,greedy:!0,inside:{interpolation:n}}],keyword:/\b(?:and|break|by|catch|class|continue|debugger|delete|do|each|else|extend|extends|false|finally|for|if|in|instanceof|is|isnt|let|loop|namespace|new|no|not|null|of|off|on|or|own|return|super|switch|then|this|throw|true|try|typeof|undefined|unless|until|when|while|window|with|yes|yield)\b/,"class-member":{pattern:/@(?!\d)\w+/,alias:"variable"}}),e.languages.insertBefore("coffeescript","comment",{"multiline-comment":{pattern:/###[\s\S]+?###/,alias:"comment"},"block-regex":{pattern:/\/{3}[\s\S]*?\/{3}/,alias:"regex",inside:{comment:t,interpolation:n}}}),e.languages.insertBefore("coffeescript","string",{"inline-javascript":{pattern:/`(?:\\[\s\S]|[^\\`])*`/,inside:{delimiter:{pattern:/^`|`$/,alias:"punctuation"},script:{pattern:/[\s\S]+/,alias:"language-javascript",inside:e.languages.javascript}}},"multiline-string":[{pattern:/'''[\s\S]*?'''/,greedy:!0,alias:"string"},{pattern:/"""[\s\S]*?"""/,greedy:!0,alias:"string",inside:{interpolation:n}}]}),e.languages.insertBefore("coffeescript","keyword",{property:/(?!\d)\w+(?=\s*:(?!:))/}),delete e.languages.coffeescript["template-string"],e.languages.coffee=e.languages.coffeescript}(a),function(e){var t=/[*&][^\s[\]{},]+/,n=/!(?:<[\w\-%#;/?:@&=+$,.!~*'()[\]]+>|(?:[a-zA-Z\d-]*!)?[\w\-%#;/?:@&=+$.~*'()]+)?/,r="(?:"+n.source+"(?:[ \t]+"+t.source+")?|"+t.source+"(?:[ \t]+"+n.source+")?)",a=/(?:[^\s\x00-\x08\x0e-\x1f!"#%&'*,\-:>?@[\]`{|}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]|[?:-]<PLAIN>)(?:[ \t]*(?:(?![#:])<PLAIN>|:<PLAIN>))*/.source.replace(/<PLAIN>/g,(function(){return/[^\s\x00-\x08\x0e-\x1f,[\]{}\x7f-\x84\x86-\x9f\ud800-\udfff\ufffe\uffff]/.source})),o=/"(?:[^"\\\r\n]|\\.)*"|'(?:[^'\\\r\n]|\\.)*'/.source;function i(e,t){t=(t||"").replace(/m/g,"")+"m";var n=/([:\-,[{]\s*(?:\s<<prop>>[ \t]+)?)(?:<<value>>)(?=[ \t]*(?:$|,|\]|\}|(?:[\r\n]\s*)?#))/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<value>>/g,(function(){return e}));return RegExp(n,t)}e.languages.yaml={scalar:{pattern:RegExp(/([\-:]\s*(?:\s<<prop>>[ \t]+)?[|>])[ \t]*(?:((?:\r?\n|\r)[ \t]+)\S[^\r\n]*(?:\2[^\r\n]+)*)/.source.replace(/<<prop>>/g,(function(){return r}))),lookbehind:!0,alias:"string"},comment:/#.*/,key:{pattern:RegExp(/((?:^|[:\-,[{\r\n?])[ \t]*(?:<<prop>>[ \t]+)?)<<key>>(?=\s*:\s)/.source.replace(/<<prop>>/g,(function(){return r})).replace(/<<key>>/g,(function(){return"(?:"+a+"|"+o+")"}))),lookbehind:!0,greedy:!0,alias:"atrule"},directive:{pattern:/(^[ \t]*)%.+/m,lookbehind:!0,alias:"important"},datetime:{pattern:i(/\d{4}-\d\d?-\d\d?(?:[tT]|[ \t]+)\d\d?:\d{2}:\d{2}(?:\.\d*)?(?:[ \t]*(?:Z|[-+]\d\d?(?::\d{2})?))?|\d{4}-\d{2}-\d{2}|\d\d?:\d{2}(?::\d{2}(?:\.\d*)?)?/.source),lookbehind:!0,alias:"number"},boolean:{pattern:i(/false|true/.source,"i"),lookbehind:!0,alias:"important"},null:{pattern:i(/null|~/.source,"i"),lookbehind:!0,alias:"important"},string:{pattern:i(o),lookbehind:!0,greedy:!0},number:{pattern:i(/[+-]?(?:0x[\da-f]+|0o[0-7]+|(?:\d+(?:\.\d*)?|\.\d+)(?:e[+-]?\d+)?|\.inf|\.nan)/.source,"i"),lookbehind:!0},tag:n,important:t,punctuation:/---|[:[\]{}\-,|>?]|\.\.\./},e.languages.yml=e.languages.yaml}(a),function(e){var t=/(?:\\.|[^\\\n\r]|(?:\n|\r\n?)(?![\r\n]))/.source;function n(e){return e=e.replace(/<inner>/g,(function(){return t})),RegExp(/((?:^|[^\\])(?:\\{2})*)/.source+"(?:"+e+")")}var r=/(?:\\.|``(?:[^`\r\n]|`(?!`))+``|`[^`\r\n]+`|[^\\|\r\n`])+/.source,a=/\|?__(?:\|__)+\|?(?:(?:\n|\r\n?)|(?![\s\S]))/.source.replace(/__/g,(function(){return r})),o=/\|?[ \t]*:?-{3,}:?[ \t]*(?:\|[ \t]*:?-{3,}:?[ \t]*)+\|?(?:\n|\r\n?)/.source;e.languages.markdown=e.languages.extend("markup",{}),e.languages.insertBefore("markdown","prolog",{"front-matter-block":{pattern:/(^(?:\s*[\r\n])?)---(?!.)[\s\S]*?[\r\n]---(?!.)/,lookbehind:!0,greedy:!0,inside:{punctuation:/^---|---$/,"front-matter":{pattern:/\S+(?:\s+\S+)*/,alias:["yaml","language-yaml"],inside:e.languages.yaml}}},blockquote:{pattern:/^>(?:[\t ]*>)*/m,alias:"punctuation"},table:{pattern:RegExp("^"+a+o+"(?:"+a+")*","m"),inside:{"table-data-rows":{pattern:RegExp("^("+a+o+")(?:"+a+")*$"),lookbehind:!0,inside:{"table-data":{pattern:RegExp(r),inside:e.languages.markdown},punctuation:/\|/}},"table-line":{pattern:RegExp("^("+a+")"+o+"$"),lookbehind:!0,inside:{punctuation:/\||:?-{3,}:?/}},"table-header-row":{pattern:RegExp("^"+a+"$"),inside:{"table-header":{pattern:RegExp(r),alias:"important",inside:e.languages.markdown},punctuation:/\|/}}}},code:[{pattern:/((?:^|\n)[ \t]*\n|(?:^|\r\n?)[ \t]*\r\n?)(?: {4}|\t).+(?:(?:\n|\r\n?)(?: {4}|\t).+)*/,lookbehind:!0,alias:"keyword"},{pattern:/^```[\s\S]*?^```$/m,greedy:!0,inside:{"code-block":{pattern:/^(```.*(?:\n|\r\n?))[\s\S]+?(?=(?:\n|\r\n?)^```$)/m,lookbehind:!0},"code-language":{pattern:/^(```).+/,lookbehind:!0},punctuation:/```/}}],title:[{pattern:/\S.*(?:\n|\r\n?)(?:==+|--+)(?=[ \t]*$)/m,alias:"important",inside:{punctuation:/==+$|--+$/}},{pattern:/(^\s*)#.+/m,lookbehind:!0,alias:"important",inside:{punctuation:/^#+|#+$/}}],hr:{pattern:/(^\s*)([*-])(?:[\t ]*\2){2,}(?=\s*$)/m,lookbehind:!0,alias:"punctuation"},list:{pattern:/(^\s*)(?:[*+-]|\d+\.)(?=[\t ].)/m,lookbehind:!0,alias:"punctuation"},"url-reference":{pattern:/!?\[[^\]]+\]:[\t ]+(?:\S+|<(?:\\.|[^>\\])+>)(?:[\t ]+(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\)))?/,inside:{variable:{pattern:/^(!?\[)[^\]]+/,lookbehind:!0},string:/(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|\((?:\\.|[^)\\])*\))$/,punctuation:/^[\[\]!:]|[<>]/},alias:"url"},bold:{pattern:n(/\b__(?:(?!_)<inner>|_(?:(?!_)<inner>)+_)+__\b|\*\*(?:(?!\*)<inner>|\*(?:(?!\*)<inner>)+\*)+\*\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^..)[\s\S]+(?=..$)/,lookbehind:!0,inside:{}},punctuation:/\*\*|__/}},italic:{pattern:n(/\b_(?:(?!_)<inner>|__(?:(?!_)<inner>)+__)+_\b|\*(?:(?!\*)<inner>|\*\*(?:(?!\*)<inner>)+\*\*)+\*/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^.)[\s\S]+(?=.$)/,lookbehind:!0,inside:{}},punctuation:/[*_]/}},strike:{pattern:n(/(~~?)(?:(?!~)<inner>)+\2/.source),lookbehind:!0,greedy:!0,inside:{content:{pattern:/(^~~?)[\s\S]+(?=\1$)/,lookbehind:!0,inside:{}},punctuation:/~~?/}},"code-snippet":{pattern:/(^|[^\\`])(?:``[^`\r\n]+(?:`[^`\r\n]+)*``(?!`)|`[^`\r\n]+`(?!`))/,lookbehind:!0,greedy:!0,alias:["code","keyword"]},url:{pattern:n(/!?\[(?:(?!\])<inner>)+\](?:\([^\s)]+(?:[\t ]+"(?:\\.|[^"\\])*")?\)|[ \t]?\[(?:(?!\])<inner>)+\])/.source),lookbehind:!0,greedy:!0,inside:{operator:/^!/,content:{pattern:/(^\[)[^\]]+(?=\])/,lookbehind:!0,inside:{}},variable:{pattern:/(^\][ \t]?\[)[^\]]+(?=\]$)/,lookbehind:!0},url:{pattern:/(^\]\()[^\s)]+/,lookbehind:!0},string:{pattern:/(^[ \t]+)"(?:\\.|[^"\\])*"(?=\)$)/,lookbehind:!0}}}}),["url","bold","italic","strike"].forEach((function(t){["url","bold","italic","strike","code-snippet"].forEach((function(n){t!==n&&(e.languages.markdown[t].inside.content.inside[n]=e.languages.markdown[n])}))})),e.hooks.add("after-tokenize",(function(e){"markdown"!==e.language&&"md"!==e.language||function e(t){if(t&&"string"!=typeof t)for(var n=0,r=t.length;n<r;n++){var a=t[n];if("code"===a.type){var o=a.content[1],i=a.content[3];if(o&&i&&"code-language"===o.type&&"code-block"===i.type&&"string"==typeof o.content){var l=o.content.replace(/\b#/g,"sharp").replace(/\b\+\+/g,"pp"),s="language-"+(l=(/[a-z][\w-]*/i.exec(l)||[""])[0].toLowerCase());i.alias?"string"==typeof i.alias?i.alias=[i.alias,s]:i.alias.push(s):i.alias=[s]}}else e(a.content)}}(e.tokens)})),e.hooks.add("wrap",(function(t){if("code-block"===t.type){for(var n="",r=0,a=t.classes.length;r<a;r++){var o=t.classes[r],u=/language-(.+)/.exec(o);if(u){n=u[1];break}}var c,d=e.languages[n];if(d)t.content=e.highlight((c=t.content,c.replace(i,"").replace(/&(\w{1,8}|#x?[\da-f]{1,8});/gi,(function(e,t){var n;if("#"===(t=t.toLowerCase())[0])return n="x"===t[1]?parseInt(t.slice(2),16):Number(t.slice(1)),s(n);var r=l[t];return r||e}))),d,n);else if(n&&"none"!==n&&e.plugins.autoloader){var f="md-"+(new Date).valueOf()+"-"+Math.floor(1e16*Math.random());t.attributes.id=f,e.plugins.autoloader.loadLanguages(n,(function(){var t=document.getElementById(f);t&&(t.innerHTML=e.highlight(t.textContent,e.languages[n],n))}))}}}));var i=RegExp(e.languages.markup.tag.pattern.source,"gi"),l={amp:"&",lt:"<",gt:">",quot:'"'},s=String.fromCodePoint||String.fromCharCode;e.languages.md=e.languages.markdown}(a),a.languages.graphql={comment:/#.*/,description:{pattern:/(?:"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*")(?=\s*[a-z_])/i,greedy:!0,alias:"string",inside:{"language-markdown":{pattern:/(^"(?:"")?)(?!\1)[\s\S]+(?=\1$)/,lookbehind:!0,inside:a.languages.markdown}}},string:{pattern:/"""(?:[^"]|(?!""")")*"""|"(?:\\.|[^\\"\r\n])*"/,greedy:!0},number:/(?:\B-|\b)\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,boolean:/\b(?:false|true)\b/,variable:/\$[a-z_]\w*/i,directive:{pattern:/@[a-z_]\w*/i,alias:"function"},"attr-name":{pattern:/\b[a-z_]\w*(?=\s*(?:\((?:[^()"]|"(?:\\.|[^\\"\r\n])*")*\))?:)/i,greedy:!0},"atom-input":{pattern:/\b[A-Z]\w*Input\b/,alias:"class-name"},scalar:/\b(?:Boolean|Float|ID|Int|String)\b/,constant:/\b[A-Z][A-Z_\d]*\b/,"class-name":{pattern:/(\b(?:enum|implements|interface|on|scalar|type|union)\s+|&\s*|:\s*|\[)[A-Z_]\w*/,lookbehind:!0},fragment:{pattern:/(\bfragment\s+|\.{3}\s*(?!on\b))[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-mutation":{pattern:/(\bmutation\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},"definition-query":{pattern:/(\bquery\s+)[a-zA-Z_]\w*/,lookbehind:!0,alias:"function"},keyword:/\b(?:directive|enum|extend|fragment|implements|input|interface|mutation|on|query|repeatable|scalar|schema|subscription|type|union)\b/,operator:/[!=|&]|\.{3}/,"property-query":/\w+(?=\s*\()/,object:/\w+(?=\s*\{)/,punctuation:/[!(){}\[\]:=,]/,property:/\w+/},a.hooks.add("after-tokenize",(function(e){if("graphql"===e.language)for(var t=e.tokens.filter((function(e){return"string"!=typeof e&&"comment"!==e.type&&"scalar"!==e.type})),n=0;n<t.length;){var r=t[n++];if("keyword"===r.type&&"mutation"===r.content){var a=[];if(d(["definition-mutation","punctuation"])&&"("===c(1).content){n+=2;var o=f(/^\($/,/^\)$/);if(-1===o)continue;for(;n<o;n++){var i=c(0);"variable"===i.type&&(p(i,"variable-input"),a.push(i.content))}n=o+1}if(d(["punctuation","property-query"])&&"{"===c(0).content&&(n++,p(c(0),"property-mutation"),a.length>0)){var l=f(/^\{$/,/^\}$/);if(-1===l)continue;for(var s=n;s<l;s++){var u=t[s];"variable"===u.type&&a.indexOf(u.content)>=0&&p(u,"variable-input")}}}}function c(e){return t[n+e]}function d(e,t){t=t||0;for(var n=0;n<e.length;n++){var r=c(n+t);if(!r||r.type!==e[n])return!1}return!0}function f(e,r){for(var a=1,o=n;o<t.length;o++){var i=t[o],l=i.content;if("punctuation"===i.type&&"string"==typeof l)if(e.test(l))a++;else if(r.test(l)&&0===--a)return o}return-1}function p(e,t){var n=e.alias;n?Array.isArray(n)||(e.alias=n=[n]):e.alias=n=[],n.push(t)}})),a.languages.sql={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|(?:--|\/\/|#).*)/,lookbehind:!0},variable:[{pattern:/@(["'`])(?:\\[\s\S]|(?!\1)[^\\])+\1/,greedy:!0},/@[\w.$]+/],string:{pattern:/(^|[^@\\])("|')(?:\\[\s\S]|(?!\2)[^\\]|\2\2)*\2/,greedy:!0,lookbehind:!0},identifier:{pattern:/(^|[^@\\])`(?:\\[\s\S]|[^`\\]|``)*`/,greedy:!0,lookbehind:!0,inside:{punctuation:/^`|`$/}},function:/\b(?:AVG|COUNT|FIRST|FORMAT|LAST|LCASE|LEN|MAX|MID|MIN|MOD|NOW|ROUND|SUM|UCASE)(?=\s*\()/i,keyword:/\b(?:ACTION|ADD|AFTER|ALGORITHM|ALL|ALTER|ANALYZE|ANY|APPLY|AS|ASC|AUTHORIZATION|AUTO_INCREMENT|BACKUP|BDB|BEGIN|BERKELEYDB|BIGINT|BINARY|BIT|BLOB|BOOL|BOOLEAN|BREAK|BROWSE|BTREE|BULK|BY|CALL|CASCADED?|CASE|CHAIN|CHAR(?:ACTER|SET)?|CHECK(?:POINT)?|CLOSE|CLUSTERED|COALESCE|COLLATE|COLUMNS?|COMMENT|COMMIT(?:TED)?|COMPUTE|CONNECT|CONSISTENT|CONSTRAINT|CONTAINS(?:TABLE)?|CONTINUE|CONVERT|CREATE|CROSS|CURRENT(?:_DATE|_TIME|_TIMESTAMP|_USER)?|CURSOR|CYCLE|DATA(?:BASES?)?|DATE(?:TIME)?|DAY|DBCC|DEALLOCATE|DEC|DECIMAL|DECLARE|DEFAULT|DEFINER|DELAYED|DELETE|DELIMITERS?|DENY|DESC|DESCRIBE|DETERMINISTIC|DISABLE|DISCARD|DISK|DISTINCT|DISTINCTROW|DISTRIBUTED|DO|DOUBLE|DROP|DUMMY|DUMP(?:FILE)?|DUPLICATE|ELSE(?:IF)?|ENABLE|ENCLOSED|END|ENGINE|ENUM|ERRLVL|ERRORS|ESCAPED?|EXCEPT|EXEC(?:UTE)?|EXISTS|EXIT|EXPLAIN|EXTENDED|FETCH|FIELDS|FILE|FILLFACTOR|FIRST|FIXED|FLOAT|FOLLOWING|FOR(?: EACH ROW)?|FORCE|FOREIGN|FREETEXT(?:TABLE)?|FROM|FULL|FUNCTION|GEOMETRY(?:COLLECTION)?|GLOBAL|GOTO|GRANT|GROUP|HANDLER|HASH|HAVING|HOLDLOCK|HOUR|IDENTITY(?:COL|_INSERT)?|IF|IGNORE|IMPORT|INDEX|INFILE|INNER|INNODB|INOUT|INSERT|INT|INTEGER|INTERSECT|INTERVAL|INTO|INVOKER|ISOLATION|ITERATE|JOIN|KEYS?|KILL|LANGUAGE|LAST|LEAVE|LEFT|LEVEL|LIMIT|LINENO|LINES|LINESTRING|LOAD|LOCAL|LOCK|LONG(?:BLOB|TEXT)|LOOP|MATCH(?:ED)?|MEDIUM(?:BLOB|INT|TEXT)|MERGE|MIDDLEINT|MINUTE|MODE|MODIFIES|MODIFY|MONTH|MULTI(?:LINESTRING|POINT|POLYGON)|NATIONAL|NATURAL|NCHAR|NEXT|NO|NONCLUSTERED|NULLIF|NUMERIC|OFF?|OFFSETS?|ON|OPEN(?:DATASOURCE|QUERY|ROWSET)?|OPTIMIZE|OPTION(?:ALLY)?|ORDER|OUT(?:ER|FILE)?|OVER|PARTIAL|PARTITION|PERCENT|PIVOT|PLAN|POINT|POLYGON|PRECEDING|PRECISION|PREPARE|PREV|PRIMARY|PRINT|PRIVILEGES|PROC(?:EDURE)?|PUBLIC|PURGE|QUICK|RAISERROR|READS?|REAL|RECONFIGURE|REFERENCES|RELEASE|RENAME|REPEAT(?:ABLE)?|REPLACE|REPLICATION|REQUIRE|RESIGNAL|RESTORE|RESTRICT|RETURN(?:ING|S)?|REVOKE|RIGHT|ROLLBACK|ROUTINE|ROW(?:COUNT|GUIDCOL|S)?|RTREE|RULE|SAVE(?:POINT)?|SCHEMA|SECOND|SELECT|SERIAL(?:IZABLE)?|SESSION(?:_USER)?|SET(?:USER)?|SHARE|SHOW|SHUTDOWN|SIMPLE|SMALLINT|SNAPSHOT|SOME|SONAME|SQL|START(?:ING)?|STATISTICS|STATUS|STRIPED|SYSTEM_USER|TABLES?|TABLESPACE|TEMP(?:ORARY|TABLE)?|TERMINATED|TEXT(?:SIZE)?|THEN|TIME(?:STAMP)?|TINY(?:BLOB|INT|TEXT)|TOP?|TRAN(?:SACTIONS?)?|TRIGGER|TRUNCATE|TSEQUAL|TYPES?|UNBOUNDED|UNCOMMITTED|UNDEFINED|UNION|UNIQUE|UNLOCK|UNPIVOT|UNSIGNED|UPDATE(?:TEXT)?|USAGE|USE|USER|USING|VALUES?|VAR(?:BINARY|CHAR|CHARACTER|YING)|VIEW|WAITFOR|WARNINGS|WHEN|WHERE|WHILE|WITH(?: ROLLUP|IN)?|WORK|WRITE(?:TEXT)?|YEAR)\b/i,boolean:/\b(?:FALSE|NULL|TRUE)\b/i,number:/\b0x[\da-f]+\b|\b\d+(?:\.\d*)?|\B\.\d+\b/i,operator:/[-+*\/=%^~]|&&?|\|\|?|!=?|<(?:=>?|<|>)?|>[>=]?|\b(?:AND|BETWEEN|DIV|ILIKE|IN|IS|LIKE|NOT|OR|REGEXP|RLIKE|SOUNDS LIKE|XOR)\b/i,punctuation:/[;[\]()`,.]/},function(e){var t=e.languages.javascript["template-string"],n=t.pattern.source,r=t.inside.interpolation,a=r.inside["interpolation-punctuation"],o=r.pattern.source;function i(t,r){if(e.languages[t])return{pattern:RegExp("((?:"+r+")\\s*)"+n),lookbehind:!0,greedy:!0,inside:{"template-punctuation":{pattern:/^`|`$/,alias:"string"},"embedded-code":{pattern:/[\s\S]+/,alias:t}}}}function l(e,t){return"___"+t.toUpperCase()+"_"+e+"___"}function s(t,n,r){var a={code:t,grammar:n,language:r};return e.hooks.run("before-tokenize",a),a.tokens=e.tokenize(a.code,a.grammar),e.hooks.run("after-tokenize",a),a.tokens}function u(t){var n={};n["interpolation-punctuation"]=a;var o=e.tokenize(t,n);if(3===o.length){var i=[1,1];i.push.apply(i,s(o[1],e.languages.javascript,"javascript")),o.splice.apply(o,i)}return new e.Token("interpolation",o,r.alias,t)}function c(t,n,r){var a=e.tokenize(t,{interpolation:{pattern:RegExp(o),lookbehind:!0}}),i=0,c={},d=s(a.map((function(e){if("string"==typeof e)return e;for(var n,a=e.content;-1!==t.indexOf(n=l(i++,r)););return c[n]=a,n})).join(""),n,r),f=Object.keys(c);return i=0,function e(t){for(var n=0;n<t.length;n++){if(i>=f.length)return;var r=t[n];if("string"==typeof r||"string"==typeof r.content){var a=f[i],o="string"==typeof r?r:r.content,l=o.indexOf(a);if(-1!==l){++i;var s=o.substring(0,l),d=u(c[a]),p=o.substring(l+a.length),m=[];if(s&&m.push(s),m.push(d),p){var h=[p];e(h),m.push.apply(m,h)}"string"==typeof r?(t.splice.apply(t,[n,1].concat(m)),n+=m.length-1):r.content=m}}else{var g=r.content;Array.isArray(g)?e(g):e([g])}}}(d),new e.Token(r,d,"language-"+r,t)}e.languages.javascript["template-string"]=[i("css",/\b(?:styled(?:\([^)]*\))?(?:\s*\.\s*\w+(?:\([^)]*\))*)*|css(?:\s*\.\s*(?:global|resolve))?|createGlobalStyle|keyframes)/.source),i("html",/\bhtml|\.\s*(?:inner|outer)HTML\s*\+?=/.source),i("svg",/\bsvg/.source),i("markdown",/\b(?:markdown|md)/.source),i("graphql",/\b(?:gql|graphql(?:\s*\.\s*experimental)?)/.source),i("sql",/\bsql/.source),t].filter(Boolean);var d={javascript:!0,js:!0,typescript:!0,ts:!0,jsx:!0,tsx:!0};function f(e){return"string"==typeof e?e:Array.isArray(e)?e.map(f).join(""):f(e.content)}e.hooks.add("after-tokenize",(function(t){t.language in d&&function t(n){for(var r=0,a=n.length;r<a;r++){var o=n[r];if("string"!=typeof o){var i=o.content;if(Array.isArray(i))if("template-string"===o.type){var l=i[1];if(3===i.length&&"string"!=typeof l&&"embedded-code"===l.type){var s=f(l),u=l.alias,d=Array.isArray(u)?u[0]:u,p=e.languages[d];if(!p)continue;i[1]=c(s,p,d)}}else t(i);else"string"!=typeof i&&t([i])}}}(t.tokens)}))}(a),function(e){e.languages.typescript=e.languages.extend("javascript",{"class-name":{pattern:/(\b(?:class|extends|implements|instanceof|interface|new|type)\s+)(?!keyof\b)(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*(?:\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>)?/,lookbehind:!0,greedy:!0,inside:null},builtin:/\b(?:Array|Function|Promise|any|boolean|console|never|number|string|symbol|unknown)\b/}),e.languages.typescript.keyword.push(/\b(?:abstract|declare|is|keyof|readonly|require)\b/,/\b(?:asserts|infer|interface|module|namespace|type)\b(?=\s*(?:[{_$a-zA-Z\xA0-\uFFFF]|$))/,/\btype\b(?=\s*(?:[\{*]|$))/),delete e.languages.typescript.parameter,delete e.languages.typescript["literal-property"];var t=e.languages.extend("typescript",{});delete t["class-name"],e.languages.typescript["class-name"].inside=t,e.languages.insertBefore("typescript","function",{decorator:{pattern:/@[$\w\xA0-\uFFFF]+/,inside:{at:{pattern:/^@/,alias:"operator"},function:/^[\s\S]+/}},"generic-function":{pattern:/#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*\s*<(?:[^<>]|<(?:[^<>]|<[^<>]*>)*>)*>(?=\s*\()/,greedy:!0,inside:{function:/^#?(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/,generic:{pattern:/<[\s\S]+/,alias:"class-name",inside:t}}}}),e.languages.ts=e.languages.typescript}(a),function(e){function t(e,t){return RegExp(e.replace(/<ID>/g,(function(){return/(?!\s)[_$a-zA-Z\xA0-\uFFFF](?:(?!\s)[$\w\xA0-\uFFFF])*/.source})),t)}e.languages.insertBefore("javascript","function-variable",{"method-variable":{pattern:RegExp("(\\.\\s*)"+e.languages.javascript["function-variable"].pattern.source),lookbehind:!0,alias:["function-variable","method","function","property-access"]}}),e.languages.insertBefore("javascript","function",{method:{pattern:RegExp("(\\.\\s*)"+e.languages.javascript.function.source),lookbehind:!0,alias:["function","property-access"]}}),e.languages.insertBefore("javascript","constant",{"known-class-name":[{pattern:/\b(?:(?:Float(?:32|64)|(?:Int|Uint)(?:8|16|32)|Uint8Clamped)?Array|ArrayBuffer|BigInt|Boolean|DataView|Date|Error|Function|Intl|JSON|(?:Weak)?(?:Map|Set)|Math|Number|Object|Promise|Proxy|Reflect|RegExp|String|Symbol|WebAssembly)\b/,alias:"class-name"},{pattern:/\b(?:[A-Z]\w*)Error\b/,alias:"class-name"}]}),e.languages.insertBefore("javascript","keyword",{imports:{pattern:t(/(\bimport\b\s*)(?:<ID>(?:\s*,\s*(?:\*\s*as\s+<ID>|\{[^{}]*\}))?|\*\s*as\s+<ID>|\{[^{}]*\})(?=\s*\bfrom\b)/.source),lookbehind:!0,inside:e.languages.javascript},exports:{pattern:t(/(\bexport\b\s*)(?:\*(?:\s*as\s+<ID>)?(?=\s*\bfrom\b)|\{[^{}]*\})/.source),lookbehind:!0,inside:e.languages.javascript}}),e.languages.javascript.keyword.unshift({pattern:/\b(?:as|default|export|from|import)\b/,alias:"module"},{pattern:/\b(?:await|break|catch|continue|do|else|finally|for|if|return|switch|throw|try|while|yield)\b/,alias:"control-flow"},{pattern:/\bnull\b/,alias:["null","nil"]},{pattern:/\bundefined\b/,alias:"nil"}),e.languages.insertBefore("javascript","operator",{spread:{pattern:/\.{3}/,alias:"operator"},arrow:{pattern:/=>/,alias:"operator"}}),e.languages.insertBefore("javascript","punctuation",{"property-access":{pattern:t(/(\.\s*)#?<ID>/.source),lookbehind:!0},"maybe-class-name":{pattern:/(^|[^$\w\xA0-\uFFFF])[A-Z][$\w\xA0-\uFFFF]+/,lookbehind:!0},dom:{pattern:/\b(?:document|(?:local|session)Storage|location|navigator|performance|window)\b/,alias:"variable"},console:{pattern:/\bconsole(?=\s*\.)/,alias:"class-name"}});for(var n=["function","function-variable","method","method-variable","property-access"],r=0;r<n.length;r++){var a=n[r],o=e.languages.javascript[a];"RegExp"===e.util.type(o)&&(o=e.languages.javascript[a]={pattern:o});var i=o.inside||{};o.inside=i,i["maybe-class-name"]=/^[A-Z][\s\S]*/}}(a),function(e){var t=e.util.clone(e.languages.javascript),n=/(?:\s|\/\/.*(?!.)|\/\*(?:[^*]|\*(?!\/))\*\/)/.source,r=/(?:\{(?:\{(?:\{[^{}]*\}|[^{}])*\}|[^{}])*\})/.source,a=/(?:\{<S>*\.{3}(?:[^{}]|<BRACES>)*\})/.source;function o(e,t){return e=e.replace(/<S>/g,(function(){return n})).replace(/<BRACES>/g,(function(){return r})).replace(/<SPREAD>/g,(function(){return a})),RegExp(e,t)}a=o(a).source,e.languages.jsx=e.languages.extend("markup",t),e.languages.jsx.tag.pattern=o(/<\/?(?:[\w.:-]+(?:<S>+(?:[\w.:$-]+(?:=(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s{'"/>=]+|<BRACES>))?|<SPREAD>))*<S>*\/?)?>/.source),e.languages.jsx.tag.inside.tag.pattern=/^<\/?[^\s>\/]*/,e.languages.jsx.tag.inside["attr-value"].pattern=/=(?!\{)(?:"(?:\\[\s\S]|[^\\"])*"|'(?:\\[\s\S]|[^\\'])*'|[^\s'">]+)/,e.languages.jsx.tag.inside.tag.inside["class-name"]=/^[A-Z]\w*(?:\.[A-Z]\w*)*$/,e.languages.jsx.tag.inside.comment=t.comment,e.languages.insertBefore("inside","attr-name",{spread:{pattern:o(/<SPREAD>/.source),inside:e.languages.jsx}},e.languages.jsx.tag),e.languages.insertBefore("inside","special-attr",{script:{pattern:o(/=<BRACES>/.source),alias:"language-javascript",inside:{"script-punctuation":{pattern:/^=(?=\{)/,alias:"punctuation"},rest:e.languages.jsx}}},e.languages.jsx.tag);var i=function(e){return e?"string"==typeof e?e:"string"==typeof e.content?e.content:e.content.map(i).join(""):""},l=function(t){for(var n=[],r=0;r<t.length;r++){var a=t[r],o=!1;if("string"!=typeof a&&("tag"===a.type&&a.content[0]&&"tag"===a.content[0].type?"</"===a.content[0].content[0].content?n.length>0&&n[n.length-1].tagName===i(a.content[0].content[1])&&n.pop():"/>"===a.content[a.content.length-1].content||n.push({tagName:i(a.content[0].content[1]),openedBraces:0}):n.length>0&&"punctuation"===a.type&&"{"===a.content?n[n.length-1].openedBraces++:n.length>0&&n[n.length-1].openedBraces>0&&"punctuation"===a.type&&"}"===a.content?n[n.length-1].openedBraces--:o=!0),(o||"string"==typeof a)&&n.length>0&&0===n[n.length-1].openedBraces){var s=i(a);r<t.length-1&&("string"==typeof t[r+1]||"plain-text"===t[r+1].type)&&(s+=i(t[r+1]),t.splice(r+1,1)),r>0&&("string"==typeof t[r-1]||"plain-text"===t[r-1].type)&&(s=i(t[r-1])+s,t.splice(r-1,1),r--),t[r]=new e.Token("plain-text",s,null,s)}a.content&&"string"!=typeof a.content&&l(a.content)}};e.hooks.add("after-tokenize",(function(e){"jsx"!==e.language&&"tsx"!==e.language||l(e.tokens)}))}(a),function(e){e.languages.diff={coord:[/^(?:\*{3}|-{3}|\+{3}).*$/m,/^@@.*@@$/m,/^\d.*$/m]};var t={"deleted-sign":"-","deleted-arrow":"<","inserted-sign":"+","inserted-arrow":">",unchanged:" ",diff:"!"};Object.keys(t).forEach((function(n){var r=t[n],a=[];/^\w+$/.test(n)||a.push(/\w+/.exec(n)[0]),"diff"===n&&a.push("bold"),e.languages.diff[n]={pattern:RegExp("^(?:["+r+"].*(?:\r\n?|\n|(?![\\s\\S])))+","m"),alias:a,inside:{line:{pattern:/(.)(?=[\s\S]).*(?:\r\n?|\n)?/,lookbehind:!0},prefix:{pattern:/[\s\S]/,alias:/\w+/.exec(n)[0]}}}})),Object.defineProperty(e.languages.diff,"PREFIXES",{value:t})}(a),a.languages.git={comment:/^#.*/m,deleted:/^[-\u2013].*/m,inserted:/^\+.*/m,string:/("|')(?:\\.|(?!\1)[^\\\r\n])*\1/,command:{pattern:/^.*\$ git .*$/m,inside:{parameter:/\s--?\w+/}},coord:/^@@.*@@$/m,"commit-sha1":/^commit \w{40}$/m},a.languages.go=a.languages.extend("clike",{string:{pattern:/(^|[^\\])"(?:\\.|[^"\\\r\n])*"|`[^`]*`/,lookbehind:!0,greedy:!0},keyword:/\b(?:break|case|chan|const|continue|default|defer|else|fallthrough|for|func|go(?:to)?|if|import|interface|map|package|range|return|select|struct|switch|type|var)\b/,boolean:/\b(?:_|false|iota|nil|true)\b/,number:[/\b0(?:b[01_]+|o[0-7_]+)i?\b/i,/\b0x(?:[a-f\d_]+(?:\.[a-f\d_]*)?|\.[a-f\d_]+)(?:p[+-]?\d+(?:_\d+)*)?i?(?!\w)/i,/(?:\b\d[\d_]*(?:\.[\d_]*)?|\B\.\d[\d_]*)(?:e[+-]?[\d_]+)?i?(?!\w)/i],operator:/[*\/%^!=]=?|\+[=+]?|-[=-]?|\|[=|]?|&(?:=|&|\^=?)?|>(?:>=?|=)?|<(?:<=?|=|-)?|:=|\.\.\./,builtin:/\b(?:append|bool|byte|cap|close|complex|complex(?:64|128)|copy|delete|error|float(?:32|64)|u?int(?:8|16|32|64)?|imag|len|make|new|panic|print(?:ln)?|real|recover|rune|string|uintptr)\b/}),a.languages.insertBefore("go","string",{char:{pattern:/'(?:\\.|[^'\\\r\n]){0,10}'/,greedy:!0}}),delete a.languages.go["class-name"],function(e){function t(e,t){return"___"+e.toUpperCase()+t+"___"}Object.defineProperties(e.languages["markup-templating"]={},{buildPlaceholders:{value:function(n,r,a,o){if(n.language===r){var i=n.tokenStack=[];n.code=n.code.replace(a,(function(e){if("function"==typeof o&&!o(e))return e;for(var a,l=i.length;-1!==n.code.indexOf(a=t(r,l));)++l;return i[l]=e,a})),n.grammar=e.languages.markup}}},tokenizePlaceholders:{value:function(n,r){if(n.language===r&&n.tokenStack){n.grammar=e.languages[r];var a=0,o=Object.keys(n.tokenStack);!function i(l){for(var s=0;s<l.length&&!(a>=o.length);s++){var u=l[s];if("string"==typeof u||u.content&&"string"==typeof u.content){var c=o[a],d=n.tokenStack[c],f="string"==typeof u?u:u.content,p=t(r,c),m=f.indexOf(p);if(m>-1){++a;var h=f.substring(0,m),g=new e.Token(r,e.tokenize(d,n.grammar),"language-"+r,d),b=f.substring(m+p.length),v=[];h&&v.push.apply(v,i([h])),v.push(g),b&&v.push.apply(v,i([b])),"string"==typeof u?l.splice.apply(l,[s,1].concat(v)):u.content=v}}else u.content&&i(u.content)}return l}(n.tokens)}}}})}(a),function(e){e.languages.handlebars={comment:/\{\{![\s\S]*?\}\}/,delimiter:{pattern:/^\{\{\{?|\}\}\}?$/,alias:"punctuation"},string:/(["'])(?:\\.|(?!\1)[^\\\r\n])*\1/,number:/\b0x[\dA-Fa-f]+\b|(?:\b\d+(?:\.\d*)?|\B\.\d+)(?:[Ee][+-]?\d+)?/,boolean:/\b(?:false|true)\b/,block:{pattern:/^(\s*(?:~\s*)?)[#\/]\S+?(?=\s*(?:~\s*)?$|\s)/,lookbehind:!0,alias:"keyword"},brackets:{pattern:/\[[^\]]+\]/,inside:{punctuation:/\[|\]/,variable:/[\s\S]+/}},punctuation:/[!"#%&':()*+,.\/;<=>@\[\\\]^`{|}~]/,variable:/[^!"#%&'()*+,\/;<=>@\[\\\]^`{|}~\s]+/},e.hooks.add("before-tokenize",(function(t){e.languages["markup-templating"].buildPlaceholders(t,"handlebars",/\{\{\{[\s\S]+?\}\}\}|\{\{[\s\S]+?\}\}/g)})),e.hooks.add("after-tokenize",(function(t){e.languages["markup-templating"].tokenizePlaceholders(t,"handlebars")})),e.languages.hbs=e.languages.handlebars}(a),a.languages.json={property:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?=\s*:)/,lookbehind:!0,greedy:!0},string:{pattern:/(^|[^\\])"(?:\\.|[^\\"\r\n])*"(?!\s*:)/,lookbehind:!0,greedy:!0},comment:{pattern:/\/\/.*|\/\*[\s\S]*?(?:\*\/|$)/,greedy:!0},number:/-?\b\d+(?:\.\d+)?(?:e[+-]?\d+)?\b/i,punctuation:/[{}[\],]/,operator:/:/,boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"}},a.languages.webmanifest=a.languages.json,a.languages.less=a.languages.extend("css",{comment:[/\/\*[\s\S]*?\*\//,{pattern:/(^|[^\\])\/\/.*/,lookbehind:!0}],atrule:{pattern:/@[\w-](?:\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{punctuation:/[:()]/}},selector:{pattern:/(?:@\{[\w-]+\}|[^{};\s@])(?:@\{[\w-]+\}|\((?:[^(){}]|\([^(){}]*\))*\)|[^(){};@\s]|\s+(?!\s))*?(?=\s*\{)/,inside:{variable:/@+[\w-]+/}},property:/(?:@\{[\w-]+\}|[\w-])+(?:\+_?)?(?=\s*:)/,operator:/[+\-*\/]/}),a.languages.insertBefore("less","property",{variable:[{pattern:/@[\w-]+\s*:/,inside:{punctuation:/:/}},/@@?[\w-]+/],"mixin-usage":{pattern:/([{;]\s*)[.#](?!\d)[\w-].*?(?=[(;])/,lookbehind:!0,alias:"function"}}),a.languages.makefile={comment:{pattern:/(^|[^\\])#(?:\\(?:\r\n|[\s\S])|[^\\\r\n])*/,lookbehind:!0},string:{pattern:/(["'])(?:\\(?:\r\n|[\s\S])|(?!\1)[^\\\r\n])*\1/,greedy:!0},"builtin-target":{pattern:/\.[A-Z][^:#=\s]+(?=\s*:(?!=))/,alias:"builtin"},target:{pattern:/^(?:[^:=\s]|[ \t]+(?![\s:]))+(?=\s*:(?!=))/m,alias:"symbol",inside:{variable:/\$+(?:(?!\$)[^(){}:#=\s]+|(?=[({]))/}},variable:/\$+(?:(?!\$)[^(){}:#=\s]+|\([@*%<^+?][DF]\)|(?=[({]))/,keyword:/-include\b|\b(?:define|else|endef|endif|export|ifn?def|ifn?eq|include|override|private|sinclude|undefine|unexport|vpath)\b/,function:{pattern:/(\()(?:abspath|addsuffix|and|basename|call|dir|error|eval|file|filter(?:-out)?|findstring|firstword|flavor|foreach|guile|if|info|join|lastword|load|notdir|or|origin|patsubst|realpath|shell|sort|strip|subst|suffix|value|warning|wildcard|word(?:list|s)?)(?=[ \t])/,lookbehind:!0},operator:/(?:::|[?:+!])?=|[|@]/,punctuation:/[:;(){}]/},a.languages.objectivec=a.languages.extend("c",{string:{pattern:/@?"(?:\\(?:\r\n|[\s\S])|[^"\\\r\n])*"/,greedy:!0},keyword:/\b(?:asm|auto|break|case|char|const|continue|default|do|double|else|enum|extern|float|for|goto|if|in|inline|int|long|register|return|self|short|signed|sizeof|static|struct|super|switch|typedef|typeof|union|unsigned|void|volatile|while)\b|(?:@interface|@end|@implementation|@protocol|@class|@public|@protected|@private|@property|@try|@catch|@finally|@throw|@synthesize|@dynamic|@selector)\b/,operator:/-[->]?|\+\+?|!=?|<<?=?|>>?=?|==?|&&?|\|\|?|[~^%?*\/@]/}),delete a.languages.objectivec["class-name"],a.languages.objc=a.languages.objectivec,a.languages.ocaml={comment:{pattern:/\(\*[\s\S]*?\*\)/,greedy:!0},char:{pattern:/'(?:[^\\\r\n']|\\(?:.|[ox]?[0-9a-f]{1,3}))'/i,greedy:!0},string:[{pattern:/"(?:\\(?:[\s\S]|\r\n)|[^\\\r\n"])*"/,greedy:!0},{pattern:/\{([a-z_]*)\|[\s\S]*?\|\1\}/,greedy:!0}],number:[/\b(?:0b[01][01_]*|0o[0-7][0-7_]*)\b/i,/\b0x[a-f0-9][a-f0-9_]*(?:\.[a-f0-9_]*)?(?:p[+-]?\d[\d_]*)?(?!\w)/i,/\b\d[\d_]*(?:\.[\d_]*)?(?:e[+-]?\d[\d_]*)?(?!\w)/i],directive:{pattern:/\B#\w+/,alias:"property"},label:{pattern:/\B~\w+/,alias:"property"},"type-variable":{pattern:/\B'\w+/,alias:"function"},variant:{pattern:/`\w+/,alias:"symbol"},keyword:/\b(?:as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|match|method|module|mutable|new|nonrec|object|of|open|private|rec|sig|struct|then|to|try|type|val|value|virtual|when|where|while|with)\b/,boolean:/\b(?:false|true)\b/,"operator-like-punctuation":{pattern:/\[[<>|]|[>|]\]|\{<|>\}/,alias:"punctuation"},operator:/\.[.~]|:[=>]|[=<>@^|&+\-*\/$%!?~][!$%&*+\-.\/:<=>?@^|~]*|\b(?:and|asr|land|lor|lsl|lsr|lxor|mod|or)\b/,punctuation:/;;|::|[(){}\[\].,:;#]|\b_\b/},a.languages.python={comment:{pattern:/(^|[^\\])#.*/,lookbehind:!0,greedy:!0},"string-interpolation":{pattern:/(?:f|fr|rf)(?:("""|''')[\s\S]*?\1|("|')(?:\\.|(?!\2)[^\\\r\n])*\2)/i,greedy:!0,inside:{interpolation:{pattern:/((?:^|[^{])(?:\{\{)*)\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}]|\{(?!\{)(?:[^{}])+\})+\})+\}/,lookbehind:!0,inside:{"format-spec":{pattern:/(:)[^:(){}]+(?=\}$)/,lookbehind:!0},"conversion-option":{pattern:/![sra](?=[:}]$)/,alias:"punctuation"},rest:null}},string:/[\s\S]+/}},"triple-quoted-string":{pattern:/(?:[rub]|br|rb)?("""|''')[\s\S]*?\1/i,greedy:!0,alias:"string"},string:{pattern:/(?:[rub]|br|rb)?("|')(?:\\.|(?!\1)[^\\\r\n])*\1/i,greedy:!0},function:{pattern:/((?:^|\s)def[ \t]+)[a-zA-Z_]\w*(?=\s*\()/g,lookbehind:!0},"class-name":{pattern:/(\bclass\s+)\w+/i,lookbehind:!0},decorator:{pattern:/(^[\t ]*)@\w+(?:\.\w+)*/m,lookbehind:!0,alias:["annotation","punctuation"],inside:{punctuation:/\./}},keyword:/\b(?:_(?=\s*:)|and|as|assert|async|await|break|case|class|continue|def|del|elif|else|except|exec|finally|for|from|global|if|import|in|is|lambda|match|nonlocal|not|or|pass|print|raise|return|try|while|with|yield)\b/,builtin:/\b(?:__import__|abs|all|any|apply|ascii|basestring|bin|bool|buffer|bytearray|bytes|callable|chr|classmethod|cmp|coerce|compile|complex|delattr|dict|dir|divmod|enumerate|eval|execfile|file|filter|float|format|frozenset|getattr|globals|hasattr|hash|help|hex|id|input|int|intern|isinstance|issubclass|iter|len|list|locals|long|map|max|memoryview|min|next|object|oct|open|ord|pow|property|range|raw_input|reduce|reload|repr|reversed|round|set|setattr|slice|sorted|staticmethod|str|sum|super|tuple|type|unichr|unicode|vars|xrange|zip)\b/,boolean:/\b(?:False|None|True)\b/,number:/\b0(?:b(?:_?[01])+|o(?:_?[0-7])+|x(?:_?[a-f0-9])+)\b|(?:\b\d+(?:_\d+)*(?:\.(?:\d+(?:_\d+)*)?)?|\B\.\d+(?:_\d+)*)(?:e[+-]?\d+(?:_\d+)*)?j?(?!\w)/i,operator:/[-+%=]=?|!=|:=|\*\*?=?|\/\/?=?|<[<=>]?|>[=>]?|[&|^~]/,punctuation:/[{}[\];(),.:]/},a.languages.python["string-interpolation"].inside.interpolation.inside.rest=a.languages.python,a.languages.py=a.languages.python,a.languages.reason=a.languages.extend("clike",{string:{pattern:/"(?:\\(?:\r\n|[\s\S])|[^\\\r\n"])*"/,greedy:!0},"class-name":/\b[A-Z]\w*/,keyword:/\b(?:and|as|assert|begin|class|constraint|do|done|downto|else|end|exception|external|for|fun|function|functor|if|in|include|inherit|initializer|lazy|let|method|module|mutable|new|nonrec|object|of|open|or|private|rec|sig|struct|switch|then|to|try|type|val|virtual|when|while|with)\b/,operator:/\.{3}|:[:=]|\|>|->|=(?:==?|>)?|<=?|>=?|[|^?'#!~`]|[+\-*\/]\.?|\b(?:asr|land|lor|lsl|lsr|lxor|mod)\b/}),a.languages.insertBefore("reason","class-name",{char:{pattern:/'(?:\\x[\da-f]{2}|\\o[0-3][0-7][0-7]|\\\d{3}|\\.|[^'\\\r\n])'/,greedy:!0},constructor:/\b[A-Z]\w*\b(?!\s*\.)/,label:{pattern:/\b[a-z]\w*(?=::)/,alias:"symbol"}}),delete a.languages.reason.function,function(e){e.languages.sass=e.languages.extend("css",{comment:{pattern:/^([ \t]*)\/[\/*].*(?:(?:\r?\n|\r)\1[ \t].+)*/m,lookbehind:!0,greedy:!0}}),e.languages.insertBefore("sass","atrule",{"atrule-line":{pattern:/^(?:[ \t]*)[@+=].+/m,greedy:!0,inside:{atrule:/(?:@[\w-]+|[+=])/}}}),delete e.languages.sass.atrule;var t=/\$[-\w]+|#\{\$[-\w]+\}/,n=[/[+*\/%]|[=!]=|<=?|>=?|\b(?:and|not|or)\b/,{pattern:/(\s)-(?=\s)/,lookbehind:!0}];e.languages.insertBefore("sass","property",{"variable-line":{pattern:/^[ \t]*\$.+/m,greedy:!0,inside:{punctuation:/:/,variable:t,operator:n}},"property-line":{pattern:/^[ \t]*(?:[^:\s]+ *:.*|:[^:\s].*)/m,greedy:!0,inside:{property:[/[^:\s]+(?=\s*:)/,{pattern:/(:)[^:\s]+/,lookbehind:!0}],punctuation:/:/,variable:t,operator:n,important:e.languages.sass.important}}}),delete e.languages.sass.property,delete e.languages.sass.important,e.languages.insertBefore("sass","punctuation",{selector:{pattern:/^([ \t]*)\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*(?:,(?:\r?\n|\r)\1[ \t]+\S(?:,[^,\r\n]+|[^,\r\n]*)(?:,[^,\r\n]+)*)*/m,lookbehind:!0,greedy:!0}})}(a),a.languages.scss=a.languages.extend("css",{comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},atrule:{pattern:/@[\w-](?:\([^()]+\)|[^()\s]|\s+(?!\s))*?(?=\s+[{;])/,inside:{rule:/@[\w-]+/}},url:/(?:[-a-z]+-)?url(?=\()/i,selector:{pattern:/(?=\S)[^@;{}()]?(?:[^@;{}()\s]|\s+(?!\s)|#\{\$[-\w]+\})+(?=\s*\{(?:\}|\s|[^}][^:{}]*[:{][^}]))/,inside:{parent:{pattern:/&/,alias:"important"},placeholder:/%[-\w]+/,variable:/\$[-\w]+|#\{\$[-\w]+\}/}},property:{pattern:/(?:[-\w]|\$[-\w]|#\{\$[-\w]+\})+(?=\s*:)/,inside:{variable:/\$[-\w]+|#\{\$[-\w]+\}/}}}),a.languages.insertBefore("scss","atrule",{keyword:[/@(?:content|debug|each|else(?: if)?|extend|for|forward|function|if|import|include|mixin|return|use|warn|while)\b/i,{pattern:/( )(?:from|through)(?= )/,lookbehind:!0}]}),a.languages.insertBefore("scss","important",{variable:/\$[-\w]+|#\{\$[-\w]+\}/}),a.languages.insertBefore("scss","function",{"module-modifier":{pattern:/\b(?:as|hide|show|with)\b/i,alias:"keyword"},placeholder:{pattern:/%[-\w]+/,alias:"selector"},statement:{pattern:/\B!(?:default|optional)\b/i,alias:"keyword"},boolean:/\b(?:false|true)\b/,null:{pattern:/\bnull\b/,alias:"keyword"},operator:{pattern:/(\s)(?:[-+*\/%]|[=!]=|<=?|>=?|and|not|or)(?=\s)/,lookbehind:!0}}),a.languages.scss.atrule.inside.rest=a.languages.scss,function(e){var t={pattern:/(\b\d+)(?:%|[a-z]+)/,lookbehind:!0},n={pattern:/(^|[^\w.-])-?(?:\d+(?:\.\d+)?|\.\d+)/,lookbehind:!0},r={comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0},url:{pattern:/\burl\((["']?).*?\1\)/i,greedy:!0},string:{pattern:/("|')(?:(?!\1)[^\\\r\n]|\\(?:\r\n|[\s\S]))*\1/,greedy:!0},interpolation:null,func:null,important:/\B!(?:important|optional)\b/i,keyword:{pattern:/(^|\s+)(?:(?:else|for|if|return|unless)(?=\s|$)|@[\w-]+)/,lookbehind:!0},hexcode:/#[\da-f]{3,6}/i,color:[/\b(?:AliceBlue|AntiqueWhite|Aqua|Aquamarine|Azure|Beige|Bisque|Black|BlanchedAlmond|Blue|BlueViolet|Brown|BurlyWood|CadetBlue|Chartreuse|Chocolate|Coral|CornflowerBlue|Cornsilk|Crimson|Cyan|DarkBlue|DarkCyan|DarkGoldenRod|DarkGr[ae]y|DarkGreen|DarkKhaki|DarkMagenta|DarkOliveGreen|DarkOrange|DarkOrchid|DarkRed|DarkSalmon|DarkSeaGreen|DarkSlateBlue|DarkSlateGr[ae]y|DarkTurquoise|DarkViolet|DeepPink|DeepSkyBlue|DimGr[ae]y|DodgerBlue|FireBrick|FloralWhite|ForestGreen|Fuchsia|Gainsboro|GhostWhite|Gold|GoldenRod|Gr[ae]y|Green|GreenYellow|HoneyDew|HotPink|IndianRed|Indigo|Ivory|Khaki|Lavender|LavenderBlush|LawnGreen|LemonChiffon|LightBlue|LightCoral|LightCyan|LightGoldenRodYellow|LightGr[ae]y|LightGreen|LightPink|LightSalmon|LightSeaGreen|LightSkyBlue|LightSlateGr[ae]y|LightSteelBlue|LightYellow|Lime|LimeGreen|Linen|Magenta|Maroon|MediumAquaMarine|MediumBlue|MediumOrchid|MediumPurple|MediumSeaGreen|MediumSlateBlue|MediumSpringGreen|MediumTurquoise|MediumVioletRed|MidnightBlue|MintCream|MistyRose|Moccasin|NavajoWhite|Navy|OldLace|Olive|OliveDrab|Orange|OrangeRed|Orchid|PaleGoldenRod|PaleGreen|PaleTurquoise|PaleVioletRed|PapayaWhip|PeachPuff|Peru|Pink|Plum|PowderBlue|Purple|Red|RosyBrown|RoyalBlue|SaddleBrown|Salmon|SandyBrown|SeaGreen|SeaShell|Sienna|Silver|SkyBlue|SlateBlue|SlateGr[ae]y|Snow|SpringGreen|SteelBlue|Tan|Teal|Thistle|Tomato|Transparent|Turquoise|Violet|Wheat|White|WhiteSmoke|Yellow|YellowGreen)\b/i,{pattern:/\b(?:hsl|rgb)\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*\)\B|\b(?:hsl|rgb)a\(\s*\d{1,3}\s*,\s*\d{1,3}%?\s*,\s*\d{1,3}%?\s*,\s*(?:0|0?\.\d+|1)\s*\)\B/i,inside:{unit:t,number:n,function:/[\w-]+(?=\()/,punctuation:/[(),]/}}],entity:/\\[\da-f]{1,8}/i,unit:t,boolean:/\b(?:false|true)\b/,operator:[/~|[+!\/%<>?=]=?|[-:]=|\*[*=]?|\.{2,3}|&&|\|\||\B-\B|\b(?:and|in|is(?: a| defined| not|nt)?|not|or)\b/],number:n,punctuation:/[{}()\[\];:,]/};r.interpolation={pattern:/\{[^\r\n}:]+\}/,alias:"variable",inside:{delimiter:{pattern:/^\{|\}$/,alias:"punctuation"},rest:r}},r.func={pattern:/[\w-]+\([^)]*\).*/,inside:{function:/^[^(]+/,rest:r}},e.languages.stylus={"atrule-declaration":{pattern:/(^[ \t]*)@.+/m,lookbehind:!0,inside:{atrule:/^@[\w-]+/,rest:r}},"variable-declaration":{pattern:/(^[ \t]*)[\w$-]+\s*.?=[ \t]*(?:\{[^{}]*\}|\S.*|$)/m,lookbehind:!0,inside:{variable:/^\S+/,rest:r}},statement:{pattern:/(^[ \t]*)(?:else|for|if|return|unless)[ \t].+/m,lookbehind:!0,inside:{keyword:/^\S+/,rest:r}},"property-declaration":{pattern:/((?:^|\{)([ \t]*))(?:[\w-]|\{[^}\r\n]+\})+(?:\s*:\s*|[ \t]+)(?!\s)[^{\r\n]*(?:;|[^{\r\n,]$(?!(?:\r?\n|\r)(?:\{|\2[ \t])))/m,lookbehind:!0,inside:{property:{pattern:/^[^\s:]+/,inside:{interpolation:r.interpolation}},rest:r}},selector:{pattern:/(^[ \t]*)(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)(?:(?:\r?\n|\r)(?:\1(?:(?=\S)(?:[^{}\r\n:()]|::?[\w-]+(?:\([^)\r\n]*\)|(?![\w-]))|\{[^}\r\n]+\})+)))*(?:,$|\{|(?=(?:\r?\n|\r)(?:\{|\1[ \t])))/m,lookbehind:!0,inside:{interpolation:r.interpolation,comment:r.comment,punctuation:/[{},]/}},func:r.func,string:r.string,comment:{pattern:/(^|[^\\])(?:\/\*[\s\S]*?\*\/|\/\/.*)/,lookbehind:!0,greedy:!0},interpolation:r.interpolation,punctuation:/[{}()\[\];:.]/}}(a),function(e){var t=e.util.clone(e.languages.typescript);e.languages.tsx=e.languages.extend("jsx",t),delete e.languages.tsx.parameter,delete e.languages.tsx["literal-property"];var n=e.languages.tsx.tag;n.pattern=RegExp(/(^|[^\w$]|(?=<\/))/.source+"(?:"+n.pattern.source+")",n.pattern.flags),n.lookbehind=!0}(a),a.languages.wasm={comment:[/\(;[\s\S]*?;\)/,{pattern:/;;.*/,greedy:!0}],string:{pattern:/"(?:\\[\s\S]|[^"\\])*"/,greedy:!0},keyword:[{pattern:/\b(?:align|offset)=/,inside:{operator:/=/}},{pattern:/\b(?:(?:f32|f64|i32|i64)(?:\.(?:abs|add|and|ceil|clz|const|convert_[su]\/i(?:32|64)|copysign|ctz|demote\/f64|div(?:_[su])?|eqz?|extend_[su]\/i32|floor|ge(?:_[su])?|gt(?:_[su])?|le(?:_[su])?|load(?:(?:8|16|32)_[su])?|lt(?:_[su])?|max|min|mul|neg?|nearest|or|popcnt|promote\/f32|reinterpret\/[fi](?:32|64)|rem_[su]|rot[lr]|shl|shr_[su]|sqrt|store(?:8|16|32)?|sub|trunc(?:_[su]\/f(?:32|64))?|wrap\/i64|xor))?|memory\.(?:grow|size))\b/,inside:{punctuation:/\./}},/\b(?:anyfunc|block|br(?:_if|_table)?|call(?:_indirect)?|data|drop|elem|else|end|export|func|get_(?:global|local)|global|if|import|local|loop|memory|module|mut|nop|offset|param|result|return|select|set_(?:global|local)|start|table|tee_local|then|type|unreachable)\b/],variable:/\$[\w!#$%&'*+\-./:<=>?@\\^`|~]+/,number:/[+-]?\b(?:\d(?:_?\d)*(?:\.\d(?:_?\d)*)?(?:[eE][+-]?\d(?:_?\d)*)?|0x[\da-fA-F](?:_?[\da-fA-F])*(?:\.[\da-fA-F](?:_?[\da-fA-D])*)?(?:[pP][+-]?\d(?:_?\d)*)?)\b|\binf\b|\bnan(?::0x[\da-fA-F](?:_?[\da-fA-D])*)?\b/,punctuation:/[()]/};const o=a},9901:e=>{e.exports&&(e.exports={core:{meta:{path:"components/prism-core.js",option:"mandatory"},core:"Core"},themes:{meta:{path:"themes/{id}.css",link:"index.html?theme={id}",exclusive:!0},prism:{title:"Default",option:"default"},"prism-dark":"Dark","prism-funky":"Funky","prism-okaidia":{title:"Okaidia",owner:"ocodia"},"prism-twilight":{title:"Twilight",owner:"remybach"},"prism-coy":{title:"Coy",owner:"tshedor"},"prism-solarizedlight":{title:"Solarized Light",owner:"hectormatos2011 "},"prism-tomorrow":{title:"Tomorrow Night",owner:"Rosey"}},languages:{meta:{path:"components/prism-{id}",noCSS:!0,examplesPath:"examples/prism-{id}",addCheckAll:!0},markup:{title:"Markup",alias:["html","xml","svg","mathml","ssml","atom","rss"],aliasTitles:{html:"HTML",xml:"XML",svg:"SVG",mathml:"MathML",ssml:"SSML",atom:"Atom",rss:"RSS"},option:"default"},css:{title:"CSS",option:"default",modify:"markup"},clike:{title:"C-like",option:"default"},javascript:{title:"JavaScript",require:"clike",modify:"markup",optional:"regex",alias:"js",option:"default"},abap:{title:"ABAP",owner:"dellagustin"},abnf:{title:"ABNF",owner:"RunDevelopment"},actionscript:{title:"ActionScript",require:"javascript",modify:"markup",owner:"Golmote"},ada:{title:"Ada",owner:"Lucretia"},agda:{title:"Agda",owner:"xy-ren"},al:{title:"AL",owner:"RunDevelopment"},antlr4:{title:"ANTLR4",alias:"g4",owner:"RunDevelopment"},apacheconf:{title:"Apache Configuration",owner:"GuiTeK"},apex:{title:"Apex",require:["clike","sql"],owner:"RunDevelopment"},apl:{title:"APL",owner:"ngn"},applescript:{title:"AppleScript",owner:"Golmote"},aql:{title:"AQL",owner:"RunDevelopment"},arduino:{title:"Arduino",require:"cpp",alias:"ino",owner:"dkern"},arff:{title:"ARFF",owner:"Golmote"},armasm:{title:"ARM Assembly",alias:"arm-asm",owner:"RunDevelopment"},arturo:{title:"Arturo",alias:"art",optional:["bash","css","javascript","markup","markdown","sql"],owner:"drkameleon"},asciidoc:{alias:"adoc",title:"AsciiDoc",owner:"Golmote"},aspnet:{title:"ASP.NET (C#)",require:["markup","csharp"],owner:"nauzilus"},asm6502:{title:"6502 Assembly",owner:"kzurawel"},asmatmel:{title:"Atmel AVR Assembly",owner:"cerkit"},autohotkey:{title:"AutoHotkey",owner:"aviaryan"},autoit:{title:"AutoIt",owner:"Golmote"},avisynth:{title:"AviSynth",alias:"avs",owner:"Zinfidel"},"avro-idl":{title:"Avro IDL",alias:"avdl",owner:"RunDevelopment"},awk:{title:"AWK",alias:"gawk",aliasTitles:{gawk:"GAWK"},owner:"RunDevelopment"},bash:{title:"Bash",alias:["sh","shell"],aliasTitles:{sh:"Shell",shell:"Shell"},owner:"zeitgeist87"},basic:{title:"BASIC",owner:"Golmote"},batch:{title:"Batch",owner:"Golmote"},bbcode:{title:"BBcode",alias:"shortcode",aliasTitles:{shortcode:"Shortcode"},owner:"RunDevelopment"},bbj:{title:"BBj",owner:"hyyan"},bicep:{title:"Bicep",owner:"johnnyreilly"},birb:{title:"Birb",require:"clike",owner:"Calamity210"},bison:{title:"Bison",require:"c",owner:"Golmote"},bnf:{title:"BNF",alias:"rbnf",aliasTitles:{rbnf:"RBNF"},owner:"RunDevelopment"},bqn:{title:"BQN",owner:"yewscion"},brainfuck:{title:"Brainfuck",owner:"Golmote"},brightscript:{title:"BrightScript",owner:"RunDevelopment"},bro:{title:"Bro",owner:"wayward710"},bsl:{title:"BSL (1C:Enterprise)",alias:"oscript",aliasTitles:{oscript:"OneScript"},owner:"Diversus23"},c:{title:"C",require:"clike",owner:"zeitgeist87"},csharp:{title:"C#",require:"clike",alias:["cs","dotnet"],owner:"mvalipour"},cpp:{title:"C++",require:"c",owner:"zeitgeist87"},cfscript:{title:"CFScript",require:"clike",alias:"cfc",owner:"mjclemente"},chaiscript:{title:"ChaiScript",require:["clike","cpp"],owner:"RunDevelopment"},cil:{title:"CIL",owner:"sbrl"},cilkc:{title:"Cilk/C",require:"c",alias:"cilk-c",owner:"OpenCilk"},cilkcpp:{title:"Cilk/C++",require:"cpp",alias:["cilk-cpp","cilk"],owner:"OpenCilk"},clojure:{title:"Clojure",owner:"troglotit"},cmake:{title:"CMake",owner:"mjrogozinski"},cobol:{title:"COBOL",owner:"RunDevelopment"},coffeescript:{title:"CoffeeScript",require:"javascript",alias:"coffee",owner:"R-osey"},concurnas:{title:"Concurnas",alias:"conc",owner:"jasontatton"},csp:{title:"Content-Security-Policy",owner:"ScottHelme"},cooklang:{title:"Cooklang",owner:"ahue"},coq:{title:"Coq",owner:"RunDevelopment"},crystal:{title:"Crystal",require:"ruby",owner:"MakeNowJust"},"css-extras":{title:"CSS Extras",require:"css",modify:"css",owner:"milesj"},csv:{title:"CSV",owner:"RunDevelopment"},cue:{title:"CUE",owner:"RunDevelopment"},cypher:{title:"Cypher",owner:"RunDevelopment"},d:{title:"D",require:"clike",owner:"Golmote"},dart:{title:"Dart",require:"clike",owner:"Golmote"},dataweave:{title:"DataWeave",owner:"machaval"},dax:{title:"DAX",owner:"peterbud"},dhall:{title:"Dhall",owner:"RunDevelopment"},diff:{title:"Diff",owner:"uranusjr"},django:{title:"Django/Jinja2",require:"markup-templating",alias:"jinja2",owner:"romanvm"},"dns-zone-file":{title:"DNS zone file",owner:"RunDevelopment",alias:"dns-zone"},docker:{title:"Docker",alias:"dockerfile",owner:"JustinBeckwith"},dot:{title:"DOT (Graphviz)",alias:"gv",optional:"markup",owner:"RunDevelopment"},ebnf:{title:"EBNF",owner:"RunDevelopment"},editorconfig:{title:"EditorConfig",owner:"osipxd"},eiffel:{title:"Eiffel",owner:"Conaclos"},ejs:{title:"EJS",require:["javascript","markup-templating"],owner:"RunDevelopment",alias:"eta",aliasTitles:{eta:"Eta"}},elixir:{title:"Elixir",owner:"Golmote"},elm:{title:"Elm",owner:"zwilias"},etlua:{title:"Embedded Lua templating",require:["lua","markup-templating"],owner:"RunDevelopment"},erb:{title:"ERB",require:["ruby","markup-templating"],owner:"Golmote"},erlang:{title:"Erlang",owner:"Golmote"},"excel-formula":{title:"Excel Formula",alias:["xlsx","xls"],owner:"RunDevelopment"},fsharp:{title:"F#",require:"clike",owner:"simonreynolds7"},factor:{title:"Factor",owner:"catb0t"},false:{title:"False",owner:"edukisto"},"firestore-security-rules":{title:"Firestore security rules",require:"clike",owner:"RunDevelopment"},flow:{title:"Flow",require:"javascript",owner:"Golmote"},fortran:{title:"Fortran",owner:"Golmote"},ftl:{title:"FreeMarker Template Language",require:"markup-templating",owner:"RunDevelopment"},gml:{title:"GameMaker Language",alias:"gamemakerlanguage",require:"clike",owner:"LiarOnce"},gap:{title:"GAP (CAS)",owner:"RunDevelopment"},gcode:{title:"G-code",owner:"RunDevelopment"},gdscript:{title:"GDScript",owner:"RunDevelopment"},gedcom:{title:"GEDCOM",owner:"Golmote"},gettext:{title:"gettext",alias:"po",owner:"RunDevelopment"},gherkin:{title:"Gherkin",owner:"hason"},git:{title:"Git",owner:"lgiraudel"},glsl:{title:"GLSL",require:"c",owner:"Golmote"},gn:{title:"GN",alias:"gni",owner:"RunDevelopment"},"linker-script":{title:"GNU Linker Script",alias:"ld",owner:"RunDevelopment"},go:{title:"Go",require:"clike",owner:"arnehormann"},"go-module":{title:"Go module",alias:"go-mod",owner:"RunDevelopment"},gradle:{title:"Gradle",require:"clike",owner:"zeabdelkhalek-badido18"},graphql:{title:"GraphQL",optional:"markdown",owner:"Golmote"},groovy:{title:"Groovy",require:"clike",owner:"robfletcher"},haml:{title:"Haml",require:"ruby",optional:["css","css-extras","coffeescript","erb","javascript","less","markdown","scss","textile"],owner:"Golmote"},handlebars:{title:"Handlebars",require:"markup-templating",alias:["hbs","mustache"],aliasTitles:{mustache:"Mustache"},owner:"Golmote"},haskell:{title:"Haskell",alias:"hs",owner:"bholst"},haxe:{title:"Haxe",require:"clike",optional:"regex",owner:"Golmote"},hcl:{title:"HCL",owner:"outsideris"},hlsl:{title:"HLSL",require:"c",owner:"RunDevelopment"},hoon:{title:"Hoon",owner:"matildepark"},http:{title:"HTTP",optional:["csp","css","hpkp","hsts","javascript","json","markup","uri"],owner:"danielgtaylor"},hpkp:{title:"HTTP Public-Key-Pins",owner:"ScottHelme"},hsts:{title:"HTTP Strict-Transport-Security",owner:"ScottHelme"},ichigojam:{title:"IchigoJam",owner:"BlueCocoa"},icon:{title:"Icon",owner:"Golmote"},"icu-message-format":{title:"ICU Message Format",owner:"RunDevelopment"},idris:{title:"Idris",alias:"idr",owner:"KeenS",require:"haskell"},ignore:{title:".ignore",owner:"osipxd",alias:["gitignore","hgignore","npmignore"],aliasTitles:{gitignore:".gitignore",hgignore:".hgignore",npmignore:".npmignore"}},inform7:{title:"Inform 7",owner:"Golmote"},ini:{title:"Ini",owner:"aviaryan"},io:{title:"Io",owner:"AlesTsurko"},j:{title:"J",owner:"Golmote"},java:{title:"Java",require:"clike",owner:"sherblot"},javadoc:{title:"JavaDoc",require:["markup","java","javadoclike"],modify:"java",optional:"scala",owner:"RunDevelopment"},javadoclike:{title:"JavaDoc-like",modify:["java","javascript","php"],owner:"RunDevelopment"},javastacktrace:{title:"Java stack trace",owner:"RunDevelopment"},jexl:{title:"Jexl",owner:"czosel"},jolie:{title:"Jolie",require:"clike",owner:"thesave"},jq:{title:"JQ",owner:"RunDevelopment"},jsdoc:{title:"JSDoc",require:["javascript","javadoclike","typescript"],modify:"javascript",optional:["actionscript","coffeescript"],owner:"RunDevelopment"},"js-extras":{title:"JS Extras",require:"javascript",modify:"javascript",optional:["actionscript","coffeescript","flow","n4js","typescript"],owner:"RunDevelopment"},json:{title:"JSON",alias:"webmanifest",aliasTitles:{webmanifest:"Web App Manifest"},owner:"CupOfTea696"},json5:{title:"JSON5",require:"json",owner:"RunDevelopment"},jsonp:{title:"JSONP",require:"json",owner:"RunDevelopment"},jsstacktrace:{title:"JS stack trace",owner:"sbrl"},"js-templates":{title:"JS Templates",require:"javascript",modify:"javascript",optional:["css","css-extras","graphql","markdown","markup","sql"],owner:"RunDevelopment"},julia:{title:"Julia",owner:"cdagnino"},keepalived:{title:"Keepalived Configure",owner:"dev-itsheng"},keyman:{title:"Keyman",owner:"mcdurdin"},kotlin:{title:"Kotlin",alias:["kt","kts"],aliasTitles:{kts:"Kotlin Script"},require:"clike",owner:"Golmote"},kumir:{title:"KuMir (\u041a\u0443\u041c\u0438\u0440)",alias:"kum",owner:"edukisto"},kusto:{title:"Kusto",owner:"RunDevelopment"},latex:{title:"LaTeX",alias:["tex","context"],aliasTitles:{tex:"TeX",context:"ConTeXt"},owner:"japborst"},latte:{title:"Latte",require:["clike","markup-templating","php"],owner:"nette"},less:{title:"Less",require:"css",optional:"css-extras",owner:"Golmote"},lilypond:{title:"LilyPond",require:"scheme",alias:"ly",owner:"RunDevelopment"},liquid:{title:"Liquid",require:"markup-templating",owner:"cinhtau"},lisp:{title:"Lisp",alias:["emacs","elisp","emacs-lisp"],owner:"JuanCaicedo"},livescript:{title:"LiveScript",owner:"Golmote"},llvm:{title:"LLVM IR",owner:"porglezomp"},log:{title:"Log file",optional:"javastacktrace",owner:"RunDevelopment"},lolcode:{title:"LOLCODE",owner:"Golmote"},lua:{title:"Lua",owner:"Golmote"},magma:{title:"Magma (CAS)",owner:"RunDevelopment"},makefile:{title:"Makefile",owner:"Golmote"},markdown:{title:"Markdown",require:"markup",optional:"yaml",alias:"md",owner:"Golmote"},"markup-templating":{title:"Markup templating",require:"markup",owner:"Golmote"},mata:{title:"Mata",owner:"RunDevelopment"},matlab:{title:"MATLAB",owner:"Golmote"},maxscript:{title:"MAXScript",owner:"RunDevelopment"},mel:{title:"MEL",owner:"Golmote"},mermaid:{title:"Mermaid",owner:"RunDevelopment"},metafont:{title:"METAFONT",owner:"LaeriExNihilo"},mizar:{title:"Mizar",owner:"Golmote"},mongodb:{title:"MongoDB",owner:"airs0urce",require:"javascript"},monkey:{title:"Monkey",owner:"Golmote"},moonscript:{title:"MoonScript",alias:"moon",owner:"RunDevelopment"},n1ql:{title:"N1QL",owner:"TMWilds"},n4js:{title:"N4JS",require:"javascript",optional:"jsdoc",alias:"n4jsd",owner:"bsmith-n4"},"nand2tetris-hdl":{title:"Nand To Tetris HDL",owner:"stephanmax"},naniscript:{title:"Naninovel Script",owner:"Elringus",alias:"nani"},nasm:{title:"NASM",owner:"rbmj"},neon:{title:"NEON",owner:"nette"},nevod:{title:"Nevod",owner:"nezaboodka"},nginx:{title:"nginx",owner:"volado"},nim:{title:"Nim",owner:"Golmote"},nix:{title:"Nix",owner:"Golmote"},nsis:{title:"NSIS",owner:"idleberg"},objectivec:{title:"Objective-C",require:"c",alias:"objc",owner:"uranusjr"},ocaml:{title:"OCaml",owner:"Golmote"},odin:{title:"Odin",owner:"edukisto"},opencl:{title:"OpenCL",require:"c",modify:["c","cpp"],owner:"Milania1"},openqasm:{title:"OpenQasm",alias:"qasm",owner:"RunDevelopment"},oz:{title:"Oz",owner:"Golmote"},parigp:{title:"PARI/GP",owner:"Golmote"},parser:{title:"Parser",require:"markup",owner:"Golmote"},pascal:{title:"Pascal",alias:"objectpascal",aliasTitles:{objectpascal:"Object Pascal"},owner:"Golmote"},pascaligo:{title:"Pascaligo",owner:"DefinitelyNotAGoat"},psl:{title:"PATROL Scripting Language",owner:"bertysentry"},pcaxis:{title:"PC-Axis",alias:"px",owner:"RunDevelopment"},peoplecode:{title:"PeopleCode",alias:"pcode",owner:"RunDevelopment"},perl:{title:"Perl",owner:"Golmote"},php:{title:"PHP",require:"markup-templating",owner:"milesj"},phpdoc:{title:"PHPDoc",require:["php","javadoclike"],modify:"php",owner:"RunDevelopment"},"php-extras":{title:"PHP Extras",require:"php",modify:"php",owner:"milesj"},"plant-uml":{title:"PlantUML",alias:"plantuml",owner:"RunDevelopment"},plsql:{title:"PL/SQL",require:"sql",owner:"Golmote"},powerquery:{title:"PowerQuery",alias:["pq","mscript"],owner:"peterbud"},powershell:{title:"PowerShell",owner:"nauzilus"},processing:{title:"Processing",require:"clike",owner:"Golmote"},prolog:{title:"Prolog",owner:"Golmote"},promql:{title:"PromQL",owner:"arendjr"},properties:{title:".properties",owner:"Golmote"},protobuf:{title:"Protocol Buffers",require:"clike",owner:"just-boris"},pug:{title:"Pug",require:["markup","javascript"],optional:["coffeescript","ejs","handlebars","less","livescript","markdown","scss","stylus","twig"],owner:"Golmote"},puppet:{title:"Puppet",owner:"Golmote"},pure:{title:"Pure",optional:["c","cpp","fortran"],owner:"Golmote"},purebasic:{title:"PureBasic",require:"clike",alias:"pbfasm",owner:"HeX0R101"},purescript:{title:"PureScript",require:"haskell",alias:"purs",owner:"sriharshachilakapati"},python:{title:"Python",alias:"py",owner:"multipetros"},qsharp:{title:"Q#",require:"clike",alias:"qs",owner:"fedonman"},q:{title:"Q (kdb+ database)",owner:"Golmote"},qml:{title:"QML",require:"javascript",owner:"RunDevelopment"},qore:{title:"Qore",require:"clike",owner:"temnroegg"},r:{title:"R",owner:"Golmote"},racket:{title:"Racket",require:"scheme",alias:"rkt",owner:"RunDevelopment"},cshtml:{title:"Razor C#",alias:"razor",require:["markup","csharp"],optional:["css","css-extras","javascript","js-extras"],owner:"RunDevelopment"},jsx:{title:"React JSX",require:["markup","javascript"],optional:["jsdoc","js-extras","js-templates"],owner:"vkbansal"},tsx:{title:"React TSX",require:["jsx","typescript"]},reason:{title:"Reason",require:"clike",owner:"Golmote"},regex:{title:"Regex",owner:"RunDevelopment"},rego:{title:"Rego",owner:"JordanSh"},renpy:{title:"Ren'py",alias:"rpy",owner:"HyuchiaDiego"},rescript:{title:"ReScript",alias:"res",owner:"vmarcosp"},rest:{title:"reST (reStructuredText)",owner:"Golmote"},rip:{title:"Rip",owner:"ravinggenius"},roboconf:{title:"Roboconf",owner:"Golmote"},robotframework:{title:"Robot Framework",alias:"robot",owner:"RunDevelopment"},ruby:{title:"Ruby",require:"clike",alias:"rb",owner:"samflores"},rust:{title:"Rust",owner:"Golmote"},sas:{title:"SAS",optional:["groovy","lua","sql"],owner:"Golmote"},sass:{title:"Sass (Sass)",require:"css",optional:"css-extras",owner:"Golmote"},scss:{title:"Sass (SCSS)",require:"css",optional:"css-extras",owner:"MoOx"},scala:{title:"Scala",require:"java",owner:"jozic"},scheme:{title:"Scheme",owner:"bacchus123"},"shell-session":{title:"Shell session",require:"bash",alias:["sh-session","shellsession"],owner:"RunDevelopment"},smali:{title:"Smali",owner:"RunDevelopment"},smalltalk:{title:"Smalltalk",owner:"Golmote"},smarty:{title:"Smarty",require:"markup-templating",optional:"php",owner:"Golmote"},sml:{title:"SML",alias:"smlnj",aliasTitles:{smlnj:"SML/NJ"},owner:"RunDevelopment"},solidity:{title:"Solidity (Ethereum)",alias:"sol",require:"clike",owner:"glachaud"},"solution-file":{title:"Solution file",alias:"sln",owner:"RunDevelopment"},soy:{title:"Soy (Closure Template)",require:"markup-templating",owner:"Golmote"},sparql:{title:"SPARQL",require:"turtle",owner:"Triply-Dev",alias:"rq"},"splunk-spl":{title:"Splunk SPL",owner:"RunDevelopment"},sqf:{title:"SQF: Status Quo Function (Arma 3)",require:"clike",owner:"RunDevelopment"},sql:{title:"SQL",owner:"multipetros"},squirrel:{title:"Squirrel",require:"clike",owner:"RunDevelopment"},stan:{title:"Stan",owner:"RunDevelopment"},stata:{title:"Stata Ado",require:["mata","java","python"],owner:"RunDevelopment"},iecst:{title:"Structured Text (IEC 61131-3)",owner:"serhioromano"},stylus:{title:"Stylus",owner:"vkbansal"},supercollider:{title:"SuperCollider",alias:"sclang",owner:"RunDevelopment"},swift:{title:"Swift",owner:"chrischares"},systemd:{title:"Systemd configuration file",owner:"RunDevelopment"},"t4-templating":{title:"T4 templating",owner:"RunDevelopment"},"t4-cs":{title:"T4 Text Templates (C#)",require:["t4-templating","csharp"],alias:"t4",owner:"RunDevelopment"},"t4-vb":{title:"T4 Text Templates (VB)",require:["t4-templating","vbnet"],owner:"RunDevelopment"},tap:{title:"TAP",owner:"isaacs",require:"yaml"},tcl:{title:"Tcl",owner:"PeterChaplin"},tt2:{title:"Template Toolkit 2",require:["clike","markup-templating"],owner:"gflohr"},textile:{title:"Textile",require:"markup",optional:"css",owner:"Golmote"},toml:{title:"TOML",owner:"RunDevelopment"},tremor:{title:"Tremor",alias:["trickle","troy"],owner:"darach",aliasTitles:{trickle:"trickle",troy:"troy"}},turtle:{title:"Turtle",alias:"trig",aliasTitles:{trig:"TriG"},owner:"jakubklimek"},twig:{title:"Twig",require:"markup-templating",owner:"brandonkelly"},typescript:{title:"TypeScript",require:"javascript",optional:"js-templates",alias:"ts",owner:"vkbansal"},typoscript:{title:"TypoScript",alias:"tsconfig",aliasTitles:{tsconfig:"TSConfig"},owner:"dkern"},unrealscript:{title:"UnrealScript",alias:["uscript","uc"],owner:"RunDevelopment"},uorazor:{title:"UO Razor Script",owner:"jaseowns"},uri:{title:"URI",alias:"url",aliasTitles:{url:"URL"},owner:"RunDevelopment"},v:{title:"V",require:"clike",owner:"taggon"},vala:{title:"Vala",require:"clike",optional:"regex",owner:"TemplarVolk"},vbnet:{title:"VB.Net",require:"basic",owner:"Bigsby"},velocity:{title:"Velocity",require:"markup",owner:"Golmote"},verilog:{title:"Verilog",owner:"a-rey"},vhdl:{title:"VHDL",owner:"a-rey"},vim:{title:"vim",owner:"westonganger"},"visual-basic":{title:"Visual Basic",alias:["vb","vba"],aliasTitles:{vba:"VBA"},owner:"Golmote"},warpscript:{title:"WarpScript",owner:"RunDevelopment"},wasm:{title:"WebAssembly",owner:"Golmote"},"web-idl":{title:"Web IDL",alias:"webidl",owner:"RunDevelopment"},wgsl:{title:"WGSL",owner:"Dr4gonthree"},wiki:{title:"Wiki markup",require:"markup",owner:"Golmote"},wolfram:{title:"Wolfram language",alias:["mathematica","nb","wl"],aliasTitles:{mathematica:"Mathematica",nb:"Mathematica Notebook"},owner:"msollami"},wren:{title:"Wren",owner:"clsource"},xeora:{title:"Xeora",require:"markup",alias:"xeoracube",aliasTitles:{xeoracube:"XeoraCube"},owner:"freakmaxi"},"xml-doc":{title:"XML doc (.net)",require:"markup",modify:["csharp","fsharp","vbnet"],owner:"RunDevelopment"},xojo:{title:"Xojo (REALbasic)",owner:"Golmote"},xquery:{title:"XQuery",require:"markup",owner:"Golmote"},yaml:{title:"YAML",alias:"yml",owner:"hason"},yang:{title:"YANG",owner:"RunDevelopment"},zig:{title:"Zig",owner:"RunDevelopment"}},plugins:{meta:{path:"plugins/{id}/prism-{id}",link:"plugins/{id}/"},"line-highlight":{title:"Line Highlight",description:"Highlights specific lines and/or line ranges."},"line-numbers":{title:"Line Numbers",description:"Line number at the beginning of code lines.",owner:"kuba-kubula"},"show-invisibles":{title:"Show Invisibles",description:"Show hidden characters such as tabs and line breaks.",optional:["autolinker","data-uri-highlight"]},autolinker:{title:"Autolinker",description:"Converts URLs and emails in code to clickable links. Parses Markdown links in comments."},wpd:{title:"WebPlatform Docs",description:'Makes tokens link to <a href="https://webplatform.github.io/docs/">WebPlatform.org documentation</a>. The links open in a new tab.'},"custom-class":{title:"Custom Class",description:"This plugin allows you to prefix Prism's default classes (<code>.comment</code> can become <code>.namespace--comment</code>) or replace them with your defined ones (like <code>.editor__comment</code>). You can even add new classes.",owner:"dvkndn",noCSS:!0},"file-highlight":{title:"File Highlight",description:"Fetch external files and highlight them with Prism. Used on the Prism website itself.",noCSS:!0},"show-language":{title:"Show Language",description:"Display the highlighted language in code blocks (inline code does not show the label).",owner:"nauzilus",noCSS:!0,require:"toolbar"},"jsonp-highlight":{title:"JSONP Highlight",description:"Fetch content with JSONP and highlight some interesting content (e.g. GitHub/Gists or Bitbucket API).",noCSS:!0,owner:"nauzilus"},"highlight-keywords":{title:"Highlight Keywords",description:"Adds special CSS classes for each keyword for fine-grained highlighting.",owner:"vkbansal",noCSS:!0},"remove-initial-line-feed":{title:"Remove initial line feed",description:"Removes the initial line feed in code blocks.",owner:"Golmote",noCSS:!0},"inline-color":{title:"Inline color",description:"Adds a small inline preview for colors in style sheets.",require:"css-extras",owner:"RunDevelopment"},previewers:{title:"Previewers",description:"Previewers for angles, colors, gradients, easing and time.",require:"css-extras",owner:"Golmote"},autoloader:{title:"Autoloader",description:"Automatically loads the needed languages to highlight the code blocks.",owner:"Golmote",noCSS:!0},"keep-markup":{title:"Keep Markup",description:"Prevents custom markup from being dropped out during highlighting.",owner:"Golmote",optional:"normalize-whitespace",noCSS:!0},"command-line":{title:"Command Line",description:"Display a command line with a prompt and, optionally, the output/response from the commands.",owner:"chriswells0"},"unescaped-markup":{title:"Unescaped Markup",description:"Write markup without having to escape anything."},"normalize-whitespace":{title:"Normalize Whitespace",description:"Supports multiple operations to normalize whitespace in code blocks.",owner:"zeitgeist87",optional:"unescaped-markup",noCSS:!0},"data-uri-highlight":{title:"Data-URI Highlight",description:"Highlights data-URI contents.",owner:"Golmote",noCSS:!0},toolbar:{title:"Toolbar",description:"Attach a toolbar for plugins to easily register buttons on the top of a code block.",owner:"mAAdhaTTah"},"copy-to-clipboard":{title:"Copy to Clipboard Button",description:"Add a button that copies the code block to the clipboard when clicked.",owner:"mAAdhaTTah",require:"toolbar",noCSS:!0},"download-button":{title:"Download Button",description:"A button in the toolbar of a code block adding a convenient way to download a code file.",owner:"Golmote",require:"toolbar",noCSS:!0},"match-braces":{title:"Match braces",description:"Highlights matching braces.",owner:"RunDevelopment"},"diff-highlight":{title:"Diff Highlight",description:"Highlights the code inside diff blocks.",owner:"RunDevelopment",require:"diff"},"filter-highlight-all":{title:"Filter highlightAll",description:"Filters the elements the <code>highlightAll</code> and <code>highlightAllUnder</code> methods actually highlight.",owner:"RunDevelopment",noCSS:!0},treeview:{title:"Treeview",description:"A language with special styles to highlight file system tree structures.",owner:"Golmote"}}})},2885:(e,t,n)=>{const r=n(9901),a=n(9642),o=new Set;function i(e){void 0===e?e=Object.keys(r.languages).filter((e=>"meta"!=e)):Array.isArray(e)||(e=[e]);const t=[...o,...Object.keys(Prism.languages)];a(r,e,t).load((e=>{if(!(e in r.languages))return void(i.silent||console.warn("Language does not exist: "+e));const t="./prism-"+e;delete n.c[n(6500).resolve(t)],delete Prism.languages[e],n(6500)(t),o.add(e)}))}i.silent=!1,e.exports=i},6726:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6726},6500:(e,t,n)=>{var r={"./":2885};function a(e){var t=o(e);return n(t)}function o(e){if(!n.o(r,e)){var t=new Error("Cannot find module '"+e+"'");throw t.code="MODULE_NOT_FOUND",t}return r[e]}a.keys=function(){return Object.keys(r)},a.resolve=o,e.exports=a,a.id=6500},9642:e=>{"use strict";var t=function(){var e=function(){};function t(e,t){Array.isArray(e)?e.forEach(t):null!=e&&t(e,0)}function n(e){for(var t={},n=0,r=e.length;n<r;n++)t[e[n]]=!0;return t}function r(e){var n={},r=[];function a(r,o){if(!(r in n)){o.push(r);var i=o.indexOf(r);if(i<o.length-1)throw new Error("Circular dependency: "+o.slice(i).join(" -> "));var l={},s=e[r];if(s){function u(t){if(!(t in e))throw new Error(r+" depends on an unknown component "+t);if(!(t in l))for(var i in a(t,o),l[t]=!0,n[t])l[i]=!0}t(s.require,u),t(s.optional,u),t(s.modify,u)}n[r]=l,o.pop()}}return function(e){var t=n[e];return t||(a(e,r),t=n[e]),t}}function a(e){for(var t in e)return!0;return!1}return function(o,i,l){var s=function(e){var t={};for(var n in e){var r=e[n];for(var a in r)if("meta"!=a){var o=r[a];t[a]="string"==typeof o?{title:o}:o}}return t}(o),u=function(e){var n;return function(r){if(r in e)return r;if(!n)for(var a in n={},e){var o=e[a];t(o&&o.alias,(function(t){if(t in n)throw new Error(t+" cannot be alias for both "+a+" and "+n[t]);if(t in e)throw new Error(t+" cannot be alias of "+a+" because it is a component.");n[t]=a}))}return n[r]||r}}(s);i=i.map(u),l=(l||[]).map(u);var c=n(i),d=n(l);i.forEach((function e(n){var r=s[n];t(r&&r.require,(function(t){t in d||(c[t]=!0,e(t))}))}));for(var f,p=r(s),m=c;a(m);){for(var h in f={},m){var g=s[h];t(g&&g.modify,(function(e){e in d&&(f[e]=!0)}))}for(var b in d)if(!(b in c))for(var v in p(b))if(v in c){f[b]=!0;break}for(var y in m=f)c[y]=!0}var w={getIds:function(){var e=[];return w.load((function(t){e.push(t)})),e},load:function(t,n){return function(t,n,r,a){var o=a?a.series:void 0,i=a?a.parallel:e,l={},s={};function u(e){if(e in l)return l[e];s[e]=!0;var a,c=[];for(var d in t(e))d in n&&c.push(d);if(0===c.length)a=r(e);else{var f=i(c.map((function(e){var t=u(e);return delete s[e],t})));o?a=o(f,(function(){return r(e)})):r(e)}return l[e]=a}for(var c in n)u(c);var d=[];for(var f in s)d.push(l[f]);return i(d)}(p,c,t,n)}};return w}}();e.exports=t},2703:(e,t,n)=>{"use strict";var r=n(414);function a(){}function o(){}o.resetWarningCache=a,e.exports=function(){function e(e,t,n,a,o,i){if(i!==r){var l=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw l.name="Invariant Violation",l}}function t(){return e}e.isRequired=e;var n={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:o,resetWarningCache:a};return n.PropTypes=n,n}},5697:(e,t,n)=>{e.exports=n(2703)()},414:e=>{"use strict";e.exports="SECRET_DO_NOT_PASS_THIS_OR_YOU_WILL_BE_FIRED"},4448:(e,t,n)=>{"use strict";var r=n(7294),a=n(7418),o=n(3840);function i(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}if(!r)throw Error(i(227));var l=new Set,s={};function u(e,t){c(e,t),c(e+"Capture",t)}function c(e,t){for(s[e]=t,e=0;e<t.length;e++)l.add(t[e])}var d=!("undefined"==typeof window||void 0===window.document||void 0===window.document.createElement),f=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p=Object.prototype.hasOwnProperty,m={},h={};function g(e,t,n,r,a,o,i){this.acceptsBooleans=2===t||3===t||4===t,this.attributeName=r,this.attributeNamespace=a,this.mustUseProperty=n,this.propertyName=e,this.type=t,this.sanitizeURL=o,this.removeEmptyString=i}var b={};"children dangerouslySetInnerHTML defaultValue defaultChecked innerHTML suppressContentEditableWarning suppressHydrationWarning style".split(" ").forEach((function(e){b[e]=new g(e,0,!1,e,null,!1,!1)})),[["acceptCharset","accept-charset"],["className","class"],["htmlFor","for"],["httpEquiv","http-equiv"]].forEach((function(e){var t=e[0];b[t]=new g(t,1,!1,e[1],null,!1,!1)})),["contentEditable","draggable","spellCheck","value"].forEach((function(e){b[e]=new g(e,2,!1,e.toLowerCase(),null,!1,!1)})),["autoReverse","externalResourcesRequired","focusable","preserveAlpha"].forEach((function(e){b[e]=new g(e,2,!1,e,null,!1,!1)})),"allowFullScreen async autoFocus autoPlay controls default defer disabled disablePictureInPicture disableRemotePlayback formNoValidate hidden loop noModule noValidate open playsInline readOnly required reversed scoped seamless itemScope".split(" ").forEach((function(e){b[e]=new g(e,3,!1,e.toLowerCase(),null,!1,!1)})),["checked","multiple","muted","selected"].forEach((function(e){b[e]=new g(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){b[e]=new g(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){b[e]=new g(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((function(e){b[e]=new g(e,5,!1,e.toLowerCase(),null,!1,!1)}));var v=/[\-:]([a-z])/g;function y(e){return e[1].toUpperCase()}function w(e,t,n,r){var a=b.hasOwnProperty(t)?b[t]:null;(null!==a?0===a.type:!r&&(2<t.length&&("o"===t[0]||"O"===t[0])&&("n"===t[1]||"N"===t[1])))||(function(e,t,n,r){if(null==t||function(e,t,n,r){if(null!==n&&0===n.type)return!1;switch(typeof t){case"function":case"symbol":return!0;case"boolean":return!r&&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)||1>t}return!1}(t,n,a,r)&&(n=null),r||null===a?function(e){return!!p.call(h,e)||!p.call(m,e)&&(f.test(e)?h[e]=!0:(m[e]=!0,!1))}(t)&&(null===n?e.removeAttribute(t):e.setAttribute(t,""+n)):a.mustUseProperty?e[a.propertyName]=null===n?3!==a.type&&"":n:(t=a.attributeName,r=a.attributeNamespace,null===n?e.removeAttribute(t):(n=3===(a=a.type)||4===a&&!0===n?"":""+n,r?e.setAttributeNS(r,t,n):e.setAttribute(t,n))))}"accent-height alignment-baseline arabic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adjust font-stretch font-style font-variant font-weight glyph-name glyph-orientation-horizontal glyph-orientation-vertical horiz-adv-x horiz-origin-x image-rendering letter-spacing lighting-color marker-end marker-mid marker-start overline-position overline-thickness paint-order panose-1 pointer-events rendering-intent shape-rendering stop-color stop-opacity strikethrough-position strikethrough-thickness stroke-dasharray stroke-dashoffset stroke-linecap stroke-linejoin stroke-miterlimit stroke-opacity stroke-width text-anchor text-decoration text-rendering underline-position underline-thickness unicode-bidi unicode-range units-per-em v-alphabetic v-hanging v-ideographic v-mathematical vector-effect vert-adv-y vert-origin-x vert-origin-y word-spacing writing-mode xmlns:xlink x-height".split(" ").forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,null,!1,!1)})),"xlink:actuate xlink:arcrole xlink:role xlink:show xlink:title xlink:type".split(" ").forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,"http://www.w3.org/1999/xlink",!1,!1)})),["xml:base","xml:lang","xml:space"].forEach((function(e){var t=e.replace(v,y);b[t]=new g(t,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){b[e]=new g(e,1,!1,e.toLowerCase(),null,!1,!1)})),b.xlinkHref=new g("xlinkHref",1,!1,"xlink:href","http://www.w3.org/1999/xlink",!0,!1),["src","href","action","formAction"].forEach((function(e){b[e]=new g(e,1,!1,e.toLowerCase(),null,!0,!0)}));var k=r.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED,S=60103,E=60106,x=60107,T=60108,C=60114,_=60109,A=60110,L=60112,R=60113,P=60120,N=60115,O=60116,I=60121,D=60128,M=60129,z=60130,B=60131;if("function"==typeof Symbol&&Symbol.for){var F=Symbol.for;S=F("react.element"),E=F("react.portal"),x=F("react.fragment"),T=F("react.strict_mode"),C=F("react.profiler"),_=F("react.provider"),A=F("react.context"),L=F("react.forward_ref"),R=F("react.suspense"),P=F("react.suspense_list"),N=F("react.memo"),O=F("react.lazy"),I=F("react.block"),F("react.scope"),D=F("react.opaque.id"),M=F("react.debug_trace_mode"),z=F("react.offscreen"),B=F("react.legacy_hidden")}var j,U="function"==typeof Symbol&&Symbol.iterator;function $(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=U&&e[U]||e["@@iterator"])?e:null}function q(e){if(void 0===j)try{throw Error()}catch(n){var t=n.stack.trim().match(/\n( *(at )?)/);j=t&&t[1]||""}return"\n"+j+e}var H=!1;function G(e,t){if(!e||H)return"";H=!0;var n=Error.prepareStackTrace;Error.prepareStackTrace=void 0;try{if(t)if(t=function(){throw Error()},Object.defineProperty(t.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.construct(t,[])}catch(s){var r=s}Reflect.construct(e,[],t)}else{try{t.call()}catch(s){r=s}e.call(t.prototype)}else{try{throw Error()}catch(s){r=s}e()}}catch(s){if(s&&r&&"string"==typeof s.stack){for(var a=s.stack.split("\n"),o=r.stack.split("\n"),i=a.length-1,l=o.length-1;1<=i&&0<=l&&a[i]!==o[l];)l--;for(;1<=i&&0<=l;i--,l--)if(a[i]!==o[l]){if(1!==i||1!==l)do{if(i--,0>--l||a[i]!==o[l])return"\n"+a[i].replace(" at new "," at ")}while(1<=i&&0<=l);break}}}finally{H=!1,Error.prepareStackTrace=n}return(e=e?e.displayName||e.name:"")?q(e):""}function Z(e){switch(e.tag){case 5:return q(e.type);case 16:return q("Lazy");case 13:return q("Suspense");case 19:return q("SuspenseList");case 0:case 2:case 15:return e=G(e.type,!1);case 11:return e=G(e.type.render,!1);case 22:return e=G(e.type._render,!1);case 1:return e=G(e.type,!0);default:return""}}function V(e){if(null==e)return null;if("function"==typeof e)return e.displayName||e.name||null;if("string"==typeof e)return e;switch(e){case x:return"Fragment";case E:return"Portal";case C:return"Profiler";case T:return"StrictMode";case R:return"Suspense";case P:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case A:return(e.displayName||"Context")+".Consumer";case _:return(e._context.displayName||"Context")+".Provider";case L:var t=e.render;return t=t.displayName||t.name||"",e.displayName||(""!==t?"ForwardRef("+t+")":"ForwardRef");case N:return V(e.type);case I:return V(e._render);case O:t=e._payload,e=e._init;try{return V(e(t))}catch(n){}}return null}function W(e){switch(typeof e){case"boolean":case"number":case"object":case"string":case"undefined":return e;default:return""}}function K(e){var t=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===t||"radio"===t)}function Y(e){e._valueTracker||(e._valueTracker=function(e){var t=K(e)?"checked":"value",n=Object.getOwnPropertyDescriptor(e.constructor.prototype,t),r=""+e[t];if(!e.hasOwnProperty(t)&&void 0!==n&&"function"==typeof n.get&&"function"==typeof n.set){var a=n.get,o=n.set;return Object.defineProperty(e,t,{configurable:!0,get:function(){return a.call(this)},set:function(e){r=""+e,o.call(this,e)}}),Object.defineProperty(e,t,{enumerable:n.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[t]}}}}(e))}function Q(e){if(!e)return!1;var t=e._valueTracker;if(!t)return!0;var n=t.getValue(),r="";return e&&(r=K(e)?e.checked?"true":"false":e.value),(e=r)!==n&&(t.setValue(e),!0)}function X(e){if(void 0===(e=e||("undefined"!=typeof document?document:void 0)))return null;try{return e.activeElement||e.body}catch(t){return e.body}}function J(e,t){var n=t.checked;return a({},t,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=n?n:e._wrapperState.initialChecked})}function ee(e,t){var n=null==t.defaultValue?"":t.defaultValue,r=null!=t.checked?t.checked:t.defaultChecked;n=W(null!=t.value?t.value:n),e._wrapperState={initialChecked:r,initialValue:n,controlled:"checkbox"===t.type||"radio"===t.type?null!=t.checked:null!=t.value}}function te(e,t){null!=(t=t.checked)&&w(e,"checked",t,!1)}function ne(e,t){te(e,t);var n=W(t.value),r=t.type;if(null!=n)"number"===r?(0===n&&""===e.value||e.value!=n)&&(e.value=""+n):e.value!==""+n&&(e.value=""+n);else if("submit"===r||"reset"===r)return void e.removeAttribute("value");t.hasOwnProperty("value")?ae(e,t.type,n):t.hasOwnProperty("defaultValue")&&ae(e,t.type,W(t.defaultValue)),null==t.checked&&null!=t.defaultChecked&&(e.defaultChecked=!!t.defaultChecked)}function re(e,t,n){if(t.hasOwnProperty("value")||t.hasOwnProperty("defaultValue")){var r=t.type;if(!("submit"!==r&&"reset"!==r||void 0!==t.value&&null!==t.value))return;t=""+e._wrapperState.initialValue,n||t===e.value||(e.value=t),e.defaultValue=t}""!==(n=e.name)&&(e.name=""),e.defaultChecked=!!e._wrapperState.initialChecked,""!==n&&(e.name=n)}function ae(e,t,n){"number"===t&&X(e.ownerDocument)===e||(null==n?e.defaultValue=""+e._wrapperState.initialValue:e.defaultValue!==""+n&&(e.defaultValue=""+n))}function oe(e,t){return e=a({children:void 0},t),(t=function(e){var t="";return r.Children.forEach(e,(function(e){null!=e&&(t+=e)})),t}(t.children))&&(e.children=t),e}function ie(e,t,n,r){if(e=e.options,t){t={};for(var a=0;a<n.length;a++)t["$"+n[a]]=!0;for(n=0;n<e.length;n++)a=t.hasOwnProperty("$"+e[n].value),e[n].selected!==a&&(e[n].selected=a),a&&r&&(e[n].defaultSelected=!0)}else{for(n=""+W(n),t=null,a=0;a<e.length;a++){if(e[a].value===n)return e[a].selected=!0,void(r&&(e[a].defaultSelected=!0));null!==t||e[a].disabled||(t=e[a])}null!==t&&(t.selected=!0)}}function le(e,t){if(null!=t.dangerouslySetInnerHTML)throw Error(i(91));return a({},t,{value:void 0,defaultValue:void 0,children:""+e._wrapperState.initialValue})}function se(e,t){var n=t.value;if(null==n){if(n=t.children,t=t.defaultValue,null!=n){if(null!=t)throw Error(i(92));if(Array.isArray(n)){if(!(1>=n.length))throw Error(i(93));n=n[0]}t=n}null==t&&(t=""),n=t}e._wrapperState={initialValue:W(n)}}function ue(e,t){var n=W(t.value),r=W(t.defaultValue);null!=n&&((n=""+n)!==e.value&&(e.value=n),null==t.defaultValue&&e.defaultValue!==n&&(e.defaultValue=n)),null!=r&&(e.defaultValue=""+r)}function ce(e){var t=e.textContent;t===e._wrapperState.initialValue&&""!==t&&null!==t&&(e.value=t)}var de="http://www.w3.org/1999/xhtml",fe="http://www.w3.org/2000/svg";function pe(e){switch(e){case"svg":return"http://www.w3.org/2000/svg";case"math":return"http://www.w3.org/1998/Math/MathML";default:return"http://www.w3.org/1999/xhtml"}}function me(e,t){return null==e||"http://www.w3.org/1999/xhtml"===e?pe(t):"http://www.w3.org/2000/svg"===e&&"foreignObject"===t?"http://www.w3.org/1999/xhtml":e}var he,ge,be=(ge=function(e,t){if(e.namespaceURI!==fe||"innerHTML"in e)e.innerHTML=t;else{for((he=he||document.createElement("div")).innerHTML="<svg>"+t.valueOf().toString()+"</svg>",t=he.firstChild;e.firstChild;)e.removeChild(e.firstChild);for(;t.firstChild;)e.appendChild(t.firstChild)}},"undefined"!=typeof MSApp&&MSApp.execUnsafeLocalFunction?function(e,t,n,r){MSApp.execUnsafeLocalFunction((function(){return ge(e,t)}))}:ge);function ve(e,t){if(t){var n=e.firstChild;if(n&&n===e.lastChild&&3===n.nodeType)return void(n.nodeValue=t)}e.textContent=t}var ye={animationIterationCount:!0,borderImageOutset:!0,borderImageSlice:!0,borderImageWidth:!0,boxFlex:!0,boxFlexGroup:!0,boxOrdinalGroup:!0,columnCount:!0,columns:!0,flex:!0,flexGrow:!0,flexPositive:!0,flexShrink:!0,flexNegative:!0,flexOrder:!0,gridArea:!0,gridRow:!0,gridRowEnd:!0,gridRowSpan:!0,gridRowStart:!0,gridColumn:!0,gridColumnEnd:!0,gridColumnSpan:!0,gridColumnStart:!0,fontWeight:!0,lineClamp:!0,lineHeight:!0,opacity:!0,order:!0,orphans:!0,tabSize:!0,widows:!0,zIndex:!0,zoom:!0,fillOpacity:!0,floodOpacity:!0,stopOpacity:!0,strokeDasharray:!0,strokeDashoffset:!0,strokeMiterlimit:!0,strokeOpacity:!0,strokeWidth:!0},we=["Webkit","ms","Moz","O"];function ke(e,t,n){return null==t||"boolean"==typeof t||""===t?"":n||"number"!=typeof t||0===t||ye.hasOwnProperty(e)&&ye[e]?(""+t).trim():t+"px"}function Se(e,t){for(var n in e=e.style,t)if(t.hasOwnProperty(n)){var r=0===n.indexOf("--"),a=ke(n,t[n],r);"float"===n&&(n="cssFloat"),r?e.setProperty(n,a):e[n]=a}}Object.keys(ye).forEach((function(e){we.forEach((function(t){t=t+e.charAt(0).toUpperCase()+e.substring(1),ye[t]=ye[e]}))}));var Ee=a({menuitem:!0},{area:!0,base:!0,br:!0,col:!0,embed:!0,hr:!0,img:!0,input:!0,keygen:!0,link:!0,meta:!0,param:!0,source:!0,track:!0,wbr:!0});function xe(e,t){if(t){if(Ee[e]&&(null!=t.children||null!=t.dangerouslySetInnerHTML))throw Error(i(137,e));if(null!=t.dangerouslySetInnerHTML){if(null!=t.children)throw Error(i(60));if("object"!=typeof t.dangerouslySetInnerHTML||!("__html"in t.dangerouslySetInnerHTML))throw Error(i(61))}if(null!=t.style&&"object"!=typeof t.style)throw Error(i(62))}}function Te(e,t){if(-1===e.indexOf("-"))return"string"==typeof t.is;switch(e){case"annotation-xml":case"color-profile":case"font-face":case"font-face-src":case"font-face-uri":case"font-face-format":case"font-face-name":case"missing-glyph":return!1;default:return!0}}function Ce(e){return(e=e.target||e.srcElement||window).correspondingUseElement&&(e=e.correspondingUseElement),3===e.nodeType?e.parentNode:e}var _e=null,Ae=null,Le=null;function Re(e){if(e=ra(e)){if("function"!=typeof _e)throw Error(i(280));var t=e.stateNode;t&&(t=oa(t),_e(e.stateNode,e.type,t))}}function Pe(e){Ae?Le?Le.push(e):Le=[e]:Ae=e}function Ne(){if(Ae){var e=Ae,t=Le;if(Le=Ae=null,Re(e),t)for(e=0;e<t.length;e++)Re(t[e])}}function Oe(e,t){return e(t)}function Ie(e,t,n,r,a){return e(t,n,r,a)}function De(){}var Me=Oe,ze=!1,Be=!1;function Fe(){null===Ae&&null===Le||(De(),Ne())}function je(e,t){var n=e.stateNode;if(null===n)return null;var r=oa(n);if(null===r)return null;n=r[t];e:switch(t){case"onClick":case"onClickCapture":case"onDoubleClick":case"onDoubleClickCapture":case"onMouseDown":case"onMouseDownCapture":case"onMouseMove":case"onMouseMoveCapture":case"onMouseUp":case"onMouseUpCapture":case"onMouseEnter":(r=!r.disabled)||(r=!("button"===(e=e.type)||"input"===e||"select"===e||"textarea"===e)),e=!r;break e;default:e=!1}if(e)return null;if(n&&"function"!=typeof n)throw Error(i(231,t,typeof n));return n}var Ue=!1;if(d)try{var $e={};Object.defineProperty($e,"passive",{get:function(){Ue=!0}}),window.addEventListener("test",$e,$e),window.removeEventListener("test",$e,$e)}catch(ge){Ue=!1}function qe(e,t,n,r,a,o,i,l,s){var u=Array.prototype.slice.call(arguments,3);try{t.apply(n,u)}catch(c){this.onError(c)}}var He=!1,Ge=null,Ze=!1,Ve=null,We={onError:function(e){He=!0,Ge=e}};function Ke(e,t,n,r,a,o,i,l,s){He=!1,Ge=null,qe.apply(We,arguments)}function Ye(e){var t=e,n=e;if(e.alternate)for(;t.return;)t=t.return;else{e=t;do{0!=(1026&(t=e).flags)&&(n=t.return),e=t.return}while(e)}return 3===t.tag?n:null}function Qe(e){if(13===e.tag){var t=e.memoizedState;if(null===t&&(null!==(e=e.alternate)&&(t=e.memoizedState)),null!==t)return t.dehydrated}return null}function Xe(e){if(Ye(e)!==e)throw Error(i(188))}function Je(e){if(e=function(e){var t=e.alternate;if(!t){if(null===(t=Ye(e)))throw Error(i(188));return t!==e?null:e}for(var n=e,r=t;;){var a=n.return;if(null===a)break;var o=a.alternate;if(null===o){if(null!==(r=a.return)){n=r;continue}break}if(a.child===o.child){for(o=a.child;o;){if(o===n)return Xe(a),e;if(o===r)return Xe(a),t;o=o.sibling}throw Error(i(188))}if(n.return!==r.return)n=a,r=o;else{for(var l=!1,s=a.child;s;){if(s===n){l=!0,n=a,r=o;break}if(s===r){l=!0,r=a,n=o;break}s=s.sibling}if(!l){for(s=o.child;s;){if(s===n){l=!0,n=o,r=a;break}if(s===r){l=!0,r=o,n=a;break}s=s.sibling}if(!l)throw Error(i(189))}}if(n.alternate!==r)throw Error(i(190))}if(3!==n.tag)throw Error(i(188));return n.stateNode.current===n?e:t}(e),!e)return null;for(var t=e;;){if(5===t.tag||6===t.tag)return t;if(t.child)t.child.return=t,t=t.child;else{if(t===e)break;for(;!t.sibling;){if(!t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}}return null}function et(e,t){for(var n=e.alternate;null!==t;){if(t===e||t===n)return!0;t=t.return}return!1}var tt,nt,rt,at,ot=!1,it=[],lt=null,st=null,ut=null,ct=new Map,dt=new Map,ft=[],pt="mousedown mouseup touchcancel touchend touchstart auxclick dblclick pointercancel pointerdown pointerup dragend dragstart drop compositionend compositionstart keydown keypress keyup input textInput copy cut paste click change contextmenu reset submit".split(" ");function mt(e,t,n,r,a){return{blockedOn:e,domEventName:t,eventSystemFlags:16|n,nativeEvent:a,targetContainers:[r]}}function ht(e,t){switch(e){case"focusin":case"focusout":lt=null;break;case"dragenter":case"dragleave":st=null;break;case"mouseover":case"mouseout":ut=null;break;case"pointerover":case"pointerout":ct.delete(t.pointerId);break;case"gotpointercapture":case"lostpointercapture":dt.delete(t.pointerId)}}function gt(e,t,n,r,a,o){return null===e||e.nativeEvent!==o?(e=mt(t,n,r,a,o),null!==t&&(null!==(t=ra(t))&&nt(t)),e):(e.eventSystemFlags|=r,t=e.targetContainers,null!==a&&-1===t.indexOf(a)&&t.push(a),e)}function bt(e){var t=na(e.target);if(null!==t){var n=Ye(t);if(null!==n)if(13===(t=n.tag)){if(null!==(t=Qe(n)))return e.blockedOn=t,void at(e.lanePriority,(function(){o.unstable_runWithPriority(e.priority,(function(){rt(n)}))}))}else if(3===t&&n.stateNode.hydrate)return void(e.blockedOn=3===n.tag?n.stateNode.containerInfo:null)}e.blockedOn=null}function vt(e){if(null!==e.blockedOn)return!1;for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n)return null!==(t=ra(n))&&nt(t),e.blockedOn=n,!1;t.shift()}return!0}function yt(e,t,n){vt(e)&&n.delete(t)}function wt(){for(ot=!1;0<it.length;){var e=it[0];if(null!==e.blockedOn){null!==(e=ra(e.blockedOn))&&tt(e);break}for(var t=e.targetContainers;0<t.length;){var n=Jt(e.domEventName,e.eventSystemFlags,t[0],e.nativeEvent);if(null!==n){e.blockedOn=n;break}t.shift()}null===e.blockedOn&&it.shift()}null!==lt&&vt(lt)&&(lt=null),null!==st&&vt(st)&&(st=null),null!==ut&&vt(ut)&&(ut=null),ct.forEach(yt),dt.forEach(yt)}function kt(e,t){e.blockedOn===t&&(e.blockedOn=null,ot||(ot=!0,o.unstable_scheduleCallback(o.unstable_NormalPriority,wt)))}function St(e){function t(t){return kt(t,e)}if(0<it.length){kt(it[0],e);for(var n=1;n<it.length;n++){var r=it[n];r.blockedOn===e&&(r.blockedOn=null)}}for(null!==lt&&kt(lt,e),null!==st&&kt(st,e),null!==ut&&kt(ut,e),ct.forEach(t),dt.forEach(t),n=0;n<ft.length;n++)(r=ft[n]).blockedOn===e&&(r.blockedOn=null);for(;0<ft.length&&null===(n=ft[0]).blockedOn;)bt(n),null===n.blockedOn&&ft.shift()}function Et(e,t){var n={};return n[e.toLowerCase()]=t.toLowerCase(),n["Webkit"+e]="webkit"+t,n["Moz"+e]="moz"+t,n}var xt={animationend:Et("Animation","AnimationEnd"),animationiteration:Et("Animation","AnimationIteration"),animationstart:Et("Animation","AnimationStart"),transitionend:Et("Transition","TransitionEnd")},Tt={},Ct={};function _t(e){if(Tt[e])return Tt[e];if(!xt[e])return e;var t,n=xt[e];for(t in n)if(n.hasOwnProperty(t)&&t in Ct)return Tt[e]=n[t];return e}d&&(Ct=document.createElement("div").style,"AnimationEvent"in window||(delete xt.animationend.animation,delete xt.animationiteration.animation,delete xt.animationstart.animation),"TransitionEvent"in window||delete xt.transitionend.transition);var At=_t("animationend"),Lt=_t("animationiteration"),Rt=_t("animationstart"),Pt=_t("transitionend"),Nt=new Map,Ot=new Map,It=["abort","abort",At,"animationEnd",Lt,"animationIteration",Rt,"animationStart","canplay","canPlay","canplaythrough","canPlayThrough","durationchange","durationChange","emptied","emptied","encrypted","encrypted","ended","ended","error","error","gotpointercapture","gotPointerCapture","load","load","loadeddata","loadedData","loadedmetadata","loadedMetadata","loadstart","loadStart","lostpointercapture","lostPointerCapture","playing","playing","progress","progress","seeking","seeking","stalled","stalled","suspend","suspend","timeupdate","timeUpdate",Pt,"transitionEnd","waiting","waiting"];function Dt(e,t){for(var n=0;n<e.length;n+=2){var r=e[n],a=e[n+1];a="on"+(a[0].toUpperCase()+a.slice(1)),Ot.set(r,t),Nt.set(r,a),u(a,[r])}}(0,o.unstable_now)();var Mt=8;function zt(e){if(0!=(1&e))return Mt=15,1;if(0!=(2&e))return Mt=14,2;if(0!=(4&e))return Mt=13,4;var t=24&e;return 0!==t?(Mt=12,t):0!=(32&e)?(Mt=11,32):0!==(t=192&e)?(Mt=10,t):0!=(256&e)?(Mt=9,256):0!==(t=3584&e)?(Mt=8,t):0!=(4096&e)?(Mt=7,4096):0!==(t=4186112&e)?(Mt=6,t):0!==(t=62914560&e)?(Mt=5,t):67108864&e?(Mt=4,67108864):0!=(134217728&e)?(Mt=3,134217728):0!==(t=805306368&e)?(Mt=2,t):0!=(1073741824&e)?(Mt=1,1073741824):(Mt=8,e)}function Bt(e,t){var n=e.pendingLanes;if(0===n)return Mt=0;var r=0,a=0,o=e.expiredLanes,i=e.suspendedLanes,l=e.pingedLanes;if(0!==o)r=o,a=Mt=15;else if(0!==(o=134217727&n)){var s=o&~i;0!==s?(r=zt(s),a=Mt):0!==(l&=o)&&(r=zt(l),a=Mt)}else 0!==(o=n&~i)?(r=zt(o),a=Mt):0!==l&&(r=zt(l),a=Mt);if(0===r)return 0;if(r=n&((0>(r=31-Ht(r))?0:1<<r)<<1)-1,0!==t&&t!==r&&0==(t&i)){if(zt(t),a<=Mt)return t;Mt=a}if(0!==(t=e.entangledLanes))for(e=e.entanglements,t&=r;0<t;)a=1<<(n=31-Ht(t)),r|=e[n],t&=~a;return r}function Ft(e){return 0!==(e=-1073741825&e.pendingLanes)?e:1073741824&e?1073741824:0}function jt(e,t){switch(e){case 15:return 1;case 14:return 2;case 12:return 0===(e=Ut(24&~t))?jt(10,t):e;case 10:return 0===(e=Ut(192&~t))?jt(8,t):e;case 8:return 0===(e=Ut(3584&~t))&&(0===(e=Ut(4186112&~t))&&(e=512)),e;case 2:return 0===(t=Ut(805306368&~t))&&(t=268435456),t}throw Error(i(358,e))}function Ut(e){return e&-e}function $t(e){for(var t=[],n=0;31>n;n++)t.push(e);return t}function qt(e,t,n){e.pendingLanes|=t;var r=t-1;e.suspendedLanes&=r,e.pingedLanes&=r,(e=e.eventTimes)[t=31-Ht(t)]=n}var Ht=Math.clz32?Math.clz32:function(e){return 0===e?32:31-(Gt(e)/Zt|0)|0},Gt=Math.log,Zt=Math.LN2;var Vt=o.unstable_UserBlockingPriority,Wt=o.unstable_runWithPriority,Kt=!0;function Yt(e,t,n,r){ze||De();var a=Xt,o=ze;ze=!0;try{Ie(a,e,t,n,r)}finally{(ze=o)||Fe()}}function Qt(e,t,n,r){Wt(Vt,Xt.bind(null,e,t,n,r))}function Xt(e,t,n,r){var a;if(Kt)if((a=0==(4&t))&&0<it.length&&-1<pt.indexOf(e))e=mt(null,e,t,n,r),it.push(e);else{var o=Jt(e,t,n,r);if(null===o)a&&ht(e,r);else{if(a){if(-1<pt.indexOf(e))return e=mt(o,e,t,n,r),void it.push(e);if(function(e,t,n,r,a){switch(t){case"focusin":return lt=gt(lt,e,t,n,r,a),!0;case"dragenter":return st=gt(st,e,t,n,r,a),!0;case"mouseover":return ut=gt(ut,e,t,n,r,a),!0;case"pointerover":var o=a.pointerId;return ct.set(o,gt(ct.get(o)||null,e,t,n,r,a)),!0;case"gotpointercapture":return o=a.pointerId,dt.set(o,gt(dt.get(o)||null,e,t,n,r,a)),!0}return!1}(o,e,t,n,r))return;ht(e,r)}Dr(e,t,r,null,n)}}}function Jt(e,t,n,r){var a=Ce(r);if(null!==(a=na(a))){var o=Ye(a);if(null===o)a=null;else{var i=o.tag;if(13===i){if(null!==(a=Qe(o)))return a;a=null}else if(3===i){if(o.stateNode.hydrate)return 3===o.tag?o.stateNode.containerInfo:null;a=null}else o!==a&&(a=null)}}return Dr(e,t,r,a,n),null}var en=null,tn=null,nn=null;function rn(){if(nn)return nn;var e,t,n=tn,r=n.length,a="value"in en?en.value:en.textContent,o=a.length;for(e=0;e<r&&n[e]===a[e];e++);var i=r-e;for(t=1;t<=i&&n[r-t]===a[o-t];t++);return nn=a.slice(e,1<t?1-t:void 0)}function an(e){var t=e.keyCode;return"charCode"in e?0===(e=e.charCode)&&13===t&&(e=13):e=t,10===e&&(e=13),32<=e||13===e?e:0}function on(){return!0}function ln(){return!1}function sn(e){function t(t,n,r,a,o){for(var i in this._reactName=t,this._targetInst=r,this.type=n,this.nativeEvent=a,this.target=o,this.currentTarget=null,e)e.hasOwnProperty(i)&&(t=e[i],this[i]=t?t(a):a[i]);return this.isDefaultPrevented=(null!=a.defaultPrevented?a.defaultPrevented:!1===a.returnValue)?on:ln,this.isPropagationStopped=ln,this}return a(t.prototype,{preventDefault:function(){this.defaultPrevented=!0;var e=this.nativeEvent;e&&(e.preventDefault?e.preventDefault():"unknown"!=typeof e.returnValue&&(e.returnValue=!1),this.isDefaultPrevented=on)},stopPropagation:function(){var e=this.nativeEvent;e&&(e.stopPropagation?e.stopPropagation():"unknown"!=typeof e.cancelBubble&&(e.cancelBubble=!0),this.isPropagationStopped=on)},persist:function(){},isPersistent:on}),t}var un,cn,dn,fn={eventPhase:0,bubbles:0,cancelable:0,timeStamp:function(e){return e.timeStamp||Date.now()},defaultPrevented:0,isTrusted:0},pn=sn(fn),mn=a({},fn,{view:0,detail:0}),hn=sn(mn),gn=a({},mn,{screenX:0,screenY:0,clientX:0,clientY:0,pageX:0,pageY:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,getModifierState:An,button:0,buttons:0,relatedTarget:function(e){return void 0===e.relatedTarget?e.fromElement===e.srcElement?e.toElement:e.fromElement:e.relatedTarget},movementX:function(e){return"movementX"in e?e.movementX:(e!==dn&&(dn&&"mousemove"===e.type?(un=e.screenX-dn.screenX,cn=e.screenY-dn.screenY):cn=un=0,dn=e),un)},movementY:function(e){return"movementY"in e?e.movementY:cn}}),bn=sn(gn),vn=sn(a({},gn,{dataTransfer:0})),yn=sn(a({},mn,{relatedTarget:0})),wn=sn(a({},fn,{animationName:0,elapsedTime:0,pseudoElement:0})),kn=a({},fn,{clipboardData:function(e){return"clipboardData"in e?e.clipboardData:window.clipboardData}}),Sn=sn(kn),En=sn(a({},fn,{data:0})),xn={Esc:"Escape",Spacebar:" ",Left:"ArrowLeft",Up:"ArrowUp",Right:"ArrowRight",Down:"ArrowDown",Del:"Delete",Win:"OS",Menu:"ContextMenu",Apps:"ContextMenu",Scroll:"ScrollLock",MozPrintableKey:"Unidentified"},Tn={8:"Backspace",9:"Tab",12:"Clear",13:"Enter",16:"Shift",17:"Control",18:"Alt",19:"Pause",20:"CapsLock",27:"Escape",32:" ",33:"PageUp",34:"PageDown",35:"End",36:"Home",37:"ArrowLeft",38:"ArrowUp",39:"ArrowRight",40:"ArrowDown",45:"Insert",46:"Delete",112:"F1",113:"F2",114:"F3",115:"F4",116:"F5",117:"F6",118:"F7",119:"F8",120:"F9",121:"F10",122:"F11",123:"F12",144:"NumLock",145:"ScrollLock",224:"Meta"},Cn={Alt:"altKey",Control:"ctrlKey",Meta:"metaKey",Shift:"shiftKey"};function _n(e){var t=this.nativeEvent;return t.getModifierState?t.getModifierState(e):!!(e=Cn[e])&&!!t[e]}function An(){return _n}var Ln=a({},mn,{key:function(e){if(e.key){var t=xn[e.key]||e.key;if("Unidentified"!==t)return t}return"keypress"===e.type?13===(e=an(e))?"Enter":String.fromCharCode(e):"keydown"===e.type||"keyup"===e.type?Tn[e.keyCode]||"Unidentified":""},code:0,location:0,ctrlKey:0,shiftKey:0,altKey:0,metaKey:0,repeat:0,locale:0,getModifierState:An,charCode:function(e){return"keypress"===e.type?an(e):0},keyCode:function(e){return"keydown"===e.type||"keyup"===e.type?e.keyCode:0},which:function(e){return"keypress"===e.type?an(e):"keydown"===e.type||"keyup"===e.type?e.keyCode:0}}),Rn=sn(Ln),Pn=sn(a({},gn,{pointerId:0,width:0,height:0,pressure:0,tangentialPressure:0,tiltX:0,tiltY:0,twist:0,pointerType:0,isPrimary:0})),Nn=sn(a({},mn,{touches:0,targetTouches:0,changedTouches:0,altKey:0,metaKey:0,ctrlKey:0,shiftKey:0,getModifierState:An})),On=sn(a({},fn,{propertyName:0,elapsedTime:0,pseudoElement:0})),In=a({},gn,{deltaX:function(e){return"deltaX"in e?e.deltaX:"wheelDeltaX"in e?-e.wheelDeltaX:0},deltaY:function(e){return"deltaY"in e?e.deltaY:"wheelDeltaY"in e?-e.wheelDeltaY:"wheelDelta"in e?-e.wheelDelta:0},deltaZ:0,deltaMode:0}),Dn=sn(In),Mn=[9,13,27,32],zn=d&&"CompositionEvent"in window,Bn=null;d&&"documentMode"in document&&(Bn=document.documentMode);var Fn=d&&"TextEvent"in window&&!Bn,jn=d&&(!zn||Bn&&8<Bn&&11>=Bn),Un=String.fromCharCode(32),$n=!1;function qn(e,t){switch(e){case"keyup":return-1!==Mn.indexOf(t.keyCode);case"keydown":return 229!==t.keyCode;case"keypress":case"mousedown":case"focusout":return!0;default:return!1}}function Hn(e){return"object"==typeof(e=e.detail)&&"data"in e?e.data:null}var Gn=!1;var Zn={color:!0,date:!0,datetime:!0,"datetime-local":!0,email:!0,month:!0,number:!0,password:!0,range:!0,search:!0,tel:!0,text:!0,time:!0,url:!0,week:!0};function Vn(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return"input"===t?!!Zn[e.type]:"textarea"===t}function Wn(e,t,n,r){Pe(r),0<(t=zr(t,"onChange")).length&&(n=new pn("onChange","change",null,n,r),e.push({event:n,listeners:t}))}var Kn=null,Yn=null;function Qn(e){Lr(e,0)}function Xn(e){if(Q(aa(e)))return e}function Jn(e,t){if("change"===e)return t}var er=!1;if(d){var tr;if(d){var nr="oninput"in document;if(!nr){var rr=document.createElement("div");rr.setAttribute("oninput","return;"),nr="function"==typeof rr.oninput}tr=nr}else tr=!1;er=tr&&(!document.documentMode||9<document.documentMode)}function ar(){Kn&&(Kn.detachEvent("onpropertychange",or),Yn=Kn=null)}function or(e){if("value"===e.propertyName&&Xn(Yn)){var t=[];if(Wn(t,Yn,e,Ce(e)),e=Qn,ze)e(t);else{ze=!0;try{Oe(e,t)}finally{ze=!1,Fe()}}}}function ir(e,t,n){"focusin"===e?(ar(),Yn=n,(Kn=t).attachEvent("onpropertychange",or)):"focusout"===e&&ar()}function lr(e){if("selectionchange"===e||"keyup"===e||"keydown"===e)return Xn(Yn)}function sr(e,t){if("click"===e)return Xn(t)}function ur(e,t){if("input"===e||"change"===e)return Xn(t)}var cr="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},dr=Object.prototype.hasOwnProperty;function fr(e,t){if(cr(e,t))return!0;if("object"!=typeof e||null===e||"object"!=typeof t||null===t)return!1;var n=Object.keys(e),r=Object.keys(t);if(n.length!==r.length)return!1;for(r=0;r<n.length;r++)if(!dr.call(t,n[r])||!cr(e[n[r]],t[n[r]]))return!1;return!0}function pr(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function mr(e,t){var n,r=pr(e);for(e=0;r;){if(3===r.nodeType){if(n=e+r.textContent.length,e<=t&&n>=t)return{node:r,offset:t-e};e=n}e:{for(;r;){if(r.nextSibling){r=r.nextSibling;break e}r=r.parentNode}r=void 0}r=pr(r)}}function hr(e,t){return!(!e||!t)&&(e===t||(!e||3!==e.nodeType)&&(t&&3===t.nodeType?hr(e,t.parentNode):"contains"in e?e.contains(t):!!e.compareDocumentPosition&&!!(16&e.compareDocumentPosition(t))))}function gr(){for(var e=window,t=X();t instanceof e.HTMLIFrameElement;){try{var n="string"==typeof t.contentWindow.location.href}catch(r){n=!1}if(!n)break;t=X((e=t.contentWindow).document)}return t}function br(e){var t=e&&e.nodeName&&e.nodeName.toLowerCase();return t&&("input"===t&&("text"===e.type||"search"===e.type||"tel"===e.type||"url"===e.type||"password"===e.type)||"textarea"===t||"true"===e.contentEditable)}var vr=d&&"documentMode"in document&&11>=document.documentMode,yr=null,wr=null,kr=null,Sr=!1;function Er(e,t,n){var r=n.window===n?n.document:9===n.nodeType?n:n.ownerDocument;Sr||null==yr||yr!==X(r)||("selectionStart"in(r=yr)&&br(r)?r={start:r.selectionStart,end:r.selectionEnd}:r={anchorNode:(r=(r.ownerDocument&&r.ownerDocument.defaultView||window).getSelection()).anchorNode,anchorOffset:r.anchorOffset,focusNode:r.focusNode,focusOffset:r.focusOffset},kr&&fr(kr,r)||(kr=r,0<(r=zr(wr,"onSelect")).length&&(t=new pn("onSelect","select",null,t,n),e.push({event:t,listeners:r}),t.target=yr)))}Dt("cancel cancel click click close close contextmenu contextMenu copy copy cut cut auxclick auxClick dblclick doubleClick dragend dragEnd dragstart dragStart drop drop focusin focus focusout blur input input invalid invalid keydown keyDown keypress keyPress keyup keyUp mousedown mouseDown mouseup mouseUp paste paste pause pause play play pointercancel pointerCancel pointerdown pointerDown pointerup pointerUp ratechange rateChange reset reset seeked seeked submit submit touchcancel touchCancel touchend touchEnd touchstart touchStart volumechange volumeChange".split(" "),0),Dt("drag drag dragenter dragEnter dragexit dragExit dragleave dragLeave dragover dragOver mousemove mouseMove mouseout mouseOut mouseover mouseOver pointermove pointerMove pointerout pointerOut pointerover pointerOver scroll scroll toggle toggle touchmove touchMove wheel wheel".split(" "),1),Dt(It,2);for(var xr="change selectionchange textInput compositionstart compositionend compositionupdate".split(" "),Tr=0;Tr<xr.length;Tr++)Ot.set(xr[Tr],0);c("onMouseEnter",["mouseout","mouseover"]),c("onMouseLeave",["mouseout","mouseover"]),c("onPointerEnter",["pointerout","pointerover"]),c("onPointerLeave",["pointerout","pointerover"]),u("onChange","change click focusin focusout input keydown keyup selectionchange".split(" ")),u("onSelect","focusout contextmenu dragend focusin keydown keyup mousedown mouseup selectionchange".split(" ")),u("onBeforeInput",["compositionend","keypress","textInput","paste"]),u("onCompositionEnd","compositionend focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionStart","compositionstart focusout keydown keypress keyup mousedown".split(" ")),u("onCompositionUpdate","compositionupdate focusout keydown keypress keyup mousedown".split(" "));var Cr="abort canplay canplaythrough durationchange emptied encrypted ended error loadeddata loadedmetadata loadstart pause play playing progress ratechange seeked seeking stalled suspend timeupdate volumechange waiting".split(" "),_r=new Set("cancel close invalid load scroll toggle".split(" ").concat(Cr));function Ar(e,t,n){var r=e.type||"unknown-event";e.currentTarget=n,function(e,t,n,r,a,o,l,s,u){if(Ke.apply(this,arguments),He){if(!He)throw Error(i(198));var c=Ge;He=!1,Ge=null,Ze||(Ze=!0,Ve=c)}}(r,t,void 0,e),e.currentTarget=null}function Lr(e,t){t=0!=(4&t);for(var n=0;n<e.length;n++){var r=e[n],a=r.event;r=r.listeners;e:{var o=void 0;if(t)for(var i=r.length-1;0<=i;i--){var l=r[i],s=l.instance,u=l.currentTarget;if(l=l.listener,s!==o&&a.isPropagationStopped())break e;Ar(a,l,u),o=s}else for(i=0;i<r.length;i++){if(s=(l=r[i]).instance,u=l.currentTarget,l=l.listener,s!==o&&a.isPropagationStopped())break e;Ar(a,l,u),o=s}}}if(Ze)throw e=Ve,Ze=!1,Ve=null,e}function Rr(e,t){var n=ia(t),r=e+"__bubble";n.has(r)||(Ir(t,e,2,!1),n.add(r))}var Pr="_reactListening"+Math.random().toString(36).slice(2);function Nr(e){e[Pr]||(e[Pr]=!0,l.forEach((function(t){_r.has(t)||Or(t,!1,e,null),Or(t,!0,e,null)})))}function Or(e,t,n,r){var a=4<arguments.length&&void 0!==arguments[4]?arguments[4]:0,o=n;if("selectionchange"===e&&9!==n.nodeType&&(o=n.ownerDocument),null!==r&&!t&&_r.has(e)){if("scroll"!==e)return;a|=2,o=r}var i=ia(o),l=e+"__"+(t?"capture":"bubble");i.has(l)||(t&&(a|=4),Ir(o,e,a,t),i.add(l))}function Ir(e,t,n,r){var a=Ot.get(t);switch(void 0===a?2:a){case 0:a=Yt;break;case 1:a=Qt;break;default:a=Xt}n=a.bind(null,t,n,e),a=void 0,!Ue||"touchstart"!==t&&"touchmove"!==t&&"wheel"!==t||(a=!0),r?void 0!==a?e.addEventListener(t,n,{capture:!0,passive:a}):e.addEventListener(t,n,!0):void 0!==a?e.addEventListener(t,n,{passive:a}):e.addEventListener(t,n,!1)}function Dr(e,t,n,r,a){var o=r;if(0==(1&t)&&0==(2&t)&&null!==r)e:for(;;){if(null===r)return;var i=r.tag;if(3===i||4===i){var l=r.stateNode.containerInfo;if(l===a||8===l.nodeType&&l.parentNode===a)break;if(4===i)for(i=r.return;null!==i;){var s=i.tag;if((3===s||4===s)&&((s=i.stateNode.containerInfo)===a||8===s.nodeType&&s.parentNode===a))return;i=i.return}for(;null!==l;){if(null===(i=na(l)))return;if(5===(s=i.tag)||6===s){r=o=i;continue e}l=l.parentNode}}r=r.return}!function(e,t,n){if(Be)return e(t,n);Be=!0;try{Me(e,t,n)}finally{Be=!1,Fe()}}((function(){var r=o,a=Ce(n),i=[];e:{var l=Nt.get(e);if(void 0!==l){var s=pn,u=e;switch(e){case"keypress":if(0===an(n))break e;case"keydown":case"keyup":s=Rn;break;case"focusin":u="focus",s=yn;break;case"focusout":u="blur",s=yn;break;case"beforeblur":case"afterblur":s=yn;break;case"click":if(2===n.button)break e;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":s=bn;break;case"drag":case"dragend":case"dragenter":case"dragexit":case"dragleave":case"dragover":case"dragstart":case"drop":s=vn;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":s=Nn;break;case At:case Lt:case Rt:s=wn;break;case Pt:s=On;break;case"scroll":s=hn;break;case"wheel":s=Dn;break;case"copy":case"cut":case"paste":s=Sn;break;case"gotpointercapture":case"lostpointercapture":case"pointercancel":case"pointerdown":case"pointermove":case"pointerout":case"pointerover":case"pointerup":s=Pn}var c=0!=(4&t),d=!c&&"scroll"===e,f=c?null!==l?l+"Capture":null:l;c=[];for(var p,m=r;null!==m;){var h=(p=m).stateNode;if(5===p.tag&&null!==h&&(p=h,null!==f&&(null!=(h=je(m,f))&&c.push(Mr(m,h,p)))),d)break;m=m.return}0<c.length&&(l=new s(l,u,null,n,a),i.push({event:l,listeners:c}))}}if(0==(7&t)){if(s="mouseout"===e||"pointerout"===e,(!(l="mouseover"===e||"pointerover"===e)||0!=(16&t)||!(u=n.relatedTarget||n.fromElement)||!na(u)&&!u[ea])&&(s||l)&&(l=a.window===a?a:(l=a.ownerDocument)?l.defaultView||l.parentWindow:window,s?(s=r,null!==(u=(u=n.relatedTarget||n.toElement)?na(u):null)&&(u!==(d=Ye(u))||5!==u.tag&&6!==u.tag)&&(u=null)):(s=null,u=r),s!==u)){if(c=bn,h="onMouseLeave",f="onMouseEnter",m="mouse","pointerout"!==e&&"pointerover"!==e||(c=Pn,h="onPointerLeave",f="onPointerEnter",m="pointer"),d=null==s?l:aa(s),p=null==u?l:aa(u),(l=new c(h,m+"leave",s,n,a)).target=d,l.relatedTarget=p,h=null,na(a)===r&&((c=new c(f,m+"enter",u,n,a)).target=p,c.relatedTarget=d,h=c),d=h,s&&u)e:{for(f=u,m=0,p=c=s;p;p=Br(p))m++;for(p=0,h=f;h;h=Br(h))p++;for(;0<m-p;)c=Br(c),m--;for(;0<p-m;)f=Br(f),p--;for(;m--;){if(c===f||null!==f&&c===f.alternate)break e;c=Br(c),f=Br(f)}c=null}else c=null;null!==s&&Fr(i,l,s,c,!1),null!==u&&null!==d&&Fr(i,d,u,c,!0)}if("select"===(s=(l=r?aa(r):window).nodeName&&l.nodeName.toLowerCase())||"input"===s&&"file"===l.type)var g=Jn;else if(Vn(l))if(er)g=ur;else{g=lr;var b=ir}else(s=l.nodeName)&&"input"===s.toLowerCase()&&("checkbox"===l.type||"radio"===l.type)&&(g=sr);switch(g&&(g=g(e,r))?Wn(i,g,n,a):(b&&b(e,l,r),"focusout"===e&&(b=l._wrapperState)&&b.controlled&&"number"===l.type&&ae(l,"number",l.value)),b=r?aa(r):window,e){case"focusin":(Vn(b)||"true"===b.contentEditable)&&(yr=b,wr=r,kr=null);break;case"focusout":kr=wr=yr=null;break;case"mousedown":Sr=!0;break;case"contextmenu":case"mouseup":case"dragend":Sr=!1,Er(i,n,a);break;case"selectionchange":if(vr)break;case"keydown":case"keyup":Er(i,n,a)}var v;if(zn)e:{switch(e){case"compositionstart":var y="onCompositionStart";break e;case"compositionend":y="onCompositionEnd";break e;case"compositionupdate":y="onCompositionUpdate";break e}y=void 0}else Gn?qn(e,n)&&(y="onCompositionEnd"):"keydown"===e&&229===n.keyCode&&(y="onCompositionStart");y&&(jn&&"ko"!==n.locale&&(Gn||"onCompositionStart"!==y?"onCompositionEnd"===y&&Gn&&(v=rn()):(tn="value"in(en=a)?en.value:en.textContent,Gn=!0)),0<(b=zr(r,y)).length&&(y=new En(y,e,null,n,a),i.push({event:y,listeners:b}),v?y.data=v:null!==(v=Hn(n))&&(y.data=v))),(v=Fn?function(e,t){switch(e){case"compositionend":return Hn(t);case"keypress":return 32!==t.which?null:($n=!0,Un);case"textInput":return(e=t.data)===Un&&$n?null:e;default:return null}}(e,n):function(e,t){if(Gn)return"compositionend"===e||!zn&&qn(e,t)?(e=rn(),nn=tn=en=null,Gn=!1,e):null;switch(e){case"paste":default:return null;case"keypress":if(!(t.ctrlKey||t.altKey||t.metaKey)||t.ctrlKey&&t.altKey){if(t.char&&1<t.char.length)return t.char;if(t.which)return String.fromCharCode(t.which)}return null;case"compositionend":return jn&&"ko"!==t.locale?null:t.data}}(e,n))&&(0<(r=zr(r,"onBeforeInput")).length&&(a=new En("onBeforeInput","beforeinput",null,n,a),i.push({event:a,listeners:r}),a.data=v))}Lr(i,t)}))}function Mr(e,t,n){return{instance:e,listener:t,currentTarget:n}}function zr(e,t){for(var n=t+"Capture",r=[];null!==e;){var a=e,o=a.stateNode;5===a.tag&&null!==o&&(a=o,null!=(o=je(e,n))&&r.unshift(Mr(e,o,a)),null!=(o=je(e,t))&&r.push(Mr(e,o,a))),e=e.return}return r}function Br(e){if(null===e)return null;do{e=e.return}while(e&&5!==e.tag);return e||null}function Fr(e,t,n,r,a){for(var o=t._reactName,i=[];null!==n&&n!==r;){var l=n,s=l.alternate,u=l.stateNode;if(null!==s&&s===r)break;5===l.tag&&null!==u&&(l=u,a?null!=(s=je(n,o))&&i.unshift(Mr(n,s,l)):a||null!=(s=je(n,o))&&i.push(Mr(n,s,l))),n=n.return}0!==i.length&&e.push({event:t,listeners:i})}function jr(){}var Ur=null,$r=null;function qr(e,t){switch(e){case"button":case"input":case"select":case"textarea":return!!t.autoFocus}return!1}function Hr(e,t){return"textarea"===e||"option"===e||"noscript"===e||"string"==typeof t.children||"number"==typeof t.children||"object"==typeof t.dangerouslySetInnerHTML&&null!==t.dangerouslySetInnerHTML&&null!=t.dangerouslySetInnerHTML.__html}var Gr="function"==typeof setTimeout?setTimeout:void 0,Zr="function"==typeof clearTimeout?clearTimeout:void 0;function Vr(e){1===e.nodeType?e.textContent="":9===e.nodeType&&(null!=(e=e.body)&&(e.textContent=""))}function Wr(e){for(;null!=e;e=e.nextSibling){var t=e.nodeType;if(1===t||3===t)break}return e}function Kr(e){e=e.previousSibling;for(var t=0;e;){if(8===e.nodeType){var n=e.data;if("$"===n||"$!"===n||"$?"===n){if(0===t)return e;t--}else"/$"===n&&t++}e=e.previousSibling}return null}var Yr=0;var Qr=Math.random().toString(36).slice(2),Xr="__reactFiber$"+Qr,Jr="__reactProps$"+Qr,ea="__reactContainer$"+Qr,ta="__reactEvents$"+Qr;function na(e){var t=e[Xr];if(t)return t;for(var n=e.parentNode;n;){if(t=n[ea]||n[Xr]){if(n=t.alternate,null!==t.child||null!==n&&null!==n.child)for(e=Kr(e);null!==e;){if(n=e[Xr])return n;e=Kr(e)}return t}n=(e=n).parentNode}return null}function ra(e){return!(e=e[Xr]||e[ea])||5!==e.tag&&6!==e.tag&&13!==e.tag&&3!==e.tag?null:e}function aa(e){if(5===e.tag||6===e.tag)return e.stateNode;throw Error(i(33))}function oa(e){return e[Jr]||null}function ia(e){var t=e[ta];return void 0===t&&(t=e[ta]=new Set),t}var la=[],sa=-1;function ua(e){return{current:e}}function ca(e){0>sa||(e.current=la[sa],la[sa]=null,sa--)}function da(e,t){sa++,la[sa]=e.current,e.current=t}var fa={},pa=ua(fa),ma=ua(!1),ha=fa;function ga(e,t){var n=e.type.contextTypes;if(!n)return fa;var r=e.stateNode;if(r&&r.__reactInternalMemoizedUnmaskedChildContext===t)return r.__reactInternalMemoizedMaskedChildContext;var a,o={};for(a in n)o[a]=t[a];return r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=t,e.__reactInternalMemoizedMaskedChildContext=o),o}function ba(e){return null!=(e=e.childContextTypes)}function va(){ca(ma),ca(pa)}function ya(e,t,n){if(pa.current!==fa)throw Error(i(168));da(pa,t),da(ma,n)}function wa(e,t,n){var r=e.stateNode;if(e=t.childContextTypes,"function"!=typeof r.getChildContext)return n;for(var o in r=r.getChildContext())if(!(o in e))throw Error(i(108,V(t)||"Unknown",o));return a({},n,r)}function ka(e){return e=(e=e.stateNode)&&e.__reactInternalMemoizedMergedChildContext||fa,ha=pa.current,da(pa,e),da(ma,ma.current),!0}function Sa(e,t,n){var r=e.stateNode;if(!r)throw Error(i(169));n?(e=wa(e,t,ha),r.__reactInternalMemoizedMergedChildContext=e,ca(ma),ca(pa),da(pa,e)):ca(ma),da(ma,n)}var Ea=null,xa=null,Ta=o.unstable_runWithPriority,Ca=o.unstable_scheduleCallback,_a=o.unstable_cancelCallback,Aa=o.unstable_shouldYield,La=o.unstable_requestPaint,Ra=o.unstable_now,Pa=o.unstable_getCurrentPriorityLevel,Na=o.unstable_ImmediatePriority,Oa=o.unstable_UserBlockingPriority,Ia=o.unstable_NormalPriority,Da=o.unstable_LowPriority,Ma=o.unstable_IdlePriority,za={},Ba=void 0!==La?La:function(){},Fa=null,ja=null,Ua=!1,$a=Ra(),qa=1e4>$a?Ra:function(){return Ra()-$a};function Ha(){switch(Pa()){case Na:return 99;case Oa:return 98;case Ia:return 97;case Da:return 96;case Ma:return 95;default:throw Error(i(332))}}function Ga(e){switch(e){case 99:return Na;case 98:return Oa;case 97:return Ia;case 96:return Da;case 95:return Ma;default:throw Error(i(332))}}function Za(e,t){return e=Ga(e),Ta(e,t)}function Va(e,t,n){return e=Ga(e),Ca(e,t,n)}function Wa(){if(null!==ja){var e=ja;ja=null,_a(e)}Ka()}function Ka(){if(!Ua&&null!==Fa){Ua=!0;var e=0;try{var t=Fa;Za(99,(function(){for(;e<t.length;e++){var n=t[e];do{n=n(!0)}while(null!==n)}})),Fa=null}catch(n){throw null!==Fa&&(Fa=Fa.slice(e+1)),Ca(Na,Wa),n}finally{Ua=!1}}}var Ya=k.ReactCurrentBatchConfig;function Qa(e,t){if(e&&e.defaultProps){for(var n in t=a({},t),e=e.defaultProps)void 0===t[n]&&(t[n]=e[n]);return t}return t}var Xa=ua(null),Ja=null,eo=null,to=null;function no(){to=eo=Ja=null}function ro(e){var t=Xa.current;ca(Xa),e.type._context._currentValue=t}function ao(e,t){for(;null!==e;){var n=e.alternate;if((e.childLanes&t)===t){if(null===n||(n.childLanes&t)===t)break;n.childLanes|=t}else e.childLanes|=t,null!==n&&(n.childLanes|=t);e=e.return}}function oo(e,t){Ja=e,to=eo=null,null!==(e=e.dependencies)&&null!==e.firstContext&&(0!=(e.lanes&t)&&(zi=!0),e.firstContext=null)}function io(e,t){if(to!==e&&!1!==t&&0!==t)if("number"==typeof t&&1073741823!==t||(to=e,t=1073741823),t={context:e,observedBits:t,next:null},null===eo){if(null===Ja)throw Error(i(308));eo=t,Ja.dependencies={lanes:0,firstContext:t,responders:null}}else eo=eo.next=t;return e._currentValue}var lo=!1;function so(e){e.updateQueue={baseState:e.memoizedState,firstBaseUpdate:null,lastBaseUpdate:null,shared:{pending:null},effects:null}}function uo(e,t){e=e.updateQueue,t.updateQueue===e&&(t.updateQueue={baseState:e.baseState,firstBaseUpdate:e.firstBaseUpdate,lastBaseUpdate:e.lastBaseUpdate,shared:e.shared,effects:e.effects})}function co(e,t){return{eventTime:e,lane:t,tag:0,payload:null,callback:null,next:null}}function fo(e,t){if(null!==(e=e.updateQueue)){var n=(e=e.shared).pending;null===n?t.next=t:(t.next=n.next,n.next=t),e.pending=t}}function po(e,t){var n=e.updateQueue,r=e.alternate;if(null!==r&&n===(r=r.updateQueue)){var a=null,o=null;if(null!==(n=n.firstBaseUpdate)){do{var i={eventTime:n.eventTime,lane:n.lane,tag:n.tag,payload:n.payload,callback:n.callback,next:null};null===o?a=o=i:o=o.next=i,n=n.next}while(null!==n);null===o?a=o=t:o=o.next=t}else a=o=t;return n={baseState:r.baseState,firstBaseUpdate:a,lastBaseUpdate:o,shared:r.shared,effects:r.effects},void(e.updateQueue=n)}null===(e=n.lastBaseUpdate)?n.firstBaseUpdate=t:e.next=t,n.lastBaseUpdate=t}function mo(e,t,n,r){var o=e.updateQueue;lo=!1;var i=o.firstBaseUpdate,l=o.lastBaseUpdate,s=o.shared.pending;if(null!==s){o.shared.pending=null;var u=s,c=u.next;u.next=null,null===l?i=c:l.next=c,l=u;var d=e.alternate;if(null!==d){var f=(d=d.updateQueue).lastBaseUpdate;f!==l&&(null===f?d.firstBaseUpdate=c:f.next=c,d.lastBaseUpdate=u)}}if(null!==i){for(f=o.baseState,l=0,d=c=u=null;;){s=i.lane;var p=i.eventTime;if((r&s)===s){null!==d&&(d=d.next={eventTime:p,lane:0,tag:i.tag,payload:i.payload,callback:i.callback,next:null});e:{var m=e,h=i;switch(s=t,p=n,h.tag){case 1:if("function"==typeof(m=h.payload)){f=m.call(p,f,s);break e}f=m;break e;case 3:m.flags=-4097&m.flags|64;case 0:if(null==(s="function"==typeof(m=h.payload)?m.call(p,f,s):m))break e;f=a({},f,s);break e;case 2:lo=!0}}null!==i.callback&&(e.flags|=32,null===(s=o.effects)?o.effects=[i]:s.push(i))}else p={eventTime:p,lane:s,tag:i.tag,payload:i.payload,callback:i.callback,next:null},null===d?(c=d=p,u=f):d=d.next=p,l|=s;if(null===(i=i.next)){if(null===(s=o.shared.pending))break;i=s.next,s.next=null,o.lastBaseUpdate=s,o.shared.pending=null}}null===d&&(u=f),o.baseState=u,o.firstBaseUpdate=c,o.lastBaseUpdate=d,Ul|=l,e.lanes=l,e.memoizedState=f}}function ho(e,t,n){if(e=t.effects,t.effects=null,null!==e)for(t=0;t<e.length;t++){var r=e[t],a=r.callback;if(null!==a){if(r.callback=null,r=n,"function"!=typeof a)throw Error(i(191,a));a.call(r)}}}var go=(new r.Component).refs;function bo(e,t,n,r){n=null==(n=n(r,t=e.memoizedState))?t:a({},t,n),e.memoizedState=n,0===e.lanes&&(e.updateQueue.baseState=n)}var vo={isMounted:function(e){return!!(e=e._reactInternals)&&Ye(e)===e},enqueueSetState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueReplaceState:function(e,t,n){e=e._reactInternals;var r=fs(),a=ps(e),o=co(r,a);o.tag=1,o.payload=t,null!=n&&(o.callback=n),fo(e,o),ms(e,a,r)},enqueueForceUpdate:function(e,t){e=e._reactInternals;var n=fs(),r=ps(e),a=co(n,r);a.tag=2,null!=t&&(a.callback=t),fo(e,a),ms(e,r,n)}};function yo(e,t,n,r,a,o,i){return"function"==typeof(e=e.stateNode).shouldComponentUpdate?e.shouldComponentUpdate(r,o,i):!t.prototype||!t.prototype.isPureReactComponent||(!fr(n,r)||!fr(a,o))}function wo(e,t,n){var r=!1,a=fa,o=t.contextType;return"object"==typeof o&&null!==o?o=io(o):(a=ba(t)?ha:pa.current,o=(r=null!=(r=t.contextTypes))?ga(e,a):fa),t=new t(n,o),e.memoizedState=null!==t.state&&void 0!==t.state?t.state:null,t.updater=vo,e.stateNode=t,t._reactInternals=e,r&&((e=e.stateNode).__reactInternalMemoizedUnmaskedChildContext=a,e.__reactInternalMemoizedMaskedChildContext=o),t}function ko(e,t,n,r){e=t.state,"function"==typeof t.componentWillReceiveProps&&t.componentWillReceiveProps(n,r),"function"==typeof t.UNSAFE_componentWillReceiveProps&&t.UNSAFE_componentWillReceiveProps(n,r),t.state!==e&&vo.enqueueReplaceState(t,t.state,null)}function So(e,t,n,r){var a=e.stateNode;a.props=n,a.state=e.memoizedState,a.refs=go,so(e);var o=t.contextType;"object"==typeof o&&null!==o?a.context=io(o):(o=ba(t)?ha:pa.current,a.context=ga(e,o)),mo(e,n,a,r),a.state=e.memoizedState,"function"==typeof(o=t.getDerivedStateFromProps)&&(bo(e,t,o,n),a.state=e.memoizedState),"function"==typeof t.getDerivedStateFromProps||"function"==typeof a.getSnapshotBeforeUpdate||"function"!=typeof a.UNSAFE_componentWillMount&&"function"!=typeof a.componentWillMount||(t=a.state,"function"==typeof a.componentWillMount&&a.componentWillMount(),"function"==typeof a.UNSAFE_componentWillMount&&a.UNSAFE_componentWillMount(),t!==a.state&&vo.enqueueReplaceState(a,a.state,null),mo(e,n,a,r),a.state=e.memoizedState),"function"==typeof a.componentDidMount&&(e.flags|=4)}var Eo=Array.isArray;function xo(e,t,n){if(null!==(e=n.ref)&&"function"!=typeof e&&"object"!=typeof e){if(n._owner){if(n=n._owner){if(1!==n.tag)throw Error(i(309));var r=n.stateNode}if(!r)throw Error(i(147,e));var a=""+e;return null!==t&&null!==t.ref&&"function"==typeof t.ref&&t.ref._stringRef===a?t.ref:(t=function(e){var t=r.refs;t===go&&(t=r.refs={}),null===e?delete t[a]:t[a]=e},t._stringRef=a,t)}if("string"!=typeof e)throw Error(i(284));if(!n._owner)throw Error(i(290,e))}return e}function To(e,t){if("textarea"!==e.type)throw Error(i(31,"[object Object]"===Object.prototype.toString.call(t)?"object with keys {"+Object.keys(t).join(", ")+"}":t))}function Co(e){function t(t,n){if(e){var r=t.lastEffect;null!==r?(r.nextEffect=n,t.lastEffect=n):t.firstEffect=t.lastEffect=n,n.nextEffect=null,n.flags=8}}function n(n,r){if(!e)return null;for(;null!==r;)t(n,r),r=r.sibling;return null}function r(e,t){for(e=new Map;null!==t;)null!==t.key?e.set(t.key,t):e.set(t.index,t),t=t.sibling;return e}function a(e,t){return(e=Zs(e,t)).index=0,e.sibling=null,e}function o(t,n,r){return t.index=r,e?null!==(r=t.alternate)?(r=r.index)<n?(t.flags=2,n):r:(t.flags=2,n):n}function l(t){return e&&null===t.alternate&&(t.flags=2),t}function s(e,t,n,r){return null===t||6!==t.tag?((t=Ys(n,e.mode,r)).return=e,t):((t=a(t,n)).return=e,t)}function u(e,t,n,r){return null!==t&&t.elementType===n.type?((r=a(t,n.props)).ref=xo(e,t,n),r.return=e,r):((r=Vs(n.type,n.key,n.props,null,e.mode,r)).ref=xo(e,t,n),r.return=e,r)}function c(e,t,n,r){return null===t||4!==t.tag||t.stateNode.containerInfo!==n.containerInfo||t.stateNode.implementation!==n.implementation?((t=Qs(n,e.mode,r)).return=e,t):((t=a(t,n.children||[])).return=e,t)}function d(e,t,n,r,o){return null===t||7!==t.tag?((t=Ws(n,e.mode,r,o)).return=e,t):((t=a(t,n)).return=e,t)}function f(e,t,n){if("string"==typeof t||"number"==typeof t)return(t=Ys(""+t,e.mode,n)).return=e,t;if("object"==typeof t&&null!==t){switch(t.$$typeof){case S:return(n=Vs(t.type,t.key,t.props,null,e.mode,n)).ref=xo(e,null,t),n.return=e,n;case E:return(t=Qs(t,e.mode,n)).return=e,t}if(Eo(t)||$(t))return(t=Ws(t,e.mode,n,null)).return=e,t;To(e,t)}return null}function p(e,t,n,r){var a=null!==t?t.key:null;if("string"==typeof n||"number"==typeof n)return null!==a?null:s(e,t,""+n,r);if("object"==typeof n&&null!==n){switch(n.$$typeof){case S:return n.key===a?n.type===x?d(e,t,n.props.children,r,a):u(e,t,n,r):null;case E:return n.key===a?c(e,t,n,r):null}if(Eo(n)||$(n))return null!==a?null:d(e,t,n,r,null);To(e,n)}return null}function m(e,t,n,r,a){if("string"==typeof r||"number"==typeof r)return s(t,e=e.get(n)||null,""+r,a);if("object"==typeof r&&null!==r){switch(r.$$typeof){case S:return e=e.get(null===r.key?n:r.key)||null,r.type===x?d(t,e,r.props.children,a,r.key):u(t,e,r,a);case E:return c(t,e=e.get(null===r.key?n:r.key)||null,r,a)}if(Eo(r)||$(r))return d(t,e=e.get(n)||null,r,a,null);To(t,r)}return null}function h(a,i,l,s){for(var u=null,c=null,d=i,h=i=0,g=null;null!==d&&h<l.length;h++){d.index>h?(g=d,d=null):g=d.sibling;var b=p(a,d,l[h],s);if(null===b){null===d&&(d=g);break}e&&d&&null===b.alternate&&t(a,d),i=o(b,i,h),null===c?u=b:c.sibling=b,c=b,d=g}if(h===l.length)return n(a,d),u;if(null===d){for(;h<l.length;h++)null!==(d=f(a,l[h],s))&&(i=o(d,i,h),null===c?u=d:c.sibling=d,c=d);return u}for(d=r(a,d);h<l.length;h++)null!==(g=m(d,a,h,l[h],s))&&(e&&null!==g.alternate&&d.delete(null===g.key?h:g.key),i=o(g,i,h),null===c?u=g:c.sibling=g,c=g);return e&&d.forEach((function(e){return t(a,e)})),u}function g(a,l,s,u){var c=$(s);if("function"!=typeof c)throw Error(i(150));if(null==(s=c.call(s)))throw Error(i(151));for(var d=c=null,h=l,g=l=0,b=null,v=s.next();null!==h&&!v.done;g++,v=s.next()){h.index>g?(b=h,h=null):b=h.sibling;var y=p(a,h,v.value,u);if(null===y){null===h&&(h=b);break}e&&h&&null===y.alternate&&t(a,h),l=o(y,l,g),null===d?c=y:d.sibling=y,d=y,h=b}if(v.done)return n(a,h),c;if(null===h){for(;!v.done;g++,v=s.next())null!==(v=f(a,v.value,u))&&(l=o(v,l,g),null===d?c=v:d.sibling=v,d=v);return c}for(h=r(a,h);!v.done;g++,v=s.next())null!==(v=m(h,a,g,v.value,u))&&(e&&null!==v.alternate&&h.delete(null===v.key?g:v.key),l=o(v,l,g),null===d?c=v:d.sibling=v,d=v);return e&&h.forEach((function(e){return t(a,e)})),c}return function(e,r,o,s){var u="object"==typeof o&&null!==o&&o.type===x&&null===o.key;u&&(o=o.props.children);var c="object"==typeof o&&null!==o;if(c)switch(o.$$typeof){case S:e:{for(c=o.key,u=r;null!==u;){if(u.key===c){if(7===u.tag){if(o.type===x){n(e,u.sibling),(r=a(u,o.props.children)).return=e,e=r;break e}}else if(u.elementType===o.type){n(e,u.sibling),(r=a(u,o.props)).ref=xo(e,u,o),r.return=e,e=r;break e}n(e,u);break}t(e,u),u=u.sibling}o.type===x?((r=Ws(o.props.children,e.mode,s,o.key)).return=e,e=r):((s=Vs(o.type,o.key,o.props,null,e.mode,s)).ref=xo(e,r,o),s.return=e,e=s)}return l(e);case E:e:{for(u=o.key;null!==r;){if(r.key===u){if(4===r.tag&&r.stateNode.containerInfo===o.containerInfo&&r.stateNode.implementation===o.implementation){n(e,r.sibling),(r=a(r,o.children||[])).return=e,e=r;break e}n(e,r);break}t(e,r),r=r.sibling}(r=Qs(o,e.mode,s)).return=e,e=r}return l(e)}if("string"==typeof o||"number"==typeof o)return o=""+o,null!==r&&6===r.tag?(n(e,r.sibling),(r=a(r,o)).return=e,e=r):(n(e,r),(r=Ys(o,e.mode,s)).return=e,e=r),l(e);if(Eo(o))return h(e,r,o,s);if($(o))return g(e,r,o,s);if(c&&To(e,o),void 0===o&&!u)switch(e.tag){case 1:case 22:case 0:case 11:case 15:throw Error(i(152,V(e.type)||"Component"))}return n(e,r)}}var _o=Co(!0),Ao=Co(!1),Lo={},Ro=ua(Lo),Po=ua(Lo),No=ua(Lo);function Oo(e){if(e===Lo)throw Error(i(174));return e}function Io(e,t){switch(da(No,t),da(Po,e),da(Ro,Lo),e=t.nodeType){case 9:case 11:t=(t=t.documentElement)?t.namespaceURI:me(null,"");break;default:t=me(t=(e=8===e?t.parentNode:t).namespaceURI||null,e=e.tagName)}ca(Ro),da(Ro,t)}function Do(){ca(Ro),ca(Po),ca(No)}function Mo(e){Oo(No.current);var t=Oo(Ro.current),n=me(t,e.type);t!==n&&(da(Po,e),da(Ro,n))}function zo(e){Po.current===e&&(ca(Ro),ca(Po))}var Bo=ua(0);function Fo(e){for(var t=e;null!==t;){if(13===t.tag){var n=t.memoizedState;if(null!==n&&(null===(n=n.dehydrated)||"$?"===n.data||"$!"===n.data))return t}else if(19===t.tag&&void 0!==t.memoizedProps.revealOrder){if(0!=(64&t.flags))return t}else if(null!==t.child){t.child.return=t,t=t.child;continue}if(t===e)break;for(;null===t.sibling;){if(null===t.return||t.return===e)return null;t=t.return}t.sibling.return=t.return,t=t.sibling}return null}var jo=null,Uo=null,$o=!1;function qo(e,t){var n=Hs(5,null,null,0);n.elementType="DELETED",n.type="DELETED",n.stateNode=t,n.return=e,n.flags=8,null!==e.lastEffect?(e.lastEffect.nextEffect=n,e.lastEffect=n):e.firstEffect=e.lastEffect=n}function Ho(e,t){switch(e.tag){case 5:var n=e.type;return null!==(t=1!==t.nodeType||n.toLowerCase()!==t.nodeName.toLowerCase()?null:t)&&(e.stateNode=t,!0);case 6:return null!==(t=""===e.pendingProps||3!==t.nodeType?null:t)&&(e.stateNode=t,!0);default:return!1}}function Go(e){if($o){var t=Uo;if(t){var n=t;if(!Ho(e,t)){if(!(t=Wr(n.nextSibling))||!Ho(e,t))return e.flags=-1025&e.flags|2,$o=!1,void(jo=e);qo(jo,n)}jo=e,Uo=Wr(t.firstChild)}else e.flags=-1025&e.flags|2,$o=!1,jo=e}}function Zo(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;jo=e}function Vo(e){if(e!==jo)return!1;if(!$o)return Zo(e),$o=!0,!1;var t=e.type;if(5!==e.tag||"head"!==t&&"body"!==t&&!Hr(t,e.memoizedProps))for(t=Uo;t;)qo(e,t),t=Wr(t.nextSibling);if(Zo(e),13===e.tag){if(!(e=null!==(e=e.memoizedState)?e.dehydrated:null))throw Error(i(317));e:{for(e=e.nextSibling,t=0;e;){if(8===e.nodeType){var n=e.data;if("/$"===n){if(0===t){Uo=Wr(e.nextSibling);break e}t--}else"$"!==n&&"$!"!==n&&"$?"!==n||t++}e=e.nextSibling}Uo=null}}else Uo=jo?Wr(e.stateNode.nextSibling):null;return!0}function Wo(){Uo=jo=null,$o=!1}var Ko=[];function Yo(){for(var e=0;e<Ko.length;e++)Ko[e]._workInProgressVersionPrimary=null;Ko.length=0}var Qo=k.ReactCurrentDispatcher,Xo=k.ReactCurrentBatchConfig,Jo=0,ei=null,ti=null,ni=null,ri=!1,ai=!1;function oi(){throw Error(i(321))}function ii(e,t){if(null===t)return!1;for(var n=0;n<t.length&&n<e.length;n++)if(!cr(e[n],t[n]))return!1;return!0}function li(e,t,n,r,a,o){if(Jo=o,ei=t,t.memoizedState=null,t.updateQueue=null,t.lanes=0,Qo.current=null===e||null===e.memoizedState?Oi:Ii,e=n(r,a),ai){o=0;do{if(ai=!1,!(25>o))throw Error(i(301));o+=1,ni=ti=null,t.updateQueue=null,Qo.current=Di,e=n(r,a)}while(ai)}if(Qo.current=Ni,t=null!==ti&&null!==ti.next,Jo=0,ni=ti=ei=null,ri=!1,t)throw Error(i(300));return e}function si(){var e={memoizedState:null,baseState:null,baseQueue:null,queue:null,next:null};return null===ni?ei.memoizedState=ni=e:ni=ni.next=e,ni}function ui(){if(null===ti){var e=ei.alternate;e=null!==e?e.memoizedState:null}else e=ti.next;var t=null===ni?ei.memoizedState:ni.next;if(null!==t)ni=t,ti=e;else{if(null===e)throw Error(i(310));e={memoizedState:(ti=e).memoizedState,baseState:ti.baseState,baseQueue:ti.baseQueue,queue:ti.queue,next:null},null===ni?ei.memoizedState=ni=e:ni=ni.next=e}return ni}function ci(e,t){return"function"==typeof t?t(e):t}function di(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=ti,a=r.baseQueue,o=n.pending;if(null!==o){if(null!==a){var l=a.next;a.next=o.next,o.next=l}r.baseQueue=a=o,n.pending=null}if(null!==a){a=a.next,r=r.baseState;var s=l=o=null,u=a;do{var c=u.lane;if((Jo&c)===c)null!==s&&(s=s.next={lane:0,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null}),r=u.eagerReducer===e?u.eagerState:e(r,u.action);else{var d={lane:c,action:u.action,eagerReducer:u.eagerReducer,eagerState:u.eagerState,next:null};null===s?(l=s=d,o=r):s=s.next=d,ei.lanes|=c,Ul|=c}u=u.next}while(null!==u&&u!==a);null===s?o=r:s.next=l,cr(r,t.memoizedState)||(zi=!0),t.memoizedState=r,t.baseState=o,t.baseQueue=s,n.lastRenderedState=r}return[t.memoizedState,n.dispatch]}function fi(e){var t=ui(),n=t.queue;if(null===n)throw Error(i(311));n.lastRenderedReducer=e;var r=n.dispatch,a=n.pending,o=t.memoizedState;if(null!==a){n.pending=null;var l=a=a.next;do{o=e(o,l.action),l=l.next}while(l!==a);cr(o,t.memoizedState)||(zi=!0),t.memoizedState=o,null===t.baseQueue&&(t.baseState=o),n.lastRenderedState=o}return[o,r]}function pi(e,t,n){var r=t._getVersion;r=r(t._source);var a=t._workInProgressVersionPrimary;if(null!==a?e=a===r:(e=e.mutableReadLanes,(e=(Jo&e)===e)&&(t._workInProgressVersionPrimary=r,Ko.push(t))),e)return n(t._source);throw Ko.push(t),Error(i(350))}function mi(e,t,n,r){var a=Ol;if(null===a)throw Error(i(349));var o=t._getVersion,l=o(t._source),s=Qo.current,u=s.useState((function(){return pi(a,t,n)})),c=u[1],d=u[0];u=ni;var f=e.memoizedState,p=f.refs,m=p.getSnapshot,h=f.source;f=f.subscribe;var g=ei;return e.memoizedState={refs:p,source:t,subscribe:r},s.useEffect((function(){p.getSnapshot=n,p.setSnapshot=c;var e=o(t._source);if(!cr(l,e)){e=n(t._source),cr(d,e)||(c(e),e=ps(g),a.mutableReadLanes|=e&a.pendingLanes),e=a.mutableReadLanes,a.entangledLanes|=e;for(var r=a.entanglements,i=e;0<i;){var s=31-Ht(i),u=1<<s;r[s]|=e,i&=~u}}}),[n,t,r]),s.useEffect((function(){return r(t._source,(function(){var e=p.getSnapshot,n=p.setSnapshot;try{n(e(t._source));var r=ps(g);a.mutableReadLanes|=r&a.pendingLanes}catch(o){n((function(){throw o}))}}))}),[t,r]),cr(m,n)&&cr(h,t)&&cr(f,r)||((e={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:d}).dispatch=c=Pi.bind(null,ei,e),u.queue=e,u.baseQueue=null,d=pi(a,t,n),u.memoizedState=u.baseState=d),d}function hi(e,t,n){return mi(ui(),e,t,n)}function gi(e){var t=si();return"function"==typeof e&&(e=e()),t.memoizedState=t.baseState=e,e=(e=t.queue={pending:null,dispatch:null,lastRenderedReducer:ci,lastRenderedState:e}).dispatch=Pi.bind(null,ei,e),[t.memoizedState,e]}function bi(e,t,n,r){return e={tag:e,create:t,destroy:n,deps:r,next:null},null===(t=ei.updateQueue)?(t={lastEffect:null},ei.updateQueue=t,t.lastEffect=e.next=e):null===(n=t.lastEffect)?t.lastEffect=e.next=e:(r=n.next,n.next=e,e.next=r,t.lastEffect=e),e}function vi(e){return e={current:e},si().memoizedState=e}function yi(){return ui().memoizedState}function wi(e,t,n,r){var a=si();ei.flags|=e,a.memoizedState=bi(1|t,n,void 0,void 0===r?null:r)}function ki(e,t,n,r){var a=ui();r=void 0===r?null:r;var o=void 0;if(null!==ti){var i=ti.memoizedState;if(o=i.destroy,null!==r&&ii(r,i.deps))return void bi(t,n,o,r)}ei.flags|=e,a.memoizedState=bi(1|t,n,o,r)}function Si(e,t){return wi(516,4,e,t)}function Ei(e,t){return ki(516,4,e,t)}function xi(e,t){return ki(4,2,e,t)}function Ti(e,t){return"function"==typeof t?(e=e(),t(e),function(){t(null)}):null!=t?(e=e(),t.current=e,function(){t.current=null}):void 0}function Ci(e,t,n){return n=null!=n?n.concat([e]):null,ki(4,2,Ti.bind(null,t,e),n)}function _i(){}function Ai(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(n.memoizedState=[e,t],e)}function Li(e,t){var n=ui();t=void 0===t?null:t;var r=n.memoizedState;return null!==r&&null!==t&&ii(t,r[1])?r[0]:(e=e(),n.memoizedState=[e,t],e)}function Ri(e,t){var n=Ha();Za(98>n?98:n,(function(){e(!0)})),Za(97<n?97:n,(function(){var n=Xo.transition;Xo.transition=1;try{e(!1),t()}finally{Xo.transition=n}}))}function Pi(e,t,n){var r=fs(),a=ps(e),o={lane:a,action:n,eagerReducer:null,eagerState:null,next:null},i=t.pending;if(null===i?o.next=o:(o.next=i.next,i.next=o),t.pending=o,i=e.alternate,e===ei||null!==i&&i===ei)ai=ri=!0;else{if(0===e.lanes&&(null===i||0===i.lanes)&&null!==(i=t.lastRenderedReducer))try{var l=t.lastRenderedState,s=i(l,n);if(o.eagerReducer=i,o.eagerState=s,cr(s,l))return}catch(u){}ms(e,a,r)}}var Ni={readContext:io,useCallback:oi,useContext:oi,useEffect:oi,useImperativeHandle:oi,useLayoutEffect:oi,useMemo:oi,useReducer:oi,useRef:oi,useState:oi,useDebugValue:oi,useDeferredValue:oi,useTransition:oi,useMutableSource:oi,useOpaqueIdentifier:oi,unstable_isNewReconciler:!1},Oi={readContext:io,useCallback:function(e,t){return si().memoizedState=[e,void 0===t?null:t],e},useContext:io,useEffect:Si,useImperativeHandle:function(e,t,n){return n=null!=n?n.concat([e]):null,wi(4,2,Ti.bind(null,t,e),n)},useLayoutEffect:function(e,t){return wi(4,2,e,t)},useMemo:function(e,t){var n=si();return t=void 0===t?null:t,e=e(),n.memoizedState=[e,t],e},useReducer:function(e,t,n){var r=si();return t=void 0!==n?n(t):t,r.memoizedState=r.baseState=t,e=(e=r.queue={pending:null,dispatch:null,lastRenderedReducer:e,lastRenderedState:t}).dispatch=Pi.bind(null,ei,e),[r.memoizedState,e]},useRef:vi,useState:gi,useDebugValue:_i,useDeferredValue:function(e){var t=gi(e),n=t[0],r=t[1];return Si((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=gi(!1),t=e[0];return vi(e=Ri.bind(null,e[1])),[e,t]},useMutableSource:function(e,t,n){var r=si();return r.memoizedState={refs:{getSnapshot:t,setSnapshot:null},source:e,subscribe:n},mi(r,e,t,n)},useOpaqueIdentifier:function(){if($o){var e=!1,t=function(e){return{$$typeof:D,toString:e,valueOf:e}}((function(){throw e||(e=!0,n("r:"+(Yr++).toString(36))),Error(i(355))})),n=gi(t)[1];return 0==(2&ei.mode)&&(ei.flags|=516,bi(5,(function(){n("r:"+(Yr++).toString(36))}),void 0,null)),t}return gi(t="r:"+(Yr++).toString(36)),t},unstable_isNewReconciler:!1},Ii={readContext:io,useCallback:Ai,useContext:io,useEffect:Ei,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Li,useReducer:di,useRef:yi,useState:function(){return di(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=di(ci),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=di(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return di(ci)[0]},unstable_isNewReconciler:!1},Di={readContext:io,useCallback:Ai,useContext:io,useEffect:Ei,useImperativeHandle:Ci,useLayoutEffect:xi,useMemo:Li,useReducer:fi,useRef:yi,useState:function(){return fi(ci)},useDebugValue:_i,useDeferredValue:function(e){var t=fi(ci),n=t[0],r=t[1];return Ei((function(){var t=Xo.transition;Xo.transition=1;try{r(e)}finally{Xo.transition=t}}),[e]),n},useTransition:function(){var e=fi(ci)[0];return[yi().current,e]},useMutableSource:hi,useOpaqueIdentifier:function(){return fi(ci)[0]},unstable_isNewReconciler:!1},Mi=k.ReactCurrentOwner,zi=!1;function Bi(e,t,n,r){t.child=null===e?Ao(t,null,n,r):_o(t,e.child,n,r)}function Fi(e,t,n,r,a){n=n.render;var o=t.ref;return oo(t,a),r=li(e,t,n,r,o,a),null===e||zi?(t.flags|=1,Bi(e,t,r,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function ji(e,t,n,r,a,o){if(null===e){var i=n.type;return"function"!=typeof i||Gs(i)||void 0!==i.defaultProps||null!==n.compare||void 0!==n.defaultProps?((e=Vs(n.type,null,r,t,t.mode,o)).ref=t.ref,e.return=t,t.child=e):(t.tag=15,t.type=i,Ui(e,t,i,r,a,o))}return i=e.child,0==(a&o)&&(a=i.memoizedProps,(n=null!==(n=n.compare)?n:fr)(a,r)&&e.ref===t.ref)?ol(e,t,o):(t.flags|=1,(e=Zs(i,r)).ref=t.ref,e.return=t,t.child=e)}function Ui(e,t,n,r,a,o){if(null!==e&&fr(e.memoizedProps,r)&&e.ref===t.ref){if(zi=!1,0==(o&a))return t.lanes=e.lanes,ol(e,t,o);0!=(16384&e.flags)&&(zi=!0)}return Hi(e,t,n,r,o)}function $i(e,t,n){var r=t.pendingProps,a=r.children,o=null!==e?e.memoizedState:null;if("hidden"===r.mode||"unstable-defer-without-hiding"===r.mode)if(0==(4&t.mode))t.memoizedState={baseLanes:0},Ss(t,n);else{if(0==(1073741824&n))return e=null!==o?o.baseLanes|n:n,t.lanes=t.childLanes=1073741824,t.memoizedState={baseLanes:e},Ss(t,e),null;t.memoizedState={baseLanes:0},Ss(t,null!==o?o.baseLanes:n)}else null!==o?(r=o.baseLanes|n,t.memoizedState=null):r=n,Ss(t,r);return Bi(e,t,a,n),t.child}function qi(e,t){var n=t.ref;(null===e&&null!==n||null!==e&&e.ref!==n)&&(t.flags|=128)}function Hi(e,t,n,r,a){var o=ba(n)?ha:pa.current;return o=ga(t,o),oo(t,a),n=li(e,t,n,r,o,a),null===e||zi?(t.flags|=1,Bi(e,t,n,a),t.child):(t.updateQueue=e.updateQueue,t.flags&=-517,e.lanes&=~a,ol(e,t,a))}function Gi(e,t,n,r,a){if(ba(n)){var o=!0;ka(t)}else o=!1;if(oo(t,a),null===t.stateNode)null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),wo(t,n,r),So(t,n,r,a),r=!0;else if(null===e){var i=t.stateNode,l=t.memoizedProps;i.props=l;var s=i.context,u=n.contextType;"object"==typeof u&&null!==u?u=io(u):u=ga(t,u=ba(n)?ha:pa.current);var c=n.getDerivedStateFromProps,d="function"==typeof c||"function"==typeof i.getSnapshotBeforeUpdate;d||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==r||s!==u)&&ko(t,i,r,u),lo=!1;var f=t.memoizedState;i.state=f,mo(t,r,i,a),s=t.memoizedState,l!==r||f!==s||ma.current||lo?("function"==typeof c&&(bo(t,n,c,r),s=t.memoizedState),(l=lo||yo(t,n,l,r,f,s,u))?(d||"function"!=typeof i.UNSAFE_componentWillMount&&"function"!=typeof i.componentWillMount||("function"==typeof i.componentWillMount&&i.componentWillMount(),"function"==typeof i.UNSAFE_componentWillMount&&i.UNSAFE_componentWillMount()),"function"==typeof i.componentDidMount&&(t.flags|=4)):("function"==typeof i.componentDidMount&&(t.flags|=4),t.memoizedProps=r,t.memoizedState=s),i.props=r,i.state=s,i.context=u,r=l):("function"==typeof i.componentDidMount&&(t.flags|=4),r=!1)}else{i=t.stateNode,uo(e,t),l=t.memoizedProps,u=t.type===t.elementType?l:Qa(t.type,l),i.props=u,d=t.pendingProps,f=i.context,"object"==typeof(s=n.contextType)&&null!==s?s=io(s):s=ga(t,s=ba(n)?ha:pa.current);var p=n.getDerivedStateFromProps;(c="function"==typeof p||"function"==typeof i.getSnapshotBeforeUpdate)||"function"!=typeof i.UNSAFE_componentWillReceiveProps&&"function"!=typeof i.componentWillReceiveProps||(l!==d||f!==s)&&ko(t,i,r,s),lo=!1,f=t.memoizedState,i.state=f,mo(t,r,i,a);var m=t.memoizedState;l!==d||f!==m||ma.current||lo?("function"==typeof p&&(bo(t,n,p,r),m=t.memoizedState),(u=lo||yo(t,n,u,r,f,m,s))?(c||"function"!=typeof i.UNSAFE_componentWillUpdate&&"function"!=typeof i.componentWillUpdate||("function"==typeof i.componentWillUpdate&&i.componentWillUpdate(r,m,s),"function"==typeof i.UNSAFE_componentWillUpdate&&i.UNSAFE_componentWillUpdate(r,m,s)),"function"==typeof i.componentDidUpdate&&(t.flags|=4),"function"==typeof i.getSnapshotBeforeUpdate&&(t.flags|=256)):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),t.memoizedProps=r,t.memoizedState=m),i.props=r,i.state=m,i.context=s,r=u):("function"!=typeof i.componentDidUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=4),"function"!=typeof i.getSnapshotBeforeUpdate||l===e.memoizedProps&&f===e.memoizedState||(t.flags|=256),r=!1)}return Zi(e,t,n,r,o,a)}function Zi(e,t,n,r,a,o){qi(e,t);var i=0!=(64&t.flags);if(!r&&!i)return a&&Sa(t,n,!1),ol(e,t,o);r=t.stateNode,Mi.current=t;var l=i&&"function"!=typeof n.getDerivedStateFromError?null:r.render();return t.flags|=1,null!==e&&i?(t.child=_o(t,e.child,null,o),t.child=_o(t,null,l,o)):Bi(e,t,l,o),t.memoizedState=r.state,a&&Sa(t,n,!0),t.child}function Vi(e){var t=e.stateNode;t.pendingContext?ya(0,t.pendingContext,t.pendingContext!==t.context):t.context&&ya(0,t.context,!1),Io(e,t.containerInfo)}var Wi,Ki,Yi,Qi={dehydrated:null,retryLane:0};function Xi(e,t,n){var r,a=t.pendingProps,o=Bo.current,i=!1;return(r=0!=(64&t.flags))||(r=(null===e||null!==e.memoizedState)&&0!=(2&o)),r?(i=!0,t.flags&=-65):null!==e&&null===e.memoizedState||void 0===a.fallback||!0===a.unstable_avoidThisFallback||(o|=1),da(Bo,1&o),null===e?(void 0!==a.fallback&&Go(t),e=a.children,o=a.fallback,i?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Qi,e):"number"==typeof a.unstable_expectedLoadTime?(e=Ji(t,e,o,n),t.child.memoizedState={baseLanes:n},t.memoizedState=Qi,t.lanes=33554432,e):((n=Ks({mode:"visible",children:e},t.mode,n,null)).return=t,t.child=n)):(e.memoizedState,i?(a=tl(e,t,a.children,a.fallback,n),i=t.child,o=e.child.memoizedState,i.memoizedState=null===o?{baseLanes:n}:{baseLanes:o.baseLanes|n},i.childLanes=e.childLanes&~n,t.memoizedState=Qi,a):(n=el(e,t,a.children,n),t.memoizedState=null,n))}function Ji(e,t,n,r){var a=e.mode,o=e.child;return t={mode:"hidden",children:t},0==(2&a)&&null!==o?(o.childLanes=0,o.pendingProps=t):o=Ks(t,a,0,null),n=Ws(n,a,r,null),o.return=e,n.return=e,o.sibling=n,e.child=o,n}function el(e,t,n,r){var a=e.child;return e=a.sibling,n=Zs(a,{mode:"visible",children:n}),0==(2&t.mode)&&(n.lanes=r),n.return=t,n.sibling=null,null!==e&&(e.nextEffect=null,e.flags=8,t.firstEffect=t.lastEffect=e),t.child=n}function tl(e,t,n,r,a){var o=t.mode,i=e.child;e=i.sibling;var l={mode:"hidden",children:n};return 0==(2&o)&&t.child!==i?((n=t.child).childLanes=0,n.pendingProps=l,null!==(i=n.lastEffect)?(t.firstEffect=n.firstEffect,t.lastEffect=i,i.nextEffect=null):t.firstEffect=t.lastEffect=null):n=Zs(i,l),null!==e?r=Zs(e,r):(r=Ws(r,o,a,null)).flags|=2,r.return=t,n.return=t,n.sibling=r,t.child=n,r}function nl(e,t){e.lanes|=t;var n=e.alternate;null!==n&&(n.lanes|=t),ao(e.return,t)}function rl(e,t,n,r,a,o){var i=e.memoizedState;null===i?e.memoizedState={isBackwards:t,rendering:null,renderingStartTime:0,last:r,tail:n,tailMode:a,lastEffect:o}:(i.isBackwards=t,i.rendering=null,i.renderingStartTime=0,i.last=r,i.tail=n,i.tailMode=a,i.lastEffect=o)}function al(e,t,n){var r=t.pendingProps,a=r.revealOrder,o=r.tail;if(Bi(e,t,r.children,n),0!=(2&(r=Bo.current)))r=1&r|2,t.flags|=64;else{if(null!==e&&0!=(64&e.flags))e:for(e=t.child;null!==e;){if(13===e.tag)null!==e.memoizedState&&nl(e,n);else if(19===e.tag)nl(e,n);else if(null!==e.child){e.child.return=e,e=e.child;continue}if(e===t)break e;for(;null===e.sibling;){if(null===e.return||e.return===t)break e;e=e.return}e.sibling.return=e.return,e=e.sibling}r&=1}if(da(Bo,r),0==(2&t.mode))t.memoizedState=null;else switch(a){case"forwards":for(n=t.child,a=null;null!==n;)null!==(e=n.alternate)&&null===Fo(e)&&(a=n),n=n.sibling;null===(n=a)?(a=t.child,t.child=null):(a=n.sibling,n.sibling=null),rl(t,!1,a,n,o,t.lastEffect);break;case"backwards":for(n=null,a=t.child,t.child=null;null!==a;){if(null!==(e=a.alternate)&&null===Fo(e)){t.child=a;break}e=a.sibling,a.sibling=n,n=a,a=e}rl(t,!0,n,null,o,t.lastEffect);break;case"together":rl(t,!1,null,null,void 0,t.lastEffect);break;default:t.memoizedState=null}return t.child}function ol(e,t,n){if(null!==e&&(t.dependencies=e.dependencies),Ul|=t.lanes,0!=(n&t.childLanes)){if(null!==e&&t.child!==e.child)throw Error(i(153));if(null!==t.child){for(n=Zs(e=t.child,e.pendingProps),t.child=n,n.return=t;null!==e.sibling;)e=e.sibling,(n=n.sibling=Zs(e,e.pendingProps)).return=t;n.sibling=null}return t.child}return null}function il(e,t){if(!$o)switch(e.tailMode){case"hidden":t=e.tail;for(var n=null;null!==t;)null!==t.alternate&&(n=t),t=t.sibling;null===n?e.tail=null:n.sibling=null;break;case"collapsed":n=e.tail;for(var r=null;null!==n;)null!==n.alternate&&(r=n),n=n.sibling;null===r?t||null===e.tail?e.tail=null:e.tail.sibling=null:r.sibling=null}}function ll(e,t,n){var r=t.pendingProps;switch(t.tag){case 2:case 16:case 15:case 0:case 11:case 7:case 8:case 12:case 9:case 14:return null;case 1:case 17:return ba(t.type)&&va(),null;case 3:return Do(),ca(ma),ca(pa),Yo(),(r=t.stateNode).pendingContext&&(r.context=r.pendingContext,r.pendingContext=null),null!==e&&null!==e.child||(Vo(t)?t.flags|=4:r.hydrate||(t.flags|=256)),null;case 5:zo(t);var o=Oo(No.current);if(n=t.type,null!==e&&null!=t.stateNode)Ki(e,t,n,r),e.ref!==t.ref&&(t.flags|=128);else{if(!r){if(null===t.stateNode)throw Error(i(166));return null}if(e=Oo(Ro.current),Vo(t)){r=t.stateNode,n=t.type;var l=t.memoizedProps;switch(r[Xr]=t,r[Jr]=l,n){case"dialog":Rr("cancel",r),Rr("close",r);break;case"iframe":case"object":case"embed":Rr("load",r);break;case"video":case"audio":for(e=0;e<Cr.length;e++)Rr(Cr[e],r);break;case"source":Rr("error",r);break;case"img":case"image":case"link":Rr("error",r),Rr("load",r);break;case"details":Rr("toggle",r);break;case"input":ee(r,l),Rr("invalid",r);break;case"select":r._wrapperState={wasMultiple:!!l.multiple},Rr("invalid",r);break;case"textarea":se(r,l),Rr("invalid",r)}for(var u in xe(n,l),e=null,l)l.hasOwnProperty(u)&&(o=l[u],"children"===u?"string"==typeof o?r.textContent!==o&&(e=["children",o]):"number"==typeof o&&r.textContent!==""+o&&(e=["children",""+o]):s.hasOwnProperty(u)&&null!=o&&"onScroll"===u&&Rr("scroll",r));switch(n){case"input":Y(r),re(r,l,!0);break;case"textarea":Y(r),ce(r);break;case"select":case"option":break;default:"function"==typeof l.onClick&&(r.onclick=jr)}r=e,t.updateQueue=r,null!==r&&(t.flags|=4)}else{switch(u=9===o.nodeType?o:o.ownerDocument,e===de&&(e=pe(n)),e===de?"script"===n?((e=u.createElement("div")).innerHTML="<script><\/script>",e=e.removeChild(e.firstChild)):"string"==typeof r.is?e=u.createElement(n,{is:r.is}):(e=u.createElement(n),"select"===n&&(u=e,r.multiple?u.multiple=!0:r.size&&(u.size=r.size))):e=u.createElementNS(e,n),e[Xr]=t,e[Jr]=r,Wi(e,t),t.stateNode=e,u=Te(n,r),n){case"dialog":Rr("cancel",e),Rr("close",e),o=r;break;case"iframe":case"object":case"embed":Rr("load",e),o=r;break;case"video":case"audio":for(o=0;o<Cr.length;o++)Rr(Cr[o],e);o=r;break;case"source":Rr("error",e),o=r;break;case"img":case"image":case"link":Rr("error",e),Rr("load",e),o=r;break;case"details":Rr("toggle",e),o=r;break;case"input":ee(e,r),o=J(e,r),Rr("invalid",e);break;case"option":o=oe(e,r);break;case"select":e._wrapperState={wasMultiple:!!r.multiple},o=a({},r,{value:void 0}),Rr("invalid",e);break;case"textarea":se(e,r),o=le(e,r),Rr("invalid",e);break;default:o=r}xe(n,o);var c=o;for(l in c)if(c.hasOwnProperty(l)){var d=c[l];"style"===l?Se(e,d):"dangerouslySetInnerHTML"===l?null!=(d=d?d.__html:void 0)&&be(e,d):"children"===l?"string"==typeof d?("textarea"!==n||""!==d)&&ve(e,d):"number"==typeof d&&ve(e,""+d):"suppressContentEditableWarning"!==l&&"suppressHydrationWarning"!==l&&"autoFocus"!==l&&(s.hasOwnProperty(l)?null!=d&&"onScroll"===l&&Rr("scroll",e):null!=d&&w(e,l,d,u))}switch(n){case"input":Y(e),re(e,r,!1);break;case"textarea":Y(e),ce(e);break;case"option":null!=r.value&&e.setAttribute("value",""+W(r.value));break;case"select":e.multiple=!!r.multiple,null!=(l=r.value)?ie(e,!!r.multiple,l,!1):null!=r.defaultValue&&ie(e,!!r.multiple,r.defaultValue,!0);break;default:"function"==typeof o.onClick&&(e.onclick=jr)}qr(n,r)&&(t.flags|=4)}null!==t.ref&&(t.flags|=128)}return null;case 6:if(e&&null!=t.stateNode)Yi(0,t,e.memoizedProps,r);else{if("string"!=typeof r&&null===t.stateNode)throw Error(i(166));n=Oo(No.current),Oo(Ro.current),Vo(t)?(r=t.stateNode,n=t.memoizedProps,r[Xr]=t,r.nodeValue!==n&&(t.flags|=4)):((r=(9===n.nodeType?n:n.ownerDocument).createTextNode(r))[Xr]=t,t.stateNode=r)}return null;case 13:return ca(Bo),r=t.memoizedState,0!=(64&t.flags)?(t.lanes=n,t):(r=null!==r,n=!1,null===e?void 0!==t.memoizedProps.fallback&&Vo(t):n=null!==e.memoizedState,r&&!n&&0!=(2&t.mode)&&(null===e&&!0!==t.memoizedProps.unstable_avoidThisFallback||0!=(1&Bo.current)?0===Bl&&(Bl=3):(0!==Bl&&3!==Bl||(Bl=4),null===Ol||0==(134217727&Ul)&&0==(134217727&$l)||vs(Ol,Dl))),(r||n)&&(t.flags|=4),null);case 4:return Do(),null===e&&Nr(t.stateNode.containerInfo),null;case 10:return ro(t),null;case 19:if(ca(Bo),null===(r=t.memoizedState))return null;if(l=0!=(64&t.flags),null===(u=r.rendering))if(l)il(r,!1);else{if(0!==Bl||null!==e&&0!=(64&e.flags))for(e=t.child;null!==e;){if(null!==(u=Fo(e))){for(t.flags|=64,il(r,!1),null!==(l=u.updateQueue)&&(t.updateQueue=l,t.flags|=4),null===r.lastEffect&&(t.firstEffect=null),t.lastEffect=r.lastEffect,r=n,n=t.child;null!==n;)e=r,(l=n).flags&=2,l.nextEffect=null,l.firstEffect=null,l.lastEffect=null,null===(u=l.alternate)?(l.childLanes=0,l.lanes=e,l.child=null,l.memoizedProps=null,l.memoizedState=null,l.updateQueue=null,l.dependencies=null,l.stateNode=null):(l.childLanes=u.childLanes,l.lanes=u.lanes,l.child=u.child,l.memoizedProps=u.memoizedProps,l.memoizedState=u.memoizedState,l.updateQueue=u.updateQueue,l.type=u.type,e=u.dependencies,l.dependencies=null===e?null:{lanes:e.lanes,firstContext:e.firstContext}),n=n.sibling;return da(Bo,1&Bo.current|2),t.child}e=e.sibling}null!==r.tail&&qa()>Zl&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432)}else{if(!l)if(null!==(e=Fo(u))){if(t.flags|=64,l=!0,null!==(n=e.updateQueue)&&(t.updateQueue=n,t.flags|=4),il(r,!0),null===r.tail&&"hidden"===r.tailMode&&!u.alternate&&!$o)return null!==(t=t.lastEffect=r.lastEffect)&&(t.nextEffect=null),null}else 2*qa()-r.renderingStartTime>Zl&&1073741824!==n&&(t.flags|=64,l=!0,il(r,!1),t.lanes=33554432);r.isBackwards?(u.sibling=t.child,t.child=u):(null!==(n=r.last)?n.sibling=u:t.child=u,r.last=u)}return null!==r.tail?(n=r.tail,r.rendering=n,r.tail=n.sibling,r.lastEffect=t.lastEffect,r.renderingStartTime=qa(),n.sibling=null,t=Bo.current,da(Bo,l?1&t|2:1&t),n):null;case 23:case 24:return Es(),null!==e&&null!==e.memoizedState!=(null!==t.memoizedState)&&"unstable-defer-without-hiding"!==r.mode&&(t.flags|=4),null}throw Error(i(156,t.tag))}function sl(e){switch(e.tag){case 1:ba(e.type)&&va();var t=e.flags;return 4096&t?(e.flags=-4097&t|64,e):null;case 3:if(Do(),ca(ma),ca(pa),Yo(),0!=(64&(t=e.flags)))throw Error(i(285));return e.flags=-4097&t|64,e;case 5:return zo(e),null;case 13:return ca(Bo),4096&(t=e.flags)?(e.flags=-4097&t|64,e):null;case 19:return ca(Bo),null;case 4:return Do(),null;case 10:return ro(e),null;case 23:case 24:return Es(),null;default:return null}}function ul(e,t){try{var n="",r=t;do{n+=Z(r),r=r.return}while(r);var a=n}catch(o){a="\nError generating stack: "+o.message+"\n"+o.stack}return{value:e,source:t,stack:a}}function cl(e,t){try{console.error(t.value)}catch(n){setTimeout((function(){throw n}))}}Wi=function(e,t){for(var n=t.child;null!==n;){if(5===n.tag||6===n.tag)e.appendChild(n.stateNode);else if(4!==n.tag&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===t)break;for(;null===n.sibling;){if(null===n.return||n.return===t)return;n=n.return}n.sibling.return=n.return,n=n.sibling}},Ki=function(e,t,n,r){var o=e.memoizedProps;if(o!==r){e=t.stateNode,Oo(Ro.current);var i,l=null;switch(n){case"input":o=J(e,o),r=J(e,r),l=[];break;case"option":o=oe(e,o),r=oe(e,r),l=[];break;case"select":o=a({},o,{value:void 0}),r=a({},r,{value:void 0}),l=[];break;case"textarea":o=le(e,o),r=le(e,r),l=[];break;default:"function"!=typeof o.onClick&&"function"==typeof r.onClick&&(e.onclick=jr)}for(d in xe(n,r),n=null,o)if(!r.hasOwnProperty(d)&&o.hasOwnProperty(d)&&null!=o[d])if("style"===d){var u=o[d];for(i in u)u.hasOwnProperty(i)&&(n||(n={}),n[i]="")}else"dangerouslySetInnerHTML"!==d&&"children"!==d&&"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&"autoFocus"!==d&&(s.hasOwnProperty(d)?l||(l=[]):(l=l||[]).push(d,null));for(d in r){var c=r[d];if(u=null!=o?o[d]:void 0,r.hasOwnProperty(d)&&c!==u&&(null!=c||null!=u))if("style"===d)if(u){for(i in u)!u.hasOwnProperty(i)||c&&c.hasOwnProperty(i)||(n||(n={}),n[i]="");for(i in c)c.hasOwnProperty(i)&&u[i]!==c[i]&&(n||(n={}),n[i]=c[i])}else n||(l||(l=[]),l.push(d,n)),n=c;else"dangerouslySetInnerHTML"===d?(c=c?c.__html:void 0,u=u?u.__html:void 0,null!=c&&u!==c&&(l=l||[]).push(d,c)):"children"===d?"string"!=typeof c&&"number"!=typeof c||(l=l||[]).push(d,""+c):"suppressContentEditableWarning"!==d&&"suppressHydrationWarning"!==d&&(s.hasOwnProperty(d)?(null!=c&&"onScroll"===d&&Rr("scroll",e),l||u===c||(l=[])):"object"==typeof c&&null!==c&&c.$$typeof===D?c.toString():(l=l||[]).push(d,c))}n&&(l=l||[]).push("style",n);var d=l;(t.updateQueue=d)&&(t.flags|=4)}},Yi=function(e,t,n,r){n!==r&&(t.flags|=4)};var dl="function"==typeof WeakMap?WeakMap:Map;function fl(e,t,n){(n=co(-1,n)).tag=3,n.payload={element:null};var r=t.value;return n.callback=function(){Yl||(Yl=!0,Ql=r),cl(0,t)},n}function pl(e,t,n){(n=co(-1,n)).tag=3;var r=e.type.getDerivedStateFromError;if("function"==typeof r){var a=t.value;n.payload=function(){return cl(0,t),r(a)}}var o=e.stateNode;return null!==o&&"function"==typeof o.componentDidCatch&&(n.callback=function(){"function"!=typeof r&&(null===Xl?Xl=new Set([this]):Xl.add(this),cl(0,t));var e=t.stack;this.componentDidCatch(t.value,{componentStack:null!==e?e:""})}),n}var ml="function"==typeof WeakSet?WeakSet:Set;function hl(e){var t=e.ref;if(null!==t)if("function"==typeof t)try{t(null)}catch(n){js(e,n)}else t.current=null}function gl(e,t){switch(t.tag){case 0:case 11:case 15:case 22:case 5:case 6:case 4:case 17:return;case 1:if(256&t.flags&&null!==e){var n=e.memoizedProps,r=e.memoizedState;t=(e=t.stateNode).getSnapshotBeforeUpdate(t.elementType===t.type?n:Qa(t.type,n),r),e.__reactInternalSnapshotBeforeUpdate=t}return;case 3:return void(256&t.flags&&Vr(t.stateNode.containerInfo))}throw Error(i(163))}function bl(e,t,n){switch(n.tag){case 0:case 11:case 15:case 22:if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{if(3==(3&e.tag)){var r=e.create;e.destroy=r()}e=e.next}while(e!==t)}if(null!==(t=null!==(t=n.updateQueue)?t.lastEffect:null)){e=t=t.next;do{var a=e;r=a.next,0!=(4&(a=a.tag))&&0!=(1&a)&&(zs(n,e),Ms(n,e)),e=r}while(e!==t)}return;case 1:return e=n.stateNode,4&n.flags&&(null===t?e.componentDidMount():(r=n.elementType===n.type?t.memoizedProps:Qa(n.type,t.memoizedProps),e.componentDidUpdate(r,t.memoizedState,e.__reactInternalSnapshotBeforeUpdate))),void(null!==(t=n.updateQueue)&&ho(n,t,e));case 3:if(null!==(t=n.updateQueue)){if(e=null,null!==n.child)switch(n.child.tag){case 5:case 1:e=n.child.stateNode}ho(n,t,e)}return;case 5:return e=n.stateNode,void(null===t&&4&n.flags&&qr(n.type,n.memoizedProps)&&e.focus());case 6:case 4:case 12:case 19:case 17:case 20:case 21:case 23:case 24:return;case 13:return void(null===n.memoizedState&&(n=n.alternate,null!==n&&(n=n.memoizedState,null!==n&&(n=n.dehydrated,null!==n&&St(n)))))}throw Error(i(163))}function vl(e,t){for(var n=e;;){if(5===n.tag){var r=n.stateNode;if(t)"function"==typeof(r=r.style).setProperty?r.setProperty("display","none","important"):r.display="none";else{r=n.stateNode;var a=n.memoizedProps.style;a=null!=a&&a.hasOwnProperty("display")?a.display:null,r.style.display=ke("display",a)}}else if(6===n.tag)n.stateNode.nodeValue=t?"":n.memoizedProps;else if((23!==n.tag&&24!==n.tag||null===n.memoizedState||n===e)&&null!==n.child){n.child.return=n,n=n.child;continue}if(n===e)break;for(;null===n.sibling;){if(null===n.return||n.return===e)return;n=n.return}n.sibling.return=n.return,n=n.sibling}}function yl(e,t){if(xa&&"function"==typeof xa.onCommitFiberUnmount)try{xa.onCommitFiberUnmount(Ea,t)}catch(o){}switch(t.tag){case 0:case 11:case 14:case 15:case 22:if(null!==(e=t.updateQueue)&&null!==(e=e.lastEffect)){var n=e=e.next;do{var r=n,a=r.destroy;if(r=r.tag,void 0!==a)if(0!=(4&r))zs(t,n);else{r=t;try{a()}catch(o){js(r,o)}}n=n.next}while(n!==e)}break;case 1:if(hl(t),"function"==typeof(e=t.stateNode).componentWillUnmount)try{e.props=t.memoizedProps,e.state=t.memoizedState,e.componentWillUnmount()}catch(o){js(t,o)}break;case 5:hl(t);break;case 4:Tl(e,t)}}function wl(e){e.alternate=null,e.child=null,e.dependencies=null,e.firstEffect=null,e.lastEffect=null,e.memoizedProps=null,e.memoizedState=null,e.pendingProps=null,e.return=null,e.updateQueue=null}function kl(e){return 5===e.tag||3===e.tag||4===e.tag}function Sl(e){e:{for(var t=e.return;null!==t;){if(kl(t))break e;t=t.return}throw Error(i(160))}var n=t;switch(t=n.stateNode,n.tag){case 5:var r=!1;break;case 3:case 4:t=t.containerInfo,r=!0;break;default:throw Error(i(161))}16&n.flags&&(ve(t,""),n.flags&=-17);e:t:for(n=e;;){for(;null===n.sibling;){if(null===n.return||kl(n.return)){n=null;break e}n=n.return}for(n.sibling.return=n.return,n=n.sibling;5!==n.tag&&6!==n.tag&&18!==n.tag;){if(2&n.flags)continue t;if(null===n.child||4===n.tag)continue t;n.child.return=n,n=n.child}if(!(2&n.flags)){n=n.stateNode;break e}}r?El(e,n,t):xl(e,n,t)}function El(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?8===n.nodeType?n.parentNode.insertBefore(e,t):n.insertBefore(e,t):(8===n.nodeType?(t=n.parentNode).insertBefore(e,n):(t=n).appendChild(e),null!=(n=n._reactRootContainer)||null!==t.onclick||(t.onclick=jr));else if(4!==r&&null!==(e=e.child))for(El(e,t,n),e=e.sibling;null!==e;)El(e,t,n),e=e.sibling}function xl(e,t,n){var r=e.tag,a=5===r||6===r;if(a)e=a?e.stateNode:e.stateNode.instance,t?n.insertBefore(e,t):n.appendChild(e);else if(4!==r&&null!==(e=e.child))for(xl(e,t,n),e=e.sibling;null!==e;)xl(e,t,n),e=e.sibling}function Tl(e,t){for(var n,r,a=t,o=!1;;){if(!o){o=a.return;e:for(;;){if(null===o)throw Error(i(160));switch(n=o.stateNode,o.tag){case 5:r=!1;break e;case 3:case 4:n=n.containerInfo,r=!0;break e}o=o.return}o=!0}if(5===a.tag||6===a.tag){e:for(var l=e,s=a,u=s;;)if(yl(l,u),null!==u.child&&4!==u.tag)u.child.return=u,u=u.child;else{if(u===s)break e;for(;null===u.sibling;){if(null===u.return||u.return===s)break e;u=u.return}u.sibling.return=u.return,u=u.sibling}r?(l=n,s=a.stateNode,8===l.nodeType?l.parentNode.removeChild(s):l.removeChild(s)):n.removeChild(a.stateNode)}else if(4===a.tag){if(null!==a.child){n=a.stateNode.containerInfo,r=!0,a.child.return=a,a=a.child;continue}}else if(yl(e,a),null!==a.child){a.child.return=a,a=a.child;continue}if(a===t)break;for(;null===a.sibling;){if(null===a.return||a.return===t)return;4===(a=a.return).tag&&(o=!1)}a.sibling.return=a.return,a=a.sibling}}function Cl(e,t){switch(t.tag){case 0:case 11:case 14:case 15:case 22:var n=t.updateQueue;if(null!==(n=null!==n?n.lastEffect:null)){var r=n=n.next;do{3==(3&r.tag)&&(e=r.destroy,r.destroy=void 0,void 0!==e&&e()),r=r.next}while(r!==n)}return;case 1:case 12:case 17:return;case 5:if(null!=(n=t.stateNode)){r=t.memoizedProps;var a=null!==e?e.memoizedProps:r;e=t.type;var o=t.updateQueue;if(t.updateQueue=null,null!==o){for(n[Jr]=r,"input"===e&&"radio"===r.type&&null!=r.name&&te(n,r),Te(e,a),t=Te(e,r),a=0;a<o.length;a+=2){var l=o[a],s=o[a+1];"style"===l?Se(n,s):"dangerouslySetInnerHTML"===l?be(n,s):"children"===l?ve(n,s):w(n,l,s,t)}switch(e){case"input":ne(n,r);break;case"textarea":ue(n,r);break;case"select":e=n._wrapperState.wasMultiple,n._wrapperState.wasMultiple=!!r.multiple,null!=(o=r.value)?ie(n,!!r.multiple,o,!1):e!==!!r.multiple&&(null!=r.defaultValue?ie(n,!!r.multiple,r.defaultValue,!0):ie(n,!!r.multiple,r.multiple?[]:"",!1))}}}return;case 6:if(null===t.stateNode)throw Error(i(162));return void(t.stateNode.nodeValue=t.memoizedProps);case 3:return void((n=t.stateNode).hydrate&&(n.hydrate=!1,St(n.containerInfo)));case 13:return null!==t.memoizedState&&(Gl=qa(),vl(t.child,!0)),void _l(t);case 19:return void _l(t);case 23:case 24:return void vl(t,null!==t.memoizedState)}throw Error(i(163))}function _l(e){var t=e.updateQueue;if(null!==t){e.updateQueue=null;var n=e.stateNode;null===n&&(n=e.stateNode=new ml),t.forEach((function(t){var r=$s.bind(null,e,t);n.has(t)||(n.add(t),t.then(r,r))}))}}function Al(e,t){return null!==e&&(null===(e=e.memoizedState)||null!==e.dehydrated)&&(null!==(t=t.memoizedState)&&null===t.dehydrated)}var Ll=Math.ceil,Rl=k.ReactCurrentDispatcher,Pl=k.ReactCurrentOwner,Nl=0,Ol=null,Il=null,Dl=0,Ml=0,zl=ua(0),Bl=0,Fl=null,jl=0,Ul=0,$l=0,ql=0,Hl=null,Gl=0,Zl=1/0;function Vl(){Zl=qa()+500}var Wl,Kl=null,Yl=!1,Ql=null,Xl=null,Jl=!1,es=null,ts=90,ns=[],rs=[],as=null,os=0,is=null,ls=-1,ss=0,us=0,cs=null,ds=!1;function fs(){return 0!=(48&Nl)?qa():-1!==ls?ls:ls=qa()}function ps(e){if(0==(2&(e=e.mode)))return 1;if(0==(4&e))return 99===Ha()?1:2;if(0===ss&&(ss=jl),0!==Ya.transition){0!==us&&(us=null!==Hl?Hl.pendingLanes:0),e=ss;var t=4186112&~us;return 0===(t&=-t)&&(0===(t=(e=4186112&~e)&-e)&&(t=8192)),t}return e=Ha(),0!=(4&Nl)&&98===e?e=jt(12,ss):e=jt(e=function(e){switch(e){case 99:return 15;case 98:return 10;case 97:case 96:return 8;case 95:return 2;default:return 0}}(e),ss),e}function ms(e,t,n){if(50<os)throw os=0,is=null,Error(i(185));if(null===(e=hs(e,t)))return null;qt(e,t,n),e===Ol&&($l|=t,4===Bl&&vs(e,Dl));var r=Ha();1===t?0!=(8&Nl)&&0==(48&Nl)?ys(e):(gs(e,n),0===Nl&&(Vl(),Wa())):(0==(4&Nl)||98!==r&&99!==r||(null===as?as=new Set([e]):as.add(e)),gs(e,n)),Hl=e}function hs(e,t){e.lanes|=t;var n=e.alternate;for(null!==n&&(n.lanes|=t),n=e,e=e.return;null!==e;)e.childLanes|=t,null!==(n=e.alternate)&&(n.childLanes|=t),n=e,e=e.return;return 3===n.tag?n.stateNode:null}function gs(e,t){for(var n=e.callbackNode,r=e.suspendedLanes,a=e.pingedLanes,o=e.expirationTimes,l=e.pendingLanes;0<l;){var s=31-Ht(l),u=1<<s,c=o[s];if(-1===c){if(0==(u&r)||0!=(u&a)){c=t,zt(u);var d=Mt;o[s]=10<=d?c+250:6<=d?c+5e3:-1}}else c<=t&&(e.expiredLanes|=u);l&=~u}if(r=Bt(e,e===Ol?Dl:0),t=Mt,0===r)null!==n&&(n!==za&&_a(n),e.callbackNode=null,e.callbackPriority=0);else{if(null!==n){if(e.callbackPriority===t)return;n!==za&&_a(n)}15===t?(n=ys.bind(null,e),null===Fa?(Fa=[n],ja=Ca(Na,Ka)):Fa.push(n),n=za):14===t?n=Va(99,ys.bind(null,e)):(n=function(e){switch(e){case 15:case 14:return 99;case 13:case 12:case 11:case 10:return 98;case 9:case 8:case 7:case 6:case 4:case 5:return 97;case 3:case 2:case 1:return 95;case 0:return 90;default:throw Error(i(358,e))}}(t),n=Va(n,bs.bind(null,e))),e.callbackPriority=t,e.callbackNode=n}}function bs(e){if(ls=-1,us=ss=0,0!=(48&Nl))throw Error(i(327));var t=e.callbackNode;if(Ds()&&e.callbackNode!==t)return null;var n=Bt(e,e===Ol?Dl:0);if(0===n)return null;var r=n,a=Nl;Nl|=16;var o=Cs();for(Ol===e&&Dl===r||(Vl(),xs(e,r));;)try{Ls();break}catch(s){Ts(e,s)}if(no(),Rl.current=o,Nl=a,null!==Il?r=0:(Ol=null,Dl=0,r=Bl),0!=(jl&$l))xs(e,0);else if(0!==r){if(2===r&&(Nl|=64,e.hydrate&&(e.hydrate=!1,Vr(e.containerInfo)),0!==(n=Ft(e))&&(r=_s(e,n))),1===r)throw t=Fl,xs(e,0),vs(e,n),gs(e,qa()),t;switch(e.finishedWork=e.current.alternate,e.finishedLanes=n,r){case 0:case 1:throw Error(i(345));case 2:case 5:Ns(e);break;case 3:if(vs(e,n),(62914560&n)===n&&10<(r=Gl+500-qa())){if(0!==Bt(e,0))break;if(((a=e.suspendedLanes)&n)!==n){fs(),e.pingedLanes|=e.suspendedLanes&a;break}e.timeoutHandle=Gr(Ns.bind(null,e),r);break}Ns(e);break;case 4:if(vs(e,n),(4186112&n)===n)break;for(r=e.eventTimes,a=-1;0<n;){var l=31-Ht(n);o=1<<l,(l=r[l])>a&&(a=l),n&=~o}if(n=a,10<(n=(120>(n=qa()-n)?120:480>n?480:1080>n?1080:1920>n?1920:3e3>n?3e3:4320>n?4320:1960*Ll(n/1960))-n)){e.timeoutHandle=Gr(Ns.bind(null,e),n);break}Ns(e);break;default:throw Error(i(329))}}return gs(e,qa()),e.callbackNode===t?bs.bind(null,e):null}function vs(e,t){for(t&=~ql,t&=~$l,e.suspendedLanes|=t,e.pingedLanes&=~t,e=e.expirationTimes;0<t;){var n=31-Ht(t),r=1<<n;e[n]=-1,t&=~r}}function ys(e){if(0!=(48&Nl))throw Error(i(327));if(Ds(),e===Ol&&0!=(e.expiredLanes&Dl)){var t=Dl,n=_s(e,t);0!=(jl&$l)&&(n=_s(e,t=Bt(e,t)))}else n=_s(e,t=Bt(e,0));if(0!==e.tag&&2===n&&(Nl|=64,e.hydrate&&(e.hydrate=!1,Vr(e.containerInfo)),0!==(t=Ft(e))&&(n=_s(e,t))),1===n)throw n=Fl,xs(e,0),vs(e,t),gs(e,qa()),n;return e.finishedWork=e.current.alternate,e.finishedLanes=t,Ns(e),gs(e,qa()),null}function ws(e,t){var n=Nl;Nl|=1;try{return e(t)}finally{0===(Nl=n)&&(Vl(),Wa())}}function ks(e,t){var n=Nl;Nl&=-2,Nl|=8;try{return e(t)}finally{0===(Nl=n)&&(Vl(),Wa())}}function Ss(e,t){da(zl,Ml),Ml|=t,jl|=t}function Es(){Ml=zl.current,ca(zl)}function xs(e,t){e.finishedWork=null,e.finishedLanes=0;var n=e.timeoutHandle;if(-1!==n&&(e.timeoutHandle=-1,Zr(n)),null!==Il)for(n=Il.return;null!==n;){var r=n;switch(r.tag){case 1:null!=(r=r.type.childContextTypes)&&va();break;case 3:Do(),ca(ma),ca(pa),Yo();break;case 5:zo(r);break;case 4:Do();break;case 13:case 19:ca(Bo);break;case 10:ro(r);break;case 23:case 24:Es()}n=n.return}Ol=e,Il=Zs(e.current,null),Dl=Ml=jl=t,Bl=0,Fl=null,ql=$l=Ul=0}function Ts(e,t){for(;;){var n=Il;try{if(no(),Qo.current=Ni,ri){for(var r=ei.memoizedState;null!==r;){var a=r.queue;null!==a&&(a.pending=null),r=r.next}ri=!1}if(Jo=0,ni=ti=ei=null,ai=!1,Pl.current=null,null===n||null===n.return){Bl=1,Fl=t,Il=null;break}e:{var o=e,i=n.return,l=n,s=t;if(t=Dl,l.flags|=2048,l.firstEffect=l.lastEffect=null,null!==s&&"object"==typeof s&&"function"==typeof s.then){var u=s;if(0==(2&l.mode)){var c=l.alternate;c?(l.updateQueue=c.updateQueue,l.memoizedState=c.memoizedState,l.lanes=c.lanes):(l.updateQueue=null,l.memoizedState=null)}var d=0!=(1&Bo.current),f=i;do{var p;if(p=13===f.tag){var m=f.memoizedState;if(null!==m)p=null!==m.dehydrated;else{var h=f.memoizedProps;p=void 0!==h.fallback&&(!0!==h.unstable_avoidThisFallback||!d)}}if(p){var g=f.updateQueue;if(null===g){var b=new Set;b.add(u),f.updateQueue=b}else g.add(u);if(0==(2&f.mode)){if(f.flags|=64,l.flags|=16384,l.flags&=-2981,1===l.tag)if(null===l.alternate)l.tag=17;else{var v=co(-1,1);v.tag=2,fo(l,v)}l.lanes|=1;break e}s=void 0,l=t;var y=o.pingCache;if(null===y?(y=o.pingCache=new dl,s=new Set,y.set(u,s)):void 0===(s=y.get(u))&&(s=new Set,y.set(u,s)),!s.has(l)){s.add(l);var w=Us.bind(null,o,u,l);u.then(w,w)}f.flags|=4096,f.lanes=t;break e}f=f.return}while(null!==f);s=Error((V(l.type)||"A React component")+" suspended while rendering, but no fallback UI was specified.\n\nAdd a <Suspense fallback=...> component higher in the tree to provide a loading indicator or placeholder to display.")}5!==Bl&&(Bl=2),s=ul(s,l),f=i;do{switch(f.tag){case 3:o=s,f.flags|=4096,t&=-t,f.lanes|=t,po(f,fl(0,o,t));break e;case 1:o=s;var k=f.type,S=f.stateNode;if(0==(64&f.flags)&&("function"==typeof k.getDerivedStateFromError||null!==S&&"function"==typeof S.componentDidCatch&&(null===Xl||!Xl.has(S)))){f.flags|=4096,t&=-t,f.lanes|=t,po(f,pl(f,o,t));break e}}f=f.return}while(null!==f)}Ps(n)}catch(E){t=E,Il===n&&null!==n&&(Il=n=n.return);continue}break}}function Cs(){var e=Rl.current;return Rl.current=Ni,null===e?Ni:e}function _s(e,t){var n=Nl;Nl|=16;var r=Cs();for(Ol===e&&Dl===t||xs(e,t);;)try{As();break}catch(a){Ts(e,a)}if(no(),Nl=n,Rl.current=r,null!==Il)throw Error(i(261));return Ol=null,Dl=0,Bl}function As(){for(;null!==Il;)Rs(Il)}function Ls(){for(;null!==Il&&!Aa();)Rs(Il)}function Rs(e){var t=Wl(e.alternate,e,Ml);e.memoizedProps=e.pendingProps,null===t?Ps(e):Il=t,Pl.current=null}function Ps(e){var t=e;do{var n=t.alternate;if(e=t.return,0==(2048&t.flags)){if(null!==(n=ll(n,t,Ml)))return void(Il=n);if(24!==(n=t).tag&&23!==n.tag||null===n.memoizedState||0!=(1073741824&Ml)||0==(4&n.mode)){for(var r=0,a=n.child;null!==a;)r|=a.lanes|a.childLanes,a=a.sibling;n.childLanes=r}null!==e&&0==(2048&e.flags)&&(null===e.firstEffect&&(e.firstEffect=t.firstEffect),null!==t.lastEffect&&(null!==e.lastEffect&&(e.lastEffect.nextEffect=t.firstEffect),e.lastEffect=t.lastEffect),1<t.flags&&(null!==e.lastEffect?e.lastEffect.nextEffect=t:e.firstEffect=t,e.lastEffect=t))}else{if(null!==(n=sl(t)))return n.flags&=2047,void(Il=n);null!==e&&(e.firstEffect=e.lastEffect=null,e.flags|=2048)}if(null!==(t=t.sibling))return void(Il=t);Il=t=e}while(null!==t);0===Bl&&(Bl=5)}function Ns(e){var t=Ha();return Za(99,Os.bind(null,e,t)),null}function Os(e,t){do{Ds()}while(null!==es);if(0!=(48&Nl))throw Error(i(327));var n=e.finishedWork;if(null===n)return null;if(e.finishedWork=null,e.finishedLanes=0,n===e.current)throw Error(i(177));e.callbackNode=null;var r=n.lanes|n.childLanes,a=r,o=e.pendingLanes&~a;e.pendingLanes=a,e.suspendedLanes=0,e.pingedLanes=0,e.expiredLanes&=a,e.mutableReadLanes&=a,e.entangledLanes&=a,a=e.entanglements;for(var l=e.eventTimes,s=e.expirationTimes;0<o;){var u=31-Ht(o),c=1<<u;a[u]=0,l[u]=-1,s[u]=-1,o&=~c}if(null!==as&&0==(24&r)&&as.has(e)&&as.delete(e),e===Ol&&(Il=Ol=null,Dl=0),1<n.flags?null!==n.lastEffect?(n.lastEffect.nextEffect=n,r=n.firstEffect):r=n:r=n.firstEffect,null!==r){if(a=Nl,Nl|=32,Pl.current=null,Ur=Kt,br(l=gr())){if("selectionStart"in l)s={start:l.selectionStart,end:l.selectionEnd};else e:if(s=(s=l.ownerDocument)&&s.defaultView||window,(c=s.getSelection&&s.getSelection())&&0!==c.rangeCount){s=c.anchorNode,o=c.anchorOffset,u=c.focusNode,c=c.focusOffset;try{s.nodeType,u.nodeType}catch(C){s=null;break e}var d=0,f=-1,p=-1,m=0,h=0,g=l,b=null;t:for(;;){for(var v;g!==s||0!==o&&3!==g.nodeType||(f=d+o),g!==u||0!==c&&3!==g.nodeType||(p=d+c),3===g.nodeType&&(d+=g.nodeValue.length),null!==(v=g.firstChild);)b=g,g=v;for(;;){if(g===l)break t;if(b===s&&++m===o&&(f=d),b===u&&++h===c&&(p=d),null!==(v=g.nextSibling))break;b=(g=b).parentNode}g=v}s=-1===f||-1===p?null:{start:f,end:p}}else s=null;s=s||{start:0,end:0}}else s=null;$r={focusedElem:l,selectionRange:s},Kt=!1,cs=null,ds=!1,Kl=r;do{try{Is()}catch(C){if(null===Kl)throw Error(i(330));js(Kl,C),Kl=Kl.nextEffect}}while(null!==Kl);cs=null,Kl=r;do{try{for(l=e;null!==Kl;){var y=Kl.flags;if(16&y&&ve(Kl.stateNode,""),128&y){var w=Kl.alternate;if(null!==w){var k=w.ref;null!==k&&("function"==typeof k?k(null):k.current=null)}}switch(1038&y){case 2:Sl(Kl),Kl.flags&=-3;break;case 6:Sl(Kl),Kl.flags&=-3,Cl(Kl.alternate,Kl);break;case 1024:Kl.flags&=-1025;break;case 1028:Kl.flags&=-1025,Cl(Kl.alternate,Kl);break;case 4:Cl(Kl.alternate,Kl);break;case 8:Tl(l,s=Kl);var S=s.alternate;wl(s),null!==S&&wl(S)}Kl=Kl.nextEffect}}catch(C){if(null===Kl)throw Error(i(330));js(Kl,C),Kl=Kl.nextEffect}}while(null!==Kl);if(k=$r,w=gr(),y=k.focusedElem,l=k.selectionRange,w!==y&&y&&y.ownerDocument&&hr(y.ownerDocument.documentElement,y)){null!==l&&br(y)&&(w=l.start,void 0===(k=l.end)&&(k=w),"selectionStart"in y?(y.selectionStart=w,y.selectionEnd=Math.min(k,y.value.length)):(k=(w=y.ownerDocument||document)&&w.defaultView||window).getSelection&&(k=k.getSelection(),s=y.textContent.length,S=Math.min(l.start,s),l=void 0===l.end?S:Math.min(l.end,s),!k.extend&&S>l&&(s=l,l=S,S=s),s=mr(y,S),o=mr(y,l),s&&o&&(1!==k.rangeCount||k.anchorNode!==s.node||k.anchorOffset!==s.offset||k.focusNode!==o.node||k.focusOffset!==o.offset)&&((w=w.createRange()).setStart(s.node,s.offset),k.removeAllRanges(),S>l?(k.addRange(w),k.extend(o.node,o.offset)):(w.setEnd(o.node,o.offset),k.addRange(w))))),w=[];for(k=y;k=k.parentNode;)1===k.nodeType&&w.push({element:k,left:k.scrollLeft,top:k.scrollTop});for("function"==typeof y.focus&&y.focus(),y=0;y<w.length;y++)(k=w[y]).element.scrollLeft=k.left,k.element.scrollTop=k.top}Kt=!!Ur,$r=Ur=null,e.current=n,Kl=r;do{try{for(y=e;null!==Kl;){var E=Kl.flags;if(36&E&&bl(y,Kl.alternate,Kl),128&E){w=void 0;var x=Kl.ref;if(null!==x){var T=Kl.stateNode;Kl.tag,w=T,"function"==typeof x?x(w):x.current=w}}Kl=Kl.nextEffect}}catch(C){if(null===Kl)throw Error(i(330));js(Kl,C),Kl=Kl.nextEffect}}while(null!==Kl);Kl=null,Ba(),Nl=a}else e.current=n;if(Jl)Jl=!1,es=e,ts=t;else for(Kl=r;null!==Kl;)t=Kl.nextEffect,Kl.nextEffect=null,8&Kl.flags&&((E=Kl).sibling=null,E.stateNode=null),Kl=t;if(0===(r=e.pendingLanes)&&(Xl=null),1===r?e===is?os++:(os=0,is=e):os=0,n=n.stateNode,xa&&"function"==typeof xa.onCommitFiberRoot)try{xa.onCommitFiberRoot(Ea,n,void 0,64==(64&n.current.flags))}catch(C){}if(gs(e,qa()),Yl)throw Yl=!1,e=Ql,Ql=null,e;return 0!=(8&Nl)||Wa(),null}function Is(){for(;null!==Kl;){var e=Kl.alternate;ds||null===cs||(0!=(8&Kl.flags)?et(Kl,cs)&&(ds=!0):13===Kl.tag&&Al(e,Kl)&&et(Kl,cs)&&(ds=!0));var t=Kl.flags;0!=(256&t)&&gl(e,Kl),0==(512&t)||Jl||(Jl=!0,Va(97,(function(){return Ds(),null}))),Kl=Kl.nextEffect}}function Ds(){if(90!==ts){var e=97<ts?97:ts;return ts=90,Za(e,Bs)}return!1}function Ms(e,t){ns.push(t,e),Jl||(Jl=!0,Va(97,(function(){return Ds(),null})))}function zs(e,t){rs.push(t,e),Jl||(Jl=!0,Va(97,(function(){return Ds(),null})))}function Bs(){if(null===es)return!1;var e=es;if(es=null,0!=(48&Nl))throw Error(i(331));var t=Nl;Nl|=32;var n=rs;rs=[];for(var r=0;r<n.length;r+=2){var a=n[r],o=n[r+1],l=a.destroy;if(a.destroy=void 0,"function"==typeof l)try{l()}catch(u){if(null===o)throw Error(i(330));js(o,u)}}for(n=ns,ns=[],r=0;r<n.length;r+=2){a=n[r],o=n[r+1];try{var s=a.create;a.destroy=s()}catch(u){if(null===o)throw Error(i(330));js(o,u)}}for(s=e.current.firstEffect;null!==s;)e=s.nextEffect,s.nextEffect=null,8&s.flags&&(s.sibling=null,s.stateNode=null),s=e;return Nl=t,Wa(),!0}function Fs(e,t,n){fo(e,t=fl(0,t=ul(n,t),1)),t=fs(),null!==(e=hs(e,1))&&(qt(e,1,t),gs(e,t))}function js(e,t){if(3===e.tag)Fs(e,e,t);else for(var n=e.return;null!==n;){if(3===n.tag){Fs(n,e,t);break}if(1===n.tag){var r=n.stateNode;if("function"==typeof n.type.getDerivedStateFromError||"function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r))){var a=pl(n,e=ul(t,e),1);if(fo(n,a),a=fs(),null!==(n=hs(n,1)))qt(n,1,a),gs(n,a);else if("function"==typeof r.componentDidCatch&&(null===Xl||!Xl.has(r)))try{r.componentDidCatch(t,e)}catch(o){}break}}n=n.return}}function Us(e,t,n){var r=e.pingCache;null!==r&&r.delete(t),t=fs(),e.pingedLanes|=e.suspendedLanes&n,Ol===e&&(Dl&n)===n&&(4===Bl||3===Bl&&(62914560&Dl)===Dl&&500>qa()-Gl?xs(e,0):ql|=n),gs(e,t)}function $s(e,t){var n=e.stateNode;null!==n&&n.delete(t),0===(t=0)&&(0==(2&(t=e.mode))?t=1:0==(4&t)?t=99===Ha()?1:2:(0===ss&&(ss=jl),0===(t=Ut(62914560&~ss))&&(t=4194304))),n=fs(),null!==(e=hs(e,t))&&(qt(e,t,n),gs(e,n))}function qs(e,t,n,r){this.tag=e,this.key=n,this.sibling=this.child=this.return=this.stateNode=this.type=this.elementType=null,this.index=0,this.ref=null,this.pendingProps=t,this.dependencies=this.memoizedState=this.updateQueue=this.memoizedProps=null,this.mode=r,this.flags=0,this.lastEffect=this.firstEffect=this.nextEffect=null,this.childLanes=this.lanes=0,this.alternate=null}function Hs(e,t,n,r){return new qs(e,t,n,r)}function Gs(e){return!(!(e=e.prototype)||!e.isReactComponent)}function Zs(e,t){var n=e.alternate;return null===n?((n=Hs(e.tag,t,e.key,e.mode)).elementType=e.elementType,n.type=e.type,n.stateNode=e.stateNode,n.alternate=e,e.alternate=n):(n.pendingProps=t,n.type=e.type,n.flags=0,n.nextEffect=null,n.firstEffect=null,n.lastEffect=null),n.childLanes=e.childLanes,n.lanes=e.lanes,n.child=e.child,n.memoizedProps=e.memoizedProps,n.memoizedState=e.memoizedState,n.updateQueue=e.updateQueue,t=e.dependencies,n.dependencies=null===t?null:{lanes:t.lanes,firstContext:t.firstContext},n.sibling=e.sibling,n.index=e.index,n.ref=e.ref,n}function Vs(e,t,n,r,a,o){var l=2;if(r=e,"function"==typeof e)Gs(e)&&(l=1);else if("string"==typeof e)l=5;else e:switch(e){case x:return Ws(n.children,a,o,t);case M:l=8,a|=16;break;case T:l=8,a|=1;break;case C:return(e=Hs(12,n,t,8|a)).elementType=C,e.type=C,e.lanes=o,e;case R:return(e=Hs(13,n,t,a)).type=R,e.elementType=R,e.lanes=o,e;case P:return(e=Hs(19,n,t,a)).elementType=P,e.lanes=o,e;case z:return Ks(n,a,o,t);case B:return(e=Hs(24,n,t,a)).elementType=B,e.lanes=o,e;default:if("object"==typeof e&&null!==e)switch(e.$$typeof){case _:l=10;break e;case A:l=9;break e;case L:l=11;break e;case N:l=14;break e;case O:l=16,r=null;break e;case I:l=22;break e}throw Error(i(130,null==e?e:typeof e,""))}return(t=Hs(l,n,t,a)).elementType=e,t.type=r,t.lanes=o,t}function Ws(e,t,n,r){return(e=Hs(7,e,r,t)).lanes=n,e}function Ks(e,t,n,r){return(e=Hs(23,e,r,t)).elementType=z,e.lanes=n,e}function Ys(e,t,n){return(e=Hs(6,e,null,t)).lanes=n,e}function Qs(e,t,n){return(t=Hs(4,null!==e.children?e.children:[],e.key,t)).lanes=n,t.stateNode={containerInfo:e.containerInfo,pendingChildren:null,implementation:e.implementation},t}function Xs(e,t,n){this.tag=t,this.containerInfo=e,this.finishedWork=this.pingCache=this.current=this.pendingChildren=null,this.timeoutHandle=-1,this.pendingContext=this.context=null,this.hydrate=n,this.callbackNode=null,this.callbackPriority=0,this.eventTimes=$t(0),this.expirationTimes=$t(-1),this.entangledLanes=this.finishedLanes=this.mutableReadLanes=this.expiredLanes=this.pingedLanes=this.suspendedLanes=this.pendingLanes=0,this.entanglements=$t(0),this.mutableSourceEagerHydrationData=null}function Js(e,t,n){var r=3<arguments.length&&void 0!==arguments[3]?arguments[3]:null;return{$$typeof:E,key:null==r?null:""+r,children:e,containerInfo:t,implementation:n}}function eu(e,t,n,r){var a=t.current,o=fs(),l=ps(a);e:if(n){t:{if(Ye(n=n._reactInternals)!==n||1!==n.tag)throw Error(i(170));var s=n;do{switch(s.tag){case 3:s=s.stateNode.context;break t;case 1:if(ba(s.type)){s=s.stateNode.__reactInternalMemoizedMergedChildContext;break t}}s=s.return}while(null!==s);throw Error(i(171))}if(1===n.tag){var u=n.type;if(ba(u)){n=wa(n,u,s);break e}}n=s}else n=fa;return null===t.context?t.context=n:t.pendingContext=n,(t=co(o,l)).payload={element:e},null!==(r=void 0===r?null:r)&&(t.callback=r),fo(a,t),ms(a,l,o),l}function tu(e){return(e=e.current).child?(e.child.tag,e.child.stateNode):null}function nu(e,t){if(null!==(e=e.memoizedState)&&null!==e.dehydrated){var n=e.retryLane;e.retryLane=0!==n&&n<t?n:t}}function ru(e,t){nu(e,t),(e=e.alternate)&&nu(e,t)}function au(e,t,n){var r=null!=n&&null!=n.hydrationOptions&&n.hydrationOptions.mutableSources||null;if(n=new Xs(e,t,null!=n&&!0===n.hydrate),t=Hs(3,null,null,2===t?7:1===t?3:0),n.current=t,t.stateNode=n,so(t),e[ea]=n.current,Nr(8===e.nodeType?e.parentNode:e),r)for(e=0;e<r.length;e++){var a=(t=r[e])._getVersion;a=a(t._source),null==n.mutableSourceEagerHydrationData?n.mutableSourceEagerHydrationData=[t,a]:n.mutableSourceEagerHydrationData.push(t,a)}this._internalRoot=n}function ou(e){return!(!e||1!==e.nodeType&&9!==e.nodeType&&11!==e.nodeType&&(8!==e.nodeType||" react-mount-point-unstable "!==e.nodeValue))}function iu(e,t,n,r,a){var o=n._reactRootContainer;if(o){var i=o._internalRoot;if("function"==typeof a){var l=a;a=function(){var e=tu(i);l.call(e)}}eu(t,i,e,a)}else{if(o=n._reactRootContainer=function(e,t){if(t||(t=!(!(t=e?9===e.nodeType?e.documentElement:e.firstChild:null)||1!==t.nodeType||!t.hasAttribute("data-reactroot"))),!t)for(var n;n=e.lastChild;)e.removeChild(n);return new au(e,0,t?{hydrate:!0}:void 0)}(n,r),i=o._internalRoot,"function"==typeof a){var s=a;a=function(){var e=tu(i);s.call(e)}}ks((function(){eu(t,i,e,a)}))}return tu(i)}function lu(e,t){var n=2<arguments.length&&void 0!==arguments[2]?arguments[2]:null;if(!ou(t))throw Error(i(200));return Js(e,t,null,n)}Wl=function(e,t,n){var r=t.lanes;if(null!==e)if(e.memoizedProps!==t.pendingProps||ma.current)zi=!0;else{if(0==(n&r)){switch(zi=!1,t.tag){case 3:Vi(t),Wo();break;case 5:Mo(t);break;case 1:ba(t.type)&&ka(t);break;case 4:Io(t,t.stateNode.containerInfo);break;case 10:r=t.memoizedProps.value;var a=t.type._context;da(Xa,a._currentValue),a._currentValue=r;break;case 13:if(null!==t.memoizedState)return 0!=(n&t.child.childLanes)?Xi(e,t,n):(da(Bo,1&Bo.current),null!==(t=ol(e,t,n))?t.sibling:null);da(Bo,1&Bo.current);break;case 19:if(r=0!=(n&t.childLanes),0!=(64&e.flags)){if(r)return al(e,t,n);t.flags|=64}if(null!==(a=t.memoizedState)&&(a.rendering=null,a.tail=null,a.lastEffect=null),da(Bo,Bo.current),r)break;return null;case 23:case 24:return t.lanes=0,$i(e,t,n)}return ol(e,t,n)}zi=0!=(16384&e.flags)}else zi=!1;switch(t.lanes=0,t.tag){case 2:if(r=t.type,null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=ga(t,pa.current),oo(t,n),a=li(null,t,r,e,a,n),t.flags|=1,"object"==typeof a&&null!==a&&"function"==typeof a.render&&void 0===a.$$typeof){if(t.tag=1,t.memoizedState=null,t.updateQueue=null,ba(r)){var o=!0;ka(t)}else o=!1;t.memoizedState=null!==a.state&&void 0!==a.state?a.state:null,so(t);var l=r.getDerivedStateFromProps;"function"==typeof l&&bo(t,r,l,e),a.updater=vo,t.stateNode=a,a._reactInternals=t,So(t,r,e,n),t=Zi(null,t,r,!0,o,n)}else t.tag=0,Bi(null,t,a,n),t=t.child;return t;case 16:a=t.elementType;e:{switch(null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),e=t.pendingProps,a=(o=a._init)(a._payload),t.type=a,o=t.tag=function(e){if("function"==typeof e)return Gs(e)?1:0;if(null!=e){if((e=e.$$typeof)===L)return 11;if(e===N)return 14}return 2}(a),e=Qa(a,e),o){case 0:t=Hi(null,t,a,e,n);break e;case 1:t=Gi(null,t,a,e,n);break e;case 11:t=Fi(null,t,a,e,n);break e;case 14:t=ji(null,t,a,Qa(a.type,e),r,n);break e}throw Error(i(306,a,""))}return t;case 0:return r=t.type,a=t.pendingProps,Hi(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 1:return r=t.type,a=t.pendingProps,Gi(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 3:if(Vi(t),r=t.updateQueue,null===e||null===r)throw Error(i(282));if(r=t.pendingProps,a=null!==(a=t.memoizedState)?a.element:null,uo(e,t),mo(t,r,null,n),(r=t.memoizedState.element)===a)Wo(),t=ol(e,t,n);else{if((o=(a=t.stateNode).hydrate)&&(Uo=Wr(t.stateNode.containerInfo.firstChild),jo=t,o=$o=!0),o){if(null!=(e=a.mutableSourceEagerHydrationData))for(a=0;a<e.length;a+=2)(o=e[a])._workInProgressVersionPrimary=e[a+1],Ko.push(o);for(n=Ao(t,null,r,n),t.child=n;n;)n.flags=-3&n.flags|1024,n=n.sibling}else Bi(e,t,r,n),Wo();t=t.child}return t;case 5:return Mo(t),null===e&&Go(t),r=t.type,a=t.pendingProps,o=null!==e?e.memoizedProps:null,l=a.children,Hr(r,a)?l=null:null!==o&&Hr(r,o)&&(t.flags|=16),qi(e,t),Bi(e,t,l,n),t.child;case 6:return null===e&&Go(t),null;case 13:return Xi(e,t,n);case 4:return Io(t,t.stateNode.containerInfo),r=t.pendingProps,null===e?t.child=_o(t,null,r,n):Bi(e,t,r,n),t.child;case 11:return r=t.type,a=t.pendingProps,Fi(e,t,r,a=t.elementType===r?a:Qa(r,a),n);case 7:return Bi(e,t,t.pendingProps,n),t.child;case 8:case 12:return Bi(e,t,t.pendingProps.children,n),t.child;case 10:e:{r=t.type._context,a=t.pendingProps,l=t.memoizedProps,o=a.value;var s=t.type._context;if(da(Xa,s._currentValue),s._currentValue=o,null!==l)if(s=l.value,0===(o=cr(s,o)?0:0|("function"==typeof r._calculateChangedBits?r._calculateChangedBits(s,o):1073741823))){if(l.children===a.children&&!ma.current){t=ol(e,t,n);break e}}else for(null!==(s=t.child)&&(s.return=t);null!==s;){var u=s.dependencies;if(null!==u){l=s.child;for(var c=u.firstContext;null!==c;){if(c.context===r&&0!=(c.observedBits&o)){1===s.tag&&((c=co(-1,n&-n)).tag=2,fo(s,c)),s.lanes|=n,null!==(c=s.alternate)&&(c.lanes|=n),ao(s.return,n),u.lanes|=n;break}c=c.next}}else l=10===s.tag&&s.type===t.type?null:s.child;if(null!==l)l.return=s;else for(l=s;null!==l;){if(l===t){l=null;break}if(null!==(s=l.sibling)){s.return=l.return,l=s;break}l=l.return}s=l}Bi(e,t,a.children,n),t=t.child}return t;case 9:return a=t.type,r=(o=t.pendingProps).children,oo(t,n),r=r(a=io(a,o.unstable_observedBits)),t.flags|=1,Bi(e,t,r,n),t.child;case 14:return o=Qa(a=t.type,t.pendingProps),ji(e,t,a,o=Qa(a.type,o),r,n);case 15:return Ui(e,t,t.type,t.pendingProps,r,n);case 17:return r=t.type,a=t.pendingProps,a=t.elementType===r?a:Qa(r,a),null!==e&&(e.alternate=null,t.alternate=null,t.flags|=2),t.tag=1,ba(r)?(e=!0,ka(t)):e=!1,oo(t,n),wo(t,r,a),So(t,r,a,n),Zi(null,t,r,!0,e,n);case 19:return al(e,t,n);case 23:case 24:return $i(e,t,n)}throw Error(i(156,t.tag))},au.prototype.render=function(e){eu(e,this._internalRoot,null,null)},au.prototype.unmount=function(){var e=this._internalRoot,t=e.containerInfo;eu(null,e,null,(function(){t[ea]=null}))},tt=function(e){13===e.tag&&(ms(e,4,fs()),ru(e,4))},nt=function(e){13===e.tag&&(ms(e,67108864,fs()),ru(e,67108864))},rt=function(e){if(13===e.tag){var t=fs(),n=ps(e);ms(e,n,t),ru(e,n)}},at=function(e,t){return t()},_e=function(e,t,n){switch(t){case"input":if(ne(e,n),t=n.name,"radio"===n.type&&null!=t){for(n=e;n.parentNode;)n=n.parentNode;for(n=n.querySelectorAll("input[name="+JSON.stringify(""+t)+'][type="radio"]'),t=0;t<n.length;t++){var r=n[t];if(r!==e&&r.form===e.form){var a=oa(r);if(!a)throw Error(i(90));Q(r),ne(r,a)}}}break;case"textarea":ue(e,n);break;case"select":null!=(t=n.value)&&ie(e,!!n.multiple,t,!1)}},Oe=ws,Ie=function(e,t,n,r,a){var o=Nl;Nl|=4;try{return Za(98,e.bind(null,t,n,r,a))}finally{0===(Nl=o)&&(Vl(),Wa())}},De=function(){0==(49&Nl)&&(function(){if(null!==as){var e=as;as=null,e.forEach((function(e){e.expiredLanes|=24&e.pendingLanes,gs(e,qa())}))}Wa()}(),Ds())},Me=function(e,t){var n=Nl;Nl|=2;try{return e(t)}finally{0===(Nl=n)&&(Vl(),Wa())}};var su={Events:[ra,aa,oa,Pe,Ne,Ds,{current:!1}]},uu={findFiberByHostInstance:na,bundleType:0,version:"17.0.2",rendererPackageName:"react-dom"},cu={bundleType:uu.bundleType,version:uu.version,rendererPackageName:uu.rendererPackageName,rendererConfig:uu.rendererConfig,overrideHookState:null,overrideHookStateDeletePath:null,overrideHookStateRenamePath:null,overrideProps:null,overridePropsDeletePath:null,overridePropsRenamePath:null,setSuspenseHandler:null,scheduleUpdate:null,currentDispatcherRef:k.ReactCurrentDispatcher,findHostInstanceByFiber:function(e){return null===(e=Je(e))?null:e.stateNode},findFiberByHostInstance:uu.findFiberByHostInstance||function(){return null},findHostInstancesForRefresh:null,scheduleRefresh:null,scheduleRoot:null,setRefreshHandler:null,getCurrentFiber:null};if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__){var du=__REACT_DEVTOOLS_GLOBAL_HOOK__;if(!du.isDisabled&&du.supportsFiber)try{Ea=du.inject(cu),xa=du}catch(ge){}}t.createPortal=lu,t.hydrate=function(e,t,n){if(!ou(t))throw Error(i(200));return iu(null,e,t,!0,n)}},3935:(e,t,n)=>{"use strict";!function e(){if("undefined"!=typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(e)}catch(t){console.error(t)}}(),e.exports=n(4448)},9590:e=>{var t="undefined"!=typeof Element,n="function"==typeof Map,r="function"==typeof Set,a="function"==typeof ArrayBuffer&&!!ArrayBuffer.isView;function o(e,i){if(e===i)return!0;if(e&&i&&"object"==typeof e&&"object"==typeof i){if(e.constructor!==i.constructor)return!1;var l,s,u,c;if(Array.isArray(e)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(!o(e[s],i[s]))return!1;return!0}if(n&&e instanceof Map&&i instanceof Map){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;for(c=e.entries();!(s=c.next()).done;)if(!o(s.value[1],i.get(s.value[0])))return!1;return!0}if(r&&e instanceof Set&&i instanceof Set){if(e.size!==i.size)return!1;for(c=e.entries();!(s=c.next()).done;)if(!i.has(s.value[0]))return!1;return!0}if(a&&ArrayBuffer.isView(e)&&ArrayBuffer.isView(i)){if((l=e.length)!=i.length)return!1;for(s=l;0!=s--;)if(e[s]!==i[s])return!1;return!0}if(e.constructor===RegExp)return e.source===i.source&&e.flags===i.flags;if(e.valueOf!==Object.prototype.valueOf)return e.valueOf()===i.valueOf();if(e.toString!==Object.prototype.toString)return e.toString()===i.toString();if((l=(u=Object.keys(e)).length)!==Object.keys(i).length)return!1;for(s=l;0!=s--;)if(!Object.prototype.hasOwnProperty.call(i,u[s]))return!1;if(t&&e instanceof Element)return!1;for(s=l;0!=s--;)if(("_owner"!==u[s]&&"__v"!==u[s]&&"__o"!==u[s]||!e.$$typeof)&&!o(e[u[s]],i[u[s]]))return!1;return!0}return e!=e&&i!=i}e.exports=function(e,t){try{return o(e,t)}catch(n){if((n.message||"").match(/stack|recursion/i))return console.warn("react-fast-compare cannot handle circular refs"),!1;throw n}}},405:(e,t,n)=>{"use strict";n.d(t,{B6:()=>G,ql:()=>J});var r=n(7294),a=n(5697),o=n.n(a),i=n(9590),l=n.n(i),s=n(1143),u=n.n(s),c=n(6774),d=n.n(c);function f(){return f=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},f.apply(this,arguments)}function p(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,m(e,t)}function m(e,t){return m=Object.setPrototypeOf||function(e,t){return e.__proto__=t,e},m(e,t)}function h(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)t.indexOf(n=o[r])>=0||(a[n]=e[n]);return a}var g={BASE:"base",BODY:"body",HEAD:"head",HTML:"html",LINK:"link",META:"meta",NOSCRIPT:"noscript",SCRIPT:"script",STYLE:"style",TITLE:"title",FRAGMENT:"Symbol(react.fragment)"},b={rel:["amphtml","canonical","alternate"]},v={type:["application/ld+json"]},y={charset:"",name:["robots","description"],property:["og:type","og:title","og:url","og:image","og:image:alt","og:description","twitter:url","twitter:title","twitter:description","twitter:image","twitter:image:alt","twitter:card","twitter:site"]},w=Object.keys(g).map((function(e){return g[e]})),k={accesskey:"accessKey",charset:"charSet",class:"className",contenteditable:"contentEditable",contextmenu:"contextMenu","http-equiv":"httpEquiv",itemprop:"itemProp",tabindex:"tabIndex"},S=Object.keys(k).reduce((function(e,t){return e[k[t]]=t,e}),{}),E=function(e,t){for(var n=e.length-1;n>=0;n-=1){var r=e[n];if(Object.prototype.hasOwnProperty.call(r,t))return r[t]}return null},x=function(e){var t=E(e,g.TITLE),n=E(e,"titleTemplate");if(Array.isArray(t)&&(t=t.join("")),n&&t)return n.replace(/%s/g,(function(){return t}));var r=E(e,"defaultTitle");return t||r||void 0},T=function(e){return E(e,"onChangeClientState")||function(){}},C=function(e,t){return t.filter((function(t){return void 0!==t[e]})).map((function(t){return t[e]})).reduce((function(e,t){return f({},e,t)}),{})},_=function(e,t){return t.filter((function(e){return void 0!==e[g.BASE]})).map((function(e){return e[g.BASE]})).reverse().reduce((function(t,n){if(!t.length)for(var r=Object.keys(n),a=0;a<r.length;a+=1){var o=r[a].toLowerCase();if(-1!==e.indexOf(o)&&n[o])return t.concat(n)}return t}),[])},A=function(e,t,n){var r={};return n.filter((function(t){return!!Array.isArray(t[e])||(void 0!==t[e]&&console&&"function"==typeof console.warn&&console.warn("Helmet: "+e+' should be of type "Array". Instead found type "'+typeof t[e]+'"'),!1)})).map((function(t){return t[e]})).reverse().reduce((function(e,n){var a={};n.filter((function(e){for(var n,o=Object.keys(e),i=0;i<o.length;i+=1){var l=o[i],s=l.toLowerCase();-1===t.indexOf(s)||"rel"===n&&"canonical"===e[n].toLowerCase()||"rel"===s&&"stylesheet"===e[s].toLowerCase()||(n=s),-1===t.indexOf(l)||"innerHTML"!==l&&"cssText"!==l&&"itemprop"!==l||(n=l)}if(!n||!e[n])return!1;var u=e[n].toLowerCase();return r[n]||(r[n]={}),a[n]||(a[n]={}),!r[n][u]&&(a[n][u]=!0,!0)})).reverse().forEach((function(t){return e.push(t)}));for(var o=Object.keys(a),i=0;i<o.length;i+=1){var l=o[i],s=f({},r[l],a[l]);r[l]=s}return e}),[]).reverse()},L=function(e,t){if(Array.isArray(e)&&e.length)for(var n=0;n<e.length;n+=1)if(e[n][t])return!0;return!1},R=function(e){return Array.isArray(e)?e.join(""):e},P=function(e,t){return Array.isArray(e)?e.reduce((function(e,n){return function(e,t){for(var n=Object.keys(e),r=0;r<n.length;r+=1)if(t[n[r]]&&t[n[r]].includes(e[n[r]]))return!0;return!1}(n,t)?e.priority.push(n):e.default.push(n),e}),{priority:[],default:[]}):{default:e}},N=function(e,t){var n;return f({},e,((n={})[t]=void 0,n))},O=[g.NOSCRIPT,g.SCRIPT,g.STYLE],I=function(e,t){return void 0===t&&(t=!0),!1===t?String(e):String(e).replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;")},D=function(e){return Object.keys(e).reduce((function(t,n){var r=void 0!==e[n]?n+'="'+e[n]+'"':""+n;return t?t+" "+r:r}),"")},M=function(e,t){return void 0===t&&(t={}),Object.keys(e).reduce((function(t,n){return t[k[n]||n]=e[n],t}),t)},z=function(e,t){return t.map((function(t,n){var a,o=((a={key:n})["data-rh"]=!0,a);return Object.keys(t).forEach((function(e){var n=k[e]||e;"innerHTML"===n||"cssText"===n?o.dangerouslySetInnerHTML={__html:t.innerHTML||t.cssText}:o[n]=t[e]})),r.createElement(e,o)}))},B=function(e,t,n){switch(e){case g.TITLE:return{toComponent:function(){return n=t.titleAttributes,(a={key:e=t.title})["data-rh"]=!0,o=M(n,a),[r.createElement(g.TITLE,o,e)];var e,n,a,o},toString:function(){return function(e,t,n,r){var a=D(n),o=R(t);return a?"<"+e+' data-rh="true" '+a+">"+I(o,r)+"</"+e+">":"<"+e+' data-rh="true">'+I(o,r)+"</"+e+">"}(e,t.title,t.titleAttributes,n)}};case"bodyAttributes":case"htmlAttributes":return{toComponent:function(){return M(t)},toString:function(){return D(t)}};default:return{toComponent:function(){return z(e,t)},toString:function(){return function(e,t,n){return t.reduce((function(t,r){var a=Object.keys(r).filter((function(e){return!("innerHTML"===e||"cssText"===e)})).reduce((function(e,t){var a=void 0===r[t]?t:t+'="'+I(r[t],n)+'"';return e?e+" "+a:a}),""),o=r.innerHTML||r.cssText||"",i=-1===O.indexOf(e);return t+"<"+e+' data-rh="true" '+a+(i?"/>":">"+o+"</"+e+">")}),"")}(e,t,n)}}}},F=function(e){var t=e.baseTag,n=e.bodyAttributes,r=e.encode,a=e.htmlAttributes,o=e.noscriptTags,i=e.styleTags,l=e.title,s=void 0===l?"":l,u=e.titleAttributes,c=e.linkTags,d=e.metaTags,f=e.scriptTags,p={toComponent:function(){},toString:function(){return""}};if(e.prioritizeSeoTags){var m=function(e){var t=e.linkTags,n=e.scriptTags,r=e.encode,a=P(e.metaTags,y),o=P(t,b),i=P(n,v);return{priorityMethods:{toComponent:function(){return[].concat(z(g.META,a.priority),z(g.LINK,o.priority),z(g.SCRIPT,i.priority))},toString:function(){return B(g.META,a.priority,r)+" "+B(g.LINK,o.priority,r)+" "+B(g.SCRIPT,i.priority,r)}},metaTags:a.default,linkTags:o.default,scriptTags:i.default}}(e);p=m.priorityMethods,c=m.linkTags,d=m.metaTags,f=m.scriptTags}return{priority:p,base:B(g.BASE,t,r),bodyAttributes:B("bodyAttributes",n,r),htmlAttributes:B("htmlAttributes",a,r),link:B(g.LINK,c,r),meta:B(g.META,d,r),noscript:B(g.NOSCRIPT,o,r),script:B(g.SCRIPT,f,r),style:B(g.STYLE,i,r),title:B(g.TITLE,{title:s,titleAttributes:u},r)}},j=[],U=function(e,t){var n=this;void 0===t&&(t="undefined"!=typeof document),this.instances=[],this.value={setHelmet:function(e){n.context.helmet=e},helmetInstances:{get:function(){return n.canUseDOM?j:n.instances},add:function(e){(n.canUseDOM?j:n.instances).push(e)},remove:function(e){var t=(n.canUseDOM?j:n.instances).indexOf(e);(n.canUseDOM?j:n.instances).splice(t,1)}}},this.context=e,this.canUseDOM=t,t||(e.helmet=F({baseTag:[],bodyAttributes:{},encodeSpecialCharacters:!0,htmlAttributes:{},linkTags:[],metaTags:[],noscriptTags:[],scriptTags:[],styleTags:[],title:"",titleAttributes:{}}))},$=r.createContext({}),q=o().shape({setHelmet:o().func,helmetInstances:o().shape({get:o().func,add:o().func,remove:o().func})}),H="undefined"!=typeof document,G=function(e){function t(n){var r;return(r=e.call(this,n)||this).helmetData=new U(r.props.context,t.canUseDOM),r}return p(t,e),t.prototype.render=function(){return r.createElement($.Provider,{value:this.helmetData.value},this.props.children)},t}(r.Component);G.canUseDOM=H,G.propTypes={context:o().shape({helmet:o().shape()}),children:o().node.isRequired},G.defaultProps={context:{}},G.displayName="HelmetProvider";var Z=function(e,t){var n,r=document.head||document.querySelector(g.HEAD),a=r.querySelectorAll(e+"[data-rh]"),o=[].slice.call(a),i=[];return t&&t.length&&t.forEach((function(t){var r=document.createElement(e);for(var a in t)Object.prototype.hasOwnProperty.call(t,a)&&("innerHTML"===a?r.innerHTML=t.innerHTML:"cssText"===a?r.styleSheet?r.styleSheet.cssText=t.cssText:r.appendChild(document.createTextNode(t.cssText)):r.setAttribute(a,void 0===t[a]?"":t[a]));r.setAttribute("data-rh","true"),o.some((function(e,t){return n=t,r.isEqualNode(e)}))?o.splice(n,1):i.push(r)})),o.forEach((function(e){return e.parentNode.removeChild(e)})),i.forEach((function(e){return r.appendChild(e)})),{oldTags:o,newTags:i}},V=function(e,t){var n=document.getElementsByTagName(e)[0];if(n){for(var r=n.getAttribute("data-rh"),a=r?r.split(","):[],o=[].concat(a),i=Object.keys(t),l=0;l<i.length;l+=1){var s=i[l],u=t[s]||"";n.getAttribute(s)!==u&&n.setAttribute(s,u),-1===a.indexOf(s)&&a.push(s);var c=o.indexOf(s);-1!==c&&o.splice(c,1)}for(var d=o.length-1;d>=0;d-=1)n.removeAttribute(o[d]);a.length===o.length?n.removeAttribute("data-rh"):n.getAttribute("data-rh")!==i.join(",")&&n.setAttribute("data-rh",i.join(","))}},W=function(e,t){var n=e.baseTag,r=e.htmlAttributes,a=e.linkTags,o=e.metaTags,i=e.noscriptTags,l=e.onChangeClientState,s=e.scriptTags,u=e.styleTags,c=e.title,d=e.titleAttributes;V(g.BODY,e.bodyAttributes),V(g.HTML,r),function(e,t){void 0!==e&&document.title!==e&&(document.title=R(e)),V(g.TITLE,t)}(c,d);var f={baseTag:Z(g.BASE,n),linkTags:Z(g.LINK,a),metaTags:Z(g.META,o),noscriptTags:Z(g.NOSCRIPT,i),scriptTags:Z(g.SCRIPT,s),styleTags:Z(g.STYLE,u)},p={},m={};Object.keys(f).forEach((function(e){var t=f[e],n=t.newTags,r=t.oldTags;n.length&&(p[e]=n),r.length&&(m[e]=f[e].oldTags)})),t&&t(),l(e,p,m)},K=null,Y=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).rendered=!1,t}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!d()(e,this.props)},n.componentDidUpdate=function(){this.emitChange()},n.componentWillUnmount=function(){this.props.context.helmetInstances.remove(this),this.emitChange()},n.emitChange=function(){var e,t,n=this.props.context,r=n.setHelmet,a=null,o=(e=n.helmetInstances.get().map((function(e){var t=f({},e.props);return delete t.context,t})),{baseTag:_(["href"],e),bodyAttributes:C("bodyAttributes",e),defer:E(e,"defer"),encode:E(e,"encodeSpecialCharacters"),htmlAttributes:C("htmlAttributes",e),linkTags:A(g.LINK,["rel","href"],e),metaTags:A(g.META,["name","charset","http-equiv","property","itemprop"],e),noscriptTags:A(g.NOSCRIPT,["innerHTML"],e),onChangeClientState:T(e),scriptTags:A(g.SCRIPT,["src","innerHTML"],e),styleTags:A(g.STYLE,["cssText"],e),title:x(e),titleAttributes:C("titleAttributes",e),prioritizeSeoTags:L(e,"prioritizeSeoTags")});G.canUseDOM?(t=o,K&&cancelAnimationFrame(K),t.defer?K=requestAnimationFrame((function(){W(t,(function(){K=null}))})):(W(t),K=null)):F&&(a=F(o)),r(a)},n.init=function(){this.rendered||(this.rendered=!0,this.props.context.helmetInstances.add(this),this.emitChange())},n.render=function(){return this.init(),null},t}(r.Component);Y.propTypes={context:q.isRequired},Y.displayName="HelmetDispatcher";var Q=["children"],X=["children"],J=function(e){function t(){return e.apply(this,arguments)||this}p(t,e);var n=t.prototype;return n.shouldComponentUpdate=function(e){return!l()(N(this.props,"helmetData"),N(e,"helmetData"))},n.mapNestedChildrenToProps=function(e,t){if(!t)return null;switch(e.type){case g.SCRIPT:case g.NOSCRIPT:return{innerHTML:t};case g.STYLE:return{cssText:t};default:throw new Error("<"+e.type+" /> elements are self-closing and can not contain children. Refer to our API for more information.")}},n.flattenArrayTypeChildren=function(e){var t,n=e.child,r=e.arrayTypeChildren;return f({},r,((t={})[n.type]=[].concat(r[n.type]||[],[f({},e.newChildProps,this.mapNestedChildrenToProps(n,e.nestedChildren))]),t))},n.mapObjectTypeChildren=function(e){var t,n,r=e.child,a=e.newProps,o=e.newChildProps,i=e.nestedChildren;switch(r.type){case g.TITLE:return f({},a,((t={})[r.type]=i,t.titleAttributes=f({},o),t));case g.BODY:return f({},a,{bodyAttributes:f({},o)});case g.HTML:return f({},a,{htmlAttributes:f({},o)});default:return f({},a,((n={})[r.type]=f({},o),n))}},n.mapArrayTypeChildrenToProps=function(e,t){var n=f({},t);return Object.keys(e).forEach((function(t){var r;n=f({},n,((r={})[t]=e[t],r))})),n},n.warnOnInvalidChildren=function(e,t){return u()(w.some((function(t){return e.type===t})),"function"==typeof e.type?"You may be attempting to nest <Helmet> components within each other, which is not allowed. Refer to our API for more information.":"Only elements types "+w.join(", ")+" are allowed. Helmet does not support rendering <"+e.type+"> elements. Refer to our API for more information."),u()(!t||"string"==typeof t||Array.isArray(t)&&!t.some((function(e){return"string"!=typeof e})),"Helmet expects a string as a child of <"+e.type+">. Did you forget to wrap your children in braces? ( <"+e.type+">{``}</"+e.type+"> ) Refer to our API for more information."),!0},n.mapChildrenToProps=function(e,t){var n=this,a={};return r.Children.forEach(e,(function(e){if(e&&e.props){var r=e.props,o=r.children,i=h(r,Q),l=Object.keys(i).reduce((function(e,t){return e[S[t]||t]=i[t],e}),{}),s=e.type;switch("symbol"==typeof s?s=s.toString():n.warnOnInvalidChildren(e,o),s){case g.FRAGMENT:t=n.mapChildrenToProps(o,t);break;case g.LINK:case g.META:case g.NOSCRIPT:case g.SCRIPT:case g.STYLE:a=n.flattenArrayTypeChildren({child:e,arrayTypeChildren:a,newChildProps:l,nestedChildren:o});break;default:t=n.mapObjectTypeChildren({child:e,newProps:t,newChildProps:l,nestedChildren:o})}}})),this.mapArrayTypeChildrenToProps(a,t)},n.render=function(){var e=this.props,t=e.children,n=h(e,X),a=f({},n),o=n.helmetData;return t&&(a=this.mapChildrenToProps(t,a)),!o||o instanceof U||(o=new U(o.context,o.instances)),o?r.createElement(Y,f({},a,{context:o.value,helmetData:void 0})):r.createElement($.Consumer,null,(function(e){return r.createElement(Y,f({},a,{context:e}))}))},t}(r.Component);J.propTypes={base:o().object,bodyAttributes:o().object,children:o().oneOfType([o().arrayOf(o().node),o().node]),defaultTitle:o().string,defer:o().bool,encodeSpecialCharacters:o().bool,htmlAttributes:o().object,link:o().arrayOf(o().object),meta:o().arrayOf(o().object),noscript:o().arrayOf(o().object),onChangeClientState:o().func,script:o().arrayOf(o().object),style:o().arrayOf(o().object),title:o().string,titleAttributes:o().object,titleTemplate:o().string,prioritizeSeoTags:o().bool,helmetData:o().object},J.defaultProps={defer:!0,encodeSpecialCharacters:!0,prioritizeSeoTags:!1},J.displayName="Helmet"},9921:(e,t)=>{"use strict";var n="function"==typeof Symbol&&Symbol.for,r=n?Symbol.for("react.element"):60103,a=n?Symbol.for("react.portal"):60106,o=n?Symbol.for("react.fragment"):60107,i=n?Symbol.for("react.strict_mode"):60108,l=n?Symbol.for("react.profiler"):60114,s=n?Symbol.for("react.provider"):60109,u=n?Symbol.for("react.context"):60110,c=n?Symbol.for("react.async_mode"):60111,d=n?Symbol.for("react.concurrent_mode"):60111,f=n?Symbol.for("react.forward_ref"):60112,p=n?Symbol.for("react.suspense"):60113,m=n?Symbol.for("react.suspense_list"):60120,h=n?Symbol.for("react.memo"):60115,g=n?Symbol.for("react.lazy"):60116,b=n?Symbol.for("react.block"):60121,v=n?Symbol.for("react.fundamental"):60117,y=n?Symbol.for("react.responder"):60118,w=n?Symbol.for("react.scope"):60119;function k(e){if("object"==typeof e&&null!==e){var t=e.$$typeof;switch(t){case r:switch(e=e.type){case c:case d:case o:case l:case i:case p:return e;default:switch(e=e&&e.$$typeof){case u:case f:case g:case h:case s:return e;default:return t}}case a:return t}}}function S(e){return k(e)===d}t.AsyncMode=c,t.ConcurrentMode=d,t.ContextConsumer=u,t.ContextProvider=s,t.Element=r,t.ForwardRef=f,t.Fragment=o,t.Lazy=g,t.Memo=h,t.Portal=a,t.Profiler=l,t.StrictMode=i,t.Suspense=p,t.isAsyncMode=function(e){return S(e)||k(e)===c},t.isConcurrentMode=S,t.isContextConsumer=function(e){return k(e)===u},t.isContextProvider=function(e){return k(e)===s},t.isElement=function(e){return"object"==typeof e&&null!==e&&e.$$typeof===r},t.isForwardRef=function(e){return k(e)===f},t.isFragment=function(e){return k(e)===o},t.isLazy=function(e){return k(e)===g},t.isMemo=function(e){return k(e)===h},t.isPortal=function(e){return k(e)===a},t.isProfiler=function(e){return k(e)===l},t.isStrictMode=function(e){return k(e)===i},t.isSuspense=function(e){return k(e)===p},t.isValidElementType=function(e){return"string"==typeof e||"function"==typeof e||e===o||e===d||e===l||e===i||e===p||e===m||"object"==typeof e&&null!==e&&(e.$$typeof===g||e.$$typeof===h||e.$$typeof===s||e.$$typeof===u||e.$$typeof===f||e.$$typeof===v||e.$$typeof===y||e.$$typeof===w||e.$$typeof===b)},t.typeOf=k},9864:(e,t,n)=>{"use strict";e.exports=n(9921)},8356:(e,t,n)=>{"use strict";function r(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}function a(e){if(void 0===e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(){return i=Object.assign||function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},i.apply(this,arguments)}var l=n(7294),s=n(5697),u=[],c=[];function d(e){var t=e(),n={loading:!0,loaded:null,error:null};return n.promise=t.then((function(e){return n.loading=!1,n.loaded=e,e})).catch((function(e){throw n.loading=!1,n.error=e,e})),n}function f(e){var t={loading:!1,loaded:{},error:null},n=[];try{Object.keys(e).forEach((function(r){var a=d(e[r]);a.loading?t.loading=!0:(t.loaded[r]=a.loaded,t.error=a.error),n.push(a.promise),a.promise.then((function(e){t.loaded[r]=e})).catch((function(e){t.error=e}))}))}catch(r){t.error=r}return t.promise=Promise.all(n).then((function(e){return t.loading=!1,e})).catch((function(e){throw t.loading=!1,e})),t}function p(e,t){return l.createElement((n=e)&&n.__esModule?n.default:n,t);var n}function m(e,t){var d,f;if(!t.loading)throw new Error("react-loadable requires a `loading` component");var m=i({loader:null,loading:null,delay:200,timeout:null,render:p,webpack:null,modules:null},t),h=null;function g(){return h||(h=e(m.loader)),h.promise}return u.push(g),"function"==typeof m.webpack&&c.push((function(){if((0,m.webpack)().every((function(e){return void 0!==e&&void 0!==n.m[e]})))return g()})),f=d=function(t){function n(n){var r;return o(a(a(r=t.call(this,n)||this)),"retry",(function(){r.setState({error:null,loading:!0,timedOut:!1}),h=e(m.loader),r._loadModule()})),g(),r.state={error:h.error,pastDelay:!1,timedOut:!1,loading:h.loading,loaded:h.loaded},r}r(n,t),n.preload=function(){return g()};var i=n.prototype;return i.UNSAFE_componentWillMount=function(){this._loadModule()},i.componentDidMount=function(){this._mounted=!0},i._loadModule=function(){var e=this;if(this.context.loadable&&Array.isArray(m.modules)&&m.modules.forEach((function(t){e.context.loadable.report(t)})),h.loading){var t=function(t){e._mounted&&e.setState(t)};"number"==typeof m.delay&&(0===m.delay?this.setState({pastDelay:!0}):this._delay=setTimeout((function(){t({pastDelay:!0})}),m.delay)),"number"==typeof m.timeout&&(this._timeout=setTimeout((function(){t({timedOut:!0})}),m.timeout));var n=function(){t({error:h.error,loaded:h.loaded,loading:h.loading}),e._clearTimeouts()};h.promise.then((function(){return n(),null})).catch((function(e){return n(),null}))}},i.componentWillUnmount=function(){this._mounted=!1,this._clearTimeouts()},i._clearTimeouts=function(){clearTimeout(this._delay),clearTimeout(this._timeout)},i.render=function(){return this.state.loading||this.state.error?l.createElement(m.loading,{isLoading:this.state.loading,pastDelay:this.state.pastDelay,timedOut:this.state.timedOut,error:this.state.error,retry:this.retry}):this.state.loaded?m.render(this.state.loaded,this.props):null},n}(l.Component),o(d,"contextTypes",{loadable:s.shape({report:s.func.isRequired})}),f}function h(e){return m(d,e)}h.Map=function(e){if("function"!=typeof e.render)throw new Error("LoadableMap requires a `render(loaded, props)` function");return m(f,e)};var g=function(e){function t(){return e.apply(this,arguments)||this}r(t,e);var n=t.prototype;return n.getChildContext=function(){return{loadable:{report:this.props.report}}},n.render=function(){return l.Children.only(this.props.children)},t}(l.Component);function b(e){for(var t=[];e.length;){var n=e.pop();t.push(n())}return Promise.all(t).then((function(){if(e.length)return b(e)}))}o(g,"propTypes",{report:s.func.isRequired}),o(g,"childContextTypes",{loadable:s.shape({report:s.func.isRequired}).isRequired}),h.Capture=g,h.preloadAll=function(){return new Promise((function(e,t){b(u).then(e,t)}))},h.preloadReady=function(){return new Promise((function(e,t){b(c).then(e,e)}))},e.exports=h},8790:(e,t,n)=>{"use strict";n.d(t,{H:()=>l,f:()=>i});var r=n(6775),a=n(3117),o=n(7294);function i(e,t,n){return void 0===n&&(n=[]),e.some((function(e){var a=e.path?(0,r.LX)(t,e):n.length?n[n.length-1].match:r.F0.computeRootMatch(t);return a&&(n.push({route:e,match:a}),e.routes&&i(e.routes,t,n)),a})),n}function l(e,t,n){return void 0===t&&(t={}),void 0===n&&(n={}),e?o.createElement(r.rs,n,e.map((function(e,n){return o.createElement(r.AW,{key:e.key||n,path:e.path,exact:e.exact,strict:e.strict,render:function(n){return e.render?e.render((0,a.Z)({},n,{},t,{route:e})):o.createElement(e.component,(0,a.Z)({},n,t,{route:e}))}})}))):null}},3727:(e,t,n)=>{"use strict";n.d(t,{OL:()=>y,VK:()=>c,rU:()=>g});var r=n(6775),a=n(144),o=n(7294),i=n(9318),l=n(3117),s=n(102),u=n(2177),c=function(e){function t(){for(var t,n=arguments.length,r=new Array(n),a=0;a<n;a++)r[a]=arguments[a];return(t=e.call.apply(e,[this].concat(r))||this).history=(0,i.lX)(t.props),t}return(0,a.Z)(t,e),t.prototype.render=function(){return o.createElement(r.F0,{history:this.history,children:this.props.children})},t}(o.Component);o.Component;var d=function(e,t){return"function"==typeof e?e(t):e},f=function(e,t){return"string"==typeof e?(0,i.ob)(e,null,null,t):e},p=function(e){return e},m=o.forwardRef;void 0===m&&(m=p);var h=m((function(e,t){var n=e.innerRef,r=e.navigate,a=e.onClick,i=(0,s.Z)(e,["innerRef","navigate","onClick"]),u=i.target,c=(0,l.Z)({},i,{onClick:function(e){try{a&&a(e)}catch(t){throw e.preventDefault(),t}e.defaultPrevented||0!==e.button||u&&"_self"!==u||function(e){return!!(e.metaKey||e.altKey||e.ctrlKey||e.shiftKey)}(e)||(e.preventDefault(),r())}});return c.ref=p!==m&&t||n,o.createElement("a",c)}));var g=m((function(e,t){var n=e.component,a=void 0===n?h:n,c=e.replace,g=e.to,b=e.innerRef,v=(0,s.Z)(e,["component","replace","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=e.history,r=f(d(g,e.location),e.location),s=r?n.createHref(r):"",h=(0,l.Z)({},v,{href:s,navigate:function(){var t=d(g,e.location),r=(0,i.Ep)(e.location)===(0,i.Ep)(f(t));(c||r?n.replace:n.push)(t)}});return p!==m?h.ref=t||b:h.innerRef=b,o.createElement(a,h)}))})),b=function(e){return e},v=o.forwardRef;void 0===v&&(v=b);var y=v((function(e,t){var n=e["aria-current"],a=void 0===n?"page":n,i=e.activeClassName,c=void 0===i?"active":i,p=e.activeStyle,m=e.className,h=e.exact,y=e.isActive,w=e.location,k=e.sensitive,S=e.strict,E=e.style,x=e.to,T=e.innerRef,C=(0,s.Z)(e,["aria-current","activeClassName","activeStyle","className","exact","isActive","location","sensitive","strict","style","to","innerRef"]);return o.createElement(r.s6.Consumer,null,(function(e){e||(0,u.Z)(!1);var n=w||e.location,i=f(d(x,n),n),s=i.pathname,_=s&&s.replace(/([.+*?=^!:${}()[\]|/\\])/g,"\\$1"),A=_?(0,r.LX)(n.pathname,{path:_,exact:h,sensitive:k,strict:S}):null,L=!!(y?y(A,n):A),R="function"==typeof m?m(L):m,P="function"==typeof E?E(L):E;L&&(R=function(){for(var e=arguments.length,t=new Array(e),n=0;n<e;n++)t[n]=arguments[n];return t.filter((function(e){return e})).join(" ")}(R,c),P=(0,l.Z)({},P,p));var N=(0,l.Z)({"aria-current":L&&a||null,className:R,style:P,to:i},C);return b!==v?N.ref=t||T:N.innerRef=T,o.createElement(g,N)}))}))},6775:(e,t,n)=>{"use strict";n.d(t,{AW:()=>T,F0:()=>k,rs:()=>P,s6:()=>w,LX:()=>x,k6:()=>O,TH:()=>I});var r=n(144),a=n(7294),o=n(9318),i=n(5697),l=n.n(i),s=1073741823,u="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:void 0!==n.g?n.g:{};function c(e){var t=[];return{on:function(e){t.push(e)},off:function(e){t=t.filter((function(t){return t!==e}))},get:function(){return e},set:function(n,r){e=n,t.forEach((function(t){return t(e,r)}))}}}var d=a.createContext||function(e,t){var n,o,i="__create-react-context-"+function(){var e="__global_unique_id__";return u[e]=(u[e]||0)+1}()+"__",d=function(e){function n(){var t;return(t=e.apply(this,arguments)||this).emitter=c(t.props.value),t}(0,r.Z)(n,e);var a=n.prototype;return a.getChildContext=function(){var e;return(e={})[i]=this.emitter,e},a.componentWillReceiveProps=function(e){if(this.props.value!==e.value){var n,r=this.props.value,a=e.value;((o=r)===(i=a)?0!==o||1/o==1/i:o!=o&&i!=i)?n=0:(n="function"==typeof t?t(r,a):s,0!==(n|=0)&&this.emitter.set(e.value,n))}var o,i},a.render=function(){return this.props.children},n}(a.Component);d.childContextTypes=((n={})[i]=l().object.isRequired,n);var f=function(t){function n(){var e;return(e=t.apply(this,arguments)||this).state={value:e.getValue()},e.onUpdate=function(t,n){0!=((0|e.observedBits)&n)&&e.setState({value:e.getValue()})},e}(0,r.Z)(n,t);var a=n.prototype;return a.componentWillReceiveProps=function(e){var t=e.observedBits;this.observedBits=null==t?s:t},a.componentDidMount=function(){this.context[i]&&this.context[i].on(this.onUpdate);var e=this.props.observedBits;this.observedBits=null==e?s:e},a.componentWillUnmount=function(){this.context[i]&&this.context[i].off(this.onUpdate)},a.getValue=function(){return this.context[i]?this.context[i].get():e},a.render=function(){return(e=this.props.children,Array.isArray(e)?e[0]:e)(this.state.value);var e},n}(a.Component);return f.contextTypes=((o={})[i]=l().object,o),{Provider:d,Consumer:f}};const f=d;var p=n(2177),m=n(3117),h=n(9658),g=n.n(h),b=(n(9864),n(102)),v=(n(8679),function(e){var t=f();return t.displayName=e,t}),y=v("Router-History"),w=v("Router"),k=function(e){function t(t){var n;return(n=e.call(this,t)||this).state={location:t.history.location},n._isMounted=!1,n._pendingLocation=null,t.staticContext||(n.unlisten=t.history.listen((function(e){n._pendingLocation=e}))),n}(0,r.Z)(t,e),t.computeRootMatch=function(e){return{path:"/",url:"/",params:{},isExact:"/"===e}};var n=t.prototype;return n.componentDidMount=function(){var e=this;this._isMounted=!0,this.unlisten&&this.unlisten(),this.props.staticContext||(this.unlisten=this.props.history.listen((function(t){e._isMounted&&e.setState({location:t})}))),this._pendingLocation&&this.setState({location:this._pendingLocation})},n.componentWillUnmount=function(){this.unlisten&&(this.unlisten(),this._isMounted=!1,this._pendingLocation=null)},n.render=function(){return a.createElement(w.Provider,{value:{history:this.props.history,location:this.state.location,match:t.computeRootMatch(this.state.location.pathname),staticContext:this.props.staticContext}},a.createElement(y.Provider,{children:this.props.children||null,value:this.props.history}))},t}(a.Component);a.Component;a.Component;var S={},E=0;function x(e,t){void 0===t&&(t={}),("string"==typeof t||Array.isArray(t))&&(t={path:t});var n=t,r=n.path,a=n.exact,o=void 0!==a&&a,i=n.strict,l=void 0!==i&&i,s=n.sensitive,u=void 0!==s&&s;return[].concat(r).reduce((function(t,n){if(!n&&""!==n)return null;if(t)return t;var r=function(e,t){var n=""+t.end+t.strict+t.sensitive,r=S[n]||(S[n]={});if(r[e])return r[e];var a=[],o={regexp:g()(e,a,t),keys:a};return E<1e4&&(r[e]=o,E++),o}(n,{end:o,strict:l,sensitive:u}),a=r.regexp,i=r.keys,s=a.exec(e);if(!s)return null;var c=s[0],d=s.slice(1),f=e===c;return o&&!f?null:{path:n,url:"/"===n&&""===c?"/":c,isExact:f,params:i.reduce((function(e,t,n){return e[t.name]=d[n],e}),{})}}),null)}var T=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n=e.props.location||t.location,r=e.props.computedMatch?e.props.computedMatch:e.props.path?x(n.pathname,e.props):t.match,o=(0,m.Z)({},t,{location:n,match:r}),i=e.props,l=i.children,s=i.component,u=i.render;return Array.isArray(l)&&function(e){return 0===a.Children.count(e)}(l)&&(l=null),a.createElement(w.Provider,{value:o},o.match?l?"function"==typeof l?l(o):l:s?a.createElement(s,o):u?u(o):null:"function"==typeof l?l(o):null)}))},t}(a.Component);function C(e){return"/"===e.charAt(0)?e:"/"+e}function _(e,t){if(!e)return t;var n=C(e);return 0!==t.pathname.indexOf(n)?t:(0,m.Z)({},t,{pathname:t.pathname.substr(n.length)})}function A(e){return"string"==typeof e?e:(0,o.Ep)(e)}function L(e){return function(){(0,p.Z)(!1)}}function R(){}a.Component;var P=function(e){function t(){return e.apply(this,arguments)||this}return(0,r.Z)(t,e),t.prototype.render=function(){var e=this;return a.createElement(w.Consumer,null,(function(t){t||(0,p.Z)(!1);var n,r,o=e.props.location||t.location;return a.Children.forEach(e.props.children,(function(e){if(null==r&&a.isValidElement(e)){n=e;var i=e.props.path||e.props.from;r=i?x(o.pathname,(0,m.Z)({},e.props,{path:i})):t.match}})),r?a.cloneElement(n,{location:o,computedMatch:r}):null}))},t}(a.Component);var N=a.useContext;function O(){return N(y)}function I(){return N(w).location}},9658:(e,t,n)=>{var r=n(5826);e.exports=p,e.exports.parse=o,e.exports.compile=function(e,t){return l(o(e,t),t)},e.exports.tokensToFunction=l,e.exports.tokensToRegExp=f;var a=new RegExp(["(\\\\.)","([\\/.])?(?:(?:\\:(\\w+)(?:\\(((?:\\\\.|[^\\\\()])+)\\))?|\\(((?:\\\\.|[^\\\\()])+)\\))([+*?])?|(\\*))"].join("|"),"g");function o(e,t){for(var n,r=[],o=0,i=0,l="",c=t&&t.delimiter||"/";null!=(n=a.exec(e));){var d=n[0],f=n[1],p=n.index;if(l+=e.slice(i,p),i=p+d.length,f)l+=f[1];else{var m=e[i],h=n[2],g=n[3],b=n[4],v=n[5],y=n[6],w=n[7];l&&(r.push(l),l="");var k=null!=h&&null!=m&&m!==h,S="+"===y||"*"===y,E="?"===y||"*"===y,x=n[2]||c,T=b||v;r.push({name:g||o++,prefix:h||"",delimiter:x,optional:E,repeat:S,partial:k,asterisk:!!w,pattern:T?u(T):w?".*":"[^"+s(x)+"]+?"})}}return i<e.length&&(l+=e.substr(i)),l&&r.push(l),r}function i(e){return encodeURI(e).replace(/[\/?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()}))}function l(e,t){for(var n=new Array(e.length),a=0;a<e.length;a++)"object"==typeof e[a]&&(n[a]=new RegExp("^(?:"+e[a].pattern+")$",d(t)));return function(t,a){for(var o="",l=t||{},s=(a||{}).pretty?i:encodeURIComponent,u=0;u<e.length;u++){var c=e[u];if("string"!=typeof c){var d,f=l[c.name];if(null==f){if(c.optional){c.partial&&(o+=c.prefix);continue}throw new TypeError('Expected "'+c.name+'" to be defined')}if(r(f)){if(!c.repeat)throw new TypeError('Expected "'+c.name+'" to not repeat, but received `'+JSON.stringify(f)+"`");if(0===f.length){if(c.optional)continue;throw new TypeError('Expected "'+c.name+'" to not be empty')}for(var p=0;p<f.length;p++){if(d=s(f[p]),!n[u].test(d))throw new TypeError('Expected all "'+c.name+'" to match "'+c.pattern+'", but received `'+JSON.stringify(d)+"`");o+=(0===p?c.prefix:c.delimiter)+d}}else{if(d=c.asterisk?encodeURI(f).replace(/[?#]/g,(function(e){return"%"+e.charCodeAt(0).toString(16).toUpperCase()})):s(f),!n[u].test(d))throw new TypeError('Expected "'+c.name+'" to match "'+c.pattern+'", but received "'+d+'"');o+=c.prefix+d}}else o+=c}return o}}function s(e){return e.replace(/([.+*?=^!:${}()[\]|\/\\])/g,"\\$1")}function u(e){return e.replace(/([=!:$\/()])/g,"\\$1")}function c(e,t){return e.keys=t,e}function d(e){return e&&e.sensitive?"":"i"}function f(e,t,n){r(t)||(n=t||n,t=[]);for(var a=(n=n||{}).strict,o=!1!==n.end,i="",l=0;l<e.length;l++){var u=e[l];if("string"==typeof u)i+=s(u);else{var f=s(u.prefix),p="(?:"+u.pattern+")";t.push(u),u.repeat&&(p+="(?:"+f+p+")*"),i+=p=u.optional?u.partial?f+"("+p+")?":"(?:"+f+"("+p+"))?":f+"("+p+")"}}var m=s(n.delimiter||"/"),h=i.slice(-m.length)===m;return a||(i=(h?i.slice(0,-m.length):i)+"(?:"+m+"(?=$))?"),i+=o?"$":a&&h?"":"(?="+m+"|$)",c(new RegExp("^"+i,d(n)),t)}function p(e,t,n){return r(t)||(n=t||n,t=[]),n=n||{},e instanceof RegExp?function(e,t){var n=e.source.match(/\((?!\?)/g);if(n)for(var r=0;r<n.length;r++)t.push({name:r,prefix:null,delimiter:null,optional:!1,repeat:!1,partial:!1,asterisk:!1,pattern:null});return c(e,t)}(e,t):r(e)?function(e,t,n){for(var r=[],a=0;a<e.length;a++)r.push(p(e[a],t,n).source);return c(new RegExp("(?:"+r.join("|")+")",d(n)),t)}(e,t,n):function(e,t,n){return f(o(e,n),t,n)}(e,t,n)}},2408:(e,t,n)=>{"use strict";var r=n(7418),a=60103,o=60106;t.Fragment=60107,t.StrictMode=60108,t.Profiler=60114;var i=60109,l=60110,s=60112;t.Suspense=60113;var u=60115,c=60116;if("function"==typeof Symbol&&Symbol.for){var d=Symbol.for;a=d("react.element"),o=d("react.portal"),t.Fragment=d("react.fragment"),t.StrictMode=d("react.strict_mode"),t.Profiler=d("react.profiler"),i=d("react.provider"),l=d("react.context"),s=d("react.forward_ref"),t.Suspense=d("react.suspense"),u=d("react.memo"),c=d("react.lazy")}var f="function"==typeof Symbol&&Symbol.iterator;function p(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var m={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},h={};function g(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}function b(){}function v(e,t,n){this.props=e,this.context=t,this.refs=h,this.updater=n||m}g.prototype.isReactComponent={},g.prototype.setState=function(e,t){if("object"!=typeof e&&"function"!=typeof e&&null!=e)throw Error(p(85));this.updater.enqueueSetState(this,e,t,"setState")},g.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,"forceUpdate")},b.prototype=g.prototype;var y=v.prototype=new b;y.constructor=v,r(y,g.prototype),y.isPureReactComponent=!0;var w={current:null},k=Object.prototype.hasOwnProperty,S={key:!0,ref:!0,__self:!0,__source:!0};function E(e,t,n){var r,o={},i=null,l=null;if(null!=t)for(r in void 0!==t.ref&&(l=t.ref),void 0!==t.key&&(i=""+t.key),t)k.call(t,r)&&!S.hasOwnProperty(r)&&(o[r]=t[r]);var s=arguments.length-2;if(1===s)o.children=n;else if(1<s){for(var u=Array(s),c=0;c<s;c++)u[c]=arguments[c+2];o.children=u}if(e&&e.defaultProps)for(r in s=e.defaultProps)void 0===o[r]&&(o[r]=s[r]);return{$$typeof:a,type:e,key:i,ref:l,props:o,_owner:w.current}}function x(e){return"object"==typeof e&&null!==e&&e.$$typeof===a}var T=/\/+/g;function C(e,t){return"object"==typeof e&&null!==e&&null!=e.key?function(e){var t={"=":"=0",":":"=2"};return"$"+e.replace(/[=:]/g,(function(e){return t[e]}))}(""+e.key):t.toString(36)}function _(e,t,n,r,i){var l=typeof e;"undefined"!==l&&"boolean"!==l||(e=null);var s=!1;if(null===e)s=!0;else switch(l){case"string":case"number":s=!0;break;case"object":switch(e.$$typeof){case a:case o:s=!0}}if(s)return i=i(s=e),e=""===r?"."+C(s,0):r,Array.isArray(i)?(n="",null!=e&&(n=e.replace(T,"$&/")+"/"),_(i,t,n,"",(function(e){return e}))):null!=i&&(x(i)&&(i=function(e,t){return{$$typeof:a,type:e.type,key:t,ref:e.ref,props:e.props,_owner:e._owner}}(i,n+(!i.key||s&&s.key===i.key?"":(""+i.key).replace(T,"$&/")+"/")+e)),t.push(i)),1;if(s=0,r=""===r?".":r+":",Array.isArray(e))for(var u=0;u<e.length;u++){var c=r+C(l=e[u],u);s+=_(l,t,n,c,i)}else if(c=function(e){return null===e||"object"!=typeof e?null:"function"==typeof(e=f&&e[f]||e["@@iterator"])?e:null}(e),"function"==typeof c)for(e=c.call(e),u=0;!(l=e.next()).done;)s+=_(l=l.value,t,n,c=r+C(l,u++),i);else if("object"===l)throw t=""+e,Error(p(31,"[object Object]"===t?"object with keys {"+Object.keys(e).join(", ")+"}":t));return s}function A(e,t,n){if(null==e)return e;var r=[],a=0;return _(e,r,"","",(function(e){return t.call(n,e,a++)})),r}function L(e){if(-1===e._status){var t=e._result;t=t(),e._status=0,e._result=t,t.then((function(t){0===e._status&&(t=t.default,e._status=1,e._result=t)}),(function(t){0===e._status&&(e._status=2,e._result=t)}))}if(1===e._status)return e._result;throw e._result}var R={current:null};function P(){var e=R.current;if(null===e)throw Error(p(321));return e}var N={ReactCurrentDispatcher:R,ReactCurrentBatchConfig:{transition:0},ReactCurrentOwner:w,IsSomeRendererActing:{current:!1},assign:r};t.Children={map:A,forEach:function(e,t,n){A(e,(function(){t.apply(this,arguments)}),n)},count:function(e){var t=0;return A(e,(function(){t++})),t},toArray:function(e){return A(e,(function(e){return e}))||[]},only:function(e){if(!x(e))throw Error(p(143));return e}},t.Component=g,t.PureComponent=v,t.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED=N,t.cloneElement=function(e,t,n){if(null==e)throw Error(p(267,e));var o=r({},e.props),i=e.key,l=e.ref,s=e._owner;if(null!=t){if(void 0!==t.ref&&(l=t.ref,s=w.current),void 0!==t.key&&(i=""+t.key),e.type&&e.type.defaultProps)var u=e.type.defaultProps;for(c in t)k.call(t,c)&&!S.hasOwnProperty(c)&&(o[c]=void 0===t[c]&&void 0!==u?u[c]:t[c])}var c=arguments.length-2;if(1===c)o.children=n;else if(1<c){u=Array(c);for(var d=0;d<c;d++)u[d]=arguments[d+2];o.children=u}return{$$typeof:a,type:e.type,key:i,ref:l,props:o,_owner:s}},t.createContext=function(e,t){return void 0===t&&(t=null),(e={$$typeof:l,_calculateChangedBits:t,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null}).Provider={$$typeof:i,_context:e},e.Consumer=e},t.createElement=E,t.createFactory=function(e){var t=E.bind(null,e);return t.type=e,t},t.createRef=function(){return{current:null}},t.forwardRef=function(e){return{$$typeof:s,render:e}},t.isValidElement=x,t.lazy=function(e){return{$$typeof:c,_payload:{_status:-1,_result:e},_init:L}},t.memo=function(e,t){return{$$typeof:u,type:e,compare:void 0===t?null:t}},t.useCallback=function(e,t){return P().useCallback(e,t)},t.useContext=function(e,t){return P().useContext(e,t)},t.useDebugValue=function(){},t.useEffect=function(e,t){return P().useEffect(e,t)},t.useImperativeHandle=function(e,t,n){return P().useImperativeHandle(e,t,n)},t.useLayoutEffect=function(e,t){return P().useLayoutEffect(e,t)},t.useMemo=function(e,t){return P().useMemo(e,t)},t.useReducer=function(e,t,n){return P().useReducer(e,t,n)},t.useRef=function(e){return P().useRef(e)},t.useState=function(e){return P().useState(e)},t.version="17.0.2"},7294:(e,t,n)=>{"use strict";e.exports=n(2408)},53:(e,t)=>{"use strict";var n,r,a,o;if("object"==typeof performance&&"function"==typeof performance.now){var i=performance;t.unstable_now=function(){return i.now()}}else{var l=Date,s=l.now();t.unstable_now=function(){return l.now()-s}}if("undefined"==typeof window||"function"!=typeof MessageChannel){var u=null,c=null,d=function(){if(null!==u)try{var e=t.unstable_now();u(!0,e),u=null}catch(n){throw setTimeout(d,0),n}};n=function(e){null!==u?setTimeout(n,0,e):(u=e,setTimeout(d,0))},r=function(e,t){c=setTimeout(e,t)},a=function(){clearTimeout(c)},t.unstable_shouldYield=function(){return!1},o=t.unstable_forceFrameRate=function(){}}else{var f=window.setTimeout,p=window.clearTimeout;if("undefined"!=typeof console){var m=window.cancelAnimationFrame;"function"!=typeof window.requestAnimationFrame&&console.error("This browser doesn't support requestAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills"),"function"!=typeof m&&console.error("This browser doesn't support cancelAnimationFrame. Make sure that you load a polyfill in older browsers. https://reactjs.org/link/react-polyfills")}var h=!1,g=null,b=-1,v=5,y=0;t.unstable_shouldYield=function(){return t.unstable_now()>=y},o=function(){},t.unstable_forceFrameRate=function(e){0>e||125<e?console.error("forceFrameRate takes a positive int between 0 and 125, forcing frame rates higher than 125 fps is not supported"):v=0<e?Math.floor(1e3/e):5};var w=new MessageChannel,k=w.port2;w.port1.onmessage=function(){if(null!==g){var e=t.unstable_now();y=e+v;try{g(!0,e)?k.postMessage(null):(h=!1,g=null)}catch(n){throw k.postMessage(null),n}}else h=!1},n=function(e){g=e,h||(h=!0,k.postMessage(null))},r=function(e,n){b=f((function(){e(t.unstable_now())}),n)},a=function(){p(b),b=-1}}function S(e,t){var n=e.length;e.push(t);e:for(;;){var r=n-1>>>1,a=e[r];if(!(void 0!==a&&0<T(a,t)))break e;e[r]=t,e[n]=a,n=r}}function E(e){return void 0===(e=e[0])?null:e}function x(e){var t=e[0];if(void 0!==t){var n=e.pop();if(n!==t){e[0]=n;e:for(var r=0,a=e.length;r<a;){var o=2*(r+1)-1,i=e[o],l=o+1,s=e[l];if(void 0!==i&&0>T(i,n))void 0!==s&&0>T(s,i)?(e[r]=s,e[l]=n,r=l):(e[r]=i,e[o]=n,r=o);else{if(!(void 0!==s&&0>T(s,n)))break e;e[r]=s,e[l]=n,r=l}}}return t}return null}function T(e,t){var n=e.sortIndex-t.sortIndex;return 0!==n?n:e.id-t.id}var C=[],_=[],A=1,L=null,R=3,P=!1,N=!1,O=!1;function I(e){for(var t=E(_);null!==t;){if(null===t.callback)x(_);else{if(!(t.startTime<=e))break;x(_),t.sortIndex=t.expirationTime,S(C,t)}t=E(_)}}function D(e){if(O=!1,I(e),!N)if(null!==E(C))N=!0,n(M);else{var t=E(_);null!==t&&r(D,t.startTime-e)}}function M(e,n){N=!1,O&&(O=!1,a()),P=!0;var o=R;try{for(I(n),L=E(C);null!==L&&(!(L.expirationTime>n)||e&&!t.unstable_shouldYield());){var i=L.callback;if("function"==typeof i){L.callback=null,R=L.priorityLevel;var l=i(L.expirationTime<=n);n=t.unstable_now(),"function"==typeof l?L.callback=l:L===E(C)&&x(C),I(n)}else x(C);L=E(C)}if(null!==L)var s=!0;else{var u=E(_);null!==u&&r(D,u.startTime-n),s=!1}return s}finally{L=null,R=o,P=!1}}var z=o;t.unstable_IdlePriority=5,t.unstable_ImmediatePriority=1,t.unstable_LowPriority=4,t.unstable_NormalPriority=3,t.unstable_Profiling=null,t.unstable_UserBlockingPriority=2,t.unstable_cancelCallback=function(e){e.callback=null},t.unstable_continueExecution=function(){N||P||(N=!0,n(M))},t.unstable_getCurrentPriorityLevel=function(){return R},t.unstable_getFirstCallbackNode=function(){return E(C)},t.unstable_next=function(e){switch(R){case 1:case 2:case 3:var t=3;break;default:t=R}var n=R;R=t;try{return e()}finally{R=n}},t.unstable_pauseExecution=function(){},t.unstable_requestPaint=z,t.unstable_runWithPriority=function(e,t){switch(e){case 1:case 2:case 3:case 4:case 5:break;default:e=3}var n=R;R=e;try{return t()}finally{R=n}},t.unstable_scheduleCallback=function(e,o,i){var l=t.unstable_now();switch("object"==typeof i&&null!==i?i="number"==typeof(i=i.delay)&&0<i?l+i:l:i=l,e){case 1:var s=-1;break;case 2:s=250;break;case 5:s=1073741823;break;case 4:s=1e4;break;default:s=5e3}return e={id:A++,callback:o,priorityLevel:e,startTime:i,expirationTime:s=i+s,sortIndex:-1},i>l?(e.sortIndex=i,S(_,e),null===E(C)&&e===E(_)&&(O?a():O=!0,r(D,i-l))):(e.sortIndex=s,S(C,e),N||P||(N=!0,n(M))),e},t.unstable_wrapCallback=function(e){var t=R;return function(){var n=R;R=t;try{return e.apply(this,arguments)}finally{R=n}}}},3840:(e,t,n)=>{"use strict";e.exports=n(53)},6774:e=>{e.exports=function(e,t,n,r){var a=n?n.call(r,e,t):void 0;if(void 0!==a)return!!a;if(e===t)return!0;if("object"!=typeof e||!e||"object"!=typeof t||!t)return!1;var o=Object.keys(e),i=Object.keys(t);if(o.length!==i.length)return!1;for(var l=Object.prototype.hasOwnProperty.bind(t),s=0;s<o.length;s++){var u=o[s];if(!l(u))return!1;var c=e[u],d=t[u];if(!1===(a=n?n.call(r,c,d,u):void 0)||void 0===a&&c!==d)return!1}return!0}},2177:(e,t,n)=>{"use strict";n.d(t,{Z:()=>a});var r="Invariant failed";function a(e,t){if(!e)throw new Error(r)}},3250:(e,t,n)=>{"use strict";var r=n(7294);var a="function"==typeof Object.is?Object.is:function(e,t){return e===t&&(0!==e||1/e==1/t)||e!=e&&t!=t},o=r.useState,i=r.useEffect,l=r.useLayoutEffect,s=r.useDebugValue;function u(e){var t=e.getSnapshot;e=e.value;try{var n=t();return!a(e,n)}catch(r){return!0}}var c="undefined"==typeof window||void 0===window.document||void 0===window.document.createElement?function(e,t){return t()}:function(e,t){var n=t(),r=o({inst:{value:n,getSnapshot:t}}),a=r[0].inst,c=r[1];return l((function(){a.value=n,a.getSnapshot=t,u(a)&&c({inst:a})}),[e,n,t]),i((function(){return u(a)&&c({inst:a}),e((function(){u(a)&&c({inst:a})}))}),[e]),s(n),n};t.useSyncExternalStore=void 0!==r.useSyncExternalStore?r.useSyncExternalStore:c},1688:(e,t,n)=>{"use strict";e.exports=n(3250)},6809:(e,t,n)=>{"use strict";n.d(t,{Z:()=>r});const r={title:"K3s",tagline:"",url:"https://docs.k3s.io",baseUrl:"/zh/",onBrokenLinks:"throw",onBrokenMarkdownLinks:"warn",favicon:"img/favicon.ico",organizationName:"k3s-io",projectName:"docs",trailingSlash:!1,markdown:{mermaid:!0},themes:["@docusaurus/theme-mermaid"],i18n:{defaultLocale:"en",locales:["en","zh","kr"],localeConfigs:{en:{label:"English",direction:"ltr"},zh:{label:"\u7b80\u4f53\u4e2d\u6587",direction:"ltr"},kr:{label:"\ud55c\uad6d\uc5b4",direction:"ltr"}},path:"i18n"},themeConfig:{colorMode:{defaultMode:"light",respectPrefersColorScheme:!0,disableSwitch:!1},navbar:{title:"",logo:{alt:"logo",src:"img/k3s-logo-light.svg",srcDark:"img/k3s-logo-dark.svg"},items:[{type:"search",position:"right"},{type:"localeDropdown",position:"right",dropdownItemsBefore:[],dropdownItemsAfter:[]},{to:"https://github.com/k3s-io/k3s/",label:"GitHub",position:"right",className:"navbar__github btn"}],hideOnScroll:!1},algolia:{appId:"LLOD7N3LJA",apiKey:"4637c26b2ca6b8aeaf99a3ee421fb35c",indexName:"k3s",contextualSearch:!0,searchParameters:{},searchPagePath:"search"},footer:{style:"dark",links:[],copyright:'Copyright \xa9 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks\n      and uses trademarks. For a list of trademarks of The Linux Foundation, \n      please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.'},docs:{versionPersistence:"localStorage",sidebar:{hideable:!1,autoCollapseCategories:!1}},metadata:[],prism:{additionalLanguages:[],theme:{plain:{color:"#bfc7d5",backgroundColor:"#292d3e"},styles:[{types:["comment"],style:{color:"rgb(105, 112, 152)",fontStyle:"italic"}},{types:["string","inserted"],style:{color:"rgb(195, 232, 141)"}},{types:["number"],style:{color:"rgb(247, 140, 108)"}},{types:["builtin","char","constant","function"],style:{color:"rgb(130, 170, 255)"}},{types:["punctuation","selector"],style:{color:"rgb(199, 146, 234)"}},{types:["variable"],style:{color:"rgb(191, 199, 213)"}},{types:["class-name","attr-name"],style:{color:"rgb(255, 203, 107)"}},{types:["tag","deleted"],style:{color:"rgb(255, 85, 114)"}},{types:["operator"],style:{color:"rgb(137, 221, 255)"}},{types:["boolean"],style:{color:"rgb(255, 88, 116)"}},{types:["keyword"],style:{fontStyle:"italic"}},{types:["doctype"],style:{color:"rgb(199, 146, 234)",fontStyle:"italic"}},{types:["namespace"],style:{color:"rgb(178, 204, 214)"}},{types:["url"],style:{color:"rgb(221, 221, 221)"}}]},magicComments:[{className:"theme-code-block-highlighted-line",line:"highlight-next-line",block:{start:"highlight-start",end:"highlight-end"}}]},tableOfContents:{minHeadingLevel:2,maxHeadingLevel:3},mermaid:{theme:{dark:"dark",light:"default"},options:{}}},presets:[["@docusaurus/preset-classic",{docs:{routeBasePath:"/",sidebarPath:"/home/runner/work/docs/docs/sidebars.js",showLastUpdateTime:!0,editUrl:"https://github.com/k3s-io/docs/edit/main/"},blog:!1,theme:{customCss:["/home/runner/work/docs/docs/src/css/custom.css"]}}]],plugins:[["@docusaurus/plugin-client-redirects",{redirects:[{from:"/installation/ha",to:"/datastore/ha"},{from:"/installation/ha-embedded",to:"/datastore/ha-embedded"},{from:"/installation/datastore",to:"/datastore"},{from:"/installation/disable-flags",to:"/installation/server-roles"},{from:"/backup-restore/backup-restore",to:"/datastore/backup-restore"},{from:"/reference/agent-config",to:"/cli/agent"},{from:"/reference/server-config",to:"/cli/server"}]}]],baseUrlIssueBanner:!0,onDuplicateRoutes:"warn",staticDirectories:["static"],customFields:{},scripts:[],headTags:[],stylesheets:[],clientModules:[],titleDelimiter:"|",noIndex:!1}},3117:(e,t,n)=>{"use strict";function r(){return r=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},r.apply(this,arguments)}n.d(t,{Z:()=>r})},144:(e,t,n)=>{"use strict";function r(e,t){return r=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(e,t){return e.__proto__=t,e},r(e,t)}function a(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,r(e,t)}n.d(t,{Z:()=>a})},102:(e,t,n)=>{"use strict";function r(e,t){if(null==e)return{};var n,r,a={},o=Object.keys(e);for(r=0;r<o.length;r++)n=o[r],t.indexOf(n)>=0||(a[n]=e[n]);return a}n.d(t,{Z:()=>r})},7529:e=>{"use strict";e.exports=JSON.parse('{"theme.AnnouncementBar.closeButtonAriaLabel":"\u5173\u95ed","theme.BackToTopButton.buttonAriaLabel":"\u56de\u5230\u9876\u90e8","theme.CodeBlock.copied":"\u590d\u5236\u6210\u529f","theme.CodeBlock.copy":"\u590d\u5236","theme.CodeBlock.copyButtonAriaLabel":"\u590d\u5236\u4ee3\u7801\u5230\u526a\u8d34\u677f","theme.CodeBlock.wordWrapToggle":"\u5207\u6362\u81ea\u52a8\u6362\u884c","theme.DocSidebarItem.toggleCollapsedCategoryAriaLabel":"\u6253\u5f00/\u6536\u8d77\u4fa7\u8fb9\u680f\u83dc\u5355\u300c{label}\u300d","theme.ErrorPageContent.title":"\u9875\u9762\u5df2\u5d29\u6e83\u3002","theme.ErrorPageContent.tryAgain":"\u91cd\u8bd5","theme.NavBar.navAriaLabel":"\u4e3b\u5bfc\u822a","theme.NotFound.p1":"\u6211\u4eec\u627e\u4e0d\u5230\u60a8\u8981\u627e\u7684\u9875\u9762\u3002","theme.NotFound.p2":"\u8bf7\u8054\u7cfb\u539f\u59cb\u94fe\u63a5\u6765\u6e90\u7f51\u7ad9\u7684\u6240\u6709\u8005\uff0c\u5e76\u544a\u77e5\u4ed6\u4eec\u94fe\u63a5\u5df2\u635f\u574f\u3002","theme.NotFound.title":"\u627e\u4e0d\u5230\u9875\u9762","theme.TOCCollapsible.toggleButtonLabel":"\u672c\u9875\u603b\u89c8","theme.admonition.caution":"\u8b66\u544a","theme.admonition.danger":"\u5371\u9669","theme.admonition.info":"\u4fe1\u606f","theme.admonition.note":"\u5907\u6ce8","theme.admonition.tip":"\u63d0\u793a","theme.blog.archive.description":"\u5386\u53f2\u535a\u6587","theme.blog.archive.title":"\u5386\u53f2\u535a\u6587","theme.blog.paginator.navAriaLabel":"\u535a\u6587\u5217\u8868\u5206\u9875\u5bfc\u822a","theme.blog.paginator.newerEntries":"\u8f83\u65b0\u7684\u535a\u6587","theme.blog.paginator.olderEntries":"\u8f83\u65e7\u7684\u535a\u6587","theme.blog.post.paginator.navAriaLabel":"\u535a\u6587\u5206\u9875\u5bfc\u822a","theme.blog.post.paginator.newerPost":"\u8f83\u65b0\u4e00\u7bc7","theme.blog.post.paginator.olderPost":"\u8f83\u65e7\u4e00\u7bc7","theme.blog.post.plurals":"{count} \u7bc7\u535a\u6587","theme.blog.post.readMore":"\u9605\u8bfb\u66f4\u591a","theme.blog.post.readMoreLabel":"\u9605\u8bfb {title} \u7684\u5168\u6587","theme.blog.post.readingTime.plurals":"\u9605\u8bfb\u9700 {readingTime} \u5206\u949f","theme.blog.sidebar.navAriaLabel":"\u6700\u8fd1\u535a\u6587\u5bfc\u822a","theme.blog.tagTitle":"{nPosts} \u542b\u6709\u6807\u7b7e\u300c{tagName}\u300d","theme.colorToggle.ariaLabel":"\u5207\u6362\u6d45\u8272/\u6697\u9ed1\u6a21\u5f0f\uff08\u5f53\u524d\u4e3a{mode}\uff09","theme.colorToggle.ariaLabel.mode.dark":"\u6697\u9ed1\u6a21\u5f0f","theme.colorToggle.ariaLabel.mode.light":"\u6d45\u8272\u6a21\u5f0f","theme.common.editThisPage":"\u7f16\u8f91\u6b64\u9875","theme.common.headingLinkTitle":"\u6807\u9898\u7684\u76f4\u63a5\u94fe\u63a5","theme.common.skipToMainContent":"\u8df3\u5230\u4e3b\u8981\u5185\u5bb9","theme.docs.DocCard.categoryDescription":"{count} \u4e2a\u9879\u76ee","theme.docs.breadcrumbs.home":"\u4e3b\u9875\u9762","theme.docs.breadcrumbs.navAriaLabel":"\u9875\u9762\u8def\u5f84","theme.docs.paginator.navAriaLabel":"\u6587\u6863\u5206\u9875\u5bfc\u822a","theme.docs.paginator.next":"\u4e0b\u4e00\u9875","theme.docs.paginator.previous":"\u4e0a\u4e00\u9875","theme.docs.sidebar.closeSidebarButtonAriaLabel":"Close navigation bar","theme.docs.sidebar.collapseButtonAriaLabel":"\u6536\u8d77\u4fa7\u8fb9\u680f","theme.docs.sidebar.collapseButtonTitle":"\u6536\u8d77\u4fa7\u8fb9\u680f","theme.docs.sidebar.expandButtonAriaLabel":"\u5c55\u5f00\u4fa7\u8fb9\u680f","theme.docs.sidebar.expandButtonTitle":"\u5c55\u5f00\u4fa7\u8fb9\u680f","theme.docs.sidebar.navAriaLabel":"\u6587\u6863\u4fa7\u8fb9\u680f","theme.docs.sidebar.toggleSidebarButtonAriaLabel":"Toggle navigation bar","theme.docs.tagDocListPageTitle":"{nDocsTagged}\u300c{tagName}\u300d","theme.docs.tagDocListPageTitle.nDocsTagged":"{count} \u7bc7\u6587\u6863\u5e26\u6709\u6807\u7b7e","theme.docs.versionBadge.label":"\u7248\u672c\uff1a{versionLabel}","theme.docs.versions.latestVersionLinkLabel":"\u6700\u65b0\u7248\u672c","theme.docs.versions.latestVersionSuggestionLabel":"\u6700\u65b0\u7684\u6587\u6863\u8bf7\u53c2\u9605 {latestVersionLink} ({versionLabel})\u3002","theme.docs.versions.unmaintainedVersionLabel":"\u6b64\u4e3a {siteTitle} {versionLabel} \u7248\u7684\u6587\u6863\uff0c\u73b0\u5df2\u4e0d\u518d\u79ef\u6781\u7ef4\u62a4\u3002","theme.docs.versions.unreleasedVersionLabel":"\u6b64\u4e3a {siteTitle} {versionLabel} \u7248\u5c1a\u672a\u53d1\u884c\u7684\u6587\u6863\u3002","theme.lastUpdated.atDate":"\u4e8e {date} ","theme.lastUpdated.byUser":"\u7531 {user} ","theme.lastUpdated.lastUpdatedAtBy":"\u6700\u540e{byUser}{atDate}\u66f4\u65b0","theme.navbar.mobileLanguageDropdown.label":"\u9009\u62e9\u8bed\u8a00","theme.navbar.mobileSidebarSecondaryMenu.backButtonLabel":"\u2190 \u56de\u5230\u4e3b\u83dc\u5355","theme.navbar.mobileVersionsDropdown.label":"\u9009\u62e9\u7248\u672c","theme.tags.tagsListLabel":"\u6807\u7b7e\uff1a","theme.tags.tagsPageLink":"\u67e5\u770b\u6240\u6709\u6807\u7b7e","theme.tags.tagsPageTitle":"\u6807\u7b7e","theme.SearchBar.label":"\u641c\u7d22","theme.SearchBar.seeAll":"\u67e5\u770b\u5168\u90e8 {count} \u4e2a\u7ed3\u679c","theme.SearchModal.errorScreen.helpText":"\u4f60\u53ef\u80fd\u9700\u8981\u68c0\u67e5\u7f51\u7edc\u8fde\u63a5\u3002","theme.SearchModal.errorScreen.titleText":"\u65e0\u6cd5\u83b7\u53d6\u7ed3\u679c","theme.SearchModal.footer.closeKeyAriaLabel":"Esc \u952e","theme.SearchModal.footer.closeText":"\u5173\u95ed","theme.SearchModal.footer.navigateDownKeyAriaLabel":"\u5411\u4e0b\u952e","theme.SearchModal.footer.navigateText":"\u5bfc\u822a","theme.SearchModal.footer.navigateUpKeyAriaLabel":"\u5411\u4e0a\u952e","theme.SearchModal.footer.searchByText":"\u641c\u7d22\u63d0\u4f9b","theme.SearchModal.footer.selectKeyAriaLabel":"Enter \u952e","theme.SearchModal.footer.selectText":"\u9009\u4e2d","theme.SearchModal.noResultsScreen.noResultsText":"\u6ca1\u6709\u7ed3\u679c\uff1a","theme.SearchModal.noResultsScreen.reportMissingResultsLinkText":"\u8bf7\u544a\u77e5\u6211\u4eec\u3002","theme.SearchModal.noResultsScreen.reportMissingResultsText":"\u8ba4\u4e3a\u8fd9\u4e2a\u67e5\u8be2\u5e94\u8be5\u6709\u7ed3\u679c\uff1f","theme.SearchModal.noResultsScreen.suggestedQueryText":"\u8bd5\u8bd5\u641c\u7d22","theme.SearchModal.placeholder":"\u641c\u7d22\u6587\u6863","theme.SearchModal.searchBox.cancelButtonText":"\u53d6\u6d88","theme.SearchModal.searchBox.resetButtonTitle":"\u6e05\u9664\u67e5\u8be2","theme.SearchModal.startScreen.favoriteSearchesTitle":"\u6536\u85cf","theme.SearchModal.startScreen.noRecentSearchesText":"\u6ca1\u6709\u6700\u8fd1\u641c\u7d22","theme.SearchModal.startScreen.recentSearchesTitle":"\u6700\u8fd1\u641c\u7d22","theme.SearchModal.startScreen.removeFavoriteSearchButtonTitle":"\u4ece\u6536\u85cf\u5217\u8868\u4e2d\u5220\u9664\u8fd9\u4e2a\u641c\u7d22","theme.SearchModal.startScreen.removeRecentSearchButtonTitle":"\u4ece\u5386\u53f2\u8bb0\u5f55\u4e2d\u5220\u9664\u8fd9\u4e2a\u641c\u7d22","theme.SearchModal.startScreen.saveRecentSearchButtonTitle":"\u4fdd\u5b58\u8fd9\u4e2a\u641c\u7d22","theme.SearchPage.algoliaLabel":"\u901a\u8fc7 Algolia \u641c\u7d22","theme.SearchPage.documentsFound.plurals":"\u627e\u5230 {count} \u4efd\u6587\u4ef6","theme.SearchPage.emptyResultsTitle":"\u5728\u6587\u6863\u4e2d\u641c\u7d22","theme.SearchPage.existingResultsTitle":"\u300c{query}\u300d\u7684\u641c\u7d22\u7ed3\u679c","theme.SearchPage.fetchingNewResults":"\u6b63\u5728\u83b7\u53d6\u65b0\u7684\u641c\u7d22\u7ed3\u679c...","theme.SearchPage.inputLabel":"\u641c\u7d22","theme.SearchPage.inputPlaceholder":"\u5728\u6b64\u8f93\u5165\u641c\u7d22\u5b57\u8bcd","theme.SearchPage.noResultsText":"\u672a\u627e\u5230\u4efb\u4f55\u7ed3\u679c"}')},6887:e=>{"use strict";e.exports=JSON.parse('{"/zh/search-b91":{"__comp":"1a4e3797","__context":{"plugin":"59b068d1"}},"/zh/-428":{"__comp":"1be78505","__context":{"plugin":"247783bb"},"versionMetadata":"935f2afb"},"/zh/-73b":{"__comp":"17896441","content":"13055719"},"/zh/advanced-367":{"__comp":"17896441","content":"9c71bff4"},"/zh/architecture-f86":{"__comp":"17896441","content":"4a93747f"},"/zh/cli-16f":{"__comp":"17896441","content":"50715220"},"/zh/cli/agent-a3f":{"__comp":"17896441","content":"15ed8710"},"/zh/cli/certificate-6a2":{"__comp":"17896441","content":"53163943"},"/zh/cli/etcd-snapshot-8da":{"__comp":"17896441","content":"37dfe6f0"},"/zh/cli/secrets-encrypt-0b0":{"__comp":"17896441","content":"df5dd15e"},"/zh/cli/server-25d":{"__comp":"17896441","content":"0a743094"},"/zh/cli/token-a40":{"__comp":"17896441","content":"772a162b"},"/zh/cluster-access-dbe":{"__comp":"17896441","content":"0a0e4894"},"/zh/datastore-ab6":{"__comp":"17896441","content":"6f7960fe"},"/zh/datastore/backup-restore-379":{"__comp":"17896441","content":"e65553dc"},"/zh/datastore/cluster-loadbalancer-995":{"__comp":"17896441","content":"5977b32d"},"/zh/datastore/ha-7ae":{"__comp":"17896441","content":"beafadc6"},"/zh/datastore/ha-embedded-7fe":{"__comp":"17896441","content":"b2fd5509"},"/zh/faq-936":{"__comp":"17896441","content":"ac5690a0"},"/zh/helm-416":{"__comp":"17896441","content":"6b4d906e"},"/zh/installation-40c":{"__comp":"17896441","content":"492f60c5"},"/zh/installation/airgap-262":{"__comp":"17896441","content":"7d5aab5d"},"/zh/installation/configuration-906":{"__comp":"17896441","content":"e1787277"},"/zh/installation/kube-dashboard-ddd":{"__comp":"17896441","content":"de044cc7"},"/zh/installation/network-options-0b1":{"__comp":"17896441","content":"f367c5c1"},"/zh/installation/packaged-components-19e":{"__comp":"17896441","content":"dcd62276"},"/zh/installation/private-registry-c5c":{"__comp":"17896441","content":"1f6c7e37"},"/zh/installation/requirements-62d":{"__comp":"17896441","content":"62005660"},"/zh/installation/server-roles-5fb":{"__comp":"17896441","content":"97691ddb"},"/zh/installation/uninstall-47d":{"__comp":"17896441","content":"2af2f480"},"/zh/known-issues-97f":{"__comp":"17896441","content":"34c95e47"},"/zh/networking-69c":{"__comp":"17896441","content":"11f121d5"},"/zh/quick-start-6e8":{"__comp":"17896441","content":"1ac3de50"},"/zh/reference-1cf":{"__comp":"17896441","content":"330f05fd"},"/zh/reference/env-variables-d35":{"__comp":"17896441","content":"711cf357"},"/zh/reference/resource-profiling-541":{"__comp":"17896441","content":"2d65ef92"},"/zh/security-890":{"__comp":"17896441","content":"6d8200b0"},"/zh/security/hardening-guide-195":{"__comp":"17896441","content":"811e87f8"},"/zh/security/secrets-encryption-152":{"__comp":"17896441","content":"03f6c9e9"},"/zh/security/self-assessment-b85":{"__comp":"17896441","content":"9df0942e"},"/zh/storage-992":{"__comp":"17896441","content":"3551cc1a"},"/zh/upgrades-bca":{"__comp":"17896441","content":"357d395b"},"/zh/upgrades/automated-aa6":{"__comp":"17896441","content":"46fd080e"},"/zh/upgrades/killall-3b5":{"__comp":"17896441","content":"93e8d6ea"},"/zh/upgrades/manual-8bc":{"__comp":"17896441","content":"a3ec58b8"}}')}},e=>{e.O(0,[532],(()=>{return t=9383,e(e.s=t);var t}));e.O()}]);
\ No newline at end of file
diff --git a/zh/assets/js/runtime~main.354551a6.js b/zh/assets/js/runtime~main.354551a6.js
deleted file mode 100644
index 517e0fab4..000000000
--- a/zh/assets/js/runtime~main.354551a6.js
+++ /dev/null
@@ -1 +0,0 @@
-(()=>{"use strict";var e,a,d,t,f,r={},c={};function o(e){var a=c[e];if(void 0!==a)return a.exports;var d=c[e]={id:e,loaded:!1,exports:{}};return r[e].call(d.exports,d,d.exports,o),d.loaded=!0,d.exports}o.m=r,o.c=c,e=[],o.O=(a,d,t,f)=>{if(!d){var r=1/0;for(i=0;i<e.length;i++){d=e[i][0],t=e[i][1],f=e[i][2];for(var c=!0,n=0;n<d.length;n++)(!1&f||r>=f)&&Object.keys(o.O).every((e=>o.O[e](d[n])))?d.splice(n--,1):(c=!1,f<r&&(r=f));if(c){e.splice(i--,1);var b=t();void 0!==b&&(a=b)}}return a}f=f||0;for(var i=e.length;i>0&&e[i-1][2]>f;i--)e[i]=e[i-1];e[i]=[d,t,f]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a:a}),a},d=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,t){if(1&t&&(e=this(e)),8&t)return e;if("object"==typeof e&&e){if(4&t&&e.__esModule)return e;if(16&t&&"function"==typeof e.then)return e}var f=Object.create(null);o.r(f);var r={};a=a||[null,d({}),d([]),d(d)];for(var c=2&t&&e;"object"==typeof c&&!~a.indexOf(c);c=d(c))Object.getOwnPropertyNames(c).forEach((a=>r[a]=()=>e[a]));return r.default=()=>e,o.d(f,r),f},o.d=(e,a)=>{for(var d in a)o.o(a,d)&&!o.o(e,d)&&Object.defineProperty(e,d,{enumerable:!0,get:a[d]})},o.f={},o.e=e=>Promise.all(Object.keys(o.f).reduce(((a,d)=>(o.f[d](e,a),a)),[])),o.u=e=>"assets/js/"+({53:"935f2afb",622:"93e8d6ea",681:"5977b32d",843:"03f6c9e9",992:"a3ec58b8",2170:"0a743094",2282:"2d65ef92",2290:"330f05fd",2967:"492f60c5",3100:"6f7960fe",3155:"11f121d5",3219:"7d5aab5d",3374:"de044cc7",3412:"37dfe6f0",3531:"9df0942e",3572:"0a0e4894",3642:"e65553dc",4124:"62005660",4126:"e1787277",4143:"811e87f8",4222:"9c71bff4",4424:"6d8200b0",4951:"34c95e47",5165:"772a162b",5251:"357d395b",5292:"2af2f480",5394:"1f6c7e37",5493:"53163943",5812:"711cf357",6385:"59b068d1",6499:"97691ddb",6535:"6b4d906e",6842:"b2fd5509",7393:"f367c5c1",7918:"17896441",7920:"1a4e3797",8178:"df5dd15e",8576:"50715220",8855:"dcd62276",8885:"46fd080e",9185:"13055719",9334:"247783bb",9390:"beafadc6",9513:"15ed8710",9514:"1be78505",9534:"3551cc1a",9596:"4a93747f",9768:"1ac3de50",9971:"ac5690a0"}[e]||e)+"."+{53:"fffb91bc",622:"50269464",681:"4b413646",843:"ee268660",992:"1e1f9bd0",2170:"11832e2e",2282:"ba420146",2290:"b120c92f",2967:"f0dfd156",3100:"576f8dcd",3155:"0d39bb93",3219:"b28fe083",3374:"4e4a427b",3412:"7d77db40",3531:"b8fd0822",3572:"0e5966dc",3642:"7e1e3b50",4124:"3790999c",4126:"95b5ddc3",4143:"d34d0249",4222:"e3a22950",4424:"1901ff4d",4835:"0e2e1b5f",4951:"809a6150",4972:"f742b7fa",5165:"1d5b99e1",5251:"eb6852e5",5292:"4a048f47",5394:"860a7f31",5493:"c2232d18",5812:"dbfa5f10",6316:"9d17e9b9",6385:"acb0a1a4",6499:"68feaacc",6535:"ed6869b3",6780:"6d95d5ed",6842:"69b69acd",6945:"a46579e2",7393:"f588bb9a",7724:"3223bc35",7918:"ec08c698",7920:"ac674e56",8178:"0bda0a7d",8576:"0f726c7e",8855:"71994018",8885:"3f897055",8894:"b6a0e6e6",9185:"161d12d4",9334:"300ff908",9390:"06131245",9487:"3c7da419",9513:"fbaee31c",9514:"1ff28fb4",9534:"24849c10",9596:"17dfd6ee",9768:"39b2e9d3",9971:"d0c0e6b8"}[e]+".js",o.miniCssF=e=>{},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),t={},f="k-3-s-docs:",o.l=(e,a,d,r)=>{if(t[e])t[e].push(a);else{var c,n;if(void 0!==d)for(var b=document.getElementsByTagName("script"),i=0;i<b.length;i++){var u=b[i];if(u.getAttribute("src")==e||u.getAttribute("data-webpack")==f+d){c=u;break}}c||(n=!0,(c=document.createElement("script")).charset="utf-8",c.timeout=120,o.nc&&c.setAttribute("nonce",o.nc),c.setAttribute("data-webpack",f+d),c.src=e),t[e]=[a];var l=(a,d)=>{c.onerror=c.onload=null,clearTimeout(s);var f=t[e];if(delete t[e],c.parentNode&&c.parentNode.removeChild(c),f&&f.forEach((e=>e(d))),a)return a(d)},s=setTimeout(l.bind(null,void 0,{type:"timeout",target:c}),12e4);c.onerror=l.bind(null,c.onerror),c.onload=l.bind(null,c.onload),n&&document.head.appendChild(c)}},o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.p="/zh/",o.gca=function(e){return e={13055719:"9185",17896441:"7918",50715220:"8576",53163943:"5493",62005660:"4124","935f2afb":"53","93e8d6ea":"622","5977b32d":"681","03f6c9e9":"843",a3ec58b8:"992","0a743094":"2170","2d65ef92":"2282","330f05fd":"2290","492f60c5":"2967","6f7960fe":"3100","11f121d5":"3155","7d5aab5d":"3219",de044cc7:"3374","37dfe6f0":"3412","9df0942e":"3531","0a0e4894":"3572",e65553dc:"3642",e1787277:"4126","811e87f8":"4143","9c71bff4":"4222","6d8200b0":"4424","34c95e47":"4951","772a162b":"5165","357d395b":"5251","2af2f480":"5292","1f6c7e37":"5394","711cf357":"5812","59b068d1":"6385","97691ddb":"6499","6b4d906e":"6535",b2fd5509:"6842",f367c5c1:"7393","1a4e3797":"7920",df5dd15e:"8178",dcd62276:"8855","46fd080e":"8885","247783bb":"9334",beafadc6:"9390","15ed8710":"9513","1be78505":"9514","3551cc1a":"9534","4a93747f":"9596","1ac3de50":"9768",ac5690a0:"9971"}[e]||e,o.p+o.u(e)},(()=>{var e={1303:0,532:0};o.f.j=(a,d)=>{var t=o.o(e,a)?e[a]:void 0;if(0!==t)if(t)d.push(t[2]);else if(/^(1303|532)$/.test(a))e[a]=0;else{var f=new Promise(((d,f)=>t=e[a]=[d,f]));d.push(t[2]=f);var r=o.p+o.u(a),c=new Error;o.l(r,(d=>{if(o.o(e,a)&&(0!==(t=e[a])&&(e[a]=void 0),t)){var f=d&&("load"===d.type?"missing":d.type),r=d&&d.target&&d.target.src;c.message="Loading chunk "+a+" failed.\n("+f+": "+r+")",c.name="ChunkLoadError",c.type=f,c.request=r,t[1](c)}}),"chunk-"+a,a)}},o.O.j=a=>0===e[a];var a=(a,d)=>{var t,f,r=d[0],c=d[1],n=d[2],b=0;if(r.some((a=>0!==e[a]))){for(t in c)o.o(c,t)&&(o.m[t]=c[t]);if(n)var i=n(o)}for(a&&a(d);b<r.length;b++)f=r[b],o.o(e,f)&&e[f]&&e[f][0](),e[f]=0;return o.O(i)},d=self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[];d.forEach(a.bind(null,0)),d.push=a.bind(null,d.push.bind(d))})()})();
\ No newline at end of file
diff --git a/zh/assets/js/runtime~main.98237139.js b/zh/assets/js/runtime~main.98237139.js
new file mode 100644
index 000000000..38652b6cc
--- /dev/null
+++ b/zh/assets/js/runtime~main.98237139.js
@@ -0,0 +1 @@
+(()=>{"use strict";var e,a,f,t,d,r={},c={};function o(e){var a=c[e];if(void 0!==a)return a.exports;var f=c[e]={id:e,loaded:!1,exports:{}};return r[e].call(f.exports,f,f.exports,o),f.loaded=!0,f.exports}o.m=r,o.c=c,e=[],o.O=(a,f,t,d)=>{if(!f){var r=1/0;for(i=0;i<e.length;i++){f=e[i][0],t=e[i][1],d=e[i][2];for(var c=!0,n=0;n<f.length;n++)(!1&d||r>=d)&&Object.keys(o.O).every((e=>o.O[e](f[n])))?f.splice(n--,1):(c=!1,d<r&&(r=d));if(c){e.splice(i--,1);var b=t();void 0!==b&&(a=b)}}return a}d=d||0;for(var i=e.length;i>0&&e[i-1][2]>d;i--)e[i]=e[i-1];e[i]=[f,t,d]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a:a}),a},f=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,t){if(1&t&&(e=this(e)),8&t)return e;if("object"==typeof e&&e){if(4&t&&e.__esModule)return e;if(16&t&&"function"==typeof e.then)return e}var d=Object.create(null);o.r(d);var r={};a=a||[null,f({}),f([]),f(f)];for(var c=2&t&&e;"object"==typeof c&&!~a.indexOf(c);c=f(c))Object.getOwnPropertyNames(c).forEach((a=>r[a]=()=>e[a]));return r.default=()=>e,o.d(d,r),d},o.d=(e,a)=>{for(var f in a)o.o(a,f)&&!o.o(e,f)&&Object.defineProperty(e,f,{enumerable:!0,get:a[f]})},o.f={},o.e=e=>Promise.all(Object.keys(o.f).reduce(((a,f)=>(o.f[f](e,a),a)),[])),o.u=e=>"assets/js/"+({53:"935f2afb",622:"93e8d6ea",681:"5977b32d",843:"03f6c9e9",992:"a3ec58b8",2170:"0a743094",2282:"2d65ef92",2290:"330f05fd",2967:"492f60c5",3100:"6f7960fe",3155:"11f121d5",3219:"7d5aab5d",3374:"de044cc7",3412:"37dfe6f0",3531:"9df0942e",3572:"0a0e4894",3642:"e65553dc",4124:"62005660",4126:"e1787277",4143:"811e87f8",4222:"9c71bff4",4424:"6d8200b0",4951:"34c95e47",5156:"4129286c",5165:"772a162b",5251:"357d395b",5292:"2af2f480",5394:"1f6c7e37",5493:"53163943",5812:"711cf357",6499:"97691ddb",6535:"6b4d906e",6842:"b2fd5509",7393:"f367c5c1",7918:"17896441",7920:"1a4e3797",8178:"df5dd15e",8576:"50715220",8855:"dcd62276",8885:"46fd080e",9185:"13055719",9334:"247783bb",9390:"beafadc6",9513:"15ed8710",9514:"1be78505",9534:"3551cc1a",9596:"4a93747f",9768:"1ac3de50",9971:"ac5690a0"}[e]||e)+"."+{53:"fffb91bc",622:"e1761271",681:"c472809c",843:"8afa5250",992:"335a21cc",2170:"ab104edb",2282:"d41ae572",2290:"3465fb42",2967:"4b215836",3100:"cbd199ce",3155:"be91d4d2",3219:"71b407b7",3374:"46859cc3",3412:"07695ebc",3531:"9281cd3f",3572:"d5e9d95c",3642:"4c1627c8",4124:"69eb2a79",4126:"a5473e1b",4143:"3ca75874",4222:"42abfe4f",4424:"e1cf527a",4835:"071674c5",4951:"8f7e4168",4972:"8e6a9569",5156:"c7656db7",5165:"bf0dab18",5251:"d7434d40",5292:"7d5e062c",5394:"f84efbf9",5493:"f91492b1",5525:"ab860f59",5812:"d9b48a55",6316:"9d17e9b9",6499:"1e809fce",6535:"ccdea4df",6842:"964c0b6a",7393:"672c9630",7724:"3223bc35",7918:"ec08c698",7920:"8b5db6d2",8178:"052c2090",8443:"6e4145c7",8576:"56fc3345",8855:"703117e1",8885:"5d4341a8",9185:"12041d80",9334:"300ff908",9390:"df522882",9487:"3c7da419",9513:"e4499216",9514:"3b555d49",9534:"12bdce1a",9596:"ee1f23db",9768:"694f6c59",9971:"8ab45095"}[e]+".js",o.miniCssF=e=>{},o.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),o.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),t={},d="k-3-s-docs:",o.l=(e,a,f,r)=>{if(t[e])t[e].push(a);else{var c,n;if(void 0!==f)for(var b=document.getElementsByTagName("script"),i=0;i<b.length;i++){var u=b[i];if(u.getAttribute("src")==e||u.getAttribute("data-webpack")==d+f){c=u;break}}c||(n=!0,(c=document.createElement("script")).charset="utf-8",c.timeout=120,o.nc&&c.setAttribute("nonce",o.nc),c.setAttribute("data-webpack",d+f),c.src=e),t[e]=[a];var l=(a,f)=>{c.onerror=c.onload=null,clearTimeout(s);var d=t[e];if(delete t[e],c.parentNode&&c.parentNode.removeChild(c),d&&d.forEach((e=>e(f))),a)return a(f)},s=setTimeout(l.bind(null,void 0,{type:"timeout",target:c}),12e4);c.onerror=l.bind(null,c.onerror),c.onload=l.bind(null,c.onload),n&&document.head.appendChild(c)}},o.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.p="/zh/",o.gca=function(e){return e={13055719:"9185",17896441:"7918",50715220:"8576",53163943:"5493",62005660:"4124","935f2afb":"53","93e8d6ea":"622","5977b32d":"681","03f6c9e9":"843",a3ec58b8:"992","0a743094":"2170","2d65ef92":"2282","330f05fd":"2290","492f60c5":"2967","6f7960fe":"3100","11f121d5":"3155","7d5aab5d":"3219",de044cc7:"3374","37dfe6f0":"3412","9df0942e":"3531","0a0e4894":"3572",e65553dc:"3642",e1787277:"4126","811e87f8":"4143","9c71bff4":"4222","6d8200b0":"4424","34c95e47":"4951","4129286c":"5156","772a162b":"5165","357d395b":"5251","2af2f480":"5292","1f6c7e37":"5394","711cf357":"5812","97691ddb":"6499","6b4d906e":"6535",b2fd5509:"6842",f367c5c1:"7393","1a4e3797":"7920",df5dd15e:"8178",dcd62276:"8855","46fd080e":"8885","247783bb":"9334",beafadc6:"9390","15ed8710":"9513","1be78505":"9514","3551cc1a":"9534","4a93747f":"9596","1ac3de50":"9768",ac5690a0:"9971"}[e]||e,o.p+o.u(e)},(()=>{var e={1303:0,532:0};o.f.j=(a,f)=>{var t=o.o(e,a)?e[a]:void 0;if(0!==t)if(t)f.push(t[2]);else if(/^(1303|532)$/.test(a))e[a]=0;else{var d=new Promise(((f,d)=>t=e[a]=[f,d]));f.push(t[2]=d);var r=o.p+o.u(a),c=new Error;o.l(r,(f=>{if(o.o(e,a)&&(0!==(t=e[a])&&(e[a]=void 0),t)){var d=f&&("load"===f.type?"missing":f.type),r=f&&f.target&&f.target.src;c.message="Loading chunk "+a+" failed.\n("+d+": "+r+")",c.name="ChunkLoadError",c.type=d,c.request=r,t[1](c)}}),"chunk-"+a,a)}},o.O.j=a=>0===e[a];var a=(a,f)=>{var t,d,r=f[0],c=f[1],n=f[2],b=0;if(r.some((a=>0!==e[a]))){for(t in c)o.o(c,t)&&(o.m[t]=c[t]);if(n)var i=n(o)}for(a&&a(f);b<r.length;b++)d=r[b],o.o(e,d)&&e[d]&&e[d][0](),e[d]=0;return o.O(i)},f=self.webpackChunkk_3_s_docs=self.webpackChunkk_3_s_docs||[];f.forEach(a.bind(null,0)),f.push=a.bind(null,f.push.bind(f))})()})();
\ No newline at end of file
diff --git a/zh/cli.html b/zh/cli.html
index 067f48224..b5cef3b3b 100644
--- a/zh/cli.html
+++ b/zh/cli.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CLI 工具 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CLI 工具 | K3s"><meta data-rh="true" name="description" content="K3s 二进制文件包含了很多工具，可帮助你管理集群。"><meta data-rh="true" property="og:description" content="K3s 二进制文件包含了很多工具，可帮助你管理集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">CLI 工具 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CLI 工具 | K3s"><meta data-rh="true" name="description" content="K3s 二进制文件包含了很多工具，可帮助你管理集群。"><meta data-rh="true" property="og:description" content="K3s 二进制文件包含了很多工具，可帮助你管理集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CLI 工具</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>CLI 工具</h1></header><p>K3s 二进制文件包含了很多工具，可帮助你管理集群。</p><table><thead><tr><th>命令</th><th>描述</th></tr></thead><tbody><tr><td><code>k3s server</code></td><td>运行 K3s Server 节点，这将启动 Kubernetes <code>apiserver</code>、<code>scheduler</code>、<code>controller-manager</code> 和 <code>cloud-controller-manager</code> 组件，以及数据存储和 Agent 组件。有关详细信息，请参阅 <a href="/zh/cli/server"><code>k3s server</code> 命令文档</a>。</td></tr><tr><td><code>k3s agent</code></td><td>运行 K3s Agent 节点，这将启动 <code>containerd</code>、<code>flannel</code>、<code>kube-router</code> 网络策略控制器和 Kubernetes <code>kubelet</code> 和 <code>kube-proxy</code> 组件。有关详细信息，请参阅 <a href="/zh/cli/agent"><code>k3s agent</code> 命令文档</a>。</td></tr><tr><td><code>k3s kubectl</code></td><td>运行嵌入式 <a href="https://kubernetes.io/docs/reference/kubectl" target="_blank" rel="noopener noreferrer"><code>kubectl</code> 命令</a>。这是用于与 Kubernetes apiserver 交互的 CLI。如果未设置 <code>KUBECONFIG</code> 环境变量，将自动尝试使用 <code>/etc/rancher/k3s/k3s.yaml</code> 中的 kubeconfig。</td></tr><tr><td><code>k3s crictl</code></td><td>运行嵌入式 <a href="https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md" target="_blank" rel="noopener noreferrer"><code>crictl</code> 命令</a>。这是一个 CLI，用于与 Kubernetes 的容器运行时接口 (CRI) 交互。对调试很有用。</td></tr><tr><td><code>k3s ctr</code></td><td>运行嵌入式 <a href="https://github.com/projectatomic/containerd/blob/master/docs/cli.md" target="_blank" rel="noopener noreferrer"><code>ctr</code> 命令</a>。这是一个用于 containerd 的 CLI，containerd 是 K3s 使用的容器 daemon。对调试很有用。</td></tr><tr><td><code>k3s token</code></td><td>管理引导 Token。有关详细信息，请参阅 <a href="/zh/cli/token"><code>k3s token</code> 命令文档</a>。</td></tr><tr><td><code>k3s etcd-snapshot</code></td><td>对 K3s 集群数据进行按需备份并上传到 S3。有关详细信息，请参阅 <a href="/zh/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> 命令文档</a>。</td></tr><tr><td><code>k3s secrets-encrypt</code></td><td>在将 Secret 存储到集群中时加密 Secret。有关详细信息，请参阅 <a href="/zh/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> 命令文档</a>。</td></tr><tr><td><code>k3s certificate</code></td><td>管理 K3s 证书。有关详细信息，请参阅 <a href="/zh/cli/certificate"><code>k3s certificate</code> 命令文档</a>。</td></tr><tr><td><code>k3s completion</code></td><td>为 K3s 生成 shell 补全脚本</td></tr><tr><td><code>k3s help</code></td><td>显示命令列表或某个命令的帮助</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/faq"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">常见问题</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/server"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">server</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CLI 工具</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>CLI 工具</h1></header><p>K3s 二进制文件包含了很多工具，可帮助你管理集群。</p><table><thead><tr><th>命令</th><th>描述</th></tr></thead><tbody><tr><td><code>k3s server</code></td><td>运行 K3s Server 节点，这将启动 Kubernetes <code>apiserver</code>、<code>scheduler</code>、<code>controller-manager</code> 和 <code>cloud-controller-manager</code> 组件，以及数据存储和 Agent 组件。有关详细信息，请参阅 <a href="/zh/cli/server"><code>k3s server</code> 命令文档</a>。</td></tr><tr><td><code>k3s agent</code></td><td>运行 K3s Agent 节点，这将启动 <code>containerd</code>、<code>flannel</code>、<code>kube-router</code> 网络策略控制器和 Kubernetes <code>kubelet</code> 和 <code>kube-proxy</code> 组件。有关详细信息，请参阅 <a href="/zh/cli/agent"><code>k3s agent</code> 命令文档</a>。</td></tr><tr><td><code>k3s kubectl</code></td><td>运行嵌入式 <a href="https://kubernetes.io/docs/reference/kubectl" target="_blank" rel="noopener noreferrer"><code>kubectl</code> 命令</a>。这是用于与 Kubernetes apiserver 交互的 CLI。如果未设置 <code>KUBECONFIG</code> 环境变量，将自动尝试使用 <code>/etc/rancher/k3s/k3s.yaml</code> 中的 kubeconfig。</td></tr><tr><td><code>k3s crictl</code></td><td>运行嵌入式 <a href="https://github.com/kubernetes-sigs/cri-tools/blob/master/docs/crictl.md" target="_blank" rel="noopener noreferrer"><code>crictl</code> 命令</a>。这是一个 CLI，用于与 Kubernetes 的容器运行时接口 (CRI) 交互。对调试很有用。</td></tr><tr><td><code>k3s ctr</code></td><td>运行嵌入式 <a href="https://github.com/projectatomic/containerd/blob/master/docs/cli.md" target="_blank" rel="noopener noreferrer"><code>ctr</code> 命令</a>。这是一个用于 containerd 的 CLI，containerd 是 K3s 使用的容器 daemon。对调试很有用。</td></tr><tr><td><code>k3s token</code></td><td>管理引导 Token。有关详细信息，请参阅 <a href="/zh/cli/token"><code>k3s token</code> 命令文档</a>。</td></tr><tr><td><code>k3s etcd-snapshot</code></td><td>对 K3s 集群数据进行按需备份并上传到 S3。有关详细信息，请参阅 <a href="/zh/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> 命令文档</a>。</td></tr><tr><td><code>k3s secrets-encrypt</code></td><td>在将 Secret 存储到集群中时加密 Secret。有关详细信息，请参阅 <a href="/zh/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> 命令文档</a>。</td></tr><tr><td><code>k3s certificate</code></td><td>管理 K3s 证书。有关详细信息，请参阅 <a href="/zh/cli/certificate"><code>k3s certificate</code> 命令文档</a>。</td></tr><tr><td><code>k3s completion</code></td><td>为 K3s 生成 shell 补全脚本</td></tr><tr><td><code>k3s help</code></td><td>显示命令列表或某个命令的帮助</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/cli.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/faq"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">常见问题</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/server"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">server</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/cli/agent.html b/zh/cli/agent.html
index 962fdbb07..c12fb6b06 100644
--- a/zh/cli/agent.html
+++ b/zh/cli/agent.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">agent | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/agent"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="agent | K3s"><meta data-rh="true" name="description" content="在本节中，你将学习如何配置 K3s Agent。"><meta data-rh="true" property="og:description" content="在本节中，你将学习如何配置 K3s Agent。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/agent"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/agent" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/agent" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">agent | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/agent"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="agent | K3s"><meta data-rh="true" name="description" content="在本节中，你将学习如何配置 K3s Agent。"><meta data-rh="true" property="og:description" content="在本节中，你将学习如何配置 K3s Agent。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/agent"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/agent" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/agent" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/agent" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">agent</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s agent</h1><p>在本节中，你将学习如何配置 K3s Agent。</p><p>请注意，Server 也运行 Agent，因此本文列出的所有标志也可用于 Server。</p><p>在本文中，选项作为 CLI 标志传递，但是也可以作为配置文件选项传递。有关使用 YAML 配置文件的更多信息，请参阅<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>-v</code> value</td><td>0</td><td>表示日志级别详细程度的数字</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>FILE_PATTERN=LOG_LEVEL 格式，用逗号分隔的列表，用于文件过滤日志</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>记录到文件</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>记录到标准错误以及文件（如果设置）</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="集群选项">集群选项<a href="#集群选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--token value, -t</code> value</td><td><code>K3S_TOKEN</code></td><td>用于身份验证的令牌</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>用于身份验证的令牌文件</td></tr><tr><td><code>--server value, -s</code> value</td><td><code>K3S_URL</code></td><td>要连接的 server</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据">数据<a href="#数据" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td>&quot;/var/lib/rancher/k3s&quot;</td><td>保存状态的文件夹</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="节点">节点<a href="#节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--node-name</code> value</td><td><code>K3S_NODE_NAME</code></td><td>节点名称</td></tr><tr><td><code>--with-node-id</code></td><td>N/A</td><td>将 ID 尾附到节点名称</td></tr><tr><td><code>--node-label</code> value</td><td>N/A</td><td>使用一组标签注册和启动 kubelet</td></tr><tr><td><code>--node-taint</code> value</td><td>N/A</td><td>使用一组污点注册 kubelet</td></tr><tr><td><code>--protect-kernel-defaults</code></td><td>N/A</td><td>内核调优行为。如果设置了，当内核可调项与 kubelet 默认值不同时会出错。</td></tr><tr><td><code>--selinux</code></td><td><code>K3S_SELINUX</code></td><td>在 containerd 中启用 SELinux</td></tr><tr><td><code>--lb-server-port</code> value</td><td><code>K3S_LB_SERVER_PORT</code></td><td>Supervisor 客户端负载均衡器的本地端口。如果 supervisor 和 apiserver 没有位于同一位置，则比该端口小 1 的端口也将用于 apiserver 客户端负载均衡器（默认值：6444）</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="运行时">运行时<a href="#运行时" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--container-runtime-endpoint</code> value</td><td>N/A</td><td>禁用嵌入式 containerd 并在给定路径使用 CRI 套接字。当与 --docker 一起使用时，这会设置 cri-docker 套接字路径</td></tr><tr><td><code>--pause-image</code> value</td><td>&quot;docker.io/rancher/pause:3.1&quot;</td><td>为 containerd 或 Docker 沙箱定制的 pause 镜像</td></tr><tr><td><code>--private-registry</code> value</td><td>&quot;/etc/rancher/k3s/registries.yaml&quot;</td><td>私有镜像仓库配置文件</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="网络">网络<a href="#网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--node-ip value, -i</code> value</td><td>N/A</td><td>节点的 IP 地址</td></tr><tr><td><code>--node-external-ip</code> value</td><td>N/A</td><td>节点的外部 IP 地址</td></tr><tr><td><code>--resolv-conf</code> value</td><td><code>K3S_RESOLV_CONF</code></td><td>Kubelet resolv.conf 文件</td></tr><tr><td><code>--flannel-iface</code> value</td><td>N/A</td><td>覆盖默认的 Flannel interface</td></tr><tr><td><code>--flannel-conf</code> value</td><td>N/A</td><td>覆盖默认的 Flannel 配置文件</td></tr><tr><td><code>--flannel-cni-conf</code> value</td><td>N/A</td><td>覆盖默认的 Flannel CNI 配置文件</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="自定义标志">自定义标志<a href="#自定义标志" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--kubelet-arg</code> value</td><td>kubelet 进程的自定义标志</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>kube-proxy 进程的自定义标志</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="实验功能">实验功能<a href="#实验功能" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>无根运行</td></tr><tr><td><code>--docker</code></td><td>使用 cri-dockerd 而不是 containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>偏向打包的用户空间二进制文件，而不是主机二进制文件</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="已弃用">已弃用<a href="#已弃用" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>使用 <code>--flannel-backend=none</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>使用 <code>--token</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent-的节点标签和污点">Agent 的节点标签和污点<a href="#agent-的节点标签和污点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s Agent 可以通过 <code>--node-label</code> 和 <code>--node-taint</code> 选项来配置，它们会为 kubelet 添加标签和污点。这两个选项只能在注册时添加标签和/或污点，因此它们只能被添加一次，之后不能再通过运行 K3s 命令来改变。</p><p>下面是显示如何添加标签和污点的示例：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">foo</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">bar </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">hello</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">world </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-taint </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">key1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">value1:NoExecute</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果你想在节点注册后更改节点标签和污点，你需要使用 <code>kubectl</code>。关于如何添加<a href="https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/" target="_blank" rel="noopener noreferrer">污点</a>和<a href="https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node" target="_blank" rel="noopener noreferrer">节点标签</a>的详细信息，请参阅官方 Kubernetes 文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent-cli-帮助">K3s Agent CLI 帮助<a href="#k3s-agent-cli-帮助" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><blockquote><p>如果某个选项出现在括号中（例如 <code>[$K3S_URL]</code>），该选项可以作为该名称的环境变量传入。</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent - Run </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> agent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/k3s&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer.</span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/server"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">server</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/certificate"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">certificate</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#集群选项" class="table-of-contents__link toc-highlight">集群选项</a></li><li><a href="#数据" class="table-of-contents__link toc-highlight">数据</a></li><li><a href="#节点" class="table-of-contents__link toc-highlight">节点</a></li><li><a href="#运行时" class="table-of-contents__link toc-highlight">运行时</a></li><li><a href="#网络" class="table-of-contents__link toc-highlight">网络</a></li><li><a href="#自定义标志" class="table-of-contents__link toc-highlight">自定义标志</a></li><li><a href="#实验功能" class="table-of-contents__link toc-highlight">实验功能</a></li><li><a href="#已弃用" class="table-of-contents__link toc-highlight">已弃用</a></li><li><a href="#agent-的节点标签和污点" class="table-of-contents__link toc-highlight">Agent 的节点标签和污点</a></li><li><a href="#k3s-agent-cli-帮助" class="table-of-contents__link toc-highlight">K3s Agent CLI 帮助</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/agent" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">agent</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s agent</h1><p>在本节中，你将学习如何配置 K3s Agent。</p><p>请注意，Server 也运行 Agent，因此本文列出的所有标志也可用于 Server。</p><p>在本文中，选项作为 CLI 标志传递，但是也可以作为配置文件选项传递。有关使用 YAML 配置文件的更多信息，请参阅<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>-v</code> value</td><td>0</td><td>表示日志级别详细程度的数字</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>FILE_PATTERN=LOG_LEVEL 格式，用逗号分隔的列表，用于文件过滤日志</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>记录到文件</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>记录到标准错误以及文件（如果设置）</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="集群选项">集群选项<a href="#集群选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--token value, -t</code> value</td><td><code>K3S_TOKEN</code></td><td>用于身份验证的令牌</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>用于身份验证的令牌文件</td></tr><tr><td><code>--server value, -s</code> value</td><td><code>K3S_URL</code></td><td>要连接的 server</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据">数据<a href="#数据" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td>&quot;/var/lib/rancher/k3s&quot;</td><td>保存状态的文件夹</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="节点">节点<a href="#节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--node-name</code> value</td><td><code>K3S_NODE_NAME</code></td><td>节点名称</td></tr><tr><td><code>--with-node-id</code></td><td>N/A</td><td>将 ID 尾附到节点名称</td></tr><tr><td><code>--node-label</code> value</td><td>N/A</td><td>使用一组标签注册和启动 kubelet</td></tr><tr><td><code>--node-taint</code> value</td><td>N/A</td><td>使用一组污点注册 kubelet</td></tr><tr><td><code>--protect-kernel-defaults</code></td><td>N/A</td><td>内核调优行为。如果设置了，当内核可调项与 kubelet 默认值不同时会出错。</td></tr><tr><td><code>--selinux</code></td><td><code>K3S_SELINUX</code></td><td>在 containerd 中启用 SELinux</td></tr><tr><td><code>--lb-server-port</code> value</td><td><code>K3S_LB_SERVER_PORT</code></td><td>Supervisor 客户端负载均衡器的本地端口。如果 supervisor 和 apiserver 没有位于同一位置，则比该端口小 1 的端口也将用于 apiserver 客户端负载均衡器（默认值：6444）</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="运行时">运行时<a href="#运行时" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--container-runtime-endpoint</code> value</td><td>N/A</td><td>禁用嵌入式 containerd 并在给定路径使用 CRI 套接字。当与 --docker 一起使用时，这会设置 cri-docker 套接字路径</td></tr><tr><td><code>--pause-image</code> value</td><td>&quot;docker.io/rancher/pause:3.1&quot;</td><td>为 containerd 或 Docker 沙箱定制的 pause 镜像</td></tr><tr><td><code>--private-registry</code> value</td><td>&quot;/etc/rancher/k3s/registries.yaml&quot;</td><td>私有镜像仓库配置文件</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="网络">网络<a href="#网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--node-ip value, -i</code> value</td><td>N/A</td><td>节点的 IP 地址</td></tr><tr><td><code>--node-external-ip</code> value</td><td>N/A</td><td>节点的外部 IP 地址</td></tr><tr><td><code>--resolv-conf</code> value</td><td><code>K3S_RESOLV_CONF</code></td><td>Kubelet resolv.conf 文件</td></tr><tr><td><code>--flannel-iface</code> value</td><td>N/A</td><td>覆盖默认的 Flannel interface</td></tr><tr><td><code>--flannel-conf</code> value</td><td>N/A</td><td>覆盖默认的 Flannel 配置文件</td></tr><tr><td><code>--flannel-cni-conf</code> value</td><td>N/A</td><td>覆盖默认的 Flannel CNI 配置文件</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="自定义标志">自定义标志<a href="#自定义标志" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--kubelet-arg</code> value</td><td>kubelet 进程的自定义标志</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>kube-proxy 进程的自定义标志</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="实验功能">实验功能<a href="#实验功能" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>无根运行</td></tr><tr><td><code>--docker</code></td><td>使用 cri-dockerd 而不是 containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>偏向打包的用户空间二进制文件，而不是主机二进制文件</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="已弃用">已弃用<a href="#已弃用" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>使用 <code>--flannel-backend=none</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>使用 <code>--token</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent-的节点标签和污点">Agent 的节点标签和污点<a href="#agent-的节点标签和污点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s Agent 可以通过 <code>--node-label</code> 和 <code>--node-taint</code> 选项来配置，它们会为 kubelet 添加标签和污点。这两个选项只能在注册时添加标签和/或污点，因此它们只能被添加一次，之后不能再通过运行 K3s 命令来改变。</p><p>下面是显示如何添加标签和污点的示例：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">foo</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">bar </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-label </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">hello</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">world </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">     --node-taint </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">key1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">value1:NoExecute</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果你想在节点注册后更改节点标签和污点，你需要使用 <code>kubectl</code>。关于如何添加<a href="https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/" target="_blank" rel="noopener noreferrer">污点</a>和<a href="https://kubernetes.io/docs/tasks/configure-pod-container/assign-pods-nodes/#add-a-label-to-a-node" target="_blank" rel="noopener noreferrer">节点标签</a>的详细信息，请参阅官方 Kubernetes 文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent-cli-帮助">K3s Agent CLI 帮助<a href="#k3s-agent-cli-帮助" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><blockquote><p>如果某个选项出现在括号中（例如 <code>[$K3S_URL]</code>），该选项可以作为该名称的环境变量传入。</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent - Run </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> agent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s agent </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Token </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> authentication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/k3s&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer.</span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/agent.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/server"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">server</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/certificate"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">certificate</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#集群选项" class="table-of-contents__link toc-highlight">集群选项</a></li><li><a href="#数据" class="table-of-contents__link toc-highlight">数据</a></li><li><a href="#节点" class="table-of-contents__link toc-highlight">节点</a></li><li><a href="#运行时" class="table-of-contents__link toc-highlight">运行时</a></li><li><a href="#网络" class="table-of-contents__link toc-highlight">网络</a></li><li><a href="#自定义标志" class="table-of-contents__link toc-highlight">自定义标志</a></li><li><a href="#实验功能" class="table-of-contents__link toc-highlight">实验功能</a></li><li><a href="#已弃用" class="table-of-contents__link toc-highlight">已弃用</a></li><li><a href="#agent-的节点标签和污点" class="table-of-contents__link toc-highlight">Agent 的节点标签和污点</a></li><li><a href="#k3s-agent-cli-帮助" class="table-of-contents__link toc-highlight">K3s Agent CLI 帮助</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/cli/certificate.html b/zh/cli/certificate.html
index 3959d742f..9bb6bf56d 100644
--- a/zh/cli/certificate.html
+++ b/zh/cli/certificate.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">certificate | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/certificate"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="certificate | K3s"><meta data-rh="true" name="description" content="客户端和服务器证书"><meta data-rh="true" property="og:description" content="客户端和服务器证书"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/certificate"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/certificate" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/certificate" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">certificate | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/certificate"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="certificate | K3s"><meta data-rh="true" name="description" content="客户端和服务器证书"><meta data-rh="true" property="og:description" content="客户端和服务器证书"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/certificate"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/certificate" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/certificate" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/certificate" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">certificate</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s certificate</h1><h2 class="anchor anchorWithStickyNavbar_LWe7" id="客户端和服务器证书">客户端和服务器证书<a href="#客户端和服务器证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 客户端和服务器证书自颁发日起 365 天内有效。每次启动 K3s 时，已过期或 90 天内过期的证书都会自动更新。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="轮换客户端和服务器证书">轮换客户端和服务器证书<a href="#轮换客户端和服务器证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要手动轮换客户端和服务器证书，请使用 <code>k3s certificate rotate</code> 子命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 停止 K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 轮换证书</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 启动 K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>你可以通过指定证书名称来轮换单个或多个证书：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate --service </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">,</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>可以轮换的证书：<code>admin</code>、<code>api-server</code>、<code>controller-manager</code>、<code>scheduler</code>、<code>k3s-controller</code>, <code>k3s-server</code>, <code>cloud-controller</code>, <code>etcd</code>, <code>auth-proxy</code>, <code>kubelet</code>，<code>kube-proxy</code>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="ca-证书">CA 证书<a href="#ca-证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Kubernetes 需要大量 CA 证书才能正常运行。有关 Kubernetes 如何使用 CA 证书，请参阅 Kubernetes <a href="https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates" target="_blank" rel="noopener noreferrer">PKI 证书和要求</a>文档。</p><p>默认情况下，K3s 在第一个 Server 节点启动时生成自签名 CA 证书。这些 CA 证书自颁发日起 10 年内有效，不会自动更新。</p><p>权威 CA 证书和密钥存储在数据存储区的引导程序密钥中，使用 <a href="/zh/cli/token#server">server token</a> 作为 PBKDF2 密码和 AES256-GCM 和 HMAC-SHA1 进行加密。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/certificate" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">certificate</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s certificate</h1><h2 class="anchor anchorWithStickyNavbar_LWe7" id="客户端和服务器证书">客户端和服务器证书<a href="#客户端和服务器证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 客户端和服务器证书自颁发日起 365 天内有效。每次启动 K3s 时，已过期或 90 天内过期的证书都会自动更新。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="轮换客户端和服务器证书">轮换客户端和服务器证书<a href="#轮换客户端和服务器证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要手动轮换客户端和服务器证书，请使用 <code>k3s certificate rotate</code> 子命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 停止 K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 轮换证书</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 启动 K3s</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>你可以通过指定证书名称来轮换单个或多个证书：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate --service </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">,</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVICE</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>可以轮换的证书：<code>admin</code>、<code>api-server</code>、<code>controller-manager</code>、<code>scheduler</code>、<code>k3s-controller</code>, <code>k3s-server</code>, <code>cloud-controller</code>, <code>etcd</code>, <code>auth-proxy</code>, <code>kubelet</code>，<code>kube-proxy</code>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="ca-证书">CA 证书<a href="#ca-证书" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Kubernetes 需要大量 CA 证书才能正常运行。有关 Kubernetes 如何使用 CA 证书，请参阅 Kubernetes <a href="https://kubernetes.io/docs/setup/best-practices/certificates/#all-certificates" target="_blank" rel="noopener noreferrer">PKI 证书和要求</a>文档。</p><p>默认情况下，K3s 在第一个 Server 节点启动时生成自签名 CA 证书。这些 CA 证书自颁发日起 10 年内有效，不会自动更新。</p><p>权威 CA 证书和密钥存储在数据存储区的引导程序密钥中，使用 <a href="/zh/cli/token#server">server token</a> 作为 PBKDF2 密码和 AES256-GCM 和 HMAC-SHA1 进行加密。
 在 K3s Server 启动期间，CA 证书和密钥的副本会被提取到磁盘。
 任何 Server 都可以在节点加入集群时为节点生成叶证书，而 Kubernetes <a href="https://kubernetes.io/docs/reference/access-authn-authz/certificate-signing-requests/" target="_blank" rel="noopener noreferrer">Certificates API</a> 控制器可以在运行时颁发其他证书。</p><p>要轮换 CA 证书和密钥，请使用 <code>k3s certificate rotate-ca</code> 命令。
 该命令会执行完整性检查，从而确认更新的证书和密钥可用。
@@ -32,10 +32,10 @@
 轮换 service-account Issuer 密钥时，文件中至少应保留一个旧密钥，以免现有 service-account Token 失效。
 它可以通过使用 <code>k3s certificate rotate-ca</code> 独立于集群 CA 进行轮换，这样能仅安装包含新旧密钥的更新的 <code>service.key</code> 文件。</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>不要覆盖 <code>/var/lib/rancher/k3s/server/tls</code> 中正在使用的数据。<br>
 <!-- -->将更新的密钥暂存到单独的目录中。</p></div></div><p>例如，要仅轮换 service-account Issuer 密钥，请运行以下命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 创建用于生成证书的临时目录</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p /opt/k3s/server/tls</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 检查 OpenSSL 版本</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">openssl version </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> -qF </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;OpenSSL 3&#x27;</span><span class="token plain"> </span><span class="token operator" style="color:rgb(137, 221, 255)">&amp;&amp;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">OPENSSL_GENRSA_FLAGS</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">-traditional</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 生成新的密钥</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">openssl genrsa </span><span class="token variable" style="color:rgb(191, 199, 213)">${OPENSSL_GENRSA_FLAGS</span><span class="token variable operator" style="color:rgb(137, 221, 255)">:-</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain"> -out /opt/k3s/server/tls/service.key </span><span class="token number" style="color:rgb(247, 140, 108)">2048</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 追加现有密钥，避免当前 token 失效</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/tls/service.key </span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;&gt;</span><span class="token plain"> /opt/k3s/server/tls/service.key</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 将更新后的密钥加载到数据存储中</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s certificate rotate-ca --path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/opt/k3s/server</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>出现文件未更新的警告是正常的。如果 <code>rotate-ca</code> 命令返回错误，请检查服务日志中的错误。
-命令成功完成后，在集群中的所有 Server 上重启 K3s。无需重启 Agent 或任何 Pod。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/agent"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">agent</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/etcd-snapshot"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">etcd-snapshot</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#客户端和服务器证书" class="table-of-contents__link toc-highlight">客户端和服务器证书</a><ul><li><a href="#轮换客户端和服务器证书" class="table-of-contents__link toc-highlight">轮换客户端和服务器证书</a></li></ul></li><li><a href="#ca-证书" class="table-of-contents__link toc-highlight">CA 证书</a><ul><li><a href="#使用自定义-ca-证书" class="table-of-contents__link toc-highlight">使用自定义 CA 证书</a></li><li><a href="#轮换自定义-ca-证书" class="table-of-contents__link toc-highlight">轮换自定义 CA 证书</a></li><li><a href="#轮换自签名-ca-证书" class="table-of-contents__link toc-highlight">轮换自签名 CA 证书</a></li></ul></li><li><a href="#serviceaccount-issuer-密钥轮换" class="table-of-contents__link toc-highlight">ServiceAccount Issuer 密钥轮换</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+命令成功完成后，在集群中的所有 Server 上重启 K3s。无需重启 Agent 或任何 Pod。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/certificate.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/agent"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">agent</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/etcd-snapshot"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">etcd-snapshot</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#客户端和服务器证书" class="table-of-contents__link toc-highlight">客户端和服务器证书</a><ul><li><a href="#轮换客户端和服务器证书" class="table-of-contents__link toc-highlight">轮换客户端和服务器证书</a></li></ul></li><li><a href="#ca-证书" class="table-of-contents__link toc-highlight">CA 证书</a><ul><li><a href="#使用自定义-ca-证书" class="table-of-contents__link toc-highlight">使用自定义 CA 证书</a></li><li><a href="#轮换自定义-ca-证书" class="table-of-contents__link toc-highlight">轮换自定义 CA 证书</a></li><li><a href="#轮换自签名-ca-证书" class="table-of-contents__link toc-highlight">轮换自签名 CA 证书</a></li></ul></li><li><a href="#serviceaccount-issuer-密钥轮换" class="table-of-contents__link toc-highlight">ServiceAccount Issuer 密钥轮换</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/cli/etcd-snapshot.html b/zh/cli/etcd-snapshot.html
index 6b540f2c8..c86c3e1aa 100644
--- a/zh/cli/etcd-snapshot.html
+++ b/zh/cli/etcd-snapshot.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">etcd-snapshot | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/etcd-snapshot"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="etcd-snapshot | K3s"><meta data-rh="true" name="description" content="从 v1.19.1+k3s1 起可用"><meta data-rh="true" property="og:description" content="从 v1.19.1+k3s1 起可用"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/etcd-snapshot"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/etcd-snapshot" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/etcd-snapshot" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">etcd-snapshot | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/etcd-snapshot"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="etcd-snapshot | K3s"><meta data-rh="true" name="description" content="从 v1.19.1+k3s1 起可用"><meta data-rh="true" property="og:description" content="从 v1.19.1+k3s1 起可用"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/etcd-snapshot"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/etcd-snapshot" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/etcd-snapshot" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/etcd-snapshot" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">etcd-snapshot</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s etcd-snapshot</h1><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 起可用</p></div></div><p>在本节中，你将学习如何创建 K3s 嵌入式 etcd 数据存储的备份，以及如何使用备份恢复集群。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="创建快照">创建快照<a href="#创建快照" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>默认情况下，快照在系统时间 00:00 和 12:00 启用，会保留 5 个快照。要配置快照间隔或保留快照的数量，请参阅<a href="#%E9%80%89%E9%A1%B9">选项</a>。</p><p>快照目录默认为 <code>${data-dir}/server/db/snapshots</code>。data-dir 的默认值为 <code>/var/lib/rancher/k3s</code>，你可以通过设置 <code>--data-dir</code> 标志来更改它。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="使用快照恢复集群">使用快照恢复集群<a href="#使用快照恢复集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>使用备份恢复 K3s 时，旧的数据目录将被移动到 <code>${data-dir}/server/db/etcd-old/</code>。然后 K3s 将尝试通过创建一个新的数据目录来恢复快照，然后使用具有一个 etcd 成员的新 K3s 集群启动 etcd。</p><p>使用备份恢复集群：</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单服务器</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>使用 <code>--cluster-reset</code> 选项运行 K3s，同时指定 <code>--cluster-reset-restore-path</code>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>结果</strong>：日志中的一条消息表示 K3s 可以在没有标志的情况下重新启动。再次启动 K3s，K3s 应该会成功运行并通过指定的快照恢复。</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>在此示例中有 3 个 Server，分别是 <code>S1</code>、<code>S2</code>和 <code>S3</code>。快照位于 <code>S1</code> 上。</p><ol><li><p>在 S1 上，使用 <code>--cluster-reset</code> 选项运行 K3s，同时指定 <code>--cluster-reset-restore-path</code>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>结果</strong>：日志中的一条消息表示 K3s 可以在没有标志的情况下重新启动。</p></li><li><p>在 S2 和 S3 上，停止 K3s。然后删除数据目录 <code>/var/lib/rancher/k3s/server/db/</code>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">rm</span><span class="token plain"> -rf /var/lib/rancher/k3s/server/db/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>在 S1 上，再次启动 K3s：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>在 S2 和 S3 上，再次启动 K3s 以加入恢复后的集群：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="选项">选项<a href="#选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>你可以通过命令行或者<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>（可能更容易使用）传入这些选项。</p><table><thead><tr><th>选项</th><th>描述</th></tr></thead><tbody><tr><td><code>--etcd-disable-snapshots</code></td><td>禁用自动 etcd 快照</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>cron 规范中的快照间隔时间。eg. 每 5 小时 <code>0 */5 * * *</code>（默认值：<code>0 */12 * * *</code>）</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>要保留的快照数量（默认值：5）</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>保存数据库快照的目录。（默认位置：<code>${data-dir}/db/snapshots</code>）</td></tr><tr><td><code>--cluster-reset</code></td><td>忘记所有对等点，成为新集群的唯一成员。也可以使用环境变量 <code>[$K3S_CLUSTER_RESET]</code> 进行设置。</td></tr><tr><td><code>--cluster-reset-restore-path</code> value</td><td>要恢复的快照文件路径</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="s3-兼容-api-支持">S3 兼容 API 支持<a href="#s3-兼容-api-支持" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>K3s 支持向具有 S3 兼容 API 的系统写入 etcd 快照和从系统中恢复 etcd 快照。S3 支持按需和计划快照。</p><p>以下参数已添加到 <code>server</code> 子命令中。<code>etcd-snapshot</code> 子命令也存在这些标志，但是删除了 <code>--etcd-s3</code> 部分以避免冗余。</p><table><thead><tr><th>选项</th><th>描述</th></tr></thead><tbody><tr><td><code>--etcd-s3</code></td><td>启用备份到 S3</td></tr><tr><td><code>--etcd-s3-endpoint</code></td><td>S3 端点网址</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code></td><td>S3 自定义 CA 证书，用于连接到 S3 端点</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>禁用 S3 SSL 证书验证</td></tr><tr><td><code>--etcd-s3-access-key</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code></td><td>S3 存储桶名称</td></tr><tr><td><code>--etcd-s3-region</code></td><td>S3 区域/存储桶位置（可选）。默认为 us-east-1</td></tr><tr><td><code>--etcd-s3-folder</code></td><td>S3 文件夹</td></tr></tbody></table><p>执行按需的 etcd 快照并将其保存到 S3：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>要从 S3 中执行按需的 etcd 快照还原，首先确保 K3s 没有运行。然后运行以下命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="etcd-快照和恢复子命令">Etcd 快照和恢复子命令<a href="#etcd-快照和恢复子命令" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>K3s 支持用于处理 etcd 快照的一组子命令。</p><table><thead><tr><th>子命令</th><th>描述</th></tr></thead><tbody><tr><td>delete</td><td>删除给定的快照</td></tr><tr><td>ls, list, l</td><td>列出快照</td></tr><tr><td>prune</td><td>删除超过配置的保留数量的快照</td></tr><tr><td>save</td><td>触发即时 etcd 快照</td></tr></tbody></table><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p><code>save</code> 子命令与 <code>k3s etcd-snapshot</code> 相同。后者最终将被前者取代。</p></div></div><p>无论 etcd 快照是存储在本地还是存储在 S3 兼容的对象存储中，这些命令都将按预期执行。</p><p>有关 etcd 快照子命令的更多信息，请运行 <code>k3s etcd-snapshot</code>。</p><p>从 S3 中删除快照。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot delete          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>使用默认保留策略 (5) 修剪本地快照。<code>prune</code> 子命令接受额外的标志 <code>--snapshot-retention</code>，允许覆盖默认保留策略。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune --snapshot-retention </span><span class="token number" style="color:rgb(247, 140, 108)">10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/certificate"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">certificate</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/secrets-encrypt"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">secrets-encrypt</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/etcd-snapshot" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">etcd-snapshot</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s etcd-snapshot</h1><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 起可用</p></div></div><p>在本节中，你将学习如何创建 K3s 嵌入式 etcd 数据存储的备份，以及如何使用备份恢复集群。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="创建快照">创建快照<a href="#创建快照" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>默认情况下，快照在系统时间 00:00 和 12:00 启用，会保留 5 个快照。要配置快照间隔或保留快照的数量，请参阅<a href="#%E9%80%89%E9%A1%B9">选项</a>。</p><p>快照目录默认为 <code>${data-dir}/server/db/snapshots</code>。data-dir 的默认值为 <code>/var/lib/rancher/k3s</code>，你可以通过设置 <code>--data-dir</code> 标志来更改它。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="使用快照恢复集群">使用快照恢复集群<a href="#使用快照恢复集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>使用备份恢复 K3s 时，旧的数据目录将被移动到 <code>${data-dir}/server/db/etcd-old/</code>。然后 K3s 将尝试通过创建一个新的数据目录来恢复快照，然后使用具有一个 etcd 成员的新 K3s 集群启动 etcd。</p><p>使用备份恢复集群：</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单服务器</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>使用 <code>--cluster-reset</code> 选项运行 K3s，同时指定 <code>--cluster-reset-restore-path</code>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>结果</strong>：日志中的一条消息表示 K3s 可以在没有标志的情况下重新启动。再次启动 K3s，K3s 应该会成功运行并通过指定的快照恢复。</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>在此示例中有 3 个 Server，分别是 <code>S1</code>、<code>S2</code>和 <code>S3</code>。快照位于 <code>S1</code> 上。</p><ol><li><p>在 S1 上，使用 <code>--cluster-reset</code> 选项运行 K3s，同时指定 <code>--cluster-reset-restore-path</code>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token environment constant" style="color:rgb(130, 170, 255)">PATH</span><span class="token plain">-TO-SNAPSHOT</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>结果</strong>：日志中的一条消息表示 K3s 可以在没有标志的情况下重新启动。</p></li><li><p>在 S2 和 S3 上，停止 K3s。然后删除数据目录 <code>/var/lib/rancher/k3s/server/db/</code>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl stop k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">rm</span><span class="token plain"> -rf /var/lib/rancher/k3s/server/db/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>在 S1 上，再次启动 K3s：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>在 S2 和 S3 上，再次启动 K3s 以加入恢复后的集群：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl start k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="选项">选项<a href="#选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>你可以通过命令行或者<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>（可能更容易使用）传入这些选项。</p><table><thead><tr><th>选项</th><th>描述</th></tr></thead><tbody><tr><td><code>--etcd-disable-snapshots</code></td><td>禁用自动 etcd 快照</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>cron 规范中的快照间隔时间。eg. 每 5 小时 <code>0 */5 * * *</code>（默认值：<code>0 */12 * * *</code>）</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>要保留的快照数量（默认值：5）</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>保存数据库快照的目录。（默认位置：<code>${data-dir}/db/snapshots</code>）</td></tr><tr><td><code>--cluster-reset</code></td><td>忘记所有对等点，成为新集群的唯一成员。也可以使用环境变量 <code>[$K3S_CLUSTER_RESET]</code> 进行设置。</td></tr><tr><td><code>--cluster-reset-restore-path</code> value</td><td>要恢复的快照文件路径</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="s3-兼容-api-支持">S3 兼容 API 支持<a href="#s3-兼容-api-支持" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>K3s 支持向具有 S3 兼容 API 的系统写入 etcd 快照和从系统中恢复 etcd 快照。S3 支持按需和计划快照。</p><p>以下参数已添加到 <code>server</code> 子命令中。<code>etcd-snapshot</code> 子命令也存在这些标志，但是删除了 <code>--etcd-s3</code> 部分以避免冗余。</p><table><thead><tr><th>选项</th><th>描述</th></tr></thead><tbody><tr><td><code>--etcd-s3</code></td><td>启用备份到 S3</td></tr><tr><td><code>--etcd-s3-endpoint</code></td><td>S3 端点网址</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code></td><td>S3 自定义 CA 证书，用于连接到 S3 端点</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>禁用 S3 SSL 证书验证</td></tr><tr><td><code>--etcd-s3-access-key</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code></td><td>S3 存储桶名称</td></tr><tr><td><code>--etcd-s3-region</code></td><td>S3 区域/存储桶位置（可选）。默认为 us-east-1</td></tr><tr><td><code>--etcd-s3-folder</code></td><td>S3 文件夹</td></tr></tbody></table><p>执行按需的 etcd 快照并将其保存到 S3：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>要从 S3 中执行按需的 etcd 快照还原，首先确保 K3s 没有运行。然后运行以下命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-reset-restore-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --etcd-s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="etcd-快照和恢复子命令">Etcd 快照和恢复子命令<a href="#etcd-快照和恢复子命令" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>K3s 支持用于处理 etcd 快照的一组子命令。</p><table><thead><tr><th>子命令</th><th>描述</th></tr></thead><tbody><tr><td>delete</td><td>删除给定的快照</td></tr><tr><td>ls, list, l</td><td>列出快照</td></tr><tr><td>prune</td><td>删除超过配置的保留数量的快照</td></tr><tr><td>save</td><td>触发即时 etcd 快照</td></tr></tbody></table><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p><code>save</code> 子命令与 <code>k3s etcd-snapshot</code> 相同。后者最终将被前者取代。</p></div></div><p>无论 etcd 快照是存储在本地还是存储在 S3 兼容的对象存储中，这些命令都将按预期执行。</p><p>有关 etcd 快照子命令的更多信息，请运行 <code>k3s etcd-snapshot</code>。</p><p>从 S3 中删除快照。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot delete          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-bucket</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-BUCKET-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-access-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-ACCESS-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --s3-secret-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">S3-SECRET-KEY</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SNAPSHOT-NAME</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>使用默认保留策略 (5) 修剪本地快照。<code>prune</code> 子命令接受额外的标志 <code>--snapshot-retention</code>，允许覆盖默认保留策略。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s etcd-snapshot prune --snapshot-retention </span><span class="token number" style="color:rgb(247, 140, 108)">10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/etcd-snapshot.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/certificate"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">certificate</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/secrets-encrypt"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">secrets-encrypt</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/cli/secrets-encrypt.html b/zh/cli/secrets-encrypt.html
index 0eb5a9441..b9cd7c76c 100644
--- a/zh/cli/secrets-encrypt.html
+++ b/zh/cli/secrets-encrypt.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">secrets-encrypt | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/secrets-encrypt"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="secrets-encrypt | K3s"><meta data-rh="true" name="description" content="K3s 支持启用静态加密。有关详细信息，请参阅 Secret 加密。"><meta data-rh="true" property="og:description" content="K3s 支持启用静态加密。有关详细信息，请参阅 Secret 加密。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/secrets-encrypt"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/secrets-encrypt" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/secrets-encrypt" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">secrets-encrypt | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/secrets-encrypt"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="secrets-encrypt | K3s"><meta data-rh="true" name="description" content="K3s 支持启用静态加密。有关详细信息，请参阅 Secret 加密。"><meta data-rh="true" property="og:description" content="K3s 支持启用静态加密。有关详细信息，请参阅 Secret 加密。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/secrets-encrypt"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/secrets-encrypt" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/secrets-encrypt" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/secrets-encrypt" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">secrets-encrypt</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s secrets-encrypt</h1><p>K3s 支持启用静态加密。有关详细信息，请参阅 <a href="/zh/security/secrets-encryption">Secret 加密</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密工具">Secret 加密工具<a href="#secret-加密工具" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.8+k3s1</a> 起可用</p></div></div><p>K3s 包含一个 CLI 工具 <code>secrets-encrypt</code>，可以自动控制以下内容：</p><ul><li>禁用/启用 Secret 加密</li><li>添加新的加密密钥</li><li>轮换和删除加密密钥</li><li>重新加密 Secret</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果不遵循正确的加密密钥轮换程序，你的集群可能会永久损坏。因此，请谨慎操作。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="加密密钥轮换">加密密钥轮换<a href="#加密密钥轮换" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单服务器</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>要在单服务器集群上轮换 Secret 加密密钥：</p><ul><li>使用标志 <code>--secrets-encryption</code> 启动 K3s Server</li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>目前<em>不</em>支持在没有加密的情况下启动 K3s 并在后续启用它。</p></div></div><ol><li><p>准备</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。如果将 K3s 作为服务运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>轮换</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。</p></li><li><p>重新加密</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>K3s 每秒将重新加密约 5 个 Secret。<br>
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/secrets-encrypt" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">secrets-encrypt</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s secrets-encrypt</h1><p>K3s 支持启用静态加密。有关详细信息，请参阅 <a href="/zh/security/secrets-encryption">Secret 加密</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密工具">Secret 加密工具<a href="#secret-加密工具" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.8%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.8+k3s1</a> 起可用</p></div></div><p>K3s 包含一个 CLI 工具 <code>secrets-encrypt</code>，可以自动控制以下内容：</p><ul><li>禁用/启用 Secret 加密</li><li>添加新的加密密钥</li><li>轮换和删除加密密钥</li><li>重新加密 Secret</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果不遵循正确的加密密钥轮换程序，你的集群可能会永久损坏。因此，请谨慎操作。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="加密密钥轮换">加密密钥轮换<a href="#加密密钥轮换" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单服务器</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>要在单服务器集群上轮换 Secret 加密密钥：</p><ul><li>使用标志 <code>--secrets-encryption</code> 启动 K3s Server</li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>目前<em>不</em>支持在没有加密的情况下启动 K3s 并在后续启用它。</p></div></div><ol><li><p>准备</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。如果将 K3s 作为服务运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>轮换</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。</p></li><li><p>重新加密</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>K3s 每秒将重新加密约 5 个 Secret。<br>
 <!-- -->具有大量 Secret 的集群可能需要几分钟才能重新加密。</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>嵌入式数据库和外部数据库集群的步骤相同。</p><p>要在 HA 设置上轮换 Secret 加密密钥：</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>注意事项</div><div class="admonitionContent_S0QG"><ul><li>目前<em>不</em>支持在没有加密的情况下启动 K3s 并在后续启用它。</li><li>虽然不是必需的，但建议你选择一个 Server 节点来运行 <code>secrets-encrypt</code> 命令。</li></ul></div></div><ol><li><p>使用 <code>--secrets-encryption</code> 标志启动所有三个 K3s Server。为简便起见，我们将 server 分别称为 S1、S2、S3。</p></li><li><p>准备 S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt prepare</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。如果将 K3s 作为服务运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li><li><p>轮换 S1</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt rotate</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。</p></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li><li><p>在 S1 上重新加密</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>K3s 每秒将重新加密约 5 个 Secret。<br>
-<!-- -->具有大量 Secret 的集群可能需要几分钟才能重新加密。</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。</p></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="禁用启用-secret-加密">禁用/启用 Secret 加密<a href="#禁用启用-secret-加密" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单服务器</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>使用 <code>--secrets-encryption</code> 标志启动 server 后，你还可以禁用 Secret 加密。</p><p>要在单节点集群上禁用 Secret 加密：</p><ol><li><p>禁用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。如果将 K3s 作为服务运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>要在单节点集群上重新启用 Secret 加密：</p><ol><li><p>启用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。</p></li><li><p>使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>使用 <code>--secrets-encryption</code> 标志启动 HA 集群后，你还可以禁用 Secret 加密。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>虽然不是必需的，但建议你选择一个 Server 节点来运行 <code>secrets-encrypt</code> 命令。</p></div></div><p>为简便起见，我们将本指南中使用的 3 个 server 分别称为 S1、S2、S3。</p><p>要在 HA 集群上禁用 Secret 加密：</p><ol><li><p>在 S1 上禁用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。如果将 K3s 作为服务运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li></ol><ol start="4"><li><p>在 S1 上使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>要在 HA 集群上重新启用 Secret 加密：</p><ol><li><p>在 S1 上启用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。</p></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li><li><p>在 S1 上使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密状态">Secret 加密状态<a href="#secret-加密状态" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>secrets-encrypt 工具包含一个 <code>status</code> 命令，该命令能显示节点上 Secret 加密的当前状态信息。</p><p>单 Server 节点上的命令示例：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: start</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: All hashes match</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>以下是另一个关于 HA 集群的例子，在轮换密钥后，重启 server 之前：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">hash</span><span class="token plain"> does not match between node-1 and node-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey-2021-12-10T22:54:38Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>各部分详情如下：</p><ul><li><strong>Encryption Status</strong>：显示节点上的 Secret 加密是禁用还是启用的</li><li><strong>Current Rotation Stage</strong>：表示节点上当前的轮换阶段<br>Stage 可能是：<code>start</code>，<code>prepare</code>，<code>rotate</code>，<code>reencrypt_request</code>，<code>reencrypt_active</code>，<code>reencrypt_finished</code></li><li><strong>Server Encryption Hashes</strong>：对 HA 集群有用，表明所有 server 是否与本地文件处于同一阶段。这可用于确定在进入下一阶段之前是否需要重启 server。在上面的 HA 例子中，node-1 和 node-2 的哈希值不同，说明它们目前没有相同的加密配置。重启 server 将同步它们的配置。</li><li><strong>Key Table</strong>：汇总在节点上找到的 Secret 加密密钥的信息。<ul><li><strong>Active</strong>：“*”表示当前使用了哪些密钥（如果有的话）进行Secret 加密。Kubernetes 使用 active 密钥来加密新的 Secret。</li><li><strong>Key Type</strong>：使用此工具的所有密钥都是 <code>AES-CBC</code> 类型。详情请参见<a href="https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers" target="_blank" rel="noopener noreferrer">此处</a>。</li><li><strong>Name</strong>：加密密钥的名称。</li></ul></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/etcd-snapshot"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">etcd-snapshot</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/token"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">token</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secret-加密工具" class="table-of-contents__link toc-highlight">Secret 加密工具</a><ul><li><a href="#加密密钥轮换" class="table-of-contents__link toc-highlight">加密密钥轮换</a></li><li><a href="#禁用启用-secret-加密" class="table-of-contents__link toc-highlight">禁用/启用 Secret 加密</a></li><li><a href="#secret-加密状态" class="table-of-contents__link toc-highlight">Secret 加密状态</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<!-- -->具有大量 Secret 的集群可能需要几分钟才能重新加密。</p></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。</p></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="禁用启用-secret-加密">禁用/启用 Secret 加密<a href="#禁用启用-secret-加密" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单服务器</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>使用 <code>--secrets-encryption</code> 标志启动 server 后，你还可以禁用 Secret 加密。</p><p>要在单节点集群上禁用 Secret 加密：</p><ol><li><p>禁用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。如果将 K3s 作为服务运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>要在单节点集群上重新启用 Secret 加密：</p><ol><li><p>启用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 K3s Server。</p></li><li><p>使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>使用 <code>--secrets-encryption</code> 标志启动 HA 集群后，你还可以禁用 Secret 加密。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>虽然不是必需的，但建议你选择一个 Server 节点来运行 <code>secrets-encrypt</code> 命令。</p></div></div><p>为简便起见，我们将本指南中使用的 3 个 server 分别称为 S1、S2、S3。</p><p>要在 HA 集群上禁用 Secret 加密：</p><ol><li><p>在 S1 上禁用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt disable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。如果将 K3s 作为服务运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 systemd</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 如果使用 openrc</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rc-service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li></ol><ol start="4"><li><p>在 S1 上使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol><p>要在 HA 集群上重新启用 Secret 加密：</p><ol><li><p>在 S1 上启用</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">enable</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li><li><p>使用相同的参数终止并重启 S1。</p></li><li><p>S1 启动后，终止并重启 S2 和 S3</p></li><li><p>在 S1 上使用标志重新加密</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s secrets-encrypt reencrypt --force --skip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ol></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密状态">Secret 加密状态<a href="#secret-加密状态" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>secrets-encrypt 工具包含一个 <code>status</code> 命令，该命令能显示节点上 Secret 加密的当前状态信息。</p><p>单 Server 节点上的命令示例：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: start</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: All hashes match</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>以下是另一个关于 HA 集群的例子，在轮换密钥后，重启 server 之前：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ k3s secrets-encrypt status</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Encryption Status: Enabled</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Current Rotation Stage: rotate</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Server Encryption Hashes: </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">hash</span><span class="token plain"> does not match between node-1 and node-2</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">Active  Key Type  Name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">------  --------  ----</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"> *      AES-CBC   aescbckey-2021-12-10T22:54:38Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        AES-CBC   aescbckey</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>各部分详情如下：</p><ul><li><strong>Encryption Status</strong>：显示节点上的 Secret 加密是禁用还是启用的</li><li><strong>Current Rotation Stage</strong>：表示节点上当前的轮换阶段<br>Stage 可能是：<code>start</code>，<code>prepare</code>，<code>rotate</code>，<code>reencrypt_request</code>，<code>reencrypt_active</code>，<code>reencrypt_finished</code></li><li><strong>Server Encryption Hashes</strong>：对 HA 集群有用，表明所有 server 是否与本地文件处于同一阶段。这可用于确定在进入下一阶段之前是否需要重启 server。在上面的 HA 例子中，node-1 和 node-2 的哈希值不同，说明它们目前没有相同的加密配置。重启 server 将同步它们的配置。</li><li><strong>Key Table</strong>：汇总在节点上找到的 Secret 加密密钥的信息。<ul><li><strong>Active</strong>：“*”表示当前使用了哪些密钥（如果有的话）进行Secret 加密。Kubernetes 使用 active 密钥来加密新的 Secret。</li><li><strong>Key Type</strong>：使用此工具的所有密钥都是 <code>AES-CBC</code> 类型。详情请参见<a href="https://kubernetes.io/docs/tasks/administer-cluster/encrypt-data/#providers" target="_blank" rel="noopener noreferrer">此处</a>。</li><li><strong>Name</strong>：加密密钥的名称。</li></ul></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/secrets-encrypt.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/etcd-snapshot"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">etcd-snapshot</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/token"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">token</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secret-加密工具" class="table-of-contents__link toc-highlight">Secret 加密工具</a><ul><li><a href="#加密密钥轮换" class="table-of-contents__link toc-highlight">加密密钥轮换</a></li><li><a href="#禁用启用-secret-加密" class="table-of-contents__link toc-highlight">禁用/启用 Secret 加密</a></li><li><a href="#secret-加密状态" class="table-of-contents__link toc-highlight">Secret 加密状态</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/cli/server.html b/zh/cli/server.html
index 06a40a4d6..3b8f786d6 100644
--- a/zh/cli/server.html
+++ b/zh/cli/server.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">server | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/server"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="server | K3s"><meta data-rh="true" name="description" content="在本节中，你将学习如何配置 K3s Server。"><meta data-rh="true" property="og:description" content="在本节中，你将学习如何配置 K3s Server。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/server"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/server" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/server" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">server | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/server"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="server | K3s"><meta data-rh="true" name="description" content="在本节中，你将学习如何配置 K3s Server。"><meta data-rh="true" property="og:description" content="在本节中，你将学习如何配置 K3s Server。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/server"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/server" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/server" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/server" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">server</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s server</h1><p>在本节中，你将学习如何配置 K3s Server。</p><p>请注意，Server 也运行 Agent，因此 Server 也支持 <a href="/zh/cli/agent"><code>k3s agent</code> 文档</a>中列出的所有配置选项。</p><p>在本文中，选项作为 CLI 标志传递，但是也可以作为配置文件选项传递。有关使用 YAML 配置文件的更多信息，请参阅<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>文档。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="关键配置值">关键配置值<a href="#关键配置值" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>以下选项必须在集群中的所有 Server 上设置为相同的值。如果不这样做，新 Server 将无法加入集群（使用嵌入式 etcd 时），或集群将无法正确运行（使用外部数据存储时）。</p><ul><li><code>--agent-token</code></li><li><code>--cluster-cidr</code></li><li><code>--cluster-dns</code></li><li><code>--cluster-domain</code></li><li><code>--disable-cloud-controller</code></li><li><code>--disable-helm-controller</code></li><li><code>--disable-network-policy</code></li><li><code>--disable-servicelb</code></li><li><code>--egress-selector-mode</code></li><li><code>--flannel-backend</code></li><li><code>--flannel-external-ip</code></li><li><code>--flannel-ipv6-masq</code></li><li><code>--secrets-encryption</code></li><li><code>--service-cidr</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="常用选项">常用选项<a href="#常用选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据库">数据库<a href="#数据库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code> value</td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>指定 etcd、Mysql、Postgres 或 Sqlite（默认）数据源名称</td></tr><tr><td><code>--datastore-cafile</code> value</td><td><code>K3S_DATASTORE_CAFILE</code></td><td>用于保护数据存储后端通信的 TLS CA 文件</td></tr><tr><td><code>--datastore-certfile</code> value</td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>用于保护数据存储后端通信的 TLS 证书文件</td></tr><tr><td><code>--datastore-keyfile</code> value</td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>用于保护数据存储后端通信的 TLS 密钥文件</td></tr><tr><td><code>--etcd-expose-metrics</code></td><td>N/A</td><td>向客户端接口公开 etcd 指标（默认值：false）</td></tr><tr><td><code>--etcd-disable-snapshots</code></td><td>N/A</td><td>禁用自动 etcd 快照</td></tr><tr><td><code>--etcd-snapshot-name</code> value</td><td>N/A</td><td>设置 etcd 快照的基本名称。默认值：etcd-snapshot-<code>&lt;unix-timestamp&gt;</code>（默认值：“etcd-snapshot”）</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>N/A</td><td>cron 规范中的快照间隔时间。eg. 每 5 小时 &#x27;0 <em>/5 <em> <!-- -->*<!-- --> </em>&#x27;（默认值：&quot;0 </em>/12 <!-- -->*<!-- --> <!-- -->*<!-- --> <!-- -->*<!-- -->&quot;）</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>N/A</td><td>要保留的快照数量（默认值：5）</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>N/A</td><td>保存数据库快照的目录（默认值：${data-dir}/db/snapshots）</td></tr><tr><td><code>--etcd-s3</code></td><td>N/A</td><td>启用备份到 S3</td></tr><tr><td><code>--etcd-s3-endpoint</code> value</td><td>N/A</td><td>S3 端点 URL（默认值：“s3.amazonaws.com”）</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code> value</td><td>N/A</td><td>S3 自定义 CA 证书，用于连接到 S3 端点</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>N/A</td><td>禁用 S3 SSL 证书验证</td></tr><tr><td><code>--etcd-s3-access-key</code> value</td><td><code>AWS_ACCESS_KEY_ID</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code> value</td><td><code>AWS_SECRET_ACCESS_KEY</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code> value</td><td>N/A</td><td>S3 存储桶名称</td></tr><tr><td><code>--etcd-s3-region</code> value</td><td>N/A</td><td>S3 区域/存储桶位置（可选）（默认值：“us-east-1”）</td></tr><tr><td><code>--etcd-s3-folder</code> value</td><td>N/A</td><td>S3 文件夹</td></tr><tr><td><code>--etcd-s3-insecure</code></td><td>通过 HTTPS 禁用 S3</td><td></td></tr><tr><td><code>--etcd-s3-timeout</code> value</td><td>S3 超时（默认值：5m0s）</td><td></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="集群选项">集群选项<a href="#集群选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--token</code> value, <code>-t</code> value</td><td><code>K3S_TOKEN</code></td><td>共享密钥，用于将 server 或 agent 加入集群</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>包含 cluster-secret/token 的文件</td></tr><tr><td><code>--agent-token</code> value</td><td><code>K3S_AGENT_TOKEN</code></td><td>共享密钥，用于将 agent 加入集群，但不能用于 server</td></tr><tr><td><code>--agent-token-file</code> value</td><td><code>K3S_AGENT_TOKEN_FILE</code></td><td>包含 agent secret 的文件</td></tr><tr><td><code>--server</code> value</td><td><code>K3S_URL</code></td><td>要连接的 server，用于加入集群</td></tr><tr><td><code>--cluster-init</code></td><td><code>K3S_CLUSTER_INIT</code></td><td>使用嵌入式 Etcd 初始化新集群</td></tr><tr><td><code>--cluster-reset</code></td><td><code>K3S_CLUSTER_RESET</code></td><td>忘记所有对等点，成为新集群的唯一成员</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="管理-kubeconfig-选项">管理 Kubeconfig 选项<a href="#管理-kubeconfig-选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--write-kubeconfig value, -o</code> value</td><td><code>K3S_KUBECONFIG_OUTPUT</code></td><td>将 admin 客户端的 kubeconfig 写入此文件</td></tr><tr><td><code>--write-kubeconfig-mode</code> value</td><td><code>K3S_KUBECONFIG_MODE</code></td><td>使用此<a href="https://en.wikipedia.org/wiki/Chmod" target="_blank" rel="noopener noreferrer">模式</a>写入 kubeconfig。kubeconfig 文件归 root 所有，并默认使用 600 模式写入。如果将模式改为 644，主机上的其他非特权用户将能读取它。</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="高级选项">高级选项<a href="#高级选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--debug</code></td><td>N/A</td><td>打开 debug 日志</td></tr><tr><td><code>-v</code> value</td><td>0</td><td>表示日志级别详细程度的数字</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>FILE_PATTERN=LOG_LEVEL 格式，用逗号分隔的列表，用于文件过滤日志</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>记录到文件</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>记录到标准错误以及文件（如果设置）</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="listeners">Listeners<a href="#listeners" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--bind-address</code> value</td><td>0.0.0.0</td><td>K3s 绑定地址</td></tr><tr><td><code>--https-listen-port</code> value</td><td>6443</td><td>HTTPS 监听端口</td></tr><tr><td><code>--advertise-address</code> value</td><td>node-external-ip/node-ip</td><td>IPv4 地址，apiserver 使用该地址向集群成员通告</td></tr><tr><td><code>--advertise-port</code> value</td><td>listen-port/0</td><td>apiserver 用于向集群成员通告的端口</td></tr><tr><td><code>--tls-san</code> value</td><td>N/A</td><td>在 TLS 证书上添加其他主机名或 IPv4/IPv6 地址作为 Subject Alternative Name</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据">数据<a href="#数据" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td><code>/var/lib/rancher/k3s</code>，如果不是 root，则为 <code>${HOME}/.rancher/k3s</code></td><td>保存状态的文件夹</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密">Secret 加密<a href="#secret-加密" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--secrets-encryption</code></td><td>false</td><td>启用 secret 静态加密</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="网络">网络<a href="#网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--cluster-cidr</code> value</td><td>&quot;10.42.0.0/16&quot;</td><td>用于 pod IP 的 IPv4/IPv6 网络 CIDR</td></tr><tr><td><code>--service-cidr</code> value</td><td>&quot;10.43.0.0/16&quot;</td><td>用于服务 IP 的 IPv4/IPv6 网络 CIDR</td></tr><tr><td><code>--service-node-port-range</code> value</td><td>&quot;30000-32767&quot;</td><td>为具有 NodePort 可见性的服务保留的端口范围</td></tr><tr><td><code>--cluster-dns</code> value</td><td>&quot;10.43.0.10&quot;</td><td>用于 coredns 服务的 IPv4 集群 IP。需要在 service-cidr 范围内</td></tr><tr><td><code>--cluster-domain</code> value</td><td>&quot;cluster.local&quot;</td><td>集群域名</td></tr><tr><td><code>--flannel-backend</code> value</td><td>&quot;vxlan&quot;</td><td>“none”、“vxlan”、“ipsec”（已弃用）、“host-gw”、“wireguard-native” 或 “wireguard”（已弃用）中的其中一个</td></tr><tr><td><code>--flannel-ipv6-masq</code></td><td>&quot;N/A&quot;</td><td>为 pod 启用 IPv6 伪装</td></tr><tr><td><code>--flannel-external-ip</code></td><td>&quot;N/A&quot;</td><td>将节点外部 IP 地址用于 Flannel 流量</td></tr><tr><td><code>--servicelb-namespace</code> value</td><td>&quot;kube-system&quot;</td><td>servicelb 组件的 pod 命名空间</td></tr><tr><td><code>--egress-selector-mode</code> value</td><td>&quot;agent&quot;</td><td>仅支持： <ul><li>disabled：apiserver 不使用 agent 隧道与节点通信。要求 server 运行 agent，并直接连接到 agent 上的 kubelet，否则 apiserver 将无法访问 service 端点或执行 kubectl exec 和 kubectl 日志。</li><li>agent：apiserver 使用 agent 隧道与节点通信。节点允许环回地址的隧道连接。要求 server 也运行 agent，否则 apiserver 将无法访问 service 端点。K3s 的历史默认值。</li><li> pod：apiserver 使用 agent 隧道与节点和 service 端点通信，通过监视节点将端点连接路由到正确的 agent。节点允许环回地址或分配给节点的 CIDR 的隧道连接。</li><li>  cluster：apiserver 使用 agent 隧道与节点和 service 端点通信，通过监视端点将端点连接路由到正确的 agent。节点允许环回地址或配置的集群 CIDR 范围的隧道连接。</li></ul></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="存储类">存储类<a href="#存储类" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--default-local-storage-path</code> value</td><td>本地制备器存储类的默认本地存储路径</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-组件">Kubernetes 组件<a href="#kubernetes-组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--disable</code> value</td><td>请参阅<a href="/zh/installation/packaged-components#%E4%BD%BF%E7%94%A8---disable-%E6%A0%87%E5%BF%97">使用 <code>--disable</code> 标志</a>。</td></tr><tr><td><code>--disable-scheduler</code></td><td>禁用 Kubernetes 默认调度程序</td></tr><tr><td><code>--disable-cloud-controller</code></td><td>禁用 k3s 默认云 Controller Manager</td></tr><tr><td><code>--disable-kube-proxy</code></td><td>禁用运行 kube-proxy</td></tr><tr><td><code>--disable-network-policy</code></td><td>禁用 K3s 默认网络策略控制器</td></tr><tr><td><code>--disable-helm-controller</code></td><td>禁用 Helm 控制器</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-进程的自定义标志">Kubernetes 进程的自定义标志<a href="#kubernetes-进程的自定义标志" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--etcd-arg</code> value</td><td>etcd 进程的自定义标志</td></tr><tr><td><code>--kube-apiserver-arg</code> value</td><td>kube-apiserver 进程的自定义标志</td></tr><tr><td><code>--kube-scheduler-arg</code> value</td><td>kube-scheduler 进程的自定义标志</td></tr><tr><td><code>--kube-controller-manager-arg</code> value</td><td>kube-controller-manager 进程的自定义标志</td></tr><tr><td><code>--kube-cloud-controller-manager-arg</code> value</td><td>kube-cloud-controller-manager 进程的自定义标志</td></tr><tr><td><code>--kubelet-arg</code> value</td><td>kubelet 进程的自定义标志</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>kube-proxy 进程的自定义标志</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="实验选项">实验选项<a href="#实验选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>无根运行</td></tr><tr><td><code>--enable-pprof</code></td><td>在 supervisor 端口上启用 pprof 端点</td></tr><tr><td><code>--docker</code></td><td>使用 cri-dockerd 而不是 containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>偏向打包的用户空间二进制文件，而不是主机二进制文件</td></tr><tr><td><code>--disable-agent</code></td><td>请参阅<a href="/zh/advanced#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7">运行无 Agent 的 Server（实验性）</a></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="已弃用选项">已弃用选项<a href="#已弃用选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>使用 <code>--flannel-backend=none</code></td></tr><tr><td><code>--no-deploy</code> value</td><td>N/A</td><td>使用 <code>--disable</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>使用 <code>--token</code></td></tr><tr><td><code>--flannel-backend</code> wireguard</td><td>N/A</td><td>使用 <code>--flannel-backend=wireguard-native</code></td></tr><tr><td><code>--flannel-backend</code> value=option1=value</td><td>N/A</td><td>使用 <code>--flannel-conf</code> 指定带有后端配置的 Flannel 配置文件</td></tr></tbody></table><h1>K3s Server CLI 帮助</h1><blockquote><p>如果某个选项出现在括号中（例如 <code>[$K3S_TOKEN]</code>），该选项可以作为该名称的环境变量传入。</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server - Run management server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --bind-address value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> k3s </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">bind</span><span class="token plain"> address </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --https-listen-port value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> HTTPS listen port </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-address value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 address that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: node-external-ip/node-ip</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: listen-port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --tls-san value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: /var/lib/rancher/k3s or </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">HOME</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/.rancher/k3s </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> not root</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">service</span><span class="token plain"> IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-node-port-range value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port range to reserve </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> services with NodePort visibility </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;30000-32767&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-dns value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 Cluster IP </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> coredns service. Should be </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> your service-cidr range </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-domain value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Cluster Domain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;cluster.local&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-backend value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> backend</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;=</span><span class="token plain">option1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val1,option2</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">2</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> where backend is one of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;none&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;vxlan&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ipsec&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;host-gw&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard-native&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;vxlan&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-ipv6-masq                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable IPv6 masquerading </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-external-ip                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> external IP addresses </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> Flannel traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --egress-selector-mode value               </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> One of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;agent&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;cluster&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;pod&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;disabled&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --servicelb-namespace value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Namespace of the pods </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the servicelb component </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;kube-system&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig value, -o value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> admin client to this </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_OUTPUT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig-mode value              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig with this mode </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_MODE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a server or agent to a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the token </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> agents to the cluster, but not servers </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token-file value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the agent secret </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to, used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-init                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Initialize a new cluster using embedded Etcd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_INIT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Forget all peers and become sole member of a new cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_RESET</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset-restore-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Path to snapshot </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to be restored</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-apiserver-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-apiserver process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-arg value                           </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> etcd process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-controller-manager-arg value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-scheduler-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-scheduler process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-cloud-controller-manager-arg value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-cloud-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-endpoint value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Specify etcd, Mysql, Postgres, or Sqlite </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> data </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">source</span><span class="token plain"> name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_ENDPOINT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-cafile value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS Certificate Authority </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CAFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-certfile value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS certification </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CERTFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-keyfile value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS key </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_KEYFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-expose-metrics                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Expose etcd metrics to client interface. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token boolean" style="color:rgb(255, 88, 116)">false</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-disable-snapshots                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable automatic etcd snapshots</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-name value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Set the base name of etcd snapshots </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: etcd-snapshot-</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">unix-timestamp</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;etcd-snapshot&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-schedule-cron value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Snapshot interval </span><span class="token function" style="color:rgb(130, 170, 255)">time</span><span class="token plain"> </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cron</span><span class="token plain"> spec. eg. every </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain"> hours </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;* */5 * * *&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0 */12 * * *&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-retention value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number of snapshots to retain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-dir value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Directory to save db snapshots. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token variable" style="color:rgb(191, 199, 213)">${data-dir}</span><span class="token plain">/db/snapshots</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-compress                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Compress etcd snapshot</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable backup to S3</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 endpoint url </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;s3.amazonaws.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint-ca value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 custom CA cert to connect to S3 endpoint</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-skip-ssl-verify                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 SSL certificate validation</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-access-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 access key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_ACCESS_KEY_ID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-secret-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 secret key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_SECRET_ACCESS_KEY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-bucket value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 bucket name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-region value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 region / bucket location </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">optional</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;us-east-1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-folder value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 folder</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-insecure                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 over HTTPS</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-timeout value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 </span><span class="token function" style="color:rgb(130, 170, 255)">timeout</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: 5m0s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --default-local-storage-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Default </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> storage path </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> provisioner storage class</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Do not deploy packaged components and delete any deployed components </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">valid items: coredns, servicelb, traefik, local-storage, metrics-server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-scheduler                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Kubernetes default scheduler</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-cloud-controller                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default cloud controller manager</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-kube-proxy                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable running kube-proxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-network-policy                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default network policy controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-helm-controller                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Helm controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --system-default-registry value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry to be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> all system images </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SYSTEM_DEFAULT_REGISTRY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --secrets-encryption                       Enable secret encryption at rest</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --enable-pprof                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable pprof endpoint on supervisor port</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer.</span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/server.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">CLI 工具</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/agent"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">agent</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#关键配置值" class="table-of-contents__link toc-highlight">关键配置值</a></li><li><a href="#常用选项" class="table-of-contents__link toc-highlight">常用选项</a><ul><li><a href="#数据库" class="table-of-contents__link toc-highlight">数据库</a></li><li><a href="#集群选项" class="table-of-contents__link toc-highlight">集群选项</a></li><li><a href="#管理-kubeconfig-选项" class="table-of-contents__link toc-highlight">管理 Kubeconfig 选项</a></li></ul></li><li><a href="#高级选项" class="table-of-contents__link toc-highlight">高级选项</a><ul><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#listeners" class="table-of-contents__link toc-highlight">Listeners</a></li><li><a href="#数据" class="table-of-contents__link toc-highlight">数据</a></li><li><a href="#secret-加密" class="table-of-contents__link toc-highlight">Secret 加密</a></li><li><a href="#网络" class="table-of-contents__link toc-highlight">网络</a></li><li><a href="#存储类" class="table-of-contents__link toc-highlight">存储类</a></li><li><a href="#kubernetes-组件" class="table-of-contents__link toc-highlight">Kubernetes 组件</a></li><li><a href="#kubernetes-进程的自定义标志" class="table-of-contents__link toc-highlight">Kubernetes 进程的自定义标志</a></li><li><a href="#实验选项" class="table-of-contents__link toc-highlight">实验选项</a></li><li><a href="#已弃用选项" class="table-of-contents__link toc-highlight">已弃用选项</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/server" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">server</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s server</h1><p>在本节中，你将学习如何配置 K3s Server。</p><p>请注意，Server 也运行 Agent，因此 Server 也支持 <a href="/zh/cli/agent"><code>k3s agent</code> 文档</a>中列出的所有配置选项。</p><p>在本文中，选项作为 CLI 标志传递，但是也可以作为配置文件选项传递。有关使用 YAML 配置文件的更多信息，请参阅<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>文档。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="关键配置值">关键配置值<a href="#关键配置值" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>以下选项必须在集群中的所有 Server 上设置为相同的值。如果不这样做，新 Server 将无法加入集群（使用嵌入式 etcd 时），或集群将无法正确运行（使用外部数据存储时）。</p><ul><li><code>--agent-token</code></li><li><code>--cluster-cidr</code></li><li><code>--cluster-dns</code></li><li><code>--cluster-domain</code></li><li><code>--disable-cloud-controller</code></li><li><code>--disable-helm-controller</code></li><li><code>--disable-network-policy</code></li><li><code>--disable-servicelb</code></li><li><code>--egress-selector-mode</code></li><li><code>--flannel-backend</code></li><li><code>--flannel-external-ip</code></li><li><code>--flannel-ipv6-masq</code></li><li><code>--secrets-encryption</code></li><li><code>--service-cidr</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="常用选项">常用选项<a href="#常用选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据库">数据库<a href="#数据库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code> value</td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>指定 etcd、Mysql、Postgres 或 Sqlite（默认）数据源名称</td></tr><tr><td><code>--datastore-cafile</code> value</td><td><code>K3S_DATASTORE_CAFILE</code></td><td>用于保护数据存储后端通信的 TLS CA 文件</td></tr><tr><td><code>--datastore-certfile</code> value</td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>用于保护数据存储后端通信的 TLS 证书文件</td></tr><tr><td><code>--datastore-keyfile</code> value</td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>用于保护数据存储后端通信的 TLS 密钥文件</td></tr><tr><td><code>--etcd-expose-metrics</code></td><td>N/A</td><td>向客户端接口公开 etcd 指标（默认值：false）</td></tr><tr><td><code>--etcd-disable-snapshots</code></td><td>N/A</td><td>禁用自动 etcd 快照</td></tr><tr><td><code>--etcd-snapshot-name</code> value</td><td>N/A</td><td>设置 etcd 快照的基本名称。默认值：etcd-snapshot-<code>&lt;unix-timestamp&gt;</code>（默认值：“etcd-snapshot”）</td></tr><tr><td><code>--etcd-snapshot-schedule-cron</code> value</td><td>N/A</td><td>cron 规范中的快照间隔时间。eg. 每 5 小时 &#x27;0 <em>/5 <em> <!-- -->*<!-- --> </em>&#x27;（默认值：&quot;0 </em>/12 <!-- -->*<!-- --> <!-- -->*<!-- --> <!-- -->*<!-- -->&quot;）</td></tr><tr><td><code>--etcd-snapshot-retention</code> value</td><td>N/A</td><td>要保留的快照数量（默认值：5）</td></tr><tr><td><code>--etcd-snapshot-dir</code> value</td><td>N/A</td><td>保存数据库快照的目录（默认值：${data-dir}/db/snapshots）</td></tr><tr><td><code>--etcd-s3</code></td><td>N/A</td><td>启用备份到 S3</td></tr><tr><td><code>--etcd-s3-endpoint</code> value</td><td>N/A</td><td>S3 端点 URL（默认值：“s3.amazonaws.com”）</td></tr><tr><td><code>--etcd-s3-endpoint-ca</code> value</td><td>N/A</td><td>S3 自定义 CA 证书，用于连接到 S3 端点</td></tr><tr><td><code>--etcd-s3-skip-ssl-verify</code></td><td>N/A</td><td>禁用 S3 SSL 证书验证</td></tr><tr><td><code>--etcd-s3-access-key</code> value</td><td><code>AWS_ACCESS_KEY_ID</code></td><td>S3 access key</td></tr><tr><td><code>--etcd-s3-secret-key</code> value</td><td><code>AWS_SECRET_ACCESS_KEY</code></td><td>S3 secret key</td></tr><tr><td><code>--etcd-s3-bucket</code> value</td><td>N/A</td><td>S3 存储桶名称</td></tr><tr><td><code>--etcd-s3-region</code> value</td><td>N/A</td><td>S3 区域/存储桶位置（可选）（默认值：“us-east-1”）</td></tr><tr><td><code>--etcd-s3-folder</code> value</td><td>N/A</td><td>S3 文件夹</td></tr><tr><td><code>--etcd-s3-insecure</code></td><td>通过 HTTPS 禁用 S3</td><td></td></tr><tr><td><code>--etcd-s3-timeout</code> value</td><td>S3 超时（默认值：5m0s）</td><td></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="集群选项">集群选项<a href="#集群选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--token</code> value, <code>-t</code> value</td><td><code>K3S_TOKEN</code></td><td>共享密钥，用于将 server 或 agent 加入集群</td></tr><tr><td><code>--token-file</code> value</td><td><code>K3S_TOKEN_FILE</code></td><td>包含 cluster-secret/token 的文件</td></tr><tr><td><code>--agent-token</code> value</td><td><code>K3S_AGENT_TOKEN</code></td><td>共享密钥，用于将 agent 加入集群，但不能用于 server</td></tr><tr><td><code>--agent-token-file</code> value</td><td><code>K3S_AGENT_TOKEN_FILE</code></td><td>包含 agent secret 的文件</td></tr><tr><td><code>--server</code> value</td><td><code>K3S_URL</code></td><td>要连接的 server，用于加入集群</td></tr><tr><td><code>--cluster-init</code></td><td><code>K3S_CLUSTER_INIT</code></td><td>使用嵌入式 Etcd 初始化新集群</td></tr><tr><td><code>--cluster-reset</code></td><td><code>K3S_CLUSTER_RESET</code></td><td>忘记所有对等点，成为新集群的唯一成员</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="管理-kubeconfig-选项">管理 Kubeconfig 选项<a href="#管理-kubeconfig-选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--write-kubeconfig value, -o</code> value</td><td><code>K3S_KUBECONFIG_OUTPUT</code></td><td>将 admin 客户端的 kubeconfig 写入此文件</td></tr><tr><td><code>--write-kubeconfig-mode</code> value</td><td><code>K3S_KUBECONFIG_MODE</code></td><td>使用此<a href="https://en.wikipedia.org/wiki/Chmod" target="_blank" rel="noopener noreferrer">模式</a>写入 kubeconfig。kubeconfig 文件归 root 所有，并默认使用 600 模式写入。如果将模式改为 644，主机上的其他非特权用户将能读取它。</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="高级选项">高级选项<a href="#高级选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="logging">Logging<a href="#logging" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--debug</code></td><td>N/A</td><td>打开 debug 日志</td></tr><tr><td><code>-v</code> value</td><td>0</td><td>表示日志级别详细程度的数字</td></tr><tr><td><code>--vmodule</code> value</td><td>N/A</td><td>FILE_PATTERN=LOG_LEVEL 格式，用逗号分隔的列表，用于文件过滤日志</td></tr><tr><td><code>--log value, -l</code> value</td><td>N/A</td><td>记录到文件</td></tr><tr><td><code>--alsologtostderr</code></td><td>N/A</td><td>记录到标准错误以及文件（如果设置）</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="listeners">Listeners<a href="#listeners" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--bind-address</code> value</td><td>0.0.0.0</td><td>K3s 绑定地址</td></tr><tr><td><code>--https-listen-port</code> value</td><td>6443</td><td>HTTPS 监听端口</td></tr><tr><td><code>--advertise-address</code> value</td><td>node-external-ip/node-ip</td><td>IPv4 地址，apiserver 使用该地址向集群成员通告</td></tr><tr><td><code>--advertise-port</code> value</td><td>listen-port/0</td><td>apiserver 用于向集群成员通告的端口</td></tr><tr><td><code>--tls-san</code> value</td><td>N/A</td><td>在 TLS 证书上添加其他主机名或 IPv4/IPv6 地址作为 Subject Alternative Name</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据">数据<a href="#数据" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir value, -d</code> value</td><td><code>/var/lib/rancher/k3s</code>，如果不是 root，则为 <code>${HOME}/.rancher/k3s</code></td><td>保存状态的文件夹</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密">Secret 加密<a href="#secret-加密" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--secrets-encryption</code></td><td>false</td><td>启用 secret 静态加密</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="网络">网络<a href="#网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>默认</th><th>描述</th></tr></thead><tbody><tr><td><code>--cluster-cidr</code> value</td><td>&quot;10.42.0.0/16&quot;</td><td>用于 pod IP 的 IPv4/IPv6 网络 CIDR</td></tr><tr><td><code>--service-cidr</code> value</td><td>&quot;10.43.0.0/16&quot;</td><td>用于服务 IP 的 IPv4/IPv6 网络 CIDR</td></tr><tr><td><code>--service-node-port-range</code> value</td><td>&quot;30000-32767&quot;</td><td>为具有 NodePort 可见性的服务保留的端口范围</td></tr><tr><td><code>--cluster-dns</code> value</td><td>&quot;10.43.0.10&quot;</td><td>用于 coredns 服务的 IPv4 集群 IP。需要在 service-cidr 范围内</td></tr><tr><td><code>--cluster-domain</code> value</td><td>&quot;cluster.local&quot;</td><td>集群域名</td></tr><tr><td><code>--flannel-backend</code> value</td><td>&quot;vxlan&quot;</td><td>“none”、“vxlan”、“ipsec”（已弃用）、“host-gw”、“wireguard-native” 或 “wireguard”（已弃用）中的其中一个</td></tr><tr><td><code>--flannel-ipv6-masq</code></td><td>&quot;N/A&quot;</td><td>为 pod 启用 IPv6 伪装</td></tr><tr><td><code>--flannel-external-ip</code></td><td>&quot;N/A&quot;</td><td>将节点外部 IP 地址用于 Flannel 流量</td></tr><tr><td><code>--servicelb-namespace</code> value</td><td>&quot;kube-system&quot;</td><td>servicelb 组件的 pod 命名空间</td></tr><tr><td><code>--egress-selector-mode</code> value</td><td>&quot;agent&quot;</td><td>仅支持： <ul><li>disabled：apiserver 不使用 agent 隧道与节点通信。要求 server 运行 agent，并直接连接到 agent 上的 kubelet，否则 apiserver 将无法访问 service 端点或执行 kubectl exec 和 kubectl 日志。</li><li>agent：apiserver 使用 agent 隧道与节点通信。节点允许环回地址的隧道连接。要求 server 也运行 agent，否则 apiserver 将无法访问 service 端点。K3s 的历史默认值。</li><li> pod：apiserver 使用 agent 隧道与节点和 service 端点通信，通过监视节点将端点连接路由到正确的 agent。节点允许环回地址或分配给节点的 CIDR 的隧道连接。</li><li>  cluster：apiserver 使用 agent 隧道与节点和 service 端点通信，通过监视端点将端点连接路由到正确的 agent。节点允许环回地址或配置的集群 CIDR 范围的隧道连接。</li></ul></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="存储类">存储类<a href="#存储类" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--default-local-storage-path</code> value</td><td>本地制备器存储类的默认本地存储路径</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-组件">Kubernetes 组件<a href="#kubernetes-组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--disable</code> value</td><td>请参阅<a href="/zh/installation/packaged-components#%E4%BD%BF%E7%94%A8---disable-%E6%A0%87%E5%BF%97">使用 <code>--disable</code> 标志</a>。</td></tr><tr><td><code>--disable-scheduler</code></td><td>禁用 Kubernetes 默认调度程序</td></tr><tr><td><code>--disable-cloud-controller</code></td><td>禁用 k3s 默认云 Controller Manager</td></tr><tr><td><code>--disable-kube-proxy</code></td><td>禁用运行 kube-proxy</td></tr><tr><td><code>--disable-network-policy</code></td><td>禁用 K3s 默认网络策略控制器</td></tr><tr><td><code>--disable-helm-controller</code></td><td>禁用 Helm 控制器</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-进程的自定义标志">Kubernetes 进程的自定义标志<a href="#kubernetes-进程的自定义标志" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--etcd-arg</code> value</td><td>etcd 进程的自定义标志</td></tr><tr><td><code>--kube-apiserver-arg</code> value</td><td>kube-apiserver 进程的自定义标志</td></tr><tr><td><code>--kube-scheduler-arg</code> value</td><td>kube-scheduler 进程的自定义标志</td></tr><tr><td><code>--kube-controller-manager-arg</code> value</td><td>kube-controller-manager 进程的自定义标志</td></tr><tr><td><code>--kube-cloud-controller-manager-arg</code> value</td><td>kube-cloud-controller-manager 进程的自定义标志</td></tr><tr><td><code>--kubelet-arg</code> value</td><td>kubelet 进程的自定义标志</td></tr><tr><td><code>--kube-proxy-arg</code> value</td><td>kube-proxy 进程的自定义标志</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="实验选项">实验选项<a href="#实验选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--rootless</code></td><td>无根运行</td></tr><tr><td><code>--enable-pprof</code></td><td>在 supervisor 端口上启用 pprof 端点</td></tr><tr><td><code>--docker</code></td><td>使用 cri-dockerd 而不是 containerd</td></tr><tr><td><code>--prefer-bundled-bin</code></td><td>偏向打包的用户空间二进制文件，而不是主机二进制文件</td></tr><tr><td><code>--disable-agent</code></td><td>请参阅<a href="/zh/advanced#%E8%BF%90%E8%A1%8C%E6%97%A0-agent-%E7%9A%84-server%E5%AE%9E%E9%AA%8C%E6%80%A7">运行无 Agent 的 Server（实验性）</a></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="已弃用选项">已弃用选项<a href="#已弃用选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--no-flannel</code></td><td>N/A</td><td>使用 <code>--flannel-backend=none</code></td></tr><tr><td><code>--no-deploy</code> value</td><td>N/A</td><td>使用 <code>--disable</code></td></tr><tr><td><code>--cluster-secret</code> value</td><td><code>K3S_CLUSTER_SECRET</code></td><td>使用 <code>--token</code></td></tr><tr><td><code>--flannel-backend</code> wireguard</td><td>N/A</td><td>使用 <code>--flannel-backend=wireguard-native</code></td></tr><tr><td><code>--flannel-backend</code> value=option1=value</td><td>N/A</td><td>使用 <code>--flannel-conf</code> 指定带有后端配置的 Flannel 配置文件</td></tr></tbody></table><h1>K3s Server CLI 帮助</h1><blockquote><p>如果某个选项出现在括号中（例如 <code>[$K3S_TOKEN]</code>），该选项可以作为该名称的环境变量传入。</p></blockquote><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server - Run management server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">OPTIONS</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --config FILE, -c FILE                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">config</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Load configuration from FILE </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CONFIG_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --debug                                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Turn on debug logs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DEBUG</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   -v value                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the log level verbosity </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --vmodule value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Comma-separated list of </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">FILE_PATTERN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">LOG_LEVEL settings </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> file-filtered logging</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --log value, -l value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --alsologtostderr                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">logging</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Log to standard error as well as </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">if </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --bind-address value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> k3s </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">bind</span><span class="token plain"> address </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --https-listen-port value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> HTTPS listen port </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-address value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 address that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: node-external-ip/node-ip</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --advertise-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port that apiserver uses to advertise to members of the cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: listen-port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --tls-san value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">listener</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --data-dir value, -d value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">data</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Folder to hold state </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: /var/lib/rancher/k3s or </span><span class="token variable" style="color:rgb(191, 199, 213)">${</span><span class="token variable environment constant" style="color:rgb(130, 170, 255)">HOME</span><span class="token variable" style="color:rgb(191, 199, 213)">}</span><span class="token plain">/.rancher/k3s </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> not root</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-cidr value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 network CIDRs to use </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">service</span><span class="token plain"> IPs </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --service-node-port-range value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Port range to reserve </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> services with NodePort visibility </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;30000-32767&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-dns value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4 Cluster IP </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> coredns service. Should be </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> your service-cidr range </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-domain value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Cluster Domain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;cluster.local&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-backend value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> backend</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;=</span><span class="token plain">option1</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val1,option2</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">val</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">2</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> where backend is one of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;none&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;vxlan&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ipsec&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;host-gw&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard-native&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;wireguard&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">deprecated</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;vxlan&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-ipv6-masq                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable IPv6 masquerading </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-external-ip                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> external IP addresses </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> Flannel traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --egress-selector-mode value               </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> One of </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;agent&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;cluster&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;pod&#x27;</span><span class="token plain">, </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;disabled&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --servicelb-namespace value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Namespace of the pods </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the servicelb component </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;kube-system&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig value, -o value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> admin client to this </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_OUTPUT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --write-kubeconfig-mode value              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">client</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Write kubeconfig with this mode </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_KUBECONFIG_MODE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token value, -t value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a server or agent to a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --token-file value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the token </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Shared secret used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> agents to the cluster, but not servers </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --agent-token-file value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> File containing the agent secret </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_AGENT_TOKEN_FILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --server value, -s value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Server to connect to, used to </span><span class="token function" style="color:rgb(130, 170, 255)">join</span><span class="token plain"> a cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_URL</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-init                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Initialize a new cluster using embedded Etcd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_INIT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Forget all peers and become sole member of a new cluster </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_CLUSTER_RESET</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --cluster-reset-restore-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Path to snapshot </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> to be restored</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-apiserver-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-apiserver process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-arg value                           </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> etcd process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-controller-manager-arg value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-scheduler-arg value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-scheduler process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-cloud-controller-manager-arg value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-cloud-controller-manager process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-endpoint value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Specify etcd, Mysql, Postgres, or Sqlite </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> data </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">source</span><span class="token plain"> name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_ENDPOINT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-cafile value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS Certificate Authority </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CAFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-certfile value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS certification </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_CERTFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --datastore-keyfile value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> TLS key </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> used to secure datastore backend communication </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_DATASTORE_KEYFILE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-expose-metrics                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Expose etcd metrics to client interface. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token boolean" style="color:rgb(255, 88, 116)">false</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-disable-snapshots                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable automatic etcd snapshots</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-name value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Set the base name of etcd snapshots </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: etcd-snapshot-</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">unix-timestamp</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;etcd-snapshot&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-schedule-cron value        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Snapshot interval </span><span class="token function" style="color:rgb(130, 170, 255)">time</span><span class="token plain"> </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cron</span><span class="token plain"> spec. eg. every </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain"> hours </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;* */5 * * *&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0 */12 * * *&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-retention value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Number of snapshots to retain </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-dir value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Directory to save db snapshots. </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token variable" style="color:rgb(191, 199, 213)">${data-dir}</span><span class="token plain">/db/snapshots</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-snapshot-compress                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Compress etcd snapshot</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable backup to S3</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 endpoint url </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;s3.amazonaws.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-endpoint-ca value                </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 custom CA cert to connect to S3 endpoint</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-skip-ssl-verify                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 SSL certificate validation</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-access-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 access key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_ACCESS_KEY_ID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-secret-key value                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 secret key </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$AWS_SECRET_ACCESS_KEY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-bucket value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 bucket name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-region value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 region / bucket location </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">optional</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;us-east-1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-folder value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 folder</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-insecure                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disables S3 over HTTPS</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --etcd-s3-timeout value                    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">db</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> S3 </span><span class="token function" style="color:rgb(130, 170, 255)">timeout</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: 5m0s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --default-local-storage-path value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Default </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> storage path </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">local</span><span class="token plain"> provisioner storage class</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable value                            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Do not deploy packaged components and delete any deployed components </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">valid items: coredns, servicelb, traefik, local-storage, metrics-server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-scheduler                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Kubernetes default scheduler</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-cloud-controller                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default cloud controller manager</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-kube-proxy                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable running kube-proxy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-network-policy                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable k3s default network policy controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --disable-helm-controller                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">components</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable Helm controller</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-name value                          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Node name </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_NODE_NAME</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --with-node-id                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Append </span><span class="token function" style="color:rgb(130, 170, 255)">id</span><span class="token plain"> to </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"> name</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-label value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering and starting kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of labels</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-taint value                         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Registering kubelet with </span><span class="token builtin class-name" style="color:rgb(255, 203, 107)">set</span><span class="token plain"> of taints</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-bin-dir value  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the directory where credential provider plugin binaries are located </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/bin&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --image-credential-provider-config value   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> The path to the credential provider plugin config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/var/lib/rancher/credentialprovider/config.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --docker                                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Use cri-dockerd instead of containerd</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --container-runtime-endpoint value         </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Disable embedded containerd and use the CRI socket at the given path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> when used with --docker this sets the </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> socket path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --pause-image value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized pause image </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> containerd or </span><span class="token function" style="color:rgb(130, 170, 255)">docker</span><span class="token plain"> sandbox </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;rancher/mirrored-pause:3.6&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --snapshotter value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default containerd snapshotter </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;overlayfs&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --private-registry value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry configuration </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;/etc/rancher/k3s/registries.yaml&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --system-default-registry value            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/runtime</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Private registry to be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> all system images </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SYSTEM_DEFAULT_REGISTRY</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-ip value, -i value                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --node-external-ip value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> IPv4/IPv6 external IP addresses to advertise </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">node</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --resolv-conf value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kubelet resolv.conf </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_RESOLV_CONF</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-iface value                      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel interface</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-conf value                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --flannel-cni-conf value                   </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/networking</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Override default flannel cni config </span><span class="token function" style="color:rgb(130, 170, 255)">file</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kubelet-arg value                        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kubelet process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --kube-proxy-arg value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/flags</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Customized flag </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> kube-proxy process</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --protect-kernel-defaults                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Kernel tuning behavior. If set, error </span><span class="token keyword" style="font-style:italic">if</span><span class="token plain"> kernel tunables are different than kubelet defaults.</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --secrets-encryption                       Enable secret encryption at rest</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --enable-pprof                             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable pprof endpoint on supervisor port</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --rootless                                 </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Run rootless</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --prefer-bundled-bin                       </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">experimental</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Prefer bundled userspace binaries over </span><span class="token function" style="color:rgb(130, 170, 255)">host</span><span class="token plain"> binaries</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --selinux                                  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Enable SELinux </span><span class="token keyword" style="font-style:italic">in</span><span class="token plain"> containerd </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_SELINUX</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --lb-server-port value                     </span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">agent/node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> Local port </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">less</span><span class="token plain"> than this port will also be used </span><span class="token keyword" style="font-style:italic">for</span><span class="token plain"> the apiserver client load-balancer.</span><span class="token punctuation" style="color:rgb(199, 146, 234)">(</span><span class="token plain">default: </span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token punctuation" style="color:rgb(199, 146, 234)">)</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token variable" style="color:rgb(191, 199, 213)">$K3S_LB_SERVER_PORT</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/server.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">CLI 工具</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli/agent"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">agent</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#关键配置值" class="table-of-contents__link toc-highlight">关键配置值</a></li><li><a href="#常用选项" class="table-of-contents__link toc-highlight">常用选项</a><ul><li><a href="#数据库" class="table-of-contents__link toc-highlight">数据库</a></li><li><a href="#集群选项" class="table-of-contents__link toc-highlight">集群选项</a></li><li><a href="#管理-kubeconfig-选项" class="table-of-contents__link toc-highlight">管理 Kubeconfig 选项</a></li></ul></li><li><a href="#高级选项" class="table-of-contents__link toc-highlight">高级选项</a><ul><li><a href="#logging" class="table-of-contents__link toc-highlight">Logging</a></li><li><a href="#listeners" class="table-of-contents__link toc-highlight">Listeners</a></li><li><a href="#数据" class="table-of-contents__link toc-highlight">数据</a></li><li><a href="#secret-加密" class="table-of-contents__link toc-highlight">Secret 加密</a></li><li><a href="#网络" class="table-of-contents__link toc-highlight">网络</a></li><li><a href="#存储类" class="table-of-contents__link toc-highlight">存储类</a></li><li><a href="#kubernetes-组件" class="table-of-contents__link toc-highlight">Kubernetes 组件</a></li><li><a href="#kubernetes-进程的自定义标志" class="table-of-contents__link toc-highlight">Kubernetes 进程的自定义标志</a></li><li><a href="#实验选项" class="table-of-contents__link toc-highlight">实验选项</a></li><li><a href="#已弃用选项" class="table-of-contents__link toc-highlight">已弃用选项</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/cli/token.html b/zh/cli/token.html
index 4f8b86f3c..579195ed7 100644
--- a/zh/cli/token.html
+++ b/zh/cli/token.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">token | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/token"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="token | K3s"><meta data-rh="true" name="description" content="K3s 使用 Token 来保护加入节点的过程。Token 用于验证加入的节点和集群。"><meta data-rh="true" property="og:description" content="K3s 使用 Token 来保护加入节点的过程。Token 用于验证加入的节点和集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/token"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/token" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/token" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">token | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cli/token"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="token | K3s"><meta data-rh="true" name="description" content="K3s 使用 Token 来保护加入节点的过程。Token 用于验证加入的节点和集群。"><meta data-rh="true" property="og:description" content="K3s 使用 Token 来保护加入节点的过程。Token 用于验证加入的节点和集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cli/token"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cli/token" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cli/token" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cli/token" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">token</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s token</h1><p>K3s 使用 Token 来保护加入节点的过程。Token 用于验证加入的节点和集群。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-格式">Token 格式<a href="#token-格式" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s Token 可以使用安全（secure）或短（short）格式。安全格式能让客户端在发送凭证之前验证加入的集群的身份，因此首选安全格式。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secure">Secure<a href="#secure" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>安全 Token 格式（有时称为“完整” Token 格式）包含以下部分：</p><p><code>&lt;prefix&gt;&lt;cluster CA hash&gt;::&lt;credentials&gt;</code></p><ul><li><code>prefix</code>：固定的 <code>K10</code> 前缀，用来标识 token 格式</li><li><code>cluster CA hash</code>：集群的 Server CA 证书的哈希，用于为加入的节点验证 Server。<ul><li>对于自签名 CA 证书，这是存储在磁盘上的 PEM 格式证书的 SHA256 总和。</li><li>对于自定义 CA 证书，这是根证书的 DER 编码的 SHA256 总和，也称为证书指纹。</li></ul></li><li><code>credentials</code>：用户名和密码，或持有者 Token，用于验证加入集群的节点。</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="tls-引导">TLS 引导<a href="#tls-引导" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>如果指定了安全 Token，在传输凭证之前，加入的节点会执行以下步骤来认证连接的 Server：</p><ol><li>禁用 TLS 验证后，从要加入的 Server 上的 <code>/cacerts</code> 下载 CA 包。</li><li>如上所述计算 CA 证书的 SHA256 哈希值。</li><li>比较计算出的 SHA256 哈希值与 Token 中的哈希值。</li><li>如果哈希值匹配，则验证 Server 提供的证书是否可以由 Server 的 CA 包进行验证。</li><li>如果 Server 证书有效，你需要使用基础或持有者 Token 认证（根据 Token 的类型）来提供加入集群的凭证。</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="short">Short<a href="#short" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>短 Token 格式仅包括用于验证加入集群的节点的密码或持有者 Token。</p><p>如果使用了短 Token，则加入的节点会隐式信任 Server 提供的 CA 包，以及跳过 TLS 引导过程中的步骤 2-4。初始连接可能容易受到<a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack" target="_blank" rel="noopener noreferrer">中间人</a>攻击。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-类型">Token 类型<a href="#token-类型" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 支持三种类型的 Token。默认情况下只有 Server Token 可用，其他类型的 Token 必须由管理员配置或创建。</p><table><thead><tr><th>类型</th><th>CLI 选项</th><th>环境变量</th></tr></thead><tbody><tr><td>Server</td><td><code>--token</code></td><td><code>K3S_TOKEN</code></td></tr><tr><td>Agent</td><td><code>--agent-token</code></td><td><code>K3S_AGENT_TOKEN</code></td></tr><tr><td>Bootstrap</td><td><code>n/a</code></td><td><code>n/a</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="server">Server<a href="#server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果在启动集群中的第一个 Server 时未提供 Token，则会使用随机密码创建。Server Token 始终以安全格式写入 <code>/var/lib/rancher/k3s/server/token</code>。</p><p>Server Token 可用于将 Server 和 Agent 节点加入集群。一旦创建了集群，它就无法更改，任何有权访问 Server Token 的用户基本上都拥有集群的完全管理员访问权限。因此，你需要小心保管 Token。</p><p>Server Token 还用作密钥的 <a href="https://en.wikipedia.org/wiki/PBKDF2" target="_blank" rel="noopener noreferrer">PBKDF2</a> 密码，该密钥用于加密持久保存到数据存储的机密信息，例如 Secret 加密配置、wireguard 密钥，集群 CA 证书的私钥以及 service-account Token。因此，Token 必须与集群数据存储一起备份。</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>除非使用了自定义 CA 证书，否则在启动集群的第一个 Server 时只能使用短 Token 格式（仅密码）。这是因为只有在 Server 生成自签名集群 CA 证书后才能知道集群 CA 哈希值。</p></div></div><p>有关使用自定义 CA 证书的更多信息，请参阅 <a href="/zh/cli/certificate"><code>k3s certificate</code> 文档</a>。<br>
-<!-- -->有关备份集群的更多信息，请参阅<a href="/zh/datastore/backup-restore">备份和恢复</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent">Agent<a href="#agent" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>默认情况下，Agent Token 与 Server Token 相同。你可以通过更改集群中所有 Server 上的 CLI 选项或环境变量，在集群启动之前或之后设置 Agent Token。Agent Token 类似于 Server Token，是静态配置的并且不会过期。</p><p>Agent Token 以安全格式写入 <code>/var/lib/rancher/k3s/server/agent-token</code>。如果未指定 Agent Token，则此文件是指向 Server Token 的链接。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="bootstrap">Bootstrap<a href="#bootstrap" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 2023-02 版本（v1.26.2+k3s1、v1.25.7+k3s1、v1.24.11+k3s1、v1.23.17+k3s1）开始，支持 <code>k3s token</code> 命令以及使用 Bootstrap Token 加入节点。</p></div></div><p>K3s 支持动态生成、自动过期的 agent bootstrap token。Bootstrap Token 只能用于加入 Agent。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-1">k3s token<a href="#k3s-token-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s Bootstrap Token 使用与 <code>kubeadm token</code> Bootstrap Token 相同的生成和验证代码，<code>k3s token</code> CLI 也是类似的。</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token - Manage bootstrap tokens</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token command [command options] [arguments...]</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">COMMANDS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   create    Create bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   delete    Delete bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   generate  Generate and print a bootstrap token, but do not create it on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   list      List bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --help, -h  show help</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-create-token"><code>k3s token create [token]</code><a href="#k3s-token-create-token" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>创建一个新 Token。<code>[token]</code> 是要写入的实际 Token，由 <code>k3s token generate</code> 生成。如果没有指定 Token，将生成一个随机 Token。</p><p>安全格式的 Token（包括集群 CA 哈希）会写入到 stdout。Token 的 secret 部分只显示一次，因此你需要保存此命令的输出。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr><tr><td><code>--description</code> value</td><td>有关如何使用此 Token 的描述</td></tr><tr><td><code>--groups</code> value</td><td>该 Token 用于认证的其他组（默认值：“system:bootstrappers:k3s:default-node-token”）</td></tr><tr><td><code>--ttl</code> value</td><td>自动删除 Token 的时间（例如 1s、2m、3h）。如果设置为 <code>0</code>，Token 将永不过期（默认值：24h0m0s）</td></tr><tr><td><code>--usages</code> value</td><td>描述可使用此 Token 的方式。(默认值：&quot;signing,authentication&quot;)</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-delete"><code>k3s token delete</code><a href="#k3s-token-delete" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>删除一个或多个 Token。你可以提供完整的 Token，也可以仅提供 Token ID。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-generate"><code>k3s token generate</code><a href="#k3s-token-generate" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>生成一个随机的 Bootstrap Token。</p><p>你不需要使用此命令来生成 Token。只要格式为 &quot;<!-- -->[a-z0-9]<!-- -->{6}.<!-- -->[a-z0-9]<!-- -->{16}&quot;（其中第一部分是 Token ID，第二部分是 Secret），你就可以自己进行操作。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-list"><code>k3s token list</code><a href="#k3s-token-list" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>列出 Bootstrap Token，这将显示 Token 的 ID、描述和剩余 TTL。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr><tr><td><code>--output</code> value</td><td>输出格式。可选值：text、json（默认值：<code>text</code>）</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/token.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/secrets-encrypt"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">secrets-encrypt</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/reference"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">参考</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#token-格式" class="table-of-contents__link toc-highlight">Token 格式</a><ul><li><a href="#secure" class="table-of-contents__link toc-highlight">Secure</a></li><li><a href="#short" class="table-of-contents__link toc-highlight">Short</a></li></ul></li><li><a href="#token-类型" class="table-of-contents__link toc-highlight">Token 类型</a><ul><li><a href="#server" class="table-of-contents__link toc-highlight">Server</a></li><li><a href="#agent" class="table-of-contents__link toc-highlight">Agent</a></li><li><a href="#bootstrap" class="table-of-contents__link toc-highlight">Bootstrap</a></li></ul></li><li><a href="#k3s-token-1" class="table-of-contents__link toc-highlight">k3s token</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cli/token" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/server">server</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/agent">agent</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/certificate">certificate</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/etcd-snapshot">etcd-snapshot</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/cli/secrets-encrypt">secrets-encrypt</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/cli/token">token</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/cli"><span itemprop="name">CLI 工具</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">token</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>k3s token</h1><p>K3s 使用 Token 来保护加入节点的过程。Token 用于验证加入的节点和集群。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-格式">Token 格式<a href="#token-格式" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s Token 可以使用安全（secure）或短（short）格式。安全格式能让客户端在发送凭证之前验证加入的集群的身份，因此首选安全格式。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="secure">Secure<a href="#secure" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>安全 Token 格式（有时称为“完整” Token 格式）包含以下部分：</p><p><code>&lt;prefix&gt;&lt;cluster CA hash&gt;::&lt;credentials&gt;</code></p><ul><li><code>prefix</code>：固定的 <code>K10</code> 前缀，用来标识 token 格式</li><li><code>cluster CA hash</code>：集群的 Server CA 证书的哈希，用于为加入的节点验证 Server。<ul><li>对于自签名 CA 证书，这是存储在磁盘上的 PEM 格式证书的 SHA256 总和。</li><li>对于自定义 CA 证书，这是根证书的 DER 编码的 SHA256 总和，也称为证书指纹。</li></ul></li><li><code>credentials</code>：用户名和密码，或持有者 Token，用于验证加入集群的节点。</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="tls-引导">TLS 引导<a href="#tls-引导" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>如果指定了安全 Token，在传输凭证之前，加入的节点会执行以下步骤来认证连接的 Server：</p><ol><li>禁用 TLS 验证后，从要加入的 Server 上的 <code>/cacerts</code> 下载 CA 包。</li><li>如上所述计算 CA 证书的 SHA256 哈希值。</li><li>比较计算出的 SHA256 哈希值与 Token 中的哈希值。</li><li>如果哈希值匹配，则验证 Server 提供的证书是否可以由 Server 的 CA 包进行验证。</li><li>如果 Server 证书有效，你需要使用基础或持有者 Token 认证（根据 Token 的类型）来提供加入集群的凭证。</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="short">Short<a href="#short" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>短 Token 格式仅包括用于验证加入集群的节点的密码或持有者 Token。</p><p>如果使用了短 Token，则加入的节点会隐式信任 Server 提供的 CA 包，以及跳过 TLS 引导过程中的步骤 2-4。初始连接可能容易受到<a href="https://en.wikipedia.org/wiki/Man-in-the-middle_attack" target="_blank" rel="noopener noreferrer">中间人</a>攻击。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="token-类型">Token 类型<a href="#token-类型" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 支持三种类型的 Token。默认情况下只有 Server Token 可用，其他类型的 Token 必须由管理员配置或创建。</p><table><thead><tr><th>类型</th><th>CLI 选项</th><th>环境变量</th></tr></thead><tbody><tr><td>Server</td><td><code>--token</code></td><td><code>K3S_TOKEN</code></td></tr><tr><td>Agent</td><td><code>--agent-token</code></td><td><code>K3S_AGENT_TOKEN</code></td></tr><tr><td>Bootstrap</td><td><code>n/a</code></td><td><code>n/a</code></td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="server">Server<a href="#server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果在启动集群中的第一个 Server 时未提供 Token，则会使用随机密码创建。Server Token 始终以安全格式写入 <code>/var/lib/rancher/k3s/server/token</code>。</p><p>Server Token 可用于将 Server 和 Agent 节点加入集群。一旦创建了集群，它就无法更改，任何有权访问 Server Token 的用户基本上都拥有集群的完全管理员访问权限。因此，你需要小心保管 Token。</p><p>Server Token 还用作密钥的 <a href="https://en.wikipedia.org/wiki/PBKDF2" target="_blank" rel="noopener noreferrer">PBKDF2</a> 密码，该密钥用于加密持久保存到数据存储的机密信息，例如 Secret 加密配置、wireguard 密钥，集群 CA 证书的私钥以及 service-account Token。因此，Token 必须与集群数据存储一起备份。</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>除非使用了自定义 CA 证书，否则在启动集群的第一个 Server 时只能使用短 Token 格式（仅密码）。这是因为只有在 Server 生成自签名集群 CA 证书后才能知道集群 CA 哈希值。</p></div></div><p>有关使用自定义 CA 证书的更多信息，请参阅 <a href="/zh/cli/certificate"><code>k3s certificate</code> 文档</a>。<br>
+<!-- -->有关备份集群的更多信息，请参阅<a href="/zh/datastore/backup-restore">备份和恢复</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="agent">Agent<a href="#agent" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>默认情况下，Agent Token 与 Server Token 相同。你可以通过更改集群中所有 Server 上的 CLI 选项或环境变量，在集群启动之前或之后设置 Agent Token。Agent Token 类似于 Server Token，是静态配置的并且不会过期。</p><p>Agent Token 以安全格式写入 <code>/var/lib/rancher/k3s/server/agent-token</code>。如果未指定 Agent Token，则此文件是指向 Server Token 的链接。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="bootstrap">Bootstrap<a href="#bootstrap" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 2023-02 版本（v1.26.2+k3s1、v1.25.7+k3s1、v1.24.11+k3s1、v1.23.17+k3s1）开始，支持 <code>k3s token</code> 命令以及使用 Bootstrap Token 加入节点。</p></div></div><p>K3s 支持动态生成、自动过期的 agent bootstrap token。Bootstrap Token 只能用于加入 Agent。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-1">k3s token<a href="#k3s-token-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s Bootstrap Token 使用与 <code>kubeadm token</code> Bootstrap Token 相同的生成和验证代码，<code>k3s token</code> CLI 也是类似的。</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token - Manage bootstrap tokens</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">USAGE:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   k3s token command [command options] [arguments...]</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">COMMANDS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   create    Create bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   delete    Delete bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   generate  Generate and print a bootstrap token, but do not create it on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   list      List bootstrap tokens on the server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">OPTIONS:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">   --help, -h  show help</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-create-token"><code>k3s token create [token]</code><a href="#k3s-token-create-token" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>创建一个新 Token。<code>[token]</code> 是要写入的实际 Token，由 <code>k3s token generate</code> 生成。如果没有指定 Token，将生成一个随机 Token。</p><p>安全格式的 Token（包括集群 CA 哈希）会写入到 stdout。Token 的 secret 部分只显示一次，因此你需要保存此命令的输出。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr><tr><td><code>--description</code> value</td><td>有关如何使用此 Token 的描述</td></tr><tr><td><code>--groups</code> value</td><td>该 Token 用于认证的其他组（默认值：“system:bootstrappers:k3s:default-node-token”）</td></tr><tr><td><code>--ttl</code> value</td><td>自动删除 Token 的时间（例如 1s、2m、3h）。如果设置为 <code>0</code>，Token 将永不过期（默认值：24h0m0s）</td></tr><tr><td><code>--usages</code> value</td><td>描述可使用此 Token 的方式。(默认值：&quot;signing,authentication&quot;)</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-delete"><code>k3s token delete</code><a href="#k3s-token-delete" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>删除一个或多个 Token。你可以提供完整的 Token，也可以仅提供 Token ID。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-generate"><code>k3s token generate</code><a href="#k3s-token-generate" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>生成一个随机的 Bootstrap Token。</p><p>你不需要使用此命令来生成 Token。只要格式为 &quot;<!-- -->[a-z0-9]<!-- -->{6}.<!-- -->[a-z0-9]<!-- -->{16}&quot;（其中第一部分是 Token ID，第二部分是 Secret），你就可以自己进行操作。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr></tbody></table><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-token-list"><code>k3s token list</code><a href="#k3s-token-list" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>列出 Bootstrap Token，这将显示 Token 的 ID、描述和剩余 TTL。</p><table><thead><tr><th>标志</th><th>描述</th></tr></thead><tbody><tr><td><code>--data-dir</code> value</td><td>保存状态的（数据）文件夹，如果不是 root，则默认为 <code>/var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s</code></td></tr><tr><td><code>--kubeconfig</code> value</td><td>要连接到 <!-- -->[$KUBECONFIG]<!-- --> 的（集群）Server</td></tr><tr><td><code>--output</code> value</td><td>输出格式。可选值：text、json（默认值：<code>text</code>）</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cli/token.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/secrets-encrypt"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">secrets-encrypt</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/reference"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">参考</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#token-格式" class="table-of-contents__link toc-highlight">Token 格式</a><ul><li><a href="#secure" class="table-of-contents__link toc-highlight">Secure</a></li><li><a href="#short" class="table-of-contents__link toc-highlight">Short</a></li></ul></li><li><a href="#token-类型" class="table-of-contents__link toc-highlight">Token 类型</a><ul><li><a href="#server" class="table-of-contents__link toc-highlight">Server</a></li><li><a href="#agent" class="table-of-contents__link toc-highlight">Agent</a></li><li><a href="#bootstrap" class="table-of-contents__link toc-highlight">Bootstrap</a></li></ul></li><li><a href="#k3s-token-1" class="table-of-contents__link toc-highlight">k3s token</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/cluster-access.html b/zh/cluster-access.html
index e61d8edeb..4225aadc6 100644
--- a/zh/cluster-access.html
+++ b/zh/cluster-access.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">集群访问 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cluster-access"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="集群访问 | K3s"><meta data-rh="true" name="description" content="/etc/rancher/k3s/k3s.yaml 中存储的 kubeconfig 文件用于配置对 Kubernetes 集群的访问。如果你已经安装了上游的 Kubernetes 命令行工具（如 kubectl 或 helm)，你需要用正确的 kubeconfig 路径配置它们。这可以通过导出 KUBECONFIG 环境变量或调用 --kubeconfig 命令行标志来完成。有关详细信息，请参阅以下示例。"><meta data-rh="true" property="og:description" content="/etc/rancher/k3s/k3s.yaml 中存储的 kubeconfig 文件用于配置对 Kubernetes 集群的访问。如果你已经安装了上游的 Kubernetes 命令行工具（如 kubectl 或 helm)，你需要用正确的 kubeconfig 路径配置它们。这可以通过导出 KUBECONFIG 环境变量或调用 --kubeconfig 命令行标志来完成。有关详细信息，请参阅以下示例。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cluster-access"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cluster-access" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cluster-access" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">集群访问 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/cluster-access"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="集群访问 | K3s"><meta data-rh="true" name="description" content="/etc/rancher/k3s/k3s.yaml 中存储的 kubeconfig 文件用于配置对 Kubernetes 集群的访问。如果你已经安装了上游的 Kubernetes 命令行工具（如 kubectl 或 helm)，你需要用正确的 kubeconfig 路径配置它们。这可以通过导出 KUBECONFIG 环境变量或调用 --kubeconfig 命令行标志来完成。有关详细信息，请参阅以下示例。"><meta data-rh="true" property="og:description" content="/etc/rancher/k3s/k3s.yaml 中存储的 kubeconfig 文件用于配置对 Kubernetes 集群的访问。如果你已经安装了上游的 Kubernetes 命令行工具（如 kubectl 或 helm)，你需要用正确的 kubeconfig 路径配置它们。这可以通过导出 KUBECONFIG 环境变量或调用 --kubeconfig 命令行标志来完成。有关详细信息，请参阅以下示例。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/cluster-access"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/cluster-access" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/cluster-access" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/cluster-access" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">集群访问</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>集群访问</h1></header><p><code>/etc/rancher/k3s/k3s.yaml</code> 中存储的 kubeconfig 文件用于配置对 Kubernetes 集群的访问。如果你已经安装了上游的 Kubernetes 命令行工具（如 kubectl 或 helm)，你需要用正确的 kubeconfig 路径配置它们。这可以通过导出 <code>KUBECONFIG</code> 环境变量或调用 <code>--kubeconfig</code> 命令行标志来完成。有关详细信息，请参阅以下示例。</p><p>使用 KUBECONFIG 环境变量：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token builtin class-name" style="color:rgb(255, 203, 107)">export</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">KUBECONFIG</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/etc/rancher/k3s/k3s.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>或者在命令中指定 kubeconfig 文件的位置：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm --kubeconfig /etc/rancher/k3s/k3s.yaml </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-kubectl-从外部访问集群">使用 kubectl 从外部访问集群<a href="#使用-kubectl-从外部访问集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>将 <code>/etc/rancher/k3s/k3s.yaml</code> 复制到位于集群外部的主机上的 <code>~/.kube/config</code>。然后，将 <code>server</code> 字段的值替换为你 K3s Server 的 IP 或名称。现在，你可以使用 <code>kubectl</code> 来管理 K3s 集群。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">cluster-loadbalancer</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">升级</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用-kubectl-从外部访问集群" class="table-of-contents__link toc-highlight">使用 kubectl 从外部访问集群</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/cluster-access" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">集群访问</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>集群访问</h1></header><p><code>/etc/rancher/k3s/k3s.yaml</code> 中存储的 kubeconfig 文件用于配置对 Kubernetes 集群的访问。如果你已经安装了上游的 Kubernetes 命令行工具（如 kubectl 或 helm)，你需要用正确的 kubeconfig 路径配置它们。这可以通过导出 <code>KUBECONFIG</code> 环境变量或调用 <code>--kubeconfig</code> 命令行标志来完成。有关详细信息，请参阅以下示例。</p><p>使用 KUBECONFIG 环境变量：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token builtin class-name" style="color:rgb(255, 203, 107)">export</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">KUBECONFIG</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/etc/rancher/k3s/k3s.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>或者在命令中指定 kubeconfig 文件的位置：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">helm --kubeconfig /etc/rancher/k3s/k3s.yaml </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> --all-namespaces</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-kubectl-从外部访问集群">使用 kubectl 从外部访问集群<a href="#使用-kubectl-从外部访问集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>将 <code>/etc/rancher/k3s/k3s.yaml</code> 复制到位于集群外部的主机上的 <code>~/.kube/config</code>。然后，将 <code>server</code> 字段的值替换为你 K3s Server 的 IP 或名称。现在，你可以使用 <code>kubectl</code> 来管理 K3s 集群。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/cluster-access/cluster-access.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">cluster-loadbalancer</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">升级</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用-kubectl-从外部访问集群" class="table-of-contents__link toc-highlight">使用 kubectl 从外部访问集群</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/datastore.html b/zh/datastore.html
index 03f438fbb..277917da8 100644
--- a/zh/datastore.html
+++ b/zh/datastore.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">集群数据存储 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="集群数据存储 | K3s"><meta data-rh="true" name="description" content="K3s 与其他 Kubernetes 发行版的不同之处，在于 K3s 支持使用 etcd 以外的数据库来运行 Kubernetes。该功能让 Kubernetes 运维更加灵活。你可以根据实际情况选择合适的数据存储选项。例如："><meta data-rh="true" property="og:description" content="K3s 与其他 Kubernetes 发行版的不同之处，在于 K3s 支持使用 etcd 以外的数据库来运行 Kubernetes。该功能让 Kubernetes 运维更加灵活。你可以根据实际情况选择合适的数据存储选项。例如："><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">集群数据存储 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="集群数据存储 | K3s"><meta data-rh="true" name="description" content="K3s 与其他 Kubernetes 发行版的不同之处，在于 K3s 支持使用 etcd 以外的数据库来运行 Kubernetes。该功能让 Kubernetes 运维更加灵活。你可以根据实际情况选择合适的数据存储选项。例如："><meta data-rh="true" property="og:description" content="K3s 与其他 Kubernetes 发行版的不同之处，在于 K3s 支持使用 etcd 以外的数据库来运行 Kubernetes。该功能让 Kubernetes 运维更加灵活。你可以根据实际情况选择合适的数据存储选项。例如："><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">集群数据存储</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>集群数据存储</h1></header><p>K3s 与其他 Kubernetes 发行版的不同之处，在于 K3s 支持使用 etcd 以外的数据库来运行 Kubernetes。该功能让 Kubernetes 运维更加灵活。你可以根据实际情况选择合适的数据存储选项。例如：</p><ul><li>如果你的团队没有操作 etcd 的专业知识，你可以选择 MySQL 或 PostgreSQL 等企业级 SQL 数据库。</li><li>如果你需要在 CI/CD 环境中运行一个简单、短期的集群，你可以使用嵌入式 SQLite 数据库。</li><li>如果你希望在边缘部署 Kubernetes 并需要高可用解决方案，但又无法承担在边缘管理数据库的运营开销，你可以使用 K3s 的嵌入式 HA 数据存储，该数据存储构建在嵌入式 etcd 之上。</li></ul><p>K3s 支持以下数据存储选项：</p><ul><li><strong>嵌入式 <a href="https://www.sqlite.org/index.html" target="_blank" rel="noopener noreferrer">SQLite</a></strong><br>SQLite 不能用于具有多个 Server 的集群。<br>SQLite 是默认的数据存储，如果没有其他数据存储配置，并且磁盘上没有嵌入式 etcd 数据库文件，将使用 SQLite。</li><li><strong>嵌入式 etcd</strong><br>有关在具有多个 Server 的情况下使用嵌入式 etcd，请参阅<a href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a> 文档。
-如果 K3s 配置为初始化一个新的 etcd 集群，加入一个现有的 etcd 集群，或者 etcd 数据库文件在启动时在磁盘上，那么会自动选择嵌入式 etcd。</li><li><strong>外部数据库</strong><br>有关在具有多个 Server 的情况下使用外部数据存储，请参阅<a href="/zh/datastore/ha">高可用外部数据库</a>文档。<br>支持以下外部数据存储：<ul><li><a href="https://etcd.io/" target="_blank" rel="noopener noreferrer">etcd</a>（针对版本 3.5.4 进行了认证）</li><li><a href="https://www.mysql.com/" target="_blank" rel="noopener noreferrer">MySQL</a>（针对版本 5.7 和 8.0 进行了认证）</li><li><a href="https://mariadb.org/" target="_blank" rel="noopener noreferrer">MariaDB</a>（针对版本 10.6.8 进行了认证）</li><li><a href="https://www.postgresql.org/" target="_blank" rel="noopener noreferrer">PostgreSQL</a>（针对版本 10.7、11.5 和 14.2 进行了认证）</li></ul></li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>准备语句支持</div><div class="admonitionContent_S0QG"><p>K3s 需要 DB 的准备语句支持。换言之，<a href="https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling" target="_blank" rel="noopener noreferrer">PgBouncer</a> 之类的连接池将无法与 K3s 一起使用。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="外部数据存储配置参数">外部数据存储配置参数<a href="#外部数据存储配置参数" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你希望使用外部数据存储（例如 PostgreSQL、MySQL 或 etcd），你必须设置 <code>datastore-endpoint</code> 参数，以便 K3s 知道如何连接到外部数据存储。你也可以指定参数来配置连接的认证和加密。下表总结了这些参数，它们可以作为 CLI 标志或环境变量传递：</p><table><thead><tr><th>CLI 标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code></td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>指定 PostgreSQL、MySQL 或 etcd 连接字符串。该字符串用于描述与数据存储的连接。不同的后端对应不同的字符串结构，下文有详细说明。</td></tr><tr><td><code>--datastore-cafile</code></td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS 证书颁发机构（CA）文件，用于确保数据存储的通信安全。如果你的数据存储使用自定义证书颁发机构签署的证书通过 TLS 处理请求，则可以使用此参数指定 CA，以便 K3s 客户端可以正确验证证书。</td></tr><tr><td><code>--datastore-certfile</code></td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS 证书文件，用于对数据存储进行基于客户端证书的验证。要使用这个功能，你必须将数据存储配置为支持基于客户端证书的认证。要指定此参数，你还必须指定 <code>datastore-keyfile</code> 参数。</td></tr><tr><td><code>--datastore-keyfile</code></td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS 密钥文件，用于对数据存储进行基于客户端证书的验证。有关详细信息，请参阅前面的 <code>datastore-certfile</code> 参数。</td></tr></tbody></table><p>作为最佳实践，我们建议将这些参数设置为环境变量，而不是命令行参数，这样你的数据库证书或其他敏感信息就不会作为进程信息的一部分暴露出来。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据存储端点格式和功能">数据存储端点格式和功能<a href="#数据存储端点格式和功能" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如前所述，传递给 <code>datastore-endpoint</code> 参数的值的格式取决于数据存储后端。下文详细介绍了每个支持的外部数据存储的格式和功能。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">PostgreSQL</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">MySQL / MariaDB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">etcd</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>最常见的 PostgreSQL 的 <code>datastore-endpoint</code> 参数格式如下：</p><p><code>postgres://username:password@hostname:port/database-name</code></p><p>支持使用更高级的配置参数。有关更多信息，请参阅 <a href="https://godoc.org/github.com/lib/pq%E3%80%82" target="_blank" rel="noopener noreferrer">https://godoc.org/github.com/lib/pq。</a></p><p>如果指定数据库名称不存在，server 将尝试创建它。</p><p>如果你只提供了 <code>postgres://</code> 作为端点，K3s 将尝试执行以下操作：</p><ul><li>使用 <code>postgres</code> 作为用户名和密码连接到 localhost</li><li>创建一个名为 <code>kubernetes</code> 的数据库</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>最常见的 MySQL 和 MariaDB 的 <code>datastore-endpoint</code> 参数格式如下：</p><p><code>mysql://username:password@tcp(hostname:3306)/database-name</code></p><p>支持使用更高级的配置参数。有关更多信息，请参阅 <a href="https://github.com/go-sql-driver/mysql#dsn-data-source-name" target="_blank" rel="noopener noreferrer">https://github.com/go-sql-driver/mysql#dsn-data-source-name</a></p><p>请注意，由于 K3s 的一个<a href="https://github.com/k3s-io/k3s/issues/1093" target="_blank" rel="noopener noreferrer">已知问题</a>，你无法设置 <code>tls</code> 参数。TLS 通信是支持的，但你不能将此参数设置为 “skip-verify” 以使 K3s 跳过证书验证。</p><p>如果指定数据库名称不存在，server 将尝试创建它。</p><p>如果你只提供了 <code>mysql://</code> 作为端点，K3s 将尝试执行以下操作：</p><ul><li>通过 <code>root</code> 用户，不使用密码连接到 <code>/var/run/mysqld/mysqld.sock</code> 的 MySQL socket</li><li>创建一个名为 <code>kubernetes</code> 的数据库</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>最常见的 etcd 的 <code>datastore-endpoint</code> 参数格式如下：</p><p><code>https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379</code></p><p>以上假设使用的是典型的三节点 etcd 集群。该参数可以再接受一个逗号分隔的 etcd URL。</p></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/uninstall"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">卸载 K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/backup-restore"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">备份和恢复</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#外部数据存储配置参数" class="table-of-contents__link toc-highlight">外部数据存储配置参数</a></li><li><a href="#数据存储端点格式和功能" class="table-of-contents__link toc-highlight">数据存储端点格式和功能</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">集群数据存储</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>集群数据存储</h1></header><p>K3s 与其他 Kubernetes 发行版的不同之处，在于 K3s 支持使用 etcd 以外的数据库来运行 Kubernetes。该功能让 Kubernetes 运维更加灵活。你可以根据实际情况选择合适的数据存储选项。例如：</p><ul><li>如果你的团队没有操作 etcd 的专业知识，你可以选择 MySQL 或 PostgreSQL 等企业级 SQL 数据库。</li><li>如果你需要在 CI/CD 环境中运行一个简单、短期的集群，你可以使用嵌入式 SQLite 数据库。</li><li>如果你希望在边缘部署 Kubernetes 并需要高可用解决方案，但又无法承担在边缘管理数据库的运营开销，你可以使用 K3s 的嵌入式 HA 数据存储，该数据存储构建在嵌入式 etcd 之上。</li></ul><p>K3s 支持以下数据存储选项：</p><ul><li><strong>嵌入式 <a href="https://www.sqlite.org/index.html" target="_blank" rel="noopener noreferrer">SQLite</a></strong><br>SQLite 不能用于具有多个 Server 的集群。<br>SQLite 是默认的数据存储，如果没有其他数据存储配置，并且磁盘上没有嵌入式 etcd 数据库文件，将使用 SQLite。</li><li><strong>嵌入式 etcd</strong><br>有关在具有多个 Server 的情况下使用嵌入式 etcd，请参阅<a href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a> 文档。
+如果 K3s 配置为初始化一个新的 etcd 集群，加入一个现有的 etcd 集群，或者 etcd 数据库文件在启动时在磁盘上，那么会自动选择嵌入式 etcd。</li><li><strong>外部数据库</strong><br>有关在具有多个 Server 的情况下使用外部数据存储，请参阅<a href="/zh/datastore/ha">高可用外部数据库</a>文档。<br>支持以下外部数据存储：<ul><li><a href="https://etcd.io/" target="_blank" rel="noopener noreferrer">etcd</a>（针对版本 3.5.4 进行了认证）</li><li><a href="https://www.mysql.com/" target="_blank" rel="noopener noreferrer">MySQL</a>（针对版本 5.7 和 8.0 进行了认证）</li><li><a href="https://mariadb.org/" target="_blank" rel="noopener noreferrer">MariaDB</a>（针对版本 10.6.8 进行了认证）</li><li><a href="https://www.postgresql.org/" target="_blank" rel="noopener noreferrer">PostgreSQL</a>（针对版本 10.7、11.5 和 14.2 进行了认证）</li></ul></li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>准备语句支持</div><div class="admonitionContent_S0QG"><p>K3s 需要 DB 的准备语句支持。换言之，<a href="https://www.pgbouncer.org/faq.html#how-to-use-prepared-statements-with-transaction-pooling" target="_blank" rel="noopener noreferrer">PgBouncer</a> 之类的连接池将无法与 K3s 一起使用。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="外部数据存储配置参数">外部数据存储配置参数<a href="#外部数据存储配置参数" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你希望使用外部数据存储（例如 PostgreSQL、MySQL 或 etcd），你必须设置 <code>datastore-endpoint</code> 参数，以便 K3s 知道如何连接到外部数据存储。你也可以指定参数来配置连接的认证和加密。下表总结了这些参数，它们可以作为 CLI 标志或环境变量传递：</p><table><thead><tr><th>CLI 标志</th><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>--datastore-endpoint</code></td><td><code>K3S_DATASTORE_ENDPOINT</code></td><td>指定 PostgreSQL、MySQL 或 etcd 连接字符串。该字符串用于描述与数据存储的连接。不同的后端对应不同的字符串结构，下文有详细说明。</td></tr><tr><td><code>--datastore-cafile</code></td><td><code>K3S_DATASTORE_CAFILE</code></td><td>TLS 证书颁发机构（CA）文件，用于确保数据存储的通信安全。如果你的数据存储使用自定义证书颁发机构签署的证书通过 TLS 处理请求，则可以使用此参数指定 CA，以便 K3s 客户端可以正确验证证书。</td></tr><tr><td><code>--datastore-certfile</code></td><td><code>K3S_DATASTORE_CERTFILE</code></td><td>TLS 证书文件，用于对数据存储进行基于客户端证书的验证。要使用这个功能，你必须将数据存储配置为支持基于客户端证书的认证。要指定此参数，你还必须指定 <code>datastore-keyfile</code> 参数。</td></tr><tr><td><code>--datastore-keyfile</code></td><td><code>K3S_DATASTORE_KEYFILE</code></td><td>TLS 密钥文件，用于对数据存储进行基于客户端证书的验证。有关详细信息，请参阅前面的 <code>datastore-certfile</code> 参数。</td></tr></tbody></table><p>作为最佳实践，我们建议将这些参数设置为环境变量，而不是命令行参数，这样你的数据库证书或其他敏感信息就不会作为进程信息的一部分暴露出来。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据存储端点格式和功能">数据存储端点格式和功能<a href="#数据存储端点格式和功能" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如前所述，传递给 <code>datastore-endpoint</code> 参数的值的格式取决于数据存储后端。下文详细介绍了每个支持的外部数据存储的格式和功能。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">PostgreSQL</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">MySQL / MariaDB</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">etcd</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>最常见的 PostgreSQL 的 <code>datastore-endpoint</code> 参数格式如下：</p><p><code>postgres://username:password@hostname:port/database-name</code></p><p>支持使用更高级的配置参数。有关更多信息，请参阅 <a href="https://godoc.org/github.com/lib/pq%E3%80%82" target="_blank" rel="noopener noreferrer">https://godoc.org/github.com/lib/pq。</a></p><p>如果指定数据库名称不存在，server 将尝试创建它。</p><p>如果你只提供了 <code>postgres://</code> 作为端点，K3s 将尝试执行以下操作：</p><ul><li>使用 <code>postgres</code> 作为用户名和密码连接到 localhost</li><li>创建一个名为 <code>kubernetes</code> 的数据库</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>最常见的 MySQL 和 MariaDB 的 <code>datastore-endpoint</code> 参数格式如下：</p><p><code>mysql://username:password@tcp(hostname:3306)/database-name</code></p><p>支持使用更高级的配置参数。有关更多信息，请参阅 <a href="https://github.com/go-sql-driver/mysql#dsn-data-source-name" target="_blank" rel="noopener noreferrer">https://github.com/go-sql-driver/mysql#dsn-data-source-name</a></p><p>请注意，由于 K3s 的一个<a href="https://github.com/k3s-io/k3s/issues/1093" target="_blank" rel="noopener noreferrer">已知问题</a>，你无法设置 <code>tls</code> 参数。TLS 通信是支持的，但你不能将此参数设置为 “skip-verify” 以使 K3s 跳过证书验证。</p><p>如果指定数据库名称不存在，server 将尝试创建它。</p><p>如果你只提供了 <code>mysql://</code> 作为端点，K3s 将尝试执行以下操作：</p><ul><li>通过 <code>root</code> 用户，不使用密码连接到 <code>/var/run/mysqld/mysqld.sock</code> 的 MySQL socket</li><li>创建一个名为 <code>kubernetes</code> 的数据库</li></ul></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>最常见的 etcd 的 <code>datastore-endpoint</code> 参数格式如下：</p><p><code>https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379</code></p><p>以上假设使用的是典型的三节点 etcd 集群。该参数可以再接受一个逗号分隔的 etcd URL。</p></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/datastore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/uninstall"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">卸载 K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/backup-restore"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">备份和恢复</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#外部数据存储配置参数" class="table-of-contents__link toc-highlight">外部数据存储配置参数</a></li><li><a href="#数据存储端点格式和功能" class="table-of-contents__link toc-highlight">数据存储端点格式和功能</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/datastore/backup-restore.html b/zh/datastore/backup-restore.html
index eec7a6c37..f28cbf612 100644
--- a/zh/datastore/backup-restore.html
+++ b/zh/datastore/backup-restore.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">备份和恢复 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/backup-restore"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="备份和恢复 | K3s"><meta data-rh="true" name="description" content="K3s 的备份和恢复方式取决于你使用的数据存储类型。"><meta data-rh="true" property="og:description" content="K3s 的备份和恢复方式取决于你使用的数据存储类型。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/backup-restore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/backup-restore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/backup-restore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">备份和恢复 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/backup-restore"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="备份和恢复 | K3s"><meta data-rh="true" name="description" content="K3s 的备份和恢复方式取决于你使用的数据存储类型。"><meta data-rh="true" property="og:description" content="K3s 的备份和恢复方式取决于你使用的数据存储类型。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/backup-restore"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/backup-restore" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/backup-restore" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/backup-restore" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">备份和恢复</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>备份和恢复</h1></header><p>K3s 的备份和恢复方式取决于你使用的数据存储类型。</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>除了备份数据存储本身，你还必须备份位于 <code>/var/lib/rancher/k3s/server/token</code> 的 Server Token 文件。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/backup-restore" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">备份和恢复</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>备份和恢复</h1></header><p>K3s 的备份和恢复方式取决于你使用的数据存储类型。</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>除了备份数据存储本身，你还必须备份位于 <code>/var/lib/rancher/k3s/server/token</code> 的 Server Token 文件。
 使用备份进行恢复时，你必须恢复此文件，或将其值传递给 <code>--token</code> 选项。
-由于 Token 用于加密数据存储内的凭证数据，因此如果还原时没有使用相同的 Token 值，快照将无法使用。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用-sqlite-进行备份和恢复">使用 SQLite 进行备份和恢复<a href="#使用-sqlite-进行备份和恢复" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>你不需要使用特殊命令就能备份或恢复 SQLite 数据存储。</p><ul><li>要备份 SQLite 数据存储，请复制 <code>/var/lib/rancher/k3s/server/db/</code>。</li><li>要恢复 SQLite 数据存储，请恢复 <code>/var/lib/rancher/k3s/server/db</code> 的内容（以及 Token，如上所述）。</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用外部数据存储进行备份和恢复">使用外部数据存储进行备份和恢复<a href="#使用外部数据存储进行备份和恢复" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>使用外部数据存储时，备份和恢复操作在 K3s 外面处理。数据库管理员需要对外部数据库进行备份，或者使用快照或转储进行恢复。</p><p>我们建议将数据库配置为<strong>执行定期快照</strong>。</p><p>有关获取数据库快照并从中恢复数据库的详细信息，请参阅官方数据库文档：</p><ul><li><a href="https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html" target="_blank" rel="noopener noreferrer">MySQL 官方文档</a></li><li><a href="https://www.postgresql.org/docs/8.3/backup-dump.html" target="_blank" rel="noopener noreferrer">PostgreSQL 官方文档</a></li><li><a href="https://etcd.io/docs/latest/op-guide/recovery/" target="_blank" rel="noopener noreferrer">etcd 官方文档</a></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用嵌入式-etcd-数据存储进行备份和恢复">使用嵌入式 etcd 数据存储进行备份和恢复<a href="#使用嵌入式-etcd-数据存储进行备份和恢复" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>有关在嵌入式 etcd 数据存储上执行备份和恢复操作的信息，请参阅 <a href="/zh/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> 命令文档</a>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">集群数据存储</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/ha-embedded"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">高可用嵌入式 etcd</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用-sqlite-进行备份和恢复" class="table-of-contents__link toc-highlight">使用 SQLite 进行备份和恢复</a></li><li><a href="#使用外部数据存储进行备份和恢复" class="table-of-contents__link toc-highlight">使用外部数据存储进行备份和恢复</a></li><li><a href="#使用嵌入式-etcd-数据存储进行备份和恢复" class="table-of-contents__link toc-highlight">使用嵌入式 etcd 数据存储进行备份和恢复</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+由于 Token 用于加密数据存储内的凭证数据，因此如果还原时没有使用相同的 Token 值，快照将无法使用。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用-sqlite-进行备份和恢复">使用 SQLite 进行备份和恢复<a href="#使用-sqlite-进行备份和恢复" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>你不需要使用特殊命令就能备份或恢复 SQLite 数据存储。</p><ul><li>要备份 SQLite 数据存储，请复制 <code>/var/lib/rancher/k3s/server/db/</code>。</li><li>要恢复 SQLite 数据存储，请恢复 <code>/var/lib/rancher/k3s/server/db</code> 的内容（以及 Token，如上所述）。</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用外部数据存储进行备份和恢复">使用外部数据存储进行备份和恢复<a href="#使用外部数据存储进行备份和恢复" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>使用外部数据存储时，备份和恢复操作在 K3s 外面处理。数据库管理员需要对外部数据库进行备份，或者使用快照或转储进行恢复。</p><p>我们建议将数据库配置为<strong>执行定期快照</strong>。</p><p>有关获取数据库快照并从中恢复数据库的详细信息，请参阅官方数据库文档：</p><ul><li><a href="https://dev.mysql.com/doc/refman/8.0/en/replication-snapshot-method.html" target="_blank" rel="noopener noreferrer">MySQL 官方文档</a></li><li><a href="https://www.postgresql.org/docs/8.3/backup-dump.html" target="_blank" rel="noopener noreferrer">PostgreSQL 官方文档</a></li><li><a href="https://etcd.io/docs/latest/op-guide/recovery/" target="_blank" rel="noopener noreferrer">etcd 官方文档</a></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用嵌入式-etcd-数据存储进行备份和恢复">使用嵌入式 etcd 数据存储进行备份和恢复<a href="#使用嵌入式-etcd-数据存储进行备份和恢复" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>有关在嵌入式 etcd 数据存储上执行备份和恢复操作的信息，请参阅 <a href="/zh/cli/etcd-snapshot"><code>k3s etcd-snapshot</code> 命令文档</a>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/backup-restore.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">集群数据存储</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/ha-embedded"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">高可用嵌入式 etcd</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用-sqlite-进行备份和恢复" class="table-of-contents__link toc-highlight">使用 SQLite 进行备份和恢复</a></li><li><a href="#使用外部数据存储进行备份和恢复" class="table-of-contents__link toc-highlight">使用外部数据存储进行备份和恢复</a></li><li><a href="#使用嵌入式-etcd-数据存储进行备份和恢复" class="table-of-contents__link toc-highlight">使用嵌入式 etcd 数据存储进行备份和恢复</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/datastore/cluster-loadbalancer.html b/zh/datastore/cluster-loadbalancer.html
index 0aa3b02cf..d357eb08e 100644
--- a/zh/datastore/cluster-loadbalancer.html
+++ b/zh/datastore/cluster-loadbalancer.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">cluster-loadbalancer | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/cluster-loadbalancer"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="cluster-loadbalancer | K3s"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">cluster-loadbalancer | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/cluster-loadbalancer"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="cluster-loadbalancer | K3s"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/cluster-loadbalancer" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/cluster-loadbalancer" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/cluster-loadbalancer" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">cluster-loadbalancer</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>cluster-loadbalancer</h1></header></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/ha"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">高可用外部数据库</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cluster-access"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">集群访问</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/cluster-loadbalancer" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">cluster-loadbalancer</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>cluster-loadbalancer</h1></header></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/cluster-loadbalancer.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/ha"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">高可用外部数据库</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cluster-access"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">集群访问</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/datastore/ha-embedded.html b/zh/datastore/ha-embedded.html
index 339a694f6..35335d5e7 100644
--- a/zh/datastore/ha-embedded.html
+++ b/zh/datastore/ha-embedded.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">高可用嵌入式 etcd | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/ha-embedded"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="高可用嵌入式 etcd | K3s"><meta data-rh="true" name="description" content="嵌入式 etcd (HA) 在速度较慢的磁盘（例如使用 SD 卡运行的 Raspberry Pi）上可能会出现性能问题。"><meta data-rh="true" property="og:description" content="嵌入式 etcd (HA) 在速度较慢的磁盘（例如使用 SD 卡运行的 Raspberry Pi）上可能会出现性能问题。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/ha-embedded"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha-embedded" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha-embedded" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">高可用嵌入式 etcd | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/ha-embedded"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="高可用嵌入式 etcd | K3s"><meta data-rh="true" name="description" content="嵌入式 etcd (HA) 在速度较慢的磁盘（例如使用 SD 卡运行的 Raspberry Pi）上可能会出现性能问题。"><meta data-rh="true" property="og:description" content="嵌入式 etcd (HA) 在速度较慢的磁盘（例如使用 SD 卡运行的 Raspberry Pi）上可能会出现性能问题。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/ha-embedded"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha-embedded" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha-embedded" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha-embedded" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">高可用嵌入式 etcd</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>高可用嵌入式 etcd</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>嵌入式 etcd (HA) 在速度较慢的磁盘（例如使用 SD 卡运行的 Raspberry Pi）上可能会出现性能问题。</p></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>HA 嵌入式 etcd 集群必须由奇数个 Server 节点组成，以便 etcd 维持 quorum。对于有 n 个 server 的集群，quorum 是 (n/2)+1。如果集群节点数量是奇数，每新增一个节点，都会增加 quorum 所需节点数。虽然将节点添加到奇数节点数量的集群增加了机器，看起来更好，但其实集群的容错性会变差，这是因为完全相同数量的节点可能失败而不丢失 quorum，但有更多的节点可能失败。</p></div></div><p>具有嵌入式 etcd 的 HA K3s 集群由以下部分组成：</p><ul><li>三个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务，以及托管嵌入式 etcd 数据存储。</li><li>可选：零个或多个 <strong>Agent 节点</strong>，用于运行你的应用和服务</li><li>可选：<strong>固定注册地址</strong>，供 Agent 节点注册到集群</li></ul><p>首先，启动一个带有 <code>cluster-init</code> 标志的 Server 节点来启用集群和一个令牌，该令牌将作为共享 secret，用于将其他 Server 加入集群。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>启动第一台服务器后，使用共享 secret  将第二台和第三台服务器加入集群：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">1</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --server https://&lt;ip or hostname of server1&gt;:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>检查第二个和第三个服务器是否已加入集群：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME        STATUS   ROLES                       AGE   VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server1     Ready    control-plane,etcd,master   28m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server2     Ready    control-plane,etcd,master   13m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server3     Ready    control-plane,etcd,master   10m   vX.Y.Z</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>现在你有了一个高可用的 control plane。你可以在 <code>--server</code> 参数中使用任何集群 server，从而加入其他 server 和 agent 节点。将其他 agent 节点加入到集群中，步骤与 server 相同。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>有几个配置标志在所有 Server 节点中必须是相同的:</p><ul><li>网络相关标志：<code>--cluster-dns</code>、<code>--cluster-domain</code>、<code>--cluster-cidr</code>、<code>--service- cidr</code></li><li>控制某些组件部署的标志：<code>--disable-helm-controller</code>、<code>--disable-kube-proxy</code>、<code>--disable-network-policy</code> 和任何传递给 <code>--disable</code> 的组件</li><li>功能相关标志：<code>--secrets-encryption</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="现有的单节点集群">现有的单节点集群<a href="#现有的单节点集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如果你有一个使用默认嵌入式 SQLite 数据库的现有集群，你可以通过使用 <code>--cluster-init</code> 标志重新启动你的 K3s server，从而将其转换为 etcd。完成此操作后，你将能够如上所述添加其他实例。</p><p>如果由于节点已经初始化或加入了一个集群，导致在磁盘上发现一个 etcd 数据存储，那么数据存储参数（<code>--cluster-init</code>、<code>--server</code>、<code>--datastore-endpoint</code> 等）将被忽略。</p><blockquote><p><strong>重要提示</strong>：K3s v1.22.2 及更高版本支持将 SQLite 迁移到 etcd。如果你将 <code>--cluster-init</code> 添加到现有 server，旧版本将创建一个新的空数据存储。</p></blockquote></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/backup-restore"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">备份和恢复</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/ha"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">高可用外部数据库</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#现有的单节点集群" class="table-of-contents__link toc-highlight">现有的单节点集群</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha-embedded" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">高可用嵌入式 etcd</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>高可用嵌入式 etcd</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>嵌入式 etcd (HA) 在速度较慢的磁盘（例如使用 SD 卡运行的 Raspberry Pi）上可能会出现性能问题。</p></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>HA 嵌入式 etcd 集群必须由奇数个 Server 节点组成，以便 etcd 维持 quorum。对于有 n 个 server 的集群，quorum 是 (n/2)+1。如果集群节点数量是奇数，每新增一个节点，都会增加 quorum 所需节点数。虽然将节点添加到奇数节点数量的集群增加了机器，看起来更好，但其实集群的容错性会变差，这是因为完全相同数量的节点可能失败而不丢失 quorum，但有更多的节点可能失败。</p></div></div><p>具有嵌入式 etcd 的 HA K3s 集群由以下部分组成：</p><ul><li>三个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务，以及托管嵌入式 etcd 数据存储。</li><li>可选：零个或多个 <strong>Agent 节点</strong>，用于运行你的应用和服务</li><li>可选：<strong>固定注册地址</strong>，供 Agent 节点注册到集群</li></ul><p>首先，启动一个带有 <code>cluster-init</code> 标志的 Server 节点来启用集群和一个令牌，该令牌将作为共享 secret，用于将其他 Server 加入集群。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>启动第一台服务器后，使用共享 secret  将第二台和第三台服务器加入集群：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator file-descriptor important" style="color:rgb(137, 221, 255)">1</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --server https://&lt;ip or hostname of server1&gt;:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>检查第二个和第三个服务器是否已加入集群：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME        STATUS   ROLES                       AGE   VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server1     Ready    control-plane,etcd,master   28m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server2     Ready    control-plane,etcd,master   13m   vX.Y.Z</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">server3     Ready    control-plane,etcd,master   10m   vX.Y.Z</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>现在你有了一个高可用的 control plane。你可以在 <code>--server</code> 参数中使用任何集群 server，从而加入其他 server 和 agent 节点。将其他 agent 节点加入到集群中，步骤与 server 相同。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">ip or </span><span class="token function" style="color:rgb(130, 170, 255)">hostname</span><span class="token plain"> of server</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>有几个配置标志在所有 Server 节点中必须是相同的:</p><ul><li>网络相关标志：<code>--cluster-dns</code>、<code>--cluster-domain</code>、<code>--cluster-cidr</code>、<code>--service- cidr</code></li><li>控制某些组件部署的标志：<code>--disable-helm-controller</code>、<code>--disable-kube-proxy</code>、<code>--disable-network-policy</code> 和任何传递给 <code>--disable</code> 的组件</li><li>功能相关标志：<code>--secrets-encryption</code></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="现有的单节点集群">现有的单节点集群<a href="#现有的单节点集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如果你有一个使用默认嵌入式 SQLite 数据库的现有集群，你可以通过使用 <code>--cluster-init</code> 标志重新启动你的 K3s server，从而将其转换为 etcd。完成此操作后，你将能够如上所述添加其他实例。</p><p>如果由于节点已经初始化或加入了一个集群，导致在磁盘上发现一个 etcd 数据存储，那么数据存储参数（<code>--cluster-init</code>、<code>--server</code>、<code>--datastore-endpoint</code> 等）将被忽略。</p><blockquote><p><strong>重要提示</strong>：K3s v1.22.2 及更高版本支持将 SQLite 迁移到 etcd。如果你将 <code>--cluster-init</code> 添加到现有 server，旧版本将创建一个新的空数据存储。</p></blockquote></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha-embedded.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/backup-restore"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">备份和恢复</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/ha"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">高可用外部数据库</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#现有的单节点集群" class="table-of-contents__link toc-highlight">现有的单节点集群</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/datastore/ha.html b/zh/datastore/ha.html
index 59d379df5..962e37f2f 100644
--- a/zh/datastore/ha.html
+++ b/zh/datastore/ha.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">高可用外部数据库 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/ha"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="高可用外部数据库 | K3s"><meta data-rh="true" name="description" content="本文介绍了如何安装具有外部数据库的高可用 K3s 集群。"><meta data-rh="true" property="og:description" content="本文介绍了如何安装具有外部数据库的高可用 K3s 集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/ha"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">高可用外部数据库 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/datastore/ha"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="高可用外部数据库 | K3s"><meta data-rh="true" name="description" content="本文介绍了如何安装具有外部数据库的高可用 K3s 集群。"><meta data-rh="true" property="og:description" content="本文介绍了如何安装具有外部数据库的高可用 K3s 集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/datastore/ha"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/datastore/ha" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/datastore/ha" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/datastore/ha" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">高可用外部数据库</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>高可用外部数据库</h1></header><p>本文介绍了如何安装具有外部数据库的高可用 K3s 集群。</p><p>单服务器集群可以满足各种用例，但如果你的环境对 Kubernetes control plane 的正常运行时间有要求，你可以在 HA 配置中运行 K3s。一个 HA K3s 集群包括：</p><ul><li>两个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务</li><li><strong>外部数据存储</strong>（与单节点设置中使用的嵌入式 SQLite 数据存储相反）</li><li>可选：零个或多个 <strong>Agent 节点</strong>，用于运行你的应用和服务</li><li>可选：<strong>固定注册地址</strong>，供 Agent 节点注册到集群</li></ul><p>有关这些组件如何协同工作的详细信息，请参阅<a href="/zh/architecture#%E9%AB%98%E5%8F%AF%E7%94%A8-k3s">架构</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="安装概要">安装概要<a href="#安装概要" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>设置 HA 集群需要以下步骤：</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="1-创建外部数据存储">1. 创建外部数据存储<a href="#1-创建外部数据存储" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你首先需要为集群创建一个外部数据存储。有关更多详细信息，请参阅<a href="/zh/datastore">集群数据存储选项</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="2-启动-server-节点">2. 启动 Server 节点<a href="#2-启动-server-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 需要两个或更多的 Server 节点来实现 HA 配置。有关最低主机要求，请参阅<a href="/zh/installation/requirements">安装要求</a>。</p><p>在这些节点上运行 <code>k3s server</code> 命令时，你必须设置 <code>datastore-endpoint</code> 参数，以便 K3s 知道如何连接到外部数据存储。<code>token</code> 参数也可以用来在添加节点时设置一个固定的 token。当为空时，将自动生成 token。</p><p>例如，你可以使用如下命令安装 K3s Server，并使用 MySQL 数据库作为外部数据存储和<a href="/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9">设置 token</a>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token=SECRET \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint=&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>根据数据库类型的不同，数据存储端点的格式也不同。有关详细信息，请参阅<a href="/zh/datastore#%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8%E7%AB%AF%E7%82%B9%E6%A0%BC%E5%BC%8F%E5%92%8C%E5%8A%9F%E8%83%BD">数据存储端点格式</a>。</p><p>要在启动 server 节点时配置 TLS 证书，请参阅<a href="/zh/datastore#%E5%A4%96%E9%83%A8%E6%95%B0%E6%8D%AE%E5%BA%93%E9%85%8D%E7%BD%AE%E5%8F%82%E6%95%B0">数据存储配置指南</a>。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>单台 Server 安装时可用的安装选项也适用于高可用安装。有关详细信息，请参阅<a href="/zh/installation/configuration">配置选项</a>文档。</p></div></div><p>默认情况下，Server 节点是可调度的，因此你的工作负载可以在它们上启动。如果你希望拥有一个不会运行用户工作负载的专用 control plane，你可以使用污点（taint）。<code>node-taint</code> 参数将允许你配置带有污点的节点，例如 <code>--node-taint CriticalAddonsOnly=true:NoExecute</code>。</p><p>在所有 server 节点上启动 <code>k3s server</code> 进程后，请通过 <code>k3s kubectl get nodes</code> 确保集群已正确启动。你应该看到 server 节点处于 Ready 状态。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="3-可选加入其它-server-节点">3. 可选：加入其它 Server 节点<a href="#3-可选加入其它-server-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>步骤 2 中的相同示例命令可用于加入其他 Server 节点，其中需要使用第一个节点的 Token。</p><p>如果第一个 Server 节点是在没有 <code>--token</code> CLI 标志或 <code>K3S_TOKEN</code> 变量的情况下启动的，那么可以从任何已经加入集群的 Server 节点中检索到 Token：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>然后可以<a href="/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9">使用 Token</a> 添加其他 Server 节点：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token=SECRET \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint=&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>有几个配置标志在所有 Server 节点中必须是相同的:</p><ul><li>网络相关标志：<code>--cluster-dns</code>、<code>--cluster-domain</code>、<code>--cluster-cidr</code>、<code>--service- cidr</code></li><li>控制某些组件部署的标志：<code>--disable-helm-controller</code>、<code>--disable-kube-proxy</code>、<code>--disable-network-policy</code> 和任何传递给 <code>--disable</code> 的组件</li><li>功能相关标志：<code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>你需要备份 token 的值，因为恢复备份和添加节点时都需要该 token。以前，K3s 在使用外部 SQL 数据存储时不强制使用 token。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="4-可选加入-agent-节点">4. 可选：加入 Agent 节点<a href="#4-可选加入-agent-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>因为 K3s Server 节点默认是可调度的，所以 HA K3s 集群不需要 Agent 节点。但是，你可能希望使用专门的 Agent 节点来运行应用程序和服务。</p><p>在 HA 集群中加入 Agent 节点与在单个 Server 集群中加入 Agent 节点是一样的。你只需要指定 Agent 应该注册的 URL（server IP 之一或固定注册地址）和要使用的 Token 即可。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET k3s agent --server https://server-or-fixed-registration-address:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="5-可选配置固定的注册地址">5. 可选：配置固定的注册地址<a href="#5-可选配置固定的注册地址" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Agent 节点需要一个 URL 来注册。这可以是任何 server 节点的 IP 或主机名，但在许多情况下，这些节点可能会随着时间的推移而改变。例如，如果你在支持缩放组的云中运行集群，你可能会纵向缩放 Server 节点组，导致节点被创建和销毁，从而导致 Server 节点集的 IP 发生改变。因此，你应该在 Server 节点前面有一个稳定的端点，而且它不会随时间推移而改变。你可以使用许多方法来设置此端点，例如：</p><ul><li>4 层 (TCP) 负载均衡器</li><li>轮询 DNS</li><li>虚拟或弹性 IP 地址</li></ul><p>这个端点也可以用来访问 Kubernetes API。因此，你可以修改 <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> 文件来指向它，而不是特定的节点。</p><p>要避免此类配置中的证书错误，请使用 <code>--tls-san YOUR_IP_OR_HOSTNAME_HERE</code> 选项来配置 Server。这个选项在 TLS 证书中增加了一个额外的主机名或 IP 作为 Subject Alternative Name，如果你想通过 IP 和主机名访问，可以多次指定。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/ha-embedded"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">高可用嵌入式 etcd</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">cluster-loadbalancer</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#安装概要" class="table-of-contents__link toc-highlight">安装概要</a><ul><li><a href="#1-创建外部数据存储" class="table-of-contents__link toc-highlight">1. 创建外部数据存储</a></li><li><a href="#2-启动-server-节点" class="table-of-contents__link toc-highlight">2. 启动 Server 节点</a></li><li><a href="#3-可选加入其它-server-节点" class="table-of-contents__link toc-highlight">3. 可选：加入其它 Server 节点</a></li><li><a href="#4-可选加入-agent-节点" class="table-of-contents__link toc-highlight">4. 可选：加入 Agent 节点</a></li><li><a href="#5-可选配置固定的注册地址" class="table-of-contents__link toc-highlight">5. 可选：配置固定的注册地址</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/datastore/ha" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/backup-restore">备份和恢复</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/ha-embedded">高可用嵌入式 etcd</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/datastore/ha">高可用外部数据库</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/datastore/cluster-loadbalancer">cluster-loadbalancer</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/datastore"><span itemprop="name">集群数据存储</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">高可用外部数据库</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>高可用外部数据库</h1></header><p>本文介绍了如何安装具有外部数据库的高可用 K3s 集群。</p><p>单服务器集群可以满足各种用例，但如果你的环境对 Kubernetes control plane 的正常运行时间有要求，你可以在 HA 配置中运行 K3s。一个 HA K3s 集群包括：</p><ul><li>两个或多个 <strong>Server 节点</strong>为 Kubernetes API 提供服务并运行其他 control plane 服务</li><li><strong>外部数据存储</strong>（与单节点设置中使用的嵌入式 SQLite 数据存储相反）</li><li>可选：零个或多个 <strong>Agent 节点</strong>，用于运行你的应用和服务</li><li>可选：<strong>固定注册地址</strong>，供 Agent 节点注册到集群</li></ul><p>有关这些组件如何协同工作的详细信息，请参阅<a href="/zh/architecture#%E9%AB%98%E5%8F%AF%E7%94%A8-k3s">架构</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="安装概要">安装概要<a href="#安装概要" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>设置 HA 集群需要以下步骤：</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="1-创建外部数据存储">1. 创建外部数据存储<a href="#1-创建外部数据存储" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你首先需要为集群创建一个外部数据存储。有关更多详细信息，请参阅<a href="/zh/datastore">集群数据存储选项</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="2-启动-server-节点">2. 启动 Server 节点<a href="#2-启动-server-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 需要两个或更多的 Server 节点来实现 HA 配置。有关最低主机要求，请参阅<a href="/zh/installation/requirements">安装要求</a>。</p><p>在这些节点上运行 <code>k3s server</code> 命令时，你必须设置 <code>datastore-endpoint</code> 参数，以便 K3s 知道如何连接到外部数据存储。<code>token</code> 参数也可以用来在添加节点时设置一个固定的 token。当为空时，将自动生成 token。</p><p>例如，你可以使用如下命令安装 K3s Server，并使用 MySQL 数据库作为外部数据存储和<a href="/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9">设置 token</a>：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token=SECRET \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint=&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>根据数据库类型的不同，数据存储端点的格式也不同。有关详细信息，请参阅<a href="/zh/datastore#%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8%E7%AB%AF%E7%82%B9%E6%A0%BC%E5%BC%8F%E5%92%8C%E5%8A%9F%E8%83%BD">数据存储端点格式</a>。</p><p>要在启动 server 节点时配置 TLS 证书，请参阅<a href="/zh/datastore#%E5%A4%96%E9%83%A8%E6%95%B0%E6%8D%AE%E5%BA%93%E9%85%8D%E7%BD%AE%E5%8F%82%E6%95%B0">数据存储配置指南</a>。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>单台 Server 安装时可用的安装选项也适用于高可用安装。有关详细信息，请参阅<a href="/zh/installation/configuration">配置选项</a>文档。</p></div></div><p>默认情况下，Server 节点是可调度的，因此你的工作负载可以在它们上启动。如果你希望拥有一个不会运行用户工作负载的专用 control plane，你可以使用污点（taint）。<code>node-taint</code> 参数将允许你配置带有污点的节点，例如 <code>--node-taint CriticalAddonsOnly=true:NoExecute</code>。</p><p>在所有 server 节点上启动 <code>k3s server</code> 进程后，请通过 <code>k3s kubectl get nodes</code> 确保集群已正确启动。你应该看到 server 节点处于 Ready 状态。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="3-可选加入其它-server-节点">3. 可选：加入其它 Server 节点<a href="#3-可选加入其它-server-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>步骤 2 中的相同示例命令可用于加入其他 Server 节点，其中需要使用第一个节点的 Token。</p><p>如果第一个 Server 节点是在没有 <code>--token</code> CLI 标志或 <code>K3S_TOKEN</code> 变量的情况下启动的，那么可以从任何已经加入集群的 Server 节点中检索到 Token：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>然后可以<a href="/zh/cli/server#%E9%9B%86%E7%BE%A4%E9%80%89%E9%A1%B9">使用 Token</a> 添加其他 Server 节点：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token=SECRET \</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint=&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>有几个配置标志在所有 Server 节点中必须是相同的:</p><ul><li>网络相关标志：<code>--cluster-dns</code>、<code>--cluster-domain</code>、<code>--cluster-cidr</code>、<code>--service- cidr</code></li><li>控制某些组件部署的标志：<code>--disable-helm-controller</code>、<code>--disable-kube-proxy</code>、<code>--disable-network-policy</code> 和任何传递给 <code>--disable</code> 的组件</li><li>功能相关标志：<code>--secrets-encryption</code></li></ul><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>你需要备份 token 的值，因为恢复备份和添加节点时都需要该 token。以前，K3s 在使用外部 SQL 数据存储时不强制使用 token。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="4-可选加入-agent-节点">4. 可选：加入 Agent 节点<a href="#4-可选加入-agent-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>因为 K3s Server 节点默认是可调度的，所以 HA K3s 集群不需要 Agent 节点。但是，你可能希望使用专门的 Agent 节点来运行应用程序和服务。</p><p>在 HA 集群中加入 Agent 节点与在单个 Server 集群中加入 Agent 节点是一样的。你只需要指定 Agent 应该注册的 URL（server IP 之一或固定注册地址）和要使用的 Token 即可。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET k3s agent --server https://server-or-fixed-registration-address:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="5-可选配置固定的注册地址">5. 可选：配置固定的注册地址<a href="#5-可选配置固定的注册地址" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Agent 节点需要一个 URL 来注册。这可以是任何 server 节点的 IP 或主机名，但在许多情况下，这些节点可能会随着时间的推移而改变。例如，如果你在支持缩放组的云中运行集群，你可能会纵向缩放 Server 节点组，导致节点被创建和销毁，从而导致 Server 节点集的 IP 发生改变。因此，你应该在 Server 节点前面有一个稳定的端点，而且它不会随时间推移而改变。你可以使用许多方法来设置此端点，例如：</p><ul><li>4 层 (TCP) 负载均衡器</li><li>轮询 DNS</li><li>虚拟或弹性 IP 地址</li></ul><p>这个端点也可以用来访问 Kubernetes API。因此，你可以修改 <a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> 文件来指向它，而不是特定的节点。</p><p>要避免此类配置中的证书错误，请使用 <code>--tls-san YOUR_IP_OR_HOSTNAME_HERE</code> 选项来配置 Server。这个选项在 TLS 证书中增加了一个额外的主机名或 IP 作为 Subject Alternative Name，如果你想通过 IP 和主机名访问，可以多次指定。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/datastore/ha.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/datastore/ha-embedded"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">高可用嵌入式 etcd</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore/cluster-loadbalancer"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">cluster-loadbalancer</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#安装概要" class="table-of-contents__link toc-highlight">安装概要</a><ul><li><a href="#1-创建外部数据存储" class="table-of-contents__link toc-highlight">1. 创建外部数据存储</a></li><li><a href="#2-启动-server-节点" class="table-of-contents__link toc-highlight">2. 启动 Server 节点</a></li><li><a href="#3-可选加入其它-server-节点" class="table-of-contents__link toc-highlight">3. 可选：加入其它 Server 节点</a></li><li><a href="#4-可选加入-agent-节点" class="table-of-contents__link toc-highlight">4. 可选：加入 Agent 节点</a></li><li><a href="#5-可选配置固定的注册地址" class="table-of-contents__link toc-highlight">5. 可选：配置固定的注册地址</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/faq.html b/zh/faq.html
index c5298c5f3..971208c04 100644
--- a/zh/faq.html
+++ b/zh/faq.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">常见问题 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/faq"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="常见问题 | K3s"><meta data-rh="true" name="description" content="本文会定期更新，用于解答用户常见的 K3s 相关问题。"><meta data-rh="true" property="og:description" content="本文会定期更新，用于解答用户常见的 K3s 相关问题。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/faq"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/faq" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/faq" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">常见问题 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/faq"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="常见问题 | K3s"><meta data-rh="true" name="description" content="本文会定期更新，用于解答用户常见的 K3s 相关问题。"><meta data-rh="true" property="og:description" content="本文会定期更新，用于解答用户常见的 K3s 相关问题。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/faq"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/faq" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/faq" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/faq" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/faq" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">常见问题</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>常见问题</h1></header><p>本文会定期更新，用于解答用户常见的 K3s 相关问题。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-是-kubernetes-的替代品吗">K3s 是 Kubernetes 的替代品吗？<a href="#k3s-是-kubernetes-的替代品吗" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 是经过 CNCF 认证的 Kubernetes 发行版，可以胜任标准 Kubernetes 集群的所有工作。它只是一个更轻量级的版本。有关详细信息，请参阅<a href="/zh/">介绍文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="如何使用自己的-ingress-代替-traefik">如何使用自己的 Ingress 代替 Traefik？<a href="#如何使用自己的-ingress-代替-traefik" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你只需使用 <code>--disable=traefik</code> 启动 K3s Server，然后部署你的 Ingress 即可。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-支持-windows-吗">K3s 支持 Windows 吗？<a href="#k3s-支持-windows-吗" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>目前 K3s 本身不支持 Windows，但我们对此想法持开放态度。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="如何通过源码构建">如何通过源码构建？<a href="#如何通过源码构建" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>请参考 K3s <a href="https://github.com/k3s-io/k3s/blob/master/BUILDING.md" target="_blank" rel="noopener noreferrer">BUILDING.md</a> 的说明。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-日志在哪里">K3s 日志在哪里？<a href="#k3s-日志在哪里" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 日志的位置将根据你运行 K3s 的方式和节点的操作系统而有所不同。</p><ul><li>从命令行运行时，日志将发送到 stdout 和 stderr。</li><li>使用 openrc 运行时，将在 <code>/var/log/k3s.log</code> 中创建日志。</li><li>使用 systemd 运行时，日志将发送到 Journald 并可以使用 <code>journalctl -u k3s</code> 查看​​。</li><li>Pod 日志在 <code>/var/log/pods</code> 中。</li><li>Containerd 日志在 <code>/var/lib/rancher/k3s/agent/containerd/containerd.log</code> 中。</li></ul><p>你可以在启动 K3s 时使用 <code>--debug</code> 标志（或配置文件中的 <code>debug: true</code>）来生成更详细的日志。</p><p>Kubernetes 使用名为 <code>klog</code> 的日志管理框架，该框架对进程中的所有组件使用单一的日志管理配置。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/faq" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/faq" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">常见问题</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>常见问题</h1></header><p>本文会定期更新，用于解答用户常见的 K3s 相关问题。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-是-kubernetes-的替代品吗">K3s 是 Kubernetes 的替代品吗？<a href="#k3s-是-kubernetes-的替代品吗" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 是经过 CNCF 认证的 Kubernetes 发行版，可以胜任标准 Kubernetes 集群的所有工作。它只是一个更轻量级的版本。有关详细信息，请参阅<a href="/zh/">介绍文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="如何使用自己的-ingress-代替-traefik">如何使用自己的 Ingress 代替 Traefik？<a href="#如何使用自己的-ingress-代替-traefik" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你只需使用 <code>--disable=traefik</code> 启动 K3s Server，然后部署你的 Ingress 即可。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-支持-windows-吗">K3s 支持 Windows 吗？<a href="#k3s-支持-windows-吗" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>目前 K3s 本身不支持 Windows，但我们对此想法持开放态度。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="如何通过源码构建">如何通过源码构建？<a href="#如何通过源码构建" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>请参考 K3s <a href="https://github.com/k3s-io/k3s/blob/master/BUILDING.md" target="_blank" rel="noopener noreferrer">BUILDING.md</a> 的说明。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-日志在哪里">K3s 日志在哪里？<a href="#k3s-日志在哪里" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 日志的位置将根据你运行 K3s 的方式和节点的操作系统而有所不同。</p><ul><li>从命令行运行时，日志将发送到 stdout 和 stderr。</li><li>使用 openrc 运行时，将在 <code>/var/log/k3s.log</code> 中创建日志。</li><li>使用 systemd 运行时，日志将发送到 Journald 并可以使用 <code>journalctl -u k3s</code> 查看​​。</li><li>Pod 日志在 <code>/var/log/pods</code> 中。</li><li>Containerd 日志在 <code>/var/lib/rancher/k3s/agent/containerd/containerd.log</code> 中。</li></ul><p>你可以在启动 K3s 时使用 <code>--debug</code> 标志（或配置文件中的 <code>debug: true</code>）来生成更详细的日志。</p><p>Kubernetes 使用名为 <code>klog</code> 的日志管理框架，该框架对进程中的所有组件使用单一的日志管理配置。
 由于 K3s 在单个进程中运行所有 Kubernetes 组件，因此无法为单个 Kubernetes 组件配置不同的日志级别或目的位置。
-使用 <code>-v=&lt;level&gt;</code> 或 <code>--vmodule=&lt;module&gt;=&lt;level&gt;</code> 组件参数的效果可能不如预期。</p><p>要获得更多日志选项，请参阅<a href="/zh/advanced#%E5%85%B6%E4%BB%96%E6%97%A5%E5%BF%97%E6%9D%A5%E6%BA%90">其他日志来源</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="可以在-docker-中运行-k3s-吗">可以在 Docker 中运行 K3s 吗？<a href="#可以在-docker-中运行-k3s-吗" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>是的，有几种方法可以让你在 Docker 中运行 K3s。有关详细信息，请参阅<a href="/zh/advanced#%E5%9C%A8-docker-%E4%B8%AD%E8%BF%90%E8%A1%8C-k3s">高级选项</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-和-agent-token-有什么区别">K3s Server 和 Agent Token 有什么区别？<a href="#k3s-server-和-agent-token-有什么区别" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>有关管理 K3s join token 的更多信息，请参阅 <a href="/zh/cli/token"><code>k3s token</code> 命令文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="不同版本的-k3s-兼容性如何">不同版本的 K3s 兼容性如何？<a href="#不同版本的-k3s-兼容性如何" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>通常，<a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes 版本倾斜策略</a>适用。</p><p>简而言之，Server 版本可以比 Agnet 新，但 Agent 不能比 Server 新。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="如果我遇到问题可以在哪里获得帮助">如果我遇到问题，可以在哪里获得帮助？<a href="#如果我遇到问题可以在哪里获得帮助" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你在部署 K3s 时遇到问题，你应该：</p><p>1) 检查<a href="/zh/known-issues">已知问题</a>页面。</p><p>2) 检查你是否已解决<a href="/zh/advanced#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87">其他操作系统准备</a>。运行 <code>k3s check-config</code> 并确保它通过。</p><p>3) 在 K3s <a href="https://github.com/k3s-io/k3s/issues" target="_blank" rel="noopener noreferrer">Issues</a> 和 <a href="https://github.com/k3s-io/k3s/discussions" target="_blank" rel="noopener noreferrer">Discussions</a> 中搜索匹配的问题。</p><p>4) 加入 <a href="https://slack.rancher.io/" target="_blank" rel="noopener noreferrer">Rancher Slack</a> K3s 频道以获得帮助。</p><p>5) 在 K3s Github 上提交<a href="https://github.com/k3s-io/k3s/issues/new/choose" target="_blank" rel="noopener noreferrer">新 issue</a>，你可以描述你的设置和遇到的问题。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/advanced"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">高级选项和配置</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">CLI 工具</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-是-kubernetes-的替代品吗" class="table-of-contents__link toc-highlight">K3s 是 Kubernetes 的替代品吗？</a></li><li><a href="#如何使用自己的-ingress-代替-traefik" class="table-of-contents__link toc-highlight">如何使用自己的 Ingress 代替 Traefik？</a></li><li><a href="#k3s-支持-windows-吗" class="table-of-contents__link toc-highlight">K3s 支持 Windows 吗？</a></li><li><a href="#如何通过源码构建" class="table-of-contents__link toc-highlight">如何通过源码构建？</a></li><li><a href="#k3s-日志在哪里" class="table-of-contents__link toc-highlight">K3s 日志在哪里？</a></li><li><a href="#可以在-docker-中运行-k3s-吗" class="table-of-contents__link toc-highlight">可以在 Docker 中运行 K3s 吗？</a></li><li><a href="#k3s-server-和-agent-token-有什么区别" class="table-of-contents__link toc-highlight">K3s Server 和 Agent Token 有什么区别？</a></li><li><a href="#不同版本的-k3s-兼容性如何" class="table-of-contents__link toc-highlight">不同版本的 K3s 兼容性如何？</a></li><li><a href="#如果我遇到问题可以在哪里获得帮助" class="table-of-contents__link toc-highlight">如果我遇到问题，可以在哪里获得帮助？</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+使用 <code>-v=&lt;level&gt;</code> 或 <code>--vmodule=&lt;module&gt;=&lt;level&gt;</code> 组件参数的效果可能不如预期。</p><p>要获得更多日志选项，请参阅<a href="/zh/advanced#%E5%85%B6%E4%BB%96%E6%97%A5%E5%BF%97%E6%9D%A5%E6%BA%90">其他日志来源</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="可以在-docker-中运行-k3s-吗">可以在 Docker 中运行 K3s 吗？<a href="#可以在-docker-中运行-k3s-吗" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>是的，有几种方法可以让你在 Docker 中运行 K3s。有关详细信息，请参阅<a href="/zh/advanced#%E5%9C%A8-docker-%E4%B8%AD%E8%BF%90%E8%A1%8C-k3s">高级选项</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-和-agent-token-有什么区别">K3s Server 和 Agent Token 有什么区别？<a href="#k3s-server-和-agent-token-有什么区别" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>有关管理 K3s join token 的更多信息，请参阅 <a href="/zh/cli/token"><code>k3s token</code> 命令文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="不同版本的-k3s-兼容性如何">不同版本的 K3s 兼容性如何？<a href="#不同版本的-k3s-兼容性如何" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>通常，<a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes 版本倾斜策略</a>适用。</p><p>简而言之，Server 版本可以比 Agnet 新，但 Agent 不能比 Server 新。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="如果我遇到问题可以在哪里获得帮助">如果我遇到问题，可以在哪里获得帮助？<a href="#如果我遇到问题可以在哪里获得帮助" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你在部署 K3s 时遇到问题，你应该：</p><p>1) 检查<a href="/zh/known-issues">已知问题</a>页面。</p><p>2) 检查你是否已解决<a href="/zh/advanced#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87">其他操作系统准备</a>。运行 <code>k3s check-config</code> 并确保它通过。</p><p>3) 在 K3s <a href="https://github.com/k3s-io/k3s/issues" target="_blank" rel="noopener noreferrer">Issues</a> 和 <a href="https://github.com/k3s-io/k3s/discussions" target="_blank" rel="noopener noreferrer">Discussions</a> 中搜索匹配的问题。</p><p>4) 加入 <a href="https://slack.rancher.io/" target="_blank" rel="noopener noreferrer">Rancher Slack</a> K3s 频道以获得帮助。</p><p>5) 在 K3s Github 上提交<a href="https://github.com/k3s-io/k3s/issues/new/choose" target="_blank" rel="noopener noreferrer">新 issue</a>，你可以描述你的设置和遇到的问题。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/faq/faq.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/advanced"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">高级选项和配置</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/cli"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">CLI 工具</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-是-kubernetes-的替代品吗" class="table-of-contents__link toc-highlight">K3s 是 Kubernetes 的替代品吗？</a></li><li><a href="#如何使用自己的-ingress-代替-traefik" class="table-of-contents__link toc-highlight">如何使用自己的 Ingress 代替 Traefik？</a></li><li><a href="#k3s-支持-windows-吗" class="table-of-contents__link toc-highlight">K3s 支持 Windows 吗？</a></li><li><a href="#如何通过源码构建" class="table-of-contents__link toc-highlight">如何通过源码构建？</a></li><li><a href="#k3s-日志在哪里" class="table-of-contents__link toc-highlight">K3s 日志在哪里？</a></li><li><a href="#可以在-docker-中运行-k3s-吗" class="table-of-contents__link toc-highlight">可以在 Docker 中运行 K3s 吗？</a></li><li><a href="#k3s-server-和-agent-token-有什么区别" class="table-of-contents__link toc-highlight">K3s Server 和 Agent Token 有什么区别？</a></li><li><a href="#不同版本的-k3s-兼容性如何" class="table-of-contents__link toc-highlight">不同版本的 K3s 兼容性如何？</a></li><li><a href="#如果我遇到问题可以在哪里获得帮助" class="table-of-contents__link toc-highlight">如果我遇到问题，可以在哪里获得帮助？</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/helm.html b/zh/helm.html
index 82523794e..3f77fae34 100644
--- a/zh/helm.html
+++ b/zh/helm.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Helm | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/helm"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Helm | K3s"><meta data-rh="true" name="description" content="Helm 是 Kubernetes 的包管理工具。Helm Chart 为 Kubernetes YAML 清单文件提供了模板语法。借助 Helm，开发人员或集群管理员可以创建称为 Chart 的可配置模板，而不仅仅是使用静态清单。如果你需要创建自己的 Chart catalog，请参阅 https://helm.sh/docs/intro/quickstart/。"><meta data-rh="true" property="og:description" content="Helm 是 Kubernetes 的包管理工具。Helm Chart 为 Kubernetes YAML 清单文件提供了模板语法。借助 Helm，开发人员或集群管理员可以创建称为 Chart 的可配置模板，而不仅仅是使用静态清单。如果你需要创建自己的 Chart catalog，请参阅 https://helm.sh/docs/intro/quickstart/。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/helm"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/helm" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/helm" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">Helm | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/helm"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Helm | K3s"><meta data-rh="true" name="description" content="Helm 是 Kubernetes 的包管理工具。Helm Chart 为 Kubernetes YAML 清单文件提供了模板语法。借助 Helm，开发人员或集群管理员可以创建称为 Chart 的可配置模板，而不仅仅是使用静态清单。如果你需要创建自己的 Chart catalog，请参阅 https://helm.sh/docs/intro/quickstart/。"><meta data-rh="true" property="og:description" content="Helm 是 Kubernetes 的包管理工具。Helm Chart 为 Kubernetes YAML 清单文件提供了模板语法。借助 Helm，开发人员或集群管理员可以创建称为 Chart 的可配置模板，而不仅仅是使用静态清单。如果你需要创建自己的 Chart catalog，请参阅 https://helm.sh/docs/intro/quickstart/。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/helm"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/helm" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/helm" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/helm" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/helm" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Helm</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>Helm</h1></header><p>Helm 是 Kubernetes 的包管理工具。Helm Chart 为 Kubernetes YAML 清单文件提供了模板语法。借助 Helm，开发人员或集群管理员可以创建称为 Chart 的可配置模板，而不仅仅是使用静态清单。如果你需要创建自己的 Chart catalog，请参阅 <a href="https://helm.sh/docs/intro/quickstart/" target="_blank" rel="noopener noreferrer">https://helm.sh/docs/intro/quickstart/</a>。</p><p>K3s 不需要使用任何特殊配置来支持 Helm。请确保你已根据<a href="/zh/cluster-access">集群访问</a>文档正确设置了 kubeconfig 路径。</p><p>K3s 包含一个 <a href="https://github.com/k3s-io/helm-controller/" target="_blank" rel="noopener noreferrer">Helm Controller</a>，它使用 HelmChart 自定义资源定义 (CRD) 来管理 Helm Chart 的安装、升级、重新配置和卸载。与<a href="/zh/installation/packaged-components">自动部署 AddOn 清单</a>配合使用后，它可以在磁盘上创建单个文件，自动在集群上安装 Helm Chart。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-helm-controller">使用 Helm Controller<a href="#使用-helm-controller" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><a href="https://github.com/k3s-io/helm-controller#helm-controller" target="_blank" rel="noopener noreferrer">HelmChart Custom Resource</a> 捕获了你通常传递给 <code>helm</code> 命令行工具的大部分选项。以下示例说明了如何从 Bitnami Chart 仓库部署 Apache，并覆盖某些默认的 Chart 值。请注意，HelmChart 资源本身位于 <code>kube-system</code> 命名空间中，但 Chart 的资源将部署到在同一清单中创建的 <code>web</code> 命名空间。如果你希望将 HelmChart 资源与其部署的资源分开，这将很有用。</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChart</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">repo</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//charts.bitnami.com/bitnami</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">chart</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">targetNamespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">service</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">type</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterIP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">hostname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> www.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="helmchart-字段定义">HelmChart 字段定义<a href="#helmchart-字段定义" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><table><thead><tr><th>字段</th><th>默认</th><th>描述</th><th>Helm 参数/标志等效项</th></tr></thead><tbody><tr><td>metadata.name</td><td></td><td>Helm Chart 名称</td><td>NAME</td></tr><tr><td>spec.chart</td><td></td><td>仓库中的 Helm Chart 名称，或 chart archive (.tgz) 的完整 HTTPS URL</td><td>CHART</td></tr><tr><td>spec.targetNamespace</td><td>default</td><td>Helm Chart 目标命名空间</td><td><code>--namespace</code></td></tr><tr><td>spec.version</td><td></td><td>Helm Chart 版本（通过仓库安装时）</td><td><code>--version</code></td></tr><tr><td>spec.repo</td><td></td><td>Helm Chart 仓库 URL</td><td><code>--repo</code></td></tr><tr><td>spec.repoCA</td><td></td><td>指定启用 HTTPS 的 Server 的证书</td><td><code>--ca-file</code></td></tr><tr><td>spec.helmVersion</td><td>v3</td><td>要使用的 Helm 版本（<code>v2</code> 或 <code>v3</code>）</td><td></td></tr><tr><td>spec.bootstrap</td><td>False</td><td>如果需要此 Chart 来引导集群（Cloud Controller Manager 等），请设置为 <code>True</code></td><td></td></tr><tr><td>spec.set</td><td></td><td>覆盖简单的默认 Chart 值。优先于通过 valuesContent 设置的选项。</td><td><code>--set</code> / <code>--set-string</code></td></tr><tr><td>spec.jobImage</td><td></td><td>指定安装 helm chart 时要使用的镜像。例如：rancher/klipper-helm:v0.3.0</td><td></td></tr><tr><td>spec.timeout</td><td>300</td><td>Helm 操作的超时秒数</td><td><code>--timeout</code></td></tr><tr><td>spec.failurePolicy</td><td>reinstall</td><td>如果设置为 <code>abort</code>，Helm 操作会被中止，等待操作人员的手动干预。</td><td></td></tr><tr><td>spec.valuesContent</td><td></td><td>通过 YAML 文件内容覆盖复杂的默认 Chart 值</td><td><code>--values</code></td></tr><tr><td>spec.chartContent</td><td></td><td>Base64 编码的 chart archive .tgz，覆盖 spec.chart</td><td>CHART</td></tr></tbody></table><p>你可以通过集群内的 Kubernetes APIServer 匿名访问 <code>/var/lib/rancher/k3s/server/static/</code> 中的内容。此 URL 可以使用 <code>spec.chart</code> 字段中的特殊变量 <code>%{KUBERNETES_API}%</code> 进行模板化。例如，打包的 Traefik 组件通过 <code>https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz</code> 加载 Chart。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p><code>name</code> 字段需要遵循 Helm Chart 命名约定。如需了解更多信息，请参阅 <a href="https://helm.sh/docs/chart_best_practices/conventions/#chart-names" target="_blank" rel="noopener noreferrer">Helm 最佳实践文档</a>。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-helmchartconfig-自定义打包组件">使用 HelmChartConfig 自定义打包组件<a href="#使用-helmchartconfig-自定义打包组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 起可用</p></div></div><p>为了允许覆盖部署为 HelmCharts（例如 Traefik）的打包组件的值，K3s 支持通过 HelmChartConfig 资源进行自定义部署。HelmChartConfig 资源必须与对应的 HelmChart 名称和命名空间匹配，并且支持提供额外的 <code>valuesContent</code>，它作为附加值文件传递给 <code>helm</code> 命令。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>HelmChart <code>spec.set</code> 值会覆盖 HelmChart 和 HelmChartConfig <code>spec.valuesContent</code> 设置。</p></div></div><p>例如，要自定义打包的 Traefik ingress 配置，你可以创建一个名为 <code>/var/lib/rancher/k3s/server/manifests/traefik-config.yaml</code> 的文件并使用以下内容填充它：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChartConfig</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">tag</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v2.8.5</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">forwardedHeaders</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">trustedIPs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> 10.0.0.0/8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ssl</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">permanentRedirect</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="从-helm-v2-迁移">从 Helm v2 迁移<a href="#从-helm-v2-迁移" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p><a href="https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1" target="_blank" rel="noopener noreferrer">v1.17.0+k3s.1</a> 开始支持 Helm v3 并默认使用它。</p></div></div><p>K3s 可以处理 Helm v2 或 Helm v3。如果你想迁移到 Helm v3，Helm 的<a href="https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/" target="_blank" rel="noopener noreferrer">这篇博客文章</a>解释了如何使用插件进行迁移。有关更多信息，请参阅<a href="https://helm.sh/docs/" target="_blank" rel="noopener noreferrer">官方 Helm 3 文档</a>。请确保你已按照<a href="/zh/cluster-access">集群访问</a>部分正确设置了 kubeconfig。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>Helm 3 不再需要 Tiller 和 <code>helm init</code> 命令。详情请参阅官方文档。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/networking"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">网络</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/advanced"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">高级选项和配置</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用-helm-controller" class="table-of-contents__link toc-highlight">使用 Helm Controller</a></li><li><a href="#使用-helmchartconfig-自定义打包组件" class="table-of-contents__link toc-highlight">使用 HelmChartConfig 自定义打包组件</a></li><li><a href="#从-helm-v2-迁移" class="table-of-contents__link toc-highlight">从 Helm v2 迁移</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/helm" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/helm" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Helm</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>Helm</h1></header><p>Helm 是 Kubernetes 的包管理工具。Helm Chart 为 Kubernetes YAML 清单文件提供了模板语法。借助 Helm，开发人员或集群管理员可以创建称为 Chart 的可配置模板，而不仅仅是使用静态清单。如果你需要创建自己的 Chart catalog，请参阅 <a href="https://helm.sh/docs/intro/quickstart/" target="_blank" rel="noopener noreferrer">https://helm.sh/docs/intro/quickstart/</a>。</p><p>K3s 不需要使用任何特殊配置来支持 Helm。请确保你已根据<a href="/zh/cluster-access">集群访问</a>文档正确设置了 kubeconfig 路径。</p><p>K3s 包含一个 <a href="https://github.com/k3s-io/helm-controller/" target="_blank" rel="noopener noreferrer">Helm Controller</a>，它使用 HelmChart 自定义资源定义 (CRD) 来管理 Helm Chart 的安装、升级、重新配置和卸载。与<a href="/zh/installation/packaged-components">自动部署 AddOn 清单</a>配合使用后，它可以在磁盘上创建单个文件，自动在集群上安装 Helm Chart。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-helm-controller">使用 Helm Controller<a href="#使用-helm-controller" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><a href="https://github.com/k3s-io/helm-controller#helm-controller" target="_blank" rel="noopener noreferrer">HelmChart Custom Resource</a> 捕获了你通常传递给 <code>helm</code> 命令行工具的大部分选项。以下示例说明了如何从 Bitnami Chart 仓库部署 Apache，并覆盖某些默认的 Chart 值。请注意，HelmChart 资源本身位于 <code>kube-system</code> 命名空间中，但 Chart 的资源将部署到在同一清单中创建的 <code>web</code> 命名空间。如果你希望将 HelmChart 资源与其部署的资源分开，这将很有用。</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChart</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">repo</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//charts.bitnami.com/bitnami</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">chart</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apache</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">targetNamespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> web</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">service</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">type</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterIP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">hostname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> www.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="helmchart-字段定义">HelmChart 字段定义<a href="#helmchart-字段定义" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><table><thead><tr><th>字段</th><th>默认</th><th>描述</th><th>Helm 参数/标志等效项</th></tr></thead><tbody><tr><td>metadata.name</td><td></td><td>Helm Chart 名称</td><td>NAME</td></tr><tr><td>spec.chart</td><td></td><td>仓库中的 Helm Chart 名称，或 chart archive (.tgz) 的完整 HTTPS URL</td><td>CHART</td></tr><tr><td>spec.targetNamespace</td><td>default</td><td>Helm Chart 目标命名空间</td><td><code>--namespace</code></td></tr><tr><td>spec.version</td><td></td><td>Helm Chart 版本（通过仓库安装时）</td><td><code>--version</code></td></tr><tr><td>spec.repo</td><td></td><td>Helm Chart 仓库 URL</td><td><code>--repo</code></td></tr><tr><td>spec.repoCA</td><td></td><td>指定启用 HTTPS 的 Server 的证书</td><td><code>--ca-file</code></td></tr><tr><td>spec.helmVersion</td><td>v3</td><td>要使用的 Helm 版本（<code>v2</code> 或 <code>v3</code>）</td><td></td></tr><tr><td>spec.bootstrap</td><td>False</td><td>如果需要此 Chart 来引导集群（Cloud Controller Manager 等），请设置为 <code>True</code></td><td></td></tr><tr><td>spec.set</td><td></td><td>覆盖简单的默认 Chart 值。优先于通过 valuesContent 设置的选项。</td><td><code>--set</code> / <code>--set-string</code></td></tr><tr><td>spec.jobImage</td><td></td><td>指定安装 helm chart 时要使用的镜像。例如：rancher/klipper-helm:v0.3.0</td><td></td></tr><tr><td>spec.timeout</td><td>300</td><td>Helm 操作的超时秒数</td><td><code>--timeout</code></td></tr><tr><td>spec.failurePolicy</td><td>reinstall</td><td>如果设置为 <code>abort</code>，Helm 操作会被中止，等待操作人员的手动干预。</td><td></td></tr><tr><td>spec.valuesContent</td><td></td><td>通过 YAML 文件内容覆盖复杂的默认 Chart 值</td><td><code>--values</code></td></tr><tr><td>spec.chartContent</td><td></td><td>Base64 编码的 chart archive .tgz，覆盖 spec.chart</td><td>CHART</td></tr></tbody></table><p>你可以通过集群内的 Kubernetes APIServer 匿名访问 <code>/var/lib/rancher/k3s/server/static/</code> 中的内容。此 URL 可以使用 <code>spec.chart</code> 字段中的特殊变量 <code>%{KUBERNETES_API}%</code> 进行模板化。例如，打包的 Traefik 组件通过 <code>https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz</code> 加载 Chart。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p><code>name</code> 字段需要遵循 Helm Chart 命名约定。如需了解更多信息，请参阅 <a href="https://helm.sh/docs/chart_best_practices/conventions/#chart-names" target="_blank" rel="noopener noreferrer">Helm 最佳实践文档</a>。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-helmchartconfig-自定义打包组件">使用 HelmChartConfig 自定义打包组件<a href="#使用-helmchartconfig-自定义打包组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 起可用</p></div></div><p>为了允许覆盖部署为 HelmCharts（例如 Traefik）的打包组件的值，K3s 支持通过 HelmChartConfig 资源进行自定义部署。HelmChartConfig 资源必须与对应的 HelmChart 名称和命名空间匹配，并且支持提供额外的 <code>valuesContent</code>，它作为附加值文件传递给 <code>helm</code> 命令。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>HelmChart <code>spec.set</code> 值会覆盖 HelmChart 和 HelmChartConfig <code>spec.valuesContent</code> 设置。</p></div></div><p>例如，要自定义打包的 Traefik ingress 配置，你可以创建一个名为 <code>/var/lib/rancher/k3s/server/manifests/traefik-config.yaml</code> 的文件并使用以下内容填充它：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> helm.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> HelmChartConfig</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">valuesContent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">|</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">tag</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v2.8.5</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">forwardedHeaders</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">trustedIPs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> 10.0.0.0/8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ssl</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enabled</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">permanentRedirect</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="从-helm-v2-迁移">从 Helm v2 迁移<a href="#从-helm-v2-迁移" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p><a href="https://github.com/k3s-io/k3s/releases/tag/v1.17.0%2Bk3s.1" target="_blank" rel="noopener noreferrer">v1.17.0+k3s.1</a> 开始支持 Helm v3 并默认使用它。</p></div></div><p>K3s 可以处理 Helm v2 或 Helm v3。如果你想迁移到 Helm v3，Helm 的<a href="https://helm.sh/blog/migrate-from-helm-v2-to-helm-v3/" target="_blank" rel="noopener noreferrer">这篇博客文章</a>解释了如何使用插件进行迁移。有关更多信息，请参阅<a href="https://helm.sh/docs/" target="_blank" rel="noopener noreferrer">官方 Helm 3 文档</a>。请确保你已按照<a href="/zh/cluster-access">集群访问</a>部分正确设置了 kubeconfig。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>Helm 3 不再需要 Tiller 和 <code>helm init</code> 命令。详情请参阅官方文档。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/helm/helm.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/networking"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">网络</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/advanced"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">高级选项和配置</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用-helm-controller" class="table-of-contents__link toc-highlight">使用 Helm Controller</a></li><li><a href="#使用-helmchartconfig-自定义打包组件" class="table-of-contents__link toc-highlight">使用 HelmChartConfig 自定义打包组件</a></li><li><a href="#从-helm-v2-迁移" class="table-of-contents__link toc-highlight">从 Helm v2 迁移</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/index.html b/zh/index.html
index 365251753..9e91f75e8 100644
--- a/zh/index.html
+++ b/zh/index.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">K3s - 轻量级 Kubernetes | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="K3s - 轻量级 Kubernetes | K3s"><meta data-rh="true" name="description" content="K3s 是轻量级的 Kubernetes。K3s 易于安装，仅需要 Kubernetes 内存的一半，所有组件都在一个小于 100 MB 的二进制文件中。"><meta data-rh="true" property="og:description" content="K3s 是轻量级的 Kubernetes。K3s 易于安装，仅需要 Kubernetes 内存的一半，所有组件都在一个小于 100 MB 的二进制文件中。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><script data-rh="true">function maybeInsertBanner(){window.__DOCUSAURUS_INSERT_BASEURL_BANNER&&insertBanner()}function insertBanner(){var n=document.getElementById("__docusaurus-base-url-issue-banner-container");if(n){n.innerHTML='\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">/zh/</span> </p>\n   <p>We suggest trying baseUrl = <span id="__docusaurus-base-url-issue-banner-suggestion-container" style="font-weight: bold; color: green;"></span></p>\n</div>\n';var e=document.getElementById("__docusaurus-base-url-issue-banner-suggestion-container"),s=window.location.pathname,r="/"===s.substr(-1)?s:s+"/";e.innerHTML=r}}window.__DOCUSAURUS_INSERT_BASEURL_BANNER=!0,document.addEventListener("DOMContentLoaded",maybeInsertBanner)</script><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">K3s - 轻量级 Kubernetes | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="K3s - 轻量级 Kubernetes | K3s"><meta data-rh="true" name="description" content="K3s 是轻量级的 Kubernetes。K3s 易于安装，仅需要 Kubernetes 内存的一半，所有组件都在一个小于 100 MB 的二进制文件中。"><meta data-rh="true" property="og:description" content="K3s 是轻量级的 Kubernetes。K3s 易于安装，仅需要 Kubernetes 内存的一半，所有组件都在一个小于 100 MB 的二进制文件中。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/" hreflang="x-default"><script data-rh="true">function maybeInsertBanner(){window.__DOCUSAURUS_INSERT_BASEURL_BANNER&&insertBanner()}function insertBanner(){var n=document.getElementById("__docusaurus-base-url-issue-banner-container");if(n){n.innerHTML='\n<div id="__docusaurus-base-url-issue-banner" style="border: thick solid red; background-color: rgb(255, 230, 179); margin: 20px; padding: 20px; font-size: 20px;">\n   <p style="font-weight: bold; font-size: 30px;">Your Docusaurus site did not load properly.</p>\n   <p>A very common reason is a wrong site <a href="https://docusaurus.io/docs/docusaurus.config.js/#baseUrl" style="font-weight: bold;">baseUrl configuration</a>.</p>\n   <p>Current configured baseUrl = <span style="font-weight: bold; color: red;">/zh/</span> </p>\n   <p>We suggest trying baseUrl = <span id="__docusaurus-base-url-issue-banner-suggestion-container" style="font-weight: bold; color: green;"></span></p>\n</div>\n';var e=document.getElementById("__docusaurus-base-url-issue-banner-suggestion-container"),s=window.location.pathname,r="/"===s.substr(-1)?s:s+"/";e.innerHTML=r}}window.__DOCUSAURUS_INSERT_BASEURL_BANNER=!0,document.addEventListener("DOMContentLoaded",maybeInsertBanner)</script><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div id="__docusaurus-base-url-issue-banner-container"></div><div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">K3s - 轻量级 Kubernetes</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>K3s - 轻量级 Kubernetes</h1></header><p>K3s 是轻量级的 Kubernetes。K3s 易于安装，仅需要 Kubernetes 内存的一半，所有组件都在一个小于 100 MB 的二进制文件中。</p><p>它适用于：</p><ul><li>Edge</li><li>IoT</li><li>CI</li><li>Development</li><li>ARM</li><li>嵌入 K8s</li><li>不去学习那么多的 Kubernetes 高深知识也能上手使用</li></ul><h1>什么是 K3s？</h1><p>K3s 是一个完全兼容的 Kubernetes 发行版，具有以下增强功能：</p><ul><li>打包为单个二进制文件。</li><li>使用基于 sqlite3 作为默认存储机制的轻量级存储后端。同时支持使用 etcd3、MySQL 和 Postgres。</li><li>封装在简单的启动程序中，可以处理很多复杂的 TLS 和选项。</li><li>默认情况下是安全的，对轻量级环境有合理的默认值。</li><li>添加了简单但强大的 <code>batteries-included</code> 功能，例如：<ul><li>本地存储提供程序</li><li>service load balancer</li><li>Helm controller</li><li>Traefik ingress controller</li></ul></li><li>所有 Kubernetes control plane 组件的操作都封装在单个二进制文件和进程中。因此，K3s 支持自动化和管理复杂的集群操作（例如证书分发等）。</li><li>最大程度减轻了外部依赖性，K3s 仅需要现代内核和 cgroup 挂载。K3s 打包了所需的依赖，包括：<ul><li>containerd</li><li>Flannel (CNI)</li><li>CoreDNS</li><li>Traefik (Ingress)</li><li>Klipper-lb (Service LB)</li><li>嵌入式网络策略控制器</li><li>嵌入式 local-path-provisioner</li><li>主机实用程序（iptables、socat 等）</li></ul></li></ul><h1>为什么叫 K3s?</h1><p>我们希望安装的 Kubernetes 只占用一半的内存。Kubernetes 是一个 10 个字母的单词，简写为 K8s。Kubernetes 的一半就是一个 5 个字母的单词，因此简写为 K3s。K3s 没有全称，也没有官方的发音。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/introduction.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--next" href="/zh/architecture"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">架构</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div id="__docusaurus-base-url-issue-banner-container"></div><div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">K3s - 轻量级 Kubernetes</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>K3s - 轻量级 Kubernetes</h1></header><p>K3s 是轻量级的 Kubernetes。K3s 易于安装，仅需要 Kubernetes 内存的一半，所有组件都在一个小于 100 MB 的二进制文件中。</p><p>它适用于：</p><ul><li>Edge</li><li>IoT</li><li>CI</li><li>Development</li><li>ARM</li><li>嵌入 K8s</li><li>不去学习那么多的 Kubernetes 高深知识也能上手使用</li></ul><h1>什么是 K3s？</h1><p>K3s 是一个完全兼容的 Kubernetes 发行版，具有以下增强功能：</p><ul><li>打包为单个二进制文件。</li><li>使用基于 sqlite3 作为默认存储机制的轻量级存储后端。同时支持使用 etcd3、MySQL 和 Postgres。</li><li>封装在简单的启动程序中，可以处理很多复杂的 TLS 和选项。</li><li>默认情况下是安全的，对轻量级环境有合理的默认值。</li><li>添加了简单但强大的 <code>batteries-included</code> 功能，例如：<ul><li>本地存储提供程序</li><li>service load balancer</li><li>Helm controller</li><li>Traefik ingress controller</li></ul></li><li>所有 Kubernetes control plane 组件的操作都封装在单个二进制文件和进程中。因此，K3s 支持自动化和管理复杂的集群操作（例如证书分发等）。</li><li>最大程度减轻了外部依赖性，K3s 仅需要现代内核和 cgroup 挂载。K3s 打包了所需的依赖，包括：<ul><li>containerd</li><li>Flannel (CNI)</li><li>CoreDNS</li><li>Traefik (Ingress)</li><li>Klipper-lb (Service LB)</li><li>嵌入式网络策略控制器</li><li>嵌入式 local-path-provisioner</li><li>主机实用程序（iptables、socat 等）</li></ul></li></ul><h1>为什么叫 K3s?</h1><p>我们希望安装的 Kubernetes 只占用一半的内存。Kubernetes 是一个 10 个字母的单词，简写为 K8s。Kubernetes 的一半就是一个 5 个字母的单词，因此简写为 K3s。K3s 没有全称，也没有官方的发音。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/introduction.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--next" href="/zh/architecture"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">架构</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation.html b/zh/installation.html
index 52a15dc33..bd8f9c305 100644
--- a/zh/installation.html
+++ b/zh/installation.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">安装 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="安装 | K3s"><meta data-rh="true" name="description" content="本文包含了在各种环境下安装 K3s 的说明。在开始安装 K3s 之前，请确保已满足 K3s 的安装要求。"><meta data-rh="true" property="og:description" content="本文包含了在各种环境下安装 K3s 的说明。在开始安装 K3s 之前，请确保已满足 K3s 的安装要求。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">安装 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="安装 | K3s"><meta data-rh="true" name="description" content="本文包含了在各种环境下安装 K3s 的说明。在开始安装 K3s 之前，请确保已满足 K3s 的安装要求。"><meta data-rh="true" property="og:description" content="本文包含了在各种环境下安装 K3s 的说明。在开始安装 K3s 之前，请确保已满足 K3s 的安装要求。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">安装</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>安装</h1></header><p>本文包含了在各种环境下安装 K3s 的说明。在开始安装 K3s 之前，请确保已满足 <a href="/zh/installation/requirements">K3s 的安装要求</a>。</p><p><a href="/zh/installation/configuration">配置选项</a>提供了安装 K3s 时可用选项的指南。</p><p><a href="/zh/installation/network-options">网络选项</a>提供了 K3s 中可用网络选项的指南。</p><p><a href="/zh/installation/airgap">离线安装</a>详细介绍了如何在无法直接访问互联网的环境中设置 K3s。</p><p><a href="/zh/installation/server-roles">管理 Server 角色</a>详细介绍了如何使用专用 <code>control-plane</code> 或 <code>etcd</code> Server 设置 K3s。</p><p><a href="/zh/installation/packaged-components">管理打包组件</a>详细介绍了如何禁用打包组件，或使用自动部署清单安装你自己的组件。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/quick-start"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">快速入门指南</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/requirements"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">要求</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">安装</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>安装</h1></header><p>本文包含了在各种环境下安装 K3s 的说明。在开始安装 K3s 之前，请确保已满足 <a href="/zh/installation/requirements">K3s 的安装要求</a>。</p><p><a href="/zh/installation/configuration">配置选项</a>提供了安装 K3s 时可用选项的指南。</p><p><a href="/zh/installation/network-options">网络选项</a>提供了 K3s 中可用网络选项的指南。</p><p><a href="/zh/installation/airgap">离线安装</a>详细介绍了如何在无法直接访问互联网的环境中设置 K3s。</p><p><a href="/zh/installation/server-roles">管理 Server 角色</a>详细介绍了如何使用专用 <code>control-plane</code> 或 <code>etcd</code> Server 设置 K3s。</p><p><a href="/zh/installation/packaged-components">管理打包组件</a>详细介绍了如何禁用打包组件，或使用自动部署清单安装你自己的组件。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/installation.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/quick-start"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">快速入门指南</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/requirements"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">要求</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/airgap.html b/zh/installation/airgap.html
index 0492990e7..683c52887 100644
--- a/zh/installation/airgap.html
+++ b/zh/installation/airgap.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">离线安装 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/airgap"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="离线安装 | K3s"><meta data-rh="true" name="description" content="你可以使用两种不同的方法在离线环境中安装 K3s。离线环境指的是不直接连接到 Internet 的环境。你可以部署私有镜像仓库和 mirror docker.io，也可以手动部署镜像，例如用于小型集群。"><meta data-rh="true" property="og:description" content="你可以使用两种不同的方法在离线环境中安装 K3s。离线环境指的是不直接连接到 Internet 的环境。你可以部署私有镜像仓库和 mirror docker.io，也可以手动部署镜像，例如用于小型集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/airgap"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/airgap" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/airgap" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">离线安装 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/airgap"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="离线安装 | K3s"><meta data-rh="true" name="description" content="你可以使用两种不同的方法在离线环境中安装 K3s。离线环境指的是不直接连接到 Internet 的环境。你可以部署私有镜像仓库和 mirror docker.io，也可以手动部署镜像，例如用于小型集群。"><meta data-rh="true" property="og:description" content="你可以使用两种不同的方法在离线环境中安装 K3s。离线环境指的是不直接连接到 Internet 的环境。你可以部署私有镜像仓库和 mirror docker.io，也可以手动部署镜像，例如用于小型集群。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/airgap"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/airgap" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/airgap" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/airgap" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">离线安装</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>离线安装</h1></header><p>你可以使用两种不同的方法在离线环境中安装 K3s。离线环境指的是不直接连接到 Internet 的环境。你可以部署私有镜像仓库和 mirror docker.io，也可以手动部署镜像，例如用于小型集群。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="私有镜像仓库">私有镜像仓库<a href="#私有镜像仓库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>本文档假设你已经在离线环境中创建了节点，并且在堡垒主机上拥有 Docker 私有镜像仓库。</p><p>如果你尚未设置私有 Docker 镜像仓库，请参阅<a href="https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry" target="_blank" rel="noopener noreferrer">官方文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="创建镜像仓库-yaml">创建镜像仓库 YAML<a href="#创建镜像仓库-yaml" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>按照<a href="/zh/installation/private-registry">私有镜像仓库配置</a>指南创建和配置 registry.yaml 文件。</p><p>完成此操作后，你现在可以转到下面的<a href="#%E5%AE%89%E8%A3%85-k3s">安装 K3s</a> 部分。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="手动部署镜像">手动部署镜像<a href="#手动部署镜像" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>我们假设你已经在离线环境中创建了节点并使用 Containerd 作为容器运行时。
-此方法需要你手动将必要的镜像部署到每个节点，适用于无法运行私有镜像仓库的边缘部署。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="准备镜像目录和-k3s-二进制文件">准备镜像目录和 K3s 二进制文件<a href="#准备镜像目录和-k3s-二进制文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">Releases</a> 页面获取要运行的 K3s 版本的镜像 tar 文件。</p><p>将 tar 文件放在 <code>images</code> 目录下，例如：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p /var/lib/rancher/k3s/agent/images/</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cp</span><span class="token plain"> ./k3s-airgap-images-</span><span class="token variable" style="color:rgb(191, 199, 213)">$ARCH</span><span class="token plain">.tar /var/lib/rancher/k3s/agent/images/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>完成此操作后，你现在可以转到下面的<a href="#%E5%AE%89%E8%A3%85-k3s">安装 K3s</a> 部分。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="安装-k3s">安装 K3s<a href="#安装-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="先决条件">先决条件<a href="#先决条件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><ul><li>在安装 K3s 之前，完成上面的<a href="#%E7%A7%81%E6%9C%89%E9%95%9C%E5%83%8F%E4%BB%93%E5%BA%93">私有镜像仓库</a>或<a href="#%E6%89%8B%E5%8A%A8%E9%83%A8%E7%BD%B2%E9%95%9C%E5%83%8F">手动部署镜像</a>操作，预填充 K3s 需要安装的镜像。</li><li>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">Releases</a> 页面下载 K3s 二进制文件，该文件需要匹配用于获取离线镜像的版本。将二进制文件放在每个离线节点上的 <code>/usr/local/bin</code> 中，并确保文件是可执行的。</li><li>在 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">get.k3s.io</a> 下载 K3s 安装脚本。将安装脚本放在每个离线节点上的任何位置，并将其命名为 <code>install.sh</code>。</li><li>如果你的节点没有带默认路由的接口，则必须配置默认路由，使用虚拟接口的黑洞路由也足够了。K3s 需要一个默认路由来自动检测节点的主 IP，并使 kube-proxy ClusterIP 路由正常运行。要添加虚拟路由，请执行以下操作：<div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip link add dummy0 type dummy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip link set dummy0 up</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip addr add 169.254.255.254/31 dev dummy0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip route add default via 169.254.255.255 dev dummy0 metric 1000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ul><p>使用 <code>INSTALL_K3S_SKIP_DOWNLOAD</code> 环境变量运行 K3s 脚本时，K3s 将使用脚本的本地版本和二进制文件。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="在离线环境中安装-k3s">在离线环境中安装 K3s<a href="#在离线环境中安装-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以在一台或多台服务器上安装 K3s，如下所述。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单节点配置</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用配置</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>要在单个服务器上安装 K3s，只需在 Server 节点上执行以下操作：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>要添加其他 Agent，请在每个 Agent 节点上执行以下操作。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">YOUR_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>Server 的 Token 通常位于 <code>/var/lib/rancher/k3s/server/token</code>。</p></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>参考<a href="/zh/datastore/ha">具有外部数据库的高可用</a>或<a href="/zh/datastore/ha-embedded">具有嵌入式数据库的高可用</a>指南。你需要调整安装命令来指定 <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>，并在本地运行安装脚本，而不是使用 curl。你还将使用 <code>INSTALL_K3S_EXEC=&#x27;args&#x27;</code> 为 K3s 提供参数。</p><p>例如，具有外部数据库的高可用指南的第二步提到了以下内容：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>你需要修改此类示例，如下所示：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;server --token=SECRET&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_DATASTORE_ENDPOINT</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;mysql://username:password@tcp(hostname:3306)/database-name&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>K3s 还为 kubelet 提供了一个 <code>--resolv-conf</code> 标志，有助于在离线网络中配置 DNS。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="升级">升级<a href="#升级" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="安装脚本方法">安装脚本方法<a href="#安装脚本方法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以通过以下方式完成离线环境的升级：</p><ol><li>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">Releases</a> 页面下载要升级的 K3s 版本的新离线镜像 tar 包。将 tar 文件放在每个节点上的 <code>/var/lib/rancher/k3s/agent/images/</code> 目录中。删除旧的 tar 文件。</li><li>复制并替换每个节点上 <code>/usr/local/bin</code> 中的旧 K3s 二进制文件。复制 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">K3s 安装脚本</a>（因为脚本可能自上次版本发布以来已更改）。使用相同的环境变量再次运行脚本。</li><li>重启 K3s 服务（如果安装程序没有自动重启 K3s 的话）。</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="自动升级">自动升级<a href="#自动升级" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 支持<a href="/zh/upgrades/automated">自动升级</a>。要在离线环境中启用此功能，你必须确保所需的镜像在你的私有镜像仓库中可用。</p><p>你将需要与你打算升级到的 K3s 版本相对应的 rancher/k3s-upgrade 版本。注意，镜像标签将 K3s 版本中的 <code>+</code> 替换为 <code>-</code>，因为 Docker 镜像不支持 <code>+</code>。</p><p>你还需要在你要部署的 <code>system-upgrade-controller</code> 清单 YAML 中指定的 <code>system-upgrade-controller</code> 和 <code>kubectl</code> 版本。在<a href="https://github.com/rancher/system-upgrade-controller/releases/latest" target="_blank" rel="noopener noreferrer">这里</a>检查 <code>system-upgrad-controller</code> 的最新版本，并下载 <code>system-upgrade-controller.yaml</code> 来确定你需要推送到私有镜像仓库的版本。例如，在 <code>system-upgrade-controller</code> 的 v0.4.0 版本中，清单 YAML 中指定了这些镜像：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/system-upgrade-controller:v0.4.0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/kubectl:v0.17.0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>将必要的 rancher/k3s-upgrade、rancher/system-upgrade-controller 和 rancher/kubectl 镜像添加到私有镜像仓库后，请按照<a href="/zh/upgrades/automated">自动升级</a>指南进行操作。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/private-registry"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">私有镜像仓库配置</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/server-roles"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">管理 Server 角色</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#私有镜像仓库" class="table-of-contents__link toc-highlight">私有镜像仓库</a><ul><li><a href="#创建镜像仓库-yaml" class="table-of-contents__link toc-highlight">创建镜像仓库 YAML</a></li></ul></li><li><a href="#手动部署镜像" class="table-of-contents__link toc-highlight">手动部署镜像</a><ul><li><a href="#准备镜像目录和-k3s-二进制文件" class="table-of-contents__link toc-highlight">准备镜像目录和 K3s 二进制文件</a></li></ul></li><li><a href="#安装-k3s" class="table-of-contents__link toc-highlight">安装 K3s</a><ul><li><a href="#先决条件" class="table-of-contents__link toc-highlight">先决条件</a></li><li><a href="#在离线环境中安装-k3s" class="table-of-contents__link toc-highlight">在离线环境中安装 K3s</a></li></ul></li><li><a href="#升级" class="table-of-contents__link toc-highlight">升级</a><ul><li><a href="#安装脚本方法" class="table-of-contents__link toc-highlight">安装脚本方法</a></li><li><a href="#自动升级" class="table-of-contents__link toc-highlight">自动升级</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/airgap" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">离线安装</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>离线安装</h1></header><p>你可以使用两种不同的方法在离线环境中安装 K3s。离线环境指的是不直接连接到 Internet 的环境。你可以部署私有镜像仓库和 mirror docker.io，也可以手动部署镜像，例如用于小型集群。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="私有镜像仓库">私有镜像仓库<a href="#私有镜像仓库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>本文档假设你已经在离线环境中创建了节点，并且在堡垒主机上拥有 Docker 私有镜像仓库。</p><p>如果你尚未设置私有 Docker 镜像仓库，请参阅<a href="https://docs.docker.com/registry/deploying/#run-an-externally-accessible-registry" target="_blank" rel="noopener noreferrer">官方文档</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="创建镜像仓库-yaml">创建镜像仓库 YAML<a href="#创建镜像仓库-yaml" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>按照<a href="/zh/installation/private-registry">私有镜像仓库配置</a>指南创建和配置 registry.yaml 文件。</p><p>完成此操作后，你现在可以转到下面的<a href="#%E5%AE%89%E8%A3%85-k3s">安装 K3s</a> 部分。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="手动部署镜像">手动部署镜像<a href="#手动部署镜像" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>我们假设你已经在离线环境中创建了节点并使用 Containerd 作为容器运行时。
+此方法需要你手动将必要的镜像部署到每个节点，适用于无法运行私有镜像仓库的边缘部署。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="准备镜像目录和-k3s-二进制文件">准备镜像目录和 K3s 二进制文件<a href="#准备镜像目录和-k3s-二进制文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">Releases</a> 页面获取要运行的 K3s 版本的镜像 tar 文件。</p><p>将 tar 文件放在 <code>images</code> 目录下，例如：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p /var/lib/rancher/k3s/agent/images/</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">cp</span><span class="token plain"> ./k3s-airgap-images-</span><span class="token variable" style="color:rgb(191, 199, 213)">$ARCH</span><span class="token plain">.tar /var/lib/rancher/k3s/agent/images/</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>完成此操作后，你现在可以转到下面的<a href="#%E5%AE%89%E8%A3%85-k3s">安装 K3s</a> 部分。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="安装-k3s">安装 K3s<a href="#安装-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="先决条件">先决条件<a href="#先决条件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><ul><li>在安装 K3s 之前，完成上面的<a href="#%E7%A7%81%E6%9C%89%E9%95%9C%E5%83%8F%E4%BB%93%E5%BA%93">私有镜像仓库</a>或<a href="#%E6%89%8B%E5%8A%A8%E9%83%A8%E7%BD%B2%E9%95%9C%E5%83%8F">手动部署镜像</a>操作，预填充 K3s 需要安装的镜像。</li><li>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">Releases</a> 页面下载 K3s 二进制文件，该文件需要匹配用于获取离线镜像的版本。将二进制文件放在每个离线节点上的 <code>/usr/local/bin</code> 中，并确保文件是可执行的。</li><li>在 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">get.k3s.io</a> 下载 K3s 安装脚本。将安装脚本放在每个离线节点上的任何位置，并将其命名为 <code>install.sh</code>。</li><li>如果你的节点没有带默认路由的接口，则必须配置默认路由，使用虚拟接口的黑洞路由也足够了。K3s 需要一个默认路由来自动检测节点的主 IP，并使 kube-proxy ClusterIP 路由正常运行。要添加虚拟路由，请执行以下操作：<div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip link add dummy0 type dummy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip link set dummy0 up</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip addr add 169.254.255.254/31 dev dummy0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip route add default via 169.254.255.255 dev dummy0 metric 1000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></li></ul><p>使用 <code>INSTALL_K3S_SKIP_DOWNLOAD</code> 环境变量运行 K3s 脚本时，K3s 将使用脚本的本地版本和二进制文件。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="在离线环境中安装-k3s">在离线环境中安装 K3s<a href="#在离线环境中安装-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以在一台或多台服务器上安装 K3s，如下所述。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">单节点配置</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">高可用配置</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>要在单个服务器上安装 K3s，只需在 Server 节点上执行以下操作：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>要添加其他 Agent，请在每个 Agent 节点上执行以下操作。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">YOUR_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> ./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>Server 的 Token 通常位于 <code>/var/lib/rancher/k3s/server/token</code>。</p></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>参考<a href="/zh/datastore/ha">具有外部数据库的高可用</a>或<a href="/zh/datastore/ha-embedded">具有嵌入式数据库的高可用</a>指南。你需要调整安装命令来指定 <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>，并在本地运行安装脚本，而不是使用 curl。你还将使用 <code>INSTALL_K3S_EXEC=&#x27;args&#x27;</code> 为 K3s 提供参数。</p><p>例如，具有外部数据库的高可用指南的第二步提到了以下内容：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --token</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">SECRET </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --datastore-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mysql://username:password@tcp(hostname:3306)/database-name&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>你需要修改此类示例，如下所示：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_SKIP_DOWNLOAD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;server --token=SECRET&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_DATASTORE_ENDPOINT</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;mysql://username:password@tcp(hostname:3306)/database-name&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">./install.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>K3s 还为 kubelet 提供了一个 <code>--resolv-conf</code> 标志，有助于在离线网络中配置 DNS。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="升级">升级<a href="#升级" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="安装脚本方法">安装脚本方法<a href="#安装脚本方法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以通过以下方式完成离线环境的升级：</p><ol><li>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">Releases</a> 页面下载要升级的 K3s 版本的新离线镜像 tar 包。将 tar 文件放在每个节点上的 <code>/var/lib/rancher/k3s/agent/images/</code> 目录中。删除旧的 tar 文件。</li><li>复制并替换每个节点上 <code>/usr/local/bin</code> 中的旧 K3s 二进制文件。复制 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">K3s 安装脚本</a>（因为脚本可能自上次版本发布以来已更改）。使用相同的环境变量再次运行脚本。</li><li>重启 K3s 服务（如果安装程序没有自动重启 K3s 的话）。</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="自动升级">自动升级<a href="#自动升级" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 支持<a href="/zh/upgrades/automated">自动升级</a>。要在离线环境中启用此功能，你必须确保所需的镜像在你的私有镜像仓库中可用。</p><p>你将需要与你打算升级到的 K3s 版本相对应的 rancher/k3s-upgrade 版本。注意，镜像标签将 K3s 版本中的 <code>+</code> 替换为 <code>-</code>，因为 Docker 镜像不支持 <code>+</code>。</p><p>你还需要在你要部署的 <code>system-upgrade-controller</code> 清单 YAML 中指定的 <code>system-upgrade-controller</code> 和 <code>kubectl</code> 版本。在<a href="https://github.com/rancher/system-upgrade-controller/releases/latest" target="_blank" rel="noopener noreferrer">这里</a>检查 <code>system-upgrad-controller</code> 的最新版本，并下载 <code>system-upgrade-controller.yaml</code> 来确定你需要推送到私有镜像仓库的版本。例如，在 <code>system-upgrade-controller</code> 的 v0.4.0 版本中，清单 YAML 中指定了这些镜像：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/system-upgrade-controller:v0.4.0</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">rancher/kubectl:v0.17.0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>将必要的 rancher/k3s-upgrade、rancher/system-upgrade-controller 和 rancher/kubectl 镜像添加到私有镜像仓库后，请按照<a href="/zh/upgrades/automated">自动升级</a>指南进行操作。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/airgap.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/private-registry"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">私有镜像仓库配置</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/server-roles"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">管理 Server 角色</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#私有镜像仓库" class="table-of-contents__link toc-highlight">私有镜像仓库</a><ul><li><a href="#创建镜像仓库-yaml" class="table-of-contents__link toc-highlight">创建镜像仓库 YAML</a></li></ul></li><li><a href="#手动部署镜像" class="table-of-contents__link toc-highlight">手动部署镜像</a><ul><li><a href="#准备镜像目录和-k3s-二进制文件" class="table-of-contents__link toc-highlight">准备镜像目录和 K3s 二进制文件</a></li></ul></li><li><a href="#安装-k3s" class="table-of-contents__link toc-highlight">安装 K3s</a><ul><li><a href="#先决条件" class="table-of-contents__link toc-highlight">先决条件</a></li><li><a href="#在离线环境中安装-k3s" class="table-of-contents__link toc-highlight">在离线环境中安装 K3s</a></li></ul></li><li><a href="#升级" class="table-of-contents__link toc-highlight">升级</a><ul><li><a href="#安装脚本方法" class="table-of-contents__link toc-highlight">安装脚本方法</a></li><li><a href="#自动升级" class="table-of-contents__link toc-highlight">自动升级</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/configuration.html b/zh/installation/configuration.html
index b2085d3a9..20c6396a3 100644
--- a/zh/installation/configuration.html
+++ b/zh/installation/configuration.html
@@ -3,23 +3,23 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">配置选项 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/configuration"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="配置选项 | K3s"><meta data-rh="true" name="description" content="本文重点介绍首次设置 K3s 时常用的选项。如需了解详情，请参阅有关高级选项和配置以及 server 和 agent 命令的文档。"><meta data-rh="true" property="og:description" content="本文重点介绍首次设置 K3s 时常用的选项。如需了解详情，请参阅有关高级选项和配置以及 server 和 agent 命令的文档。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/configuration"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/configuration" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/configuration" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">配置选项 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/configuration"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="配置选项 | K3s"><meta data-rh="true" name="description" content="本文重点介绍首次设置 K3s 时常用的选项。如需了解详情，请参阅有关高级选项和配置以及 server 和 agent 命令的文档。"><meta data-rh="true" property="og:description" content="本文重点介绍首次设置 K3s 时常用的选项。如需了解详情，请参阅有关高级选项和配置以及 server 和 agent 命令的文档。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/configuration"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/configuration" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/configuration" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/configuration" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">配置选项</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>配置选项</h1></header><p>本文重点介绍首次设置 K3s 时常用的选项。如需了解详情，请参阅有关<a href="/zh/advanced">高级选项和配置</a>以及 <a href="/zh/cli/server">server</a> 和 <a href="/zh/cli/agent">agent</a> 命令的文档。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用安装脚本的选项">使用安装脚本的选项<a href="#使用安装脚本的选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如<a href="/zh/quick-start">快速入门指南</a>中所述，你可以使用 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。</p><p>你可以结合使用 <code>INSTALL_K3S_EXEC</code>、<code>K3S_</code> 环境变量和命令标志将配置传递给服务配置。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/configuration" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">配置选项</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>配置选项</h1></header><p>本文重点介绍首次设置 K3s 时常用的选项。如需了解详情，请参阅有关<a href="/zh/advanced">高级选项和配置</a>以及 <a href="/zh/cli/server">server</a> 和 <a href="/zh/cli/agent">agent</a> 命令的文档。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="使用安装脚本的选项">使用安装脚本的选项<a href="#使用安装脚本的选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如<a href="/zh/quick-start">快速入门指南</a>中所述，你可以使用 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。</p><p>你可以结合使用 <code>INSTALL_K3S_EXEC</code>、<code>K3S_</code> 环境变量和命令标志将配置传递给服务配置。
 带前缀的环境变量、<code>INSTALL_K3S_EXEC</code> 值和尾附的 shell 参数都保存在服务配置中。
 安装后，如果需要更改配置，你可以编辑环境文件、编辑服务配置或简单使用新选项重新运行安装程序。</p><p>为了说明这一点，以下命令均同样地没有 Flannel 和使用令牌的情况下注册 Server：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server --flannel-backend none&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --flannel-backend none</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># server is assumed below because there is no K3S_URL</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;--flannel-backend none --token 12345&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none --token </span><span class="token number" style="color:rgb(247, 140, 108)">12345</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>注册 Agent 时，以下命令都会导致同样的行为：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent --server https://k3s.example.com --token mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s -</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;agent&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;mypassword&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --server https://k3s.example.com</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - agent --token mypassword</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://k3s.example.com </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mypassword </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># agent is assumed because of K3S_URL</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>有关所有环境变量的详细信息，请参阅<a href="/zh/reference/env-variables">环境变量</a>。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>如果你在运行安装脚本时进行了配置，但在重新运行安装脚本时没有重新设置，则原始值将会丢失。</p><p><a href="#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a> 的内容不受安装脚本管理。
 要让你的配置独立于安装脚本，请使用配置文件而不是传递环境变量或使用安装脚本参数。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="二进制配置">二进制配置<a href="#二进制配置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如前所述，安装脚本主要是将 K3s 配置为服务来运行。<br>
 <!-- -->如果你选择不使用该脚本，你可以通过我们的 <a href="https://github.com/k3s-io/k3s/releases/latest" target="_blank" rel="noopener noreferrer">Releases 页面</a>下载二进制文件，将其放在你的路径上，然后执行它即可运行 K3s。对于永久安装而言这不是特别有用，但如果执行不需要将 K3s 作为系统服务管理的快速测试，这可能有用。</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -Lo /usr/local/bin/k3s https://github.com/k3s-io/k3s/releases/download/v1.26.5+k3s1/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">chmod</span><span class="token plain"> a+x /usr/local/bin/k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>你可以通过设置 <code>K3S_</code> 环境变量来传递配置：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>或使用命令标志：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server --write-kubeconfig-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">644</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s Agent 也可以这样配置：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s agent --server https://k3s.example.com --token mypassword</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>关于配置 K3s Server 的详细信息，请参阅 <a href="/zh/cli/server"><code>K3s Server</code> 文档</a>。<br>
 <!-- -->有关配置 K3s Agent 的详细信息，请参阅 <a href="/zh/cli/agent"><code>K3s Agent</code> 文档</a>。<br>
 <!-- -->你还可以使用 <code>--help</code> 标志来查看所有可用选项及其对应的环境变量。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>匹配标志</div><div class="admonitionContent_S0QG"><p>匹配 Server 节点上的关键标志是非常重要的。例如，如果你在 master 节点上使用了 <code>--disable servicelb</code> 或 <code>--cluster-cidr=10.200.0.0/16</code> 标志，但是没有在其他 Server 节点上进行相同的设置，节点将无法加入。它们会显示 <code>failed to validate server configuration: critical configuration value mismatch</code> 错误。
-有关必须在 Server 节点上设置的标志的更多信息，请参阅 Server 配置文档（上方链接）。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="配置文件">配置文件<a href="#配置文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 起可用</p></div></div><p>除了使用环境变量和 CLI 参数之外，你还可以使用配置文件配置 K3s。</p><p>默认情况下，安装时将使用位于 <code>/etc/rancher/k3s/config.yaml</code> 的 YAML 文件中的值。</p><p>下面是一个 <code>server</code> 配置文件的基本示例：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>等效于以下 CLI 参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --write-kubeconfig-mode </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain">             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>一般来说，CLI 参数映射到各自的 YAML 键，可重复的 CLI 参数被表示为 YAML 列表。布尔标志在 YAML 文件中表示为 <code>true</code> 或 <code>false</code>。</p><p>也可以同时使用配置文件和 CLI 参数。 在这种情况下，值将从两个来源加载，但 CLI 参数将优先。 对于 <code>--node-label</code> 等可重复参数，CLI 参数将覆盖列表中的所有值。</p><p>最后，配置文件的位置可以通过 CLI 参数 <code>--config FILE, -c FILE</code> 或者环境变量 <code>$K3S_CONFIG_FILE</code> 来改变。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="多个配置文件">多个配置文件<a href="#多个配置文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a> 起可用</p></div></div><p>支持多个配置文件。默认从 <code>/etc/rancher/k3s/config.yaml</code> 和 <code>/etc/rancher/k3s/config.yaml.d/*.yaml</code> 中按字母顺序读取配置文件。</p><p>默认情况下，将使用给定键的最后一个值。可以将 <code>+</code> 附加到键，这样能将值附加到现有字符串或切片，而不是替换它。后续文件中的所有此键也需要使用 <code>+</code> 来防止覆盖累积值。</p><p>多个配置文件的示例如下：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=bar</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> bar=baz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test1.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">600</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test2.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint+</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>因此，最终配置如下：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="组合使用">组合使用<a href="#组合使用" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>你可以把上述所有选项组合成一个示例。</p><p><code>config.yaml</code> 文件创建在 <code>/etc/rancher/k3s/config.yaml</code> 中：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secret&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">debug</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>然后使用环境变量和标志组合来运行安装脚本：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>或者，如果你已经安装了 K3s 二进制文件：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Server 情况如下：</p><ul><li>kubeconfig 文件权限为 <code>644</code></li><li>Flannel 后端设置为 <code>none</code></li><li>令牌设置为 <code>secret</code></li><li>启用调试日志记录</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/requirements"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">要求</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/network-options"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">网络选项</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用安装脚本的选项" class="table-of-contents__link toc-highlight">使用安装脚本的选项</a></li><li><a href="#二进制配置" class="table-of-contents__link toc-highlight">二进制配置</a></li><li><a href="#配置文件" class="table-of-contents__link toc-highlight">配置文件</a><ul><li><a href="#多个配置文件" class="table-of-contents__link toc-highlight">多个配置文件</a></li></ul></li><li><a href="#组合使用" class="table-of-contents__link toc-highlight">组合使用</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+有关必须在 Server 节点上设置的标志的更多信息，请参阅 Server 配置文档（上方链接）。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="配置文件">配置文件<a href="#配置文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.19.1%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.19.1+k3s1</a> 起可用</p></div></div><p>除了使用环境变量和 CLI 参数之外，你还可以使用配置文件配置 K3s。</p><p>默认情况下，安装时将使用位于 <code>/etc/rancher/k3s/config.yaml</code> 的 YAML 文件中的值。</p><p>下面是一个 <code>server</code> 配置文件的基本示例：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">tls-san</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>等效于以下 CLI 参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --write-kubeconfig-mode </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;0644&quot;</span><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --tls-san </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo.local&quot;</span><span class="token plain">             </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;foo=bar&quot;</span><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --node-label </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;something=amazing&quot;</span><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  --cluster-init</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>一般来说，CLI 参数映射到各自的 YAML 键，可重复的 CLI 参数被表示为 YAML 列表。布尔标志在 YAML 文件中表示为 <code>true</code> 或 <code>false</code>。</p><p>也可以同时使用配置文件和 CLI 参数。 在这种情况下，值将从两个来源加载，但 CLI 参数将优先。 对于 <code>--node-label</code> 等可重复参数，CLI 参数将覆盖列表中的所有值。</p><p>最后，配置文件的位置可以通过 CLI 参数 <code>--config FILE, -c FILE</code> 或者环境变量 <code>$K3S_CONFIG_FILE</code> 来改变。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="多个配置文件">多个配置文件<a href="#多个配置文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a> 起可用</p></div></div><p>支持多个配置文件。默认从 <code>/etc/rancher/k3s/config.yaml</code> 和 <code>/etc/rancher/k3s/config.yaml.d/*.yaml</code> 中按字母顺序读取配置文件。</p><p>默认情况下，将使用给定键的最后一个值。可以将 <code>+</code> 附加到键，这样能将值附加到现有字符串或切片，而不是替换它。后续文件中的所有此键也需要使用 <code>+</code> 来防止覆盖累积值。</p><p>多个配置文件的示例如下：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=bar</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> bar=baz</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test1.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">600</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># config.yaml.d/test2.yaml</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint+</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>因此，最终配置如下：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">write-kubeconfig-mode</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">777</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> boop</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-label</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> other=what</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> foo=three</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">node-taint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> alice=bob</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoExecute</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> charlie=delta</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">NoSchedule</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="组合使用">组合使用<a href="#组合使用" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>你可以把上述所有选项组合成一个示例。</p><p><code>config.yaml</code> 文件创建在 <code>/etc/rancher/k3s/config.yaml</code> 中：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">token</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secret&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">debug</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>然后使用环境变量和标志组合来运行安装脚本：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_EXEC</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;server&quot;</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>或者，如果你已经安装了 K3s 二进制文件：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_KUBECONFIG_MODE</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;644&quot;</span><span class="token plain"> k3s server --flannel-backend none</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Server 情况如下：</p><ul><li>kubeconfig 文件权限为 <code>644</code></li><li>Flannel 后端设置为 <code>none</code></li><li>令牌设置为 <code>secret</code></li><li>启用调试日志记录</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/configuration.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/requirements"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">要求</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/network-options"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">网络选项</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#使用安装脚本的选项" class="table-of-contents__link toc-highlight">使用安装脚本的选项</a></li><li><a href="#二进制配置" class="table-of-contents__link toc-highlight">二进制配置</a></li><li><a href="#配置文件" class="table-of-contents__link toc-highlight">配置文件</a><ul><li><a href="#多个配置文件" class="table-of-contents__link toc-highlight">多个配置文件</a></li></ul></li><li><a href="#组合使用" class="table-of-contents__link toc-highlight">组合使用</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/kube-dashboard.html b/zh/installation/kube-dashboard.html
index befb86525..3a825ca0c 100644
--- a/zh/installation/kube-dashboard.html
+++ b/zh/installation/kube-dashboard.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Kubernetes 仪表板 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/kube-dashboard"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Kubernetes 仪表板 | K3s"><meta data-rh="true" name="description" content="本安装指南将帮助你在 K3s 上部署和配置 Kubernetes 仪表板。"><meta data-rh="true" property="og:description" content="本安装指南将帮助你在 K3s 上部署和配置 Kubernetes 仪表板。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/kube-dashboard"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/kube-dashboard" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/kube-dashboard" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">Kubernetes 仪表板 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/kube-dashboard"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Kubernetes 仪表板 | K3s"><meta data-rh="true" name="description" content="本安装指南将帮助你在 K3s 上部署和配置 Kubernetes 仪表板。"><meta data-rh="true" property="og:description" content="本安装指南将帮助你在 K3s 上部署和配置 Kubernetes 仪表板。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/kube-dashboard"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/kube-dashboard" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/kube-dashboard" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/kube-dashboard" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Kubernetes 仪表板</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>Kubernetes 仪表板</h1></header><p>本安装指南将帮助你在 K3s 上部署和配置 <a href="https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/" target="_blank" rel="noopener noreferrer">Kubernetes 仪表板</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="部署-kubernetes-仪表板">部署 Kubernetes 仪表板<a href="#部署-kubernetes-仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="仪表板-rbac-配置">仪表板 RBAC 配置<a href="#仪表板-rbac-配置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><blockquote><p><strong>重要提示</strong>：在本指南中创建的 <code>admin-user</code> 将在仪表板中拥有管理权限。</p></blockquote><p>创建以下资源清单文件：</p><p><code>dashboard.admin-user.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>dashboard.admin-user-role.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">admin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>部署 <code>admin-user</code> 配置：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="获取持有者令牌">获取持有者令牌<a href="#获取持有者令牌" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.24 和更新版本</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.23 和更低版本</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard create token admin-user</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard describe secret admin-user-token </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;^token&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="本地访问仪表板">本地访问仪表板<a href="#本地访问仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要访问仪表板，你必须为你的 K3s 集群创建一个安全通道：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl proxy</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>现在，你可以通过以下网址访问仪表盘：</p><ul><li>http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/</li><li>使用 <code>admin-user</code> 持有者令牌进行<code>登录</code>。</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="高级远程访问仪表板">高级：远程访问仪表板<a href="#高级远程访问仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>请参阅仪表板文档：使用<a href="https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" target="_blank" rel="noopener noreferrer">端口转发</a>访问集群中的应用程序。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="升级仪表板">升级仪表板<a href="#升级仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="删除仪表板和-admin-user-配置">删除仪表板和 admin-user 配置<a href="#删除仪表板和-admin-user-配置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrolebinding kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrole kubernetes-dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/packaged-components"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">管理封装的组件</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/uninstall"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">卸载 K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#部署-kubernetes-仪表板" class="table-of-contents__link toc-highlight">部署 Kubernetes 仪表板</a></li><li><a href="#仪表板-rbac-配置" class="table-of-contents__link toc-highlight">仪表板 RBAC 配置</a></li><li><a href="#获取持有者令牌" class="table-of-contents__link toc-highlight">获取持有者令牌</a></li><li><a href="#本地访问仪表板" class="table-of-contents__link toc-highlight">本地访问仪表板</a></li><li><a href="#升级仪表板" class="table-of-contents__link toc-highlight">升级仪表板</a></li><li><a href="#删除仪表板和-admin-user-配置" class="table-of-contents__link toc-highlight">删除仪表板和 admin-user 配置</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/kube-dashboard" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Kubernetes 仪表板</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>Kubernetes 仪表板</h1></header><p>本安装指南将帮助你在 K3s 上部署和配置 <a href="https://kubernetes.io/docs/tasks/access-application-cluster/web-ui-dashboard/" target="_blank" rel="noopener noreferrer">Kubernetes 仪表板</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="部署-kubernetes-仪表板">部署 Kubernetes 仪表板<a href="#部署-kubernetes-仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="仪表板-rbac-配置">仪表板 RBAC 配置<a href="#仪表板-rbac-配置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><blockquote><p><strong>重要提示</strong>：在本指南中创建的 <code>admin-user</code> 将在仪表板中拥有管理权限。</p></blockquote><p>创建以下资源清单文件：</p><p><code>dashboard.admin-user.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><code>dashboard.admin-user-role.yml</code></p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> cluster</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">admin</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> admin</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">user</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kubernetes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>部署 <code>admin-user</code> 配置：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="获取持有者令牌">获取持有者令牌<a href="#获取持有者令牌" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.24 和更新版本</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.23 和更低版本</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard create token admin-user</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl -n kubernetes-dashboard describe secret admin-user-token </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;^token&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="本地访问仪表板">本地访问仪表板<a href="#本地访问仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要访问仪表板，你必须为你的 K3s 集群创建一个安全通道：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl proxy</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>现在，你可以通过以下网址访问仪表盘：</p><ul><li>http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/</li><li>使用 <code>admin-user</code> 持有者令牌进行<code>登录</code>。</li></ul><h4 class="anchor anchorWithStickyNavbar_LWe7" id="高级远程访问仪表板">高级：远程访问仪表板<a href="#高级远程访问仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>请参阅仪表板文档：使用<a href="https://kubernetes.io/docs/tasks/access-application-cluster/port-forward-access-application-cluster/" target="_blank" rel="noopener noreferrer">端口转发</a>访问集群中的应用程序。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="升级仪表板">升级仪表板<a href="#升级仪表板" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://github.com/kubernetes/dashboard/releases</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">VERSION_KUBE_DASHBOARD</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$(</span><span class="token variable function" style="color:rgb(130, 170, 255)">curl</span><span class="token variable" style="color:rgb(191, 199, 213)"> -w </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;%{url_effective}&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)"> -I -L -s -S $</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token variable" style="color:rgb(191, 199, 213)">GITHUB_URL</span><span class="token variable punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token variable" style="color:rgb(191, 199, 213)">/latest -o /dev/null </span><span class="token variable operator" style="color:rgb(137, 221, 255)">|</span><span class="token variable" style="color:rgb(191, 199, 213)"> </span><span class="token variable function" style="color:rgb(130, 170, 255)">sed</span><span class="token variable" style="color:rgb(191, 199, 213)"> -e </span><span class="token variable string" style="color:rgb(195, 232, 141)">&#x27;s|.*/||&#x27;</span><span class="token variable" style="color:rgb(191, 199, 213)">)</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/</span><span class="token variable" style="color:rgb(191, 199, 213)">${VERSION_KUBE_DASHBOARD}</span><span class="token plain">/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="删除仪表板和-admin-user-配置">删除仪表板和 admin-user 配置<a href="#删除仪表板和-admin-user-配置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete ns kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrolebinding kubernetes-dashboard</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> k3s kubectl delete clusterrole kubernetes-dashboard</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/kube-dashboard.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/packaged-components"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">管理封装的组件</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/uninstall"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">卸载 K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#部署-kubernetes-仪表板" class="table-of-contents__link toc-highlight">部署 Kubernetes 仪表板</a></li><li><a href="#仪表板-rbac-配置" class="table-of-contents__link toc-highlight">仪表板 RBAC 配置</a></li><li><a href="#获取持有者令牌" class="table-of-contents__link toc-highlight">获取持有者令牌</a></li><li><a href="#本地访问仪表板" class="table-of-contents__link toc-highlight">本地访问仪表板</a></li><li><a href="#升级仪表板" class="table-of-contents__link toc-highlight">升级仪表板</a></li><li><a href="#删除仪表板和-admin-user-配置" class="table-of-contents__link toc-highlight">删除仪表板和 admin-user 配置</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/network-options.html b/zh/installation/network-options.html
index 979ca67b8..754a172cb 100644
--- a/zh/installation/network-options.html
+++ b/zh/installation/network-options.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">网络选项 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/network-options"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="网络选项 | K3s"><meta data-rh="true" name="description" content="本文介绍了 K3s 网络配置选项，包括配置或替换 Flannel，以及配置 IPv6。"><meta data-rh="true" property="og:description" content="本文介绍了 K3s 网络配置选项，包括配置或替换 Flannel，以及配置 IPv6。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/network-options"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/network-options" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/network-options" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">网络选项 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/network-options"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="网络选项 | K3s"><meta data-rh="true" name="description" content="本文介绍了 K3s 网络配置选项，包括配置或替换 Flannel，以及配置 IPv6。"><meta data-rh="true" property="og:description" content="本文介绍了 K3s 网络配置选项，包括配置或替换 Flannel，以及配置 IPv6。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/network-options"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/network-options" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/network-options" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/network-options" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">网络选项</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>网络选项</h1></header><p>本文介绍了 K3s 网络配置选项，包括配置或替换 Flannel，以及配置 IPv6。</p><blockquote><p><strong>注意</strong>：有关 CoreDNS、Traefik 和 Service LB 的信息，请参阅<a href="/zh/networking">网络</a>页面。</p></blockquote><h2 class="anchor anchorWithStickyNavbar_LWe7" id="flannel-选项">Flannel 选项<a href="#flannel-选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p><a href="https://github.com/flannel-io/flannel/blob/master/README.md" target="_blank" rel="noopener noreferrer">Flannel</a> 是第 3 层网络结构的轻量级提供程序，它实现了 Kubernetes 容器网络接口 (CNI)。它就是通常所说的 CNI 插件。</p><ul><li>Flannel 只能在 Server 节点上设置选项，并且集群中的所有 Server 上都必须相同。</li><li>Flannel 的默认后端是 <code>vxlan</code>。要启用加密，请使用 <code>wireguard-native</code> 后端。</li><li>在 Rasperry Pi 上使用 <code>vxlan</code> 和最新版本的 Ubuntu 需要<a href="/zh/advanced#raspberry-pi">额外的准备工作</a>。</li><li>在某些 Linux 发行版上使用 <code>wireguard-native</code> 作为 Flannel 后端可能需要额外的模块。有关详细信息，请参阅 <a href="https://www.wireguard.com/install/" target="_blank" rel="noopener noreferrer">WireGuard 安装指南</a>。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/network-options" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">网络选项</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>网络选项</h1></header><p>本文介绍了 K3s 网络配置选项，包括配置或替换 Flannel，以及配置 IPv6。</p><blockquote><p><strong>注意</strong>：有关 CoreDNS、Traefik 和 Service LB 的信息，请参阅<a href="/zh/networking">网络</a>页面。</p></blockquote><h2 class="anchor anchorWithStickyNavbar_LWe7" id="flannel-选项">Flannel 选项<a href="#flannel-选项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p><a href="https://github.com/flannel-io/flannel/blob/master/README.md" target="_blank" rel="noopener noreferrer">Flannel</a> 是第 3 层网络结构的轻量级提供程序，它实现了 Kubernetes 容器网络接口 (CNI)。它就是通常所说的 CNI 插件。</p><ul><li>Flannel 只能在 Server 节点上设置选项，并且集群中的所有 Server 上都必须相同。</li><li>Flannel 的默认后端是 <code>vxlan</code>。要启用加密，请使用 <code>wireguard-native</code> 后端。</li><li>在 Rasperry Pi 上使用 <code>vxlan</code> 和最新版本的 Ubuntu 需要<a href="/zh/advanced#raspberry-pi">额外的准备工作</a>。</li><li>在某些 Linux 发行版上使用 <code>wireguard-native</code> 作为 Flannel 后端可能需要额外的模块。有关详细信息，请参阅 <a href="https://www.wireguard.com/install/" target="_blank" rel="noopener noreferrer">WireGuard 安装指南</a>。
 WireGuard 的安装步骤将确保为你的操作系统安装适当的内核模块。
 在尝试使用 WireGuard Flannel 后端之前，你必须确保 WireGuard 内核模块在每个节点（包括 Server 和 Agent）上都可用。</li></ul><table><thead><tr><th>CLI 标志和值</th><th>描述</th></tr></thead><tbody><tr><td><code>--flannel-ipv6-masq</code></td><td>将伪装规则应用于 IPv6 流量（默认为 IPv4）。仅适用于双栈或仅使用 IPv6 的集群。与 <code>none</code> 以外的任何 Flannel 后端兼容。</td></tr><tr><td><code>--flannel-external-ip</code></td><td>使用节点外部 IP 地址作为 Flannel 流量的目的地，而不是使用内部 IP。仅当节点上设置了 <code>--node-external-ip</code> 时适用。</td></tr><tr><td><code>--flannel-backend=vxlan</code></td><td>使用 VXLAN 封装数据包。在 Raspberry Pi 上可能需要额外的内核模块。</td></tr><tr><td><code>--flannel-backend=host-gw</code></td><td>通过节点 IP 使用 IP 路由到 pod 子网。集群中所有节点之间都需要直接的第 2 层连接。</td></tr><tr><td><code>--flannel-backend=wireguard-native</code></td><td>使用 WireGuard 封装和加密网络流量。可能需要额外的内核模块。</td></tr><tr><td><code>--flannel-backend=ipsec</code></td><td>通过 <code>swanctl</code> 二进制文件使用 strongSwan IPSec 来加密网络流量。（已弃用；将在 v1.27.0 中删除）</td></tr><tr><td><code>--flannel-backend=wireguard</code></td><td>通过 <code>wg</code> 二进制文件使用 WireGuard 来加密网络流量。可能需要额外的内核模块和配置。（已弃用；将在 v1.26.0 中删除）</td></tr><tr><td><code>--flannel-backend=none</code></td><td>完全禁用 Flannel。</td></tr></tbody></table><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 2022-12 版本（v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1）开始，K3s 不再包含 strongSwan <code>swanctl</code> 和 <code>charon</code> 二进制文件。如果你想使用 <code>ipsec</code> 后端，请在升级或安装这些版本之前在节点上安装正确的包。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="从-wireguard-或-ipsec-迁移到-wireguard-native">从 <code>wireguard</code> 或 <code>ipsec</code> 迁移到 <code>wireguard-native</code><a href="#从-wireguard-或-ipsec-迁移到-wireguard-native" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>旧版 <code>wireguard</code> 后端需要在主机上安装 <code>wg</code> 工具。该后端将在 K3s v1.26 中删除，取而代之的是直接与内核交互的 <code>wireguard-native</code> 后端。</p><p>旧版 <code>ipsec</code> 后端需要在主机上安装 <code>swanctl</code> 和 <code>charon</code> 二进制文件。该后端将在 K3s v1.27 中删除，以支持 <code>wireguard-native</code> 后端。</p><p>我们建议用户尽快迁移到新的后端。节点有了新配置后，迁移不会花费很长的停机时间。你可以遵循以下两个步骤进行操作：</p><ol><li>更新所有 Server 节点上的 K3s 配置。如果使用配置文件，<code>/etc/rancher/k3s/config.yaml</code> 应该包括 <code>flannel-backend: wireguard-native</code> 而不是 <code>flannel-backend: wireguard</code> 或 <code>flannel-backend: ipsec</code>。如果你在 systemd 单元中通过 CLI 标志配置 K3s，则应更改对应的标志。</li><li>从 Server 节点开始重新启动所有节点。</li></ol><h2 class="anchor anchorWithStickyNavbar_LWe7" id="自定义-cni">自定义 CNI<a href="#自定义-cni" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>使用 <code>--flannel-backend=none</code> 启动 K3s 并安装你选择的 CNI。大多数 CNI 插件都有自己的网络策略引擎，因此建议同时设置 <code>--disable-network-policy</code> 以避免冲突。需要考虑的重要信息：</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">Canal</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Calico</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">Cilium</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>访问 <a href="https://docs.tigera.io/calico/latest/getting-started/kubernetes/flannel/install-for-flannel#installing-calico-for-policy-and-flannel-aka-canal-for-networking" target="_blank" rel="noopener noreferrer">Canal Docs</a> 网站。按照步骤安装 Canal。修改 Canal YAML 以便在 <code>container_settings</code> 中允许 IP 转发，例如：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;container_settings&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;allow_ip_forwarding&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>应用 Canal YAML。</p><p>通过在主机上运行以下命令，确保设置已被应用：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /etc/cni/net.d/10-canal.conflist</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>你应该看到 IP 转发被设置为 true。</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>遵循 <a href="https://docs.tigera.io/calico/latest/reference/configure-cni-plugins" target="_blank" rel="noopener noreferrer">Calico CNI 插件指南</a>。修改 Calico YAML 以便在 <code>container_settings</code> 中允许 IP 转发，例如：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;container_settings&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;allow_ip_forwarding&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>应用 Calico YAML。</p><p>通过在主机上运行以下命令，确保设置已被应用：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /etc/cni/net.d/10-calico.conflist</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>你应该看到 IP 转发被设置为 true。</p></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>运行 <code>k3s-killall.sh</code> 或 <code>k3s-uninstall.sh</code>之前，你必须手动删除 <code>cilium_host</code>、<code>cilium_net</code> 和 <code>cilium_vxlan</code> 接口。如果不这样做，你可能会在 K3s 停止时丢失与主机的网络连接</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">ip</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">link</span><span class="token plain"> delete cilium_host</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">ip</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">link</span><span class="token plain"> delete cilium_net</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">ip</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">link</span><span class="token plain"> delete cilium_vxlan</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>此外，你需要删除 cilium 的 iptables 规则：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">iptables-save </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> -iv cilium </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> iptables-restore</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip6tables-save </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">grep</span><span class="token plain"> -iv cilium </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> ip6tables-restore</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-egress-选择器配置">Control Plane Egress 选择器配置<a href="#control-plane-egress-选择器配置" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s Agent 和 Server 维护节点之间的 websocket 隧道，这些隧道用于封装 control plane（apiserver）和 Agent（kubelet 和 containerd）组件之间的双向通信。
 这允许 Agent 在不将 kubelet 和容器运行时流端口暴露给传入连接的情况下运行，并允许 control plane 在禁用 Agent 的情况下连接到集群服务。
@@ -17,10 +17,10 @@
 此模式要求 Server 运行 kubelet、CNI 和 kube-proxy，并与 Agent 直接连接，否则 apiserver 将无法访问 Service 端点或执行 <code>kubectl exec</code> 和 <code>kubectl logs</code>。</li><li><code>agent</code>（默认）：apiserver 使用 Agent 隧道与 kubelet 通信。
 这种模式要求 Server 也运行 kubelet、CNI 和 kube-proxy，否则 apiserver 将无法访问 Service 端点。</li><li><code>pod</code>：apiserver 使用 Agent 隧道与 kubelets 和 Service 端点通信，通过监视节点将端点连接路由到正确的 Agent。
 <strong>注意</strong>：如果 CNI 使用自己的 IPAM，而且不考虑节点的 PodCIDR 分配，这将不起作用。这些 CNI 需要使用 <code>cluster</code> 或 <code>agent</code>。</li><li><code>cluster</code>：apiserver 使用 Agent 隧道与 kubelets 和 Service 端点通信，通过监视端点将端点连接路由到正确的 Agent。</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="双栈-ipv4--ipv6-网络">双栈 (IPv4 + IPv6) 网络<a href="#双栈-ipv4--ipv6-网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.21.0%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.21.0+k3s1</a> 开始提供实验性支持。<br>
-<!-- -->从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.23.7+k3s1</a> 开始提供稳定支持。</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>已知问题</div><div class="admonitionContent_S0QG"><p>Kubernetes <a href="https://github.com/kubernetes/kubernetes/issues/111695" target="_blank" rel="noopener noreferrer">Issue #111695</a> 导致了一个问题。如果你有一个双栈环境而且你没有为集群流量使用主要网卡，那么 Kubelet 会忽略节点 IPv6 地址。为避免此错误，请将以下标志添加到 K3s Server 和 Agent ：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=0.0.0.0&quot; # To proritize IPv4 traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">#OR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=::&quot; # To proritize IPv6 traffic</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>首次创建集群时必须配置双栈组网。一旦仅使用 IPv4 启动，它就无法在现有集群上启用。</p><p>要在 K3s 中启用双栈，你必须在所有 server 节点上提供有效的双栈 <code>cluster-cidr</code> 和 <code>service-cidr</code>。以下是一个有效配置的示例：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>请注意，你可以配置任何有效的 <code>cluster-cidr</code> 和 <code>service-cidr</code> 值，但建议使用上述掩码。如果更改 <code>cluster-cidr</code> 掩码，则还应更改 <code>node-cidr-mask-size-ipv4</code> 和 <code>node-cidr-mask-size-ipv6</code> 值以匹配每个节点的计划 pod 和节点总数。对于 IPv4，支持的最大 <code>service-cidr</code> 掩码是 /12，而 IPv6 的是 /112。如果你在公共云中部署，请记住允许 ipv6 流量。</p><p>如果你使用的是自定义 CNI 插件，即 Flannel 以外的 CNI 插件，则可能需要额外的配置。请参阅你使用的插件的双栈文档，并验证是否可以启用网络策略。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="单栈-ipv6-网络">单栈 IPv6 网络<a href="#单栈-ipv6-网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.9+k3s1</a> 起可用</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>已知问题</div><div class="admonitionContent_S0QG"><p>如果你的 IPv6 默认路由是由路由器公告（RA）设置的，你需要设置 sysctl <code>net.ipv6.conf.all.accept_ra=2</code>。否则，一旦默认路由过期，节点将放弃该路由。请注意，接受 RA 可能会增加<a href="https://github.com/kubernetes/kubernetes/issues/91507" target="_blank" rel="noopener noreferrer">中间人攻击</a>的风险。</p></div></div><p>你可以使用 <code>--cluster-cidr</code> 和 <code>--service-cidr</code> 标志在 K3s 上使用单栈 IPv6 集群（没有 IPv4 的集群）。以下是一个有效配置的示例：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:0::/56 --service-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="分布式混合或多云集群">分布式混合或多云集群<a href="#分布式混合或多云集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 集群仍然可以部署在不共享公共私有网络且不直接连接的节点上（例如不同公有云中的节点）。有两种选择可以实现这一点：嵌入式 k3s 多云解决方案和集成 <code>tailscale</code> VPN 提供程序。</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果外部连接需要更多的跃点，那么节点之间的延迟会变高。延迟太高会降低网络性能，还可能影响集群的运行。</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>此类部署不支持嵌入式 etcd。如果使用嵌入式 etcd，所有 Server 节点必须可以通过其私有 IP 相互访问。Agent 可能分布在多个网络上，但所有 server 都应该位于同一位置。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="嵌入式-k3s-多云解决方案">嵌入式 k3s 多云解决方案<a href="#嵌入式-k3s-多云解决方案" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 使用 wireguard 为集群流量建立 VPN 网格。每个节点都必须具有唯一的 IP，可以通过 IP 访问节点（通常是公共 IP）。K3s supervisor 流量将使用 websocket 隧道，集群 (CNI) 流量将使用 wireguard 隧道。</p><p>要启用这种类型的部署，你必须在 Server 中添加以下参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --flannel-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">wireguard-native --flannel-external-ip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>在 Agent 上：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">AGENT_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>其中 <code>SERVER_EXTERNAL_IP</code> 是访问 Server 节点的 IP，<code>AGENT_EXTERNAL_IP</code> 是访问 Agent 节点的 IP。请注意，Agent 中的 <code>K3S_URL</code> 配置参数需要使用 <code>SERVER_EXTERNAL_IP</code> 才能连接。请记住检查<a href="/zh/installation/requirements#%E7%BD%91%E7%BB%9C">网络要求</a>，并允许访问内部和外部地址上列出的端口。</p><p><code>SERVER_EXTERNAL_IP</code> 和 <code>AGENT_EXTERNAL_IP</code> 之间需要保持连接，并且通常使用公共 IP。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>动态 IP</div><div class="admonitionContent_S0QG"><p>如果为节点分配动态 IP 并且 IP 发生变化（例如在 AWS 中），则必须修改 <code>--node-external-ip</code> 参数来反映新 IP。如果将 K3s 作为 Service 运行，则必须修改 <code>/etc/systemd/system/k3s.service</code> 然后运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="集成-tailscale-vpn-提供程序实验性">集成 Tailscale VPN 提供程序（实验性）<a href="#集成-tailscale-vpn-提供程序实验性" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>在 v1.27.3、v1.26.6、v1.25.11 和更新版本中可用。</p><p>K3s 可以与 <a href="https://tailscale.com/" target="_blank" rel="noopener noreferrer">Tailscale</a> 集成，以便节点使用 Tailscale VPN 服务在节点之间构建网格。</p><p>在部署 K3s 之前，Tailscale 需要完成四个步骤：</p><ol><li><p>登录到你的 Tailscale 帐户</p></li><li><p>在 <code>Settings &gt; Keys</code> 中，生成一个授权密钥（$AUTH-KEY），它可以被集群中的所有节点重复使用</p></li><li><p>决定集群将使用的 podCIDR（默认 <code>10.42.0.0/16</code>）。在 Access 控制中附加 CIDR（或双栈的 CIDR）：</p></li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;autoApprovers&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">&quot;routes&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;10.42.0.0/16&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;2001:cafe:42:0::/56&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>在节点中安装 Tailscale：</li></ol><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fsSL https://tailscale.com/install.sh </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>要部署启用了 Tailscale 集成的 K3s，你必须在每个节点上添加以下参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">&quot;name</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">tailscale,joinKey</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$AUTH</span><span class="token plain">-KEY</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>或在文件中提供该信息并使用参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$PATH_TO_FILE</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果你计划使用同一个 tailscale 网络运行多个 K3s 集群，请创建适当的 <a href="https://tailscale.com/kb/1018/acls/" target="_blank" rel="noopener noreferrer">ACL</a> 来避免 IP 冲突，或为每个集群使用不同的 podCIDR 子网。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/configuration"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">配置选项</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/private-registry"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">私有镜像仓库配置</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#flannel-选项" class="table-of-contents__link toc-highlight">Flannel 选项</a><ul><li><a href="#从-wireguard-或-ipsec-迁移到-wireguard-native" class="table-of-contents__link toc-highlight">从 <code>wireguard</code> 或 <code>ipsec</code> 迁移到 <code>wireguard-native</code></a></li></ul></li><li><a href="#自定义-cni" class="table-of-contents__link toc-highlight">自定义 CNI</a></li><li><a href="#control-plane-egress-选择器配置" class="table-of-contents__link toc-highlight">Control Plane Egress 选择器配置</a></li><li><a href="#双栈-ipv4--ipv6-网络" class="table-of-contents__link toc-highlight">双栈 (IPv4 + IPv6) 网络</a></li><li><a href="#单栈-ipv6-网络" class="table-of-contents__link toc-highlight">单栈 IPv6 网络</a></li><li><a href="#分布式混合或多云集群" class="table-of-contents__link toc-highlight">分布式混合或多云集群</a><ul><li><a href="#嵌入式-k3s-多云解决方案" class="table-of-contents__link toc-highlight">嵌入式 k3s 多云解决方案</a></li><li><a href="#集成-tailscale-vpn-提供程序实验性" class="table-of-contents__link toc-highlight">集成 Tailscale VPN 提供程序（实验性）</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<!-- -->从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.23.7%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.23.7+k3s1</a> 开始提供稳定支持。</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>已知问题</div><div class="admonitionContent_S0QG"><p>Kubernetes <a href="https://github.com/kubernetes/kubernetes/issues/111695" target="_blank" rel="noopener noreferrer">Issue #111695</a> 导致了一个问题。如果你有一个双栈环境而且你没有为集群流量使用主要网卡，那么 Kubelet 会忽略节点 IPv6 地址。为避免此错误，请将以下标志添加到 K3s Server 和 Agent ：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=0.0.0.0&quot; # To proritize IPv4 traffic</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">#OR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kubelet-arg=&quot;node-ip=::&quot; # To proritize IPv6 traffic</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>首次创建集群时必须配置双栈组网。一旦仅使用 IPv4 启动，它就无法在现有集群上启用。</p><p>要在 K3s 中启用双栈，你必须在所有 server 节点上提供有效的双栈 <code>cluster-cidr</code> 和 <code>service-cidr</code>。以下是一个有效配置的示例：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>请注意，你可以配置任何有效的 <code>cluster-cidr</code> 和 <code>service-cidr</code> 值，但建议使用上述掩码。如果更改 <code>cluster-cidr</code> 掩码，则还应更改 <code>node-cidr-mask-size-ipv4</code> 和 <code>node-cidr-mask-size-ipv6</code> 值以匹配每个节点的计划 pod 和节点总数。对于 IPv4，支持的最大 <code>service-cidr</code> 掩码是 /12，而 IPv6 的是 /112。如果你在公共云中部署，请记住允许 ipv6 流量。</p><p>如果你使用的是自定义 CNI 插件，即 Flannel 以外的 CNI 插件，则可能需要额外的配置。请参阅你使用的插件的双栈文档，并验证是否可以启用网络策略。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="单栈-ipv6-网络">单栈 IPv6 网络<a href="#单栈-ipv6-网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 <a href="https://github.com/k3s-io/k3s/releases/tag/v1.22.9%2Bk3s1" target="_blank" rel="noopener noreferrer">v1.22.9+k3s1</a> 起可用</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>已知问题</div><div class="admonitionContent_S0QG"><p>如果你的 IPv6 默认路由是由路由器公告（RA）设置的，你需要设置 sysctl <code>net.ipv6.conf.all.accept_ra=2</code>。否则，一旦默认路由过期，节点将放弃该路由。请注意，接受 RA 可能会增加<a href="https://github.com/kubernetes/kubernetes/issues/91507" target="_blank" rel="noopener noreferrer">中间人攻击</a>的风险。</p></div></div><p>你可以使用 <code>--cluster-cidr</code> 和 <code>--service-cidr</code> 标志在 K3s 上使用单栈 IPv6 集群（没有 IPv4 的集群）。以下是一个有效配置的示例：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:0::/56 --service-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">2001</span><span class="token plain">:cafe:42:1::/112</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="分布式混合或多云集群">分布式混合或多云集群<a href="#分布式混合或多云集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 集群仍然可以部署在不共享公共私有网络且不直接连接的节点上（例如不同公有云中的节点）。有两种选择可以实现这一点：嵌入式 k3s 多云解决方案和集成 <code>tailscale</code> VPN 提供程序。</p><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果外部连接需要更多的跃点，那么节点之间的延迟会变高。延迟太高会降低网络性能，还可能影响集群的运行。</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>此类部署不支持嵌入式 etcd。如果使用嵌入式 etcd，所有 Server 节点必须可以通过其私有 IP 相互访问。Agent 可能分布在多个网络上，但所有 server 都应该位于同一位置。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="嵌入式-k3s-多云解决方案">嵌入式 k3s 多云解决方案<a href="#嵌入式-k3s-多云解决方案" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 使用 wireguard 为集群流量建立 VPN 网格。每个节点都必须具有唯一的 IP，可以通过 IP 访问节点（通常是公共 IP）。K3s supervisor 流量将使用 websocket 隧道，集群 (CNI) 流量将使用 wireguard 隧道。</p><p>要启用这种类型的部署，你必须在 Server 中添加以下参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">SERVER_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --flannel-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">wireguard-native --flannel-external-ip</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>在 Agent 上：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--node-external-ip</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">AGENT_EXTERNAL_IP</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>其中 <code>SERVER_EXTERNAL_IP</code> 是访问 Server 节点的 IP，<code>AGENT_EXTERNAL_IP</code> 是访问 Agent 节点的 IP。请注意，Agent 中的 <code>K3S_URL</code> 配置参数需要使用 <code>SERVER_EXTERNAL_IP</code> 才能连接。请记住检查<a href="/zh/installation/requirements#%E7%BD%91%E7%BB%9C">网络要求</a>，并允许访问内部和外部地址上列出的端口。</p><p><code>SERVER_EXTERNAL_IP</code> 和 <code>AGENT_EXTERNAL_IP</code> 之间需要保持连接，并且通常使用公共 IP。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>动态 IP</div><div class="admonitionContent_S0QG"><p>如果为节点分配动态 IP 并且 IP 发生变化（例如在 AWS 中），则必须修改 <code>--node-external-ip</code> 参数来反映新 IP。如果将 K3s 作为 Service 运行，则必须修改 <code>/etc/systemd/system/k3s.service</code> 然后运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="集成-tailscale-vpn-提供程序实验性">集成 Tailscale VPN 提供程序（实验性）<a href="#集成-tailscale-vpn-提供程序实验性" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>在 v1.27.3、v1.26.6、v1.25.11 和更新版本中可用。</p><p>K3s 可以与 <a href="https://tailscale.com/" target="_blank" rel="noopener noreferrer">Tailscale</a> 集成，以便节点使用 Tailscale VPN 服务在节点之间构建网格。</p><p>在部署 K3s 之前，Tailscale 需要完成四个步骤：</p><ol><li><p>登录到你的 Tailscale 帐户</p></li><li><p>在 <code>Settings &gt; Keys</code> 中，生成一个授权密钥（$AUTH-KEY），它可以被集群中的所有节点重复使用</p></li><li><p>决定集群将使用的 podCIDR（默认 <code>10.42.0.0/16</code>）。在 Access 控制中附加 CIDR（或双栈的 CIDR）：</p></li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">&quot;autoApprovers&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">&quot;routes&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;10.42.0.0/16&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">&quot;2001:cafe:42:0::/56&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token string" style="color:rgb(195, 232, 141)">&quot;your_account@xyz.com&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>在节点中安装 Tailscale：</li></ol><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fsSL https://tailscale.com/install.sh </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>要部署启用了 Tailscale 集成的 K3s，你必须在每个节点上添加以下参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">&quot;name</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">tailscale,joinKey</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$AUTH</span><span class="token plain">-KEY</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>或在文件中提供该信息并使用参数：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--vpn-auth-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token variable" style="color:rgb(191, 199, 213)">$PATH_TO_FILE</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果你计划使用同一个 tailscale 网络运行多个 K3s 集群，请创建适当的 <a href="https://tailscale.com/kb/1018/acls/" target="_blank" rel="noopener noreferrer">ACL</a> 来避免 IP 冲突，或为每个集群使用不同的 podCIDR 子网。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/network-options.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/configuration"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">配置选项</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/private-registry"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">私有镜像仓库配置</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#flannel-选项" class="table-of-contents__link toc-highlight">Flannel 选项</a><ul><li><a href="#从-wireguard-或-ipsec-迁移到-wireguard-native" class="table-of-contents__link toc-highlight">从 <code>wireguard</code> 或 <code>ipsec</code> 迁移到 <code>wireguard-native</code></a></li></ul></li><li><a href="#自定义-cni" class="table-of-contents__link toc-highlight">自定义 CNI</a></li><li><a href="#control-plane-egress-选择器配置" class="table-of-contents__link toc-highlight">Control Plane Egress 选择器配置</a></li><li><a href="#双栈-ipv4--ipv6-网络" class="table-of-contents__link toc-highlight">双栈 (IPv4 + IPv6) 网络</a></li><li><a href="#单栈-ipv6-网络" class="table-of-contents__link toc-highlight">单栈 IPv6 网络</a></li><li><a href="#分布式混合或多云集群" class="table-of-contents__link toc-highlight">分布式混合或多云集群</a><ul><li><a href="#嵌入式-k3s-多云解决方案" class="table-of-contents__link toc-highlight">嵌入式 k3s 多云解决方案</a></li><li><a href="#集成-tailscale-vpn-提供程序实验性" class="table-of-contents__link toc-highlight">集成 Tailscale VPN 提供程序（实验性）</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/packaged-components.html b/zh/installation/packaged-components.html
index da32059bd..dd518c1fd 100644
--- a/zh/installation/packaged-components.html
+++ b/zh/installation/packaged-components.html
@@ -3,21 +3,21 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">管理封装的组件 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/packaged-components"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="管理封装的组件 | K3s"><meta data-rh="true" name="description" content="自动部署清单（AddOn）"><meta data-rh="true" property="og:description" content="自动部署清单（AddOn）"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/packaged-components"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/packaged-components" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/packaged-components" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">管理封装的组件 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/packaged-components"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="管理封装的组件 | K3s"><meta data-rh="true" name="description" content="自动部署清单（AddOn）"><meta data-rh="true" property="og:description" content="自动部署清单（AddOn）"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/packaged-components"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/packaged-components" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/packaged-components" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/packaged-components" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">管理封装的组件</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>管理封装的组件</h1></header><h2 class="anchor anchorWithStickyNavbar_LWe7" id="自动部署清单addon">自动部署清单（AddOn）<a href="#自动部署清单addon" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>在 server 节点上，<code>/var/lib/rancher/k3s/server/manifests</code> 中的任何文件都会以类似 <code>kubectl apply</code> 的方式自动部署到 Kubernetes，这会在启动和更改磁盘文件时进行。如果你删除该目录的文件，集群中相应的资源不会被删除。</p><p>清单在 <code>kube-system</code> 命名空间中作为 <code>AddOn</code> 自定义资源进行跟踪。你可以在相应的 <code>AddOn</code> 上使用 <code>kubectl describe</code> 来查看应用清单文件时遇到的任何错误或警告，也可以使用 <code>kubectl get event -n kube-system</code> 来查看该命名空间的所有事件，包括部署控制器的事件。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="封装的组件">封装的组件<a href="#封装的组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 封装了很多组件，这些组件通过 <code>manifests</code> 目录部署为 AddOn，包括 <code>coredns</code>、<code>traefik</code>、<code>local-storage</code> 和 <code>metrics-server</code>。嵌入式 <code>servicelb</code> LoadBalancer controller 没有清单文件，但由于历史原因，它可以像 <code>AddOn</code> 一样被禁用。</p><p>封装组件的清单由 K3s 管理，请不要更改。K3s 启动时，这些文件都会重新写入磁盘来确保文件的完整性。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="用户-addon">用户 AddOn<a href="#用户-addon" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以将其他文件放在 <code>manifests</code> 目录中，将它们作为 <code>AddOn</code> 部署。每个文件可能包含多个 Kubernetes 资源，它们由 <code>---</code> YAML 分隔符分隔。有关在清单中组织资源的更多信息，请参阅 Kubernetes 文档的<a href="https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/" target="_blank" rel="noopener noreferrer">管理资源</a>章节。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="文件命名要求">文件命名要求<a href="#文件命名要求" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>清单目录中每个文件的 <code>AddOn</code> 名称均派生自文件的基本名称。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/packaged-components" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">管理封装的组件</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>管理封装的组件</h1></header><h2 class="anchor anchorWithStickyNavbar_LWe7" id="自动部署清单addon">自动部署清单（AddOn）<a href="#自动部署清单addon" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>在 server 节点上，<code>/var/lib/rancher/k3s/server/manifests</code> 中的任何文件都会以类似 <code>kubectl apply</code> 的方式自动部署到 Kubernetes，这会在启动和更改磁盘文件时进行。如果你删除该目录的文件，集群中相应的资源不会被删除。</p><p>清单在 <code>kube-system</code> 命名空间中作为 <code>AddOn</code> 自定义资源进行跟踪。你可以在相应的 <code>AddOn</code> 上使用 <code>kubectl describe</code> 来查看应用清单文件时遇到的任何错误或警告，也可以使用 <code>kubectl get event -n kube-system</code> 来查看该命名空间的所有事件，包括部署控制器的事件。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="封装的组件">封装的组件<a href="#封装的组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 封装了很多组件，这些组件通过 <code>manifests</code> 目录部署为 AddOn，包括 <code>coredns</code>、<code>traefik</code>、<code>local-storage</code> 和 <code>metrics-server</code>。嵌入式 <code>servicelb</code> LoadBalancer controller 没有清单文件，但由于历史原因，它可以像 <code>AddOn</code> 一样被禁用。</p><p>封装组件的清单由 K3s 管理，请不要更改。K3s 启动时，这些文件都会重新写入磁盘来确保文件的完整性。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="用户-addon">用户 AddOn<a href="#用户-addon" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以将其他文件放在 <code>manifests</code> 目录中，将它们作为 <code>AddOn</code> 部署。每个文件可能包含多个 Kubernetes 资源，它们由 <code>---</code> YAML 分隔符分隔。有关在清单中组织资源的更多信息，请参阅 Kubernetes 文档的<a href="https://kubernetes.io/docs/concepts/cluster-administration/manage-deployment/" target="_blank" rel="noopener noreferrer">管理资源</a>章节。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="文件命名要求">文件命名要求<a href="#文件命名要求" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>清单目录中每个文件的 <code>AddOn</code> 名称均派生自文件的基本名称。
 请确保清单目录（或任何子目录）中的所有文件名称都是唯一的，并遵守 Kubernetes <a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/names/" target="_blank" rel="noopener noreferrer">对象命名限制</a>。
 此外，即使 K3s 封装组件已禁用，也不要与默认 K3s 封装组件的名称冲突。</p><p>如果文件名包含下划线将报告以下示例错误：</p><blockquote><p><code>Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml:
    Addon.k3s.cattle.io &quot;example_manifest&quot; is invalid: metadata.name: Invalid value: &quot;example_manifest&quot;:
    a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, &#x27;-&#x27; or &#x27;.&#x27;, and must start and end with an alphanumeric character
-   (e.g. &#x27;example.com&#x27;, regex used for validation is &#x27;[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*&#x27;)</code></p></blockquote><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果你有多个 Server 节点，并在多个 Server 上放置了额外的 AddOn 清单，那么你需要确保文件在节点之间保持同步。K3s 不会在节点之间同步 AddOn 的内容。如果不同的 Server 尝试部署冲突的清单，那么可能会出现问题。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="禁用清单">禁用清单<a href="#禁用清单" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>有两种方法可以禁用清单目录中特定内容的部署。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用---disable-标志">使用 <code>--disable</code> 标志<a href="#使用---disable-标志" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>除了 <code>manifests</code> 目录中的其他清单的 AddOn 之外，你可以使用 <code>--disable</code> 标志来禁用上面列出的封装组件的 AddOn。已禁用的 AddOn 会从集群中卸载，并从 <code>manifests</code> 目录中删除源文件。</p><p>例如，要禁止在新集群上安装 Traefik，或者要卸载 Traefik 并删除现有集群中的清单，你可以使用 <code>--disable=traefik</code> 来启动 K3s。要禁用多个条目，你可以使用逗号来分隔它们的名称或多次使用标志。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-skip-文件">使用 .skip 文件<a href="#使用-skip-文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>对于 <code>/var/lib/rancher/k3s/server/manifests</code> 下的任何文件，你可以创建一个 <code>.skip</code> 文件，然后 K3s 会忽略相应的清单。<code>.skip</code> 文件的内容不重要，因为只会检查文件是否存在。请注意，如果你在创建 AddOn 之后再创建 <code>.skip</code> 文件，则不会删除或修改 AddOn 以及 AddOn 创建的资源，只会认为该文件不存在。</p><p>例如，如果在第一次启动 K3s 之前在 <code>manifests</code> 目录中创建一个空的 <code>traefik.yaml.skip</code> 文件，那么 K3s 会跳过 <code>traefik.yaml</code> 的部署：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> /var/lib/rancher/k3s/server/manifests</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">coredns.yaml  traefik.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get pods -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   local-path-provisioner-64ffb68fd-xx98j   </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   metrics-server-5489f84d5d-7zwkt          </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   coredns-85cb69466-vcq7j                  </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果在创建 <code>traefik.skip</code> 文件之前已经部署了 Traefik，Traefik 将保持原样，并且升级 K3s 时的后续更新不会影响 Traefik。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="helm-addon">Helm AddOn<a href="#helm-addon" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>有关通过自动部署清单来管理 Helm Chart 的更多信息，请参阅 <a href="/zh/helm">Helm</a>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/server-roles"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">管理 Server 角色</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/kube-dashboard"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">Kubernetes 仪表板</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#自动部署清单addon" class="table-of-contents__link toc-highlight">自动部署清单（AddOn）</a><ul><li><a href="#封装的组件" class="table-of-contents__link toc-highlight">封装的组件</a></li><li><a href="#用户-addon" class="table-of-contents__link toc-highlight">用户 AddOn</a></li></ul></li><li><a href="#禁用清单" class="table-of-contents__link toc-highlight">禁用清单</a><ul><li><a href="#使用---disable-标志" class="table-of-contents__link toc-highlight">使用 <code>--disable</code> 标志</a></li><li><a href="#使用-skip-文件" class="table-of-contents__link toc-highlight">使用 .skip 文件</a></li></ul></li><li><a href="#helm-addon" class="table-of-contents__link toc-highlight">Helm AddOn</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+   (e.g. &#x27;example.com&#x27;, regex used for validation is &#x27;[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*&#x27;)</code></p></blockquote><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果你有多个 Server 节点，并在多个 Server 上放置了额外的 AddOn 清单，那么你需要确保文件在节点之间保持同步。K3s 不会在节点之间同步 AddOn 的内容。如果不同的 Server 尝试部署冲突的清单，那么可能会出现问题。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="禁用清单">禁用清单<a href="#禁用清单" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>有两种方法可以禁用清单目录中特定内容的部署。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用---disable-标志">使用 <code>--disable</code> 标志<a href="#使用---disable-标志" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>除了 <code>manifests</code> 目录中的其他清单的 AddOn 之外，你可以使用 <code>--disable</code> 标志来禁用上面列出的封装组件的 AddOn。已禁用的 AddOn 会从集群中卸载，并从 <code>manifests</code> 目录中删除源文件。</p><p>例如，要禁止在新集群上安装 Traefik，或者要卸载 Traefik 并删除现有集群中的清单，你可以使用 <code>--disable=traefik</code> 来启动 K3s。要禁用多个条目，你可以使用逗号来分隔它们的名称或多次使用标志。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-skip-文件">使用 .skip 文件<a href="#使用-skip-文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>对于 <code>/var/lib/rancher/k3s/server/manifests</code> 下的任何文件，你可以创建一个 <code>.skip</code> 文件，然后 K3s 会忽略相应的清单。<code>.skip</code> 文件的内容不重要，因为只会检查文件是否存在。请注意，如果你在创建 AddOn 之后再创建 <code>.skip</code> 文件，则不会删除或修改 AddOn 以及 AddOn 创建的资源，只会认为该文件不存在。</p><p>例如，如果在第一次启动 K3s 之前在 <code>manifests</code> 目录中创建一个空的 <code>traefik.yaml.skip</code> 文件，那么 K3s 会跳过 <code>traefik.yaml</code> 的部署：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ </span><span class="token function" style="color:rgb(130, 170, 255)">ls</span><span class="token plain"> /var/lib/rancher/k3s/server/manifests</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ccm.yaml      local-storage.yaml  rolebindings.yaml  traefik.yaml.skip</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">coredns.yaml  traefik.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get pods -A</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAMESPACE     NAME                                     READY   STATUS    RESTARTS   AGE</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   local-path-provisioner-64ffb68fd-xx98j   </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   metrics-server-5489f84d5d-7zwkt          </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-system   coredns-85cb69466-vcq7j                  </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain">/1     Running   </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">          74s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果在创建 <code>traefik.skip</code> 文件之前已经部署了 Traefik，Traefik 将保持原样，并且升级 K3s 时的后续更新不会影响 Traefik。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="helm-addon">Helm AddOn<a href="#helm-addon" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>有关通过自动部署清单来管理 Helm Chart 的更多信息，请参阅 <a href="/zh/helm">Helm</a>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/packaged-components.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/server-roles"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">管理 Server 角色</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/kube-dashboard"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">Kubernetes 仪表板</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#自动部署清单addon" class="table-of-contents__link toc-highlight">自动部署清单（AddOn）</a><ul><li><a href="#封装的组件" class="table-of-contents__link toc-highlight">封装的组件</a></li><li><a href="#用户-addon" class="table-of-contents__link toc-highlight">用户 AddOn</a></li></ul></li><li><a href="#禁用清单" class="table-of-contents__link toc-highlight">禁用清单</a><ul><li><a href="#使用---disable-标志" class="table-of-contents__link toc-highlight">使用 <code>--disable</code> 标志</a></li><li><a href="#使用-skip-文件" class="table-of-contents__link toc-highlight">使用 .skip 文件</a></li></ul></li><li><a href="#helm-addon" class="table-of-contents__link toc-highlight">Helm AddOn</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/private-registry.html b/zh/installation/private-registry.html
index 51946ea0f..fa14c8013 100644
--- a/zh/installation/private-registry.html
+++ b/zh/installation/private-registry.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">私有镜像仓库配置 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/private-registry"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="私有镜像仓库配置 | K3s"><meta data-rh="true" name="description" content="你可以将 Containerd 配置为连接到私有镜像仓库，并在节点上使用私有镜像仓库拉取私有镜像。"><meta data-rh="true" property="og:description" content="你可以将 Containerd 配置为连接到私有镜像仓库，并在节点上使用私有镜像仓库拉取私有镜像。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/private-registry"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/private-registry" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/private-registry" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">私有镜像仓库配置 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/private-registry"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="私有镜像仓库配置 | K3s"><meta data-rh="true" name="description" content="你可以将 Containerd 配置为连接到私有镜像仓库，并在节点上使用私有镜像仓库拉取私有镜像。"><meta data-rh="true" property="og:description" content="你可以将 Containerd 配置为连接到私有镜像仓库，并在节点上使用私有镜像仓库拉取私有镜像。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/private-registry"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/private-registry" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/private-registry" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/private-registry" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">私有镜像仓库配置</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>私有镜像仓库配置</h1></header><p>你可以将 Containerd 配置为连接到私有镜像仓库，并在节点上使用私有镜像仓库拉取私有镜像。</p><p>启动时，K3s 会检查 <code>/etc/rancher/k3s/</code> 中是否存在 <code>registries.yaml</code> 文件，并指示 containerd 使用该文件中定义的镜像仓库。如果你想使用私有的镜像仓库，你需要在每个使用镜像仓库的节点上以 root 身份创建这个文件。</p><p>请注意，server 节点默认是可以调度的。如果你没有在 server 节点上设置污点，而且希望在 server 节点上运行工作负载，请确保在每个 server 节点上创建 <code>registries.yaml</code> 文件。</p><p>Containerd 中的配置可以用于通过 TLS 连接到私有镜像仓库，也可以与启用验证的镜像仓库连接。下一节将解释 <code>registries.yaml</code> 文件，并给出在 K3s 中使用私有镜像仓库配置的不同例子。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="镜像仓库配置文件">镜像仓库配置文件<a href="#镜像仓库配置文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>该文件由两个主要部分组成：</p><ul><li>mirrors</li><li>configs</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="mirrors">Mirrors<a href="#mirrors" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Mirrors 是用于定义私有镜像仓库名称和端点的指令，例如：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  mycustomreg.com:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>每个 mirror 都必须有一个名称和一组端点。从镜像仓库中拉取镜像时，containerd 会逐个尝试这些端点 URL，并使用第一个有效的 URL。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="重定向">重定向<a href="#重定向" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>如果将公共镜像仓库用作 Mirror，例如在配置<a href="https://docs.docker.com/registry/recipes/mirror/" target="_blank" rel="noopener noreferrer">通过缓存拉取</a>时，镜像拉取将被透明地重定向。</p><p>例如，如果你为 <code>docker.io</code> 配置了一个 Mirror：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>然后，拉取 <code>docker.io/rancher/coredns-coredns:1.6.3</code> 将透明地从 <code>https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3</code> 拉取镜像。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="rewrites">Rewrites<a href="#rewrites" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>每个 Mirror 都可以有一组 rewrites。Rewrites 可以根据正则表达式来改变镜像的标签。如果 mirror 仓库中的组织/项目结构与上游不同，这将很有用。</p><p>例如，以下配置将透明地从 <code>registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3</code> 中拉取镜像 <code>docker.io/rancher/coredns-coredns:1.6.3</code>：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  docker.io:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://registry.example.com:5000&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    rewrite:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      &quot;^rancher/(.*)&quot;: &quot;mirrorproject/rancher-images/$1&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>镜像仍将以原始名称存储，因此，即使镜像以不同的名字从镜像仓库中拉取，<code>crictl image ls</code> 也将显示 <code>docker.io/rancher/coredns-coredns:1.6.3</code> 在节点上是可用的。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configs">Configs<a href="#configs" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><code>configs</code> 部分定义了每个 mirror 的 TLS 和凭证配置。对于每个 mirror，你可以定义 <code>auth</code> 和/或 <code>tls</code>。</p><p><code>tls</code> 部分包括：</p><table><thead><tr><th>指令</th><th>描述</th></tr></thead><tbody><tr><td><code>cert_file</code></td><td>客户端证书路径，用于向镜像仓库进行身份验证</td></tr><tr><td><code>key_file</code></td><td>客户端密钥路径，用于向镜像仓库进行身份验证</td></tr><tr><td><code>ca_file</code></td><td>定义用于验证镜像仓库服务器证书文件的 CA 证书路径</td></tr><tr><td><code>insecure_skip_verify</code></td><td>定义是否应跳过镜像仓库的 TLS 验证的布尔值</td></tr></tbody></table><p><code>auth</code> 部分由用户名/密码或身份验证令牌组成：</p><table><thead><tr><th>指令</th><th>描述</th></tr></thead><tbody><tr><td><code>username</code></td><td>私有镜像仓库基本身份验证的用户名</td></tr><tr><td><code>password</code></td><td>私有镜像仓库基本身份验证的用户密码</td></tr><tr><td><code>auth</code></td><td>私有镜像仓库基本身份验证的身份验证令牌</td></tr></tbody></table><p>以下是在不同模式下使用私有镜像仓库的基本例子：</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-tls">使用 TLS<a href="#使用-tls" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>下面的例子展示了使用 TLS 时，如何在每个节点上配置 <code>/etc/rancher/k3s/registries.yaml</code>。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">有认证</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">无认证</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="没有-tls">没有 TLS<a href="#没有-tls" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>以下示例展示了<em>不</em>使用 TLS 时，如何在每个节点上配置 <code>/etc/rancher/k3s/registries.yaml</code>。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">有认证</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">无认证</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p>如果没有 TLS 通信，你需要为端点指定 <code>http://</code>，否则将默认为 https。</p></blockquote><p>为了使镜像仓库更改生效，你需要重新启动每个节点上的 K3s。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="将镜像添加到私有镜像仓库">将镜像添加到私有镜像仓库<a href="#将镜像添加到私有镜像仓库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>首先，从 GitHub 上获取你正在使用的版本的 <code>k3s-images.txt</code> 文件。
-从 docker.io 拉取 <code>k3s-images.txt</code> 文件中列出的 K3s 镜像</p><p>示例：<code>docker pull docker.io/rancher/coredns-coredns:1.6.3</code></p><p>然后，将镜像重新标记到私有镜像仓库。</p><p>示例：<code>docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns</code></p><p>最后，将镜像推送到私有镜像仓库。</p><p>示例：<code>docker push mycustomreg.com:5000/coredns-coredns</code></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/network-options"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">网络选项</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/airgap"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">离线安装</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#镜像仓库配置文件" class="table-of-contents__link toc-highlight">镜像仓库配置文件</a><ul><li><a href="#mirrors" class="table-of-contents__link toc-highlight">Mirrors</a></li><li><a href="#configs" class="table-of-contents__link toc-highlight">Configs</a></li><li><a href="#使用-tls" class="table-of-contents__link toc-highlight">使用 TLS</a></li><li><a href="#没有-tls" class="table-of-contents__link toc-highlight">没有 TLS</a></li></ul></li><li><a href="#将镜像添加到私有镜像仓库" class="table-of-contents__link toc-highlight">将镜像添加到私有镜像仓库</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/private-registry" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">私有镜像仓库配置</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>私有镜像仓库配置</h1></header><p>你可以将 Containerd 配置为连接到私有镜像仓库，并在节点上使用私有镜像仓库拉取私有镜像。</p><p>启动时，K3s 会检查 <code>/etc/rancher/k3s/</code> 中是否存在 <code>registries.yaml</code> 文件，并指示 containerd 使用该文件中定义的镜像仓库。如果你想使用私有的镜像仓库，你需要在每个使用镜像仓库的节点上以 root 身份创建这个文件。</p><p>请注意，server 节点默认是可以调度的。如果你没有在 server 节点上设置污点，而且希望在 server 节点上运行工作负载，请确保在每个 server 节点上创建 <code>registries.yaml</code> 文件。</p><p>Containerd 中的配置可以用于通过 TLS 连接到私有镜像仓库，也可以与启用验证的镜像仓库连接。下一节将解释 <code>registries.yaml</code> 文件，并给出在 K3s 中使用私有镜像仓库配置的不同例子。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="镜像仓库配置文件">镜像仓库配置文件<a href="#镜像仓库配置文件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>该文件由两个主要部分组成：</p><ul><li>mirrors</li><li>configs</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="mirrors">Mirrors<a href="#mirrors" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Mirrors 是用于定义私有镜像仓库名称和端点的指令，例如：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  mycustomreg.com:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>每个 mirror 都必须有一个名称和一组端点。从镜像仓库中拉取镜像时，containerd 会逐个尝试这些端点 URL，并使用第一个有效的 URL。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="重定向">重定向<a href="#重定向" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>如果将公共镜像仓库用作 Mirror，例如在配置<a href="https://docs.docker.com/registry/recipes/mirror/" target="_blank" rel="noopener noreferrer">通过缓存拉取</a>时，镜像拉取将被透明地重定向。</p><p>例如，如果你为 <code>docker.io</code> 配置了一个 Mirror：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>然后，拉取 <code>docker.io/rancher/coredns-coredns:1.6.3</code> 将透明地从 <code>https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3</code> 拉取镜像。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="rewrites">Rewrites<a href="#rewrites" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>每个 Mirror 都可以有一组 rewrites。Rewrites 可以根据正则表达式来改变镜像的标签。如果 mirror 仓库中的组织/项目结构与上游不同，这将很有用。</p><p>例如，以下配置将透明地从 <code>registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3</code> 中拉取镜像 <code>docker.io/rancher/coredns-coredns:1.6.3</code>：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">mirrors:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  docker.io:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    endpoint:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - &quot;https://registry.example.com:5000&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    rewrite:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      &quot;^rancher/(.*)&quot;: &quot;mirrorproject/rancher-images/$1&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>镜像仍将以原始名称存储，因此，即使镜像以不同的名字从镜像仓库中拉取，<code>crictl image ls</code> 也将显示 <code>docker.io/rancher/coredns-coredns:1.6.3</code> 在节点上是可用的。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="configs">Configs<a href="#configs" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><code>configs</code> 部分定义了每个 mirror 的 TLS 和凭证配置。对于每个 mirror，你可以定义 <code>auth</code> 和/或 <code>tls</code>。</p><p><code>tls</code> 部分包括：</p><table><thead><tr><th>指令</th><th>描述</th></tr></thead><tbody><tr><td><code>cert_file</code></td><td>客户端证书路径，用于向镜像仓库进行身份验证</td></tr><tr><td><code>key_file</code></td><td>客户端密钥路径，用于向镜像仓库进行身份验证</td></tr><tr><td><code>ca_file</code></td><td>定义用于验证镜像仓库服务器证书文件的 CA 证书路径</td></tr><tr><td><code>insecure_skip_verify</code></td><td>定义是否应跳过镜像仓库的 TLS 验证的布尔值</td></tr></tbody></table><p><code>auth</code> 部分由用户名/密码或身份验证令牌组成：</p><table><thead><tr><th>指令</th><th>描述</th></tr></thead><tbody><tr><td><code>username</code></td><td>私有镜像仓库基本身份验证的用户名</td></tr><tr><td><code>password</code></td><td>私有镜像仓库基本身份验证的用户密码</td></tr><tr><td><code>auth</code></td><td>私有镜像仓库基本身份验证的身份验证令牌</td></tr></tbody></table><p>以下是在不同模式下使用私有镜像仓库的基本例子：</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用-tls">使用 TLS<a href="#使用-tls" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>下面的例子展示了使用 TLS 时，如何在每个节点上配置 <code>/etc/rancher/k3s/registries.yaml</code>。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">有认证</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">无认证</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;https://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">tls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">cert_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the cert file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">key_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the key file used in the registry</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">ca_file</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># path to the ca file used in the registry</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="没有-tls">没有 TLS<a href="#没有-tls" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>以下示例展示了<em>不</em>使用 TLS 时，如何在每个节点上配置 <code>/etc/rancher/k3s/registries.yaml</code>。</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">有认证</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">无认证</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">configs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">&quot;mycustomreg:5000&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">auth</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">username</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry username</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">password</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> xxxxxx </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># this is the registry password</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">mirrors</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">docker.io</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">endpoint</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;http://mycustomreg.com:5000&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p>如果没有 TLS 通信，你需要为端点指定 <code>http://</code>，否则将默认为 https。</p></blockquote><p>为了使镜像仓库更改生效，你需要重新启动每个节点上的 K3s。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="将镜像添加到私有镜像仓库">将镜像添加到私有镜像仓库<a href="#将镜像添加到私有镜像仓库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>首先，从 GitHub 上获取你正在使用的版本的 <code>k3s-images.txt</code> 文件。
+从 docker.io 拉取 <code>k3s-images.txt</code> 文件中列出的 K3s 镜像</p><p>示例：<code>docker pull docker.io/rancher/coredns-coredns:1.6.3</code></p><p>然后，将镜像重新标记到私有镜像仓库。</p><p>示例：<code>docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns</code></p><p>最后，将镜像推送到私有镜像仓库。</p><p>示例：<code>docker push mycustomreg.com:5000/coredns-coredns</code></p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/private-registry.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/network-options"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">网络选项</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/airgap"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">离线安装</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#镜像仓库配置文件" class="table-of-contents__link toc-highlight">镜像仓库配置文件</a><ul><li><a href="#mirrors" class="table-of-contents__link toc-highlight">Mirrors</a></li><li><a href="#configs" class="table-of-contents__link toc-highlight">Configs</a></li><li><a href="#使用-tls" class="table-of-contents__link toc-highlight">使用 TLS</a></li><li><a href="#没有-tls" class="table-of-contents__link toc-highlight">没有 TLS</a></li></ul></li><li><a href="#将镜像添加到私有镜像仓库" class="table-of-contents__link toc-highlight">将镜像添加到私有镜像仓库</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/requirements.html b/zh/installation/requirements.html
index 01d8d1ecf..6cff208c3 100644
--- a/zh/installation/requirements.html
+++ b/zh/installation/requirements.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">要求 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/requirements"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="要求 | K3s"><meta data-rh="true" name="description" content="K3s 非常轻量，但也有一些最低要求，如下所述。"><meta data-rh="true" property="og:description" content="K3s 非常轻量，但也有一些最低要求，如下所述。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/requirements"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/requirements" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/requirements" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">要求 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/requirements"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="要求 | K3s"><meta data-rh="true" name="description" content="K3s 非常轻量，但也有一些最低要求，如下所述。"><meta data-rh="true" property="og:description" content="K3s 非常轻量，但也有一些最低要求，如下所述。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/requirements"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/requirements" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/requirements" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/requirements" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">要求</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>要求</h1></header><p>K3s 非常轻量，但也有一些最低要求，如下所述。</p><p>无论 K3s 在容器中运行还是作为原生 Linux 服务运行，每个运行 K3s 的节点都应满足以下最低要求。这些要求是 K3s 及其打包组件的基准，不包括工作负载本身消耗的资源。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="先决条件">先决条件<a href="#先决条件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>两个节点不能具有相同的主机名。</p><p>如果多个节点将具有相同的主机名，或者主机名可以被自动配置系统重复使用，请使用 <code>--with-node-id</code> 选项为每个节点附加一个随机后缀，或者使用 <code>--node-name</code> 或 <code>$K3S_NODE_NAME</code> 为添加到集群的每个节点设计一个独特的名称。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="架构">架构<a href="#架构" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 适用于以下架构：</p><ul><li>x86_64</li><li>armhf</li><li>arm64/aarch64</li><li>s390x</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>ARM64 页面大小</div><div class="admonitionContent_S0QG"><p>在 2023 年 5 月版本（v1.24.14+k3s1、v1.25.10+k3s1、v1.26.5+k3s1、v1.27.2+k3s1）前，在 <code>aarch64/arm64</code> 系统上，操作系统必须使用 4k 页面大小。<strong>RHEL9</strong>、<strong>Ubuntu</strong>、<strong>Raspberry PI OS</strong> 和 <strong>SLES</strong> 都满足这个要求。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="操作系统">操作系统<a href="#操作系统" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 有望在大多数现代 Linux 系统上运行。</p><p>一些操作系统有特定的要求：</p><ul><li>如果你使用 <strong>Red Hat/CentOS Enterprise Linux</strong>，请按照<a href="/zh/advanced#red-hat-enterprise-linux--centos">这些步骤</a>进行其他设置。</li><li>如果你使用 <strong>Raspberry Pi OS</strong>，请按照<a href="/zh/advanced#raspberry-pi">这些步骤</a>切换到旧版 iptables。</li></ul><p>关于 Rancher 管理的 K3s 集群测试了哪些操作系统，请参阅 <a href="https://rancher.com/support-maintenance-terms/" target="_blank" rel="noopener noreferrer">Rancher 支持和维护条款</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="硬件">硬件<a href="#硬件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>硬件要求根据你部署的规模而变化。此处概述了最低建议。</p><table><thead><tr><th>Spec</th><th>最低</th><th>推荐</th></tr></thead><tbody><tr><td>CPU</td><td>1 核</td><td>2 核</td></tr><tr><td>RAM</td><td>512MB</td><td>1 GB</td></tr></tbody></table><p><a href="/zh/reference/resource-profiling">资源分析</a>的测试结果用于确定 K3s Agent、具有工作负载的 K3s Server 和具有一个 Agent 的 K3s Server 的最低资源要求。它还包含了有关对 K3s Server 和 Agent 利用率产生最大影响的分析，以及如何保护集群数据存储免受 Agent 和工作负载的干扰。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Raspberry Pi 和嵌入式 etcd</div><div class="admonitionContent_S0QG"><p>如果在 Raspberry Pi 上部署带有嵌入式 etcd 的 K3s，建议你使用外部 SSD。etcd 是写入密集型的，SD 卡无法处理 IO 负载。</p></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="磁盘">磁盘<a href="#磁盘" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>K3s 的性能取决于数据库的性能。为确保最佳速度，我们建议尽可能使用 SSD。在使用 SD 卡或 eMMC 的 ARM 设备上，磁盘性能会有所不同。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="网络">网络<a href="#网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s Server 需要 6443 端口才能被所有节点访问。</p><p>使用 Flannel VXLAN 时，节点需要能够通过 UDP 端口 8472 访问其他节点，使用 Flannel Wireguard 后端时，节点需要能够通过 UDP 端口 51820 和 51821（使用 IPv6 时）访问其他节点。该节点不应侦听任何其他端口。K3s 使用反向隧道建立节点与 Server 的出站连接，所有 kubelet 流量都通过该隧道进行。但是，如果你不使用 Flannel 并提供自己的自定义 CNI，那么 K3s 不需要 Flannel 所需的端口。</p><p>如果要使用 Metrics Server，所有节点必须可以在端口 10250 上相互访问。</p><p>如果你计划使用嵌入式 etcd 来实现高可用性，则 Server 节点必须可以在端口 2379 和 2380 上相互访问。</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>重要提示</div><div class="admonitionContent_S0QG"><p>节点上的 VXLAN 端口会开放集群网络，让任何人均能访问集群。因此，不要将 VXLAN 端口暴露给外界。请使用禁用 8472 端口的防火墙/安全组来运行节点。</p></div></div><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>危险</div><div class="admonitionContent_S0QG"><p>Flannel 依赖 <a href="https://www.cni.dev/plugins/current/main/bridge/" target="_blank" rel="noopener noreferrer">Bridge CNI 插件</a>来创建交换流量的 L2 网络。具有 <code>NET_RAW</code> 功能的 Rogue pod 可以滥用该 L2 网络来发动攻击，如 <a href="https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf" target="_blank" rel="noopener noreferrer">ARP 欺骗</a>。因此，如 <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">Kubernetes 文档</a>所述，请设置一个受限配置文件，在不可信任的 Pod 上禁用 <code>NET_RAW</code>。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-节点的入站规则">K3s Server 节点的入站规则<a href="#k3s-server-节点的入站规则" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>协议</th><th>端口</th><th>源</th><th>目标</th><th>描述</th></tr></thead><tbody><tr><td>TCP</td><td>2379-2380</td><td>Servers</td><td>Servers</td><td>只有具有嵌入式 etcd 的 HA 需要</td></tr><tr><td>TCP</td><td>6443</td><td>Agents</td><td>Servers</td><td>K3s supervisor 和 Kubernetes API Server</td></tr><tr><td>UDP</td><td>8472</td><td>所有节点</td><td>所有节点</td><td>只有 Flannel VXLAN 需要</td></tr><tr><td>TCP</td><td>10250</td><td>所有节点</td><td>所有节点</td><td>Kubelet 指标</td></tr><tr><td>UDP</td><td>51820</td><td>所有节点</td><td>所有节点</td><td>只有使用 IPv4 的 Flannel Wireguard 才需要</td></tr><tr><td>UDP</td><td>51821</td><td>所有节点</td><td>所有节点</td><td>只有使用 IPv6 的 Flannel Wireguard 才需要</td></tr></tbody></table><p>所有出站流量通常都是允许的。</p><p>你可能需要根据使用的操作系统对防火墙进行其他更改。有关更多信息，请参阅<a href="/zh/advanced#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87">其他操作系统准备</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="大型集群">大型集群<a href="#大型集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>硬件要求取决于 K3s 集群的大小。对于生产和大型集群，我们建议使用具有外部数据库的高可用性设置。对于生产环境中的外部数据库，建议使用以下选项：</p><ul><li>MySQL</li><li>PostgreSQL</li><li>etcd</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cpu-和内存">CPU 和内存<a href="#cpu-和内存" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>高可用 K3s Server 中节点的最低 CPU 和内存要求如下：</p><table><thead><tr><th align="center">部署规模</th><th align="center">节点</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">2</td><td align="center">4 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">4</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">8</td><td align="center">16GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">16</td><td align="center">32GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">32</td><td align="center">64GB</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="磁盘-1">磁盘<a href="#磁盘-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>集群性能取决于数据库性能。为确保最佳速度，我们建议为 K3s 集群使用 SSD 磁盘。在云提供商上，你还需使用能获得最大 IOPS 的最小大小。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="网络-1">网络<a href="#网络-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你应该考虑增加集群 CIDR 的子网大小，避免用尽 Pod 的 IP。你可以通过在启动时将 <code>--cluster-cidr</code> 选项传递给 K3s Server 来实现这一点。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据库">数据库<a href="#数据库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 支持不同的数据库，包括 MySQL、PostgreSQL、MariaDB 和 etcd。有关详细信息，请参阅<a href="/zh/datastore">集群数据存储</a>。</p><p>以下是运行大型集群所需的数据库资源的大小指南：</p><table><thead><tr><th align="center">部署规模</th><th align="center">节点</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">1</td><td align="center">2 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">2</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">4</td><td align="center">16GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">8</td><td align="center">32GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">16</td><td align="center">64GB</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">安装</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/configuration"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">配置选项</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#先决条件" class="table-of-contents__link toc-highlight">先决条件</a></li><li><a href="#架构" class="table-of-contents__link toc-highlight">架构</a></li><li><a href="#操作系统" class="table-of-contents__link toc-highlight">操作系统</a></li><li><a href="#硬件" class="table-of-contents__link toc-highlight">硬件</a></li><li><a href="#网络" class="table-of-contents__link toc-highlight">网络</a><ul><li><a href="#k3s-server-节点的入站规则" class="table-of-contents__link toc-highlight">K3s Server 节点的入站规则</a></li></ul></li><li><a href="#大型集群" class="table-of-contents__link toc-highlight">大型集群</a><ul><li><a href="#cpu-和内存" class="table-of-contents__link toc-highlight">CPU 和内存</a></li><li><a href="#磁盘-1" class="table-of-contents__link toc-highlight">磁盘</a></li><li><a href="#网络-1" class="table-of-contents__link toc-highlight">网络</a></li><li><a href="#数据库" class="table-of-contents__link toc-highlight">数据库</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/requirements" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">要求</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>要求</h1></header><p>K3s 非常轻量，但也有一些最低要求，如下所述。</p><p>无论 K3s 在容器中运行还是作为原生 Linux 服务运行，每个运行 K3s 的节点都应满足以下最低要求。这些要求是 K3s 及其打包组件的基准，不包括工作负载本身消耗的资源。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="先决条件">先决条件<a href="#先决条件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>两个节点不能具有相同的主机名。</p><p>如果多个节点将具有相同的主机名，或者主机名可以被自动配置系统重复使用，请使用 <code>--with-node-id</code> 选项为每个节点附加一个随机后缀，或者使用 <code>--node-name</code> 或 <code>$K3S_NODE_NAME</code> 为添加到集群的每个节点设计一个独特的名称。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="架构">架构<a href="#架构" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 适用于以下架构：</p><ul><li>x86_64</li><li>armhf</li><li>arm64/aarch64</li><li>s390x</li></ul><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>ARM64 页面大小</div><div class="admonitionContent_S0QG"><p>在 2023 年 5 月版本（v1.24.14+k3s1、v1.25.10+k3s1、v1.26.5+k3s1、v1.27.2+k3s1）前，在 <code>aarch64/arm64</code> 系统上，操作系统必须使用 4k 页面大小。<strong>RHEL9</strong>、<strong>Ubuntu</strong>、<strong>Raspberry PI OS</strong> 和 <strong>SLES</strong> 都满足这个要求。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="操作系统">操作系统<a href="#操作系统" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 有望在大多数现代 Linux 系统上运行。</p><p>一些操作系统有特定的要求：</p><ul><li>如果你使用 <strong>Red Hat/CentOS Enterprise Linux</strong>，请按照<a href="/zh/advanced#red-hat-enterprise-linux--centos">这些步骤</a>进行其他设置。</li><li>如果你使用 <strong>Raspberry Pi OS</strong>，请按照<a href="/zh/advanced#raspberry-pi">这些步骤</a>切换到旧版 iptables。</li></ul><p>关于 Rancher 管理的 K3s 集群测试了哪些操作系统，请参阅 <a href="https://rancher.com/support-maintenance-terms/" target="_blank" rel="noopener noreferrer">Rancher 支持和维护条款</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="硬件">硬件<a href="#硬件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>硬件要求根据你部署的规模而变化。此处概述了最低建议。</p><table><thead><tr><th>Spec</th><th>最低</th><th>推荐</th></tr></thead><tbody><tr><td>CPU</td><td>1 核</td><td>2 核</td></tr><tr><td>RAM</td><td>512MB</td><td>1 GB</td></tr></tbody></table><p><a href="/zh/reference/resource-profiling">资源分析</a>的测试结果用于确定 K3s Agent、具有工作负载的 K3s Server 和具有一个 Agent 的 K3s Server 的最低资源要求。它还包含了有关对 K3s Server 和 Agent 利用率产生最大影响的分析，以及如何保护集群数据存储免受 Agent 和工作负载的干扰。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>Raspberry Pi 和嵌入式 etcd</div><div class="admonitionContent_S0QG"><p>如果在 Raspberry Pi 上部署带有嵌入式 etcd 的 K3s，建议你使用外部 SSD。etcd 是写入密集型的，SD 卡无法处理 IO 负载。</p></div></div><h4 class="anchor anchorWithStickyNavbar_LWe7" id="磁盘">磁盘<a href="#磁盘" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>K3s 的性能取决于数据库的性能。为确保最佳速度，我们建议尽可能使用 SSD。在使用 SD 卡或 eMMC 的 ARM 设备上，磁盘性能会有所不同。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="网络">网络<a href="#网络" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s Server 需要 6443 端口才能被所有节点访问。</p><p>使用 Flannel VXLAN 时，节点需要能够通过 UDP 端口 8472 访问其他节点，使用 Flannel Wireguard 后端时，节点需要能够通过 UDP 端口 51820 和 51821（使用 IPv6 时）访问其他节点。该节点不应侦听任何其他端口。K3s 使用反向隧道建立节点与 Server 的出站连接，所有 kubelet 流量都通过该隧道进行。但是，如果你不使用 Flannel 并提供自己的自定义 CNI，那么 K3s 不需要 Flannel 所需的端口。</p><p>如果要使用 Metrics Server，所有节点必须可以在端口 10250 上相互访问。</p><p>如果你计划使用嵌入式 etcd 来实现高可用性，则 Server 节点必须可以在端口 2379 和 2380 上相互访问。</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>重要提示</div><div class="admonitionContent_S0QG"><p>节点上的 VXLAN 端口会开放集群网络，让任何人均能访问集群。因此，不要将 VXLAN 端口暴露给外界。请使用禁用 8472 端口的防火墙/安全组来运行节点。</p></div></div><div class="theme-admonition theme-admonition-warning alert alert--danger admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M5.05.31c.81 2.17.41 3.38-.52 4.31C3.55 5.67 1.98 6.45.9 7.98c-1.45 2.05-1.7 6.53 3.53 7.7-2.2-1.16-2.67-4.52-.3-6.61-.61 2.03.53 3.33 1.94 2.86 1.39-.47 2.3.53 2.27 1.67-.02.78-.31 1.44-1.13 1.81 3.42-.59 4.78-3.42 4.78-5.56 0-2.84-2.53-3.22-1.25-5.61-1.52.13-2.03 1.13-1.89 2.75.09 1.08-1.02 1.8-1.86 1.33-.67-.41-.66-1.19-.06-1.78C8.18 5.31 8.68 2.45 5.05.32L5.03.3l.02.01z"></path></svg></span>危险</div><div class="admonitionContent_S0QG"><p>Flannel 依赖 <a href="https://www.cni.dev/plugins/current/main/bridge/" target="_blank" rel="noopener noreferrer">Bridge CNI 插件</a>来创建交换流量的 L2 网络。具有 <code>NET_RAW</code> 功能的 Rogue pod 可以滥用该 L2 网络来发动攻击，如 <a href="https://static.sched.com/hosted_files/kccncna19/72/ARP%20DNS%20spoof.pdf" target="_blank" rel="noopener noreferrer">ARP 欺骗</a>。因此，如 <a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">Kubernetes 文档</a>所述，请设置一个受限配置文件，在不可信任的 Pod 上禁用 <code>NET_RAW</code>。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server-节点的入站规则">K3s Server 节点的入站规则<a href="#k3s-server-节点的入站规则" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><table><thead><tr><th>协议</th><th>端口</th><th>源</th><th>目标</th><th>描述</th></tr></thead><tbody><tr><td>TCP</td><td>2379-2380</td><td>Servers</td><td>Servers</td><td>只有具有嵌入式 etcd 的 HA 需要</td></tr><tr><td>TCP</td><td>6443</td><td>Agents</td><td>Servers</td><td>K3s supervisor 和 Kubernetes API Server</td></tr><tr><td>UDP</td><td>8472</td><td>所有节点</td><td>所有节点</td><td>只有 Flannel VXLAN 需要</td></tr><tr><td>TCP</td><td>10250</td><td>所有节点</td><td>所有节点</td><td>Kubelet 指标</td></tr><tr><td>UDP</td><td>51820</td><td>所有节点</td><td>所有节点</td><td>只有使用 IPv4 的 Flannel Wireguard 才需要</td></tr><tr><td>UDP</td><td>51821</td><td>所有节点</td><td>所有节点</td><td>只有使用 IPv6 的 Flannel Wireguard 才需要</td></tr></tbody></table><p>所有出站流量通常都是允许的。</p><p>你可能需要根据使用的操作系统对防火墙进行其他更改。有关更多信息，请参阅<a href="/zh/advanced#%E5%85%B6%E4%BB%96%E6%93%8D%E4%BD%9C%E7%B3%BB%E7%BB%9F%E5%87%86%E5%A4%87">其他操作系统准备</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="大型集群">大型集群<a href="#大型集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>硬件要求取决于 K3s 集群的大小。对于生产和大型集群，我们建议使用具有外部数据库的高可用性设置。对于生产环境中的外部数据库，建议使用以下选项：</p><ul><li>MySQL</li><li>PostgreSQL</li><li>etcd</li></ul><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cpu-和内存">CPU 和内存<a href="#cpu-和内存" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>高可用 K3s Server 中节点的最低 CPU 和内存要求如下：</p><table><thead><tr><th align="center">部署规模</th><th align="center">节点</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">2</td><td align="center">4 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">4</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">8</td><td align="center">16GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">16</td><td align="center">32GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">32</td><td align="center">64GB</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="磁盘-1">磁盘<a href="#磁盘-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>集群性能取决于数据库性能。为确保最佳速度，我们建议为 K3s 集群使用 SSD 磁盘。在云提供商上，你还需使用能获得最大 IOPS 的最小大小。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="网络-1">网络<a href="#网络-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你应该考虑增加集群 CIDR 的子网大小，避免用尽 Pod 的 IP。你可以通过在启动时将 <code>--cluster-cidr</code> 选项传递给 K3s Server 来实现这一点。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="数据库">数据库<a href="#数据库" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s 支持不同的数据库，包括 MySQL、PostgreSQL、MariaDB 和 etcd。有关详细信息，请参阅<a href="/zh/datastore">集群数据存储</a>。</p><p>以下是运行大型集群所需的数据库资源的大小指南：</p><table><thead><tr><th align="center">部署规模</th><th align="center">节点</th><th align="center">VCPUS</th><th align="center">RAM</th></tr></thead><tbody><tr><td align="center">Small</td><td align="center">Up to 10</td><td align="center">1</td><td align="center">2 GB</td></tr><tr><td align="center">Medium</td><td align="center">Up to 100</td><td align="center">2</td><td align="center">8 GB</td></tr><tr><td align="center">Large</td><td align="center">Up to 250</td><td align="center">4</td><td align="center">16GB</td></tr><tr><td align="center">X-Large</td><td align="center">Up to 500</td><td align="center">8</td><td align="center">32GB</td></tr><tr><td align="center">XX-Large</td><td align="center">500+</td><td align="center">16</td><td align="center">64GB</td></tr></tbody></table></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/requirements.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">安装</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/configuration"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">配置选项</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#先决条件" class="table-of-contents__link toc-highlight">先决条件</a></li><li><a href="#架构" class="table-of-contents__link toc-highlight">架构</a></li><li><a href="#操作系统" class="table-of-contents__link toc-highlight">操作系统</a></li><li><a href="#硬件" class="table-of-contents__link toc-highlight">硬件</a></li><li><a href="#网络" class="table-of-contents__link toc-highlight">网络</a><ul><li><a href="#k3s-server-节点的入站规则" class="table-of-contents__link toc-highlight">K3s Server 节点的入站规则</a></li></ul></li><li><a href="#大型集群" class="table-of-contents__link toc-highlight">大型集群</a><ul><li><a href="#cpu-和内存" class="table-of-contents__link toc-highlight">CPU 和内存</a></li><li><a href="#磁盘-1" class="table-of-contents__link toc-highlight">磁盘</a></li><li><a href="#网络-1" class="table-of-contents__link toc-highlight">网络</a></li><li><a href="#数据库" class="table-of-contents__link toc-highlight">数据库</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/server-roles.html b/zh/installation/server-roles.html
index b998e1146..7ebc4be37 100644
--- a/zh/installation/server-roles.html
+++ b/zh/installation/server-roles.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">管理 Server 角色 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/server-roles"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="管理 Server 角色 | K3s"><meta data-rh="true" name="description" content="使用 --cluster-init 启动 K3s Server 将运行所有 control-plane 组件，包括 apiserver、controller-manager、scheduler 和 etcd。你可以通过禁用特定组件来将 control-plane 和 etcd 角色拆分到单独的节点上。"><meta data-rh="true" property="og:description" content="使用 --cluster-init 启动 K3s Server 将运行所有 control-plane 组件，包括 apiserver、controller-manager、scheduler 和 etcd。你可以通过禁用特定组件来将 control-plane 和 etcd 角色拆分到单独的节点上。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/server-roles"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/server-roles" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/server-roles" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">管理 Server 角色 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/server-roles"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="管理 Server 角色 | K3s"><meta data-rh="true" name="description" content="使用 --cluster-init 启动 K3s Server 将运行所有 control-plane 组件，包括 apiserver、controller-manager、scheduler 和 etcd。你可以通过禁用特定组件来将 control-plane 和 etcd 角色拆分到单独的节点上。"><meta data-rh="true" property="og:description" content="使用 --cluster-init 启动 K3s Server 将运行所有 control-plane 组件，包括 apiserver、controller-manager、scheduler 和 etcd。你可以通过禁用特定组件来将 control-plane 和 etcd 角色拆分到单独的节点上。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/server-roles"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/server-roles" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/server-roles" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/server-roles" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">管理 Server 角色</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>管理 Server 角色</h1></header><p>使用 <code>--cluster-init</code> 启动 K3s Server 将运行所有 control-plane 组件，包括 apiserver、controller-manager、scheduler 和 etcd。你可以通过禁用特定组件来将 control-plane 和 etcd 角色拆分到单独的节点上。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>本文档仅适用于使用嵌入式 etcd 的情况。如果没有使用嵌入式 etcd，所有 Server 都将具有 control-plane 角色并运行 control-plane 组件。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="专用-etcd-节点">专用 <code>etcd</code> 节点<a href="#专用-etcd-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>要创建仅具有 <code>etcd</code> 角色的 server，请在禁用所有 control plane 组件的情况下启动 K3s：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>第一个节点将启动 etcd，然后等待其他 <code>etcd</code> 和/或 <code>control-plane</code> 节点加入。在加入启用了 <code>control-plane</code> 组件的其他 server 之前，集群将无法使用。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="专用-control-plane-节点">专用 <code>control-plane</code> 节点<a href="#专用-control-plane-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>专用 <code>control-plane</code> 节点不能是集群中的第一个 server。在加入专用 <code>control-plane</code> 节点之前，必须有一个具有 <code>etcd</code> 角色的现有节点。</p></div></div><p>要创建仅具有 <code>control-plane</code> 角色的 server，请在 <code>--disable-etcd</code> 的情况下启动 K3s：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --token </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">token</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --disable-etcd --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">etcd-only-node</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>创建专用 Server 节点后，所选角色将在 <code>kubectl get node</code> 中可见：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME           STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="将角色添加到现有-server">将角色添加到现有 server<a href="#将角色添加到现有-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如果在删除了 disable 标志的情况下重启 K3s，你可以将角色添加到现有的专用节点。例如，要将 <code>control-plane</code> 角色添加到专用的 <code>etcd</code> 节点，你可以从 systemd 单元或配置文件中删除 <code>--disable-apiserver --disable-controller -manager --disable-scheduler</code> 标记，并重启服务。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="配置文件语法">配置文件语法<a href="#配置文件语法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>与所有其他 CLI 标志一样，你可以使用<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>来禁用组件，而不是将选项作为 CLI 标志传递。例如，要创建专用的 <code>etcd</code> 节点，你可以将以下值放在 <code>/etc/rancher/k3s/config.yaml</code> 中：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-apiserver</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-controller-manager</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-scheduler</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/airgap"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">离线安装</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/packaged-components"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">管理封装的组件</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#专用-etcd-节点" class="table-of-contents__link toc-highlight">专用 <code>etcd</code> 节点</a></li><li><a href="#专用-control-plane-节点" class="table-of-contents__link toc-highlight">专用 <code>control-plane</code> 节点</a></li><li><a href="#将角色添加到现有-server" class="table-of-contents__link toc-highlight">将角色添加到现有 server</a></li><li><a href="#配置文件语法" class="table-of-contents__link toc-highlight">配置文件语法</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/server-roles" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">管理 Server 角色</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>管理 Server 角色</h1></header><p>使用 <code>--cluster-init</code> 启动 K3s Server 将运行所有 control-plane 组件，包括 apiserver、controller-manager、scheduler 和 etcd。你可以通过禁用特定组件来将 control-plane 和 etcd 角色拆分到单独的节点上。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>本文档仅适用于使用嵌入式 etcd 的情况。如果没有使用嵌入式 etcd，所有 Server 都将具有 control-plane 角色并运行 control-plane 组件。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="专用-etcd-节点">专用 <code>etcd</code> 节点<a href="#专用-etcd-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>要创建仅具有 <code>etcd</code> 角色的 server，请在禁用所有 control plane 组件的情况下启动 K3s：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>第一个节点将启动 etcd，然后等待其他 <code>etcd</code> 和/或 <code>control-plane</code> 节点加入。在加入启用了 <code>control-plane</code> 组件的其他 server 之前，集群将无法使用。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="专用-control-plane-节点">专用 <code>control-plane</code> 节点<a href="#专用-control-plane-节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>专用 <code>control-plane</code> 节点不能是集群中的第一个 server。在加入专用 <code>control-plane</code> 节点之前，必须有一个具有 <code>etcd</code> 角色的现有节点。</p></div></div><p>要创建仅具有 <code>control-plane</code> 角色的 server，请在 <code>--disable-etcd</code> 的情况下启动 K3s：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -fL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -s - server --token </span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">token</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain"> --disable-etcd --server https://</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token plain">etcd-only-node</span><span class="token operator" style="color:rgb(137, 221, 255)">&gt;</span><span class="token plain">:6443</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>创建专用 Server 节点后，所选角色将在 <code>kubectl get node</code> 中可见：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">NAME           STATUS   ROLES                       AGE     VERSION</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-1   Ready    etcd                        5h39m   v1.20.4+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">k3s-server-2   Ready    control-plane,master        5h39m   v1.20.4+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="将角色添加到现有-server">将角色添加到现有 server<a href="#将角色添加到现有-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>如果在删除了 disable 标志的情况下重启 K3s，你可以将角色添加到现有的专用节点。例如，要将 <code>control-plane</code> 角色添加到专用的 <code>etcd</code> 节点，你可以从 systemd 单元或配置文件中删除 <code>--disable-apiserver --disable-controller -manager --disable-scheduler</code> 标记，并重启服务。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="配置文件语法">配置文件语法<a href="#配置文件语法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>与所有其他 CLI 标志一样，你可以使用<a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a>来禁用组件，而不是将选项作为 CLI 标志传递。例如，要创建专用的 <code>etcd</code> 节点，你可以将以下值放在 <code>/etc/rancher/k3s/config.yaml</code> 中：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">cluster-init</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-apiserver</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-controller-manager</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">disable-scheduler</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/server-roles.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/airgap"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">离线安装</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation/packaged-components"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">管理封装的组件</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#专用-etcd-节点" class="table-of-contents__link toc-highlight">专用 <code>etcd</code> 节点</a></li><li><a href="#专用-control-plane-节点" class="table-of-contents__link toc-highlight">专用 <code>control-plane</code> 节点</a></li><li><a href="#将角色添加到现有-server" class="table-of-contents__link toc-highlight">将角色添加到现有 server</a></li><li><a href="#配置文件语法" class="table-of-contents__link toc-highlight">配置文件语法</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/installation/uninstall.html b/zh/installation/uninstall.html
index 4eea0befd..cf30249d9 100644
--- a/zh/installation/uninstall.html
+++ b/zh/installation/uninstall.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">卸载 K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/uninstall"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="卸载 K3s | K3s"><meta data-rh="true" name="description" content="卸载 K3s 会删除 local 集群数据、配置以及所有脚本和 CLI 工具。"><meta data-rh="true" property="og:description" content="卸载 K3s 会删除 local 集群数据、配置以及所有脚本和 CLI 工具。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/uninstall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/uninstall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/uninstall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">卸载 K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/installation/uninstall"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="卸载 K3s | K3s"><meta data-rh="true" name="description" content="卸载 K3s 会删除 local 集群数据、配置以及所有脚本和 CLI 工具。"><meta data-rh="true" property="og:description" content="卸载 K3s 会删除 local 集群数据、配置以及所有脚本和 CLI 工具。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/installation/uninstall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/installation/uninstall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/installation/uninstall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/installation/uninstall" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">卸载 K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>卸载 K3s</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>卸载 K3s 会删除 local 集群数据、配置以及所有脚本和 CLI 工具。<br>
-<!-- -->不会删除外部数据存储中的任何数据，也不会删除使用外部 Kubernetes 存储卷的 Pod 创建的数据。</p></div></div><p>如果你使用安装脚本安装了 K3s，安装过程中会生成一个卸载 K3s 的脚本。</p><p>如果你想在卸载和重新安装后将节点重新加入现有集群，请务必从集群中删除节点，确保删除了节点密码 Secret。有关详细信息，请参阅<a href="/zh/architecture#how-agent-node-registration-works">节点注册</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="卸载-server">卸载 Server<a href="#卸载-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要从 Server 节点卸载 K3s，请运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="卸载-agent">卸载 Agent<a href="#卸载-agent" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要从 Agent 节点卸载 K3s，请运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-agent-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/kube-dashboard"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">Kubernetes 仪表板</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">集群数据存储</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#卸载-server" class="table-of-contents__link toc-highlight">卸载 Server</a></li><li><a href="#卸载-agent" class="table-of-contents__link toc-highlight">卸载 Agent</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/installation/uninstall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/requirements">要求</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/configuration">配置选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/network-options">网络选项</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/private-registry">私有镜像仓库配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/airgap">离线安装</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/server-roles">管理 Server 角色</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/packaged-components">管理封装的组件</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/installation/kube-dashboard">Kubernetes 仪表板</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/installation/uninstall">卸载 K3s</a></li></ul></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/installation"><span itemprop="name">安装</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">卸载 K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>卸载 K3s</h1></header><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>卸载 K3s 会删除 local 集群数据、配置以及所有脚本和 CLI 工具。<br>
+<!-- -->不会删除外部数据存储中的任何数据，也不会删除使用外部 Kubernetes 存储卷的 Pod 创建的数据。</p></div></div><p>如果你使用安装脚本安装了 K3s，安装过程中会生成一个卸载 K3s 的脚本。</p><p>如果你想在卸载和重新安装后将节点重新加入现有集群，请务必从集群中删除节点，确保删除了节点密码 Secret。有关详细信息，请参阅<a href="/zh/architecture#how-agent-node-registration-works">节点注册</a>文档。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="卸载-server">卸载 Server<a href="#卸载-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要从 Server 节点卸载 K3s，请运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="卸载-agent">卸载 Agent<a href="#卸载-agent" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要从 Agent 节点卸载 K3s，请运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-agent-uninstall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/installation/uninstall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/installation/kube-dashboard"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">Kubernetes 仪表板</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/datastore"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">集群数据存储</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#卸载-server" class="table-of-contents__link toc-highlight">卸载 Server</a></li><li><a href="#卸载-agent" class="table-of-contents__link toc-highlight">卸载 Agent</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/known-issues.html b/zh/known-issues.html
index ce1872a18..d8f19fff6 100644
--- a/zh/known-issues.html
+++ b/zh/known-issues.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">已知问题 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/known-issues"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="已知问题 | K3s"><meta data-rh="true" name="description" content="我们会定期更新已知问题文档，说明下一个即将发布的版本中可能无法立即解决的问题。"><meta data-rh="true" property="og:description" content="我们会定期更新已知问题文档，说明下一个即将发布的版本中可能无法立即解决的问题。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/known-issues"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/known-issues" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/known-issues" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">已知问题 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/known-issues"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="已知问题 | K3s"><meta data-rh="true" name="description" content="我们会定期更新已知问题文档，说明下一个即将发布的版本中可能无法立即解决的问题。"><meta data-rh="true" property="og:description" content="我们会定期更新已知问题文档，说明下一个即将发布的版本中可能无法立即解决的问题。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/known-issues"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/known-issues" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/known-issues" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/known-issues" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">已知问题</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>已知问题</h1></header><p>我们会定期更新已知问题文档，说明下一个即将发布的版本中可能无法立即解决的问题。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="snap-docker">Snap Docker<a href="#snap-docker" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你计划同时使用 K3s 与 Docker，则不建议通过 snap 包安装 Docker，因为它会导致运行 K3s 时出现问题。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="iptables">Iptables<a href="#iptables" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你使用 nftables 模式而不是传统模式来运行 iptables，则可能会遇到问题。我们建议使用较新的 iptables（例如 1.6.1+）来避免出现问题。</p><p>此外，版本 1.8.0-1.8.4 存在可能导致 K3s 失败的问题。有关解决方法，请参阅<a href="/zh/advanced#%E6%97%A7%E7%9A%84-iptables-%E7%89%88%E6%9C%AC">其他操作系统准备</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rootless-模式">Rootless 模式<a href="#rootless-模式" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>使用 Rootless 模式运行 K3s 是实验性的，存在几个<a href="/zh/advanced#rootless-%E6%A8%A1%E5%BC%8F%E7%9A%84%E5%B7%B2%E7%9F%A5%E9%97%AE%E9%A2%98">已知问题</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="hardened-125">将强化集群从 v1.24.x 升级到 v1.25.x<a href="#hardened-125" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Kubernetes v1.25 删除了 PodSecurityPolicy，支持 Pod Security Standard（PSS）。你可以在<a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">上游文档</a>中阅读有关 PSS 的更多信息。对于 K3s，如果在节点上配置了任何 <code>PodSecurityPoliciy</code>，则必须执行一些手动步骤。</p><ol><li>在所有节点上，更新 <code>kube-apiserver-arg</code> 值以删除 <code>PodSecurityPolicy</code> admission-plugin。添加以下参数值：<code>&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</code>，但不要重启或升级 K3s。以下是节点加固更新后配置文件的示例：</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="2"><li>使用以下内容创建 <code>/var/lib/rancher/k3s/server/psa.yaml</code> 文件。你可能还想豁免更多命名空间。下面的示例豁免了 <code>kube-system</code>（必需）、<code>cis-operator-system</code>（可选，但在通过 Rancher 运行安全扫描时很有用）和 <code>system- upgrade</code>（如果执行<a href="/zh/upgrades/automated">自动升级</a>则需要）。</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="3"><li>正常执行升级。如果使用<a href="/zh/upgrades/automated">自动升级</a>，请确保运行 <code>system-upgrade-controller</code> pod 的命名空间按照 <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels" target="_blank" rel="noopener noreferrer">Pod 安全级别</a>的要求设置为 privileged。</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">labels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># This value must be privileged for the controller to run successfully.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>升级完成后，从集群中移除剩余的 PSP 资源。在许多情况下，在 <code>/var/lib/rancher/k3s/server/manifests/</code> 中用于加固的自定义文件中可能存在 PodSecurityPolicies 和关联的 RBAC 资源。删除这些资源，然后 K3s 将自动更新。由于时间原因，一些资源可能会留在集群中，在这种情况下，你需要手动删除它们。如果之前遵循了<a href="/zh/security/hardening-guide">强化指南</a>，你应该能够通过以下方式删除它们：</li></ol><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain"># 获取与 PSP 关联的资源</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"># 删除这些资源</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding &amp;&amp; kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/reference/resource-profiling"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">资源分析</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">安全</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#snap-docker" class="table-of-contents__link toc-highlight">Snap Docker</a></li><li><a href="#iptables" class="table-of-contents__link toc-highlight">Iptables</a></li><li><a href="#rootless-模式" class="table-of-contents__link toc-highlight">Rootless 模式</a></li><li><a href="#hardened-125" class="table-of-contents__link toc-highlight">将强化集群从 v1.24.x 升级到 v1.25.x</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/known-issues" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">已知问题</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>已知问题</h1></header><p>我们会定期更新已知问题文档，说明下一个即将发布的版本中可能无法立即解决的问题。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="snap-docker">Snap Docker<a href="#snap-docker" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你计划同时使用 K3s 与 Docker，则不建议通过 snap 包安装 Docker，因为它会导致运行 K3s 时出现问题。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="iptables">Iptables<a href="#iptables" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你使用 nftables 模式而不是传统模式来运行 iptables，则可能会遇到问题。我们建议使用较新的 iptables（例如 1.6.1+）来避免出现问题。</p><p>此外，版本 1.8.0-1.8.4 存在可能导致 K3s 失败的问题。有关解决方法，请参阅<a href="/zh/advanced#%E6%97%A7%E7%9A%84-iptables-%E7%89%88%E6%9C%AC">其他操作系统准备</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="rootless-模式">Rootless 模式<a href="#rootless-模式" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>使用 Rootless 模式运行 K3s 是实验性的，存在几个<a href="/zh/advanced#rootless-%E6%A8%A1%E5%BC%8F%E7%9A%84%E5%B7%B2%E7%9F%A5%E9%97%AE%E9%A2%98">已知问题</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="hardened-125">将强化集群从 v1.24.x 升级到 v1.25.x<a href="#hardened-125" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Kubernetes v1.25 删除了 PodSecurityPolicy，支持 Pod Security Standard（PSS）。你可以在<a href="https://kubernetes.io/docs/concepts/security/pod-security-standards/" target="_blank" rel="noopener noreferrer">上游文档</a>中阅读有关 PSS 的更多信息。对于 K3s，如果在节点上配置了任何 <code>PodSecurityPoliciy</code>，则必须执行一些手动步骤。</p><ol><li>在所有节点上，更新 <code>kube-apiserver-arg</code> 值以删除 <code>PodSecurityPolicy</code> admission-plugin。添加以下参数值：<code>&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</code>，但不要重启或升级 K3s。以下是节点加固更新后配置文件的示例：</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="2"><li>使用以下内容创建 <code>/var/lib/rancher/k3s/server/psa.yaml</code> 文件。你可能还想豁免更多命名空间。下面的示例豁免了 <code>kube-system</code>（必需）、<code>cis-operator-system</code>（可选，但在通过 Rancher 运行安全扫描时很有用）和 <code>system- upgrade</code>（如果执行<a href="/zh/upgrades/automated">自动升级</a>则需要）。</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="3"><li>正常执行升级。如果使用<a href="/zh/upgrades/automated">自动升级</a>，请确保运行 <code>system-upgrade-controller</code> pod 的命名空间按照 <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/#pod-security-levels" target="_blank" rel="noopener noreferrer">Pod 安全级别</a>的要求设置为 privileged。</li></ol><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">labels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># This value must be privileged for the controller to run successfully.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options.</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> privileged</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">pod-security.kubernetes.io/warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.25</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ol start="4"><li>升级完成后，从集群中移除剩余的 PSP 资源。在许多情况下，在 <code>/var/lib/rancher/k3s/server/manifests/</code> 中用于加固的自定义文件中可能存在 PodSecurityPolicies 和关联的 RBAC 资源。删除这些资源，然后 K3s 将自动更新。由于时间原因，一些资源可能会留在集群中，在这种情况下，你需要手动删除它们。如果之前遵循了<a href="/zh/security/hardening-guide">强化指南</a>，你应该能够通过以下方式删除它们：</li></ol><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain"># 获取与 PSP 关联的资源</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"># 删除这些资源</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">$ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding &amp;&amp; kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/known-issues/known-issues.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/reference/resource-profiling"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">资源分析</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">安全</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#snap-docker" class="table-of-contents__link toc-highlight">Snap Docker</a></li><li><a href="#iptables" class="table-of-contents__link toc-highlight">Iptables</a></li><li><a href="#rootless-模式" class="table-of-contents__link toc-highlight">Rootless 模式</a></li><li><a href="#hardened-125" class="table-of-contents__link toc-highlight">将强化集群从 v1.24.x 升级到 v1.25.x</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/networking.html b/zh/networking.html
index e67a86829..de76df9f3 100644
--- a/zh/networking.html
+++ b/zh/networking.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">网络 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/networking"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="网络 | K3s"><meta data-rh="true" name="description" content="本文介绍了 CoreDNS、Traefik Ingress controller 和 Klipper service load balancer 是如何在 K3s 中工作的。"><meta data-rh="true" property="og:description" content="本文介绍了 CoreDNS、Traefik Ingress controller 和 Klipper service load balancer 是如何在 K3s 中工作的。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/networking"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/networking" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/networking" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">网络 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/networking"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="网络 | K3s"><meta data-rh="true" name="description" content="本文介绍了 CoreDNS、Traefik Ingress controller 和 Klipper service load balancer 是如何在 K3s 中工作的。"><meta data-rh="true" property="og:description" content="本文介绍了 CoreDNS、Traefik Ingress controller 和 Klipper service load balancer 是如何在 K3s 中工作的。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/networking"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/networking" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/networking" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/networking" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/networking" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">网络</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>网络</h1></header><p>本文介绍了 CoreDNS、Traefik Ingress controller 和 Klipper service load balancer 是如何在 K3s 中工作的。</p><p>有关 Flannel 配置选项和后端选择，以及如何设置自己的 CNI，请参阅<a href="/zh/installation/network-options">安装网络选项</a>页面。</p><p>有关 K3s 需要开放哪些端口，请参考<a href="/zh/installation/requirements#%E7%BD%91%E7%BB%9C">网络要求</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="coredns">CoreDNS<a href="#coredns" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>CoreDNS 在 Server 启动时自动部署。要禁用它，请使用 <code>--disable=coredns</code> 选项来配置集群中的所有 Server。</p><p>如果你不安装 CoreDNS，则需要自己安装集群 DNS 提供程序。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-ingress-controller">Traefik Ingress Controller<a href="#traefik-ingress-controller" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p><a href="https://traefik.io/" target="_blank" rel="noopener noreferrer">Traefik</a> 是一种现代的 HTTP 反向代理和负载均衡器，可以轻松部署微服务。它在设计、部署和运行应用程序方面简化了网络复杂性。</p><p>Traefik Ingress Controller 部署了一个使用端口 80 和 443 的 LoadBalancer Service。默认情况下，ServiceLB 将在所有集群成员上公开这些端口，换言之，这些端口无法用于其他 HostPort 或 NodePort pod。</p><p>Traefik 在启动服务器时默认部署。有关详细信息，请参阅<a href="/zh/installation/packaged-components">管理打包组件</a>。默认配置文件位于 <code>/var/lib/rancher/k3s/server/manifests/traefik.yaml</code>。</p><p>不要手动编辑 <code>traefik.yaml</code> 文件，因为 K3s 会在启动时使用默认值替换该文件。相反，你需要通过在 <code>/var/lib/rancher/k3s/server/manifests</code> 中创建其他 <code>HelmChartConfig</code> 清单来自定义 Traefik。有关更多详细信息和示例，请参阅<a href="/zh/helm#%E4%BD%BF%E7%94%A8-helmchartconfig-%E8%87%AA%E5%AE%9A%E4%B9%89%E6%89%93%E5%8C%85%E7%BB%84%E4%BB%B6">使用 HelmChartConfig 自定义打包组件</a>。有关配置值的更多信息，请参阅<a href="https://github.com/traefik/traefik-helm-chart/tree/master/traefik" target="_blank" rel="noopener noreferrer">官方 Traefik Helm 配置参数</a>。</p><p>要从集群中删除 Traefik，请使用 <code>--disable=traefik</code> 标志来启动所有 Server。</p><p>K3s 1.20 及更早版本包括了 Traefik v1。除非找到现有的 Traefik v1（在这种情况下，Traefik 不会升级到 v2），否则 K3s 1.21 及更高版本将安装 Traefik v2。有关 K3s 中包含的 Traefik 版本，请参阅版本的发行说明。</p><p>要从较旧的 Traefik v1 实例迁移，请参阅 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 文档</a>和<a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">迁移工具</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="网络策略控制器">网络策略控制器<a href="#网络策略控制器" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 包含一个嵌入式网络策略控制器。底层实现是 <a href="https://github.com/cloudnativelabs/kube-router" target="_blank" rel="noopener noreferrer">kube-router</a> 的 netpol 控制器库（没有其他 kube-router 功能），你可以在<a href="https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol" target="_blank" rel="noopener noreferrer">此处</a>找到 netpol。</p><p>要禁用它，使用 <code>--disable-network-policy</code> 标志来启动每个 server。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>如果 K3s 配置为禁用网络策略控制器，则不会删除网络策略 iptables 规则。要在禁用网络策略控制器后清理配置的 kube-router 网络策略规则，请使用 <code>k3s-killall.sh</code> 脚本，或使用 <code>iptables-save</code> 和 <code>iptables-restore</code>。这些步骤必须在集群中的所有节点上手动执行。</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">iptables-save | grep -v KUBE-ROUTER | iptables-restore</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="service-load-balancer">Service Load Balancer<a href="#service-load-balancer" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>任何 LoadBalancer 控制器都可以部署到你的 K3s 集群。默认情况下，K3s 提供一个称为 <a href="https://github.com/k3s-io/klipper-lb" target="_blank" rel="noopener noreferrer">ServiceLB</a>（以前称为 Klipper LoadBalancer）的负载均衡器，它会使用可用的主机端口。</p><p>上游 Kubernetes 允许创建 LoadBalancer 类型的 Service，但不包括默认的负载均衡器实现，因此这些 Service 在安装之前会保持 <code>pending</code> 状态。许多托管服务需要 Amazon EC2 或 Microsoft Azure 等云厂商来提供外部负载均衡器实现。相比之下，K3s ServiceLB 可以在没有云厂商或任何额外配置的情况下使用 LoadBalancer Service。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-的工作原理">ServiceLB 的工作原理<a href="#servicelb-的工作原理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>ServiceLB 控制器会监视 Kubernetes <a href="https://kubernetes.io/docs/concepts/services-networking/service/" target="_blank" rel="noopener noreferrer">Service</a>，其中 <code>spec.type</code> 字段设置为 <code>LoadBalancer</code>。</p><p>对于每个 LoadBalancer Service，在 <code>kube-system</code> 命名空间中会创建一个 <a href="https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/" target="_blank" rel="noopener noreferrer">DaemonSet</a>。这个 DaemonSet 依次在每个节点上创建带有 <code>svc-</code> 前缀的 Pod。这些 Pod 使用 iptables 将流量从 Pod 的 NodePort 转发到 Service 的 ClusterIP 地址和端口。</p><p>如果 ServiceLB Pod 在配置了外部 IP 的节点上运行，则该节点的外部 IP 将填充到 Service 的 <code>status.loadBalancer.ingress</code> 地址列表中。否则将使用节点的内部 IP。</p><p>如果创建了多个 LoadBalancer Service，则会为每个 Service 创建一个单独的 DaemonSet。</p><p>只要它们使用不同的端口，就可以在同一个节点上公开多个 Service。</p><p>如果你创建一个侦听端口 80 的 LoadBalancer Service，ServiceLB 将尝试在集群中为端口 80 寻找空闲主机。如果没有该端口可用的主机，则 LB 将停留在 Pending 状态。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="用法">用法<a href="#用法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>在 K3s 中创建一个 <a href="https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer" target="_blank" rel="noopener noreferrer">LoadBalancer 类型的 Service</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="控制-servicelb-节点选择">控制 ServiceLB 节点选择<a href="#控制-servicelb-节点选择" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你将 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 标签添加到一个或多个节点，ServiceLB 控制器会切换到 allow-list 模式，只有具有该标签的节点才有资格托管 LoadBalancer Pod。未标记的节点将被 ServiceLB 排除。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>默认情况下，节点没有标签。只要所有节点保持未标记状态，所有具有可用端口的节点都将被 ServiceLB 使用。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="创建-servicelb-节点池">创建 ServiceLB 节点池<a href="#创建-servicelb-节点池" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要选择特定的节点子集来托管 LoadBalancer 的 pod，请将 <code>enablelb</code> 标签添加到所需的节点，并在节点和服务上设置匹配的 <code>lbpool</code> 标签值。例如：</p><ol><li>使用 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 和 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 标记节点 A 和节点 B</li><li>使用 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 和 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 标记节点 C 和节点 D</li><li>使用标签 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 在端口 443 上创建一个 LoadBalancer Service。该 Service 的 DaemonSet 仅将 Pod 部署到节点 A 和节点 B。</li><li>使用标签 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 在端口 443 上创建另一个 LoadBalancer Service。DaemonSet 只会将 Pod 部署到节点 C 和节点 D。</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="禁用-servicelb">禁用 ServiceLB<a href="#禁用-servicelb" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要禁用 ServiceLB，请使用 <code>--disable=servicelb</code> 标记来配置集群中的所有 Server。</p><p>如果你希望运行不同的 LB，例如 MetalLB，这是必要的。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="部署外部-cloud-controller-manager">部署外部 Cloud Controller Manager<a href="#部署外部-cloud-controller-manager" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>为了减少二进制文件的大小，K3s 删除了所有“树内”（内置）云提供程序。相反，K3s 提供了一个嵌入式 Cloud Controller Manager (CCM) 存根，它执行以下操作：</p><ul><li>根据 <code>--node-ip</code> 和 <code>--node-external-ip</code> 标志设置节点 InternalIP 和 ExternalIP 地址字段。</li><li>托管 ServiceLB LoadBalancer 控制器。</li><li>清除云提供商设置为 <code>external</code> 时出现的 <code>node.cloudprovider.kubernetes.io/uninitialized</code> 污点。</li></ul><p>在部署外部 CCM 之前，你必须使用 <code>--disable-cloud-controller</code> 标志启动所有 K3s Server 以禁用嵌入式 CCM。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>如果你禁用了内置 CCM 并且没有正确部署和配置外部替代品，节点将仍然具有污点而且无法调度。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="没有主机名的节点">没有主机名的节点<a href="#没有主机名的节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>一些云提供商（例如 Linode）将创建以 “localhost” 作为主机名的主机，而其他云提供商可能根本没有设置主机名。这可能会导致域名解析出现问题。你可以使用 <code>--node-name</code> 标志或 <code>K3S_NODE_NAME</code> 环境变量运行 K3s，这会通过传递节点名称来解决此问题。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="多集群-cidr实验性">多集群 CIDR（实验性）<a href="#多集群-cidr实验性" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 v1.26.3+k3s1 开始作为实验功能</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>启用此标志后，网络策略控制器将无法正常工作。</p></div></div><p>从 <code>v1.26</code> 开始，Kubernetes 引入了多集群 CIDR 作为 alpha 功能。(<a href="https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs" target="_blank" rel="noopener noreferrer">https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs</a>)</p><p>你可以使用 <code>--multi-cluster-cidr</code> 标志在 K3s Server 上启用此功能，它可用于定义多个集群 CIDR，为每个节点分配 podCIDR，你还可以在已运行的集群上进行扩展。
-你可以使用 API 和 <code>kubectl</code> 查看 <code>clustercidr</code> 资源（使用 <code>--cluster-cidr</code> 配置的 CIDR 定义为默认值）。</p><p>新的 <code>clustercidr</code> 可以如下定义：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">apiVersion: networking.k8s.io/v1alpha1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kind: ClusterCIDR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">metadata:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  name: new-cidr</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">spec:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  nodeSelector:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    nodeSelectorTerms:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - matchExpressions:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        - key: kubernetes.io/hostname</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          operator: In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          values:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          -  &quot;worker2&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  perNodeHostBits: 8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  ipv4: 10.247.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>与 <code>nodeSelector</code> 匹配的节点将使用新定义资源的 podCIDR。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>已拥有 CIDR 的节点无法获得新的 CIDR。你必须移除或重启它。</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>你可以使用 <code>ipv4</code> 和 <code>ipv6</code> 来定义双栈 CIDR，但 <code>perNodeHostBits</code> 是相同的。使用 <code>--cluster-cidr</code> 来定义双栈配置时，<code>kube-controller</code> 上的 <code>--node-cidr-mask-size-ipv6</code> 标志需要具有与 IPv4 相同的大小。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/storage"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">卷和存储</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/helm"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">Helm</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#coredns" class="table-of-contents__link toc-highlight">CoreDNS</a></li><li><a href="#traefik-ingress-controller" class="table-of-contents__link toc-highlight">Traefik Ingress Controller</a></li><li><a href="#网络策略控制器" class="table-of-contents__link toc-highlight">网络策略控制器</a></li><li><a href="#service-load-balancer" class="table-of-contents__link toc-highlight">Service Load Balancer</a><ul><li><a href="#servicelb-的工作原理" class="table-of-contents__link toc-highlight">ServiceLB 的工作原理</a></li><li><a href="#用法" class="table-of-contents__link toc-highlight">用法</a></li><li><a href="#控制-servicelb-节点选择" class="table-of-contents__link toc-highlight">控制 ServiceLB 节点选择</a></li><li><a href="#创建-servicelb-节点池" class="table-of-contents__link toc-highlight">创建 ServiceLB 节点池</a></li><li><a href="#禁用-servicelb" class="table-of-contents__link toc-highlight">禁用 ServiceLB</a></li></ul></li><li><a href="#部署外部-cloud-controller-manager" class="table-of-contents__link toc-highlight">部署外部 Cloud Controller Manager</a></li><li><a href="#没有主机名的节点" class="table-of-contents__link toc-highlight">没有主机名的节点</a></li><li><a href="#多集群-cidr实验性" class="table-of-contents__link toc-highlight">多集群 CIDR（实验性）</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/networking" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/networking" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">网络</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>网络</h1></header><p>本文介绍了 CoreDNS、Traefik Ingress controller 和 Klipper service load balancer 是如何在 K3s 中工作的。</p><p>有关 Flannel 配置选项和后端选择，以及如何设置自己的 CNI，请参阅<a href="/zh/installation/network-options">安装网络选项</a>页面。</p><p>有关 K3s 需要开放哪些端口，请参考<a href="/zh/installation/requirements#%E7%BD%91%E7%BB%9C">网络要求</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="coredns">CoreDNS<a href="#coredns" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>CoreDNS 在 Server 启动时自动部署。要禁用它，请使用 <code>--disable=coredns</code> 选项来配置集群中的所有 Server。</p><p>如果你不安装 CoreDNS，则需要自己安装集群 DNS 提供程序。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="traefik-ingress-controller">Traefik Ingress Controller<a href="#traefik-ingress-controller" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p><a href="https://traefik.io/" target="_blank" rel="noopener noreferrer">Traefik</a> 是一种现代的 HTTP 反向代理和负载均衡器，可以轻松部署微服务。它在设计、部署和运行应用程序方面简化了网络复杂性。</p><p>Traefik Ingress Controller 部署了一个使用端口 80 和 443 的 LoadBalancer Service。默认情况下，ServiceLB 将在所有集群成员上公开这些端口，换言之，这些端口无法用于其他 HostPort 或 NodePort pod。</p><p>Traefik 在启动服务器时默认部署。有关详细信息，请参阅<a href="/zh/installation/packaged-components">管理打包组件</a>。默认配置文件位于 <code>/var/lib/rancher/k3s/server/manifests/traefik.yaml</code>。</p><p>不要手动编辑 <code>traefik.yaml</code> 文件，因为 K3s 会在启动时使用默认值替换该文件。相反，你需要通过在 <code>/var/lib/rancher/k3s/server/manifests</code> 中创建其他 <code>HelmChartConfig</code> 清单来自定义 Traefik。有关更多详细信息和示例，请参阅<a href="/zh/helm#%E4%BD%BF%E7%94%A8-helmchartconfig-%E8%87%AA%E5%AE%9A%E4%B9%89%E6%89%93%E5%8C%85%E7%BB%84%E4%BB%B6">使用 HelmChartConfig 自定义打包组件</a>。有关配置值的更多信息，请参阅<a href="https://github.com/traefik/traefik-helm-chart/tree/master/traefik" target="_blank" rel="noopener noreferrer">官方 Traefik Helm 配置参数</a>。</p><p>要从集群中删除 Traefik，请使用 <code>--disable=traefik</code> 标志来启动所有 Server。</p><p>K3s 1.20 及更早版本包括了 Traefik v1。除非找到现有的 Traefik v1（在这种情况下，Traefik 不会升级到 v2），否则 K3s 1.21 及更高版本将安装 Traefik v2。有关 K3s 中包含的 Traefik 版本，请参阅版本的发行说明。</p><p>要从较旧的 Traefik v1 实例迁移，请参阅 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 文档</a>和<a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">迁移工具</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="网络策略控制器">网络策略控制器<a href="#网络策略控制器" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 包含一个嵌入式网络策略控制器。底层实现是 <a href="https://github.com/cloudnativelabs/kube-router" target="_blank" rel="noopener noreferrer">kube-router</a> 的 netpol 控制器库（没有其他 kube-router 功能），你可以在<a href="https://github.com/k3s-io/k3s/tree/master/pkg/agent/netpol" target="_blank" rel="noopener noreferrer">此处</a>找到 netpol。</p><p>要禁用它，使用 <code>--disable-network-policy</code> 标志来启动每个 server。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>如果 K3s 配置为禁用网络策略控制器，则不会删除网络策略 iptables 规则。要在禁用网络策略控制器后清理配置的 kube-router 网络策略规则，请使用 <code>k3s-killall.sh</code> 脚本，或使用 <code>iptables-save</code> 和 <code>iptables-restore</code>。这些步骤必须在集群中的所有节点上手动执行。</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">iptables-save | grep -v KUBE-ROUTER | iptables-restore</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">ip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="service-load-balancer">Service Load Balancer<a href="#service-load-balancer" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>任何 LoadBalancer 控制器都可以部署到你的 K3s 集群。默认情况下，K3s 提供一个称为 <a href="https://github.com/k3s-io/klipper-lb" target="_blank" rel="noopener noreferrer">ServiceLB</a>（以前称为 Klipper LoadBalancer）的负载均衡器，它会使用可用的主机端口。</p><p>上游 Kubernetes 允许创建 LoadBalancer 类型的 Service，但不包括默认的负载均衡器实现，因此这些 Service 在安装之前会保持 <code>pending</code> 状态。许多托管服务需要 Amazon EC2 或 Microsoft Azure 等云厂商来提供外部负载均衡器实现。相比之下，K3s ServiceLB 可以在没有云厂商或任何额外配置的情况下使用 LoadBalancer Service。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="servicelb-的工作原理">ServiceLB 的工作原理<a href="#servicelb-的工作原理" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>ServiceLB 控制器会监视 Kubernetes <a href="https://kubernetes.io/docs/concepts/services-networking/service/" target="_blank" rel="noopener noreferrer">Service</a>，其中 <code>spec.type</code> 字段设置为 <code>LoadBalancer</code>。</p><p>对于每个 LoadBalancer Service，在 <code>kube-system</code> 命名空间中会创建一个 <a href="https://kubernetes.io/docs/concepts/workloads/controllers/daemonset/" target="_blank" rel="noopener noreferrer">DaemonSet</a>。这个 DaemonSet 依次在每个节点上创建带有 <code>svc-</code> 前缀的 Pod。这些 Pod 使用 iptables 将流量从 Pod 的 NodePort 转发到 Service 的 ClusterIP 地址和端口。</p><p>如果 ServiceLB Pod 在配置了外部 IP 的节点上运行，则该节点的外部 IP 将填充到 Service 的 <code>status.loadBalancer.ingress</code> 地址列表中。否则将使用节点的内部 IP。</p><p>如果创建了多个 LoadBalancer Service，则会为每个 Service 创建一个单独的 DaemonSet。</p><p>只要它们使用不同的端口，就可以在同一个节点上公开多个 Service。</p><p>如果你创建一个侦听端口 80 的 LoadBalancer Service，ServiceLB 将尝试在集群中为端口 80 寻找空闲主机。如果没有该端口可用的主机，则 LB 将停留在 Pending 状态。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="用法">用法<a href="#用法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>在 K3s 中创建一个 <a href="https://kubernetes.io/docs/concepts/services-networking/service/#loadbalancer" target="_blank" rel="noopener noreferrer">LoadBalancer 类型的 Service</a>。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="控制-servicelb-节点选择">控制 ServiceLB 节点选择<a href="#控制-servicelb-节点选择" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果你将 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 标签添加到一个或多个节点，ServiceLB 控制器会切换到 allow-list 模式，只有具有该标签的节点才有资格托管 LoadBalancer Pod。未标记的节点将被 ServiceLB 排除。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>默认情况下，节点没有标签。只要所有节点保持未标记状态，所有具有可用端口的节点都将被 ServiceLB 使用。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="创建-servicelb-节点池">创建 ServiceLB 节点池<a href="#创建-servicelb-节点池" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要选择特定的节点子集来托管 LoadBalancer 的 pod，请将 <code>enablelb</code> 标签添加到所需的节点，并在节点和服务上设置匹配的 <code>lbpool</code> 标签值。例如：</p><ol><li>使用 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 和 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 标记节点 A 和节点 B</li><li>使用 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 和 <code>svccontroller.k3s.cattle.io/enablelb=true</code> 标记节点 C 和节点 D</li><li>使用标签 <code>svccontroller.k3s.cattle.io/lbpool=pool1</code> 在端口 443 上创建一个 LoadBalancer Service。该 Service 的 DaemonSet 仅将 Pod 部署到节点 A 和节点 B。</li><li>使用标签 <code>svccontroller.k3s.cattle.io/lbpool=pool2</code> 在端口 443 上创建另一个 LoadBalancer Service。DaemonSet 只会将 Pod 部署到节点 C 和节点 D。</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="禁用-servicelb">禁用 ServiceLB<a href="#禁用-servicelb" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要禁用 ServiceLB，请使用 <code>--disable=servicelb</code> 标记来配置集群中的所有 Server。</p><p>如果你希望运行不同的 LB，例如 MetalLB，这是必要的。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="部署外部-cloud-controller-manager">部署外部 Cloud Controller Manager<a href="#部署外部-cloud-controller-manager" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>为了减少二进制文件的大小，K3s 删除了所有“树内”（内置）云提供程序。相反，K3s 提供了一个嵌入式 Cloud Controller Manager (CCM) 存根，它执行以下操作：</p><ul><li>根据 <code>--node-ip</code> 和 <code>--node-external-ip</code> 标志设置节点 InternalIP 和 ExternalIP 地址字段。</li><li>托管 ServiceLB LoadBalancer 控制器。</li><li>清除云提供商设置为 <code>external</code> 时出现的 <code>node.cloudprovider.kubernetes.io/uninitialized</code> 污点。</li></ul><p>在部署外部 CCM 之前，你必须使用 <code>--disable-cloud-controller</code> 标志启动所有 K3s Server 以禁用嵌入式 CCM。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>如果你禁用了内置 CCM 并且没有正确部署和配置外部替代品，节点将仍然具有污点而且无法调度。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="没有主机名的节点">没有主机名的节点<a href="#没有主机名的节点" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>一些云提供商（例如 Linode）将创建以 “localhost” 作为主机名的主机，而其他云提供商可能根本没有设置主机名。这可能会导致域名解析出现问题。你可以使用 <code>--node-name</code> 标志或 <code>K3S_NODE_NAME</code> 环境变量运行 K3s，这会通过传递节点名称来解决此问题。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="多集群-cidr实验性">多集群 CIDR（实验性）<a href="#多集群-cidr实验性" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>版本</div><div class="admonitionContent_S0QG"><p>从 v1.26.3+k3s1 开始作为实验功能</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>启用此标志后，网络策略控制器将无法正常工作。</p></div></div><p>从 <code>v1.26</code> 开始，Kubernetes 引入了多集群 CIDR 作为 alpha 功能。(<a href="https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs" target="_blank" rel="noopener noreferrer">https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs</a>)</p><p>你可以使用 <code>--multi-cluster-cidr</code> 标志在 K3s Server 上启用此功能，它可用于定义多个集群 CIDR，为每个节点分配 podCIDR，你还可以在已运行的集群上进行扩展。
+你可以使用 API 和 <code>kubectl</code> 查看 <code>clustercidr</code> 资源（使用 <code>--cluster-cidr</code> 配置的 CIDR 定义为默认值）。</p><p>新的 <code>clustercidr</code> 可以如下定义：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">apiVersion: networking.k8s.io/v1alpha1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kind: ClusterCIDR</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">metadata:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  name: new-cidr</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">spec:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  nodeSelector:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    nodeSelectorTerms:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      - matchExpressions:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        - key: kubernetes.io/hostname</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          operator: In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          values:</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          -  &quot;worker2&quot;</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  perNodeHostBits: 8</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  ipv4: 10.247.0.0/16</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>与 <code>nodeSelector</code> 匹配的节点将使用新定义资源的 podCIDR。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>已拥有 CIDR 的节点无法获得新的 CIDR。你必须移除或重启它。</p></div></div><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>你可以使用 <code>ipv4</code> 和 <code>ipv6</code> 来定义双栈 CIDR，但 <code>perNodeHostBits</code> 是相同的。使用 <code>--cluster-cidr</code> 来定义双栈配置时，<code>kube-controller</code> 上的 <code>--node-cidr-mask-size-ipv6</code> 标志需要具有与 IPv4 相同的大小。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/networking/networking.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/storage"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">卷和存储</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/helm"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">Helm</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#coredns" class="table-of-contents__link toc-highlight">CoreDNS</a></li><li><a href="#traefik-ingress-controller" class="table-of-contents__link toc-highlight">Traefik Ingress Controller</a></li><li><a href="#网络策略控制器" class="table-of-contents__link toc-highlight">网络策略控制器</a></li><li><a href="#service-load-balancer" class="table-of-contents__link toc-highlight">Service Load Balancer</a><ul><li><a href="#servicelb-的工作原理" class="table-of-contents__link toc-highlight">ServiceLB 的工作原理</a></li><li><a href="#用法" class="table-of-contents__link toc-highlight">用法</a></li><li><a href="#控制-servicelb-节点选择" class="table-of-contents__link toc-highlight">控制 ServiceLB 节点选择</a></li><li><a href="#创建-servicelb-节点池" class="table-of-contents__link toc-highlight">创建 ServiceLB 节点池</a></li><li><a href="#禁用-servicelb" class="table-of-contents__link toc-highlight">禁用 ServiceLB</a></li></ul></li><li><a href="#部署外部-cloud-controller-manager" class="table-of-contents__link toc-highlight">部署外部 Cloud Controller Manager</a></li><li><a href="#没有主机名的节点" class="table-of-contents__link toc-highlight">没有主机名的节点</a></li><li><a href="#多集群-cidr实验性" class="table-of-contents__link toc-highlight">多集群 CIDR（实验性）</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/opensearch.xml b/zh/opensearch.xml
deleted file mode 100644
index ef20be1ae..000000000
--- a/zh/opensearch.xml
+++ /dev/null
@@ -1,11 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"
-                       xmlns:moz="http://www.mozilla.org/2006/browser/search/">
-  <ShortName>K3s</ShortName>
-  <Description>Search K3s</Description>
-  <InputEncoding>UTF-8</InputEncoding>
-  <Image width="16" height="16" type="image/x-icon">https://docs.k3s.io/zh/img/favicon.ico</Image>
-  <Url type="text/html" method="get" template="https://docs.k3s.io/zh/search?q={searchTerms}"/>
-  <Url type="application/opensearchdescription+xml" rel="self" template="https://docs.k3s.io/zh/opensearch.xml" />
-  <moz:SearchForm>https://docs.k3s.io/zh/</moz:SearchForm>
-</OpenSearchDescription>
\ No newline at end of file
diff --git a/zh/quick-start.html b/zh/quick-start.html
index 025d509ca..5f368e517 100644
--- a/zh/quick-start.html
+++ b/zh/quick-start.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">快速入门指南 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/quick-start"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="快速入门指南 | K3s"><meta data-rh="true" name="description" content="本指南帮助你使用默认选项快速启动集群。安装部分更详细地介绍了如何设置 K3s。"><meta data-rh="true" property="og:description" content="本指南帮助你使用默认选项快速启动集群。安装部分更详细地介绍了如何设置 K3s。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/quick-start"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/quick-start" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/quick-start" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">快速入门指南 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/quick-start"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="快速入门指南 | K3s"><meta data-rh="true" name="description" content="本指南帮助你使用默认选项快速启动集群。安装部分更详细地介绍了如何设置 K3s。"><meta data-rh="true" property="og:description" content="本指南帮助你使用默认选项快速启动集群。安装部分更详细地介绍了如何设置 K3s。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/quick-start"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/quick-start" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/quick-start" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/quick-start" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">快速入门指南</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>快速入门指南</h1></header><p>本指南帮助你使用默认选项快速启动集群。<a href="/zh/installation">安装部分</a>更详细地介绍了如何设置 K3s。</p><p>有关 K3s 组件如何协同工作的信息，请参阅<a href="/zh/architecture">架构</a>。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>Kubernetes 新手？Kubernetes 官方文档介绍了一些很好的<a href="https://kubernetes.io/docs/tutorials/kubernetes-basics/" target="_blank" rel="noopener noreferrer">基础知识教程</a>。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="安装脚本">安装脚本<a href="#安装脚本" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 提供了一个安装脚本，可以方便地将其作为服务安装在基于 systemd 或 openrc 的系统上。该脚本可在 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 获得。要使用这种方法安装 K3s，只需运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>运行此安装后：</p><ul><li>K3s 服务将被配置为在节点重启后或进程崩溃或被杀死时自动重启。</li><li>将安装其他实用程序，包括 <code>kubectl</code>、<code>crictl</code>、<code>ctr</code>、<code>k3s-killall.sh</code> 和 <code>k3s-uninstall.sh</code>。</li><li><a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> 文件将写入到 <code>/etc/rancher/k3s/k3s.yaml</code>，由 K3s 安装的 kubectl 将自动使用该文件。</li></ul><p>单节点 Server 安装是一个功能齐全的 Kubernetes 集群，它包括了托管工作负载 pod 所需的所有数据存储、control plane、kubelet 和容器运行时组件。除非你希望向集群添加容量或冗余，否则没有必要添加额外的 Server 或 Agent 节点。</p><p>要安装其他 Agent 节点并将它们添加到集群，请使用 <code>K3S_URL</code> 和 <code>K3S_TOKEN</code> 环境变量运行安装脚本。以下示例演示了如何添加 Agent 节点：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://myserver:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mynodetoken </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p><code>K3S_URL</code> 参数会导致安装程序将 K3s 配置为 Agent 而不是 Server。K3s Agent 将注册到在 URL 上监听的 K3s Server。<code>K3S_TOKEN</code> 使用的值存储在 Server 节点上的 <code>/var/lib/rancher/k3s/server/node-token</code> 中。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>每台主机必须具有唯一的主机名。如果你的计算机没有唯一的主机名，请传递 <code>K3S_NODE_NAME</code> 环境变量，并为每个节点提供一个有效且唯一的主机名。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/architecture"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">架构</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">安装</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#安装脚本" class="table-of-contents__link toc-highlight">安装脚本</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/quick-start" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">快速入门指南</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>快速入门指南</h1></header><p>本指南帮助你使用默认选项快速启动集群。<a href="/zh/installation">安装部分</a>更详细地介绍了如何设置 K3s。</p><p>有关 K3s 组件如何协同工作的信息，请参阅<a href="/zh/architecture">架构</a>。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>Kubernetes 新手？Kubernetes 官方文档介绍了一些很好的<a href="https://kubernetes.io/docs/tutorials/kubernetes-basics/" target="_blank" rel="noopener noreferrer">基础知识教程</a>。</p></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="安装脚本">安装脚本<a href="#安装脚本" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 提供了一个安装脚本，可以方便地将其作为服务安装在基于 systemd 或 openrc 的系统上。该脚本可在 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 获得。要使用这种方法安装 K3s，只需运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>运行此安装后：</p><ul><li>K3s 服务将被配置为在节点重启后或进程崩溃或被杀死时自动重启。</li><li>将安装其他实用程序，包括 <code>kubectl</code>、<code>crictl</code>、<code>ctr</code>、<code>k3s-killall.sh</code> 和 <code>k3s-uninstall.sh</code>。</li><li><a href="https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/" target="_blank" rel="noopener noreferrer">kubeconfig</a> 文件将写入到 <code>/etc/rancher/k3s/k3s.yaml</code>，由 K3s 安装的 kubectl 将自动使用该文件。</li></ul><p>单节点 Server 安装是一个功能齐全的 Kubernetes 集群，它包括了托管工作负载 pod 所需的所有数据存储、control plane、kubelet 和容器运行时组件。除非你希望向集群添加容量或冗余，否则没有必要添加额外的 Server 或 Agent 节点。</p><p>要安装其他 Agent 节点并将它们添加到集群，请使用 <code>K3S_URL</code> 和 <code>K3S_TOKEN</code> 环境变量运行安装脚本。以下示例演示了如何添加 Agent 节点：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_URL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://myserver:6443 </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">K3S_TOKEN</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">mynodetoken </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p><code>K3S_URL</code> 参数会导致安装程序将 K3s 配置为 Agent 而不是 Server。K3s Agent 将注册到在 URL 上监听的 K3s Server。<code>K3S_TOKEN</code> 使用的值存储在 Server 节点上的 <code>/var/lib/rancher/k3s/server/node-token</code> 中。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>每台主机必须具有唯一的主机名。如果你的计算机没有唯一的主机名，请传递 <code>K3S_NODE_NAME</code> 环境变量，并为每个节点提供一个有效且唯一的主机名。</p></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/quick-start/quick-start.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/architecture"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">架构</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/installation"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">安装</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#安装脚本" class="table-of-contents__link toc-highlight">安装脚本</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/reference.html b/zh/reference.html
index 6a9bc50b6..fef6dcf20 100644
--- a/zh/reference.html
+++ b/zh/reference.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">参考 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/reference"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="参考 | K3s"><meta data-rh="true" name="description" content="本节详细介绍了 K3s 安装脚本、服务器/客户端配置选项以及其他工具的使用说明。"><meta data-rh="true" property="og:description" content="本节详细介绍了 K3s 安装脚本、服务器/客户端配置选项以及其他工具的使用说明。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/reference"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">参考 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/reference"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="参考 | K3s"><meta data-rh="true" name="description" content="本节详细介绍了 K3s 安装脚本、服务器/客户端配置选项以及其他工具的使用说明。"><meta data-rh="true" property="og:description" content="本节详细介绍了 K3s 安装脚本、服务器/客户端配置选项以及其他工具的使用说明。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/reference"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/env-variables">环境变量</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/resource-profiling">资源分析</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">参考</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>参考</h1></header><p>本节详细介绍了 K3s 安装脚本、服务器/客户端配置选项以及其他工具的使用说明。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/token"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">token</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/reference/env-variables"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">环境变量</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/reference" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/env-variables">环境变量</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/resource-profiling">资源分析</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">参考</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>参考</h1></header><p>本节详细介绍了 K3s 安装脚本、服务器/客户端配置选项以及其他工具的使用说明。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/reference.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cli/token"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">token</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/reference/env-variables"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">环境变量</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/reference/env-variables.html b/zh/reference/env-variables.html
index 9e16d843f..668bea1bc 100644
--- a/zh/reference/env-variables.html
+++ b/zh/reference/env-variables.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">环境变量 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/reference/env-variables"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="环境变量 | K3s"><meta data-rh="true" name="description" content="如快速入门指南中所述，你可以使用 https://get.k3s.io 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。"><meta data-rh="true" property="og:description" content="如快速入门指南中所述，你可以使用 https://get.k3s.io 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/reference/env-variables"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/env-variables" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/env-variables" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">环境变量 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/reference/env-variables"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="环境变量 | K3s"><meta data-rh="true" name="description" content="如快速入门指南中所述，你可以使用 https://get.k3s.io 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。"><meta data-rh="true" property="og:description" content="如快速入门指南中所述，你可以使用 https://get.k3s.io 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/reference/env-variables"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/env-variables" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/env-variables" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/env-variables" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/reference/env-variables">环境变量</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/resource-profiling">资源分析</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/reference"><span itemprop="name">参考</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">环境变量</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>环境变量</h1></header><p>如<a href="/zh/quick-start">快速入门指南</a>中所述，你可以使用 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。</p><p>此命令的最简单形式如下：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>使用该方法安装 K3s 时，你可以使用以下环境变量来配置安装：</p><table><thead><tr><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>INSTALL_K3S_SKIP_DOWNLOAD</code></td><td>如果设置为 <code>true</code> 将不会下载 K3s 哈希或二进制文件。</td></tr><tr><td><code>INSTALL_K3S_SYMLINK</code></td><td>默认情况下，如果命令不存在于路径中，将为 kubectl、crictl 和 ctr 二进制文件创建符号链接。如果设置为 <code>skip</code> 将不会创建符号链接，设置为 <code>force</code> 将会覆盖。</td></tr><tr><td><code>INSTALL_K3S_SKIP_ENABLE</code></td><td>如果设置为 <code>true</code> 将不会启用或启动 K3s 服务。</td></tr><tr><td><code>INSTALL_K3S_SKIP_START</code></td><td>如果设置为 <code>true</code> 将不会启动 K3s 服务。</td></tr><tr><td><code>INSTALL_K3S_VERSION</code></td><td>从 GitHub 下载的 K3s 版本。如果未指定，将尝试从 stable channel 下载。</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR</code></td><td>安装 K3s 二进制文件、链接和卸载脚本的目录，或使用 <code>/usr/local/bin</code> 作为默认目录。</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR_READ_ONLY</code></td><td>如果设置为 <code>true</code> 将不会将文件写入 <code>INSTALL_K3S_BIN_DIR</code>，强制设置为 <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>。</td></tr><tr><td><code>INSTALL_K3S_SYSTEMD_DIR</code></td><td>安装 systemd 服务和环境文件的目录，或使用 <code>/etc/systemd/system</code> 作为默认目录。</td></tr><tr><td><code>INSTALL_K3S_EXEC</code></td><td>带有标志的命令，用于在服务中启动 K3s。如果未指定命令并且设置了 <code>K3S_URL</code>，它将默认为 &quot;agent&quot;。如果未设置 <code>K3S_URL</code>，它将默认为 &quot;server&quot;。如需帮助，请参阅<a href="/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9">此示例</a>。</td></tr><tr><td><code>INSTALL_K3S_NAME</code></td><td>要创建的 systemd 服务的名称，如果将 K3s 作为 server 运行，则默认为 “k3s”，如果将 K3s 作为 agent 运行，则默认为 “k3s-agent”。如果指定，名称将以“k3s-”为前缀。</td></tr><tr><td><code>INSTALL_K3S_TYPE</code></td><td>要创建的 systemd 服务类型，如果未指定，将默认使用来自 K3s exec 命令的类型。</td></tr><tr><td><code>INSTALL_K3S_SELINUX_WARN</code></td><td>如果设置为 <code>true</code>，则在未找到 k3s-selinux 策略时会继续。</td></tr><tr><td><code>INSTALL_K3S_SKIP_SELINUX_RPM</code></td><td>如果设置为 <code>true</code> 将跳过 k3s RPM 的自动安装。</td></tr><tr><td><code>INSTALL_K3S_CHANNEL_URL</code></td><td>用于获取 K3s 下载 URL 的 Channel URL。默认为 <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">https://update.k3s.io/v1-release/channels</a>。</td></tr><tr><td><code>INSTALL_K3S_CHANNEL</code></td><td>用于获取 K3s 下载 URL 的 Channel。默认为 &quot;stable&quot;。可选项：<code>stable</code>、<code>latest</code>、<code>testing</code>。</td></tr></tbody></table><p>以下示例显示了如何将上述环境变量作为选项设置（在管道符后）：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_CHANNEL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">latest </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>以 <code>K3S_</code> 开头的环境变量将被保留，供 systemd 和 openrc 服务使用。</p><p>如果设置了 <code>K3S_URL</code> 但没有设置 exec 命令，将默认命令为“agent”。</p><p>运行 agent 时，还必须设置 <code>K3S_TOKEN</code>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/reference"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">参考</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/reference/resource-profiling"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">资源分析</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/reference/env-variables" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/reference/env-variables">环境变量</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/resource-profiling">资源分析</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/reference"><span itemprop="name">参考</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">环境变量</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>环境变量</h1></header><p>如<a href="/zh/quick-start">快速入门指南</a>中所述，你可以使用 <a href="https://get.k3s.io" target="_blank" rel="noopener noreferrer">https://get.k3s.io</a> 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。</p><p>此命令的最简单形式如下：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>中国用户，可以使用以下方法加速安装：</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div><p>使用该方法安装 K3s 时，你可以使用以下环境变量来配置安装：</p><table><thead><tr><th>环境变量</th><th>描述</th></tr></thead><tbody><tr><td><code>INSTALL_K3S_SKIP_DOWNLOAD</code></td><td>如果设置为 <code>true</code> 将不会下载 K3s 哈希或二进制文件。</td></tr><tr><td><code>INSTALL_K3S_SYMLINK</code></td><td>默认情况下，如果命令不存在于路径中，将为 kubectl、crictl 和 ctr 二进制文件创建符号链接。如果设置为 <code>skip</code> 将不会创建符号链接，设置为 <code>force</code> 将会覆盖。</td></tr><tr><td><code>INSTALL_K3S_SKIP_ENABLE</code></td><td>如果设置为 <code>true</code> 将不会启用或启动 K3s 服务。</td></tr><tr><td><code>INSTALL_K3S_SKIP_START</code></td><td>如果设置为 <code>true</code> 将不会启动 K3s 服务。</td></tr><tr><td><code>INSTALL_K3S_VERSION</code></td><td>从 GitHub 下载的 K3s 版本。如果未指定，将尝试从 stable channel 下载。</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR</code></td><td>安装 K3s 二进制文件、链接和卸载脚本的目录，或使用 <code>/usr/local/bin</code> 作为默认目录。</td></tr><tr><td><code>INSTALL_K3S_BIN_DIR_READ_ONLY</code></td><td>如果设置为 <code>true</code> 将不会将文件写入 <code>INSTALL_K3S_BIN_DIR</code>，强制设置为 <code>INSTALL_K3S_SKIP_DOWNLOAD=true</code>。</td></tr><tr><td><code>INSTALL_K3S_SYSTEMD_DIR</code></td><td>安装 systemd 服务和环境文件的目录，或使用 <code>/etc/systemd/system</code> 作为默认目录。</td></tr><tr><td><code>INSTALL_K3S_EXEC</code></td><td>带有标志的命令，用于在服务中启动 K3s。如果未指定命令并且设置了 <code>K3S_URL</code>，它将默认为 &quot;agent&quot;。如果未设置 <code>K3S_URL</code>，它将默认为 &quot;server&quot;。如需帮助，请参阅<a href="/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9">此示例</a>。</td></tr><tr><td><code>INSTALL_K3S_NAME</code></td><td>要创建的 systemd 服务的名称，如果将 K3s 作为 server 运行，则默认为 “k3s”，如果将 K3s 作为 agent 运行，则默认为 “k3s-agent”。如果指定，名称将以“k3s-”为前缀。</td></tr><tr><td><code>INSTALL_K3S_TYPE</code></td><td>要创建的 systemd 服务类型，如果未指定，将默认使用来自 K3s exec 命令的类型。</td></tr><tr><td><code>INSTALL_K3S_SELINUX_WARN</code></td><td>如果设置为 <code>true</code>，则在未找到 k3s-selinux 策略时会继续。</td></tr><tr><td><code>INSTALL_K3S_SKIP_SELINUX_RPM</code></td><td>如果设置为 <code>true</code> 将跳过 k3s RPM 的自动安装。</td></tr><tr><td><code>INSTALL_K3S_CHANNEL_URL</code></td><td>用于获取 K3s 下载 URL 的 Channel URL。默认为 <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">https://update.k3s.io/v1-release/channels</a>。</td></tr><tr><td><code>INSTALL_K3S_CHANNEL</code></td><td>用于获取 K3s 下载 URL 的 Channel。默认为 &quot;stable&quot;。可选项：<code>stable</code>、<code>latest</code>、<code>testing</code>。</td></tr></tbody></table><p>以下示例显示了如何将上述环境变量作为选项设置（在管道符后）：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">curl</span><span class="token plain"> -sfL https://get.k3s.io </span><span class="token operator" style="color:rgb(137, 221, 255)">|</span><span class="token plain"> </span><span class="token assign-left variable" style="color:rgb(191, 199, 213)">INSTALL_K3S_CHANNEL</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">latest </span><span class="token function" style="color:rgb(130, 170, 255)">sh</span><span class="token plain"> -</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>以 <code>K3S_</code> 开头的环境变量将被保留，供 systemd 和 openrc 服务使用。</p><p>如果设置了 <code>K3S_URL</code> 但没有设置 exec 命令，将默认命令为“agent”。</p><p>运行 agent 时，还必须设置 <code>K3S_TOKEN</code>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/env-variables.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/reference"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">参考</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/reference/resource-profiling"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">资源分析</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/reference/resource-profiling.html b/zh/reference/resource-profiling.html
index 598a0bc1a..8ebcea603 100644
--- a/zh/reference/resource-profiling.html
+++ b/zh/reference/resource-profiling.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">资源分析 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/reference/resource-profiling"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="资源分析 | K3s"><meta data-rh="true" name="description" content="本文介绍了测试结果，用于确定 K3s 的最低资源要求。"><meta data-rh="true" property="og:description" content="本文介绍了测试结果，用于确定 K3s 的最低资源要求。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/reference/resource-profiling"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/resource-profiling" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/resource-profiling" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">资源分析 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/reference/resource-profiling"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="资源分析 | K3s"><meta data-rh="true" name="description" content="本文介绍了测试结果，用于确定 K3s 的最低资源要求。"><meta data-rh="true" property="og:description" content="本文介绍了测试结果，用于确定 K3s 的最低资源要求。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/reference/resource-profiling"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/reference/resource-profiling" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/reference/resource-profiling" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/reference/resource-profiling" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/env-variables">环境变量</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/reference/resource-profiling">资源分析</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/reference"><span itemprop="name">参考</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">资源分析</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>资源分析</h1></header><p>本文介绍了测试结果，用于确定 K3s 的最低资源要求。</p><p>结果总结如下：</p><table><thead><tr><th>组件</th><th>处理器</th><th>最小 CPU</th><th>Kine/SQLite 的最小 RAM</th><th>嵌入式 etcd 的最小 RAM</th></tr></thead><tbody><tr><td>具有工作负载的 K3s Server</td><td>Intel 8375C CPU, 2.90 GHz</td><td>核的 6%</td><td>1596M</td><td>1606M</td></tr><tr><td>具有单个 Agent 的 K3s 集群</td><td>Intel 8375C CPU, 2.90 GHz</td><td>核的 5%</td><td>1428M</td><td>1450M</td></tr><tr><td>K3s agent</td><td>Intel 8375C CPU, 2.90 GHz</td><td>核的 3%</td><td>275M</td><td>275M</td></tr><tr><td>具有工作负载的 K3s Server</td><td>Pi4B BCM2711, 1.50 GHz</td><td>核的 30%</td><td>1588M</td><td>1613M</td></tr><tr><td>具有单个 Agent 的 K3s 集群</td><td>Pi4B BCM2711, 1.50 GHz</td><td>核的 25%</td><td>1215M</td><td>1413M</td></tr><tr><td>K3s agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>核的 10%</td><td>268M</td><td>268M</td></tr></tbody></table><ul><li><a href="#%E8%B5%84%E6%BA%90%E6%B5%8B%E8%AF%95%E8%8C%83%E5%9B%B4">资源测试范围</a></li><li><a href="#%E7%94%A8%E4%BA%8E%E5%9F%BA%E7%BA%BF%E6%B5%8B%E9%87%8F%E7%9A%84%E7%BB%84%E4%BB%B6">用于基线测量的组件</a></li><li><a href="#%E6%96%B9%E6%B3%95">方法</a></li><li><a href="#%E7%8E%AF%E5%A2%83">环境</a></li><li><a href="#%E5%9F%BA%E5%87%86%E8%B5%84%E6%BA%90%E8%A6%81%E6%B1%82">基准资源要求</a><ul><li><a href="#%E5%85%B7%E6%9C%89%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E7%9A%84-k3s-server">具有工作负载的 K3s Server</a></li><li><a href="#%E5%85%B7%E6%9C%89%E5%8D%95%E4%B8%AA-agent-%E7%9A%84-k3s-%E9%9B%86%E7%BE%A4">具有单个 Agent 的 K3s 集群</a></li><li><a href="#k3s-agent">K3s Agent</a></li></ul></li><li><a href="#%E5%88%86%E6%9E%90">分析</a><ul><li><a href="#%E4%B8%BB%E8%A6%81%E8%B5%84%E6%BA%90%E4%BD%BF%E7%94%A8%E7%8E%87%E5%86%B3%E5%AE%9A%E5%9B%A0%E7%B4%A0">主要资源使用率决定因素</a></li><li><a href="#%E9%98%B2%E6%AD%A2-agent-%E5%92%8C%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E5%B9%B2%E6%89%B0%E9%9B%86%E7%BE%A4%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8">防止 Agent 和工作负载干扰集群数据存储</a></li></ul></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="资源测试范围">资源测试范围<a href="#资源测试范围" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>资源测试旨在解决以下问题：</p><ul><li>在单节点集群上，确定要为整个 K3s 服务器堆栈预留的最小 CPU、内存和 IOP 数量（假设集群上将部署真实的工作负载）。</li><li>在 Agent（Worker）节点上，确定要为 Kubernetes 和 K3s control plane 组件（kubelet 和 k3s agent）预留的最小 CPU、内存和 IOP 数量。</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="用于基线测量的组件">用于基线测量的组件<a href="#用于基线测量的组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>测试的组件包括：</p><ul><li>启用所有打包组件的 K3s 1.26.5</li><li>Prometheus + Grafana 监控栈</li><li><a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">Kubernetes 示例 Nginx 部署</a></li></ul><p>这些是一个稳定系统的基线数据，只使用 K3s 打包的组件（Traefik Ingress、Klipper lb、本地路径存储），运行标准的监控堆栈（Prometheus 和 Grafana）和 Guestbook 示例应用程序。</p><p>包括 IOPS 在内的资源数据仅用于 Kubernetes 数据存储和 control plane，不包括系统级 management agent 或 logging、容器镜像管理或任何工作负载要求的开销。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="方法">方法<a href="#方法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Prometheus v2.43.0 的独立实例可以通过 apt 安装的 <code>prometheus-node-exporter</code> 收集主机 CPU、内存和磁盘 IO 统计信息。</p><p><code>systemd-cgtop</code> 用于抽查 systemd cgroup 级别的 CPU 和内存利用率。<code>system.slice/k3s.service</code> 跟踪 K3s 和 containerd 的资源利用率，而单个 pod 位于 <code>kubepods</code> 层级下。</p><p>其他详细的 K3s 内存利用率数据是使用 server 和 agent 进程的集成 metrics-server 从 <code>kubectl top node</code> 收集的。</p><p>利用率数据来自于运行所述工作负载的节点上稳态运行的第 95 个百分位读数。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="环境">环境<a href="#环境" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><table><thead><tr><th>Arch</th><th>OS</th><th>System</th><th>CPU</th><th>RAM</th><th>Disk</th></tr></thead><tbody><tr><td>x86_64</td><td>Ubuntu 22.04</td><td>AWS c6id.xlarge</td><td>Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz</td><td>8 GB</td><td>NVME SSD</td></tr><tr><td>aarch64</td><td>Raspberry Pi OS 11</td><td>Raspberry Pi 4 Model B</td><td>BCM2711, 4 Core 1.50 GHz</td><td>8 GB</td><td>UHS-III SDXC</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="基准资源要求">基准资源要求<a href="#基准资源要求" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>本文介绍了测试结果，用于确定基本 K3s 操作的最低资源要求。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="具有工作负载的-k3s-server">具有工作负载的 K3s Server<a href="#具有工作负载的-k3s-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>这些是单节点集群的要求，其中 K3s Server 与<a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">简单工作负载</a>共享资源。</p><p>CPU 要求：</p><table><thead><tr><th>系统</th><th>CPU 核用量</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>核的 6%</td></tr><tr><td>Pi4B</td><td>核的 30%</td></tr></tbody></table><p>内存要求：</p><table><thead><tr><th>测试的数据存储</th><th>系统</th><th>内存</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1596M</td></tr><tr><td></td><td>Pi4B</td><td>1588M</td></tr><tr><td>嵌入式 etcd</td><td>Intel 8375C</td><td>1606M</td></tr><tr><td></td><td>Pi4B</td><td>1613M</td></tr></tbody></table><p>磁盘要求：</p><table><thead><tr><th>测试的数据存储</th><th>IOPS</th><th>KiB/sec</th><th>延迟</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td></tr><tr><td>嵌入式 etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="具有单个-agent-的-k3s-集群">具有单个 Agent 的 K3s 集群<a href="#具有单个-agent-的-k3s-集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>以下介绍具有 K3s Server 节点和 K3s Agent，但没有工作负载的 K3s 集群的基线要求。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server">K3s Server<a href="#k3s-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>CPU 要求：</p><table><thead><tr><th>系统</th><th>CPU 核用量</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>核的 5%</td></tr><tr><td>Pi4B</td><td>核的 25%</td></tr></tbody></table><p>内存要求：</p><table><thead><tr><th>测试的数据存储</th><th>系统</th><th>内存</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1428M</td></tr><tr><td></td><td>Pi4B</td><td>1215M</td></tr><tr><td>嵌入式 etcd</td><td>Intel 8375C</td><td>1450M</td></tr><tr><td></td><td>Pi4B</td><td>1413M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent">K3s Agent<a href="#k3s-agent" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要求：</p><table><thead><tr><th>系统</th><th>CPU 核用量</th><th>RAM</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>核的 3%</td><td>275M</td></tr><tr><td>Pi4B</td><td>核的 5%</td><td>268M</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="分析">分析<a href="#分析" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>本节包括了对 K3s Server 和 Agent 利用率产生最大影响的分析，以及如何保护集群数据存储免受 Agent 和工作负载的干扰。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="主要资源使用率决定因素">主要资源使用率决定因素<a href="#主要资源使用率决定因素" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s Server 利用率数据主要取决于 Kubernetes 数据存储（kine 或 etcd）、API Server、Controller-Manager 和 Scheduler 控制循环的支持，以及影响系统状态更改的任何管理任务。如果对 Kubernetes control plane 添加额外负载（例如创建/修改/删除资源），利用率会出现临时峰值。如果使用大量使用 Kubernetes 数据存储的 Operator 或应用程序（例如 Rancher 或其他 Operator 类型的应用程序），server 的资源需求将增加。如果通过添加额外的节点或创建大量集群资源来扩展集群，server 的资源需求将增加。</p><p>K3s Agent 利用率数据主要取决于容器生命周期管理控制循环的支持。如果存在涉及管理镜像、配置存储或创建/销毁容器的操作，利用率会出现临时峰值。尤其是镜像拉取（通常与 CPU 和 IO 高度绑定），因为涉及将镜像内容解压缩到磁盘。如果可能，你可以将工作负载存储（pod 临时存储和卷）与 Agent 组件（/var/lib/rancher/k3s/agent）隔离，从而确保没有资源冲突。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="防止-agent-和工作负载干扰集群数据存储">防止 Agent 和工作负载干扰集群数据存储<a href="#防止-agent-和工作负载干扰集群数据存储" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果在 server 还托管了工作负载 pod 的环境中运行，你需要确保 agent 和工作负载 IOPS 不会干扰数据存储。</p><p>你可以将 server 组件 (/var/lib/rancher/k3s/server) 放置在与 agent 组件 (/var/lib/rancher/k3s/agent) 不同的存储介质，其中包括 containerd 镜像存储区。</p><p>工作负载存储（pod 临时存储和卷）也应该与数据存储区隔离。</p><p>如果未能满足数据存储吞吐量和延迟要求，control plane 的响应可能会延迟，control plane 也可能无法维持系统状态。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/reference/env-variables"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">环境变量</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/known-issues"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">已知问题</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#资源测试范围" class="table-of-contents__link toc-highlight">资源测试范围</a></li><li><a href="#用于基线测量的组件" class="table-of-contents__link toc-highlight">用于基线测量的组件</a></li><li><a href="#方法" class="table-of-contents__link toc-highlight">方法</a></li><li><a href="#环境" class="table-of-contents__link toc-highlight">环境</a></li><li><a href="#基准资源要求" class="table-of-contents__link toc-highlight">基准资源要求</a><ul><li><a href="#具有工作负载的-k3s-server" class="table-of-contents__link toc-highlight">具有工作负载的 K3s Server</a></li><li><a href="#具有单个-agent-的-k3s-集群" class="table-of-contents__link toc-highlight">具有单个 Agent 的 K3s 集群</a></li><li><a href="#k3s-agent" class="table-of-contents__link toc-highlight">K3s Agent</a></li></ul></li><li><a href="#分析" class="table-of-contents__link toc-highlight">分析</a><ul><li><a href="#主要资源使用率决定因素" class="table-of-contents__link toc-highlight">主要资源使用率决定因素</a></li><li><a href="#防止-agent-和工作负载干扰集群数据存储" class="table-of-contents__link toc-highlight">防止 Agent 和工作负载干扰集群数据存储</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/reference/resource-profiling" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/reference/env-variables">环境变量</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/reference/resource-profiling">资源分析</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/reference"><span itemprop="name">参考</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">资源分析</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>资源分析</h1></header><p>本文介绍了测试结果，用于确定 K3s 的最低资源要求。</p><p>结果总结如下：</p><table><thead><tr><th>组件</th><th>处理器</th><th>最小 CPU</th><th>Kine/SQLite 的最小 RAM</th><th>嵌入式 etcd 的最小 RAM</th></tr></thead><tbody><tr><td>具有工作负载的 K3s Server</td><td>Intel 8375C CPU, 2.90 GHz</td><td>核的 6%</td><td>1596M</td><td>1606M</td></tr><tr><td>具有单个 Agent 的 K3s 集群</td><td>Intel 8375C CPU, 2.90 GHz</td><td>核的 5%</td><td>1428M</td><td>1450M</td></tr><tr><td>K3s agent</td><td>Intel 8375C CPU, 2.90 GHz</td><td>核的 3%</td><td>275M</td><td>275M</td></tr><tr><td>具有工作负载的 K3s Server</td><td>Pi4B BCM2711, 1.50 GHz</td><td>核的 30%</td><td>1588M</td><td>1613M</td></tr><tr><td>具有单个 Agent 的 K3s 集群</td><td>Pi4B BCM2711, 1.50 GHz</td><td>核的 25%</td><td>1215M</td><td>1413M</td></tr><tr><td>K3s agent</td><td>Pi4B BCM2711, 1.50 GHz</td><td>核的 10%</td><td>268M</td><td>268M</td></tr></tbody></table><ul><li><a href="#%E8%B5%84%E6%BA%90%E6%B5%8B%E8%AF%95%E8%8C%83%E5%9B%B4">资源测试范围</a></li><li><a href="#%E7%94%A8%E4%BA%8E%E5%9F%BA%E7%BA%BF%E6%B5%8B%E9%87%8F%E7%9A%84%E7%BB%84%E4%BB%B6">用于基线测量的组件</a></li><li><a href="#%E6%96%B9%E6%B3%95">方法</a></li><li><a href="#%E7%8E%AF%E5%A2%83">环境</a></li><li><a href="#%E5%9F%BA%E5%87%86%E8%B5%84%E6%BA%90%E8%A6%81%E6%B1%82">基准资源要求</a><ul><li><a href="#%E5%85%B7%E6%9C%89%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E7%9A%84-k3s-server">具有工作负载的 K3s Server</a></li><li><a href="#%E5%85%B7%E6%9C%89%E5%8D%95%E4%B8%AA-agent-%E7%9A%84-k3s-%E9%9B%86%E7%BE%A4">具有单个 Agent 的 K3s 集群</a></li><li><a href="#k3s-agent">K3s Agent</a></li></ul></li><li><a href="#%E5%88%86%E6%9E%90">分析</a><ul><li><a href="#%E4%B8%BB%E8%A6%81%E8%B5%84%E6%BA%90%E4%BD%BF%E7%94%A8%E7%8E%87%E5%86%B3%E5%AE%9A%E5%9B%A0%E7%B4%A0">主要资源使用率决定因素</a></li><li><a href="#%E9%98%B2%E6%AD%A2-agent-%E5%92%8C%E5%B7%A5%E4%BD%9C%E8%B4%9F%E8%BD%BD%E5%B9%B2%E6%89%B0%E9%9B%86%E7%BE%A4%E6%95%B0%E6%8D%AE%E5%AD%98%E5%82%A8">防止 Agent 和工作负载干扰集群数据存储</a></li></ul></li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="资源测试范围">资源测试范围<a href="#资源测试范围" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>资源测试旨在解决以下问题：</p><ul><li>在单节点集群上，确定要为整个 K3s 服务器堆栈预留的最小 CPU、内存和 IOP 数量（假设集群上将部署真实的工作负载）。</li><li>在 Agent（Worker）节点上，确定要为 Kubernetes 和 K3s control plane 组件（kubelet 和 k3s agent）预留的最小 CPU、内存和 IOP 数量。</li></ul><h2 class="anchor anchorWithStickyNavbar_LWe7" id="用于基线测量的组件">用于基线测量的组件<a href="#用于基线测量的组件" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>测试的组件包括：</p><ul><li>启用所有打包组件的 K3s 1.26.5</li><li>Prometheus + Grafana 监控栈</li><li><a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">Kubernetes 示例 Nginx 部署</a></li></ul><p>这些是一个稳定系统的基线数据，只使用 K3s 打包的组件（Traefik Ingress、Klipper lb、本地路径存储），运行标准的监控堆栈（Prometheus 和 Grafana）和 Guestbook 示例应用程序。</p><p>包括 IOPS 在内的资源数据仅用于 Kubernetes 数据存储和 control plane，不包括系统级 management agent 或 logging、容器镜像管理或任何工作负载要求的开销。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="方法">方法<a href="#方法" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Prometheus v2.43.0 的独立实例可以通过 apt 安装的 <code>prometheus-node-exporter</code> 收集主机 CPU、内存和磁盘 IO 统计信息。</p><p><code>systemd-cgtop</code> 用于抽查 systemd cgroup 级别的 CPU 和内存利用率。<code>system.slice/k3s.service</code> 跟踪 K3s 和 containerd 的资源利用率，而单个 pod 位于 <code>kubepods</code> 层级下。</p><p>其他详细的 K3s 内存利用率数据是使用 server 和 agent 进程的集成 metrics-server 从 <code>kubectl top node</code> 收集的。</p><p>利用率数据来自于运行所述工作负载的节点上稳态运行的第 95 个百分位读数。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="环境">环境<a href="#环境" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><table><thead><tr><th>Arch</th><th>OS</th><th>System</th><th>CPU</th><th>RAM</th><th>Disk</th></tr></thead><tbody><tr><td>x86_64</td><td>Ubuntu 22.04</td><td>AWS c6id.xlarge</td><td>Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz</td><td>8 GB</td><td>NVME SSD</td></tr><tr><td>aarch64</td><td>Raspberry Pi OS 11</td><td>Raspberry Pi 4 Model B</td><td>BCM2711, 4 Core 1.50 GHz</td><td>8 GB</td><td>UHS-III SDXC</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="基准资源要求">基准资源要求<a href="#基准资源要求" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>本文介绍了测试结果，用于确定基本 K3s 操作的最低资源要求。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="具有工作负载的-k3s-server">具有工作负载的 K3s Server<a href="#具有工作负载的-k3s-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>这些是单节点集群的要求，其中 K3s Server 与<a href="https://kubernetes.io/docs/tasks/run-application/run-stateless-application-deployment/" target="_blank" rel="noopener noreferrer">简单工作负载</a>共享资源。</p><p>CPU 要求：</p><table><thead><tr><th>系统</th><th>CPU 核用量</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>核的 6%</td></tr><tr><td>Pi4B</td><td>核的 30%</td></tr></tbody></table><p>内存要求：</p><table><thead><tr><th>测试的数据存储</th><th>系统</th><th>内存</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1596M</td></tr><tr><td></td><td>Pi4B</td><td>1588M</td></tr><tr><td>嵌入式 etcd</td><td>Intel 8375C</td><td>1606M</td></tr><tr><td></td><td>Pi4B</td><td>1613M</td></tr></tbody></table><p>磁盘要求：</p><table><thead><tr><th>测试的数据存储</th><th>IOPS</th><th>KiB/sec</th><th>延迟</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>10</td><td>500</td><td>&lt; 10 ms</td></tr><tr><td>嵌入式 etcd</td><td>50</td><td>250</td><td>&lt; 5 ms</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="具有单个-agent-的-k3s-集群">具有单个 Agent 的 K3s 集群<a href="#具有单个-agent-的-k3s-集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>以下介绍具有 K3s Server 节点和 K3s Agent，但没有工作负载的 K3s 集群的基线要求。</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-server">K3s Server<a href="#k3s-server" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>CPU 要求：</p><table><thead><tr><th>系统</th><th>CPU 核用量</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>核的 5%</td></tr><tr><td>Pi4B</td><td>核的 25%</td></tr></tbody></table><p>内存要求：</p><table><thead><tr><th>测试的数据存储</th><th>系统</th><th>内存</th></tr></thead><tbody><tr><td>Kine/SQLite</td><td>Intel 8375C</td><td>1428M</td></tr><tr><td></td><td>Pi4B</td><td>1215M</td></tr><tr><td>嵌入式 etcd</td><td>Intel 8375C</td><td>1450M</td></tr><tr><td></td><td>Pi4B</td><td>1413M</td></tr></tbody></table><h3 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-agent">K3s Agent<a href="#k3s-agent" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要求：</p><table><thead><tr><th>系统</th><th>CPU 核用量</th><th>RAM</th></tr></thead><tbody><tr><td>Intel 8375C</td><td>核的 3%</td><td>275M</td></tr><tr><td>Pi4B</td><td>核的 5%</td><td>268M</td></tr></tbody></table><h2 class="anchor anchorWithStickyNavbar_LWe7" id="分析">分析<a href="#分析" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>本节包括了对 K3s Server 和 Agent 利用率产生最大影响的分析，以及如何保护集群数据存储免受 Agent 和工作负载的干扰。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="主要资源使用率决定因素">主要资源使用率决定因素<a href="#主要资源使用率决定因素" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>K3s Server 利用率数据主要取决于 Kubernetes 数据存储（kine 或 etcd）、API Server、Controller-Manager 和 Scheduler 控制循环的支持，以及影响系统状态更改的任何管理任务。如果对 Kubernetes control plane 添加额外负载（例如创建/修改/删除资源），利用率会出现临时峰值。如果使用大量使用 Kubernetes 数据存储的 Operator 或应用程序（例如 Rancher 或其他 Operator 类型的应用程序），server 的资源需求将增加。如果通过添加额外的节点或创建大量集群资源来扩展集群，server 的资源需求将增加。</p><p>K3s Agent 利用率数据主要取决于容器生命周期管理控制循环的支持。如果存在涉及管理镜像、配置存储或创建/销毁容器的操作，利用率会出现临时峰值。尤其是镜像拉取（通常与 CPU 和 IO 高度绑定），因为涉及将镜像内容解压缩到磁盘。如果可能，你可以将工作负载存储（pod 临时存储和卷）与 Agent 组件（/var/lib/rancher/k3s/agent）隔离，从而确保没有资源冲突。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="防止-agent-和工作负载干扰集群数据存储">防止 Agent 和工作负载干扰集群数据存储<a href="#防止-agent-和工作负载干扰集群数据存储" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>如果在 server 还托管了工作负载 pod 的环境中运行，你需要确保 agent 和工作负载 IOPS 不会干扰数据存储。</p><p>你可以将 server 组件 (/var/lib/rancher/k3s/server) 放置在与 agent 组件 (/var/lib/rancher/k3s/agent) 不同的存储介质，其中包括 containerd 镜像存储区。</p><p>工作负载存储（pod 临时存储和卷）也应该与数据存储区隔离。</p><p>如果未能满足数据存储吞吐量和延迟要求，control plane 的响应可能会延迟，control plane 也可能无法维持系统状态。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/reference/resource-profiling.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/reference/env-variables"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">环境变量</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/known-issues"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">已知问题</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#资源测试范围" class="table-of-contents__link toc-highlight">资源测试范围</a></li><li><a href="#用于基线测量的组件" class="table-of-contents__link toc-highlight">用于基线测量的组件</a></li><li><a href="#方法" class="table-of-contents__link toc-highlight">方法</a></li><li><a href="#环境" class="table-of-contents__link toc-highlight">环境</a></li><li><a href="#基准资源要求" class="table-of-contents__link toc-highlight">基准资源要求</a><ul><li><a href="#具有工作负载的-k3s-server" class="table-of-contents__link toc-highlight">具有工作负载的 K3s Server</a></li><li><a href="#具有单个-agent-的-k3s-集群" class="table-of-contents__link toc-highlight">具有单个 Agent 的 K3s 集群</a></li><li><a href="#k3s-agent" class="table-of-contents__link toc-highlight">K3s Agent</a></li></ul></li><li><a href="#分析" class="table-of-contents__link toc-highlight">分析</a><ul><li><a href="#主要资源使用率决定因素" class="table-of-contents__link toc-highlight">主要资源使用率决定因素</a></li><li><a href="#防止-agent-和工作负载干扰集群数据存储" class="table-of-contents__link toc-highlight">防止 Agent 和工作负载干扰集群数据存储</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/search-index.json b/zh/search-index.json
new file mode 100644
index 000000000..d5ee40c5d
--- /dev/null
+++ b/zh/search-index.json
@@ -0,0 +1 @@
+[{"documents":[{"i":820,"t":"K3s - 轻量级 Kubernetes","u":"/zh/","b":[]},{"i":826,"t":"高级选项和配置","u":"/zh/advanced","b":[]},{"i":885,"t":"架构","u":"/zh/architecture","b":[]},{"i":895,"t":"CLI 工具","u":"/zh/cli","b":["CLI 工具"]},{"i":897,"t":"k3s agent","u":"/zh/cli/agent","b":["CLI 工具"]},{"i":921,"t":"k3s certificate","u":"/zh/cli/certificate","b":["CLI 工具"]},{"i":936,"t":"k3s etcd-snapshot","u":"/zh/cli/etcd-snapshot","b":["CLI 工具"]},{"i":938,"t":"k3s secrets-encrypt","u":"/zh/cli/secrets-encrypt","b":["CLI 工具"]},{"i":948,"t":"k3s server","u":"/zh/cli/server","b":["CLI 工具"]},{"i":982,"t":"k3s token","u":"/zh/cli/token","b":["CLI 工具"]},{"i":999,"t":"集群访问","u":"/zh/cluster-access","b":[]},{"i":1003,"t":"集群数据存储","u":"/zh/datastore","b":["集群数据存储"]},{"i":1009,"t":"备份和恢复","u":"/zh/datastore/backup-restore","b":["集群数据存储"]},{"i":1017,"t":"cluster-loadbalancer","u":"/zh/datastore/cluster-loadbalancer","b":["集群数据存储"]},{"i":1018,"t":"高可用外部数据库","u":"/zh/datastore/ha","b":["集群数据存储"]},{"i":1032,"t":"高可用嵌入式 etcd","u":"/zh/datastore/ha-embedded","b":["集群数据存储"]},{"i":1036,"t":"常见问题","u":"/zh/faq","b":[]},{"i":1056,"t":"Helm","u":"/zh/helm","b":[]},{"i":1064,"t":"安装","u":"/zh/installation","b":["安装"]},{"i":1066,"t":"离线安装","u":"/zh/installation/airgap","b":["安装"]},{"i":1086,"t":"配置选项","u":"/zh/installation/configuration","b":["安装"]},{"i":1098,"t":"Kubernetes 仪表板","u":"/zh/installation/kube-dashboard","b":["安装"]},{"i":1112,"t":"网络选项","u":"/zh/installation/network-options","b":["安装"]},{"i":1132,"t":"管理封装的组件","u":"/zh/installation/packaged-components","b":["安装"]},{"i":1147,"t":"私有镜像仓库配置","u":"/zh/installation/private-registry","b":["安装"]},{"i":1161,"t":"要求","u":"/zh/installation/requirements","b":["安装"]},{"i":1185,"t":"管理 Server 角色","u":"/zh/installation/server-roles","b":["安装"]},{"i":1195,"t":"卸载 K3s","u":"/zh/installation/uninstall","b":["安装"]},{"i":1201,"t":"已知问题","u":"/zh/known-issues","b":[]},{"i":1211,"t":"网络","u":"/zh/networking","b":[]},{"i":1237,"t":"快速入门指南","u":"/zh/quick-start","b":[]},{"i":1241,"t":"参考","u":"/zh/reference","b":["参考"]},{"i":1243,"t":"环境变量","u":"/zh/reference/env-variables","b":["参考"]},{"i":1245,"t":"资源分析","u":"/zh/reference/resource-profiling","b":["参考"]},{"i":1269,"t":"安全","u":"/zh/security","b":["安全"]},{"i":1271,"t":"CIS Hardening Guide","u":"/zh/security/hardening-guide","b":["安全"]},{"i":1321,"t":"Secret 加密配置","u":"/zh/security/secrets-encryption","b":["安全"]},{"i":1325,"t":"卷和存储","u":"/zh/storage","b":[]},{"i":1341,"t":"升级","u":"/zh/upgrades","b":["升级"]},{"i":1346,"t":"自动升级","u":"/zh/upgrades/automated","b":["升级"]},{"i":1353,"t":"停止 K3s","u":"/zh/upgrades/killall","b":["升级"]},{"i":1355,"t":"手动升级","u":"/zh/upgrades/manual","b":["升级"]},{"i":1365,"t":"CIS Self Assessment Guide","u":"/zh/security/self-assessment","b":["安全"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/820",[0,1.112,1,0.198,2,2.08]],["t/826",[1,0.319]],["t/885",[1,0.319]],["t/895",[1,0.244,3,3.028]],["t/897",[0,1.374,4,3.028]],["t/921",[0,1.374,5,3.028]],["t/936",[0,1.112,6,2.08,7,2.451]],["t/938",[0,1.112,8,2.08,9,2.451]],["t/948",[0,1.374,10,2.57]],["t/982",[0,1.374,11,3.028]],["t/999",[1,0.319]],["t/1003",[1,0.319]],["t/1009",[1,0.319]],["t/1017",[12,3.028,13,3.028]],["t/1018",[1,0.319]],["t/1032",[1,0.244,6,2.57]],["t/1036",[1,0.319]],["t/1056",[14,3.959]],["t/1064",[1,0.319]],["t/1066",[1,0.319]],["t/1086",[1,0.319]],["t/1098",[1,0.244,2,2.57]],["t/1112",[1,0.319]],["t/1132",[1,0.319]],["t/1147",[1,0.319]],["t/1161",[1,0.319]],["t/1185",[1,0.297,10,2.08]],["t/1195",[0,1.374,1,0.244]],["t/1201",[1,0.319]],["t/1211",[1,0.319]],["t/1237",[1,0.319]],["t/1241",[1,0.319]],["t/1243",[1,0.319]],["t/1245",[1,0.319]],["t/1269",[1,0.319]],["t/1271",[15,2.08,16,2.451,17,2.08]],["t/1321",[1,0.244,8,2.57]],["t/1325",[1,0.319]],["t/1341",[1,0.319]],["t/1346",[1,0.319]],["t/1353",[0,1.374,1,0.244]],["t/1355",[1,0.319]],["t/1365",[15,1.748,17,1.748,18,2.059,19,2.059]]],"invertedIndex":[["",{"_index":1,"t":{"820":{"position":[[6,3]]},"826":{"position":[[0,7]]},"885":{"position":[[0,2]]},"895":{"position":[[4,2]]},"999":{"position":[[0,4]]},"1003":{"position":[[0,6]]},"1009":{"position":[[0,5]]},"1018":{"position":[[0,8]]},"1032":{"position":[[0,6]]},"1036":{"position":[[0,4]]},"1064":{"position":[[0,2]]},"1066":{"position":[[0,4]]},"1086":{"position":[[0,4]]},"1098":{"position":[[11,3]]},"1112":{"position":[[0,4]]},"1132":{"position":[[0,7]]},"1147":{"position":[[0,8]]},"1161":{"position":[[0,2]]},"1185":{"position":[[0,2],[10,2]]},"1195":{"position":[[0,2]]},"1201":{"position":[[0,4]]},"1211":{"position":[[0,2]]},"1237":{"position":[[0,6]]},"1241":{"position":[[0,2]]},"1243":{"position":[[0,4]]},"1245":{"position":[[0,4]]},"1269":{"position":[[0,2]]},"1321":{"position":[[7,4]]},"1325":{"position":[[0,4]]},"1341":{"position":[[0,2]]},"1346":{"position":[[0,4]]},"1353":{"position":[[0,2]]},"1355":{"position":[[0,4]]}}}],["agent",{"_index":4,"t":{"897":{"position":[[4,5]]}}}],["assess",{"_index":19,"t":{"1365":{"position":[[9,10]]}}}],["certif",{"_index":5,"t":{"921":{"position":[[4,11]]}}}],["ci",{"_index":15,"t":{"1271":{"position":[[0,3]]},"1365":{"position":[[0,3]]}}}],["cli",{"_index":3,"t":{"895":{"position":[[0,3]]}}}],["cluster",{"_index":12,"t":{"1017":{"position":[[0,7]]}}}],["encrypt",{"_index":9,"t":{"938":{"position":[[12,7]]}}}],["etcd",{"_index":6,"t":{"936":{"position":[[4,4]]},"1032":{"position":[[7,4]]}}}],["guid",{"_index":17,"t":{"1271":{"position":[[14,5]]},"1365":{"position":[[20,5]]}}}],["harden",{"_index":16,"t":{"1271":{"position":[[4,9]]}}}],["helm",{"_index":14,"t":{"1056":{"position":[[0,4]]}}}],["k3",{"_index":0,"t":{"820":{"position":[[0,3]]},"897":{"position":[[0,3]]},"921":{"position":[[0,3]]},"936":{"position":[[0,3]]},"938":{"position":[[0,3]]},"948":{"position":[[0,3]]},"982":{"position":[[0,3]]},"1195":{"position":[[3,3]]},"1353":{"position":[[3,3]]}}}],["kubernet",{"_index":2,"t":{"820":{"position":[[10,10]]},"1098":{"position":[[0,10]]}}}],["loadbalanc",{"_index":13,"t":{"1017":{"position":[[8,12]]}}}],["secret",{"_index":8,"t":{"938":{"position":[[4,7]]},"1321":{"position":[[0,6]]}}}],["self",{"_index":18,"t":{"1365":{"position":[[4,4]]}}}],["server",{"_index":10,"t":{"948":{"position":[[4,6]]},"1185":{"position":[[3,6]]}}}],["snapshot",{"_index":7,"t":{"936":{"position":[[9,8]]}}}],["token",{"_index":11,"t":{"982":{"position":[[4,5]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":822,"t":"什么是 K3s？","u":"/zh/","h":"","p":820},{"i":824,"t":"为什么叫 K3s?","u":"/zh/","h":"","p":820},{"i":828,"t":"证书管理","u":"/zh/advanced","h":"#证书管理","p":826},{"i":829,"t":"CA 证书","u":"/zh/advanced","h":"#ca-证书","p":826},{"i":831,"t":"客户端和服务器证书","u":"/zh/advanced","h":"#客户端和服务器证书","p":826},{"i":833,"t":"Token 管理","u":"/zh/advanced","h":"#token-管理","p":826},{"i":835,"t":"配置 HTTP 代理","u":"/zh/advanced","h":"#配置-http-代理","p":826},{"i":837,"t":"使用 Docker 作为容器运行时","u":"/zh/advanced","h":"#使用-docker-作为容器运行时","p":826},{"i":839,"t":"使用 etcdctl","u":"/zh/advanced","h":"#使用-etcdctl","p":826},{"i":841,"t":"配置 Containerd","u":"/zh/advanced","h":"#配置-containerd","p":826},{"i":843,"t":"NVIDIA 容器运行时支持","u":"/zh/advanced","h":"#nvidia-容器运行时支持","p":826},{"i":845,"t":"运行无 Agent 的 Server（实验性）","u":"/zh/advanced","h":"#运行无-agent-的-server实验性","p":826},{"i":847,"t":"使用 Rootless 模式运行 Server（实验性）","u":"/zh/advanced","h":"#使用-rootless-模式运行-server实验性","p":826},{"i":849,"t":"Rootless 模式的已知问题","u":"/zh/advanced","h":"#rootless-模式的已知问题","p":826},{"i":851,"t":"启动 Rootless Server","u":"/zh/advanced","h":"#启动-rootless-server","p":826},{"i":853,"t":"高级无根配置","u":"/zh/advanced","h":"#高级无根配置","p":826},{"i":855,"t":"Rootless 模式故障排除","u":"/zh/advanced","h":"#rootless-模式故障排除","p":826},{"i":857,"t":"节点标签和污点","u":"/zh/advanced","h":"#节点标签和污点","p":826},{"i":859,"t":"使用安装脚本启动服务","u":"/zh/advanced","h":"#使用安装脚本启动服务","p":826},{"i":861,"t":"其他操作系统准备","u":"/zh/advanced","h":"#其他操作系统准备","p":826},{"i":862,"t":"旧的 iptables 版本","u":"/zh/advanced","h":"#旧的-iptables-版本","p":826},{"i":864,"t":"Red Hat Enterprise Linux / CentOS","u":"/zh/advanced","h":"#red-hat-enterprise-linux--centos","p":826},{"i":866,"t":"Ubuntu","u":"/zh/advanced","h":"#ubuntu","p":826},{"i":868,"t":"Raspberry Pi","u":"/zh/advanced","h":"#raspberry-pi","p":826},{"i":870,"t":"在 Docker 中运行 K3s","u":"/zh/advanced","h":"#在-docker-中运行-k3s","p":826},{"i":872,"t":"SELinux 支持","u":"/zh/advanced","h":"#selinux-支持","p":826},{"i":874,"t":"启用 SELinux 强制执行","u":"/zh/advanced","h":"#启用-selinux-强制执行","p":826},{"i":876,"t":"启用 eStargz 的 Lazy Pulling（实验性）","u":"/zh/advanced","h":"#启用-estargz-的-lazy-pulling实验性","p":826},{"i":877,"t":"什么是 Lazy Pulling 和 eStargz？","u":"/zh/advanced","h":"#什么是-lazy-pulling-和-estargz","p":826},{"i":879,"t":"配置 K3s 进行 eStargz 的 Lazy Pulling","u":"/zh/advanced","h":"#配置-k3s-进行-estargz-的-lazy-pulling","p":826},{"i":881,"t":"其他日志来源","u":"/zh/advanced","h":"#其他日志来源","p":826},{"i":883,"t":"其他网络策略日志","u":"/zh/advanced","h":"#其他网络策略日志","p":826},{"i":887,"t":"带有嵌入式数据库的单服务器设置","u":"/zh/architecture","h":"#带有嵌入式数据库的单服务器设置","p":885},{"i":889,"t":"高可用 K3s","u":"/zh/architecture","h":"#高可用-k3s","p":885},{"i":891,"t":"Agent 节点的固定注册地址","u":"/zh/architecture","h":"#agent-节点的固定注册地址","p":885},{"i":893,"t":"Agent 节点注册的工作原理","u":"/zh/architecture","h":"#agent-节点注册的工作原理","p":885},{"i":899,"t":"Logging","u":"/zh/cli/agent","h":"#logging","p":897},{"i":901,"t":"集群选项","u":"/zh/cli/agent","h":"#集群选项","p":897},{"i":903,"t":"数据","u":"/zh/cli/agent","h":"#数据","p":897},{"i":905,"t":"节点","u":"/zh/cli/agent","h":"#节点","p":897},{"i":907,"t":"运行时","u":"/zh/cli/agent","h":"#运行时","p":897},{"i":909,"t":"网络","u":"/zh/cli/agent","h":"#网络","p":897},{"i":911,"t":"自定义标志","u":"/zh/cli/agent","h":"#自定义标志","p":897},{"i":913,"t":"实验功能","u":"/zh/cli/agent","h":"#实验功能","p":897},{"i":915,"t":"已弃用","u":"/zh/cli/agent","h":"#已弃用","p":897},{"i":917,"t":"Agent 的节点标签和污点","u":"/zh/cli/agent","h":"#agent-的节点标签和污点","p":897},{"i":919,"t":"K3s Agent CLI 帮助","u":"/zh/cli/agent","h":"#k3s-agent-cli-帮助","p":897},{"i":922,"t":"客户端和服务器证书","u":"/zh/cli/certificate","h":"#客户端和服务器证书","p":921},{"i":924,"t":"轮换客户端和服务器证书","u":"/zh/cli/certificate","h":"#轮换客户端和服务器证书","p":921},{"i":926,"t":"CA 证书","u":"/zh/cli/certificate","h":"#ca-证书","p":921},{"i":928,"t":"使用自定义 CA 证书","u":"/zh/cli/certificate","h":"#使用自定义-ca-证书","p":921},{"i":930,"t":"轮换自定义 CA 证书","u":"/zh/cli/certificate","h":"#轮换自定义-ca-证书","p":921},{"i":932,"t":"轮换自签名 CA 证书","u":"/zh/cli/certificate","h":"#轮换自签名-ca-证书","p":921},{"i":934,"t":"ServiceAccount Issuer 密钥轮换","u":"/zh/cli/certificate","h":"#serviceaccount-issuer-密钥轮换","p":921},{"i":940,"t":"Secret 加密工具","u":"/zh/cli/secrets-encrypt","h":"#secret-加密工具","p":938},{"i":942,"t":"加密密钥轮换","u":"/zh/cli/secrets-encrypt","h":"#加密密钥轮换","p":938},{"i":944,"t":"禁用/启用 Secret 加密","u":"/zh/cli/secrets-encrypt","h":"#禁用启用-secret-加密","p":938},{"i":946,"t":"Secret 加密状态","u":"/zh/cli/secrets-encrypt","h":"#secret-加密状态","p":938},{"i":950,"t":"关键配置值","u":"/zh/cli/server","h":"#关键配置值","p":948},{"i":952,"t":"常用选项","u":"/zh/cli/server","h":"#常用选项","p":948},{"i":953,"t":"数据库","u":"/zh/cli/server","h":"#数据库","p":948},{"i":955,"t":"集群选项","u":"/zh/cli/server","h":"#集群选项","p":948},{"i":957,"t":"管理 Kubeconfig 选项","u":"/zh/cli/server","h":"#管理-kubeconfig-选项","p":948},{"i":959,"t":"高级选项","u":"/zh/cli/server","h":"#高级选项","p":948},{"i":960,"t":"Logging","u":"/zh/cli/server","h":"#logging","p":948},{"i":962,"t":"Listeners","u":"/zh/cli/server","h":"#listeners","p":948},{"i":964,"t":"数据","u":"/zh/cli/server","h":"#数据","p":948},{"i":966,"t":"Secret 加密","u":"/zh/cli/server","h":"#secret-加密","p":948},{"i":968,"t":"网络","u":"/zh/cli/server","h":"#网络","p":948},{"i":970,"t":"存储类","u":"/zh/cli/server","h":"#存储类","p":948},{"i":972,"t":"Kubernetes 组件","u":"/zh/cli/server","h":"#kubernetes-组件","p":948},{"i":974,"t":"Kubernetes 进程的自定义标志","u":"/zh/cli/server","h":"#kubernetes-进程的自定义标志","p":948},{"i":976,"t":"实验选项","u":"/zh/cli/server","h":"#实验选项","p":948},{"i":978,"t":"已弃用选项","u":"/zh/cli/server","h":"#已弃用选项","p":948},{"i":980,"t":"K3s Server CLI 帮助","u":"/zh/cli/server","h":"","p":948},{"i":984,"t":"Token 格式","u":"/zh/cli/token","h":"#token-格式","p":982},{"i":986,"t":"Secure","u":"/zh/cli/token","h":"#secure","p":982},{"i":988,"t":"Short","u":"/zh/cli/token","h":"#short","p":982},{"i":990,"t":"Token 类型","u":"/zh/cli/token","h":"#token-类型","p":982},{"i":992,"t":"Server","u":"/zh/cli/token","h":"#server","p":982},{"i":994,"t":"Agent","u":"/zh/cli/token","h":"#agent","p":982},{"i":996,"t":"Bootstrap","u":"/zh/cli/token","h":"#bootstrap","p":982},{"i":1001,"t":"使用 kubectl 从外部访问集群","u":"/zh/cluster-access","h":"#使用-kubectl-从外部访问集群","p":999},{"i":1005,"t":"外部数据存储配置参数","u":"/zh/datastore","h":"#外部数据存储配置参数","p":1003},{"i":1007,"t":"数据存储端点格式和功能","u":"/zh/datastore","h":"#数据存储端点格式和功能","p":1003},{"i":1011,"t":"使用 SQLite 进行备份和恢复","u":"/zh/datastore/backup-restore","h":"#使用-sqlite-进行备份和恢复","p":1009},{"i":1013,"t":"使用外部数据存储进行备份和恢复","u":"/zh/datastore/backup-restore","h":"#使用外部数据存储进行备份和恢复","p":1009},{"i":1015,"t":"使用嵌入式 etcd 数据存储进行备份和恢复","u":"/zh/datastore/backup-restore","h":"#使用嵌入式-etcd-数据存储进行备份和恢复","p":1009},{"i":1020,"t":"安装概要","u":"/zh/datastore/ha","h":"#安装概要","p":1018},{"i":1022,"t":"1. 创建外部数据存储","u":"/zh/datastore/ha","h":"#1-创建外部数据存储","p":1018},{"i":1024,"t":"2. 启动 Server 节点","u":"/zh/datastore/ha","h":"#2-启动-server-节点","p":1018},{"i":1026,"t":"3. 可选：加入其它 Server 节点","u":"/zh/datastore/ha","h":"#3-可选加入其它-server-节点","p":1018},{"i":1028,"t":"4. 可选：加入 Agent 节点","u":"/zh/datastore/ha","h":"#4-可选加入-agent-节点","p":1018},{"i":1030,"t":"5. 可选：配置固定的注册地址","u":"/zh/datastore/ha","h":"#5-可选配置固定的注册地址","p":1018},{"i":1034,"t":"现有的单节点集群","u":"/zh/datastore/ha-embedded","h":"#现有的单节点集群","p":1032},{"i":1038,"t":"K3s 是 Kubernetes 的替代品吗？","u":"/zh/faq","h":"#k3s-是-kubernetes-的替代品吗","p":1036},{"i":1040,"t":"如何使用自己的 Ingress 代替 Traefik？","u":"/zh/faq","h":"#如何使用自己的-ingress-代替-traefik","p":1036},{"i":1042,"t":"K3s 支持 Windows 吗？","u":"/zh/faq","h":"#k3s-支持-windows-吗","p":1036},{"i":1044,"t":"如何通过源码构建？","u":"/zh/faq","h":"#如何通过源码构建","p":1036},{"i":1046,"t":"K3s 日志在哪里？","u":"/zh/faq","h":"#k3s-日志在哪里","p":1036},{"i":1048,"t":"可以在 Docker 中运行 K3s 吗？","u":"/zh/faq","h":"#可以在-docker-中运行-k3s-吗","p":1036},{"i":1050,"t":"K3s Server 和 Agent Token 有什么区别？","u":"/zh/faq","h":"#k3s-server-和-agent-token-有什么区别","p":1036},{"i":1052,"t":"不同版本的 K3s 兼容性如何？","u":"/zh/faq","h":"#不同版本的-k3s-兼容性如何","p":1036},{"i":1054,"t":"如果我遇到问题，可以在哪里获得帮助？","u":"/zh/faq","h":"#如果我遇到问题可以在哪里获得帮助","p":1036},{"i":1058,"t":"使用 Helm Controller","u":"/zh/helm","h":"#使用-helm-controller","p":1056},{"i":1060,"t":"使用 HelmChartConfig 自定义打包组件","u":"/zh/helm","h":"#使用-helmchartconfig-自定义打包组件","p":1056},{"i":1062,"t":"从 Helm v2 迁移","u":"/zh/helm","h":"#从-helm-v2-迁移","p":1056},{"i":1068,"t":"私有镜像仓库","u":"/zh/installation/airgap","h":"#私有镜像仓库","p":1066},{"i":1070,"t":"创建镜像仓库 YAML","u":"/zh/installation/airgap","h":"#创建镜像仓库-yaml","p":1066},{"i":1072,"t":"手动部署镜像","u":"/zh/installation/airgap","h":"#手动部署镜像","p":1066},{"i":1074,"t":"准备镜像目录和 K3s 二进制文件","u":"/zh/installation/airgap","h":"#准备镜像目录和-k3s-二进制文件","p":1066},{"i":1076,"t":"安装 K3s","u":"/zh/installation/airgap","h":"#安装-k3s","p":1066},{"i":1077,"t":"先决条件","u":"/zh/installation/airgap","h":"#先决条件","p":1066},{"i":1079,"t":"在离线环境中安装 K3s","u":"/zh/installation/airgap","h":"#在离线环境中安装-k3s","p":1066},{"i":1081,"t":"升级","u":"/zh/installation/airgap","h":"#升级","p":1066},{"i":1082,"t":"安装脚本方法","u":"/zh/installation/airgap","h":"#安装脚本方法","p":1066},{"i":1084,"t":"自动升级","u":"/zh/installation/airgap","h":"#自动升级","p":1066},{"i":1088,"t":"使用安装脚本的选项","u":"/zh/installation/configuration","h":"#使用安装脚本的选项","p":1086},{"i":1090,"t":"二进制配置","u":"/zh/installation/configuration","h":"#二进制配置","p":1086},{"i":1092,"t":"配置文件","u":"/zh/installation/configuration","h":"#配置文件","p":1086},{"i":1094,"t":"多个配置文件","u":"/zh/installation/configuration","h":"#多个配置文件","p":1086},{"i":1096,"t":"组合使用","u":"/zh/installation/configuration","h":"#组合使用","p":1086},{"i":1100,"t":"部署 Kubernetes 仪表板","u":"/zh/installation/kube-dashboard","h":"#部署-kubernetes-仪表板","p":1098},{"i":1102,"t":"仪表板 RBAC 配置","u":"/zh/installation/kube-dashboard","h":"#仪表板-rbac-配置","p":1098},{"i":1104,"t":"获取持有者令牌","u":"/zh/installation/kube-dashboard","h":"#获取持有者令牌","p":1098},{"i":1106,"t":"本地访问仪表板","u":"/zh/installation/kube-dashboard","h":"#本地访问仪表板","p":1098},{"i":1108,"t":"升级仪表板","u":"/zh/installation/kube-dashboard","h":"#升级仪表板","p":1098},{"i":1110,"t":"删除仪表板和 admin-user 配置","u":"/zh/installation/kube-dashboard","h":"#删除仪表板和-admin-user-配置","p":1098},{"i":1114,"t":"Flannel 选项","u":"/zh/installation/network-options","h":"#flannel-选项","p":1112},{"i":1116,"t":"从 wireguard 或 ipsec 迁移到 wireguard-native","u":"/zh/installation/network-options","h":"#从-wireguard-或-ipsec-迁移到-wireguard-native","p":1112},{"i":1118,"t":"自定义 CNI","u":"/zh/installation/network-options","h":"#自定义-cni","p":1112},{"i":1120,"t":"Control Plane Egress 选择器配置","u":"/zh/installation/network-options","h":"#control-plane-egress-选择器配置","p":1112},{"i":1122,"t":"双栈 (IPv4 + IPv6) 网络","u":"/zh/installation/network-options","h":"#双栈-ipv4--ipv6-网络","p":1112},{"i":1124,"t":"单栈 IPv6 网络","u":"/zh/installation/network-options","h":"#单栈-ipv6-网络","p":1112},{"i":1126,"t":"分布式混合或多云集群","u":"/zh/installation/network-options","h":"#分布式混合或多云集群","p":1112},{"i":1128,"t":"嵌入式 k3s 多云解决方案","u":"/zh/installation/network-options","h":"#嵌入式-k3s-多云解决方案","p":1112},{"i":1130,"t":"集成 Tailscale VPN 提供程序（实验性）","u":"/zh/installation/network-options","h":"#集成-tailscale-vpn-提供程序实验性","p":1112},{"i":1133,"t":"自动部署清单（AddOn）","u":"/zh/installation/packaged-components","h":"#自动部署清单addon","p":1132},{"i":1135,"t":"封装的组件","u":"/zh/installation/packaged-components","h":"#封装的组件","p":1132},{"i":1137,"t":"用户 AddOn","u":"/zh/installation/packaged-components","h":"#用户-addon","p":1132},{"i":1139,"t":"禁用清单","u":"/zh/installation/packaged-components","h":"#禁用清单","p":1132},{"i":1141,"t":"使用 --disable 标志","u":"/zh/installation/packaged-components","h":"#使用---disable-标志","p":1132},{"i":1143,"t":"使用 .skip 文件","u":"/zh/installation/packaged-components","h":"#使用-skip-文件","p":1132},{"i":1145,"t":"Helm AddOn","u":"/zh/installation/packaged-components","h":"#helm-addon","p":1132},{"i":1149,"t":"镜像仓库配置文件","u":"/zh/installation/private-registry","h":"#镜像仓库配置文件","p":1147},{"i":1151,"t":"Mirrors","u":"/zh/installation/private-registry","h":"#mirrors","p":1147},{"i":1153,"t":"Configs","u":"/zh/installation/private-registry","h":"#configs","p":1147},{"i":1155,"t":"使用 TLS","u":"/zh/installation/private-registry","h":"#使用-tls","p":1147},{"i":1157,"t":"没有 TLS","u":"/zh/installation/private-registry","h":"#没有-tls","p":1147},{"i":1159,"t":"将镜像添加到私有镜像仓库","u":"/zh/installation/private-registry","h":"#将镜像添加到私有镜像仓库","p":1147},{"i":1163,"t":"先决条件","u":"/zh/installation/requirements","h":"#先决条件","p":1161},{"i":1165,"t":"架构","u":"/zh/installation/requirements","h":"#架构","p":1161},{"i":1167,"t":"操作系统","u":"/zh/installation/requirements","h":"#操作系统","p":1161},{"i":1169,"t":"硬件","u":"/zh/installation/requirements","h":"#硬件","p":1161},{"i":1171,"t":"网络","u":"/zh/installation/requirements","h":"#网络","p":1161},{"i":1173,"t":"K3s Server 节点的入站规则","u":"/zh/installation/requirements","h":"#k3s-server-节点的入站规则","p":1161},{"i":1175,"t":"大型集群","u":"/zh/installation/requirements","h":"#大型集群","p":1161},{"i":1177,"t":"CPU 和内存","u":"/zh/installation/requirements","h":"#cpu-和内存","p":1161},{"i":1179,"t":"磁盘","u":"/zh/installation/requirements","h":"#磁盘-1","p":1161},{"i":1181,"t":"网络","u":"/zh/installation/requirements","h":"#网络-1","p":1161},{"i":1183,"t":"数据库","u":"/zh/installation/requirements","h":"#数据库","p":1161},{"i":1187,"t":"专用 etcd 节点","u":"/zh/installation/server-roles","h":"#专用-etcd-节点","p":1185},{"i":1189,"t":"专用 control-plane 节点","u":"/zh/installation/server-roles","h":"#专用-control-plane-节点","p":1185},{"i":1191,"t":"将角色添加到现有 server","u":"/zh/installation/server-roles","h":"#将角色添加到现有-server","p":1185},{"i":1193,"t":"配置文件语法","u":"/zh/installation/server-roles","h":"#配置文件语法","p":1185},{"i":1197,"t":"卸载 Server","u":"/zh/installation/uninstall","h":"#卸载-server","p":1195},{"i":1199,"t":"卸载 Agent","u":"/zh/installation/uninstall","h":"#卸载-agent","p":1195},{"i":1203,"t":"Snap Docker","u":"/zh/known-issues","h":"#snap-docker","p":1201},{"i":1205,"t":"Iptables","u":"/zh/known-issues","h":"#iptables","p":1201},{"i":1207,"t":"Rootless 模式","u":"/zh/known-issues","h":"#rootless-模式","p":1201},{"i":1209,"t":"将强化集群从 v1.24.x 升级到 v1.25.x","u":"/zh/known-issues","h":"#hardened-125","p":1201},{"i":1213,"t":"CoreDNS","u":"/zh/networking","h":"#coredns","p":1211},{"i":1215,"t":"Traefik Ingress Controller","u":"/zh/networking","h":"#traefik-ingress-controller","p":1211},{"i":1217,"t":"网络策略控制器","u":"/zh/networking","h":"#网络策略控制器","p":1211},{"i":1219,"t":"Service Load Balancer","u":"/zh/networking","h":"#service-load-balancer","p":1211},{"i":1221,"t":"ServiceLB 的工作原理","u":"/zh/networking","h":"#servicelb-的工作原理","p":1211},{"i":1223,"t":"用法","u":"/zh/networking","h":"#用法","p":1211},{"i":1225,"t":"控制 ServiceLB 节点选择","u":"/zh/networking","h":"#控制-servicelb-节点选择","p":1211},{"i":1227,"t":"创建 ServiceLB 节点池","u":"/zh/networking","h":"#创建-servicelb-节点池","p":1211},{"i":1229,"t":"禁用 ServiceLB","u":"/zh/networking","h":"#禁用-servicelb","p":1211},{"i":1231,"t":"部署外部 Cloud Controller Manager","u":"/zh/networking","h":"#部署外部-cloud-controller-manager","p":1211},{"i":1233,"t":"没有主机名的节点","u":"/zh/networking","h":"#没有主机名的节点","p":1211},{"i":1235,"t":"多集群 CIDR（实验性）","u":"/zh/networking","h":"#多集群-cidr实验性","p":1211},{"i":1239,"t":"安装脚本","u":"/zh/quick-start","h":"#安装脚本","p":1237},{"i":1247,"t":"资源测试范围","u":"/zh/reference/resource-profiling","h":"#资源测试范围","p":1245},{"i":1249,"t":"用于基线测量的组件","u":"/zh/reference/resource-profiling","h":"#用于基线测量的组件","p":1245},{"i":1251,"t":"方法","u":"/zh/reference/resource-profiling","h":"#方法","p":1245},{"i":1253,"t":"环境","u":"/zh/reference/resource-profiling","h":"#环境","p":1245},{"i":1255,"t":"基准资源要求","u":"/zh/reference/resource-profiling","h":"#基准资源要求","p":1245},{"i":1257,"t":"具有工作负载的 K3s Server","u":"/zh/reference/resource-profiling","h":"#具有工作负载的-k3s-server","p":1245},{"i":1259,"t":"具有单个 Agent 的 K3s 集群","u":"/zh/reference/resource-profiling","h":"#具有单个-agent-的-k3s-集群","p":1245},{"i":1261,"t":"K3s Agent","u":"/zh/reference/resource-profiling","h":"#k3s-agent","p":1245},{"i":1263,"t":"分析","u":"/zh/reference/resource-profiling","h":"#分析","p":1245},{"i":1265,"t":"主要资源使用率决定因素","u":"/zh/reference/resource-profiling","h":"#主要资源使用率决定因素","p":1245},{"i":1267,"t":"防止 Agent 和工作负载干扰集群数据存储","u":"/zh/reference/resource-profiling","h":"#防止-agent-和工作负载干扰集群数据存储","p":1245},{"i":1273,"t":"Host-level Requirements","u":"/zh/security/hardening-guide","h":"#host-level-requirements","p":1271},{"i":1275,"t":"Ensure protect-kernel-defaults is set","u":"/zh/security/hardening-guide","h":"#ensure-protect-kernel-defaults-is-set","p":1271},{"i":1277,"t":"Kubernetes Runtime Requirements","u":"/zh/security/hardening-guide","h":"#kubernetes-runtime-requirements","p":1271},{"i":1279,"t":"Pod Security","u":"/zh/security/hardening-guide","h":"#pod-security","p":1271},{"i":1281,"t":"NetworkPolicies","u":"/zh/security/hardening-guide","h":"#networkpolicies","p":1271},{"i":1283,"t":"API Server audit configuration","u":"/zh/security/hardening-guide","h":"#api-server-audit-configuration","p":1271},{"i":1285,"t":"Configuration for Kubernetes Components","u":"/zh/security/hardening-guide","h":"#configuration-for-kubernetes-components","p":1271},{"i":1287,"t":"Control Plane Execution and Arguments","u":"/zh/security/hardening-guide","h":"#control-plane-execution-and-arguments","p":1271},{"i":1289,"t":"Known Issues","u":"/zh/security/hardening-guide","h":"#known-issues","p":1271},{"i":1291,"t":"Control 1.2.15","u":"/zh/security/hardening-guide","h":"#control-1215","p":1271},{"i":1293,"t":"Control 1.2.16","u":"/zh/security/hardening-guide","h":"#control-1216","p":1271},{"i":1295,"t":"Control 1.2.22","u":"/zh/security/hardening-guide","h":"#control-1222","p":1271},{"i":1297,"t":"Control 1.2.23","u":"/zh/security/hardening-guide","h":"#control-1223","p":1271},{"i":1299,"t":"Control 1.2.24","u":"/zh/security/hardening-guide","h":"#control-1224","p":1271},{"i":1301,"t":"Control 1.2.25","u":"/zh/security/hardening-guide","h":"#control-1225","p":1271},{"i":1303,"t":"Control 1.2.26","u":"/zh/security/hardening-guide","h":"#control-1226","p":1271},{"i":1305,"t":"Control 1.2.27","u":"/zh/security/hardening-guide","h":"#control-1227","p":1271},{"i":1307,"t":"Control 1.2.33","u":"/zh/security/hardening-guide","h":"#control-1233","p":1271},{"i":1309,"t":"Control 1.2.34","u":"/zh/security/hardening-guide","h":"#control-1234","p":1271},{"i":1311,"t":"Control 1.3.1","u":"/zh/security/hardening-guide","h":"#control-131","p":1271},{"i":1313,"t":"Control 3.2.1","u":"/zh/security/hardening-guide","h":"#control-321","p":1271},{"i":1315,"t":"Control 4.2.7","u":"/zh/security/hardening-guide","h":"#control-427","p":1271},{"i":1317,"t":"Control 5.1.5","u":"/zh/security/hardening-guide","h":"#control-515","p":1271},{"i":1319,"t":"Conclusion","u":"/zh/security/hardening-guide","h":"#conclusion","p":1271},{"i":1323,"t":"Secret 加密工具","u":"/zh/security/secrets-encryption","h":"#secret-加密工具","p":1321},{"i":1327,"t":"K3s 存储有什么不同？","u":"/zh/storage","h":"#k3s-存储有什么不同","p":1325},{"i":1329,"t":"设置本地存储提供程序","u":"/zh/storage","h":"#设置本地存储提供程序","p":1325},{"i":1331,"t":"pvc.yaml","u":"/zh/storage","h":"#pvcyaml","p":1325},{"i":1333,"t":"pod.yaml","u":"/zh/storage","h":"#podyaml","p":1325},{"i":1335,"t":"设置 Longhorn","u":"/zh/storage","h":"#设置-longhorn","p":1325},{"i":1337,"t":"pvc.yaml","u":"/zh/storage","h":"#pvcyaml-1","p":1325},{"i":1339,"t":"pod.yaml","u":"/zh/storage","h":"#podyaml-1","p":1325},{"i":1342,"t":"升级 K3s 集群","u":"/zh/upgrades","h":"#升级-k3s-集群","p":1341},{"i":1344,"t":"特定版本的注意事项","u":"/zh/upgrades","h":"#特定版本的注意事项","p":1341},{"i":1347,"t":"Overview","u":"/zh/upgrades/automated","h":"#overview","p":1346},{"i":1349,"t":"安装 system-upgrade-controller","u":"/zh/upgrades/automated","h":"#安装-system-upgrade-controller","p":1346},{"i":1351,"t":"配置计划","u":"/zh/upgrades/automated","h":"#配置计划","p":1346},{"i":1357,"t":"版本 Channels","u":"/zh/upgrades/manual","h":"#版本-channels","p":1355},{"i":1359,"t":"使用安装脚本升级 K3s","u":"/zh/upgrades/manual","h":"#使用安装脚本升级-k3s","p":1355},{"i":1361,"t":"使用二进制文件手动升级 K3s","u":"/zh/upgrades/manual","h":"#使用二进制文件手动升级-k3s","p":1355},{"i":1363,"t":"重启 K3s","u":"/zh/upgrades/manual","h":"#重启-k3s","p":1355},{"i":1367,"t":"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24","u":"/zh/security/self-assessment","h":"#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124","p":1365},{"i":1369,"t":"Controls","u":"/zh/security/self-assessment","h":"#controls","p":1365},{"i":1370,"t":"1.1 Control Plane Node Configuration Files","u":"/zh/security/self-assessment","h":"#11-control-plane-node-configuration-files","p":1365},{"i":1371,"t":"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1373,"t":"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1375,"t":"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1377,"t":"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1379,"t":"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1381,"t":"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1383,"t":"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1385,"t":"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1387,"t":"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1389,"t":"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)","u":"/zh/security/self-assessment","h":"#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual","p":1365},{"i":1391,"t":"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated","p":1365},{"i":1393,"t":"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)","u":"/zh/security/self-assessment","h":"#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated","p":1365},{"i":1395,"t":"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated","p":1365},{"i":1397,"t":"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1399,"t":"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1401,"t":"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1403,"t":"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1405,"t":"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1407,"t":"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1409,"t":"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1411,"t":"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)","u":"/zh/security/self-assessment","h":"#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual","p":1365},{"i":1413,"t":"1.2 API Server","u":"/zh/security/self-assessment","h":"#12-api-server","p":1365},{"i":1414,"t":"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)","u":"/zh/security/self-assessment","h":"#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual","p":1365},{"i":1416,"t":"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)","u":"/zh/security/self-assessment","h":"#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated","p":1365},{"i":1418,"t":"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)","u":"/zh/security/self-assessment","h":"#123-ensure-that-the---denyserviceexternalips-is-not-set-automated","p":1365},{"i":1420,"t":"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated","p":1365},{"i":1422,"t":"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated","p":1365},{"i":1424,"t":"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated","p":1365},{"i":1426,"t":"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/zh/security/self-assessment","h":"#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":1365},{"i":1428,"t":"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)","u":"/zh/security/self-assessment","h":"#128-ensure-that-the---authorization-mode-argument-includes-node-automated","p":1365},{"i":1430,"t":"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)","u":"/zh/security/self-assessment","h":"#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated","p":1365},{"i":1432,"t":"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)","u":"/zh/security/self-assessment","h":"#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual","p":1365},{"i":1434,"t":"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)","u":"/zh/security/self-assessment","h":"#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated","p":1365},{"i":1436,"t":"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)","u":"/zh/security/self-assessment","h":"#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual","p":1365},{"i":1438,"t":"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)","u":"/zh/security/self-assessment","h":"#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual","p":1365},{"i":1440,"t":"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)","u":"/zh/security/self-assessment","h":"#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated","p":1365},{"i":1442,"t":"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)","u":"/zh/security/self-assessment","h":"#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated","p":1365},{"i":1444,"t":"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)","u":"/zh/security/self-assessment","h":"#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated","p":1365},{"i":1446,"t":"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)","u":"/zh/security/self-assessment","h":"#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated","p":1365},{"i":1448,"t":"1.2.18 Ensure that the --profiling argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#1218-ensure-that-the---profiling-argument-is-set-to-false-automated","p":1365},{"i":1450,"t":"1.2.19 Ensure that the --audit-log-path argument is set (Automated)","u":"/zh/security/self-assessment","h":"#1219-ensure-that-the---audit-log-path-argument-is-set-automated","p":1365},{"i":1452,"t":"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated","p":1365},{"i":1454,"t":"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated","p":1365},{"i":1456,"t":"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated","p":1365},{"i":1458,"t":"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated","p":1365},{"i":1460,"t":"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated","p":1365},{"i":1462,"t":"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated","p":1365},{"i":1464,"t":"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated","p":1365},{"i":1466,"t":"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1468,"t":"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated","p":1365},{"i":1470,"t":"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)","u":"/zh/security/self-assessment","h":"#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual","p":1365},{"i":1472,"t":"1.2.31 Ensure that encryption providers are appropriately configured (Manual)","u":"/zh/security/self-assessment","h":"#1231-ensure-that-encryption-providers-are-appropriately-configured-manual","p":1365},{"i":1474,"t":"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)","u":"/zh/security/self-assessment","h":"#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual","p":1365},{"i":1476,"t":"1.3 Controller Manager","u":"/zh/security/self-assessment","h":"#13-controller-manager","p":1365},{"i":1477,"t":"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)","u":"/zh/security/self-assessment","h":"#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual","p":1365},{"i":1479,"t":"1.3.2 Ensure that the --profiling argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#132-ensure-that-the---profiling-argument-is-set-to-false-automated","p":1365},{"i":1481,"t":"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated","p":1365},{"i":1483,"t":"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1485,"t":"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1487,"t":"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated","p":1365},{"i":1489,"t":"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/zh/security/self-assessment","h":"#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":1365},{"i":1491,"t":"1.4 Scheduler","u":"/zh/security/self-assessment","h":"#14-scheduler","p":1365},{"i":1492,"t":"1.4.1 Ensure that the --profiling argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#141-ensure-that-the---profiling-argument-is-set-to-false-automated","p":1365},{"i":1494,"t":"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/zh/security/self-assessment","h":"#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":1365},{"i":1496,"t":"2 Etcd Node Configuration","u":"/zh/security/self-assessment","h":"#2-etcd-node-configuration","p":1365},{"i":1497,"t":"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated","p":1365},{"i":1499,"t":"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated","p":1365},{"i":1501,"t":"2.3 Ensure that the --auto-tls argument is not set to true (Automated)","u":"/zh/security/self-assessment","h":"#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated","p":1365},{"i":1503,"t":"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated","p":1365},{"i":1505,"t":"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated","p":1365},{"i":1507,"t":"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)","u":"/zh/security/self-assessment","h":"#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated","p":1365},{"i":1509,"t":"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)","u":"/zh/security/self-assessment","h":"#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual","p":1365},{"i":1511,"t":"3.1 Authentication and Authorization","u":"/zh/security/self-assessment","h":"#31-authentication-and-authorization","p":1365},{"i":1512,"t":"3.1.1 Client certificate authentication should not be used for users (Manual)","u":"/zh/security/self-assessment","h":"#311-client-certificate-authentication-should-not-be-used-for-users-manual","p":1365},{"i":1514,"t":"3.2 Logging","u":"/zh/security/self-assessment","h":"#32-logging","p":1365},{"i":1515,"t":"3.2.1 Ensure that a minimal audit policy is created (Manual)","u":"/zh/security/self-assessment","h":"#321-ensure-that-a-minimal-audit-policy-is-created-manual","p":1365},{"i":1517,"t":"3.2.2 Ensure that the audit policy covers key security concerns (Manual)","u":"/zh/security/self-assessment","h":"#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual","p":1365},{"i":1519,"t":"4.1 Worker Node Configuration Files","u":"/zh/security/self-assessment","h":"#41-worker-node-configuration-files","p":1365},{"i":1520,"t":"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1522,"t":"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1524,"t":"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1526,"t":"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)","u":"/zh/security/self-assessment","h":"#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual","p":1365},{"i":1528,"t":"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1530,"t":"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1532,"t":"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1534,"t":"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)","u":"/zh/security/self-assessment","h":"#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual","p":1365},{"i":1536,"t":"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated","p":1365},{"i":1538,"t":"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1540,"t":"4.2 Kubelet","u":"/zh/security/self-assessment","h":"#42-kubelet","p":1365},{"i":1541,"t":"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated","p":1365},{"i":1543,"t":"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/zh/security/self-assessment","h":"#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":1365},{"i":1545,"t":"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1547,"t":"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)","u":"/zh/security/self-assessment","h":"#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual","p":1365},{"i":1549,"t":"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)","u":"/zh/security/self-assessment","h":"#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual","p":1365},{"i":1551,"t":"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated","p":1365},{"i":1553,"t":"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated","p":1365},{"i":1555,"t":"4.2.8 Ensure that the --hostname-override argument is not set (Manual)","u":"/zh/security/self-assessment","h":"#428-ensure-that-the---hostname-override-argument-is-not-set-manual","p":1365},{"i":1557,"t":"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)","u":"/zh/security/self-assessment","h":"#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual","p":1365},{"i":1559,"t":"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)","u":"/zh/security/self-assessment","h":"#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual","p":1365},{"i":1561,"t":"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)","u":"/zh/security/self-assessment","h":"#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated","p":1365},{"i":1563,"t":"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)","u":"/zh/security/self-assessment","h":"#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual","p":1365},{"i":1565,"t":"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)","u":"/zh/security/self-assessment","h":"#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual","p":1365},{"i":1567,"t":"5.1 RBAC and Service Accounts","u":"/zh/security/self-assessment","h":"#51-rbac-and-service-accounts","p":1365},{"i":1568,"t":"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)","u":"/zh/security/self-assessment","h":"#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual","p":1365},{"i":1570,"t":"5.1.2 Minimize access to secrets (Manual)","u":"/zh/security/self-assessment","h":"#512-minimize-access-to-secrets-manual","p":1365},{"i":1572,"t":"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)","u":"/zh/security/self-assessment","h":"#513-minimize-wildcard-use-in-roles-and-clusterroles-manual","p":1365},{"i":1574,"t":"5.1.4 Minimize access to create pods (Manual)","u":"/zh/security/self-assessment","h":"#514-minimize-access-to-create-pods-manual","p":1365},{"i":1576,"t":"5.1.5 Ensure that default service accounts are not actively used. (Manual)","u":"/zh/security/self-assessment","h":"#515-ensure-that-default-service-accounts-are-not-actively-used-manual","p":1365},{"i":1578,"t":"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)","u":"/zh/security/self-assessment","h":"#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual","p":1365},{"i":1580,"t":"5.1.7 Avoid use of system:masters group (Manual)","u":"/zh/security/self-assessment","h":"#517-avoid-use-of-systemmasters-group-manual","p":1365},{"i":1582,"t":"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)","u":"/zh/security/self-assessment","h":"#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual","p":1365},{"i":1584,"t":"5.2 Pod Security Standards","u":"/zh/security/self-assessment","h":"#52-pod-security-standards","p":1365},{"i":1585,"t":"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)","u":"/zh/security/self-assessment","h":"#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual","p":1365},{"i":1587,"t":"5.2.2 Minimize the admission of privileged containers (Automated)","u":"/zh/security/self-assessment","h":"#522-minimize-the-admission-of-privileged-containers-automated","p":1365},{"i":1589,"t":"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)","u":"/zh/security/self-assessment","h":"#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated","p":1365},{"i":1591,"t":"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)","u":"/zh/security/self-assessment","h":"#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated","p":1365},{"i":1593,"t":"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)","u":"/zh/security/self-assessment","h":"#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated","p":1365},{"i":1595,"t":"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)","u":"/zh/security/self-assessment","h":"#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated","p":1365},{"i":1597,"t":"5.2.7 Minimize the admission of root containers (Automated)","u":"/zh/security/self-assessment","h":"#527-minimize-the-admission-of-root-containers-automated","p":1365},{"i":1599,"t":"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)","u":"/zh/security/self-assessment","h":"#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated","p":1365},{"i":1601,"t":"5.2.9 Minimize the admission of containers with added capabilities (Automated)","u":"/zh/security/self-assessment","h":"#529-minimize-the-admission-of-containers-with-added-capabilities-automated","p":1365},{"i":1603,"t":"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)","u":"/zh/security/self-assessment","h":"#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual","p":1365},{"i":1605,"t":"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)","u":"/zh/security/self-assessment","h":"#5211-minimize-the-admission-of-windows-hostprocess-containers-manual","p":1365},{"i":1607,"t":"5.2.12 Minimize the admission of HostPath volumes (Manual)","u":"/zh/security/self-assessment","h":"#5212-minimize-the-admission-of-hostpath-volumes-manual","p":1365},{"i":1609,"t":"5.2.13 Minimize the admission of containers which use HostPorts (Manual)","u":"/zh/security/self-assessment","h":"#5213-minimize-the-admission-of-containers-which-use-hostports-manual","p":1365},{"i":1611,"t":"5.3 Network Policies and CNI","u":"/zh/security/self-assessment","h":"#53-network-policies-and-cni","p":1365},{"i":1612,"t":"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)","u":"/zh/security/self-assessment","h":"#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual","p":1365},{"i":1614,"t":"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)","u":"/zh/security/self-assessment","h":"#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual","p":1365},{"i":1616,"t":"5.4 Secrets Management","u":"/zh/security/self-assessment","h":"#54-secrets-management","p":1365},{"i":1617,"t":"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)","u":"/zh/security/self-assessment","h":"#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual","p":1365},{"i":1619,"t":"5.4.2 Consider external secret storage (Manual)","u":"/zh/security/self-assessment","h":"#542-consider-external-secret-storage-manual","p":1365},{"i":1621,"t":"5.5 Extensible Admission Control","u":"/zh/security/self-assessment","h":"#55-extensible-admission-control","p":1365},{"i":1622,"t":"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)","u":"/zh/security/self-assessment","h":"#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual","p":1365},{"i":1624,"t":"5.7 General Policies","u":"/zh/security/self-assessment","h":"#57-general-policies","p":1365},{"i":1625,"t":"5.7.1 Create administrative boundaries between resources using namespaces (Manual)","u":"/zh/security/self-assessment","h":"#571-create-administrative-boundaries-between-resources-using-namespaces-manual","p":1365},{"i":1627,"t":"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)","u":"/zh/security/self-assessment","h":"#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual","p":1365},{"i":1629,"t":"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)","u":"/zh/security/self-assessment","h":"#573-apply-securitycontext-to-your-pods-and-containers-manual","p":1365},{"i":1631,"t":"5.7.4 The default namespace should not be used (Manual)","u":"/zh/security/self-assessment","h":"#574-the-default-namespace-should-not-be-used-manual","p":1365}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/822",[0,0.901,1,3.37]],["t/824",[0,0.901,1,3.37]],["t/828",[0,1.025]],["t/829",[0,0.901,2,4.879]],["t/831",[0,1.025]],["t/833",[0,0.901,3,5.224]],["t/835",[0,1.058,4,5.761]],["t/837",[0,1.058,5,5.086]],["t/839",[0,0.901,6,7.11]],["t/841",[0,0.901,7,7.11]],["t/843",[0,0.901,8,7.11]],["t/845",[0,0.988,9,3.534,10,3.186]],["t/847",[0,0.988,10,3.186,11,4.386]],["t/849",[0,0.901,11,5.439]],["t/851",[0,0.805,10,3.527,11,4.856]],["t/853",[0,1.025]],["t/855",[0,0.901,11,5.439]],["t/857",[0,1.025]],["t/859",[0,1.025]],["t/861",[0,1.025]],["t/862",[0,1.058,12,5.375]],["t/864",[0,0.609,13,4.802,14,4.802,15,4.802,16,4.802,17,4.802]],["t/866",[18,8.08]],["t/868",[19,7.11,20,7.11]],["t/870",[0,0.988,1,2.717,5,4.594]],["t/872",[0,0.901,21,6.453]],["t/874",[0,1.058,21,5.761]],["t/876",[0,0.927,22,4.426,23,4.426,24,4.426]],["t/877",[0,0.927,22,4.426,23,4.426,24,4.426]],["t/879",[0,0.977,1,2.105,22,3.761,23,3.761,24,3.761]],["t/881",[0,1.025]],["t/883",[0,1.025]],["t/887",[0,1.025]],["t/889",[0,0.901,1,3.37]],["t/891",[0,0.901,9,4.383]],["t/893",[0,0.901,9,4.383]],["t/899",[25,5.728]],["t/901",[0,1.025]],["t/903",[0,1.025]],["t/905",[0,1.025]],["t/907",[0,1.025]],["t/909",[0,1.025]],["t/911",[0,1.025]],["t/913",[0,1.025]],["t/915",[0,1.025]],["t/917",[0,0.901,9,4.383]],["t/919",[0,0.727,1,2.717,9,3.534,26,5.203]],["t/922",[0,1.025]],["t/924",[0,1.025]],["t/926",[0,0.901,2,4.879]],["t/928",[0,1.058,2,4.356]],["t/930",[0,1.058,2,4.356]],["t/932",[0,1.058,2,4.356]],["t/934",[0,0.805,27,5.761,28,6.347]],["t/940",[0,0.901,29,4.736]],["t/942",[0,1.025]],["t/944",[0,1.058,29,4.228]],["t/946",[0,0.901,29,4.736]],["t/950",[0,1.025]],["t/952",[0,1.025]],["t/953",[0,1.025]],["t/955",[0,1.025]],["t/957",[0,1.058,30,4.856]],["t/959",[0,1.025]],["t/960",[25,5.728]],["t/962",[31,8.08]],["t/964",[0,1.025]],["t/966",[0,0.901,29,4.736]],["t/968",[0,1.025]],["t/970",[0,1.025]],["t/972",[0,0.901,32,4.491]],["t/974",[0,0.901,32,4.491]],["t/976",[0,1.025]],["t/978",[0,1.025]],["t/980",[0,0.727,1,2.717,10,3.186,26,5.203]],["t/984",[0,0.901,3,5.224]],["t/986",[33,6.182]],["t/988",[34,8.08]],["t/990",[0,0.901,3,5.224]],["t/992",[10,4.49]],["t/994",[9,4.982]],["t/996",[35,8.08]],["t/1001",[0,1.058,36,6.347]],["t/1005",[0,1.025]],["t/1007",[0,1.025]],["t/1011",[0,1.058,37,6.347]],["t/1013",[0,1.025]],["t/1015",[0,1.058,38,4.114]],["t/1020",[0,1.025]],["t/1022",[0,0.901,39,7.11]],["t/1024",[0,0.988,10,3.186,40,5.203]],["t/1026",[0,0.988,10,3.186,41,5.733]],["t/1028",[0,0.988,9,3.534,42,5.733]],["t/1030",[0,0.901,43,7.11]],["t/1034",[0,1.025]],["t/1038",[0,0.988,1,2.717,32,3.621]],["t/1040",[0,0.988,44,5.203,45,5.203]],["t/1042",[0,0.988,1,2.717,46,5.203]],["t/1044",[0,1.025]],["t/1046",[0,0.901,1,3.37]],["t/1048",[0,1.069,1,2.477,5,4.188]],["t/1050",[0,0.873,1,2.276,3,3.529,9,2.961,10,2.669]],["t/1052",[0,1.058,1,3.008]],["t/1054",[0,1.025]],["t/1058",[0,0.805,47,5.375,48,2.622]],["t/1060",[0,1.058,49,6.347]],["t/1062",[0,0.988,47,4.854,50,5.733]],["t/1068",[0,1.025]],["t/1070",[0,0.901,51,7.11]],["t/1072",[0,1.025]],["t/1074",[0,1.058,1,3.008]],["t/1076",[0,0.901,1,3.37]],["t/1077",[0,1.025]],["t/1079",[0,0.901,1,3.37]],["t/1081",[0,1.025]],["t/1082",[0,1.025]],["t/1084",[0,1.025]],["t/1088",[0,1.025]],["t/1090",[0,1.025]],["t/1092",[0,1.025]],["t/1094",[0,1.025]],["t/1096",[0,1.025]],["t/1100",[0,1.058,32,4.009]],["t/1102",[0,1.058,52,5.375]],["t/1104",[0,1.025]],["t/1106",[0,1.025]],["t/1108",[0,1.025]],["t/1110",[0,0.988,53,5.203,54,5.203]],["t/1114",[0,0.901,55,7.11]],["t/1116",[0,0.977,56,6.508,57,4.442,58,4.442]],["t/1118",[0,0.901,59,6.02]],["t/1120",[0,0.727,48,2.368,60,4.594,61,5.733]],["t/1122",[0,1.069,62,5.226,63,4.744]],["t/1124",[0,1.058,63,5.761]],["t/1126",[0,1.025]],["t/1128",[0,1.058,1,3.008]],["t/1130",[0,0.988,64,5.733,65,5.733]],["t/1133",[66,6.842]],["t/1135",[0,1.025]],["t/1137",[0,0.901,66,6.02]],["t/1139",[0,1.025]],["t/1141",[0,1.058,67,6.347]],["t/1143",[0,1.058,68,6.347]],["t/1145",[47,6.02,66,6.02]],["t/1149",[0,1.025]],["t/1151",[69,8.08]],["t/1153",[70,6.475]],["t/1155",[0,0.901,71,5.224]],["t/1157",[0,0.901,71,5.224]],["t/1159",[0,1.025]],["t/1163",[0,1.025]],["t/1165",[0,1.025]],["t/1167",[0,1.025]],["t/1169",[0,1.025]],["t/1171",[0,1.025]],["t/1173",[0,0.805,1,3.008,10,3.527]],["t/1175",[0,1.025]],["t/1177",[0,0.901,72,7.11]],["t/1179",[0,1.025]],["t/1181",[0,1.025]],["t/1183",[0,1.025]],["t/1187",[0,1.058,38,4.114]],["t/1189",[0,0.988,48,2.368,60,4.594]],["t/1191",[0,0.901,10,3.951]],["t/1193",[0,1.025]],["t/1197",[0,0.901,10,3.951]],["t/1199",[0,0.901,9,4.383]],["t/1203",[5,5.697,73,7.11]],["t/1205",[12,6.842]],["t/1207",[0,0.901,11,5.439]],["t/1209",[0,0.988,74,5.733,75,5.733]],["t/1213",[76,8.08]],["t/1215",[44,5.761,45,5.761,48,2.622]],["t/1217",[0,1.025]],["t/1219",[77,4.228,78,6.347,79,6.347]],["t/1221",[0,0.901,80,5.697]],["t/1223",[0,1.025]],["t/1225",[0,1.058,80,5.086]],["t/1227",[0,1.058,80,5.086]],["t/1229",[0,0.901,80,5.697]],["t/1231",[0,0.727,48,2.368,81,5.733,82,4.386]],["t/1233",[0,1.025]],["t/1235",[0,0.901,83,7.11]],["t/1239",[0,1.025]],["t/1247",[0,1.025]],["t/1249",[0,1.025]],["t/1251",[0,1.025]],["t/1253",[0,1.025]],["t/1255",[0,1.025]],["t/1257",[0,0.805,1,3.008,10,3.527]],["t/1259",[0,1.069,1,2.477,9,3.222]],["t/1261",[1,3.37,9,4.383]],["t/1263",[0,1.025]],["t/1265",[0,1.025]],["t/1267",[0,1.058,9,3.913]],["t/1273",[84,5.086,85,5.761,86,5.375]],["t/1275",[87,1.252,88,4.744,89,4.744,90,4.188,91,1.383]],["t/1277",[32,4.009,86,5.375,92,6.347]],["t/1279",[33,5.439,93,4.193]],["t/1281",[94,6.842]],["t/1283",[10,3.186,95,4.386,96,4.064,97,3.819]],["t/1285",[32,4.009,97,4.228,98,6.347]],["t/1287",[48,2.368,60,4.594,99,5.733,100,2.129]],["t/1289",[101,7.11,102,7.11]],["t/1291",[48,2.937,103,6.453]],["t/1293",[48,2.937,104,6.453]],["t/1295",[48,2.937,105,6.453]],["t/1297",[48,2.937,106,7.11]],["t/1299",[48,2.937,107,6.453]],["t/1301",[48,2.937,108,6.453]],["t/1303",[48,2.937,109,6.453]],["t/1305",[48,2.937,110,6.453]],["t/1307",[48,2.937,111,7.11]],["t/1309",[48,2.937,112,7.11]],["t/1311",[48,2.937,113,6.453]],["t/1313",[48,2.937,114,6.453]],["t/1315",[48,2.937,115,6.453]],["t/1317",[48,2.937,116,6.453]],["t/1319",[117,8.08]],["t/1323",[0,0.901,29,4.736]],["t/1327",[0,0.901,1,3.37]],["t/1329",[0,1.025]],["t/1331",[118,7.334]],["t/1333",[119,7.334]],["t/1335",[0,0.901,120,7.11]],["t/1337",[118,7.334]],["t/1339",[119,7.334]],["t/1342",[0,1.058,1,3.008]],["t/1344",[0,1.025]],["t/1347",[121,8.08]],["t/1349",[0,0.727,48,2.368,122,5.733,123,5.733]],["t/1351",[0,1.025]],["t/1357",[0,0.901,124,7.11]],["t/1359",[0,0.901,1,3.37]],["t/1361",[0,0.901,1,3.37]],["t/1363",[0,0.901,1,3.37]],["t/1367",[1,1.958,32,3.896,125,4.132,126,4.132,127,4.132,128,4.132,129,4.132]],["t/1369",[48,3.338]],["t/1370",[48,1.984,60,3.848,97,3.199,130,4.802,131,3.848,132,1.919]],["t/1371",[10,1.702,87,0.734,91,0.811,93,1.806,95,2.343,132,1.224,133,3.063,134,2.102,135,1.702,136,1.846,137,1.769,138,1.769,139,0.892]],["t/1373",[10,1.899,87,0.819,91,0.904,93,2.015,95,2.614,132,1.365,134,2.345,139,0.995,140,3.416,141,1.974,142,2.015]],["t/1375",[48,1.265,82,2.343,87,0.734,91,0.811,93,1.806,132,1.224,134,2.102,135,1.702,136,1.846,137,1.769,138,1.769,139,0.892,143,3.063]],["t/1377",[48,1.411,82,2.614,87,0.819,91,0.904,93,2.015,132,1.365,134,2.345,139,0.995,141,1.974,142,2.015,144,3.416]],["t/1379",[87,0.774,91,0.855,93,1.905,132,1.291,134,2.217,135,1.795,136,1.947,137,1.866,138,1.866,139,0.941,145,3.23,146,2.735]],["t/1381",[87,0.869,91,0.959,93,2.138,132,1.449,134,2.488,139,1.056,141,2.094,142,2.138,146,3.07,147,3.626]],["t/1383",[38,2.093,87,0.774,91,0.855,93,1.905,132,1.291,134,2.217,135,1.795,136,1.947,137,1.866,138,1.866,139,0.941,148,3.23]],["t/1385",[38,2.35,87,0.869,91,0.959,93,2.138,132,1.449,134,2.488,139,1.056,141,2.094,142,2.138,149,3.626]],["t/1387",[87,0.774,91,0.855,132,1.291,135,1.795,136,1.947,137,1.866,138,1.866,150,3.23,151,1.905,152,2.588,153,2.932,154,1.188]],["t/1389",[87,0.869,91,0.959,132,1.449,141,2.094,142,2.138,151,2.138,152,2.905,153,3.291,154,1.333,155,3.626]],["t/1391",[38,2.214,87,0.819,91,0.904,135,1.899,137,1.974,138,1.974,139,0.995,156,3.416,157,3.101,158,2.893,159,3.416]],["t/1393",[38,2.503,87,0.925,91,1.022,139,1.125,141,2.231,157,3.505,158,3.27,160,3.862,161,3.862]],["t/1395",[87,0.869,91,0.959,132,1.449,135,2.015,137,2.094,138,2.094,139,1.056,162,3.626,163,3.291,164,3.291]],["t/1397",[87,0.99,91,1.093,132,1.651,139,1.204,141,2.387,142,2.437,163,3.75,165,4.132]],["t/1399",[87,0.869,91,0.959,132,1.449,135,2.015,136,2.185,137,2.094,138,2.094,139,1.056,166,3.626,167,3.291]],["t/1401",[87,0.99,91,1.093,132,1.651,139,1.204,141,2.387,142,2.437,167,3.75,168,4.132]],["t/1403",[48,1.411,87,0.819,91,0.904,132,1.365,135,1.899,136,2.059,137,1.974,138,1.974,139,0.995,169,3.416,170,3.101]],["t/1405",[48,1.596,87,0.925,91,1.022,132,1.543,139,1.125,141,2.231,142,2.278,170,3.505,171,3.862]],["t/1407",[32,2.29,87,0.869,91,0.959,132,1.449,139,1.056,141,2.094,142,2.138,158,3.07,172,3.626,173,3.07]],["t/1409",[32,2.04,87,0.774,91,0.855,132,1.291,135,1.795,136,1.947,137,1.866,138,1.866,154,1.188,173,2.735,174,3.23,175,2.217]],["t/1411",[32,2.29,87,0.869,91,0.959,132,1.449,135,2.015,154,1.333,164,3.291,173,3.07,176,3.626,177,2.488]],["t/1413",[10,3.527,95,4.856,178,6.347]],["t/1414",[87,0.99,91,1.093,100,1.534,154,1.519,179,4.132,180,3.75,181,3.161,182,3.036]],["t/1416",[3,3.036,87,0.99,91,1.093,132,1.651,139,1.204,181,3.161,183,4.132,184,4.132]],["t/1418",[87,1.252,91,1.383,139,1.522,185,5.226,186,5.226]],["t/1420",[4,3.75,87,0.99,91,1.093,100,1.534,139,1.204,187,4.132,188,2.753,189,2.61]],["t/1422",[87,0.774,91,0.855,100,1.199,139,0.941,175,2.217,177,2.217,188,3.401,190,3.23,191,3.619,192,1.702]],["t/1424",[87,0.925,91,1.022,100,1.434,139,1.125,175,2.651,188,2.573,192,2.036,193,3.862,194,2.573]],["t/1426",[87,0.99,91,1.093,100,1.534,139,1.204,194,2.753,195,4.132,196,3.311,197,3.75]],["t/1428",[87,0.99,100,1.534,131,3.311,139,1.204,194,2.753,196,3.311,198,4.132,199,3.75]],["t/1430",[52,3.499,87,0.99,100,1.534,139,1.204,194,2.753,196,3.311,199,3.75,200,4.132]],["t/1432",[48,1.707,87,0.99,91,1.093,154,1.519,201,4.132,202,2.142,203,2.929,204,4.132]],["t/1434",[48,1.707,87,0.99,91,1.093,139,1.204,202,2.142,203,2.929,205,4.132,206,4.132]],["t/1436",[48,1.707,87,0.99,91,1.093,154,1.519,202,2.142,203,2.929,207,4.132,208,4.132]],["t/1438",[48,1.498,87,0.869,91,0.959,154,1.333,202,1.88,203,2.57,209,3.626,210,3.626,211,3.626,212,2.015]],["t/1440",[27,3.75,48,1.707,87,0.99,91,1.093,139,1.204,202,2.142,203,2.929,213,4.132]],["t/1442",[48,1.707,87,0.99,91,1.093,103,3.75,139,1.204,202,2.142,203,2.929,214,4.132]],["t/1444",[48,1.707,87,0.99,91,1.093,104,3.75,139,1.204,202,2.142,203,2.929,215,4.132]],["t/1446",[33,3.161,87,0.99,91,1.093,100,1.534,139,1.204,216,4.132,217,3.75,218,3.311]],["t/1448",[87,1.064,91,1.175,100,1.65,139,1.294,182,3.264,219,4.442,220,3.559]],["t/1450",[25,2.929,87,0.99,91,1.093,96,2.929,100,1.534,139,1.204,221,4.132,222,4.132]],["t/1452",[25,2.57,87,0.869,91,0.959,96,2.57,100,1.346,139,1.056,192,1.911,223,3.626,224,3.626,225,3.626]],["t/1454",[25,2.57,87,0.869,91,0.959,96,2.57,100,1.346,139,1.056,192,1.911,226,3.626,227,3.626,228,3.626]],["t/1456",[25,2.57,87,0.869,91,0.959,96,2.57,100,1.346,105,3.291,139,1.056,192,1.911,229,3.626,230,3.626]],["t/1458",[77,2.573,87,0.925,91,1.022,100,1.434,107,3.505,139,1.125,189,2.44,231,2.838,232,3.862]],["t/1460",[87,0.99,91,1.093,100,1.534,108,3.75,139,1.204,192,2.178,233,4.132,234,3.75]],["t/1462",[38,3.62,87,0.869,91,0.959,100,1.346,109,3.291,139,1.056,192,1.911,235,3.626,236,3.626]],["t/1464",[71,3.596,87,0.734,91,0.811,100,1.137,110,2.78,132,1.955,139,0.892,177,2.102,192,1.614,237,2.251,238,2.594]],["t/1466",[2,2.651,87,0.925,91,1.022,100,1.434,132,1.543,139,1.125,191,2.738,192,2.036,239,3.862]],["t/1468",[38,2.678,87,0.99,91,1.093,100,1.534,139,1.204,192,2.178,240,4.132,241,4.132]],["t/1470",[70,3.095,87,0.925,91,1.022,100,1.434,154,1.42,192,2.036,242,3.862,243,3.505,244,3.505]],["t/1472",[87,1.064,97,2.959,154,1.633,192,2.341,243,4.032,244,4.032,245,4.442]],["t/1474",[10,2.015,87,0.869,95,2.774,154,1.333,212,2.015,246,3.626,247,3.07,248,3.291,249,3.291,250,3.291]],["t/1476",[48,2.622,82,4.856,251,6.347]],["t/1477",[87,0.869,91,0.959,93,2.138,100,1.346,113,3.291,154,1.333,192,1.911,252,3.626,253,3.626,254,3.626]],["t/1479",[87,1.064,91,1.175,100,1.65,139,1.294,182,3.264,220,3.559,255,4.442]],["t/1481",[77,2.415,87,0.869,91,0.959,100,1.346,139,1.056,189,2.29,212,2.015,231,2.664,256,3.626,257,3.626]],["t/1483",[77,2.276,87,0.819,91,0.904,100,1.269,132,1.365,139,0.995,177,2.345,192,1.801,231,2.51,238,2.893,258,3.416]],["t/1485",[2,2.651,87,0.925,91,1.022,100,1.434,132,1.543,139,1.125,192,2.036,259,3.862,260,3.505]],["t/1487",[87,1.064,91,1.175,100,1.65,139,1.294,189,2.806,261,4.442,262,4.032]],["t/1489",[87,0.99,91,1.093,100,1.534,139,1.204,263,4.132,264,3.499,265,3.75,266,3.75]],["t/1491",[146,6.02,267,7.11]],["t/1492",[87,1.064,91,1.175,100,1.65,139,1.294,182,3.264,220,3.559,268,4.442]],["t/1494",[87,0.99,91,1.093,100,1.534,139,1.204,264,3.499,265,3.75,266,3.75,269,4.132]],["t/1496",[38,3.715,40,5.203,97,3.819,131,4.594]],["t/1497",[87,0.869,91,0.959,100,1.346,132,2.232,139,1.056,177,2.488,192,1.911,237,2.664,270,3.626]],["t/1499",[87,0.925,91,1.022,100,1.434,139,1.125,181,2.955,189,2.44,191,2.738,237,2.838,271,3.862]],["t/1501",[71,3.036,87,0.99,91,1.093,100,1.534,139,1.204,189,2.61,272,4.132,273,3.75]],["t/1503",[87,0.774,91,0.855,100,1.199,132,2.039,139,0.941,177,2.217,192,1.702,237,2.373,274,3.23,275,4.322]],["t/1505",[87,0.869,91,0.959,100,1.346,139,1.056,181,2.774,189,2.29,191,2.57,237,2.664,275,3.07,276,3.626]],["t/1507",[71,2.838,87,0.925,91,1.022,100,1.434,139,1.125,189,2.44,273,3.505,275,3.27,277,3.862]],["t/1509",[38,2.678,87,0.99,154,1.519,175,2.836,194,2.753,212,2.296,278,4.132,279,4.132]],["t/1511",[194,4.228,280,6.347,281,5.761]],["t/1512",[54,4.032,154,1.633,175,3.049,191,3.149,212,2.468,281,4.032,282,4.442]],["t/1514",[25,5.04,283,7.11]],["t/1515",[87,1.064,96,3.149,114,4.032,154,1.633,284,2.516,285,3.398,286,3.761]],["t/1517",[33,2.955,87,0.925,96,2.738,154,1.42,177,2.651,285,2.955,287,3.862,288,3.862,289,3.862]],["t/1519",[97,3.482,131,4.188,132,2.088,290,5.226,291,5.226]],["t/1520",[77,2.276,87,0.819,91,0.904,132,1.365,135,1.899,136,2.059,137,1.974,138,1.974,139,0.995,188,2.276,292,3.416]],["t/1522",[77,2.573,87,0.925,91,1.022,132,1.543,139,1.125,141,2.231,142,2.278,188,2.573,293,3.862]],["t/1524",[30,2.471,87,0.774,91,0.855,132,1.291,135,1.795,136,1.947,137,1.866,138,1.866,154,1.188,294,3.23,295,2.932,296,2.932]],["t/1526",[30,2.774,87,0.869,91,0.959,132,1.449,141,2.094,142,2.138,154,1.333,295,3.291,296,3.291,297,3.626]],["t/1528",[30,2.614,87,0.819,91,0.904,132,1.365,135,1.899,136,2.059,137,1.974,138,1.974,139,0.995,298,3.416,299,3.101]],["t/1530",[30,2.955,87,0.925,91,1.022,132,1.543,139,1.125,141,2.231,142,2.278,299,3.505,300,3.862]],["t/1532",[87,0.819,91,0.904,132,1.365,135,1.899,136,2.059,137,1.974,138,1.974,154,1.256,175,2.345,194,2.276,301,3.416]],["t/1534",[87,0.869,91,0.959,132,1.449,141,2.094,142,2.138,154,1.333,175,2.488,191,2.57,194,2.415,302,3.626]],["t/1536",[70,2.588,87,0.774,91,0.855,97,2.152,132,1.291,135,1.795,136,1.947,137,1.866,138,1.866,139,0.941,188,2.152,303,3.23]],["t/1538",[70,2.905,87,0.869,91,0.959,97,2.415,132,1.449,139,1.056,141,2.094,142,2.138,188,2.415,304,3.626]],["t/1540",[188,4.736,305,7.11]],["t/1541",[87,0.99,91,1.093,100,1.534,139,1.204,180,3.75,181,3.161,182,3.036,306,4.132]],["t/1543",[87,0.99,91,1.093,100,1.534,139,1.204,194,2.753,196,3.311,197,3.75,307,4.132]],["t/1545",[2,2.651,87,0.925,91,1.022,100,1.434,132,1.543,139,1.125,191,2.738,192,2.036,308,3.862]],["t/1547",[87,0.99,91,1.093,100,1.534,154,1.519,217,3.75,218,3.311,309,4.132,310,4.132]],["t/1549",[87,0.869,91,0.959,100,1.346,154,1.333,218,2.905,234,3.291,311,3.626,312,3.626,313,3.626,314,3.626]],["t/1551",[87,0.925,88,3.505,89,3.505,90,3.095,91,1.022,100,1.434,139,1.125,189,2.44,315,3.862]],["t/1553",[12,3.07,87,0.869,91,0.959,100,1.346,115,3.291,139,1.056,189,2.29,247,3.07,316,3.626,317,3.626]],["t/1555",[87,1.064,91,1.175,100,1.65,154,1.633,318,4.442,319,4.442,320,4.442]],["t/1557",[85,2.78,87,1.172,91,0.811,100,1.137,154,1.126,192,1.614,218,2.454,321,3.063,322,4.894,323,3.063,324,3.063]],["t/1559",[71,3.596,87,0.734,91,0.811,100,1.137,132,1.955,154,1.126,177,2.102,192,1.614,237,2.251,238,2.594,325,3.063]],["t/1561",[87,0.99,91,1.093,100,1.534,139,1.204,175,2.836,182,3.036,326,4.132,327,4.132]],["t/1563",[91,1.175,100,1.65,154,1.633,189,2.806,262,4.032,328,4.442,329,4.442]],["t/1565",[87,0.925,154,1.42,188,2.573,212,2.146,247,3.27,248,3.505,249,3.505,250,3.505,330,3.862]],["t/1567",[52,4.854,77,3.819,231,4.212,331,5.733]],["t/1568",[53,3.75,86,3.499,87,0.99,154,1.519,212,2.296,332,4.132,333,3.499,334,3.75]],["t/1570",[29,3.482,154,1.922,284,2.96,335,5.226,336,4.744]],["t/1572",[154,1.633,212,2.468,284,2.516,334,4.032,337,4.442,338,4.442,339,4.442]],["t/1574",[93,2.832,154,1.766,284,2.72,286,4.066,336,4.359,340,4.802]],["t/1576",[77,2.753,87,0.99,90,3.311,116,3.75,154,1.519,212,2.296,231,3.036,341,3.75]],["t/1578",[3,3.036,77,2.753,87,0.99,154,1.519,231,3.036,342,4.132,343,4.132,344,4.132]],["t/1580",[154,1.766,212,2.669,345,4.802,346,4.802,347,4.802,348,4.802]],["t/1582",[32,2.29,135,2.015,154,1.333,212,2.015,264,3.07,333,3.07,349,3.626,350,3.626,351,3.626,352,3.626]],["t/1584",[33,4.386,93,3.381,353,5.733,354,5.733]],["t/1585",[48,1.498,87,0.869,154,1.333,285,2.774,333,3.07,341,3.291,355,3.626,356,3.626,357,3.626,358,3.626]],["t/1587",[139,1.399,151,2.832,202,2.49,284,2.72,359,4.802,360,4.802]],["t/1589",[84,2.738,139,0.995,151,2.015,202,1.771,284,1.935,361,3.416,362,2.893,363,2.893,364,3.416,365,3.416,366,2.51]],["t/1591",[84,2.905,139,1.056,151,2.138,202,1.88,284,2.053,362,3.07,363,3.07,366,2.664,367,3.626,368,3.626]],["t/1593",[84,2.905,139,1.056,151,2.138,152,2.905,202,1.88,284,2.053,362,3.07,363,3.07,366,2.664,369,3.626]],["t/1595",[139,1.399,151,2.832,202,2.49,284,2.72,370,4.802,371,4.802]],["t/1597",[139,1.399,151,2.832,202,2.49,260,4.359,284,2.72,372,4.802]],["t/1599",[139,1.294,151,2.619,202,2.303,284,2.516,373,4.442,374,4.442,375,3.761]],["t/1601",[139,1.294,151,2.619,202,2.303,284,2.516,375,3.761,376,4.442,377,4.442]],["t/1603",[151,2.619,154,1.633,202,2.303,284,2.516,375,3.761,378,4.442,379,4.442]],["t/1605",[46,4.032,151,2.619,154,1.633,202,2.303,284,2.516,380,4.442,381,4.442]],["t/1607",[154,1.766,202,2.49,284,2.72,382,4.802,383,4.802,384,4.802]],["t/1609",[151,2.619,154,1.633,202,2.303,212,2.468,284,2.516,385,4.442,386,4.442]],["t/1611",[59,4.854,152,4.594,285,4.386,387,5.733]],["t/1612",[59,3.761,87,1.064,94,3.761,154,1.633,212,2.468,388,4.442,389,4.442]],["t/1614",[87,1.151,94,4.066,154,1.766,366,3.529,390,4.802,391,4.802]],["t/1616",[29,4.228,82,4.856,392,6.347]],["t/1617",[29,3.722,132,1.449,154,1.333,212,2.015,393,3.626,394,3.626,395,3.626,396,3.626,397,3.626]],["t/1619",[29,3.199,154,1.766,398,4.802,399,4.802,400,4.802,401,4.802]],["t/1621",[48,2.368,202,2.972,402,5.733,403,5.733]],["t/1622",[48,1.596,97,2.573,154,1.42,202,2.002,212,2.146,404,3.862,405,3.862,406,3.862,407,3.862]],["t/1624",[285,4.856,408,6.347,409,6.347]],["t/1625",[154,1.42,212,2.146,286,3.27,366,2.838,410,3.862,411,3.862,412,3.862,413,3.862,414,3.862]],["t/1627",[87,0.925,91,1.022,93,2.278,154,1.42,220,3.095,415,3.862,416,3.862,417,3.862,418,3.862]],["t/1629",[93,2.832,151,2.832,154,1.766,419,4.802,420,4.802,421,4.802]],["t/1631",[90,4.188,154,1.922,212,2.904,366,3.84,422,5.226]]],"invertedIndex":[["",{"_index":0,"t":{"822":{"position":[[0,3]]},"824":{"position":[[0,4]]},"828":{"position":[[0,4]]},"829":{"position":[[3,2]]},"831":{"position":[[0,9]]},"833":{"position":[[6,2]]},"835":{"position":[[0,2],[8,2]]},"837":{"position":[[0,2],[10,7]]},"839":{"position":[[0,2]]},"841":{"position":[[0,2]]},"843":{"position":[[7,7]]},"845":{"position":[[0,3],[10,1]]},"847":{"position":[[0,2],[12,4]]},"849":{"position":[[9,7]]},"851":{"position":[[0,2]]},"853":{"position":[[0,6]]},"855":{"position":[[9,6]]},"857":{"position":[[0,7]]},"859":{"position":[[0,10]]},"861":{"position":[[0,8]]},"862":{"position":[[0,2],[12,2]]},"864":{"position":[[25,1]]},"870":{"position":[[0,1],[9,3]]},"872":{"position":[[8,2]]},"874":{"position":[[0,2],[11,4]]},"876":{"position":[[0,2],[11,1]]},"877":{"position":[[0,3],[17,1]]},"879":{"position":[[0,2],[7,2],[18,1]]},"881":{"position":[[0,6]]},"883":{"position":[[0,8]]},"887":{"position":[[0,15]]},"889":{"position":[[0,3]]},"891":{"position":[[6,9]]},"893":{"position":[[6,9]]},"901":{"position":[[0,4]]},"903":{"position":[[0,2]]},"905":{"position":[[0,2]]},"907":{"position":[[0,3]]},"909":{"position":[[0,2]]},"911":{"position":[[0,5]]},"913":{"position":[[0,4]]},"915":{"position":[[0,3]]},"917":{"position":[[6,8]]},"919":{"position":[[14,2]]},"922":{"position":[[0,9]]},"924":{"position":[[0,11]]},"926":{"position":[[3,2]]},"928":{"position":[[0,5],[9,2]]},"930":{"position":[[0,5],[9,2]]},"932":{"position":[[0,5],[9,2]]},"934":{"position":[[22,4]]},"940":{"position":[[7,4]]},"942":{"position":[[0,6]]},"944":{"position":[[0,5],[13,2]]},"946":{"position":[[7,4]]},"950":{"position":[[0,5]]},"952":{"position":[[0,4]]},"953":{"position":[[0,3]]},"955":{"position":[[0,4]]},"957":{"position":[[0,2],[14,2]]},"959":{"position":[[0,4]]},"964":{"position":[[0,2]]},"966":{"position":[[7,2]]},"968":{"position":[[0,2]]},"970":{"position":[[0,3]]},"972":{"position":[[11,2]]},"974":{"position":[[11,8]]},"976":{"position":[[0,4]]},"978":{"position":[[0,5]]},"980":{"position":[[15,2]]},"984":{"position":[[6,2]]},"990":{"position":[[6,2]]},"1001":{"position":[[0,2],[11,7]]},"1005":{"position":[[0,10]]},"1007":{"position":[[0,11]]},"1011":{"position":[[0,2],[10,7]]},"1013":{"position":[[0,15]]},"1015":{"position":[[0,5],[11,11]]},"1020":{"position":[[0,4]]},"1022":{"position":[[3,8]]},"1024":{"position":[[3,2],[13,2]]},"1026":{"position":[[3,7],[18,2]]},"1028":{"position":[[3,5],[15,2]]},"1030":{"position":[[3,12]]},"1034":{"position":[[0,8]]},"1038":{"position":[[4,1],[17,6]]},"1040":{"position":[[0,7],[16,2]]},"1042":{"position":[[4,2],[15,2]]},"1044":{"position":[[0,9]]},"1046":{"position":[[4,6]]},"1048":{"position":[[0,3],[11,3],[19,2]]},"1050":{"position":[[11,1],[25,6]]},"1052":{"position":[[0,5],[10,6]]},"1054":{"position":[[0,18]]},"1058":{"position":[[0,2]]},"1060":{"position":[[0,2],[19,7]]},"1062":{"position":[[0,1],[10,2]]},"1068":{"position":[[0,6]]},"1070":{"position":[[0,6]]},"1072":{"position":[[0,6]]},"1074":{"position":[[0,7],[12,5]]},"1076":{"position":[[0,2]]},"1077":{"position":[[0,4]]},"1079":{"position":[[0,8]]},"1081":{"position":[[0,2]]},"1082":{"position":[[0,6]]},"1084":{"position":[[0,4]]},"1088":{"position":[[0,9]]},"1090":{"position":[[0,5]]},"1092":{"position":[[0,4]]},"1094":{"position":[[0,6]]},"1096":{"position":[[0,4]]},"1100":{"position":[[0,2],[14,3]]},"1102":{"position":[[0,3],[9,2]]},"1104":{"position":[[0,7]]},"1106":{"position":[[0,7]]},"1108":{"position":[[0,5]]},"1110":{"position":[[0,6],[18,2]]},"1114":{"position":[[8,2]]},"1116":{"position":[[0,1],[12,1],[20,3]]},"1118":{"position":[[0,3]]},"1120":{"position":[[21,5]]},"1122":{"position":[[0,2],[9,1],[17,2]]},"1124":{"position":[[0,2],[8,2]]},"1126":{"position":[[0,10]]},"1128":{"position":[[0,3],[8,6]]},"1130":{"position":[[0,2],[17,9]]},"1135":{"position":[[0,5]]},"1137":{"position":[[0,2]]},"1139":{"position":[[0,4]]},"1141":{"position":[[0,2],[13,2]]},"1143":{"position":[[0,2],[9,2]]},"1149":{"position":[[0,8]]},"1155":{"position":[[0,2]]},"1157":{"position":[[0,2]]},"1159":{"position":[[0,12]]},"1163":{"position":[[0,4]]},"1165":{"position":[[0,2]]},"1167":{"position":[[0,4]]},"1169":{"position":[[0,2]]},"1171":{"position":[[0,2]]},"1173":{"position":[[11,7]]},"1175":{"position":[[0,4]]},"1177":{"position":[[4,3]]},"1179":{"position":[[0,2]]},"1181":{"position":[[0,2]]},"1183":{"position":[[0,3]]},"1187":{"position":[[0,2],[8,2]]},"1189":{"position":[[0,2],[17,2]]},"1191":{"position":[[0,8]]},"1193":{"position":[[0,6]]},"1197":{"position":[[0,2]]},"1199":{"position":[[0,2]]},"1207":{"position":[[9,2]]},"1209":{"position":[[0,6],[15,3]]},"1217":{"position":[[0,7]]},"1221":{"position":[[10,5]]},"1223":{"position":[[0,2]]},"1225":{"position":[[0,2],[13,4]]},"1227":{"position":[[0,2],[13,3]]},"1229":{"position":[[0,2]]},"1231":{"position":[[0,4]]},"1233":{"position":[[0,8]]},"1235":{"position":[[0,3]]},"1239":{"position":[[0,4]]},"1247":{"position":[[0,6]]},"1249":{"position":[[0,9]]},"1251":{"position":[[0,2]]},"1253":{"position":[[0,2]]},"1255":{"position":[[0,6]]},"1257":{"position":[[0,7]]},"1259":{"position":[[0,4],[11,1],[17,2]]},"1263":{"position":[[0,2]]},"1265":{"position":[[0,11]]},"1267":{"position":[[0,2],[9,13]]},"1323":{"position":[[7,4]]},"1327":{"position":[[4,8]]},"1329":{"position":[[0,10]]},"1335":{"position":[[0,2]]},"1342":{"position":[[0,2],[7,2]]},"1344":{"position":[[0,9]]},"1349":{"position":[[0,2]]},"1351":{"position":[[0,4]]},"1357":{"position":[[0,2]]},"1359":{"position":[[0,8]]},"1361":{"position":[[0,11]]},"1363":{"position":[[0,2]]}}}],["0",{"_index":218,"t":{"1446":{"position":[[60,1]]},"1547":{"position":[[58,1]]},"1549":{"position":[[81,1]]},"1557":{"position":[[53,1]]}}}],["1",{"_index":39,"t":{"1022":{"position":[[0,2]]}}}],["1.1",{"_index":130,"t":{"1370":{"position":[[0,3]]}}}],["1.1.1",{"_index":133,"t":{"1371":{"position":[[0,5]]}}}],["1.1.10",{"_index":155,"t":{"1389":{"position":[[0,6]]}}}],["1.1.11",{"_index":156,"t":{"1391":{"position":[[0,6]]}}}],["1.1.12",{"_index":160,"t":{"1393":{"position":[[0,6]]}}}],["1.1.13",{"_index":162,"t":{"1395":{"position":[[0,6]]}}}],["1.1.14",{"_index":165,"t":{"1397":{"position":[[0,6]]}}}],["1.1.15",{"_index":166,"t":{"1399":{"position":[[0,6]]}}}],["1.1.16",{"_index":168,"t":{"1401":{"position":[[0,6]]}}}],["1.1.17",{"_index":169,"t":{"1403":{"position":[[0,6]]}}}],["1.1.18",{"_index":171,"t":{"1405":{"position":[[0,6]]}}}],["1.1.19",{"_index":172,"t":{"1407":{"position":[[0,6]]}}}],["1.1.2",{"_index":140,"t":{"1373":{"position":[[0,5]]}}}],["1.1.20",{"_index":174,"t":{"1409":{"position":[[0,6]]}}}],["1.1.21",{"_index":176,"t":{"1411":{"position":[[0,6]]}}}],["1.1.3",{"_index":143,"t":{"1375":{"position":[[0,5]]}}}],["1.1.4",{"_index":144,"t":{"1377":{"position":[[0,5]]}}}],["1.1.5",{"_index":145,"t":{"1379":{"position":[[0,5]]}}}],["1.1.6",{"_index":147,"t":{"1381":{"position":[[0,5]]}}}],["1.1.7",{"_index":148,"t":{"1383":{"position":[[0,5]]}}}],["1.1.8",{"_index":149,"t":{"1385":{"position":[[0,5]]}}}],["1.1.9",{"_index":150,"t":{"1387":{"position":[[0,5]]}}}],["1.2",{"_index":178,"t":{"1413":{"position":[[0,3]]}}}],["1.2.1",{"_index":179,"t":{"1414":{"position":[[0,5]]}}}],["1.2.10",{"_index":201,"t":{"1432":{"position":[[0,6]]}}}],["1.2.11",{"_index":205,"t":{"1434":{"position":[[0,6]]}}}],["1.2.12",{"_index":207,"t":{"1436":{"position":[[0,6]]}}}],["1.2.13",{"_index":209,"t":{"1438":{"position":[[0,6]]}}}],["1.2.14",{"_index":213,"t":{"1440":{"position":[[0,6]]}}}],["1.2.15",{"_index":103,"t":{"1291":{"position":[[8,6]]},"1442":{"position":[[0,6]]}}}],["1.2.16",{"_index":104,"t":{"1293":{"position":[[8,6]]},"1444":{"position":[[0,6]]}}}],["1.2.17",{"_index":216,"t":{"1446":{"position":[[0,6]]}}}],["1.2.18",{"_index":219,"t":{"1448":{"position":[[0,6]]}}}],["1.2.19",{"_index":221,"t":{"1450":{"position":[[0,6]]}}}],["1.2.2",{"_index":183,"t":{"1416":{"position":[[0,5]]}}}],["1.2.20",{"_index":223,"t":{"1452":{"position":[[0,6]]}}}],["1.2.21",{"_index":226,"t":{"1454":{"position":[[0,6]]}}}],["1.2.22",{"_index":105,"t":{"1295":{"position":[[8,6]]},"1456":{"position":[[0,6]]}}}],["1.2.23",{"_index":106,"t":{"1297":{"position":[[8,6]]}}}],["1.2.24",{"_index":107,"t":{"1299":{"position":[[8,6]]},"1458":{"position":[[0,6]]}}}],["1.2.25",{"_index":108,"t":{"1301":{"position":[[8,6]]},"1460":{"position":[[0,6]]}}}],["1.2.26",{"_index":109,"t":{"1303":{"position":[[8,6]]},"1462":{"position":[[0,6]]}}}],["1.2.27",{"_index":110,"t":{"1305":{"position":[[8,6]]},"1464":{"position":[[0,6]]}}}],["1.2.28",{"_index":239,"t":{"1466":{"position":[[0,6]]}}}],["1.2.29",{"_index":240,"t":{"1468":{"position":[[0,6]]}}}],["1.2.3",{"_index":185,"t":{"1418":{"position":[[0,5]]}}}],["1.2.30",{"_index":242,"t":{"1470":{"position":[[0,6]]}}}],["1.2.31",{"_index":245,"t":{"1472":{"position":[[0,6]]}}}],["1.2.32",{"_index":246,"t":{"1474":{"position":[[0,6]]}}}],["1.2.33",{"_index":111,"t":{"1307":{"position":[[8,6]]}}}],["1.2.34",{"_index":112,"t":{"1309":{"position":[[8,6]]}}}],["1.2.4",{"_index":187,"t":{"1420":{"position":[[0,5]]}}}],["1.2.5",{"_index":190,"t":{"1422":{"position":[[0,5]]}}}],["1.2.6",{"_index":193,"t":{"1424":{"position":[[0,5]]}}}],["1.2.7",{"_index":195,"t":{"1426":{"position":[[0,5]]}}}],["1.2.8",{"_index":198,"t":{"1428":{"position":[[0,5]]}}}],["1.2.9",{"_index":200,"t":{"1430":{"position":[[0,5]]}}}],["1.3",{"_index":251,"t":{"1476":{"position":[[0,3]]}}}],["1.3.1",{"_index":113,"t":{"1311":{"position":[[8,5]]},"1477":{"position":[[0,5]]}}}],["1.3.2",{"_index":255,"t":{"1479":{"position":[[0,5]]}}}],["1.3.3",{"_index":256,"t":{"1481":{"position":[[0,5]]}}}],["1.3.4",{"_index":258,"t":{"1483":{"position":[[0,5]]}}}],["1.3.5",{"_index":259,"t":{"1485":{"position":[[0,5]]}}}],["1.3.6",{"_index":261,"t":{"1487":{"position":[[0,5]]}}}],["1.3.7",{"_index":263,"t":{"1489":{"position":[[0,5]]}}}],["1.4",{"_index":267,"t":{"1491":{"position":[[0,3]]}}}],["1.4.1",{"_index":268,"t":{"1492":{"position":[[0,5]]}}}],["1.4.2",{"_index":269,"t":{"1494":{"position":[[0,5]]}}}],["10",{"_index":228,"t":{"1454":{"position":[[64,2]]}}}],["100",{"_index":230,"t":{"1456":{"position":[[62,3]]}}}],["127.0.0.1",{"_index":266,"t":{"1489":{"position":[[56,9]]},"1494":{"position":[[56,9]]}}}],["2",{"_index":40,"t":{"1024":{"position":[[0,2]]},"1496":{"position":[[0,1]]}}}],["2.1",{"_index":270,"t":{"1497":{"position":[[0,3]]}}}],["2.2",{"_index":271,"t":{"1499":{"position":[[0,3]]}}}],["2.3",{"_index":272,"t":{"1501":{"position":[[0,3]]}}}],["2.4",{"_index":274,"t":{"1503":{"position":[[0,3]]}}}],["2.5",{"_index":276,"t":{"1505":{"position":[[0,3]]}}}],["2.6",{"_index":277,"t":{"1507":{"position":[[0,3]]}}}],["2.7",{"_index":278,"t":{"1509":{"position":[[0,3]]}}}],["3",{"_index":41,"t":{"1026":{"position":[[0,2]]}}}],["3.1",{"_index":280,"t":{"1511":{"position":[[0,3]]}}}],["3.1.1",{"_index":282,"t":{"1512":{"position":[[0,5]]}}}],["3.2",{"_index":283,"t":{"1514":{"position":[[0,3]]}}}],["3.2.1",{"_index":114,"t":{"1313":{"position":[[8,5]]},"1515":{"position":[[0,5]]}}}],["3.2.2",{"_index":287,"t":{"1517":{"position":[[0,5]]}}}],["30",{"_index":225,"t":{"1452":{"position":[[61,2]]}}}],["4",{"_index":42,"t":{"1028":{"position":[[0,2]]}}}],["4.1",{"_index":290,"t":{"1519":{"position":[[0,3]]}}}],["4.1.1",{"_index":292,"t":{"1520":{"position":[[0,5]]}}}],["4.1.10",{"_index":304,"t":{"1538":{"position":[[0,6]]}}}],["4.1.2",{"_index":293,"t":{"1522":{"position":[[0,5]]}}}],["4.1.3",{"_index":294,"t":{"1524":{"position":[[0,5]]}}}],["4.1.4",{"_index":297,"t":{"1526":{"position":[[0,5]]}}}],["4.1.5",{"_index":298,"t":{"1528":{"position":[[0,5]]}}}],["4.1.6",{"_index":300,"t":{"1530":{"position":[[0,5]]}}}],["4.1.7",{"_index":301,"t":{"1532":{"position":[[0,5]]}}}],["4.1.8",{"_index":302,"t":{"1534":{"position":[[0,5]]}}}],["4.1.9",{"_index":303,"t":{"1536":{"position":[[0,5]]}}}],["4.2",{"_index":305,"t":{"1540":{"position":[[0,3]]}}}],["4.2.1",{"_index":306,"t":{"1541":{"position":[[0,5]]}}}],["4.2.10",{"_index":325,"t":{"1559":{"position":[[0,6]]}}}],["4.2.11",{"_index":326,"t":{"1561":{"position":[[0,6]]}}}],["4.2.12",{"_index":328,"t":{"1563":{"position":[[0,6]]}}}],["4.2.13",{"_index":330,"t":{"1565":{"position":[[0,6]]}}}],["4.2.2",{"_index":307,"t":{"1543":{"position":[[0,5]]}}}],["4.2.3",{"_index":308,"t":{"1545":{"position":[[0,5]]}}}],["4.2.4",{"_index":309,"t":{"1547":{"position":[[0,5]]}}}],["4.2.5",{"_index":311,"t":{"1549":{"position":[[0,5]]}}}],["4.2.6",{"_index":315,"t":{"1551":{"position":[[0,5]]}}}],["4.2.7",{"_index":115,"t":{"1315":{"position":[[8,5]]},"1553":{"position":[[0,5]]}}}],["4.2.8",{"_index":318,"t":{"1555":{"position":[[0,5]]}}}],["4.2.9",{"_index":321,"t":{"1557":{"position":[[0,5]]}}}],["5",{"_index":43,"t":{"1030":{"position":[[0,2]]}}}],["5.1",{"_index":331,"t":{"1567":{"position":[[0,3]]}}}],["5.1.1",{"_index":332,"t":{"1568":{"position":[[0,5]]}}}],["5.1.2",{"_index":335,"t":{"1570":{"position":[[0,5]]}}}],["5.1.3",{"_index":337,"t":{"1572":{"position":[[0,5]]}}}],["5.1.4",{"_index":340,"t":{"1574":{"position":[[0,5]]}}}],["5.1.5",{"_index":116,"t":{"1317":{"position":[[8,5]]},"1576":{"position":[[0,5]]}}}],["5.1.6",{"_index":342,"t":{"1578":{"position":[[0,5]]}}}],["5.1.7",{"_index":345,"t":{"1580":{"position":[[0,5]]}}}],["5.1.8",{"_index":349,"t":{"1582":{"position":[[0,5]]}}}],["5.2",{"_index":353,"t":{"1584":{"position":[[0,3]]}}}],["5.2.1",{"_index":355,"t":{"1585":{"position":[[0,5]]}}}],["5.2.10",{"_index":378,"t":{"1603":{"position":[[0,6]]}}}],["5.2.11",{"_index":380,"t":{"1605":{"position":[[0,6]]}}}],["5.2.12",{"_index":382,"t":{"1607":{"position":[[0,6]]}}}],["5.2.13",{"_index":385,"t":{"1609":{"position":[[0,6]]}}}],["5.2.2",{"_index":359,"t":{"1587":{"position":[[0,5]]}}}],["5.2.3",{"_index":361,"t":{"1589":{"position":[[0,5]]}}}],["5.2.4",{"_index":367,"t":{"1591":{"position":[[0,5]]}}}],["5.2.5",{"_index":369,"t":{"1593":{"position":[[0,5]]}}}],["5.2.6",{"_index":370,"t":{"1595":{"position":[[0,5]]}}}],["5.2.7",{"_index":372,"t":{"1597":{"position":[[0,5]]}}}],["5.2.8",{"_index":373,"t":{"1599":{"position":[[0,5]]}}}],["5.2.9",{"_index":376,"t":{"1601":{"position":[[0,5]]}}}],["5.3",{"_index":387,"t":{"1611":{"position":[[0,3]]}}}],["5.3.1",{"_index":388,"t":{"1612":{"position":[[0,5]]}}}],["5.3.2",{"_index":390,"t":{"1614":{"position":[[0,5]]}}}],["5.4",{"_index":392,"t":{"1616":{"position":[[0,3]]}}}],["5.4.1",{"_index":393,"t":{"1617":{"position":[[0,5]]}}}],["5.4.2",{"_index":398,"t":{"1619":{"position":[[0,5]]}}}],["5.5",{"_index":402,"t":{"1621":{"position":[[0,3]]}}}],["5.5.1",{"_index":404,"t":{"1622":{"position":[[0,5]]}}}],["5.7",{"_index":408,"t":{"1624":{"position":[[0,3]]}}}],["5.7.1",{"_index":410,"t":{"1625":{"position":[[0,5]]}}}],["5.7.2",{"_index":415,"t":{"1627":{"position":[[0,5]]}}}],["5.7.3",{"_index":419,"t":{"1629":{"position":[[0,5]]}}}],["5.7.4",{"_index":422,"t":{"1631":{"position":[[0,5]]}}}],["600",{"_index":164,"t":{"1395":{"position":[[62,3]]},"1411":{"position":[[70,3]]}}}],["644",{"_index":136,"t":{"1371":{"position":[[79,3]]},"1375":{"position":[[87,3]]},"1379":{"position":[[78,3]]},"1383":{"position":[[73,3]]},"1387":{"position":[[78,3]]},"1399":{"position":[[66,3]]},"1403":{"position":[[75,3]]},"1409":{"position":[[78,3]]},"1520":{"position":[[66,3]]},"1524":{"position":[[68,3]]},"1528":{"position":[[76,3]]},"1532":{"position":[[74,3]]},"1536":{"position":[[81,3]]}}}],["700",{"_index":159,"t":{"1391":{"position":[[66,3]]}}}],["access",{"_index":336,"t":{"1570":{"position":[[15,6]]},"1574":{"position":[[15,6]]}}}],["account",{"_index":231,"t":{"1458":{"position":[[33,7]]},"1481":{"position":[[36,7]]},"1483":{"position":[[32,7]]},"1567":{"position":[[21,8]]},"1576":{"position":[[34,8]]},"1578":{"position":[[26,7]]}}}],["activ",{"_index":341,"t":{"1576":{"position":[[51,8]]},"1585":{"position":[[47,6]]}}}],["ad",{"_index":377,"t":{"1601":{"position":[[48,5]]}}}],["addon",{"_index":66,"t":{"1133":{"position":[[0,13]]},"1137":{"position":[[3,5]]},"1145":{"position":[[5,5]]}}}],["address",{"_index":265,"t":{"1489":{"position":[[29,7]]},"1494":{"position":[[29,7]]}}}],["admin",{"_index":53,"t":{"1110":{"position":[[7,5]]},"1568":{"position":[[30,5]]}}}],["admin.conf",{"_index":163,"t":{"1395":{"position":[[23,10]]},"1397":{"position":[[23,10]]}}}],["administr",{"_index":411,"t":{"1625":{"position":[[13,14]]}}}],["admiss",{"_index":202,"t":{"1432":{"position":[[23,9]]},"1434":{"position":[[23,9]]},"1436":{"position":[[23,9]]},"1438":{"position":[[23,9]]},"1440":{"position":[[23,9]]},"1442":{"position":[[23,9]]},"1444":{"position":[[23,9]]},"1587":{"position":[[19,9]]},"1589":{"position":[[19,9]]},"1591":{"position":[[19,9]]},"1593":{"position":[[19,9]]},"1595":{"position":[[19,9]]},"1597":{"position":[[19,9]]},"1599":{"position":[[19,9]]},"1601":{"position":[[19,9]]},"1603":{"position":[[20,9]]},"1605":{"position":[[20,9]]},"1607":{"position":[[20,9]]},"1609":{"position":[[20,9]]},"1621":{"position":[[15,9]]},"1622":{"position":[[58,9]]}}}],["agent",{"_index":9,"t":{"845":{"position":[[4,5]]},"891":{"position":[[0,5]]},"893":{"position":[[0,5]]},"917":{"position":[[0,5]]},"919":{"position":[[4,5]]},"994":{"position":[[0,5]]},"1028":{"position":[[9,5]]},"1050":{"position":[[13,5]]},"1199":{"position":[[3,5]]},"1259":{"position":[[5,5]]},"1261":{"position":[[4,5]]},"1267":{"position":[[3,5]]}}}],["allowprivilegeescal",{"_index":371,"t":{"1595":{"position":[[48,24]]}}}],["alwaysadmit",{"_index":206,"t":{"1434":{"position":[[48,11]]}}}],["alwaysallow",{"_index":197,"t":{"1426":{"position":[[66,11]]},"1543":{"position":[[66,11]]}}}],["alwayspullimag",{"_index":208,"t":{"1436":{"position":[[48,16]]}}}],["anonym",{"_index":180,"t":{"1414":{"position":[[24,9]]},"1541":{"position":[[24,9]]}}}],["api",{"_index":95,"t":{"1283":{"position":[[0,3]]},"1371":{"position":[[22,3]]},"1373":{"position":[[22,3]]},"1413":{"position":[[4,3]]},"1474":{"position":[[23,3]]}}}],["appli",{"_index":420,"t":{"1629":{"position":[[6,5]]}}}],["appropri",{"_index":192,"t":{"1422":{"position":[[97,11]]},"1424":{"position":[[73,11]]},"1452":{"position":[[70,11]]},"1454":{"position":[[73,11]]},"1456":{"position":[[72,11]]},"1460":{"position":[[60,11]]},"1462":{"position":[[79,11]]},"1464":{"position":[[87,11]]},"1466":{"position":[[59,11]]},"1468":{"position":[[56,11]]},"1470":{"position":[[71,11]]},"1472":{"position":[[44,13]]},"1477":{"position":[[71,11]]},"1483":{"position":[[76,11]]},"1485":{"position":[[56,11]]},"1497":{"position":[[68,11]]},"1503":{"position":[[78,11]]},"1545":{"position":[[58,11]]},"1557":{"position":[[80,11]]},"1559":{"position":[[87,11]]}}}],["argument",{"_index":100,"t":{"1287":{"position":[[28,9]]},"1414":{"position":[[39,8]]},"1420":{"position":[[38,8]]},"1422":{"position":[[76,9]]},"1424":{"position":[[54,8]]},"1426":{"position":[[43,8]]},"1428":{"position":[[43,8]]},"1430":{"position":[[43,8]]},"1446":{"position":[[37,8]]},"1448":{"position":[[35,8]]},"1450":{"position":[[40,8]]},"1452":{"position":[[42,8]]},"1454":{"position":[[45,8]]},"1456":{"position":[[43,8]]},"1458":{"position":[[48,8]]},"1460":{"position":[[41,8]]},"1462":{"position":[[58,9]]},"1464":{"position":[[66,9]]},"1466":{"position":[[40,8]]},"1468":{"position":[[37,8]]},"1470":{"position":[[52,8]]},"1477":{"position":[[52,8]]},"1479":{"position":[[34,8]]},"1481":{"position":[[56,8]]},"1483":{"position":[[57,8]]},"1485":{"position":[[37,8]]},"1487":{"position":[[53,8]]},"1489":{"position":[[37,8]]},"1492":{"position":[[34,8]]},"1494":{"position":[[37,8]]},"1497":{"position":[[47,9]]},"1499":{"position":[[39,8]]},"1501":{"position":[[31,8]]},"1503":{"position":[[57,9]]},"1505":{"position":[[44,8]]},"1507":{"position":[[36,8]]},"1541":{"position":[[39,8]]},"1543":{"position":[[43,8]]},"1545":{"position":[[39,8]]},"1547":{"position":[[39,8]]},"1549":{"position":[[58,8]]},"1551":{"position":[[48,8]]},"1553":{"position":[[50,8]]},"1555":{"position":[[42,8]]},"1557":{"position":[[34,8]]},"1559":{"position":[[66,9]]},"1561":{"position":[[45,8]]},"1563":{"position":[[54,8]]}}}],["assign",{"_index":379,"t":{"1603":{"position":[[62,8]]}}}],["audit",{"_index":96,"t":{"1283":{"position":[[11,5]]},"1450":{"position":[[25,5]]},"1452":{"position":[[25,5]]},"1454":{"position":[[25,5]]},"1456":{"position":[[25,5]]},"1515":{"position":[[28,5]]},"1517":{"position":[[22,5]]}}}],["auth",{"_index":181,"t":{"1414":{"position":[[34,4]]},"1416":{"position":[[30,4]]},"1499":{"position":[[34,4]]},"1505":{"position":[[39,4]]},"1541":{"position":[[34,4]]}}}],["authent",{"_index":281,"t":{"1511":{"position":[[4,14]]},"1512":{"position":[[25,14]]}}}],["author",{"_index":194,"t":{"1424":{"position":[[44,9]]},"1426":{"position":[[24,13]]},"1428":{"position":[[24,13]]},"1430":{"position":[[24,13]]},"1509":{"position":[[37,9]]},"1511":{"position":[[23,13]]},"1532":{"position":[[34,11]]},"1534":{"position":[[41,11]]},"1543":{"position":[[24,13]]}}}],["auto",{"_index":273,"t":{"1501":{"position":[[22,4]]},"1507":{"position":[[27,4]]}}}],["autom",{"_index":139,"t":{"1371":{"position":[[103,11]]},"1373":{"position":[[86,11]]},"1375":{"position":[[111,11]]},"1377":{"position":[[94,11]]},"1379":{"position":[[102,11]]},"1381":{"position":[[85,11]]},"1383":{"position":[[97,11]]},"1385":{"position":[[80,11]]},"1391":{"position":[[90,11]]},"1393":{"position":[[73,11]]},"1395":{"position":[[86,11]]},"1397":{"position":[[69,11]]},"1399":{"position":[[90,11]]},"1401":{"position":[[73,11]]},"1403":{"position":[[99,11]]},"1405":{"position":[[82,11]]},"1407":{"position":[[87,11]]},"1416":{"position":[[61,11]]},"1418":{"position":[[58,11]]},"1420":{"position":[[62,11]]},"1422":{"position":[[109,11]]},"1424":{"position":[[85,11]]},"1426":{"position":[[78,11]]},"1428":{"position":[[66,11]]},"1430":{"position":[[66,11]]},"1434":{"position":[[71,11]]},"1440":{"position":[[70,11]]},"1442":{"position":[[74,11]]},"1444":{"position":[[71,11]]},"1446":{"position":[[62,11]]},"1448":{"position":[[60,11]]},"1450":{"position":[[56,11]]},"1452":{"position":[[82,11]]},"1454":{"position":[[85,11]]},"1456":{"position":[[84,11]]},"1458":{"position":[[72,11]]},"1460":{"position":[[72,11]]},"1462":{"position":[[91,11]]},"1464":{"position":[[99,11]]},"1466":{"position":[[71,11]]},"1468":{"position":[[68,11]]},"1479":{"position":[[59,11]]},"1481":{"position":[[80,11]]},"1483":{"position":[[88,11]]},"1485":{"position":[[68,11]]},"1487":{"position":[[77,11]]},"1489":{"position":[[66,11]]},"1492":{"position":[[59,11]]},"1494":{"position":[[66,11]]},"1497":{"position":[[80,11]]},"1499":{"position":[[63,11]]},"1501":{"position":[[59,11]]},"1503":{"position":[[90,11]]},"1505":{"position":[[68,11]]},"1507":{"position":[[64,11]]},"1520":{"position":[[90,11]]},"1522":{"position":[[73,11]]},"1528":{"position":[[100,11]]},"1530":{"position":[[83,11]]},"1536":{"position":[[105,11]]},"1538":{"position":[[89,11]]},"1541":{"position":[[64,11]]},"1543":{"position":[[78,11]]},"1545":{"position":[[70,11]]},"1551":{"position":[[72,11]]},"1553":{"position":[[74,11]]},"1561":{"position":[[74,11]]},"1587":{"position":[[54,11]]},"1589":{"position":[[90,11]]},"1591":{"position":[[83,11]]},"1593":{"position":[[87,11]]},"1595":{"position":[[73,11]]},"1597":{"position":[[48,11]]},"1599":{"position":[[71,11]]},"1601":{"position":[[67,11]]}}}],["avoid",{"_index":346,"t":{"1580":{"position":[[6,5]]}}}],["balanc",{"_index":79,"t":{"1219":{"position":[[13,8]]}}}],["benchmark",{"_index":126,"t":{"1367":{"position":[[15,9]]}}}],["between",{"_index":413,"t":{"1625":{"position":[[39,7]]}}}],["bind",{"_index":264,"t":{"1489":{"position":[[24,4]]},"1494":{"position":[[24,4]]},"1582":{"position":[[23,5]]}}}],["bootstrap",{"_index":35,"t":{"996":{"position":[[0,9]]}}}],["boundari",{"_index":412,"t":{"1625":{"position":[[28,10]]}}}],["ca",{"_index":2,"t":{"829":{"position":[[0,2]]},"926":{"position":[[0,2]]},"928":{"position":[[6,2]]},"930":{"position":[[6,2]]},"932":{"position":[[6,2]]},"1466":{"position":[[32,2]]},"1485":{"position":[[29,2]]},"1545":{"position":[[31,2]]}}}],["cafil",{"_index":241,"t":{"1468":{"position":[[30,6]]}}}],["capabl",{"_index":375,"t":{"1599":{"position":[[60,10]]},"1601":{"position":[[54,12]]},"1603":{"position":[[49,12]]}}}],["captur",{"_index":324,"t":{"1557":{"position":[[98,7]]}}}],["cento",{"_index":17,"t":{"864":{"position":[[27,6]]}}}],["cert",{"_index":237,"t":{"1464":{"position":[[29,4]]},"1497":{"position":[[22,4]]},"1499":{"position":[[29,4]]},"1503":{"position":[[27,4]]},"1505":{"position":[[34,4]]},"1559":{"position":[[29,4]]}}}],["certfil",{"_index":235,"t":{"1462":{"position":[[30,8]]}}}],["certif",{"_index":175,"t":{"1409":{"position":[[38,11]]},"1422":{"position":[[39,11]]},"1424":{"position":[[32,11]]},"1509":{"position":[[25,11]]},"1512":{"position":[[13,11]]},"1532":{"position":[[22,11]]},"1534":{"position":[[29,11]]},"1561":{"position":[[32,12]]}}}],["chain",{"_index":317,"t":{"1553":{"position":[[43,6]]}}}],["channel",{"_index":124,"t":{"1357":{"position":[[3,8]]}}}],["ci",{"_index":125,"t":{"1367":{"position":[[0,3]]}}}],["cidr",{"_index":83,"t":{"1235":{"position":[[4,9]]}}}],["cipher",{"_index":250,"t":{"1474":{"position":[[73,7]]},"1565":{"position":[[70,7]]}}}],["cli",{"_index":26,"t":{"919":{"position":[[10,3]]},"980":{"position":[[11,3]]}}}],["client",{"_index":191,"t":{"1422":{"position":[[32,6],[65,6]]},"1466":{"position":[[25,6]]},"1499":{"position":[[22,6]]},"1505":{"position":[[27,6]]},"1512":{"position":[[6,6]]},"1534":{"position":[[22,6]]},"1545":{"position":[[24,6]]}}}],["cloud",{"_index":81,"t":{"1231":{"position":[[5,5]]}}}],["cluster",{"_index":333,"t":{"1568":{"position":[[22,7]]},"1582":{"position":[[84,7]]},"1585":{"position":[[22,7]]}}}],["clusterrol",{"_index":339,"t":{"1572":{"position":[[41,12]]}}}],["cni",{"_index":59,"t":{"1118":{"position":[[4,3]]},"1611":{"position":[[25,3]]},"1612":{"position":[[22,3]]}}}],["compon",{"_index":98,"t":{"1285":{"position":[[29,10]]}}}],["concern",{"_index":289,"t":{"1517":{"position":[[55,8]]}}}],["conclus",{"_index":117,"t":{"1319":{"position":[[0,10]]}}}],["config",{"_index":70,"t":{"1153":{"position":[[0,7]]},"1470":{"position":[[45,6]]},"1536":{"position":[[32,6]]},"1538":{"position":[[33,6]]}}}],["configur",{"_index":97,"t":{"1283":{"position":[[17,13]]},"1285":{"position":[[0,13]]},"1370":{"position":[[23,13]]},"1472":{"position":[[58,10]]},"1496":{"position":[[12,13]]},"1519":{"position":[[16,13]]},"1536":{"position":[[39,13]]},"1538":{"position":[[40,13]]},"1622":{"position":[[6,9]]}}}],["connect",{"_index":313,"t":{"1549":{"position":[[34,10]]}}}],["consid",{"_index":399,"t":{"1619":{"position":[[6,8]]}}}],["contain",{"_index":151,"t":{"1387":{"position":[[22,9]]},"1389":{"position":[[23,9]]},"1587":{"position":[[43,10]]},"1589":{"position":[[32,10]]},"1591":{"position":[[32,10]]},"1593":{"position":[[32,10]]},"1595":{"position":[[32,10]]},"1597":{"position":[[37,10]]},"1599":{"position":[[32,10]]},"1601":{"position":[[32,10]]},"1603":{"position":[[33,10]]},"1605":{"position":[[53,10]]},"1609":{"position":[[33,10]]},"1629":{"position":[[45,10]]}}}],["containerd",{"_index":7,"t":{"841":{"position":[[3,10]]}}}],["control",{"_index":48,"t":{"1058":{"position":[[8,10]]},"1120":{"position":[[0,7]]},"1189":{"position":[[3,7]]},"1215":{"position":[[16,10]]},"1231":{"position":[[11,10]]},"1287":{"position":[[0,7]]},"1291":{"position":[[0,7]]},"1293":{"position":[[0,7]]},"1295":{"position":[[0,7]]},"1297":{"position":[[0,7]]},"1299":{"position":[[0,7]]},"1301":{"position":[[0,7]]},"1303":{"position":[[0,7]]},"1305":{"position":[[0,7]]},"1307":{"position":[[0,7]]},"1309":{"position":[[0,7]]},"1311":{"position":[[0,7]]},"1313":{"position":[[0,7]]},"1315":{"position":[[0,7]]},"1317":{"position":[[0,7]]},"1349":{"position":[[18,10]]},"1369":{"position":[[0,8]]},"1370":{"position":[[4,7]]},"1375":{"position":[[22,10]]},"1377":{"position":[[22,10]]},"1403":{"position":[[23,10]]},"1405":{"position":[[23,10]]},"1432":{"position":[[33,7]]},"1434":{"position":[[33,7]]},"1436":{"position":[[33,7]]},"1438":{"position":[[33,7]]},"1440":{"position":[[33,7]]},"1442":{"position":[[33,7]]},"1444":{"position":[[33,7]]},"1476":{"position":[[4,10]]},"1585":{"position":[[61,7]]},"1621":{"position":[[25,7]]},"1622":{"position":[[68,10]]}}}],["coredn",{"_index":76,"t":{"1213":{"position":[[0,7]]}}}],["cover",{"_index":288,"t":{"1517":{"position":[[35,6]]}}}],["cpu",{"_index":72,"t":{"1177":{"position":[[0,3]]}}}],["creat",{"_index":286,"t":{"1515":{"position":[[44,7]]},"1574":{"position":[[25,6]]},"1625":{"position":[[6,6]]}}}],["credenti",{"_index":257,"t":{"1481":{"position":[[44,11]]}}}],["cryptograph",{"_index":249,"t":{"1474":{"position":[[59,13]]},"1565":{"position":[[56,13]]}}}],["data",{"_index":157,"t":{"1391":{"position":[[28,4]]},"1393":{"position":[[28,4]]}}}],["default",{"_index":90,"t":{"1275":{"position":[[22,8]]},"1551":{"position":[[39,8]]},"1576":{"position":[[18,7]]},"1631":{"position":[[10,7]]}}}],["defin",{"_index":391,"t":{"1614":{"position":[[54,7]]}}}],["definit",{"_index":418,"t":{"1627":{"position":[[75,11]]}}}],["denyserviceexternalip",{"_index":186,"t":{"1418":{"position":[[24,22]]}}}],["directori",{"_index":158,"t":{"1391":{"position":[[33,9]]},"1393":{"position":[[33,9]]},"1407":{"position":[[38,9]]}}}],["disabl",{"_index":67,"t":{"1141":{"position":[[5,7]]}}}],["docker",{"_index":5,"t":{"837":{"position":[[3,6]]},"870":{"position":[[2,6]]},"1048":{"position":[[4,6]]},"1203":{"position":[[5,6]]}}}],["docker/default",{"_index":417,"t":{"1627":{"position":[[48,14]]}}}],["egress",{"_index":61,"t":{"1120":{"position":[[14,6]]}}}],["encrypt",{"_index":243,"t":{"1470":{"position":[[25,10]]},"1472":{"position":[[19,10]]}}}],["ensur",{"_index":87,"t":{"1275":{"position":[[0,6]]},"1371":{"position":[[6,6]]},"1373":{"position":[[6,6]]},"1375":{"position":[[6,6]]},"1377":{"position":[[6,6]]},"1379":{"position":[[6,6]]},"1381":{"position":[[6,6]]},"1383":{"position":[[6,6]]},"1385":{"position":[[6,6]]},"1387":{"position":[[6,6]]},"1389":{"position":[[7,6]]},"1391":{"position":[[7,6]]},"1393":{"position":[[7,6]]},"1395":{"position":[[7,6]]},"1397":{"position":[[7,6]]},"1399":{"position":[[7,6]]},"1401":{"position":[[7,6]]},"1403":{"position":[[7,6]]},"1405":{"position":[[7,6]]},"1407":{"position":[[7,6]]},"1409":{"position":[[7,6]]},"1411":{"position":[[7,6]]},"1414":{"position":[[6,6]]},"1416":{"position":[[6,6]]},"1418":{"position":[[6,6]]},"1420":{"position":[[6,6]]},"1422":{"position":[[6,6]]},"1424":{"position":[[6,6]]},"1426":{"position":[[6,6]]},"1428":{"position":[[6,6]]},"1430":{"position":[[6,6]]},"1432":{"position":[[7,6]]},"1434":{"position":[[7,6]]},"1436":{"position":[[7,6]]},"1438":{"position":[[7,6]]},"1440":{"position":[[7,6]]},"1442":{"position":[[7,6]]},"1444":{"position":[[7,6]]},"1446":{"position":[[7,6]]},"1448":{"position":[[7,6]]},"1450":{"position":[[7,6]]},"1452":{"position":[[7,6]]},"1454":{"position":[[7,6]]},"1456":{"position":[[7,6]]},"1458":{"position":[[7,6]]},"1460":{"position":[[7,6]]},"1462":{"position":[[7,6]]},"1464":{"position":[[7,6]]},"1466":{"position":[[7,6]]},"1468":{"position":[[7,6]]},"1470":{"position":[[7,6]]},"1472":{"position":[[7,6]]},"1474":{"position":[[7,6]]},"1477":{"position":[[6,6]]},"1479":{"position":[[6,6]]},"1481":{"position":[[6,6]]},"1483":{"position":[[6,6]]},"1485":{"position":[[6,6]]},"1487":{"position":[[6,6]]},"1489":{"position":[[6,6]]},"1492":{"position":[[6,6]]},"1494":{"position":[[6,6]]},"1497":{"position":[[4,6]]},"1499":{"position":[[4,6]]},"1501":{"position":[[4,6]]},"1503":{"position":[[4,6]]},"1505":{"position":[[4,6]]},"1507":{"position":[[4,6]]},"1509":{"position":[[4,6]]},"1515":{"position":[[6,6]]},"1517":{"position":[[6,6]]},"1520":{"position":[[6,6]]},"1522":{"position":[[6,6]]},"1524":{"position":[[38,6]]},"1526":{"position":[[38,6]]},"1528":{"position":[[6,6]]},"1530":{"position":[[6,6]]},"1532":{"position":[[6,6]]},"1534":{"position":[[6,6]]},"1536":{"position":[[6,6]]},"1538":{"position":[[7,6]]},"1541":{"position":[[6,6]]},"1543":{"position":[[6,6]]},"1545":{"position":[[6,6]]},"1547":{"position":[[6,6]]},"1549":{"position":[[6,6]]},"1551":{"position":[[6,6]]},"1553":{"position":[[6,6]]},"1555":{"position":[[6,6]]},"1557":{"position":[[6,6],[72,7]]},"1559":{"position":[[7,6]]},"1561":{"position":[[7,6]]},"1565":{"position":[[7,6]]},"1568":{"position":[[6,6]]},"1576":{"position":[[6,6]]},"1578":{"position":[[6,6]]},"1585":{"position":[[6,6]]},"1612":{"position":[[6,6]]},"1614":{"position":[[6,6]]},"1627":{"position":[[6,6]]}}}],["enterpris",{"_index":15,"t":{"864":{"position":[[8,10]]}}}],["environ",{"_index":396,"t":{"1617":{"position":[[52,11]]}}}],["escal",{"_index":352,"t":{"1582":{"position":[[45,8]]}}}],["estargz",{"_index":22,"t":{"876":{"position":[[3,7]]},"877":{"position":[[19,8]]},"879":{"position":[[10,7]]}}}],["etcd",{"_index":38,"t":{"1015":{"position":[[6,4]]},"1187":{"position":[[3,4]]},"1383":{"position":[[22,4]]},"1385":{"position":[[22,4]]},"1391":{"position":[[23,4]]},"1393":{"position":[[23,4]]},"1462":{"position":[[25,4],[45,4]]},"1468":{"position":[[25,4]]},"1496":{"position":[[2,4]]},"1509":{"position":[[59,4]]}}}],["etcd:etcd",{"_index":161,"t":{"1393":{"position":[[63,9]]}}}],["etcdctl",{"_index":6,"t":{"839":{"position":[[3,7]]}}}],["event",{"_index":322,"t":{"1557":{"position":[[24,5],[92,5]]}}}],["eventratelimit",{"_index":204,"t":{"1432":{"position":[[48,14]]}}}],["execut",{"_index":99,"t":{"1287":{"position":[[14,9]]}}}],["exist",{"_index":296,"t":{"1524":{"position":[[31,6]]},"1526":{"position":[[31,6]]}}}],["extens",{"_index":403,"t":{"1621":{"position":[[4,10]]}}}],["extern",{"_index":400,"t":{"1619":{"position":[[15,8]]}}}],["fals",{"_index":182,"t":{"1414":{"position":[[58,5]]},"1448":{"position":[[54,5]]},"1479":{"position":[[53,5]]},"1492":{"position":[[53,5]]},"1541":{"position":[[58,5]]},"1561":{"position":[[68,5]]}}}],["file",{"_index":132,"t":{"1370":{"position":[[37,5]]},"1371":{"position":[[51,4]]},"1373":{"position":[[51,4]]},"1375":{"position":[[59,4]]},"1377":{"position":[[59,4]]},"1379":{"position":[[50,4]]},"1381":{"position":[[50,4]]},"1383":{"position":[[45,4]]},"1385":{"position":[[45,4]]},"1387":{"position":[[50,4]]},"1389":{"position":[[51,4]]},"1395":{"position":[[34,4]]},"1397":{"position":[[34,4]]},"1399":{"position":[[38,4]]},"1401":{"position":[[38,4]]},"1403":{"position":[[47,4]]},"1405":{"position":[[47,4]]},"1407":{"position":[[52,4]]},"1409":{"position":[[50,4]]},"1411":{"position":[[42,4]]},"1416":{"position":[[35,4]]},"1464":{"position":[[34,4],[61,4]]},"1466":{"position":[[35,4]]},"1483":{"position":[[52,4]]},"1485":{"position":[[32,4]]},"1497":{"position":[[27,4],[42,4]]},"1503":{"position":[[32,4],[52,4]]},"1519":{"position":[[30,5]]},"1520":{"position":[[38,4]]},"1522":{"position":[[38,4]]},"1524":{"position":[[26,4]]},"1526":{"position":[[26,4]]},"1528":{"position":[[48,4]]},"1530":{"position":[[48,4]]},"1532":{"position":[[46,4]]},"1534":{"position":[[53,4]]},"1536":{"position":[[53,4]]},"1538":{"position":[[54,4]]},"1545":{"position":[[34,4]]},"1559":{"position":[[34,4],[61,4]]},"1617":{"position":[[30,5]]}}}],["flannel",{"_index":55,"t":{"1114":{"position":[[0,7]]}}}],["gc",{"_index":253,"t":{"1477":{"position":[[39,2]]}}}],["gener",{"_index":409,"t":{"1624":{"position":[[4,7]]}}}],["group",{"_index":348,"t":{"1580":{"position":[[34,5]]}}}],["hat",{"_index":14,"t":{"864":{"position":[[4,3]]}}}],["helm",{"_index":47,"t":{"1058":{"position":[[3,4]]},"1062":{"position":[[2,4]]},"1145":{"position":[[0,4]]}}}],["helmchartconfig",{"_index":49,"t":{"1060":{"position":[[3,15]]}}}],["host",{"_index":84,"t":{"1273":{"position":[[0,4]]},"1589":{"position":[[64,4]]},"1591":{"position":[[64,4]]},"1593":{"position":[[64,4]]}}}],["hostnam",{"_index":319,"t":{"1555":{"position":[[24,8]]}}}],["hostpath",{"_index":383,"t":{"1607":{"position":[[33,8]]}}}],["hostport",{"_index":386,"t":{"1609":{"position":[[54,9]]}}}],["hostprocess",{"_index":381,"t":{"1605":{"position":[[41,11]]}}}],["http",{"_index":4,"t":{"835":{"position":[[3,4]]},"1420":{"position":[[32,5]]}}}],["id",{"_index":365,"t":{"1589":{"position":[[77,2]]}}}],["idl",{"_index":314,"t":{"1549":{"position":[[45,4]]}}}],["imag",{"_index":405,"t":{"1622":{"position":[[16,5]]}}}],["imagepolicywebhook",{"_index":407,"t":{"1622":{"position":[[39,18]]}}}],["imperson",{"_index":351,"t":{"1582":{"position":[[29,11]]}}}],["includ",{"_index":199,"t":{"1428":{"position":[[52,8]]},"1430":{"position":[[52,8]]}}}],["ingress",{"_index":44,"t":{"1040":{"position":[[8,7]]},"1215":{"position":[[8,7]]}}}],["interfac",{"_index":153,"t":{"1387":{"position":[[40,9]]},"1389":{"position":[[41,9]]}}}],["ipc",{"_index":368,"t":{"1591":{"position":[[69,3]]}}}],["ipsec",{"_index":57,"t":{"1116":{"position":[[14,5]]}}}],["iptabl",{"_index":12,"t":{"862":{"position":[[3,8]]},"1205":{"position":[[0,8]]},"1553":{"position":[[29,8]]}}}],["ipv4",{"_index":62,"t":{"1122":{"position":[[3,5]]}}}],["ipv6",{"_index":63,"t":{"1122":{"position":[[11,5]]},"1124":{"position":[[3,4]]}}}],["issu",{"_index":102,"t":{"1289":{"position":[[6,6]]}}}],["issuer",{"_index":28,"t":{"934":{"position":[[15,6]]}}}],["k3",{"_index":1,"t":{"822":{"position":[[4,4]]},"824":{"position":[[5,4]]},"870":{"position":[[13,3]]},"879":{"position":[[3,3]]},"889":{"position":[[4,3]]},"919":{"position":[[0,3]]},"980":{"position":[[0,3]]},"1038":{"position":[[0,3]]},"1042":{"position":[[0,3]]},"1046":{"position":[[0,3]]},"1048":{"position":[[15,3]]},"1050":{"position":[[0,3]]},"1052":{"position":[[6,3]]},"1074":{"position":[[8,3]]},"1076":{"position":[[3,3]]},"1079":{"position":[[9,3]]},"1128":{"position":[[4,3]]},"1173":{"position":[[0,3]]},"1257":{"position":[[8,3]]},"1259":{"position":[[13,3]]},"1261":{"position":[[0,3]]},"1327":{"position":[[0,3]]},"1342":{"position":[[3,3]]},"1359":{"position":[[9,3]]},"1361":{"position":[[12,3]]},"1363":{"position":[[3,3]]},"1367":{"position":[[33,3]]}}}],["kernel",{"_index":89,"t":{"1275":{"position":[[15,6]]},"1551":{"position":[[32,6]]}}}],["key",{"_index":177,"t":{"1411":{"position":[[38,3]]},"1422":{"position":[[72,3]]},"1464":{"position":[[57,3]]},"1483":{"position":[[48,3]]},"1497":{"position":[[38,3]]},"1503":{"position":[[48,3]]},"1517":{"position":[[42,3]]},"1559":{"position":[[57,3]]}}}],["keyfil",{"_index":236,"t":{"1462":{"position":[[50,7]]}}}],["known",{"_index":101,"t":{"1289":{"position":[[0,5]]}}}],["kubeconfig",{"_index":30,"t":{"957":{"position":[[3,10]]},"1524":{"position":[[15,10]]},"1526":{"position":[[15,10]]},"1528":{"position":[[24,10]]},"1530":{"position":[[24,10]]}}}],["kubectl",{"_index":36,"t":{"1001":{"position":[[3,7]]}}}],["kubelet",{"_index":188,"t":{"1420":{"position":[[24,7]]},"1422":{"position":[[24,7],[57,7]]},"1424":{"position":[[24,7]]},"1520":{"position":[[22,7]]},"1522":{"position":[[22,7]]},"1536":{"position":[[22,7]]},"1538":{"position":[[23,7]]},"1540":{"position":[[4,7]]},"1565":{"position":[[23,7]]}}}],["kubelet.conf",{"_index":299,"t":{"1528":{"position":[[35,12]]},"1530":{"position":[[35,12]]}}}],["kubernet",{"_index":32,"t":{"972":{"position":[[0,10]]},"974":{"position":[[0,10]]},"1038":{"position":[[6,10]]},"1100":{"position":[[3,10]]},"1277":{"position":[[0,10]]},"1285":{"position":[[18,10]]},"1367":{"position":[[4,10],[42,10]]},"1407":{"position":[[23,10]]},"1409":{"position":[[23,10]]},"1411":{"position":[[23,10]]},"1582":{"position":[[73,10]]}}}],["lazi",{"_index":23,"t":{"876":{"position":[[13,4]]},"877":{"position":[[4,4]]},"879":{"position":[[20,4]]}}}],["level",{"_index":85,"t":{"1273":{"position":[[5,5]]},"1557":{"position":[[60,5]]}}}],["limit",{"_index":350,"t":{"1582":{"position":[[6,5]]}}}],["linux",{"_index":16,"t":{"864":{"position":[[19,5]]}}}],["listen",{"_index":31,"t":{"962":{"position":[[0,9]]}}}],["load",{"_index":78,"t":{"1219":{"position":[[8,4]]}}}],["log",{"_index":25,"t":{"899":{"position":[[0,7]]},"960":{"position":[[0,7]]},"1450":{"position":[[31,3]]},"1452":{"position":[[31,3]]},"1454":{"position":[[31,3]]},"1456":{"position":[[31,3]]},"1514":{"position":[[4,7]]}}}],["longhorn",{"_index":120,"t":{"1335":{"position":[[3,8]]}}}],["lookup",{"_index":232,"t":{"1458":{"position":[[41,6]]}}}],["make",{"_index":247,"t":{"1474":{"position":[[39,5]]},"1553":{"position":[[24,4]]},"1565":{"position":[[36,5]]}}}],["manag",{"_index":82,"t":{"1231":{"position":[[22,7]]},"1375":{"position":[[33,7]]},"1377":{"position":[[33,7]]},"1476":{"position":[[15,7]]},"1616":{"position":[[12,10]]}}}],["manager.conf",{"_index":170,"t":{"1403":{"position":[[34,12]]},"1405":{"position":[[34,12]]}}}],["manual",{"_index":154,"t":{"1387":{"position":[[102,8]]},"1389":{"position":[[86,8]]},"1409":{"position":[[102,8]]},"1411":{"position":[[74,8]]},"1414":{"position":[[64,8]]},"1432":{"position":[[70,8]]},"1436":{"position":[[72,8]]},"1438":{"position":[[108,8]]},"1470":{"position":[[83,8]]},"1472":{"position":[[69,8]]},"1474":{"position":[[81,8]]},"1477":{"position":[[83,8]]},"1509":{"position":[[64,8]]},"1512":{"position":[[69,8]]},"1515":{"position":[[52,8]]},"1517":{"position":[[64,8]]},"1524":{"position":[[92,8]]},"1526":{"position":[[75,8]]},"1532":{"position":[[98,8]]},"1534":{"position":[[88,8]]},"1547":{"position":[[60,8]]},"1549":{"position":[[83,8]]},"1555":{"position":[[62,8]]},"1557":{"position":[[106,8]]},"1559":{"position":[[99,8]]},"1563":{"position":[[78,8]]},"1565":{"position":[[78,8]]},"1568":{"position":[[69,8]]},"1570":{"position":[[33,8]]},"1572":{"position":[[54,8]]},"1574":{"position":[[37,8]]},"1576":{"position":[[66,8]]},"1578":{"position":[[74,8]]},"1580":{"position":[[40,8]]},"1582":{"position":[[92,8]]},"1585":{"position":[[88,8]]},"1603":{"position":[[71,8]]},"1605":{"position":[[64,8]]},"1607":{"position":[[50,8]]},"1609":{"position":[[64,8]]},"1612":{"position":[[58,8]]},"1614":{"position":[[62,8]]},"1617":{"position":[[74,8]]},"1619":{"position":[[39,8]]},"1622":{"position":[[79,8]]},"1625":{"position":[[74,8]]},"1627":{"position":[[87,8]]},"1629":{"position":[[56,8]]},"1631":{"position":[[47,8]]}}}],["maxag",{"_index":224,"t":{"1452":{"position":[[35,6]]}}}],["maxbackup",{"_index":227,"t":{"1454":{"position":[[35,9]]}}}],["maxsiz",{"_index":229,"t":{"1456":{"position":[[35,7]]}}}],["mechan",{"_index":357,"t":{"1585":{"position":[[69,9]]}}}],["minim",{"_index":284,"t":{"1515":{"position":[[20,7]]},"1570":{"position":[[6,8]]},"1572":{"position":[[6,8]]},"1574":{"position":[[6,8]]},"1587":{"position":[[6,8]]},"1589":{"position":[[6,8]]},"1591":{"position":[[6,8]]},"1593":{"position":[[6,8]]},"1595":{"position":[[6,8]]},"1597":{"position":[[6,8]]},"1599":{"position":[[6,8]]},"1601":{"position":[[6,8]]},"1603":{"position":[[7,8]]},"1605":{"position":[[7,8]]},"1607":{"position":[[7,8]]},"1609":{"position":[[7,8]]}}}],["mirror",{"_index":69,"t":{"1151":{"position":[[0,7]]}}}],["mode",{"_index":196,"t":{"1426":{"position":[[38,4]]},"1428":{"position":[[38,4]]},"1430":{"position":[[38,4]]},"1543":{"position":[[38,4]]}}}],["more",{"_index":137,"t":{"1371":{"position":[[86,4]]},"1375":{"position":[[94,4]]},"1379":{"position":[[85,4]]},"1383":{"position":[[80,4]]},"1387":{"position":[[85,4]]},"1391":{"position":[[73,4]]},"1395":{"position":[[69,4]]},"1399":{"position":[[73,4]]},"1403":{"position":[[82,4]]},"1409":{"position":[[85,4]]},"1520":{"position":[[73,4]]},"1524":{"position":[[75,4]]},"1528":{"position":[[83,4]]},"1532":{"position":[[81,4]]},"1536":{"position":[[88,4]]}}}],["mount",{"_index":343,"t":{"1578":{"position":[[50,7]]}}}],["namespac",{"_index":366,"t":{"1589":{"position":[[80,9]]},"1591":{"position":[[73,9]]},"1593":{"position":[[77,9]]},"1614":{"position":[[22,10]]},"1625":{"position":[[63,10]]},"1631":{"position":[[18,9]]}}}],["namespacelifecycl",{"_index":214,"t":{"1442":{"position":[[48,18]]}}}],["nativ",{"_index":58,"t":{"1116":{"position":[[34,6]]}}}],["necessari",{"_index":344,"t":{"1578":{"position":[[64,9]]}}}],["net_raw",{"_index":374,"t":{"1599":{"position":[[52,7]]}}}],["network",{"_index":152,"t":{"1387":{"position":[[32,7]]},"1389":{"position":[[33,7]]},"1593":{"position":[[69,7]]},"1611":{"position":[[4,7]]}}}],["networkpolici",{"_index":94,"t":{"1281":{"position":[[0,15]]},"1612":{"position":[[42,15]]},"1614":{"position":[[38,15]]}}}],["node",{"_index":131,"t":{"1370":{"position":[[18,4]]},"1428":{"position":[[61,4]]},"1496":{"position":[[7,4]]},"1519":{"position":[[11,4]]}}}],["noderestrict",{"_index":215,"t":{"1444":{"position":[[48,15]]}}}],["nvidia",{"_index":8,"t":{"843":{"position":[[0,6]]}}}],["on",{"_index":356,"t":{"1585":{"position":[[43,3]]}}}],["over",{"_index":395,"t":{"1617":{"position":[[36,4]]}}}],["overrid",{"_index":320,"t":{"1555":{"position":[[33,8]]}}}],["overview",{"_index":121,"t":{"1347":{"position":[[0,8]]}}}],["ownership",{"_index":141,"t":{"1373":{"position":[[56,9]]},"1377":{"position":[[64,9]]},"1381":{"position":[[55,9]]},"1385":{"position":[[50,9]]},"1389":{"position":[[56,9]]},"1393":{"position":[[43,9]]},"1397":{"position":[[39,9]]},"1401":{"position":[[43,9]]},"1405":{"position":[[52,9]]},"1407":{"position":[[57,9]]},"1522":{"position":[[43,9]]},"1526":{"position":[[45,9]]},"1530":{"position":[[53,9]]},"1534":{"position":[[58,9]]},"1538":{"position":[[59,9]]}}}],["paramet",{"_index":184,"t":{"1416":{"position":[[40,9]]}}}],["path",{"_index":222,"t":{"1450":{"position":[[35,4]]}}}],["peer",{"_index":275,"t":{"1503":{"position":[[22,4],[43,4]]},"1505":{"position":[[22,4]]},"1507":{"position":[[22,4]]}}}],["permiss",{"_index":135,"t":{"1371":{"position":[[56,11]]},"1375":{"position":[[64,11]]},"1379":{"position":[[55,11]]},"1383":{"position":[[50,11]]},"1387":{"position":[[55,11]]},"1391":{"position":[[43,11]]},"1395":{"position":[[39,11]]},"1399":{"position":[[43,11]]},"1403":{"position":[[52,11]]},"1409":{"position":[[55,11]]},"1411":{"position":[[47,11]]},"1520":{"position":[[43,11]]},"1524":{"position":[[45,11]]},"1528":{"position":[[53,11]]},"1532":{"position":[[51,11]]},"1536":{"position":[[62,11]]},"1582":{"position":[[54,11]]}}}],["pi",{"_index":20,"t":{"868":{"position":[[10,2]]}}}],["pki",{"_index":173,"t":{"1407":{"position":[[34,3]]},"1409":{"position":[[34,3]]},"1411":{"position":[[34,3]]}}}],["place",{"_index":358,"t":{"1585":{"position":[[82,5]]}}}],["plane",{"_index":60,"t":{"1120":{"position":[[8,5]]},"1189":{"position":[[11,5]]},"1287":{"position":[[8,5]]},"1370":{"position":[[12,5]]}}}],["plugin",{"_index":203,"t":{"1432":{"position":[[41,6]]},"1434":{"position":[[41,6]]},"1436":{"position":[[41,6]]},"1438":{"position":[[41,6]]},"1440":{"position":[[41,6]]},"1442":{"position":[[41,6]]},"1444":{"position":[[41,6]]}}}],["pod",{"_index":93,"t":{"1279":{"position":[[0,3]]},"1371":{"position":[[33,3]]},"1373":{"position":[[33,3]]},"1375":{"position":[[41,3]]},"1377":{"position":[[41,3]]},"1379":{"position":[[32,3]]},"1381":{"position":[[32,3]]},"1383":{"position":[[27,3]]},"1385":{"position":[[27,3]]},"1477":{"position":[[35,3]]},"1574":{"position":[[32,4]]},"1584":{"position":[[4,3]]},"1627":{"position":[[71,3]]},"1629":{"position":[[36,4]]}}}],["pod.yaml",{"_index":119,"t":{"1333":{"position":[[0,8]]},"1339":{"position":[[0,8]]}}}],["podsecuritypolici",{"_index":211,"t":{"1438":{"position":[[78,17]]}}}],["polici",{"_index":285,"t":{"1515":{"position":[[34,6]]},"1517":{"position":[[28,6]]},"1585":{"position":[[54,6]]},"1611":{"position":[[12,8]]},"1624":{"position":[[12,8]]}}}],["port",{"_index":217,"t":{"1446":{"position":[[32,4]]},"1547":{"position":[[34,4]]}}}],["prefer",{"_index":394,"t":{"1617":{"position":[[6,6]]}}}],["privat",{"_index":238,"t":{"1464":{"position":[[49,7]]},"1483":{"position":[[40,7]]},"1559":{"position":[[49,7]]}}}],["privileg",{"_index":360,"t":{"1587":{"position":[[32,10]]}}}],["process",{"_index":364,"t":{"1589":{"position":[[69,7]]}}}],["profil",{"_index":220,"t":{"1448":{"position":[[25,9]]},"1479":{"position":[[24,9]]},"1492":{"position":[[24,9]]},"1627":{"position":[[30,7]]}}}],["protect",{"_index":88,"t":{"1275":{"position":[[7,7]]},"1551":{"position":[[24,7]]}}}],["proven",{"_index":406,"t":{"1622":{"position":[[22,10]]}}}],["provid",{"_index":244,"t":{"1470":{"position":[[36,8]]},"1472":{"position":[[30,9]]}}}],["proxi",{"_index":295,"t":{"1524":{"position":[[9,5]]},"1526":{"position":[[9,5]]}}}],["pull",{"_index":24,"t":{"876":{"position":[[18,12]]},"877":{"position":[[9,7]]},"879":{"position":[[25,7]]}}}],["pvc.yaml",{"_index":118,"t":{"1331":{"position":[[0,8]]},"1337":{"position":[[0,8]]}}}],["qp",{"_index":323,"t":{"1557":{"position":[[30,3]]}}}],["raspberri",{"_index":19,"t":{"868":{"position":[[0,9]]}}}],["rbac",{"_index":52,"t":{"1102":{"position":[[4,4]]},"1430":{"position":[[61,4]]},"1567":{"position":[[4,4]]}}}],["read",{"_index":310,"t":{"1547":{"position":[[24,4]]}}}],["red",{"_index":13,"t":{"864":{"position":[[0,3]]}}}],["request",{"_index":233,"t":{"1460":{"position":[[25,7]]}}}],["requir",{"_index":86,"t":{"1273":{"position":[[11,12]]},"1277":{"position":[[19,12]]},"1568":{"position":[[60,8]]}}}],["resourc",{"_index":414,"t":{"1625":{"position":[[47,9]]}}}],["restrict",{"_index":138,"t":{"1371":{"position":[[91,11]]},"1375":{"position":[[99,11]]},"1379":{"position":[[90,11]]},"1383":{"position":[[85,11]]},"1387":{"position":[[90,11]]},"1391":{"position":[[78,11]]},"1395":{"position":[[74,11]]},"1399":{"position":[[78,11]]},"1403":{"position":[[87,11]]},"1409":{"position":[[90,11]]},"1520":{"position":[[78,11]]},"1524":{"position":[[80,11]]},"1528":{"position":[[88,11]]},"1532":{"position":[[86,11]]},"1536":{"position":[[93,11]]}}}],["role",{"_index":334,"t":{"1568":{"position":[[36,4]]},"1572":{"position":[[31,5]]}}}],["root",{"_index":260,"t":{"1485":{"position":[[24,4]]},"1597":{"position":[[32,4]]}}}],["root:root",{"_index":142,"t":{"1373":{"position":[[76,9]]},"1377":{"position":[[84,9]]},"1381":{"position":[[75,9]]},"1385":{"position":[[70,9]]},"1389":{"position":[[76,9]]},"1397":{"position":[[59,9]]},"1401":{"position":[[63,9]]},"1405":{"position":[[72,9]]},"1407":{"position":[[77,9]]},"1522":{"position":[[63,9]]},"1526":{"position":[[65,9]]},"1530":{"position":[[73,9]]},"1534":{"position":[[78,9]]},"1538":{"position":[[79,9]]}}}],["rootless",{"_index":11,"t":{"847":{"position":[[3,8]]},"849":{"position":[[0,8]]},"851":{"position":[[3,8]]},"855":{"position":[[0,8]]},"1207":{"position":[[0,8]]}}}],["rotat",{"_index":327,"t":{"1561":{"position":[[25,6]]}}}],["rotatekubeletservercertif",{"_index":262,"t":{"1487":{"position":[[22,30]]},"1563":{"position":[[23,30]]}}}],["runtim",{"_index":92,"t":{"1277":{"position":[[11,7]]}}}],["schedul",{"_index":146,"t":{"1379":{"position":[[22,9]]},"1381":{"position":[[22,9]]},"1491":{"position":[[4,9]]}}}],["scheduler.conf",{"_index":167,"t":{"1399":{"position":[[23,14]]},"1401":{"position":[[23,14]]}}}],["seccomp",{"_index":416,"t":{"1627":{"position":[[22,7]]}}}],["secret",{"_index":29,"t":{"940":{"position":[[0,6]]},"944":{"position":[[6,6]]},"946":{"position":[[0,6]]},"966":{"position":[[0,6]]},"1323":{"position":[[0,6]]},"1570":{"position":[[25,7]]},"1616":{"position":[[4,7]]},"1617":{"position":[[19,7],[41,7]]},"1619":{"position":[[24,6]]}}}],["secur",{"_index":33,"t":{"986":{"position":[[0,6]]},"1279":{"position":[[4,8]]},"1446":{"position":[[25,6]]},"1517":{"position":[[46,8]]},"1584":{"position":[[8,8]]}}}],["securitycontext",{"_index":421,"t":{"1629":{"position":[[12,15]]}}}],["securitycontextdeni",{"_index":210,"t":{"1438":{"position":[[48,19]]}}}],["selinux",{"_index":21,"t":{"872":{"position":[[0,7]]},"874":{"position":[[3,7]]}}}],["server",{"_index":10,"t":{"845":{"position":[[12,11]]},"847":{"position":[[17,11]]},"851":{"position":[[12,6]]},"980":{"position":[[4,6]]},"992":{"position":[[0,6]]},"1024":{"position":[[6,6]]},"1026":{"position":[[11,6]]},"1050":{"position":[[4,6]]},"1173":{"position":[[4,6]]},"1191":{"position":[[9,6]]},"1197":{"position":[[3,6]]},"1257":{"position":[[12,6]]},"1283":{"position":[[4,6]]},"1371":{"position":[[26,6]]},"1373":{"position":[[26,6]]},"1413":{"position":[[8,6]]},"1474":{"position":[[27,6]]}}}],["servic",{"_index":77,"t":{"1219":{"position":[[0,7]]},"1458":{"position":[[25,7]]},"1481":{"position":[[28,7]]},"1483":{"position":[[24,7]]},"1520":{"position":[[30,7]]},"1522":{"position":[[30,7]]},"1567":{"position":[[13,7]]},"1576":{"position":[[26,7]]},"1578":{"position":[[18,7]]}}}],["serviceaccount",{"_index":27,"t":{"934":{"position":[[0,14]]},"1440":{"position":[[48,14]]}}}],["servicelb",{"_index":80,"t":{"1221":{"position":[[0,9]]},"1225":{"position":[[3,9]]},"1227":{"position":[[3,9]]},"1229":{"position":[[3,9]]}}}],["set",{"_index":91,"t":{"1275":{"position":[[34,3]]},"1371":{"position":[[72,3]]},"1373":{"position":[[69,3]]},"1375":{"position":[[80,3]]},"1377":{"position":[[77,3]]},"1379":{"position":[[71,3]]},"1381":{"position":[[68,3]]},"1383":{"position":[[66,3]]},"1385":{"position":[[63,3]]},"1387":{"position":[[71,3]]},"1389":{"position":[[69,3]]},"1391":{"position":[[59,3]]},"1393":{"position":[[56,3]]},"1395":{"position":[[55,3]]},"1397":{"position":[[52,3]]},"1399":{"position":[[59,3]]},"1401":{"position":[[56,3]]},"1403":{"position":[[68,3]]},"1405":{"position":[[65,3]]},"1407":{"position":[[70,3]]},"1409":{"position":[[71,3]]},"1411":{"position":[[63,3]]},"1414":{"position":[[51,3]]},"1416":{"position":[[57,3]]},"1418":{"position":[[54,3]]},"1420":{"position":[[50,3]]},"1422":{"position":[[90,3]]},"1424":{"position":[[66,3]]},"1426":{"position":[[59,3]]},"1432":{"position":[[66,3]]},"1434":{"position":[[67,3]]},"1436":{"position":[[68,3]]},"1438":{"position":[[71,3]]},"1440":{"position":[[66,3]]},"1442":{"position":[[70,3]]},"1444":{"position":[[67,3]]},"1446":{"position":[[53,3]]},"1448":{"position":[[47,3]]},"1450":{"position":[[52,3]]},"1452":{"position":[[54,3]]},"1454":{"position":[[57,3]]},"1456":{"position":[[55,3]]},"1458":{"position":[[60,3]]},"1460":{"position":[[53,3]]},"1462":{"position":[[72,3]]},"1464":{"position":[[80,3]]},"1466":{"position":[[52,3]]},"1468":{"position":[[49,3]]},"1470":{"position":[[64,3]]},"1477":{"position":[[64,3]]},"1479":{"position":[[46,3]]},"1481":{"position":[[68,3]]},"1483":{"position":[[69,3]]},"1485":{"position":[[49,3]]},"1487":{"position":[[65,3]]},"1489":{"position":[[49,3]]},"1492":{"position":[[46,3]]},"1494":{"position":[[49,3]]},"1497":{"position":[[61,3]]},"1499":{"position":[[51,3]]},"1501":{"position":[[47,3]]},"1503":{"position":[[71,3]]},"1505":{"position":[[56,3]]},"1507":{"position":[[52,3]]},"1520":{"position":[[59,3]]},"1522":{"position":[[56,3]]},"1524":{"position":[[61,3]]},"1526":{"position":[[58,3]]},"1528":{"position":[[69,3]]},"1530":{"position":[[66,3]]},"1532":{"position":[[67,3]]},"1534":{"position":[[71,3]]},"1536":{"position":[[74,3]]},"1538":{"position":[[72,3]]},"1541":{"position":[[51,3]]},"1543":{"position":[[59,3]]},"1545":{"position":[[51,3]]},"1547":{"position":[[51,3]]},"1549":{"position":[[74,3]]},"1551":{"position":[[60,3]]},"1553":{"position":[[62,3]]},"1555":{"position":[[58,3]]},"1557":{"position":[[46,3]]},"1559":{"position":[[80,3]]},"1561":{"position":[[61,3]]},"1563":{"position":[[66,3]]},"1627":{"position":[[41,3]]}}}],["share",{"_index":363,"t":{"1589":{"position":[[54,5]]},"1591":{"position":[[54,5]]},"1593":{"position":[[54,5]]}}}],["short",{"_index":34,"t":{"988":{"position":[[0,5]]}}}],["skip",{"_index":68,"t":{"1143":{"position":[[3,5]]}}}],["snap",{"_index":73,"t":{"1203":{"position":[[0,4]]}}}],["specif",{"_index":134,"t":{"1371":{"position":[[37,13]]},"1373":{"position":[[37,13]]},"1375":{"position":[[45,13]]},"1377":{"position":[[45,13]]},"1379":{"position":[[36,13]]},"1381":{"position":[[36,13]]},"1383":{"position":[[31,13]]},"1385":{"position":[[31,13]]}}}],["sqlite",{"_index":37,"t":{"1011":{"position":[[3,6]]}}}],["standard",{"_index":354,"t":{"1584":{"position":[[17,9]]}}}],["storag",{"_index":401,"t":{"1619":{"position":[[31,7]]}}}],["stream",{"_index":312,"t":{"1549":{"position":[[24,9]]}}}],["strong",{"_index":248,"t":{"1474":{"position":[[52,6]]},"1565":{"position":[[49,6]]}}}],["support",{"_index":389,"t":{"1612":{"position":[[33,8]]}}}],["system",{"_index":122,"t":{"1349":{"position":[[3,6]]}}}],["system:mast",{"_index":347,"t":{"1580":{"position":[[19,14]]}}}],["tailscal",{"_index":64,"t":{"1130":{"position":[[3,9]]}}}],["termin",{"_index":252,"t":{"1477":{"position":[[24,10]]}}}],["threshold",{"_index":254,"t":{"1477":{"position":[[42,9]]}}}],["timeout",{"_index":234,"t":{"1460":{"position":[[33,7]]},"1549":{"position":[[50,7]]}}}],["tl",{"_index":71,"t":{"1155":{"position":[[3,3]]},"1157":{"position":[[3,3]]},"1464":{"position":[[25,3],[45,3]]},"1501":{"position":[[27,3]]},"1507":{"position":[[32,3]]},"1559":{"position":[[25,3],[45,3]]}}}],["token",{"_index":3,"t":{"833":{"position":[[0,5]]},"984":{"position":[[0,5]]},"990":{"position":[[0,5]]},"1050":{"position":[[19,5]]},"1416":{"position":[[24,5]]},"1578":{"position":[[34,6]]}}}],["traefik",{"_index":45,"t":{"1040":{"position":[[19,8]]},"1215":{"position":[[0,7]]}}}],["true",{"_index":189,"t":{"1420":{"position":[[57,4]]},"1458":{"position":[[67,4]]},"1481":{"position":[[75,4]]},"1487":{"position":[[72,4]]},"1499":{"position":[[58,4]]},"1501":{"position":[[54,4]]},"1505":{"position":[[63,4]]},"1507":{"position":[[59,4]]},"1551":{"position":[[67,4]]},"1553":{"position":[[69,4]]},"1563":{"position":[[73,4]]}}}],["ubuntu",{"_index":18,"t":{"866":{"position":[[0,6]]}}}],["uniqu",{"_index":279,"t":{"1509":{"position":[[18,6]]}}}],["upgrad",{"_index":123,"t":{"1349":{"position":[[10,7]]}}}],["us",{"_index":212,"t":{"1438":{"position":[[103,4]]},"1474":{"position":[[45,3]]},"1481":{"position":[[24,3]]},"1509":{"position":[[50,4]]},"1512":{"position":[[54,4]]},"1565":{"position":[[42,3]]},"1568":{"position":[[49,4]]},"1572":{"position":[[24,3]]},"1576":{"position":[[60,5]]},"1580":{"position":[[12,3]]},"1582":{"position":[[12,3]]},"1609":{"position":[[50,3]]},"1612":{"position":[[29,3]]},"1617":{"position":[[13,5]]},"1622":{"position":[[33,5]]},"1625":{"position":[[57,5]]},"1631":{"position":[[42,4]]}}}],["user",{"_index":54,"t":{"1110":{"position":[[13,4]]},"1512":{"position":[[63,5]]}}}],["util",{"_index":316,"t":{"1553":{"position":[[38,4]]}}}],["v1.22",{"_index":128,"t":{"1367":{"position":[[53,5]]}}}],["v1.23",{"_index":127,"t":{"1367":{"position":[[25,5]]}}}],["v1.24",{"_index":129,"t":{"1367":{"position":[[62,5]]}}}],["v1.24.x",{"_index":74,"t":{"1209":{"position":[[7,7]]}}}],["v1.25.x",{"_index":75,"t":{"1209":{"position":[[19,7]]}}}],["v2",{"_index":50,"t":{"1062":{"position":[[7,2]]}}}],["variabl",{"_index":397,"t":{"1617":{"position":[[64,9]]}}}],["verifi",{"_index":329,"t":{"1563":{"position":[[7,6]]}}}],["volum",{"_index":384,"t":{"1607":{"position":[[42,7]]}}}],["vpn",{"_index":65,"t":{"1130":{"position":[[13,3]]}}}],["wildcard",{"_index":338,"t":{"1572":{"position":[[15,8]]}}}],["window",{"_index":46,"t":{"1042":{"position":[[7,7]]},"1605":{"position":[[33,7]]}}}],["wireguard",{"_index":56,"t":{"1116":{"position":[[2,9],[24,9]]}}}],["wish",{"_index":362,"t":{"1589":{"position":[[43,7]]},"1591":{"position":[[43,7]]},"1593":{"position":[[43,7]]}}}],["worker",{"_index":291,"t":{"1519":{"position":[[4,6]]}}}],["yaml",{"_index":51,"t":{"1070":{"position":[[7,4]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":821,"t":"K3s 是轻量级的 Kubernetes。K3s 易于安装，仅需要 Kubernetes 内存的一半，所有组件都在一个小于 100 MB 的二进制文件中。 它适用于： Edge IoT CI Development ARM 嵌入 K8s 不去学习那么多的 Kubernetes 高深知识也能上手使用","s":"K3s - 轻量级 Kubernetes","u":"/zh/","h":"","p":820},{"i":823,"t":"K3s 是一个完全兼容的 Kubernetes 发行版，具有以下增强功能： 打包为单个二进制文件。 使用基于 sqlite3 作为默认存储机制的轻量级存储后端。同时支持使用 etcd3、MySQL 和 Postgres。 封装在简单的启动程序中，可以处理很多复杂的 TLS 和选项。 默认情况下是安全的，对轻量级环境有合理的默认值。 添加了简单但强大的 batteries-included 功能，例如： 本地存储提供程序 service load balancer Helm controller Traefik ingress controller 所有 Kubernetes control plane 组件的操作都封装在单个二进制文件和进程中。因此，K3s 支持自动化和管理复杂的集群操作（例如证书分发等）。 最大程度减轻了外部依赖性，K3s 仅需要现代内核和 cgroup 挂载。K3s 打包了所需的依赖，包括： containerd Flannel (CNI) CoreDNS Traefik (Ingress) Klipper-lb (Service LB) 嵌入式网络策略控制器 嵌入式 local-path-provisioner 主机实用程序（iptables、socat 等）","s":"什么是 K3s？","u":"/zh/","h":"","p":820},{"i":825,"t":"我们希望安装的 Kubernetes 只占用一半的内存。Kubernetes 是一个 10 个字母的单词，简写为 K8s。Kubernetes 的一半就是一个 5 个字母的单词，因此简写为 K3s。K3s 没有全称，也没有官方的发音。","s":"为什么叫 K3s?","u":"/zh/","h":"","p":820},{"i":827,"t":"本文描述了用于运行和管理 K3s 的高级设置，以及为 K3s 准备主机操作系统所需的步骤。","s":"高级选项和配置","u":"/zh/advanced","h":"","p":826},{"i":830,"t":"K3s 在第一个 Server 节点启动时生成自签名 CA 证书。这些 CA 证书的有效期为 10 年，不会自动更新。 有关使用自定义 CA 证书或更新自签名 CA 证书的信息，请参阅 k3s certificate rotate-ca 命令文档。","s":"CA 证书","u":"/zh/advanced","h":"#ca-证书","p":826},{"i":832,"t":"K3s 客户端和服务器证书自颁发日起 365 天内有效。每次启动 K3s 时，已过期或 90 天内过期的证书都会自动更新。 有关手动轮换客户端和服务器证书的信息，请参阅 k3s certificate rotate 命令文档。","s":"客户端和服务器证书","u":"/zh/advanced","h":"#客户端和服务器证书","p":826},{"i":834,"t":"默认情况下，K3s 为 Server 和 Agent 使用单个静态 Token。创建集群后不能更改此 Token。 你可以启用只能用于加入 Agent 的第二个静态 Token，或创建自动过期的临时 kubeadm 联接样式 Token。 有关详细信息，请参阅 k3s token 命令文档。","s":"Token 管理","u":"/zh/advanced","h":"#token-管理","p":826},{"i":836,"t":"如果你运行 K3s 的环境中只通过 HTTP 代理进行外部连接，你可以在 K3s 的 systemd 服务上配置代理。K3s 将使用这些代理设置，并向下传递到嵌入式 containerd 和 kubelet。 K3s 安装脚本会自动使用当前 shell 中的 HTTP_PROXY、HTTPS_PROXY 和 NO_PROXY，以及 CONTAINERD_HTTP_PROXY、CONTAINERD_HTTPS_PROXY 和 CONTAINERD_NO_PROXY 变量（如果存在），并将它们写入 systemd 服务的环境文件，通常是： /etc/systemd/system/k3s.service.env /etc/systemd/system/k3s-agent.service.env 你也可以通过编辑这些文件来配置代理。 K3s 会自动将集群内部 Pod 和 Service IP 范围以及集群 DNS 域添加到 NO_PROXY 条目列表中。你需要确保 Kubernetes 节点本身使用的 IP 地址范围（即节点的公共和私有 IP）包含在 NO_PROXY 列表中，或者可以通过代理访问节点。 HTTP_PROXY=http://your-proxy.example.com:8888 HTTPS_PROXY=http://your-proxy.example.com:8888 NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 如果你想在不影响 K3s 和 Kubelet 的情况下为 containerd 配置代理，你可以在变量前加上 CONTAINERD_： CONTAINERD_HTTP_PROXY=http://your-proxy.example.com:8888 CONTAINERD_HTTPS_PROXY=http://your-proxy.example.com:8888 CONTAINERD_NO_PROXY=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16","s":"配置 HTTP 代理","u":"/zh/advanced","h":"#配置-http-代理","p":826},{"i":838,"t":"K3s 包含并默认为 containerd，它是一个行业标准的容器运行时。 从 Kubernetes 1.24 开始，Kubelet 不再包含 dockershim，该组件允许 kubelet 与 dockerd 通信。 K3s 1.24 及更高版本包括了 cri-dockerd，它允许你无缝升级旧的 K3s 版本，同时继续使用 Docker 容器运行时。 要使用 Docker 而不是 containerd： 在 K3s 节点上安装 Docker。你可以使用 Rancher 的一个 Docker 安装脚本来安装 Docker： curl https://releases.rancher.com/install-docker/20.10.sh | sh 使用 --docker 选项安装 K3s： curl -sfL https://get.k3s.io | sh -s - --docker 确认集群可用： $ sudo k3s kubectl get pods --all-namespaces NAMESPACE NAME READY STATUS RESTARTS AGE kube-system local-path-provisioner-6d59f47c7-lncxn 1/1 Running 0 51s kube-system metrics-server-7566d596c8-9tnck 1/1 Running 0 51s kube-system helm-install-traefik-mbkn9 0/1 Completed 1 51s kube-system coredns-8655855d6-rtbnb 1/1 Running 0 51s kube-system svclb-traefik-jbmvl 2/2 Running 0 43s kube-system traefik-758cd5fc85-2wz97 1/1 Running 0 43s 确认 Docker 容器正在运行： $ sudo docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 3e4d34729602 897ce3c5fc8f \"entry\" About a minute ago Up About a minute k8s_lb-port-443_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 bffdc9d7a65f rancher/klipper-lb \"entry\" About a minute ago Up About a minute k8s_lb-port-80_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 436b85c5e38d rancher/library-traefik \"/traefik --configfi…\" About a minute ago Up About a minute k8s_traefik_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0 de8fded06188 rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_svclb-traefik-jbmvl_kube-system_d46f10c6-073f-4c7e-8d7a-8e7ac18f9cb0_0 7c6a30aeeb2f rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_traefik-758cd5fc85-2wz97_kube-system_07abe831-ffd6-4206-bfa1-7c9ca4fb39e7_0 ae6c58cab4a7 9d12f9848b99 \"local-path-provisio…\" About a minute ago Up About a minute k8s_local-path-provisioner_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0 be1450e1a11e 9dd718864ce6 \"/metrics-server\" About a minute ago Up About a minute k8s_metrics-server_metrics-server-7566d596c8-9tnck_kube-system_031e74b5-e9ef-47ef-a88d-fbf3f726cbc6_0 4454d14e4d3f c4d3d16fe508 \"/coredns -conf /etc…\" About a minute ago Up About a minute k8s_coredns_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0 c3675b87f96c rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_coredns-8655855d6-rtbnb_kube-system_d05725df-4fb1-410a-8e82-2b1c8278a6a1_0 4b1fddbe6ca6 rancher/pause:3.1 \"/pause\" About a minute ago Up About a minute k8s_POD_local-path-provisioner-6d59f47c7-lncxn_kube-system_2dbd22bf-6ad9-4bea-a73d-620c90a6c1c1_0 64d3517d4a95 rancher/pause:3.1 \"/pause\"","s":"使用 Docker 作为容器运行时","u":"/zh/advanced","h":"#使用-docker-作为容器运行时","p":826},{"i":840,"t":"etcdctl 提供了一个与 etcd 服务器交互的 CLI。K3s 附带 etcdctl。 如果你想使用 etcdctl 与 K3s 的嵌入式 etcd 进行交互，请参阅官方文档安装 etcdctl。 ETCD_VERSION=\"v3.5.5\" ETCD_URL=\"https://github.com/etcd-io/etcd/releases/download/${ETCD_VERSION}/etcd-${ETCD_VERSION}-linux-amd64.tar.gz\" curl -sL ${ETCD_URL} | sudo tar -zxv --strip-components=1 -C /usr/local/bin 然后，你可以将 etcdctl 配置为使用 K3s 管理的证书和密钥来进行身份验证，从而使用 etcdctl： sudo etcdctl version \\ --cacert=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt \\ --cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt \\ --key=/var/lib/rancher/k3s/server/tls/etcd/client.key","s":"使用 etcdctl","u":"/zh/advanced","h":"#使用-etcdctl","p":826},{"i":842,"t":"K3s 会在 /var/lib/rancher/k3s/agent/etc/containerd/config.toml 中为 containerd 生成 config.toml。 如果要对这个文件进行高级定制，你可以在同一目录中创建另一个名为 config.toml.tmpl 的文件，此文件将会代替默认设置。 config.toml.tmpl 是一个 Go 模板文件，并且 config.Node 结构会被传递给模板。有关如何使用该结构自定义配置文件的 Linux 和 Windows 示例，请参阅此文件夹。 config.Node golang 结构定义在这里。","s":"配置 Containerd","u":"/zh/advanced","h":"#配置-containerd","p":826},{"i":844,"t":"如果 NVIDIA 容器运行时在 K3s 启动时存在，K3s 将自动检测并配置它。 按照以下说明在节点上安装 nvidia-container 包仓库： https://nvidia.github.io/libnvidia-container/ 安装 nvidia 容器运行时包。例如： apt install -y nvidia-container-runtime cuda-drivers-fabricmanager-515 nvidia-headless-515-server 安装 K3s，如果已经安装则重启它： curl -ksL get.k3s.io | sh - 确认 K3s 已经找到 nvidia 容器运行时： grep nvidia /var/lib/rancher/k3s/agent/etc/containerd/config.toml 这将根据找到的运行时可执行文件自动将 nvidia 和/或 nvidia-experimental 运行时添加到 containerd 配置中。 你仍然必须向集群添加 RuntimeClass 定义，并通过在 Pod 规范中设置 runtimeClassName: nvidia 来部署显式请求运行时的 Pod： apiVersion: node.k8s.io/v1 kind: RuntimeClass metadata: name: nvidia handler: nvidia --- apiVersion: v1 kind: Pod metadata: name: nbody-gpu-benchmark namespace: default spec: restartPolicy: OnFailure runtimeClassName: nvidia containers: - name: cuda-container image: nvcr.io/nvidia/k8s/cuda-sample:nbody args: [\"nbody\", \"-gpu\", \"-benchmark\"] resources: limits: nvidia.com/gpu: 1 env: - name: NVIDIA_VISIBLE_DEVICES value: all - name: NVIDIA_DRIVER_CAPABILITIES value: all 请注意，NVIDIA Container Runtime 也经常与 NVIDIA Device Plugin 和 GPU Feature Discovery 一起使用，它们必须单独安装，而且需要修改以确保 Pod 规范能包括 runtimeClassName: nvidia，如前所述。","s":"NVIDIA 容器运行时支持","u":"/zh/advanced","h":"#nvidia-容器运行时支持","p":826},{"i":846,"t":"警告：此功能是实验性的。 当使用 --disable-agent 标志启动时，Server 不运行 kubelet、容器运行时或 CNI。它们不会在集群中注册 Node 资源，也不会出现在 kubectl get nodes 输出中。 因为它们不托管 kubelet，所以它们不能运行 pod，也不能由依赖枚举集群节点的 Operator 管理，包括嵌入式 etcd controller 和 system-upgrade-controller。 如果你想让 control plane 节点不被 Agent 和工作负载发现，你可以运行无 Agent 的 Server，但是代价是由于缺乏集群 Operator 支持，管理开销会增加。","s":"运行无 Agent 的 Server（实验性）","u":"/zh/advanced","h":"#运行无-agent-的-server实验性","p":826},{"i":848,"t":"警告：此功能是实验性的。 Rootless 模式允许非特权用户运行 K3s Server，这样可以保护主机上真正的 root 免受潜在的容器攻击。 有关 Rootless 模式 Kubernetes 的更多信息，请参阅此处。","s":"使用 Rootless 模式运行 Server（实验性）","u":"/zh/advanced","h":"#使用-rootless-模式运行-server实验性","p":826},{"i":850,"t":"端口 如果以 Rootless 模式运行，将创建一个新的网络命名空间。换言之，K3s 实例在网络与主机完全分离的情况下运行。 要从主机访问在 K3s 中运行的 Service，唯一的方法是设置转发到 K3s 网络命名空间的端口。 Rootless 模式下的 K3s 包含控制器，它会自动将 6443 和低于 1024 的 Service 端口绑定到偏移量为 10000 的主机。 例如，端口 80 上的 Service 在主机上会变成 10080，但 8080 会变成 8080，没有任何偏移。目前只有 LoadBalancer Service 是自动绑定的。 Cgroups 不支持 Cgroup v1 和 Hybrid v1/v2，仅支持纯 Cgroup v2。如果 K3s 在 Rootless 模式下运行时由于缺少 cgroup 而无法启动，很可能你的节点处于 Hybrid 模式，而且“丢失”的 cgroup 仍然绑定了 v1 控制器。 多节点/多进程集群 目前，我们不支持多节点无根集群或同一节点上的多个无根 k3s 进程。有关详细信息，请参阅 #6488。","s":"Rootless 模式的已知问题","u":"/zh/advanced","h":"#rootless-模式的已知问题","p":826},{"i":852,"t":"启用 cgroup v2 授权，请参阅 https://rootlesscontaine.rs/getting-started/common/cgroup2/。 此步骤是必需的。如果没有正确的 cgroups 授权，rootless kubelet 将无法启动。 从 https://github.com/k3s-io/k3s/blob/<VERSION>/k3s-rootless.service 下载 k3s-rootless.service。 确保使用了相同版本的 k3s-rootless.service 和 k3s。 将 k3s-rootless.service 安装到 ~/.config/systemd/user/k3s-rootless.service。 不支持将此文件安装为全系统服务 (/etc/systemd/...)。 根据 k3s 二进制文件的路径，你可能需要修改文件的 ExecStart=/usr/local/bin/k3s ... 行。 运行 systemctl --user daemon-reload 运行 systemctl --user enable --now k3s-rootless 运行 KUBECONFIG=~/.kube/k3s.yaml kubectl get pods -A，并确保 Pod 正在运行。 注意：由于终端会话不允许 cgroup v2 授权，因此不要尝试在终端上运行 k3s server --rootless。 如果你确实需要在终端上使用，请使用 systemd-run --user -p Delegate=yes --tty k3s server --rooless 将其包装在 systemd 范围内。","s":"启动 Rootless Server","u":"/zh/advanced","h":"#启动-rootless-server","p":826},{"i":854,"t":"Rootless K3s 使用 rootlesskit 和 slirp4netns 在主机和用户网络命名空间之间进行通信。 rootlesskit 和 slirp4nets 使用的一些配置可以通过环境变量来设置。设置它们的最佳方法是将它们添加到 k3s-rootless systemd 单元的 Environment 字段中。 变量 默认 描述 K3S_ROOTLESS_MTU 1500 为 slirp4netns 虚拟接口设置 MTU。 K3S_ROOTLESS_CIDR 10.41.0.0/16 设置 slirp4netns 虚拟接口使用的 CIDR。 K3S_ROOTLESS_ENABLE_IPV6 autotedected 启用 slirp4netns IPv6 支持。如果未指定，则在 K3s 配置为双栈时自动启用。 K3S_ROOTLESS_PORT_DRIVER builtin 选择无根 port driver，可选值是 builtin 或 slirp4netns。builtin 速度更快，但会伪装入站数据包的原始源地址。 K3S_ROOTLESS_DISABLE_HOST_LOOPBACK true 控制是否允许通过网关接口访问主机的环回地址。出于安全原因，建议不要更改此设置。","s":"高级无根配置","u":"/zh/advanced","h":"#高级无根配置","p":826},{"i":856,"t":"运行 systemctl --user status k3s-rootless 来检查 daemon 状态 运行 journalctl --user -f -u k3s-rootless 来查看​​ daemon 日志 另见 https://rootlesscontaine.rs/","s":"Rootless 模式故障排除","u":"/zh/advanced","h":"#rootless-模式故障排除","p":826},{"i":858,"t":"K3s Agent 可以通过 --node-label 和 --node-taint 选项来配置，它们会为 kubelet 添加标签和污点。这两个选项仅在注册时添加标签和/或污点，因此只能在节点首次加入集群时设置。 当前所有的 Kubernetes 版本都限制节点注册到带有 kubernetes.io 和 k8s.io 前缀的大部分标签，特别是 kubernetes.io/role 标签。如果你尝试启动带有不允许的标签的节点，K3s 将无法启动。正如 Kubernetes 作者所说： 不允许节点断言自己的角色标签。节点角色通常用于识别节点的特权或 control plane 类型，如果允许节点将自己标记到该池，那么受感染的节点将能吸引可授予更高特权凭证访问权限的工作负载（如 control plane 守护进程）。 有关详细信息，请参阅 SIG-Auth KEP 279。 如果你想在节点注册后更改节点标签和污点，或者添加保留标签，请使用 kubectl。关于如何添加污点和节点标签的详细信息，请参阅官方 Kubernetes 文档。","s":"节点标签和污点","u":"/zh/advanced","h":"#节点标签和污点","p":826},{"i":860,"t":"安装脚本将自动检测你的操作系统使用的是 systemd 还是 openrc，并在安装过程中启动该服务。 使用 openrc 运行时，将在 /var/log/k3s.log 中创建日志。 使用 systemd 运行时，将在 /var/log/syslog 中创建日志，你可以通过 journalctl -u k3s（Agent 上是 journalctl -u k3s-agent）查看日志。 使用安装脚本禁用自动启动和服务启用的示例： curl -sfL https://get.k3s.io | INSTALL_K3S_SKIP_START=true INSTALL_K3S_SKIP_ENABLE=true sh -","s":"使用安装脚本启动服务","u":"/zh/advanced","h":"#使用安装脚本启动服务","p":826},{"i":863,"t":"几个主流 Linux 发行版发布的 iptables 版本包含一个错误，该错误会导致重复规则的累积，从而对节点的性能和稳定性产生负面影响。有关如何确定你是否受此问题影响，请参阅 issue #3117。 K3s 具有一个可以正常运行的 iptables (v1.8.8) 版本。你可以通过使用 --prefer-bundled-bin 选项来启动 K3s，或从操作系统中卸载 iptables/nftables 包，从而让 K3s 使用捆绑的 iptables 版本。 版本 --prefer-bundled-bin 标志从 2022-12 版本开始可用（v1.26.0+k3s1、v1.25.5+k3s1、v1.24.9+k3s1、v1.23.15+k3s1）。","s":"旧的 iptables 版本","u":"/zh/advanced","h":"#旧的-iptables-版本","p":826},{"i":865,"t":"建议关闭 firewalld： systemctl disable firewalld --now 如果要保持启用 firewalld，默认情况下需要以下规则： firewall-cmd --permanent --add-port=6443/tcp #apiserver firewall-cmd --permanent --zone=trusted --add-source=10.42.0.0/16 #pods firewall-cmd --permanent --zone=trusted --add-source=10.43.0.0/16 #services firewall-cmd --reload 你可能还需要打开其他端口。有关详细信息，请参阅入站规则。如果更改了 pod 或服务的默认 CIDR，则需要相应地更新防火墙规则。 如果启用，则需要禁用 nm-cloud-setup 并重新启动节点： systemctl disable nm-cloud-setup.service nm-cloud-setup.timer reboot","s":"Red Hat Enterprise Linux / CentOS","u":"/zh/advanced","h":"#red-hat-enterprise-linux--centos","p":826},{"i":867,"t":"建议关闭 ufw（不复杂的防火墙）： ufw disable 如果要保持启用 ufw，默认情况下需要以下规则： ufw allow 6443/tcp #apiserver ufw allow from 10.42.0.0/16 to any #pods ufw allow from 10.43.0.0/16 to any #services 你可能还需要打开其他端口。有关详细信息，请参阅入站规则。如果更改了 pod 或服务的默认 CIDR，则需要相应地更新防火墙规则。","s":"Ubuntu","u":"/zh/advanced","h":"#ubuntu","p":826},{"i":869,"t":"Raspberry Pi OS 基于 Debian，可能会受到旧 iptables 版本的影响。请参阅解决方法。 标准 Raspberry Pi OS 不会在启用 cgroups 的情况下开始。K3S 需要 cgroups 来启动 systemd 服务。你可以通过将 cgroup_memory=1 cgroup_enable=memory 附加到 /boot/cmdline.txt 来启用 cgroups 。 示例 cmdline.txt： console=serial0,115200 console=tty1 root=PARTUUID=58b06195-02 rootfstype=ext4 elevator=deadline fsck.repair=yes rootwait cgroup_memory=1 cgroup_enable=memory 从 Ubuntu 21.10 开始，对 Raspberry Pi 的 vxlan 支持已移至单独的内核模块中。 sudo apt install linux-modules-extra-raspi","s":"Raspberry Pi","u":"/zh/advanced","h":"#raspberry-pi","p":826},{"i":871,"t":"在 Docker 中运行 K3s 有几种方法： K3d Docker k3d 是一个用于在 Docker 中轻松运行多节点 K3s 集群的实用程序。 K3d 能让你轻松在 Docker 中创建单节点和多节点 K3s 集群（例如 Kubernetes 上的本地开发）。 有关如何安装和使用 K3d 的更多信息，请参阅安装文档。 要使用 Docker，你还可以使用 rancher/k3s 镜像来运行 K3s Server 和 Agent。 使用 docker run 命令： sudo docker run \\ --privileged \\ --name k3s-server-1 \\ --hostname k3s-server-1 \\ -p 6443:6443 \\ -d rancher/k3s:v1.24.10-k3s1 \\ server 备注 你必须指定一个有效的 K3s 版本作为标签；我们未维护 latest 标签。 Docker 镜像不支持在标签中使用 + 符号，因此，请在标签中使用 - 符号。 K3s 运行后，你可以将 admin kubeconfig 从 Docker 容器中复制出来： sudo docker cp k3s-server-1:/etc/rancher/k3s/k3s.yaml ~/.kube/config","s":"在 Docker 中运行 K3s","u":"/zh/advanced","h":"#在-docker-中运行-k3s","p":826},{"i":873,"t":"版本 从 v1.19.4+k3s1 起可用 如果你在默认启用 SELinux 的系统（例如 CentOS）上安装 K3s，则必须确保已安装正确的 SELinux 策略。 自动安装 手动安装 如果系统兼容，而且没有进行离线安装，那么安装脚本将自动从 Rancher RPM 仓库安装 SELinux RPM。你通过设置 INSTALL_K3S_SKIP_SELINUX_RPM=true 来跳过自动安装。 可以使用以下命令安装必要的策略： yum install -y container-selinux selinux-policy-base yum install -y https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3s-selinux-0.2-1.el7_8.noarch.rpm 要让安装脚本报告 warning 而不是 fail，你可以设置环境变量 INSTALL_K3S_SELINUX_WARN=true。","s":"SELinux 支持","u":"/zh/advanced","h":"#selinux-支持","p":826},{"i":875,"t":"要利用 SELinux，请在启动 K3s Server 和 Agent 时指定 --selinux 标志。 你也可以在 K3s 配置文件中指定此选项。 selinux: true 不支持在 SELinux 下使用自定义 --data-dir。要自定义它，你可能需要自行编写自定义策略。如需指导，你可以参考 containers/container-selinux 仓库，仓库包含 Container Runtime 的 SELinux 策略文件，同时你可以参考 k3s-io/k3s-selinux 仓库，该仓库包含 K3s 的 SELinux 策略。","s":"启用 SELinux 强制执行","u":"/zh/advanced","h":"#启用-selinux-强制执行","p":826},{"i":878,"t":"拉取镜像是容器生命周期中比较耗时的步骤之一 （根据 Harter 等人的说法）。 拉包占容器启动时间的 76%，但却只读取了 6.4% 的数据。 为了解决这个问题，K3s 的实验功能支持镜像内容的 lazy pulling。 这允许 K3s 在拉取整个镜像之前启动一个容器。 必要的内容块（例如单个文件）是按需获取的。 对于大镜像而言，这种技术可以缩短容器启动延迟。 要启用 lazy pulling，你需要将目标镜像格式化为 eStargz。 这是 OCI 的一个替代品，但它 100% OCI 兼容镜像格式，用于 Lazy Pulling。 由于兼容性，eStargz 可以推送到标准容器镜像仓库（例如 ghcr.io），并且即使在 eStargz-agnostic 运行时也仍然可以运行。 eStargz 是基于 Google CRFS 项目提出的 stargz 格式开发的，具有内容验证和性能优化等实用功能。 有关 Lazy Pulling 和 eStargz 的更多信息，请参阅 Stargz Snapshotter 项目仓库。","s":"什么是 Lazy Pulling 和 eStargz？","u":"/zh/advanced","h":"#什么是-lazy-pulling-和-estargz","p":826},{"i":880,"t":"如下所示，K3s Server 和 Agent 需要 --snapshotter=stargz 选项。 k3s server --snapshotter=stargz 使用此配置，你可以对 eStargz 格式的镜像进行 Lazy Pulling。 以下 Pod 清单示例使用 eStargz 格式的 node:13.13.0 镜像 (ghcr.io/stargz-containers/node:13.13.0-esgz)。 当启用 stargz snapshotter 时，K3s 会对该镜像进行 lazy pulling。 apiVersion: v1 kind: Pod metadata: name: nodejs spec: containers: - name: nodejs-estargz image: ghcr.io/stargz-containers/node:13.13.0-esgz command: [\"node\"] args: - -e - var http = require('http'); http.createServer(function(req, res) { res.writeHead(200); res.end('Hello World!\\n'); }).listen(80); ports: - containerPort: 80","s":"配置 K3s 进行 eStargz 的 Lazy Pulling","u":"/zh/advanced","h":"#配置-k3s-进行-estargz-的-lazy-pulling","p":826},{"i":882,"t":"你可以在不使用 Rancher 的情况下为 K3s 安装 Rancher Logging。为此，你可以执行以下命令： helm repo add rancher-charts https://charts.rancher.io helm repo update helm install --create-namespace -n cattle-logging-system rancher-logging-crd rancher-charts/rancher-logging-crd helm install --create-namespace -n cattle-logging-system rancher-logging --set additionalLoggingSources.k3s.enabled=true rancher-charts/rancher-logging","s":"其他日志来源","u":"/zh/advanced","h":"#其他日志来源","p":826},{"i":884,"t":"支持记录网络策略丢弃的数据包。数据包被发送到 iptables NFLOG 操作，它显示了数据包的详细信息，包括阻止它的网络策略。 如果流量很大，日志消息的数量可能会非常多。要在每个策略上控制日志速率，你可以在 question 的网络策略中添加以下注释，从而设置 limit 和 limit-burst iptables 参数： kube-router.io/netpol-nflog-limit=<LIMIT-VALUE> kube-router.io/netpol-nflog-limit-burst=<LIMIT-BURST-VALUE> 默认值为 limit=10/minute 和 limit-burst=10。你可以查看 iptables 手册以进一步了解这些字段的格式和可选值。 要将 NFLOG 数据包转换为日志条目，请安装 ulogd2 并将 [log1] 配置为在 group=100 上读取。然后，重启 ulogd2 服务以提交新配置。 当数据包被网络策略规则阻止时，日志消息将出现在 /var/log/ulog/syslogemu.log 中。 发送到 NFLOG netlink 套接字的数据包也可以使用 tcpdump 或 tshark 等命令行工具读取： tcpdump -ni nflog:100 虽然更容易获得，但 tcpdump 不会显示阻止数据包的网络策略的名称。你可以使用 wireshark 的 tshark 命令来显示完整的 NFLOG 数据包标头，其中包括包含了策略名称的 nflog.prefix 字段。","s":"其他网络策略日志","u":"/zh/advanced","h":"#其他网络策略日志","p":826},{"i":886,"t":"本文介绍了高可用（HA）K3s 服务器集群的架构，以及 K3s 与单节点服务器集群的区别。 本文还描述了 Agent 节点是如何注册到 K3s Server 的。 Server 节点指的是运行 k3s server 命令的主机，control plane 和数据存储组件由 K3s 管理。 Agent 节点指的是运行 k3s agent 命令的主机，不具有任何数据存储或 control plane 组件。 Server 和 Agent 都运行 kubelet、容器运行时和 CNI。有关运行无 Agent 的 Server 的更多信息，请参阅高级选项。","s":"架构","u":"/zh/architecture","h":"","p":885},{"i":888,"t":"下图显示了具有嵌入式 SQLite 数据库的单节点 K3s Server 集群示例。 在此配置中，每个 Agent 节点都注册到同一个 Server 节点。K3s 用户可以通过调用 Server 节点上的 K3s API 来操作 Kubernetes 资源。","s":"带有嵌入式数据库的单服务器设置","u":"/zh/architecture","h":"#带有嵌入式数据库的单服务器设置","p":885},{"i":890,"t":"单服务器集群可以满足各种用例，但如果你的环境对 Kubernetes control plane 的正常运行时间有要求，你可以在 HA 配置中运行 K3s。一个高可用 K3s 集群包括： 嵌入式数据库 外部数据库 三个或多个 Server 节点为 Kubernetes API 提供服务并运行其他 control plane 服务 嵌入式 etcd 数据存储（与单节点设置中使用的嵌入式 SQLite 数据存储相反） 两个或多个 Server 节点为 Kubernetes API 提供服务并运行其他 control plane 服务 外部数据存储（例如 MySQL、PostgreSQL 或 etcd）","s":"高可用 K3s","u":"/zh/architecture","h":"#高可用-k3s","p":885},{"i":892,"t":"在 HA 服务器配置中，每个节点都能使用固定的注册地址向 Kubernetes API 注册，如下图所示。 注册后，Agent 节点直接与其中一个 Server 节点建立连接。","s":"Agent 节点的固定注册地址","u":"/zh/architecture","h":"#agent-节点的固定注册地址","p":885},{"i":894,"t":"Agent 节点通过 k3s agent 进程发起的 WebSocket 连接进行注册，连接由作为 agent 进程一部分运行的客户端负载均衡器维护。最初，Agent 通过本地负载均衡器端口 6443 连接到 supervisor（和 kube-apiserver）。负载均衡器维护了一个要连接的可用端点列表。默认（也是最初唯一的）端点由 --server 地址中的主机名播种。连接到集群后，Agent 会从默认命名空间中的 Kubernetes Service 端点列表中检索 kube-apiserver 地址列表。这些端点添加到负载均衡器，然后负载均衡器将保持与集群中所有 Server 稳定连接，提供与 kube-apiserver 的连接，从而容忍单个 Server 的中断。 Agent 将使用节点集群 Secret 以及随机生成的节点密码注册到 Server，密码存储在 /etc/rancher/node/password 中。Server 会将各个节点的密码存储为 Kubernetes Secret，后续的任何尝试都必须使用相同的密码。节点密码 Secret 存储在 kube-system 命名空间中，名称使用 <host>.node-password.k3s 模板。这样做是为了保护节点 ID 的完整性。 如果 Agent 的 /etc/rancher/node 目录被删除，或者你希望使用现有名称重新加入节点，那么你需要从集群中删除该节点。这将清除旧节点条目和节点密码 Secret，并允许节点（重新）加入集群。 如果你经常重复使用主机名，但无法删除节点密码 Secret，你可以使用 --with-node-id 标志启动 K3s Server 或 Agent，从而将唯一的节点 ID 自动附加到主机名。启用后，节点 ID 也存储在 /etc/rancher/node/ 中。","s":"Agent 节点注册的工作原理","u":"/zh/architecture","h":"#agent-节点注册的工作原理","p":885},{"i":896,"t":"K3s 二进制文件包含了很多工具，可帮助你管理集群。 命令 描述 k3s server 运行 K3s Server 节点，这将启动 Kubernetes apiserver、scheduler、controller-manager 和 cloud-controller-manager 组件，以及数据存储和 Agent 组件。有关详细信息，请参阅 k3s server 命令文档。 k3s agent 运行 K3s Agent 节点，这将启动 containerd、flannel、kube-router 网络策略控制器和 Kubernetes kubelet 和 kube-proxy 组件。有关详细信息，请参阅 k3s agent 命令文档。 k3s kubectl 运行嵌入式 kubectl 命令。这是用于与 Kubernetes apiserver 交互的 CLI。如果未设置 KUBECONFIG 环境变量，将自动尝试使用 /etc/rancher/k3s/k3s.yaml 中的 kubeconfig。 k3s crictl 运行嵌入式 crictl 命令。这是一个 CLI，用于与 Kubernetes 的容器运行时接口 (CRI) 交互。对调试很有用。 k3s ctr 运行嵌入式 ctr 命令。这是一个用于 containerd 的 CLI，containerd 是 K3s 使用的容器 daemon。对调试很有用。 k3s token 管理引导 Token。有关详细信息，请参阅 k3s token 命令文档。 k3s etcd-snapshot 对 K3s 集群数据进行按需备份并上传到 S3。有关详细信息，请参阅 k3s etcd-snapshot 命令文档。 k3s secrets-encrypt 在将 Secret 存储到集群中时加密 Secret。有关详细信息，请参阅 k3s secrets-encrypt 命令文档。 k3s certificate 管理 K3s 证书。有关详细信息，请参阅 k3s certificate 命令文档。 k3s completion 为 K3s 生成 shell 补全脚本 k3s help 显示命令列表或某个命令的帮助","s":"CLI 工具","u":"/zh/cli","h":"","p":895},{"i":898,"t":"在本节中，你将学习如何配置 K3s Agent。 请注意，Server 也运行 Agent，因此本文列出的所有标志也可用于 Server。 在本文中，选项作为 CLI 标志传递，但是也可以作为配置文件选项传递。有关使用 YAML 配置文件的更多信息，请参阅配置文件文档。","s":"k3s agent","u":"/zh/cli/agent","h":"","p":897},{"i":900,"t":"标志 默认 描述 -v value 0 表示日志级别详细程度的数字 --vmodule value N/A FILE_PATTERN=LOG_LEVEL 格式，用逗号分隔的列表，用于文件过滤日志 --log value, -l value N/A 记录到文件 --alsologtostderr N/A 记录到标准错误以及文件（如果设置）","s":"Logging","u":"/zh/cli/agent","h":"#logging","p":897},{"i":902,"t":"标志 环境变量 描述 --token value, -t value K3S_TOKEN 用于身份验证的令牌 --token-file value K3S_TOKEN_FILE 用于身份验证的令牌文件 --server value, -s value K3S_URL 要连接的 server","s":"集群选项","u":"/zh/cli/agent","h":"#集群选项","p":897},{"i":904,"t":"标志 默认 描述 --data-dir value, -d value \"/var/lib/rancher/k3s\" 保存状态的文件夹","s":"数据","u":"/zh/cli/agent","h":"#数据","p":897},{"i":906,"t":"标志 环境变量 描述 --node-name value K3S_NODE_NAME 节点名称 --with-node-id N/A 将 ID 尾附到节点名称 --node-label value N/A 使用一组标签注册和启动 kubelet --node-taint value N/A 使用一组污点注册 kubelet --protect-kernel-defaults N/A 内核调优行为。如果设置了，当内核可调项与 kubelet 默认值不同时会出错。 --selinux K3S_SELINUX 在 containerd 中启用 SELinux --lb-server-port value K3S_LB_SERVER_PORT Supervisor 客户端负载均衡器的本地端口。如果 supervisor 和 apiserver 没有位于同一位置，则比该端口小 1 的端口也将用于 apiserver 客户端负载均衡器（默认值：6444）","s":"节点","u":"/zh/cli/agent","h":"#节点","p":897},{"i":908,"t":"标志 默认 描述 --container-runtime-endpoint value N/A 禁用嵌入式 containerd 并在给定路径使用 CRI 套接字。当与 --docker 一起使用时，这会设置 cri-docker 套接字路径 --pause-image value \"docker.io/rancher/pause:3.1\" 为 containerd 或 Docker 沙箱定制的 pause 镜像 --private-registry value \"/etc/rancher/k3s/registries.yaml\" 私有镜像仓库配置文件","s":"运行时","u":"/zh/cli/agent","h":"#运行时","p":897},{"i":910,"t":"标志 环境变量 描述 --node-ip value, -i value N/A 节点的 IP 地址 --node-external-ip value N/A 节点的外部 IP 地址 --resolv-conf value K3S_RESOLV_CONF Kubelet resolv.conf 文件 --flannel-iface value N/A 覆盖默认的 Flannel interface --flannel-conf value N/A 覆盖默认的 Flannel 配置文件 --flannel-cni-conf value N/A 覆盖默认的 Flannel CNI 配置文件","s":"网络","u":"/zh/cli/agent","h":"#网络","p":897},{"i":912,"t":"标志 描述 --kubelet-arg value kubelet 进程的自定义标志 --kube-proxy-arg value kube-proxy 进程的自定义标志","s":"自定义标志","u":"/zh/cli/agent","h":"#自定义标志","p":897},{"i":914,"t":"标志 描述 --rootless 无根运行 --docker 使用 cri-dockerd 而不是 containerd --prefer-bundled-bin 偏向打包的用户空间二进制文件，而不是主机二进制文件","s":"实验功能","u":"/zh/cli/agent","h":"#实验功能","p":897},{"i":916,"t":"标志 环境变量 描述 --no-flannel N/A 使用 --flannel-backend=none --cluster-secret value K3S_CLUSTER_SECRET 使用 --token","s":"已弃用","u":"/zh/cli/agent","h":"#已弃用","p":897},{"i":918,"t":"K3s Agent 可以通过 --node-label 和 --node-taint 选项来配置，它们会为 kubelet 添加标签和污点。这两个选项只能在注册时添加标签和/或污点，因此它们只能被添加一次，之后不能再通过运行 K3s 命令来改变。 下面是显示如何添加标签和污点的示例： --node-label foo=bar \\ --node-label hello=world \\ --node-taint key1=value1:NoExecute 如果你想在节点注册后更改节点标签和污点，你需要使用 kubectl。关于如何添加污点和节点标签的详细信息，请参阅官方 Kubernetes 文档。","s":"Agent 的节点标签和污点","u":"/zh/cli/agent","h":"#agent-的节点标签和污点","p":897},{"i":920,"t":"如果某个选项出现在括号中（例如 [$K3S_URL]），该选项可以作为该名称的环境变量传入。 NAME: k3s agent - Run node agent USAGE: k3s agent [OPTIONS] OPTIONS: --config FILE, -c FILE (config) Load configuration from FILE (default: \"/etc/rancher/k3s/config.yaml\") [$K3S_CONFIG_FILE] --debug (logging) Turn on debug logs [$K3S_DEBUG] -v value (logging) Number for the log level verbosity (default: 0) --vmodule value (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value (logging) Log to file --alsologtostderr (logging) Log to standard error as well as file (if set) --token value, -t value (cluster) Token to use for authentication [$K3S_TOKEN] --token-file value (cluster) Token file to use for authentication [$K3S_TOKEN_FILE] --server value, -s value (cluster) Server to connect to [$K3S_URL] --data-dir value, -d value (agent/data) Folder to hold state (default: \"/var/lib/rancher/k3s\") --node-name value (agent/node) Node name [$K3S_NODE_NAME] --with-node-id (agent/node) Append id to node name --node-label value (agent/node) Registering and starting kubelet with set of labels --node-taint value (agent/node) Registering kubelet with set of taints --image-credential-provider-bin-dir value (agent/node) The path to the directory where credential provider plugin binaries are located (default: \"/var/lib/rancher/credentialprovider/bin\") --image-credential-provider-config value (agent/node) The path to the credential provider plugin config file (default: \"/var/lib/rancher/credentialprovider/config.yaml\") --selinux (agent/node) Enable SELinux in containerd [$K3S_SELINUX] --lb-server-port value (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer.(default: 6444) [$K3S_LB_SERVER_PORT] --protect-kernel-defaults (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults. --container-runtime-endpoint value (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path --pause-image value (agent/runtime) Customized pause image for containerd or docker sandbox (default: \"rancher/mirrored-pause:3.6\") --snapshotter value (agent/runtime) Override default containerd snapshotter (default: \"overlayfs\") --private-registry value (agent/runtime) Private registry configuration file (default: \"/etc/rancher/k3s/registries.yaml\") --node-ip value, -i value (agent/networking) IPv4/IPv6 addresses to advertise for node --node-external-ip value (agent/networking) IPv4/IPv6 external IP addresses to advertise for node --resolv-conf value (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF] --flannel-iface value (agent/networking) Override default flannel interface --flannel-conf value (agent/networking) Override default flannel config file --flannel-cni-conf value (agent/networking) Override default flannel cni config file --kubelet-arg value (agent/flags) Customized flag for kubelet process --kube-proxy-arg value (agent/flags) Customized flag for kube-proxy process --rootless (experimental) Run rootless --prefer-bundled-bin (experimental) Prefer bundled userspace binaries over host binaries --docker (agent/runtime) (experimental) Use cri-dockerd instead of containerd","s":"K3s Agent CLI 帮助","u":"/zh/cli/agent","h":"#k3s-agent-cli-帮助","p":897},{"i":923,"t":"K3s 客户端和服务器证书自颁发日起 365 天内有效。每次启动 K3s 时，已过期或 90 天内过期的证书都会自动更新。","s":"客户端和服务器证书","u":"/zh/cli/certificate","h":"#客户端和服务器证书","p":921},{"i":925,"t":"要手动轮换客户端和服务器证书，请使用 k3s certificate rotate 子命令： # 停止 K3s systemctl stop k3s # 轮换证书 k3s certificate rotate # 启动 K3s systemctl start k3s 你可以通过指定证书名称来轮换单个或多个证书： k3s certificate rotate --service <SERVICE>,<SERVICE> 可以轮换的证书：admin、api-server、controller-manager、scheduler、k3s-controller, k3s-server, cloud-controller, etcd, auth-proxy, kubelet，kube-proxy。","s":"轮换客户端和服务器证书","u":"/zh/cli/certificate","h":"#轮换客户端和服务器证书","p":921},{"i":927,"t":"Kubernetes 需要大量 CA 证书才能正常运行。有关 Kubernetes 如何使用 CA 证书，请参阅 Kubernetes PKI 证书和要求文档。 默认情况下，K3s 在第一个 Server 节点启动时生成自签名 CA 证书。这些 CA 证书自颁发日起 10 年内有效，不会自动更新。 权威 CA 证书和密钥存储在数据存储区的引导程序密钥中，使用 server token 作为 PBKDF2 密码和 AES256-GCM 和 HMAC-SHA1 进行加密。 在 K3s Server 启动期间，CA 证书和密钥的副本会被提取到磁盘。 任何 Server 都可以在节点加入集群时为节点生成叶证书，而 Kubernetes Certificates API 控制器可以在运行时颁发其他证书。 要轮换 CA 证书和密钥，请使用 k3s certificate rotate-ca 命令。 该命令会执行完整性检查，从而确认更新的证书和密钥可用。 如果更新后的数据没有问题，则会更新数据存储的加密引导程序密钥，并在下次 K3s 启动时使用新的证书和密钥。 如果在验证证书和密钥时出现了问题，则会向系统日志报告错误，并取消操作且不做任何更改。 版本 从 2023-02 版本（v1.26.2+k3s1、v1.25.7+k3s1、v1.24.11+k3s1、v1.23.17+k3s1）开始，支持 k3s certificate rotate-ca 命令以及使用由外部 CA 签发的 CA 证书。","s":"CA 证书","u":"/zh/cli/certificate","h":"#ca-证书","p":921},{"i":929,"t":"在集群中的第一台 Server 初始启动期间，如果找到了放置在正确位置的 CA 证书和密钥，将不会自动生成 CA 证书。 K3s 仓库中的 contrib/util/generate-custom-ca-certs.sh 示例脚本用于预先创建证书和密钥。 该脚本应在首次启动 K3s 之前运行，能创建一整套由通用根证书和中间 CA 证书签名的叶 CA 证书。 如果你已有根证书或中间 CA 证书，你可以使用此脚本（或用作起点）创建 CA 证书，从而使用现有机构中的 PKI 来配置 K3s 集群。 自定义证书颁发机构文件必须放在 /var/lib/rancher/k3s/server/tls 中。需要以下文件： server-ca.crt server-ca.key client-ca.crt client-ca.key request-header-ca.crt request-header-ca.key // 注意：即使未使用嵌入式 etcd，也需要 etcd 文件。 etcd/peer-ca.crt etcd/peer-ca.key etcd/server-ca.crt etcd/server-ca.key // 注意：这是用于签署 ServiceAccount Token 的私钥。它没有对应的证书。 service.key 自定义 CA 拓扑​ 自定义 CA 证书应遵循以下拓扑结构： 使用示例脚本​ 信息 如果要使用示例脚本通过现有根 CA 来签发集群 CA 证书，则必须在运行脚本之前将根文件和中间文件放在目标目录中。 如果文件不存在，脚本将创建新的根 CA 证书和中间 CA 证书。 如果你只想使用现有的根 CA 证书，请提供以下文件： root-ca.pem root-ca.key 要使用现有的根 CA 证书和中间 CA 证书，请提供以下文件： root-ca.pem intermediate-ca.pem intermediate-ca.key 要在启动 K3s 之前使用示例脚本生成自定义证书和密钥，请运行以下命令： # 创建用于生成证书的目标目录。 mkdir -p /var/lib/rancher/k3s/server/tls # 将根 CA 证书和中间 CA 证书 + 密钥复制到脚本的正确位置。 # 本示例假设你在 /etc/ssl 中放置了现有的根 CA 文件和中间 CA 文件。 # 如果你没有现有的根证书或中间 CA 证书，脚本将为你生成。 cp /etc/ssl/certs/root-ca.pem /etc/ssl/certs/intermediate-ca.pem /etc/ssl/private/intermediate-ca.key /var/lib/rancher/k3s/server/tls # 生成自定义 CA 证书和密钥。 curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | bash - 如果命令成功完成，你可以进行 K3s 的首次安装和启动。 如果脚本生成了根 CA 文件或中间 CA 文件，你应该备份这些文件，这样，你就能在需要轮换 CA 证书时重新使用这些文件。","s":"使用自定义 CA 证书","u":"/zh/cli/certificate","h":"#使用自定义-ca-证书","p":921},{"i":931,"t":"要轮换自定义 CA 证书，请使用 k3s certificate rotate-ca 子命令。 更新后的文件必须暂存到一个临时目录中，加载到数据存储中，并且必须在所有节点上重启 K3s 才能使用更新后的证书。 警告 不要覆盖 /var/lib/rancher/k3s/server/tls 中正在使用的数据。 将更新的证书和密钥暂存到单独的目录中。 只要是使用相同的根 CA，使用自定义 CA 证书启动的集群能无中断地更新或轮换 CA 证书和密钥。 如果使用新的根 CA，则需要中断才能进行轮换。必须使用 k3s certificate rotate-ca --force 选项，所有使用 secure token 加入的节点（包括 server）都需要重新配置才能使用新的 Token 值，并且 Pod 需要重启才能信任新的根 CA。 使用示例脚本​ 上面的示例 generate-custom-ca-certs.sh 脚本也可用于在新的临时目录中生成更新的证书，这是通过将文件复制到正确的位置并设置 DATA_DIR 环境变量实现的。 要使用示例脚本生成更新的证书和密钥，请运行以下命令： # 创建用于生成证书的临时目录。 mkdir -p /opt/k3s/server/tls # 将根 CA 证书和中间 CA 证书 + 密钥复制到脚本的正确位置。 # 如果是非中断轮换，则需要用于生成原始证书的同一个根 CA。 # 如果原始文件仍在数据目录中，则可以运行： cp /var/lib/rancher/k3s/server/tls/root-ca.* /var/lib/rancher/k3s/server/tls/intermediate-ca.* /opt/k3s/server/tls # 复制当前的 service-account 签名密钥，这样，现有的 service-account token 就不会失效。 cp /var/lib/rancher/k3s/server/tls/service.key /opt/k3s/server/tls # 生成更新的自定义 CA 证书和密钥。 curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/generate-custom-ca-certs.sh | DATA_DIR=/opt/k3s bash - # 将更新后的 CA 证书和密钥加载到数据存储中。 k3s certificate rotate-ca --path=/opt/k3s/server 如果 rotate-ca 命令返回错误，请检查服务日志中的错误。 命令成功完成，在集群中的所有节点上重启 K3s，你需要先重启 Server，然后再重启 Agent。 如果你使用了 --force 选项或更改了根 CA，请确保使用 secure token 加入的节点在重启前都重新配置为使用新的 Token 值。 Token 可能存储在 .env 文件、systemd 单元或 config.yaml 中，具体取决于节点初始安装时的配置。","s":"轮换自定义 CA 证书","u":"/zh/cli/certificate","h":"#轮换自定义-ca-证书","p":921},{"i":933,"t":"要轮换 K3s 生成的自签名 CA 证书，请使用 k3s certificate rotate-ca 子命令。 更新后的文件必须暂存到一个临时目录中，加载到数据存储中，并且必须在所有节点上重启 K3s 才能使用更新后的证书。 警告 不要覆盖 /var/lib/rancher/k3s/server/tls 中正在使用的数据。 将更新的证书和密钥暂存到单独的目录中。 如果集群已使用默认的自签名 CA 证书启动，轮换将是中断的。使用 secure token 加入的所有节点都需要重新配置才能信任新的 CA 哈希。 如果旧 CA 证书没有交叉签名新的 CA 证书，你需要使用 --force 选项来绕过完整性检查，并且需要重启 Pod 才能信任新的根 CA。 默认 CA 拓扑​ 默认的自签名 CA 证书拓扑结构如下： 轮换默认的自签名 CA 时，你可以使用具有中间 CA 的修改后证书拓扑和由旧 CA 交叉签名的新根 CA，以便在新旧 CA 之间保留连续的信任链： 使用示例脚本​ K3s 仓库中的 contrib/util/rotate-default-ca-certs.sh 示例脚本用于创建由现有 CA 交叉签名的更新 CA 证书和密钥。 要使用示例脚本生成由现有 CA 交叉签名的更新的自签名证书，请运行以下命令： # 创建更新的 CA 证书和密钥，由当前 CA 交叉签名。 # 该脚本将创建一个包含更新证书的新临时目录，并输出新的 Token 值。 curl -sL https://github.com/k3s-io/k3s/raw/master/contrib/util/rotate-default-ca-certs.sh | bash - # 将更新后的证书加载到数据存储中。在脚本的输出中查看更新后的 Token 值。 k3s certificate rotate-ca --path=/var/lib/rancher/k3s/server/rotate-ca 如果 rotate-ca 命令返回错误，请检查服务日志中的错误。 命令成功完成，在集群中的所有节点上重启 K3s，你需要先重启 Server，然后再重启 Agent。 请确保使用 secure token 加入的节点（包括 server 节点）在重启前都重新配置为使用新的 Token 值。 Token 可能存储在 .env 文件、systemd 单元或 config.yaml 中，具体取决于节点在初始安装时的配置。","s":"轮换自签名 CA 证书","u":"/zh/cli/certificate","h":"#轮换自签名-ca-证书","p":921},{"i":935,"t":"service-account Issuer 密钥是用于签发 service-account Token 的 RSA 私钥。 轮换 service-account Issuer 密钥时，文件中至少应保留一个旧密钥，以免现有 service-account Token 失效。 它可以通过使用 k3s certificate rotate-ca 独立于集群 CA 进行轮换，这样能仅安装包含新旧密钥的更新的 service.key 文件。 警告 不要覆盖 /var/lib/rancher/k3s/server/tls 中正在使用的数据。 将更新的密钥暂存到单独的目录中。 例如，要仅轮换 service-account Issuer 密钥，请运行以下命令： # 创建用于生成证书的临时目录 mkdir -p /opt/k3s/server/tls # 检查 OpenSSL 版本 openssl version | grep -qF 'OpenSSL 3' && OPENSSL_GENRSA_FLAGS=-traditional # 生成新的密钥 openssl genrsa ${OPENSSL_GENRSA_FLAGS:-} -out /opt/k3s/server/tls/service.key 2048 # 追加现有密钥，避免当前 token 失效 cat /var/lib/rancher/k3s/server/tls/service.key >> /opt/k3s/server/tls/service.key # 将更新后的密钥加载到数据存储中 k3s certificate rotate-ca --path=/opt/k3s/server 出现文件未更新的警告是正常的。如果 rotate-ca 命令返回错误，请检查服务日志中的错误。 命令成功完成后，在集群中的所有 Server 上重启 K3s。无需重启 Agent 或任何 Pod。","s":"ServiceAccount Issuer 密钥轮换","u":"/zh/cli/certificate","h":"#serviceaccount-issuer-密钥轮换","p":921},{"i":937,"t":"版本 从 v1.19.1+k3s1 起可用 在本节中，你将学习如何创建 K3s 嵌入式 etcd 数据存储的备份，以及如何使用备份恢复集群。 创建快照​ 默认情况下，快照在系统时间 00:00 和 12:00 启用，会保留 5 个快照。要配置快照间隔或保留快照的数量，请参阅选项。 快照目录默认为 ${data-dir}/server/db/snapshots。data-dir 的默认值为 /var/lib/rancher/k3s，你可以通过设置 --data-dir 标志来更改它。 使用快照恢复集群​ 使用备份恢复 K3s 时，旧的数据目录将被移动到 ${data-dir}/server/db/etcd-old/。然后 K3s 将尝试通过创建一个新的数据目录来恢复快照，然后使用具有一个 etcd 成员的新 K3s 集群启动 etcd。 使用备份恢复集群： 单服务器 高可用 使用 --cluster-reset 选项运行 K3s，同时指定 --cluster-reset-restore-path： k3s server \\ --cluster-reset \\ --cluster-reset-restore-path=<PATH-TO-SNAPSHOT> 结果：日志中的一条消息表示 K3s 可以在没有标志的情况下重新启动。再次启动 K3s，K3s 应该会成功运行并通过指定的快照恢复。 在此示例中有 3 个 Server，分别是 S1、S2和 S3。快照位于 S1 上。 在 S1 上，使用 --cluster-reset 选项运行 K3s，同时指定 --cluster-reset-restore-path： k3s server \\ --cluster-reset \\ --cluster-reset-restore-path=<PATH-TO-SNAPSHOT> 结果：日志中的一条消息表示 K3s 可以在没有标志的情况下重新启动。 在 S2 和 S3 上，停止 K3s。然后删除数据目录 /var/lib/rancher/k3s/server/db/： systemctl stop k3s rm -rf /var/lib/rancher/k3s/server/db/ 在 S1 上，再次启动 K3s： systemctl start k3s 在 S2 和 S3 上，再次启动 K3s 以加入恢复后的集群： systemctl start k3s 选项​ 你可以通过命令行或者配置文件（可能更容易使用）传入这些选项。 选项 描述 --etcd-disable-snapshots 禁用自动 etcd 快照 --etcd-snapshot-schedule-cron value cron 规范中的快照间隔时间。eg. 每 5 小时 0 */5 * * *（默认值：0 */12 * * *） --etcd-snapshot-retention value 要保留的快照数量（默认值：5） --etcd-snapshot-dir value 保存数据库快照的目录。（默认位置：${data-dir}/db/snapshots） --cluster-reset 忘记所有对等点，成为新集群的唯一成员。也可以使用环境变量 [$K3S_CLUSTER_RESET] 进行设置。 --cluster-reset-restore-path value 要恢复的快照文件路径 S3 兼容 API 支持​ K3s 支持向具有 S3 兼容 API 的系统写入 etcd 快照和从系统中恢复 etcd 快照。S3 支持按需和计划快照。 以下参数已添加到 server 子命令中。etcd-snapshot 子命令也存在这些标志，但是删除了 --etcd-s3 部分以避免冗余。 选项 描述 --etcd-s3 启用备份到 S3 --etcd-s3-endpoint S3 端点网址 --etcd-s3-endpoint-ca S3 自定义 CA 证书，用于连接到 S3 端点 --etcd-s3-skip-ssl-verify 禁用 S3 SSL 证书验证 --etcd-s3-access-key S3 access key --etcd-s3-secret-key S3 secret key --etcd-s3-bucket S3 存储桶名称 --etcd-s3-region S3 区域/存储桶位置（可选）。默认为 us-east-1 --etcd-s3-folder S3 文件夹 执行按需的 etcd 快照并将其保存到 S3： k3s etcd-snapshot \\ --s3 \\ --s3-bucket=<S3-BUCKET-NAME> \\ --s3-access-key=<S3-ACCESS-KEY> \\ --s3-secret-key=<S3-SECRET-KEY> 要从 S3 中执行按需的 etcd 快照还原，首先确保 K3s 没有运行。然后运行以下命令： k3s server \\ --cluster-init \\ --cluster-reset \\ --etcd-s3 \\ --cluster-reset-restore-path=<SNAPSHOT-NAME> \\ --etcd-s3-bucket=<S3-BUCKET-NAME> \\ --etcd-s3-access-key=<S3-ACCESS-KEY> \\ --etcd-s3-secret-key=<S3-SECRET-KEY> Etcd 快照和恢复子命令​ K3s 支持用于处理 etcd 快照的一组子命令。 子命令 描述 delete 删除给定的快照 ls, list, l 列出快照 prune 删除超过配置的保留数量的快照 save 触发即时 etcd 快照 备注 save 子命令与 k3s etcd-snapshot 相同。后者最终将被前者取代。 无论 etcd 快照是存储在本地还是存储在 S3 兼容的对象存储中，这些命令都将按预期执行。 有关 etcd 快照子命令的更多信息，请运行 k3s etcd-snapshot。 从 S3 中删除快照。 k3s etcd-snapshot delete \\ --s3 \\ --s3-bucket=<S3-BUCKET-NAME> \\ --s3-access-key=<S3-ACCESS-KEY> \\ --s3-secret-key=<S3-SECRET-KEY> \\ <SNAPSHOT-NAME> 使用默认保留策略 (5) 修剪本地快照。prune 子命令接受额外的标志 --snapshot-retention，允许覆盖默认保留策略。 k3s etcd-snapshot prune k3s etcd-snapshot prune --snapshot-retention 10","s":"k3s etcd-snapshot","u":"/zh/cli/etcd-snapshot","h":"","p":936},{"i":939,"t":"K3s 支持启用静态加密。有关详细信息，请参阅 Secret 加密。","s":"k3s secrets-encrypt","u":"/zh/cli/secrets-encrypt","h":"","p":938},{"i":941,"t":"版本 从 v1.21.8+k3s1 起可用 K3s 包含一个 CLI 工具 secrets-encrypt，可以自动控制以下内容： 禁用/启用 Secret 加密 添加新的加密密钥 轮换和删除加密密钥 重新加密 Secret 警告 如果不遵循正确的加密密钥轮换程序，你的集群可能会永久损坏。因此，请谨慎操作。","s":"Secret 加密工具","u":"/zh/cli/secrets-encrypt","h":"#secret-加密工具","p":938},{"i":943,"t":"单服务器 高可用 要在单服务器集群上轮换 Secret 加密密钥： 使用标志 --secrets-encryption 启动 K3s Server 备注 目前不支持在没有加密的情况下启动 K3s 并在后续启用它。 准备 k3s secrets-encrypt prepare 使用相同的参数终止并重启 K3s Server。如果将 K3s 作为服务运行： # 如果使用 systemd systemctl restart k3s # 如果使用 openrc rc-service k3s restart 轮换 k3s secrets-encrypt rotate 使用相同的参数终止并重启 K3s Server。 重新加密 信息 K3s 每秒将重新加密约 5 个 Secret。 具有大量 Secret 的集群可能需要几分钟才能重新加密。 k3s secrets-encrypt reencrypt 嵌入式数据库和外部数据库集群的步骤相同。 要在 HA 设置上轮换 Secret 加密密钥： 注意事项 目前不支持在没有加密的情况下启动 K3s 并在后续启用它。 虽然不是必需的，但建议你选择一个 Server 节点来运行 secrets-encrypt 命令。 使用 --secrets-encryption 标志启动所有三个 K3s Server。为简便起见，我们将 server 分别称为 S1、S2、S3。 准备 S1 k3s secrets-encrypt prepare 使用相同的参数终止并重启 S1。如果将 K3s 作为服务运行： # 如果使用 systemd systemctl restart k3s # 如果使用 openrc rc-service k3s restart S1 启动后，终止并重启 S2 和 S3 轮换 S1 k3s secrets-encrypt rotate 使用相同的参数终止并重启 S1。 S1 启动后，终止并重启 S2 和 S3 在 S1 上重新加密 信息 K3s 每秒将重新加密约 5 个 Secret。 具有大量 Secret 的集群可能需要几分钟才能重新加密。 k3s secrets-encrypt reencrypt 使用相同的参数终止并重启 S1。 S1 启动后，终止并重启 S2 和 S3","s":"加密密钥轮换","u":"/zh/cli/secrets-encrypt","h":"#加密密钥轮换","p":938},{"i":945,"t":"单服务器 高可用 使用 --secrets-encryption 标志启动 server 后，你还可以禁用 Secret 加密。 要在单节点集群上禁用 Secret 加密： 禁用 k3s secrets-encrypt disable 使用相同的参数终止并重启 K3s Server。如果将 K3s 作为服务运行： # 如果使用 systemd systemctl restart k3s # 如果使用 openrc rc-service k3s restart 使用标志重新加密 k3s secrets-encrypt reencrypt --force --skip 要在单节点集群上重新启用 Secret 加密： 启用 k3s secrets-encrypt enable 使用相同的参数终止并重启 K3s Server。 使用标志重新加密 k3s secrets-encrypt reencrypt --force --skip 使用 --secrets-encryption 标志启动 HA 集群后，你还可以禁用 Secret 加密。 备注 虽然不是必需的，但建议你选择一个 Server 节点来运行 secrets-encrypt 命令。 为简便起见，我们将本指南中使用的 3 个 server 分别称为 S1、S2、S3。 要在 HA 集群上禁用 Secret 加密： 在 S1 上禁用 k3s secrets-encrypt disable 使用相同的参数终止并重启 S1。如果将 K3s 作为服务运行： # 如果使用 systemd systemctl restart k3s # 如果使用 openrc rc-service k3s restart S1 启动后，终止并重启 S2 和 S3 在 S1 上使用标志重新加密 k3s secrets-encrypt reencrypt --force --skip 要在 HA 集群上重新启用 Secret 加密： 在 S1 上启用 k3s secrets-encrypt enable 使用相同的参数终止并重启 S1。 S1 启动后，终止并重启 S2 和 S3 在 S1 上使用标志重新加密 k3s secrets-encrypt reencrypt --force --skip","s":"禁用/启用 Secret 加密","u":"/zh/cli/secrets-encrypt","h":"#禁用启用-secret-加密","p":938},{"i":947,"t":"secrets-encrypt 工具包含一个 status 命令，该命令能显示节点上 Secret 加密的当前状态信息。 单 Server 节点上的命令示例： $ k3s secrets-encrypt status Encryption Status: Enabled Current Rotation Stage: start Server Encryption Hashes: All hashes match Active Key Type Name ------ -------- ---- * AES-CBC aescbckey 以下是另一个关于 HA 集群的例子，在轮换密钥后，重启 server 之前： $ k3s secrets-encrypt status Encryption Status: Enabled Current Rotation Stage: rotate Server Encryption Hashes: hash does not match between node-1 and node-2 Active Key Type Name ------ -------- ---- * AES-CBC aescbckey-2021-12-10T22:54:38Z AES-CBC aescbckey 各部分详情如下： Encryption Status：显示节点上的 Secret 加密是禁用还是启用的 Current Rotation Stage：表示节点上当前的轮换阶段 Stage 可能是：start，prepare，rotate，reencrypt_request，reencrypt_active，reencrypt_finished Server Encryption Hashes：对 HA 集群有用，表明所有 server 是否与本地文件处于同一阶段。这可用于确定在进入下一阶段之前是否需要重启 server。在上面的 HA 例子中，node-1 和 node-2 的哈希值不同，说明它们目前没有相同的加密配置。重启 server 将同步它们的配置。 Key Table：汇总在节点上找到的 Secret 加密密钥的信息。 Active：“*”表示当前使用了哪些密钥（如果有的话）进行Secret 加密。Kubernetes 使用 active 密钥来加密新的 Secret。 Key Type：使用此工具的所有密钥都是 AES-CBC 类型。详情请参见此处。 Name：加密密钥的名称。","s":"Secret 加密状态","u":"/zh/cli/secrets-encrypt","h":"#secret-加密状态","p":938},{"i":949,"t":"在本节中，你将学习如何配置 K3s Server。 请注意，Server 也运行 Agent，因此 Server 也支持 k3s agent 文档中列出的所有配置选项。 在本文中，选项作为 CLI 标志传递，但是也可以作为配置文件选项传递。有关使用 YAML 配置文件的更多信息，请参阅配置文件文档。","s":"k3s server","u":"/zh/cli/server","h":"","p":948},{"i":951,"t":"以下选项必须在集群中的所有 Server 上设置为相同的值。如果不这样做，新 Server 将无法加入集群（使用嵌入式 etcd 时），或集群将无法正确运行（使用外部数据存储时）。 --agent-token --cluster-cidr --cluster-dns --cluster-domain --disable-cloud-controller --disable-helm-controller --disable-network-policy --disable-servicelb --egress-selector-mode --flannel-backend --flannel-external-ip --flannel-ipv6-masq --secrets-encryption --service-cidr","s":"关键配置值","u":"/zh/cli/server","h":"#关键配置值","p":948},{"i":954,"t":"标志 环境变量 描述 --datastore-endpoint value K3S_DATASTORE_ENDPOINT 指定 etcd、Mysql、Postgres 或 Sqlite（默认）数据源名称 --datastore-cafile value K3S_DATASTORE_CAFILE 用于保护数据存储后端通信的 TLS CA 文件 --datastore-certfile value K3S_DATASTORE_CERTFILE 用于保护数据存储后端通信的 TLS 证书文件 --datastore-keyfile value K3S_DATASTORE_KEYFILE 用于保护数据存储后端通信的 TLS 密钥文件 --etcd-expose-metrics N/A 向客户端接口公开 etcd 指标（默认值：false） --etcd-disable-snapshots N/A 禁用自动 etcd 快照 --etcd-snapshot-name value N/A 设置 etcd 快照的基本名称。默认值：etcd-snapshot-<unix-timestamp>（默认值：“etcd-snapshot”） --etcd-snapshot-schedule-cron value N/A cron 规范中的快照间隔时间。eg. 每 5 小时 '0 /5 * '（默认值：\"0 /12 * * *\"） --etcd-snapshot-retention value N/A 要保留的快照数量（默认值：5） --etcd-snapshot-dir value N/A 保存数据库快照的目录（默认值：${data-dir}/db/snapshots） --etcd-s3 N/A 启用备份到 S3 --etcd-s3-endpoint value N/A S3 端点 URL（默认值：“s3.amazonaws.com”） --etcd-s3-endpoint-ca value N/A S3 自定义 CA 证书，用于连接到 S3 端点 --etcd-s3-skip-ssl-verify N/A 禁用 S3 SSL 证书验证 --etcd-s3-access-key value AWS_ACCESS_KEY_ID S3 access key --etcd-s3-secret-key value AWS_SECRET_ACCESS_KEY S3 secret key --etcd-s3-bucket value N/A S3 存储桶名称 --etcd-s3-region value N/A S3 区域/存储桶位置（可选）（默认值：“us-east-1”） --etcd-s3-folder value N/A S3 文件夹 --etcd-s3-insecure 通过 HTTPS 禁用 S3 --etcd-s3-timeout value S3 超时（默认值：5m0s）","s":"数据库","u":"/zh/cli/server","h":"#数据库","p":948},{"i":956,"t":"标志 环境变量 描述 --token value, -t value K3S_TOKEN 共享密钥，用于将 server 或 agent 加入集群 --token-file value K3S_TOKEN_FILE 包含 cluster-secret/token 的文件 --agent-token value K3S_AGENT_TOKEN 共享密钥，用于将 agent 加入集群，但不能用于 server --agent-token-file value K3S_AGENT_TOKEN_FILE 包含 agent secret 的文件 --server value K3S_URL 要连接的 server，用于加入集群 --cluster-init K3S_CLUSTER_INIT 使用嵌入式 Etcd 初始化新集群 --cluster-reset K3S_CLUSTER_RESET 忘记所有对等点，成为新集群的唯一成员","s":"集群选项","u":"/zh/cli/server","h":"#集群选项","p":948},{"i":958,"t":"标志 环境变量 描述 --write-kubeconfig value, -o value K3S_KUBECONFIG_OUTPUT 将 admin 客户端的 kubeconfig 写入此文件 --write-kubeconfig-mode value K3S_KUBECONFIG_MODE 使用此模式写入 kubeconfig。kubeconfig 文件归 root 所有，并默认使用 600 模式写入。如果将模式改为 644，主机上的其他非特权用户将能读取它。","s":"管理 Kubeconfig 选项","u":"/zh/cli/server","h":"#管理-kubeconfig-选项","p":948},{"i":961,"t":"标志 默认 描述 --debug N/A 打开 debug 日志 -v value 0 表示日志级别详细程度的数字 --vmodule value N/A FILE_PATTERN=LOG_LEVEL 格式，用逗号分隔的列表，用于文件过滤日志 --log value, -l value N/A 记录到文件 --alsologtostderr N/A 记录到标准错误以及文件（如果设置）","s":"Logging","u":"/zh/cli/server","h":"#logging","p":948},{"i":963,"t":"标志 默认 描述 --bind-address value 0.0.0.0 K3s 绑定地址 --https-listen-port value 6443 HTTPS 监听端口 --advertise-address value node-external-ip/node-ip IPv4 地址，apiserver 使用该地址向集群成员通告 --advertise-port value listen-port/0 apiserver 用于向集群成员通告的端口 --tls-san value N/A 在 TLS 证书上添加其他主机名或 IPv4/IPv6 地址作为 Subject Alternative Name","s":"Listeners","u":"/zh/cli/server","h":"#listeners","p":948},{"i":965,"t":"标志 默认 描述 --data-dir value, -d value /var/lib/rancher/k3s，如果不是 root，则为 ${HOME}/.rancher/k3s 保存状态的文件夹","s":"数据","u":"/zh/cli/server","h":"#数据","p":948},{"i":967,"t":"标志 默认 描述 --secrets-encryption false 启用 secret 静态加密","s":"Secret 加密","u":"/zh/cli/server","h":"#secret-加密","p":948},{"i":969,"t":"标志 默认 描述 --cluster-cidr value \"10.42.0.0/16\" 用于 pod IP 的 IPv4/IPv6 网络 CIDR --service-cidr value \"10.43.0.0/16\" 用于服务 IP 的 IPv4/IPv6 网络 CIDR --service-node-port-range value \"30000-32767\" 为具有 NodePort 可见性的服务保留的端口范围 --cluster-dns value \"10.43.0.10\" 用于 coredns 服务的 IPv4 集群 IP。需要在 service-cidr 范围内 --cluster-domain value \"cluster.local\" 集群域名 --flannel-backend value \"vxlan\" “none”、“vxlan”、“ipsec”（已弃用）、“host-gw”、“wireguard-native” 或 “wireguard”（已弃用）中的其中一个 --flannel-ipv6-masq \"N/A\" 为 pod 启用 IPv6 伪装 --flannel-external-ip \"N/A\" 将节点外部 IP 地址用于 Flannel 流量 --servicelb-namespace value \"kube-system\" servicelb 组件的 pod 命名空间 --egress-selector-mode value \"agent\" 仅支持： disabled：apiserver 不使用 agent 隧道与节点通信。要求 server 运行 agent，并直接连接到 agent 上的 kubelet，否则 apiserver 将无法访问 service 端点或执行 kubectl exec 和 kubectl 日志。 agent：apiserver 使用 agent 隧道与节点通信。节点允许环回地址的隧道连接。要求 server 也运行 agent，否则 apiserver 将无法访问 service 端点。K3s 的历史默认值。 pod：apiserver 使用 agent 隧道与节点和 service 端点通信，通过监视节点将端点连接路由到正确的 agent。节点允许环回地址或分配给节点的 CIDR 的隧道连接。 cluster：apiserver 使用 agent 隧道与节点和 service 端点通信，通过监视端点将端点连接路由到正确的 agent。节点允许环回地址或配置的集群 CIDR 范围的隧道连接。","s":"网络","u":"/zh/cli/server","h":"#网络","p":948},{"i":971,"t":"标志 描述 --default-local-storage-path value 本地制备器存储类的默认本地存储路径","s":"存储类","u":"/zh/cli/server","h":"#存储类","p":948},{"i":973,"t":"标志 描述 --disable value 请参阅使用 --disable 标志。 --disable-scheduler 禁用 Kubernetes 默认调度程序 --disable-cloud-controller 禁用 k3s 默认云 Controller Manager --disable-kube-proxy 禁用运行 kube-proxy --disable-network-policy 禁用 K3s 默认网络策略控制器 --disable-helm-controller 禁用 Helm 控制器","s":"Kubernetes 组件","u":"/zh/cli/server","h":"#kubernetes-组件","p":948},{"i":975,"t":"标志 描述 --etcd-arg value etcd 进程的自定义标志 --kube-apiserver-arg value kube-apiserver 进程的自定义标志 --kube-scheduler-arg value kube-scheduler 进程的自定义标志 --kube-controller-manager-arg value kube-controller-manager 进程的自定义标志 --kube-cloud-controller-manager-arg value kube-cloud-controller-manager 进程的自定义标志 --kubelet-arg value kubelet 进程的自定义标志 --kube-proxy-arg value kube-proxy 进程的自定义标志","s":"Kubernetes 进程的自定义标志","u":"/zh/cli/server","h":"#kubernetes-进程的自定义标志","p":948},{"i":977,"t":"标志 描述 --rootless 无根运行 --enable-pprof 在 supervisor 端口上启用 pprof 端点 --docker 使用 cri-dockerd 而不是 containerd --prefer-bundled-bin 偏向打包的用户空间二进制文件，而不是主机二进制文件 --disable-agent 请参阅运行无 Agent 的 Server（实验性）","s":"实验选项","u":"/zh/cli/server","h":"#实验选项","p":948},{"i":979,"t":"标志 环境变量 描述 --no-flannel N/A 使用 --flannel-backend=none --no-deploy value N/A 使用 --disable --cluster-secret value K3S_CLUSTER_SECRET 使用 --token --flannel-backend wireguard N/A 使用 --flannel-backend=wireguard-native --flannel-backend value=option1=value N/A 使用 --flannel-conf 指定带有后端配置的 Flannel 配置文件","s":"已弃用选项","u":"/zh/cli/server","h":"#已弃用选项","p":948},{"i":981,"t":"如果某个选项出现在括号中（例如 [$K3S_TOKEN]），该选项可以作为该名称的环境变量传入。 NAME: k3s server - Run management server USAGE: k3s server [OPTIONS] OPTIONS: --config FILE, -c FILE (config) Load configuration from FILE (default: \"/etc/rancher/k3s/config.yaml\") [$K3S_CONFIG_FILE] --debug (logging) Turn on debug logs [$K3S_DEBUG] -v value (logging) Number for the log level verbosity (default: 0) --vmodule value (logging) Comma-separated list of FILE_PATTERN=LOG_LEVEL settings for file-filtered logging --log value, -l value (logging) Log to file --alsologtostderr (logging) Log to standard error as well as file (if set) --bind-address value (listener) k3s bind address (default: 0.0.0.0) --https-listen-port value (listener) HTTPS listen port (default: 6443) --advertise-address value (listener) IPv4 address that apiserver uses to advertise to members of the cluster (default: node-external-ip/node-ip) --advertise-port value (listener) Port that apiserver uses to advertise to members of the cluster (default: listen-port) (default: 0) --tls-san value (listener) Add additional hostnames or IPv4/IPv6 addresses as Subject Alternative Names on the server TLS cert --data-dir value, -d value (data) Folder to hold state (default: /var/lib/rancher/k3s or ${HOME}/.rancher/k3s if not root) --cluster-cidr value (networking) IPv4/IPv6 network CIDRs to use for pod IPs (default: 10.42.0.0/16) --service-cidr value (networking) IPv4/IPv6 network CIDRs to use for service IPs (default: 10.43.0.0/16) --service-node-port-range value (networking) Port range to reserve for services with NodePort visibility (default: \"30000-32767\") --cluster-dns value (networking) IPv4 Cluster IP for coredns service. Should be in your service-cidr range (default: 10.43.0.10) --cluster-domain value (networking) Cluster Domain (default: \"cluster.local\") --flannel-backend value (networking) backend<=option1=val1,option2=val2> where backend is one of 'none', 'vxlan', 'ipsec' (deprecated), 'host-gw', 'wireguard-native', 'wireguard' (deprecated) (default: \"vxlan\") --flannel-ipv6-masq (networking) Enable IPv6 masquerading for pod --flannel-external-ip (networking) Use node external IP addresses for Flannel traffic --egress-selector-mode value (networking) One of 'agent', 'cluster', 'pod', 'disabled' (default: \"agent\") --servicelb-namespace value (networking) Namespace of the pods for the servicelb component (default: \"kube-system\") --write-kubeconfig value, -o value (client) Write kubeconfig for admin client to this file [$K3S_KUBECONFIG_OUTPUT] --write-kubeconfig-mode value (client) Write kubeconfig with this mode [$K3S_KUBECONFIG_MODE] --token value, -t value (cluster) Shared secret used to join a server or agent to a cluster [$K3S_TOKEN] --token-file value (cluster) File containing the token [$K3S_TOKEN_FILE] --agent-token value (cluster) Shared secret used to join agents to the cluster, but not servers [$K3S_AGENT_TOKEN] --agent-token-file value (cluster) File containing the agent secret [$K3S_AGENT_TOKEN_FILE] --server value, -s value (cluster) Server to connect to, used to join a cluster [$K3S_URL] --cluster-init (cluster) Initialize a new cluster using embedded Etcd [$K3S_CLUSTER_INIT] --cluster-reset (cluster) Forget all peers and become sole member of a new cluster [$K3S_CLUSTER_RESET] --cluster-reset-restore-path value (db) Path to snapshot file to be restored --kube-apiserver-arg value (flags) Customized flag for kube-apiserver process --etcd-arg value (flags) Customized flag for etcd process --kube-controller-manager-arg value (flags) Customized flag for kube-controller-manager process --kube-scheduler-arg value (flags) Customized flag for kube-scheduler process --kube-cloud-controller-manager-arg value (flags) Customized flag for kube-cloud-controller-manager process --datastore-endpoint value (db) Specify etcd, Mysql, Postgres, or Sqlite (default) data source name [$K3S_DATASTORE_ENDPOINT] --datastore-cafile value (db) TLS Certificate Authority file used to secure datastore backend communication [$K3S_DATASTORE_CAFILE] --datastore-certfile value (db) TLS certification file used to secure datastore backend communication [$K3S_DATASTORE_CERTFILE] --datastore-keyfile value (db) TLS key file used to secure datastore backend communication [$K3S_DATASTORE_KEYFILE] --etcd-expose-metrics (db) Expose etcd metrics to client interface. (default: false) --etcd-disable-snapshots (db) Disable automatic etcd snapshots --etcd-snapshot-name value (db) Set the base name of etcd snapshots (default: etcd-snapshot-<unix-timestamp>) (default: \"etcd-snapshot\") --etcd-snapshot-schedule-cron value (db) Snapshot interval time in cron spec. eg. every 5 hours '* */5 * * *' (default: \"0 */12 * * *\") --etcd-snapshot-retention value (db) Number of snapshots to retain (default: 5) --etcd-snapshot-dir value (db) Directory to save db snapshots. (default: ${data-dir}/db/snapshots) --etcd-snapshot-compress (db) Compress etcd snapshot --etcd-s3 (db) Enable backup to S3 --etcd-s3-endpoint value (db) S3 endpoint url (default: \"s3.amazonaws.com\") --etcd-s3-endpoint-ca value (db) S3 custom CA cert to connect to S3 endpoint --etcd-s3-skip-ssl-verify (db) Disables S3 SSL certificate validation --etcd-s3-access-key value (db) S3 access key [$AWS_ACCESS_KEY_ID] --etcd-s3-secret-key value (db) S3 secret key [$AWS_SECRET_ACCESS_KEY] --etcd-s3-bucket value (db) S3 bucket name --etcd-s3-region value (db) S3 region / bucket location (optional) (default: \"us-east-1\") --etcd-s3-folder value (db) S3 folder --etcd-s3-insecure (db) Disables S3 over HTTPS --etcd-s3-timeout value (db) S3 timeout (default: 5m0s) --default-local-storage-path value (storage) Default local storage path for local provisioner storage class --disable value (components) Do not deploy packaged components and delete any deployed components (valid items: coredns, servicelb, traefik, local-storage, metrics-server) --disable-scheduler (components) Disable Kubernetes default scheduler --disable-cloud-controller (components) Disable k3s default cloud controller manager --disable-kube-proxy (components) Disable running kube-proxy --disable-network-policy (components) Disable k3s default network policy controller --disable-helm-controller (components) Disable Helm controller --node-name value (agent/node) Node name [$K3S_NODE_NAME] --with-node-id (agent/node) Append id to node name --node-label value (agent/node) Registering and starting kubelet with set of labels --node-taint value (agent/node) Registering kubelet with set of taints --image-credential-provider-bin-dir value (agent/node) The path to the directory where credential provider plugin binaries are located (default: \"/var/lib/rancher/credentialprovider/bin\") --image-credential-provider-config value (agent/node) The path to the credential provider plugin config file (default: \"/var/lib/rancher/credentialprovider/config.yaml\") --docker (agent/runtime) (experimental) Use cri-dockerd instead of containerd --container-runtime-endpoint value (agent/runtime) Disable embedded containerd and use the CRI socket at the given path; when used with --docker this sets the docker socket path --pause-image value (agent/runtime) Customized pause image for containerd or docker sandbox (default: \"rancher/mirrored-pause:3.6\") --snapshotter value (agent/runtime) Override default containerd snapshotter (default: \"overlayfs\") --private-registry value (agent/runtime) Private registry configuration file (default: \"/etc/rancher/k3s/registries.yaml\") --system-default-registry value (agent/runtime) Private registry to be used for all system images [$K3S_SYSTEM_DEFAULT_REGISTRY] --node-ip value, -i value (agent/networking) IPv4/IPv6 addresses to advertise for node --node-external-ip value (agent/networking) IPv4/IPv6 external IP addresses to advertise for node --resolv-conf value (agent/networking) Kubelet resolv.conf file [$K3S_RESOLV_CONF] --flannel-iface value (agent/networking) Override default flannel interface --flannel-conf value (agent/networking) Override default flannel config file --flannel-cni-conf value (agent/networking) Override default flannel cni config file --kubelet-arg value (agent/flags) Customized flag for kubelet process --kube-proxy-arg value (agent/flags) Customized flag for kube-proxy process --protect-kernel-defaults (agent/node) Kernel tuning behavior. If set, error if kernel tunables are different than kubelet defaults. --secrets-encryption Enable secret encryption at rest --enable-pprof (experimental) Enable pprof endpoint on supervisor port --rootless (experimental) Run rootless --prefer-bundled-bin (experimental) Prefer bundled userspace binaries over host binaries --selinux (agent/node) Enable SELinux in containerd [$K3S_SELINUX] --lb-server-port value (agent/node) Local port for supervisor client load-balancer. If the supervisor and apiserver are not colocated an additional port 1 less than this port will also be used for the apiserver client load-balancer.(default: 6444) [$K3S_LB_SERVER_PORT]","s":"K3s Server CLI 帮助","u":"/zh/cli/server","h":"","p":948},{"i":983,"t":"K3s 使用 Token 来保护加入节点的过程。Token 用于验证加入的节点和集群。","s":"k3s token","u":"/zh/cli/token","h":"","p":982},{"i":985,"t":"K3s Token 可以使用安全（secure）或短（short）格式。安全格式能让客户端在发送凭证之前验证加入的集群的身份，因此首选安全格式。","s":"Token 格式","u":"/zh/cli/token","h":"#token-格式","p":982},{"i":987,"t":"安全 Token 格式（有时称为“完整” Token 格式）包含以下部分： <prefix><cluster CA hash>::<credentials> prefix：固定的 K10 前缀，用来标识 token 格式 cluster CA hash：集群的 Server CA 证书的哈希，用于为加入的节点验证 Server。 对于自签名 CA 证书，这是存储在磁盘上的 PEM 格式证书的 SHA256 总和。 对于自定义 CA 证书，这是根证书的 DER 编码的 SHA256 总和，也称为证书指纹。 credentials：用户名和密码，或持有者 Token，用于验证加入集群的节点。 TLS 引导​ 如果指定了安全 Token，在传输凭证之前，加入的节点会执行以下步骤来认证连接的 Server： 禁用 TLS 验证后，从要加入的 Server 上的 /cacerts 下载 CA 包。 如上所述计算 CA 证书的 SHA256 哈希值。 比较计算出的 SHA256 哈希值与 Token 中的哈希值。 如果哈希值匹配，则验证 Server 提供的证书是否可以由 Server 的 CA 包进行验证。 如果 Server 证书有效，你需要使用基础或持有者 Token 认证（根据 Token 的类型）来提供加入集群的凭证。","s":"Secure","u":"/zh/cli/token","h":"#secure","p":982},{"i":989,"t":"短 Token 格式仅包括用于验证加入集群的节点的密码或持有者 Token。 如果使用了短 Token，则加入的节点会隐式信任 Server 提供的 CA 包，以及跳过 TLS 引导过程中的步骤 2-4。初始连接可能容易受到中间人攻击。","s":"Short","u":"/zh/cli/token","h":"#short","p":982},{"i":991,"t":"K3s 支持三种类型的 Token。默认情况下只有 Server Token 可用，其他类型的 Token 必须由管理员配置或创建。 类型 CLI 选项 环境变量 Server --token K3S_TOKEN Agent --agent-token K3S_AGENT_TOKEN Bootstrap n/a n/a","s":"Token 类型","u":"/zh/cli/token","h":"#token-类型","p":982},{"i":993,"t":"如果在启动集群中的第一个 Server 时未提供 Token，则会使用随机密码创建。Server Token 始终以安全格式写入 /var/lib/rancher/k3s/server/token。 Server Token 可用于将 Server 和 Agent 节点加入集群。一旦创建了集群，它就无法更改，任何有权访问 Server Token 的用户基本上都拥有集群的完全管理员访问权限。因此，你需要小心保管 Token。 Server Token 还用作密钥的 PBKDF2 密码，该密钥用于加密持久保存到数据存储的机密信息，例如 Secret 加密配置、wireguard 密钥，集群 CA 证书的私钥以及 service-account Token。因此，Token 必须与集群数据存储一起备份。 警告 除非使用了自定义 CA 证书，否则在启动集群的第一个 Server 时只能使用短 Token 格式（仅密码）。这是因为只有在 Server 生成自签名集群 CA 证书后才能知道集群 CA 哈希值。 有关使用自定义 CA 证书的更多信息，请参阅 k3s certificate 文档。 有关备份集群的更多信息，请参阅备份和恢复文档。","s":"Server","u":"/zh/cli/token","h":"#server","p":982},{"i":995,"t":"默认情况下，Agent Token 与 Server Token 相同。你可以通过更改集群中所有 Server 上的 CLI 选项或环境变量，在集群启动之前或之后设置 Agent Token。Agent Token 类似于 Server Token，是静态配置的并且不会过期。 Agent Token 以安全格式写入 /var/lib/rancher/k3s/server/agent-token。如果未指定 Agent Token，则此文件是指向 Server Token 的链接。","s":"Agent","u":"/zh/cli/token","h":"#agent","p":982},{"i":997,"t":"版本 从 2023-02 版本（v1.26.2+k3s1、v1.25.7+k3s1、v1.24.11+k3s1、v1.23.17+k3s1）开始，支持 k3s token 命令以及使用 Bootstrap Token 加入节点。 K3s 支持动态生成、自动过期的 agent bootstrap token。Bootstrap Token 只能用于加入 Agent。","s":"Bootstrap","u":"/zh/cli/token","h":"#bootstrap","p":982},{"i":998,"t":"K3s Bootstrap Token 使用与 kubeadm token Bootstrap Token 相同的生成和验证代码，k3s token CLI 也是类似的。 NAME: k3s token - Manage bootstrap tokens USAGE: k3s token command [command options] [arguments...] COMMANDS: create Create bootstrap tokens on the server delete Delete bootstrap tokens on the server generate Generate and print a bootstrap token, but do not create it on the server list List bootstrap tokens on the server OPTIONS: --help, -h show help k3s token create [token]​ 创建一个新 Token。[token] 是要写入的实际 Token，由 k3s token generate 生成。如果没有指定 Token，将生成一个随机 Token。 安全格式的 Token（包括集群 CA 哈希）会写入到 stdout。Token 的 secret 部分只显示一次，因此你需要保存此命令的输出。 标志 描述 --data-dir value 保存状态的（数据）文件夹，如果不是 root，则默认为 /var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s --kubeconfig value 要连接到 [$KUBECONFIG] 的（集群）Server --description value 有关如何使用此 Token 的描述 --groups value 该 Token 用于认证的其他组（默认值：“system:bootstrappers:k3s:default-node-token”） --ttl value 自动删除 Token 的时间（例如 1s、2m、3h）。如果设置为 0，Token 将永不过期（默认值：24h0m0s） --usages value 描述可使用此 Token 的方式。(默认值：\"signing,authentication\") k3s token delete​ 删除一个或多个 Token。你可以提供完整的 Token，也可以仅提供 Token ID。 标志 描述 --data-dir value 保存状态的（数据）文件夹，如果不是 root，则默认为 /var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s --kubeconfig value 要连接到 [$KUBECONFIG] 的（集群）Server k3s token generate​ 生成一个随机的 Bootstrap Token。 你不需要使用此命令来生成 Token。只要格式为 \"[a-z0-9]{6}.[a-z0-9]{16}\"（其中第一部分是 Token ID，第二部分是 Secret），你就可以自己进行操作。 标志 描述 --data-dir value 保存状态的（数据）文件夹，如果不是 root，则默认为 /var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s --kubeconfig value 要连接到 [$KUBECONFIG] 的（集群）Server k3s token list​ 列出 Bootstrap Token，这将显示 Token 的 ID、描述和剩余 TTL。 标志 描述 --data-dir value 保存状态的（数据）文件夹，如果不是 root，则默认为 /var/lib/rancher/k3s 或 ${HOME}/.rancher/k3s --kubeconfig value 要连接到 [$KUBECONFIG] 的（集群）Server --output value 输出格式。可选值：text、json（默认值：text）","s":"k3s token","u":"/zh/cli/token","h":"#k3s-token-1","p":982},{"i":1000,"t":"/etc/rancher/k3s/k3s.yaml 中存储的 kubeconfig 文件用于配置对 Kubernetes 集群的访问。如果你已经安装了上游的 Kubernetes 命令行工具（如 kubectl 或 helm)，你需要用正确的 kubeconfig 路径配置它们。这可以通过导出 KUBECONFIG 环境变量或调用 --kubeconfig 命令行标志来完成。有关详细信息，请参阅以下示例。 使用 KUBECONFIG 环境变量： export KUBECONFIG=/etc/rancher/k3s/k3s.yaml kubectl get pods --all-namespaces helm ls --all-namespaces 或者在命令中指定 kubeconfig 文件的位置： kubectl --kubeconfig /etc/rancher/k3s/k3s.yaml get pods --all-namespaces helm --kubeconfig /etc/rancher/k3s/k3s.yaml ls --all-namespaces","s":"集群访问","u":"/zh/cluster-access","h":"","p":999},{"i":1002,"t":"将 /etc/rancher/k3s/k3s.yaml 复制到位于集群外部的主机上的 ~/.kube/config。然后，将 server 字段的值替换为你 K3s Server 的 IP 或名称。现在，你可以使用 kubectl 来管理 K3s 集群。","s":"使用 kubectl 从外部访问集群","u":"/zh/cluster-access","h":"#使用-kubectl-从外部访问集群","p":999},{"i":1004,"t":"K3s 与其他 Kubernetes 发行版的不同之处，在于 K3s 支持使用 etcd 以外的数据库来运行 Kubernetes。该功能让 Kubernetes 运维更加灵活。你可以根据实际情况选择合适的数据存储选项。例如： 如果你的团队没有操作 etcd 的专业知识，你可以选择 MySQL 或 PostgreSQL 等企业级 SQL 数据库。 如果你需要在 CI/CD 环境中运行一个简单、短期的集群，你可以使用嵌入式 SQLite 数据库。 如果你希望在边缘部署 Kubernetes 并需要高可用解决方案，但又无法承担在边缘管理数据库的运营开销，你可以使用 K3s 的嵌入式 HA 数据存储，该数据存储构建在嵌入式 etcd 之上。 K3s 支持以下数据存储选项： 嵌入式 SQLite SQLite 不能用于具有多个 Server 的集群。 SQLite 是默认的数据存储，如果没有其他数据存储配置，并且磁盘上没有嵌入式 etcd 数据库文件，将使用 SQLite。 嵌入式 etcd 有关在具有多个 Server 的情况下使用嵌入式 etcd，请参阅高可用嵌入式 etcd 文档。 如果 K3s 配置为初始化一个新的 etcd 集群，加入一个现有的 etcd 集群，或者 etcd 数据库文件在启动时在磁盘上，那么会自动选择嵌入式 etcd。 外部数据库 有关在具有多个 Server 的情况下使用外部数据存储，请参阅高可用外部数据库文档。 支持以下外部数据存储： etcd（针对版本 3.5.4 进行了认证） MySQL（针对版本 5.7 和 8.0 进行了认证） MariaDB（针对版本 10.6.8 进行了认证） PostgreSQL（针对版本 10.7、11.5 和 14.2 进行了认证） 准备语句支持 K3s 需要 DB 的准备语句支持。换言之，PgBouncer 之类的连接池将无法与 K3s 一起使用。","s":"集群数据存储","u":"/zh/datastore","h":"","p":1003},{"i":1006,"t":"如果你希望使用外部数据存储（例如 PostgreSQL、MySQL 或 etcd），你必须设置 datastore-endpoint 参数，以便 K3s 知道如何连接到外部数据存储。你也可以指定参数来配置连接的认证和加密。下表总结了这些参数，它们可以作为 CLI 标志或环境变量传递： CLI 标志 环境变量 描述 --datastore-endpoint K3S_DATASTORE_ENDPOINT 指定 PostgreSQL、MySQL 或 etcd 连接字符串。该字符串用于描述与数据存储的连接。不同的后端对应不同的字符串结构，下文有详细说明。 --datastore-cafile K3S_DATASTORE_CAFILE TLS 证书颁发机构（CA）文件，用于确保数据存储的通信安全。如果你的数据存储使用自定义证书颁发机构签署的证书通过 TLS 处理请求，则可以使用此参数指定 CA，以便 K3s 客户端可以正确验证证书。 --datastore-certfile K3S_DATASTORE_CERTFILE TLS 证书文件，用于对数据存储进行基于客户端证书的验证。要使用这个功能，你必须将数据存储配置为支持基于客户端证书的认证。要指定此参数，你还必须指定 datastore-keyfile 参数。 --datastore-keyfile K3S_DATASTORE_KEYFILE TLS 密钥文件，用于对数据存储进行基于客户端证书的验证。有关详细信息，请参阅前面的 datastore-certfile 参数。 作为最佳实践，我们建议将这些参数设置为环境变量，而不是命令行参数，这样你的数据库证书或其他敏感信息就不会作为进程信息的一部分暴露出来。","s":"外部数据存储配置参数","u":"/zh/datastore","h":"#外部数据存储配置参数","p":1003},{"i":1008,"t":"如前所述，传递给 datastore-endpoint 参数的值的格式取决于数据存储后端。下文详细介绍了每个支持的外部数据存储的格式和功能。 PostgreSQL MySQL / MariaDB etcd 最常见的 PostgreSQL 的 datastore-endpoint 参数格式如下： postgres://username:password@hostname:port/database-name 支持使用更高级的配置参数。有关更多信息，请参阅 https://godoc.org/github.com/lib/pq。 如果指定数据库名称不存在，server 将尝试创建它。 如果你只提供了 postgres:// 作为端点，K3s 将尝试执行以下操作： 使用 postgres 作为用户名和密码连接到 localhost 创建一个名为 kubernetes 的数据库 最常见的 MySQL 和 MariaDB 的 datastore-endpoint 参数格式如下： mysql://username:password@tcp(hostname:3306)/database-name 支持使用更高级的配置参数。有关更多信息，请参阅 https://github.com/go-sql-driver/mysql#dsn-data-source-name 请注意，由于 K3s 的一个已知问题，你无法设置 tls 参数。TLS 通信是支持的，但你不能将此参数设置为 “skip-verify” 以使 K3s 跳过证书验证。 如果指定数据库名称不存在，server 将尝试创建它。 如果你只提供了 mysql:// 作为端点，K3s 将尝试执行以下操作： 通过 root 用户，不使用密码连接到 /var/run/mysqld/mysqld.sock 的 MySQL socket 创建一个名为 kubernetes 的数据库 最常见的 etcd 的 datastore-endpoint 参数格式如下： https://etcd-host-1:2379,https://etcd-host-2:2379,https://etcd-host-3:2379 以上假设使用的是典型的三节点 etcd 集群。该参数可以再接受一个逗号分隔的 etcd URL。","s":"数据存储端点格式和功能","u":"/zh/datastore","h":"#数据存储端点格式和功能","p":1003},{"i":1010,"t":"K3s 的备份和恢复方式取决于你使用的数据存储类型。 警告 除了备份数据存储本身，你还必须备份位于 /var/lib/rancher/k3s/server/token 的 Server Token 文件。 使用备份进行恢复时，你必须恢复此文件，或将其值传递给 --token 选项。 由于 Token 用于加密数据存储内的凭证数据，因此如果还原时没有使用相同的 Token 值，快照将无法使用。","s":"备份和恢复","u":"/zh/datastore/backup-restore","h":"","p":1009},{"i":1012,"t":"你不需要使用特殊命令就能备份或恢复 SQLite 数据存储。 要备份 SQLite 数据存储，请复制 /var/lib/rancher/k3s/server/db/。 要恢复 SQLite 数据存储，请恢复 /var/lib/rancher/k3s/server/db 的内容（以及 Token，如上所述）。","s":"使用 SQLite 进行备份和恢复","u":"/zh/datastore/backup-restore","h":"#使用-sqlite-进行备份和恢复","p":1009},{"i":1014,"t":"使用外部数据存储时，备份和恢复操作在 K3s 外面处理。数据库管理员需要对外部数据库进行备份，或者使用快照或转储进行恢复。 我们建议将数据库配置为执行定期快照。 有关获取数据库快照并从中恢复数据库的详细信息，请参阅官方数据库文档： MySQL 官方文档 PostgreSQL 官方文档 etcd 官方文档","s":"使用外部数据存储进行备份和恢复","u":"/zh/datastore/backup-restore","h":"#使用外部数据存储进行备份和恢复","p":1009},{"i":1016,"t":"有关在嵌入式 etcd 数据存储上执行备份和恢复操作的信息，请参阅 k3s etcd-snapshot 命令文档。","s":"使用嵌入式 etcd 数据存储进行备份和恢复","u":"/zh/datastore/backup-restore","h":"#使用嵌入式-etcd-数据存储进行备份和恢复","p":1009},{"i":1019,"t":"本文介绍了如何安装具有外部数据库的高可用 K3s 集群。 单服务器集群可以满足各种用例，但如果你的环境对 Kubernetes control plane 的正常运行时间有要求，你可以在 HA 配置中运行 K3s。一个 HA K3s 集群包括： 两个或多个 Server 节点为 Kubernetes API 提供服务并运行其他 control plane 服务 外部数据存储（与单节点设置中使用的嵌入式 SQLite 数据存储相反） 可选：零个或多个 Agent 节点，用于运行你的应用和服务 可选：固定注册地址，供 Agent 节点注册到集群 有关这些组件如何协同工作的详细信息，请参阅架构。","s":"高可用外部数据库","u":"/zh/datastore/ha","h":"","p":1018},{"i":1021,"t":"设置 HA 集群需要以下步骤：","s":"安装概要","u":"/zh/datastore/ha","h":"#安装概要","p":1018},{"i":1023,"t":"你首先需要为集群创建一个外部数据存储。有关更多详细信息，请参阅集群数据存储选项文档。","s":"1. 创建外部数据存储","u":"/zh/datastore/ha","h":"#1-创建外部数据存储","p":1018},{"i":1025,"t":"K3s 需要两个或更多的 Server 节点来实现 HA 配置。有关最低主机要求，请参阅安装要求。 在这些节点上运行 k3s server 命令时，你必须设置 datastore-endpoint 参数，以便 K3s 知道如何连接到外部数据存储。token 参数也可以用来在添加节点时设置一个固定的 token。当为空时，将自动生成 token。 例如，你可以使用如下命令安装 K3s Server，并使用 MySQL 数据库作为外部数据存储和设置 token： curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" 备注 中国用户，可以使用以下方法加速安装： curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" 根据数据库类型的不同，数据存储端点的格式也不同。有关详细信息，请参阅数据存储端点格式。 要在启动 server 节点时配置 TLS 证书，请参阅数据存储配置指南。 备注 单台 Server 安装时可用的安装选项也适用于高可用安装。有关详细信息，请参阅配置选项文档。 默认情况下，Server 节点是可调度的，因此你的工作负载可以在它们上启动。如果你希望拥有一个不会运行用户工作负载的专用 control plane，你可以使用污点（taint）。node-taint 参数将允许你配置带有污点的节点，例如 --node-taint CriticalAddonsOnly=true:NoExecute。 在所有 server 节点上启动 k3s server 进程后，请通过 k3s kubectl get nodes 确保集群已正确启动。你应该看到 server 节点处于 Ready 状态。","s":"2. 启动 Server 节点","u":"/zh/datastore/ha","h":"#2-启动-server-节点","p":1018},{"i":1027,"t":"步骤 2 中的相同示例命令可用于加入其他 Server 节点，其中需要使用第一个节点的 Token。 如果第一个 Server 节点是在没有 --token CLI 标志或 K3S_TOKEN 变量的情况下启动的，那么可以从任何已经加入集群的 Server 节点中检索到 Token： cat /var/lib/rancher/k3s/server/token 然后可以使用 Token 添加其他 Server 节点： curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" 备注 中国用户，可以使用以下方法加速安装： curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" 有几个配置标志在所有 Server 节点中必须是相同的: 网络相关标志：--cluster-dns、--cluster-domain、--cluster-cidr、--service- cidr 控制某些组件部署的标志：--disable-helm-controller、--disable-kube-proxy、--disable-network-policy 和任何传递给 --disable 的组件 功能相关标志：--secrets-encryption 备注 你需要备份 token 的值，因为恢复备份和添加节点时都需要该 token。以前，K3s 在使用外部 SQL 数据存储时不强制使用 token。","s":"3. 可选：加入其它 Server 节点","u":"/zh/datastore/ha","h":"#3-可选加入其它-server-节点","p":1018},{"i":1029,"t":"因为 K3s Server 节点默认是可调度的，所以 HA K3s 集群不需要 Agent 节点。但是，你可能希望使用专门的 Agent 节点来运行应用程序和服务。 在 HA 集群中加入 Agent 节点与在单个 Server 集群中加入 Agent 节点是一样的。你只需要指定 Agent 应该注册的 URL（server IP 之一或固定注册地址）和要使用的 Token 即可。 K3S_TOKEN=SECRET k3s agent --server https://server-or-fixed-registration-address:6443","s":"4. 可选：加入 Agent 节点","u":"/zh/datastore/ha","h":"#4-可选加入-agent-节点","p":1018},{"i":1031,"t":"Agent 节点需要一个 URL 来注册。这可以是任何 server 节点的 IP 或主机名，但在许多情况下，这些节点可能会随着时间的推移而改变。例如，如果你在支持缩放组的云中运行集群，你可能会纵向缩放 Server 节点组，导致节点被创建和销毁，从而导致 Server 节点集的 IP 发生改变。因此，你应该在 Server 节点前面有一个稳定的端点，而且它不会随时间推移而改变。你可以使用许多方法来设置此端点，例如： 4 层 (TCP) 负载均衡器 轮询 DNS 虚拟或弹性 IP 地址 这个端点也可以用来访问 Kubernetes API。因此，你可以修改 kubeconfig 文件来指向它，而不是特定的节点。 要避免此类配置中的证书错误，请使用 --tls-san YOUR_IP_OR_HOSTNAME_HERE 选项来配置 Server。这个选项在 TLS 证书中增加了一个额外的主机名或 IP 作为 Subject Alternative Name，如果你想通过 IP 和主机名访问，可以多次指定。","s":"5. 可选：配置固定的注册地址","u":"/zh/datastore/ha","h":"#5-可选配置固定的注册地址","p":1018},{"i":1033,"t":"警告 嵌入式 etcd (HA) 在速度较慢的磁盘（例如使用 SD 卡运行的 Raspberry Pi）上可能会出现性能问题。 信息 HA 嵌入式 etcd 集群必须由奇数个 Server 节点组成，以便 etcd 维持 quorum。对于有 n 个 server 的集群，quorum 是 (n/2)+1。如果集群节点数量是奇数，每新增一个节点，都会增加 quorum 所需节点数。虽然将节点添加到奇数节点数量的集群增加了机器，看起来更好，但其实集群的容错性会变差，这是因为完全相同数量的节点可能失败而不丢失 quorum，但有更多的节点可能失败。 具有嵌入式 etcd 的 HA K3s 集群由以下部分组成： 三个或多个 Server 节点为 Kubernetes API 提供服务并运行其他 control plane 服务，以及托管嵌入式 etcd 数据存储。 可选：零个或多个 Agent 节点，用于运行你的应用和服务 可选：固定注册地址，供 Agent 节点注册到集群 首先，启动一个带有 cluster-init 标志的 Server 节点来启用集群和一个令牌，该令牌将作为共享 secret，用于将其他 Server 加入集群。 curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --cluster-init 备注 中国用户，可以使用以下方法加速安装： curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --cluster-init 启动第一台服务器后，使用共享 secret 将第二台和第三台服务器加入集群： curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443 备注 中国用户，可以使用以下方法加速安装： curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_TOKEN=SECRET sh -s - server --server https://<ip or hostname of server1>:6443 检查第二个和第三个服务器是否已加入集群： $ kubectl get nodes NAME STATUS ROLES AGE VERSION server1 Ready control-plane,etcd,master 28m vX.Y.Z server2 Ready control-plane,etcd,master 13m vX.Y.Z server3 Ready control-plane,etcd,master 10m vX.Y.Z 现在你有了一个高可用的 control plane。你可以在 --server 参数中使用任何集群 server，从而加入其他 server 和 agent 节点。将其他 agent 节点加入到集群中，步骤与 server 相同。 curl -sfL https://get.k3s.io | K3S_TOKEN=SECRET sh -s - agent --server https://<ip or hostname of server>:6443 有几个配置标志在所有 Server 节点中必须是相同的: 网络相关标志：--cluster-dns、--cluster-domain、--cluster-cidr、--service- cidr 控制某些组件部署的标志：--disable-helm-controller、--disable-kube-proxy、--disable-network-policy 和任何传递给 --disable 的组件 功能相关标志：--secrets-encryption","s":"高可用嵌入式 etcd","u":"/zh/datastore/ha-embedded","h":"","p":1032},{"i":1035,"t":"如果你有一个使用默认嵌入式 SQLite 数据库的现有集群，你可以通过使用 --cluster-init 标志重新启动你的 K3s server，从而将其转换为 etcd。完成此操作后，你将能够如上所述添加其他实例。 如果由于节点已经初始化或加入了一个集群，导致在磁盘上发现一个 etcd 数据存储，那么数据存储参数（--cluster-init、--server、--datastore-endpoint 等）将被忽略。 重要提示：K3s v1.22.2 及更高版本支持将 SQLite 迁移到 etcd。如果你将 --cluster-init 添加到现有 server，旧版本将创建一个新的空数据存储。","s":"现有的单节点集群","u":"/zh/datastore/ha-embedded","h":"#现有的单节点集群","p":1032},{"i":1037,"t":"本文会定期更新，用于解答用户常见的 K3s 相关问题。","s":"常见问题","u":"/zh/faq","h":"","p":1036},{"i":1039,"t":"K3s 是经过 CNCF 认证的 Kubernetes 发行版，可以胜任标准 Kubernetes 集群的所有工作。它只是一个更轻量级的版本。有关详细信息，请参阅介绍文档。","s":"K3s 是 Kubernetes 的替代品吗？","u":"/zh/faq","h":"#k3s-是-kubernetes-的替代品吗","p":1036},{"i":1041,"t":"你只需使用 --disable=traefik 启动 K3s Server，然后部署你的 Ingress 即可。","s":"如何使用自己的 Ingress 代替 Traefik？","u":"/zh/faq","h":"#如何使用自己的-ingress-代替-traefik","p":1036},{"i":1043,"t":"目前 K3s 本身不支持 Windows，但我们对此想法持开放态度。","s":"K3s 支持 Windows 吗？","u":"/zh/faq","h":"#k3s-支持-windows-吗","p":1036},{"i":1045,"t":"请参考 K3s BUILDING.md 的说明。","s":"如何通过源码构建？","u":"/zh/faq","h":"#如何通过源码构建","p":1036},{"i":1047,"t":"K3s 日志的位置将根据你运行 K3s 的方式和节点的操作系统而有所不同。 从命令行运行时，日志将发送到 stdout 和 stderr。 使用 openrc 运行时，将在 /var/log/k3s.log 中创建日志。 使用 systemd 运行时，日志将发送到 Journald 并可以使用 journalctl -u k3s 查看​​。 Pod 日志在 /var/log/pods 中。 Containerd 日志在 /var/lib/rancher/k3s/agent/containerd/containerd.log 中。 你可以在启动 K3s 时使用 --debug 标志（或配置文件中的 debug: true）来生成更详细的日志。 Kubernetes 使用名为 klog 的日志管理框架，该框架对进程中的所有组件使用单一的日志管理配置。 由于 K3s 在单个进程中运行所有 Kubernetes 组件，因此无法为单个 Kubernetes 组件配置不同的日志级别或目的位置。 使用 -v=<level> 或 --vmodule=<module>=<level> 组件参数的效果可能不如预期。 要获得更多日志选项，请参阅其他日志来源。","s":"K3s 日志在哪里？","u":"/zh/faq","h":"#k3s-日志在哪里","p":1036},{"i":1049,"t":"是的，有几种方法可以让你在 Docker 中运行 K3s。有关详细信息，请参阅高级选项。","s":"可以在 Docker 中运行 K3s 吗？","u":"/zh/faq","h":"#可以在-docker-中运行-k3s-吗","p":1036},{"i":1051,"t":"有关管理 K3s join token 的更多信息，请参阅 k3s token 命令文档。","s":"K3s Server 和 Agent Token 有什么区别？","u":"/zh/faq","h":"#k3s-server-和-agent-token-有什么区别","p":1036},{"i":1053,"t":"通常，Kubernetes 版本倾斜策略适用。 简而言之，Server 版本可以比 Agnet 新，但 Agent 不能比 Server 新。","s":"不同版本的 K3s 兼容性如何？","u":"/zh/faq","h":"#不同版本的-k3s-兼容性如何","p":1036},{"i":1055,"t":"如果你在部署 K3s 时遇到问题，你应该： 1) 检查已知问题页面。 2) 检查你是否已解决其他操作系统准备。运行 k3s check-config 并确保它通过。 3) 在 K3s Issues 和 Discussions 中搜索匹配的问题。 4) 加入 Rancher Slack K3s 频道以获得帮助。 5) 在 K3s Github 上提交新 issue，你可以描述你的设置和遇到的问题。","s":"如果我遇到问题，可以在哪里获得帮助？","u":"/zh/faq","h":"#如果我遇到问题可以在哪里获得帮助","p":1036},{"i":1057,"t":"Helm 是 Kubernetes 的包管理工具。Helm Chart 为 Kubernetes YAML 清单文件提供了模板语法。借助 Helm，开发人员或集群管理员可以创建称为 Chart 的可配置模板，而不仅仅是使用静态清单。如果你需要创建自己的 Chart catalog，请参阅 https://helm.sh/docs/intro/quickstart/。 K3s 不需要使用任何特殊配置来支持 Helm。请确保你已根据集群访问文档正确设置了 kubeconfig 路径。 K3s 包含一个 Helm Controller，它使用 HelmChart 自定义资源定义 (CRD) 来管理 Helm Chart 的安装、升级、重新配置和卸载。与自动部署 AddOn 清单配合使用后，它可以在磁盘上创建单个文件，自动在集群上安装 Helm Chart。","s":"Helm","u":"/zh/helm","h":"","p":1056},{"i":1059,"t":"HelmChart Custom Resource 捕获了你通常传递给 helm 命令行工具的大部分选项。以下示例说明了如何从 Bitnami Chart 仓库部署 Apache，并覆盖某些默认的 Chart 值。请注意，HelmChart 资源本身位于 kube-system 命名空间中，但 Chart 的资源将部署到在同一清单中创建的 web 命名空间。如果你希望将 HelmChart 资源与其部署的资源分开，这将很有用。 apiVersion: v1 kind: Namespace metadata: name: web --- apiVersion: helm.cattle.io/v1 kind: HelmChart metadata: name: apache namespace: kube-system spec: repo: https://charts.bitnami.com/bitnami chart: apache targetNamespace: web valuesContent: |- service: type: ClusterIP ingress: enabled: true hostname: www.example.com metrics: enabled: true HelmChart 字段定义​ 字段 默认 描述 Helm 参数/标志等效项 metadata.name Helm Chart 名称 NAME spec.chart 仓库中的 Helm Chart 名称，或 chart archive (.tgz) 的完整 HTTPS URL CHART spec.targetNamespace default Helm Chart 目标命名空间 --namespace spec.version Helm Chart 版本（通过仓库安装时） --version spec.repo Helm Chart 仓库 URL --repo spec.repoCA 指定启用 HTTPS 的 Server 的证书 --ca-file spec.helmVersion v3 要使用的 Helm 版本（v2 或 v3） spec.bootstrap False 如果需要此 Chart 来引导集群（Cloud Controller Manager 等），请设置为 True spec.set 覆盖简单的默认 Chart 值。优先于通过 valuesContent 设置的选项。 --set / --set-string spec.jobImage 指定安装 helm chart 时要使用的镜像。例如：rancher/klipper-helm:v0.3.0 spec.timeout 300 Helm 操作的超时秒数 --timeout spec.failurePolicy reinstall 如果设置为 abort，Helm 操作会被中止，等待操作人员的手动干预。 spec.valuesContent 通过 YAML 文件内容覆盖复杂的默认 Chart 值 --values spec.chartContent Base64 编码的 chart archive .tgz，覆盖 spec.chart CHART 你可以通过集群内的 Kubernetes APIServer 匿名访问 /var/lib/rancher/k3s/server/static/ 中的内容。此 URL 可以使用 spec.chart 字段中的特殊变量 %{KUBERNETES_API}% 进行模板化。例如，打包的 Traefik 组件通过 https://%{KUBERNETES_API}%/static/charts/traefik-12.0.000.tgz 加载 Chart。 备注 name 字段需要遵循 Helm Chart 命名约定。如需了解更多信息，请参阅 Helm 最佳实践文档。","s":"使用 Helm Controller","u":"/zh/helm","h":"#使用-helm-controller","p":1056},{"i":1061,"t":"版本 从 v1.19.1+k3s1 起可用 为了允许覆盖部署为 HelmCharts（例如 Traefik）的打包组件的值，K3s 支持通过 HelmChartConfig 资源进行自定义部署。HelmChartConfig 资源必须与对应的 HelmChart 名称和命名空间匹配，并且支持提供额外的 valuesContent，它作为附加值文件传递给 helm 命令。 备注 HelmChart spec.set 值会覆盖 HelmChart 和 HelmChartConfig spec.valuesContent 设置。 例如，要自定义打包的 Traefik ingress 配置，你可以创建一个名为 /var/lib/rancher/k3s/server/manifests/traefik-config.yaml 的文件并使用以下内容填充它： apiVersion: helm.cattle.io/v1 kind: HelmChartConfig metadata: name: traefik namespace: kube-system spec: valuesContent: |- image: name: traefik tag: v2.8.5 forwardedHeaders: enabled: true trustedIPs: - 10.0.0.0/8 ssl: enabled: true permanentRedirect: false","s":"使用 HelmChartConfig 自定义打包组件","u":"/zh/helm","h":"#使用-helmchartconfig-自定义打包组件","p":1056},{"i":1063,"t":"版本 v1.17.0+k3s.1 开始支持 Helm v3 并默认使用它。 K3s 可以处理 Helm v2 或 Helm v3。如果你想迁移到 Helm v3，Helm 的这篇博客文章解释了如何使用插件进行迁移。有关更多信息，请参阅官方 Helm 3 文档。请确保你已按照集群访问部分正确设置了 kubeconfig。 备注 Helm 3 不再需要 Tiller 和 helm init 命令。详情请参阅官方文档。","s":"从 Helm v2 迁移","u":"/zh/helm","h":"#从-helm-v2-迁移","p":1056},{"i":1065,"t":"本文包含了在各种环境下安装 K3s 的说明。在开始安装 K3s 之前，请确保已满足 K3s 的安装要求。 配置选项提供了安装 K3s 时可用选项的指南。 网络选项提供了 K3s 中可用网络选项的指南。 离线安装详细介绍了如何在无法直接访问互联网的环境中设置 K3s。 管理 Server 角色详细介绍了如何使用专用 control-plane 或 etcd Server 设置 K3s。 管理打包组件详细介绍了如何禁用打包组件，或使用自动部署清单安装你自己的组件。","s":"安装","u":"/zh/installation","h":"","p":1064},{"i":1067,"t":"你可以使用两种不同的方法在离线环境中安装 K3s。离线环境指的是不直接连接到 Internet 的环境。你可以部署私有镜像仓库和 mirror docker.io，也可以手动部署镜像，例如用于小型集群。","s":"离线安装","u":"/zh/installation/airgap","h":"","p":1066},{"i":1069,"t":"本文档假设你已经在离线环境中创建了节点，并且在堡垒主机上拥有 Docker 私有镜像仓库。 如果你尚未设置私有 Docker 镜像仓库，请参阅官方文档。","s":"私有镜像仓库","u":"/zh/installation/airgap","h":"#私有镜像仓库","p":1066},{"i":1071,"t":"按照私有镜像仓库配置指南创建和配置 registry.yaml 文件。 完成此操作后，你现在可以转到下面的安装 K3s 部分。","s":"创建镜像仓库 YAML","u":"/zh/installation/airgap","h":"#创建镜像仓库-yaml","p":1066},{"i":1073,"t":"我们假设你已经在离线环境中创建了节点并使用 Containerd 作为容器运行时。 此方法需要你手动将必要的镜像部署到每个节点，适用于无法运行私有镜像仓库的边缘部署。","s":"手动部署镜像","u":"/zh/installation/airgap","h":"#手动部署镜像","p":1066},{"i":1075,"t":"从 Releases 页面获取要运行的 K3s 版本的镜像 tar 文件。 将 tar 文件放在 images 目录下，例如： sudo mkdir -p /var/lib/rancher/k3s/agent/images/ sudo cp ./k3s-airgap-images-$ARCH.tar /var/lib/rancher/k3s/agent/images/ 完成此操作后，你现在可以转到下面的安装 K3s 部分。","s":"准备镜像目录和 K3s 二进制文件","u":"/zh/installation/airgap","h":"#准备镜像目录和-k3s-二进制文件","p":1066},{"i":1078,"t":"在安装 K3s 之前，完成上面的私有镜像仓库或手动部署镜像操作，预填充 K3s 需要安装的镜像。 从 Releases 页面下载 K3s 二进制文件，该文件需要匹配用于获取离线镜像的版本。将二进制文件放在每个离线节点上的 /usr/local/bin 中，并确保文件是可执行的。 在 get.k3s.io 下载 K3s 安装脚本。将安装脚本放在每个离线节点上的任何位置，并将其命名为 install.sh。 如果你的节点没有带默认路由的接口，则必须配置默认路由，使用虚拟接口的黑洞路由也足够了。K3s 需要一个默认路由来自动检测节点的主 IP，并使 kube-proxy ClusterIP 路由正常运行。要添加虚拟路由，请执行以下操作： ip link add dummy0 type dummy ip link set dummy0 up ip addr add 169.254.255.254/31 dev dummy0 ip route add default via 169.254.255.255 dev dummy0 metric 1000 使用 INSTALL_K3S_SKIP_DOWNLOAD 环境变量运行 K3s 脚本时，K3s 将使用脚本的本地版本和二进制文件。","s":"先决条件","u":"/zh/installation/airgap","h":"#先决条件","p":1066},{"i":1080,"t":"你可以在一台或多台服务器上安装 K3s，如下所述。 单节点配置 高可用配置 要在单个服务器上安装 K3s，只需在 Server 节点上执行以下操作： INSTALL_K3S_SKIP_DOWNLOAD=true ./install.sh 要添加其他 Agent，请在每个 Agent 节点上执行以下操作。 INSTALL_K3S_SKIP_DOWNLOAD=true K3S_URL=https://<SERVER_IP>:6443 K3S_TOKEN=<YOUR_TOKEN> ./install.sh 备注 Server 的 Token 通常位于 /var/lib/rancher/k3s/server/token。 参考具有外部数据库的高可用或具有嵌入式数据库的高可用指南。你需要调整安装命令来指定 INSTALL_K3S_SKIP_DOWNLOAD=true，并在本地运行安装脚本，而不是使用 curl。你还将使用 INSTALL_K3S_EXEC='args' 为 K3s 提供参数。 例如，具有外部数据库的高可用指南的第二步提到了以下内容： curl -sfL https://get.k3s.io | sh -s - server \\ --token=SECRET \\ --datastore-endpoint=\"mysql://username:password@tcp(hostname:3306)/database-name\" 你需要修改此类示例，如下所示： INSTALL_K3S_SKIP_DOWNLOAD=true INSTALL_K3S_EXEC='server --token=SECRET' \\ K3S_DATASTORE_ENDPOINT='mysql://username:password@tcp(hostname:3306)/database-name' \\ ./install.sh 备注 K3s 还为 kubelet 提供了一个 --resolv-conf 标志，有助于在离线网络中配置 DNS。","s":"在离线环境中安装 K3s","u":"/zh/installation/airgap","h":"#在离线环境中安装-k3s","p":1066},{"i":1083,"t":"你可以通过以下方式完成离线环境的升级： 从 Releases 页面下载要升级的 K3s 版本的新离线镜像 tar 包。将 tar 文件放在每个节点上的 /var/lib/rancher/k3s/agent/images/ 目录中。删除旧的 tar 文件。 复制并替换每个节点上 /usr/local/bin 中的旧 K3s 二进制文件。复制 K3s 安装脚本（因为脚本可能自上次版本发布以来已更改）。使用相同的环境变量再次运行脚本。 重启 K3s 服务（如果安装程序没有自动重启 K3s 的话）。","s":"安装脚本方法","u":"/zh/installation/airgap","h":"#安装脚本方法","p":1066},{"i":1085,"t":"K3s 支持自动升级。要在离线环境中启用此功能，你必须确保所需的镜像在你的私有镜像仓库中可用。 你将需要与你打算升级到的 K3s 版本相对应的 rancher/k3s-upgrade 版本。注意，镜像标签将 K3s 版本中的 + 替换为 -，因为 Docker 镜像不支持 +。 你还需要在你要部署的 system-upgrade-controller 清单 YAML 中指定的 system-upgrade-controller 和 kubectl 版本。在这里检查 system-upgrad-controller 的最新版本，并下载 system-upgrade-controller.yaml 来确定你需要推送到私有镜像仓库的版本。例如，在 system-upgrade-controller 的 v0.4.0 版本中，清单 YAML 中指定了这些镜像： rancher/system-upgrade-controller:v0.4.0 rancher/kubectl:v0.17.0 将必要的 rancher/k3s-upgrade、rancher/system-upgrade-controller 和 rancher/kubectl 镜像添加到私有镜像仓库后，请按照自动升级指南进行操作。","s":"自动升级","u":"/zh/installation/airgap","h":"#自动升级","p":1066},{"i":1087,"t":"本文重点介绍首次设置 K3s 时常用的选项。如需了解详情，请参阅有关高级选项和配置以及 server 和 agent 命令的文档。","s":"配置选项","u":"/zh/installation/configuration","h":"","p":1086},{"i":1089,"t":"如快速入门指南中所述，你可以使用 https://get.k3s.io 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。 你可以结合使用 INSTALL_K3S_EXEC、K3S_ 环境变量和命令标志将配置传递给服务配置。 带前缀的环境变量、INSTALL_K3S_EXEC 值和尾附的 shell 参数都保存在服务配置中。 安装后，如果需要更改配置，你可以编辑环境文件、编辑服务配置或简单使用新选项重新运行安装程序。 为了说明这一点，以下命令均同样地没有 Flannel 和使用令牌的情况下注册 Server： curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"server\" sh -s - --flannel-backend none --token 12345 curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"server --flannel-backend none\" K3S_TOKEN=12345 sh -s - curl -sfL https://get.k3s.io | K3S_TOKEN=12345 sh -s - server --flannel-backend none # server is assumed below because there is no K3S_URL curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"--flannel-backend none --token 12345\" sh -s - curl -sfL https://get.k3s.io | sh -s - --flannel-backend none --token 12345 注册 Agent 时，以下命令都会导致同样的行为： curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"agent --server https://k3s.example.com --token mypassword\" sh -s - curl -sfL https://get.k3s.io | INSTALL_K3S_EXEC=\"agent\" K3S_TOKEN=\"mypassword\" sh -s - --server https://k3s.example.com curl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com sh -s - agent --token mypassword curl -sfL https://get.k3s.io | K3S_URL=https://k3s.example.com K3S_TOKEN=mypassword sh -s - # agent is assumed because of K3S_URL 有关所有环境变量的详细信息，请参阅环境变量。 信息 如果你在运行安装脚本时进行了配置，但在重新运行安装脚本时没有重新设置，则原始值将会丢失。 配置文件 的内容不受安装脚本管理。 要让你的配置独立于安装脚本，请使用配置文件而不是传递环境变量或使用安装脚本参数。","s":"使用安装脚本的选项","u":"/zh/installation/configuration","h":"#使用安装脚本的选项","p":1086},{"i":1091,"t":"如前所述，安装脚本主要是将 K3s 配置为服务来运行。 如果你选择不使用该脚本，你可以通过我们的 Releases 页面下载二进制文件，将其放在你的路径上，然后执行它即可运行 K3s。对于永久安装而言这不是特别有用，但如果执行不需要将 K3s 作为系统服务管理的快速测试，这可能有用。 curl -Lo /usr/local/bin/k3s https://github.com/k3s-io/k3s/releases/download/v1.26.5+k3s1/k3s; chmod a+x /usr/local/bin/k3s 你可以通过设置 K3S_ 环境变量来传递配置： K3S_KUBECONFIG_MODE=\"644\" k3s server 或使用命令标志： k3s server --write-kubeconfig-mode=644 K3s Agent 也可以这样配置： k3s agent --server https://k3s.example.com --token mypassword 关于配置 K3s Server 的详细信息，请参阅 K3s Server 文档。 有关配置 K3s Agent 的详细信息，请参阅 K3s Agent 文档。 你还可以使用 --help 标志来查看所有可用选项及其对应的环境变量。 匹配标志 匹配 Server 节点上的关键标志是非常重要的。例如，如果你在 master 节点上使用了 --disable servicelb 或 --cluster-cidr=10.200.0.0/16 标志，但是没有在其他 Server 节点上进行相同的设置，节点将无法加入。它们会显示 failed to validate server configuration: critical configuration value mismatch 错误。 有关必须在 Server 节点上设置的标志的更多信息，请参阅 Server 配置文档（上方链接）。","s":"二进制配置","u":"/zh/installation/configuration","h":"#二进制配置","p":1086},{"i":1093,"t":"版本 从 v1.19.1+k3s1 起可用 除了使用环境变量和 CLI 参数之外，你还可以使用配置文件配置 K3s。 默认情况下，安装时将使用位于 /etc/rancher/k3s/config.yaml 的 YAML 文件中的值。 下面是一个 server 配置文件的基本示例： write-kubeconfig-mode: \"0644\" tls-san: - \"foo.local\" node-label: - \"foo=bar\" - \"something=amazing\" cluster-init: true 等效于以下 CLI 参数： k3s server \\ --write-kubeconfig-mode \"0644\" \\ --tls-san \"foo.local\" \\ --node-label \"foo=bar\" \\ --node-label \"something=amazing\" \\ --cluster-init 一般来说，CLI 参数映射到各自的 YAML 键，可重复的 CLI 参数被表示为 YAML 列表。布尔标志在 YAML 文件中表示为 true 或 false。 也可以同时使用配置文件和 CLI 参数。 在这种情况下，值将从两个来源加载，但 CLI 参数将优先。 对于 --node-label 等可重复参数，CLI 参数将覆盖列表中的所有值。 最后，配置文件的位置可以通过 CLI 参数 --config FILE, -c FILE 或者环境变量 $K3S_CONFIG_FILE 来改变。","s":"配置文件","u":"/zh/installation/configuration","h":"#配置文件","p":1086},{"i":1095,"t":"版本 从 v1.21.0+k3s1 起可用 支持多个配置文件。默认从 /etc/rancher/k3s/config.yaml 和 /etc/rancher/k3s/config.yaml.d/*.yaml 中按字母顺序读取配置文件。 默认情况下，将使用给定键的最后一个值。可以将 + 附加到键，这样能将值附加到现有字符串或切片，而不是替换它。后续文件中的所有此键也需要使用 + 来防止覆盖累积值。 多个配置文件的示例如下： # config.yaml token: boop node-label: - foo=bar - bar=baz # config.yaml.d/test1.yaml write-kubeconfig-mode: 600 node-taint: - alice=bob:NoExecute # config.yaml.d/test2.yaml write-kubeconfig-mode: 777 node-label: - other=what - foo=three node-taint+: - charlie=delta:NoSchedule 因此，最终配置如下： write-kubeconfig-mode: 777 token: boop node-label: - other=what - foo=three node-taint: - alice=bob:NoExecute - charlie=delta:NoSchedule","s":"多个配置文件","u":"/zh/installation/configuration","h":"#多个配置文件","p":1086},{"i":1097,"t":"你可以把上述所有选项组合成一个示例。 config.yaml 文件创建在 /etc/rancher/k3s/config.yaml 中： token: \"secret\" debug: true 然后使用环境变量和标志组合来运行安装脚本： curl -sfL https://get.k3s.io | K3S_KUBECONFIG_MODE=\"644\" INSTALL_K3S_EXEC=\"server\" sh -s - --flannel-backend none 或者，如果你已经安装了 K3s 二进制文件： K3S_KUBECONFIG_MODE=\"644\" k3s server --flannel-backend none Server 情况如下： kubeconfig 文件权限为 644 Flannel 后端设置为 none 令牌设置为 secret 启用调试日志记录","s":"组合使用","u":"/zh/installation/configuration","h":"#组合使用","p":1086},{"i":1099,"t":"本安装指南将帮助你在 K3s 上部署和配置 Kubernetes 仪表板。","s":"Kubernetes 仪表板","u":"/zh/installation/kube-dashboard","h":"","p":1098},{"i":1101,"t":"GITHUB_URL=https://github.com/kubernetes/dashboard/releases VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||') sudo k3s kubectl create -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml","s":"部署 Kubernetes 仪表板","u":"/zh/installation/kube-dashboard","h":"#部署-kubernetes-仪表板","p":1098},{"i":1103,"t":"重要提示：在本指南中创建的 admin-user 将在仪表板中拥有管理权限。 创建以下资源清单文件： dashboard.admin-user.yml apiVersion: v1 kind: ServiceAccount metadata: name: admin-user namespace: kubernetes-dashboard dashboard.admin-user-role.yml apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: admin-user roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: admin-user namespace: kubernetes-dashboard 部署 admin-user 配置： sudo k3s kubectl create -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml","s":"仪表板 RBAC 配置","u":"/zh/installation/kube-dashboard","h":"#仪表板-rbac-配置","p":1098},{"i":1105,"t":"v1.24 和更新版本 v1.23 和更低版本 sudo k3s kubectl -n kubernetes-dashboard create token admin-user sudo k3s kubectl -n kubernetes-dashboard describe secret admin-user-token | grep '^token'","s":"获取持有者令牌","u":"/zh/installation/kube-dashboard","h":"#获取持有者令牌","p":1098},{"i":1107,"t":"要访问仪表板，你必须为你的 K3s 集群创建一个安全通道： sudo k3s kubectl proxy 现在，你可以通过以下网址访问仪表盘： http://localhost:8001/api/v1/namespaces/kubernetes-dashboard/services/https:kubernetes-dashboard:/proxy/ 使用 admin-user 持有者令牌进行登录。 高级：远程访问仪表板​ 请参阅仪表板文档：使用端口转发访问集群中的应用程序。","s":"本地访问仪表板","u":"/zh/installation/kube-dashboard","h":"#本地访问仪表板","p":1098},{"i":1109,"t":"sudo k3s kubectl delete ns kubernetes-dashboard GITHUB_URL=https://github.com/kubernetes/dashboard/releases VERSION_KUBE_DASHBOARD=$(curl -w '%{url_effective}' -I -L -s -S ${GITHUB_URL}/latest -o /dev/null | sed -e 's|.*/||') sudo k3s kubectl apply -f https://raw.githubusercontent.com/kubernetes/dashboard/${VERSION_KUBE_DASHBOARD}/aio/deploy/recommended.yaml -f dashboard.admin-user.yml -f dashboard.admin-user-role.yml","s":"升级仪表板","u":"/zh/installation/kube-dashboard","h":"#升级仪表板","p":1098},{"i":1111,"t":"sudo k3s kubectl delete ns kubernetes-dashboard sudo k3s kubectl delete clusterrolebinding kubernetes-dashboard sudo k3s kubectl delete clusterrole kubernetes-dashboard","s":"删除仪表板和 admin-user 配置","u":"/zh/installation/kube-dashboard","h":"#删除仪表板和-admin-user-配置","p":1098},{"i":1113,"t":"本文介绍了 K3s 网络配置选项，包括配置或替换 Flannel，以及配置 IPv6。 注意：有关 CoreDNS、Traefik 和 Service LB 的信息，请参阅网络页面。","s":"网络选项","u":"/zh/installation/network-options","h":"","p":1112},{"i":1115,"t":"Flannel 是第 3 层网络结构的轻量级提供程序，它实现了 Kubernetes 容器网络接口 (CNI)。它就是通常所说的 CNI 插件。 Flannel 只能在 Server 节点上设置选项，并且集群中的所有 Server 上都必须相同。 Flannel 的默认后端是 vxlan。要启用加密，请使用 wireguard-native 后端。 在 Rasperry Pi 上使用 vxlan 和最新版本的 Ubuntu 需要额外的准备工作。 在某些 Linux 发行版上使用 wireguard-native 作为 Flannel 后端可能需要额外的模块。有关详细信息，请参阅 WireGuard 安装指南。 WireGuard 的安装步骤将确保为你的操作系统安装适当的内核模块。 在尝试使用 WireGuard Flannel 后端之前，你必须确保 WireGuard 内核模块在每个节点（包括 Server 和 Agent）上都可用。 CLI 标志和值 描述 --flannel-ipv6-masq 将伪装规则应用于 IPv6 流量（默认为 IPv4）。仅适用于双栈或仅使用 IPv6 的集群。与 none 以外的任何 Flannel 后端兼容。 --flannel-external-ip 使用节点外部 IP 地址作为 Flannel 流量的目的地，而不是使用内部 IP。仅当节点上设置了 --node-external-ip 时适用。 --flannel-backend=vxlan 使用 VXLAN 封装数据包。在 Raspberry Pi 上可能需要额外的内核模块。 --flannel-backend=host-gw 通过节点 IP 使用 IP 路由到 pod 子网。集群中所有节点之间都需要直接的第 2 层连接。 --flannel-backend=wireguard-native 使用 WireGuard 封装和加密网络流量。可能需要额外的内核模块。 --flannel-backend=ipsec 通过 swanctl 二进制文件使用 strongSwan IPSec 来加密网络流量。（已弃用；将在 v1.27.0 中删除） --flannel-backend=wireguard 通过 wg 二进制文件使用 WireGuard 来加密网络流量。可能需要额外的内核模块和配置。（已弃用；将在 v1.26.0 中删除） --flannel-backend=none 完全禁用 Flannel。 版本 从 2022-12 版本（v1.26.0+k3s1, v1.25.5+k3s1, v1.24.9+k3s1, v1.23.15+k3s1）开始，K3s 不再包含 strongSwan swanctl 和 charon 二进制文件。如果你想使用 ipsec 后端，请在升级或安装这些版本之前在节点上安装正确的包。","s":"Flannel 选项","u":"/zh/installation/network-options","h":"#flannel-选项","p":1112},{"i":1117,"t":"旧版 wireguard 后端需要在主机上安装 wg 工具。该后端将在 K3s v1.26 中删除，取而代之的是直接与内核交互的 wireguard-native 后端。 旧版 ipsec 后端需要在主机上安装 swanctl 和 charon 二进制文件。该后端将在 K3s v1.27 中删除，以支持 wireguard-native 后端。 我们建议用户尽快迁移到新的后端。节点有了新配置后，迁移不会花费很长的停机时间。你可以遵循以下两个步骤进行操作： 更新所有 Server 节点上的 K3s 配置。如果使用配置文件，/etc/rancher/k3s/config.yaml 应该包括 flannel-backend: wireguard-native 而不是 flannel-backend: wireguard 或 flannel-backend: ipsec。如果你在 systemd 单元中通过 CLI 标志配置 K3s，则应更改对应的标志。 从 Server 节点开始重新启动所有节点。","s":"从 wireguard 或 ipsec 迁移到 wireguard-native","u":"/zh/installation/network-options","h":"#从-wireguard-或-ipsec-迁移到-wireguard-native","p":1112},{"i":1119,"t":"使用 --flannel-backend=none 启动 K3s 并安装你选择的 CNI。大多数 CNI 插件都有自己的网络策略引擎，因此建议同时设置 --disable-network-policy 以避免冲突。需要考虑的重要信息： Canal Calico Cilium 访问 Canal Docs 网站。按照步骤安装 Canal。修改 Canal YAML 以便在 container_settings 中允许 IP 转发，例如： \"container_settings\": { \"allow_ip_forwarding\": true } 应用 Canal YAML。 通过在主机上运行以下命令，确保设置已被应用： cat /etc/cni/net.d/10-canal.conflist 你应该看到 IP 转发被设置为 true。 遵循 Calico CNI 插件指南。修改 Calico YAML 以便在 container_settings 中允许 IP 转发，例如： \"container_settings\": { \"allow_ip_forwarding\": true } 应用 Calico YAML。 通过在主机上运行以下命令，确保设置已被应用： cat /etc/cni/net.d/10-calico.conflist 你应该看到 IP 转发被设置为 true。 运行 k3s-killall.sh 或 k3s-uninstall.sh之前，你必须手动删除 cilium_host、cilium_net 和 cilium_vxlan 接口。如果不这样做，你可能会在 K3s 停止时丢失与主机的网络连接 ip link delete cilium_host ip link delete cilium_net ip link delete cilium_vxlan 此外，你需要删除 cilium 的 iptables 规则： iptables-save | grep -iv cilium | iptables-restore ip6tables-save | grep -iv cilium | ip6tables-restore","s":"自定义 CNI","u":"/zh/installation/network-options","h":"#自定义-cni","p":1112},{"i":1121,"t":"K3s Agent 和 Server 维护节点之间的 websocket 隧道，这些隧道用于封装 control plane（apiserver）和 Agent（kubelet 和 containerd）组件之间的双向通信。 这允许 Agent 在不将 kubelet 和容器运行时流端口暴露给传入连接的情况下运行，并允许 control plane 在禁用 Agent 的情况下连接到集群服务。 此功能等同于其他 Kubernetes 发行版上常用的 Konnectivity 服务，通过 apiserver 的 Egress 选择器配置进行管理。 你可以使用 --egress-selector-mode 标志在 Server 上配置 Egress 选择器模式，支持四种模式： disabled：apiserver 不使用 Agent 隧道与 kubelet 或集群端点通信。 此模式要求 Server 运行 kubelet、CNI 和 kube-proxy，并与 Agent 直接连接，否则 apiserver 将无法访问 Service 端点或执行 kubectl exec 和 kubectl logs。 agent（默认）：apiserver 使用 Agent 隧道与 kubelet 通信。 这种模式要求 Server 也运行 kubelet、CNI 和 kube-proxy，否则 apiserver 将无法访问 Service 端点。 pod：apiserver 使用 Agent 隧道与 kubelets 和 Service 端点通信，通过监视节点将端点连接路由到正确的 Agent。 注意：如果 CNI 使用自己的 IPAM，而且不考虑节点的 PodCIDR 分配，这将不起作用。这些 CNI 需要使用 cluster 或 agent。 cluster：apiserver 使用 Agent 隧道与 kubelets 和 Service 端点通信，通过监视端点将端点连接路由到正确的 Agent。","s":"Control Plane Egress 选择器配置","u":"/zh/installation/network-options","h":"#control-plane-egress-选择器配置","p":1112},{"i":1123,"t":"版本 从 v1.21.0+k3s1 开始提供实验性支持。 从 v1.23.7+k3s1 开始提供稳定支持。 已知问题 Kubernetes Issue #111695 导致了一个问题。如果你有一个双栈环境而且你没有为集群流量使用主要网卡，那么 Kubelet 会忽略节点 IPv6 地址。为避免此错误，请将以下标志添加到 K3s Server 和 Agent ： --kubelet-arg=\"node-ip=0.0.0.0\" # To proritize IPv4 traffic #OR --kubelet-arg=\"node-ip=::\" # To proritize IPv6 traffic 首次创建集群时必须配置双栈组网。一旦仅使用 IPv4 启动，它就无法在现有集群上启用。 要在 K3s 中启用双栈，你必须在所有 server 节点上提供有效的双栈 cluster-cidr 和 service-cidr。以下是一个有效配置的示例： --cluster-cidr=10.42.0.0/16,2001:cafe:42:0::/56 --service-cidr=10.43.0.0/16,2001:cafe:42:1::/112 请注意，你可以配置任何有效的 cluster-cidr 和 service-cidr 值，但建议使用上述掩码。如果更改 cluster-cidr 掩码，则还应更改 node-cidr-mask-size-ipv4 和 node-cidr-mask-size-ipv6 值以匹配每个节点的计划 pod 和节点总数。对于 IPv4，支持的最大 service-cidr 掩码是 /12，而 IPv6 的是 /112。如果你在公共云中部署，请记住允许 ipv6 流量。 如果你使用的是自定义 CNI 插件，即 Flannel 以外的 CNI 插件，则可能需要额外的配置。请参阅你使用的插件的双栈文档，并验证是否可以启用网络策略。","s":"双栈 (IPv4 + IPv6) 网络","u":"/zh/installation/network-options","h":"#双栈-ipv4--ipv6-网络","p":1112},{"i":1125,"t":"版本 从 v1.22.9+k3s1 起可用 已知问题 如果你的 IPv6 默认路由是由路由器公告（RA）设置的，你需要设置 sysctl net.ipv6.conf.all.accept_ra=2。否则，一旦默认路由过期，节点将放弃该路由。请注意，接受 RA 可能会增加中间人攻击的风险。 你可以使用 --cluster-cidr 和 --service-cidr 标志在 K3s 上使用单栈 IPv6 集群（没有 IPv4 的集群）。以下是一个有效配置的示例： --cluster-cidr=2001:cafe:42:0::/56 --service-cidr=2001:cafe:42:1::/112","s":"单栈 IPv6 网络","u":"/zh/installation/network-options","h":"#单栈-ipv6-网络","p":1112},{"i":1127,"t":"K3s 集群仍然可以部署在不共享公共私有网络且不直接连接的节点上（例如不同公有云中的节点）。有两种选择可以实现这一点：嵌入式 k3s 多云解决方案和集成 tailscale VPN 提供程序。 警告 如果外部连接需要更多的跃点，那么节点之间的延迟会变高。延迟太高会降低网络性能，还可能影响集群的运行。 警告 此类部署不支持嵌入式 etcd。如果使用嵌入式 etcd，所有 Server 节点必须可以通过其私有 IP 相互访问。Agent 可能分布在多个网络上，但所有 server 都应该位于同一位置。","s":"分布式混合或多云集群","u":"/zh/installation/network-options","h":"#分布式混合或多云集群","p":1112},{"i":1129,"t":"K3s 使用 wireguard 为集群流量建立 VPN 网格。每个节点都必须具有唯一的 IP，可以通过 IP 访问节点（通常是公共 IP）。K3s supervisor 流量将使用 websocket 隧道，集群 (CNI) 流量将使用 wireguard 隧道。 要启用这种类型的部署，你必须在 Server 中添加以下参数： --node-external-ip=<SERVER_EXTERNAL_IP> --flannel-backend=wireguard-native --flannel-external-ip 在 Agent 上： --node-external-ip=<AGENT_EXTERNAL_IP> 其中 SERVER_EXTERNAL_IP 是访问 Server 节点的 IP，AGENT_EXTERNAL_IP 是访问 Agent 节点的 IP。请注意，Agent 中的 K3S_URL 配置参数需要使用 SERVER_EXTERNAL_IP 才能连接。请记住检查网络要求，并允许访问内部和外部地址上列出的端口。 SERVER_EXTERNAL_IP 和 AGENT_EXTERNAL_IP 之间需要保持连接，并且通常使用公共 IP。 动态 IP 如果为节点分配动态 IP 并且 IP 发生变化（例如在 AWS 中），则必须修改 --node-external-ip 参数来反映新 IP。如果将 K3s 作为 Service 运行，则必须修改 /etc/systemd/system/k3s.service 然后运行： systemctl daemon-reload systemctl restart k3s","s":"嵌入式 k3s 多云解决方案","u":"/zh/installation/network-options","h":"#嵌入式-k3s-多云解决方案","p":1112},{"i":1131,"t":"在 v1.27.3、v1.26.6、v1.25.11 和更新版本中可用。 K3s 可以与 Tailscale 集成，以便节点使用 Tailscale VPN 服务在节点之间构建网格。 在部署 K3s 之前，Tailscale 需要完成四个步骤： 登录到你的 Tailscale 帐户 在 Settings > Keys 中，生成一个授权密钥（$AUTH-KEY），它可以被集群中的所有节点重复使用 决定集群将使用的 podCIDR（默认 10.42.0.0/16）。在 Access 控制中附加 CIDR（或双栈的 CIDR）： \"autoApprovers\": { \"routes\": { \"10.42.0.0/16\": [\"your_account@xyz.com\"], \"2001:cafe:42:0::/56\": [\"your_account@xyz.com\"], }, }, 在节点中安装 Tailscale： curl -fsSL https://tailscale.com/install.sh | sh 要部署启用了 Tailscale 集成的 K3s，你必须在每个节点上添加以下参数： --vpn-auth=\"name=tailscale,joinKey=$AUTH-KEY 或在文件中提供该信息并使用参数： --vpn-auth-file=$PATH_TO_FILE 警告 如果你计划使用同一个 tailscale 网络运行多个 K3s 集群，请创建适当的 ACL 来避免 IP 冲突，或为每个集群使用不同的 podCIDR 子网。","s":"集成 Tailscale VPN 提供程序（实验性）","u":"/zh/installation/network-options","h":"#集成-tailscale-vpn-提供程序实验性","p":1112},{"i":1134,"t":"在 server 节点上，/var/lib/rancher/k3s/server/manifests 中的任何文件都会以类似 kubectl apply 的方式自动部署到 Kubernetes，这会在启动和更改磁盘文件时进行。如果你删除该目录的文件，集群中相应的资源不会被删除。 清单在 kube-system 命名空间中作为 AddOn 自定义资源进行跟踪。你可以在相应的 AddOn 上使用 kubectl describe 来查看应用清单文件时遇到的任何错误或警告，也可以使用 kubectl get event -n kube-system 来查看该命名空间的所有事件，包括部署控制器的事件。","s":"自动部署清单（AddOn）","u":"/zh/installation/packaged-components","h":"#自动部署清单addon","p":1132},{"i":1136,"t":"K3s 封装了很多组件，这些组件通过 manifests 目录部署为 AddOn，包括 coredns、traefik、local-storage 和 metrics-server。嵌入式 servicelb LoadBalancer controller 没有清单文件，但由于历史原因，它可以像 AddOn 一样被禁用。 封装组件的清单由 K3s 管理，请不要更改。K3s 启动时，这些文件都会重新写入磁盘来确保文件的完整性。","s":"封装的组件","u":"/zh/installation/packaged-components","h":"#封装的组件","p":1132},{"i":1138,"t":"你可以将其他文件放在 manifests 目录中，将它们作为 AddOn 部署。每个文件可能包含多个 Kubernetes 资源，它们由 --- YAML 分隔符分隔。有关在清单中组织资源的更多信息，请参阅 Kubernetes 文档的管理资源章节。 文件命名要求​ 清单目录中每个文件的 AddOn 名称均派生自文件的基本名称。 请确保清单目录（或任何子目录）中的所有文件名称都是唯一的，并遵守 Kubernetes 对象命名限制。 此外，即使 K3s 封装组件已禁用，也不要与默认 K3s 封装组件的名称冲突。 如果文件名包含下划线将报告以下示例错误： Failed to process config: failed to process /var/lib/rancher/k3s/server/manifests/example_manifest.yaml: Addon.k3s.cattle.io \"example_manifest\" is invalid: metadata.name: Invalid value: \"example_manifest\": a lowercase RFC 1123 subdomain must consist of lower case alphanumeric characters, '-' or '.', and must start and end with an alphanumeric character (e.g. 'example.com', regex used for validation is '[a-z0-9]([-a-z0-9]*[a-z0-9])?(\\\\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*') 警告 如果你有多个 Server 节点，并在多个 Server 上放置了额外的 AddOn 清单，那么你需要确保文件在节点之间保持同步。K3s 不会在节点之间同步 AddOn 的内容。如果不同的 Server 尝试部署冲突的清单，那么可能会出现问题。","s":"用户 AddOn","u":"/zh/installation/packaged-components","h":"#用户-addon","p":1132},{"i":1140,"t":"有两种方法可以禁用清单目录中特定内容的部署。","s":"禁用清单","u":"/zh/installation/packaged-components","h":"#禁用清单","p":1132},{"i":1142,"t":"除了 manifests 目录中的其他清单的 AddOn 之外，你可以使用 --disable 标志来禁用上面列出的封装组件的 AddOn。已禁用的 AddOn 会从集群中卸载，并从 manifests 目录中删除源文件。 例如，要禁止在新集群上安装 Traefik，或者要卸载 Traefik 并删除现有集群中的清单，你可以使用 --disable=traefik 来启动 K3s。要禁用多个条目，你可以使用逗号来分隔它们的名称或多次使用标志。","s":"使用 --disable 标志","u":"/zh/installation/packaged-components","h":"#使用---disable-标志","p":1132},{"i":1144,"t":"对于 /var/lib/rancher/k3s/server/manifests 下的任何文件，你可以创建一个 .skip 文件，然后 K3s 会忽略相应的清单。.skip 文件的内容不重要，因为只会检查文件是否存在。请注意，如果你在创建 AddOn 之后再创建 .skip 文件，则不会删除或修改 AddOn 以及 AddOn 创建的资源，只会认为该文件不存在。 例如，如果在第一次启动 K3s 之前在 manifests 目录中创建一个空的 traefik.yaml.skip 文件，那么 K3s 会跳过 traefik.yaml 的部署： $ ls /var/lib/rancher/k3s/server/manifests ccm.yaml local-storage.yaml rolebindings.yaml traefik.yaml.skip coredns.yaml traefik.yaml $ kubectl get pods -A NAMESPACE NAME READY STATUS RESTARTS AGE kube-system local-path-provisioner-64ffb68fd-xx98j 1/1 Running 0 74s kube-system metrics-server-5489f84d5d-7zwkt 1/1 Running 0 74s kube-system coredns-85cb69466-vcq7j 1/1 Running 0 74s 如果在创建 traefik.skip 文件之前已经部署了 Traefik，Traefik 将保持原样，并且升级 K3s 时的后续更新不会影响 Traefik。","s":"使用 .skip 文件","u":"/zh/installation/packaged-components","h":"#使用-skip-文件","p":1132},{"i":1146,"t":"有关通过自动部署清单来管理 Helm Chart 的更多信息，请参阅 Helm。","s":"Helm AddOn","u":"/zh/installation/packaged-components","h":"#helm-addon","p":1132},{"i":1148,"t":"你可以将 Containerd 配置为连接到私有镜像仓库，并在节点上使用私有镜像仓库拉取私有镜像。 启动时，K3s 会检查 /etc/rancher/k3s/ 中是否存在 registries.yaml 文件，并指示 containerd 使用该文件中定义的镜像仓库。如果你想使用私有的镜像仓库，你需要在每个使用镜像仓库的节点上以 root 身份创建这个文件。 请注意，server 节点默认是可以调度的。如果你没有在 server 节点上设置污点，而且希望在 server 节点上运行工作负载，请确保在每个 server 节点上创建 registries.yaml 文件。 Containerd 中的配置可以用于通过 TLS 连接到私有镜像仓库，也可以与启用验证的镜像仓库连接。下一节将解释 registries.yaml 文件，并给出在 K3s 中使用私有镜像仓库配置的不同例子。","s":"私有镜像仓库配置","u":"/zh/installation/private-registry","h":"","p":1147},{"i":1150,"t":"该文件由两个主要部分组成： mirrors configs","s":"镜像仓库配置文件","u":"/zh/installation/private-registry","h":"#镜像仓库配置文件","p":1147},{"i":1152,"t":"Mirrors 是用于定义私有镜像仓库名称和端点的指令，例如： mirrors: mycustomreg.com: endpoint: - \"https://mycustomreg.com:5000\" 每个 mirror 都必须有一个名称和一组端点。从镜像仓库中拉取镜像时，containerd 会逐个尝试这些端点 URL，并使用第一个有效的 URL。 重定向​ 如果将公共镜像仓库用作 Mirror，例如在配置通过缓存拉取时，镜像拉取将被透明地重定向。 例如，如果你为 docker.io 配置了一个 Mirror： mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" 然后，拉取 docker.io/rancher/coredns-coredns:1.6.3 将透明地从 https://mycustomreg.com:5000/rancher/coredns-coredns:1.6.3 拉取镜像。 Rewrites​ 每个 Mirror 都可以有一组 rewrites。Rewrites 可以根据正则表达式来改变镜像的标签。如果 mirror 仓库中的组织/项目结构与上游不同，这将很有用。 例如，以下配置将透明地从 registry.example.com:5000/mirrorproject/rancher-images/coredns-coredns:1.6.3 中拉取镜像 docker.io/rancher/coredns-coredns:1.6.3： mirrors: docker.io: endpoint: - \"https://registry.example.com:5000\" rewrite: \"^rancher/(.*)\": \"mirrorproject/rancher-images/$1\" 镜像仍将以原始名称存储，因此，即使镜像以不同的名字从镜像仓库中拉取，crictl image ls 也将显示 docker.io/rancher/coredns-coredns:1.6.3 在节点上是可用的。","s":"Mirrors","u":"/zh/installation/private-registry","h":"#mirrors","p":1147},{"i":1154,"t":"configs 部分定义了每个 mirror 的 TLS 和凭证配置。对于每个 mirror，你可以定义 auth 和/或 tls。 tls 部分包括： 指令 描述 cert_file 客户端证书路径，用于向镜像仓库进行身份验证 key_file 客户端密钥路径，用于向镜像仓库进行身份验证 ca_file 定义用于验证镜像仓库服务器证书文件的 CA 证书路径 insecure_skip_verify 定义是否应跳过镜像仓库的 TLS 验证的布尔值 auth 部分由用户名/密码或身份验证令牌组成： 指令 描述 username 私有镜像仓库基本身份验证的用户名 password 私有镜像仓库基本身份验证的用户密码 auth 私有镜像仓库基本身份验证的身份验证令牌 以下是在不同模式下使用私有镜像仓库的基本例子：","s":"Configs","u":"/zh/installation/private-registry","h":"#configs","p":1147},{"i":1156,"t":"下面的例子展示了使用 TLS 时，如何在每个节点上配置 /etc/rancher/k3s/registries.yaml。 有认证 无认证 mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": auth: username: xxxxxx # this is the registry username password: xxxxxx # this is the registry password tls: cert_file: # path to the cert file used in the registry key_file: # path to the key file used in the registry ca_file: # path to the ca file used in the registry mirrors: docker.io: endpoint: - \"https://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": tls: cert_file: # path to the cert file used in the registry key_file: # path to the key file used in the registry ca_file: # path to the ca file used in the registry","s":"使用 TLS","u":"/zh/installation/private-registry","h":"#使用-tls","p":1147},{"i":1158,"t":"以下示例展示了不使用 TLS 时，如何在每个节点上配置 /etc/rancher/k3s/registries.yaml。 有认证 无认证 mirrors: docker.io: endpoint: - \"http://mycustomreg.com:5000\" configs: \"mycustomreg:5000\": auth: username: xxxxxx # this is the registry username password: xxxxxx # this is the registry password mirrors: docker.io: endpoint: - \"http://mycustomreg.com:5000\" 如果没有 TLS 通信，你需要为端点指定 http://，否则将默认为 https。 为了使镜像仓库更改生效，你需要重新启动每个节点上的 K3s。","s":"没有 TLS","u":"/zh/installation/private-registry","h":"#没有-tls","p":1147},{"i":1160,"t":"首先，从 GitHub 上获取你正在使用的版本的 k3s-images.txt 文件。 从 docker.io 拉取 k3s-images.txt 文件中列出的 K3s 镜像 示例：docker pull docker.io/rancher/coredns-coredns:1.6.3 然后，将镜像重新标记到私有镜像仓库。 示例：docker tag rancher/coredns-coredns:1.6.3 mycustomreg.com:5000/coredns-coredns 最后，将镜像推送到私有镜像仓库。 示例：docker push mycustomreg.com:5000/coredns-coredns","s":"将镜像添加到私有镜像仓库","u":"/zh/installation/private-registry","h":"#将镜像添加到私有镜像仓库","p":1147},{"i":1162,"t":"K3s 非常轻量，但也有一些最低要求，如下所述。 无论 K3s 在容器中运行还是作为原生 Linux 服务运行，每个运行 K3s 的节点都应满足以下最低要求。这些要求是 K3s 及其打包组件的基准，不包括工作负载本身消耗的资源。","s":"要求","u":"/zh/installation/requirements","h":"","p":1161},{"i":1164,"t":"两个节点不能具有相同的主机名。 如果多个节点将具有相同的主机名，或者主机名可以被自动配置系统重复使用，请使用 --with-node-id 选项为每个节点附加一个随机后缀，或者使用 --node-name 或 $K3S_NODE_NAME 为添加到集群的每个节点设计一个独特的名称。","s":"先决条件","u":"/zh/installation/requirements","h":"#先决条件","p":1161},{"i":1166,"t":"K3s 适用于以下架构： x86_64 armhf arm64/aarch64 s390x ARM64 页面大小 在 2023 年 5 月版本（v1.24.14+k3s1、v1.25.10+k3s1、v1.26.5+k3s1、v1.27.2+k3s1）前，在 aarch64/arm64 系统上，操作系统必须使用 4k 页面大小。RHEL9、Ubuntu、Raspberry PI OS 和 SLES 都满足这个要求。","s":"架构","u":"/zh/installation/requirements","h":"#架构","p":1161},{"i":1168,"t":"K3s 有望在大多数现代 Linux 系统上运行。 一些操作系统有特定的要求： 如果你使用 Red Hat/CentOS Enterprise Linux，请按照这些步骤进行其他设置。 如果你使用 Raspberry Pi OS，请按照这些步骤切换到旧版 iptables。 关于 Rancher 管理的 K3s 集群测试了哪些操作系统，请参阅 Rancher 支持和维护条款。","s":"操作系统","u":"/zh/installation/requirements","h":"#操作系统","p":1161},{"i":1170,"t":"硬件要求根据你部署的规模而变化。此处概述了最低建议。 Spec 最低 推荐 CPU 1 核 2 核 RAM 512MB 1 GB 资源分析的测试结果用于确定 K3s Agent、具有工作负载的 K3s Server 和具有一个 Agent 的 K3s Server 的最低资源要求。它还包含了有关对 K3s Server 和 Agent 利用率产生最大影响的分析，以及如何保护集群数据存储免受 Agent 和工作负载的干扰。 Raspberry Pi 和嵌入式 etcd 如果在 Raspberry Pi 上部署带有嵌入式 etcd 的 K3s，建议你使用外部 SSD。etcd 是写入密集型的，SD 卡无法处理 IO 负载。 磁盘​ K3s 的性能取决于数据库的性能。为确保最佳速度，我们建议尽可能使用 SSD。在使用 SD 卡或 eMMC 的 ARM 设备上，磁盘性能会有所不同。","s":"硬件","u":"/zh/installation/requirements","h":"#硬件","p":1161},{"i":1172,"t":"K3s Server 需要 6443 端口才能被所有节点访问。 使用 Flannel VXLAN 时，节点需要能够通过 UDP 端口 8472 访问其他节点，使用 Flannel Wireguard 后端时，节点需要能够通过 UDP 端口 51820 和 51821（使用 IPv6 时）访问其他节点。该节点不应侦听任何其他端口。K3s 使用反向隧道建立节点与 Server 的出站连接，所有 kubelet 流量都通过该隧道进行。但是，如果你不使用 Flannel 并提供自己的自定义 CNI，那么 K3s 不需要 Flannel 所需的端口。 如果要使用 Metrics Server，所有节点必须可以在端口 10250 上相互访问。 如果你计划使用嵌入式 etcd 来实现高可用性，则 Server 节点必须可以在端口 2379 和 2380 上相互访问。 重要提示 节点上的 VXLAN 端口会开放集群网络，让任何人均能访问集群。因此，不要将 VXLAN 端口暴露给外界。请使用禁用 8472 端口的防火墙/安全组来运行节点。 危险 Flannel 依赖 Bridge CNI 插件来创建交换流量的 L2 网络。具有 NET_RAW 功能的 Rogue pod 可以滥用该 L2 网络来发动攻击，如 ARP 欺骗。因此，如 Kubernetes 文档所述，请设置一个受限配置文件，在不可信任的 Pod 上禁用 NET_RAW。","s":"网络","u":"/zh/installation/requirements","h":"#网络","p":1161},{"i":1174,"t":"协议 端口 源 目标 描述 TCP 2379-2380 Servers Servers 只有具有嵌入式 etcd 的 HA 需要 TCP 6443 Agents Servers K3s supervisor 和 Kubernetes API Server UDP 8472 所有节点 所有节点 只有 Flannel VXLAN 需要 TCP 10250 所有节点 所有节点 Kubelet 指标 UDP 51820 所有节点 所有节点 只有使用 IPv4 的 Flannel Wireguard 才需要 UDP 51821 所有节点 所有节点 只有使用 IPv6 的 Flannel Wireguard 才需要 所有出站流量通常都是允许的。 你可能需要根据使用的操作系统对防火墙进行其他更改。有关更多信息，请参阅其他操作系统准备。","s":"K3s Server 节点的入站规则","u":"/zh/installation/requirements","h":"#k3s-server-节点的入站规则","p":1161},{"i":1176,"t":"硬件要求取决于 K3s 集群的大小。对于生产和大型集群，我们建议使用具有外部数据库的高可用性设置。对于生产环境中的外部数据库，建议使用以下选项： MySQL PostgreSQL etcd","s":"大型集群","u":"/zh/installation/requirements","h":"#大型集群","p":1161},{"i":1178,"t":"高可用 K3s Server 中节点的最低 CPU 和内存要求如下： 部署规模 节点 VCPUS RAM Small Up to 10 2 4 GB Medium Up to 100 4 8 GB Large Up to 250 8 16GB X-Large Up to 500 16 32GB XX-Large 500+ 32 64GB","s":"CPU 和内存","u":"/zh/installation/requirements","h":"#cpu-和内存","p":1161},{"i":1180,"t":"集群性能取决于数据库性能。为确保最佳速度，我们建议为 K3s 集群使用 SSD 磁盘。在云提供商上，你还需使用能获得最大 IOPS 的最小大小。","s":"磁盘","u":"/zh/installation/requirements","h":"#磁盘-1","p":1161},{"i":1182,"t":"你应该考虑增加集群 CIDR 的子网大小，避免用尽 Pod 的 IP。你可以通过在启动时将 --cluster-cidr 选项传递给 K3s Server 来实现这一点。","s":"网络","u":"/zh/installation/requirements","h":"#网络-1","p":1161},{"i":1184,"t":"K3s 支持不同的数据库，包括 MySQL、PostgreSQL、MariaDB 和 etcd。有关详细信息，请参阅集群数据存储。 以下是运行大型集群所需的数据库资源的大小指南： 部署规模 节点 VCPUS RAM Small Up to 10 1 2 GB Medium Up to 100 2 8 GB Large Up to 250 4 16GB X-Large Up to 500 8 32GB XX-Large 500+ 16 64GB","s":"数据库","u":"/zh/installation/requirements","h":"#数据库","p":1161},{"i":1186,"t":"使用 --cluster-init 启动 K3s Server 将运行所有 control-plane 组件，包括 apiserver、controller-manager、scheduler 和 etcd。你可以通过禁用特定组件来将 control-plane 和 etcd 角色拆分到单独的节点上。 信息 本文档仅适用于使用嵌入式 etcd 的情况。如果没有使用嵌入式 etcd，所有 Server 都将具有 control-plane 角色并运行 control-plane 组件。","s":"管理 Server 角色","u":"/zh/installation/server-roles","h":"","p":1185},{"i":1188,"t":"要创建仅具有 etcd 角色的 server，请在禁用所有 control plane 组件的情况下启动 K3s： curl -fL https://get.k3s.io | sh -s - server --cluster-init --disable-apiserver --disable-controller-manager --disable-scheduler 第一个节点将启动 etcd，然后等待其他 etcd 和/或 control-plane 节点加入。在加入启用了 control-plane 组件的其他 server 之前，集群将无法使用。","s":"专用 etcd 节点","u":"/zh/installation/server-roles","h":"#专用-etcd-节点","p":1185},{"i":1190,"t":"备注 专用 control-plane 节点不能是集群中的第一个 server。在加入专用 control-plane 节点之前，必须有一个具有 etcd 角色的现有节点。 要创建仅具有 control-plane 角色的 server，请在 --disable-etcd 的情况下启动 K3s： curl -fL https://get.k3s.io | sh -s - server --token <token> --disable-etcd --server https://<etcd-only-node>:6443 创建专用 Server 节点后，所选角色将在 kubectl get node 中可见： $ kubectl get nodes NAME STATUS ROLES AGE VERSION k3s-server-1 Ready etcd 5h39m v1.20.4+k3s1 k3s-server-2 Ready control-plane,master 5h39m v1.20.4+k3s1","s":"专用 control-plane 节点","u":"/zh/installation/server-roles","h":"#专用-control-plane-节点","p":1185},{"i":1192,"t":"如果在删除了 disable 标志的情况下重启 K3s，你可以将角色添加到现有的专用节点。例如，要将 control-plane 角色添加到专用的 etcd 节点，你可以从 systemd 单元或配置文件中删除 --disable-apiserver --disable-controller -manager --disable-scheduler 标记，并重启服务。","s":"将角色添加到现有 server","u":"/zh/installation/server-roles","h":"#将角色添加到现有-server","p":1185},{"i":1194,"t":"与所有其他 CLI 标志一样，你可以使用配置文件来禁用组件，而不是将选项作为 CLI 标志传递。例如，要创建专用的 etcd 节点，你可以将以下值放在 /etc/rancher/k3s/config.yaml 中： cluster-init: true disable-apiserver: true disable-controller-manager: true disable-scheduler: true","s":"配置文件语法","u":"/zh/installation/server-roles","h":"#配置文件语法","p":1185},{"i":1196,"t":"警告 卸载 K3s 会删除 local 集群数据、配置以及所有脚本和 CLI 工具。 不会删除外部数据存储中的任何数据，也不会删除使用外部 Kubernetes 存储卷的 Pod 创建的数据。 如果你使用安装脚本安装了 K3s，安装过程中会生成一个卸载 K3s 的脚本。 如果你想在卸载和重新安装后将节点重新加入现有集群，请务必从集群中删除节点，确保删除了节点密码 Secret。有关详细信息，请参阅节点注册文档。","s":"卸载 K3s","u":"/zh/installation/uninstall","h":"","p":1195},{"i":1198,"t":"要从 Server 节点卸载 K3s，请运行： /usr/local/bin/k3s-uninstall.sh","s":"卸载 Server","u":"/zh/installation/uninstall","h":"#卸载-server","p":1195},{"i":1200,"t":"要从 Agent 节点卸载 K3s，请运行： /usr/local/bin/k3s-agent-uninstall.sh","s":"卸载 Agent","u":"/zh/installation/uninstall","h":"#卸载-agent","p":1195},{"i":1202,"t":"我们会定期更新已知问题文档，说明下一个即将发布的版本中可能无法立即解决的问题。","s":"已知问题","u":"/zh/known-issues","h":"","p":1201},{"i":1204,"t":"如果你计划同时使用 K3s 与 Docker，则不建议通过 snap 包安装 Docker，因为它会导致运行 K3s 时出现问题。","s":"Snap Docker","u":"/zh/known-issues","h":"#snap-docker","p":1201},{"i":1206,"t":"如果你使用 nftables 模式而不是传统模式来运行 iptables，则可能会遇到问题。我们建议使用较新的 iptables（例如 1.6.1+）来避免出现问题。 此外，版本 1.8.0-1.8.4 存在可能导致 K3s 失败的问题。有关解决方法，请参阅其他操作系统准备。","s":"Iptables","u":"/zh/known-issues","h":"#iptables","p":1201},{"i":1208,"t":"使用 Rootless 模式运行 K3s 是实验性的，存在几个已知问题。","s":"Rootless 模式","u":"/zh/known-issues","h":"#rootless-模式","p":1201},{"i":1210,"t":"Kubernetes v1.25 删除了 PodSecurityPolicy，支持 Pod Security Standard（PSS）。你可以在上游文档中阅读有关 PSS 的更多信息。对于 K3s，如果在节点上配置了任何 PodSecurityPoliciy，则必须执行一些手动步骤。 在所有节点上，更新 kube-apiserver-arg 值以删除 PodSecurityPolicy admission-plugin。添加以下参数值：'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml'，但不要重启或升级 K3s。以下是节点加固更新后配置文件的示例： protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true' 使用以下内容创建 /var/lib/rancher/k3s/server/psa.yaml 文件。你可能还想豁免更多命名空间。下面的示例豁免了 kube-system（必需）、cis-operator-system（可选，但在通过 Rancher 运行安全扫描时很有用）和 system- upgrade（如果执行自动升级则需要）。 apiVersion: apiserver.config.k8s.io/v1 kind: AdmissionConfiguration plugins: - name: PodSecurity configuration: apiVersion: pod-security.admission.config.k8s.io/v1beta1 kind: PodSecurityConfiguration defaults: enforce: \"restricted\" enforce-version: \"latest\" audit: \"restricted\" audit-version: \"latest\" warn: \"restricted\" warn-version: \"latest\" exemptions: usernames: [] runtimeClasses: [] namespaces: [kube-system, cis-operator-system, system-upgrade] 正常执行升级。如果使用自动升级，请确保运行 system-upgrade-controller pod 的命名空间按照 Pod 安全级别的要求设置为 privileged。 apiVersion: v1 kind: Namespace metadata: name: system-upgrade labels: # This value must be privileged for the controller to run successfully. pod-security.kubernetes.io/enforce: privileged pod-security.kubernetes.io/enforce-version: v1.25 # We are setting these to our _desired_ `enforce` level, but note that these below values can be any of the available options. pod-security.kubernetes.io/audit: privileged pod-security.kubernetes.io/audit-version: v1.25 pod-security.kubernetes.io/warn: privileged pod-security.kubernetes.io/warn-version: v1.25 升级完成后，从集群中移除剩余的 PSP 资源。在许多情况下，在 /var/lib/rancher/k3s/server/manifests/ 中用于加固的自定义文件中可能存在 PodSecurityPolicies 和关联的 RBAC 资源。删除这些资源，然后 K3s 将自动更新。由于时间原因，一些资源可能会留在集群中，在这种情况下，你需要手动删除它们。如果之前遵循了强化指南，你应该能够通过以下方式删除它们： # 获取与 PSP 关联的资源 $ kubectl get roles,clusterroles,rolebindings,clusterrolebindings -A | grep -i psp # 删除这些资源 $ kubectl delete clusterrole.rbac.authorization.k8s.io/psp:restricted-psp clusterrole.rbac.authorization.k8s.io/psp:svclb-psp clusterrole.rbac.authorization.k8s.io/psp:system-unrestricted-psp clusterrolebinding.rbac.authorization.k8s.io/default:restricted-psp clusterrolebinding.rbac.authorization.k8s.io/system-unrestricted-node-psp-rolebinding && kubectl delete -n kube-system rolebinding.rbac.authorization.k8s.io/svclb-psp-rolebinding rolebinding.rbac.authorization.k8s.io/system-unrestricted-svc-acct-psp-rolebinding","s":"将强化集群从 v1.24.x 升级到 v1.25.x","u":"/zh/known-issues","h":"#hardened-125","p":1201},{"i":1212,"t":"本文介绍了 CoreDNS、Traefik Ingress controller 和 Klipper service load balancer 是如何在 K3s 中工作的。 有关 Flannel 配置选项和后端选择，以及如何设置自己的 CNI，请参阅安装网络选项页面。 有关 K3s 需要开放哪些端口，请参考网络要求。","s":"网络","u":"/zh/networking","h":"","p":1211},{"i":1214,"t":"CoreDNS 在 Server 启动时自动部署。要禁用它，请使用 --disable=coredns 选项来配置集群中的所有 Server。 如果你不安装 CoreDNS，则需要自己安装集群 DNS 提供程序。","s":"CoreDNS","u":"/zh/networking","h":"#coredns","p":1211},{"i":1216,"t":"Traefik 是一种现代的 HTTP 反向代理和负载均衡器，可以轻松部署微服务。它在设计、部署和运行应用程序方面简化了网络复杂性。 Traefik Ingress Controller 部署了一个使用端口 80 和 443 的 LoadBalancer Service。默认情况下，ServiceLB 将在所有集群成员上公开这些端口，换言之，这些端口无法用于其他 HostPort 或 NodePort pod。 Traefik 在启动服务器时默认部署。有关详细信息，请参阅管理打包组件。默认配置文件位于 /var/lib/rancher/k3s/server/manifests/traefik.yaml。 不要手动编辑 traefik.yaml 文件，因为 K3s 会在启动时使用默认值替换该文件。相反，你需要通过在 /var/lib/rancher/k3s/server/manifests 中创建其他 HelmChartConfig 清单来自定义 Traefik。有关更多详细信息和示例，请参阅使用 HelmChartConfig 自定义打包组件。有关配置值的更多信息，请参阅官方 Traefik Helm 配置参数。 要从集群中删除 Traefik，请使用 --disable=traefik 标志来启动所有 Server。 K3s 1.20 及更早版本包括了 Traefik v1。除非找到现有的 Traefik v1（在这种情况下，Traefik 不会升级到 v2），否则 K3s 1.21 及更高版本将安装 Traefik v2。有关 K3s 中包含的 Traefik 版本，请参阅版本的发行说明。 要从较旧的 Traefik v1 实例迁移，请参阅 Traefik 文档和迁移工具。","s":"Traefik Ingress Controller","u":"/zh/networking","h":"#traefik-ingress-controller","p":1211},{"i":1218,"t":"K3s 包含一个嵌入式网络策略控制器。底层实现是 kube-router 的 netpol 控制器库（没有其他 kube-router 功能），你可以在此处找到 netpol。 要禁用它，使用 --disable-network-policy 标志来启动每个 server。 备注 如果 K3s 配置为禁用网络策略控制器，则不会删除网络策略 iptables 规则。要在禁用网络策略控制器后清理配置的 kube-router 网络策略规则，请使用 k3s-killall.sh 脚本，或使用 iptables-save 和 iptables-restore。这些步骤必须在集群中的所有节点上手动执行。 iptables-save | grep -v KUBE-ROUTER | iptables-restore ip6tables-save | grep -v KUBE-ROUTER | ip6tables-restore","s":"网络策略控制器","u":"/zh/networking","h":"#网络策略控制器","p":1211},{"i":1220,"t":"任何 LoadBalancer 控制器都可以部署到你的 K3s 集群。默认情况下，K3s 提供一个称为 ServiceLB（以前称为 Klipper LoadBalancer）的负载均衡器，它会使用可用的主机端口。 上游 Kubernetes 允许创建 LoadBalancer 类型的 Service，但不包括默认的负载均衡器实现，因此这些 Service 在安装之前会保持 pending 状态。许多托管服务需要 Amazon EC2 或 Microsoft Azure 等云厂商来提供外部负载均衡器实现。相比之下，K3s ServiceLB 可以在没有云厂商或任何额外配置的情况下使用 LoadBalancer Service。","s":"Service Load Balancer","u":"/zh/networking","h":"#service-load-balancer","p":1211},{"i":1222,"t":"ServiceLB 控制器会监视 Kubernetes Service，其中 spec.type 字段设置为 LoadBalancer。 对于每个 LoadBalancer Service，在 kube-system 命名空间中会创建一个 DaemonSet。这个 DaemonSet 依次在每个节点上创建带有 svc- 前缀的 Pod。这些 Pod 使用 iptables 将流量从 Pod 的 NodePort 转发到 Service 的 ClusterIP 地址和端口。 如果 ServiceLB Pod 在配置了外部 IP 的节点上运行，则该节点的外部 IP 将填充到 Service 的 status.loadBalancer.ingress 地址列表中。否则将使用节点的内部 IP。 如果创建了多个 LoadBalancer Service，则会为每个 Service 创建一个单独的 DaemonSet。 只要它们使用不同的端口，就可以在同一个节点上公开多个 Service。 如果你创建一个侦听端口 80 的 LoadBalancer Service，ServiceLB 将尝试在集群中为端口 80 寻找空闲主机。如果没有该端口可用的主机，则 LB 将停留在 Pending 状态。","s":"ServiceLB 的工作原理","u":"/zh/networking","h":"#servicelb-的工作原理","p":1211},{"i":1224,"t":"在 K3s 中创建一个 LoadBalancer 类型的 Service。","s":"用法","u":"/zh/networking","h":"#用法","p":1211},{"i":1226,"t":"如果你将 svccontroller.k3s.cattle.io/enablelb=true 标签添加到一个或多个节点，ServiceLB 控制器会切换到 allow-list 模式，只有具有该标签的节点才有资格托管 LoadBalancer Pod。未标记的节点将被 ServiceLB 排除。 备注 默认情况下，节点没有标签。只要所有节点保持未标记状态，所有具有可用端口的节点都将被 ServiceLB 使用。","s":"控制 ServiceLB 节点选择","u":"/zh/networking","h":"#控制-servicelb-节点选择","p":1211},{"i":1228,"t":"要选择特定的节点子集来托管 LoadBalancer 的 pod，请将 enablelb 标签添加到所需的节点，并在节点和服务上设置匹配的 lbpool 标签值。例如： 使用 svccontroller.k3s.cattle.io/lbpool=pool1 和 svccontroller.k3s.cattle.io/enablelb=true 标记节点 A 和节点 B 使用 svccontroller.k3s.cattle.io/lbpool=pool2 和 svccontroller.k3s.cattle.io/enablelb=true 标记节点 C 和节点 D 使用标签 svccontroller.k3s.cattle.io/lbpool=pool1 在端口 443 上创建一个 LoadBalancer Service。该 Service 的 DaemonSet 仅将 Pod 部署到节点 A 和节点 B。 使用标签 svccontroller.k3s.cattle.io/lbpool=pool2 在端口 443 上创建另一个 LoadBalancer Service。DaemonSet 只会将 Pod 部署到节点 C 和节点 D。","s":"创建 ServiceLB 节点池","u":"/zh/networking","h":"#创建-servicelb-节点池","p":1211},{"i":1230,"t":"要禁用 ServiceLB，请使用 --disable=servicelb 标记来配置集群中的所有 Server。 如果你希望运行不同的 LB，例如 MetalLB，这是必要的。","s":"禁用 ServiceLB","u":"/zh/networking","h":"#禁用-servicelb","p":1211},{"i":1232,"t":"为了减少二进制文件的大小，K3s 删除了所有“树内”（内置）云提供程序。相反，K3s 提供了一个嵌入式 Cloud Controller Manager (CCM) 存根，它执行以下操作： 根据 --node-ip 和 --node-external-ip 标志设置节点 InternalIP 和 ExternalIP 地址字段。 托管 ServiceLB LoadBalancer 控制器。 清除云提供商设置为 external 时出现的 node.cloudprovider.kubernetes.io/uninitialized 污点。 在部署外部 CCM 之前，你必须使用 --disable-cloud-controller 标志启动所有 K3s Server 以禁用嵌入式 CCM。 备注 如果你禁用了内置 CCM 并且没有正确部署和配置外部替代品，节点将仍然具有污点而且无法调度。","s":"部署外部 Cloud Controller Manager","u":"/zh/networking","h":"#部署外部-cloud-controller-manager","p":1211},{"i":1234,"t":"一些云提供商（例如 Linode）将创建以 “localhost” 作为主机名的主机，而其他云提供商可能根本没有设置主机名。这可能会导致域名解析出现问题。你可以使用 --node-name 标志或 K3S_NODE_NAME 环境变量运行 K3s，这会通过传递节点名称来解决此问题。","s":"没有主机名的节点","u":"/zh/networking","h":"#没有主机名的节点","p":1211},{"i":1236,"t":"版本 从 v1.26.3+k3s1 开始作为实验功能 警告 启用此标志后，网络策略控制器将无法正常工作。 从 v1.26 开始，Kubernetes 引入了多集群 CIDR 作为 alpha 功能。(https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/2593-multiple-cluster-cidrs) 你可以使用 --multi-cluster-cidr 标志在 K3s Server 上启用此功能，它可用于定义多个集群 CIDR，为每个节点分配 podCIDR，你还可以在已运行的集群上进行扩展。 你可以使用 API 和 kubectl 查看 clustercidr 资源（使用 --cluster-cidr 配置的 CIDR 定义为默认值）。 新的 clustercidr 可以如下定义： apiVersion: networking.k8s.io/v1alpha1 kind: ClusterCIDR metadata: name: new-cidr spec: nodeSelector: nodeSelectorTerms: - matchExpressions: - key: kubernetes.io/hostname operator: In values: - \"worker2\" perNodeHostBits: 8 ipv4: 10.247.0.0/16 与 nodeSelector 匹配的节点将使用新定义资源的 podCIDR。 备注 已拥有 CIDR 的节点无法获得新的 CIDR。你必须移除或重启它。 警告 你可以使用 ipv4 和 ipv6 来定义双栈 CIDR，但 perNodeHostBits 是相同的。使用 --cluster-cidr 来定义双栈配置时，kube-controller 上的 --node-cidr-mask-size-ipv6 标志需要具有与 IPv4 相同的大小。","s":"多集群 CIDR（实验性）","u":"/zh/networking","h":"#多集群-cidr实验性","p":1211},{"i":1238,"t":"本指南帮助你使用默认选项快速启动集群。安装部分更详细地介绍了如何设置 K3s。 有关 K3s 组件如何协同工作的信息，请参阅架构。 信息 Kubernetes 新手？Kubernetes 官方文档介绍了一些很好的基础知识教程。","s":"快速入门指南","u":"/zh/quick-start","h":"","p":1237},{"i":1240,"t":"K3s 提供了一个安装脚本，可以方便地将其作为服务安装在基于 systemd 或 openrc 的系统上。该脚本可在 https://get.k3s.io 获得。要使用这种方法安装 K3s，只需运行： curl -sfL https://get.k3s.io | sh - 备注 中国用户，可以使用以下方法加速安装： curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh - 运行此安装后： K3s 服务将被配置为在节点重启后或进程崩溃或被杀死时自动重启。 将安装其他实用程序，包括 kubectl、crictl、ctr、k3s-killall.sh 和 k3s-uninstall.sh。 kubeconfig 文件将写入到 /etc/rancher/k3s/k3s.yaml，由 K3s 安装的 kubectl 将自动使用该文件。 单节点 Server 安装是一个功能齐全的 Kubernetes 集群，它包括了托管工作负载 pod 所需的所有数据存储、control plane、kubelet 和容器运行时组件。除非你希望向集群添加容量或冗余，否则没有必要添加额外的 Server 或 Agent 节点。 要安装其他 Agent 节点并将它们添加到集群，请使用 K3S_URL 和 K3S_TOKEN 环境变量运行安装脚本。以下示例演示了如何添加 Agent 节点： curl -sfL https://get.k3s.io | K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh - 备注 中国用户，可以使用以下方法加速安装： curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn K3S_URL=https://myserver:6443 K3S_TOKEN=mynodetoken sh - K3S_URL 参数会导致安装程序将 K3s 配置为 Agent 而不是 Server。K3s Agent 将注册到在 URL 上监听的 K3s Server。K3S_TOKEN 使用的值存储在 Server 节点上的 /var/lib/rancher/k3s/server/node-token 中。 备注 每台主机必须具有唯一的主机名。如果你的计算机没有唯一的主机名，请传递 K3S_NODE_NAME 环境变量，并为每个节点提供一个有效且唯一的主机名。","s":"安装脚本","u":"/zh/quick-start","h":"#安装脚本","p":1237},{"i":1242,"t":"本节详细介绍了 K3s 安装脚本、服务器/客户端配置选项以及其他工具的使用说明。","s":"参考","u":"/zh/reference","h":"","p":1241},{"i":1244,"t":"如快速入门指南中所述，你可以使用 https://get.k3s.io 上提供的安装脚本在基于 systemd 和 openrc 的系统上将 K3s 安装为服务。 此命令的最简单形式如下： curl -sfL https://get.k3s.io | sh - 备注 中国用户，可以使用以下方法加速安装： curl -sfL https://rancher-mirror.rancher.cn/k3s/k3s-install.sh | INSTALL_K3S_MIRROR=cn sh - 使用该方法安装 K3s 时，你可以使用以下环境变量来配置安装： 环境变量 描述 INSTALL_K3S_SKIP_DOWNLOAD 如果设置为 true 将不会下载 K3s 哈希或二进制文件。 INSTALL_K3S_SYMLINK 默认情况下，如果命令不存在于路径中，将为 kubectl、crictl 和 ctr 二进制文件创建符号链接。如果设置为 skip 将不会创建符号链接，设置为 force 将会覆盖。 INSTALL_K3S_SKIP_ENABLE 如果设置为 true 将不会启用或启动 K3s 服务。 INSTALL_K3S_SKIP_START 如果设置为 true 将不会启动 K3s 服务。 INSTALL_K3S_VERSION 从 GitHub 下载的 K3s 版本。如果未指定，将尝试从 stable channel 下载。 INSTALL_K3S_BIN_DIR 安装 K3s 二进制文件、链接和卸载脚本的目录，或使用 /usr/local/bin 作为默认目录。 INSTALL_K3S_BIN_DIR_READ_ONLY 如果设置为 true 将不会将文件写入 INSTALL_K3S_BIN_DIR，强制设置为 INSTALL_K3S_SKIP_DOWNLOAD=true。 INSTALL_K3S_SYSTEMD_DIR 安装 systemd 服务和环境文件的目录，或使用 /etc/systemd/system 作为默认目录。 INSTALL_K3S_EXEC 带有标志的命令，用于在服务中启动 K3s。如果未指定命令并且设置了 K3S_URL，它将默认为 \"agent\"。如果未设置 K3S_URL，它将默认为 \"server\"。如需帮助，请参阅此示例。 INSTALL_K3S_NAME 要创建的 systemd 服务的名称，如果将 K3s 作为 server 运行，则默认为 “k3s”，如果将 K3s 作为 agent 运行，则默认为 “k3s-agent”。如果指定，名称将以“k3s-”为前缀。 INSTALL_K3S_TYPE 要创建的 systemd 服务类型，如果未指定，将默认使用来自 K3s exec 命令的类型。 INSTALL_K3S_SELINUX_WARN 如果设置为 true，则在未找到 k3s-selinux 策略时会继续。 INSTALL_K3S_SKIP_SELINUX_RPM 如果设置为 true 将跳过 k3s RPM 的自动安装。 INSTALL_K3S_CHANNEL_URL 用于获取 K3s 下载 URL 的 Channel URL。默认为 https://update.k3s.io/v1-release/channels。 INSTALL_K3S_CHANNEL 用于获取 K3s 下载 URL 的 Channel。默认为 \"stable\"。可选项：stable、latest、testing。 以下示例显示了如何将上述环境变量作为选项设置（在管道符后）： curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest sh - 以 K3S_ 开头的环境变量将被保留，供 systemd 和 openrc 服务使用。 如果设置了 K3S_URL 但没有设置 exec 命令，将默认命令为“agent”。 运行 agent 时，还必须设置 K3S_TOKEN。","s":"环境变量","u":"/zh/reference/env-variables","h":"","p":1243},{"i":1246,"t":"本文介绍了测试结果，用于确定 K3s 的最低资源要求。 结果总结如下： 组件 处理器 最小 CPU Kine/SQLite 的最小 RAM 嵌入式 etcd 的最小 RAM 具有工作负载的 K3s Server Intel 8375C CPU, 2.90 GHz 核的 6% 1596M 1606M 具有单个 Agent 的 K3s 集群 Intel 8375C CPU, 2.90 GHz 核的 5% 1428M 1450M K3s agent Intel 8375C CPU, 2.90 GHz 核的 3% 275M 275M 具有工作负载的 K3s Server Pi4B BCM2711, 1.50 GHz 核的 30% 1588M 1613M 具有单个 Agent 的 K3s 集群 Pi4B BCM2711, 1.50 GHz 核的 25% 1215M 1413M K3s agent Pi4B BCM2711, 1.50 GHz 核的 10% 268M 268M 资源测试范围 用于基线测量的组件 方法 环境 基准资源要求 具有工作负载的 K3s Server 具有单个 Agent 的 K3s 集群 K3s Agent 分析 主要资源使用率决定因素 防止 Agent 和工作负载干扰集群数据存储","s":"资源分析","u":"/zh/reference/resource-profiling","h":"","p":1245},{"i":1248,"t":"资源测试旨在解决以下问题： 在单节点集群上，确定要为整个 K3s 服务器堆栈预留的最小 CPU、内存和 IOP 数量（假设集群上将部署真实的工作负载）。 在 Agent（Worker）节点上，确定要为 Kubernetes 和 K3s control plane 组件（kubelet 和 k3s agent）预留的最小 CPU、内存和 IOP 数量。","s":"资源测试范围","u":"/zh/reference/resource-profiling","h":"#资源测试范围","p":1245},{"i":1250,"t":"测试的组件包括： 启用所有打包组件的 K3s 1.26.5 Prometheus + Grafana 监控栈 Kubernetes 示例 Nginx 部署 这些是一个稳定系统的基线数据，只使用 K3s 打包的组件（Traefik Ingress、Klipper lb、本地路径存储），运行标准的监控堆栈（Prometheus 和 Grafana）和 Guestbook 示例应用程序。 包括 IOPS 在内的资源数据仅用于 Kubernetes 数据存储和 control plane，不包括系统级 management agent 或 logging、容器镜像管理或任何工作负载要求的开销。","s":"用于基线测量的组件","u":"/zh/reference/resource-profiling","h":"#用于基线测量的组件","p":1245},{"i":1252,"t":"Prometheus v2.43.0 的独立实例可以通过 apt 安装的 prometheus-node-exporter 收集主机 CPU、内存和磁盘 IO 统计信息。 systemd-cgtop 用于抽查 systemd cgroup 级别的 CPU 和内存利用率。system.slice/k3s.service 跟踪 K3s 和 containerd 的资源利用率，而单个 pod 位于 kubepods 层级下。 其他详细的 K3s 内存利用率数据是使用 server 和 agent 进程的集成 metrics-server 从 kubectl top node 收集的。 利用率数据来自于运行所述工作负载的节点上稳态运行的第 95 个百分位读数。","s":"方法","u":"/zh/reference/resource-profiling","h":"#方法","p":1245},{"i":1254,"t":"Arch OS System CPU RAM Disk x86_64 Ubuntu 22.04 AWS c6id.xlarge Intel Xeon Platinum 8375C CPU, 4 Core 2.90 GHz 8 GB NVME SSD aarch64 Raspberry Pi OS 11 Raspberry Pi 4 Model B BCM2711, 4 Core 1.50 GHz 8 GB UHS-III SDXC","s":"环境","u":"/zh/reference/resource-profiling","h":"#环境","p":1245},{"i":1256,"t":"本文介绍了测试结果，用于确定基本 K3s 操作的最低资源要求。","s":"基准资源要求","u":"/zh/reference/resource-profiling","h":"#基准资源要求","p":1245},{"i":1258,"t":"这些是单节点集群的要求，其中 K3s Server 与简单工作负载共享资源。 CPU 要求： 系统 CPU 核用量 Intel 8375C 核的 6% Pi4B 核的 30% 内存要求： 测试的数据存储 系统 内存 Kine/SQLite Intel 8375C 1596M Pi4B 1588M 嵌入式 etcd Intel 8375C 1606M Pi4B 1613M 磁盘要求： 测试的数据存储 IOPS KiB/sec 延迟 Kine/SQLite 10 500 < 10 ms 嵌入式 etcd 50 250 < 5 ms","s":"具有工作负载的 K3s Server","u":"/zh/reference/resource-profiling","h":"#具有工作负载的-k3s-server","p":1245},{"i":1260,"t":"以下介绍具有 K3s Server 节点和 K3s Agent，但没有工作负载的 K3s 集群的基线要求。 K3s Server​ CPU 要求： 系统 CPU 核用量 Intel 8375C 核的 5% Pi4B 核的 25% 内存要求： 测试的数据存储 系统 内存 Kine/SQLite Intel 8375C 1428M Pi4B 1215M 嵌入式 etcd Intel 8375C 1450M Pi4B 1413M","s":"具有单个 Agent 的 K3s 集群","u":"/zh/reference/resource-profiling","h":"#具有单个-agent-的-k3s-集群","p":1245},{"i":1262,"t":"要求： 系统 CPU 核用量 RAM Intel 8375C 核的 3% 275M Pi4B 核的 5% 268M","s":"K3s Agent","u":"/zh/reference/resource-profiling","h":"#k3s-agent","p":1245},{"i":1264,"t":"本节包括了对 K3s Server 和 Agent 利用率产生最大影响的分析，以及如何保护集群数据存储免受 Agent 和工作负载的干扰。","s":"分析","u":"/zh/reference/resource-profiling","h":"#分析","p":1245},{"i":1266,"t":"K3s Server 利用率数据主要取决于 Kubernetes 数据存储（kine 或 etcd）、API Server、Controller-Manager 和 Scheduler 控制循环的支持，以及影响系统状态更改的任何管理任务。如果对 Kubernetes control plane 添加额外负载（例如创建/修改/删除资源），利用率会出现临时峰值。如果使用大量使用 Kubernetes 数据存储的 Operator 或应用程序（例如 Rancher 或其他 Operator 类型的应用程序），server 的资源需求将增加。如果通过添加额外的节点或创建大量集群资源来扩展集群，server 的资源需求将增加。 K3s Agent 利用率数据主要取决于容器生命周期管理控制循环的支持。如果存在涉及管理镜像、配置存储或创建/销毁容器的操作，利用率会出现临时峰值。尤其是镜像拉取（通常与 CPU 和 IO 高度绑定），因为涉及将镜像内容解压缩到磁盘。如果可能，你可以将工作负载存储（pod 临时存储和卷）与 Agent 组件（/var/lib/rancher/k3s/agent）隔离，从而确保没有资源冲突。","s":"主要资源使用率决定因素","u":"/zh/reference/resource-profiling","h":"#主要资源使用率决定因素","p":1245},{"i":1268,"t":"如果在 server 还托管了工作负载 pod 的环境中运行，你需要确保 agent 和工作负载 IOPS 不会干扰数据存储。 你可以将 server 组件 (/var/lib/rancher/k3s/server) 放置在与 agent 组件 (/var/lib/rancher/k3s/agent) 不同的存储介质，其中包括 containerd 镜像存储区。 工作负载存储（pod 临时存储和卷）也应该与数据存储区隔离。 如果未能满足数据存储吞吐量和延迟要求，control plane 的响应可能会延迟，control plane 也可能无法维持系统状态。","s":"防止 Agent 和工作负载干扰集群数据存储","u":"/zh/reference/resource-profiling","h":"#防止-agent-和工作负载干扰集群数据存储","p":1245},{"i":1270,"t":"本节介绍了加强 K3s 集群安全性的方法，包括 2 个部分。本指南假设 K3s 与嵌入式 etcd 一起运行。 以下文档适用于 CIS Kubernetes Benchmark v1.23。 强化指南 CIS Benchmark 自我评估指南","s":"安全","u":"/zh/security","h":"","p":1269},{"i":1272,"t":"信息 请知悉，本文仅提供英文版。 This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS). K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark: K3s will not modify the host operating system. Any host-level modifications will need to be done manually. Certain CIS policy controls for NetworkPolicies and PodSecurityStandards (PodSecurityPolicies on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below. The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn't utilize these for the core components since everything is packaged into a single binary.","s":"CIS Hardening Guide","u":"/zh/security/hardening-guide","h":"","p":1271},{"i":1274,"t":"There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.","s":"Host-level Requirements","u":"/zh/security/hardening-guide","h":"#host-level-requirements","p":1271},{"i":1276,"t":"This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet's defaults. Note: protect-kernel-defaults is exposed as a top-level flag for K3s. Set kernel parameters​ Create a file called /etc/sysctl.d/90-kubelet.conf and add the snippet below. Then run sysctl -p /etc/sysctl.d/90-kubelet.conf. vm.panic_on_oom=0 vm.overcommit_memory=1 kernel.panic=10 kernel.panic_on_oops=1 kernel.keys.root_maxbytes=25000000","s":"Ensure protect-kernel-defaults is set","u":"/zh/security/hardening-guide","h":"#ensure-protect-kernel-defaults-is-set","p":1271},{"i":1278,"t":"The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section. By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn't enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the PodSecurity and NodeRestriction admission controllers enabled, among others.","s":"Kubernetes Runtime Requirements","u":"/zh/security/hardening-guide","h":"#kubernetes-runtime-requirements","p":1271},{"i":1280,"t":"v1.25 and Newer v1.24 and Older K3s v1.25 and newer support Pod Security Admissions (PSAs) for controlling pod security. PSAs are enabled by passing the following flag to the K3s server: --kube-apiserver-arg=\"admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml\" The policy should be written to a file named psa.yaml in /var/lib/rancher/k3s/server directory. Here is an example of a compliant PSA: apiVersion: apiserver.config.k8s.io/v1 kind: AdmissionConfiguration plugins: - name: PodSecurity configuration: apiVersion: pod-security.admission.config.k8s.io/v1beta1 kind: PodSecurityConfiguration defaults: enforce: \"restricted\" enforce-version: \"latest\" audit: \"restricted\" audit-version: \"latest\" warn: \"restricted\" warn-version: \"latest\" exemptions: usernames: [] runtimeClasses: [] namespaces: [kube-system, cis-operator-system] K3s v1.24 and older support Pod Security Policies (PSPs) for controlling pod security. PSPs are enabled by passing the following flag to the K3s server: --kube-apiserver-arg=\"enable-admission-plugins=NodeRestriction,PodSecurityPolicy\" This will have the effect of maintaining the NodeRestriction plugin as well as enabling the PodSecurityPolicy. When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark. Here is an example of a compliant PSP: apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: restricted-psp spec: privileged: false # CIS - 5.2.1 allowPrivilegeEscalation: false # CIS - 5.2.5 requiredDropCapabilities: # CIS - 5.2.7/8/9 - ALL volumes: - 'configMap' - 'emptyDir' - 'projected' - 'secret' - 'downwardAPI' - 'csi' - 'persistentVolumeClaim' - 'ephemeral' hostNetwork: false # CIS - 5.2.4 hostIPC: false # CIS - 5.2.3 hostPID: false # CIS - 5.2.2 runAsUser: rule: 'MustRunAsNonRoot' # CIS - 5.2.6 seLinux: rule: 'RunAsAny' supplementalGroups: rule: 'MustRunAs' ranges: - min: 1 max: 65535 fsGroup: rule: 'MustRunAs' ranges: - min: 1 max: 65535 readOnlyRootFilesystem: false For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a \"system unrestricted policy\" which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly. Combining the configuration above with the Network Policy described in the next section, a single file can be placed in the /var/lib/rancher/k3s/server/manifests directory. Here is an example of a policy.yaml file: apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: restricted-psp spec: privileged: false allowPrivilegeEscalation: false requiredDropCapabilities: - ALL volumes: - 'configMap' - 'emptyDir' - 'projected' - 'secret' - 'downwardAPI' - 'csi' - 'persistentVolumeClaim' - 'ephemeral' hostNetwork: false hostIPC: false hostPID: false runAsUser: rule: 'MustRunAsNonRoot' seLinux: rule: 'RunAsAny' supplementalGroups: rule: 'MustRunAs' ranges: - min: 1 max: 65535 fsGroup: rule: 'MustRunAs' ranges: - min: 1 max: 65535 readOnlyRootFilesystem: false --- apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: system-unrestricted-psp annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*' spec: allowPrivilegeEscalation: true allowedCapabilities: - '*' fsGroup: rule: RunAsAny hostIPC: true hostNetwork: true hostPID: true hostPorts: - max: 65535 min: 0 privileged: true runAsUser: rule: RunAsAny seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny volumes: - '*' --- apiVersion: policy/v1beta1 kind: PodSecurityPolicy metadata: name: svclb-psp annotations: seccomp.security.alpha.kubernetes.io/allowedProfileNames: '*' spec: allowPrivilegeEscalation: false allowedCapabilities: - NET_ADMIN allowedUnsafeSysctls: - net.ipv4.ip_forward - net.ipv6.conf.all.forwarding fsGroup: rule: RunAsAny hostPorts: - max: 65535 min: 0 runAsUser: rule: RunAsAny seLinux: rule: RunAsAny supplementalGroups: rule: RunAsAny --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:restricted-psp rules: - apiGroups: - policy resources: - podsecuritypolicies verbs: - use resourceNames: - restricted-psp --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:system-unrestricted-psp rules: - apiGroups: - policy resources: - podsecuritypolicies resourceNames: - system-unrestricted-psp verbs: - use --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: psp:svclb-psp rules: - apiGroups: - policy resources: - podsecuritypolicies resourceNames: - svclb-psp verbs: - use --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: default:restricted-psp roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:restricted-psp subjects: - kind: Group name: system:authenticated apiGroup: rbac.authorization.k8s.io --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: system-unrestricted-node-psp-rolebinding roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:system-unrestricted-psp subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:nodes --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: system-unrestricted-svc-acct-psp-rolebinding namespace: kube-system roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:system-unrestricted-psp subjects: - apiGroup: rbac.authorization.k8s.io kind: Group name: system:serviceaccounts --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: svclb-psp-rolebinding namespace: kube-system roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: psp:svclb-psp subjects: - kind: ServiceAccount name: svclb --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-system spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-system --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: default spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: default --- kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-public spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-public Note: The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the kube-system namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.","s":"Pod Security","u":"/zh/security/hardening-guide","h":"#pod-security","p":1271},{"i":1282,"t":"CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods. Network policies should be placed the /var/lib/rancher/k3s/server/manifests directory, where they will automatically be deployed on startup. Here is an example of a compliant network policy. kind: NetworkPolicy apiVersion: networking.k8s.io/v1 metadata: name: intra-namespace namespace: kube-system spec: podSelector: {} ingress: - from: - namespaceSelector: matchLabels: name: kube-system With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS. apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: default-network-dns-policy namespace: <NAMESPACE> spec: ingress: - ports: - port: 53 protocol: TCP - port: 53 protocol: UDP podSelector: matchLabels: k8s-app: kube-dns policyTypes: - Ingress The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster. v1.21 and Newer v1.20 and Older apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-metrics-server namespace: kube-system spec: podSelector: matchLabels: k8s-app: metrics-server ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-svclbtraefik-ingress namespace: kube-system spec: podSelector: matchLabels: svccontroller.k3s.cattle.io/svcname: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-traefik-v121-ingress namespace: kube-system spec: podSelector: matchLabels: app.kubernetes.io/name: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-metrics-server namespace: kube-system spec: podSelector: matchLabels: k8s-app: metrics-server ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-svclbtraefik-ingress namespace: kube-system spec: podSelector: matchLabels: svccontroller.k3s.cattle.io/svcname: traefik ingress: - {} policyTypes: - Ingress --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy metadata: name: allow-all-traefik-v120-ingress namespace: kube-system spec: podSelector: matchLabels: app: traefik ingress: - {} policyTypes: - Ingress --- 信息 Operators must manage network policies as normal for additional namespaces that are created.","s":"NetworkPolicies","u":"/zh/security/hardening-guide","h":"#networkpolicies","p":1271},{"i":1284,"t":"CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn't create by default the log directory and audit policy, as auditing requirements are specific to each user's policies and environment. The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information. sudo mkdir -p -m 700 /var/lib/rancher/k3s/server/logs A starter audit policy to log request metadata is provided below. The policy should be written to a file named audit.yaml in /var/lib/rancher/k3s/server directory. Detailed information about policy configuration for the API server can be found in the Kubernetes documentation. apiVersion: audit.k8s.io/v1 kind: Policy rules: - level: Metadata Both configurations must be passed as arguments to the API Server as: --kube-apiserver-arg='audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' --kube-apiserver-arg='audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' If the configurations are created after K3s is installed, they must be added to K3s' systemd service in /etc/systemd/system/k3s.service. ExecStart=/usr/local/bin/k3s \\ server \\ '--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' \\ '--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' \\ K3s must be restarted to load the new configuration. sudo systemctl daemon-reload sudo systemctl restart k3s.service","s":"API Server audit configuration","u":"/zh/security/hardening-guide","h":"#api-server-audit-configuration","p":1271},{"i":1286,"t":"The configuration below should be placed in the configuration file, and contains all the necessary remediations to harden the Kubernetes components. v1.25 and Newer v1.24 and Older protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true' protect-kernel-defaults: true secrets-encryption: true kube-apiserver-arg: - 'enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount' - 'audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log' - 'audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml' - 'audit-log-maxage=30' - 'audit-log-maxbackup=10' - 'audit-log-maxsize=100' - 'request-timeout=300s' - 'service-account-lookup=true' kube-controller-manager-arg: - 'terminated-pod-gc-threshold=10' - 'use-service-account-credentials=true' kubelet-arg: - 'streaming-connection-idle-timeout=5m' - 'make-iptables-util-chains=true'","s":"Configuration for Kubernetes Components","u":"/zh/security/hardening-guide","h":"#configuration-for-kubernetes-components","p":1271},{"i":1288,"t":"Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy. kube-apiserver --advertise-port=6443 --allow-privileged=true --anonymous-auth=false # 1.2.1 --api-audiences=unknown --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt # 1.2.31 --enable-admission-plugins=NodeRestriction,PodSecurityPolicy # 1.2.17 --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt # 1.2.32 --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt # 1.2.29 --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key # 1.2.29 --etcd-servers=https://127.0.0.1:2379 --insecure-port=0 # 1.2.19 --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --profiling=false # 1.2.21 --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 # 1.2.20 --service-account-issuer=k3s --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.2.28 --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt # 1.2.30 --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key # 1.2.30 --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 kube-controller-manager --address=127.0.0.1 --allocate-node-cidrs=true --bind-address=127.0.0.1 # 1.3.7 --cluster-cidr=10.42.0.0/16 --cluster-signing-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --port=10252 --profiling=false # 1.3.2 --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt # 1.3.5 --secure-port=0 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key # 1.3.4 --use-service-account-credentials=true # 1.3.3 kube-scheduler --address=127.0.0.1 --bind-address=127.0.0.1 # 1.4.2 --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --port=10251 --profiling=false # 1.4.1 --secure-port=0 kubelet --address=0.0.0.0 --anonymous-auth=false # 4.2.1 --authentication-token-webhook=true --authorization-mode=Webhook # 4.2.2 --cgroup-driver=cgroupfs --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt # 4.2.3 --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --cni-bin-dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin --cni-conf-dir=/var/lib/rancher/k3s/agent/etc/cni/net.d --container-runtime-endpoint=/run/k3s/containerd/containerd.sock --container-runtime=remote --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=hostname01 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --kubelet-cgroups=/systemd/system.slice --node-labels= --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --protect-kernel-defaults=true # 4.2.6 --read-only-port=0 # 4.2.4 --resolv-conf=/run/systemd/resolve/resolv.conf --runtime-cgroups=/systemd/system.slice --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt # 4.2.10 --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key # 4.2.10 Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.","s":"Control Plane Execution and Arguments","u":"/zh/security/hardening-guide","h":"#control-plane-execution-and-arguments","p":1271},{"i":1290,"t":"The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.","s":"Known Issues","u":"/zh/security/hardening-guide","h":"#known-issues","p":1271},{"i":1292,"t":"Ensure that the admission control plugin NamespaceLifecycle is set. Rationale Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects. This can be remediated by passing this argument as a value to the enable-admission-plugins= and pass that to --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.15","u":"/zh/security/hardening-guide","h":"#control-1215","p":1271},{"i":1294,"t":"Ensure that the admission control plugin PodSecurityPolicy is set. Rationale A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions. This can be remediated by passing this argument as a value to the enable-admission-plugins= and pass that to --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.16","u":"/zh/security/hardening-guide","h":"#control-1216","p":1271},{"i":1296,"t":"Ensure that the --audit-log-path argument is set. Rationale Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.22","u":"/zh/security/hardening-guide","h":"#control-1222","p":1271},{"i":1298,"t":"Ensure that the --audit-log-maxage argument is set to 30 or as appropriate. Rationale Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.23","u":"/zh/security/hardening-guide","h":"#control-1223","p":1271},{"i":1300,"t":"Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate. Rationale Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.24","u":"/zh/security/hardening-guide","h":"#control-1224","p":1271},{"i":1302,"t":"Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate. Rationale Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.25","u":"/zh/security/hardening-guide","h":"#control-1225","p":1271},{"i":1304,"t":"Ensure that the --request-timeout argument is set as appropriate. Rationale Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user's connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.26","u":"/zh/security/hardening-guide","h":"#control-1226","p":1271},{"i":1306,"t":"Ensure that the --service-account-lookup argument is set to true. Rationale If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.2.27","u":"/zh/security/hardening-guide","h":"#control-1227","p":1271},{"i":1308,"t":"Ensure that the --encryption-provider-config argument is set as appropriate. Rationale `etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures. Detailed steps on how to configure secrets encryption in K3s are available in Secrets Encryption.","s":"Control 1.2.33","u":"/zh/security/hardening-guide","h":"#control-1233","p":1271},{"i":1310,"t":"Ensure that encryption providers are appropriately configured. Rationale Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options. This can be remediated by passing a valid configuration to k3s as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in Secrets Encryption.","s":"Control 1.2.34","u":"/zh/security/hardening-guide","h":"#control-1234","p":1271},{"i":1312,"t":"Ensure that the --terminated-pod-gc-threshold argument is set as appropriate. Rationale Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 1.3.1","u":"/zh/security/hardening-guide","h":"#control-131","p":1271},{"i":1314,"t":"Ensure that a minimal audit policy is created. Rationale Logging is an important detective control for all systems, to detect potential unauthorized access. This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.","s":"Control 3.2.1","u":"/zh/security/hardening-guide","h":"#control-321","p":1271},{"i":1316,"t":"Ensure that the --make-iptables-util-chains argument is set to true. Rationale Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open. This can be remediated by passing this argument as a value to the --kube-apiserver-arg= argument to k3s server. An example can be found below.","s":"Control 4.2.7","u":"/zh/security/hardening-guide","h":"#control-427","p":1271},{"i":1318,"t":"Ensure that default service accounts are not actively used Rationale Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod. Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account. The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments. This can be remediated by updating the automountServiceAccountToken field to false for the default service account in each namespace. For default service accounts in the built-in namespaces (kube-system, kube-public, kube-node-lease, and default), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.","s":"Control 5.1.5","u":"/zh/security/hardening-guide","h":"#control-515","p":1271},{"i":1320,"t":"If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the CIS Benchmark Self-Assessment Guide to understand the expectations of each of the benchmark's checks and how you can do the same on your cluster.","s":"Conclusion","u":"/zh/security/hardening-guide","h":"#conclusion","p":1271},{"i":1322,"t":"K3s 支持启用静态加密。首次启动 server 时，传递标志 --secrets-encryption 将自动执行以下操作： 生成 AES-CBC 密钥 使用密钥生成加密配置文件 将配置作为 encryption-provider-config 传递给 KubeAPI 提示 如果不重新启动现有 server，则无法在其上启用 Secret 加密。 如果使用脚本或配置选项中描述的其他方法进行安装，请使用 curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption。 加密配置文件示例： { \"kind\": \"EncryptionConfiguration\", \"apiVersion\": \"apiserver.config.k8s.io/v1\", \"resources\": [ { \"resources\": [ \"secrets\" ], \"providers\": [ { \"aescbc\": { \"keys\": [ { \"name\": \"aescbckey\", \"secret\": \"xxxxxxxxxxxxxxxxxxx\" } ] } }, { \"identity\": {} } ] } ] }","s":"Secret 加密配置","u":"/zh/security/secrets-encryption","h":"","p":1321},{"i":1324,"t":"K3s 包含一个实用工具 secrets-encrypt，可以自动控制以下内容： 禁用/启用 Secret 加密 添加新的加密密钥 轮换和删除加密密钥 重新加密 Secret 有关详细信息，请参阅 k3s secrets-encrypt 命令文档。","s":"Secret 加密工具","u":"/zh/security/secrets-encryption","h":"#secret-加密工具","p":1321},{"i":1326,"t":"在部署需要保​​留数据的应用时，你需要创建持久存储。持久存储允许你在运行应用的 pod 之外存储应用数据。即使运行应用的 pod 发生故障，这种存储方式也能让你保留应用数据。 持久卷 (PV) 是 Kubernetes 集群中的一块存储，而持久卷声明 (PVC) 是对存储的请求。有关 PV 和 PVC 工作原理的详细信息，请参阅 Kubernetes 存储相关的官方文档。 本文介绍如何使用本地存储提供程序或 Longhorn 设置持久存储。","s":"卷和存储","u":"/zh/storage","h":"","p":1325},{"i":1328,"t":"K3s 删除了几个可选的卷插件和所有内置的（有时称为“in-tree”）云提供商。我们这样做是为了让二进制文件更小，并避免对第三方云或数据中心技术和服务的依赖，因为这些依赖在许多 K3s 用例中可能不可用。我们之所以能够这样做，是因为它们的移除既不会影响核心 Kubernetes 功能，也不会影响一致性。 以下卷插件已从 K3s 中删除： cephfs fc flocker git_repo glusterfs portworx quobyte rbd storageos 这两个组件都有可以与 K3s 一起使用的树外替代方案：Kubernetes Container Storage Interface (CSI) 和 Cloud Provider Interface (CPI)。 Kubernetes 维护人员正在积极地将树内卷插件迁移到 CSI 驱动程序。有关此迁移的更多信息，请参阅此处。","s":"K3s 存储有什么不同？","u":"/zh/storage","h":"#k3s-存储有什么不同","p":1325},{"i":1330,"t":"K3s 自带 Rancher 的 Local Path Provisioner，这使得能够使用各自节点上的本地存储来开箱即用地创建持久卷声明。下面是一个简单的例子。有关更多信息，请参阅官方文档。 创建一个 hostPath 支持的持久卷声明和一个使用它的 Pod：","s":"设置本地存储提供程序","u":"/zh/storage","h":"#设置本地存储提供程序","p":1325},{"i":1332,"t":"apiVersion: v1 kind: PersistentVolumeClaim metadata: name: local-path-pvc namespace: default spec: accessModes: - ReadWriteOnce storageClassName: local-path resources: requests: storage: 2Gi","s":"pvc.yaml","u":"/zh/storage","h":"#pvcyaml","p":1325},{"i":1334,"t":"apiVersion: v1 kind: Pod metadata: name: volume-test namespace: default spec: containers: - name: volume-test image: nginx:stable-alpine imagePullPolicy: IfNotPresent volumeMounts: - name: volv mountPath: /data ports: - containerPort: 80 volumes: - name: volv persistentVolumeClaim: claimName: local-path-pvc 应用 yaml： kubectl create -f pvc.yaml kubectl create -f pod.yaml 确认创建了 PV 和 PVC： kubectl get pv kubectl get pvc 状态都应该是 Bound。","s":"pod.yaml","u":"/zh/storage","h":"#podyaml","p":1325},{"i":1336,"t":"警告 Longhorn 不支持 ARM32。 K3s 支持 Longhorn，这是用于 Kubernetes 的开源分布式块存储系统。 下面是一个简单的例子。有关详细信息，请参阅官方文档。 应用 longhorn.yaml 来安装 Longhorn： kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml Longhorn 将安装在命名空间 longhorn-system 中。 应用 yaml 来创建 PVC 和 Pod： kubectl create -f pvc.yaml kubectl create -f pod.yaml","s":"设置 Longhorn","u":"/zh/storage","h":"#设置-longhorn","p":1325},{"i":1338,"t":"apiVersion: v1 kind: PersistentVolumeClaim metadata: name: longhorn-volv-pvc spec: accessModes: - ReadWriteOnce storageClassName: longhorn resources: requests: storage: 2Gi","s":"pvc.yaml","u":"/zh/storage","h":"#pvcyaml-1","p":1325},{"i":1340,"t":"apiVersion: v1 kind: Pod metadata: name: volume-test namespace: default spec: containers: - name: volume-test image: nginx:stable-alpine imagePullPolicy: IfNotPresent volumeMounts: - name: volv mountPath: /data ports: - containerPort: 80 volumes: - name: volv persistentVolumeClaim: claimName: longhorn-volv-pvc 确认创建了 PV 和 PVC： kubectl get pv kubectl get pvc 状态都应该是 Bound。","s":"pod.yaml","u":"/zh/storage","h":"#podyaml-1","p":1325},{"i":1343,"t":"手动升级描述了手动升级集群的几种方法。它也可以作为通过第三方基础设施即代码工具（如 Terraform）进行升级的基础。 自动升级描述了如何使用 Rancher 的 system-upgrade-controller 执行 Kubernetes 原生的自动升级。","s":"升级 K3s 集群","u":"/zh/upgrades","h":"#升级-k3s-集群","p":1341},{"i":1345,"t":"Traefik：如果没有禁用 Traefik，K3s 1.20 及以前的版本将安装 Traefik v1，而 K3s 1.21 及以后的版本将安装 Traefik v2。要将旧版 Traefik v1 升级到 Traefik v2，请参阅 Traefik 文档并使用迁移工具。 K3s 引导数据：如果你在 HA 配置中使用 K3s 和外部 SQL 数据存储，并且你的 Server（control plane）节点没有使用 --token CLI 标志启动，你将不再能够在不指定令牌的情况下将其他 K3s Server 添加到集群中。请保留此令牌的副本，因为恢复备份时需要它。以前，K3s 在使用外部 SQL 数据存储时不强制使用 token。 受影响的版本是 <= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1；修补后的版本为 v1.19.13+k3s1、v1.20.9+k3s1、v1.21.3+k3s1。 你可以从已加入集群的任何 server 中检索令牌值，如下所示： cat /var/lib/rancher/k3s/server/token 实验性 Dqlite：实验性嵌入式 Dqlite 数据存储在 K3s v1.19.1 中已被弃用。请注意，不支持从实验性 Dqlite 升级到实验性嵌入式 etcd。如果你尝试升级，升级将不会成功，并且数据将会丢失。","s":"特定版本的注意事项","u":"/zh/upgrades","h":"#特定版本的注意事项","p":1341},{"i":1348,"t":"你可以使用 Rancher 的 system-upgrade-controller 管理 K3s 集群升级。这是一种 Kubernetes 原生的集群升级方法。它使用了自定义资源定义 (CRD)、计划和控制器。 计划定义了升级的策略和要求。它还通过标签选择器来定义应该升级的节点。请参阅下文，了解适用于升级 K3s 集群的默认计划。有关更高级的计划配置选项，请参阅 CRD。 控制器通过监控计划和选择要运行升级 job 的节点来安排升级。job 成功运行完成时，控制器将相应地标记它运行的节点。 备注 启动的升级 job 必须具有高权限。它配置了以下内容： 主机 IPC、NET 和 PID 命名空间 CAP_SYS_BOOT 能力 挂载在 /host 的主机根目录，具有读写权限 要以这种方式自动升级，你必须执行以下操作： 将 system-upgrade-controller 安装到集群中 配置计划 警告 如果 K3s 集群由 Rancher 管理，你需要使用 Rancher UI 来管理升级。 如果 K3s 集群是导入到 Rancher 的，Rancher 将管理 system-upgrade-controller 部署和计划。不要按照此页面上的步骤操作。 如果 K3s 集群是由 Rancher 预配的，Rancher 将使用系统 Agent 来管理版本升级。不要按照此页面上的步骤操作。 如果 K3s 集群不是由 Rancher 管理的，你可以按照以下步骤操作。 有关 system-upgrade-controller 的设计和架构，以及它与 K3s 集成的更多详细信息，请参阅以下 Git 仓库： system-upgrade-controller k3s-upgrade 提示 尝试升级到 K3s 新版本时，Kubernetes 版本倾斜策略适用。确保你的计划在升级时不会跳过中间次要版本。system-upgrade-controller 本身不会防止更改到不支持的 Kubernetes 版本。","s":"Overview","u":"/zh/upgrades/automated","h":"#overview","p":1346},{"i":1350,"t":"system-upgrade-controller 可以作为 Deployment 安装到你的集群中。Deployment 需要 ServiceAccount、clusterRoleBinding 和 configmap。要安装这些组件，请运行以下命令： kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml 控制器可以通过前面提到的 configmap 进行配置和自定义，但控制器必须重新部署才能应用更改。","s":"安装 system-upgrade-controller","u":"/zh/upgrades/automated","h":"#安装-system-upgrade-controller","p":1346},{"i":1352,"t":"建议你至少创建两个计划：升级 server（control-plane）节点的计划和升级 agent 节点的计划。你可以根据需要创建其他计划来控制跨节点的升级。创建计划后，控制器将选择它们并开始升级你的集群。 以下两个示例计划会将你的集群升级到 K3s v1.24.6+k3s1： # Server plan apiVersion: upgrade.cattle.io/v1 kind: Plan metadata: name: server-plan namespace: system-upgrade spec: concurrency: 1 cordon: true nodeSelector: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: In values: - \"true\" serviceAccountName: system-upgrade upgrade: image: rancher/k3s-upgrade version: v1.24.6+k3s1 --- # Agent plan apiVersion: upgrade.cattle.io/v1 kind: Plan metadata: name: agent-plan namespace: system-upgrade spec: concurrency: 1 cordon: true nodeSelector: matchExpressions: - key: node-role.kubernetes.io/control-plane operator: DoesNotExist prepare: args: - prepare - server-plan image: rancher/k3s-upgrade serviceAccountName: system-upgrade upgrade: image: rancher/k3s-upgrade version: v1.24.6+k3s1 关于这些计划，有几个重要的事情需要注意： 1) 计划必须在部署控制器的同一命名空间中创建。 2) concurrency 字段表示可以同时升级多少个节点。 3) server-plan 通过指定一个标签选择器来选择带有 node-role.kubernetes.io/control-plane 标签的节点，从而锁定 server 节点。agent-plan 通过指定一个标签选择器来选择没有该标签的节点，从而锁定 agent 节点。 4) agent-plan 中的 prepare 步骤会使该计划等待 server-plan 完成后再执行升级 job。 5) 两个计划都将 version 字段设置为 v1.24.6+k3s1。或者，你可以省略 version 字段并将 channel 字段设置为解析到 K3s 版本的 URL。这将导致控制器监控该 URL，并在它解析到新版本时随时升级集群。这适用于版本 channels。因此，你可以用下面的 channel 配置计划，从而确保你的集群总是自动升级到 K3s 的最新稳定版本。 apiVersion: upgrade.cattle.io/v1 kind: Plan ... spec: ... channel: https://update.k3s.io/v1-release/channels/stable 如前所述，一旦控制器检测到已创建计划，升级就会立即开始。更新计划将导致控制器重新评估计划并确定是否需要再次升级。 要监控升级进度，你可以使用 kubectl 来查看 plan 和 job： kubectl -n system-upgrade get plans -o yaml kubectl -n system-upgrade get jobs -o yaml","s":"配置计划","u":"/zh/upgrades/automated","h":"#配置计划","p":1346},{"i":1354,"t":"为了在升级期间实现高可用性，K3s 容器在 K3s 服务停止时会继续运行。 要停止所有 K3s 容器并重置容器状态，你可以使用 k3s-killall.sh 脚本。 killall 脚本能清理容器、K3s 目录和网络组件，同时还能删除 iptables 链以及所有相关规则。集群数据不会被删除。 要在 Server 节点中运行 killall 脚本，请运行： /usr/local/bin/k3s-killall.sh","s":"停止 K3s","u":"/zh/upgrades/killall","h":"","p":1353},{"i":1356,"t":"你可以使用安装脚本升级 K3s，也可以手动安装所需版本的二进制文件。 备注 升级时会先升级 Server 节点，然后再升级 Agent 节点。","s":"手动升级","u":"/zh/upgrades/manual","h":"","p":1355},{"i":1358,"t":"通过安装脚本或使用我们的自动升级功能执行的升级可以绑定到不同的版本 channels。以下是可用的 channels： Channel 描述 stable （默认）生产环境建议使用稳定版。这些版本已经过一段时间的社区强化。 latest 建议使用最新版本来试用最新功能。这些版本已经过一段时间的社区强化。 v1.26（示例） 每个 Kubernetes 次要版本都有一个 release channel，包括 EOL 的版本。这些 channel 会选择可用的最新补丁，不一定是稳定版本。 有关详细的最新 channel 列表，你可以访问 k3s channel 服务 API。有关 channel 如何工作的更多信息，请参阅 channelserver 项目。 提示 尝试升级到 K3s 新版本时，Kubernetes 版本倾斜策略适用。确保你的计划在升级时不会跳过中间次要版本。system-upgrade-controller 本身不会防止更改到不支持的 Kubernetes 版本。","s":"版本 Channels","u":"/zh/upgrades/manual","h":"#版本-channels","p":1355},{"i":1360,"t":"要升级旧版本的 K3s，你可以使用最初运行安装脚本时使用的相同配置选项重新运行安装脚本。 信息 安装脚本使用 INSTALL_K3S_EXEC 变量、K3S_ 变量和尾随的 shell 参数来生成 systemd 单元和环境文件。 如果你在最初运行安装脚本时进行了配置，但在重新运行安装脚本时没有重新设置，则原始值将会丢失。 配置文件 的内容不受安装脚本管理。 要让你的配置独立于安装脚本，请使用配置文件而不是传递环境变量或使用安装脚本参数。 例如，要升级到当前的稳定版本： curl -sfL https://get.k3s.io | <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS> 如果想升级到特定 channel（如 latest）中的更新版本，你可以指定 channel： curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS> 如果要升级到特定版本，可以运行以下命令： curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 <EXISTING_K3S_ENV> sh -s - <EXISTING_K3S_ARGS>","s":"使用安装脚本升级 K3s","u":"/zh/upgrades/manual","h":"#使用安装脚本升级-k3s","p":1355},{"i":1362,"t":"或者手动升级 K3s： 从 releases 页面下载所需版本的 K3s 二进制文件 将下载的二进制文件复制到 /usr/local/bin/k3s（或你想要的位置） 停止旧的 K3s 二进制文件 启动新的 K3s 二进制文件","s":"使用二进制文件手动升级 K3s","u":"/zh/upgrades/manual","h":"#使用二进制文件手动升级-k3s","p":1355},{"i":1364,"t":"systemd 和 OpenRC 的安装脚本支持重启 K3s。 systemd 手动重启 Server： sudo systemctl restart k3s 手动重启 Agent： sudo systemctl restart k3s-agent OpenRC 手动重启 Server： sudo service k3s restart 手动重启 Agent： sudo service k3s-agent restart","s":"重启 K3s","u":"/zh/upgrades/manual","h":"#重启-k3s","p":1355},{"i":1366,"t":"信息 请知悉，本文仅提供英文版。","s":"CIS Self Assessment Guide","u":"/zh/security/self-assessment","h":"","p":1365},{"i":1368,"t":"Overview​ This document is a companion to the K3s security hardening guide. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers. This guide is specific to the v1.22, v1.23 and v1.24 release line of K3s and the v1.23 release of the CIS Kubernetes Benchmark. For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in Center for Internet Security (CIS). Testing controls methodology​ Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide. Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing. These are the possible results for each control: Pass - The K3s cluster under test passed the audit outlined in the benchmark. Not Applicable - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so. Warn - The control is manual in the CIS benchmark and it depends on the cluster's use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed. This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the \"audit\" commands to fit your scenario. NOTE: Only automated tests (previously called scored) are covered in this guide.","s":"CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24","u":"/zh/security/self-assessment","h":"#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124","p":1365},{"i":1372,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml","s":"1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1374,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-apiserver.yaml","s":"1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1376,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-controller-manager.yaml","s":"1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1378,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-controller-manager.yaml","s":"1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1380,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/kube-scheduler.yaml","s":"1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1382,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/kube-scheduler.yaml","s":"1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1384,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 /etc/kubernetes/manifests/etcd.yaml","s":"1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1386,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/manifests/etcd.yaml","s":"1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1388,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 <path/to/cni/files>","s":"1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1390,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root <path/to/cni/files>","s":"1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)","u":"/zh/security/self-assessment","h":"#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual","p":1365},{"i":1392,"t":"Result: pass Remediation: On the etcd server node, get the etcd data directory, passed as an argument --data-dir, from the command 'ps -ef | grep etcd'. Run the below command (based on the etcd data directory found above). For example, chmod 700 /var/lib/etcd Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 1.1.11 Expected Result: '700' is equal to '700' Returned Value: 700","s":"1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated","p":1365},{"i":1394,"t":"Result: Not Applicable Remediation: On the etcd server node, get the etcd data directory, passed as an argument --data-dir, from the command 'ps -ef | grep etcd'. Run the below command (based on the etcd data directory found above). For example, chown etcd:etcd /var/lib/etcd","s":"1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)","u":"/zh/security/self-assessment","h":"#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated","p":1365},{"i":1396,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 600 /var/lib/rancher/k3s/server/cred/admin.kubeconfig","s":"1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated","p":1365},{"i":1398,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root /etc/kubernetes/admin.conf Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/admin.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/admin.kubeconfig; fi' Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root","s":"1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1400,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 scheduler Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi' Expected Result: permissions has permissions 644, expected 644 or more restrictive Returned Value: permissions=644","s":"1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1402,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root scheduler Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/server/cred/scheduler.kubeconfig; fi' Expected Result: 'root:root' is present Returned Value: root:root","s":"1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1404,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod 644 controllermanager Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/server/cred/controller.kubeconfig; then stat -c permissions=%a /var/lib/rancher/k3s/server/cred/controller.kubeconfig; fi' Expected Result: permissions has permissions 644, expected 644 or more restrictive Returned Value: permissions=644","s":"1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1406,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown root:root controllermanager Audit: stat -c %U:%G /var/lib/rancher/k3s/server/tls Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root","s":"1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1408,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chown -R root:root /etc/kubernetes/pki/ Audit: find /var/lib/rancher/k3s/server/tls | xargs stat -c %U:%G Expected Result: 'root:root' is present Returned Value: root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root root:root","s":"1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1410,"t":"Result: warn Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod -R 644 /etc/kubernetes/pki/*.crt Audit: stat -c %n %a /var/lib/rancher/k3s/server/tls/*.crt","s":"1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1412,"t":"Result: warn Remediation: Run the below command (based on the file location on your system) on the control plane node. For example, chmod -R 600 /etc/kubernetes/pki/*.key Audit: stat -c %n %a /var/lib/rancher/k3s/server/tls/*.key","s":"1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)","u":"/zh/security/self-assessment","h":"#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual","p":1365},{"i":1415,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --anonymous-auth=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'anonymous-auth'","s":"1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)","u":"/zh/security/self-assessment","h":"#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual","p":1365},{"i":1417,"t":"Result: pass Remediation: Follow the documentation and configure alternate mechanisms for authentication. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the --token-auth-file=<filename> parameter. Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--token-auth-file' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)","u":"/zh/security/self-assessment","h":"#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated","p":1365},{"i":1419,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the DenyServiceExternalIPs from enabled admission plugins. Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--enable-admission-plugins' is present OR '--enable-admission-plugins' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)","u":"/zh/security/self-assessment","h":"#123-ensure-that-the---denyserviceexternalips-is-not-set-automated","p":1365},{"i":1421,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and remove the --kubelet-https parameter.","s":"1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated","p":1365},{"i":1423,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and kubelets. Then, edit API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the kubelet client certificate and key parameters as below. --kubelet-client-certificate=<path/to/client-certificate-file> --kubelet-client-key=<path/to/client-key-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority' Expected Result: '--kubelet-client-certificate' is present AND '--kubelet-client-key' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated","p":1365},{"i":1425,"t":"Result: pass Remediation: Follow the Kubernetes documentation and setup the TLS connection between the apiserver and kubelets. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --kubelet-certificate-authority parameter to the path to the cert file for the certificate authority --kubelet-certificate-authority=<ca-string>. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'kubelet-certificate-authority' Expected Result: '--kubelet-certificate-authority' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated","p":1365},{"i":1427,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to values other than AlwaysAllow. One such example could be as below. --authorization-mode=RBAC Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' does not have 'AlwaysAllow' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/zh/security/self-assessment","h":"#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":1365},{"i":1429,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to a value that includes Node. --authorization-mode=Node,RBAC Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' has 'Node' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)","u":"/zh/security/self-assessment","h":"#128-ensure-that-the---authorization-mode-argument-includes-node-automated","p":1365},{"i":1431,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --authorization-mode parameter to a value that includes RBAC, for example --authorization-mode=Node,RBAC. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'authorization-mode' Expected Result: '--authorization-mode' has 'RBAC' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)","u":"/zh/security/self-assessment","h":"#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated","p":1365},{"i":1433,"t":"Result: warn Remediation: Follow the Kubernetes documentation and set the desired limits in a configuration file. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml and set the below parameters. --enable-admission-plugins=...,EventRateLimit,... --admission-control-config-file=<path/to/configuration/file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'EventRateLimit' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)","u":"/zh/security/self-assessment","h":"#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual","p":1365},{"i":1435,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and either remove the --enable-admission-plugins parameter, or set it to a value that does not include AlwaysAdmit. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' does not have 'AlwaysAdmit' OR '--enable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)","u":"/zh/security/self-assessment","h":"#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated","p":1365},{"i":1437,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to include AlwaysPullImages. --enable-admission-plugins=...,AlwaysPullImages,... Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--enable-admission-plugins' is present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)","u":"/zh/security/self-assessment","h":"#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual","p":1365},{"i":1439,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to include SecurityContextDeny, unless PodSecurityPolicy is already in place. --enable-admission-plugins=...,SecurityContextDeny,... Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'SecurityContextDeny' OR '--enable-admission-plugins' has 'PodSecurityPolicy' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)","u":"/zh/security/self-assessment","h":"#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual","p":1365},{"i":1441,"t":"Result: pass Remediation: Follow the documentation and create ServiceAccount objects as per your environment. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and ensure that the --disable-admission-plugins parameter is set to a value that does not include ServiceAccount. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)","u":"/zh/security/self-assessment","h":"#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated","p":1365},{"i":1443,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --disable-admission-plugins parameter to ensure it does not include NamespaceLifecycle. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--disable-admission-plugins' is present OR '--disable-admission-plugins' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)","u":"/zh/security/self-assessment","h":"#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated","p":1365},{"i":1445,"t":"Result: pass Remediation: Follow the Kubernetes documentation and configure NodeRestriction plug-in on kubelets. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --enable-admission-plugins parameter to a value that includes NodeRestriction. --enable-admission-plugins=...,NodeRestriction,... Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'enable-admission-plugins' Expected Result: '--enable-admission-plugins' has 'NodeRestriction' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)","u":"/zh/security/self-assessment","h":"#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated","p":1365},{"i":1447,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and either remove the --secure-port parameter or set it to a different (non-zero) desired port. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'secure-port' Expected Result: '--secure-port' is greater than 0 OR '--secure-port' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)","u":"/zh/security/self-assessment","h":"#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated","p":1365},{"i":1449,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'profiling' Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.18 Ensure that the --profiling argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#1218-ensure-that-the---profiling-argument-is-set-to-false-automated","p":1365},{"i":1451,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-path parameter to a suitable path and file where you would like audit logs to be written, for example, --audit-log-path=/var/log/apiserver/audit.log","s":"1.2.19 Ensure that the --audit-log-path argument is set (Automated)","u":"/zh/security/self-assessment","h":"#1219-ensure-that-the---audit-log-path-argument-is-set-automated","p":1365},{"i":1453,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxage parameter to 30 or as an appropriate number of days, for example, --audit-log-maxage=30","s":"1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated","p":1365},{"i":1455,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxbackup parameter to 10 or to an appropriate value. For example, --audit-log-maxbackup=10","s":"1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated","p":1365},{"i":1457,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --audit-log-maxsize parameter to an appropriate size in MB. For example, to set it as 100 MB, --audit-log-maxsize=100","s":"1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated","p":1365},{"i":1459,"t":"Result: pass Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --service-account-lookup=true Alternatively, you can delete the --service-account-lookup parameter from this file so that the default takes effect. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep -v grep Expected Result: '--service-account-lookup' is not present OR '--service-account-lookup' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated","p":1365},{"i":1461,"t":"Result: Not Applicable Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --service-account-key-file parameter to the public key file for service accounts. For example, --service-account-key-file=<filename>.","s":"1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated","p":1365},{"i":1463,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the etcd certificate and key file parameters. --etcd-certfile=<path/to/client-certificate-file> --etcd-keyfile=<path/to/client-key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 1.2.29 Expected Result: '--etcd-certfile' is present AND '--etcd-keyfile' is present Returned Value: --etcd-certfile AND --etcd-keyfile","s":"1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated","p":1365},{"i":1465,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection on the apiserver. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the TLS certificate and private key file parameters. --tls-cert-file=<path/to/tls-certificate-file> --tls-private-key-file=<path/to/tls-key-file> Audit: journalctl -D /var/log/journal -u k3s | grep -A1 'Running kube-apiserver' | tail -n2 Expected Result: '--tls-cert-file' is present AND '--tls-private-key-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\" Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated","p":1365},{"i":1467,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection on the apiserver. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the client certificate authority file. --client-ca-file=<path/to/client-ca-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'client-ca-file' Expected Result: '--client-ca-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1469,"t":"Result: pass Remediation: Follow the Kubernetes documentation and set up the TLS connection between the apiserver and etcd. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the etcd certificate authority file parameter. --etcd-cafile=<path/to/ca-file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-cafile' Expected Result: '--etcd-cafile' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated","p":1365},{"i":1471,"t":"Result: warn Remediation: Follow the Kubernetes documentation and configure a EncryptionConfig file. Then, edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the --encryption-provider-config parameter to the path of that file. For example, --encryption-provider-config=</path/to/EncryptionConfig/File> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'encryption-provider-config'","s":"1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)","u":"/zh/security/self-assessment","h":"#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual","p":1365},{"i":1473,"t":"Result: warn Remediation: Follow the Kubernetes documentation and configure a EncryptionConfig file. In this file, choose aescbc, kms or secretbox as the encryption provider. Audit: grep aescbc /path/to/encryption-config.json","s":"1.2.31 Ensure that encryption providers are appropriately configured (Manual)","u":"/zh/security/self-assessment","h":"#1231-ensure-that-encryption-providers-are-appropriately-configured-manual","p":1365},{"i":1475,"t":"Result: warn Remediation: Edit the API server pod specification file /etc/kubernetes/manifests/kube-apiserver.yaml on the control plane node and set the below parameter. --tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256, TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256, TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305, TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,TLS_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_256_GCM_SHA384 Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'tls-cipher-suites'","s":"1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)","u":"/zh/security/self-assessment","h":"#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual","p":1365},{"i":1478,"t":"Result: warn Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --terminated-pod-gc-threshold to an appropriate threshold, for example, --terminated-pod-gc-threshold=10 Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'terminated-pod-gc-threshold'","s":"1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)","u":"/zh/security/self-assessment","h":"#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual","p":1365},{"i":1480,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'profiling' Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.2 Ensure that the --profiling argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#132-ensure-that-the---profiling-argument-is-set-to-false-automated","p":1365},{"i":1482,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node to set the below parameter. --use-service-account-credentials=true Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'use-service-account-credentials' Expected Result: '--use-service-account-credentials' is not equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated","p":1365},{"i":1484,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --service-account-private-key-file parameter to the private key file for service accounts. For example, --service-account-private-key-file=<filename>. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'service-account-private-key-file' Expected Result: '--service-account-private-key-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1486,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --root-ca-file parameter to the certificate bundle file`. --root-ca-file=<path/to/file> Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-controller-manager' | tail -n1 | grep 'root-ca-file' Expected Result: '--root-ca-file' is present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-controller-manager --allocate-node-cidrs=true --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-controller-manager --cluster-cidr=10.42.0.0/16 --cluster-signing-kube-apiserver-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kube-apiserver-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-client-cert-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --cluster-signing-kubelet-client-key-file=/var/lib/rancher/k3s/server/tls/client-ca.key --cluster-signing-kubelet-serving-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-kubelet-serving-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --cluster-signing-legacy-unknown-cert-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --cluster-signing-legacy-unknown-key-file=/var/lib/rancher/k3s/server/tls/server-ca.key --configure-cloud-routes=false --controllers=*,-service,-route,-cloud-node-lifecycle --feature-gates=JobTrackingWithFinalizers=true --kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig --profiling=false --root-ca-file=/var/lib/rancher/k3s/server/tls/server-ca.crt --secure-port=10257 --service-account-private-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --use-service-account-credentials=true\"","s":"1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1488,"t":"Result: Not Applicable Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and set the --feature-gates parameter to include RotateKubeletServerCertificate=true. --feature-gates=RotateKubeletServerCertificate=true","s":"1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated","p":1365},{"i":1490,"t":"Result: pass Remediation: Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the control plane node and ensure the correct value for the --bind-address parameter Audit: /bin/ps -ef | grep containerd | grep -v grep Expected Result: '--bind-address' is present OR '--bind-address' is not present Returned Value: root 1616 1600 6 13:26 ? 00:01:28 containerd -c /var/lib/rancher/k3s/agent/etc/containerd/config.toml -a /run/k3s/containerd/containerd.sock --state /run/k3s/containerd --root /var/lib/rancher/k3s/agent/containerd root 2318 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7e -address /run/k3s/containerd/containerd.sock root 2341 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1 -address /run/k3s/containerd/containerd.sock root 3199 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528 -address /run/k3s/containerd/containerd.sock root 3923 1 0 13:27 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9 -address /run/k3s/containerd/containerd.sock root 4559 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c -address /run/k3s/containerd/containerd.sock root 4647 1 0 13:28 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9 -address /run/k3s/containerd/containerd.sock root 6610 1 0 13:47 ? 00:00:00 /var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d -address /run/k3s/containerd/containerd.sock","s":"1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/zh/security/self-assessment","h":"#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":1365},{"i":1493,"t":"Result: pass Remediation: Edit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml file on the control plane node and set the below parameter. --profiling=false Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 Expected Result: '--profiling' is equal to 'false' Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.4.1 Ensure that the --profiling argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#141-ensure-that-the---profiling-argument-is-set-to-false-automated","p":1365},{"i":1495,"t":"Result: pass Remediation: Edit the Scheduler pod specification file /etc/kubernetes/manifests/kube-scheduler.yaml on the control plane node and ensure the correct value for the --bind-address parameter Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-scheduler' | tail -n1 | grep 'bind-address' Expected Result: '--bind-address' is equal to '127.0.0.1' OR '--bind-address' is not present Returned Value: Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-scheduler --authentication-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --authorization-kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/kube-scheduler --kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig --profiling=false --secure-port=10259\"","s":"1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)","u":"/zh/security/self-assessment","h":"#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated","p":1365},{"i":1498,"t":"Result: pass Remediation: Follow the etcd service documentation and configure TLS encryption. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameters. --cert-file=</path/to/ca-file> --key-file=</path/to/key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.1 Expected Result: 'cert-file' is present AND 'key-file' is present Returned Value: cert-file AND key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/server-client.key cert-file AND key-file","s":"2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated","p":1365},{"i":1500,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --client-cert-auth=\"true\" Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.2 Expected Result: '--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true' Returned Value: --client-cert-auth=true client-cert-auth: true --client-cert-auth=true","s":"2.2 Ensure that the --client-cert-auth argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated","p":1365},{"i":1502,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and either remove the --auto-tls parameter or set it to false. --auto-tls=false Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.3 Expected Result: 'ETCD_AUTO_TLS' is not present OR 'ETCD_AUTO_TLS' is present Returned Value: error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory","s":"2.3 Ensure that the --auto-tls argument is not set to true (Automated)","u":"/zh/security/self-assessment","h":"#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated","p":1365},{"i":1504,"t":"Result: pass Remediation: Follow the etcd service documentation and configure peer TLS encryption as appropriate for your etcd cluster. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameters. --peer-client-file=</path/to/peer-cert-file> --peer-key-file=</path/to/peer-key-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.4 Expected Result: 'cert-file' is present AND 'key-file' is present Returned Value: peer-cert-file AND peer-key-file cert-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.crt key-file: /var/lib/rancher/k3s/server/tls/etcd/peer-server-client.key peer-cert-file AND peer-key-file","s":"2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated","p":1365},{"i":1506,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --peer-client-cert-auth=true Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.5 Expected Result: '--client-cert-auth' is present OR 'client-cert-auth' is equal to 'true' Returned Value: --client-cert-auth=true client-cert-auth: true --client-cert-auth=true","s":"2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated","p":1365},{"i":1508,"t":"Result: pass Remediation: Edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and either remove the --peer-auto-tls parameter or set it to false. --peer-auto-tls=false Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.6 Expected Result: '--peer-auto-tls' is not present OR '--peer-auto-tls' is equal to 'false' Returned Value: --peer-auto-tls=false error: process ID list syntax error Usage: ps [options] Try 'ps --help <simple|list|output|threads|misc|all>' or 'ps --help <s|l|o|t|m|a>' for additional help text. For more details see ps(1). cat: /proc//environ: No such file or directory --peer-auto-tls=false","s":"2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)","u":"/zh/security/self-assessment","h":"#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated","p":1365},{"i":1510,"t":"Result: pass Remediation: [Manual test] Follow the etcd documentation and create a dedicated certificate authority setup for the etcd service. Then, edit the etcd pod specification file /etc/kubernetes/manifests/etcd.yaml on the master node and set the below parameter. --trusted-ca-file=</path/to/ca-file> Audit Script: check_for_k3s_etcd.sh #!/bin/bash # This script is used to ensure that k3s is actually running etcd (and not other databases like sqlite3) # before it checks the requirement set -eE handle_error() { echo \"false\" } trap 'handle_error' ERR if [[ \"$(journalctl -D /var/log/journal -u k3s | grep 'Managed etcd cluster initializing' | grep -v grep | wc -l)\" -gt 0 ]]; then case $1 in \"1.1.11\") echo $(stat -c %a /var/lib/rancher/k3s/server/db/etcd);; \"1.2.29\") echo $(journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'etcd-');; \"2.1\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.2\") echo $(grep -A 5 'client-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.3\") echo $(grep 'auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.4\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep -E 'cert-file|key-file');; \"2.5\") echo $(grep -A 5 'peer-transport-security' /var/lib/rancher/k3s/server/db/etcd/config | grep 'client-cert-auth');; \"2.6\") echo $(grep 'peer-auto-tls' /var/lib/rancher/k3s/server/db/etcd/config);; \"2.7\") echo $(grep 'trusted-ca-file' /var/lib/rancher/k3s/server/db/etcd/config);; esac else # If another database is running, return whatever is required to pass the scan case $1 in \"1.1.11\") echo \"700\";; \"1.2.29\") echo \"--etcd-certfile AND --etcd-keyfile\";; \"2.1\") echo \"cert-file AND key-file\";; \"2.2\") echo \"--client-cert-auth=true\";; \"2.3\") echo \"false\";; \"2.4\") echo \"peer-cert-file AND peer-key-file\";; \"2.5\") echo \"--client-cert-auth=true\";; \"2.6\") echo \"--peer-auto-tls=false\";; \"2.7\") echo \"--trusted-ca-file\";; esac fi Audit Execution: ./check_for_k3s_etcd.sh 2.7 Expected Result: 'trusted-ca-file' is present Returned Value: --trusted-ca-file trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/server-ca.crt trusted-ca-file: /var/lib/rancher/k3s/server/tls/etcd/peer-ca.crt --trusted-ca-file","s":"2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)","u":"/zh/security/self-assessment","h":"#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual","p":1365},{"i":1513,"t":"Result: warn Remediation: Alternative mechanisms provided by Kubernetes such as the use of OIDC should be implemented in place of client certificates.","s":"3.1.1 Client certificate authentication should not be used for users (Manual)","u":"/zh/security/self-assessment","h":"#311-client-certificate-authentication-should-not-be-used-for-users-manual","p":1365},{"i":1516,"t":"Result: warn Remediation: Create an audit policy file for your cluster. Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kube-apiserver' | tail -n1 | grep 'audit-policy-file'","s":"3.2.1 Ensure that a minimal audit policy is created (Manual)","u":"/zh/security/self-assessment","h":"#321-ensure-that-a-minimal-audit-policy-is-created-manual","p":1365},{"i":1518,"t":"Result: warn Remediation: Review the audit policy provided for the cluster and ensure that it covers at least the following areas, Access to Secrets managed by the cluster. Care should be taken to only log Metadata for requests to Secrets, ConfigMaps, and TokenReviews, in order to avoid risk of logging sensitive data. Modification of Pod and Deployment objects. Use of pods/exec, pods/portforward, pods/proxy and services/proxy. For most requests, minimally logging at the Metadata level is recommended (the most basic level of logging).","s":"3.2.2 Ensure that the audit policy covers key security concerns (Manual)","u":"/zh/security/self-assessment","h":"#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual","p":1365},{"i":1521,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /etc/systemd/system/kubelet.service.d/10-kubeadm.conf","s":"4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1523,"t":"Result: Not Applicable Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /etc/systemd/system/kubelet.service.d/10-kubeadm.conf","s":"4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1525,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Audit: stat -c %a /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Expected Result: 'permissions' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present Returned Value: 644 644","s":"4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1527,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig Audit: /bin/sh -c 'if test -e /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; then stat -c %U:%G /var/lib/rancher/k3s/agent/kubeproxy.kubeconfig; fi' Expected Result: 'root:root' is present OR '/var/lib/rancher/k3s/agent/kubeproxy.kubeconfig' is not present Returned Value: root:root root:root","s":"4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)","u":"/zh/security/self-assessment","h":"#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual","p":1365},{"i":1529,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chmod 644 /var/lib/rancher/k3s/server/cred/admin.kubeconfig Audit: stat -c %a /var/lib/rancher/k3s/agent/kubelet.kubeconfig Expected Result: '644' is equal to '644' Returned Value: 644 644","s":"4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated","p":1365},{"i":1531,"t":"Result: pass Remediation: Run the below command (based on the file location on your system) on the each worker node. For example, chown root:root /var/lib/rancher/k3s/server/cred/admin.kubeconfig Audit: stat -c %U:%G /var/lib/rancher/k3s/agent/kubelet.kubeconfig Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root root:root","s":"4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1533,"t":"Result: pass Remediation: Run the following command to modify the file permissions of the --client-ca-file: chmod 644 <filename> Audit: stat -c %a /var/lib/rancher/k3s/server/tls/server-ca.crt Expected Result: '644' is present OR '640' is present OR '600' is equal to '600' OR '444' is present OR '440' is present OR '400' is present OR '000' is present Returned Value: 644 600","s":"4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)","u":"/zh/security/self-assessment","h":"#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual","p":1365},{"i":1535,"t":"Result: pass Remediation: Run the following command to modify the ownership of the --client-ca-file: chown root:root <filename>. Audit: stat -c %U:%G /var/lib/rancher/k3s/server/tls/client-ca.crt Expected Result: 'root:root' is equal to 'root:root' Returned Value: root:root root:root","s":"4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)","u":"/zh/security/self-assessment","h":"#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual","p":1365},{"i":1537,"t":"Result: Not Applicable Remediation: Run the following command (using the config file location identified in the Audit step) chmod 644 /var/lib/kubelet/config.yaml","s":"4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)","u":"/zh/security/self-assessment","h":"#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated","p":1365},{"i":1539,"t":"Result: Not Applicable Remediation: Run the following command (using the config file location identified in the Audit step) chown root:root /var/lib/kubelet/config.yaml","s":"4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)","u":"/zh/security/self-assessment","h":"#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated","p":1365},{"i":1542,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authentication: anonymous: enabled to false. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --anonymous-auth=false Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"anonymous-auth\" | grep -v grep; else echo \"--anonymous-auth=false\"; fi' Expected Result: '--anonymous-auth' is equal to 'false' Returned Value: --anonymous-auth=false Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)","u":"/zh/security/self-assessment","h":"#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated","p":1365},{"i":1544,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authorization.mode to Webhook. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_AUTHZ_ARGS variable. --authorization-mode=Webhook Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"authorization-mode\" | grep -v grep; else echo \"--authorization-mode=Webhook\"; fi' Expected Result: '--authorization-mode' does not have 'AlwaysAllow' Returned Value: --authorization-mode=Webhook Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)","u":"/zh/security/self-assessment","h":"#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated","p":1365},{"i":1546,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set authentication.x509.clientCAFile to the location of the client CA file. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_AUTHZ_ARGS variable. --client-ca-file=<path/to/client-ca-file> Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/sh -c 'if test $(journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | wc -l) -gt 0; then journalctl -D /var/log/journal -u k3s | grep \"Running kube-apiserver\" | tail -n1 | grep \"client-ca-file\" | grep -v grep; else echo \"--client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt\"; fi' Expected Result: '--client-ca-file' is present Returned Value: --client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt Sep 13 13:26:40 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:40Z\" level=info msg=\"Running kube-apiserver --advertise-address=172.31.0.140 --advertise-port=6443 --allow-privileged=true --anonymous-auth=false --api-audiences=https://kubernetes.default.svc.cluster.local,k3s --authorization-mode=Node,RBAC --bind-address=127.0.0.1 --cert-dir=/var/lib/rancher/k3s/server/tls/temporary-certs --client-ca-file=/var/lib/rancher/k3s/server/tls/client-ca.crt --egress-selector-config-file=/var/lib/rancher/k3s/server/etc/egress-selector-config.yaml --enable-admission-plugins=NodeRestriction --enable-aggregator-routing=true --etcd-cafile=/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt --etcd-certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt --etcd-keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key --etcd-servers=https://127.0.0.1:2379 --feature-gates=JobTrackingWithFinalizers=true --kubelet-certificate-authority=/var/lib/rancher/k3s/server/tls/server-ca.crt --kubelet-client-certificate=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt --kubelet-client-key=/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --profiling=false --proxy-client-cert-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt --proxy-client-key-file=/var/lib/rancher/k3s/server/tls/client-auth-proxy.key --requestheader-allowed-names=system:auth-proxy --requestheader-client-ca-file=/var/lib/rancher/k3s/server/tls/request-header-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6444 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-account-signing-key-file=/var/lib/rancher/k3s/server/tls/service.key --service-cluster-ip-range=10.43.0.0/16 --service-node-port-range=30000-32767 --storage-backend=etcd3 --tls-cert-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt --tls-private-key-file=/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key\"","s":"4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)","u":"/zh/security/self-assessment","h":"#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated","p":1365},{"i":1548,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set readOnlyPort to 0. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --read-only-port=0 Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'read-only-port' Expected Result: '--read-only-port' is equal to '0' OR '--read-only-port' is not present Returned Value: Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time=\"2022-09-13T13:26:50Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:44Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\"","s":"4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)","u":"/zh/security/self-assessment","h":"#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual","p":1365},{"i":1550,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set streamingConnectionIdleTimeout to a value other than 0. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --streaming-connection-idle-timeout=5m Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 | grep 'streaming-connection-idle-timeout'","s":"4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)","u":"/zh/security/self-assessment","h":"#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual","p":1365},{"i":1552,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to set protectKernelDefaults to true. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. --protect-kernel-defaults=true Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated","p":1365},{"i":1554,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to set makeIPTablesUtilChains to true. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove the --make-iptables-util-chains argument from the KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)","u":"/zh/security/self-assessment","h":"#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated","p":1365},{"i":1556,"t":"Result: Not Applicable Remediation: Edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove the --hostname-override argument from the KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.8 Ensure that the --hostname-override argument is not set (Manual)","u":"/zh/security/self-assessment","h":"#428-ensure-that-the---hostname-override-argument-is-not-set-manual","p":1365},{"i":1558,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set eventRecordQPS to an appropriate level. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_SYSTEM_PODS_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/ps -fC containerd","s":"4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)","u":"/zh/security/self-assessment","h":"#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual","p":1365},{"i":1560,"t":"Result: pass Remediation: If using a Kubelet config file, edit the file to set tlsCertFile to the location of the certificate file to use to identify this Kubelet, and tlsPrivateKeyFile to the location of the corresponding private key file. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameters in KUBELET_CERTIFICATE_ARGS variable. --tls-cert-file=<path/to/tls-certificate-file> --tls-private-key-file=<path/to/tls-key-file> Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service Audit: journalctl -D /var/log/journal -u k3s | grep 'Running kubelet' | tail -n1 Expected Result: '--tls-cert-file' is present AND '--tls-private-key-file' is present Returned Value: Sep 13 13:26:50 k3s-123-cis-pool2-98604672-hr9p5 k3s[1592]: time=\"2022-09-13T13:26:50Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool2-98604672-hr9p5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=00c4e7a0-5497-4367-a70c-0b836757eae8 --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\" Sep 13 13:26:44 k3s-123-cis-pool3-b403f678-bzdg5 k3s[1600]: time=\"2022-09-13T13:26:44Z\" level=info msg=\"Running kubelet --address=0.0.0.0 --anonymous-auth=false --authentication-token-webhook=true --authorization-mode=Webhook --cgroup-driver=systemd --client-ca-file=/var/lib/rancher/k3s/agent/client-ca.crt --cloud-provider=external --cluster-dns=10.43.0.10 --cluster-domain=cluster.local --container-runtime-endpoint=unix:///run/k3s/containerd/containerd.sock --containerd=/run/k3s/containerd/containerd.sock --eviction-hard=imagefs.available<5%,nodefs.available<5% --eviction-minimum-reclaim=imagefs.available=10%,nodefs.available=10% --fail-swap-on=false --healthz-bind-address=127.0.0.1 --hostname-override=k3s-123-cis-pool3-b403f678-bzdg5 --kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig --node-labels=rke.cattle.io/machine=109d596c-89f5-4c10-8c7f-6b82a38edd8f --pod-infra-container-image=rancher/mirrored-pause:3.6 --pod-manifest-path=/var/lib/rancher/k3s/agent/pod-manifests --read-only-port=0 --resolv-conf=/run/systemd/resolve/resolv.conf --serialize-image-pulls=false --tls-cert-file=/var/lib/rancher/k3s/agent/serving-kubelet.crt --tls-private-key-file=/var/lib/rancher/k3s/agent/serving-kubelet.key\"","s":"4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)","u":"/zh/security/self-assessment","h":"#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual","p":1365},{"i":1562,"t":"Result: Not Applicable Remediation: If using a Kubelet config file, edit the file to add the line rotateCertificates to true or remove it altogether to use the default value. If using command line arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and remove --rotate-certificates=false argument from the KUBELET_CERTIFICATE_ARGS variable. Based on your system, restart the kubelet service. For example, systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)","u":"/zh/security/self-assessment","h":"#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated","p":1365},{"i":1564,"t":"Result: Not Applicable Remediation: Edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the below parameter in KUBELET_CERTIFICATE_ARGS variable. --feature-gates=RotateKubeletServerCertificate=true Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service","s":"4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)","u":"/zh/security/self-assessment","h":"#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual","p":1365},{"i":1566,"t":"Result: warn Remediation: If using a Kubelet config file, edit the file to set TLSCipherSuites to TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 or to a subset of these values. If using executable arguments, edit the kubelet service file /etc/systemd/system/kubelet.service.d/10-kubeadm.conf on each worker node and set the --tls-cipher-suites parameter as follows, or to a subset of these values. --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256 Based on your system, restart the kubelet service. For example: systemctl daemon-reload systemctl restart kubelet.service Audit: /bin/ps -fC containerd","s":"4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)","u":"/zh/security/self-assessment","h":"#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual","p":1365},{"i":1569,"t":"Result: warn Remediation: Identify all clusterrolebindings to the cluster-admin role. Check if they are used and if they need this role or if they could use a role with fewer privileges. Where possible, first bind users to a lower privileged role and then remove the clusterrolebinding to the cluster-admin role : kubectl delete clusterrolebinding [name]","s":"5.1.1 Ensure that the cluster-admin role is only used where required (Manual)","u":"/zh/security/self-assessment","h":"#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual","p":1365},{"i":1571,"t":"Result: warn Remediation: Where possible, remove get, list and watch access to Secret objects in the cluster.","s":"5.1.2 Minimize access to secrets (Manual)","u":"/zh/security/self-assessment","h":"#512-minimize-access-to-secrets-manual","p":1365},{"i":1573,"t":"Result: warn Remediation: Where possible replace any use of wildcards in clusterroles and roles with specific objects or actions.","s":"5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)","u":"/zh/security/self-assessment","h":"#513-minimize-wildcard-use-in-roles-and-clusterroles-manual","p":1365},{"i":1575,"t":"Result: warn Remediation: Where possible, remove create access to pod objects in the cluster.","s":"5.1.4 Minimize access to create pods (Manual)","u":"/zh/security/self-assessment","h":"#514-minimize-access-to-create-pods-manual","p":1365},{"i":1577,"t":"Result: warn Remediation: Create explicit service accounts wherever a Kubernetes workload requires specific access to the Kubernetes API server. Modify the configuration of each default service account to include this value automountServiceAccountToken: false","s":"5.1.5 Ensure that default service accounts are not actively used. (Manual)","u":"/zh/security/self-assessment","h":"#515-ensure-that-default-service-accounts-are-not-actively-used-manual","p":1365},{"i":1579,"t":"Result: warn Remediation: Modify the definition of pods and service accounts which do not need to mount service account tokens to disable it.","s":"5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)","u":"/zh/security/self-assessment","h":"#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual","p":1365},{"i":1581,"t":"Result: warn Remediation: Remove the system:masters group from all users in the cluster.","s":"5.1.7 Avoid use of system:masters group (Manual)","u":"/zh/security/self-assessment","h":"#517-avoid-use-of-systemmasters-group-manual","p":1365},{"i":1583,"t":"Result: warn Remediation: Where possible, remove the impersonate, bind and escalate rights from subjects.","s":"5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)","u":"/zh/security/self-assessment","h":"#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual","p":1365},{"i":1586,"t":"Result: warn Remediation: Ensure that either Pod Security Admission or an external policy control system is in place for every namespace which contains user workloads.","s":"5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)","u":"/zh/security/self-assessment","h":"#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual","p":1365},{"i":1588,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of privileged containers.","s":"5.2.2 Minimize the admission of privileged containers (Automated)","u":"/zh/security/self-assessment","h":"#522-minimize-the-admission-of-privileged-containers-automated","p":1365},{"i":1590,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostPID containers.","s":"5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)","u":"/zh/security/self-assessment","h":"#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated","p":1365},{"i":1592,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostIPC containers.","s":"5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)","u":"/zh/security/self-assessment","h":"#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated","p":1365},{"i":1594,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of hostNetwork containers.","s":"5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)","u":"/zh/security/self-assessment","h":"#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated","p":1365},{"i":1596,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with .spec.allowPrivilegeEscalation set to true.","s":"5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)","u":"/zh/security/self-assessment","h":"#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated","p":1365},{"i":1598,"t":"Result: warn Remediation: Create a policy for each namespace in the cluster, ensuring that either MustRunAsNonRoot or MustRunAs with the range of UIDs not including 0, is set.","s":"5.2.7 Minimize the admission of root containers (Automated)","u":"/zh/security/self-assessment","h":"#527-minimize-the-admission-of-root-containers-automated","p":1365},{"i":1600,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with the NET_RAW capability.","s":"5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)","u":"/zh/security/self-assessment","h":"#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated","p":1365},{"i":1602,"t":"Result: warn Remediation: Ensure that allowedCapabilities is not present in policies for the cluster unless it is set to an empty array.","s":"5.2.9 Minimize the admission of containers with added capabilities (Automated)","u":"/zh/security/self-assessment","h":"#529-minimize-the-admission-of-containers-with-added-capabilities-automated","p":1365},{"i":1604,"t":"Result: warn Remediation: Review the use of capabilities in applications running on your cluster. Where a namespace contains applications which do not require any Linux capabilities to operate consider adding a PSP which forbids the admission of containers which do not drop all capabilities.","s":"5.2.10 Minimize the admission of containers with capabilities assigned (Manual)","u":"/zh/security/self-assessment","h":"#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual","p":1365},{"i":1606,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers that have .securityContext.windowsOptions.hostProcess set to true.","s":"5.2.11 Minimize the admission of Windows HostProcess containers (Manual)","u":"/zh/security/self-assessment","h":"#5211-minimize-the-admission-of-windows-hostprocess-containers-manual","p":1365},{"i":1608,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers with hostPath volumes.","s":"5.2.12 Minimize the admission of HostPath volumes (Manual)","u":"/zh/security/self-assessment","h":"#5212-minimize-the-admission-of-hostpath-volumes-manual","p":1365},{"i":1610,"t":"Result: warn Remediation: Add policies to each namespace in the cluster which has user workloads to restrict the admission of containers which use hostPort sections.","s":"5.2.13 Minimize the admission of containers which use HostPorts (Manual)","u":"/zh/security/self-assessment","h":"#5213-minimize-the-admission-of-containers-which-use-hostports-manual","p":1365},{"i":1613,"t":"Result: warn Remediation: If the CNI plugin in use does not support network policies, consideration should be given to making use of a different plugin, or finding an alternate mechanism for restricting traffic in the Kubernetes cluster.","s":"5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)","u":"/zh/security/self-assessment","h":"#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual","p":1365},{"i":1615,"t":"Result: warn Remediation: Follow the documentation and create NetworkPolicy objects as you need them.","s":"5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)","u":"/zh/security/self-assessment","h":"#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual","p":1365},{"i":1618,"t":"Result: warn Remediation: If possible, rewrite application code to read Secrets from mounted secret files, rather than from environment variables.","s":"5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)","u":"/zh/security/self-assessment","h":"#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual","p":1365},{"i":1620,"t":"Result: warn Remediation: Refer to the Secrets management options offered by your cloud provider or a third-party secrets management solution.","s":"5.4.2 Consider external secret storage (Manual)","u":"/zh/security/self-assessment","h":"#542-consider-external-secret-storage-manual","p":1365},{"i":1623,"t":"Result: warn Remediation: Follow the Kubernetes documentation and setup image provenance.","s":"5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)","u":"/zh/security/self-assessment","h":"#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual","p":1365},{"i":1626,"t":"Result: warn Remediation: Follow the documentation and create namespaces for objects in your deployment as you need them.","s":"5.7.1 Create administrative boundaries between resources using namespaces (Manual)","u":"/zh/security/self-assessment","h":"#571-create-administrative-boundaries-between-resources-using-namespaces-manual","p":1365},{"i":1628,"t":"Result: warn Remediation: Use securityContext to enable the docker/default seccomp profile in your pod definitions. An example is as below: securityContext: seccompProfile: type: RuntimeDefault","s":"5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)","u":"/zh/security/self-assessment","h":"#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual","p":1365},{"i":1630,"t":"Result: warn Remediation: Follow the Kubernetes documentation and apply SecurityContexts to your Pods. For a suggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker Containers.","s":"5.7.3 Apply SecurityContext to your Pods and Containers (Manual)","u":"/zh/security/self-assessment","h":"#573-apply-securitycontext-to-your-pods-and-containers-manual","p":1365},{"i":1632,"t":"Result: warn Remediation: Ensure that namespaces are created to allow for appropriate segregation of Kubernetes resources and that all new resources are created in a specific namespace.","s":"5.7.4 The default namespace should not be used (Manual)","u":"/zh/security/self-assessment","h":"#574-the-default-namespace-should-not-be-used-manual","p":1365}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/821",[0,0.686,1,0.598,2,7.811,3,2.617,4,5.554,5,6.27,6,7.811,7,7.811,8,3.19,9,7.811,10,7.094,11,7.094]],["t/823",[0,0.852,1,0.607,3,2.202,12,3.883,13,5.968,14,5.06,15,2.222,16,5.968,17,3.466,18,2.362,19,4.576,20,4.791,21,3.466,22,2.055,23,5.092,24,5.528,25,1.742,26,4.11,27,2.933,28,3.22,29,3.399,30,4.244,31,5.06,32,5.528,33,3.883,34,3.466,35,4.576,36,5.968]],["t/825",[1,0.595,3,2.731,37,5.32,38,8.386,39,4.378,40,8.386]],["t/827",[0,0.91,1,0.571]],["t/830",[0,0.838,1,0.602,37,4.955,41,1.331,42,3.871,43,3.336,44,4.838]],["t/832",[0,0.93,1,0.593,43,3.549,44,5.147,45,7.548,46,7.548]],["t/834",[0,0.843,1,0.599,41,1.342,47,3.255,48,4.274,49,7.156]],["t/836",[0,0.899,1,0.611,3,1.536,18,1.648,27,3.778,50,3.745,51,4.08,52,2.563,53,4.496,54,5.601,55,8.779,56,5.601,57,5.601,58,5.601,59,5.601,60,5.601,61,1.384,62,3.402,63,3.553,64,5.601,65,9.449,66,5.601,67,5.601,68,5.601,69,5.601,70,5.601,71,5.601]],["t/838",[0,0.617,1,0.536,3,0.614,21,1.301,23,4.987,27,1.861,30,2.693,32,1.542,33,2.465,34,3.758,35,3.773,41,0.838,52,1.263,61,0.553,72,3.788,73,2.24,74,2.904,75,1.593,76,4.958,77,1.421,78,1.977,79,2.24,80,2.24,81,2.157,82,1.387,83,1.328,84,1.276,85,2.294,86,1.003,87,1.599,88,1.599,89,1.718,90,2.791,91,1.189,92,1.798,93,2.034,94,2.224,95,4.921,96,2.24,97,5.256,98,1.761,99,3.01,100,5.787,101,2.465,102,3.788,103,2.24,104,1.542,105,2.24,106,2.24,107,2.035,108,1.029,109,4.921,110,2.24,111,2.035,112,2.24,113,2.24,114,3.788,115,4.921,116,2.24,117,1.718,118,1.07,119,1.356,120,1.276,121,0.877,122,1.085,123,2.204,124,2.24,125,2.24,126,3.788,127,10.016,128,8.469,129,5.663,130,3.788,131,2.24,132,4.921,133,4.921,134,4.921,135,4.921,136,4.921,137,4.921,138,2.24,139,2.035,140,2.24,141,2.24,142,2.24,143,2.24,144,2.24,145,3.788,146,3.788,147,3.788,148,3.788,149,3.788,150,3.788,151,2.24,152,6.47,153,5.194,154,2.24,155,2.24,156,2.24,157,2.24,158,2.24,159,2.24,160,2.24,161,2.24,162,3.788,163,3.788,164,3.788,165,3.788,166,3.788,167,3.788,168,2.24,169,2.24,170,2.24,171,2.24,172,2.24,173,2.24,174,2.24,175,2.24,176,2.24,177,2.24,178,2.24,179,2.24,180,1.593,181,2.24,182,2.24,183,3.788,184,3.788,185,3.788,186,3.788,187,3.788,188,3.788,189,2.24,190,2.24,191,2.24,192,2.24,193,2.24]],["t/840",[0,0.731,1,0.6,78,3.288,85,5.039,194,10.797,195,2.549,196,6.298,197,6.298,198,6.298,199,6.298,200,6.298,201,4.337,202,6.298,203,5.056,204,6.298,205,5.34,206,6.298,207,6.298,208,6.298,209,2.721,210,5.056,211,4.211,212,6.298,213,2.821,214,6.298,215,6.298]],["t/842",[0,0.669,1,0.607,27,3.742,201,5.244,216,5.61,217,7.615,218,9.393,219,6.916,220,9.393,221,6.916,222,7.615]],["t/844",[0,0.718,1,0.595,27,2.011,41,0.697,61,2.02,78,2.136,81,2.33,87,1.727,88,3.698,104,2.817,108,1.879,118,4.395,120,2.33,216,3.014,223,10.897,224,4.091,225,3.469,226,3.716,227,4.102,228,6.135,229,3.716,230,4.091,231,6.135,232,4.091,233,4.091,234,3.716,235,1.439,236,3.469,237,5.202,238,7.36,239,3.494,240,4.091,241,3.494,242,3.494,243,4.091,244,2.478,245,6.135,246,7.36,247,4.225,248,1.982,249,2.425,250,4.091,251,4.091,252,4.091,253,4.091,254,2.208,255,2.662,256,3.137,257,4.091,258,3.469,259,4.091,260,1.494,261,4.091,262,4.091,263,2.287,264,1.929,265,4.091]],["t/846",[1,0.605,22,2.209,25,2.02,29,3.942,41,1.507,47,3.309,52,2.949,61,1.71,86,3.1,94,2.192,195,2.12,266,3.353,267,1.921,268,5.612,269,4.766]],["t/848",[0,0.737,1,0.595,3,2.3,41,1.429,270,6.48,271,4.688]],["t/850",[0,0.907,1,0.616,18,2.817,26,6.894,244,4.756,270,5.806,272,4.258,273,5.779,274,5.779,275,4.258,276,5.779,277,7.854,278,3.864,279,7.854,280,5.779,281,3.666,282,5.779]],["t/852",[0,0.925,1,0.607,26,5.876,41,1.262,51,3.93,52,1.769,61,1.83,86,2.377,98,1.444,270,5.552,281,4.699,283,5.307,284,5.307,285,4.069,286,5.307,287,9.713,288,5.307,289,5.307,290,4.821,291,3.749,292,3.484,293,2.914,294,2.967,295,2.167,296,4.821,297,5.307,298,3.655,299,5.307,300,5.307,301,5.307]],["t/854",[0,0.808,1,0.611,51,3.252,123,2.745,229,5.567,270,5.317,302,8.171,303,9.805,304,6.129,305,4.92,306,6.129,307,6.129,308,6.129,309,6.129,310,6.129,311,3.711,312,6.129,313,6.129,314,3.888,315,6.129,316,8.171,317,6.129,318,6.129,319,3.102]],["t/856",[0,0.834,1,0.591,90,5.706,270,6.176,291,3.919,292,3.876,293,5.211,320,2.971,321,5.507,322,2.971,323,7.744]],["t/858",[0,0.762,1,0.609,3,2.636,22,1.966,25,2.533,47,2.279,52,2.239,86,3.008,267,1.885,324,4.37,325,4.776,326,6.716,327,5.15,328,6.716,329,6.716,330,2.804,331,6.716,332,6.716]],["t/860",[0,0.632,1,0.602,47,2.441,51,4.81,78,3.755,81,4.097,82,4.456,83,4.264,320,3.478,322,3.478,333,6.243,334,6.534,335,7.194,336,7.194,337,7.194,338,7.194]],["t/863",[0,0.869,1,0.601,201,4.915,339,5.99,340,5.73,341,7.137,342,7.137,343,4.433,344,6.647,345,6.647,346,7.137,347,6.483,348,5.075,349,7.137]],["t/865",[1,0.552,18,1.84,61,2.046,266,4.013,291,4.192,294,3.497,296,5.681,311,3.788,350,9.286,351,9.885,352,9.885,353,9.286,354,5.393,355,6.255,356,1.981,357,8.283,358,6.255,359,6.255,360,9.286,361,5.098,362,5.021,363,6.255,364,6.255,365,6.255]],["t/867",[1,0.557,18,2.259,61,2.332,266,3.721,311,4.65,356,2.432,366,11.148,367,4.82,368,7.679,369,6.165,370,6.511]],["t/869",[0,0.531,1,0.599,26,6.288,51,3.209,85,3.662,104,4.164,201,4.164,225,5.128,339,3.662,371,6.728,372,6.493,373,6.502,374,6.047,375,8.099,376,8.099,377,6.047,378,6.047,379,6.047,380,6.047,381,6.047,382,5.128,383,6.047,384,6.047,385,6.047,386,6.047,387,5.128,388,6.047,389,4.456,390,6.047,391,3.108,392,6.047]],["t/871",[0,0.928,1,0.614,3,1.375,41,1.62,47,1.702,76,6.486,85,4.31,88,2.117,98,1.937,108,3.269,298,3.454,393,9.005,394,4.252,395,3.845,396,3.454,397,5.015,398,1.867,399,5.015,400,5.015,401,3.845,402,3.566,403,2.973,404,4.026,405,5.015,406,4.555]],["t/873",[0,0.577,1,0.603,77,4.168,104,5.891,118,3.14,226,7.771,407,6.571,408,7.617,409,6.571,410,7.771,411,6.571,412,8.555,413,2.907,414,2.572,415,6.571,416,6.571,417,6.571,418,2.423,419,4.673,420,6.571]],["t/875",[0,0.903,1,0.607,41,1.179,47,2.348,118,3.307,227,4.627,319,3.502,408,7.949,421,3.869,422,4.503,423,6.92,424,6.92]],["t/878",[0,0.721,1,0.614,4,4.388,425,6.17,426,6.17,427,6.17,428,8.93,429,8.336,430,9.298,431,8.208,432,6.17,433,6.17,434,6.17,435,6.17,436,7.455,437,4.953]],["t/880",[0,0.771,1,0.587,41,1.31,47,1.901,50,3.745,61,1.899,88,3.246,118,2.677,120,3.19,121,2.193,123,2.509,239,3.19,241,3.19,242,3.19,244,3.392,249,3.32,254,3.022,267,1.216,275,4.127,428,6.983,429,6.519,430,7.974,436,5.087,437,4.496,438,7.688,439,5.601,440,7.688,441,7.688,442,7.688,443,7.688,444,3.131,445,5.601,446,5.601,447,5.601,448,5.601,449,5.601,450,5.601,451,5.601,452,5.601,453,4.749]],["t/882",[0,0.561,1,0.49,21,5.788,77,6.873,87,3.545,94,2.659,104,5.783,122,4.069,354,3.709,454,5.656,455,7.627,456,5.127,457,6.387,458,5.801,459,5.783,460,8.397,461,7.12,462,8.397,463,1.864,464,6.387]],["t/884",[1,0.613,93,2.208,256,7.208,260,1.856,339,5.283,465,10.192,466,5.533,467,7.624,468,7.624,469,5.533,470,5.533,471,5.533,472,5.533,473,7.624,474,5.533,475,5.533,476,5.533,477,5.533,478,8.723,479,7.624,480,5.533,481,5.533,482,5.533,483,5.533]],["t/886",[0,0.929,1,0.608,22,1.985,25,2.557,29,3.883,41,1.801,47,3.586,52,2.273,484,6.817]],["t/888",[0,0.909,1,0.603,3,2.161,41,1.762,47,2.673,485,5.425,486,2.85]],["t/890",[0,0.762,1,0.614,3,2.636,22,2.178,25,2.806,41,1.478,195,2.658,485,4.625,486,3.139,487,4.067,488,6.716]],["t/892",[1,0.589,3,2.343,41,1.456,47,2.899,486,3.091,487,5.174]],["t/894",[0,0.659,1,0.612,3,2.056,18,1.589,41,1.724,47,3.589,93,2.694,94,1.711,119,5.635,267,1.173,272,3.98,356,2.728,489,4.58,490,3.841,491,4.325,492,5.402,493,5.402,494,5.402,495,7.499]],["t/896",[0,0.995,1,0.613,3,2.253,22,0.935,27,2.029,41,1.261,43,2.638,47,2.787,48,2.867,52,1.376,53,3.314,75,2.936,86,2.766,93,1.196,107,3.75,195,1.892,293,2.267,356,1.307,361,2.267,403,3.661,491,3.634,496,4.128,497,2.668,498,4.128,499,3.75,500,1.827,501,3.587,502,3.314,503,5.61,504,5.61,505,4.128,506,4.736,507,3.042,508,3.277,509,3.042]],["t/898",[0,0.737,1,0.586,41,1.697,47,3.379,501,4.87,510,5.194]],["t/900",[1,0.591,99,3.603,260,2.605,454,4.043,511,3.861,512,6.217,513,6.51,514,6.217,515,4.179,516,6.217]],["t/902",[1,0.584,41,1.617,48,3.678,84,4.411,260,2.672,517,6.217,518,5.333,519,1.819,520,6.217,521,5.333]],["t/904",[1,0.578,260,2.451,398,3.181,421,4.776,422,5.559,522,6.295]],["t/906",[1,0.602,27,2.972,32,4.164,41,1.03,52,3.044,88,2.553,108,2.777,119,4.904,123,2.709,248,2.93,260,2.374,267,2.118,324,3.935,325,4.3,356,2.565,408,5.759,490,5.759,513,6.187,523,4.456,524,4.164,525,4.044,526,5.128,527,5.128,528,5.128]],["t/908",[1,0.605,27,4.368,75,6.321,76,5.926,118,3.332,120,3.972,153,7.136,227,4.663,260,2.382,513,4.424,529,4.319,530,6.973,531,3.203,532,5.347,533,5.347]],["t/910",[1,0.596,28,5.701,29,4.718,52,2.085,62,3.83,180,6.603,260,2.624,267,1.799,513,6.523,534,4.07,535,4.448,536,5.304,537,5.304,538,5.304,539,5.021]],["t/912",[1,0.571,52,3.284,93,2.853,254,5.315,260,2.398,500,4.358]],["t/914",[1,0.592,27,4.047,74,6.314,75,5.855,76,4.987,270,5.358,343,4.047,344,6.067,345,6.067]],["t/916",[1,0.583,28,5.315,48,3.191,260,2.005,491,3.643,513,5.224,540,6.61,541,2.258,542,7.479]],["t/918",[0,0.801,1,0.599,3,1.989,47,2.46,52,2.417,86,3.248,267,2.339,324,6.483,325,6.479,543,6.148,544,7.251,545,7.251]],["t/920",[0,0.303,1,0.105,19,3.479,20,1.612,27,2.98,28,3.573,29,1.965,32,1.383,33,1.306,34,3.127,41,0.773,47,1.54,48,2.087,52,2.208,62,1.758,74,1.54,75,2.454,76,3.261,84,1.144,88,2.273,93,0.999,98,0.939,99,0.934,108,0.922,118,0.959,119,2.09,120,3.067,123,2.412,153,2.77,180,3.226,209,0.867,227,1.343,236,3.847,248,4.352,254,1.862,260,2.55,263,1.929,266,0.973,267,1.818,270,2.245,295,0.82,324,2.245,325,2.454,343,1.696,344,2.542,345,2.542,356,1.093,398,0.748,408,2.454,421,1.122,422,2.245,437,2.77,454,4.37,463,1.933,490,2.454,500,1.527,511,1.001,512,1.612,514,1.612,515,1.083,516,1.612,517,1.612,518,1.383,519,2.067,520,1.612,521,2.376,522,1.479,523,1.479,524,1.383,525,3.034,526,1.702,527,1.702,528,1.702,529,1.244,531,1.585,532,2.646,533,1.54,534,2.245,535,1.428,536,1.702,537,1.702,538,1.702,539,1.612,541,1.244,546,1.54,547,2.245,548,2.566,549,1.627,550,1.428,551,1.702,552,2.646,553,1.702,554,1.824,555,1.479,556,1.244,557,1.824,558,1.824,559,1.824,560,1.306,561,1.824,562,1.824,563,2.77,564,1.612,565,2.396,566,2.045,567,1.244,568,2.008,569,1.612,570,1.824,571,1.479,572,7.104,573,1.824,574,3.134,575,1.383,576,4.323,577,3.067,578,1.343,579,3.847,580,0.911,581,1.824,582,1.824,583,1.379,584,1.824,585,1.428,586,1.702,587,1.824,588,1.824,589,1.824,590,1.824,591,1.428,592,5.509,593,1.824,594,2.926,595,1.612,596,3.479,597,1.824,598,1.824,599,1.612,600,4.566,601,1.824,602,6.015,603,2.77,604,1.585,605,1.72,606,3.134,607,2.646,608,2.542,609,1.824,610,1.824,611,1.479,612,1.824]],["t/923",[0,0.895,1,0.581,45,7.908,46,7.908]],["t/925",[0,0.973,1,0.585,18,1.947,22,1.948,41,1.128,43,4.077,44,5.913,195,2.028,291,4.35,330,2.763,361,3.634,500,3.803,575,4.558,613,6.012,614,6.619,615,6.619,616,6.012,617,6.619,618,6.619]],["t/927",[0,0.855,1,0.616,3,2.539,37,3.387,41,1.577,42,3.858,43,3.655,44,4.607,48,2.069,382,4.526,486,1.931,619,4.849,620,4.849,621,5.338,622,5.338,623,5.338,624,5.338,625,4.526,626,4.849]],["t/929",[0,0.721,1,0.618,41,1.146,42,3.938,48,1.37,78,1.846,195,1.681,203,2.838,213,3.676,271,3.76,285,2.711,298,2.435,404,2.838,583,2.194,596,4.208,619,3.211,627,3.535,628,4.653,629,4.956,630,6.902,631,3.67,632,2.82,633,5.488,634,5.488,635,2.838,636,3.211,637,8.207,638,5.488,639,2.711,640,3.535,641,3.535,642,3.535,643,3.535,644,3.211,645,2.998]],["t/931",[0,0.761,1,0.617,18,1.769,41,1.025,42,3.906,43,3.093,44,4.997,47,1.352,48,3.528,51,2.114,61,0.984,78,2.08,203,3.198,258,3.378,285,3.055,298,2.743,404,4.827,596,4.611,628,5.099,629,2.935,639,3.055,644,3.619,645,3.378,646,4.827,647,2.239,648,3.619,649,3.984,650,6.579,651,3.984,652,3.984,653,2.568,654,3.619,655,3.984,656,3.619,657,1.958]],["t/933",[0,0.818,1,0.619,41,1.071,42,3.995,43,2.683,44,4.646,47,1.433,48,3.606,51,2.241,61,1.044,78,2.205,203,3.391,248,3.044,258,3.582,285,3.239,628,5.327,629,3.112,645,3.582,646,3.391,647,2.34,657,2.076,658,4.224,659,4.224,660,4.224]],["t/935",[0,0.71,1,0.615,18,2.752,41,0.818,42,3.107,43,2.947,44,5.004,47,1.63,48,3.13,61,1.187,211,3.212,235,1.69,298,3.308,629,3.539,636,4.363,639,3.683,650,4.363,653,3.994,654,4.363,656,4.363,661,8.078,662,4.803,663,8.831,664,4.803,665,3.212,666,6.902,667,4.803,668,4.803,669,4.073,670,6.902,671,4.803,672,3.539]],["t/937",[0,0.876,1,0.613,34,2.385,37,1.118,39,2.921,41,0.953,42,1.085,88,2.362,99,1.434,108,0.81,195,3.246,260,1.199,266,0.854,291,2.079,348,1.254,421,2.754,422,2.673,486,1.115,491,3.109,506,6.85,507,7.909,515,0.951,522,1.299,529,1.909,541,2.306,560,1.147,569,1.415,575,2.123,613,1.601,665,1.179,673,1.495,674,1.763,675,1.763,676,1.763,677,1.763,678,1.495,679,6.946,680,4.939,681,3.083,682,1.763,683,1.763,684,3.483,685,2.614,686,2.8,687,1.763,688,1.763,689,1.024,690,2.614,691,1.495,692,3.297,693,1.495,694,1.495,695,1.254,696,2.475,697,1.299,698,4.256,699,2.918,700,4.177,701,1.495,702,1.495,703,4.107,704,6.153,705,1.147,706,1.763,707,2.006,708,1.415,709,4.926,710,2.475]],["t/939",[0,0.795,1,0.544,491,4.005]],["t/941",[0,0.692,1,0.612,491,4.575,501,4.576,508,4.18,711,7.878]],["t/943",[0,0.966,1,0.617,18,1.675,39,2.972,41,1.509,44,3.527,51,3.021,91,4.126,291,2.882,333,3.921,487,2.246,491,4.7,507,5.106,508,5.177,684,8.273,685,5.877,712,5.172,713,5.172,714,5.172,715,3.368]],["t/945",[0,0.938,1,0.615,18,1.655,41,1.419,51,2.984,91,4.091,266,2.725,291,2.846,295,2.297,333,3.872,487,4.155,491,4.762,507,4.143,508,5.355,646,6.189,665,2.44,684,8.025,685,4.768,695,5.482,713,5.108,714,7.003,715,3.314]],["t/947",[0,0.552,1,0.591,3,1.159,41,1.687,44,5.145,88,3.167,90,6.857,108,2.886,267,1.804,295,2.566,348,3.004,487,4.543,491,4.264,508,5.369,575,2.909,699,3.155,716,5.752,717,8.307,718,8.065,719,6.283,720,6.022,721,6.022,722,7.545,723,7.545,724,6.814,725,3.112,726,3.986,727,4.224,728,4.224,729,4.224,730,4.224,731,4.224]],["t/949",[0,0.856,1,0.596,41,1.782,47,3.307,501,4.697,510,5.01]],["t/951",[1,0.528,18,1.947,21,3.844,22,1.948,28,5.151,41,1.465,47,2.246,48,2.565,62,2.565,63,4.199,195,2.028,266,4.896,311,5.205,314,4.199,361,3.634,413,2.928,491,2.928,508,3.512,534,4.307,541,2.618,732,5.075,733,4.1,734,4.199,735,3.3,736,3.3,737,4.199,738,4.707,739,5.313]],["t/954",[1,0.59,15,2.398,39,3.362,42,2.266,50,2.21,88,1.395,99,2.422,101,2.15,108,1.518,195,3.326,260,2.552,266,1.601,348,2.35,421,1.847,422,2.15,485,2.276,491,2.303,506,6.776,507,8.079,513,6.434,529,3.989,569,2.653,689,1.919,690,4.414,691,2.802,692,2.653,693,2.802,695,2.35,696,4.179,697,2.435,698,3.152,699,2.775,700,2.802,701,2.802,702,2.802,740,5.032,741,2.802,742,3.305,743,2.653,744,2.802,745,2.047,746,2.802,747,2.047,748,2.802,749,2.802,750,1.672,751,3.002,752,3.305,753,3.305,754,3.002,755,3.002,756,2.802,757,2.534,758,3.002]],["t/956",[1,0.602,41,1.666,47,3.458,48,3.789,195,1.865,260,2.553,491,2.693,517,4.887,518,4.192,519,1.91,520,4.887,521,4.192,541,2.513,679,5.162,694,5.162,705,3.961,759,6.088,760,5.162,761,5.53,762,5.53]],["t/958",[1,0.601,260,2.444,271,4.119,402,5.24,403,5.949,737,4.674,763,7.057,764,5.65,765,6.693,766,6.693,767,7.368,768,5.65,769,4.279]],["t/961",[1,0.597,99,3.456,260,2.567,454,3.878,511,3.704,512,5.963,513,6.688,514,5.963,515,4.008,516,5.963,552,7.093]],["t/963",[0,0.565,1,0.587,15,3.141,50,5.641,62,2.492,88,2.715,123,3.778,260,2.526,267,1.397,272,4.739,356,2.672,513,4.08,534,4.185,603,5.163,604,3.875,605,4.206,770,2.812,771,5.842,772,7.663,773,5.842,774,4.429,775,6.432,776,5.163,777,4.739,778,4.574]],["t/965",[1,0.574,260,2.424,271,4.688,398,3.123,421,4.688,422,5.457,522,6.179,779,7.111]],["t/967",[1,0.591,491,4.479,508,4.576,750,4.365]],["t/969",[0,0.334,1,0.611,18,2.736,28,4.25,30,2.703,41,0.989,47,3.402,52,1.267,61,1.739,62,3.287,63,2.411,86,2.599,87,1.605,93,1.101,94,1.204,123,1.702,260,2.335,267,0.826,311,5.632,314,3.681,356,1.838,369,3.051,370,3.223,389,2.801,513,3.681,534,2.473,541,1.93,603,4.658,732,2.915,734,3.681,735,1.895,736,1.895,737,2.411,738,2.703,739,3.051,774,2.618,780,3.051,781,3.453,782,1.953,783,3.051,784,3.453,785,3.453,786,3.801,787,3.801,788,2.801,789,2.542,790,3.453,791,3.223,792,3.801,793,3.453,794,3.453]],["t/971",[1,0.564,33,5.665,34,5.057,248,4.219,260,2.12,795,4.105]],["t/973",[0,0.766,1,0.603,3,1.856,21,5.064,22,2.186,93,2.525,260,1.647,266,5.321,361,3.715,413,2.994,497,2.923,500,3.858,689,3.93,733,4.191]],["t/975",[1,0.576,22,2.216,52,2.712,93,3.223,195,2.492,254,5.777,260,2.607,356,2.576,361,4.466,497,4.225,500,3.599,689,4.725]],["t/977",[1,0.604,27,3.621,41,1.255,47,3.123,74,5.65,75,5.24,76,4.462,266,3.57,270,4.795,295,3.009,343,3.621,344,5.429,345,5.429,490,5.24,796,8.36]],["t/979",[1,0.593,28,5.936,48,2.641,180,4.847,260,2.133,266,3.303,491,3.016,513,6.482,540,5.472,541,1.87,542,6.192,738,6.23,788,5.023,789,4.558,797,4.847,798,5.78,799,6.817]],["t/981",[0,0.281,1,0.249,3,0.222,14,0.685,15,1.191,18,1.073,19,1.643,20,0.649,21,0.881,22,1.079,23,0.513,27,1.572,28,2.737,29,0.864,30,1.079,32,0.557,33,2.081,34,2.57,35,0.62,39,1.119,41,0.864,42,0.534,43,0.915,47,1.376,48,1.239,50,1.433,52,1.216,61,0.667,62,1.845,63,0.513,74,0.62,75,1.079,76,1.635,84,0.46,87,0.64,88,2.011,93,1.699,94,0.679,98,0.583,99,0.997,101,1.394,108,0.697,118,1.024,119,0.919,120,1.822,123,2.518,153,1.218,180,1.524,195,2.494,209,0.349,227,0.541,236,2.289,248,4.467,249,0.479,254,2.188,260,2.499,263,0.848,266,3.24,267,1.274,270,0.987,271,0.452,272,0.596,295,1.49,311,1.937,314,0.962,324,0.987,325,1.079,343,0.745,344,1.118,345,1.118,348,0.575,354,0.47,356,1.155,361,1.482,369,0.649,370,0.685,389,1.118,396,0.557,398,0.301,402,0.575,403,1.6,408,1.079,413,0.671,414,0.316,421,1.509,422,1.394,437,1.218,454,2.797,463,1.183,485,0.557,490,1.524,491,1.794,497,1.576,500,1.194,506,4.834,507,5.589,508,0.805,511,0.403,512,0.649,514,0.649,515,0.436,516,0.649,517,0.649,518,1.044,519,1.685,520,0.649,521,0.557,522,0.596,523,0.596,524,0.557,525,1.433,526,0.685,527,0.685,528,0.685,529,2.511,531,0.984,532,2.07,533,0.62,534,2.081,535,0.575,536,0.685,537,0.685,538,0.685,539,1.218,541,2.08,546,0.62,547,1.394,548,1.413,549,0.715,550,0.575,551,0.685,552,1.163,553,0.685,554,0.734,555,1.118,556,0.501,557,0.734,558,0.734,559,0.734,560,0.526,561,0.734,562,0.734,563,1.218,564,0.649,565,2.419,567,0.939,569,1.72,570,0.734,571,0.596,572,4.326,573,0.734,574,1.378,575,0.557,576,2.167,577,1.538,578,1.014,579,1.817,580,0.688,581,0.734,582,0.734,583,1.458,584,0.734,585,1.079,586,0.685,587,0.734,588,0.734,589,0.734,590,0.734,591,0.575,592,3.313,593,1.378,594,1.286,595,0.649,596,3.652,597,0.734,598,0.734,599,0.649,600,2.289,601,0.734,602,3.313,603,2.568,604,2.032,605,1.819,606,1.378,607,4.311,608,2.987,609,0.734,610,1.378,611,1.118,612,0.734,647,0.798,679,1.286,680,1.218,689,1.857,690,1.286,691,0.685,692,0.649,693,0.685,694,0.685,695,0.575,696,1.218,697,0.596,698,0.919,699,1.215,700,1.817,701,1.286,702,0.685,705,0.526,707,0.526,710,0.649,732,1.163,733,3.774,734,1.359,735,0.403,736,0.403,737,1.359,738,2.274,739,0.649,740,2.792,741,0.685,743,0.649,744,0.685,745,0.501,746,0.685,747,0.501,748,0.685,749,1.286,750,0.409,751,0.734,754,0.734,755,0.734,756,0.685,757,1.163,758,0.734,760,0.685,761,0.734,762,0.734,763,2.07,764,0.62,765,0.734,766,0.734,770,0.663,771,0.734,772,4.019,773,0.734,774,1.044,776,0.649,777,0.596,778,0.575,779,0.685,780,1.72,781,0.734,782,0.415,783,0.649,784,0.734,785,0.734,788,0.596,789,1.014,795,1.508,796,1.378,797,1.079,800,2.143,801,0.619,802,0.808,803,0.808,804,0.808,805,1.378,806,0.649,807,0.685,808,1.517,809,0.734,810,0.808,811,0.649,812,3.509,813,1.517,814,1.946,815,0.526,816,1.163,817,0.808,818,0.526,819,0.808,820,0.808,821,7.001,822,0.808,823,0.596,824,0.734,825,0.367,826,1.946,827,0.596,828,0.808,829,0.808,830,0.649,831,0.808,832,0.649,833,1.517,834,0.808,835,0.557,836,0.808,837,1.163,838,0.808,839,0.685,840,0.808,841,0.808,842,0.734]],["t/983",[0,0.788,1,0.541,48,4.012]],["t/985",[0,0.803,48,3.543,843,9.144]],["t/987",[1,0.617,15,2.769,41,1.762,42,3.711,48,4.087,541,1.464,576,4.286,718,4.849,844,5.338,845,5.338,846,5.338,847,5.338,848,5.338,849,9.257,850,5.338,851,5.338]],["t/989",[1,0.592,15,3.066,41,1.403,42,2.897,48,4.084,726,5.224,852,5.855]],["t/991",[0,0.675,1,0.582,41,1.609,47,3.204,48,4.243,501,4.46,513,5.99,518,5.288,760,6.511,853,6.511]],["t/993",[0,0.535,1,0.614,18,1.791,41,1.824,42,3.585,43,2.6,47,2.066,48,4.063,491,2.693,620,5.53,653,2.6,789,4.071,854,6.088,855,4.668,856,6.088]],["t/995",[1,0.586,41,1.796,47,3.578,48,4.392,501,4.314,857,7.428,858,7.428]],["t/997",[0,0.843,1,0.586,47,3.255,48,4.007,382,6.68,625,6.68,626,7.156,853,8.132,859,7.878]],["t/998",[0,0.812,1,0.597,41,1.527,42,1.095,48,4.371,49,2.827,88,1.314,119,3.75,121,2.424,122,3.424,260,2.434,267,0.676,271,3.95,403,5.314,421,3.95,422,4.598,491,2.196,497,1.345,501,1.808,509,3.658,522,5.206,546,3.807,547,3.23,560,4.029,648,6.418,707,4.029,779,5.992,853,7.835,860,1.467,861,3.113,862,3.113,863,3.113,864,3.113,865,3.113,866,2.827,867,1.552,868,3.113,869,4.964,870,3.113,871,3.113,872,3.113,873,3.113,874,4.509,875,3.113,876,3.113,877,3.113,878,3.113]],["t/1000",[1,0.598,3,2.357,21,5.544,61,2.123,86,4.275,87,4.266,403,6.566,502,7.663,708,6.9,879,6.012,880,6.619]],["t/1002",[0,0.861,1,0.598,41,1.669,62,3.162,86,3.655,406,7.412,502,6.551]],["t/1004",[0,0.88,1,0.62,3,2.416,41,1.372,195,3.321,485,6.428,487,2.894,821,4.34,823,5.066,881,5.52,882,3.836,883,4.778,884,4.778,885,4.778,886,4.778,887,4.34,888,4.778,889,4.778,890,4.778,891,4.778]],["t/1006",[0,0.724,1,0.608,15,3.671,42,2.901,195,2.526,501,4.789,529,5.107,740,7.41,741,5.267,743,4.987,744,5.267,745,5.107,746,5.267,747,5.107,748,5.267,892,8.245]],["t/1008",[0,0.774,1,0.614,3,1.886,14,5.83,15,2.56,41,1.172,88,3.401,195,2.699,271,2.671,421,2.671,529,5.457,594,4.052,611,5.934,695,3.398,697,3.521,740,6.066,823,6.491,824,4.34,835,3.29,881,5.52,882,3.836,887,6.245,893,4.778,894,4.778,895,4.34,896,4.778,897,4.778,898,4.778,899,4.778,900,4.778,901,4.778,902,4.778,903,4.778]],["t/1010",[0,0.704,1,0.608,41,1.366,48,4.195,855,6.147]],["t/1012",[1,0.6,48,3.22,485,7.286,686,8.996]],["t/1014",[0,0.744,1,0.602,195,2.593,823,6.236,881,6.795]],["t/1016",[0,0.772,1,0.566,195,3.136,506,6.74]],["t/1019",[0,0.863,1,0.614,3,2.45,22,2.024,25,2.607,41,1.197,47,3.031,485,4.839,486,2.542,487,5.41]],["t/1021",[1,0.547,487,5.537]],["t/1023",[1,0.488]],["t/1025",[0,0.863,1,0.612,15,1.837,22,1.118,41,1.84,48,3.464,78,3.673,81,4.007,82,4.358,83,2.924,84,4.007,86,2.21,88,2.97,89,3.783,267,1.528,325,5.003,487,2.988,529,3.056,740,5.646,823,3.635,904,5.965,905,5.965,906,3.783,907,3.783,908,3.508,909,3.783,910,4.934,911,4.934]],["t/1027",[1,0.61,18,1.421,21,2.805,22,1.094,41,1.712,48,3.78,63,3.063,78,3.617,81,3.946,82,4.291,83,2.862,84,3.946,88,2.925,93,1.398,266,4.289,311,4.196,413,2.137,491,2.137,500,2.137,501,2.805,508,2.562,518,3.325,541,2.222,672,3.558,726,3.063,732,3.703,733,2.991,740,4.771,855,3.703,882,3.877,904,5.874,905,5.874,906,3.703,907,3.703,908,3.434,909,3.703,912,4.829]],["t/1029",[0,0.857,1,0.605,41,1.661,47,3.685,48,2.682,62,2.682,487,5.357,913,6.92,914,6.286,915,6.92,916,6.92,917,6.92,918,6.92]],["t/1031",[1,0.613,3,1.764,15,3.141,41,1.768,47,2.182,62,4.021,63,4.08,88,2.715,403,3.812,486,2.327,776,5.163,777,4.739,778,4.574,835,4.429,852,4.574,919,5.453,920,6.432]],["t/1033",[0,0.272,1,0.607,3,0.848,18,0.91,21,1.795,22,1.859,25,1.441,41,1.778,47,2.611,63,1.961,78,4.017,81,4.382,82,4.766,83,3.654,84,4.382,86,1.385,88,1.305,89,4.727,90,2.278,92,2.482,93,0.895,195,2.357,211,2.067,266,3.411,267,0.671,311,2.99,371,2.278,372,2.198,396,4.245,413,1.368,459,2.129,486,1.118,487,3.733,491,2.727,500,1.368,508,1.64,541,2.25,705,4.011,732,2.37,733,1.915,906,3.786,907,3.786,908,3.511,909,3.786,914,6.989,921,2.808,922,7.039,923,3.091,924,6.164,925,4.937,926,2.482,927,3.091,928,6.164,929,3.091,930,6.164,931,3.091,932,3.091,933,3.091,934,3.091,935,3.091]],["t/1035",[0,0.805,1,0.596,41,1.704,195,3.064,485,6.306,529,4.527,541,2.743,705,6.507,740,5.033,936,7.309]],["t/1037",[0,0.803,1,0.547]],["t/1039",[0,0.765,1,0.581,3,2.792,937,8.707]],["t/1041",[0,0.772,1,0.566,24,6.054,41,1.498,938,7.454]],["t/1043",[0,0.795,1,0.544,221,8.223]],["t/1045",[0,0.795,1,0.544,939,9.053]],["t/1047",[0,0.893,1,0.618,3,2.504,27,2.972,51,3.209,61,1.494,319,3.06,320,2.32,322,2.32,333,4.164,334,5.493,552,6.21,940,6.047,941,6.047,942,6.047,943,6.047,944,6.047,945,6.047,946,6.047,947,6.047]],["t/1049",[0,0.795,1,0.544,76,5.482]],["t/1051",[0,0.895,1,0.564,48,3.945,814,7.908]],["t/1053",[1,0.589,3,2.343,41,1.715,47,2.899,948,8.543]],["t/1055",[0,0.944,1,0.605,39,3.755,77,4.563,108,3.304,340,7.278,548,2.787,665,4.81,726,4.563,852,5.115,949,4.356,950,7.194,951,7.194,952,6.1]],["t/1057",[0,0.777,1,0.598,3,2.426,21,6.412,22,1.568,403,4.102,456,8.525,461,5.868,510,4.287,953,6.92,954,6.92,955,5.868,956,5.099]],["t/1059",[1,0.607,3,0.868,18,0.932,21,5.744,22,0.718,23,2.009,24,2.181,41,0.54,42,1.114,50,3.365,87,2.644,88,3.013,93,1.457,94,1.594,101,2.061,139,2.876,211,2.117,239,2.867,241,2.867,242,2.867,244,1.918,248,1.534,249,1.877,255,2.061,260,0.771,281,2.009,295,2.055,319,3.17,356,1.003,361,1.739,396,2.181,455,4.571,456,8.548,463,1.469,497,1.368,510,1.961,519,0.744,596,2.428,721,2.542,750,1.603,757,2.428,835,4.313,955,6.602,957,3.167,958,6.263,959,6.263,960,2.876,961,3.167,962,3.167,963,4.571,964,2.685,965,3.167,966,2.876,967,6.263,968,5.033,969,5.033,970,3.167,971,3.167,972,3.167,973,3.167,974,3.167,975,4.571,976,3.167,977,2.876,978,2.876,979,3.167,980,3.167,981,3.167,982,3.167,983,3.167,984,3.167,985,3.167,986,2.876,987,3.167,988,3.167,989,3.167,990,3.167,991,3.167,992,3.167]],["t/1061",[1,0.599,21,3.378,23,5.679,24,4.005,87,2.455,88,3.33,93,1.684,94,1.842,120,3.312,239,3.312,241,3.312,242,3.312,249,3.447,295,3.221,319,3.992,657,2.858,673,4.931,696,4.669,750,2.943,955,8.139,960,5.282,963,7.165,977,5.282,986,5.282,993,5.816,994,8.718,995,5.816,996,5.282,997,5.816,998,5.816,999,5.816,1000,5.816,1001,5.816]],["t/1063",[0,0.637,1,0.603,21,6.479,281,4.6,403,4.298,665,6.092,705,4.718,975,8.276,1002,7.251,1003,7.251,1004,7.251]],["t/1065",[0,0.985,1,0.612,22,1.683,25,2.168,41,1.576,195,2.276]],["t/1067",[0,0.78,1,0.538,1005,7.526,1006,6.54,1007,6.806]],["t/1069",[1,0.585,76,6.235]],["t/1071",[0,0.78,1,0.585,1008,8.876]],["t/1073",[1,0.573,27,4.449]],["t/1075",[0,0.885,1,0.597,85,5.602,120,5.269,205,7.843,298,5.115,404,5.963,639,5.696,1009,5.115,1010,8.402,1011,7.428,1012,7.428]],["t/1078",[0,0.933,1,0.597,62,3.905,93,1.706,101,3.833,129,3.939,210,4.729,234,5.351,248,2.854,354,5.233,463,1.719,500,2.606,721,4.729,908,4.189,964,4.995,1009,4.057,1013,7.227,1014,9.649,1015,5.891,1016,5.891,1017,5.891,1018,7.957,1019,4.34,1020,5.351,1021,5.891,1022,5.891,1023,5.351]],["t/1080",[0,0.837,1,0.611,41,1.51,47,2.642,48,2.211,52,1.902,63,3.62,78,4.065,81,3.25,82,3.535,83,3.382,84,3.25,88,3.288,180,4.058,535,4.058,740,3.93,855,4.375,904,6.603,905,4.838,908,6.304,1024,8.65,1025,5.706,1026,5.706,1027,5.706,1028,5.706,1029,5.706]],["t/1083",[0,0.953,1,0.614,205,8.542,210,5.963,1009,5.115,1010,6.747]],["t/1085",[0,0.794,1,0.612,22,2.289,76,3.591,86,2.656,94,3.199,269,7.447,394,6.776,510,4.95,1030,5.386,1031,5.929,1032,5.929,1033,5.929,1034,5.929,1035,5.929,1036,5.929]],["t/1087",[0,0.772,1,0.583,41,1.498,47,2.983]],["t/1089",[0,0.346,1,0.599,28,4.888,41,1.467,47,2.438,48,3.337,51,2.087,53,3.157,78,5.18,81,5.651,82,6.146,83,5.996,84,5.651,333,2.708,521,4.1,738,6.123,806,6.913,1037,3.932,1038,5.049,1039,5.408,1040,7.186,1041,5.954,1042,5.954,1043,1.215,1044,5.954,1045,5.408,1046,5.408,1047,3.932,1048,5.954,1049,3.932]],["t/1091",[0,0.954,1,0.61,41,1.829,47,3.071,48,1.965,78,2.647,260,1.235,266,2.457,285,3.888,403,3.006,419,3.606,509,3.736,541,1.391,549,3.382,734,3.217,763,3.888,837,3.888,1009,3.492,1045,4.606,1046,4.606,1050,5.071,1051,5.501,1052,5.071,1053,2.835,1054,5.071,1055,4.3,1056,4.606,1057,5.071,1058,3.492,1059,5.071,1060,4.606,1061,5.071]],["t/1093",[0,0.616,1,0.613,15,2.61,41,1.194,209,2.12,267,1.937,319,3.547,324,5.802,403,4.154,501,5.996,510,5.523,519,1.646,541,1.922,543,5.942,548,1.901,550,3.489,551,4.161,673,4.161,705,4.56,737,4.446,750,2.483,763,5.374,776,5.626,1062,7.008,1063,7.008,1064,7.008]],["t/1095",[1,0.599,48,3.057,267,2.247,324,5.825,325,6.365,403,5.306,543,4.931,550,4.135,657,2.858,737,5.679,763,6.864,768,4.459,1065,5.282,1066,5.816,1067,7.888,1068,5.816,1069,5.816,1070,7.888,1071,5.816,1072,7.888,1073,7.888,1074,7.888,1075,7.888]],["t/1097",[0,0.755,1,0.598,28,5.151,41,1.465,48,2.565,78,3.455,81,3.77,82,4.1,83,3.923,84,3.77,319,3.35,403,3.923,491,3.803,550,4.707,552,5.075,657,3.253,738,6.112,769,3.844,806,7.663,1039,6.012,1056,7.807]],["t/1099",[0,0.788,1,0.571,3,2.458]],["t/1101",[0,0.686,1,0.408,84,5.867,85,4.73,86,3.498,122,3.784,321,5.554,444,4.366,515,4.214,764,5.989,1076,7.094,1077,7.094,1078,7.094,1079,7.094,1080,7.094,1081,7.094,1082,7.094,1083,7.094]],["t/1103",[0,0.508,1,0.523,3,2.154,85,3.5,86,2.588,87,3.316,88,4.042,122,2.8,239,4.473,241,5.453,242,4.473,244,3.5,292,4.314,321,5.585,402,7.343,541,1.585,635,6.305,777,4.258,1084,8.696,1085,7.134,1086,6.305,1087,7.134,1088,5.249,1089,4.639,1090,5.249,1091,5.249,1092,5.249,1093,4.639]],["t/1105",[0,0.805,1,0.522,3,2.511,48,3.875,85,5.545,86,4.101,122,3.541,235,2.572,292,3.74,402,6.512,459,6.306,491,3.234,1086,7.351,1094,5.604,1095,6.197,1096,6.197]],["t/1107",[0,0.852,1,0.595,85,4.855,86,3.591,292,3.274,402,5.701,500,3.547,1097,8.017,1098,8.017,1099,8.017]],["t/1109",[0,0.781,1,0.364,3,1.912,84,5.573,85,5.383,86,3.981,292,2.848,321,6.958,444,3.898,515,3.763,707,4.538,764,5.347,1076,6.334,1077,6.334,1078,6.334,1079,6.334,1080,6.334,1081,6.334,1082,6.334,1083,6.334,1084,8.074,1085,6.334,1086,5.598,1087,6.334,1100,6.334,1101,4.802]],["t/1111",[0,0.902,3,2.815,85,6.215,86,4.597,707,6.678,1086,8.239,1089,6.217,1093,6.217,1100,7.034]],["t/1113",[0,0.744,1,0.588,18,2.49,28,4.567,32,5.829,314,5.369,1102,7.688]],["t/1115",[1,0.617,3,1.038,28,5.802,29,3.294,41,1.196,47,1.284,61,0.935,62,3.459,201,2.607,267,0.822,314,4.453,347,3.438,348,2.692,371,2.789,372,4.113,387,3.21,389,5.172,501,2.198,534,3.764,540,3.039,665,2.531,726,2.401,739,3.039,774,2.607,788,5.172,789,6.404,798,4.904,806,3.039,807,4.904,809,3.438,1103,3.785,1104,3.785,1105,3.785,1106,3.785,1107,5.254,1108,5.784,1109,3.785,1110,3.438,1111,3.785,1112,3.785,1113,3.785,1114,3.785,1115,3.785,1116,3.438]],["t/1117",[0,0.864,1,0.612,28,4.977,41,1.399,51,3.274,501,3.584,550,4.388,738,6.559,788,6.796,789,6.845,807,6.96,1107,5.604,1110,5.604,1116,5.604,1117,5.232,1118,6.17]],["t/1119",[0,0.732,1,0.611,28,2.29,29,4.284,62,3.74,235,2.218,266,2.056,319,4.214,339,4.555,413,1.878,510,5.157,540,3.407,672,4.645,680,5.061,707,4.895,710,5.061,733,2.629,1013,6.832,1119,8.897,1120,8.326,1121,8.326,1122,4.244,1123,8.326,1124,6.305,1125,6.305,1126,4.244,1127,4.244,1128,3.407,1129,3.407,1130,4.244,1131,6.305,1132,4.244,1133,4.244,1134,6.305,1135,5.727]],["t/1121",[0,0.387,1,0.618,3,1.209,18,2.495,22,1.469,25,1.287,27,2.166,29,3.693,41,1.445,47,3.58,52,3.013,86,2.904,93,1.878,356,2.436,454,2.301,489,3.738,500,2.869,541,1.209,735,3.835,736,2.198,737,2.796,790,4.004,791,3.738,793,4.004,794,4.004,1136,4.408,1137,4.408,1138,4.408,1139,6.484,1140,4.408,1141,4.408,1142,3.738]],["t/1123",[0,0.606,1,0.612,3,1.317,18,2.598,28,2.592,29,3.931,41,1.176,47,1.63,52,2.693,61,1.187,62,1.861,267,1.499,311,6.216,314,5.934,340,3.856,348,3.416,541,2.422,774,6.081,811,5.541,1065,4.363,1143,4.803,1144,4.803,1145,6.902,1146,4.803,1147,6.902,1148,4.803,1149,4.803,1150,6.269,1151,5.292,1152,4.803]],["t/1125",[0,0.637,1,0.606,18,2.681,311,5.518,314,5.78,541,2.499,774,4.993,1153,7.251,1154,9.111,1155,6.148,1156,7.251,1157,7.251,1158,7.251]],["t/1127",[0,0.838,1,0.606,41,1.626,47,2.65,62,3.027,195,2.923,1159,7.094,1160,6.623]],["t/1129",[0,0.734,1,0.613,18,1.5,28,3.886,29,2.904,41,1.227,47,2.444,62,4.108,91,2.706,267,1.813,291,3.645,293,2.8,294,2.851,489,4.324,490,3.626,521,3.512,534,5.904,788,3.757,789,4.816,798,4.324,1160,4.324,1161,5.099,1162,5.099,1163,5.099,1164,8.35,1165,5.099,1166,5.099,1167,5.099,1168,4.632,1169,4.632]],["t/1131",[0,0.822,1,0.614,62,2.118,78,2.854,81,3.114,311,4.579,330,3.156,369,6.07,463,1.596,698,3.31,699,3.292,1019,4.028,1142,6.411,1159,9.455,1160,7.349,1170,5.467,1171,5.467,1172,7.561,1173,5.467,1174,5.467,1175,5.467,1176,5.467,1177,5.467,1178,5.467]],["t/1134",[1,0.598,3,2.054,41,1.276,86,4.529,93,2.692,94,2.944,459,5.157,956,6.85,1096,6.35,1101,5.157,1179,5.518,1180,6.803]],["t/1136",[0,0.905,1,0.592,22,1.77,41,1.331,101,5.082,278,5.223,734,4.955,795,3.682,956,7.03,1181,5.379,1182,7.811]],["t/1138",[0,0.731,1,0.606,3,2.283,41,1.418,260,1.235,419,5.101,510,3.141,548,1.965,565,1.835,575,3.492,608,5.285,837,3.888,874,9.005,956,6.668,966,4.606,1181,3.492,1183,5.071,1184,5.071,1185,7.174,1186,7.174,1187,5.071,1188,5.071,1189,5.071,1190,5.071,1191,5.071,1192,4.606,1193,3.141,1194,7.174,1195,7.174,1196,5.071,1197,5.071,1198,5.071,1199,5.071,1200,8.324,1201,7.174,1202,5.071]],["t/1140",[1,0.488]],["t/1142",[0,0.692,1,0.603,23,6.084,266,3.817,938,6.68,956,7.619,1181,6.605]],["t/1144",[0,0.793,1,0.598,23,3.199,30,3.586,33,4.65,34,2.929,35,3.867,41,0.859,61,1.246,86,2.259,87,2.129,88,2.129,89,3.867,90,3.715,91,2.676,92,4.048,93,2.403,94,2.628,97,7.538,98,2.259,99,3.861,101,3.281,695,5.901,708,4.048,956,6.115,1179,5.265,1181,3.473,1203,7.146,1204,6.49,1205,5.043,1206,5.043,1207,5.043,1208,5.043,1209,5.043,1210,5.043,1211,8.299,1212,5.043,1213,5.043,1214,5.043,1215,5.043,1216,5.043,1217,5.043]],["t/1146",[1,0.541,21,6.014,456,7.196]],["t/1148",[0,0.793,1,0.613,15,2.658,27,4.861,41,1.771,271,3.99,1218,7.137,1219,9.891]],["t/1150",[1,0.478,548,3.543,1006,6.737]],["t/1152",[1,0.603,27,2.858,77,3.689,120,3.312,503,5.282,529,5.545,708,4.669,835,5.432,1006,8.041,1007,6.864,1220,5.816,1221,7.165,1222,8.131,1223,9.114,1224,5.816,1225,7.165,1226,5.816,1227,5.816,1228,5.816,1229,5.816,1230,5.816,1231,5.816]],["t/1154",[1,0.616,15,3.805,42,2.398,330,4.042,548,2.641,1006,6.455,1232,6.192,1233,6.192,1234,6.192,1235,6.817,1236,3.303,1237,5.78]],["t/1156",[1,0.579,15,3.197,34,5.865,42,2.627,330,2.242,519,2.371,529,4.626,532,8.099,533,4.117,548,2.894,565,3.653,699,2.836,801,3.05,1006,5.502,1007,5.726,1221,6.783,1232,6.783,1233,6.783,1234,6.783,1236,3.618,1237,6.332,1238,6.783,1239,6.783]],["t/1158",[0,0.613,1,0.591,15,3.31,50,5.944,330,2.911,529,5.506,532,6.816,533,5.347,548,2.702,1006,6.549,1007,6.816,1236,4.307,1237,7.537,1238,6.334,1239,8.074,1240,8.889]],["t/1160",[0,0.872,1,0.594,30,6.447,76,6.012,429,6.1,952,6.1,996,6.534,1007,5.516,1222,6.534,1223,8.235,1241,9.066,1242,7.194,1243,9.066,1244,7.194]],["t/1162",[0,0.968,1,0.596,201,5.829]],["t/1164",[1,0.589,88,3.607,119,5.174,267,2.187,523,6.295]],["t/1166",[0,0.675,1,0.59,39,4.009,372,5.46,373,6.165,625,6.511,1245,6.975,1246,7.679,1247,7.679,1248,7.679,1249,7.679,1250,7.679,1251,7.679,1252,7.679,1253,7.679,1254,7.679]],["t/1168",[0,0.83,1,0.601,77,5.99,201,6.502,339,4.65,371,5.658,372,5.46,373,6.165,1255,7.679,1256,7.679,1257,7.679]],["t/1170",[0,0.914,1,0.612,10,5.386,41,1.54,47,3.283,108,3.671,195,2.448,249,3.515,371,5.888,372,5.683,726,3.761,921,7.259,1258,3.858,1259,4.369,1260,5.929,1261,4.369,1262,5.929,1263,5.027,1264,5.027,1265,5.929]],["t/1172",[0,0.74,1,0.618,3,1.422,28,5.196,29,4.151,41,1.557,52,1.729,61,1.801,101,3.375,195,1.589,272,3.821,314,3.29,389,6.209,789,3.468,1266,6.18,1267,6.62,1268,4.711,1269,4.711,1270,4.711,1271,4.711,1272,4.711,1273,5.186,1274,7.289,1275,6.62,1276,5.186,1277,5.186]],["t/1174",[0,0.508,1,0.616,3,1.585,28,4.814,41,1.631,47,1.961,52,1.927,195,1.77,272,4.258,314,3.666,389,4.258,486,2.091,487,3.5,490,4.109,774,3.979,789,5.252,919,7.565,1266,7.565,1267,5.249,1268,5.249,1269,5.249,1270,5.249,1271,5.249,1272,5.249]],["t/1176",[0,0.78,1,0.538,195,2.719,823,6.54,881,7.126]],["t/1178",[0,0.595,1,0.551,4,4.811,37,4.292,41,1.153,129,6.813,726,4.292,852,6.2,1258,4.403,1259,4.985,1261,6.424,1278,6.146,1279,6.146,1280,6.146,1281,6.999,1282,8.18,1283,5.737,1284,6.146,1285,6.146,1286,7.393,1287,6.146,1288,6.146,1289,6.146,1290,6.766,1291,6.146]],["t/1180",[0,0.772,1,0.583,1264,7.454,1292,6.74]],["t/1182",[0,0.737,1,0.586,41,1.429,61,2.072,62,3.249,311,6.031,541,2.3]],["t/1184",[0,0.595,1,0.551,4,4.811,37,4.292,108,3.108,129,6.813,195,2.073,726,5.531,852,4.811,1259,4.985,1261,6.424,1278,6.146,1279,6.146,1280,6.146,1281,6.999,1282,8.18,1283,5.737,1284,6.146,1285,6.146,1286,7.393,1287,6.146,1288,6.146,1289,6.146,1291,6.146,1293,6.766]],["t/1186",[0,0.622,1,0.606,22,2.348,25,3.025,41,1.529,195,3.175,541,1.942,705,4.608,1294,7.082,1295,7.082]],["t/1188",[0,0.603,1,0.589,22,2.322,25,2.836,41,1.655,78,3.586,81,3.912,83,4.071,84,3.912,195,2.976,266,4.707,356,2.175,497,2.967,541,1.884,689,3.989,705,4.469,1296,6.238]],["t/1190",[0,0.779,1,0.588,22,2.158,25,2.587,41,1.794,48,3.017,78,2.979,81,3.25,83,3.382,84,3.25,86,3.488,88,2.409,89,5.971,90,4.204,92,4.581,108,2.621,195,2.917,211,3.816,266,3.773,267,1.691,726,3.62,926,4.581,1296,5.183,1297,5.706,1298,5.706,1299,7.787,1300,7.787,1301,5.706]],["t/1192",[0,0.692,1,0.586,22,2.173,25,2.3,51,4.18,195,2.414,266,5.214,356,2.495,497,3.404,689,4.576]],["t/1194",[1,0.572,22,1.74,195,2.352,266,4.954,319,5.398,356,2.432,497,3.318,501,5.484,541,2.106,550,5.46,689,4.46,705,4.997]],["t/1196",[0,0.909,1,0.61,3,2.161,33,5.126,61,1.946,491,3.486,501,4.576]],["t/1198",[0,0.78,1,0.538,41,1.512,1051,6.806,1129,7.126]],["t/1200",[0,0.772,1,0.535,47,3.474,1051,6.74,1129,7.057]],["t/1202",[1,0.488]],["t/1204",[0,0.89,1,0.579,76,6.131,1302,8.624]],["t/1206",[0,0.737,1,0.586,339,6.031,1303,8.386,1304,8.386,1305,8.386,1306,8.386]],["t/1208",[0,0.788,1,0.571,270,5.833]],["t/1210",[0,0.493,1,0.57,3,0.738,8,1.098,18,1.298,22,1.623,52,0.897,61,2.288,77,1.706,86,2.512,87,1.862,88,1.862,93,2.228,94,2.687,98,0.732,211,5.145,235,0.946,237,2.281,239,3.194,241,3.194,242,1.532,244,1.629,248,2.137,254,3.501,260,1.074,263,1.504,267,0.584,268,2.798,269,4.468,319,2.233,324,1.75,339,1.629,356,1.397,395,5.491,401,4.3,413,1.19,418,1.627,454,3.387,459,1.852,463,0.785,491,1.19,497,1.162,508,1.427,524,1.852,525,1.799,547,1.75,548,1.709,549,1.268,556,1.666,565,0.973,567,1.666,631,1.799,647,1.002,653,1.884,707,2.87,1043,0.831,1179,1.982,1236,1.303,1307,5.501,1308,4.3,1309,2.69,1310,2.69,1311,2.69,1312,1.782,1313,2.69,1314,3.74,1315,2.281,1316,2.281,1317,2.281,1318,2.281,1319,2.281,1320,2.281,1321,2.443,1322,2.281,1323,2.062,1324,2.159,1325,2.281,1326,1.913,1327,2.281,1328,2.281,1329,2.281,1330,1.913,1331,2.062,1332,2.443,1333,2.69,1334,2.69,1335,2.281,1336,2.443,1337,2.281,1338,2.443,1339,2.443,1340,4.502,1341,3.079,1342,2.443,1343,2.69,1344,4.411,1345,2.69,1346,2.062,1347,1.913,1348,4.411,1349,4.411,1350,7.258,1351,2.443,1352,2.69,1353,2.69,1354,2.69,1355,2.69,1356,5.094,1357,2.69,1358,2.69,1359,5.094,1360,2.69,1361,2.69,1362,2.281,1363,2.443]],["t/1212",[0,0.843,1,0.599,18,2.318,19,6.041,20,6.325,22,1.785,24,5.425,28,4.251,29,4.487,31,6.68,1102,7.156]],["t/1214",[1,0.588,30,7.12,41,1.706,63,5.369,1364,8.464]],["t/1216",[0,0.83,1,0.611,21,3.253,22,1.269,23,7.074,24,3.857,41,0.954,50,3.745,61,1.384,244,4.656,275,4.127,278,3.745,281,4.877,783,4.496,938,4.749,994,6.983,1179,4.127,1204,5.087,1365,5.087,1366,5.601,1367,4.749,1368,5.601,1369,4.749,1370,5.601,1371,5.087]],["t/1218",[0,0.802,1,0.604,41,1.03,93,2.945,235,2.849,266,2.93,339,6.158,413,2.676,499,9.236,511,4.038,680,7.33,710,7.33,733,3.746,1128,4.855,1135,7.356,1372,8.099]],["t/1220",[0,0.875,1,0.599,3,1.989,18,2.931,31,6.148,278,6.989,734,5.78,1373,6.586,1374,7.251,1375,7.251,1376,7.251,1377,7.251]],["t/1222",[1,0.614,3,1.555,18,3.093,32,3.905,61,2.346,62,3.424,93,1.642,94,1.796,275,5.713,278,6.351,339,3.434,734,4.919,783,4.552,964,4.808,1362,4.808,1373,5.151,1378,5.671,1379,8.026,1380,5.671,1381,5.671]],["t/1224",[0,0.78,1,0.568,18,2.612,278,5.935]],["t/1226",[1,0.598,61,2.016,278,5.457,367,3.847,560,5.31,734,6.661,1382,7.412]],["t/1228",[1,0.616,18,2.415,61,2.279,209,3.546,278,6.167,398,3.056,1365,7.455,1379,5.604,1382,7.455,1383,6.17,1384,6.17,1385,8.208,1386,7.455,1387,8.208,1388,6.17]],["t/1230",[1,0.564,32,5.996,41,1.483,734,5.523,1389,8.707,1390,8.707]],["t/1232",[0,0.83,1,0.612,22,1.92,41,1.104,62,3.284,266,3.138,267,1.841,278,4.331,361,4.653,497,2.798,534,5.515,734,4.109,1391,10.021,1392,6.477,1393,6.477,1394,6.477]],["t/1234",[0,0.751,1,0.578,88,3.607,267,1.855,523,6.295,895,7.76,1395,8.543]],["t/1236",[0,0.418,1,0.61,3,1.304,22,1.077,41,0.81,86,2.129,88,2.007,93,1.376,239,2.707,241,2.707,242,2.707,249,2.818,260,1.157,267,1.032,268,3.015,311,6.559,314,4.345,486,1.72,541,2.41,699,1.805,774,5.53,816,3.645,1117,4.03,1142,5.808,1150,4.317,1151,3.645,1281,3.816,1396,4.753,1397,4.753,1398,4.753,1399,4.753,1400,4.753,1401,4.753,1402,8.031,1403,4.753,1404,6.222,1405,4.753,1406,4.317,1407,4.753,1408,4.753,1409,6.85,1410,4.753]],["t/1238",[0,0.89,1,0.591,3,2.777]],["t/1240",[0,0.866,1,0.615,3,1.245,22,1.029,41,1.333,47,3.104,48,1.759,51,2.409,61,1.122,78,4.49,81,4.899,82,5.328,83,4.638,86,2.033,333,3.126,403,2.691,502,3.645,518,3.126,521,4.563,523,3.345,835,3.126,906,5.08,907,5.08,908,4.712,909,5.08,1128,3.645,1129,3.645,1411,4.54,1412,4.54,1413,6.626,1414,6.626,1415,4.54,1416,4.54,1417,4.54]],["t/1242",[0,0.803,1,0.547]],["t/1244",[0,0.935,1,0.618,41,0.913,47,2.53,51,4.293,78,3.443,81,3.757,82,4.086,83,3.91,210,2.753,319,4.34,333,3.69,408,2.438,410,3.115,504,3.115,518,2.361,521,4.542,646,2.753,695,2.438,791,4.544,835,4.542,906,2.629,907,2.629,908,2.438,909,2.629,952,2.907,1023,3.115,1024,3.115,1038,2.907,1055,2.907,1418,3.429,1419,3.429,1420,3.429,1421,3.429,1422,3.429,1423,3.115,1424,5.295,1425,5.359,1426,3.429,1427,3.429,1428,3.429,1429,3.429,1430,3.429,1431,3.429,1432,3.429,1433,3.429,1434,3.429,1435,3.115,1436,3.429,1437,3.429,1438,3.429,1439,3.115]],["t/1246",[0,0.918,1,0.611,37,2.852,39,2.347,41,1.325,47,3.336,195,1.377,665,3.006,1258,5.571,1259,4.846,1440,3.812,1441,5.965,1442,5.965,1443,7.066,1444,8.645,1445,3.312,1446,4.083,1447,4.083,1448,4.083,1449,4.083,1450,5.975,1451,6.245,1452,7.066,1453,7.066,1454,3.609,1455,4.083,1456,4.083,1457,4.083,1458,4.083,1459,4.083,1460,5.975]],["t/1248",[0,0.902,1,0.597,3,2.124,22,1.755,25,2.26,47,2.628,52,2.582,1258,6.176,1292,7.278,1461,7.744]],["t/1250",[0,0.789,1,0.606,3,2.462,22,1.605,23,4.493,25,2.067,47,2.403,454,3.697,497,3.06,1292,5.43,1462,7.082,1463,6.432,1464,8.977,1465,7.082,1466,7.082,1467,7.082,1468,7.082]],["t/1252",[0,0.738,1,0.611,26,4.398,27,3.139,41,1.431,47,2.167,51,4.456,61,1.578,86,2.86,101,4.156,225,5.415,267,1.824,879,5.801,1258,5.464,1263,5.415,1463,7.627,1469,6.387,1470,6.387,1471,6.387,1472,6.387,1473,5.801,1474,6.387]],["t/1254",[94,2.051,371,6.245,372,6.027,373,6.804,387,5.492,852,6.718,1168,5.883,1245,5.883,1258,5.515,1259,4.772,1261,6.245,1264,5.492,1281,6.804,1386,5.883,1441,4.967,1442,4.967,1443,5.883,1444,7.698,1452,5.883,1453,5.883,1475,6.477,1476,6.477,1477,6.477,1478,6.477,1479,6.477,1480,6.477,1481,7.698,1482,6.477,1483,6.477,1484,6.477,1485,6.477,1486,6.477,1487,6.477,1488,6.477]],["t/1256",[0,0.803,1,0.547]],["t/1258",[0,0.542,1,0.607,37,5.207,39,3.221,41,1.051,195,2.515,1258,5.341,1283,5.232,1286,5.232,1292,4.731,1440,6.96,1441,7.072,1442,7.072,1445,4.546,1446,5.604,1447,5.604,1451,7.405,1454,4.953,1455,5.604,1456,5.604,1489,6.17,1490,8.208,1491,6.17]],["t/1260",[0,0.893,1,0.602,39,3.506,41,1.478,47,2.279,195,2.058,1258,5.646,1440,5.695,1441,7.371,1442,7.371,1448,6.1,1449,6.1,1451,7.717,1457,6.1,1458,6.1,1459,6.1]],["t/1262",[1,0.583,39,4.299,665,5.506,1258,5.358,1259,6.067,1441,6.314,1442,6.314,1450,7.479,1451,6.61,1460,7.479]],["t/1264",[0,0.765,1,0.581,41,1.483,47,3.455]],["t/1266",[0,0.773,1,0.601,3,2.665,22,1.556,25,2.005,41,1.655,47,2.987,61,1.697,77,4.357,268,5.584,497,2.967,616,6.238,689,3.989,1258,4.469,1263,5.824,1492,6.868,1493,6.868,1494,6.238]],["t/1268",[1,0.609,22,2.085,25,2.686,27,3.621,41,1.568,47,3.123,61,2.274,1292,5.65,1494,6.693,1495,6.248]],["t/1270",[0,0.847,1,0.6,3,2.179,8,3.938,195,2.435,247,6.64,726,5.041,1095,6.738]],["t/1272",[0,0.788,1,0.334,3,1.753,8,3.662,22,1.904,61,1.068,94,1.37,104,2.978,121,1.693,247,5.238,248,2.095,263,2.417,268,2.743,295,1.766,413,2.829,519,1.016,541,1.186,547,2.814,549,3.586,553,3.667,555,4.71,556,2.679,564,3.472,577,2.463,579,3.667,604,1.986,607,3.316,611,4.71,647,2.381,812,3.186,839,3.667,1005,3.667,1043,1.336,1094,3.316,1101,4.403,1181,2.978,1308,3.316,1312,1.747,1331,3.316,1341,2.374,1481,3.928,1496,2.189,1497,3.928,1498,3.928,1499,3.667,1500,3.928,1501,3.316,1502,3.235,1503,3.667,1504,4.324,1505,1.347,1506,4.324,1507,5.807,1508,4.324,1509,4.324,1510,5.409,1511,3.928,1512,4.324,1513,3.667,1514,3.316,1515,3.075,1516,4.324,1517,4.324,1518,3.472,1519,4.324,1520,3.472,1521,3.928,1522,4.324,1523,4.324,1524,3.667,1525,3.641,1526,2.814,1527,3.928,1528,3.075,1529,1.805,1530,4.71,1531,3.928,1532,4.324,1533,4.324,1534,4.324,1535,4.324,1536,3.075,1537,3.928,1538,3.667,1539,4.324,1540,3.928]],["t/1274",[195,2.569,525,5.607,549,3.954,556,5.194,611,6.179,1501,6.43,1502,4.244,1530,6.179,1541,8.386,1542,7.617,1543,2.95,1544,8.386]],["t/1276",[0,0.569,52,2.826,98,1.763,122,3.138,248,4.107,260,1.577,298,4.461,354,3.762,463,2.474,519,1.521,524,4.461,525,6.317,556,4.012,591,4.606,607,6.499,749,5.492,1043,2.001,1155,5.492,1346,4.967,1473,5.883,1502,3.278,1543,2.982,1545,6.477,1546,6.477,1547,6.477,1548,6.477,1549,5.883,1550,8.475,1551,8.475,1552,6.477,1553,6.477,1554,6.477,1555,6.477,1556,6.477,1557,6.477]],["t/1278",[0,0.852,8,2.437,17,3.466,22,1.819,41,1.017,61,1.983,98,1.624,122,3.889,227,3.991,247,4.11,248,4.395,295,3.278,413,4.292,454,4.191,486,2.159,549,2.814,647,2.989,733,5.618,1020,5.421,1312,2.411,1315,2.723,1337,5.06,1340,4.791,1350,4.791,1501,4.576,1502,3.02,1503,5.06,1510,4.244,1513,5.06,1530,4.397,1538,5.06,1558,5.968,1559,5.421,1560,5.968,1561,5.421,1562,5.06,1563,5.968]],["t/1280",[0,0.342,1,0.416,3,0.35,8,2.559,17,0.741,22,0.881,24,2.679,29,0.727,41,0.394,61,1.358,63,0.81,87,2.904,88,3.924,93,1.908,94,2.336,98,0.629,99,1.076,108,1.787,111,3.533,122,0.618,211,2.119,237,1.082,239,4.54,241,5.139,242,4.324,247,0.879,248,1.535,249,3.259,255,2.062,263,1.292,267,0.277,268,0.81,295,1.589,319,2.28,356,0.732,367,0.602,395,2.983,401,2.43,408,2.766,413,2.915,418,0.853,491,1.023,519,0.744,548,0.495,549,1.09,556,0.791,564,1.025,565,1.146,578,1.546,585,2.253,586,1.082,607,1.773,635,1.025,647,1.448,733,0.791,734,0.81,750,3.733,777,2.866,780,3.123,812,0.94,867,1.58,1060,1.159,1088,4.994,1089,2.544,1090,3.533,1091,5.984,1092,4.994,1093,4.741,1094,1.773,1096,1.96,1101,0.879,1155,1.082,1179,0.94,1236,0.618,1307,1.96,1308,4.528,1312,0.934,1314,1.082,1315,0.649,1335,1.082,1336,1.159,1337,1.082,1338,1.159,1339,1.159,1340,1.856,1341,3.019,1342,1.159,1346,0.979,1350,7.161,1356,5.364,1359,4.092,1362,1.082,1363,1.159,1367,1.96,1495,1.082,1502,0.646,1505,0.72,1515,2.253,1518,2.544,1520,1.856,1521,1.159,1530,1.703,1540,1.159,1559,2.878,1562,1.082,1564,1.856,1565,2.1,1566,1.09,1567,1.276,1568,1.082,1569,1.276,1570,2.878,1571,1.038,1572,2.1,1573,1.276,1574,1.159,1575,2.1,1576,1.276,1577,1.159,1578,2.1,1579,1.276,1580,3.89,1581,1.276,1582,3.89,1583,1.276,1584,2.312,1585,1.276,1586,2.43,1587,1.96,1588,2.312,1589,2.312,1590,2.312,1591,2.1,1592,1.773,1593,2.312,1594,2.878,1595,1.276,1596,2.878,1597,1.276,1598,2.878,1599,1.276,1600,3.89,1601,7.153,1602,2.1,1603,1.276,1604,6.588,1605,3.89,1606,3.533,1607,5.036,1608,5.036,1609,5.036,1610,3.89,1611,2.312,1612,1.856,1613,2.312,1614,1.276,1615,1.276,1616,0.94,1617,1.276,1618,2.312,1619,2.312,1620,2.1,1621,1.276,1622,1.276,1623,1.276,1624,1.276,1625,2.312,1626,3.169,1627,3.169,1628,3.169,1629,2.312,1630,1.276,1631,1.276,1632,1.276,1633,1.276,1634,2.878,1635,2.878,1636,2.878,1637,2.878,1638,2.878,1639,1.96,1640,0.94,1641,1.276]],["t/1282",[0,0.219,1,0.43,8,1.02,11,4.836,22,0.566,23,5.591,24,7.061,41,1.172,61,0.617,63,3.933,87,3.979,88,3.608,93,2.475,94,2.608,101,4.477,122,2.011,123,2.384,211,2.775,239,4.69,241,4.69,242,4.69,244,1.513,248,2.011,249,4.881,256,1.915,268,1.585,281,1.585,324,1.625,367,4.029,413,3.48,497,1.079,510,1.547,541,0.685,565,1.501,578,1.67,585,1.776,591,1.776,698,1.513,733,4.872,797,1.776,811,3.332,827,1.84,839,2.118,919,2.118,1043,1.644,1101,2.858,1179,1.84,1266,2.118,1341,1.371,1369,2.118,1502,1.264,1518,6.611,1520,2.005,1529,1.043,1564,2.005,1570,2.269,1571,0.818,1572,2.269,1616,1.84,1634,7.48,1635,2.269,1636,7.48,1637,2.269,1638,7.48,1642,2.498,1643,2.498,1644,4.15,1645,2.118,1646,2.498,1647,2.269,1648,4.15,1649,4.15,1650,6.2,1651,7.866,1652,1.092,1653,2.498,1654,2.498,1655,2.498,1656,2.498,1657,4.15,1658,4.15,1659,2.498,1660,2.498,1661,2.498,1662,2.498]],["t/1284",[0,0.758,1,0.474,3,1.083,8,1.613,18,1.162,19,3.028,41,1.369,51,2.096,85,4.363,88,1.667,91,3.17,93,2.326,104,2.72,122,3.491,239,2.249,241,2.249,242,3.402,248,1.914,290,3.587,291,3.023,293,2.168,294,2.208,298,2.72,305,3.171,356,2.544,413,4.294,454,4.738,486,2.607,519,0.927,549,4.067,556,2.446,575,2.72,577,2.249,578,4.818,631,2.641,639,3.028,698,2.392,816,3.028,860,1.862,1043,1.22,1169,3.587,1315,2.254,1316,5.065,1317,5.065,1341,2.168,1495,3.349,1496,1.999,1502,3.023,1505,1.23,1524,3.349,1528,2.808,1536,2.808,1538,3.349,1561,3.587,1568,3.349,1601,3.349,1663,3.349,1664,3.349,1665,3.949,1666,1.429,1667,1.706,1668,3.587,1669,3.949,1670,2.57,1671,3.028,1672,3.171,1673,3.949,1674,3.171,1675,3.349,1676,5.065,1677,3.949,1678,2.57,1679,3.949,1680,3.949,1681,3.949,1682,2.392,1683,3.949,1684,5.974,1685,5.974,1686,3.949]],["t/1286",[3,1.122,18,2.406,22,1.668,52,2.045,61,1.515,93,2.368,118,1.955,248,2.972,254,4.963,295,1.671,319,4.138,339,3.715,356,1.943,413,2.714,454,5.121,491,2.714,497,2.65,508,3.255,519,0.961,524,4.225,525,4.102,548,1.585,549,2.892,565,2.22,567,3.8,631,4.102,653,3.492,812,3.014,1043,1.264,1094,3.137,1307,3.469,1312,2.478,1314,3.469,1315,2.868,1316,5.202,1317,5.202,1318,5.202,1319,5.202,1320,5.202,1321,5.572,1322,5.202,1323,4.704,1324,4.925,1325,5.202,1326,4.362,1327,5.202,1328,5.202,1329,5.202,1330,4.362,1331,4.704,1332,5.572,1499,3.469,1520,3.285,1564,3.285,1578,3.716,1616,3.014,1687,0.763,1688,4.091]],["t/1288",[0,0.191,1,0.543,8,1.506,15,2.365,18,2.032,22,1.09,25,0.634,26,1.495,29,2.101,42,1.995,43,0.927,48,0.841,52,2.118,61,0.536,62,0.841,93,2.133,118,1.762,120,1.236,180,1.543,195,1.737,213,3.299,227,2.466,248,1.052,267,0.801,271,1.213,292,0.886,295,0.886,324,1.412,330,1.54,345,1.599,356,0.687,361,1.192,367,1.739,391,1.895,396,1.495,419,1.543,486,0.785,497,0.938,500,2.127,524,1.495,525,1.451,531,2.208,535,1.543,541,1.894,560,1.412,565,0.785,566,1.287,575,1.495,583,2.945,585,1.543,595,1.742,605,1.082,630,1.599,632,1.895,647,1.79,653,2.713,689,1.261,699,2.797,756,1.84,770,2.479,795,1.023,801,2.821,812,1.599,825,1.672,860,1.023,867,1.839,1043,1.139,1181,2.54,1236,1.052,1312,0.877,1326,1.543,1502,1.098,1529,0.906,1574,1.971,1577,1.971,1663,1.84,1664,1.84,1676,1.84,1689,2.171,1690,1.84,1691,2.171,1692,1.133,1693,1.133,1694,1.839,1695,1.839,1696,2.171,1697,2.171,1698,1.133,1699,3.214,1700,1.133,1701,3.122,1702,2.171,1703,2.171,1704,1.133,1705,2.171,1706,1.133,1707,2.4,1708,1.133,1709,1.133,1710,4.807,1711,2.171,1712,1.133,1713,1.133,1714,1.925,1715,1.133,1716,1.925,1717,2.298,1718,2.171,1719,1.133,1720,1.133,1721,3.316,1722,1.133,1723,1.133,1724,1.133,1725,2.51,1726,1.925,1727,1.133,1728,2.171,1729,2.171,1730,2.363,1731,2.171,1732,2.363,1733,1.067,1734,1.133,1735,2.363,1736,3.688,1737,1.84,1738,2.171,1739,1.664,1740,1.664,1741,2.171,1742,1.664,1743,1.664,1744,2.171,1745,2.171,1746,2.171,1747,2.171,1748,2.171,1749,2.171,1750,1.742,1751,2.171,1752,2.171,1753,1.84,1754,2.171,1755,1.84,1756,1.742,1757,2.171,1758,2.171,1759,1.84,1760,2.171,1761,1.84,1762,1.84,1763,1.84,1764,2.171,1765,2.171,1766,2.171,1767,2.171,1768,1.84,1769,3.127,1770,1.84,1771,1.84,1772,1.84,1773,1.84,1774,1.84,1775,1.84,1776,2.171,1777,1.84,1778,3.688,1779,1.84,1780,1.971,1781,2.171,1782,1.742,1783,2.171,1784,1.84,1785,1.84,1786,1.84,1787,3.127,1788,1.84,1789,3.688,1790,1.84]],["t/1290",[0,0.83,22,1.74,248,3.721,268,4.871,604,3.527,716,5.888,1009,5.288,1346,5.888,1505,2.941,1510,5.46,1511,6.975,1566,3.62,1667,3.318,1791,7.679,1792,6.975,1793,7.679,1794,7.679,1795,7.679,1796,7.679,1797,7.679]],["t/1292",[0,0.542,22,1.86,41,1.051,87,3.894,93,1.787,122,3.977,254,3.329,260,1.502,263,4.588,295,2.52,356,1.954,413,2.73,463,2.396,565,2.232,608,4.546,816,4.731,860,3.87,1043,1.906,1312,3.726,1323,6.294,1340,4.953,1347,4.388,1505,2.556,1564,4.953,1571,2.022,1647,5.604,1652,3.588,1671,4.731,1682,3.737,1687,1.15,1798,7.455,1799,3.657,1800,6.002,1801,5.604,1802,6.17,1803,6.17]],["t/1294",[0,0.501,22,2.158,41,0.972,61,2.541,93,1.652,94,1.807,98,1.553,254,3.079,255,3.713,260,1.389,263,4.353,264,2.69,295,2.33,356,1.807,413,3.445,463,2.587,541,1.565,556,3.535,565,2.065,647,3.301,698,5.368,860,3.671,1043,1.763,1308,5.971,1312,3.146,1505,2.425,1536,4.058,1571,1.87,1652,2.495,1682,3.456,1687,1.064,1799,3.382,1800,3.713,1804,5.183,1805,4.838,1806,5.706,1807,5.706,1808,5.706,1809,5.183,1810,5.706,1811,5.706,1812,5.706,1813,5.183]],["t/1296",[0,0.528,3,2.211,34,4.683,41,1.374,93,1.74,94,2.553,254,3.241,260,1.463,292,2.453,295,3.293,356,1.902,454,4.209,463,2.656,486,2.173,577,4.592,647,2.237,716,4.606,720,4.823,812,4.426,860,4.291,1043,1.856,1315,2.73,1496,3.04,1505,1.871,1525,3.422,1571,1.968,1652,2.626,1682,3.638,1687,1.12,1799,3.561,1814,6.007,1815,6.007,1816,6.007,1817,6.007,1818,6.007,1819,6.007,1820,6.007,1821,5.457,1822,6.007,1823,5.457,1824,5.094]],["t/1298",[0,0.573,41,1.112,93,1.889,219,5.926,254,3.52,260,1.588,356,2.066,454,4.949,463,2.485,692,5.237,830,5.237,832,5.237,860,4.469,1043,2.015,1180,5.926,1315,2.39,1454,7.61,1502,3.302,1505,2.032,1525,3.716,1571,2.138,1652,3.722,1682,3.951,1687,1.216,1799,3.867,1825,5.926,1826,7.734,1827,6.524,1828,5.532,1829,5.532,1830,5.926,1831,5.926,1832,6.524]],["t/1300",[0,0.511,3,1.595,4,4.135,5,4.669,37,5.004,41,0.991,44,3.602,93,1.684,108,2.671,254,3.138,260,1.416,356,1.842,421,4.41,454,5.401,463,2.302,519,2.254,555,4.285,565,2.104,669,4.931,678,6.688,827,4.285,832,4.669,860,4.22,1043,1.796,1151,4.459,1261,4.285,1315,1.632,1347,4.135,1505,1.811,1525,3.312,1571,2.585,1652,3.448,1674,4.669,1682,3.522,1687,1.084,1799,3.447,1828,4.931,1829,4.931,1833,5.282,1834,4.931,1835,5.282,1836,5.282,1837,5.282,1838,5.282]],["t/1302",[0,0.514,3,1.605,4,5.634,5,4.699,37,3.713,41,0.997,44,3.625,93,1.695,108,2.688,254,3.158,260,1.425,356,1.854,421,4.429,454,5.412,463,2.312,519,2.26,555,4.312,565,2.118,669,4.963,678,6.718,827,4.312,832,4.699,860,4.234,1043,1.808,1151,4.488,1261,4.312,1315,1.643,1347,4.162,1505,1.823,1525,3.334,1571,1.918,1652,3.463,1674,4.699,1682,3.545,1687,1.091,1799,3.469,1828,4.963,1829,4.963,1834,4.963,1835,5.316,1836,5.316,1837,5.316,1838,5.316,1839,5.316]],["t/1304",[0,0.456,18,1.526,41,1.436,93,1.502,248,3.531,254,2.798,255,4.743,256,7.009,260,1.263,356,1.642,367,2.445,421,2.899,463,2.811,486,2.637,541,1.422,567,4.515,631,6.112,757,7.009,860,3.973,1043,1.602,1282,4.398,1330,5.183,1505,1.615,1515,3.688,1525,4.8,1571,1.699,1586,3.977,1652,2.267,1668,4.711,1671,3.977,1682,3.141,1687,0.967,1799,3.074,1813,4.711,1840,5.186,1841,5.186,1842,5.186,1843,5.186,1844,8.427,1845,8.427,1846,5.186,1847,5.186,1848,5.186,1849,5.186,1850,5.186,1851,5.186,1852,5.186,1853,5.186,1854,5.186,1855,5.186,1856,4.711]],["t/1306",[0,0.521,1,0.31,18,2.972,41,1.01,48,3.503,93,1.717,195,1.816,254,3.199,260,1.444,295,2.421,319,3.001,340,4.76,356,2.531,367,2.795,463,1.731,565,2.892,566,3.515,631,3.965,647,2.208,653,4.313,697,4.369,707,3.858,830,6.416,837,6.128,860,4.262,949,3.591,1043,1.831,1505,1.847,1529,2.475,1571,2.619,1652,2.592,1682,3.591,1687,1.105,1799,3.515,1821,5.386,1857,7.259,1858,5.929,1859,3.858,1860,5.027]],["t/1308",[0,0.595,3,1.856,195,2.073,260,1.647,463,1.975,486,2.448,491,3.858,508,5.406,548,2.622,549,3.19,565,2.448,577,3.854,699,2.57,795,3.19,797,4.811,842,7.919,860,3.19,1347,6.2,1525,3.854,1528,4.811,1652,2.958,1672,5.432,1675,5.737,1799,4.011,1800,5.673,1861,6.766,1862,6.766,1863,6.766,1864,6.766,1865,6.766,1866,5.432]],["t/1310",[0,0.766,195,2.073,463,1.975,491,3.858,508,5.595,547,4.403,549,4.548,565,3.154,577,4.966,716,5.188,837,5.188,1347,4.811,1501,5.188,1505,2.107,1525,5.495,1528,4.811,1612,5.432,1652,3.812,1687,1.261,1799,4.011,1866,5.432,1867,5.737,1868,5.737,1869,6.146,1870,6.146]],["t/1312",[0,0.505,41,0.978,61,1.932,93,1.663,94,2.816,254,3.098,255,5.089,260,1.904,356,1.819,414,2.248,463,2.283,716,4.403,720,4.61,830,4.61,860,4.193,1043,1.774,1193,3.557,1323,5.997,1324,4.61,1347,5.561,1505,1.788,1525,4.454,1571,1.881,1652,3.419,1672,4.61,1682,3.477,1687,1.07,1799,3.404,1805,4.869,1830,5.216,1834,4.869,1867,4.869,1871,7.103,1872,8.893,1873,8.893,1874,5.742,1875,5.742,1876,5.742,1877,5.742,1878,5.742,1879,5.742,1880,5.742,1881,5.742,1882,3.477,1883,4.869]],["t/1314",[22,2.139,94,2.432,122,3.721,413,3.397,454,4.009,697,5.658,698,4.65,1315,2.155,1505,2.392,1652,3.357,1663,6.511,1664,6.511,1674,6.165,1687,1.431,1799,4.552,1867,6.511,1884,6.975,1885,9.442,1886,7.679,1887,7.679]],["t/1316",[0,0.498,41,0.966,52,2.585,61,2.183,93,1.642,254,3.06,260,1.381,319,2.87,339,6.219,356,1.796,414,2.22,463,1.655,497,3.35,547,3.69,549,4.478,725,4.178,733,5.473,826,5.151,827,4.178,860,4.166,1043,1.752,1330,4.032,1331,4.348,1341,3.113,1502,2.87,1505,1.766,1510,4.032,1571,1.858,1601,4.808,1652,3.39,1671,4.348,1682,3.434,1687,1.057,1799,3.361,1856,8.026,1883,4.808,1888,5.151,1889,5.671,1890,5.671,1891,5.671,1892,5.671,1893,5.671,1894,5.671,1895,5.671,1896,5.671]],["t/1318",[0,0.458,3,2.007,18,3.177,22,1.182,48,2.021,61,2.088,87,3.09,93,2.448,94,1.652,122,2.527,248,4.848,267,1.133,458,6.647,486,1.887,541,1.431,549,2.459,565,2.648,577,4.168,653,4.612,698,3.159,720,4.187,750,2.64,827,3.843,1502,2.64,1505,1.625,1510,3.709,1639,4.423,1640,3.843,1652,2.28,1666,2.648,1667,2.254,1687,0.972,1690,6.205,1799,3.092,1897,3.231,1898,7.318,1899,5.216,1900,4.738,1901,4.738,1902,7.318,1903,5.216,1904,5.216]],["t/1320",[0,0.675,3,2.106,8,3.856,247,6.502,541,2.589,549,3.62,949,4.65,1513,6.511,1566,3.62,1667,3.318,1905,8.576,1906,6.511,1907,7.679,1908,7.679,1909,7.679,1910,2.727,1911,7.679,1912,7.679]],["t/1322",[0,0.48,1,0.618,41,1.477,78,2.854,81,3.114,82,3.386,83,3.24,84,3.114,88,2.308,239,3.114,241,3.114,255,4.92,491,4.344,508,4.599,548,2.118,577,4.306,699,2.076,722,4.965,723,4.965,724,4.965,1335,4.635,1868,4.635,1913,5.467,1914,5.467,1915,5.467,1916,5.467]],["t/1324",[0,0.856,1,0.602,491,4.804,508,5.171]],["t/1326",[1,0.611,3,2.603,61,2.345,1917,8.048,1918,6.993,1919,6.217]],["t/1328",[0,0.905,1,0.585,3,2.684,118,3.332,361,3.829,539,7.136,577,3.972,795,3.288,1591,8.074,1920,6.973,1921,6.973,1922,5.913,1923,6.973,1924,6.973,1925,6.973,1926,6.973,1927,6.973,1928,6.973,1929,6.973,1930,6.973]],["t/1330",[0,0.744,1,0.576,33,5.507,34,4.916,35,6.49,61,2.091,77,5.369,1931,7.688]],["t/1332",[33,6.176,34,5.512,87,3.27,88,3.27,239,4.411,241,4.411,242,4.411,244,4.69,248,3.752,249,4.59,255,5.039,631,5.178,795,3.651,1592,5.938,1918,5.706,1932,7.034,1933,7.034,1934,7.034,1935,7.034]],["t/1334",[1,0.507,33,3.883,34,3.466,61,1.474,86,4.345,87,2.52,88,4.096,118,2.852,120,3.399,122,3.889,123,2.673,239,3.399,241,3.399,242,3.399,244,3.614,248,2.892,249,3.538,275,4.397,321,5.708,421,3.336,453,5.06,510,3.697,1586,6.955,1592,4.576,1882,4.861,1917,6.806,1918,6.683,1936,5.421,1937,5.421,1938,5.421,1939,5.421,1940,5.421,1941,6.806,1942,5.421,1943,5.421,1944,5.421,1945,5.421,1946,5.421]],["t/1336",[0,0.599,1,0.6,3,1.87,61,1.684,86,4.336,94,2.159,122,4.245,321,6.884,510,4.222,1101,4.694,1918,5.023,1919,8.485,1944,6.192,1945,6.192,1947,6.817,1948,6.817,1949,6.817]],["t/1338",[88,3.355,239,4.526,241,4.526,242,4.526,244,4.813,249,4.711,255,5.171,631,5.314,795,3.747,1592,6.093,1918,5.855,1919,7.74,1932,7.218,1933,7.218,1934,7.218,1935,7.218,1941,6.738]],["t/1340",[1,0.49,61,1.578,86,3.761,87,2.696,88,4.208,118,3.052,120,3.638,123,2.86,239,3.638,241,3.638,242,3.638,244,3.868,248,3.094,249,3.786,275,4.706,421,3.57,453,5.415,1586,7.194,1592,4.897,1882,5.085,1917,7.12,1918,6.912,1919,5.127,1936,5.801,1937,5.801,1938,5.801,1939,5.801,1940,5.801,1941,7.955,1942,5.801,1943,5.801,1946,5.801]],["t/1343",[1,0.588,3,2.321,22,1.918,77,5.369,94,2.68,269,5.829,1950,8.464]],["t/1345",[0,0.911,1,0.605,23,6.576,25,1.708,41,1.35,48,3.07,195,1.793,244,4.798,281,5.026,487,3.545,501,3.399,672,4.312,855,4.488,882,6.36,1369,4.963,1371,5.316,1951,5.853,1952,5.316,1953,5.853,1954,5.853,1955,5.853,1956,5.853,1957,8.981,1958,5.853]],["t/1348",[0,0.914,1,0.619,3,2.19,22,2.191,47,1.596,77,6.475,94,3.062,269,6.865,461,5.765,611,3.466,1959,7.252,1960,4.704,1961,4.704,1962,4.704,1963,4.704,1964,4.704]],["t/1350",[1,0.574,22,1.755,86,3.469,94,2.452,269,7.067,321,5.507,797,6.749,1030,7.034,1101,5.333,1587,8.048,1965,7.744,1966,7.744,1967,7.744]],["t/1352",[0,0.581,1,0.587,25,2.181,39,1.797,41,1.464,47,2.915,86,2.961,87,2.269,88,2.269,94,2.72,108,3.037,120,3.766,211,4.996,239,3.766,241,3.766,242,3.061,249,3.919,254,1.857,260,0.838,267,1.436,268,3.409,269,6.846,319,3.346,394,5.606,459,3.701,510,3.329,665,2.302,699,2.041,712,6.006,726,2.183,764,4.121,835,3.701,852,2.448,1404,4.882,1406,4.882,1424,5.999,1435,3.126,1952,3.126,1959,6.006,1968,7.472,1969,10.361,1970,6.612,1971,6.612,1972,5.375,1973,6.612,1974,5.375,1975,3.442,1976,3.442]],["t/1354",[0,0.962,1,0.604,41,1.308,339,4.65,1051,5.888,1128,7.58,1977,9.442]],["t/1356",[0,0.765,1,0.592,41,1.483,47,2.954]],["t/1358",[0,0.759,1,0.61,3,2.627,22,1.511,94,2.111,269,4.591,401,5.112,486,2.412,1009,4.591,1117,5.653,1423,6.056,1424,8.906,1978,6.667,1979,6.667]],["t/1360",[0,0.553,1,0.605,51,3.342,53,5.056,78,4.864,81,5.307,82,5.772,83,5.523,84,5.307,401,4.829,1038,5.34,1055,5.34,1424,6.68,1439,5.721,1980,9.318,1981,9.318,1982,6.298,1983,6.298]],["t/1362",[0,0.957,1,0.607,1009,5.62,1051,6.257]],["t/1364",[0,0.937,1,0.57,18,2.628,41,1.522,47,3.507,51,4.74,85,6.258,91,5.483,291,4.521,333,6.151]],["t/1366",[1,0.55]],["t/1368",[0,0.848,3,2.008,8,3.614,17,1.926,22,2.137,51,1.76,98,0.903,104,3.595,121,2.044,122,1.607,247,6.495,268,4.095,418,1.223,419,2.358,509,2.444,541,2.184,549,2.461,556,2.054,565,1.889,577,2.973,591,2.358,647,2.726,653,1.416,866,3.012,1005,2.812,1009,3.595,1094,2.543,1095,4.426,1193,2.054,1315,2.235,1330,2.358,1346,2.543,1496,1.678,1497,3.012,1498,3.012,1499,6.752,1500,3.012,1501,2.543,1502,1.678,1503,2.812,1505,1.626,1510,2.358,1526,2.158,1527,3.012,1528,2.358,1530,3.846,1549,3.012,1652,1.45,1666,1.889,1667,3.163,1676,2.812,1687,0.973,1792,3.012,1805,2.812,1860,2.812,1882,5.121,1905,8.037,1984,3.317,1985,3.317,1986,3.317,1987,6.456,1988,5.22,1989,3.317,1990,3.317,1991,3.317,1992,3.317,1993,3.317,1994,2.543,1995,2.812,1996,3.317,1997,3.317,1998,3.317,1999,3.317,2000,3.317,2001,3.317,2002,3.317,2003,2.358,2004,0.681,2005,5.22,2006,2.367,2007,3.317,2008,3.317,2009,3.317,2010,3.317,2011,3.317,2012,3.317,2013,3.012,2014,3.317,2015,3.317,2016,3.317,2017,3.317,2018,3.317,2019,3.317,2020,3.317,2021,3.317,2022,3.317,2023,3.012]],["t/1372",[22,1.801,25,2.32,94,2.517,98,2.163,121,3.111,267,1.726,414,3.111,519,1.866,580,3.604,769,4.615,1043,2.455,1053,4.442,1571,2.604,1687,1.481,2004,1.632,2006,3.604,2024,3.079,2025,3.559]],["t/1374",[22,1.801,25,2.32,94,2.517,98,2.163,121,3.111,267,1.726,414,3.111,519,1.866,580,3.604,1043,2.455,1571,2.604,1687,1.481,2004,1.632,2006,3.604,2024,3.079,2025,3.559,2026,4.615,2027,4.711]],["t/1376",[22,2.173,25,2.3,94,2.495,98,2.144,121,3.084,267,1.711,414,3.084,519,1.85,580,3.573,769,4.576,1043,2.433,1053,4.404,1571,2.581,1687,1.468,2004,1.618,2006,3.573,2024,3.053,2028,5.268]],["t/1378",[22,2.173,25,2.3,94,2.495,98,2.144,121,3.084,267,1.711,414,3.084,519,1.85,580,3.573,1043,2.433,1571,2.581,1687,1.468,2004,1.618,2006,3.573,2024,3.053,2026,4.576,2027,4.67,2028,5.268]],["t/1380",[22,1.801,25,2.32,94,2.517,98,2.163,121,3.111,267,1.726,414,3.111,519,1.866,580,3.604,769,4.615,1043,2.455,1053,4.442,1571,2.604,1687,1.481,2004,1.632,2006,3.604,2024,3.079,2029,6.38]],["t/1382",[22,1.801,25,2.32,94,2.517,98,2.163,121,3.111,267,1.726,414,3.111,519,1.866,580,3.604,1043,2.455,1571,2.604,1687,1.481,2004,1.632,2006,3.604,2024,3.079,2026,4.615,2027,4.711,2029,6.38]],["t/1384",[22,1.817,25,2.34,94,2.539,98,2.182,121,3.138,267,1.741,414,3.138,519,1.883,580,3.636,769,4.656,1043,2.476,1053,4.481,1571,2.627,1687,1.494,2004,1.646,2006,3.636,2030,5.361]],["t/1386",[22,1.817,25,2.34,94,2.539,98,2.182,121,3.138,267,1.741,414,3.138,519,1.883,580,3.636,1043,2.476,1571,2.627,1687,1.494,2004,1.646,2006,3.636,2026,4.656,2027,4.752,2030,5.361]],["t/1388",[22,1.817,25,2.34,94,2.539,98,2.182,121,3.138,267,1.741,414,3.138,519,1.883,580,3.636,769,4.656,1043,2.476,1053,4.481,1571,2.627,1687,1.494,2004,1.646,2006,3.636,2031,7.282]],["t/1390",[22,1.817,25,2.34,94,2.539,98,2.182,121,3.138,267,1.741,414,3.138,519,1.883,580,3.636,1043,2.476,1571,2.627,1687,1.494,2004,1.646,2006,3.636,2026,4.656,2027,4.752,2031,7.282]],["t/1392",[0,0.476,1,0.553,12,1.667,15,1.578,39,3.287,41,0.436,42,1.491,93,0.742,98,1.714,99,1.192,108,1.946,117,1.964,121,1.659,195,2.643,209,1.107,235,3.527,260,0.624,267,0.556,320,1.625,322,1.625,330,1.769,356,0.811,398,1.578,414,1.003,421,3.029,422,1.667,444,2.368,463,0.748,497,1.107,511,1.277,515,1.382,519,1.954,541,0.702,565,0.927,578,2.833,583,3.004,647,2.345,699,1.609,745,1.586,747,1.586,750,2.144,801,3.398,815,1.667,818,4.89,860,1.207,949,1.551,1043,0.791,1053,1.432,1193,2.624,1315,1.189,1502,2.144,1505,1.688,1571,0.839,1612,2.056,1652,1.12,1670,1.667,1678,4.539,1682,1.551,1687,0.477,1707,2.757,1859,1.667,1910,0.909,2004,0.87,2032,1.887,2033,2.326,2034,2.833,2035,2.833,2036,1.713,2037,2.833,2038,1.713,2039,2.833,2040,6.33,2041,1.713,2042,1.713,2043,1.676,2044,1.586,2045,1.586,2046,3.623,2047,1.296,2048,1.713,2049,1.013,2050,1.024,2051,2.833,2052,4.211,2053,5.319,2054,2.833,2055,2.833,2056,2.833,2057,3.623,2058,2.833,2059,2.833,2060,2.833,2061,2.833,2062,2.833,2063,2.833,2064,1.713,2065,1.519,2066,1.713,2067,1.713,2068,2.833,2069,1.713,2070,1.432,2071,1.586,2072,1.432]],["t/1394",[1,0.37,41,1.207,98,1.927,117,5.43,121,3.514,195,3.175,235,2.492,267,1.538,414,2.772,421,5.509,422,4.608,578,6.002,860,3.339,1043,2.187,1505,2.206,1571,2.32,1612,5.685,1682,4.289,1687,1.32,2004,1.454,2006,3.212,2026,4.113,2032,5.218,2033,6.432,2073,7.082]],["t/1396",[22,1.817,25,2.34,94,2.539,98,2.182,121,3.138,267,1.741,414,3.138,519,1.883,580,3.636,768,6.147,1043,2.476,1053,4.481,1571,2.627,1687,1.494,2004,1.646,2006,3.636,2074,6.436]],["t/1398",[22,1.556,25,2.005,94,2.175,98,1.869,121,2.689,209,3.803,260,1.672,267,1.492,414,2.689,444,3.839,519,1.613,580,3.115,1043,2.121,1315,1.928,1505,2.139,1571,2.25,1687,1.28,1882,4.159,1910,2.439,2004,1.808,2026,3.989,2027,6.074,2047,3.476,2065,2.462,2070,3.839,2072,3.839,2074,7.067,2075,6.868,2076,4.73,2077,4.884]],["t/1400",[22,1.511,25,1.946,94,2.111,98,1.815,121,2.61,209,3.731,260,1.623,267,1.448,414,2.61,444,3.727,519,1.566,580,3.023,689,3.872,769,5.564,1043,2.059,1053,3.727,1315,1.871,1341,3.66,1505,2.076,1536,6.141,1571,2.184,1687,1.243,1882,4.038,1910,3.067,1994,5.112,2004,1.774,2047,3.374,2065,2.39,2070,3.727,2076,4.591,2078,7.844,2079,6.056,2080,6.056]],["t/1402",[22,1.568,25,2.02,94,2.192,98,1.883,121,2.709,209,3.822,260,1.685,267,1.503,414,2.709,444,3.869,519,1.625,580,3.138,689,4.019,1043,2.138,1315,1.942,1505,2.155,1529,2.889,1571,2.267,1687,1.29,1882,4.191,1910,2.457,2004,1.817,2026,4.019,2027,5.78,2047,3.502,2065,2.48,2070,3.869,2076,4.766,2077,4.921,2078,8.035]],["t/1404",[22,1.511,25,1.946,94,2.111,98,1.815,121,2.61,209,3.731,260,1.623,267,1.448,414,2.61,444,3.727,519,1.566,580,3.023,769,5.564,1043,2.059,1053,3.727,1315,1.871,1341,3.66,1505,2.076,1536,6.141,1571,2.184,1687,1.243,1882,4.038,1910,3.067,1994,5.112,2004,1.774,2047,3.374,2065,2.39,2070,3.727,2076,4.591,2079,6.056,2080,6.056,2081,6.056,2082,8.636]],["t/1406",[22,1.63,25,2.1,94,2.278,98,1.958,121,2.816,209,3.108,260,1.751,267,1.562,414,2.816,519,1.689,580,3.262,629,5.3,1043,2.222,1315,2.019,1505,2.24,1571,2.357,1687,1.341,1910,2.554,2004,1.862,2026,4.178,2027,6.178,2047,3.641,2065,2.578,2072,4.021,2077,5.115,2081,6.534]],["t/1408",[1,0.262,22,1.136,25,1.464,94,1.588,98,1.365,121,1.963,209,2.167,260,1.221,267,1.089,414,1.963,519,1.178,580,2.274,629,3.695,1043,1.549,1315,1.408,1505,1.562,1529,2.094,1571,1.643,1687,0.935,1910,1.781,2004,1.462,2026,2.913,2027,7.079,2047,2.538,2065,1.797,2077,3.566,2083,4.252,2084,5.015,2085,4.555,2086,5.015]],["t/1410",[22,1.725,25,2.223,94,2.411,98,2.072,121,2.981,209,3.29,267,1.654,414,2.981,418,2.808,459,5.244,519,1.788,580,3.453,769,4.423,1043,2.352,1053,4.257,1315,2.137,1571,2.495,1687,1.419,2004,1.564,2047,3.854,2083,6.457,2087,7.615,2088,7.615]],["t/1412",[22,1.725,25,2.223,94,2.411,98,2.072,121,2.981,209,3.29,267,1.654,414,2.981,418,2.808,459,5.244,519,1.788,580,3.453,768,5.839,1043,2.352,1053,4.257,1315,2.137,1571,2.495,1687,1.419,2004,1.564,2047,3.854,2083,6.457,2089,7.615,2090,7.615]],["t/1415",[0,0.599,1,0.506,22,1.545,25,1.99,41,1.161,61,1.684,93,1.974,98,1.855,235,3.082,267,1.481,320,2.615,322,2.615,330,2.846,356,2.159,398,2.538,418,2.514,463,1.99,486,2.466,519,1.601,1043,2.106,1315,1.913,1543,2.398,1666,2.466,1687,1.27,1694,4.368,1695,3.399,2004,1.4,2024,2.641,2025,3.053,2043,2.696,2049,2.696,2050,2.725,2091,2.313]],["t/1417",[1,0.514,22,0.752,25,0.968,27,2.565,41,0.565,48,2.023,61,0.819,87,3.736,99,4.117,108,4.064,119,5.359,209,1.433,216,2.444,235,2.271,260,0.807,267,0.72,271,5.272,281,5.613,327,6.785,330,2.179,486,1.2,511,1.654,519,1.226,549,1.564,566,1.966,571,2.444,604,4.064,778,2.358,1315,0.931,1445,2.444,1496,1.678,1505,1.033,1529,1.385,1543,1.167,1566,1.564,1666,1.2,1687,0.618,1910,1.178,2004,1.072,2024,1.285,2025,1.485,2032,2.444,2065,1.189,2091,1.125,2092,2.812,2093,1.926,2094,2.812,2095,2.444,2096,2.663,2097,2.663,2098,2.663,2099,2.663,2100,7.359,2101,2.663,2102,2.663,2103,2.663,2104,5.878,2105,7.104,2106,7.104,2107,7.104,2108,7.104,2109,2.663,2110,2.663,2111,2.663,2112,2.663,2113,2.663,2114,2.663,2115,2.663,2116,2.663,2117,4.191,2118,2.663,2119,2.663,2120,2.663,2121,2.663,2122,2.663,2123,2.663]],["t/1419",[1,0.523,22,0.754,25,0.972,27,2.573,41,0.567,61,0.822,87,3.741,99,4.123,108,4.07,119,5.366,209,1.438,216,2.453,235,2.277,260,0.81,263,3.617,267,0.723,271,5.278,281,5.621,295,2.643,327,6.794,486,1.204,511,1.66,519,0.782,571,2.453,604,4.07,1312,2.614,1315,0.934,1445,2.453,1505,1.037,1529,2.186,1666,1.204,1687,0.62,1910,1.182,2004,1.075,2024,1.29,2025,1.491,2032,2.453,2065,1.193,2091,1.13,2093,1.933,2095,2.453,2096,2.672,2097,2.672,2098,2.672,2099,2.672,2100,7.369,2101,2.672,2102,2.672,2103,2.672,2104,5.89,2105,7.114,2106,7.114,2107,7.114,2108,7.114,2109,2.672,2110,2.672,2111,2.672,2112,2.672,2113,2.672,2114,2.672,2115,2.672,2116,2.672,2117,4.203,2118,2.672,2119,2.672,2120,2.672,2121,2.672,2122,2.672,2123,2.672,2124,3.329]],["t/1421",[22,1.801,25,2.32,41,1.354,50,5.314,52,2.649,61,1.963,267,1.726,486,2.875,519,1.866,1543,2.796,1666,2.875,1687,1.481,2004,1.632,2006,3.604,2024,3.079,2025,3.559,2091,2.697,2093,4.615]],["t/1423",[0,0.401,1,0.383,3,0.769,8,1.146,15,2.15,18,2.155,22,0.636,25,0.819,41,0.478,42,1.606,43,3.127,52,3.128,61,0.693,62,1.087,93,2.273,98,0.764,123,1.257,129,1.876,195,2.038,213,2.98,235,1.606,260,0.683,264,1.323,267,0.992,292,1.146,295,1.865,320,1.076,322,1.076,330,1.906,343,1.379,356,1.828,367,2.153,391,2.347,398,1.045,463,1.333,486,1.652,500,2.555,519,1.356,531,1.289,541,0.769,548,1.087,567,1.738,583,3.751,604,1.289,605,2.277,632,2.347,647,1.045,653,2.466,657,1.379,699,3.142,725,2.067,735,1.399,736,2.277,770,1.227,782,1.442,795,1.323,801,2.717,825,2.071,867,2.277,1043,0.867,1236,1.359,1312,1.134,1315,0.787,1496,1.42,1505,0.874,1529,1.906,1543,0.987,1566,1.323,1666,1.015,1687,0.523,1692,1.465,1693,1.465,1694,1.399,1695,1.399,1698,1.465,1699,1.305,1700,1.465,1701,2.837,1704,1.465,1706,1.465,1708,1.465,1709,1.465,1712,1.465,1713,1.465,1714,2.384,1715,1.465,1716,2.384,1717,1.341,1719,1.465,1720,1.465,1721,3.823,1722,1.465,1723,1.465,1724,1.465,1725,3.014,1726,2.384,1727,1.465,1730,2.244,1732,1.379,1733,1.379,1734,1.465,1735,2.244,1910,0.996,2004,0.938,2024,1.087,2025,1.257,2043,1.11,2049,1.11,2050,1.122,2065,1.006,2091,0.952,2125,2.806,2126,2.806,2127,1.323,2128,1.323,2129,1.359,2130,1.323,2131,1.323,2132,1.323,2133,1.323,2134,1.323,2135,1.323,2136,1.323,2137,1.359,2138,1.323,2139,1.323,2140,1.489,2141,1.489,2142,1.489,2143,1.489,2144,1.489,2145,1.489,2146,1.399,2147,1.489,2148,1.489,2149,1.489]],["t/1425",[0,0.41,1,0.353,3,0.791,8,1.178,15,2.192,18,2.186,22,0.654,25,0.842,34,1.676,41,0.492,42,1.644,43,3.396,52,3.003,61,0.713,62,1.118,93,2.303,98,0.785,123,1.292,195,2.072,213,3.03,235,1.644,260,0.703,264,1.361,267,1.015,292,1.178,295,1.908,320,1.107,322,1.107,330,1.95,343,1.418,356,1.864,362,2.317,367,2.202,391,2.401,398,1.075,463,0.842,486,1.69,500,2.604,519,1.097,531,1.325,541,0.791,548,1.118,567,1.787,583,3.179,604,1.325,605,2.329,632,2.401,647,1.075,653,2.513,657,1.418,699,2.569,725,2.126,735,1.439,736,2.329,770,1.262,782,1.483,795,1.361,801,3.034,825,3.37,867,2.329,978,2.621,1236,1.398,1312,1.166,1315,0.81,1496,1.46,1505,0.899,1529,1.205,1543,1.015,1566,1.361,1666,1.044,1687,0.538,1692,1.507,1693,1.507,1694,1.439,1695,1.439,1698,1.507,1699,1.343,1700,1.507,1701,2.892,1704,1.507,1706,1.507,1708,1.507,1709,1.507,1712,1.507,1713,1.507,1714,2.439,1715,1.507,1716,2.439,1717,1.379,1719,1.507,1720,1.507,1721,3.879,1722,1.507,1723,1.507,1724,1.507,1725,3.073,1726,2.439,1727,1.507,1730,2.296,1732,1.418,1733,1.418,1734,1.507,1735,2.296,1910,1.025,2004,0.959,2024,1.118,2025,1.292,2043,1.141,2049,1.141,2050,1.154,2065,1.034,2091,0.979,2127,1.361,2128,1.361,2129,1.398,2130,1.361,2131,1.361,2132,1.361,2133,1.361,2134,1.361,2135,1.361,2136,1.361,2137,1.398,2138,1.361,2139,1.361,2140,1.531,2141,1.531,2142,1.531,2143,1.531,2144,1.531,2145,1.531,2146,1.439,2147,1.531,2148,1.531,2149,1.531,2150,2.886]],["t/1427",[0,0.425,1,0.362,8,1.229,15,1.799,18,2.234,22,0.682,25,0.879,41,0.513,42,1.7,43,1.285,52,2.311,61,0.744,62,1.166,93,2.347,98,0.819,123,1.348,195,2.124,213,3.105,235,1.7,260,1.177,264,1.419,267,1.05,292,1.229,295,1.974,320,1.154,322,1.154,330,2.018,343,1.479,356,1.53,367,2.278,391,2.483,398,1.121,463,0.879,486,1.748,500,2.679,519,0.707,531,1.382,541,0.825,548,1.166,583,3.24,604,1.382,605,2.41,632,2.483,647,1.121,653,2.586,657,1.479,699,2.633,735,1.501,736,2.41,737,3.841,770,1.316,782,1.547,795,1.419,801,2.831,805,2.734,825,3.443,867,2.41,1043,0.93,1236,1.458,1312,1.216,1315,0.845,1505,0.937,1543,1.059,1571,0.986,1640,2.218,1666,1.089,1687,0.561,1692,1.571,1693,1.571,1694,1.501,1695,1.501,1698,1.571,1699,1.4,1700,1.571,1701,2.976,1704,1.571,1706,1.571,1708,1.571,1709,1.571,1712,1.571,1713,1.571,1714,2.523,1715,1.571,1716,2.523,1717,1.438,1719,1.571,1720,1.571,1721,3.963,1722,1.571,1723,1.571,1724,1.571,1725,3.161,1726,2.523,1727,1.571,1730,2.375,1732,1.479,1733,1.479,1734,1.571,1735,2.375,1910,1.069,2004,0.992,2024,1.166,2025,1.348,2043,1.191,2049,1.191,2050,1.203,2065,1.079,2091,1.021,2127,1.419,2128,1.419,2129,1.458,2130,1.419,2131,1.419,2132,1.419,2133,1.419,2134,1.419,2135,1.419,2136,1.419,2137,1.458,2138,1.419,2139,1.419,2140,1.597,2141,1.597,2142,1.597,2143,1.597,2144,1.597,2145,1.597,2146,1.501,2147,1.597,2148,1.597,2149,1.597,2151,4.39,2152,3.01]],["t/1429",[0,0.428,1,0.364,8,1.241,15,1.814,17,1.766,18,2.245,22,0.689,25,0.887,41,0.518,42,1.714,43,1.298,52,2.324,61,0.751,62,1.178,93,2.358,98,0.827,123,1.362,195,2.136,213,3.123,235,1.714,260,1.186,264,1.433,267,1.514,292,1.241,295,1.989,320,1.166,322,1.166,330,2.034,343,1.494,356,1.543,367,2.297,391,2.503,398,1.132,463,0.887,486,1.762,500,2.697,519,0.714,531,1.396,541,0.834,548,1.178,583,3.255,604,1.396,605,2.429,632,2.503,647,1.132,653,2.603,657,1.494,699,2.648,735,1.516,736,2.429,737,3.867,770,1.329,782,1.562,795,1.433,801,2.847,825,3.46,867,2.429,1236,1.473,1312,1.228,1315,0.853,1505,0.947,1543,1.069,1666,1.1,1687,0.567,1692,1.587,1693,1.587,1694,1.516,1695,1.516,1698,2.543,1699,1.414,1700,1.587,1701,2.996,1704,1.587,1706,1.587,1708,1.587,1709,1.587,1712,1.587,1713,1.587,1714,2.543,1715,1.587,1716,2.543,1717,1.453,1719,1.587,1720,1.587,1721,3.983,1722,1.587,1723,1.587,1724,1.587,1725,3.182,1726,2.543,1727,1.587,1730,2.394,1732,1.494,1733,1.494,1734,1.587,1735,2.394,1910,1.079,2004,1,2024,1.178,2025,1.362,2043,1.202,2049,1.202,2050,1.215,2065,1.09,2091,1.032,2127,1.433,2128,1.433,2129,1.473,2130,1.433,2131,1.433,2132,1.433,2133,1.433,2134,1.433,2135,1.433,2136,1.433,2137,1.473,2138,1.433,2139,1.433,2140,1.613,2141,1.613,2142,1.613,2143,1.613,2144,1.613,2145,1.613,2146,1.516,2147,1.613,2148,1.613,2149,1.613]],["t/1431",[0,0.427,1,0.364,8,1.237,15,1.809,17,1.76,18,2.241,22,0.687,25,0.884,41,0.516,42,1.709,43,1.294,52,2.32,61,0.748,62,1.174,93,2.354,98,0.825,123,1.357,195,2.132,213,3.117,235,1.709,260,1.183,264,1.428,267,1.055,292,1.237,295,1.984,320,1.162,322,1.162,330,2.028,343,1.489,356,1.539,367,2.291,391,2.497,398,1.128,463,0.884,486,1.758,500,2.691,519,0.711,531,1.392,541,0.831,548,1.174,583,3.25,604,1.392,605,2.422,632,2.497,647,1.128,653,2.597,657,1.489,699,2.643,735,1.511,736,2.422,737,3.858,770,1.324,782,1.557,795,1.428,801,2.842,825,3.454,867,2.422,1236,1.468,1312,1.224,1315,0.85,1351,4.413,1505,0.944,1543,1.066,1571,0.993,1666,1.096,1687,0.565,1692,1.582,1693,1.582,1694,1.511,1695,1.511,1698,2.536,1699,1.41,1700,1.582,1701,2.989,1704,1.582,1706,1.582,1708,1.582,1709,1.582,1712,1.582,1713,1.582,1714,2.536,1715,1.582,1716,2.536,1717,1.448,1719,1.582,1720,1.582,1721,3.976,1722,1.582,1723,1.582,1724,1.582,1725,3.175,1726,2.536,1727,1.582,1730,2.388,1732,1.489,1733,1.489,1734,1.582,1735,2.388,1910,1.076,2004,0.998,2024,1.174,2025,1.357,2043,1.198,2049,1.198,2050,1.211,2065,1.086,2091,1.028,2127,1.428,2128,1.428,2129,1.468,2130,1.428,2131,1.428,2132,1.428,2133,1.428,2134,1.428,2135,1.428,2136,1.428,2137,1.468,2138,1.428,2139,1.428,2140,1.608,2141,1.608,2142,1.608,2143,1.608,2144,1.608,2145,1.608,2146,1.511,2147,1.608,2148,1.608,2149,1.608]],["t/1433",[0,0.419,1,0.359,3,0.812,8,1.209,15,1.776,18,2.215,22,0.671,41,0.504,42,1.678,43,1.264,52,2.289,61,0.731,62,1.147,93,2.33,98,0.806,123,1.326,195,2.104,213,3.075,235,1.678,256,2.27,260,0.721,263,2.666,264,1.396,267,0.643,292,1.209,295,3.075,320,1.136,322,1.136,330,1.991,343,1.455,356,1.51,367,2.249,391,2.451,398,1.102,418,1.092,463,1.392,486,1.726,500,2.65,519,1.12,531,1.36,541,0.812,548,1.848,549,1.396,583,3.216,604,1.36,605,2.378,632,2.451,647,1.102,653,2.558,657,1.455,699,2.608,735,1.476,736,2.378,770,1.294,782,1.522,795,1.396,801,2.804,825,1.343,867,2.378,1043,0.915,1236,1.435,1312,3.042,1315,0.831,1496,1.498,1543,1.042,1566,1.396,1666,1.071,1687,0.552,1692,1.546,1693,1.546,1694,1.476,1695,1.476,1698,1.546,1699,1.378,1700,1.546,1701,2.943,1704,1.546,1706,1.546,1708,1.546,1709,1.546,1712,1.546,1713,1.546,1714,2.49,1715,1.546,1716,2.49,1717,1.415,1719,1.546,1720,1.546,1721,3.93,1722,1.546,1723,1.546,1724,1.546,1725,3.126,1726,2.49,1727,1.546,1730,2.344,1732,1.455,1733,1.455,1734,1.546,1735,2.344,1910,1.051,2004,0.979,2024,1.147,2025,1.326,2043,1.171,2049,1.171,2050,1.184,2065,1.061,2091,1.005,2127,1.396,2128,1.396,2129,1.435,2130,1.396,2131,1.396,2132,1.396,2133,1.396,2134,1.396,2135,1.396,2136,1.396,2137,1.435,2138,1.396,2139,1.396,2140,1.571,2141,1.571,2142,1.571,2143,1.571,2144,1.571,2145,1.571,2146,1.476,2147,1.571,2148,1.571,2149,1.571,2153,2.689,2154,2.961,2155,2.961,2156,2.961]],["t/1435",[0,0.42,1,0.394,8,1.213,15,1.781,17,1.725,18,2.219,22,0.673,25,0.867,41,0.506,42,1.682,43,1.269,52,2.294,61,0.734,62,1.151,93,2.333,98,0.808,123,1.33,195,2.108,213,3.081,235,1.682,260,1.164,263,3.846,264,1.4,267,1.039,292,1.213,295,3.291,320,1.139,322,1.139,330,1.996,343,1.46,356,1.514,367,2.254,391,2.457,398,1.106,463,0.867,486,1.73,500,2.656,519,0.698,531,1.364,541,0.815,548,1.151,583,3.221,604,1.364,605,2.384,632,2.457,647,1.106,653,2.563,657,1.46,699,2.613,735,1.481,736,2.384,770,1.299,782,1.526,795,1.4,801,2.81,825,1.347,867,2.384,1236,1.439,1312,3.047,1315,0.834,1505,0.925,1529,1.24,1543,1.045,1666,1.075,1687,0.554,1692,1.551,1693,1.551,1694,1.481,1695,1.481,1698,1.551,1699,1.382,1700,1.551,1701,2.95,1704,1.551,1706,1.551,1708,1.551,1709,1.551,1712,1.551,1713,1.551,1714,2.496,1715,1.551,1716,2.496,1717,1.419,1719,1.551,1720,1.551,1721,3.937,1722,1.551,1723,1.551,1724,1.551,1725,3.133,1726,2.496,1727,1.551,1730,2.35,1732,1.46,1733,1.46,1734,1.551,1735,2.35,1910,1.055,2004,0.982,2024,1.151,2025,1.33,2043,1.175,2049,1.175,2050,1.187,2065,1.065,2091,1.008,2093,1.725,2127,1.4,2128,1.4,2129,1.439,2130,1.4,2131,1.4,2132,1.4,2133,1.4,2134,1.4,2135,1.4,2136,1.4,2137,1.439,2138,1.4,2139,1.4,2140,1.576,2141,1.576,2142,1.576,2143,1.576,2144,1.576,2145,1.576,2146,1.481,2147,1.576,2148,1.576,2149,1.576,2157,4.782]],["t/1437",[1,0.515,17,1.933,22,0.754,25,0.972,27,2.573,41,0.567,61,0.822,87,3.741,99,4.123,108,4.07,119,5.366,209,1.438,216,2.453,235,2.277,260,0.81,263,2.927,267,0.723,271,5.278,281,5.621,295,2.643,327,6.794,418,1.228,463,0.972,486,1.204,511,1.66,519,0.782,571,2.453,604,4.07,1312,2.614,1315,0.934,1445,2.453,1529,1.39,1543,1.171,1666,1.204,1687,0.62,1910,1.182,2004,1.075,2024,1.29,2025,1.491,2032,2.453,2065,1.193,2091,1.13,2095,2.453,2096,2.672,2097,2.672,2098,2.672,2099,2.672,2100,7.369,2101,2.672,2102,2.672,2103,2.672,2104,5.89,2105,7.114,2106,7.114,2107,7.114,2108,7.114,2109,2.672,2110,2.672,2111,2.672,2112,2.672,2113,2.672,2114,2.672,2115,2.672,2116,2.672,2117,4.203,2118,2.672,2119,2.672,2120,2.672,2121,2.672,2122,2.672,2123,2.672,2158,3.329,2159,3.329]],["t/1439",[0,0.415,1,0.391,8,1.194,15,1.758,17,1.698,18,2.201,22,0.662,25,0.853,41,0.498,42,1.661,43,1.248,52,2.272,61,0.722,62,1.133,93,2.316,98,0.795,123,1.309,195,2.088,213,3.052,235,1.661,260,0.712,263,3.81,264,1.378,267,1.025,292,1.194,295,3.437,320,1.121,322,1.121,330,1.97,343,1.436,356,1.495,367,2.225,391,2.426,398,1.088,418,1.078,463,0.853,486,1.708,500,2.627,519,0.686,531,1.342,541,0.802,548,1.133,583,3.197,604,1.342,605,2.353,632,2.426,647,1.088,653,2.535,657,1.436,699,2.588,735,1.457,736,2.353,770,1.278,782,1.502,795,1.378,801,2.783,825,1.325,867,2.353,1236,1.416,1308,3.619,1312,3.232,1315,0.82,1543,1.028,1616,2.153,1645,2.478,1666,1.057,1687,0.545,1692,1.526,1693,1.526,1694,1.457,1695,1.457,1698,1.526,1699,1.36,1700,1.526,1701,2.917,1704,1.526,1706,1.526,1708,1.526,1709,1.526,1712,1.526,1713,1.526,1714,2.464,1715,1.526,1716,2.464,1717,1.397,1719,1.526,1720,1.526,1721,3.905,1722,1.526,1723,1.526,1724,1.526,1725,3.099,1726,2.464,1727,1.526,1730,2.32,1732,1.436,1733,1.436,1734,1.526,1735,2.32,1910,1.038,2004,0.969,2024,1.133,2025,1.309,2043,1.156,2049,1.156,2050,1.168,2065,1.048,2091,0.992,2127,1.378,2128,1.378,2129,1.416,2130,1.378,2131,1.378,2132,1.378,2133,1.378,2134,1.378,2135,1.378,2136,1.378,2137,1.416,2138,1.378,2139,1.378,2140,1.551,2141,1.551,2142,1.551,2143,1.551,2144,1.551,2145,1.551,2146,1.457,2147,1.551,2148,1.551,2149,1.551,2160,4.72,2161,2.923,2162,2.923]],["t/1441",[0,0.414,1,0.39,8,1.19,15,1.753,17,1.692,18,2.197,22,0.66,25,0.85,41,0.496,42,1.656,43,1.244,52,2.268,61,0.72,62,1.129,93,2.313,98,0.793,122,1.412,123,1.305,195,2.084,213,3.047,235,2.084,260,1.146,263,3.311,264,1.374,266,2.87,267,1.022,292,1.19,295,1.923,305,2.339,320,1.118,322,1.118,330,1.965,343,1.432,356,1.491,367,2.22,391,2.419,398,1.085,463,0.85,486,1.703,500,2.621,511,1.453,519,0.684,531,1.338,541,0.799,548,1.129,583,3.193,604,1.338,605,2.347,632,2.419,635,3.779,647,1.085,653,2.53,657,1.432,699,2.583,735,1.453,736,2.347,770,1.274,782,1.497,795,1.374,801,2.778,825,1.321,867,2.347,1236,1.412,1312,2.748,1315,0.818,1496,1.474,1505,0.907,1529,1.965,1543,1.025,1566,1.374,1652,1.274,1666,1.054,1687,0.543,1692,1.521,1693,1.521,1694,1.453,1695,1.453,1698,1.521,1699,1.356,1700,1.521,1701,2.911,1704,1.521,1706,1.521,1708,1.521,1709,1.521,1712,1.521,1713,1.521,1714,2.458,1715,1.521,1716,2.458,1717,1.392,1719,1.521,1720,1.521,1721,3.898,1722,1.521,1723,1.521,1724,1.521,1725,3.093,1726,2.458,1727,1.521,1730,2.314,1732,1.432,1733,1.432,1734,1.521,1735,2.314,1800,1.896,1831,2.646,1910,1.035,2004,0.967,2024,1.129,2025,1.305,2043,1.152,2049,1.152,2050,1.165,2065,1.044,2091,0.989,2127,1.374,2128,1.374,2129,1.412,2130,1.374,2131,1.374,2132,1.374,2133,1.374,2134,1.374,2135,1.374,2136,1.374,2137,1.412,2138,1.374,2139,1.374,2140,1.546,2141,1.546,2142,1.546,2143,1.546,2144,1.546,2145,1.546,2146,1.453,2147,1.546,2148,1.546,2149,1.546]],["t/1443",[0,0.422,1,0.395,8,1.221,15,1.79,17,1.737,18,2.226,22,0.678,25,0.873,41,0.509,42,1.691,43,1.277,52,2.302,61,0.739,62,1.159,93,2.34,98,0.814,123,1.339,195,2.116,213,3.093,235,2.121,260,0.728,263,3.37,264,1.41,266,2.921,267,1.044,292,1.221,295,1.963,320,1.147,322,1.147,330,2.007,343,1.469,356,1.522,367,2.266,391,2.47,398,1.113,463,0.873,486,1.739,500,2.667,511,1.491,519,0.702,531,1.373,541,0.82,548,1.159,583,3.23,604,1.373,605,2.397,632,2.47,647,1.113,653,2.574,657,1.469,699,2.623,735,1.491,736,2.397,770,1.307,782,1.537,795,1.41,801,2.82,825,1.356,867,2.397,1236,1.449,1312,2.79,1315,0.839,1505,0.931,1529,2.007,1543,1.052,1652,1.307,1666,1.082,1687,0.557,1692,1.561,1693,1.561,1694,1.491,1695,1.491,1698,1.561,1699,1.391,1700,1.561,1701,2.963,1704,1.561,1706,1.561,1708,1.561,1709,1.561,1712,1.561,1713,1.561,1714,2.51,1715,1.561,1716,2.51,1717,1.429,1719,1.561,1720,1.561,1721,3.95,1722,1.561,1723,1.561,1724,1.561,1725,3.147,1726,2.51,1727,1.561,1730,2.362,1732,1.469,1733,1.469,1734,1.561,1735,2.362,1798,2.716,1910,1.062,2004,0.987,2024,1.159,2025,1.339,2043,1.183,2049,1.183,2050,1.195,2065,1.072,2091,1.015,2127,1.41,2128,1.41,2129,1.449,2130,1.41,2131,1.41,2132,1.41,2133,1.41,2134,1.41,2135,1.41,2136,1.41,2137,1.449,2138,1.41,2139,1.41,2140,1.586,2141,1.586,2142,1.586,2143,1.586,2144,1.586,2145,1.586,2146,1.491,2147,1.586,2148,1.586,2149,1.586]],["t/1445",[0,0.416,1,0.357,3,0.804,8,1.197,15,1.762,17,1.703,18,2.204,22,0.664,25,0.856,41,0.5,42,1.665,43,1.252,52,2.498,61,0.724,62,1.136,93,2.32,98,0.798,123,1.313,195,2.092,213,3.058,235,1.665,260,1.152,263,3.326,264,1.382,267,1.028,292,1.197,295,3.271,320,1.125,322,1.125,330,1.976,343,1.441,356,1.499,367,2.231,391,2.432,398,1.092,463,0.856,486,1.712,500,2.632,519,0.689,531,1.347,541,0.804,548,1.136,549,1.382,583,3.202,604,1.347,605,2.36,632,2.432,647,1.092,653,2.541,657,1.441,699,2.593,735,1.462,736,2.36,770,1.282,782,1.507,795,1.382,801,2.788,825,1.33,867,2.36,1236,1.421,1312,3.027,1315,0.823,1496,1.484,1505,0.913,1543,1.032,1562,5.045,1566,1.382,1666,1.061,1687,0.546,1692,1.531,1693,1.531,1694,1.462,1695,1.462,1698,1.531,1699,1.364,1700,1.531,1701,2.924,1704,1.531,1706,1.531,1708,1.531,1709,1.531,1712,1.531,1713,1.531,1714,2.47,1715,1.531,1716,2.47,1717,1.401,1719,1.531,1720,1.531,1721,3.911,1722,1.531,1723,1.531,1724,1.531,1725,3.106,1726,2.47,1727,1.531,1730,2.326,1732,1.441,1733,1.441,1734,1.531,1735,2.326,1910,1.041,2004,0.972,2024,1.136,2025,1.313,2043,1.16,2049,1.16,2050,1.172,2065,1.051,2091,0.995,2127,1.382,2128,1.382,2129,1.421,2130,1.382,2131,1.382,2132,1.382,2133,1.382,2134,1.382,2135,1.382,2136,1.382,2137,1.421,2138,1.382,2139,1.382,2140,1.556,2141,1.556,2142,1.556,2143,1.556,2144,1.556,2145,1.556,2146,1.462,2147,1.556,2148,1.556,2149,1.556,2163,2.932,2164,2.932]],["t/1447",[0,0.421,1,0.395,8,1.217,15,1.785,18,2.222,22,0.675,25,0.87,41,0.508,42,1.687,43,1.273,52,2.298,61,0.736,62,1.155,93,2.337,98,0.811,99,1.387,123,3.614,195,2.112,213,3.087,235,1.687,260,0.726,264,1.405,267,1.041,292,1.217,295,1.958,320,1.143,322,1.143,330,2.002,343,1.465,356,1.518,367,2.26,391,2.464,398,1.11,463,0.87,486,1.735,500,2.661,519,0.7,531,1.369,541,0.817,548,1.155,583,3.226,591,2.119,604,1.369,605,2.391,632,2.464,647,2.813,653,2.569,657,1.465,699,2.618,735,1.486,736,2.391,770,1.303,782,1.531,795,1.405,801,2.815,825,1.351,867,2.391,1236,1.444,1312,1.204,1315,0.836,1505,0.928,1529,1.244,1543,1.048,1666,1.078,1687,0.555,1692,1.556,1693,1.556,1694,1.486,1695,1.486,1698,1.556,1699,1.387,1700,1.556,1701,2.956,1704,1.556,1706,1.556,1708,1.556,1709,1.556,1712,1.556,1713,1.556,1714,2.503,1715,1.556,1716,2.503,1717,1.424,1719,1.556,1720,1.556,1721,3.943,1722,1.556,1723,1.556,1724,1.556,1725,3.14,1726,2.503,1727,1.556,1730,2.356,1732,1.465,1733,1.465,1734,1.556,1735,2.356,1801,2.707,1910,1.058,2004,0.985,2024,1.155,2025,1.335,2043,1.179,2049,1.179,2050,1.191,2065,1.068,2091,1.011,2093,1.731,2127,1.405,2128,1.405,2129,1.444,2130,1.405,2131,1.405,2132,1.405,2133,1.405,2134,1.405,2135,1.405,2136,1.405,2137,1.444,2138,1.405,2139,1.405,2140,1.581,2141,1.581,2142,1.581,2143,1.581,2144,1.581,2145,1.581,2146,1.486,2147,1.581,2148,1.581,2149,1.581,2153,2.707,2165,2.98,2166,2.98]],["t/1449",[0,0.435,1,0.368,8,1.267,15,1.844,18,2.268,22,0.703,25,0.905,41,0.529,42,1.742,43,1.325,52,2.351,61,0.766,62,1.202,93,2.379,98,0.844,123,1.389,195,2.161,213,3.159,235,1.742,260,0.755,264,1.462,267,1.075,292,1.267,295,2.022,320,1.19,322,1.19,330,2.067,343,1.524,356,1.568,367,2.334,391,2.544,398,1.155,463,0.905,486,1.791,500,2.734,519,0.728,531,1.425,541,0.851,548,1.202,583,3.284,604,1.425,605,2.469,632,2.544,647,1.155,653,2.638,657,1.524,699,2.678,735,1.547,736,2.469,750,1.57,770,1.356,782,1.594,795,1.462,801,2.88,825,1.407,867,2.469,1043,0.958,1236,1.503,1312,1.253,1315,0.871,1505,0.966,1543,1.091,1666,1.122,1687,0.578,1692,1.619,1693,1.619,1694,1.547,1695,1.547,1698,1.619,1699,1.443,1700,1.619,1701,3.036,1704,1.619,1706,1.619,1708,1.619,1709,1.619,1712,1.619,1713,1.619,1714,2.585,1715,1.619,1716,2.585,1717,2.366,1719,1.619,1720,1.619,1721,4.024,1722,1.619,1723,1.619,1724,1.619,1725,3.225,1726,2.585,1727,1.619,1730,2.433,1732,1.524,1733,1.524,1734,1.619,1735,2.433,1910,1.101,2004,1.017,2024,1.202,2025,1.389,2043,1.227,2049,1.227,2050,1.24,2065,1.112,2072,1.734,2091,1.053,2127,1.462,2128,1.462,2129,1.503,2130,1.462,2131,1.462,2132,1.462,2133,1.462,2134,1.462,2135,1.462,2136,1.462,2137,1.503,2138,1.462,2139,1.462,2140,1.646,2141,1.646,2142,1.646,2143,1.646,2144,1.646,2145,1.646,2146,1.547,2147,1.646,2148,1.646,2149,1.646,2167,3.975]],["t/1451",[22,1.643,25,2.116,34,5.292,41,1.235,61,1.791,267,1.575,454,5.201,463,2.116,486,2.623,519,2.14,1315,2.796,1543,2.551,1568,6.148,1571,2.376,1666,2.623,1687,1.351,2004,1.489,2006,3.288,2024,2.81,2025,3.248,2091,2.46,2168,7.251,2169,7.251]],["t/1453",[22,1.67,25,2.151,41,1.255,61,1.82,267,1.6,454,4.805,463,2.151,486,2.666,519,1.73,555,5.429,1315,2.583,1318,6.248,1454,5.915,1525,4.197,1543,2.592,1571,2.414,1666,2.666,1687,1.373,1825,6.693,1826,6.693,2004,1.513,2006,3.341,2024,2.855,2025,3.3,2091,2.5]],["t/1455",[22,1.683,25,2.168,37,4.712,41,1.266,61,1.835,260,1.809,267,1.613,454,4.829,463,2.168,486,2.688,519,1.744,1315,2.596,1319,6.299,1525,4.231,1543,2.613,1571,2.434,1666,2.688,1687,1.384,1833,6.747,2004,1.526,2006,3.369,2024,2.878,2025,3.327,2091,2.521]],["t/1457",[4,5.156,5,7.315,22,1.643,25,2.116,41,1.235,61,1.791,267,1.575,454,4.757,463,2.66,486,2.623,519,1.703,1151,5.56,1315,2.557,1320,6.148,1525,4.13,1543,2.551,1571,2.376,1666,2.623,1687,1.351,1839,6.586,2004,1.489,2006,3.288,2024,2.81,2025,3.248,2091,2.46]],["t/1459",[0,0.414,1,0.39,8,1.19,15,1.753,18,2.659,22,0.66,25,0.85,41,0.496,42,1.656,43,1.244,52,2.268,61,0.72,62,1.129,93,2.313,98,0.793,123,1.305,195,2.084,213,3.047,235,2.084,248,1.412,260,0.709,264,1.374,267,1.022,292,1.19,295,1.923,320,1.118,322,1.118,330,1.965,343,1.432,356,1.491,367,2.22,391,2.419,398,1.085,463,0.85,486,1.703,500,2.621,511,1.453,519,1.106,531,1.338,541,0.799,548,1.129,583,3.193,604,1.338,605,2.347,632,2.419,647,1.085,653,3.59,657,1.432,699,2.583,707,1.896,735,1.453,736,2.347,770,1.274,778,2.072,782,1.497,795,1.374,801,2.778,825,1.321,867,2.347,1043,0.9,1236,1.412,1312,1.177,1315,0.818,1322,2.47,1505,0.907,1529,1.965,1543,1.656,1575,2.646,1666,1.054,1687,0.543,1692,1.521,1693,1.521,1694,1.453,1695,1.453,1698,1.521,1699,1.356,1700,1.521,1701,2.911,1704,1.521,1706,1.521,1708,1.521,1709,1.521,1712,1.521,1713,1.521,1714,2.458,1715,1.521,1716,2.458,1717,1.392,1719,1.521,1720,1.521,1721,3.898,1722,1.521,1723,1.521,1724,1.521,1725,3.093,1726,2.458,1727,1.521,1730,2.314,1732,1.432,1733,1.432,1734,1.521,1735,2.314,1857,5.381,1910,1.035,2004,0.967,2024,1.129,2025,1.305,2043,1.152,2049,1.152,2050,1.165,2065,1.044,2091,0.989,2127,1.374,2128,1.374,2129,1.412,2130,1.374,2131,1.374,2132,1.374,2133,1.374,2134,1.374,2135,1.374,2136,1.374,2137,1.412,2138,1.374,2139,1.374,2140,1.546,2141,1.546,2142,1.546,2143,1.546,2144,1.546,2145,1.546,2146,1.453,2147,1.546,2148,1.546,2149,1.546,2170,2.913]],["t/1461",[18,2.921,22,1.63,25,2.1,41,1.226,61,1.777,267,1.562,463,2.1,486,2.603,519,2.331,653,4.239,699,3.77,1543,2.531,1571,2.357,1639,6.1,1666,2.603,1687,1.341,2004,1.477,2006,3.262,2024,2.787,2025,3.222,2091,2.441,2094,6.1]],["t/1463",[0,0.463,1,0.553,3,0.676,12,1.603,15,1.963,22,0.558,25,0.719,39,3.21,41,0.42,42,1.444,43,1.752,61,0.609,93,0.714,98,1.435,99,1.146,108,1.885,129,1.648,195,2.876,209,1.065,235,3.454,260,0.6,267,0.535,320,1.574,322,1.574,330,1.713,356,1.299,398,1.528,444,2.294,463,1.539,486,0.892,497,1.065,511,1.229,515,1.33,519,2.162,541,0.676,565,0.892,567,1.526,583,2.947,647,2.289,699,2.335,725,1.816,745,3.266,747,3.266,750,2.077,801,3.344,815,1.603,818,4.798,949,1.492,1193,2.542,1315,1.152,1496,1.247,1502,2.077,1505,1.278,1529,1.713,1543,0.867,1566,1.162,1652,1.077,1666,0.892,1670,1.603,1678,1.603,1687,0.459,1707,3.431,1859,1.603,1910,0.875,2004,0.843,2024,0.955,2025,1.104,2034,2.744,2035,2.744,2036,1.648,2037,2.744,2038,1.648,2039,2.744,2040,6.278,2041,1.648,2042,1.648,2043,1.623,2044,1.526,2045,1.526,2046,2.744,2047,1.247,2048,1.648,2049,0.975,2050,0.985,2051,2.744,2052,4.111,2053,5.228,2054,2.744,2055,2.744,2056,2.744,2057,3.525,2058,2.744,2059,2.744,2060,2.744,2061,2.744,2062,2.744,2063,2.744,2064,1.648,2065,1.471,2066,1.648,2067,1.648,2068,2.744,2069,1.648,2070,1.377,2071,1.526,2091,0.836,2171,2.464,2172,2.464]],["t/1465",[0,0.481,1,0.332,3,0.712,8,1.751,15,3.116,18,2.068,22,0.589,25,0.758,41,0.443,42,1.508,43,2.337,52,2.118,61,0.642,62,1.007,93,2.318,98,0.707,123,1.163,129,1.737,195,1.946,213,2.845,235,0.914,260,0.632,264,1.225,267,0.931,292,1.061,295,1.751,320,0.996,322,0.996,330,1.79,343,1.277,356,1.733,367,2.021,391,2.203,398,0.967,463,1.251,486,1.551,500,2.421,519,1.777,531,2.917,541,0.712,548,1.007,566,1.54,567,1.609,583,3.025,604,1.193,605,2.137,632,2.203,647,1.596,653,2.337,657,1.277,689,2.49,699,3.178,735,1.295,736,2.137,770,1.874,782,1.335,795,1.225,801,3.269,825,1.944,867,2.137,1236,1.259,1312,1.049,1315,0.729,1496,1.315,1505,0.809,1529,1.79,1543,0.914,1566,1.225,1666,0.94,1687,0.484,1692,1.356,1693,1.356,1694,1.295,1695,1.295,1698,1.356,1699,1.994,1700,1.356,1701,2.69,1704,1.356,1706,1.356,1708,1.356,1709,1.356,1712,1.356,1713,1.356,1714,2.238,1715,1.356,1716,2.238,1717,2.049,1719,1.356,1720,1.356,1721,3.67,1722,1.356,1723,1.356,1724,1.356,1725,2.857,1726,2.238,1727,1.356,1730,2.107,1732,1.277,1733,1.277,1734,1.356,1735,2.107,1750,4.394,1910,0.922,2004,0.88,2024,1.007,2025,1.163,2043,1.028,2049,1.028,2065,0.931,2091,0.881,2127,2.021,2128,2.021,2129,2.077,2130,2.021,2131,2.021,2132,2.021,2133,2.021,2134,2.021,2135,2.021,2136,2.021,2137,2.077,2138,2.021,2139,2.021,2140,1.378,2141,1.378,2142,1.378,2143,1.378,2144,1.378,2145,1.378,2146,1.295,2147,1.378,2148,1.378,2149,1.378,2173,3.894,2174,2.598,2175,2.598,2176,1.847,2177,2.203]],["t/1467",[0,0.416,1,0.357,3,0.804,8,1.197,15,2.215,18,2.204,22,0.664,25,0.856,41,0.5,42,2.818,43,2.021,52,2.276,61,0.724,62,1.136,93,2.32,98,0.798,123,1.313,129,1.961,195,2.092,213,3.058,235,1.665,260,0.714,264,1.382,267,1.028,292,1.197,295,1.933,320,1.125,322,1.125,330,1.976,343,1.441,356,1.884,367,2.231,391,2.432,398,1.092,463,1.381,486,1.712,500,2.632,519,1.759,531,1.347,541,0.804,548,1.136,567,1.816,583,3.717,604,1.347,605,2.36,632,2.432,647,1.092,653,2.541,657,1.441,699,2.593,735,1.462,736,2.36,770,1.282,782,1.507,795,1.382,801,2.788,825,2.146,867,2.36,1236,1.421,1312,1.185,1315,0.823,1496,1.484,1505,0.913,1529,1.224,1566,1.382,1666,1.061,1687,0.546,1692,1.531,1693,1.531,1694,1.462,1695,1.462,1698,1.531,1699,1.364,1700,1.531,1701,2.924,1704,1.531,1706,1.531,1708,1.531,1709,1.531,1712,1.531,1713,1.531,1714,2.47,1715,1.531,1716,2.47,1717,1.401,1719,1.531,1720,1.531,1721,3.911,1722,1.531,1723,1.531,1724,1.531,1725,3.106,1726,2.47,1727,1.531,1730,2.326,1732,1.441,1733,1.441,1734,1.531,1735,2.326,1910,1.041,2004,0.972,2024,1.136,2025,1.313,2043,1.16,2049,1.16,2050,1.172,2065,1.051,2091,0.995,2127,1.382,2128,1.382,2129,1.421,2130,1.382,2131,1.382,2132,1.382,2133,1.382,2134,1.382,2135,1.382,2136,1.382,2137,1.421,2138,1.382,2139,1.382,2140,1.556,2141,1.556,2142,1.556,2143,1.556,2144,1.556,2145,1.556,2146,1.462,2147,1.556,2148,1.556,2149,1.556,2178,2.663]],["t/1469",[0,0.417,1,0.357,3,0.807,8,1.201,15,2.22,18,2.208,22,0.667,25,0.859,41,0.501,42,1.669,43,2.026,52,2.281,61,0.727,62,1.14,93,2.323,98,0.801,123,1.318,129,1.967,195,2.777,213,3.064,235,1.669,260,0.716,264,1.387,267,1.03,292,1.201,295,1.938,320,1.128,322,1.128,330,1.981,343,1.446,356,1.888,367,2.237,391,2.438,398,1.095,463,1.385,486,1.717,500,2.638,519,1.4,531,1.351,541,0.807,548,1.14,567,1.822,583,3.207,604,1.351,605,2.366,632,2.438,647,1.095,653,2.546,657,1.446,699,2.598,725,2.167,735,1.467,736,2.366,743,3.809,770,1.286,782,1.512,795,1.387,801,2.794,825,2.152,867,2.366,1236,1.425,1312,1.188,1315,0.826,1496,1.489,1505,0.916,1529,1.228,1543,1.035,1566,1.387,1666,1.064,1687,0.548,1692,1.536,1693,1.536,1694,1.467,1695,1.467,1698,1.536,1699,1.369,1700,1.536,1701,2.93,1704,1.536,1706,1.536,1708,1.536,1709,1.536,1712,1.536,1713,1.536,1714,2.477,1715,1.536,1716,2.477,1717,1.406,1719,1.536,1720,1.536,1721,3.917,1722,1.536,1723,1.536,1724,1.536,1725,3.113,1726,2.477,1727,1.536,1730,2.332,1732,1.446,1733,1.446,1734,1.536,1735,2.332,1910,1.045,2004,0.974,2024,1.14,2025,1.318,2043,1.164,2049,1.164,2050,1.176,2065,1.054,2091,0.998,2127,1.387,2128,1.387,2129,1.425,2130,1.387,2131,1.387,2132,1.387,2133,1.387,2134,1.387,2135,1.387,2136,1.387,2137,1.425,2138,1.387,2139,1.387,2140,1.561,2141,1.561,2142,1.561,2143,1.561,2144,1.561,2145,1.561,2146,1.467,2147,1.561,2148,1.561,2149,1.561,2179,2.942]],["t/1471",[0,0.546,1,0.484,3,1.704,22,1.408,25,1.813,34,3.608,41,1.058,61,1.535,93,1.799,98,1.691,235,2.901,267,1.349,320,2.383,322,2.383,356,1.967,398,2.313,418,2.291,463,1.813,486,2.248,508,4.911,519,2.173,548,3.195,549,2.929,577,5.271,1315,1.744,1496,3.144,1543,2.186,1566,2.929,1571,2.035,1666,2.248,1687,1.158,2004,1.276,2024,2.407,2025,2.782,2043,2.457,2049,2.457,2050,2.483,2091,2.108,2180,5.643,2181,6.212]],["t/1473",[3,2.124,235,2.725,418,2.856,508,4.109,519,2.229,549,3.651,577,4.411,1315,2.174,1496,3.919,1566,3.651,1687,1.443,1868,8.048,1869,7.034,1870,7.034,1883,6.566,2004,1.59,2180,7.034,2182,7.744,2183,7.744]],["t/1475",[0,0.561,1,0.49,15,3.127,22,1.447,25,1.864,41,1.088,61,1.578,93,1.849,98,1.738,235,2.954,267,1.387,320,2.45,322,2.45,356,2.023,398,2.378,418,2.355,463,1.864,486,2.311,519,1.5,1043,1.973,1315,1.792,1543,2.247,1666,2.311,1687,1.19,1737,7.12,2004,1.312,2024,2.475,2025,2.86,2043,2.526,2049,2.526,2050,2.553,2091,2.167,2184,6.387,2185,6.387,2186,6.387,2187,6.387,2188,6.387,2189,6.387,2190,6.387,2191,6.387,2192,5.801]],["t/1478",[0,0.553,1,0.487,22,2.246,25,1.838,61,2.449,93,1.824,98,1.714,235,2.927,267,1.368,320,2.416,322,2.416,398,2.345,418,2.323,463,1.838,497,3.595,519,1.479,1315,1.768,1323,7.145,1324,7.48,1325,5.34,1525,3.587,1571,2.064,1666,2.279,1687,1.174,1871,8.464,2004,1.293,2024,2.44,2028,4.211,2043,2.491,2049,2.491,2050,2.518,2091,2.137]],["t/1480",[0,0.472,1,0.39,8,1.406,18,2.198,22,2.033,25,1.005,42,1.211,52,2.491,61,0.85,62,1.334,93,2.164,98,0.937,213,3.63,235,1.891,260,0.838,264,1.623,267,1.436,271,1.924,320,1.32,322,1.32,356,1.702,361,2.951,398,1.282,463,1.005,497,3.228,519,0.808,531,1.581,541,2.676,549,1.623,565,1.245,566,2.04,583,2.987,630,5.505,647,1.282,653,2.295,699,3.078,750,1.742,770,1.505,801,3.31,825,1.561,1019,2.536,1043,1.063,1315,0.966,1326,2.448,1505,1.072,1543,1.211,1666,1.245,1687,0.642,1699,1.601,1701,3.672,1717,2.568,1730,1.691,1732,4.562,1733,1.691,1735,3.983,1739,2.639,1740,2.639,1742,2.639,1743,5.07,1910,1.222,2004,1.104,2024,1.334,2028,2.302,2043,1.361,2049,1.361,2050,1.376,2065,1.234,2072,1.924,2091,1.168,2127,1.623,2128,1.623,2129,1.668,2130,1.623,2131,1.623,2132,1.623,2133,1.623,2134,1.623,2135,1.623,2136,1.623,2137,1.668,2138,1.623,2139,1.623,2146,1.716,2167,4.315,2176,2.448,2193,4.315,2194,4.315,2195,4.315,2196,2.763,2197,2.763,2198,2.763]],["t/1482",[0,0.46,1,0.383,8,1.359,18,2.607,22,2.008,25,0.972,42,1.171,52,2.446,61,0.822,62,1.29,93,2.125,98,0.906,213,3.573,235,1.842,260,0.81,264,1.569,267,1.405,271,1.861,320,1.277,322,1.277,356,1.658,361,2.874,398,1.239,463,0.972,497,3.17,519,0.782,531,1.529,541,2.65,549,1.569,565,2.654,566,1.973,576,4.203,583,2.933,630,5.406,647,1.239,653,3.407,699,3.029,750,1.685,770,1.455,801,3.258,825,1.51,1019,2.453,1043,1.028,1315,0.934,1326,3.723,1505,1.037,1543,1.171,1666,1.204,1687,0.62,1699,1.549,1701,3.606,1717,1.591,1730,1.636,1732,4.511,1733,1.636,1735,3.92,1739,2.552,1740,2.552,1742,2.552,1743,4.962,1910,1.182,2004,1.075,2024,1.29,2028,2.226,2043,1.317,2049,1.317,2050,1.331,2065,1.193,2072,1.861,2091,1.13,2127,1.569,2128,1.569,2129,1.613,2130,1.569,2131,1.569,2132,1.569,2133,1.569,2134,1.569,2135,1.569,2136,1.569,2137,1.613,2138,1.569,2139,1.569,2146,1.66,2176,2.367,2193,4.203,2194,4.203,2195,4.203,2196,2.672,2197,2.672,2198,2.672]],["t/1484",[0,0.445,1,0.374,8,1.302,18,2.74,22,1.975,25,0.931,42,1.122,52,2.388,61,0.788,62,1.236,93,2.075,98,0.868,213,3.499,235,1.781,260,0.776,264,1.503,267,1.367,271,1.783,320,1.223,322,1.223,356,1.603,361,2.779,398,1.187,463,0.931,497,3.095,519,1.835,531,3.819,541,2.617,549,1.503,565,1.154,566,1.89,583,2.864,630,5.278,647,1.187,653,3.722,699,3.624,770,1.394,801,3.191,825,1.446,1019,2.35,1315,0.895,1326,2.268,1505,0.993,1529,1.331,1543,1.122,1571,1.045,1666,1.154,1687,0.594,1699,1.484,1701,3.52,1717,1.524,1730,1.567,1732,4.444,1733,1.567,1735,3.839,1739,2.445,1740,2.445,1742,2.445,1743,4.825,1910,1.132,2004,1.039,2024,1.236,2028,2.132,2043,1.261,2049,1.261,2050,1.275,2065,1.143,2091,1.082,2094,2.704,2127,1.503,2128,1.503,2129,1.545,2130,1.503,2131,1.503,2132,1.503,2133,1.503,2134,1.503,2135,1.503,2136,1.503,2137,1.545,2138,1.503,2139,1.503,2146,1.59,2176,2.268,2193,4.063,2194,4.063,2195,4.063,2196,2.56,2197,2.56,2198,2.56]],["t/1486",[0,0.459,1,0.383,8,1.354,18,2.154,22,2.005,25,0.968,42,2.802,43,1.416,52,2.441,61,0.819,62,1.285,93,2.12,98,0.903,213,3.567,235,1.837,260,0.807,264,1.564,267,1.402,271,4.451,320,1.272,322,1.272,344,2.444,356,1.653,361,2.866,398,1.235,463,0.968,497,3.163,519,1.87,531,1.523,541,2.648,549,1.564,565,1.2,566,1.966,583,2.927,630,5.395,647,1.235,653,2.229,699,3.024,770,1.45,801,3.252,825,1.504,1019,2.444,1315,0.931,1326,2.358,1505,1.033,1529,1.385,1543,1.167,1666,1.2,1687,0.618,1699,1.543,1701,3.598,1717,1.585,1730,1.63,1732,4.505,1733,1.63,1735,3.913,1739,2.543,1740,2.543,1742,2.543,1743,4.95,1910,1.178,2004,1.072,2024,1.285,2028,2.218,2043,1.312,2049,1.312,2050,1.326,2065,1.189,2091,1.125,2127,1.564,2128,1.564,2129,1.607,2130,1.564,2131,1.564,2132,1.564,2133,1.564,2134,1.564,2135,1.564,2136,1.564,2137,1.607,2138,1.564,2139,1.564,2146,1.654,2176,2.358,2193,4.191,2194,4.191,2195,4.191,2196,2.663,2197,2.663,2198,2.663,2199,3.317]],["t/1488",[17,4.423,22,2.308,25,2.223,61,1.881,264,4.429,267,1.654,463,2.223,497,3.29,519,1.788,1543,2.679,1666,2.755,1687,1.419,2004,1.564,2006,3.453,2024,2.951,2028,5.092,2091,2.584,2200,7.615,2201,7.615,2202,6.916]],["t/1490",[1,0.523,22,1.466,25,0.972,27,2.573,61,0.822,87,3.741,99,4.123,108,4.07,119,5.366,209,1.438,216,2.453,235,2.277,260,1.275,267,0.723,271,5.278,281,5.621,327,6.794,497,1.438,511,1.66,519,0.782,571,2.453,604,4.439,770,2.829,1315,0.934,1445,2.453,1505,1.037,1529,2.186,1543,1.171,1652,1.455,1666,1.204,1687,0.62,1910,1.182,2004,1.075,2024,1.29,2028,2.226,2032,2.453,2065,1.193,2091,1.13,2095,2.453,2096,2.672,2097,2.672,2098,2.672,2099,2.672,2100,7.369,2101,2.672,2102,2.672,2103,2.672,2104,5.89,2105,7.114,2106,7.114,2107,7.114,2108,7.114,2109,2.672,2110,2.672,2111,2.672,2112,2.672,2113,2.672,2114,2.672,2115,2.672,2116,2.672,2117,4.203,2118,2.672,2119,2.672,2120,2.672,2121,2.672,2122,2.672,2123,2.672,2203,3.024]],["t/1493",[0,0.664,1,0.453,8,2.232,22,1.239,25,1.596,61,1.35,93,2.189,98,1.488,235,1.923,260,1.331,267,1.187,320,2.097,322,2.097,398,2.036,463,1.596,519,1.775,566,3.24,647,2.036,689,5.432,750,2.767,770,2.39,801,2.232,825,2.479,1043,1.689,1315,1.534,1505,1.703,1543,1.923,1666,1.978,1687,1.019,1699,2.543,1717,3.613,1750,6.958,1910,1.941,2004,1.553,2024,2.118,2029,4.389,2043,2.162,2049,2.162,2050,2.185,2065,1.959,2072,3.056,2091,1.855,2127,2.577,2128,2.577,2129,2.649,2130,2.577,2131,2.577,2132,2.577,2133,2.577,2134,2.577,2135,2.577,2136,2.577,2137,2.649,2138,2.577,2139,2.577,2167,4.389,2176,3.887,2177,4.635]],["t/1495",[0,0.638,1,0.502,8,2.106,22,1.169,25,1.505,61,1.274,93,2.102,98,1.404,235,2.554,260,1.767,267,1.12,320,1.978,322,1.978,398,1.92,519,1.211,566,3.057,604,4.188,647,1.92,689,5.296,770,4.201,801,2.106,825,2.339,1315,1.447,1505,1.606,1529,2.153,1543,1.814,1652,2.254,1666,1.866,1687,0.961,1699,2.399,1717,2.464,1750,6.744,1910,1.831,2004,1.491,2024,1.998,2029,4.14,2043,2.04,2049,2.04,2050,2.061,2065,1.848,2072,2.883,2091,1.75,2127,2.431,2128,2.431,2129,2.499,2130,2.431,2131,2.431,2132,2.431,2133,2.431,2134,2.431,2135,2.431,2136,2.431,2137,2.499,2138,2.431,2139,2.431,2176,3.667,2177,4.373,2203,4.684,2204,5.157]],["t/1498",[0,0.464,1,0.546,12,1.608,15,1.967,18,0.727,39,3.215,42,1.447,61,0.61,93,0.716,98,1.438,99,1.15,108,1.889,195,2.398,209,1.067,235,3.456,260,0.602,267,0.537,320,1.578,322,1.578,330,1.717,356,0.782,398,1.531,444,2.299,463,1.2,497,1.067,508,1.311,511,1.232,515,1.333,519,2.382,541,0.678,549,1.165,565,0.894,583,2.951,647,2.293,699,2.973,745,1.53,747,1.53,750,2.081,801,3.836,815,1.608,818,4.804,949,1.496,1043,0.763,1058,1.701,1193,2.547,1315,1.154,1496,1.25,1502,2.081,1505,1.281,1529,1.717,1543,0.869,1566,1.165,1652,1.08,1666,0.894,1670,1.608,1678,1.608,1687,0.461,1707,2.676,1859,1.608,1910,0.877,2004,0.845,2030,1.652,2034,2.75,2035,2.75,2036,1.652,2037,2.75,2038,1.652,2039,2.75,2040,6.282,2041,1.652,2042,1.652,2043,1.627,2044,1.53,2045,1.53,2046,2.75,2047,1.25,2048,1.652,2049,0.977,2050,0.988,2051,3.532,2052,4.118,2053,5.234,2054,2.75,2055,2.75,2056,2.75,2057,3.532,2058,2.75,2059,2.75,2060,2.75,2061,2.75,2062,2.75,2063,2.75,2064,1.652,2065,1.474,2066,1.652,2067,1.652,2068,2.75,2069,1.652,2070,1.381,2071,1.53,2091,0.838,2205,2.244,2206,2.471,2207,3.735,2208,2.244,2209,2.244]],["t/1500",[0,0.475,1,0.553,12,1.662,15,1.574,39,3.282,42,1.487,61,0.631,93,0.74,98,1.472,99,1.188,108,1.941,195,2.299,209,1.103,235,3.485,260,0.622,267,0.555,319,2.139,320,1.621,322,1.621,330,2.908,356,0.809,398,1.574,444,2.363,463,1.234,497,1.103,511,1.273,515,1.378,519,2.024,541,0.7,565,0.924,583,3.721,647,2.341,699,1.605,745,1.582,747,1.582,750,2.139,801,3.937,815,1.662,818,4.883,949,1.547,1043,0.789,1058,1.759,1193,2.618,1315,1.186,1502,2.139,1505,1.317,1529,1.066,1543,0.899,1652,1.117,1666,0.924,1670,1.662,1678,1.662,1687,0.476,1707,2.751,1859,1.662,1910,0.907,2004,0.868,2030,1.708,2034,2.827,2035,2.827,2036,1.708,2037,2.827,2038,1.708,2039,2.827,2040,6.326,2041,1.708,2042,1.708,2043,1.672,2044,1.582,2045,1.582,2046,2.827,2047,1.293,2048,1.708,2049,1.01,2050,1.021,2051,2.827,2052,4.203,2053,5.312,2054,2.827,2055,3.616,2056,2.827,2057,3.616,2058,2.827,2059,2.827,2060,2.827,2061,2.827,2062,2.827,2063,2.827,2064,1.708,2065,1.515,2066,1.708,2067,1.708,2068,4.203,2069,1.708,2070,1.428,2071,1.582,2072,1.428,2091,0.867,2210,2.554]],["t/1502",[0,0.417,1,0.531,12,1.389,15,1.769,39,2.928,42,1.279,61,0.527,93,0.618,98,1.293,99,0.993,108,1.67,117,6.155,119,2.876,195,2.097,209,0.922,235,3.326,260,0.52,267,0.464,320,1.395,322,1.395,330,1.518,356,0.676,398,1.354,444,2.033,463,1.061,497,0.922,509,5.915,511,1.064,515,1.152,519,2.063,541,0.586,546,3.642,547,3.091,560,3.091,563,5.496,565,0.772,578,3.176,583,2.737,585,3.378,608,3.5,647,2.088,672,3.5,699,1.381,745,1.322,747,1.322,750,2.404,801,3.143,815,1.389,818,4.455,949,1.293,1058,1.47,1193,2.252,1315,1.021,1502,1.84,1505,1.133,1528,3.378,1529,1.518,1543,0.751,1640,3.5,1652,0.933,1666,0.772,1670,1.389,1678,1.389,1687,0.398,1707,2.366,1859,1.389,1910,0.758,1994,3.642,2004,0.747,2030,1.428,2034,2.432,2035,2.432,2036,1.428,2037,2.432,2038,1.428,2039,2.432,2040,6.075,2041,1.428,2042,1.428,2043,1.438,2044,1.322,2045,1.322,2046,2.432,2047,1.08,2048,1.428,2049,0.844,2050,0.853,2051,2.432,2052,3.75,2053,4.886,2054,2.432,2055,2.432,2056,3.176,2057,4.207,2058,2.432,2059,2.432,2060,2.432,2061,2.432,2062,2.432,2063,2.432,2064,1.428,2065,1.303,2066,1.428,2067,1.428,2068,2.432,2069,2.432,2070,1.193,2071,1.322,2091,0.724,2093,1.24,2211,3.636,2212,4.314,2213,4.314,2214,4.314,2215,4.314,2216,4.314,2217,4.314,2218,4.314,2219,4.314]],["t/1504",[0,0.452,1,0.543,12,1.549,15,1.915,18,0.7,39,3.141,41,0.679,42,1.403,61,0.588,93,0.689,98,1.4,99,1.108,108,1.831,195,2.472,209,1.028,235,3.424,260,0.58,267,0.517,320,1.529,322,1.529,330,1.664,356,0.754,398,1.484,444,2.228,463,1.164,497,1.028,508,1.263,511,1.187,515,1.284,519,2.362,541,1.093,549,1.122,565,0.861,583,3.076,647,2.24,699,3.065,745,1.474,747,1.474,750,2.018,801,3.794,815,1.549,818,6.046,949,1.442,1043,0.735,1058,1.639,1193,2.469,1315,1.119,1496,1.205,1502,2.018,1505,1.242,1525,1.356,1529,1.664,1543,0.837,1566,1.122,1652,1.041,1666,0.861,1670,1.549,1678,1.549,1687,0.444,1707,2.594,1859,1.549,1910,0.845,2004,0.819,2030,1.592,2034,2.666,2035,2.666,2036,1.592,2037,2.666,2038,1.592,2039,2.666,2040,6.231,2041,1.592,2042,1.592,2043,1.577,2044,1.474,2045,1.474,2046,2.666,2047,1.205,2048,1.592,2049,0.942,2050,0.952,2051,2.666,2052,4.023,2053,5.146,2054,2.666,2055,2.666,2056,2.666,2057,3.439,2058,3.439,2059,2.666,2060,2.666,2061,2.666,2062,2.666,2063,2.666,2064,1.592,2065,1.429,2066,1.592,2067,1.592,2068,2.666,2069,1.592,2070,1.331,2071,1.474,2091,0.808,2208,2.162,2209,2.162,2220,3.987,2221,3.621]],["t/1506",[0,0.474,1,0.553,12,1.657,15,1.57,39,3.276,42,1.484,61,0.629,93,0.738,98,1.469,99,1.185,108,1.937,195,2.296,209,1.1,235,3.482,260,0.62,267,0.553,319,2.134,320,1.618,322,1.618,330,2.903,356,0.807,398,1.57,444,2.357,463,1.231,497,1.1,511,1.27,515,1.374,519,2.022,541,0.698,565,0.921,583,3.718,647,2.337,699,1.602,745,1.578,747,1.578,750,2.134,801,3.934,815,1.657,818,5.163,949,1.542,1043,0.787,1058,1.754,1193,2.612,1315,1.184,1502,2.134,1505,1.313,1529,1.063,1543,0.896,1652,1.113,1666,0.921,1670,1.657,1678,1.657,1687,0.475,1707,2.744,1859,1.657,1910,0.904,2004,0.866,2030,1.703,2034,2.82,2035,2.82,2036,1.703,2037,2.82,2038,1.703,2039,2.82,2040,6.323,2041,1.703,2042,1.703,2043,1.668,2044,1.578,2045,1.578,2046,2.82,2047,1.289,2048,1.703,2049,1.007,2050,1.018,2051,2.82,2052,4.196,2053,5.306,2054,2.82,2055,2.82,2056,2.82,2057,3.609,2058,2.82,2059,3.609,2060,2.82,2061,2.82,2062,2.82,2063,2.82,2064,1.703,2065,1.512,2066,1.703,2067,1.703,2068,4.65,2069,1.703,2070,1.424,2071,1.578,2072,1.424,2091,0.864]],["t/1508",[0,0.449,1,0.548,12,1.537,15,2.483,39,3.125,42,1.393,61,0.583,93,0.684,98,1.392,99,1.099,108,1.819,117,3.922,119,1.43,195,2.211,209,1.02,235,3.417,260,0.575,267,0.513,320,1.519,322,1.519,330,1.653,356,0.748,398,1.475,444,2.214,463,1.156,497,1.02,509,3.768,511,1.178,515,1.274,519,2.028,541,0.648,546,1.811,547,1.537,560,1.537,563,3.179,565,0.855,578,1.579,583,2.885,585,1.68,608,1.74,647,2.229,672,1.74,699,1.504,745,1.463,747,1.463,750,3.03,801,3.285,815,1.537,818,5.911,949,1.43,1058,1.626,1193,2.453,1315,1.112,1502,2.004,1505,1.233,1528,1.68,1529,0.986,1543,0.831,1640,1.74,1652,1.033,1666,0.855,1670,1.537,1678,1.537,1687,0.44,1707,2.577,1859,1.537,1910,0.839,1994,1.811,2004,0.813,2030,1.579,2034,2.648,2035,2.648,2036,1.579,2037,2.648,2038,1.579,2039,2.648,2040,6.22,2041,1.579,2042,1.579,2043,1.567,2044,1.463,2045,1.463,2046,2.648,2047,1.195,2048,1.579,2049,0.934,2050,0.944,2051,2.648,2052,4.003,2053,5.127,2054,2.648,2055,2.648,2056,2.648,2057,5.592,2058,2.648,2059,2.648,2060,3.42,2061,2.648,2062,2.648,2063,2.648,2064,1.579,2065,1.42,2066,1.579,2067,1.579,2068,2.648,2069,4.003,2070,1.32,2071,1.463,2072,1.32,2091,0.801,2093,1.372,2212,2.145,2213,2.145,2214,2.145,2215,2.145,2216,2.145,2217,2.145,2218,2.145,2219,2.145]],["t/1510",[0,0.463,1,0.546,12,1.603,15,1.528,18,0.725,39,3.21,42,2.881,43,1.052,61,0.609,93,0.714,98,1.435,99,1.146,108,1.885,122,1.194,195,2.509,209,1.065,213,1.838,235,3.454,260,0.6,267,0.535,320,1.574,322,1.574,330,1.713,356,0.78,362,1.978,398,1.528,444,2.294,463,1.198,497,1.065,511,1.229,515,1.33,519,2.275,541,0.676,565,0.892,583,2.947,647,2.289,699,1.558,745,1.526,747,1.526,750,2.077,801,3.344,815,1.603,818,4.798,825,1.117,949,1.492,1043,0.761,1058,1.697,1193,2.542,1315,1.152,1496,1.247,1502,2.077,1505,1.278,1510,1.752,1529,1.029,1543,0.867,1566,1.162,1652,1.077,1666,0.892,1670,1.603,1678,1.603,1687,0.459,1707,2.67,1859,1.603,1882,1.492,1910,0.875,2004,0.843,2030,1.648,2034,2.744,2035,2.744,2036,1.648,2037,2.744,2038,1.648,2039,2.744,2040,6.278,2041,1.648,2042,1.648,2043,1.623,2044,1.526,2045,1.526,2046,2.744,2047,1.247,2048,1.648,2049,0.975,2050,0.985,2051,2.744,2052,4.111,2053,5.228,2054,2.744,2055,2.744,2056,2.744,2057,3.525,2058,2.744,2059,2.744,2060,2.744,2061,3.525,2062,5.475,2063,2.744,2064,1.648,2065,1.471,2066,1.648,2067,1.648,2068,2.744,2069,1.648,2070,1.377,2071,1.526,2091,0.836,2205,2.238,2207,2.238,2221,2.238,2222,2.464]],["t/1513",[3,2.258,43,3.516,418,3.037,565,2.979,577,4.69,583,3.292,778,5.855,1616,6.067,1640,6.067,1687,1.535,2004,1.691,2013,7.479,2092,6.982,2223,8.234]],["t/1516",[0,0.647,1,0.524,93,2.134,98,2.005,122,3.57,235,3.238,320,2.826,322,2.826,356,2.333,398,2.744,413,4.072,418,2.717,519,2.161,541,2.021,1315,2.817,1687,1.373,2004,1.513,2043,2.915,2049,2.915,2050,2.945]],["t/1518",[61,1.556,242,4.739,413,2.787,418,2.323,421,3.521,454,5.175,491,3.681,497,2.721,541,2.282,556,5.154,565,2.279,577,3.587,631,5.564,698,3.814,797,4.479,1315,1.768,1507,5.721,1542,5.721,1566,2.969,1587,5.34,1652,2.753,1671,4.829,1672,5.056,1675,5.34,1687,1.174,1800,4.098,1809,5.721,1823,5.721,1884,5.721,1906,5.34,2004,1.293,2023,5.721,2224,6.298,2225,6.298,2226,6.298,2227,6.298,2228,6.298,2229,6.298,2230,6.298,2231,6.298]],["t/1521",[94,2.517,98,2.163,121,3.111,267,1.726,414,3.111,519,1.866,580,3.604,769,4.615,1043,2.455,1053,4.442,1571,2.604,1667,3.433,1687,1.481,2004,1.632,2006,3.604,2232,4.288,2233,4.615,2234,4.615]],["t/1523",[94,2.517,98,2.163,121,3.111,267,1.726,414,3.111,519,1.866,580,3.604,1043,2.455,1571,2.604,1667,3.433,1687,1.481,2004,1.632,2006,3.604,2026,4.615,2027,4.711,2232,4.288,2233,4.615,2234,4.615]],["t/1525",[94,2.26,98,1.943,121,2.794,209,3.084,260,1.738,267,1.55,414,2.794,519,1.676,580,3.237,769,5.745,1043,2.205,1053,3.99,1315,2.003,1505,2.223,1529,3.766,1536,5.075,1571,2.339,1667,3.084,1687,1.33,1910,2.534,2004,1.853,2047,3.612,2065,2.558,2232,3.851,2235,8.984]],["t/1527",[94,2.143,98,1.842,121,2.649,209,3.767,260,1.647,267,1.47,414,2.649,444,3.782,519,1.589,580,3.068,1043,2.09,1315,1.899,1505,2.107,1529,3.64,1571,2.217,1667,2.923,1687,1.261,1882,4.098,1910,2.403,2004,1.791,2026,3.93,2027,6.04,2047,3.424,2065,2.425,2070,3.782,2076,4.659,2077,4.811,2232,3.651,2235,9.255]],["t/1529",[94,2.278,98,1.958,121,2.816,209,3.108,260,1.751,267,1.562,414,2.816,519,1.689,580,3.262,769,6.24,1043,2.222,1053,4.021,1315,2.019,1505,2.24,1571,2.357,1667,3.108,1687,1.341,1910,2.554,2004,1.862,2047,3.641,2065,2.578,2072,4.021,2074,5.775,2232,3.882,2236,6.534]],["t/1531",[94,2.26,98,1.943,121,2.794,209,3.084,260,1.738,267,1.55,414,2.794,519,1.676,580,3.237,1043,2.205,1315,2.003,1505,2.223,1571,2.339,1667,3.084,1687,1.33,1910,2.534,2004,1.853,2026,4.145,2027,6.354,2047,3.612,2065,2.558,2072,3.99,2074,5.73,2077,5.075,2232,3.851,2236,6.483]],["t/1533",[42,2.329,98,1.801,121,2.591,209,2.859,213,2.964,260,1.611,519,2.018,583,2.646,768,7.319,769,5.544,1053,3.7,1315,1.858,1505,2.061,1514,5.075,1529,4.48,1536,4.707,1566,3.12,1687,1.234,1910,2.35,2004,1.765,2047,3.35,2065,2.372,2072,3.7,2237,6.012,2238,6.619,2239,6.619,2240,6.619,2241,6.619,2242,6.619,2243,6.619]],["t/1535",[42,2.551,98,1.973,121,2.839,209,3.133,213,3.248,260,1.765,519,1.703,583,2.898,1315,2.035,1505,2.258,1514,5.56,1537,6.586,1566,3.419,1687,1.351,1910,2.575,2004,1.871,2026,4.211,2027,6.384,2047,3.67,2065,2.599,2072,4.053,2077,5.156,2237,6.586,2244,7.251]],["t/1537",[98,2.201,121,3.166,519,1.899,548,3.134,565,2.926,580,3.668,769,4.697,1053,4.521,1315,2.27,1566,3.813,1687,1.507,1866,6.493,2004,1.661,2006,3.668,2245,6.493,2246,7.346]],["t/1539",[98,2.201,121,3.166,519,1.899,548,3.134,565,2.926,580,3.668,1315,2.27,1566,3.813,1687,1.507,1866,6.493,2004,1.661,2006,3.668,2026,4.697,2027,4.794,2245,6.493,2246,7.346]],["t/1542",[0,0.48,1,0.437,8,1.058,15,1.592,18,2.352,42,1.505,43,1.106,52,2.665,62,1.004,91,2.269,93,2.315,94,0.82,98,1.164,99,1.205,123,1.16,195,1.943,209,1.119,213,2.84,235,2.469,260,0.631,264,1.221,267,0.929,291,2.164,292,1.058,293,1.422,294,1.448,295,2.231,320,1.64,322,1.64,330,2.647,343,1.273,356,1.73,367,2.016,391,2.198,398,1.592,414,1.014,463,1.248,486,0.937,500,2.417,511,1.292,515,1.398,519,1.283,531,1.19,541,0.71,548,1.657,565,1.547,566,1.535,583,3.021,604,1.19,605,2.132,632,2.198,647,0.965,653,2.333,657,1.273,699,2.408,735,1.292,736,2.132,750,2.164,770,1.132,782,1.331,795,1.221,801,2.589,825,1.175,860,1.221,867,2.132,1043,0.8,1236,1.255,1312,1.046,1315,0.727,1505,0.807,1543,0.911,1571,0.849,1667,1.119,1687,0.483,1692,1.352,1693,1.352,1694,3.986,1695,3.162,1698,1.352,1699,1.205,1700,1.352,1701,2.684,1704,1.352,1706,1.352,1708,1.352,1709,1.352,1712,1.352,1713,1.352,1714,2.233,1715,1.352,1716,2.233,1717,1.238,1719,1.352,1720,1.352,1721,3.664,1722,1.352,1723,1.352,1724,1.352,1725,2.851,1726,2.233,1727,1.352,1730,2.102,1732,1.273,1733,1.273,1734,1.352,1735,2.102,1882,1.569,1910,0.92,2004,0.878,2040,1.604,2043,1.692,2044,1.604,2045,1.604,2049,1.025,2050,1.035,2065,0.928,2070,1.448,2071,1.604,2072,1.448,2076,1.784,2091,1.451,2127,1.221,2128,1.221,2129,1.255,2130,1.221,2131,1.221,2132,1.221,2133,1.221,2134,1.221,2135,1.221,2136,1.221,2137,1.255,2138,1.221,2139,1.221,2140,1.374,2141,1.374,2142,1.374,2143,1.374,2144,1.374,2145,1.374,2146,1.292,2147,1.374,2148,1.374,2149,1.374,2232,1.398,2233,1.504,2234,1.504,2247,1.842,2248,1.569,2249,1.569]],["t/1544",[0,0.483,1,0.438,8,1.067,15,1.604,18,2.361,42,1.515,43,1.116,52,2.675,62,1.012,91,2.285,93,2.324,94,0.827,98,1.172,99,1.216,123,1.17,195,1.953,209,1.129,213,2.855,235,2.481,260,0.636,264,1.232,267,0.935,291,2.18,292,1.067,293,1.434,294,1.46,295,1.759,320,1.652,322,1.652,330,1.798,343,1.284,356,1.74,367,2.031,391,2.213,398,1.604,414,1.023,463,1.257,486,0.945,500,2.431,511,1.303,515,1.41,519,1.29,531,1.2,541,0.717,548,1.669,565,1.558,583,3.033,604,1.2,605,2.148,632,2.213,647,0.973,653,2.347,657,1.284,699,2.421,735,1.303,736,2.148,737,2.732,770,1.142,782,1.343,795,1.232,801,2.603,825,3.441,860,1.232,867,2.148,1043,0.807,1236,1.266,1312,1.055,1315,0.733,1505,0.814,1543,0.919,1571,0.856,1667,1.129,1687,0.487,1692,1.364,1693,1.364,1694,1.303,1695,1.303,1698,1.364,1699,1.216,1700,1.364,1701,2.7,1704,1.364,1706,1.364,1708,1.364,1709,1.364,1712,1.364,1713,1.364,1714,2.249,1715,1.364,1716,2.249,1717,1.248,1719,1.364,1720,1.364,1721,3.681,1722,1.364,1723,1.364,1724,1.364,1725,2.869,1726,2.249,1727,1.364,1730,2.117,1732,1.284,1733,1.284,1734,1.364,1735,2.117,1756,4.411,1882,1.582,1910,0.928,2004,0.884,2040,1.618,2043,1.704,2044,1.618,2045,1.618,2049,1.033,2050,1.044,2065,0.936,2070,1.46,2071,1.618,2076,1.799,2091,1.462,2127,1.232,2128,1.232,2129,1.266,2130,1.232,2131,1.232,2132,1.232,2133,1.232,2134,1.232,2135,1.232,2136,1.232,2137,1.266,2138,1.232,2139,1.232,2140,1.386,2141,1.386,2142,1.386,2143,1.386,2144,1.386,2145,1.386,2146,1.303,2147,1.386,2148,1.386,2149,1.386,2151,2.373,2232,1.41,2233,1.517,2234,1.517,2248,1.582,2249,1.582,2250,2.613,2251,2.613,2252,2.373]],["t/1546",[0,0.469,1,0.431,8,1.023,15,1.549,18,2.317,42,3.01,43,1.07,52,2.626,62,0.971,91,2.207,93,2.281,94,0.793,98,1.132,99,1.165,121,0.981,123,1.122,195,1.903,209,1.082,213,3.329,235,2.424,260,0.61,264,1.181,267,0.903,291,2.105,292,1.023,293,1.375,294,1.4,295,1.699,320,1.596,322,1.596,330,1.736,343,1.231,356,1.689,367,1.961,391,2.138,398,1.549,414,0.981,463,1.214,486,0.906,500,2.36,511,1.249,515,1.352,519,1.849,531,1.15,541,0.687,548,1.612,565,1.505,580,1.136,583,3.699,604,1.15,605,2.074,632,3.192,647,0.933,653,2.278,657,1.231,699,2.359,735,1.249,736,2.074,770,1.095,782,1.287,795,1.181,801,2.536,825,1.136,860,1.181,867,2.074,1043,0.774,1236,1.214,1312,1.012,1315,0.703,1505,0.78,1526,1.63,1529,1.046,1543,0.881,1571,0.821,1667,1.082,1687,0.467,1692,1.308,1693,1.308,1694,1.249,1695,1.249,1698,1.308,1699,1.165,1700,1.308,1701,2.621,1704,1.308,1706,1.308,1708,1.308,1709,1.308,1712,1.308,1713,1.308,1714,2.171,1715,1.308,1716,2.171,1717,1.197,1719,1.308,1720,1.308,1721,3.597,1722,1.308,1723,2.785,1724,1.308,1725,2.785,1726,2.171,1727,1.308,1730,2.044,1732,1.231,1733,1.231,1734,1.308,1735,2.044,1882,1.517,1910,0.889,2004,0.854,2040,1.551,2043,1.645,2044,1.551,2045,1.551,2049,0.991,2050,1.001,2065,0.898,2070,1.4,2076,1.725,2091,1.411,2127,1.181,2128,1.181,2129,1.214,2130,1.181,2131,1.181,2132,1.181,2133,1.181,2134,1.181,2135,1.181,2136,1.181,2137,1.214,2138,1.181,2139,1.181,2140,1.329,2141,1.329,2142,1.329,2143,1.329,2144,1.329,2145,1.329,2146,1.249,2147,1.329,2148,1.329,2149,1.329,2178,2.275,2232,1.352,2233,1.455,2234,1.455,2248,1.517,2249,1.517,2252,2.275,2253,2.505]],["t/1548",[0,0.481,1,0.367,8,2.594,15,2.365,18,1.261,26,2.952,42,1.508,48,1.661,52,2.523,61,1.569,91,2.275,94,0.823,98,0.707,99,1.994,118,3.035,120,2.442,121,1.017,123,2.451,213,1.92,227,2.866,235,1.508,260,0.632,267,1.189,291,2.169,293,1.426,294,1.452,320,0.996,322,0.996,361,2.354,396,2.952,398,0.967,414,1.017,419,3.048,463,1.251,519,1.285,531,1.969,535,3.048,541,1.742,548,1.007,565,1.551,566,2.541,583,1.714,599,3.441,699,1.628,770,1.874,801,1.751,825,1.944,860,1.225,1043,0.802,1181,4.374,1315,0.729,1505,0.809,1526,1.69,1529,1.084,1543,0.914,1571,0.851,1667,1.122,1687,0.484,1694,2.137,1695,2.137,1699,1.994,1710,4.641,1753,3.635,1755,3.635,1756,3.441,1759,3.635,1761,3.635,1762,3.635,1763,3.635,1768,3.635,1769,5.386,1770,3.635,1771,3.635,1772,3.635,1773,3.635,1774,3.635,1775,3.635,1777,3.635,1779,3.635,1782,6.075,1784,3.635,1785,3.635,1786,3.635,1787,5.386,1788,3.635,1790,3.635,1910,0.922,2004,0.88,2043,1.028,2049,1.028,2050,1.038,2065,0.931,2072,1.452,2091,1.455,2127,2.021,2128,2.021,2130,2.995,2131,2.021,2132,2.021,2133,2.021,2134,1.225,2135,2.021,2136,2.021,2138,2.021,2139,2.021,2232,1.402,2233,1.509,2234,1.509,2247,1.847,2248,1.573,2249,1.573,2254,2.598,2255,2.359,2256,3.894,2257,3.894,2258,3.894,2259,2.359,2260,2.359,2261,3.894,2262,3.894,2263,3.894,2264,2.359,2265,2.359,2266,2.359,2267,2.359,2268,2.359,2269,3.894,2270,3.894,2271,2.359,2272,2.359,2273,2.359,2274,2.359,2275,2.359,2276,2.359,2277,2.359]],["t/1550",[0,0.492,1,0.459,18,2.262,52,3.15,91,4.08,94,1.774,98,1.524,99,2.606,121,2.193,235,2.705,260,1.364,267,1.216,291,3.891,293,3.075,294,3.131,320,2.148,322,2.148,398,2.086,414,2.193,418,2.066,463,2.244,519,2.062,548,2.17,565,2.782,567,4.762,757,4.295,860,2.641,1043,1.73,1315,1.572,1327,6.519,1328,6.519,1329,4.749,1526,3.645,1543,1.971,1571,1.835,1667,2.42,1687,1.044,2004,1.15,2043,2.216,2049,2.216,2050,2.239,2091,2.609,2232,3.022,2233,3.253,2234,3.253,2247,3.983,2248,3.392,2249,3.392,2278,5.601]],["t/1552",[18,2.482,52,3.139,91,4.476,94,2.037,121,2.518,267,1.397,291,4.269,293,3.531,294,3.595,319,3.255,414,2.518,463,2.462,519,2.211,524,4.429,525,4.301,548,2.492,565,3.052,860,3.032,1043,1.987,1526,4.185,1543,2.263,1571,2.107,1667,2.779,1687,1.199,1780,5.842,2004,1.321,2006,2.917,2091,2.863,2232,3.47,2233,3.735,2234,3.735,2247,4.574,2248,3.895,2249,3.895,2279,6.432]],["t/1554",[18,2.482,52,3.139,91,4.476,94,2.037,121,2.518,267,1.397,291,4.269,293,3.531,294,3.595,319,3.255,339,3.895,414,2.518,463,1.877,519,2.211,548,2.492,565,3.052,860,3.977,1330,4.574,1331,4.932,1526,4.185,1571,2.107,1667,2.779,1687,1.199,1888,5.842,2004,1.321,2006,2.917,2091,2.863,2093,3.735,2232,3.47,2233,3.735,2234,3.735,2247,4.574,2248,3.895,2249,3.895,2280,6.432]],["t/1556",[18,2.667,52,3.023,91,4.81,94,2.278,267,1.562,291,4.588,293,3.95,294,4.021,396,4.954,414,2.816,519,1.689,600,6.1,860,3.392,1571,2.357,1667,3.108,1687,1.341,2004,1.477,2006,3.262,2091,2.441,2093,4.178,2232,3.882,2233,4.178,2234,4.178,2247,5.115,2248,4.356,2249,4.356]],["t/1558",[18,2.459,27,3.117,52,3.117,91,4.435,94,2.008,121,2.483,267,1.377,291,4.23,293,3.482,294,3.545,414,2.483,418,2.339,463,2.44,519,2.196,548,2.457,556,3.928,565,3.024,860,2.99,1043,1.959,1315,1.78,1525,3.612,1526,4.127,1543,2.231,1571,2.078,1667,2.74,1687,1.182,1922,5.378,2004,1.302,2091,2.836,2095,4.673,2232,3.422,2233,3.683,2234,3.683,2247,4.51,2248,3.841,2249,3.841,2281,6.342]],["t/1560",[0,0.464,1,0.322,8,2.515,15,3.053,18,1.21,26,2.832,42,1.447,43,1.756,48,1.594,52,2.61,61,1.521,91,2.182,94,0.782,98,0.672,118,2.943,120,2.342,121,0.967,213,1.842,227,2.75,235,0.869,260,0.602,267,1.147,291,2.081,293,1.357,294,1.381,320,0.948,322,0.948,361,2.258,396,2.832,398,0.92,414,0.967,419,2.924,463,1.2,519,1.999,531,3.141,535,2.924,541,1.689,548,0.957,565,1.911,566,2.438,580,1.865,583,1.644,599,3.302,699,2.804,770,1.798,801,2.515,825,1.865,860,1.165,1043,0.763,1181,4.241,1315,0.693,1505,0.77,1526,1.608,1529,1.717,1543,0.869,1571,0.81,1667,1.067,1687,0.461,1694,2.051,1695,2.051,1699,1.913,1710,3.487,1753,3.487,1755,3.487,1756,3.302,1759,3.487,1761,3.487,1762,3.487,1763,3.487,1768,3.487,1769,5.222,1770,3.487,1771,3.487,1772,3.487,1773,3.487,1774,3.487,1775,3.487,1777,3.487,1779,3.487,1782,3.302,1784,3.487,1785,3.487,1786,3.487,1787,5.222,1788,3.487,1790,3.487,1860,2.095,1910,0.877,2004,0.845,2043,0.977,2049,0.977,2050,0.988,2065,0.886,2091,1.396,2127,1.939,2128,1.939,2130,2.904,2131,1.939,2132,1.939,2133,1.939,2134,1.165,2135,1.939,2136,1.939,2138,1.939,2139,1.939,2173,3.735,2232,1.333,2233,1.435,2234,1.435,2245,1.984,2248,1.496,2249,1.496,2255,2.244,2256,3.735,2257,3.735,2258,3.735,2259,2.244,2260,2.244,2261,3.735,2262,3.735,2263,3.735,2264,2.244,2265,2.244,2266,2.244,2267,2.244,2268,2.244,2269,3.735,2270,3.735,2271,2.244,2272,2.244,2273,2.244,2274,2.244,2275,2.244,2276,2.244,2277,2.244,2282,2.471,2283,2.471,2284,2.095]],["t/1562",[18,2.437,44,3.874,52,3.096,91,4.395,94,1.981,121,2.449,248,3.031,260,1.523,267,1.358,291,4.192,293,3.434,294,3.497,319,3.166,354,3.633,414,2.449,519,2.181,548,2.424,565,3.36,860,3.905,1526,5.39,1571,2.049,1667,2.702,1687,1.166,2004,1.285,2006,2.837,2091,2.811,2093,4.811,2232,3.375,2233,3.633,2234,3.633,2248,3.788,2249,3.788,2284,5.304,2285,6.255,2286,6.255,2287,6.255]],["t/1564",[18,2.654,52,3.008,91,4.787,94,2.26,264,3.365,267,1.55,291,4.565,293,3.919,294,3.99,414,2.794,463,2.083,519,1.676,1043,2.205,1543,2.511,1571,2.339,1667,3.084,1687,1.33,2004,1.466,2006,3.237,2091,2.422,2202,6.483,2232,3.851,2233,4.145,2234,4.145,2248,4.322,2249,4.322,2284,6.052]],["t/1566",[15,3.029,18,2.393,27,2.992,52,3.054,91,4.316,94,1.928,260,1.981,267,1.322,291,4.117,293,3.342,294,3.403,414,2.383,418,2.245,463,2.374,519,2.151,548,2.359,565,2.943,860,2.87,1315,1.709,1543,2.142,1566,2.87,1571,1.995,1667,2.63,1687,1.135,1737,6.898,1922,5.162,2004,1.25,2071,3.771,2091,2.76,2095,4.485,2192,5.53,2232,3.285,2233,3.536,2234,3.536,2249,3.687,2288,6.088,2289,6.088,2290,8.135,2291,6.088]],["t/1569",[1,0.367,86,3.147,88,2.967,292,2.87,395,6.849,402,6.352,418,2.591,541,2.45,565,3.232,707,4.573,770,3.072,926,8.564,949,4.256,1089,7.884,1192,6.383,1515,4.997,1531,6.383,1687,1.31,2003,4.997,2004,1.443,2093,4.081,2245,5.641,2292,7.027]],["t/1571",[418,3.121,491,3.745,541,2.321,560,5.507,698,5.126,1687,1.577,1800,5.507,2003,6.019,2004,1.738,2093,4.916,2293,8.464]],["t/1573",[418,3.092,565,3.034,926,6.732,1093,6.732,1666,3.034,1687,1.563,1800,5.457,1804,7.617,2003,5.963,2004,1.722,2294,8.386,2295,8.386]],["t/1575",[61,2.11,122,4.139,418,3.151,541,2.343,698,5.174,1687,1.592,1800,5.559,2003,6.075,2004,1.754,2093,4.962]],["t/1577",[3,2.537,17,4.314,18,2.722,41,1.266,122,3.599,248,3.599,260,1.809,418,2.739,486,2.688,549,3.502,653,3.95,698,4.499,750,3.759,1502,3.759,1514,5.696,1666,2.688,1667,3.209,1687,1.384,1897,4.601,1900,6.747,1901,6.747,2004,1.526,2296,7.428]],["t/1579",[18,2.898,48,3.191,61,2.034,266,3.99,418,3.037,653,4.207,1514,6.314,1515,5.855,1687,1.535,2004,1.691,2297,7.479,2298,7.479]],["t/1581",[292,3.556,418,3.211,541,2.388,867,4.341,1687,1.623,2004,1.788,2093,5.057,2299,8.707]],["t/1583",[418,3.151,770,3.735,777,6.295,1687,1.592,1690,7.244,2003,6.075,2004,1.754,2093,4.962,2300,8.543,2301,8.543]],["t/1586",[22,1.833,61,1.998,87,3.415,94,2.561,118,3.865,292,3.303,413,3.579,418,2.983,534,5.263,647,3.012,1312,3.268,1616,5.959,1652,3.536,1687,1.507,1897,5.01,2004,1.661]],["t/1588",[87,3.477,118,3.935,292,3.363,354,4.782,395,6.314,413,3.643,418,3.037,541,2.258,1312,3.327,1341,4.521,1667,3.558,1687,1.535,1897,5.1,2004,1.691]],["t/1590",[87,3.477,118,3.935,292,3.363,354,4.782,413,3.643,418,3.037,541,2.258,1312,3.327,1341,4.521,1598,7.479,1667,3.558,1687,1.535,1897,5.1,2004,1.691]],["t/1592",[87,3.477,118,3.935,292,3.363,354,4.782,413,3.643,418,3.037,541,2.258,1312,3.327,1341,4.521,1596,7.479,1667,3.558,1687,1.535,1897,5.1,2004,1.691]],["t/1594",[87,3.477,118,3.935,292,3.363,354,4.782,413,3.643,418,3.037,541,2.258,1312,3.327,1341,4.521,1594,7.479,1667,3.558,1687,1.535,1897,5.1,2004,1.691]],["t/1596",[87,3.415,118,3.865,292,3.303,319,4.093,354,4.697,413,3.579,418,2.983,463,2.361,541,2.218,1312,3.268,1341,4.441,1667,3.494,1687,1.507,1897,5.01,2004,1.661,2302,8.088]],["t/1598",[17,4.697,87,3.415,99,3.763,122,3.919,413,3.579,418,2.983,463,2.361,541,2.218,780,6.493,1602,7.346,1606,7.346,1652,3.536,1667,3.494,1687,1.507,2004,1.661,2303,8.088]],["t/1600",[87,3.445,118,3.9,292,3.333,354,4.74,413,3.611,418,3.009,541,2.238,1275,7.412,1312,3.297,1341,4.48,1667,3.526,1687,1.521,1824,6.919,1897,5.055,2004,1.676]],["t/1602",[413,3.71,418,3.092,463,2.448,541,2.3,1529,3.501,1620,7.617,1645,7.111,1652,3.666,1687,1.563,2004,1.722,2304,8.386,2305,8.386]],["t/1604",[87,3.188,98,2.055,118,4.466,201,5.2,268,4.79,418,2.785,541,2.071,565,2.732,1312,3.051,1350,6.062,1502,3.822,1524,6.403,1687,1.407,1824,8.605,1906,6.403,2004,1.551,2006,4.238,2306,7.552,2307,7.552,2308,7.552]],["t/1606",[87,3.415,118,3.865,292,3.303,319,4.093,354,4.697,413,3.579,418,2.983,463,2.361,541,2.218,1312,3.268,1341,4.441,1667,3.494,1687,1.507,1897,5.01,2004,1.661,2309,8.088]],["t/1608",[87,3.445,118,3.9,292,3.333,354,4.74,413,3.611,418,3.009,541,2.238,1312,3.297,1341,4.48,1586,6.257,1667,3.526,1687,1.521,1897,5.055,1931,7.412,2004,1.676]],["t/1610",[87,3.415,118,3.865,292,3.303,354,4.697,413,3.579,418,2.983,541,2.218,565,2.926,1312,3.268,1341,4.441,1367,6.858,1530,5.959,1667,3.494,1687,1.507,1897,5.01,2004,1.661]],["t/1613",[3,2.106,29,4.374,263,5.278,413,3.397,418,2.832,541,2.106,565,3.416,591,5.46,595,6.165,733,4.756,778,5.46,811,6.165,1330,5.46,1341,4.216,1565,6.975,1687,1.431,2004,1.577,2085,6.975,2092,6.511,2310,7.679]],["t/1615",[122,4.179,418,3.18,1496,4.365,1515,6.133,1518,6.923,1566,4.066,1687,1.607,1800,5.612,2004,1.771]],["t/1618",[305,6.61,418,3.037,491,4.358,519,1.934,1225,7.479,1687,1.535,1782,6.61,2003,5.855,2004,1.691,2006,3.734,2248,4.987,2298,7.479,2311,8.234]],["t/1620",[361,4.48,418,3.009,491,4.335,497,4.233,547,5.31,577,4.648,1687,1.521,1995,6.919,2004,1.676,2312,8.161,2313,8.161,2314,8.161,2315,8.161]],["t/1623",[3,2.365,120,4.912,362,6.923,418,3.18,1496,4.365,1566,4.066,1687,1.607,2004,1.771,2316,8.624]],["t/1626",[87,3.607,122,4.139,418,3.151,797,6.075,1496,4.324,1515,6.075,1566,4.028,1687,1.592,1800,5.559,2004,1.754]],["t/1628",[61,1.98,295,3.274,418,2.956,565,2.9,721,6.436,1043,2.476,1571,2.627,1687,1.494,2004,1.646,2167,6.436,2297,7.282,2317,8.804,2318,8.017,2319,8.017,2320,8.017,2321,8.017]],["t/1630",[3,2.179,8,3.245,61,1.963,76,4.813,118,3.798,247,5.473,418,2.931,560,5.171,647,2.959,1101,5.473,1496,4.022,1566,3.747,1687,1.481,1995,6.738,2004,1.632,2317,8.758,2322,7.947]],["t/1632",[3,2.218,87,4.114,122,4.722,255,6.341,367,3.813,418,2.983,816,6.202,1525,4.607,1652,3.536,1666,2.926,1687,1.507,2004,1.661,2323,8.088]]],"invertedIndex":[["",{"_index":1,"t":{"821":{"position":[[4,5],[25,8],[45,16],[69,8],[78,5],[112,2],[119,8],[139,10]]},"823":{"position":[[4,8],[24,13],[38,11],[50,4],[63,23],[99,1],[111,21],[137,4],[142,24],[167,9],[196,6],[203,8],[277,2],[333,25],[376,8],[399,12],[487,10],[498,3],[547,2]]},"825":{"position":[[0,7],[39,3],[46,10],[72,7],[82,12],[103,14]]},"827":{"position":[[0,12],[17,9],[31,14]]},"830":{"position":[[4,4],[16,10],[30,5],[39,7],[50,9],[60,7],[71,8],[83,9],[119,5]]},"832":{"position":[[4,14],[23,9],[37,6],[47,14],[62,22],[108,5]]},"834":{"position":[[10,1],[19,1],[27,6],[58,11],[76,6],[108,4],[120,10],[141,5]]},"836":{"position":[[0,5],[10,7],[23,13],[41,1],[63,19],[94,1],[109,11],[127,2],[153,1],[212,1],[234,15],[258,12],[349,18],[372,8],[385,1],[398,6],[409,4],[423,11],[446,7],[457,14],[488,17],[660,8],[673,1],[683,5],[700,14]]},"838":{"position":[[4,6],[38,1],[67,4],[97,1],[107,3],[120,8],[156,9],[173,6],[180,3],[191,3],[207,1],[213,5],[240,3],[251,7],[325,1],[330,2],[342,4],[381,1],[400,7],[408,1],[843,2],[853,7],[861,1]]},"840":{"position":[[8,6],[20,6],[35,2],[47,6],[62,1],[68,4],[78,14],[262,1],[317,7],[333,5],[343,20],[394,1],[456,1],[513,1]]},"842":{"position":[[4,2],[61,2],[75,2],[91,31],[140,16],[174,3],[181,7],[201,27],[235,1],[245,11],[276,8]]},"844":{"position":[[0,2],[10,6],[31,10],[42,12],[72,4],[123,2],[133,10],[242,2],[282,1],[289,2],[296,4],[308,6],[381,18],[407,3],[431,6],[449,4],[454,10],[478,7],[490,5],[521,11],[858,1],[866,1],[1039,4],[1065,1],[1089,23],[1117,5]]},"846":{"position":[[0,12],[13,3],[46,3],[85,9],[113,4],[118,7],[170,8],[195,1],[224,5],[244,4],[255,14],[276,1],[306,11]]},"848":{"position":[[0,12],[22,11],[63,10],[74,2],[86,2],[100,12]]},"850":{"position":[[0,2],[3,3],[43,19],[63,7],[75,4],[104,10],[124,4],[133,11],[150,3],[159,1],[169,9],[185,4],[190,5],[199,2],[210,7],[231,3],[273,7],[289,3],[303,1],[340,1],[351,10],[369,15],[392,10],[410,5],[419,4],[424,9],[434,26],[465,13]]},"852":{"position":[[0,2],[13,6],[81,15],[125,6],[132,1],[200,2],[225,10],[257,1],[264,1],[287,3],[336,15],[372,2],[379,19],[428,3],[432,2],[435,2],[469,2],[515,2],[574,5],[580,12],[603,15],[642,17],[722,5],[736,4]]},"854":{"position":[[13,2],[28,1],[42,19],[74,1],[87,35],[144,3],[160,4],[165,2],[168,2],[171,2],[196,1],[210,6],[253,2],[268,7],[320,2],[340,11],[356,11],[401,4],[431,1],[453,21],[515,39]]},"856":{"position":[[0,2],[40,3],[51,2],[54,2],[94,5],[107,2],[110,2]]},"858":{"position":[[10,4],[28,1],[43,10],[62,45],[108,5],[125,12],[152,1],[161,12],[219,8],[239,5],[245,31],[291,50],[356,6],[363,10],[392,32],[469,3]]},"860":{"position":[[0,19],[28,2],[52,2],[62,6],[86,6],[93,2],[104,6],[127,11],[163,2],[196,21],[247,1]]},"863":{"position":[[0,4],[11,6],[27,61],[106,11],[136,10],[168,5],[206,5],[216,5],[231,3],[235,2],[259,3]]},"865":{"position":[[0,4],[50,7],[307,33],[345,6],[372,10],[398,8]]},"867":{"position":[[0,4],[31,7],[172,33],[210,6]]},"869":{"position":[[16,2],[42,14],[57,2],[76,5],[101,2],[112,3],[124,9],[171,3],[193,3],[205,1],[207,2],[381,1],[396,4],[414,1],[422,14]]},"871":{"position":[[0,1],[9,3],[17,6],[39,6],[53,8],[66,8],[79,6],[93,10],[108,5],[125,8],[134,9],[148,14],[163,3],[193,5],[210,1],[219,2],[233,3],[253,1],[268,1],[290,1],[316,1],[331,1],[362,1],[371,2],[374,10],[389,12],[409,3],[420,11],[432,1],[434,13],[450,3],[458,8],[484,1],[493,8]]},"873":{"position":[[0,2],[3,1],[18,3],[22,8],[39,6],[81,3],[85,4],[90,4],[95,28],[136,4],[193,8],[202,16],[379,8],[396,3]]},"875":{"position":[[0,3],[28,1],[36,3],[50,3],[54,5],[64,11],[90,4],[103,6],[182,7],[208,1],[218,12],[250,8],[263,1],[273,3]]},"878":{"position":[[0,21],[22,3],[33,7],[41,10],[68,4],[86,12],[113,3],[121,16],[138,21],[160,23],[184,3],[223,2],[230,9],[249,9],[287,16],[336,11],[356,3],[372,5],[385,23],[409,2],[425,1],[435,9],[464,5]]},"880":{"position":[[16,1],[24,2],[48,3],[84,10],[103,7],[125,2],[132,6],[147,3],[164,2],[214,3],[243,7],[445,1],[501,1]]},"882":{"position":[[0,7],[16,5],[26,2]]},"884":{"position":[[0,22],[38,27],[66,39],[115,17],[139,1],[162,3],[274,4],[295,1],[327,20],[348,2],[357,14],[379,2],[389,4],[404,9],[421,9],[431,23],[483,2],[486,3],[504,12],[525,1],[534,9],[566,9],[584,23],[618,1],[627,8],[642,18],[674,3]]},"886":{"position":[[16,11],[32,13],[46,6],[59,8],[79,2],[89,7],[128,8],[141,3],[151,7],[169,16],[200,3],[211,1],[219,3],[254,1],[263,14]]},"888":{"position":[[0,10],[18,7],[37,5],[43,8],[58,9],[82,8],[98,4],[111,3],[126,3]]},"890":{"position":[[0,23],[49,15],[68,5],[88,5],[94,6],[101,5],[107,5],[120,3],[139,9],[163,2],[166,3],[175,18],[201,7],[209,5],[222,3],[241,9],[265,2],[268,9],[295,1]]},"892":{"position":[[0,1],[5,23],[44,9],[64,9],[81,7]]},"894":{"position":[[6,4],[21,5],[37,12],[84,11],[101,3],[202,10],[232,7],[255,34],[297,8],[321,10],[339,4],[350,7],[365,14],[429,12],[490,3],[506,10],[542,13],[559,5],[565,2],[574,1],[594,53],[670,22],[721,4],[737,1],[757,15],[776,4],[800,2]]},"896":{"position":[[4,22],[27,2],[30,2],[44,2],[58,7],[116,1],[143,10],[160,13],[185,5],[201,2],[214,7],[253,8],[281,1],[294,13],[318,5],[336,5],[350,8],[380,3],[405,12],[444,2],[470,5],[483,7],[510,8],[525,10],[544,5],[554,9],[575,1],[592,1],[598,5],[629,4],[661,5],[685,1],[691,14],[738,5],[764,2],[774,9],[822,5],[844,2],[851,13],[881,5],[902,1],[908,2],[917,4],[931,14]]},"898":{"position":[[0,13],[36,3],[70,9],[84,25],[115,20]]},"900":{"position":[[0,2],[3,2],[6,2],[20,13],[77,20],[124,5],[152,17]]},"902":{"position":[[0,2],[3,4],[8,2],[45,9],[89,11],[134,4]]},"904":{"position":[[0,2],[3,2],[6,2],[59,8]]},"906":{"position":[[0,2],[3,4],[8,2],[43,4],[67,1],[72,7],[103,11],[146,8],[193,20],[222,10],[255,1],[268,3],[333,16],[361,1],[373,15],[391,7]]},"908":{"position":[[0,2],[3,2],[6,2],[48,5],[65,8],[78,6],[94,10],[116,5],[172,1],[185,1],[194,5],[206,2],[269,10]]},"910":{"position":[[0,2],[3,4],[8,2],[41,3],[48,2],[80,5],[89,2],[148,2],[177,5],[226,5],[240,4],[274,5],[292,4]]},"912":{"position":[[0,2],[3,2],[34,8],[77,8]]},"914":{"position":[[0,2],[3,2],[17,4],[31,2],[46,3],[82,25]]},"916":{"position":[[0,2],[3,4],[8,2],[28,2],[96,2]]},"918":{"position":[[10,4],[28,1],[43,10],[62,50],[117,6],[124,18],[164,1],[191,1],[228,25],[298,3]]},"920":{"position":[[0,15]]},"923":{"position":[[4,14],[23,9],[37,6],[47,14]]},"925":{"position":[[0,18],[42,4],[47,1],[49,2],[75,1],[77,4],[105,1],[107,2],[134,22]]},"927":{"position":[[11,4],[19,11],[42,4],[50,6],[72,8],[91,4],[103,10],[117,5],[126,7],[137,12],[150,2],[156,24],[194,2],[204,3],[219,1],[231,5],[237,1],[258,16],[275,2],[285,21],[335,16],[352,3],[359,9],[395,3],[399,27],[427,35],[467,13],[481,42],[524,2],[527,1],[626,9],[639,3],[646,3]]},"929":{"position":[[0,8],[16,20],[40,13],[57,3],[65,4],[111,16],[128,9],[142,20],[166,6],[176,3],[180,11],[195,20],[219,13],[237,3],[245,3],[249,15],[297,9],[407,2],[410,11],[436,3],[512,2],[515,9],[546,13],[572,3],[579,3],[583,3],[590,12],[603,7],[611,2],[614,14],[632,5],[641,30],[672,16],[692,5],[701,3],[705,11],[720,11],[756,7],[767,5],[776,11],[840,4],[849,27],[877,1],[879,14],[935,1],[937,2],[943,5],[952,2],[955,1],[957,13],[971,1],[973,7],[990,8],[1002,5],[1011,3],[1015,1],[1017,14],[1035,11],[1181,1],[1183,5],[1192,6],[1290,1],[1299,14],[1318,9],[1328,8],[1340,5],[1349,24],[1377,12]]},"931":{"position":[[0,6],[10,6],[43,4],[48,40],[93,11],[105,2],[108,4],[145,9],[155,19],[175,9],[197,17],[218,6],[225,7],[287,7],[308,8],[344,4],[353,11],[369,7],[377,5],[411,40],[461,8],[470,26],[497,1],[499,14],[543,1],[545,2],[551,5],[560,2],[563,1],[565,13],[579,1],[581,25],[611,1],[613,20],[749,1],[751,5],[773,11],[807,6],[881,1],[883,8],[895,6],[993,1],[1020,1],[1022,5],[1031,14],[1095,2],[1108,19],[1128,19],[1179,6],[1194,7],[1224,19],[1250,2],[1259,5],[1281,3],[1297,18]]},"933":{"position":[[0,3],[8,6],[18,6],[51,4],[56,40],[101,11],[113,2],[116,4],[153,9],[163,19],[183,13],[200,15],[229,20],[253,3],[257,3],[264,10],[278,8],[295,17],[317,7],[329,2],[335,3],[339,6],[349,9],[359,8],[371,11],[386,11],[401,7],[421,11],[433,7],[445,4],[490,11],[505,7],[516,6],[523,12],[539,22],[562,1],[564,5],[573,9],[586,5],[592,1],[594,26],[627,2],[720,1],[729,1],[731,29],[767,2],[841,2],[854,19],[874,19],[925,5],[944,8],[960,17],[984,2],[993,5],[1015,3],[1031,19]]},"935":{"position":[[23,7],[53,1],[59,3],[63,2],[89,22],[134,3],[138,7],[172,5],[181,21],[215,3],[219,2],[222,4],[259,9],[269,16],[286,7],[317,11],[329,1],[331,13],[374,1],[376,2],[387,2],[406,1],[429,2],[466,1],[468,6],[514,1],[558,1],[560,11],[578,2],[629,2],[664,1],[666,15],[731,17],[759,19],[779,15],[802,3],[821,3]]},"937":{"position":[[0,2],[3,1],[18,3],[22,13],[40,3],[49,21],[71,5],[77,13],[97,1],[105,6],[114,26],[141,7],[190,5],[236,7],[244,9],[254,6],[265,13],[318,29],[353,4],[362,4],[373,9],[383,4],[388,3],[392,2],[411,4],[466,1],[484,1],[534,13],[552,20],[581,18],[600,6],[609,1],[640,2],[643,1],[648,4],[669,4],[724,1],[742,1],[792,13],[810,16],[827,1],[832,1],[837,4],[946,1],[951,6],[983,1],[988,1],[993,6],[1004,10],[1035,3],[1039,30],[1070,2],[1073,2],[1101,4],[1111,2],[1170,1],[1174,2],[1183,1],[1185,1],[1200,1],[1202,1],[1204,2],[1340,28],[1390,5],[1431,10],[1445,2],[1452,3],[1460,5],[1469,2],[1476,5],[1487,9],[1508,10],[1519,8],[1554,16],[1581,8],[1590,2],[1593,2],[1606,5],[1637,4],[1667,3],[1674,8],[1686,2],[1715,2],[1725,4],[1820,5],[1846,16],[1893,3],[1897,5],[1908,8],[1939,1],[1946,1],[1977,1],[2011,1],[2045,2],[2051,6],[2063,9],[2077,14],[2103,1],[2120,1],[2138,1],[2150,1],[2197,1],[2233,1],[2272,1],[2316,9],[2330,6],[2342,9],[2352,3],[2356,2],[2366,7],[2386,4],[2397,14],[2417,4],[2427,2],[2430,2],[2438,4],[2461,14],[2476,2],[2484,13],[2501,21],[2523,2],[2531,14],[2565,1],[2570,6],[2602,1],[2609,1],[2640,1],[2674,1],[2708,1],[2726,8],[2752,10]]},"939":{"position":[[4,19],[31,3]]},"941":{"position":[[0,2],[3,1],[18,3],[26,4],[35,2],[66,5],[79,2],[82,8],[91,9],[101,4],[113,2],[116,38]]},"943":{"position":[[0,4],[5,3],[9,11],[28,5],[34,4],[60,2],[74,2],[77,16],[98,8],[107,2],[138,12],[170,7],[178,1],[180,4],[215,1],[217,4],[252,2],[282,12],[307,4],[312,2],[319,8],[330,1],[340,4],[352,17],[400,20],[421,2],[427,5],[440,5],[446,4],[451,16],[472,8],[481,16],[505,5],[527,3],[531,2],[555,8],[592,4],[607,2],[641,12],[665,7],[673,1],[675,4],[710,1],[712,4],[750,9],[763,1],[768,2],[801,12],[821,9],[834,1],[839,1],[844,5],[850,2],[857,8],[868,1],[878,4],[890,17],[938,12],[958,9],[971,1]]},"945":{"position":[[0,4],[5,3],[9,2],[33,4],[45,8],[61,3],[65,10],[83,3],[87,2],[118,12],[150,7],[158,1],[160,4],[195,1],[197,4],[232,8],[286,12],[306,3],[310,2],[340,12],[365,8],[419,2],[443,4],[451,10],[469,3],[473,2],[476,16],[500,5],[522,3],[526,16],[545,1],[554,4],[569,2],[575,5],[588,3],[592,1],[597,3],[629,12],[653,7],[661,1],[663,4],[698,1],[700,4],[738,9],[751,1],[756,1],[761,9],[816,2],[822,7],[837,3],[841,1],[846,3],[877,12],[897,9],[910,1],[915,1],[920,9]]},"947":{"position":[[16,6],[30,12],[50,10],[61,1],[70,9],[80,1],[251,1],[271,8],[283,15],[306,3],[310,1],[511,1],[570,8],[611,10],[773,9],[790,35],[852,1],[861,25],[894,9],[931,8],[991,2],[1001,7],[1047,11]]},"949":{"position":[[0,13],[37,3],[57,3],[71,13],[85,9],[99,25],[130,20]]},"951":{"position":[[0,13],[21,17],[46,13],[65,25]]},"954":{"position":[[0,2],[3,4],[8,2],[61,2],[84,1],[148,13],[169,2],[222,13],[240,4],[293,13],[311,4],[342,8],[399,4],[409,2],[443,2],[575,1],[579,2],[588,1],[603,1],[605,1],[607,3],[748,5],[789,2],[855,3],[862,8],[874,2],[907,2],[917,4],[1074,5],[1170,3],[1193,2],[1202,2]]},"956":{"position":[[0,2],[3,4],[8,2],[45,8],[61,1],[69,4],[108,2],[132,3],[172,8],[187,10],[251,2],[267,3],[294,4],[345,5],[356,6],[397,18]]},"958":{"position":[[0,2],[3,4],[8,2],[68,1],[76,4],[92,5],[148,7],[178,3],[187,8],[200,12]]},"961":{"position":[[0,2],[3,2],[6,2],[21,2],[30,2],[44,13],[101,20],[148,5],[176,17]]},"963":{"position":[[0,2],[3,2],[6,2],[42,4],[84,4],[158,12],[218,12],[251,1],[257,11],[279,4]]},"965":{"position":[[0,2],[3,2],[6,2],[91,8]]},"967":{"position":[[0,2],[3,2],[6,2],[36,2],[46,4]]},"969":{"position":[[0,2],[3,2],[6,2],[45,2],[55,1],[67,2],[111,4],[119,1],[131,2],[185,3],[198,13],[245,2],[256,3],[265,2],[288,3],[331,4],[425,1],[476,1],[482,2],[490,2],[521,5],[530,4],[543,2],[598,3],[606,4],[648,4],[672,3],[682,10],[700,2],[722,2],[746,5],[760,5],[779,1],[789,3],[809,2],[818,24],[850,3],[873,5],[894,7],[916,2],[925,6],[940,22],[990,6],[1015,2],[1024,6],[1039,22],[1088,8]]},"971":{"position":[[0,2],[3,2],[41,17]]},"973":{"position":[[0,2],[3,2],[22,5],[38,3],[62,2],[76,6],[110,2],[117,3],[161,4],[202,2],[209,9],[245,2],[253,3]]},"975":{"position":[[0,2],[3,2],[28,8],[79,8],[130,8],[199,8],[280,8],[317,8],[360,8]]},"977":{"position":[[0,2],[3,2],[17,4],[37,1],[50,5],[62,2],[74,2],[89,3],[125,25],[167,6],[180,1]]},"979":{"position":[[0,2],[3,4],[8,2],[28,2],[76,2],[131,2],[174,2],[254,2],[272,9],[290,4]]},"981":{"position":[[0,15],[4647,2],[4654,1],[4656,1],[4658,2],[4679,1],[4681,1],[4683,3],[5396,1]]},"983":{"position":[[4,2],[30,13]]},"987":{"position":[[0,2],[9,11],[27,10],[94,7],[108,2],[141,16],[166,5],[175,12],[192,5],[205,3],[209,5],[218,9],[232,3],[243,11],[302,3],[306,7],[355,2],[362,9],[379,2],[391,2],[397,2],[400,6],[410,3],[421,4],[426,6],[440,4],[451,6],[458,11],[477,10],[495,1],[500,6],[507,2],[517,16],[540,5],[552,15]]},"989":{"position":[[0,1],[8,23],[39,6],[71,3],[78,6],[89,8]]},"991":{"position":[[4,7],[39,8],[54,12],[67,2],[74,2],[77,4]]},"993":{"position":[[0,12],[20,4],[55,9],[113,4],[125,1],[133,28],[175,32],[228,6],[242,27],[292,5],[301,7],[340,14],[355,2],[358,8],[370,14],[392,6],[405,15],[428,7],[439,9],[452,4],[457,7],[468,11],[496,3],[500,23]]},"995":{"position":[[18,1],[33,15],[56,2],[63,20],[108,3],[151,7],[238,4]]},"997":{"position":[[0,2],[3,1],[86,6],[109,5],[119,12],[170,6]]},"998":{"position":[[20,3],[79,6],[465,5],[485,7],[520,9],[551,5],[571,7],[592,1],[601,22],[624,2],[627,2],[647,17],[696,1],[738,4],[789,7],[803,3],[822,1],[902,4],[913,6],[978,6],[1044,7],[1090,2],[1093,2],[1113,17],[1162,1],[1204,4],[1255,7],[1280,12],[1375,2],[1378,2],[1398,17],[1447,1],[1489,4],[1536,2],[1566,1],[1582,2],[1585,2],[1605,17],[1654,1],[1696,4]]},"1000":{"position":[[26,4],[42,7],[61,17],[90,7],[106,1],[133,14],[159,7],[180,24],[205,2],[219,5],[328,8],[348,6]]},"1002":{"position":[[0,1],[28,14],[70,8],[90,1],[95,12],[116,3],[124,3]]},"1004":{"position":[[4,3],[19,11],[35,4],[45,9],[82,31],[114,10],[130,11],[148,1],[161,4],[170,4],[175,6],[188,24],[220,4],[225,10],[247,36],[288,4],[296,16],[318,3],[326,11],[338,3],[356,8],[372,4],[384,32],[422,9],[440,3],[449,7],[464,9],[494,3],[498,2],[505,10],[521,10],[537,5],[548,24],[579,5],[585,7],[600,27],[628,11],[656,6],[678,1],[684,6],[711,6],[744,1],[751,6],[758,6],[769,2],[797,10],[812,5]]},"1006":{"position":[[0,16],[34,1],[67,5],[77,50],[132,10],[147,2],[150,4],[155,2],[202,2],[222,1],[229,47],[379,15],[405,12],[466,70],[555,3],[605,38],[663,3],[667,67]]},"1008":{"position":[[0,8],[28,42],[88,1],[103,4],[119,1],[140,7],[205,23],[286,7],[294,7],[323,10],[334,2],[346,11],[368,6],[386,4],[391,4],[402,1],[412,1],[433,7],[500,23],[584,6],[595,13],[620,18],[653,2],[660,7],[688,7],[696,7],[722,10],[733,2],[741,11],[781,1],[796,6],[814,4],[819,4],[829,1],[850,7],[933,14],[953,18]]},"1010":{"position":[[4,22],[27,2],[30,19],[84,1],[99,3],[103,26],[138,3],[142,2],[151,29],[187,10]]},"1012":{"position":[[0,17],[25,5],[31,3],[42,8],[84,3],[95,8],[135,6]]},"1014":{"position":[[0,18],[23,38],[62,18],[81,34],[122,4],[138,4],[148,4]]},"1016":{"position":[[0,6],[12,21],[52,5]]},"1019":{"position":[[0,20],[25,3],[29,23],[78,15],[97,5],[117,5],[123,5],[136,3],[155,9],[179,2],[182,20],[210,7],[218,8],[233,14],[248,11],[266,7],[274,24]]},"1021":{"position":[[0,2],[6,9]]},"1023":{"position":[[0,42]]},"1025":{"position":[[4,8],[20,5],[29,20],[50,8],[70,9],[99,5],[129,20],[174,14],[210,14],[261,1],[278,1],[295,1],[379,2],[382,18],[464,1],[503,1],[520,1],[604,43],[648,4],[660,5],[670,15],[686,2],[689,2],[699,37],[750,47],[838,18],[905,3],[916,5],[933,7],[963,15],[986,4],[997,3]]},"1027":{"position":[[0,2],[5,15],[28,15],[51,5],[64,6],[83,3],[97,24],[129,6],[181,6],[194,4],[206,3],[239,1],[256,1],[273,1],[357,2],[360,18],[442,1],[481,1],[498,1],[582,10],[600,10],[611,7],[680,12],[764,6],[781,3],[785,7],[813,2],[816,5],[828,19],[861,5],[871,10]]},"1029":{"position":[[0,2],[14,12],[34,5],[46,16],[69,13],[83,1],[88,5],[100,6],[114,5],[126,13],[146,5],[166,15],[188,3]]},"1031":{"position":[[6,6],[17,10],[35,3],[42,59],[109,19],[136,4],[144,12],[164,46],[213,1],[221,5],[227,2],[234,5],[243,2],[246,11],[293,16],[310,17],[363,5],[386,15],[405,2],[443,14]]},"1033":{"position":[[0,2],[3,3],[17,13],[34,4],[64,2],[70,3],[79,8],[95,7],[108,2],[124,1],[144,1],[186,69],[276,5],[287,1],[296,10],[307,5],[320,3],[339,9],[363,10],[379,5],[385,8],[400,14],[415,11],[433,7],[441,9],[464,3],[475,21],[517,5],[552,1],[601,2],[604,18],[686,1],[757,14],[779,16],[825,1],[909,2],[912,18],[994,1],[1100,20],[1121,1],[1324,11],[1364,9],[1395,1],[1403,6],[1416,12],[1436,3],[1469,1],[1551,10],[1569,10],[1580,7],[1649,12],[1733,6],[1750,3],[1754,7]]},"1035":{"position":[[0,13],[21,16],[53,8],[109,30],[145,14],[204,7],[229,8],[245,3],[274,5]]},"1037":{"position":[[0,17],[22,5]]},"1039":{"position":[[4,3],[13,3],[28,10],[50,36]]},"1041":{"position":[[0,5],[24,2],[53,3]]},"1043":{"position":[[0,2],[7,5]]},"1045":{"position":[[0,3],[20,4]]},"1047":{"position":[[4,11],[20,17],[38,14],[60,1],[70,2],[80,6],[104,6],[111,2],[122,10],[142,5],[166,5],[176,3],[194,2],[208,3],[265,2],[268,6],[279,3],[291,10],[336,4],[346,32],[379,2],[386,10],[408,10],[430,17],[448,2],[462,1],[491,14],[506,20]]},"1049":{"position":[[0,13],[21,3]]},"1051":{"position":[[0,4],[20,9],[40,5]]},"1053":{"position":[[14,9],[36,5],[48,3],[58,3],[69,2]]},"1055":{"position":[[0,6],[11,10],[25,9],[38,19],[75,7],[86,1],[99,1],[113,9],[126,2],[147,8],[159,1],[172,4]]},"1057":{"position":[[5,1],[36,1],[54,14],[97,29],[189,14],[239,3],[247,4],[282,7],[296,3],[311,20],[338,30]]},"1059":{"position":[[26,9],[41,22],[78,4],[121,6],[140,7],[154,16],[175,11],[197,18],[460,1],[570,5],[576,2],[579,2],[582,2],[590,8],[624,2],[643,4],[659,4],[685,3],[745,6],[788,11],[831,2],[857,4],[868,1],[877,3],[911,4],[927,1],[954,5],[997,7],[1019,7],[1033,7],[1055,6],[1068,1],[1097,4],[1174,7],[1221,5],[1238,19],[1277,2],[1285,11],[1303,1],[1339,3],[1382,9],[1413,4],[1454,6],[1465,4],[1481,8],[1509,12],[1530,4],[1597,2],[1607,2],[1615,6],[1633,17],[1656,7]]},"1061":{"position":[[0,2],[3,1],[18,3],[22,9],[66,4],[113,8],[132,19],[183,3],[187,2],[209,4],[224,1],[261,3],[265,10],[292,12],[363,14],[498,1]]},"1063":{"position":[[0,2],[17,4],[30,7],[42,4],[55,1],[86,33],[127,21],[161,2],[171,4],[183,1],[195,13]]},"1065":{"position":[[0,13],[18,9],[32,9],[46,6],[53,9],[67,9],[77,7],[89,11],[101,27],[134,2],[144,13],[172,1],[186,2],[194,38]]},"1067":{"position":[[0,20],[48,16]]},"1069":{"position":[[0,30],[38,7],[46,9],[63,13]]},"1071":{"position":[[0,17],[32,3],[36,19],[60,3]]},"1073":{"position":[[0,21],[33,8],[42,41]]},"1075":{"position":[[0,1],[11,8],[24,5],[34,3],[38,1],[44,4],[56,7],[186,19],[210,3]]},"1078":{"position":[[0,3],[8,27],[40,8],[49,1],[60,4],[69,41],[126,13],[140,1],[153,2],[160,31],[251,17],[296,23],[478,2],[507,6],[526,17]]},"1080":{"position":[[0,15],[26,5],[32,5],[38,10],[64,10],[119,5],[142,10],[253,2],[263,1],[271,4],[311,41],[436,1],[442,5],[448,28],[506,1],[523,1],[540,1],[624,15],[712,1],[798,1],[813,2],[820,2],[831,5],[851,14]]},"1083":{"position":[[0,19],[20,1],[31,8],[44,8],[57,3],[65,10],[111,8],[124,3],[128,10],[154,3],[162,8],[175,41],[217,2],[224,15],[244,4]]},"1085":{"position":[[4,43],[48,12],[65,6],[92,11],[108,4],[113,1],[115,3],[120,3],[131,5],[137,2],[140,10],[177,2],[185,4],[216,1],[226,8],[260,9],[301,23],[351,1],[360,6],[372,9],[447,4],[506,1],[524,27]]},"1087":{"position":[[0,10],[15,28],[51,1],[59,6]]},"1089":{"position":[[0,16],[36,11],[56,1],[65,5],[75,6],[82,7],[112,20],[159,5],[171,12],[184,46],[231,18],[258,11],[307,1],[409,1],[513,1],[569,1],[652,1],[747,1],[794,2],[803,16],[849,1],[965,1],[1085,1],[1181,1],[1244,1],[1282,22],[1305,2],[1308,44],[1353,4],[1358,12],[1371,40]]},"1091":{"position":[[0,13],[18,9],[28,20],[58,29],[122,20],[266,7],[279,10],[327,8],[385,8],[456,4],[472,9],[493,3],[497,4],[512,9],[532,3],[536,6],[550,21],[572,4],[577,2],[587,22],[617,6],[644,1],[675,10],[693,24],[797,3],[801,5],[814,17],[839,11]]},"1093":{"position":[[0,2],[3,1],[18,3],[22,9],[36,17],[59,14],[103,1],[110,6],[117,5],[130,10],[259,5],[269,3],[284,1],[317,1],[341,1],[366,1],[401,1],[427,8],[441,6],[452,6],[464,8],[478,6],[490,1],[499,12],[516,3],[520,18],[543,6],[550,2],[577,13],[591,14],[610,2],[636,6],[660,4]]},"1095":{"position":[[0,2],[3,1],[18,3],[22,12],[64,1],[104,13],[118,22],[141,1],[143,44],[188,1],[190,9],[200,12],[213,1],[271,1],[359,1],[490,10]]},"1097":{"position":[[0,18],[31,5],[66,2],[97,21],[148,1],[233,11],[249,6],[323,5],[340,5],[358,5],[369,5],[382,8]]},"1099":{"position":[[0,10],[15,6],[33,4]]},"1101":{"position":[[158,1]]},"1103":{"position":[[0,13],[25,13],[39,11],[459,2],[473,3]]},"1105":{"position":[[6,5],[18,5],[163,1]]},"1107":{"position":[[0,13],[18,11],[53,18],[177,2],[191,10],[202,11],[214,26]]},"1109":{"position":[[206,1]]},"1113":{"position":[[0,5],[10,14],[44,5],[66,1],[79,12]]},"1115":{"position":[[8,2],[13,18],[43,6],[69,3],[81,3],[92,16],[116,7],[132,6],[172,3],[176,1],[190,3],[200,6],[214,10],[225,3],[235,6],[259,2],[270,22],[303,5],[319,25],[345,5],[369,10],[390,12],[410,1],[428,4],[433,2],[456,8],[470,6],[499,5],[510,5],[524,5],[552,6],[562,4],[575,14],[621,4],[650,2],[659,7],[680,13],[720,4],[728,2],[734,3],[742,19],[764,4],[804,2],[817,22],[864,2],[875,7],[900,15],[924,4],[957,2],[963,7],[981,30],[1020,4],[1048,4],[1062,2],[1065,1],[1141,4],[1165,1],[1174,12],[1193,27]]},"1117":{"position":[[0,2],[13,10],[27,8],[46,18],[82,3],[86,2],[95,10],[114,1],[123,11],[145,7],[170,3],[174,55],[230,4],[242,4],[292,4],[331,3],[362,1],[400,5],[410,4],[430,1],[439,13]]},"1119":{"position":[[0,2],[26,2],[33,7],[53,22],[101,16],[138,2],[152,9],[182,3],[205,3],[212,6],[241,1],[271,1],[273,2],[288,22],[348,5],[357,6],[370,2],[384,7],[404,3],[427,3],[434,6],[463,1],[493,1],[495,2],[511,22],[572,5],[581,6],[594,2],[612,1],[664,1],[679,15],[699,13],[794,8],[810,1],[821,3],[839,1],[857,1],[891,1],[909,1]]},"1121":{"position":[[10,1],[19,7],[37,11],[89,1],[113,3],[123,3],[135,26],[176,3],[186,12],[199,8],[219,7],[240,5],[256,1],[265,10],[276,5],[305,3],[316,3],[327,13],[360,3],[370,3],[382,8],[391,5],[404,2],[419,1],[441,7],[459,5],[473,5],[492,1],[528,2],[537,3],[549,3],[553,6],[567,3],[583,1],[609,5],[623,3],[641,2],[650,3],[663,1],[673,22],[703,5],[713,5],[741,12],[758,4],[771,1],[798,2],[807,3],[820,1],[830,22]]},"1123":{"position":[[0,2],[3,1],[18,10],[29,1],[44,9],[54,4],[84,37],[130,5],[141,19],[172,1],[180,1],[214,1],[273,1],[301,21],[328,16],[345,2],[352,12],[372,10],[396,1],[522,14],[550,1],[565,16],[595,8],[629,1],[656,11],[672,8],[705,3],[720,2],[750,3],[754,10],[769,4],[782,3],[790,43]]},"1125":{"position":[[0,2],[3,1],[18,3],[22,4],[27,4],[130,14],[145,5],[166,1],[183,3],[191,5],[202,5],[213,18]]},"1127":{"position":[[4,58],[67,9],[91,5],[97,2],[100,50],[151,2],[154,10],[193,11],[219,14],[241,10]]},"1129":{"position":[[4,2],[17,7],[29,15],[56,10],[86,5],[102,5],[114,5],[130,3],[134,15],[157,8],[263,1],[271,2],[313,2],[335,3],[346,3],[371,3],[381,3],[398,2],[409,8],[437,34],[491,1],[511,17],[533,2],[539,9],[552,2],[558,8],[571,8],[599,6],[617,2],[628,8],[669,5]]},"1131":{"position":[[0,1],[27,9],[41,3],[55,9],[79,12],[92,3],[113,9],[123,5],[139,2],[142,1],[153,1],[199,8],[242,5],[282,1],[294,1],[387,2],[390,2],[393,6],[455,1],[460,6],[477,3],[547,16],[594,2],[597,10],[618,6],[629,9],[643,3],[650,14],[673,3]]},"1134":{"position":[[0,1],[51,11],[77,8],[140,3],[156,7],[170,17],[194,3],[215,26],[275,25]]},"1136":{"position":[[4,14],[29,5],[74,1],[129,19],[155,6],[162,8],[188,26]]},"1138":{"position":[[0,10],[21,9],[37,13],[62,6],[78,25],[115,10],[126,7],[134,10],[151,14],[166,32],[210,7],[218,5],[228,14],[247,10],[258,20],[568,1],[570,1],[575,4],[752,2],[755,6],[769,7],[784,7],[824,9],[840,9],[857,20]]},"1140":{"position":[[0,22]]},"1142":{"position":[[0,2],[13,9],[29,8],[48,15],[81,10],[102,9],[112,13],[148,17],[184,3]]},"1144":{"position":[[0,2],[41,14],[62,5],[87,32],[126,5],[138,11],[156,2],[165,17],[183,11],[199,3],[213,9],[241,5],[251,3],[268,4],[273,1],[406,1],[654,5],[673,9],[699,10],[714,10]]},"1146":{"position":[[0,13],[25,9]]},"1148":{"position":[[0,4],[16,33],[58,3],[80,5],[102,6],[120,45],[171,9],[192,17],[217,13],[238,16],[262,5],[284,3],[299,10],[314,32],[363,7],[375,17]]},"1150":{"position":[[0,13]]},"1152":{"position":[[8,23],[101,2],[148,9],[177,4],[182,11],[228,7],[246,5],[323,5],[369,5],[434,5],[450,2],[460,6],[485,20],[513,23],[537,12],[627,5],[852,4],[897,9]]},"1154":{"position":[[8,7],[23,1],[29,10],[58,3],[71,5],[77,2],[80,2],[93,21],[124,21],[154,18],[176,4],[202,12],[219,6],[231,19],[251,2],[254,2],[266,16],[292,17],[315,19],[335,23]]},"1156":{"position":[[0,10],[15,12],[62,3],[66,3],[185,1],[234,1],[282,1],[337,1],[390,1],[541,1],[596,1],[649,1]]},"1158":{"position":[[0,10],[15,12],[62,3],[66,3],[184,1],[233,1],[327,4],[336,11],[370,25]]},"1160":{"position":[[0,4],[12,12],[40,3],[44,1],[56,2],[74,6],[85,2],[143,18],[243,16]]},"1162":{"position":[[4,20],[25,2],[32,12],[51,9],[65,19],[89,25]]},"1164":{"position":[[0,15],[16,38],[70,20],[103,1],[120,21]]},"1166":{"position":[[4,8],[52,4],[57,1],[64,1],[144,12],[194,1],[201,8]]},"1168":{"position":[[4,8],[19,6],[26,13],[40,5],[93,5],[138,2],[149,3],[157,15],[181,8]]},"1170":{"position":[[0,26],[32,2],[35,2],[44,1],[48,1],[65,13],[108,5],[120,1],[133,16],[161,1],[169,27],[203,9],[226,4],[236,3],[253,8],[267,1],[301,5],[310,3],[314,3],[322,30],[364,2],[372,1],[378,14]]},"1172":{"position":[[11,2],[19,12],[32,2],[49,10],[64,2],[72,9],[100,12],[117,2],[126,1],[169,11],[188,8],[205,20],[234,9],[255,3],[267,6],[274,5],[313,6],[320,10],[336,9],[353,9],[368,1],[375,6],[382,4],[387,4],[398,27],[432,13],[451,16],[468,2],[479,2],[493,10],[507,5],[521,3],[535,5],[544,9],[558,7],[577,23],[605,3]]},"1174":{"position":[[0,2],[3,2],[6,1],[8,2],[11,2],[44,7],[57,1],[62,2],[104,1],[137,4],[142,4],[147,2],[164,2],[177,4],[182,4],[195,2],[208,4],[213,4],[218,4],[228,1],[248,3],[262,4],[267,4],[272,4],[282,1],[302,3],[306,14],[321,44]]},"1176":{"position":[[0,7],[12,60]]},"1178":{"position":[[0,3],[15,6],[26,8],[35,4],[40,2]]},"1180":{"position":[[0,26],[31,4],[40,20],[66,6]]},"1182":{"position":[[0,9],[15,10],[30,1],[61,5],[78,7]]},"1184":{"position":[[4,11],[41,1],[66,23],[90,4],[95,2]]},"1186":{"position":[[0,2],[18,2],[32,5],[52,5],[97,1],[132,1],[139,12],[152,2],[155,12],[173,13],[202,4],[221,5],[241,3]]},"1188":{"position":[[0,6],[12,3],[44,8],[86,1],[187,8],[213,3],[231,11],[257,5],[270,11]]},"1190":{"position":[[0,2],[3,2],[20,12],[60,12],[78,8],[87,6],[108,3],[137,6],[177,1],[264,4],[276,10],[304,4],[309,1]]},"1192":{"position":[[0,6],[15,8],[65,8],[79,7],[95,10],[176,9]]},"1194":{"position":[[0,5],[10,28],[43,14],[63,12],[105,2]]},"1196":{"position":[[0,2],[3,2],[10,3],[20,14],[39,3],[43,26],[81,4],[90,6],[97,12],[131,4],[136,46]]},"1198":{"position":[[0,2],[10,4]]},"1200":{"position":[[0,2],[9,4]]},"1202":{"position":[[0,39]]},"1204":{"position":[[0,9],[14,1],[35,3],[59,6]]},"1206":{"position":[[0,5],[15,12],[84,5],[102,6],[113,25]]},"1208":{"position":[[0,2],[12,4],[21,15]]},"1210":{"position":[[17,3],[87,8],[144,9],[173,4],[919,8],[965,25],[1043,12],[1453,2],[1472,2],[1538,21],[1590,7],[1602,10],[1695,1],[1864,1],[2175,15],[2195,11],[2246,16],[2283,4],[2293,12],[2310,71],[2382,1],[2384,3],[2392,5],[2398,1],[2467,1],[2481,1],[2483,6],[2490,1],[2836,2]]},"1212":{"position":[[0,5],[41,1],[73,4],[82,5],[88,2],[99,19],[136,2],[143,17]]},"1214":{"position":[[8,1],[17,16],[52,11],[72,6],[101,5]]},"1216":{"position":[[8,6],[20,46],[94,9],[107,1],[113,1],[152,30],[192,1],[216,37],[306,6],[326,5],[336,25],[400,5],[422,6],[471,24],[509,5],[515,7],[553,7],[578,8],[632,5],[654,8],[681,4],[694,14],[709,5],[726,8],[743,8]]},"1218":{"position":[[4,20],[37,1],[46,9],[68,12],[89,7],[122,7],[138,2],[141,2],[148,22],[180,20],[213,10],[239,6],[260,1],[315,1],[337,1],[371,1],[393,1]]},"1220":{"position":[[0,2],[16,11],[45,6],[108,2],[122,4],[140,3],[180,8],[197,11],[220,1],[274,21]]},"1222":{"position":[[10,6],[49,5],[69,4],[109,10],[143,12],[161,3],[176,2],[188,4],[197,1],[208,3],[220,1],[232,6],[239,2],[256,6],[266,14],[284,4],[297,1],[327,16],[348,7],[391,7],[410,26],[446,11],[461,1],[494,10],[508,21],[533,4],[546,3]]},"1224":{"position":[[0,1],[6,5],[25,3]]},"1226":{"position":[[0,4],[70,7],[89,19],[145,3],[149,2],[152,41],[204,3]]},"1228":{"position":[[0,13],[27,1],[45,24],[77,7],[85,2],[129,1],[173,4],[180,3],[186,2],[230,1],[274,4],[281,3],[287,4],[333,3],[341,5],[378,1],[390,2],[397,5],[405,3],[412,4],[458,3],[466,6],[504,3],[512,5],[520,3]]},"1230":{"position":[[0,3],[38,11],[58,10]]},"1232":{"position":[[43,8],[83,11],[95,2],[108,1],[129,6],[147,1],[160,5],[166,2],[192,4],[197,9],[216,4],[268,3],[272,5],[282,8],[318,6],[336,6],[348,2],[351,8],[364,33]]},"1234":{"position":[[0,9],[34,48],[95,3],[113,6]]},"1236":{"position":[[0,2],[3,1],[18,8],[27,2],[30,22],[53,1],[75,6],[87,2],[201,5],[228,3],[243,17],[300,5],[310,1],[320,2],[335,5],[356,3],[365,8],[374,2],[389,7],[640,1],[655,14],[679,2],[682,3],[691,9],[717,2],[720,5],[731,1],[738,5],[767,7],[815,2],[845,7],[858,6]]},"1238":{"position":[[0,34],[40,2],[47,18],[66,2],[94,19]]},"1240":{"position":[[4,26],[39,1],[48,10],[78,12],[130,1],[137,2],[140,18],[222,1],[251,7],[263,28],[292,12],[339,1],[370,6],[409,3],[421,9],[431,3],[442,10],[464,13],[514,36],[558,1],[566,3],[570,5],[582,15],[606,1],[618,22],[647,3],[680,1],[739,2],[742,18],[824,1],[913,10],[928,3],[938,3],[959,5],[969,4],[995,7],[1010,4],[1054,2],[1057,2],[1060,34],[1109,25]]},"1242":{"position":[[0,7],[12,28]]},"1244":{"position":[[0,16],[36,11],[56,1],[65,5],[75,6],[82,12],[124,1],[131,2],[134,18],[216,1],[245,7],[257,19],[277,4],[282,2],[311,5],[322,5],[332,9],[362,20],[398,1],[404,17],[427,13],[447,5],[477,5],[488,8],[501,3],[528,5],[539,5],[549,3],[573,1],[582,3],[590,13],[619,3],[643,2],[650,20],[686,7],[724,5],[735,8],[826,2],[837,14],[872,7],[897,16],[1012,4],[1025,9],[1039,2],[1049,7],[1071,2],[1080,7],[1114,5],[1137,4],[1150,18],[1178,6],[1210,5],[1239,7],[1276,5],[1287,3],[1299,6],[1330,4],[1339,2],[1346,1],[1427,4],[1436,2],[1443,1],[1493,30],[1553,1],[1587,1],[1594,13],[1616,1],[1625,5],[1631,5],[1645,5],[1674,2],[1683,7]]},"1246":{"position":[[0,14],[19,8],[28,7],[36,2],[39,3],[43,2],[62,3],[70,3],[79,3],[87,7],[132,2],[150,4],[161,1],[167,2],[196,2],[250,2],[266,7],[308,2],[327,4],[338,1],[344,2],[370,2],[422,2],[439,6],[446,9],[456,2],[459,2],[462,6],[469,7],[488,4],[499,1],[505,2],[518,2],[521,11],[533,2],[542,13]]},"1248":{"position":[[0,13],[14,14],[33,10],[56,20],[77,1],[112,1],[143,1],[173,3]]},"1250":{"position":[[0,8],[9,9],[41,1],[51,3],[66,2],[75,2],[78,18],[163,1],[185,7],[193,2],[201,10],[223,5],[267,1]]},"1252":{"position":[[19,9],[33,3],[62,4],[80,5],[100,4],[120,3],[160,2],[167,1],[180,10],[195,2],[207,4],[212,5],[222,10],[240,1],[248,5],[269,1],[288,4],[293,26],[323,7]]},"1256":{"position":[[0,16],[21,10]]},"1258":{"position":[[0,14],[26,12],[43,3],[47,2],[54,3],[70,2],[81,2],[88,5],[94,7],[102,2],[105,2],[149,3],[187,5],[193,7],[214,2],[236,1],[244,3],[260,1]]},"1260":{"position":[[0,6],[18,3],[45,8],[70,3],[74,2],[81,3],[97,2],[108,2],[115,5],[121,7],[129,2],[132,2],[176,3]]},"1262":{"position":[[0,3],[4,2],[11,3],[31,2],[47,2]]},"1264":{"position":[[0,6],[18,1],[26,27],[60,9]]},"1266":{"position":[[11,10],[43,1],[81,1],[93,29],[148,40],[200,5],[215,8],[232,3],[303,9],[323,75],[403,1],[450,8]]},"1268":{"position":[[0,3],[11,8],[24,12],[43,5],[54,9],[64,4],[76,2],[109,4],[120,2],[152,12],[176,6],[194,19],[270,12]]},"1270":{"position":[[0,7],[12,11],[26,9],[40,4],[50,5],[56,7],[96,4],[115,6]]},"1272":{"position":[[0,2],[3,13]]},"1280":{"position":[[779,2],[798,2],[1467,1],[1513,1],[1553,1],[1721,1],[1750,1],[1779,1],[1829,1],[3271,3],[3335,3],[3553,3],[3709,3],[5925,2],[6124,2],[6323,2]]},"1282":{"position":[[438,2],[1476,2],[1717,2],[1945,2],[2159,2],[2400,2],[2609,2],[2639,2]]},"1284":{"position":[[1193,1],[1202,1],[1204,1],[1285,1],[1287,1],[1367,1]]},"1288":{"position":[[256,1],[466,1],[536,1],[610,1],[683,1],[755,1],[820,1],[1091,1],[1554,1],[1663,1],[1890,1],[1981,1],[2338,1],[2620,1],[2689,1],[2792,1],[2839,1],[2907,1],[3013,1],[3086,1],[3159,1],[3250,1],[4064,1],[4091,1],[4279,1],[4358,1]]},"1306":{"position":[[79,1]]},"1322":{"position":[[4,13],[25,6],[53,10],[64,2],[75,2],[78,12],[91,5],[124,3],[136,2],[139,9],[172,3],[176,27],[233,1],[272,9],[282,1],[376,1],[378,1],[393,1],[405,2],[421,1],[423,1],[435,1],[445,1],[447,1],[502,1],[504,1],[506,1],[508,2],[511,1],[525,2],[528,1],[530,1],[532,1],[534,1],[536,1]]},"1324":{"position":[[4,8],[41,5],[54,2],[57,8],[66,9],[76,4],[88,10],[119,5]]},"1326":{"position":[[0,39],[44,16],[65,22],[88,3],[97,1],[110,15],[132,10],[146,1],[152,13],[177,10],[188,17],[215,7]]},"1328":{"position":[[94,35],[141,12],[154,7],[166,4],[239,10],[311,1],[356,18],[379,22]]},"1330":{"position":[[4,2],[15,1],[98,4],[112,15]]},"1334":{"position":[[309,2],[372,5],[381,1],[419,6]]},"1336":{"position":[[0,2],[12,3],[27,2],[55,12],[68,26],[95,2],[112,3],[232,8],[257,2],[260,2],[268,3],[276,1]]},"1340":{"position":[[312,5],[321,1],[359,6]]},"1343":{"position":[[0,41],[61,11],[81,1],[109,2],[123,8]]},"1345":{"position":[[32,9],[64,9],[101,3],[128,10],[143,9],[156,5],[166,3],[174,9],[224,24],[295,5],[305,10],[323,7],[331,2],[425,12],[445,12],[496,3],[521,5],[539,17],[564,9]]},"1348":{"position":[[0,5],[14,1],[42,2],[49,9],[70,21],[106,47],[158,24],[188,17],[223,24],[248,2],[251,5],[261,17],[279,2],[290,1],[296,4],[314,2],[317,3],[327,13],[341,21],[363,1],[391,6],[398,4],[403,2],[406,2],[413,3],[425,8],[445,6],[452,2],[459,6],[484,3],[514,20],[535,2],[542,4],[567,5],[579,22],[602,2],[609,5],[623,16],[640,2],[669,11],[685,15],[705,3],[747,2],[750,5],[832,13],[857,3]]},"1350":{"position":[[26,4],[62,2],[99,1],[254,12],[277,26]]},"1352":{"position":[[0,14],[51,53],[105,17],[141,1],[491,1],[894,20],[918,21],[955,16],[987,16],[1042,10],[1074,27],[1108,3],[1126,2],[1137,9],[1159,8],[1176,6],[1191,5],[1227,4],[1240,8],[1253,3],[1328,20],[1353,8],[1406,3],[1416,3],[1478,56],[1535,13],[1557,3],[1566,1]]},"1354":{"position":[[18,3],[26,11],[38,5],[48,15],[79,3],[103,14],[127,20],[148,2],[158,5],[172,7]]},"1356":{"position":[[0,11],[35,2],[38,7],[53,8],[68,3]]},"1358":{"position":[[0,33],[68,2],[78,33],[119,33],[163,2],[177,8],[209,6],[224,20],[245,7],[261,8],[282,2],[300,13],[328,3],[332,2],[335,5],[417,13],[442,3]]},"1360":{"position":[[0,7],[45,2],[48,6],[80,6],[93,5],[107,8],[116,46],[163,4],[168,12],[181,40],[222,15],[267,1],[316,8],[393,1],[469,20],[519,1]]},"1362":{"position":[[0,6],[12,1],[23,9],[37,5],[43,12],[84,4],[93,5],[99,4],[108,5]]},"1364":{"position":[[8,1],[17,9],[40,4],[80,4],[132,4],[170,4]]},"1366":{"position":[[0,2],[3,13]]},"1392":{"position":[[139,1],[308,1],[413,1],[471,1],[486,1],[515,2],[559,1],[602,1],[617,1],[633,3],[775,1],[807,1],[818,1],[831,4],[931,1],[1060,1],[1258,1],[1385,1],[1588,1],[1716,1],[1806,1],[1917,1],[1957,1],[1995,1]]},"1394":{"position":[[149,1]]},"1408":{"position":[[216,1]]},"1415":{"position":[[238,1],[270,1],[281,1]]},"1417":{"position":[[301,1],[319,1],[351,1],[425,1],[636,1],[918,1],[1200,1],[1482,1],[1764,1],[2046,1],[2328,1]]},"1419":{"position":[[230,1],[248,1],[280,1],[323,1],[406,1],[617,1],[899,1],[1181,1],[1463,1],[1745,1],[2027,1],[2309,1]]},"1423":{"position":[[468,1],[500,1],[511,1],[567,1],[613,1]]},"1425":{"position":[[451,1],[483,1],[494,1],[550,1]]},"1427":{"position":[[325,1],[357,1],[368,1],[413,1]]},"1429":{"position":[[291,1],[323,1],[334,1],[379,1]]},"1431":{"position":[[304,1],[336,1],[347,1],[392,1]]},"1433":{"position":[[395,1],[427,1],[438,1],[489,1]]},"1435":{"position":[[302,1],[334,1],[345,1],[396,1],[456,1]]},"1437":{"position":[[290,1],[308,1],[340,1],[419,1],[630,1],[912,1],[1194,1],[1476,1],[1758,1],[2040,1],[2322,1]]},"1439":{"position":[[368,1],[400,1],[411,1],[462,1],[520,1]]},"1441":{"position":[[390,1],[422,1],[433,1],[465,1],[509,1]]},"1443":{"position":[[286,1],[318,1],[329,1],[361,1],[405,1]]},"1445":{"position":[[421,1],[453,1],[464,1],[515,1]]},"1447":{"position":[[282,1],[314,1],[325,1],[363,1],[400,1]]},"1449":{"position":[[233,1],[265,1],[276,1],[312,1]]},"1459":{"position":[[363,1],[395,1],[406,1],[438,1],[483,1]]},"1463":{"position":[[438,1],[543,1],[601,1],[616,1],[645,2],[689,1],[732,1],[747,1],[763,3],[905,1],[937,1],[948,1],[961,4],[1061,1],[1190,1],[1388,1],[1515,1],[1718,1],[1846,1],[1936,1],[2047,1],[2087,1],[2125,1],[2220,1],[2253,1]]},"1465":{"position":[[430,1],[466,1],[494,1],[527,1]]},"1467":{"position":[[365,1],[397,1],[408,1],[449,1]]},"1469":{"position":[[377,1],[409,1],[420,1],[458,1]]},"1471":{"position":[[419,1],[451,1],[462,1]]},"1475":{"position":[[971,1],[1003,1],[1014,1]]},"1478":{"position":[[320,1],[361,1],[372,1]]},"1480":{"position":[[250,1],[291,1],[302,1],[338,1]]},"1482":{"position":[[270,1],[311,1],[322,1],[380,1]]},"1484":{"position":[[366,1],[407,1],[418,1],[477,1]]},"1486":{"position":[[303,1],[344,1],[355,1],[394,1]]},"1490":{"position":[[239,1],[257,1],[289,1],[320,1],[391,1],[602,1],[884,1],[1166,1],[1448,1],[1730,1],[2012,1],[2294,1]]},"1493":{"position":[[237,1],[269,1],[297,1]]},"1495":{"position":[[247,1],[279,1],[290,1],[329,1],[373,1]]},"1498":{"position":[[332,1],[437,1],[495,1],[510,1],[539,2],[583,1],[626,1],[641,1],[657,3],[799,1],[831,1],[842,1],[855,4],[955,1],[1084,1],[1282,1],[1409,1],[1612,1],[1740,1],[1830,1],[1941,1],[1981,1],[2019,1]]},"1500":{"position":[[221,1],[326,1],[384,1],[399,1],[428,2],[472,1],[515,1],[530,1],[546,3],[688,1],[720,1],[731,1],[744,4],[844,1],[973,1],[1171,1],[1298,1],[1501,1],[1629,1],[1719,1],[1830,1],[1870,1],[1908,1],[2000,1]]},"1502":{"position":[[246,1],[351,1],[409,1],[424,1],[453,2],[497,1],[540,1],[555,1],[571,3],[713,1],[745,1],[756,1],[769,4],[869,1],[998,1],[1196,1],[1323,1],[1526,1],[1654,1],[1744,1],[1855,1],[1895,1],[1933,1]]},"1504":{"position":[[398,1],[503,1],[561,1],[576,1],[605,2],[649,1],[692,1],[707,1],[723,3],[865,1],[897,1],[908,1],[921,4],[1021,1],[1150,1],[1348,1],[1475,1],[1678,1],[1806,1],[1896,1],[2007,1],[2047,1],[2085,1]]},"1506":{"position":[[224,1],[329,1],[387,1],[402,1],[431,2],[475,1],[518,1],[533,1],[549,3],[691,1],[723,1],[734,1],[747,4],[847,1],[976,1],[1174,1],[1301,1],[1504,1],[1632,1],[1722,1],[1833,1],[1873,1],[1911,1],[2003,1]]},"1508":{"position":[[256,1],[361,1],[419,1],[434,1],[463,2],[507,1],[550,1],[565,1],[581,3],[723,1],[755,1],[766,1],[779,4],[879,1],[1008,1],[1206,1],[1333,1],[1536,1],[1664,1],[1754,1],[1865,1],[1905,1],[1943,1],[2035,1],[2071,1]]},"1510":{"position":[[355,1],[460,1],[518,1],[533,1],[562,2],[606,1],[649,1],[664,1],[680,3],[822,1],[854,1],[865,1],[878,4],[978,1],[1107,1],[1305,1],[1432,1],[1635,1],[1763,1],[1853,1],[1964,1],[2004,1],[2042,1]]},"1516":{"position":[[117,1],[149,1],[160,1]]},"1542":{"position":[[537,1],[569,1],[628,1],[660,1],[671,1],[695,1],[721,1],[768,1]]},"1544":{"position":[[523,1],[555,1],[614,1],[646,1],[657,1],[685,1],[711,1],[764,1]]},"1546":{"position":[[579,1],[611,1],[670,1],[702,1],[713,1],[737,1],[763,1],[858,1]]},"1548":{"position":[[487,1],[512,1],[523,1],[564,1],[602,1]]},"1550":{"position":[[544,1],[569,1],[580,1]]},"1560":{"position":[[705,1],[730,1],[758,1],[791,1]]},"1569":{"position":[[312,1]]}}}],["0",{"_index":99,"t":{"838":{"position":[[557,1],[619,1],[732,1],[782,1],[837,1]]},"900":{"position":[[18,1]]},"920":{"position":[[352,2]]},"937":{"position":[[1177,1],[1187,7]]},"954":{"position":[[582,2],[590,8]]},"961":{"position":[[42,1]]},"981":{"position":[[363,2],[1008,2],[4671,2]]},"1144":{"position":[[532,1],[594,1],[648,1]]},"1280":{"position":[[3438,1],[3912,1]]},"1392":{"position":[[631,1]]},"1417":{"position":[[628,1],[910,1],[1192,1],[1474,1],[1756,1],[2038,1],[2320,1]]},"1419":{"position":[[609,1],[891,1],[1173,1],[1455,1],[1737,1],[2019,1],[2301,1]]},"1437":{"position":[[622,1],[904,1],[1186,1],[1468,1],[1750,1],[2032,1],[2314,1]]},"1447":{"position":[[395,1]]},"1463":{"position":[[761,1]]},"1490":{"position":[[594,1],[876,1],[1158,1],[1440,1],[1722,1],[2004,1],[2286,1]]},"1498":{"position":[[655,1]]},"1500":{"position":[[544,1]]},"1502":{"position":[[569,1]]},"1504":{"position":[[721,1]]},"1506":{"position":[[547,1]]},"1508":{"position":[[579,1]]},"1510":{"position":[[678,1]]},"1542":{"position":[[582,2]]},"1544":{"position":[[568,2]]},"1546":{"position":[[624,2]]},"1548":{"position":[[95,2],[595,3]]},"1550":{"position":[[132,2]]},"1598":{"position":[[165,2]]}}}],["0.0.0.0",{"_index":771,"t":{"963":{"position":[[30,7]]},"981":{"position":[[652,8]]}}}],["0.2",{"_index":416,"t":{"873":{"position":[[356,3]]}}}],["0/1",{"_index":106,"t":{"838":{"position":[[664,3]]}}}],["000",{"_index":2243,"t":{"1533":{"position":[[337,5]]}}}],["00:00",{"_index":674,"t":{"937":{"position":[[91,5]]}}}],["00:00:00",{"_index":2105,"t":{"1417":{"position":[[638,8],[920,8],[1202,8],[1484,8],[1766,8],[2048,8],[2330,8]]},"1419":{"position":[[619,8],[901,8],[1183,8],[1465,8],[1747,8],[2029,8],[2311,8]]},"1437":{"position":[[632,8],[914,8],[1196,8],[1478,8],[1760,8],[2042,8],[2324,8]]},"1490":{"position":[[604,8],[886,8],[1168,8],[1450,8],[1732,8],[2014,8],[2296,8]]}}}],["00:01:28",{"_index":2099,"t":{"1417":{"position":[[427,8]]},"1419":{"position":[[408,8]]},"1437":{"position":[[421,8]]},"1490":{"position":[[393,8]]}}}],["02",{"_index":382,"t":{"869":{"position":[[282,2]]},"927":{"position":[[534,2]]},"997":{"position":[[10,2]]}}}],["04cd40ea6b6078797f177c902c89412c70e523ad2a687a62829bf1d16ff0e19c",{"_index":2118,"t":{"1417":{"position":[[1916,64]]},"1419":{"position":[[1897,64]]},"1437":{"position":[[1910,64]]},"1490":{"position":[[1882,64]]}}}],["0644",{"_index":1062,"t":{"1093":{"position":[[164,6],[310,6]]}}}],["073f",{"_index":134,"t":{"838":{"position":[[1060,4],[1223,4],[1564,4]]}}}],["09",{"_index":2136,"t":{"1423":{"position":[[734,2]]},"1425":{"position":[[682,2]]},"1427":{"position":[[551,2]]},"1429":{"position":[[500,2]]},"1431":{"position":[[513,2]]},"1433":{"position":[[626,2]]},"1435":{"position":[[587,2]]},"1439":{"position":[[660,2]]},"1441":{"position":[[641,2]]},"1443":{"position":[[537,2]]},"1445":{"position":[[653,2]]},"1447":{"position":[[518,2]]},"1449":{"position":[[433,2]]},"1459":{"position":[[608,2]]},"1465":{"position":[[650,2],[2826,2]]},"1467":{"position":[[566,2]]},"1469":{"position":[[572,2]]},"1480":{"position":[[459,2]]},"1482":{"position":[[527,2]]},"1484":{"position":[[612,2]]},"1486":{"position":[[509,2]]},"1493":{"position":[[418,2]]},"1495":{"position":[[492,2]]},"1542":{"position":[[917,2]]},"1544":{"position":[[931,2]]},"1546":{"position":[[1046,2]]},"1548":{"position":[[723,2],[1946,2]]},"1560":{"position":[[914,2],[2137,2]]}}}],["0b836757eae8",{"_index":2268,"t":{"1548":{"position":[[1516,12]]},"1560":{"position":[[1707,12]]}}}],["0，token",{"_index":871,"t":{"998":{"position":[[936,7]]}}}],["1",{"_index":108,"t":{"838":{"position":[[678,1]]},"844":{"position":[[915,1]]},"871":{"position":[[288,1],[314,1]]},"906":{"position":[[389,1]]},"920":{"position":[[1749,1]]},"937":{"position":[[1871,1]]},"947":{"position":[[456,1],[850,1]]},"954":{"position":[[1136,3]]},"981":{"position":[[5444,3],[8851,1]]},"1055":{"position":[[22,2]]},"1170":{"position":[[42,1],[60,1]]},"1184":{"position":[[123,1]]},"1190":{"position":[[370,1]]},"1280":{"position":[[1922,1],[1977,1],[3007,1],[3062,1]]},"1300":{"position":[[393,1]]},"1302":{"position":[[379,1]]},"1352":{"position":[[272,1],[620,1],[915,2]]},"1392":{"position":[[647,2],[1672,2]]},"1417":{"position":[[626,1],[908,1],[1190,1],[1472,1],[1754,1],[2036,1],[2318,1]]},"1419":{"position":[[607,1],[889,1],[1171,1],[1453,1],[1735,1],[2017,1],[2299,1]]},"1437":{"position":[[620,1],[902,1],[1184,1],[1466,1],[1748,1],[2030,1],[2312,1]]},"1463":{"position":[[777,2],[1802,2]]},"1490":{"position":[[592,1],[874,1],[1156,1],[1438,1],[1720,1],[2002,1],[2284,1]]},"1498":{"position":[[671,2],[1696,2]]},"1500":{"position":[[560,2],[1585,2]]},"1502":{"position":[[585,2],[1610,2]]},"1504":{"position":[[737,2],[1762,2]]},"1506":{"position":[[563,2],[1588,2]]},"1508":{"position":[[595,2],[1620,2]]},"1510":{"position":[[694,2],[1719,2]]}}}],["1.1",{"_index":1532,"t":{"1272":{"position":[[1065,5]]}}}],["1.1.11",{"_index":2046,"t":{"1392":{"position":[[653,9],[1678,9],[2066,6]]},"1463":{"position":[[783,9],[1808,9]]},"1498":{"position":[[677,9],[1702,9]]},"1500":{"position":[[566,9],[1591,9]]},"1502":{"position":[[591,9],[1616,9]]},"1504":{"position":[[743,9],[1768,9]]},"1506":{"position":[[569,9],[1594,9]]},"1508":{"position":[[601,9],[1626,9]]},"1510":{"position":[[700,9],[1725,9]]}}}],["1.2.1",{"_index":1696,"t":{"1288":{"position":[[258,5]]}}}],["1.2.17",{"_index":1703,"t":{"1288":{"position":[[538,6]]}}}],["1.2.19",{"_index":1711,"t":{"1288":{"position":[[822,6]]}}}],["1.2.20",{"_index":1728,"t":{"1288":{"position":[[1556,6]]}}}],["1.2.21",{"_index":1718,"t":{"1288":{"position":[[1093,6]]}}}],["1.2.22",{"_index":1663,"t":{"1284":{"position":[[17,6]]},"1288":{"position":[[4413,6]]},"1314":{"position":[[200,6]]}}}],["1.2.25",{"_index":1664,"t":{"1284":{"position":[[27,6]]},"1288":{"position":[[4423,6]]},"1314":{"position":[[209,6]]}}}],["1.2.28",{"_index":1731,"t":{"1288":{"position":[[1665,6]]}}}],["1.2.29",{"_index":1707,"t":{"1288":{"position":[[685,6],[757,6]]},"1392":{"position":[[720,9],[1701,9]]},"1463":{"position":[[850,9],[1831,9],[2196,6]]},"1498":{"position":[[744,9],[1725,9]]},"1500":{"position":[[633,9],[1614,9]]},"1502":{"position":[[658,9],[1639,9]]},"1504":{"position":[[810,9],[1791,9]]},"1506":{"position":[[636,9],[1617,9]]},"1508":{"position":[[668,9],[1649,9]]},"1510":{"position":[[767,9],[1748,9]]}}}],["1.2.30",{"_index":1736,"t":{"1288":{"position":[[1892,6],[1983,6]]}}}],["1.2.31",{"_index":1702,"t":{"1288":{"position":[[468,6]]}}}],["1.2.32",{"_index":1705,"t":{"1288":{"position":[[612,6]]}}}],["1.20",{"_index":1369,"t":{"1216":{"position":[[573,4]]},"1282":{"position":[[1087,4]]},"1345":{"position":[[27,4]]}}}],["1.21",{"_index":1371,"t":{"1216":{"position":[[649,4]]},"1345":{"position":[[59,4]]}}}],["1.24",{"_index":72,"t":{"838":{"position":[[51,4],[115,4]]}}}],["1.26.5",{"_index":1462,"t":{"1250":{"position":[[23,6]]}}}],["1.3.2",{"_index":1745,"t":{"1288":{"position":[[2622,5]]}}}],["1.3.3",{"_index":1748,"t":{"1288":{"position":[[2841,5]]}}}],["1.3.4",{"_index":1747,"t":{"1288":{"position":[[2794,5]]}}}],["1.3.5",{"_index":1746,"t":{"1288":{"position":[[2691,5]]}}}],["1.3.7",{"_index":1741,"t":{"1288":{"position":[[2340,5]]}}}],["1.4.1",{"_index":1752,"t":{"1288":{"position":[[3015,5]]}}}],["1.4.2",{"_index":1749,"t":{"1288":{"position":[[2909,5]]}}}],["1.50",{"_index":1453,"t":{"1246":{"position":[[299,4],[361,4],[413,4]]},"1254":{"position":[[191,4]]}}}],["1.6",{"_index":1691,"t":{"1288":{"position":[[141,3]]}}}],["1.6.1",{"_index":1304,"t":{"1206":{"position":[[68,15]]}}}],["1.8.0",{"_index":1305,"t":{"1206":{"position":[[90,5]]}}}],["1.8.4",{"_index":1306,"t":{"1206":{"position":[[96,5]]}}}],["1.el7_8.noarch.rpm",{"_index":417,"t":{"873":{"position":[[360,18]]}}}],["1/1",{"_index":97,"t":{"838":{"position":[[545,3],[607,3],[720,3],[825,3]]},"1144":{"position":[[520,3],[582,3],[636,3]]}}}],["10",{"_index":37,"t":{"825":{"position":[[43,2]]},"830":{"position":[[47,2]]},"927":{"position":[[134,2]]},"937":{"position":[[2865,2]]},"1178":{"position":[[65,2]]},"1184":{"position":[[120,2]]},"1246":{"position":[[425,3]]},"1258":{"position":[[229,2],[238,2]]},"1300":{"position":[[57,2],[362,3]]},"1302":{"position":[[348,3]]},"1455":{"position":[[198,2]]}}}],["10.0.0.0/8",{"_index":1000,"t":{"1061":{"position":[[580,10]]}}}],["10.247.0.0/16",{"_index":1410,"t":{"1236":{"position":[[626,13]]}}}],["10.41.0.0/16",{"_index":310,"t":{"854":{"position":[[240,12]]}}}],["10.42.0.0/16",{"_index":369,"t":{"867":{"position":[[101,12]]},"969":{"position":[[30,14]]},"981":{"position":[[1348,13]]},"1131":{"position":[[219,15],[296,15]]}}}],["10.43.0.0/16",{"_index":370,"t":{"867":{"position":[[142,12]]},"969":{"position":[[96,14]]},"981":{"position":[[1453,13]]}}}],["10.43.0.10",{"_index":784,"t":{"969":{"position":[[232,12]]},"981":{"position":[[1714,11]]}}}],["10.6.8",{"_index":888,"t":{"1004":{"position":[[704,6]]}}}],["10.7、11.5",{"_index":889,"t":{"1004":{"position":[[734,9]]}}}],["100",{"_index":4,"t":{"821":{"position":[[62,3]]},"878":{"position":[[240,4]]},"1178":{"position":[[88,3]]},"1184":{"position":[[143,3]]},"1300":{"position":[[312,3]]},"1302":{"position":[[55,3],[298,3]]},"1457":{"position":[[249,3]]}}}],["1000",{"_index":1022,"t":{"1078":{"position":[[473,4]]}}}],["10000",{"_index":274,"t":{"850":{"position":[[179,5]]}}}],["10080",{"_index":276,"t":{"850":{"position":[[218,7]]}}}],["1024",{"_index":273,"t":{"850":{"position":[[154,4]]}}}],["10250",{"_index":1270,"t":{"1172":{"position":[[307,5]]},"1174":{"position":[[171,5]]}}}],["10m",{"_index":934,"t":{"1033":{"position":[[1313,3]]}}}],["10t22:54:38z",{"_index":728,"t":{"947":{"position":[[539,12]]}}}],["11",{"_index":1484,"t":{"1254":{"position":[[149,2]]}}}],["111695",{"_index":1144,"t":{"1123":{"position":[[76,7]]}}}],["112",{"_index":1152,"t":{"1123":{"position":[[723,21]]}}}],["1123",{"_index":1189,"t":{"1138":{"position":[[501,4]]}}}],["12",{"_index":348,"t":{"863":{"position":[[268,2]]},"937":{"position":[[1195,4]]},"947":{"position":[[536,2]]},"954":{"position":[[599,3]]},"981":{"position":[[4674,4]]},"1115":{"position":[[1072,2]]},"1123":{"position":[[709,5]]}}}],["12,500",{"_index":1879,"t":{"1312":{"position":[[350,6]]}}}],["12.0.000.tgz",{"_index":992,"t":{"1059":{"position":[[1584,12]]}}}],["1215m",{"_index":1458,"t":{"1246":{"position":[[377,5]]},"1260":{"position":[[170,5]]}}}],["123",{"_index":2130,"t":{"1423":{"position":[[683,3]]},"1425":{"position":[[631,3]]},"1427":{"position":[[500,3]]},"1429":{"position":[[449,3]]},"1431":{"position":[[462,3]]},"1433":{"position":[[575,3]]},"1435":{"position":[[536,3]]},"1439":{"position":[[609,3]]},"1441":{"position":[[590,3]]},"1443":{"position":[[486,3]]},"1445":{"position":[[602,3]]},"1447":{"position":[[467,3]]},"1449":{"position":[[382,3]]},"1459":{"position":[[557,3]]},"1465":{"position":[[599,3],[2775,3]]},"1467":{"position":[[515,3]]},"1469":{"position":[[521,3]]},"1480":{"position":[[408,3]]},"1482":{"position":[[476,3]]},"1484":{"position":[[561,3]]},"1486":{"position":[[458,3]]},"1493":{"position":[[367,3]]},"1495":{"position":[[441,3]]},"1542":{"position":[[866,3]]},"1544":{"position":[[880,3]]},"1546":{"position":[[995,3]]},"1548":{"position":[[672,3],[1368,3],[1895,3],[2591,3]]},"1560":{"position":[[863,3],[1559,3],[2086,3],[2782,3]]}}}],["12345",{"_index":1040,"t":{"1089":{"position":[[374,5],[703,6],[788,5]]}}}],["127.0.0.1",{"_index":2204,"t":{"1495":{"position":[[358,11]]}}}],["12:00",{"_index":675,"t":{"937":{"position":[[99,5]]}}}],["13",{"_index":2128,"t":{"1423":{"position":[[667,2]]},"1425":{"position":[[615,2]]},"1427":{"position":[[484,2]]},"1429":{"position":[[433,2]]},"1431":{"position":[[446,2]]},"1433":{"position":[[559,2]]},"1435":{"position":[[520,2]]},"1439":{"position":[[593,2]]},"1441":{"position":[[574,2]]},"1443":{"position":[[470,2]]},"1445":{"position":[[586,2]]},"1447":{"position":[[451,2]]},"1449":{"position":[[366,2]]},"1459":{"position":[[541,2]]},"1465":{"position":[[583,2],[2759,2]]},"1467":{"position":[[499,2]]},"1469":{"position":[[505,2]]},"1480":{"position":[[392,2]]},"1482":{"position":[[460,2]]},"1484":{"position":[[545,2]]},"1486":{"position":[[442,2]]},"1493":{"position":[[351,2]]},"1495":{"position":[[425,2]]},"1542":{"position":[[850,2]]},"1544":{"position":[[864,2]]},"1546":{"position":[[979,2]]},"1548":{"position":[[656,2],[1879,2]]},"1560":{"position":[[847,2],[2070,2]]}}}],["13:26",{"_index":2098,"t":{"1417":{"position":[[419,5]]},"1419":{"position":[[400,5]]},"1437":{"position":[[413,5]]},"1490":{"position":[[385,5]]}}}],["13:26:40",{"_index":2129,"t":{"1423":{"position":[[670,8]]},"1425":{"position":[[618,8]]},"1427":{"position":[[487,8]]},"1429":{"position":[[436,8]]},"1431":{"position":[[449,8]]},"1433":{"position":[[562,8]]},"1435":{"position":[[523,8]]},"1439":{"position":[[596,8]]},"1441":{"position":[[577,8]]},"1443":{"position":[[473,8]]},"1445":{"position":[[589,8]]},"1447":{"position":[[454,8]]},"1449":{"position":[[369,8]]},"1459":{"position":[[544,8]]},"1465":{"position":[[586,8],[2762,8]]},"1467":{"position":[[502,8]]},"1469":{"position":[[508,8]]},"1480":{"position":[[395,8]]},"1482":{"position":[[463,8]]},"1484":{"position":[[548,8]]},"1486":{"position":[[445,8]]},"1493":{"position":[[354,8]]},"1495":{"position":[[428,8]]},"1542":{"position":[[853,8]]},"1544":{"position":[[867,8]]},"1546":{"position":[[982,8]]}}}],["13:26:44",{"_index":2271,"t":{"1548":{"position":[[1882,8]]},"1560":{"position":[[2073,8]]}}}],["13:26:50",{"_index":2255,"t":{"1548":{"position":[[659,8]]},"1560":{"position":[[850,8]]}}}],["13:27",{"_index":2104,"t":{"1417":{"position":[[630,5],[912,5],[1194,5],[1476,5]]},"1419":{"position":[[611,5],[893,5],[1175,5],[1457,5]]},"1437":{"position":[[624,5],[906,5],[1188,5],[1470,5]]},"1490":{"position":[[596,5],[878,5],[1160,5],[1442,5]]}}}],["13:28",{"_index":2117,"t":{"1417":{"position":[[1758,5],[2040,5]]},"1419":{"position":[[1739,5],[2021,5]]},"1437":{"position":[[1752,5],[2034,5]]},"1490":{"position":[[1724,5],[2006,5]]}}}],["13:47",{"_index":2122,"t":{"1417":{"position":[[2322,5]]},"1419":{"position":[[2303,5]]},"1437":{"position":[[2316,5]]},"1490":{"position":[[2288,5]]}}}],["13m",{"_index":932,"t":{"1033":{"position":[[1262,3]]}}}],["13t13:26:40z",{"_index":2137,"t":{"1423":{"position":[[737,13]]},"1425":{"position":[[685,13]]},"1427":{"position":[[554,13]]},"1429":{"position":[[503,13]]},"1431":{"position":[[516,13]]},"1433":{"position":[[629,13]]},"1435":{"position":[[590,13]]},"1439":{"position":[[663,13]]},"1441":{"position":[[644,13]]},"1443":{"position":[[540,13]]},"1445":{"position":[[656,13]]},"1447":{"position":[[521,13]]},"1449":{"position":[[436,13]]},"1459":{"position":[[611,13]]},"1465":{"position":[[653,13],[2829,13]]},"1467":{"position":[[569,13]]},"1469":{"position":[[575,13]]},"1480":{"position":[[462,13]]},"1482":{"position":[[530,13]]},"1484":{"position":[[615,13]]},"1486":{"position":[[512,13]]},"1493":{"position":[[421,13]]},"1495":{"position":[[495,13]]},"1542":{"position":[[920,13]]},"1544":{"position":[[934,13]]},"1546":{"position":[[1049,13]]}}}],["13t13:26:44z",{"_index":2272,"t":{"1548":{"position":[[1949,13]]},"1560":{"position":[[2140,13]]}}}],["13t13:26:50z",{"_index":2260,"t":{"1548":{"position":[[726,13]]},"1560":{"position":[[917,13]]}}}],["14.2",{"_index":890,"t":{"1004":{"position":[[746,4]]}}}],["1413m",{"_index":1459,"t":{"1246":{"position":[[383,5]]},"1260":{"position":[[208,5]]}}}],["1428m",{"_index":1448,"t":{"1246":{"position":[[202,5]]},"1260":{"position":[[159,5]]}}}],["1450m",{"_index":1449,"t":{"1246":{"position":[[208,5]]},"1260":{"position":[[197,5]]}}}],["1500",{"_index":307,"t":{"854":{"position":[[191,4]]}}}],["1588m",{"_index":1455,"t":{"1246":{"position":[[315,5]]},"1258":{"position":[[143,5]]}}}],["1596m",{"_index":1446,"t":{"1246":{"position":[[138,5]]},"1258":{"position":[[132,5]]}}}],["16",{"_index":1287,"t":{"1178":{"position":[[140,2]]},"1184":{"position":[[216,2]]}}}],["1600",{"_index":2097,"t":{"1417":{"position":[[412,4]]},"1419":{"position":[[393,4]]},"1437":{"position":[[406,4]]},"1490":{"position":[[378,4]]}}}],["1606m",{"_index":1447,"t":{"1246":{"position":[[144,5]]},"1258":{"position":[[170,5]]}}}],["1613m",{"_index":1456,"t":{"1246":{"position":[[321,5]]},"1258":{"position":[[181,5]]}}}],["1616",{"_index":2096,"t":{"1417":{"position":[[407,4]]},"1419":{"position":[[388,4]]},"1437":{"position":[[401,4]]},"1490":{"position":[[373,4]]}}}],["169.254.255.254/31",{"_index":1017,"t":{"1078":{"position":[[384,18]]}}}],["169.254.255.255",{"_index":1021,"t":{"1078":{"position":[[439,15]]}}}],["16gb",{"_index":1284,"t":{"1178":{"position":[[117,4]]},"1184":{"position":[[172,4]]}}}],["1:/etc/rancher/k3s/k3s.yaml",{"_index":405,"t":{"871":{"position":[[528,27]]}}}],["1:2379,https://etcd",{"_index":901,"t":{"1008":{"position":[[876,19]]}}}],["1cf71c22f568468055e517ab363437c0e54e45274c64024d337cc5bcce66341d",{"_index":2123,"t":{"1417":{"position":[[2480,64]]},"1419":{"position":[[2461,64]]},"1437":{"position":[[2474,64]]},"1490":{"position":[[2446,64]]}}}],["1s、2m、3h",{"_index":870,"t":{"998":{"position":[[920,15]]}}}],["2",{"_index":726,"t":{"947":{"position":[[467,1],[859,1]]},"989":{"position":[[98,1]]},"1027":{"position":[[3,1]]},"1055":{"position":[[35,2]]},"1115":{"position":[[762,1]]},"1170":{"position":[[46,1]]},"1178":{"position":[[68,1]]},"1184":{"position":[[125,1],[147,1]]},"1190":{"position":[[413,1]]},"1270":{"position":[[24,1]]},"1352":{"position":[[940,2]]}}}],["2.1",{"_index":2051,"t":{"1392":{"position":[[836,6],[1755,6]]},"1463":{"position":[[966,6],[1885,6]]},"1498":{"position":[[860,6],[1779,6],[2090,3]]},"1500":{"position":[[749,6],[1668,6]]},"1502":{"position":[[774,6],[1693,6]]},"1504":{"position":[[926,6],[1845,6]]},"1506":{"position":[[752,6],[1671,6]]},"1508":{"position":[[784,6],[1703,6]]},"1510":{"position":[[883,6],[1802,6]]}}}],["2.2",{"_index":2055,"t":{"1392":{"position":[[965,6],[1794,6]]},"1463":{"position":[[1095,6],[1924,6]]},"1498":{"position":[[989,6],[1818,6]]},"1500":{"position":[[878,6],[1707,6],[1979,3]]},"1502":{"position":[[903,6],[1732,6]]},"1504":{"position":[[1055,6],[1884,6]]},"1506":{"position":[[881,6],[1710,6]]},"1508":{"position":[[913,6],[1742,6]]},"1510":{"position":[[1012,6],[1841,6]]}}}],["2.3",{"_index":2056,"t":{"1392":{"position":[[1089,6],[1834,6]]},"1463":{"position":[[1219,6],[1964,6]]},"1498":{"position":[[1113,6],[1858,6]]},"1500":{"position":[[1002,6],[1747,6]]},"1502":{"position":[[1027,6],[1772,6],[2004,3]]},"1504":{"position":[[1179,6],[1924,6]]},"1506":{"position":[[1005,6],[1750,6]]},"1508":{"position":[[1037,6],[1782,6]]},"1510":{"position":[[1136,6],[1881,6]]}}}],["2.4",{"_index":2058,"t":{"1392":{"position":[[1165,6],[1856,6]]},"1463":{"position":[[1295,6],[1986,6]]},"1498":{"position":[[1189,6],[1880,6]]},"1500":{"position":[[1078,6],[1769,6]]},"1502":{"position":[[1103,6],[1794,6]]},"1504":{"position":[[1255,6],[1946,6],[2156,3]]},"1506":{"position":[[1081,6],[1772,6]]},"1508":{"position":[[1113,6],[1804,6]]},"1510":{"position":[[1212,6],[1903,6]]}}}],["2.5",{"_index":2059,"t":{"1392":{"position":[[1292,6],[1905,6]]},"1463":{"position":[[1422,6],[2035,6]]},"1498":{"position":[[1316,6],[1929,6]]},"1500":{"position":[[1205,6],[1818,6]]},"1502":{"position":[[1230,6],[1843,6]]},"1504":{"position":[[1382,6],[1995,6]]},"1506":{"position":[[1208,6],[1821,6],[1982,3]]},"1508":{"position":[[1240,6],[1853,6]]},"1510":{"position":[[1339,6],[1952,6]]}}}],["2.6",{"_index":2060,"t":{"1392":{"position":[[1414,6],[1945,6]]},"1463":{"position":[[1544,6],[2075,6]]},"1498":{"position":[[1438,6],[1969,6]]},"1500":{"position":[[1327,6],[1858,6]]},"1502":{"position":[[1352,6],[1883,6]]},"1504":{"position":[[1504,6],[2035,6]]},"1506":{"position":[[1330,6],[1861,6]]},"1508":{"position":[[1362,6],[1893,6],[2014,3]]},"1510":{"position":[[1461,6],[1992,6]]}}}],["2.7",{"_index":2061,"t":{"1392":{"position":[[1495,6],[1983,6]]},"1463":{"position":[[1625,6],[2113,6]]},"1498":{"position":[[1519,6],[2007,6]]},"1500":{"position":[[1408,6],[1896,6]]},"1502":{"position":[[1433,6],[1921,6]]},"1504":{"position":[[1585,6],[2073,6]]},"1506":{"position":[[1411,6],[1899,6]]},"1508":{"position":[[1443,6],[1931,6]]},"1510":{"position":[[1542,6],[2030,6],[2113,3]]}}}],["2.90",{"_index":1443,"t":{"1246":{"position":[[123,4],[187,4],[241,4]]},"1254":{"position":[[102,4]]}}}],["2/2",{"_index":113,"t":{"838":{"position":[[770,3]]}}}],["2001:cafe:42:0::/56",{"_index":1173,"t":{"1131":{"position":[[338,22]]}}}],["2021",{"_index":727,"t":{"947":{"position":[[531,4]]}}}],["2022",{"_index":347,"t":{"863":{"position":[[263,4]]},"1115":{"position":[[1067,4]]}}}],["2023",{"_index":625,"t":{"927":{"position":[[529,4]]},"997":{"position":[[5,4]]},"1166":{"position":[[59,4]]}}}],["2048",{"_index":671,"t":{"935":{"position":[[553,4]]}}}],["21.10",{"_index":388,"t":{"869":{"position":[[390,5]]}}}],["22.04",{"_index":1477,"t":{"1254":{"position":[[42,5]]}}}],["2318",{"_index":2103,"t":{"1417":{"position":[[621,4]]},"1419":{"position":[[602,4]]},"1437":{"position":[[615,4]]},"1490":{"position":[[587,4]]}}}],["2341",{"_index":2110,"t":{"1417":{"position":[[903,4]]},"1419":{"position":[[884,4]]},"1437":{"position":[[897,4]]},"1490":{"position":[[869,4]]}}}],["2379",{"_index":1271,"t":{"1172":{"position":[[363,4]]},"1174":{"position":[[18,4]]}}}],["2380",{"_index":1272,"t":{"1172":{"position":[[370,4]]},"1174":{"position":[[23,4]]}}}],["24h0m0",{"_index":872,"t":{"998":{"position":[[944,18]]}}}],["25",{"_index":1457,"t":{"1246":{"position":[[373,3]]},"1260":{"position":[[111,3]]}}}],["250",{"_index":1283,"t":{"1178":{"position":[[111,3]]},"1184":{"position":[[166,3]]},"1258":{"position":[[256,3]]}}}],["268m",{"_index":1460,"t":{"1246":{"position":[[429,4],[434,4]]},"1262":{"position":[[53,4]]}}}],["275m",{"_index":1450,"t":{"1246":{"position":[[256,4],[261,4]]},"1262":{"position":[[37,4]]}}}],["279",{"_index":332,"t":{"858":{"position":[[387,4]]}}}],["28m",{"_index":929,"t":{"1033":{"position":[[1211,3]]}}}],["2:2379,https://etcd",{"_index":902,"t":{"1008":{"position":[[901,19]]}}}],["2b1c8278a6a1_0",{"_index":188,"t":{"838":{"position":[[2299,14],[2459,14]]}}}],["2gi",{"_index":1935,"t":{"1332":{"position":[[187,3]]},"1338":{"position":[[169,3]]}}}],["2wz97",{"_index":116,"t":{"838":{"position":[[819,5]]}}}],["2wz97_kube",{"_index":145,"t":{"838":{"position":[[1381,10],[1698,10]]}}}],["3",{"_index":665,"t":{"935":{"position":[[426,2]]},"937":{"position":[[607,1]]},"945":{"position":[[543,1]]},"1055":{"position":[[83,2]]},"1063":{"position":[[125,1],[169,1]]},"1115":{"position":[[11,1]]},"1246":{"position":[[253,2]]},"1262":{"position":[[34,2]]},"1352":{"position":[[972,2]]}}}],["3.5.4",{"_index":884,"t":{"1004":{"position":[[650,5]]}}}],["30",{"_index":1454,"t":{"1246":{"position":[[311,3]]},"1258":{"position":[[84,3]]},"1298":{"position":[[54,2],[114,2],[239,2]]},"1453":{"position":[[195,2]]}}}],["300",{"_index":982,"t":{"1059":{"position":[[1165,3]]}}}],["30000",{"_index":781,"t":{"969":{"position":[[171,6]]},"981":{"position":[[1582,6]]}}}],["3117",{"_index":341,"t":{"863":{"position":[[95,6]]}}}],["3199",{"_index":2112,"t":{"1417":{"position":[[1185,4]]},"1419":{"position":[[1166,4]]},"1437":{"position":[[1179,4]]},"1490":{"position":[[1151,4]]}}}],["32",{"_index":1290,"t":{"1178":{"position":[[162,2]]}}}],["32767",{"_index":782,"t":{"969":{"position":[[178,6]]},"981":{"position":[[1589,7]]},"1423":{"position":[[2651,5]]},"1425":{"position":[[2599,5]]},"1427":{"position":[[2468,5]]},"1429":{"position":[[2417,5]]},"1431":{"position":[[2430,5]]},"1433":{"position":[[2543,5]]},"1435":{"position":[[2504,5]]},"1439":{"position":[[2577,5]]},"1441":{"position":[[2558,5]]},"1443":{"position":[[2454,5]]},"1445":{"position":[[2570,5]]},"1447":{"position":[[2435,5]]},"1449":{"position":[[2350,5]]},"1459":{"position":[[2525,5]]},"1465":{"position":[[2567,5]]},"1467":{"position":[[2483,5]]},"1469":{"position":[[2489,5]]},"1542":{"position":[[2834,5]]},"1544":{"position":[[2848,5]]},"1546":{"position":[[2963,5]]}}}],["32gb",{"_index":1288,"t":{"1178":{"position":[[143,4]]},"1184":{"position":[[197,4]]}}}],["365",{"_index":45,"t":{"832":{"position":[[19,3]]},"923":{"position":[[19,3]]}}}],["3923",{"_index":2114,"t":{"1417":{"position":[[1467,4]]},"1419":{"position":[[1448,4]]},"1437":{"position":[[1461,4]]},"1490":{"position":[[1433,4]]}}}],["3:2379",{"_index":903,"t":{"1008":{"position":[[926,6]]}}}],["3e4d34729602",{"_index":124,"t":{"838":{"position":[[932,12]]}}}],["4",{"_index":852,"t":{"989":{"position":[[100,18]]},"1031":{"position":[[211,1]]},"1055":{"position":[[123,2]]},"1178":{"position":[[70,1],[92,1]]},"1184":{"position":[[170,1]]},"1254":{"position":[[95,1],[165,1],[184,1]]},"1352":{"position":[[1112,2]]}}}],["4.2.1",{"_index":1754,"t":{"1288":{"position":[[3088,5]]}}}],["4.2.10",{"_index":1789,"t":{"1288":{"position":[[4281,6],[4360,6]]}}}],["4.2.2",{"_index":1757,"t":{"1288":{"position":[[3161,5]]}}}],["4.2.3",{"_index":1760,"t":{"1288":{"position":[[3252,5]]}}}],["4.2.4",{"_index":1783,"t":{"1288":{"position":[[4093,5]]}}}],["4.2.6",{"_index":1781,"t":{"1288":{"position":[[4066,5]]}}}],["400",{"_index":2242,"t":{"1533":{"position":[[317,5]]}}}],["410a",{"_index":186,"t":{"838":{"position":[[2289,4],[2449,4]]}}}],["4206",{"_index":148,"t":{"838":{"position":[[1413,4],[1730,4]]}}}],["43",{"_index":114,"t":{"838":{"position":[[784,3],[839,3]]}}}],["4367",{"_index":2266,"t":{"1548":{"position":[[1506,4]]},"1560":{"position":[[1697,4]]}}}],["436b85c5e38d",{"_index":141,"t":{"838":{"position":[[1253,12]]}}}],["440",{"_index":2241,"t":{"1533":{"position":[[297,5]]}}}],["443",{"_index":1365,"t":{"1216":{"position":[[109,3]]},"1228":{"position":[[337,3],[462,3]]}}}],["443_svclb",{"_index":131,"t":{"838":{"position":[[1015,9]]}}}],["444",{"_index":2240,"t":{"1533":{"position":[[277,5]]}}}],["4454d14e4d3f",{"_index":178,"t":{"838":{"position":[[2141,12]]}}}],["4559",{"_index":2116,"t":{"1417":{"position":[[1749,4]]},"1419":{"position":[[1730,4]]},"1437":{"position":[[1743,4]]},"1490":{"position":[[1715,4]]}}}],["4647",{"_index":2119,"t":{"1417":{"position":[[2031,4]]},"1419":{"position":[[2012,4]]},"1437":{"position":[[2025,4]]},"1490":{"position":[[1997,4]]}}}],["47ef",{"_index":175,"t":{"838":{"position":[[2116,4]]}}}],["48f37a480315b6adce2d2a5c5d67a85412dd0ba7a2e82816434e0deb9fa75de9",{"_index":2120,"t":{"1417":{"position":[[2198,64]]},"1419":{"position":[[2179,64]]},"1437":{"position":[[2192,64]]},"1490":{"position":[[2164,64]]}}}],["4b1fddbe6ca6",{"_index":191,"t":{"838":{"position":[[2474,12]]}}}],["4bea",{"_index":165,"t":{"838":{"position":[[1933,4],[2624,4]]}}}],["4c10",{"_index":2275,"t":{"1548":{"position":[[2729,4]]},"1560":{"position":[[2920,4]]}}}],["4c7e",{"_index":135,"t":{"838":{"position":[[1065,4],[1228,4],[1569,4]]}}}],["4fb1",{"_index":185,"t":{"838":{"position":[[2284,4],[2444,4]]}}}],["4k",{"_index":1252,"t":{"1166":{"position":[[157,2]]}}}],["5",{"_index":39,"t":{"825":{"position":[[80,1]]},"937":{"position":[[112,1],[1172,1],[1179,3],[1239,15],[2735,3]]},"943":{"position":[[328,1],[866,1]]},"954":{"position":[[577,1],[585,2],[647,15]]},"981":{"position":[[4639,1],[4650,3],[4764,2]]},"1055":{"position":[[156,2]]},"1166":{"position":[[66,1]]},"1246":{"position":[[199,2]]},"1258":{"position":[[262,1]]},"1260":{"position":[[100,2]]},"1262":{"position":[[50,2]]},"1352":{"position":[[1173,2]]},"1392":{"position":[[858,1],[987,1],[1187,1],[1314,1]]},"1463":{"position":[[988,1],[1117,1],[1317,1],[1444,1]]},"1498":{"position":[[882,1],[1011,1],[1211,1],[1338,1]]},"1500":{"position":[[771,1],[900,1],[1100,1],[1227,1]]},"1502":{"position":[[796,1],[925,1],[1125,1],[1252,1]]},"1504":{"position":[[948,1],[1077,1],[1277,1],[1404,1]]},"1506":{"position":[[774,1],[903,1],[1103,1],[1230,1]]},"1508":{"position":[[806,1],[935,1],[1135,1],[1262,1]]},"1510":{"position":[[905,1],[1034,1],[1234,1],[1361,1]]}}}],["5.2",{"_index":1579,"t":{"1280":{"position":[[1296,3]]}}}],["5.2.1",{"_index":1581,"t":{"1280":{"position":[[1475,5]]}}}],["5.2.2",{"_index":1599,"t":{"1280":{"position":[[1787,5]]}}}],["5.2.3",{"_index":1597,"t":{"1280":{"position":[[1758,5]]}}}],["5.2.4",{"_index":1595,"t":{"1280":{"position":[[1729,5]]}}}],["5.2.5",{"_index":1583,"t":{"1280":{"position":[[1521,5]]}}}],["5.2.6",{"_index":1603,"t":{"1280":{"position":[[1837,5]]}}}],["5.2.7/8/9",{"_index":1585,"t":{"1280":{"position":[[1561,9]]}}}],["5.7",{"_index":885,"t":{"1004":{"position":[[674,3]]}}}],["50",{"_index":1491,"t":{"1258":{"position":[[253,2]]}}}],["500",{"_index":1286,"t":{"1178":{"position":[[136,3],[157,4]]},"1184":{"position":[[191,3],[211,4]]},"1258":{"position":[[232,3]]}}}],["51",{"_index":100,"t":{"838":{"position":[[559,3],[621,3],[680,3],[734,3]]}}}],["512mb",{"_index":1260,"t":{"1170":{"position":[[54,5]]}}}],["515",{"_index":231,"t":{"844":{"position":[[211,3],[231,3]]}}}],["51820",{"_index":1268,"t":{"1172":{"position":[[120,5]]},"1174":{"position":[[202,5]]}}}],["51821",{"_index":1269,"t":{"1172":{"position":[[128,8]]},"1174":{"position":[[256,5]]}}}],["53",{"_index":1648,"t":{"1282":{"position":[[810,2],[835,2]]}}}],["5489f84d5d",{"_index":1212,"t":{"1144":{"position":[[565,10]]}}}],["5497",{"_index":2265,"t":{"1548":{"position":[[1501,4]]},"1560":{"position":[[1692,4]]}}}],["5h39m",{"_index":1299,"t":{"1190":{"position":[[383,5],[442,5]]}}}],["5m0",{"_index":758,"t":{"954":{"position":[[1235,12]]},"981":{"position":[[5583,5]]}}}],["6",{"_index":1445,"t":{"1246":{"position":[[135,2]]},"1258":{"position":[[73,2]]},"1417":{"position":[[417,1]]},"1419":{"position":[[398,1]]},"1437":{"position":[[411,1]]},"1490":{"position":[[383,1]]}}}],["6.4",{"_index":427,"t":{"878":{"position":[[63,4]]}}}],["60",{"_index":1844,"t":{"1304":{"position":[[244,2],[411,2],[643,2]]}}}],["600",{"_index":768,"t":{"958":{"position":[[196,3]]},"1095":{"position":[[321,3]]},"1396":{"position":[[148,3]]},"1412":{"position":[[141,3]]},"1533":{"position":[[250,5],[268,5],[374,3]]}}}],["620c90a6c1c1_0",{"_index":167,"t":{"838":{"position":[[1943,14],[2634,14]]}}}],["640",{"_index":2239,"t":{"1533":{"position":[[230,5]]}}}],["644",{"_index":769,"t":{"958":{"position":[[213,21]]},"1097":{"position":[[346,3]]},"1372":{"position":[[148,3]]},"1376":{"position":[[148,3]]},"1380":{"position":[[148,3]]},"1384":{"position":[[148,3]]},"1388":{"position":[[148,3]]},"1400":{"position":[[138,3],[369,4],[383,3]]},"1404":{"position":[[138,3],[379,4],[393,3]]},"1410":{"position":[[141,3]]},"1521":{"position":[[146,3]]},"1525":{"position":[[136,3],[380,3],[384,3]]},"1529":{"position":[[136,3],[271,5],[289,5],[311,3],[315,3]]},"1533":{"position":[[114,3],[210,5],[370,3]]},"1537":{"position":[[130,3]]}}}],["6443",{"_index":272,"t":{"850":{"position":[[145,4]]},"894":{"position":[[96,4]]},"963":{"position":[[73,4]]},"981":{"position":[[726,5]]},"1172":{"position":[[14,4]]},"1174":{"position":[[69,4]]}}}],["6443/tcp",{"_index":368,"t":{"867":{"position":[[66,8]]}}}],["6443:6443",{"_index":397,"t":{"871":{"position":[[321,9]]}}}],["6444",{"_index":528,"t":{"906":{"position":[[409,18]]},"920":{"position":[[1838,5]]},"981":{"position":[[8940,5]]}}}],["6488",{"_index":282,"t":{"850":{"position":[[479,6]]}}}],["64d3517d4a95",{"_index":193,"t":{"838":{"position":[[2649,12]]}}}],["64ffb68fd",{"_index":1209,"t":{"1144":{"position":[[504,9]]}}}],["64gb",{"_index":1291,"t":{"1178":{"position":[[165,4]]},"1184":{"position":[[219,4]]}}}],["65535",{"_index":1609,"t":{"1280":{"position":[[1929,5],[1984,5],[3014,5],[3069,5],[3427,5],[3901,5]]}}}],["6610",{"_index":2121,"t":{"1417":{"position":[[2313,4]]},"1419":{"position":[[2294,4]]},"1437":{"position":[[2307,4]]},"1490":{"position":[[2279,4]]}}}],["6ad9",{"_index":164,"t":{"838":{"position":[[1928,4],[2619,4]]}}}],["6b82a38edd8f",{"_index":2277,"t":{"1548":{"position":[[2739,12]]},"1560":{"position":[[2930,12]]}}}],["6d59f47c7",{"_index":95,"t":{"838":{"position":[[529,9],[1891,9],[2582,9]]}}}],["700",{"_index":1678,"t":{"1284":{"position":[[416,3]]},"1392":{"position":[[242,3],[1693,7],[2090,5],[2108,5],[2130,3]]},"1463":{"position":[[1823,7]]},"1498":{"position":[[1717,7]]},"1500":{"position":[[1606,7]]},"1502":{"position":[[1631,7]]},"1504":{"position":[[1783,7]]},"1506":{"position":[[1609,7]]},"1508":{"position":[[1641,7]]},"1510":{"position":[[1740,7]]}}}],["74",{"_index":1211,"t":{"1144":{"position":[[534,3],[596,3],[650,3]]}}}],["7566d596c8",{"_index":102,"t":{"838":{"position":[[590,10],[2073,10]]}}}],["758cd5fc85",{"_index":115,"t":{"838":{"position":[[808,10],[1370,10],[1687,10]]}}}],["76",{"_index":426,"t":{"878":{"position":[[52,10]]}}}],["777",{"_index":1072,"t":{"1095":{"position":[[409,3],[524,3]]}}}],["7c6a30aeeb2f",{"_index":155,"t":{"838":{"position":[[1594,12]]}}}],["7c9ca4fb39e7_0",{"_index":150,"t":{"838":{"position":[[1423,14],[1740,14]]}}}],["7zwkt",{"_index":1213,"t":{"1144":{"position":[[576,5]]}}}],["8",{"_index":1281,"t":{"1178":{"position":[[94,1],[115,1]]},"1184":{"position":[[149,1],[195,1]]},"1236":{"position":[[618,1]]},"1254":{"position":[[111,1],[200,1]]}}}],["8.0",{"_index":886,"t":{"1004":{"position":[[680,3]]}}}],["80",{"_index":275,"t":{"850":{"position":[[196,2]]},"880":{"position":[[589,2]]},"1216":{"position":[[104,2]]},"1222":{"position":[[458,2],[505,2]]},"1334":{"position":[[235,2]]},"1340":{"position":[[235,2]]}}}],["8080",{"_index":277,"t":{"850":{"position":[[226,4],[235,16]]}}}],["80_svclb",{"_index":140,"t":{"838":{"position":[[1179,8]]}}}],["8375c",{"_index":1442,"t":{"1246":{"position":[[112,5],[176,5],[230,5]]},"1254":{"position":[[84,5]]},"1258":{"position":[[64,5],[126,5],[164,5]]},"1260":{"position":[[91,5],[153,5],[191,5]]},"1262":{"position":[[25,5]]}}}],["8472",{"_index":1267,"t":{"1172":{"position":[[67,4],[446,4]]},"1174":{"position":[[132,4]]}}}],["85cb69466",{"_index":1214,"t":{"1144":{"position":[[620,9]]}}}],["8655855d6",{"_index":109,"t":{"838":{"position":[[704,9],[2247,9],[2407,9]]}}}],["897ce3c5fc8f",{"_index":125,"t":{"838":{"position":[[945,12]]}}}],["89f5",{"_index":2274,"t":{"1548":{"position":[[2724,4]]},"1560":{"position":[[2915,4]]}}}],["8c7f",{"_index":2276,"t":{"1548":{"position":[[2734,4]]},"1560":{"position":[[2925,4]]}}}],["8d7a",{"_index":136,"t":{"838":{"position":[[1070,4],[1233,4],[1574,4]]}}}],["8e7ac18f9cb0_0",{"_index":137,"t":{"838":{"position":[[1075,14],[1238,14],[1579,14]]}}}],["8e82",{"_index":187,"t":{"838":{"position":[[2294,4],[2454,4]]}}}],["9",{"_index":1200,"t":{"1138":{"position":[[691,4],[724,4],[743,8]]}}}],["90",{"_index":46,"t":{"832":{"position":[[44,2]]},"923":{"position":[[44,2]]}}}],["90c4e63d6ee29d40a48c2fdaf2738c2472cba1139dde8a550466c452184f8528",{"_index":2113,"t":{"1417":{"position":[[1352,64]]},"1419":{"position":[[1333,64]]},"1437":{"position":[[1346,64]]},"1490":{"position":[[1318,64]]}}}],["95",{"_index":1474,"t":{"1252":{"position":[[320,2]]}}}],["98604672",{"_index":2257,"t":{"1548":{"position":[[686,8],[1382,8]]},"1560":{"position":[[877,8],[1573,8]]}}}],["9])?(\\\\.[a",{"_index":1202,"t":{"1138":{"position":[[710,10]]}}}],["9]*[a",{"_index":1201,"t":{"1138":{"position":[[701,5],[734,5]]}}}],["9]{16",{"_index":876,"t":{"998":{"position":[[1324,15]]}}}],["9]{6}.[a",{"_index":875,"t":{"998":{"position":[[1312,8]]}}}],["9d12f9848b99",{"_index":158,"t":{"838":{"position":[[1768,12]]}}}],["9dd718864ce6",{"_index":169,"t":{"838":{"position":[[1971,12]]}}}],["9tnck",{"_index":103,"t":{"838":{"position":[[601,5]]}}}],["9tnck_kube",{"_index":172,"t":{"838":{"position":[[2084,10]]}}}],["_desired_",{"_index":1345,"t":{"1210":{"position":[[1894,9]]}}}],["a+x",{"_index":1054,"t":{"1091":{"position":[[243,3]]}}}],["a1",{"_index":2174,"t":{"1465":{"position":[[438,2]]}}}],["a70c",{"_index":2267,"t":{"1548":{"position":[[1511,4]]},"1560":{"position":[[1702,4]]}}}],["a73d",{"_index":166,"t":{"838":{"position":[[1938,4],[2629,4]]}}}],["a88d",{"_index":176,"t":{"838":{"position":[[2121,4]]}}}],["aarch64",{"_index":1483,"t":{"1254":{"position":[[125,7]]}}}],["aarch64/arm64",{"_index":1251,"t":{"1166":{"position":[[130,13]]}}}],["abil",{"_index":1806,"t":{"1294":{"position":[[196,7]]}}}],["abort，helm",{"_index":985,"t":{"1059":{"position":[[1227,10]]}}}],["abov",{"_index":1612,"t":{"1280":{"position":[[2028,5],[2361,5]]},"1310":{"position":[[350,6]]},"1392":{"position":[[215,7]]},"1394":{"position":[[225,7]]}}}],["accept",{"_index":1810,"t":{"1294":{"position":[[314,8]]}}}],["access",{"_index":698,"t":{"937":{"position":[[1740,6],[1754,6],[1984,6],[1999,6],[2245,6],[2260,6],[2647,6],[2662,6]]},"954":{"position":[[932,6],[970,6]]},"981":{"position":[[5187,6],[5212,6]]},"1131":{"position":[[235,6]]},"1282":{"position":[[1041,7]]},"1284":{"position":[[316,6]]},"1294":{"position":[[207,7],[448,6],[501,6]]},"1314":{"position":[[149,7]]},"1318":{"position":[[216,6]]},"1518":{"position":[[131,6]]},"1571":{"position":[[69,6]]},"1575":{"position":[[56,6]]},"1577":{"position":[[108,6]]}}}],["accessmod",{"_index":1932,"t":{"1332":{"position":[[99,12]]},"1338":{"position":[[83,12]]}}}],["accompani",{"_index":2001,"t":{"1368":{"position":[[980,12]]}}}],["accord",{"_index":2000,"t":{"1368":{"position":[[963,9]]}}}],["account",{"_index":653,"t":{"931":{"position":[[765,7],[793,7]]},"935":{"position":[[8,7],[39,7],[74,7],[120,7],[302,7]]},"993":{"position":[[317,7]]},"1210":{"position":[[704,7],[804,7]]},"1286":{"position":[[563,7],[663,7],[1186,7],[1286,7]]},"1288":{"position":[[1573,7],[1602,7],[1682,7],[2723,7],[2814,7]]},"1306":{"position":[[26,7],[90,7],[229,7],[325,7],[376,7]]},"1318":{"position":[[28,8],[109,7],[178,7],[288,7],[363,8],[392,7],[461,7],[633,7],[680,8],[862,8]]},"1368":{"position":[[784,8]]},"1423":{"position":[[2369,7],[2439,7],[2510,7]]},"1425":{"position":[[2317,7],[2387,7],[2458,7]]},"1427":{"position":[[2186,7],[2256,7],[2327,7]]},"1429":{"position":[[2135,7],[2205,7],[2276,7]]},"1431":{"position":[[2148,7],[2218,7],[2289,7]]},"1433":{"position":[[2261,7],[2331,7],[2402,7]]},"1435":{"position":[[2222,7],[2292,7],[2363,7]]},"1439":{"position":[[2295,7],[2365,7],[2436,7]]},"1441":{"position":[[2276,7],[2346,7],[2417,7]]},"1443":{"position":[[2172,7],[2242,7],[2313,7]]},"1445":{"position":[[2288,7],[2358,7],[2429,7]]},"1447":{"position":[[2153,7],[2223,7],[2294,7]]},"1449":{"position":[[2068,7],[2138,7],[2209,7]]},"1459":{"position":[[180,7],[244,7],[449,7],[494,7],[2243,7],[2313,7],[2384,7]]},"1461":{"position":[[173,7],[235,9],[268,7]]},"1465":{"position":[[2285,7],[2355,7],[2426,7]]},"1467":{"position":[[2201,7],[2271,7],[2342,7]]},"1469":{"position":[[2207,7],[2277,7],[2348,7]]},"1480":{"position":[[1869,7],[1992,7]]},"1482":{"position":[[200,7],[342,7],[395,7],[1937,7],[2060,7]]},"1484":{"position":[[180,7],[251,9],[284,7],[434,7],[488,7],[2022,7],[2145,7]]},"1486":{"position":[[1919,7],[2042,7]]},"1542":{"position":[[2552,7],[2622,7],[2693,7]]},"1544":{"position":[[2566,7],[2636,7],[2707,7]]},"1546":{"position":[[2681,7],[2751,7],[2822,7]]},"1577":{"position":[[50,8],[194,7]]},"1579":{"position":[[68,8],[112,7]]}}}],["acct",{"_index":1363,"t":{"1210":{"position":[[2991,4]]},"1280":{"position":[[5312,4]]}}}],["acl",{"_index":1178,"t":{"1131":{"position":[[639,3]]}}}],["action",{"_index":1804,"t":{"1294":{"position":[[145,7]]},"1573":{"position":[[121,8]]}}}],["activ",{"_index":720,"t":{"947":{"position":[[209,6],[469,6],[994,6]]},"1296":{"position":[[181,10]]},"1312":{"position":[[508,8]]},"1318":{"position":[[45,8]]}}}],["active：“*”表示当前使用了哪些密钥（如果有的话）进行secret",{"_index":731,"t":{"947":{"position":[[940,36]]}}}],["actual",{"_index":1859,"t":{"1306":{"position":[[271,8]]},"1392":{"position":[[352,8]]},"1463":{"position":[[482,8]]},"1498":{"position":[[376,8]]},"1500":{"position":[[265,8]]},"1502":{"position":[[290,8]]},"1504":{"position":[[442,8]]},"1506":{"position":[[268,8]]},"1508":{"position":[[300,8]]},"1510":{"position":[[399,8]]}}}],["ad",{"_index":1524,"t":{"1272":{"position":[[831,6]]},"1284":{"position":[[1098,5]]},"1604":{"position":[[202,6]]}}}],["add",{"_index":354,"t":{"865":{"position":[[108,3],[179,3],[251,3]]},"882":{"position":[[69,3]]},"981":{"position":[[1038,3]]},"1078":{"position":[[328,3],[380,3],[423,3]]},"1276":{"position":[[320,3]]},"1562":{"position":[[85,3]]},"1588":{"position":[[26,3]]},"1590":{"position":[[26,3]]},"1592":{"position":[[26,3]]},"1594":{"position":[[26,3]]},"1596":{"position":[[26,3]]},"1600":{"position":[[26,3]]},"1606":{"position":[[26,3]]},"1608":{"position":[[26,3]]},"1610":{"position":[[26,3]]}}}],["addit",{"_index":585,"t":{"920":{"position":[[1733,10]]},"981":{"position":[[1042,10],[8835,10]]},"1280":{"position":[[2219,10],[2249,10],[6425,9]]},"1282":{"position":[[2695,10]]},"1288":{"position":[[4367,10]]},"1502":{"position":[[2245,10],[2485,10],[2725,10]]},"1508":{"position":[[2290,10]]}}}],["additionalloggingsources.k3s.enabled=tru",{"_index":464,"t":{"882":{"position":[[322,41]]}}}],["addon",{"_index":956,"t":{"1057":{"position":[[332,5]]},"1134":{"position":[[164,5],[188,5]]},"1136":{"position":[[35,8],[149,5]]},"1138":{"position":[[31,5],[145,5],[792,5],[834,5]]},"1142":{"position":[[23,5],[64,10],[75,5]]},"1144":{"position":[[120,5],[150,5],[159,5]]}}}],["addon.k3s.cattle.io",{"_index":1184,"t":{"1138":{"position":[[384,19]]}}}],["addr",{"_index":1016,"t":{"1078":{"position":[[375,4]]}}}],["address",{"_index":604,"t":{"920":{"position":[[2586,9],[2684,9]]},"963":{"position":[[16,7],[101,7]]},"981":{"position":[[600,7],[634,7],[744,7],[774,7],[1076,9],[2137,9],[7648,9],[7746,9]]},"1272":{"position":[[166,7]]},"1290":{"position":[[209,9]]},"1417":{"position":[[854,7],[1136,7],[1418,7],[1700,7],[1982,7],[2264,7],[2546,7]]},"1419":{"position":[[835,7],[1117,7],[1399,7],[1681,7],[1963,7],[2245,7],[2527,7]]},"1423":{"position":[[1842,7]]},"1425":{"position":[[1790,7]]},"1427":{"position":[[1659,7]]},"1429":{"position":[[1608,7]]},"1431":{"position":[[1621,7]]},"1433":{"position":[[1734,7]]},"1435":{"position":[[1695,7]]},"1437":{"position":[[848,7],[1130,7],[1412,7],[1694,7],[1976,7],[2258,7],[2540,7]]},"1439":{"position":[[1768,7]]},"1441":{"position":[[1749,7]]},"1443":{"position":[[1645,7]]},"1445":{"position":[[1761,7]]},"1447":{"position":[[1626,7]]},"1449":{"position":[[1541,7]]},"1459":{"position":[[1716,7]]},"1465":{"position":[[1758,7]]},"1467":{"position":[[1674,7]]},"1469":{"position":[[1680,7]]},"1490":{"position":[[202,7],[297,8],[328,8],[820,7],[1102,7],[1384,7],[1666,7],[1948,7],[2230,7],[2512,7]]},"1495":{"position":[[184,7],[303,8],[337,8],[381,8]]},"1542":{"position":[[2025,7]]},"1544":{"position":[[2039,7]]},"1546":{"position":[[2154,7]]}}}],["address:6443",{"_index":918,"t":{"1029":{"position":[[265,12]]}}}],["address=0.0.0.0",{"_index":1753,"t":{"1288":{"position":[[3047,15]]},"1548":{"position":[[774,15],[1997,15]]},"1560":{"position":[[965,15],[2188,15]]}}}],["address=127.0.0.1",{"_index":1699,"t":{"1288":{"position":[[326,17],[2268,17],[2320,17],[2864,17],[2889,17],[3809,17]]},"1423":{"position":[[995,17]]},"1425":{"position":[[943,17]]},"1427":{"position":[[812,17]]},"1429":{"position":[[761,17]]},"1431":{"position":[[774,17]]},"1433":{"position":[[887,17]]},"1435":{"position":[[848,17]]},"1439":{"position":[[921,17]]},"1441":{"position":[[902,17]]},"1443":{"position":[[798,17]]},"1445":{"position":[[914,17]]},"1447":{"position":[[779,17]]},"1449":{"position":[[694,17]]},"1459":{"position":[[869,17]]},"1465":{"position":[[911,17],[3052,17]]},"1467":{"position":[[827,17]]},"1469":{"position":[[833,17]]},"1480":{"position":[[723,17]]},"1482":{"position":[[791,17]]},"1484":{"position":[[876,17]]},"1486":{"position":[[773,17]]},"1493":{"position":[[644,17]]},"1495":{"position":[[718,17]]},"1542":{"position":[[1178,17]]},"1544":{"position":[[1192,17]]},"1546":{"position":[[1307,17]]},"1548":{"position":[[1326,17],[2549,17]]},"1560":{"position":[[1517,17],[2740,17]]}}}],["address=172.31.0.140",{"_index":2140,"t":{"1423":{"position":[[802,20]]},"1425":{"position":[[750,20]]},"1427":{"position":[[619,20]]},"1429":{"position":[[568,20]]},"1431":{"position":[[581,20]]},"1433":{"position":[[694,20]]},"1435":{"position":[[655,20]]},"1439":{"position":[[728,20]]},"1441":{"position":[[709,20]]},"1443":{"position":[[605,20]]},"1445":{"position":[[721,20]]},"1447":{"position":[[586,20]]},"1449":{"position":[[501,20]]},"1459":{"position":[[676,20]]},"1465":{"position":[[718,20]]},"1467":{"position":[[634,20]]},"1469":{"position":[[640,20]]},"1542":{"position":[[985,20]]},"1544":{"position":[[999,20]]},"1546":{"position":[[1114,20]]}}}],["adjust",{"_index":2017,"t":{"1368":{"position":[[1866,6]]}}}],["admin",{"_index":402,"t":{"871":{"position":[[467,5]]},"958":{"position":[[70,5]]},"981":{"position":[[2454,5]]},"1103":{"position":[[14,5],[128,5],[283,5],[371,5],[416,5],[462,5]]},"1105":{"position":[[78,5],[146,5]]},"1107":{"position":[[180,5]]},"1569":{"position":[[74,5],[301,5]]}}}],["administr",{"_index":1820,"t":{"1296":{"position":[[239,14]]}}}],["admin、api",{"_index":615,"t":{"925":{"position":[[210,17]]}}}],["admiss",{"_index":1312,"t":{"1210":{"position":[[196,9],[399,10]]},"1272":{"position":[[875,9]]},"1278":{"position":[[537,9]]},"1280":{"position":[[73,10],[1030,9]]},"1286":{"position":[[258,10],[863,9]]},"1288":{"position":[[484,9]]},"1292":{"position":[[16,9],[86,9],[495,9]]},"1294":{"position":[[16,9],[594,9]]},"1419":{"position":[[192,9],[290,9],[333,9]]},"1423":{"position":[[1234,9]]},"1425":{"position":[[1182,9]]},"1427":{"position":[[1051,9]]},"1429":{"position":[[1000,9]]},"1431":{"position":[[1013,9]]},"1433":{"position":[[248,9],[291,9],[453,9],[499,9],[1126,9]]},"1435":{"position":[[172,9],[360,9],[406,9],[466,9],[1087,9]]},"1437":{"position":[[162,9],[228,9],[350,9]]},"1439":{"position":[[162,9],[277,9],[426,9],[472,9],[530,9],[1160,9]]},"1441":{"position":[[261,9],[476,9],[520,9],[1141,9]]},"1443":{"position":[[163,9],[372,9],[416,9],[1037,9]]},"1445":{"position":[[255,9],[334,9],[479,9],[525,9],[1153,9]]},"1447":{"position":[[1018,9]]},"1449":{"position":[[933,9]]},"1459":{"position":[[1108,9]]},"1465":{"position":[[1150,9]]},"1467":{"position":[[1066,9]]},"1469":{"position":[[1072,9]]},"1542":{"position":[[1417,9]]},"1544":{"position":[[1431,9]]},"1546":{"position":[[1546,9]]},"1586":{"position":[[58,9]]},"1588":{"position":[[113,9]]},"1590":{"position":[[113,9]]},"1592":{"position":[[113,9]]},"1594":{"position":[[113,9]]},"1596":{"position":[[113,9]]},"1600":{"position":[[113,9]]},"1604":{"position":[[233,9]]},"1606":{"position":[[113,9]]},"1608":{"position":[[113,9]]},"1610":{"position":[[113,9]]}}}],["admissionconfigur",{"_index":1336,"t":{"1210":{"position":[[1131,22]]},"1280":{"position":[[457,22]]}}}],["advertis",{"_index":605,"t":{"920":{"position":[[2599,9],[2697,9]]},"963":{"position":[[91,9],[173,9]]},"981":{"position":[[734,9],[805,9],[879,9],[939,9],[7661,9],[7759,9]]},"1288":{"position":[[189,9]]},"1423":{"position":[[792,9],[825,9]]},"1425":{"position":[[740,9],[773,9]]},"1427":{"position":[[609,9],[642,9]]},"1429":{"position":[[558,9],[591,9]]},"1431":{"position":[[571,9],[604,9]]},"1433":{"position":[[684,9],[717,9]]},"1435":{"position":[[645,9],[678,9]]},"1439":{"position":[[718,9],[751,9]]},"1441":{"position":[[699,9],[732,9]]},"1443":{"position":[[595,9],[628,9]]},"1445":{"position":[[711,9],[744,9]]},"1447":{"position":[[576,9],[609,9]]},"1449":{"position":[[491,9],[524,9]]},"1459":{"position":[[666,9],[699,9]]},"1465":{"position":[[708,9],[741,9]]},"1467":{"position":[[624,9],[657,9]]},"1469":{"position":[[630,9],[663,9]]},"1542":{"position":[[975,9],[1008,9]]},"1544":{"position":[[989,9],[1022,9]]},"1546":{"position":[[1104,9],[1137,9]]}}}],["ae",{"_index":722,"t":{"947":{"position":[[253,3],[513,3],[552,3],[1039,3]]},"1322":{"position":[[67,3]]}}}],["ae6c58cab4a7",{"_index":157,"t":{"838":{"position":[[1755,12]]}}}],["aes256",{"_index":621,"t":{"927":{"position":[[208,6]]}}}],["aescbc",{"_index":1868,"t":{"1310":{"position":[[205,9]]},"1322":{"position":[[425,9]]},"1473":{"position":[[122,7],[187,6]]}}}],["aescbckey",{"_index":724,"t":{"947":{"position":[[261,9],[521,9],[560,9]]},"1322":{"position":[[457,12]]}}}],["affect",{"_index":1818,"t":{"1296":{"position":[[202,8]]}}}],["ag",{"_index":92,"t":{"838":{"position":[[490,3]]},"1033":{"position":[[1159,3]]},"1144":{"position":[[465,3]]},"1190":{"position":[[347,3]]}}}],["against",{"_index":1988,"t":{"1368":{"position":[[276,7],[921,7]]}}}],["agent",{"_index":47,"t":{"834":{"position":[[21,5],[70,5]]},"846":{"position":[[27,5],[249,5],[270,5]]},"858":{"position":[[4,5]]},"860":{"position":[[184,11]]},"871":{"position":[[212,6]]},"875":{"position":[[30,5]]},"880":{"position":[[18,5]]},"886":{"position":[[53,5],[145,5],[163,5],[213,5],[248,5]]},"888":{"position":[[52,5]]},"892":{"position":[[54,9]]},"894":{"position":[[0,5],[15,5],[50,5],[56,27],[179,22],[344,5],[568,5],[739,14]]},"896":{"position":[[154,5],[195,5],[208,5],[312,5]]},"898":{"position":[[18,6],[40,21]]},"918":{"position":[[4,5]]},"920":{"position":[[57,5],[74,5],[91,5]]},"931":{"position":[[1172,6]]},"933":{"position":[[918,6]]},"935":{"position":[[815,5]]},"949":{"position":[[41,8],[65,5]]},"951":{"position":[[93,5]]},"956":{"position":[[63,5],[138,5],[181,5],[207,5],[254,5]]},"969":{"position":[[640,7],[676,5],[703,12],[716,5],[812,5],[854,8],[919,5],[963,21],[1018,5],[1062,20]]},"977":{"position":[[161,5],[174,5]]},"981":{"position":[[2216,8],[2264,8],[2672,5],[2779,5],[2834,6],[2894,5],[2947,5]]},"991":{"position":[[107,5],[115,5]]},"993":{"position":[[127,5]]},"995":{"position":[[0,11],[84,5],[139,5],[205,5]]},"997":{"position":[[132,5],[177,6]]},"1019":{"position":[[227,5],[260,5]]},"1029":{"position":[[40,5],[63,5],[94,5],[120,5],[140,5],[213,5]]},"1031":{"position":[[0,5]]},"1033":{"position":[[394,5],[427,5],[1397,5],[1410,5],[1496,5]]},"1053":{"position":[[52,5]]},"1080":{"position":[[125,10],[136,5]]},"1087":{"position":[[53,5]]},"1089":{"position":[[797,5],[1127,5],[1246,5]]},"1091":{"position":[[379,5],[398,5],[506,5],[526,5]]},"1115":{"position":[[412,11]]},"1121":{"position":[[4,5],[117,5],[180,5],[364,5],[435,5],[531,5],[644,5],[696,6],[773,6],[801,5],[853,6]]},"1123":{"position":[[174,5]]},"1127":{"position":[[208,10]]},"1129":{"position":[[265,5],[375,5]]},"1170":{"position":[[83,13],[114,5],[163,5],[197,5]]},"1174":{"position":[[74,6]]},"1200":{"position":[[3,5],[42,5]]},"1240":{"position":[[560,5],[576,5],[641,5],[932,5],[953,5]]},"1244":{"position":[[945,13],[1074,5],[1656,17],[1677,5]]},"1246":{"position":[[155,5],[218,5],[332,5],[393,5],[493,5],[512,5],[536,5]]},"1248":{"position":[[149,11]]},"1250":{"position":[[261,5]]},"1252":{"position":[[242,5]]},"1260":{"position":[[26,14]]},"1264":{"position":[[20,5],[54,5]]},"1266":{"position":[[317,5],[459,5]]},"1268":{"position":[[37,5],[114,5]]},"1348":{"position":[[573,5]]},"1352":{"position":[[45,5],[493,5],[564,5],[1060,8],[1102,5],[1115,5]]},"1356":{"position":[[62,5]]},"1364":{"position":[[85,6],[119,5],[175,6],[199,5]]}}}],["agent.service.env",{"_index":60,"t":{"836":{"position":[[331,17]]}}}],["agent/data",{"_index":568,"t":{"920":{"position":[[839,12]]}}}],["agent/flag",{"_index":606,"t":{"920":{"position":[[3057,13],[3130,13]]},"981":{"position":[[8119,13],[8192,13]]}}}],["agent/network",{"_index":602,"t":{"920":{"position":[[2557,18],[2643,18],[2736,18],[2821,18],[2896,18],[2977,18]]},"981":{"position":[[7619,18],[7705,18],[7798,18],[7883,18],[7958,18],[8039,18]]}}}],["agent/nod",{"_index":572,"t":{"920":{"position":[[925,12],[980,12],[1035,12],[1119,12],[1213,12],[1400,12],[1539,12],[1619,12],[1892,12]]},"981":{"position":[[6250,12],[6305,12],[6360,12],[6444,12],[6538,12],[6725,12],[8271,12],[8641,12],[8721,12]]}}}],["agent/runtim",{"_index":592,"t":{"920":{"position":[[2034,15],[2197,15],[2329,15],[2433,15],[3320,15]]},"981":{"position":[[6863,15],[6967,15],[7130,15],[7262,15],[7366,15],[7496,15]]}}}],["agent_external_ip",{"_index":1167,"t":{"1129":{"position":[[493,17]]}}}],["agent”。如果指定，名称将以“k3",{"_index":1430,"t":{"1244":{"position":[[1093,20]]}}}],["agent（kubelet",{"_index":1137,"t":{"1121":{"position":[[75,13]]}}}],["agent（work",{"_index":1461,"t":{"1248":{"position":[[79,21]]}}}],["agent（默认）：apiserv",{"_index":1140,"t":{"1121":{"position":[[508,19]]}}}],["agent：apiserv",{"_index":792,"t":{"969":{"position":[[793,15]]}}}],["aggreg",{"_index":2144,"t":{"1423":{"position":[[1277,10]]},"1425":{"position":[[1225,10]]},"1427":{"position":[[1094,10]]},"1429":{"position":[[1043,10]]},"1431":{"position":[[1056,10]]},"1433":{"position":[[1169,10]]},"1435":{"position":[[1130,10]]},"1439":{"position":[[1203,10]]},"1441":{"position":[[1184,10]]},"1443":{"position":[[1080,10]]},"1445":{"position":[[1196,10]]},"1447":{"position":[[1061,10]]},"1449":{"position":[[976,10]]},"1459":{"position":[[1151,10]]},"1465":{"position":[[1193,10]]},"1467":{"position":[[1109,10]]},"1469":{"position":[[1115,10]]},"1542":{"position":[[1460,10]]},"1544":{"position":[[1474,10]]},"1546":{"position":[[1589,10]]}}}],["agnet",{"_index":948,"t":{"1053":{"position":[[42,5]]}}}],["agnost",{"_index":433,"t":{"878":{"position":[[327,8]]}}}],["ago",{"_index":128,"t":{"838":{"position":[[981,3],[1145,3],[1328,3],[1493,3],[1649,3],[1819,3],[2017,3],[2205,3],[2369,3],[2529,3]]}}}],["airgap",{"_index":1011,"t":{"1075":{"position":[[127,6]]}}}],["alice=bob:noexecut",{"_index":1070,"t":{"1095":{"position":[[339,19],[591,19]]}}}],["alloc",{"_index":1739,"t":{"1288":{"position":[[2288,8]]},"1480":{"position":[[526,8]]},"1482":{"position":[[594,8]]},"1484":{"position":[[679,8]]},"1486":{"position":[[576,8]]}}}],["allow",{"_index":367,"t":{"867":{"position":[[60,5],[90,5],[131,5]]},"1226":{"position":[[78,5]]},"1280":{"position":[[2272,6]]},"1282":{"position":[[578,8],[623,5],[1035,5],[1361,5],[1575,5],[1816,5],[2044,5],[2258,5],[2499,5]]},"1288":{"position":[[211,5],[1273,7]]},"1304":{"position":[[107,6]]},"1306":{"position":[[302,6]]},"1423":{"position":[[847,5],[2078,7]]},"1425":{"position":[[795,5],[2026,7]]},"1427":{"position":[[664,5],[1895,7]]},"1429":{"position":[[613,5],[1844,7]]},"1431":{"position":[[626,5],[1857,7]]},"1433":{"position":[[739,5],[1970,7]]},"1435":{"position":[[700,5],[1931,7]]},"1439":{"position":[[773,5],[2004,7]]},"1441":{"position":[[754,5],[1985,7]]},"1443":{"position":[[650,5],[1881,7]]},"1445":{"position":[[766,5],[1997,7]]},"1447":{"position":[[631,5],[1862,7]]},"1449":{"position":[[546,5],[1777,7]]},"1459":{"position":[[721,5],[1952,7]]},"1465":{"position":[[763,5],[1994,7]]},"1467":{"position":[[679,5],[1910,7]]},"1469":{"position":[[685,5],[1916,7]]},"1542":{"position":[[1030,5],[2261,7]]},"1544":{"position":[[1044,5],[2275,7]]},"1546":{"position":[[1159,5],[2390,7]]},"1632":{"position":[[64,5]]}}}],["allow_ip_forward",{"_index":1124,"t":{"1119":{"position":[[243,22],[465,22]]}}}],["allowedcap",{"_index":1620,"t":{"1280":{"position":[[3312,20],[3751,20]]},"1602":{"position":[[38,19]]}}}],["allowedunsafesysctl",{"_index":1622,"t":{"1280":{"position":[[3784,21]]}}}],["allowprivilegeescal",{"_index":1582,"t":{"1280":{"position":[[1481,25],[2654,25],[3281,25],[3719,25]]}}}],["along",{"_index":1793,"t":{"1290":{"position":[[100,5]]}}}],["alpha",{"_index":1397,"t":{"1236":{"position":[[90,5]]}}}],["alphanumer",{"_index":1194,"t":{"1138":{"position":[[543,12],[611,12]]}}}],["alpin",{"_index":1937,"t":{"1334":{"position":[[130,6]]},"1340":{"position":[[130,6]]}}}],["alreadi",{"_index":2161,"t":{"1439":{"position":[[250,7]]}}}],["alsologtostderr",{"_index":516,"t":{"900":{"position":[[132,15]]},"920":{"position":[[509,15]]},"961":{"position":[[156,15]]},"981":{"position":[[520,15]]}}}],["altern",{"_index":778,"t":{"963":{"position":[[292,11]]},"981":{"position":[[1097,11]]},"1031":{"position":[[416,11]]},"1417":{"position":[[65,9]]},"1459":{"position":[[200,14]]},"1513":{"position":[[26,11]]},"1613":{"position":[[167,9]]}}}],["altogeth",{"_index":2286,"t":{"1562":{"position":[[138,10]]}}}],["alwaysadmit",{"_index":2157,"t":{"1435":{"position":[[244,12],[439,13]]}}}],["alwaysallow",{"_index":2151,"t":{"1427":{"position":[[205,12],[450,13]]},"1544":{"position":[[801,13]]}}}],["alwayspullimag",{"_index":2158,"t":{"1437":{"position":[[201,17]]}}}],["amazon",{"_index":1374,"t":{"1220":{"position":[[209,6]]}}}],["amd64.tar.gz",{"_index":202,"t":{"840":{"position":[[227,13]]}}}],["analysi",{"_index":1838,"t":{"1300":{"position":[[450,9]]},"1302":{"position":[[436,9]]}}}],["annot",{"_index":1618,"t":{"1280":{"position":[[3200,12],[3638,12]]}}}],["anonym",{"_index":1694,"t":{"1288":{"position":[[235,9],[3065,9]]},"1415":{"position":[[172,9],[288,10]]},"1423":{"position":[[871,9]]},"1425":{"position":[[819,9]]},"1427":{"position":[[688,9]]},"1429":{"position":[[637,9]]},"1431":{"position":[[650,9]]},"1433":{"position":[[763,9]]},"1435":{"position":[[724,9]]},"1439":{"position":[[797,9]]},"1441":{"position":[[778,9]]},"1443":{"position":[[674,9]]},"1445":{"position":[[790,9]]},"1447":{"position":[[655,9]]},"1449":{"position":[[570,9]]},"1459":{"position":[[745,9]]},"1465":{"position":[[787,9]]},"1467":{"position":[[703,9]]},"1469":{"position":[[709,9]]},"1542":{"position":[[95,10],[327,9],[678,10],[724,9],[771,9],[825,9],[1054,9]]},"1544":{"position":[[1068,9]]},"1546":{"position":[[1183,9]]},"1548":{"position":[[792,9],[2015,9]]},"1560":{"position":[[983,9],[2206,9]]}}}],["anoth",{"_index":2064,"t":{"1392":{"position":[[1593,7]]},"1463":{"position":[[1723,7]]},"1498":{"position":[[1617,7]]},"1500":{"position":[[1506,7]]},"1502":{"position":[[1531,7]]},"1504":{"position":[[1683,7]]},"1506":{"position":[[1509,7]]},"1508":{"position":[[1541,7]]},"1510":{"position":[[1640,7]]}}}],["apach",{"_index":958,"t":{"1059":{"position":[[83,15],[333,6],[417,6]]}}}],["api",{"_index":486,"t":{"888":{"position":[[107,3]]},"890":{"position":[[135,3],[237,3]]},"892":{"position":[[40,3]]},"927":{"position":[[331,3]]},"937":{"position":[[1448,3],[1472,3]]},"1019":{"position":[[151,3]]},"1031":{"position":[[269,12]]},"1033":{"position":[[335,3]]},"1174":{"position":[[117,3]]},"1236":{"position":[[306,3]]},"1278":{"position":[[130,3]]},"1284":{"position":[[80,3],[673,3],[851,3]]},"1288":{"position":[[266,3]]},"1296":{"position":[[84,3]]},"1304":{"position":[[128,3],[487,3]]},"1308":{"position":[[205,3]]},"1318":{"position":[[241,3]]},"1358":{"position":[[285,6]]},"1415":{"position":[[35,3]]},"1417":{"position":[[121,3]]},"1419":{"position":[[35,3]]},"1421":{"position":[[45,3]]},"1423":{"position":[[139,3],[894,3]]},"1425":{"position":[[142,3],[842,3]]},"1427":{"position":[[35,3],[711,3]]},"1429":{"position":[[35,3],[660,3]]},"1431":{"position":[[35,3],[673,3]]},"1433":{"position":[[129,3],[786,3]]},"1435":{"position":[[35,3],[747,3]]},"1437":{"position":[[35,3]]},"1439":{"position":[[35,3],[820,3]]},"1441":{"position":[[125,3],[801,3]]},"1443":{"position":[[35,3],[697,3]]},"1445":{"position":[[128,3],[813,3]]},"1447":{"position":[[35,3],[678,3]]},"1449":{"position":[[35,3],[593,3]]},"1451":{"position":[[45,3]]},"1453":{"position":[[45,3]]},"1455":{"position":[[45,3]]},"1457":{"position":[[45,3]]},"1459":{"position":[[35,3],[768,3]]},"1461":{"position":[[45,3]]},"1463":{"position":[[139,3]]},"1465":{"position":[[125,3],[810,3]]},"1467":{"position":[[125,3],[726,3]]},"1469":{"position":[[139,3],[732,3]]},"1471":{"position":[[116,3]]},"1475":{"position":[[35,3]]},"1542":{"position":[[1077,3]]},"1544":{"position":[[1091,3]]},"1546":{"position":[[1206,3]]},"1577":{"position":[[133,3]]}}}],["apigroup",{"_index":1091,"t":{"1103":{"position":[[303,9]]},"1280":{"position":[[4106,10],[4320,10],[4529,10],[4740,9],[4870,9],[5042,9],[5142,9],[5365,9],[5465,9],[5675,9]]}}}],["apiserv",{"_index":356,"t":{"865":{"position":[[126,10]]},"867":{"position":[[75,10]]},"894":{"position":[[123,46],[245,9],[311,9]]},"896":{"position":[[370,9]]},"906":{"position":[[363,9],[399,9]]},"920":{"position":[[1702,9],[1797,9]]},"963":{"position":[[145,12],[208,9]]},"969":{"position":[[736,9],[863,9]]},"975":{"position":[[44,9],[69,9]]},"981":{"position":[[787,9],[921,9],[3353,9],[3406,9],[8804,9],[8899,9]]},"1059":{"position":[[1403,9]]},"1121":{"position":[[246,9],[449,9],[599,9]]},"1188":{"position":[[128,9]]},"1192":{"position":[[116,9]]},"1194":{"position":[[135,10]]},"1210":{"position":[[159,9],[382,9]]},"1280":{"position":[[194,9],[1008,9]]},"1284":{"position":[[873,9],[954,9],[1212,9],[1295,9]]},"1286":{"position":[[241,9],[838,9]]},"1288":{"position":[[177,9]]},"1292":{"position":[[538,9]]},"1294":{"position":[[637,9]]},"1296":{"position":[[518,9]]},"1298":{"position":[[358,9]]},"1300":{"position":[[533,9]]},"1302":{"position":[[519,9]]},"1304":{"position":[[743,9]]},"1306":{"position":[[126,9],[536,9]]},"1312":{"position":[[610,9]]},"1316":{"position":[[661,9]]},"1392":{"position":[[796,10]]},"1415":{"position":[[259,10]]},"1423":{"position":[[104,9],[489,10],[780,9]]},"1425":{"position":[[103,9],[472,10],[728,9]]},"1427":{"position":[[346,10],[597,9]]},"1429":{"position":[[312,10],[546,9]]},"1431":{"position":[[325,10],[559,9]]},"1433":{"position":[[416,10],[672,9]]},"1435":{"position":[[323,10],[633,9]]},"1439":{"position":[[389,10],[706,9]]},"1441":{"position":[[411,10],[687,9]]},"1443":{"position":[[307,10],[583,9]]},"1445":{"position":[[442,10],[699,9]]},"1447":{"position":[[303,10],[564,9]]},"1449":{"position":[[254,10],[479,9]]},"1459":{"position":[[384,10],[654,9]]},"1463":{"position":[[104,9],[926,10]]},"1465":{"position":[[99,10],[455,10],[696,9]]},"1467":{"position":[[99,10],[386,10],[612,9]]},"1469":{"position":[[104,9],[398,10],[618,9]]},"1471":{"position":[[440,10]]},"1475":{"position":[[992,10]]},"1480":{"position":[[859,9],[955,9]]},"1482":{"position":[[927,9],[1023,9]]},"1484":{"position":[[1012,9],[1108,9]]},"1486":{"position":[[909,9],[1005,9]]},"1498":{"position":[[820,10]]},"1500":{"position":[[709,10]]},"1502":{"position":[[734,10]]},"1504":{"position":[[886,10]]},"1506":{"position":[[712,10]]},"1508":{"position":[[744,10]]},"1510":{"position":[[843,10]]},"1516":{"position":[[138,10]]},"1542":{"position":[[558,10],[649,10],[963,9]]},"1544":{"position":[[544,10],[635,10],[977,9]]},"1546":{"position":[[600,10],[691,10],[1092,9]]}}}],["apiserver.config.k8s.io/v1",{"_index":1335,"t":{"1210":{"position":[[1098,26]]},"1280":{"position":[[424,26]]},"1322":{"position":[[333,29]]}}}],["apiserver.crt",{"_index":1714,"t":{"1288":{"position":[[980,13],[1876,13]]},"1423":{"position":[[1729,13],[2742,13]]},"1425":{"position":[[1677,13],[2690,13]]},"1427":{"position":[[1546,13],[2559,13]]},"1429":{"position":[[1495,13],[2508,13]]},"1431":{"position":[[1508,13],[2521,13]]},"1433":{"position":[[1621,13],[2634,13]]},"1435":{"position":[[1582,13],[2595,13]]},"1439":{"position":[[1655,13],[2668,13]]},"1441":{"position":[[1636,13],[2649,13]]},"1443":{"position":[[1532,13],[2545,13]]},"1445":{"position":[[1648,13],[2661,13]]},"1447":{"position":[[1513,13],[2526,13]]},"1449":{"position":[[1428,13],[2441,13]]},"1459":{"position":[[1603,13],[2616,13]]},"1465":{"position":[[1645,13],[2658,13]]},"1467":{"position":[[1561,13],[2574,13]]},"1469":{"position":[[1567,13],[2580,13]]},"1542":{"position":[[1912,13],[2925,13]]},"1544":{"position":[[1926,13],[2939,13]]},"1546":{"position":[[2041,13],[3054,13]]}}}],["apiserver.key",{"_index":1716,"t":{"1288":{"position":[[1059,13],[1967,13]]},"1423":{"position":[[1808,13],[2824,14]]},"1425":{"position":[[1756,13],[2772,14]]},"1427":{"position":[[1625,13],[2641,14]]},"1429":{"position":[[1574,13],[2590,14]]},"1431":{"position":[[1587,13],[2603,14]]},"1433":{"position":[[1700,13],[2716,14]]},"1435":{"position":[[1661,13],[2677,14]]},"1439":{"position":[[1734,13],[2750,14]]},"1441":{"position":[[1715,13],[2731,14]]},"1443":{"position":[[1611,13],[2627,14]]},"1445":{"position":[[1727,13],[2743,14]]},"1447":{"position":[[1592,13],[2608,14]]},"1449":{"position":[[1507,13],[2523,14]]},"1459":{"position":[[1682,13],[2698,14]]},"1465":{"position":[[1724,13],[2740,14]]},"1467":{"position":[[1640,13],[2656,14]]},"1469":{"position":[[1646,13],[2662,14]]},"1542":{"position":[[1991,13],[3007,14]]},"1544":{"position":[[2005,13],[3021,14]]},"1546":{"position":[[2120,13],[3136,14]]}}}],["apiserver.yaml",{"_index":2025,"t":{"1372":{"position":[[183,14]]},"1374":{"position":[[189,14]]},"1415":{"position":[[100,14]]},"1417":{"position":[[186,14]]},"1419":{"position":[[100,14]]},"1421":{"position":[[110,14]]},"1423":{"position":[[204,14]]},"1425":{"position":[[207,14]]},"1427":{"position":[[100,14]]},"1429":{"position":[[100,14]]},"1431":{"position":[[100,14]]},"1433":{"position":[[194,14]]},"1435":{"position":[[100,14]]},"1437":{"position":[[100,14]]},"1439":{"position":[[100,14]]},"1441":{"position":[[190,14]]},"1443":{"position":[[100,14]]},"1445":{"position":[[193,14]]},"1447":{"position":[[100,14]]},"1449":{"position":[[100,14]]},"1451":{"position":[[110,14]]},"1453":{"position":[[110,14]]},"1455":{"position":[[110,14]]},"1457":{"position":[[110,14]]},"1459":{"position":[[100,14]]},"1461":{"position":[[110,14]]},"1463":{"position":[[204,14]]},"1465":{"position":[[190,14]]},"1467":{"position":[[190,14]]},"1469":{"position":[[204,14]]},"1471":{"position":[[181,14]]},"1475":{"position":[[100,14]]}}}],["apiserver、control",{"_index":1294,"t":{"1186":{"position":[[58,20]]}}}],["apiserver、scheduler、control",{"_index":496,"t":{"896":{"position":[[77,30]]}}}],["apivers",{"_index":239,"t":{"844":{"position":[[538,11],[627,11]]},"880":{"position":[[265,11]]},"1059":{"position":[[216,11],[271,11]]},"1061":{"position":[[378,11]]},"1103":{"position":[[76,11],[201,11]]},"1210":{"position":[[1086,11],[1198,11],[1625,11]]},"1236":{"position":[[397,11]]},"1280":{"position":[[412,11],[524,11],[1361,11],[2548,11],[3109,11],[3561,11],[4003,11],[4208,11],[4431,11],[4626,11],[4910,11],[5213,11],[5546,11],[5818,11],[6021,11],[6216,11]]},"1282":{"position":[[331,11],[659,11],[1292,11],[1506,11],[1747,11],[1975,11],[2189,11],[2430,11]]},"1284":{"position":[[730,11]]},"1322":{"position":[[319,13]]},"1332":{"position":[[0,11]]},"1334":{"position":[[0,11]]},"1338":{"position":[[0,11]]},"1340":{"position":[[0,11]]},"1352":{"position":[[155,11],[504,11],[1362,11]]}}}],["app",{"_index":1650,"t":{"1282":{"position":[[882,4],[1445,4],[2128,4],[2585,4]]}}}],["app.kubernetes.io/nam",{"_index":1660,"t":{"1282":{"position":[[1902,23]]}}}],["append",{"_index":573,"t":{"920":{"position":[[993,6]]},"981":{"position":[[6318,6]]}}}],["appli",{"_index":1101,"t":{"1109":{"position":[[243,5]]},"1134":{"position":[[71,5]]},"1272":{"position":[[290,7],[963,8]]},"1280":{"position":[[1233,7]]},"1282":{"position":[[55,7],[519,7]]},"1336":{"position":[[134,5]]},"1350":{"position":[[136,5]]},"1630":{"position":[[66,5]]}}}],["applic",{"_index":2006,"t":{"1368":{"position":[[1263,10],[1295,10]]},"1372":{"position":[[12,10]]},"1374":{"position":[[12,10]]},"1376":{"position":[[12,10]]},"1378":{"position":[[12,10]]},"1380":{"position":[[12,10]]},"1382":{"position":[[12,10]]},"1384":{"position":[[12,10]]},"1386":{"position":[[12,10]]},"1388":{"position":[[12,10]]},"1390":{"position":[[12,10]]},"1394":{"position":[[12,10]]},"1396":{"position":[[12,10]]},"1421":{"position":[[12,10]]},"1451":{"position":[[12,10]]},"1453":{"position":[[12,10]]},"1455":{"position":[[12,10]]},"1457":{"position":[[12,10]]},"1461":{"position":[[12,10]]},"1488":{"position":[[12,10]]},"1521":{"position":[[12,10]]},"1523":{"position":[[12,10]]},"1537":{"position":[[12,10]]},"1539":{"position":[[12,10]]},"1552":{"position":[[12,10]]},"1554":{"position":[[12,10]]},"1556":{"position":[[12,10]]},"1562":{"position":[[12,10]]},"1564":{"position":[[12,10]]},"1604":{"position":[[60,12],[125,12]]},"1618":{"position":[[47,11]]}}}],["appropri",{"_index":1525,"t":{"1272":{"position":[[842,11],[972,11]]},"1296":{"position":[[417,11]]},"1298":{"position":[[63,12]]},"1300":{"position":[[66,12]]},"1302":{"position":[[65,12]]},"1304":{"position":[[53,12],[175,11],[599,11]]},"1308":{"position":[[64,12]]},"1310":{"position":[[37,13],[141,11],[254,11]]},"1312":{"position":[[65,12],[477,11]]},"1453":{"position":[[207,11]]},"1455":{"position":[[210,11]]},"1457":{"position":[[199,11]]},"1478":{"position":[[206,11]]},"1504":{"position":[[101,11]]},"1558":{"position":[[100,11]]},"1632":{"position":[[74,11]]}}}],["approxim",{"_index":1837,"t":{"1300":{"position":[[376,11]]},"1302":{"position":[[362,11]]}}}],["apt",{"_index":225,"t":{"844":{"position":[[144,3]]},"869":{"position":[[442,3]]},"1252":{"position":[[29,3]]}}}],["arch",{"_index":1475,"t":{"1254":{"position":[[0,4]]}}}],["arch.tar",{"_index":1012,"t":{"1075":{"position":[[141,9]]}}}],["archiv",{"_index":968,"t":{"1059":{"position":[[670,7],[1349,7]]}}}],["area",{"_index":1542,"t":{"1274":{"position":[[14,5]]},"1518":{"position":[[124,6]]}}}],["arg",{"_index":254,"t":{"844":{"position":[[842,5]]},"880":{"position":[[423,5]]},"912":{"position":[[16,3],[56,3]]},"920":{"position":[[3047,3],[3120,3]]},"975":{"position":[[13,3],[54,3],[105,3],[165,3],[240,3],[299,3],[339,3]]},"981":{"position":[[3363,3],[3431,3],[3508,3],[3595,3],[3688,3],[8109,3],[8182,3]]},"1210":{"position":[[169,3],[392,4],[749,4],[838,4]]},"1286":{"position":[[251,4],[608,4],[697,4],[848,4],[1231,4],[1320,4]]},"1292":{"position":[[548,4]]},"1294":{"position":[[647,4]]},"1296":{"position":[[528,4]]},"1298":{"position":[[368,4]]},"1300":{"position":[[543,4]]},"1302":{"position":[[529,4]]},"1304":{"position":[[753,4]]},"1306":{"position":[[546,4]]},"1312":{"position":[[620,4]]},"1316":{"position":[[671,4]]},"1352":{"position":[[744,5]]}}}],["arg=\"admiss",{"_index":1567,"t":{"1280":{"position":[[204,14]]}}}],["arg=\"en",{"_index":1573,"t":{"1280":{"position":[[1018,11]]}}}],["arg=\"nod",{"_index":1145,"t":{"1123":{"position":[[192,9],[256,9]]}}}],["arg='audit",{"_index":1684,"t":{"1284":{"position":[[883,10],[964,10]]}}}],["arg=audit",{"_index":1685,"t":{"1284":{"position":[[1222,9],[1305,9]]}}}],["argument",{"_index":860,"t":{"998":{"position":[[171,14]]},"1284":{"position":[[834,9]]},"1288":{"position":[[58,9]]},"1292":{"position":[[461,8],[553,8]]},"1294":{"position":[[560,8],[652,8]]},"1296":{"position":[[33,8],[484,8],[533,8]]},"1298":{"position":[[35,8],[324,8],[373,8]]},"1300":{"position":[[38,8],[499,8],[548,8]]},"1302":{"position":[[36,8],[485,8],[534,8]]},"1304":{"position":[[34,8],[709,8],[758,8]]},"1306":{"position":[[41,8],[502,8],[551,8]]},"1308":{"position":[[45,8]]},"1312":{"position":[[46,8],[576,8],[625,8]]},"1316":{"position":[[44,8],[627,8],[676,8]]},"1392":{"position":[[93,8]]},"1394":{"position":[[103,8]]},"1542":{"position":[[144,10]]},"1544":{"position":[[130,10]]},"1546":{"position":[[173,10]]},"1548":{"position":[[120,10]]},"1550":{"position":[[157,10]]},"1552":{"position":[[142,10]]},"1554":{"position":[[143,10],[301,8]]},"1556":{"position":[[175,8]]},"1558":{"position":[[141,10]]},"1560":{"position":[[263,10]]},"1562":{"position":[[197,10],[351,8]]},"1566":{"position":[[446,10]]}}}],["arm",{"_index":10,"t":{"821":{"position":[[108,3]]},"1170":{"position":[[374,3]]}}}],["arm32",{"_index":1947,"t":{"1336":{"position":[[16,6]]}}}],["arm64",{"_index":1249,"t":{"1166":{"position":[[46,5]]}}}],["arm64/aarch64",{"_index":1247,"t":{"1166":{"position":[[26,13]]}}}],["armhf",{"_index":1246,"t":{"1166":{"position":[[20,5]]}}}],["around",{"_index":1558,"t":{"1278":{"position":[[71,6]]}}}],["arp",{"_index":1277,"t":{"1172":{"position":[[554,3]]}}}],["array",{"_index":2305,"t":{"1602":{"position":[[130,6]]}}}],["assess",{"_index":1908,"t":{"1320":{"position":[[152,10]]}}}],["assign",{"_index":1898,"t":{"1318":{"position":[[189,8],[513,12]]}}}],["associ",{"_index":1654,"t":{"1282":{"position":[[1196,10]]}}}],["assum",{"_index":1042,"t":{"1089":{"position":[[581,7],[1255,7]]}}}],["assumpt",{"_index":2014,"t":{"1368":{"position":[[1765,10]]}}}],["attack",{"_index":1855,"t":{"1304":{"position":[[545,7]]}}}],["audiences=https://kubernetes.default.svc.cluster.local,k3",{"_index":2141,"t":{"1423":{"position":[[898,58]]},"1425":{"position":[[846,58]]},"1427":{"position":[[715,58]]},"1429":{"position":[[664,58]]},"1431":{"position":[[677,58]]},"1433":{"position":[[790,58]]},"1435":{"position":[[751,58]]},"1439":{"position":[[824,58]]},"1441":{"position":[[805,58]]},"1443":{"position":[[701,58]]},"1445":{"position":[[817,58]]},"1447":{"position":[[682,58]]},"1449":{"position":[[597,58]]},"1459":{"position":[[772,58]]},"1465":{"position":[[814,58]]},"1467":{"position":[[730,58]]},"1469":{"position":[[736,58]]},"1542":{"position":[[1081,58]]},"1544":{"position":[[1095,58]]},"1546":{"position":[[1210,58]]}}}],["audiences=unknown",{"_index":1697,"t":{"1288":{"position":[[270,17]]}}}],["audit",{"_index":1315,"t":{"1210":{"position":[[470,6],[532,6],[593,6],[617,6],[644,6],[1344,6],[1364,5]]},"1278":{"position":[[141,8],[375,8],[399,5],[427,5]]},"1280":{"position":[[670,6],[690,5]]},"1284":{"position":[[61,5],[144,5],[161,8],[463,5]]},"1286":{"position":[[329,6],[391,6],[452,6],[476,6],[503,6],[952,6],[1014,6],[1075,6],[1099,6],[1126,6]]},"1296":{"position":[[18,5],[60,8],[343,5],[429,5]]},"1298":{"position":[[18,5],[209,5]]},"1300":{"position":[[18,5]]},"1302":{"position":[[18,5]]},"1314":{"position":[[22,5]]},"1368":{"position":[[1024,6],[1075,5],[1226,5],[1689,8],[1877,7]]},"1392":{"position":[[260,5],[2025,5]]},"1398":{"position":[[175,6]]},"1400":{"position":[[152,6]]},"1402":{"position":[[158,6]]},"1404":{"position":[[160,6]]},"1406":{"position":[[166,6]]},"1408":{"position":[[172,6]]},"1410":{"position":[[171,6]]},"1412":{"position":[[171,6]]},"1415":{"position":[[193,6]]},"1417":{"position":[[282,6]]},"1419":{"position":[[211,6]]},"1423":{"position":[[423,6]]},"1425":{"position":[[406,6]]},"1427":{"position":[[280,6]]},"1429":{"position":[[246,6]]},"1431":{"position":[[259,6]]},"1433":{"position":[[350,6]]},"1435":{"position":[[257,6]]},"1437":{"position":[[271,6]]},"1439":{"position":[[323,6]]},"1441":{"position":[[345,6]]},"1443":{"position":[[241,6]]},"1445":{"position":[[376,6]]},"1447":{"position":[[237,6]]},"1449":{"position":[[188,6]]},"1451":{"position":[[165,5],[239,5],[280,5]]},"1453":{"position":[[165,5],[250,5]]},"1455":{"position":[[165,5],[244,5]]},"1457":{"position":[[165,5],[259,5]]},"1459":{"position":[[318,6]]},"1463":{"position":[[390,5],[2155,5]]},"1465":{"position":[[385,6]]},"1467":{"position":[[320,6]]},"1469":{"position":[[332,6]]},"1471":{"position":[[374,6]]},"1473":{"position":[[175,6]]},"1475":{"position":[[926,6]]},"1478":{"position":[[275,6]]},"1480":{"position":[[205,6]]},"1482":{"position":[[225,6]]},"1484":{"position":[[321,6]]},"1486":{"position":[[258,6]]},"1490":{"position":[[220,6]]},"1493":{"position":[[192,6]]},"1495":{"position":[[202,6]]},"1498":{"position":[[284,5],[2049,5]]},"1500":{"position":[[173,5],[1938,5]]},"1502":{"position":[[198,5],[1963,5]]},"1504":{"position":[[350,5],[2115,5]]},"1506":{"position":[[176,5],[1941,5]]},"1508":{"position":[[208,5],[1973,5]]},"1510":{"position":[[307,5],[2072,5]]},"1516":{"position":[[36,5],[72,6],[167,6]]},"1518":{"position":[[37,5]]},"1525":{"position":[[188,6]]},"1527":{"position":[[194,6]]},"1529":{"position":[[190,6]]},"1531":{"position":[[196,6]]},"1533":{"position":[[129,6]]},"1535":{"position":[[129,6]]},"1537":{"position":[[112,5]]},"1539":{"position":[[112,5]]},"1542":{"position":[[470,6]]},"1544":{"position":[[456,6]]},"1546":{"position":[[512,6]]},"1548":{"position":[[442,6]]},"1550":{"position":[[499,6]]},"1558":{"position":[[444,6]]},"1560":{"position":[[660,6]]},"1566":{"position":[[1085,6]]}}}],["audit.k8s.io/v1",{"_index":1683,"t":{"1284":{"position":[[742,15]]}}}],["audit.yaml",{"_index":1681,"t":{"1284":{"position":[[564,10]]}}}],["auditor",{"_index":1990,"t":{"1368":{"position":[[381,9]]}}}],["auth",{"_index":330,"t":{"858":{"position":[[378,4]]},"925":{"position":[[316,4]]},"1131":{"position":[[160,16],[570,4]]},"1154":{"position":[[53,4],[226,4],[310,4]]},"1156":{"position":[[162,5]]},"1158":{"position":[[161,5]]},"1288":{"position":[[1164,4],[1242,4]]},"1392":{"position":[[1080,8],[1405,8]]},"1415":{"position":[[299,5]]},"1417":{"position":[[250,4],[360,4]]},"1423":{"position":[[1969,4],[2047,4]]},"1425":{"position":[[1917,4],[1995,4]]},"1427":{"position":[[1786,4],[1864,4]]},"1429":{"position":[[1735,4],[1813,4]]},"1431":{"position":[[1748,4],[1826,4]]},"1433":{"position":[[1861,4],[1939,4]]},"1435":{"position":[[1822,4],[1900,4]]},"1439":{"position":[[1895,4],[1973,4]]},"1441":{"position":[[1876,4],[1954,4]]},"1443":{"position":[[1772,4],[1850,4]]},"1445":{"position":[[1888,4],[1966,4]]},"1447":{"position":[[1753,4],[1831,4]]},"1449":{"position":[[1668,4],[1746,4]]},"1459":{"position":[[1843,4],[1921,4]]},"1463":{"position":[[1210,8],[1535,8]]},"1465":{"position":[[1885,4],[1963,4]]},"1467":{"position":[[1801,4],[1879,4]]},"1469":{"position":[[1807,4],[1885,4]]},"1498":{"position":[[1104,8],[1429,8]]},"1500":{"position":[[993,8],[1318,8],[2015,5],[2048,5],[2125,5]]},"1502":{"position":[[1018,8],[1343,8]]},"1504":{"position":[[1170,8],[1495,8]]},"1506":{"position":[[996,8],[1321,8],[2018,5],[2051,5],[2128,5]]},"1508":{"position":[[1028,8],[1353,8]]},"1510":{"position":[[1127,8],[1452,8]]},"1542":{"position":[[689,5],[781,5],[2152,4],[2230,4]]},"1544":{"position":[[2166,4],[2244,4]]},"1546":{"position":[[2281,4],[2359,4]]}}}],["auth=\"name=tailscale,joinkey=$auth",{"_index":1176,"t":{"1131":{"position":[[508,34]]}}}],["auth=\"tru",{"_index":2210,"t":{"1500":{"position":[[161,11]]}}}],["auth=fals",{"_index":1695,"t":{"1288":{"position":[[245,10],[3075,10]]},"1415":{"position":[[182,10]]},"1423":{"position":[[881,10]]},"1425":{"position":[[829,10]]},"1427":{"position":[[698,10]]},"1429":{"position":[[647,10]]},"1431":{"position":[[660,10]]},"1433":{"position":[[773,10]]},"1435":{"position":[[734,10]]},"1439":{"position":[[807,10]]},"1441":{"position":[[788,10]]},"1443":{"position":[[684,10]]},"1445":{"position":[[800,10]]},"1447":{"position":[[665,10]]},"1449":{"position":[[580,10]]},"1459":{"position":[[755,10]]},"1465":{"position":[[797,10]]},"1467":{"position":[[713,10]]},"1469":{"position":[[719,10]]},"1542":{"position":[[337,10],[734,12],[835,10],[1064,10]]},"1544":{"position":[[1078,10]]},"1546":{"position":[[1193,10]]},"1548":{"position":[[802,10],[2025,10]]},"1560":{"position":[[993,10],[2216,10]]}}}],["auth=tru",{"_index":2068,"t":{"1392":{"position":[[1821,12],[1932,12]]},"1463":{"position":[[1951,12],[2062,12]]},"1498":{"position":[[1845,12],[1956,12]]},"1500":{"position":[[1734,12],[1845,12],[2103,9],[2150,9]]},"1502":{"position":[[1759,12],[1870,12]]},"1504":{"position":[[1911,12],[2022,12]]},"1506":{"position":[[166,9],[1737,12],[1848,12],[2106,9],[2153,9]]},"1508":{"position":[[1769,12],[1880,12]]},"1510":{"position":[[1868,12],[1979,12]]}}}],["authent",{"_index":566,"t":{"920":{"position":[[633,14],[712,14]]},"1288":{"position":[[3096,14]]},"1306":{"position":[[159,14]]},"1417":{"position":[[90,15]]},"1465":{"position":[[2884,14]]},"1480":{"position":[[553,14]]},"1482":{"position":[[621,14]]},"1484":{"position":[[706,14]]},"1486":{"position":[[603,14]]},"1493":{"position":[[476,14]]},"1495":{"position":[[550,14]]},"1542":{"position":[[79,15]]},"1548":{"position":[[815,14],[2038,14]]},"1560":{"position":[[1006,14],[2229,14]]}}}],["authentication.x509.clientcafil",{"_index":2253,"t":{"1546":{"position":[[79,32]]}}}],["author",{"_index":825,"t":{"981":{"position":[[3936,9]]},"1288":{"position":[[290,13],[3132,13]]},"1423":{"position":[[539,10],[959,13]]},"1425":{"position":[[282,9],[351,9],[522,10],[573,10],[907,13]]},"1427":{"position":[[155,13],[256,13],[375,14],[416,13],[776,13]]},"1429":{"position":[[155,13],[217,13],[341,14],[382,13],[725,13]]},"1431":{"position":[[155,13],[229,13],[354,14],[395,13],[738,13]]},"1433":{"position":[[851,13]]},"1435":{"position":[[812,13]]},"1439":{"position":[[885,13]]},"1441":{"position":[[866,13]]},"1443":{"position":[[762,13]]},"1445":{"position":[[878,13]]},"1447":{"position":[[743,13]]},"1449":{"position":[[658,13]]},"1459":{"position":[[833,13]]},"1465":{"position":[[875,13],[2966,13]]},"1467":{"position":[[262,9],[791,13]]},"1469":{"position":[[274,9],[797,13]]},"1480":{"position":[[636,13]]},"1482":{"position":[[704,13]]},"1484":{"position":[[789,13]]},"1486":{"position":[[686,13]]},"1493":{"position":[[558,13]]},"1495":{"position":[[632,13]]},"1510":{"position":[[105,9]]},"1542":{"position":[[1142,13]]},"1544":{"position":[[307,13],[664,14],[714,13],[767,13],[833,13],[1156,13]]},"1546":{"position":[[1271,13]]},"1548":{"position":[[851,13],[2074,13]]},"1560":{"position":[[1042,13],[2265,13]]}}}],["authority=/var/lib/rancher/k3s/server/tls/serv",{"_index":1712,"t":{"1288":{"position":[[851,48]]},"1423":{"position":[[1600,48]]},"1425":{"position":[[1548,48]]},"1427":{"position":[[1417,48]]},"1429":{"position":[[1366,48]]},"1431":{"position":[[1379,48]]},"1433":{"position":[[1492,48]]},"1435":{"position":[[1453,48]]},"1439":{"position":[[1526,48]]},"1441":{"position":[[1507,48]]},"1443":{"position":[[1403,48]]},"1445":{"position":[[1519,48]]},"1447":{"position":[[1384,48]]},"1449":{"position":[[1299,48]]},"1459":{"position":[[1474,48]]},"1465":{"position":[[1516,48]]},"1467":{"position":[[1432,48]]},"1469":{"position":[[1438,48]]},"1542":{"position":[[1783,48]]},"1544":{"position":[[1797,48]]},"1546":{"position":[[1912,48]]}}}],["authority=<ca",{"_index":2150,"t":{"1425":{"position":[[383,13]]}}}],["authorization.mod",{"_index":2250,"t":{"1544":{"position":[[79,18]]}}}],["auto",{"_index":2057,"t":{"1392":{"position":[[1108,5],[1439,4],[1965,4]]},"1463":{"position":[[1238,5],[1569,4],[2095,4]]},"1498":{"position":[[1132,5],[1463,4],[1989,4]]},"1500":{"position":[[1021,5],[1352,4],[1878,4]]},"1502":{"position":[[142,4],[183,4],[1046,5],[1377,4],[1903,4]]},"1504":{"position":[[1198,5],[1529,4],[2055,4]]},"1506":{"position":[[1024,5],[1355,4],[1881,4]]},"1508":{"position":[[147,4],[193,4],[1056,5],[1387,4],[1913,4],[2043,4],[2079,4],[2132,4],[2394,4]]},"1510":{"position":[[1155,5],[1486,4],[2012,4]]}}}],["autoapprov",{"_index":1171,"t":{"1131":{"position":[[265,16]]}}}],["autom",{"_index":2020,"t":{"1368":{"position":[[1927,9]]}}}],["automat",{"_index":827,"t":{"981":{"position":[[4389,9]]},"1282":{"position":[[223,13]]},"1300":{"position":[[100,13]]},"1302":{"position":[[99,13]]},"1316":{"position":[[92,13]]},"1318":{"position":[[787,13]]}}}],["automountserviceaccounttoken",{"_index":1901,"t":{"1318":{"position":[[565,28]]},"1577":{"position":[[224,29]]}}}],["autotedect",{"_index":313,"t":{"854":{"position":[[307,12]]}}}],["avail",{"_index":1347,"t":{"1210":{"position":[[1972,9]]},"1292":{"position":[[387,12]]},"1300":{"position":[[209,9]]},"1302":{"position":[[208,9]]},"1308":{"position":[[106,9],[379,9]]},"1310":{"position":[[422,9]]},"1312":{"position":[[150,12],[201,13]]}}}],["avoid",{"_index":1672,"t":{"1284":{"position":[[352,5]]},"1308":{"position":[[291,5]]},"1312":{"position":[[167,8]]},"1518":{"position":[[282,5]]}}}],["aw",{"_index":1168,"t":{"1129":{"position":[[567,3]]},"1254":{"position":[[48,3]]}}}],["aws_access_key_id",{"_index":754,"t":{"954":{"position":[[949,17]]},"981":{"position":[[5223,20]]}}}],["aws_secret_access_key",{"_index":755,"t":{"954":{"position":[[1008,21]]},"981":{"position":[[5290,24]]}}}],["azur",{"_index":1377,"t":{"1220":{"position":[[232,5]]}}}],["b",{"_index":1386,"t":{"1228":{"position":[[184,1],[409,2]]},"1254":{"position":[[173,1]]}}}],["b403f678",{"_index":2132,"t":{"1423":{"position":[[697,8]]},"1425":{"position":[[645,8]]},"1427":{"position":[[514,8]]},"1429":{"position":[[463,8]]},"1431":{"position":[[476,8]]},"1433":{"position":[[589,8]]},"1435":{"position":[[550,8]]},"1439":{"position":[[623,8]]},"1441":{"position":[[604,8]]},"1443":{"position":[[500,8]]},"1445":{"position":[[616,8]]},"1447":{"position":[[481,8]]},"1449":{"position":[[396,8]]},"1459":{"position":[[571,8]]},"1465":{"position":[[613,8],[2789,8]]},"1467":{"position":[[529,8]]},"1469":{"position":[[535,8]]},"1480":{"position":[[422,8]]},"1482":{"position":[[490,8]]},"1484":{"position":[[575,8]]},"1486":{"position":[[472,8]]},"1493":{"position":[[381,8]]},"1495":{"position":[[455,8]]},"1542":{"position":[[880,8]]},"1544":{"position":[[894,8]]},"1546":{"position":[[1009,8]]},"1548":{"position":[[1909,8],[2605,8]]},"1560":{"position":[[2100,8],[2796,8]]}}}],["b41ec3297be4625c2406ad8b7b4f8b91cddd60850c420050c4c3273f809b3e7",{"_index":2109,"t":{"1417":{"position":[[788,64]]},"1419":{"position":[[769,64]]},"1437":{"position":[[782,64]]},"1490":{"position":[[754,64]]}}}],["back",{"_index":1827,"t":{"1298":{"position":[[146,4]]}}}],["backend",{"_index":738,"t":{"951":{"position":[[282,7]]},"969":{"position":[[346,7]]},"979":{"position":[[152,7],[222,7]]},"981":{"position":[[1814,7],[1883,7],[3976,7],[4102,7],[4219,7]]},"1089":{"position":[[353,7],[446,7],[556,7],[682,7],[767,7]]},"1097":{"position":[[220,7],[303,7]]},"1117":{"position":[[305,8],[343,8],[372,8]]}}}],["backend<=option1=val1,option2=val2",{"_index":804,"t":{"981":{"position":[[1841,35]]}}}],["backend=etcd3",{"_index":1734,"t":{"1288":{"position":[[1801,13]]},"1423":{"position":[[2667,13]]},"1425":{"position":[[2615,13]]},"1427":{"position":[[2484,13]]},"1429":{"position":[[2433,13]]},"1431":{"position":[[2446,13]]},"1433":{"position":[[2559,13]]},"1435":{"position":[[2520,13]]},"1439":{"position":[[2593,13]]},"1441":{"position":[[2574,13]]},"1443":{"position":[[2470,13]]},"1445":{"position":[[2586,13]]},"1447":{"position":[[2451,13]]},"1449":{"position":[[2366,13]]},"1459":{"position":[[2541,13]]},"1465":{"position":[[2583,13]]},"1467":{"position":[[2499,13]]},"1469":{"position":[[2505,13]]},"1542":{"position":[[2850,13]]},"1544":{"position":[[2864,13]]},"1546":{"position":[[2979,13]]}}}],["backend=host",{"_index":1105,"t":{"1115":{"position":[[704,12]]}}}],["backend=ipsec",{"_index":1106,"t":{"1115":{"position":[[850,13]]}}}],["backend=non",{"_index":540,"t":{"916":{"position":[[41,12]]},"979":{"position":[[41,12]]},"1115":{"position":[[1035,12]]},"1119":{"position":[[13,12]]}}}],["backend=vxlan",{"_index":1104,"t":{"1115":{"position":[[636,13]]}}}],["backend=wireguard",{"_index":798,"t":{"979":{"position":[[187,17]]},"1115":{"position":[[779,17],[939,17]]},"1129":{"position":[[216,17]]}}}],["backup",{"_index":834,"t":{"981":{"position":[[4941,6]]}}}],["balanc",{"_index":20,"t":{"823":{"position":[[225,8]]},"920":{"position":[[1670,9]]},"981":{"position":[[8772,9]]},"1212":{"position":[[64,8]]}}}],["balancer.(default",{"_index":587,"t":{"920":{"position":[[1819,18]]},"981":{"position":[[8921,18]]}}}],["bar=baz",{"_index":1068,"t":{"1095":{"position":[[263,7]]}}}],["base",{"_index":414,"t":{"873":{"position":[[267,4]]},"981":{"position":[[4454,4]]},"1312":{"position":[[425,5]]},"1316":{"position":[[146,5]]},"1372":{"position":[[58,6]]},"1374":{"position":[[58,6]]},"1376":{"position":[[58,6]]},"1378":{"position":[[58,6]]},"1380":{"position":[[58,6]]},"1382":{"position":[[58,6]]},"1384":{"position":[[58,6]]},"1386":{"position":[[58,6]]},"1388":{"position":[[58,6]]},"1390":{"position":[[58,6]]},"1392":{"position":[[175,6]]},"1394":{"position":[[185,6]]},"1396":{"position":[[58,6]]},"1398":{"position":[[48,6]]},"1400":{"position":[[48,6]]},"1402":{"position":[[48,6]]},"1404":{"position":[[48,6]]},"1406":{"position":[[48,6]]},"1408":{"position":[[48,6]]},"1410":{"position":[[48,6]]},"1412":{"position":[[48,6]]},"1521":{"position":[[58,6]]},"1523":{"position":[[58,6]]},"1525":{"position":[[48,6]]},"1527":{"position":[[48,6]]},"1529":{"position":[[48,6]]},"1531":{"position":[[48,6]]},"1542":{"position":[[348,5]]},"1544":{"position":[[334,5]]},"1546":{"position":[[390,5]]},"1548":{"position":[[320,5]]},"1550":{"position":[[377,5]]},"1552":{"position":[[354,5]]},"1554":{"position":[[354,5]]},"1556":{"position":[[228,5]]},"1558":{"position":[[322,5]]},"1560":{"position":[[538,5]]},"1562":{"position":[[404,5]]},"1564":{"position":[[258,5]]},"1566":{"position":[[963,5]]}}}],["base64",{"_index":988,"t":{"1059":{"position":[[1332,6]]}}}],["bash",{"_index":645,"t":{"929":{"position":[[1292,4]]},"931":{"position":[[1013,4]]},"933":{"position":[[722,4]]}}}],["basic",{"_index":1823,"t":{"1296":{"position":[[337,5]]},"1518":{"position":[[515,5]]}}}],["batteri",{"_index":16,"t":{"823":{"position":[[177,9]]}}}],["bcm2711",{"_index":1452,"t":{"1246":{"position":[[290,8],[352,8],[404,8]]},"1254":{"position":[[175,8]]}}}],["be1450e1a11",{"_index":168,"t":{"838":{"position":[[1958,12]]}}}],["be5f4b9bd1ed9239362b7000b47f353acb8bc8ca52a9c9145cba0e902ec1c4b9",{"_index":2115,"t":{"1417":{"position":[[1634,64]]},"1419":{"position":[[1615,64]]},"1437":{"position":[[1628,64]]},"1490":{"position":[[1600,64]]}}}],["becom",{"_index":819,"t":{"981":{"position":[[3212,6]]}}}],["befor",{"_index":1670,"t":{"1284":{"position":[[281,6]]},"1392":{"position":[[415,6]]},"1463":{"position":[[545,6]]},"1498":{"position":[[439,6]]},"1500":{"position":[[328,6]]},"1502":{"position":[[353,6]]},"1504":{"position":[[505,6]]},"1506":{"position":[[331,6]]},"1508":{"position":[[363,6]]},"1510":{"position":[[462,6]]}}}],["behavior",{"_index":589,"t":{"920":{"position":[[1919,9]]},"981":{"position":[[8298,9]]}}}],["below",{"_index":1043,"t":{"1089":{"position":[[589,5]]},"1210":{"position":[[1941,5]]},"1272":{"position":[[1040,6]]},"1276":{"position":[[336,6]]},"1282":{"position":[[587,5],[1096,5],[1182,5]]},"1284":{"position":[[512,6]]},"1286":{"position":[[18,5]]},"1288":{"position":[[7,5],[4443,6]]},"1292":{"position":[[601,6]]},"1294":{"position":[[700,6]]},"1296":{"position":[[581,6]]},"1298":{"position":[[421,6]]},"1300":{"position":[[596,6]]},"1302":{"position":[[582,6]]},"1304":{"position":[[806,6]]},"1306":{"position":[[599,6]]},"1312":{"position":[[673,6]]},"1316":{"position":[[724,6]]},"1372":{"position":[[44,5]]},"1374":{"position":[[44,5]]},"1376":{"position":[[44,5]]},"1378":{"position":[[44,5]]},"1380":{"position":[[44,5]]},"1382":{"position":[[44,5]]},"1384":{"position":[[44,5]]},"1386":{"position":[[44,5]]},"1388":{"position":[[44,5]]},"1390":{"position":[[44,5]]},"1392":{"position":[[161,5]]},"1394":{"position":[[171,5]]},"1396":{"position":[[44,5]]},"1398":{"position":[[34,5]]},"1400":{"position":[[34,5]]},"1402":{"position":[[34,5]]},"1404":{"position":[[34,5]]},"1406":{"position":[[34,5]]},"1408":{"position":[[34,5]]},"1410":{"position":[[34,5]]},"1412":{"position":[[34,5]]},"1415":{"position":[[153,5]]},"1423":{"position":[[306,6]]},"1427":{"position":[[247,6]]},"1433":{"position":[[221,5]]},"1449":{"position":[[153,5]]},"1459":{"position":[[153,5]]},"1475":{"position":[[153,5]]},"1480":{"position":[[170,5]]},"1482":{"position":[[169,5]]},"1493":{"position":[[157,5]]},"1498":{"position":[[204,5]]},"1500":{"position":[[130,5]]},"1504":{"position":[[246,5]]},"1506":{"position":[[130,5]]},"1510":{"position":[[253,5]]},"1521":{"position":[[44,5]]},"1523":{"position":[[44,5]]},"1525":{"position":[[34,5]]},"1527":{"position":[[34,5]]},"1529":{"position":[[34,5]]},"1531":{"position":[[34,5]]},"1542":{"position":[[271,5]]},"1544":{"position":[[257,5]]},"1546":{"position":[[300,5]]},"1548":{"position":[[247,5]]},"1550":{"position":[[284,5]]},"1552":{"position":[[269,5]]},"1558":{"position":[[268,5]]},"1560":{"position":[[390,5]]},"1564":{"position":[[152,5]]},"1628":{"position":[[133,6]]}}}],["benchmark",{"_index":247,"t":{"844":{"position":[[678,9],[868,11]]},"1270":{"position":[[79,9],[105,9]]},"1272":{"position":[[185,9],[503,10],[1082,9]]},"1278":{"position":[[48,9]]},"1280":{"position":[[1311,10]]},"1320":{"position":[[103,10],[137,9]]},"1368":{"position":[[184,9],[319,10],[529,10],[714,9],[751,10],[897,9],[1060,10],[1248,10],[1448,9]]},"1630":{"position":[[179,9]]}}}],["benchmark'",{"_index":1911,"t":{"1320":{"position":[[215,11]]}}}],["between",{"_index":725,"t":{"947":{"position":[[443,7]]},"1316":{"position":[[479,7]]},"1423":{"position":[[92,7]]},"1425":{"position":[[91,7]]},"1463":{"position":[[92,7]]},"1469":{"position":[[92,7]]}}}],["bfa1",{"_index":149,"t":{"838":{"position":[[1418,4],[1735,4]]}}}],["bffdc9d7a65f",{"_index":138,"t":{"838":{"position":[[1090,12]]}}}],["bin",{"_index":345,"t":{"863":{"position":[[164,3],[255,3]]},"914":{"position":[[78,3]]},"920":{"position":[[1199,3],[3239,3]]},"977":{"position":[[121,3]]},"981":{"position":[[6524,3],[8559,3]]},"1288":{"position":[[3346,3]]}}}],["bin/bash",{"_index":2036,"t":{"1392":{"position":[[296,11]]},"1463":{"position":[[426,11]]},"1498":{"position":[[320,11]]},"1500":{"position":[[209,11]]},"1502":{"position":[[234,11]]},"1504":{"position":[[386,11]]},"1506":{"position":[[212,11]]},"1508":{"position":[[244,11]]},"1510":{"position":[[343,11]]}}}],["bin/p",{"_index":2095,"t":{"1417":{"position":[[289,7]]},"1419":{"position":[[218,7]]},"1437":{"position":[[278,7]]},"1490":{"position":[[227,7]]},"1558":{"position":[[451,7]]},"1566":{"position":[[1092,7]]}}}],["bin/sh",{"_index":2076,"t":{"1398":{"position":[[182,7]]},"1400":{"position":[[159,7]]},"1402":{"position":[[165,7]]},"1404":{"position":[[167,7]]},"1527":{"position":[[201,7]]},"1542":{"position":[[477,7]]},"1544":{"position":[[463,7]]},"1546":{"position":[[519,7]]}}}],["binari",{"_index":579,"t":{"920":{"position":[[1285,8],[3283,8],[3302,8]]},"981":{"position":[[6610,8],[8603,8],[8622,8]]},"1272":{"position":[[1256,7]]}}}],["bind",{"_index":770,"t":{"963":{"position":[[11,4]]},"981":{"position":[[595,4],[629,4]]},"1288":{"position":[[321,4],[2315,4],[2884,4],[3804,4]]},"1423":{"position":[[990,4]]},"1425":{"position":[[938,4]]},"1427":{"position":[[807,4]]},"1429":{"position":[[756,4]]},"1431":{"position":[[769,4]]},"1433":{"position":[[882,4]]},"1435":{"position":[[843,4]]},"1439":{"position":[[916,4]]},"1441":{"position":[[897,4]]},"1443":{"position":[[793,4]]},"1445":{"position":[[909,4]]},"1447":{"position":[[774,4]]},"1449":{"position":[[689,4]]},"1459":{"position":[[864,4]]},"1465":{"position":[[906,4],[3047,4]]},"1467":{"position":[[822,4]]},"1469":{"position":[[828,4]]},"1480":{"position":[[718,4]]},"1482":{"position":[[786,4]]},"1484":{"position":[[871,4]]},"1486":{"position":[[768,4]]},"1490":{"position":[[197,4],[292,4],[323,4]]},"1493":{"position":[[639,4]]},"1495":{"position":[[179,4],[297,5],[332,4],[376,4],[713,4]]},"1542":{"position":[[1173,4]]},"1544":{"position":[[1187,4]]},"1546":{"position":[[1302,4]]},"1548":{"position":[[1321,4],[2544,4]]},"1560":{"position":[[1512,4],[2735,4]]},"1569":{"position":[[209,4]]},"1583":{"position":[[66,4]]}}}],["bitnami",{"_index":957,"t":{"1059":{"position":[[64,7]]}}}],["block",{"_index":1644,"t":{"1282":{"position":[[553,7],[977,7]]}}}],["boop",{"_index":1067,"t":{"1095":{"position":[[234,4],[535,4]]}}}],["boot/cmdline.txt",{"_index":377,"t":{"869":{"position":[[175,17]]}}}],["bootstrap",{"_index":853,"t":{"991":{"position":[[143,9]]},"997":{"position":[[93,9],[138,9]]},"998":{"position":[[4,9],[38,9],[111,9],[210,9],[255,9],[316,9],[378,9],[1263,9],[1539,9]]}}}],["both",{"_index":1561,"t":{"1278":{"position":[[496,4]]},"1284":{"position":[[796,4]]}}}],["bound",{"_index":1946,"t":{"1334":{"position":[[426,6]]},"1340":{"position":[[366,6]]}}}],["bridg",{"_index":1273,"t":{"1172":{"position":[[482,6]]}}}],["bucket",{"_index":700,"t":{"937":{"position":[[1810,6],[1964,6],[2220,6],[2627,6]]},"954":{"position":[[1054,6]]},"981":{"position":[[5325,6],[5346,6],[5398,6]]}}}],["bucket=<s3",{"_index":703,"t":{"937":{"position":[[1953,10],[2209,10],[2616,10]]}}}],["building.md",{"_index":939,"t":{"1045":{"position":[[8,11]]}}}],["built",{"_index":1903,"t":{"1318":{"position":[[696,5]]}}}],["builtin",{"_index":316,"t":{"854":{"position":[[393,7],[423,7]]}}}],["bundl",{"_index":344,"t":{"863":{"position":[[156,7],[247,7]]},"914":{"position":[[70,7]]},"920":{"position":[[3231,7],[3265,7]]},"977":{"position":[[113,7]]},"981":{"position":[[8551,7],[8585,7]]},"1486":{"position":[[214,6]]}}}],["burst",{"_index":467,"t":{"884":{"position":[[147,5],[261,5]]}}}],["burst=10",{"_index":472,"t":{"884":{"position":[[303,14]]}}}],["burst=<limit",{"_index":470,"t":{"884":{"position":[[248,12]]}}}],["busi",{"_index":1832,"t":{"1298":{"position":[[262,8]]}}}],["bzdg5",{"_index":2133,"t":{"1423":{"position":[[706,5]]},"1425":{"position":[[654,5]]},"1427":{"position":[[523,5]]},"1429":{"position":[[472,5]]},"1431":{"position":[[485,5]]},"1433":{"position":[[598,5]]},"1435":{"position":[[559,5]]},"1439":{"position":[[632,5]]},"1441":{"position":[[613,5]]},"1443":{"position":[[509,5]]},"1445":{"position":[[625,5]]},"1447":{"position":[[490,5]]},"1449":{"position":[[405,5]]},"1459":{"position":[[580,5]]},"1465":{"position":[[622,5],[2798,5]]},"1467":{"position":[[538,5]]},"1469":{"position":[[544,5]]},"1480":{"position":[[431,5]]},"1482":{"position":[[499,5]]},"1484":{"position":[[584,5]]},"1486":{"position":[[481,5]]},"1493":{"position":[[390,5]]},"1495":{"position":[[464,5]]},"1542":{"position":[[889,5]]},"1544":{"position":[[903,5]]},"1546":{"position":[[1018,5]]},"1548":{"position":[[1918,5],[2614,5]]},"1560":{"position":[[2109,5],[2805,5]]}}}],["c",{"_index":209,"t":{"840":{"position":[[300,1]]},"920":{"position":[[132,1]]},"981":{"position":[[143,1]]},"1093":{"position":[[629,1]]},"1228":{"position":[[279,1],[518,1]]},"1392":{"position":[[676,1]]},"1398":{"position":[[191,1],[267,1]]},"1400":{"position":[[168,1],[248,1]]},"1402":{"position":[[174,1],[254,1]]},"1404":{"position":[[176,1],[257,1]]},"1406":{"position":[[179,1]]},"1408":{"position":[[230,1]]},"1410":{"position":[[184,1]]},"1412":{"position":[[184,1]]},"1417":{"position":[[448,1]]},"1419":{"position":[[429,1]]},"1437":{"position":[[442,1]]},"1463":{"position":[[806,1]]},"1490":{"position":[[414,1]]},"1498":{"position":[[700,1]]},"1500":{"position":[[589,1]]},"1502":{"position":[[614,1]]},"1504":{"position":[[766,1]]},"1506":{"position":[[592,1]]},"1508":{"position":[[624,1]]},"1510":{"position":[[723,1]]},"1525":{"position":[[201,1]]},"1527":{"position":[[210,1],[284,1]]},"1529":{"position":[[203,1]]},"1531":{"position":[[209,1]]},"1533":{"position":[[142,1]]},"1535":{"position":[[142,1]]},"1542":{"position":[[486,1]]},"1544":{"position":[[472,1]]},"1546":{"position":[[528,1]]}}}],["c3675b87f96c",{"_index":189,"t":{"838":{"position":[[2314,12]]}}}],["c4d3d16fe508",{"_index":179,"t":{"838":{"position":[[2154,12]]}}}],["c6id.xlarg",{"_index":1478,"t":{"1254":{"position":[[52,11]]}}}],["ca",{"_index":42,"t":{"830":{"position":[[27,2],[36,2],[68,2],[80,2],[116,2]]},"927":{"position":[[16,2],[47,2],[114,2],[123,2],[153,2],[250,7],[356,2],[392,2],[623,2],[636,2],[643,2]]},"929":{"position":[[37,2],[54,2],[99,2],[163,2],[173,2],[192,2],[216,2],[576,2],[587,2],[629,2],[638,2],[689,2],[698,2],[717,2],[764,2],[773,2],[940,2],[949,2],[999,2],[1008,2],[1032,2],[1189,2],[1278,2],[1337,2],[1346,2],[1374,2]]},"931":{"position":[[7,2],[40,2],[185,8],[194,2],[215,2],[233,19],[276,2],[365,3],[399,2],[548,2],[557,2],[607,3],[674,4],[724,4],[892,2],[981,2],[1028,2],[1069,2],[1105,2],[1202,8]]},"933":{"position":[[15,2],[48,2],[197,2],[250,2],[261,2],[275,2],[325,3],[332,2],[346,2],[368,2],[383,2],[398,2],[409,8],[418,2],[478,2],[502,2],[513,2],[536,2],[570,2],[583,2],[708,2],[793,2],[838,2],[851,2]]},"935":{"position":[[169,2],[178,2],[705,2],[756,2]]},"937":{"position":[[1661,2],[1671,2]]},"954":{"position":[[166,2],[839,2],[859,2]]},"981":{"position":[[5049,2],[5073,2]]},"987":{"position":[[55,2],[119,2],[138,2],[172,2],[215,2],[394,2],[407,2],[497,2]]},"989":{"position":[[75,2]]},"993":{"position":[[298,2],[367,2],[436,2],[449,2],[465,2]]},"998":{"position":[[568,2]]},"1006":{"position":[[321,53],[395,5]]},"1059":{"position":[[883,2]]},"1154":{"position":[[173,2]]},"1156":{"position":[[404,2],[663,2]]},"1288":{"position":[[412,2],[1328,2],[2635,2],[3201,2]]},"1392":{"position":[[1523,2],[2006,2]]},"1423":{"position":[[1081,2],[2133,2]]},"1425":{"position":[[1029,2],[2081,2]]},"1427":{"position":[[898,2],[1950,2]]},"1429":{"position":[[847,2],[1899,2]]},"1431":{"position":[[860,2],[1912,2]]},"1433":{"position":[[973,2],[2025,2]]},"1435":{"position":[[934,2],[1986,2]]},"1439":{"position":[[1007,2],[2059,2]]},"1441":{"position":[[988,2],[2040,2]]},"1443":{"position":[[884,2],[1936,2]]},"1445":{"position":[[1000,2],[2052,2]]},"1447":{"position":[[865,2],[1917,2]]},"1449":{"position":[[780,2],[1832,2]]},"1459":{"position":[[955,2],[2007,2]]},"1463":{"position":[[1653,2],[2136,2]]},"1465":{"position":[[997,2],[2049,2]]},"1467":{"position":[[287,2],[311,2],[423,2],[459,2],[913,2],[1965,2]]},"1469":{"position":[[919,2],[1971,2]]},"1480":{"position":[[1785,2]]},"1482":{"position":[[1853,2]]},"1484":{"position":[[1938,2]]},"1486":{"position":[[177,2],[235,2],[368,2],[402,2],[1835,2]]},"1498":{"position":[[1547,2],[2030,2]]},"1500":{"position":[[1436,2],[1919,2]]},"1502":{"position":[[1461,2],[1944,2]]},"1504":{"position":[[1613,2],[2096,2]]},"1506":{"position":[[1439,2],[1922,2]]},"1508":{"position":[[1471,2],[1954,2]]},"1510":{"position":[[280,2],[1570,2],[2053,2],[2143,2],[2189,2],[2205,2],[2273,2],[2341,2]]},"1533":{"position":[[99,2]]},"1535":{"position":[[92,2]]},"1542":{"position":[[1264,2],[2316,2]]},"1544":{"position":[[1278,2],[2330,2]]},"1546":{"position":[[142,2],[357,2],[381,2],[728,2],[773,2],[868,2],[913,2],[1393,2],[2445,2]]},"1548":{"position":[[911,2],[2134,2]]},"1560":{"position":[[1102,2],[2325,2]]}}}],["ca.crt",{"_index":213,"t":{"840":{"position":[[449,6]]},"929":{"position":[[314,6],[342,6],[378,6],[450,6],[486,6]]},"1288":{"position":[[459,6],[603,6],[900,6],[1383,6],[2441,6],[2682,6],[3243,6]]},"1423":{"position":[[1128,6],[1359,6],[1649,6],[2188,6]]},"1425":{"position":[[1076,6],[1307,6],[1597,6],[2136,6]]},"1427":{"position":[[945,6],[1176,6],[1466,6],[2005,6]]},"1429":{"position":[[894,6],[1125,6],[1415,6],[1954,6]]},"1431":{"position":[[907,6],[1138,6],[1428,6],[1967,6]]},"1433":{"position":[[1020,6],[1251,6],[1541,6],[2080,6]]},"1435":{"position":[[981,6],[1212,6],[1502,6],[2041,6]]},"1439":{"position":[[1054,6],[1285,6],[1575,6],[2114,6]]},"1441":{"position":[[1035,6],[1266,6],[1556,6],[2095,6]]},"1443":{"position":[[931,6],[1162,6],[1452,6],[1991,6]]},"1445":{"position":[[1047,6],[1278,6],[1568,6],[2107,6]]},"1447":{"position":[[912,6],[1143,6],[1433,6],[1972,6]]},"1449":{"position":[[827,6],[1058,6],[1348,6],[1887,6]]},"1459":{"position":[[1002,6],[1233,6],[1523,6],[2062,6]]},"1465":{"position":[[1044,6],[1275,6],[1565,6],[2104,6]]},"1467":{"position":[[960,6],[1191,6],[1481,6],[2020,6]]},"1469":{"position":[[966,6],[1197,6],[1487,6],[2026,6]]},"1480":{"position":[[925,6],[1109,6],[1287,6],[1465,6],[1832,6]]},"1482":{"position":[[993,6],[1177,6],[1355,6],[1533,6],[1900,6]]},"1484":{"position":[[1078,6],[1262,6],[1440,6],[1618,6],[1985,6]]},"1486":{"position":[[975,6],[1159,6],[1337,6],[1515,6],[1882,6]]},"1510":{"position":[[2258,6],[2324,6]]},"1533":{"position":[[186,6]]},"1535":{"position":[[189,6]]},"1542":{"position":[[1311,6],[1542,6],[1832,6],[2371,6]]},"1544":{"position":[[1325,6],[1556,6],[1846,6],[2385,6]]},"1546":{"position":[[828,8],[968,6],[1440,6],[1671,6],[1961,6],[2500,6]]},"1548":{"position":[[953,6],[2176,6]]},"1560":{"position":[[1144,6],[2367,6]]}}}],["ca.key",{"_index":630,"t":{"929":{"position":[[328,6],[356,6],[400,6],[467,6],[505,6],[749,6],[833,6],[1142,6]]},"1288":{"position":[[2514,6]]},"1480":{"position":[[1020,6],[1197,6],[1376,6],[1553,6]]},"1482":{"position":[[1088,6],[1265,6],[1444,6],[1621,6]]},"1484":{"position":[[1173,6],[1350,6],[1529,6],[1706,6]]},"1486":{"position":[[1070,6],[1247,6],[1426,6],[1603,6]]}}}],["ca.pem",{"_index":637,"t":{"929":{"position":[[737,6],[793,6],[813,6],[1070,6],[1105,6]]}}}],["ca_fil",{"_index":1234,"t":{"1154":{"position":[[146,7]]},"1156":{"position":[[381,8],[640,8]]}}}],["cacert",{"_index":851,"t":{"987":{"position":[[382,8]]}}}],["cacert=/var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":212,"t":{"840":{"position":[[398,50]]}}}],["cafil",{"_index":743,"t":{"954":{"position":[[114,6]]},"981":{"position":[[3902,6]]},"1006":{"position":[[289,6]]},"1469":{"position":[[433,7],[466,7]]}}}],["cafile=/var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":1704,"t":{"1288":{"position":[[552,50]]},"1423":{"position":[[1308,50]]},"1425":{"position":[[1256,50]]},"1427":{"position":[[1125,50]]},"1429":{"position":[[1074,50]]},"1431":{"position":[[1087,50]]},"1433":{"position":[[1200,50]]},"1435":{"position":[[1161,50]]},"1439":{"position":[[1234,50]]},"1441":{"position":[[1215,50]]},"1443":{"position":[[1111,50]]},"1445":{"position":[[1227,50]]},"1447":{"position":[[1092,50]]},"1449":{"position":[[1007,50]]},"1459":{"position":[[1182,50]]},"1465":{"position":[[1224,50]]},"1467":{"position":[[1140,50]]},"1469":{"position":[[1146,50]]},"1542":{"position":[[1491,50]]},"1544":{"position":[[1505,50]]},"1546":{"position":[[1620,50]]}}}],["cafile=<path/to/ca",{"_index":2179,"t":{"1469":{"position":[[307,18]]}}}],["calico",{"_index":1120,"t":{"1119":{"position":[[124,6],[373,6],[392,6],[498,6]]}}}],["calico.conflist",{"_index":1127,"t":{"1119":{"position":[[556,15]]}}}],["call",{"_index":1549,"t":{"1276":{"position":[[279,6]]},"1368":{"position":[[1955,6]]}}}],["canal",{"_index":1119,"t":{"1119":{"position":[[118,5],[141,5],[162,8],[171,5],[276,5]]}}}],["canal.conflist",{"_index":1126,"t":{"1119":{"position":[[333,14]]}}}],["cap_sys_boot",{"_index":1962,"t":{"1348":{"position":[[301,12]]}}}],["capabl",{"_index":1824,"t":{"1296":{"position":[[349,13]]},"1600":{"position":[[154,11]]},"1604":{"position":[[44,12],[169,12],[279,13]]}}}],["care",{"_index":2224,"t":{"1518":{"position":[[173,4]]}}}],["carri",{"_index":1835,"t":{"1300":{"position":[[223,8]]},"1302":{"position":[[222,8]]}}}],["case",{"_index":1193,"t":{"1138":{"position":[[538,4]]},"1312":{"position":[[228,5]]},"1368":{"position":[[1494,4]]},"1392":{"position":[[642,4],[1667,4]]},"1463":{"position":[[772,4],[1797,4]]},"1498":{"position":[[666,4],[1691,4]]},"1500":{"position":[[555,4],[1580,4]]},"1502":{"position":[[580,4],[1605,4]]},"1504":{"position":[[732,4],[1757,4]]},"1506":{"position":[[558,4],[1583,4]]},"1508":{"position":[[590,4],[1615,4]]},"1510":{"position":[[689,4],[1714,4]]}}}],["cat",{"_index":672,"t":{"935":{"position":[[581,3]]},"1027":{"position":[[143,3]]},"1119":{"position":[[311,3],[534,3]]},"1345":{"position":[[458,3]]},"1502":{"position":[[2295,4],[2535,4],[2775,4]]},"1508":{"position":[[2340,4]]}}}],["catalog",{"_index":953,"t":{"1057":{"position":[[133,11]]}}}],["cattl",{"_index":460,"t":{"882":{"position":[[166,6],[278,6]]}}}],["caus",{"_index":1545,"t":{"1276":{"position":[[33,5]]}}}],["cbc",{"_index":723,"t":{"947":{"position":[[257,3],[517,3],[556,3],[1043,3]]},"1322":{"position":[[71,3]]}}}],["ccm",{"_index":1391,"t":{"1232":{"position":[[77,5],[278,3],[343,4],[360,3]]}}}],["ccm.yaml",{"_index":1205,"t":{"1144":{"position":[[316,8]]}}}],["center",{"_index":1503,"t":{"1272":{"position":[[213,6]]},"1278":{"position":[[62,8]]},"1368":{"position":[[796,6]]}}}],["cento",{"_index":409,"t":{"873":{"position":[[46,10]]}}}],["cephf",{"_index":1921,"t":{"1328":{"position":[[171,6]]}}}],["cert",{"_index":801,"t":{"981":{"position":[[1133,4],[5076,4]]},"1156":{"position":[[296,4],[555,4]]},"1288":{"position":[[346,4],[397,5],[1115,4],[1821,4],[2392,4],[4222,4]]},"1392":{"position":[[941,5],[1075,4],[1268,5],[1400,4],[1767,5],[1816,4],[1874,4],[1927,4]]},"1423":{"position":[[1015,4],[1066,5],[1920,4],[2687,4]]},"1425":{"position":[[321,4],[963,4],[1014,5],[1868,4],[2635,4]]},"1427":{"position":[[832,4],[883,5],[1737,4],[2504,4]]},"1429":{"position":[[781,4],[832,5],[1686,4],[2453,4]]},"1431":{"position":[[794,4],[845,5],[1699,4],[2466,4]]},"1433":{"position":[[907,4],[958,5],[1812,4],[2579,4]]},"1435":{"position":[[868,4],[919,5],[1773,4],[2540,4]]},"1439":{"position":[[941,4],[992,5],[1846,4],[2613,4]]},"1441":{"position":[[922,4],[973,5],[1827,4],[2594,4]]},"1443":{"position":[[818,4],[869,5],[1723,4],[2490,4]]},"1445":{"position":[[934,4],[985,5],[1839,4],[2606,4]]},"1447":{"position":[[799,4],[850,5],[1704,4],[2471,4]]},"1449":{"position":[[714,4],[765,5],[1619,4],[2386,4]]},"1459":{"position":[[889,4],[940,5],[1794,4],[2561,4]]},"1463":{"position":[[1071,5],[1205,4],[1398,5],[1530,4],[1897,5],[1946,4],[2004,4],[2057,4]]},"1465":{"position":[[298,4],[501,4],[931,4],[982,5],[1836,4],[2603,4],[3072,4]]},"1467":{"position":[[847,4],[898,5],[1752,4],[2519,4]]},"1469":{"position":[[853,4],[904,5],[1758,4],[2525,4]]},"1480":{"position":[[743,4],[876,4],[1060,4],[1238,4],[1416,4]]},"1482":{"position":[[811,4],[944,4],[1128,4],[1306,4],[1484,4]]},"1484":{"position":[[896,4],[1029,4],[1213,4],[1391,4],[1569,4]]},"1486":{"position":[[793,4],[926,4],[1110,4],[1288,4],[1466,4]]},"1493":{"position":[[664,4]]},"1495":{"position":[[738,4]]},"1498":{"position":[[224,4],[965,5],[1099,4],[1292,5],[1424,4],[1791,5],[1840,4],[1898,4],[1951,4],[2111,5],[2176,4],[2199,4],[2330,4]]},"1500":{"position":[[156,4],[854,5],[988,4],[1181,5],[1313,4],[1680,5],[1729,4],[1787,4],[1840,4],[2010,4],[2043,4],[2098,4],[2120,4],[2145,4]]},"1502":{"position":[[879,5],[1013,4],[1206,5],[1338,4],[1705,5],[1754,4],[1812,4],[1865,4]]},"1504":{"position":[[298,4],[1031,5],[1165,4],[1358,5],[1490,4],[1857,5],[1906,4],[1964,4],[2017,4],[2177,5],[2247,4],[2275,4],[2421,4]]},"1506":{"position":[[161,4],[857,5],[991,4],[1184,5],[1316,4],[1683,5],[1732,4],[1790,4],[1843,4],[2013,4],[2046,4],[2101,4],[2123,4],[2148,4]]},"1508":{"position":[[889,5],[1023,4],[1216,5],[1348,4],[1715,5],[1764,4],[1822,4],[1875,4]]},"1510":{"position":[[988,5],[1122,4],[1315,5],[1447,4],[1814,5],[1863,4],[1921,4],[1974,4]]},"1542":{"position":[[1198,4],[1249,5],[2103,4],[2870,4]]},"1544":{"position":[[1212,4],[1263,5],[2117,4],[2884,4]]},"1546":{"position":[[1327,4],[1378,5],[2232,4],[2999,4]]},"1548":{"position":[[1747,4],[2970,4]]},"1560":{"position":[[451,4],[765,4],[1938,4],[3161,4]]}}}],["cert=/var/lib/rancher/k3s/server/tls/etcd/client.crt",{"_index":214,"t":{"840":{"position":[[460,52]]}}}],["cert_fil",{"_index":1232,"t":{"1154":{"position":[[83,9]]},"1156":{"position":[[271,10],[530,10]]}}}],["certain",{"_index":1517,"t":{"1272":{"position":[[621,7]]}}}],["certfil",{"_index":745,"t":{"954":{"position":[[184,8]]},"981":{"position":[[4034,8]]},"1006":{"position":[[430,8],[654,8]]},"1392":{"position":[[1724,8]]},"1463":{"position":[[1854,8],[2228,9],[2304,8]]},"1498":{"position":[[1748,8]]},"1500":{"position":[[1637,8]]},"1502":{"position":[[1662,8]]},"1504":{"position":[[1814,8]]},"1506":{"position":[[1640,8]]},"1508":{"position":[[1672,8]]},"1510":{"position":[[1771,8]]}}}],["certfile=/var/lib/rancher/k3s/server/tls/etcd/client.crt",{"_index":1706,"t":{"1288":{"position":[[626,56]]},"1423":{"position":[[1373,56]]},"1425":{"position":[[1321,56]]},"1427":{"position":[[1190,56]]},"1429":{"position":[[1139,56]]},"1431":{"position":[[1152,56]]},"1433":{"position":[[1265,56]]},"1435":{"position":[[1226,56]]},"1439":{"position":[[1299,56]]},"1441":{"position":[[1280,56]]},"1443":{"position":[[1176,56]]},"1445":{"position":[[1292,56]]},"1447":{"position":[[1157,56]]},"1449":{"position":[[1072,56]]},"1459":{"position":[[1247,56]]},"1465":{"position":[[1289,56]]},"1467":{"position":[[1205,56]]},"1469":{"position":[[1211,56]]},"1542":{"position":[[1556,56]]},"1544":{"position":[[1570,56]]},"1546":{"position":[[1685,56]]}}}],["certfile=<path/to/cli",{"_index":2171,"t":{"1463":{"position":[[306,24]]}}}],["certif",{"_index":43,"t":{"830":{"position":[[97,11]]},"832":{"position":[[89,11]]},"896":{"position":[[832,11],[869,11]]},"925":{"position":[[23,11],[86,11],[161,11]]},"927":{"position":[[318,12],[373,11],[604,11]]},"931":{"position":[[21,11],[257,11],[1050,11]]},"933":{"position":[[29,11],[774,11]]},"935":{"position":[[150,11],[686,11]]},"981":{"position":[[3924,11],[4058,13],[5154,11]]},"993":{"position":[[484,11]]},"1288":{"position":[[839,11]]},"1423":{"position":[[272,11],[358,11],[527,11],[585,12],[1588,11]]},"1425":{"position":[[270,11],[339,11],[371,11],[510,11],[561,11],[1536,11]]},"1427":{"position":[[1405,11]]},"1429":{"position":[[1354,11]]},"1431":{"position":[[1367,11]]},"1433":{"position":[[1480,11]]},"1435":{"position":[[1441,11]]},"1439":{"position":[[1514,11]]},"1441":{"position":[[1495,11]]},"1443":{"position":[[1391,11]]},"1445":{"position":[[1507,11]]},"1447":{"position":[[1372,11]]},"1449":{"position":[[1287,11]]},"1459":{"position":[[1462,11]]},"1463":{"position":[[262,11],[331,11]]},"1465":{"position":[[247,11],[321,11],[1504,11]]},"1467":{"position":[[250,11],[1420,11]]},"1469":{"position":[[262,11],[1426,11]]},"1486":{"position":[[202,11]]},"1510":{"position":[[93,11]]},"1513":{"position":[[137,13]]},"1542":{"position":[[1771,11]]},"1544":{"position":[[1785,11]]},"1546":{"position":[[1900,11]]},"1560":{"position":[[114,11],[474,11]]}}}],["certificate=/var/lib/rancher/k3s/server/tls/cli",{"_index":1713,"t":{"1288":{"position":[[924,50]]},"1423":{"position":[[1673,50]]},"1425":{"position":[[1621,50]]},"1427":{"position":[[1490,50]]},"1429":{"position":[[1439,50]]},"1431":{"position":[[1452,50]]},"1433":{"position":[[1565,50]]},"1435":{"position":[[1526,50]]},"1439":{"position":[[1599,50]]},"1441":{"position":[[1580,50]]},"1443":{"position":[[1476,50]]},"1445":{"position":[[1592,50]]},"1447":{"position":[[1457,50]]},"1449":{"position":[[1372,50]]},"1459":{"position":[[1547,50]]},"1465":{"position":[[1589,50]]},"1467":{"position":[[1505,50]]},"1469":{"position":[[1511,50]]},"1542":{"position":[[1856,50]]},"1544":{"position":[[1870,50]]},"1546":{"position":[[1985,50]]}}}],["certificate=<path/to/cli",{"_index":2125,"t":{"1423":{"position":[[330,27]]}}}],["certificates=fals",{"_index":2287,"t":{"1562":{"position":[[332,18]]}}}],["certs.sh",{"_index":628,"t":{"929":{"position":[[102,8],[1281,8]]},"931":{"position":[[402,8],[984,8]]},"933":{"position":[[481,8],[711,8]]}}}],["cgroup",{"_index":26,"t":{"823":{"position":[[385,6]]},"850":{"position":[[281,7],[293,6],[323,6],[362,6],[403,6]]},"852":{"position":[[3,6],[97,7],[593,6]]},"869":{"position":[[82,7],[104,7],[197,7]]},"1252":{"position":[[113,6]]},"1288":{"position":[[3169,6]]},"1548":{"position":[[880,6],[2103,6]]},"1560":{"position":[[1071,6],[2294,6]]}}}],["cgroup_enable=memori",{"_index":376,"t":{"869":{"position":[[150,20],[360,20]]}}}],["cgroup_memory=1",{"_index":375,"t":{"869":{"position":[[134,15],[344,15]]}}}],["cgroups=/systemd/system.slic",{"_index":1778,"t":{"1288":{"position":[[3927,29],[4156,29]]}}}],["cgtop",{"_index":1470,"t":{"1252":{"position":[[94,5]]}}}],["chain",{"_index":1888,"t":{"1316":{"position":[[37,6]]},"1554":{"position":[[294,6]]}}}],["chains=tru",{"_index":1332,"t":{"1210":{"position":[[906,12]]},"1286":{"position":[[765,12],[1388,12]]}}}],["chang",{"_index":1856,"t":{"1304":{"position":[[615,6]]},"1316":{"position":[[126,7],[253,7],[440,7]]}}}],["channel",{"_index":1424,"t":{"1244":{"position":[[611,7],[1348,7],[1445,11]]},"1352":{"position":[[1232,7],[1300,19],[1320,7],[1420,8]]},"1358":{"position":[[34,15],[50,9],[60,7],[194,10],[216,7],[253,7],[274,7],[292,7]]},"1360":{"position":[[325,9],[355,8]]}}}],["channelserv",{"_index":1979,"t":{"1358":{"position":[[314,13]]}}}],["charact",{"_index":1195,"t":{"1138":{"position":[[556,11],[624,9]]}}}],["charlie=delta:noschedul",{"_index":1075,"t":{"1095":{"position":[[465,24],[613,24]]}}}],["charon",{"_index":1116,"t":{"1115":{"position":[[1167,6]]},"1117":{"position":[[116,6]]}}}],["chart",{"_index":456,"t":{"882":{"position":[[81,6]]},"1057":{"position":[[30,5],[91,5],[127,5],[305,5],[374,6]]},"1059":{"position":[[72,5],[99,5],[148,5],[410,6],[618,5],[653,5],[664,5],[699,5],[739,5],[782,5],[825,5],[960,5],[1027,5],[1107,5],[1297,5],[1343,5],[1376,5],[1600,6],[1627,5]]},"1146":{"position":[[19,5]]}}}],["charts/ranch",{"_index":462,"t":{"882":{"position":[[216,14],[372,14]]}}}],["check",{"_index":949,"t":{"1055":{"position":[[62,5]]},"1306":{"position":[[426,5]]},"1320":{"position":[[227,6]]},"1392":{"position":[[425,6]]},"1463":{"position":[[555,6]]},"1498":{"position":[[449,6]]},"1500":{"position":[[338,6]]},"1502":{"position":[[363,6]]},"1504":{"position":[[515,6]]},"1506":{"position":[[341,6]]},"1508":{"position":[[373,6]]},"1510":{"position":[[472,6]]},"1569":{"position":[[86,5]]}}}],["check_for_k3s_etcd.sh",{"_index":2035,"t":{"1392":{"position":[[274,21],[2042,23]]},"1463":{"position":[[404,21],[2172,23]]},"1498":{"position":[[298,21],[2066,23]]},"1500":{"position":[[187,21],[1955,23]]},"1502":{"position":[[212,21],[1980,23]]},"1504":{"position":[[364,21],[2132,23]]},"1506":{"position":[[190,21],[1958,23]]},"1508":{"position":[[222,21],[1990,23]]},"1510":{"position":[[321,21],[2089,23]]}}}],["chmod",{"_index":1053,"t":{"1091":{"position":[[237,5]]},"1372":{"position":[[142,5]]},"1376":{"position":[[142,5]]},"1380":{"position":[[142,5]]},"1384":{"position":[[142,5]]},"1388":{"position":[[142,5]]},"1392":{"position":[[236,5]]},"1396":{"position":[[142,5]]},"1400":{"position":[[132,5]]},"1404":{"position":[[132,5]]},"1410":{"position":[[132,5]]},"1412":{"position":[[132,5]]},"1521":{"position":[[140,5]]},"1525":{"position":[[130,5]]},"1529":{"position":[[130,5]]},"1533":{"position":[[108,5]]},"1537":{"position":[[124,5]]}}}],["choos",{"_index":1883,"t":{"1312":{"position":[[467,6]]},"1316":{"position":[[163,6]]},"1473":{"position":[[115,6]]}}}],["chown",{"_index":2026,"t":{"1374":{"position":[[142,5]]},"1378":{"position":[[142,5]]},"1382":{"position":[[142,5]]},"1386":{"position":[[142,5]]},"1390":{"position":[[142,5]]},"1394":{"position":[[246,5]]},"1398":{"position":[[132,5]]},"1402":{"position":[[132,5]]},"1406":{"position":[[132,5]]},"1408":{"position":[[132,5]]},"1523":{"position":[[140,5]]},"1527":{"position":[[130,5]]},"1531":{"position":[[130,5]]},"1535":{"position":[[101,5]]},"1539":{"position":[[124,5]]}}}],["chronolog",{"_index":1815,"t":{"1296":{"position":[[124,13]]}}}],["ci",{"_index":8,"t":{"821":{"position":[[93,2]]},"1210":{"position":[[1501,3]]},"1270":{"position":[[64,3],[101,3]]},"1272":{"position":[[242,6],[364,3],[499,3],[629,3],[1078,3]]},"1278":{"position":[[44,3]]},"1280":{"position":[[827,3],[1307,3],[1469,3],[1515,3],[1555,3],[1723,3],[1752,3],[1781,3],[1831,3]]},"1282":{"position":[[0,3]]},"1284":{"position":[[0,3]]},"1288":{"position":[[137,3],[4396,3]]},"1320":{"position":[[88,3],[133,3]]},"1368":{"position":[[304,3],[514,3],[699,3],[825,6],[882,3],[1056,3],[1444,3]]},"1423":{"position":[[687,3]]},"1425":{"position":[[635,3]]},"1427":{"position":[[504,3]]},"1429":{"position":[[453,3]]},"1431":{"position":[[466,3]]},"1433":{"position":[[579,3]]},"1435":{"position":[[540,3]]},"1439":{"position":[[613,3]]},"1441":{"position":[[594,3]]},"1443":{"position":[[490,3]]},"1445":{"position":[[606,3]]},"1447":{"position":[[471,3]]},"1449":{"position":[[386,3]]},"1459":{"position":[[561,3]]},"1465":{"position":[[603,3],[2779,3]]},"1467":{"position":[[519,3]]},"1469":{"position":[[525,3]]},"1480":{"position":[[412,3]]},"1482":{"position":[[480,3]]},"1484":{"position":[[565,3]]},"1486":{"position":[[462,3]]},"1493":{"position":[[371,3]]},"1495":{"position":[[445,3]]},"1542":{"position":[[870,3]]},"1544":{"position":[[884,3]]},"1546":{"position":[[999,3]]},"1548":{"position":[[676,3],[1372,3],[1899,3],[2595,3]]},"1560":{"position":[[867,3],[1563,3],[2090,3],[2786,3]]},"1630":{"position":[[166,3]]}}}],["ci/cd",{"_index":883,"t":{"1004":{"position":[[182,5]]}}}],["cidr",{"_index":311,"t":{"854":{"position":[[276,5]]},"865":{"position":[[352,19]]},"867":{"position":[[217,19]]},"951":{"position":[[115,4],[363,4]]},"969":{"position":[[19,4],[70,4],[85,4],[134,4],[283,4],[985,4],[1083,4]]},"981":{"position":[[1271,4],[1313,5],[1372,4],[1414,5],[1693,4]]},"1027":{"position":[[659,5],[675,4]]},"1033":{"position":[[1628,5],[1644,4]]},"1123":{"position":[[391,4],[406,18],[545,4],[560,4],[590,4],[609,4],[636,4],[700,4]]},"1125":{"position":[[161,4],[178,4]]},"1131":{"position":[[248,9],[258,6]]},"1182":{"position":[[10,4],[56,4]]},"1236":{"position":[[82,4],[194,6],[223,4],[261,12],[351,4],[360,4],[474,4],[686,4],[701,15],[744,6],[785,4],[825,4]]}}}],["cidr=10.200.0.0/16",{"_index":1059,"t":{"1091":{"position":[[656,18]]}}}],["cidr=10.42.0.0/16",{"_index":1742,"t":{"1288":{"position":[[2356,17]]},"1480":{"position":[[818,17]]},"1482":{"position":[[886,17]]},"1484":{"position":[[971,17]]},"1486":{"position":[[868,17]]}}}],["cidr=10.42.0.0/16,2001:cafe:42:0::/56",{"_index":1148,"t":{"1123":{"position":[[435,37]]}}}],["cidr=10.43.0.0/16,2001:cafe:42:1::/112",{"_index":1149,"t":{"1123":{"position":[[483,38]]}}}],["cidr=2001:cafe:42:0::/56",{"_index":1157,"t":{"1125":{"position":[[242,24]]}}}],["cidr=2001:cafe:42:1::/112",{"_index":1158,"t":{"1125":{"position":[[277,25]]}}}],["cidrs=tru",{"_index":1740,"t":{"1288":{"position":[[2302,10]]},"1480":{"position":[[540,10]]},"1482":{"position":[[608,10]]},"1484":{"position":[[693,10]]},"1486":{"position":[[590,10]]}}}],["cilium",{"_index":1121,"t":{"1119":{"position":[[131,6],[803,6],[850,6],[902,6]]}}}],["cilium_host",{"_index":1132,"t":{"1119":{"position":[[728,11]]}}}],["cilium_host、cilium_net",{"_index":1130,"t":{"1119":{"position":[[641,22]]}}}],["cilium_net",{"_index":1133,"t":{"1119":{"position":[[755,10]]}}}],["cilium_vxlan",{"_index":1131,"t":{"1119":{"position":[[666,12],[781,12]]}}}],["cipher",{"_index":1737,"t":{"1288":{"position":[[1996,6]]},"1475":{"position":[[176,6],[1026,6]]},"1566":{"position":[[579,6],[653,6]]}}}],["claimnam",{"_index":1943,"t":{"1334":{"position":[[283,10]]},"1340":{"position":[[283,10]]}}}],["clarifi",{"_index":1794,"t":{"1290":{"position":[[118,10]]}}}],["class",{"_index":838,"t":{"981":{"position":[[5691,5]]}}}],["cli",{"_index":501,"t":{"896":{"position":[[384,9],[491,7]]},"898":{"position":[[80,3]]},"941":{"position":[[31,3]]},"949":{"position":[[95,3]]},"991":{"position":[[70,3]]},"995":{"position":[[59,3]]},"998":{"position":[[75,3]]},"1006":{"position":[[128,3],[143,3]]},"1027":{"position":[[79,3]]},"1093":{"position":[[32,3],[265,3],[418,8],[448,3],[512,3],[539,3],[566,10],[606,3]]},"1115":{"position":[[424,3]]},"1117":{"position":[[406,3]]},"1194":{"position":[[6,3],[39,3]]},"1196":{"position":[[35,3]]},"1345":{"position":[[220,3]]}}}],["client",{"_index":583,"t":{"920":{"position":[[1658,6],[1807,6]]},"929":{"position":[[335,6],[349,6]]},"981":{"position":[[2424,8],[2460,6],[2535,8],[4316,6],[8760,6],[8909,6]]},"1288":{"position":[[405,6],[917,6],[1004,6],[1108,6],[1187,6],[1321,6],[3194,6]]},"1392":{"position":[[860,7],[989,7],[1067,7],[1392,7],[1809,6],[1920,6]]},"1423":{"position":[[265,6],[323,6],[386,6],[578,6],[624,6],[1074,6],[1666,6],[1753,6],[1913,6],[1992,6],[2126,6]]},"1425":{"position":[[1022,6],[1614,6],[1701,6],[1861,6],[1940,6],[2074,6]]},"1427":{"position":[[891,6],[1483,6],[1570,6],[1730,6],[1809,6],[1943,6]]},"1429":{"position":[[840,6],[1432,6],[1519,6],[1679,6],[1758,6],[1892,6]]},"1431":{"position":[[853,6],[1445,6],[1532,6],[1692,6],[1771,6],[1905,6]]},"1433":{"position":[[966,6],[1558,6],[1645,6],[1805,6],[1884,6],[2018,6]]},"1435":{"position":[[927,6],[1519,6],[1606,6],[1766,6],[1845,6],[1979,6]]},"1439":{"position":[[1000,6],[1592,6],[1679,6],[1839,6],[1918,6],[2052,6]]},"1441":{"position":[[981,6],[1573,6],[1660,6],[1820,6],[1899,6],[2033,6]]},"1443":{"position":[[877,6],[1469,6],[1556,6],[1716,6],[1795,6],[1929,6]]},"1445":{"position":[[993,6],[1585,6],[1672,6],[1832,6],[1911,6],[2045,6]]},"1447":{"position":[[858,6],[1450,6],[1537,6],[1697,6],[1776,6],[1910,6]]},"1449":{"position":[[773,6],[1365,6],[1452,6],[1612,6],[1691,6],[1825,6]]},"1459":{"position":[[948,6],[1540,6],[1627,6],[1787,6],[1866,6],[2000,6]]},"1463":{"position":[[990,7],[1119,7],[1197,7],[1522,7],[1939,6],[2050,6]]},"1465":{"position":[[990,6],[1582,6],[1669,6],[1829,6],[1908,6],[2042,6]]},"1467":{"position":[[243,6],[280,6],[415,7],[452,6],[906,6],[1498,6],[1585,6],[1745,6],[1824,6],[1958,6]]},"1469":{"position":[[912,6],[1504,6],[1591,6],[1751,6],[1830,6],[1964,6]]},"1480":{"position":[[869,6],[965,6],[1053,6],[1142,6]]},"1482":{"position":[[937,6],[1033,6],[1121,6],[1210,6]]},"1484":{"position":[[1022,6],[1118,6],[1206,6],[1295,6]]},"1486":{"position":[[919,6],[1015,6],[1103,6],[1192,6]]},"1498":{"position":[[884,7],[1013,7],[1091,7],[1416,7],[1833,6],[1944,6]]},"1500":{"position":[[149,6],[773,7],[902,7],[980,7],[1305,7],[1722,6],[1833,6],[2003,6],[2035,7],[2091,6],[2113,6],[2138,6]]},"1502":{"position":[[798,7],[927,7],[1005,7],[1330,7],[1747,6],[1858,6]]},"1504":{"position":[[271,6],[950,7],[1079,7],[1157,7],[1482,7],[1899,6],[2010,6]]},"1506":{"position":[[154,6],[776,7],[905,7],[983,7],[1308,7],[1725,6],[1836,6],[2006,6],[2038,7],[2094,6],[2116,6],[2141,6]]},"1508":{"position":[[808,7],[937,7],[1015,7],[1340,7],[1757,6],[1868,6]]},"1510":{"position":[[907,7],[1036,7],[1114,7],[1439,7],[1856,6],[1967,6]]},"1513":{"position":[[130,6]]},"1533":{"position":[[92,6]]},"1535":{"position":[[85,6]]},"1542":{"position":[[1257,6],[1849,6],[1936,6],[2096,6],[2175,6],[2309,6]]},"1544":{"position":[[1271,6],[1863,6],[1950,6],[2110,6],[2189,6],[2323,6]]},"1546":{"position":[[135,6],[350,6],[720,7],[766,6],[861,6],[906,6],[1386,6],[1978,6],[2065,6],[2225,6],[2304,6],[2438,6]]},"1548":{"position":[[904,6],[2127,6]]},"1560":{"position":[[1095,6],[2318,6]]}}}],["client.crt",{"_index":2208,"t":{"1498":{"position":[[2254,10]]},"1504":{"position":[[2335,10]]}}}],["client.key",{"_index":2209,"t":{"1498":{"position":[[2319,10]]},"1504":{"position":[[2405,10]]}}}],["cli。k3",{"_index":196,"t":{"840":{"position":[[27,7]]}}}],["cli，containerd",{"_index":505,"t":{"896":{"position":[[577,14]]}}}],["cloud",{"_index":361,"t":{"865":{"position":[[386,5],[428,5],[451,5]]},"896":{"position":[[118,5]]},"925":{"position":[[292,5]]},"951":{"position":[[161,5]]},"973":{"position":[[93,5]]},"975":{"position":[[215,5],[255,5]]},"981":{"position":[[3663,5],[3731,5],[5949,5],[5999,5]]},"1059":{"position":[[966,11]]},"1232":{"position":[[52,5],[301,5]]},"1288":{"position":[[3260,5]]},"1328":{"position":[[313,5]]},"1480":{"position":[[1572,5],[1624,5]]},"1482":{"position":[[1640,5],[1692,5]]},"1484":{"position":[[1725,5],[1777,5]]},"1486":{"position":[[1622,5],[1674,5]]},"1548":{"position":[[962,5],[2185,5]]},"1560":{"position":[[1153,5],[2376,5]]},"1620":{"position":[[82,5]]}}}],["cluster",{"_index":541,"t":{"916":{"position":[[56,7]]},"920":{"position":[[606,9],[680,9],[770,9]]},"937":{"position":[[397,7],[427,7],[470,7],[488,7],[655,7],[685,7],[728,7],[746,7],[1326,7],[1398,7],[2107,7],[2124,7],[2154,7]]},"951":{"position":[[107,7],[122,7],[136,7]]},"956":{"position":[[111,7],[315,7],[365,7]]},"969":{"position":[[11,7],[214,7],[294,7]]},"979":{"position":[[91,7]]},"981":{"position":[[833,7],[967,7],[1263,7],[1599,7],[1635,7],[1728,7],[1762,7],[2225,10],[2623,9],[2683,7],[2723,9],[2797,9],[2848,8],[2917,9],[3009,9],[3056,7],[3077,7],[3090,9],[3117,7],[3167,7],[3181,9],[3240,7],[3271,7]]},"987":{"position":[[111,7]]},"1027":{"position":[[620,7],[634,7],[651,7]]},"1033":{"position":[[451,7],[588,7],[744,7],[1589,7],[1603,7],[1620,7]]},"1035":{"position":[[40,7],[161,7],[261,7]]},"1091":{"position":[[648,7]]},"1093":{"position":[[240,7],[405,7]]},"1103":{"position":[[363,7]]},"1121":{"position":[[763,7]]},"1123":{"position":[[383,7],[427,7],[537,7],[582,7]]},"1125":{"position":[[153,7],[234,7]]},"1182":{"position":[[48,7]]},"1186":{"position":[[5,7]]},"1188":{"position":[[105,7]]},"1194":{"position":[[108,7]]},"1236":{"position":[[186,7],[215,7],[343,7],[777,7]]},"1272":{"position":[[774,8]]},"1282":{"position":[[1251,8]]},"1288":{"position":[[1761,7],[2348,7],[2376,7],[2450,7],[3286,7],[3311,7]]},"1294":{"position":[[104,7]]},"1304":{"position":[[311,7]]},"1318":{"position":[[134,7]]},"1320":{"position":[[42,7],[270,8]]},"1368":{"position":[[268,7],[935,7],[1196,7],[1551,7],[1705,7]]},"1392":{"position":[[580,7]]},"1423":{"position":[[2589,7]]},"1425":{"position":[[2537,7]]},"1427":{"position":[[2406,7]]},"1429":{"position":[[2355,7]]},"1431":{"position":[[2368,7]]},"1433":{"position":[[2481,7]]},"1435":{"position":[[2442,7]]},"1439":{"position":[[2515,7]]},"1441":{"position":[[2496,7]]},"1443":{"position":[[2392,7]]},"1445":{"position":[[2508,7]]},"1447":{"position":[[2373,7]]},"1449":{"position":[[2288,7]]},"1459":{"position":[[2463,7]]},"1463":{"position":[[710,7]]},"1465":{"position":[[2505,7]]},"1467":{"position":[[2421,7]]},"1469":{"position":[[2427,7]]},"1480":{"position":[[810,7],[838,7],[934,7],[1029,7],[1118,7],[1206,7],[1296,7],[1385,7],[1474,7],[1948,7]]},"1482":{"position":[[878,7],[906,7],[1002,7],[1097,7],[1186,7],[1274,7],[1364,7],[1453,7],[1542,7],[2016,7]]},"1484":{"position":[[963,7],[991,7],[1087,7],[1182,7],[1271,7],[1359,7],[1449,7],[1538,7],[1627,7],[2101,7]]},"1486":{"position":[[860,7],[888,7],[984,7],[1079,7],[1168,7],[1256,7],[1346,7],[1435,7],[1524,7],[1998,7]]},"1498":{"position":[[604,7]]},"1500":{"position":[[493,7]]},"1502":{"position":[[518,7]]},"1504":{"position":[[127,8],[670,7]]},"1506":{"position":[[496,7]]},"1508":{"position":[[528,7]]},"1510":{"position":[[627,7]]},"1516":{"position":[[63,8]]},"1518":{"position":[[67,7],[164,8]]},"1542":{"position":[[2772,7]]},"1544":{"position":[[2786,7]]},"1546":{"position":[[2901,7]]},"1548":{"position":[[988,7],[1013,7],[2211,7],[2236,7]]},"1560":{"position":[[1179,7],[1204,7],[2402,7],[2427,7]]},"1569":{"position":[[66,7],[293,7]]},"1571":{"position":[[101,8]]},"1575":{"position":[[85,8]]},"1581":{"position":[[80,8]]},"1588":{"position":[[64,7]]},"1590":{"position":[[64,7]]},"1592":{"position":[[64,7]]},"1594":{"position":[[64,7]]},"1596":{"position":[[64,7]]},"1598":{"position":[[68,8]]},"1600":{"position":[[64,7]]},"1602":{"position":[[93,7]]},"1604":{"position":[[89,8]]},"1606":{"position":[[64,7]]},"1608":{"position":[[64,7]]},"1610":{"position":[[64,7]]},"1613":{"position":[[229,8]]}}}],["cluster'",{"_index":2009,"t":{"1368":{"position":[[1480,9]]}}}],["cluster.loc",{"_index":785,"t":{"969":{"position":[[315,15]]},"981":{"position":[[1787,16]]}}}],["clustercidr",{"_index":1402,"t":{"1236":{"position":[[323,11],[377,11],[442,11]]}}}],["clusterip",{"_index":964,"t":{"1059":{"position":[[478,9]]},"1078":{"position":[[286,9]]},"1222":{"position":[[222,9]]}}}],["clusterrol",{"_index":1093,"t":{"1103":{"position":[[345,11]]},"1111":{"position":[[136,11]]},"1280":{"position":[[2075,11],[4050,11],[4255,11],[4478,11],[4782,11],[5084,11],[5407,11],[5717,11]]},"1573":{"position":[[73,12]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:restrict",{"_index":1353,"t":{"1210":{"position":[[2507,52]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:svclb",{"_index":1354,"t":{"1210":{"position":[[2564,47]]}}}],["clusterrole.rbac.authorization.k8s.io/psp:system",{"_index":1355,"t":{"1210":{"position":[[2616,48]]}}}],["clusterrolebind",{"_index":1089,"t":{"1103":{"position":[[248,18]]},"1111":{"position":[[72,18]]},"1280":{"position":[[2093,19],[4673,18],[4957,18]]},"1569":{"position":[[39,19],[267,18],[329,18]]}}}],["clusterrolebinding.rbac.authorization.k8s.io/default:restrict",{"_index":1357,"t":{"1210":{"position":[[2682,63]]}}}],["clusterrolebinding.rbac.authorization.k8s.io/system",{"_index":1358,"t":{"1210":{"position":[[2750,51]]}}}],["cluster：apiserv",{"_index":794,"t":{"969":{"position":[[997,17]]},"1121":{"position":[[780,17]]}}}],["cmd",{"_index":352,"t":{"865":{"position":[[90,3],[146,3],[218,3],[294,3]]}}}],["cmdline.txt",{"_index":378,"t":{"869":{"position":[[210,12]]}}}],["cncf",{"_index":937,"t":{"1039":{"position":[[8,4]]}}}],["cni",{"_index":29,"t":{"823":{"position":[[431,5]]},"846":{"position":[[65,14]]},"886":{"position":[[238,9]]},"910":{"position":[[255,3],[288,3]]},"920":{"position":[[2962,3],[3021,3]]},"981":{"position":[[8024,3],[8083,3]]},"1115":{"position":[[50,14],[65,3]]},"1119":{"position":[[41,7],[49,3],[380,3]]},"1121":{"position":[[709,3],[754,3]]},"1123":{"position":[[765,3],[786,3]]},"1129":{"position":[[108,5]]},"1172":{"position":[[244,6],[489,3]]},"1212":{"position":[[119,16]]},"1280":{"position":[[6443,4]]},"1288":{"position":[[3342,3],[3451,3]]},"1613":{"position":[[33,3]]}}}],["code",{"_index":2311,"t":{"1618":{"position":[[59,4]]}}}],["collect",{"_index":1873,"t":{"1312":{"position":[[96,10],[336,10],[525,11]]}}}],["coloc",{"_index":584,"t":{"920":{"position":[[1720,9]]},"981":{"position":[[8822,9]]}}}],["combin",{"_index":1614,"t":{"1280":{"position":[[2333,9]]}}}],["comma",{"_index":558,"t":{"920":{"position":[[381,5]]},"981":{"position":[[392,5]]}}}],["command",{"_index":121,"t":{"838":{"position":[[897,7]]},"880":{"position":[[405,8]]},"998":{"position":[[145,7],[153,8],[186,9]]},"1272":{"position":[[902,7]]},"1368":{"position":[[1081,8],[1885,8]]},"1372":{"position":[[50,7]]},"1374":{"position":[[50,7]]},"1376":{"position":[[50,7]]},"1378":{"position":[[50,7]]},"1380":{"position":[[50,7]]},"1382":{"position":[[50,7]]},"1384":{"position":[[50,7]]},"1386":{"position":[[50,7]]},"1388":{"position":[[50,7]]},"1390":{"position":[[50,7]]},"1392":{"position":[[123,7],[167,7]]},"1394":{"position":[[133,7],[177,7]]},"1396":{"position":[[50,7]]},"1398":{"position":[[40,7]]},"1400":{"position":[[40,7]]},"1402":{"position":[[40,7]]},"1404":{"position":[[40,7]]},"1406":{"position":[[40,7]]},"1408":{"position":[[40,7]]},"1410":{"position":[[40,7]]},"1412":{"position":[[40,7]]},"1521":{"position":[[50,7]]},"1523":{"position":[[50,7]]},"1525":{"position":[[40,7]]},"1527":{"position":[[40,7]]},"1529":{"position":[[40,7]]},"1531":{"position":[[40,7]]},"1533":{"position":[[44,7]]},"1535":{"position":[[44,7]]},"1537":{"position":[[54,7]]},"1539":{"position":[[54,7]]},"1546":{"position":[[160,7]]},"1548":{"position":[[107,7]]},"1550":{"position":[[144,7]]},"1552":{"position":[[129,7]]},"1554":{"position":[[130,7]]},"1558":{"position":[[128,7]]},"1560":{"position":[[250,7]]},"1562":{"position":[[184,7]]}}}],["comment",{"_index":1689,"t":{"1288":{"position":[[105,9]]}}}],["commun",{"_index":826,"t":{"981":{"position":[[3984,13],[4110,13],[4227,13]]},"1316":{"position":[[465,13]]}}}],["companion",{"_index":1985,"t":{"1368":{"position":[[29,9]]}}}],["complet",{"_index":107,"t":{"838":{"position":[[668,9]]},"896":{"position":[[891,10]]}}}],["compli",{"_index":1513,"t":{"1272":{"position":[[483,6]]},"1278":{"position":[[28,6]]},"1320":{"position":[[72,6]]}}}],["compliant",{"_index":1572,"t":{"1280":{"position":[[397,9],[1346,9]]},"1282":{"position":[[285,9]]}}}],["compon",{"_index":812,"t":{"981":{"position":[[2354,9],[5713,12],[5749,10],[5784,10],[5889,12],[5966,12],[6045,12],[6110,12],[6195,12]]},"1272":{"position":[[1202,10]]},"1280":{"position":[[6595,10]]},"1286":{"position":[[137,11]]},"1288":{"position":[[39,10]]},"1296":{"position":[[263,10]]}}}],["components=1",{"_index":208,"t":{"840":{"position":[[286,12]]}}}],["compress",{"_index":833,"t":{"981":{"position":[[4882,8],[4896,8]]}}}],["compris",{"_index":1811,"t":{"1294":{"position":[[366,9]]}}}],["concern",{"_index":1533,"t":{"1272":{"position":[[1092,8]]}}}],["concurr",{"_index":1971,"t":{"1352":{"position":[[259,12],[607,12],[943,11]]}}}],["condit",{"_index":1808,"t":{"1294":{"position":[[263,10]]}}}],["conf",{"_index":180,"t":{"838":{"position":[[2178,4]]},"910":{"position":[[101,4],[211,4],[259,4]]},"920":{"position":[[2725,4],[2885,4],[2966,4]]},"979":{"position":[[267,4]]},"981":{"position":[[7787,4],[7947,4],[8028,4]]},"1080":{"position":[[846,4]]},"1288":{"position":[[3455,4]]}}}],["conf=/run/systemd/resolve/resolv.conf",{"_index":1784,"t":{"1288":{"position":[[4108,37]]},"1548":{"position":[[1673,37],[2896,37]]},"1560":{"position":[[1864,37],[3087,37]]}}}],["config",{"_index":548,"t":{"920":{"position":[[118,6],[139,8],[1387,6],[1456,6],[2940,6],[3025,6]]},"981":{"position":[[129,6],[150,8],[6712,6],[6781,6],[8002,6],[8087,6]]},"1055":{"position":[[68,6]]},"1093":{"position":[[615,6]]},"1138":{"position":[[297,7]]},"1150":{"position":[[22,7]]},"1154":{"position":[[0,7]]},"1156":{"position":[[133,8],[496,8]]},"1158":{"position":[[132,8]]},"1210":{"position":[[240,6],[418,6]]},"1280":{"position":[[227,6]]},"1286":{"position":[[277,6]]},"1308":{"position":[[38,6]]},"1322":{"position":[[117,6]]},"1423":{"position":[[1153,6]]},"1425":{"position":[[1101,6]]},"1427":{"position":[[970,6]]},"1429":{"position":[[919,6]]},"1431":{"position":[[932,6]]},"1433":{"position":[[309,6],[1045,6]]},"1435":{"position":[[1006,6]]},"1439":{"position":[[1079,6]]},"1441":{"position":[[1060,6]]},"1443":{"position":[[956,6]]},"1445":{"position":[[1072,6]]},"1447":{"position":[[937,6]]},"1449":{"position":[[852,6]]},"1459":{"position":[[1027,6]]},"1465":{"position":[[1069,6]]},"1467":{"position":[[985,6]]},"1469":{"position":[[991,6]]},"1471":{"position":[[256,6],[490,7]]},"1537":{"position":[[73,6]]},"1539":{"position":[[73,6]]},"1542":{"position":[[45,6],[1336,6]]},"1544":{"position":[[45,6],[1350,6]]},"1546":{"position":[[45,6],[1465,6]]},"1548":{"position":[[45,6]]},"1550":{"position":[[45,6]]},"1552":{"position":[[55,6]]},"1554":{"position":[[55,6]]},"1558":{"position":[[45,6]]},"1560":{"position":[[45,6]]},"1562":{"position":[[55,6]]},"1566":{"position":[[45,6]]}}}],["config.json",{"_index":2183,"t":{"1473":{"position":[[214,11]]}}}],["config.nod",{"_index":220,"t":{"842":{"position":[[189,11],[257,11]]}}}],["config.toml",{"_index":217,"t":{"842":{"position":[[78,12]]}}}],["config.toml.tmpl",{"_index":218,"t":{"842":{"position":[[123,16],[157,16]]}}}],["config.yaml",{"_index":657,"t":{"931":{"position":[[1285,11]]},"933":{"position":[[1019,11]]},"1061":{"position":[[351,11]]},"1095":{"position":[[215,11]]},"1097":{"position":[[19,11]]},"1423":{"position":[[1213,11]]},"1425":{"position":[[1161,11]]},"1427":{"position":[[1030,11]]},"1429":{"position":[[979,11]]},"1431":{"position":[[992,11]]},"1433":{"position":[[1105,11]]},"1435":{"position":[[1066,11]]},"1439":{"position":[[1139,11]]},"1441":{"position":[[1120,11]]},"1443":{"position":[[1016,11]]},"1445":{"position":[[1132,11]]},"1447":{"position":[[997,11]]},"1449":{"position":[[912,11]]},"1459":{"position":[[1087,11]]},"1465":{"position":[[1129,11]]},"1467":{"position":[[1045,11]]},"1469":{"position":[[1051,11]]},"1542":{"position":[[1396,11]]},"1544":{"position":[[1410,11]]},"1546":{"position":[[1525,11]]}}}],["config.yaml.d/test1.yaml",{"_index":1069,"t":{"1095":{"position":[[273,24]]}}}],["config.yaml.d/test2.yaml",{"_index":1071,"t":{"1095":{"position":[[361,24]]}}}],["config/systemd/user/k3",{"_index":288,"t":{"852":{"position":[[291,26]]}}}],["config=</path/to/encryptionconfig/fil",{"_index":2181,"t":{"1471":{"position":[[334,39]]}}}],["configfi",{"_index":143,"t":{"838":{"position":[[1302,10]]}}}],["configmap",{"_index":1587,"t":{"1280":{"position":[[1588,11],[2729,11]]},"1350":{"position":[[101,26],[267,9]]},"1518":{"position":[[240,11]]}}}],["configur",{"_index":549,"t":{"920":{"position":[[153,13],[2466,13]]},"981":{"position":[[164,13],[7399,13]]},"1091":{"position":[[744,14],[768,13]]},"1210":{"position":[[1183,14]]},"1272":{"position":[[126,14],[812,9],[924,13]]},"1274":{"position":[[93,14]]},"1278":{"position":[[409,13]]},"1280":{"position":[[509,14],[2347,13]]},"1284":{"position":[[49,11],[651,13],[801,14],[1034,14],[1407,14]]},"1286":{"position":[[4,13],[48,13]]},"1308":{"position":[[339,9]]},"1310":{"position":[[51,11],[317,13],[382,9]]},"1316":{"position":[[305,13],[356,14],[380,11],[426,13]]},"1318":{"position":[[410,10]]},"1320":{"position":[[58,10]]},"1368":{"position":[[952,10],[1672,13]]},"1417":{"position":[[55,9]]},"1433":{"position":[[94,13]]},"1445":{"position":[[66,9]]},"1471":{"position":[[66,9]]},"1473":{"position":[[66,9]]},"1480":{"position":[[1562,9]]},"1482":{"position":[[1630,9]]},"1484":{"position":[[1715,9]]},"1486":{"position":[[1612,9]]},"1498":{"position":[[68,9]]},"1504":{"position":[[68,9]]},"1577":{"position":[[156,13]]}}}],["connect",{"_index":567,"t":{"920":{"position":[[790,7]]},"981":{"position":[[3029,7],[5084,7]]},"1210":{"position":[[856,10]]},"1286":{"position":[[715,10],[1338,10]]},"1304":{"position":[[201,10],[292,11]]},"1423":{"position":[[81,10]]},"1425":{"position":[[80,10]]},"1463":{"position":[[81,10]]},"1465":{"position":[[81,10]]},"1467":{"position":[[81,10]]},"1469":{"position":[[81,10]]},"1550":{"position":[[350,10],[598,10]]}}}],["consid",{"_index":2306,"t":{"1604":{"position":[[193,8]]}}}],["consider",{"_index":2310,"t":{"1613":{"position":[[86,13]]}}}],["consist",{"_index":1191,"t":{"1138":{"position":[[521,7]]}}}],["console=serial0,115200",{"_index":379,"t":{"869":{"position":[[223,22]]}}}],["console=tty1",{"_index":380,"t":{"869":{"position":[[246,12]]}}}],["contain",{"_index":118,"t":{"838":{"position":[[878,9]]},"844":{"position":[[62,9],[112,10],[166,9],[763,11],[788,9],[1021,9]]},"873":{"position":[[234,9]]},"875":{"position":[[190,9]]},"880":{"position":[[319,11]]},"908":{"position":[[11,9]]},"920":{"position":[[2001,9]]},"981":{"position":[[2738,10],[2932,10],[6934,9]]},"1286":{"position":[[72,8]]},"1288":{"position":[[3507,9],[3572,9]]},"1328":{"position":[[277,9]]},"1334":{"position":[[78,11]]},"1340":{"position":[[78,11]]},"1548":{"position":[[1044,9],[1541,9],[2267,9],[2764,9]]},"1560":{"position":[[1235,9],[1732,9],[2458,9],[2955,9]]},"1586":{"position":[[143,8]]},"1588":{"position":[[137,11]]},"1590":{"position":[[134,11]]},"1592":{"position":[[134,11]]},"1594":{"position":[[138,11]]},"1596":{"position":[[126,10]]},"1600":{"position":[[126,10]]},"1604":{"position":[[116,8],[246,10]]},"1606":{"position":[[126,10]]},"1608":{"position":[[126,10]]},"1610":{"position":[[126,10]]},"1630":{"position":[[200,11]]}}}],["container_set",{"_index":1123,"t":{"1119":{"position":[[186,18],[219,21],[408,18],[441,21]]}}}],["containerd",{"_index":27,"t":{"823":{"position":[[412,10]]},"836":{"position":[[83,10],[689,10]]},"838":{"position":[[11,26],[195,11]]},"842":{"position":[[64,10]]},"844":{"position":[[438,10]]},"896":{"position":[[564,10]]},"906":{"position":[[257,10]]},"908":{"position":[[54,10],[174,10]]},"914":{"position":[[50,10]]},"920":{"position":[[1570,10],[2067,10],[2240,10],[2362,10],[3378,10]]},"977":{"position":[[93,10]]},"981":{"position":[[6921,10],[7000,10],[7173,10],[7295,10],[8672,10]]},"1047":{"position":[[197,10]]},"1073":{"position":[[22,10]]},"1121":{"position":[[91,21]]},"1148":{"position":[[5,10],[109,10],[288,10]]},"1152":{"position":[[111,36]]},"1252":{"position":[[169,10]]},"1268":{"position":[[165,10]]},"1417":{"position":[[308,10],[436,10]]},"1419":{"position":[[237,10],[417,10]]},"1437":{"position":[[297,10],[430,10]]},"1490":{"position":[[246,10],[402,10]]},"1558":{"position":[[463,10]]},"1566":{"position":[[1104,10]]}}}],["containerd=/run/k3s/containerd/containerd.sock",{"_index":1768,"t":{"1288":{"position":[[3599,46]]},"1548":{"position":[[1116,46],[2339,46]]},"1560":{"position":[[1307,46],[2530,46]]}}}],["containerd_",{"_index":68,"t":{"836":{"position":[[715,12]]}}}],["containerd_http_proxy=http://your",{"_index":69,"t":{"836":{"position":[[728,33]]}}}],["containerd_http_proxy、containerd_https_proxi",{"_index":56,"t":{"836":{"position":[[167,44]]}}}],["containerd_https_proxy=http://your",{"_index":70,"t":{"836":{"position":[[785,34]]}}}],["containerd_no_proxi",{"_index":57,"t":{"836":{"position":[[214,19]]}}}],["containerd_no_proxy=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16",{"_index":71,"t":{"836":{"position":[[843,71]]}}}],["containerd、flannel、kub",{"_index":498,"t":{"896":{"position":[[222,23]]}}}],["containerport",{"_index":453,"t":{"880":{"position":[[574,14]]},"1334":{"position":[[220,14]]},"1340":{"position":[[220,14]]}}}],["containers/contain",{"_index":423,"t":{"875":{"position":[[153,20]]}}}],["containers/node:13.13.0",{"_index":441,"t":{"880":{"position":[[183,23],[376,23]]}}}],["contrib/util/gener",{"_index":627,"t":{"929":{"position":[[70,21]]}}}],["contrib/util/rot",{"_index":658,"t":{"933":{"position":[[450,19]]}}}],["control",{"_index":22,"t":{"823":{"position":[[239,10],[266,10],[291,7]]},"846":{"position":[[184,10],[212,11],[230,7]]},"858":{"position":[[277,7],[342,7]]},"886":{"position":[[108,13],[186,7]]},"890":{"position":[[35,7],[149,7],[251,7]]},"896":{"position":[[124,10]]},"925":{"position":[[268,11],[298,11]]},"951":{"position":[[167,10],[193,10]]},"973":{"position":[[99,10],[121,10],[234,10]]},"975":{"position":[[146,10],[180,10],[221,10],[261,10]]},"981":{"position":[[3489,10],[3551,10],[3669,10],[3737,10],[5955,10],[6005,10],[6158,10],[6184,10],[6221,10]]},"1019":{"position":[[64,7],[165,7]]},"1025":{"position":[[798,7]]},"1027":{"position":[[707,11]]},"1033":{"position":[[349,7],[1185,7],[1236,7],[1287,7],[1336,7],[1676,11]]},"1057":{"position":[[257,14]]},"1059":{"position":[[978,10]]},"1065":{"position":[[158,7]]},"1085":{"position":[[166,10],[205,10],[249,10],[340,10],[495,10]]},"1121":{"position":[[49,7],[162,7]]},"1136":{"position":[[118,10]]},"1186":{"position":[[38,7],[118,7],[207,7],[227,7]]},"1188":{"position":[[30,7],[148,10],[217,7],[243,7]]},"1190":{"position":[[6,7],[46,7],[94,7],[421,7]]},"1192":{"position":[[51,7],[136,10]]},"1194":{"position":[[159,10]]},"1210":{"position":[[232,7],[410,7],[730,10],[1575,10],[1735,10]]},"1212":{"position":[[30,10]]},"1216":{"position":[[83,10]]},"1232":{"position":[[58,10],[307,10]]},"1236":{"position":[[804,10]]},"1240":{"position":[[482,17]]},"1248":{"position":[[118,7]]},"1250":{"position":[[229,7]]},"1266":{"position":[[134,7]]},"1268":{"position":[[214,26],[247,16]]},"1272":{"position":[[145,8],[195,8],[368,8],[640,8]]},"1278":{"position":[[289,10],[547,11]]},"1280":{"position":[[95,11],[219,7],[909,11],[1266,8]]},"1282":{"position":[[958,10]]},"1286":{"position":[[269,7],[589,10],[1212,10]]},"1288":{"position":[[25,7],[145,7],[2247,10]]},"1290":{"position":[[18,8]]},"1292":{"position":[[26,7],[96,7]]},"1294":{"position":[[26,7],[132,8],[408,7],[489,7]]},"1314":{"position":[[91,7],[191,8]]},"1318":{"position":[[883,8]]},"1343":{"position":[[98,10]]},"1348":{"position":[[31,10],[380,10],[503,10],[658,10],[724,10],[821,10]]},"1350":{"position":[[15,10]]},"1358":{"position":[[406,10]]},"1368":{"position":[[289,7],[572,8],[840,8],[867,7],[1016,7],[1172,8],[1280,7],[1419,7],[1575,8]]},"1372":{"position":[[109,7]]},"1374":{"position":[[109,7]]},"1376":{"position":[[109,7],[183,10]]},"1378":{"position":[[109,7],[189,10]]},"1380":{"position":[[109,7]]},"1382":{"position":[[109,7]]},"1384":{"position":[[109,7]]},"1386":{"position":[[109,7]]},"1388":{"position":[[109,7]]},"1390":{"position":[[109,7]]},"1396":{"position":[[109,7]]},"1398":{"position":[[99,7]]},"1400":{"position":[[99,7]]},"1402":{"position":[[99,7]]},"1404":{"position":[[99,7]]},"1406":{"position":[[99,7]]},"1408":{"position":[[99,7]]},"1410":{"position":[[99,7]]},"1412":{"position":[[99,7]]},"1415":{"position":[[122,7]]},"1417":{"position":[[208,7]]},"1419":{"position":[[122,7]]},"1421":{"position":[[132,7]]},"1423":{"position":[[226,7]]},"1425":{"position":[[229,7]]},"1427":{"position":[[122,7]]},"1429":{"position":[[122,7]]},"1431":{"position":[[122,7]]},"1433":{"position":[[301,7]]},"1435":{"position":[[122,7]]},"1437":{"position":[[122,7]]},"1439":{"position":[[122,7]]},"1441":{"position":[[212,7]]},"1443":{"position":[[122,7]]},"1445":{"position":[[215,7]]},"1447":{"position":[[122,7]]},"1449":{"position":[[122,7]]},"1451":{"position":[[132,7]]},"1453":{"position":[[132,7]]},"1455":{"position":[[132,7]]},"1457":{"position":[[132,7]]},"1459":{"position":[[122,7]]},"1461":{"position":[[132,7]]},"1463":{"position":[[226,7]]},"1465":{"position":[[212,7]]},"1467":{"position":[[212,7]]},"1469":{"position":[[226,7]]},"1471":{"position":[[203,7]]},"1475":{"position":[[122,7]]},"1478":{"position":[[35,10],[108,10],[139,7],[341,10]]},"1480":{"position":[[35,10],[108,10],[139,7],[271,10],[505,10],[789,10],[1593,14]]},"1482":{"position":[[35,10],[108,10],[139,7],[291,10],[573,10],[857,10],[1661,14]]},"1484":{"position":[[35,10],[108,10],[139,7],[387,10],[658,10],[942,10],[1746,14]]},"1486":{"position":[[35,10],[108,10],[139,7],[324,10],[555,10],[839,10],[1643,14]]},"1488":{"position":[[45,10],[118,10],[149,7]]},"1490":{"position":[[35,10],[108,10],[139,7]]},"1493":{"position":[[126,7]]},"1495":{"position":[[121,7]]},"1586":{"position":[[90,7]]}}}],["controller.yaml",{"_index":1030,"t":{"1085":{"position":[[285,15]]},"1350":{"position":[[238,15]]}}}],["controller/releases/latest/download/system",{"_index":1967,"t":{"1350":{"position":[[187,42]]}}}],["controller:v0.4.0",{"_index":1033,"t":{"1085":{"position":[[405,17]]}}}],["controllermanag",{"_index":2081,"t":{"1404":{"position":[[142,17]]},"1406":{"position":[[148,17]]}}}],["cordon",{"_index":1972,"t":{"1352":{"position":[[274,7],[622,7]]}}}],["core",{"_index":1481,"t":{"1254":{"position":[[97,4],[186,4]]},"1272":{"position":[[1197,4]]}}}],["coredn",{"_index":30,"t":{"823":{"position":[[437,7]]},"838":{"position":[[696,7],[2167,9]]},"969":{"position":[[248,7]]},"981":{"position":[[1650,7],[5809,8]]},"1144":{"position":[[612,7]]},"1160":{"position":[[235,7],[304,7]]},"1214":{"position":[[0,7],[79,17]]}}}],["coredns.yaml",{"_index":1208,"t":{"1144":{"position":[[380,12]]}}}],["coredns:1.6.3",{"_index":1223,"t":{"1152":{"position":[[355,13],[420,13],[613,13],[659,14],[883,13]]},"1160":{"position":[[129,13],[192,13]]}}}],["coredns、traefik",{"_index":1102,"t":{"1113":{"position":[[50,15]]},"1212":{"position":[[6,15]]}}}],["coredns、traefik、loc",{"_index":1182,"t":{"1136":{"position":[[44,21]]}}}],["correct",{"_index":2203,"t":{"1490":{"position":[[173,7]]},"1495":{"position":[[155,7]]}}}],["correl",{"_index":1829,"t":{"1298":{"position":[[178,9]]},"1300":{"position":[[257,12]]},"1302":{"position":[[256,12]]}}}],["correspond",{"_index":1860,"t":{"1306":{"position":[[354,13]]},"1368":{"position":[[670,13]]},"1560":{"position":[[209,13]]}}}],["cover",{"_index":2023,"t":{"1368":{"position":[[1974,7]]},"1518":{"position":[[94,6]]}}}],["cp",{"_index":404,"t":{"871":{"position":[[514,2]]},"929":{"position":[[1047,2]]},"931":{"position":[[634,2],[814,2]]},"1075":{"position":[[118,2]]}}}],["cpi",{"_index":1930,"t":{"1328":{"position":[[338,6]]}}}],["cpu",{"_index":1258,"t":{"1170":{"position":[[38,3]]},"1178":{"position":[[22,3]]},"1246":{"position":[[46,3],[118,4],[182,4],[236,4]]},"1248":{"position":[[44,7],[161,7]]},"1252":{"position":[[67,9],[124,3]]},"1254":{"position":[[15,3],[90,4]]},"1258":{"position":[[39,3],[50,3]]},"1260":{"position":[[66,3],[77,3]]},"1262":{"position":[[7,3]]},"1266":{"position":[[399,3]]}}}],["crash",{"_index":1876,"t":{"1312":{"position":[[251,5]]}}}],["crd",{"_index":461,"t":{"882":{"position":[[204,3],[239,3]]},"1057":{"position":[[290,5]]},"1348":{"position":[[92,13],[183,4]]}}}],["creat",{"_index":122,"t":{"838":{"position":[[905,7]]},"882":{"position":[[146,6],[258,6]]},"998":{"position":[[196,6],[203,6],[344,6],[449,6]]},"1101":{"position":[[195,6]]},"1103":{"position":[[494,6]]},"1105":{"position":[[65,6]]},"1276":{"position":[[265,6]]},"1278":{"position":[[347,8],[448,7]]},"1280":{"position":[[2066,6]]},"1282":{"position":[[1024,7],[2726,8]]},"1284":{"position":[[104,6],[273,7],[1053,7]]},"1292":{"position":[[166,7],[262,8]]},"1314":{"position":[[38,8]]},"1318":{"position":[[306,7]]},"1334":{"position":[[326,6],[353,6]]},"1336":{"position":[[291,6],[318,6]]},"1368":{"position":[[768,8]]},"1441":{"position":[[55,6]]},"1510":{"position":[[74,6]]},"1516":{"position":[[26,6]]},"1575":{"position":[[49,6]]},"1577":{"position":[[26,6]]},"1598":{"position":[[26,6]]},"1615":{"position":[[55,6]]},"1626":{"position":[[55,6]]},"1632":{"position":[[53,7],[153,7]]}}}],["credenti",{"_index":576,"t":{"920":{"position":[[1179,10],[1258,10],[1367,10],[1429,10]]},"981":{"position":[[6504,10],[6583,10],[6692,10],[6754,10]]},"987":{"position":[[255,23]]},"1482":{"position":[[350,12],[403,12]]}}}],["credentials=tru",{"_index":1326,"t":{"1210":{"position":[[812,17]]},"1286":{"position":[[671,17],[1294,17]]},"1288":{"position":[[2822,16]]},"1480":{"position":[[2000,17]]},"1482":{"position":[[208,16],[2068,17]]},"1484":{"position":[[2153,17]]},"1486":{"position":[[2050,17]]}}}],["crf",{"_index":435,"t":{"878":{"position":[[367,4]]}}}],["cri",{"_index":75,"t":{"838":{"position":[[129,3]]},"896":{"position":[[519,5]]},"908":{"position":[[74,3],[105,3]]},"914":{"position":[[34,3]]},"920":{"position":[[2090,3],[3355,3]]},"977":{"position":[[77,3]]},"981":{"position":[[6898,3],[7023,3]]}}}],["crictl",{"_index":503,"t":{"896":{"position":[[463,6],[476,6]]},"1152":{"position":[[802,40]]}}}],["critic",{"_index":1060,"t":{"1091":{"position":[[759,8]]},"1280":{"position":[[6416,8]]}}}],["criticaladdonsonly=true:noexecut",{"_index":911,"t":{"1025":{"position":[[870,34]]}}}],["cron",{"_index":690,"t":{"937":{"position":[[1139,4],[1150,4]]},"954":{"position":[[540,4],[555,4]]},"981":{"position":[[4576,4],[4618,4]]}}}],["csi",{"_index":1591,"t":{"1280":{"position":[[1656,5],[2797,5]]},"1328":{"position":[[305,5],[375,3]]}}}],["ctr",{"_index":504,"t":{"896":{"position":[[540,3],[550,3]]},"1244":{"position":[[400,3]]}}}],["cuda",{"_index":228,"t":{"844":{"position":[[184,4],[783,4]]}}}],["curl",{"_index":78,"t":{"838":{"position":[[267,4],[352,4]]},"840":{"position":[[241,4]]},"844":{"position":[[261,4]]},"860":{"position":[[218,4]]},"929":{"position":[[1199,4]]},"931":{"position":[[902,4]]},"933":{"position":[[630,4]]},"1025":{"position":[[232,4],[401,4]]},"1027":{"position":[[210,4],[379,4]]},"1033":{"position":[[523,4],[623,4],[796,4],[931,4],[1440,4]]},"1080":{"position":[[401,10],[477,4]]},"1089":{"position":[[278,4],[380,4],[484,4],[623,4],[718,4],[820,4],[936,4],[1056,4],[1152,4]]},"1091":{"position":[[143,4]]},"1097":{"position":[[119,4]]},"1131":{"position":[[411,4]]},"1188":{"position":[[58,4]]},"1190":{"position":[[149,4]]},"1240":{"position":[[101,4],[159,4],[651,4],[761,4]]},"1244":{"position":[[95,4],[153,4],[1524,4]]},"1322":{"position":[[204,4]]},"1360":{"position":[[238,4],[364,4],[490,4]]}}}],["current",{"_index":716,"t":{"947":{"position":[[136,7],[366,7],[622,7]]},"1290":{"position":[[36,9]]},"1296":{"position":[[301,10]]},"1310":{"position":[[190,10]]},"1312":{"position":[[308,7]]}}}],["custom",{"_index":596,"t":{"920":{"position":[[2213,10],[3071,10],[3144,10]]},"929":{"position":[[92,6],[1271,6]]},"931":{"position":[[392,6],[974,6]]},"981":{"position":[[3381,10],[3449,10],[3526,10],[3613,10],[3706,10],[5066,6],[7146,10],[8133,10],[8206,10]]},"1059":{"position":[[10,6]]}}}],["d",{"_index":398,"t":{"871":{"position":[[334,1]]},"904":{"position":[[28,1]]},"920":{"position":[[831,1]]},"965":{"position":[[28,1]]},"981":{"position":[[1157,1]]},"1228":{"position":[[285,1],[524,2]]},"1392":{"position":[[533,1],[749,1]]},"1415":{"position":[[212,1]]},"1423":{"position":[[442,1]]},"1425":{"position":[[425,1]]},"1427":{"position":[[299,1]]},"1429":{"position":[[265,1]]},"1431":{"position":[[278,1]]},"1433":{"position":[[369,1]]},"1435":{"position":[[276,1]]},"1439":{"position":[[342,1]]},"1441":{"position":[[364,1]]},"1443":{"position":[[260,1]]},"1445":{"position":[[395,1]]},"1447":{"position":[[256,1]]},"1449":{"position":[[207,1]]},"1459":{"position":[[337,1]]},"1463":{"position":[[663,1],[879,1]]},"1465":{"position":[[404,1]]},"1467":{"position":[[339,1]]},"1469":{"position":[[351,1]]},"1471":{"position":[[393,1]]},"1475":{"position":[[945,1]]},"1478":{"position":[[294,1]]},"1480":{"position":[[224,1]]},"1482":{"position":[[244,1]]},"1484":{"position":[[340,1]]},"1486":{"position":[[277,1]]},"1493":{"position":[[211,1]]},"1495":{"position":[[221,1]]},"1498":{"position":[[557,1],[773,1]]},"1500":{"position":[[446,1],[662,1]]},"1502":{"position":[[471,1],[687,1]]},"1504":{"position":[[623,1],[839,1]]},"1506":{"position":[[449,1],[665,1]]},"1508":{"position":[[481,1],[697,1]]},"1510":{"position":[[580,1],[796,1]]},"1516":{"position":[[91,1]]},"1542":{"position":[[511,1],[602,1]]},"1544":{"position":[[497,1],[588,1]]},"1546":{"position":[[553,1],[644,1]]},"1548":{"position":[[461,1]]},"1550":{"position":[[518,1]]},"1560":{"position":[[679,1]]}}}],["daemon",{"_index":293,"t":{"852":{"position":[[455,6]]},"856":{"position":[[44,6],[100,6]]},"896":{"position":[[604,14]]},"1129":{"position":[[685,6]]},"1284":{"position":[[1437,6]]},"1542":{"position":[[422,6]]},"1544":{"position":[[408,6]]},"1546":{"position":[[464,6]]},"1548":{"position":[[394,6]]},"1550":{"position":[[451,6]]},"1552":{"position":[[428,6]]},"1554":{"position":[[428,6]]},"1556":{"position":[[302,6]]},"1558":{"position":[[396,6]]},"1560":{"position":[[612,6]]},"1562":{"position":[[478,6]]},"1564":{"position":[[332,6]]},"1566":{"position":[[1037,6]]}}}],["daemonset",{"_index":1379,"t":{"1222":{"position":[[120,12],[133,9],[399,10]]},"1228":{"position":[[380,9]]}}}],["dashboard",{"_index":1086,"t":{"1103":{"position":[[161,9],[449,9]]},"1105":{"position":[[55,9],[120,9]]},"1109":{"position":[[38,9]]},"1111":{"position":[[38,9],[102,9],[159,9]]}}}],["dashboard.admin",{"_index":1084,"t":{"1103":{"position":[[51,15],[171,15],[504,15],[532,15]]},"1109":{"position":[[364,15],[392,15]]}}}],["dashboard/services/https:kubernet",{"_index":1098,"t":{"1107":{"position":[[123,35]]}}}],["dashboard:/proxi",{"_index":1099,"t":{"1107":{"position":[[159,17]]}}}],["data",{"_index":421,"t":{"875":{"position":[[112,4]]},"904":{"position":[[11,4]]},"920":{"position":[[814,4]]},"937":{"position":[[149,6],[227,4],[279,6],[1281,23]]},"954":{"position":[[693,21]]},"965":{"position":[[11,4]]},"981":{"position":[[1140,4],[1165,6],[3847,4],[4840,6]]},"998":{"position":[[632,4],[1098,4],[1383,4],[1590,4]]},"1008":{"position":[[567,4]]},"1300":{"position":[[204,4],[405,4]]},"1302":{"position":[[203,4],[391,4]]},"1304":{"position":[[351,4]]},"1334":{"position":[[205,5]]},"1340":{"position":[[205,5]]},"1392":{"position":[[64,4],[104,4],[194,4]]},"1394":{"position":[[74,4],[114,4],[204,4]]},"1518":{"position":[[314,5]]}}}],["data_dir",{"_index":649,"t":{"931":{"position":[[452,8]]}}}],["data_dir=/opt/k3",{"_index":655,"t":{"931":{"position":[[995,17]]}}}],["databas",{"_index":2037,"t":{"1392":{"position":[[389,9],[1601,8]]},"1463":{"position":[[519,9],[1731,8]]},"1498":{"position":[[413,9],[1625,8]]},"1500":{"position":[[302,9],[1514,8]]},"1502":{"position":[[327,9],[1539,8]]},"1504":{"position":[[479,9],[1691,8]]},"1506":{"position":[[305,9],[1517,8]]},"1508":{"position":[[337,9],[1549,8]]},"1510":{"position":[[436,9],[1648,8]]}}}],["datastor",{"_index":740,"t":{"954":{"position":[[13,9],[104,9],[174,9],[247,9]]},"981":{"position":[[3766,9],[3892,9],[3966,9],[4024,9],[4092,9],[4152,9],[4209,9]]},"1006":{"position":[[48,9],[160,9],[279,9],[420,9],[537,9],[561,9],[644,9]]},"1008":{"position":[[9,9],[121,9],[414,9],[831,9]]},"1025":{"position":[[80,9],[299,9],[524,9]]},"1027":{"position":[[277,9],[502,9]]},"1035":{"position":[[185,9]]},"1080":{"position":[[544,9]]}}}],["day",{"_index":1826,"t":{"1298":{"position":[[117,4],[242,4]]},"1453":{"position":[[229,5]]}}}],["db",{"_index":821,"t":{"981":{"position":[[3304,4],[3791,4],[3915,4],[4049,4],[4176,4],[4288,4],[4376,4],[4441,4],[4587,4],[4719,4],[4793,4],[4816,2],[4891,4],[4929,4],[4979,4],[5058,4],[5133,4],[5204,4],[5271,4],[5338,4],[5381,4],[5471,4],[5505,4],[5557,4]]},"1004":{"position":[[772,2]]}}}],["de8fded06188",{"_index":151,"t":{"838":{"position":[[1438,12]]}}}],["debian",{"_index":374,"t":{"869":{"position":[[19,13]]}}}],["debug",{"_index":552,"t":{"920":{"position":[[240,5],[264,5]]},"961":{"position":[[11,5],[24,5]]},"981":{"position":[[251,5],[275,5]]},"1047":{"position":[[285,5],[302,6]]},"1097":{"position":[[85,6]]}}}],["decis",{"_index":1991,"t":{"1368":{"position":[[395,8]]}}}],["dedic",{"_index":2222,"t":{"1510":{"position":[[83,9]]}}}],["default",{"_index":248,"t":{"844":{"position":[[699,7]]},"906":{"position":[[180,8]]},"920":{"position":[[177,9],[342,9],[873,9],[1306,9],[1468,9],[1883,8],[1989,9],[2269,9],[2354,7],[2385,9],[2485,9],[2849,7],[2924,7],[3005,7]]},"933":{"position":[[470,7],[700,7]]},"971":{"position":[[8,7]]},"981":{"position":[[188,9],[353,9],[642,9],[716,9],[841,9],[975,9],[998,9],[1193,9],[1338,9],[1443,9],[1572,9],[1704,9],[1777,9],[1996,9],[2254,9],[2364,9],[3837,9],[4334,9],[4482,9],[4524,9],[4661,9],[4754,9],[4830,9],[5000,9],[5425,9],[5573,9],[5591,7],[5634,7],[5921,7],[5991,7],[6135,7],[6631,9],[6793,9],[7202,9],[7287,7],[7318,9],[7418,9],[7473,7],[7911,7],[7986,7],[8067,7],[8262,8],[8368,9]]},"1059":{"position":[[726,7]]},"1078":{"position":[[427,7]]},"1210":{"position":[[337,9],[1286,9]]},"1272":{"position":[[315,7]]},"1276":{"position":[[162,9],[193,8]]},"1278":{"position":[[195,8],[387,8],[469,8]]},"1280":{"position":[[612,9],[6097,7],[6184,7]]},"1282":{"position":[[728,7],[988,7]]},"1284":{"position":[[114,7]]},"1286":{"position":[[196,9],[793,9]]},"1288":{"position":[[96,8]]},"1290":{"position":[[63,8]]},"1304":{"position":[[222,8],[626,7]]},"1318":{"position":[[12,7],[91,9],[376,7],[617,7],[664,7],[764,9]]},"1332":{"position":[[85,7]]},"1334":{"position":[[64,7]]},"1340":{"position":[[64,7]]},"1459":{"position":[[296,7]]},"1562":{"position":[[160,7]]},"1577":{"position":[[178,7]]}}}],["default:restrict",{"_index":1630,"t":{"1280":{"position":[[4708,18]]}}}],["defaults=tru",{"_index":1780,"t":{"1288":{"position":[[4050,13]]},"1552":{"position":[[340,13]]}}}],["defin",{"_index":1807,"t":{"1294":{"position":[[247,6]]}}}],["definit",{"_index":2297,"t":{"1579":{"position":[[37,10]]},"1628":{"position":[[103,12]]}}}],["degrad",{"_index":1874,"t":{"1312":{"position":[[176,8]]}}}],["delegate=y",{"_index":299,"t":{"852":{"position":[[682,12]]}}}],["delet",{"_index":707,"t":{"937":{"position":[[2359,6],[2595,6]]},"981":{"position":[[5764,6]]},"998":{"position":[[241,6],[248,6],[1036,7]]},"1109":{"position":[[17,6]]},"1111":{"position":[[17,6],[65,6],[129,6]]},"1119":{"position":[[721,6],[748,6],[774,6]]},"1210":{"position":[[2500,6],[2847,6]]},"1306":{"position":[[387,8]]},"1459":{"position":[[223,6]]},"1569":{"position":[[322,6]]}}}],["denial",{"_index":1854,"t":{"1304":{"position":[[527,6]]}}}],["denyserviceexternalip",{"_index":2124,"t":{"1419":{"position":[[156,22]]}}}],["depend",{"_index":2008,"t":{"1368":{"position":[[1465,7]]}}}],["deploy",{"_index":797,"t":{"979":{"position":[[59,6]]},"981":{"position":[[5733,6],[5775,8]]},"1282":{"position":[[240,8]]},"1308":{"position":[[151,11]]},"1350":{"position":[[31,10],[42,19]]},"1518":{"position":[[344,10]]},"1626":{"position":[[93,10]]}}}],["deprec",{"_index":808,"t":{"981":{"position":[[1926,13],[1983,12]]}}}],["der",{"_index":850,"t":{"987":{"position":[[228,3]]}}}],["describ",{"_index":1096,"t":{"1105":{"position":[[130,8]]},"1134":{"position":[[206,8]]},"1280":{"position":[[1275,9],[2391,9]]}}}],["descript",{"_index":866,"t":{"998":{"position":[[771,11]]},"1368":{"position":[[600,12]]}}}],["design",{"_index":2007,"t":{"1368":{"position":[[1334,8]]}}}],["desir",{"_index":2153,"t":{"1433":{"position":[[74,7]]},"1447":{"position":[[223,7]]}}}],["detail",{"_index":1528,"t":{"1272":{"position":[[1002,7]]},"1284":{"position":[[617,8]]},"1308":{"position":[[314,8]]},"1310":{"position":[[357,8]]},"1368":{"position":[[591,8]]},"1502":{"position":[[2276,7],[2516,7],[2756,7]]},"1508":{"position":[[2321,7]]}}}],["detect",{"_index":1885,"t":{"1314":{"position":[[81,9],[119,6]]}}}],["determin",{"_index":2011,"t":{"1368":{"position":[[1533,10]]}}}],["dev",{"_index":1018,"t":{"1078":{"position":[[403,3],[455,3]]}}}],["dev/nul",{"_index":1081,"t":{"1101":{"position":[[148,9]]},"1109":{"position":[[196,9]]}}}],["develop",{"_index":9,"t":{"821":{"position":[[96,11]]}}}],["devic",{"_index":262,"t":{"844":{"position":[[1051,6]]}}}],["differ",{"_index":591,"t":{"920":{"position":[[1966,9]]},"981":{"position":[[8345,9]]},"1276":{"position":[[133,9]]},"1282":{"position":[[1107,9]]},"1368":{"position":[[1031,6]]},"1447":{"position":[[202,9]]},"1613":{"position":[[135,9]]}}}],["dir",{"_index":422,"t":{"875":{"position":[[117,35]]},"904":{"position":[[16,3]]},"920":{"position":[[819,3],[1203,3]]},"937":{"position":[[186,3],[232,3],[1271,3]]},"954":{"position":[[679,3]]},"965":{"position":[[16,3]]},"981":{"position":[[1145,3],[4783,3],[6528,3]]},"998":{"position":[[637,3],[1103,3],[1388,3],[1595,3]]},"1392":{"position":[[109,4]]},"1394":{"position":[[119,4]]}}}],["dir=/var/lib/rancher/k3s/agent/etc/cni/net.d",{"_index":1765,"t":{"1288":{"position":[[3460,44]]}}}],["dir=/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin",{"_index":1764,"t":{"1288":{"position":[[3350,98]]}}}],["dir=/var/lib/rancher/k3s/server/tls/kub",{"_index":2176,"t":{"1465":{"position":[[3077,40]]},"1480":{"position":[[748,40]]},"1482":{"position":[[816,40]]},"1484":{"position":[[901,40]]},"1486":{"position":[[798,40]]},"1493":{"position":[[669,40]]},"1495":{"position":[[743,40]]}}}],["dir=/var/lib/rancher/k3s/server/tls/temporari",{"_index":1700,"t":{"1288":{"position":[[351,45]]},"1423":{"position":[[1020,45]]},"1425":{"position":[[968,45]]},"1427":{"position":[[837,45]]},"1429":{"position":[[786,45]]},"1431":{"position":[[799,45]]},"1433":{"position":[[912,45]]},"1435":{"position":[[873,45]]},"1439":{"position":[[946,45]]},"1441":{"position":[[927,45]]},"1443":{"position":[[823,45]]},"1445":{"position":[[939,45]]},"1447":{"position":[[804,45]]},"1449":{"position":[[719,45]]},"1459":{"position":[[894,45]]},"1465":{"position":[[936,45]]},"1467":{"position":[[852,45]]},"1469":{"position":[[858,45]]},"1542":{"position":[[1203,45]]},"1544":{"position":[[1217,45]]},"1546":{"position":[[1332,45]]}}}],["directori",{"_index":578,"t":{"920":{"position":[[1242,9]]},"981":{"position":[[4798,9],[6567,9]]},"1280":{"position":[[362,10],[2495,10]]},"1282":{"position":[[196,10]]},"1284":{"position":[[130,9],[245,10],[606,10]]},"1392":{"position":[[69,10],[199,9]]},"1394":{"position":[[79,10],[209,9]]},"1502":{"position":[[2332,9],[2572,9],[2812,9]]},"1508":{"position":[[2377,9]]}}}],["dir}/db/snapshot",{"_index":693,"t":{"937":{"position":[[1305,18]]},"954":{"position":[[715,18]]},"981":{"position":[[4847,18]]}}}],["dir}/server/db/etcd",{"_index":677,"t":{"937":{"position":[[286,19]]}}}],["dir}/server/db/snapshots。data",{"_index":676,"t":{"937":{"position":[[156,29]]}}}],["disabl",{"_index":266,"t":{"846":{"position":[[19,7]]},"865":{"position":[[26,7],[417,7]]},"867":{"position":[[23,7]]},"920":{"position":[[2050,7]]},"937":{"position":[[1083,7]]},"945":{"position":[[110,7],[621,7]]},"951":{"position":[[153,7],[180,7],[206,7],[231,7]]},"954":{"position":[[377,7]]},"973":{"position":[[8,7],[30,7],[44,7],[85,7],[142,7],[179,7],[221,7]]},"977":{"position":[[153,7]]},"979":{"position":[[81,7]]},"981":{"position":[[2243,10],[4358,7],[4381,7],[5138,8],[5510,8],[5699,7],[5871,7],[5902,7],[5941,7],[5979,7],[6026,7],[6058,7],[6087,7],[6123,7],[6171,7],[6208,7],[6983,7]]},"1027":{"position":[[694,7],[720,7],[741,7],[773,7]]},"1033":{"position":[[1663,7],[1689,7],[1710,7],[1742,7]]},"1091":{"position":[[626,7]]},"1119":{"position":[[78,7]]},"1142":{"position":[[40,7]]},"1188":{"position":[[120,7],[140,7],[169,7]]},"1190":{"position":[[124,7],[212,7]]},"1192":{"position":[[7,7],[108,7],[128,7],[158,7]]},"1194":{"position":[[127,7],[151,7],[184,7]]},"1218":{"position":[[99,7]]},"1232":{"position":[[293,7]]},"1441":{"position":[[253,7],[468,7],[512,7]]},"1443":{"position":[[155,7],[364,7],[408,7]]},"1579":{"position":[[130,7]]}}}],["disable=coredn",{"_index":1364,"t":{"1214":{"position":[[36,15]]}}}],["disable=servicelb",{"_index":1389,"t":{"1230":{"position":[[20,17]]}}}],["disable=traefik",{"_index":938,"t":{"1041":{"position":[[8,15]]},"1142":{"position":[[168,15]]},"1216":{"position":[[537,15]]}}}],["disabled：apiserv",{"_index":790,"t":{"969":{"position":[[653,18]]},"1121":{"position":[[341,18]]}}}],["disclosur",{"_index":1865,"t":{"1308":{"position":[[301,12]]}}}],["discoveri",{"_index":265,"t":{"844":{"position":[[1079,9]]}}}],["discuss",{"_index":950,"t":{"1055":{"position":[[101,11]]}}}],["disk",{"_index":1476,"t":{"1254":{"position":[[23,4]]}}}],["dn",{"_index":63,"t":{"836":{"position":[[405,3]]},"951":{"position":[[130,3]]},"969":{"position":[[222,3]]},"981":{"position":[[1607,3]]},"1027":{"position":[[628,4]]},"1031":{"position":[[230,3]]},"1033":{"position":[[1597,4]]},"1080":{"position":[[866,4]]},"1214":{"position":[[97,3]]},"1280":{"position":[[6448,4]]},"1282":{"position":[[541,3],[654,4],[744,3],[892,3]]}}}],["dns=10.43.0.10",{"_index":1762,"t":{"1288":{"position":[[3294,14]]},"1548":{"position":[[996,14],[2219,14]]},"1560":{"position":[[1187,14],[2410,14]]}}}],["doc",{"_index":1122,"t":{"1119":{"position":[[147,4]]}}}],["docker",{"_index":76,"t":{"838":{"position":[[166,6],[184,6],[219,12],[244,6],[259,7],[335,6],[393,6],[846,6],[868,6]]},"871":{"position":[[2,6],[28,6],[46,6],[86,6],[167,13],[222,6],[242,6],[413,6],[486,6],[507,6]]},"908":{"position":[[87,6],[109,6],[187,6]]},"914":{"position":[[24,6]]},"920":{"position":[[2137,6],[2158,6],[2254,6],[3313,6]]},"977":{"position":[[67,6]]},"981":{"position":[[6856,6],[7070,6],[7091,6],[7187,6]]},"1049":{"position":[[14,6]]},"1069":{"position":[[31,6],[56,6]]},"1085":{"position":[[124,6]]},"1160":{"position":[[88,9],[162,9],[260,9]]},"1204":{"position":[[16,13],[39,15]]},"1630":{"position":[[193,6]]}}}],["docker.io",{"_index":1007,"t":{"1067":{"position":[[72,29]]},"1152":{"position":[[236,9],[269,10],[683,10]]},"1156":{"position":[[79,10],[442,10]]},"1158":{"position":[[79,10],[274,10]]},"1160":{"position":[[46,9]]}}}],["docker.io/rancher/coredn",{"_index":1222,"t":{"1152":{"position":[[329,25],[633,25],[857,25]]},"1160":{"position":[[103,25]]}}}],["docker.io/rancher/pause:3.1",{"_index":530,"t":{"908":{"position":[[142,29]]}}}],["docker/20.10.sh",{"_index":80,"t":{"838":{"position":[[309,15]]}}}],["docker/default",{"_index":2318,"t":{"1628":{"position":[[60,14]]}}}],["dockerd",{"_index":74,"t":{"838":{"position":[[99,7],[133,18]]},"914":{"position":[[38,7]]},"920":{"position":[[3359,7]]},"977":{"position":[[81,7]]},"981":{"position":[[6902,7]]}}}],["dockershim",{"_index":73,"t":{"838":{"position":[[72,16]]}}}],["document",{"_index":1496,"t":{"1272":{"position":[[22,8]]},"1284":{"position":[[715,14]]},"1296":{"position":[[153,11]]},"1368":{"position":[[15,8]]},"1417":{"position":[[37,13]]},"1423":{"position":[[48,13]]},"1425":{"position":[[48,13]]},"1433":{"position":[[48,13]]},"1441":{"position":[[37,13]]},"1445":{"position":[[48,13]]},"1463":{"position":[[48,13]]},"1465":{"position":[[48,13]]},"1467":{"position":[[48,13]]},"1469":{"position":[[48,13]]},"1471":{"position":[[48,13]]},"1473":{"position":[[48,13]]},"1498":{"position":[[50,13]]},"1504":{"position":[[50,13]]},"1510":{"position":[[56,13]]},"1615":{"position":[[37,13]]},"1623":{"position":[[48,13]]},"1626":{"position":[[37,13]]},"1630":{"position":[[48,13]]}}}],["doesn't",{"_index":1538,"t":{"1272":{"position":[[1167,7]]},"1278":{"position":[[360,7]]},"1284":{"position":[[96,7]]}}}],["doesnotexist",{"_index":1975,"t":{"1352":{"position":[[722,12]]}}}],["domain",{"_index":732,"t":{"951":{"position":[[144,6]]},"969":{"position":[[302,6]]},"981":{"position":[[1736,6],[1770,6]]},"1027":{"position":[[642,7]]},"1033":{"position":[[1611,7]]}}}],["domain=cluster.loc",{"_index":1763,"t":{"1288":{"position":[[3319,20]]},"1548":{"position":[[1021,20],[2244,20]]},"1560":{"position":[[1212,20],[2435,20]]}}}],["done",{"_index":1516,"t":{"1272":{"position":[[606,4]]}}}],["download",{"_index":1997,"t":{"1368":{"position":[[738,8]]}}}],["downwardapi",{"_index":1590,"t":{"1280":{"position":[[1640,13],[2781,13]]}}}],["dqlite",{"_index":1957,"t":{"1345":{"position":[[500,13],[514,6],[557,6]]}}}],["driver",{"_index":229,"t":{"844":{"position":[[189,7]]},"854":{"position":[[411,11]]}}}],["driver/mysql#dsn",{"_index":898,"t":{"1008":{"position":[[550,16]]}}}],["driver=cgroupf",{"_index":1758,"t":{"1288":{"position":[[3176,15]]}}}],["driver=systemd",{"_index":2261,"t":{"1548":{"position":[[887,14],[2110,14]]},"1560":{"position":[[1078,14],[2301,14]]}}}],["drop",{"_index":2308,"t":{"1604":{"position":[[270,4]]}}}],["dummi",{"_index":1015,"t":{"1078":{"position":[[344,5]]}}}],["dummy0",{"_index":1014,"t":{"1078":{"position":[[332,6],[362,6],[407,6],[459,6]]}}}],["durat",{"_index":1842,"t":{"1304":{"position":[[166,8]]}}}],["dynam",{"_index":1891,"t":{"1316":{"position":[[406,7]]}}}],["e",{"_index":444,"t":{"880":{"position":[[432,1]]},"1101":{"position":[[165,1]]},"1109":{"position":[[213,1]]},"1392":{"position":[[939,1],[1266,1]]},"1398":{"position":[[203,1]]},"1400":{"position":[[180,1]]},"1402":{"position":[[186,1]]},"1404":{"position":[[188,1]]},"1463":{"position":[[1069,1],[1396,1]]},"1498":{"position":[[963,1],[1290,1]]},"1500":{"position":[[852,1],[1179,1]]},"1502":{"position":[[877,1],[1204,1]]},"1504":{"position":[[1029,1],[1356,1]]},"1506":{"position":[[855,1],[1182,1]]},"1508":{"position":[[887,1],[1214,1]]},"1510":{"position":[[986,1],[1313,1]]},"1527":{"position":[[222,1]]}}}],["e.g",{"_index":1197,"t":{"1138":{"position":[[634,5]]}}}],["e7999a65ae0a4e9969f32317ec48ae4f7071b62f92e5236696737973be77c2e1",{"_index":2111,"t":{"1417":{"position":[[1070,64]]},"1419":{"position":[[1051,64]]},"1437":{"position":[[1064,64]]},"1490":{"position":[[1036,64]]}}}],["e9ef",{"_index":174,"t":{"838":{"position":[[2111,4]]}}}],["each",{"_index":1667,"t":{"1284":{"position":[[199,4]]},"1290":{"position":[[72,4]]},"1318":{"position":[[644,4]]},"1320":{"position":[[203,4]]},"1368":{"position":[[284,4],[567,4],[862,4],[1167,4]]},"1521":{"position":[[109,4]]},"1523":{"position":[[109,4]]},"1525":{"position":[[99,4]]},"1527":{"position":[[99,4]]},"1529":{"position":[[99,4]]},"1531":{"position":[[99,4]]},"1542":{"position":[[242,4]]},"1544":{"position":[[228,4]]},"1546":{"position":[[271,4]]},"1548":{"position":[[218,4]]},"1550":{"position":[[255,4]]},"1552":{"position":[[240,4]]},"1554":{"position":[[241,4]]},"1556":{"position":[[123,4]]},"1558":{"position":[[239,4]]},"1560":{"position":[[361,4]]},"1562":{"position":[[295,4]]},"1564":{"position":[[123,4]]},"1566":{"position":[[544,4]]},"1577":{"position":[[173,4]]},"1588":{"position":[[42,4]]},"1590":{"position":[[42,4]]},"1592":{"position":[[42,4]]},"1594":{"position":[[42,4]]},"1596":{"position":[[42,4]]},"1598":{"position":[[46,4]]},"1600":{"position":[[42,4]]},"1606":{"position":[[42,4]]},"1608":{"position":[[42,4]]},"1610":{"position":[[42,4]]}}}],["east",{"_index":702,"t":{"937":{"position":[[1866,4]]},"954":{"position":[[1131,4]]},"981":{"position":[[5439,4]]}}}],["ec2",{"_index":1375,"t":{"1220":{"position":[[216,3]]}}}],["echo",{"_index":2040,"t":{"1392":{"position":[[473,4],[663,4],[730,4],[843,4],[972,4],[1096,4],[1172,4],[1299,4],[1421,4],[1502,4],[1688,4],[1711,4],[1762,4],[1801,4],[1841,4],[1863,4],[1912,4],[1952,4],[1990,4]]},"1463":{"position":[[603,4],[793,4],[860,4],[973,4],[1102,4],[1226,4],[1302,4],[1429,4],[1551,4],[1632,4],[1818,4],[1841,4],[1892,4],[1931,4],[1971,4],[1993,4],[2042,4],[2082,4],[2120,4]]},"1498":{"position":[[497,4],[687,4],[754,4],[867,4],[996,4],[1120,4],[1196,4],[1323,4],[1445,4],[1526,4],[1712,4],[1735,4],[1786,4],[1825,4],[1865,4],[1887,4],[1936,4],[1976,4],[2014,4]]},"1500":{"position":[[386,4],[576,4],[643,4],[756,4],[885,4],[1009,4],[1085,4],[1212,4],[1334,4],[1415,4],[1601,4],[1624,4],[1675,4],[1714,4],[1754,4],[1776,4],[1825,4],[1865,4],[1903,4]]},"1502":{"position":[[411,4],[601,4],[668,4],[781,4],[910,4],[1034,4],[1110,4],[1237,4],[1359,4],[1440,4],[1626,4],[1649,4],[1700,4],[1739,4],[1779,4],[1801,4],[1850,4],[1890,4],[1928,4]]},"1504":{"position":[[563,4],[753,4],[820,4],[933,4],[1062,4],[1186,4],[1262,4],[1389,4],[1511,4],[1592,4],[1778,4],[1801,4],[1852,4],[1891,4],[1931,4],[1953,4],[2002,4],[2042,4],[2080,4]]},"1506":{"position":[[389,4],[579,4],[646,4],[759,4],[888,4],[1012,4],[1088,4],[1215,4],[1337,4],[1418,4],[1604,4],[1627,4],[1678,4],[1717,4],[1757,4],[1779,4],[1828,4],[1868,4],[1906,4]]},"1508":{"position":[[421,4],[611,4],[678,4],[791,4],[920,4],[1044,4],[1120,4],[1247,4],[1369,4],[1450,4],[1636,4],[1659,4],[1710,4],[1749,4],[1789,4],[1811,4],[1860,4],[1900,4],[1938,4]]},"1510":{"position":[[520,4],[710,4],[777,4],[890,4],[1019,4],[1143,4],[1219,4],[1346,4],[1468,4],[1549,4],[1735,4],[1758,4],[1809,4],[1848,4],[1888,4],[1910,4],[1959,4],[1999,4],[2037,4]]},"1542":{"position":[[716,4]]},"1544":{"position":[[706,4]]},"1546":{"position":[[758,4]]}}}],["edg",{"_index":6,"t":{"821":{"position":[[84,4]]}}}],["edit",{"_index":2091,"t":{"1415":{"position":[[26,4]]},"1417":{"position":[[112,4]]},"1419":{"position":[[26,4]]},"1421":{"position":[[36,4]]},"1423":{"position":[[134,4]]},"1425":{"position":[[133,4]]},"1427":{"position":[[26,4]]},"1429":{"position":[[26,4]]},"1431":{"position":[[26,4]]},"1433":{"position":[[120,4]]},"1435":{"position":[[26,4]]},"1437":{"position":[[26,4]]},"1439":{"position":[[26,4]]},"1441":{"position":[[116,4]]},"1443":{"position":[[26,4]]},"1445":{"position":[[119,4]]},"1447":{"position":[[26,4]]},"1449":{"position":[[26,4]]},"1451":{"position":[[36,4]]},"1453":{"position":[[36,4]]},"1455":{"position":[[36,4]]},"1457":{"position":[[36,4]]},"1459":{"position":[[26,4]]},"1461":{"position":[[36,4]]},"1463":{"position":[[130,4]]},"1465":{"position":[[116,4]]},"1467":{"position":[[116,4]]},"1469":{"position":[[130,4]]},"1471":{"position":[[107,4]]},"1475":{"position":[[26,4]]},"1478":{"position":[[26,4]]},"1480":{"position":[[26,4]]},"1482":{"position":[[26,4]]},"1484":{"position":[[26,4]]},"1486":{"position":[[26,4]]},"1488":{"position":[[36,4]]},"1490":{"position":[[26,4]]},"1493":{"position":[[26,4]]},"1495":{"position":[[26,4]]},"1498":{"position":[[100,4]]},"1500":{"position":[[26,4]]},"1502":{"position":[[26,4]]},"1504":{"position":[[142,4]]},"1506":{"position":[[26,4]]},"1508":{"position":[[26,4]]},"1510":{"position":[[149,4]]},"1542":{"position":[[58,4],[155,4]]},"1544":{"position":[[58,4],[141,4]]},"1546":{"position":[[58,4],[184,4]]},"1548":{"position":[[58,4],[131,4]]},"1550":{"position":[[58,4],[168,4]]},"1552":{"position":[[68,4],[153,4]]},"1554":{"position":[[68,4],[154,4]]},"1556":{"position":[[36,4]]},"1558":{"position":[[58,4],[152,4]]},"1560":{"position":[[58,4],[274,4]]},"1562":{"position":[[68,4],[208,4]]},"1564":{"position":[[36,4]]},"1566":{"position":[[58,4],[457,4]]}}}],["ee",{"_index":2038,"t":{"1392":{"position":[[453,2]]},"1463":{"position":[[583,2]]},"1498":{"position":[[477,2]]},"1500":{"position":[[366,2]]},"1502":{"position":[[391,2]]},"1504":{"position":[[543,2]]},"1506":{"position":[[369,2]]},"1508":{"position":[[401,2]]},"1510":{"position":[[500,2]]}}}],["ef",{"_index":2032,"t":{"1392":{"position":[[136,2]]},"1394":{"position":[[146,2]]},"1417":{"position":[[298,2]]},"1419":{"position":[[227,2]]},"1437":{"position":[[287,2]]},"1490":{"position":[[236,2]]}}}],["effect",{"_index":1575,"t":{"1280":{"position":[[1102,6],[2044,10]]},"1459":{"position":[[310,7]]}}}],["efficaci",{"_index":1887,"t":{"1314":{"position":[[236,9]]}}}],["eg",{"_index":691,"t":{"937":{"position":[[1155,14]]},"954":{"position":[[560,14]]},"981":{"position":[[4629,3]]}}}],["egress",{"_index":735,"t":{"951":{"position":[[251,6]]},"969":{"position":[[613,6]]},"981":{"position":[[2169,6]]},"1121":{"position":[[258,6],[284,6],[320,6]]},"1423":{"position":[[1137,6]]},"1425":{"position":[[1085,6]]},"1427":{"position":[[954,6]]},"1429":{"position":[[903,6]]},"1431":{"position":[[916,6]]},"1433":{"position":[[1029,6]]},"1435":{"position":[[990,6]]},"1439":{"position":[[1063,6]]},"1441":{"position":[[1044,6]]},"1443":{"position":[[940,6]]},"1445":{"position":[[1056,6]]},"1447":{"position":[[921,6]]},"1449":{"position":[[836,6]]},"1459":{"position":[[1011,6]]},"1465":{"position":[[1053,6]]},"1467":{"position":[[969,6]]},"1469":{"position":[[975,6]]},"1542":{"position":[[1320,6]]},"1544":{"position":[[1334,6]]},"1546":{"position":[[1449,6]]}}}],["elevator=deadlin",{"_index":384,"t":{"869":{"position":[[301,17]]}}}],["embed",{"_index":593,"t":{"920":{"position":[[2058,8]]},"981":{"position":[[3131,8],[6991,8]]}}}],["emmc",{"_index":1265,"t":{"1170":{"position":[[367,4]]}}}],["empti",{"_index":2304,"t":{"1602":{"position":[[124,5]]}}}],["emptydir",{"_index":1588,"t":{"1280":{"position":[[1602,10],[2743,10]]}}}],["enabl",{"_index":295,"t":{"852":{"position":[[489,6]]},"920":{"position":[[1552,6]]},"945":{"position":[[333,6],[870,6]]},"947":{"position":[[128,7],[358,7]]},"977":{"position":[[24,6]]},"981":{"position":[[2048,6],[4934,6],[8399,6],[8434,6],[8462,6],[8654,6]]},"1059":{"position":[[497,8],[546,8]]},"1061":{"position":[[552,8],[596,8]]},"1272":{"position":[[862,9]]},"1278":{"position":[[368,6],[559,8]]},"1280":{"position":[[130,7],[944,7],[1162,8],[1208,8]]},"1286":{"position":[[855,7]]},"1288":{"position":[[477,6]]},"1292":{"position":[[488,6]]},"1294":{"position":[[587,6]]},"1296":{"position":[[376,8],[393,6]]},"1306":{"position":[[113,8]]},"1419":{"position":[[184,7],[283,6],[326,6]]},"1423":{"position":[[1227,6],[1270,6]]},"1425":{"position":[[1175,6],[1218,6]]},"1427":{"position":[[1044,6],[1087,6]]},"1429":{"position":[[993,6],[1036,6]]},"1431":{"position":[[1006,6],[1049,6]]},"1433":{"position":[[241,6],[445,7],[492,6],[1119,6],[1162,6]]},"1435":{"position":[[165,6],[352,7],[399,6],[459,6],[1080,6],[1123,6]]},"1437":{"position":[[155,6],[221,6],[343,6]]},"1439":{"position":[[155,6],[270,6],[418,7],[465,6],[523,6],[1153,6],[1196,6]]},"1441":{"position":[[1134,6],[1177,6]]},"1443":{"position":[[1030,6],[1073,6]]},"1445":{"position":[[248,6],[327,6],[471,7],[518,6],[1146,6],[1189,6]]},"1447":{"position":[[1011,6],[1054,6]]},"1449":{"position":[[926,6],[969,6]]},"1459":{"position":[[1101,6],[1144,6]]},"1465":{"position":[[1143,6],[1186,6]]},"1467":{"position":[[1059,6],[1102,6]]},"1469":{"position":[[1065,6],[1108,6]]},"1542":{"position":[[106,7],[1410,6],[1453,6]]},"1544":{"position":[[1424,6],[1467,6]]},"1546":{"position":[[1539,6],[1582,6]]},"1628":{"position":[[49,6]]}}}],["enablelb",{"_index":1383,"t":{"1228":{"position":[[36,8]]}}}],["encrypt",{"_index":508,"t":{"896":{"position":[[756,7],[814,7]]},"941":{"position":[[46,19]]},"943":{"position":[[49,10],[122,7],[267,7],[382,7],[519,7],[544,10],[625,7],[786,7],[920,7]]},"945":{"position":[[22,10],[102,7],[253,7],[325,7],[386,7],[432,10],[514,7],[613,7],[783,7],[862,7],[942,7]]},"947":{"position":[[8,7],[94,7],[109,10],[173,10],[324,7],[339,10],[404,10],[579,10],[750,10]]},"951":{"position":[[342,10]]},"967":{"position":[[19,10]]},"981":{"position":[[8388,10],[8413,10]]},"1027":{"position":[[802,10]]},"1033":{"position":[[1771,10]]},"1210":{"position":[[360,11]]},"1286":{"position":[[219,11],[816,11]]},"1308":{"position":[[18,10],[270,9],[357,10],[400,11]]},"1310":{"position":[[12,10],[86,10],[160,10],[400,10],[443,11]]},"1322":{"position":[[42,10],[97,10],[260,11]]},"1324":{"position":[[21,19],[111,7]]},"1471":{"position":[[236,10],[314,10],[469,11]]},"1473":{"position":[[154,10]]},"1498":{"position":[[82,11]]},"1504":{"position":[[87,10]]}}}],["encryptionconfig",{"_index":2180,"t":{"1471":{"position":[[78,16]]},"1473":{"position":[[78,16]]}}}],["encryptionconfigur",{"_index":1914,"t":{"1322":{"position":[[292,26]]}}}],["end",{"_index":1196,"t":{"1138":{"position":[[599,3]]}}}],["endpoint",{"_index":529,"t":{"908":{"position":[[29,8]]},"920":{"position":[[2019,8]]},"937":{"position":[[1625,8],[1652,8]]},"954":{"position":[[23,8],[767,8],[830,8]]},"981":{"position":[[3776,8],[4964,8],[4987,8],[5040,8],[5098,8],[6952,8],[8475,8]]},"1006":{"position":[[58,8],[170,8]]},"1008":{"position":[[19,8],[131,8],[424,8],[841,8]]},"1025":{"position":[[90,8]]},"1035":{"position":[[195,8]]},"1152":{"position":[[58,9],[280,9],[694,9]]},"1156":{"position":[[90,9],[453,9]]},"1158":{"position":[[90,9],[285,9]]}}}],["endpoint=\"mysql://username:password@tcp(hostname:3306)/databas",{"_index":905,"t":{"1025":{"position":[[309,63],[534,63]]},"1027":{"position":[[287,63],[512,63]]},"1080":{"position":[[554,63]]}}}],["endpoint=/run/k3s/containerd/containerd.sock",{"_index":1766,"t":{"1288":{"position":[[3525,44]]}}}],["endpoint=unix:///run/k3s/containerd/containerd.sock",{"_index":2262,"t":{"1548":{"position":[[1062,51],[2285,51]]},"1560":{"position":[[1253,51],[2476,51]]}}}],["enforc",{"_index":1340,"t":{"1210":{"position":[[1296,8],[1318,7],[1904,9]]},"1278":{"position":[[310,7]]},"1280":{"position":[[622,8],[644,7]]},"1292":{"position":[[311,7]]}}}],["ensur",{"_index":1652,"t":{"1282":{"position":[[1141,6]]},"1292":{"position":[[0,6],[135,7]]},"1294":{"position":[[0,6]]},"1296":{"position":[[0,6]]},"1298":{"position":[[0,6],[122,7]]},"1300":{"position":[[0,6],[161,7]]},"1302":{"position":[[0,6],[160,7]]},"1304":{"position":[[0,6]]},"1306":{"position":[[0,6]]},"1308":{"position":[[0,6]]},"1310":{"position":[[0,6],[125,6]]},"1312":{"position":[[0,6],[123,6]]},"1314":{"position":[[0,6]]},"1316":{"position":[[0,6],[279,7]]},"1318":{"position":[[0,6]]},"1368":{"position":[[1607,6]]},"1392":{"position":[[333,6]]},"1441":{"position":[[235,6]]},"1443":{"position":[[194,6]]},"1463":{"position":[[463,6]]},"1490":{"position":[[162,6]]},"1495":{"position":[[144,6]]},"1498":{"position":[[357,6]]},"1500":{"position":[[246,6]]},"1502":{"position":[[271,6]]},"1504":{"position":[[423,6]]},"1506":{"position":[[249,6]]},"1508":{"position":[[281,6]]},"1510":{"position":[[380,6]]},"1518":{"position":[[79,6]]},"1586":{"position":[[26,6]]},"1598":{"position":[[77,8]]},"1602":{"position":[[26,6]]},"1632":{"position":[[26,6]]}}}],["enterpris",{"_index":1257,"t":{"1168":{"position":[[61,10]]}}}],["entri",{"_index":126,"t":{"838":{"position":[[958,7],[1122,7]]}}}],["env",{"_index":258,"t":{"844":{"position":[[917,4]]},"931":{"position":[[1265,4]]},"933":{"position":[[999,4]]}}}],["environ",{"_index":305,"t":{"854":{"position":[[148,11]]},"1284":{"position":[[224,12]]},"1441":{"position":[[97,12]]},"1618":{"position":[[124,11]]}}}],["eol",{"_index":1978,"t":{"1358":{"position":[[205,3]]}}}],["ephemer",{"_index":1593,"t":{"1280":{"position":[[1690,11],[2831,11]]}}}],["equal",{"_index":2072,"t":{"1392":{"position":[[2099,5]]},"1398":{"position":[[362,5]]},"1406":{"position":[[251,5]]},"1449":{"position":[[329,5]]},"1480":{"position":[[355,5]]},"1482":{"position":[[423,5]]},"1493":{"position":[[314,5]]},"1495":{"position":[[349,5]]},"1500":{"position":[[2057,5]]},"1506":{"position":[[2060,5]]},"1508":{"position":[[2092,5]]},"1529":{"position":[[280,5]]},"1531":{"position":[[295,5]]},"1533":{"position":[[259,5]]},"1535":{"position":[[228,5]]},"1542":{"position":[[790,5]]},"1548":{"position":[[586,5]]}}}],["err",{"_index":2042,"t":{"1392":{"position":[[508,3]]},"1463":{"position":[[638,3]]},"1498":{"position":[[532,3]]},"1500":{"position":[[421,3]]},"1502":{"position":[[446,3]]},"1504":{"position":[[598,3]]},"1506":{"position":[[424,3]]},"1508":{"position":[[456,3]]},"1510":{"position":[[555,3]]}}}],["error",{"_index":563,"t":{"920":{"position":[[551,5],[1937,5]]},"981":{"position":[[562,5],[8316,5]]},"1502":{"position":[[2102,6],[2132,5],[2342,6],[2372,5],[2582,6],[2612,5]]},"1508":{"position":[[2147,6],[2177,5]]}}}],["esac",{"_index":2063,"t":{"1392":{"position":[[1578,4],[2017,4]]},"1463":{"position":[[1708,4],[2147,4]]},"1498":{"position":[[1602,4],[2041,4]]},"1500":{"position":[[1491,4],[1930,4]]},"1502":{"position":[[1516,4],[1955,4]]},"1504":{"position":[[1668,4],[2107,4]]},"1506":{"position":[[1494,4],[1933,4]]},"1508":{"position":[[1526,4],[1965,4]]},"1510":{"position":[[1625,4],[2064,4]]}}}],["escal",{"_index":2301,"t":{"1583":{"position":[[75,8]]}}}],["esgz",{"_index":442,"t":{"880":{"position":[[207,6],[400,4]]}}}],["estargz",{"_index":430,"t":{"878":{"position":[[214,8],[273,13],[319,7],[348,7],[427,7]]},"880":{"position":[[95,7],[139,7],[346,7]]}}}],["etc",{"_index":181,"t":{"838":{"position":[[2183,6]]}}}],["etc/cni/net.d/10",{"_index":1125,"t":{"1119":{"position":[[315,17],[538,17]]}}}],["etc/kubernetes/admin.conf",{"_index":2075,"t":{"1398":{"position":[[148,26]]}}}],["etc/kubernetes/manifests/etcd.yaml",{"_index":2030,"t":{"1384":{"position":[[152,35]]},"1386":{"position":[[158,35]]},"1498":{"position":[[137,35]]},"1500":{"position":[[63,35]]},"1502":{"position":[[63,35]]},"1504":{"position":[[179,35]]},"1506":{"position":[[63,35]]},"1508":{"position":[[63,35]]},"1510":{"position":[[186,35]]}}}],["etc/kubernetes/manifests/kub",{"_index":2024,"t":{"1372":{"position":[[152,30]]},"1374":{"position":[[158,30]]},"1376":{"position":[[152,30]]},"1378":{"position":[[158,30]]},"1380":{"position":[[152,30]]},"1382":{"position":[[158,30]]},"1415":{"position":[[69,30]]},"1417":{"position":[[155,30]]},"1419":{"position":[[69,30]]},"1421":{"position":[[79,30]]},"1423":{"position":[[173,30]]},"1425":{"position":[[176,30]]},"1427":{"position":[[69,30]]},"1429":{"position":[[69,30]]},"1431":{"position":[[69,30]]},"1433":{"position":[[163,30]]},"1435":{"position":[[69,30]]},"1437":{"position":[[69,30]]},"1439":{"position":[[69,30]]},"1441":{"position":[[159,30]]},"1443":{"position":[[69,30]]},"1445":{"position":[[162,30]]},"1447":{"position":[[69,30]]},"1449":{"position":[[69,30]]},"1451":{"position":[[79,30]]},"1453":{"position":[[79,30]]},"1455":{"position":[[79,30]]},"1457":{"position":[[79,30]]},"1459":{"position":[[69,30]]},"1461":{"position":[[79,30]]},"1463":{"position":[[173,30]]},"1465":{"position":[[159,30]]},"1467":{"position":[[159,30]]},"1469":{"position":[[173,30]]},"1471":{"position":[[150,30]]},"1475":{"position":[[69,30]]},"1478":{"position":[[77,30]]},"1480":{"position":[[77,30]]},"1482":{"position":[[77,30]]},"1484":{"position":[[77,30]]},"1486":{"position":[[77,30]]},"1488":{"position":[[87,30]]},"1490":{"position":[[77,30]]},"1493":{"position":[[68,30]]},"1495":{"position":[[68,30]]}}}],["etc/kubernetes/pki",{"_index":2084,"t":{"1408":{"position":[[151,20]]}}}],["etc/kubernetes/pki/*.crt",{"_index":2087,"t":{"1410":{"position":[[145,25]]}}}],["etc/kubernetes/pki/*.key",{"_index":2089,"t":{"1412":{"position":[[145,25]]}}}],["etc/rancher/k3",{"_index":1218,"t":{"1148":{"position":[[62,17]]}}}],["etc/rancher/k3s/config.yaml",{"_index":550,"t":{"920":{"position":[[187,31]]},"981":{"position":[[198,31]]},"1093":{"position":[[74,28]]},"1095":{"position":[[35,28]]},"1097":{"position":[[37,28]]},"1117":{"position":[[251,40]]},"1194":{"position":[[76,28]]}}}],["etc/rancher/k3s/config.yaml.d/*.yaml",{"_index":1066,"t":{"1095":{"position":[[66,37]]}}}],["etc/rancher/k3s/k3s.yaml",{"_index":502,"t":{"896":{"position":[[418,25]]},"1000":{"position":[[0,25],[376,25],[446,25]]},"1002":{"position":[[2,25]]},"1240":{"position":[[377,27]]}}}],["etc/rancher/k3s/registries.yaml",{"_index":533,"t":{"908":{"position":[[234,34]]},"920":{"position":[[2495,35]]},"981":{"position":[[7428,35]]},"1156":{"position":[[28,33]]},"1158":{"position":[[28,33]]}}}],["etc/rancher/nod",{"_index":495,"t":{"894":{"position":[[576,17],[781,18]]}}}],["etc/rancher/node/password",{"_index":492,"t":{"894":{"position":[[393,26]]}}}],["etc/ssl",{"_index":640,"t":{"929":{"position":[[981,8]]}}}],["etc/ssl/certs/intermedi",{"_index":642,"t":{"929":{"position":[[1077,27]]}}}],["etc/ssl/certs/root",{"_index":641,"t":{"929":{"position":[[1050,19]]}}}],["etc/ssl/private/intermedi",{"_index":643,"t":{"929":{"position":[[1112,29]]}}}],["etc/sysctl.d/90",{"_index":1550,"t":{"1276":{"position":[[286,16],[362,16]]}}}],["etc/systemd",{"_index":289,"t":{"852":{"position":[[352,19]]}}}],["etc/systemd/system",{"_index":1428,"t":{"1244":{"position":[[852,19]]}}}],["etc/systemd/system/k3",{"_index":59,"t":{"836":{"position":[[307,23]]}}}],["etc/systemd/system/k3s.servic",{"_index":1169,"t":{"1129":{"position":[[637,31]]},"1284":{"position":[[1131,32]]}}}],["etc/systemd/system/k3s.service.env",{"_index":58,"t":{"836":{"position":[[271,35]]}}}],["etc/systemd/system/kubelet.service.d/10",{"_index":2233,"t":{"1521":{"position":[[150,40]]},"1523":{"position":[[156,40]]},"1542":{"position":[[185,40]]},"1544":{"position":[[171,40]]},"1546":{"position":[[214,40]]},"1548":{"position":[[161,40]]},"1550":{"position":[[198,40]]},"1552":{"position":[[183,40]]},"1554":{"position":[[184,40]]},"1556":{"position":[[66,40]]},"1558":{"position":[[182,40]]},"1560":{"position":[[304,40]]},"1562":{"position":[[238,40]]},"1564":{"position":[[66,40]]},"1566":{"position":[[487,40]]}}}],["etcd",{"_index":195,"t":{"840":{"position":[[15,4],[73,4]]},"846":{"position":[[179,4]]},"890":{"position":[[170,4],[297,5]]},"896":{"position":[[671,4],[724,4]]},"925":{"position":[[310,5]]},"929":{"position":[[422,8],[431,4]]},"937":{"position":[[44,4],[348,4],[367,5],[1078,4],[1106,4],[1116,4],[1209,4],[1257,4],[1482,4],[1497,4],[1535,9],[1573,4],[1598,4],[1617,4],[1644,4],[1691,4],[1732,4],[1767,4],[1802,4],[1828,4],[1875,4],[1903,4],[1925,4],[2058,4],[2142,4],[2201,4],[2237,4],[2276,4],[2311,4],[2337,4],[2422,4],[2447,4],[2479,4],[2526,4],[2550,4],[2581,4],[2800,4],[2824,4]]},"951":{"position":[[60,4]]},"954":{"position":[[318,4],[351,4],[372,4],[404,4],[414,4],[446,4],[451,16],[517,4],[613,4],[665,4],[736,4],[759,4],[822,4],[879,4],[924,4],[983,4],[1046,4],[1082,4],[1142,4],[1176,4],[1210,4]]},"956":{"position":[[351,4]]},"975":{"position":[[8,4],[23,4]]},"981":{"position":[[3140,4],[3426,4],[3469,4],[3804,5],[4268,4],[4300,4],[4353,4],[4399,4],[4416,4],[4467,4],[4492,4],[4534,5],[4553,4],[4689,4],[4769,4],[4868,4],[4905,4],[4921,4],[4956,4],[5032,4],[5109,4],[5179,4],[5246,4],[5317,4],[5360,4],[5450,4],[5488,4],[5535,4]]},"1004":{"position":[[40,4],[125,4],[313,4],[417,4],[444,4],[474,14],[489,4],[516,4],[532,4],[543,4],[573,5],[640,9]]},"1006":{"position":[[36,11],[224,4]]},"1008":{"position":[[98,4],[824,4],[948,4],[972,4]]},"1014":{"position":[[143,4]]},"1016":{"position":[[7,4],[38,4]]},"1033":{"position":[[7,4],[74,4],[103,4],[282,4],[374,4]]},"1035":{"position":[[81,27],[140,4],[249,9]]},"1065":{"position":[[174,4]]},"1127":{"position":[[165,12],[178,7]]},"1170":{"position":[[231,4],[262,4]]},"1172":{"position":[[331,4]]},"1174":{"position":[[52,4]]},"1176":{"position":[[90,4]]},"1184":{"position":[[43,22]]},"1186":{"position":[[99,18],[134,4],[168,4],[187,7]]},"1188":{"position":[[7,4],[196,11],[208,4]]},"1190":{"position":[[73,4],[132,4],[220,4],[378,4]]},"1192":{"position":[[74,4]]},"1194":{"position":[[58,4]]},"1246":{"position":[[74,4]]},"1258":{"position":[[153,4],[248,4]]},"1260":{"position":[[180,4]]},"1270":{"position":[[45,4]]},"1274":{"position":[[70,4]]},"1288":{"position":[[547,4],[621,4],[694,4],[766,4]]},"1306":{"position":[[291,5]]},"1308":{"position":[[87,6]]},"1310":{"position":[[79,6]]},"1345":{"position":[[574,30]]},"1392":{"position":[[33,4],[59,4],[146,6],[189,4],[369,4],[575,4],[825,5],[1719,4],[1739,4]]},"1394":{"position":[[43,4],[69,4],[156,6],[199,4]]},"1423":{"position":[[1303,4],[1368,4],[1432,4],[1495,4]]},"1425":{"position":[[1251,4],[1316,4],[1380,4],[1443,4]]},"1427":{"position":[[1120,4],[1185,4],[1249,4],[1312,4]]},"1429":{"position":[[1069,4],[1134,4],[1198,4],[1261,4]]},"1431":{"position":[[1082,4],[1147,4],[1211,4],[1274,4]]},"1433":{"position":[[1195,4],[1260,4],[1324,4],[1387,4]]},"1435":{"position":[[1156,4],[1221,4],[1285,4],[1348,4]]},"1439":{"position":[[1229,4],[1294,4],[1358,4],[1421,4]]},"1441":{"position":[[1210,4],[1275,4],[1339,4],[1402,4]]},"1443":{"position":[[1106,4],[1171,4],[1235,4],[1298,4]]},"1445":{"position":[[1222,4],[1287,4],[1351,4],[1414,4]]},"1447":{"position":[[1087,4],[1152,4],[1216,4],[1279,4]]},"1449":{"position":[[1002,4],[1067,4],[1131,4],[1194,4]]},"1459":{"position":[[1177,4],[1242,4],[1306,4],[1369,4]]},"1463":{"position":[[118,5],[257,4],[301,4],[351,4],[499,4],[705,4],[955,5],[1849,4],[1869,4],[2223,4],[2256,4],[2299,4],[2319,4]]},"1465":{"position":[[1219,4],[1284,4],[1348,4],[1411,4]]},"1467":{"position":[[1135,4],[1200,4],[1264,4],[1327,4]]},"1469":{"position":[[118,5],[257,4],[302,4],[427,5],[461,4],[1141,4],[1206,4],[1270,4],[1333,4]]},"1498":{"position":[[37,4],[109,4],[393,4],[599,4],[849,5],[1743,4],[1763,4]]},"1500":{"position":[[35,4],[282,4],[488,4],[738,5],[1632,4],[1652,4]]},"1502":{"position":[[35,4],[307,4],[513,4],[763,5],[1657,4],[1677,4]]},"1504":{"position":[[37,4],[122,4],[151,4],[459,4],[665,4],[915,5],[1809,4],[1829,4]]},"1506":{"position":[[35,4],[285,4],[491,4],[741,5],[1635,4],[1655,4]]},"1508":{"position":[[35,4],[317,4],[523,4],[773,5],[1667,4],[1687,4]]},"1510":{"position":[[51,4],[129,4],[158,4],[416,4],[622,4],[872,5],[1766,4],[1786,4]]},"1542":{"position":[[1486,4],[1551,4],[1615,4],[1678,4]]},"1544":{"position":[[1500,4],[1565,4],[1629,4],[1692,4]]},"1546":{"position":[[1615,4],[1680,4],[1744,4],[1807,4]]}}}],["etcd/peer",{"_index":633,"t":{"929":{"position":[[440,9],[457,9]]}}}],["etcd/serv",{"_index":634,"t":{"929":{"position":[[474,11],[493,11]]}}}],["etcd3、mysql",{"_index":13,"t":{"823":{"position":[[87,11]]}}}],["etcd:etcd",{"_index":2073,"t":{"1394":{"position":[[252,9]]}}}],["etcd_auto_tl",{"_index":2211,"t":{"1502":{"position":[[2025,15],[2059,15]]}}}],["etcd_url",{"_index":204,"t":{"840":{"position":[[250,11]]}}}],["etcd_url=\"https://github.com/etcd",{"_index":198,"t":{"840":{"position":[[124,33]]}}}],["etcd_vers",{"_index":200,"t":{"840":{"position":[[205,15]]}}}],["etcd_version=\"v3.5.5",{"_index":197,"t":{"840":{"position":[[102,21]]}}}],["etcdctl",{"_index":194,"t":{"840":{"position":[[0,7],[38,8],[54,7],[93,8],[325,7],[364,8],[378,7]]}}}],["etcd、mysql、postgr",{"_index":742,"t":{"954":{"position":[[64,19]]}}}],["etcd）、api",{"_index":1493,"t":{"1266":{"position":[[45,9]]}}}],["evalu",{"_index":1987,"t":{"1368":{"position":[[221,8],[911,9],[1594,9]]}}}],["even",{"_index":1821,"t":{"1296":{"position":[[289,4]]},"1306":{"position":[[339,4]]}}}],["event",{"_index":1180,"t":{"1134":{"position":[[254,5]]},"1298":{"position":[[192,7]]}}}],["eventratelimit",{"_index":2156,"t":{"1433":{"position":[[522,16]]}}}],["eventrecordqp",{"_index":2281,"t":{"1558":{"position":[[79,14]]}}}],["everyth",{"_index":1539,"t":{"1272":{"position":[[1219,10]]}}}],["evict",{"_index":1769,"t":{"1288":{"position":[[3648,8],[3705,8]]},"1548":{"position":[[1165,8],[1222,8],[2388,8],[2445,8]]},"1560":{"position":[[1356,8],[1413,8],[2579,8],[2636,8]]}}}],["exampl",{"_index":1571,"t":{"1280":{"position":[[384,7],[1333,7],[2517,7]]},"1282":{"position":[[272,7]]},"1292":{"position":[[580,7]]},"1294":{"position":[[679,7]]},"1296":{"position":[[560,7]]},"1298":{"position":[[400,7]]},"1300":{"position":[[274,8],[575,7]]},"1302":{"position":[[561,7]]},"1304":{"position":[[785,7]]},"1306":{"position":[[407,7],[578,7]]},"1312":{"position":[[652,7]]},"1316":{"position":[[703,7]]},"1372":{"position":[[133,8]]},"1374":{"position":[[133,8]]},"1376":{"position":[[133,8]]},"1378":{"position":[[133,8]]},"1380":{"position":[[133,8]]},"1382":{"position":[[133,8]]},"1384":{"position":[[133,8]]},"1386":{"position":[[133,8]]},"1388":{"position":[[133,8]]},"1390":{"position":[[133,8]]},"1392":{"position":[[227,8]]},"1394":{"position":[[237,8]]},"1396":{"position":[[133,8]]},"1398":{"position":[[123,8]]},"1400":{"position":[[123,8]]},"1402":{"position":[[123,8]]},"1404":{"position":[[123,8]]},"1406":{"position":[[123,8]]},"1408":{"position":[[123,8]]},"1410":{"position":[[123,8]]},"1412":{"position":[[123,8]]},"1427":{"position":[[227,7]]},"1431":{"position":[[219,7]]},"1451":{"position":[[269,8]]},"1453":{"position":[[239,8]]},"1455":{"position":[[233,8]]},"1457":{"position":[[227,8]]},"1461":{"position":[[249,8]]},"1471":{"position":[[303,8]]},"1478":{"position":[[233,8]]},"1484":{"position":[[265,8]]},"1521":{"position":[[131,8]]},"1523":{"position":[[131,8]]},"1525":{"position":[[121,8]]},"1527":{"position":[[121,8]]},"1529":{"position":[[121,8]]},"1531":{"position":[[121,8]]},"1542":{"position":[[403,8]]},"1544":{"position":[[389,8]]},"1546":{"position":[[445,8]]},"1548":{"position":[[375,8]]},"1550":{"position":[[432,8]]},"1552":{"position":[[409,8]]},"1554":{"position":[[409,8]]},"1556":{"position":[[283,8]]},"1558":{"position":[[377,8]]},"1560":{"position":[[593,8]]},"1562":{"position":[[459,8]]},"1564":{"position":[[313,8]]},"1566":{"position":[[1018,8]]},"1628":{"position":[[119,7]]}}}],["example.com",{"_index":1198,"t":{"1138":{"position":[[640,14]]}}}],["example_manifest",{"_index":1185,"t":{"1138":{"position":[[404,18],[465,19]]}}}],["exce",{"_index":1850,"t":{"1304":{"position":[[376,7]]}}}],["except",{"_index":1509,"t":{"1272":{"position":[[422,10]]}}}],["exec",{"_index":791,"t":{"969":{"position":[[774,4]]},"1121":{"position":[[487,4]]},"1244":{"position":[[1173,4],[1651,4]]}}}],["execstart=/usr/local/bin/k3",{"_index":290,"t":{"852":{"position":[[399,28]]},"1284":{"position":[[1164,28]]}}}],["execut",{"_index":2071,"t":{"1392":{"position":[[2031,10]]},"1463":{"position":[[2161,10]]},"1498":{"position":[[2055,10]]},"1500":{"position":[[1944,10]]},"1502":{"position":[[1969,10]]},"1504":{"position":[[2121,10]]},"1506":{"position":[[1947,10]]},"1508":{"position":[[1979,10]]},"1510":{"position":[[2078,10]]},"1542":{"position":[[133,10]]},"1544":{"position":[[119,10]]},"1566":{"position":[[435,10]]}}}],["exempt",{"_index":1342,"t":{"1210":{"position":[[1430,11]]},"1280":{"position":[[756,11]]}}}],["exhaust",{"_index":1852,"t":{"1304":{"position":[[475,7]]}}}],["exist",{"_index":1647,"t":{"1282":{"position":[[644,5]]},"1292":{"position":[[181,8]]}}}],["existing_k3s_arg",{"_index":1981,"t":{"1360":{"position":[[296,19],[449,19],[579,19]]}}}],["existing_k3s_env",{"_index":1980,"t":{"1360":{"position":[[269,18],[422,18],[552,18]]}}}],["exit",{"_index":1546,"t":{"1276":{"position":[[54,4]]}}}],["expect",{"_index":1910,"t":{"1320":{"position":[[187,12]]},"1392":{"position":[[2073,8]]},"1398":{"position":[[330,8]]},"1400":{"position":[[324,8],[374,8]]},"1402":{"position":[[321,8]]},"1404":{"position":[[334,8],[384,8]]},"1406":{"position":[[219,8]]},"1408":{"position":[[238,8]]},"1417":{"position":[[334,8]]},"1419":{"position":[[263,8]]},"1423":{"position":[[550,8]]},"1425":{"position":[[533,8]]},"1427":{"position":[[396,8]]},"1429":{"position":[[362,8]]},"1431":{"position":[[375,8]]},"1433":{"position":[[472,8]]},"1435":{"position":[[379,8]]},"1437":{"position":[[323,8]]},"1439":{"position":[[445,8]]},"1441":{"position":[[448,8]]},"1443":{"position":[[344,8]]},"1445":{"position":[[498,8]]},"1447":{"position":[[346,8]]},"1449":{"position":[[295,8]]},"1459":{"position":[[421,8]]},"1463":{"position":[[2203,8]]},"1465":{"position":[[477,8]]},"1467":{"position":[[432,8]]},"1469":{"position":[[441,8]]},"1480":{"position":[[321,8]]},"1482":{"position":[[363,8]]},"1484":{"position":[[460,8]]},"1486":{"position":[[377,8]]},"1490":{"position":[[272,8]]},"1493":{"position":[[280,8]]},"1495":{"position":[[312,8]]},"1498":{"position":[[2094,8]]},"1500":{"position":[[1983,8]]},"1502":{"position":[[2008,8]]},"1504":{"position":[[2160,8]]},"1506":{"position":[[1986,8]]},"1508":{"position":[[2018,8]]},"1510":{"position":[[2117,8]]},"1525":{"position":[[254,8]]},"1527":{"position":[[345,8]]},"1529":{"position":[[254,8]]},"1531":{"position":[[263,8]]},"1533":{"position":[[193,8]]},"1535":{"position":[[196,8]]},"1542":{"position":[[751,8]]},"1544":{"position":[[747,8]]},"1546":{"position":[[841,8]]},"1548":{"position":[[547,8]]},"1560":{"position":[[741,8]]}}}],["experiment",{"_index":236,"t":{"844":{"position":[[418,12]]},"920":{"position":[[3194,14],[3243,14],[3336,14]]},"981":{"position":[[6879,14],[8447,14],[8514,14],[8563,14]]}}}],["explain",{"_index":1792,"t":{"1290":{"position":[[89,10]]},"1368":{"position":[[1384,7]]}}}],["explicit",{"_index":1900,"t":{"1318":{"position":[[497,8]]},"1577":{"position":[[33,8]]}}}],["export",{"_index":879,"t":{"1000":{"position":[[225,6]]},"1252":{"position":[[53,8]]}}}],["expos",{"_index":749,"t":{"954":{"position":[[323,6]]},"981":{"position":[[4273,6],[4293,6]]},"1276":{"position":[[205,7]]}}}],["extend",{"_index":1841,"t":{"1304":{"position":[[114,9]]}}}],["extern",{"_index":534,"t":{"910":{"position":[[58,8]]},"920":{"position":[[2625,8],[2672,8]]},"951":{"position":[[300,8]]},"963":{"position":[[120,8]]},"969":{"position":[[503,8]]},"981":{"position":[[856,8],[2091,8],[2125,8],[7687,8],[7734,8]]},"1115":{"position":[[540,8],[609,8]]},"1129":{"position":[[173,8],[251,8],[281,8],[587,8]]},"1232":{"position":[[117,8],[207,8]]},"1586":{"position":[[74,8]]}}}],["externalip",{"_index":1393,"t":{"1232":{"position":[[149,10]]}}}],["extra",{"_index":391,"t":{"869":{"position":[[468,5]]},"1288":{"position":[[1406,5],[1436,5]]},"1423":{"position":[[2211,5],[2241,5]]},"1425":{"position":[[2159,5],[2189,5]]},"1427":{"position":[[2028,5],[2058,5]]},"1429":{"position":[[1977,5],[2007,5]]},"1431":{"position":[[1990,5],[2020,5]]},"1433":{"position":[[2103,5],[2133,5]]},"1435":{"position":[[2064,5],[2094,5]]},"1439":{"position":[[2137,5],[2167,5]]},"1441":{"position":[[2118,5],[2148,5]]},"1443":{"position":[[2014,5],[2044,5]]},"1445":{"position":[[2130,5],[2160,5]]},"1447":{"position":[[1995,5],[2025,5]]},"1449":{"position":[[1910,5],[1940,5]]},"1459":{"position":[[2085,5],[2115,5]]},"1465":{"position":[[2127,5],[2157,5]]},"1467":{"position":[[2043,5],[2073,5]]},"1469":{"position":[[2049,5],[2079,5]]},"1542":{"position":[[2394,5],[2424,5]]},"1544":{"position":[[2408,5],[2438,5]]},"1546":{"position":[[2523,5],[2553,5]]}}}],["f",{"_index":321,"t":{"856":{"position":[[76,1]]},"1101":{"position":[[203,1]]},"1103":{"position":[[502,1],[530,1]]},"1109":{"position":[[250,1],[362,1],[390,1]]},"1334":{"position":[[334,1],[361,1]]},"1336":{"position":[[141,1],[299,1],[326,1]]},"1350":{"position":[[143,1]]}}}],["fabricmanag",{"_index":230,"t":{"844":{"position":[[197,13]]}}}],["factor",{"_index":2010,"t":{"1368":{"position":[[1513,6]]}}}],["fail",{"_index":419,"t":{"873":{"position":[[400,14]]},"1091":{"position":[[718,6]]},"1138":{"position":[[279,6],[305,6]]},"1288":{"position":[[3775,4]]},"1368":{"position":[[634,7]]},"1548":{"position":[[1292,4],[2515,4]]},"1560":{"position":[[1483,4],[2706,4]]}}}],["fals",{"_index":750,"t":{"954":{"position":[[356,13]]},"967":{"position":[[30,5]]},"981":{"position":[[4344,6]]},"1059":{"position":[[948,5]]},"1061":{"position":[[629,5]]},"1093":{"position":[[492,6]]},"1280":{"position":[[1461,5],[1507,5],[1715,5],[1744,5],[1773,5],[2014,5],[2648,5],[2680,5],[2856,5],[2871,5],[2886,5],[3099,5],[3745,5]]},"1318":{"position":[[603,5]]},"1392":{"position":[[478,7],[1846,9]]},"1449":{"position":[[338,7]]},"1463":{"position":[[608,7],[1976,9]]},"1480":{"position":[[364,7]]},"1482":{"position":[[432,7]]},"1493":{"position":[[323,7]]},"1498":{"position":[[502,7],[1870,9]]},"1500":{"position":[[391,7],[1759,9]]},"1502":{"position":[[174,6],[416,7],[1784,9]]},"1504":{"position":[[568,7],[1936,9]]},"1506":{"position":[[394,7],[1762,9]]},"1508":{"position":[[179,6],[426,7],[1794,9],[2101,7]]},"1510":{"position":[[525,7],[1893,9]]},"1542":{"position":[[117,6],[799,7]]},"1577":{"position":[[254,5]]}}}],["fbf3f726cbc6_0",{"_index":177,"t":{"838":{"position":[[2126,14]]}}}],["fc",{"_index":1922,"t":{"1328":{"position":[[178,2]]},"1558":{"position":[[460,2]]},"1566":{"position":[[1101,2]]}}}],["featur",{"_index":264,"t":{"844":{"position":[[1071,7]]},"1294":{"position":[[429,8]]},"1423":{"position":[[1533,7]]},"1425":{"position":[[1481,7]]},"1427":{"position":[[1350,7]]},"1429":{"position":[[1299,7]]},"1431":{"position":[[1312,7]]},"1433":{"position":[[1425,7]]},"1435":{"position":[[1386,7]]},"1439":{"position":[[1459,7]]},"1441":{"position":[[1440,7]]},"1443":{"position":[[1336,7]]},"1445":{"position":[[1452,7]]},"1447":{"position":[[1317,7]]},"1449":{"position":[[1232,7]]},"1459":{"position":[[1407,7]]},"1465":{"position":[[1449,7]]},"1467":{"position":[[1365,7]]},"1469":{"position":[[1371,7]]},"1480":{"position":[[1647,7]]},"1482":{"position":[[1715,7]]},"1484":{"position":[[1800,7]]},"1486":{"position":[[1697,7]]},"1488":{"position":[[182,7],[256,7]]},"1542":{"position":[[1716,7]]},"1544":{"position":[[1730,7]]},"1546":{"position":[[1845,7]]},"1564":{"position":[[208,7]]}}}],["fewer",{"_index":2292,"t":{"1569":{"position":[[169,5]]}}}],["ffd6",{"_index":147,"t":{"838":{"position":[[1408,4],[1725,4]]}}}],["fi",{"_index":2070,"t":{"1392":{"position":[[2022,2]]},"1398":{"position":[[326,3]]},"1400":{"position":[[320,3]]},"1402":{"position":[[317,3]]},"1404":{"position":[[330,3]]},"1463":{"position":[[2152,2]]},"1498":{"position":[[2046,2]]},"1500":{"position":[[1935,2]]},"1502":{"position":[[1960,2]]},"1504":{"position":[[2112,2]]},"1506":{"position":[[1938,2]]},"1508":{"position":[[1970,2]]},"1510":{"position":[[2069,2]]},"1527":{"position":[[341,3]]},"1542":{"position":[[747,3]]},"1544":{"position":[[743,3]]},"1546":{"position":[[837,3]]}}}],["field",{"_index":1902,"t":{"1318":{"position":[[594,5],[839,5]]}}}],["file",{"_index":519,"t":{"902":{"position":[[63,4]]},"920":{"position":[[125,5],[134,4],[172,4],[441,4],[502,4],[568,4],[669,4],[696,4],[1463,4],[2480,4],[2775,4],[2947,4],[3032,4]]},"956":{"position":[[82,4],[219,4]]},"981":{"position":[[136,5],[145,4],[183,4],[452,4],[513,4],[579,4],[2475,4],[2712,4],[2733,4],[2906,4],[2927,4],[3326,4],[3946,4],[4072,4],[4189,4],[6788,4],[7413,4],[7837,4],[8009,4],[8094,4]]},"1059":{"position":[[886,4]]},"1093":{"position":[[622,5],[631,4]]},"1156":{"position":[[301,4],[355,4],[407,4],[560,4],[614,4],[666,4]]},"1272":{"position":[[938,4]]},"1276":{"position":[[274,4]]},"1280":{"position":[[311,4],[2431,4],[2542,5]]},"1284":{"position":[[553,4]]},"1286":{"position":[[62,5]]},"1300":{"position":[[130,6],[155,5],[299,4],[345,5]]},"1302":{"position":[[129,6],[154,5],[285,4],[331,5]]},"1372":{"position":[[72,4]]},"1374":{"position":[[72,4]]},"1376":{"position":[[72,4]]},"1378":{"position":[[72,4]]},"1380":{"position":[[72,4]]},"1382":{"position":[[72,4]]},"1384":{"position":[[72,4]]},"1386":{"position":[[72,4]]},"1388":{"position":[[72,4]]},"1390":{"position":[[72,4]]},"1392":{"position":[[956,8],[1283,8],[1526,5],[1773,4],[1786,7],[1879,4],[1897,7],[2009,7]]},"1396":{"position":[[72,4]]},"1398":{"position":[[62,4]]},"1400":{"position":[[62,4]]},"1402":{"position":[[62,4]]},"1404":{"position":[[62,4]]},"1406":{"position":[[62,4]]},"1408":{"position":[[62,4]]},"1410":{"position":[[62,4]]},"1412":{"position":[[62,4]]},"1415":{"position":[[64,4]]},"1417":{"position":[[150,4],[365,5]]},"1419":{"position":[[64,4]]},"1421":{"position":[[74,4]]},"1423":{"position":[[168,4],[370,5],[417,5]]},"1425":{"position":[[171,4],[326,4]]},"1427":{"position":[[64,4]]},"1429":{"position":[[64,4]]},"1431":{"position":[[64,4]]},"1433":{"position":[[108,5],[158,4]]},"1435":{"position":[[64,4]]},"1437":{"position":[[64,4]]},"1439":{"position":[[64,4]]},"1441":{"position":[[154,4]]},"1443":{"position":[[64,4]]},"1445":{"position":[[157,4]]},"1447":{"position":[[64,4]]},"1449":{"position":[[64,4]]},"1451":{"position":[[74,4],[213,4]]},"1453":{"position":[[74,4]]},"1455":{"position":[[74,4]]},"1457":{"position":[[74,4]]},"1459":{"position":[[64,4],[279,4]]},"1461":{"position":[[74,4],[185,4],[218,4]]},"1463":{"position":[[168,4],[282,4],[343,5],[384,5],[1086,8],[1413,8],[1656,5],[1903,4],[1916,7],[2009,4],[2027,7],[2139,7]]},"1465":{"position":[[154,4],[275,4],[333,5],[379,5],[506,5],[546,5]]},"1467":{"position":[[154,4],[272,5],[314,5],[426,5],[462,5]]},"1469":{"position":[[168,4],[284,4],[326,5]]},"1471":{"position":[[95,5],[145,4],[293,5]]},"1473":{"position":[[95,5],[109,5]]},"1475":{"position":[[64,4]]},"1478":{"position":[[72,4]]},"1480":{"position":[[72,4]]},"1482":{"position":[[72,4]]},"1484":{"position":[[72,4],[200,4],[234,4],[454,5],[508,5]]},"1486":{"position":[[72,4],[180,4],[221,6],[371,5],[405,5]]},"1488":{"position":[[82,4]]},"1490":{"position":[[72,4]]},"1493":{"position":[[63,4],[114,4]]},"1495":{"position":[[63,4]]},"1498":{"position":[[132,4],[247,5],[278,5],[980,8],[1307,8],[1550,5],[1797,4],[1810,7],[1903,4],[1921,7],[2033,7],[2117,5],[2143,5],[2181,4],[2194,4],[2204,5],[2269,5],[2335,4],[2348,4]]},"1500":{"position":[[58,4],[869,8],[1196,8],[1439,5],[1686,4],[1699,7],[1792,4],[1810,7],[1922,7]]},"1502":{"position":[[58,4],[894,8],[1221,8],[1464,5],[1711,4],[1724,7],[1817,4],[1835,7],[1947,7],[2324,4],[2564,4],[2804,4]]},"1504":{"position":[[174,4],[303,5],[344,5],[1046,8],[1373,8],[1616,5],[1863,4],[1876,7],[1969,4],[1987,7],[2099,7],[2183,5],[2209,5],[2252,4],[2270,4],[2280,5],[2350,5],[2426,4],[2444,4]]},"1506":{"position":[[58,4],[872,8],[1199,8],[1442,5],[1689,4],[1702,7],[1795,4],[1813,7],[1925,7]]},"1508":{"position":[[58,4],[904,8],[1231,8],[1474,5],[1721,4],[1734,7],[1827,4],[1845,7],[1957,7],[2369,4]]},"1510":{"position":[[181,4],[301,5],[1003,8],[1330,8],[1573,5],[1820,4],[1833,7],[1926,4],[1944,7],[2056,7],[2146,5],[2192,4],[2208,5],[2276,5],[2344,4]]},"1516":{"position":[[49,4],[181,5]]},"1521":{"position":[[72,4]]},"1523":{"position":[[72,4]]},"1525":{"position":[[62,4]]},"1527":{"position":[[62,4]]},"1529":{"position":[[62,4]]},"1531":{"position":[[62,4]]},"1533":{"position":[[66,4],[102,5]]},"1535":{"position":[[95,5]]},"1537":{"position":[[80,4]]},"1539":{"position":[[80,4]]},"1542":{"position":[[52,5],[67,4],[180,4]]},"1544":{"position":[[52,5],[67,4],[166,4]]},"1546":{"position":[[52,5],[67,4],[145,5],[209,4],[384,5],[731,5],[871,5]]},"1548":{"position":[[52,5],[67,4],[156,4]]},"1550":{"position":[[52,5],[67,4],[193,4]]},"1552":{"position":[[62,5],[77,4],[178,4]]},"1554":{"position":[[62,5],[77,4],[179,4]]},"1556":{"position":[[61,4]]},"1558":{"position":[[52,5],[67,4],[177,4]]},"1560":{"position":[[52,5],[67,4],[126,4],[235,5],[299,4],[486,5],[532,5],[770,5],[810,5]]},"1562":{"position":[[62,5],[77,4],[233,4]]},"1564":{"position":[[61,4]]},"1566":{"position":[[52,5],[67,4],[482,4]]},"1618":{"position":[[100,6]]}}}],["file=$path_to_fil",{"_index":1177,"t":{"1131":{"position":[[575,18]]}}}],["file=/var/lib/rancher/k3s/agent/cli",{"_index":1759,"t":{"1288":{"position":[[3204,38]]},"1548":{"position":[[914,38],[2137,38]]},"1560":{"position":[[1105,38],[2328,38]]}}}],["file=/var/lib/rancher/k3s/agent/serv",{"_index":1787,"t":{"1288":{"position":[[4227,39],[4306,39]]},"1548":{"position":[[1752,39],[1822,39],[2975,39],[3045,39]]},"1560":{"position":[[1943,39],[2013,39],[3166,39],[3236,39]]}}}],["file=/var/lib/rancher/k3s/server/audit.yaml",{"_index":1317,"t":{"1210":{"position":[[546,44]]},"1284":{"position":[[982,44],[1322,44]]},"1286":{"position":[[405,44],[1028,44]]}}}],["file=/var/lib/rancher/k3s/server/etc/egress",{"_index":2142,"t":{"1423":{"position":[[1160,43]]},"1425":{"position":[[1108,43]]},"1427":{"position":[[977,43]]},"1429":{"position":[[926,43]]},"1431":{"position":[[939,43]]},"1433":{"position":[[1052,43]]},"1435":{"position":[[1013,43]]},"1439":{"position":[[1086,43]]},"1441":{"position":[[1067,43]]},"1443":{"position":[[963,43]]},"1445":{"position":[[1079,43]]},"1447":{"position":[[944,43]]},"1449":{"position":[[859,43]]},"1459":{"position":[[1034,43]]},"1465":{"position":[[1076,43]]},"1467":{"position":[[992,43]]},"1469":{"position":[[998,43]]},"1542":{"position":[[1343,43]]},"1544":{"position":[[1357,43]]},"1546":{"position":[[1472,43]]}}}],["file=/var/lib/rancher/k3s/server/psa.yaml",{"_index":1314,"t":{"1210":{"position":[[247,51],[425,42]]},"1280":{"position":[[234,42]]},"1286":{"position":[[284,42]]}}}],["file=/var/lib/rancher/k3s/server/tls/cli",{"_index":1701,"t":{"1288":{"position":[[415,43],[1120,43],[1198,43],[2397,43],[2470,43]]},"1423":{"position":[[1084,43],[1925,43],[2003,43]]},"1425":{"position":[[1032,43],[1873,43],[1951,43]]},"1427":{"position":[[901,43],[1742,43],[1820,43]]},"1429":{"position":[[850,43],[1691,43],[1769,43]]},"1431":{"position":[[863,43],[1704,43],[1782,43]]},"1433":{"position":[[976,43],[1817,43],[1895,43]]},"1435":{"position":[[937,43],[1778,43],[1856,43]]},"1439":{"position":[[1010,43],[1851,43],[1929,43]]},"1441":{"position":[[991,43],[1832,43],[1910,43]]},"1443":{"position":[[887,43],[1728,43],[1806,43]]},"1445":{"position":[[1003,43],[1844,43],[1922,43]]},"1447":{"position":[[868,43],[1709,43],[1787,43]]},"1449":{"position":[[783,43],[1624,43],[1702,43]]},"1459":{"position":[[958,43],[1799,43],[1877,43]]},"1465":{"position":[[1000,43],[1841,43],[1919,43]]},"1467":{"position":[[916,43],[1757,43],[1835,43]]},"1469":{"position":[[922,43],[1763,43],[1841,43]]},"1480":{"position":[[881,43],[976,43],[1065,43],[1153,43]]},"1482":{"position":[[949,43],[1044,43],[1133,43],[1221,43]]},"1484":{"position":[[1034,43],[1129,43],[1218,43],[1306,43]]},"1486":{"position":[[931,43],[1026,43],[1115,43],[1203,43]]},"1542":{"position":[[1267,43],[2108,43],[2186,43]]},"1544":{"position":[[1281,43],[2122,43],[2200,43]]},"1546":{"position":[[1396,43],[2237,43],[2315,43]]}}}],["file=/var/lib/rancher/k3s/server/tls/request",{"_index":1723,"t":{"1288":{"position":[[1331,44]]},"1423":{"position":[[2136,44]]},"1425":{"position":[[2084,44]]},"1427":{"position":[[1953,44]]},"1429":{"position":[[1902,44]]},"1431":{"position":[[1915,44]]},"1433":{"position":[[2028,44]]},"1435":{"position":[[1989,44]]},"1439":{"position":[[2062,44]]},"1441":{"position":[[2043,44]]},"1443":{"position":[[1939,44]]},"1445":{"position":[[2055,44]]},"1447":{"position":[[1920,44]]},"1449":{"position":[[1835,44]]},"1459":{"position":[[2010,44]]},"1465":{"position":[[2052,44]]},"1467":{"position":[[1968,44]]},"1469":{"position":[[1974,44]]},"1542":{"position":[[2319,44]]},"1544":{"position":[[2333,44]]},"1546":{"position":[[776,44],[916,44],[2448,44]]}}}],["file=/var/lib/rancher/k3s/server/tls/serv",{"_index":1735,"t":{"1288":{"position":[[1826,44],[1917,44],[2638,43]]},"1423":{"position":[[2692,44],[2774,44]]},"1425":{"position":[[2640,44],[2722,44]]},"1427":{"position":[[2509,44],[2591,44]]},"1429":{"position":[[2458,44],[2540,44]]},"1431":{"position":[[2471,44],[2553,44]]},"1433":{"position":[[2584,44],[2666,44]]},"1435":{"position":[[2545,44],[2627,44]]},"1439":{"position":[[2618,44],[2700,44]]},"1441":{"position":[[2599,44],[2681,44]]},"1443":{"position":[[2495,44],[2577,44]]},"1445":{"position":[[2611,44],[2693,44]]},"1447":{"position":[[2476,44],[2558,44]]},"1449":{"position":[[2391,44],[2473,44]]},"1459":{"position":[[2566,44],[2648,44]]},"1465":{"position":[[2608,44],[2690,44]]},"1467":{"position":[[2524,44],[2606,44]]},"1469":{"position":[[2530,44],[2612,44]]},"1480":{"position":[[1243,43],[1332,43],[1421,43],[1509,43],[1788,43]]},"1482":{"position":[[1311,43],[1400,43],[1489,43],[1577,43],[1856,43]]},"1484":{"position":[[1396,43],[1485,43],[1574,43],[1662,43],[1941,43]]},"1486":{"position":[[1293,43],[1382,43],[1471,43],[1559,43],[1838,43]]},"1542":{"position":[[2875,44],[2957,44]]},"1544":{"position":[[2889,44],[2971,44]]},"1546":{"position":[[3004,44],[3086,44]]}}}],["file=/var/lib/rancher/k3s/server/tls/service.key",{"_index":1730,"t":{"1288":{"position":[[1614,48],[1702,48],[2743,48]]},"1423":{"position":[[2451,48],[2530,48]]},"1425":{"position":[[2399,48],[2478,48]]},"1427":{"position":[[2268,48],[2347,48]]},"1429":{"position":[[2217,48],[2296,48]]},"1431":{"position":[[2230,48],[2309,48]]},"1433":{"position":[[2343,48],[2422,48]]},"1435":{"position":[[2304,48],[2383,48]]},"1439":{"position":[[2377,48],[2456,48]]},"1441":{"position":[[2358,48],[2437,48]]},"1443":{"position":[[2254,48],[2333,48]]},"1445":{"position":[[2370,48],[2449,48]]},"1447":{"position":[[2235,48],[2314,48]]},"1449":{"position":[[2150,48],[2229,48]]},"1459":{"position":[[2325,48],[2404,48]]},"1465":{"position":[[2367,48],[2446,48]]},"1467":{"position":[[2283,48],[2362,48]]},"1469":{"position":[[2289,48],[2368,48]]},"1480":{"position":[[1889,48]]},"1482":{"position":[[1957,48]]},"1484":{"position":[[2042,48]]},"1486":{"position":[[1939,48]]},"1542":{"position":[[2634,48],[2713,48]]},"1544":{"position":[[2648,48],[2727,48]]},"1546":{"position":[[2763,48],[2842,48]]}}}],["file=</path/to/ca",{"_index":2205,"t":{"1498":{"position":[[229,17]]},"1510":{"position":[[283,17]]}}}],["file=</path/to/key",{"_index":2206,"t":{"1498":{"position":[[259,18]]}}}],["file=</path/to/p",{"_index":2220,"t":{"1504":{"position":[[278,19],[320,19]]}}}],["file=<filenam",{"_index":2094,"t":{"1417":{"position":[[255,15]]},"1461":{"position":[[280,16]]},"1484":{"position":[[304,16]]}}}],["file=<path/to/cli",{"_index":2178,"t":{"1467":{"position":[[290,20]]},"1546":{"position":[[360,20]]}}}],["file=<path/to/configuration/fil",{"_index":2155,"t":{"1433":{"position":[[316,33]]}}}],["file=<path/to/fil",{"_index":2199,"t":{"1486":{"position":[[238,19]]}}}],["file=<path/to/tl",{"_index":2173,"t":{"1465":{"position":[[303,17],[357,17]]},"1560":{"position":[[456,17],[510,17]]}}}],["file_pattern=log_level",{"_index":514,"t":{"900":{"position":[[54,22]]},"920":{"position":[[405,22]]},"961":{"position":[[78,22]]},"981":{"position":[[416,22]]}}}],["filenam",{"_index":2237,"t":{"1533":{"position":[[118,10]]},"1535":{"position":[[117,11]]}}}],["file|key",{"_index":2054,"t":{"1392":{"position":[[947,8],[1274,8]]},"1463":{"position":[[1077,8],[1404,8]]},"1498":{"position":[[971,8],[1298,8]]},"1500":{"position":[[860,8],[1187,8]]},"1502":{"position":[[885,8],[1212,8]]},"1504":{"position":[[1037,8],[1364,8]]},"1506":{"position":[[863,8],[1190,8]]},"1508":{"position":[[895,8],[1222,8]]},"1510":{"position":[[994,8],[1321,8]]}}}],["filter",{"_index":561,"t":{"920":{"position":[[446,8]]},"981":{"position":[[457,8]]}}}],["find",{"_index":2085,"t":{"1408":{"position":[[179,4]]},"1613":{"position":[[156,7]]}}}],["firewal",{"_index":351,"t":{"865":{"position":[[81,8],[137,8],[209,8],[285,8]]}}}],["firewalld",{"_index":350,"t":{"865":{"position":[[5,10],[34,9],[58,22]]}}}],["first",{"_index":1531,"t":{"1272":{"position":[[1051,5]]},"1569":{"position":[[203,5]]}}}],["fit",{"_index":2018,"t":{"1368":{"position":[[1897,3]]}}}],["fix",{"_index":916,"t":{"1029":{"position":[[246,5]]}}}],["fl",{"_index":1296,"t":{"1188":{"position":[[64,2]]},"1190":{"position":[[155,2]]}}}],["flag",{"_index":607,"t":{"920":{"position":[[3082,4],[3155,4]]},"981":{"position":[[3373,7],[3392,4],[3441,7],[3460,4],[3518,7],[3537,4],[3605,7],[3624,4],[3698,7],[3717,4],[8144,4],[8217,4]]},"1272":{"position":[[915,5]]},"1276":{"position":[[18,4],[228,4]]},"1280":{"position":[[163,4],[977,4]]}}}],["flannel",{"_index":28,"t":{"823":{"position":[[423,7]]},"910":{"position":[[153,7],[183,7],[203,7],[232,7],[247,7],[280,7]]},"916":{"position":[[16,7],[33,7]]},"920":{"position":[[2801,7],[2857,7],[2877,7],[2932,7],[2954,7],[3013,7]]},"951":{"position":[[274,7],[292,7],[314,7]]},"969":{"position":[[338,7],[452,7],[495,7],[535,7]]},"979":{"position":[[16,7],[33,7],[144,7],[179,7],[214,7],[259,7],[282,7]]},"981":{"position":[[1806,7],[2017,7],[2083,7],[2151,7],[7863,7],[7919,7],[7939,7],[7994,7],[8016,7],[8075,7]]},"1089":{"position":[[250,7],[345,7],[438,7],[548,7],[674,7],[759,7]]},"1097":{"position":[[212,7],[295,7],[350,7]]},"1113":{"position":[[25,12]]},"1115":{"position":[[0,7],[73,7],[124,7],[262,7],[361,7],[438,7],[516,7],[532,7],[567,7],[628,7],[696,7],[771,7],[842,7],[931,7],[1027,7],[1053,8]]},"1117":{"position":[[297,7],[335,7],[364,7]]},"1119":{"position":[[5,7]]},"1123":{"position":[[774,7]]},"1129":{"position":[[208,7],[243,7]]},"1172":{"position":[[35,7],[82,7],[226,7],[259,7],[471,7]]},"1174":{"position":[[150,7],[230,7],[284,7]]},"1212":{"position":[[91,7]]}}}],["flocker",{"_index":1923,"t":{"1328":{"position":[[181,7]]}}}],["folder",{"_index":569,"t":{"920":{"position":[[852,6]]},"937":{"position":[[1883,6]]},"954":{"position":[[1150,6]]},"981":{"position":[[1172,6],[5458,6],[5479,6]]}}}],["follow",{"_index":1566,"t":{"1280":{"position":[[153,9],[967,9]]},"1290":{"position":[[4,9]]},"1320":{"position":[[12,8]]},"1417":{"position":[[26,6]]},"1423":{"position":[[26,6]]},"1425":{"position":[[26,6]]},"1433":{"position":[[26,6]]},"1441":{"position":[[26,6]]},"1445":{"position":[[26,6]]},"1463":{"position":[[26,6]]},"1465":{"position":[[26,6]]},"1467":{"position":[[26,6]]},"1469":{"position":[[26,6]]},"1471":{"position":[[26,6]]},"1473":{"position":[[26,6]]},"1498":{"position":[[26,6]]},"1504":{"position":[[26,6]]},"1510":{"position":[[40,6]]},"1518":{"position":[[114,9]]},"1533":{"position":[[34,9]]},"1535":{"position":[[34,9]]},"1537":{"position":[[44,9]]},"1539":{"position":[[44,9]]},"1566":{"position":[[606,8]]},"1615":{"position":[[26,6]]},"1623":{"position":[[26,6]]},"1626":{"position":[[26,6]]},"1630":{"position":[[26,6]]}}}],["foo.loc",{"_index":1063,"t":{"1093":{"position":[[182,11],[329,11]]}}}],["foo=bar",{"_index":543,"t":{"918":{"position":[[156,7]]},"1093":{"position":[[208,9],[356,9]]},"1095":{"position":[[253,7]]}}}],["foo=thre",{"_index":1074,"t":{"1095":{"position":[[440,9],[567,9]]}}}],["forbid",{"_index":2307,"t":{"1604":{"position":[[221,7]]}}}],["forc",{"_index":646,"t":{"931":{"position":[[281,5],[1188,5]]},"933":{"position":[[289,5]]},"945":{"position":[[273,5],[406,5],[803,5],[962,5]]},"1244":{"position":[[441,5]]}}}],["forget",{"_index":817,"t":{"981":{"position":[[3191,6]]}}}],["forwardedhead",{"_index":998,"t":{"1061":{"position":[[534,17]]}}}],["found",{"_index":1682,"t":{"1284":{"position":[[691,5]]},"1292":{"position":[[595,5]]},"1294":{"position":[[694,5]]},"1296":{"position":[[575,5]]},"1298":{"position":[[415,5]]},"1300":{"position":[[590,5]]},"1302":{"position":[[576,5]]},"1304":{"position":[[800,5]]},"1306":{"position":[[593,5]]},"1312":{"position":[[667,5]]},"1316":{"position":[[718,5]]},"1392":{"position":[[209,5]]},"1394":{"position":[[219,5]]}}}],["free",{"_index":1998,"t":{"1368":{"position":[[779,4]]}}}],["fsck.repair=y",{"_index":385,"t":{"869":{"position":[[319,15]]}}}],["fsgroup",{"_index":1610,"t":{"1280":{"position":[[1935,8],[3020,8],[3339,8],[3859,8]]}}}],["fssl",{"_index":1174,"t":{"1131":{"position":[[417,4]]}}}],["fulli",{"_index":1512,"t":{"1272":{"position":[[477,5]]}}}],["function",{"_index":1521,"t":{"1272":{"position":[[753,13]]},"1280":{"position":[[2314,8]]}}}],["further",{"_index":1527,"t":{"1272":{"position":[[994,7]]},"1368":{"position":[[1664,7]]}}}],["futur",{"_index":1797,"t":{"1290":{"position":[[224,6]]}}}],["gap",{"_index":1791,"t":{"1290":{"position":[[77,3]]}}}],["garbag",{"_index":1872,"t":{"1312":{"position":[[88,7],[328,7],[517,7]]}}}],["gate",{"_index":2200,"t":{"1488":{"position":[[190,5]]}}}],["gates=jobtrackingwithfinalizers=tru",{"_index":2146,"t":{"1423":{"position":[[1541,36]]},"1425":{"position":[[1489,36]]},"1427":{"position":[[1358,36]]},"1429":{"position":[[1307,36]]},"1431":{"position":[[1320,36]]},"1433":{"position":[[1433,36]]},"1435":{"position":[[1394,36]]},"1439":{"position":[[1467,36]]},"1441":{"position":[[1448,36]]},"1443":{"position":[[1344,36]]},"1445":{"position":[[1460,36]]},"1447":{"position":[[1325,36]]},"1449":{"position":[[1240,36]]},"1459":{"position":[[1415,36]]},"1465":{"position":[[1457,36]]},"1467":{"position":[[1373,36]]},"1469":{"position":[[1379,36]]},"1480":{"position":[[1655,36]]},"1482":{"position":[[1723,36]]},"1484":{"position":[[1808,36]]},"1486":{"position":[[1705,36]]},"1542":{"position":[[1724,36]]},"1544":{"position":[[1738,36]]},"1546":{"position":[[1853,36]]}}}],["gates=rotatekubeletservercertificate=tru",{"_index":2202,"t":{"1488":{"position":[[264,41]]},"1564":{"position":[[216,41]]}}}],["gb",{"_index":1261,"t":{"1170":{"position":[[62,2]]},"1178":{"position":[[72,2],[96,2]]},"1184":{"position":[[127,2],[151,2]]},"1254":{"position":[[113,2],[202,2]]},"1300":{"position":[[395,2]]},"1302":{"position":[[381,2]]}}}],["gc",{"_index":1324,"t":{"1210":{"position":[[772,2]]},"1286":{"position":[[631,2],[1254,2]]},"1312":{"position":[[33,2]]},"1478":{"position":[[187,2],[259,2],[395,2]]}}}],["gcm",{"_index":622,"t":{"927":{"position":[[215,3]]}}}],["gener",{"_index":648,"t":{"931":{"position":[[383,8]]},"998":{"position":[[286,8],[295,8],[511,8],[1245,9]]}}}],["genrsa",{"_index":668,"t":{"935":{"position":[[483,6]]}}}],["get.k3s.io",{"_index":234,"t":{"844":{"position":[[271,10]]},"1078":{"position":[[142,10]]}}}],["ghcr.io",{"_index":432,"t":{"878":{"position":[[304,14]]}}}],["ghcr.io/stargz",{"_index":440,"t":{"880":{"position":[[167,15],[361,14]]}}}],["ghz",{"_index":1444,"t":{"1246":{"position":[[128,3],[192,3],[246,3],[304,3],[366,3],[418,3]]},"1254":{"position":[[107,3],[196,3]]}}}],["git",{"_index":1964,"t":{"1348":{"position":[[701,3]]}}}],["git_repo",{"_index":1924,"t":{"1328":{"position":[[189,8]]}}}],["github",{"_index":952,"t":{"1055":{"position":[[165,6]]},"1160":{"position":[[5,6]]},"1244":{"position":[[575,6]]}}}],["github_url=https://github.com/kubernetes/dashboard/releas",{"_index":1076,"t":{"1101":{"position":[[0,59]]},"1109":{"position":[[48,59]]}}}],["github_url}/latest",{"_index":1080,"t":{"1101":{"position":[[124,20]]},"1109":{"position":[[172,20]]}}}],["given",{"_index":595,"t":{"920":{"position":[[2108,5]]},"981":{"position":[[7041,5]]},"1288":{"position":[[77,5]]},"1613":{"position":[[110,5]]}}}],["global",{"_index":1840,"t":{"1304":{"position":[[84,6]]}}}],["glusterf",{"_index":1925,"t":{"1328":{"position":[[198,9]]}}}],["go",{"_index":219,"t":{"842":{"position":[[178,2]]},"1298":{"position":[[143,2]]}}}],["golang",{"_index":222,"t":{"842":{"position":[[269,6]]}}}],["googl",{"_index":434,"t":{"878":{"position":[[360,6]]}}}],["gpu",{"_index":246,"t":{"844":{"position":[[674,3],[860,5],[1067,3]]}}}],["grafana",{"_index":1464,"t":{"1250":{"position":[[43,7],[165,9]]}}}],["grant",{"_index":1899,"t":{"1318":{"position":[[339,7]]}}}],["greater",{"_index":2166,"t":{"1447":{"position":[[382,7]]}}}],["grep",{"_index":235,"t":{"844":{"position":[[315,4]]},"935":{"position":[[408,4]]},"1105":{"position":[[165,4]]},"1119":{"position":[[841,4],[893,4]]},"1210":{"position":[[2469,4]]},"1218":{"position":[[317,4],[373,4]]},"1392":{"position":[[141,4],[561,4],[604,4],[612,4],[777,4],[820,4],[848,6],[933,4],[977,6],[1062,4],[1101,6],[1177,6],[1260,4],[1304,6],[1387,4],[1426,6],[1507,6]]},"1394":{"position":[[151,4]]},"1415":{"position":[[240,4],[283,4]]},"1417":{"position":[[303,4],[321,4],[329,4]]},"1419":{"position":[[232,4],[250,4],[258,4]]},"1423":{"position":[[470,4],[513,4]]},"1425":{"position":[[453,4],[496,4]]},"1427":{"position":[[327,4],[370,4]]},"1429":{"position":[[293,4],[336,4]]},"1431":{"position":[[306,4],[349,4]]},"1433":{"position":[[397,4],[440,4]]},"1435":{"position":[[304,4],[347,4]]},"1437":{"position":[[292,4],[310,4],[318,4]]},"1439":{"position":[[370,4],[413,4]]},"1441":{"position":[[392,4],[435,4],[443,4]]},"1443":{"position":[[288,4],[331,4],[339,4]]},"1445":{"position":[[423,4],[466,4]]},"1447":{"position":[[284,4],[327,4]]},"1449":{"position":[[235,4],[278,4]]},"1459":{"position":[[365,4],[408,4],[416,4]]},"1463":{"position":[[691,4],[734,4],[742,4],[907,4],[950,4],[978,6],[1063,4],[1107,6],[1192,4],[1231,6],[1307,6],[1390,4],[1434,6],[1517,4],[1556,6],[1637,6]]},"1465":{"position":[[432,4]]},"1467":{"position":[[367,4],[410,4]]},"1469":{"position":[[379,4],[422,4]]},"1471":{"position":[[421,4],[464,4]]},"1473":{"position":[[182,4]]},"1475":{"position":[[973,4],[1016,4]]},"1478":{"position":[[322,4],[374,4]]},"1480":{"position":[[252,4],[304,4]]},"1482":{"position":[[272,4],[324,4]]},"1484":{"position":[[368,4],[420,4]]},"1486":{"position":[[305,4],[357,4]]},"1490":{"position":[[241,4],[259,4],[267,4]]},"1493":{"position":[[239,4]]},"1495":{"position":[[249,4],[292,4]]},"1498":{"position":[[585,4],[628,4],[636,4],[801,4],[844,4],[872,6],[957,4],[1001,6],[1086,4],[1125,6],[1201,6],[1284,4],[1328,6],[1411,4],[1450,6],[1531,6]]},"1500":{"position":[[474,4],[517,4],[525,4],[690,4],[733,4],[761,6],[846,4],[890,6],[975,4],[1014,6],[1090,6],[1173,4],[1217,6],[1300,4],[1339,6],[1420,6]]},"1502":{"position":[[499,4],[542,4],[550,4],[715,4],[758,4],[786,6],[871,4],[915,6],[1000,4],[1039,6],[1115,6],[1198,4],[1242,6],[1325,4],[1364,6],[1445,6]]},"1504":{"position":[[651,4],[694,4],[702,4],[867,4],[910,4],[938,6],[1023,4],[1067,6],[1152,4],[1191,6],[1267,6],[1350,4],[1394,6],[1477,4],[1516,6],[1597,6]]},"1506":{"position":[[477,4],[520,4],[528,4],[693,4],[736,4],[764,6],[849,4],[893,6],[978,4],[1017,6],[1093,6],[1176,4],[1220,6],[1303,4],[1342,6],[1423,6]]},"1508":{"position":[[509,4],[552,4],[560,4],[725,4],[768,4],[796,6],[881,4],[925,6],[1010,4],[1049,6],[1125,6],[1208,4],[1252,6],[1335,4],[1374,6],[1455,6]]},"1510":{"position":[[608,4],[651,4],[659,4],[824,4],[867,4],[895,6],[980,4],[1024,6],[1109,4],[1148,6],[1224,6],[1307,4],[1351,6],[1434,4],[1473,6],[1554,6]]},"1516":{"position":[[119,4],[162,4]]},"1542":{"position":[[539,4],[630,4],[673,4],[697,4],[705,5]]},"1544":{"position":[[525,4],[616,4],[659,4],[687,4],[695,5]]},"1546":{"position":[[581,4],[672,4],[715,4],[739,4],[747,5]]},"1548":{"position":[[489,4],[525,4]]},"1550":{"position":[[546,4],[582,4]]},"1560":{"position":[[707,4]]}}}],["group",{"_index":867,"t":{"998":{"position":[[809,6]]},"1280":{"position":[[4837,5],[5184,5],[5507,5]]},"1288":{"position":[[1459,5],[1482,5]]},"1423":{"position":[[2264,5],[2287,5]]},"1425":{"position":[[2212,5],[2235,5]]},"1427":{"position":[[2081,5],[2104,5]]},"1429":{"position":[[2030,5],[2053,5]]},"1431":{"position":[[2043,5],[2066,5]]},"1433":{"position":[[2156,5],[2179,5]]},"1435":{"position":[[2117,5],[2140,5]]},"1439":{"position":[[2190,5],[2213,5]]},"1441":{"position":[[2171,5],[2194,5]]},"1443":{"position":[[2067,5],[2090,5]]},"1445":{"position":[[2183,5],[2206,5]]},"1447":{"position":[[2048,5],[2071,5]]},"1449":{"position":[[1963,5],[1986,5]]},"1459":{"position":[[2138,5],[2161,5]]},"1465":{"position":[[2180,5],[2203,5]]},"1467":{"position":[[2096,5],[2119,5]]},"1469":{"position":[[2102,5],[2125,5]]},"1542":{"position":[[2447,5],[2470,5]]},"1544":{"position":[[2461,5],[2484,5]]},"1546":{"position":[[2576,5],[2599,5]]},"1581":{"position":[[52,5]]}}}],["group=100",{"_index":475,"t":{"884":{"position":[[394,9]]}}}],["gt",{"_index":2045,"t":{"1392":{"position":[[628,2]]},"1463":{"position":[[758,2]]},"1498":{"position":[[652,2]]},"1500":{"position":[[541,2]]},"1502":{"position":[[566,2]]},"1504":{"position":[[718,2]]},"1506":{"position":[[544,2]]},"1508":{"position":[[576,2]]},"1510":{"position":[[675,2]]},"1542":{"position":[[579,2]]},"1544":{"position":[[565,2]]},"1546":{"position":[[621,2]]}}}],["guestbook",{"_index":1468,"t":{"1250":{"position":[[175,9]]}}}],["guid",{"_index":1905,"t":{"1320":{"position":[[26,6],[163,5]]},"1368":{"position":[[69,6],[90,5],[194,5],[417,5],[1003,6],[1749,5],[1990,6]]}}}],["guidanc",{"_index":1498,"t":{"1272":{"position":[[53,8]]},"1368":{"position":[[118,8]]}}}],["gw",{"_index":809,"t":{"981":{"position":[[1946,4]]},"1115":{"position":[[717,2]]}}}],["gw”、“wireguard",{"_index":787,"t":{"969":{"position":[[402,14]]}}}],["h",{"_index":862,"t":{"998":{"position":[[427,1]]}}}],["ha",{"_index":487,"t":{"890":{"position":[[65,2]]},"892":{"position":[[2,2]]},"943":{"position":[[424,2]]},"945":{"position":[[448,2],[572,2],[819,2]]},"947":{"position":[[280,2],[770,2],[838,2]]},"1004":{"position":[[293,2]]},"1019":{"position":[[94,2],[110,2]]},"1021":{"position":[[3,2]]},"1025":{"position":[[26,2]]},"1029":{"position":[[27,2],[85,2]]},"1033":{"position":[[12,4],[67,2],[289,2]]},"1174":{"position":[[59,2]]},"1345":{"position":[[153,2]]}}}],["hamper",{"_index":1892,"t":{"1316":{"position":[[454,6]]}}}],["handle_error",{"_index":2039,"t":{"1392":{"position":[[456,14],[493,14]]},"1463":{"position":[[586,14],[623,14]]},"1498":{"position":[[480,14],[517,14]]},"1500":{"position":[[369,14],[406,14]]},"1502":{"position":[[394,14],[431,14]]},"1504":{"position":[[546,14],[583,14]]},"1506":{"position":[[372,14],[409,14]]},"1508":{"position":[[404,14],[441,14]]},"1510":{"position":[[503,14],[540,14]]}}}],["handler",{"_index":243,"t":{"844":{"position":[[607,8]]}}}],["hard=imagefs.available<5%,nodefs.available<5",{"_index":1770,"t":{"1288":{"position":[[3657,45]]},"1548":{"position":[[1174,45],[2397,45]]},"1560":{"position":[[1365,45],[2588,45]]}}}],["harden",{"_index":1499,"t":{"1272":{"position":[[66,9]]},"1286":{"position":[[115,6]]},"1368":{"position":[[59,9],[80,9],[131,9],[259,8],[993,9]]}}}],["harter",{"_index":425,"t":{"878":{"position":[[26,6]]}}}],["hash",{"_index":718,"t":{"947":{"position":[[184,7],[196,6],[415,7],[423,4],[761,8]]},"987":{"position":[[122,8]]}}}],["hash>::<credenti",{"_index":845,"t":{"987":{"position":[[58,20]]}}}],["hat/cento",{"_index":1256,"t":{"1168":{"position":[[50,10]]}}}],["have",{"_index":1523,"t":{"1272":{"position":[[801,6]]}}}],["ha）k3",{"_index":484,"t":{"886":{"position":[[0,15]]}}}],["header",{"_index":632,"t":{"929":{"position":[[371,6],[393,6]]},"1288":{"position":[[1376,6],[1412,7]]},"1423":{"position":[[2181,6],[2217,7]]},"1425":{"position":[[2129,6],[2165,7]]},"1427":{"position":[[1998,6],[2034,7]]},"1429":{"position":[[1947,6],[1983,7]]},"1431":{"position":[[1960,6],[1996,7]]},"1433":{"position":[[2073,6],[2109,7]]},"1435":{"position":[[2034,6],[2070,7]]},"1439":{"position":[[2107,6],[2143,7]]},"1441":{"position":[[2088,6],[2124,7]]},"1443":{"position":[[1984,6],[2020,7]]},"1445":{"position":[[2100,6],[2136,7]]},"1447":{"position":[[1965,6],[2001,7]]},"1449":{"position":[[1880,6],[1916,7]]},"1459":{"position":[[2055,6],[2091,7]]},"1465":{"position":[[2097,6],[2133,7]]},"1467":{"position":[[2013,6],[2049,7]]},"1469":{"position":[[2019,6],[2055,7]]},"1542":{"position":[[2364,6],[2400,7]]},"1544":{"position":[[2378,6],[2414,7]]},"1546":{"position":[[821,6],[961,6],[2493,6],[2529,7]]}}}],["headers=x",{"_index":1726,"t":{"1288":{"position":[[1465,9],[1513,9]]},"1423":{"position":[[2270,9],[2318,9]]},"1425":{"position":[[2218,9],[2266,9]]},"1427":{"position":[[2087,9],[2135,9]]},"1429":{"position":[[2036,9],[2084,9]]},"1431":{"position":[[2049,9],[2097,9]]},"1433":{"position":[[2162,9],[2210,9]]},"1435":{"position":[[2123,9],[2171,9]]},"1439":{"position":[[2196,9],[2244,9]]},"1441":{"position":[[2177,9],[2225,9]]},"1443":{"position":[[2073,9],[2121,9]]},"1445":{"position":[[2189,9],[2237,9]]},"1447":{"position":[[2054,9],[2102,9]]},"1449":{"position":[[1969,9],[2017,9]]},"1459":{"position":[[2144,9],[2192,9]]},"1465":{"position":[[2186,9],[2234,9]]},"1467":{"position":[[2102,9],[2150,9]]},"1469":{"position":[[2108,9],[2156,9]]},"1542":{"position":[[2453,9],[2501,9]]},"1544":{"position":[[2467,9],[2515,9]]},"1546":{"position":[[2582,9],[2630,9]]}}}],["headless",{"_index":232,"t":{"844":{"position":[[222,8]]}}}],["healthz",{"_index":1775,"t":{"1288":{"position":[[3796,7]]},"1548":{"position":[[1313,7],[2536,7]]},"1560":{"position":[[1504,7],[2727,7]]}}}],["hello=world",{"_index":544,"t":{"918":{"position":[[179,11]]}}}],["helm",{"_index":21,"t":{"823":{"position":[[234,4]]},"838":{"position":[[637,4]]},"882":{"position":[[59,4],[114,4],[131,4],[243,4]]},"951":{"position":[[188,4]]},"973":{"position":[[229,4],[248,4]]},"981":{"position":[[6179,4],[6216,4]]},"1000":{"position":[[108,13],[303,4],[428,4]]},"1027":{"position":[[702,4]]},"1033":{"position":[[1671,4]]},"1057":{"position":[[0,4],[18,11],[69,21],[204,23],[252,4],[300,4],[369,4]]},"1059":{"position":[[36,4],[585,4],[613,4],[648,4],[734,4],[777,4],[820,4],[916,4],[1102,4],[1169,4],[1622,4],[1651,4]]},"1061":{"position":[[178,4]]},"1063":{"position":[[22,4],[47,4],[57,4],[73,4],[120,4],[164,4],[185,4]]},"1146":{"position":[[14,4],[35,5]]},"1216":{"position":[[504,4]]}}}],["helm.cattle.io/v1",{"_index":960,"t":{"1059":{"position":[[283,17]]},"1061":{"position":[[390,17]]}}}],["helm:v0.3.0",{"_index":980,"t":{"1059":{"position":[[1140,11]]}}}],["helmchart",{"_index":955,"t":{"1057":{"position":[[272,9]]},"1059":{"position":[[0,9],[105,15],[187,9],[307,9],[560,9]]},"1061":{"position":[[32,13],[122,9],[190,9],[214,9]]}}}],["helmchartconfig",{"_index":994,"t":{"1061":{"position":[[71,15],[87,25],[226,15],[414,15]]},"1216":{"position":[[406,15],[455,15]]}}}],["help",{"_index":509,"t":{"896":{"position":[[926,4]]},"998":{"position":[[420,5],[434,4]]},"1091":{"position":[[545,4]]},"1368":{"position":[[212,4]]},"1502":{"position":[[2168,4],[2221,4],[2256,4],[2408,4],[2461,4],[2496,4],[2648,4],[2701,4],[2736,4]]},"1508":{"position":[[2213,4],[2266,4],[2301,4]]}}}],["henc",{"_index":1813,"t":{"1294":{"position":[[462,5]]},"1304":{"position":[[553,6]]}}}],["here",{"_index":1570,"t":{"1280":{"position":[[373,4],[1322,4],[2506,4]]},"1282":{"position":[[261,4]]}}}],["high",{"_index":1880,"t":{"1312":{"position":[[392,4]]}}}],["highli",{"_index":1861,"t":{"1308":{"position":[[99,6]]}}}],["hmac",{"_index":623,"t":{"927":{"position":[[221,4]]}}}],["hold",{"_index":570,"t":{"920":{"position":[[862,4]]},"981":{"position":[[1182,4]]}}}],["home}/.rancher/k3",{"_index":779,"t":{"965":{"position":[[70,20]]},"981":{"position":[[1227,20]]},"998":{"position":[[698,20],[1164,20],[1449,20],[1656,20]]}}}],["host",{"_index":611,"t":{"920":{"position":[[3297,4]]},"981":{"position":[[1940,5],[8617,4]]},"1008":{"position":[[871,4],[896,4],[921,4]]},"1272":{"position":[[538,4],[565,4]]},"1274":{"position":[[23,4]]},"1348":{"position":[[321,5]]}}}],["host>.nod",{"_index":493,"t":{"894":{"position":[[517,11]]}}}],["hostipc",{"_index":1596,"t":{"1280":{"position":[[1735,8],[2862,8],[3363,8]]},"1592":{"position":[[126,7]]}}}],["hostnam",{"_index":396,"t":{"871":{"position":[[294,8]]},"981":{"position":[[1053,9]]},"1033":{"position":[[883,8],[1074,8],[1526,8]]},"1059":{"position":[[511,9]]},"1288":{"position":[[3829,8]]},"1548":{"position":[[1346,8],[2569,8]]},"1556":{"position":[[157,8]]},"1560":{"position":[[1537,8],[2760,8]]}}}],["hostnetwork",{"_index":1594,"t":{"1280":{"position":[[1702,12],[2843,12],[3377,12]]},"1594":{"position":[[126,11]]}}}],["hostpath",{"_index":1931,"t":{"1330":{"position":[[103,8]]},"1608":{"position":[[142,8]]}}}],["hostpid",{"_index":1598,"t":{"1280":{"position":[[1764,8],[2877,8],[3395,8]]},"1590":{"position":[[126,7]]}}}],["hostport",{"_index":1367,"t":{"1216":{"position":[[183,8]]},"1280":{"position":[[3409,10],[3883,10]]},"1610":{"position":[[147,8]]}}}],["hour",{"_index":831,"t":{"981":{"position":[[4641,5]]}}}],["hr9p5",{"_index":2258,"t":{"1548":{"position":[[695,5],[1391,5]]},"1560":{"position":[[886,5],[1582,5]]}}}],["http",{"_index":50,"t":{"836":{"position":[[18,4]]},"880":{"position":[[440,4]]},"954":{"position":[[1196,5]]},"963":{"position":[[49,5],[78,5]]},"981":{"position":[[663,5],[698,5],[5527,5]]},"1059":{"position":[[689,5],[862,5]]},"1158":{"position":[[348,14],[363,6]]},"1216":{"position":[[15,4]]},"1421":{"position":[[176,5]]}}}],["http.createserver(function(req",{"_index":447,"t":{"880":{"position":[[464,31]]}}}],["http://localhost:8001/api/v1/namespaces/kubernet",{"_index":1097,"t":{"1107":{"position":[[72,50]]}}}],["http://mycustomreg.com:5000",{"_index":1240,"t":{"1158":{"position":[[102,29],[297,29]]}}}],["http_proxy=http://your",{"_index":64,"t":{"836":{"position":[[506,22]]}}}],["http_proxy、https_proxi",{"_index":54,"t":{"836":{"position":[[130,22]]}}}],["https://%{kubernetes_api}%/static/charts/traefik",{"_index":991,"t":{"1059":{"position":[[1535,48]]}}}],["https://<etcd",{"_index":1297,"t":{"1190":{"position":[[234,13]]}}}],["https://<ip",{"_index":924,"t":{"1033":{"position":[[868,11],[1059,11],[1511,11]]}}}],["https://charts.bitnami.com/bitnami",{"_index":961,"t":{"1059":{"position":[[375,34]]}}}],["https://charts.rancher.io",{"_index":457,"t":{"882":{"position":[[88,25]]}}}],["https://etcd",{"_index":900,"t":{"1008":{"position":[[858,12]]}}}],["https://get.k3s.io",{"_index":83,"t":{"838":{"position":[[362,18]]},"860":{"position":[[228,18]]},"1025":{"position":[[242,18]]},"1027":{"position":[[220,18]]},"1033":{"position":[[533,18],[806,18],[1450,18]]},"1080":{"position":[[487,18]]},"1089":{"position":[[17,18],[288,18],[390,18],[494,18],[633,18],[728,18],[830,18],[946,18],[1066,18],[1162,18]]},"1097":{"position":[[129,18]]},"1188":{"position":[[67,18]]},"1190":{"position":[[158,18]]},"1240":{"position":[[59,18],[111,18],[661,18]]},"1244":{"position":[[17,18],[105,18],[1534,18]]},"1322":{"position":[[214,18]]},"1360":{"position":[[248,18],[374,18],[500,18]]}}}],["https://github.com/go",{"_index":897,"t":{"1008":{"position":[[524,21]]}}}],["https://github.com/k3",{"_index":285,"t":{"852":{"position":[[134,22]]},"929":{"position":[[1208,22]]},"931":{"position":[[911,22]]},"933":{"position":[[639,22]]},"1091":{"position":[[171,22]]}}}],["https://github.com/kubernetes/enhancements/tree/master/keps/sig",{"_index":1398,"t":{"1236":{"position":[[96,67]]}}}],["https://github.com/rancher/system",{"_index":1966,"t":{"1350":{"position":[[145,33]]}}}],["https://godoc.org/github.com/lib/pq",{"_index":894,"t":{"1008":{"position":[[229,36]]}}}],["https://helm.sh/docs/intro/quickstart",{"_index":954,"t":{"1057":{"position":[[145,39]]}}}],["https://k3s.example.com",{"_index":1045,"t":{"1089":{"position":[[884,23],[1032,23]]},"1091":{"position":[[413,23]]}}}],["https://mycustomreg.com:5000",{"_index":1221,"t":{"1152":{"position":[[70,30],[292,30]]},"1156":{"position":[[102,30],[465,30]]}}}],["https://mycustomreg.com:5000/rancher/coredn",{"_index":1224,"t":{"1152":{"position":[[375,44]]}}}],["https://nvidia.github.io/libnvidia",{"_index":224,"t":{"844":{"position":[[77,34]]}}}],["https://rancher",{"_index":906,"t":{"1025":{"position":[[411,15]]},"1027":{"position":[[389,15]]},"1033":{"position":[[633,15],[941,15]]},"1240":{"position":[[169,15],[771,15]]},"1244":{"position":[[163,15]]}}}],["https://raw.githubusercontent.com/kubernetes/dashboard/${version_kube_dashboard}/aio/deploy/recommended.yaml",{"_index":1083,"t":{"1101":{"position":[[205,108]]},"1109":{"position":[[252,108]]}}}],["https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml",{"_index":1949,"t":{"1336":{"position":[[143,79]]}}}],["https://registry.example.com:5000",{"_index":1229,"t":{"1152":{"position":[[706,35]]}}}],["https://releases.rancher.com/instal",{"_index":79,"t":{"838":{"position":[[272,36]]}}}],["https://rootlesscontaine.r",{"_index":323,"t":{"856":{"position":[[113,28]]}}}],["https://rootlesscontaine.rs/get",{"_index":283,"t":{"852":{"position":[[20,35]]}}}],["https://rpm.rancher.io/k3s/latest/common/centos/7/noarch/k3",{"_index":415,"t":{"873":{"position":[[287,60]]}}}],["https://server",{"_index":915,"t":{"1029":{"position":[[228,14]]}}}],["https://tailscale.com/install.sh",{"_index":1175,"t":{"1131":{"position":[[422,32]]}}}],["https://update.k3s.io/v1",{"_index":1435,"t":{"1244":{"position":[[1364,24]]},"1352":{"position":[[1429,24]]}}}],["https_proxy=http://your",{"_index":66,"t":{"836":{"position":[[552,23]]}}}],["hybrid",{"_index":279,"t":{"850":{"position":[[305,6],[385,6]]}}}],["id",{"_index":119,"t":{"838":{"position":[[888,2]]},"894":{"position":[[556,2],[718,2],[754,2],[773,2]]},"906":{"position":[[60,2],[69,2]]},"920":{"position":[[977,2],[1000,2]]},"981":{"position":[[6302,2],[6325,2]]},"998":{"position":[[1086,3],[1346,8],[1568,8]]},"1164":{"position":[[67,2]]},"1417":{"position":[[785,2],[1067,2],[1349,2],[1631,2],[1913,2],[2195,2],[2477,2]]},"1419":{"position":[[766,2],[1048,2],[1330,2],[1612,2],[1894,2],[2176,2],[2458,2]]},"1437":{"position":[[779,2],[1061,2],[1343,2],[1625,2],[1907,2],[2189,2],[2471,2]]},"1490":{"position":[[751,2],[1033,2],[1315,2],[1597,2],[1879,2],[2161,2],[2443,2]]},"1502":{"position":[[2117,2],[2357,2],[2597,2]]},"1508":{"position":[[2162,2]]}}}],["ideal",{"_index":1669,"t":{"1284":{"position":[[256,8]]}}}],["ident",{"_index":1916,"t":{"1322":{"position":[[513,11]]}}}],["identifi",{"_index":2245,"t":{"1537":{"position":[[94,10]]},"1539":{"position":[[94,10]]},"1560":{"position":[[141,8]]},"1569":{"position":[[26,8]]}}}],["idl",{"_index":1328,"t":{"1210":{"position":[[867,4]]},"1286":{"position":[[726,4],[1349,4]]},"1550":{"position":[[361,4],[609,4]]}}}],["ifac",{"_index":538,"t":{"910":{"position":[[161,5]]},"920":{"position":[[2809,5]]},"981":{"position":[[7871,5]]}}}],["ifnotpres",{"_index":1939,"t":{"1334":{"position":[[154,12]]},"1340":{"position":[[154,12]]}}}],["iii",{"_index":1487,"t":{"1254":{"position":[[209,3]]}}}],["imag",{"_index":120,"t":{"838":{"position":[[891,5]]},"844":{"position":[[798,6]]},"880":{"position":[[354,6]]},"908":{"position":[[130,5]]},"920":{"position":[[1173,5],[1361,5],[2185,5],[2230,5]]},"981":{"position":[[6498,5],[6686,5],[7118,5],[7163,5],[7555,6]]},"1061":{"position":[[501,6]]},"1075":{"position":[[49,6],[134,6]]},"1152":{"position":[[843,5]]},"1288":{"position":[[4198,5]]},"1334":{"position":[[110,6]]},"1340":{"position":[[110,6]]},"1352":{"position":[[438,6],[774,6],[845,6]]},"1548":{"position":[[1723,5],[2946,5]]},"1560":{"position":[[1914,5],[3137,5]]},"1623":{"position":[[72,5]]}}}],["image=rancher/mirror",{"_index":2270,"t":{"1548":{"position":[[1551,22],[2774,22]]},"1560":{"position":[[1742,22],[2965,22]]}}}],["imagepullpolici",{"_index":1938,"t":{"1334":{"position":[[137,16]]},"1340":{"position":[[137,16]]}}}],["images.txt",{"_index":1241,"t":{"1160":{"position":[[29,10],[63,10]]}}}],["images/$1",{"_index":1231,"t":{"1152":{"position":[[791,10]]}}}],["images/coredn",{"_index":1228,"t":{"1152":{"position":[[598,14]]}}}],["imperson",{"_index":2300,"t":{"1583":{"position":[[53,12]]}}}],["implement",{"_index":2013,"t":{"1368":{"position":[[1641,15]]},"1513":{"position":[[106,11]]}}}],["import",{"_index":1867,"t":{"1310":{"position":[[112,9]]},"1312":{"position":[[110,9]]},"1314":{"position":[[71,9]]}}}],["inaccess",{"_index":1848,"t":{"1304":{"position":[[329,12]]}}}],["includ",{"_index":17,"t":{"823":{"position":[[187,8]]},"1278":{"position":[[217,7]]},"1280":{"position":[[2129,7]]},"1368":{"position":[[581,9]]},"1429":{"position":[[200,8]]},"1431":{"position":[[200,8]]},"1435":{"position":[[236,7]]},"1437":{"position":[[193,7]]},"1439":{"position":[[193,7]]},"1441":{"position":[[321,7]]},"1443":{"position":[[213,7]]},"1445":{"position":[[299,8]]},"1488":{"position":[[209,7]]},"1577":{"position":[[205,7]]},"1598":{"position":[[155,9]]}}}],["individu",{"_index":1819,"t":{"1296":{"position":[[221,10]]}}}],["inform",{"_index":1676,"t":{"1284":{"position":[[386,12],[626,11]]},"1288":{"position":[[4378,11]]},"1368":{"position":[[549,11]]}}}],["infra",{"_index":2269,"t":{"1548":{"position":[[1535,5],[2758,5]]},"1560":{"position":[[1726,5],[2949,5]]}}}],["ingress",{"_index":24,"t":{"823":{"position":[[258,7],[453,9]]},"1041":{"position":[[45,7]]},"1059":{"position":[[488,8]]},"1061":{"position":[[284,7]]},"1212":{"position":[[22,7]]},"1216":{"position":[[75,7]]},"1280":{"position":[[5928,8],[6127,8],[6326,8],[6457,7]]},"1282":{"position":[[441,8],[784,8],[911,7],[950,7],[1465,8],[1494,7],[1598,7],[1706,8],[1735,7],[1839,7],[1934,8],[1963,7],[2148,8],[2177,7],[2281,7],[2389,8],[2418,7],[2522,7],[2598,8],[2627,7]]}}}],["ingress、klipp",{"_index":1466,"t":{"1250":{"position":[[115,15]]}}}],["init",{"_index":705,"t":{"937":{"position":[[2115,4]]},"956":{"position":[[323,4]]},"981":{"position":[[3085,4]]},"1033":{"position":[[459,4],[596,4],[752,4]]},"1035":{"position":[[48,4],[169,5],[269,4]]},"1063":{"position":[[190,4]]},"1093":{"position":[[248,5],[413,4]]},"1186":{"position":[[13,4]]},"1188":{"position":[[113,4]]},"1194":{"position":[[116,5]]}}}],["initi",{"_index":815,"t":{"981":{"position":[[3100,10]]},"1392":{"position":[[588,13]]},"1463":{"position":[[718,13]]},"1498":{"position":[[612,13]]},"1500":{"position":[[501,13]]},"1502":{"position":[[526,13]]},"1504":{"position":[[678,13]]},"1506":{"position":[[504,13]]},"1508":{"position":[[536,13]]},"1510":{"position":[[635,13]]}}}],["insecur",{"_index":756,"t":{"954":{"position":[[1184,8]]},"981":{"position":[[5496,8]]},"1288":{"position":[[804,8]]}}}],["insecure_skip_verifi",{"_index":1235,"t":{"1154":{"position":[[181,20]]}}}],["instal",{"_index":104,"t":{"838":{"position":[[642,7]]},"844":{"position":[[148,7]]},"869":{"position":[[446,7]]},"873":{"position":[[223,7],[276,7]]},"882":{"position":[[136,7],[248,7]]},"1272":{"position":[[89,12]]},"1284":{"position":[[1074,10]]},"1368":{"position":[[154,12],[1820,12]]}}}],["install.sh",{"_index":908,"t":{"1025":{"position":[[453,10]]},"1027":{"position":[[431,10]]},"1033":{"position":[[675,10],[983,10]]},"1078":{"position":[[192,11]]},"1080":{"position":[[106,12],[240,12],[800,12]]},"1240":{"position":[[211,10],[813,10]]},"1244":{"position":[[205,10]]}}}],["install_k3s_bin_dir",{"_index":1425,"t":{"1244":{"position":[[623,19],[744,25]]}}}],["install_k3s_bin_dir_read_onli",{"_index":1426,"t":{"1244":{"position":[[694,29]]}}}],["install_k3s_channel",{"_index":1437,"t":{"1244":{"position":[[1407,19]]}}}],["install_k3s_channel=latest",{"_index":1439,"t":{"1244":{"position":[[1555,26]]},"1360":{"position":[[395,26]]}}}],["install_k3s_channel_url",{"_index":1434,"t":{"1244":{"position":[[1306,23]]}}}],["install_k3s_exec",{"_index":1038,"t":{"1089":{"position":[[133,25],[654,18]]},"1244":{"position":[[880,16]]},"1360":{"position":[[55,16]]}}}],["install_k3s_exec=\"ag",{"_index":1044,"t":{"1089":{"position":[[851,23],[967,24]]}}}],["install_k3s_exec=\"serv",{"_index":1039,"t":{"1089":{"position":[[309,25],[411,24]]},"1097":{"position":[[176,25]]}}}],["install_k3s_exec='arg",{"_index":1027,"t":{"1080":{"position":[[412,23]]}}}],["install_k3s_exec='serv",{"_index":1028,"t":{"1080":{"position":[[671,24]]}}}],["install_k3s_exec、k3s_",{"_index":1037,"t":{"1089":{"position":[[90,21]]}}}],["install_k3s_mirror=cn",{"_index":909,"t":{"1025":{"position":[[466,21]]},"1027":{"position":[[444,21]]},"1033":{"position":[[688,21],[996,21]]},"1240":{"position":[[224,21],[826,21]]},"1244":{"position":[[218,21]]}}}],["install_k3s_nam",{"_index":1429,"t":{"1244":{"position":[[995,16]]}}}],["install_k3s_selinux_warn",{"_index":1432,"t":{"1244":{"position":[[1185,24]]}}}],["install_k3s_selinux_warn=tru",{"_index":420,"t":{"873":{"position":[[415,30]]}}}],["install_k3s_skip_download",{"_index":1023,"t":{"1078":{"position":[[481,25]]},"1244":{"position":[[285,25]]}}}],["install_k3s_skip_download=tru",{"_index":1024,"t":{"1080":{"position":[[75,30],[153,30],[353,47],[640,30]]},"1244":{"position":[[770,31]]}}}],["install_k3s_skip_en",{"_index":1420,"t":{"1244":{"position":[[453,23]]}}}],["install_k3s_skip_enable=tru",{"_index":338,"t":{"860":{"position":[[277,28]]}}}],["install_k3s_skip_selinux_rpm",{"_index":1433,"t":{"1244":{"position":[[1247,28]]}}}],["install_k3s_skip_selinux_rpm=tru",{"_index":411,"t":{"873":{"position":[[159,33]]}}}],["install_k3s_skip_start",{"_index":1421,"t":{"1244":{"position":[[505,22]]}}}],["install_k3s_skip_start=tru",{"_index":337,"t":{"860":{"position":[[249,27]]}}}],["install_k3s_symlink",{"_index":1418,"t":{"1244":{"position":[[342,19]]}}}],["install_k3s_systemd_dir",{"_index":1427,"t":{"1244":{"position":[[802,23]]}}}],["install_k3s_typ",{"_index":1431,"t":{"1244":{"position":[[1120,16]]}}}],["install_k3s_vers",{"_index":1422,"t":{"1244":{"position":[[553,19]]}}}],["install_k3s_version=vx.y.z",{"_index":1982,"t":{"1360":{"position":[[521,26]]}}}],["instead",{"_index":612,"t":{"920":{"position":[[3367,7]]},"981":{"position":[[6910,7]]}}}],["integr",{"_index":1803,"t":{"1292":{"position":[[323,9]]}}}],["intel",{"_index":1441,"t":{"1246":{"position":[[106,5],[170,5],[224,5]]},"1254":{"position":[[64,5]]},"1258":{"position":[[58,5],[120,5],[158,5]]},"1260":{"position":[[85,5],[147,5],[185,5]]},"1262":{"position":[[19,5]]}}}],["interfac",{"_index":539,"t":{"910":{"position":[[191,9]]},"920":{"position":[[2865,9]]},"981":{"position":[[4323,10],[7927,9]]},"1328":{"position":[[295,9],[328,9]]}}}],["intermedi",{"_index":638,"t":{"929":{"position":[[800,12],[820,12]]}}}],["internalip",{"_index":1392,"t":{"1232":{"position":[[136,10]]}}}],["internet",{"_index":1005,"t":{"1067":{"position":[[39,8]]},"1272":{"position":[[224,8]]},"1368":{"position":[[807,8]]}}}],["interv",{"_index":829,"t":{"981":{"position":[[4601,8]]}}}],["intervent",{"_index":1511,"t":{"1272":{"position":[[461,12]]},"1290":{"position":[[178,13]]}}}],["intra",{"_index":1635,"t":{"1280":{"position":[[5867,5],[6070,5],[6265,5]]},"1282":{"position":[[380,5]]}}}],["invalid",{"_index":1186,"t":{"1138":{"position":[[426,8],[450,7]]}}}],["investig",{"_index":1828,"t":{"1298":{"position":[[163,11]]},"1300":{"position":[[240,13]]},"1302":{"position":[[239,13]]}}}],["io",{"_index":1263,"t":{"1170":{"position":[[307,2]]},"1252":{"position":[[77,2]]},"1266":{"position":[[405,2]]}}}],["io/etcd/releases/download/${etcd_version}/etcd",{"_index":199,"t":{"840":{"position":[[158,46]]}}}],["io/k3",{"_index":424,"t":{"875":{"position":[[235,6]]}}}],["io/k3s/blob/<version>/k3",{"_index":286,"t":{"852":{"position":[[157,25]]}}}],["io/k3s/raw/master/contrib/util/gener",{"_index":644,"t":{"929":{"position":[[1231,39]]},"931":{"position":[[934,39]]}}}],["io/k3s/raw/master/contrib/util/rot",{"_index":659,"t":{"933":{"position":[[662,37]]}}}],["io/k3s/releases/download/v1.26.5+k3s1/k3",{"_index":1052,"t":{"1091":{"position":[[194,42]]}}}],["iop",{"_index":1292,"t":{"1180":{"position":[[61,4]]},"1248":{"position":[[52,3],[169,3]]},"1250":{"position":[[196,4]]},"1258":{"position":[[201,4]]},"1268":{"position":[[49,4]]}}}],["iot",{"_index":7,"t":{"821":{"position":[[89,3]]}}}],["ip",{"_index":62,"t":{"836":{"position":[[395,2],[454,2],[472,6]]},"910":{"position":[[18,2],[45,2],[67,2],[86,2]]},"920":{"position":[[2538,2],[2634,2],[2681,2]]},"951":{"position":[[309,2]]},"963":{"position":[[137,2]]},"969":{"position":[[52,2],[116,2],[268,6],[512,2],[527,2]]},"981":{"position":[[873,3],[1334,3],[1439,3],[1643,2],[2100,2],[2134,2],[7600,2],[7696,2],[7743,2]]},"1002":{"position":[[92,2]]},"1029":{"position":[[163,2]]},"1031":{"position":[[39,2],[141,2],[240,2],[402,2],[440,2]]},"1078":{"position":[[269,5],[320,2],[350,2],[372,2],[414,2]]},"1115":{"position":[[549,2],[559,2],[590,11],[618,2],[725,2],[731,2]]},"1119":{"position":[[209,2],[354,2],[431,2],[578,2],[713,2],[740,2],[766,2]]},"1123":{"position":[[266,6]]},"1127":{"position":[[205,2]]},"1129":{"position":[[45,7],[53,2],[260,2],[529,3],[536,2],[549,2],[555,2],[596,2],[606,6]]},"1131":{"position":[[647,2]]},"1182":{"position":[[32,13]]},"1222":{"position":[[263,2],[281,2],[344,3]]},"1232":{"position":[[105,2],[126,2]]},"1288":{"position":[[1769,2]]},"1423":{"position":[[2597,2]]},"1425":{"position":[[2545,2]]},"1427":{"position":[[2414,2]]},"1429":{"position":[[2363,2]]},"1431":{"position":[[2376,2]]},"1433":{"position":[[2489,2]]},"1435":{"position":[[2450,2]]},"1439":{"position":[[2523,2]]},"1441":{"position":[[2504,2]]},"1443":{"position":[[2400,2]]},"1445":{"position":[[2516,2]]},"1447":{"position":[[2381,2]]},"1449":{"position":[[2296,2]]},"1459":{"position":[[2471,2]]},"1465":{"position":[[2513,2]]},"1467":{"position":[[2429,2]]},"1469":{"position":[[2435,2]]},"1480":{"position":[[1956,2]]},"1482":{"position":[[2024,2]]},"1484":{"position":[[2109,2]]},"1486":{"position":[[2006,2]]},"1542":{"position":[[2780,2]]},"1544":{"position":[[2794,2]]},"1546":{"position":[[2909,2]]}}}],["ip/nod",{"_index":773,"t":{"963":{"position":[[129,7]]},"981":{"position":[[865,7]]}}}],["ip6tabl",{"_index":1135,"t":{"1119":{"position":[[876,9],[911,9]]},"1218":{"position":[[356,9],[395,9]]}}}],["ip=0.0.0.0",{"_index":1146,"t":{"1123":{"position":[[202,11]]}}}],["ip=<agent_external_ip",{"_index":1163,"t":{"1129":{"position":[[290,22]]}}}],["ip=<server_external_ip",{"_index":1162,"t":{"1129":{"position":[[182,23]]}}}],["ipam",{"_index":1141,"t":{"1121":{"position":[[719,13]]}}}],["ipc、net",{"_index":1960,"t":{"1348":{"position":[[282,7]]}}}],["ipsec",{"_index":807,"t":{"981":{"position":[[1918,7]]},"1115":{"position":[[894,5],[1187,5]]},"1117":{"position":[[89,5],[381,10]]}}}],["iptabl",{"_index":339,"t":{"863":{"position":[[18,8],[118,8],[222,8]]},"869":{"position":[[33,8]]},"884":{"position":[[23,8],[153,8],[318,8]]},"1119":{"position":[[812,8],[825,8],[859,8]]},"1168":{"position":[[128,9]]},"1206":{"position":[[28,27],[56,11]]},"1210":{"position":[[892,8]]},"1218":{"position":[[171,8],[246,8],[262,8],[301,8],[339,8]]},"1222":{"position":[[179,8]]},"1286":{"position":[[751,8],[1374,8]]},"1316":{"position":[[23,8],[137,8],[264,9],[296,8],[392,8],[544,8]]},"1354":{"position":[[118,8]]},"1554":{"position":[[280,8]]}}}],["iptables/nft",{"_index":346,"t":{"863":{"position":[[188,17]]}}}],["iptables、socat",{"_index":36,"t":{"823":{"position":[[525,21]]}}}],["ipv4",{"_index":774,"t":{"963":{"position":[[140,4]]},"969":{"position":[[260,4]]},"981":{"position":[[769,4],[1630,4]]},"1115":{"position":[[477,16]]},"1123":{"position":[[229,4],[323,4],[624,4],[681,10]]},"1125":{"position":[[208,4]]},"1174":{"position":[[223,4]]},"1236":{"position":[[620,5],[726,4],[853,4]]}}}],["ipv4/ipv6",{"_index":603,"t":{"920":{"position":[[2576,9],[2662,9]]},"963":{"position":[[269,9]]},"969":{"position":[[57,9],[121,9]]},"981":{"position":[[1066,9],[1295,9],[1396,9],[7638,9],[7724,9]]}}}],["ipv6",{"_index":314,"t":{"854":{"position":[[335,4]]},"951":{"position":[[322,4]]},"969":{"position":[[460,4],[485,4]]},"981":{"position":[[2025,4],[2055,4]]},"1113":{"position":[[38,5]]},"1115":{"position":[[446,4],[465,4],[494,4]]},"1123":{"position":[[136,4],[288,4],[651,4],[715,4],[745,4]]},"1125":{"position":[[32,4],[197,4]]},"1172":{"position":[[137,4]]},"1174":{"position":[[277,4]]},"1236":{"position":[[733,4],[840,4]]}}}],["ip。请注意，ag",{"_index":1166,"t":{"1129":{"position":[[385,12]]}}}],["ip）。k3",{"_index":1161,"t":{"1129":{"position":[[67,7]]}}}],["ip，agent_external_ip",{"_index":1165,"t":{"1129":{"position":[[350,20]]}}}],["issu",{"_index":340,"t":{"863":{"position":[[89,5]]},"1055":{"position":[[92,6],[177,22]]},"1123":{"position":[[70,5]]},"1306":{"position":[[456,6]]}}}],["issuer",{"_index":661,"t":{"935":{"position":[[16,6],[82,6],[310,6]]}}}],["issuer=https://kubernetes.default.svc.cluster.loc",{"_index":2148,"t":{"1423":{"position":[[2377,51]]},"1425":{"position":[[2325,51]]},"1427":{"position":[[2194,51]]},"1429":{"position":[[2143,51]]},"1431":{"position":[[2156,51]]},"1433":{"position":[[2269,51]]},"1435":{"position":[[2230,51]]},"1439":{"position":[[2303,51]]},"1441":{"position":[[2284,51]]},"1443":{"position":[[2180,51]]},"1445":{"position":[[2296,51]]},"1447":{"position":[[2161,51]]},"1449":{"position":[[2076,51]]},"1459":{"position":[[2251,51]]},"1465":{"position":[[2293,51]]},"1467":{"position":[[2209,51]]},"1469":{"position":[[2215,51]]},"1542":{"position":[[2560,51]]},"1544":{"position":[[2574,51]]},"1546":{"position":[[2689,51]]}}}],["issuer=k3",{"_index":1729,"t":{"1288":{"position":[[1581,10]]}}}],["item",{"_index":840,"t":{"981":{"position":[[5802,6]]}}}],["itself",{"_index":1534,"t":{"1272":{"position":[[1101,6]]}}}],["iv",{"_index":1134,"t":{"1119":{"position":[[847,2],[899,2]]}}}],["jbmvl",{"_index":112,"t":{"838":{"position":[[764,5]]}}}],["jbmvl_kube",{"_index":132,"t":{"838":{"position":[[1033,10],[1196,10],[1537,10]]}}}],["job",{"_index":1959,"t":{"1348":{"position":[[206,3],[210,12],[257,3]]},"1352":{"position":[[1168,4],[1568,4],[1647,4]]}}}],["join",{"_index":814,"t":{"981":{"position":[[2655,4],[2829,4],[3049,4]]},"1051":{"position":[[9,4]]}}}],["journalctl",{"_index":320,"t":{"856":{"position":[[57,10]]},"860":{"position":[[139,10],[166,10]]},"1047":{"position":[[148,10]]},"1392":{"position":[[518,13],[735,12]]},"1415":{"position":[[200,10]]},"1423":{"position":[[430,10]]},"1425":{"position":[[413,10]]},"1427":{"position":[[287,10]]},"1429":{"position":[[253,10]]},"1431":{"position":[[266,10]]},"1433":{"position":[[357,10]]},"1435":{"position":[[264,10]]},"1439":{"position":[[330,10]]},"1441":{"position":[[352,10]]},"1443":{"position":[[248,10]]},"1445":{"position":[[383,10]]},"1447":{"position":[[244,10]]},"1449":{"position":[[195,10]]},"1459":{"position":[[325,10]]},"1463":{"position":[[648,13],[865,12]]},"1465":{"position":[[392,10]]},"1467":{"position":[[327,10]]},"1469":{"position":[[339,10]]},"1471":{"position":[[381,10]]},"1475":{"position":[[933,10]]},"1478":{"position":[[282,10]]},"1480":{"position":[[212,10]]},"1482":{"position":[[232,10]]},"1484":{"position":[[328,10]]},"1486":{"position":[[265,10]]},"1493":{"position":[[199,10]]},"1495":{"position":[[209,10]]},"1498":{"position":[[542,13],[759,12]]},"1500":{"position":[[431,13],[648,12]]},"1502":{"position":[[456,13],[673,12]]},"1504":{"position":[[608,13],[825,12]]},"1506":{"position":[[434,13],[651,12]]},"1508":{"position":[[466,13],[683,12]]},"1510":{"position":[[565,13],[782,12]]},"1516":{"position":[[79,10]]},"1542":{"position":[[497,12],[590,10]]},"1544":{"position":[[483,12],[576,10]]},"1546":{"position":[[539,12],[632,10]]},"1548":{"position":[[449,10]]},"1550":{"position":[[506,10]]},"1560":{"position":[[667,10]]}}}],["journald",{"_index":942,"t":{"1047":{"position":[[133,8]]}}}],["k10",{"_index":847,"t":{"987":{"position":[[90,3]]}}}],["k3",{"_index":0,"t":{"821":{"position":[[0,3]]},"823":{"position":[[0,3],[305,27],[359,16],[392,6]]},"827":{"position":[[13,3],[27,3]]},"830":{"position":[[0,3],[93,3]]},"832":{"position":[[0,3],[33,3],[85,3]]},"834":{"position":[[0,9],[131,3]]},"836":{"position":[[6,3],[37,3],[51,11],[105,3],[368,3],[669,3]]},"838":{"position":[[0,3],[111,3],[152,3],[209,3],[347,4],[415,3]]},"840":{"position":[[64,3],[339,3]]},"842":{"position":[[0,3]]},"844":{"position":[[17,3],[21,9],[245,15],[292,3]]},"848":{"position":[[34,3]]},"850":{"position":[[16,26],[71,3],[100,3],[129,3],[336,3],[461,3]]},"852":{"position":[[203,3],[236,3],[259,4],[266,3],[375,3],[502,3],[619,3],[701,3]]},"854":{"position":[[9,3],[123,3],[352,3]]},"856":{"position":[[27,3],[81,3]]},"858":{"position":[[0,3],[193,25]]},"860":{"position":[[180,3]]},"863":{"position":[[102,3],[174,13],[212,3]]},"869":{"position":[[90,10]]},"871":{"position":[[13,3],[62,3],[104,3],[199,3],[277,3],[303,3],[385,3],[454,3],[517,3]]},"873":{"position":[[57,15]]},"875":{"position":[[17,3],[60,3],[231,3],[259,3]]},"878":{"position":[[73,12],[117,3]]},"880":{"position":[[0,8],[52,3],[237,5]]},"882":{"position":[[22,3]]},"886":{"position":[[28,3],[68,3],[97,3],[137,3],[159,3]]},"888":{"position":[[26,3],[75,6],[103,3]]},"890":{"position":[[74,9],[84,3]]},"894":{"position":[[11,3],[726,3]]},"896":{"position":[[0,3],[33,3],[47,3],[174,3],[191,3],[204,3],[308,3],[324,3],[459,3],[536,3],[594,3],[619,3],[651,3],[667,3],[687,3],[720,3],[744,3],[802,3],[828,3],[847,3],[865,3],[887,3],[904,3],[922,3]]},"898":{"position":[[14,3]]},"918":{"position":[[0,3],[113,3]]},"920":{"position":[[53,3],[87,3]]},"923":{"position":[[0,3],[33,3]]},"925":{"position":[[19,3],[52,3],[71,3],[82,3],[110,3],[130,3],[157,3],[280,3]]},"927":{"position":[[81,9],[239,3],[369,3],[463,3],[600,3]]},"929":{"position":[[61,3],[138,3],[241,3],[845,3],[1314,3]]},"931":{"position":[[17,3],[89,3],[253,3],[1046,3],[1148,10]]},"933":{"position":[[4,3],[25,3],[97,3],[441,3],[770,3],[894,10]]},"935":{"position":[[146,3],[682,3],[806,8]]},"937":{"position":[[36,3],[261,3],[314,3],[358,3],[416,8],[455,3],[548,3],[674,8],[713,3],[806,3],[842,12],[903,3],[958,4],[979,3],[1000,3],[1031,3],[1456,3],[1921,3],[2073,3],[2092,3],[2326,3],[2443,3],[2546,3],[2577,3],[2796,3],[2820,3]]},"939":{"position":[[0,3]]},"941":{"position":[[22,3]]},"943":{"position":[[63,3],[94,3],[110,3],[151,3],[166,3],[211,3],[240,3],[255,3],[295,3],[315,3],[370,3],[468,3],[564,3],[613,3],[661,3],[706,3],[735,3],[774,3],[853,3],[908,3]]},"945":{"position":[[90,3],[131,3],[146,3],[191,3],[220,3],[241,3],[313,3],[353,3],[374,3],[601,3],[649,3],[694,3],[723,3],[771,3],[850,3],[930,3]]},"947":{"position":[[82,3],[312,3]]},"949":{"position":[[14,3],[61,3]]},"963":{"position":[[38,3]]},"969":{"position":[[887,6]]},"973":{"position":[[113,3],[205,3]]},"981":{"position":[[55,3],[97,3],[625,3],[5987,3],[6131,3]]},"983":{"position":[[0,3]]},"985":{"position":[[0,3]]},"991":{"position":[[0,3]]},"993":{"position":[[480,3]]},"997":{"position":[[76,3],[115,3]]},"998":{"position":[[0,3],[54,14],[92,3],[135,3],[439,3],[501,3],[1026,3],[1235,3],[1520,3]]},"1002":{"position":[[79,3],[120,3]]},"1004":{"position":[[0,3],[31,3],[284,3],[322,3],[501,3],[765,3],[808,3]]},"1006":{"position":[[73,3],[401,3]]},"1008":{"position":[[314,8],[591,3],[656,3],[713,8]]},"1010":{"position":[[0,3]]},"1014":{"position":[[19,3]]},"1016":{"position":[[34,3]]},"1019":{"position":[[21,3],[103,6],[113,3]]},"1025":{"position":[[0,3],[59,3],[105,3],[189,3],[922,3],[941,3]]},"1029":{"position":[[3,3],[30,3],[209,3]]},"1033":{"position":[[292,3]]},"1035":{"position":[[62,3],[212,8]]},"1037":{"position":[[18,3]]},"1039":{"position":[[0,3]]},"1041":{"position":[[27,3]]},"1043":{"position":[[3,3]]},"1045":{"position":[[4,3]]},"1047":{"position":[[0,3],[16,3],[162,3],[275,3],[382,3]]},"1049":{"position":[[25,19]]},"1051":{"position":[[5,3],[30,3]]},"1055":{"position":[[7,3],[58,3],[88,3],[143,3],[161,3]]},"1057":{"position":[[185,3],[243,3]]},"1063":{"position":[[38,3]]},"1065":{"position":[[14,3],[28,3],[42,3],[63,3],[85,3],[129,4],[189,4]]},"1067":{"position":[[21,17]]},"1071":{"position":[[56,3]]},"1075":{"position":[[20,3],[121,5],[206,3]]},"1078":{"position":[[4,3],[36,3],[65,3],[156,3],[204,46],[514,3],[518,7]]},"1080":{"position":[[16,9],[49,7],[438,3],[816,3]]},"1083":{"position":[[40,3],[158,3],[171,3],[220,3],[240,3]]},"1085":{"position":[[0,3],[61,3],[104,3]]},"1087":{"position":[[11,3]]},"1089":{"position":[[71,3]]},"1091":{"position":[[14,3],[88,29],[118,3],[316,3],[336,3],[375,3],[394,3],[461,3],[482,3],[502,3],[522,3]]},"1093":{"position":[[54,4],[273,3]]},"1097":{"position":[[245,3],[282,3]]},"1099":{"position":[[11,3]]},"1101":{"position":[[183,3]]},"1103":{"position":[[482,3]]},"1105":{"position":[[29,3],[94,3]]},"1107":{"position":[[14,3],[35,3]]},"1109":{"position":[[5,3],[231,3]]},"1111":{"position":[[5,3],[53,3],[117,3]]},"1113":{"position":[[6,3]]},"1117":{"position":[[36,3],[135,3],[247,3],[415,14]]},"1119":{"position":[[29,3],[597,3],[614,3],[695,3]]},"1121":{"position":[[0,3]]},"1123":{"position":[[161,3],[348,3]]},"1125":{"position":[[187,3]]},"1127":{"position":[[0,3],[63,3]]},"1129":{"position":[[0,3],[613,3],[717,3]]},"1131":{"position":[[37,3],[96,3],[481,20],[625,3]]},"1136":{"position":[[0,3],[171,3],[175,12]]},"1138":{"position":[[224,3],[243,3],[798,25]]},"1142":{"position":[[188,35]]},"1144":{"position":[[68,3],[195,3],[247,3],[710,3]]},"1148":{"position":[[50,7],[371,3]]},"1158":{"position":[[396,4]]},"1160":{"position":[[25,3],[59,3],[81,3]]},"1162":{"position":[[0,3],[28,3],[61,3],[85,3]]},"1166":{"position":[[0,3]]},"1168":{"position":[[0,3],[153,3]]},"1170":{"position":[[79,3],[97,3],[122,3],[150,3],[269,11],[318,3]]},"1172":{"position":[[0,3],[142,26],[251,3]]},"1174":{"position":[[89,3]]},"1176":{"position":[[8,3]]},"1178":{"position":[[4,3]]},"1180":{"position":[[27,3]]},"1182":{"position":[[67,3]]},"1184":{"position":[[0,3]]},"1186":{"position":[[21,3]]},"1188":{"position":[[53,4]]},"1190":{"position":[[144,4],[359,3],[402,3]]},"1192":{"position":[[24,26]]},"1196":{"position":[[6,3],[110,16],[127,3]]},"1198":{"position":[[15,8]]},"1200":{"position":[[14,8]]},"1204":{"position":[[10,3],[55,3]]},"1206":{"position":[[109,3]]},"1208":{"position":[[17,3]]},"1210":{"position":[[96,15],[299,22],[2306,3]]},"1212":{"position":[[78,3],[139,3]]},"1216":{"position":[[332,3],[569,3],[645,3],[677,3]]},"1218":{"position":[[0,3],[144,3],[224,3]]},"1220":{"position":[[28,3],[32,12],[238,25]]},"1224":{"position":[[2,3]]},"1232":{"position":[[0,16],[17,25],[325,3]]},"1234":{"position":[[120,21]]},"1236":{"position":[[232,3]]},"1238":{"position":[[35,4],[43,3]]},"1240":{"position":[[0,3],[91,9],[259,3],[341,3],[405,3],[924,3],[974,3]]},"1242":{"position":[[8,3]]},"1244":{"position":[[71,3],[253,3],[328,3],[497,3],[545,3],[586,3],[646,3],[914,16],[1035,3],[1057,9],[1067,3],[1088,4],[1169,3],[1227,3],[1291,3],[1335,3],[1432,3]]},"1246":{"position":[[15,3],[95,3],[163,3],[214,3],[274,3],[340,3],[389,3],[477,3],[501,3],[508,3]]},"1248":{"position":[[29,3],[114,3],[145,3]]},"1250":{"position":[[19,3],[97,3]]},"1252":{"position":[[163,3],[218,3]]},"1256":{"position":[[17,3]]},"1258":{"position":[[15,3]]},"1260":{"position":[[7,3],[22,3],[41,3],[54,3]]},"1264":{"position":[[7,3]]},"1266":{"position":[[0,3],[313,3]]},"1270":{"position":[[8,3],[36,3]]},"1272":{"position":[[105,4],[249,3],[514,3],[808,3],[1163,3]]},"1276":{"position":[[237,4]]},"1278":{"position":[[204,3],[272,3],[356,3],[478,3]]},"1280":{"position":[[32,3],[175,3],[848,3],[989,3]]},"1282":{"position":[[1075,3]]},"1284":{"position":[[92,3],[297,4],[1067,3],[1107,4],[1369,3]]},"1288":{"position":[[21,3]]},"1290":{"position":[[32,3],[242,4]]},"1292":{"position":[[565,3]]},"1294":{"position":[[664,3]]},"1296":{"position":[[545,3]]},"1298":{"position":[[385,3]]},"1300":{"position":[[560,3]]},"1302":{"position":[[546,3]]},"1304":{"position":[[770,3]]},"1306":{"position":[[563,3]]},"1308":{"position":[[371,3]]},"1310":{"position":[[334,3],[414,3]]},"1312":{"position":[[637,3]]},"1316":{"position":[[688,3]]},"1318":{"position":[[774,3]]},"1320":{"position":[[38,3]]},"1322":{"position":[[0,3]]},"1324":{"position":[[0,3],[99,3]]},"1328":{"position":[[0,3],[90,3],[162,3],[250,3]]},"1330":{"position":[[0,3]]},"1336":{"position":[[23,3]]},"1345":{"position":[[55,3],[139,3],[162,3],[249,3],[260,34],[527,3]]},"1348":{"position":[[45,3],[154,3],[409,3],[455,3],[538,3],[605,3],[681,3],[735,3],[756,3]]},"1352":{"position":[[123,3],[1249,3],[1349,3]]},"1354":{"position":[[0,17],[22,3],[44,3],[64,3],[91,11]]},"1356":{"position":[[12,22]]},"1358":{"position":[[270,3],[341,3]]},"1360":{"position":[[8,36]]},"1362":{"position":[[7,4],[33,3],[89,3],[104,3]]},"1364":{"position":[[27,4],[76,3],[115,3],[158,3],[195,3]]},"1368":{"position":[[46,3],[170,4],[350,3],[481,3],[931,3],[1102,3],[1192,3],[1309,3],[1614,3],[1781,3]]},"1392":{"position":[[345,3],[555,3],[771,3]]},"1415":{"position":[[234,3]]},"1423":{"position":[[464,3],[679,3]]},"1425":{"position":[[447,3],[627,3]]},"1427":{"position":[[321,3],[496,3]]},"1429":{"position":[[287,3],[445,3]]},"1431":{"position":[[300,3],[458,3]]},"1433":{"position":[[391,3],[571,3]]},"1435":{"position":[[298,3],[532,3]]},"1439":{"position":[[364,3],[605,3]]},"1441":{"position":[[386,3],[586,3]]},"1443":{"position":[[282,3],[482,3]]},"1445":{"position":[[417,3],[598,3]]},"1447":{"position":[[278,3],[463,3]]},"1449":{"position":[[229,3],[378,3]]},"1459":{"position":[[359,3],[553,3]]},"1463":{"position":[[475,3],[685,3],[901,3]]},"1465":{"position":[[426,3],[595,3],[2771,3]]},"1467":{"position":[[361,3],[511,3]]},"1469":{"position":[[373,3],[517,3]]},"1471":{"position":[[415,3]]},"1475":{"position":[[967,3]]},"1478":{"position":[[316,3]]},"1480":{"position":[[246,3],[404,3]]},"1482":{"position":[[266,3],[472,3]]},"1484":{"position":[[362,3],[557,3]]},"1486":{"position":[[299,3],[454,3]]},"1493":{"position":[[233,3],[363,3]]},"1495":{"position":[[243,3],[437,3]]},"1498":{"position":[[369,3],[579,3],[795,3]]},"1500":{"position":[[258,3],[468,3],[684,3]]},"1502":{"position":[[283,3],[493,3],[709,3]]},"1504":{"position":[[435,3],[645,3],[861,3]]},"1506":{"position":[[261,3],[471,3],[687,3]]},"1508":{"position":[[293,3],[503,3],[719,3]]},"1510":{"position":[[392,3],[602,3],[818,3]]},"1516":{"position":[[113,3]]},"1542":{"position":[[533,3],[624,3],[862,3]]},"1544":{"position":[[519,3],[610,3],[876,3]]},"1546":{"position":[[575,3],[666,3],[991,3]]},"1548":{"position":[[483,3],[668,3],[1891,3]]},"1550":{"position":[[540,3]]},"1560":{"position":[[701,3],[859,3],[2082,3]]}}}],["k3d",{"_index":393,"t":{"871":{"position":[[24,3],[35,3],[75,3],[144,3]]}}}],["k3s.servic",{"_index":1686,"t":{"1284":{"position":[[1474,11]]}}}],["k3s1",{"_index":400,"t":{"871":{"position":[[357,4]]}}}],["k3s[1592",{"_index":2259,"t":{"1548":{"position":[[701,10]]},"1560":{"position":[[892,10]]}}}],["k3s[1600",{"_index":2134,"t":{"1423":{"position":[[712,10]]},"1425":{"position":[[660,10]]},"1427":{"position":[[529,10]]},"1429":{"position":[[478,10]]},"1431":{"position":[[491,10]]},"1433":{"position":[[604,10]]},"1435":{"position":[[565,10]]},"1439":{"position":[[638,10]]},"1441":{"position":[[619,10]]},"1443":{"position":[[515,10]]},"1445":{"position":[[631,10]]},"1447":{"position":[[496,10]]},"1449":{"position":[[411,10]]},"1459":{"position":[[586,10]]},"1465":{"position":[[628,10],[2804,10]]},"1467":{"position":[[544,10]]},"1469":{"position":[[550,10]]},"1480":{"position":[[437,10]]},"1482":{"position":[[505,10]]},"1484":{"position":[[590,10]]},"1486":{"position":[[487,10]]},"1493":{"position":[[396,10]]},"1495":{"position":[[470,10]]},"1542":{"position":[[895,10]]},"1544":{"position":[[909,10]]},"1546":{"position":[[1024,10]]},"1548":{"position":[[1924,10]]},"1560":{"position":[[2115,10]]}}}],["k3s_",{"_index":1055,"t":{"1091":{"position":[[274,4]]},"1244":{"position":[[1589,4]]},"1360":{"position":[[72,7]]}}}],["k3s_agent_token",{"_index":760,"t":{"956":{"position":[[156,15]]},"981":{"position":[[2873,18]]},"991":{"position":[[127,15]]}}}],["k3s_agent_token_fil",{"_index":761,"t":{"956":{"position":[[230,20]]},"981":{"position":[[2960,23]]}}}],["k3s_cluster_init",{"_index":762,"t":{"956":{"position":[[328,16]]},"981":{"position":[[3145,19]]}}}],["k3s_cluster_reset",{"_index":694,"t":{"937":{"position":[[1369,20]]},"956":{"position":[[379,17]]},"981":{"position":[[3248,20]]}}}],["k3s_cluster_secret",{"_index":542,"t":{"916":{"position":[[77,18]]},"979":{"position":[[112,18]]}}}],["k3s_config_fil",{"_index":551,"t":{"920":{"position":[[219,18]]},"981":{"position":[[230,18]]},"1093":{"position":[[643,16]]}}}],["k3s_datastore_cafil",{"_index":744,"t":{"954":{"position":[[127,20]]},"981":{"position":[[3998,23]]},"1006":{"position":[[296,20]]}}}],["k3s_datastore_certfil",{"_index":746,"t":{"954":{"position":[[199,22]]},"981":{"position":[[4124,25]]},"1006":{"position":[[439,22]]}}}],["k3s_datastore_endpoint",{"_index":741,"t":{"954":{"position":[[38,22]]},"981":{"position":[[3864,25]]},"1006":{"position":[[179,22]]}}}],["k3s_datastore_endpoint='mysql://username:password@tcp(hostname:3306)/databas",{"_index":1029,"t":{"1080":{"position":[[714,77]]}}}],["k3s_datastore_keyfil",{"_index":748,"t":{"954":{"position":[[271,21]]},"981":{"position":[[4241,24]]},"1006":{"position":[[579,21]]}}}],["k3s_debug",{"_index":554,"t":{"920":{"position":[[275,12]]},"981":{"position":[[286,12]]}}}],["k3s_kubeconfig_mod",{"_index":766,"t":{"958":{"position":[[128,19]]},"981":{"position":[[2576,22]]}}}],["k3s_kubeconfig_mode=\"644",{"_index":1056,"t":{"1091":{"position":[[290,25]]},"1097":{"position":[[150,25],[256,25]]}}}],["k3s_kubeconfig_output",{"_index":765,"t":{"958":{"position":[[46,21]]},"981":{"position":[[2480,24]]}}}],["k3s_lb_server_port",{"_index":527,"t":{"906":{"position":[[303,18]]},"920":{"position":[[1844,21]]},"981":{"position":[[8946,21]]}}}],["k3s_node_nam",{"_index":523,"t":{"906":{"position":[[29,13]]},"920":{"position":[[948,16]]},"981":{"position":[[6273,16]]},"1164":{"position":[[105,14]]},"1234":{"position":[[99,13]]},"1240":{"position":[[1095,13]]}}}],["k3s_resolv_conf",{"_index":536,"t":{"910":{"position":[[112,15]]},"920":{"position":[[2780,18]]},"981":{"position":[[7842,18]]}}}],["k3s_rootless_cidr",{"_index":309,"t":{"854":{"position":[[222,17]]}}}],["k3s_rootless_disable_host_loopback",{"_index":318,"t":{"854":{"position":[[475,34]]}}}],["k3s_rootless_enable_ipv6",{"_index":312,"t":{"854":{"position":[[282,24]]}}}],["k3s_rootless_mtu",{"_index":306,"t":{"854":{"position":[[174,16]]}}}],["k3s_rootless_port_driv",{"_index":315,"t":{"854":{"position":[[368,24]]}}}],["k3s_selinux",{"_index":526,"t":{"906":{"position":[[243,11]]},"920":{"position":[[1581,14]]},"981":{"position":[[8683,14]]}}}],["k3s_system_default_registri",{"_index":841,"t":{"981":{"position":[[7562,30]]}}}],["k3s_token",{"_index":518,"t":{"902":{"position":[[35,9]]},"920":{"position":[[648,12]]},"956":{"position":[[35,9]]},"981":{"position":[[16,32],[2691,12]]},"991":{"position":[[97,9]]},"1027":{"position":[[87,9]]},"1240":{"position":[[608,9]]},"1244":{"position":[[1691,10]]}}}],["k3s_token=\"mypassword",{"_index":1047,"t":{"1089":{"position":[[992,22]]}}}],["k3s_token=12345",{"_index":1041,"t":{"1089":{"position":[[460,15],[515,15]]}}}],["k3s_token=<your_token",{"_index":1026,"t":{"1080":{"position":[[217,22]]}}}],["k3s_token=mynodetoken",{"_index":1414,"t":{"1240":{"position":[[712,21],[878,21]]}}}],["k3s_token=mypassword",{"_index":1049,"t":{"1089":{"position":[[1215,20]]}}}],["k3s_token=secret",{"_index":914,"t":{"1029":{"position":[[192,16]]},"1033":{"position":[[554,16],[710,16],[827,16],[1018,16],[1471,16]]}}}],["k3s_token_fil",{"_index":520,"t":{"902":{"position":[[74,14]]},"920":{"position":[[727,17]]},"956":{"position":[[93,14]]},"981":{"position":[[2759,17]]}}}],["k3s_url",{"_index":521,"t":{"902":{"position":[[126,7]]},"920":{"position":[[16,30],[801,10]]},"956":{"position":[[286,7]]},"981":{"position":[[3064,10]]},"1089":{"position":[[615,7],[1274,7]]},"1129":{"position":[[401,7]]},"1240":{"position":[[598,7],[905,7]]},"1244":{"position":[[931,13],[959,13],[1637,7]]}}}],["k3s_url=https://<server_ip>:6443",{"_index":1025,"t":{"1080":{"position":[[184,32]]}}}],["k3s_url=https://k3s.example.com",{"_index":1048,"t":{"1089":{"position":[[1087,31],[1183,31]]}}}],["k3s_url=https://myserver:6443",{"_index":1413,"t":{"1240":{"position":[[682,29],[848,29]]}}}],["k3s。k3",{"_index":40,"t":{"825":{"position":[[95,7]]}}}],["k3s（agent",{"_index":336,"t":{"860":{"position":[[153,9]]}}}],["k3s，k3",{"_index":682,"t":{"937":{"position":[[573,7]]}}}],["k8",{"_index":11,"t":{"821":{"position":[[115,3]]},"1282":{"position":[[878,3],[1441,3],[2124,3]]}}}],["k8s.io",{"_index":327,"t":{"858":{"position":[[154,6]]},"1417":{"position":[[777,6],[1059,6],[1341,6],[1623,6],[1905,6],[2187,6],[2469,6]]},"1419":{"position":[[758,6],[1040,6],[1322,6],[1604,6],[1886,6],[2168,6],[2450,6]]},"1437":{"position":[[771,6],[1053,6],[1335,6],[1617,6],[1899,6],[2181,6],[2463,6]]},"1490":{"position":[[743,6],[1025,6],[1307,6],[1589,6],[1871,6],[2153,6],[2435,6]]}}}],["k8s_coredns_coredn",{"_index":182,"t":{"838":{"position":[[2227,19]]}}}],["k8s_lb",{"_index":130,"t":{"838":{"position":[[1003,6],[1167,6]]}}}],["k8s_local",{"_index":160,"t":{"838":{"position":[[1841,9]]}}}],["k8s_metric",{"_index":170,"t":{"838":{"position":[[2039,11]]}}}],["k8s_pod_coredn",{"_index":190,"t":{"838":{"position":[[2391,15]]}}}],["k8s_pod_loc",{"_index":192,"t":{"838":{"position":[[2551,13]]}}}],["k8s_pod_svclb",{"_index":154,"t":{"838":{"position":[[1515,13]]}}}],["k8s_pod_traefik",{"_index":156,"t":{"838":{"position":[[1671,15]]}}}],["k8s_traefik_traefik",{"_index":144,"t":{"838":{"position":[[1350,19]]}}}],["k8s。kubernet",{"_index":38,"t":{"825":{"position":[[57,14]]}}}],["keep",{"_index":1836,"t":{"1300":{"position":[[354,4]]},"1302":{"position":[[340,4]]}}}],["kep",{"_index":331,"t":{"858":{"position":[[383,3]]}}}],["kernel",{"_index":525,"t":{"906":{"position":[[173,6]]},"920":{"position":[[1876,6],[1905,6],[1946,6]]},"981":{"position":[[8255,6],[8284,6],[8325,6]]},"1210":{"position":[[330,6]]},"1274":{"position":[[48,6]]},"1276":{"position":[[75,6],[186,6],[246,6]]},"1286":{"position":[[189,6],[786,6]]},"1288":{"position":[[4043,6]]},"1552":{"position":[[333,6]]}}}],["kernel.keys.root_maxbytes=25000000",{"_index":1557,"t":{"1276":{"position":[[473,34]]}}}],["kernel.panic=10",{"_index":1555,"t":{"1276":{"position":[[434,15]]}}}],["kernel.panic_on_oops=1",{"_index":1556,"t":{"1276":{"position":[[450,22]]}}}],["key",{"_index":699,"t":{"937":{"position":[[1747,3],[1761,3],[1782,3],[1796,3],[2006,4],[2040,4],[2267,4],[2306,4],[2669,4],[2703,4]]},"947":{"position":[[216,3],[476,3],[904,3],[1017,3]]},"954":{"position":[[939,3],[977,3],[998,3],[1040,3]]},"981":{"position":[[4185,3],[5194,3],[5219,3],[5261,3],[5286,3]]},"1131":{"position":[[155,4],[177,21],[543,3]]},"1156":{"position":[[351,3],[610,3]]},"1236":{"position":[[540,4]]},"1288":{"position":[[1194,3],[1610,3],[1698,3],[1913,3],[2466,3],[2739,3],[4302,3]]},"1308":{"position":[[116,3]]},"1322":{"position":[[437,7]]},"1352":{"position":[[321,4],[669,4]]},"1392":{"position":[[1782,3],[1893,3]]},"1423":{"position":[[288,3],[413,3],[631,4],[1999,3],[2447,3],[2526,3],[2770,3]]},"1425":{"position":[[1947,3],[2395,3],[2474,3],[2718,3]]},"1427":{"position":[[1816,3],[2264,3],[2343,3],[2587,3]]},"1429":{"position":[[1765,3],[2213,3],[2292,3],[2536,3]]},"1431":{"position":[[1778,3],[2226,3],[2305,3],[2549,3]]},"1433":{"position":[[1891,3],[2339,3],[2418,3],[2662,3]]},"1435":{"position":[[1852,3],[2300,3],[2379,3],[2623,3]]},"1439":{"position":[[1925,3],[2373,3],[2452,3],[2696,3]]},"1441":{"position":[[1906,3],[2354,3],[2433,3],[2677,3]]},"1443":{"position":[[1802,3],[2250,3],[2329,3],[2573,3]]},"1445":{"position":[[1918,3],[2366,3],[2445,3],[2689,3]]},"1447":{"position":[[1783,3],[2231,3],[2310,3],[2554,3]]},"1449":{"position":[[1698,3],[2146,3],[2225,3],[2469,3]]},"1459":{"position":[[1873,3],[2321,3],[2400,3],[2644,3]]},"1461":{"position":[[181,3],[214,3],[276,3]]},"1463":{"position":[[278,3],[380,3],[1912,3],[2023,3]]},"1465":{"position":[[271,3],[353,3],[375,3],[542,3],[1915,3],[2363,3],[2442,3],[2686,3]]},"1467":{"position":[[1831,3],[2279,3],[2358,3],[2602,3]]},"1469":{"position":[[1837,3],[2285,3],[2364,3],[2608,3]]},"1480":{"position":[[972,3],[1149,3],[1328,3],[1505,3],[1885,3]]},"1482":{"position":[[1040,3],[1217,3],[1396,3],[1573,3],[1953,3]]},"1484":{"position":[[196,3],[230,3],[300,3],[450,3],[504,3],[1125,3],[1302,3],[1481,3],[1658,3],[2038,3]]},"1486":{"position":[[1022,3],[1199,3],[1378,3],[1555,3],[1935,3]]},"1498":{"position":[[255,3],[1806,3],[1917,3],[2138,4],[2190,3],[2265,3],[2344,3]]},"1500":{"position":[[1695,3],[1806,3]]},"1502":{"position":[[1720,3],[1831,3]]},"1504":{"position":[[316,3],[340,3],[1872,3],[1983,3],[2204,4],[2266,3],[2346,3],[2440,3]]},"1506":{"position":[[1698,3],[1809,3]]},"1508":{"position":[[1730,3],[1841,3]]},"1510":{"position":[[1829,3],[1940,3]]},"1542":{"position":[[2182,3],[2630,3],[2709,3],[2953,3]]},"1544":{"position":[[2196,3],[2644,3],[2723,3],[2967,3]]},"1546":{"position":[[2311,3],[2759,3],[2838,3],[3082,3]]},"1548":{"position":[[1818,3],[3041,3]]},"1560":{"position":[[231,3],[506,3],[528,3],[806,3],[2009,3],[3232,3]]}}}],["key1=value1:noexecut",{"_index":545,"t":{"918":{"position":[[206,21]]}}}],["key=/var/lib/rancher/k3s/server/tls/cli",{"_index":1715,"t":{"1288":{"position":[[1011,42]]},"1423":{"position":[[1760,42]]},"1425":{"position":[[1708,42]]},"1427":{"position":[[1577,42]]},"1429":{"position":[[1526,42]]},"1431":{"position":[[1539,42]]},"1433":{"position":[[1652,42]]},"1435":{"position":[[1613,42]]},"1439":{"position":[[1686,42]]},"1441":{"position":[[1667,42]]},"1443":{"position":[[1563,42]]},"1445":{"position":[[1679,42]]},"1447":{"position":[[1544,42]]},"1449":{"position":[[1459,42]]},"1459":{"position":[[1634,42]]},"1465":{"position":[[1676,42]]},"1467":{"position":[[1592,42]]},"1469":{"position":[[1598,42]]},"1542":{"position":[[1943,42]]},"1544":{"position":[[1957,42]]},"1546":{"position":[[2072,42]]}}}],["key=/var/lib/rancher/k3s/server/tls/etcd/client.key",{"_index":215,"t":{"840":{"position":[[517,51]]}}}],["key=<path/to/cli",{"_index":2126,"t":{"1423":{"position":[[393,19]]}}}],["key=<s3",{"_index":704,"t":{"937":{"position":[[1991,7],[2025,7],[2252,7],[2291,7],[2654,7],[2688,7]]}}}],["key_fil",{"_index":1233,"t":{"1154":{"position":[[115,8]]},"1156":{"position":[[327,9],[586,9]]}}}],["keyfil",{"_index":747,"t":{"954":{"position":[[257,7]]},"981":{"position":[[4162,7]]},"1006":{"position":[[547,7],[571,7]]},"1392":{"position":[[1744,10]]},"1463":{"position":[[1874,10],[2261,8],[2324,7]]},"1498":{"position":[[1768,10]]},"1500":{"position":[[1657,10]]},"1502":{"position":[[1682,10]]},"1504":{"position":[[1834,10]]},"1506":{"position":[[1660,10]]},"1508":{"position":[[1692,10]]},"1510":{"position":[[1791,10]]}}}],["keyfile=/var/lib/rancher/k3s/server/tls/etcd/client.key",{"_index":1708,"t":{"1288":{"position":[[699,55]]},"1423":{"position":[[1437,55]]},"1425":{"position":[[1385,55]]},"1427":{"position":[[1254,55]]},"1429":{"position":[[1203,55]]},"1431":{"position":[[1216,55]]},"1433":{"position":[[1329,55]]},"1435":{"position":[[1290,55]]},"1439":{"position":[[1363,55]]},"1441":{"position":[[1344,55]]},"1443":{"position":[[1240,55]]},"1445":{"position":[[1356,55]]},"1447":{"position":[[1221,55]]},"1449":{"position":[[1136,55]]},"1459":{"position":[[1311,55]]},"1465":{"position":[[1353,55]]},"1467":{"position":[[1269,55]]},"1469":{"position":[[1275,55]]},"1542":{"position":[[1620,55]]},"1544":{"position":[[1634,55]]},"1546":{"position":[[1749,55]]}}}],["keyfile=<path/to/cli",{"_index":2172,"t":{"1463":{"position":[[356,23]]}}}],["kib/sec",{"_index":1489,"t":{"1258":{"position":[[206,7]]}}}],["killal",{"_index":1977,"t":{"1354":{"position":[[83,7],[164,7]]}}}],["killall.sh",{"_index":1128,"t":{"1119":{"position":[[601,10]]},"1218":{"position":[[228,10]]},"1240":{"position":[[328,10]]},"1354":{"position":[[68,10],[199,10]]}}}],["kind",{"_index":241,"t":{"844":{"position":[[565,5],[642,5]]},"880":{"position":[[280,5]]},"1059":{"position":[[231,5],[301,5]]},"1061":{"position":[[408,5]]},"1103":{"position":[[91,5],[242,5],[339,5],[389,5]]},"1210":{"position":[[1125,5],[1255,5],[1640,5]]},"1236":{"position":[[436,5]]},"1280":{"position":[[451,5],[581,5],[1388,5],[2575,5],[3136,5],[3588,5],[4044,5],[4249,5],[4472,5],[4667,5],[4776,5],[4831,5],[4951,5],[5078,5],[5178,5],[5254,5],[5401,5],[5501,5],[5587,5],[5711,5],[5761,5],[5798,5],[6001,5],[6196,5]]},"1282":{"position":[[311,5],[692,5],[1325,5],[1539,5],[1780,5],[2008,5],[2222,5],[2463,5]]},"1284":{"position":[[758,5]]},"1322":{"position":[[284,7]]},"1332":{"position":[[15,5]]},"1334":{"position":[[15,5]]},"1338":{"position":[[15,5]]},"1340":{"position":[[15,5]]},"1352":{"position":[[188,5],[537,5],[1395,5]]}}}],["kine",{"_index":1492,"t":{"1266":{"position":[[33,9]]}}}],["kine/sqlit",{"_index":1440,"t":{"1246":{"position":[[50,11]]},"1258":{"position":[[108,11],[217,11]]},"1260":{"position":[[135,11]]}}}],["klipper",{"_index":31,"t":{"823":{"position":[[463,7]]},"1212":{"position":[[43,7]]},"1220":{"position":[[67,7]]}}}],["klog",{"_index":945,"t":{"1047":{"position":[[341,4]]}}}],["km",{"_index":1869,"t":{"1310":{"position":[[215,5]]},"1473":{"position":[[130,3]]}}}],["konnect",{"_index":1138,"t":{"1121":{"position":[[227,12]]}}}],["ksl",{"_index":233,"t":{"844":{"position":[[267,3]]}}}],["kube",{"_index":93,"t":{"838":{"position":[[494,4],[563,4],[625,4],[684,4],[738,4],[788,4]]},"884":{"position":[[166,4],[214,4]]},"894":{"position":[[118,4],[240,4],[306,4],[494,4]]},"896":{"position":[[283,4]]},"912":{"position":[[45,4],[66,4]]},"920":{"position":[[3109,4],[3164,4]]},"969":{"position":[[574,5]]},"973":{"position":[[150,4],[166,4]]},"975":{"position":[[39,4],[64,4],[90,4],[115,4],[141,4],[175,4],[210,4],[250,4],[328,4],[349,4]]},"981":{"position":[[2374,5],[3348,4],[3401,4],[3484,4],[3546,4],[3580,4],[3633,4],[3658,4],[3726,4],[6034,4],[6074,4],[8171,4],[8226,4]]},"1027":{"position":[[728,4]]},"1033":{"position":[[1697,4]]},"1059":{"position":[[128,4],[351,4]]},"1061":{"position":[[465,4]]},"1078":{"position":[[275,4]]},"1121":{"position":[[421,4],[585,4]]},"1134":{"position":[[144,4],[263,4]]},"1144":{"position":[[469,4],[538,4],[600,4]]},"1210":{"position":[[154,4],[377,4],[725,4],[991,4],[1487,5],[2857,4]]},"1218":{"position":[[25,4],[56,4],[201,4],[325,4],[381,4]]},"1222":{"position":[[97,4]]},"1236":{"position":[[790,13]]},"1280":{"position":[[189,4],[813,5],[1003,4],[5344,4],[5654,4],[5894,4],[5985,4],[6292,4],[6383,4],[6488,4]]},"1282":{"position":[[407,4],[498,4],[887,4],[1397,4],[1617,4],[1858,4],[2080,4],[2300,4],[2541,4]]},"1284":{"position":[[868,4],[949,4],[1207,4],[1290,4]]},"1286":{"position":[[236,4],[584,4],[833,4],[1207,4]]},"1288":{"position":[[172,4],[975,4],[1054,4],[1871,4],[1962,4],[2242,4],[2847,4]]},"1292":{"position":[[533,4]]},"1294":{"position":[[632,4]]},"1296":{"position":[[513,4]]},"1298":{"position":[[353,4]]},"1300":{"position":[[528,4]]},"1302":{"position":[[514,4]]},"1304":{"position":[[738,4]]},"1306":{"position":[[531,4]]},"1312":{"position":[[605,4]]},"1316":{"position":[[656,4]]},"1318":{"position":[[716,5],[730,4],[743,4]]},"1392":{"position":[[791,4]]},"1415":{"position":[[254,4]]},"1423":{"position":[[484,4],[775,4],[1724,4],[1803,4],[2737,4],[2819,4]]},"1425":{"position":[[467,4],[723,4],[1672,4],[1751,4],[2685,4],[2767,4]]},"1427":{"position":[[341,4],[592,4],[1541,4],[1620,4],[2554,4],[2636,4]]},"1429":{"position":[[307,4],[541,4],[1490,4],[1569,4],[2503,4],[2585,4]]},"1431":{"position":[[320,4],[554,4],[1503,4],[1582,4],[2516,4],[2598,4]]},"1433":{"position":[[411,4],[667,4],[1616,4],[1695,4],[2629,4],[2711,4]]},"1435":{"position":[[318,4],[628,4],[1577,4],[1656,4],[2590,4],[2672,4]]},"1439":{"position":[[384,4],[701,4],[1650,4],[1729,4],[2663,4],[2745,4]]},"1441":{"position":[[406,4],[682,4],[1631,4],[1710,4],[2644,4],[2726,4]]},"1443":{"position":[[302,4],[578,4],[1527,4],[1606,4],[2540,4],[2622,4]]},"1445":{"position":[[437,4],[694,4],[1643,4],[1722,4],[2656,4],[2738,4]]},"1447":{"position":[[298,4],[559,4],[1508,4],[1587,4],[2521,4],[2603,4]]},"1449":{"position":[[249,4],[474,4],[1423,4],[1502,4],[2436,4],[2518,4]]},"1459":{"position":[[379,4],[649,4],[1598,4],[1677,4],[2611,4],[2693,4]]},"1463":{"position":[[921,4]]},"1465":{"position":[[450,4],[691,4],[1640,4],[1719,4],[2653,4],[2735,4],[2867,4]]},"1467":{"position":[[381,4],[607,4],[1556,4],[1635,4],[2569,4],[2651,4]]},"1469":{"position":[[393,4],[613,4],[1562,4],[1641,4],[2575,4],[2657,4]]},"1471":{"position":[[435,4]]},"1475":{"position":[[987,4]]},"1478":{"position":[[336,4]]},"1480":{"position":[[266,4],[500,4],[854,4],[950,4]]},"1482":{"position":[[286,4],[568,4],[922,4],[1018,4]]},"1484":{"position":[[382,4],[653,4],[1007,4],[1103,4]]},"1486":{"position":[[319,4],[550,4],[904,4],[1000,4]]},"1493":{"position":[[253,4],[459,4]]},"1495":{"position":[[263,4],[533,4]]},"1498":{"position":[[815,4]]},"1500":{"position":[[704,4]]},"1502":{"position":[[729,4]]},"1504":{"position":[[881,4]]},"1506":{"position":[[707,4]]},"1508":{"position":[[739,4]]},"1510":{"position":[[838,4]]},"1516":{"position":[[133,4]]},"1542":{"position":[[553,4],[644,4],[958,4],[1907,4],[1986,4],[2920,4],[3002,4]]},"1544":{"position":[[539,4],[630,4],[972,4],[1921,4],[2000,4],[2934,4],[3016,4]]},"1546":{"position":[[595,4],[686,4],[1087,4],[2036,4],[2115,4],[3049,4],[3131,4]]}}}],["kube/config",{"_index":406,"t":{"871":{"position":[[556,14]]},"1002":{"position":[[43,19]]}}}],["kubeadm",{"_index":49,"t":{"834":{"position":[[100,7]]},"998":{"position":[[24,7]]}}}],["kubeadm.conf",{"_index":2234,"t":{"1521":{"position":[[191,12]]},"1523":{"position":[[197,12]]},"1542":{"position":[[226,12]]},"1544":{"position":[[212,12]]},"1546":{"position":[[255,12]]},"1548":{"position":[[202,12]]},"1550":{"position":[[239,12]]},"1552":{"position":[[224,12]]},"1554":{"position":[[225,12]]},"1556":{"position":[[107,12]]},"1558":{"position":[[223,12]]},"1560":{"position":[[345,12]]},"1562":{"position":[[279,12]]},"1564":{"position":[[107,12]]},"1566":{"position":[[528,12]]}}}],["kubeapi",{"_index":1913,"t":{"1322":{"position":[[128,7]]}}}],["kubeconfig",{"_index":403,"t":{"871":{"position":[[473,10]]},"896":{"position":[[394,10],[447,11]]},"958":{"position":[[19,10],[81,10],[106,10]]},"981":{"position":[[2397,10],[2439,10],[2513,10],[2550,10]]},"998":{"position":[[721,10],[743,13],[1187,10],[1209,13],[1472,10],[1494,13],[1679,10],[1701,13]]},"1000":{"position":[[31,10],[122,10],[148,10],[169,10],[208,10],[337,10],[365,10],[435,10]]},"1031":{"position":[[282,10]]},"1057":{"position":[[228,10]]},"1063":{"position":[[149,11]]},"1091":{"position":[[355,10]]},"1093":{"position":[[147,10],[294,10]]},"1095":{"position":[[304,10],[392,10],[507,10]]},"1097":{"position":[[329,10]]},"1240":{"position":[[359,10]]}}}],["kubeconfig=/etc/rancher/k3s/k3s.yaml",{"_index":880,"t":{"1000":{"position":[[232,36]]}}}],["kubeconfig=/var/lib/rancher/k3s/agent/kubelet.kubeconfig",{"_index":1777,"t":{"1288":{"position":[[3860,56]]},"1548":{"position":[[1399,56],[2622,56]]},"1560":{"position":[[1590,56],[2813,56]]}}}],["kubeconfig=/var/lib/rancher/k3s/server/cred/controller.kubeconfig",{"_index":1743,"t":{"1288":{"position":[[2523,65]]},"1480":{"position":[[568,65],[650,65],[1694,65]]},"1482":{"position":[[636,65],[718,65],[1762,65]]},"1484":{"position":[[721,65],[803,65],[1847,65]]},"1486":{"position":[[618,65],[700,65],[1744,65]]}}}],["kubeconfig=/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig",{"_index":1750,"t":{"1288":{"position":[[2917,64]]},"1465":{"position":[[2899,64],[2980,64],[3130,64]]},"1493":{"position":[[491,64],[572,64],[722,64]]},"1495":{"position":[[565,64],[646,64],[796,64]]}}}],["kubeconfig=~/.kube/k3s.yaml",{"_index":297,"t":{"852":{"position":[[518,27]]}}}],["kubeconfig。kubeconfig",{"_index":767,"t":{"958":{"position":[[156,21]]}}}],["kubectl",{"_index":86,"t":{"838":{"position":[[419,7]]},"846":{"position":[[95,7]]},"852":{"position":[[546,7]]},"858":{"position":[[425,32]]},"896":{"position":[[328,7],[342,7]]},"918":{"position":[[254,32]]},"969":{"position":[[766,7],[781,7]]},"1000":{"position":[[98,7],[269,7],[355,7]]},"1002":{"position":[[108,7]]},"1025":{"position":[[945,7]]},"1033":{"position":[[1123,7]]},"1085":{"position":[[218,7]]},"1101":{"position":[[187,7]]},"1103":{"position":[[486,7]]},"1105":{"position":[[33,7],[98,7]]},"1107":{"position":[[39,7]]},"1109":{"position":[[9,7],[235,7]]},"1111":{"position":[[9,7],[57,7],[121,7]]},"1121":{"position":[[479,7],[494,7]]},"1134":{"position":[[63,7],[198,7],[242,7]]},"1144":{"position":[[408,7]]},"1190":{"position":[[287,7],[311,7]]},"1210":{"position":[[2400,7],[2492,7],[2839,7]]},"1236":{"position":[[312,7]]},"1240":{"position":[[413,7]]},"1252":{"position":[[271,7]]},"1334":{"position":[[318,7],[345,7],[388,7],[403,7]]},"1336":{"position":[[126,7],[283,7],[310,7]]},"1340":{"position":[[328,7],[343,7]]},"1350":{"position":[[128,7]]},"1352":{"position":[[1549,7],[1573,7],[1617,7]]},"1569":{"position":[[314,7]]}}}],["kubectl、crictl",{"_index":1419,"t":{"1244":{"position":[[383,14]]}}}],["kubectl、crictl、ctr、k3",{"_index":1411,"t":{"1240":{"position":[[305,22]]}}}],["kubelet",{"_index":52,"t":{"836":{"position":[[96,8],[675,7]]},"838":{"position":[[56,10],[89,7]]},"846":{"position":[[50,14],[126,16]]},"852":{"position":[[117,7]]},"858":{"position":[[54,7]]},"886":{"position":[[223,14]]},"896":{"position":[[273,7]]},"906":{"position":[[115,7],[155,7],[214,7]]},"910":{"position":[[128,7]]},"912":{"position":[[8,7],[26,7]]},"918":{"position":[[54,7]]},"920":{"position":[[1073,7],[1144,7],[1981,7],[2755,7],[3039,7],[3091,7]]},"969":{"position":[[725,10]]},"975":{"position":[[291,7],[309,7]]},"981":{"position":[[6398,7],[6469,7],[7817,7],[8101,7],[8153,7],[8360,7]]},"1080":{"position":[[823,7]]},"1121":{"position":[[127,7],[374,7],[541,7],[654,8],[811,8]]},"1123":{"position":[[122,7],[184,7],[248,7]]},"1172":{"position":[[197,7]]},"1174":{"position":[[187,7]]},"1210":{"position":[[830,7]]},"1248":{"position":[[132,10]]},"1276":{"position":[[10,7],[43,7]]},"1286":{"position":[[689,7],[1312,7]]},"1288":{"position":[[831,7],[909,7],[996,7],[3037,7],[3919,7]]},"1316":{"position":[[79,8],[233,8]]},"1421":{"position":[[168,7]]},"1423":{"position":[[118,9],[257,7],[315,7],[378,7],[518,8],[570,7],[616,7],[1580,7],[1658,7],[1745,7],[1824,7]]},"1425":{"position":[[117,9],[262,7],[363,7],[501,8],[553,7],[1528,7],[1606,7],[1693,7],[1772,7]]},"1427":{"position":[[1397,7],[1475,7],[1562,7],[1641,7]]},"1429":{"position":[[1346,7],[1424,7],[1511,7],[1590,7]]},"1431":{"position":[[1359,7],[1437,7],[1524,7],[1603,7]]},"1433":{"position":[[1472,7],[1550,7],[1637,7],[1716,7]]},"1435":{"position":[[1433,7],[1511,7],[1598,7],[1677,7]]},"1439":{"position":[[1506,7],[1584,7],[1671,7],[1750,7]]},"1441":{"position":[[1487,7],[1565,7],[1652,7],[1731,7]]},"1443":{"position":[[1383,7],[1461,7],[1548,7],[1627,7]]},"1445":{"position":[[103,9],[1499,7],[1577,7],[1664,7],[1743,7]]},"1447":{"position":[[1364,7],[1442,7],[1529,7],[1608,7]]},"1449":{"position":[[1279,7],[1357,7],[1444,7],[1523,7]]},"1459":{"position":[[1454,7],[1532,7],[1619,7],[1698,7]]},"1465":{"position":[[1496,7],[1574,7],[1661,7],[1740,7]]},"1467":{"position":[[1412,7],[1490,7],[1577,7],[1656,7]]},"1469":{"position":[[1418,7],[1496,7],[1583,7],[1662,7]]},"1480":{"position":[[1045,7],[1134,7],[1222,7],[1312,7]]},"1482":{"position":[[1113,7],[1202,7],[1290,7],[1380,7]]},"1484":{"position":[[1198,7],[1287,7],[1375,7],[1465,7]]},"1486":{"position":[[1095,7],[1184,7],[1272,7],[1362,7]]},"1542":{"position":[[37,7],[164,7],[382,7],[1763,7],[1841,7],[1928,7],[2007,7]]},"1544":{"position":[[37,7],[150,7],[368,7],[1777,7],[1855,7],[1942,7],[2021,7]]},"1546":{"position":[[37,7],[193,7],[424,7],[1892,7],[1970,7],[2057,7],[2136,7]]},"1548":{"position":[[37,7],[140,7],[354,7],[503,8],[764,7],[1987,7]]},"1550":{"position":[[37,7],[177,7],[411,7],[560,8]]},"1552":{"position":[[47,7],[162,7],[388,7]]},"1554":{"position":[[47,7],[163,7],[388,7]]},"1556":{"position":[[45,7],[262,7]]},"1558":{"position":[[37,7],[161,7],[356,7]]},"1560":{"position":[[37,7],[155,8],[283,7],[572,7],[721,8],[955,7],[2178,7]]},"1562":{"position":[[47,7],[217,7],[438,7]]},"1564":{"position":[[45,7],[292,7]]},"1566":{"position":[[37,7],[466,7],[997,7]]}}}],["kubelet'",{"_index":1548,"t":{"1276":{"position":[[152,9]]}}}],["kubelet.conf",{"_index":1551,"t":{"1276":{"position":[[303,12],[379,13]]}}}],["kubelet.crt",{"_index":1788,"t":{"1288":{"position":[[4267,11]]},"1548":{"position":[[1792,11],[3015,11]]},"1560":{"position":[[1983,11],[3206,11]]}}}],["kubelet.key",{"_index":1790,"t":{"1288":{"position":[[4346,11]]},"1548":{"position":[[1862,12],[3085,12]]},"1560":{"position":[[2053,12],[3276,12]]}}}],["kubelet.servic",{"_index":2249,"t":{"1542":{"position":[[454,15]]},"1544":{"position":[[440,15]]},"1546":{"position":[[496,15]]},"1548":{"position":[[426,15]]},"1550":{"position":[[483,15]]},"1552":{"position":[[460,15]]},"1554":{"position":[[460,15]]},"1556":{"position":[[334,15]]},"1558":{"position":[[428,15]]},"1560":{"position":[[644,15]]},"1562":{"position":[[510,15]]},"1564":{"position":[[364,15]]},"1566":{"position":[[1069,15]]}}}],["kubelet_authz_arg",{"_index":2252,"t":{"1544":{"position":[[276,18]]},"1546":{"position":[[319,18]]}}}],["kubelet_certificate_arg",{"_index":2284,"t":{"1560":{"position":[[410,24]]},"1562":{"position":[[369,24]]},"1564":{"position":[[171,24]]}}}],["kubelet_system_pods_arg",{"_index":2247,"t":{"1542":{"position":[[290,24]]},"1548":{"position":[[266,24]]},"1550":{"position":[[303,24]]},"1552":{"position":[[288,24]]},"1554":{"position":[[319,24]]},"1556":{"position":[[193,24]]},"1558":{"position":[[287,24]]}}}],["kubelet、cni",{"_index":1139,"t":{"1121":{"position":[[407,11],[571,11]]}}}],["kubelet，kub",{"_index":618,"t":{"925":{"position":[[328,12]]}}}],["kubepod",{"_index":1472,"t":{"1252":{"position":[[198,8]]}}}],["kubernet",{"_index":3,"t":{"821":{"position":[[34,10],[128,10]]},"823":{"position":[[13,10],[280,10]]},"825":{"position":[[8,10],[19,19]]},"836":{"position":[[435,10]]},"838":{"position":[[40,10]]},"848":{"position":[[89,10]]},"858":{"position":[[114,10],[228,10],[458,10]]},"871":{"position":[[114,10]]},"888":{"position":[[115,10]]},"890":{"position":[[24,10],[124,10],[226,10]]},"892":{"position":[[29,10]]},"894":{"position":[[213,10],[442,10]]},"896":{"position":[[66,10],[262,10],[359,10],[499,10]]},"918":{"position":[[287,10]]},"927":{"position":[[0,10],[31,10],[57,10],[307,10]]},"947":{"position":[[977,13]]},"973":{"position":[[65,10]]},"981":{"position":[[5910,10]]},"1000":{"position":[[50,10],[79,10]]},"1004":{"position":[[8,10],[55,15],[71,10],[236,10]]},"1008":{"position":[[375,10],[803,10]]},"1019":{"position":[[53,10],[140,10]]},"1031":{"position":[[258,10]]},"1033":{"position":[[324,10]]},"1039":{"position":[[17,10],[39,10]]},"1047":{"position":[[325,10],[397,10],[419,10]]},"1053":{"position":[[0,13]]},"1057":{"position":[[7,10],[38,10]]},"1059":{"position":[[1392,10]]},"1099":{"position":[[22,10]]},"1103":{"position":[[150,10],[438,10]]},"1105":{"position":[[44,10],[109,10]]},"1109":{"position":[[27,10]]},"1111":{"position":[[27,10],[91,10],[148,10]]},"1115":{"position":[[32,10]]},"1121":{"position":[[208,10]]},"1123":{"position":[[59,10]]},"1134":{"position":[[86,53]]},"1138":{"position":[[51,10],[104,10],[199,10]]},"1172":{"position":[[566,10]]},"1174":{"position":[[106,10]]},"1196":{"position":[[70,10]]},"1210":{"position":[[0,10]]},"1220":{"position":[[111,10]]},"1222":{"position":[[17,10]]},"1236":{"position":[[61,13]]},"1238":{"position":[[69,10],[80,13]]},"1240":{"position":[[453,10]]},"1248":{"position":[[101,10]]},"1250":{"position":[[55,10],[212,10]]},"1266":{"position":[[22,10],[123,10],[189,10]]},"1270":{"position":[[68,10]]},"1272":{"position":[[174,10],[353,10]]},"1280":{"position":[[6405,10]]},"1284":{"position":[[704,10]]},"1286":{"position":[[126,10]]},"1296":{"position":[[73,10],[312,10]]},"1300":{"position":[[89,10]]},"1302":{"position":[[88,10]]},"1308":{"position":[[140,10]]},"1318":{"position":[[69,10],[230,10]]},"1320":{"position":[[92,10]]},"1326":{"position":[[99,10],[166,10]]},"1328":{"position":[[130,10],[254,22],[345,10]]},"1336":{"position":[[44,10]]},"1343":{"position":[[112,10]]},"1348":{"position":[[59,10],[760,15],[846,10]]},"1358":{"position":[[166,10],[345,15],[431,10]]},"1368":{"position":[[308,10],[518,10],[703,10],[886,10]]},"1423":{"position":[[37,10]]},"1425":{"position":[[37,10]]},"1433":{"position":[[37,10]]},"1445":{"position":[[37,10]]},"1463":{"position":[[37,10]]},"1465":{"position":[[37,10]]},"1467":{"position":[[37,10]]},"1469":{"position":[[37,10]]},"1471":{"position":[[37,10]]},"1473":{"position":[[37,10]]},"1513":{"position":[[61,10]]},"1577":{"position":[[70,10],[122,10]]},"1613":{"position":[[218,10]]},"1623":{"position":[[37,10]]},"1630":{"position":[[37,10]]},"1632":{"position":[[101,10]]}}}],["kubernetes.io",{"_index":326,"t":{"858":{"position":[[138,13]]}}}],["kubernetes.io/hostnam",{"_index":1407,"t":{"1236":{"position":[[545,22]]}}}],["kubernetes.io/rol",{"_index":328,"t":{"858":{"position":[[174,18]]}}}],["kubernetes_api",{"_index":990,"t":{"1059":{"position":[[1490,18]]}}}],["kubernetes。k3",{"_index":2,"t":{"821":{"position":[[10,14]]}}}],["l",{"_index":515,"t":{"900":{"position":[[112,1]]},"920":{"position":[[477,1]]},"937":{"position":[[2384,1]]},"961":{"position":[[136,1]]},"981":{"position":[[488,1]]},"1101":{"position":[[116,1]]},"1109":{"position":[[164,1]]},"1392":{"position":[[623,3]]},"1463":{"position":[[753,3]]},"1498":{"position":[[647,3]]},"1500":{"position":[[536,3]]},"1502":{"position":[[561,3]]},"1504":{"position":[[713,3]]},"1506":{"position":[[539,3]]},"1508":{"position":[[571,3]]},"1510":{"position":[[670,3]]},"1542":{"position":[[575,2]]},"1544":{"position":[[561,2]]},"1546":{"position":[[617,2]]}}}],["l2",{"_index":1274,"t":{"1172":{"position":[[504,2],[541,2]]}}}],["label",{"_index":324,"t":{"858":{"position":[[22,5]]},"906":{"position":[[87,5]]},"918":{"position":[[22,5],[150,5],[173,5]]},"920":{"position":[[1023,5],[1093,6]]},"981":{"position":[[6348,5],[6418,6]]},"1093":{"position":[[199,6],[350,5],[375,5],[560,5]]},"1095":{"position":[[244,6],[418,6],[545,6]]},"1210":{"position":[[1687,7]]},"1282":{"position":[[1117,6]]},"1288":{"position":[[3964,7]]}}}],["labels=rke.cattle.io/machine=00c4e7a0",{"_index":2264,"t":{"1548":{"position":[[1463,37]]},"1560":{"position":[[1654,37]]}}}],["labels=rke.cattle.io/machine=109d596c",{"_index":2273,"t":{"1548":{"position":[[2686,37]]},"1560":{"position":[[2877,37]]}}}],["larg",{"_index":1282,"t":{"1178":{"position":[[99,5],[124,5],[151,5]]},"1184":{"position":[[154,5],[179,5],[205,5]]},"1304":{"position":[[465,5]]}}}],["latest",{"_index":401,"t":{"871":{"position":[[402,6]]},"1210":{"position":[[1335,8],[1379,8],[1421,8]]},"1280":{"position":[[661,8],[705,8],[747,8]]},"1358":{"position":[[112,6]]},"1360":{"position":[[335,19]]}}}],["lazi",{"_index":428,"t":{"878":{"position":[[99,4],[188,4],[259,4],[412,4]]},"880":{"position":[[111,4],[251,4]]}}}],["lb",{"_index":32,"t":{"823":{"position":[[471,2],[483,3]]},"838":{"position":[[1119,2]]},"906":{"position":[[282,2]]},"920":{"position":[[1598,2]]},"981":{"position":[[8700,2]]},"1113":{"position":[[76,2]]},"1222":{"position":[[530,2]]},"1230":{"position":[[69,5]]}}}],["lbpool",{"_index":1384,"t":{"1228":{"position":[[70,6]]}}}],["lb、本地路径存储），运行标准的监控堆栈（prometheu",{"_index":1467,"t":{"1250":{"position":[[131,31]]}}}],["leak",{"_index":1673,"t":{"1284":{"position":[[358,7]]}}}],["leas",{"_index":1904,"t":{"1318":{"position":[[753,6]]}}}],["legaci",{"_index":2194,"t":{"1480":{"position":[[1401,6],[1490,6]]},"1482":{"position":[[1469,6],[1558,6]]},"1484":{"position":[[1554,6],[1643,6]]},"1486":{"position":[[1451,6],[1540,6]]}}}],["less",{"_index":586,"t":{"920":{"position":[[1751,4]]},"981":{"position":[[8853,4]]},"1280":{"position":[[6564,4]]}}}],["level",{"_index":556,"t":{"920":{"position":[[326,5]]},"981":{"position":[[337,5]]},"1210":{"position":[[1914,6]]},"1272":{"position":[[570,5]]},"1274":{"position":[[28,5]]},"1276":{"position":[[222,5]]},"1280":{"position":[[2195,5]]},"1284":{"position":[[780,6]]},"1294":{"position":[[112,5]]},"1368":{"position":[[234,5]]},"1518":{"position":[[484,5],[521,5]]},"1558":{"position":[[112,6]]}}}],["level=info",{"_index":2138,"t":{"1423":{"position":[[751,10]]},"1425":{"position":[[699,10]]},"1427":{"position":[[568,10]]},"1429":{"position":[[517,10]]},"1431":{"position":[[530,10]]},"1433":{"position":[[643,10]]},"1435":{"position":[[604,10]]},"1439":{"position":[[677,10]]},"1441":{"position":[[658,10]]},"1443":{"position":[[554,10]]},"1445":{"position":[[670,10]]},"1447":{"position":[[535,10]]},"1449":{"position":[[450,10]]},"1459":{"position":[[625,10]]},"1465":{"position":[[667,10],[2843,10]]},"1467":{"position":[[583,10]]},"1469":{"position":[[589,10]]},"1480":{"position":[[476,10]]},"1482":{"position":[[544,10]]},"1484":{"position":[[629,10]]},"1486":{"position":[[526,10]]},"1493":{"position":[[435,10]]},"1495":{"position":[[509,10]]},"1542":{"position":[[934,10]]},"1544":{"position":[[948,10]]},"1546":{"position":[[1063,10]]},"1548":{"position":[[740,10],[1963,10]]},"1560":{"position":[[931,10],[2154,10]]}}}],["lifecycl",{"_index":2197,"t":{"1480":{"position":[[1635,9]]},"1482":{"position":[[1703,9]]},"1484":{"position":[[1788,9]]},"1486":{"position":[[1685,9]]}}}],["limit",{"_index":256,"t":{"844":{"position":[[891,7]]},"884":{"position":[[133,5],[141,5],[242,5],[297,5]]},"1282":{"position":[[79,6]]},"1304":{"position":[[155,5],[449,5],[590,5],[634,5]]},"1433":{"position":[[82,6]]}}}],["limit=10/minut",{"_index":471,"t":{"884":{"position":[[279,15]]}}}],["limit=<limit",{"_index":469,"t":{"884":{"position":[[194,12]]}}}],["line",{"_index":1526,"t":{"1272":{"position":[[910,4]]},"1368":{"position":[[473,4]]},"1546":{"position":[[168,4]]},"1548":{"position":[[115,4]]},"1550":{"position":[[152,4]]},"1552":{"position":[[137,4]]},"1554":{"position":[[138,4]]},"1558":{"position":[[136,4]]},"1560":{"position":[[258,4]]},"1562":{"position":[[93,4],[192,4]]}}}],["link",{"_index":1013,"t":{"1078":{"position":[[323,4],[353,4]]},"1119":{"position":[[716,4],[743,4],[769,4]]}}}],["linod",{"_index":1395,"t":{"1234":{"position":[[10,11]]}}}],["linux",{"_index":201,"t":{"840":{"position":[[221,5]]},"842":{"position":[[229,5]]},"863":{"position":[[5,5]]},"869":{"position":[[454,5]]},"1115":{"position":[[229,5]]},"1162":{"position":[[45,5]]},"1168":{"position":[[13,5],[72,20]]},"1604":{"position":[[163,5]]}}}],["list",{"_index":560,"t":{"920":{"position":[[397,4]]},"937":{"position":[[2378,5]]},"981":{"position":[[408,4]]},"998":{"position":[[368,4],[373,4],[1530,5]]},"1226":{"position":[[84,4]]},"1288":{"position":[[0,6]]},"1502":{"position":[[2120,4],[2360,4],[2600,4]]},"1508":{"position":[[2165,4]]},"1571":{"position":[[54,4]]},"1630":{"position":[[119,4]]}}}],["listen",{"_index":772,"t":{"963":{"position":[[55,6],[194,6]]},"981":{"position":[[614,10],[669,6],[687,10],[704,6],[758,10],[900,10],[985,6],[1027,10]]}}}],["listen(80",{"_index":452,"t":{"880":{"position":[[550,14]]}}}],["lncxn",{"_index":96,"t":{"838":{"position":[[539,5]]}}}],["lncxn_kube",{"_index":162,"t":{"838":{"position":[[1901,10],[2592,10]]}}}],["lo",{"_index":1050,"t":{"1091":{"position":[[149,2]]}}}],["load",{"_index":19,"t":{"823":{"position":[[220,4]]},"920":{"position":[[148,4],[1665,4],[1814,4]]},"981":{"position":[[159,4],[8767,4],[8916,4]]},"1212":{"position":[[59,4]]},"1284":{"position":[[1394,4]]}}}],["loadbalanc",{"_index":278,"t":{"850":{"position":[[252,12]]},"1136":{"position":[[105,12]]},"1216":{"position":[[115,12]]},"1220":{"position":[[3,12],[75,32],[127,12],[296,12]]},"1222":{"position":[[55,13],[74,12],[356,12],[463,12]]},"1224":{"position":[[12,12]]},"1226":{"position":[[109,12]]},"1228":{"position":[[14,12],[347,12],[473,12]]},"1232":{"position":[[179,12]]}}}],["local",{"_index":33,"t":{"823":{"position":[[502,5]]},"838":{"position":[[506,5],[1781,6]]},"920":{"position":[[1632,5]]},"971":{"position":[[16,5]]},"981":{"position":[[5599,5],[5642,5],[5665,5],[5838,5],[8734,5]]},"1144":{"position":[[325,5],[481,5]]},"1196":{"position":[[14,5]]},"1330":{"position":[[17,5]]},"1332":{"position":[[59,5],[146,5]]},"1334":{"position":[[294,5]]}}}],["localhost",{"_index":895,"t":{"1008":{"position":[[358,9]]},"1234":{"position":[[22,11]]}}}],["locat",{"_index":580,"t":{"920":{"position":[[1298,7]]},"981":{"position":[[5405,8],[6623,7]]},"1372":{"position":[[77,8]]},"1374":{"position":[[77,8]]},"1376":{"position":[[77,8]]},"1378":{"position":[[77,8]]},"1380":{"position":[[77,8]]},"1382":{"position":[[77,8]]},"1384":{"position":[[77,8]]},"1386":{"position":[[77,8]]},"1388":{"position":[[77,8]]},"1390":{"position":[[77,8]]},"1396":{"position":[[77,8]]},"1398":{"position":[[67,8]]},"1400":{"position":[[67,8]]},"1402":{"position":[[67,8]]},"1404":{"position":[[67,8]]},"1406":{"position":[[67,8]]},"1408":{"position":[[67,8]]},"1410":{"position":[[67,8]]},"1412":{"position":[[67,8]]},"1521":{"position":[[77,8]]},"1523":{"position":[[77,8]]},"1525":{"position":[[67,8]]},"1527":{"position":[[67,8]]},"1529":{"position":[[67,8]]},"1531":{"position":[[67,8]]},"1537":{"position":[[85,8]]},"1539":{"position":[[85,8]]},"1546":{"position":[[119,8]]},"1560":{"position":[[98,8],[193,8]]}}}],["log",{"_index":454,"t":{"882":{"position":[[37,21],[173,7],[196,7],[231,7],[285,7],[308,7],[387,7]]},"900":{"position":[[100,3]]},"920":{"position":[[246,9],[270,4],[297,9],[322,3],[371,9],[455,7],[465,3],[485,9],[495,3],[525,9],[535,3]]},"961":{"position":[[124,3]]},"981":{"position":[[257,9],[281,4],[308,9],[333,3],[382,9],[466,7],[476,3],[496,9],[506,3],[536,9],[546,3]]},"1121":{"position":[[502,5]]},"1210":{"position":[[477,3],[600,3],[624,3],[651,3]]},"1250":{"position":[[269,27]]},"1278":{"position":[[150,5],[405,3]]},"1284":{"position":[[67,4],[126,3],[241,3],[479,3],[894,3],[1232,3]]},"1286":{"position":[[336,3],[459,3],[483,3],[510,3],[959,3],[1082,3],[1106,3],[1133,3]]},"1296":{"position":[[24,3],[435,3]]},"1298":{"position":[[24,3],[96,4],[215,3]]},"1300":{"position":[[24,3],[126,3],[151,3],[200,3],[341,3],[401,3]]},"1302":{"position":[[24,3],[125,3],[150,3],[199,3],[327,3],[387,3]]},"1314":{"position":[[57,7]]},"1451":{"position":[[171,3],[245,4],[286,3]]},"1453":{"position":[[171,3],[256,3]]},"1455":{"position":[[171,3],[250,3]]},"1457":{"position":[[171,3],[265,3]]},"1518":{"position":[[202,3],[296,7],[460,7],[530,9]]}}}],["log1",{"_index":474,"t":{"884":{"position":[[382,6]]}}}],["long",{"_index":1878,"t":{"1312":{"position":[[283,4]]}}}],["longhorn",{"_index":1919,"t":{"1326":{"position":[[206,8]]},"1336":{"position":[[3,8],[30,13],[116,9],[223,8],[241,8]]},"1338":{"position":[[59,8],[130,8]]},"1340":{"position":[[294,8]]}}}],["longhorn.yaml",{"_index":1948,"t":{"1336":{"position":[[98,13]]}}}],["lookup",{"_index":1857,"t":{"1306":{"position":[[34,6],[98,7]]},"1459":{"position":[[252,6],[457,7],[502,7]]}}}],["lookup=tru",{"_index":1322,"t":{"1210":{"position":[[712,12]]},"1286":{"position":[[571,12],[1194,12]]},"1459":{"position":[[188,11]]}}}],["lower",{"_index":1192,"t":{"1138":{"position":[[532,5]]},"1569":{"position":[[225,5]]}}}],["lowercas",{"_index":1187,"t":{"1138":{"position":[[487,9]]}}}],["ls",{"_index":708,"t":{"937":{"position":[[2374,3]]},"1000":{"position":[[308,2],[472,2]]},"1144":{"position":[[275,2]]},"1152":{"position":[[849,2]]}}}],["m",{"_index":1677,"t":{"1284":{"position":[[414,1]]}}}],["maintain",{"_index":1576,"t":{"1280":{"position":[[1112,11]]}}}],["make",{"_index":1330,"t":{"1210":{"position":[[886,5]]},"1286":{"position":[[745,5],[1368,5]]},"1304":{"position":[[304,6],[508,6]]},"1316":{"position":[[18,4]]},"1368":{"position":[[1755,5]]},"1554":{"position":[[275,4]]},"1613":{"position":[[119,6]]}}}],["makeiptablesutilchain",{"_index":2280,"t":{"1554":{"position":[[89,22]]}}}],["maker",{"_index":1992,"t":{"1368":{"position":[[404,7]]}}}],["manag",{"_index":497,"t":{"896":{"position":[[108,7],[135,7]]},"973":{"position":[[132,7]]},"975":{"position":[[157,7],[191,7],[232,7],[272,7]]},"981":{"position":[[72,10],[3500,7],[3562,7],[3680,7],[3748,7],[6016,7]]},"998":{"position":[[104,6]]},"1059":{"position":[[989,7]]},"1188":{"position":[[159,7]]},"1192":{"position":[[148,7]]},"1194":{"position":[[170,8]]},"1210":{"position":[[741,7]]},"1232":{"position":[[69,7]]},"1250":{"position":[[250,10]]},"1266":{"position":[[73,7]]},"1282":{"position":[[2657,6]]},"1286":{"position":[[600,7],[1223,7]]},"1288":{"position":[[2258,7]]},"1316":{"position":[[106,6],[242,6]]},"1392":{"position":[[566,8]]},"1463":{"position":[[696,8]]},"1478":{"position":[[46,7],[352,8]]},"1480":{"position":[[46,7],[282,8],[516,7],[800,7]]},"1482":{"position":[[46,7],[302,8],[584,7],[868,7]]},"1484":{"position":[[46,7],[398,8],[669,7],[953,7]]},"1486":{"position":[[46,7],[335,8],[566,7],[850,7]]},"1488":{"position":[[56,7]]},"1490":{"position":[[46,7]]},"1498":{"position":[[590,8]]},"1500":{"position":[[479,8]]},"1502":{"position":[[504,8]]},"1504":{"position":[[656,8]]},"1506":{"position":[[482,8]]},"1508":{"position":[[514,8]]},"1510":{"position":[[613,8]]},"1518":{"position":[[149,7]]},"1620":{"position":[[47,10],[122,10]]}}}],["manager.yaml",{"_index":2028,"t":{"1376":{"position":[[194,12]]},"1378":{"position":[[200,12]]},"1478":{"position":[[119,12]]},"1480":{"position":[[119,12]]},"1482":{"position":[[119,12]]},"1484":{"position":[[119,12]]},"1486":{"position":[[119,12]]},"1488":{"position":[[129,12]]},"1490":{"position":[[119,12]]}}}],["manager、schedul",{"_index":1295,"t":{"1186":{"position":[[79,17]]}}}],["manager、scheduler、k3",{"_index":617,"t":{"925":{"position":[[246,21]]}}}],["manifest",{"_index":1181,"t":{"1136":{"position":[[19,9]]},"1138":{"position":[[11,9]]},"1142":{"position":[[3,9],[92,9]]},"1144":{"position":[[203,9]]},"1272":{"position":[[1127,8]]},"1288":{"position":[[3978,8],[4023,9]]},"1548":{"position":[[1590,8],[1635,9],[2813,8],[2858,9]]},"1560":{"position":[[1781,8],[1826,9],[3004,8],[3049,9]]}}}],["manual",{"_index":1510,"t":{"1272":{"position":[[454,6],[611,9],[954,8]]},"1278":{"position":[[456,9]]},"1290":{"position":[[162,6]]},"1316":{"position":[[371,8]]},"1318":{"position":[[818,8]]},"1368":{"position":[[1430,6]]},"1510":{"position":[[26,7]]}}}],["mariadb",{"_index":887,"t":{"1004":{"position":[[691,12]]},"1008":{"position":[[90,7],[404,7]]}}}],["mask",{"_index":1150,"t":{"1123":{"position":[[614,4],[641,4]]},"1236":{"position":[[830,4]]}}}],["masq",{"_index":739,"t":{"951":{"position":[[327,4]]},"969":{"position":[[465,4]]},"981":{"position":[[2030,4]]},"1115":{"position":[[451,4]]}}}],["masquerad",{"_index":810,"t":{"981":{"position":[[2060,12]]}}}],["master",{"_index":1058,"t":{"1091":{"position":[[610,6]]},"1498":{"position":[[180,6]]},"1500":{"position":[[106,6]]},"1502":{"position":[[106,6]]},"1504":{"position":[[222,6]]},"1506":{"position":[[106,6]]},"1508":{"position":[[106,6]]},"1510":{"position":[[229,6]]}}}],["match",{"_index":719,"t":{"947":{"position":[[203,5],[437,5]]}}}],["matchexpress",{"_index":1406,"t":{"1236":{"position":[[520,17]]},"1352":{"position":[[301,17],[649,17]]}}}],["matchlabel",{"_index":1638,"t":{"1280":{"position":[[5966,12],[6165,12],[6364,12]]},"1282":{"position":[[479,12],[865,12],[1428,12],[1648,12],[1889,12],[2111,12],[2331,12],[2572,12]]}}}],["max",{"_index":1608,"t":{"1280":{"position":[[1924,4],[1979,4],[3009,4],[3064,4],[3422,4],[3896,4]]}}}],["maxag",{"_index":1825,"t":{"1298":{"position":[[28,6]]},"1453":{"position":[[175,6]]}}}],["maxage=30",{"_index":1318,"t":{"1210":{"position":[[604,10]]},"1286":{"position":[[463,10],[1086,10]]},"1453":{"position":[[260,9]]}}}],["maxbackup",{"_index":1833,"t":{"1300":{"position":[[28,9]]},"1455":{"position":[[175,9]]}}}],["maxbackup=10",{"_index":1319,"t":{"1210":{"position":[[628,13]]},"1286":{"position":[[487,13],[1110,13]]},"1455":{"position":[[254,12]]}}}],["maxsiz",{"_index":1839,"t":{"1302":{"position":[[28,7]]},"1457":{"position":[[175,7]]}}}],["maxsize=100",{"_index":1320,"t":{"1210":{"position":[[655,12]]},"1286":{"position":[[514,12],[1137,12]]},"1457":{"position":[[269,11]]}}}],["mb",{"_index":5,"t":{"821":{"position":[[66,2]]},"1300":{"position":[[316,2]]},"1302":{"position":[[302,2]]},"1457":{"position":[[219,3],[253,3]]}}}],["mbkn9",{"_index":105,"t":{"838":{"position":[[658,5]]}}}],["meant",{"_index":1986,"t":{"1368":{"position":[[203,5]]}}}],["mechan",{"_index":2092,"t":{"1417":{"position":[[75,10]]},"1513":{"position":[[38,10]]},"1613":{"position":[[177,9]]}}}],["medium",{"_index":1280,"t":{"1178":{"position":[[75,6]]},"1184":{"position":[[130,6]]}}}],["member",{"_index":800,"t":{"981":{"position":[[818,7],[952,7],[3224,6]]}}}],["mention",{"_index":1858,"t":{"1306":{"position":[[243,9]]}}}],["metadata",{"_index":242,"t":{"844":{"position":[[584,9],[652,9]]},"880":{"position":[[290,9]]},"1059":{"position":[[247,9],[317,9]]},"1061":{"position":[[430,9]]},"1103":{"position":[[112,9],[267,9]]},"1210":{"position":[[1656,9]]},"1236":{"position":[[454,9]]},"1280":{"position":[[1412,9],[2599,9],[3160,9],[3612,9],[4062,9],[4267,9],[4490,9],[4692,9],[4976,9],[5272,9],[5605,9],[5851,9],[6054,9],[6249,9]]},"1282":{"position":[[364,9],[712,9],[1345,9],[1559,9],[1800,9],[2028,9],[2242,9],[2483,9]]},"1284":{"position":[[491,8],[787,8]]},"1332":{"position":[[43,9]]},"1334":{"position":[[25,9]]},"1338":{"position":[[43,9]]},"1340":{"position":[[25,9]]},"1352":{"position":[[199,9],[548,9]]},"1518":{"position":[[206,8],[475,8]]}}}],["metadata.nam",{"_index":966,"t":{"1059":{"position":[[599,13]]},"1138":{"position":[[435,14]]}}}],["metallb",{"_index":1390,"t":{"1230":{"position":[[75,14]]}}}],["methodolog",{"_index":1999,"t":{"1368":{"position":[[849,12]]}}}],["metric",{"_index":101,"t":{"838":{"position":[[575,7],[1984,9]]},"954":{"position":[[330,7]]},"981":{"position":[[4280,7],[4305,7],[5853,7]]},"1059":{"position":[[537,8]]},"1078":{"position":[[466,6]]},"1136":{"position":[[76,7]]},"1144":{"position":[[550,7]]},"1172":{"position":[[280,7]]},"1252":{"position":[[254,7]]},"1282":{"position":[[923,7],[1371,7],[1450,7],[2054,7],[2133,7]]}}}],["microsoft",{"_index":1376,"t":{"1220":{"position":[[222,9]]}}}],["min",{"_index":1607,"t":{"1280":{"position":[[1917,4],[1972,4],[3002,4],[3057,4],[3433,4],[3907,4]]}}}],["minim",{"_index":1884,"t":{"1314":{"position":[[14,7]]},"1518":{"position":[[450,9]]}}}],["minimum",{"_index":1771,"t":{"1288":{"position":[[3714,7]]},"1548":{"position":[[1231,7],[2454,7]]},"1560":{"position":[[1422,7],[2645,7]]}}}],["minut",{"_index":127,"t":{"838":{"position":[[974,6],[996,6],[1138,6],[1160,6],[1321,6],[1343,6],[1486,6],[1508,6],[1642,6],[1664,6],[1812,6],[1834,6],[2010,6],[2032,6],[2198,6],[2220,6],[2362,6],[2384,6],[2522,6],[2544,6]]}}}],["mirror",{"_index":1006,"t":{"1067":{"position":[[65,6]]},"1150":{"position":[[14,7]]},"1152":{"position":[[0,7],[32,8],[104,6],[194,33],[252,7],[260,8],[453,6],[506,6],[674,8]]},"1154":{"position":[[16,6],[40,12]]},"1156":{"position":[[70,8],[433,8]]},"1158":{"position":[[70,8],[265,8]]}}}],["mirror.rancher.cn/k3s/k3",{"_index":907,"t":{"1025":{"position":[[427,25]]},"1027":{"position":[[405,25]]},"1033":{"position":[[649,25],[957,25]]},"1240":{"position":[[185,25],[787,25]]},"1244":{"position":[[179,25]]}}}],["mirrorproject/ranch",{"_index":1230,"t":{"1152":{"position":[[768,22]]}}}],["mismatch",{"_index":1061,"t":{"1091":{"position":[[788,8]]}}}],["mitig",{"_index":1504,"t":{"1272":{"position":[[278,11]]}}}],["mkdir",{"_index":639,"t":{"929":{"position":[[894,5]]},"931":{"position":[[514,5]]},"935":{"position":[[345,5]]},"1075":{"position":[[69,5]]},"1284":{"position":[[404,5]]}}}],["mode",{"_index":737,"t":{"951":{"position":[[267,4]]},"958":{"position":[[117,4]]},"969":{"position":[[629,4]]},"981":{"position":[[2185,4],[2524,4],[2571,4]]},"1093":{"position":[[158,5],[305,4]]},"1095":{"position":[[315,5],[403,5],[518,5]]},"1121":{"position":[[300,4]]},"1427":{"position":[[169,4],[390,5],[430,5]]},"1429":{"position":[[169,4],[356,5],[396,5]]},"1431":{"position":[[169,4],[369,5],[409,5]]},"1544":{"position":[[679,5],[781,5]]}}}],["mode=644",{"_index":1057,"t":{"1091":{"position":[[366,8]]}}}],["mode=node,rbac",{"_index":1698,"t":{"1288":{"position":[[304,14]]},"1423":{"position":[[973,14]]},"1425":{"position":[[921,14]]},"1427":{"position":[[790,14]]},"1429":{"position":[[231,14],[739,14]]},"1431":{"position":[[243,15],[752,14]]},"1433":{"position":[[865,14]]},"1435":{"position":[[826,14]]},"1439":{"position":[[899,14]]},"1441":{"position":[[880,14]]},"1443":{"position":[[776,14]]},"1445":{"position":[[892,14]]},"1447":{"position":[[757,14]]},"1449":{"position":[[672,14]]},"1459":{"position":[[847,14]]},"1465":{"position":[[889,14]]},"1467":{"position":[[805,14]]},"1469":{"position":[[811,14]]},"1542":{"position":[[1156,14]]},"1544":{"position":[[1170,14]]},"1546":{"position":[[1285,14]]}}}],["mode=rbac",{"_index":2152,"t":{"1427":{"position":[[270,9]]}}}],["mode=webhook",{"_index":1756,"t":{"1288":{"position":[[3146,12]]},"1544":{"position":[[321,12],[728,14],[847,12]]},"1548":{"position":[[865,12],[2088,12]]},"1560":{"position":[[1056,12],[2279,12]]}}}],["model",{"_index":1485,"t":{"1254":{"position":[[167,5]]}}}],["modif",{"_index":1507,"t":{"1272":{"position":[[385,13],[576,13]]},"1518":{"position":[[320,12]]}}}],["modifi",{"_index":1514,"t":{"1272":{"position":[[527,6]]},"1533":{"position":[[55,6]]},"1535":{"position":[[55,6]]},"1577":{"position":[[145,6]]},"1579":{"position":[[26,6]]}}}],["modul",{"_index":390,"t":{"869":{"position":[[460,7]]}}}],["more",{"_index":1994,"t":{"1368":{"position":[[544,4]]},"1400":{"position":[[390,4]]},"1404":{"position":[[400,4]]},"1502":{"position":[[2271,4],[2511,4],[2751,4]]},"1508":{"position":[[2316,4]]}}}],["mount",{"_index":2298,"t":{"1579":{"position":[[98,5]]},"1618":{"position":[[85,7]]}}}],["mountpath",{"_index":1942,"t":{"1334":{"position":[[194,10]]},"1340":{"position":[[194,10]]}}}],["ms",{"_index":1490,"t":{"1258":{"position":[[241,2],[264,2]]}}}],["msg=\"run",{"_index":2139,"t":{"1423":{"position":[[762,12]]},"1425":{"position":[[710,12]]},"1427":{"position":[[579,12]]},"1429":{"position":[[528,12]]},"1431":{"position":[[541,12]]},"1433":{"position":[[654,12]]},"1435":{"position":[[615,12]]},"1439":{"position":[[688,12]]},"1441":{"position":[[669,12]]},"1443":{"position":[[565,12]]},"1445":{"position":[[681,12]]},"1447":{"position":[[546,12]]},"1449":{"position":[[461,12]]},"1459":{"position":[[636,12]]},"1465":{"position":[[678,12],[2854,12]]},"1467":{"position":[[594,12]]},"1469":{"position":[[600,12]]},"1480":{"position":[[487,12]]},"1482":{"position":[[555,12]]},"1484":{"position":[[640,12]]},"1486":{"position":[[537,12]]},"1493":{"position":[[446,12]]},"1495":{"position":[[520,12]]},"1542":{"position":[[945,12]]},"1544":{"position":[[959,12]]},"1546":{"position":[[1074,12]]},"1548":{"position":[[751,12],[1974,12]]},"1560":{"position":[[942,12],[2165,12]]}}}],["mtu",{"_index":308,"t":{"854":{"position":[[217,4]]}}}],["multi",{"_index":1401,"t":{"1236":{"position":[[209,5]]}}}],["multipl",{"_index":1400,"t":{"1236":{"position":[[177,8]]}}}],["mustruna",{"_index":1606,"t":{"1280":{"position":[[1895,11],[1950,11],[2980,11],[3035,11]]},"1598":{"position":[[118,9]]}}}],["mustrunasnonroot",{"_index":1602,"t":{"1280":{"position":[[1810,18],[2909,18]]},"1598":{"position":[[98,16]]}}}],["mycustomreg.com",{"_index":1220,"t":{"1152":{"position":[[41,16]]}}}],["mycustomreg.com:5000/coredn",{"_index":1243,"t":{"1160":{"position":[[206,28],[275,28]]}}}],["mycustomreg:5000",{"_index":1238,"t":{"1156":{"position":[[142,19],[505,19]]},"1158":{"position":[[141,19]]}}}],["mypassword",{"_index":1046,"t":{"1089":{"position":[[916,11],[1141,10]]},"1091":{"position":[[445,10]]}}}],["mysql",{"_index":823,"t":{"981":{"position":[[3810,6]]},"1004":{"position":[[142,5],[663,10]]},"1008":{"position":[[82,5],[396,5],[704,8],[783,5]]},"1014":{"position":[[116,5]]},"1025":{"position":[[204,5]]},"1176":{"position":[[73,5]]}}}],["mysql://username:password@tcp(hostname:3306)/databas",{"_index":896,"t":{"1008":{"position":[[441,53]]}}}],["mysql、postgresql",{"_index":488,"t":{"890":{"position":[[278,16]]}}}],["mysql、postgresql、mariadb",{"_index":1293,"t":{"1184":{"position":[[16,24]]}}}],["n",{"_index":459,"t":{"882":{"position":[[164,1],[276,1]]},"1033":{"position":[[122,1]]},"1105":{"position":[[42,1],[107,1]]},"1134":{"position":[[261,1]]},"1210":{"position":[[2855,1]]},"1352":{"position":[[1582,1],[1626,1]]},"1410":{"position":[[186,2]]},"1412":{"position":[[186,2]]}}}],["n/2)+1",{"_index":923,"t":{"1033":{"position":[[146,32]]}}}],["n/a",{"_index":513,"t":{"900":{"position":[[50,3],[120,3],[148,3]]},"906":{"position":[[63,3],[99,3],[142,3],[189,3]]},"908":{"position":[[44,3]]},"910":{"position":[[37,3],[76,3],[173,3],[222,3],[270,3]]},"916":{"position":[[24,3]]},"954":{"position":[[338,3],[395,3],[439,3],[551,3],[643,3],[689,3],[744,3],[782,3],[848,3],[903,3],[1067,3],[1103,3],[1163,3]]},"961":{"position":[[17,3],[74,3],[144,3],[172,3]]},"963":{"position":[[247,3]]},"969":{"position":[[470,5],[515,5]]},"979":{"position":[[24,3],[72,3],[170,3],[250,3]]},"991":{"position":[[153,3],[157,3]]}}}],["n1",{"_index":2050,"t":{"1392":{"position":[[815,2]]},"1415":{"position":[[278,2]]},"1423":{"position":[[508,2]]},"1425":{"position":[[491,2]]},"1427":{"position":[[365,2]]},"1429":{"position":[[331,2]]},"1431":{"position":[[344,2]]},"1433":{"position":[[435,2]]},"1435":{"position":[[342,2]]},"1439":{"position":[[408,2]]},"1441":{"position":[[430,2]]},"1443":{"position":[[326,2]]},"1445":{"position":[[461,2]]},"1447":{"position":[[322,2]]},"1449":{"position":[[273,2]]},"1459":{"position":[[403,2]]},"1463":{"position":[[945,2]]},"1467":{"position":[[405,2]]},"1469":{"position":[[417,2]]},"1471":{"position":[[459,2]]},"1475":{"position":[[1011,2]]},"1478":{"position":[[369,2]]},"1480":{"position":[[299,2]]},"1482":{"position":[[319,2]]},"1484":{"position":[[415,2]]},"1486":{"position":[[352,2]]},"1493":{"position":[[277,2]]},"1495":{"position":[[287,2]]},"1498":{"position":[[839,2]]},"1500":{"position":[[728,2]]},"1502":{"position":[[753,2]]},"1504":{"position":[[905,2]]},"1506":{"position":[[731,2]]},"1508":{"position":[[763,2]]},"1510":{"position":[[862,2]]},"1516":{"position":[[157,2]]},"1542":{"position":[[668,2]]},"1544":{"position":[[654,2]]},"1546":{"position":[[710,2]]},"1548":{"position":[[520,2]]},"1550":{"position":[[577,2]]},"1560":{"position":[[738,2]]}}}],["n2",{"_index":2175,"t":{"1465":{"position":[[474,2]]}}}],["name",{"_index":88,"t":{"838":{"position":[[463,4],[926,5]]},"844":{"position":[[594,5],[662,5],[777,5],[924,5],[966,5]]},"871":{"position":[[272,4]]},"880":{"position":[[300,5],[333,5]]},"906":{"position":[[18,4]]},"920":{"position":[[47,5],[914,4],[943,4],[1011,4]]},"937":{"position":[[1971,5],[2191,5],[2227,5],[2634,5],[2720,5]]},"947":{"position":[[225,4],[485,4],[1059,13]]},"954":{"position":[[428,4]]},"963":{"position":[[304,4]]},"981":{"position":[[49,5],[1109,5],[3859,4],[4430,4],[4459,4],[5353,4],[6239,4],[6268,4],[6336,4]]},"998":{"position":[[86,5]]},"1008":{"position":[[200,4],[495,4],[579,4]]},"1025":{"position":[[373,5],[598,5]]},"1027":{"position":[[351,5],[576,5]]},"1031":{"position":[[428,11]]},"1033":{"position":[[1141,4]]},"1059":{"position":[[257,5],[327,5],[627,4],[1610,4]]},"1061":{"position":[[440,5],[508,5]]},"1080":{"position":[[618,5],[792,5]]},"1103":{"position":[[122,5],[277,5],[357,5],[410,5]]},"1144":{"position":[[438,4]]},"1164":{"position":[[98,4]]},"1190":{"position":[[329,4]]},"1210":{"position":[[1165,5],[1666,5]]},"1234":{"position":[[90,4]]},"1236":{"position":[[464,5]]},"1280":{"position":[[316,5],[491,5],[1422,5],[2609,5],[3170,5],[3622,5],[4072,5],[4277,5],[4500,5],[4702,5],[4794,5],[4843,5],[4986,5],[5096,5],[5190,5],[5282,5],[5419,5],[5513,5],[5615,5],[5729,5],[5782,5],[5861,5],[5979,5],[6064,5],[6178,5],[6259,5],[6377,5]]},"1282":{"position":[[374,5],[492,5],[722,5],[1355,5],[1569,5],[1810,5],[2038,5],[2252,5],[2493,5]]},"1284":{"position":[[558,5]]},"1322":{"position":[[449,7]]},"1332":{"position":[[53,5]]},"1334":{"position":[[35,5],[92,5],[183,5],[249,5]]},"1338":{"position":[[53,5]]},"1340":{"position":[[35,5],[92,5],[183,5],[249,5]]},"1352":{"position":[[209,5],[558,5]]},"1569":{"position":[[348,6]]}}}],["names=system:auth",{"_index":1722,"t":{"1288":{"position":[[1281,17]]},"1423":{"position":[[2086,17]]},"1425":{"position":[[2034,17]]},"1427":{"position":[[1903,17]]},"1429":{"position":[[1852,17]]},"1431":{"position":[[1865,17]]},"1433":{"position":[[1978,17]]},"1435":{"position":[[1939,17]]},"1439":{"position":[[2012,17]]},"1441":{"position":[[1993,17]]},"1443":{"position":[[1889,17]]},"1445":{"position":[[2005,17]]},"1447":{"position":[[1870,17]]},"1449":{"position":[[1785,17]]},"1459":{"position":[[1960,17]]},"1465":{"position":[[2002,17]]},"1467":{"position":[[1918,17]]},"1469":{"position":[[1924,17]]},"1542":{"position":[[2269,17]]},"1544":{"position":[[2283,17]]},"1546":{"position":[[2398,17]]}}}],["namespac",{"_index":87,"t":{"838":{"position":[[442,10],[453,9]]},"844":{"position":[[688,10]]},"882":{"position":[[153,9],[265,9]]},"969":{"position":[[558,9]]},"981":{"position":[[2285,9],[2314,9]]},"1000":{"position":[[292,10],[317,10],[417,10],[481,10]]},"1059":{"position":[[237,9],[340,10],[754,9]]},"1061":{"position":[[454,10]]},"1103":{"position":[[139,10],[427,10]]},"1144":{"position":[[428,9]]},"1210":{"position":[[1475,11],[1646,9]]},"1280":{"position":[[801,11],[5333,10],[5643,10],[5873,9],[5883,10],[6076,9],[6086,10],[6271,9],[6281,10],[6500,10],[6527,9]]},"1282":{"position":[[22,10],[99,10],[386,9],[396,10],[755,10],[766,11],[1386,10],[1606,10],[1847,10],[2069,10],[2289,10],[2530,10],[2706,10]]},"1292":{"position":[[190,11],[211,10],[340,9]]},"1318":{"position":[[649,10],[705,10]]},"1332":{"position":[[74,10]]},"1334":{"position":[[53,10]]},"1340":{"position":[[53,10]]},"1352":{"position":[[227,10],[575,10]]},"1417":{"position":[[767,9],[1049,9],[1331,9],[1613,9],[1895,9],[2177,9],[2459,9]]},"1419":{"position":[[748,9],[1030,9],[1312,9],[1594,9],[1876,9],[2158,9],[2440,9]]},"1437":{"position":[[761,9],[1043,9],[1325,9],[1607,9],[1889,9],[2171,9],[2453,9]]},"1490":{"position":[[733,9],[1015,9],[1297,9],[1579,9],[1861,9],[2143,9],[2425,9]]},"1586":{"position":[[127,9]]},"1588":{"position":[[47,9]]},"1590":{"position":[[47,9]]},"1592":{"position":[[47,9]]},"1594":{"position":[[47,9]]},"1596":{"position":[[47,9]]},"1598":{"position":[[51,9]]},"1600":{"position":[[47,9]]},"1604":{"position":[[106,9]]},"1606":{"position":[[47,9]]},"1608":{"position":[[47,9]]},"1610":{"position":[[47,9]]},"1626":{"position":[[62,10]]},"1632":{"position":[[38,10],[175,10]]}}}],["namespacelifecycl",{"_index":1798,"t":{"1292":{"position":[[41,18],[114,20]]},"1443":{"position":[[221,19]]}}}],["namespaceselector",{"_index":1637,"t":{"1280":{"position":[[5947,18],[6146,18],[6345,18]]},"1282":{"position":[[460,18]]}}}],["nativ",{"_index":788,"t":{"969":{"position":[[417,7]]},"979":{"position":[[205,6]]},"981":{"position":[[1962,8]]},"1115":{"position":[[165,6],[252,6],[797,6]]},"1117":{"position":[[75,6],[163,6],[324,6]]},"1129":{"position":[[234,6]]}}}],["natur",{"_index":1864,"t":{"1308":{"position":[[249,6]]}}}],["nbodi",{"_index":245,"t":{"844":{"position":[[668,5],[848,9]]}}}],["necessari",{"_index":1578,"t":{"1280":{"position":[[1256,9],[2287,9]]},"1286":{"position":[[89,9]]}}}],["need",{"_index":1515,"t":{"1272":{"position":[[595,4]]},"1280":{"position":[[2058,4],[2121,4],[2177,6]]},"1304":{"position":[[662,7]]},"1569":{"position":[[121,4]]},"1579":{"position":[[90,4]]},"1615":{"position":[[91,4]]},"1626":{"position":[[111,4]]}}}],["net.ipv4.ip_forward",{"_index":1623,"t":{"1280":{"position":[[3808,19]]}}}],["net.ipv6.conf.all.accept_ra=2",{"_index":1156,"t":{"1125":{"position":[[69,57]]}}}],["net.ipv6.conf.all.forward",{"_index":1624,"t":{"1280":{"position":[[3830,28]]}}}],["net_admin",{"_index":1621,"t":{"1280":{"position":[[3774,9]]}}}],["net_raw",{"_index":1275,"t":{"1172":{"position":[[513,7],[609,8]]},"1600":{"position":[[146,7]]}}}],["netlink",{"_index":477,"t":{"884":{"position":[[496,7]]}}}],["netpol",{"_index":1372,"t":{"1218":{"position":[[39,6],[81,7]]}}}],["network",{"_index":733,"t":{"951":{"position":[[214,7]]},"973":{"position":[[187,7]]},"981":{"position":[[1282,12],[1305,7],[1383,12],[1406,7],[1499,12],[1617,12],[1749,12],[1828,12],[2035,12],[2103,12],[2196,12],[2301,12],[6095,7],[6143,7]]},"1027":{"position":[[749,7]]},"1033":{"position":[[1718,7]]},"1119":{"position":[[86,7]]},"1218":{"position":[[107,7]]},"1278":{"position":[[109,7],[245,7],[318,7]]},"1280":{"position":[[2376,7]]},"1282":{"position":[[40,7],[120,7],[295,7],[598,7],[736,7],[999,7],[2664,7]]},"1316":{"position":[[175,10],[345,10],[418,7]]},"1613":{"position":[[68,7]]}}}],["network/2593",{"_index":1399,"t":{"1236":{"position":[[164,12]]}}}],["networking.k8s.io/v1",{"_index":1634,"t":{"1280":{"position":[[5830,20],[6033,20],[6228,20]]},"1282":{"position":[[343,20],[671,20],[1304,20],[1518,20],[1759,20],[1987,20],[2201,20],[2442,20]]}}}],["networking.k8s.io/v1alpha1",{"_index":1403,"t":{"1236":{"position":[[409,26]]}}}],["networkpolici",{"_index":1518,"t":{"1272":{"position":[[653,15]]},"1280":{"position":[[5804,13],[6007,13],[6202,13]]},"1282":{"position":[[317,13],[698,13],[1331,13],[1545,13],[1786,13],[2014,13],[2228,13],[2469,13]]},"1615":{"position":[[62,13]]}}}],["new",{"_index":816,"t":{"981":{"position":[[3113,3],[3236,3]]},"1236":{"position":[[470,3]]},"1284":{"position":[[1403,3]]},"1292":{"position":[[275,3]]},"1632":{"position":[[135,3]]}}}],["newer",{"_index":1564,"t":{"1280":{"position":[[10,5],[46,5]]},"1282":{"position":[[1270,5]]},"1286":{"position":[[159,5]]},"1292":{"position":[[407,5]]}}}],["next",{"_index":1615,"t":{"1280":{"position":[[2408,4]]}}}],["nflog",{"_index":465,"t":{"884":{"position":[[32,5],[188,5],[236,5],[351,5],[490,5],[636,5]]}}}],["nflog.prefix",{"_index":483,"t":{"884":{"position":[[661,12]]}}}],["nflog:100",{"_index":481,"t":{"884":{"position":[[556,9]]}}}],["nftabl",{"_index":1303,"t":{"1206":{"position":[[6,8]]}}}],["nginx",{"_index":1465,"t":{"1250":{"position":[[69,5]]}}}],["nginx:stabl",{"_index":1936,"t":{"1334":{"position":[[117,12]]},"1340":{"position":[[117,12]]}}}],["ni",{"_index":480,"t":{"884":{"position":[[553,2]]}}}],["nm",{"_index":360,"t":{"865":{"position":[[383,2],[425,2],[448,2]]}}}],["no_proxi",{"_index":55,"t":{"836":{"position":[[155,11],[414,8],[479,8]]}}}],["no_proxy=127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16",{"_index":67,"t":{"836":{"position":[[599,60]]}}}],["node",{"_index":267,"t":{"846":{"position":[[80,4],[107,5]]},"858":{"position":[[17,4],[32,4]]},"880":{"position":[[414,8]]},"894":{"position":[[713,4]]},"906":{"position":[[13,4],[55,4],[82,4],[125,4]]},"910":{"position":[[13,4],[53,4]]},"918":{"position":[[17,4],[32,4],[145,4],[168,4],[195,4]]},"920":{"position":[[69,4],[909,4],[938,4],[972,4],[1006,4],[1018,4],[1102,4],[2533,4],[2613,4],[2620,4],[2711,4]]},"947":{"position":[[451,4],[462,4],[841,8],[854,4]]},"963":{"position":[[115,4]]},"969":{"position":[[149,4]]},"981":{"position":[[851,4],[1477,4],[2120,4],[6234,4],[6263,4],[6297,4],[6331,4],[6343,4],[6427,4],[7595,4],[7675,4],[7682,4],[7773,4]]},"998":{"position":[[877,4]]},"1025":{"position":[[859,4],[957,5]]},"1033":{"position":[[1135,5]]},"1093":{"position":[[194,4],[345,4],[370,4],[555,4]]},"1095":{"position":[[239,4],[325,4],[413,4],[450,4],[540,4],[577,4]]},"1115":{"position":[[604,4]]},"1123":{"position":[[604,4],[631,4]]},"1129":{"position":[[168,4],[276,4],[582,4]]},"1164":{"position":[[62,4],[93,4]]},"1190":{"position":[[299,4],[323,5]]},"1210":{"position":[[2815,4]]},"1232":{"position":[[100,4],[112,4]]},"1234":{"position":[[85,4]]},"1236":{"position":[[820,4]]},"1252":{"position":[[48,4],[283,4]]},"1280":{"position":[[5012,4]]},"1288":{"position":[[2297,4],[3959,4]]},"1318":{"position":[[748,4]]},"1352":{"position":[[326,4],[674,4],[1004,4]]},"1372":{"position":[[123,5]]},"1374":{"position":[[123,5]]},"1376":{"position":[[123,5]]},"1378":{"position":[[123,5]]},"1380":{"position":[[123,5]]},"1382":{"position":[[123,5]]},"1384":{"position":[[123,5]]},"1386":{"position":[[123,5]]},"1388":{"position":[[123,5]]},"1390":{"position":[[123,5]]},"1392":{"position":[[45,5]]},"1394":{"position":[[55,5]]},"1396":{"position":[[123,5]]},"1398":{"position":[[113,5]]},"1400":{"position":[[113,5]]},"1402":{"position":[[113,5]]},"1404":{"position":[[113,5]]},"1406":{"position":[[113,5]]},"1408":{"position":[[113,5]]},"1410":{"position":[[113,5]]},"1412":{"position":[[113,5]]},"1415":{"position":[[136,4]]},"1417":{"position":[[222,4]]},"1419":{"position":[[136,4]]},"1421":{"position":[[146,4]]},"1423":{"position":[[240,4],[2629,4]]},"1425":{"position":[[243,4],[2577,4]]},"1427":{"position":[[136,4],[2446,4]]},"1429":{"position":[[136,4],[209,5],[406,6],[2395,4]]},"1431":{"position":[[136,4],[2408,4]]},"1433":{"position":[[2521,4]]},"1435":{"position":[[136,4],[2482,4]]},"1437":{"position":[[136,4]]},"1439":{"position":[[136,4],[2555,4]]},"1441":{"position":[[226,4],[2536,4]]},"1443":{"position":[[136,4],[2432,4]]},"1445":{"position":[[229,4],[2548,4]]},"1447":{"position":[[136,4],[2413,4]]},"1449":{"position":[[136,4],[2328,4]]},"1451":{"position":[[146,4]]},"1453":{"position":[[146,4]]},"1455":{"position":[[146,4]]},"1457":{"position":[[146,4]]},"1459":{"position":[[136,4],[2503,4]]},"1461":{"position":[[146,4]]},"1463":{"position":[[240,4]]},"1465":{"position":[[226,4],[2545,4]]},"1467":{"position":[[226,4],[2461,4]]},"1469":{"position":[[240,4],[2467,4]]},"1471":{"position":[[217,4]]},"1475":{"position":[[136,4]]},"1478":{"position":[[153,4]]},"1480":{"position":[[153,4],[535,4],[1630,4]]},"1482":{"position":[[153,4],[603,4],[1698,4]]},"1484":{"position":[[153,4],[688,4],[1783,4]]},"1486":{"position":[[153,4],[585,4],[1680,4]]},"1488":{"position":[[163,4]]},"1490":{"position":[[153,4]]},"1493":{"position":[[140,4]]},"1495":{"position":[[135,4]]},"1498":{"position":[[187,4]]},"1500":{"position":[[113,4]]},"1502":{"position":[[113,4]]},"1504":{"position":[[229,4]]},"1506":{"position":[[113,4]]},"1508":{"position":[[113,4]]},"1510":{"position":[[236,4]]},"1521":{"position":[[121,5]]},"1523":{"position":[[121,5]]},"1525":{"position":[[111,5]]},"1527":{"position":[[111,5]]},"1529":{"position":[[111,5]]},"1531":{"position":[[111,5]]},"1542":{"position":[[254,4],[2812,4]]},"1544":{"position":[[240,4],[2826,4]]},"1546":{"position":[[283,4],[2941,4]]},"1548":{"position":[[230,4],[1458,4],[2681,4]]},"1550":{"position":[[267,4]]},"1552":{"position":[[252,4]]},"1554":{"position":[[253,4]]},"1556":{"position":[[135,4]]},"1558":{"position":[[251,4]]},"1560":{"position":[[373,4],[1649,4],[2872,4]]},"1562":{"position":[[307,4]]},"1564":{"position":[[135,4]]},"1566":{"position":[[556,4]]}}}],["node.cloudprovider.kubernetes.io/uniniti",{"_index":1394,"t":{"1232":{"position":[[221,46]]}}}],["node.k8s.io/v1",{"_index":240,"t":{"844":{"position":[[550,14]]}}}],["node:13.13.0",{"_index":439,"t":{"880":{"position":[[151,12]]}}}],["node>:6443",{"_index":1298,"t":{"1190":{"position":[[253,10]]}}}],["nodej",{"_index":443,"t":{"880":{"position":[[306,6],[339,6]]}}}],["nodeport",{"_index":783,"t":{"969":{"position":[[189,8]]},"981":{"position":[[1552,8]]},"1216":{"position":[[194,8]]},"1222":{"position":[[199,8]]}}}],["noderestrict",{"_index":1562,"t":{"1278":{"position":[[521,15]]},"1280":{"position":[[1128,15]]},"1445":{"position":[[76,15],[308,16],[548,17]]}}}],["nodeselector",{"_index":1404,"t":{"1236":{"position":[[485,13],[642,12]]},"1352":{"position":[[287,13],[635,13]]}}}],["nodeselectorterm",{"_index":1405,"t":{"1236":{"position":[[499,18]]}}}],["non",{"_index":1801,"t":{"1292":{"position":[[177,3]]},"1447":{"position":[[212,4]]}}}],["none",{"_index":806,"t":{"981":{"position":[[1901,7]]},"1089":{"position":[[361,4],[454,5],[564,4],[690,4],[775,4]]},"1097":{"position":[[228,4],[311,4],[364,4]]},"1115":{"position":[[505,4]]}}}],["none”、“vxlan”、“ipsec”（已弃用）、“host",{"_index":786,"t":{"969":{"position":[[368,33]]}}}],["normal",{"_index":1662,"t":{"1282":{"position":[[2684,6]]}}}],["notabl",{"_index":1508,"t":{"1272":{"position":[[414,7]]}}}],["note",{"_index":1346,"t":{"1210":{"position":[[1925,4]]},"1276":{"position":[[172,5]]},"1280":{"position":[[6395,5]]},"1290":{"position":[[113,4]]},"1368":{"position":[[1916,5]]}}}],["now",{"_index":296,"t":{"852":{"position":[[498,3]]},"865":{"position":[[46,3]]}}}],["ns",{"_index":1100,"t":{"1109":{"position":[[24,2]]},"1111":{"position":[[24,2]]}}}],["number",{"_index":555,"t":{"920":{"position":[[307,6]]},"981":{"position":[[318,6],[4724,6]]},"1272":{"position":[[259,6],[339,6]]},"1300":{"position":[[327,6]]},"1302":{"position":[[313,6]]},"1453":{"position":[[219,6]]}}}],["nvcr.io/nvidia/k8s/cuda",{"_index":252,"t":{"844":{"position":[[805,23]]}}}],["nvidia",{"_index":223,"t":{"844":{"position":[[3,6],[55,6],[126,6],[159,6],[215,6],[301,6],[320,6],[400,6],[411,6],[514,6],[600,6],[616,6],[756,6],[1010,10],[1044,6],[1141,12]]}}}],["nvidia.com/gpu",{"_index":257,"t":{"844":{"position":[[899,15]]}}}],["nvidia_driver_cap",{"_index":261,"t":{"844":{"position":[[972,26]]}}}],["nvidia_visible_devic",{"_index":259,"t":{"844":{"position":[[930,22]]}}}],["nvme",{"_index":1482,"t":{"1254":{"position":[[116,4]]}}}],["o",{"_index":764,"t":{"958":{"position":[[38,1]]},"981":{"position":[[2416,1]]},"1101":{"position":[[146,1]]},"1109":{"position":[[194,1]]},"1352":{"position":[[1610,1],[1653,1]]}}}],["object",{"_index":1800,"t":{"1292":{"position":[[148,7],[279,8],[413,8]]},"1294":{"position":[[239,7]]},"1308":{"position":[[209,8],[224,7]]},"1441":{"position":[[77,7]]},"1518":{"position":[[355,8]]},"1571":{"position":[[86,7]]},"1573":{"position":[[110,7]]},"1575":{"position":[[70,7]]},"1615":{"position":[[76,7]]},"1626":{"position":[[77,7]]}}}],["oci",{"_index":431,"t":{"878":{"position":[[226,3],[245,3]]}}}],["offer",{"_index":2312,"t":{"1620":{"position":[[66,7]]}}}],["oidc",{"_index":2223,"t":{"1513":{"position":[[91,4]]}}}],["old",{"_index":678,"t":{"937":{"position":[[306,7]]},"1300":{"position":[[147,3],[337,3]]},"1302":{"position":[[146,3],[323,3]]}}}],["older",{"_index":1520,"t":{"1272":{"position":[[728,6]]},"1280":{"position":[[26,5],[862,5]]},"1282":{"position":[[1286,5]]},"1286":{"position":[[175,5]]}}}],["on",{"_index":805,"t":{"981":{"position":[[1894,3],[2209,3]]},"1427":{"position":[[218,3]]}}}],["on=fals",{"_index":1774,"t":{"1288":{"position":[[3785,8]]},"1548":{"position":[[1302,8],[2525,8]]},"1560":{"position":[[1493,8],[2716,8]]}}}],["onc",{"_index":1849,"t":{"1304":{"position":[[342,4]]}}}],["onfailur",{"_index":251,"t":{"844":{"position":[[728,9]]}}}],["open",{"_index":1896,"t":{"1316":{"position":[[582,5]]}}}],["openrc",{"_index":333,"t":{"860":{"position":[[31,20],[55,6]]},"943":{"position":[[222,6],[717,6]]},"945":{"position":[[202,6],[705,6]]},"1047":{"position":[[73,6]]},"1089":{"position":[[58,6]]},"1240":{"position":[[41,6]]},"1244":{"position":[[58,6],[1618,6]]},"1364":{"position":[[10,6],[125,6]]}}}],["openssl",{"_index":663,"t":{"935":{"position":[[379,7],[390,7],[417,8],[475,7]]}}}],["openssl_genrsa_flag",{"_index":666,"t":{"935":{"position":[[432,21],[490,23]]}}}],["oper",{"_index":268,"t":{"846":{"position":[[161,8],[297,8]]},"1210":{"position":[[1011,8],[1505,8]]},"1236":{"position":[[568,9]]},"1266":{"position":[[206,8],[236,8]]},"1272":{"position":[[543,9]]},"1280":{"position":[[831,8]]},"1282":{"position":[[2642,9]]},"1290":{"position":[[169,8]]},"1352":{"position":[[364,9],[712,9]]},"1368":{"position":[[354,10],[1346,8],[1559,9]]},"1604":{"position":[[185,7]]}}}],["opt",{"_index":1522,"t":{"1272":{"position":[[792,3]]}}}],["opt/k3s/server/tl",{"_index":650,"t":{"931":{"position":[[523,19],[729,19],[861,19]]},"935":{"position":[[354,19]]}}}],["opt/k3s/server/tls/service.key",{"_index":670,"t":{"935":{"position":[[521,31],[632,31]]}}}],["option",{"_index":547,"t":{"920":{"position":[[97,9],[107,8]]},"981":{"position":[[108,9],[118,8],[5414,10]]},"998":{"position":[[162,8],[409,8]]},"1210":{"position":[[1982,8]]},"1272":{"position":[[854,7]]},"1310":{"position":[[266,8]]},"1316":{"position":[[186,7]]},"1502":{"position":[[2148,9],[2388,9],[2628,9]]},"1508":{"position":[[2193,9]]},"1620":{"position":[[58,7]]}}}],["order",{"_index":1809,"t":{"1294":{"position":[[302,5]]},"1518":{"position":[[273,5]]}}}],["origin",{"_index":2002,"t":{"1368":{"position":[[1047,8]]}}}],["os",{"_index":373,"t":{"869":{"position":[[13,2],[73,2]]},"1166":{"position":[[191,2]]},"1168":{"position":[[112,15]]},"1254":{"position":[[5,2],[146,2]]}}}],["other",{"_index":1563,"t":{"1278":{"position":[[574,7]]}}}],["other=what",{"_index":1073,"t":{"1095":{"position":[[427,10],[554,10]]}}}],["out",{"_index":669,"t":{"935":{"position":[[517,3]]},"1300":{"position":[[232,3]]},"1302":{"position":[[231,3]]}}}],["outlin",{"_index":1501,"t":{"1272":{"position":[[113,8]]},"1274":{"position":[[118,8]]},"1278":{"position":[[166,8]]},"1310":{"position":[[341,8]]},"1368":{"position":[[1232,8]]}}}],["output",{"_index":877,"t":{"998":{"position":[[1729,6]]}}}],["outsid",{"_index":1894,"t":{"1316":{"position":[[514,7]]}}}],["over",{"_index":610,"t":{"920":{"position":[[3292,4]]},"981":{"position":[[5522,4],[8612,4]]}}}],["overlayf",{"_index":601,"t":{"920":{"position":[[2395,12]]},"981":{"position":[[7328,12]]}}}],["overrid",{"_index":600,"t":{"920":{"position":[[2345,8],[2840,8],[2915,8],[2996,8]]},"981":{"position":[[7278,8],[7902,8],[7977,8],[8058,8]]},"1556":{"position":[[166,8]]}}}],["override=hostname01",{"_index":1776,"t":{"1288":{"position":[[3838,19]]}}}],["override=k3",{"_index":2263,"t":{"1548":{"position":[[1355,12],[2578,12]]},"1560":{"position":[[1546,12],[2769,12]]}}}],["overview",{"_index":1984,"t":{"1368":{"position":[[0,9]]}}}],["ownership",{"_index":1537,"t":{"1272":{"position":[[1152,10]]},"1535":{"position":[[66,9]]}}}],["p",{"_index":298,"t":{"852":{"position":[[680,1]]},"871":{"position":[[319,1]]},"929":{"position":[[901,1]]},"931":{"position":[[521,1]]},"935":{"position":[[352,1]]},"1075":{"position":[[76,1]]},"1276":{"position":[[360,1]]},"1284":{"position":[[411,1]]}}}],["packag",{"_index":839,"t":{"981":{"position":[[5740,8]]},"1272":{"position":[[1233,8]]},"1282":{"position":[[1063,8]]}}}],["paramet",{"_index":1543,"t":{"1274":{"position":[[55,10]]},"1276":{"position":[[82,10],[253,11]]},"1415":{"position":[[159,10]]},"1417":{"position":[[271,10]]},"1421":{"position":[[182,10]]},"1423":{"position":[[292,10]]},"1425":{"position":[[292,9]]},"1427":{"position":[[174,9]]},"1429":{"position":[[174,9]]},"1431":{"position":[[174,9]]},"1433":{"position":[[227,11]]},"1435":{"position":[[190,10]]},"1437":{"position":[[180,9]]},"1439":{"position":[[180,9]]},"1441":{"position":[[279,9]]},"1443":{"position":[[181,9]]},"1445":{"position":[[273,9]]},"1447":{"position":[[177,9]]},"1449":{"position":[[159,10]]},"1451":{"position":[[180,9]]},"1453":{"position":[[182,9]]},"1455":{"position":[[185,9]]},"1457":{"position":[[183,9]]},"1459":{"position":[[159,10],[259,9]]},"1461":{"position":[[190,9]]},"1463":{"position":[[287,11]]},"1465":{"position":[[280,11]]},"1469":{"position":[[289,10]]},"1471":{"position":[[263,9]]},"1475":{"position":[[159,10]]},"1480":{"position":[[176,10]]},"1482":{"position":[[175,10]]},"1484":{"position":[[205,9]]},"1486":{"position":[[185,9]]},"1488":{"position":[[196,9]]},"1490":{"position":[[210,9]]},"1493":{"position":[[163,10]]},"1495":{"position":[[192,9]]},"1498":{"position":[[210,11]]},"1500":{"position":[[136,10]]},"1502":{"position":[[151,9]]},"1504":{"position":[[252,11]]},"1506":{"position":[[136,10]]},"1508":{"position":[[156,9]]},"1510":{"position":[[259,10]]},"1542":{"position":[[277,9]]},"1544":{"position":[[263,9]]},"1546":{"position":[[306,9]]},"1548":{"position":[[253,9]]},"1550":{"position":[[290,9]]},"1552":{"position":[[275,9]]},"1558":{"position":[[274,9]]},"1560":{"position":[[396,10]]},"1564":{"position":[[158,9]]},"1566":{"position":[[593,9]]}}}],["parti",{"_index":2314,"t":{"1620":{"position":[[108,5]]}}}],["pass",{"_index":1505,"t":{"1272":{"position":[[332,4]]},"1280":{"position":[[141,7],[955,7]]},"1284":{"position":[[824,6]]},"1290":{"position":[[55,4],[147,6]]},"1292":{"position":[[448,7],[518,4]]},"1294":{"position":[[547,7],[617,4]]},"1296":{"position":[[471,7]]},"1298":{"position":[[311,7]]},"1300":{"position":[[486,7]]},"1302":{"position":[[472,7]]},"1304":{"position":[[696,7]]},"1306":{"position":[[489,7]]},"1310":{"position":[[301,7]]},"1312":{"position":[[563,7]]},"1314":{"position":[[183,7]]},"1316":{"position":[[614,7]]},"1318":{"position":[[874,4]]},"1368":{"position":[[1181,4],[1215,6]]},"1392":{"position":[[8,4],[80,6],[1653,4]]},"1394":{"position":[[90,6]]},"1398":{"position":[[8,4]]},"1400":{"position":[[8,4]]},"1402":{"position":[[8,4]]},"1404":{"position":[[8,4]]},"1406":{"position":[[8,4]]},"1408":{"position":[[8,4]]},"1417":{"position":[[8,4]]},"1419":{"position":[[8,4]]},"1423":{"position":[[8,4]]},"1425":{"position":[[8,4]]},"1427":{"position":[[8,4]]},"1429":{"position":[[8,4]]},"1431":{"position":[[8,4]]},"1435":{"position":[[8,4]]},"1441":{"position":[[8,4]]},"1443":{"position":[[8,4]]},"1445":{"position":[[8,4]]},"1447":{"position":[[8,4]]},"1449":{"position":[[8,4]]},"1459":{"position":[[8,4]]},"1463":{"position":[[8,4],[1783,4]]},"1465":{"position":[[8,4]]},"1467":{"position":[[8,4]]},"1469":{"position":[[8,4]]},"1480":{"position":[[8,4]]},"1482":{"position":[[8,4]]},"1484":{"position":[[8,4]]},"1486":{"position":[[8,4]]},"1490":{"position":[[8,4]]},"1493":{"position":[[8,4]]},"1495":{"position":[[8,4]]},"1498":{"position":[[8,4],[1677,4]]},"1500":{"position":[[8,4],[1566,4]]},"1502":{"position":[[8,4],[1591,4]]},"1504":{"position":[[8,4],[1743,4]]},"1506":{"position":[[8,4],[1569,4]]},"1508":{"position":[[8,4],[1601,4]]},"1510":{"position":[[8,4],[1700,4]]},"1525":{"position":[[8,4]]},"1527":{"position":[[8,4]]},"1529":{"position":[[8,4]]},"1531":{"position":[[8,4]]},"1533":{"position":[[8,4]]},"1535":{"position":[[8,4]]},"1542":{"position":[[8,4]]},"1544":{"position":[[8,4]]},"1546":{"position":[[8,4]]},"1548":{"position":[[8,4]]},"1560":{"position":[[8,4]]}}}],["password",{"_index":1237,"t":{"1154":{"position":[[283,8]]},"1156":{"position":[[217,9],[257,8]]},"1158":{"position":[[216,9],[256,8]]}}}],["password.k3",{"_index":494,"t":{"894":{"position":[[529,12]]}}}],["path",{"_index":34,"t":{"823":{"position":[[508,4]]},"838":{"position":[[512,4],[1788,4],[1851,4],[1874,4],[2565,4]]},"920":{"position":[[1230,4],[1417,4],[2114,5],[2172,4]]},"937":{"position":[[449,5],[707,5],[1420,4]]},"971":{"position":[[30,4]]},"981":{"position":[[3293,4],[3309,4],[5613,4],[5656,4],[6555,4],[6742,4],[7047,5],[7105,4]]},"1144":{"position":[[487,4]]},"1156":{"position":[[284,4],[339,4],[392,4],[543,4],[598,4],[651,4]]},"1296":{"position":[[28,4],[439,5]]},"1330":{"position":[[23,4]]},"1332":{"position":[[65,4],[152,4]]},"1334":{"position":[[300,4]]},"1425":{"position":[[309,4]]},"1451":{"position":[[175,4],[204,4]]},"1471":{"position":[[280,4]]}}}],["path/to/cni/fil",{"_index":2031,"t":{"1388":{"position":[[152,19]]},"1390":{"position":[[158,19]]}}}],["path/to/encrypt",{"_index":2182,"t":{"1473":{"position":[[194,19]]}}}],["path=/opt/k3s/serv",{"_index":656,"t":{"931":{"position":[[1074,20]]},"935":{"position":[[710,20]]}}}],["path=/var/lib/rancher/k3s/agent/pod",{"_index":1779,"t":{"1288":{"position":[[3987,35]]},"1548":{"position":[[1599,35],[2822,35]]},"1560":{"position":[[1790,35],[3013,35]]}}}],["path=/var/lib/rancher/k3s/server/logs/audit.log",{"_index":1316,"t":{"1210":{"position":[[481,48]]},"1284":{"position":[[898,48],[1236,48]]},"1286":{"position":[[340,48],[963,48]]}}}],["path=/var/lib/rancher/k3s/server/rot",{"_index":660,"t":{"933":{"position":[[798,39]]}}}],["path=/var/log/apiserver/audit.log",{"_index":2169,"t":{"1451":{"position":[[290,33]]}}}],["path=<path",{"_index":681,"t":{"937":{"position":[[510,10],[768,10]]}}}],["path=<snapshot",{"_index":706,"t":{"937":{"position":[[2176,14]]}}}],["paus",{"_index":153,"t":{"838":{"position":[[1469,8],[1625,8],[2345,8],[2505,8],[2680,8]]},"908":{"position":[[124,5],[200,5]]},"920":{"position":[[2179,5],[2224,5]]},"981":{"position":[[7112,5],[7157,5]]}}}],["pause:3.6",{"_index":599,"t":{"920":{"position":[[2297,11]]},"981":{"position":[[7230,11]]},"1548":{"position":[[1574,9],[2797,9]]},"1560":{"position":[[1765,9],[2988,9]]}}}],["pbkdf2",{"_index":620,"t":{"927":{"position":[[197,6]]},"993":{"position":[[235,6]]}}}],["peer",{"_index":818,"t":{"981":{"position":[[3202,5]]},"1392":{"position":[[1189,5],[1316,5],[1433,5],[1868,5],[1888,4],[1960,4]]},"1463":{"position":[[1319,5],[1446,5],[1563,5],[1998,5],[2018,4],[2090,4]]},"1498":{"position":[[1213,5],[1340,5],[1457,5],[1892,5],[1912,4],[1984,4]]},"1500":{"position":[[1102,5],[1229,5],[1346,5],[1781,5],[1801,4],[1873,4]]},"1502":{"position":[[1127,5],[1254,5],[1371,5],[1806,5],[1826,4],[1898,4]]},"1504":{"position":[[78,4],[266,4],[311,4],[1279,5],[1406,5],[1523,5],[1958,5],[1978,4],[2050,4],[2242,4],[2261,4],[2416,4],[2435,4]]},"1506":{"position":[[149,4],[1105,5],[1232,5],[1349,5],[1784,5],[1804,4],[1876,4]]},"1508":{"position":[[142,4],[188,4],[1137,5],[1264,5],[1381,5],[1816,5],[1836,4],[1908,4],[2038,4],[2074,4],[2127,4],[2389,4]]},"1510":{"position":[[1236,5],[1363,5],[1480,5],[1915,5],[1935,4],[2007,4]]}}}],["pem",{"_index":848,"t":{"987":{"position":[[188,3]]}}}],["pend",{"_index":1373,"t":{"1220":{"position":[[189,7]]},"1222":{"position":[[538,7]]}}}],["per",{"_index":1831,"t":{"1298":{"position":[[253,3]]},"1441":{"position":[[88,3]]}}}],["perform",{"_index":1805,"t":{"1294":{"position":[[168,7]]},"1312":{"position":[[185,11]]},"1368":{"position":[[1733,10]]}}}],["period",{"_index":1830,"t":{"1298":{"position":[[229,6]]},"1312":{"position":[[288,6]]}}}],["perman",{"_index":353,"t":{"865":{"position":[[96,9],[152,9],[224,9]]}}}],["permanentredirect",{"_index":1001,"t":{"1061":{"position":[[610,18]]}}}],["permiss",{"_index":1536,"t":{"1272":{"position":[[1136,11]]},"1284":{"position":[[323,10]]},"1294":{"position":[[508,12]]},"1400":{"position":[[341,11],[357,11]]},"1404":{"position":[[351,11],[367,11]]},"1525":{"position":[[271,13]]},"1533":{"position":[[71,11]]}}}],["permissions=%a",{"_index":2079,"t":{"1400":{"position":[[250,14]]},"1404":{"position":[[259,14]]}}}],["permissions=644",{"_index":2080,"t":{"1400":{"position":[[423,15]]},"1404":{"position":[[433,15]]}}}],["pernodehostbit",{"_index":1409,"t":{"1236":{"position":[[601,16],[751,15]]}}}],["persist",{"_index":1863,"t":{"1308":{"position":[[167,10]]}}}],["persistentvolumeclaim",{"_index":1592,"t":{"1280":{"position":[[1664,23],[2805,23]]},"1332":{"position":[[21,21]]},"1334":{"position":[[260,22]]},"1338":{"position":[[21,21]]},"1340":{"position":[[260,22]]}}}],["pgbouncer",{"_index":891,"t":{"1004":{"position":[[775,21]]}}}],["pi",{"_index":372,"t":{"869":{"position":[[10,2],[70,2],[411,2]]},"1033":{"position":[[49,14]]},"1115":{"position":[[187,2],[677,2]]},"1166":{"position":[[188,2]]},"1168":{"position":[[109,2]]},"1170":{"position":[[223,2],[250,2]]},"1254":{"position":[[143,2],[162,2]]}}}],["pi4b",{"_index":1451,"t":{"1246":{"position":[[285,4],[347,4],[399,4]]},"1258":{"position":[[76,4],[138,4],[176,4]]},"1260":{"position":[[103,4],[165,4],[203,4]]},"1262":{"position":[[42,4]]}}}],["pid",{"_index":1961,"t":{"1348":{"position":[[292,3]]}}}],["pki",{"_index":619,"t":{"927":{"position":[[68,3]]},"929":{"position":[[233,3]]}}}],["place",{"_index":1616,"t":{"1280":{"position":[[2443,6]]},"1282":{"position":[[147,6]]},"1286":{"position":[[34,6]]},"1439":{"position":[[261,6]]},"1513":{"position":[[121,5]]},"1586":{"position":[[111,5]]}}}],["plan",{"_index":1969,"t":{"1352":{"position":[[150,4],[194,4],[222,4],[499,4],[543,4],[570,4],[769,4],[982,4],[1069,4],[1121,4],[1154,4],[1401,4],[1561,4],[1603,5]]}}}],["plane",{"_index":25,"t":{"823":{"position":[[299,5]]},"846":{"position":[[238,5]]},"858":{"position":[[285,5],[350,5]]},"886":{"position":[[122,5],[194,5]]},"890":{"position":[[43,5],[157,5],[259,5]]},"1019":{"position":[[72,5],[173,5]]},"1033":{"position":[[357,5],[1344,10]]},"1065":{"position":[[166,5]]},"1121":{"position":[[170,5]]},"1186":{"position":[[46,5],[126,5],[215,5],[235,5]]},"1188":{"position":[[38,5],[225,5],[251,5]]},"1190":{"position":[[14,5],[54,5],[102,5]]},"1192":{"position":[[59,5]]},"1248":{"position":[[126,5]]},"1250":{"position":[[237,12]]},"1266":{"position":[[142,5]]},"1268":{"position":[[241,5],[264,5]]},"1288":{"position":[[33,5]]},"1345":{"position":[[199,12]]},"1352":{"position":[[30,14],[358,5],[706,5],[1036,5]]},"1372":{"position":[[117,5]]},"1374":{"position":[[117,5]]},"1376":{"position":[[117,5]]},"1378":{"position":[[117,5]]},"1380":{"position":[[117,5]]},"1382":{"position":[[117,5]]},"1384":{"position":[[117,5]]},"1386":{"position":[[117,5]]},"1388":{"position":[[117,5]]},"1390":{"position":[[117,5]]},"1396":{"position":[[117,5]]},"1398":{"position":[[107,5]]},"1400":{"position":[[107,5]]},"1402":{"position":[[107,5]]},"1404":{"position":[[107,5]]},"1406":{"position":[[107,5]]},"1408":{"position":[[107,5]]},"1410":{"position":[[107,5]]},"1412":{"position":[[107,5]]},"1415":{"position":[[130,5]]},"1417":{"position":[[216,5]]},"1419":{"position":[[130,5]]},"1421":{"position":[[140,5]]},"1423":{"position":[[234,5]]},"1425":{"position":[[237,5]]},"1427":{"position":[[130,5]]},"1429":{"position":[[130,5]]},"1431":{"position":[[130,5]]},"1435":{"position":[[130,5]]},"1437":{"position":[[130,5]]},"1439":{"position":[[130,5]]},"1441":{"position":[[220,5]]},"1443":{"position":[[130,5]]},"1445":{"position":[[223,5]]},"1447":{"position":[[130,5]]},"1449":{"position":[[130,5]]},"1451":{"position":[[140,5]]},"1453":{"position":[[140,5]]},"1455":{"position":[[140,5]]},"1457":{"position":[[140,5]]},"1459":{"position":[[130,5]]},"1461":{"position":[[140,5]]},"1463":{"position":[[234,5]]},"1465":{"position":[[220,5]]},"1467":{"position":[[220,5]]},"1469":{"position":[[234,5]]},"1471":{"position":[[211,5]]},"1475":{"position":[[130,5]]},"1478":{"position":[[147,5]]},"1480":{"position":[[147,5]]},"1482":{"position":[[147,5]]},"1484":{"position":[[147,5]]},"1486":{"position":[[147,5]]},"1488":{"position":[[157,5]]},"1490":{"position":[[147,5]]},"1493":{"position":[[134,5]]},"1495":{"position":[[129,5]]}}}],["plane,etcd,mast",{"_index":928,"t":{"1033":{"position":[[1193,17],[1244,17],[1295,17]]}}}],["plane,mast",{"_index":1301,"t":{"1190":{"position":[[429,12]]}}}],["plane、kubelet",{"_index":1412,"t":{"1240":{"position":[[500,13]]}}}],["plane（apiserv",{"_index":1136,"t":{"1121":{"position":[[57,17]]}}}],["plane，你可以使用污点（taint）。nod",{"_index":910,"t":{"1025":{"position":[[806,25]]}}}],["platinum",{"_index":1480,"t":{"1254":{"position":[[75,8]]}}}],["plug",{"_index":2163,"t":{"1445":{"position":[[92,4]]}}}],["plugin",{"_index":263,"t":{"844":{"position":[[1058,6]]},"920":{"position":[[1278,6],[1449,6]]},"981":{"position":[[6603,6],[6774,6]]},"1210":{"position":[[1154,8]]},"1272":{"position":[[885,8]]},"1280":{"position":[[480,8],[1144,6]]},"1292":{"position":[[34,6],[505,8]]},"1294":{"position":[[34,6],[604,8]]},"1419":{"position":[[202,8],[300,8],[343,8]]},"1433":{"position":[[463,8],[509,8]]},"1435":{"position":[[182,7],[370,8],[416,8],[476,8]]},"1437":{"position":[[172,7],[360,8]]},"1439":{"position":[[172,7],[436,8],[482,8],[540,8]]},"1441":{"position":[[271,7],[486,8],[530,8]]},"1443":{"position":[[173,7],[382,8],[426,8]]},"1445":{"position":[[265,7],[489,8],[535,8]]},"1613":{"position":[[37,6],[145,7]]}}}],["plugins=...,alwayspullimag",{"_index":2159,"t":{"1437":{"position":[[238,32]]}}}],["plugins=...,eventratelimit",{"_index":2154,"t":{"1433":{"position":[[258,30]]}}}],["plugins=...,noderestrict",{"_index":2164,"t":{"1445":{"position":[[344,31]]}}}],["plugins=...,securitycontextdeni",{"_index":2162,"t":{"1439":{"position":[[287,35]]}}}],["plugins=noderestrict",{"_index":2143,"t":{"1423":{"position":[[1244,23]]},"1425":{"position":[[1192,23]]},"1427":{"position":[[1061,23]]},"1429":{"position":[[1010,23]]},"1431":{"position":[[1023,23]]},"1433":{"position":[[1136,23]]},"1435":{"position":[[1097,23]]},"1439":{"position":[[1170,23]]},"1441":{"position":[[1151,23]]},"1443":{"position":[[1047,23]]},"1445":{"position":[[1163,23]]},"1447":{"position":[[1028,23]]},"1449":{"position":[[943,23]]},"1459":{"position":[[1118,23]]},"1465":{"position":[[1160,23]]},"1467":{"position":[[1076,23]]},"1469":{"position":[[1082,23]]},"1542":{"position":[[1427,23]]},"1544":{"position":[[1441,23]]},"1546":{"position":[[1556,23]]}}}],["plugins=noderestriction,podsecuritypolici",{"_index":1574,"t":{"1280":{"position":[[1040,42]]},"1288":{"position":[[494,41]]}}}],["plugins=noderestriction,podsecuritypolicy,namespacelifecycle,serviceaccount",{"_index":1688,"t":{"1286":{"position":[[873,76]]}}}],["plugin。添加以下参数值：'admiss",{"_index":1313,"t":{"1210":{"position":[[206,25]]}}}],["pod",{"_index":61,"t":{"836":{"position":[[381,3]]},"838":{"position":[[431,4]]},"844":{"position":[[486,3],[533,4],[648,3],[1113,3]]},"846":{"position":[[143,17]]},"852":{"position":[[558,4],[570,3]]},"865":{"position":[[203,5],[341,3]]},"867":{"position":[[121,5],[206,3]]},"880":{"position":[[128,3],[286,3]]},"931":{"position":[[349,3]]},"933":{"position":[[313,3]]},"935":{"position":[[825,4]]},"969":{"position":[[48,3],[478,3],[602,3]]},"981":{"position":[[1330,3],[2077,3],[2236,6],[2331,4]]},"1000":{"position":[[281,4],[406,4]]},"1047":{"position":[[172,3]]},"1115":{"position":[[738,3]]},"1123":{"position":[[668,3]]},"1144":{"position":[[420,4]]},"1172":{"position":[[531,3],[601,3]]},"1182":{"position":[[26,3]]},"1196":{"position":[[86,3]]},"1210":{"position":[[42,3],[768,3],[1210,3],[1586,3],[1598,3],[1767,3],[1814,3],[1991,3],[2036,3],[2084,3],[2128,3]]},"1216":{"position":[[203,4]]},"1222":{"position":[[165,6],[172,3],[193,3],[252,3]]},"1226":{"position":[[122,12]]},"1228":{"position":[[29,6],[393,3],[508,3]]},"1240":{"position":[[478,3]]},"1252":{"position":[[191,3]]},"1266":{"position":[[408,41]]},"1268":{"position":[[20,3],[183,10]]},"1272":{"position":[[1123,3]]},"1278":{"position":[[78,3],[229,3]]},"1280":{"position":[[60,3],[107,3],[536,3],[876,3],[921,3],[2201,4],[6476,4]]},"1282":{"position":[[114,5]]},"1286":{"position":[[627,3],[1250,3]]},"1288":{"position":[[3974,3]]},"1294":{"position":[[79,3],[160,3],[281,3],[340,3],[440,3],[497,3]]},"1312":{"position":[[29,3],[368,4]]},"1316":{"position":[[202,5],[340,4],[414,3]]},"1318":{"position":[[205,4],[252,3],[323,4]]},"1326":{"position":[[40,3],[61,3]]},"1330":{"position":[[128,4]]},"1334":{"position":[[21,3]]},"1336":{"position":[[278,4]]},"1340":{"position":[[21,3]]},"1415":{"position":[[46,3]]},"1417":{"position":[[132,3]]},"1419":{"position":[[46,3]]},"1421":{"position":[[56,3]]},"1423":{"position":[[150,3]]},"1425":{"position":[[153,3]]},"1427":{"position":[[46,3]]},"1429":{"position":[[46,3]]},"1431":{"position":[[46,3]]},"1433":{"position":[[140,3]]},"1435":{"position":[[46,3]]},"1437":{"position":[[46,3]]},"1439":{"position":[[46,3]]},"1441":{"position":[[136,3]]},"1443":{"position":[[46,3]]},"1445":{"position":[[139,3]]},"1447":{"position":[[46,3]]},"1449":{"position":[[46,3]]},"1451":{"position":[[56,3]]},"1453":{"position":[[56,3]]},"1455":{"position":[[56,3]]},"1457":{"position":[[56,3]]},"1459":{"position":[[46,3]]},"1461":{"position":[[56,3]]},"1463":{"position":[[150,3]]},"1465":{"position":[[136,3]]},"1467":{"position":[[136,3]]},"1469":{"position":[[150,3]]},"1471":{"position":[[127,3]]},"1475":{"position":[[46,3]]},"1478":{"position":[[54,3],[183,3],[255,3],[391,3]]},"1480":{"position":[[54,3]]},"1482":{"position":[[54,3]]},"1484":{"position":[[54,3]]},"1486":{"position":[[54,3]]},"1488":{"position":[[64,3]]},"1490":{"position":[[54,3]]},"1493":{"position":[[45,3]]},"1495":{"position":[[45,3]]},"1498":{"position":[[114,3]]},"1500":{"position":[[40,3]]},"1502":{"position":[[40,3]]},"1504":{"position":[[156,3]]},"1506":{"position":[[40,3]]},"1508":{"position":[[40,3]]},"1510":{"position":[[163,3]]},"1518":{"position":[[336,3]]},"1548":{"position":[[1531,3],[1586,3],[2754,3],[2809,3]]},"1560":{"position":[[1722,3],[1777,3],[2945,3],[3000,3]]},"1575":{"position":[[66,3]]},"1579":{"position":[[51,4]]},"1586":{"position":[[45,3]]},"1628":{"position":[[99,3]]},"1630":{"position":[[97,5]]}}}],["pod.yaml",{"_index":1945,"t":{"1334":{"position":[[363,8]]},"1336":{"position":[[328,8]]}}}],["podcidr",{"_index":1142,"t":{"1121":{"position":[[733,7]]},"1131":{"position":[[208,10],[665,7]]},"1236":{"position":[[274,25],[670,8]]}}}],["pods/contain",{"_index":1893,"t":{"1316":{"position":[[487,15]]}}}],["pods/exec",{"_index":2228,"t":{"1518":{"position":[[371,10]]}}}],["pods/portforward",{"_index":2229,"t":{"1518":{"position":[[382,17]]}}}],["pods/proxi",{"_index":2230,"t":{"1518":{"position":[[400,10]]}}}],["podsecur",{"_index":1337,"t":{"1210":{"position":[[1171,11]]},"1278":{"position":[[505,11]]},"1280":{"position":[[497,11]]}}}],["podsecurityconfigur",{"_index":1339,"t":{"1210":{"position":[[1261,24]]},"1280":{"position":[[587,24]]}}}],["podsecuritypolici",{"_index":1308,"t":{"1210":{"position":[[21,20],[178,17],[2263,19]]},"1272":{"position":[[694,20]]},"1280":{"position":[[1175,18],[1394,17],[2581,17],[3142,17],[3594,17],[4139,19],[4353,19],[4562,19]]},"1294":{"position":[[41,17],[219,19]]},"1439":{"position":[[229,17],[553,19]]}}}],["podsecuritypoliciy",{"_index":1311,"t":{"1210":{"position":[[112,31]]}}}],["podsecuritystandard",{"_index":1519,"t":{"1272":{"position":[[673,20]]}}}],["podselector",{"_index":1636,"t":{"1280":{"position":[[5912,12],[6111,12],[6310,12]]},"1282":{"position":[[425,12],[852,12],[1415,12],[1635,12],[1876,12],[2098,12],[2318,12],[2559,12]]}}}],["pod：apiserv",{"_index":793,"t":{"969":{"position":[[902,13]]},"1121":{"position":[[627,13]]}}}],["polici",{"_index":413,"t":{"873":{"position":[[260,6]]},"951":{"position":[[222,6]]},"973":{"position":[[195,6]]},"981":{"position":[[6103,6],[6151,6]]},"1027":{"position":[[757,6]]},"1033":{"position":[[1726,6]]},"1119":{"position":[[94,6]]},"1210":{"position":[[539,6]]},"1218":{"position":[[115,6]]},"1272":{"position":[[633,6],[984,9]]},"1278":{"position":[[117,8],[253,9],[326,9],[433,6]]},"1280":{"position":[[281,6],[889,8],[1219,6],[2160,7],[2260,6],[2384,6],[4119,6],[4333,6],[4542,6],[6549,6]]},"1282":{"position":[[48,6],[128,8],[303,7],[606,6],[748,6],[1007,8],[2672,8]]},"1284":{"position":[[150,7],[211,8],[469,6],[523,6],[644,6],[764,6],[975,6],[1315,6]]},"1286":{"position":[[398,6],[1021,6]]},"1292":{"position":[[104,6]]},"1294":{"position":[[92,6],[353,8]]},"1314":{"position":[[28,6]]},"1516":{"position":[[42,6],[174,6]]},"1518":{"position":[[43,6]]},"1586":{"position":[[83,6]]},"1588":{"position":[[30,8]]},"1590":{"position":[[30,8]]},"1592":{"position":[[30,8]]},"1594":{"position":[[30,8]]},"1596":{"position":[[30,8]]},"1598":{"position":[[35,6]]},"1600":{"position":[[30,8]]},"1602":{"position":[[76,8]]},"1606":{"position":[[30,8]]},"1608":{"position":[[30,8]]},"1610":{"position":[[30,8]]},"1613":{"position":[[76,9]]}}}],["policy.yaml",{"_index":1617,"t":{"1280":{"position":[[2530,11]]}}}],["policy/v1beta1",{"_index":1580,"t":{"1280":{"position":[[1373,14],[2560,14],[3121,14],[3573,14]]}}}],["policytyp",{"_index":1651,"t":{"1282":{"position":[[896,12],[1479,12],[1720,12],[1948,12],[2162,12],[2403,12],[2612,12]]}}}],["pool2",{"_index":2256,"t":{"1548":{"position":[[680,5],[1376,5]]},"1560":{"position":[[871,5],[1567,5]]}}}],["pool3",{"_index":2131,"t":{"1423":{"position":[[691,5]]},"1425":{"position":[[639,5]]},"1427":{"position":[[508,5]]},"1429":{"position":[[457,5]]},"1431":{"position":[[470,5]]},"1433":{"position":[[583,5]]},"1435":{"position":[[544,5]]},"1439":{"position":[[617,5]]},"1441":{"position":[[598,5]]},"1443":{"position":[[494,5]]},"1445":{"position":[[610,5]]},"1447":{"position":[[475,5]]},"1449":{"position":[[390,5]]},"1459":{"position":[[565,5]]},"1465":{"position":[[607,5],[2783,5]]},"1467":{"position":[[523,5]]},"1469":{"position":[[529,5]]},"1480":{"position":[[416,5]]},"1482":{"position":[[484,5]]},"1484":{"position":[[569,5]]},"1486":{"position":[[466,5]]},"1493":{"position":[[375,5]]},"1495":{"position":[[449,5]]},"1542":{"position":[[874,5]]},"1544":{"position":[[888,5]]},"1546":{"position":[[1003,5]]},"1548":{"position":[[1903,5],[2599,5]]},"1560":{"position":[[2094,5],[2790,5]]}}}],["port",{"_index":123,"t":{"838":{"position":[[920,5],[1010,4],[1174,4]]},"854":{"position":[[406,4]]},"880":{"position":[[565,6]]},"906":{"position":[[292,4]]},"920":{"position":[[1608,4],[1638,4],[1744,4],[1766,4]]},"963":{"position":[[62,4],[183,4]]},"969":{"position":[[154,4]]},"981":{"position":[[676,4],[711,4],[889,4],[911,4],[992,5],[1482,4],[1512,4],[8498,4],[8710,4],[8740,4],[8846,4],[8868,4]]},"1282":{"position":[[795,6],[804,5],[829,5]]},"1334":{"position":[[211,6]]},"1340":{"position":[[211,6]]},"1423":{"position":[[2634,4]]},"1425":{"position":[[2582,4]]},"1427":{"position":[[2451,4]]},"1429":{"position":[[2400,4]]},"1431":{"position":[[2413,4]]},"1433":{"position":[[2526,4]]},"1435":{"position":[[2487,4]]},"1439":{"position":[[2560,4]]},"1441":{"position":[[2541,4]]},"1443":{"position":[[2437,4]]},"1445":{"position":[[2553,4]]},"1447":{"position":[[172,4],[231,5],[340,5],[373,5],[410,5],[2418,4]]},"1449":{"position":[[2333,4]]},"1459":{"position":[[2508,4]]},"1465":{"position":[[2550,4]]},"1467":{"position":[[2466,4]]},"1469":{"position":[[2472,4]]},"1542":{"position":[[2817,4]]},"1544":{"position":[[2831,4]]},"1546":{"position":[[2946,4]]},"1548":{"position":[[541,5],[577,5],[615,5]]}}}],["port/0",{"_index":775,"t":{"963":{"position":[[201,6]]}}}],["port=0",{"_index":1710,"t":{"1288":{"position":[[813,6],[2706,6],[3030,6],[4084,6]]},"1548":{"position":[[313,6],[1657,6],[2880,6]]},"1560":{"position":[[1848,6],[3071,6]]}}}],["port=10251",{"_index":1751,"t":{"1288":{"position":[[2984,10]]}}}],["port=10252",{"_index":1744,"t":{"1288":{"position":[[2591,10]]}}}],["port=10257",{"_index":2198,"t":{"1480":{"position":[[1848,10]]},"1482":{"position":[[1916,10]]},"1484":{"position":[[2001,10]]},"1486":{"position":[[1898,10]]}}}],["port=10259",{"_index":2177,"t":{"1465":{"position":[[3222,11]]},"1493":{"position":[[814,11]]},"1495":{"position":[[888,11]]}}}],["port=6443",{"_index":1692,"t":{"1288":{"position":[[199,9]]},"1423":{"position":[[835,9]]},"1425":{"position":[[783,9]]},"1427":{"position":[[652,9]]},"1429":{"position":[[601,9]]},"1431":{"position":[[614,9]]},"1433":{"position":[[727,9]]},"1435":{"position":[[688,9]]},"1439":{"position":[[761,9]]},"1441":{"position":[[742,9]]},"1443":{"position":[[638,9]]},"1445":{"position":[[754,9]]},"1447":{"position":[[619,9]]},"1449":{"position":[[534,9]]},"1459":{"position":[[709,9]]},"1465":{"position":[[751,9]]},"1467":{"position":[[667,9]]},"1469":{"position":[[673,9]]},"1542":{"position":[[1018,9]]},"1544":{"position":[[1032,9]]},"1546":{"position":[[1147,9]]}}}],["port=6443/tcp",{"_index":355,"t":{"865":{"position":[[112,13]]}}}],["port=6444",{"_index":1727,"t":{"1288":{"position":[[1544,9]]},"1423":{"position":[[2349,9]]},"1425":{"position":[[2297,9]]},"1427":{"position":[[2166,9]]},"1429":{"position":[[2115,9]]},"1431":{"position":[[2128,9]]},"1433":{"position":[[2241,9]]},"1435":{"position":[[2202,9]]},"1439":{"position":[[2275,9]]},"1441":{"position":[[2256,9]]},"1443":{"position":[[2152,9]]},"1445":{"position":[[2268,9]]},"1447":{"position":[[2133,9]]},"1449":{"position":[[2048,9]]},"1459":{"position":[[2223,9]]},"1465":{"position":[[2265,9]]},"1467":{"position":[[2181,9]]},"1469":{"position":[[2187,9]]},"1542":{"position":[[2532,9]]},"1544":{"position":[[2546,9]]},"1546":{"position":[[2661,9]]}}}],["portworx",{"_index":1926,"t":{"1328":{"position":[[208,8]]}}}],["possibl",{"_index":2003,"t":{"1368":{"position":[[1146,8]]},"1569":{"position":[[193,9]]},"1571":{"position":[[32,9]]},"1573":{"position":[[32,8]]},"1575":{"position":[[32,9]]},"1583":{"position":[[32,9]]},"1618":{"position":[[29,9]]}}}],["postgr",{"_index":14,"t":{"823":{"position":[[101,9]]},"981":{"position":[[3817,9]]},"1008":{"position":[[302,11],[337,8]]}}}],["postgres://username:password@hostname:port/databas",{"_index":893,"t":{"1008":{"position":[[148,51]]}}}],["postgresql",{"_index":881,"t":{"1004":{"position":[[150,10],[718,15]]},"1008":{"position":[[71,10],[108,10]]},"1014":{"position":[[127,10]]},"1176":{"position":[[79,10]]}}}],["postgresql、mysql",{"_index":892,"t":{"1006":{"position":[[17,16],[205,16]]}}}],["potenti",{"_index":1674,"t":{"1284":{"position":[[366,9]]},"1300":{"position":[[425,11]]},"1302":{"position":[[411,11]]},"1314":{"position":[[126,9]]}}}],["pprof",{"_index":796,"t":{"977":{"position":[[31,5],[56,5]]},"981":{"position":[[8441,5],[8469,5]]}}}],["prefer",{"_index":343,"t":{"863":{"position":[[149,6],[240,6]]},"914":{"position":[[63,6]]},"920":{"position":[[3224,6],[3258,6]]},"977":{"position":[[106,6]]},"981":{"position":[[8544,6],[8578,6]]},"1423":{"position":[[1832,9]]},"1425":{"position":[[1780,9]]},"1427":{"position":[[1649,9]]},"1429":{"position":[[1598,9]]},"1431":{"position":[[1611,9]]},"1433":{"position":[[1724,9]]},"1435":{"position":[[1685,9]]},"1439":{"position":[[1758,9]]},"1441":{"position":[[1739,9]]},"1443":{"position":[[1635,9]]},"1445":{"position":[[1751,9]]},"1447":{"position":[[1616,9]]},"1449":{"position":[[1531,9]]},"1459":{"position":[[1706,9]]},"1465":{"position":[[1748,9]]},"1467":{"position":[[1664,9]]},"1469":{"position":[[1670,9]]},"1542":{"position":[[2015,9]]},"1544":{"position":[[2029,9]]},"1546":{"position":[[2144,9]]}}}],["prefix",{"_index":846,"t":{"987":{"position":[[79,10]]}}}],["prefix=x",{"_index":1724,"t":{"1288":{"position":[[1420,8]]},"1423":{"position":[[2225,8]]},"1425":{"position":[[2173,8]]},"1427":{"position":[[2042,8]]},"1429":{"position":[[1991,8]]},"1431":{"position":[[2004,8]]},"1433":{"position":[[2117,8]]},"1435":{"position":[[2078,8]]},"1439":{"position":[[2151,8]]},"1441":{"position":[[2132,8]]},"1443":{"position":[[2028,8]]},"1445":{"position":[[2144,8]]},"1447":{"position":[[2009,8]]},"1449":{"position":[[1924,8]]},"1459":{"position":[[2099,8]]},"1465":{"position":[[2141,8]]},"1467":{"position":[[2057,8]]},"1469":{"position":[[2063,8]]},"1542":{"position":[[2408,8]]},"1544":{"position":[[2422,8]]},"1546":{"position":[[2537,8]]}}}],["prefix><clust",{"_index":844,"t":{"987":{"position":[[38,16]]}}}],["prepar",{"_index":712,"t":{"943":{"position":[[130,7],[633,7]]},"1352":{"position":[[735,8],[752,7],[1129,7]]}}}],["prescript",{"_index":1497,"t":{"1272":{"position":[[40,12]]},"1368":{"position":[[105,12]]}}}],["present",{"_index":1529,"t":{"1272":{"position":[[1014,9]]},"1282":{"position":[[1235,7]]},"1288":{"position":[[4433,9]]},"1306":{"position":[[280,7]]},"1402":{"position":[[353,7]]},"1408":{"position":[[270,7]]},"1417":{"position":[[378,7]]},"1419":{"position":[[312,7],[359,7]]},"1423":{"position":[[601,7],[639,7]]},"1425":{"position":[[587,7]]},"1435":{"position":[[492,7]]},"1437":{"position":[[372,7]]},"1441":{"position":[[498,7],[546,7]]},"1443":{"position":[[394,7],[442,7]]},"1447":{"position":[[423,7]]},"1459":{"position":[[472,7],[513,7]]},"1463":{"position":[[2241,7],[2273,7]]},"1465":{"position":[[515,7],[555,7]]},"1467":{"position":[[471,7]]},"1469":{"position":[[477,7]]},"1484":{"position":[[517,7]]},"1486":{"position":[[414,7]]},"1490":{"position":[[309,7],[344,7]]},"1495":{"position":[[397,7]]},"1498":{"position":[[2126,7],[2152,7]]},"1500":{"position":[[2024,7]]},"1502":{"position":[[2048,7],[2078,7]]},"1504":{"position":[[2192,7],[2218,7]]},"1506":{"position":[[2027,7]]},"1508":{"position":[[2060,7]]},"1510":{"position":[[2155,7]]},"1525":{"position":[[288,7],[356,7]]},"1527":{"position":[[377,7],[445,7]]},"1533":{"position":[[219,7],[239,7],[286,7],[306,7],[326,7],[346,7]]},"1546":{"position":[[880,7]]},"1548":{"position":[[628,7]]},"1560":{"position":[[779,7],[819,7]]},"1602":{"position":[[65,7]]}}}],["prevent",{"_index":2012,"t":{"1368":{"position":[[1627,7]]}}}],["previous",{"_index":2021,"t":{"1368":{"position":[[1943,11]]}}}],["primarili",{"_index":1535,"t":{"1272":{"position":[[1108,9]]}}}],["print",{"_index":861,"t":{"998":{"position":[[308,5]]}}}],["privat",{"_index":531,"t":{"908":{"position":[[211,7]]},"920":{"position":[[2410,7],[2449,7]]},"981":{"position":[[7343,7],[7382,7],[7512,7]]},"1288":{"position":[[1905,7],[2731,7],[4294,7]]},"1423":{"position":[[2762,7]]},"1425":{"position":[[2710,7]]},"1427":{"position":[[2579,7]]},"1429":{"position":[[2528,7]]},"1431":{"position":[[2541,7]]},"1433":{"position":[[2654,7]]},"1435":{"position":[[2615,7]]},"1439":{"position":[[2688,7]]},"1441":{"position":[[2669,7]]},"1443":{"position":[[2565,7]]},"1445":{"position":[[2681,7]]},"1447":{"position":[[2546,7]]},"1449":{"position":[[2461,7]]},"1459":{"position":[[2636,7]]},"1465":{"position":[[263,7],[345,7],[534,7],[2678,7]]},"1467":{"position":[[2594,7]]},"1469":{"position":[[2600,7]]},"1480":{"position":[[1877,7]]},"1482":{"position":[[1945,7]]},"1484":{"position":[[188,7],[222,7],[292,7],[442,7],[496,7],[2030,7]]},"1486":{"position":[[1927,7]]},"1542":{"position":[[2945,7]]},"1544":{"position":[[2959,7]]},"1546":{"position":[[3074,7]]},"1548":{"position":[[1810,7],[3033,7]]},"1560":{"position":[[223,7],[498,7],[798,7],[2001,7],[3224,7]]}}}],["privileg",{"_index":395,"t":{"871":{"position":[[257,10]]},"1210":{"position":[[1613,11],[1716,10],[1803,10],[2025,10],[2117,10]]},"1280":{"position":[[1449,11],[2230,11],[2636,11],[3440,11]]},"1569":{"position":[[175,11],[231,10]]},"1588":{"position":[[126,10]]}}}],["privileged=tru",{"_index":1693,"t":{"1288":{"position":[[217,15]]},"1423":{"position":[[853,15]]},"1425":{"position":[[801,15]]},"1427":{"position":[[670,15]]},"1429":{"position":[[619,15]]},"1431":{"position":[[632,15]]},"1433":{"position":[[745,15]]},"1435":{"position":[[706,15]]},"1439":{"position":[[779,15]]},"1441":{"position":[[760,15]]},"1443":{"position":[[656,15]]},"1445":{"position":[[772,15]]},"1447":{"position":[[637,15]]},"1449":{"position":[[552,15]]},"1459":{"position":[[727,15]]},"1465":{"position":[[769,15]]},"1467":{"position":[[685,15]]},"1469":{"position":[[691,15]]},"1542":{"position":[[1036,15]]},"1544":{"position":[[1050,15]]},"1546":{"position":[[1165,15]]}}}],["problemat",{"_index":1846,"t":{"1304":{"position":[[270,11]]}}}],["proc//environ",{"_index":2219,"t":{"1502":{"position":[[2300,15],[2540,15],[2780,15]]},"1508":{"position":[[2345,15]]}}}],["process",{"_index":608,"t":{"920":{"position":[[3099,7],[3175,7]]},"981":{"position":[[3416,7],[3474,7],[3570,7],[3648,7],[3756,7],[8161,7],[8237,7]]},"1138":{"position":[[289,7],[315,7]]},"1292":{"position":[[362,7]]},"1502":{"position":[[2109,7],[2349,7],[2589,7]]},"1508":{"position":[[2154,7]]}}}],["process/directori",{"_index":1544,"t":{"1274":{"position":[[75,17]]}}}],["product",{"_index":1500,"t":{"1272":{"position":[[78,10]]},"1368":{"position":[[143,10]]}}}],["profil",{"_index":2167,"t":{"1449":{"position":[[283,11],[315,10]]},"1480":{"position":[[309,11],[341,10]]},"1493":{"position":[[300,10]]},"1628":{"position":[[83,7]]}}}],["profiling=fals",{"_index":1717,"t":{"1288":{"position":[[1075,15],[2604,15],[2997,15]]},"1423":{"position":[[1889,15]]},"1425":{"position":[[1837,15]]},"1427":{"position":[[1706,15]]},"1429":{"position":[[1655,15]]},"1431":{"position":[[1668,15]]},"1433":{"position":[[1781,15]]},"1435":{"position":[[1742,15]]},"1439":{"position":[[1815,15]]},"1441":{"position":[[1796,15]]},"1443":{"position":[[1692,15]]},"1445":{"position":[[1808,15]]},"1447":{"position":[[1673,15]]},"1449":{"position":[[172,15],[1588,15]]},"1459":{"position":[[1763,15]]},"1465":{"position":[[1805,15],[3197,15]]},"1467":{"position":[[1721,15]]},"1469":{"position":[[1727,15]]},"1480":{"position":[[189,15],[1762,15]]},"1482":{"position":[[1830,15]]},"1484":{"position":[[1915,15]]},"1486":{"position":[[1812,15]]},"1493":{"position":[[176,15],[789,15]]},"1495":{"position":[[863,15]]},"1542":{"position":[[2072,15]]},"1544":{"position":[[2086,15]]},"1546":{"position":[[2201,15]]}}}],["project",{"_index":1589,"t":{"1280":{"position":[[1615,11],[2756,11]]}}}],["prometheu",{"_index":1463,"t":{"1250":{"position":[[30,10]]},"1252":{"position":[[0,10],[37,10]]}}}],["prone",{"_index":1853,"t":{"1304":{"position":[[518,5]]}}}],["properli",{"_index":1613,"t":{"1280":{"position":[[2323,9],[6614,9]]}}}],["prorit",{"_index":1147,"t":{"1123":{"position":[[219,9],[278,9]]}}}],["protect",{"_index":524,"t":{"906":{"position":[[165,7]]},"920":{"position":[[1868,7]]},"981":{"position":[[8247,7]]},"1210":{"position":[[322,7]]},"1276":{"position":[[178,7]]},"1286":{"position":[[181,7],[778,7]]},"1288":{"position":[[4035,7]]},"1552":{"position":[[325,7]]}}}],["protectkerneldefault",{"_index":2279,"t":{"1552":{"position":[[89,21]]}}}],["protocol",{"_index":1649,"t":{"1282":{"position":[[813,9],[838,9]]}}}],["proven",{"_index":2316,"t":{"1623":{"position":[[78,11]]}}}],["provid",{"_index":577,"t":{"920":{"position":[[1190,8],[1269,8],[1378,8],[1440,8]]},"981":{"position":[[6515,8],[6594,8],[6703,8],[6765,8]]},"1272":{"position":[[31,8]]},"1284":{"position":[[503,8]]},"1296":{"position":[[95,8],[323,8]]},"1308":{"position":[[29,8]]},"1310":{"position":[[23,9],[171,9]]},"1318":{"position":[[80,8],[443,7]]},"1322":{"position":[[108,8],[408,12]]},"1328":{"position":[[319,8]]},"1368":{"position":[[96,8],[1110,8]]},"1471":{"position":[[247,8],[325,8],[481,8]]},"1473":{"position":[[165,9]]},"1513":{"position":[[49,8]]},"1518":{"position":[[50,8]]},"1620":{"position":[[88,8]]}}}],["provider=extern",{"_index":1761,"t":{"1288":{"position":[[3266,17]]},"1548":{"position":[[968,17],[2191,17]]},"1560":{"position":[[1159,17],[2382,17]]}}}],["provisio",{"_index":159,"t":{"838":{"position":[[1793,10]]}}}],["provision",{"_index":35,"t":{"823":{"position":[[513,11]]},"838":{"position":[[517,11],[1879,11],[2570,11]]},"981":{"position":[[5671,11]]},"1144":{"position":[[492,11]]},"1330":{"position":[[28,69]]}}}],["provisioner_loc",{"_index":161,"t":{"838":{"position":[[1856,17]]}}}],["proxi",{"_index":500,"t":{"896":{"position":[[288,5]]},"912":{"position":[[50,5],[71,5]]},"920":{"position":[[3114,5],[3169,5]]},"925":{"position":[[321,6],[341,6]]},"973":{"position":[[155,5],[171,5]]},"975":{"position":[[333,5],[354,5]]},"981":{"position":[[6039,5],[6079,5],[8176,5],[8231,5]]},"1027":{"position":[[733,6]]},"1033":{"position":[[1702,6]]},"1078":{"position":[[280,5]]},"1107":{"position":[[47,5]]},"1121":{"position":[[426,8],[590,8]]},"1288":{"position":[[1102,5],[1181,5],[1299,5]]},"1423":{"position":[[1907,5],[1986,5],[2104,5]]},"1425":{"position":[[1855,5],[1934,5],[2052,5]]},"1427":{"position":[[1724,5],[1803,5],[1921,5]]},"1429":{"position":[[1673,5],[1752,5],[1870,5]]},"1431":{"position":[[1686,5],[1765,5],[1883,5]]},"1433":{"position":[[1799,5],[1878,5],[1996,5]]},"1435":{"position":[[1760,5],[1839,5],[1957,5]]},"1439":{"position":[[1833,5],[1912,5],[2030,5]]},"1441":{"position":[[1814,5],[1893,5],[2011,5]]},"1443":{"position":[[1710,5],[1789,5],[1907,5]]},"1445":{"position":[[1826,5],[1905,5],[2023,5]]},"1447":{"position":[[1691,5],[1770,5],[1888,5]]},"1449":{"position":[[1606,5],[1685,5],[1803,5]]},"1459":{"position":[[1781,5],[1860,5],[1978,5]]},"1465":{"position":[[1823,5],[1902,5],[2020,5]]},"1467":{"position":[[1739,5],[1818,5],[1936,5]]},"1469":{"position":[[1745,5],[1824,5],[1942,5]]},"1542":{"position":[[2090,5],[2169,5],[2287,5]]},"1544":{"position":[[2104,5],[2183,5],[2301,5]]},"1546":{"position":[[2219,5],[2298,5],[2416,5]]}}}],["proxy.crt",{"_index":1719,"t":{"1288":{"position":[[1169,9]]},"1423":{"position":[[1974,9]]},"1425":{"position":[[1922,9]]},"1427":{"position":[[1791,9]]},"1429":{"position":[[1740,9]]},"1431":{"position":[[1753,9]]},"1433":{"position":[[1866,9]]},"1435":{"position":[[1827,9]]},"1439":{"position":[[1900,9]]},"1441":{"position":[[1881,9]]},"1443":{"position":[[1777,9]]},"1445":{"position":[[1893,9]]},"1447":{"position":[[1758,9]]},"1449":{"position":[[1673,9]]},"1459":{"position":[[1848,9]]},"1465":{"position":[[1890,9]]},"1467":{"position":[[1806,9]]},"1469":{"position":[[1812,9]]},"1542":{"position":[[2157,9]]},"1544":{"position":[[2171,9]]},"1546":{"position":[[2286,9]]}}}],["proxy.example.com:8888",{"_index":65,"t":{"836":{"position":[[529,22],[576,22],[762,22],[820,22]]}}}],["proxy.key",{"_index":1720,"t":{"1288":{"position":[[1247,9]]},"1423":{"position":[[2052,9]]},"1425":{"position":[[2000,9]]},"1427":{"position":[[1869,9]]},"1429":{"position":[[1818,9]]},"1431":{"position":[[1831,9]]},"1433":{"position":[[1944,9]]},"1435":{"position":[[1905,9]]},"1439":{"position":[[1978,9]]},"1441":{"position":[[1959,9]]},"1443":{"position":[[1855,9]]},"1445":{"position":[[1971,9]]},"1447":{"position":[[1836,9]]},"1449":{"position":[[1751,9]]},"1459":{"position":[[1926,9]]},"1465":{"position":[[1968,9]]},"1467":{"position":[[1884,9]]},"1469":{"position":[[1890,9]]},"1542":{"position":[[2235,9]]},"1544":{"position":[[2249,9]]},"1546":{"position":[[2364,9]]}}}],["prune",{"_index":709,"t":{"937":{"position":[[2391,5],[2739,12],[2814,5],[2838,5]]}}}],["ps",{"_index":117,"t":{"838":{"position":[[875,2]]},"1392":{"position":[[131,3]]},"1394":{"position":[[141,3]]},"1502":{"position":[[2145,2],[2162,3],[2215,3],[2385,2],[2402,3],[2455,3],[2625,2],[2642,3],[2695,3]]},"1508":{"position":[[2190,2],[2207,3],[2260,3]]}}}],["ps(1",{"_index":2218,"t":{"1502":{"position":[[2288,6],[2528,6],[2768,6]]},"1508":{"position":[[2333,6]]}}}],["psa",{"_index":1559,"t":{"1278":{"position":[[103,5]]},"1280":{"position":[[84,6],[121,4],[407,4]]}}}],["psa.yaml",{"_index":1569,"t":{"1280":{"position":[[322,8]]}}}],["psp",{"_index":1350,"t":{"1210":{"position":[[2191,3],[2388,3],[2477,3],[2560,3],[2612,3],[2678,3],[2746,3],[2820,3],[2913,3],[2996,3]]},"1278":{"position":[[96,3]]},"1280":{"position":[[898,6],[935,4],[1199,4],[1356,4],[1439,3],[2034,3],[2626,3],[3196,3],[3634,3],[4093,3],[4200,3],[4307,3],[4410,3],[4516,3],[4605,3],[4727,3],[4815,3],[5017,3],[5126,3],[5317,3],[5449,3],[5627,3],[5745,3]]},"1604":{"position":[[211,3]]}}}],["psp:restrict",{"_index":1625,"t":{"1280":{"position":[[4078,14],[4800,14]]}}}],["psp:svclb",{"_index":1629,"t":{"1280":{"position":[[4506,9],[5735,9]]}}}],["psp:system",{"_index":1628,"t":{"1280":{"position":[[4283,10],[5102,10],[5425,10]]}}}],["pss",{"_index":1310,"t":{"1210":{"position":[[83,3]]}}}],["public",{"_index":1639,"t":{"1280":{"position":[[6297,6],[6388,6]]},"1318":{"position":[[735,7]]},"1461":{"position":[[207,6]]}}}],["pull",{"_index":429,"t":{"878":{"position":[[104,8],[193,20],[264,8],[417,7]]},"880":{"position":[[116,8],[256,8]]},"1160":{"position":[[98,4]]}}}],["pulls=fals",{"_index":1786,"t":{"1288":{"position":[[4204,11]]},"1548":{"position":[[1729,11],[2952,11]]},"1560":{"position":[[1920,11],[3143,11]]}}}],["purpos",{"_index":1646,"t":{"1282":{"position":[[568,9]]}}}],["push",{"_index":1244,"t":{"1160":{"position":[[270,4]]}}}],["pv",{"_index":1917,"t":{"1326":{"position":[[92,4],[143,2]]},"1334":{"position":[[378,2],[400,2]]},"1340":{"position":[[318,2],[340,2]]}}}],["pvc",{"_index":1918,"t":{"1326":{"position":[[126,5],[148,3]]},"1332":{"position":[[70,3]]},"1334":{"position":[[305,3],[383,4],[415,3]]},"1336":{"position":[[272,3]]},"1338":{"position":[[73,3]]},"1340":{"position":[[308,3],[323,4],[355,3]]}}}],["pvc.yaml",{"_index":1944,"t":{"1334":{"position":[[336,8]]},"1336":{"position":[[301,8]]}}}],["qf",{"_index":664,"t":{"935":{"position":[[414,2]]}}}],["question",{"_index":466,"t":{"884":{"position":[[106,8]]}}}],["quobyt",{"_index":1927,"t":{"1328":{"position":[[217,7]]}}}],["quorum",{"_index":922,"t":{"1033":{"position":[[111,10],[133,10],[179,6],[256,19]]}}}],["r",{"_index":2083,"t":{"1408":{"position":[[139,1]]},"1410":{"position":[[139,1]]},"1412":{"position":[[139,1]]}}}],["ra",{"_index":1154,"t":{"1125":{"position":[[37,24],[127,2]]}}}],["ram",{"_index":1259,"t":{"1170":{"position":[[50,3]]},"1178":{"position":[[49,3]]},"1184":{"position":[[104,3]]},"1246":{"position":[[66,3],[83,3]]},"1254":{"position":[[19,3]]},"1262":{"position":[[15,3]]}}}],["rancher",{"_index":77,"t":{"838":{"position":[[232,7]]},"873":{"position":[[124,7]]},"882":{"position":[[8,7],[29,7],[73,7],[188,7],[208,7],[300,7],[364,7]]},"1055":{"position":[[129,7]]},"1152":{"position":[[751,16]]},"1168":{"position":[[141,7],[173,7]]},"1210":{"position":[[1035,7]]},"1266":{"position":[[224,7]]},"1330":{"position":[[7,7]]},"1343":{"position":[[73,7]]},"1348":{"position":[[6,7],[417,7],[434,7],[466,7],[474,9],[547,7],[555,11],[615,7]]}}}],["rancher/coredn",{"_index":1242,"t":{"1160":{"position":[[176,15]]}}}],["rancher/k3",{"_index":394,"t":{"871":{"position":[[181,11]]},"1085":{"position":[[72,11],[452,11]]},"1352":{"position":[[445,11],[781,11],[852,11]]}}}],["rancher/k3s:v1.24.10",{"_index":399,"t":{"871":{"position":[[336,20]]}}}],["rancher/klipp",{"_index":139,"t":{"838":{"position":[[1103,15]]},"1059":{"position":[[1113,26]]}}}],["rancher/kubectl",{"_index":1036,"t":{"1085":{"position":[[508,15]]}}}],["rancher/kubectl:v0.17.0",{"_index":1034,"t":{"1085":{"position":[[423,23]]}}}],["rancher/librari",{"_index":142,"t":{"838":{"position":[[1266,15]]}}}],["rancher/mirror",{"_index":598,"t":{"920":{"position":[[2279,17]]},"981":{"position":[[7212,17]]}}}],["rancher/pause:3.1",{"_index":152,"t":{"838":{"position":[[1451,17],[1607,17],[2327,17],[2487,17],[2662,17]]}}}],["rancher/system",{"_index":1032,"t":{"1085":{"position":[[382,14]]}}}],["rang",{"_index":780,"t":{"969":{"position":[[159,5]]},"981":{"position":[[1487,5],[1517,5],[1698,5]]},"1280":{"position":[[1907,7],[1962,7],[2992,7],[3047,7]]},"1598":{"position":[[137,5]]}}}],["range=10.43.0.0/16",{"_index":1733,"t":{"1288":{"position":[[1772,18]]},"1423":{"position":[[2600,18]]},"1425":{"position":[[2548,18]]},"1427":{"position":[[2417,18]]},"1429":{"position":[[2366,18]]},"1431":{"position":[[2379,18]]},"1433":{"position":[[2492,18]]},"1435":{"position":[[2453,18]]},"1439":{"position":[[2526,18]]},"1441":{"position":[[2507,18]]},"1443":{"position":[[2403,18]]},"1445":{"position":[[2519,18]]},"1447":{"position":[[2384,18]]},"1449":{"position":[[2299,18]]},"1459":{"position":[[2474,18]]},"1465":{"position":[[2516,18]]},"1467":{"position":[[2432,18]]},"1469":{"position":[[2438,18]]},"1480":{"position":[[1959,18]]},"1482":{"position":[[2027,18]]},"1484":{"position":[[2112,18]]},"1486":{"position":[[2009,18]]},"1542":{"position":[[2783,18]]},"1544":{"position":[[2797,18]]},"1546":{"position":[[2912,18]]}}}],["range=30000",{"_index":2149,"t":{"1423":{"position":[[2639,11]]},"1425":{"position":[[2587,11]]},"1427":{"position":[[2456,11]]},"1429":{"position":[[2405,11]]},"1431":{"position":[[2418,11]]},"1433":{"position":[[2531,11]]},"1435":{"position":[[2492,11]]},"1439":{"position":[[2565,11]]},"1441":{"position":[[2546,11]]},"1443":{"position":[[2442,11]]},"1445":{"position":[[2558,11]]},"1447":{"position":[[2423,11]]},"1449":{"position":[[2338,11]]},"1459":{"position":[[2513,11]]},"1465":{"position":[[2555,11]]},"1467":{"position":[[2471,11]]},"1469":{"position":[[2477,11]]},"1542":{"position":[[2822,11]]},"1544":{"position":[[2836,11]]},"1546":{"position":[[2951,11]]}}}],["raspberri",{"_index":371,"t":{"869":{"position":[[0,9],[60,9],[401,9]]},"1033":{"position":[[39,9]]},"1115":{"position":[[667,9]]},"1168":{"position":[[99,9]]},"1170":{"position":[[213,9],[240,9]]},"1254":{"position":[[133,9],[152,9]]}}}],["rasperri",{"_index":1103,"t":{"1115":{"position":[[178,8]]}}}],["raspi",{"_index":392,"t":{"869":{"position":[[474,5]]}}}],["rational",{"_index":1799,"t":{"1292":{"position":[[68,9]]},"1294":{"position":[[67,9]]},"1296":{"position":[[50,9]]},"1298":{"position":[[76,9]]},"1300":{"position":[[79,9]]},"1302":{"position":[[78,9]]},"1304":{"position":[[66,9]]},"1306":{"position":[[66,9]]},"1308":{"position":[[77,9]]},"1310":{"position":[[63,9]]},"1312":{"position":[[78,9]]},"1314":{"position":[[47,9]]},"1316":{"position":[[69,9]]},"1318":{"position":[[59,9]]}}}],["rbac",{"_index":1351,"t":{"1210":{"position":[[2288,4]]},"1431":{"position":[[209,5],[419,6]]}}}],["rbac.authorization.k8s.io",{"_index":1092,"t":{"1103":{"position":[[313,25]]},"1280":{"position":[[4750,25],[4880,25],[5052,25],[5152,25],[5375,25],[5475,25],[5685,25]]}}}],["rbac.authorization.k8s.io/v1",{"_index":1088,"t":{"1103":{"position":[[213,28]]},"1280":{"position":[[4015,28],[4220,28],[4443,28],[4638,28],[4922,28],[5225,28],[5558,28]]}}}],["rbd",{"_index":1928,"t":{"1328":{"position":[[225,3]]}}}],["rc",{"_index":713,"t":{"943":{"position":[[229,2],[724,2]]},"945":{"position":[[209,2],[712,2]]}}}],["rc1",{"_index":1983,"t":{"1360":{"position":[[548,3]]}}}],["re",{"_index":448,"t":{"880":{"position":[[496,4]]}}}],["read",{"_index":1782,"t":{"1288":{"position":[[4074,4]]},"1548":{"position":[[303,4],[530,5],[567,4],[605,4],[1647,4],[2870,4]]},"1560":{"position":[[1838,4],[3061,4]]},"1618":{"position":[[67,4]]}}}],["readi",{"_index":89,"t":{"838":{"position":[[468,5]]},"1025":{"position":[[991,5]]},"1033":{"position":[[1179,5],[1230,5],[1281,5]]},"1144":{"position":[[443,5]]},"1190":{"position":[[372,5],[415,5]]}}}],["readonlyport",{"_index":2254,"t":{"1548":{"position":[[79,12]]}}}],["readonlyrootfilesystem",{"_index":1611,"t":{"1280":{"position":[[1990,23],[3075,23]]}}}],["readwriteonc",{"_index":1933,"t":{"1332":{"position":[[114,13]]},"1338":{"position":[[98,13]]}}}],["reason",{"_index":1642,"t":{"1282":{"position":[[68,10]]}}}],["reboot",{"_index":365,"t":{"865":{"position":[[469,6]]}}}],["reclaim=imagefs.available=10%,nodefs.available=10",{"_index":1772,"t":{"1288":{"position":[[3722,50]]},"1548":{"position":[[1239,50],[2462,50]]},"1560":{"position":[[1430,50],[2653,50]]}}}],["recommend",{"_index":1671,"t":{"1284":{"position":[[337,11]]},"1292":{"position":[[296,11]]},"1304":{"position":[[566,11]]},"1316":{"position":[[214,11]]},"1518":{"position":[[493,11]]}}}],["record",{"_index":1816,"t":{"1296":{"position":[[145,7]]}}}],["red",{"_index":1255,"t":{"1168":{"position":[[46,3]]}}}],["reencrypt",{"_index":714,"t":{"943":{"position":[[390,9],[928,9]]},"945":{"position":[[261,9],[394,9],[791,9],[950,9]]}}}],["refer",{"_index":1995,"t":{"1368":{"position":[[657,5]]},"1620":{"position":[[26,5]]},"1630":{"position":[[153,5]]}}}],["regex",{"_index":1199,"t":{"1138":{"position":[[655,5]]}}}],["region",{"_index":701,"t":{"937":{"position":[[1836,6]]},"954":{"position":[[1090,6]]},"981":{"position":[[5368,6],[5389,6]]}}}],["regist",{"_index":574,"t":{"920":{"position":[[1048,11],[1132,11]]},"981":{"position":[[6373,11],[6457,11]]}}}],["registr",{"_index":917,"t":{"1029":{"position":[[252,12]]}}}],["registri",{"_index":532,"t":{"908":{"position":[[219,8]]},"920":{"position":[[2418,8],[2457,8]]},"981":{"position":[[7351,8],[7390,8],[7481,8],[7520,8]]},"1156":{"position":[[199,8],[248,8],[318,8],[372,8],[424,8],[577,8],[631,8],[683,8]]},"1158":{"position":[[198,8],[247,8]]}}}],["registries.yaml",{"_index":1219,"t":{"1148":{"position":[[86,15],[268,15],[347,15]]}}}],["registry.example.com:5000/mirrorproject/ranch",{"_index":1227,"t":{"1152":{"position":[[550,47]]}}}],["registry.yaml",{"_index":1008,"t":{"1071":{"position":[[18,13]]}}}],["reinstal",{"_index":984,"t":{"1059":{"position":[[1211,9]]}}}],["relat",{"_index":1665,"t":{"1284":{"position":[[38,7]]}}}],["releas",{"_index":1009,"t":{"1075":{"position":[[2,8]]},"1078":{"position":[[51,8]]},"1083":{"position":[[22,8]]},"1091":{"position":[[49,8]]},"1290":{"position":[[231,7]]},"1358":{"position":[[186,7]]},"1362":{"position":[[14,8]]},"1368":{"position":[[465,7],[499,7]]}}}],["release/channel",{"_index":1436,"t":{"1244":{"position":[[1389,17]]}}}],["release/channels/st",{"_index":1976,"t":{"1352":{"position":[[1454,23]]}}}],["relev",{"_index":1814,"t":{"1296":{"position":[[115,8]]}}}],["reload",{"_index":294,"t":{"852":{"position":[[462,6]]},"865":{"position":[[300,6]]},"1129":{"position":[[692,6]]},"1284":{"position":[[1444,6]]},"1542":{"position":[[429,6]]},"1544":{"position":[[415,6]]},"1546":{"position":[[471,6]]},"1548":{"position":[[401,6]]},"1550":{"position":[[458,6]]},"1552":{"position":[[435,6]]},"1554":{"position":[[435,6]]},"1556":{"position":[[309,6]]},"1558":{"position":[[403,6]]},"1560":{"position":[[619,6]]},"1562":{"position":[[485,6]]},"1564":{"position":[[339,6]]},"1566":{"position":[[1044,6]]}}}],["remain",{"_index":1889,"t":{"1316":{"position":[[319,7]]}}}],["remedi",{"_index":1687,"t":{"1286":{"position":[[99,12]]},"1292":{"position":[[434,10]]},"1294":{"position":[[533,10]]},"1296":{"position":[[457,10]]},"1298":{"position":[[297,10]]},"1300":{"position":[[472,10]]},"1302":{"position":[[458,10]]},"1304":{"position":[[682,10]]},"1306":{"position":[[475,10]]},"1310":{"position":[[287,10]]},"1312":{"position":[[549,10]]},"1314":{"position":[[169,10]]},"1316":{"position":[[600,10]]},"1318":{"position":[[538,10]]},"1368":{"position":[[617,12],[1359,11]]},"1372":{"position":[[23,12]]},"1374":{"position":[[23,12]]},"1376":{"position":[[23,12]]},"1378":{"position":[[23,12]]},"1380":{"position":[[23,12]]},"1382":{"position":[[23,12]]},"1384":{"position":[[23,12]]},"1386":{"position":[[23,12]]},"1388":{"position":[[23,12]]},"1390":{"position":[[23,12]]},"1392":{"position":[[13,12]]},"1394":{"position":[[23,12]]},"1396":{"position":[[23,12]]},"1398":{"position":[[13,12]]},"1400":{"position":[[13,12]]},"1402":{"position":[[13,12]]},"1404":{"position":[[13,12]]},"1406":{"position":[[13,12]]},"1408":{"position":[[13,12]]},"1410":{"position":[[13,12]]},"1412":{"position":[[13,12]]},"1415":{"position":[[13,12]]},"1417":{"position":[[13,12]]},"1419":{"position":[[13,12]]},"1421":{"position":[[23,12]]},"1423":{"position":[[13,12]]},"1425":{"position":[[13,12]]},"1427":{"position":[[13,12]]},"1429":{"position":[[13,12]]},"1431":{"position":[[13,12]]},"1433":{"position":[[13,12]]},"1435":{"position":[[13,12]]},"1437":{"position":[[13,12]]},"1439":{"position":[[13,12]]},"1441":{"position":[[13,12]]},"1443":{"position":[[13,12]]},"1445":{"position":[[13,12]]},"1447":{"position":[[13,12]]},"1449":{"position":[[13,12]]},"1451":{"position":[[23,12]]},"1453":{"position":[[23,12]]},"1455":{"position":[[23,12]]},"1457":{"position":[[23,12]]},"1459":{"position":[[13,12]]},"1461":{"position":[[23,12]]},"1463":{"position":[[13,12]]},"1465":{"position":[[13,12]]},"1467":{"position":[[13,12]]},"1469":{"position":[[13,12]]},"1471":{"position":[[13,12]]},"1473":{"position":[[13,12]]},"1475":{"position":[[13,12]]},"1478":{"position":[[13,12]]},"1480":{"position":[[13,12]]},"1482":{"position":[[13,12]]},"1484":{"position":[[13,12]]},"1486":{"position":[[13,12]]},"1488":{"position":[[23,12]]},"1490":{"position":[[13,12]]},"1493":{"position":[[13,12]]},"1495":{"position":[[13,12]]},"1498":{"position":[[13,12]]},"1500":{"position":[[13,12]]},"1502":{"position":[[13,12]]},"1504":{"position":[[13,12]]},"1506":{"position":[[13,12]]},"1508":{"position":[[13,12]]},"1510":{"position":[[13,12]]},"1513":{"position":[[13,12]]},"1516":{"position":[[13,12]]},"1518":{"position":[[13,12]]},"1521":{"position":[[23,12]]},"1523":{"position":[[23,12]]},"1525":{"position":[[13,12]]},"1527":{"position":[[13,12]]},"1529":{"position":[[13,12]]},"1531":{"position":[[13,12]]},"1533":{"position":[[13,12]]},"1535":{"position":[[13,12]]},"1537":{"position":[[23,12]]},"1539":{"position":[[23,12]]},"1542":{"position":[[13,12]]},"1544":{"position":[[13,12]]},"1546":{"position":[[13,12]]},"1548":{"position":[[13,12]]},"1550":{"position":[[13,12]]},"1552":{"position":[[23,12]]},"1554":{"position":[[23,12]]},"1556":{"position":[[23,12]]},"1558":{"position":[[13,12]]},"1560":{"position":[[13,12]]},"1562":{"position":[[23,12]]},"1564":{"position":[[23,12]]},"1566":{"position":[[13,12]]},"1569":{"position":[[13,12]]},"1571":{"position":[[13,12]]},"1573":{"position":[[13,12]]},"1575":{"position":[[13,12]]},"1577":{"position":[[13,12]]},"1579":{"position":[[13,12]]},"1581":{"position":[[13,12]]},"1583":{"position":[[13,12]]},"1586":{"position":[[13,12]]},"1588":{"position":[[13,12]]},"1590":{"position":[[13,12]]},"1592":{"position":[[13,12]]},"1594":{"position":[[13,12]]},"1596":{"position":[[13,12]]},"1598":{"position":[[13,12]]},"1600":{"position":[[13,12]]},"1602":{"position":[[13,12]]},"1604":{"position":[[13,12]]},"1606":{"position":[[13,12]]},"1608":{"position":[[13,12]]},"1610":{"position":[[13,12]]},"1613":{"position":[[13,12]]},"1615":{"position":[[13,12]]},"1618":{"position":[[13,12]]},"1620":{"position":[[13,12]]},"1623":{"position":[[13,12]]},"1626":{"position":[[13,12]]},"1628":{"position":[[13,12]]},"1630":{"position":[[13,12]]},"1632":{"position":[[13,12]]}}}],["remot",{"_index":1725,"t":{"1288":{"position":[[1429,6],[1475,6],[1523,6]]},"1423":{"position":[[2234,6],[2280,6],[2328,6]]},"1425":{"position":[[2182,6],[2228,6],[2276,6]]},"1427":{"position":[[2051,6],[2097,6],[2145,6]]},"1429":{"position":[[2000,6],[2046,6],[2094,6]]},"1431":{"position":[[2013,6],[2059,6],[2107,6]]},"1433":{"position":[[2126,6],[2172,6],[2220,6]]},"1435":{"position":[[2087,6],[2133,6],[2181,6]]},"1439":{"position":[[2160,6],[2206,6],[2254,6]]},"1441":{"position":[[2141,6],[2187,6],[2235,6]]},"1443":{"position":[[2037,6],[2083,6],[2131,6]]},"1445":{"position":[[2153,6],[2199,6],[2247,6]]},"1447":{"position":[[2018,6],[2064,6],[2112,6]]},"1449":{"position":[[1933,6],[1979,6],[2027,6]]},"1459":{"position":[[2108,6],[2154,6],[2202,6]]},"1465":{"position":[[2150,6],[2196,6],[2244,6]]},"1467":{"position":[[2066,6],[2112,6],[2160,6]]},"1469":{"position":[[2072,6],[2118,6],[2166,6]]},"1542":{"position":[[2417,6],[2463,6],[2511,6]]},"1544":{"position":[[2431,6],[2477,6],[2525,6]]},"1546":{"position":[[2546,6],[2592,6],[2640,6]]}}}],["remov",{"_index":2093,"t":{"1417":{"position":[[231,6]]},"1419":{"position":[[145,6]]},"1421":{"position":[[155,6]]},"1435":{"position":[[152,6]]},"1447":{"position":[[152,6]]},"1502":{"position":[[129,6]]},"1508":{"position":[[129,6]]},"1554":{"position":[[262,6]]},"1556":{"position":[[144,6]]},"1562":{"position":[[128,6],[316,6]]},"1569":{"position":[[256,6]]},"1571":{"position":[[42,6]]},"1575":{"position":[[42,6]]},"1581":{"position":[[26,6]]},"1583":{"position":[[42,6]]}}}],["replac",{"_index":2294,"t":{"1573":{"position":[[41,7]]}}}],["repo",{"_index":455,"t":{"882":{"position":[[64,4],[119,4]]},"1059":{"position":[[369,5],[840,4]]}}}],["request",{"_index":631,"t":{"929":{"position":[[363,7],[385,7]]},"1210":{"position":[[670,8]]},"1284":{"position":[[483,7]]},"1286":{"position":[[529,8],[1152,8]]},"1304":{"position":[[18,7],[91,7],[139,7],[367,8]]},"1306":{"position":[[260,7]]},"1332":{"position":[[168,9]]},"1338":{"position":[[150,9]]},"1518":{"position":[[219,8],[440,9]]}}}],["requesthead",{"_index":1721,"t":{"1288":{"position":[[1259,13],[1307,13],[1392,13],[1445,13],[1490,13]]},"1423":{"position":[[2064,13],[2112,13],[2197,13],[2250,13],[2295,13]]},"1425":{"position":[[2012,13],[2060,13],[2145,13],[2198,13],[2243,13]]},"1427":{"position":[[1881,13],[1929,13],[2014,13],[2067,13],[2112,13]]},"1429":{"position":[[1830,13],[1878,13],[1963,13],[2016,13],[2061,13]]},"1431":{"position":[[1843,13],[1891,13],[1976,13],[2029,13],[2074,13]]},"1433":{"position":[[1956,13],[2004,13],[2089,13],[2142,13],[2187,13]]},"1435":{"position":[[1917,13],[1965,13],[2050,13],[2103,13],[2148,13]]},"1439":{"position":[[1990,13],[2038,13],[2123,13],[2176,13],[2221,13]]},"1441":{"position":[[1971,13],[2019,13],[2104,13],[2157,13],[2202,13]]},"1443":{"position":[[1867,13],[1915,13],[2000,13],[2053,13],[2098,13]]},"1445":{"position":[[1983,13],[2031,13],[2116,13],[2169,13],[2214,13]]},"1447":{"position":[[1848,13],[1896,13],[1981,13],[2034,13],[2079,13]]},"1449":{"position":[[1763,13],[1811,13],[1896,13],[1949,13],[1994,13]]},"1459":{"position":[[1938,13],[1986,13],[2071,13],[2124,13],[2169,13]]},"1465":{"position":[[1980,13],[2028,13],[2113,13],[2166,13],[2211,13]]},"1467":{"position":[[1896,13],[1944,13],[2029,13],[2082,13],[2127,13]]},"1469":{"position":[[1902,13],[1950,13],[2035,13],[2088,13],[2133,13]]},"1542":{"position":[[2247,13],[2295,13],[2380,13],[2433,13],[2478,13]]},"1544":{"position":[[2261,13],[2309,13],[2394,13],[2447,13],[2492,13]]},"1546":{"position":[[2376,13],[2424,13],[2509,13],[2562,13],[2607,13]]}}}],["requir",{"_index":1502,"t":{"1272":{"position":[[154,8],[446,7]]},"1274":{"position":[[34,13]]},"1276":{"position":[[66,8]]},"1278":{"position":[[12,12]]},"1280":{"position":[[2211,7]]},"1282":{"position":[[4,8]]},"1284":{"position":[[4,12],[170,12]]},"1288":{"position":[[4400,12]]},"1298":{"position":[[271,13]]},"1316":{"position":[[117,8]]},"1318":{"position":[[259,9]]},"1368":{"position":[[1851,7]]},"1392":{"position":[[436,11],[1641,8]]},"1463":{"position":[[566,11],[1771,8]]},"1498":{"position":[[460,11],[1665,8]]},"1500":{"position":[[349,11],[1554,8]]},"1502":{"position":[[374,11],[1579,8]]},"1504":{"position":[[526,11],[1731,8]]},"1506":{"position":[[352,11],[1557,8]]},"1508":{"position":[[384,11],[1589,8]]},"1510":{"position":[[483,11],[1688,8]]},"1577":{"position":[[90,8]]},"1604":{"position":[[151,7]]}}}],["require('http",{"_index":446,"t":{"880":{"position":[[447,16]]}}}],["requireddropcap",{"_index":1584,"t":{"1280":{"position":[[1527,25],[2686,25]]}}}],["res.end('hello",{"_index":450,"t":{"880":{"position":[[523,14]]}}}],["res.writehead(200",{"_index":449,"t":{"880":{"position":[[503,19]]}}}],["reserv",{"_index":802,"t":{"981":{"position":[[1526,7]]}}}],["reset",{"_index":679,"t":{"937":{"position":[[405,5],[435,5],[478,5],[496,5],[663,5],[693,5],[736,5],[754,5],[1334,5],[1406,5],[2132,5],[2162,5]]},"956":{"position":[[373,5]]},"981":{"position":[[3175,5],[3279,5]]}}}],["resolv",{"_index":535,"t":{"910":{"position":[[94,6]]},"920":{"position":[[2718,6]]},"981":{"position":[[7780,6]]},"1080":{"position":[[839,6]]},"1288":{"position":[[4101,6]]},"1548":{"position":[[1666,6],[2889,6]]},"1560":{"position":[[1857,6],[3080,6]]}}}],["resolv.conf",{"_index":537,"t":{"910":{"position":[[136,11]]},"920":{"position":[[2763,11]]},"981":{"position":[[7825,11]]}}}],["resourc",{"_index":255,"t":{"844":{"position":[[880,10]]},"1059":{"position":[[17,8]]},"1280":{"position":[[4126,10],[4340,10],[4549,10]]},"1294":{"position":[[118,8]]},"1304":{"position":[[319,9],[498,9]]},"1312":{"position":[[141,8],[446,9]]},"1322":{"position":[[363,12],[380,12]]},"1332":{"position":[[157,10]]},"1338":{"position":[[139,10]]},"1632":{"position":[[112,9],[139,9]]}}}],["resourcenam",{"_index":1627,"t":{"1280":{"position":[[4172,14],[4373,14],[4582,14]]}}}],["rest",{"_index":842,"t":{"981":{"position":[[8427,4]]},"1308":{"position":[[200,4],[283,4]]}}}],["restart",{"_index":91,"t":{"838":{"position":[[481,8]]},"943":{"position":[[203,7],[244,7],[698,7],[739,7]]},"945":{"position":[[183,7],[224,7],[686,7],[727,7]]},"1129":{"position":[[709,7]]},"1144":{"position":[[456,8]]},"1284":{"position":[[1381,9],[1466,7]]},"1364":{"position":[[68,7],[107,7],[162,7],[205,7]]},"1542":{"position":[[370,7],[446,7]]},"1544":{"position":[[356,7],[432,7]]},"1546":{"position":[[412,7],[488,7]]},"1548":{"position":[[342,7],[418,7]]},"1550":{"position":[[399,7],[475,7]]},"1552":{"position":[[376,7],[452,7]]},"1554":{"position":[[376,7],[452,7]]},"1556":{"position":[[250,7],[326,7]]},"1558":{"position":[[344,7],[420,7]]},"1560":{"position":[[560,7],[636,7]]},"1562":{"position":[[426,7],[502,7]]},"1564":{"position":[[280,7],[356,7]]},"1566":{"position":[[985,7],[1061,7]]}}}],["restartpolici",{"_index":250,"t":{"844":{"position":[[713,14]]}}}],["restor",{"_index":680,"t":{"937":{"position":[[441,7],[502,7],[699,7],[760,7],[1412,7],[2168,7]]},"981":{"position":[[3285,7],[3337,8]]},"1119":{"position":[[868,7],[921,7]]},"1218":{"position":[[271,29],[348,7],[405,7]]}}}],["restrict",{"_index":1341,"t":{"1210":{"position":[[1305,12],[1351,12],[1394,12]]},"1272":{"position":[[740,8]]},"1280":{"position":[[631,12],[677,12],[720,12],[1428,10],[2615,10],[4189,10],[6569,11]]},"1282":{"position":[[527,13]]},"1284":{"position":[[304,11]]},"1316":{"position":[[563,11]]},"1400":{"position":[[395,11]]},"1404":{"position":[[405,11]]},"1588":{"position":[[100,8]]},"1590":{"position":[[100,8]]},"1592":{"position":[[100,8]]},"1594":{"position":[[100,8]]},"1596":{"position":[[100,8]]},"1600":{"position":[[100,8]]},"1606":{"position":[[100,8]]},"1608":{"position":[[100,8]]},"1610":{"position":[[100,8]]},"1613":{"position":[[191,11]]}}}],["result",{"_index":2004,"t":{"1368":{"position":[[1155,7]]},"1372":{"position":[[0,7]]},"1374":{"position":[[0,7]]},"1376":{"position":[[0,7]]},"1378":{"position":[[0,7]]},"1380":{"position":[[0,7]]},"1382":{"position":[[0,7]]},"1384":{"position":[[0,7]]},"1386":{"position":[[0,7]]},"1388":{"position":[[0,7]]},"1390":{"position":[[0,7]]},"1392":{"position":[[0,7],[2082,7]]},"1394":{"position":[[0,7]]},"1396":{"position":[[0,7]]},"1398":{"position":[[0,7],[339,7]]},"1400":{"position":[[0,7],[333,7]]},"1402":{"position":[[0,7],[330,7]]},"1404":{"position":[[0,7],[343,7]]},"1406":{"position":[[0,7],[228,7]]},"1408":{"position":[[0,7],[247,7]]},"1410":{"position":[[0,7]]},"1412":{"position":[[0,7]]},"1415":{"position":[[0,7]]},"1417":{"position":[[0,7],[343,7]]},"1419":{"position":[[0,7],[272,7]]},"1421":{"position":[[0,7]]},"1423":{"position":[[0,7],[559,7]]},"1425":{"position":[[0,7],[542,7]]},"1427":{"position":[[0,7],[405,7]]},"1429":{"position":[[0,7],[371,7]]},"1431":{"position":[[0,7],[384,7]]},"1433":{"position":[[0,7],[481,7]]},"1435":{"position":[[0,7],[388,7]]},"1437":{"position":[[0,7],[332,7]]},"1439":{"position":[[0,7],[454,7]]},"1441":{"position":[[0,7],[457,7]]},"1443":{"position":[[0,7],[353,7]]},"1445":{"position":[[0,7],[507,7]]},"1447":{"position":[[0,7],[355,7]]},"1449":{"position":[[0,7],[304,7]]},"1451":{"position":[[0,7]]},"1453":{"position":[[0,7]]},"1455":{"position":[[0,7]]},"1457":{"position":[[0,7]]},"1459":{"position":[[0,7],[430,7]]},"1461":{"position":[[0,7]]},"1463":{"position":[[0,7],[2212,7]]},"1465":{"position":[[0,7],[486,7]]},"1467":{"position":[[0,7],[441,7]]},"1469":{"position":[[0,7],[450,7]]},"1471":{"position":[[0,7]]},"1473":{"position":[[0,7]]},"1475":{"position":[[0,7]]},"1478":{"position":[[0,7]]},"1480":{"position":[[0,7],[330,7]]},"1482":{"position":[[0,7],[372,7]]},"1484":{"position":[[0,7],[469,7]]},"1486":{"position":[[0,7],[386,7]]},"1488":{"position":[[0,7]]},"1490":{"position":[[0,7],[281,7]]},"1493":{"position":[[0,7],[289,7]]},"1495":{"position":[[0,7],[321,7]]},"1498":{"position":[[0,7],[2103,7]]},"1500":{"position":[[0,7],[1992,7]]},"1502":{"position":[[0,7],[2017,7]]},"1504":{"position":[[0,7],[2169,7]]},"1506":{"position":[[0,7],[1995,7]]},"1508":{"position":[[0,7],[2027,7]]},"1510":{"position":[[0,7],[2126,7]]},"1513":{"position":[[0,7]]},"1516":{"position":[[0,7]]},"1518":{"position":[[0,7]]},"1521":{"position":[[0,7]]},"1523":{"position":[[0,7]]},"1525":{"position":[[0,7],[263,7]]},"1527":{"position":[[0,7],[354,7]]},"1529":{"position":[[0,7],[263,7]]},"1531":{"position":[[0,7],[272,7]]},"1533":{"position":[[0,7],[202,7]]},"1535":{"position":[[0,7],[205,7]]},"1537":{"position":[[0,7]]},"1539":{"position":[[0,7]]},"1542":{"position":[[0,7],[760,7]]},"1544":{"position":[[0,7],[756,7]]},"1546":{"position":[[0,7],[850,7]]},"1548":{"position":[[0,7],[556,7]]},"1550":{"position":[[0,7]]},"1552":{"position":[[0,7]]},"1554":{"position":[[0,7]]},"1556":{"position":[[0,7]]},"1558":{"position":[[0,7]]},"1560":{"position":[[0,7],[750,7]]},"1562":{"position":[[0,7]]},"1564":{"position":[[0,7]]},"1566":{"position":[[0,7]]},"1569":{"position":[[0,7]]},"1571":{"position":[[0,7]]},"1573":{"position":[[0,7]]},"1575":{"position":[[0,7]]},"1577":{"position":[[0,7]]},"1579":{"position":[[0,7]]},"1581":{"position":[[0,7]]},"1583":{"position":[[0,7]]},"1586":{"position":[[0,7]]},"1588":{"position":[[0,7]]},"1590":{"position":[[0,7]]},"1592":{"position":[[0,7]]},"1594":{"position":[[0,7]]},"1596":{"position":[[0,7]]},"1598":{"position":[[0,7]]},"1600":{"position":[[0,7]]},"1602":{"position":[[0,7]]},"1604":{"position":[[0,7]]},"1606":{"position":[[0,7]]},"1608":{"position":[[0,7]]},"1610":{"position":[[0,7]]},"1613":{"position":[[0,7]]},"1615":{"position":[[0,7]]},"1618":{"position":[[0,7]]},"1620":{"position":[[0,7]]},"1623":{"position":[[0,7]]},"1626":{"position":[[0,7]]},"1628":{"position":[[0,7]]},"1630":{"position":[[0,7]]},"1632":{"position":[[0,7]]}}}],["retain",{"_index":832,"t":{"981":{"position":[[4747,6]]},"1298":{"position":[[86,9]]},"1300":{"position":[[137,9]]},"1302":{"position":[[136,9]]}}}],["retent",{"_index":692,"t":{"937":{"position":[[1223,9],[2774,21],[2855,9]]},"954":{"position":[[627,9]]},"981":{"position":[[4703,9]]},"1298":{"position":[[219,9]]}}}],["return",{"_index":2065,"t":{"1392":{"position":[[1622,6],[2114,8]]},"1398":{"position":[[383,8]]},"1400":{"position":[[407,8]]},"1402":{"position":[[361,8]]},"1404":{"position":[[417,8]]},"1406":{"position":[[272,8]]},"1408":{"position":[[278,8]]},"1417":{"position":[[386,8]]},"1419":{"position":[[367,8]]},"1423":{"position":[[647,8]]},"1425":{"position":[[595,8]]},"1427":{"position":[[464,8]]},"1429":{"position":[[413,8]]},"1431":{"position":[[426,8]]},"1433":{"position":[[539,8]]},"1435":{"position":[[500,8]]},"1437":{"position":[[380,8]]},"1439":{"position":[[573,8]]},"1441":{"position":[[554,8]]},"1443":{"position":[[450,8]]},"1445":{"position":[[566,8]]},"1447":{"position":[[431,8]]},"1449":{"position":[[346,8]]},"1459":{"position":[[521,8]]},"1463":{"position":[[1752,6],[2281,8]]},"1465":{"position":[[563,8]]},"1467":{"position":[[479,8]]},"1469":{"position":[[485,8]]},"1480":{"position":[[372,8]]},"1482":{"position":[[440,8]]},"1484":{"position":[[525,8]]},"1486":{"position":[[422,8]]},"1490":{"position":[[352,8]]},"1493":{"position":[[331,8]]},"1495":{"position":[[405,8]]},"1498":{"position":[[1646,6],[2160,8]]},"1500":{"position":[[1535,6],[2073,8]]},"1502":{"position":[[1560,6],[2086,8]]},"1504":{"position":[[1712,6],[2226,8]]},"1506":{"position":[[1538,6],[2076,8]]},"1508":{"position":[[1570,6],[2109,8]]},"1510":{"position":[[1669,6],[2163,8]]},"1525":{"position":[[364,8]]},"1527":{"position":[[453,8]]},"1529":{"position":[[295,8]]},"1531":{"position":[[316,8]]},"1533":{"position":[[354,8]]},"1535":{"position":[[249,8]]},"1542":{"position":[[807,8]]},"1544":{"position":[[815,8]]},"1546":{"position":[[888,8]]},"1548":{"position":[[636,8]]},"1560":{"position":[[827,8]]}}}],["review",{"_index":1906,"t":{"1320":{"position":[[122,6]]},"1518":{"position":[[26,6]]},"1604":{"position":[[26,6]]}}}],["rewrit",{"_index":1225,"t":{"1152":{"position":[[440,9],[742,8]]},"1618":{"position":[[39,7]]}}}],["rewrites。rewrit",{"_index":1226,"t":{"1152":{"position":[[467,17]]}}}],["rf",{"_index":688,"t":{"937":{"position":[[911,2]]}}}],["rfc",{"_index":1188,"t":{"1138":{"position":[[497,3]]}}}],["rhel9、ubuntu、raspberri",{"_index":1253,"t":{"1166":{"position":[[160,27]]}}}],["right",{"_index":1690,"t":{"1288":{"position":[[124,5]]},"1318":{"position":[[332,6],[506,6]]},"1583":{"position":[[84,6]]}}}],["risk",{"_index":2227,"t":{"1518":{"position":[[288,4]]}}}],["rm",{"_index":687,"t":{"937":{"position":[[907,2]]}}}],["rogu",{"_index":1276,"t":{"1172":{"position":[[525,5]]}}}],["role",{"_index":926,"t":{"1033":{"position":[[1153,5]]},"1190":{"position":[[341,5]]},"1569":{"position":[[80,5],[131,4],[159,4],[242,4],[307,4]]},"1573":{"position":[[90,5]]}}}],["role.kubernetes.io/control",{"_index":1973,"t":{"1352":{"position":[[331,26],[679,26],[1009,26]]}}}],["role.yml",{"_index":1087,"t":{"1103":{"position":[[192,8],[553,8]]},"1109":{"position":[[413,8]]}}}],["rolebind",{"_index":1359,"t":{"1210":{"position":[[2824,11],[2917,11],[3000,11]]},"1280":{"position":[[5021,11],[5260,11],[5321,11],[5593,11],[5631,11]]}}}],["rolebinding.rbac.authorization.k8s.io/svclb",{"_index":1360,"t":{"1210":{"position":[[2869,43]]}}}],["rolebinding.rbac.authorization.k8s.io/system",{"_index":1361,"t":{"1210":{"position":[[2929,44]]}}}],["rolebindings.yaml",{"_index":1207,"t":{"1144":{"position":[[344,17]]}}}],["roleref",{"_index":1090,"t":{"1103":{"position":[[294,8]]},"1280":{"position":[[4731,8],[5033,8],[5356,8],[5666,8]]}}}],["roles,clusterroles,rolebindings,clusterrolebind",{"_index":1352,"t":{"1210":{"position":[[2412,51]]}}}],["rooless",{"_index":301,"t":{"852":{"position":[[714,7]]}}}],["root",{"_index":271,"t":{"848":{"position":[[58,4]]},"929":{"position":[[732,4],[744,4],[788,4]]},"958":{"position":[[182,4]]},"965":{"position":[[62,7]]},"981":{"position":[[1255,5]]},"998":{"position":[[665,9],[1131,9],[1416,9],[1623,9]]},"1008":{"position":[[736,4]]},"1148":{"position":[[166,4]]},"1288":{"position":[[2630,4]]},"1417":{"position":[[402,4],[573,4],[616,4],[898,4],[1180,4],[1462,4],[1744,4],[2026,4],[2308,4]]},"1419":{"position":[[383,4],[554,4],[597,4],[879,4],[1161,4],[1443,4],[1725,4],[2007,4],[2289,4]]},"1437":{"position":[[396,4],[567,4],[610,4],[892,4],[1174,4],[1456,4],[1738,4],[2020,4],[2302,4]]},"1480":{"position":[[1780,4]]},"1482":{"position":[[1848,4]]},"1484":{"position":[[1933,4]]},"1486":{"position":[[172,4],[230,4],[362,5],[397,4],[1830,4]]},"1490":{"position":[[368,4],[539,4],[582,4],[864,4],[1146,4],[1428,4],[1710,4],[1992,4],[2274,4]]}}}],["root:root",{"_index":2027,"t":{"1374":{"position":[[148,9]]},"1378":{"position":[[148,9]]},"1382":{"position":[[148,9]]},"1386":{"position":[[148,9]]},"1390":{"position":[[148,9]]},"1398":{"position":[[138,9],[347,11],[371,11],[399,9]]},"1402":{"position":[[138,9],[338,11],[377,9]]},"1406":{"position":[[138,9],[236,11],[260,11],[288,9]]},"1408":{"position":[[141,9],[255,11],[294,9],[304,9],[314,9],[324,9],[334,9],[344,9],[354,9],[364,9],[374,9],[384,9],[394,9],[404,9],[414,9],[424,9],[434,9],[444,9],[454,9],[464,9],[474,9],[484,9],[494,9],[504,9],[514,9],[524,9],[534,9],[544,9],[554,9],[564,9],[574,9],[584,9],[594,9],[604,9],[614,9],[624,9],[634,9],[644,9],[654,9],[664,9],[674,9],[684,9],[694,9],[704,9],[714,9],[724,9],[734,9],[744,9],[754,9],[764,9],[774,9],[784,9],[794,9],[804,9],[814,9]]},"1523":{"position":[[146,9]]},"1527":{"position":[[136,9],[362,11],[469,9],[479,9]]},"1531":{"position":[[136,9],[280,11],[304,11],[332,9],[342,9]]},"1535":{"position":[[107,9],[213,11],[237,11],[265,9],[275,9]]},"1539":{"position":[[130,9]]}}}],["root=partuuid=58b06195",{"_index":381,"t":{"869":{"position":[[259,22]]}}}],["rootfstype=ext4",{"_index":383,"t":{"869":{"position":[[285,15]]}}}],["rootless",{"_index":270,"t":{"848":{"position":[[13,8],[77,8]]},"850":{"position":[[7,8],[115,8],[342,8]]},"852":{"position":[[105,11],[506,8],[632,9]]},"854":{"position":[[0,8],[127,8]]},"856":{"position":[[31,8],[85,8]]},"914":{"position":[[8,8]]},"920":{"position":[[3185,8],[3213,8]]},"977":{"position":[[8,8]]},"981":{"position":[[8505,8],[8533,8]]},"1208":{"position":[[3,8]]}}}],["rootless.servic",{"_index":287,"t":{"852":{"position":[[183,16],[207,17],[240,16],[270,16],[318,17]]}}}],["rootlesskit",{"_index":302,"t":{"854":{"position":[[16,11],[62,11]]}}}],["rootwait",{"_index":386,"t":{"869":{"position":[[335,8]]}}}],["rotat",{"_index":44,"t":{"830":{"position":[[109,6]]},"832":{"position":[[101,6]]},"925":{"position":[[35,6],[98,6],[173,6]]},"927":{"position":[[385,6],[616,6]]},"931":{"position":[[33,6],[269,6],[1062,6],[1098,6]]},"933":{"position":[[41,6],[786,6],[844,6]]},"935":{"position":[[162,6],[698,6],[749,6]]},"943":{"position":[[275,6],[794,6]]},"947":{"position":[[144,8],[374,8],[390,6],[630,8]]},"1300":{"position":[[114,7]]},"1302":{"position":[[113,7]]},"1562":{"position":[[325,6]]}}}],["rotatecertif",{"_index":2285,"t":{"1562":{"position":[[98,18]]}}}],["rotatekubeletservercertificate=tru",{"_index":2201,"t":{"1488":{"position":[[217,36]]}}}],["rout",{"_index":1019,"t":{"1078":{"position":[[417,5]]},"1131":{"position":[[284,9]]},"1480":{"position":[[1617,6]]},"1482":{"position":[[1685,6]]},"1484":{"position":[[1770,6]]},"1486":{"position":[[1667,6]]}}}],["router",{"_index":499,"t":{"896":{"position":[[246,6]]},"1218":{"position":[[30,6],[61,6],[206,6],[330,6],[386,6]]}}}],["router.io/netpol",{"_index":468,"t":{"884":{"position":[[171,16],[219,16]]}}}],["routes=fals",{"_index":2196,"t":{"1480":{"position":[[1578,12]]},"1482":{"position":[[1646,12]]},"1484":{"position":[[1731,12]]},"1486":{"position":[[1628,12]]}}}],["routing=tru",{"_index":2145,"t":{"1423":{"position":[[1288,12]]},"1425":{"position":[[1236,12]]},"1427":{"position":[[1105,12]]},"1429":{"position":[[1054,12]]},"1431":{"position":[[1067,12]]},"1433":{"position":[[1180,12]]},"1435":{"position":[[1141,12]]},"1439":{"position":[[1214,12]]},"1441":{"position":[[1195,12]]},"1443":{"position":[[1091,12]]},"1445":{"position":[[1207,12]]},"1447":{"position":[[1072,12]]},"1449":{"position":[[987,12]]},"1459":{"position":[[1162,12]]},"1465":{"position":[[1204,12]]},"1467":{"position":[[1120,12]]},"1469":{"position":[[1126,12]]},"1542":{"position":[[1471,12]]},"1544":{"position":[[1485,12]]},"1546":{"position":[[1600,12]]}}}],["rpm",{"_index":410,"t":{"873":{"position":[[132,3],[149,9]]},"1244":{"position":[[1295,3]]}}}],["rsa",{"_index":662,"t":{"935":{"position":[[55,3]]}}}],["rtbnb",{"_index":110,"t":{"838":{"position":[[714,5]]}}}],["rtbnb_kube",{"_index":183,"t":{"838":{"position":[[2257,10],[2417,10]]}}}],["rule",{"_index":1601,"t":{"1280":{"position":[[1804,5],[1852,5],[1889,5],[1944,5],[2903,5],[2937,5],[2974,5],[3029,5],[3348,5],[3468,5],[3492,5],[3527,5],[3868,5],[3925,5],[3949,5],[3984,5],[4097,6],[4311,6],[4520,6]]},"1284":{"position":[[771,6]]},"1316":{"position":[[553,5]]}}}],["run",{"_index":98,"t":{"838":{"position":[[549,7],[611,7],[724,7],[774,7],[829,7]]},"852":{"position":[[668,3]]},"871":{"position":[[229,3],[249,3]]},"920":{"position":[[65,3],[3209,3]]},"981":{"position":[[68,3],[6066,7],[8529,3]]},"1144":{"position":[[524,7],[586,7],[640,7]]},"1210":{"position":[[1749,3]]},"1276":{"position":[[348,3]]},"1278":{"position":[[482,4]]},"1280":{"position":[[6469,3],[6610,3]]},"1294":{"position":[[290,3]]},"1368":{"position":[[1788,7]]},"1372":{"position":[[36,3]]},"1374":{"position":[[36,3]]},"1376":{"position":[[36,3]]},"1378":{"position":[[36,3]]},"1380":{"position":[[36,3]]},"1382":{"position":[[36,3]]},"1384":{"position":[[36,3]]},"1386":{"position":[[36,3]]},"1388":{"position":[[36,3]]},"1390":{"position":[[36,3]]},"1392":{"position":[[153,3],[361,7],[782,8],[1613,8]]},"1394":{"position":[[163,3]]},"1396":{"position":[[36,3]]},"1398":{"position":[[26,3]]},"1400":{"position":[[26,3]]},"1402":{"position":[[26,3]]},"1404":{"position":[[26,3]]},"1406":{"position":[[26,3]]},"1408":{"position":[[26,3]]},"1410":{"position":[[26,3]]},"1412":{"position":[[26,3]]},"1415":{"position":[[245,8]]},"1423":{"position":[[475,8]]},"1425":{"position":[[458,8]]},"1427":{"position":[[332,8]]},"1429":{"position":[[298,8]]},"1431":{"position":[[311,8]]},"1433":{"position":[[402,8]]},"1435":{"position":[[309,8]]},"1439":{"position":[[375,8]]},"1441":{"position":[[397,8]]},"1443":{"position":[[293,8]]},"1445":{"position":[[428,8]]},"1447":{"position":[[289,8]]},"1449":{"position":[[240,8]]},"1459":{"position":[[370,8]]},"1463":{"position":[[491,7],[912,8],[1743,8]]},"1465":{"position":[[441,8]]},"1467":{"position":[[372,8]]},"1469":{"position":[[384,8]]},"1471":{"position":[[426,8]]},"1475":{"position":[[978,8]]},"1478":{"position":[[327,8]]},"1480":{"position":[[257,8]]},"1482":{"position":[[277,8]]},"1484":{"position":[[373,8]]},"1486":{"position":[[310,8]]},"1493":{"position":[[244,8]]},"1495":{"position":[[254,8]]},"1498":{"position":[[385,7],[806,8],[1637,8]]},"1500":{"position":[[274,7],[695,8],[1526,8]]},"1502":{"position":[[299,7],[720,8],[1551,8]]},"1504":{"position":[[451,7],[872,8],[1703,8]]},"1506":{"position":[[277,7],[698,8],[1529,8]]},"1508":{"position":[[309,7],[730,8],[1561,8]]},"1510":{"position":[[408,7],[829,8],[1660,8]]},"1516":{"position":[[124,8]]},"1521":{"position":[[36,3]]},"1523":{"position":[[36,3]]},"1525":{"position":[[26,3]]},"1527":{"position":[[26,3]]},"1529":{"position":[[26,3]]},"1531":{"position":[[26,3]]},"1533":{"position":[[26,3]]},"1535":{"position":[[26,3]]},"1537":{"position":[[36,3]]},"1539":{"position":[[36,3]]},"1542":{"position":[[544,8],[635,8]]},"1544":{"position":[[530,8],[621,8]]},"1546":{"position":[[586,8],[677,8]]},"1548":{"position":[[494,8]]},"1550":{"position":[[551,8]]},"1560":{"position":[[712,8]]},"1604":{"position":[[73,7]]}}}],["run/k3s/containerd",{"_index":2101,"t":{"1417":{"position":[[551,19]]},"1419":{"position":[[532,19]]},"1437":{"position":[[545,19]]},"1490":{"position":[[517,19]]}}}],["run/k3s/containerd/containerd.sock",{"_index":2100,"t":{"1417":{"position":[[507,35],[862,35],[1144,35],[1426,35],[1708,35],[1990,35],[2272,35],[2554,35]]},"1419":{"position":[[488,35],[843,35],[1125,35],[1407,35],[1689,35],[1971,35],[2253,35],[2535,35]]},"1437":{"position":[[501,35],[856,35],[1138,35],[1420,35],[1702,35],[1984,35],[2266,35],[2548,35]]},"1490":{"position":[[473,35],[828,35],[1110,35],[1392,35],[1674,35],[1956,35],[2238,35],[2520,35]]}}}],["runasani",{"_index":1604,"t":{"1280":{"position":[[1858,10],[2943,10],[3354,8],[3474,8],[3498,8],[3533,8],[3874,8],[3931,8],[3955,8],[3990,8]]}}}],["runasus",{"_index":1600,"t":{"1280":{"position":[[1793,10],[2892,10],[3457,10],[3914,10]]}}}],["runc",{"_index":2108,"t":{"1417":{"position":[[758,4],[1040,4],[1322,4],[1604,4],[1886,4],[2168,4],[2450,4]]},"1419":{"position":[[739,4],[1021,4],[1303,4],[1585,4],[1867,4],[2149,4],[2431,4]]},"1437":{"position":[[752,4],[1034,4],[1316,4],[1598,4],[1880,4],[2162,4],[2444,4]]},"1490":{"position":[[724,4],[1006,4],[1288,4],[1570,4],[1852,4],[2134,4],[2416,4]]}}}],["runtim",{"_index":227,"t":{"844":{"position":[[176,7],[1031,7]]},"875":{"position":[[200,7]]},"908":{"position":[[21,7]]},"920":{"position":[[2011,7]]},"981":{"position":[[6944,7]]},"1278":{"position":[[4,7]]},"1288":{"position":[[3517,7],[4148,7]]},"1548":{"position":[[1054,7],[2277,7]]},"1560":{"position":[[1245,7],[2468,7]]}}}],["runtime=remot",{"_index":1767,"t":{"1288":{"position":[[3582,14]]}}}],["runtimeclass",{"_index":237,"t":{"844":{"position":[[465,12],[571,12]]},"1210":{"position":[[1456,15]]},"1280":{"position":[[782,15]]}}}],["runtimeclassnam",{"_index":238,"t":{"844":{"position":[[496,17],[738,17],[1123,17]]}}}],["runtimedefault",{"_index":2321,"t":{"1628":{"position":[[179,14]]}}}],["s",{"_index":84,"t":{"838":{"position":[[387,1]]},"902":{"position":[[118,1]]},"920":{"position":[[762,1]]},"981":{"position":[[3001,1]]},"1025":{"position":[[267,1],[492,1]]},"1027":{"position":[[245,1],[470,1]]},"1033":{"position":[[575,1],[731,1],[848,1],[1039,1],[1492,1]]},"1080":{"position":[[512,1]]},"1089":{"position":[[339,1],[480,1],[535,1],[714,1],[753,1],[932,1],[1019,1],[1123,1],[1240,1]]},"1097":{"position":[[206,1]]},"1101":{"position":[[119,1],[122,1],[167,10]]},"1109":{"position":[[167,1],[170,1],[215,10]]},"1188":{"position":[[92,1]]},"1190":{"position":[[183,1]]},"1322":{"position":[[239,1]]},"1360":{"position":[[292,1],[445,1],[575,1]]}}}],["s1",{"_index":684,"t":{"937":{"position":[[637,2],[645,2],[948,2]]},"943":{"position":[[610,2],[654,6],[747,2],[771,2],[814,3],[818,2],[841,2],[951,3],[955,2]]},"945":{"position":[[594,2],[642,6],[735,2],[758,2],[843,2],[890,3],[894,2],[917,2]]}}}],["s1、s2",{"_index":683,"t":{"937":{"position":[[622,6]]}}}],["s1、s2、s3",{"_index":715,"t":{"943":{"position":[[597,9]]},"945":{"position":[[559,9]]}}}],["s2",{"_index":685,"t":{"937":{"position":[[829,2],[985,2]]},"943":{"position":[[760,2],[831,2],[968,2]]},"945":{"position":[[748,2],[907,2]]}}}],["s3",{"_index":507,"t":{"896":{"position":[[706,13]]},"937":{"position":[[629,7],[834,2],[990,2],[1442,2],[1466,2],[1502,5],[1578,2],[1603,2],[1612,2],[1622,2],[1634,2],[1649,2],[1664,2],[1683,2],[1696,2],[1718,2],[1737,2],[1751,2],[1772,2],[1786,2],[1807,2],[1817,2],[1833,2],[1843,2],[1880,2],[1890,2],[1917,3],[1943,2],[1950,2],[1981,2],[2015,2],[2048,2],[2147,2],[2206,2],[2242,2],[2281,2],[2498,2],[2567,2],[2606,2],[2613,2],[2644,2],[2678,2]]},"943":{"position":[[765,2],[836,2],[973,2]]},"945":{"position":[[753,2],[912,2]]},"954":{"position":[[741,2],[754,2],[764,2],[786,2],[827,2],[852,2],[871,2],[884,2],[910,2],[929,2],[967,2],[988,2],[1030,2],[1051,2],[1071,2],[1087,2],[1107,2],[1147,2],[1167,2],[1181,2],[1205,2],[1215,2],[1232,2]]},"981":{"position":[[4926,2],[4951,2],[4961,2],[4984,2],[5037,2],[5063,2],[5095,2],[5114,2],[5147,2],[5184,2],[5209,2],[5251,2],[5276,2],[5322,2],[5343,2],[5365,2],[5386,2],[5455,2],[5476,2],[5493,2],[5519,2],[5540,2],[5562,2]]}}}],["s3.amazonaws.com",{"_index":836,"t":{"981":{"position":[[5010,19]]}}}],["s390x",{"_index":1248,"t":{"1166":{"position":[[40,5]]}}}],["same",{"_index":1912,"t":{"1320":{"position":[[257,4]]}}}],["sampl",{"_index":1653,"t":{"1282":{"position":[[1170,6]]}}}],["sample:nbodi",{"_index":253,"t":{"844":{"position":[[829,12]]}}}],["san",{"_index":776,"t":{"963":{"position":[[237,3]]},"981":{"position":[[1017,3]]},"1031":{"position":[[334,3]]},"1093":{"position":[[175,4],[325,3]]}}}],["sandbox",{"_index":597,"t":{"920":{"position":[[2261,7]]},"981":{"position":[[7194,7]]}}}],["satisfi",{"_index":1577,"t":{"1280":{"position":[[1244,7]]},"1288":{"position":[[163,8]]}}}],["save",{"_index":710,"t":{"937":{"position":[[2412,4],[2433,4]]},"981":{"position":[[4811,4]]},"1119":{"position":[[834,4],[886,4]]},"1218":{"position":[[255,4],[310,4],[366,4]]}}}],["scan",{"_index":2067,"t":{"1392":{"position":[[1662,4]]},"1463":{"position":[[1792,4]]},"1498":{"position":[[1686,4]]},"1500":{"position":[[1575,4]]},"1502":{"position":[[1600,4]]},"1504":{"position":[[1752,4]]},"1506":{"position":[[1578,4]]},"1508":{"position":[[1610,4]]},"1510":{"position":[[1709,4]]}}}],["scenario",{"_index":2019,"t":{"1368":{"position":[[1906,9]]}}}],["schedul",{"_index":689,"t":{"937":{"position":[[1130,8]]},"954":{"position":[[531,8]]},"973":{"position":[[52,9]]},"975":{"position":[[95,9],[120,9]]},"981":{"position":[[3585,9],[3638,9],[4567,8],[5879,9],[5929,9]]},"1188":{"position":[[177,9]]},"1192":{"position":[[166,9]]},"1194":{"position":[[192,10]]},"1266":{"position":[[83,9]]},"1288":{"position":[[2852,9]]},"1400":{"position":[[142,9]]},"1402":{"position":[[148,9]]},"1465":{"position":[[2872,9],[3118,9]]},"1493":{"position":[[35,9],[258,10],[464,9],[710,9]]},"1495":{"position":[[35,9],[268,10],[538,9],[784,9]]}}}],["scheduler.yaml",{"_index":2029,"t":{"1380":{"position":[[183,14]]},"1382":{"position":[[189,14]]},"1493":{"position":[[99,14]]},"1495":{"position":[[99,14]]}}}],["score",{"_index":2022,"t":{"1368":{"position":[[1962,7]]}}}],["script",{"_index":2034,"t":{"1392":{"position":[[266,7],[315,6]]},"1463":{"position":[[396,7],[445,6]]},"1498":{"position":[[290,7],[339,6]]},"1500":{"position":[[179,7],[228,6]]},"1502":{"position":[[204,7],[253,6]]},"1504":{"position":[[356,7],[405,6]]},"1506":{"position":[[182,7],[231,6]]},"1508":{"position":[[214,7],[263,6]]},"1510":{"position":[[313,7],[362,6]]}}}],["sd",{"_index":921,"t":{"1033":{"position":[[31,2]]},"1170":{"position":[[290,10],[361,2]]}}}],["sdxc",{"_index":1488,"t":{"1254":{"position":[[213,4]]}}}],["seccomp",{"_index":2319,"t":{"1628":{"position":[[75,7]]}}}],["seccomp.security.alpha.kubernetes.io/allowedprofilenam",{"_index":1619,"t":{"1280":{"position":[[3213,57],[3651,57]]}}}],["seccompprofil",{"_index":2320,"t":{"1628":{"position":[[157,15]]}}}],["second",{"_index":1845,"t":{"1304":{"position":[[247,7],[414,8],[646,7]]}}}],["secret",{"_index":491,"t":{"894":{"position":[[358,6],[453,29],[483,6],[648,21],[693,12]]},"896":{"position":[[748,7],[767,6],[784,17],[806,7]]},"916":{"position":[[64,6]]},"937":{"position":[[1775,6],[1789,6],[2018,6],[2033,6],[2284,6],[2299,6],[2681,6],[2696,6]]},"939":{"position":[[24,6]]},"941":{"position":[[38,7],[72,6],[106,6]]},"943":{"position":[[21,6],[41,7],[114,7],[259,7],[332,7],[345,6],[374,7],[433,6],[511,7],[536,7],[617,7],[778,7],[870,7],[883,6],[912,7]]},"945":{"position":[[14,7],[54,6],[76,6],[94,7],[245,7],[299,6],[317,7],[378,7],[424,7],[462,6],[506,7],[581,6],[605,7],[775,7],[830,6],[854,7],[934,7]]},"947":{"position":[[0,7],[43,6],[86,7],[316,7],[604,6],[924,6],[1009,7]]},"951":{"position":[[334,7]]},"954":{"position":[[991,6],[1033,6]]},"956":{"position":[[260,6]]},"967":{"position":[[11,7],[39,6]]},"979":{"position":[[99,6]]},"981":{"position":[[2640,6],[2814,6],[2953,6],[5254,6],[5279,6],[8380,7],[8406,6]]},"993":{"position":[[270,6]]},"998":{"position":[[594,6],[1355,19]]},"1027":{"position":[[794,7]]},"1033":{"position":[[497,12],[772,6],[1763,7]]},"1097":{"position":[[76,8],[375,6]]},"1105":{"position":[[139,6]]},"1196":{"position":[[183,24]]},"1210":{"position":[[352,7]]},"1280":{"position":[[1629,8],[2770,8]]},"1286":{"position":[[211,7],[808,7]]},"1308":{"position":[[349,7],[392,7]]},"1310":{"position":[[392,7],[435,7]]},"1322":{"position":[[34,7],[165,6],[252,7],[395,9],[470,9]]},"1324":{"position":[[13,7],[47,6],[81,6],[103,7]]},"1518":{"position":[[141,7],[231,8]]},"1571":{"position":[[79,6]]},"1618":{"position":[[72,7],[93,6]]},"1620":{"position":[[39,7],[114,7]]}}}],["secret/token",{"_index":759,"t":{"956":{"position":[[119,12]]}}}],["secretbox",{"_index":1870,"t":{"1310":{"position":[[225,11]]},"1473":{"position":[[137,9]]}}}],["section",{"_index":1530,"t":{"1272":{"position":[[1031,8],[1057,7]]},"1274":{"position":[[135,8]]},"1278":{"position":[[183,8]]},"1280":{"position":[[1288,7],[2413,8]]},"1368":{"position":[[684,7],[1371,7]]},"1610":{"position":[[156,9]]}}}],["secur",{"_index":647,"t":{"931":{"position":[[295,6],[1211,6]]},"933":{"position":[[216,6],[931,6]]},"981":{"position":[[3959,6],[4085,6],[4202,6]]},"1210":{"position":[[46,8]]},"1272":{"position":[[233,8],[269,8]]},"1278":{"position":[[82,8],[233,8]]},"1280":{"position":[[64,8],[111,9],[880,8],[925,9]]},"1288":{"position":[[1537,6],[2699,6],[3023,6]]},"1294":{"position":[[83,8],[344,8],[420,8]]},"1296":{"position":[[106,8]]},"1306":{"position":[[447,8]]},"1368":{"position":[[50,8],[243,8],[365,8],[816,8]]},"1392":{"position":[[878,9],[1007,9],[1205,9],[1332,9]]},"1423":{"position":[[2342,6]]},"1425":{"position":[[2290,6]]},"1427":{"position":[[2159,6]]},"1429":{"position":[[2108,6]]},"1431":{"position":[[2121,6]]},"1433":{"position":[[2234,6]]},"1435":{"position":[[2195,6]]},"1439":{"position":[[2268,6]]},"1441":{"position":[[2249,6]]},"1443":{"position":[[2145,6]]},"1445":{"position":[[2261,6]]},"1447":{"position":[[165,6],[332,7],[366,6],[403,6],[2126,6]]},"1449":{"position":[[2041,6]]},"1459":{"position":[[2216,6]]},"1463":{"position":[[1008,9],[1137,9],[1335,9],[1462,9]]},"1465":{"position":[[2258,6],[3215,6]]},"1467":{"position":[[2174,6]]},"1469":{"position":[[2180,6]]},"1480":{"position":[[1841,6]]},"1482":{"position":[[1909,6]]},"1484":{"position":[[1994,6]]},"1486":{"position":[[1891,6]]},"1493":{"position":[[807,6]]},"1495":{"position":[[881,6]]},"1498":{"position":[[902,9],[1031,9],[1229,9],[1356,9]]},"1500":{"position":[[791,9],[920,9],[1118,9],[1245,9]]},"1502":{"position":[[816,9],[945,9],[1143,9],[1270,9]]},"1504":{"position":[[968,9],[1097,9],[1295,9],[1422,9]]},"1506":{"position":[[794,9],[923,9],[1121,9],[1248,9]]},"1508":{"position":[[826,9],[955,9],[1153,9],[1280,9]]},"1510":{"position":[[925,9],[1054,9],[1252,9],[1379,9]]},"1542":{"position":[[2525,6]]},"1544":{"position":[[2539,6]]},"1546":{"position":[[2654,6]]},"1586":{"position":[[49,8]]},"1630":{"position":[[170,8]]}}}],["secure）或短（short",{"_index":843,"t":{"985":{"position":[[10,62]]}}}],["security.admission.config.k8s.io/v1beta1",{"_index":1338,"t":{"1210":{"position":[[1214,40]]},"1280":{"position":[[540,40]]}}}],["security.kubernetes.io/audit",{"_index":1348,"t":{"1210":{"position":[[1995,29],[2040,28]]}}}],["security.kubernetes.io/enforc",{"_index":1344,"t":{"1210":{"position":[[1771,31],[1818,30]]}}}],["security.kubernetes.io/warn",{"_index":1349,"t":{"1210":{"position":[[2088,28],[2132,27]]}}}],["securitycontext",{"_index":2317,"t":{"1628":{"position":[[30,15],[140,16]]},"1630":{"position":[[72,16],[127,17]]}}}],["securitycontext.windowsoptions.hostprocess",{"_index":2309,"t":{"1606":{"position":[[147,43]]}}}],["securitycontextdeni",{"_index":2160,"t":{"1439":{"position":[[201,20],[495,21]]}}}],["sed",{"_index":1082,"t":{"1101":{"position":[[160,3]]},"1109":{"position":[[208,3]]}}}],["see",{"_index":2217,"t":{"1502":{"position":[[2284,3],[2524,3],[2764,3]]},"1508":{"position":[[2329,3]]}}}],["segreg",{"_index":2323,"t":{"1632":{"position":[[86,11]]}}}],["selector",{"_index":736,"t":{"951":{"position":[[258,8]]},"969":{"position":[[620,8]]},"981":{"position":[[2176,8]]},"1121":{"position":[[291,8]]},"1423":{"position":[[1144,8],[1204,8]]},"1425":{"position":[[1092,8],[1152,8]]},"1427":{"position":[[961,8],[1021,8]]},"1429":{"position":[[910,8],[970,8]]},"1431":{"position":[[923,8],[983,8]]},"1433":{"position":[[1036,8],[1096,8]]},"1435":{"position":[[997,8],[1057,8]]},"1439":{"position":[[1070,8],[1130,8]]},"1441":{"position":[[1051,8],[1111,8]]},"1443":{"position":[[947,8],[1007,8]]},"1445":{"position":[[1063,8],[1123,8]]},"1447":{"position":[[928,8],[988,8]]},"1449":{"position":[[843,8],[903,8]]},"1459":{"position":[[1018,8],[1078,8]]},"1465":{"position":[[1060,8],[1120,8]]},"1467":{"position":[[976,8],[1036,8]]},"1469":{"position":[[982,8],[1042,8]]},"1542":{"position":[[1327,8],[1387,8]]},"1544":{"position":[[1341,8],[1401,8]]},"1546":{"position":[[1456,8],[1516,8]]}}}],["self",{"_index":1907,"t":{"1320":{"position":[[147,4]]}}}],["selinux",{"_index":408,"t":{"873":{"position":[[31,7],[73,7],[141,7],[244,7],[252,7],[348,7]]},"875":{"position":[[4,12],[42,7],[76,8],[95,7],[174,7],[210,7],[242,7],[265,7]]},"906":{"position":[[235,7],[272,7]]},"920":{"position":[[1531,7],[1559,7]]},"981":{"position":[[8633,7],[8661,7]]},"1244":{"position":[[1231,7]]},"1280":{"position":[[1843,8],[2928,8],[3483,8],[3940,8]]}}}],["sensit",{"_index":1675,"t":{"1284":{"position":[[376,9]]},"1308":{"position":[[236,9]]},"1518":{"position":[[304,9]]}}}],["sep",{"_index":2127,"t":{"1423":{"position":[[663,3]]},"1425":{"position":[[611,3]]},"1427":{"position":[[480,3]]},"1429":{"position":[[429,3]]},"1431":{"position":[[442,3]]},"1433":{"position":[[555,3]]},"1435":{"position":[[516,3]]},"1439":{"position":[[589,3]]},"1441":{"position":[[570,3]]},"1443":{"position":[[466,3]]},"1445":{"position":[[582,3]]},"1447":{"position":[[447,3]]},"1449":{"position":[[362,3]]},"1459":{"position":[[537,3]]},"1465":{"position":[[579,3],[2755,3]]},"1467":{"position":[[495,3]]},"1469":{"position":[[501,3]]},"1480":{"position":[[388,3]]},"1482":{"position":[[456,3]]},"1484":{"position":[[541,3]]},"1486":{"position":[[438,3]]},"1493":{"position":[[347,3]]},"1495":{"position":[[421,3]]},"1542":{"position":[[846,3]]},"1544":{"position":[[860,3]]},"1546":{"position":[[975,3]]},"1548":{"position":[[652,3],[1875,3]]},"1560":{"position":[[843,3],[2066,3]]}}}],["separ",{"_index":559,"t":{"920":{"position":[[387,9]]},"981":{"position":[[398,9]]}}}],["sequenc",{"_index":1817,"t":{"1296":{"position":[[169,8]]}}}],["serial",{"_index":1785,"t":{"1288":{"position":[[4188,9]]},"1548":{"position":[[1713,9],[2936,9]]},"1560":{"position":[[1904,9],[3127,9]]}}}],["serv",{"_index":2193,"t":{"1480":{"position":[[1230,7],[1320,7]]},"1482":{"position":[[1298,7],[1388,7]]},"1484":{"position":[[1383,7],[1473,7]]},"1486":{"position":[[1280,7],[1370,7]]}}}],["server",{"_index":41,"t":{"830":{"position":[[9,6]]},"834":{"position":[[12,6]]},"838":{"position":[[583,6],[1994,7],[2066,6]]},"844":{"position":[[235,6]]},"846":{"position":[[33,12],[278,18]]},"848":{"position":[[38,19]]},"852":{"position":[[623,6],[705,6]]},"871":{"position":[[203,6],[281,6],[307,6],[364,6],[521,6]]},"875":{"position":[[21,6]]},"880":{"position":[[9,6],[56,6]]},"886":{"position":[[72,6],[82,6],[101,6],[204,6],[256,6]]},"888":{"position":[[30,6],[68,6],[91,6]]},"890":{"position":[[113,6],[215,6]]},"892":{"position":[[74,6]]},"894":{"position":[[172,6],[290,6],[332,6],[380,12],[420,8],[730,6]]},"896":{"position":[[37,6],[51,6],[178,6]]},"898":{"position":[[25,10],[62,7]]},"902":{"position":[[103,6],[139,6]]},"906":{"position":[[285,6]]},"920":{"position":[[747,6],[780,6],[1601,6]]},"925":{"position":[[284,7]]},"927":{"position":[[96,6],[181,6],[243,6],[278,6]]},"929":{"position":[[9,6],[307,6],[321,6]]},"931":{"position":[[317,20],[1159,12]]},"933":{"position":[[905,12],[953,6]]},"935":{"position":[[795,6]]},"937":{"position":[[459,6],[611,10],[717,6],[1528,6],[2096,6]]},"943":{"position":[[67,6],[155,10],[299,7],[498,6],[568,16],[585,6]]},"945":{"position":[[38,6],[135,10],[357,7],[493,6],[547,6]]},"947":{"position":[[63,6],[166,6],[299,6],[397,6],[743,6],[783,6],[826,11],[887,6]]},"949":{"position":[[18,7],[26,10],[50,6]]},"951":{"position":[[14,6],[39,6]]},"956":{"position":[[54,6],[198,6],[273,6],[299,13]]},"969":{"position":[[693,6],[843,6]]},"977":{"position":[[182,11]]},"981":{"position":[[59,6],[83,6],[101,6],[1122,6],[2662,6],[2865,7],[2986,6],[3019,6],[5861,7],[8703,6]]},"987":{"position":[[131,6],[158,7],[347,7],[372,6],[470,6],[488,6],[510,6]]},"989":{"position":[[64,6]]},"991":{"position":[[26,6],[82,6]]},"993":{"position":[[13,6],[100,6],[118,6],[162,6],[215,6],[385,6],[421,6]]},"995":{"position":[[20,6],[49,6],[112,6],[225,6]]},"998":{"position":[[234,6],[279,6],[361,6],[402,6],[757,11],[1223,11],[1508,11],[1715,11]]},"1002":{"position":[[63,6],[83,6]]},"1004":{"position":[[365,6],[457,6],[593,6]]},"1008":{"position":[[266,19],[668,19]]},"1010":{"position":[[86,6]]},"1019":{"position":[[129,6]]},"1025":{"position":[[13,6],[63,6],[193,10],[271,6],[496,6],[653,6],[692,6],[737,12],[909,6],[926,6],[979,6]]},"1027":{"position":[[21,6],[57,6],[122,6],[199,6],[249,6],[474,6],[593,6]]},"1029":{"position":[[7,6],[107,6],[221,6]]},"1031":{"position":[[28,6],[102,6],[129,6],[157,6],[369,12]]},"1033":{"position":[[88,6],[126,6],[313,6],[468,6],[510,6],[579,6],[735,6],[852,6],[861,6],[1043,6],[1052,6],[1357,6],[1374,13],[1388,6],[1429,6],[1504,6],[1562,6]]},"1035":{"position":[[66,14],[176,7],[280,23]]},"1041":{"position":[[31,13]]},"1053":{"position":[[24,11],[62,6]]},"1059":{"position":[[870,6]]},"1065":{"position":[[137,6],[179,6]]},"1080":{"position":[[57,6],[256,6],[516,6]]},"1087":{"position":[[44,6]]},"1089":{"position":[[270,7],[539,6],[571,6],[877,6],[1025,6]]},"1091":{"position":[[320,6],[340,6],[406,6],[465,6],[486,6],[580,6],[686,6],[737,6],[807,6],[832,6]]},"1093":{"position":[[123,6],[277,6]]},"1097":{"position":[[286,6],[316,6]]},"1115":{"position":[[85,6],[109,6],[403,6]]},"1117":{"position":[[235,6],[432,6]]},"1121":{"position":[[12,6],[309,6],[397,6],[560,6]]},"1123":{"position":[[165,6],[365,6]]},"1127":{"position":[[186,6],[234,6]]},"1129":{"position":[[150,6],[339,6]]},"1134":{"position":[[2,6]]},"1136":{"position":[[84,10]]},"1138":{"position":[[762,6],[777,6],[850,6]]},"1144":{"position":[[558,6]]},"1148":{"position":[[181,10],[210,6],[231,6],[255,6]]},"1170":{"position":[[101,6],[126,6],[154,6]]},"1172":{"position":[[4,6],[181,6],[288,18],[346,6]]},"1174":{"position":[[28,7],[36,7],[81,7],[121,6]]},"1178":{"position":[[8,6]]},"1182":{"position":[[71,6]]},"1186":{"position":[[25,6],[195,6]]},"1188":{"position":[[16,13],[96,6],[263,6]]},"1190":{"position":[[33,12],[112,9],[187,6],[227,6],[269,6],[363,6],[406,6]]},"1198":{"position":[[3,6]]},"1214":{"position":[[10,6],[64,7]]},"1216":{"position":[[561,7]]},"1218":{"position":[[130,7]]},"1230":{"position":[[50,7]]},"1232":{"position":[[329,6]]},"1236":{"position":[[236,6]]},"1240":{"position":[[435,6],[551,6],[1003,6]]},"1244":{"position":[[973,21],[1042,6]]},"1246":{"position":[[99,6],[278,6],[481,6]]},"1252":{"position":[[233,6],[262,6]]},"1258":{"position":[[19,6]]},"1260":{"position":[[11,6],[58,7]]},"1264":{"position":[[11,6]]},"1266":{"position":[[4,6],[245,15],[261,41]]},"1268":{"position":[[4,6],[69,6]]},"1278":{"position":[[134,6]]},"1280":{"position":[[179,7],[993,7]]},"1282":{"position":[[931,6],[1379,6],[1458,6],[2062,6],[2141,6]]},"1284":{"position":[[84,7],[677,6],[855,6],[1195,6]]},"1292":{"position":[[569,7]]},"1294":{"position":[[668,7]]},"1296":{"position":[[88,6],[549,7]]},"1298":{"position":[[389,7]]},"1300":{"position":[[564,7]]},"1302":{"position":[[550,7]]},"1304":{"position":[[132,6],[491,6],[774,7]]},"1306":{"position":[[567,7]]},"1312":{"position":[[641,7]]},"1316":{"position":[[692,7]]},"1322":{"position":[[18,6],[149,15],[243,6]]},"1345":{"position":[[253,6],[438,6]]},"1352":{"position":[[143,6],[215,6],[762,6],[975,6],[1053,6],[1147,6]]},"1354":{"position":[[151,6]]},"1356":{"position":[[46,6]]},"1364":{"position":[[45,7],[137,7]]},"1392":{"position":[[38,6]]},"1394":{"position":[[48,6]]},"1415":{"position":[[39,6]]},"1417":{"position":[[125,6]]},"1419":{"position":[[39,6]]},"1421":{"position":[[49,6]]},"1423":{"position":[[143,6]]},"1425":{"position":[[146,6]]},"1427":{"position":[[39,6]]},"1429":{"position":[[39,6]]},"1431":{"position":[[39,6]]},"1433":{"position":[[133,6]]},"1435":{"position":[[39,6]]},"1437":{"position":[[39,6]]},"1439":{"position":[[39,6]]},"1441":{"position":[[129,6]]},"1443":{"position":[[39,6]]},"1445":{"position":[[132,6]]},"1447":{"position":[[39,6]]},"1449":{"position":[[39,6]]},"1451":{"position":[[49,6]]},"1453":{"position":[[49,6]]},"1455":{"position":[[49,6]]},"1457":{"position":[[49,6]]},"1459":{"position":[[39,6]]},"1461":{"position":[[49,6]]},"1463":{"position":[[143,6]]},"1465":{"position":[[129,6]]},"1467":{"position":[[129,6]]},"1469":{"position":[[143,6]]},"1471":{"position":[[120,6]]},"1475":{"position":[[39,6]]},"1504":{"position":[[2328,6],[2398,6]]},"1577":{"position":[[137,7]]}}}],["server1",{"_index":927,"t":{"1033":{"position":[[1171,7]]}}}],["server1>:6443",{"_index":925,"t":{"1033":{"position":[[895,13],[1086,13]]}}}],["server2",{"_index":931,"t":{"1033":{"position":[[1222,7]]}}}],["server3",{"_index":933,"t":{"1033":{"position":[[1273,7]]}}}],["server>:6443",{"_index":935,"t":{"1033":{"position":[[1538,12]]}}}],["server_external_ip",{"_index":1164,"t":{"1129":{"position":[[316,18],[418,18],[472,18]]}}}],["server_metr",{"_index":171,"t":{"838":{"position":[[2051,14]]}}}],["servers=https://127.0.0.1:2379",{"_index":1709,"t":{"1288":{"position":[[771,30]]},"1423":{"position":[[1500,30]]},"1425":{"position":[[1448,30]]},"1427":{"position":[[1317,30]]},"1429":{"position":[[1266,30]]},"1431":{"position":[[1279,30]]},"1433":{"position":[[1392,30]]},"1435":{"position":[[1353,30]]},"1439":{"position":[[1426,30]]},"1441":{"position":[[1407,30]]},"1443":{"position":[[1303,30]]},"1445":{"position":[[1419,30]]},"1447":{"position":[[1284,30]]},"1449":{"position":[[1199,30]]},"1459":{"position":[[1374,30]]},"1465":{"position":[[1416,30]]},"1467":{"position":[[1332,30]]},"1469":{"position":[[1338,30]]},"1542":{"position":[[1683,30]]},"1544":{"position":[[1697,30]]},"1546":{"position":[[1812,30]]}}}],["server、control",{"_index":616,"t":{"925":{"position":[[228,17]]},"1266":{"position":[[55,17]]}}}],["server。k3",{"_index":1415,"t":{"1240":{"position":[[942,10]]}}}],["server。k3s_token",{"_index":1416,"t":{"1240":{"position":[[978,16]]}}}],["server（control",{"_index":1952,"t":{"1345":{"position":[[184,14]]},"1352":{"position":[[15,14]]}}}],["servic",{"_index":18,"t":{"823":{"position":[[212,7],[474,8]]},"836":{"position":[[387,7]]},"850":{"position":[[80,19],[161,7],[202,7],[265,7]]},"865":{"position":[[275,9]]},"867":{"position":[[162,9]]},"894":{"position":[[224,7]]},"925":{"position":[[182,7]]},"931":{"position":[[757,7],[785,7]]},"935":{"position":[[0,7],[31,7],[66,7],[112,7],[294,7]]},"943":{"position":[[232,7],[727,7]]},"945":{"position":[[212,7],[715,7]]},"951":{"position":[[355,7]]},"969":{"position":[[77,7],[141,7],[275,7],[752,7],[879,7],[932,7],[1031,7]]},"981":{"position":[[1364,7],[1431,7],[1469,7],[1538,8],[1658,8],[1685,7]]},"993":{"position":[[309,7]]},"1027":{"position":[[666,7]]},"1033":{"position":[[1635,7]]},"1059":{"position":[[463,8]]},"1113":{"position":[[68,7]]},"1121":{"position":[[465,7],[615,7],[665,7],[822,7]]},"1123":{"position":[[398,7],[475,7],[552,7],[692,7]]},"1125":{"position":[[170,7],[269,7]]},"1129":{"position":[[620,7]]},"1210":{"position":[[695,8],[796,7]]},"1212":{"position":[[51,7]]},"1220":{"position":[[144,27],[172,7],[309,8]]},"1222":{"position":[[28,10],[87,9],[212,7],[289,7],[369,13],[383,7],[437,8]]},"1224":{"position":[[29,8]]},"1228":{"position":[[360,9],[370,7]]},"1284":{"position":[[1120,7]]},"1286":{"position":[[554,8],[655,7],[1177,8],[1278,7]]},"1288":{"position":[[1565,7],[1594,7],[1674,7],[1753,7],[2715,7],[2806,7]]},"1304":{"position":[[537,7]]},"1306":{"position":[[18,7],[82,7],[221,7],[317,7],[368,7]]},"1318":{"position":[[20,7],[101,7],[170,7],[280,7],[355,7],[384,7],[453,7],[625,7],[672,7],[854,7]]},"1364":{"position":[[150,7],[187,7]]},"1423":{"position":[[2361,7],[2431,7],[2502,7],[2581,7],[2621,7]]},"1425":{"position":[[2309,7],[2379,7],[2450,7],[2529,7],[2569,7]]},"1427":{"position":[[2178,7],[2248,7],[2319,7],[2398,7],[2438,7]]},"1429":{"position":[[2127,7],[2197,7],[2268,7],[2347,7],[2387,7]]},"1431":{"position":[[2140,7],[2210,7],[2281,7],[2360,7],[2400,7]]},"1433":{"position":[[2253,7],[2323,7],[2394,7],[2473,7],[2513,7]]},"1435":{"position":[[2214,7],[2284,7],[2355,7],[2434,7],[2474,7]]},"1439":{"position":[[2287,7],[2357,7],[2428,7],[2507,7],[2547,7]]},"1441":{"position":[[2268,7],[2338,7],[2409,7],[2488,7],[2528,7]]},"1443":{"position":[[2164,7],[2234,7],[2305,7],[2384,7],[2424,7]]},"1445":{"position":[[2280,7],[2350,7],[2421,7],[2500,7],[2540,7]]},"1447":{"position":[[2145,7],[2215,7],[2286,7],[2365,7],[2405,7]]},"1449":{"position":[[2060,7],[2130,7],[2201,7],[2280,7],[2320,7]]},"1459":{"position":[[172,7],[236,7],[441,7],[486,7],[2235,7],[2305,7],[2376,7],[2455,7],[2495,7]]},"1461":{"position":[[165,7],[227,7],[260,7]]},"1465":{"position":[[2277,7],[2347,7],[2418,7],[2497,7],[2537,7]]},"1467":{"position":[[2193,7],[2263,7],[2334,7],[2413,7],[2453,7]]},"1469":{"position":[[2199,7],[2269,7],[2340,7],[2419,7],[2459,7]]},"1480":{"position":[[1608,8],[1861,7],[1940,7],[1984,7]]},"1482":{"position":[[192,7],[334,7],[387,7],[1676,8],[1929,7],[2008,7],[2052,7]]},"1484":{"position":[[172,7],[243,7],[276,7],[425,8],[480,7],[1761,8],[2014,7],[2093,7],[2137,7]]},"1486":{"position":[[1658,8],[1911,7],[1990,7],[2034,7]]},"1498":{"position":[[42,7]]},"1504":{"position":[[42,7]]},"1510":{"position":[[134,8]]},"1542":{"position":[[172,7],[390,8],[2544,7],[2614,7],[2685,7],[2764,7],[2804,7]]},"1544":{"position":[[158,7],[376,8],[2558,7],[2628,7],[2699,7],[2778,7],[2818,7]]},"1546":{"position":[[201,7],[432,8],[2673,7],[2743,7],[2814,7],[2893,7],[2933,7]]},"1548":{"position":[[148,7],[362,8]]},"1550":{"position":[[185,7],[419,8]]},"1552":{"position":[[170,7],[396,8]]},"1554":{"position":[[171,7],[396,8]]},"1556":{"position":[[53,7],[270,8]]},"1558":{"position":[[169,7],[364,8]]},"1560":{"position":[[291,7],[580,8]]},"1562":{"position":[[225,7],[446,8]]},"1564":{"position":[[53,7],[300,8]]},"1566":{"position":[[474,7],[1005,8]]},"1577":{"position":[[42,7],[186,7]]},"1579":{"position":[[60,7],[104,7]]}}}],["service.key",{"_index":636,"t":{"929":{"position":[[560,11]]},"935":{"position":[[203,11]]}}}],["service>,<servic",{"_index":614,"t":{"925":{"position":[[190,19]]}}}],["serviceaccount",{"_index":635,"t":{"929":{"position":[[525,14]]},"1103":{"position":[[97,14],[395,14]]},"1280":{"position":[[5767,14]]},"1441":{"position":[[62,14],[329,15]]}}}],["serviceaccountnam",{"_index":1974,"t":{"1352":{"position":[[394,19],[801,19]]}}}],["serviceaccount、clusterrolebind",{"_index":1965,"t":{"1350":{"position":[[65,33]]}}}],["servicelb",{"_index":734,"t":{"951":{"position":[[239,9]]},"969":{"position":[[548,9],[588,9]]},"981":{"position":[[2275,9],[2344,9],[5818,10]]},"1091":{"position":[[634,9]]},"1136":{"position":[[95,9]]},"1220":{"position":[[52,14],[264,9]]},"1222":{"position":[[0,9],[242,9]]},"1226":{"position":[[47,22],[135,9],[194,9]]},"1230":{"position":[[4,13]]},"1232":{"position":[[169,9]]},"1280":{"position":[[2301,9]]}}}],["services/proxi",{"_index":2231,"t":{"1518":{"position":[[415,15]]}}}],["service。daemonset",{"_index":1388,"t":{"1228":{"position":[[486,17]]}}}],["service。默认情况下，servicelb",{"_index":1366,"t":{"1216":{"position":[[128,23]]}}}],["service，servicelb",{"_index":1381,"t":{"1222":{"position":[[476,17]]}}}],["set",{"_index":463,"t":{"882":{"position":[[318,3]]},"920":{"position":[[428,8],[577,4],[1086,3],[1157,3],[1932,4],[2149,4]]},"981":{"position":[[439,8],[588,4],[4446,3],[6411,3],[6482,3],[7082,4],[8311,4]]},"1059":{"position":[[1064,3],[1072,3]]},"1078":{"position":[[358,3]]},"1131":{"position":[[144,8]]},"1210":{"position":[[1873,7]]},"1276":{"position":[[110,3],[242,3]]},"1292":{"position":[[63,4],[78,7]]},"1294":{"position":[[62,4],[256,3],[379,8]]},"1296":{"position":[[45,4],[138,3],[406,7]]},"1298":{"position":[[47,3],[200,3]]},"1300":{"position":[[50,3],[295,3]]},"1302":{"position":[[48,3],[281,3]]},"1304":{"position":[[46,3],[76,7],[237,3],[428,7],[581,3]]},"1306":{"position":[[53,3]]},"1308":{"position":[[57,3]]},"1310":{"position":[[153,3]]},"1312":{"position":[[58,3],[316,7]]},"1316":{"position":[[56,3]]},"1392":{"position":[[448,3]]},"1415":{"position":[[145,3]]},"1423":{"position":[[66,3],[249,3]]},"1425":{"position":[[252,3]]},"1427":{"position":[[145,3]]},"1429":{"position":[[145,3]]},"1431":{"position":[[145,3]]},"1433":{"position":[[66,3],[213,3]]},"1435":{"position":[[204,3]]},"1437":{"position":[[145,3]]},"1439":{"position":[[145,3]]},"1441":{"position":[[292,3]]},"1443":{"position":[[145,3]]},"1445":{"position":[[238,3]]},"1447":{"position":[[190,3]]},"1449":{"position":[[145,3]]},"1451":{"position":[[155,3]]},"1453":{"position":[[155,3]]},"1455":{"position":[[155,3]]},"1457":{"position":[[155,3],[239,3]]},"1459":{"position":[[145,3]]},"1461":{"position":[[155,3]]},"1463":{"position":[[66,3],[249,3],[578,3]]},"1465":{"position":[[66,3],[235,3]]},"1467":{"position":[[66,3],[235,3]]},"1469":{"position":[[66,3],[249,3]]},"1471":{"position":[[226,3]]},"1475":{"position":[[145,3]]},"1478":{"position":[[162,3]]},"1480":{"position":[[162,3]]},"1482":{"position":[[161,3]]},"1484":{"position":[[162,3]]},"1486":{"position":[[162,3]]},"1488":{"position":[[172,3]]},"1493":{"position":[[149,3]]},"1498":{"position":[[196,3],[472,3]]},"1500":{"position":[[122,3],[361,3]]},"1502":{"position":[[164,3],[386,3]]},"1504":{"position":[[238,3],[538,3]]},"1506":{"position":[[122,3],[364,3]]},"1508":{"position":[[169,3],[396,3]]},"1510":{"position":[[245,3],[495,3]]},"1542":{"position":[[75,3],[263,3]]},"1544":{"position":[[75,3],[249,3]]},"1546":{"position":[[75,3],[292,3]]},"1548":{"position":[[75,3],[239,3]]},"1550":{"position":[[75,3],[276,3]]},"1552":{"position":[[85,3],[261,3]]},"1554":{"position":[[85,3]]},"1558":{"position":[[75,3],[260,3]]},"1560":{"position":[[75,3],[382,3]]},"1564":{"position":[[144,3]]},"1566":{"position":[[75,3],[565,3]]},"1596":{"position":[[173,3]]},"1598":{"position":[[171,4]]},"1602":{"position":[[114,3]]},"1606":{"position":[[191,3]]}}}],["setup",{"_index":362,"t":{"865":{"position":[[392,5]]},"1425":{"position":[[66,5]]},"1510":{"position":[[115,5]]},"1623":{"position":[[66,5]]}}}],["setup.servic",{"_index":363,"t":{"865":{"position":[[434,13]]}}}],["setup.tim",{"_index":364,"t":{"865":{"position":[[457,11]]}}}],["sfl",{"_index":82,"t":{"838":{"position":[[358,3]]},"860":{"position":[[224,3]]},"1025":{"position":[[238,3],[407,3]]},"1027":{"position":[[216,3],[385,3]]},"1033":{"position":[[529,3],[629,3],[802,3],[937,3],[1446,3]]},"1080":{"position":[[483,3]]},"1089":{"position":[[284,3],[386,3],[490,3],[629,3],[724,3],[826,3],[942,3],[1062,3],[1158,3]]},"1097":{"position":[[125,3]]},"1240":{"position":[[107,3],[165,3],[657,3],[767,3]]},"1244":{"position":[[101,3],[159,3],[1530,3]]},"1322":{"position":[[210,3]]},"1360":{"position":[[244,3],[370,3],[496,3]]}}}],["sh",{"_index":81,"t":{"838":{"position":[[327,2],[383,2]]},"844":{"position":[[284,2]]},"860":{"position":[[306,2]]},"1025":{"position":[[263,2],[488,2]]},"1027":{"position":[[241,2],[466,2]]},"1033":{"position":[[571,2],[727,2],[844,2],[1035,2],[1488,2]]},"1080":{"position":[[508,2]]},"1089":{"position":[[335,2],[476,2],[531,2],[710,2],[749,2],[928,2],[1015,2],[1119,2],[1236,2]]},"1097":{"position":[[202,2]]},"1131":{"position":[[457,2]]},"1188":{"position":[[88,2]]},"1190":{"position":[[179,2]]},"1240":{"position":[[132,2],[246,2],[734,2],[900,2]]},"1244":{"position":[[126,2],[240,2],[1582,2]]},"1322":{"position":[[235,2]]},"1360":{"position":[[288,2],[441,2],[571,2]]}}}],["sha1",{"_index":624,"t":{"927":{"position":[[226,4]]}}}],["sha256",{"_index":849,"t":{"987":{"position":[[198,6],[236,6],[414,6],[433,6]]}}}],["share",{"_index":813,"t":{"981":{"position":[[2633,6],[2807,6]]}}}],["shell",{"_index":53,"t":{"836":{"position":[[121,5]]},"896":{"position":[[911,5]]},"1089":{"position":[[165,5]]},"1360":{"position":[[87,5]]}}}],["shim",{"_index":2107,"t":{"1417":{"position":[[753,4],[1035,4],[1317,4],[1599,4],[1881,4],[2163,4],[2445,4]]},"1419":{"position":[[734,4],[1016,4],[1298,4],[1580,4],[1862,4],[2144,4],[2426,4]]},"1437":{"position":[[747,4],[1029,4],[1311,4],[1593,4],[1875,4],[2157,4],[2439,4]]},"1490":{"position":[[719,4],[1001,4],[1283,4],[1565,4],[1847,4],[2129,4],[2411,4]]}}}],["ship",{"_index":1560,"t":{"1278":{"position":[[276,5]]}}}],["show",{"_index":863,"t":{"998":{"position":[[429,4]]}}}],["sig",{"_index":329,"t":{"858":{"position":[[374,3]]}}}],["sign",{"_index":1732,"t":{"1288":{"position":[[1690,7],[2384,7],[2458,7]]},"1423":{"position":[[2518,7]]},"1425":{"position":[[2466,7]]},"1427":{"position":[[2335,7]]},"1429":{"position":[[2284,7]]},"1431":{"position":[[2297,7]]},"1433":{"position":[[2410,7]]},"1435":{"position":[[2371,7]]},"1439":{"position":[[2444,7]]},"1441":{"position":[[2425,7]]},"1443":{"position":[[2321,7]]},"1445":{"position":[[2437,7]]},"1447":{"position":[[2302,7]]},"1449":{"position":[[2217,7]]},"1459":{"position":[[2392,7]]},"1465":{"position":[[2434,7]]},"1467":{"position":[[2350,7]]},"1469":{"position":[[2356,7]]},"1480":{"position":[[846,7],[942,7],[1037,7],[1126,7],[1214,7],[1304,7],[1393,7],[1482,7]]},"1482":{"position":[[914,7],[1010,7],[1105,7],[1194,7],[1282,7],[1372,7],[1461,7],[1550,7]]},"1484":{"position":[[999,7],[1095,7],[1190,7],[1279,7],[1367,7],[1457,7],[1546,7],[1635,7]]},"1486":{"position":[[896,7],[992,7],[1087,7],[1176,7],[1264,7],[1354,7],[1443,7],[1532,7]]},"1542":{"position":[[2701,7]]},"1544":{"position":[[2715,7]]},"1546":{"position":[[2830,7]]}}}],["signing,authent",{"_index":873,"t":{"998":{"position":[[991,34]]}}}],["simple|list|output|threads|misc|al",{"_index":2214,"t":{"1502":{"position":[[2173,38],[2413,38],[2653,38]]},"1508":{"position":[[2218,38]]}}}],["singl",{"_index":1540,"t":{"1272":{"position":[[1249,6]]},"1280":{"position":[[2424,6]]}}}],["size",{"_index":1151,"t":{"1123":{"position":[[619,4],[646,4]]},"1236":{"position":[[835,4]]},"1300":{"position":[[304,4]]},"1302":{"position":[[290,4]]},"1457":{"position":[[211,4]]}}}],["skip",{"_index":695,"t":{"937":{"position":[[1699,4]]},"945":{"position":[[281,4],[414,4],[811,4],[970,4]]},"954":{"position":[[887,4]]},"981":{"position":[[5117,4]]},"1008":{"position":[[639,5]]},"1144":{"position":[[56,5],[72,14],[132,5]]},"1244":{"position":[[422,4]]}}}],["sl",{"_index":203,"t":{"840":{"position":[[247,2]]},"929":{"position":[[1205,2]]},"931":{"position":[[908,2]]},"933":{"position":[[636,2]]}}}],["slack",{"_index":951,"t":{"1055":{"position":[[137,5]]}}}],["sle",{"_index":1254,"t":{"1166":{"position":[[196,4]]}}}],["slirp4net",{"_index":304,"t":{"854":{"position":[[76,10]]}}}],["slirp4netn",{"_index":303,"t":{"854":{"position":[[30,11],[198,11],[256,11],[323,11]]}}}],["slirp4netns。builtin",{"_index":317,"t":{"854":{"position":[[433,19]]}}}],["slower",{"_index":1847,"t":{"1304":{"position":[[285,6]]}}}],["small",{"_index":1279,"t":{"1178":{"position":[[53,5]]},"1184":{"position":[[108,5]]}}}],["snap",{"_index":1302,"t":{"1204":{"position":[[30,4]]}}}],["snapshot",{"_index":506,"t":{"896":{"position":[[676,8],[729,8]]},"937":{"position":[[524,9],[782,9],[1091,9],[1121,8],[1214,8],[1262,8],[1545,8],[1930,8],[2452,8],[2555,9],[2586,8],[2710,9],[2765,8],[2805,8],[2829,8],[2846,8]]},"954":{"position":[[385,9],[419,8],[468,8],[504,10],[522,8],[618,8],[670,8]]},"981":{"position":[[3317,8],[4366,9],[4404,9],[4421,8],[4472,9],[4497,8],[4540,10],[4558,8],[4592,8],[4694,8],[4734,9],[4774,8],[4819,10],[4873,8],[4910,8]]},"1016":{"position":[[43,8]]}}}],["snapshott",{"_index":437,"t":{"878":{"position":[[452,11]]},"880":{"position":[[225,11]]},"920":{"position":[[2311,11],[2373,11]]},"981":{"position":[[7244,11],[7306,11]]}}}],["snapshotter=stargz",{"_index":438,"t":{"880":{"position":[[29,18],[65,18]]}}}],["snippet",{"_index":1552,"t":{"1276":{"position":[[328,7]]}}}],["socket",{"_index":594,"t":{"920":{"position":[[2094,6],[2165,6]]},"981":{"position":[[7027,6],[7098,6]]},"1008":{"position":[[789,6]]}}}],["sole",{"_index":820,"t":{"981":{"position":[[3219,4]]}}}],["solut",{"_index":2315,"t":{"1620":{"position":[[133,9]]}}}],["something=amaz",{"_index":1064,"t":{"1093":{"position":[[220,19],[381,19]]}}}],["sourc",{"_index":824,"t":{"981":{"position":[[3852,6]]},"1008":{"position":[[572,6]]}}}],["source=10.42.0.0/16",{"_index":358,"t":{"865":{"position":[[183,19]]}}}],["source=10.43.0.0/16",{"_index":359,"t":{"865":{"position":[[255,19]]}}}],["spec",{"_index":249,"t":{"844":{"position":[[707,5]]},"880":{"position":[[313,5]]},"981":{"position":[[4623,5]]},"1059":{"position":[[363,5]]},"1061":{"position":[[477,5]]},"1170":{"position":[[27,4]]},"1236":{"position":[[479,5]]},"1280":{"position":[[1443,5],[2630,5],[3275,5],[3713,5],[5906,5],[6105,5],[6304,5]]},"1282":{"position":[[419,5],[778,5],[1409,5],[1629,5],[1870,5],[2092,5],[2312,5],[2553,5]]},"1332":{"position":[[93,5]]},"1334":{"position":[[72,5]]},"1338":{"position":[[77,5]]},"1340":{"position":[[72,5]]},"1352":{"position":[[253,5],[601,5],[1410,5]]}}}],["spec.allowprivilegeescal",{"_index":2302,"t":{"1596":{"position":[[142,30]]}}}],["spec.bootstrap",{"_index":976,"t":{"1059":{"position":[[933,14]]}}}],["spec.chart",{"_index":967,"t":{"1059":{"position":[[632,10],[1365,10],[1470,10]]}}}],["spec.chartcont",{"_index":987,"t":{"1059":{"position":[[1314,17]]}}}],["spec.failurepolici",{"_index":983,"t":{"1059":{"position":[[1192,18]]}}}],["spec.helmvers",{"_index":974,"t":{"1059":{"position":[[891,16]]}}}],["spec.jobimag",{"_index":979,"t":{"1059":{"position":[[1083,13]]}}}],["spec.repo",{"_index":972,"t":{"1059":{"position":[[810,9]]}}}],["spec.repoca",{"_index":973,"t":{"1059":{"position":[[845,11]]}}}],["spec.set",{"_index":977,"t":{"1059":{"position":[[1010,8]]},"1061":{"position":[[200,8]]}}}],["spec.targetnamespac",{"_index":970,"t":{"1059":{"position":[[705,20]]}}}],["spec.timeout",{"_index":981,"t":{"1059":{"position":[[1152,12]]}}}],["spec.typ",{"_index":1378,"t":{"1222":{"position":[[39,9]]}}}],["spec.valuescont",{"_index":986,"t":{"1059":{"position":[[1258,18]]},"1061":{"position":[[242,18]]}}}],["spec.vers",{"_index":971,"t":{"1059":{"position":[[764,12]]}}}],["specif",{"_index":1666,"t":{"1284":{"position":[[187,8]]},"1318":{"position":[[161,8],[271,8]]},"1368":{"position":[[426,8],[1090,8]]},"1415":{"position":[[50,13]]},"1417":{"position":[[136,13]]},"1419":{"position":[[50,13]]},"1421":{"position":[[60,13]]},"1423":{"position":[[154,13]]},"1425":{"position":[[157,13]]},"1427":{"position":[[50,13]]},"1429":{"position":[[50,13]]},"1431":{"position":[[50,13]]},"1433":{"position":[[144,13]]},"1435":{"position":[[50,13]]},"1437":{"position":[[50,13]]},"1439":{"position":[[50,13]]},"1441":{"position":[[140,13]]},"1443":{"position":[[50,13]]},"1445":{"position":[[143,13]]},"1447":{"position":[[50,13]]},"1449":{"position":[[50,13]]},"1451":{"position":[[60,13]]},"1453":{"position":[[60,13]]},"1455":{"position":[[60,13]]},"1457":{"position":[[60,13]]},"1459":{"position":[[50,13]]},"1461":{"position":[[60,13]]},"1463":{"position":[[154,13]]},"1465":{"position":[[140,13]]},"1467":{"position":[[140,13]]},"1469":{"position":[[154,13]]},"1471":{"position":[[131,13]]},"1475":{"position":[[50,13]]},"1478":{"position":[[58,13]]},"1480":{"position":[[58,13]]},"1482":{"position":[[58,13]]},"1484":{"position":[[58,13]]},"1486":{"position":[[58,13]]},"1488":{"position":[[68,13]]},"1490":{"position":[[58,13]]},"1493":{"position":[[49,13]]},"1495":{"position":[[49,13]]},"1498":{"position":[[118,13]]},"1500":{"position":[[44,13]]},"1502":{"position":[[44,13]]},"1504":{"position":[[160,13]]},"1506":{"position":[[44,13]]},"1508":{"position":[[44,13]]},"1510":{"position":[[167,13]]},"1573":{"position":[[101,8]]},"1577":{"position":[[99,8]]},"1632":{"position":[[166,8]]}}}],["specifi",{"_index":822,"t":{"981":{"position":[[3796,7]]}}}],["speed",{"_index":1843,"t":{"1304":{"position":[[212,6]]}}}],["sql",{"_index":882,"t":{"1004":{"position":[[166,3]]},"1008":{"position":[[546,3]]},"1027":{"position":[[867,3]]},"1345":{"position":[[170,3],[301,3]]}}}],["sqlite",{"_index":485,"t":{"888":{"position":[[11,6]]},"890":{"position":[[194,6]]},"954":{"position":[[86,15]]},"981":{"position":[[3830,6]]},"1004":{"position":[[213,6],[342,6],[349,6],[377,6],[432,7]]},"1012":{"position":[[18,6],[35,6],[88,6]]},"1019":{"position":[[203,6]]},"1035":{"position":[[14,6],[238,6]]}}}],["sqlite3",{"_index":12,"t":{"823":{"position":[[55,7]]},"1392":{"position":[[404,8]]},"1463":{"position":[[534,8]]},"1498":{"position":[[428,8]]},"1500":{"position":[[317,8]]},"1502":{"position":[[342,8]]},"1504":{"position":[[494,8]]},"1506":{"position":[[320,8]]},"1508":{"position":[[352,8]]},"1510":{"position":[[451,8]]}}}],["ssd",{"_index":1264,"t":{"1170":{"position":[[353,7]]},"1180":{"position":[[36,3]]},"1254":{"position":[[121,3]]}}}],["ssd。etcd",{"_index":1262,"t":{"1170":{"position":[[281,8]]}}}],["ssl",{"_index":696,"t":{"937":{"position":[[1704,3],[1721,3]]},"954":{"position":[[892,3],[913,3]]},"981":{"position":[[5122,3],[5150,3]]},"1061":{"position":[[591,4]]}}}],["stabl",{"_index":1423,"t":{"1244":{"position":[[604,6]]},"1358":{"position":[[71,6]]}}}],["stable\"。可选项：stable、latest、test",{"_index":1438,"t":{"1244":{"position":[[1457,35]]}}}],["stage",{"_index":717,"t":{"947":{"position":[[153,6],[383,6],[639,18],[658,5]]}}}],["standard",{"_index":562,"t":{"920":{"position":[[542,8]]},"981":{"position":[[553,8]]}}}],["standard（pss",{"_index":1309,"t":{"1210":{"position":[[55,27]]}}}],["stargz",{"_index":436,"t":{"878":{"position":[[378,6],[445,6]]},"880":{"position":[[218,6]]}}}],["start",{"_index":575,"t":{"920":{"position":[[1064,8]]},"925":{"position":[[124,5]]},"937":{"position":[[973,5],[1025,5]]},"947":{"position":[[160,5]]},"981":{"position":[[6389,8]]},"1138":{"position":[[589,5]]},"1284":{"position":[[288,8]]},"1288":{"position":[[86,6]]}}}],["started/common/cgroup2",{"_index":284,"t":{"852":{"position":[[56,24]]}}}],["starter",{"_index":1680,"t":{"1284":{"position":[[455,7]]}}}],["startup",{"_index":1643,"t":{"1282":{"position":[[252,8]]}}}],["start，prepare，rotate，reencrypt_request，reencrypt_active，reencrypt_finish",{"_index":729,"t":{"947":{"position":[[664,78]]}}}],["stat",{"_index":2047,"t":{"1392":{"position":[[668,6]]},"1398":{"position":[[261,4]]},"1400":{"position":[[242,4]]},"1402":{"position":[[248,4]]},"1404":{"position":[[251,4]]},"1406":{"position":[[173,4]]},"1408":{"position":[[224,4]]},"1410":{"position":[[178,4]]},"1412":{"position":[[178,4]]},"1463":{"position":[[798,6]]},"1498":{"position":[[692,6]]},"1500":{"position":[[581,6]]},"1502":{"position":[[606,6]]},"1504":{"position":[[758,6]]},"1506":{"position":[[584,6]]},"1508":{"position":[[616,6]]},"1510":{"position":[[715,6]]},"1525":{"position":[[195,4]]},"1527":{"position":[[278,4]]},"1529":{"position":[[197,4]]},"1531":{"position":[[203,4]]},"1533":{"position":[[136,4]]},"1535":{"position":[[136,4]]}}}],["state",{"_index":571,"t":{"920":{"position":[[867,5]]},"981":{"position":[[1187,5]]},"1417":{"position":[[545,5]]},"1419":{"position":[[526,5]]},"1437":{"position":[[539,5]]},"1490":{"position":[[511,5]]}}}],["statu",{"_index":90,"t":{"838":{"position":[[474,6],[913,6]]},"856":{"position":[[20,6]]},"947":{"position":[[23,6],[102,6],[120,7],[332,6],[350,7],[590,13]]},"1033":{"position":[[1146,6]]},"1144":{"position":[[449,6]]},"1190":{"position":[[334,6]]}}}],["status.loadbalancer.ingress",{"_index":1380,"t":{"1222":{"position":[[299,27]]}}}],["stderr",{"_index":941,"t":{"1047":{"position":[[62,7]]}}}],["stdout",{"_index":940,"t":{"1047":{"position":[[53,6]]}}}],["stdout。token",{"_index":865,"t":{"998":{"position":[[579,12]]}}}],["step",{"_index":1866,"t":{"1308":{"position":[[323,5]]},"1310":{"position":[[366,5]]},"1537":{"position":[[118,5]]},"1539":{"position":[[118,5]]}}}],["stop",{"_index":613,"t":{"925":{"position":[[66,4]]},"937":{"position":[[898,4]]}}}],["storag",{"_index":795,"t":{"971":{"position":[[22,7]]},"981":{"position":[[5605,7],[5624,9],[5648,7],[5683,7],[5844,8]]},"1136":{"position":[[66,7]]},"1288":{"position":[[1793,7]]},"1308":{"position":[[178,7]]},"1328":{"position":[[287,7]]},"1332":{"position":[[178,8]]},"1338":{"position":[[160,8]]},"1423":{"position":[[2659,7]]},"1425":{"position":[[2607,7]]},"1427":{"position":[[2476,7]]},"1429":{"position":[[2425,7]]},"1431":{"position":[[2438,7]]},"1433":{"position":[[2551,7]]},"1435":{"position":[[2512,7]]},"1439":{"position":[[2585,7]]},"1441":{"position":[[2566,7]]},"1443":{"position":[[2462,7]]},"1445":{"position":[[2578,7]]},"1447":{"position":[[2443,7]]},"1449":{"position":[[2358,7]]},"1459":{"position":[[2533,7]]},"1465":{"position":[[2575,7]]},"1467":{"position":[[2491,7]]},"1469":{"position":[[2497,7]]},"1542":{"position":[[2842,7]]},"1544":{"position":[[2856,7]]},"1546":{"position":[[2971,7]]}}}],["storage.yaml",{"_index":1206,"t":{"1144":{"position":[[331,12]]}}}],["storageclassnam",{"_index":1934,"t":{"1332":{"position":[[128,17]]},"1338":{"position":[[112,17]]}}}],["storageo",{"_index":1929,"t":{"1328":{"position":[[229,9]]}}}],["store",{"_index":1862,"t":{"1308":{"position":[[126,5]]}}}],["strategi",{"_index":1812,"t":{"1294":{"position":[[392,10]]}}}],["stream",{"_index":1327,"t":{"1210":{"position":[[845,10]]},"1286":{"position":[[704,10],[1327,10]]},"1550":{"position":[[340,9],[587,10]]}}}],["streamingconnectionidletimeout",{"_index":2278,"t":{"1550":{"position":[[79,30]]}}}],["string",{"_index":978,"t":{"1059":{"position":[[1076,6]]},"1425":{"position":[[397,8]]}}}],["strip",{"_index":207,"t":{"840":{"position":[[280,5]]}}}],["strongswan",{"_index":1108,"t":{"1115":{"position":[[883,10],[1146,10]]}}}],["subdomain",{"_index":1190,"t":{"1138":{"position":[[506,9]]}}}],["subject",{"_index":777,"t":{"963":{"position":[[284,7]]},"981":{"position":[[1089,7]]},"1031":{"position":[[408,7]]},"1103":{"position":[[377,9]]},"1280":{"position":[[4819,9],[5130,9],[5453,9],[5749,9]]},"1583":{"position":[[96,9]]}}}],["subset",{"_index":2290,"t":{"1566":{"position":[[402,6],[623,6]]}}}],["successfulli",{"_index":1343,"t":{"1210":{"position":[[1753,13]]}}}],["such",{"_index":1640,"t":{"1280":{"position":[[6435,4]]},"1318":{"position":[[421,4]]},"1427":{"position":[[222,4]]},"1502":{"position":[[2319,4],[2559,4],[2799,4]]},"1508":{"position":[[2364,4]]},"1513":{"position":[[72,4]]}}}],["sudo",{"_index":85,"t":{"838":{"position":[[410,4],[863,4]]},"840":{"position":[[264,4],[373,4]]},"869":{"position":[[437,4]]},"871":{"position":[[237,4],[502,4]]},"1075":{"position":[[64,4],[113,4]]},"1101":{"position":[[178,4]]},"1103":{"position":[[477,4]]},"1105":{"position":[[24,4],[89,4]]},"1107":{"position":[[30,4]]},"1109":{"position":[[0,4],[226,4]]},"1111":{"position":[[0,4],[48,4],[112,4]]},"1284":{"position":[[399,4],[1422,4],[1451,4]]},"1364":{"position":[[53,4],[92,4],[145,4],[182,4]]}}}],["suffici",{"_index":1834,"t":{"1300":{"position":[[189,10]]},"1302":{"position":[[188,10]]},"1312":{"position":[[130,10]]}}}],["suggest",{"_index":2322,"t":{"1630":{"position":[[109,9]]}}}],["suit",{"_index":2192,"t":{"1475":{"position":[[1033,7]]},"1566":{"position":[[586,6]]}}}],["suitabl",{"_index":2168,"t":{"1451":{"position":[[195,8]]}}}],["suites=tls_aes_128_gcm_sha256,tls_aes_256_gcm_sha384,tls_chacha20_poly1305_sha256",{"_index":2184,"t":{"1475":{"position":[[183,82]]}}}],["suites=tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_gcm_sha256",{"_index":2291,"t":{"1566":{"position":[[660,302]]}}}],["suites=tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_chacha20_poly1305",{"_index":1738,"t":{"1288":{"position":[[2003,238]]}}}],["supervisor",{"_index":490,"t":{"894":{"position":[[105,12]]},"906":{"position":[[322,10],[350,10]]},"920":{"position":[[1647,10],[1687,10]]},"977":{"position":[[39,10]]},"981":{"position":[[8487,10],[8749,10],[8789,10]]},"1129":{"position":[[75,10]]},"1174":{"position":[[93,10]]}}}],["supplementalgroup",{"_index":1605,"t":{"1280":{"position":[[1869,19],[2954,19],[3507,19],[3964,19]]}}}],["support",{"_index":1565,"t":{"1280":{"position":[[52,7],[868,7]]},"1613":{"position":[[60,7]]}}}],["sustain",{"_index":1881,"t":{"1312":{"position":[[416,8]]}}}],["svc",{"_index":1362,"t":{"1210":{"position":[[2987,3]]},"1222":{"position":[[156,3]]},"1280":{"position":[[5308,3]]}}}],["svccontroller.k3s.cattle.io/enablelb=tru",{"_index":1382,"t":{"1226":{"position":[[5,41]]},"1228":{"position":[[131,41],[232,41]]}}}],["svccontroller.k3s.cattle.io/lbpool=pool1",{"_index":1385,"t":{"1228":{"position":[[88,40],[292,40]]}}}],["svccontroller.k3s.cattle.io/lbpool=pool2",{"_index":1387,"t":{"1228":{"position":[[189,40],[417,40]]}}}],["svccontroller.k3s.cattle.io/svcnam",{"_index":1658,"t":{"1282":{"position":[[1661,36],[2344,36]]}}}],["svclb",{"_index":111,"t":{"838":{"position":[[750,5]]},"1280":{"position":[[3628,5],[4599,5],[5621,5],[5788,5]]}}}],["svclbtraefik",{"_index":1657,"t":{"1282":{"position":[[1585,12],[2268,12]]}}}],["swanctl",{"_index":1107,"t":{"1115":{"position":[[867,7],[1157,7]]},"1117":{"position":[[106,7]]}}}],["swap",{"_index":1773,"t":{"1288":{"position":[[3780,4]]},"1548":{"position":[[1297,4],[2520,4]]},"1560":{"position":[[1488,4],[2711,4]]}}}],["sync",{"_index":1890,"t":{"1316":{"position":[[330,4]]}}}],["syntax",{"_index":2212,"t":{"1502":{"position":[[2125,6],[2365,6],[2605,6]]},"1508":{"position":[[2170,6]]}}}],["sysctl",{"_index":1155,"t":{"1125":{"position":[[62,6]]},"1276":{"position":[[352,6]]},"1280":{"position":[[2279,7]]}}}],["system",{"_index":94,"t":{"838":{"position":[[499,6],[568,6],[630,6],[689,6],[743,6],[793,6]]},"846":{"position":[[197,6]]},"882":{"position":[[181,6],[293,6]]},"894":{"position":[[499,6]]},"969":{"position":[[580,7]]},"981":{"position":[[2380,8],[7466,6],[7548,6]]},"1059":{"position":[[133,6],[356,6]]},"1061":{"position":[[470,6]]},"1085":{"position":[[151,6],[190,6],[235,6],[270,6],[325,6]]},"1134":{"position":[[149,6],[268,6]]},"1144":{"position":[[474,6],[543,6],[605,6]]},"1210":{"position":[[1020,14],[1056,6],[1493,7],[1514,7],[1522,6],[1560,6],[1672,6],[2862,6]]},"1222":{"position":[[102,6]]},"1254":{"position":[[8,6]]},"1272":{"position":[[553,7]]},"1280":{"position":[[819,7],[840,7],[2139,7],[2188,6],[3176,6],[4390,6],[4992,6],[5288,6],[5349,6],[5659,6],[5899,6],[5990,6],[6493,6]]},"1282":{"position":[[412,6],[503,6],[1402,6],[1622,6],[1863,6],[2085,6],[2305,6],[2546,6]]},"1294":{"position":[[332,7]]},"1296":{"position":[[211,6],[281,7]]},"1312":{"position":[[238,6],[406,6],[439,6]]},"1314":{"position":[[107,8]]},"1318":{"position":[[722,7]]},"1336":{"position":[[250,6]]},"1343":{"position":[[83,6]]},"1348":{"position":[[16,6],[365,6],[488,6],[643,6],[709,6],[776,36]]},"1350":{"position":[[0,6]]},"1352":{"position":[[238,6],[414,6],[586,6],[821,6],[1584,6],[1628,6]]},"1358":{"position":[[361,36]]},"1372":{"position":[[94,7]]},"1374":{"position":[[94,7]]},"1376":{"position":[[94,7]]},"1378":{"position":[[94,7]]},"1380":{"position":[[94,7]]},"1382":{"position":[[94,7]]},"1384":{"position":[[94,7]]},"1386":{"position":[[94,7]]},"1388":{"position":[[94,7]]},"1390":{"position":[[94,7]]},"1396":{"position":[[94,7]]},"1398":{"position":[[84,7]]},"1400":{"position":[[84,7]]},"1402":{"position":[[84,7]]},"1404":{"position":[[84,7]]},"1406":{"position":[[84,7]]},"1408":{"position":[[84,7]]},"1410":{"position":[[84,7]]},"1412":{"position":[[84,7]]},"1521":{"position":[[94,7]]},"1523":{"position":[[94,7]]},"1525":{"position":[[84,7]]},"1527":{"position":[[84,7]]},"1529":{"position":[[84,7]]},"1531":{"position":[[84,7]]},"1542":{"position":[[362,7]]},"1544":{"position":[[348,7]]},"1546":{"position":[[404,7]]},"1548":{"position":[[334,7]]},"1550":{"position":[[391,7]]},"1552":{"position":[[368,7]]},"1554":{"position":[[368,7]]},"1556":{"position":[[242,7]]},"1558":{"position":[[336,7]]},"1560":{"position":[[552,7]]},"1562":{"position":[[418,7]]},"1564":{"position":[[272,7]]},"1566":{"position":[[977,7]]},"1586":{"position":[[98,6]]}}}],["system.slice/k3s.servic",{"_index":1471,"t":{"1252":{"position":[[128,31]]}}}],["system:authent",{"_index":1631,"t":{"1280":{"position":[[4849,20]]}}}],["system:bootstrappers:k3s:default",{"_index":868,"t":{"998":{"position":[[830,46]]}}}],["system:mast",{"_index":2299,"t":{"1581":{"position":[[37,14]]}}}],["system:nod",{"_index":1632,"t":{"1280":{"position":[[5196,12]]}}}],["system:serviceaccount",{"_index":1633,"t":{"1280":{"position":[[5519,22]]}}}],["system_031e74b5",{"_index":173,"t":{"838":{"position":[[2095,15]]}}}],["system_07abe831",{"_index":146,"t":{"838":{"position":[[1392,15],[1709,15]]}}}],["system_2dbd22bf",{"_index":163,"t":{"838":{"position":[[1912,15],[2603,15]]}}}],["system_d05725df",{"_index":184,"t":{"838":{"position":[[2268,15],[2428,15]]}}}],["system_d46f10c6",{"_index":133,"t":{"838":{"position":[[1044,15],[1207,15],[1548,15]]}}}],["systemctl",{"_index":291,"t":{"852":{"position":[[438,9],[472,9]]},"856":{"position":[[3,9]]},"865":{"position":[[16,9],[407,9]]},"925":{"position":[[56,9],[114,9]]},"937":{"position":[[888,9],[963,9],[1015,9]]},"943":{"position":[[193,9],[688,9]]},"945":{"position":[[173,9],[676,9]]},"1129":{"position":[[675,9],[699,9]]},"1284":{"position":[[1427,9],[1456,9]]},"1364":{"position":[[58,9],[97,9]]},"1542":{"position":[[412,9],[436,9]]},"1544":{"position":[[398,9],[422,9]]},"1546":{"position":[[454,9],[478,9]]},"1548":{"position":[[384,9],[408,9]]},"1550":{"position":[[441,9],[465,9]]},"1552":{"position":[[418,9],[442,9]]},"1554":{"position":[[418,9],[442,9]]},"1556":{"position":[[292,9],[316,9]]},"1558":{"position":[[386,9],[410,9]]},"1560":{"position":[[602,9],[626,9]]},"1562":{"position":[[468,9],[492,9]]},"1564":{"position":[[322,9],[346,9]]},"1566":{"position":[[1027,9],[1051,9]]}}}],["systemd",{"_index":51,"t":{"836":{"position":[[43,7],[250,7]]},"852":{"position":[[660,7],[728,7]]},"854":{"position":[[136,7]]},"860":{"position":[[20,7],[96,7]]},"869":{"position":[[116,7]]},"931":{"position":[[1270,10]]},"933":{"position":[[1004,10]]},"943":{"position":[[185,7],[680,7]]},"945":{"position":[[165,7],[668,7]]},"1047":{"position":[[114,7]]},"1089":{"position":[[48,7]]},"1117":{"position":[[392,7]]},"1192":{"position":[[87,7]]},"1240":{"position":[[31,7]]},"1244":{"position":[[48,7],[829,7],[1017,7],[1142,7],[1608,7]]},"1252":{"position":[[86,7],[105,7]]},"1284":{"position":[[1112,7]]},"1360":{"position":[[99,7]]},"1364":{"position":[[0,7],[32,7]]},"1368":{"position":[[1801,7]]}}}],["system（必需）、ci",{"_index":1334,"t":{"1210":{"position":[[996,14]]}}}],["s|l|o|t|m|a",{"_index":2215,"t":{"1502":{"position":[[2226,14],[2466,14],[2706,14]]},"1508":{"position":[[2271,14]]}}}],["t",{"_index":517,"t":{"902":{"position":[[27,1]]},"920":{"position":[[598,1]]},"956":{"position":[[27,1]]},"981":{"position":[[2615,1]]}}}],["tabl",{"_index":730,"t":{"947":{"position":[[908,15]]}}}],["tag",{"_index":996,"t":{"1061":{"position":[[522,4]]},"1160":{"position":[[172,3]]}}}],["tail",{"_index":2049,"t":{"1392":{"position":[[809,4]]},"1415":{"position":[[272,4]]},"1423":{"position":[[502,4]]},"1425":{"position":[[485,4]]},"1427":{"position":[[359,4]]},"1429":{"position":[[325,4]]},"1431":{"position":[[338,4]]},"1433":{"position":[[429,4]]},"1435":{"position":[[336,4]]},"1439":{"position":[[402,4]]},"1441":{"position":[[424,4]]},"1443":{"position":[[320,4]]},"1445":{"position":[[455,4]]},"1447":{"position":[[316,4]]},"1449":{"position":[[267,4]]},"1459":{"position":[[397,4]]},"1463":{"position":[[939,4]]},"1465":{"position":[[468,4]]},"1467":{"position":[[399,4]]},"1469":{"position":[[411,4]]},"1471":{"position":[[453,4]]},"1475":{"position":[[1005,4]]},"1478":{"position":[[363,4]]},"1480":{"position":[[293,4]]},"1482":{"position":[[313,4]]},"1484":{"position":[[409,4]]},"1486":{"position":[[346,4]]},"1493":{"position":[[271,4]]},"1495":{"position":[[281,4]]},"1498":{"position":[[833,4]]},"1500":{"position":[[722,4]]},"1502":{"position":[[747,4]]},"1504":{"position":[[899,4]]},"1506":{"position":[[725,4]]},"1508":{"position":[[757,4]]},"1510":{"position":[[856,4]]},"1516":{"position":[[151,4]]},"1542":{"position":[[662,4]]},"1544":{"position":[[648,4]]},"1546":{"position":[[704,4]]},"1548":{"position":[[514,4]]},"1550":{"position":[[571,4]]},"1560":{"position":[[732,4]]}}}],["tailscal",{"_index":1159,"t":{"1127":{"position":[[77,9]]},"1131":{"position":[[45,9],[65,9],[100,12],[129,9],[400,10],[467,9],[608,9]]}}}],["taint",{"_index":325,"t":{"858":{"position":[[37,5]]},"906":{"position":[[130,5]]},"918":{"position":[[37,5],[200,5]]},"920":{"position":[[1107,5],[1164,6]]},"981":{"position":[[6432,5],[6489,6]]},"1025":{"position":[[832,5],[864,5]]},"1095":{"position":[[330,6],[455,7],[582,6]]}}}],["take",{"_index":2170,"t":{"1459":{"position":[[304,5]]}}}],["taken",{"_index":2225,"t":{"1518":{"position":[[188,5]]}}}],["tar",{"_index":205,"t":{"840":{"position":[[269,3]]},"1075":{"position":[[30,3],[40,3]]},"1083":{"position":[[53,3],[61,3],[120,3]]}}}],["targetnamespac",{"_index":962,"t":{"1059":{"position":[[424,16]]}}}],["tcp",{"_index":919,"t":{"1031":{"position":[[215,5]]},"1174":{"position":[[14,3],[65,3],[167,3]]},"1282":{"position":[[823,3]]}}}],["tcpdump",{"_index":478,"t":{"884":{"position":[[517,7],[544,7],[576,7]]}}}],["team",{"_index":1989,"t":{"1368":{"position":[[374,6]]}}}],["termin",{"_index":1323,"t":{"1210":{"position":[[756,11]]},"1286":{"position":[[615,11],[1238,11]]},"1292":{"position":[[233,11],[350,11]]},"1312":{"position":[[18,10],[357,10]]},"1478":{"position":[[172,10],[244,10],[379,11]]}}}],["terraform",{"_index":1950,"t":{"1343":{"position":[[42,18]]}}}],["test",{"_index":1882,"t":{"1312":{"position":[[460,6]]},"1334":{"position":[[48,4],[105,4]]},"1340":{"position":[[48,4],[105,4]]},"1368":{"position":[[642,6],[832,7],[1123,8],[1210,4],[1719,4],[1937,5]]},"1398":{"position":[[197,4]]},"1400":{"position":[[174,4]]},"1402":{"position":[[180,4]]},"1404":{"position":[[182,4]]},"1510":{"position":[[34,5]]},"1527":{"position":[[216,4]]},"1542":{"position":[[492,4]]},"1544":{"position":[[478,4]]},"1546":{"position":[[534,4]]}}}],["text",{"_index":2216,"t":{"1502":{"position":[[2261,5],[2501,5],[2741,5]]},"1508":{"position":[[2306,5]]}}}],["text、json（默认值：text",{"_index":878,"t":{"998":{"position":[[1742,28]]}}}],["tgz",{"_index":969,"t":{"1059":{"position":[[678,6],[1357,7]]}}}],["therefor",{"_index":1641,"t":{"1280":{"position":[[6511,10]]}}}],["third",{"_index":2313,"t":{"1620":{"position":[[102,5]]}}}],["though",{"_index":1822,"t":{"1296":{"position":[[294,6]]}}}],["threshold",{"_index":1871,"t":{"1312":{"position":[[36,9],[489,9]]},"1478":{"position":[[190,9],[218,10],[398,10]]}}}],["threshold=10",{"_index":1325,"t":{"1210":{"position":[[775,13]]},"1286":{"position":[[634,13],[1257,13]]},"1478":{"position":[[262,12]]}}}],["through",{"_index":1796,"t":{"1290":{"position":[[154,7]]}}}],["tiller",{"_index":1004,"t":{"1063":{"position":[[176,6]]}}}],["time",{"_index":830,"t":{"981":{"position":[[4610,4]]},"1298":{"position":[[154,4]]},"1306":{"position":[[418,4],[435,4]]},"1312":{"position":[[298,5]]}}}],["time=\"2022",{"_index":2135,"t":{"1423":{"position":[[723,10]]},"1425":{"position":[[671,10]]},"1427":{"position":[[540,10]]},"1429":{"position":[[489,10]]},"1431":{"position":[[502,10]]},"1433":{"position":[[615,10]]},"1435":{"position":[[576,10]]},"1439":{"position":[[649,10]]},"1441":{"position":[[630,10]]},"1443":{"position":[[526,10]]},"1445":{"position":[[642,10]]},"1447":{"position":[[507,10]]},"1449":{"position":[[422,10]]},"1459":{"position":[[597,10]]},"1465":{"position":[[639,10],[2815,10]]},"1467":{"position":[[555,10]]},"1469":{"position":[[561,10]]},"1480":{"position":[[448,10]]},"1482":{"position":[[516,10]]},"1484":{"position":[[601,10]]},"1486":{"position":[[498,10]]},"1493":{"position":[[407,10]]},"1495":{"position":[[481,10]]},"1542":{"position":[[906,10]]},"1544":{"position":[[920,10]]},"1546":{"position":[[1035,10]]},"1548":{"position":[[712,10],[1935,10]]},"1560":{"position":[[903,10],[2126,10]]}}}],["timeout",{"_index":757,"t":{"954":{"position":[[1218,7]]},"981":{"position":[[5543,7],[5565,7]]},"1059":{"position":[[1184,7]]},"1304":{"position":[[26,7],[99,7],[147,7],[441,7]]},"1550":{"position":[[614,8]]}}}],["timeout=300",{"_index":1321,"t":{"1210":{"position":[[679,13]]},"1286":{"position":[[538,13],[1161,13]]}}}],["timeout=5m",{"_index":1329,"t":{"1210":{"position":[[872,11]]},"1286":{"position":[[731,11],[1354,11]]},"1550":{"position":[[366,10]]}}}],["timestamp",{"_index":828,"t":{"981":{"position":[[4512,11]]}}}],["timestamp>（默认值：“etcd",{"_index":752,"t":{"954":{"position":[[483,20]]}}}],["tl",{"_index":15,"t":{"823":{"position":[[133,3]]},"954":{"position":[[162,3],[236,3],[307,3]]},"963":{"position":[[233,3],[253,3]]},"981":{"position":[[1013,3],[1129,3],[3920,3],[4054,3],[4181,3]]},"987":{"position":[[298,3],[358,3]]},"989":{"position":[[85,3]]},"1006":{"position":[[317,3],[375,3],[462,3],[601,3]]},"1008":{"position":[[609,3],[613,6]]},"1025":{"position":[[666,3]]},"1031":{"position":[[330,3],[382,3]]},"1093":{"position":[[171,3],[321,3]]},"1148":{"position":[[310,3]]},"1154":{"position":[[25,3],[62,4],[67,3],[215,3]]},"1156":{"position":[[11,3],[266,4],[525,4]]},"1158":{"position":[[11,3],[332,3]]},"1288":{"position":[[1817,3],[1901,3],[1992,3],[4218,3],[4290,3]]},"1392":{"position":[[1114,4],[1444,4]]},"1423":{"position":[[77,3],[2683,3],[2758,3]]},"1425":{"position":[[76,3],[2631,3],[2706,3]]},"1427":{"position":[[2500,3],[2575,3]]},"1429":{"position":[[2449,3],[2524,3]]},"1431":{"position":[[2462,3],[2537,3]]},"1433":{"position":[[2575,3],[2650,3]]},"1435":{"position":[[2536,3],[2611,3]]},"1439":{"position":[[2609,3],[2684,3]]},"1441":{"position":[[2590,3],[2665,3]]},"1443":{"position":[[2486,3],[2561,3]]},"1445":{"position":[[2602,3],[2677,3]]},"1447":{"position":[[2467,3],[2542,3]]},"1449":{"position":[[2382,3],[2457,3]]},"1459":{"position":[[2557,3],[2632,3]]},"1463":{"position":[[77,3],[1244,4],[1574,4]]},"1465":{"position":[[77,3],[243,3],[294,3],[341,3],[497,3],[530,3],[2599,3],[2674,3]]},"1467":{"position":[[77,3],[2515,3],[2590,3]]},"1469":{"position":[[77,3],[2521,3],[2596,3]]},"1475":{"position":[[172,3],[1021,4]]},"1498":{"position":[[78,3],[1138,4],[1468,4]]},"1500":{"position":[[1027,4],[1357,4]]},"1502":{"position":[[147,3],[1052,4],[1382,4]]},"1504":{"position":[[83,3],[1204,4],[1534,4]]},"1506":{"position":[[1030,4],[1360,4]]},"1508":{"position":[[152,3],[1062,4],[1392,4],[2048,4],[2084,4]]},"1510":{"position":[[1161,4],[1491,4]]},"1542":{"position":[[2866,3],[2941,3]]},"1544":{"position":[[2880,3],[2955,3]]},"1546":{"position":[[2995,3],[3070,3]]},"1548":{"position":[[1743,3],[1806,3],[2966,3],[3029,3]]},"1560":{"position":[[447,3],[494,3],[761,3],[794,3],[1934,3],[1997,3],[3157,3],[3220,3]]},"1566":{"position":[[575,3],[649,3]]}}}],["tls=fals",{"_index":2069,"t":{"1392":{"position":[[1970,12]]},"1463":{"position":[[2100,12]]},"1498":{"position":[[1994,12]]},"1500":{"position":[[1883,12]]},"1502":{"position":[[188,9],[1908,12]]},"1504":{"position":[[2060,12]]},"1506":{"position":[[1886,12]]},"1508":{"position":[[198,9],[1918,12],[2137,9],[2399,9]]},"1510":{"position":[[2017,12]]}}}],["tls_ecdhe_ecdsa_with_aes_128_cbc_sha,tls_ecdhe_ecdsa_with_aes_128_gcm_sha256",{"_index":2185,"t":{"1475":{"position":[[266,77]]}}}],["tls_ecdhe_ecdsa_with_aes_128_gcm_sha256,tls_ecdhe_rsa_with_aes_128_gcm_sha256,tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_256_gcm_sha384,tls_rsa_with_aes_128_gcm_sha256",{"_index":2289,"t":{"1566":{"position":[[98,295]]}}}],["tls_ecdhe_ecdsa_with_aes_256_cbc_sha,tls_ecdhe_ecdsa_with_aes_256_gcm_sha384",{"_index":2186,"t":{"1475":{"position":[[344,77]]}}}],["tls_ecdhe_ecdsa_with_chacha20_poly1305,tls_ecdhe_ecdsa_with_chacha20_poly1305_sha256",{"_index":2187,"t":{"1475":{"position":[[422,85]]}}}],["tls_ecdhe_rsa_with_3des_ede_cbc_sha,tls_ecdhe_rsa_with_aes_128_cbc_sha,tls_ecdhe_rsa_with_aes_128_gcm_sha256",{"_index":2188,"t":{"1475":{"position":[[508,109]]}}}],["tls_ecdhe_rsa_with_aes_256_cbc_sha,tls_ecdhe_rsa_with_aes_256_gcm_sha384,tls_ecdhe_rsa_with_chacha20_poly1305",{"_index":2189,"t":{"1475":{"position":[[618,110]]}}}],["tls_ecdhe_rsa_with_chacha20_poly1305_sha256,tls_rsa_with_3des_ede_cbc_sha,tls_rsa_with_aes_128_cbc_sha",{"_index":2190,"t":{"1475":{"position":[[729,103]]}}}],["tls_rsa_with_aes_128_gcm_sha256,tls_rsa_with_aes_256_cbc_sha,tls_rsa_with_aes_256_gcm_sha384",{"_index":2191,"t":{"1475":{"position":[[833,92]]}}}],["tlscertfil",{"_index":2282,"t":{"1560":{"position":[[79,11]]}}}],["tlsciphersuit",{"_index":2288,"t":{"1566":{"position":[[79,15]]}}}],["tlsprivatekeyfil",{"_index":2283,"t":{"1560":{"position":[[168,17]]}}}],["token",{"_index":48,"t":{"834":{"position":[[34,16],[51,6],[83,16],[113,6],[135,5]]},"896":{"position":[[623,5],[634,16],[655,5]]},"902":{"position":[[13,5],[57,5]]},"916":{"position":[[101,5]]},"920":{"position":[[584,5],[616,5],[663,5],[690,5]]},"927":{"position":[[188,5]]},"929":{"position":[[540,5]]},"931":{"position":[[302,5],[338,5],[801,5],[1218,5],[1244,5],[1253,5]]},"933":{"position":[[223,5],[621,5],[761,5],[938,5],[978,5],[987,5]]},"935":{"position":[[47,5],[128,5],[572,5]]},"951":{"position":[[99,5]]},"956":{"position":[[13,5],[76,5],[144,5],[213,5]]},"979":{"position":[[136,5]]},"981":{"position":[[2601,5],[2706,5],[2753,5],[2785,5],[2900,5]]},"983":{"position":[[7,5],[13,16]]},"985":{"position":[[4,5]]},"987":{"position":[[3,5],[21,5],[102,5],[279,18],[314,32],[445,5],[534,5],[546,5]]},"989":{"position":[[2,5],[32,6],[46,17]]},"991":{"position":[[12,13],[33,5],[48,5],[91,5],[121,5]]},"993":{"position":[[49,5],[107,5],[169,5],[208,6],[222,5],[399,5]]},"995":{"position":[[12,5],[27,5],[102,5],[119,19],[145,5],[193,11],[211,13],[232,5]]},"997":{"position":[[80,5],[103,5],[164,5]]},"998":{"position":[[14,5],[32,5],[48,5],[69,5],[96,5],[121,6],[139,5],[220,6],[265,6],[326,6],[388,6],[443,5],[456,8],[493,7],[505,5],[530,13],[544,6],[557,10],[797,5],[824,5],[882,7],[907,5],[985,5],[1030,5],[1052,14],[1067,12],[1080,5],[1239,5],[1273,6],[1293,11],[1340,5],[1524,5],[1549,10],[1560,5]]},"1010":{"position":[[93,5],[132,5],[145,5],[181,5]]},"1012":{"position":[[142,12]]},"1025":{"position":[[109,19],[150,16],[167,6],[225,6]]},"1027":{"position":[[44,6],[73,5],[136,6],[188,5],[822,5],[882,6]]},"1029":{"position":[[182,5]]},"1051":{"position":[[14,5],[34,5]]},"1080":{"position":[[265,5]]},"1089":{"position":[[368,5],[697,5],[782,5],[910,5],[1135,5]]},"1091":{"position":[[439,5]]},"1095":{"position":[[227,6],[528,6]]},"1097":{"position":[[69,6]]},"1105":{"position":[[72,5],[157,5],[170,8]]},"1190":{"position":[[196,5],[202,7]]},"1240":{"position":[[1048,5]]},"1288":{"position":[[3111,5]]},"1306":{"position":[[174,5],[237,5],[333,5]]},"1318":{"position":[[469,5]]},"1345":{"position":[[214,5],[316,6]]},"1417":{"position":[[244,5],[354,5]]},"1548":{"position":[[830,5],[2053,5]]},"1560":{"position":[[1021,5],[2244,5]]},"1579":{"position":[[120,6]]}}}],["token=secret",{"_index":904,"t":{"1025":{"position":[[282,12],[507,12]]},"1027":{"position":[[260,12],[485,12]]},"1080":{"position":[[527,12],[698,13]]}}}],["tokenreview",{"_index":2226,"t":{"1518":{"position":[[256,13]]}}}],["token。[token",{"_index":864,"t":{"998":{"position":[[471,13]]}}}],["token。ag",{"_index":857,"t":{"995":{"position":[[90,11]]}}}],["token。bootstrap",{"_index":859,"t":{"997":{"position":[[148,15]]}}}],["token。以前，k3",{"_index":912,"t":{"1027":{"position":[[848,12]]}}}],["token。因此，token",{"_index":856,"t":{"993":{"position":[[325,14]]}}}],["token，则会使用随机密码创建。serv",{"_index":854,"t":{"993":{"position":[[25,23]]}}}],["top",{"_index":1473,"t":{"1252":{"position":[[279,3]]},"1276":{"position":[[218,3]]}}}],["tradit",{"_index":667,"t":{"935":{"position":[[454,11]]}}}],["traefik",{"_index":23,"t":{"823":{"position":[[250,7],[445,7]]},"838":{"position":[[650,7],[756,7],[800,7],[1025,7],[1188,7],[1282,7],[1290,9],[1529,7]]},"981":{"position":[[5829,8]]},"1059":{"position":[[1522,7]]},"1061":{"position":[[276,7],[446,7],[514,7]]},"1142":{"position":[[126,13],[140,7]]},"1144":{"position":[[725,8]]},"1216":{"position":[[0,7],[67,7],[208,7],[429,25],[496,7],[523,11],[587,7],[606,7],[663,7],[686,7],[715,7],[735,7]]},"1250":{"position":[[101,13]]},"1282":{"position":[[942,7],[1049,7],[1129,7],[1227,7],[1698,7],[1826,7],[1926,7],[2381,7],[2509,7],[2590,7]]},"1345":{"position":[[0,14],[42,7],[74,7],[90,7],[105,7],[120,7]]}}}],["traefik.skip",{"_index":1216,"t":{"1144":{"position":[[660,12]]}}}],["traefik.yaml",{"_index":1204,"t":{"1144":{"position":[[255,12],[393,12]]},"1216":{"position":[[313,12]]}}}],["traefik.yaml.skip",{"_index":1203,"t":{"1144":{"position":[[223,17],[362,17]]}}}],["traefik）的打包组件的值，k3",{"_index":993,"t":{"1061":{"position":[[46,19]]}}}],["traefik，k3",{"_index":1951,"t":{"1345":{"position":[[15,11]]}}}],["traefik，traefik",{"_index":1217,"t":{"1144":{"position":[[683,15]]}}}],["traffic",{"_index":811,"t":{"981":{"position":[[2159,7]]},"1123":{"position":[[234,7],[293,7]]},"1282":{"position":[[86,7],[633,7]]},"1613":{"position":[[203,7]]}}}],["transmit",{"_index":1851,"t":{"1304":{"position":[[396,11]]}}}],["transport",{"_index":2052,"t":{"1392":{"position":[[868,9],[997,9],[1195,9],[1322,9]]},"1463":{"position":[[998,9],[1127,9],[1325,9],[1452,9]]},"1498":{"position":[[892,9],[1021,9],[1219,9],[1346,9]]},"1500":{"position":[[781,9],[910,9],[1108,9],[1235,9]]},"1502":{"position":[[806,9],[935,9],[1133,9],[1260,9]]},"1504":{"position":[[958,9],[1087,9],[1285,9],[1412,9]]},"1506":{"position":[[784,9],[913,9],[1111,9],[1238,9]]},"1508":{"position":[[816,9],[945,9],[1143,9],[1270,9]]},"1510":{"position":[[915,9],[1044,9],[1242,9],[1369,9]]}}}],["trap",{"_index":2041,"t":{"1392":{"position":[[488,4]]},"1463":{"position":[[618,4]]},"1498":{"position":[[512,4]]},"1500":{"position":[[401,4]]},"1502":{"position":[[426,4]]},"1504":{"position":[[578,4]]},"1506":{"position":[[404,4]]},"1508":{"position":[[436,4]]},"1510":{"position":[[535,4]]}}}],["tree",{"_index":1920,"t":{"1328":{"position":[[30,59]]}}}],["tri",{"_index":2213,"t":{"1502":{"position":[[2158,3],[2398,3],[2638,3]]},"1508":{"position":[[2203,3]]}}}],["true",{"_index":319,"t":{"854":{"position":[[510,4]]},"875":{"position":[[85,4]]},"1047":{"position":[[309,15]]},"1059":{"position":[[506,4],[555,4],[1005,4]]},"1061":{"position":[[561,4],[605,4]]},"1093":{"position":[[254,4],[485,4]]},"1097":{"position":[[92,4]]},"1119":{"position":[[266,4],[364,5],[488,4],[588,5]]},"1194":{"position":[[122,4],[146,4],[179,4],[203,4]]},"1210":{"position":[[347,4],[372,4]]},"1244":{"position":[[317,4],[483,4],[534,4],[730,4],[1216,10],[1282,4]]},"1280":{"position":[[3307,4],[3372,4],[3390,4],[3404,4],[3452,4]]},"1286":{"position":[[206,4],[231,4],[803,4],[828,4]]},"1306":{"position":[[60,5]]},"1316":{"position":[[63,5]]},"1352":{"position":[[282,4],[387,6],[630,4]]},"1500":{"position":[[2066,6],[2131,4]]},"1506":{"position":[[2069,6],[2134,4]]},"1552":{"position":[[114,5]]},"1554":{"position":[[115,5]]},"1562":{"position":[[120,4]]},"1596":{"position":[[180,5]]},"1606":{"position":[[198,5]]}}}],["trust",{"_index":2062,"t":{"1392":{"position":[[1514,8],[1998,7]]},"1463":{"position":[[1644,8],[2128,7]]},"1498":{"position":[[1538,8],[2022,7]]},"1500":{"position":[[1427,8],[1911,7]]},"1502":{"position":[[1452,8],[1936,7]]},"1504":{"position":[[1604,8],[2088,7]]},"1506":{"position":[[1430,8],[1914,7]]},"1508":{"position":[[1462,8],[1946,7]]},"1510":{"position":[[272,7],[1561,8],[2045,7],[2134,8],[2181,7],[2197,7],[2265,7],[2333,7]]}}}],["trustedip",{"_index":999,"t":{"1061":{"position":[[566,11]]}}}],["tshark",{"_index":479,"t":{"884":{"position":[[527,6],[620,6]]}}}],["tti",{"_index":300,"t":{"852":{"position":[[697,3]]}}}],["ttl",{"_index":869,"t":{"998":{"position":[[892,3],[1577,4]]}}}],["tunabl",{"_index":590,"t":{"920":{"position":[[1953,8]]},"981":{"position":[[8332,8]]}}}],["tune",{"_index":588,"t":{"920":{"position":[[1912,6]]},"981":{"position":[[8291,6]]}}}],["turn",{"_index":553,"t":{"920":{"position":[[256,4]]},"981":{"position":[[267,4]]},"1272":{"position":[[302,6]]}}}],["two",{"_index":1541,"t":{"1274":{"position":[[10,3]]}}}],["type",{"_index":721,"t":{"947":{"position":[[220,4],[480,4],[1021,17]]},"1059":{"position":[[472,5]]},"1078":{"position":[[339,4]]},"1628":{"position":[[173,5]]}}}],["types=internalip,externalip,hostnam",{"_index":2147,"t":{"1423":{"position":[[1850,36]]},"1425":{"position":[[1798,36]]},"1427":{"position":[[1667,36]]},"1429":{"position":[[1616,36]]},"1431":{"position":[[1629,36]]},"1433":{"position":[[1742,36]]},"1435":{"position":[[1703,36]]},"1439":{"position":[[1776,36]]},"1441":{"position":[[1757,36]]},"1443":{"position":[[1653,36]]},"1445":{"position":[[1769,36]]},"1447":{"position":[[1634,36]]},"1449":{"position":[[1549,36]]},"1459":{"position":[[1724,36]]},"1465":{"position":[[1766,36]]},"1467":{"position":[[1682,36]]},"1469":{"position":[[1688,36]]},"1542":{"position":[[2033,36]]},"1544":{"position":[[2047,36]]},"1546":{"position":[[2162,36]]}}}],["u",{"_index":322,"t":{"856":{"position":[[79,1]]},"860":{"position":[[151,1],[178,1]]},"1047":{"position":[[160,1]]},"1392":{"position":[[553,1],[769,1]]},"1415":{"position":[[232,1]]},"1423":{"position":[[462,1]]},"1425":{"position":[[445,1]]},"1427":{"position":[[319,1]]},"1429":{"position":[[285,1]]},"1431":{"position":[[298,1]]},"1433":{"position":[[389,1]]},"1435":{"position":[[296,1]]},"1439":{"position":[[362,1]]},"1441":{"position":[[384,1]]},"1443":{"position":[[280,1]]},"1445":{"position":[[415,1]]},"1447":{"position":[[276,1]]},"1449":{"position":[[227,1]]},"1459":{"position":[[357,1]]},"1463":{"position":[[683,1],[899,1]]},"1465":{"position":[[424,1]]},"1467":{"position":[[359,1]]},"1469":{"position":[[371,1]]},"1471":{"position":[[413,1]]},"1475":{"position":[[965,1]]},"1478":{"position":[[314,1]]},"1480":{"position":[[244,1]]},"1482":{"position":[[264,1]]},"1484":{"position":[[360,1]]},"1486":{"position":[[297,1]]},"1493":{"position":[[231,1]]},"1495":{"position":[[241,1]]},"1498":{"position":[[577,1],[793,1]]},"1500":{"position":[[466,1],[682,1]]},"1502":{"position":[[491,1],[707,1]]},"1504":{"position":[[643,1],[859,1]]},"1506":{"position":[[469,1],[685,1]]},"1508":{"position":[[501,1],[717,1]]},"1510":{"position":[[600,1],[816,1]]},"1516":{"position":[[111,1]]},"1542":{"position":[[531,1],[622,1]]},"1544":{"position":[[517,1],[608,1]]},"1546":{"position":[[573,1],[664,1]]},"1548":{"position":[[481,1]]},"1550":{"position":[[538,1]]},"1560":{"position":[[699,1]]}}}],["u:%g",{"_index":2077,"t":{"1398":{"position":[[269,5]]},"1402":{"position":[[256,5]]},"1406":{"position":[[181,5]]},"1408":{"position":[[232,5]]},"1527":{"position":[[286,5]]},"1531":{"position":[[211,5]]},"1535":{"position":[[144,5]]}}}],["ubuntu",{"_index":387,"t":{"869":{"position":[[383,6]]},"1115":{"position":[[207,6]]},"1254":{"position":[[35,6]]}}}],["udp",{"_index":1266,"t":{"1172":{"position":[[60,3],[113,3]]},"1174":{"position":[[128,3],[198,3],[252,3]]},"1282":{"position":[[848,3]]}}}],["ufw",{"_index":366,"t":{"867":{"position":[[5,13],[19,3],[39,16],[56,3],[86,3],[127,3]]}}}],["uh",{"_index":1486,"t":{"1254":{"position":[[205,3]]}}}],["ui",{"_index":1963,"t":{"1348":{"position":[[442,2]]}}}],["uid",{"_index":2303,"t":{"1598":{"position":[[146,4]]}}}],["ulogd2",{"_index":473,"t":{"884":{"position":[[372,6],[414,6]]}}}],["unauthor",{"_index":1886,"t":{"1314":{"position":[[136,12]]}}}],["under",{"_index":2005,"t":{"1368":{"position":[[1204,5],[1713,5]]}}}],["undergo",{"_index":1802,"t":{"1292":{"position":[[222,10]]}}}],["understand",{"_index":1909,"t":{"1320":{"position":[[172,10]]}}}],["uninstall.sh",{"_index":1129,"t":{"1119":{"position":[[618,22]]},"1198":{"position":[[43,12]]},"1200":{"position":[[48,12]]},"1240":{"position":[[345,13]]}}}],["unit",{"_index":2015,"t":{"1368":{"position":[[1809,5]]}}}],["unix",{"_index":751,"t":{"954":{"position":[[477,5]]},"981":{"position":[[4506,5]]}}}],["unknown",{"_index":2195,"t":{"1480":{"position":[[1408,7],[1497,7]]},"1482":{"position":[[1476,7],[1565,7]]},"1484":{"position":[[1561,7],[1650,7]]},"1486":{"position":[[1458,7],[1547,7]]}}}],["unless",{"_index":1645,"t":{"1282":{"position":[[561,6]]},"1439":{"position":[[222,6]]},"1602":{"position":[[101,6]]}}}],["unrestrict",{"_index":1356,"t":{"1210":{"position":[[2665,12],[2802,12],[2974,12]]},"1280":{"position":[[2147,12],[3183,12],[4294,12],[4397,12],[4999,12],[5113,12],[5295,12],[5436,12]]}}}],["unset",{"_index":1547,"t":{"1276":{"position":[[97,5]]}}}],["unus",{"_index":1877,"t":{"1312":{"position":[[268,8]]}}}],["up",{"_index":129,"t":{"838":{"position":[[985,2],[1149,2],[1332,2],[1497,2],[1653,2],[1823,2],[2021,2],[2209,2],[2373,2],[2533,2]]},"1078":{"position":[[369,2]]},"1178":{"position":[[59,2],[82,2],[105,2],[130,2]]},"1184":{"position":[[114,2],[137,2],[160,2],[185,2]]},"1423":{"position":[[70,2]]},"1463":{"position":[[70,2]]},"1465":{"position":[[70,2]]},"1467":{"position":[[70,2]]},"1469":{"position":[[70,2]]}}}],["updat",{"_index":458,"t":{"882":{"position":[[124,6]]},"1318":{"position":[[552,8],[827,6]]}}}],["upgrad",{"_index":269,"t":{"846":{"position":[[204,7]]},"1085":{"position":[[84,7],[158,7],[197,7],[242,6],[277,7],[332,7],[397,7],[487,7]]},"1210":{"position":[[1064,21],[1529,8],[1567,7],[1679,7]]},"1343":{"position":[[90,7]]},"1348":{"position":[[23,7],[372,7],[495,7],[650,7],[716,7],[739,7],[813,7]]},"1350":{"position":[[7,7],[179,7],[230,7]]},"1352":{"position":[[245,7],[421,7],[429,8],[457,7],[593,7],[793,7],[828,7],[836,8],[864,7],[1591,7],[1635,7]]},"1358":{"position":[[398,7]]}}}],["upgrade.cattle.io/v1",{"_index":1970,"t":{"1352":{"position":[[167,20],[516,20],[1374,20]]}}}],["upgrade、rancher/system",{"_index":1035,"t":{"1085":{"position":[[464,22]]}}}],["url",{"_index":835,"t":{"981":{"position":[[4996,3]]},"1008":{"position":[[977,4]]},"1031":{"position":[[13,3]]},"1059":{"position":[[695,3],[834,3],[1461,3]]},"1152":{"position":[[158,13],[172,4]]},"1240":{"position":[[965,3]]},"1244":{"position":[[1342,3],[1356,7],[1439,3]]},"1352":{"position":[[1257,14],[1272,27]]}}}],["url_effect",{"_index":1079,"t":{"1101":{"position":[[93,18]]},"1109":{"position":[[141,18]]}}}],["url（serv",{"_index":913,"t":{"1029":{"position":[[152,10]]}}}],["url（默认值：“s3.amazonaws.com",{"_index":753,"t":{"954":{"position":[[792,27]]}}}],["us",{"_index":565,"t":{"920":{"position":[[625,3],[704,3],[1784,4],[2082,3],[2125,4],[3351,3]]},"981":{"position":[[797,4],[931,4],[1322,3],[1423,3],[2116,3],[2647,4],[2821,4],[3041,4],[3125,5],[3951,4],[4077,4],[4194,4],[6894,3],[7015,3],[7058,4],[7535,4],[8886,4]]},"1138":{"position":[[661,4]]},"1156":{"position":[[306,4],[360,4],[412,4],[565,4],[619,4],[671,4]]},"1210":{"position":[[791,4]]},"1280":{"position":[[4168,3],[4423,3],[4618,3]]},"1282":{"position":[[1102,4],[1162,3]]},"1286":{"position":[[650,4],[1273,4]]},"1288":{"position":[[2802,3]]},"1292":{"position":[[253,4]]},"1294":{"position":[[481,4]]},"1300":{"position":[[437,3]]},"1302":{"position":[[423,3]]},"1306":{"position":[[309,5],[443,3]]},"1308":{"position":[[132,4]]},"1310":{"position":[[100,5],[184,5]]},"1318":{"position":[[54,4],[126,4]]},"1368":{"position":[[342,4],[1490,3]]},"1392":{"position":[[325,4]]},"1463":{"position":[[455,4]]},"1480":{"position":[[1980,3]]},"1482":{"position":[[188,3],[329,4],[383,3],[2048,3]]},"1484":{"position":[[2133,3]]},"1486":{"position":[[2030,3]]},"1498":{"position":[[349,4]]},"1500":{"position":[[238,4]]},"1502":{"position":[[263,4]]},"1504":{"position":[[415,4]]},"1506":{"position":[[241,4]]},"1508":{"position":[[273,4]]},"1510":{"position":[[372,4]]},"1513":{"position":[[84,3]]},"1518":{"position":[[364,3]]},"1537":{"position":[[62,6]]},"1539":{"position":[[62,6]]},"1542":{"position":[[29,5],[127,5]]},"1544":{"position":[[29,5],[113,5]]},"1546":{"position":[[29,5],[154,5]]},"1548":{"position":[[29,5],[101,5]]},"1550":{"position":[[29,5],[138,5]]},"1552":{"position":[[39,5],[123,5]]},"1554":{"position":[[39,5],[124,5]]},"1558":{"position":[[29,5],[122,5]]},"1560":{"position":[[29,5],[134,3],[244,5]]},"1562":{"position":[[39,5],[152,3],[178,5]]},"1566":{"position":[[29,5],[429,5]]},"1569":{"position":[[104,4],[153,3]]},"1573":{"position":[[53,3]]},"1604":{"position":[[37,3]]},"1610":{"position":[[143,3]]},"1613":{"position":[[47,3],[126,3]]},"1628":{"position":[[26,3]]}}}],["usag",{"_index":546,"t":{"920":{"position":[[80,6]]},"981":{"position":[[90,6]]},"998":{"position":[[128,6],[965,6]]},"1502":{"position":[[2138,6],[2378,6],[2618,6]]},"1508":{"position":[[2183,6]]}}}],["user",{"_index":292,"t":{"852":{"position":[[450,4],[484,4],[674,4]]},"856":{"position":[[15,4],[70,4]]},"1103":{"position":[[20,4],[134,4],[187,4],[289,4],[422,4],[468,4],[548,4]]},"1105":{"position":[[84,4],[152,4]]},"1107":{"position":[[186,4]]},"1109":{"position":[[408,4]]},"1288":{"position":[[1530,4]]},"1296":{"position":[[232,6]]},"1423":{"position":[[2335,4]]},"1425":{"position":[[2283,4]]},"1427":{"position":[[2152,4]]},"1429":{"position":[[2101,4]]},"1431":{"position":[[2114,4]]},"1433":{"position":[[2227,4]]},"1435":{"position":[[2188,4]]},"1439":{"position":[[2261,4]]},"1441":{"position":[[2242,4]]},"1443":{"position":[[2138,4]]},"1445":{"position":[[2254,4]]},"1447":{"position":[[2119,4]]},"1449":{"position":[[2034,4]]},"1459":{"position":[[2209,4]]},"1465":{"position":[[2251,4]]},"1467":{"position":[[2167,4]]},"1469":{"position":[[2173,4]]},"1542":{"position":[[2518,4]]},"1544":{"position":[[2532,4]]},"1546":{"position":[[2647,4]]},"1569":{"position":[[214,5]]},"1581":{"position":[[67,5]]},"1586":{"position":[[152,4]]},"1588":{"position":[[82,4]]},"1590":{"position":[[82,4]]},"1592":{"position":[[82,4]]},"1594":{"position":[[82,4]]},"1596":{"position":[[82,4]]},"1600":{"position":[[82,4]]},"1606":{"position":[[82,4]]},"1608":{"position":[[82,4]]},"1610":{"position":[[82,4]]}}}],["user'",{"_index":1668,"t":{"1284":{"position":[[204,6]]},"1304":{"position":[[194,6]]}}}],["user.yml",{"_index":1085,"t":{"1103":{"position":[[67,8],[520,8]]},"1109":{"position":[[380,8]]}}}],["usernam",{"_index":1236,"t":{"1154":{"position":[[257,8]]},"1156":{"position":[[168,9],[208,8]]},"1158":{"position":[[167,9],[207,8]]},"1210":{"position":[[1442,10]]},"1280":{"position":[[768,10]]},"1288":{"position":[[1504,8]]},"1423":{"position":[[2309,8]]},"1425":{"position":[[2257,8]]},"1427":{"position":[[2126,8]]},"1429":{"position":[[2075,8]]},"1431":{"position":[[2088,8]]},"1433":{"position":[[2201,8]]},"1435":{"position":[[2162,8]]},"1439":{"position":[[2235,8]]},"1441":{"position":[[2216,8]]},"1443":{"position":[[2112,8]]},"1445":{"position":[[2228,8]]},"1447":{"position":[[2093,8]]},"1449":{"position":[[2008,8]]},"1459":{"position":[[2183,8]]},"1465":{"position":[[2225,8]]},"1467":{"position":[[2141,8]]},"1469":{"position":[[2147,8]]},"1542":{"position":[[2492,8]]},"1544":{"position":[[2506,8]]},"1546":{"position":[[2621,8]]}}}],["userspac",{"_index":609,"t":{"920":{"position":[[3273,9]]},"981":{"position":[[8593,9]]}}}],["usr/local/bin",{"_index":210,"t":{"840":{"position":[[302,14]]},"1078":{"position":[[111,14]]},"1083":{"position":[[139,14]]},"1244":{"position":[[671,14]]}}}],["usr/local/bin/k3",{"_index":1051,"t":{"1091":{"position":[[152,18],[247,18]]},"1198":{"position":[[24,18]]},"1200":{"position":[[23,18]]},"1354":{"position":[[180,18]]},"1362":{"position":[[56,27]]}}}],["util",{"_index":1331,"t":{"1210":{"position":[[901,4]]},"1272":{"position":[[1175,7]]},"1286":{"position":[[760,4],[1383,4]]},"1316":{"position":[[32,4]]},"1554":{"position":[[289,4]]}}}],["v",{"_index":511,"t":{"900":{"position":[[10,1]]},"920":{"position":[[289,1]]},"961":{"position":[[34,1]]},"981":{"position":[[300,1]]},"1218":{"position":[[323,1],[379,1]]},"1392":{"position":[[610,1]]},"1417":{"position":[[327,1]]},"1419":{"position":[[256,1]]},"1437":{"position":[[316,1]]},"1441":{"position":[[441,1]]},"1443":{"position":[[337,1]]},"1459":{"position":[[414,1]]},"1463":{"position":[[740,1]]},"1490":{"position":[[265,1]]},"1498":{"position":[[634,1]]},"1500":{"position":[[523,1]]},"1502":{"position":[[548,1]]},"1504":{"position":[[700,1]]},"1506":{"position":[[526,1]]},"1508":{"position":[[558,1]]},"1510":{"position":[[657,1]]},"1542":{"position":[[703,1]]},"1544":{"position":[[693,1]]},"1546":{"position":[[745,1]]}}}],["v0.4.0",{"_index":1031,"t":{"1085":{"position":[[353,6]]}}}],["v1",{"_index":244,"t":{"844":{"position":[[639,2]]},"850":{"position":[[300,2],[416,2]]},"880":{"position":[[277,2]]},"1059":{"position":[[228,2]]},"1103":{"position":[[88,2]]},"1210":{"position":[[1637,2]]},"1216":{"position":[[595,10],[723,2]]},"1282":{"position":[[1057,2]]},"1332":{"position":[[12,2]]},"1334":{"position":[[12,2]]},"1338":{"position":[[12,2]]},"1340":{"position":[[12,2]]},"1345":{"position":[[50,4],[98,2]]}}}],["v1.17.0+k3s.1",{"_index":1002,"t":{"1063":{"position":[[3,13]]}}}],["v1.19.1",{"_index":1958,"t":{"1345":{"position":[[531,7]]}}}],["v1.19.1+k3s1",{"_index":673,"t":{"937":{"position":[[5,12]]},"1061":{"position":[[5,12]]},"1093":{"position":[[5,12]]}}}],["v1.19.12+k3s1",{"_index":1953,"t":{"1345":{"position":[[334,14]]}}}],["v1.19.13+k3s1、v1.20.9+k3s1、v1.21.3+k3s1",{"_index":1956,"t":{"1345":{"position":[[384,40]]}}}],["v1.19.4+k3s1",{"_index":407,"t":{"873":{"position":[[5,12]]}}}],["v1.20",{"_index":1656,"t":{"1282":{"position":[[1276,5]]}}}],["v1.20.4+k3s1",{"_index":1300,"t":{"1190":{"position":[[389,12],[448,12]]}}}],["v1.20.8+k3s1",{"_index":1954,"t":{"1345":{"position":[[349,13]]}}}],["v1.21",{"_index":1655,"t":{"1282":{"position":[[1260,5]]}}}],["v1.21.0+k3s1",{"_index":1065,"t":{"1095":{"position":[[5,12]]},"1123":{"position":[[5,12]]}}}],["v1.21.2+k3s1",{"_index":1955,"t":{"1345":{"position":[[363,20]]}}}],["v1.21.8+k3s1",{"_index":711,"t":{"941":{"position":[[5,12]]}}}],["v1.22",{"_index":1993,"t":{"1368":{"position":[[442,6]]}}}],["v1.22.2",{"_index":936,"t":{"1035":{"position":[[221,7]]}}}],["v1.22.9+k3s1",{"_index":1153,"t":{"1125":{"position":[[5,12]]}}}],["v1.23",{"_index":1095,"t":{"1105":{"position":[[12,5]]},"1270":{"position":[[89,6]]},"1368":{"position":[[449,5],[493,5]]}}}],["v1.23.15+k3s1）开始，k3",{"_index":1115,"t":{"1115":{"position":[[1120,20]]}}}],["v1.23.7+k3s1",{"_index":1143,"t":{"1123":{"position":[[31,12]]}}}],["v1.24",{"_index":1094,"t":{"1105":{"position":[[0,5]]},"1272":{"position":[[718,5]]},"1280":{"position":[[16,5],[852,5]]},"1286":{"position":[[165,5]]},"1368":{"position":[[459,5]]}}}],["v1.24.14+k3s1、v1.25.10+k3s1、v1.26.5+k3s1、v1.27.2+k3s1",{"_index":1250,"t":{"1166":{"position":[[68,61]]}}}],["v1.24.6+k3s1",{"_index":1968,"t":{"1352":{"position":[[127,13],[474,12],[881,12],[1197,21]]}}}],["v1.24.9+k3s1",{"_index":1114,"t":{"1115":{"position":[[1106,13]]}}}],["v1.25",{"_index":1307,"t":{"1210":{"position":[[11,5],[1858,5],[2078,5],[2169,5]]},"1280":{"position":[[0,5],[36,5]]},"1286":{"position":[[149,5]]}}}],["v1.25.5+k3s1",{"_index":1113,"t":{"1115":{"position":[[1092,13]]}}}],["v1.26",{"_index":1117,"t":{"1117":{"position":[[40,5]]},"1236":{"position":[[55,5]]},"1358":{"position":[[153,9]]}}}],["v1.26.0",{"_index":1111,"t":{"1115":{"position":[[1012,7]]}}}],["v1.26.0+k3s1",{"_index":1112,"t":{"1115":{"position":[[1075,16]]}}}],["v1.26.0+k3s1、v1.25.5+k3s1、v1.24.9+k3s1、v1.23.15+k3s1",{"_index":349,"t":{"863":{"position":[[271,61]]}}}],["v1.26.2+k3s1、v1.25.7+k3s1、v1.24.11+k3s1、v1.23.17+k3s1",{"_index":626,"t":{"927":{"position":[[537,62]]},"997":{"position":[[13,62]]}}}],["v1.26.3+k3s1",{"_index":1396,"t":{"1236":{"position":[[5,12]]}}}],["v1.27",{"_index":1118,"t":{"1117":{"position":[[139,5]]}}}],["v1.27.0",{"_index":1109,"t":{"1115":{"position":[[916,7]]}}}],["v1.27.3、v1.26.6、v1.25.11",{"_index":1170,"t":{"1131":{"position":[[2,24]]}}}],["v1.6",{"_index":1996,"t":{"1368":{"position":[[724,5]]}}}],["v1.8.8",{"_index":342,"t":{"863":{"position":[[127,8]]}}}],["v1/v2",{"_index":280,"t":{"850":{"position":[[312,10]]}}}],["v120",{"_index":1661,"t":{"1282":{"position":[[2517,4]]}}}],["v121",{"_index":1659,"t":{"1282":{"position":[[1834,4]]}}}],["v1（在这种情况下，traefik",{"_index":1370,"t":{"1216":{"position":[[614,17]]}}}],["v2",{"_index":281,"t":{"850":{"position":[[330,5]]},"852":{"position":[[10,2],[600,2]]},"1059":{"position":[[921,5]]},"1063":{"position":[[52,2]]},"1216":{"position":[[638,6],[671,5]]},"1282":{"position":[[1137,3]]},"1345":{"position":[[82,7],[113,6]]},"1417":{"position":[[763,2],[1045,2],[1327,2],[1609,2],[1891,2],[2173,2],[2455,2]]},"1419":{"position":[[744,2],[1026,2],[1308,2],[1590,2],[1872,2],[2154,2],[2436,2]]},"1437":{"position":[[757,2],[1039,2],[1321,2],[1603,2],[1885,2],[2167,2],[2449,2]]},"1490":{"position":[[729,2],[1011,2],[1293,2],[1575,2],[1857,2],[2139,2],[2421,2]]}}}],["v2.43.0",{"_index":1469,"t":{"1252":{"position":[[11,7]]}}}],["v2.8.5",{"_index":997,"t":{"1061":{"position":[[527,6]]}}}],["v3",{"_index":975,"t":{"1059":{"position":[[908,2],[929,3]]},"1063":{"position":[[27,2],[62,10]]}}}],["v3，helm",{"_index":1003,"t":{"1063":{"position":[[78,7]]}}}],["v=<level",{"_index":946,"t":{"1047":{"position":[[452,9]]}}}],["valid",{"_index":837,"t":{"981":{"position":[[5166,10],[5795,6]]},"1091":{"position":[[728,8]]},"1138":{"position":[[670,10]]},"1306":{"position":[[183,6],[203,8]]},"1310":{"position":[[311,5]]}}}],["valu",{"_index":260,"t":{"844":{"position":[[953,6],[999,6]]},"884":{"position":[[207,6],[267,6]]},"900":{"position":[[12,5],[44,5],[104,6],[114,5]]},"902":{"position":[[19,6],[29,5],[68,5],[110,6],[120,5]]},"904":{"position":[[20,6],[30,5]]},"906":{"position":[[23,5],[93,5],[136,5],[297,5]]},"908":{"position":[[38,5],[136,5],[228,5]]},"910":{"position":[[21,6],[31,5],[70,5],[106,5],[167,5],[216,5],[264,5]]},"912":{"position":[[20,5],[60,5]]},"916":{"position":[[71,5]]},"920":{"position":[[291,5],[365,5],[469,6],[479,5],[590,6],[600,5],[674,5],[754,6],[764,5],[823,6],[833,5],[919,5],[1029,5],[1113,5],[1207,5],[1394,5],[1613,5],[2028,5],[2191,5],[2323,5],[2427,5],[2541,6],[2551,5],[2637,5],[2730,5],[2815,5],[2890,5],[2971,5],[3051,5],[3124,5]]},"937":{"position":[[1144,5],[1233,5],[1275,5],[1425,5]]},"954":{"position":[[32,5],[121,5],[193,5],[265,5],[433,5],[545,5],[637,5],[683,5],[776,5],[842,5],[943,5],[1002,5],[1061,5],[1097,5],[1157,5],[1226,5]]},"956":{"position":[[19,6],[29,5],[87,5],[150,5],[224,5],[280,5]]},"958":{"position":[[30,6],[40,5],[122,5]]},"961":{"position":[[36,5],[68,5],[128,6],[138,5]]},"963":{"position":[[24,5],[67,5],[109,5],[188,5],[241,5]]},"965":{"position":[[20,6],[30,5]]},"969":{"position":[[24,5],[90,5],[165,5],[226,5],[309,5],[354,5],[568,5],[634,5]]},"971":{"position":[[35,5]]},"973":{"position":[[16,5]]},"975":{"position":[[17,5],[58,5],[109,5],[169,5],[244,5],[303,5],[343,5]]},"979":{"position":[[66,5],[106,5]]},"981":{"position":[[302,5],[376,5],[480,6],[490,5],[608,5],[681,5],[752,5],[894,5],[1021,5],[1149,6],[1159,5],[1276,5],[1377,5],[1493,5],[1611,5],[1743,5],[1822,5],[2190,5],[2295,5],[2408,6],[2418,5],[2529,5],[2607,6],[2617,5],[2717,5],[2791,5],[2911,5],[2993,6],[3003,5],[3298,5],[3367,5],[3435,5],[3512,5],[3599,5],[3692,5],[3785,5],[3909,5],[4043,5],[4170,5],[4435,5],[4581,5],[4713,5],[4787,5],[4973,5],[5052,5],[5198,5],[5265,5],[5332,5],[5375,5],[5465,5],[5551,5],[5618,5],[5707,5],[6244,5],[6354,5],[6438,5],[6532,5],[6719,5],[6961,5],[7124,5],[7256,5],[7360,5],[7490,5],[7603,6],[7613,5],[7699,5],[7792,5],[7877,5],[7952,5],[8033,5],[8113,5],[8186,5],[8715,5]]},"998":{"position":[[641,5],[732,5],[783,5],[816,5],[896,5],[972,5],[1107,5],[1198,5],[1392,5],[1483,5],[1599,5],[1690,5],[1736,5]]},"1059":{"position":[[1307,6]]},"1091":{"position":[[782,5]]},"1138":{"position":[[458,6]]},"1210":{"position":[[1702,5],[1947,6]]},"1236":{"position":[[581,7]]},"1276":{"position":[[117,6]]},"1292":{"position":[[475,5]]},"1294":{"position":[[574,5]]},"1296":{"position":[[498,5]]},"1298":{"position":[[338,5]]},"1300":{"position":[[513,5]]},"1302":{"position":[[499,5]]},"1304":{"position":[[723,5]]},"1306":{"position":[[516,5]]},"1308":{"position":[[120,5]]},"1312":{"position":[[499,5],[590,5]]},"1316":{"position":[[641,5]]},"1352":{"position":[[377,7]]},"1392":{"position":[[2123,6]]},"1398":{"position":[[392,6]]},"1400":{"position":[[416,6]]},"1402":{"position":[[370,6]]},"1404":{"position":[[426,6]]},"1406":{"position":[[281,6]]},"1408":{"position":[[287,6]]},"1417":{"position":[[395,6]]},"1419":{"position":[[376,6]]},"1423":{"position":[[656,6]]},"1425":{"position":[[604,6]]},"1427":{"position":[[187,6],[473,6]]},"1429":{"position":[[189,5],[422,6]]},"1431":{"position":[[189,5],[435,6]]},"1433":{"position":[[548,6]]},"1435":{"position":[[216,5],[509,6]]},"1437":{"position":[[389,6]]},"1439":{"position":[[582,6]]},"1441":{"position":[[301,5],[563,6]]},"1443":{"position":[[459,6]]},"1445":{"position":[[288,5],[575,6]]},"1447":{"position":[[440,6]]},"1449":{"position":[[355,6]]},"1455":{"position":[[222,6]]},"1459":{"position":[[530,6]]},"1463":{"position":[[2290,6]]},"1465":{"position":[[572,6]]},"1467":{"position":[[488,6]]},"1469":{"position":[[494,6]]},"1480":{"position":[[381,6]]},"1482":{"position":[[449,6]]},"1484":{"position":[[534,6]]},"1486":{"position":[[431,6]]},"1490":{"position":[[181,5],[361,6]]},"1493":{"position":[[340,6]]},"1495":{"position":[[163,5],[414,6]]},"1498":{"position":[[2169,6]]},"1500":{"position":[[2082,6]]},"1502":{"position":[[2095,6]]},"1504":{"position":[[2235,6]]},"1506":{"position":[[2085,6]]},"1508":{"position":[[2118,6]]},"1510":{"position":[[2172,6]]},"1525":{"position":[[373,6]]},"1527":{"position":[[462,6]]},"1529":{"position":[[304,6]]},"1531":{"position":[[325,6]]},"1533":{"position":[[363,6]]},"1535":{"position":[[258,6]]},"1542":{"position":[[816,6]]},"1544":{"position":[[824,6]]},"1546":{"position":[[897,6]]},"1548":{"position":[[645,6]]},"1550":{"position":[[115,5]]},"1560":{"position":[[836,6]]},"1562":{"position":[[168,6]]},"1566":{"position":[[418,7],[639,7]]},"1577":{"position":[[218,5]]}}}],["value=option1=valu",{"_index":799,"t":{"979":{"position":[[230,19]]}}}],["valuescont",{"_index":963,"t":{"1059":{"position":[[445,14],[1041,13]]},"1061":{"position":[[152,25],[483,14]]}}}],["var",{"_index":445,"t":{"880":{"position":[[436,3]]}}}],["var/lib/etcd",{"_index":2033,"t":{"1392":{"position":[[246,13]]},"1394":{"position":[[262,13]]}}}],["var/lib/kubelet/config.yaml",{"_index":2246,"t":{"1537":{"position":[[134,28]]},"1539":{"position":[[140,28]]}}}],["var/lib/rancher/credentialprovider/bin",{"_index":581,"t":{"920":{"position":[[1316,42]]},"981":{"position":[[6641,42]]}}}],["var/lib/rancher/credentialprovider/config.yaml",{"_index":582,"t":{"920":{"position":[[1478,50]]},"981":{"position":[[6803,50]]}}}],["var/lib/rancher/k3",{"_index":522,"t":{"904":{"position":[[36,22]]},"920":{"position":[[883,23]]},"937":{"position":[[196,28]]},"965":{"position":[[36,25]]},"981":{"position":[[1203,20]]},"998":{"position":[[675,20],[1141,20],[1426,20],[1633,20]]}}}],["var/lib/rancher/k3s/ag",{"_index":1494,"t":{"1266":{"position":[[465,44]]},"1268":{"position":[[123,28]]}}}],["var/lib/rancher/k3s/agent/containerd",{"_index":2102,"t":{"1417":{"position":[[578,37]]},"1419":{"position":[[559,37]]},"1437":{"position":[[572,37]]},"1490":{"position":[[544,37]]}}}],["var/lib/rancher/k3s/agent/containerd/containerd.log",{"_index":944,"t":{"1047":{"position":[[212,52]]}}}],["var/lib/rancher/k3s/agent/etc/containerd/config.toml",{"_index":216,"t":{"842":{"position":[[7,53]]},"844":{"position":[[327,53]]},"1417":{"position":[[450,53]]},"1419":{"position":[[431,53]]},"1437":{"position":[[444,53]]},"1490":{"position":[[416,53]]}}}],["var/lib/rancher/k3s/agent/imag",{"_index":1010,"t":{"1075":{"position":[[78,34],[151,34]]},"1083":{"position":[[76,34]]}}}],["var/lib/rancher/k3s/agent/kubelet.kubeconfig",{"_index":2236,"t":{"1529":{"position":[[208,45]]},"1531":{"position":[[217,45]]}}}],["var/lib/rancher/k3s/agent/kubeproxy.kubeconfig",{"_index":2235,"t":{"1525":{"position":[[140,47],[206,47],[299,49]]},"1527":{"position":[[146,47],[224,48],[292,48],[388,49]]}}}],["var/lib/rancher/k3s/data/577968fa3d58539cc4265245941b7be688833e6bf5ad7869fa2afe02f15f1cd2/bin/containerd",{"_index":2106,"t":{"1417":{"position":[[647,105],[929,105],[1211,105],[1493,105],[1775,105],[2057,105],[2339,105]]},"1419":{"position":[[628,105],[910,105],[1192,105],[1474,105],[1756,105],[2038,105],[2320,105]]},"1437":{"position":[[641,105],[923,105],[1205,105],[1487,105],[1769,105],[2051,105],[2333,105]]},"1490":{"position":[[613,105],[895,105],[1177,105],[1459,105],[1741,105],[2023,105],[2305,105]]}}}],["var/lib/rancher/k3s/serv",{"_index":1495,"t":{"1268":{"position":[[79,29]]},"1280":{"position":[[334,27]]},"1284":{"position":[[578,27]]}}}],["var/lib/rancher/k3s/server/ag",{"_index":858,"t":{"995":{"position":[[159,33]]}}}],["var/lib/rancher/k3s/server/cred/admin.kubeconfig",{"_index":2074,"t":{"1396":{"position":[[152,49]]},"1398":{"position":[[205,50],[275,50]]},"1529":{"position":[[140,49]]},"1531":{"position":[[146,49]]}}}],["var/lib/rancher/k3s/server/cred/controller.kubeconfig",{"_index":2082,"t":{"1404":{"position":[[190,55],[274,55]]}}}],["var/lib/rancher/k3s/server/cred/scheduler.kubeconfig",{"_index":2078,"t":{"1400":{"position":[[182,54],[265,54]]},"1402":{"position":[[188,54],[262,54]]}}}],["var/lib/rancher/k3s/server/db",{"_index":686,"t":{"937":{"position":[[855,32],[914,31]]},"1012":{"position":[[51,32],[104,30]]}}}],["var/lib/rancher/k3s/server/db/etcd",{"_index":2048,"t":{"1392":{"position":[[681,38]]},"1463":{"position":[[811,38]]},"1498":{"position":[[705,38]]},"1500":{"position":[[594,38]]},"1502":{"position":[[619,38]]},"1504":{"position":[[771,38]]},"1506":{"position":[[597,38]]},"1508":{"position":[[629,38]]},"1510":{"position":[[728,38]]}}}],["var/lib/rancher/k3s/server/db/etcd/config",{"_index":2053,"t":{"1392":{"position":[[888,42],[1017,42],[1119,45],[1215,42],[1342,42],[1449,45],[1532,45]]},"1463":{"position":[[1018,42],[1147,42],[1249,45],[1345,42],[1472,42],[1579,45],[1662,45]]},"1498":{"position":[[912,42],[1041,42],[1143,45],[1239,42],[1366,42],[1473,45],[1556,45]]},"1500":{"position":[[801,42],[930,42],[1032,45],[1128,42],[1255,42],[1362,45],[1445,45]]},"1502":{"position":[[826,42],[955,42],[1057,45],[1153,42],[1280,42],[1387,45],[1470,45]]},"1504":{"position":[[978,42],[1107,42],[1209,45],[1305,42],[1432,42],[1539,45],[1622,45]]},"1506":{"position":[[804,42],[933,42],[1035,45],[1131,42],[1258,42],[1365,45],[1448,45]]},"1508":{"position":[[836,42],[965,42],[1067,45],[1163,42],[1290,42],[1397,45],[1480,45]]},"1510":{"position":[[935,42],[1064,42],[1166,45],[1262,42],[1389,42],[1496,45],[1579,45]]}}}],["var/lib/rancher/k3s/server/log",{"_index":1679,"t":{"1284":{"position":[[420,32]]}}}],["var/lib/rancher/k3s/server/manifest",{"_index":1179,"t":{"1134":{"position":[[9,41]]},"1144":{"position":[[3,37],[278,37]]},"1210":{"position":[[2207,38]]},"1216":{"position":[[362,37]]},"1280":{"position":[[2457,37]]},"1282":{"position":[[158,37]]}}}],["var/lib/rancher/k3s/server/manifests/example_manifest.yaml",{"_index":1183,"t":{"1138":{"position":[[323,60]]}}}],["var/lib/rancher/k3s/server/manifests/traefik",{"_index":995,"t":{"1061":{"position":[[305,45]]}}}],["var/lib/rancher/k3s/server/manifests/traefik.yaml",{"_index":1368,"t":{"1216":{"position":[[254,51]]}}}],["var/lib/rancher/k3s/server/nod",{"_index":1417,"t":{"1240":{"position":[[1015,32]]}}}],["var/lib/rancher/k3s/server/psa.yaml",{"_index":1333,"t":{"1210":{"position":[[928,36]]}}}],["var/lib/rancher/k3s/server/stat",{"_index":989,"t":{"1059":{"position":[[1418,35]]}}}],["var/lib/rancher/k3s/server/tl",{"_index":629,"t":{"929":{"position":[[265,31],[903,31],[1149,31]]},"931":{"position":[[113,31]]},"933":{"position":[[121,31]]},"935":{"position":[[227,31]]},"1406":{"position":[[187,31]]},"1408":{"position":[[184,31]]}}}],["var/lib/rancher/k3s/server/tls/*.crt",{"_index":2088,"t":{"1410":{"position":[[192,37]]}}}],["var/lib/rancher/k3s/server/tls/*.key",{"_index":2090,"t":{"1412":{"position":[[192,37]]}}}],["var/lib/rancher/k3s/server/tls/cli",{"_index":2244,"t":{"1535":{"position":[[150,38]]}}}],["var/lib/rancher/k3s/server/tls/etcd/p",{"_index":2221,"t":{"1504":{"position":[[2286,41],[2356,41]]},"1510":{"position":[[2282,41]]}}}],["var/lib/rancher/k3s/server/tls/etcd/serv",{"_index":2207,"t":{"1498":{"position":[[2210,43],[2275,43]]},"1510":{"position":[[2214,43]]}}}],["var/lib/rancher/k3s/server/tls/intermedi",{"_index":652,"t":{"931":{"position":[[679,44]]}}}],["var/lib/rancher/k3s/server/tls/root",{"_index":651,"t":{"931":{"position":[[637,36]]}}}],["var/lib/rancher/k3s/server/tls/serv",{"_index":2238,"t":{"1533":{"position":[[147,38]]}}}],["var/lib/rancher/k3s/server/tls/service.key",{"_index":654,"t":{"931":{"position":[[817,43]]},"935":{"position":[[585,43]]}}}],["var/lib/rancher/k3s/server/token",{"_index":855,"t":{"993":{"position":[[65,34]]},"1010":{"position":[[50,33]]},"1027":{"position":[[147,33]]},"1080":{"position":[[276,34]]},"1345":{"position":[[462,33]]}}}],["var/log/journ",{"_index":2043,"t":{"1392":{"position":[[535,16],[751,16]]},"1415":{"position":[[214,16]]},"1423":{"position":[[444,16]]},"1425":{"position":[[427,16]]},"1427":{"position":[[301,16]]},"1429":{"position":[[267,16]]},"1431":{"position":[[280,16]]},"1433":{"position":[[371,16]]},"1435":{"position":[[278,16]]},"1439":{"position":[[344,16]]},"1441":{"position":[[366,16]]},"1443":{"position":[[262,16]]},"1445":{"position":[[397,16]]},"1447":{"position":[[258,16]]},"1449":{"position":[[209,16]]},"1459":{"position":[[339,16]]},"1463":{"position":[[665,16],[881,16]]},"1465":{"position":[[406,16]]},"1467":{"position":[[341,16]]},"1469":{"position":[[353,16]]},"1471":{"position":[[395,16]]},"1475":{"position":[[947,16]]},"1478":{"position":[[296,16]]},"1480":{"position":[[226,16]]},"1482":{"position":[[246,16]]},"1484":{"position":[[342,16]]},"1486":{"position":[[279,16]]},"1493":{"position":[[213,16]]},"1495":{"position":[[223,16]]},"1498":{"position":[[559,16],[775,16]]},"1500":{"position":[[448,16],[664,16]]},"1502":{"position":[[473,16],[689,16]]},"1504":{"position":[[625,16],[841,16]]},"1506":{"position":[[451,16],[667,16]]},"1508":{"position":[[483,16],[699,16]]},"1510":{"position":[[582,16],[798,16]]},"1516":{"position":[[93,16]]},"1542":{"position":[[513,16],[604,16]]},"1544":{"position":[[499,16],[590,16]]},"1546":{"position":[[555,16],[646,16]]},"1548":{"position":[[463,16]]},"1550":{"position":[[520,16]]},"1560":{"position":[[681,16]]}}}],["var/log/k3s.log",{"_index":334,"t":{"860":{"position":[[69,16]]},"1047":{"position":[[87,16]]}}}],["var/log/pod",{"_index":943,"t":{"1047":{"position":[[180,13]]}}}],["var/log/syslog",{"_index":335,"t":{"860":{"position":[[111,15]]}}}],["var/log/ulog/syslogemu.log",{"_index":476,"t":{"884":{"position":[[455,27]]}}}],["var/run/mysqld/mysqld.sock",{"_index":899,"t":{"1008":{"position":[[753,27]]}}}],["vari",{"_index":2016,"t":{"1368":{"position":[[1837,4]]}}}],["variabl",{"_index":2248,"t":{"1542":{"position":[[315,9]]},"1544":{"position":[[295,9]]},"1546":{"position":[[338,9]]},"1548":{"position":[[291,9]]},"1550":{"position":[[328,9]]},"1552":{"position":[[313,9]]},"1554":{"position":[[344,9]]},"1556":{"position":[[218,9]]},"1558":{"position":[[312,9]]},"1560":{"position":[[435,9]]},"1562":{"position":[[394,9]]},"1564":{"position":[[196,9]]},"1618":{"position":[[136,10]]}}}],["vcpu",{"_index":1278,"t":{"1178":{"position":[[43,5]]},"1184":{"position":[[98,5]]}}}],["vcq7j",{"_index":1215,"t":{"1144":{"position":[[630,5]]}}}],["verb",{"_index":1626,"t":{"1280":{"position":[[4159,6],[4414,6],[4609,6]]}}}],["verbos",{"_index":557,"t":{"920":{"position":[[332,9]]},"981":{"position":[[343,9]]}}}],["verifi",{"_index":697,"t":{"937":{"position":[[1708,6]]},"954":{"position":[[896,6]]},"981":{"position":[[5126,6]]},"1008":{"position":[[645,7]]},"1306":{"position":[[141,8]]},"1314":{"position":[[220,9]]}}}],["version",{"_index":211,"t":{"840":{"position":[[386,7]]},"935":{"position":[[398,7]]},"1033":{"position":[[1163,7]]},"1059":{"position":[[802,7]]},"1190":{"position":[[351,7]]},"1210":{"position":[[1326,8],[1370,8],[1412,8],[1849,8],[2069,8],[2160,8]]},"1280":{"position":[[652,8],[696,8],[738,8]]},"1282":{"position":[[1079,7],[1216,7]]},"1352":{"position":[[465,8],[872,8],[1183,7],[1219,7]]}}}],["version_kube_dashboard=$(curl",{"_index":1077,"t":{"1101":{"position":[[60,29]]},"1109":{"position":[[108,29]]}}}],["via",{"_index":1020,"t":{"1078":{"position":[[435,3]]},"1278":{"position":[[91,4]]}}}],["visibl",{"_index":803,"t":{"981":{"position":[[1561,10]]}}}],["vm.overcommit_memory=1",{"_index":1554,"t":{"1276":{"position":[[411,22]]}}}],["vm.panic_on_oom=0",{"_index":1553,"t":{"1276":{"position":[[393,17]]}}}],["vmodul",{"_index":512,"t":{"900":{"position":[[36,7]]},"920":{"position":[[357,7]]},"961":{"position":[[60,7]]},"981":{"position":[[368,7]]}}}],["vmodule=<module>=<level",{"_index":947,"t":{"1047":{"position":[[466,24]]}}}],["volum",{"_index":1586,"t":{"1280":{"position":[[1577,8],[2718,8],[3542,8]]},"1304":{"position":[[356,6]]},"1334":{"position":[[41,6],[98,6],[238,8]]},"1340":{"position":[[41,6],[98,6],[238,8]]},"1608":{"position":[[151,8]]}}}],["volumemount",{"_index":1940,"t":{"1334":{"position":[[167,13]]},"1340":{"position":[[167,13]]}}}],["volv",{"_index":1941,"t":{"1334":{"position":[[189,4],[255,4]]},"1338":{"position":[[68,4]]},"1340":{"position":[[189,4],[255,4],[303,4]]}}}],["vpn",{"_index":1160,"t":{"1127":{"position":[[87,3]]},"1129":{"position":[[25,3]]},"1131":{"position":[[75,3],[504,3],[566,3]]}}}],["vx.y.z",{"_index":930,"t":{"1033":{"position":[[1215,6],[1266,6],[1317,6]]}}}],["vxlan",{"_index":389,"t":{"869":{"position":[[416,5]]},"969":{"position":[[360,7]]},"981":{"position":[[1909,8],[2006,8]]},"1115":{"position":[[139,15],[194,5],[653,5]]},"1172":{"position":[[43,5],[392,5],[426,5]]},"1174":{"position":[[158,5]]}}}],["w",{"_index":1078,"t":{"1101":{"position":[[91,1]]},"1109":{"position":[[139,1]]}}}],["warn",{"_index":418,"t":{"873":{"position":[[388,7]]},"1210":{"position":[[1388,5],[1407,4]]},"1280":{"position":[[714,5],[733,4]]},"1368":{"position":[[1408,4]]},"1410":{"position":[[8,4]]},"1412":{"position":[[8,4]]},"1415":{"position":[[8,4]]},"1433":{"position":[[8,4]]},"1437":{"position":[[8,4]]},"1439":{"position":[[8,4]]},"1471":{"position":[[8,4]]},"1473":{"position":[[8,4]]},"1475":{"position":[[8,4]]},"1478":{"position":[[8,4]]},"1513":{"position":[[8,4]]},"1516":{"position":[[8,4]]},"1518":{"position":[[8,4]]},"1550":{"position":[[8,4]]},"1558":{"position":[[8,4]]},"1566":{"position":[[8,4]]},"1569":{"position":[[8,4]]},"1571":{"position":[[8,4]]},"1573":{"position":[[8,4]]},"1575":{"position":[[8,4]]},"1577":{"position":[[8,4]]},"1579":{"position":[[8,4]]},"1581":{"position":[[8,4]]},"1583":{"position":[[8,4]]},"1586":{"position":[[8,4]]},"1588":{"position":[[8,4]]},"1590":{"position":[[8,4]]},"1592":{"position":[[8,4]]},"1594":{"position":[[8,4]]},"1596":{"position":[[8,4]]},"1598":{"position":[[8,4]]},"1600":{"position":[[8,4]]},"1602":{"position":[[8,4]]},"1604":{"position":[[8,4]]},"1606":{"position":[[8,4]]},"1608":{"position":[[8,4]]},"1610":{"position":[[8,4]]},"1613":{"position":[[8,4]]},"1615":{"position":[[8,4]]},"1618":{"position":[[8,4]]},"1620":{"position":[[8,4]]},"1623":{"position":[[8,4]]},"1626":{"position":[[8,4]]},"1628":{"position":[[8,4]]},"1630":{"position":[[8,4]]},"1632":{"position":[[8,4]]}}}],["watch",{"_index":2293,"t":{"1571":{"position":[[63,5]]}}}],["wc",{"_index":2044,"t":{"1392":{"position":[[619,2]]},"1463":{"position":[[749,2]]},"1498":{"position":[[643,2]]},"1500":{"position":[[532,2]]},"1502":{"position":[[557,2]]},"1504":{"position":[[709,2]]},"1506":{"position":[[535,2]]},"1508":{"position":[[567,2]]},"1510":{"position":[[666,2]]},"1542":{"position":[[571,2]]},"1544":{"position":[[557,2]]},"1546":{"position":[[613,2]]}}}],["web",{"_index":959,"t":{"1059":{"position":[[171,3],[263,3],[441,3]]}}}],["webhook",{"_index":2251,"t":{"1544":{"position":[[101,8]]}}}],["webhook=tru",{"_index":1755,"t":{"1288":{"position":[[3117,12]]},"1548":{"position":[[836,12],[2059,12]]},"1560":{"position":[[1027,12],[2250,12]]}}}],["websocket",{"_index":489,"t":{"894":{"position":[[27,9]]},"1121":{"position":[[27,9]]},"1129":{"position":[[92,9]]}}}],["well",{"_index":564,"t":{"920":{"position":[[560,4]]},"981":{"position":[[571,4]]},"1272":{"position":[[946,4]]},"1280":{"position":[[1154,4]]}}}],["wg",{"_index":1110,"t":{"1115":{"position":[[960,2]]},"1117":{"position":[[24,2]]}}}],["whatev",{"_index":2066,"t":{"1392":{"position":[[1629,8]]},"1463":{"position":[[1759,8]]},"1498":{"position":[[1653,8]]},"1500":{"position":[[1542,8]]},"1502":{"position":[[1567,8]]},"1504":{"position":[[1719,8]]},"1506":{"position":[[1545,8]]},"1508":{"position":[[1577,8]]},"1510":{"position":[[1676,8]]}}}],["wherev",{"_index":2296,"t":{"1577":{"position":[[59,8]]}}}],["whether",{"_index":1795,"t":{"1290":{"position":[[129,7]]}}}],["wildcard",{"_index":2295,"t":{"1573":{"position":[[60,9]]}}}],["window",{"_index":221,"t":{"842":{"position":[[237,7]]},"1043":{"position":[[13,21]]}}}],["wireguard",{"_index":789,"t":{"969":{"position":[[427,22]]},"979":{"position":[[160,9]]},"981":{"position":[[1951,10],[1971,11]]},"993":{"position":[[277,14]]},"1115":{"position":[[155,9],[242,9],[293,9],[309,9],[351,9],[380,9],[807,9],[971,9]]},"1117":{"position":[[3,9],[65,9],[153,9],[314,9],[352,9]]},"1129":{"position":[[7,9],[120,9]]},"1172":{"position":[[90,9]]},"1174":{"position":[[238,9],[292,9]]}}}],["wireshark",{"_index":482,"t":{"884":{"position":[[608,9]]}}}],["without",{"_index":1506,"t":{"1272":{"position":[[377,7]]}}}],["worker",{"_index":2232,"t":{"1521":{"position":[[114,6]]},"1523":{"position":[[114,6]]},"1525":{"position":[[104,6]]},"1527":{"position":[[104,6]]},"1529":{"position":[[104,6]]},"1531":{"position":[[104,6]]},"1542":{"position":[[247,6]]},"1544":{"position":[[233,6]]},"1546":{"position":[[276,6]]},"1548":{"position":[[223,6]]},"1550":{"position":[[260,6]]},"1552":{"position":[[245,6]]},"1554":{"position":[[246,6]]},"1556":{"position":[[128,6]]},"1558":{"position":[[244,6]]},"1560":{"position":[[366,6]]},"1562":{"position":[[300,6]]},"1564":{"position":[[128,6]]},"1566":{"position":[[549,6]]}}}],["worker2",{"_index":1408,"t":{"1236":{"position":[[591,9]]}}}],["workload",{"_index":1897,"t":{"1318":{"position":[[142,9]]},"1577":{"position":[[81,8]]},"1586":{"position":[[157,10]]},"1588":{"position":[[87,9]]},"1590":{"position":[[87,9]]},"1592":{"position":[[87,9]]},"1594":{"position":[[87,9]]},"1596":{"position":[[87,9]]},"1600":{"position":[[87,9]]},"1606":{"position":[[87,9]]},"1608":{"position":[[87,9]]},"1610":{"position":[[87,9]]}}}],["world",{"_index":1895,"t":{"1316":{"position":[[522,6]]}}}],["world!\\n",{"_index":451,"t":{"880":{"position":[[538,11]]}}}],["worst",{"_index":1875,"t":{"1312":{"position":[[222,5]]}}}],["write",{"_index":763,"t":{"958":{"position":[[13,5],[100,5]]},"981":{"position":[[2391,5],[2433,5],[2507,5],[2544,5]]},"1091":{"position":[[349,5]]},"1093":{"position":[[141,5],[288,5]]},"1095":{"position":[[298,5],[386,5],[501,5]]}}}],["written",{"_index":1568,"t":{"1280":{"position":[[298,7]]},"1284":{"position":[[540,7]]},"1451":{"position":[[256,8]]}}}],["www.example.com",{"_index":965,"t":{"1059":{"position":[[521,15]]}}}],["x",{"_index":1285,"t":{"1178":{"position":[[122,1]]},"1184":{"position":[[177,1]]}}}],["x86_64",{"_index":1245,"t":{"1166":{"position":[[13,6]]},"1254":{"position":[[28,6]]}}}],["xarg",{"_index":2086,"t":{"1408":{"position":[[218,5]]}}}],["xeon",{"_index":1479,"t":{"1254":{"position":[[70,4]]}}}],["xx",{"_index":1289,"t":{"1178":{"position":[[148,2]]},"1184":{"position":[[202,2]]}}}],["xx98j",{"_index":1210,"t":{"1144":{"position":[[514,5]]}}}],["xxxxxx",{"_index":1239,"t":{"1156":{"position":[[178,6],[227,6]]},"1158":{"position":[[177,6],[226,6]]}}}],["xxxxxxxxxxxxxxxxxxx",{"_index":1915,"t":{"1322":{"position":[[480,21]]}}}],["y",{"_index":226,"t":{"844":{"position":[[157,1]]},"873":{"position":[[232,1],[285,1]]}}}],["yaml",{"_index":510,"t":{"898":{"position":[[110,4]]},"949":{"position":[[125,4]]},"1057":{"position":[[49,4]]},"1059":{"position":[[1280,4]]},"1085":{"position":[[180,4],[367,4]]},"1093":{"position":[[105,4],[436,4],[459,4],[473,4]]},"1119":{"position":[[177,4],[282,5],[399,4],[505,5]]},"1138":{"position":[[73,4]]},"1282":{"position":[[1177,4]]},"1334":{"position":[[312,5]]},"1336":{"position":[[263,4]]},"1352":{"position":[[1612,4],[1655,4]]}}}],["your_account@xyz.com",{"_index":1172,"t":{"1131":{"position":[[312,25],[361,25]]}}}],["your_ip_or_hostname_her",{"_index":920,"t":{"1031":{"position":[[338,24]]}}}],["yum",{"_index":412,"t":{"873":{"position":[[219,3],[272,3]]}}}],["z0",{"_index":874,"t":{"998":{"position":[[1309,2],[1321,2]]},"1138":{"position":[[688,2],[698,2],[707,2],[721,2],[731,2],[740,2]]}}}],["zero",{"_index":2165,"t":{"1447":{"position":[[217,5]]}}}],["zone=trust",{"_index":357,"t":{"865":{"position":[[164,12],[236,12]]}}}],["zxv",{"_index":206,"t":{"840":{"position":[[274,3]]}}}]],"pipeline":["stemmer"]}}]
\ No newline at end of file
diff --git a/zh/search.html b/zh/search.html
index aa002dfd7..ef82420eb 100644
--- a/zh/search.html
+++ b/zh/search.html
@@ -1,18 +1,18 @@
 <!doctype html>
-<html lang="zh" dir="ltr" class="search-page-wrapper plugin-search-algolia plugin-id-default">
+<html lang="zh" dir="ltr" class="plugin-@easyops-cn/docusaurus-search-local plugin-id-default">
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">在文档中搜索 | K3s</title><meta data-rh="true" property="og:title" content="K3s"><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/search"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="robots" content="noindex, follow"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/search"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/search" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/search" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">在文档中搜索</title><meta data-rh="true" property="og:title" content="K3s"><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/search"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docusaurus_tag" content="default"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docsearch:docusaurus_tag" content="default"><meta data-rh="true" property="robots" content="noindex, follow"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/search"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/search" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/search" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/search" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/search" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><div class="container margin-vert--lg"><h1>在文档中搜索</h1><form class="row"><div class="col searchQueryColumn_RTkw col--12"><input type="search" name="q" class="searchQueryInput_u2C7" placeholder="在此输入搜索字词" aria-label="搜索" autocomplete="off" autofocus=""></div></form><div class="row"><div class="col col--8 searchResultsColumn_JPFH"></div><div class="col col--4 text--right searchLogoColumn_rJIA"><a target="_blank" rel="noopener noreferrer" href="https://www.algolia.com/" aria-label="通过 Algolia 搜索"><svg viewBox="0 0 168 24" class="algoliaLogo_rT1R"><g fill="none"><path class="algoliaLogoPathFill_WdUC" d="M120.925 18.804c-4.386.02-4.386-3.54-4.386-4.106l-.007-13.336 2.675-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-10.846-2.18c.821 0 1.43-.047 1.855-.129v-2.719a6.334 6.334 0 0 0-1.574-.199 5.7 5.7 0 0 0-.897.069 2.699 2.699 0 0 0-.814.24c-.24.116-.439.28-.582.491-.15.212-.219.335-.219.656 0 .628.219.991.616 1.23s.938.362 1.615.362zm-.233-9.7c.883 0 1.629.109 2.231.328.602.218 1.088.525 1.444.915.363.396.609.922.76 1.483.157.56.232 1.175.232 1.85v6.874a32.5 32.5 0 0 1-1.868.314c-.834.123-1.772.185-2.813.185-.69 0-1.327-.069-1.895-.198a4.001 4.001 0 0 1-1.471-.636 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.803 0-.656.13-1.073.384-1.525a3.24 3.24 0 0 1 1.047-1.106c.445-.287.95-.492 1.532-.615a8.8 8.8 0 0 1 1.82-.185 8.404 8.404 0 0 1 1.972.24v-.438c0-.307-.035-.6-.11-.874a1.88 1.88 0 0 0-.384-.73 1.784 1.784 0 0 0-.724-.493 3.164 3.164 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.735 7.735 0 0 0-1.26.307l-.321-2.192c.335-.117.834-.233 1.478-.349a10.98 10.98 0 0 1 2.073-.178zm52.842 9.626c.822 0 1.43-.048 1.854-.13V13.7a6.347 6.347 0 0 0-1.574-.199c-.294 0-.595.021-.896.069a2.7 2.7 0 0 0-.814.24 1.46 1.46 0 0 0-.582.491c-.15.212-.218.335-.218.656 0 .628.218.991.615 1.23.404.245.938.362 1.615.362zm-.226-9.694c.883 0 1.629.108 2.231.327.602.219 1.088.526 1.444.915.355.39.609.923.759 1.483a6.8 6.8 0 0 1 .233 1.852v6.873c-.41.088-1.034.19-1.868.314-.834.123-1.772.184-2.813.184-.69 0-1.327-.068-1.895-.198a4.001 4.001 0 0 1-1.471-.635 3.085 3.085 0 0 1-.951-1.134c-.226-.465-.343-1.12-.343-1.804 0-.656.13-1.073.384-1.524.26-.45.608-.82 1.047-1.107.445-.286.95-.491 1.532-.614a8.803 8.803 0 0 1 2.751-.13c.329.034.671.096 1.04.185v-.437a3.3 3.3 0 0 0-.109-.875 1.873 1.873 0 0 0-.384-.731 1.784 1.784 0 0 0-.724-.492 3.165 3.165 0 0 0-1.143-.205c-.616 0-1.177.075-1.69.164a7.75 7.75 0 0 0-1.26.307l-.321-2.193c.335-.116.834-.232 1.478-.348a11.633 11.633 0 0 1 2.073-.177zm-8.034-1.271a1.626 1.626 0 0 1-1.628-1.62c0-.895.725-1.62 1.628-1.62.904 0 1.63.725 1.63 1.62 0 .895-.733 1.62-1.63 1.62zm1.348 13.22h-2.689V7.27l2.69-.423v11.956zm-4.714 0c-4.386.02-4.386-3.54-4.386-4.107l-.008-13.336 2.676-.424v13.254c0 .322 0 2.358 1.718 2.364v2.248zm-8.698-5.903c0-1.156-.253-2.119-.746-2.788-.493-.677-1.183-1.01-2.067-1.01-.882 0-1.574.333-2.065 1.01-.493.676-.733 1.632-.733 2.788 0 1.168.246 1.953.74 2.63.492.683 1.183 1.018 2.066 1.018.882 0 1.574-.342 2.067-1.019.492-.683.738-1.46.738-2.63zm2.737-.007c0 .902-.13 1.584-.397 2.33a5.52 5.52 0 0 1-1.128 1.906 4.986 4.986 0 0 1-1.752 1.223c-.685.286-1.739.45-2.265.45-.528-.006-1.574-.157-2.252-.45a5.096 5.096 0 0 1-1.744-1.223c-.487-.527-.863-1.162-1.137-1.906a6.345 6.345 0 0 1-.41-2.33c0-.902.123-1.77.397-2.508a5.554 5.554 0 0 1 1.15-1.892 5.133 5.133 0 0 1 1.75-1.216c.679-.287 1.425-.423 2.232-.423.808 0 1.553.142 2.237.423a4.88 4.88 0 0 1 1.753 1.216 5.644 5.644 0 0 1 1.135 1.892c.287.738.431 1.606.431 2.508zm-20.138 0c0 1.12.246 2.363.738 2.882.493.52 1.13.78 1.91.78.424 0 .828-.062 1.204-.178.377-.116.677-.253.917-.417V9.33a10.476 10.476 0 0 0-1.766-.226c-.971-.028-1.71.37-2.23 1.004-.513.636-.773 1.75-.773 2.788zm7.438 5.274c0 1.824-.466 3.156-1.404 4.004-.936.846-2.367 1.27-4.296 1.27-.705 0-2.17-.137-3.34-.396l.431-2.118c.98.205 2.272.26 2.95.26 1.074 0 1.84-.219 2.299-.656.459-.437.684-1.086.684-1.948v-.437a8.07 8.07 0 0 1-1.047.397c-.43.13-.93.198-1.492.198-.739 0-1.41-.116-2.018-.349a4.206 4.206 0 0 1-1.567-1.025c-.431-.45-.774-1.017-1.013-1.694-.24-.677-.363-1.885-.363-2.773 0-.834.13-1.88.384-2.577.26-.696.629-1.298 1.129-1.796.493-.498 1.095-.881 1.8-1.162a6.605 6.605 0 0 1 2.428-.457c.87 0 1.67.109 2.45.24.78.129 1.444.265 1.985.415V18.17zM6.972 6.677v1.627c-.712-.446-1.52-.67-2.425-.67-.585 0-1.045.13-1.38.391a1.24 1.24 0 0 0-.502 1.03c0 .425.164.765.494 1.02.33.256.835.532 1.516.83.447.192.795.356 1.045.495.25.138.537.332.862.582.324.25.563.548.718.894.154.345.23.741.23 1.188 0 .947-.334 1.691-1.004 2.234-.67.542-1.537.814-2.601.814-1.18 0-2.16-.229-2.936-.686v-1.708c.84.628 1.814.942 2.92.942.585 0 1.048-.136 1.388-.407.34-.271.51-.646.51-1.125 0-.287-.1-.55-.302-.79-.203-.24-.42-.42-.655-.542-.234-.123-.585-.29-1.053-.503a61.27 61.27 0 0 1-.582-.271 13.67 13.67 0 0 1-.55-.287 4.275 4.275 0 0 1-.567-.351 6.92 6.92 0 0 1-.455-.4c-.18-.17-.31-.34-.39-.51-.08-.17-.155-.37-.224-.598a2.553 2.553 0 0 1-.104-.742c0-.915.333-1.638.998-2.17.664-.532 1.523-.798 2.576-.798.968 0 1.793.17 2.473.51zm7.468 5.696v-.287c-.022-.607-.187-1.088-.495-1.444-.309-.357-.75-.535-1.324-.535-.532 0-.99.194-1.373.583-.382.388-.622.949-.717 1.683h3.909zm1.005 2.792v1.404c-.596.34-1.383.51-2.362.51-1.255 0-2.255-.377-3-1.132-.744-.755-1.116-1.744-1.116-2.968 0-1.297.34-2.316 1.021-3.055.68-.74 1.548-1.11 2.6-1.11 1.033 0 1.852.323 2.458.966.606.644.91 1.572.91 2.784 0 .33-.033.676-.096 1.038h-5.314c.107.702.405 1.239.894 1.611.49.372 1.106.558 1.85.558.862 0 1.58-.202 2.155-.606zm6.605-1.77h-1.212c-.596 0-1.045.116-1.349.35-.303.234-.454.532-.454.894 0 .372.117.664.35.877.235.213.575.32 1.022.32.51 0 .912-.142 1.204-.424.293-.281.44-.651.44-1.108v-.91zm-4.068-2.554V9.325c.627-.361 1.457-.542 2.489-.542 2.116 0 3.175 1.026 3.175 3.08V17h-1.548v-.957c-.415.68-1.143 1.02-2.186 1.02-.766 0-1.38-.22-1.843-.661-.462-.442-.694-1.003-.694-1.684 0-.776.293-1.38.878-1.81.585-.431 1.404-.647 2.457-.647h1.34V11.8c0-.554-.133-.971-.399-1.253-.266-.282-.707-.423-1.324-.423a4.07 4.07 0 0 0-2.345.718zm9.333-1.93v1.42c.394-1 1.101-1.5 2.123-1.5.148 0 .313.016.494.048v1.531a1.885 1.885 0 0 0-.75-.143c-.542 0-.989.24-1.34.718-.351.479-.527 1.048-.527 1.707V17h-1.563V8.91h1.563zm5.01 4.084c.022.82.272 1.492.75 2.019.479.526 1.15.79 2.01.79.639 0 1.235-.176 1.788-.527v1.404c-.521.319-1.186.479-1.995.479-1.265 0-2.276-.4-3.031-1.197-.755-.798-1.133-1.792-1.133-2.984 0-1.16.38-2.151 1.14-2.975.761-.825 1.79-1.237 3.088-1.237.702 0 1.346.149 1.93.447v1.436a3.242 3.242 0 0 0-1.77-.495c-.84 0-1.513.266-2.019.798-.505.532-.758 1.213-.758 2.042zM40.24 5.72v4.579c.458-1 1.293-1.5 2.505-1.5.787 0 1.42.245 1.899.734.479.49.718 1.17.718 2.042V17h-1.564v-5.106c0-.553-.14-.98-.422-1.284-.282-.303-.652-.455-1.11-.455-.531 0-1.002.202-1.411.606-.41.405-.615 1.022-.615 1.851V17h-1.563V5.72h1.563zm14.966 10.02c.596 0 1.096-.253 1.5-.758.404-.506.606-1.157.606-1.955 0-.915-.202-1.62-.606-2.114-.404-.495-.92-.742-1.548-.742-.553 0-1.05.224-1.491.67-.442.447-.662 1.133-.662 2.058 0 .958.212 1.67.638 2.138.425.469.946.703 1.563.703zM53.004 5.72v4.42c.574-.894 1.388-1.341 2.44-1.341 1.022 0 1.857.383 2.506 1.149.649.766.973 1.781.973 3.047 0 1.138-.309 2.109-.925 2.912-.617.803-1.463 1.205-2.537 1.205-1.075 0-1.894-.447-2.457-1.34V17h-1.58V5.72h1.58zm9.908 11.104l-3.223-7.913h1.739l1.005 2.632 1.26 3.415c.096-.32.48-1.458 1.15-3.415l.909-2.632h1.66l-2.92 7.866c-.777 2.074-1.963 3.11-3.559 3.11a2.92 2.92 0 0 1-.734-.079v-1.34c.17.042.351.064.543.064 1.032 0 1.755-.57 2.17-1.708z"></path><path fill="#5468FF" d="M78.988.938h16.594a2.968 2.968 0 0 1 2.966 2.966V20.5a2.967 2.967 0 0 1-2.966 2.964H78.988a2.967 2.967 0 0 1-2.966-2.964V3.897A2.961 2.961 0 0 1 78.988.938z"></path><path fill="white" d="M89.632 5.967v-.772a.978.978 0 0 0-.978-.977h-2.28a.978.978 0 0 0-.978.977v.793c0 .088.082.15.171.13a7.127 7.127 0 0 1 1.984-.28c.65 0 1.295.088 1.917.259.082.02.164-.04.164-.13m-6.248 1.01l-.39-.389a.977.977 0 0 0-1.382 0l-.465.465a.973.973 0 0 0 0 1.38l.383.383c.062.061.15.047.205-.014.226-.307.472-.601.746-.874.281-.28.568-.526.883-.751.068-.042.075-.137.02-.2m4.16 2.453v3.341c0 .096.104.165.192.117l2.97-1.537c.068-.034.089-.117.055-.184a3.695 3.695 0 0 0-3.08-1.866c-.068 0-.136.054-.136.13m0 8.048a4.489 4.489 0 0 1-4.49-4.482 4.488 4.488 0 0 1 4.49-4.482 4.488 4.488 0 0 1 4.489 4.482 4.484 4.484 0 0 1-4.49 4.482m0-10.85a6.363 6.363 0 1 0 0 12.729 6.37 6.37 0 0 0 6.372-6.368 6.358 6.358 0 0 0-6.371-6.36"></path></g></svg></a></div></div></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/search" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/search" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0"><div class="container margin-vert--lg"><h1>在文档中搜索</h1><div class="row"><div class="col col--12"><input type="search" name="q" class="searchQueryInput_CFBF" aria-label="Search" autocomplete="off" autofocus=""></div></div><section></section></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/security.html b/zh/security.html
index 3cd2d2d7d..60546b3a0 100644
--- a/zh/security.html
+++ b/zh/security.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">安全 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="安全 | K3s"><meta data-rh="true" name="description" content="本节介绍了加强 K3s 集群安全性的方法，包括 2 个部分。本指南假设 K3s 与嵌入式 etcd 一起运行。"><meta data-rh="true" property="og:description" content="本节介绍了加强 K3s 集群安全性的方法，包括 2 个部分。本指南假设 K3s 与嵌入式 etcd 一起运行。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">安全 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="安全 | K3s"><meta data-rh="true" name="description" content="本节介绍了加强 K3s 集群安全性的方法，包括 2 个部分。本指南假设 K3s 与嵌入式 etcd 一起运行。"><meta data-rh="true" property="og:description" content="本节介绍了加强 K3s 集群安全性的方法，包括 2 个部分。本指南假设 K3s 与嵌入式 etcd 一起运行。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">安全</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>安全</h1></header><p>本节介绍了加强 K3s 集群安全性的方法，包括 2 个部分。本指南假设 K3s 与嵌入式 etcd 一起运行。</p><p>以下文档适用于 CIS Kubernetes Benchmark v1.23。</p><ul><li><a href="/zh/security/hardening-guide">强化指南</a></li><li><a href="/zh/security/self-assessment">CIS Benchmark 自我评估指南</a></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/security.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/known-issues"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">已知问题</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security/secrets-encryption"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">Secret 加密</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">安全</span><meta itemprop="position" content="1"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>安全</h1></header><p>本节介绍了加强 K3s 集群安全性的方法，包括 2 个部分。本指南假设 K3s 与嵌入式 etcd 一起运行。</p><p>以下文档适用于 CIS Kubernetes Benchmark v1.23。</p><ul><li><a href="/zh/security/hardening-guide">强化指南</a></li><li><a href="/zh/security/self-assessment">CIS Benchmark 自我评估指南</a></li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/security.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/known-issues"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">已知问题</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security/secrets-encryption"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">Secret 加密</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/security/hardening-guide.html b/zh/security/hardening-guide.html
index bc329f54c..ece0d2836 100644
--- a/zh/security/hardening-guide.html
+++ b/zh/security/hardening-guide.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CIS Hardening Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security/hardening-guide"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Hardening Guide | K3s"><meta data-rh="true" name="description" content="请知悉，本文仅提供英文版。"><meta data-rh="true" property="og:description" content="请知悉，本文仅提供英文版。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security/hardening-guide"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/hardening-guide" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/hardening-guide" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">CIS Hardening Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security/hardening-guide"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Hardening Guide | K3s"><meta data-rh="true" name="description" content="请知悉，本文仅提供英文版。"><meta data-rh="true" property="og:description" content="请知悉，本文仅提供英文版。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security/hardening-guide"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/hardening-guide" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/hardening-guide" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/hardening-guide" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/security"><span itemprop="name">安全</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Hardening Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Hardening Guide</h1></header><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>请知悉，本文仅提供英文版。</p></div></div><p>This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).</p><p>K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:</p><ol><li>K3s will not modify the host operating system. Any host-level modifications will need to be done manually.</li><li>Certain CIS policy controls for <code>NetworkPolicies</code> and <code>PodSecurityStandards</code> (<code>PodSecurityPolicies</code> on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.</li></ol><p>The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn&#x27;t utilize these for the core components since everything is packaged into a single binary.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="host-level-requirements">Host-level Requirements<a href="#host-level-requirements" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ensure-protect-kernel-defaults-is-set">Ensure <code>protect-kernel-defaults</code> is set<a href="#ensure-protect-kernel-defaults-is-set" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet&#x27;s defaults.</p><blockquote><p><strong>Note:</strong> <code>protect-kernel-defaults</code> is exposed as a top-level flag for K3s.</p></blockquote><h4 class="anchor anchorWithStickyNavbar_LWe7" id="set-kernel-parameters">Set kernel parameters<a href="#set-kernel-parameters" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>Create a file called <code>/etc/sysctl.d/90-kubelet.conf</code> and add the snippet below. Then run <code>sysctl -p /etc/sysctl.d/90-kubelet.conf</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.panic_on_oom</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.overcommit_memory</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic_on_oops</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.keys.root_maxbytes</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">25000000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-runtime-requirements">Kubernetes Runtime Requirements<a href="#kubernetes-runtime-requirements" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section.</p><p>By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn&#x27;t enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the <code>PodSecurity</code> and <code>NodeRestriction</code> admission controllers enabled, among others.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pod-security">Pod Security<a href="#pod-security" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>K3s v1.25 and newer support <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/" target="_blank" rel="noopener noreferrer">Pod Security Admissions (PSAs)</a> for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The policy should be written to a file named <code>psa.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. </p><p>Here is an example of a compliant PSA:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>K3s v1.24 and older support <a href="https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/" target="_blank" rel="noopener noreferrer">Pod Security Policies (PSPs)</a> for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;enable-admission-plugins=NodeRestriction,PodSecurityPolicy&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will have the effect of maintaining the <code>NodeRestriction</code> plugin as well as enabling the <code>PodSecurityPolicy</code>. </p><p>When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark.</p><p>Here is an example of a compliant PSP:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.7/8/9</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">               </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain">       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a &quot;system unrestricted policy&quot; which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.</p><p>Combining the configuration above with the <a href="#networkpolicies">Network Policy</a> described in the next section, a single file can be placed in the <code>/var/lib/rancher/k3s/server/manifests</code> directory. Here is an example of a <code>policy.yaml</code> file: </p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> NET_ADMIN</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedUnsafeSysctls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv4.ip_forward</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv6.conf.all.forwarding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">authenticated</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svc</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">acct</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">serviceaccounts</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p><strong>Note:</strong> The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the <code>kube-system</code> namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networkpolicies">NetworkPolicies<a href="#networkpolicies" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods.</p><p>Network policies should be placed the <code>/var/lib/rancher/k3s/server/manifests</code> directory, where they will automatically be deployed on startup.</p><p>Here is an example of a compliant network policy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">network</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> &lt;NAMESPACE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">&gt;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> TCP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> UDP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.21 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.20 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v121</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app.kubernetes.io/name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v120</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>Operators must manage network policies as normal for additional namespaces that are created.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="api-server-audit-configuration">API Server audit configuration<a href="#api-server-audit-configuration" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn&#x27;t create by default the log directory and audit policy, as auditing requirements are specific to each user&#x27;s policies and environment.</p><p>The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p -m </span><span class="token number" style="color:rgb(247, 140, 108)">700</span><span class="token plain"> /var/lib/rancher/k3s/server/logs</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>A starter audit policy to log request metadata is provided below. The policy should be written to a file named <code>audit.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. Detailed information about policy configuration for the API server can be found in the Kubernetes <a href="https://kubernetes.io/docs/tasks/debug-application-cluster/audit/" target="_blank" rel="noopener noreferrer">documentation</a>.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> audit.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">level</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Metadata</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Both configurations must be passed as arguments to the API Server as:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If the configurations are created after K3s is installed, they must be added to K3s&#x27; systemd service in <code>/etc/systemd/system/k3s.service</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">ExecStart</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/usr/local/bin/k3s </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s must be restarted to load the new configuration.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl restart k3s.service</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-for-kubernetes-components">Configuration for Kubernetes Components<a href="#configuration-for-kubernetes-components" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>The configuration below should be placed in the <a href="/zh/installation/configuration#configuration-file">configuration file</a>, and contains all the necessary remediations to harden the Kubernetes components.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-execution-and-arguments">Control Plane Execution and Arguments<a href="#control-plane-execution-and-arguments" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-apiserver </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --advertise-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allow-privileged</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --api-audiences</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">unknown </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Node,RBAC </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cert-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/temporary-certs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.31</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --enable-admission-plugins</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">NodeRestriction,PodSecurityPolicy                      </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.17</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-cafile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.32</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-certfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-keyfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.key                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-servers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://127.0.0.1:2379 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --insecure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.19</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-certificate-authority</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-certificate</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.21</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-allowed-names</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">system:auth-proxy </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/request-header-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-extra-headers-prefix</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Extra- </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-group-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Group </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-username-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-User </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token plain">                                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.20</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-issuer</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">k3s </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.28</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-cluster-ip-range</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --storage-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">etcd3 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cipher-suites</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-controller-manager </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allocate-node-cidrs</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                                       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.7</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/controller.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10252</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --root-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.4 </span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --use-service-account-credentials</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                         </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.3</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-scheduler </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10251</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                     </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubelet </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authentication-token-webhook</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Webhook                                          </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cgroup-driver</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cgroupfs </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/client-ca.crt             </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cloud-provider</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">external </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-dns</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-domain</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cluster.local </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-bin-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-conf-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/etc/cni/net.d </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">remote </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --containerd</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-hard</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-minimum-reclaim</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --fail-swap-on</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --healthz-bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --hostname-override</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">hostname01 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/kubelet.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --node-labels</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --pod-manifest-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/pod-manifests </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --protect-kernel-defaults</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --read-only-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --resolv-conf</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/systemd/resolve/resolv.conf </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --runtime-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --serialize-image-pulls</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="known-issues">Known Issues<a href="#known-issues" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1215">Control 1.2.15<a href="#control-1215" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the admission control plugin <code>NamespaceLifecycle</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1216">Control 1.2.16<a href="#control-1216" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the admission control plugin <code>PodSecurityPolicy</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1222">Control 1.2.22<a href="#control-1222" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-path</code> argument is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1223">Control 1.2.23<a href="#control-1223" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-maxage</code> argument is set to 30 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1224">Control 1.2.24<a href="#control-1224" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-maxbackup</code> argument is set to 10 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1225">Control 1.2.25<a href="#control-1225" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-maxsize</code> argument is set to 100 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1226">Control 1.2.26<a href="#control-1226" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--request-timeout</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user&#x27;s connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1227">Control 1.2.27<a href="#control-1227" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--service-account-lookup</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1233">Control 1.2.33<a href="#control-1233" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--encryption-provider-config</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.<p>Detailed steps on how to configure secrets encryption in K3s are available in <a href="/zh/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1234">Control 1.2.34<a href="#control-1234" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that encryption providers are appropriately configured.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.<p>This can be remediated by passing a valid configuration to <code>k3s</code> as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in <a href="/zh/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-131">Control 1.3.1<a href="#control-131" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--terminated-pod-gc-threshold</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-321">Control 3.2.1<a href="#control-321" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that a minimal audit policy is created.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Logging is an important detective control for all systems, to detect potential unauthorized access.<p>This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-427">Control 4.2.7<a href="#control-427" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--make-iptables-util-chains</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-515">Control 5.1.5<a href="#control-515" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that default service accounts are not actively used</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.<p>Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account.</p><p>The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments.</p><p>This can be remediated by updating the <code>automountServiceAccountToken</code> field to <code>false</code> for the <code>default</code> service account in each namespace.</p><p>For <code>default</code> service accounts in the built-in namespaces (<code>kube-system</code>, <code>kube-public</code>, <code>kube-node-lease</code>, and <code>default</code>), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.</p></div></div></details><h2 class="anchor anchorWithStickyNavbar_LWe7" id="conclusion">Conclusion<a href="#conclusion" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the <a href="/zh/security/self-assessment">CIS Benchmark Self-Assessment Guide</a> to understand the expectations of each of the benchmark&#x27;s checks and how you can do the same on your cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/security/secrets-encryption"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">Secret 加密</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security/self-assessment"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">CIS Self Assessment Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#host-level-requirements" class="table-of-contents__link toc-highlight">Host-level Requirements</a><ul><li><a href="#ensure-protect-kernel-defaults-is-set" class="table-of-contents__link toc-highlight">Ensure <code>protect-kernel-defaults</code> is set</a></li></ul></li><li><a href="#kubernetes-runtime-requirements" class="table-of-contents__link toc-highlight">Kubernetes Runtime Requirements</a><ul><li><a href="#pod-security" class="table-of-contents__link toc-highlight">Pod Security</a></li><li><a href="#networkpolicies" class="table-of-contents__link toc-highlight">NetworkPolicies</a></li><li><a href="#api-server-audit-configuration" class="table-of-contents__link toc-highlight">API Server audit configuration</a></li></ul></li><li><a href="#configuration-for-kubernetes-components" class="table-of-contents__link toc-highlight">Configuration for Kubernetes Components</a></li><li><a href="#control-plane-execution-and-arguments" class="table-of-contents__link toc-highlight">Control Plane Execution and Arguments</a></li><li><a href="#known-issues" class="table-of-contents__link toc-highlight">Known Issues</a><ul><li><a href="#control-1215" class="table-of-contents__link toc-highlight">Control 1.2.15</a></li><li><a href="#control-1216" class="table-of-contents__link toc-highlight">Control 1.2.16</a></li><li><a href="#control-1222" class="table-of-contents__link toc-highlight">Control 1.2.22</a></li><li><a href="#control-1223" class="table-of-contents__link toc-highlight">Control 1.2.23</a></li><li><a href="#control-1224" class="table-of-contents__link toc-highlight">Control 1.2.24</a></li><li><a href="#control-1225" class="table-of-contents__link toc-highlight">Control 1.2.25</a></li><li><a href="#control-1226" class="table-of-contents__link toc-highlight">Control 1.2.26</a></li><li><a href="#control-1227" class="table-of-contents__link toc-highlight">Control 1.2.27</a></li><li><a href="#control-1233" class="table-of-contents__link toc-highlight">Control 1.2.33</a></li><li><a href="#control-1234" class="table-of-contents__link toc-highlight">Control 1.2.34</a></li><li><a href="#control-131" class="table-of-contents__link toc-highlight">Control 1.3.1</a></li><li><a href="#control-321" class="table-of-contents__link toc-highlight">Control 3.2.1</a></li><li><a href="#control-427" class="table-of-contents__link toc-highlight">Control 4.2.7</a></li><li><a href="#control-515" class="table-of-contents__link toc-highlight">Control 5.1.5</a></li></ul></li><li><a href="#conclusion" class="table-of-contents__link toc-highlight">Conclusion</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security/hardening-guide" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/security"><span itemprop="name">安全</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Hardening Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Hardening Guide</h1></header><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>请知悉，本文仅提供英文版。</p></div></div><p>This document provides prescriptive guidance for hardening a production installation of K3s. It outlines the configurations and controls required to address Kubernetes benchmark controls from the Center for Internet Security (CIS).</p><p>K3s has a number of security mitigations applied and turned on by default and will pass a number of the Kubernetes CIS controls without modification. There are some notable exceptions to this that require manual intervention to fully comply with the CIS Benchmark:</p><ol><li>K3s will not modify the host operating system. Any host-level modifications will need to be done manually.</li><li>Certain CIS policy controls for <code>NetworkPolicies</code> and <code>PodSecurityStandards</code> (<code>PodSecurityPolicies</code> on v1.24 and older) will restrict the functionality of the cluster. You must opt into having K3s configure these by adding the appropriate options (enabling of admission plugins) to your command-line flags or configuration file as well as manually applying appropriate policies. Further details are presented in the sections below.</li></ol><p>The first section (1.1) of the CIS Benchmark concerns itself primarily with pod manifest permissions and ownership. K3s doesn&#x27;t utilize these for the core components since everything is packaged into a single binary.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="host-level-requirements">Host-level Requirements<a href="#host-level-requirements" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>There are two areas of host-level requirements: kernel parameters and etcd process/directory configuration. These are outlined in this section.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="ensure-protect-kernel-defaults-is-set">Ensure <code>protect-kernel-defaults</code> is set<a href="#ensure-protect-kernel-defaults-is-set" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>This is a kubelet flag that will cause the kubelet to exit if the required kernel parameters are unset or are set to values that are different from the kubelet&#x27;s defaults.</p><blockquote><p><strong>Note:</strong> <code>protect-kernel-defaults</code> is exposed as a top-level flag for K3s.</p></blockquote><h4 class="anchor anchorWithStickyNavbar_LWe7" id="set-kernel-parameters">Set kernel parameters<a href="#set-kernel-parameters" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>Create a file called <code>/etc/sysctl.d/90-kubelet.conf</code> and add the snippet below. Then run <code>sysctl -p /etc/sysctl.d/90-kubelet.conf</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.panic_on_oom</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">vm.overcommit_memory</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.panic_on_oops</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kernel.keys.root_maxbytes</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">25000000</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="kubernetes-runtime-requirements">Kubernetes Runtime Requirements<a href="#kubernetes-runtime-requirements" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>The runtime requirements to comply with the CIS Benchmark are centered around pod security (via PSP or PSA), network policies and API Server auditing logs. These are outlined in this section.</p><p>By default, K3s does not include any pod security or network policies. However, K3s ships with a controller that will enforce network policies, if any are created. K3s doesn&#x27;t enable auditing by default, so audit log configuration and audit policy must be created manually. By default, K3s runs with the both the <code>PodSecurity</code> and <code>NodeRestriction</code> admission controllers enabled, among others.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pod-security">Pod Security<a href="#pod-security" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><p>K3s v1.25 and newer support <a href="https://kubernetes.io/docs/concepts/security/pod-security-admission/" target="_blank" rel="noopener noreferrer">Pod Security Admissions (PSAs)</a> for controlling pod security. PSAs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The policy should be written to a file named <code>psa.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. </p><p>Here is an example of a compliant PSA:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> apiserver.config.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> AdmissionConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">plugins</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurity</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">configuration</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> pod</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">security.admission.config.k8s.io/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityConfiguration</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">enforce-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">audit-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;restricted&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">warn-version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;latest&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">exemptions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">usernames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">runtimeClasses</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">namespaces</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain">kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"> cis</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><p>K3s v1.24 and older support <a href="https://v1-24.docs.kubernetes.io/docs/concepts/security/pod-security-policy/" target="_blank" rel="noopener noreferrer">Pod Security Policies (PSPs)</a> for controlling pod security. PSPs are enabled by passing the following flag to the K3s server:</p><div class="codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-text codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg=&quot;enable-admission-plugins=NodeRestriction,PodSecurityPolicy&quot;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>This will have the effect of maintaining the <code>NodeRestriction</code> plugin as well as enabling the <code>PodSecurityPolicy</code>. </p><p>When PSPs are enabled, a policy can be applied to satisfy the necessary controls described in section 5.2 of the CIS Benchmark.</p><p>Here is an example of a compliant PSP:</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.7/8/9</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">               </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain">                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain">       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># CIS - 5.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>For the above PSP to be effective, we need to create a ClusterRole and a ClusterRoleBinding. We also need to include a &quot;system unrestricted policy&quot; which is needed for system-level pods that require additional privileges, and an additional policy that allows sysctls necessary for servicelb to function properly.</p><p>Combining the configuration above with the <a href="#networkpolicies">Network Policy</a> described in the next section, a single file can be placed in the <code>/var/lib/rancher/k3s/server/manifests</code> directory. Here is an example of a <code>policy.yaml</code> file: </p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">requiredDropCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ALL</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;configMap&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;emptyDir&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;projected&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;secret&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;downwardAPI&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;csi&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;persistentVolumeClaim&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;ephemeral&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAsNonRoot&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;RunAsAny&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;MustRunAs&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ranges</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">readOnlyRootFilesystem</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostIPC</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostNetwork</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPID</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">privileged</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> policy/v1beta1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PodSecurityPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">annotations</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">seccomp.security.alpha.kubernetes.io/allowedProfileNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;*&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowPrivilegeEscalation</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">false</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedCapabilities</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> NET_ADMIN</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">allowedUnsafeSysctls</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv4.ip_forward</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> net.ipv6.conf.all.forwarding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">fsGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">hostPorts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">max</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">65535</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">min</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">runAsUser</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">seLinux</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">supplementalGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">rule</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RunAsAny</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroups</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> podsecuritypolicies</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resourceNames</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">verbs</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> use</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">restricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">authenticated</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">nodes</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svc</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">acct</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">unrestricted</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Group</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">serviceaccounts</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> RoleBinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">rolebinding</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">roleRef</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">apiGroup</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rbac.authorization.k8s.io</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ClusterRole</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> psp</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">svclb</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">psp</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">subjects</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> ServiceAccount</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> svclb</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">public</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><blockquote><p><strong>Note:</strong> The Kubernetes critical additions such as CNI, DNS, and Ingress are run as pods in the <code>kube-system</code> namespace. Therefore, this namespace will have a policy that is less restrictive so that these components can run properly.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="networkpolicies">NetworkPolicies<a href="#networkpolicies" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>CIS requires that all namespaces have a network policy applied that reasonably limits traffic into namespaces and pods.</p><p>Network policies should be placed the <code>/var/lib/rancher/k3s/server/manifests</code> directory, where they will automatically be deployed on startup.</p><p>Here is an example of a compliant network policy.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> intra</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">namespace</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">from</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">namespaceSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>With the applied restrictions, DNS will be blocked unless purposely allowed. Below is a network policy that will allow for traffic to exist for DNS.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">network</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> &lt;NAMESPACE</span><span class="token punctuation" style="color:rgb(199, 146, 234)">&gt;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> TCP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">port</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">53</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">protocol</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> UDP</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">dns</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>The metrics-server and Traefik ingress controller will be blocked by default if network policies are not created to allow access. Traefik v1 as packaged in K3s version 1.20 and below uses different labels than Traefik v2. Ensure that you only use the sample yaml below that is associated with the version of Traefik present on your cluster.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.21 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.20 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v121</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app.kubernetes.io/name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">k8s-app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> metrics</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">server</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">svclbtraefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">svccontroller.k3s.cattle.io/svcname</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> networking.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> NetworkPolicy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> allow</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">all</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">traefik</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">v120</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> kube</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">system</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">podSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchLabels</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">app</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> traefik</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">ingress</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">policyTypes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> Ingress</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>Operators must manage network policies as normal for additional namespaces that are created.</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="api-server-audit-configuration">API Server audit configuration<a href="#api-server-audit-configuration" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>CIS requirements 1.2.22 to 1.2.25 are related to configuring audit logs for the API Server. K3s doesn&#x27;t create by default the log directory and audit policy, as auditing requirements are specific to each user&#x27;s policies and environment.</p><p>The log directory, ideally, must be created before starting K3s. A restrictive access permission is recommended to avoid leaking potential sensitive information.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> </span><span class="token function" style="color:rgb(130, 170, 255)">mkdir</span><span class="token plain"> -p -m </span><span class="token number" style="color:rgb(247, 140, 108)">700</span><span class="token plain"> /var/lib/rancher/k3s/server/logs</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>A starter audit policy to log request metadata is provided below. The policy should be written to a file named <code>audit.yaml</code> in <code>/var/lib/rancher/k3s/server</code> directory. Detailed information about policy configuration for the API server can be found in the Kubernetes <a href="https://kubernetes.io/docs/tasks/debug-application-cluster/audit/" target="_blank" rel="noopener noreferrer">documentation</a>.</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> audit.k8s.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Policy</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">rules</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">level</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Metadata</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Both configurations must be passed as arguments to the API Server as:</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">--kube-apiserver-arg</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>If the configurations are created after K3s is installed, they must be added to K3s&#x27; systemd service in <code>/etc/systemd/system/k3s.service</code>.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token assign-left variable" style="color:rgb(191, 199, 213)">ExecStart</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/usr/local/bin/k3s </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    server </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;--kube-apiserver-arg=audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">\</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>K3s must be restarted to load the new configuration.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl daemon-reload</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token function" style="color:rgb(130, 170, 255)">sudo</span><span class="token plain"> systemctl restart k3s.service</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="configuration-for-kubernetes-components">Configuration for Kubernetes Components<a href="#configuration-for-kubernetes-components" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>The configuration below should be placed in the <a href="/zh/installation/configuration#configuration-file">configuration file</a>, and contains all the necessary remediations to harden the Kubernetes components.</p><div class="tabs-container tabList__CuJ"><ul role="tablist" aria-orientation="horizontal" class="tabs"><li role="tab" tabindex="0" aria-selected="true" class="tabs__item tabItem_LNqP tabs__item--active">v1.25 and Newer</li><li role="tab" tabindex="-1" aria-selected="false" class="tabs__item tabItem_LNqP">v1.24 and Older</li></ul><div class="margin-top--md"><div role="tabpanel" class="tabItem_Ymn6"><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;admission-control-config-file=/var/lib/rancher/k3s/server/psa.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><div role="tabpanel" class="tabItem_Ymn6" hidden=""><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">protect-kernel-defaults</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">secrets-encryption</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-apiserver-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;enable-admission-plugins=NodeRestriction,PodSecurityPolicy,NamespaceLifecycle,ServiceAccount&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-path=/var/lib/rancher/k3s/server/logs/audit.log&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-policy-file=/var/lib/rancher/k3s/server/audit.yaml&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxage=30&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxbackup=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;audit-log-maxsize=100&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;request-timeout=300s&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;service-account-lookup=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kube-controller-manager-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;terminated-pod-gc-threshold=10&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;use-service-account-credentials=true&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kubelet-arg</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;streaming-connection-idle-timeout=5m&#x27;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&#x27;make-iptables-util-chains=true&#x27;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="control-plane-execution-and-arguments">Control Plane Execution and Arguments<a href="#control-plane-execution-and-arguments" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>Listed below are the K3s control plane components and the arguments they are given at start, by default. Commented to their right is the CIS 1.6 control that they satisfy.</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-apiserver </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --advertise-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6443</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allow-privileged</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --api-audiences</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">unknown </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Node,RBAC </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cert-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/temporary-certs</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.31</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --enable-admission-plugins</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">NodeRestriction,PodSecurityPolicy                      </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.17</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-cafile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/server-ca.crt                  </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.32</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-certfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-keyfile</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/etcd/client.key                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.29</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --etcd-servers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">https://127.0.0.1:2379 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --insecure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.19</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-certificate-authority</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-certificate</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-client-key</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-kube-apiserver.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                                 </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.21</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --proxy-client-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-auth-proxy.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-allowed-names</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">system:auth-proxy </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/request-header-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-extra-headers-prefix</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Extra- </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-group-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-Group </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --requestheader-username-headers</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">X-Remote-User </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">6444</span><span class="token plain">                                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.20</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-issuer</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">k3s </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key            </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.28</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-cluster-ip-range</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --storage-backend</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">etcd3 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/serving-kube-apiserver.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.2.30</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cipher-suites</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-controller-manager </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --allocate-node-cidrs</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                                       </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.7</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-cidr</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.42</span><span class="token plain">.0.0/16 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.crt </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-signing-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/client-ca.key </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/controller.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10252</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --root-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/server-ca.crt                   </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.5</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --service-account-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/tls/service.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.4 </span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --use-service-account-credentials</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                         </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.3.3</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kube-scheduler </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1                                              </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/server/cred/scheduler.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10251</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --profiling</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                     </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 1.4.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --secure-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubelet </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0.0</span><span class="token plain">.0.0 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --anonymous-auth</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false                                                </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authentication-token-webhook</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --authorization-mode</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">Webhook                                          </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.2</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cgroup-driver</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cgroupfs </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --client-ca-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/client-ca.crt             </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.3</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cloud-provider</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">external </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-dns</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10.43</span><span class="token plain">.0.10 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cluster-domain</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">cluster.local </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-bin-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/data/223e6420f8db0d8828a8f5ed3c44489bb8eb47aa71485404f8af8c462a29bea3/bin </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --cni-conf-dir</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/etc/cni/net.d </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime-endpoint</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --container-runtime</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">remote </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --containerd</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/k3s/containerd/containerd.sock </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-hard</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">&lt;</span><span class="token number" style="color:rgb(247, 140, 108)">5</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --eviction-minimum-reclaim</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">imagefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">%,nodefs.available</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">10</span><span class="token plain">% </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --fail-swap-on</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --healthz-bind-address</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">127.0</span><span class="token plain">.0.1 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --hostname-override</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">hostname01 </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubeconfig</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/kubelet.kubeconfig </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --kubelet-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --node-labels</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain"> </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --pod-manifest-path</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/pod-manifests </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --protect-kernel-defaults</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">true                                        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.6</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --read-only-port</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token number" style="color:rgb(247, 140, 108)">0</span><span class="token plain">                                                    </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.4</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --resolv-conf</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/run/systemd/resolve/resolv.conf </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --runtime-cgroups</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/systemd/system.slice </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --serialize-image-pulls</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">false </span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-cert-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.crt        </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    --tls-private-key-file</span><span class="token operator" style="color:rgb(137, 221, 255)">=</span><span class="token plain">/var/lib/rancher/k3s/agent/serving-kubelet.key </span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># 4.2.10</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Additional information about CIS requirements 1.2.22 to 1.2.25 is presented below.</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="known-issues">Known Issues<a href="#known-issues" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>The following are controls that K3s currently does not pass by default. Each gap will be explained, along with a note clarifying whether it can be passed through manual operator intervention, or if it will be addressed in a future release of K3s.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1215">Control 1.2.15<a href="#control-1215" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the admission control plugin <code>NamespaceLifecycle</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting admission control policy to `NamespaceLifecycle` ensures that objects cannot be created in non-existent namespaces, and that namespaces undergoing termination are not used for creating the new objects. This is recommended to enforce the integrity of the namespace termination process and also for the availability of the newer objects.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1216">Control 1.2.16<a href="#control-1216" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the admission control plugin <code>PodSecurityPolicy</code> is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">A Pod Security Policy is a cluster-level resource that controls the actions that a pod can perform and what it has the ability to access. The `PodSecurityPolicy` objects define a set of conditions that a pod must run with in order to be accepted into the system. Pod Security Policies are comprised of settings and strategies that control the security features a pod has access to and hence this must be used to control pod access permissions.<p>This can be remediated by passing this argument as a value to the <code>enable-admission-plugins=</code> and pass that to  <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1222">Control 1.2.22<a href="#control-1222" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-path</code> argument is set.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Auditing the Kubernetes API Server provides a security-relevant chronological set of records documenting the sequence of activities that have affected system by individual users, administrators or other components of the system. Even though currently, Kubernetes provides only basic audit capabilities, it should be enabled. You can enable it by setting an appropriate audit log path.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1223">Control 1.2.23<a href="#control-1223" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-maxage</code> argument is set to 30 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Retaining logs for at least 30 days ensures that you can go back in time and investigate or correlate any events. Set your audit log retention period to 30 days or as per your business requirements.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1224">Control 1.2.24<a href="#control-1224" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-maxbackup</code> argument is set to 10 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. For example, if you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1225">Control 1.2.25<a href="#control-1225" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--audit-log-maxsize</code> argument is set to 100 or as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes automatically rotates the log files. Retaining old log files ensures that you would have sufficient log data available for carrying out any investigation or correlation. If you have set file size of 100 MB and the number of old log files to keep as 10, you would approximate have 1 GB of log data that you could potentially use for your analysis.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1226">Control 1.2.26<a href="#control-1226" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--request-timeout</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Setting global request timeout allows extending the API server request timeout limit to a duration appropriate to the user&#x27;s connection speed. By default, it is set to 60 seconds which might be problematic on slower connections making cluster resources inaccessible once the data volume for requests exceeds what can be transmitted in 60 seconds. But, setting this timeout limit to be too large can exhaust the API server resources making it prone to Denial-of-Service attack. Hence, it is recommended to set this limit as appropriate and change the default limit of 60 seconds only if needed.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1227">Control 1.2.27<a href="#control-1227" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--service-account-lookup</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">If `--service-account-lookup` is not enabled, the apiserver only verifies that the authentication token is valid, and does not validate that the service account token mentioned in the request is actually present in etcd. This allows using a service account token even after the corresponding service account is deleted. This is an example of time of check to time of use security issue.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1233">Control 1.2.33<a href="#control-1233" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--encryption-provider-config</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">`etcd` is a highly available key-value store used by Kubernetes deployments for persistent storage of all of its REST API objects. These objects are sensitive in nature and should be encrypted at rest to avoid any disclosures.<p>Detailed steps on how to configure secrets encryption in K3s are available in <a href="/zh/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-1234">Control 1.2.34<a href="#control-1234" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that encryption providers are appropriately configured.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Where `etcd` encryption is used, it is important to ensure that the appropriate set of encryption providers is used. Currently, the `aescbc`, `kms` and `secretbox` are likely to be appropriate options.<p>This can be remediated by passing a valid configuration to <code>k3s</code> as outlined above. Detailed steps on how to configure secrets encryption in K3s are available in <a href="/zh/security/secrets-encryption">Secrets Encryption</a>.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-131">Control 1.3.1<a href="#control-131" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--terminated-pod-gc-threshold</code> argument is set as appropriate.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Garbage collection is important to ensure sufficient resource availability and avoiding degraded performance and availability. In the worst case, the system might crash or just be unusable for a long period of time. The current setting for garbage collection is 12,500 terminated pods which might be too high for your system to sustain. Based on your system resources and tests, choose an appropriate threshold value to activate garbage collection.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-321">Control 3.2.1<a href="#control-321" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that a minimal audit policy is created.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Logging is an important detective control for all systems, to detect potential unauthorized access.<p>This can be remediated by passing controls 1.2.22 - 1.2.25 and verifying their efficacy.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-427">Control 4.2.7<a href="#control-427" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that the <code>--make-iptables-util-chains</code> argument is set to true.</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubelets can automatically manage the required changes to iptables based on how you choose your networking options for the pods. It is recommended to let kubelets manage the changes to iptables. This ensures that the iptables configuration remains in sync with pods networking configuration. Manually configuring iptables with dynamic pod network configuration changes might hamper the communication between pods/containers and to the outside world. You might have iptables rules too restrictive or too open.<p>This can be remediated by passing this argument as a value to the <code>--kube-apiserver-arg=</code> argument to <code>k3s server</code>. An example can be found below.</p></div></div></details><h3 class="anchor anchorWithStickyNavbar_LWe7" id="control-515">Control 5.1.5<a href="#control-515" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>Ensure that default service accounts are not actively used</p><details class="details_lb9f alert alert--info details_b_Ee" data-collapsed="true"><summary>Rationale</summary><div><div class="collapsibleContent_i85q">Kubernetes provides a `default` service account which is used by cluster workloads where no specific service account is assigned to the pod.<p>Where access to the Kubernetes API from a pod is required, a specific service account should be created for that pod, and rights granted to that service account.</p><p>The default service account should be configured such that it does not provide a service account token and does not have any explicit rights assignments.</p><p>This can be remediated by updating the <code>automountServiceAccountToken</code> field to <code>false</code> for the <code>default</code> service account in each namespace.</p><p>For <code>default</code> service accounts in the built-in namespaces (<code>kube-system</code>, <code>kube-public</code>, <code>kube-node-lease</code>, and <code>default</code>), K3s does not automatically do this. You can manually update this field on these service accounts to pass the control.</p></div></div></details><h2 class="anchor anchorWithStickyNavbar_LWe7" id="conclusion">Conclusion<a href="#conclusion" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>If you have followed this guide, your K3s cluster will be configured to comply with the CIS Kubernetes Benchmark. You can review the <a href="/zh/security/self-assessment">CIS Benchmark Self-Assessment Guide</a> to understand the expectations of each of the benchmark&#x27;s checks and how you can do the same on your cluster.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/hardening-guide.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/security/secrets-encryption"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">Secret 加密</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security/self-assessment"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">CIS Self Assessment Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#host-level-requirements" class="table-of-contents__link toc-highlight">Host-level Requirements</a><ul><li><a href="#ensure-protect-kernel-defaults-is-set" class="table-of-contents__link toc-highlight">Ensure <code>protect-kernel-defaults</code> is set</a></li></ul></li><li><a href="#kubernetes-runtime-requirements" class="table-of-contents__link toc-highlight">Kubernetes Runtime Requirements</a><ul><li><a href="#pod-security" class="table-of-contents__link toc-highlight">Pod Security</a></li><li><a href="#networkpolicies" class="table-of-contents__link toc-highlight">NetworkPolicies</a></li><li><a href="#api-server-audit-configuration" class="table-of-contents__link toc-highlight">API Server audit configuration</a></li></ul></li><li><a href="#configuration-for-kubernetes-components" class="table-of-contents__link toc-highlight">Configuration for Kubernetes Components</a></li><li><a href="#control-plane-execution-and-arguments" class="table-of-contents__link toc-highlight">Control Plane Execution and Arguments</a></li><li><a href="#known-issues" class="table-of-contents__link toc-highlight">Known Issues</a><ul><li><a href="#control-1215" class="table-of-contents__link toc-highlight">Control 1.2.15</a></li><li><a href="#control-1216" class="table-of-contents__link toc-highlight">Control 1.2.16</a></li><li><a href="#control-1222" class="table-of-contents__link toc-highlight">Control 1.2.22</a></li><li><a href="#control-1223" class="table-of-contents__link toc-highlight">Control 1.2.23</a></li><li><a href="#control-1224" class="table-of-contents__link toc-highlight">Control 1.2.24</a></li><li><a href="#control-1225" class="table-of-contents__link toc-highlight">Control 1.2.25</a></li><li><a href="#control-1226" class="table-of-contents__link toc-highlight">Control 1.2.26</a></li><li><a href="#control-1227" class="table-of-contents__link toc-highlight">Control 1.2.27</a></li><li><a href="#control-1233" class="table-of-contents__link toc-highlight">Control 1.2.33</a></li><li><a href="#control-1234" class="table-of-contents__link toc-highlight">Control 1.2.34</a></li><li><a href="#control-131" class="table-of-contents__link toc-highlight">Control 1.3.1</a></li><li><a href="#control-321" class="table-of-contents__link toc-highlight">Control 3.2.1</a></li><li><a href="#control-427" class="table-of-contents__link toc-highlight">Control 4.2.7</a></li><li><a href="#control-515" class="table-of-contents__link toc-highlight">Control 5.1.5</a></li></ul></li><li><a href="#conclusion" class="table-of-contents__link toc-highlight">Conclusion</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/security/secrets-encryption.html b/zh/security/secrets-encryption.html
index 4e2a6e050..65a6d9c1a 100644
--- a/zh/security/secrets-encryption.html
+++ b/zh/security/secrets-encryption.html
@@ -3,17 +3,17 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">Secret 加密 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security/secrets-encryption"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Secret 加密 | K3s"><meta data-rh="true" name="description" content="K3s 支持启用静态加密。首次启动 server 时，传递标志 --secrets-encryption 将自动执行以下操作："><meta data-rh="true" property="og:description" content="K3s 支持启用静态加密。首次启动 server 时，传递标志 --secrets-encryption 将自动执行以下操作："><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security/secrets-encryption"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/secrets-encryption" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/secrets-encryption" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">Secret 加密 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security/secrets-encryption"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="Secret 加密 | K3s"><meta data-rh="true" name="description" content="K3s 支持启用静态加密。首次启动 server 时，传递标志 --secrets-encryption 将自动执行以下操作："><meta data-rh="true" property="og:description" content="K3s 支持启用静态加密。首次启动 server 时，传递标志 --secrets-encryption 将自动执行以下操作："><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security/secrets-encryption"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/secrets-encryption" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/secrets-encryption" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/secrets-encryption" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/security"><span itemprop="name">安全</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Secret 加密</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>Secret 加密配置</h1><p>K3s 支持启用静态加密。首次启动 server 时，传递标志 <code>--secrets-encryption</code> 将自动执行以下操作：</p><ul><li>生成 AES-CBC 密钥</li><li>使用密钥生成加密配置文件</li><li>将配置作为 encryption-provider-config 传递给 KubeAPI</li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>提示</div><div class="admonitionContent_S0QG"><p>如果不重新启动现有 server，则无法在其上启用 Secret 加密。<br>
-<!-- -->如果使用脚本或<a href="/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9">配置选项</a>中描述的其他方法进行安装，请使用 <code>curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption</code>。</p></div></div><p>加密配置文件示例：</p><div class="language-json codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-json codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;kind&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;EncryptionConfiguration&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;apiVersion&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;apiserver.config.k8s.io/v1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secrets&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;providers&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;aescbc&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token property">&quot;keys&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;name&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;aescbckey&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;secret&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;xxxxxxxxxxxxxxxxxxx&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;identity&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密工具">Secret 加密工具<a href="#secret-加密工具" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 包含一个实用工具 <code>secrets-encrypt</code>，可以自动控制以下内容：</p><ul><li>禁用/启用 Secret 加密</li><li>添加新的加密密钥</li><li>轮换和删除加密密钥</li><li>重新加密 Secret</li></ul><p>有关详细信息，请参阅 <a href="/zh/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> 命令文档</a>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/security"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">安全</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security/hardening-guide"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secret-加密工具" class="table-of-contents__link toc-highlight">Secret 加密工具</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security/secrets-encryption" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/security"><span itemprop="name">安全</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">Secret 加密</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><h1>Secret 加密配置</h1><p>K3s 支持启用静态加密。首次启动 server 时，传递标志 <code>--secrets-encryption</code> 将自动执行以下操作：</p><ul><li>生成 AES-CBC 密钥</li><li>使用密钥生成加密配置文件</li><li>将配置作为 encryption-provider-config 传递给 KubeAPI</li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>提示</div><div class="admonitionContent_S0QG"><p>如果不重新启动现有 server，则无法在其上启用 Secret 加密。<br>
+<!-- -->如果使用脚本或<a href="/zh/installation/configuration#%E4%BD%BF%E7%94%A8%E5%AE%89%E8%A3%85%E8%84%9A%E6%9C%AC%E7%9A%84%E9%80%89%E9%A1%B9">配置选项</a>中描述的其他方法进行安装，请使用 <code>curl -sfL https://get.k3s.io | sh -s - server --secrets-encryption</code>。</p></div></div><p>加密配置文件示例：</p><div class="language-json codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-json codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;kind&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;EncryptionConfiguration&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;apiVersion&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;apiserver.config.k8s.io/v1&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;resources&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;secrets&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token property">&quot;providers&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;aescbc&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token property">&quot;keys&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">[</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;name&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;aescbckey&quot;</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">                </span><span class="token property">&quot;secret&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;xxxxxxxxxxxxxxxxxxx&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">              </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">            </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token punctuation" style="color:rgb(199, 146, 234)">,</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">          </span><span class="token property">&quot;identity&quot;</span><span class="token operator" style="color:rgb(137, 221, 255)">:</span><span class="token plain"> </span><span class="token punctuation" style="color:rgb(199, 146, 234)">{</span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">        </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">]</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">}</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h2 class="anchor anchorWithStickyNavbar_LWe7" id="secret-加密工具">Secret 加密工具<a href="#secret-加密工具" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 包含一个实用工具 <code>secrets-encrypt</code>，可以自动控制以下内容：</p><ul><li>禁用/启用 Secret 加密</li><li>添加新的加密密钥</li><li>轮换和删除加密密钥</li><li>重新加密 Secret</li></ul><p>有关详细信息，请参阅 <a href="/zh/cli/secrets-encrypt"><code>k3s secrets-encrypt</code> 命令文档</a>。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/secrets-encryption.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/security"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">安全</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/security/hardening-guide"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#secret-加密工具" class="table-of-contents__link toc-highlight">Secret 加密工具</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/security/self-assessment.html b/zh/security/self-assessment.html
index 0fb6a1baa..a09d6ce13 100644
--- a/zh/security/self-assessment.html
+++ b/zh/security/self-assessment.html
@@ -3,13 +3,13 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">CIS Self Assessment Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security/self-assessment"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Self Assessment Guide | K3s"><meta data-rh="true" name="description" content="请知悉，本文仅提供英文版。"><meta data-rh="true" property="og:description" content="请知悉，本文仅提供英文版。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security/self-assessment"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/self-assessment" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/self-assessment" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">CIS Self Assessment Guide | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/security/self-assessment"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="CIS Self Assessment Guide | K3s"><meta data-rh="true" name="description" content="请知悉，本文仅提供英文版。"><meta data-rh="true" property="og:description" content="请知悉，本文仅提供英文版。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/security/self-assessment"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/security/self-assessment" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/security/self-assessment" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/security/self-assessment" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/security"><span itemprop="name">安全</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Self Assessment Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Self Assessment Guide</h1></header><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>请知悉，本文仅提供英文版。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24<a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><h4 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>This document is a companion to the <a href="/zh/security/hardening-guide">K3s security hardening guide</a>. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers.</p><p>This guide is specific to the <strong>v1.22</strong>, <strong>v1.23</strong> and <strong>v1.24</strong> release line of K3s and the <strong>v1.23</strong> release of the CIS Kubernetes Benchmark.</p><p>For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in <a href="https://www.cisecurity.org/benchmark/kubernetes/" target="_blank" rel="noopener noreferrer">Center for Internet Security (CIS)</a>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="testing-controls-methodology">Testing controls methodology<a href="#testing-controls-methodology" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide.</p><p>Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing.</p><p>These are the possible results for each control:</p><ul><li><strong>Pass</strong> - The K3s cluster under test passed the audit outlined in the benchmark.</li><li><strong>Not Applicable</strong> - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so.</li><li><strong>Warn</strong> - The control is manual in the CIS benchmark and it depends on the cluster&#x27;s use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.</li></ul><p>This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the &quot;audit&quot; commands to fit your scenario.</p><blockquote><p>NOTE: Only <code>automated</code> tests (previously called <code>scored</code>) are covered in this guide.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controls">Controls<a href="#controls" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><hr><h2 class="anchor anchorWithStickyNavbar_LWe7" id="11-control-plane-node-configuration-files">1.1 Control Plane Node Configuration Files<a href="#11-control-plane-node-configuration-files" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)<a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/security/self-assessment" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/secrets-encryption">Secret 加密</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/security/hardening-guide">CIS Hardening Guide</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/security/self-assessment">CIS Self Assessment Guide</a></li></ul></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/security"><span itemprop="name">安全</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">CIS Self Assessment Guide</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>CIS Self Assessment Guide</h1></header><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>请知悉，本文仅提供英文版。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24<a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><h4 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>This document is a companion to the <a href="/zh/security/hardening-guide">K3s security hardening guide</a>. The hardening guide provides prescriptive guidance for hardening a production installation of K3s, and this benchmark guide is meant to help you evaluate the level of security of the hardened cluster against each control in the CIS Kubernetes Benchmark. It is to be used by K3s operators, security teams, auditors, and decision-makers.</p><p>This guide is specific to the <strong>v1.22</strong>, <strong>v1.23</strong> and <strong>v1.24</strong> release line of K3s and the <strong>v1.23</strong> release of the CIS Kubernetes Benchmark.</p><p>For more information about each control, including detailed descriptions and remediations for failing tests, you can refer to the corresponding section of the CIS Kubernetes Benchmark v1.6. You can download the benchmark, after creating a free account, in <a href="https://www.cisecurity.org/benchmark/kubernetes/" target="_blank" rel="noopener noreferrer">Center for Internet Security (CIS)</a>.</p><h4 class="anchor anchorWithStickyNavbar_LWe7" id="testing-controls-methodology">Testing controls methodology<a href="#testing-controls-methodology" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h4><p>Each control in the CIS Kubernetes Benchmark was evaluated against a K3s cluster that was configured according to the accompanying hardening guide.</p><p>Where control audits differ from the original CIS benchmark, the audit commands specific to K3s are provided for testing.</p><p>These are the possible results for each control:</p><ul><li><strong>Pass</strong> - The K3s cluster under test passed the audit outlined in the benchmark.</li><li><strong>Not Applicable</strong> - The control is not applicable to K3s because of how it is designed to operate. The remediation section will explain why this is so.</li><li><strong>Warn</strong> - The control is manual in the CIS benchmark and it depends on the cluster&#x27;s use case or some other factor that must be determined by the cluster operator. These controls have been evaluated to ensure K3s does not prevent their implementation, but no further configuration or auditing of the cluster under test has been performed.</li></ul><p>This guide makes the assumption that K3s is running as a Systemd unit. Your installation may vary and will require you to adjust the &quot;audit&quot; commands to fit your scenario.</p><blockquote><p>NOTE: Only <code>automated</code> tests (previously called <code>scored</code>) are covered in this guide.</p></blockquote><h3 class="anchor anchorWithStickyNavbar_LWe7" id="controls">Controls<a href="#controls" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><hr><h2 class="anchor anchorWithStickyNavbar_LWe7" id="11-control-plane-node-configuration-files">1.1 Control Plane Node Configuration Files<a href="#11-control-plane-node-configuration-files" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><h3 class="anchor anchorWithStickyNavbar_LWe7" id="111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)<a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
 Run the below command (based on the file location on your system) on the
 control plane node.
 For example, chmod 644 /etc/kubernetes/manifests/kube-apiserver.yaml</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)<a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><strong>Result:</strong> Not Applicable</p><p><strong>Remediation:</strong>
@@ -451,10 +451,10 @@
 suggested list of SecurityContexts, you may refer to the CIS Security Benchmark for Docker
 Containers.</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="574-the-default-namespace-should-not-be-used-manual">5.7.4 The default namespace should not be used (Manual)<a href="#574-the-default-namespace-should-not-be-used-manual" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><strong>Result:</strong> warn</p><p><strong>Remediation:</strong>
 Ensure that namespaces are created to allow for appropriate segregation of Kubernetes
-resources and that all new resources are created in a specific namespace.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/security/hardening-guide"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="table-of-contents__link toc-highlight">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24</a></li><li><a href="#controls" class="table-of-contents__link toc-highlight">Controls</a></li><li><a href="#11-control-plane-node-configuration-files" class="table-of-contents__link toc-highlight">1.1 Control Plane Node Configuration Files</a><ul><li><a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)</a></li><li><a href="#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)</a></li><li><a href="#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated" class="table-of-contents__link toc-highlight">1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)</a></li><li><a href="#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)</a></li><li><a href="#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)</a></li><li><a href="#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual" class="table-of-contents__link toc-highlight">1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)</a></li></ul></li><li><a href="#12-api-server" class="table-of-contents__link toc-highlight">1.2 API Server</a><ul><li><a href="#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual" class="table-of-contents__link toc-highlight">1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)</a></li><li><a href="#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)</a></li><li><a href="#123-ensure-that-the---denyserviceexternalips-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)</a></li><li><a href="#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)</a></li><li><a href="#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)</a></li><li><a href="#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)</a></li><li><a href="#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#128-ensure-that-the---authorization-mode-argument-includes-node-automated" class="table-of-contents__link toc-highlight">1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)</a></li><li><a href="#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated" class="table-of-contents__link toc-highlight">1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)</a></li><li><a href="#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual" class="table-of-contents__link toc-highlight">1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)</a></li><li><a href="#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)</a></li><li><a href="#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual" class="table-of-contents__link toc-highlight">1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)</a></li><li><a href="#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual" class="table-of-contents__link toc-highlight">1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)</a></li><li><a href="#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated" class="table-of-contents__link toc-highlight">1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)</a></li><li><a href="#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated" class="table-of-contents__link toc-highlight">1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)</a></li><li><a href="#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated" class="table-of-contents__link toc-highlight">1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)</a></li><li><a href="#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated" class="table-of-contents__link toc-highlight">1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)</a></li><li><a href="#1218-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.2.18 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#1219-ensure-that-the---audit-log-path-argument-is-set-automated" class="table-of-contents__link toc-highlight">1.2.19 Ensure that the --audit-log-path argument is set (Automated)</a></li><li><a href="#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)</a></li><li><a href="#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)</a></li><li><a href="#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)</a></li><li><a href="#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)</a></li><li><a href="#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)</a></li><li><a href="#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)</a></li><li><a href="#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)</a></li><li><a href="#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)</a></li><li><a href="#1231-ensure-that-encryption-providers-are-appropriately-configured-manual" class="table-of-contents__link toc-highlight">1.2.31 Ensure that encryption providers are appropriately configured (Manual)</a></li><li><a href="#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#13-controller-manager" class="table-of-contents__link toc-highlight">1.3 Controller Manager</a><ul><li><a href="#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)</a></li><li><a href="#132-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.3.2 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)</a></li><li><a href="#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)</a></li><li><a href="#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)</a></li><li><a href="#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#14-scheduler" class="table-of-contents__link toc-highlight">1.4 Scheduler</a><ul><li><a href="#141-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.4.1 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#2-etcd-node-configuration" class="table-of-contents__link toc-highlight">2 Etcd Node Configuration</a><ul><li><a href="#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)</a></li><li><a href="#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.2 Ensure that the --client-cert-auth argument is set to true (Automated)</a></li><li><a href="#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.3 Ensure that the --auto-tls argument is not set to true (Automated)</a></li><li><a href="#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)</a></li><li><a href="#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)</a></li><li><a href="#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual" class="table-of-contents__link toc-highlight">2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)</a></li></ul></li><li><a href="#31-authentication-and-authorization" class="table-of-contents__link toc-highlight">3.1 Authentication and Authorization</a><ul><li><a href="#311-client-certificate-authentication-should-not-be-used-for-users-manual" class="table-of-contents__link toc-highlight">3.1.1 Client certificate authentication should not be used for users (Manual)</a></li></ul></li><li><a href="#32-logging" class="table-of-contents__link toc-highlight">3.2 Logging</a><ul><li><a href="#321-ensure-that-a-minimal-audit-policy-is-created-manual" class="table-of-contents__link toc-highlight">3.2.1 Ensure that a minimal audit policy is created (Manual)</a></li><li><a href="#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual" class="table-of-contents__link toc-highlight">3.2.2 Ensure that the audit policy covers key security concerns (Manual)</a></li></ul></li><li><a href="#41-worker-node-configuration-files" class="table-of-contents__link toc-highlight">4.1 Worker Node Configuration Files</a><ul><li><a href="#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)</a></li><li><a href="#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)</a></li><li><a href="#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)</a></li><li><a href="#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)</a></li><li><a href="#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)</a></li><li><a href="#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)</a></li></ul></li><li><a href="#42-kubelet" class="table-of-contents__link toc-highlight">4.2 Kubelet</a><ul><li><a href="#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)</a></li><li><a href="#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)</a></li><li><a href="#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)</a></li><li><a href="#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)</a></li><li><a href="#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)</a></li><li><a href="#428-ensure-that-the---hostname-override-argument-is-not-set-manual" class="table-of-contents__link toc-highlight">4.2.8 Ensure that the --hostname-override argument is not set (Manual)</a></li><li><a href="#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual" class="table-of-contents__link toc-highlight">4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)</a></li><li><a href="#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)</a></li><li><a href="#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)</a></li><li><a href="#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual" class="table-of-contents__link toc-highlight">4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)</a></li><li><a href="#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#51-rbac-and-service-accounts" class="table-of-contents__link toc-highlight">5.1 RBAC and Service Accounts</a><ul><li><a href="#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual" class="table-of-contents__link toc-highlight">5.1.1 Ensure that the cluster-admin role is only used where required (Manual)</a></li><li><a href="#512-minimize-access-to-secrets-manual" class="table-of-contents__link toc-highlight">5.1.2 Minimize access to secrets (Manual)</a></li><li><a href="#513-minimize-wildcard-use-in-roles-and-clusterroles-manual" class="table-of-contents__link toc-highlight">5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)</a></li><li><a href="#514-minimize-access-to-create-pods-manual" class="table-of-contents__link toc-highlight">5.1.4 Minimize access to create pods (Manual)</a></li><li><a href="#515-ensure-that-default-service-accounts-are-not-actively-used-manual" class="table-of-contents__link toc-highlight">5.1.5 Ensure that default service accounts are not actively used. (Manual)</a></li><li><a href="#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual" class="table-of-contents__link toc-highlight">5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)</a></li><li><a href="#517-avoid-use-of-systemmasters-group-manual" class="table-of-contents__link toc-highlight">5.1.7 Avoid use of system:masters group (Manual)</a></li><li><a href="#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual" class="table-of-contents__link toc-highlight">5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)</a></li></ul></li><li><a href="#52-pod-security-standards" class="table-of-contents__link toc-highlight">5.2 Pod Security Standards</a><ul><li><a href="#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual" class="table-of-contents__link toc-highlight">5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)</a></li><li><a href="#522-minimize-the-admission-of-privileged-containers-automated" class="table-of-contents__link toc-highlight">5.2.2 Minimize the admission of privileged containers (Automated)</a></li><li><a href="#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated" class="table-of-contents__link toc-highlight">5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)</a></li><li><a href="#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated" class="table-of-contents__link toc-highlight">5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)</a></li><li><a href="#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated" class="table-of-contents__link toc-highlight">5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)</a></li><li><a href="#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated" class="table-of-contents__link toc-highlight">5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)</a></li><li><a href="#527-minimize-the-admission-of-root-containers-automated" class="table-of-contents__link toc-highlight">5.2.7 Minimize the admission of root containers (Automated)</a></li><li><a href="#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated" class="table-of-contents__link toc-highlight">5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)</a></li><li><a href="#529-minimize-the-admission-of-containers-with-added-capabilities-automated" class="table-of-contents__link toc-highlight">5.2.9 Minimize the admission of containers with added capabilities (Automated)</a></li><li><a href="#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual" class="table-of-contents__link toc-highlight">5.2.10 Minimize the admission of containers with capabilities assigned (Manual)</a></li><li><a href="#5211-minimize-the-admission-of-windows-hostprocess-containers-manual" class="table-of-contents__link toc-highlight">5.2.11 Minimize the admission of Windows HostProcess containers (Manual)</a></li><li><a href="#5212-minimize-the-admission-of-hostpath-volumes-manual" class="table-of-contents__link toc-highlight">5.2.12 Minimize the admission of HostPath volumes (Manual)</a></li><li><a href="#5213-minimize-the-admission-of-containers-which-use-hostports-manual" class="table-of-contents__link toc-highlight">5.2.13 Minimize the admission of containers which use HostPorts (Manual)</a></li></ul></li><li><a href="#53-network-policies-and-cni" class="table-of-contents__link toc-highlight">5.3 Network Policies and CNI</a><ul><li><a href="#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual" class="table-of-contents__link toc-highlight">5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)</a></li><li><a href="#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual" class="table-of-contents__link toc-highlight">5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)</a></li></ul></li><li><a href="#54-secrets-management" class="table-of-contents__link toc-highlight">5.4 Secrets Management</a><ul><li><a href="#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual" class="table-of-contents__link toc-highlight">5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)</a></li><li><a href="#542-consider-external-secret-storage-manual" class="table-of-contents__link toc-highlight">5.4.2 Consider external secret storage (Manual)</a></li></ul></li><li><a href="#55-extensible-admission-control" class="table-of-contents__link toc-highlight">5.5 Extensible Admission Control</a><ul><li><a href="#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual" class="table-of-contents__link toc-highlight">5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)</a></li></ul></li><li><a href="#57-general-policies" class="table-of-contents__link toc-highlight">5.7 General Policies</a><ul><li><a href="#571-create-administrative-boundaries-between-resources-using-namespaces-manual" class="table-of-contents__link toc-highlight">5.7.1 Create administrative boundaries between resources using namespaces (Manual)</a></li><li><a href="#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual" class="table-of-contents__link toc-highlight">5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)</a></li><li><a href="#573-apply-securitycontext-to-your-pods-and-containers-manual" class="table-of-contents__link toc-highlight">5.7.3 Apply SecurityContext to your Pods and Containers (Manual)</a></li><li><a href="#574-the-default-namespace-should-not-be-used-manual" class="table-of-contents__link toc-highlight">5.7.4 The default namespace should not be used (Manual)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+resources and that all new resources are created in a specific namespace.</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/security/self-assessment.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/security/hardening-guide"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">CIS Hardening Guide</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#cis-kubernetes-benchmark-v123---k3s-with-kubernetes-v122-to-v124" class="table-of-contents__link toc-highlight">CIS Kubernetes Benchmark v1.23 - K3s with Kubernetes v1.22 to v1.24</a></li><li><a href="#controls" class="table-of-contents__link toc-highlight">Controls</a></li><li><a href="#11-control-plane-node-configuration-files" class="table-of-contents__link toc-highlight">1.1 Control Plane Node Configuration Files</a><ul><li><a href="#111-ensure-that-the-api-server-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.1 Ensure that the API server pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#112-ensure-that-the-api-server-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.2 Ensure that the API server pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#113-ensure-that-the-controller-manager-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.3 Ensure that the controller manager pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#114-ensure-that-the-controller-manager-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.4 Ensure that the controller manager pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#115-ensure-that-the-scheduler-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.5 Ensure that the scheduler pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#116-ensure-that-the-scheduler-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.6 Ensure that the scheduler pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#117-ensure-that-the-etcd-pod-specification-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.7 Ensure that the etcd pod specification file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#118-ensure-that-the-etcd-pod-specification-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.8 Ensure that the etcd pod specification file ownership is set to root:root (Automated)</a></li><li><a href="#119-ensure-that-the-container-network-interface-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.9 Ensure that the Container Network Interface file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1110-ensure-that-the-container-network-interface-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">1.1.10 Ensure that the Container Network Interface file ownership is set to root:root (Manual)</a></li><li><a href="#1111-ensure-that-the-etcd-data-directory-permissions-are-set-to-700-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.11 Ensure that the etcd data directory permissions are set to 700 or more restrictive (Automated)</a></li><li><a href="#1112-ensure-that-the-etcd-data-directory-ownership-is-set-to-etcdetcd-automated" class="table-of-contents__link toc-highlight">1.1.12 Ensure that the etcd data directory ownership is set to etcd:etcd (Automated)</a></li><li><a href="#1113-ensure-that-the-adminconf-file-permissions-are-set-to-600-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.13 Ensure that the admin.conf file permissions are set to 600 or more restrictive (Automated)</a></li><li><a href="#1114-ensure-that-the-adminconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.14 Ensure that the admin.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1115-ensure-that-the-schedulerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.15 Ensure that the scheduler.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1116-ensure-that-the-schedulerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.16 Ensure that the scheduler.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1117-ensure-that-the-controller-managerconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">1.1.17 Ensure that the controller-manager.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#1118-ensure-that-the-controller-managerconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.18 Ensure that the controller-manager.conf file ownership is set to root:root (Automated)</a></li><li><a href="#1119-ensure-that-the-kubernetes-pki-directory-and-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">1.1.19 Ensure that the Kubernetes PKI directory and file ownership is set to root:root (Automated)</a></li><li><a href="#1120-ensure-that-the-kubernetes-pki-certificate-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">1.1.20 Ensure that the Kubernetes PKI certificate file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#1121-ensure-that-the-kubernetes-pki-key-file-permissions-are-set-to-600-manual" class="table-of-contents__link toc-highlight">1.1.21 Ensure that the Kubernetes PKI key file permissions are set to 600 (Manual)</a></li></ul></li><li><a href="#12-api-server" class="table-of-contents__link toc-highlight">1.2 API Server</a><ul><li><a href="#121-ensure-that-the---anonymous-auth-argument-is-set-to-false-manual" class="table-of-contents__link toc-highlight">1.2.1 Ensure that the --anonymous-auth argument is set to false (Manual)</a></li><li><a href="#122-ensure-that-the---token-auth-file-parameter-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.2 Ensure that the --token-auth-file parameter is not set (Automated)</a></li><li><a href="#123-ensure-that-the---denyserviceexternalips-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.3 Ensure that the --DenyServiceExternalIPs is not set (Automated)</a></li><li><a href="#124-ensure-that-the---kubelet-https-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.4 Ensure that the --kubelet-https argument is set to true (Automated)</a></li><li><a href="#125-ensure-that-the---kubelet-client-certificate-and---kubelet-client-key-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.5 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate (Automated)</a></li><li><a href="#126-ensure-that-the---kubelet-certificate-authority-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriate (Automated)</a></li><li><a href="#127-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">1.2.7 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#128-ensure-that-the---authorization-mode-argument-includes-node-automated" class="table-of-contents__link toc-highlight">1.2.8 Ensure that the --authorization-mode argument includes Node (Automated)</a></li><li><a href="#129-ensure-that-the---authorization-mode-argument-includes-rbac-automated" class="table-of-contents__link toc-highlight">1.2.9 Ensure that the --authorization-mode argument includes RBAC (Automated)</a></li><li><a href="#1210-ensure-that-the-admission-control-plugin-eventratelimit-is-set-manual" class="table-of-contents__link toc-highlight">1.2.10 Ensure that the admission control plugin EventRateLimit is set (Manual)</a></li><li><a href="#1211-ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set-automated" class="table-of-contents__link toc-highlight">1.2.11 Ensure that the admission control plugin AlwaysAdmit is not set (Automated)</a></li><li><a href="#1212-ensure-that-the-admission-control-plugin-alwayspullimages-is-set-manual" class="table-of-contents__link toc-highlight">1.2.12 Ensure that the admission control plugin AlwaysPullImages is set (Manual)</a></li><li><a href="#1213-ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used-manual" class="table-of-contents__link toc-highlight">1.2.13 Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used (Manual)</a></li><li><a href="#1214-ensure-that-the-admission-control-plugin-serviceaccount-is-set-automated" class="table-of-contents__link toc-highlight">1.2.14 Ensure that the admission control plugin ServiceAccount is set (Automated)</a></li><li><a href="#1215-ensure-that-the-admission-control-plugin-namespacelifecycle-is-set-automated" class="table-of-contents__link toc-highlight">1.2.15 Ensure that the admission control plugin NamespaceLifecycle is set (Automated)</a></li><li><a href="#1216-ensure-that-the-admission-control-plugin-noderestriction-is-set-automated" class="table-of-contents__link toc-highlight">1.2.16 Ensure that the admission control plugin NodeRestriction is set (Automated)</a></li><li><a href="#1217-ensure-that-the---secure-port-argument-is-not-set-to-0-automated" class="table-of-contents__link toc-highlight">1.2.17 Ensure that the --secure-port argument is not set to 0 (Automated)</a></li><li><a href="#1218-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.2.18 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#1219-ensure-that-the---audit-log-path-argument-is-set-automated" class="table-of-contents__link toc-highlight">1.2.19 Ensure that the --audit-log-path argument is set (Automated)</a></li><li><a href="#1220-ensure-that-the---audit-log-maxage-argument-is-set-to-30-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.20 Ensure that the --audit-log-maxage argument is set to 30 or as appropriate (Automated)</a></li><li><a href="#1221-ensure-that-the---audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.21 Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate (Automated)</a></li><li><a href="#1222-ensure-that-the---audit-log-maxsize-argument-is-set-to-100-or-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.22 Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate (Automated)</a></li><li><a href="#1224-ensure-that-the---service-account-lookup-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.2.24 Ensure that the --service-account-lookup argument is set to true (Automated)</a></li><li><a href="#1225-ensure-that-the---request-timeout-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.25 Ensure that the --request-timeout argument is set as appropriate (Automated)</a></li><li><a href="#1226-ensure-that-the---etcd-certfile-and---etcd-keyfile-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.26 Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate (Automated)</a></li><li><a href="#1227-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.27 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#1228-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.28 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#1229-ensure-that-the---etcd-cafile-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.2.29 Ensure that the --etcd-cafile argument is set as appropriate (Automated)</a></li><li><a href="#1230-ensure-that-the---encryption-provider-config-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.2.30 Ensure that the --encryption-provider-config argument is set as appropriate (Manual)</a></li><li><a href="#1231-ensure-that-encryption-providers-are-appropriately-configured-manual" class="table-of-contents__link toc-highlight">1.2.31 Ensure that encryption providers are appropriately configured (Manual)</a></li><li><a href="#1232-ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">1.2.32 Ensure that the API Server only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#13-controller-manager" class="table-of-contents__link toc-highlight">1.3 Controller Manager</a><ul><li><a href="#131-ensure-that-the---terminated-pod-gc-threshold-argument-is-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriate (Manual)</a></li><li><a href="#132-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.3.2 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#133-ensure-that-the---use-service-account-credentials-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.3 Ensure that the --use-service-account-credentials argument is set to true (Automated)</a></li><li><a href="#134-ensure-that-the---service-account-private-key-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.4 Ensure that the --service-account-private-key-file argument is set as appropriate (Automated)</a></li><li><a href="#135-ensure-that-the---root-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">1.3.5 Ensure that the --root-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#136-ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)</a></li><li><a href="#137-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.3.7 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#14-scheduler" class="table-of-contents__link toc-highlight">1.4 Scheduler</a><ul><li><a href="#141-ensure-that-the---profiling-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">1.4.1 Ensure that the --profiling argument is set to false (Automated)</a></li><li><a href="#142-ensure-that-the---bind-address-argument-is-set-to-127001-automated" class="table-of-contents__link toc-highlight">1.4.2 Ensure that the --bind-address argument is set to 127.0.0.1 (Automated)</a></li></ul></li><li><a href="#2-etcd-node-configuration" class="table-of-contents__link toc-highlight">2 Etcd Node Configuration</a><ul><li><a href="#21-ensure-that-the---cert-file-and---key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.1 Ensure that the --cert-file and --key-file arguments are set as appropriate (Automated)</a></li><li><a href="#22-ensure-that-the---client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.2 Ensure that the --client-cert-auth argument is set to true (Automated)</a></li><li><a href="#23-ensure-that-the---auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.3 Ensure that the --auto-tls argument is not set to true (Automated)</a></li><li><a href="#24-ensure-that-the---peer-cert-file-and---peer-key-file-arguments-are-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">2.4 Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate (Automated)</a></li><li><a href="#25-ensure-that-the---peer-client-cert-auth-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">2.5 Ensure that the --peer-client-cert-auth argument is set to true (Automated)</a></li><li><a href="#26-ensure-that-the---peer-auto-tls-argument-is-not-set-to-true-automated" class="table-of-contents__link toc-highlight">2.6 Ensure that the --peer-auto-tls argument is not set to true (Automated)</a></li><li><a href="#27-ensure-that-a-unique-certificate-authority-is-used-for-etcd-manual" class="table-of-contents__link toc-highlight">2.7 Ensure that a unique Certificate Authority is used for etcd (Manual)</a></li></ul></li><li><a href="#31-authentication-and-authorization" class="table-of-contents__link toc-highlight">3.1 Authentication and Authorization</a><ul><li><a href="#311-client-certificate-authentication-should-not-be-used-for-users-manual" class="table-of-contents__link toc-highlight">3.1.1 Client certificate authentication should not be used for users (Manual)</a></li></ul></li><li><a href="#32-logging" class="table-of-contents__link toc-highlight">3.2 Logging</a><ul><li><a href="#321-ensure-that-a-minimal-audit-policy-is-created-manual" class="table-of-contents__link toc-highlight">3.2.1 Ensure that a minimal audit policy is created (Manual)</a></li><li><a href="#322-ensure-that-the-audit-policy-covers-key-security-concerns-manual" class="table-of-contents__link toc-highlight">3.2.2 Ensure that the audit policy covers key security concerns (Manual)</a></li></ul></li><li><a href="#41-worker-node-configuration-files" class="table-of-contents__link toc-highlight">4.1 Worker Node Configuration Files</a><ul><li><a href="#411-ensure-that-the-kubelet-service-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.1 Ensure that the kubelet service file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#412-ensure-that-the-kubelet-service-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.2 Ensure that the kubelet service file ownership is set to root:root (Automated)</a></li><li><a href="#413-if-proxy-kubeconfig-file-exists-ensure-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.3 If proxy kubeconfig file exists ensure permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#414-if-proxy-kubeconfig-file-exists-ensure-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.4 If proxy kubeconfig file exists ensure ownership is set to root:root (Manual)</a></li><li><a href="#415-ensure-that-the---kubeconfig-kubeletconf-file-permissions-are-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.5 Ensure that the --kubeconfig kubelet.conf file permissions are set to 644 or more restrictive (Automated)</a></li><li><a href="#416-ensure-that-the---kubeconfig-kubeletconf-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.6 Ensure that the --kubeconfig kubelet.conf file ownership is set to root:root (Automated)</a></li><li><a href="#417-ensure-that-the-certificate-authorities-file-permissions-are-set-to-644-or-more-restrictive-manual" class="table-of-contents__link toc-highlight">4.1.7 Ensure that the certificate authorities file permissions are set to 644 or more restrictive (Manual)</a></li><li><a href="#418-ensure-that-the-client-certificate-authorities-file-ownership-is-set-to-rootroot-manual" class="table-of-contents__link toc-highlight">4.1.8 Ensure that the client certificate authorities file ownership is set to root:root (Manual)</a></li><li><a href="#419-ensure-that-the-kubelet---config-configuration-file-has-permissions-set-to-644-or-more-restrictive-automated" class="table-of-contents__link toc-highlight">4.1.9 Ensure that the kubelet --config configuration file has permissions set to 644 or more restrictive (Automated)</a></li><li><a href="#4110-ensure-that-the-kubelet---config-configuration-file-ownership-is-set-to-rootroot-automated" class="table-of-contents__link toc-highlight">4.1.10 Ensure that the kubelet --config configuration file ownership is set to root:root (Automated)</a></li></ul></li><li><a href="#42-kubelet" class="table-of-contents__link toc-highlight">4.2 Kubelet</a><ul><li><a href="#421-ensure-that-the---anonymous-auth-argument-is-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.1 Ensure that the --anonymous-auth argument is set to false (Automated)</a></li><li><a href="#422-ensure-that-the---authorization-mode-argument-is-not-set-to-alwaysallow-automated" class="table-of-contents__link toc-highlight">4.2.2 Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)</a></li><li><a href="#423-ensure-that-the---client-ca-file-argument-is-set-as-appropriate-automated" class="table-of-contents__link toc-highlight">4.2.3 Ensure that the --client-ca-file argument is set as appropriate (Automated)</a></li><li><a href="#424-ensure-that-the---read-only-port-argument-is-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.4 Ensure that the --read-only-port argument is set to 0 (Manual)</a></li><li><a href="#425-ensure-that-the---streaming-connection-idle-timeout-argument-is-not-set-to-0-manual" class="table-of-contents__link toc-highlight">4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Manual)</a></li><li><a href="#426-ensure-that-the---protect-kernel-defaults-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.6 Ensure that the --protect-kernel-defaults argument is set to true (Automated)</a></li><li><a href="#427-ensure-that-the---make-iptables-util-chains-argument-is-set-to-true-automated" class="table-of-contents__link toc-highlight">4.2.7 Ensure that the --make-iptables-util-chains argument is set to true (Automated)</a></li><li><a href="#428-ensure-that-the---hostname-override-argument-is-not-set-manual" class="table-of-contents__link toc-highlight">4.2.8 Ensure that the --hostname-override argument is not set (Manual)</a></li><li><a href="#429-ensure-that-the---event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture-manual" class="table-of-contents__link toc-highlight">4.2.9 Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture (Manual)</a></li><li><a href="#4210-ensure-that-the---tls-cert-file-and---tls-private-key-file-arguments-are-set-as-appropriate-manual" class="table-of-contents__link toc-highlight">4.2.10 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate (Manual)</a></li><li><a href="#4211-ensure-that-the---rotate-certificates-argument-is-not-set-to-false-automated" class="table-of-contents__link toc-highlight">4.2.11 Ensure that the --rotate-certificates argument is not set to false (Automated)</a></li><li><a href="#4212-verify-that-the-rotatekubeletservercertificate-argument-is-set-to-true-manual" class="table-of-contents__link toc-highlight">4.2.12 Verify that the RotateKubeletServerCertificate argument is set to true (Manual)</a></li><li><a href="#4213-ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers-manual" class="table-of-contents__link toc-highlight">4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers (Manual)</a></li></ul></li><li><a href="#51-rbac-and-service-accounts" class="table-of-contents__link toc-highlight">5.1 RBAC and Service Accounts</a><ul><li><a href="#511-ensure-that-the-cluster-admin-role-is-only-used-where-required-manual" class="table-of-contents__link toc-highlight">5.1.1 Ensure that the cluster-admin role is only used where required (Manual)</a></li><li><a href="#512-minimize-access-to-secrets-manual" class="table-of-contents__link toc-highlight">5.1.2 Minimize access to secrets (Manual)</a></li><li><a href="#513-minimize-wildcard-use-in-roles-and-clusterroles-manual" class="table-of-contents__link toc-highlight">5.1.3 Minimize wildcard use in Roles and ClusterRoles (Manual)</a></li><li><a href="#514-minimize-access-to-create-pods-manual" class="table-of-contents__link toc-highlight">5.1.4 Minimize access to create pods (Manual)</a></li><li><a href="#515-ensure-that-default-service-accounts-are-not-actively-used-manual" class="table-of-contents__link toc-highlight">5.1.5 Ensure that default service accounts are not actively used. (Manual)</a></li><li><a href="#516-ensure-that-service-account-tokens-are-only-mounted-where-necessary-manual" class="table-of-contents__link toc-highlight">5.1.6 Ensure that Service Account Tokens are only mounted where necessary (Manual)</a></li><li><a href="#517-avoid-use-of-systemmasters-group-manual" class="table-of-contents__link toc-highlight">5.1.7 Avoid use of system:masters group (Manual)</a></li><li><a href="#518-limit-use-of-the-bind-impersonate-and-escalate-permissions-in-the-kubernetes-cluster-manual" class="table-of-contents__link toc-highlight">5.1.8 Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)</a></li></ul></li><li><a href="#52-pod-security-standards" class="table-of-contents__link toc-highlight">5.2 Pod Security Standards</a><ul><li><a href="#521-ensure-that-the-cluster-has-at-least-one-active-policy-control-mechanism-in-place-manual" class="table-of-contents__link toc-highlight">5.2.1 Ensure that the cluster has at least one active policy control mechanism in place (Manual)</a></li><li><a href="#522-minimize-the-admission-of-privileged-containers-automated" class="table-of-contents__link toc-highlight">5.2.2 Minimize the admission of privileged containers (Automated)</a></li><li><a href="#523-minimize-the-admission-of-containers-wishing-to-share-the-host-process-id-namespace-automated" class="table-of-contents__link toc-highlight">5.2.3 Minimize the admission of containers wishing to share the host process ID namespace (Automated)</a></li><li><a href="#524-minimize-the-admission-of-containers-wishing-to-share-the-host-ipc-namespace-automated" class="table-of-contents__link toc-highlight">5.2.4 Minimize the admission of containers wishing to share the host IPC namespace (Automated)</a></li><li><a href="#525-minimize-the-admission-of-containers-wishing-to-share-the-host-network-namespace-automated" class="table-of-contents__link toc-highlight">5.2.5 Minimize the admission of containers wishing to share the host network namespace (Automated)</a></li><li><a href="#526-minimize-the-admission-of-containers-with-allowprivilegeescalation-automated" class="table-of-contents__link toc-highlight">5.2.6 Minimize the admission of containers with allowPrivilegeEscalation (Automated)</a></li><li><a href="#527-minimize-the-admission-of-root-containers-automated" class="table-of-contents__link toc-highlight">5.2.7 Minimize the admission of root containers (Automated)</a></li><li><a href="#528-minimize-the-admission-of-containers-with-the-net_raw-capability-automated" class="table-of-contents__link toc-highlight">5.2.8 Minimize the admission of containers with the NET_RAW capability (Automated)</a></li><li><a href="#529-minimize-the-admission-of-containers-with-added-capabilities-automated" class="table-of-contents__link toc-highlight">5.2.9 Minimize the admission of containers with added capabilities (Automated)</a></li><li><a href="#5210-minimize-the-admission-of-containers-with-capabilities-assigned-manual" class="table-of-contents__link toc-highlight">5.2.10 Minimize the admission of containers with capabilities assigned (Manual)</a></li><li><a href="#5211-minimize-the-admission-of-windows-hostprocess-containers-manual" class="table-of-contents__link toc-highlight">5.2.11 Minimize the admission of Windows HostProcess containers (Manual)</a></li><li><a href="#5212-minimize-the-admission-of-hostpath-volumes-manual" class="table-of-contents__link toc-highlight">5.2.12 Minimize the admission of HostPath volumes (Manual)</a></li><li><a href="#5213-minimize-the-admission-of-containers-which-use-hostports-manual" class="table-of-contents__link toc-highlight">5.2.13 Minimize the admission of containers which use HostPorts (Manual)</a></li></ul></li><li><a href="#53-network-policies-and-cni" class="table-of-contents__link toc-highlight">5.3 Network Policies and CNI</a><ul><li><a href="#531-ensure-that-the-cni-in-use-supports-networkpolicies-manual" class="table-of-contents__link toc-highlight">5.3.1 Ensure that the CNI in use supports NetworkPolicies (Manual)</a></li><li><a href="#532-ensure-that-all-namespaces-have-networkpolicies-defined-manual" class="table-of-contents__link toc-highlight">5.3.2 Ensure that all Namespaces have NetworkPolicies defined (Manual)</a></li></ul></li><li><a href="#54-secrets-management" class="table-of-contents__link toc-highlight">5.4 Secrets Management</a><ul><li><a href="#541-prefer-using-secrets-as-files-over-secrets-as-environment-variables-manual" class="table-of-contents__link toc-highlight">5.4.1 Prefer using Secrets as files over Secrets as environment variables (Manual)</a></li><li><a href="#542-consider-external-secret-storage-manual" class="table-of-contents__link toc-highlight">5.4.2 Consider external secret storage (Manual)</a></li></ul></li><li><a href="#55-extensible-admission-control" class="table-of-contents__link toc-highlight">5.5 Extensible Admission Control</a><ul><li><a href="#551-configure-image-provenance-using-imagepolicywebhook-admission-controller-manual" class="table-of-contents__link toc-highlight">5.5.1 Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)</a></li></ul></li><li><a href="#57-general-policies" class="table-of-contents__link toc-highlight">5.7 General Policies</a><ul><li><a href="#571-create-administrative-boundaries-between-resources-using-namespaces-manual" class="table-of-contents__link toc-highlight">5.7.1 Create administrative boundaries between resources using namespaces (Manual)</a></li><li><a href="#572-ensure-that-the-seccomp-profile-is-set-to-dockerdefault-in-your-pod-definitions-manual" class="table-of-contents__link toc-highlight">5.7.2 Ensure that the seccomp profile is set to docker/default in your Pod definitions (Manual)</a></li><li><a href="#573-apply-securitycontext-to-your-pods-and-containers-manual" class="table-of-contents__link toc-highlight">5.7.3 Apply SecurityContext to your Pods and Containers (Manual)</a></li><li><a href="#574-the-default-namespace-should-not-be-used-manual" class="table-of-contents__link toc-highlight">5.7.4 The default namespace should not be used (Manual)</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/storage.html b/zh/storage.html
index dd0568014..00d717d03 100644
--- a/zh/storage.html
+++ b/zh/storage.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">卷和存储 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/storage"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="卷和存储 | K3s"><meta data-rh="true" name="description" content="在部署需要保​​留数据的应用时，你需要创建持久存储。持久存储允许你在运行应用的 pod 之外存储应用数据。即使运行应用的 pod 发生故障，这种存储方式也能让你保留应用数据。"><meta data-rh="true" property="og:description" content="在部署需要保​​留数据的应用时，你需要创建持久存储。持久存储允许你在运行应用的 pod 之外存储应用数据。即使运行应用的 pod 发生故障，这种存储方式也能让你保留应用数据。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/storage"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/storage" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/storage" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">卷和存储 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/storage"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="卷和存储 | K3s"><meta data-rh="true" name="description" content="在部署需要保​​留数据的应用时，你需要创建持久存储。持久存储允许你在运行应用的 pod 之外存储应用数据。即使运行应用的 pod 发生故障，这种存储方式也能让你保留应用数据。"><meta data-rh="true" property="og:description" content="在部署需要保​​留数据的应用时，你需要创建持久存储。持久存储允许你在运行应用的 pod 之外存储应用数据。即使运行应用的 pod 发生故障，这种存储方式也能让你保留应用数据。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/storage"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/storage" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/storage" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/storage" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/storage" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">卷和存储</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>卷和存储</h1></header><p>在部署需要保​​留数据的应用时，你需要创建持久存储。持久存储允许你在运行应用的 pod 之外存储应用数据。即使运行应用的 pod 发生故障，这种存储方式也能让你保留应用数据。</p><p>持久卷 (PV) 是 Kubernetes 集群中的一块存储，而持久卷声明 (PVC) 是对存储的请求。有关 PV 和 PVC 工作原理的详细信息，请参阅 <a href="https://kubernetes.io/docs/concepts/storage/volumes/" target="_blank" rel="noopener noreferrer">Kubernetes 存储相关的官方文档</a>。</p><p>本文介绍如何使用本地存储提供程序或 <a href="#%E8%AE%BE%E7%BD%AE-longhorn">Longhorn</a> 设置持久存储。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-存储有什么不同">K3s 存储有什么不同？<a href="#k3s-存储有什么不同" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 删除了几个可选的卷插件和所有内置的（有时称为“in-tree”）云提供商。我们这样做是为了让二进制文件更小，并避免对第三方云或数据中心技术和服务的依赖，因为这些依赖在许多 K3s 用例中可能不可用。我们之所以能够这样做，是因为它们的移除既不会影响核心 Kubernetes 功能，也不会影响一致性。</p><p>以下卷插件已从 K3s 中删除：</p><ul><li>cephfs</li><li>fc</li><li>flocker</li><li>git_repo</li><li>glusterfs</li><li>portworx</li><li>quobyte</li><li>rbd</li><li>storageos</li></ul><p>这两个组件都有可以与 K3s 一起使用的树外替代方案：Kubernetes <a href="https://github.com/container-storage-interface/spec/blob/master/spec.md" target="_blank" rel="noopener noreferrer">Container Storage Interface (CSI)</a> 和 <a href="https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/" target="_blank" rel="noopener noreferrer">Cloud Provider Interface (CPI)</a>。</p><p>Kubernetes 维护人员正在积极地将树内卷插件迁移到 CSI 驱动程序。有关此迁移的更多信息，请参阅<a href="https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/" target="_blank" rel="noopener noreferrer">此处</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="设置本地存储提供程序">设置本地存储提供程序<a href="#设置本地存储提供程序" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 自带 Rancher 的 Local Path Provisioner，这使得能够使用各自节点上的本地存储来开箱即用地创建持久卷声明。下面是一个简单的例子。有关更多信息，请参阅<a href="https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage" target="_blank" rel="noopener noreferrer">官方文档</a>。</p><p>创建一个 hostPath 支持的持久卷声明和一个使用它的 Pod：</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml">pvc.yaml<a href="#pvcyaml" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml">pod.yaml<a href="#podyaml" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>应用 yaml：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>确认创建了 PV 和 PVC：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>状态都应该是 Bound。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="设置-longhorn">设置 Longhorn<a href="#设置-longhorn" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>Longhorn 不支持 ARM32。</p></div></div><p>K3s 支持 <a href="https://github.com/longhorn/longhorn" target="_blank" rel="noopener noreferrer">Longhorn</a>，这是用于 Kubernetes 的开源分布式块存储系统。</p><p>下面是一个简单的例子。有关详细信息，请参阅<a href="https://longhorn.io/docs/latest/" target="_blank" rel="noopener noreferrer">官方文档</a>。</p><p>应用 longhorn.yaml 来安装 Longhorn：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Longhorn 将安装在命名空间 <code>longhorn-system</code> 中。</p><p>应用 yaml 来创建 PVC 和 Pod：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml-1">pvc.yaml<a href="#pvcyaml-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml-1">pod.yaml<a href="#podyaml-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>确认创建了 PV 和 PVC：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>状态都应该是 Bound。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades/automated"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">自动升级</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/networking"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">网络</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-存储有什么不同" class="table-of-contents__link toc-highlight">K3s 存储有什么不同？</a></li><li><a href="#设置本地存储提供程序" class="table-of-contents__link toc-highlight">设置本地存储提供程序</a><ul><li><a href="#pvcyaml" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li><li><a href="#设置-longhorn" class="table-of-contents__link toc-highlight">设置 Longhorn</a><ul><li><a href="#pvcyaml-1" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml-1" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/storage" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/storage" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">卷和存储</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>卷和存储</h1></header><p>在部署需要保​​留数据的应用时，你需要创建持久存储。持久存储允许你在运行应用的 pod 之外存储应用数据。即使运行应用的 pod 发生故障，这种存储方式也能让你保留应用数据。</p><p>持久卷 (PV) 是 Kubernetes 集群中的一块存储，而持久卷声明 (PVC) 是对存储的请求。有关 PV 和 PVC 工作原理的详细信息，请参阅 <a href="https://kubernetes.io/docs/concepts/storage/volumes/" target="_blank" rel="noopener noreferrer">Kubernetes 存储相关的官方文档</a>。</p><p>本文介绍如何使用本地存储提供程序或 <a href="#%E8%AE%BE%E7%BD%AE-longhorn">Longhorn</a> 设置持久存储。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="k3s-存储有什么不同">K3s 存储有什么不同？<a href="#k3s-存储有什么不同" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 删除了几个可选的卷插件和所有内置的（有时称为“in-tree”）云提供商。我们这样做是为了让二进制文件更小，并避免对第三方云或数据中心技术和服务的依赖，因为这些依赖在许多 K3s 用例中可能不可用。我们之所以能够这样做，是因为它们的移除既不会影响核心 Kubernetes 功能，也不会影响一致性。</p><p>以下卷插件已从 K3s 中删除：</p><ul><li>cephfs</li><li>fc</li><li>flocker</li><li>git_repo</li><li>glusterfs</li><li>portworx</li><li>quobyte</li><li>rbd</li><li>storageos</li></ul><p>这两个组件都有可以与 K3s 一起使用的树外替代方案：Kubernetes <a href="https://github.com/container-storage-interface/spec/blob/master/spec.md" target="_blank" rel="noopener noreferrer">Container Storage Interface (CSI)</a> 和 <a href="https://kubernetes.io/docs/tasks/administer-cluster/running-cloud-controller/" target="_blank" rel="noopener noreferrer">Cloud Provider Interface (CPI)</a>。</p><p>Kubernetes 维护人员正在积极地将树内卷插件迁移到 CSI 驱动程序。有关此迁移的更多信息，请参阅<a href="https://kubernetes.io/blog/2021/12/10/storage-in-tree-to-csi-migration-status-update/" target="_blank" rel="noopener noreferrer">此处</a>。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="设置本地存储提供程序">设置本地存储提供程序<a href="#设置本地存储提供程序" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><p>K3s 自带 Rancher 的 Local Path Provisioner，这使得能够使用各自节点上的本地存储来开箱即用地创建持久卷声明。下面是一个简单的例子。有关更多信息，请参阅<a href="https://github.com/rancher/local-path-provisioner/blob/master/README.md#usage" target="_blank" rel="noopener noreferrer">官方文档</a>。</p><p>创建一个 hostPath 支持的持久卷声明和一个使用它的 Pod：</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml">pvc.yaml<a href="#pvcyaml" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml">pod.yaml<a href="#podyaml" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> local</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">path</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>应用 yaml：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>确认创建了 PV 和 PVC：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>状态都应该是 Bound。</p><h2 class="anchor anchorWithStickyNavbar_LWe7" id="设置-longhorn">设置 Longhorn<a href="#设置-longhorn" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h2><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>Longhorn 不支持 ARM32。</p></div></div><p>K3s 支持 <a href="https://github.com/longhorn/longhorn" target="_blank" rel="noopener noreferrer">Longhorn</a>，这是用于 Kubernetes 的开源分布式块存储系统。</p><p>下面是一个简单的例子。有关详细信息，请参阅<a href="https://longhorn.io/docs/latest/" target="_blank" rel="noopener noreferrer">官方文档</a>。</p><p>应用 longhorn.yaml 来安装 Longhorn：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://raw.githubusercontent.com/longhorn/longhorn/v1.5.1/deploy/longhorn.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>Longhorn 将安装在命名空间 <code>longhorn-system</code> 中。</p><p>应用 yaml 来创建 PVC 和 Pod：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pvc.yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl create -f pod.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="pvcyaml-1">pvc.yaml<a href="#pvcyaml-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> PersistentVolumeClaim</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">accessModes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> ReadWriteOnce</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">storageClassName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">resources</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">requests</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">storage</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> 2Gi</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="podyaml-1">pod.yaml<a href="#podyaml-1" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Pod</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> default</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">containers</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volume</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">test</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> nginx</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">stable</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">alpine</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">imagePullPolicy</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> IfNotPresent</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">volumeMounts</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">mountPath</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> /data</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">ports</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">containerPort</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">80</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">volumes</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> volv</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">persistentVolumeClaim</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">claimName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> longhorn</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">volv</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>确认创建了 PV 和 PVC：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get </span><span class="token function" style="color:rgb(130, 170, 255)">pv</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl get pvc</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>状态都应该是 Bound。</p></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/storage/storage.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades/automated"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">自动升级</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/networking"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">网络</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#k3s-存储有什么不同" class="table-of-contents__link toc-highlight">K3s 存储有什么不同？</a></li><li><a href="#设置本地存储提供程序" class="table-of-contents__link toc-highlight">设置本地存储提供程序</a><ul><li><a href="#pvcyaml" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li><li><a href="#设置-longhorn" class="table-of-contents__link toc-highlight">设置 Longhorn</a><ul><li><a href="#pvcyaml-1" class="table-of-contents__link toc-highlight">pvc.yaml</a></li><li><a href="#podyaml-1" class="table-of-contents__link toc-highlight">pod.yaml</a></li></ul></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/upgrades.html b/zh/upgrades.html
index f2355c77c..3e7b04054 100644
--- a/zh/upgrades.html
+++ b/zh/upgrades.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">升级 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="升级 | K3s"><meta data-rh="true" name="description" content="升级 K3s 集群"><meta data-rh="true" property="og:description" content="升级 K3s 集群"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">升级 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="升级 | K3s"><meta data-rh="true" name="description" content="升级 K3s 集群"><meta data-rh="true" property="og:description" content="升级 K3s 集群"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">升级</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>升级</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="升级-k3s-集群">升级 K3s 集群<a href="#升级-k3s-集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><a href="/zh/upgrades/manual">手动升级</a>描述了手动升级集群的几种方法。它也可以作为通过第三方基础设施即代码工具（如 <a href="https://www.terraform.io/" target="_blank" rel="noopener noreferrer">Terraform</a>）进行升级的基础。</p><p><a href="/zh/upgrades/automated">自动升级</a>描述了如何使用 Rancher 的 <a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a> 执行 Kubernetes 原生的自动升级。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="特定版本的注意事项">特定版本的注意事项<a href="#特定版本的注意事项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><ul><li><p><strong>Traefik</strong>：如果没有禁用 Traefik，K3s 1.20 及以前的版本将安装 Traefik v1，而 K3s 1.21 及以后的版本将安装 Traefik v2。要将旧版 Traefik v1 升级到 Traefik v2，请参阅 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 文档</a>并使用<a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">迁移工具</a>。</p></li><li><p><strong>K3s 引导数据</strong>：如果你在 HA 配置中使用 K3s 和外部 SQL 数据存储，并且你的 Server（control plane）节点没有使用 <code>--token</code> CLI 标志启动，你将不再能够在不指定令牌的情况下将其他 K3s Server 添加到集群中。请保留此令牌的副本，因为恢复备份时需要它。以前，K3s 在使用外部 SQL 数据存储时不强制使用 token。</p><ul><li><p>受影响的版本是 &lt;= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1；修补后的版本为 v1.19.13+k3s1、v1.20.9+k3s1、v1.21.3+k3s1。</p></li><li><p>你可以从已加入集群的任何 server 中检索令牌值，如下所示：</p></li></ul></li></ul><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ul><li><strong>实验性 Dqlite</strong>：实验性嵌入式 Dqlite 数据存储在 K3s v1.19.1 中已被弃用。请注意，不支持从实验性 Dqlite 升级到实验性嵌入式 etcd。如果你尝试升级，升级将不会成功，并且数据将会丢失。</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cluster-access"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">集群访问</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades/killall"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">停止 K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#升级-k3s-集群" class="table-of-contents__link toc-highlight">升级 K3s 集群</a></li><li><a href="#特定版本的注意事项" class="table-of-contents__link toc-highlight">特定版本的注意事项</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible menu__list-item-collapsible--active"><a class="menu__link menu__link--sublist menu__link--active" aria-current="page" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">升级</span><meta itemprop="position" content="1"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>升级</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="升级-k3s-集群">升级 K3s 集群<a href="#升级-k3s-集群" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p><a href="/zh/upgrades/manual">手动升级</a>描述了手动升级集群的几种方法。它也可以作为通过第三方基础设施即代码工具（如 <a href="https://www.terraform.io/" target="_blank" rel="noopener noreferrer">Terraform</a>）进行升级的基础。</p><p><a href="/zh/upgrades/automated">自动升级</a>描述了如何使用 Rancher 的 <a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a> 执行 Kubernetes 原生的自动升级。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="特定版本的注意事项">特定版本的注意事项<a href="#特定版本的注意事项" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><ul><li><p><strong>Traefik</strong>：如果没有禁用 Traefik，K3s 1.20 及以前的版本将安装 Traefik v1，而 K3s 1.21 及以后的版本将安装 Traefik v2。要将旧版 Traefik v1 升级到 Traefik v2，请参阅 <a href="https://doc.traefik.io/traefik/migration/v1-to-v2/" target="_blank" rel="noopener noreferrer">Traefik 文档</a>并使用<a href="https://github.com/traefik/traefik-migration-tool" target="_blank" rel="noopener noreferrer">迁移工具</a>。</p></li><li><p><strong>K3s 引导数据</strong>：如果你在 HA 配置中使用 K3s 和外部 SQL 数据存储，并且你的 Server（control plane）节点没有使用 <code>--token</code> CLI 标志启动，你将不再能够在不指定令牌的情况下将其他 K3s Server 添加到集群中。请保留此令牌的副本，因为恢复备份时需要它。以前，K3s 在使用外部 SQL 数据存储时不强制使用 token。</p><ul><li><p>受影响的版本是 &lt;= v1.19.12+k3s1, v1.20.8+k3s1, v1.21.2+k3s1；修补后的版本为 v1.19.13+k3s1、v1.20.9+k3s1、v1.21.3+k3s1。</p></li><li><p>你可以从已加入集群的任何 server 中检索令牌值，如下所示：</p></li></ul></li></ul><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token function" style="color:rgb(130, 170, 255)">cat</span><span class="token plain"> /var/lib/rancher/k3s/server/token</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><ul><li><strong>实验性 Dqlite</strong>：实验性嵌入式 Dqlite 数据存储在 K3s v1.19.1 中已被弃用。请注意，不支持从实验性 Dqlite 升级到实验性嵌入式 etcd。如果你尝试升级，升级将不会成功，并且数据将会丢失。</li></ul></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/upgrades.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/cluster-access"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">集群访问</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades/killall"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">停止 K3s</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#升级-k3s-集群" class="table-of-contents__link toc-highlight">升级 K3s 集群</a></li><li><a href="#特定版本的注意事项" class="table-of-contents__link toc-highlight">特定版本的注意事项</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/upgrades/automated.html b/zh/upgrades/automated.html
index 2748059fd..45d78f51e 100644
--- a/zh/upgrades/automated.html
+++ b/zh/upgrades/automated.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">自动升级 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades/automated"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="自动升级 | K3s"><meta data-rh="true" name="description" content="Overview"><meta data-rh="true" property="og:description" content="Overview"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades/automated"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/automated" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/automated" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">自动升级 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades/automated"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="自动升级 | K3s"><meta data-rh="true" name="description" content="Overview"><meta data-rh="true" property="og:description" content="Overview"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades/automated"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/automated" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/automated" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/automated" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/upgrades"><span itemprop="name">升级</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">自动升级</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>自动升级</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以使用 Rancher 的 system-upgrade-controller 管理 K3s 集群升级。这是一种 Kubernetes 原生的集群升级方法。它使用了<a href="https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources" target="_blank" rel="noopener noreferrer">自定义资源定义 (CRD)</a>、<code>计划</code>和<a href="https://kubernetes.io/docs/concepts/architecture/controller/" target="_blank" rel="noopener noreferrer">控制器</a>。</p><p>计划定义了升级的策略和要求。它还通过<a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/" target="_blank" rel="noopener noreferrer">标签选择器</a>来定义应该升级的节点。请参阅下文，了解适用于升级 K3s 集群的默认计划。有关更高级的计划配置选项，请参阅 <a href="https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go" target="_blank" rel="noopener noreferrer">CRD</a>。</p><p>控制器通过监控计划和选择要运行升级 <a href="https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/" target="_blank" rel="noopener noreferrer">job</a> 的节点来安排升级。job 成功运行完成时，控制器将相应地标记它运行的节点。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>启动的升级 job 必须具有高权限。它配置了以下内容：</p><ul><li>主机 <code>IPC</code>、<code>NET</code> 和 <code>PID</code> 命名空间</li><li><code>CAP_SYS_BOOT</code> 能力</li><li>挂载在 <code>/host</code> 的主机根目录，具有读写权限</li></ul></div></div><p>要以这种方式自动升级，你必须执行以下操作：</p><ol><li>将 system-upgrade-controller 安装到集群中</li><li>配置计划</li></ol><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果 K3s 集群由 Rancher 管理，你需要使用 Rancher UI 来管理升级。</p><ul><li>如果 K3s 集群是导入到 Rancher 的，Rancher 将管理 system-upgrade-controller 部署和计划。不要按照此页面上的步骤操作。</li><li>如果 K3s 集群是由 Rancher 预配的，Rancher 将使用系统 Agent 来管理版本升级。不要按照此页面上的步骤操作。</li><li>如果 K3s 集群<em>不是</em>由 Rancher 管理的，你可以按照以下步骤操作。</li></ul></div></div><p>有关 system-upgrade-controller 的设计和架构，以及它与 K3s 集成的更多详细信息，请参阅以下 Git 仓库：</p><ul><li><a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a></li><li><a href="https://github.com/k3s-io/k3s-upgrade" target="_blank" rel="noopener noreferrer">k3s-upgrade</a></li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>提示</div><div class="admonitionContent_S0QG"><p>尝试升级到 K3s 新版本时，<a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes 版本倾斜策略</a>适用。确保你的计划在升级时不会跳过中间次要版本。system-upgrade-controller 本身不会防止更改到不支持的 Kubernetes 版本。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="安装-system-upgrade-controller">安装 system-upgrade-controller<a href="#安装-system-upgrade-controller" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>system-upgrade-controller 可以作为 Deployment 安装到你的集群中。Deployment 需要 ServiceAccount、clusterRoleBinding 和 configmap。要安装这些组件，请运行以下命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>控制器可以通过前面提到的 configmap 进行配置和自定义，但控制器必须重新部署才能应用更改。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="配置计划">配置计划<a href="#配置计划" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>建议你至少创建两个计划：升级 server（control-plane）节点的计划和升级 agent 节点的计划。你可以根据需要创建其他计划来控制跨节点的升级。创建计划后，控制器将选择它们并开始升级你的集群。</p><p>以下两个示例计划会将你的集群升级到 K3s v1.24.6+k3s1：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Server plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">values</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Agent plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> agent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> DoesNotExist</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">prepare</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> prepare</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>关于这些计划，有几个重要的事情需要注意：</p><p>1) 计划必须在部署控制器的同一命名空间中创建。</p><p>2) <code>concurrency</code> 字段表示可以同时升级多少个节点。</p><p>3) <code>server-plan</code> 通过指定一个标签选择器来选择带有 <code>node-role.kubernetes.io/control-plane</code> 标签的节点，从而锁定 server 节点。<code>agent-plan</code> 通过指定一个标签选择器来选择没有该标签的节点，从而锁定 agent 节点。</p><p>4) <code>agent-plan</code> 中的 <code>prepare</code> 步骤会使该计划等待 <code>server-plan</code> 完成后再执行升级 job。</p><p>5) 两个计划都将 <code>version</code> 字段设置为 v1.24.6+k3s1。或者，你可以省略 <code>version</code> 字段并将 <code>channel</code> 字段设置为解析到 K3s 版本的 URL。这将导致控制器监控该 URL，并在它解析到新版本时随时升级集群。这适用于<a href="/zh/upgrades/manual#%E7%89%88%E6%9C%AC-channels">版本 channels</a>。因此，你可以用下面的 channel 配置计划，从而确保你的集群总是自动升级到 K3s 的最新稳定版本。</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">channel</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//update.k3s.io/v1</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">release/channels/stable</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如前所述，一旦控制器检测到已创建计划，升级就会立即开始。更新计划将导致控制器重新评估计划并确定是否需要再次升级。</p><p>要监控升级进度，你可以使用 kubectl 来查看 plan 和 job：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get plans -o yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get </span><span class="token function" style="color:rgb(130, 170, 255)">jobs</span><span class="token plain"> -o yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades/manual"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">手动升级</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/storage"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">卷和存储</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#overview" class="table-of-contents__link toc-highlight">Overview</a></li><li><a href="#安装-system-upgrade-controller" class="table-of-contents__link toc-highlight">安装 system-upgrade-controller</a></li><li><a href="#配置计划" class="table-of-contents__link toc-highlight">配置计划</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/automated" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/upgrades"><span itemprop="name">升级</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">自动升级</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>自动升级</h1></header><h3 class="anchor anchorWithStickyNavbar_LWe7" id="overview">Overview<a href="#overview" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>你可以使用 Rancher 的 system-upgrade-controller 管理 K3s 集群升级。这是一种 Kubernetes 原生的集群升级方法。它使用了<a href="https://kubernetes.io/docs/concepts/extend-kubernetes/api-extension/custom-resources/#custom-resources" target="_blank" rel="noopener noreferrer">自定义资源定义 (CRD)</a>、<code>计划</code>和<a href="https://kubernetes.io/docs/concepts/architecture/controller/" target="_blank" rel="noopener noreferrer">控制器</a>。</p><p>计划定义了升级的策略和要求。它还通过<a href="https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/" target="_blank" rel="noopener noreferrer">标签选择器</a>来定义应该升级的节点。请参阅下文，了解适用于升级 K3s 集群的默认计划。有关更高级的计划配置选项，请参阅 <a href="https://github.com/rancher/system-upgrade-controller/blob/master/pkg/apis/upgrade.cattle.io/v1/types.go" target="_blank" rel="noopener noreferrer">CRD</a>。</p><p>控制器通过监控计划和选择要运行升级 <a href="https://kubernetes.io/docs/concepts/workloads/controllers/jobs-run-to-completion/" target="_blank" rel="noopener noreferrer">job</a> 的节点来安排升级。job 成功运行完成时，控制器将相应地标记它运行的节点。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>启动的升级 job 必须具有高权限。它配置了以下内容：</p><ul><li>主机 <code>IPC</code>、<code>NET</code> 和 <code>PID</code> 命名空间</li><li><code>CAP_SYS_BOOT</code> 能力</li><li>挂载在 <code>/host</code> 的主机根目录，具有读写权限</li></ul></div></div><p>要以这种方式自动升级，你必须执行以下操作：</p><ol><li>将 system-upgrade-controller 安装到集群中</li><li>配置计划</li></ol><div class="theme-admonition theme-admonition-caution alert alert--warning admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 16 16"><path fill-rule="evenodd" d="M8.893 1.5c-.183-.31-.52-.5-.887-.5s-.703.19-.886.5L.138 13.499a.98.98 0 0 0 0 1.001c.193.31.53.501.886.501h13.964c.367 0 .704-.19.877-.5a1.03 1.03 0 0 0 .01-1.002L8.893 1.5zm.133 11.497H6.987v-2.003h2.039v2.003zm0-3.004H6.987V5.987h2.039v4.006z"></path></svg></span>警告</div><div class="admonitionContent_S0QG"><p>如果 K3s 集群由 Rancher 管理，你需要使用 Rancher UI 来管理升级。</p><ul><li>如果 K3s 集群是导入到 Rancher 的，Rancher 将管理 system-upgrade-controller 部署和计划。不要按照此页面上的步骤操作。</li><li>如果 K3s 集群是由 Rancher 预配的，Rancher 将使用系统 Agent 来管理版本升级。不要按照此页面上的步骤操作。</li><li>如果 K3s 集群<em>不是</em>由 Rancher 管理的，你可以按照以下步骤操作。</li></ul></div></div><p>有关 system-upgrade-controller 的设计和架构，以及它与 K3s 集成的更多详细信息，请参阅以下 Git 仓库：</p><ul><li><a href="https://github.com/rancher/system-upgrade-controller" target="_blank" rel="noopener noreferrer">system-upgrade-controller</a></li><li><a href="https://github.com/k3s-io/k3s-upgrade" target="_blank" rel="noopener noreferrer">k3s-upgrade</a></li></ul><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>提示</div><div class="admonitionContent_S0QG"><p>尝试升级到 K3s 新版本时，<a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes 版本倾斜策略</a>适用。确保你的计划在升级时不会跳过中间次要版本。system-upgrade-controller 本身不会防止更改到不支持的 Kubernetes 版本。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="安装-system-upgrade-controller">安装 system-upgrade-controller<a href="#安装-system-upgrade-controller" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>system-upgrade-controller 可以作为 Deployment 安装到你的集群中。Deployment 需要 ServiceAccount、clusterRoleBinding 和 configmap。要安装这些组件，请运行以下命令：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl apply -f https://github.com/rancher/system-upgrade-controller/releases/latest/download/system-upgrade-controller.yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>控制器可以通过前面提到的 configmap 进行配置和自定义，但控制器必须重新部署才能应用更改。</p><h3 class="anchor anchorWithStickyNavbar_LWe7" id="配置计划">配置计划<a href="#配置计划" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>建议你至少创建两个计划：升级 server（control-plane）节点的计划和升级 agent 节点的计划。你可以根据需要创建其他计划来控制跨节点的升级。创建计划后，控制器将选择它们并开始升级你的集群。</p><p>以下两个示例计划会将你的集群升级到 K3s v1.24.6+k3s1：</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Server plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> In</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">values</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token string" style="color:rgb(195, 232, 141)">&quot;true&quot;</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">---</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token comment" style="color:rgb(105, 112, 152);font-style:italic"># Agent plan</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">metadata</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">name</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> agent</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">namespace</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">concurrency</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token number" style="color:rgb(247, 140, 108)">1</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">cordon</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> </span><span class="token boolean important" style="color:rgb(255, 88, 116)">true</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">nodeSelector</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">matchExpressions</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> </span><span class="token key atrule">key</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> node</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">role.kubernetes.io/control</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plane</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">      </span><span class="token key atrule">operator</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> DoesNotExist</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">prepare</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">args</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> prepare</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain"> server</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">serviceAccountName</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> system</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">upgrade</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">    </span><span class="token key atrule">image</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> rancher/k3s</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">upgrade</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">version</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> v1.24.6+k3s1</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>关于这些计划，有几个重要的事情需要注意：</p><p>1) 计划必须在部署控制器的同一命名空间中创建。</p><p>2) <code>concurrency</code> 字段表示可以同时升级多少个节点。</p><p>3) <code>server-plan</code> 通过指定一个标签选择器来选择带有 <code>node-role.kubernetes.io/control-plane</code> 标签的节点，从而锁定 server 节点。<code>agent-plan</code> 通过指定一个标签选择器来选择没有该标签的节点，从而锁定 agent 节点。</p><p>4) <code>agent-plan</code> 中的 <code>prepare</code> 步骤会使该计划等待 <code>server-plan</code> 完成后再执行升级 job。</p><p>5) 两个计划都将 <code>version</code> 字段设置为 v1.24.6+k3s1。或者，你可以省略 <code>version</code> 字段并将 <code>channel</code> 字段设置为解析到 K3s 版本的 URL。这将导致控制器监控该 URL，并在它解析到新版本时随时升级集群。这适用于<a href="/zh/upgrades/manual#%E7%89%88%E6%9C%AC-channels">版本 channels</a>。因此，你可以用下面的 channel 配置计划，从而确保你的集群总是自动升级到 K3s 的最新稳定版本。</p><div class="language-yaml codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-yaml codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token key atrule">apiVersion</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> upgrade.cattle.io/v1</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">kind</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> Plan</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain"></span><span class="token key atrule">spec</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token punctuation" style="color:rgb(199, 146, 234)">...</span><span class="token plain"></span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">  </span><span class="token key atrule">channel</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain"> https</span><span class="token punctuation" style="color:rgb(199, 146, 234)">:</span><span class="token plain">//update.k3s.io/v1</span><span class="token punctuation" style="color:rgb(199, 146, 234)">-</span><span class="token plain">release/channels/stable</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain" style="display:inline-block"></span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如前所述，一旦控制器检测到已创建计划，升级就会立即开始。更新计划将导致控制器重新评估计划并确定是否需要再次升级。</p><p>要监控升级进度，你可以使用 kubectl 来查看 plan 和 job：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get plans -o yaml</span><br></span><span class="token-line" style="color:#bfc7d5"><span class="token plain">kubectl -n system-upgrade get </span><span class="token function" style="color:rgb(130, 170, 255)">jobs</span><span class="token plain"> -o yaml</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/automated.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades/manual"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">手动升级</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/storage"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">卷和存储</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#overview" class="table-of-contents__link toc-highlight">Overview</a></li><li><a href="#安装-system-upgrade-controller" class="table-of-contents__link toc-highlight">安装 system-upgrade-controller</a></li><li><a href="#配置计划" class="table-of-contents__link toc-highlight">配置计划</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/upgrades/killall.html b/zh/upgrades/killall.html
index 92b5269eb..dd3c3a65a 100644
--- a/zh/upgrades/killall.html
+++ b/zh/upgrades/killall.html
@@ -3,16 +3,16 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">停止 K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades/killall"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="停止 K3s | K3s"><meta data-rh="true" name="description" content="为了在升级期间实现高可用性，K3s 容器在 K3s 服务停止时会继续运行。"><meta data-rh="true" property="og:description" content="为了在升级期间实现高可用性，K3s 容器在 K3s 服务停止时会继续运行。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades/killall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/killall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/killall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">停止 K3s | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades/killall"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="停止 K3s | K3s"><meta data-rh="true" name="description" content="为了在升级期间实现高可用性，K3s 容器在 K3s 服务停止时会继续运行。"><meta data-rh="true" property="og:description" content="为了在升级期间实现高可用性，K3s 容器在 K3s 服务停止时会继续运行。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades/killall"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/killall" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/killall" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/killall" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/upgrades"><span itemprop="name">升级</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">停止 K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>停止 K3s</h1></header><p>为了在升级期间实现高可用性，K3s 容器在 K3s 服务停止时会继续运行。</p><p>要停止所有 K3s 容器并重置容器状态，你可以使用 <code>k3s-killall.sh</code> 脚本。</p><p>killall 脚本能清理容器、K3s 目录和网络组件，同时还能删除 iptables 链以及所有相关规则。集群数据不会被删除。</p><p>要在 Server 节点中运行 killall 脚本，请运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-killall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">升级</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades/manual"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">手动升级</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/killall" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/upgrades"><span itemprop="name">升级</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">停止 K3s</span><meta itemprop="position" content="2"></li></ul></nav><div class="theme-doc-markdown markdown"><header><h1>停止 K3s</h1></header><p>为了在升级期间实现高可用性，K3s 容器在 K3s 服务停止时会继续运行。</p><p>要停止所有 K3s 容器并重置容器状态，你可以使用 <code>k3s-killall.sh</code> 脚本。</p><p>killall 脚本能清理容器、K3s 目录和网络组件，同时还能删除 iptables 链以及所有相关规则。集群数据不会被删除。</p><p>要在 Server 节点中运行 killall 脚本，请运行：</p><div class="language-bash codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-bash codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">/usr/local/bin/k3s-killall.sh</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/killall.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">升级</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades/manual"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">手动升级</div></a></nav></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/upgrades/manual.html b/zh/upgrades/manual.html
index 1e6085bef..5b40b14ef 100644
--- a/zh/upgrades/manual.html
+++ b/zh/upgrades/manual.html
@@ -3,18 +3,18 @@
 <head>
 <meta charset="UTF-8">
 <meta name="generator" content="Docusaurus v2.4.1">
-<title data-rh="true">手动升级 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades/manual"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="手动升级 | K3s"><meta data-rh="true" name="description" content="你可以使用安装脚本升级 K3s，也可以手动安装所需版本的二进制文件。"><meta data-rh="true" property="og:description" content="你可以使用安装脚本升级 K3s，也可以手动安装所需版本的二进制文件。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades/manual"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/manual" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/manual" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="x-default"><link data-rh="true" rel="preconnect" href="https://LLOD7N3LJA-dsn.algolia.net" crossorigin="anonymous"><link rel="search" type="application/opensearchdescription+xml" title="K3s" href="/zh/opensearch.xml"><link rel="stylesheet" href="/zh/assets/css/styles.dc1e3afe.css">
-<link rel="preload" href="/zh/assets/js/runtime~main.354551a6.js" as="script">
-<link rel="preload" href="/zh/assets/js/main.cd1c03e6.js" as="script">
+<title data-rh="true">手动升级 | K3s</title><meta data-rh="true" name="viewport" content="width=device-width,initial-scale=1"><meta data-rh="true" name="twitter:card" content="summary_large_image"><meta data-rh="true" property="og:url" content="https://docs.k3s.io/zh/upgrades/manual"><meta data-rh="true" name="docusaurus_locale" content="zh"><meta data-rh="true" name="docsearch:language" content="zh"><meta data-rh="true" name="docusaurus_version" content="current"><meta data-rh="true" name="docusaurus_tag" content="docs-default-current"><meta data-rh="true" name="docsearch:version" content="current"><meta data-rh="true" name="docsearch:docusaurus_tag" content="docs-default-current"><meta data-rh="true" property="og:title" content="手动升级 | K3s"><meta data-rh="true" name="description" content="你可以使用安装脚本升级 K3s，也可以手动安装所需版本的二进制文件。"><meta data-rh="true" property="og:description" content="你可以使用安装脚本升级 K3s，也可以手动安装所需版本的二进制文件。"><link data-rh="true" rel="icon" href="/zh/img/favicon.ico"><link data-rh="true" rel="canonical" href="https://docs.k3s.io/zh/upgrades/manual"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="en"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/zh/upgrades/manual" hreflang="zh"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/kr/upgrades/manual" hreflang="kr"><link data-rh="true" rel="alternate" href="https://docs.k3s.io/upgrades/manual" hreflang="x-default"><link rel="stylesheet" href="/zh/assets/css/styles.45a60ef8.css">
+<link rel="preload" href="/zh/assets/js/runtime~main.98237139.js" as="script">
+<link rel="preload" href="/zh/assets/js/main.a0e9ca28.js" as="script">
 </head>
 <body class="navigation-with-keyboard">
 <script>!function(){function e(e){document.documentElement.setAttribute("data-theme",e)}var t=function(){var e=null;try{e=new URLSearchParams(window.location.search).get("docusaurus-theme")}catch(e){}return e}()||function(){var e=null;try{e=localStorage.getItem("theme")}catch(e){}return e}();null!==t?e(t):window.matchMedia("(prefers-color-scheme: dark)").matches?e("dark"):(window.matchMedia("(prefers-color-scheme: light)").matches,e("light"))}()</script><div id="__docusaurus">
-<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><button type="button" class="DocSearch DocSearch-Button" aria-label="搜索"><span class="DocSearch-Button-Container"><svg width="20" height="20" class="DocSearch-Search-Icon" viewBox="0 0 20 20"><path d="M14.386 14.386l4.0877 4.0877-4.0877-4.0877c-2.9418 2.9419-7.7115 2.9419-10.6533 0-2.9419-2.9418-2.9419-7.7115 0-10.6533 2.9418-2.9419 7.7115-2.9419 10.6533 0 2.9419 2.9418 2.9419 7.7115 0 10.6533z" stroke="currentColor" fill="none" fill-rule="evenodd" stroke-linecap="round" stroke-linejoin="round"></path></svg><span class="DocSearch-Button-Placeholder">搜索</span></span><span class="DocSearch-Button-Keys"></span></button></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/upgrades"><span itemprop="name">升级</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">手动升级</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>手动升级</h1></header><p>你可以使用安装脚本升级 K3s，也可以手动安装所需版本的二进制文件。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>升级时会先升级 Server 节点，然后再升级 Agent 节点。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="版本-channels">版本 Channels<a href="#版本-channels" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>通过安装脚本或使用我们的<a href="/zh/upgrades/automated">自动升级</a>功能执行的升级可以绑定到不同的版本 channels。以下是可用的 channels：</p><table><thead><tr><th>Channel</th><th>描述</th></tr></thead><tbody><tr><td>stable</td><td>（默认）生产环境建议使用稳定版。这些版本已经过一段时间的社区强化。</td></tr><tr><td>latest</td><td>建议使用最新版本来试用最新功能。这些版本已经过一段时间的社区强化。</td></tr><tr><td>v1.26（示例）</td><td>每个 Kubernetes 次要版本都有一个 release channel，包括 EOL 的版本。这些 channel 会选择可用的最新补丁，不一定是稳定版本。</td></tr></tbody></table><p>有关详细的最新 channel 列表，你可以访问 <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">k3s channel 服务 API</a>。有关 channel 如何工作的更多信息，请参阅 <a href="https://github.com/rancher/channelserver" target="_blank" rel="noopener noreferrer">channelserver 项目</a>。</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>提示</div><div class="admonitionContent_S0QG"><p>尝试升级到 K3s 新版本时，<a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes 版本倾斜策略</a>适用。确保你的计划在升级时不会跳过中间次要版本。system-upgrade-controller 本身不会防止更改到不支持的 Kubernetes 版本。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用安装脚本升级-k3s">使用安装脚本升级 K3s<a href="#使用安装脚本升级-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要升级旧版本的 K3s，你可以使用最初运行安装脚本时使用的相同配置选项重新运行安装脚本。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>安装脚本使用 <code>INSTALL_K3S_EXEC</code> 变量、<code>K3S_</code> 变量和尾随的 shell 参数来生成 systemd 单元和环境文件。
+<div role="region" aria-label="跳到主要内容"><a class="skipToContent_fXgn" href="#__docusaurus_skipToContent_fallback">跳到主要内容</a></div><nav aria-label="主导航" class="navbar navbar--fixed-top"><div class="navbar__inner"><div class="navbar__items"><button aria-label="Toggle navigation bar" aria-expanded="false" class="navbar__toggle clean-btn" type="button"><svg width="30" height="30" viewBox="0 0 30 30" aria-hidden="true"><path stroke="currentColor" stroke-linecap="round" stroke-miterlimit="10" stroke-width="2" d="M4 7h22M4 15h22M4 23h22"></path></svg></button><a class="navbar__brand" href="/zh/"><div class="navbar__logo"><img src="/zh/img/k3s-logo-light.svg" alt="logo" class="themedImage_ToTc themedImage--light_HNdA"><img src="/zh/img/k3s-logo-dark.svg" alt="logo" class="themedImage_ToTc themedImage--dark_i4oU"></div><b class="navbar__title text--truncate"></b></a></div><div class="navbar__items navbar__items--right"><div class="searchBox_ZlJk"><div class="navbar__search searchBarContainer_NW3z"><input placeholder="搜索" aria-label="Search" class="navbar__search-input"><div class="loadingRing_RJI3 searchBarLoadingRing_YnHq"><div></div><div></div><div></div><div></div></div></div></div><div class="navbar__item dropdown dropdown--hoverable dropdown--right"><a href="#" aria-haspopup="true" aria-expanded="false" role="button" class="navbar__link"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true" class="iconLanguage_nlXk"><path fill="currentColor" d="M12.87 15.07l-2.54-2.51.03-.03c1.74-1.94 2.98-4.17 3.71-6.53H17V4h-7V2H8v2H1v1.99h11.17C11.5 7.92 10.44 9.75 9 11.35 8.07 10.32 7.3 9.19 6.69 8h-2c.73 1.63 1.73 3.17 2.98 4.56l-5.09 5.02L4 19l5-5 3.11 3.11.76-2.04zM18.5 10h-2L12 22h2l1.12-3h4.75L21 22h2l-4.5-12zm-2.62 7l1.62-4.33L19.12 17h-3.24z"></path></svg>简体中文</a><ul class="dropdown__menu"><li><a href="/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="en">English</a></li><li><a href="/zh/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link dropdown__link--active" lang="zh">简体中文</a></li><li><a href="/kr/upgrades/manual" target="_self" rel="noopener noreferrer" class="dropdown__link" lang="kr">한국어</a></li></ul></div><a href="https://github.com/k3s-io/k3s/" target="_blank" rel="noopener noreferrer" class="navbar__item navbar__link navbar__github btn">GitHub</a><div class="toggle_vylO colorModeToggle_DEke"><button class="clean-btn toggleButton_gllP toggleButtonDisabled_aARS" type="button" disabled="" title="切换浅色/暗黑模式（当前为浅色模式）" aria-label="切换浅色/暗黑模式（当前为浅色模式）" aria-live="polite"><svg viewBox="0 0 24 24" width="24" height="24" class="lightToggleIcon_pyhR"><path fill="currentColor" d="M12,9c1.65,0,3,1.35,3,3s-1.35,3-3,3s-3-1.35-3-3S10.35,9,12,9 M12,7c-2.76,0-5,2.24-5,5s2.24,5,5,5s5-2.24,5-5 S14.76,7,12,7L12,7z M2,13l2,0c0.55,0,1-0.45,1-1s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S1.45,13,2,13z M20,13l2,0c0.55,0,1-0.45,1-1 s-0.45-1-1-1l-2,0c-0.55,0-1,0.45-1,1S19.45,13,20,13z M11,2v2c0,0.55,0.45,1,1,1s1-0.45,1-1V2c0-0.55-0.45-1-1-1S11,1.45,11,2z M11,20v2c0,0.55,0.45,1,1,1s1-0.45,1-1v-2c0-0.55-0.45-1-1-1C11.45,19,11,19.45,11,20z M5.99,4.58c-0.39-0.39-1.03-0.39-1.41,0 c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0s0.39-1.03,0-1.41L5.99,4.58z M18.36,16.95 c-0.39-0.39-1.03-0.39-1.41,0c-0.39,0.39-0.39,1.03,0,1.41l1.06,1.06c0.39,0.39,1.03,0.39,1.41,0c0.39-0.39,0.39-1.03,0-1.41 L18.36,16.95z M19.42,5.99c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06c-0.39,0.39-0.39,1.03,0,1.41 s1.03,0.39,1.41,0L19.42,5.99z M7.05,18.36c0.39-0.39,0.39-1.03,0-1.41c-0.39-0.39-1.03-0.39-1.41,0l-1.06,1.06 c-0.39,0.39-0.39,1.03,0,1.41s1.03,0.39,1.41,0L7.05,18.36z"></path></svg><svg viewBox="0 0 24 24" width="24" height="24" class="darkToggleIcon_wfgR"><path fill="currentColor" d="M9.37,5.51C9.19,6.15,9.1,6.82,9.1,7.5c0,4.08,3.32,7.4,7.4,7.4c0.68,0,1.35-0.09,1.99-0.27C17.45,17.19,14.93,19,12,19 c-3.86,0-7-3.14-7-7C5,9.07,6.81,6.55,9.37,5.51z M12,3c-4.97,0-9,4.03-9,9s4.03,9,9,9s9-4.03,9-9c0-0.46-0.04-0.92-0.1-1.36 c-0.98,1.37-2.58,2.26-4.4,2.26c-2.98,0-5.4-2.42-5.4-5.4c0-1.81,0.89-3.42,2.26-4.4C12.92,3.04,12.46,3,12,3L12,3z"></path></svg></button></div></div></div><div role="presentation" class="navbar-sidebar__backdrop"></div></nav><div id="__docusaurus_skipToContent_fallback" class="main-wrapper mainWrapper_z2l0 docsWrapper_BCFX"><button aria-label="回到顶部" class="clean-btn theme-back-to-top-button backToTopButton_sjWU" type="button"></button><div class="docPage__5DB"><aside class="theme-doc-sidebar-container docSidebarContainer_b6E3"><div class="sidebarViewport_Xe31"><div class="sidebar_njMd"><nav aria-label="文档侧边栏" class="menu thin-scrollbar menu_SIkG"><ul class="theme-doc-sidebar-menu menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/">K3s - 轻量级 Kubernetes</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/architecture">架构</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/quick-start">快速入门指南</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/installation">安装</a><button aria-label="打开/收起侧边栏菜单「安装」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/datastore">集群数据存储</a><button aria-label="打开/收起侧边栏菜单「集群数据存储」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/cluster-access">集群访问</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist menu__link--active" aria-expanded="true" href="/zh/upgrades">升级</a><button aria-label="打开/收起侧边栏菜单「升级」" type="button" class="clean-btn menu__caret"></button></div><ul style="display:block;overflow:visible;height:auto" class="menu__list"><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/killall">停止 K3s</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link menu__link--active" aria-current="page" tabindex="0" href="/zh/upgrades/manual">手动升级</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-2 menu__list-item"><a class="menu__link" tabindex="0" href="/zh/upgrades/automated">自动升级</a></li></ul></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/storage">卷和存储</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/networking">网络</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/helm">Helm</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/advanced">高级选项和配置</a></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/faq">常见问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/cli">CLI 工具</a><button aria-label="打开/收起侧边栏菜单「CLI 工具」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/reference">参考</a><button aria-label="打开/收起侧边栏菜单「参考」" type="button" class="clean-btn menu__caret"></button></div></li><li class="theme-doc-sidebar-item-link theme-doc-sidebar-item-link-level-1 menu__list-item"><a class="menu__link" href="/zh/known-issues">已知问题</a></li><li class="theme-doc-sidebar-item-category theme-doc-sidebar-item-category-level-1 menu__list-item menu__list-item--collapsed"><div class="menu__list-item-collapsible"><a class="menu__link menu__link--sublist" aria-expanded="false" href="/zh/security">安全</a><button aria-label="打开/收起侧边栏菜单「安全」" type="button" class="clean-btn menu__caret"></button></div></li></ul></nav></div></div></aside><main class="docMainContainer_gTbr"><div class="container padding-top--md padding-bottom--lg"><div class="row"><div class="col docItemCol_VOVn"><div class="docItemContainer_Djhp"><article><nav class="theme-doc-breadcrumbs breadcrumbsContainer_Z_bl" aria-label="页面路径"><ul class="breadcrumbs" itemscope="" itemtype="https://schema.org/BreadcrumbList"><li class="breadcrumbs__item"><a aria-label="主页面" class="breadcrumbs__link" href="/zh/"><svg viewBox="0 0 24 24" class="breadcrumbHomeIcon_YNFT"><path d="M10 19v-5h4v5c0 .55.45 1 1 1h3c.55 0 1-.45 1-1v-7h1.7c.46 0 .68-.57.33-.87L12.67 3.6c-.38-.34-.96-.34-1.34 0l-8.36 7.53c-.34.3-.13.87.33.87H5v7c0 .55.45 1 1 1h3c.55 0 1-.45 1-1z" fill="currentColor"></path></svg></a></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item"><a class="breadcrumbs__link" itemprop="item" href="/zh/upgrades"><span itemprop="name">升级</span></a><meta itemprop="position" content="1"></li><li itemscope="" itemprop="itemListElement" itemtype="https://schema.org/ListItem" class="breadcrumbs__item breadcrumbs__item--active"><span class="breadcrumbs__link" itemprop="name">手动升级</span><meta itemprop="position" content="2"></li></ul></nav><div class="tocCollapsible_ETCw theme-doc-toc-mobile tocMobile_ITEo"><button type="button" class="clean-btn tocCollapsibleButton_TO0P">本页总览</button></div><div class="theme-doc-markdown markdown"><header><h1>手动升级</h1></header><p>你可以使用安装脚本升级 K3s，也可以手动安装所需版本的二进制文件。</p><div class="theme-admonition theme-admonition-note alert alert--secondary admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M6.3 5.69a.942.942 0 0 1-.28-.7c0-.28.09-.52.28-.7.19-.18.42-.28.7-.28.28 0 .52.09.7.28.18.19.28.42.28.7 0 .28-.09.52-.28.7a1 1 0 0 1-.7.3c-.28 0-.52-.11-.7-.3zM8 7.99c-.02-.25-.11-.48-.31-.69-.2-.19-.42-.3-.69-.31H6c-.27.02-.48.13-.69.31-.2.2-.3.44-.31.69h1v3c.02.27.11.5.31.69.2.2.42.31.69.31h1c.27 0 .48-.11.69-.31.2-.19.3-.42.31-.69H8V7.98v.01zM7 2.3c-3.14 0-5.7 2.54-5.7 5.68 0 3.14 2.56 5.7 5.7 5.7s5.7-2.55 5.7-5.7c0-3.15-2.56-5.69-5.7-5.69v.01zM7 .98c3.86 0 7 3.14 7 7s-3.14 7-7 7-7-3.12-7-7 3.14-7 7-7z"></path></svg></span>备注</div><div class="admonitionContent_S0QG"><p>升级时会先升级 Server 节点，然后再升级 Agent 节点。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="版本-channels">版本 Channels<a href="#版本-channels" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>通过安装脚本或使用我们的<a href="/zh/upgrades/automated">自动升级</a>功能执行的升级可以绑定到不同的版本 channels。以下是可用的 channels：</p><table><thead><tr><th>Channel</th><th>描述</th></tr></thead><tbody><tr><td>stable</td><td>（默认）生产环境建议使用稳定版。这些版本已经过一段时间的社区强化。</td></tr><tr><td>latest</td><td>建议使用最新版本来试用最新功能。这些版本已经过一段时间的社区强化。</td></tr><tr><td>v1.26（示例）</td><td>每个 Kubernetes 次要版本都有一个 release channel，包括 EOL 的版本。这些 channel 会选择可用的最新补丁，不一定是稳定版本。</td></tr></tbody></table><p>有关详细的最新 channel 列表，你可以访问 <a href="https://update.k3s.io/v1-release/channels" target="_blank" rel="noopener noreferrer">k3s channel 服务 API</a>。有关 channel 如何工作的更多信息，请参阅 <a href="https://github.com/rancher/channelserver" target="_blank" rel="noopener noreferrer">channelserver 项目</a>。</p><div class="theme-admonition theme-admonition-tip alert alert--success admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 12 16"><path fill-rule="evenodd" d="M6.5 0C3.48 0 1 2.19 1 5c0 .92.55 2.25 1 3 1.34 2.25 1.78 2.78 2 4v1h5v-1c.22-1.22.66-1.75 2-4 .45-.75 1-2.08 1-3 0-2.81-2.48-5-5.5-5zm3.64 7.48c-.25.44-.47.8-.67 1.11-.86 1.41-1.25 2.06-1.45 3.23-.02.05-.02.11-.02.17H5c0-.06 0-.13-.02-.17-.2-1.17-.59-1.83-1.45-3.23-.2-.31-.42-.67-.67-1.11C2.44 6.78 2 5.65 2 5c0-2.2 2.02-4 4.5-4 1.22 0 2.36.42 3.22 1.19C10.55 2.94 11 3.94 11 5c0 .66-.44 1.78-.86 2.48zM4 14h5c-.23 1.14-1.3 2-2.5 2s-2.27-.86-2.5-2z"></path></svg></span>提示</div><div class="admonitionContent_S0QG"><p>尝试升级到 K3s 新版本时，<a href="https://kubernetes.io/docs/setup/release/version-skew-policy/" target="_blank" rel="noopener noreferrer">Kubernetes 版本倾斜策略</a>适用。确保你的计划在升级时不会跳过中间次要版本。system-upgrade-controller 本身不会防止更改到不支持的 Kubernetes 版本。</p></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用安装脚本升级-k3s">使用安装脚本升级 K3s<a href="#使用安装脚本升级-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>要升级旧版本的 K3s，你可以使用最初运行安装脚本时使用的相同配置选项重新运行安装脚本。</p><div class="theme-admonition theme-admonition-info alert alert--info admonition_LlT9"><div class="admonitionHeading_tbUL"><span class="admonitionIcon_kALy"><svg viewBox="0 0 14 16"><path fill-rule="evenodd" d="M7 2.3c3.14 0 5.7 2.56 5.7 5.7s-2.56 5.7-5.7 5.7A5.71 5.71 0 0 1 1.3 8c0-3.14 2.56-5.7 5.7-5.7zM7 1C3.14 1 0 4.14 0 8s3.14 7 7 7 7-3.14 7-7-3.14-7-7-7zm1 3H6v5h2V4zm0 6H6v2h2v-2z"></path></svg></span>信息</div><div class="admonitionContent_S0QG"><p>安装脚本使用 <code>INSTALL_K3S_EXEC</code> 变量、<code>K3S_</code> 变量和尾随的 shell 参数来生成 systemd 单元和环境文件。
 如果你在最初运行安装脚本时进行了配置，但在重新运行安装脚本时没有重新设置，则原始值将会丢失。</p><p><a href="/zh/installation/configuration#%E9%85%8D%E7%BD%AE%E6%96%87%E4%BB%B6">配置文件</a> 的内容不受安装脚本管理。
-要让你的配置独立于安装脚本，请使用配置文件而不是传递环境变量或使用安装脚本参数。</p></div></div><p>例如，要升级到当前的稳定版本：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果想升级到特定 channel（如 latest）中的更新版本，你可以指定 channel：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果要升级到特定版本，可以运行以下命令：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用二进制文件手动升级-k3s">使用二进制文件手动升级 K3s<a href="#使用二进制文件手动升级-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>或者手动升级 K3s：</p><ol><li>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> 页面下载所需版本的 K3s 二进制文件</li><li>将下载的二进制文件复制到 <code>/usr/local/bin/k3s</code>（或你想要的位置）</li><li>停止旧的 K3s 二进制文件</li><li>启动新的 K3s 二进制文件</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="重启-k3s">重启 K3s<a href="#重启-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>systemd 和 OpenRC 的安装脚本支持重启 K3s。</p><p><strong>systemd</strong></p><p>手动重启 Server：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>手动重启 Agent：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s-agent</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>OpenRC</strong></p><p>手动重启 Server：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>手动重启 Agent：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s-agent restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-01T16:10:53.000Z">2023年8月1日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades/killall"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">停止 K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades/automated"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">自动升级</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#版本-channels" class="table-of-contents__link toc-highlight">版本 Channels</a></li><li><a href="#使用安装脚本升级-k3s" class="table-of-contents__link toc-highlight">使用安装脚本升级 K3s</a></li><li><a href="#使用二进制文件手动升级-k3s" class="table-of-contents__link toc-highlight">使用二进制文件手动升级 K3s</a></li><li><a href="#重启-k3s" class="table-of-contents__link toc-highlight">重启 K3s</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
+要让你的配置独立于安装脚本，请使用配置文件而不是传递环境变量或使用安装脚本参数。</p></div></div><p>例如，要升级到当前的稳定版本：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果想升级到特定 channel（如 latest）中的更新版本，你可以指定 channel：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_CHANNEL=latest &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>如果要升级到特定版本，可以运行以下命令：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">curl -sfL https://get.k3s.io | INSTALL_K3S_VERSION=vX.Y.Z-rc1 &lt;EXISTING_K3S_ENV&gt; sh -s - &lt;EXISTING_K3S_ARGS&gt;</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><h3 class="anchor anchorWithStickyNavbar_LWe7" id="使用二进制文件手动升级-k3s">使用二进制文件手动升级 K3s<a href="#使用二进制文件手动升级-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>或者手动升级 K3s：</p><ol><li>从 <a href="https://github.com/k3s-io/k3s/releases" target="_blank" rel="noopener noreferrer">releases</a> 页面下载所需版本的 K3s 二进制文件</li><li>将下载的二进制文件复制到 <code>/usr/local/bin/k3s</code>（或你想要的位置）</li><li>停止旧的 K3s 二进制文件</li><li>启动新的 K3s 二进制文件</li></ol><h3 class="anchor anchorWithStickyNavbar_LWe7" id="重启-k3s">重启 K3s<a href="#重启-k3s" class="hash-link" aria-label="标题的直接链接" title="标题的直接链接">​</a></h3><p>systemd 和 OpenRC 的安装脚本支持重启 K3s。</p><p><strong>systemd</strong></p><p>手动重启 Server：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>手动重启 Agent：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo systemctl restart k3s-agent</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p><strong>OpenRC</strong></p><p>手动重启 Server：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div><p>手动重启 Agent：</p><div class="language-sh codeBlockContainer_Ckt0 theme-code-block" style="--prism-color:#bfc7d5;--prism-background-color:#292d3e"><div class="codeBlockContent_biex"><pre tabindex="0" class="prism-code language-sh codeBlock_bY9V thin-scrollbar"><code class="codeBlockLines_e6Vv"><span class="token-line" style="color:#bfc7d5"><span class="token plain">sudo service k3s-agent restart</span><br></span></code></pre><div class="buttonGroup__atx"><button type="button" aria-label="复制代码到剪贴板" title="复制" class="clean-btn"><span class="copyButtonIcons_eSgA" aria-hidden="true"><svg viewBox="0 0 24 24" class="copyButtonIcon_y97N"><path fill="currentColor" d="M19,21H8V7H19M19,5H8A2,2 0 0,0 6,7V21A2,2 0 0,0 8,23H19A2,2 0 0,0 21,21V7A2,2 0 0,0 19,5M16,1H4A2,2 0 0,0 2,3V17H4V3H16V1Z"></path></svg><svg viewBox="0 0 24 24" class="copyButtonSuccessIcon_LjdS"><path fill="currentColor" d="M21,7L9,19L3.5,13.5L4.91,12.09L9,16.17L19.59,5.59L21,7Z"></path></svg></span></button></div></div></div></div><footer class="theme-doc-footer docusaurus-mt-lg"><div class="theme-doc-footer-edit-meta-row row"><div class="col"><a href="https://github.com/k3s-io/docs/edit/main/docs/upgrades/manual.md" target="_blank" rel="noreferrer noopener" class="theme-edit-this-page"><svg fill="currentColor" height="20" width="20" viewBox="0 0 40 40" class="iconEdit_Z9Sw" aria-hidden="true"><g><path d="m34.5 11.7l-3 3.1-6.3-6.3 3.1-3q0.5-0.5 1.2-0.5t1.1 0.5l3.9 3.9q0.5 0.4 0.5 1.1t-0.5 1.2z m-29.5 17.1l18.4-18.5 6.3 6.3-18.4 18.4h-6.3v-6.2z"></path></g></svg>编辑此页</a></div><div class="col lastUpdated_vwxv"><span class="theme-last-updated">最后<!-- -->于 <b><time datetime="2023-08-03T21:03:22.000Z">2023年8月3日</time></b> <!-- -->更新</span></div></div></footer></article><nav class="pagination-nav docusaurus-mt-lg" aria-label="文档分页导航"><a class="pagination-nav__link pagination-nav__link--prev" href="/zh/upgrades/killall"><div class="pagination-nav__sublabel">上一页</div><div class="pagination-nav__label">停止 K3s</div></a><a class="pagination-nav__link pagination-nav__link--next" href="/zh/upgrades/automated"><div class="pagination-nav__sublabel">下一页</div><div class="pagination-nav__label">自动升级</div></a></nav></div></div><div class="col col--3"><div class="tableOfContents_bqdL thin-scrollbar theme-doc-toc-desktop"><ul class="table-of-contents table-of-contents__left-border"><li><a href="#版本-channels" class="table-of-contents__link toc-highlight">版本 Channels</a></li><li><a href="#使用安装脚本升级-k3s" class="table-of-contents__link toc-highlight">使用安装脚本升级 K3s</a></li><li><a href="#使用二进制文件手动升级-k3s" class="table-of-contents__link toc-highlight">使用二进制文件手动升级 K3s</a></li><li><a href="#重启-k3s" class="table-of-contents__link toc-highlight">重启 K3s</a></li></ul></div></div></div></div></main></div></div><footer class="footer footer--dark"><div class="container container-fluid"><div class="footer__bottom text--center"><div class="footer__copyright">Copyright © 2022 K3s Project Authors. All rights reserved. <br>The Linux Foundation has registered trademarks
       and uses trademarks. For a list of trademarks of The Linux Foundation, 
       please see our <a href="https://www.linuxfoundation.org/trademark-usage"> Trademark Usage</a> page.</div></div></div></footer></div>
-<script src="/zh/assets/js/runtime~main.354551a6.js"></script>
-<script src="/zh/assets/js/main.cd1c03e6.js"></script>
+<script src="/zh/assets/js/runtime~main.98237139.js"></script>
+<script src="/zh/assets/js/main.a0e9ca28.js"></script>
 </body>
 </html>
\ No newline at end of file